@codyswann/lisa 2.277.3 → 2.278.0

package/dist/cli/ui-setup-readiness-remote.d.ts

@@ -0,0 +1,30 @@
+/** Presence-only GitHub and scheduler evidence for Setup readiness. */
+import type { ProbeResult } from "./ui-status.js";
+import type { HealthResult } from "../health/contract.js";
+import type { GithubRepoPanelValue } from "./ui-github-repo.js";
+import type { AutomationsProbeValue } from "./ui-automations.js";
+import type { DeployPipelineValue } from "./ui-deploy-pipeline.js";
+import { type SetupReadinessFinding } from "./ui-setup-readiness-contract.js";
+/**
+ * Map bounded GitHub live data to governance readiness.
+ * @param health - Current deterministic Health evidence, when available
+ * @param github - Live GitHub repository observation
+ * @param deployPipeline - Live deployment-pipeline observation
+ * @returns GitHub governance readiness finding
+ */
+export declare function githubGovernanceFinding(health: HealthResult | undefined, github: ProbeResult<GithubRepoPanelValue>, deployPipeline: ProbeResult<DeployPipelineValue>): SetupReadinessFinding;
+/**
+ * Map only workflow-referenced secret names to presence readiness.
+ * @param github - Live GitHub repository observation
+ * @param expectedSecretNames - Secret names referenced by confined workflows
+ * @returns Repository-secret presence readiness finding
+ */
+export declare function secretsFinding(github: ProbeResult<GithubRepoPanelValue>, expectedSecretNames: readonly string[]): SetupReadinessFinding;
+/**
+ * Require the exact six core scheduler entries with observed cadences.
+ * @param result - Live harness scheduler observation
+ * @param expectedAutomationIds - Applicable authoritative automation IDs
+ * @returns Harness automation readiness finding
+ */
+export declare function automationsFinding(result: ProbeResult<AutomationsProbeValue>, expectedAutomationIds: readonly string[] | undefined): SetupReadinessFinding;
+//# sourceMappingURL=ui-setup-readiness-remote.d.ts.map

package/dist/cli/ui-setup-readiness-remote.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ui-setup-readiness-remote.d.ts","sourceRoot":"","sources":["../../src/cli/ui-setup-readiness-remote.ts"],"names":[],"mappings":"AAAA,uEAAuE;AACvE,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,gBAAgB,CAAC;AAClD,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,uBAAuB,CAAC;AAC1D,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,qBAAqB,CAAC;AAChE,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,qBAAqB,CAAC;AACjE,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,yBAAyB,CAAC;AACnE,OAAO,EAEL,KAAK,qBAAqB,EAC3B,MAAM,kCAAkC,CAAC;AAM1C;;;;;;GAMG;AAEH,wBAAgB,uBAAuB,CACrC,MAAM,EAAE,YAAY,GAAG,SAAS,EAChC,MAAM,EAAE,WAAW,CAAC,oBAAoB,CAAC,EACzC,cAAc,EAAE,WAAW,CAAC,mBAAmB,CAAC,GAC/C,qBAAqB,CA8DvB;AAED;;;;;GAKG;AACH,wBAAgB,cAAc,CAC5B,MAAM,EAAE,WAAW,CAAC,oBAAoB,CAAC,EACzC,mBAAmB,EAAE,SAAS,MAAM,EAAE,GACrC,qBAAqB,CAgCvB;AAED;;;;;GAKG;AACH,wBAAgB,kBAAkB,CAChC,MAAM,EAAE,WAAW,CAAC,qBAAqB,CAAC,EAC1C,qBAAqB,EAAE,SAAS,MAAM,EAAE,GAAG,SAAS,GACnD,qBAAqB,CAmDvB"}

package/dist/cli/ui-setup-readiness-remote.js

@@ -0,0 +1,108 @@
+import { setupFinding, } from "./ui-setup-readiness-contract.js";
+const GITHUB_GOVERNANCE_CHECK = "setup.github-governance";
+const SECRETS_CHECK = "setup.secrets";
+const AUTOMATIONS_CHECK = "setup.automations";
+/**
+ * Map bounded GitHub live data to governance readiness.
+ * @param health - Current deterministic Health evidence, when available
+ * @param github - Live GitHub repository observation
+ * @param deployPipeline - Live deployment-pipeline observation
+ * @returns GitHub governance readiness finding
+ */
+// eslint-disable-next-line sonarjs/cognitive-complexity -- independent canonical, live-repo, secret, and deployment gates stay visible together
+export function githubGovernanceFinding(health, github, deployPipeline) {
+    if (github.state !== "value") {
+        return setupFinding(GITHUB_GOVERNANCE_CHECK, "warn", `GitHub governance could not be established (${github.reason}).`);
+    }
+    const settings = github.value.settings;
+    const mergeSettingsReady = settings.allow_merge_commit === false &&
+        settings.allow_squash_merge === true &&
+        settings.allow_rebase_merge === false &&
+        settings.allow_auto_merge === true &&
+        settings.allow_update_branch === true &&
+        settings.delete_branch_on_merge === true &&
+        settings.secret_scanning === true;
+    const activeRuleset = github.value.rulesets.some(row => row.active &&
+        row.targetsDefaultBranch === true &&
+        row.requiresPullRequest === true &&
+        row.requiresStatusChecks === true);
+    const canonicalRulesetStatus = health?.findings.find(finding => finding.check === "github.rulesets")?.status;
+    const deployKey = github.value.secrets.some(secret => secret.name === "DEPLOY_KEY" && secret.set);
+    const holds = deployPipeline.state === "value"
+        ? deployPipeline.value.stages.filter(stage => stage.id.startsWith("hold:"))
+        : [];
+    const approvalGates = holds.length > 0 && holds.every(stage => stage.active === true);
+    const missing = [
+        ...(mergeSettingsReady ? [] : ["merge and security settings"]),
+        ...(activeRuleset
+            ? []
+            : [
+                "an active default-branch ruleset requiring pull requests and status checks",
+            ]),
+        ...(canonicalRulesetStatus === "pass"
+            ? []
+            : ["passing canonical github.rulesets Health evidence"]),
+        ...(deployKey ? [] : ["the write deploy key"]),
+        ...(approvalGates ? [] : ["deployment environment approval gates"]),
+    ];
+    return missing.length === 0
+        ? setupFinding(GITHUB_GOVERNANCE_CHECK, "pass", "GitHub merge/security settings, rulesets, write deploy key, and deployment approval gates were observed.")
+        : setupFinding(GITHUB_GOVERNANCE_CHECK, canonicalRulesetStatus === "fail" ? "fail" : "warn", `GitHub governance is incomplete: ${missing.join(" and ")}. Run /lisa:setup:github-repo.`);
+}
+/**
+ * Map only workflow-referenced secret names to presence readiness.
+ * @param github - Live GitHub repository observation
+ * @param expectedSecretNames - Secret names referenced by confined workflows
+ * @returns Repository-secret presence readiness finding
+ */
+export function secretsFinding(github, expectedSecretNames) {
+    if (expectedSecretNames.length === 0) {
+        return setupFinding(SECRETS_CHECK, "warn", "No explicit CI secret requirements could be established from current workflow references.");
+    }
+    if (github.state !== "value") {
+        return setupFinding(SECRETS_CHECK, "warn", `Repository secret presence could not be established (${github.reason}); no secret values were read.`);
+    }
+    const presence = new Map(github.value.secrets.map(secret => [secret.name, secret.set]));
+    const missing = expectedSecretNames.filter(name => presence.get(name) !== true);
+    return missing.length === 0
+        ? setupFinding(SECRETS_CHECK, "pass", `${expectedSecretNames.length} workflow-referenced repository secret name${expectedSecretNames.length === 1 ? " is" : "s are"} present; values were not read.`)
+        : setupFinding(SECRETS_CHECK, "warn", `Missing workflow-referenced repository secret names: ${missing.join(", ")}. Values were not read.`);
+}
+/**
+ * Require the exact six core scheduler entries with observed cadences.
+ * @param result - Live harness scheduler observation
+ * @param expectedAutomationIds - Applicable authoritative automation IDs
+ * @returns Harness automation readiness finding
+ */
+export function automationsFinding(result, expectedAutomationIds) {
+    if (expectedAutomationIds === undefined ||
+        expectedAutomationIds.length === 0) {
+        return setupFinding(AUTOMATIONS_CHECK, "warn", "Applicable automation contracts could not be resolved from project configuration and detected stacks.");
+    }
+    if (result.state !== "value") {
+        return setupFinding(AUTOMATIONS_CHECK, "warn", `Harness scheduler state is unavailable (${result.reason}). Run /lisa:setup-automations.`);
+    }
+    const entries = result.value.automations.flatMap(value => {
+        if (value === null || typeof value !== "object" || Array.isArray(value)) {
+            return [];
+        }
+        const id = Reflect.get(value, "id");
+        const cadence = Reflect.get(value, "cadence");
+        const status = Reflect.get(value, "status");
+        return typeof id === "string" ? [{ id, cadence, status }] : [];
+    });
+    const missing = expectedAutomationIds.filter(expectedId => {
+        return !entries.some(entry => {
+            const disabled = typeof entry.status === "string" &&
+                ["disabled", "inactive", "paused"].includes(entry.status.toLowerCase());
+            return (entry.id === expectedId &&
+                typeof entry.cadence === "string" &&
+                entry.cadence.trim().length > 0 &&
+                !disabled);
+        });
+    });
+    return missing.length === 0
+        ? setupFinding(AUTOMATIONS_CHECK, "pass", `All ${expectedAutomationIds.length} applicable Lisa scheduler entries are present with observed cadences.`)
+        : setupFinding(AUTOMATIONS_CHECK, "warn", `Missing, disabled, or cadence-unreadable automation entries: ${missing.join(", ")}. Run /lisa:setup-automations.`);
+}
+//# sourceMappingURL=ui-setup-readiness-remote.js.map

package/dist/cli/ui-setup-readiness-remote.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ui-setup-readiness-remote.js","sourceRoot":"","sources":["../../src/cli/ui-setup-readiness-remote.ts"],"names":[],"mappings":"AAMA,OAAO,EACL,YAAY,GAEb,MAAM,kCAAkC,CAAC;AAE1C,MAAM,uBAAuB,GAAG,yBAAyB,CAAC;AAC1D,MAAM,aAAa,GAAG,eAAe,CAAC;AACtC,MAAM,iBAAiB,GAAG,mBAAmB,CAAC;AAE9C;;;;;;GAMG;AACH,gJAAgJ;AAChJ,MAAM,UAAU,uBAAuB,CACrC,MAAgC,EAChC,MAAyC,EACzC,cAAgD;IAEhD,IAAI,MAAM,CAAC,KAAK,KAAK,OAAO,EAAE,CAAC;QAC7B,OAAO,YAAY,CACjB,uBAAuB,EACvB,MAAM,EACN,+CAA+C,MAAM,CAAC,MAAM,IAAI,CACjE,CAAC;IACJ,CAAC;IACD,MAAM,QAAQ,GAAG,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC;IACvC,MAAM,kBAAkB,GACtB,QAAQ,CAAC,kBAAkB,KAAK,KAAK;QACrC,QAAQ,CAAC,kBAAkB,KAAK,IAAI;QACpC,QAAQ,CAAC,kBAAkB,KAAK,KAAK;QACrC,QAAQ,CAAC,gBAAgB,KAAK,IAAI;QAClC,QAAQ,CAAC,mBAAmB,KAAK,IAAI;QACrC,QAAQ,CAAC,sBAAsB,KAAK,IAAI;QACxC,QAAQ,CAAC,eAAe,KAAK,IAAI,CAAC;IACpC,MAAM,aAAa,GAAG,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,CAC9C,GAAG,CAAC,EAAE,CACJ,GAAG,CAAC,MAAM;QACV,GAAG,CAAC,oBAAoB,KAAK,IAAI;QACjC,GAAG,CAAC,mBAAmB,KAAK,IAAI;QAChC,GAAG,CAAC,oBAAoB,KAAK,IAAI,CACpC,CAAC;IACF,MAAM,sBAAsB,GAAG,MAAM,EAAE,QAAQ,CAAC,IAAI,CAClD,OAAO,CAAC,EAAE,CAAC,OAAO,CAAC,KAAK,KAAK,iBAAiB,CAC/C,EAAE,MAAM,CAAC;IACV,MAAM,SAAS,GAAG,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CACzC,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,IAAI,KAAK,YAAY,IAAI,MAAM,CAAC,GAAG,CACrD,CAAC;IACF,MAAM,KAAK,GACT,cAAc,CAAC,KAAK,KAAK,OAAO;QAC9B,CAAC,CAAC,cAAc,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CACzC,KAAK,CAAC,EAAE,CAAC,UAAU,CAAC,OAAO,CAAC,CAC7B;QACH,CAAC,CAAC,EAAE,CAAC;IACT,MAAM,aAAa,GACjB,KAAK,CAAC,MAAM,GAAG,CAAC,IAAI,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,MAAM,KAAK,IAAI,CAAC,CAAC;IAClE,MAAM,OAAO,GAAG;QACd,GAAG,CAAC,kBAAkB,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,6BAA6B,CAAC,CAAC;QAC9D,GAAG,CAAC,aAAa;YACf,CAAC,CAAC,EAAE;YACJ,CAAC,CAAC;gBACE,4EAA4E;aAC7E,CAAC;QACN,GAAG,CAAC,sBAAsB,KAAK,MAAM;YACnC,CAAC,CAAC,EAAE;YACJ,CAAC,CAAC,CAAC,mDAAmD,CAAC,CAAC;QAC1D,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,sBAAsB,CAAC,CAAC;QAC9C,GAAG,CAAC,aAAa,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,uCAAuC,CAAC,CAAC;KACpE,CAAC;IACF,OAAO,OAAO,CAAC,MAAM,KAAK,CAAC;QACzB,CAAC,CAAC,YAAY,CACV,uBAAuB,EACvB,MAAM,EACN,0GAA0G,CAC3G;QACH,CAAC,CAAC,YAAY,CACV,uBAAuB,EACvB,sBAAsB,KAAK,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EACnD,oCAAoC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,gCAAgC,CAC1F,CAAC;AACR,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,cAAc,CAC5B,MAAyC,EACzC,mBAAsC;IAEtC,IAAI,mBAAmB,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACrC,OAAO,YAAY,CACjB,aAAa,EACb,MAAM,EACN,2FAA2F,CAC5F,CAAC;IACJ,CAAC;IACD,IAAI,MAAM,CAAC,KAAK,KAAK,OAAO,EAAE,CAAC;QAC7B,OAAO,YAAY,CACjB,aAAa,EACb,MAAM,EACN,wDAAwD,MAAM,CAAC,MAAM,gCAAgC,CACtG,CAAC;IACJ,CAAC;IACD,MAAM,QAAQ,GAAG,IAAI,GAAG,CACtB,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC,CAC9D,CAAC;IACF,MAAM,OAAO,GAAG,mBAAmB,CAAC,MAAM,CACxC,IAAI,CAAC,EAAE,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,IAAI,CACpC,CAAC;IACF,OAAO,OAAO,CAAC,MAAM,KAAK,CAAC;QACzB,CAAC,CAAC,YAAY,CACV,aAAa,EACb,MAAM,EACN,GAAG,mBAAmB,CAAC,MAAM,8CAA8C,mBAAmB,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,iCAAiC,CAC/J;QACH,CAAC,CAAC,YAAY,CACV,aAAa,EACb,MAAM,EACN,wDAAwD,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,yBAAyB,CACpG,CAAC;AACR,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,kBAAkB,CAChC,MAA0C,EAC1C,qBAAoD;IAEpD,IACE,qBAAqB,KAAK,SAAS;QACnC,qBAAqB,CAAC,MAAM,KAAK,CAAC,EAClC,CAAC;QACD,OAAO,YAAY,CACjB,iBAAiB,EACjB,MAAM,EACN,uGAAuG,CACxG,CAAC;IACJ,CAAC;IACD,IAAI,MAAM,CAAC,KAAK,KAAK,OAAO,EAAE,CAAC;QAC7B,OAAO,YAAY,CACjB,iBAAiB,EACjB,MAAM,EACN,2CAA2C,MAAM,CAAC,MAAM,iCAAiC,CAC1F,CAAC;IACJ,CAAC;IACD,MAAM,OAAO,GAAG,MAAM,CAAC,KAAK,CAAC,WAAW,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE;QACvD,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;YACxE,OAAO,EAAE,CAAC;QACZ,CAAC;QACD,MAAM,EAAE,GAAG,OAAO,CAAC,GAAG,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;QACpC,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC,KAAK,EAAE,SAAS,CAAC,CAAC;QAC9C,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC;QAC5C,OAAO,OAAO,EAAE,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IACjE,CAAC,CAAC,CAAC;IACH,MAAM,OAAO,GAAG,qBAAqB,CAAC,MAAM,CAAC,UAAU,CAAC,EAAE;QACxD,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE;YAC3B,MAAM,QAAQ,GACZ,OAAO,KAAK,CAAC,MAAM,KAAK,QAAQ;gBAChC,CAAC,UAAU,EAAE,UAAU,EAAE,QAAQ,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC,CAAC;YAC1E,OAAO,CACL,KAAK,CAAC,EAAE,KAAK,UAAU;gBACvB,OAAO,KAAK,CAAC,OAAO,KAAK,QAAQ;gBACjC,KAAK,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC;gBAC/B,CAAC,QAAQ,CACV,CAAC;QACJ,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IACH,OAAO,OAAO,CAAC,MAAM,KAAK,CAAC;QACzB,CAAC,CAAC,YAAY,CACV,iBAAiB,EACjB,MAAM,EACN,OAAO,qBAAqB,CAAC,MAAM,wEAAwE,CAC5G;QACH,CAAC,CAAC,YAAY,CACV,iBAAiB,EACjB,MAAM,EACN,gEAAgE,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,gCAAgC,CACnH,CAAC;AACR,CAAC"}

package/dist/cli/ui-setup-readiness.d.ts

@@ -0,0 +1,52 @@
+import type { HealthResult } from "../health/contract.js";
+import type { JsonObject } from "../sync/json-path.js";
+import { type AutomationsProbeValue } from "./ui-automations.js";
+import { type SetupReadinessResult } from "./ui-setup-readiness-contract.js";
+import { type GithubRepoPanelValue } from "./ui-github-repo.js";
+import { type DeployPipelineValue } from "./ui-deploy-pipeline.js";
+import { type ProbeResult } from "./ui-status.js";
+/** Bounded inputs captured for one projection. */
+export interface SetupReadinessObservations {
+    readonly config: JsonObject;
+    readonly health?: HealthResult;
+    readonly github: ProbeResult<GithubRepoPanelValue>;
+    readonly deployPipeline: ProbeResult<DeployPipelineValue>;
+    readonly automations: ProbeResult<AutomationsProbeValue>;
+    readonly expectedAutomationIds?: readonly string[];
+    readonly expectedSecretNames: readonly string[];
+    readonly observedAt?: Date;
+}
+/** Injectable readers for endpoint and focused integration tests. */
+export interface SetupReadinessDependencies {
+    readonly readConfig?: (projectRoot: string) => Promise<JsonObject>;
+    readonly readHealth?: (projectRoot: string) => Promise<HealthResult>;
+    readonly readGithub?: (projectRoot: string, config: JsonObject) => Promise<ProbeResult<GithubRepoPanelValue>>;
+    readonly readDeployPipeline?: (projectRoot: string) => Promise<ProbeResult<DeployPipelineValue>>;
+    readonly readAutomations?: (projectRoot: string) => Promise<ProbeResult<AutomationsProbeValue>>;
+    readonly readExpectedAutomationIds?: (projectRoot: string, config: JsonObject) => Promise<readonly string[]>;
+    readonly readExpectedSecretNames?: (projectRoot: string) => Promise<readonly string[]>;
+    readonly now?: () => Date;
+}
+/**
+ * Read the same committed-plus-local merged config used by the console.
+ * @param projectRoot - Project root whose Lisa config should be read.
+ * @returns The bounded merged UI configuration.
+ */
+export declare function readMergedUiConfig(projectRoot: string): Promise<JsonObject>;
+/**
+ * Produce the exact twelve findings from already captured observations.
+ * @param projectRoot - Canonical project root for local evidence checks.
+ * @param observations - Bounded observations captured for this projection.
+ * @returns The validated twelve-finding readiness result.
+ */
+export declare function projectSetupReadiness(projectRoot: string, observations: SetupReadinessObservations): Promise<SetupReadinessResult>;
+/**
+ * Create a safe-to-repeat reader for one localhost UI server.
+ * @param projectPath - Project path served by the local UI.
+ * @param dependencies - Optional bounded reader overrides for verification.
+ * @returns A read-only readiness projection reader.
+ */
+export declare function createSetupReadinessReader(projectPath: string, dependencies?: SetupReadinessDependencies): () => Promise<SetupReadinessResult>;
+export type { SetupReadinessCheck, SetupReadinessFinding, SetupReadinessResult, } from "./ui-setup-readiness-contract.js";
+export { SETUP_READINESS_CHECKS, validateSetupReadinessResult, } from "./ui-setup-readiness-contract.js";
+//# sourceMappingURL=ui-setup-readiness.d.ts.map

package/dist/cli/ui-setup-readiness.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ui-setup-readiness.d.ts","sourceRoot":"","sources":["../../src/cli/ui-setup-readiness.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,uBAAuB,CAAC;AAC1D,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,sBAAsB,CAAC;AACvD,OAAO,EAEL,KAAK,qBAAqB,EAC3B,MAAM,qBAAqB,CAAC;AA0B7B,OAAO,EAEL,KAAK,oBAAoB,EAC1B,MAAM,kCAAkC,CAAC;AAC1C,OAAO,EAEL,KAAK,oBAAoB,EAC1B,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EAEL,KAAK,mBAAmB,EACzB,MAAM,yBAAyB,CAAC;AACjC,OAAO,EAAY,KAAK,WAAW,EAAE,MAAM,gBAAgB,CAAC;AAI5D,kDAAkD;AAClD,MAAM,WAAW,0BAA0B;IACzC,QAAQ,CAAC,MAAM,EAAE,UAAU,CAAC;IAC5B,QAAQ,CAAC,MAAM,CAAC,EAAE,YAAY,CAAC;IAC/B,QAAQ,CAAC,MAAM,EAAE,WAAW,CAAC,oBAAoB,CAAC,CAAC;IACnD,QAAQ,CAAC,cAAc,EAAE,WAAW,CAAC,mBAAmB,CAAC,CAAC;IAC1D,QAAQ,CAAC,WAAW,EAAE,WAAW,CAAC,qBAAqB,CAAC,CAAC;IACzD,QAAQ,CAAC,qBAAqB,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IACnD,QAAQ,CAAC,mBAAmB,EAAE,SAAS,MAAM,EAAE,CAAC;IAChD,QAAQ,CAAC,UAAU,CAAC,EAAE,IAAI,CAAC;CAC5B;AAED,qEAAqE;AACrE,MAAM,WAAW,0BAA0B;IACzC,QAAQ,CAAC,UAAU,CAAC,EAAE,CAAC,WAAW,EAAE,MAAM,KAAK,OAAO,CAAC,UAAU,CAAC,CAAC;IACnE,QAAQ,CAAC,UAAU,CAAC,EAAE,CAAC,WAAW,EAAE,MAAM,KAAK,OAAO,CAAC,YAAY,CAAC,CAAC;IACrE,QAAQ,CAAC,UAAU,CAAC,EAAE,CACpB,WAAW,EAAE,MAAM,EACnB,MAAM,EAAE,UAAU,KACf,OAAO,CAAC,WAAW,CAAC,oBAAoB,CAAC,CAAC,CAAC;IAChD,QAAQ,CAAC,kBAAkB,CAAC,EAAE,CAC5B,WAAW,EAAE,MAAM,KAChB,OAAO,CAAC,WAAW,CAAC,mBAAmB,CAAC,CAAC,CAAC;IAC/C,QAAQ,CAAC,eAAe,CAAC,EAAE,CACzB,WAAW,EAAE,MAAM,KAChB,OAAO,CAAC,WAAW,CAAC,qBAAqB,CAAC,CAAC,CAAC;IACjD,QAAQ,CAAC,yBAAyB,CAAC,EAAE,CACnC,WAAW,EAAE,MAAM,EACnB,MAAM,EAAE,UAAU,KACf,OAAO,CAAC,SAAS,MAAM,EAAE,CAAC,CAAC;IAChC,QAAQ,CAAC,uBAAuB,CAAC,EAAE,CACjC,WAAW,EAAE,MAAM,KAChB,OAAO,CAAC,SAAS,MAAM,EAAE,CAAC,CAAC;IAChC,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,IAAI,CAAC;CAC3B;AAED;;;;GAIG;AACH,wBAAsB,kBAAkB,CACtC,WAAW,EAAE,MAAM,GAClB,OAAO,CAAC,UAAU,CAAC,CAErB;AAED;;;;;GAKG;AACH,wBAAsB,qBAAqB,CACzC,WAAW,EAAE,MAAM,EACnB,YAAY,EAAE,0BAA0B,GACvC,OAAO,CAAC,oBAAoB,CAAC,CAsC/B;AAmCD;;;;;GAKG;AACH,wBAAgB,0BAA0B,CACxC,WAAW,EAAE,MAAM,EACnB,YAAY,GAAE,0BAA+B,GAC5C,MAAM,OAAO,CAAC,oBAAoB,CAAC,CA0DrC;AAED,YAAY,EACV,mBAAmB,EACnB,qBAAqB,EACrB,oBAAoB,GACrB,MAAM,kCAAkC,CAAC;AAC1C,OAAO,EACL,sBAAsB,EACtB,4BAA4B,GAC7B,MAAM,kCAAkC,CAAC"}

package/dist/cli/ui-setup-readiness.js

@@ -0,0 +1,125 @@
+/** Current read-only Setup checklist readiness projection for `lisa ui`. */
+import { realpath } from "node:fs/promises";
+import * as path from "node:path";
+import { runDeterministicHealth } from "../health/deterministic.js";
+import { createAutomationsProbe, } from "./ui-automations.js";
+import { readOriginRemote, resolveExpectedAutomationEntries, } from "./ui-automations-adapters.js";
+import { readConfinedDetectedStacks } from "./ui-detected-stacks.js";
+import { readConfinedMergedConfig } from "./ui-confined-project-read.js";
+import { explorationFinding, prdSourceFinding, starterProvenanceFinding, trackerFinding, } from "./ui-setup-readiness-config.js";
+import { healthEvidenceFinding, readWorkflowSecretNames, standardsFinding, agentReadyFinding, wikiSetupFinding, } from "./ui-setup-readiness-local.js";
+import { installFinding } from "./ui-setup-readiness-install.js";
+import { automationsFinding, githubGovernanceFinding, secretsFinding, } from "./ui-setup-readiness-remote.js";
+import { validateSetupReadinessResult, } from "./ui-setup-readiness-contract.js";
+import { createGithubRepoProbe, } from "./ui-github-repo.js";
+import { createDeployPipelineProbe, } from "./ui-deploy-pipeline.js";
+import { runProbe } from "./ui-status.js";
+const ORIGIN_REMOTE_TIMEOUT_MS = 2_500;
+/**
+ * Read the same committed-plus-local merged config used by the console.
+ * @param projectRoot - Project root whose Lisa config should be read.
+ * @returns The bounded merged UI configuration.
+ */
+export async function readMergedUiConfig(projectRoot) {
+    return await readConfinedMergedConfig(projectRoot);
+}
+/**
+ * Produce the exact twelve findings from already captured observations.
+ * @param projectRoot - Canonical project root for local evidence checks.
+ * @param observations - Bounded observations captured for this projection.
+ * @returns The validated twelve-finding readiness result.
+ */
+export async function projectSetupReadiness(projectRoot, observations) {
+    const [install, agentReady, wiki] = await Promise.all([
+        installFinding(projectRoot, observations.config, observations.health),
+        agentReadyFinding(projectRoot),
+        wikiSetupFinding(projectRoot, observations.health),
+    ]);
+    const findings = [
+        install,
+        healthEvidenceFinding("setup.sync", observations.health, ["config.required", "config.sync"], "Required Lisa config and mirrored artifacts are populated and synchronized.", "fail"),
+        agentReady,
+        standardsFinding(observations.health),
+        trackerFinding(observations.config),
+        prdSourceFinding(observations.config),
+        githubGovernanceFinding(observations.health, observations.github, observations.deployPipeline),
+        secretsFinding(observations.github, observations.expectedSecretNames),
+        automationsFinding(observations.automations, observations.expectedAutomationIds),
+        explorationFinding(observations.config),
+        wiki,
+        starterProvenanceFinding(observations.config),
+    ];
+    return validateSetupReadinessResult({
+        schemaVersion: 1,
+        observedAt: (observations.observedAt ?? new Date()).toISOString(),
+        findings,
+    });
+}
+/**
+ * Convert a failed bounded read into an explicit unknown probe state.
+ * @param reason - Stable machine-readable failure reason.
+ * @returns An unknown probe result that cannot be mistaken for success.
+ */
+function unknownProbe(reason) {
+    return {
+        state: "unknown",
+        reason,
+        message: "The setup readiness capability could not be observed.",
+    };
+}
+/**
+ * Resolve applicable automation IDs with the same origin fallback as identity.
+ * @param root - Canonical project root.
+ * @param config - Bounded merged Lisa configuration.
+ * @returns Expected automation identifiers for the current project.
+ */
+async function readDefaultExpectedAutomationIds(root, config) {
+    const stacks = await readConfinedDetectedStacks(root);
+    const gitRemoteUrl = await readOriginRemote(root, AbortSignal.timeout(ORIGIN_REMOTE_TIMEOUT_MS));
+    return (await resolveExpectedAutomationEntries(config, stacks, gitRemoteUrl)).map(entry => entry.automationId);
+}
+/**
+ * Create a safe-to-repeat reader for one localhost UI server.
+ * @param projectPath - Project path served by the local UI.
+ * @param dependencies - Optional bounded reader overrides for verification.
+ * @returns A read-only readiness projection reader.
+ */
+export function createSetupReadinessReader(projectPath, dependencies = {}) {
+    const readConfig = dependencies.readConfig ?? readMergedUiConfig;
+    const readHealth = dependencies.readHealth ??
+        (async (root) => await runDeterministicHealth(root, { deadlineMs: 20_000 }));
+    const readGithub = dependencies.readGithub ??
+        (async (root, config) => await runProbe(createGithubRepoProbe(root, config)));
+    const readAutomations = dependencies.readAutomations ??
+        (async (root) => await runProbe(createAutomationsProbe({ cwd: root })));
+    const readDeployPipeline = dependencies.readDeployPipeline ??
+        (async (root) => await runProbe(createDeployPipelineProbe(root)));
+    const readExpectedAutomationIds = dependencies.readExpectedAutomationIds ?? readDefaultExpectedAutomationIds;
+    const readSecrets = dependencies.readExpectedSecretNames ?? readWorkflowSecretNames;
+    return async () => {
+        const projectRoot = await realpath(path.resolve(projectPath));
+        const config = await readConfig(projectRoot).catch(() => ({}));
+        const [health, github, deployPipeline, automations, expectedAutomationIds, expectedSecretNames,] = await Promise.all([
+            readHealth(projectRoot).catch(() => undefined),
+            readGithub(projectRoot, config).catch(() => unknownProbe("github-read-failed")),
+            readDeployPipeline(projectRoot).catch(() => unknownProbe("deploy-pipeline-read-failed")),
+            readAutomations(projectRoot).catch(() => unknownProbe("scheduler-read-failed")),
+            readExpectedAutomationIds(projectRoot, config).catch(() => undefined),
+            readSecrets(projectRoot).catch(() => []),
+        ]);
+        return await projectSetupReadiness(projectRoot, {
+            config,
+            ...(health === undefined ? {} : { health }),
+            github,
+            deployPipeline,
+            automations,
+            ...(expectedAutomationIds === undefined ? {} : { expectedAutomationIds }),
+            expectedSecretNames,
+            ...(dependencies.now === undefined
+                ? {}
+                : { observedAt: dependencies.now() }),
+        });
+    };
+}
+export { SETUP_READINESS_CHECKS, validateSetupReadinessResult, } from "./ui-setup-readiness-contract.js";
+//# sourceMappingURL=ui-setup-readiness.js.map

package/dist/cli/ui-setup-readiness.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ui-setup-readiness.js","sourceRoot":"","sources":["../../src/cli/ui-setup-readiness.ts"],"names":[],"mappings":"AAAA,4EAA4E;AAC5E,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAC5C,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAClC,OAAO,EAAE,sBAAsB,EAAE,MAAM,4BAA4B,CAAC;AAGpE,OAAO,EACL,sBAAsB,GAEvB,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EACL,gBAAgB,EAChB,gCAAgC,GACjC,MAAM,8BAA8B,CAAC;AACtC,OAAO,EAAE,0BAA0B,EAAE,MAAM,yBAAyB,CAAC;AACrE,OAAO,EAAE,wBAAwB,EAAE,MAAM,+BAA+B,CAAC;AACzE,OAAO,EACL,kBAAkB,EAClB,gBAAgB,EAChB,wBAAwB,EACxB,cAAc,GACf,MAAM,gCAAgC,CAAC;AACxC,OAAO,EACL,qBAAqB,EACrB,uBAAuB,EACvB,gBAAgB,EAChB,iBAAiB,EACjB,gBAAgB,GACjB,MAAM,+BAA+B,CAAC;AACvC,OAAO,EAAE,cAAc,EAAE,MAAM,iCAAiC,CAAC;AACjE,OAAO,EACL,kBAAkB,EAClB,uBAAuB,EACvB,cAAc,GACf,MAAM,gCAAgC,CAAC;AACxC,OAAO,EACL,4BAA4B,GAE7B,MAAM,kCAAkC,CAAC;AAC1C,OAAO,EACL,qBAAqB,GAEtB,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EACL,yBAAyB,GAE1B,MAAM,yBAAyB,CAAC;AACjC,OAAO,EAAE,QAAQ,EAAoB,MAAM,gBAAgB,CAAC;AAE5D,MAAM,wBAAwB,GAAG,KAAK,CAAC;AAsCvC;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACtC,WAAmB;IAEnB,OAAO,MAAM,wBAAwB,CAAC,WAAW,CAAC,CAAC;AACrD,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,qBAAqB,CACzC,WAAmB,EACnB,YAAwC;IAExC,MAAM,CAAC,OAAO,EAAE,UAAU,EAAE,IAAI,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;QACpD,cAAc,CAAC,WAAW,EAAE,YAAY,CAAC,MAAM,EAAE,YAAY,CAAC,MAAM,CAAC;QACrE,iBAAiB,CAAC,WAAW,CAAC;QAC9B,gBAAgB,CAAC,WAAW,EAAE,YAAY,CAAC,MAAM,CAAC;KACnD,CAAC,CAAC;IACH,MAAM,QAAQ,GAAG;QACf,OAAO;QACP,qBAAqB,CACnB,YAAY,EACZ,YAAY,CAAC,MAAM,EACnB,CAAC,iBAAiB,EAAE,aAAa,CAAC,EAClC,6EAA6E,EAC7E,MAAM,CACP;QACD,UAAU;QACV,gBAAgB,CAAC,YAAY,CAAC,MAAM,CAAC;QACrC,cAAc,CAAC,YAAY,CAAC,MAAM,CAAC;QACnC,gBAAgB,CAAC,YAAY,CAAC,MAAM,CAAC;QACrC,uBAAuB,CACrB,YAAY,CAAC,MAAM,EACnB,YAAY,CAAC,MAAM,EACnB,YAAY,CAAC,cAAc,CAC5B;QACD,cAAc,CAAC,YAAY,CAAC,MAAM,EAAE,YAAY,CAAC,mBAAmB,CAAC;QACrE,kBAAkB,CAChB,YAAY,CAAC,WAAW,EACxB,YAAY,CAAC,qBAAqB,CACnC;QACD,kBAAkB,CAAC,YAAY,CAAC,MAAM,CAAC;QACvC,IAAI;QACJ,wBAAwB,CAAC,YAAY,CAAC,MAAM,CAAC;KAC9C,CAAC;IACF,OAAO,4BAA4B,CAAC;QAClC,aAAa,EAAE,CAAC;QAChB,UAAU,EAAE,CAAC,YAAY,CAAC,UAAU,IAAI,IAAI,IAAI,EAAE,CAAC,CAAC,WAAW,EAAE;QACjE,QAAQ;KACT,CAAC,CAAC;AACL,CAAC;AAED;;;;GAIG;AACH,SAAS,YAAY,CAAC,MAAc;IAClC,OAAO;QACL,KAAK,EAAE,SAAS;QAChB,MAAM;QACN,OAAO,EAAE,uDAAuD;KACjE,CAAC;AACJ,CAAC;AAED;;;;;GAKG;AACH,KAAK,UAAU,gCAAgC,CAC7C,IAAY,EACZ,MAAkB;IAElB,MAAM,MAAM,GAAG,MAAM,0BAA0B,CAAC,IAAI,CAAC,CAAC;IACtD,MAAM,YAAY,GAAG,MAAM,gBAAgB,CACzC,IAAI,EACJ,WAAW,CAAC,OAAO,CAAC,wBAAwB,CAAC,CAC9C,CAAC;IACF,OAAO,CACL,MAAM,gCAAgC,CAAC,MAAM,EAAE,MAAM,EAAE,YAAY,CAAC,CACrE,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC;AACrC,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,0BAA0B,CACxC,WAAmB,EACnB,eAA2C,EAAE;IAE7C,MAAM,UAAU,GAAG,YAAY,CAAC,UAAU,IAAI,kBAAkB,CAAC;IACjE,MAAM,UAAU,GACd,YAAY,CAAC,UAAU;QACvB,CAAC,KAAK,EAAE,IAAY,EAAE,EAAE,CACtB,MAAM,sBAAsB,CAAC,IAAI,EAAE,EAAE,UAAU,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC;IAChE,MAAM,UAAU,GACd,YAAY,CAAC,UAAU;QACvB,CAAC,KAAK,EAAE,IAAY,EAAE,MAAkB,EAAE,EAAE,CAC1C,MAAM,QAAQ,CAAC,qBAAqB,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC;IACzD,MAAM,eAAe,GACnB,YAAY,CAAC,eAAe;QAC5B,CAAC,KAAK,EAAE,IAAY,EAAE,EAAE,CACtB,MAAM,QAAQ,CAAC,sBAAsB,CAAC,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;IAC3D,MAAM,kBAAkB,GACtB,YAAY,CAAC,kBAAkB;QAC/B,CAAC,KAAK,EAAE,IAAY,EAAE,EAAE,CAAC,MAAM,QAAQ,CAAC,yBAAyB,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAC5E,MAAM,yBAAyB,GAC7B,YAAY,CAAC,yBAAyB,IAAI,gCAAgC,CAAC;IAC7E,MAAM,WAAW,GACf,YAAY,CAAC,uBAAuB,IAAI,uBAAuB,CAAC;IAClE,OAAO,KAAK,IAAI,EAAE;QAChB,MAAM,WAAW,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC,CAAC;QAC9D,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,WAAW,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;QAC/D,MAAM,CACJ,MAAM,EACN,MAAM,EACN,cAAc,EACd,WAAW,EACX,qBAAqB,EACrB,mBAAmB,EACpB,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;YACpB,UAAU,CAAC,WAAW,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC;YAC9C,UAAU,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CACzC,YAAY,CAAC,oBAAoB,CAAC,CACnC;YACD,kBAAkB,CAAC,WAAW,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CACzC,YAAY,CAAC,6BAA6B,CAAC,CAC5C;YACD,eAAe,CAAC,WAAW,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CACtC,YAAY,CAAC,uBAAuB,CAAC,CACtC;YACD,yBAAyB,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC;YACrE,WAAW,CAAC,WAAW,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC;SACzC,CAAC,CAAC;QACH,OAAO,MAAM,qBAAqB,CAAC,WAAW,EAAE;YAC9C,MAAM;YACN,GAAG,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC;YAC3C,MAAM;YACN,cAAc;YACd,WAAW;YACX,GAAG,CAAC,qBAAqB,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,qBAAqB,EAAE,CAAC;YACzE,mBAAmB;YACnB,GAAG,CAAC,YAAY,CAAC,GAAG,KAAK,SAAS;gBAChC,CAAC,CAAC,EAAE;gBACJ,CAAC,CAAC,EAAE,UAAU,EAAE,YAAY,CAAC,GAAG,EAAE,EAAE,CAAC;SACxC,CAAC,CAAC;IACL,CAAC,CAAC;AACJ,CAAC;AAOD,OAAO,EACL,sBAAsB,EACtB,4BAA4B,GAC7B,MAAM,kCAAkC,CAAC"}

package/dist/core/upstream-evidence-manifest.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"upstream-evidence-manifest.d.ts","sourceRoot":"","sources":["../../src/core/upstream-evidence-manifest.ts"],"names":[],"mappings":"AACA,iFAAiF;AACjF,eAAO,MAAM,0BAA0B,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAsgEpE,CAAC;AAEL,4EAA4E;AAC5E,eAAO,MAAM,yBAAyB,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,IAAI,CAAC,CA4kMjE,CAAC;AAEL,sFAAsF;AACtF,eAAO,MAAM,uBAAuB,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,IAAI,CAAC,CAk6I/D,CAAC"}
+{"version":3,"file":"upstream-evidence-manifest.d.ts","sourceRoot":"","sources":["../../src/core/upstream-evidence-manifest.ts"],"names":[],"mappings":"AACA,iFAAiF;AACjF,eAAO,MAAM,0BAA0B,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAsgEpE,CAAC;AAEL,4EAA4E;AAC5E,eAAO,MAAM,yBAAyB,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,IAAI,CAAC,CAwlMjE,CAAC;AAEL,sFAAsF;AACtF,eAAO,MAAM,uBAAuB,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,IAAI,CAAC,CAk6I/D,CAAC"}

package/dist/core/upstream-evidence-manifest.js

@@ -363,7 +363,7 @@ export const UPSTREAM_EVIDENCE_MANIFEST = Object.freeze({
     "plugins/src/base/rules/reference/wiki-knowledge-source.md": "305d38e13984c2a64144f302336405d0ccbec493a6ed3ec67d210fed44940717",
     "plugins/src/base/scripts/automation-run-record.mjs": "89143e06975d8333b137fd2bdb5f12bcd703403752337f00c25d18fefba6a4c8",
     "plugins/src/base/scripts/automation-status-claude-adapter.mjs": "b1054acf4a5cbbe5354bd62a22b96533bcbc69b6cb9245976ceb8af638a04494",
-    "plugins/src/base/scripts/automation-status-codex-adapter.mjs": "55bc37e79237e14e2a6b7f32ac0d9bfad607f2b22fe2c75fc1ab0b2c3a9dccea",
+    "plugins/src/base/scripts/automation-status-codex-adapter.mjs": "ba1d8891f3369865d307e00699d5817172f64947d5b0c4e569e2f8e5bb46a9f5",
     "plugins/src/base/scripts/automation-status-contract-drift.mjs": "5f3f327fddedd6870017a86f2702d9cbb17352384fb225ab353eed54241182ef",
     "plugins/src/base/scripts/automation-status-expected-fleet.mjs": "a7c2463547d28403455ec739772b12c3821e2cde387da3d31e831de1442b25d5",
     "plugins/src/base/scripts/automation-status-report.mjs": "520f77645c5b7cab3f69848fb5cf19e8b1d802cd1f8ce6a35aa36a0bf6a0d146",
@@ -1026,7 +1026,7 @@ export const UPSTREAM_EVIDENCE_MANIFEST = Object.freeze({
     "typescript/merge/.oxlintrc.json": "4debc093acfd263eb81ae15894073ebf098513204f45f40b83fb8fa5353fa1f8",
     "typescript/package-lisa/package.lisa.json": "7e99286c549c79b1c02c07a4313dcfe5b41b4ebb80a6fbbb8741dd74dc5f454d",
     "ui/README.md": "deeb35e767ea5dd2883268835ea3ad21cbad9fa63ec8d8ff5e200f0e2a7d2751",
-    "ui/index.html": "8dcbeda2160ce6c443382613a2319fe6253ffe2c0cdeea567034400cdea91152",
+    "ui/index.html": "2abf4253d9d576b4e16d41efd30a7f3b334c1a1ec2caad442929ab82bd28fc8d",
 });
 /** Exact paths tracked by the public Lisa repository at generation time. */
 export const UPSTREAM_SURFACE_MANIFEST = Object.freeze({
@@ -6280,6 +6280,7 @@ export const UPSTREAM_SURFACE_MANIFEST = Object.freeze({
     "src/cli/ui-ci-quality-jobs.ts": true,
     "src/cli/ui-cmd.ts": true,
     "src/cli/ui-config-write.ts": true,
+    "src/cli/ui-confined-project-read.ts": true,
     "src/cli/ui-deploy-pipeline-model.ts": true,
     "src/cli/ui-deploy-pipeline.ts": true,
     "src/cli/ui-detected-stacks.ts": true,
@@ -6292,6 +6293,12 @@ export const UPSTREAM_SURFACE_MANIFEST = Object.freeze({
     "src/cli/ui-lisa-version.ts": true,
     "src/cli/ui-observability-checks.ts": true,
     "src/cli/ui-observability-providers.ts": true,
+    "src/cli/ui-setup-readiness-config.ts": true,
+    "src/cli/ui-setup-readiness-contract.ts": true,
+    "src/cli/ui-setup-readiness-install.ts": true,
+    "src/cli/ui-setup-readiness-local.ts": true,
+    "src/cli/ui-setup-readiness-remote.ts": true,
+    "src/cli/ui-setup-readiness.ts": true,
     "src/cli/ui-status-json.ts": true,
     "src/cli/ui-status.ts": true,
     "src/cli/update-check.ts": true,
@@ -6574,6 +6581,7 @@ export const UPSTREAM_SURFACE_MANIFEST = Object.freeze({
     "tests/unit/cli/ui-ci-quality-jobs.test.ts": true,
     "tests/unit/cli/ui-cmd.test.ts": true,
     "tests/unit/cli/ui-config-write.test.ts": true,
+    "tests/unit/cli/ui-confined-project-read.test.ts": true,
     "tests/unit/cli/ui-deploy-pipeline-probe.test.ts": true,
     "tests/unit/cli/ui-detected-stacks-probe.test.ts": true,
     "tests/unit/cli/ui-enabled-plugins-probe.test.ts": true,
@@ -6583,6 +6591,9 @@ export const UPSTREAM_SURFACE_MANIFEST = Object.freeze({
     "tests/unit/cli/ui-health.test.ts": true,
     "tests/unit/cli/ui-lisa-version-probe.test.ts": true,
     "tests/unit/cli/ui-observability-providers-probe.test.ts": true,
+    "tests/unit/cli/ui-setup-readiness-endpoint-confinement.test.ts": true,
+    "tests/unit/cli/ui-setup-readiness-endpoint.test.ts": true,
+    "tests/unit/cli/ui-setup-readiness.test.ts": true,
     "tests/unit/cli/ui-status-contract.test.ts": true,
     "tests/unit/cli/ui-status-endpoint.test.ts": true,
     "tests/unit/cli/ui-status-http-edge.test.ts": true,
@@ -6768,6 +6779,7 @@ export const UPSTREAM_SURFACE_MANIFEST = Object.freeze({
     "tests/unit/strategies/automation-run-record.test.ts": true,
     "tests/unit/strategies/automation-runbook-contract-rule.test.ts": true,
     "tests/unit/strategies/automation-status-claude-adapter.test.ts": true,
+    "tests/unit/strategies/automation-status-codex-adapter-confinement.test.ts": true,
     "tests/unit/strategies/automation-status-codex-adapter.test.ts": true,
     "tests/unit/strategies/automation-status-codex-command-memory.test.ts": true,
     "tests/unit/strategies/automation-status-codex-cwd.test.ts": true,