ver 1.3 and 1.3.1

echo-memory.plugin.src/skills/echo-memory/scripts/echo_doctor.py

@@ -13,7 +13,6 @@ Exit: 0 all green · 1 a check is red.
 """
 from __future__ import annotations
 
-import os
 import sys
 from pathlib import Path
 
@@ -31,13 +30,35 @@ def run() -> int:
         reds += 0 if ok else 1
         print(f"  [{'OK ' if ok else 'RED'}] {label}" + (f" — {detail}" if detail else ""))
 
-    print(f"echo doctor — endpoint {echo.BASE}")
+    import echo_config
+    cfg = echo_config.load()
+    print(f"echo doctor — endpoint {cfg['endpoint'] or '(not configured)'}")
 
     # 1. interpreter
     line(sys.version_info >= MIN_PY, f"python >= {MIN_PY[0]}.{MIN_PY[1]}",
          f"running {sys.version_info.major}.{sys.version_info.minor}")
 
-    # 2. reachability + auth + marker, in one GET of the bootstrap marker
+    # 2. machine-local config (owner/endpoint/key). Without a usable endpoint+key
+    #    nothing else can run, so report it clearly before touching the network.
+    #    A still-placeholder `config init` template counts as not configured.
+    ep_real = bool(cfg["endpoint"]) and "your-obsidian-rest-endpoint" not in cfg["endpoint"]
+    key_real = bool(cfg["key"]) and not cfg["key"].startswith("<")
+    line(ep_real, "endpoint configured",
+         f"[{echo_config.source('endpoint')}]" if ep_real
+         else (f"placeholder — edit {echo_config.config_path()}" if cfg["endpoint"]
+               else f"create {echo_config.config_path()} (run `echo.py config init`)"))
+    line(key_real, "API key configured",
+         f"[{echo_config.source('key')}]" if key_real
+         else ("placeholder — not yet filled in" if cfg["key"] else "missing — see `echo.py config`"))
+    line(bool(cfg["owner"]), "vault owner set",
+         cfg["owner"] if cfg["owner"] else "optional, but recommended for third-person writes")
+    if not echo_config.is_configured(cfg):
+        print("\ndoctor: not configured — ask the operator for their key file and install it "
+              "(`echo.py config import <file>`, or `config set --owner … --endpoint … --key …`), "
+              "then re-run.")
+        return 1
+
+    # 3. reachability + auth + marker, in one GET of the bootstrap marker
     status, body = echo.request("GET", echo.vault_url("_agent/echo-vault.md"))
     if status == 0:
         line(False, "vault reachable", body.decode(errors="replace")[:120])
@@ -54,13 +75,7 @@ def run() -> int:
     else:
         line(status < 400, "marker fetch", f"HTTP {status}")
 
-    # 3. key source (M1) + invariants pointer.
-    import echo_secrets
-    key_src = ("ECHO_KEY env" if os.environ.get("ECHO_KEY")
-               else "credentials file" if (echo_secrets._state_dir() / "credentials").exists()
-               else "baked-in fallback (deprecated — see API-KEY-SETUP.md)")
-    line(os.environ.get("ECHO_KEY") is not None or (echo_secrets._state_dir() / "credentials").exists(),
-         "API key source", key_src)
+    # 4. invariants pointer.
     print("  [i] invariants — run `/echo-health` (vault_lint.py) for the full check")
 
     print(f"\ndoctor: {'all green' if reds == 0 else f'{reds} issue(s) — see RED above'}")