youmd 0.8.0 → 0.8.5

package/dist/commands/machine.js

@@ -40,9 +40,16 @@ exports.machineCommand = machineCommand;
 exports.machineSetupCommand = machineSetupCommand;
 const fs = __importStar(require("fs"));
 const path = __importStar(require("path"));
+const os = __importStar(require("os"));
+const readline = __importStar(require("readline"));
 const child_process = __importStar(require("child_process"));
 const chalk_1 = __importDefault(require("chalk"));
 const render_1 = require("../lib/render");
+const config_1 = require("../lib/config");
+const api_1 = require("../lib/api");
+const machine_projects_1 = require("../lib/machine-projects");
+const machine_verify_1 = require("../lib/machine-verify");
+const machine_bootstrap_prompt_1 = require("../lib/machine-bootstrap-prompt");
 // The compiled file lives at dist/commands/machine.js.
 // Walking up two levels lands at the package root, then into scripts/.
 function resolveSkillstackScript(name) {
@@ -56,25 +63,543 @@ function assertScriptExists(scriptPath) {
         process.exit(1);
     }
 }
+function machineProofSyncPayload(proof, reportPath) {
+    return {
+        schemaVersion: proof.schemaVersion,
+        generatedAt: proof.generatedAt,
+        hostName: proof.hostName,
+        platform: proof.platform,
+        rootDir: proof.rootDir,
+        secretValuesExposed: proof.secretValuesExposed,
+        reportPath,
+        source: "cli",
+        agentName: "youmd machine verify",
+        summary: proof.summary,
+    };
+}
+async function persistMachineProofReport(proof, opts) {
+    let latestPath;
+    if (opts.writeReport) {
+        const paths = (0, machine_verify_1.writeMachineVerificationProof)(proof, opts.reportPath ? expandHome(opts.reportPath) : undefined);
+        latestPath = paths.latestPath;
+        console.log("");
+        console.log(chalk_1.default.dim("  proof report: ") + chalk_1.default.cyan(paths.latestPath));
+        console.log(chalk_1.default.dim("  proof archive: ") + chalk_1.default.cyan(paths.archivedPath));
+    }
+    if (opts.syncReport) {
+        const res = await (0, api_1.syncMachineProof)(machineProofSyncPayload(proof, latestPath));
+        if (res.ok && res.data.success) {
+            const action = res.data.created ? "created" : "updated";
+            console.log(chalk_1.default.dim("  proof sync: ") + chalk_1.default.green(`${action} You.md machine record`));
+        }
+        else {
+            console.log(chalk_1.default.hex("#C46A3A")("  proof sync failed") + chalk_1.default.dim(` — ${(0, api_1.apiErrorMessage)(res.data) || `HTTP ${res.status}`}`));
+            process.exitCode = 1;
+        }
+    }
+}
 function printHelp() {
     console.log("");
     console.log("  " + chalk_1.default.bold("youmd machine") + chalk_1.default.dim(" -- cross-machine setup and agent config sync"));
     console.log("");
     console.log("  " + chalk_1.default.hex("#C46A3A")("Commands"));
     console.log("    " + chalk_1.default.cyan("setup") + chalk_1.default.dim("     bootstrap a fresh Mac: clone synced repos, restore skills, guide secrets + daemons"));
+    console.log("    " + chalk_1.default.cyan("projects") + chalk_1.default.dim("  create/clone active You.md project repos into a Desktop code root"));
+    console.log("    " + chalk_1.default.cyan("verify") + chalk_1.default.dim("    audit cloned project readiness without reading secret values"));
+    console.log("    " + chalk_1.default.cyan("prompt") + chalk_1.default.dim("    print a one-command Claude Code/Codex fresh-computer setup prompt"));
     console.log("    " + chalk_1.default.cyan("capture") + chalk_1.default.dim("   snapshot agent config (settings, commands, plugins) into ~/.agent-shared"));
     console.log("    " + chalk_1.default.cyan("restore") + chalk_1.default.dim("   apply ~/.agent-shared/agent-config/ back onto this machine"));
     console.log("");
     console.log("  " + chalk_1.default.dim("Options:"));
-    console.log("    " + chalk_1.default.cyan("--force") + chalk_1.default.dim("   (restore) overwrite existing files without backing them up"));
-    console.log("    " + chalk_1.default.cyan("--dry-run") + chalk_1.default.dim(" (restore) preview what would be written, write nothing"));
+    console.log("    " + chalk_1.default.cyan("--root <dir>") + chalk_1.default.dim("   (projects) workspace root, default ~/Desktop/CODE_YOU"));
+    console.log("    " + chalk_1.default.cyan("--days <n>") + chalk_1.default.dim("     (projects) recent activity window, default 30"));
+    console.log("    " + chalk_1.default.cyan("--limit <n>") + chalk_1.default.dim("    (prompt) portfolio graph project cap, default 80"));
+    console.log("    " + chalk_1.default.cyan("--key <key>") + chalk_1.default.dim("   (prompt) embed a You.md API key for non-interactive login"));
+    console.log("    " + chalk_1.default.cyan("--env-vault <path>") + chalk_1.default.dim(" (prompt) encrypted .env.local vault path to restore"));
+    console.log("    " + chalk_1.default.cyan("--require-env-vault") + chalk_1.default.dim(" (prompt) fail setup proof unless YOUMD_ENV_VAULT is restored"));
+    console.log("    " + chalk_1.default.cyan("--max-clone-projects <n>") + chalk_1.default.dim(" (projects/prompt) cap clones for clean-host proof runs"));
+    console.log("    " + chalk_1.default.cyan("--recent-only") + chalk_1.default.dim(" (projects) skip projects outside the activity window without prompting"));
+    console.log("    " + chalk_1.default.cyan("--include-inactive") + chalk_1.default.dim(" (projects) audit override; include inactive/non-focused portfolio projects"));
+    console.log("    " + chalk_1.default.cyan("--max-projects <n>") + chalk_1.default.dim(" (verify) project scan cap, default 80"));
+    console.log("    " + chalk_1.default.cyan("--install-deps") + chalk_1.default.dim(" (verify) run bounded dependency installs before checks/probes"));
+    console.log("    " + chalk_1.default.cyan("--install-timeout-ms <n>") + chalk_1.default.dim(" (verify) timeout per dependency install, default 180000"));
+    console.log("    " + chalk_1.default.cyan("--max-install-projects <n>") + chalk_1.default.dim(" (verify) package project install cap, default 4"));
+    console.log("    " + chalk_1.default.cyan("--run-checks") + chalk_1.default.dim(" (verify) run bounded package checks after audit"));
+    console.log("    " + chalk_1.default.cyan("--check-scripts <names>") + chalk_1.default.dim(" (verify) comma list, default typecheck,lint,test,build"));
+    console.log("    " + chalk_1.default.cyan("--check-timeout-ms <n>") + chalk_1.default.dim(" (verify) timeout per script, default 120000"));
+    console.log("    " + chalk_1.default.cyan("--max-check-projects <n>") + chalk_1.default.dim(" (verify) package project run cap, default 8"));
+    console.log("    " + chalk_1.default.cyan("--probe-servers") + chalk_1.default.dim(" (verify) start bounded dev servers and probe localhost"));
+    console.log("    " + chalk_1.default.cyan("--server-timeout-ms <n>") + chalk_1.default.dim(" (verify) timeout per server probe, default 45000"));
+    console.log("    " + chalk_1.default.cyan("--max-server-projects <n>") + chalk_1.default.dim(" (verify) dev server probe cap, default 3"));
+    console.log("    " + chalk_1.default.cyan("--server-start-port <n>") + chalk_1.default.dim(" (verify) first localhost probe port, default 4310"));
+    console.log("    " + chalk_1.default.cyan("--write-report") + chalk_1.default.dim(" (verify) write secret-safe JSON proof to ~/.youmd/machine-reports/latest.json"));
+    console.log("    " + chalk_1.default.cyan("--sync-report") + chalk_1.default.dim("  (verify) sync proof summary to the You.md machine dashboard"));
+    console.log("    " + chalk_1.default.cyan("--report-path <path>") + chalk_1.default.dim(" (verify) custom machine proof report path"));
+    console.log("    " + chalk_1.default.cyan("--no-github") + chalk_1.default.dim("  (projects) skip authenticated GitHub recent-repo scan"));
+    console.log("    " + chalk_1.default.cyan("--yes") + chalk_1.default.dim("        (projects) include older projects without prompting"));
+    console.log("    " + chalk_1.default.cyan("--no-clone") + chalk_1.default.dim("   (projects) create directories only"));
+    console.log("    " + chalk_1.default.cyan("--force") + chalk_1.default.dim("      (restore) overwrite existing files without backing them up"));
+    console.log("    " + chalk_1.default.cyan("--dry-run") + chalk_1.default.dim("    preview writes without changing files"));
+    console.log("");
+}
+function createRL() {
+    return readline.createInterface({ input: process.stdin, output: process.stdout });
+}
+function ask(rl, question) {
+    return new Promise((resolve) => {
+        rl.question(question, (answer) => resolve(answer.trim()));
+    });
+}
+function expandHome(input) {
+    return input === "~" || input.startsWith("~/")
+        ? path.join(os.homedir(), input.slice(2))
+        : input;
+}
+function readActiveYouJson() {
+    const bundleDir = (0, config_1.resolveActiveBundleDir)();
+    if (!bundleDir)
+        return null;
+    const youJsonPath = path.join(bundleDir, "you.json");
+    if (!fs.existsSync(youJsonPath))
+        return null;
+    try {
+        return JSON.parse(fs.readFileSync(youJsonPath, "utf-8"));
+    }
+    catch {
+        return null;
+    }
+}
+function commandExists(name) {
+    const result = child_process.spawnSync("sh", ["-lc", `command -v ${name}`], {
+        stdio: "ignore",
+    });
+    return result.status === 0;
+}
+function cloneProject(candidate, targetDir) {
+    if (fs.existsSync(targetDir)) {
+        const entries = fs.readdirSync(targetDir);
+        if (entries.length > 0)
+            return "skipped";
+    }
+    if (!candidate.cloneSpec || !candidate.githubUrl) {
+        fs.mkdirSync(targetDir, { recursive: true });
+        return "created";
+    }
+    fs.mkdirSync(path.dirname(targetDir), { recursive: true });
+    const result = commandExists("gh")
+        ? child_process.spawnSync("gh", ["repo", "clone", candidate.cloneSpec, targetDir], { stdio: "inherit" })
+        : child_process.spawnSync("git", ["clone", candidate.githubUrl, targetDir], { stdio: "inherit" });
+    return result.status === 0 ? "cloned" : "failed";
+}
+function readRecentGithubProjectsFromGh(days) {
+    if (!commandExists("gh"))
+        return [];
+    const result = child_process.spawnSync("gh", [
+        "api",
+        "-X",
+        "GET",
+        "/user/repos",
+        "-F",
+        "sort=pushed",
+        "-F",
+        "direction=desc",
+        "-F",
+        "per_page=100",
+        "-F",
+        "affiliation=owner,collaborator,organization_member",
+        "--paginate",
+        "--jq",
+        ".[] | {name, fullName: .full_name, url: .html_url, pushedAt: .pushed_at, updatedAt: .updated_at, description, homepage, isPrivate: .private}",
+    ], { encoding: "utf-8" });
+    if (result.status !== 0 || !result.stdout.trim())
+        return [];
+    const cutoff = Date.now() - days * 86400000;
+    return result.stdout
+        .split("\n")
+        .map((line) => line.trim())
+        .filter(Boolean)
+        .flatMap((line) => {
+        try {
+            const parsed = JSON.parse(line);
+            if (!parsed.pushedAt || Date.parse(parsed.pushedAt) < cutoff)
+                return [];
+            return [parsed];
+        }
+        catch {
+            return [];
+        }
+    });
+}
+async function machineProjectsCommand(opts = {}) {
+    const youJson = readActiveYouJson();
+    if (!youJson) {
+        console.log(chalk_1.default.hex("#C46A3A")("  no local You.md bundle found."));
+        console.log(chalk_1.default.dim("  run ") + chalk_1.default.cyan("youmd login && youmd pull") + chalk_1.default.dim(" first, then retry: ") + chalk_1.default.cyan("youmd machine projects"));
+        return;
+    }
+    const defaultRoot = path.join(os.homedir(), "Desktop", "CODE_YOU");
+    let rootDir = expandHome(opts.root || defaultRoot);
+    let rl = null;
+    const interactive = process.stdin.isTTY && process.stdout.isTTY;
+    if (!opts.root && interactive) {
+        rl = createRL();
+        const answer = await ask(rl, chalk_1.default.dim(`  code project directory [${rootDir}]: `));
+        if (answer)
+            rootDir = expandHome(answer);
+    }
+    const activeDays = Number(opts.days || 30);
+    let portfolioGraph = null;
+    if ((0, config_1.isAuthenticated)()) {
+        const graphRes = await (0, api_1.getPortfolioGraph)({ includeTasks: true });
+        if (graphRes.ok && graphRes.data) {
+            portfolioGraph = graphRes.data;
+            console.log(chalk_1.default.dim(`  portfolio graph: ${graphRes.data.projects.length} project${graphRes.data.projects.length === 1 ? "" : "s"} / ${graphRes.data.recentTrackedProjects.length} tracked repo${graphRes.data.recentTrackedProjects.length === 1 ? "" : "s"}`));
+        }
+        else {
+            console.log(chalk_1.default.dim(`  portfolio graph: unavailable (${(0, api_1.apiErrorMessage)(graphRes.data) || `HTTP ${graphRes.status}`}); falling back to local bundle + GitHub`));
+        }
+    }
+    else {
+        console.log(chalk_1.default.dim("  portfolio graph: skipped until youmd login completes"));
+    }
+    const githubProjects = opts.github === false ? [] : readRecentGithubProjectsFromGh(activeDays);
+    if (githubProjects.length > 0) {
+        console.log(chalk_1.default.dim(`  github: found ${githubProjects.length} repo${githubProjects.length === 1 ? "" : "s"} pushed within ${activeDays || 30}d`));
+    }
+    else if (opts.github !== false) {
+        console.log(chalk_1.default.dim("  github: no authenticated recent repos found; using local You.md project records"));
+    }
+    const plan = (0, machine_projects_1.buildMachineProjectPlan)(youJson, {
+        rootDir,
+        activeDays: Number.isFinite(activeDays) && activeDays > 0 ? activeDays : 30,
+        githubProjects,
+        portfolioGraph,
+        includeInactive: opts.includeInactive,
+    });
+    let selected = [...plan.recent];
+    if (plan.older.length > 0 && opts.recentOnly) {
+        console.log("");
+        console.log(chalk_1.default.dim(`  skipped ${plan.older.length} project${plan.older.length === 1 ? "" : "s"} outside the ${activeDays || 30}d activity window (--recent-only)`));
+    }
+    else if (plan.older.length > 0) {
+        console.log("");
+        console.log(chalk_1.default.dim(`  older projects outside the ${activeDays || 30}d window:`));
+        for (const candidate of plan.older) {
+            console.log(chalk_1.default.dim(`    - ${candidate.name} (${candidate.reason})`));
+        }
+        if (opts.yes) {
+            selected = selected.concat(plan.older);
+        }
+        else if (interactive) {
+            if (!rl)
+                rl = createRL();
+            for (const candidate of plan.older) {
+                const answer = await ask(rl, chalk_1.default.dim(`  include ${candidate.name}? [y/N]: `));
+                if (answer.toLowerCase() === "y" || answer.toLowerCase() === "yes") {
+                    selected.push(candidate);
+                }
+            }
+        }
+    }
+    rl?.close();
+    const maxCloneProjects = Number(opts.maxCloneProjects || 0);
+    const hasCloneCap = Number.isFinite(maxCloneProjects) && maxCloneProjects > 0;
+    if (hasCloneCap && selected.length > maxCloneProjects) {
+        selected = selected.slice(0, maxCloneProjects);
+    }
+    console.log("");
+    console.log("  " + chalk_1.default.bold("machine project bootstrap"));
+    console.log(chalk_1.default.dim(`  root: ${plan.rootDir}`));
+    console.log(chalk_1.default.dim(`  selected: ${selected.length} project${selected.length === 1 ? "" : "s"}`));
+    if (hasCloneCap) {
+        console.log(chalk_1.default.dim(`  clone cap: ${maxCloneProjects} project${maxCloneProjects === 1 ? "" : "s"} (proof mode)`));
+    }
+    console.log(chalk_1.default.dim(`  graph inputs: ${plan.sourceCounts.portfolioGraphProjects} portfolio project${plan.sourceCounts.portfolioGraphProjects === 1 ? "" : "s"} / ${plan.sourceCounts.portfolioGraphTrackedProjects} graph-tracked repo${plan.sourceCounts.portfolioGraphTrackedProjects === 1 ? "" : "s"} / ${plan.sourceCounts.githubProjects} gh repo${plan.sourceCounts.githubProjects === 1 ? "" : "s"} / ${plan.sourceCounts.bundleProjects} bundle project${plan.sourceCounts.bundleProjects === 1 ? "" : "s"}`));
+    if (plan.sourceCounts.portfolioGraphProjects > 0 && !opts.includeInactive) {
+        console.log(chalk_1.default.dim("  setup gate: Portfolio Graph status=active and focus=Top Priority/Focusing only"));
+    }
+    if (plan.skipped.length > 0) {
+        console.log(chalk_1.default.dim(`  skipped duplicates/unusable/not setup-eligible: ${plan.skipped.length}`));
+    }
+    console.log("");
+    if (selected.length === 0) {
+        console.log(chalk_1.default.dim("  nothing selected. no dirt made on the desktop today."));
+        return;
+    }
+    if (opts.dryRun) {
+        for (const candidate of selected) {
+            const target = path.join(plan.rootDir, candidate.targetDirName);
+            const action = opts.clone === false || !candidate.githubUrl ? "mkdir" : "clone";
+            const meta = [
+                candidate.githubUrl ? `<- ${candidate.githubUrl}` : "",
+                candidate.stackName ? `[${candidate.stackName}]` : "",
+                `source:${candidate.source}`,
+                candidate.focus ? `focus:${candidate.focus.slice(0, 72)}` : "",
+            ].filter(Boolean).join(" ");
+            console.log(`  ${chalk_1.default.cyan(action.padEnd(5))} ${target}${meta ? chalk_1.default.dim(` ${meta}`) : ""}`);
+        }
+        return;
+    }
+    fs.mkdirSync(plan.rootDir, { recursive: true });
+    let cloned = 0;
+    let created = 0;
+    let skipped = 0;
+    let failed = 0;
+    for (const candidate of selected) {
+        const target = path.join(plan.rootDir, candidate.targetDirName);
+        if (opts.clone === false) {
+            if (!fs.existsSync(target)) {
+                fs.mkdirSync(target, { recursive: true });
+                created++;
+                console.log(chalk_1.default.green("  ✓") + chalk_1.default.dim(` ${candidate.targetDirName}`));
+            }
+            else {
+                skipped++;
+                console.log(chalk_1.default.dim(`  - ${candidate.targetDirName} already exists`));
+            }
+            continue;
+        }
+        const result = cloneProject(candidate, target);
+        if (result === "cloned")
+            cloned++;
+        else if (result === "created")
+            created++;
+        else if (result === "skipped")
+            skipped++;
+        else
+            failed++;
+    }
+    console.log("");
+    console.log(chalk_1.default.green(`  done: ${cloned} cloned, ${created} directories created, ${skipped} skipped${failed ? `, ${failed} failed` : ""}`));
+    console.log(chalk_1.default.dim("  next: open Claude Code or Codex from that CODE folder and run ") + chalk_1.default.cyan("you"));
+}
+async function machineVerifyCommand(opts = {}) {
+    const defaultRoot = path.join(os.homedir(), "Desktop", "CODE_YOU");
+    const rootDir = expandHome(opts.root || defaultRoot);
+    const maxProjects = Number(opts.maxProjects || 80);
+    const report = (0, machine_verify_1.buildMachineReadinessReport)(rootDir, Number.isFinite(maxProjects) && maxProjects > 0 ? maxProjects : 80);
+    console.log("");
+    console.log("  " + chalk_1.default.bold("machine readiness audit"));
+    console.log(chalk_1.default.dim(`  root: ${report.rootDir}`));
+    console.log(chalk_1.default.dim(`  scanned: ${report.scanned} project director${report.scanned === 1 ? "y" : "ies"}`));
+    console.log(chalk_1.default.dim(`  git: ${report.totals.gitRepos} / packages: ${report.totals.packageProjects} / env.local: ${report.totals.envLocal} / env examples: ${report.totals.envExample}`));
+    console.log(chalk_1.default.dim(`  agent docs: ${report.totals.agentDocs} / project-context: ${report.totals.projectContext} / ready: ${report.totals.ready} / needs env: ${report.totals.needsEnv} / partial: ${report.totals.partial}`));
+    console.log("");
+    if (report.projects.length === 0) {
+        console.log(chalk_1.default.dim("  no cloned projects found yet. run ") + chalk_1.default.cyan("youmd machine projects") + chalk_1.default.dim(" first."));
+        if (opts.writeReport || opts.syncReport) {
+            const proof = (0, machine_verify_1.buildMachineVerificationProof)({ readiness: report });
+            await persistMachineProofReport(proof, {
+                writeReport: opts.writeReport,
+                syncReport: opts.syncReport,
+                reportPath: opts.reportPath,
+            });
+        }
+        console.log("");
+        return;
+    }
+    for (const project of report.projects) {
+        const statusColor = project.status === "ready"
+            ? chalk_1.default.green
+            : project.status === "needs-env"
+                ? chalk_1.default.yellow
+                : project.status === "empty"
+                    ? chalk_1.default.dim
+                    : chalk_1.default.hex("#C46A3A");
+        const tags = [
+            project.isGitRepo ? "git" : "no-git",
+            project.packageManager || "no-pkg",
+            project.hasEnvLocal ? ".env.local" : project.hasEnvExample ? "env-needed" : "no-env-template",
+            project.hasAgentDocs ? "agent-docs" : "agent-docs-missing",
+        ];
+        console.log(`  ${statusColor(project.status.padEnd(9))} ${chalk_1.default.cyan(project.dirName)} ${chalk_1.default.dim(tags.join(" · "))}`);
+        if (project.remoteUrl)
+            console.log(chalk_1.default.dim(`             remote: ${project.remoteUrl}`));
+        if (project.suggestedChecks.length > 0) {
+            console.log(chalk_1.default.dim(`             checks: ${project.suggestedChecks.slice(0, 4).join(" | ")}`));
+        }
+        for (const note of project.notes.slice(0, 2)) {
+            console.log(chalk_1.default.dim(`             note: ${note}`));
+        }
+    }
+    console.log("");
+    console.log(chalk_1.default.dim("  secret rule: readiness checks only inspect file names and package scripts; .env.local values are never read."));
+    let installReport;
+    let runReport;
+    let probeReport;
+    if (opts.installDeps) {
+        installReport = (0, machine_verify_1.buildMachineInstallReport)(rootDir, {
+            timeoutMs: Number(opts.installTimeoutMs || 180000),
+            maxProjects: Number(opts.maxInstallProjects || 4),
+            scanLimit: Number.isFinite(maxProjects) && maxProjects > 0 ? maxProjects : 80,
+        });
+        console.log("");
+        console.log("  " + chalk_1.default.bold("bounded dependency install"));
+        console.log(chalk_1.default.dim(`  max projects: ${installReport.maxProjects} / timeout: ${installReport.timeoutMs}ms per project`));
+        console.log(chalk_1.default.dim(`  passed: ${installReport.totals.passed} / failed: ${installReport.totals.failed} / timeout: ${installReport.totals.timeout} / skipped: ${installReport.totals.skipped}`));
+        console.log("");
+        if (installReport.results.length === 0) {
+            console.log(chalk_1.default.dim("  no package projects were available for dependency install."));
+            console.log("");
+        }
+        for (const result of installReport.results) {
+            const statusColor = result.status === "passed"
+                ? chalk_1.default.green
+                : result.status === "skipped"
+                    ? chalk_1.default.dim
+                    : result.status === "timeout"
+                        ? chalk_1.default.yellow
+                        : chalk_1.default.hex("#C46A3A");
+            console.log(`  ${statusColor(result.status.padEnd(7))} ${chalk_1.default.cyan(result.dirName)} ${chalk_1.default.dim(result.command)} ${chalk_1.default.dim(`${result.durationMs}ms`)}`);
+            if (result.reason)
+                console.log(chalk_1.default.dim(`           reason: ${result.reason}`));
+            if (result.status !== "passed" && result.status !== "skipped" && result.outputTail) {
+                console.log(chalk_1.default.dim("           output tail:"));
+                for (const line of result.outputTail.split("\n").slice(-12)) {
+                    console.log(chalk_1.default.dim(`             ${line}`));
+                }
+            }
+        }
+        if (installReport.totals.failed > 0 || installReport.totals.timeout > 0) {
+            process.exitCode = 1;
+        }
+    }
+    if (!opts.runChecks && !opts.probeServers) {
+        if (opts.writeReport || opts.syncReport) {
+            const proof = (0, machine_verify_1.buildMachineVerificationProof)({ readiness: report, installs: installReport });
+            await persistMachineProofReport(proof, {
+                writeReport: opts.writeReport,
+                syncReport: opts.syncReport,
+                reportPath: opts.reportPath,
+            });
+        }
+        console.log(chalk_1.default.dim("  run ") + chalk_1.default.cyan("youmd machine verify --install-deps --run-checks --probe-servers") + chalk_1.default.dim(" to install deps, execute bounded checks, and smoke-probe dev servers."));
+        console.log("");
+        return;
+    }
+    if (opts.runChecks) {
+        const checkScripts = opts.checkScripts
+            ? opts.checkScripts.split(",").map((script) => script.trim()).filter(Boolean)
+            : undefined;
+        runReport = (0, machine_verify_1.buildMachineRunChecksReport)(rootDir, {
+            scripts: checkScripts,
+            timeoutMs: Number(opts.checkTimeoutMs || 120000),
+            maxProjects: Number(opts.maxCheckProjects || 8),
+            scanLimit: Number.isFinite(maxProjects) && maxProjects > 0 ? maxProjects : 80,
+        });
+        console.log("");
+        console.log("  " + chalk_1.default.bold("bounded package checks"));
+        console.log(chalk_1.default.dim(`  scripts: ${runReport.requestedScripts.join(", ")}`));
+        console.log(chalk_1.default.dim(`  max projects: ${runReport.maxProjects} / timeout: ${runReport.timeoutMs}ms per script`));
+        console.log(chalk_1.default.dim(`  passed: ${runReport.totals.passed} / failed: ${runReport.totals.failed} / timeout: ${runReport.totals.timeout} / skipped: ${runReport.totals.skipped}`));
+        console.log("");
+        if (runReport.results.length === 0) {
+            console.log(chalk_1.default.dim("  no package projects had requested check scripts."));
+            console.log("");
+        }
+        for (const result of runReport.results) {
+            const statusColor = result.status === "passed"
+                ? chalk_1.default.green
+                : result.status === "skipped"
+                    ? chalk_1.default.dim
+                    : result.status === "timeout"
+                        ? chalk_1.default.yellow
+                        : chalk_1.default.hex("#C46A3A");
+            console.log(`  ${statusColor(result.status.padEnd(7))} ${chalk_1.default.cyan(result.dirName)} ${chalk_1.default.dim(result.command)} ${chalk_1.default.dim(`${result.durationMs}ms`)}`);
+            if (result.reason)
+                console.log(chalk_1.default.dim(`           reason: ${result.reason}`));
+            if (result.status !== "passed" && result.status !== "skipped" && result.outputTail) {
+                console.log(chalk_1.default.dim("           output tail:"));
+                for (const line of result.outputTail.split("\n").slice(-12)) {
+                    console.log(chalk_1.default.dim(`             ${line}`));
+                }
+            }
+        }
+        if (runReport.totals.failed > 0 || runReport.totals.timeout > 0) {
+            process.exitCode = 1;
+        }
+    }
+    if (opts.probeServers) {
+        probeReport = await (0, machine_verify_1.buildMachineServerProbeReport)(rootDir, {
+            timeoutMs: Number(opts.serverTimeoutMs || 45000),
+            maxProjects: Number(opts.maxServerProjects || 3),
+            startPort: Number(opts.serverStartPort || 4310),
+            scanLimit: Number.isFinite(maxProjects) && maxProjects > 0 ? maxProjects : 80,
+        });
+        console.log("");
+        console.log("  " + chalk_1.default.bold("bounded dev server probes"));
+        console.log(chalk_1.default.dim(`  max projects: ${probeReport.maxProjects} / timeout: ${probeReport.timeoutMs}ms per server / first port: ${probeReport.startPort}`));
+        console.log(chalk_1.default.dim(`  passed: ${probeReport.totals.passed} / failed: ${probeReport.totals.failed} / timeout: ${probeReport.totals.timeout} / skipped: ${probeReport.totals.skipped}`));
+        console.log("");
+        if (probeReport.results.length === 0) {
+            console.log(chalk_1.default.dim("  no package projects had a dev script to probe."));
+            console.log("");
+        }
+        for (const result of probeReport.results) {
+            const statusColor = result.status === "passed"
+                ? chalk_1.default.green
+                : result.status === "skipped"
+                    ? chalk_1.default.dim
+                    : result.status === "timeout"
+                        ? chalk_1.default.yellow
+                        : chalk_1.default.hex("#C46A3A");
+            const statusSuffix = result.statusCode ? ` HTTP ${result.statusCode}` : "";
+            console.log(`  ${statusColor(result.status.padEnd(7))} ${chalk_1.default.cyan(result.dirName)} ${chalk_1.default.dim(result.command)} ${chalk_1.default.dim(`${result.url}${statusSuffix} · ${result.durationMs}ms`)}`);
+            if (result.reason)
+                console.log(chalk_1.default.dim(`           reason: ${result.reason}`));
+            if (result.status !== "passed" && result.status !== "skipped" && result.outputTail) {
+                console.log(chalk_1.default.dim("           output tail:"));
+                for (const line of result.outputTail.split("\n").slice(-12)) {
+                    console.log(chalk_1.default.dim(`             ${line}`));
+                }
+            }
+        }
+        if (probeReport.totals.failed > 0 || probeReport.totals.timeout > 0) {
+            process.exitCode = 1;
+        }
+    }
+    if (opts.writeReport || opts.syncReport) {
+        const proof = (0, machine_verify_1.buildMachineVerificationProof)({
+            readiness: report,
+            installs: installReport,
+            checks: runReport,
+            servers: probeReport,
+        });
+        await persistMachineProofReport(proof, {
+            writeReport: opts.writeReport,
+            syncReport: opts.syncReport,
+            reportPath: opts.reportPath,
+        });
+    }
     console.log("");
 }
-function machineCommand(subcommand, opts = {}) {
+async function machineCommand(subcommand, opts = {}) {
     if (!subcommand || subcommand === "help" || subcommand === "--help" || subcommand === "-h") {
         printHelp();
         return;
     }
+    if (subcommand === "projects") {
+        await machineProjectsCommand(opts);
+        return;
+    }
+    if (subcommand === "verify" || subcommand === "readiness" || subcommand === "doctor") {
+        await machineVerifyCommand(opts);
+        return;
+    }
+    if (subcommand === "prompt" || subcommand === "new-computer" || subcommand === "new-machine") {
+        console.log("");
+        console.log((0, machine_bootstrap_prompt_1.buildFreshMachineBootstrapPrompt)({
+            apiKey: opts.key,
+            root: opts.root,
+            days: opts.days,
+            limit: opts.limit,
+            maxCloneProjects: opts.maxCloneProjects,
+            envVaultPath: opts.envVault,
+            requireEnvVault: opts.requireEnvVault,
+        }));
+        console.log("");
+        return;
+    }
     if (subcommand === "setup") {
         const scriptPath = resolveSkillstackScript("bootstrap-new-mac.sh");
         assertScriptExists(scriptPath);
@@ -137,6 +662,6 @@ function machineCommand(subcommand, opts = {}) {
 }
 // Preserve the original export name for any callers that imported it directly.
 function machineSetupCommand() {
-    machineCommand("setup");
+    void machineCommand("setup");
 }
 //# sourceMappingURL=machine.js.map