@codyswann/lisa 2.277.3 → 2.278.0

package/dist/cli/ui-setup-readiness-contract.js

@@ -0,0 +1,61 @@
+/** Strict transport contract for the console Setup readiness projection. */
+import { summarizeHealthFindings, validateHealthResult, } from "../health/contract.js";
+import { readStrictDenseArray, readStrictProperty, requireCanonicalUtcTimestamp, requireStrictRecord, } from "../health/strict-validation.js";
+/** Stable finding identifiers, in the existing checklist render order. */
+export const SETUP_READINESS_CHECKS = [
+    "setup.install",
+    "setup.sync",
+    "setup.agent-ready",
+    "setup.standards",
+    "setup.tracker",
+    "setup.prd-source",
+    "setup.github-governance",
+    "setup.secrets",
+    "setup.automations",
+    "setup.exploration",
+    "setup.wiki",
+    "setup.starter-provenance",
+];
+/**
+ * Create one operator-readable deterministic Setup finding.
+ * @param check - Closed Setup checklist identifier
+ * @param status - Deterministic readiness status
+ * @param reason - Operator-readable evidence or remediation summary
+ * @returns Deterministic Setup readiness finding
+ */
+export function setupFinding(check, status, reason) {
+    return { check, layer: "deterministic", status, reason };
+}
+/**
+ * Validate, detach, and freeze a Setup readiness projection.
+ * @param candidate - Untrusted projection
+ * @returns Strict schema-v1 result with exactly the twelve checklist findings
+ */
+export function validateSetupReadinessResult(candidate) {
+    const record = requireStrictRecord(candidate, ["schemaVersion", "observedAt", "findings"], "SetupReadinessResult");
+    if (readStrictProperty(record, "schemaVersion") !== 1) {
+        throw new Error("Invalid setup readiness schemaVersion: expected 1");
+    }
+    const observedAt = requireCanonicalUtcTimestamp(readStrictProperty(record, "observedAt"), "observedAt");
+    const rawFindings = readStrictDenseArray(readStrictProperty(record, "findings"), SETUP_READINESS_CHECKS.length, SETUP_READINESS_CHECKS.length, "findings");
+    const validated = validateHealthResult({
+        schemaVersion: 1,
+        runId: "setup-readiness-validation",
+        mode: "deterministic",
+        startedAt: observedAt,
+        completedAt: observedAt,
+        findings: rawFindings,
+        summary: summarizeHealthFindings(rawFindings),
+    }).findings;
+    const actual = validated.map(finding => finding.check);
+    if (SETUP_READINESS_CHECKS.some((check, index) => actual[index] !== check)) {
+        throw new Error(`Invalid setup readiness checks: expected ${SETUP_READINESS_CHECKS.join(", ")}`);
+    }
+    const findings = validated;
+    return Object.freeze({
+        schemaVersion: 1,
+        observedAt,
+        findings: Object.freeze(findings),
+    });
+}
+//# sourceMappingURL=ui-setup-readiness-contract.js.map

package/dist/cli/ui-setup-readiness-contract.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ui-setup-readiness-contract.js","sourceRoot":"","sources":["../../src/cli/ui-setup-readiness-contract.ts"],"names":[],"mappings":"AAAA,4EAA4E;AAC5E,OAAO,EACL,uBAAuB,EACvB,oBAAoB,GAGrB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EACL,oBAAoB,EACpB,kBAAkB,EAClB,4BAA4B,EAC5B,mBAAmB,GACpB,MAAM,gCAAgC,CAAC;AAExC,0EAA0E;AAC1E,MAAM,CAAC,MAAM,sBAAsB,GAAG;IACpC,eAAe;IACf,YAAY;IACZ,mBAAmB;IACnB,iBAAiB;IACjB,eAAe;IACf,kBAAkB;IAClB,yBAAyB;IACzB,eAAe;IACf,mBAAmB;IACnB,mBAAmB;IACnB,YAAY;IACZ,0BAA0B;CAClB,CAAC;AAkBX;;;;;;GAMG;AACH,MAAM,UAAU,YAAY,CAC1B,KAA0B,EAC1B,MAAoB,EACpB,MAAc;IAEd,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,eAAe,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;AAC3D,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,4BAA4B,CAC1C,SAAkB;IAElB,MAAM,MAAM,GAAG,mBAAmB,CAChC,SAAS,EACT,CAAC,eAAe,EAAE,YAAY,EAAE,UAAU,CAAU,EACpD,sBAAsB,CACvB,CAAC;IACF,IAAI,kBAAkB,CAAC,MAAM,EAAE,eAAe,CAAC,KAAK,CAAC,EAAE,CAAC;QACtD,MAAM,IAAI,KAAK,CAAC,mDAAmD,CAAC,CAAC;IACvE,CAAC;IACD,MAAM,UAAU,GAAG,4BAA4B,CAC7C,kBAAkB,CAAC,MAAM,EAAE,YAAY,CAAC,EACxC,YAAY,CACb,CAAC;IACF,MAAM,WAAW,GAAG,oBAAoB,CACtC,kBAAkB,CAAC,MAAM,EAAE,UAAU,CAAC,EACtC,sBAAsB,CAAC,MAAM,EAC7B,sBAAsB,CAAC,MAAM,EAC7B,UAAU,CACX,CAAC;IACF,MAAM,SAAS,GAAG,oBAAoB,CAAC;QACrC,aAAa,EAAE,CAAC;QAChB,KAAK,EAAE,4BAA4B;QACnC,IAAI,EAAE,eAAe;QACrB,SAAS,EAAE,UAAU;QACrB,WAAW,EAAE,UAAU;QACvB,QAAQ,EAAE,WAAW;QACrB,OAAO,EAAE,uBAAuB,CAAC,WAAW,CAAC;KAC9C,CAAC,CAAC,QAAQ,CAAC;IACZ,MAAM,MAAM,GAAG,SAAS,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;IACvD,IAAI,sBAAsB,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,KAAK,CAAC,EAAE,CAAC;QAC3E,MAAM,IAAI,KAAK,CACb,4CAA4C,sBAAsB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAChF,CAAC;IACJ,CAAC;IACD,MAAM,QAAQ,GAAG,SAA6C,CAAC;IAC/D,OAAO,MAAM,CAAC,MAAM,CAAC;QACnB,aAAa,EAAE,CAAC;QAChB,UAAU;QACV,QAAQ,EAAE,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC;KAClC,CAAC,CAAC;AACL,CAAC"}

package/dist/cli/ui-setup-readiness-install.d.ts

@@ -0,0 +1,24 @@
+import type { HealthResult } from "../health/contract.js";
+import type { JsonObject } from "../sync/json-path.js";
+import { type SetupReadinessFinding } from "./ui-setup-readiness-contract.js";
+/** Fixed Health checks that establish common project-owned apply surfaces. */
+export declare const INSTALL_HEALTH_CHECKS: readonly ["project.state", "templates.managed", "package.conformance", "hooks.managed"];
+/**
+ * Derive Codex's exact current managed-file set from the same selected plugin
+ * and agent discovery contract used by apply. No project file is trusted as a
+ * declaration of completeness.
+ * @param projectRoot - Project root to inspect
+ * @param config - Merged Lisa project configuration
+ * @returns Frozen authoritative Codex managed-file paths
+ */
+export declare function expectedCodexManagedFiles(projectRoot: string, config: JsonObject): Promise<readonly string[]>;
+/**
+ * Establish only installation state that Lisa can observe authoritatively.
+ * External plugin/runtime state remains non-pass when no bounded reader exists.
+ * @param projectRoot - Project root to inspect
+ * @param config - Merged Lisa project configuration
+ * @param health - Current deterministic Health evidence, when available
+ * @returns Installation readiness finding for the configured harness
+ */
+export declare function installFinding(projectRoot: string, config: JsonObject, health: HealthResult | undefined): Promise<SetupReadinessFinding>;
+//# sourceMappingURL=ui-setup-readiness-install.d.ts.map

package/dist/cli/ui-setup-readiness-install.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ui-setup-readiness-install.d.ts","sourceRoot":"","sources":["../../src/cli/ui-setup-readiness-install.ts"],"names":[],"mappings":"AAmBA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,uBAAuB,CAAC;AAO1D,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,sBAAsB,CAAC;AACvD,OAAO,EAEL,KAAK,qBAAqB,EAC3B,MAAM,kCAAkC,CAAC;AAI1C,8EAA8E;AAC9E,eAAO,MAAM,qBAAqB,yFAKxB,CAAC;AAgIX;;;;;;;GAOG;AACH,wBAAsB,yBAAyB,CAC7C,WAAW,EAAE,MAAM,EACnB,MAAM,EAAE,UAAU,GACjB,OAAO,CAAC,SAAS,MAAM,EAAE,CAAC,CAwB5B;AAgFD;;;;;;;GAOG;AACH,wBAAsB,cAAc,CAClC,WAAW,EAAE,MAAM,EACnB,MAAM,EAAE,UAAU,EAClB,MAAM,EAAE,YAAY,GAAG,SAAS,GAC/B,OAAO,CAAC,qBAAqB,CAAC,CAqEhC"}

package/dist/cli/ui-setup-readiness-install.js

@@ -0,0 +1,207 @@
+/** Truthful, harness-aware installation evidence for Setup readiness. */
+import path from "node:path";
+import { realpath } from "node:fs/promises";
+import { fileURLToPath } from "node:url";
+import { discoverLisaAgents, LISA_AGENTS_SUBDIR, } from "../codex/agent-installer.js";
+import { DEFAULT_HARNESS, harnessIncludesAgent, } from "../core/config.js";
+import { projectPluginFilter, selectProjectLisaPluginsFromState, } from "../core/lisa-plugin-selection.js";
+import { normalizeHarness } from "../core/project-config.js";
+import { projectPathKind, projectRegularFileExists, readProjectJsonObject, readProjectText, } from "../health/read-only-fs.js";
+import { setupFinding, } from "./ui-setup-readiness-contract.js";
+import { healthEvidenceFinding } from "./ui-setup-readiness-local.js";
+import { readConfinedDetectedStacks } from "./ui-detected-stacks.js";
+/** Fixed Health checks that establish common project-owned apply surfaces. */
+export const INSTALL_HEALTH_CHECKS = [
+    "project.state",
+    "templates.managed",
+    "package.conformance",
+    "hooks.managed",
+];
+const MAX_MANAGED_FILES = 2_048;
+const INSTALL_CHECK = "setup.install";
+const EXTERNAL_ONLY_HARNESSES = new Set([
+    "cursor",
+    "agy",
+    "copilot",
+    "fleet",
+]);
+/**
+ * Resolve the configured harness without accepting a malformed value.
+ * @param config - Merged Lisa project configuration
+ * @returns Normalized harness, or undefined for malformed configuration
+ */
+function configuredHarness(config) {
+    const raw = config.harness ?? DEFAULT_HARNESS;
+    return typeof raw === "string" ? normalizeHarness(raw) : undefined;
+}
+/**
+ * Require one non-empty, confined regular project file.
+ * @param root - Canonical project root
+ * @param relativePath - Project-relative file path
+ * @returns Whether the confined file exists and contains non-whitespace text
+ */
+async function nonemptyProjectFile(root, relativePath) {
+    const text = await readProjectText(root, relativePath);
+    return text !== undefined && text.trim().length > 0;
+}
+/**
+ * Validate one normalized path relative to an agent-owned manifest directory.
+ * @param value - Untrusted managed-manifest entry
+ * @returns Whether the value is a normalized relative path
+ */
+function validManifestEntry(value) {
+    if (typeof value !== "string" ||
+        value.length === 0 ||
+        value.includes("\\") ||
+        path.posix.isAbsolute(value)) {
+        return false;
+    }
+    const segments = value.split("/");
+    return (segments.every(segment => segment !== "" && segment !== "." && segment !== "..") && path.posix.normalize(value) === value);
+}
+/**
+ * Refuse symlinked/special parents and final entries for one manifest file.
+ * @param root - Canonical project root
+ * @param configDir - Agent-owned configuration directory
+ * @param entry - Validated manifest-relative file path
+ * @returns Whether every parent and the final file are confined and regular
+ */
+async function manifestEntryIsRegular(root, configDir, entry) {
+    const segments = [configDir, ...entry.split("/")];
+    const parents = segments
+        .slice(0, -1)
+        .map((_, index) => segments.slice(0, index + 1).join("/"));
+    const kinds = await Promise.all(parents.map(parent => projectPathKind(root, parent)));
+    return (kinds.every(kind => kind === "directory") &&
+        (await projectRegularFileExists(root, `${configDir}/${entry}`)));
+}
+/**
+ * Validate a bounded managed-artifact manifest and every file it names.
+ * @param root - Canonical project root
+ * @param configDir - Managed configuration directory
+ * @param expectedFiles - Optional authoritative set of required files
+ * @returns Whether the manifest is bounded, exact, and fully present
+ */
+async function managedManifestIsComplete(root, configDir, expectedFiles) {
+    const manifest = await readProjectJsonObject(root, `${configDir}/.lisa-managed.json`);
+    const files = manifest?.files;
+    if (!Array.isArray(files) ||
+        files.length === 0 ||
+        files.length > MAX_MANAGED_FILES ||
+        !files.every(validManifestEntry) ||
+        new Set(files).size !== files.length) {
+        return false;
+    }
+    if (expectedFiles !== undefined) {
+        const observed = [...files].sort((left, right) => left.localeCompare(right));
+        const expected = [...expectedFiles].sort((left, right) => left.localeCompare(right));
+        if (observed.length !== expected.length ||
+            observed.some((entry, index) => entry !== expected[index])) {
+            return false;
+        }
+    }
+    const present = await Promise.all(files.map(entry => manifestEntryIsRegular(root, configDir, entry)));
+    return present.every(Boolean);
+}
+/**
+ * Derive Codex's exact current managed-file set from the same selected plugin
+ * and agent discovery contract used by apply. No project file is trusted as a
+ * declaration of completeness.
+ * @param projectRoot - Project root to inspect
+ * @param config - Merged Lisa project configuration
+ * @returns Frozen authoritative Codex managed-file paths
+ */
+export async function expectedCodexManagedFiles(projectRoot, config) {
+    const root = await realpath(projectRoot);
+    const lisaRoot = await realpath(path.resolve(path.dirname(fileURLToPath(import.meta.url)), "../.."));
+    const [detectedTypes, wikiKind] = await Promise.all([
+        readConfinedDetectedStacks(root),
+        projectPathKind(root, "wiki/lisa-wiki.config.json"),
+    ]);
+    const plugins = selectProjectLisaPluginsFromState(config, detectedTypes, wikiKind === "file");
+    const agents = await discoverLisaAgents(lisaRoot, projectPluginFilter(plugins));
+    return Object.freeze([
+        ...agents.map(agent => path.posix.join(LISA_AGENTS_SUBDIR, `${agent.id}.toml`)),
+        "config.toml",
+    ]);
+}
+/**
+ * Convert one boolean observation into a stable drift label.
+ * @param applicable - Whether the surface applies to the selected harness
+ * @param label - Stable operator-facing drift label
+ * @param observe - Read-only observation for the surface
+ * @returns Empty when inapplicable or present, otherwise the drift label
+ */
+async function evidenceDrift(applicable, label, observe) {
+    if (!applicable)
+        return [];
+    return (await observe()) ? [] : [label];
+}
+/**
+ * Collect missing or unsafe project-owned surfaces for one harness.
+ * @param root - Canonical project root
+ * @param harness - Normalized configured harness
+ * @param config - Merged Lisa project configuration
+ * @returns Stable labels for missing or unsafe harness surfaces
+ */
+async function projectSurfaceDrift(root, harness, config) {
+    const includes = (agent) => harnessIncludesAgent(harness, agent);
+    const needsAgents = includes("claude") ||
+        includes("codex") ||
+        includes("agy") ||
+        includes("copilot") ||
+        includes("opencode");
+    const codexFiles = includes("codex")
+        ? await expectedCodexManagedFiles(root, config)
+        : undefined;
+    const observations = await Promise.all([
+        evidenceDrift(needsAgents, "AGENTS.md", async () => await nonemptyProjectFile(root, "AGENTS.md")),
+        evidenceDrift(includes("claude"), "CLAUDE.md canonical AGENTS.md pointer", async () => (await readProjectText(root, "CLAUDE.md"))?.includes("@AGENTS.md") ===
+            true),
+        evidenceDrift(includes("codex"), ".codex managed-artifact manifest", async () => await managedManifestIsComplete(root, ".codex", codexFiles)),
+        evidenceDrift(includes("copilot"), ".github/copilot-instructions.md", async () => await nonemptyProjectFile(root, ".github/copilot-instructions.md")),
+        evidenceDrift(includes("opencode"), ".opencode managed-artifact manifest", async () => await managedManifestIsComplete(root, ".opencode")),
+        evidenceDrift(includes("opencode"), "opencode.json", async () => await nonemptyProjectFile(root, "opencode.json")),
+    ]);
+    return observations.flat();
+}
+/**
+ * Establish only installation state that Lisa can observe authoritatively.
+ * External plugin/runtime state remains non-pass when no bounded reader exists.
+ * @param projectRoot - Project root to inspect
+ * @param config - Merged Lisa project configuration
+ * @param health - Current deterministic Health evidence, when available
+ * @returns Installation readiness finding for the configured harness
+ */
+export async function installFinding(projectRoot, config, health) {
+    const common = healthEvidenceFinding(INSTALL_CHECK, health, INSTALL_HEALTH_CHECKS, "Lisa's common project templates, package, and git hooks are current.", "fail");
+    if (common.status !== "pass")
+        return common;
+    const harness = configuredHarness(config);
+    if (harness === undefined) {
+        return setupFinding(INSTALL_CHECK, "fail", "The configured Lisa harness is missing or invalid; run lisa sync and lisa apply.");
+    }
+    try {
+        const root = await realpath(projectRoot);
+        const drift = await projectSurfaceDrift(root, harness, config);
+        if (drift.length > 0) {
+            return setupFinding(INSTALL_CHECK, "fail", `Configured-harness project surfaces are missing or unsafe: ${drift.join(", ")}. Run lisa apply.`);
+        }
+    }
+    catch {
+        return setupFinding(INSTALL_CHECK, "fail", "Configured-harness project surfaces could not be inspected safely; replace symlinks, special files, or oversized files and run lisa apply.");
+    }
+    if (harnessIncludesAgent(harness, "claude")) {
+        const claudePlugins = healthEvidenceFinding(INSTALL_CHECK, health, ["plugins.current"], "Claude's enabled and installed Lisa plugins are current.", "warn");
+        if (claudePlugins.status !== "pass")
+            return claudePlugins;
+    }
+    if (harnessIncludesAgent(harness, "opencode")) {
+        return setupFinding(INSTALL_CHECK, "warn", "OpenCode's declared managed files are present, but their completeness against the current emit catalog cannot yet be established authoritatively.");
+    }
+    if (EXTERNAL_ONLY_HARNESSES.has(harness)) {
+        return setupFinding(INSTALL_CHECK, "warn", `Lisa's project-owned ${harness} surfaces are current, but external ${harness} plugin/runtime installation cannot yet be observed authoritatively.`);
+    }
+    return setupFinding(INSTALL_CHECK, "pass", `Lisa's required project-owned ${harness} installation surfaces are present and complete.`);
+}
+//# sourceMappingURL=ui-setup-readiness-install.js.map

package/dist/cli/ui-setup-readiness-install.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ui-setup-readiness-install.js","sourceRoot":"","sources":["../../src/cli/ui-setup-readiness-install.ts"],"names":[],"mappings":"AAAA,yEAAyE;AACzE,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAC5C,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AAEzC,OAAO,EACL,kBAAkB,EAClB,kBAAkB,GACnB,MAAM,6BAA6B,CAAC;AACrC,OAAO,EACL,eAAe,EACf,oBAAoB,GAErB,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EACL,mBAAmB,EACnB,iCAAiC,GAClC,MAAM,kCAAkC,CAAC;AAC1C,OAAO,EAAE,gBAAgB,EAAE,MAAM,2BAA2B,CAAC;AAE7D,OAAO,EACL,eAAe,EACf,wBAAwB,EACxB,qBAAqB,EACrB,eAAe,GAChB,MAAM,2BAA2B,CAAC;AAEnC,OAAO,EACL,YAAY,GAEb,MAAM,kCAAkC,CAAC;AAC1C,OAAO,EAAE,qBAAqB,EAAE,MAAM,+BAA+B,CAAC;AACtE,OAAO,EAAE,0BAA0B,EAAE,MAAM,yBAAyB,CAAC;AAErE,8EAA8E;AAC9E,MAAM,CAAC,MAAM,qBAAqB,GAAG;IACnC,eAAe;IACf,mBAAmB;IACnB,qBAAqB;IACrB,eAAe;CACP,CAAC;AAEX,MAAM,iBAAiB,GAAG,KAAK,CAAC;AAChC,MAAM,aAAa,GAAG,eAAe,CAAC;AACtC,MAAM,uBAAuB,GAAG,IAAI,GAAG,CAAU;IAC/C,QAAQ;IACR,KAAK;IACL,SAAS;IACT,OAAO;CACR,CAAC,CAAC;AAEH;;;;GAIG;AACH,SAAS,iBAAiB,CAAC,MAAkB;IAC3C,MAAM,GAAG,GAAG,MAAM,CAAC,OAAO,IAAI,eAAe,CAAC;IAC9C,OAAO,OAAO,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAC,gBAAgB,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;AACrE,CAAC;AAED;;;;;GAKG;AACH,KAAK,UAAU,mBAAmB,CAChC,IAAY,EACZ,YAAoB;IAEpB,MAAM,IAAI,GAAG,MAAM,eAAe,CAAC,IAAI,EAAE,YAAY,CAAC,CAAC;IACvD,OAAO,IAAI,KAAK,SAAS,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,CAAC;AACtD,CAAC;AAED;;;;GAIG;AACH,SAAS,kBAAkB,CAAC,KAAc;IACxC,IACE,OAAO,KAAK,KAAK,QAAQ;QACzB,KAAK,CAAC,MAAM,KAAK,CAAC;QAClB,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC;QACpB,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,KAAK,CAAC,EAC5B,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IACD,MAAM,QAAQ,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAClC,OAAO,CACL,QAAQ,CAAC,KAAK,CACZ,OAAO,CAAC,EAAE,CAAC,OAAO,KAAK,EAAE,IAAI,OAAO,KAAK,GAAG,IAAI,OAAO,KAAK,IAAI,CACjE,IAAI,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,KAAK,CAAC,KAAK,KAAK,CAC3C,CAAC;AACJ,CAAC;AAED;;;;;;GAMG;AACH,KAAK,UAAU,sBAAsB,CACnC,IAAY,EACZ,SAAiB,EACjB,KAAa;IAEb,MAAM,QAAQ,GAAG,CAAC,SAAS,EAAE,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC;IAClD,MAAM,OAAO,GAAG,QAAQ;SACrB,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;SACZ,GAAG,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,EAAE,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;IAC7D,MAAM,KAAK,GAAG,MAAM,OAAO,CAAC,GAAG,CAC7B,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,eAAe,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CACrD,CAAC;IACF,OAAO,CACL,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,KAAK,WAAW,CAAC;QACzC,CAAC,MAAM,wBAAwB,CAAC,IAAI,EAAE,GAAG,SAAS,IAAI,KAAK,EAAE,CAAC,CAAC,CAChE,CAAC;AACJ,CAAC;AAED;;;;;;GAMG;AACH,KAAK,UAAU,yBAAyB,CACtC,IAAY,EACZ,SAAiC,EACjC,aAAiC;IAEjC,MAAM,QAAQ,GAAG,MAAM,qBAAqB,CAC1C,IAAI,EACJ,GAAG,SAAS,qBAAqB,CAClC,CAAC;IACF,MAAM,KAAK,GAAG,QAAQ,EAAE,KAAK,CAAC;IAC9B,IACE,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QACrB,KAAK,CAAC,MAAM,KAAK,CAAC;QAClB,KAAK,CAAC,MAAM,GAAG,iBAAiB;QAChC,CAAC,KAAK,CAAC,KAAK,CAAC,kBAAkB,CAAC;QAChC,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC,IAAI,KAAK,KAAK,CAAC,MAAM,EACpC,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IACD,IAAI,aAAa,KAAK,SAAS,EAAE,CAAC;QAChC,MAAM,QAAQ,GAAG,CAAC,GAAG,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAC/C,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,CAC1B,CAAC;QACF,MAAM,QAAQ,GAAG,CAAC,GAAG,aAAa,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CACvD,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,CAC1B,CAAC;QACF,IACE,QAAQ,CAAC,MAAM,KAAK,QAAQ,CAAC,MAAM;YACnC,QAAQ,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE,CAAC,KAAK,KAAK,QAAQ,CAAC,KAAK,CAAC,CAAC,EAC1D,CAAC;YACD,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC;IACD,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,GAAG,CAC/B,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,sBAAsB,CAAC,IAAI,EAAE,SAAS,EAAE,KAAK,CAAC,CAAC,CACnE,CAAC;IACF,OAAO,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;AAChC,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,CAAC,KAAK,UAAU,yBAAyB,CAC7C,WAAmB,EACnB,MAAkB;IAElB,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,WAAW,CAAC,CAAC;IACzC,MAAM,QAAQ,GAAG,MAAM,QAAQ,CAC7B,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,OAAO,CAAC,CACpE,CAAC;IACF,MAAM,CAAC,aAAa,EAAE,QAAQ,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;QAClD,0BAA0B,CAAC,IAAI,CAAC;QAChC,eAAe,CAAC,IAAI,EAAE,4BAA4B,CAAC;KACpD,CAAC,CAAC;IACH,MAAM,OAAO,GAAG,iCAAiC,CAC/C,MAAM,EACN,aAAa,EACb,QAAQ,KAAK,MAAM,CACpB,CAAC;IACF,MAAM,MAAM,GAAG,MAAM,kBAAkB,CACrC,QAAQ,EACR,mBAAmB,CAAC,OAAO,CAAC,CAC7B,CAAC;IACF,OAAO,MAAM,CAAC,MAAM,CAAC;QACnB,GAAG,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CACpB,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,kBAAkB,EAAE,GAAG,KAAK,CAAC,EAAE,OAAO,CAAC,CACxD;QACD,aAAa;KACd,CAAC,CAAC;AACL,CAAC;AAED;;;;;;GAMG;AACH,KAAK,UAAU,aAAa,CAC1B,UAAmB,EACnB,KAAa,EACb,OAA+B;IAE/B,IAAI,CAAC,UAAU;QAAE,OAAO,EAAE,CAAC;IAC3B,OAAO,CAAC,MAAM,OAAO,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;AAC1C,CAAC;AAED;;;;;;GAMG;AACH,KAAK,UAAU,mBAAmB,CAChC,IAAY,EACZ,OAAgB,EAChB,MAAkB;IAElB,MAAM,QAAQ,GAAG,CAAC,KAA2C,EAAW,EAAE,CACxE,oBAAoB,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;IACvC,MAAM,WAAW,GACf,QAAQ,CAAC,QAAQ,CAAC;QAClB,QAAQ,CAAC,OAAO,CAAC;QACjB,QAAQ,CAAC,KAAK,CAAC;QACf,QAAQ,CAAC,SAAS,CAAC;QACnB,QAAQ,CAAC,UAAU,CAAC,CAAC;IACvB,MAAM,UAAU,GAAG,QAAQ,CAAC,OAAO,CAAC;QAClC,CAAC,CAAC,MAAM,yBAAyB,CAAC,IAAI,EAAE,MAAM,CAAC;QAC/C,CAAC,CAAC,SAAS,CAAC;IAEd,MAAM,YAAY,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;QACrC,aAAa,CACX,WAAW,EACX,WAAW,EACX,KAAK,IAAI,EAAE,CAAC,MAAM,mBAAmB,CAAC,IAAI,EAAE,WAAW,CAAC,CACzD;QACD,aAAa,CACX,QAAQ,CAAC,QAAQ,CAAC,EAClB,uCAAuC,EACvC,KAAK,IAAI,EAAE,CACT,CAAC,MAAM,eAAe,CAAC,IAAI,EAAE,WAAW,CAAC,CAAC,EAAE,QAAQ,CAAC,YAAY,CAAC;YAClE,IAAI,CACP;QACD,aAAa,CACX,QAAQ,CAAC,OAAO,CAAC,EACjB,kCAAkC,EAClC,KAAK,IAAI,EAAE,CAAC,MAAM,yBAAyB,CAAC,IAAI,EAAE,QAAQ,EAAE,UAAU,CAAC,CACxE;QACD,aAAa,CACX,QAAQ,CAAC,SAAS,CAAC,EACnB,iCAAiC,EACjC,KAAK,IAAI,EAAE,CACT,MAAM,mBAAmB,CAAC,IAAI,EAAE,iCAAiC,CAAC,CACrE;QACD,aAAa,CACX,QAAQ,CAAC,UAAU,CAAC,EACpB,qCAAqC,EACrC,KAAK,IAAI,EAAE,CAAC,MAAM,yBAAyB,CAAC,IAAI,EAAE,WAAW,CAAC,CAC/D;QACD,aAAa,CACX,QAAQ,CAAC,UAAU,CAAC,EACpB,eAAe,EACf,KAAK,IAAI,EAAE,CAAC,MAAM,mBAAmB,CAAC,IAAI,EAAE,eAAe,CAAC,CAC7D;KACF,CAAC,CAAC;IACH,OAAO,YAAY,CAAC,IAAI,EAAE,CAAC;AAC7B,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CAClC,WAAmB,EACnB,MAAkB,EAClB,MAAgC;IAEhC,MAAM,MAAM,GAAG,qBAAqB,CAClC,aAAa,EACb,MAAM,EACN,qBAAqB,EACrB,sEAAsE,EACtE,MAAM,CACP,CAAC;IACF,IAAI,MAAM,CAAC,MAAM,KAAK,MAAM;QAAE,OAAO,MAAM,CAAC;IAE5C,MAAM,OAAO,GAAG,iBAAiB,CAAC,MAAM,CAAC,CAAC;IAC1C,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;QAC1B,OAAO,YAAY,CACjB,aAAa,EACb,MAAM,EACN,kFAAkF,CACnF,CAAC;IACJ,CAAC;IAED,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,WAAW,CAAC,CAAC;QACzC,MAAM,KAAK,GAAG,MAAM,mBAAmB,CAAC,IAAI,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC;QAC/D,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACrB,OAAO,YAAY,CACjB,aAAa,EACb,MAAM,EACN,8DAA8D,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,mBAAmB,CAClG,CAAC;QACJ,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,YAAY,CACjB,aAAa,EACb,MAAM,EACN,4IAA4I,CAC7I,CAAC;IACJ,CAAC;IAED,IAAI,oBAAoB,CAAC,OAAO,EAAE,QAAQ,CAAC,EAAE,CAAC;QAC5C,MAAM,aAAa,GAAG,qBAAqB,CACzC,aAAa,EACb,MAAM,EACN,CAAC,iBAAiB,CAAC,EACnB,0DAA0D,EAC1D,MAAM,CACP,CAAC;QACF,IAAI,aAAa,CAAC,MAAM,KAAK,MAAM;YAAE,OAAO,aAAa,CAAC;IAC5D,CAAC;IAED,IAAI,oBAAoB,CAAC,OAAO,EAAE,UAAU,CAAC,EAAE,CAAC;QAC9C,OAAO,YAAY,CACjB,aAAa,EACb,MAAM,EACN,mJAAmJ,CACpJ,CAAC;IACJ,CAAC;IAED,IAAI,uBAAuB,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC;QACzC,OAAO,YAAY,CACjB,aAAa,EACb,MAAM,EACN,wBAAwB,OAAO,uCAAuC,OAAO,sEAAsE,CACpJ,CAAC;IACJ,CAAC;IAED,OAAO,YAAY,CACjB,aAAa,EACb,MAAM,EACN,iCAAiC,OAAO,kDAAkD,CAC3F,CAAC;AACJ,CAAC"}

package/dist/cli/ui-setup-readiness-local.d.ts

@@ -0,0 +1,40 @@
+import type { HealthResult, HealthStatus } from "../health/contract.js";
+import { type SetupReadinessCheck, type SetupReadinessFinding } from "./ui-setup-readiness-contract.js";
+/** Fixed Health checks that establish local standards/governance conformance. */
+export declare const STANDARDS_HEALTH_CHECKS: readonly ["templates.managed", "package.conformance", "hooks.managed", "config.sync", "instructions.canonical", "ci.workflows"];
+/**
+ * Never upgrade standards adoption without current lint/test preservation proof.
+ * @param health - Current deterministic Health evidence, when available
+ * @returns Standards-adoption readiness finding
+ */
+export declare function standardsFinding(health: HealthResult | undefined): SetupReadinessFinding;
+/**
+ * Aggregate stable check IDs without interpreting human-readable reasons.
+ * @param check - Setup checklist identifier being evaluated
+ * @param health - Current deterministic Health evidence, when available
+ * @param requiredChecks - Health check identifiers required for readiness
+ * @param passReason - Operator-readable reason used when every check passes
+ * @param unavailableStatus - Status used when required evidence is absent
+ * @returns Setup finding derived from the required Health checks
+ */
+export declare function healthEvidenceFinding(check: SetupReadinessCheck, health: HealthResult | undefined, requiredChecks: readonly string[], passReason: string, unavailableStatus?: HealthStatus): SetupReadinessFinding;
+/**
+ * Require a complete source registry and no open knowledge gaps.
+ * @param projectRoot - Project root containing agent-ready evidence
+ * @returns Agent-readiness finding from confined registry and gap evidence
+ */
+export declare function agentReadyFinding(projectRoot: string): Promise<SetupReadinessFinding>;
+/**
+ * Require the optional wiki to exist before accepting the Health wiki check.
+ * @param projectRoot - Project root containing the optional wiki
+ * @param health - Current deterministic Health evidence, when available
+ * @returns Wiki setup readiness finding
+ */
+export declare function wikiSetupFinding(projectRoot: string, health: HealthResult | undefined): Promise<SetupReadinessFinding>;
+/**
+ * Read names referenced as `secrets.NAME` from current workflow files.
+ * @param projectRoot - Project root containing GitHub workflows
+ * @returns Sorted unique explicit workflow secret names
+ */
+export declare function readWorkflowSecretNames(projectRoot: string): Promise<readonly string[]>;
+//# sourceMappingURL=ui-setup-readiness-local.d.ts.map

package/dist/cli/ui-setup-readiness-local.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ui-setup-readiness-local.d.ts","sourceRoot":"","sources":["../../src/cli/ui-setup-readiness-local.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,YAAY,EAAE,YAAY,EAAE,MAAM,uBAAuB,CAAC;AAQxE,OAAO,EAEL,KAAK,mBAAmB,EACxB,KAAK,qBAAqB,EAC3B,MAAM,kCAAkC,CAAC;AAK1C,iFAAiF;AACjF,eAAO,MAAM,uBAAuB,iIAO1B,CAAC;AAEX;;;;GAIG;AACH,wBAAgB,gBAAgB,CAC9B,MAAM,EAAE,YAAY,GAAG,SAAS,GAC/B,qBAAqB,CAevB;AA0GD;;;;;;;;GAQG;AACH,wBAAgB,qBAAqB,CACnC,KAAK,EAAE,mBAAmB,EAC1B,MAAM,EAAE,YAAY,GAAG,SAAS,EAChC,cAAc,EAAE,SAAS,MAAM,EAAE,EACjC,UAAU,EAAE,MAAM,EAClB,iBAAiB,GAAE,YAAqB,GACvC,qBAAqB,CAwBvB;AAED;;;;GAIG;AAEH,wBAAsB,iBAAiB,CACrC,WAAW,EAAE,MAAM,GAClB,OAAO,CAAC,qBAAqB,CAAC,CAqFhC;AAED;;;;;GAKG;AACH,wBAAsB,gBAAgB,CACpC,WAAW,EAAE,MAAM,EACnB,MAAM,EAAE,YAAY,GAAG,SAAS,GAC/B,OAAO,CAAC,qBAAqB,CAAC,CAuBhC;AAED;;;;GAIG;AACH,wBAAsB,uBAAuB,CAC3C,WAAW,EAAE,MAAM,GAClB,OAAO,CAAC,SAAS,MAAM,EAAE,CAAC,CA+B5B"}

package/dist/cli/ui-setup-readiness-local.js

@@ -0,0 +1,235 @@
+/** Local filesystem and deterministic-Health evidence for Setup readiness. */
+import { readdir, realpath } from "node:fs/promises";
+import path from "node:path";
+import { projectPathKind, projectRegularFileExists, readProjectText, resolveProjectPath, } from "../health/read-only-fs.js";
+import { requireCanonicalUtcTimestamp } from "../health/strict-validation.js";
+import { setupFinding, } from "./ui-setup-readiness-contract.js";
+const AGENT_READY_CHECK = "setup.agent-ready";
+const WIKI_CHECK = "setup.wiki";
+/** Fixed Health checks that establish local standards/governance conformance. */
+export const STANDARDS_HEALTH_CHECKS = [
+    "templates.managed",
+    "package.conformance",
+    "hooks.managed",
+    "config.sync",
+    "instructions.canonical",
+    "ci.workflows",
+];
+/**
+ * Never upgrade standards adoption without current lint/test preservation proof.
+ * @param health - Current deterministic Health evidence, when available
+ * @returns Standards-adoption readiness finding
+ */
+export function standardsFinding(health) {
+    const managed = healthEvidenceFinding("setup.standards", health, STANDARDS_HEALTH_CHECKS, "Managed standards surfaces are current.", "fail");
+    return managed.status === "pass"
+        ? setupFinding("setup.standards", "warn", "Managed standards surfaces are current, but bounded current lint, test, and behavior-preservation proof is unavailable.")
+        : managed;
+}
+/** Project workflow secret available without explicit provisioning. */
+const IMPLICIT_WORKFLOW_SECRETS = new Set(["GITHUB_TOKEN"]);
+/**
+ * Whether an unknown field is non-empty operator text.
+ * @param value - Untrusted field value
+ * @returns Whether the value contains non-whitespace text
+ */
+function hasText(value) {
+    return typeof value === "string" && value.trim().length > 0;
+}
+/**
+ * Canonicalize one strictly source-confined evidence path.
+ * @param value - Untrusted source evidence path
+ * @returns Normalized wiki/sources path, or undefined when invalid
+ */
+function normalizeSourceEvidencePath(value) {
+    if (!hasText(value) || value.includes("\\") || path.posix.isAbsolute(value)) {
+        return undefined;
+    }
+    const segments = value.split("/");
+    if (segments.some(segment => segment === "" || segment === "." || segment === "..")) {
+        return undefined;
+    }
+    const normalized = path.posix.normalize(value);
+    return normalized === value && normalized.startsWith("wiki/sources/")
+        ? normalized
+        : undefined;
+}
+/**
+ * Refuse symlinks in every parent and inspect the final file with no-follow.
+ * @param root - Canonical project root
+ * @param evidencePath - Normalized project-relative evidence path
+ * @returns Whether the evidence path has safe parents and a regular final file
+ */
+async function sourceEvidenceIsRegular(root, evidencePath) {
+    const segments = evidencePath.split("/");
+    const parents = segments
+        .slice(0, -1)
+        .map((_, index) => segments.slice(0, index + 1).join("/"));
+    const parentKinds = await Promise.all(parents.map(parent => projectPathKind(root, parent)));
+    if (!parentKinds.every(kind => kind === "directory"))
+        return false;
+    return await projectRegularFileExists(root, evidencePath);
+}
+/**
+ * Validate one complete agent-ready source row and its confined evidence.
+ * @param root - Canonical project root
+ * @param source - Untrusted source-registry row
+ * @returns Completeness classification for the source row
+ */
+async function sourceRowIsComplete(root, source) {
+    if (source === null || typeof source !== "object" || Array.isArray(source)) {
+        return "invalid";
+    }
+    const probe = Reflect.get(source, "read_only_probe");
+    const evidence = Reflect.get(source, "sanitized_evidence");
+    const terminalStatus = Reflect.get(source, "terminal_status");
+    const openGap = Reflect.get(source, "open_gap");
+    if (!hasText(Reflect.get(source, "source_id")) ||
+        !hasText(Reflect.get(source, "scope")) ||
+        probe === null ||
+        typeof probe !== "object" ||
+        Array.isArray(probe) ||
+        !hasText(Reflect.get(probe, "command")) ||
+        !hasText(Reflect.get(probe, "observed")) ||
+        typeof terminalStatus !== "string" ||
+        !["complete", "partial", "unavailable", "pending"].includes(terminalStatus) ||
+        (openGap !== null && !hasText(openGap)) ||
+        !Array.isArray(evidence) ||
+        evidence.length === 0 ||
+        evidence.some(item => normalizeSourceEvidencePath(item) === undefined)) {
+        return "invalid";
+    }
+    const canonicalEvidence = evidence.map(item => normalizeSourceEvidencePath(item));
+    const regularFiles = await Promise.all(canonicalEvidence.map(item => sourceEvidenceIsRegular(root, item)));
+    if (!regularFiles.every(Boolean))
+        return "invalid";
+    return terminalStatus === "complete" && openGap === null
+        ? "complete"
+        : "incomplete";
+}
+/**
+ * Aggregate stable check IDs without interpreting human-readable reasons.
+ * @param check - Setup checklist identifier being evaluated
+ * @param health - Current deterministic Health evidence, when available
+ * @param requiredChecks - Health check identifiers required for readiness
+ * @param passReason - Operator-readable reason used when every check passes
+ * @param unavailableStatus - Status used when required evidence is absent
+ * @returns Setup finding derived from the required Health checks
+ */
+export function healthEvidenceFinding(check, health, requiredChecks, passReason, unavailableStatus = "warn") {
+    const byCheck = new Map((health?.findings ?? []).map(finding => [finding.check, finding]));
+    const unavailable = requiredChecks.filter(id => !byCheck.has(id));
+    if (unavailable.length > 0) {
+        return setupFinding(check, unavailableStatus, `Required deterministic evidence is unavailable: ${unavailable.join(", ")}.`);
+    }
+    const nonPassing = requiredChecks.filter(id => byCheck.get(id)?.status !== "pass");
+    if (nonPassing.length === 0) {
+        return setupFinding(check, "pass", passReason);
+    }
+    const hasFailure = nonPassing.some(id => byCheck.get(id)?.status === "fail");
+    return setupFinding(check, hasFailure ? "fail" : "warn", `Deterministic setup evidence is not passing: ${nonPassing.join(", ")}.`);
+}
+/**
+ * Require a complete source registry and no open knowledge gaps.
+ * @param projectRoot - Project root containing agent-ready evidence
+ * @returns Agent-readiness finding from confined registry and gap evidence
+ */
+// eslint-disable-next-line max-lines-per-function, sonarjs/cognitive-complexity -- one bounded registry-and-evidence validation transaction stays auditable together
+export async function agentReadyFinding(projectRoot) {
+    try {
+        const root = await realpath(projectRoot);
+        const [registryText, gapsText] = await Promise.all([
+            readProjectText(root, "wiki/state/agent-ready/sources.json"),
+            readProjectText(root, "wiki/gaps.md"),
+        ]);
+        if (registryText === undefined || gapsText === undefined) {
+            return setupFinding(AGENT_READY_CHECK, "warn", "Agent-ready evidence is incomplete: run /lisa:agent-ready to create the source registry and wiki/gaps.md.");
+        }
+        const parsed = JSON.parse(registryText);
+        if (parsed === null ||
+            typeof parsed !== "object" ||
+            Array.isArray(parsed) ||
+            Reflect.get(parsed, "schema_version") !== 1) {
+            return setupFinding(AGENT_READY_CHECK, "fail", "The agent-ready source registry is malformed or unsupported.");
+        }
+        requireCanonicalUtcTimestamp(Reflect.get(parsed, "updated_at"), "agent-ready updated_at");
+        const sources = Reflect.get(parsed, "sources");
+        if (!Array.isArray(sources) || sources.length === 0) {
+            return setupFinding(AGENT_READY_CHECK, "warn", "The agent-ready source registry has no inventoried sources.");
+        }
+        const sourceIds = sources.flatMap(source => {
+            if (source === null || typeof source !== "object")
+                return [];
+            const id = Reflect.get(source, "source_id");
+            return typeof id === "string" ? [id] : [];
+        });
+        const validations = await Promise.all(sources.map(source => sourceRowIsComplete(root, source)));
+        if (validations.includes("invalid")) {
+            return setupFinding(AGENT_READY_CHECK, "fail", "The agent-ready source registry has an invalid row or missing, unsafe, or non-file sanitized evidence.");
+        }
+        const incomplete = validations.filter(value => value === "incomplete").length;
+        if (new Set(sourceIds).size !== sources.length) {
+            return setupFinding(AGENT_READY_CHECK, "fail", "The agent-ready source registry has missing or duplicate source identifiers.");
+        }
+        const openGaps = [...gapsText.matchAll(/\*\*Status\*\*:\s*open\b/giu)]
+            .length;
+        if (incomplete > 0 || openGaps > 0) {
+            return setupFinding(AGENT_READY_CHECK, "warn", `Knowledge convergence is incomplete: ${incomplete} source record${incomplete === 1 ? "" : "s"} incomplete and ${openGaps} open gap${openGaps === 1 ? "" : "s"}.`);
+        }
+        return setupFinding(AGENT_READY_CHECK, "pass", `All ${sources.length} inventoried sources are complete and wiki/gaps.md has no open gaps.`);
+    }
+    catch {
+        return setupFinding(AGENT_READY_CHECK, "fail", "Agent-ready evidence is unreadable; re-run /lisa:agent-ready.");
+    }
+}
+/**
+ * Require the optional wiki to exist before accepting the Health wiki check.
+ * @param projectRoot - Project root containing the optional wiki
+ * @param health - Current deterministic Health evidence, when available
+ * @returns Wiki setup readiness finding
+ */
+export async function wikiSetupFinding(projectRoot, health) {
+    try {
+        const root = await realpath(projectRoot);
+        if ((await projectPathKind(root, "wiki")) !== "directory") {
+            return setupFinding(WIKI_CHECK, "warn", "Optional LLM wiki is not installed. Run /lisa:wiki:install.");
+        }
+    }
+    catch {
+        return setupFinding(WIKI_CHECK, "fail", "The wiki path is unsafe or unreadable.");
+    }
+    return healthEvidenceFinding(WIKI_CHECK, health, ["project.wiki"], "The optional LLM wiki contract files are installed.");
+}
+/**
+ * Read names referenced as `secrets.NAME` from current workflow files.
+ * @param projectRoot - Project root containing GitHub workflows
+ * @returns Sorted unique explicit workflow secret names
+ */
+export async function readWorkflowSecretNames(projectRoot) {
+    try {
+        const root = await realpath(projectRoot);
+        if ((await projectPathKind(root, ".github/workflows")) !== "directory") {
+            return [];
+        }
+        const directory = resolveProjectPath(root, ".github/workflows");
+        const entries = await readdir(directory, { withFileTypes: true });
+        const workflowNames = entries
+            .filter(entry => entry.isFile() && /\.(?:ya?ml)$/iu.test(entry.name))
+            .map(entry => `.github/workflows/${entry.name}`)
+            .sort((left, right) => left.localeCompare(right));
+        if (workflowNames.length > 100) {
+            throw new Error("Workflow secret inventory exceeds the bounded reader");
+        }
+        const contents = await Promise.all(workflowNames.map(name => readProjectText(root, name, 256 * 1024)));
+        const names = contents.flatMap(content => content === undefined
+            ? []
+            : [...content.matchAll(/\bsecrets\.([A-Z][A-Z0-9_]*)\b/gu)].map(match => match[1]));
+        return [...new Set(names)]
+            .filter(name => !IMPLICIT_WORKFLOW_SECRETS.has(name))
+            .sort((left, right) => left.localeCompare(right));
+    }
+    catch {
+        return [];
+    }
+}
+//# sourceMappingURL=ui-setup-readiness-local.js.map

package/dist/cli/ui-setup-readiness-local.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ui-setup-readiness-local.js","sourceRoot":"","sources":["../../src/cli/ui-setup-readiness-local.ts"],"names":[],"mappings":"AAAA,8EAA8E;AAC9E,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AACrD,OAAO,IAAI,MAAM,WAAW,CAAC;AAE7B,OAAO,EACL,eAAe,EACf,wBAAwB,EACxB,eAAe,EACf,kBAAkB,GACnB,MAAM,2BAA2B,CAAC;AACnC,OAAO,EAAE,4BAA4B,EAAE,MAAM,gCAAgC,CAAC;AAC9E,OAAO,EACL,YAAY,GAGb,MAAM,kCAAkC,CAAC;AAE1C,MAAM,iBAAiB,GAAG,mBAAmB,CAAC;AAC9C,MAAM,UAAU,GAAG,YAAY,CAAC;AAEhC,iFAAiF;AACjF,MAAM,CAAC,MAAM,uBAAuB,GAAG;IACrC,mBAAmB;IACnB,qBAAqB;IACrB,eAAe;IACf,aAAa;IACb,wBAAwB;IACxB,cAAc;CACN,CAAC;AAEX;;;;GAIG;AACH,MAAM,UAAU,gBAAgB,CAC9B,MAAgC;IAEhC,MAAM,OAAO,GAAG,qBAAqB,CACnC,iBAAiB,EACjB,MAAM,EACN,uBAAuB,EACvB,yCAAyC,EACzC,MAAM,CACP,CAAC;IACF,OAAO,OAAO,CAAC,MAAM,KAAK,MAAM;QAC9B,CAAC,CAAC,YAAY,CACV,iBAAiB,EACjB,MAAM,EACN,yHAAyH,CAC1H;QACH,CAAC,CAAC,OAAO,CAAC;AACd,CAAC;AAED,uEAAuE;AACvE,MAAM,yBAAyB,GAAG,IAAI,GAAG,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC;AAE5D;;;;GAIG;AACH,SAAS,OAAO,CAAC,KAAc;IAC7B,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,CAAC;AAC9D,CAAC;AAED;;;;GAIG;AACH,SAAS,2BAA2B,CAAC,KAAc;IACjD,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,KAAK,CAAC,EAAE,CAAC;QAC5E,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,MAAM,QAAQ,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAClC,IACE,QAAQ,CAAC,IAAI,CACX,OAAO,CAAC,EAAE,CAAC,OAAO,KAAK,EAAE,IAAI,OAAO,KAAK,GAAG,IAAI,OAAO,KAAK,IAAI,CACjE,EACD,CAAC;QACD,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,MAAM,UAAU,GAAG,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;IAC/C,OAAO,UAAU,KAAK,KAAK,IAAI,UAAU,CAAC,UAAU,CAAC,eAAe,CAAC;QACnE,CAAC,CAAC,UAAU;QACZ,CAAC,CAAC,SAAS,CAAC;AAChB,CAAC;AAED;;;;;GAKG;AACH,KAAK,UAAU,uBAAuB,CACpC,IAAY,EACZ,YAAoB;IAEpB,MAAM,QAAQ,GAAG,YAAY,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IACzC,MAAM,OAAO,GAAG,QAAQ;SACrB,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;SACZ,GAAG,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,EAAE,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;IAC7D,MAAM,WAAW,GAAG,MAAM,OAAO,CAAC,GAAG,CACnC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,eAAe,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CACrD,CAAC;IACF,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,KAAK,WAAW,CAAC;QAAE,OAAO,KAAK,CAAC;IACnE,OAAO,MAAM,wBAAwB,CAAC,IAAI,EAAE,YAAY,CAAC,CAAC;AAC5D,CAAC;AAED;;;;;GAKG;AACH,KAAK,UAAU,mBAAmB,CAChC,IAAY,EACZ,MAAe;IAEf,IAAI,MAAM,KAAK,IAAI,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;QAC3E,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,MAAM,EAAE,iBAAiB,CAAC,CAAC;IACrD,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,MAAM,EAAE,oBAAoB,CAAC,CAAC;IAC3D,MAAM,cAAc,GAAG,OAAO,CAAC,GAAG,CAAC,MAAM,EAAE,iBAAiB,CAAC,CAAC;IAC9D,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;IAChD,IACE,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC;QAC1C,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;QACtC,KAAK,KAAK,IAAI;QACd,OAAO,KAAK,KAAK,QAAQ;QACzB,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QACpB,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,EAAE,SAAS,CAAC,CAAC;QACvC,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,EAAE,UAAU,CAAC,CAAC;QACxC,OAAO,cAAc,KAAK,QAAQ;QAClC,CAAC,CAAC,UAAU,EAAE,SAAS,EAAE,aAAa,EAAE,SAAS,CAAC,CAAC,QAAQ,CACzD,cAAc,CACf;QACD,CAAC,OAAO,KAAK,IAAI,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;QACvC,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC;QACxB,QAAQ,CAAC,MAAM,KAAK,CAAC;QACrB,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,2BAA2B,CAAC,IAAI,CAAC,KAAK,SAAS,CAAC,EACtE,CAAC;QACD,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,MAAM,iBAAiB,GAAG,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAC5C,2BAA2B,CAAC,IAAI,CAAC,CAClC,CAAC;IACF,MAAM,YAAY,GAAG,MAAM,OAAO,CAAC,GAAG,CACpC,iBAAiB,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,uBAAuB,CAAC,IAAI,EAAE,IAAK,CAAC,CAAC,CACpE,CAAC;IACF,IAAI,CAAC,YAAY,CAAC,KAAK,CAAC,OAAO,CAAC;QAAE,OAAO,SAAS,CAAC;IACnD,OAAO,cAAc,KAAK,UAAU,IAAI,OAAO,KAAK,IAAI;QACtD,CAAC,CAAC,UAAU;QACZ,CAAC,CAAC,YAAY,CAAC;AACnB,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,qBAAqB,CACnC,KAA0B,EAC1B,MAAgC,EAChC,cAAiC,EACjC,UAAkB,EAClB,oBAAkC,MAAM;IAExC,MAAM,OAAO,GAAG,IAAI,GAAG,CACrB,CAAC,MAAM,EAAE,QAAQ,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC,CAClE,CAAC;IACF,MAAM,WAAW,GAAG,cAAc,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC;IAClE,IAAI,WAAW,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC3B,OAAO,YAAY,CACjB,KAAK,EACL,iBAAiB,EACjB,mDAAmD,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAC7E,CAAC;IACJ,CAAC;IACD,MAAM,UAAU,GAAG,cAAc,CAAC,MAAM,CACtC,EAAE,CAAC,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,MAAM,KAAK,MAAM,CACzC,CAAC;IACF,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC5B,OAAO,YAAY,CAAC,KAAK,EAAE,MAAM,EAAE,UAAU,CAAC,CAAC;IACjD,CAAC;IACD,MAAM,UAAU,GAAG,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,MAAM,KAAK,MAAM,CAAC,CAAC;IAC7E,OAAO,YAAY,CACjB,KAAK,EACL,UAAU,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAC5B,gDAAgD,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CACzE,CAAC;AACJ,CAAC;AAED;;;;GAIG;AACH,qKAAqK;AACrK,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,WAAmB;IAEnB,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,WAAW,CAAC,CAAC;QACzC,MAAM,CAAC,YAAY,EAAE,QAAQ,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;YACjD,eAAe,CAAC,IAAI,EAAE,qCAAqC,CAAC;YAC5D,eAAe,CAAC,IAAI,EAAE,cAAc,CAAC;SACtC,CAAC,CAAC;QACH,IAAI,YAAY,KAAK,SAAS,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;YACzD,OAAO,YAAY,CACjB,iBAAiB,EACjB,MAAM,EACN,2GAA2G,CAC5G,CAAC;QACJ,CAAC;QACD,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAY,CAAC;QACnD,IACE,MAAM,KAAK,IAAI;YACf,OAAO,MAAM,KAAK,QAAQ;YAC1B,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC;YACrB,OAAO,CAAC,GAAG,CAAC,MAAM,EAAE,gBAAgB,CAAC,KAAK,CAAC,EAC3C,CAAC;YACD,OAAO,YAAY,CACjB,iBAAiB,EACjB,MAAM,EACN,8DAA8D,CAC/D,CAAC;QACJ,CAAC;QACD,4BAA4B,CAC1B,OAAO,CAAC,GAAG,CAAC,MAAM,EAAE,YAAY,CAAC,EACjC,wBAAwB,CACzB,CAAC;QACF,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;QAC/C,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACpD,OAAO,YAAY,CACjB,iBAAiB,EACjB,MAAM,EACN,6DAA6D,CAC9D,CAAC;QACJ,CAAC;QACD,MAAM,SAAS,GAAG,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE;YACzC,IAAI,MAAM,KAAK,IAAI,IAAI,OAAO,MAAM,KAAK,QAAQ;gBAAE,OAAO,EAAE,CAAC;YAC7D,MAAM,EAAE,GAAG,OAAO,CAAC,GAAG,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC;YAC5C,OAAO,OAAO,EAAE,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QAC5C,CAAC,CAAC,CAAC;QACH,MAAM,WAAW,GAAG,MAAM,OAAO,CAAC,GAAG,CACnC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,mBAAmB,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CACzD,CAAC;QACF,IAAI,WAAW,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC;YACpC,OAAO,YAAY,CACjB,iBAAiB,EACjB,MAAM,EACN,wGAAwG,CACzG,CAAC;QACJ,CAAC;QACD,MAAM,UAAU,GAAG,WAAW,CAAC,MAAM,CACnC,KAAK,CAAC,EAAE,CAAC,KAAK,KAAK,YAAY,CAChC,CAAC,MAAM,CAAC;QACT,IAAI,IAAI,GAAG,CAAC,SAAS,CAAC,CAAC,IAAI,KAAK,OAAO,CAAC,MAAM,EAAE,CAAC;YAC/C,OAAO,YAAY,CACjB,iBAAiB,EACjB,MAAM,EACN,8EAA8E,CAC/E,CAAC;QACJ,CAAC;QACD,MAAM,QAAQ,GAAG,CAAC,GAAG,QAAQ,CAAC,QAAQ,CAAC,6BAA6B,CAAC,CAAC;aACnE,MAAM,CAAC;QACV,IAAI,UAAU,GAAG,CAAC,IAAI,QAAQ,GAAG,CAAC,EAAE,CAAC;YACnC,OAAO,YAAY,CACjB,iBAAiB,EACjB,MAAM,EACN,wCAAwC,UAAU,iBAAiB,UAAU,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,mBAAmB,QAAQ,YAAY,QAAQ,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,GAAG,CAClK,CAAC;QACJ,CAAC;QACD,OAAO,YAAY,CACjB,iBAAiB,EACjB,MAAM,EACN,OAAO,OAAO,CAAC,MAAM,sEAAsE,CAC5F,CAAC;IACJ,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,YAAY,CACjB,iBAAiB,EACjB,MAAM,EACN,+DAA+D,CAChE,CAAC;IACJ,CAAC;AACH,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,WAAmB,EACnB,MAAgC;IAEhC,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,WAAW,CAAC,CAAC;QACzC,IAAI,CAAC,MAAM,eAAe,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,KAAK,WAAW,EAAE,CAAC;YAC1D,OAAO,YAAY,CACjB,UAAU,EACV,MAAM,EACN,6DAA6D,CAC9D,CAAC;QACJ,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,YAAY,CACjB,UAAU,EACV,MAAM,EACN,wCAAwC,CACzC,CAAC;IACJ,CAAC;IACD,OAAO,qBAAqB,CAC1B,UAAU,EACV,MAAM,EACN,CAAC,cAAc,CAAC,EAChB,qDAAqD,CACtD,CAAC;AACJ,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAC3C,WAAmB;IAEnB,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,WAAW,CAAC,CAAC;QACzC,IAAI,CAAC,MAAM,eAAe,CAAC,IAAI,EAAE,mBAAmB,CAAC,CAAC,KAAK,WAAW,EAAE,CAAC;YACvE,OAAO,EAAE,CAAC;QACZ,CAAC;QACD,MAAM,SAAS,GAAG,kBAAkB,CAAC,IAAI,EAAE,mBAAmB,CAAC,CAAC;QAChE,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,SAAS,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC;QAClE,MAAM,aAAa,GAAG,OAAO;aAC1B,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,MAAM,EAAE,IAAI,gBAAgB,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;aACpE,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,qBAAqB,KAAK,CAAC,IAAI,EAAE,CAAC;aAC/C,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC,CAAC;QACpD,IAAI,aAAa,CAAC,MAAM,GAAG,GAAG,EAAE,CAAC;YAC/B,MAAM,IAAI,KAAK,CAAC,sDAAsD,CAAC,CAAC;QAC1E,CAAC;QACD,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,GAAG,CAChC,aAAa,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,eAAe,CAAC,IAAI,EAAE,IAAI,EAAE,GAAG,GAAG,IAAI,CAAC,CAAC,CACnE,CAAC;QACF,MAAM,KAAK,GAAG,QAAQ,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CACvC,OAAO,KAAK,SAAS;YACnB,CAAC,CAAC,EAAE;YACJ,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,QAAQ,CAAC,kCAAkC,CAAC,CAAC,CAAC,GAAG,CAC3D,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC,CAAE,CACnB,CACN,CAAC;QACF,OAAO,CAAC,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC;aACvB,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,yBAAyB,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;aACpD,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC,CAAC;IACtD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC"}