@ai-dossier/cli 0.13.0 → 0.18.0

package/dist/gh.d.ts

@@ -0,0 +1,155 @@
+/**
+ * Shared subprocess plumbing for issue-comment-backed protocols (runstate:v1,
+ * plan:v1).
+ *
+ * Every command that reads or writes GitHub issue comments through `gh` needs the
+ * same things: run a subprocess and keep WHY it failed, turn `gh`'s stderr into a
+ * named cause with a fix, parse `--json` output without a throw, and reject
+ * values that cannot be safely passed on a command line. These lived privately in
+ * `commands/runstate.ts` until the second consumer (`commands/plan.ts`) arrived;
+ * they are extracted verbatim rather than reimplemented per command — and anything
+ * BOTH command suites do (fetch comments, post a comment, print a dry-run) lives
+ * here once, not twice.
+ */
+/**
+ * Fail on stderr and exit 1, so a calling dossier can detect it.
+ *
+ * Each entry is one problem. An entry may span lines: the first gets the ❌, the rest are
+ * indented under it, which is how a cause line and its "Fix:" line stay visibly one item.
+ */
+export declare function fail(lines: string[]): never;
+/** Why a subprocess did not produce output — enough to name the actual cause. */
+export interface ExecFailure {
+    /** The binary itself is missing from PATH (ENOENT), rather than having exited non-zero. */
+    notFound: boolean;
+    /** The process was killed after {@link EXEC_TIMEOUT_MS} instead of answering. */
+    timedOut: boolean;
+    /** Exit status, or null when the process never ran or was killed by a signal. */
+    status: number | null;
+    /** Whatever the command wrote to stderr, falling back to the thrown message. */
+    stderr: string;
+}
+export type ExecResult = {
+    ok: true;
+    stdout: string;
+} | {
+    ok: false;
+    error: ExecFailure;
+};
+/**
+ * Run a command, keeping WHY it failed.
+ *
+ * The whole point of the comment-protocol subcommands is that agents were silently
+ * getting things wrong, so a discarded stderr is the one thing we cannot afford:
+ * "gh is not installed", "gh is not logged in", and "issue 440 does not exist" need
+ * three different fixes and are indistinguishable without it. A hard timeout keeps a
+ * network-stalled gh from hanging an agent-driven run with nothing to debug.
+ */
+export declare function exec(file: string, args: string[]): ExecResult;
+/**
+ * Collapse output to one bounded line so a huge or binary payload stays readable.
+ * Control characters (ANSI/OSC escapes included) are stripped — snippets come from
+ * network-reachable comment bodies, and a terminal escape re-emitted raw can
+ * rewrite the operator's screen or clipboard.
+ */
+export declare function snippet(text: string, max?: number): string;
+/**
+ * `JSON.parse` for a `gh --json` payload: `null` instead of a throw, and the caller's
+ * declared shape instead of `any`. Every gh call here reads a `--json` payload, so all
+ * call sites need the same "gh exited 0 but printed something that is not JSON" branch —
+ * they differ only in what they say about it. Fields stay `unknown` because gh's output is
+ * remote data — {@link asString} narrows each one at the point of use.
+ */
+export declare function parseGhJson<T>(raw: string): T | null;
+/** A JSON field as a string, or `fallback` when gh omitted it or sent another type. */
+export declare function asString(value: unknown, fallback?: string): string;
+/**
+ * Turn a failed `gh` invocation into a message that names the cause and the fix.
+ *
+ * `action` is what we were trying to do, e.g. "Could not read issue #440".
+ */
+export declare function ghFailure(action: string, err: ExecFailure, repo?: string): string;
+/** GitHub issue numbers are positive integers; anything else is a caller mistake. */
+export declare function isIssueNumber(value: string): boolean;
+/** Reject a non-numeric `--issue` here rather than letting gh (or `mint`) fail obscurely. */
+export declare function requireIssueNumber(issue: string): void;
+/** `--repo owner/name` appended to a gh invocation when the caller supplied one. */
+export declare function repoArgs(repo?: string): string[];
+/** Reject a `--repo` that is not a repository slug before handing it to gh. */
+export declare function requireRepoSlug(repo?: string): void;
+/**
+ * The `--issue`/`--repo` checks every issue-targeting subcommand runs before it starts.
+ * Kept together so a new subcommand cannot pick up one guard and miss the other.
+ */
+export declare function requireIssueTarget(options: {
+    issue: string;
+    repo?: string;
+}): void;
+/**
+ * Whether a value read back OUT of a comment may be passed to `git`/`gh`.
+ *
+ * These values are attacker-reachable: anyone who can comment on the issue can post a
+ * protocol comment, so values like `branch=`, `head=` and `pr=` arrive from the network
+ * rather than from the caller. Every invocation here is `execFileSync` with an argument
+ * array and no shell, so there is no command injection — but a value that begins with `-`
+ * is still read as a FLAG rather than as data. `gh` (cobra) parses flags interspersed with
+ * positionals, so `pr=--repo=someone/else` or `pr=--web` would silently retarget, or add a
+ * side effect to, a subcommand documented as strictly read-only.
+ */
+export declare function isSafeArg(value: string): boolean;
+/**
+ * Paths are only ever passed in value position (`git -C <path>`) or to `fs.statSync`, so
+ * they cannot be mistaken for a flag — but the protocol requires them absolute, and a
+ * relative path from a forged comment would resolve against whatever directory the agent
+ * happens to be in.
+ */
+export declare function isSafePath(value: string): boolean;
+/** Formats why a local `git` probe could not answer — shared by every git-reading command. */
+export declare function gitFailure(err: ExecFailure): string;
+/** A comment as gh reports it; every field but `body` may be absent. */
+export interface GhComment {
+    body?: unknown;
+    url?: unknown;
+    createdAt?: unknown;
+    author?: {
+        login?: unknown;
+    } | null;
+    authorAssociation?: unknown;
+}
+/** A comment-read, or the one reason it could not be read. */
+export type CommentsResult = {
+    ok: true;
+    comments: GhComment[];
+} | {
+    ok: false;
+    error: string;
+};
+/**
+ * Read an issue's comments through gh, reporting WHY rather than exiting.
+ *
+ * The single-issue subcommands turn a failure here into an immediate exit; `stats
+ * --issues` cannot, because one unreadable issue in a set must not discard the rest. So
+ * the decision of what a failure means belongs to the caller, and this function only
+ * reports it.
+ */
+export declare function tryFetchComments(issue: string, repo?: string): CommentsResult;
+/** `--dry-run` support for comment-posting subcommands: show the body, post nothing. */
+export declare function printDryRun(body: string, json?: boolean, extra?: Record<string, unknown>): void;
+/**
+ * Comment `body` onto an issue, with the shared failure taxonomy, the paste-safe retry
+ * hint, and the success output both protocols use.
+ *
+ * `jsonExtras` merge into the `--json` result (e.g. `head` for plans); `successLine`
+ * renders the human-mode success line for the caller's protocol.
+ */
+export declare function postIssueComment(options: {
+    issue: string;
+    repo?: string;
+    body: string;
+    noun: string;
+    action: string;
+    json?: boolean;
+    jsonExtras?: Record<string, unknown>;
+    successLine: (url: string) => string;
+}): void;
+//# sourceMappingURL=gh.d.ts.map

package/dist/gh.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"gh.d.ts","sourceRoot":"","sources":["../src/gh.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAOH;;;;;GAKG;AACH,wBAAgB,IAAI,CAAC,KAAK,EAAE,MAAM,EAAE,GAAG,KAAK,CAO3C;AAKD,iFAAiF;AACjF,MAAM,WAAW,WAAW;IAC1B,2FAA2F;IAC3F,QAAQ,EAAE,OAAO,CAAC;IAClB,iFAAiF;IACjF,QAAQ,EAAE,OAAO,CAAC;IAClB,iFAAiF;IACjF,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,gFAAgF;IAChF,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,MAAM,UAAU,GAAG;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,GAAG;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,KAAK,EAAE,WAAW,CAAA;CAAE,CAAC;AAE1F;;;;;;;;GAQG;AACH,wBAAgB,IAAI,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,UAAU,CAyB7D;AASD;;;;;GAKG;AACH,wBAAgB,OAAO,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,SAAiB,GAAG,MAAM,CAMlE;AA0DD;;;;;;GAMG;AACH,wBAAgB,WAAW,CAAC,CAAC,EAAE,GAAG,EAAE,MAAM,GAAG,CAAC,GAAG,IAAI,CAMpD;AAED,uFAAuF;AACvF,wBAAgB,QAAQ,CAAC,KAAK,EAAE,OAAO,EAAE,QAAQ,SAAK,GAAG,MAAM,CAE9D;AAED;;;;GAIG;AACH,wBAAgB,SAAS,CAAC,MAAM,EAAE,MAAM,EAAE,GAAG,EAAE,WAAW,EAAE,IAAI,CAAC,EAAE,MAAM,GAAG,MAAM,CA2BjF;AAED,qFAAqF;AACrF,wBAAgB,aAAa,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAEpD;AAED,6FAA6F;AAC7F,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI,CAMtD;AAED,oFAAoF;AACpF,wBAAgB,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,GAAG,MAAM,EAAE,CAEhD;AAMD,+EAA+E;AAC/E,wBAAgB,eAAe,CAAC,IAAI,CAAC,EAAE,MAAM,GAAG,IAAI,CAOnD;AAED;;;GAGG;AACH,wBAAgB,kBAAkB,CAAC,OAAO,EAAE;IAAE,KAAK,EAAE,MAAM,CAAC;IAAC,IAAI,CAAC,EAAE,MAAM,CAAA;CAAE,GAAG,IAAI,CAGlF;AAWD;;;;;;;;;;GAUG;AACH,wBAAgB,SAAS,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAEhD;AAED;;;;;GAKG;AACH,wBAAgB,UAAU,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAEjD;AAED,8FAA8F;AAC9F,wBAAgB,UAAU,CAAC,GAAG,EAAE,WAAW,GAAG,MAAM,CAMnD;AAKD,wEAAwE;AACxE,MAAM,WAAW,SAAS;IACxB,IAAI,CAAC,EAAE,OAAO,CAAC;IACf,GAAG,CAAC,EAAE,OAAO,CAAC;IACd,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB,MAAM,CAAC,EAAE;QAAE,KAAK,CAAC,EAAE,OAAO,CAAA;KAAE,GAAG,IAAI,CAAC;IACpC,iBAAiB,CAAC,EAAE,OAAO,CAAC;CAC7B;AAED,8DAA8D;AAC9D,MAAM,MAAM,cAAc,GAAG;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,QAAQ,EAAE,SAAS,EAAE,CAAA;CAAE,GAAG;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,CAAC;AAEhG;;;;;;;GAOG;AACH,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,MAAM,GAAG,cAAc,CAsB7E;AAED,wFAAwF;AACxF,wBAAgB,WAAW,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,OAAO,EAAE,KAAK,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAM/F;AAqBD;;;;;;GAMG;AACH,wBAAgB,gBAAgB,CAAC,OAAO,EAAE;IACxC,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,CAAC,EAAE,OAAO,CAAC;IACf,UAAU,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACrC,WAAW,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,MAAM,CAAC;CACtC,GAAG,IAAI,CAqBP"}

package/dist/gh.js

@@ -0,0 +1,357 @@
+"use strict";
+/**
+ * Shared subprocess plumbing for issue-comment-backed protocols (runstate:v1,
+ * plan:v1).
+ *
+ * Every command that reads or writes GitHub issue comments through `gh` needs the
+ * same things: run a subprocess and keep WHY it failed, turn `gh`'s stderr into a
+ * named cause with a fix, parse `--json` output without a throw, and reject
+ * values that cannot be safely passed on a command line. These lived privately in
+ * `commands/runstate.ts` until the second consumer (`commands/plan.ts`) arrived;
+ * they are extracted verbatim rather than reimplemented per command — and anything
+ * BOTH command suites do (fetch comments, post a comment, print a dry-run) lives
+ * here once, not twice.
+ */
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.fail = fail;
+exports.exec = exec;
+exports.snippet = snippet;
+exports.parseGhJson = parseGhJson;
+exports.asString = asString;
+exports.ghFailure = ghFailure;
+exports.isIssueNumber = isIssueNumber;
+exports.requireIssueNumber = requireIssueNumber;
+exports.repoArgs = repoArgs;
+exports.requireRepoSlug = requireRepoSlug;
+exports.requireIssueTarget = requireIssueTarget;
+exports.isSafeArg = isSafeArg;
+exports.isSafePath = isSafePath;
+exports.gitFailure = gitFailure;
+exports.tryFetchComments = tryFetchComments;
+exports.printDryRun = printDryRun;
+exports.postIssueComment = postIssueComment;
+const node_child_process_1 = require("node:child_process");
+const node_fs_1 = __importDefault(require("node:fs"));
+const node_os_1 = __importDefault(require("node:os"));
+const node_path_1 = __importDefault(require("node:path"));
+/**
+ * Fail on stderr and exit 1, so a calling dossier can detect it.
+ *
+ * Each entry is one problem. An entry may span lines: the first gets the ❌, the rest are
+ * indented under it, which is how a cause line and its "Fix:" line stay visibly one item.
+ */
+function fail(lines) {
+    for (const line of lines) {
+        const [first, ...rest] = line.split('\n');
+        console.error(`❌ ${first}`);
+        for (const cont of rest)
+            console.error(`   ${cont}`);
+    }
+    process.exit(1);
+}
+/** How long any single gh/git subprocess may run before it is killed. */
+const EXEC_TIMEOUT_MS = 120_000;
+/**
+ * Run a command, keeping WHY it failed.
+ *
+ * The whole point of the comment-protocol subcommands is that agents were silently
+ * getting things wrong, so a discarded stderr is the one thing we cannot afford:
+ * "gh is not installed", "gh is not logged in", and "issue 440 does not exist" need
+ * three different fixes and are indistinguishable without it. A hard timeout keeps a
+ * network-stalled gh from hanging an agent-driven run with nothing to debug.
+ */
+function exec(file, args) {
+    try {
+        const stdout = (0, node_child_process_1.execFileSync)(file, args, {
+            encoding: 'utf8',
+            stdio: ['ignore', 'pipe', 'pipe'],
+            timeout: EXEC_TIMEOUT_MS,
+        });
+        return { ok: true, stdout: String(stdout).trim() };
+    }
+    catch (err) {
+        const e = err;
+        const stderr = String(e?.stderr ?? '').trim() || String(e?.message ?? '').trim();
+        return {
+            ok: false,
+            error: {
+                notFound: e?.code === 'ENOENT',
+                timedOut: e?.killed === true,
+                status: typeof e?.status === 'number' ? e.status : null,
+                stderr,
+            },
+        };
+    }
+}
+/** Characters of command output kept in a top-level failure message. */
+const SNIPPET_LENGTH = 300;
+/** Control characters that have no place in output a terminal will render. */
+// biome-ignore lint/suspicious/noControlCharactersInRegex: matching (and stripping) control characters is exactly this regex's job
+const CONTROL_CHARS_RE = /[\u0000-\u0008\u000b-\u001f\u007f\u009b]/g;
+/**
+ * Collapse output to one bounded line so a huge or binary payload stays readable.
+ * Control characters (ANSI/OSC escapes included) are stripped — snippets come from
+ * network-reachable comment bodies, and a terminal escape re-emitted raw can
+ * rewrite the operator's screen or clipboard.
+ */
+function snippet(text, max = SNIPPET_LENGTH) {
+    const oneLine = text.replace(CONTROL_CHARS_RE, '').replace(/\s+/g, ' ').trim();
+    if (oneLine === '')
+        return '(no output)';
+    return oneLine.length > max
+        ? `${oneLine.slice(0, max)}… (${oneLine.length} characters total)`
+        : oneLine;
+}
+const GH_FAILURE_CASES = [
+    {
+        match: [
+            'gh auth login',
+            'not logged',
+            'authentication',
+            'unauthorized',
+            'http 401',
+            'bad credentials',
+        ],
+        cause: () => 'gh is not authenticated.',
+        fix: `Fix: run 'gh auth login', confirm with 'gh auth status', then re-run.`,
+    },
+    {
+        match: ['could not resolve to', 'not found', 'http 404'],
+        cause: (where) => `GitHub could not find it in ${where}.`,
+        fix: `Fix: check the number is right and that the repository is the one you mean — pass --repo <owner/name> when running outside it.`,
+    },
+    {
+        // Ahead of the 403 case on purpose: gh reports rate limiting AS an HTTP 403, so without
+        // this the operator is told to fix their permissions — which are fine. Sequential reads
+        // over an issue set can fire enough calls to make this a realistic failure.
+        match: ['rate limit', 'secondary rate', 'abuse detection', 'http 429'],
+        cause: () => 'GitHub rate-limited the request.',
+        fix: `Fix: wait for the window to reset ('gh api rate_limit' shows when), then re-run; narrow the issue set to read fewer issues per run.`,
+    },
+    {
+        match: ['http 403', 'permission', 'write access', 'forbidden'],
+        cause: (where) => `GitHub refused the request — the authenticated account lacks access to ${where}.`,
+        fix: `Fix: check the account and its scopes with 'gh auth status'; reading an issue needs read access to the repository, and posting a comment needs write.`,
+    },
+    {
+        match: ['dial tcp', 'no such host', 'timeout', 'connection refused', 'network is unreachable'],
+        cause: () => 'gh could not reach GitHub.',
+        fix: `Fix: check network/proxy access to github.com and re-run; this is transient, so a retry is usually enough.`,
+    },
+];
+/**
+ * `JSON.parse` for a `gh --json` payload: `null` instead of a throw, and the caller's
+ * declared shape instead of `any`. Every gh call here reads a `--json` payload, so all
+ * call sites need the same "gh exited 0 but printed something that is not JSON" branch —
+ * they differ only in what they say about it. Fields stay `unknown` because gh's output is
+ * remote data — {@link asString} narrows each one at the point of use.
+ */
+function parseGhJson(raw) {
+    try {
+        return JSON.parse(raw);
+    }
+    catch {
+        return null;
+    }
+}
+/** A JSON field as a string, or `fallback` when gh omitted it or sent another type. */
+function asString(value, fallback = '') {
+    return typeof value === 'string' ? value : fallback;
+}
+/**
+ * Turn a failed `gh` invocation into a message that names the cause and the fix.
+ *
+ * `action` is what we were trying to do, e.g. "Could not read issue #440".
+ */
+function ghFailure(action, err, repo) {
+    if (err.notFound) {
+        return [
+            `${action}: 'gh' is not installed, or is not on PATH.`,
+            `Fix: install the GitHub CLI (https://cli.github.com), then re-run. Check with: gh --version`,
+        ].join('\n');
+    }
+    // Named ahead of the taxonomy: a kill leaves no stderr to match on, and "check the
+    // network" is the one fix that fits every stall.
+    if (err.timedOut) {
+        return [
+            `${action}: gh did not answer within ${EXEC_TIMEOUT_MS / 1000}s.`,
+            `Fix: the call was killed as stalled — check network/proxy access, then re-run.`,
+        ].join('\n');
+    }
+    const hint = err.stderr.toLowerCase();
+    const where = repo ? `--repo ${repo}` : 'the current repository (no --repo was passed)';
+    const matched = GH_FAILURE_CASES.find((c) => c.match.some((needle) => hint.includes(needle)));
+    const cause = matched
+        ? `${action}: ${matched.cause(where)}`
+        : `${action}: gh exited ${err.status === null ? 'abnormally' : `with status ${err.status}`}.`;
+    const fix = matched?.fix ?? `Fix: run the same gh command by hand to see the full error.`;
+    return [cause, fix, `gh said: ${snippet(err.stderr)}`].join('\n');
+}
+/** GitHub issue numbers are positive integers; anything else is a caller mistake. */
+function isIssueNumber(value) {
+    return /^[1-9]\d*$/.test(value);
+}
+/** Reject a non-numeric `--issue` here rather than letting gh (or `mint`) fail obscurely. */
+function requireIssueNumber(issue) {
+    if (!isIssueNumber(issue)) {
+        fail([
+            `Invalid --issue '${issue}' — expected a positive GitHub issue number.\nFix: pass the number only, e.g. --issue 440 (not a URL, a '#', or a branch name).`,
+        ]);
+    }
+}
+/** `--repo owner/name` appended to a gh invocation when the caller supplied one. */
+function repoArgs(repo) {
+    return repo ? ['--repo', repo] : [];
+}
+/** `owner/name`, or `host/owner/name` for a GitHub Enterprise host. */
+const REPO_SLUG_RE = /^(?:[A-Za-z0-9][A-Za-z0-9.-]*\/)?[A-Za-z0-9][A-Za-z0-9._-]*\/[A-Za-z0-9][A-Za-z0-9._-]*$/;
+/** Reject a `--repo` that is not a repository slug before handing it to gh. */
+function requireRepoSlug(repo) {
+    if (repo === undefined)
+        return;
+    if (!REPO_SLUG_RE.test(repo)) {
+        fail([
+            `Invalid --repo '${repo}' — expected owner/name.\nFix: pass the slug only, e.g. --repo imboard-ai/ai-dossier (not a URL, and not a shell expansion).`,
+        ]);
+    }
+}
+/**
+ * The `--issue`/`--repo` checks every issue-targeting subcommand runs before it starts.
+ * Kept together so a new subcommand cannot pick up one guard and miss the other.
+ */
+function requireIssueTarget(options) {
+    requireIssueNumber(options.issue);
+    requireRepoSlug(options.repo);
+}
+/** Whether `value` carries a control character, which has no place in a comment value. */
+function hasControlChar(value) {
+    for (let i = 0; i < value.length; i += 1) {
+        const code = value.charCodeAt(i);
+        if (code < 0x20 || code === 0x7f)
+            return true;
+    }
+    return false;
+}
+/**
+ * Whether a value read back OUT of a comment may be passed to `git`/`gh`.
+ *
+ * These values are attacker-reachable: anyone who can comment on the issue can post a
+ * protocol comment, so values like `branch=`, `head=` and `pr=` arrive from the network
+ * rather than from the caller. Every invocation here is `execFileSync` with an argument
+ * array and no shell, so there is no command injection — but a value that begins with `-`
+ * is still read as a FLAG rather than as data. `gh` (cobra) parses flags interspersed with
+ * positionals, so `pr=--repo=someone/else` or `pr=--web` would silently retarget, or add a
+ * side effect to, a subcommand documented as strictly read-only.
+ */
+function isSafeArg(value) {
+    return value !== '' && !value.startsWith('-') && !/\s/.test(value) && !hasControlChar(value);
+}
+/**
+ * Paths are only ever passed in value position (`git -C <path>`) or to `fs.statSync`, so
+ * they cannot be mistaken for a flag — but the protocol requires them absolute, and a
+ * relative path from a forged comment would resolve against whatever directory the agent
+ * happens to be in.
+ */
+function isSafePath(value) {
+    return value.startsWith('/') && !hasControlChar(value);
+}
+/** Formats why a local `git` probe could not answer — shared by every git-reading command. */
+function gitFailure(err) {
+    return err.notFound
+        ? 'git is not installed or not on PATH'
+        : err.timedOut
+            ? `git did not answer within ${EXEC_TIMEOUT_MS / 1000}s (killed as stalled)`
+            : `git exited ${err.status ?? 'abnormally'}: ${snippet(err.stderr, GIT_ERROR_SNIPPET_LENGTH)}`;
+}
+/** Characters kept when quoting git stderr inside a reason or warning line. */
+const GIT_ERROR_SNIPPET_LENGTH = 120;
+/**
+ * Read an issue's comments through gh, reporting WHY rather than exiting.
+ *
+ * The single-issue subcommands turn a failure here into an immediate exit; `stats
+ * --issues` cannot, because one unreadable issue in a set must not discard the rest. So
+ * the decision of what a failure means belongs to the caller, and this function only
+ * reports it.
+ */
+function tryFetchComments(issue, repo) {
+    const res = exec('gh', ['issue', 'view', issue, '--json', 'comments', ...repoArgs(repo)]);
+    if (!res.ok) {
+        return { ok: false, error: ghFailure(`Could not read issue #${issue}`, res.error, repo) };
+    }
+    const parsed = parseGhJson(res.stdout);
+    if (parsed === null || !Array.isArray(parsed?.comments)) {
+        // A comment-less issue and a shape we cannot read must not look the same: the first
+        // means "nothing there", the second means the tool is broken, and silently returning
+        // [] for both would make a reader report "no artifacts" over an unreadable response.
+        return {
+            ok: false,
+            error: [
+                `Could not read issue #${issue}: gh exited 0 but did not print JSON — no "comments" array.`,
+                `Fix: run 'gh issue view ${issue} --json comments' by hand — a gh older than 2.0 (no --json), or an interactive prompt landing on stdout, both look like this.`,
+                `gh printed: ${snippet(res.stdout)}`,
+            ].join('\n'),
+        };
+    }
+    return { ok: true, comments: parsed.comments };
+}
+/** `--dry-run` support for comment-posting subcommands: show the body, post nothing. */
+function printDryRun(body, json, extra) {
+    if (json) {
+        console.log(JSON.stringify({ posted: false, dryRun: true, ...extra, body }, null, 2));
+    }
+    else {
+        process.stdout.write(body);
+    }
+}
+/**
+ * Write `body` to a temp file and return a paste-safe retry hint using `--body-file`.
+ *
+ * Inlining the body in a suggested `gh … --body <string>` command is a paste-time
+ * injection: JSON double quotes are not shell quotes, so a body containing `$(…)` or
+ * backticks would execute the moment the operator pastes the suggestion. A file path
+ * carries no such payload.
+ */
+function retryHint(issue, repo, body, noun) {
+    try {
+        const dir = node_fs_1.default.mkdtempSync(node_path_1.default.join(node_os_1.default.tmpdir(), 'ai-dossier-'));
+        const file = node_path_1.default.join(dir, `${noun}.md`);
+        node_fs_1.default.writeFileSync(file, body);
+        return `The ${noun} was NOT posted. Retry, or post it by hand:\ngh issue comment ${issue}${repo ? ` --repo ${repo}` : ''} --body-file ${file}`;
+    }
+    catch {
+        return `The ${noun} was NOT posted. Retry, or save the body shown above and post it with: gh issue comment ${issue}${repo ? ` --repo ${repo}` : ''} --body-file <file>`;
+    }
+}
+/**
+ * Comment `body` onto an issue, with the shared failure taxonomy, the paste-safe retry
+ * hint, and the success output both protocols use.
+ *
+ * `jsonExtras` merge into the `--json` result (e.g. `head` for plans); `successLine`
+ * renders the human-mode success line for the caller's protocol.
+ */
+function postIssueComment(options) {
+    const res = exec('gh', [
+        'issue',
+        'comment',
+        options.issue,
+        '--body',
+        options.body,
+        ...repoArgs(options.repo),
+    ]);
+    if (!res.ok) {
+        fail([
+            ghFailure(options.action, res.error, options.repo),
+            retryHint(options.issue, options.repo, options.body, options.noun),
+        ]);
+    }
+    if (options.json) {
+        console.log(JSON.stringify({ posted: true, url: res.stdout, ...options.jsonExtras }, null, 2));
+    }
+    else {
+        console.log(options.successLine(res.stdout));
+    }
+}
+//# sourceMappingURL=gh.js.map

package/dist/gh.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"gh.js","sourceRoot":"","sources":["../src/gh.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;GAYG;;;;;AAaH,oBAOC;AA4BD,oBAyBC;AAeD,0BAMC;AAiED,kCAMC;AAGD,4BAEC;AAOD,8BA2BC;AAGD,sCAEC;AAGD,gDAMC;AAGD,4BAEC;AAOD,0CAOC;AAMD,gDAGC;AAsBD,8BAEC;AAQD,gCAEC;AAGD,gCAMC;AAyBD,4CAsBC;AAGD,kCAMC;AA4BD,4CA8BC;AAjZD,2DAAkD;AAClD,sDAAyB;AACzB,sDAAyB;AACzB,0DAA6B;AAE7B;;;;;GAKG;AACH,SAAgB,IAAI,CAAC,KAAe;IAClC,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,MAAM,CAAC,KAAK,EAAE,GAAG,IAAI,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAC1C,OAAO,CAAC,KAAK,CAAC,KAAK,KAAK,EAAE,CAAC,CAAC;QAC5B,KAAK,MAAM,IAAI,IAAI,IAAI;YAAE,OAAO,CAAC,KAAK,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC;IACvD,CAAC;IACD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC;AAED,yEAAyE;AACzE,MAAM,eAAe,GAAG,OAAO,CAAC;AAgBhC;;;;;;;;GAQG;AACH,SAAgB,IAAI,CAAC,IAAY,EAAE,IAAc;IAC/C,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,IAAA,iCAAY,EAAC,IAAI,EAAE,IAAI,EAAE;YACtC,QAAQ,EAAE,MAAM;YAChB,KAAK,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC;YACjC,OAAO,EAAE,eAAe;SACzB,CAAC,CAAC;QACH,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC;IACrD,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,CAAC,GAAG,GAIT,CAAC;QACF,MAAM,MAAM,GAAG,MAAM,CAAC,CAAC,EAAE,MAAM,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,IAAI,MAAM,CAAC,CAAC,EAAE,OAAO,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;QACjF,OAAO;YACL,EAAE,EAAE,KAAK;YACT,KAAK,EAAE;gBACL,QAAQ,EAAE,CAAC,EAAE,IAAI,KAAK,QAAQ;gBAC9B,QAAQ,EAAE,CAAC,EAAE,MAAM,KAAK,IAAI;gBAC5B,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI;gBACvD,MAAM;aACP;SACF,CAAC;IACJ,CAAC;AACH,CAAC;AAED,wEAAwE;AACxE,MAAM,cAAc,GAAG,GAAG,CAAC;AAE3B,8EAA8E;AAC9E,mIAAmI;AACnI,MAAM,gBAAgB,GAAG,2CAA2C,CAAC;AAErE;;;;;GAKG;AACH,SAAgB,OAAO,CAAC,IAAY,EAAE,GAAG,GAAG,cAAc;IACxD,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,gBAAgB,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;IAC/E,IAAI,OAAO,KAAK,EAAE;QAAE,OAAO,aAAa,CAAC;IACzC,OAAO,OAAO,CAAC,MAAM,GAAG,GAAG;QACzB,CAAC,CAAC,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,MAAM,OAAO,CAAC,MAAM,oBAAoB;QAClE,CAAC,CAAC,OAAO,CAAC;AACd,CAAC;AAmBD,MAAM,gBAAgB,GAA6B;IACjD;QACE,KAAK,EAAE;YACL,eAAe;YACf,YAAY;YACZ,gBAAgB;YAChB,cAAc;YACd,UAAU;YACV,iBAAiB;SAClB;QACD,KAAK,EAAE,GAAG,EAAE,CAAC,0BAA0B;QACvC,GAAG,EAAE,uEAAuE;KAC7E;IACD;QACE,KAAK,EAAE,CAAC,sBAAsB,EAAE,WAAW,EAAE,UAAU,CAAC;QACxD,KAAK,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,+BAA+B,KAAK,GAAG;QACzD,GAAG,EAAE,gIAAgI;KACtI;IACD;QACE,wFAAwF;QACxF,wFAAwF;QACxF,4EAA4E;QAC5E,KAAK,EAAE,CAAC,YAAY,EAAE,gBAAgB,EAAE,iBAAiB,EAAE,UAAU,CAAC;QACtE,KAAK,EAAE,GAAG,EAAE,CAAC,kCAAkC;QAC/C,GAAG,EAAE,qIAAqI;KAC3I;IACD;QACE,KAAK,EAAE,CAAC,UAAU,EAAE,YAAY,EAAE,cAAc,EAAE,WAAW,CAAC;QAC9D,KAAK,EAAE,CAAC,KAAK,EAAE,EAAE,CACf,0EAA0E,KAAK,GAAG;QACpF,GAAG,EAAE,uJAAuJ;KAC7J;IACD;QACE,KAAK,EAAE,CAAC,UAAU,EAAE,cAAc,EAAE,SAAS,EAAE,oBAAoB,EAAE,wBAAwB,CAAC;QAC9F,KAAK,EAAE,GAAG,EAAE,CAAC,4BAA4B;QACzC,GAAG,EAAE,4GAA4G;KAClH;CACF,CAAC;AAEF;;;;;;GAMG;AACH,SAAgB,WAAW,CAAI,GAAW;IACxC,IAAI,CAAC;QACH,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAM,CAAC;IAC9B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,uFAAuF;AACvF,SAAgB,QAAQ,CAAC,KAAc,EAAE,QAAQ,GAAG,EAAE;IACpD,OAAO,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,QAAQ,CAAC;AACtD,CAAC;AAED;;;;GAIG;AACH,SAAgB,SAAS,CAAC,MAAc,EAAE,GAAgB,EAAE,IAAa;IACvE,IAAI,GAAG,CAAC,QAAQ,EAAE,CAAC;QACjB,OAAO;YACL,GAAG,MAAM,6CAA6C;YACtD,6FAA6F;SAC9F,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACf,CAAC;IAED,mFAAmF;IACnF,iDAAiD;IACjD,IAAI,GAAG,CAAC,QAAQ,EAAE,CAAC;QACjB,OAAO;YACL,GAAG,MAAM,8BAA8B,eAAe,GAAG,IAAI,IAAI;YACjE,gFAAgF;SACjF,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACf,CAAC;IAED,MAAM,IAAI,GAAG,GAAG,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC;IACtC,MAAM,KAAK,GAAG,IAAI,CAAC,CAAC,CAAC,UAAU,IAAI,EAAE,CAAC,CAAC,CAAC,+CAA+C,CAAC;IACxF,MAAM,OAAO,GAAG,gBAAgB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;IAE9F,MAAM,KAAK,GAAG,OAAO;QACnB,CAAC,CAAC,GAAG,MAAM,KAAK,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE;QACtC,CAAC,CAAC,GAAG,MAAM,eAAe,GAAG,CAAC,MAAM,KAAK,IAAI,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,eAAe,GAAG,CAAC,MAAM,EAAE,GAAG,CAAC;IAChG,MAAM,GAAG,GAAG,OAAO,EAAE,GAAG,IAAI,6DAA6D,CAAC;IAE1F,OAAO,CAAC,KAAK,EAAE,GAAG,EAAE,YAAY,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACpE,CAAC;AAED,qFAAqF;AACrF,SAAgB,aAAa,CAAC,KAAa;IACzC,OAAO,YAAY,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;AAClC,CAAC;AAED,6FAA6F;AAC7F,SAAgB,kBAAkB,CAAC,KAAa;IAC9C,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,EAAE,CAAC;QAC1B,IAAI,CAAC;YACH,oBAAoB,KAAK,iIAAiI;SAC3J,CAAC,CAAC;IACL,CAAC;AACH,CAAC;AAED,oFAAoF;AACpF,SAAgB,QAAQ,CAAC,IAAa;IACpC,OAAO,IAAI,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;AACtC,CAAC;AAED,uEAAuE;AACvE,MAAM,YAAY,GAChB,0FAA0F,CAAC;AAE7F,+EAA+E;AAC/E,SAAgB,eAAe,CAAC,IAAa;IAC3C,IAAI,IAAI,KAAK,SAAS;QAAE,OAAO;IAC/B,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QAC7B,IAAI,CAAC;YACH,mBAAmB,IAAI,8HAA8H;SACtJ,CAAC,CAAC;IACL,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,SAAgB,kBAAkB,CAAC,OAAyC;IAC1E,kBAAkB,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;IAClC,eAAe,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;AAChC,CAAC;AAED,0FAA0F;AAC1F,SAAS,cAAc,CAAC,KAAa;IACnC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC;QACzC,MAAM,IAAI,GAAG,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;QACjC,IAAI,IAAI,GAAG,IAAI,IAAI,IAAI,KAAK,IAAI;YAAE,OAAO,IAAI,CAAC;IAChD,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;;;;;;;;GAUG;AACH,SAAgB,SAAS,CAAC,KAAa;IACrC,OAAO,KAAK,KAAK,EAAE,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC;AAC/F,CAAC;AAED;;;;;GAKG;AACH,SAAgB,UAAU,CAAC,KAAa;IACtC,OAAO,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC;AACzD,CAAC;AAED,8FAA8F;AAC9F,SAAgB,UAAU,CAAC,GAAgB;IACzC,OAAO,GAAG,CAAC,QAAQ;QACjB,CAAC,CAAC,qCAAqC;QACvC,CAAC,CAAC,GAAG,CAAC,QAAQ;YACZ,CAAC,CAAC,6BAA6B,eAAe,GAAG,IAAI,uBAAuB;YAC5E,CAAC,CAAC,cAAc,GAAG,CAAC,MAAM,IAAI,YAAY,KAAK,OAAO,CAAC,GAAG,CAAC,MAAM,EAAE,wBAAwB,CAAC,EAAE,CAAC;AACrG,CAAC;AAED,+EAA+E;AAC/E,MAAM,wBAAwB,GAAG,GAAG,CAAC;AAcrC;;;;;;;GAOG;AACH,SAAgB,gBAAgB,CAAC,KAAa,EAAE,IAAa;IAC3D,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,QAAQ,EAAE,UAAU,EAAE,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAC1F,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;QACZ,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,SAAS,CAAC,yBAAyB,KAAK,EAAE,EAAE,GAAG,CAAC,KAAK,EAAE,IAAI,CAAC,EAAE,CAAC;IAC5F,CAAC;IAED,MAAM,MAAM,GAAG,WAAW,CAAyB,GAAG,CAAC,MAAM,CAAC,CAAC;IAC/D,IAAI,MAAM,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,EAAE,QAAQ,CAAC,EAAE,CAAC;QACxD,oFAAoF;QACpF,qFAAqF;QACrF,qFAAqF;QACrF,OAAO;YACL,EAAE,EAAE,KAAK;YACT,KAAK,EAAE;gBACL,yBAAyB,KAAK,6DAA6D;gBAC3F,2BAA2B,KAAK,+HAA+H;gBAC/J,eAAe,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE;aACrC,CAAC,IAAI,CAAC,IAAI,CAAC;SACb,CAAC;IACJ,CAAC;IAED,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAuB,EAAE,CAAC;AAChE,CAAC;AAED,wFAAwF;AACxF,SAAgB,WAAW,CAAC,IAAY,EAAE,IAAc,EAAE,KAA+B;IACvF,IAAI,IAAI,EAAE,CAAC;QACT,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,KAAK,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;IACxF,CAAC;SAAM,CAAC;QACN,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAC7B,CAAC;AACH,CAAC;AAED;;;;;;;GAOG;AACH,SAAS,SAAS,CAAC,KAAa,EAAE,IAAwB,EAAE,IAAY,EAAE,IAAY;IACpF,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,iBAAE,CAAC,WAAW,CAAC,mBAAI,CAAC,IAAI,CAAC,iBAAE,CAAC,MAAM,EAAE,EAAE,aAAa,CAAC,CAAC,CAAC;QAClE,MAAM,IAAI,GAAG,mBAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,KAAK,CAAC,CAAC;QAC1C,iBAAE,CAAC,aAAa,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;QAC7B,OAAO,OAAO,IAAI,iEAAiE,KAAK,GAAG,IAAI,CAAC,CAAC,CAAC,WAAW,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,gBAAgB,IAAI,EAAE,CAAC;IACjJ,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,OAAO,IAAI,2FAA2F,KAAK,GAAG,IAAI,CAAC,CAAC,CAAC,WAAW,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,qBAAqB,CAAC;IAC1K,CAAC;AACH,CAAC;AAED;;;;;;GAMG;AACH,SAAgB,gBAAgB,CAAC,OAShC;IACC,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,EAAE;QACrB,OAAO;QACP,SAAS;QACT,OAAO,CAAC,KAAK;QACb,QAAQ;QACR,OAAO,CAAC,IAAI;QACZ,GAAG,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC;KAC1B,CAAC,CAAC;IACH,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;QACZ,IAAI,CAAC;YACH,SAAS,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC,KAAK,EAAE,OAAO,CAAC,IAAI,CAAC;YAClD,SAAS,CAAC,OAAO,CAAC,KAAK,EAAE,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,IAAI,CAAC;SACnE,CAAC,CAAC;IACL,CAAC;IAED,IAAI,OAAO,CAAC,IAAI,EAAE,CAAC;QACjB,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,EAAE,GAAG,CAAC,MAAM,EAAE,GAAG,OAAO,CAAC,UAAU,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;IACjG,CAAC;SAAM,CAAC;QACN,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,WAAW,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC;IAC/C,CAAC;AACH,CAAC"}

package/dist/helpers.d.ts

@@ -271,4 +271,11 @@ export declare function formatDossierFields(d: {
  * Used by search and list commands when results span multiple pages.
  */
 export declare function logPaginationInfo(total: number, page: number, perPage: number): void;
+/**
+ * Fail on stderr and exit 1, so a calling dossier can detect it.
+ *
+ * Each entry is one problem. An entry may span lines: the first gets the ❌, the rest are
+ * indented under it, which is how a cause line and its "Fix:" line stay visibly one item.
+ */
+export declare function fail(lines: string[]): never;
 //# sourceMappingURL=helpers.d.ts.map

package/dist/helpers.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"helpers.d.ts","sourceRoot":"","sources":["../src/helpers.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAQH,OAAO,EAGL,kBAAkB,EAClB,eAAe,EACf,iBAAiB,EACjB,cAAc,EACf,MAAM,kBAAkB,CAAC;AAS1B,qCAAqC;AACrC,eAAO,MAAM,QAAQ,QAAgC,CAAC;AAEtD,yBAAyB;AACzB,eAAO,MAAM,OAAO,QAA6B,CAAC;AAMlD,wEAAwE;AACxE,eAAO,MAAM,iBAAiB,UAI7B,CAAC;AAGF,OAAO,EAAE,kBAAkB,EAAE,eAAe,EAAE,iBAAiB,EAAE,cAAc,EAAE,CAAC;AAElF,4DAA4D;AAC5D,eAAO,MAAM,YAAY,OAAO,CAAC;AAMjC,MAAM,WAAW,mBAAmB;IAClC,YAAY,CAAC,EAAE,OAAO,CAAC;IACvB,aAAa,CAAC,EAAE,OAAO,CAAC;IACxB,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB,QAAQ,CAAC,EAAE,OAAO,CAAC;CACpB;AAED,MAAM,WAAW,iBAAiB;IAChC,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,OAAO,CAAC,EAAE,OAAO,CAAC;CACnB;AAED,MAAM,WAAW,kBAAkB;IACjC,MAAM,EAAE,OAAO,CAAC;IAChB,MAAM,EAAE,iBAAiB,EAAE,CAAC;CAC7B;AAED,MAAM,WAAW,UAAU;IACzB,IAAI,EAAE,OAAO,GAAG,QAAQ,CAAC;IACzB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,eAAe;IAC9B,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,MAAM,CAAC;IACjB,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;CACtB;AAED,MAAM,WAAW,UAAU;IACzB,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,EAAE,MAAM,CAAC;CACnB;AAMD;;;GAGG;AACH,wBAAgB,oBAAoB,CAAC,QAAQ,EAAE,MAAM,GAAG,IAAI,CAO3D;AAED;;;GAGG;AACH,wBAAgB,qBAAqB,CACnC,OAAO,EAAE,MAAM,GAAG,SAAS,EAC3B,UAAU,EAAE,MAAM,GAAG,SAAS,EAC9B,QAAQ,GAAE;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAA6B,GACrE;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,CAiBnC;AAED;;;;GAIG;AACH,wBAAgB,mBAAmB,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAUtD;AAED;;;;GAIG;AACH,wBAAgB,eAAe,CAAC,OAAO,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,GAAG,MAAM,CAQ5E;AAMD;;;GAGG;AACH,wBAAgB,SAAS,CAAC,SAAS,SAAO,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CA6BlE;AAED;;;;;;GAMG;AACH,wBAAgB,gBAAgB,IAAI,MAAM,GAAG,IAAI,CAQhD;AAED;;;;;;GAMG;AACH,wBAAgB,SAAS,CAAC,SAAS,EAAE,MAAM,EAAE,MAAM,UAAQ,GAAG,MAAM,GAAG,IAAI,CA2B1E;AAED,MAAM,WAAW,iBAAiB;IAChC,GAAG,EAAE,MAAM,CAAC;IACZ,IAAI,EAAE,MAAM,EAAE,CAAC;IACf,uDAAuD;IACvD,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,6CAA6C;IAC7C,WAAW,EAAE,MAAM,CAAC;IACpB,2FAA2F;IAC3F,KAAK,EAAE,aAAa,GAAG,UAAU,CAAC;IAClC;;;;OAIG;IACH,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB;AAED;;;;;;GAMG;AACH,MAAM,WAAW,qBAAqB;IACpC,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,mEAAmE;IACnE,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,+EAA+E;IAC/E,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB;AAmBD;;;GAGG;AACH,wBAAgB,qBAAqB,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAwBzD;AA4ED;;;;GAIG;AACH,wBAAgB,eAAe,CAC7B,GAAG,EAAE,MAAM,EACX,IAAI,EAAE,MAAM,EACZ,QAAQ,UAAQ,EAChB,WAAW,CAAC,EAAE,qBAAqB,GAClC,iBAAiB,GAAG,IAAI,CAgD1B;AAED;;;;GAIG;AACH,MAAM,WAAW,aAAa;IAC5B,mHAAmH;IACnH,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,cAAc,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9B,kFAAkF;IAClF,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;CAC5B;AAED;;;;;GAKG;AACH,MAAM,WAAW,cAAc;IAC7B,gEAAgE;IAChE,WAAW,EAAE,IAAI,CAAC;IAClB,uFAAuF;IACvF,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,qDAAqD;IACrD,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,oEAAoE;IACpE,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,KAAK,EAAE,aAAa,GAAG,IAAI,CAAC;CAC7B;AAaD;;;;;;;GAOG;AACH,wBAAgB,eAAe,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,GAAG,aAAa,GAAG,IAAI,CAiDvF;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,kBAAkB,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,GAAG,aAAa,GAAG,IAAI,CA4D1F;AAED;;GAEG;AACH,wBAAsB,eAAe,CACnC,IAAI,EAAE,MAAM,EACZ,OAAO,EAAE,mBAAmB,GAC3B,OAAO,CAAC,kBAAkB,CAAC,CAyB7B;AAED;;GAEG;AACH,wBAAgB,qBAAqB,CAAC,GAAG,EAAE,MAAM,EAAE,SAAS,UAAQ,GAAG,MAAM,EAAE,CAyB9E;AAED;;GAEG;AACH,wBAAgB,eAAe,CAAC,MAAM,EAAE,MAAM,GAAG,UAAU,CAmD1D;AAED;;GAEG;AACH,wBAAsB,sBAAsB,CAC1C,KAAK,EAAE,MAAM,EACb,IAAI,EAAE,MAAM,EACZ,OAAO,EAAE,MAAM,EACf,MAAM,EAAE,MAAM,GACb,OAAO,CAAC,UAAU,EAAE,CAAC,CA2DvB;AAED;;GAEG;AACH,wBAAsB,oBAAoB,CACxC,GAAG,EAAE,MAAM,EACX,WAAW,EAAE,MAAM,GAClB,OAAO,CAAC,eAAe,CAAC,CAiC1B;AAED;;GAEG;AACH,wBAAgB,+BAA+B,CAC7C,OAAO,EAAE,MAAM,EACf,QAAQ,EAAE,MAAM,GACf,eAAe,CA0BjB;AAED;;GAEG;AACH,wBAAgB,yBAAyB,CAAC,QAAQ,EAAE,MAAM,GAAG,eAAe,CAY3E;AAED;;GAEG;AACH,wBAAsB,kBAAkB,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAE3E;AAED;;GAEG;AACH,wBAAgB,WAAW,CAAC,QAAQ,EAAE,eAAe,EAAE,EAAE,QAAQ,UAAQ,GAAG,MAAM,CA+BjF;AAED;;;GAGG;AACH,wBAAgB,mBAAmB,CACjC,MAAM,EAAE,aAAa,CAAC;IAAE,QAAQ,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,CAAC,EAC1D,KAAK,GAAE,QAAQ,GAAG,SAAoB,GACrC,IAAI,CAQN;AAKD;;;GAGG;AACH,wBAAgB,0BAA0B,CACxC,KAAK,EAAE,MAAM,EACb,MAAM,EAAE,aAAa,CAAC;IAAE,QAAQ,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,CAAC,GACzD,IAAI,CAyBN;AAED;;;GAGG;AACH,wBAAgB,mBAAmB,CAAC,CAAC,EAAE;IACrC,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,QAAQ,CAAC,EAAE,MAAM,GAAG,MAAM,EAAE,CAAC;IAC7B,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB,GAAG;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAC;IAAC,WAAW,EAAE,MAAM,CAAA;CAAE,CAQ1F;AAED;;;GAGG;AACH,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,IAAI,CASpF"}
+{"version":3,"file":"helpers.d.ts","sourceRoot":"","sources":["../src/helpers.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAQH,OAAO,EAGL,kBAAkB,EAClB,eAAe,EACf,iBAAiB,EACjB,cAAc,EACf,MAAM,kBAAkB,CAAC;AAS1B,qCAAqC;AACrC,eAAO,MAAM,QAAQ,QAAgC,CAAC;AAEtD,yBAAyB;AACzB,eAAO,MAAM,OAAO,QAA6B,CAAC;AAMlD,wEAAwE;AACxE,eAAO,MAAM,iBAAiB,UAI7B,CAAC;AAGF,OAAO,EAAE,kBAAkB,EAAE,eAAe,EAAE,iBAAiB,EAAE,cAAc,EAAE,CAAC;AAElF,4DAA4D;AAC5D,eAAO,MAAM,YAAY,OAAO,CAAC;AAMjC,MAAM,WAAW,mBAAmB;IAClC,YAAY,CAAC,EAAE,OAAO,CAAC;IACvB,aAAa,CAAC,EAAE,OAAO,CAAC;IACxB,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB,QAAQ,CAAC,EAAE,OAAO,CAAC;CACpB;AAED,MAAM,WAAW,iBAAiB;IAChC,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,OAAO,CAAC,EAAE,OAAO,CAAC;CACnB;AAED,MAAM,WAAW,kBAAkB;IACjC,MAAM,EAAE,OAAO,CAAC;IAChB,MAAM,EAAE,iBAAiB,EAAE,CAAC;CAC7B;AAED,MAAM,WAAW,UAAU;IACzB,IAAI,EAAE,OAAO,GAAG,QAAQ,CAAC;IACzB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,eAAe;IAC9B,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,MAAM,CAAC;IACjB,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;CACtB;AAED,MAAM,WAAW,UAAU;IACzB,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,EAAE,MAAM,CAAC;CACnB;AAMD;;;GAGG;AACH,wBAAgB,oBAAoB,CAAC,QAAQ,EAAE,MAAM,GAAG,IAAI,CAO3D;AAED;;;GAGG;AACH,wBAAgB,qBAAqB,CACnC,OAAO,EAAE,MAAM,GAAG,SAAS,EAC3B,UAAU,EAAE,MAAM,GAAG,SAAS,EAC9B,QAAQ,GAAE;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAA6B,GACrE;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,CAiBnC;AAED;;;;GAIG;AACH,wBAAgB,mBAAmB,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAUtD;AAED;;;;GAIG;AACH,wBAAgB,eAAe,CAAC,OAAO,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,GAAG,MAAM,CAQ5E;AAMD;;;GAGG;AACH,wBAAgB,SAAS,CAAC,SAAS,SAAO,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CA6BlE;AAED;;;;;;GAMG;AACH,wBAAgB,gBAAgB,IAAI,MAAM,GAAG,IAAI,CAQhD;AAED;;;;;;GAMG;AACH,wBAAgB,SAAS,CAAC,SAAS,EAAE,MAAM,EAAE,MAAM,UAAQ,GAAG,MAAM,GAAG,IAAI,CA2B1E;AAED,MAAM,WAAW,iBAAiB;IAChC,GAAG,EAAE,MAAM,CAAC;IACZ,IAAI,EAAE,MAAM,EAAE,CAAC;IACf,uDAAuD;IACvD,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,6CAA6C;IAC7C,WAAW,EAAE,MAAM,CAAC;IACpB,2FAA2F;IAC3F,KAAK,EAAE,aAAa,GAAG,UAAU,CAAC;IAClC;;;;OAIG;IACH,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB;AAED;;;;;;GAMG;AACH,MAAM,WAAW,qBAAqB;IACpC,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,mEAAmE;IACnE,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,+EAA+E;IAC/E,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB;AAmBD;;;GAGG;AACH,wBAAgB,qBAAqB,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAwBzD;AA4ED;;;;GAIG;AACH,wBAAgB,eAAe,CAC7B,GAAG,EAAE,MAAM,EACX,IAAI,EAAE,MAAM,EACZ,QAAQ,UAAQ,EAChB,WAAW,CAAC,EAAE,qBAAqB,GAClC,iBAAiB,GAAG,IAAI,CAgD1B;AAED;;;;GAIG;AACH,MAAM,WAAW,aAAa;IAC5B,mHAAmH;IACnH,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,cAAc,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9B,kFAAkF;IAClF,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;CAC5B;AAED;;;;;GAKG;AACH,MAAM,WAAW,cAAc;IAC7B,gEAAgE;IAChE,WAAW,EAAE,IAAI,CAAC;IAClB,uFAAuF;IACvF,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,qDAAqD;IACrD,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,oEAAoE;IACpE,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,KAAK,EAAE,aAAa,GAAG,IAAI,CAAC;CAC7B;AAaD;;;;;;;GAOG;AACH,wBAAgB,eAAe,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,GAAG,aAAa,GAAG,IAAI,CAiDvF;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,kBAAkB,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,GAAG,aAAa,GAAG,IAAI,CA4D1F;AAED;;GAEG;AACH,wBAAsB,eAAe,CACnC,IAAI,EAAE,MAAM,EACZ,OAAO,EAAE,mBAAmB,GAC3B,OAAO,CAAC,kBAAkB,CAAC,CAyB7B;AAED;;GAEG;AACH,wBAAgB,qBAAqB,CAAC,GAAG,EAAE,MAAM,EAAE,SAAS,UAAQ,GAAG,MAAM,EAAE,CAyB9E;AAED;;GAEG;AACH,wBAAgB,eAAe,CAAC,MAAM,EAAE,MAAM,GAAG,UAAU,CAmD1D;AAED;;GAEG;AACH,wBAAsB,sBAAsB,CAC1C,KAAK,EAAE,MAAM,EACb,IAAI,EAAE,MAAM,EACZ,OAAO,EAAE,MAAM,EACf,MAAM,EAAE,MAAM,GACb,OAAO,CAAC,UAAU,EAAE,CAAC,CA2DvB;AAED;;GAEG;AACH,wBAAsB,oBAAoB,CACxC,GAAG,EAAE,MAAM,EACX,WAAW,EAAE,MAAM,GAClB,OAAO,CAAC,eAAe,CAAC,CAiC1B;AAED;;GAEG;AACH,wBAAgB,+BAA+B,CAC7C,OAAO,EAAE,MAAM,EACf,QAAQ,EAAE,MAAM,GACf,eAAe,CA0BjB;AAED;;GAEG;AACH,wBAAgB,yBAAyB,CAAC,QAAQ,EAAE,MAAM,GAAG,eAAe,CAY3E;AAED;;GAEG;AACH,wBAAsB,kBAAkB,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAE3E;AAED;;GAEG;AACH,wBAAgB,WAAW,CAAC,QAAQ,EAAE,eAAe,EAAE,EAAE,QAAQ,UAAQ,GAAG,MAAM,CA+BjF;AAED;;;GAGG;AACH,wBAAgB,mBAAmB,CACjC,MAAM,EAAE,aAAa,CAAC;IAAE,QAAQ,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,CAAC,EAC1D,KAAK,GAAE,QAAQ,GAAG,SAAoB,GACrC,IAAI,CAQN;AAKD;;;GAGG;AACH,wBAAgB,0BAA0B,CACxC,KAAK,EAAE,MAAM,EACb,MAAM,EAAE,aAAa,CAAC;IAAE,QAAQ,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,CAAC,GACzD,IAAI,CAyBN;AAED;;;GAGG;AACH,wBAAgB,mBAAmB,CAAC,CAAC,EAAE;IACrC,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,QAAQ,CAAC,EAAE,MAAM,GAAG,MAAM,EAAE,CAAC;IAC7B,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB,GAAG;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAC;IAAC,WAAW,EAAE,MAAM,CAAA;CAAE,CAQ1F;AAED;;;GAGG;AACH,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,IAAI,CASpF;AAMD;;;;;GAKG;AACH,wBAAgB,IAAI,CAAC,KAAK,EAAE,MAAM,EAAE,GAAG,KAAK,CAO3C"}

package/dist/helpers.js

@@ -32,6 +32,7 @@ exports.printRegistryErrors = printRegistryErrors;
 exports.printRegistryNotFoundError = printRegistryNotFoundError;
 exports.formatDossierFields = formatDossierFields;
 exports.logPaginationInfo = logPaginationInfo;
+exports.fail = fail;
 const node_child_process_1 = require("node:child_process");
 const node_fs_1 = __importDefault(require("node:fs"));
 const node_http_1 = __importDefault(require("node:http"));
@@ -859,4 +860,22 @@ function logPaginationInfo(total, page, perPage) {
         console.log('');
     }
 }
+// ============================================================================
+// CLI failure exit
+// ============================================================================
+/**
+ * Fail on stderr and exit 1, so a calling dossier can detect it.
+ *
+ * Each entry is one problem. An entry may span lines: the first gets the ❌, the rest are
+ * indented under it, which is how a cause line and its "Fix:" line stay visibly one item.
+ */
+function fail(lines) {
+    for (const line of lines) {
+        const [first, ...rest] = line.split('\n');
+        console.error(`❌ ${first}`);
+        for (const cont of rest)
+            console.error(`   ${cont}`);
+    }
+    process.exit(1);
+}
 //# sourceMappingURL=helpers.js.map