@codyswann/lisa 2.235.0 → 2.236.0

package/dist/cli/ui-github-repo-map.js

@@ -0,0 +1,150 @@
+/**
+ * Require a boolean field from a plain object.
+ * @param record - Source object
+ * @param key - Property name
+ * @returns Boolean value
+ */
+function requireBoolean(record, key) {
+    const value = Reflect.get(record, key);
+    if (typeof value !== "boolean") {
+        throw new TypeError(`Repository settings omitted boolean ${key}`);
+    }
+    return value;
+}
+/**
+ * Require a string field from a plain object.
+ * @param record - Source object
+ * @param key - Property name
+ * @returns String value
+ */
+function requireString(record, key) {
+    const value = Reflect.get(record, key);
+    if (typeof value !== "string" || value.trim().length === 0) {
+        throw new TypeError(`Repository settings omitted string ${key}`);
+    }
+    return value;
+}
+/**
+ * Derive secret-scanning enabled from the security_and_analysis payload.
+ * @param record - Repository API object
+ * @returns Whether secret scanning is enabled
+ */
+function secretScanningEnabled(record) {
+    const security = Reflect.get(record, "security_and_analysis");
+    if (security === null || typeof security !== "object") {
+        return false;
+    }
+    const scanning = Reflect.get(security, "secret_scanning");
+    if (scanning === null || typeof scanning !== "object") {
+        return false;
+    }
+    return Reflect.get(scanning, "status") === "enabled";
+}
+/**
+ * Map repository JSON into the panel settings shape.
+ * @param raw - Parsed `gh api repos/{owner}/{repo}` payload
+ * @returns Settings for the console
+ */
+export function mapRepoSettings(raw) {
+    if (raw === null || typeof raw !== "object" || Array.isArray(raw)) {
+        throw new TypeError("Repository settings response was not an object");
+    }
+    return {
+        allow_merge_commit: requireBoolean(raw, "allow_merge_commit"),
+        allow_squash_merge: requireBoolean(raw, "allow_squash_merge"),
+        allow_rebase_merge: requireBoolean(raw, "allow_rebase_merge"),
+        allow_auto_merge: requireBoolean(raw, "allow_auto_merge"),
+        allow_update_branch: requireBoolean(raw, "allow_update_branch"),
+        delete_branch_on_merge: requireBoolean(raw, "delete_branch_on_merge"),
+        merge_commit_title: requireString(raw, "merge_commit_title"),
+        has_issues: requireBoolean(raw, "has_issues"),
+        has_wiki: requireBoolean(raw, "has_wiki"),
+        secret_scanning: secretScanningEnabled(raw),
+        default_branch: requireString(raw, "default_branch"),
+    };
+}
+/**
+ * Humanize ruleset ref includes for the Applies-to column.
+ * @param includes - Ruleset condition include list
+ * @returns Display string
+ */
+function formatAppliesTo(includes) {
+    if (includes.length === 0) {
+        return "—";
+    }
+    return includes
+        .map(entry => entry
+        .replace(/^refs\/heads\//u, "")
+        .replace(/^refs\/tags\//u, "")
+        .replace(/^~DEFAULT_BRANCH$/u, "default"))
+        .join(" · ");
+}
+/**
+ * Extract ref_name.include strings from a ruleset conditions object.
+ * @param conditions - Ruleset conditions payload
+ * @returns Include list, or empty when absent
+ */
+function rulesetIncludes(conditions) {
+    if (conditions === null ||
+        typeof conditions !== "object" ||
+        Array.isArray(conditions)) {
+        return [];
+    }
+    const refName = Reflect.get(conditions, "ref_name");
+    if (refName === null ||
+        typeof refName !== "object" ||
+        Array.isArray(refName)) {
+        return [];
+    }
+    const include = Reflect.get(refName, "include");
+    if (!Array.isArray(include)) {
+        return [];
+    }
+    return include.filter((entry) => typeof entry === "string");
+}
+/**
+ * Extract rule type names from a ruleset rules array.
+ * @param rules - Ruleset rules payload
+ * @returns Rule type strings
+ */
+function rulesetRuleTypes(rules) {
+    if (!Array.isArray(rules)) {
+        return [];
+    }
+    return rules
+        .map(rule => {
+        if (rule === null || typeof rule !== "object") {
+            return undefined;
+        }
+        const type = Reflect.get(rule, "type");
+        return typeof type === "string" ? type : undefined;
+    })
+        .filter((type) => type !== undefined);
+}
+/**
+ * Map a detailed ruleset payload into a panel row.
+ * @param raw - One ruleset object from gh api
+ * @returns Panel row
+ */
+export function mapRulesetRow(raw) {
+    if (raw === null || typeof raw !== "object" || Array.isArray(raw)) {
+        throw new TypeError("Ruleset entry was not an object");
+    }
+    const ruleTypes = rulesetRuleTypes(Reflect.get(raw, "rules"));
+    return {
+        name: requireString(raw, "name"),
+        appliesTo: formatAppliesTo(rulesetIncludes(Reflect.get(raw, "conditions"))),
+        enforces: ruleTypes.length > 0 ? ruleTypes.join(", ") : "—",
+        active: Reflect.get(raw, "enforcement") === "active",
+    };
+}
+/**
+ * Require a non-empty string field (shared by label/secret list parsers).
+ * @param record - Source object
+ * @param key - Property name
+ * @returns String value
+ */
+export function requireNamedString(record, key) {
+    return requireString(record, key);
+}
+//# sourceMappingURL=ui-github-repo-map.js.map

package/dist/cli/ui-github-repo-map.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ui-github-repo-map.js","sourceRoot":"","sources":["../../src/cli/ui-github-repo-map.ts"],"names":[],"mappings":"AASA;;;;;GAKG;AACH,SAAS,cAAc,CAAC,MAAc,EAAE,GAAW;IACjD,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;IACvC,IAAI,OAAO,KAAK,KAAK,SAAS,EAAE,CAAC;QAC/B,MAAM,IAAI,SAAS,CAAC,uCAAuC,GAAG,EAAE,CAAC,CAAC;IACpE,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;;;GAKG;AACH,SAAS,aAAa,CAAC,MAAc,EAAE,GAAW;IAChD,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;IACvC,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC3D,MAAM,IAAI,SAAS,CAAC,sCAAsC,GAAG,EAAE,CAAC,CAAC;IACnE,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;;GAIG;AACH,SAAS,qBAAqB,CAAC,MAAc;IAC3C,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,MAAM,EAAE,uBAAuB,CAAC,CAAC;IAC9D,IAAI,QAAQ,KAAK,IAAI,IAAI,OAAO,QAAQ,KAAK,QAAQ,EAAE,CAAC;QACtD,OAAO,KAAK,CAAC;IACf,CAAC;IACD,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,QAAQ,EAAE,iBAAiB,CAAC,CAAC;IAC1D,IAAI,QAAQ,KAAK,IAAI,IAAI,OAAO,QAAQ,KAAK,QAAQ,EAAE,CAAC;QACtD,OAAO,KAAK,CAAC;IACf,CAAC;IACD,OAAO,OAAO,CAAC,GAAG,CAAC,QAAQ,EAAE,QAAQ,CAAC,KAAK,SAAS,CAAC;AACvD,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,eAAe,CAAC,GAAY;IAC1C,IAAI,GAAG,KAAK,IAAI,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;QAClE,MAAM,IAAI,SAAS,CAAC,gDAAgD,CAAC,CAAC;IACxE,CAAC;IACD,OAAO;QACL,kBAAkB,EAAE,cAAc,CAAC,GAAG,EAAE,oBAAoB,CAAC;QAC7D,kBAAkB,EAAE,cAAc,CAAC,GAAG,EAAE,oBAAoB,CAAC;QAC7D,kBAAkB,EAAE,cAAc,CAAC,GAAG,EAAE,oBAAoB,CAAC;QAC7D,gBAAgB,EAAE,cAAc,CAAC,GAAG,EAAE,kBAAkB,CAAC;QACzD,mBAAmB,EAAE,cAAc,CAAC,GAAG,EAAE,qBAAqB,CAAC;QAC/D,sBAAsB,EAAE,cAAc,CAAC,GAAG,EAAE,wBAAwB,CAAC;QACrE,kBAAkB,EAAE,aAAa,CAAC,GAAG,EAAE,oBAAoB,CAAC;QAC5D,UAAU,EAAE,cAAc,CAAC,GAAG,EAAE,YAAY,CAAC;QAC7C,QAAQ,EAAE,cAAc,CAAC,GAAG,EAAE,UAAU,CAAC;QACzC,eAAe,EAAE,qBAAqB,CAAC,GAAG,CAAC;QAC3C,cAAc,EAAE,aAAa,CAAC,GAAG,EAAE,gBAAgB,CAAC;KACrD,CAAC;AACJ,CAAC;AAED;;;;GAIG;AACH,SAAS,eAAe,CAAC,QAA2B;IAClD,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC1B,OAAO,GAAG,CAAC;IACb,CAAC;IACD,OAAO,QAAQ;SACZ,GAAG,CAAC,KAAK,CAAC,EAAE,CACX,KAAK;SACF,OAAO,CAAC,iBAAiB,EAAE,EAAE,CAAC;SAC9B,OAAO,CAAC,gBAAgB,EAAE,EAAE,CAAC;SAC7B,OAAO,CAAC,oBAAoB,EAAE,SAAS,CAAC,CAC5C;SACA,IAAI,CAAC,KAAK,CAAC,CAAC;AACjB,CAAC;AAED;;;;GAIG;AACH,SAAS,eAAe,CAAC,UAAmB;IAC1C,IACE,UAAU,KAAK,IAAI;QACnB,OAAO,UAAU,KAAK,QAAQ;QAC9B,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC,EACzB,CAAC;QACD,OAAO,EAAE,CAAC;IACZ,CAAC;IACD,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC,UAAU,EAAE,UAAU,CAAC,CAAC;IACpD,IACE,OAAO,KAAK,IAAI;QAChB,OAAO,OAAO,KAAK,QAAQ;QAC3B,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,EACtB,CAAC;QACD,OAAO,EAAE,CAAC;IACZ,CAAC;IACD,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;IAChD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;QAC5B,OAAO,EAAE,CAAC;IACZ,CAAC;IACD,OAAO,OAAO,CAAC,MAAM,CAAC,CAAC,KAAK,EAAmB,EAAE,CAAC,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC;AAC/E,CAAC;AAED;;;;GAIG;AACH,SAAS,gBAAgB,CAAC,KAAc;IACtC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QAC1B,OAAO,EAAE,CAAC;IACZ,CAAC;IACD,OAAO,KAAK;SACT,GAAG,CAAC,IAAI,CAAC,EAAE;QACV,IAAI,IAAI,KAAK,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE,CAAC;YAC9C,OAAO,SAAS,CAAC;QACnB,CAAC;QACD,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QACvC,OAAO,OAAO,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;IACrD,CAAC,CAAC;SACD,MAAM,CAAC,CAAC,IAAI,EAAkB,EAAE,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC;AAC1D,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,aAAa,CAAC,GAAY;IACxC,IAAI,GAAG,KAAK,IAAI,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;QAClE,MAAM,IAAI,SAAS,CAAC,iCAAiC,CAAC,CAAC;IACzD,CAAC;IACD,MAAM,SAAS,GAAG,gBAAgB,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC,CAAC;IAC9D,OAAO;QACL,IAAI,EAAE,aAAa,CAAC,GAAG,EAAE,MAAM,CAAC;QAChC,SAAS,EAAE,eAAe,CAAC,eAAe,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,EAAE,YAAY,CAAC,CAAC,CAAC;QAC3E,QAAQ,EAAE,SAAS,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,GAAG;QAC3D,MAAM,EAAE,OAAO,CAAC,GAAG,CAAC,GAAG,EAAE,aAAa,CAAC,KAAK,QAAQ;KACrD,CAAC;AACJ,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,kBAAkB,CAAC,MAAc,EAAE,GAAW;IAC5D,OAAO,aAAa,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;AACpC,CAAC"}

package/dist/cli/ui-github-repo.d.ts

@@ -0,0 +1,51 @@
+/**
+ * Live-status probe for the console GitHub repository panel.
+ *
+ * Every input is `gh`-derived. Unauthenticated `gh` takes the whole panel to
+ * unknown — never a partial concrete value. Secret values are never read.
+ * @module cli/ui-github-repo
+ */
+import type { JsonObject } from "../sync/json-path.js";
+import { type GithubRepoGhReads, type GithubRepoSettings, type GithubRulesetRow } from "./ui-github-repo-gh.js";
+import { type StatusProbe } from "./ui-status.js";
+export type { GithubRepoGhReads } from "./ui-github-repo-gh.js";
+export { expectedLabelsFromConfig } from "./ui-github-repo-expected.js";
+/** Label row for the panel (presence vs config expectation). */
+export interface GithubRepoLabelRow {
+    readonly name: string;
+    readonly role: string;
+    readonly color: string;
+    readonly present: boolean;
+}
+/** Secret row — presence only; never a value. */
+export interface GithubRepoSecretRow {
+    readonly name: string;
+    readonly purpose: string;
+    readonly set: boolean;
+}
+/**
+ * Structured value emitted by the github-repo live-status probe.
+ * Stored as JsonObject for the probe transport; shape is validated in tests.
+ */
+export type GithubRepoPanelValue = JsonObject & {
+    readonly owner: string;
+    readonly repo: string;
+    readonly settings: GithubRepoSettings;
+    readonly rulesets: readonly GithubRulesetRow[];
+    readonly labels: readonly GithubRepoLabelRow[];
+    readonly secrets: readonly GithubRepoSecretRow[];
+};
+/** Optional overrides for focused unit tests. */
+export interface GithubRepoProbeDependencies {
+    readonly authenticate?: (signal: AbortSignal) => Promise<"authenticated" | "not-authenticated">;
+    readonly reads?: Partial<GithubRepoGhReads>;
+}
+/**
+ * Create the probe that populates the GitHub repository panel.
+ * @param cwd - Project root used as the command working directory
+ * @param config - Merged Lisa project config
+ * @param dependencies - Injectable auth and gh reads for focused tests
+ * @returns Live-status probe for GET /api/status
+ */
+export declare function createGithubRepoProbe(cwd: string, config: JsonObject, dependencies?: GithubRepoProbeDependencies): StatusProbe<GithubRepoPanelValue>;
+//# sourceMappingURL=ui-github-repo.d.ts.map

package/dist/cli/ui-github-repo.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ui-github-repo.d.ts","sourceRoot":"","sources":["../../src/cli/ui-github-repo.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,sBAAsB,CAAC;AAMvD,OAAO,EAGL,KAAK,iBAAiB,EACtB,KAAK,kBAAkB,EACvB,KAAK,gBAAgB,EACtB,MAAM,wBAAwB,CAAC;AAChC,OAAO,EAGL,KAAK,WAAW,EACjB,MAAM,gBAAgB,CAAC;AAExB,YAAY,EAAE,iBAAiB,EAAE,MAAM,wBAAwB,CAAC;AAChE,OAAO,EAAE,wBAAwB,EAAE,MAAM,8BAA8B,CAAC;AAOxE,gEAAgE;AAChE,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;CAC3B;AAED,iDAAiD;AACjD,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,GAAG,EAAE,OAAO,CAAC;CACvB;AAED;;;GAGG;AACH,MAAM,MAAM,oBAAoB,GAAG,UAAU,GAAG;IAC9C,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,QAAQ,EAAE,kBAAkB,CAAC;IACtC,QAAQ,CAAC,QAAQ,EAAE,SAAS,gBAAgB,EAAE,CAAC;IAC/C,QAAQ,CAAC,MAAM,EAAE,SAAS,kBAAkB,EAAE,CAAC;IAC/C,QAAQ,CAAC,OAAO,EAAE,SAAS,mBAAmB,EAAE,CAAC;CAClD,CAAC;AAEF,iDAAiD;AACjD,MAAM,WAAW,2BAA2B;IAC1C,QAAQ,CAAC,YAAY,CAAC,EAAE,CACtB,MAAM,EAAE,WAAW,KAChB,OAAO,CAAC,eAAe,GAAG,mBAAmB,CAAC,CAAC;IACpD,QAAQ,CAAC,KAAK,CAAC,EAAE,OAAO,CAAC,iBAAiB,CAAC,CAAC;CAC7C;AAsED;;;;;;GAMG;AACH,wBAAgB,qBAAqB,CACnC,GAAG,EAAE,MAAM,EACX,MAAM,EAAE,UAAU,EAClB,YAAY,GAAE,2BAAgC,GAC7C,WAAW,CAAC,oBAAoB,CAAC,CAgEnC"}

package/dist/cli/ui-github-repo.js

@@ -0,0 +1,117 @@
+import { configuredGithubRepo, EXPECTED_GITHUB_SECRETS, expectedLabelsFromConfig, } from "./ui-github-repo-expected.js";
+import { defaultGithubRepoGhReads, } from "./ui-github-repo-gh.js";
+import { createGithubAuthProbe, } from "./ui-status.js";
+export { expectedLabelsFromConfig } from "./ui-github-repo-expected.js";
+const GITHUB_REPO_PROBE_ID = "github-repo";
+const PROBE_TIMEOUT_MS = 15_000;
+const NOT_AUTHENTICATED = "not-authenticated";
+const GITHUB_NOT_AUTHENTICATED = "GitHub CLI is not authenticated";
+/**
+ * Compare expected labels against the remote label set.
+ * @param expected - Labels from config
+ * @param remote - Labels returned by gh
+ * @returns Panel rows with present/missing
+ */
+function compareLabels(expected, remote) {
+    const byName = new Map(remote.map(label => [label.name, label]));
+    return expected.map(label => {
+        const found = byName.get(label.name);
+        return found === undefined
+            ? { name: label.name, role: label.role, color: "", present: false }
+            : {
+                name: label.name,
+                role: label.role,
+                color: found.color,
+                present: true,
+            };
+    });
+}
+/**
+ * Compare expected secrets against names from `gh secret list`.
+ * @param presentNames - Secret names that exist on the repo
+ * @returns Presence-only rows (no values)
+ */
+function compareSecrets(presentNames) {
+    const present = new Set(presentNames);
+    return EXPECTED_GITHUB_SECRETS.map(secret => ({
+        name: secret.name,
+        purpose: secret.purpose,
+        set: present.has(secret.name),
+    }));
+}
+/**
+ * Build the panel value after all gh reads succeed.
+ * @param owner - github.org
+ * @param repo - github.repo
+ * @param settings - Live repository settings
+ * @param rulesets - Live rulesets
+ * @param labels - Compared label rows
+ * @param secrets - Presence-only secret rows
+ * @returns Probe value payload
+ */
+function panelValue(owner, repo, settings, rulesets, labels, secrets) {
+    return {
+        owner,
+        repo,
+        settings: { ...settings },
+        rulesets: rulesets.map(row => ({ ...row })),
+        labels: labels.map(row => ({ ...row })),
+        secrets: secrets.map(row => ({ ...row })),
+    };
+}
+/**
+ * Create the probe that populates the GitHub repository panel.
+ * @param cwd - Project root used as the command working directory
+ * @param config - Merged Lisa project config
+ * @param dependencies - Injectable auth and gh reads for focused tests
+ * @returns Live-status probe for GET /api/status
+ */
+export function createGithubRepoProbe(cwd, config, dependencies = {}) {
+    const reads = {
+        ...defaultGithubRepoGhReads,
+        ...dependencies.reads,
+    };
+    const authenticate = dependencies.authenticate ??
+        (async (signal) => {
+            const auth = await createGithubAuthProbe(cwd).run(signal);
+            return auth.state === "value" && auth.value === true
+                ? "authenticated"
+                : "not-authenticated";
+        });
+    return {
+        id: GITHUB_REPO_PROBE_ID,
+        timeoutMs: PROBE_TIMEOUT_MS,
+        run: async (signal) => {
+            const authState = await authenticate(signal);
+            if (authState !== "authenticated") {
+                return {
+                    state: "unknown",
+                    reason: NOT_AUTHENTICATED,
+                    message: GITHUB_NOT_AUTHENTICATED,
+                };
+            }
+            const target = configuredGithubRepo(config);
+            if (target === undefined) {
+                return {
+                    state: "unknown",
+                    reason: "repo-not-configured",
+                    message: "github.org and github.repo must be set in Lisa config",
+                };
+            }
+            const timeoutMs = PROBE_TIMEOUT_MS + 250;
+            const [settings, rulesets, remoteLabels, secretNames] = await Promise.all([
+                reads.readSettings(target.owner, target.repo, cwd, timeoutMs, signal),
+                reads.listRulesets(target.owner, target.repo, cwd, timeoutMs, signal),
+                reads.listLabels(target.owner, target.repo, cwd, timeoutMs, signal),
+                reads.listSecretNames(target.owner, target.repo, cwd, timeoutMs, signal),
+            ]);
+            const value = panelValue(target.owner, target.repo, settings, rulesets, compareLabels(expectedLabelsFromConfig(config), remoteLabels), compareSecrets(secretNames));
+            const result = {
+                state: "value",
+                value,
+            };
+            return result;
+        },
+    };
+}
+//# sourceMappingURL=ui-github-repo.js.map

package/dist/cli/ui-github-repo.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ui-github-repo.js","sourceRoot":"","sources":["../../src/cli/ui-github-repo.ts"],"names":[],"mappings":"AAQA,OAAO,EACL,oBAAoB,EACpB,uBAAuB,EACvB,wBAAwB,GACzB,MAAM,8BAA8B,CAAC;AACtC,OAAO,EACL,wBAAwB,GAKzB,MAAM,wBAAwB,CAAC;AAChC,OAAO,EACL,qBAAqB,GAGtB,MAAM,gBAAgB,CAAC;AAGxB,OAAO,EAAE,wBAAwB,EAAE,MAAM,8BAA8B,CAAC;AAExE,MAAM,oBAAoB,GAAG,aAAa,CAAC;AAC3C,MAAM,gBAAgB,GAAG,MAAM,CAAC;AAChC,MAAM,iBAAiB,GAAG,mBAA4B,CAAC;AACvD,MAAM,wBAAwB,GAAG,iCAAiC,CAAC;AAsCnE;;;;;GAKG;AACH,SAAS,aAAa,CACpB,QAAqD,EACrD,MAAoC;IAEpC,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC;IACjE,OAAO,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE;QAC1B,MAAM,KAAK,GAAG,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QACrC,OAAO,KAAK,KAAK,SAAS;YACxB,CAAC,CAAC,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE;YACnE,CAAC,CAAC;gBACE,IAAI,EAAE,KAAK,CAAC,IAAI;gBAChB,IAAI,EAAE,KAAK,CAAC,IAAI;gBAChB,KAAK,EAAE,KAAK,CAAC,KAAK;gBAClB,OAAO,EAAE,IAAI;aACd,CAAC;IACR,CAAC,CAAC,CAAC;AACL,CAAC;AAED;;;;GAIG;AACH,SAAS,cAAc,CACrB,YAA+B;IAE/B,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,YAAY,CAAC,CAAC;IACtC,OAAO,uBAAuB,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QAC5C,IAAI,EAAE,MAAM,CAAC,IAAI;QACjB,OAAO,EAAE,MAAM,CAAC,OAAO;QACvB,GAAG,EAAE,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC;KAC9B,CAAC,CAAC,CAAC;AACN,CAAC;AAED;;;;;;;;;GASG;AACH,SAAS,UAAU,CACjB,KAAa,EACb,IAAY,EACZ,QAA4B,EAC5B,QAAqC,EACrC,MAAqC,EACrC,OAAuC;IAEvC,OAAO;QACL,KAAK;QACL,IAAI;QACJ,QAAQ,EAAE,EAAE,GAAG,QAAQ,EAAE;QACzB,QAAQ,EAAE,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,EAAE,GAAG,GAAG,EAAE,CAAC,CAAC;QAC3C,MAAM,EAAE,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,EAAE,GAAG,GAAG,EAAE,CAAC,CAAC;QACvC,OAAO,EAAE,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,EAAE,GAAG,GAAG,EAAE,CAAC,CAAC;KAClB,CAAC;AAC5B,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,qBAAqB,CACnC,GAAW,EACX,MAAkB,EAClB,eAA4C,EAAE;IAE9C,MAAM,KAAK,GAAsB;QAC/B,GAAG,wBAAwB;QAC3B,GAAG,YAAY,CAAC,KAAK;KACtB,CAAC;IACF,MAAM,YAAY,GAChB,YAAY,CAAC,YAAY;QACzB,CAAC,KAAK,EAAE,MAAmB,EAAE,EAAE;YAC7B,MAAM,IAAI,GAAG,MAAM,qBAAqB,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;YAC1D,OAAO,IAAI,CAAC,KAAK,KAAK,OAAO,IAAI,IAAI,CAAC,KAAK,KAAK,IAAI;gBAClD,CAAC,CAAC,eAAe;gBACjB,CAAC,CAAC,mBAAmB,CAAC;QAC1B,CAAC,CAAC,CAAC;IAEL,OAAO;QACL,EAAE,EAAE,oBAAoB;QACxB,SAAS,EAAE,gBAAgB;QAC3B,GAAG,EAAE,KAAK,EAAC,MAAM,EAAC,EAAE;YAClB,MAAM,SAAS,GAAG,MAAM,YAAY,CAAC,MAAM,CAAC,CAAC;YAC7C,IAAI,SAAS,KAAK,eAAe,EAAE,CAAC;gBAClC,OAAO;oBACL,KAAK,EAAE,SAAS;oBAChB,MAAM,EAAE,iBAAiB;oBACzB,OAAO,EAAE,wBAAwB;iBAClC,CAAC;YACJ,CAAC;YACD,MAAM,MAAM,GAAG,oBAAoB,CAAC,MAAM,CAAC,CAAC;YAC5C,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;gBACzB,OAAO;oBACL,KAAK,EAAE,SAAS;oBAChB,MAAM,EAAE,qBAAqB;oBAC7B,OAAO,EAAE,uDAAuD;iBACjE,CAAC;YACJ,CAAC;YACD,MAAM,SAAS,GAAG,gBAAgB,GAAG,GAAG,CAAC;YACzC,MAAM,CAAC,QAAQ,EAAE,QAAQ,EAAE,YAAY,EAAE,WAAW,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CACvE;gBACE,KAAK,CAAC,YAAY,CAAC,MAAM,CAAC,KAAK,EAAE,MAAM,CAAC,IAAI,EAAE,GAAG,EAAE,SAAS,EAAE,MAAM,CAAC;gBACrE,KAAK,CAAC,YAAY,CAAC,MAAM,CAAC,KAAK,EAAE,MAAM,CAAC,IAAI,EAAE,GAAG,EAAE,SAAS,EAAE,MAAM,CAAC;gBACrE,KAAK,CAAC,UAAU,CAAC,MAAM,CAAC,KAAK,EAAE,MAAM,CAAC,IAAI,EAAE,GAAG,EAAE,SAAS,EAAE,MAAM,CAAC;gBACnE,KAAK,CAAC,eAAe,CACnB,MAAM,CAAC,KAAK,EACZ,MAAM,CAAC,IAAI,EACX,GAAG,EACH,SAAS,EACT,MAAM,CACP;aACF,CACF,CAAC;YACF,MAAM,KAAK,GAAG,UAAU,CACtB,MAAM,CAAC,KAAK,EACZ,MAAM,CAAC,IAAI,EACX,QAAQ,EACR,QAAQ,EACR,aAAa,CAAC,wBAAwB,CAAC,MAAM,CAAC,EAAE,YAAY,CAAC,EAC7D,cAAc,CAAC,WAAW,CAAC,CAC5B,CAAC;YACF,MAAM,MAAM,GAAsC;gBAChD,KAAK,EAAE,OAAO;gBACd,KAAK;aACN,CAAC;YACF,OAAO,MAAM,CAAC;QAChB,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/cli/ui-observability-checks.d.ts

@@ -0,0 +1,23 @@
+import type { AwsCountCheck, SentryReachabilityCheck } from "./ui-observability-providers.js";
+/**
+ * Default Sentry reachability: REST when SENTRY_AUTH_TOKEN is set.
+ * @param timeoutMs - Request budget
+ * @param signal - Abort signal
+ * @returns Reachability outcome
+ */
+export declare const defaultSentryCheck: SentryReachabilityCheck;
+/**
+ * Count CloudWatch alarms after confirming AWS identity.
+ * @param timeoutMs - Command budget
+ * @param signal - Abort signal
+ * @returns Alarm count, or not-authenticated
+ */
+export declare const defaultCloudWatchCheck: AwsCountCheck;
+/**
+ * Count recent X-Ray traces after confirming AWS identity.
+ * @param timeoutMs - Command budget
+ * @param signal - Abort signal
+ * @returns Trace count, or not-authenticated
+ */
+export declare const defaultXRayCheck: AwsCountCheck;
+//# sourceMappingURL=ui-observability-checks.d.ts.map

package/dist/cli/ui-observability-checks.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ui-observability-checks.d.ts","sourceRoot":"","sources":["../../src/cli/ui-observability-checks.ts"],"names":[],"mappings":"AAQA,OAAO,KAAK,EACV,aAAa,EACb,uBAAuB,EACxB,MAAM,iCAAiC,CAAC;AAiGzC;;;;;GAKG;AACH,eAAO,MAAM,kBAAkB,EAAE,uBAsBhC,CAAC;AAEF;;;;;GAKG;AACH,eAAO,MAAM,sBAAsB,EAAE,aAyBpC,CAAC;AAEF;;;;;GAKG;AACH,eAAO,MAAM,gBAAgB,EAAE,aA0B9B,CAAC"}

package/dist/cli/ui-observability-checks.js

@@ -0,0 +1,156 @@
+/**
+ * Shell-out reachability checks for observability provider probes.
+ *
+ * Reuses the same CLIs/tokens skills already use (SENTRY_AUTH_TOKEN REST,
+ * `aws sts` / `cloudwatch` / `xray`) — no second SDK.
+ * @module cli/ui-observability-checks
+ */
+import { execFile } from "node:child_process";
+const NOT_AUTHENTICATED = "not-authenticated";
+/**
+ * Read one env var through a single reviewable process.env exception.
+ * @param name - Environment variable name
+ * @returns Trimmed value, or undefined when unset/blank
+ */
+function readEnv(name) {
+    // eslint-disable-next-line no-restricted-syntax -- observability probe must read developer-local auth tokens once
+    const value = process.env[name];
+    if (typeof value !== "string") {
+        return undefined;
+    }
+    const trimmed = value.trim();
+    return trimmed.length > 0 ? trimmed : undefined;
+}
+/**
+ * Run a fixed argv via execFile without a shell.
+ * @param file - Executable name
+ * @param args - Argument vector
+ * @param timeoutMs - Child-process timeout
+ * @param signal - Probe cancellation signal
+ * @returns stdout on success
+ */
+async function runCommand(file, args, timeoutMs, signal) {
+    return await new Promise((resolve, reject) => {
+        execFile(
+        // eslint-disable-next-line sonarjs/no-os-command-from-path -- fixed user-installed aws CLI
+        file, [...args], { signal, timeout: timeoutMs, encoding: "utf8" }, (error, stdout) => {
+            if (error !== null) {
+                reject(error);
+                return;
+            }
+            resolve(stdout);
+        });
+    });
+}
+/**
+ * Classify an AWS CLI failure as missing auth vs other probe failure.
+ * @param error - Thrown command error
+ * @returns Whether the failure indicates missing credentials
+ */
+function isAwsAuthFailure(error) {
+    const message = error instanceof Error ? error.message : String(error);
+    const lowered = message.toLowerCase();
+    return (lowered.includes("unable to locate credentials") ||
+        lowered.includes("could not load credentials") ||
+        lowered.includes("no credentials") ||
+        lowered.includes("expiredtoken") ||
+        lowered.includes("the security token included in the request is invalid") ||
+        lowered.includes("is not authorized to perform") ||
+        lowered.includes("accessdenied") ||
+        lowered.includes("error loading sso") ||
+        lowered.includes("sso session"));
+}
+/**
+ * Confirm AWS identity, mapping credential failures to not-authenticated.
+ * @param timeoutMs - Command budget
+ * @param signal - Abort signal
+ * @returns not-authenticated when credentials are missing; otherwise void
+ */
+async function requireAwsIdentity(timeoutMs, signal) {
+    try {
+        await runCommand("aws", ["sts", "get-caller-identity", "--output", "json"], timeoutMs, signal);
+        return undefined;
+    }
+    catch (error) {
+        if (isAwsAuthFailure(error)) {
+            return NOT_AUTHENTICATED;
+        }
+        throw error;
+    }
+}
+/**
+ * Default Sentry reachability: REST when SENTRY_AUTH_TOKEN is set.
+ * @param timeoutMs - Request budget
+ * @param signal - Abort signal
+ * @returns Reachability outcome
+ */
+export const defaultSentryCheck = async (timeoutMs, signal) => {
+    const token = readEnv("SENTRY_AUTH_TOKEN");
+    if (token === undefined) {
+        return NOT_AUTHENTICATED;
+    }
+    const response = await fetch("https://sentry.io/api/0/", {
+        headers: {
+            accept: "application/json",
+            authorization: `Bearer ${token}`,
+        },
+        signal: AbortSignal.any([signal, AbortSignal.timeout(timeoutMs)]),
+    });
+    if (response.ok) {
+        return "reachable";
+    }
+    if (response.status === 401 || response.status === 403) {
+        return NOT_AUTHENTICATED;
+    }
+    throw new Error(`Sentry API returned HTTP ${String(response.status)}`);
+};
+/**
+ * Count CloudWatch alarms after confirming AWS identity.
+ * @param timeoutMs - Command budget
+ * @param signal - Abort signal
+ * @returns Alarm count, or not-authenticated
+ */
+export const defaultCloudWatchCheck = async (timeoutMs, signal) => {
+    const auth = await requireAwsIdentity(timeoutMs, signal);
+    if (auth !== undefined) {
+        return auth;
+    }
+    const stdout = await runCommand("aws", ["cloudwatch", "describe-alarms", "--output", "json"], timeoutMs, signal);
+    const parsed = JSON.parse(stdout);
+    const metric = Array.isArray(parsed.MetricAlarms)
+        ? parsed.MetricAlarms.length
+        : 0;
+    const composite = Array.isArray(parsed.CompositeAlarms)
+        ? parsed.CompositeAlarms.length
+        : 0;
+    return metric + composite;
+};
+/**
+ * Count recent X-Ray traces after confirming AWS identity.
+ * @param timeoutMs - Command budget
+ * @param signal - Abort signal
+ * @returns Trace count, or not-authenticated
+ */
+export const defaultXRayCheck = async (timeoutMs, signal) => {
+    const auth = await requireAwsIdentity(timeoutMs, signal);
+    if (auth !== undefined) {
+        return auth;
+    }
+    const end = new Date();
+    const start = new Date(end.getTime() - 60 * 60 * 1000);
+    const stdout = await runCommand("aws", [
+        "xray",
+        "get-trace-summaries",
+        "--start-time",
+        start.toISOString(),
+        "--end-time",
+        end.toISOString(),
+        "--output",
+        "json",
+    ], timeoutMs, signal);
+    const parsed = JSON.parse(stdout);
+    return Array.isArray(parsed.TraceSummaries)
+        ? parsed.TraceSummaries.length
+        : 0;
+};
+//# sourceMappingURL=ui-observability-checks.js.map

package/dist/cli/ui-observability-checks.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ui-observability-checks.js","sourceRoot":"","sources":["../../src/cli/ui-observability-checks.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,OAAO,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAM9C,MAAM,iBAAiB,GAAG,mBAA4B,CAAC;AAEvD;;;;GAIG;AACH,SAAS,OAAO,CAAC,IAAY;IAC3B,kHAAkH;IAClH,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IAChC,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC9B,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC;IAC7B,OAAO,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;AAClD,CAAC;AAED;;;;;;;GAOG;AACH,KAAK,UAAU,UAAU,CACvB,IAAY,EACZ,IAAuB,EACvB,SAAiB,EACjB,MAAmB;IAEnB,OAAO,MAAM,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QAC3C,QAAQ;QACN,2FAA2F;QAC3F,IAAI,EACJ,CAAC,GAAG,IAAI,CAAC,EACT,EAAE,MAAM,EAAE,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,MAAM,EAAE,EAChD,CAAC,KAAK,EAAE,MAAM,EAAE,EAAE;YAChB,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;gBACnB,MAAM,CAAC,KAAK,CAAC,CAAC;gBACd,OAAO;YACT,CAAC;YACD,OAAO,CAAC,MAAM,CAAC,CAAC;QAClB,CAAC,CACF,CAAC;IACJ,CAAC,CAAC,CAAC;AACL,CAAC;AAED;;;;GAIG;AACH,SAAS,gBAAgB,CAAC,KAAc;IACtC,MAAM,OAAO,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IACvE,MAAM,OAAO,GAAG,OAAO,CAAC,WAAW,EAAE,CAAC;IACtC,OAAO,CACL,OAAO,CAAC,QAAQ,CAAC,8BAA8B,CAAC;QAChD,OAAO,CAAC,QAAQ,CAAC,4BAA4B,CAAC;QAC9C,OAAO,CAAC,QAAQ,CAAC,gBAAgB,CAAC;QAClC,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAC;QAChC,OAAO,CAAC,QAAQ,CAAC,uDAAuD,CAAC;QACzE,OAAO,CAAC,QAAQ,CAAC,8BAA8B,CAAC;QAChD,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAC;QAChC,OAAO,CAAC,QAAQ,CAAC,mBAAmB,CAAC;QACrC,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAC,CAChC,CAAC;AACJ,CAAC;AAED;;;;;GAKG;AACH,KAAK,UAAU,kBAAkB,CAC/B,SAAiB,EACjB,MAAmB;IAEnB,IAAI,CAAC;QACH,MAAM,UAAU,CACd,KAAK,EACL,CAAC,KAAK,EAAE,qBAAqB,EAAE,UAAU,EAAE,MAAM,CAAC,EAClD,SAAS,EACT,MAAM,CACP,CAAC;QACF,OAAO,SAAS,CAAC;IACnB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,gBAAgB,CAAC,KAAK,CAAC,EAAE,CAAC;YAC5B,OAAO,iBAAiB,CAAC;QAC3B,CAAC;QACD,MAAM,KAAK,CAAC;IACd,CAAC;AACH,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,MAAM,kBAAkB,GAA4B,KAAK,EAC9D,SAAS,EACT,MAAM,EACN,EAAE;IACF,MAAM,KAAK,GAAG,OAAO,CAAC,mBAAmB,CAAC,CAAC;IAC3C,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;QACxB,OAAO,iBAAiB,CAAC;IAC3B,CAAC;IACD,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,0BAA0B,EAAE;QACvD,OAAO,EAAE;YACP,MAAM,EAAE,kBAAkB;YAC1B,aAAa,EAAE,UAAU,KAAK,EAAE;SACjC;QACD,MAAM,EAAE,WAAW,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC;KAClE,CAAC,CAAC;IACH,IAAI,QAAQ,CAAC,EAAE,EAAE,CAAC;QAChB,OAAO,WAAW,CAAC;IACrB,CAAC;IACD,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;QACvD,OAAO,iBAAiB,CAAC;IAC3B,CAAC;IACD,MAAM,IAAI,KAAK,CAAC,4BAA4B,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;AACzE,CAAC,CAAC;AAEF;;;;;GAKG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAAkB,KAAK,EACxD,SAAS,EACT,MAAM,EACN,EAAE;IACF,MAAM,IAAI,GAAG,MAAM,kBAAkB,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;IACzD,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;QACvB,OAAO,IAAI,CAAC;IACd,CAAC;IACD,MAAM,MAAM,GAAG,MAAM,UAAU,CAC7B,KAAK,EACL,CAAC,YAAY,EAAE,iBAAiB,EAAE,UAAU,EAAE,MAAM,CAAC,EACrD,SAAS,EACT,MAAM,CACP,CAAC;IACF,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAG/B,CAAC;IACF,MAAM,MAAM,GAAG,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,YAAY,CAAC;QAC/C,CAAC,CAAC,MAAM,CAAC,YAAY,CAAC,MAAM;QAC5B,CAAC,CAAC,CAAC,CAAC;IACN,MAAM,SAAS,GAAG,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,eAAe,CAAC;QACrD,CAAC,CAAC,MAAM,CAAC,eAAe,CAAC,MAAM;QAC/B,CAAC,CAAC,CAAC,CAAC;IACN,OAAO,MAAM,GAAG,SAAS,CAAC;AAC5B,CAAC,CAAC;AAEF;;;;;GAKG;AACH,MAAM,CAAC,MAAM,gBAAgB,GAAkB,KAAK,EAAE,SAAS,EAAE,MAAM,EAAE,EAAE;IACzE,MAAM,IAAI,GAAG,MAAM,kBAAkB,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;IACzD,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;QACvB,OAAO,IAAI,CAAC;IACd,CAAC;IACD,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC;IACvB,MAAM,KAAK,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC;IACvD,MAAM,MAAM,GAAG,MAAM,UAAU,CAC7B,KAAK,EACL;QACE,MAAM;QACN,qBAAqB;QACrB,cAAc;QACd,KAAK,CAAC,WAAW,EAAE;QACnB,YAAY;QACZ,GAAG,CAAC,WAAW,EAAE;QACjB,UAAU;QACV,MAAM;KACP,EACD,SAAS,EACT,MAAM,CACP,CAAC;IACF,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAmC,CAAC;IACpE,OAAO,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,cAAc,CAAC;QACzC,CAAC,CAAC,MAAM,CAAC,cAAc,CAAC,MAAM;QAC9B,CAAC,CAAC,CAAC,CAAC;AACR,CAAC,CAAC"}

package/dist/cli/ui-observability-providers.d.ts

@@ -0,0 +1,69 @@
+/**
+ * Live-status probes for connected observability providers.
+ *
+ * READ-ONLY detection by reachability (Sentry auth, CloudWatch alarms, X-Ray
+ * traces). Missing credentials degrade to unknown — never a fabricated
+ * "disconnected" claim.
+ * @module cli/ui-observability-providers
+ */
+import type { JsonValue } from "../sync/json-path.js";
+import type { ProbeResult, StatusProbe } from "./ui-status.js";
+/** Structured value for a reachable observability provider. */
+export type ObservabilityProviderValue = {
+    readonly [key: string]: JsonValue;
+    readonly status: "connected" | "connected-but-empty";
+    readonly emptyKind?: "alarms" | "traces";
+};
+/** Injectable Sentry reachability check. */
+export type SentryReachabilityCheck = (timeoutMs: number, signal: AbortSignal) => Promise<"reachable" | "not-authenticated">;
+/** Injectable AWS count check (alarms or traces), or not-authenticated. */
+export type AwsCountCheck = (timeoutMs: number, signal: AbortSignal) => Promise<number | "not-authenticated">;
+export declare const SENTRY_PROBE_ID = "sentry";
+export declare const CLOUDWATCH_ALARMS_PROBE_ID = "cloudwatch-alarms";
+export declare const XRAY_PROBE_ID = "x-ray";
+/**
+ * Map Sentry reachability onto the live-status tri-state.
+ * @param outcome - Reachability check result
+ * @returns Probe result for the sentry provider
+ */
+export declare function mapSentryReachability(outcome: "reachable" | "not-authenticated"): ProbeResult<ObservabilityProviderValue>;
+/**
+ * Map an AWS count check onto connected / empty / unknown.
+ * @param outcome - Count or not-authenticated
+ * @param emptyKind - Whether zero means no alarms or no traces
+ * @returns Probe result for CloudWatch or X-Ray
+ */
+export declare function mapAwsCountCheck(outcome: number | "not-authenticated", emptyKind: "alarms" | "traces"): ProbeResult<ObservabilityProviderValue>;
+/**
+ * Create the Sentry observability probe.
+ * @param options - Injectable collaborators
+ * @param options.check - Optional reachability check for focused tests
+ * @returns Bounded status probe
+ */
+export declare function createSentryProbe(options?: {
+    readonly check?: SentryReachabilityCheck;
+}): StatusProbe<ObservabilityProviderValue>;
+/**
+ * Create the CloudWatch Alarms observability probe.
+ * @param options - Injectable collaborators
+ * @param options.check - Optional alarm-count check for focused tests
+ * @returns Bounded status probe
+ */
+export declare function createCloudWatchAlarmsProbe(options?: {
+    readonly check?: AwsCountCheck;
+}): StatusProbe<ObservabilityProviderValue>;
+/**
+ * Create the X-Ray observability probe.
+ * @param options - Injectable collaborators
+ * @param options.check - Optional trace-count check for focused tests
+ * @returns Bounded status probe
+ */
+export declare function createXRayProbe(options?: {
+    readonly check?: AwsCountCheck;
+}): StatusProbe<ObservabilityProviderValue>;
+/**
+ * Register all three observability provider probes.
+ * @returns Sentry, CloudWatch Alarms, and X-Ray probes
+ */
+export declare function createObservabilityProviderProbes(): readonly StatusProbe<ObservabilityProviderValue>[];
+//# sourceMappingURL=ui-observability-providers.d.ts.map

package/dist/cli/ui-observability-providers.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ui-observability-providers.d.ts","sourceRoot":"","sources":["../../src/cli/ui-observability-providers.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AACH,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,sBAAsB,CAAC;AACtD,OAAO,KAAK,EAAE,WAAW,EAAE,WAAW,EAAE,MAAM,gBAAgB,CAAC;AAO/D,+DAA+D;AAC/D,MAAM,MAAM,0BAA0B,GAAG;IACvC,QAAQ,EAAE,GAAG,EAAE,MAAM,GAAG,SAAS,CAAC;IAClC,QAAQ,CAAC,MAAM,EAAE,WAAW,GAAG,qBAAqB,CAAC;IACrD,QAAQ,CAAC,SAAS,CAAC,EAAE,QAAQ,GAAG,QAAQ,CAAC;CAC1C,CAAC;AAEF,4CAA4C;AAC5C,MAAM,MAAM,uBAAuB,GAAG,CACpC,SAAS,EAAE,MAAM,EACjB,MAAM,EAAE,WAAW,KAChB,OAAO,CAAC,WAAW,GAAG,mBAAmB,CAAC,CAAC;AAEhD,2EAA2E;AAC3E,MAAM,MAAM,aAAa,GAAG,CAC1B,SAAS,EAAE,MAAM,EACjB,MAAM,EAAE,WAAW,KAChB,OAAO,CAAC,MAAM,GAAG,mBAAmB,CAAC,CAAC;AAE3C,eAAO,MAAM,eAAe,WAAW,CAAC;AACxC,eAAO,MAAM,0BAA0B,sBAAsB,CAAC;AAC9D,eAAO,MAAM,aAAa,UAAU,CAAC;AASrC;;;;GAIG;AACH,wBAAgB,qBAAqB,CACnC,OAAO,EAAE,WAAW,GAAG,mBAAmB,GACzC,WAAW,CAAC,0BAA0B,CAAC,CASzC;AAED;;;;;GAKG;AACH,wBAAgB,gBAAgB,CAC9B,OAAO,EAAE,MAAM,GAAG,mBAAmB,EACrC,SAAS,EAAE,QAAQ,GAAG,QAAQ,GAC7B,WAAW,CAAC,0BAA0B,CAAC,CAezC;AAED;;;;;GAKG;AACH,wBAAgB,iBAAiB,CAC/B,OAAO,GAAE;IACP,QAAQ,CAAC,KAAK,CAAC,EAAE,uBAAuB,CAAC;CACrC,GACL,WAAW,CAAC,0BAA0B,CAAC,CAQzC;AAED;;;;;GAKG;AACH,wBAAgB,2BAA2B,CACzC,OAAO,GAAE;IACP,QAAQ,CAAC,KAAK,CAAC,EAAE,aAAa,CAAC;CAC3B,GACL,WAAW,CAAC,0BAA0B,CAAC,CAQzC;AAED;;;;;GAKG;AACH,wBAAgB,eAAe,CAC7B,OAAO,GAAE;IACP,QAAQ,CAAC,KAAK,CAAC,EAAE,aAAa,CAAC;CAC3B,GACL,WAAW,CAAC,0BAA0B,CAAC,CAQzC;AAED;;;GAGG;AACH,wBAAgB,iCAAiC,IAAI,SAAS,WAAW,CAAC,0BAA0B,CAAC,EAAE,CAMtG"}