@codyswann/lisa 2.279.2 → 2.281.0

package/dist/cli/doctor-readiness-context.js

@@ -0,0 +1,244 @@
+/**
+ * The context-routing readiness producer — ship blocker B6 (PRD #1739, #1896).
+ *
+ * Dimension 1 of the `readiness-rubric` asks whether an agent can recover the
+ * real job from what is written down. Blocker B6 asks the sharper half of that:
+ * does the written word claim only what something actually enforces? An agent
+ * that reads "the pre-commit hook always runs the tests" stops verifying, so a
+ * documented guarantee with no mechanism behind it is worse than silence.
+ *
+ * Cross-checking prose against machinery is false-positive-prone, and a standing
+ * B6 is not a soft signal: the blocker engine reads a finding's `blocker` id and
+ * evidence and never reads its status, so a `WARN` finding naming B6 flips the
+ * whole repository to `NOT_READY` exactly as a `FAIL` one would. The `WARN`
+ * status communicates confidence to a human reader; it does NOT soften the
+ * verdict. **Precision is the only real defense**, which is why three
+ * disciplines are load-bearing here:
+ *
+ * 1. **Only a provable, high-confidence overstatement stands the blocker.** A
+ *    claim is faulted only when the sentence names an in-repository mechanism
+ *    that survives `classifyMechanism` and still does not exist. Package names,
+ *    `org/repo` slugs, git refs, and generated artifacts are classified
+ *    `unmappable` rather than missing.
+ * 2. **Anything short of that is an observation, never a blocker.** A claim with
+ *    no resolvable mechanism, one inside a code fence, or a hedged sentence is
+ *    surfaced as a non-blocking finding — never guessed into a violation, and
+ *    never dropped into silence.
+ * 3. **A clean finding carries no `blocker` key.** A PASS finding that named B6
+ *    would report a healthy repository as NOT_READY.
+ * @module cli/doctor-readiness-context
+ */
+import { collectClaims, } from "./doctor-readiness-context-claims.js";
+import { classifyMechanism, loadIgnoreMatcher, } from "./doctor-readiness-context-mechanisms.js";
+import { informationalFindings, readFileOrNull, } from "./doctor-readiness-shared.js";
+/** The context-routing readiness dimension id (readiness-rubric, RRR-1). */
+export const CONTEXT_ROUTING_DIMENSION_ID = "context-routing";
+/** The ship blocker for documentation that overstates enforced guarantees. */
+const CONTEXT_BLOCKER_ID = "B6";
+/** Most claim lines carried into one finding, to keep the report readable. */
+const MAX_EVIDENCE_LINES = 10;
+/** Longest quoted claim carried into persisted evidence. */
+const MAX_QUOTE_LENGTH = 160;
+/**
+ * Shorten a quoted claim so persisted evidence stays readable.
+ * @param text - The raw claim line
+ * @returns The claim, truncated to {@link MAX_QUOTE_LENGTH}
+ */
+function quoteClaim(text) {
+    return text.length > MAX_QUOTE_LENGTH
+        ? `${text.slice(0, MAX_QUOTE_LENGTH).trimEnd()}…`
+        : text;
+}
+/**
+ * Cross-check one claim against the mechanisms it names.
+ *
+ * The claim becomes a violation only when at least one named mechanism is
+ * classified `missing` — provably absent AND provably a path this repository
+ * would own. Every other outcome is an observation, because a blocker built on
+ * a token that might be a package name or a git ref would flip a healthy
+ * repository to NOT_READY.
+ * @param root - Repository root
+ * @param claim - The claim to check
+ * @param isIgnored - The repository's ignore matcher
+ * @returns Either a violation line, an unmappable line, or neither
+ */
+async function auditOneClaim(root, claim, isIgnored) {
+    const verdicts = await Promise.all(claim.mechanisms.map(async (mechanism) => ({
+        mechanism,
+        verdict: await classifyMechanism(root, mechanism, isIgnored),
+    })));
+    const missing = verdicts
+        .filter(entry => entry.verdict === "missing")
+        .map(entry => entry.mechanism);
+    if (missing.length > 0) {
+        const named = missing.map(entry => `\`${entry}\``).join(", ");
+        return {
+            violation: `\`${claim.file}\` line ${claim.line} claims enforcement by ` +
+                `${named}, which does not exist in this repository: ` +
+                `"${quoteClaim(claim.text)}"`,
+        };
+    }
+    if (verdicts.some(entry => entry.verdict === "present")) {
+        return {};
+    }
+    return {
+        unmappable: `\`${claim.file}\` line ${claim.line} states a guarantee but names ` +
+            `no mechanism this check can resolve to a repository path, so it was ` +
+            `not assessed: "${quoteClaim(claim.text)}"`,
+    };
+}
+/**
+ * Cross-check every claim against the mechanism it names.
+ * @param root - Repository root
+ * @param claims - The claims read from the instruction surfaces
+ * @returns Evidence lines for overstatements, and unmappable-claim notes
+ */
+async function auditClaims(root, claims) {
+    const isIgnored = await loadIgnoreMatcher(root);
+    const audited = await Promise.all(claims.map(async (claim) => await auditOneClaim(root, claim, isIgnored)));
+    return {
+        violations: audited.flatMap(entry => entry.violation === undefined ? [] : [entry.violation]),
+        unmappable: audited.flatMap(entry => entry.unmappable === undefined ? [] : [entry.unmappable]),
+    };
+}
+/**
+ * Establish which of the four positive context-routing artifacts are present: a
+ * canonical `AGENTS.md`, a `CLAUDE.md` pointing at it, a parseable
+ * `.lisa.config.json`, and a wiki index.
+ * @param root - Repository root
+ * @returns The present and missing artifact descriptions
+ */
+async function inspectRoutingArtifacts(root) {
+    const agents = await readFileOrNull(root, "AGENTS.md");
+    const claude = await readFileOrNull(root, "CLAUDE.md");
+    const config = await readFileOrNull(root, ".lisa.config.json");
+    const wiki = await readFileOrNull(root, "wiki/index.md");
+    const checks = [
+        [agents !== null && agents.trim() !== "", "a canonical `AGENTS.md`"],
+        [
+            claude !== null && claude.includes("AGENTS.md"),
+            "a `CLAUDE.md` pointer to `AGENTS.md`",
+        ],
+        [
+            config !== null && isParseableJson(config),
+            "a parseable `.lisa.config.json`",
+        ],
+        [wiki !== null, "a `wiki/index.md` knowledge index"],
+    ];
+    return {
+        present: checks.flatMap(([ok, label]) => (ok ? [label] : [])),
+        missing: checks.flatMap(([ok, label]) => (ok ? [] : [label])),
+    };
+}
+/**
+ * Whether a string parses as JSON.
+ * @param source - Candidate JSON text
+ * @returns True when it parses
+ */
+function isParseableJson(source) {
+    try {
+        JSON.parse(source);
+        return true;
+    }
+    catch {
+        return false;
+    }
+}
+/**
+ * Build the rubric-shaped B6 finding from its evidence lines.
+ * @param violations - Evidence lines
+ * @returns The B6 finding
+ */
+function contextFinding(violations) {
+    const shown = violations.slice(0, MAX_EVIDENCE_LINES);
+    const overflow = violations.length - shown.length;
+    return {
+        blocker: CONTEXT_BLOCKER_ID,
+        invariant_violated: "the written word claims only what something actually enforces",
+        evidence: shown.join(" | ") +
+            (overflow > 0
+                ? ` | (+${overflow} further overstatement(s) of the same kind)`
+                : ""),
+        why_proof_missed: "documentation is never executed, so no test, lint rule, or review step " +
+            "ever observes that the guarantee it promises has no mechanism behind it " +
+            "— and an agent that reads the promise stops checking for itself",
+        root_correction: "either build the mechanism the sentence names, or rewrite the sentence " +
+            "to describe what is actually enforced, so the written word and the " +
+            "machinery say the same thing",
+        machinery_to_remove: [
+            "documented guarantees with no mechanism behind them, which cost trust " +
+                "every time an agent relies on one",
+        ],
+    };
+}
+/**
+ * Build the stated-reason SKIP for a repository whose context routing cannot be
+ * established: nothing overstated, but not enough written down to call it clean.
+ * @param artifacts - Which routing artifacts are present and missing
+ * @param unmappable - Claims that named no resolvable mechanism
+ * @returns The SKIP dimension record
+ */
+function skipRecord(artifacts, unmappable) {
+    return {
+        id: CONTEXT_ROUTING_DIMENSION_ID,
+        status: "SKIP",
+        findings: [
+            {
+                reason: "no documented guarantee was found to overstate anything, but this " +
+                    "repository is missing " +
+                    `${artifacts.missing.join(", ")}, so whether an agent can recover the ` +
+                    "real job from what is written down is not established either way",
+                skip: true,
+            },
+            ...informationalFindings(unmappable),
+        ],
+    };
+}
+/**
+ * Assess the context-routing dimension: B6, "documentation overstates enforced
+ * guarantees". Offline by construction — it reads only the repository's own
+ * instruction surfaces and the paths they name — and high-precision by design:
+ * it stands B6 only on a named mechanism that survives {@link classifyMechanism}
+ * and still demonstrably does not exist. The record's status is `WARN` rather
+ * than `FAIL`, but that is a confidence signal to a human reader only: a
+ * standing B6 blocker flips the repository to `NOT_READY` either way.
+ * @param root - Project root to assess
+ * @returns The context-routing dimension record
+ */
+export async function assessContextRoutingDimension(root) {
+    const claims = await collectClaims(root);
+    const { violations, unmappable } = await auditClaims(root, claims);
+    const artifacts = await inspectRoutingArtifacts(root);
+    if (violations.length > 0) {
+        return {
+            id: CONTEXT_ROUTING_DIMENSION_ID,
+            // `WARN` reports how much confidence an offline prose cross-check can
+            // carry — it does NOT soften the verdict. The blocker engine never reads
+            // this status, so the finding below flips the repository to `NOT_READY`
+            // exactly as a `FAIL` would; precision is what keeps that honest.
+            status: "WARN",
+            findings: [
+                contextFinding(violations),
+                ...informationalFindings(unmappable),
+            ],
+        };
+    }
+    if (artifacts.missing.length > 0) {
+        return skipRecord(artifacts, unmappable);
+    }
+    return {
+        id: CONTEXT_ROUTING_DIMENSION_ID,
+        status: "PASS",
+        findings: [
+            {
+                evidence: `Cross-checked ${claims.length} documented guarantee(s) across this ` +
+                    "repository's instruction surfaces: every one that names a mechanism " +
+                    `names one that exists. Context routing is carried by ` +
+                    `${artifacts.present.join(", ")}.`,
+                checked: [CONTEXT_BLOCKER_ID],
+            },
+            ...informationalFindings(unmappable),
+        ],
+    };
+}
+//# sourceMappingURL=doctor-readiness-context.js.map

package/dist/cli/doctor-readiness-context.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"doctor-readiness-context.js","sourceRoot":"","sources":["../../src/cli/doctor-readiness-context.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6BG;AACH,OAAO,EACL,aAAa,GAEd,MAAM,sCAAsC,CAAC;AAC9C,OAAO,EACL,iBAAiB,EAEjB,iBAAiB,GAClB,MAAM,0CAA0C,CAAC;AAClD,OAAO,EACL,qBAAqB,EACrB,cAAc,GACf,MAAM,8BAA8B,CAAC;AAGtC,4EAA4E;AAC5E,MAAM,CAAC,MAAM,4BAA4B,GAAG,iBAAiB,CAAC;AAE9D,8EAA8E;AAC9E,MAAM,kBAAkB,GAAG,IAAI,CAAC;AAEhC,8EAA8E;AAC9E,MAAM,kBAAkB,GAAG,EAAE,CAAC;AAE9B,4DAA4D;AAC5D,MAAM,gBAAgB,GAAG,GAAG,CAAC;AAQ7B;;;;GAIG;AACH,SAAS,UAAU,CAAC,IAAY;IAC9B,OAAO,IAAI,CAAC,MAAM,GAAG,gBAAgB;QACnC,CAAC,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,gBAAgB,CAAC,CAAC,OAAO,EAAE,GAAG;QACjD,CAAC,CAAC,IAAI,CAAC;AACX,CAAC;AAQD;;;;;;;;;;;;GAYG;AACH,KAAK,UAAU,aAAa,CAC1B,IAAY,EACZ,KAAuB,EACvB,SAAwB;IAExB,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,GAAG,CAChC,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,KAAK,EAAC,SAAS,EAAC,EAAE,CAAC,CAAC;QACvC,SAAS;QACT,OAAO,EAAE,MAAM,iBAAiB,CAAC,IAAI,EAAE,SAAS,EAAE,SAAS,CAAC;KAC7D,CAAC,CAAC,CACJ,CAAC;IACF,MAAM,OAAO,GAAG,QAAQ;SACrB,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,OAAO,KAAK,SAAS,CAAC;SAC5C,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;IACjC,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACvB,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,KAAK,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC9D,OAAO;YACL,SAAS,EACP,KAAK,KAAK,CAAC,IAAI,WAAW,KAAK,CAAC,IAAI,yBAAyB;gBAC7D,GAAG,KAAK,6CAA6C;gBACrD,IAAI,UAAU,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG;SAChC,CAAC;IACJ,CAAC;IACD,IAAI,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,OAAO,KAAK,SAAS,CAAC,EAAE,CAAC;QACxD,OAAO,EAAE,CAAC;IACZ,CAAC;IACD,OAAO;QACL,UAAU,EACR,KAAK,KAAK,CAAC,IAAI,WAAW,KAAK,CAAC,IAAI,gCAAgC;YACpE,sEAAsE;YACtE,kBAAkB,UAAU,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG;KAC9C,CAAC;AACJ,CAAC;AAED;;;;;GAKG;AACH,KAAK,UAAU,WAAW,CACxB,IAAY,EACZ,MAAmC;IAEnC,MAAM,SAAS,GAAG,MAAM,iBAAiB,CAAC,IAAI,CAAC,CAAC;IAChD,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,GAAG,CAC/B,MAAM,CAAC,GAAG,CAAC,KAAK,EAAC,KAAK,EAAC,EAAE,CAAC,MAAM,aAAa,CAAC,IAAI,EAAE,KAAK,EAAE,SAAS,CAAC,CAAC,CACvE,CAAC;IACF,OAAO;QACL,UAAU,EAAE,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAClC,KAAK,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,SAAS,CAAC,CACvD;QACD,UAAU,EAAE,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAClC,KAAK,CAAC,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,UAAU,CAAC,CACzD;KACF,CAAC;AACJ,CAAC;AAED;;;;;;GAMG;AACH,KAAK,UAAU,uBAAuB,CACpC,IAAY;IAEZ,MAAM,MAAM,GAAG,MAAM,cAAc,CAAC,IAAI,EAAE,WAAW,CAAC,CAAC;IACvD,MAAM,MAAM,GAAG,MAAM,cAAc,CAAC,IAAI,EAAE,WAAW,CAAC,CAAC;IACvD,MAAM,MAAM,GAAG,MAAM,cAAc,CAAC,IAAI,EAAE,mBAAmB,CAAC,CAAC;IAC/D,MAAM,IAAI,GAAG,MAAM,cAAc,CAAC,IAAI,EAAE,eAAe,CAAC,CAAC;IACzD,MAAM,MAAM,GAA4C;QACtD,CAAC,MAAM,KAAK,IAAI,IAAI,MAAM,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,yBAAyB,CAAC;QACpE;YACE,MAAM,KAAK,IAAI,IAAI,MAAM,CAAC,QAAQ,CAAC,WAAW,CAAC;YAC/C,sCAAsC;SACvC;QACD;YACE,MAAM,KAAK,IAAI,IAAI,eAAe,CAAC,MAAM,CAAC;YAC1C,iCAAiC;SAClC;QACD,CAAC,IAAI,KAAK,IAAI,EAAE,mCAAmC,CAAC;KACrD,CAAC;IACF,OAAO;QACL,OAAO,EAAE,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;QAC7D,OAAO,EAAE,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC;KAC9D,CAAC;AACJ,CAAC;AAED;;;;GAIG;AACH,SAAS,eAAe,CAAC,MAAc;IACrC,IAAI,CAAC;QACH,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QACnB,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,SAAS,cAAc,CACrB,UAA6B;IAE7B,MAAM,KAAK,GAAG,UAAU,CAAC,KAAK,CAAC,CAAC,EAAE,kBAAkB,CAAC,CAAC;IACtD,MAAM,QAAQ,GAAG,UAAU,CAAC,MAAM,GAAG,KAAK,CAAC,MAAM,CAAC;IAClD,OAAO;QACL,OAAO,EAAE,kBAAkB;QAC3B,kBAAkB,EAChB,+DAA+D;QACjE,QAAQ,EACN,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC;YACjB,CAAC,QAAQ,GAAG,CAAC;gBACX,CAAC,CAAC,QAAQ,QAAQ,6CAA6C;gBAC/D,CAAC,CAAC,EAAE,CAAC;QACT,gBAAgB,EACd,yEAAyE;YACzE,0EAA0E;YAC1E,iEAAiE;QACnE,eAAe,EACb,yEAAyE;YACzE,qEAAqE;YACrE,8BAA8B;QAChC,mBAAmB,EAAE;YACnB,wEAAwE;gBACtE,mCAAmC;SACtC;KACF,CAAC;AACJ,CAAC;AAED;;;;;;GAMG;AACH,SAAS,UAAU,CACjB,SAA2B,EAC3B,UAA6B;IAE7B,OAAO;QACL,EAAE,EAAE,4BAA4B;QAChC,MAAM,EAAE,MAAM;QACd,QAAQ,EAAE;YACR;gBACE,MAAM,EACJ,oEAAoE;oBACpE,wBAAwB;oBACxB,GAAG,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,wCAAwC;oBACvE,kEAAkE;gBACpE,IAAI,EAAE,IAAI;aACX;YACD,GAAG,qBAAqB,CAAC,UAAU,CAAC;SACrC;KACF,CAAC;AACJ,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,CAAC,KAAK,UAAU,6BAA6B,CACjD,IAAY;IAEZ,MAAM,MAAM,GAAG,MAAM,aAAa,CAAC,IAAI,CAAC,CAAC;IACzC,MAAM,EAAE,UAAU,EAAE,UAAU,EAAE,GAAG,MAAM,WAAW,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IACnE,MAAM,SAAS,GAAG,MAAM,uBAAuB,CAAC,IAAI,CAAC,CAAC;IACtD,IAAI,UAAU,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC1B,OAAO;YACL,EAAE,EAAE,4BAA4B;YAChC,sEAAsE;YACtE,yEAAyE;YACzE,wEAAwE;YACxE,kEAAkE;YAClE,MAAM,EAAE,MAAM;YACd,QAAQ,EAAE;gBACR,cAAc,CAAC,UAAU,CAAC;gBAC1B,GAAG,qBAAqB,CAAC,UAAU,CAAC;aACrC;SACF,CAAC;IACJ,CAAC;IACD,IAAI,SAAS,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACjC,OAAO,UAAU,CAAC,SAAS,EAAE,UAAU,CAAC,CAAC;IAC3C,CAAC;IACD,OAAO;QACL,EAAE,EAAE,4BAA4B;QAChC,MAAM,EAAE,MAAM;QACd,QAAQ,EAAE;YACR;gBACE,QAAQ,EACN,iBAAiB,MAAM,CAAC,MAAM,uCAAuC;oBACrE,sEAAsE;oBACtE,uDAAuD;oBACvD,GAAG,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG;gBACpC,OAAO,EAAE,CAAC,kBAAkB,CAAC;aAC9B;YACD,GAAG,qBAAqB,CAAC,UAAU,CAAC;SACrC;KACF,CAAC;AACJ,CAAC"}

package/dist/cli/doctor-readiness-delivery.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"doctor-readiness-delivery.d.ts","sourceRoot":"","sources":["../../src/cli/doctor-readiness-delivery.ts"],"names":[],"mappings":"AAmCA,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,6BAA6B,CAAC;AAC5E,OAAO,EACL,KAAK,cAAc,EAEpB,MAAM,iCAAiC,CAAC;AAEzC,+EAA+E;AAC/E,eAAO,MAAM,+BAA+B,uBAAuB,CAAC;AAgPpE;;;;;;;;;GASG;AACH,wBAAsB,gCAAgC,CACpD,IAAI,EAAE,MAAM,EACZ,eAAe,CAAC,EAAE,SAAS,cAAc,EAAE,GAC1C,OAAO,CAAC,wBAAwB,CAAC,CAiBnC"}
+{"version":3,"file":"doctor-readiness-delivery.d.ts","sourceRoot":"","sources":["../../src/cli/doctor-readiness-delivery.ts"],"names":[],"mappings":"AAoCA,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,6BAA6B,CAAC;AAC5E,OAAO,EACL,KAAK,cAAc,EAEpB,MAAM,iCAAiC,CAAC;AAEzC,+EAA+E;AAC/E,eAAO,MAAM,+BAA+B,uBAAuB,CAAC;AAmOpE;;;;;;;;;GASG;AACH,wBAAsB,gCAAgC,CACpD,IAAI,EAAE,MAAM,EACZ,eAAe,CAAC,EAAE,SAAS,cAAc,EAAE,GAC1C,OAAO,CAAC,wBAAwB,CAAC,CAiBnC"}

package/dist/cli/doctor-readiness-delivery.js

@@ -25,6 +25,7 @@
  * @module cli/doctor-readiness-delivery
  */
 import { detectCredentialFindings, } from "./doctor-readiness-credentials.js";
+import { informationalFindings } from "./doctor-readiness-shared.js";
 import { assessReleasePath, PROMOTION_ACTION, } from "./doctor-readiness-release-path.js";
 import { parseRepositoryWorkflows, } from "./doctor-readiness-workflows.js";
 /** The delivery/authority readiness dimension id (readiness-rubric, RRR-1). */
@@ -93,16 +94,6 @@ function credentialFinding(violations) {
         ],
     };
 }
-/**
- * Wrap non-blocking observations as findings. They deliberately carry no
- * `blocker` key: naming one would stand a blocker up on an observation that was
- * never decidable offline.
- * @param notes - Informational lines
- * @returns Findings, one per note
- */
-function informationalFindings(notes) {
-    return notes.map(note => ({ observation: note, blocking: false }));
-}
 /**
  * Build the SKIP record for a repository whose release paths could not be
  * settled from the workflow files alone.

package/dist/cli/doctor-readiness-delivery.js.map

@@ -1 +1 @@
-{"version":3,"file":"doctor-readiness-delivery.js","sourceRoot":"","sources":["../../src/cli/doctor-readiness-delivery.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AACH,OAAO,EAEL,wBAAwB,GACzB,MAAM,mCAAmC,CAAC;AAC3C,OAAO,EACL,iBAAiB,EACjB,gBAAgB,GAEjB,MAAM,oCAAoC,CAAC;AAE5C,OAAO,EAEL,wBAAwB,GACzB,MAAM,iCAAiC,CAAC;AAEzC,+EAA+E;AAC/E,MAAM,CAAC,MAAM,+BAA+B,GAAG,oBAAoB,CAAC;AAEpE,gFAAgF;AAChF,MAAM,kBAAkB,GAAG,IAAI,CAAC;AAEhC,+EAA+E;AAC/E,MAAM,qBAAqB,GAAG,IAAI,CAAC;AAUnC;;;;GAIG;AACH,SAAS,qBAAqB,CAC5B,SAAoC;IAEpC,MAAM,QAAQ,GAAkC,SAAS,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,CAC3E,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE;QAC1B,MAAM,OAAO,GAAG,iBAAiB,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC;QACjD,OAAO,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IAClC,CAAC,CAAC,CACH,CAAC;IACF,OAAO;QACL,UAAU,EAAE,QAAQ,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CACrC,OAAO,CAAC,IAAI,KAAK,WAAW,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,EAAE,CACvD;QACD,UAAU,EAAE,QAAQ,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CACrC,OAAO,CAAC,IAAI,KAAK,YAAY,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,CACtD;QACD,UAAU,EAAE,QAAQ,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC,OAAO,CAAC,IAAI,KAAK,OAAO,CAAC,CAAC,MAAM;QACvE,eAAe,EAAE,QAAQ,CAAC,MAAM;KACjC,CAAC;AACJ,CAAC;AAED;;;;GAIG;AACH,SAAS,cAAc,CACrB,UAA6B;IAE7B,OAAO;QACL,OAAO,EAAE,kBAAkB;QAC3B,kBAAkB,EAChB,2EAA2E;QAC7E,QAAQ,EAAE,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC;QAChC,gBAAgB,EACd,wEAAwE;YACxE,uEAAuE;YACvE,iDAAiD;QACnD,eAAe,EACb,yEAAyE;YACzE,6BAA6B,gBAAgB,6BAA6B;YAC1E,kCAAkC;QACpC,mBAAmB,EAAE;YACnB,yEAAyE;gBACvE,4CAA4C;SAC/C;KACF,CAAC;AACJ,CAAC;AAED;;;;GAIG;AACH,SAAS,iBAAiB,CACxB,UAA6B;IAE7B,OAAO;QACL,OAAO,EAAE,qBAAqB;QAC9B,kBAAkB,EAChB,wEAAwE;QAC1E,QAAQ,EAAE,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC;QAChC,gBAAgB,EACd,0EAA0E;YAC1E,2DAA2D;QAC7D,eAAe,EACb,2EAA2E;YAC3E,2EAA2E;YAC3E,wBAAwB;QAC1B,mBAAmB,EAAE;YACnB,yEAAyE;gBACvE,6BAA6B;SAChC;KACF,CAAC;AACJ,CAAC;AAED;;;;;;GAMG;AACH,SAAS,qBAAqB,CAC5B,KAAwB;IAExB,OAAO,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,EAAE,WAAW,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC;AACrE,CAAC;AAED;;;;;;GAMG;AACH,SAAS,gBAAgB,CACvB,OAA0B,EAC1B,WAA+B;IAE/B,OAAO;QACL,EAAE,EAAE,+BAA+B;QACnC,MAAM,EAAE,MAAM;QACd,QAAQ,EAAE;YACR,EAAE,MAAM,EAAE,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE;YAC3C,GAAG,qBAAqB,CAAC,WAAW,CAAC,aAAa,CAAC;SACpD;KACF,CAAC;AACJ,CAAC;AAED;;;;;;;GAOG;AACH,SAAS,WAAW,CAClB,OAA2B,EAC3B,SAAoC,EACpC,WAA+B;IAE/B,OAAO;QACL,EAAE,EAAE,+BAA+B;QACnC,MAAM,EAAE,MAAM;QACd,QAAQ,EAAE;YACR;gBACE,QAAQ,EACN,aAAa,OAAO,CAAC,eAAe,4BAA4B;oBAChE,GAAG,SAAS,CAAC,MAAM,gDAAgD;oBACnE,+CAA+C,gBAAgB,MAAM;oBACrE,kEAAkE;oBAClE,oBAAoB;gBACtB,OAAO,EAAE,CAAC,kBAAkB,EAAE,qBAAqB,CAAC;aACrD;YACD,GAAG,qBAAqB,CAAC,WAAW,CAAC,aAAa,CAAC;SACpD;KACF,CAAC;AACJ,CAAC;AAED;;;;;;;GAOG;AACH,SAAS,eAAe,CACtB,OAA2B,EAC3B,WAA+B;IAE/B,OAAO;QACL,EAAE,EAAE,+BAA+B;QACnC,MAAM,EAAE,MAAM;QACd,QAAQ,EAAE;YACR,GAAG,CAAC,OAAO,CAAC,UAAU,CAAC,MAAM,GAAG,CAAC;gBAC/B,CAAC,CAAC,CAAC,cAAc,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;gBACtC,CAAC,CAAC,EAAE,CAAC;YACP,GAAG,CAAC,WAAW,CAAC,UAAU,CAAC,MAAM,GAAG,CAAC;gBACnC,CAAC,CAAC,CAAC,iBAAiB,CAAC,WAAW,CAAC,UAAU,CAAC,CAAC;gBAC7C,CAAC,CAAC,EAAE,CAAC;YACP,0EAA0E;YAC1E,0EAA0E;YAC1E,mEAAmE;YACnE,GAAG,qBAAqB,CAAC,OAAO,CAAC,UAAU,CAAC;YAC5C,GAAG,qBAAqB,CAAC,WAAW,CAAC,aAAa,CAAC;SACpD;KACF,CAAC;AACJ,CAAC;AAED;;;GAGG;AACH,SAAS,iBAAiB;IACxB,OAAO;QACL,EAAE,EAAE,+BAA+B;QACnC,MAAM,EAAE,MAAM;QACd,QAAQ,EAAE;YACR;gBACE,MAAM,EACJ,kEAAkE;oBAClE,6DAA6D;oBAC7D,kDAAkD;gBACpD,IAAI,EAAE,IAAI;aACX;SACF;KACF,CAAC;AACJ,CAAC;AAED;;;;;GAKG;AACH,SAAS,mBAAmB,CAC1B,SAAoC,EACpC,WAA+B;IAE/B,OAAO;QACL,EAAE,EAAE,+BAA+B;QACnC,MAAM,EAAE,MAAM;QACd,QAAQ,EAAE;YACR;gBACE,MAAM,EACJ,eAAe,SAAS,CAAC,MAAM,+BAA+B;oBAC9D,mEAAmE;oBACnE,gEAAgE;oBAChE,6CAA6C;gBAC/C,IAAI,EAAE,IAAI;aACX;YACD,GAAG,qBAAqB,CAAC,WAAW,CAAC,aAAa,CAAC;SACpD;KACF,CAAC;AACJ,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,CAAC,KAAK,UAAU,gCAAgC,CACpD,IAAY,EACZ,eAA2C;IAE3C,MAAM,SAAS,GAAG,eAAe,IAAI,CAAC,MAAM,wBAAwB,CAAC,IAAI,CAAC,CAAC,CAAC;IAC5E,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC3B,OAAO,iBAAiB,EAAE,CAAC;IAC7B,CAAC;IACD,MAAM,OAAO,GAAG,qBAAqB,CAAC,SAAS,CAAC,CAAC;IACjD,MAAM,WAAW,GAAG,wBAAwB,CAAC,SAAS,CAAC,CAAC;IACxD,IAAI,OAAO,CAAC,UAAU,CAAC,MAAM,GAAG,CAAC,IAAI,WAAW,CAAC,UAAU,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACvE,OAAO,eAAe,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC;IAC/C,CAAC;IACD,IAAI,OAAO,CAAC,UAAU,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAClC,OAAO,gBAAgB,CAAC,OAAO,CAAC,UAAU,EAAE,WAAW,CAAC,CAAC;IAC3D,CAAC;IACD,IAAI,OAAO,CAAC,eAAe,KAAK,CAAC,EAAE,CAAC;QAClC,OAAO,mBAAmB,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC;IACrD,CAAC;IACD,OAAO,WAAW,CAAC,OAAO,EAAE,SAAS,EAAE,WAAW,CAAC,CAAC;AACtD,CAAC"}
+{"version":3,"file":"doctor-readiness-delivery.js","sourceRoot":"","sources":["../../src/cli/doctor-readiness-delivery.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AACH,OAAO,EAEL,wBAAwB,GACzB,MAAM,mCAAmC,CAAC;AAC3C,OAAO,EAAE,qBAAqB,EAAE,MAAM,8BAA8B,CAAC;AACrE,OAAO,EACL,iBAAiB,EACjB,gBAAgB,GAEjB,MAAM,oCAAoC,CAAC;AAE5C,OAAO,EAEL,wBAAwB,GACzB,MAAM,iCAAiC,CAAC;AAEzC,+EAA+E;AAC/E,MAAM,CAAC,MAAM,+BAA+B,GAAG,oBAAoB,CAAC;AAEpE,gFAAgF;AAChF,MAAM,kBAAkB,GAAG,IAAI,CAAC;AAEhC,+EAA+E;AAC/E,MAAM,qBAAqB,GAAG,IAAI,CAAC;AAUnC;;;;GAIG;AACH,SAAS,qBAAqB,CAC5B,SAAoC;IAEpC,MAAM,QAAQ,GAAkC,SAAS,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,CAC3E,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE;QAC1B,MAAM,OAAO,GAAG,iBAAiB,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC;QACjD,OAAO,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IAClC,CAAC,CAAC,CACH,CAAC;IACF,OAAO;QACL,UAAU,EAAE,QAAQ,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CACrC,OAAO,CAAC,IAAI,KAAK,WAAW,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,EAAE,CACvD;QACD,UAAU,EAAE,QAAQ,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CACrC,OAAO,CAAC,IAAI,KAAK,YAAY,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,CACtD;QACD,UAAU,EAAE,QAAQ,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC,OAAO,CAAC,IAAI,KAAK,OAAO,CAAC,CAAC,MAAM;QACvE,eAAe,EAAE,QAAQ,CAAC,MAAM;KACjC,CAAC;AACJ,CAAC;AAED;;;;GAIG;AACH,SAAS,cAAc,CACrB,UAA6B;IAE7B,OAAO;QACL,OAAO,EAAE,kBAAkB;QAC3B,kBAAkB,EAChB,2EAA2E;QAC7E,QAAQ,EAAE,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC;QAChC,gBAAgB,EACd,wEAAwE;YACxE,uEAAuE;YACvE,iDAAiD;QACnD,eAAe,EACb,yEAAyE;YACzE,6BAA6B,gBAAgB,6BAA6B;YAC1E,kCAAkC;QACpC,mBAAmB,EAAE;YACnB,yEAAyE;gBACvE,4CAA4C;SAC/C;KACF,CAAC;AACJ,CAAC;AAED;;;;GAIG;AACH,SAAS,iBAAiB,CACxB,UAA6B;IAE7B,OAAO;QACL,OAAO,EAAE,qBAAqB;QAC9B,kBAAkB,EAChB,wEAAwE;QAC1E,QAAQ,EAAE,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC;QAChC,gBAAgB,EACd,0EAA0E;YAC1E,2DAA2D;QAC7D,eAAe,EACb,2EAA2E;YAC3E,2EAA2E;YAC3E,wBAAwB;QAC1B,mBAAmB,EAAE;YACnB,yEAAyE;gBACvE,6BAA6B;SAChC;KACF,CAAC;AACJ,CAAC;AAED;;;;;;GAMG;AACH,SAAS,gBAAgB,CACvB,OAA0B,EAC1B,WAA+B;IAE/B,OAAO;QACL,EAAE,EAAE,+BAA+B;QACnC,MAAM,EAAE,MAAM;QACd,QAAQ,EAAE;YACR,EAAE,MAAM,EAAE,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE;YAC3C,GAAG,qBAAqB,CAAC,WAAW,CAAC,aAAa,CAAC;SACpD;KACF,CAAC;AACJ,CAAC;AAED;;;;;;;GAOG;AACH,SAAS,WAAW,CAClB,OAA2B,EAC3B,SAAoC,EACpC,WAA+B;IAE/B,OAAO;QACL,EAAE,EAAE,+BAA+B;QACnC,MAAM,EAAE,MAAM;QACd,QAAQ,EAAE;YACR;gBACE,QAAQ,EACN,aAAa,OAAO,CAAC,eAAe,4BAA4B;oBAChE,GAAG,SAAS,CAAC,MAAM,gDAAgD;oBACnE,+CAA+C,gBAAgB,MAAM;oBACrE,kEAAkE;oBAClE,oBAAoB;gBACtB,OAAO,EAAE,CAAC,kBAAkB,EAAE,qBAAqB,CAAC;aACrD;YACD,GAAG,qBAAqB,CAAC,WAAW,CAAC,aAAa,CAAC;SACpD;KACF,CAAC;AACJ,CAAC;AAED;;;;;;;GAOG;AACH,SAAS,eAAe,CACtB,OAA2B,EAC3B,WAA+B;IAE/B,OAAO;QACL,EAAE,EAAE,+BAA+B;QACnC,MAAM,EAAE,MAAM;QACd,QAAQ,EAAE;YACR,GAAG,CAAC,OAAO,CAAC,UAAU,CAAC,MAAM,GAAG,CAAC;gBAC/B,CAAC,CAAC,CAAC,cAAc,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;gBACtC,CAAC,CAAC,EAAE,CAAC;YACP,GAAG,CAAC,WAAW,CAAC,UAAU,CAAC,MAAM,GAAG,CAAC;gBACnC,CAAC,CAAC,CAAC,iBAAiB,CAAC,WAAW,CAAC,UAAU,CAAC,CAAC;gBAC7C,CAAC,CAAC,EAAE,CAAC;YACP,0EAA0E;YAC1E,0EAA0E;YAC1E,mEAAmE;YACnE,GAAG,qBAAqB,CAAC,OAAO,CAAC,UAAU,CAAC;YAC5C,GAAG,qBAAqB,CAAC,WAAW,CAAC,aAAa,CAAC;SACpD;KACF,CAAC;AACJ,CAAC;AAED;;;GAGG;AACH,SAAS,iBAAiB;IACxB,OAAO;QACL,EAAE,EAAE,+BAA+B;QACnC,MAAM,EAAE,MAAM;QACd,QAAQ,EAAE;YACR;gBACE,MAAM,EACJ,kEAAkE;oBAClE,6DAA6D;oBAC7D,kDAAkD;gBACpD,IAAI,EAAE,IAAI;aACX;SACF;KACF,CAAC;AACJ,CAAC;AAED;;;;;GAKG;AACH,SAAS,mBAAmB,CAC1B,SAAoC,EACpC,WAA+B;IAE/B,OAAO;QACL,EAAE,EAAE,+BAA+B;QACnC,MAAM,EAAE,MAAM;QACd,QAAQ,EAAE;YACR;gBACE,MAAM,EACJ,eAAe,SAAS,CAAC,MAAM,+BAA+B;oBAC9D,mEAAmE;oBACnE,gEAAgE;oBAChE,6CAA6C;gBAC/C,IAAI,EAAE,IAAI;aACX;YACD,GAAG,qBAAqB,CAAC,WAAW,CAAC,aAAa,CAAC;SACpD;KACF,CAAC;AACJ,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,CAAC,KAAK,UAAU,gCAAgC,CACpD,IAAY,EACZ,eAA2C;IAE3C,MAAM,SAAS,GAAG,eAAe,IAAI,CAAC,MAAM,wBAAwB,CAAC,IAAI,CAAC,CAAC,CAAC;IAC5E,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC3B,OAAO,iBAAiB,EAAE,CAAC;IAC7B,CAAC;IACD,MAAM,OAAO,GAAG,qBAAqB,CAAC,SAAS,CAAC,CAAC;IACjD,MAAM,WAAW,GAAG,wBAAwB,CAAC,SAAS,CAAC,CAAC;IACxD,IAAI,OAAO,CAAC,UAAU,CAAC,MAAM,GAAG,CAAC,IAAI,WAAW,CAAC,UAAU,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACvE,OAAO,eAAe,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC;IAC/C,CAAC;IACD,IAAI,OAAO,CAAC,UAAU,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAClC,OAAO,gBAAgB,CAAC,OAAO,CAAC,UAAU,EAAE,WAAW,CAAC,CAAC;IAC3D,CAAC;IACD,IAAI,OAAO,CAAC,eAAe,KAAK,CAAC,EAAE,CAAC;QAClC,OAAO,mBAAmB,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC;IACrD,CAAC;IACD,OAAO,WAAW,CAAC,OAAO,EAAE,SAAS,EAAE,WAAW,CAAC,CAAC;AACtD,CAAC"}

package/dist/cli/doctor-readiness-domain.d.ts

@@ -0,0 +1,17 @@
+import type { ReadinessDimensionRecord } from "./doctor-readiness-types.js";
+import { type ParsedWorkflow } from "./doctor-readiness-workflows.js";
+/** The domain-ownership readiness dimension id (readiness-rubric, RRR-1). */
+export declare const DOMAIN_OWNERSHIP_DIMENSION_ID = "domain-ownership";
+/**
+ * Assess the domain-ownership dimension: B1, "a realistic path causes silent
+ * data loss". Offline by construction — it reads only the repository's declared
+ * workflows — and deliberately conservative: it stands B1 only when a workflow
+ * file alone proves an irreversible data-destroying command runs unattended,
+ * ungated, and with no way back, and renders a stated-reason SKIP in every other
+ * case, including the clean one.
+ * @param root - Project root to assess
+ * @param parsedWorkflows - Pre-parsed workflows (default: parse `root`)
+ * @returns The domain-ownership dimension record
+ */
+export declare function assessDomainOwnershipDimension(root: string, parsedWorkflows?: readonly ParsedWorkflow[]): Promise<ReadinessDimensionRecord>;
+//# sourceMappingURL=doctor-readiness-domain.d.ts.map

package/dist/cli/doctor-readiness-domain.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"doctor-readiness-domain.d.ts","sourceRoot":"","sources":["../../src/cli/doctor-readiness-domain.ts"],"names":[],"mappings":"AAqCA,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,6BAA6B,CAAC;AAC5E,OAAO,EACL,KAAK,cAAc,EAGpB,MAAM,iCAAiC,CAAC;AAEzC,6EAA6E;AAC7E,eAAO,MAAM,6BAA6B,qBAAqB,CAAC;AAiKhE;;;;;;;;;;GAUG;AACH,wBAAsB,8BAA8B,CAClD,IAAI,EAAE,MAAM,EACZ,eAAe,CAAC,EAAE,SAAS,cAAc,EAAE,GAC1C,OAAO,CAAC,wBAAwB,CAAC,CAyBnC"}

package/dist/cli/doctor-readiness-domain.js

@@ -0,0 +1,197 @@
+/**
+ * The domain-ownership readiness producer — ship blocker B1 (PRD #1739, #1896).
+ *
+ * Dimension 3 of the `readiness-rubric` asks whether the business rules,
+ * glossary, and danger zones are owned and written down. B1 asks the sharpest
+ * consequence of getting that wrong: does a realistic path destroy or corrupt
+ * data with no error surfaced and no way back?
+ *
+ * That question is the hardest one in the rubric to answer honestly offline, and
+ * getting it wrong is expensive in exactly one direction. A standing blocker
+ * flips the whole repository to `NOT_READY` regardless of this dimension's
+ * status — `WARN` is a confidence signal to a human reader, never a softener —
+ * so a false B1 on an ordinary brownfield repository would destroy the trust
+ * this entire feature exists to build. Three disciplines follow:
+ *
+ * 1. **Only an unambiguous, automated, ungated, unrecoverable destruction of
+ *    data stands B1.** The command must irreversibly destroy *data* (not build
+ *    output), inside a job an automated trigger reaches, with no `if:`, no
+ *    `environment:`, no backup step beside it, and no checked-in runbook.
+ * 2. **Presence of a destructive surface is never a violation.** A `migrations/`
+ *    directory, a reversible migration that drops a table, a guarded command, a
+ *    manually dispatched workflow, or a command aimed at an ephemeral CI target
+ *    are all reported as observations at most.
+ * 3. **The clean case is a stated SKIP, never PASS.** Whether the danger zones
+ *    are genuinely owned and written down cannot be established by reading
+ *    files; claiming PASS would be the same overstatement B6 exists to catch.
+ * @module cli/doctor-readiness-domain
+ */
+import { describeCommands, hasCheckedInRunbook, looksEphemeral, scanCommands, } from "./doctor-readiness-operations.js";
+import { informationalFindings } from "./doctor-readiness-shared.js";
+import { parseRepositoryWorkflows, } from "./doctor-readiness-workflows.js";
+/** The domain-ownership readiness dimension id (readiness-rubric, RRR-1). */
+export const DOMAIN_OWNERSHIP_DIMENSION_ID = "domain-ownership";
+/** The ship blocker for a realistic path that causes silent data loss. */
+const DOMAIN_BLOCKER_ID = "B1";
+/** Most destructive commands quoted in one finding before summarizing. */
+const MAX_EVIDENCE_COMMANDS = 10;
+/**
+ * Commands that irreversibly destroy stored data. Every entry is a whole
+ * operation, not a keyword: `rm -rf` is deliberately absent because build
+ * outputs and caches dominate its real-world use, and a blocker built on it
+ * would fire on nearly every repository that cleans a `dist/` directory.
+ */
+const IRREVERSIBLE_DATA_OPS = [
+    /\bdrop\s+database\b/,
+    /\bdrop\s+schema\b/,
+    /\btruncate\s+table\b/,
+    /\baws\s+s3\s+rm\b[^\n]*--recursive\b/,
+    /\baws\s+s3\s+rb\b[^\n]*--force\b/,
+    /\baws\s+dynamodb\s+delete-table\b/,
+    /\baws\s+rds\s+delete-db-(instance|cluster)\b[^\n]*--skip-final-snapshot\b/,
+];
+/** Commands that create the way back: a copy taken before the destruction. */
+const RECOVERY_COMMANDS = [
+    /\bpg_dump\b/,
+    /\bmysqldump\b/,
+    /\bbackup\b/,
+    /\bsnapshot\b/,
+    /\baws\s+s3\s+sync\b/,
+];
+/**
+ * Whether a command irreversibly destroys data that is not obviously throwaway.
+ *
+ * The ephemeral screen reads the job's `env:` block alongside the command,
+ * because the evidence is routinely outside the command text: `psql
+ * "$DATABASE_URL" -c "DROP SCHEMA public CASCADE"` says nothing on its own,
+ * while the `DATABASE_URL` it expands to may point at `127.0.0.1` and settle the
+ * question outright.
+ * @param command - The lower-cased `run` command
+ * @param job - The job the command runs in
+ * @returns True when the command is an unambiguous data-destroying operation
+ */
+function destroysData(command, job) {
+    return (IRREVERSIBLE_DATA_OPS.some(pattern => pattern.test(command)) &&
+        !looksEphemeral(`${command}\n${job.env}`));
+}
+/**
+ * State why a job that boots its own `services:` containers cannot be settled.
+ * A job that starts its own database is operating on state it created moments
+ * earlier, so destroying it is not data loss — but proving *which* store the
+ * command targets is beyond an offline read, so this is deferred, not cleared.
+ * @param job - The job to consider
+ * @returns A stated reason, or null when the job starts no services
+ */
+function servicesDeferral(job) {
+    if (job.services.length === 0) {
+        return null;
+    }
+    return (`Job \`${job.id}\` runs a destructive data operation while starting its own ` +
+        `\`services:\` container(s) (${job.services.join(", ")}), which are created ` +
+        "and thrown away inside the run, so whether the command targets durable " +
+        "data is not established either way");
+}
+/**
+ * Whether a job takes its own copy before destroying anything — the way back,
+ * sitting right beside the danger.
+ * @param job - The parsed job
+ * @returns True when any step in the job looks like a backup
+ */
+function jobTakesBackup(job) {
+    return job.steps.some(step => RECOVERY_COMMANDS.some(pattern => pattern.test(step.run.toLowerCase())));
+}
+/**
+ * Build the rubric-shaped B1 finding from the destructive commands it cites.
+ * @param scan - The destructive-operation scan
+ * @returns The B1 finding
+ */
+function domainFinding(scan) {
+    return {
+        blocker: DOMAIN_BLOCKER_ID,
+        invariant_violated: "no realistic path destroys or corrupts data without surfacing an error " +
+            "and leaving a way back",
+        evidence: describeCommands(scan.ungated, MAX_EVIDENCE_COMMANDS),
+        why_proof_missed: "the destructive command is exercised only against real data, so no test " +
+            "run and no review step ever observes what it removes — the pipeline " +
+            "reports green whether the data survived or not",
+        root_correction: "put the operation behind an explicit gate (a job `environment:` or a " +
+            "confirmation input) and give it a way back — a snapshot taken in the " +
+            "same job, or a checked-in runbook naming the restore procedure",
+        machinery_to_remove: [
+            "any unattended destructive step that exists only because no retention " +
+                "or lifecycle policy was configured on the store itself",
+        ],
+    };
+}
+/**
+ * State why the dimension was not settled, naming what WAS looked at so an
+ * operator can tell "nothing to report" from "never looked".
+ * @param inspected - How many workflow files were read
+ * @returns The SKIP reason
+ */
+function skipReason(inspected) {
+    return (`Read ${inspected} workflow file(s) for irreversible data-destroying ` +
+        "operations and found none running unattended and ungated. Whether this " +
+        "repository's business rules, glossary, and danger zones are genuinely " +
+        "owned and written down cannot be established by reading files offline — " +
+        "that needs the agent-ready domain phase — so domain ownership is not " +
+        "established either way.");
+}
+/**
+ * Build the SKIP record, carrying every guarded destructive operation as an
+ * observation. Those observations name no `blocker`: they are the operator's
+ * map of where the danger lives, not a verdict about it.
+ * @param guarded - The destructive commands something already guards
+ * @param scan - The destructive-operation scan
+ * @param inspected - How many workflow files were read
+ * @returns The SKIP dimension record
+ */
+function skipRecord(guarded, scan, inspected) {
+    return {
+        id: DOMAIN_OWNERSHIP_DIMENSION_ID,
+        status: "SKIP",
+        findings: [
+            { reason: skipReason(inspected), skip: true },
+            ...informationalFindings([
+                ...guarded.map(entry => `\`${entry.workflow}\` job \`${entry.jobId}\` runs a destructive ` +
+                    `operation (\`${entry.command}\`) behind a gate, beside its own ` +
+                    "backup, or in a repository that checks in a recovery runbook, so " +
+                    "it was not treated as a silent-data-loss path"),
+                ...scan.unresolved,
+            ]),
+        ],
+    };
+}
+/**
+ * Assess the domain-ownership dimension: B1, "a realistic path causes silent
+ * data loss". Offline by construction — it reads only the repository's declared
+ * workflows — and deliberately conservative: it stands B1 only when a workflow
+ * file alone proves an irreversible data-destroying command runs unattended,
+ * ungated, and with no way back, and renders a stated-reason SKIP in every other
+ * case, including the clean one.
+ * @param root - Project root to assess
+ * @param parsedWorkflows - Pre-parsed workflows (default: parse `root`)
+ * @returns The domain-ownership dimension record
+ */
+export async function assessDomainOwnershipDimension(root, parsedWorkflows) {
+    const workflows = parsedWorkflows ?? (await parseRepositoryWorkflows(root));
+    const scan = scanCommands(workflows, destroysData, {
+        exemptJob: jobTakesBackup,
+        unresolvedJob: servicesDeferral,
+    });
+    // A checked-in runbook is a way back, so it clears the "no recovery" half of
+    // B1 for the whole repository — the blocker asks for BOTH halves at once.
+    const recoverable = await hasCheckedInRunbook(root);
+    if (scan.ungated.length === 0 || recoverable) {
+        return skipRecord(recoverable ? [...scan.gated, ...scan.ungated] : scan.gated, scan, workflows.length);
+    }
+    return {
+        id: DOMAIN_OWNERSHIP_DIMENSION_ID,
+        // `WARN` reports how much confidence an offline read can carry; it does NOT
+        // soften the verdict. The blocker engine never reads this status, so the
+        // finding below flips the repository to `NOT_READY` exactly as `FAIL` would.
+        status: "WARN",
+        findings: [domainFinding(scan), ...informationalFindings(scan.unresolved)],
+    };
+}
+//# sourceMappingURL=doctor-readiness-domain.js.map

package/dist/cli/doctor-readiness-domain.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"doctor-readiness-domain.js","sourceRoot":"","sources":["../../src/cli/doctor-readiness-domain.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AACH,OAAO,EACL,gBAAgB,EAChB,mBAAmB,EACnB,cAAc,EAEd,YAAY,GAEb,MAAM,kCAAkC,CAAC;AAC1C,OAAO,EAAE,qBAAqB,EAAE,MAAM,8BAA8B,CAAC;AAErE,OAAO,EAGL,wBAAwB,GACzB,MAAM,iCAAiC,CAAC;AAEzC,6EAA6E;AAC7E,MAAM,CAAC,MAAM,6BAA6B,GAAG,kBAAkB,CAAC;AAEhE,0EAA0E;AAC1E,MAAM,iBAAiB,GAAG,IAAI,CAAC;AAE/B,0EAA0E;AAC1E,MAAM,qBAAqB,GAAG,EAAE,CAAC;AAEjC;;;;;GAKG;AACH,MAAM,qBAAqB,GAAsB;IAC/C,qBAAqB;IACrB,mBAAmB;IACnB,sBAAsB;IACtB,sCAAsC;IACtC,kCAAkC;IAClC,mCAAmC;IACnC,2EAA2E;CAC5E,CAAC;AAEF,8EAA8E;AAC9E,MAAM,iBAAiB,GAAsB;IAC3C,aAAa;IACb,eAAe;IACf,YAAY;IACZ,cAAc;IACd,qBAAqB;CACtB,CAAC;AAEF;;;;;;;;;;;GAWG;AACH,SAAS,YAAY,CAAC,OAAe,EAAE,GAAsB;IAC3D,OAAO,CACL,qBAAqB,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAC5D,CAAC,cAAc,CAAC,GAAG,OAAO,KAAK,GAAG,CAAC,GAAG,EAAE,CAAC,CAC1C,CAAC;AACJ,CAAC;AAED;;;;;;;GAOG;AACH,SAAS,gBAAgB,CAAC,GAAsB;IAC9C,IAAI,GAAG,CAAC,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC9B,OAAO,IAAI,CAAC;IACd,CAAC;IACD,OAAO,CACL,SAAS,GAAG,CAAC,EAAE,8DAA8D;QAC7E,+BAA+B,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,uBAAuB;QAC7E,yEAAyE;QACzE,oCAAoC,CACrC,CAAC;AACJ,CAAC;AAED;;;;;GAKG;AACH,SAAS,cAAc,CAAC,GAAsB;IAC5C,OAAO,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAC3B,iBAAiB,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC,CAAC,CACxE,CAAC;AACJ,CAAC;AAED;;;;GAIG;AACH,SAAS,aAAa,CAAC,IAAmB;IACxC,OAAO;QACL,OAAO,EAAE,iBAAiB;QAC1B,kBAAkB,EAChB,yEAAyE;YACzE,wBAAwB;QAC1B,QAAQ,EAAE,gBAAgB,CAAC,IAAI,CAAC,OAAO,EAAE,qBAAqB,CAAC;QAC/D,gBAAgB,EACd,0EAA0E;YAC1E,sEAAsE;YACtE,gDAAgD;QAClD,eAAe,EACb,uEAAuE;YACvE,uEAAuE;YACvE,gEAAgE;QAClE,mBAAmB,EAAE;YACnB,wEAAwE;gBACtE,wDAAwD;SAC3D;KACF,CAAC;AACJ,CAAC;AAED;;;;;GAKG;AACH,SAAS,UAAU,CAAC,SAAiB;IACnC,OAAO,CACL,QAAQ,SAAS,qDAAqD;QACtE,yEAAyE;QACzE,wEAAwE;QACxE,0EAA0E;QAC1E,uEAAuE;QACvE,yBAAyB,CAC1B,CAAC;AACJ,CAAC;AAED;;;;;;;;GAQG;AACH,SAAS,UAAU,CACjB,OAAkC,EAClC,IAAmB,EACnB,SAAiB;IAEjB,OAAO;QACL,EAAE,EAAE,6BAA6B;QACjC,MAAM,EAAE,MAAM;QACd,QAAQ,EAAE;YACR,EAAE,MAAM,EAAE,UAAU,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE;YAC7C,GAAG,qBAAqB,CAAC;gBACvB,GAAG,OAAO,CAAC,GAAG,CACZ,KAAK,CAAC,EAAE,CACN,KAAK,KAAK,CAAC,QAAQ,YAAY,KAAK,CAAC,KAAK,wBAAwB;oBAClE,gBAAgB,KAAK,CAAC,OAAO,oCAAoC;oBACjE,mEAAmE;oBACnE,+CAA+C,CAClD;gBACD,GAAG,IAAI,CAAC,UAAU;aACnB,CAAC;SACH;KACF,CAAC;AACJ,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,CAAC,KAAK,UAAU,8BAA8B,CAClD,IAAY,EACZ,eAA2C;IAE3C,MAAM,SAAS,GACb,eAAe,IAAI,CAAC,MAAM,wBAAwB,CAAC,IAAI,CAAC,CAAC,CAAC;IAC5D,MAAM,IAAI,GAAG,YAAY,CAAC,SAAS,EAAE,YAAY,EAAE;QACjD,SAAS,EAAE,cAAc;QACzB,aAAa,EAAE,gBAAgB;KAChC,CAAC,CAAC;IACH,6EAA6E;IAC7E,0EAA0E;IAC1E,MAAM,WAAW,GAAG,MAAM,mBAAmB,CAAC,IAAI,CAAC,CAAC;IACpD,IAAI,IAAI,CAAC,OAAO,CAAC,MAAM,KAAK,CAAC,IAAI,WAAW,EAAE,CAAC;QAC7C,OAAO,UAAU,CACf,WAAW,CAAC,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,KAAK,EAAE,GAAG,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,EAC3D,IAAI,EACJ,SAAS,CAAC,MAAM,CACjB,CAAC;IACJ,CAAC;IACD,OAAO;QACL,EAAE,EAAE,6BAA6B;QACjC,4EAA4E;QAC5E,yEAAyE;QACzE,6EAA6E;QAC7E,MAAM,EAAE,MAAM;QACd,QAAQ,EAAE,CAAC,aAAa,CAAC,IAAI,CAAC,EAAE,GAAG,qBAAqB,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;KAC3E,CAAC;AACJ,CAAC"}

package/dist/cli/doctor-readiness-guardrails.d.ts

@@ -0,0 +1,15 @@
+import type { ReadinessDimensionRecord } from "./doctor-readiness-types.js";
+import { type ParsedWorkflow } from "./doctor-readiness-workflows.js";
+/** The feedback/guardrails readiness dimension id (readiness-rubric, RRR-1). */
+export declare const FEEDBACK_GUARDRAILS_DIMENSION_ID = "feedback-guardrails";
+/**
+ * Assess the feedback/guardrails dimension: B4, "a consequential operation has
+ * no gate and no recovery". Offline by construction, and honest about it — the
+ * environment-protection-rule half is reasoned-SKIPped in every record, so this
+ * dimension never reports `PASS`. B4 stands only on the file-provable subset.
+ * @param root - Project root to assess
+ * @param parsedWorkflows - Pre-parsed workflows (default: parse `root`)
+ * @returns The feedback/guardrails dimension record
+ */
+export declare function assessFeedbackGuardrailsDimension(root: string, parsedWorkflows?: readonly ParsedWorkflow[]): Promise<ReadinessDimensionRecord>;
+//# sourceMappingURL=doctor-readiness-guardrails.d.ts.map

package/dist/cli/doctor-readiness-guardrails.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"doctor-readiness-guardrails.d.ts","sourceRoot":"","sources":["../../src/cli/doctor-readiness-guardrails.ts"],"names":[],"mappings":"AAgCA,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,6BAA6B,CAAC;AAC5E,OAAO,EACL,KAAK,cAAc,EAGpB,MAAM,iCAAiC,CAAC;AAEzC,gFAAgF;AAChF,eAAO,MAAM,gCAAgC,wBAAwB,CAAC;AA0LtE;;;;;;;;GAQG;AACH,wBAAsB,iCAAiC,CACrD,IAAI,EAAE,MAAM,EACZ,eAAe,CAAC,EAAE,SAAS,cAAc,EAAE,GAC1C,OAAO,CAAC,wBAAwB,CAAC,CA6BnC"}