{
  "kind": "portal-doctor-state",
  "schemaVersion": 1,
  "generatedAt": "2026-08-18T00:24:59.328Z",
  "ok": true,
  "tone": "yellow",
  "full": false,
  "summary": {
    "checkCount": 26,
    "passed": 25,
    "failed": 1,
    "fatal": 12,
    "warn": 10,
    "info": 4,
    "failedFatal": 0,
    "failedWarn": 1,
    "autoFixableFailed": 1,
    "suggested": [
      "bun run vault:health:bake"
    ]
  },
  "byGroup": {
    "linker": {
      "total": 2,
      "failed": 0,
      "fatalFailed": 0
    },
    "bakes": {
      "total": 5,
      "failed": 1,
      "fatalFailed": 0
    },
    "catalog": {
      "total": 5,
      "failed": 0,
      "fatalFailed": 0
    },
    "bunfig": {
      "total": 7,
      "failed": 0,
      "fatalFailed": 0
    },
    "runtime": {
      "total": 3,
      "failed": 0,
      "fatalFailed": 0
    },
    "infra": {
      "total": 4,
      "failed": 0,
      "fatalFailed": 0
    }
  },
  "checks": [
    {
      "id": "linker-config-version",
      "group": "linker",
      "level": "fatal",
      "ok": true,
      "message": "configVersion=1 + workspaces → isolated linker default per Bun docs",
      "autoFixable": false
    },
    {
      "id": "machine-isolated-linker",
      "group": "linker",
      "level": "fatal",
      "ok": true,
      "message": "linker=isolated (source=machine) · globalStore=true",
      "autoFixable": false
    },
    {
      "id": "vault-health-bake",
      "group": "bakes",
      "level": "warn",
      "ok": false,
      "message": "public/registry/vault-health.json stale · 3d ago (>48h) — re-bake",
      "fixCommand": "bun run vault:health:bake",
      "autoFixable": true
    },
    {
      "id": "pass-cli-on-path",
      "group": "bakes",
      "level": "warn",
      "ok": true,
      "message": "pass-cli on PATH · /Users/nolarose/.local/bin/pass-cli",
      "autoFixable": false
    },
    {
      "id": "pass-session-dir-stable",
      "group": "bakes",
      "level": "info",
      "ok": true,
      "message": "Pass session root not created yet (ok until first agent-env)",
      "autoFixable": false
    },
    {
      "id": "capability-map-subset",
      "group": "bakes",
      "level": "warn",
      "ok": true,
      "message": "public/registry/capability-map-subset.json present · 3d ago",
      "autoFixable": true
    },
    {
      "id": "bunfig-state-bake",
      "group": "bakes",
      "level": "info",
      "ok": true,
      "message": "public/registry/bunfig-state.json present · 20d ago",
      "autoFixable": true
    },
    {
      "id": "catalog-json-schema",
      "group": "catalog",
      "level": "fatal",
      "ok": true,
      "message": "config/runtime-flags.json valid · 43 flags · required fields present",
      "autoFixable": false
    },
    {
      "id": "catalog-shortcode-conflict",
      "group": "catalog",
      "level": "fatal",
      "ok": true,
      "message": "7 shortcodes unique per context (no token collisions)",
      "autoFixable": false
    },
    {
      "id": "catalog-bun-help-parity",
      "group": "catalog",
      "level": "fatal",
      "ok": true,
      "message": "all runtime catalog tokens present in bun run --help",
      "autoFixable": false
    },
    {
      "id": "catalog-help-coverage",
      "group": "catalog",
      "level": "warn",
      "ok": true,
      "message": "14 curated flags present in generated BUN_FLAGS_HELP",
      "autoFixable": false
    },
    {
      "id": "catalog-deprecated-flags",
      "group": "catalog",
      "level": "info",
      "ok": true,
      "message": "no deprecated flags in catalog",
      "autoFixable": false
    },
    {
      "id": "bunfig-machine-ssot",
      "group": "bunfig",
      "level": "fatal",
      "ok": true,
      "message": "machine /Users/nolarose/.bunfig.toml has linker/globalStore/age/excludes/cache.dir",
      "autoFixable": false
    },
    {
      "id": "bunfig-xdg-shadow",
      "group": "bunfig",
      "level": "fatal",
      "ok": true,
      "message": "no $XDG_CONFIG_HOME/.bunfig.toml shadow",
      "autoFixable": false
    },
    {
      "id": "bunfig-machine-frozen-lockfile",
      "group": "bunfig",
      "level": "warn",
      "ok": true,
      "message": "machine frozenLockfile=true",
      "autoFixable": false
    },
    {
      "id": "bunfig-project-no-machine-keys",
      "group": "bunfig",
      "level": "fatal",
      "ok": true,
      "message": "project bunfig.toml does not set machine-owned install keys",
      "autoFixable": false
    },
    {
      "id": "bunfig-merge-consistency",
      "group": "bunfig",
      "level": "fatal",
      "ok": true,
      "message": "effective linker=isolated · globalStore=true · cache=machine",
      "autoFixable": false
    },
    {
      "id": "bunfig-release-age-excludes",
      "group": "bunfig",
      "level": "warn",
      "ok": true,
      "message": "minimumReleaseAgeExcludes covers bun-types, @types/bun, @types/node, typescript",
      "autoFixable": false
    },
    {
      "id": "bunfig-no-install-env-overrides",
      "group": "bunfig",
      "level": "fatal",
      "ok": true,
      "message": "no BUN_INSTALL_CACHE_DIR / BUN_INSTALL_GLOBAL_STORE in env",
      "autoFixable": false
    },
    {
      "id": "runtime-env-tls-verification",
      "group": "runtime",
      "level": "fatal",
      "ok": true,
      "message": "TLS certificate verification is enabled.",
      "autoFixable": false
    },
    {
      "id": "runtime-env-control-values",
      "group": "runtime",
      "level": "warn",
      "ok": true,
      "message": "Configured Bun runtime controls use documented values.",
      "autoFixable": false
    },
    {
      "id": "runtime-env-effective-state",
      "group": "runtime",
      "level": "info",
      "ok": true,
      "message": "configured=2/10 · tls=enabled · http=256 · fetch=off · cache=platform · tmp=custom · color=disabled · reload=default · crash-reports=default · bun-options=unset",
      "autoFixable": false
    },
    {
      "id": "infra-access-policy",
      "group": "infra",
      "level": "warn",
      "ok": true,
      "message": ".cloudflare-access.yml valid · ledger=yes · portal=yes",
      "autoFixable": false
    },
    {
      "id": "infra-surfaces-state",
      "group": "infra",
      "level": "warn",
      "ok": true,
      "message": "surfaces-state v2 · total=14 · apexes=2 · accessDomains=3 · crossCheck ok",
      "autoFixable": false
    },
    {
      "id": "infra-ledger-access",
      "group": "infra",
      "level": "fatal",
      "ok": true,
      "message": "ledger · policy has ledger.factory-wager.com (offline · no live probe)",
      "autoFixable": false
    },
    {
      "id": "infra-portal-access",
      "group": "infra",
      "level": "warn",
      "ok": true,
      "message": "portal · policy has score.factory-wager.com/portal (offline · no live probe)",
      "autoFixable": false
    }
  ],
  "cli": "bun run portal:doctor",
  "board": "/portal/doctor/",
  "href": "/registry/doctor-state.json",
  "fingerprintPortable": true,
  "fingerprint": "70d7b84a4210ab64d860774350cf77f1ff7c53fb2baa5b5841bfe307ec866d48"
}