things-api 0.17.0 → 0.18.0

package/dist/deputy/routing.js

@@ -0,0 +1,338 @@
+/**
+ * Deputy routing: decides ONCE per process whether privileged primitives (SQL
+ * reads, osascript, container file reads) go through the things-deputy broker
+ * or run direct exactly as they always have.
+ *
+ * Mode resolution (highest wins): the CLI `--helpers/--no-helpers` flag (which
+ * writes THINGS_API_HELPERS before any load) → THINGS_API_HELPERS env → stored
+ * `helpers-enabled` config → default `auto`. Direct execution is the contract's
+ * ground truth; the helpers are an alternative transport for the same
+ * primitives.
+ *
+ * The tri-state (docs/design/agent-daemon.md §3c):
+ *
+ * | mode    | helper absent            | installed, unhealthy | installed, healthy |
+ * |---------|--------------------------|----------------------|--------------------|
+ * | `auto`  | direct, SILENT           | direct, LOUD         | routed             |
+ * | `true`  | direct, LOUD             | direct, LOUD         | routed             |
+ * | `false` | direct, silent           | direct, silent       | direct, silent     |
+ *
+ * Under `auto` installation IS the intent signal, so absence is not a
+ * degradation to report (a fresh machine must not nag) while an installed
+ * helper that cannot serve is — silence there would hide the very consent churn
+ * the helpers exist to end.
+ *
+ * Fallback is decided at ACTIVATION, never mid-operation: if a helper is
+ * expected but unreachable (or speaks a different protocol), the whole process
+ * runs direct with one stderr notice — a half-routed operation is worse than
+ * an honestly direct one. A helper that dies mid-request surfaces as that
+ * request's error; it is never silently retried on the other path.
+ */
+import { execFileSync } from "node:child_process";
+import { existsSync, readFileSync } from "node:fs";
+import { loadConfig } from "../config.js";
+import { DeputySyncBridge } from "./bridge.js";
+import { DeputyAsyncClient } from "./client.js";
+import { emitHelpersNotice, resetHelpersNoticeForTests } from "./notice.js";
+import { DEPUTY_LAUNCHD_LABEL, DEPUTY_PROTOCOL_VERSION, DeputyRequestError, deputyInstalledBinaryPath, deputySocketPath, deputyTokenPath, EXPECTED_HELPERS_VERSION, readerInstalledAppPath, readerSocketPath, readerTokenPath, } from "./protocol.js";
+let state = null;
+let readerState = null;
+/** Test seam: forget the per-process activation memo (and close transports). */
+export function resetDeputyRoutingForTests() {
+    if (state?.active === true) {
+        state.bridge.close();
+        state.client.close();
+    }
+    readerState?.bridge?.close();
+    state = null;
+    readerState = null;
+    resetHelpersNoticeForTests();
+}
+/**
+ * Report a degradation — but only when the mode asks to hear about it. Under
+ * `auto` an ABSENT helper is an ordinary machine, not a fault: `loud` is false
+ * there and the process just runs direct.
+ */
+function notice(loud, message) {
+    if (loud)
+        emitHelpersNotice(message);
+}
+function syncSleep(ms) {
+    Atomics.wait(new Int32Array(new SharedArrayBuffer(4)), 0, 0, ms);
+}
+function hello(bridge, token) {
+    const res = bridge.request({ v: DEPUTY_PROTOCOL_VERSION, token, verb: "hello" }, 2000);
+    if (res["ok"] !== true) {
+        const err = res["error"];
+        throw new DeputyRequestError(err?.code ?? "internal", err?.message ?? "handshake refused");
+    }
+    return res;
+}
+/**
+ * Version-skew policy: a PROTOCOL mismatch always deactivates (the shapes on
+ * the wire cannot be trusted). The helpers are versioned on their own line
+ * (EXPECTED_HELPERS_VERSION, decoupled from the package version so unchanged
+ * helpers never nag across package releases); a helpers-version mismatch on
+ * matching protocol gets one automatic `launchctl kickstart` (the installed
+ * bundle may already be newer on disk — the daily npm-link reality), then
+ * proceeds with a notice: the helpers' verbs are dumb primitives, so
+ * cross-version execution is safe by construction as long as the protocol
+ * matches.
+ */
+function reconcileVersions(bridge, token, first) {
+    if (first.deputyVersion === EXPECTED_HELPERS_VERSION)
+        return first;
+    try {
+        execFileSync("launchctl", ["kickstart", "-k", `gui/${process.getuid?.() ?? 501}/${DEPUTY_LAUNCHD_LABEL}`], 
+        // Clears the helpers' drain bound: kickstart -k waits for the old
+        // process, which finishes an in-flight request before exiting.
+        { stdio: "ignore", timeout: 30_000 });
+    }
+    catch {
+        // Not installed under launchd (foreground/test deputy) — nothing to restart.
+        notice(true, `installed helpers are v${first.deputyVersion}, this package expects v${EXPECTED_HELPERS_VERSION} (same protocol) — proceeding; rebuild with \`bash scripts/build-helpers.sh\` + \`things helpers install\` to align`);
+        return first;
+    }
+    for (let attempt = 0; attempt < 8; attempt++) {
+        syncSleep(250);
+        try {
+            const fresh = hello(bridge, token);
+            if (fresh.deputyVersion === EXPECTED_HELPERS_VERSION)
+                return fresh;
+        }
+        catch {
+            // Restart still in flight — keep waiting out the bounded window.
+        }
+    }
+    const current = hello(bridge, token);
+    notice(true, `installed helpers are v${current.deputyVersion}, this package expects v${EXPECTED_HELPERS_VERSION} (same protocol) — proceeding; rebuild with \`bash scripts/build-helpers.sh\` + \`things helpers install\` to align`);
+    return current;
+}
+/**
+ * Is a helper half INSTALLED on this machine? Installation is what separates
+ * "this host does not use the helpers" (silent under `auto`) from "the helper
+ * this host installed cannot serve" (always loud). The installed bundle on disk
+ * is the durable signal — a stopped launchd job leaves no socket but the bundle
+ * stays put.
+ */
+function halfInstalled(path, socketPath, tokenPath) {
+    return existsSync(path) || (existsSync(socketPath) && existsSync(tokenPath));
+}
+function activate(env) {
+    const mode = loadConfig(env).helpersMode;
+    if (mode === "false")
+        return { active: false, reason: "disabled", hello: null };
+    const socketPath = deputySocketPath(env);
+    const tokenPath = deputyTokenPath(env);
+    const installed = halfInstalled(deputyInstalledBinaryPath(env), socketPath, tokenPath);
+    // `auto` + nothing installed = an ordinary un-onboarded machine, not a fault.
+    const loud = mode === "true" || installed;
+    if (!existsSync(socketPath) || !existsSync(tokenPath)) {
+        notice(loud, `${installed
+            ? `installed but not running (no socket at ${socketPath})`
+            : "not installed on this machine"} — running DIRECT, so TCC prompts attach to this process. \`things helpers ${installed ? "status` to inspect" : "install` to change that"}.`);
+        return {
+            active: false,
+            reason: installed
+                ? `deputy not running (no socket at ${socketPath})`
+                : "deputy not installed",
+            hello: null,
+        };
+    }
+    const token = readFileSync(tokenPath, "utf8").trim();
+    const bridge = new DeputySyncBridge(socketPath);
+    let helloResult;
+    try {
+        helloResult = reconcileVersions(bridge, token, hello(bridge, token));
+    }
+    catch (err) {
+        bridge.close();
+        const why = err instanceof Error ? err.message : String(err);
+        // A socket that will not handshake is a broken helper under EVERY non-off
+        // mode — never silent, whatever the mode says about absence.
+        notice(true, `the handshake failed (${why}) — running DIRECT. \`things helpers restart\`, then \`things helpers status\` to inspect.`);
+        return { active: false, reason: `handshake failed: ${why}`, hello: null };
+    }
+    if (helloResult.protocol !== DEPUTY_PROTOCOL_VERSION) {
+        bridge.close();
+        notice(true, `the deputy speaks protocol ${helloResult.protocol}, this package speaks ${DEPUTY_PROTOCOL_VERSION} — running DIRECT. Rebuild with \`bash scripts/build-helpers.sh\` + \`things helpers install\`.`);
+        return {
+            active: false,
+            reason: `protocol skew (deputy ${helloResult.protocol}, library ${DEPUTY_PROTOCOL_VERSION})`,
+            hello: null,
+        };
+    }
+    return {
+        active: true,
+        reason: null,
+        hello: helloResult,
+        token,
+        bridge,
+        client: new DeputyAsyncClient(socketPath),
+    };
+}
+/** The per-process routing decision (activated lazily on first ask). */
+export function deputyRouting(env = process.env) {
+    state ??= activate(env);
+    return state;
+}
+function activeState(env) {
+    const routing = deputyRouting(env);
+    return routing.active ? state : null;
+}
+function readerInactive(reason) {
+    return { active: false, granted: false, hello: null, token: "", bridge: null, reason };
+}
+function activateReader(env) {
+    const mode = loadConfig(env).helpersMode;
+    if (mode === "false")
+        return readerInactive("disabled");
+    const socketPath = readerSocketPath(env);
+    const tokenPath = readerTokenPath(env);
+    const installed = halfInstalled(readerInstalledAppPath(env), socketPath, tokenPath);
+    if (!existsSync(socketPath) || !existsSync(tokenPath)) {
+        // Absence is silent under `auto`; under `true` the caller asserted routing.
+        // An UNGRANTED reader is deliberately NOT noticed here — that is the
+        // ceremony's own state, reported by `things helpers status` and doctor.
+        notice(mode === "true" || installed, installed
+            ? `the reader is installed but not running (no socket at ${socketPath}) — database reads run DIRECT. \`things helpers status\` to inspect.`
+            : "the reader is not installed on this machine — database reads run DIRECT. `things helpers install` to change that.");
+        return readerInactive(installed ? `reader not running (no socket at ${socketPath})` : "reader not installed");
+    }
+    const token = readFileSync(tokenPath, "utf8").trim();
+    const bridge = new DeputySyncBridge(socketPath);
+    try {
+        const res = bridge.request({ v: DEPUTY_PROTOCOL_VERSION, token, verb: "hello" }, 2000);
+        if (res["ok"] !== true)
+            throw new DeputyRequestError("handshake", JSON.stringify(res["error"]));
+        const readerHello = res;
+        if (readerHello.protocol !== DEPUTY_PROTOCOL_VERSION) {
+            bridge.close();
+            notice(true, `the reader speaks protocol ${readerHello.protocol}, this package speaks ${DEPUTY_PROTOCOL_VERSION} — database reads run DIRECT. Rebuild with \`bash scripts/build-helpers.sh\` + \`things helpers install\`.`);
+            return readerInactive(`protocol skew (reader ${readerHello.protocol})`);
+        }
+        return {
+            active: true,
+            granted: readerHello.granted === true,
+            hello: readerHello,
+            token,
+            bridge,
+            reason: null,
+        };
+    }
+    catch (err) {
+        bridge.close();
+        const why = err instanceof Error ? err.message : String(err);
+        notice(true, `the reader handshake failed (${why}) — database reads run DIRECT. \`things helpers restart\`, then \`things helpers status\` to inspect.`);
+        return readerInactive(`reader handshake failed: ${why}`);
+    }
+}
+/** The reader transport's state (activated lazily; test seam via reset). */
+export function readerRouting(env = process.env) {
+    readerState ??= activateReader(env);
+    return readerState;
+}
+/**
+ * The transport serving FILE verbs (sql / read-file / locate): the sandboxed
+ * reader when present AND granted, else null (direct local access). ONLY the
+ * reader — the deputy is mutations-only by design (the maintainer's ruling
+ * 2026-08-21: no multi-step fallback chains; its container access would ride
+ * the per-process consent class this pair exists to end). A reader that dies
+ * mid-request errors that request honestly, never a silent transport switch.
+ */
+function fileTransport(env) {
+    const reader = readerRouting(env);
+    if (reader.active && reader.granted) {
+        const rs = readerState;
+        return { bridge: rs.bridge, token: rs.token };
+    }
+    return null;
+}
+export function helpersRouting(env = process.env) {
+    const mode = loadConfig(env).helpersMode;
+    const deputy = deputyRouting(env);
+    const reader = readerRouting(env);
+    const files = deputyFilesActive(env);
+    return {
+        mode,
+        automation: deputy.active,
+        files,
+        deputyReason: deputy.reason,
+        readerReason: files
+            ? null
+            : reader.active && !reader.granted
+                ? "reader running but NOT granted (things helpers grant)"
+                : reader.reason,
+    };
+}
+/** True when file verbs ride the reader (present, protocol-matched, granted). */
+export function deputyFilesActive(env = process.env) {
+    return fileTransport(env) !== null;
+}
+/** Blocking FILE-verb round-trip via the granted reader. */
+export function fileSyncRequest(fields, timeoutMs, env = process.env) {
+    const transport = fileTransport(env);
+    if (transport === null) {
+        throw new DeputyRequestError("inactive", "the reader is not active");
+    }
+    return unwrap(transport.bridge.request({ v: DEPUTY_PROTOCOL_VERSION, token: transport.token, ...fields }, timeoutMs));
+}
+/** Unwrap a protocol response: return it on ok, throw DeputyRequestError otherwise. */
+function unwrap(res) {
+    if (res["ok"] === true)
+        return res;
+    const err = res["error"];
+    throw new DeputyRequestError(err?.code ?? "internal", err?.message ?? "deputy refused the request");
+}
+/** Blocking round-trip via the bridge (facade + sync probes only). */
+export function deputySyncRequest(fields, timeoutMs, env = process.env) {
+    const active = activeState(env);
+    if (active === null)
+        throw new DeputyRequestError("inactive", "deputy routing is not active");
+    return unwrap(active.bridge.request({ v: DEPUTY_PROTOCOL_VERSION, token: active.token, ...fields }, timeoutMs));
+}
+/** Event-loop-friendly round-trip (vector dispatch). */
+export async function deputyAsyncRequest(fields, timeoutMs, env = process.env) {
+    const active = activeState(env);
+    if (active === null)
+        throw new DeputyRequestError("inactive", "deputy routing is not active");
+    return unwrap(await active.client.request({ v: DEPUTY_PROTOCOL_VERSION, token: active.token, ...fields }, timeoutMs));
+}
+/**
+ * The reader-resolved container database path, or null when no granted reader
+ * is active (the caller then locates locally, exactly as before the helpers
+ * existed). The reader's scope is grant-checked, never prompted — a locate
+ * through it can refuse but can never stall on a consent dialog.
+ */
+export function deputyDbPath(env = process.env) {
+    const reader = readerRouting(env);
+    if (!reader.active || !reader.granted)
+        return null;
+    if (reader.hello?.dbPath != null)
+        return reader.hello.dbPath;
+    const rs = readerState;
+    if (rs.dbPathMemo !== undefined)
+        return rs.dbPathMemo;
+    try {
+        const res = fileSyncRequest({ verb: "locate" }, 10_000, env);
+        rs.dbPathMemo = typeof res["path"] === "string" ? res["path"] : null;
+    }
+    catch (err) {
+        rs.dbPathMemo = null;
+        const why = err instanceof Error ? err.message : String(err);
+        emitHelpersNotice(`the reader could not resolve the database (${why}) — this read runs DIRECT`);
+    }
+    return rs.dbPathMemo;
+}
+/**
+ * Should DATABASE access route through the deputy? Only for the default
+ * container database: an explicit dbPath option or THINGS_DB env names a
+ * caller-chosen file (lab clones, fixtures) the deputy knows nothing about —
+ * those always open locally, deputy or no deputy.
+ */
+export function deputyRoutesDb(options, env = process.env) {
+    if (options?.dbPath !== undefined || (env["THINGS_DB"] ?? "") !== "")
+        return false;
+    return deputyFilesActive(env);
+}
+//# sourceMappingURL=routing.js.map

package/dist/deputy/routing.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"routing.js","sourceRoot":"","sources":["../../src/deputy/routing.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6BG;AACH,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AAEnD,OAAO,EAAoB,UAAU,EAAE,MAAM,cAAc,CAAC;AAC5D,OAAO,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAC;AAC/C,OAAO,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAC;AAChD,OAAO,EAAE,iBAAiB,EAAE,0BAA0B,EAAE,MAAM,aAAa,CAAC;AAC5E,OAAO,EACL,oBAAoB,EACpB,uBAAuB,EAEvB,kBAAkB,EAClB,yBAAyB,EACzB,gBAAgB,EAChB,eAAe,EACf,wBAAwB,EAExB,sBAAsB,EACtB,gBAAgB,EAChB,eAAe,GAChB,MAAM,eAAe,CAAC;AA8CvB,IAAI,KAAK,GAAwB,IAAI,CAAC;AACtC,IAAI,WAAW,GAAuB,IAAI,CAAC;AAE3C,gFAAgF;AAChF,MAAM,UAAU,0BAA0B;IACxC,IAAI,KAAK,EAAE,MAAM,KAAK,IAAI,EAAE,CAAC;QAC3B,KAAK,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC;QACrB,KAAK,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC;IACvB,CAAC;IACD,WAAW,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC;IAC7B,KAAK,GAAG,IAAI,CAAC;IACb,WAAW,GAAG,IAAI,CAAC;IACnB,0BAA0B,EAAE,CAAC;AAC/B,CAAC;AAED;;;;GAIG;AACH,SAAS,MAAM,CAAC,IAAa,EAAE,OAAe;IAC5C,IAAI,IAAI;QAAE,iBAAiB,CAAC,OAAO,CAAC,CAAC;AACvC,CAAC;AAED,SAAS,SAAS,CAAC,EAAU;IAC3B,OAAO,CAAC,IAAI,CAAC,IAAI,UAAU,CAAC,IAAI,iBAAiB,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC;AACnE,CAAC;AAED,SAAS,KAAK,CAAC,MAAwB,EAAE,KAAa;IACpD,MAAM,GAAG,GAAG,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC,EAAE,uBAAuB,EAAE,KAAK,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,IAAI,CAAC,CAAC;IACvF,IAAI,GAAG,CAAC,IAAI,CAAC,KAAK,IAAI,EAAE,CAAC;QACvB,MAAM,GAAG,GAAG,GAAG,CAAC,OAAO,CAAoD,CAAC;QAC5E,MAAM,IAAI,kBAAkB,CAAC,GAAG,EAAE,IAAI,IAAI,UAAU,EAAE,GAAG,EAAE,OAAO,IAAI,mBAAmB,CAAC,CAAC;IAC7F,CAAC;IACD,OAAO,GAA6B,CAAC;AACvC,CAAC;AAED;;;;;;;;;;GAUG;AACH,SAAS,iBAAiB,CACxB,MAAwB,EACxB,KAAa,EACb,KAAkB;IAElB,IAAI,KAAK,CAAC,aAAa,KAAK,wBAAwB;QAAE,OAAO,KAAK,CAAC;IACnE,IAAI,CAAC;QACH,YAAY,CACV,WAAW,EACX,CAAC,WAAW,EAAE,IAAI,EAAE,OAAO,OAAO,CAAC,MAAM,EAAE,EAAE,IAAI,GAAG,IAAI,oBAAoB,EAAE,CAAC;QAC/E,kEAAkE;QAClE,+DAA+D;QAC/D,EAAE,KAAK,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,EAAE,CACrC,CAAC;IACJ,CAAC;IAAC,MAAM,CAAC;QACP,6EAA6E;QAC7E,MAAM,CACJ,IAAI,EACJ,0BAA0B,KAAK,CAAC,aAAa,2BAA2B,wBAAwB,qHAAqH,CACtN,CAAC;QACF,OAAO,KAAK,CAAC;IACf,CAAC;IACD,KAAK,IAAI,OAAO,GAAG,CAAC,EAAE,OAAO,GAAG,CAAC,EAAE,OAAO,EAAE,EAAE,CAAC;QAC7C,SAAS,CAAC,GAAG,CAAC,CAAC;QACf,IAAI,CAAC;YACH,MAAM,KAAK,GAAG,KAAK,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;YACnC,IAAI,KAAK,CAAC,aAAa,KAAK,wBAAwB;gBAAE,OAAO,KAAK,CAAC;QACrE,CAAC;QAAC,MAAM,CAAC;YACP,iEAAiE;QACnE,CAAC;IACH,CAAC;IACD,MAAM,OAAO,GAAG,KAAK,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;IACrC,MAAM,CACJ,IAAI,EACJ,0BAA0B,OAAO,CAAC,aAAa,2BAA2B,wBAAwB,qHAAqH,CACxN,CAAC;IACF,OAAO,OAAO,CAAC;AACjB,CAAC;AAED;;;;;;GAMG;AACH,SAAS,aAAa,CAAC,IAAY,EAAE,UAAkB,EAAE,SAAiB;IACxE,OAAO,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,IAAI,UAAU,CAAC,SAAS,CAAC,CAAC,CAAC;AAC/E,CAAC;AAED,SAAS,QAAQ,CAAC,GAAsB;IACtC,MAAM,IAAI,GAAgB,UAAU,CAAC,GAAG,CAAC,CAAC,WAAW,CAAC;IACtD,IAAI,IAAI,KAAK,OAAO;QAAE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,UAAU,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;IAEhF,MAAM,UAAU,GAAG,gBAAgB,CAAC,GAAG,CAAC,CAAC;IACzC,MAAM,SAAS,GAAG,eAAe,CAAC,GAAG,CAAC,CAAC;IACvC,MAAM,SAAS,GAAG,aAAa,CAAC,yBAAyB,CAAC,GAAG,CAAC,EAAE,UAAU,EAAE,SAAS,CAAC,CAAC;IACvF,8EAA8E;IAC9E,MAAM,IAAI,GAAG,IAAI,KAAK,MAAM,IAAI,SAAS,CAAC;IAC1C,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;QACtD,MAAM,CACJ,IAAI,EACJ,GACE,SAAS;YACP,CAAC,CAAC,2CAA2C,UAAU,GAAG;YAC1D,CAAC,CAAC,+BACN,8EACE,SAAS,CAAC,CAAC,CAAC,oBAAoB,CAAC,CAAC,CAAC,yBACrC,GAAG,CACJ,CAAC;QACF,OAAO;YACL,MAAM,EAAE,KAAK;YACb,MAAM,EAAE,SAAS;gBACf,CAAC,CAAC,oCAAoC,UAAU,GAAG;gBACnD,CAAC,CAAC,sBAAsB;YAC1B,KAAK,EAAE,IAAI;SACZ,CAAC;IACJ,CAAC;IACD,MAAM,KAAK,GAAG,YAAY,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC;IACrD,MAAM,MAAM,GAAG,IAAI,gBAAgB,CAAC,UAAU,CAAC,CAAC;IAChD,IAAI,WAAwB,CAAC;IAC7B,IAAI,CAAC;QACH,WAAW,GAAG,iBAAiB,CAAC,MAAM,EAAE,KAAK,EAAE,KAAK,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC,CAAC;IACvE,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,CAAC,KAAK,EAAE,CAAC;QACf,MAAM,GAAG,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAC7D,0EAA0E;QAC1E,6DAA6D;QAC7D,MAAM,CACJ,IAAI,EACJ,yBAAyB,GAAG,4FAA4F,CACzH,CAAC;QACF,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,qBAAqB,GAAG,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;IAC5E,CAAC;IACD,IAAI,WAAW,CAAC,QAAQ,KAAK,uBAAuB,EAAE,CAAC;QACrD,MAAM,CAAC,KAAK,EAAE,CAAC;QACf,MAAM,CACJ,IAAI,EACJ,8BAA8B,WAAW,CAAC,QAAQ,yBAAyB,uBAAuB,iGAAiG,CACpM,CAAC;QACF,OAAO;YACL,MAAM,EAAE,KAAK;YACb,MAAM,EAAE,yBAAyB,WAAW,CAAC,QAAQ,aAAa,uBAAuB,GAAG;YAC5F,KAAK,EAAE,IAAI;SACZ,CAAC;IACJ,CAAC;IACD,OAAO;QACL,MAAM,EAAE,IAAI;QACZ,MAAM,EAAE,IAAI;QACZ,KAAK,EAAE,WAAW;QAClB,KAAK;QACL,MAAM;QACN,MAAM,EAAE,IAAI,iBAAiB,CAAC,UAAU,CAAC;KAC1C,CAAC;AACJ,CAAC;AAED,wEAAwE;AACxE,MAAM,UAAU,aAAa,CAAC,MAAyB,OAAO,CAAC,GAAG;IAChE,KAAK,KAAK,QAAQ,CAAC,GAAG,CAAC,CAAC;IACxB,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,WAAW,CAAC,GAAsB;IACzC,MAAM,OAAO,GAAG,aAAa,CAAC,GAAG,CAAC,CAAC;IACnC,OAAO,OAAO,CAAC,MAAM,CAAC,CAAC,CAAE,KAAqB,CAAC,CAAC,CAAC,IAAI,CAAC;AACxD,CAAC;AAED,SAAS,cAAc,CAAC,MAAc;IACpC,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;AACzF,CAAC;AAED,SAAS,cAAc,CAAC,GAAsB;IAC5C,MAAM,IAAI,GAAgB,UAAU,CAAC,GAAG,CAAC,CAAC,WAAW,CAAC;IACtD,IAAI,IAAI,KAAK,OAAO;QAAE,OAAO,cAAc,CAAC,UAAU,CAAC,CAAC;IACxD,MAAM,UAAU,GAAG,gBAAgB,CAAC,GAAG,CAAC,CAAC;IACzC,MAAM,SAAS,GAAG,eAAe,CAAC,GAAG,CAAC,CAAC;IACvC,MAAM,SAAS,GAAG,aAAa,CAAC,sBAAsB,CAAC,GAAG,CAAC,EAAE,UAAU,EAAE,SAAS,CAAC,CAAC;IACpF,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;QACtD,4EAA4E;QAC5E,qEAAqE;QACrE,wEAAwE;QACxE,MAAM,CACJ,IAAI,KAAK,MAAM,IAAI,SAAS,EAC5B,SAAS;YACP,CAAC,CAAC,yDAAyD,UAAU,sEAAsE;YAC3I,CAAC,CAAC,mHAAmH,CACxH,CAAC;QACF,OAAO,cAAc,CACnB,SAAS,CAAC,CAAC,CAAC,oCAAoC,UAAU,GAAG,CAAC,CAAC,CAAC,sBAAsB,CACvF,CAAC;IACJ,CAAC;IACD,MAAM,KAAK,GAAG,YAAY,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC;IACrD,MAAM,MAAM,GAAG,IAAI,gBAAgB,CAAC,UAAU,CAAC,CAAC;IAChD,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC,EAAE,uBAAuB,EAAE,KAAK,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,IAAI,CAAC,CAAC;QACvF,IAAI,GAAG,CAAC,IAAI,CAAC,KAAK,IAAI;YAAE,MAAM,IAAI,kBAAkB,CAAC,WAAW,EAAE,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;QAChG,MAAM,WAAW,GAAG,GAA6B,CAAC;QAClD,IAAI,WAAW,CAAC,QAAQ,KAAK,uBAAuB,EAAE,CAAC;YACrD,MAAM,CAAC,KAAK,EAAE,CAAC;YACf,MAAM,CACJ,IAAI,EACJ,8BAA8B,WAAW,CAAC,QAAQ,yBAAyB,uBAAuB,4GAA4G,CAC/M,CAAC;YACF,OAAO,cAAc,CAAC,yBAAyB,WAAW,CAAC,QAAQ,GAAG,CAAC,CAAC;QAC1E,CAAC;QACD,OAAO;YACL,MAAM,EAAE,IAAI;YACZ,OAAO,EAAE,WAAW,CAAC,OAAO,KAAK,IAAI;YACrC,KAAK,EAAE,WAAW;YAClB,KAAK;YACL,MAAM;YACN,MAAM,EAAE,IAAI;SACb,CAAC;IACJ,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,CAAC,KAAK,EAAE,CAAC;QACf,MAAM,GAAG,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAC7D,MAAM,CACJ,IAAI,EACJ,gCAAgC,GAAG,uGAAuG,CAC3I,CAAC;QACF,OAAO,cAAc,CAAC,4BAA4B,GAAG,EAAE,CAAC,CAAC;IAC3D,CAAC;AACH,CAAC;AAED,4EAA4E;AAC5E,MAAM,UAAU,aAAa,CAAC,MAAyB,OAAO,CAAC,GAAG;IAMhE,WAAW,KAAK,cAAc,CAAC,GAAG,CAAC,CAAC;IACpC,OAAO,WAAW,CAAC;AACrB,CAAC;AAED;;;;;;;GAOG;AACH,SAAS,aAAa,CAAC,GAAsB;IAC3C,MAAM,MAAM,GAAG,aAAa,CAAC,GAAG,CAAC,CAAC;IAClC,IAAI,MAAM,CAAC,MAAM,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;QACpC,MAAM,EAAE,GAAG,WAA0B,CAAC;QACtC,OAAO,EAAE,MAAM,EAAE,EAAE,CAAC,MAA0B,EAAE,KAAK,EAAE,EAAE,CAAC,KAAK,EAAE,CAAC;IACpE,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAoBD,MAAM,UAAU,cAAc,CAAC,MAAyB,OAAO,CAAC,GAAG;IACjE,MAAM,IAAI,GAAG,UAAU,CAAC,GAAG,CAAC,CAAC,WAAW,CAAC;IACzC,MAAM,MAAM,GAAG,aAAa,CAAC,GAAG,CAAC,CAAC;IAClC,MAAM,MAAM,GAAG,aAAa,CAAC,GAAG,CAAC,CAAC;IAClC,MAAM,KAAK,GAAG,iBAAiB,CAAC,GAAG,CAAC,CAAC;IACrC,OAAO;QACL,IAAI;QACJ,UAAU,EAAE,MAAM,CAAC,MAAM;QACzB,KAAK;QACL,YAAY,EAAE,MAAM,CAAC,MAAM;QAC3B,YAAY,EAAE,KAAK;YACjB,CAAC,CAAC,IAAI;YACN,CAAC,CAAC,MAAM,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,OAAO;gBAChC,CAAC,CAAC,uDAAuD;gBACzD,CAAC,CAAC,MAAM,CAAC,MAAM;KACpB,CAAC;AACJ,CAAC;AAED,iFAAiF;AACjF,MAAM,UAAU,iBAAiB,CAAC,MAAyB,OAAO,CAAC,GAAG;IACpE,OAAO,aAAa,CAAC,GAAG,CAAC,KAAK,IAAI,CAAC;AACrC,CAAC;AAED,4DAA4D;AAC5D,MAAM,UAAU,eAAe,CAC7B,MAA+B,EAC/B,SAAiB,EACjB,MAAyB,OAAO,CAAC,GAAG;IAEpC,MAAM,SAAS,GAAG,aAAa,CAAC,GAAG,CAAC,CAAC;IACrC,IAAI,SAAS,KAAK,IAAI,EAAE,CAAC;QACvB,MAAM,IAAI,kBAAkB,CAAC,UAAU,EAAE,0BAA0B,CAAC,CAAC;IACvE,CAAC;IACD,OAAO,MAAM,CACX,SAAS,CAAC,MAAM,CAAC,OAAO,CACtB,EAAE,CAAC,EAAE,uBAAuB,EAAE,KAAK,EAAE,SAAS,CAAC,KAAK,EAAE,GAAG,MAAM,EAAE,EACjE,SAAS,CACV,CACF,CAAC;AACJ,CAAC;AAED,uFAAuF;AACvF,SAAS,MAAM,CAAC,GAA4B;IAC1C,IAAI,GAAG,CAAC,IAAI,CAAC,KAAK,IAAI;QAAE,OAAO,GAAG,CAAC;IACnC,MAAM,GAAG,GAAG,GAAG,CAAC,OAAO,CAAoD,CAAC;IAC5E,MAAM,IAAI,kBAAkB,CAC1B,GAAG,EAAE,IAAI,IAAI,UAAU,EACvB,GAAG,EAAE,OAAO,IAAI,4BAA4B,CAC7C,CAAC;AACJ,CAAC;AAED,sEAAsE;AACtE,MAAM,UAAU,iBAAiB,CAC/B,MAA+B,EAC/B,SAAiB,EACjB,MAAyB,OAAO,CAAC,GAAG;IAEpC,MAAM,MAAM,GAAG,WAAW,CAAC,GAAG,CAAC,CAAC;IAChC,IAAI,MAAM,KAAK,IAAI;QAAE,MAAM,IAAI,kBAAkB,CAAC,UAAU,EAAE,8BAA8B,CAAC,CAAC;IAC9F,OAAO,MAAM,CACX,MAAM,CAAC,MAAM,CAAC,OAAO,CACnB,EAAE,CAAC,EAAE,uBAAuB,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,GAAG,MAAM,EAAE,EAC9D,SAAS,CACV,CACF,CAAC;AACJ,CAAC;AAED,wDAAwD;AACxD,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACtC,MAA+B,EAC/B,SAAiB,EACjB,MAAyB,OAAO,CAAC,GAAG;IAEpC,MAAM,MAAM,GAAG,WAAW,CAAC,GAAG,CAAC,CAAC;IAChC,IAAI,MAAM,KAAK,IAAI;QAAE,MAAM,IAAI,kBAAkB,CAAC,UAAU,EAAE,8BAA8B,CAAC,CAAC;IAC9F,OAAO,MAAM,CACX,MAAM,MAAM,CAAC,MAAM,CAAC,OAAO,CACzB,EAAE,CAAC,EAAE,uBAAuB,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,GAAG,MAAM,EAAE,EAC9D,SAAS,CACV,CACF,CAAC;AACJ,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,YAAY,CAAC,MAAyB,OAAO,CAAC,GAAG;IAC/D,MAAM,MAAM,GAAG,aAAa,CAAC,GAAG,CAAC,CAAC;IAClC,IAAI,CAAC,MAAM,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,OAAO;QAAE,OAAO,IAAI,CAAC;IACnD,IAAI,MAAM,CAAC,KAAK,EAAE,MAAM,IAAI,IAAI;QAAE,OAAO,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC;IAC7D,MAAM,EAAE,GAAG,WAA0B,CAAC;IACtC,IAAI,EAAE,CAAC,UAAU,KAAK,SAAS;QAAE,OAAO,EAAE,CAAC,UAAU,CAAC;IACtD,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,eAAe,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,MAAM,EAAE,GAAG,CAAC,CAAC;QAC7D,EAAE,CAAC,UAAU,GAAG,OAAO,GAAG,CAAC,MAAM,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IACvE,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,EAAE,CAAC,UAAU,GAAG,IAAI,CAAC;QACrB,MAAM,GAAG,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAC7D,iBAAiB,CAAC,8CAA8C,GAAG,2BAA2B,CAAC,CAAC;IAClG,CAAC;IACD,OAAO,EAAE,CAAC,UAAU,CAAC;AACvB,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,cAAc,CAC5B,OAAwC,EACxC,MAAyB,OAAO,CAAC,GAAG;IAEpC,IAAI,OAAO,EAAE,MAAM,KAAK,SAAS,IAAI,CAAC,GAAG,CAAC,WAAW,CAAC,IAAI,EAAE,CAAC,KAAK,EAAE;QAAE,OAAO,KAAK,CAAC;IACnF,OAAO,iBAAiB,CAAC,GAAG,CAAC,CAAC;AAChC,CAAC"}

package/dist/deputy/shortcuts-exec.d.ts

@@ -0,0 +1,10 @@
+export interface ShortcutsRunResult {
+    exitCode: number;
+    stdout: string;
+    stderr: string;
+    timedOut?: boolean;
+}
+/** `shortcuts run <name> --input-path … --output-path …` (the write vector's shape). */
+export declare function shortcutsRunExec(name: string, inputPath: string, outputPath: string, timeoutMs: number): Promise<ShortcutsRunResult>;
+/** `shortcuts list` (availability's proxy census). Returns stdout; throws on failure. */
+export declare function shortcutsListSync(timeoutMs?: number): string;

package/dist/deputy/shortcuts-exec.js

@@ -0,0 +1,50 @@
+/**
+ * The Apple Shortcuts execution seam — the `shortcuts` CLI twin of osa.ts.
+ * Both call sites (the shortcuts write vector's `run`, availability's `list`)
+ * route through the deputy when it is active, so every app-automation surface
+ * shares the deputy's one stable identity; direct mode is byte-identical to
+ * the pre-deputy behavior. The deputy only accepts this library's bundled
+ * `things-proxy-*` shortcut names — it is a paired tool, not a general
+ * shortcut runner.
+ */
+import { execFile, execFileSync } from "node:child_process";
+import {} from "./protocol.js";
+import { deputyAsyncRequest, deputyRouting, deputySyncRequest } from "./routing.js";
+/** Deputy-side kill fires at timeoutMs; the client deadline adds grace so the deputy's honest answer wins. */
+const CLIENT_GRACE_MS = 5000;
+/** `shortcuts run <name> --input-path … --output-path …` (the write vector's shape). */
+export async function shortcutsRunExec(name, inputPath, outputPath, timeoutMs) {
+    if (deputyRouting().active) {
+        const res = (await deputyAsyncRequest({ verb: "shortcuts", op: "run", name, inputPath, outputPath, timeoutMs }, timeoutMs + CLIENT_GRACE_MS));
+        return {
+            exitCode: res.timedOut === true && res.exitCode === 0 ? 1 : res.exitCode,
+            stdout: res.stdout,
+            stderr: res.stderr,
+            ...(res.timedOut === true && { timedOut: true }),
+        };
+    }
+    return new Promise((resolve) => {
+        execFile("shortcuts", ["run", name, "--input-path", inputPath, "--output-path", outputPath], { timeout: timeoutMs }, (err, stdout, stderr) => {
+            // A deadline kill (err.killed) is the signature of an unanswered
+            // first-run consent dialog — surfaced distinctly for attribution.
+            const timedOut = err !== null && err.killed === true;
+            resolve({
+                exitCode: err === null ? 0 : (err.code ?? 1),
+                stdout: String(stdout),
+                stderr: String(stderr),
+                ...(timedOut && { timedOut: true }),
+            });
+        });
+    });
+}
+/** `shortcuts list` (availability's proxy census). Returns stdout; throws on failure. */
+export function shortcutsListSync(timeoutMs = 10_000) {
+    if (!deputyRouting().active) {
+        return execFileSync("shortcuts", ["list"], { encoding: "utf8", timeout: timeoutMs });
+    }
+    const res = deputySyncRequest({ verb: "shortcuts", op: "list", timeoutMs }, timeoutMs + CLIENT_GRACE_MS);
+    if (res.exitCode === 0 && res.timedOut !== true)
+        return res.stdout;
+    throw new Error(`Command failed: shortcuts list\n${res.stderr}`);
+}
+//# sourceMappingURL=shortcuts-exec.js.map

package/dist/deputy/shortcuts-exec.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"shortcuts-exec.js","sourceRoot":"","sources":["../../src/deputy/shortcuts-exec.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AACH,OAAO,EAAE,QAAQ,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAE5D,OAAO,EAAwB,MAAM,eAAe,CAAC;AACrD,OAAO,EAAE,kBAAkB,EAAE,aAAa,EAAE,iBAAiB,EAAE,MAAM,cAAc,CAAC;AAEpF,8GAA8G;AAC9G,MAAM,eAAe,GAAG,IAAI,CAAC;AAS7B,wFAAwF;AACxF,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,IAAY,EACZ,SAAiB,EACjB,UAAkB,EAClB,SAAiB;IAEjB,IAAI,aAAa,EAAE,CAAC,MAAM,EAAE,CAAC;QAC3B,MAAM,GAAG,GAAG,CAAC,MAAM,kBAAkB,CACnC,EAAE,IAAI,EAAE,WAAW,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,SAAS,EAAE,UAAU,EAAE,SAAS,EAAE,EACxE,SAAS,GAAG,eAAe,CAC5B,CAA+B,CAAC;QACjC,OAAO;YACL,QAAQ,EAAE,GAAG,CAAC,QAAQ,KAAK,IAAI,IAAI,GAAG,CAAC,QAAQ,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,QAAQ;YACxE,MAAM,EAAE,GAAG,CAAC,MAAM;YAClB,MAAM,EAAE,GAAG,CAAC,MAAM;YAClB,GAAG,CAAC,GAAG,CAAC,QAAQ,KAAK,IAAI,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;SACjD,CAAC;IACJ,CAAC;IACD,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;QAC7B,QAAQ,CACN,WAAW,EACX,CAAC,KAAK,EAAE,IAAI,EAAE,cAAc,EAAE,SAAS,EAAE,eAAe,EAAE,UAAU,CAAC,EACrE,EAAE,OAAO,EAAE,SAAS,EAAE,EACtB,CAAC,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE,EAAE;YACtB,iEAAiE;YACjE,kEAAkE;YAClE,MAAM,QAAQ,GAAG,GAAG,KAAK,IAAI,IAAK,GAA4B,CAAC,MAAM,KAAK,IAAI,CAAC;YAC/E,OAAO,CAAC;gBACN,QAAQ,EAAE,GAAG,KAAK,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAE,GAAyB,CAAC,IAAI,IAAI,CAAC,CAAC;gBACnE,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC;gBACtB,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC;gBACtB,GAAG,CAAC,QAAQ,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;aACpC,CAAC,CAAC;QACL,CAAC,CACF,CAAC;IACJ,CAAC,CAAC,CAAC;AACL,CAAC;AAED,yFAAyF;AACzF,MAAM,UAAU,iBAAiB,CAAC,SAAS,GAAG,MAAM;IAClD,IAAI,CAAC,aAAa,EAAE,CAAC,MAAM,EAAE,CAAC;QAC5B,OAAO,YAAY,CAAC,WAAW,EAAE,CAAC,MAAM,CAAC,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,SAAS,EAAE,CAAC,CAAC;IACvF,CAAC;IACD,MAAM,GAAG,GAAG,iBAAiB,CAC3B,EAAE,IAAI,EAAE,WAAW,EAAE,EAAE,EAAE,MAAM,EAAE,SAAS,EAAE,EAC5C,SAAS,GAAG,eAAe,CACE,CAAC;IAChC,IAAI,GAAG,CAAC,QAAQ,KAAK,CAAC,IAAI,GAAG,CAAC,QAAQ,KAAK,IAAI;QAAE,OAAO,GAAG,CAAC,MAAM,CAAC;IACnE,MAAM,IAAI,KAAK,CAAC,mCAAmC,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC;AACnE,CAAC"}

package/dist/diagnose.d.ts

@@ -1,3 +1,6 @@
+import { type HelpersMode } from "./config.ts";
+import { type HelpersStatus } from "./deputy/install.ts";
+import { type HelpersRouting } from "./deputy/routing.ts";
 import { type AutomationProbeDeps, type AutomationProbeStatus } from "./write/automation-probe.ts";
 import { type AccessibilityProbeDeps, type AccessibilityProbeStatus } from "./write/accessibility-probe.ts";
 import { type CertificationStatus } from "./write/vectors/ui-certification.ts";
@@ -5,10 +8,35 @@ import { type AvailabilityDeps, type ShortcutsState, type UrlSchemeState } from
 import { type EnvironmentChange, type EnvironmentTracker, type EnvironmentTuple } from "./write/environment.ts";
 import { type SyncHealth, type SyncHealthDeps } from "./sync-health.ts";
 import { ExitCode, type EnvelopeMeta, type ErrorCode } from "./contracts.ts";
+/** The helper pair's section of the report — see {@link DiagnoseReport.helpers}. */
+export interface HelpersReport {
+    /** Configured routing mode (`helpers-enabled`): auto | true | false. */
+    mode: HelpersMode;
+    /** What that mode RESOLVED to in this process (per-half, with reasons). */
+    routing: HelpersRouting;
+    /** Installation + liveness + signing + grant, both halves. */
+    status: HelpersStatus;
+    /** The installed bundle's version, null when nothing is installed. */
+    installedVersion: string | null;
+    /** The version this package's protocol/library was built against. */
+    expectedVersion: string;
+    /** Installed but not the expected version — the remedy is a rebuild + reinstall. */
+    versionSkew: boolean;
+    /** Either half left a socket behind that no longer answers a handshake. */
+    hungSocket: boolean;
+    /** One line naming the fix, or null when there is nothing to fix. */
+    remedy: string | null;
+    detail: string;
+}
+/** Test seam for the helpers section (see {@link DiagnoseOptions.helpers}). */
+export interface HelpersReportDeps {
+    status?: HelpersStatus;
+    routing?: HelpersRouting;
+}
 export interface DiagnoseReport {
     db: {
         path: string;
-        source: "option" | "env" | "container";
+        source: "option" | "env" | "container" | "deputy";
         otherCandidates: string[];
         databaseVersion: number | null;
     };
@@ -128,6 +156,14 @@ export interface DiagnoseReport {
         orphanedIntents: number;
         newestOrphanIntent: string | null;
     };
+    /**
+     * The optional helper pair (docs/design/agent-daemon.md §3b–§3c): what
+     * routing is configured to do, what it actually resolved to in THIS process,
+     * and each half's installation/liveness/signing/grant state. Prompt-free —
+     * every field comes from the same probes `things helpers status` runs, so
+     * doctor never triggers a consent dialog of its own.
+     */
+    helpers: HelpersReport;
     /**
      * Freshness + sync-liveness proxies for long-running headless operation
      * (docs/lab/headless-research.md SYNC1 + SYNC2): app-running, WAL write
@@ -158,6 +194,12 @@ export interface DiagnoseOptions {
     availability?: AvailabilityDeps;
     /** Test seams for the sync-health section (clock, process check, WAL/plist readers). */
     syncHealth?: SyncHealthDeps;
+    /**
+     * Test seam for the helpers section. Without it the section probes the real
+     * machine (launchd, sockets, codesign) — honest for a diagnostic, useless for
+     * an assertion, since the host running the suite may have live helpers.
+     */
+    helpers?: HelpersReportDeps;
     /** Directory holding the audit JSONL files; defaults to the state dir. Test seam. */
     auditDir?: string;
 }

package/dist/diagnose.js

@@ -11,6 +11,10 @@ import { readAuditRecords, scanAuditIntegrity } from "./write/undo.js";
 import { decodeRecurrenceRule } from "./model/recurrence.js";
 import { BASELINES } from "./db/baselines/index.js";
 import { openConnection, ThingsDbOpenError } from "./db/connection.js";
+import { createDeputyDbFacade } from "./deputy/db-facade.js";
+import { helpersStatus } from "./deputy/install.js";
+import { EXPECTED_HELPERS_VERSION } from "./deputy/protocol.js";
+import { deputyDbPath, deputyRoutesDb, helpersRouting, } from "./deputy/routing.js";
 import { compareToBaseline, observeSchema } from "./db/fingerprint.js";
 import { locateThingsDb, ThingsDbNotFoundError } from "./db/locate.js";
 import { isThingsRunning, probeAutomation, } from "./write/automation-probe.js";
@@ -57,6 +61,52 @@ function scanRecurrenceRules(db) {
                 "templates are unavailable",
     };
 }
+function buildHelpersReport(configMode, deps = {}) {
+    // The routing resolution carries the mode it resolved (helpersRouting reads
+    // the same config), so the section has ONE source for it.
+    const routing = deps.routing ?? helpersRouting();
+    const mode = routing.mode;
+    const status = deps.status ?? helpersStatus(configMode);
+    const installedVersion = status.installedVersion;
+    const versionSkew = installedVersion !== null && installedVersion !== EXPECTED_HELPERS_VERSION;
+    const hungSocket = status.deputy.hungSocket || status.reader.hungSocket;
+    const remedy = versionSkew
+        ? "rebuild the bundle (`bash scripts/build-helpers.sh`) and rerun `things helpers install`"
+        : hungSocket
+            ? "`things helpers restart` — a socket is present but no handshake comes back"
+            : !status.bundleInstalled
+                ? mode === "false"
+                    ? null
+                    : "`things helpers install` to move macOS permission grants onto the helpers"
+                : status.reader.installed && status.reader.running && !status.reader.granted
+                    ? "`things helpers grant` once, at the machine, to give the reader durable read access"
+                    : status.bundleInstalled && !status.deputy.running
+                        ? "`things helpers install` (re-registers both helpers with launchd and starts them)"
+                        : null;
+    const detail = mode === "false"
+        ? "routing off — every primitive runs in this process (`things config set helpers-enabled auto` to use an installed helper)"
+        : routing.automation && routing.files
+            ? "both halves carrying traffic"
+            : !status.bundleInstalled
+                ? mode === "auto"
+                    ? "nothing installed — running direct, which is the normal state for a machine that has not onboarded the helpers"
+                    : "routing is set to true but nothing is installed — running direct"
+                : `running direct for ${[
+                    ...(routing.automation ? [] : [`automation (${routing.deputyReason ?? "unknown"})`]),
+                    ...(routing.files ? [] : [`database reads (${routing.readerReason ?? "unknown"})`]),
+                ].join(" and ")}`;
+    return {
+        mode,
+        routing,
+        status,
+        installedVersion,
+        expectedVersion: EXPECTED_HELPERS_VERSION,
+        versionSkew,
+        hungSocket,
+        remedy,
+        detail,
+    };
+}
 /**
  * Which bundled Apple Shortcuts proxies are installed — a standalone
  * environment accessor that needs no database (the shortcuts probe is a pure
@@ -67,9 +117,17 @@ export function shortcutProxies(deps = {}) {
     return readShortcutProxies(deps);
 }
 export function diagnose(dbPath, options = {}) {
+    // Mirror openThings: deputy-brokered database access for the default
+    // container db, local open for explicit paths (src/deputy/routing.ts).
+    const routedDbPath = deputyRoutesDb(dbPath !== undefined ? { dbPath } : undefined)
+        ? deputyDbPath()
+        : null;
     let located;
     try {
-        located = locateThingsDb(dbPath ? { dbPath } : undefined);
+        located =
+            routedDbPath !== null
+                ? { path: routedDbPath, source: "deputy", otherCandidates: [] }
+                : locateThingsDb(dbPath ? { dbPath } : undefined);
     }
     catch (err) {
         if (err instanceof ThingsDbNotFoundError) {
@@ -88,7 +146,10 @@ export function diagnose(dbPath, options = {}) {
     }
     let conn;
     try {
-        conn = openConnection(located.path);
+        conn =
+            routedDbPath !== null
+                ? { db: createDeputyDbFacade(), path: routedDbPath, close() { } }
+                : openConnection(located.path);
     }
     catch (err) {
         if (err instanceof ThingsDbOpenError) {
@@ -237,6 +298,7 @@ export function diagnose(dbPath, options = {}) {
                 shortcuts: readShortcutProxies(options.availability),
             },
             recurrence: scanRecurrenceRules(conn.db),
+            helpers: buildHelpersReport(config.helpersMode, options.helpers),
             syncHealth: computeSyncHealth(conn.db, located.path, options.syncHealth),
             audit: scanAuditIntegrity(readAuditRecords(options.auditDir ?? auditDir())),
         };

package/dist/diagnose.js.map

@@ -1 +1 @@
-{"version":3,"file":"diagnose.js","sourceRoot":"","sources":["../src/diagnose.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,OAAO,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AAErC,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAC;AAC/C,OAAO,EAAE,QAAQ,EAAE,MAAM,YAAY,CAAC;AACtC,OAAO,EAAE,gBAAgB,EAAE,kBAAkB,EAAE,MAAM,iBAAiB,CAAC;AACvE,OAAO,EAAE,oBAAoB,EAAE,MAAM,uBAAuB,CAAC;AAC7D,OAAO,EAAE,SAAS,EAAE,MAAM,yBAAyB,CAAC;AACpD,OAAO,EAAE,cAAc,EAAE,iBAAiB,EAAE,MAAM,oBAAoB,CAAC;AACvE,OAAO,EAAE,iBAAiB,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AACvE,OAAO,EAAE,cAAc,EAAE,qBAAqB,EAAE,MAAM,gBAAgB,CAAC;AACvE,OAAO,EACL,eAAe,EACf,eAAe,GAGhB,MAAM,6BAA6B,CAAC;AACrC,OAAO,EACL,kBAAkB,GAGnB,MAAM,gCAAgC,CAAC;AACxC,OAAO,EACL,iBAAiB,EACjB,wBAAwB,GAEzB,MAAM,qCAAqC,CAAC;AAC7C,OAAO,EACL,mBAAmB,EACnB,oBAAoB,GAIrB,MAAM,yBAAyB,CAAC;AACjC,OAAO,EACL,wBAAwB,EACxB,eAAe,GAIhB,MAAM,wBAAwB,CAAC;AAChC,OAAO,EAAE,0BAA0B,EAAE,MAAM,yBAAyB,CAAC;AACrE,OAAO,EAAE,iBAAiB,EAAwC,MAAM,kBAAkB,CAAC;AAC3F,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAqC,MAAM,gBAAgB,CAAC;AAE1F,MAAM,UAAU,GAAG,2BAA2B,CAAC;AAE/C,uEAAuE;AACvE,SAAS,mBAAmB,CAAC,EAE5B;IACC,IAAI,IAA4C,CAAC;IACjD,IAAI,CAAC;QACH,IAAI,GAAG,EAAE;aACN,OAAO,CACN,0FAA0F,CAC3F;aACA,GAAG,EAA4C,CAAC;IACrD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,SAAS,EAAE,CAAC,EAAE,WAAW,EAAE,CAAC,EAAE,MAAM,EAAE,gCAAgC,EAAE,CAAC;IACpF,CAAC;IACD,IAAI,WAAW,GAAG,CAAC,CAAC;IACpB,IAAI,UAAU,GAAG,EAAE,CAAC;IACpB,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;QACvB,IAAI,CAAC;YACH,oBAAoB,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACjC,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,WAAW,IAAI,CAAC,CAAC;YACjB,IAAI,UAAU,KAAK,EAAE;gBAAE,UAAU,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QACvF,CAAC;IACH,CAAC;IACD,OAAO;QACL,SAAS,EAAE,IAAI,CAAC,MAAM;QACtB,WAAW;QACX,MAAM,EACJ,WAAW,KAAK,CAAC;YACf,CAAC,CAAC,IAAI,CAAC,MAAM,KAAK,CAAC;gBACjB,CAAC,CAAC,wBAAwB;gBAC1B,CAAC,CAAC,yCAAyC;YAC7C,CAAC,CAAC,GAAG,WAAW,qCAAqC,UAAU,sBAAsB;gBACnF,4EAA4E;gBAC5E,2BAA2B;KAClC,CAAC;AACJ,CAAC;AAgKD;;;;;GAKG;AACH,MAAM,UAAU,eAAe,CAAC,OAAyB,EAAE;IACzD,OAAO,mBAAmB,CAAC,IAAI,CAAC,CAAC;AACnC,CAAC;AAED,MAAM,UAAU,QAAQ,CAAC,MAAe,EAAE,UAA2B,EAAE;IACrE,IAAI,OAA0C,CAAC;IAC/C,IAAI,CAAC;QACH,OAAO,GAAG,cAAc,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;IAC5D,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAI,GAAG,YAAY,qBAAqB,EAAE,CAAC;YACzC,OAAO;gBACL,MAAM,EAAE,IAAI;gBACZ,KAAK,EAAE;oBACL,IAAI,EAAE,aAAa;oBACnB,OAAO,EAAE,GAAG,CAAC,OAAO;oBACpB,WAAW,EAAE,wDAAwD;iBACtE;gBACD,QAAQ,EAAE,QAAQ,CAAC,WAAW;gBAC9B,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,WAAW,EAAE,SAAS,EAAE;aAClD,CAAC;QACJ,CAAC;QACD,MAAM,GAAG,CAAC;IACZ,CAAC;IAED,IAAI,IAAuC,CAAC;IAC5C,IAAI,CAAC;QACH,IAAI,GAAG,cAAc,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;IACtC,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAI,GAAG,YAAY,iBAAiB,EAAE,CAAC;YACrC,OAAO;gBACL,MAAM,EAAE,IAAI;gBACZ,KAAK,EAAE;oBACL,IAAI,EAAE,aAAa;oBACnB,OAAO,EAAE,GAAG,CAAC,OAAO;oBACpB,WAAW,EAAE,2DAA2D;iBACzE;gBACD,QAAQ,EAAE,QAAQ,CAAC,WAAW;gBAC9B,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,WAAW,EAAE,SAAS,EAAE;aAClD,CAAC;QACJ,CAAC;QACD,MAAM,GAAG,CAAC;IACZ,CAAC;IAED,IAAI,CAAC;QACH,MAAM,WAAW,GAAG,aAAa,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAC3C,MAAM,MAAM,GAAG,iBAAiB,CAAC,WAAW,EAAE,SAAS,CAAC,CAAC;QACzD,uEAAuE;QACvE,oEAAoE;QACpE,MAAM,MAAM,GAAG,UAAU,EAAE,CAAC;QAC5B,MAAM,QAAQ,GACZ,MAAM,CAAC,IAAI,KAAK,OAAO,IAAI,MAAM,CAAC,mBAAmB,KAAK,WAAW,CAAC,WAAW,CAAC;QACpF,MAAM,iBAAiB,GAAG,QAAQ;YAChC,CAAC,CAAC,eAAe;YACjB,CAAC,CAAC,MAAM,CAAC,IAAI,KAAK,IAAI;gBACpB,CAAC,CAAC,IAAI;gBACN,CAAC,CAAC,MAAM,CAAC,IAAI,KAAK,OAAO;oBACvB,CAAC,CAAC,OAAO;oBACT,CAAC,CAAC,iBAAiB,CAAC;QAC1B,MAAM,aAAa,GAAG,MAAM,CAAC,IAAI,KAAK,IAAI,IAAI,QAAQ,CAAC;QACvD,MAAM,UAAU,GAAG,0BAA0B,EAAE,CAAC;QAChD,MAAM,OAAO,GAAG,OAAO,CAAC,WAAW,IAAI,wBAAwB,CAAC,WAAW,CAAC,CAAC;QAC7E,MAAM,UAAU,GAAG,OAAO,CAAC,OAAO,EAAE,CAAC;QACrC,MAAM,WAAW,GAAG,OAAO,CAAC,IAAI,EAAE,CAAC;QACnC,MAAM,YAAY,GAA6B,EAAE,CAAC;QAClD,KAAK,MAAM,CAAC,IAAI,WAAW,CAAC,MAAM,EAAE,CAAC;YACnC,IAAI,CAAC,CAAC,YAAY,CAAC,MAAM,GAAG,CAAC;gBAAE,YAAY,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,YAAY,CAAC;QACxE,CAAC;QACD,4EAA4E;QAC5E,4EAA4E;QAC5E,4EAA4E;QAC5E,MAAM,WAAW,GAA4B,CAAC,GAAG,EAAE;YACjD,IAAI,MAAM,CAAC,KAAK,IAAI,IAAI,EAAE,CAAC;gBACzB,OAAO,EAAE,SAAS,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC;YAC/E,CAAC;YACD,IAAI,CAAC;gBACH,MAAM,CAAC,GAAG,YAAY,CAAC,IAAI,CAAC,EAAE,EAAE,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;gBACvE,OAAO;oBACL,SAAS,EAAE,MAAM,CAAC,KAAK,CAAC,GAAG;oBAC3B,MAAM,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM;oBAC3B,QAAQ,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE;oBACxD,MAAM,EAAE,aAAa,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,KAAK,cAAc,MAAM,CAAC,KAAK,CAAC,MAAM,GAAG;iBAC5E,CAAC;YACJ,CAAC;YAAC,MAAM,CAAC;gBACP,OAAO;oBACL,SAAS,EAAE,MAAM,CAAC,KAAK,CAAC,GAAG;oBAC3B,MAAM,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM;oBAC3B,QAAQ,EAAE,IAAI;oBACd,MAAM,EACJ,UAAU,MAAM,CAAC,KAAK,CAAC,GAAG,cAAc,MAAM,CAAC,KAAK,CAAC,MAAM,mBAAmB;wBAC9E,sFAAsF;iBACzF,CAAC;YACJ,CAAC;QACH,CAAC,CAAC,EAAE,CAAC;QACL,MAAM,MAAM,GAAmB;YAC7B,EAAE,EAAE;gBACF,IAAI,EAAE,OAAO,CAAC,IAAI;gBAClB,MAAM,EAAE,OAAO,CAAC,MAAM;gBACtB,eAAe,EAAE,OAAO,CAAC,eAAe;gBACxC,eAAe,EAAE,WAAW,CAAC,eAAe;aAC7C;YACD,WAAW,EAAE;gBACX,MAAM,EAAE,iBAAiB;gBACzB,KAAK,EAAE,WAAW,CAAC,WAAW;gBAC9B,QAAQ,EAAE,MAAM,CAAC,IAAI,KAAK,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI;gBAC1D,MAAM,EAAE,MAAM,CAAC,IAAI,KAAK,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE;gBACpD,YAAY;aACb;YACD,GAAG,EAAE;gBACH,SAAS,EAAE,UAAU,CAAC,UAAU,CAAC;gBACjC,OAAO,EAAE,UAAU,CAAC,aAAa;gBACjC,gBAAgB,EAAE,MAAM,CAAC,mBAAmB;gBAC5C,eAAe,EACb,UAAU,CAAC,aAAa,KAAK,IAAI;oBACjC,MAAM,CAAC,mBAAmB,KAAK,IAAI;oBACnC,UAAU,CAAC,aAAa,KAAK,MAAM,CAAC,mBAAmB;aAC1D;YACD,MAAM,EAAE;gBACN,OAAO,EAAE,aAAa;gBACtB,MAAM,EAAE,QAAQ;oBACd,CAAC,CAAC,8EAA8E;wBAC9E,gFAAgF;oBAClF,CAAC,CAAC,aAAa;wBACb,CAAC,CAAC,6CAA6C;wBAC/C,CAAC,CAAC,MAAM,CAAC,IAAI,KAAK,OAAO;4BACvB,CAAC,CAAC,+EAA+E;4BACjF,CAAC,CAAC,2DAA2D;aACpE;YACD,KAAK,EAAE,WAAW;YAClB,YAAY,EAAE;gBACZ,OAAO,EAAE,MAAM,CAAC,iBAAiB;gBACjC,mBAAmB,EAAE,UAAU;gBAC/B,MAAM,EAAE,CAAC,MAAM,CAAC,iBAAiB;oBAC/B,CAAC,CAAC,uFAAuF;oBACzF,CAAC,CAAC,UAAU;wBACV,CAAC,CAAC,6DAA6D;wBAC/D,CAAC,CAAC,iFAAiF;4BACjF,uDAAuD;aAC9D;YACD,WAAW,EAAE;gBACX,OAAO,EAAE,UAAU;gBACnB,iBAAiB,EAAE,WAAW;gBAC9B,OAAO,EAAE,eAAe,CAAC,WAAW,EAAE,UAAU,CAAC;aAClD;YACD,UAAU,EACR,OAAO,CAAC,eAAe,KAAK,IAAI;gBAC9B,CAAC,CAAC,eAAe,CAAC,OAAO,CAAC,SAAS,CAAC;gBACpC,CAAC,CAAC;oBACE,MAAM,EAAE,YAAY;oBACpB,MAAM,EACJ,2EAA2E;wBAC3E,mEAAmE;iBACtE;YACP,EAAE,EAAE;gBACF,OAAO,EAAE,MAAM,CAAC,EAAE,CAAC,OAAO;gBAC1B,UAAU,EAAE,eAAe,EAAE;gBAC7B,aAAa,EACX,OAAO,CAAC,kBAAkB,KAAK,IAAI;oBACjC,CAAC,CAAC,kBAAkB,CAAC,OAAO,CAAC,sBAAsB,CAAC;oBACpD,CAAC,CAAC;wBACE,MAAM,EAAE,YAAY;wBACpB,MAAM,EACJ,gFAAgF;4BAChF,+EAA+E;qBAClF;gBACP,oBAAoB,EAAE,wBAAwB;gBAC9C,aAAa,EAAE,iBAAiB,EAAE,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC,CAAC;oBACzD,EAAE;oBACF,MAAM,EAAE,KAAK,CAAC,MAAM;iBACrB,CAAC,CAAC;gBACH,MAAM,EAAE,MAAM,CAAC,EAAE,CAAC,OAAO;oBACvB,CAAC,CAAC,qFAAqF;wBACrF,uEAAuE;oBACzE,CAAC,CAAC,mFAAmF;wBACnF,4DAA4D;aACjE;YACD,YAAY,EAAE;gBACZ,SAAS,EAAE,oBAAoB,CAAC,OAAO,CAAC,YAAY,CAAC;gBACrD,SAAS,EAAE,mBAAmB,CAAC,OAAO,CAAC,YAAY,CAAC;aACrD;YACD,UAAU,EAAE,mBAAmB,CAAC,IAAI,CAAC,EAAE,CAAC;YACxC,UAAU,EAAE,iBAAiB,CAAC,IAAI,CAAC,EAAE,EAAE,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,UAAU,CAAC;YACxE,KAAK,EAAE,kBAAkB,CAAC,gBAAgB,CAAC,OAAO,CAAC,QAAQ,IAAI,QAAQ,EAAE,CAAC,CAAC;SAC5E,CAAC;QACF,OAAO;YACL,MAAM;YACN,KAAK,EAAE,IAAI;YACX,QAAQ,EAAE,aAAa,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,YAAY;YAC7D,IAAI,EAAE;gBACJ,SAAS,EAAE,WAAW,CAAC,eAAe;gBACtC,WAAW,EAAE,iBAAiB,KAAK,iBAAiB,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,iBAAiB;aACrF;SACF,CAAC;IACJ,CAAC;YAAS,CAAC;QACT,IAAI,CAAC,KAAK,EAAE,CAAC;IACf,CAAC;AACH,CAAC"}
+{"version":3,"file":"diagnose.js","sourceRoot":"","sources":["../src/diagnose.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,OAAO,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AAErC,OAAO,EAAoB,UAAU,EAAE,MAAM,aAAa,CAAC;AAC3D,OAAO,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAC;AAC/C,OAAO,EAAE,QAAQ,EAAE,MAAM,YAAY,CAAC;AACtC,OAAO,EAAE,gBAAgB,EAAE,kBAAkB,EAAE,MAAM,iBAAiB,CAAC;AACvE,OAAO,EAAE,oBAAoB,EAAE,MAAM,uBAAuB,CAAC;AAC7D,OAAO,EAAE,SAAS,EAAE,MAAM,yBAAyB,CAAC;AACpD,OAAO,EAAE,cAAc,EAAE,iBAAiB,EAAE,MAAM,oBAAoB,CAAC;AACvE,OAAO,EAAE,oBAAoB,EAAE,MAAM,uBAAuB,CAAC;AAC7D,OAAO,EAAE,aAAa,EAAsB,MAAM,qBAAqB,CAAC;AACxE,OAAO,EAAE,wBAAwB,EAAE,MAAM,sBAAsB,CAAC;AAChE,OAAO,EACL,YAAY,EACZ,cAAc,EACd,cAAc,GAEf,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EAAE,iBAAiB,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AACvE,OAAO,EAAE,cAAc,EAAE,qBAAqB,EAAE,MAAM,gBAAgB,CAAC;AACvE,OAAO,EACL,eAAe,EACf,eAAe,GAGhB,MAAM,6BAA6B,CAAC;AACrC,OAAO,EACL,kBAAkB,GAGnB,MAAM,gCAAgC,CAAC;AACxC,OAAO,EACL,iBAAiB,EACjB,wBAAwB,GAEzB,MAAM,qCAAqC,CAAC;AAC7C,OAAO,EACL,mBAAmB,EACnB,oBAAoB,GAIrB,MAAM,yBAAyB,CAAC;AACjC,OAAO,EACL,wBAAwB,EACxB,eAAe,GAIhB,MAAM,wBAAwB,CAAC;AAChC,OAAO,EAAE,0BAA0B,EAAE,MAAM,yBAAyB,CAAC;AACrE,OAAO,EAAE,iBAAiB,EAAwC,MAAM,kBAAkB,CAAC;AAC3F,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAqC,MAAM,gBAAgB,CAAC;AAE1F,MAAM,UAAU,GAAG,2BAA2B,CAAC;AAE/C,uEAAuE;AACvE,SAAS,mBAAmB,CAAC,EAE5B;IACC,IAAI,IAA4C,CAAC;IACjD,IAAI,CAAC;QACH,IAAI,GAAG,EAAE;aACN,OAAO,CACN,0FAA0F,CAC3F;aACA,GAAG,EAA4C,CAAC;IACrD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,SAAS,EAAE,CAAC,EAAE,WAAW,EAAE,CAAC,EAAE,MAAM,EAAE,gCAAgC,EAAE,CAAC;IACpF,CAAC;IACD,IAAI,WAAW,GAAG,CAAC,CAAC;IACpB,IAAI,UAAU,GAAG,EAAE,CAAC;IACpB,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;QACvB,IAAI,CAAC;YACH,oBAAoB,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACjC,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,WAAW,IAAI,CAAC,CAAC;YACjB,IAAI,UAAU,KAAK,EAAE;gBAAE,UAAU,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QACvF,CAAC;IACH,CAAC;IACD,OAAO;QACL,SAAS,EAAE,IAAI,CAAC,MAAM;QACtB,WAAW;QACX,MAAM,EACJ,WAAW,KAAK,CAAC;YACf,CAAC,CAAC,IAAI,CAAC,MAAM,KAAK,CAAC;gBACjB,CAAC,CAAC,wBAAwB;gBAC1B,CAAC,CAAC,yCAAyC;YAC7C,CAAC,CAAC,GAAG,WAAW,qCAAqC,UAAU,sBAAsB;gBACnF,4EAA4E;gBAC5E,2BAA2B;KAClC,CAAC;AACJ,CAAC;AA6BD,SAAS,kBAAkB,CAAC,UAAuB,EAAE,OAA0B,EAAE;IAC/E,4EAA4E;IAC5E,0DAA0D;IAC1D,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,IAAI,cAAc,EAAE,CAAC;IACjD,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC;IAC1B,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,IAAI,aAAa,CAAC,UAAU,CAAC,CAAC;IACxD,MAAM,gBAAgB,GAAG,MAAM,CAAC,gBAAgB,CAAC;IACjD,MAAM,WAAW,GAAG,gBAAgB,KAAK,IAAI,IAAI,gBAAgB,KAAK,wBAAwB,CAAC;IAC/F,MAAM,UAAU,GAAG,MAAM,CAAC,MAAM,CAAC,UAAU,IAAI,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC;IACxE,MAAM,MAAM,GAAG,WAAW;QACxB,CAAC,CAAC,yFAAyF;QAC3F,CAAC,CAAC,UAAU;YACV,CAAC,CAAC,4EAA4E;YAC9E,CAAC,CAAC,CAAC,MAAM,CAAC,eAAe;gBACvB,CAAC,CAAC,IAAI,KAAK,OAAO;oBAChB,CAAC,CAAC,IAAI;oBACN,CAAC,CAAC,2EAA2E;gBAC/E,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,SAAS,IAAI,MAAM,CAAC,MAAM,CAAC,OAAO,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,OAAO;oBAC1E,CAAC,CAAC,qFAAqF;oBACvF,CAAC,CAAC,MAAM,CAAC,eAAe,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,OAAO;wBAChD,CAAC,CAAC,mFAAmF;wBACrF,CAAC,CAAC,IAAI,CAAC;IACjB,MAAM,MAAM,GACV,IAAI,KAAK,OAAO;QACd,CAAC,CAAC,0HAA0H;QAC5H,CAAC,CAAC,OAAO,CAAC,UAAU,IAAI,OAAO,CAAC,KAAK;YACnC,CAAC,CAAC,8BAA8B;YAChC,CAAC,CAAC,CAAC,MAAM,CAAC,eAAe;gBACvB,CAAC,CAAC,IAAI,KAAK,MAAM;oBACf,CAAC,CAAC,gHAAgH;oBAClH,CAAC,CAAC,kEAAkE;gBACtE,CAAC,CAAC,sBAAsB;oBACpB,GAAG,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,eAAe,OAAO,CAAC,YAAY,IAAI,SAAS,GAAG,CAAC,CAAC;oBACpF,GAAG,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,mBAAmB,OAAO,CAAC,YAAY,IAAI,SAAS,GAAG,CAAC,CAAC;iBACpF,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;IAC5B,OAAO;QACL,IAAI;QACJ,OAAO;QACP,MAAM;QACN,gBAAgB;QAChB,eAAe,EAAE,wBAAwB;QACzC,WAAW;QACX,UAAU;QACV,MAAM;QACN,MAAM;KACP,CAAC;AACJ,CAAC;AA8KD;;;;;GAKG;AACH,MAAM,UAAU,eAAe,CAAC,OAAyB,EAAE;IACzD,OAAO,mBAAmB,CAAC,IAAI,CAAC,CAAC;AACnC,CAAC;AAED,MAAM,UAAU,QAAQ,CAAC,MAAe,EAAE,UAA2B,EAAE;IACrE,qEAAqE;IACrE,uEAAuE;IACvE,MAAM,YAAY,GAAG,cAAc,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;QAChF,CAAC,CAAC,YAAY,EAAE;QAChB,CAAC,CAAC,IAAI,CAAC;IACT,IAAI,OAA0C,CAAC;IAC/C,IAAI,CAAC;QACH,OAAO;YACL,YAAY,KAAK,IAAI;gBACnB,CAAC,CAAC,EAAE,IAAI,EAAE,YAAY,EAAE,MAAM,EAAE,QAAQ,EAAE,eAAe,EAAE,EAAE,EAAE;gBAC/D,CAAC,CAAC,cAAc,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;IACxD,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAI,GAAG,YAAY,qBAAqB,EAAE,CAAC;YACzC,OAAO;gBACL,MAAM,EAAE,IAAI;gBACZ,KAAK,EAAE;oBACL,IAAI,EAAE,aAAa;oBACnB,OAAO,EAAE,GAAG,CAAC,OAAO;oBACpB,WAAW,EAAE,wDAAwD;iBACtE;gBACD,QAAQ,EAAE,QAAQ,CAAC,WAAW;gBAC9B,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,WAAW,EAAE,SAAS,EAAE;aAClD,CAAC;QACJ,CAAC;QACD,MAAM,GAAG,CAAC;IACZ,CAAC;IAED,IAAI,IAAuC,CAAC;IAC5C,IAAI,CAAC;QACH,IAAI;YACF,YAAY,KAAK,IAAI;gBACnB,CAAC,CAAC,EAAE,EAAE,EAAE,oBAAoB,EAAE,EAAE,IAAI,EAAE,YAAY,EAAE,KAAK,KAAI,CAAC,EAAE;gBAChE,CAAC,CAAC,cAAc,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;IACrC,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAI,GAAG,YAAY,iBAAiB,EAAE,CAAC;YACrC,OAAO;gBACL,MAAM,EAAE,IAAI;gBACZ,KAAK,EAAE;oBACL,IAAI,EAAE,aAAa;oBACnB,OAAO,EAAE,GAAG,CAAC,OAAO;oBACpB,WAAW,EAAE,2DAA2D;iBACzE;gBACD,QAAQ,EAAE,QAAQ,CAAC,WAAW;gBAC9B,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,WAAW,EAAE,SAAS,EAAE;aAClD,CAAC;QACJ,CAAC;QACD,MAAM,GAAG,CAAC;IACZ,CAAC;IAED,IAAI,CAAC;QACH,MAAM,WAAW,GAAG,aAAa,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAC3C,MAAM,MAAM,GAAG,iBAAiB,CAAC,WAAW,EAAE,SAAS,CAAC,CAAC;QACzD,uEAAuE;QACvE,oEAAoE;QACpE,MAAM,MAAM,GAAG,UAAU,EAAE,CAAC;QAC5B,MAAM,QAAQ,GACZ,MAAM,CAAC,IAAI,KAAK,OAAO,IAAI,MAAM,CAAC,mBAAmB,KAAK,WAAW,CAAC,WAAW,CAAC;QACpF,MAAM,iBAAiB,GAAG,QAAQ;YAChC,CAAC,CAAC,eAAe;YACjB,CAAC,CAAC,MAAM,CAAC,IAAI,KAAK,IAAI;gBACpB,CAAC,CAAC,IAAI;gBACN,CAAC,CAAC,MAAM,CAAC,IAAI,KAAK,OAAO;oBACvB,CAAC,CAAC,OAAO;oBACT,CAAC,CAAC,iBAAiB,CAAC;QAC1B,MAAM,aAAa,GAAG,MAAM,CAAC,IAAI,KAAK,IAAI,IAAI,QAAQ,CAAC;QACvD,MAAM,UAAU,GAAG,0BAA0B,EAAE,CAAC;QAChD,MAAM,OAAO,GAAG,OAAO,CAAC,WAAW,IAAI,wBAAwB,CAAC,WAAW,CAAC,CAAC;QAC7E,MAAM,UAAU,GAAG,OAAO,CAAC,OAAO,EAAE,CAAC;QACrC,MAAM,WAAW,GAAG,OAAO,CAAC,IAAI,EAAE,CAAC;QACnC,MAAM,YAAY,GAA6B,EAAE,CAAC;QAClD,KAAK,MAAM,CAAC,IAAI,WAAW,CAAC,MAAM,EAAE,CAAC;YACnC,IAAI,CAAC,CAAC,YAAY,CAAC,MAAM,GAAG,CAAC;gBAAE,YAAY,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,YAAY,CAAC;QACxE,CAAC;QACD,4EAA4E;QAC5E,4EAA4E;QAC5E,4EAA4E;QAC5E,MAAM,WAAW,GAA4B,CAAC,GAAG,EAAE;YACjD,IAAI,MAAM,CAAC,KAAK,IAAI,IAAI,EAAE,CAAC;gBACzB,OAAO,EAAE,SAAS,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC;YAC/E,CAAC;YACD,IAAI,CAAC;gBACH,MAAM,CAAC,GAAG,YAAY,CAAC,IAAI,CAAC,EAAE,EAAE,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;gBACvE,OAAO;oBACL,SAAS,EAAE,MAAM,CAAC,KAAK,CAAC,GAAG;oBAC3B,MAAM,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM;oBAC3B,QAAQ,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE;oBACxD,MAAM,EAAE,aAAa,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,KAAK,cAAc,MAAM,CAAC,KAAK,CAAC,MAAM,GAAG;iBAC5E,CAAC;YACJ,CAAC;YAAC,MAAM,CAAC;gBACP,OAAO;oBACL,SAAS,EAAE,MAAM,CAAC,KAAK,CAAC,GAAG;oBAC3B,MAAM,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM;oBAC3B,QAAQ,EAAE,IAAI;oBACd,MAAM,EACJ,UAAU,MAAM,CAAC,KAAK,CAAC,GAAG,cAAc,MAAM,CAAC,KAAK,CAAC,MAAM,mBAAmB;wBAC9E,sFAAsF;iBACzF,CAAC;YACJ,CAAC;QACH,CAAC,CAAC,EAAE,CAAC;QACL,MAAM,MAAM,GAAmB;YAC7B,EAAE,EAAE;gBACF,IAAI,EAAE,OAAO,CAAC,IAAI;gBAClB,MAAM,EAAE,OAAO,CAAC,MAAM;gBACtB,eAAe,EAAE,OAAO,CAAC,eAAe;gBACxC,eAAe,EAAE,WAAW,CAAC,eAAe;aAC7C;YACD,WAAW,EAAE;gBACX,MAAM,EAAE,iBAAiB;gBACzB,KAAK,EAAE,WAAW,CAAC,WAAW;gBAC9B,QAAQ,EAAE,MAAM,CAAC,IAAI,KAAK,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI;gBAC1D,MAAM,EAAE,MAAM,CAAC,IAAI,KAAK,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE;gBACpD,YAAY;aACb;YACD,GAAG,EAAE;gBACH,SAAS,EAAE,UAAU,CAAC,UAAU,CAAC;gBACjC,OAAO,EAAE,UAAU,CAAC,aAAa;gBACjC,gBAAgB,EAAE,MAAM,CAAC,mBAAmB;gBAC5C,eAAe,EACb,UAAU,CAAC,aAAa,KAAK,IAAI;oBACjC,MAAM,CAAC,mBAAmB,KAAK,IAAI;oBACnC,UAAU,CAAC,aAAa,KAAK,MAAM,CAAC,mBAAmB;aAC1D;YACD,MAAM,EAAE;gBACN,OAAO,EAAE,aAAa;gBACtB,MAAM,EAAE,QAAQ;oBACd,CAAC,CAAC,8EAA8E;wBAC9E,gFAAgF;oBAClF,CAAC,CAAC,aAAa;wBACb,CAAC,CAAC,6CAA6C;wBAC/C,CAAC,CAAC,MAAM,CAAC,IAAI,KAAK,OAAO;4BACvB,CAAC,CAAC,+EAA+E;4BACjF,CAAC,CAAC,2DAA2D;aACpE;YACD,KAAK,EAAE,WAAW;YAClB,YAAY,EAAE;gBACZ,OAAO,EAAE,MAAM,CAAC,iBAAiB;gBACjC,mBAAmB,EAAE,UAAU;gBAC/B,MAAM,EAAE,CAAC,MAAM,CAAC,iBAAiB;oBAC/B,CAAC,CAAC,uFAAuF;oBACzF,CAAC,CAAC,UAAU;wBACV,CAAC,CAAC,6DAA6D;wBAC/D,CAAC,CAAC,iFAAiF;4BACjF,uDAAuD;aAC9D;YACD,WAAW,EAAE;gBACX,OAAO,EAAE,UAAU;gBACnB,iBAAiB,EAAE,WAAW;gBAC9B,OAAO,EAAE,eAAe,CAAC,WAAW,EAAE,UAAU,CAAC;aAClD;YACD,UAAU,EACR,OAAO,CAAC,eAAe,KAAK,IAAI;gBAC9B,CAAC,CAAC,eAAe,CAAC,OAAO,CAAC,SAAS,CAAC;gBACpC,CAAC,CAAC;oBACE,MAAM,EAAE,YAAY;oBACpB,MAAM,EACJ,2EAA2E;wBAC3E,mEAAmE;iBACtE;YACP,EAAE,EAAE;gBACF,OAAO,EAAE,MAAM,CAAC,EAAE,CAAC,OAAO;gBAC1B,UAAU,EAAE,eAAe,EAAE;gBAC7B,aAAa,EACX,OAAO,CAAC,kBAAkB,KAAK,IAAI;oBACjC,CAAC,CAAC,kBAAkB,CAAC,OAAO,CAAC,sBAAsB,CAAC;oBACpD,CAAC,CAAC;wBACE,MAAM,EAAE,YAAY;wBACpB,MAAM,EACJ,gFAAgF;4BAChF,+EAA+E;qBAClF;gBACP,oBAAoB,EAAE,wBAAwB;gBAC9C,aAAa,EAAE,iBAAiB,EAAE,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC,CAAC;oBACzD,EAAE;oBACF,MAAM,EAAE,KAAK,CAAC,MAAM;iBACrB,CAAC,CAAC;gBACH,MAAM,EAAE,MAAM,CAAC,EAAE,CAAC,OAAO;oBACvB,CAAC,CAAC,qFAAqF;wBACrF,uEAAuE;oBACzE,CAAC,CAAC,mFAAmF;wBACnF,4DAA4D;aACjE;YACD,YAAY,EAAE;gBACZ,SAAS,EAAE,oBAAoB,CAAC,OAAO,CAAC,YAAY,CAAC;gBACrD,SAAS,EAAE,mBAAmB,CAAC,OAAO,CAAC,YAAY,CAAC;aACrD;YACD,UAAU,EAAE,mBAAmB,CAAC,IAAI,CAAC,EAAE,CAAC;YACxC,OAAO,EAAE,kBAAkB,CAAC,MAAM,CAAC,WAAW,EAAE,OAAO,CAAC,OAAO,CAAC;YAChE,UAAU,EAAE,iBAAiB,CAAC,IAAI,CAAC,EAAE,EAAE,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,UAAU,CAAC;YACxE,KAAK,EAAE,kBAAkB,CAAC,gBAAgB,CAAC,OAAO,CAAC,QAAQ,IAAI,QAAQ,EAAE,CAAC,CAAC;SAC5E,CAAC;QACF,OAAO;YACL,MAAM;YACN,KAAK,EAAE,IAAI;YACX,QAAQ,EAAE,aAAa,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,YAAY;YAC7D,IAAI,EAAE;gBACJ,SAAS,EAAE,WAAW,CAAC,eAAe;gBACtC,WAAW,EAAE,iBAAiB,KAAK,iBAAiB,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,iBAAiB;aACrF;SACF,CAAC;IACJ,CAAC;YAAS,CAAC;QACT,IAAI,CAAC,KAAK,EAAE,CAAC;IACf,CAAC;AACH,CAAC"}