ugly-app 0.1.417 → 0.1.419

package/dist/cli/authCommands.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"authCommands.d.ts","sourceRoot":"","sources":["../../src/cli/authCommands.ts"],"names":[],"mappings":"AAIA,wBAAsB,aAAa,CACjC,KAAK,EAAE,MAAM,EACb,IAAI,CAAC,EAAE,MAAM,GACZ,OAAO,CAAC;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,CAAC,CAqC5C;AAED,wBAAsB,SAAS,CAC7B,IAAI,EAAE,MAAM,EACZ,IAAI,EAAE,MAAM,GACX,OAAO,CAAC;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,CAAC,CA6C5C"}
+{"version":3,"file":"authCommands.d.ts","sourceRoot":"","sources":["../../src/cli/authCommands.ts"],"names":[],"mappings":"AAKA,wBAAsB,aAAa,CACjC,KAAK,EAAE,MAAM,EACb,IAAI,CAAC,EAAE,MAAM,GACZ,OAAO,CAAC;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,CAAC,CAqC5C;AAED,wBAAsB,SAAS,CAC7B,IAAI,EAAE,MAAM,EACZ,IAAI,EAAE,MAAM,GACX,OAAO,CAAC;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,CAAC,CAwD5C"}

package/dist/cli/authCommands.js

@@ -1,6 +1,7 @@
 import { nanoid } from 'nanoid';
 import { getUglyBotUrl } from '../shared/uglyBotUrl.js';
 import { initDataProxy, pgQuery, stopDataProxy, ensureTable } from '../server/DataProxyClient.js';
+import { migrateTokensFromUglyApp, readAuthToken } from './authStore.js';
 export async function createAccount(email, name) {
     const proxyUrl = process.env['DATA_PROXY_URL'] ?? 'ws://localhost:4200';
     const proxyToken = process.env['DATA_PROXY_TOKEN'] ?? '';
@@ -33,13 +34,24 @@ export async function createAccount(email, name) {
 export async function createBot(slug, name) {
     const fs = await import('fs');
     let projectToken = '';
-    // Read from .uglyapp config
+    let projectId = '';
+    // Migrate any legacy .uglyapp tokens into ~/.ugly-bot/ first.
+    migrateTokensFromUglyApp(process.cwd());
+    // Read projectId (and any leftover inline token) from .uglyapp.
     try {
         const config = JSON.parse(fs.readFileSync('.uglyapp', 'utf-8'));
+        if (typeof config.projectId === 'string')
+            projectId = config.projectId;
         if (typeof config.uglyBotToken === 'string')
             projectToken = config.uglyBotToken;
     }
     catch { /* no .uglyapp */ }
+    // Primary source: ~/.ugly-bot/ auth store (where `npx ugly-app login` writes tokens).
+    if (!projectToken && projectId) {
+        const stored = readAuthToken(projectId);
+        if (stored)
+            projectToken = stored;
+    }
     // Fall back to .env for backwards compatibility
     if (!projectToken) {
         try {
@@ -51,7 +63,7 @@ export async function createBot(slug, name) {
         catch { /* no .env either */ }
     }
     if (!projectToken) {
-        throw new Error('uglyBotToken not found in .uglyapp. Run "npx ugly-app login" first.');
+        throw new Error('No project auth token found. Run "npx ugly-app login" in this project to authenticate.');
     }
     const serverUrl = getUglyBotUrl();
     const res = await fetch(`${serverUrl}/request`, {

package/dist/cli/authCommands.js.map

@@ -1 +1 @@
-{"version":3,"file":"authCommands.js","sourceRoot":"","sources":["../../src/cli/authCommands.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AAChC,OAAO,EAAE,aAAa,EAAE,MAAM,yBAAyB,CAAC;AACxD,OAAO,EAAE,aAAa,EAAE,OAAO,EAAE,aAAa,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AAElG,MAAM,CAAC,KAAK,UAAU,aAAa,CACjC,KAAa,EACb,IAAa;IAEb,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC,IAAI,qBAAqB,CAAC;IACxE,MAAM,UAAU,GAAG,OAAO,CAAC,GAAG,CAAC,kBAAkB,CAAC,IAAI,EAAE,CAAC;IACzD,MAAM,aAAa,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC;IAC1C,IAAI,CAAC;QACH,MAAM,WAAW,CAAC,MAAM,CAAC,CAAC;QAE1B,0BAA0B;QAC1B,MAAM,QAAQ,GAAG,MAAM,OAAO,CAC5B,2DAA2D,EAC3D,CAAC,KAAK,CAAC,CACR,CAAC;QACF,IAAI,QAAQ,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC7B,MAAM,QAAQ,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;YACvC,OAAO,EAAE,MAAM,EAAE,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC;QACnD,CAAC;QAED,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,MAAM,MAAM,GAAG,MAAM,EAAE,CAAC;QACxB,MAAM,QAAQ,GAAG;YACf,EAAE,EAAE,MAAM;YACV,KAAK;YACL,IAAI,EAAE,IAAI,IAAI,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;YACjC,OAAO,EAAE,CAAC;YACV,OAAO,EAAE,GAAG;YACZ,OAAO,EAAE,GAAG;SACb,CAAC;QAEF,MAAM,OAAO,CACX,oFAAoF,EACpF,CAAC,MAAM,EAAE,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,EAAE,GAAG,CAAC,CACxC,CAAC;QAEF,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC;IAC3B,CAAC;YAAS,CAAC;QACT,aAAa,EAAE,CAAC;IAClB,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,SAAS,CAC7B,IAAY,EACZ,IAAY;IAEZ,MAAM,EAAE,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,CAAC;IAC9B,IAAI,YAAY,GAAG,EAAE,CAAC;IAEtB,4BAA4B;IAC5B,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,YAAY,CAAC,UAAU,EAAE,OAAO,CAAC,CAA4B,CAAC;QAC3F,IAAI,OAAO,MAAM,CAAC,YAAY,KAAK,QAAQ;YAAE,YAAY,GAAG,MAAM,CAAC,YAAY,CAAC;IAClF,CAAC;IAAC,MAAM,CAAC,CAAC,iBAAiB,CAAC,CAAC;IAE7B,gDAAgD;IAChD,IAAI,CAAC,YAAY,EAAE,CAAC;QAClB,IAAI,CAAC;YACH,MAAM,UAAU,GAAG,EAAE,CAAC,YAAY,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;YACpD,MAAM,UAAU,GAAG,wBAAwB,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;YAC7D,IAAI,UAAU,EAAE,CAAC,CAAC,CAAC;gBAAE,YAAY,GAAG,UAAU,CAAC,CAAC,CAAC,CAAC;QACpD,CAAC;QAAC,MAAM,CAAC,CAAC,oBAAoB,CAAC,CAAC;IAClC,CAAC;IAED,IAAI,CAAC,YAAY,EAAE,CAAC;QAClB,MAAM,IAAI,KAAK,CACb,qEAAqE,CACtE,CAAC;IACJ,CAAC;IAED,MAAM,SAAS,GAAG,aAAa,EAAE,CAAC;IAElC,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,SAAS,UAAU,EAAE;QAC9C,MAAM,EAAE,MAAM;QACd,OAAO,EAAE;YACP,eAAe,EAAE,UAAU,YAAY,EAAE;YACzC,cAAc,EAAE,kBAAkB;SACnC;QACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;YACnB,EAAE,EAAE,qBAAqB;YACzB,KAAK,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE;SACtB,CAAC;KACH,CAAC,CAAC;IAEH,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;QACZ,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC;QAC9C,MAAM,IAAI,KAAK,CAAC,iCAAiC,GAAG,CAAC,MAAM,IAAI,IAAI,EAAE,CAAC,CAAC;IACzE,CAAC;IAED,OAAO,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAsC,CAAC;AACjE,CAAC"}
+{"version":3,"file":"authCommands.js","sourceRoot":"","sources":["../../src/cli/authCommands.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AAChC,OAAO,EAAE,aAAa,EAAE,MAAM,yBAAyB,CAAC;AACxD,OAAO,EAAE,aAAa,EAAE,OAAO,EAAE,aAAa,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AAClG,OAAO,EAAE,wBAAwB,EAAE,aAAa,EAAE,MAAM,gBAAgB,CAAC;AAEzE,MAAM,CAAC,KAAK,UAAU,aAAa,CACjC,KAAa,EACb,IAAa;IAEb,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC,IAAI,qBAAqB,CAAC;IACxE,MAAM,UAAU,GAAG,OAAO,CAAC,GAAG,CAAC,kBAAkB,CAAC,IAAI,EAAE,CAAC;IACzD,MAAM,aAAa,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC;IAC1C,IAAI,CAAC;QACH,MAAM,WAAW,CAAC,MAAM,CAAC,CAAC;QAE1B,0BAA0B;QAC1B,MAAM,QAAQ,GAAG,MAAM,OAAO,CAC5B,2DAA2D,EAC3D,CAAC,KAAK,CAAC,CACR,CAAC;QACF,IAAI,QAAQ,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC7B,MAAM,QAAQ,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;YACvC,OAAO,EAAE,MAAM,EAAE,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC;QACnD,CAAC;QAED,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,MAAM,MAAM,GAAG,MAAM,EAAE,CAAC;QACxB,MAAM,QAAQ,GAAG;YACf,EAAE,EAAE,MAAM;YACV,KAAK;YACL,IAAI,EAAE,IAAI,IAAI,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;YACjC,OAAO,EAAE,CAAC;YACV,OAAO,EAAE,GAAG;YACZ,OAAO,EAAE,GAAG;SACb,CAAC;QAEF,MAAM,OAAO,CACX,oFAAoF,EACpF,CAAC,MAAM,EAAE,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,EAAE,GAAG,CAAC,CACxC,CAAC;QAEF,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC;IAC3B,CAAC;YAAS,CAAC;QACT,aAAa,EAAE,CAAC;IAClB,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,SAAS,CAC7B,IAAY,EACZ,IAAY;IAEZ,MAAM,EAAE,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,CAAC;IAC9B,IAAI,YAAY,GAAG,EAAE,CAAC;IACtB,IAAI,SAAS,GAAG,EAAE,CAAC;IAEnB,8DAA8D;IAC9D,wBAAwB,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC;IAExC,gEAAgE;IAChE,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,YAAY,CAAC,UAAU,EAAE,OAAO,CAAC,CAA4B,CAAC;QAC3F,IAAI,OAAO,MAAM,CAAC,SAAS,KAAK,QAAQ;YAAE,SAAS,GAAG,MAAM,CAAC,SAAS,CAAC;QACvE,IAAI,OAAO,MAAM,CAAC,YAAY,KAAK,QAAQ;YAAE,YAAY,GAAG,MAAM,CAAC,YAAY,CAAC;IAClF,CAAC;IAAC,MAAM,CAAC,CAAC,iBAAiB,CAAC,CAAC;IAE7B,sFAAsF;IACtF,IAAI,CAAC,YAAY,IAAI,SAAS,EAAE,CAAC;QAC/B,MAAM,MAAM,GAAG,aAAa,CAAC,SAAS,CAAC,CAAC;QACxC,IAAI,MAAM;YAAE,YAAY,GAAG,MAAM,CAAC;IACpC,CAAC;IAED,gDAAgD;IAChD,IAAI,CAAC,YAAY,EAAE,CAAC;QAClB,IAAI,CAAC;YACH,MAAM,UAAU,GAAG,EAAE,CAAC,YAAY,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;YACpD,MAAM,UAAU,GAAG,wBAAwB,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;YAC7D,IAAI,UAAU,EAAE,CAAC,CAAC,CAAC;gBAAE,YAAY,GAAG,UAAU,CAAC,CAAC,CAAC,CAAC;QACpD,CAAC;QAAC,MAAM,CAAC,CAAC,oBAAoB,CAAC,CAAC;IAClC,CAAC;IAED,IAAI,CAAC,YAAY,EAAE,CAAC;QAClB,MAAM,IAAI,KAAK,CACb,wFAAwF,CACzF,CAAC;IACJ,CAAC;IAED,MAAM,SAAS,GAAG,aAAa,EAAE,CAAC;IAElC,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,SAAS,UAAU,EAAE;QAC9C,MAAM,EAAE,MAAM;QACd,OAAO,EAAE;YACP,eAAe,EAAE,UAAU,YAAY,EAAE;YACzC,cAAc,EAAE,kBAAkB;SACnC;QACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;YACnB,EAAE,EAAE,qBAAqB;YACzB,KAAK,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE;SACtB,CAAC;KACH,CAAC,CAAC;IAEH,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;QACZ,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC;QAC9C,MAAM,IAAI,KAAK,CAAC,iCAAiC,GAAG,CAAC,MAAM,IAAI,IAAI,EAAE,CAAC,CAAC;IACzE,CAAC;IAED,OAAO,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAsC,CAAC;AACjE,CAAC"}

package/dist/cli/doctor.d.ts

@@ -8,5 +8,15 @@
  * lines and a trailing "next steps" section so an agent can parse it
  * by grep if it needs to.
  */
-export declare function runDoctor(): Promise<void>;
+export interface RunDoctorOptions {
+    /** Override for tests. Defaults to process.cwd(). */
+    cwd?: string;
+    /** Override for tests. Defaults to os.homedir(). */
+    homeDir?: string;
+    /** Skip the live DataProxy / migration probes. Defaults to false. */
+    skipLiveChecks?: boolean;
+    /** Sink for output lines. Defaults to console.log. */
+    print?: (line: string) => void;
+}
+export declare function runDoctor(options?: RunDoctorOptions): Promise<void>;
 //# sourceMappingURL=doctor.d.ts.map

package/dist/cli/doctor.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"doctor.d.ts","sourceRoot":"","sources":["../../src/cli/doctor.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAaH,wBAAsB,SAAS,IAAI,OAAO,CAAC,IAAI,CAAC,CAmJ/C"}
+{"version":3,"file":"doctor.d.ts","sourceRoot":"","sources":["../../src/cli/doctor.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAUH,MAAM,WAAW,gBAAgB;IAC/B,qDAAqD;IACrD,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,oDAAoD;IACpD,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,qEAAqE;IACrE,cAAc,CAAC,EAAE,OAAO,CAAC;IACzB,sDAAsD;IACtD,KAAK,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;CAChC;AAED,wBAAsB,SAAS,CAAC,OAAO,GAAE,gBAAqB,GAAG,OAAO,CAAC,IAAI,CAAC,CA0I7E"}

package/dist/cli/doctor.js

@@ -9,11 +9,15 @@
  * by grep if it needs to.
  */
 import fs from 'fs';
+import os from 'os';
 import path from 'path';
 import { readUglyAppConfig } from './uglyappConfig.js';
-import { readAuthToken, readLocalToken } from './authStore.js';
-export async function runDoctor() {
-    const cwd = process.cwd();
+import { probeAuth } from './probeAuth.js';
+export async function runDoctor(options = {}) {
+    const cwd = options.cwd ?? process.cwd();
+    const homeDir = options.homeDir ?? os.homedir();
+    const print = options.print ?? ((s) => console.log(s));
+    const skipLive = options.skipLiveChecks ?? false;
     const lines = [];
     const nextSteps = [];
     // 1. .uglyapp
@@ -33,44 +37,19 @@ export async function runDoctor() {
             detail: `projectId=${config.projectId} localPort=${config.localPort}${config.domain ? ` domain=${config.domain}` : ''}`,
         });
     }
-    // 2. Auth tokens
+    // 2. Auth tokens — global user identity + per-project cached tokens.
+    // probeAuth() is the single source of truth so test code can exercise
+    // the same logic without spinning up a DataProxy.
     const isLocal = process.env['UGLY_BOT_LOCAL'] === '1';
-    if (config) {
-        const cloudToken = readAuthToken(config.projectId) ?? config.uglyBotToken;
-        const localToken = readLocalToken(config.projectId) ?? config.localToken;
-        if (cloudToken) {
-            lines.push({
-                status: 'ok',
-                label: 'auth (cloud)',
-                detail: `project token present (${cloudToken.slice(0, 8)}…)`,
-            });
-        }
-        else {
-            lines.push({
-                status: isLocal ? 'info' : 'warn',
-                label: 'auth (cloud)',
-                detail: 'no project token for ugly.bot cloud',
-            });
-            if (!isLocal)
-                nextSteps.push('Run `npx ugly-app login` to mint a project token');
-        }
-        if (localToken) {
-            lines.push({
-                status: 'ok',
-                label: 'auth (local)',
-                detail: `local project token present (${localToken.slice(0, 8)}…)`,
-            });
-        }
-        else {
-            lines.push({
-                status: isLocal ? 'warn' : 'info',
-                label: 'auth (local)',
-                detail: 'no local ugly.bot token',
-            });
-            if (isLocal)
-                nextSteps.push('Run `UGLY_BOT_LOCAL=1 npx ugly-app login` to mint a local token');
-        }
-    }
+    const authProbe = probeAuth({
+        homeDir,
+        projectId: config?.projectId ?? null,
+        isLocal,
+    });
+    for (const l of authProbe.lines)
+        lines.push(l);
+    for (const s of authProbe.nextSteps)
+        nextSteps.push(s);
     // 3. DataProxy / env inheritance (pre-ensureInfra snapshot)
     const envUrl = process.env['DATA_PROXY_URL'];
     const envToken = process.env['DATA_PROXY_TOKEN'];
@@ -117,7 +96,7 @@ export async function runDoctor() {
     // 5. Live DataProxy connection check (only when .uglyapp + some token).
     // Gated on config presence so doctor is fast in a half-configured app
     // instead of blocking on a tunnel handshake that can't succeed.
-    if (config) {
+    if (config && !skipLive) {
         const connectCheck = await safeConnectCheck(cwd);
         lines.push({
             status: connectCheck.ok ? 'ok' : 'error',
@@ -140,8 +119,8 @@ export async function runDoctor() {
         }
     }
     // Print the report
-    console.log('ugly-app doctor — child app diagnostics');
-    console.log('═'.repeat(50));
+    print('ugly-app doctor — child app diagnostics');
+    print('═'.repeat(50));
     for (const l of lines) {
         const icon = l.status === 'ok'
             ? '✓'
@@ -150,17 +129,27 @@ export async function runDoctor() {
                 : l.status === 'error'
                     ? '✗'
                     : '·';
-        console.log(`${icon} ${l.label.padEnd(18)} ${l.detail}`);
+        print(`${icon} ${l.label.padEnd(18)} ${l.detail}`);
+    }
+    // Agent-ready summary — a single grep-friendly line so headless
+    // tooling (the bot-swarm skill, evals, CI) can decide whether to
+    // proceed without parsing the human-formatted lines above.
+    print('');
+    if (authProbe.agentReady) {
+        print('agent-ready: yes');
+    }
+    else {
+        print(`agent-ready: no — ${authProbe.agentBlockedReason ?? 'auth incomplete'}`);
     }
     if (nextSteps.length > 0) {
-        console.log('');
-        console.log('Next steps:');
+        print('');
+        print('Next steps:');
         for (const s of nextSteps)
-            console.log(`  • ${s}`);
+            print(`  • ${s}`);
     }
     else {
-        console.log('');
-        console.log('Next steps: nothing obvious — env looks healthy.');
+        print('');
+        print('Next steps: nothing obvious — env looks healthy.');
     }
 }
 function safeReadConfig(cwd) {

package/dist/cli/doctor.js.map

@@ -1 +1 @@
-{"version":3,"file":"doctor.js","sourceRoot":"","sources":["../../src/cli/doctor.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,EAAE,MAAM,IAAI,CAAC;AACpB,OAAO,IAAI,MAAM,MAAM,CAAC;AACxB,OAAO,EAAE,iBAAiB,EAAE,MAAM,oBAAoB,CAAC;AACvD,OAAO,EAAE,aAAa,EAAE,cAAc,EAAE,MAAM,gBAAgB,CAAC;AAQ/D,MAAM,CAAC,KAAK,UAAU,SAAS;IAC7B,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC;IAC1B,MAAM,KAAK,GAAiB,EAAE,CAAC;IAC/B,MAAM,SAAS,GAAa,EAAE,CAAC;IAE/B,cAAc;IACd,MAAM,MAAM,GAAG,cAAc,CAAC,GAAG,CAAC,CAAC;IACnC,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,KAAK,CAAC,IAAI,CAAC;YACT,MAAM,EAAE,OAAO;YACf,KAAK,EAAE,UAAU;YACjB,MAAM,EAAE,iDAAiD;SAC1D,CAAC,CAAC;QACH,SAAS,CAAC,IAAI,CAAC,mDAAmD,CAAC,CAAC;IACtE,CAAC;SAAM,CAAC;QACN,KAAK,CAAC,IAAI,CAAC;YACT,MAAM,EAAE,IAAI;YACZ,KAAK,EAAE,UAAU;YACjB,MAAM,EAAE,aAAa,MAAM,CAAC,SAAS,cAAc,MAAM,CAAC,SAAS,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,WAAW,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE;SACxH,CAAC,CAAC;IACL,CAAC;IAED,iBAAiB;IACjB,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC,KAAK,GAAG,CAAC;IACtD,IAAI,MAAM,EAAE,CAAC;QACX,MAAM,UAAU,GAAG,aAAa,CAAC,MAAM,CAAC,SAAS,CAAC,IAAI,MAAM,CAAC,YAAY,CAAC;QAC1E,MAAM,UAAU,GAAG,cAAc,CAAC,MAAM,CAAC,SAAS,CAAC,IAAI,MAAM,CAAC,UAAU,CAAC;QACzE,IAAI,UAAU,EAAE,CAAC;YACf,KAAK,CAAC,IAAI,CAAC;gBACT,MAAM,EAAE,IAAI;gBACZ,KAAK,EAAE,cAAc;gBACrB,MAAM,EAAE,0BAA0B,UAAU,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI;aAC7D,CAAC,CAAC;QACL,CAAC;aAAM,CAAC;YACN,KAAK,CAAC,IAAI,CAAC;gBACT,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM;gBACjC,KAAK,EAAE,cAAc;gBACrB,MAAM,EAAE,qCAAqC;aAC9C,CAAC,CAAC;YACH,IAAI,CAAC,OAAO;gBAAE,SAAS,CAAC,IAAI,CAAC,kDAAkD,CAAC,CAAC;QACnF,CAAC;QACD,IAAI,UAAU,EAAE,CAAC;YACf,KAAK,CAAC,IAAI,CAAC;gBACT,MAAM,EAAE,IAAI;gBACZ,KAAK,EAAE,cAAc;gBACrB,MAAM,EAAE,gCAAgC,UAAU,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI;aACnE,CAAC,CAAC;QACL,CAAC;aAAM,CAAC;YACN,KAAK,CAAC,IAAI,CAAC;gBACT,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM;gBACjC,KAAK,EAAE,cAAc;gBACrB,MAAM,EAAE,yBAAyB;aAClC,CAAC,CAAC;YACH,IAAI,OAAO;gBAAE,SAAS,CAAC,IAAI,CAAC,iEAAiE,CAAC,CAAC;QACjG,CAAC;IACH,CAAC;IAED,4DAA4D;IAC5D,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC;IAC7C,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,kBAAkB,CAAC,CAAC;IACjD,IAAI,MAAM,IAAI,QAAQ,EAAE,CAAC;QACvB,KAAK,CAAC,IAAI,CAAC;YACT,MAAM,EAAE,MAAM;YACd,KAAK,EAAE,eAAe;YACtB,MAAM,EAAE,kBAAkB,MAAM,IAAI,SAAS,qBAAqB,QAAQ,CAAC,CAAC,CAAC,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS,EAAE;SACtH,CAAC,CAAC;IACL,CAAC;SAAM,CAAC;QACN,KAAK,CAAC,IAAI,CAAC;YACT,MAAM,EAAE,MAAM;YACd,KAAK,EAAE,eAAe;YACtB,MAAM,EAAE,8EAA8E;SACvF,CAAC,CAAC;IACL,CAAC;IAED,oBAAoB;IACpB,MAAM,aAAa,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,QAAQ,EAAE,YAAY,CAAC,CAAC;IAC7D,IAAI,cAAc,GAAa,EAAE,CAAC;IAClC,IAAI,CAAC;QACH,cAAc,GAAG,EAAE;aAChB,WAAW,CAAC,aAAa,CAAC;aAC1B,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;aACrD,IAAI,EAAE,CAAC;IACZ,CAAC;IAAC,MAAM,CAAC;QACP,cAAc,GAAG,EAAE,CAAC;IACtB,CAAC;IACD,IAAI,cAAc,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAChC,KAAK,CAAC,IAAI,CAAC;YACT,MAAM,EAAE,MAAM;YACd,KAAK,EAAE,YAAY;YACnB,MAAM,EAAE,iBAAiB,aAAa,EAAE;SACzC,CAAC,CAAC;IACL,CAAC;SAAM,CAAC;QACN,KAAK,CAAC,IAAI,CAAC;YACT,MAAM,EAAE,IAAI;YACZ,KAAK,EAAE,YAAY;YACnB,MAAM,EAAE,GAAG,cAAc,CAAC,MAAM,mCAAmC;SACpE,CAAC,CAAC;IACL,CAAC;IAED,wEAAwE;IACxE,sEAAsE;IACtE,gEAAgE;IAChE,IAAI,MAAM,EAAE,CAAC;QACX,MAAM,YAAY,GAAG,MAAM,gBAAgB,CAAC,GAAG,CAAC,CAAC;QACjD,KAAK,CAAC,IAAI,CAAC;YACT,MAAM,EAAE,YAAY,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO;YACxC,KAAK,EAAE,mBAAmB;YAC1B,MAAM,EAAE,YAAY,CAAC,MAAM;SAC5B,CAAC,CAAC;QACH,IAAI,CAAC,YAAY,CAAC,EAAE,IAAI,YAAY,CAAC,IAAI;YAAE,SAAS,CAAC,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC;QAE7E,wDAAwD;QACxD,IAAI,YAAY,CAAC,EAAE,EAAE,CAAC;YACpB,MAAM,SAAS,GAAG,MAAM,mBAAmB,CAAC,cAAc,CAAC,CAAC;YAC5D,KAAK,CAAC,IAAI,CAAC;gBACT,MAAM,EAAE,SAAS,CAAC,OAAO,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI;gBAC7C,KAAK,EAAE,kBAAkB;gBACzB,MAAM,EAAE,GAAG,SAAS,CAAC,OAAO,aAAa,SAAS,CAAC,OAAO,UAAU;aACrE,CAAC,CAAC;YACH,IAAI,SAAS,CAAC,OAAO,GAAG,CAAC,EAAE,CAAC;gBAC1B,SAAS,CAAC,IAAI,CAAC,2DAA2D,CAAC,CAAC;YAC9E,CAAC;QACH,CAAC;IACH,CAAC;IAED,mBAAmB;IACnB,OAAO,CAAC,GAAG,CAAC,yCAAyC,CAAC,CAAC;IACvD,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC;IAC5B,KAAK,MAAM,CAAC,IAAI,KAAK,EAAE,CAAC;QACtB,MAAM,IAAI,GACR,CAAC,CAAC,MAAM,KAAK,IAAI;YACf,CAAC,CAAC,GAAG;YACL,CAAC,CAAC,CAAC,CAAC,MAAM,KAAK,MAAM;gBACnB,CAAC,CAAC,GAAG;gBACL,CAAC,CAAC,CAAC,CAAC,MAAM,KAAK,OAAO;oBACpB,CAAC,CAAC,GAAG;oBACL,CAAC,CAAC,GAAG,CAAC;QACd,OAAO,CAAC,GAAG,CAAC,GAAG,IAAI,IAAI,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC;IAC3D,CAAC;IACD,IAAI,SAAS,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACzB,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAChB,OAAO,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC;QAC3B,KAAK,MAAM,CAAC,IAAI,SAAS;YAAE,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;IACrD,CAAC;SAAM,CAAC;QACN,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAChB,OAAO,CAAC,GAAG,CAAC,kDAAkD,CAAC,CAAC;IAClE,CAAC;AACH,CAAC;AAED,SAAS,cAAc,CAAC,GAAW;IACjC,IAAI,CAAC;QACH,OAAO,iBAAiB,CAAC,GAAG,CAAC,CAAC;IAChC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAQD;;;;;GAKG;AACH,KAAK,UAAU,gBAAgB,CAAC,IAAY;IAC1C,IAAI,CAAC;QACH,MAAM,EAAE,WAAW,EAAE,GAAG,MAAM,MAAM,CAAC,kBAAkB,CAAC,CAAC;QACzD,MAAM,WAAW,EAAE,CAAC;IACtB,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,GAAG,GAAI,GAAa,CAAC,OAAO,CAAC;QACnC,OAAO;YACL,EAAE,EAAE,KAAK;YACT,MAAM,EAAE,uBAAuB,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE;YAClD,IAAI,EAAE,GAAG,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC;gBACjD,CAAC,CAAC,0BAA0B;gBAC5B,CAAC,CAAC,gFAAgF;SACrF,CAAC;IACJ,CAAC;IACD,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC;IAC1C,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,kBAAkB,CAAC,CAAC;IAC9C,IAAI,CAAC,GAAG,IAAI,CAAC,KAAK,EAAE,CAAC;QACnB,OAAO;YACL,EAAE,EAAE,KAAK;YACT,MAAM,EAAE,gEAAgE;YACxE,IAAI,EAAE,gFAAgF;SACvF,CAAC;IACJ,CAAC;IACD,IAAI,CAAC;QACH,MAAM,EAAE,aAAa,EAAE,aAAa,EAAE,oBAAoB,EAAE,GAAG,MAAM,MAAM,CACzE,8BAA8B,CAC/B,CAAC;QACF,MAAM,aAAa,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;QAChC,MAAM,SAAS,GAAG,oBAAoB,EAAE,CAAC;QACzC,aAAa,EAAE,CAAC;QAChB,IAAI,CAAC,SAAS,EAAE,CAAC;YACf,OAAO;gBACL,EAAE,EAAE,KAAK;gBACT,MAAM,EAAE,4DAA4D;gBACpE,IAAI,EAAE,uFAAuF;aAC9F,CAAC;QACJ,CAAC;QACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,gBAAgB,GAAG,EAAE,EAAE,CAAC;IACrD,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO;YACL,EAAE,EAAE,KAAK;YACT,MAAM,EAAE,wBAAyB,GAAa,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE;YACtE,IAAI,EAAE,uEAAuE;SAC9E,CAAC;IACJ,CAAC;AACH,CAAC;AAED,KAAK,UAAU,mBAAmB,CAChC,KAAe;IAEf,IAAI,CAAC;QACH,MAAM,EAAE,aAAa,EAAE,OAAO,EAAE,aAAa,EAAE,GAAG,MAAM,MAAM,CAC5D,8BAA8B,CAC/B,CAAC;QACF,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC,IAAI,EAAE,CAAC;QAChD,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,kBAAkB,CAAC,IAAI,EAAE,CAAC;QACpD,MAAM,aAAa,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;QAChC,IAAI,CAAC;YACH,MAAM,OAAO,CACX,+GAA+G,CAChH,CAAC;YACF,MAAM,GAAG,GAAG,MAAM,OAAO,CAAmB,8BAA8B,CAAC,CAAC;YAC5E,MAAM,YAAY,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;YAC1D,IAAI,OAAO,GAAG,CAAC,CAAC;YAChB,IAAI,OAAO,GAAG,CAAC,CAAC;YAChB,KAAK,MAAM,CAAC,IAAI,KAAK,EAAE,CAAC;gBACtB,MAAM,IAAI,GAAG,IAAI,CAAC,QAAQ,CAAC,CAAC,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC;gBAC/C,IAAI,YAAY,CAAC,GAAG,CAAC,IAAI,CAAC;oBAAE,OAAO,IAAI,CAAC,CAAC;;oBACpC,OAAO,IAAI,CAAC,CAAC;YACpB,CAAC;YACD,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC;QAC9B,CAAC;gBAAS,CAAC;YACT,aAAa,EAAE,CAAC;QAClB,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,OAAO,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC;IAC/C,CAAC;AACH,CAAC"}
+{"version":3,"file":"doctor.js","sourceRoot":"","sources":["../../src/cli/doctor.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,EAAE,MAAM,IAAI,CAAC;AACpB,OAAO,EAAE,MAAM,IAAI,CAAC;AACpB,OAAO,IAAI,MAAM,MAAM,CAAC;AACxB,OAAO,EAAE,iBAAiB,EAAE,MAAM,oBAAoB,CAAC;AACvD,OAAO,EAAE,SAAS,EAAiB,MAAM,gBAAgB,CAAC;AAe1D,MAAM,CAAC,KAAK,UAAU,SAAS,CAAC,UAA4B,EAAE;IAC5D,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC;IACzC,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,IAAI,EAAE,CAAC,OAAO,EAAE,CAAC;IAChD,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,IAAI,CAAC,CAAC,CAAS,EAAE,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;IAC/D,MAAM,QAAQ,GAAG,OAAO,CAAC,cAAc,IAAI,KAAK,CAAC;IACjD,MAAM,KAAK,GAAiB,EAAE,CAAC;IAC/B,MAAM,SAAS,GAAa,EAAE,CAAC;IAE/B,cAAc;IACd,MAAM,MAAM,GAAG,cAAc,CAAC,GAAG,CAAC,CAAC;IACnC,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,KAAK,CAAC,IAAI,CAAC;YACT,MAAM,EAAE,OAAO;YACf,KAAK,EAAE,UAAU;YACjB,MAAM,EAAE,iDAAiD;SAC1D,CAAC,CAAC;QACH,SAAS,CAAC,IAAI,CAAC,mDAAmD,CAAC,CAAC;IACtE,CAAC;SAAM,CAAC;QACN,KAAK,CAAC,IAAI,CAAC;YACT,MAAM,EAAE,IAAI;YACZ,KAAK,EAAE,UAAU;YACjB,MAAM,EAAE,aAAa,MAAM,CAAC,SAAS,cAAc,MAAM,CAAC,SAAS,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,WAAW,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE;SACxH,CAAC,CAAC;IACL,CAAC;IAED,qEAAqE;IACrE,sEAAsE;IACtE,kDAAkD;IAClD,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC,KAAK,GAAG,CAAC;IACtD,MAAM,SAAS,GAAG,SAAS,CAAC;QAC1B,OAAO;QACP,SAAS,EAAE,MAAM,EAAE,SAAS,IAAI,IAAI;QACpC,OAAO;KACR,CAAC,CAAC;IACH,KAAK,MAAM,CAAC,IAAI,SAAS,CAAC,KAAK;QAAE,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAC/C,KAAK,MAAM,CAAC,IAAI,SAAS,CAAC,SAAS;QAAE,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAEvD,4DAA4D;IAC5D,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC;IAC7C,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,kBAAkB,CAAC,CAAC;IACjD,IAAI,MAAM,IAAI,QAAQ,EAAE,CAAC;QACvB,KAAK,CAAC,IAAI,CAAC;YACT,MAAM,EAAE,MAAM;YACd,KAAK,EAAE,eAAe;YACtB,MAAM,EAAE,kBAAkB,MAAM,IAAI,SAAS,qBAAqB,QAAQ,CAAC,CAAC,CAAC,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS,EAAE;SACtH,CAAC,CAAC;IACL,CAAC;SAAM,CAAC;QACN,KAAK,CAAC,IAAI,CAAC;YACT,MAAM,EAAE,MAAM;YACd,KAAK,EAAE,eAAe;YACtB,MAAM,EAAE,8EAA8E;SACvF,CAAC,CAAC;IACL,CAAC;IAED,oBAAoB;IACpB,MAAM,aAAa,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,QAAQ,EAAE,YAAY,CAAC,CAAC;IAC7D,IAAI,cAAc,GAAa,EAAE,CAAC;IAClC,IAAI,CAAC;QACH,cAAc,GAAG,EAAE;aAChB,WAAW,CAAC,aAAa,CAAC;aAC1B,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;aACrD,IAAI,EAAE,CAAC;IACZ,CAAC;IAAC,MAAM,CAAC;QACP,cAAc,GAAG,EAAE,CAAC;IACtB,CAAC;IACD,IAAI,cAAc,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAChC,KAAK,CAAC,IAAI,CAAC;YACT,MAAM,EAAE,MAAM;YACd,KAAK,EAAE,YAAY;YACnB,MAAM,EAAE,iBAAiB,aAAa,EAAE;SACzC,CAAC,CAAC;IACL,CAAC;SAAM,CAAC;QACN,KAAK,CAAC,IAAI,CAAC;YACT,MAAM,EAAE,IAAI;YACZ,KAAK,EAAE,YAAY;YACnB,MAAM,EAAE,GAAG,cAAc,CAAC,MAAM,mCAAmC;SACpE,CAAC,CAAC;IACL,CAAC;IAED,wEAAwE;IACxE,sEAAsE;IACtE,gEAAgE;IAChE,IAAI,MAAM,IAAI,CAAC,QAAQ,EAAE,CAAC;QACxB,MAAM,YAAY,GAAG,MAAM,gBAAgB,CAAC,GAAG,CAAC,CAAC;QACjD,KAAK,CAAC,IAAI,CAAC;YACT,MAAM,EAAE,YAAY,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO;YACxC,KAAK,EAAE,mBAAmB;YAC1B,MAAM,EAAE,YAAY,CAAC,MAAM;SAC5B,CAAC,CAAC;QACH,IAAI,CAAC,YAAY,CAAC,EAAE,IAAI,YAAY,CAAC,IAAI;YAAE,SAAS,CAAC,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC;QAE7E,wDAAwD;QACxD,IAAI,YAAY,CAAC,EAAE,EAAE,CAAC;YACpB,MAAM,SAAS,GAAG,MAAM,mBAAmB,CAAC,cAAc,CAAC,CAAC;YAC5D,KAAK,CAAC,IAAI,CAAC;gBACT,MAAM,EAAE,SAAS,CAAC,OAAO,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI;gBAC7C,KAAK,EAAE,kBAAkB;gBACzB,MAAM,EAAE,GAAG,SAAS,CAAC,OAAO,aAAa,SAAS,CAAC,OAAO,UAAU;aACrE,CAAC,CAAC;YACH,IAAI,SAAS,CAAC,OAAO,GAAG,CAAC,EAAE,CAAC;gBAC1B,SAAS,CAAC,IAAI,CAAC,2DAA2D,CAAC,CAAC;YAC9E,CAAC;QACH,CAAC;IACH,CAAC;IAED,mBAAmB;IACnB,KAAK,CAAC,yCAAyC,CAAC,CAAC;IACjD,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC;IACtB,KAAK,MAAM,CAAC,IAAI,KAAK,EAAE,CAAC;QACtB,MAAM,IAAI,GACR,CAAC,CAAC,MAAM,KAAK,IAAI;YACf,CAAC,CAAC,GAAG;YACL,CAAC,CAAC,CAAC,CAAC,MAAM,KAAK,MAAM;gBACnB,CAAC,CAAC,GAAG;gBACL,CAAC,CAAC,CAAC,CAAC,MAAM,KAAK,OAAO;oBACpB,CAAC,CAAC,GAAG;oBACL,CAAC,CAAC,GAAG,CAAC;QACd,KAAK,CAAC,GAAG,IAAI,IAAI,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC;IACrD,CAAC;IAED,gEAAgE;IAChE,iEAAiE;IACjE,2DAA2D;IAC3D,KAAK,CAAC,EAAE,CAAC,CAAC;IACV,IAAI,SAAS,CAAC,UAAU,EAAE,CAAC;QACzB,KAAK,CAAC,kBAAkB,CAAC,CAAC;IAC5B,CAAC;SAAM,CAAC;QACN,KAAK,CAAC,qBAAqB,SAAS,CAAC,kBAAkB,IAAI,iBAAiB,EAAE,CAAC,CAAC;IAClF,CAAC;IAED,IAAI,SAAS,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACzB,KAAK,CAAC,EAAE,CAAC,CAAC;QACV,KAAK,CAAC,aAAa,CAAC,CAAC;QACrB,KAAK,MAAM,CAAC,IAAI,SAAS;YAAE,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;IAC/C,CAAC;SAAM,CAAC;QACN,KAAK,CAAC,EAAE,CAAC,CAAC;QACV,KAAK,CAAC,kDAAkD,CAAC,CAAC;IAC5D,CAAC;AACH,CAAC;AAED,SAAS,cAAc,CAAC,GAAW;IACjC,IAAI,CAAC;QACH,OAAO,iBAAiB,CAAC,GAAG,CAAC,CAAC;IAChC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAQD;;;;;GAKG;AACH,KAAK,UAAU,gBAAgB,CAAC,IAAY;IAC1C,IAAI,CAAC;QACH,MAAM,EAAE,WAAW,EAAE,GAAG,MAAM,MAAM,CAAC,kBAAkB,CAAC,CAAC;QACzD,MAAM,WAAW,EAAE,CAAC;IACtB,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,GAAG,GAAI,GAAa,CAAC,OAAO,CAAC;QACnC,OAAO;YACL,EAAE,EAAE,KAAK;YACT,MAAM,EAAE,uBAAuB,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE;YAClD,IAAI,EAAE,GAAG,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC;gBACjD,CAAC,CAAC,0BAA0B;gBAC5B,CAAC,CAAC,gFAAgF;SACrF,CAAC;IACJ,CAAC;IACD,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC;IAC1C,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,kBAAkB,CAAC,CAAC;IAC9C,IAAI,CAAC,GAAG,IAAI,CAAC,KAAK,EAAE,CAAC;QACnB,OAAO;YACL,EAAE,EAAE,KAAK;YACT,MAAM,EAAE,gEAAgE;YACxE,IAAI,EAAE,gFAAgF;SACvF,CAAC;IACJ,CAAC;IACD,IAAI,CAAC;QACH,MAAM,EAAE,aAAa,EAAE,aAAa,EAAE,oBAAoB,EAAE,GAAG,MAAM,MAAM,CACzE,8BAA8B,CAC/B,CAAC;QACF,MAAM,aAAa,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;QAChC,MAAM,SAAS,GAAG,oBAAoB,EAAE,CAAC;QACzC,aAAa,EAAE,CAAC;QAChB,IAAI,CAAC,SAAS,EAAE,CAAC;YACf,OAAO;gBACL,EAAE,EAAE,KAAK;gBACT,MAAM,EAAE,4DAA4D;gBACpE,IAAI,EAAE,uFAAuF;aAC9F,CAAC;QACJ,CAAC;QACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,gBAAgB,GAAG,EAAE,EAAE,CAAC;IACrD,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO;YACL,EAAE,EAAE,KAAK;YACT,MAAM,EAAE,wBAAyB,GAAa,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE;YACtE,IAAI,EAAE,uEAAuE;SAC9E,CAAC;IACJ,CAAC;AACH,CAAC;AAED,KAAK,UAAU,mBAAmB,CAChC,KAAe;IAEf,IAAI,CAAC;QACH,MAAM,EAAE,aAAa,EAAE,OAAO,EAAE,aAAa,EAAE,GAAG,MAAM,MAAM,CAC5D,8BAA8B,CAC/B,CAAC;QACF,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC,IAAI,EAAE,CAAC;QAChD,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,kBAAkB,CAAC,IAAI,EAAE,CAAC;QACpD,MAAM,aAAa,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;QAChC,IAAI,CAAC;YACH,MAAM,OAAO,CACX,+GAA+G,CAChH,CAAC;YACF,MAAM,GAAG,GAAG,MAAM,OAAO,CAAmB,8BAA8B,CAAC,CAAC;YAC5E,MAAM,YAAY,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;YAC1D,IAAI,OAAO,GAAG,CAAC,CAAC;YAChB,IAAI,OAAO,GAAG,CAAC,CAAC;YAChB,KAAK,MAAM,CAAC,IAAI,KAAK,EAAE,CAAC;gBACtB,MAAM,IAAI,GAAG,IAAI,CAAC,QAAQ,CAAC,CAAC,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC;gBAC/C,IAAI,YAAY,CAAC,GAAG,CAAC,IAAI,CAAC;oBAAE,OAAO,IAAI,CAAC,CAAC;;oBACpC,OAAO,IAAI,CAAC,CAAC;YACpB,CAAC;YACD,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC;QAC9B,CAAC;gBAAS,CAAC;YACT,aAAa,EAAE,CAAC;QAClB,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,OAAO,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC;IAC/C,CAAC;AACH,CAAC"}

package/dist/cli/probeAuth.d.ts

@@ -0,0 +1,44 @@
+export type AuthStatus = 'ok' | 'warn' | 'error' | 'info';
+export interface AuthLine {
+    status: AuthStatus;
+    label: string;
+    detail: string;
+}
+export interface ProbeAuthInput {
+    homeDir: string;
+    projectId: string | null;
+    /** True when running against localhost ugly.bot (UGLY_BOT_LOCAL=1). */
+    isLocal: boolean;
+}
+export interface ProbeAuthResult {
+    /** Human-readable lines, in the order they should be printed. */
+    lines: AuthLine[];
+    /** Hints to show under "Next steps:". */
+    nextSteps: string[];
+    /**
+     * True when the on-disk state is sufficient for a headless agent to
+     * proceed: at minimum a non-expired global user token exists, OR a
+     * non-expired project token of the right kind (cloud/local) exists.
+     * Project tokens are auto-minted from the global user token on first
+     * run, so the global user token is the real prerequisite.
+     */
+    agentReady: boolean;
+    /** When agentReady is false, a one-line reason. */
+    agentBlockedReason?: string;
+    /**
+     * The token an agent should put in `UGLY_BOT_TOKEN`, if one is
+     * available. Prefers the project token (matches what the framework
+     * uses at runtime); falls back to the global user token.
+     */
+    agentToken?: string;
+}
+/**
+ * Inspects the JWT exp claim without verifying the signature. Returns:
+ *   - 'valid'   : exp present and at least 60s in the future
+ *   - 'expired' : exp present and in the past (or within 60s)
+ *   - 'unknown' : token doesn't have a parseable exp — treat as valid
+ *                 since some service tokens are intentionally non-expiring
+ */
+export declare function inspectJwt(token: string): 'valid' | 'expired' | 'unknown';
+export declare function probeAuth(input: ProbeAuthInput): ProbeAuthResult;
+//# sourceMappingURL=probeAuth.d.ts.map

package/dist/cli/probeAuth.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"probeAuth.d.ts","sourceRoot":"","sources":["../../src/cli/probeAuth.ts"],"names":[],"mappings":"AAoBA,MAAM,MAAM,UAAU,GAAG,IAAI,GAAG,MAAM,GAAG,OAAO,GAAG,MAAM,CAAC;AAE1D,MAAM,WAAW,QAAQ;IACvB,MAAM,EAAE,UAAU,CAAC;IACnB,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,cAAc;IAC7B,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,uEAAuE;IACvE,OAAO,EAAE,OAAO,CAAC;CAClB;AAED,MAAM,WAAW,eAAe;IAC9B,iEAAiE;IACjE,KAAK,EAAE,QAAQ,EAAE,CAAC;IAClB,yCAAyC;IACzC,SAAS,EAAE,MAAM,EAAE,CAAC;IACpB;;;;;;OAMG;IACH,UAAU,EAAE,OAAO,CAAC;IACpB,mDAAmD;IACnD,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B;;;;OAIG;IACH,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAyBD;;;;;;GAMG;AACH,wBAAgB,UAAU,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,GAAG,SAAS,GAAG,SAAS,CAYzE;AAyCD,wBAAgB,SAAS,CAAC,KAAK,EAAE,cAAc,GAAG,eAAe,CA0KhE"}

package/dist/cli/probeAuth.js

@@ -0,0 +1,250 @@
+/**
+ * Pure auth-state probe used by `ugly-app doctor` (and by tests).
+ *
+ * Reads the on-disk auth files under a given home directory and returns
+ * a structured report. No side effects, no DataProxy, no network.
+ *
+ *   ~/.ugly-bot/auth.json           — global user identity ({ token, userId, serverUrl })
+ *   ~/.ugly-bot/<projectId>.json    — cloud project token ({ token })
+ *   ~/.ugly-bot/<projectId>.local.json — local project token ({ token })
+ *
+ * The doctor previously only checked the project-level files and
+ * reported "no project token for cloud" as a warning even when a valid
+ * global user identity existed (in which case `dev` / `auth:create-bot`
+ * will mint a project token automatically on first run). Headless
+ * agents reading the report concluded auth was broken and got stuck on
+ * `npx ugly-app login`, which needs a browser.
+ */
+import fs from 'node:fs';
+import path from 'node:path';
+function readJson(filePath) {
+    try {
+        const raw = fs.readFileSync(filePath, 'utf-8');
+        try {
+            const parsed = JSON.parse(raw);
+            if (parsed && typeof parsed === 'object') {
+                return { data: parsed, malformed: false };
+            }
+            return { data: null, malformed: true };
+        }
+        catch {
+            return { data: null, malformed: true };
+        }
+    }
+    catch {
+        return { data: null, malformed: false };
+    }
+}
+/**
+ * Inspects the JWT exp claim without verifying the signature. Returns:
+ *   - 'valid'   : exp present and at least 60s in the future
+ *   - 'expired' : exp present and in the past (or within 60s)
+ *   - 'unknown' : token doesn't have a parseable exp — treat as valid
+ *                 since some service tokens are intentionally non-expiring
+ */
+export function inspectJwt(token) {
+    const parts = token.split('.');
+    if (parts.length !== 3)
+        return 'unknown';
+    try {
+        const payload = JSON.parse(Buffer.from(parts[1], 'base64url').toString('utf-8'));
+        if (typeof payload.exp !== 'number')
+            return 'unknown';
+        return Date.now() / 1000 < payload.exp - 60 ? 'valid' : 'expired';
+    }
+    catch {
+        return 'unknown';
+    }
+}
+function readGlobalAuth(homeDir) {
+    const file = path.join(homeDir, '.ugly-bot', 'auth.json');
+    const { data, malformed } = readJson(file);
+    if (!data)
+        return { auth: null, malformed };
+    if (typeof data.token !== 'string' ||
+        typeof data.userId !== 'string' ||
+        typeof data.serverUrl !== 'string') {
+        return { auth: null, malformed: true };
+    }
+    return {
+        auth: { token: data.token, userId: data.userId, serverUrl: data.serverUrl },
+        malformed: false,
+    };
+}
+function readProjectToken(homeDir, projectId, mode) {
+    const suffix = mode === 'local' ? '.local.json' : '.json';
+    const file = path.join(homeDir, '.ugly-bot', `${projectId}${suffix}`);
+    const { data, malformed } = readJson(file);
+    if (!data)
+        return { token: null, malformed };
+    if (typeof data.token !== 'string')
+        return { token: null, malformed: true };
+    return { token: data.token, malformed: false };
+}
+export function probeAuth(input) {
+    const { homeDir, projectId, isLocal } = input;
+    const lines = [];
+    const nextSteps = [];
+    // 1. Global user identity (~/.ugly-bot/auth.json).
+    const { auth: globalAuth, malformed: globalMalformed } = readGlobalAuth(homeDir);
+    let globalValid = false;
+    if (globalAuth) {
+        const exp = inspectJwt(globalAuth.token);
+        if (exp === 'expired') {
+            lines.push({
+                status: 'warn',
+                label: 'auth (user)',
+                detail: `token expired (userId=${globalAuth.userId})`,
+            });
+            nextSteps.push('Run `npx ugly-app login` to refresh your global user token');
+        }
+        else {
+            globalValid = true;
+            lines.push({
+                status: 'ok',
+                label: 'auth (user)',
+                detail: `signed in as ${globalAuth.userId} (${globalAuth.serverUrl})`,
+            });
+        }
+    }
+    else if (globalMalformed) {
+        lines.push({
+            status: 'error',
+            label: 'auth (user)',
+            detail: '~/.ugly-bot/auth.json is malformed or missing required fields',
+        });
+        nextSteps.push('Delete ~/.ugly-bot/auth.json and re-run `npx ugly-app login`');
+    }
+    else {
+        lines.push({
+            status: 'error',
+            label: 'auth (user)',
+            detail: 'not signed in (no ~/.ugly-bot/auth.json)',
+        });
+        nextSteps.push('Run `npx ugly-app login` once on the host (interactive, opens a browser) — required even for headless agents');
+    }
+    // 2. Project tokens. Without a .uglyapp we have no projectId to look up.
+    let cloudToken = null;
+    let cloudExpired = false;
+    let localToken = null;
+    let localExpired = false;
+    if (projectId) {
+        const cloud = readProjectToken(homeDir, projectId, 'cloud');
+        const local = readProjectToken(homeDir, projectId, 'local');
+        if (cloud.token) {
+            const exp = inspectJwt(cloud.token);
+            if (exp === 'expired') {
+                cloudExpired = true;
+                lines.push({
+                    status: 'warn',
+                    label: 'auth (cloud)',
+                    detail: `cached project token expired (${cloud.token.slice(0, 8)}…)`,
+                });
+                if (!isLocal && globalValid) {
+                    nextSteps.push('Stale cloud project token — `ugly-app dev` will re-mint it from your user token');
+                }
+            }
+            else {
+                cloudToken = cloud.token;
+                lines.push({
+                    status: 'ok',
+                    label: 'auth (cloud)',
+                    detail: `project token present (${cloud.token.slice(0, 8)}…)`,
+                });
+            }
+        }
+        else if (cloud.malformed) {
+            lines.push({
+                status: 'warn',
+                label: 'auth (cloud)',
+                detail: `~/.ugly-bot/${projectId}.json is malformed`,
+            });
+            nextSteps.push(`Delete ~/.ugly-bot/${projectId}.json and re-run \`npx ugly-app dev\` to re-mint`);
+        }
+        else if (globalValid && !isLocal) {
+            // Common case: never run before. Don't scare the agent — it's auto-minted.
+            lines.push({
+                status: 'info',
+                label: 'auth (cloud)',
+                detail: 'no cached project token — will be minted from user token on first run',
+            });
+        }
+        else {
+            lines.push({
+                status: isLocal ? 'info' : 'warn',
+                label: 'auth (cloud)',
+                detail: 'no project token for ugly.bot cloud',
+            });
+            if (!isLocal && !globalValid) {
+                // The "log in first" hint already came from the user line; don't duplicate.
+            }
+        }
+        if (local.token) {
+            const exp = inspectJwt(local.token);
+            if (exp === 'expired') {
+                localExpired = true;
+                lines.push({
+                    status: isLocal ? 'warn' : 'info',
+                    label: 'auth (local)',
+                    detail: `cached local token expired (${local.token.slice(0, 8)}…)`,
+                });
+                if (isLocal) {
+                    nextSteps.push('Stale local project token — `UGLY_BOT_LOCAL=1 npx ugly-app dev` will re-mint it');
+                }
+            }
+            else {
+                localToken = local.token;
+                lines.push({
+                    status: 'ok',
+                    label: 'auth (local)',
+                    detail: `local project token present (${local.token.slice(0, 8)}…)`,
+                });
+            }
+        }
+        else if (local.malformed) {
+            lines.push({
+                status: 'warn',
+                label: 'auth (local)',
+                detail: `~/.ugly-bot/${projectId}.local.json is malformed`,
+            });
+        }
+        else {
+            lines.push({
+                status: isLocal ? (globalValid ? 'info' : 'warn') : 'info',
+                label: 'auth (local)',
+                detail: isLocal && globalValid
+                    ? 'no cached local project token — will be minted on first local run'
+                    : 'no local ugly.bot token',
+            });
+        }
+    }
+    // 3. Agent-ready summary.
+    // For headless tooling, the global user token is what unblocks
+    // everything: project tokens are derived. If we're in local mode we
+    // still want the global token because the local project token is
+    // minted from it.
+    let agentReady = false;
+    let agentBlockedReason;
+    let agentToken;
+    const liveCloud = cloudToken && !cloudExpired ? cloudToken : null;
+    const liveLocal = localToken && !localExpired ? localToken : null;
+    if (globalValid) {
+        agentReady = true;
+        agentToken = isLocal ? (liveLocal ?? globalAuth?.token) : (liveCloud ?? globalAuth?.token);
+    }
+    else if (liveCloud || liveLocal) {
+        // Edge case: project tokens cached but global identity gone. The
+        // project tokens still work for `auth:create-bot` etc., so don't
+        // block, but flag it.
+        agentReady = true;
+        agentToken = isLocal ? (liveLocal ?? liveCloud ?? undefined) : (liveCloud ?? liveLocal ?? undefined);
+    }
+    else {
+        agentReady = false;
+        agentBlockedReason = globalAuth
+            ? 'global user token expired — run `npx ugly-app login`'
+            : 'not signed in — run `npx ugly-app login` on the host';
+    }
+    return { lines, nextSteps, agentReady, agentBlockedReason, agentToken };
+}
+//# sourceMappingURL=probeAuth.js.map

package/dist/cli/probeAuth.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"probeAuth.js","sourceRoot":"","sources":["../../src/cli/probeAuth.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AACH,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AA8C7B,SAAS,QAAQ,CAAC,QAAgB;IAChC,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,EAAE,CAAC,YAAY,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;QAC/C,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAA4B,CAAC;YAC1D,IAAI,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,EAAE,CAAC;gBACzC,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC;YAC5C,CAAC;YACD,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC;QACzC,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC;QACzC,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC;IAC1C,CAAC;AACH,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,UAAU,CAAC,KAAa;IACtC,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC/B,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,SAAS,CAAC;IACzC,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CACxB,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,WAAW,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,CACjC,CAAC;QACtB,IAAI,OAAO,OAAO,CAAC,GAAG,KAAK,QAAQ;YAAE,OAAO,SAAS,CAAC;QACtD,OAAO,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,GAAG,OAAO,CAAC,GAAG,GAAG,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;IACpE,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC;AAQD,SAAS,cAAc,CAAC,OAAe;IAIrC,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,WAAW,EAAE,WAAW,CAAC,CAAC;IAC1D,MAAM,EAAE,IAAI,EAAE,SAAS,EAAE,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC;IAC3C,IAAI,CAAC,IAAI;QAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC;IAC5C,IACE,OAAO,IAAI,CAAC,KAAK,KAAK,QAAQ;QAC9B,OAAO,IAAI,CAAC,MAAM,KAAK,QAAQ;QAC/B,OAAO,IAAI,CAAC,SAAS,KAAK,QAAQ,EAClC,CAAC;QACD,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC;IACzC,CAAC;IACD,OAAO;QACL,IAAI,EAAE,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE;QAC3E,SAAS,EAAE,KAAK;KACjB,CAAC;AACJ,CAAC;AAED,SAAS,gBAAgB,CACvB,OAAe,EACf,SAAiB,EACjB,IAAuB;IAEvB,MAAM,MAAM,GAAG,IAAI,KAAK,OAAO,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,OAAO,CAAC;IAC1D,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,WAAW,EAAE,GAAG,SAAS,GAAG,MAAM,EAAE,CAAC,CAAC;IACtE,MAAM,EAAE,IAAI,EAAE,SAAS,EAAE,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC;IAC3C,IAAI,CAAC,IAAI;QAAE,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC;IAC7C,IAAI,OAAO,IAAI,CAAC,KAAK,KAAK,QAAQ;QAAE,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC;IAC5E,OAAO,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC;AACjD,CAAC;AAED,MAAM,UAAU,SAAS,CAAC,KAAqB;IAC7C,MAAM,EAAE,OAAO,EAAE,SAAS,EAAE,OAAO,EAAE,GAAG,KAAK,CAAC;IAC9C,MAAM,KAAK,GAAe,EAAE,CAAC;IAC7B,MAAM,SAAS,GAAa,EAAE,CAAC;IAE/B,mDAAmD;IACnD,MAAM,EAAE,IAAI,EAAE,UAAU,EAAE,SAAS,EAAE,eAAe,EAAE,GAAG,cAAc,CAAC,OAAO,CAAC,CAAC;IACjF,IAAI,WAAW,GAAG,KAAK,CAAC;IACxB,IAAI,UAAU,EAAE,CAAC;QACf,MAAM,GAAG,GAAG,UAAU,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC;QACzC,IAAI,GAAG,KAAK,SAAS,EAAE,CAAC;YACtB,KAAK,CAAC,IAAI,CAAC;gBACT,MAAM,EAAE,MAAM;gBACd,KAAK,EAAE,aAAa;gBACpB,MAAM,EAAE,yBAAyB,UAAU,CAAC,MAAM,GAAG;aACtD,CAAC,CAAC;YACH,SAAS,CAAC,IAAI,CAAC,4DAA4D,CAAC,CAAC;QAC/E,CAAC;aAAM,CAAC;YACN,WAAW,GAAG,IAAI,CAAC;YACnB,KAAK,CAAC,IAAI,CAAC;gBACT,MAAM,EAAE,IAAI;gBACZ,KAAK,EAAE,aAAa;gBACpB,MAAM,EAAE,gBAAgB,UAAU,CAAC,MAAM,KAAK,UAAU,CAAC,SAAS,GAAG;aACtE,CAAC,CAAC;QACL,CAAC;IACH,CAAC;SAAM,IAAI,eAAe,EAAE,CAAC;QAC3B,KAAK,CAAC,IAAI,CAAC;YACT,MAAM,EAAE,OAAO;YACf,KAAK,EAAE,aAAa;YACpB,MAAM,EAAE,+DAA+D;SACxE,CAAC,CAAC;QACH,SAAS,CAAC,IAAI,CACZ,8DAA8D,CAC/D,CAAC;IACJ,CAAC;SAAM,CAAC;QACN,KAAK,CAAC,IAAI,CAAC;YACT,MAAM,EAAE,OAAO;YACf,KAAK,EAAE,aAAa;YACpB,MAAM,EAAE,0CAA0C;SACnD,CAAC,CAAC;QACH,SAAS,CAAC,IAAI,CACZ,8GAA8G,CAC/G,CAAC;IACJ,CAAC;IAED,yEAAyE;IACzE,IAAI,UAAU,GAAkB,IAAI,CAAC;IACrC,IAAI,YAAY,GAAG,KAAK,CAAC;IACzB,IAAI,UAAU,GAAkB,IAAI,CAAC;IACrC,IAAI,YAAY,GAAG,KAAK,CAAC;IAEzB,IAAI,SAAS,EAAE,CAAC;QACd,MAAM,KAAK,GAAG,gBAAgB,CAAC,OAAO,EAAE,SAAS,EAAE,OAAO,CAAC,CAAC;QAC5D,MAAM,KAAK,GAAG,gBAAgB,CAAC,OAAO,EAAE,SAAS,EAAE,OAAO,CAAC,CAAC;QAE5D,IAAI,KAAK,CAAC,KAAK,EAAE,CAAC;YAChB,MAAM,GAAG,GAAG,UAAU,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;YACpC,IAAI,GAAG,KAAK,SAAS,EAAE,CAAC;gBACtB,YAAY,GAAG,IAAI,CAAC;gBACpB,KAAK,CAAC,IAAI,CAAC;oBACT,MAAM,EAAE,MAAM;oBACd,KAAK,EAAE,cAAc;oBACrB,MAAM,EAAE,iCAAiC,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI;iBACrE,CAAC,CAAC;gBACH,IAAI,CAAC,OAAO,IAAI,WAAW,EAAE,CAAC;oBAC5B,SAAS,CAAC,IAAI,CACZ,iFAAiF,CAClF,CAAC;gBACJ,CAAC;YACH,CAAC;iBAAM,CAAC;gBACN,UAAU,GAAG,KAAK,CAAC,KAAK,CAAC;gBACzB,KAAK,CAAC,IAAI,CAAC;oBACT,MAAM,EAAE,IAAI;oBACZ,KAAK,EAAE,cAAc;oBACrB,MAAM,EAAE,0BAA0B,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI;iBAC9D,CAAC,CAAC;YACL,CAAC;QACH,CAAC;aAAM,IAAI,KAAK,CAAC,SAAS,EAAE,CAAC;YAC3B,KAAK,CAAC,IAAI,CAAC;gBACT,MAAM,EAAE,MAAM;gBACd,KAAK,EAAE,cAAc;gBACrB,MAAM,EAAE,eAAe,SAAS,oBAAoB;aACrD,CAAC,CAAC;YACH,SAAS,CAAC,IAAI,CAAC,sBAAsB,SAAS,kDAAkD,CAAC,CAAC;QACpG,CAAC;aAAM,IAAI,WAAW,IAAI,CAAC,OAAO,EAAE,CAAC;YACnC,2EAA2E;YAC3E,KAAK,CAAC,IAAI,CAAC;gBACT,MAAM,EAAE,MAAM;gBACd,KAAK,EAAE,cAAc;gBACrB,MAAM,EAAE,uEAAuE;aAChF,CAAC,CAAC;QACL,CAAC;aAAM,CAAC;YACN,KAAK,CAAC,IAAI,CAAC;gBACT,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM;gBACjC,KAAK,EAAE,cAAc;gBACrB,MAAM,EAAE,qCAAqC;aAC9C,CAAC,CAAC;YACH,IAAI,CAAC,OAAO,IAAI,CAAC,WAAW,EAAE,CAAC;gBAC7B,4EAA4E;YAC9E,CAAC;QACH,CAAC;QAED,IAAI,KAAK,CAAC,KAAK,EAAE,CAAC;YAChB,MAAM,GAAG,GAAG,UAAU,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;YACpC,IAAI,GAAG,KAAK,SAAS,EAAE,CAAC;gBACtB,YAAY,GAAG,IAAI,CAAC;gBACpB,KAAK,CAAC,IAAI,CAAC;oBACT,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM;oBACjC,KAAK,EAAE,cAAc;oBACrB,MAAM,EAAE,+BAA+B,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI;iBACnE,CAAC,CAAC;gBACH,IAAI,OAAO,EAAE,CAAC;oBACZ,SAAS,CAAC,IAAI,CACZ,iFAAiF,CAClF,CAAC;gBACJ,CAAC;YACH,CAAC;iBAAM,CAAC;gBACN,UAAU,GAAG,KAAK,CAAC,KAAK,CAAC;gBACzB,KAAK,CAAC,IAAI,CAAC;oBACT,MAAM,EAAE,IAAI;oBACZ,KAAK,EAAE,cAAc;oBACrB,MAAM,EAAE,gCAAgC,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI;iBACpE,CAAC,CAAC;YACL,CAAC;QACH,CAAC;aAAM,IAAI,KAAK,CAAC,SAAS,EAAE,CAAC;YAC3B,KAAK,CAAC,IAAI,CAAC;gBACT,MAAM,EAAE,MAAM;gBACd,KAAK,EAAE,cAAc;gBACrB,MAAM,EAAE,eAAe,SAAS,0BAA0B;aAC3D,CAAC,CAAC;QACL,CAAC;aAAM,CAAC;YACN,KAAK,CAAC,IAAI,CAAC;gBACT,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM;gBAC1D,KAAK,EAAE,cAAc;gBACrB,MAAM,EAAE,OAAO,IAAI,WAAW;oBAC5B,CAAC,CAAC,mEAAmE;oBACrE,CAAC,CAAC,yBAAyB;aAC9B,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,0BAA0B;IAC1B,+DAA+D;IAC/D,oEAAoE;IACpE,iEAAiE;IACjE,kBAAkB;IAClB,IAAI,UAAU,GAAG,KAAK,CAAC;IACvB,IAAI,kBAAsC,CAAC;IAC3C,IAAI,UAA8B,CAAC;IAEnC,MAAM,SAAS,GAAG,UAAU,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC;IAClE,MAAM,SAAS,GAAG,UAAU,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC;IAElE,IAAI,WAAW,EAAE,CAAC;QAChB,UAAU,GAAG,IAAI,CAAC;QAClB,UAAU,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC,SAAS,IAAI,UAAU,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,IAAI,UAAU,EAAE,KAAK,CAAC,CAAC;IAC7F,CAAC;SAAM,IAAI,SAAS,IAAI,SAAS,EAAE,CAAC;QAClC,iEAAiE;QACjE,iEAAiE;QACjE,sBAAsB;QACtB,UAAU,GAAG,IAAI,CAAC;QAClB,UAAU,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC,SAAS,IAAI,SAAS,IAAI,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,IAAI,SAAS,IAAI,SAAS,CAAC,CAAC;IACvG,CAAC;SAAM,CAAC;QACN,UAAU,GAAG,KAAK,CAAC;QACnB,kBAAkB,GAAG,UAAU;YAC7B,CAAC,CAAC,sDAAsD;YACxD,CAAC,CAAC,sDAAsD,CAAC;IAC7D,CAAC;IAED,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,UAAU,EAAE,kBAAkB,EAAE,UAAU,EAAE,CAAC;AAC1E,CAAC"}

package/dist/cli/scaffold.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"scaffold.d.ts","sourceRoot":"","sources":["../../src/cli/scaffold.ts"],"names":[],"mappings":"AAcA,wBAAsB,eAAe,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAuExE"}
+{"version":3,"file":"scaffold.d.ts","sourceRoot":"","sources":["../../src/cli/scaffold.ts"],"names":[],"mappings":"AAcA,wBAAsB,eAAe,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CA8ExE"}

package/dist/cli/scaffold.js

@@ -42,6 +42,13 @@ export async function scaffoldProject(projectName) {
     console.log('[ugly-app] Generated server/migrations/001_bootstrap.ts');
     console.log('[ugly-app] Installing dependencies...');
     execSync('pnpm install', { cwd: destDir, stdio: 'inherit' });
+    console.log('[ugly-app] Installing Playwright Chromium browser...');
+    try {
+        execSync('npx playwright install chromium', { cwd: destDir, stdio: 'inherit' });
+    }
+    catch (err) {
+        console.warn('[ugly-app] Playwright browser install failed (non-fatal):', err);
+    }
     const localPort = DEFAULT_LOCAL_PORT;
     // Only alphanumeric — safe for R2 buckets, Postgres usernames, Docker tags
     const generateId = customAlphabet('abcdefghijklmnopqrstuvwxyz0123456789', 10);

package/dist/cli/scaffold.js.map

@@ -1 +1 @@
-{"version":3,"file":"scaffold.js","sourceRoot":"","sources":["../../src/cli/scaffold.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAC;AACzC,OAAO,EAAE,MAAM,UAAU,CAAC;AAC1B,OAAO,EAAE,cAAc,EAAE,MAAM,QAAQ,CAAC;AACxC,OAAO,IAAI,MAAM,MAAM,CAAC;AACxB,OAAO,EAAE,aAAa,EAAE,MAAM,KAAK,CAAC;AACpC,OAAO,EAAE,0BAA0B,EAAE,MAAM,yBAAyB,CAAC;AACrE,OAAO,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAC;AAC/C,OAAO,EAAE,kBAAkB,EAAE,MAAM,uBAAuB,CAAC;AAC3D,OAAO,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAC;AACpD,OAAO,EAAE,kBAAkB,EAAE,MAAM,oBAAoB,CAAC;AAExD,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;AAC/D,MAAM,aAAa,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,iBAAiB,CAAC,CAAC;AAE9D,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,WAAmB;IACvD,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,WAAW,CAAC,CAAC;IAEzD,IAAI,MAAM,EAAE,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;QACjC,MAAM,IAAI,KAAK,CAAC,cAAc,WAAW,kBAAkB,CAAC,CAAC;IAC/D,CAAC;IAED,OAAO,CAAC,GAAG,CAAC,gCAAgC,WAAW,EAAE,CAAC,CAAC;IAC3D,MAAM,EAAE,CAAC,IAAI,CAAC,aAAa,EAAE,OAAO,CAAC,CAAC;IAEtC,sFAAsF;IACtF,MAAM,EAAE,CAAC,MAAM,CACb,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,WAAW,CAAC,EAC/B,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,YAAY,CAAC,CACjC,CAAC;IAEF,iCAAiC;IACjC,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,cAAc,CAAC,CAAC;IACnD,MAAM,GAAG,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;IACvC,GAAG,CAAC,IAAI,GAAG,WAAW,CAAC;IACvB,MAAM,EAAE,CAAC,SAAS,CAAC,OAAO,EAAE,GAAG,EAAE,EAAE,MAAM,EAAE,CAAC,EAAE,CAAC,CAAC;IAEhD,+BAA+B;IAC/B,MAAM,aAAa,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,QAAQ,EAAE,YAAY,CAAC,CAAC;IACjE,MAAM,EAAE,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC;IAE/B,6EAA6E;IAC7E,MAAM,oBAAoB,GAAuG,EAAE,CAAC;IACpI,KAAK,MAAM,CAAC,IAAI,EAAE,GAAG,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,YAAY,CAAC,EAAE,CAAC;QACvD,oBAAoB,CAAC,IAAI,CAAC,GAAG,EAAE,OAAO,EAAG,GAA0F,CAAC,OAAO,EAAE,CAAC;IAChJ,CAAC;IACD,gEAAgE;IAChE,oBAAoB,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC;IAClC,oBAAoB,CAAC,cAAc,CAAC,GAAG,EAAE,CAAC;IAC1C,oBAAoB,CAAC,SAAS,CAAC,GAAG,EAAE,OAAO,EAAE,CAAC,EAAE,MAAM,EAAE,EAAE,cAAc,EAAE,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC;IACnF,oBAAoB,CAAC,WAAW,CAAC,GAAG,EAAE,CAAC;IAEvC,MAAM,aAAa,GAAG,0BAA0B,CAAC,oBAAoB,CAAC,CAAC;IACvE,MAAM,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,kBAAkB,CAAC,EAAE,aAAa,EAAE,OAAO,CAAC,CAAC;IACzF,OAAO,CAAC,GAAG,CAAC,yDAAyD,CAAC,CAAC;IAEvE,OAAO,CAAC,GAAG,CAAC,uCAAuC,CAAC,CAAC;IACrD,QAAQ,CAAC,cAAc,EAAE,EAAE,GAAG,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC,CAAC;IAE7D,MAAM,SAAS,GAAG,kBAAkB,CAAC;IACrC,2EAA2E;IAC3E,MAAM,UAAU,GAAG,cAAc,CAAC,sCAAsC,EAAE,EAAE,CAAC,CAAC;IAC9E,MAAM,SAAS,GAAG,UAAU,EAAE,CAAC;IAC/B,kBAAkB,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,SAAS,EAAE,CAAC,CAAC;IACtD,OAAO,CAAC,GAAG,CAAC,sCAAsC,WAAW,EAAE,CAAC,CAAC;IAEjE,qDAAqD;IACrD,MAAM,eAAe,CAAC,SAAS,EAAE,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,UAAU,CAAC,CAAC,CAAC;IAEjE,OAAO,CAAC,GAAG,CAAC,2CAA2C,CAAC,CAAC;IACzD,QAAQ,CAAC,UAAU,EAAE,EAAE,GAAG,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC,CAAC;IACzD,QAAQ,CAAC,WAAW,EAAE,EAAE,GAAG,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC,CAAC;IAC1D,QAAQ,CAAC,oDAAoD,EAAE;QAC7D,GAAG,EAAE,OAAO;QACZ,KAAK,EAAE,SAAS;KACjB,CAAC,CAAC;IACH,OAAO,CAAC,GAAG,CACT,gFAAgF,CACjF,CAAC;IAEF,OAAO,CAAC,GAAG,CAAC;;OAEP,WAAW;;;CAGjB,CAAC,CAAC;AACH,CAAC"}
+{"version":3,"file":"scaffold.js","sourceRoot":"","sources":["../../src/cli/scaffold.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAC;AACzC,OAAO,EAAE,MAAM,UAAU,CAAC;AAC1B,OAAO,EAAE,cAAc,EAAE,MAAM,QAAQ,CAAC;AACxC,OAAO,IAAI,MAAM,MAAM,CAAC;AACxB,OAAO,EAAE,aAAa,EAAE,MAAM,KAAK,CAAC;AACpC,OAAO,EAAE,0BAA0B,EAAE,MAAM,yBAAyB,CAAC;AACrE,OAAO,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAC;AAC/C,OAAO,EAAE,kBAAkB,EAAE,MAAM,uBAAuB,CAAC;AAC3D,OAAO,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAC;AACpD,OAAO,EAAE,kBAAkB,EAAE,MAAM,oBAAoB,CAAC;AAExD,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;AAC/D,MAAM,aAAa,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,iBAAiB,CAAC,CAAC;AAE9D,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,WAAmB;IACvD,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,WAAW,CAAC,CAAC;IAEzD,IAAI,MAAM,EAAE,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;QACjC,MAAM,IAAI,KAAK,CAAC,cAAc,WAAW,kBAAkB,CAAC,CAAC;IAC/D,CAAC;IAED,OAAO,CAAC,GAAG,CAAC,gCAAgC,WAAW,EAAE,CAAC,CAAC;IAC3D,MAAM,EAAE,CAAC,IAAI,CAAC,aAAa,EAAE,OAAO,CAAC,CAAC;IAEtC,sFAAsF;IACtF,MAAM,EAAE,CAAC,MAAM,CACb,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,WAAW,CAAC,EAC/B,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,YAAY,CAAC,CACjC,CAAC;IAEF,iCAAiC;IACjC,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,cAAc,CAAC,CAAC;IACnD,MAAM,GAAG,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;IACvC,GAAG,CAAC,IAAI,GAAG,WAAW,CAAC;IACvB,MAAM,EAAE,CAAC,SAAS,CAAC,OAAO,EAAE,GAAG,EAAE,EAAE,MAAM,EAAE,CAAC,EAAE,CAAC,CAAC;IAEhD,+BAA+B;IAC/B,MAAM,aAAa,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,QAAQ,EAAE,YAAY,CAAC,CAAC;IACjE,MAAM,EAAE,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC;IAE/B,6EAA6E;IAC7E,MAAM,oBAAoB,GAAuG,EAAE,CAAC;IACpI,KAAK,MAAM,CAAC,IAAI,EAAE,GAAG,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,YAAY,CAAC,EAAE,CAAC;QACvD,oBAAoB,CAAC,IAAI,CAAC,GAAG,EAAE,OAAO,EAAG,GAA0F,CAAC,OAAO,EAAE,CAAC;IAChJ,CAAC;IACD,gEAAgE;IAChE,oBAAoB,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC;IAClC,oBAAoB,CAAC,cAAc,CAAC,GAAG,EAAE,CAAC;IAC1C,oBAAoB,CAAC,SAAS,CAAC,GAAG,EAAE,OAAO,EAAE,CAAC,EAAE,MAAM,EAAE,EAAE,cAAc,EAAE,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC;IACnF,oBAAoB,CAAC,WAAW,CAAC,GAAG,EAAE,CAAC;IAEvC,MAAM,aAAa,GAAG,0BAA0B,CAAC,oBAAoB,CAAC,CAAC;IACvE,MAAM,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,kBAAkB,CAAC,EAAE,aAAa,EAAE,OAAO,CAAC,CAAC;IACzF,OAAO,CAAC,GAAG,CAAC,yDAAyD,CAAC,CAAC;IAEvE,OAAO,CAAC,GAAG,CAAC,uCAAuC,CAAC,CAAC;IACrD,QAAQ,CAAC,cAAc,EAAE,EAAE,GAAG,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC,CAAC;IAE7D,OAAO,CAAC,GAAG,CAAC,sDAAsD,CAAC,CAAC;IACpE,IAAI,CAAC;QACH,QAAQ,CAAC,iCAAiC,EAAE,EAAE,GAAG,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC,CAAC;IAClF,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,CAAC,IAAI,CAAC,2DAA2D,EAAE,GAAG,CAAC,CAAC;IACjF,CAAC;IAED,MAAM,SAAS,GAAG,kBAAkB,CAAC;IACrC,2EAA2E;IAC3E,MAAM,UAAU,GAAG,cAAc,CAAC,sCAAsC,EAAE,EAAE,CAAC,CAAC;IAC9E,MAAM,SAAS,GAAG,UAAU,EAAE,CAAC;IAC/B,kBAAkB,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,SAAS,EAAE,CAAC,CAAC;IACtD,OAAO,CAAC,GAAG,CAAC,sCAAsC,WAAW,EAAE,CAAC,CAAC;IAEjE,qDAAqD;IACrD,MAAM,eAAe,CAAC,SAAS,EAAE,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,UAAU,CAAC,CAAC,CAAC;IAEjE,OAAO,CAAC,GAAG,CAAC,2CAA2C,CAAC,CAAC;IACzD,QAAQ,CAAC,UAAU,EAAE,EAAE,GAAG,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC,CAAC;IACzD,QAAQ,CAAC,WAAW,EAAE,EAAE,GAAG,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC,CAAC;IAC1D,QAAQ,CAAC,oDAAoD,EAAE;QAC7D,GAAG,EAAE,OAAO;QACZ,KAAK,EAAE,SAAS;KACjB,CAAC,CAAC;IACH,OAAO,CAAC,GAAG,CACT,gFAAgF,CACjF,CAAC;IAEF,OAAO,CAAC,GAAG,CAAC;;OAEP,WAAW;;;CAGjB,CAAC,CAAC;AACH,CAAC"}

package/dist/cli/version.d.ts

@@ -1,2 +1,2 @@
-export declare const CLI_VERSION = "0.1.417";
+export declare const CLI_VERSION = "0.1.419";
 //# sourceMappingURL=version.d.ts.map

package/dist/cli/version.js

@@ -1,3 +1,3 @@
 // Auto-generated by prebuild — do not edit manually
-export const CLI_VERSION = "0.1.417";
+export const CLI_VERSION = "0.1.419";
 //# sourceMappingURL=version.js.map

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "ugly-app",
-  "version": "0.1.417",
+  "version": "0.1.419",
   "type": "module",
   "main": "./dist/server/index.js",
   "exports": {

package/src/cli/authCommands.ts

@@ -1,6 +1,7 @@
 import { nanoid } from 'nanoid';
 import { getUglyBotUrl } from '../shared/uglyBotUrl.js';
 import { initDataProxy, pgQuery, stopDataProxy, ensureTable } from '../server/DataProxyClient.js';
+import { migrateTokensFromUglyApp, readAuthToken } from './authStore.js';
 
 export async function createAccount(
   email: string,
@@ -50,13 +51,24 @@ export async function createBot(
 ): Promise<{ userId: string; token: string }> {
   const fs = await import('fs');
   let projectToken = '';
+  let projectId = '';
 
-  // Read from .uglyapp config
+  // Migrate any legacy .uglyapp tokens into ~/.ugly-bot/ first.
+  migrateTokensFromUglyApp(process.cwd());
+
+  // Read projectId (and any leftover inline token) from .uglyapp.
   try {
     const config = JSON.parse(fs.readFileSync('.uglyapp', 'utf-8')) as Record<string, unknown>;
+    if (typeof config.projectId === 'string') projectId = config.projectId;
     if (typeof config.uglyBotToken === 'string') projectToken = config.uglyBotToken;
   } catch { /* no .uglyapp */ }
 
+  // Primary source: ~/.ugly-bot/ auth store (where `npx ugly-app login` writes tokens).
+  if (!projectToken && projectId) {
+    const stored = readAuthToken(projectId);
+    if (stored) projectToken = stored;
+  }
+
   // Fall back to .env for backwards compatibility
   if (!projectToken) {
     try {
@@ -68,7 +80,7 @@ export async function createBot(
 
   if (!projectToken) {
     throw new Error(
-      'uglyBotToken not found in .uglyapp. Run "npx ugly-app login" first.',
+      'No project auth token found. Run "npx ugly-app login" in this project to authenticate.',
     );
   }
 

package/src/cli/doctor.ts

@@ -10,18 +10,29 @@
  */
 
 import fs from 'fs';
+import os from 'os';
 import path from 'path';
 import { readUglyAppConfig } from './uglyappConfig.js';
-import { readAuthToken, readLocalToken } from './authStore.js';
+import { probeAuth, type AuthLine } from './probeAuth.js';
 
-interface DoctorLine {
-  status: 'ok' | 'warn' | 'error' | 'info';
-  label: string;
-  detail: string;
+type DoctorLine = AuthLine;
+
+export interface RunDoctorOptions {
+  /** Override for tests. Defaults to process.cwd(). */
+  cwd?: string;
+  /** Override for tests. Defaults to os.homedir(). */
+  homeDir?: string;
+  /** Skip the live DataProxy / migration probes. Defaults to false. */
+  skipLiveChecks?: boolean;
+  /** Sink for output lines. Defaults to console.log. */
+  print?: (line: string) => void;
 }
 
-export async function runDoctor(): Promise<void> {
-  const cwd = process.cwd();
+export async function runDoctor(options: RunDoctorOptions = {}): Promise<void> {
+  const cwd = options.cwd ?? process.cwd();
+  const homeDir = options.homeDir ?? os.homedir();
+  const print = options.print ?? ((s: string) => console.log(s));
+  const skipLive = options.skipLiveChecks ?? false;
   const lines: DoctorLine[] = [];
   const nextSteps: string[] = [];
 
@@ -42,40 +53,17 @@ export async function runDoctor(): Promise<void> {
     });
   }
 
-  // 2. Auth tokens
+  // 2. Auth tokens — global user identity + per-project cached tokens.
+  // probeAuth() is the single source of truth so test code can exercise
+  // the same logic without spinning up a DataProxy.
   const isLocal = process.env['UGLY_BOT_LOCAL'] === '1';
-  if (config) {
-    const cloudToken = readAuthToken(config.projectId) ?? config.uglyBotToken;
-    const localToken = readLocalToken(config.projectId) ?? config.localToken;
-    if (cloudToken) {
-      lines.push({
-        status: 'ok',
-        label: 'auth (cloud)',
-        detail: `project token present (${cloudToken.slice(0, 8)}…)`,
-      });
-    } else {
-      lines.push({
-        status: isLocal ? 'info' : 'warn',
-        label: 'auth (cloud)',
-        detail: 'no project token for ugly.bot cloud',
-      });
-      if (!isLocal) nextSteps.push('Run `npx ugly-app login` to mint a project token');
-    }
-    if (localToken) {
-      lines.push({
-        status: 'ok',
-        label: 'auth (local)',
-        detail: `local project token present (${localToken.slice(0, 8)}…)`,
-      });
-    } else {
-      lines.push({
-        status: isLocal ? 'warn' : 'info',
-        label: 'auth (local)',
-        detail: 'no local ugly.bot token',
-      });
-      if (isLocal) nextSteps.push('Run `UGLY_BOT_LOCAL=1 npx ugly-app login` to mint a local token');
-    }
-  }
+  const authProbe = probeAuth({
+    homeDir,
+    projectId: config?.projectId ?? null,
+    isLocal,
+  });
+  for (const l of authProbe.lines) lines.push(l);
+  for (const s of authProbe.nextSteps) nextSteps.push(s);
 
   // 3. DataProxy / env inheritance (pre-ensureInfra snapshot)
   const envUrl = process.env['DATA_PROXY_URL'];
@@ -122,7 +110,7 @@ export async function runDoctor(): Promise<void> {
   // 5. Live DataProxy connection check (only when .uglyapp + some token).
   // Gated on config presence so doctor is fast in a half-configured app
   // instead of blocking on a tunnel handshake that can't succeed.
-  if (config) {
+  if (config && !skipLive) {
     const connectCheck = await safeConnectCheck(cwd);
     lines.push({
       status: connectCheck.ok ? 'ok' : 'error',
@@ -146,8 +134,8 @@ export async function runDoctor(): Promise<void> {
   }
 
   // Print the report
-  console.log('ugly-app doctor — child app diagnostics');
-  console.log('═'.repeat(50));
+  print('ugly-app doctor — child app diagnostics');
+  print('═'.repeat(50));
   for (const l of lines) {
     const icon =
       l.status === 'ok'
@@ -157,15 +145,26 @@ export async function runDoctor(): Promise<void> {
           : l.status === 'error'
             ? '✗'
             : '·';
-    console.log(`${icon} ${l.label.padEnd(18)} ${l.detail}`);
+    print(`${icon} ${l.label.padEnd(18)} ${l.detail}`);
   }
+
+  // Agent-ready summary — a single grep-friendly line so headless
+  // tooling (the bot-swarm skill, evals, CI) can decide whether to
+  // proceed without parsing the human-formatted lines above.
+  print('');
+  if (authProbe.agentReady) {
+    print('agent-ready: yes');
+  } else {
+    print(`agent-ready: no — ${authProbe.agentBlockedReason ?? 'auth incomplete'}`);
+  }
+
   if (nextSteps.length > 0) {
-    console.log('');
-    console.log('Next steps:');
-    for (const s of nextSteps) console.log(`  • ${s}`);
+    print('');
+    print('Next steps:');
+    for (const s of nextSteps) print(`  • ${s}`);
   } else {
-    console.log('');
-    console.log('Next steps: nothing obvious — env looks healthy.');
+    print('');
+    print('Next steps: nothing obvious — env looks healthy.');
   }
 }
 

package/src/cli/probeAuth.ts

@@ -0,0 +1,312 @@
+/**
+ * Pure auth-state probe used by `ugly-app doctor` (and by tests).
+ *
+ * Reads the on-disk auth files under a given home directory and returns
+ * a structured report. No side effects, no DataProxy, no network.
+ *
+ *   ~/.ugly-bot/auth.json           — global user identity ({ token, userId, serverUrl })
+ *   ~/.ugly-bot/<projectId>.json    — cloud project token ({ token })
+ *   ~/.ugly-bot/<projectId>.local.json — local project token ({ token })
+ *
+ * The doctor previously only checked the project-level files and
+ * reported "no project token for cloud" as a warning even when a valid
+ * global user identity existed (in which case `dev` / `auth:create-bot`
+ * will mint a project token automatically on first run). Headless
+ * agents reading the report concluded auth was broken and got stuck on
+ * `npx ugly-app login`, which needs a browser.
+ */
+import fs from 'node:fs';
+import path from 'node:path';
+
+export type AuthStatus = 'ok' | 'warn' | 'error' | 'info';
+
+export interface AuthLine {
+  status: AuthStatus;
+  label: string;
+  detail: string;
+}
+
+export interface ProbeAuthInput {
+  homeDir: string;
+  projectId: string | null;
+  /** True when running against localhost ugly.bot (UGLY_BOT_LOCAL=1). */
+  isLocal: boolean;
+}
+
+export interface ProbeAuthResult {
+  /** Human-readable lines, in the order they should be printed. */
+  lines: AuthLine[];
+  /** Hints to show under "Next steps:". */
+  nextSteps: string[];
+  /**
+   * True when the on-disk state is sufficient for a headless agent to
+   * proceed: at minimum a non-expired global user token exists, OR a
+   * non-expired project token of the right kind (cloud/local) exists.
+   * Project tokens are auto-minted from the global user token on first
+   * run, so the global user token is the real prerequisite.
+   */
+  agentReady: boolean;
+  /** When agentReady is false, a one-line reason. */
+  agentBlockedReason?: string;
+  /**
+   * The token an agent should put in `UGLY_BOT_TOKEN`, if one is
+   * available. Prefers the project token (matches what the framework
+   * uses at runtime); falls back to the global user token.
+   */
+  agentToken?: string;
+}
+
+interface JsonReadResult {
+  data: Record<string, unknown> | null;
+  /** Set when the file exists but couldn't be parsed — distinct from "missing". */
+  malformed: boolean;
+}
+
+function readJson(filePath: string): JsonReadResult {
+  try {
+    const raw = fs.readFileSync(filePath, 'utf-8');
+    try {
+      const parsed = JSON.parse(raw) as Record<string, unknown>;
+      if (parsed && typeof parsed === 'object') {
+        return { data: parsed, malformed: false };
+      }
+      return { data: null, malformed: true };
+    } catch {
+      return { data: null, malformed: true };
+    }
+  } catch {
+    return { data: null, malformed: false };
+  }
+}
+
+/**
+ * Inspects the JWT exp claim without verifying the signature. Returns:
+ *   - 'valid'   : exp present and at least 60s in the future
+ *   - 'expired' : exp present and in the past (or within 60s)
+ *   - 'unknown' : token doesn't have a parseable exp — treat as valid
+ *                 since some service tokens are intentionally non-expiring
+ */
+export function inspectJwt(token: string): 'valid' | 'expired' | 'unknown' {
+  const parts = token.split('.');
+  if (parts.length !== 3) return 'unknown';
+  try {
+    const payload = JSON.parse(
+      Buffer.from(parts[1], 'base64url').toString('utf-8'),
+    ) as { exp?: number };
+    if (typeof payload.exp !== 'number') return 'unknown';
+    return Date.now() / 1000 < payload.exp - 60 ? 'valid' : 'expired';
+  } catch {
+    return 'unknown';
+  }
+}
+
+interface GlobalAuth {
+  token: string;
+  userId: string;
+  serverUrl: string;
+}
+
+function readGlobalAuth(homeDir: string): {
+  auth: GlobalAuth | null;
+  malformed: boolean;
+} {
+  const file = path.join(homeDir, '.ugly-bot', 'auth.json');
+  const { data, malformed } = readJson(file);
+  if (!data) return { auth: null, malformed };
+  if (
+    typeof data.token !== 'string' ||
+    typeof data.userId !== 'string' ||
+    typeof data.serverUrl !== 'string'
+  ) {
+    return { auth: null, malformed: true };
+  }
+  return {
+    auth: { token: data.token, userId: data.userId, serverUrl: data.serverUrl },
+    malformed: false,
+  };
+}
+
+function readProjectToken(
+  homeDir: string,
+  projectId: string,
+  mode: 'cloud' | 'local',
+): { token: string | null; malformed: boolean } {
+  const suffix = mode === 'local' ? '.local.json' : '.json';
+  const file = path.join(homeDir, '.ugly-bot', `${projectId}${suffix}`);
+  const { data, malformed } = readJson(file);
+  if (!data) return { token: null, malformed };
+  if (typeof data.token !== 'string') return { token: null, malformed: true };
+  return { token: data.token, malformed: false };
+}
+
+export function probeAuth(input: ProbeAuthInput): ProbeAuthResult {
+  const { homeDir, projectId, isLocal } = input;
+  const lines: AuthLine[] = [];
+  const nextSteps: string[] = [];
+
+  // 1. Global user identity (~/.ugly-bot/auth.json).
+  const { auth: globalAuth, malformed: globalMalformed } = readGlobalAuth(homeDir);
+  let globalValid = false;
+  if (globalAuth) {
+    const exp = inspectJwt(globalAuth.token);
+    if (exp === 'expired') {
+      lines.push({
+        status: 'warn',
+        label: 'auth (user)',
+        detail: `token expired (userId=${globalAuth.userId})`,
+      });
+      nextSteps.push('Run `npx ugly-app login` to refresh your global user token');
+    } else {
+      globalValid = true;
+      lines.push({
+        status: 'ok',
+        label: 'auth (user)',
+        detail: `signed in as ${globalAuth.userId} (${globalAuth.serverUrl})`,
+      });
+    }
+  } else if (globalMalformed) {
+    lines.push({
+      status: 'error',
+      label: 'auth (user)',
+      detail: '~/.ugly-bot/auth.json is malformed or missing required fields',
+    });
+    nextSteps.push(
+      'Delete ~/.ugly-bot/auth.json and re-run `npx ugly-app login`',
+    );
+  } else {
+    lines.push({
+      status: 'error',
+      label: 'auth (user)',
+      detail: 'not signed in (no ~/.ugly-bot/auth.json)',
+    });
+    nextSteps.push(
+      'Run `npx ugly-app login` once on the host (interactive, opens a browser) — required even for headless agents',
+    );
+  }
+
+  // 2. Project tokens. Without a .uglyapp we have no projectId to look up.
+  let cloudToken: string | null = null;
+  let cloudExpired = false;
+  let localToken: string | null = null;
+  let localExpired = false;
+
+  if (projectId) {
+    const cloud = readProjectToken(homeDir, projectId, 'cloud');
+    const local = readProjectToken(homeDir, projectId, 'local');
+
+    if (cloud.token) {
+      const exp = inspectJwt(cloud.token);
+      if (exp === 'expired') {
+        cloudExpired = true;
+        lines.push({
+          status: 'warn',
+          label: 'auth (cloud)',
+          detail: `cached project token expired (${cloud.token.slice(0, 8)}…)`,
+        });
+        if (!isLocal && globalValid) {
+          nextSteps.push(
+            'Stale cloud project token — `ugly-app dev` will re-mint it from your user token',
+          );
+        }
+      } else {
+        cloudToken = cloud.token;
+        lines.push({
+          status: 'ok',
+          label: 'auth (cloud)',
+          detail: `project token present (${cloud.token.slice(0, 8)}…)`,
+        });
+      }
+    } else if (cloud.malformed) {
+      lines.push({
+        status: 'warn',
+        label: 'auth (cloud)',
+        detail: `~/.ugly-bot/${projectId}.json is malformed`,
+      });
+      nextSteps.push(`Delete ~/.ugly-bot/${projectId}.json and re-run \`npx ugly-app dev\` to re-mint`);
+    } else if (globalValid && !isLocal) {
+      // Common case: never run before. Don't scare the agent — it's auto-minted.
+      lines.push({
+        status: 'info',
+        label: 'auth (cloud)',
+        detail: 'no cached project token — will be minted from user token on first run',
+      });
+    } else {
+      lines.push({
+        status: isLocal ? 'info' : 'warn',
+        label: 'auth (cloud)',
+        detail: 'no project token for ugly.bot cloud',
+      });
+      if (!isLocal && !globalValid) {
+        // The "log in first" hint already came from the user line; don't duplicate.
+      }
+    }
+
+    if (local.token) {
+      const exp = inspectJwt(local.token);
+      if (exp === 'expired') {
+        localExpired = true;
+        lines.push({
+          status: isLocal ? 'warn' : 'info',
+          label: 'auth (local)',
+          detail: `cached local token expired (${local.token.slice(0, 8)}…)`,
+        });
+        if (isLocal) {
+          nextSteps.push(
+            'Stale local project token — `UGLY_BOT_LOCAL=1 npx ugly-app dev` will re-mint it',
+          );
+        }
+      } else {
+        localToken = local.token;
+        lines.push({
+          status: 'ok',
+          label: 'auth (local)',
+          detail: `local project token present (${local.token.slice(0, 8)}…)`,
+        });
+      }
+    } else if (local.malformed) {
+      lines.push({
+        status: 'warn',
+        label: 'auth (local)',
+        detail: `~/.ugly-bot/${projectId}.local.json is malformed`,
+      });
+    } else {
+      lines.push({
+        status: isLocal ? (globalValid ? 'info' : 'warn') : 'info',
+        label: 'auth (local)',
+        detail: isLocal && globalValid
+          ? 'no cached local project token — will be minted on first local run'
+          : 'no local ugly.bot token',
+      });
+    }
+  }
+
+  // 3. Agent-ready summary.
+  // For headless tooling, the global user token is what unblocks
+  // everything: project tokens are derived. If we're in local mode we
+  // still want the global token because the local project token is
+  // minted from it.
+  let agentReady = false;
+  let agentBlockedReason: string | undefined;
+  let agentToken: string | undefined;
+
+  const liveCloud = cloudToken && !cloudExpired ? cloudToken : null;
+  const liveLocal = localToken && !localExpired ? localToken : null;
+
+  if (globalValid) {
+    agentReady = true;
+    agentToken = isLocal ? (liveLocal ?? globalAuth?.token) : (liveCloud ?? globalAuth?.token);
+  } else if (liveCloud || liveLocal) {
+    // Edge case: project tokens cached but global identity gone. The
+    // project tokens still work for `auth:create-bot` etc., so don't
+    // block, but flag it.
+    agentReady = true;
+    agentToken = isLocal ? (liveLocal ?? liveCloud ?? undefined) : (liveCloud ?? liveLocal ?? undefined);
+  } else {
+    agentReady = false;
+    agentBlockedReason = globalAuth
+      ? 'global user token expired — run `npx ugly-app login`'
+      : 'not signed in — run `npx ugly-app login` on the host';
+  }
+
+  return { lines, nextSteps, agentReady, agentBlockedReason, agentToken };
+}

package/src/cli/scaffold.ts

@@ -56,6 +56,13 @@ export async function scaffoldProject(projectName: string): Promise<void> {
   console.log('[ugly-app] Installing dependencies...');
   execSync('pnpm install', { cwd: destDir, stdio: 'inherit' });
 
+  console.log('[ugly-app] Installing Playwright Chromium browser...');
+  try {
+    execSync('npx playwright install chromium', { cwd: destDir, stdio: 'inherit' });
+  } catch (err) {
+    console.warn('[ugly-app] Playwright browser install failed (non-fatal):', err);
+  }
+
   const localPort = DEFAULT_LOCAL_PORT;
   // Only alphanumeric — safe for R2 buckets, Postgres usernames, Docker tags
   const generateId = customAlphabet('abcdefghijklmnopqrstuvwxyz0123456789', 10);

package/src/cli/version.ts

@@ -1,2 +1,2 @@
 // Auto-generated by prebuild — do not edit manually
-export const CLI_VERSION = "0.1.417";
+export const CLI_VERSION = "0.1.419";

package/templates/.claude/skills/bot-swarm/SKILL.md

@@ -38,7 +38,21 @@ Run `npx ugly-app url` to get the local server URL. Use this value everywhere (b
 
 - The dev server must be running **without** `--watch` (see below)
 
-- `.env` must have `UGLY_BOT_TOKEN` (from `npx ugly-app login`)
+- Auth must be set up. **Always run `npx ugly-app doctor` first** to verify. The bottom of its output prints a single line:
+
+  ```
+  agent-ready: yes
+  ```
+
+  If it says `agent-ready: no — ...`, follow the reason verbatim. The most common cause is no global user token on the host — the user must run `npx ugly-app login` once interactively (it opens a browser and is **not** runnable from within an unattended agent). Do **not** retry `ugly-app login` from inside the cycle; it will deadlock waiting for browser auth.
+
+  Once `agent-ready: yes`, source the token for downstream `auth:create-bot` / `feedback:submit` calls from `~/.ugly-bot/auth.json`:
+
+  ```bash
+  export UGLY_BOT_TOKEN="$(node -e 'console.log(JSON.parse(require("fs").readFileSync(require("os").homedir()+"/.ugly-bot/auth.json","utf8")).token)')"
+  ```
+
+  Project-scoped tokens under `~/.ugly-bot/<projectId>.json` are minted automatically by `ugly-app dev` from the global token — do not try to mint them manually.
 
 - Playwright must be installed (`npx playwright install chromium`)
 

package/templates/package.json

@@ -57,6 +57,7 @@
     "eslint-plugin-react": "^7.37.0",
     "eslint-plugin-react-hooks": "^5.0.0",
     "html2canvas": "^1.4.1",
+    "playwright": "^1.58.2",
     "tsx": "^4.19.0",
     "typescript": "^5.9.3",
     "typescript-eslint": "^8.0.0",