@canonical/pragma-cli 0.34.0 → 0.35.0

package/dist/src/capabilities/create/mount.js

@@ -0,0 +1,293 @@
+/**
+ * The `create` CLI mount: the summon generator TREE, mounted under the
+ * `create` noun through the SAME registration path the summon bin uses
+ * (`registerGeneratorCommands` from
+ * `@canonical/summon-core/projection/commander`), fed
+ * by the build-time projection (`createSurface.generated.ts`) — so `pragma
+ * create component react [component-path]` and `summon component react
+ * [component-path]` are one grammar, derived once.
+ *
+ * The mount owns everything beneath the noun: tree segments as subcommands,
+ * prompt-derived flags (a default-true confirm registers only its `--no-`
+ * form), grouped help, the excess-positional guard, and the leaf action —
+ * which extracts the EXPLICIT answers, makes the ONE interaction decision
+ * (refusing before the create runtime ever loads), and hands the kernel's
+ * `dispatchPrepared` a synthesized per-leaf VerbSpec so dry-run/undo/real-run
+ * rendering, exit codes, SIGINT and the SEC-2 jail reuse the existing
+ * machinery byte-for-byte.
+ *
+ * This is the HEAVY half of the create projection, reached ONLY through the
+ * dynamic import in `cliProjection.ts` — the light half the capabilities
+ * barrel carries. The split exists for the fast paths: `--help` and
+ * `__complete` import the barrel on every spawn and register nothing, so the
+ * registration machinery this module needs (summon-core's projection helpers
+ * and Commander adapter, Commander itself, the kernel dispatcher) must load
+ * only when an invocation actually enters the `create` subtree. The
+ * lazy-graph guard in `lazy.test.ts` pins that boundary.
+ */
+import { decideInteraction, explicitAnswersComplete, extractAnswers, missingExplicitFlags, refusalMessage, } from "@canonical/summon-core/projection";
+import { emitToProcess, registerGeneratorCommands, } from "@canonical/summon-core/projection/commander";
+import { CommanderError } from "commander";
+import { PragmaError } from "../../kernel/error/index.js";
+import { renderErrorForFormat } from "../../kernel/error/renderError.js";
+import { MUTATION_FLAG_DOCS } from "../../kernel/project/cli/constants.js";
+import { cliIsTTY, dispatchPrepared, } from "../../kernel/project/cli/dispatch.js";
+import { helpColumns, helpDim, helpHeading, helpUsage, } from "../../kernel/project/cli/helpFormat.js";
+import { CREATE_GENERATORS } from "./constants.js";
+import { CREATE_CAPABILITY, CREATE_OUTPUT, runCreate } from "./create.verb.js";
+import { renderCreateHelp } from "./createHelp.js";
+import { CREATE_SURFACE } from "./createSurface.generated.js";
+/** The mount's standard-flag rows for the grouped-help Global Options block. */
+const MOUNT_FLAG_HELP = [
+    // The kernel's own mutation-flag rows (one authoring point with
+    // registration and verb help), then its `--help` row (rootHelp.ts), not
+    // Commander's phrasing — one voice across every help page, and `--help`
+    // is the only spelling (the subtree inherits the root's long-only help
+    // option).
+    ...MUTATION_FLAG_DOCS.map(({ flag, doc }) => ({
+        flags: flag,
+        description: doc,
+    })),
+    { flags: "--help", description: "Show help (works on any command)" },
+];
+/** The declared tree, flattened to registration entries (parents first). */
+function surfaceBarrel() {
+    const entries = [];
+    const namespaces = new Set();
+    for (const binding of Object.values(CREATE_GENERATORS)) {
+        for (const commandPath of binding.paths) {
+            const segments = commandPath.split("/");
+            if (segments.length > 1)
+                namespaces.add(segments[0]);
+        }
+    }
+    for (const namespace of namespaces) {
+        entries.push({ path: [namespace], description: `${namespace} generators` });
+    }
+    for (const binding of Object.values(CREATE_GENERATORS)) {
+        for (const commandPath of binding.paths) {
+            const surface = CREATE_SURFACE[commandPath];
+            if (!surface) {
+                throw new Error(`createSurface.generated.ts carries no entry for "${commandPath}" — rerun the build`);
+            }
+            entries.push({
+                path: commandPath.split("/"),
+                generator: {
+                    commandPath,
+                    meta: { description: surface.description },
+                    prompts: surface.prompts,
+                },
+            });
+        }
+    }
+    return entries.sort((a, b) => a.path.length - b.path.length);
+}
+/** The create noun that declares a command path. */
+function kindOf(commandPath) {
+    for (const [kind, binding] of Object.entries(CREATE_GENERATORS)) {
+        if (binding.paths.includes(commandPath)) {
+            return kind;
+        }
+    }
+    throw new Error(`undeclared command path ${commandPath}`);
+}
+/**
+ * Synthesize the per-leaf VerbSpec `dispatchPrepared` runs: params are EMPTY
+ * (the mount already extracted the explicit answers — leaf commands carry no
+ * Commander defaults, so explicit stays distinguishable from default), and
+ * `run` is `runCreate` over the full command path.
+ *
+ * The output spec is the SHARED `CREATE_OUTPUT`, not a local rebuild: this is
+ * the spec a real `create component react …` runs against, so a dry-run
+ * renderer declared only on the binding-level verbs would be a renderer the
+ * CLI never reached.
+ */
+export function leafVerb(commandPath) {
+    const surface = CREATE_SURFACE[commandPath];
+    return {
+        path: ["create", kindOf(commandPath)],
+        summary: surface?.description ?? commandPath,
+        params: [],
+        output: CREATE_OUTPUT,
+        capability: CREATE_CAPABILITY,
+        run: (params, rt) => runCreate(commandPath, params, rt),
+    };
+}
+/**
+ * The explicit answers of one leaf invocation: flag-extracted (explicit-only,
+ * confirm equality-vs-default) plus the positional when given. Exported for
+ * the grammar tests — this is the exact bag the wizard is seeded with.
+ */
+export function explicitLeafAnswers(prompts, positionalValue, options) {
+    const explicit = extractAnswers(options, prompts);
+    const positionalPrompt = prompts.find((prompt) => prompt.positional);
+    if (positionalPrompt && positionalValue !== undefined) {
+        explicit[positionalPrompt.name] = positionalValue;
+    }
+    return explicit;
+}
+/**
+ * The mount's mode resolution — `decideInteraction` over the leaf's five
+ * inputs, with the TTY fact INJECTED so the resolution is testable with
+ * `tty: true` (no suite can drive a real TTY through a subprocess). The
+ * action calls it with {@link cliIsTTY} — the same exported H3 gate the
+ * kernel's interaction context reads — so the mount and `runCreate` can
+ * never disagree about interactivity.
+ */
+export function resolveCreateMode(prompts, explicit, mutation, tty) {
+    return decideInteraction({
+        dryRun: mutation.dryRun,
+        undo: mutation.undo,
+        yes: mutation.yes,
+        isTTY: tty,
+        explicitComplete: explicitAnswersComplete(prompts, explicit),
+    }).mode;
+}
+/**
+ * Write the refusal and set exit 2. The refusal is the cross-CLI parity
+ * surface (contract §3): its default bytes are the shared message verbatim,
+ * no envelope prefix — the summon bin's full stderr, byte for byte — and
+ * ONLY an explicitly requested machine format reframes it, through the
+ * kernel's ONE gate+renderer decision (`renderErrorForFormat`): `--format
+ * json` emits the D3 `{ ok:false, error }` envelope, `--format llm` the
+ * condensed Markdown error form, both as `INVALID_INPUT` through the same
+ * renderers every other pragma error uses. Implicit auto-LLM detection (a
+ * piped run without `--format`) is excluded by the helper's construction —
+ * an inferred output mode must never break refusal byte-parity with summon.
+ */
+function writeRefusal(message, flags) {
+    const rendered = renderErrorForFormat(new PragmaError({ code: "INVALID_INPUT", message }), flags.format);
+    process.stderr.write(`${rendered ?? message}\n`);
+    process.exitCode = 2;
+}
+/**
+ * Mount the generator tree onto the `create` parent command.
+ *
+ * The registration entry `cliProjection.ts` dynamically imports — see this
+ * module's header for why it must not be reached statically.
+ */
+export function mountCreateTree(parent, host) {
+    // The parent's own face: the topic tree (paths + descriptions), on bare
+    // `create` AND on `create --help` alike, exit 0.
+    parent.configureHelp({ formatHelp: () => "" });
+    parent.addHelpText("beforeAll", (ctx) => ctx.command === parent ? `${topicTree(host.programName)}\n` : "");
+    parent.allowExcessArguments(true);
+    parent.action(async () => {
+        const stray = parent.args[0];
+        if (stray !== undefined) {
+            // An unrecognized topic keeps the bin's "Did you mean?" flow (the bin
+            // re-derives the token from argv; this message is cosmetic).
+            throw new CommanderError(2, "commander.unknownCommand", `error: unknown command '${stray}'`);
+        }
+        process.stdout.write(`${topicTree(host.programName)}\n`);
+    });
+    const cliHost = {
+        registerFlags: (cmd) => {
+            // Reset the designed-help suppression a Commander child inherits from
+            // the root program; grouped help re-configures the leaves right after.
+            cmd.configureHelp({});
+            for (const { flag, doc } of MUTATION_FLAG_DOCS) {
+                cmd.option(flag, doc);
+            }
+        },
+        helpFlags: MOUNT_FLAG_HELP,
+        // The seam's presentation half: the projection's structure, pragma's
+        // house style (see createHelp.ts).
+        renderHelp: renderCreateHelp,
+        action: async (entry, positionalValue, options) => {
+            const generator = entry.generator;
+            const explicit = explicitLeafAnswers(generator.prompts, positionalValue, options);
+            const mutation = {
+                dryRun: options.dryRun === true,
+                undo: options.undo === true,
+                yes: options.yes === true,
+            };
+            // The ONE interaction decision — made BEFORE the create runtime loads,
+            // so a refusal never touches summon-core. (`runCreate` re-derives the
+            // same mode from the same inputs to pick its prompt strategy.)
+            const mode = resolveCreateMode(generator.prompts, explicit, mutation, cliIsTTY());
+            if (mode === "refuse") {
+                writeRefusal(refusalMessage(missingExplicitFlags(generator.prompts, explicit)), host.globalFlags);
+                return;
+            }
+            await dispatchPrepared(leafVerb(generator.commandPath), explicit, mutation, host.globalFlags);
+        },
+        onNamespace: (cmd) => {
+            // Reset the designed-help suppression a Commander child inherits from
+            // the root program. The namespace BEHAVIOR (the shared did-you-mean on
+            // a stray segment, help-on-stderr exit 1 when bare) is the
+            // projection's, not the mount's — both hosts emit the same lines.
+            cmd.configureHelp({});
+        },
+        // The projection's usage errors reframe ONLY under an explicitly
+        // requested machine format — the kernel's ONE gate+renderer decision
+        // (`renderErrorForFormat`, shared with `writeRefusal` and bin.ts's
+        // usage-error sites), autoLlm excluded by its construction, so the
+        // default piped bytes stay the cross-CLI parity surface. Codes mirror
+        // bin.ts's classification: unknown command → UNKNOWN_VERB, every other
+        // usage error → INVALID_INPUT. The match is serialized PER KIND: an
+        // unknown SEGMENT is a fuzzy match, so its bare candidate rides in
+        // `suggestions` (substitutable for the token the headline names); an
+        // excess positional's match is NOT substitutable — it may BE the stray
+        // — so that kind instead carries the correction in the covenant's
+        // `recovery.cli` (`[...chain, suggestion].join(" ")`), and ONLY when
+        // that command is a DECLARED RUNNABLE LEAF: `chain` is `[<bin>,
+        // "create", ...segments]`, so everything past the mount point joined
+        // with the suggestion is the CREATE_SURFACE key, and a namespace match
+        // (exit-1 help page, can never scaffold) ships NO recovery.
+        emit: (outcome) => {
+            if (outcome.kind === "namespace-help")
+                return emitToProcess(outcome);
+            const { error } = outcome;
+            const rendered = renderErrorForFormat(new PragmaError({
+                code: error.kind === "unknown-segment" ? "UNKNOWN_VERB" : "INVALID_INPUT",
+                message: error.headline,
+                ...(error.kind === "unknown-segment" && error.suggestion !== undefined
+                    ? { suggestions: [error.suggestion] }
+                    : {}),
+                ...(error.kind === "excess-positional" &&
+                    error.suggestion !== undefined &&
+                    CREATE_SURFACE[[...error.chain.slice(2), error.suggestion].join("/")] !== undefined
+                    ? {
+                        recovery: {
+                            message: "Run the corrected invocation.",
+                            cli: [...error.chain, error.suggestion].join(" "),
+                        },
+                    }
+                    : {}),
+            }), host.globalFlags.format);
+            // No machine format requested: the default piped bytes are the parity
+            // surface.
+            if (rendered === undefined)
+                return emitToProcess(outcome);
+            process.stderr.write(`${rendered}\n`);
+            process.exitCode = outcome.exitCode;
+        },
+    };
+    registerGeneratorCommands(parent, surfaceBarrel(), cliHost);
+}
+/**
+ * The pragma-styled topic tree (paths + descriptions from the manifest):
+ * one row per INVOCABLE command path (`component react`, `package`, …), so
+ * every row is copy-pasteable after `pragma create ` — the same kernel
+ * primitives, and the same shape, as every other noun's verb listing
+ * (`formatNounHelp`).
+ */
+export function topicTree(programName) {
+    const rows = Object.values(CREATE_GENERATORS).flatMap((binding) => binding.paths.map((commandPath) => [
+        commandPath.split("/").join(" "),
+        CREATE_SURFACE[commandPath]?.description ?? "",
+    ]));
+    return [
+        helpUsage(`${programName} create <path...> [options]`),
+        "",
+        "Scaffold from the summon generator tree.",
+        "",
+        helpHeading("Generators"),
+        ...helpColumns(rows),
+        "",
+        helpDim(`Run \`${programName} create <path...> --help\` for a generator's flags.`),
+        helpDim(`The tree mirrors the summon CLI: \`${programName} create <path...>\` ≡ \`summon <path...>\`.`),
+    ].join("\n");
+}
+//# sourceMappingURL=mount.js.map

package/dist/src/capabilities/create/mount.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"mount.js","sourceRoot":"","sources":["../../../../src/capabilities/create/mount.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AAGH,OAAO,EAEL,iBAAiB,EACjB,uBAAuB,EACvB,cAAc,EAGd,oBAAoB,EAEpB,cAAc,GACf,MAAM,mCAAmC,CAAC;AAC3C,OAAO,EAEL,aAAa,EACb,yBAAyB,GAC1B,MAAM,6CAA6C,CAAC;AAErD,OAAO,EAAgB,cAAc,EAAE,MAAM,WAAW,CAAC;AACzD,OAAO,EAAE,WAAW,EAAE,MAAM,6BAA6B,CAAC;AAC1D,OAAO,EAAE,oBAAoB,EAAE,MAAM,mCAAmC,CAAC;AACzE,OAAO,EAAE,kBAAkB,EAAE,MAAM,uCAAuC,CAAC;AAC3E,OAAO,EACL,QAAQ,EACR,gBAAgB,GAEjB,MAAM,sCAAsC,CAAC;AAC9C,OAAO,EACL,WAAW,EACX,OAAO,EACP,WAAW,EACX,SAAS,GACV,MAAM,wCAAwC,CAAC;AAEhD,OAAO,EAAE,iBAAiB,EAAE,MAAM,gBAAgB,CAAC;AACnD,OAAO,EAAE,iBAAiB,EAAE,aAAa,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAC/E,OAAO,EAAE,gBAAgB,EAAE,MAAM,iBAAiB,CAAC;AACnD,OAAO,EAAE,cAAc,EAAE,MAAM,8BAA8B,CAAC;AAU9D,gFAAgF;AAChF,MAAM,eAAe,GAAc;IACjC,gEAAgE;IAChE,wEAAwE;IACxE,wEAAwE;IACxE,uEAAuE;IACvE,WAAW;IACX,GAAG,kBAAkB,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,EAAE,GAAG,EAAE,EAAE,EAAE,CAAC,CAAC;QAC5C,KAAK,EAAE,IAAI;QACX,WAAW,EAAE,GAAG;KACjB,CAAC,CAAC;IACH,EAAE,KAAK,EAAE,QAAQ,EAAE,WAAW,EAAE,kCAAkC,EAAE;CACrE,CAAC;AAEF,4EAA4E;AAC5E,SAAS,aAAa;IACpB,MAAM,OAAO,GAAiC,EAAE,CAAC;IACjD,MAAM,UAAU,GAAG,IAAI,GAAG,EAAU,CAAC;IACrC,KAAK,MAAM,OAAO,IAAI,MAAM,CAAC,MAAM,CAAC,iBAAiB,CAAC,EAAE,CAAC;QACvD,KAAK,MAAM,WAAW,IAAI,OAAO,CAAC,KAAK,EAAE,CAAC;YACxC,MAAM,QAAQ,GAAG,WAAW,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;YACxC,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC;gBAAE,UAAU,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAW,CAAC,CAAC;QACjE,CAAC;IACH,CAAC;IACD,KAAK,MAAM,SAAS,IAAI,UAAU,EAAE,CAAC;QACnC,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,CAAC,SAAS,CAAC,EAAE,WAAW,EAAE,GAAG,SAAS,aAAa,EAAE,CAAC,CAAC;IAC9E,CAAC;IACD,KAAK,MAAM,OAAO,IAAI,MAAM,CAAC,MAAM,CAAC,iBAAiB,CAAC,EAAE,CAAC;QACvD,KAAK,MAAM,WAAW,IAAI,OAAO,CAAC,KAAK,EAAE,CAAC;YACxC,MAAM,OAAO,GAAG,cAAc,CAAC,WAAW,CAAC,CAAC;YAC5C,IAAI,CAAC,OAAO,EAAE,CAAC;gBACb,MAAM,IAAI,KAAK,CACb,oDAAoD,WAAW,qBAAqB,CACrF,CAAC;YACJ,CAAC;YACD,OAAO,CAAC,IAAI,CAAC;gBACX,IAAI,EAAE,WAAW,CAAC,KAAK,CAAC,GAAG,CAAC;gBAC5B,SAAS,EAAE;oBACT,WAAW;oBACX,IAAI,EAAE,EAAE,WAAW,EAAE,OAAO,CAAC,WAAW,EAAE;oBAC1C,OAAO,EAAE,OAAO,CAAC,OAAO;iBACzB;aACF,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IACD,OAAO,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;AAC/D,CAAC;AAED,oDAAoD;AACpD,SAAS,MAAM,CAAC,WAAmB;IACjC,KAAK,MAAM,CAAC,IAAI,EAAE,OAAO,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,iBAAiB,CAAC,EAAE,CAAC;QAChE,IAAK,OAAO,CAAC,KAA2B,CAAC,QAAQ,CAAC,WAAW,CAAC,EAAE,CAAC;YAC/D,OAAO,IAAkB,CAAC;QAC5B,CAAC;IACH,CAAC;IACD,MAAM,IAAI,KAAK,CAAC,2BAA2B,WAAW,EAAE,CAAC,CAAC;AAC5D,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,UAAU,QAAQ,CAAC,WAAmB;IAC1C,MAAM,OAAO,GAAG,cAAc,CAAC,WAAW,CAAC,CAAC;IAC5C,OAAO;QACL,IAAI,EAAE,CAAC,QAAQ,EAAE,MAAM,CAAC,WAAW,CAAC,CAAC;QACrC,OAAO,EAAE,OAAO,EAAE,WAAW,IAAI,WAAW;QAC5C,MAAM,EAAE,EAAE;QACV,MAAM,EAAE,aAAa;QACrB,UAAU,EAAE,iBAAiB;QAC7B,GAAG,EAAE,CAAC,MAAM,EAAE,EAAE,EAAE,EAAE,CAClB,SAAS,CAAC,WAAW,EAAE,MAAM,EAAE,EAAE,CAAqC;KAC7D,CAAC;AAChB,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,mBAAmB,CACjC,OAAmC,EACnC,eAAmC,EACnC,OAAgC;IAEhC,MAAM,QAAQ,GAAG,cAAc,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IAClD,MAAM,gBAAgB,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;IACrE,IAAI,gBAAgB,IAAI,eAAe,KAAK,SAAS,EAAE,CAAC;QACtD,QAAQ,CAAC,gBAAgB,CAAC,IAAI,CAAC,GAAG,eAAe,CAAC;IACpD,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,iBAAiB,CAC/B,OAAmC,EACnC,QAAiC,EACjC,QAAuB,EACvB,GAAY;IAEZ,OAAO,iBAAiB,CAAC;QACvB,MAAM,EAAE,QAAQ,CAAC,MAAM;QACvB,IAAI,EAAE,QAAQ,CAAC,IAAI;QACnB,GAAG,EAAE,QAAQ,CAAC,GAAG;QACjB,KAAK,EAAE,GAAG;QACV,gBAAgB,EAAE,uBAAuB,CAAC,OAAO,EAAE,QAAQ,CAAC;KAC7D,CAAC,CAAC,IAAI,CAAC;AACV,CAAC;AAED;;;;;;;;;;;GAWG;AACH,SAAS,YAAY,CACnB,OAAe,EACf,KAA0D;IAE1D,MAAM,QAAQ,GAAG,oBAAoB,CACnC,IAAI,WAAW,CAAC,EAAE,IAAI,EAAE,eAAe,EAAE,OAAO,EAAE,CAAC,EACnD,KAAK,CAAC,MAAM,CACb,CAAC;IACF,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,QAAQ,IAAI,OAAO,IAAI,CAAC,CAAC;IACjD,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;AACvB,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,eAAe,CAAC,MAAe,EAAE,IAAkB;IACjE,wEAAwE;IACxE,iDAAiD;IACjD,MAAM,CAAC,aAAa,CAAC,EAAE,UAAU,EAAE,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC;IAC/C,MAAM,CAAC,WAAW,CAAC,WAAW,EAAE,CAAC,GAAG,EAAE,EAAE,CACtC,GAAG,CAAC,OAAO,KAAK,MAAM,CAAC,CAAC,CAAC,GAAG,SAAS,CAAC,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CACjE,CAAC;IACF,MAAM,CAAC,oBAAoB,CAAC,IAAI,CAAC,CAAC;IAClC,MAAM,CAAC,MAAM,CAAC,KAAK,IAAI,EAAE;QACvB,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAC7B,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;YACxB,sEAAsE;YACtE,6DAA6D;YAC7D,MAAM,IAAI,cAAc,CACtB,CAAC,EACD,0BAA0B,EAC1B,2BAA2B,KAAK,GAAG,CACpC,CAAC;QACJ,CAAC;QACD,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,SAAS,CAAC,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC;IAC3D,CAAC,CAAC,CAAC;IAEH,MAAM,OAAO,GAAgC;QAC3C,aAAa,EAAE,CAAC,GAAG,EAAE,EAAE;YACrB,sEAAsE;YACtE,uEAAuE;YACvE,GAAG,CAAC,aAAa,CAAC,EAAE,CAAC,CAAC;YACtB,KAAK,MAAM,EAAE,IAAI,EAAE,GAAG,EAAE,IAAI,kBAAkB,EAAE,CAAC;gBAC/C,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;YACxB,CAAC;QACH,CAAC;QACD,SAAS,EAAE,eAAe;QAC1B,qEAAqE;QACrE,mCAAmC;QACnC,UAAU,EAAE,gBAAgB;QAC5B,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,eAAe,EAAE,OAAO,EAAE,EAAE;YAChD,MAAM,SAAS,GAAG,KAAK,CAAC,SAAyB,CAAC;YAClD,MAAM,QAAQ,GAAG,mBAAmB,CAClC,SAAS,CAAC,OAAO,EACjB,eAAe,EACf,OAAO,CACR,CAAC;YACF,MAAM,QAAQ,GAAG;gBACf,MAAM,EAAE,OAAO,CAAC,MAAM,KAAK,IAAI;gBAC/B,IAAI,EAAE,OAAO,CAAC,IAAI,KAAK,IAAI;gBAC3B,GAAG,EAAE,OAAO,CAAC,GAAG,KAAK,IAAI;aAC1B,CAAC;YACF,uEAAuE;YACvE,sEAAsE;YACtE,+DAA+D;YAC/D,MAAM,IAAI,GAAG,iBAAiB,CAC5B,SAAS,CAAC,OAAO,EACjB,QAAQ,EACR,QAAQ,EACR,QAAQ,EAAE,CACX,CAAC;YACF,IAAI,IAAI,KAAK,QAAQ,EAAE,CAAC;gBACtB,YAAY,CACV,cAAc,CAAC,oBAAoB,CAAC,SAAS,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC,EACjE,IAAI,CAAC,WAAW,CACjB,CAAC;gBACF,OAAO;YACT,CAAC;YACD,MAAM,gBAAgB,CACpB,QAAQ,CAAC,SAAS,CAAC,WAAW,CAAC,EAC/B,QAAQ,EACR,QAAQ,EACR,IAAI,CAAC,WAAW,CACjB,CAAC;QACJ,CAAC;QACD,WAAW,EAAE,CAAC,GAAG,EAAE,EAAE;YACnB,sEAAsE;YACtE,uEAAuE;YACvE,2DAA2D;YAC3D,kEAAkE;YAClE,GAAG,CAAC,aAAa,CAAC,EAAE,CAAC,CAAC;QACxB,CAAC;QACD,iEAAiE;QACjE,qEAAqE;QACrE,mEAAmE;QACnE,mEAAmE;QACnE,sEAAsE;QACtE,uEAAuE;QACvE,oEAAoE;QACpE,mEAAmE;QACnE,qEAAqE;QACrE,uEAAuE;QACvE,kEAAkE;QAClE,qEAAqE;QACrE,gEAAgE;QAChE,qEAAqE;QACrE,uEAAuE;QACvE,4DAA4D;QAC5D,IAAI,EAAE,CAAC,OAAO,EAAE,EAAE;YAChB,IAAI,OAAO,CAAC,IAAI,KAAK,gBAAgB;gBAAE,OAAO,aAAa,CAAC,OAAO,CAAC,CAAC;YACrE,MAAM,EAAE,KAAK,EAAE,GAAG,OAAO,CAAC;YAC1B,MAAM,QAAQ,GAAG,oBAAoB,CACnC,IAAI,WAAW,CAAC;gBACd,IAAI,EACF,KAAK,CAAC,IAAI,KAAK,iBAAiB,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,eAAe;gBACrE,OAAO,EAAE,KAAK,CAAC,QAAQ;gBACvB,GAAG,CAAC,KAAK,CAAC,IAAI,KAAK,iBAAiB,IAAI,KAAK,CAAC,UAAU,KAAK,SAAS;oBACpE,CAAC,CAAC,EAAE,WAAW,EAAE,CAAC,KAAK,CAAC,UAAU,CAAC,EAAE;oBACrC,CAAC,CAAC,EAAE,CAAC;gBACP,GAAG,CAAC,KAAK,CAAC,IAAI,KAAK,mBAAmB;oBACtC,KAAK,CAAC,UAAU,KAAK,SAAS;oBAC9B,cAAc,CACZ,CAAC,GAAG,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CACtD,KAAK,SAAS;oBACb,CAAC,CAAC;wBACE,QAAQ,EAAE;4BACR,OAAO,EAAE,+BAA+B;4BACxC,GAAG,EAAE,CAAC,GAAG,KAAK,CAAC,KAAK,EAAE,KAAK,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC;yBAClD;qBACF;oBACH,CAAC,CAAC,EAAE,CAAC;aACR,CAAC,EACF,IAAI,CAAC,WAAW,CAAC,MAAM,CACxB,CAAC;YACF,sEAAsE;YACtE,WAAW;YACX,IAAI,QAAQ,KAAK,SAAS;gBAAE,OAAO,aAAa,CAAC,OAAO,CAAC,CAAC;YAC1D,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,QAAQ,IAAI,CAAC,CAAC;YACtC,OAAO,CAAC,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAC;QACtC,CAAC;KACF,CAAC;IAEF,yBAAyB,CAAC,MAAM,EAAE,aAAa,EAAE,EAAE,OAAO,CAAC,CAAC;AAC9D,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,SAAS,CAAC,WAAmB;IAC3C,MAAM,IAAI,GAAG,MAAM,CAAC,MAAM,CAAC,iBAAiB,CAAC,CAAC,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAChE,OAAO,CAAC,KAAK,CAAC,GAAG,CACf,CAAC,WAAW,EAAE,EAAE,CACd;QACE,WAAW,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC;QAChC,cAAc,CAAC,WAAW,CAAC,EAAE,WAAW,IAAI,EAAE;KACtC,CACb,CACF,CAAC;IACF,OAAO;QACL,SAAS,CAAC,GAAG,WAAW,6BAA6B,CAAC;QACtD,EAAE;QACF,0CAA0C;QAC1C,EAAE;QACF,WAAW,CAAC,YAAY,CAAC;QACzB,GAAG,WAAW,CAAC,IAAI,CAAC;QACpB,EAAE;QACF,OAAO,CACL,SAAS,WAAW,qDAAqD,CAC1E;QACD,OAAO,CACL,sCAAsC,WAAW,6CAA6C,CAC/F;KACF,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACf,CAAC"}

package/dist/src/capabilities/create/pathJail.js

@@ -0,0 +1,65 @@
+/**
+ * SEC-2 path jail: an independent guard that a `create` output path stays inside
+ * the workspace, run BEFORE any effect. It rejects an absolute path, a `..`
+ * escape, and — via `realpath` on the nearest existing ancestor — a symlink that
+ * points out of the tree. This is defence in depth: the generators' own prompt
+ * validators (`validateComponentPath`, `validateAppPath`) reject absolute/`..`
+ * uniformly across the declared path prompts — in BOTH hosts, upstream of this
+ * jail — so the jail is pragma's host-level backstop, and its symlink check is
+ * the one tier the shared validators do not have (summon relies on the
+ * validator tier; hoisting the realpath check into the shared layer is a named
+ * follow-up).
+ */
+import { existsSync, realpathSync } from "node:fs";
+import * as path from "node:path";
+import { PragmaError } from "../../kernel/error/index.js";
+/** Walk up from `p` to the nearest ancestor that exists on disk. */
+function nearestExisting(p) {
+    let current = p;
+    while (!existsSync(current)) {
+        const parent = path.dirname(current);
+        if (parent === current)
+            return current; // filesystem root
+        current = parent;
+    }
+    return current;
+}
+/** Whether `rel` (a `path.relative` result) points at or above its base. */
+const escapes = (rel) => rel === ".." || rel.startsWith(`..${path.sep}`) || path.isAbsolute(rel);
+/**
+ * Reject a create output path that would escape the workspace root (`cwd`).
+ *
+ * @param field - The param name being jailed (for the error message).
+ * @param value - The path value (skipped when absent — the generator's own safe
+ *   default is used instead).
+ * @param cwd - The workspace root the path must stay within.
+ * @throws PragmaError INVALID_INPUT when the path escapes the workspace.
+ * @note Impure — reads the filesystem (`existsSync`/`realpathSync`).
+ */
+export function assertInsideWorkspace(field, value, cwd) {
+    if (typeof value !== "string" || value === "")
+        return;
+    if (path.isAbsolute(value)) {
+        throw PragmaError.invalidInput(field, value, {
+            recovery: { message: "Use a path relative to the current directory." },
+        });
+    }
+    const root = path.resolve(cwd);
+    const resolved = path.resolve(root, value);
+    if (escapes(path.relative(root, resolved))) {
+        throw PragmaError.invalidInput(field, value, {
+            recovery: { message: "The path must stay inside the workspace." },
+        });
+    }
+    // Symlink escape: the nearest existing ancestor, resolved through symlinks,
+    // must still sit within the resolved workspace root.
+    const realRoot = realpathSync(root);
+    const realAncestor = realpathSync(nearestExisting(resolved));
+    if (realAncestor !== realRoot &&
+        escapes(path.relative(realRoot, realAncestor))) {
+        throw PragmaError.invalidInput(field, value, {
+            recovery: { message: "The path resolves outside the workspace." },
+        });
+    }
+}
+//# sourceMappingURL=pathJail.js.map

package/dist/src/capabilities/create/pathJail.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"pathJail.js","sourceRoot":"","sources":["../../../../src/capabilities/create/pathJail.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACnD,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAClC,OAAO,EAAE,WAAW,EAAE,MAAM,6BAA6B,CAAC;AAE1D,oEAAoE;AACpE,SAAS,eAAe,CAAC,CAAS;IAChC,IAAI,OAAO,GAAG,CAAC,CAAC;IAChB,OAAO,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;QAC5B,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;QACrC,IAAI,MAAM,KAAK,OAAO;YAAE,OAAO,OAAO,CAAC,CAAC,kBAAkB;QAC1D,OAAO,GAAG,MAAM,CAAC;IACnB,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,4EAA4E;AAC5E,MAAM,OAAO,GAAG,CAAC,GAAW,EAAW,EAAE,CACvC,GAAG,KAAK,IAAI,IAAI,GAAG,CAAC,UAAU,CAAC,KAAK,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC;AAE1E;;;;;;;;;GASG;AACH,MAAM,UAAU,qBAAqB,CACnC,KAAa,EACb,KAAc,EACd,GAAW;IAEX,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,EAAE;QAAE,OAAO;IAEtD,IAAI,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,EAAE,CAAC;QAC3B,MAAM,WAAW,CAAC,YAAY,CAAC,KAAK,EAAE,KAAK,EAAE;YAC3C,QAAQ,EAAE,EAAE,OAAO,EAAE,+CAA+C,EAAE;SACvE,CAAC,CAAC;IACL,CAAC;IAED,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IAC/B,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;IAC3C,IAAI,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC,EAAE,CAAC;QAC3C,MAAM,WAAW,CAAC,YAAY,CAAC,KAAK,EAAE,KAAK,EAAE;YAC3C,QAAQ,EAAE,EAAE,OAAO,EAAE,0CAA0C,EAAE;SAClE,CAAC,CAAC;IACL,CAAC;IAED,4EAA4E;IAC5E,qDAAqD;IACrD,MAAM,QAAQ,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC;IACpC,MAAM,YAAY,GAAG,YAAY,CAAC,eAAe,CAAC,QAAQ,CAAC,CAAC,CAAC;IAC7D,IACE,YAAY,KAAK,QAAQ;QACzB,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,QAAQ,EAAE,YAAY,CAAC,CAAC,EAC9C,CAAC;QACD,MAAM,WAAW,CAAC,YAAY,CAAC,KAAK,EAAE,KAAK,EAAE;YAC3C,QAAQ,EAAE,EAAE,OAAO,EAAE,0CAA0C,EAAE;SAClE,CAAC,CAAC;IACL,CAAC;AACH,CAAC"}

package/dist/src/capabilities/create/pickGenerator.js

@@ -0,0 +1,53 @@
+import { generators as applicationGenerators } from "@canonical/summon-application";
+import { generators as componentGenerators } from "@canonical/summon-component";
+import { generators as packageGenerators } from "@canonical/summon-package";
+import { PragmaError } from "../../kernel/error/index.js";
+import { CREATE_GENERATORS } from "./constants.js";
+/**
+ * The declared packages' generator maps, bound by noun. The STATIC imports above
+ * are load-bearing: a computed `import(CREATE_GENERATORS[kind].name)` is opaque
+ * to every bundler and analyser, and the historical cost was measured — under
+ * `bun build --compile` it left the generators out of the artifact entirely
+ * (`Cannot find module '@canonical/summon-component'`). The declaration decides
+ * WHICH generator runs; it cannot decide which module is reachable.
+ *
+ * The maps' `generate` is invariant in its (specific) answer type, so they are
+ * erased to the base definition via `unknown` — runtime-safe because `execute`
+ * calls `generate(answers)` with the resolved answers, which carry the fields
+ * the specific generator reads.
+ */
+const GENERATOR_MAPS = {
+    component: componentGenerators,
+    package: packageGenerators,
+    application: applicationGenerators,
+};
+/**
+ * Pick the generator for one FULL COMMAND PATH (`component/react`,
+ * `package`, `application/react`) — a straight lookup over the declared
+ * bindings, no framework axis: the path IS the identity, exactly as summon's
+ * tree keys it. Callers with a kind+framework surface (MCP) map to a path
+ * first.
+ *
+ * The module this lives in statically imports the summon generator packages'
+ * `generators` maps — and importing them pulls summon-core. So it MUST stay
+ * behind `create`'s lazy `import()` (R9): the fast paths (`buildProgram` /
+ * `__complete` / `--help` / reads) never load it, and `create --yes` never
+ * loads React either (summon-core's Ink UI is dynamic-only).
+ *
+ * @param commandPath - The declared command path to run.
+ * @returns The selected generator definition.
+ * @throws PragmaError INTERNAL for an undeclared path (callers validate
+ *   user-facing inputs before mapping to a path).
+ */
+export function pickGenerator(commandPath) {
+    for (const [kind, binding] of Object.entries(CREATE_GENERATORS)) {
+        if (binding.paths.includes(commandPath)) {
+            const generator = GENERATOR_MAPS[kind][commandPath];
+            if (generator)
+                return generator;
+            break;
+        }
+    }
+    throw PragmaError.internalError(`missing generator for ${commandPath}`);
+}
+//# sourceMappingURL=pickGenerator.js.map

package/dist/src/capabilities/create/pickGenerator.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"pickGenerator.js","sourceRoot":"","sources":["../../../../src/capabilities/create/pickGenerator.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,IAAI,qBAAqB,EAAE,MAAM,+BAA+B,CAAC;AACpF,OAAO,EAAE,UAAU,IAAI,mBAAmB,EAAE,MAAM,6BAA6B,CAAC;AAEhF,OAAO,EAAE,UAAU,IAAI,iBAAiB,EAAE,MAAM,2BAA2B,CAAC;AAC5E,OAAO,EAAE,WAAW,EAAE,MAAM,6BAA6B,CAAC;AAC1D,OAAO,EAAE,iBAAiB,EAAE,MAAM,gBAAgB,CAAC;AAKnD;;;;;;;;;;;;GAYG;AACH,MAAM,cAAc,GAAqC;IACvD,SAAS,EAAE,mBAA8C;IACzD,OAAO,EAAE,iBAA4C;IACrD,WAAW,EAAE,qBAAgD;CAC9D,CAAC;AAEF;;;;;;;;;;;;;;;;;GAiBG;AACH,MAAM,UAAU,aAAa,CAAC,WAAmB;IAC/C,KAAK,MAAM,CAAC,IAAI,EAAE,OAAO,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,iBAAiB,CAAC,EAAE,CAAC;QAChE,IAAK,OAAO,CAAC,KAA2B,CAAC,QAAQ,CAAC,WAAW,CAAC,EAAE,CAAC;YAC/D,MAAM,SAAS,GAAG,cAAc,CAAC,IAAkB,CAAC,CAAC,WAAW,CAAC,CAAC;YAClE,IAAI,SAAS;gBAAE,OAAO,SAAS,CAAC;YAChC,MAAM;QACR,CAAC;IACH,CAAC;IACD,MAAM,WAAW,CAAC,aAAa,CAAC,yBAAyB,WAAW,EAAE,CAAC,CAAC;AAC1E,CAAC"}

package/dist/src/capabilities/create/types.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=types.js.map

package/dist/src/capabilities/create/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../../../src/capabilities/create/types.ts"],"names":[],"mappings":""}

package/dist/src/capabilities/distribution.js

@@ -0,0 +1,40 @@
+/**
+ * The distribution's own read stories, compiled at module load.
+ *
+ * `pragma.conf.ts` declares them on the packs that supply them; this is the ONE
+ * place those declarations become capabilities. They come through the SAME door
+ * a third-party story does — {@link compileStoryModule} — so the mechanism the CLI
+ * offers forks is the mechanism the CLI itself runs on.
+ *
+ * They are compiled STATICALLY rather than merged at dispatch on purpose: the
+ * `--help` / `__complete` fast paths read the static capability set, and
+ * `surface/surface.v2.json` freezes the emitted surface, so a noun that only
+ * arrived at dispatch would vanish from help and completion on a fresh install.
+ * That is affordable because this module is zod-free and pure — `pragma.conf.ts`
+ * is inert data and the compiler builds specs without touching the store.
+ *
+ * Config- and package-declared stories still OVERRIDE these at dispatch; the
+ * `story` marker on each module is what tells `assembleEffectiveModules` which
+ * modules may be replaced.
+ */
+import conf from "../../pragma.conf.js";
+import { compileStoryModule } from "../kernel/packs/compile.js";
+import { distributionSource, } from "../kernel/packs/types.js";
+import { DEFAULT_PREFIX_MAP } from "../kernel/render/index.js";
+/** The read stories `pragma.conf.ts` declares on its packs, by noun. */
+export const declaredStories = new Map(conf.packs
+    .flatMap((pack) => pack.stories ?? [])
+    .map((story) => [story.noun, story]));
+/**
+ * Those stories compiled to capability modules, by noun.
+ *
+ * `capabilities/index.ts` appends every module no authored one claims — and
+ * since L-OPEN-9 that is every one of them: no data noun is authored, so a
+ * declared story IS the whole noun. `distribution.test.ts` holds that shut by
+ * asserting each registered module's verbs deep-equal its compiled story's.
+ */
+export const storyModules = new Map([...declaredStories].map(([noun, story]) => [
+    noun,
+    compileStoryModule(story, distributionSource("pragma.conf.ts"), DEFAULT_PREFIX_MAP),
+]));
+//# sourceMappingURL=distribution.js.map

package/dist/src/capabilities/distribution.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"distribution.js","sourceRoot":"","sources":["../../../src/capabilities/distribution.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAEH,OAAO,IAAI,MAAM,sBAAsB,CAAC;AACxC,OAAO,EAAE,kBAAkB,EAAE,MAAM,4BAA4B,CAAC;AAChE,OAAO,EACL,kBAAkB,GAEnB,MAAM,0BAA0B,CAAC;AAClC,OAAO,EAAE,kBAAkB,EAAE,MAAM,2BAA2B,CAAC;AAG/D,wEAAwE;AACxE,MAAM,CAAC,MAAM,eAAe,GAAwC,IAAI,GAAG,CACzE,IAAI,CAAC,KAAK;KACP,OAAO,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,IAAI,EAAE,CAAC;KACrC,GAAG,CAAC,CAAC,KAAK,EAAqC,EAAE,CAAC,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC,CAC1E,CAAC;AAEF;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,YAAY,GAA0C,IAAI,GAAG,CACxE,CAAC,GAAG,eAAe,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC;IAC1C,IAAI;IACJ,kBAAkB,CAChB,KAAK,EACL,kBAAkB,CAAC,gBAAgB,CAAC,EACpC,kBAAkB,CACnB;CACF,CAAC,CACH,CAAC"}

package/dist/src/capabilities/doctor/checks/checkKeStore.js

@@ -0,0 +1,40 @@
+import { BIN_NAME } from "../../../constants.js";
+import { entityTotal } from "../../../kernel/completion/entitySource.js";
+/**
+ * Check that the local store boots, reporting the entity total and boot time.
+ * The check is NAMED "store" in the report — the same word every other surface
+ * uses for it; the ke library it boots through is an implementation detail.
+ *
+ * This is the ONE check that touches the store — it boots the shared lazy store
+ * inside a try/catch, so doctor stays storeless-by-default at the dispatch level
+ * (the verb declares `needsStore: false`; only this check pays the boot, only
+ * when reached). On success it reads the entity total from the session's
+ * storeless index rather than a fresh triple COUNT — cheaper, and the store is
+ * already booted.
+ *
+ * @param rt - The per-invocation runtime.
+ * @returns A CheckResult: pass with the entity total, or fail with a remedy.
+ * @note Impure — boots the store.
+ */
+export async function checkKeStore(rt) {
+    const start = performance.now();
+    try {
+        const session = await rt.store.get();
+        const total = entityTotal(session.index);
+        const elapsed = Math.round(performance.now() - start);
+        return {
+            name: "store",
+            status: "pass",
+            detail: `${total.toLocaleString()} entities in ${elapsed}ms`,
+        };
+    }
+    catch {
+        return {
+            name: "store",
+            status: "fail",
+            detail: "cannot boot",
+            remedy: `Ensure design-system packs are configured and run \`${BIN_NAME} sources update\`.`,
+        };
+    }
+}
+//# sourceMappingURL=checkKeStore.js.map

package/dist/src/capabilities/doctor/checks/checkKeStore.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"checkKeStore.js","sourceRoot":"","sources":["../../../../../src/capabilities/doctor/checks/checkKeStore.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,uBAAuB,CAAC;AACjD,OAAO,EAAE,WAAW,EAAE,MAAM,4CAA4C,CAAC;AAIzE;;;;;;;;;;;;;;;GAeG;AACH,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,EAAiB;IAClD,MAAM,KAAK,GAAG,WAAW,CAAC,GAAG,EAAE,CAAC;IAChC,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,MAAM,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC;QACrC,MAAM,KAAK,GAAG,WAAW,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;QACzC,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,GAAG,EAAE,GAAG,KAAK,CAAC,CAAC;QACtD,OAAO;YACL,IAAI,EAAE,OAAO;YACb,MAAM,EAAE,MAAM;YACd,MAAM,EAAE,GAAG,KAAK,CAAC,cAAc,EAAE,gBAAgB,OAAO,IAAI;SAC7D,CAAC;IACJ,CAAC;IAAC,MAAM,CAAC;QACP,OAAO;YACL,IAAI,EAAE,OAAO;YACb,MAAM,EAAE,MAAM;YACd,MAAM,EAAE,aAAa;YACrB,MAAM,EAAE,uDAAuD,QAAQ,oBAAoB;SAC5F,CAAC;IACJ,CAAC;AACH,CAAC"}

package/dist/src/capabilities/doctor/checks/checkNodeVersion.js

@@ -0,0 +1,21 @@
+const MIN_NODE_MAJOR = 20;
+/**
+ * Check that the Node.js major version is at least {@link MIN_NODE_MAJOR}.
+ *
+ * @returns A CheckResult with the current version and pass/fail status.
+ * @note Impure — reads `process.versions`.
+ */
+export async function checkNodeVersion() {
+    const version = process.versions.node;
+    const major = Number.parseInt(version.split(".")[0] ?? "0", 10);
+    if (major >= MIN_NODE_MAJOR) {
+        return { name: "Node version", status: "pass", detail: `v${version}` };
+    }
+    return {
+        name: "Node version",
+        status: "fail",
+        detail: `v${version} (requires >= ${MIN_NODE_MAJOR})`,
+        remedy: `Install Node.js >= ${MIN_NODE_MAJOR}`,
+    };
+}
+//# sourceMappingURL=checkNodeVersion.js.map

package/dist/src/capabilities/doctor/checks/checkNodeVersion.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"checkNodeVersion.js","sourceRoot":"","sources":["../../../../../src/capabilities/doctor/checks/checkNodeVersion.ts"],"names":[],"mappings":"AAEA,MAAM,cAAc,GAAG,EAAE,CAAC;AAE1B;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB;IACpC,MAAM,OAAO,GAAG,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC;IACtC,MAAM,KAAK,GAAG,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,GAAG,EAAE,EAAE,CAAC,CAAC;IAEhE,IAAI,KAAK,IAAI,cAAc,EAAE,CAAC;QAC5B,OAAO,EAAE,IAAI,EAAE,cAAc,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,OAAO,EAAE,EAAE,CAAC;IACzE,CAAC;IAED,OAAO;QACL,IAAI,EAAE,cAAc;QACpB,MAAM,EAAE,MAAM;QACd,MAAM,EAAE,IAAI,OAAO,iBAAiB,cAAc,GAAG;QACrD,MAAM,EAAE,sBAAsB,cAAc,EAAE;KAC/C,CAAC;AACJ,CAAC"}