General Resolution: Unknown tool: bash-check

{"path":"src/lib/widget-auth.ts","replacements":[{"new":"/**\n * Returns the signing secret, or null when identity verification is not\n * configured. Callers must treat null as \"feature off\" rather than crashing:\n * a workspace that never enabled identity verification should still serve\n * anonymous widget traffic, and a forged token must be rejected, not 500.\n */\nfunction secret(): string | null {\n  const s = process.env.WIDGET_SECRET;\n  return s && s.length >= 16 ? s : null;\n}\n\nexport function identityConfigured(): boolean {\n  return secret() !== null;\n}\n\nexport function signIdentity(userId: string, ttlSeconds = 3600): string {\n  const key = secret();\n  if (!key) {\n    throw new Error(\n      \"WIDGET_SECRET is not set (min 16 chars). Generate one with: openssl rand -hex 32\",\n    );\n  }\n  const payload: IdentityPayload = {\n    userId,\n    exp: Math.floor(Date.n