@codyswann/lisa 2.279.2 → 2.280.0

package/dist/cli/doctor-readiness-context.js

@@ -0,0 +1,244 @@
+/**
+ * The context-routing readiness producer — ship blocker B6 (PRD #1739, #1896).
+ *
+ * Dimension 1 of the `readiness-rubric` asks whether an agent can recover the
+ * real job from what is written down. Blocker B6 asks the sharper half of that:
+ * does the written word claim only what something actually enforces? An agent
+ * that reads "the pre-commit hook always runs the tests" stops verifying, so a
+ * documented guarantee with no mechanism behind it is worse than silence.
+ *
+ * Cross-checking prose against machinery is false-positive-prone, and a standing
+ * B6 is not a soft signal: the blocker engine reads a finding's `blocker` id and
+ * evidence and never reads its status, so a `WARN` finding naming B6 flips the
+ * whole repository to `NOT_READY` exactly as a `FAIL` one would. The `WARN`
+ * status communicates confidence to a human reader; it does NOT soften the
+ * verdict. **Precision is the only real defense**, which is why three
+ * disciplines are load-bearing here:
+ *
+ * 1. **Only a provable, high-confidence overstatement stands the blocker.** A
+ *    claim is faulted only when the sentence names an in-repository mechanism
+ *    that survives `classifyMechanism` and still does not exist. Package names,
+ *    `org/repo` slugs, git refs, and generated artifacts are classified
+ *    `unmappable` rather than missing.
+ * 2. **Anything short of that is an observation, never a blocker.** A claim with
+ *    no resolvable mechanism, one inside a code fence, or a hedged sentence is
+ *    surfaced as a non-blocking finding — never guessed into a violation, and
+ *    never dropped into silence.
+ * 3. **A clean finding carries no `blocker` key.** A PASS finding that named B6
+ *    would report a healthy repository as NOT_READY.
+ * @module cli/doctor-readiness-context
+ */
+import { collectClaims, } from "./doctor-readiness-context-claims.js";
+import { classifyMechanism, loadIgnoreMatcher, } from "./doctor-readiness-context-mechanisms.js";
+import { informationalFindings, readFileOrNull, } from "./doctor-readiness-shared.js";
+/** The context-routing readiness dimension id (readiness-rubric, RRR-1). */
+export const CONTEXT_ROUTING_DIMENSION_ID = "context-routing";
+/** The ship blocker for documentation that overstates enforced guarantees. */
+const CONTEXT_BLOCKER_ID = "B6";
+/** Most claim lines carried into one finding, to keep the report readable. */
+const MAX_EVIDENCE_LINES = 10;
+/** Longest quoted claim carried into persisted evidence. */
+const MAX_QUOTE_LENGTH = 160;
+/**
+ * Shorten a quoted claim so persisted evidence stays readable.
+ * @param text - The raw claim line
+ * @returns The claim, truncated to {@link MAX_QUOTE_LENGTH}
+ */
+function quoteClaim(text) {
+    return text.length > MAX_QUOTE_LENGTH
+        ? `${text.slice(0, MAX_QUOTE_LENGTH).trimEnd()}…`
+        : text;
+}
+/**
+ * Cross-check one claim against the mechanisms it names.
+ *
+ * The claim becomes a violation only when at least one named mechanism is
+ * classified `missing` — provably absent AND provably a path this repository
+ * would own. Every other outcome is an observation, because a blocker built on
+ * a token that might be a package name or a git ref would flip a healthy
+ * repository to NOT_READY.
+ * @param root - Repository root
+ * @param claim - The claim to check
+ * @param isIgnored - The repository's ignore matcher
+ * @returns Either a violation line, an unmappable line, or neither
+ */
+async function auditOneClaim(root, claim, isIgnored) {
+    const verdicts = await Promise.all(claim.mechanisms.map(async (mechanism) => ({
+        mechanism,
+        verdict: await classifyMechanism(root, mechanism, isIgnored),
+    })));
+    const missing = verdicts
+        .filter(entry => entry.verdict === "missing")
+        .map(entry => entry.mechanism);
+    if (missing.length > 0) {
+        const named = missing.map(entry => `\`${entry}\``).join(", ");
+        return {
+            violation: `\`${claim.file}\` line ${claim.line} claims enforcement by ` +
+                `${named}, which does not exist in this repository: ` +
+                `"${quoteClaim(claim.text)}"`,
+        };
+    }
+    if (verdicts.some(entry => entry.verdict === "present")) {
+        return {};
+    }
+    return {
+        unmappable: `\`${claim.file}\` line ${claim.line} states a guarantee but names ` +
+            `no mechanism this check can resolve to a repository path, so it was ` +
+            `not assessed: "${quoteClaim(claim.text)}"`,
+    };
+}
+/**
+ * Cross-check every claim against the mechanism it names.
+ * @param root - Repository root
+ * @param claims - The claims read from the instruction surfaces
+ * @returns Evidence lines for overstatements, and unmappable-claim notes
+ */
+async function auditClaims(root, claims) {
+    const isIgnored = await loadIgnoreMatcher(root);
+    const audited = await Promise.all(claims.map(async (claim) => await auditOneClaim(root, claim, isIgnored)));
+    return {
+        violations: audited.flatMap(entry => entry.violation === undefined ? [] : [entry.violation]),
+        unmappable: audited.flatMap(entry => entry.unmappable === undefined ? [] : [entry.unmappable]),
+    };
+}
+/**
+ * Establish which of the four positive context-routing artifacts are present: a
+ * canonical `AGENTS.md`, a `CLAUDE.md` pointing at it, a parseable
+ * `.lisa.config.json`, and a wiki index.
+ * @param root - Repository root
+ * @returns The present and missing artifact descriptions
+ */
+async function inspectRoutingArtifacts(root) {
+    const agents = await readFileOrNull(root, "AGENTS.md");
+    const claude = await readFileOrNull(root, "CLAUDE.md");
+    const config = await readFileOrNull(root, ".lisa.config.json");
+    const wiki = await readFileOrNull(root, "wiki/index.md");
+    const checks = [
+        [agents !== null && agents.trim() !== "", "a canonical `AGENTS.md`"],
+        [
+            claude !== null && claude.includes("AGENTS.md"),
+            "a `CLAUDE.md` pointer to `AGENTS.md`",
+        ],
+        [
+            config !== null && isParseableJson(config),
+            "a parseable `.lisa.config.json`",
+        ],
+        [wiki !== null, "a `wiki/index.md` knowledge index"],
+    ];
+    return {
+        present: checks.flatMap(([ok, label]) => (ok ? [label] : [])),
+        missing: checks.flatMap(([ok, label]) => (ok ? [] : [label])),
+    };
+}
+/**
+ * Whether a string parses as JSON.
+ * @param source - Candidate JSON text
+ * @returns True when it parses
+ */
+function isParseableJson(source) {
+    try {
+        JSON.parse(source);
+        return true;
+    }
+    catch {
+        return false;
+    }
+}
+/**
+ * Build the rubric-shaped B6 finding from its evidence lines.
+ * @param violations - Evidence lines
+ * @returns The B6 finding
+ */
+function contextFinding(violations) {
+    const shown = violations.slice(0, MAX_EVIDENCE_LINES);
+    const overflow = violations.length - shown.length;
+    return {
+        blocker: CONTEXT_BLOCKER_ID,
+        invariant_violated: "the written word claims only what something actually enforces",
+        evidence: shown.join(" | ") +
+            (overflow > 0
+                ? ` | (+${overflow} further overstatement(s) of the same kind)`
+                : ""),
+        why_proof_missed: "documentation is never executed, so no test, lint rule, or review step " +
+            "ever observes that the guarantee it promises has no mechanism behind it " +
+            "— and an agent that reads the promise stops checking for itself",
+        root_correction: "either build the mechanism the sentence names, or rewrite the sentence " +
+            "to describe what is actually enforced, so the written word and the " +
+            "machinery say the same thing",
+        machinery_to_remove: [
+            "documented guarantees with no mechanism behind them, which cost trust " +
+                "every time an agent relies on one",
+        ],
+    };
+}
+/**
+ * Build the stated-reason SKIP for a repository whose context routing cannot be
+ * established: nothing overstated, but not enough written down to call it clean.
+ * @param artifacts - Which routing artifacts are present and missing
+ * @param unmappable - Claims that named no resolvable mechanism
+ * @returns The SKIP dimension record
+ */
+function skipRecord(artifacts, unmappable) {
+    return {
+        id: CONTEXT_ROUTING_DIMENSION_ID,
+        status: "SKIP",
+        findings: [
+            {
+                reason: "no documented guarantee was found to overstate anything, but this " +
+                    "repository is missing " +
+                    `${artifacts.missing.join(", ")}, so whether an agent can recover the ` +
+                    "real job from what is written down is not established either way",
+                skip: true,
+            },
+            ...informationalFindings(unmappable),
+        ],
+    };
+}
+/**
+ * Assess the context-routing dimension: B6, "documentation overstates enforced
+ * guarantees". Offline by construction — it reads only the repository's own
+ * instruction surfaces and the paths they name — and high-precision by design:
+ * it stands B6 only on a named mechanism that survives {@link classifyMechanism}
+ * and still demonstrably does not exist. The record's status is `WARN` rather
+ * than `FAIL`, but that is a confidence signal to a human reader only: a
+ * standing B6 blocker flips the repository to `NOT_READY` either way.
+ * @param root - Project root to assess
+ * @returns The context-routing dimension record
+ */
+export async function assessContextRoutingDimension(root) {
+    const claims = await collectClaims(root);
+    const { violations, unmappable } = await auditClaims(root, claims);
+    const artifacts = await inspectRoutingArtifacts(root);
+    if (violations.length > 0) {
+        return {
+            id: CONTEXT_ROUTING_DIMENSION_ID,
+            // `WARN` reports how much confidence an offline prose cross-check can
+            // carry — it does NOT soften the verdict. The blocker engine never reads
+            // this status, so the finding below flips the repository to `NOT_READY`
+            // exactly as a `FAIL` would; precision is what keeps that honest.
+            status: "WARN",
+            findings: [
+                contextFinding(violations),
+                ...informationalFindings(unmappable),
+            ],
+        };
+    }
+    if (artifacts.missing.length > 0) {
+        return skipRecord(artifacts, unmappable);
+    }
+    return {
+        id: CONTEXT_ROUTING_DIMENSION_ID,
+        status: "PASS",
+        findings: [
+            {
+                evidence: `Cross-checked ${claims.length} documented guarantee(s) across this ` +
+                    "repository's instruction surfaces: every one that names a mechanism " +
+                    `names one that exists. Context routing is carried by ` +
+                    `${artifacts.present.join(", ")}.`,
+                checked: [CONTEXT_BLOCKER_ID],
+            },
+            ...informationalFindings(unmappable),
+        ],
+    };
+}
+//# sourceMappingURL=doctor-readiness-context.js.map

package/dist/cli/doctor-readiness-context.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"doctor-readiness-context.js","sourceRoot":"","sources":["../../src/cli/doctor-readiness-context.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6BG;AACH,OAAO,EACL,aAAa,GAEd,MAAM,sCAAsC,CAAC;AAC9C,OAAO,EACL,iBAAiB,EAEjB,iBAAiB,GAClB,MAAM,0CAA0C,CAAC;AAClD,OAAO,EACL,qBAAqB,EACrB,cAAc,GACf,MAAM,8BAA8B,CAAC;AAGtC,4EAA4E;AAC5E,MAAM,CAAC,MAAM,4BAA4B,GAAG,iBAAiB,CAAC;AAE9D,8EAA8E;AAC9E,MAAM,kBAAkB,GAAG,IAAI,CAAC;AAEhC,8EAA8E;AAC9E,MAAM,kBAAkB,GAAG,EAAE,CAAC;AAE9B,4DAA4D;AAC5D,MAAM,gBAAgB,GAAG,GAAG,CAAC;AAQ7B;;;;GAIG;AACH,SAAS,UAAU,CAAC,IAAY;IAC9B,OAAO,IAAI,CAAC,MAAM,GAAG,gBAAgB;QACnC,CAAC,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,gBAAgB,CAAC,CAAC,OAAO,EAAE,GAAG;QACjD,CAAC,CAAC,IAAI,CAAC;AACX,CAAC;AAQD;;;;;;;;;;;;GAYG;AACH,KAAK,UAAU,aAAa,CAC1B,IAAY,EACZ,KAAuB,EACvB,SAAwB;IAExB,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,GAAG,CAChC,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,KAAK,EAAC,SAAS,EAAC,EAAE,CAAC,CAAC;QACvC,SAAS;QACT,OAAO,EAAE,MAAM,iBAAiB,CAAC,IAAI,EAAE,SAAS,EAAE,SAAS,CAAC;KAC7D,CAAC,CAAC,CACJ,CAAC;IACF,MAAM,OAAO,GAAG,QAAQ;SACrB,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,OAAO,KAAK,SAAS,CAAC;SAC5C,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;IACjC,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACvB,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,KAAK,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC9D,OAAO;YACL,SAAS,EACP,KAAK,KAAK,CAAC,IAAI,WAAW,KAAK,CAAC,IAAI,yBAAyB;gBAC7D,GAAG,KAAK,6CAA6C;gBACrD,IAAI,UAAU,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG;SAChC,CAAC;IACJ,CAAC;IACD,IAAI,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,OAAO,KAAK,SAAS,CAAC,EAAE,CAAC;QACxD,OAAO,EAAE,CAAC;IACZ,CAAC;IACD,OAAO;QACL,UAAU,EACR,KAAK,KAAK,CAAC,IAAI,WAAW,KAAK,CAAC,IAAI,gCAAgC;YACpE,sEAAsE;YACtE,kBAAkB,UAAU,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG;KAC9C,CAAC;AACJ,CAAC;AAED;;;;;GAKG;AACH,KAAK,UAAU,WAAW,CACxB,IAAY,EACZ,MAAmC;IAEnC,MAAM,SAAS,GAAG,MAAM,iBAAiB,CAAC,IAAI,CAAC,CAAC;IAChD,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,GAAG,CAC/B,MAAM,CAAC,GAAG,CAAC,KAAK,EAAC,KAAK,EAAC,EAAE,CAAC,MAAM,aAAa,CAAC,IAAI,EAAE,KAAK,EAAE,SAAS,CAAC,CAAC,CACvE,CAAC;IACF,OAAO;QACL,UAAU,EAAE,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAClC,KAAK,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,SAAS,CAAC,CACvD;QACD,UAAU,EAAE,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAClC,KAAK,CAAC,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,UAAU,CAAC,CACzD;KACF,CAAC;AACJ,CAAC;AAED;;;;;;GAMG;AACH,KAAK,UAAU,uBAAuB,CACpC,IAAY;IAEZ,MAAM,MAAM,GAAG,MAAM,cAAc,CAAC,IAAI,EAAE,WAAW,CAAC,CAAC;IACvD,MAAM,MAAM,GAAG,MAAM,cAAc,CAAC,IAAI,EAAE,WAAW,CAAC,CAAC;IACvD,MAAM,MAAM,GAAG,MAAM,cAAc,CAAC,IAAI,EAAE,mBAAmB,CAAC,CAAC;IAC/D,MAAM,IAAI,GAAG,MAAM,cAAc,CAAC,IAAI,EAAE,eAAe,CAAC,CAAC;IACzD,MAAM,MAAM,GAA4C;QACtD,CAAC,MAAM,KAAK,IAAI,IAAI,MAAM,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,yBAAyB,CAAC;QACpE;YACE,MAAM,KAAK,IAAI,IAAI,MAAM,CAAC,QAAQ,CAAC,WAAW,CAAC;YAC/C,sCAAsC;SACvC;QACD;YACE,MAAM,KAAK,IAAI,IAAI,eAAe,CAAC,MAAM,CAAC;YAC1C,iCAAiC;SAClC;QACD,CAAC,IAAI,KAAK,IAAI,EAAE,mCAAmC,CAAC;KACrD,CAAC;IACF,OAAO;QACL,OAAO,EAAE,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;QAC7D,OAAO,EAAE,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC;KAC9D,CAAC;AACJ,CAAC;AAED;;;;GAIG;AACH,SAAS,eAAe,CAAC,MAAc;IACrC,IAAI,CAAC;QACH,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QACnB,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,SAAS,cAAc,CACrB,UAA6B;IAE7B,MAAM,KAAK,GAAG,UAAU,CAAC,KAAK,CAAC,CAAC,EAAE,kBAAkB,CAAC,CAAC;IACtD,MAAM,QAAQ,GAAG,UAAU,CAAC,MAAM,GAAG,KAAK,CAAC,MAAM,CAAC;IAClD,OAAO;QACL,OAAO,EAAE,kBAAkB;QAC3B,kBAAkB,EAChB,+DAA+D;QACjE,QAAQ,EACN,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC;YACjB,CAAC,QAAQ,GAAG,CAAC;gBACX,CAAC,CAAC,QAAQ,QAAQ,6CAA6C;gBAC/D,CAAC,CAAC,EAAE,CAAC;QACT,gBAAgB,EACd,yEAAyE;YACzE,0EAA0E;YAC1E,iEAAiE;QACnE,eAAe,EACb,yEAAyE;YACzE,qEAAqE;YACrE,8BAA8B;QAChC,mBAAmB,EAAE;YACnB,wEAAwE;gBACtE,mCAAmC;SACtC;KACF,CAAC;AACJ,CAAC;AAED;;;;;;GAMG;AACH,SAAS,UAAU,CACjB,SAA2B,EAC3B,UAA6B;IAE7B,OAAO;QACL,EAAE,EAAE,4BAA4B;QAChC,MAAM,EAAE,MAAM;QACd,QAAQ,EAAE;YACR;gBACE,MAAM,EACJ,oEAAoE;oBACpE,wBAAwB;oBACxB,GAAG,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,wCAAwC;oBACvE,kEAAkE;gBACpE,IAAI,EAAE,IAAI;aACX;YACD,GAAG,qBAAqB,CAAC,UAAU,CAAC;SACrC;KACF,CAAC;AACJ,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,CAAC,KAAK,UAAU,6BAA6B,CACjD,IAAY;IAEZ,MAAM,MAAM,GAAG,MAAM,aAAa,CAAC,IAAI,CAAC,CAAC;IACzC,MAAM,EAAE,UAAU,EAAE,UAAU,EAAE,GAAG,MAAM,WAAW,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IACnE,MAAM,SAAS,GAAG,MAAM,uBAAuB,CAAC,IAAI,CAAC,CAAC;IACtD,IAAI,UAAU,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC1B,OAAO;YACL,EAAE,EAAE,4BAA4B;YAChC,sEAAsE;YACtE,yEAAyE;YACzE,wEAAwE;YACxE,kEAAkE;YAClE,MAAM,EAAE,MAAM;YACd,QAAQ,EAAE;gBACR,cAAc,CAAC,UAAU,CAAC;gBAC1B,GAAG,qBAAqB,CAAC,UAAU,CAAC;aACrC;SACF,CAAC;IACJ,CAAC;IACD,IAAI,SAAS,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACjC,OAAO,UAAU,CAAC,SAAS,EAAE,UAAU,CAAC,CAAC;IAC3C,CAAC;IACD,OAAO;QACL,EAAE,EAAE,4BAA4B;QAChC,MAAM,EAAE,MAAM;QACd,QAAQ,EAAE;YACR;gBACE,QAAQ,EACN,iBAAiB,MAAM,CAAC,MAAM,uCAAuC;oBACrE,sEAAsE;oBACtE,uDAAuD;oBACvD,GAAG,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG;gBACpC,OAAO,EAAE,CAAC,kBAAkB,CAAC;aAC9B;YACD,GAAG,qBAAqB,CAAC,UAAU,CAAC;SACrC;KACF,CAAC;AACJ,CAAC"}

package/dist/cli/doctor-readiness-delivery.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"doctor-readiness-delivery.d.ts","sourceRoot":"","sources":["../../src/cli/doctor-readiness-delivery.ts"],"names":[],"mappings":"AAmCA,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,6BAA6B,CAAC;AAC5E,OAAO,EACL,KAAK,cAAc,EAEpB,MAAM,iCAAiC,CAAC;AAEzC,+EAA+E;AAC/E,eAAO,MAAM,+BAA+B,uBAAuB,CAAC;AAgPpE;;;;;;;;;GASG;AACH,wBAAsB,gCAAgC,CACpD,IAAI,EAAE,MAAM,EACZ,eAAe,CAAC,EAAE,SAAS,cAAc,EAAE,GAC1C,OAAO,CAAC,wBAAwB,CAAC,CAiBnC"}
+{"version":3,"file":"doctor-readiness-delivery.d.ts","sourceRoot":"","sources":["../../src/cli/doctor-readiness-delivery.ts"],"names":[],"mappings":"AAoCA,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,6BAA6B,CAAC;AAC5E,OAAO,EACL,KAAK,cAAc,EAEpB,MAAM,iCAAiC,CAAC;AAEzC,+EAA+E;AAC/E,eAAO,MAAM,+BAA+B,uBAAuB,CAAC;AAmOpE;;;;;;;;;GASG;AACH,wBAAsB,gCAAgC,CACpD,IAAI,EAAE,MAAM,EACZ,eAAe,CAAC,EAAE,SAAS,cAAc,EAAE,GAC1C,OAAO,CAAC,wBAAwB,CAAC,CAiBnC"}

package/dist/cli/doctor-readiness-delivery.js

@@ -25,6 +25,7 @@
  * @module cli/doctor-readiness-delivery
  */
 import { detectCredentialFindings, } from "./doctor-readiness-credentials.js";
+import { informationalFindings } from "./doctor-readiness-shared.js";
 import { assessReleasePath, PROMOTION_ACTION, } from "./doctor-readiness-release-path.js";
 import { parseRepositoryWorkflows, } from "./doctor-readiness-workflows.js";
 /** The delivery/authority readiness dimension id (readiness-rubric, RRR-1). */
@@ -93,16 +94,6 @@ function credentialFinding(violations) {
         ],
     };
 }
-/**
- * Wrap non-blocking observations as findings. They deliberately carry no
- * `blocker` key: naming one would stand a blocker up on an observation that was
- * never decidable offline.
- * @param notes - Informational lines
- * @returns Findings, one per note
- */
-function informationalFindings(notes) {
-    return notes.map(note => ({ observation: note, blocking: false }));
-}
 /**
  * Build the SKIP record for a repository whose release paths could not be
  * settled from the workflow files alone.

package/dist/cli/doctor-readiness-delivery.js.map

@@ -1 +1 @@
-{"version":3,"file":"doctor-readiness-delivery.js","sourceRoot":"","sources":["../../src/cli/doctor-readiness-delivery.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AACH,OAAO,EAEL,wBAAwB,GACzB,MAAM,mCAAmC,CAAC;AAC3C,OAAO,EACL,iBAAiB,EACjB,gBAAgB,GAEjB,MAAM,oCAAoC,CAAC;AAE5C,OAAO,EAEL,wBAAwB,GACzB,MAAM,iCAAiC,CAAC;AAEzC,+EAA+E;AAC/E,MAAM,CAAC,MAAM,+BAA+B,GAAG,oBAAoB,CAAC;AAEpE,gFAAgF;AAChF,MAAM,kBAAkB,GAAG,IAAI,CAAC;AAEhC,+EAA+E;AAC/E,MAAM,qBAAqB,GAAG,IAAI,CAAC;AAUnC;;;;GAIG;AACH,SAAS,qBAAqB,CAC5B,SAAoC;IAEpC,MAAM,QAAQ,GAAkC,SAAS,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,CAC3E,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE;QAC1B,MAAM,OAAO,GAAG,iBAAiB,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC;QACjD,OAAO,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IAClC,CAAC,CAAC,CACH,CAAC;IACF,OAAO;QACL,UAAU,EAAE,QAAQ,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CACrC,OAAO,CAAC,IAAI,KAAK,WAAW,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,EAAE,CACvD;QACD,UAAU,EAAE,QAAQ,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CACrC,OAAO,CAAC,IAAI,KAAK,YAAY,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,CACtD;QACD,UAAU,EAAE,QAAQ,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC,OAAO,CAAC,IAAI,KAAK,OAAO,CAAC,CAAC,MAAM;QACvE,eAAe,EAAE,QAAQ,CAAC,MAAM;KACjC,CAAC;AACJ,CAAC;AAED;;;;GAIG;AACH,SAAS,cAAc,CACrB,UAA6B;IAE7B,OAAO;QACL,OAAO,EAAE,kBAAkB;QAC3B,kBAAkB,EAChB,2EAA2E;QAC7E,QAAQ,EAAE,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC;QAChC,gBAAgB,EACd,wEAAwE;YACxE,uEAAuE;YACvE,iDAAiD;QACnD,eAAe,EACb,yEAAyE;YACzE,6BAA6B,gBAAgB,6BAA6B;YAC1E,kCAAkC;QACpC,mBAAmB,EAAE;YACnB,yEAAyE;gBACvE,4CAA4C;SAC/C;KACF,CAAC;AACJ,CAAC;AAED;;;;GAIG;AACH,SAAS,iBAAiB,CACxB,UAA6B;IAE7B,OAAO;QACL,OAAO,EAAE,qBAAqB;QAC9B,kBAAkB,EAChB,wEAAwE;QAC1E,QAAQ,EAAE,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC;QAChC,gBAAgB,EACd,0EAA0E;YAC1E,2DAA2D;QAC7D,eAAe,EACb,2EAA2E;YAC3E,2EAA2E;YAC3E,wBAAwB;QAC1B,mBAAmB,EAAE;YACnB,yEAAyE;gBACvE,6BAA6B;SAChC;KACF,CAAC;AACJ,CAAC;AAED;;;;;;GAMG;AACH,SAAS,qBAAqB,CAC5B,KAAwB;IAExB,OAAO,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,EAAE,WAAW,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC;AACrE,CAAC;AAED;;;;;;GAMG;AACH,SAAS,gBAAgB,CACvB,OAA0B,EAC1B,WAA+B;IAE/B,OAAO;QACL,EAAE,EAAE,+BAA+B;QACnC,MAAM,EAAE,MAAM;QACd,QAAQ,EAAE;YACR,EAAE,MAAM,EAAE,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE;YAC3C,GAAG,qBAAqB,CAAC,WAAW,CAAC,aAAa,CAAC;SACpD;KACF,CAAC;AACJ,CAAC;AAED;;;;;;;GAOG;AACH,SAAS,WAAW,CAClB,OAA2B,EAC3B,SAAoC,EACpC,WAA+B;IAE/B,OAAO;QACL,EAAE,EAAE,+BAA+B;QACnC,MAAM,EAAE,MAAM;QACd,QAAQ,EAAE;YACR;gBACE,QAAQ,EACN,aAAa,OAAO,CAAC,eAAe,4BAA4B;oBAChE,GAAG,SAAS,CAAC,MAAM,gDAAgD;oBACnE,+CAA+C,gBAAgB,MAAM;oBACrE,kEAAkE;oBAClE,oBAAoB;gBACtB,OAAO,EAAE,CAAC,kBAAkB,EAAE,qBAAqB,CAAC;aACrD;YACD,GAAG,qBAAqB,CAAC,WAAW,CAAC,aAAa,CAAC;SACpD;KACF,CAAC;AACJ,CAAC;AAED;;;;;;;GAOG;AACH,SAAS,eAAe,CACtB,OAA2B,EAC3B,WAA+B;IAE/B,OAAO;QACL,EAAE,EAAE,+BAA+B;QACnC,MAAM,EAAE,MAAM;QACd,QAAQ,EAAE;YACR,GAAG,CAAC,OAAO,CAAC,UAAU,CAAC,MAAM,GAAG,CAAC;gBAC/B,CAAC,CAAC,CAAC,cAAc,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;gBACtC,CAAC,CAAC,EAAE,CAAC;YACP,GAAG,CAAC,WAAW,CAAC,UAAU,CAAC,MAAM,GAAG,CAAC;gBACnC,CAAC,CAAC,CAAC,iBAAiB,CAAC,WAAW,CAAC,UAAU,CAAC,CAAC;gBAC7C,CAAC,CAAC,EAAE,CAAC;YACP,0EAA0E;YAC1E,0EAA0E;YAC1E,mEAAmE;YACnE,GAAG,qBAAqB,CAAC,OAAO,CAAC,UAAU,CAAC;YAC5C,GAAG,qBAAqB,CAAC,WAAW,CAAC,aAAa,CAAC;SACpD;KACF,CAAC;AACJ,CAAC;AAED;;;GAGG;AACH,SAAS,iBAAiB;IACxB,OAAO;QACL,EAAE,EAAE,+BAA+B;QACnC,MAAM,EAAE,MAAM;QACd,QAAQ,EAAE;YACR;gBACE,MAAM,EACJ,kEAAkE;oBAClE,6DAA6D;oBAC7D,kDAAkD;gBACpD,IAAI,EAAE,IAAI;aACX;SACF;KACF,CAAC;AACJ,CAAC;AAED;;;;;GAKG;AACH,SAAS,mBAAmB,CAC1B,SAAoC,EACpC,WAA+B;IAE/B,OAAO;QACL,EAAE,EAAE,+BAA+B;QACnC,MAAM,EAAE,MAAM;QACd,QAAQ,EAAE;YACR;gBACE,MAAM,EACJ,eAAe,SAAS,CAAC,MAAM,+BAA+B;oBAC9D,mEAAmE;oBACnE,gEAAgE;oBAChE,6CAA6C;gBAC/C,IAAI,EAAE,IAAI;aACX;YACD,GAAG,qBAAqB,CAAC,WAAW,CAAC,aAAa,CAAC;SACpD;KACF,CAAC;AACJ,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,CAAC,KAAK,UAAU,gCAAgC,CACpD,IAAY,EACZ,eAA2C;IAE3C,MAAM,SAAS,GAAG,eAAe,IAAI,CAAC,MAAM,wBAAwB,CAAC,IAAI,CAAC,CAAC,CAAC;IAC5E,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC3B,OAAO,iBAAiB,EAAE,CAAC;IAC7B,CAAC;IACD,MAAM,OAAO,GAAG,qBAAqB,CAAC,SAAS,CAAC,CAAC;IACjD,MAAM,WAAW,GAAG,wBAAwB,CAAC,SAAS,CAAC,CAAC;IACxD,IAAI,OAAO,CAAC,UAAU,CAAC,MAAM,GAAG,CAAC,IAAI,WAAW,CAAC,UAAU,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACvE,OAAO,eAAe,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC;IAC/C,CAAC;IACD,IAAI,OAAO,CAAC,UAAU,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAClC,OAAO,gBAAgB,CAAC,OAAO,CAAC,UAAU,EAAE,WAAW,CAAC,CAAC;IAC3D,CAAC;IACD,IAAI,OAAO,CAAC,eAAe,KAAK,CAAC,EAAE,CAAC;QAClC,OAAO,mBAAmB,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC;IACrD,CAAC;IACD,OAAO,WAAW,CAAC,OAAO,EAAE,SAAS,EAAE,WAAW,CAAC,CAAC;AACtD,CAAC"}
+{"version":3,"file":"doctor-readiness-delivery.js","sourceRoot":"","sources":["../../src/cli/doctor-readiness-delivery.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AACH,OAAO,EAEL,wBAAwB,GACzB,MAAM,mCAAmC,CAAC;AAC3C,OAAO,EAAE,qBAAqB,EAAE,MAAM,8BAA8B,CAAC;AACrE,OAAO,EACL,iBAAiB,EACjB,gBAAgB,GAEjB,MAAM,oCAAoC,CAAC;AAE5C,OAAO,EAEL,wBAAwB,GACzB,MAAM,iCAAiC,CAAC;AAEzC,+EAA+E;AAC/E,MAAM,CAAC,MAAM,+BAA+B,GAAG,oBAAoB,CAAC;AAEpE,gFAAgF;AAChF,MAAM,kBAAkB,GAAG,IAAI,CAAC;AAEhC,+EAA+E;AAC/E,MAAM,qBAAqB,GAAG,IAAI,CAAC;AAUnC;;;;GAIG;AACH,SAAS,qBAAqB,CAC5B,SAAoC;IAEpC,MAAM,QAAQ,GAAkC,SAAS,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,CAC3E,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE;QAC1B,MAAM,OAAO,GAAG,iBAAiB,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC;QACjD,OAAO,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IAClC,CAAC,CAAC,CACH,CAAC;IACF,OAAO;QACL,UAAU,EAAE,QAAQ,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CACrC,OAAO,CAAC,IAAI,KAAK,WAAW,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,EAAE,CACvD;QACD,UAAU,EAAE,QAAQ,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CACrC,OAAO,CAAC,IAAI,KAAK,YAAY,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,CACtD;QACD,UAAU,EAAE,QAAQ,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC,OAAO,CAAC,IAAI,KAAK,OAAO,CAAC,CAAC,MAAM;QACvE,eAAe,EAAE,QAAQ,CAAC,MAAM;KACjC,CAAC;AACJ,CAAC;AAED;;;;GAIG;AACH,SAAS,cAAc,CACrB,UAA6B;IAE7B,OAAO;QACL,OAAO,EAAE,kBAAkB;QAC3B,kBAAkB,EAChB,2EAA2E;QAC7E,QAAQ,EAAE,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC;QAChC,gBAAgB,EACd,wEAAwE;YACxE,uEAAuE;YACvE,iDAAiD;QACnD,eAAe,EACb,yEAAyE;YACzE,6BAA6B,gBAAgB,6BAA6B;YAC1E,kCAAkC;QACpC,mBAAmB,EAAE;YACnB,yEAAyE;gBACvE,4CAA4C;SAC/C;KACF,CAAC;AACJ,CAAC;AAED;;;;GAIG;AACH,SAAS,iBAAiB,CACxB,UAA6B;IAE7B,OAAO;QACL,OAAO,EAAE,qBAAqB;QAC9B,kBAAkB,EAChB,wEAAwE;QAC1E,QAAQ,EAAE,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC;QAChC,gBAAgB,EACd,0EAA0E;YAC1E,2DAA2D;QAC7D,eAAe,EACb,2EAA2E;YAC3E,2EAA2E;YAC3E,wBAAwB;QAC1B,mBAAmB,EAAE;YACnB,yEAAyE;gBACvE,6BAA6B;SAChC;KACF,CAAC;AACJ,CAAC;AAED;;;;;;GAMG;AACH,SAAS,gBAAgB,CACvB,OAA0B,EAC1B,WAA+B;IAE/B,OAAO;QACL,EAAE,EAAE,+BAA+B;QACnC,MAAM,EAAE,MAAM;QACd,QAAQ,EAAE;YACR,EAAE,MAAM,EAAE,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE;YAC3C,GAAG,qBAAqB,CAAC,WAAW,CAAC,aAAa,CAAC;SACpD;KACF,CAAC;AACJ,CAAC;AAED;;;;;;;GAOG;AACH,SAAS,WAAW,CAClB,OAA2B,EAC3B,SAAoC,EACpC,WAA+B;IAE/B,OAAO;QACL,EAAE,EAAE,+BAA+B;QACnC,MAAM,EAAE,MAAM;QACd,QAAQ,EAAE;YACR;gBACE,QAAQ,EACN,aAAa,OAAO,CAAC,eAAe,4BAA4B;oBAChE,GAAG,SAAS,CAAC,MAAM,gDAAgD;oBACnE,+CAA+C,gBAAgB,MAAM;oBACrE,kEAAkE;oBAClE,oBAAoB;gBACtB,OAAO,EAAE,CAAC,kBAAkB,EAAE,qBAAqB,CAAC;aACrD;YACD,GAAG,qBAAqB,CAAC,WAAW,CAAC,aAAa,CAAC;SACpD;KACF,CAAC;AACJ,CAAC;AAED;;;;;;;GAOG;AACH,SAAS,eAAe,CACtB,OAA2B,EAC3B,WAA+B;IAE/B,OAAO;QACL,EAAE,EAAE,+BAA+B;QACnC,MAAM,EAAE,MAAM;QACd,QAAQ,EAAE;YACR,GAAG,CAAC,OAAO,CAAC,UAAU,CAAC,MAAM,GAAG,CAAC;gBAC/B,CAAC,CAAC,CAAC,cAAc,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;gBACtC,CAAC,CAAC,EAAE,CAAC;YACP,GAAG,CAAC,WAAW,CAAC,UAAU,CAAC,MAAM,GAAG,CAAC;gBACnC,CAAC,CAAC,CAAC,iBAAiB,CAAC,WAAW,CAAC,UAAU,CAAC,CAAC;gBAC7C,CAAC,CAAC,EAAE,CAAC;YACP,0EAA0E;YAC1E,0EAA0E;YAC1E,mEAAmE;YACnE,GAAG,qBAAqB,CAAC,OAAO,CAAC,UAAU,CAAC;YAC5C,GAAG,qBAAqB,CAAC,WAAW,CAAC,aAAa,CAAC;SACpD;KACF,CAAC;AACJ,CAAC;AAED;;;GAGG;AACH,SAAS,iBAAiB;IACxB,OAAO;QACL,EAAE,EAAE,+BAA+B;QACnC,MAAM,EAAE,MAAM;QACd,QAAQ,EAAE;YACR;gBACE,MAAM,EACJ,kEAAkE;oBAClE,6DAA6D;oBAC7D,kDAAkD;gBACpD,IAAI,EAAE,IAAI;aACX;SACF;KACF,CAAC;AACJ,CAAC;AAED;;;;;GAKG;AACH,SAAS,mBAAmB,CAC1B,SAAoC,EACpC,WAA+B;IAE/B,OAAO;QACL,EAAE,EAAE,+BAA+B;QACnC,MAAM,EAAE,MAAM;QACd,QAAQ,EAAE;YACR;gBACE,MAAM,EACJ,eAAe,SAAS,CAAC,MAAM,+BAA+B;oBAC9D,mEAAmE;oBACnE,gEAAgE;oBAChE,6CAA6C;gBAC/C,IAAI,EAAE,IAAI;aACX;YACD,GAAG,qBAAqB,CAAC,WAAW,CAAC,aAAa,CAAC;SACpD;KACF,CAAC;AACJ,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,CAAC,KAAK,UAAU,gCAAgC,CACpD,IAAY,EACZ,eAA2C;IAE3C,MAAM,SAAS,GAAG,eAAe,IAAI,CAAC,MAAM,wBAAwB,CAAC,IAAI,CAAC,CAAC,CAAC;IAC5E,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC3B,OAAO,iBAAiB,EAAE,CAAC;IAC7B,CAAC;IACD,MAAM,OAAO,GAAG,qBAAqB,CAAC,SAAS,CAAC,CAAC;IACjD,MAAM,WAAW,GAAG,wBAAwB,CAAC,SAAS,CAAC,CAAC;IACxD,IAAI,OAAO,CAAC,UAAU,CAAC,MAAM,GAAG,CAAC,IAAI,WAAW,CAAC,UAAU,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACvE,OAAO,eAAe,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC;IAC/C,CAAC;IACD,IAAI,OAAO,CAAC,UAAU,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAClC,OAAO,gBAAgB,CAAC,OAAO,CAAC,UAAU,EAAE,WAAW,CAAC,CAAC;IAC3D,CAAC;IACD,IAAI,OAAO,CAAC,eAAe,KAAK,CAAC,EAAE,CAAC;QAClC,OAAO,mBAAmB,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC;IACrD,CAAC;IACD,OAAO,WAAW,CAAC,OAAO,EAAE,SAAS,EAAE,WAAW,CAAC,CAAC;AACtD,CAAC"}

package/dist/cli/doctor-readiness-shared.d.ts

@@ -0,0 +1,47 @@
+/**
+ * Read a repository-relative file, returning null when it cannot be read.
+ *
+ * Reading is best-effort by design: a file that cannot be read establishes
+ * nothing, and a readiness producer must never turn "could not look" into
+ * either a violation or a clean bill of health.
+ * @param root - Repository root
+ * @param relativePath - Repo-relative path (forward slashes)
+ * @returns File contents, or null
+ */
+export declare function readFileOrNull(root: string, relativePath: string): Promise<string | null>;
+/**
+ * Whether a repository-relative directory exists.
+ * @param root - Repository root
+ * @param relativePath - Repo-relative directory path
+ * @returns True when the directory could be listed
+ */
+export declare function directoryExists(root: string, relativePath: string): Promise<boolean>;
+/**
+ * Whether a repository-relative path exists, as a file or a directory.
+ * @param root - Repository root
+ * @param relativePath - Repo-relative path
+ * @returns True when something is present at that path
+ */
+export declare function pathExists(root: string, relativePath: string): Promise<boolean>;
+/**
+ * Strip leading and trailing slashes from a repo-relative path fragment.
+ * Written without a regex quantifier so it cannot backtrack on hostile input.
+ * @param value - The path fragment
+ * @returns The fragment with empty segments removed
+ */
+export declare function trimSlashes(value: string): string;
+/**
+ * Whether a value is a plain JSON object.
+ * @param value - Candidate value
+ * @returns True when the value is a non-null, non-array object
+ */
+export declare function isRecord(value: unknown): value is Record<string, unknown>;
+/**
+ * Wrap non-blocking observations as findings. They deliberately carry no
+ * `blocker` key: naming one would stand a blocker up — and flip the whole
+ * repository to `NOT_READY` — on an observation that was never decidable.
+ * @param notes - Informational lines
+ * @returns Findings, one per note
+ */
+export declare function informationalFindings(notes: readonly string[]): readonly Record<string, unknown>[];
+//# sourceMappingURL=doctor-readiness-shared.d.ts.map

package/dist/cli/doctor-readiness-shared.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"doctor-readiness-shared.d.ts","sourceRoot":"","sources":["../../src/cli/doctor-readiness-shared.ts"],"names":[],"mappings":"AAeA;;;;;;;;;GASG;AACH,wBAAsB,cAAc,CAClC,IAAI,EAAE,MAAM,EACZ,YAAY,EAAE,MAAM,GACnB,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAMxB;AAED;;;;;GAKG;AACH,wBAAsB,eAAe,CACnC,IAAI,EAAE,MAAM,EACZ,YAAY,EAAE,MAAM,GACnB,OAAO,CAAC,OAAO,CAAC,CAOlB;AAED;;;;;GAKG;AACH,wBAAsB,UAAU,CAC9B,IAAI,EAAE,MAAM,EACZ,YAAY,EAAE,MAAM,GACnB,OAAO,CAAC,OAAO,CAAC,CAKlB;AAED;;;;;GAKG;AACH,wBAAgB,WAAW,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAKjD;AAED;;;;GAIG;AACH,wBAAgB,QAAQ,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAEzE;AAED;;;;;;GAMG;AACH,wBAAgB,qBAAqB,CACnC,KAAK,EAAE,SAAS,MAAM,EAAE,GACvB,SAAS,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,CAEpC"}

package/dist/cli/doctor-readiness-shared.js

@@ -0,0 +1,88 @@
+/**
+ * Helpers shared by every readiness producer (PRD #1739, #1896).
+ *
+ * Three things were being re-implemented per producer: reading a repository file
+ * without letting a missing file throw, asking whether a repository path exists,
+ * and wrapping a non-blocking observation as a finding. The last one is the
+ * load-bearing case — an observation finding must carry NO `blocker` key,
+ * because the blocker engine stands a blocker up on any finding that names an id
+ * and carries evidence regardless of the finding's status. One definition means
+ * that rule cannot drift apart across producers.
+ * @module cli/doctor-readiness-shared
+ */
+import { readdir, readFile } from "node:fs/promises";
+import * as path from "node:path";
+/**
+ * Read a repository-relative file, returning null when it cannot be read.
+ *
+ * Reading is best-effort by design: a file that cannot be read establishes
+ * nothing, and a readiness producer must never turn "could not look" into
+ * either a violation or a clean bill of health.
+ * @param root - Repository root
+ * @param relativePath - Repo-relative path (forward slashes)
+ * @returns File contents, or null
+ */
+export async function readFileOrNull(root, relativePath) {
+    try {
+        return await readFile(path.join(root, ...relativePath.split("/")), "utf8");
+    }
+    catch {
+        return null;
+    }
+}
+/**
+ * Whether a repository-relative directory exists.
+ * @param root - Repository root
+ * @param relativePath - Repo-relative directory path
+ * @returns True when the directory could be listed
+ */
+export async function directoryExists(root, relativePath) {
+    try {
+        await readdir(path.join(root, ...relativePath.split("/")));
+        return true;
+    }
+    catch {
+        return false;
+    }
+}
+/**
+ * Whether a repository-relative path exists, as a file or a directory.
+ * @param root - Repository root
+ * @param relativePath - Repo-relative path
+ * @returns True when something is present at that path
+ */
+export async function pathExists(root, relativePath) {
+    return ((await readFileOrNull(root, relativePath)) !== null ||
+        (await directoryExists(root, relativePath)));
+}
+/**
+ * Strip leading and trailing slashes from a repo-relative path fragment.
+ * Written without a regex quantifier so it cannot backtrack on hostile input.
+ * @param value - The path fragment
+ * @returns The fragment with empty segments removed
+ */
+export function trimSlashes(value) {
+    return value
+        .split("/")
+        .filter(segment => segment !== "")
+        .join("/");
+}
+/**
+ * Whether a value is a plain JSON object.
+ * @param value - Candidate value
+ * @returns True when the value is a non-null, non-array object
+ */
+export function isRecord(value) {
+    return typeof value === "object" && value !== null && !Array.isArray(value);
+}
+/**
+ * Wrap non-blocking observations as findings. They deliberately carry no
+ * `blocker` key: naming one would stand a blocker up — and flip the whole
+ * repository to `NOT_READY` — on an observation that was never decidable.
+ * @param notes - Informational lines
+ * @returns Findings, one per note
+ */
+export function informationalFindings(notes) {
+    return notes.map(note => ({ observation: note, blocking: false }));
+}
+//# sourceMappingURL=doctor-readiness-shared.js.map

package/dist/cli/doctor-readiness-shared.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"doctor-readiness-shared.js","sourceRoot":"","sources":["../../src/cli/doctor-readiness-shared.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AACH,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AACrD,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAElC;;;;;;;;;GASG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CAClC,IAAY,EACZ,YAAoB;IAEpB,IAAI,CAAC;QACH,OAAO,MAAM,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,GAAG,YAAY,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC;IAC7E,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,eAAe,CACnC,IAAY,EACZ,YAAoB;IAEpB,IAAI,CAAC;QACH,MAAM,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,GAAG,YAAY,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;QAC3D,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,UAAU,CAC9B,IAAY,EACZ,YAAoB;IAEpB,OAAO,CACL,CAAC,MAAM,cAAc,CAAC,IAAI,EAAE,YAAY,CAAC,CAAC,KAAK,IAAI;QACnD,CAAC,MAAM,eAAe,CAAC,IAAI,EAAE,YAAY,CAAC,CAAC,CAC5C,CAAC;AACJ,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,WAAW,CAAC,KAAa;IACvC,OAAO,KAAK;SACT,KAAK,CAAC,GAAG,CAAC;SACV,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC,OAAO,KAAK,EAAE,CAAC;SACjC,IAAI,CAAC,GAAG,CAAC,CAAC;AACf,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,QAAQ,CAAC,KAAc;IACrC,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;AAC9E,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,qBAAqB,CACnC,KAAwB;IAExB,OAAO,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,EAAE,WAAW,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC;AACrE,CAAC"}

package/dist/cli/doctor-readiness-supply-chain-scan.d.ts

@@ -0,0 +1,67 @@
+/**
+ * Every lockfile spelling a JavaScript package manager writes. One of these
+ * being committed is what makes two installs resolve to the same tree.
+ */
+export declare const LOCKFILES: readonly string[];
+/**
+ * Whether a dependency spec resolves to whatever is newest at install time
+ * rather than to a version something was validated against.
+ *
+ * Four families are recognized, and the narrowness of each is deliberate — every
+ * over-eager rule here fails a correctly configured repository:
+ *
+ * - **Local protocols** resolve inside the repository and never float.
+ * - **Registry aliases** (`npm:left-pad@latest`) hide the real spec behind the
+ *   alias, so the part after the version separator is re-tested.
+ * - **Repository clones** (`github:acme/widget`, `git+https://…/x.git`) float
+ *   unless anchored to a `#<sha|tag>` revision, because the branch tip moves
+ *   under the install. An archive URL (`…/widget-1.2.3.tgz`) is NOT a clone: it
+ *   names one built artifact and is treated as pinned.
+ * - **Plain ranges** float only when they name no version at all. A `>=` floor
+ *   in `overrides` is the recommended way to force a patched transitive
+ *   dependency, so ranges are otherwise left alone.
+ * @param spec - The declared spec text
+ * @returns True when the spec floats
+ */
+export declare function isFloatingSpec(spec: string): boolean;
+/** What reading the manifest established. */
+export type ManifestOutcome = {
+    readonly kind: "ok";
+    readonly manifest: Record<string, unknown>;
+} | {
+    readonly kind: "unassessable";
+    readonly reason: string;
+};
+/**
+ * Read and parse `package.json`, distinguishing "absent" from "unparseable" so
+ * the SKIP reason can say which one happened.
+ * @param root - Repository root
+ * @returns The parsed manifest, or the reason it cannot be assessed
+ */
+export declare function readManifest(root: string): Promise<ManifestOutcome>;
+/** One declared dependency spec, flattened out of the manifest blocks. */
+export interface DependencySpec {
+    readonly block: string;
+    readonly name: string;
+    readonly spec: string;
+}
+/**
+ * Flatten every versioned manifest block into one list of specs.
+ * @param manifest - Parsed `package.json`
+ * @returns Every declared spec across the versioned blocks
+ */
+export declare function collectSpecs(manifest: Record<string, unknown>): readonly DependencySpec[];
+/**
+ * Find the committed lockfile, if any.
+ * @param root - Repository root
+ * @returns The lockfile name, or null when none is committed
+ */
+export declare function findLockfile(root: string): Promise<string | null>;
+/**
+ * Find where the repository audits its dependency tree: a CI job, a git hook, a
+ * lefthook declaration, or an update bot.
+ * @param root - Repository root
+ * @returns The repo-relative path of the first gate found, or null
+ */
+export declare function findAuditGate(root: string): Promise<string | null>;
+//# sourceMappingURL=doctor-readiness-supply-chain-scan.d.ts.map

package/dist/cli/doctor-readiness-supply-chain-scan.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"doctor-readiness-supply-chain-scan.d.ts","sourceRoot":"","sources":["../../src/cli/doctor-readiness-supply-chain-scan.ts"],"names":[],"mappings":"AAoBA;;;GAGG;AACH,eAAO,MAAM,SAAS,EAAE,SAAS,MAAM,EAOtC,CAAC;AAoFF;;;;;;;;;;;;;;;;;;;GAmBG;AACH,wBAAgB,cAAc,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAepD;AAyCD,6CAA6C;AAC7C,MAAM,MAAM,eAAe,GACvB;IAAE,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAC;IAAC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;CAAE,GACnE;IAAE,QAAQ,CAAC,IAAI,EAAE,cAAc,CAAC;IAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC;AAsC/D;;;;;GAKG;AACH,wBAAsB,YAAY,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,eAAe,CAAC,CA2BzE;AAED,0EAA0E;AAC1E,MAAM,WAAW,cAAc;IAC7B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;CACvB;AA4BD;;;;GAIG;AACH,wBAAgB,YAAY,CAC1B,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAChC,SAAS,cAAc,EAAE,CAI3B;AAED;;;;GAIG;AACH,wBAAsB,YAAY,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAOvE;AAkBD;;;;;GAKG;AACH,wBAAsB,aAAa,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAoBxE"}