[anurag]

Stacked on #31, which is stacked on #30. Merge those first; GitHub then moves this PR to main.

Changes

• Doctor uses the config validators. scripts/doctor.ts checked APPS_REPO, FACTORY_API_KEY, UI_USERNAME, and UI_PASSWORD with code of its own, including a third copy of the slug regex. Now it runs appsRepo(), apiKey(), and uiCredentials(), the validators that each process runs when it starts, and prints their errors. So doctor cannot pass a value that the gateway refuses.
• One slug. config.ts checks UI_USERNAME with the slug schema of contracts.ts. The gateway gives that name to each run of the UI as its user, and the request schema checks user with the same slug. Before, two copies of the regex had to agree.
• One join of service directories. verify-app joined the rootDir of a service onto the app directory with resolveServiceDir(), and the Blueprint with joinServiceDir(), with slightly different rules. Now both use joinServiceDir() in blueprint.ts, so they agree on each directory. It also accepts a path that is the full base, which gave a doubled path in verify-app.

Not changed

• The copies of sleep(). I proposed setTimeout from node:timers/promises, but vitest's fake timers do not control it: a probe test timed out. The render, teardown, and workflow tests skip their poll intervals with fake timers, so they would really wait. The copies stay.

Verification

• npm run check passes: 372 tests. tests/blueprint.test.ts tests joinServiceDir() with relative and absolute bases.
• Doctor, run locally with no values, with a bad UI_USERNAME, and with good values, prints the error of each validator, or its OK message.

🤖 Generated with Claude Code