@codyswann/lisa 3.47.10 → 3.48.1

package/dist/cli/gate-report-config.js

@@ -0,0 +1,33 @@
+/**
+ * Read `.lisa.config.json`, degrading a refusal into a stated problem.
+ * @param registry - The shipped registry
+ * @param projectRoot - Project root
+ * @returns The parsed config
+ */
+export function readConfig(registry, projectRoot) {
+    try {
+        const { runner, gates } = registry.readGates(projectRoot);
+        return {
+            gates,
+            runner,
+            runnerFinding: { state: "verified", value: runner },
+            runnerSource: runner === registry.DEFAULT_RUNNER ? "default" : "declared",
+            problems: registry.validateGates(gates),
+        };
+    }
+    catch (error) {
+        const message = error instanceof Error ? error.message : String(error);
+        return {
+            gates: {},
+            runner: registry.DEFAULT_RUNNER,
+            runnerFinding: {
+                state: "unknown",
+                reason: "config-unreadable",
+                message,
+            },
+            runnerSource: "unknown",
+            problems: [message],
+        };
+    }
+}
+//# sourceMappingURL=gate-report-config.js.map

package/dist/cli/gate-report-config.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"gate-report-config.js","sourceRoot":"","sources":["../../src/cli/gate-report-config.ts"],"names":[],"mappings":"AAsBA;;;;;GAKG;AACH,MAAM,UAAU,UAAU,CACxB,QAA4B,EAC5B,WAAmB;IAEnB,IAAI,CAAC;QACH,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,GAAG,QAAQ,CAAC,SAAS,CAAC,WAAW,CAAC,CAAC;QAC1D,OAAO;YACL,KAAK;YACL,MAAM;YACN,aAAa,EAAE,EAAE,KAAK,EAAE,UAAU,EAAE,KAAK,EAAE,MAAM,EAAE;YACnD,YAAY,EAAE,MAAM,KAAK,QAAQ,CAAC,cAAc,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,UAAU;YACzE,QAAQ,EAAE,QAAQ,CAAC,aAAa,CAAC,KAAK,CAAC;SACxC,CAAC;IACJ,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,OAAO,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QACvE,OAAO;YACL,KAAK,EAAE,EAAE;YACT,MAAM,EAAE,QAAQ,CAAC,cAAc;YAC/B,aAAa,EAAE;gBACb,KAAK,EAAE,SAAS;gBAChB,MAAM,EAAE,mBAAmB;gBAC3B,OAAO;aACR;YACD,YAAY,EAAE,SAAS;YACvB,QAAQ,EAAE,CAAC,OAAO,CAAC;SACpB,CAAC;IACJ,CAAC;AACH,CAAC"}

package/dist/cli/gate-report-executors.d.ts

@@ -0,0 +1,62 @@
+import type { ExecutorEvidence } from "./gate-report-types.js";
+/** One project hook file, read and classified. */
+export interface HookFile {
+    /** Project-relative path, e.g. `.husky/pre-push`. */
+    readonly file: string;
+    /** Its contents, with comment lines blanked. */
+    readonly body: string;
+    /** The moments this hook fires at, sorted. */
+    readonly moments: readonly string[];
+    /** Moments it hands to the gate runner, sorted. Empty when it runs none. */
+    readonly gateRunnerMoments: readonly string[];
+    /** Gates it carries a `lisa_gate_covers`-guarded built-in step for. */
+    readonly builtinGates: readonly string[];
+}
+/** Everything the project's hooks were found to do. */
+export interface HookEvidence {
+    /** Hook files, sorted by name, so the report is stable across machines. */
+    readonly files: readonly HookFile[];
+}
+/** Inputs for one (gate, moment) executor lookup. */
+export interface ExecutorQuery {
+    /** The moment being reported. */
+    readonly moment: string;
+    /** The gate being reported. */
+    readonly gateId: string;
+    /** The task this gate resolves to, or null. */
+    readonly task: string | null;
+    /** Whether the settings file puts this pair into service. */
+    readonly declared: boolean;
+}
+/**
+ * Classify one hook file.
+ * @param file - Project-relative path
+ * @param raw - Raw file contents
+ * @returns The classified hook
+ */
+export declare function classifyHook(file: string, raw: string): HookFile;
+/**
+ * Read and classify every hook in `.husky`.
+ * @param projectRoot - Project root
+ * @returns Hook evidence, empty when the directory is absent
+ */
+export declare function collectHookEvidence(projectRoot: string): Promise<HookEvidence>;
+/**
+ * Whether a hook body invokes one task literally, outside the gate runner.
+ *
+ * Bounded on both sides on purpose. `test:cov` must not match `test:cov:unit`:
+ * they are different scripts, and reporting the wrong one as proof would
+ * manufacture exactly the green this report exists to withhold.
+ * @param body - Comment-stripped hook body
+ * @param task - The task to look for
+ * @returns True when the hook runs that exact task
+ */
+export declare function hookInvokesTask(body: string, task: string): boolean;
+/**
+ * Every executor proved for one gate at one moment.
+ * @param evidence - Hook evidence for the project
+ * @param query - The pair being reported
+ * @returns Executors, sorted by file then kind
+ */
+export declare function executorsFor(evidence: HookEvidence, query: ExecutorQuery): ExecutorEvidence[];
+//# sourceMappingURL=gate-report-executors.d.ts.map

package/dist/cli/gate-report-executors.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"gate-report-executors.d.ts","sourceRoot":"","sources":["../../src/cli/gate-report-executors.ts"],"names":[],"mappings":"AAwBA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,wBAAwB,CAAC;AA4C/D,kDAAkD;AAClD,MAAM,WAAW,QAAQ;IACvB,qDAAqD;IACrD,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,gDAAgD;IAChD,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,8CAA8C;IAC9C,QAAQ,CAAC,OAAO,EAAE,SAAS,MAAM,EAAE,CAAC;IACpC,4EAA4E;IAC5E,QAAQ,CAAC,iBAAiB,EAAE,SAAS,MAAM,EAAE,CAAC;IAC9C,uEAAuE;IACvE,QAAQ,CAAC,YAAY,EAAE,SAAS,MAAM,EAAE,CAAC;CAC1C;AAED,uDAAuD;AACvD,MAAM,WAAW,YAAY;IAC3B,2EAA2E;IAC3E,QAAQ,CAAC,KAAK,EAAE,SAAS,QAAQ,EAAE,CAAC;CACrC;AAED,qDAAqD;AACrD,MAAM,WAAW,aAAa;IAC5B,iCAAiC;IACjC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,+BAA+B;IAC/B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,+CAA+C;IAC/C,QAAQ,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,6DAA6D;IAC7D,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAC;CAC5B;AA2CD;;;;;GAKG;AACH,wBAAgB,YAAY,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,QAAQ,CAgBhE;AAED;;;;GAIG;AACH,wBAAsB,mBAAmB,CACvC,WAAW,EAAE,MAAM,GAClB,OAAO,CAAC,YAAY,CAAC,CAoBvB;AAED;;;;;;;;;GASG;AACH,wBAAgB,eAAe,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAOnE;AAqED;;;;;GAKG;AACH,wBAAgB,YAAY,CAC1B,QAAQ,EAAE,YAAY,EACtB,KAAK,EAAE,aAAa,GACnB,gBAAgB,EAAE,CAMpB"}

package/dist/cli/gate-report-executors.js

@@ -0,0 +1,218 @@
+/**
+ * What, in this project, would actually run a gate's task.
+ *
+ * Three kinds, and the difference between them is the report's central
+ * question. A `gate-runner` site reads the declaration — the hook shells
+ * `lisa-run-gates.mjs --moment=<moment>`, so changing the settings file changes
+ * what runs. A `hook-builtin` site does not: the shipped hooks carry a
+ * fallback step for a named gate, guarded by `lisa_gate_covers <gate>`, which
+ * stands down only when the declaration covered it and runs unconditionally
+ * otherwise. A `hook-literal` site is the same story without the marker — the
+ * command is simply written into the script.
+ *
+ * The last two are bucket B, the one an operator most needs and can least
+ * discover: the check IS running, so the repository looks healthy, and the
+ * configuration surface is a decoration.
+ *
+ * Everything here is read from files the project holds, so both answers are
+ * verified rather than inferred — including the negative. "No hook runs this"
+ * is a fact about `.husky/`, not a guess about CI.
+ * @module cli/gate-report-executors
+ */
+import { readdir, readFile } from "node:fs/promises";
+import * as path from "node:path";
+/** A hook that mentions this is shelling Lisa's gate runner. */
+const GATE_RUNNER_REFERENCE = "lisa-run-gates.mjs";
+/**
+ * The moments a hook hands to the gate runner.
+ *
+ * Scanned file-wide rather than line-wide, because the shipped hooks assign the
+ * runner to a shell variable several lines above the call site, then invoke
+ * `node "$GATE_RUNNER" --moment=push`. A same-line pattern matches neither
+ * half, and a report that found no gate runner in a repository whose hooks run
+ * one on every commit would be the exact "not present, therefore does not run"
+ * error this report exists to remove.
+ */
+const MOMENT_FLAG = /--moment=([A-Za-z0-9:_-]{1,64})/g;
+/**
+ * The handover marker guarding every built-in step in a shipped hook.
+ *
+ * `lisa_gate_covers <gate>` is the hook asking whether the gate runner already
+ * proved this property. Its presence is therefore proof of the opposite thing
+ * from what it reads like: a built-in step exists here, and it runs whenever
+ * the declaration does not cover it.
+ */
+const BUILTIN_MARKER = /lisa_gate_covers[ \t]{1,8}([a-z][a-z0-9-]{0,63})/g;
+/** Package-manager prefixes a hook may invoke a task through. */
+const RUNNER_PREFIX = String.raw `(?:\$RUNNER|\$\{RUNNER\}|npm run|pnpm run|yarn run|bun run|npm|yarn|bun|pnpm)`;
+/**
+ * The moment a git hook fires at, for hooks that name no moment themselves.
+ *
+ * `commit-msg` runs commitlint with no gate marker and no `--moment` flag, so
+ * without this it would contribute evidence to no moment at all. The mapping is
+ * git's own semantics, not a Lisa convention.
+ */
+const HOOK_NAME_MOMENTS = {
+    "pre-commit": "commit",
+    "commit-msg": "commit",
+    "prepare-commit-msg": "commit",
+    "pre-push": "push",
+};
+/**
+ * Order strings without mutating the caller's collection.
+ * @param values - Values to order
+ * @returns A new, sorted array
+ */
+function sorted(values) {
+    return [...values].sort((left, right) => left.localeCompare(right));
+}
+/**
+ * Drop shell comments so a commented-out step is never read as an executor.
+ *
+ * `.husky/pre-push` carries a worked example of a Lighthouse step inside a
+ * comment block. Counting that as proof the gate runs is exactly the class of
+ * error this report exists to refuse.
+ * @param body - Raw file contents
+ * @returns The same text with comment lines blanked
+ */
+function stripComments(body) {
+    return body
+        .split("\n")
+        .map(line => (/^\s{0,64}#/.test(line) ? "" : line))
+        .join("\n");
+}
+/**
+ * Every distinct capture of one global pattern, sorted.
+ * @param body - Text to scan
+ * @param pattern - A global regular expression with one capture group
+ * @returns Sorted, de-duplicated captures
+ */
+function captures(body, pattern) {
+    return sorted(new Set([...body.matchAll(pattern)]
+        .map(match => match[1])
+        .filter((value) => value !== undefined)));
+}
+/**
+ * Classify one hook file.
+ * @param file - Project-relative path
+ * @param raw - Raw file contents
+ * @returns The classified hook
+ */
+export function classifyHook(file, raw) {
+    const body = stripComments(raw);
+    const name = file.slice(file.lastIndexOf("/") + 1);
+    const gateRunnerMoments = body.includes(GATE_RUNNER_REFERENCE)
+        ? captures(body, MOMENT_FLAG)
+        : [];
+    const byName = HOOK_NAME_MOMENTS[name];
+    const allMoments = byName === undefined ? gateRunnerMoments : [...gateRunnerMoments, byName];
+    return {
+        file,
+        body,
+        moments: sorted(new Set(allMoments)),
+        gateRunnerMoments,
+        builtinGates: captures(body, BUILTIN_MARKER),
+    };
+}
+/**
+ * Read and classify every hook in `.husky`.
+ * @param projectRoot - Project root
+ * @returns Hook evidence, empty when the directory is absent
+ */
+export async function collectHookEvidence(projectRoot) {
+    const dir = path.join(projectRoot, ".husky");
+    const entries = await readdir(dir, { withFileTypes: true }).catch(() => undefined);
+    if (entries === undefined)
+        return { files: [] };
+    const names = sorted(entries
+        .filter(entry => entry.isFile() && !entry.name.startsWith("."))
+        .map(entry => entry.name));
+    const read = await Promise.all(names.map(async (name) => {
+        const raw = await readFile(path.join(dir, name), "utf8").catch(() => undefined);
+        return raw === undefined ? null : classifyHook(`.husky/${name}`, raw);
+    }));
+    return { files: read.filter((hook) => hook !== null) };
+}
+/**
+ * Whether a hook body invokes one task literally, outside the gate runner.
+ *
+ * Bounded on both sides on purpose. `test:cov` must not match `test:cov:unit`:
+ * they are different scripts, and reporting the wrong one as proof would
+ * manufacture exactly the green this report exists to withhold.
+ * @param body - Comment-stripped hook body
+ * @param task - The task to look for
+ * @returns True when the hook runs that exact task
+ */
+export function hookInvokesTask(body, task) {
+    const escaped = task.replace(/[.*+?^${}()|[\]\\]/g, String.raw `\$&`);
+    const pattern = new RegExp(String.raw `(?:^|[\s;&|(])${RUNNER_PREFIX}\s+["']?${escaped}["']?(?=$|[\s"';|&)])`, "m");
+    return pattern.test(body);
+}
+/**
+ * The evidence a hook contributes for a gate no marker of its names.
+ * @param hook - The hook file
+ * @param task - The task this gate resolves to, or null
+ * @returns Zero or one piece of evidence
+ */
+function unmarkedEvidence(hook, task) {
+    if (task === null || !hookInvokesTask(hook.body, task))
+        return [];
+    return [
+        {
+            kind: "hook-literal",
+            file: hook.file,
+            detail: `${hook.file} runs \`${task}\` as a written-in step, whatever the settings file says`,
+        },
+    ];
+}
+/**
+ * The gate-runner evidence a hook contributes, when the pair is declared.
+ * @param hook - The hook file
+ * @param query - The pair being reported
+ * @returns Zero or one piece of evidence
+ */
+function runnerEvidence(hook, query) {
+    if (!query.declared || !hook.gateRunnerMoments.includes(query.moment)) {
+        return [];
+    }
+    return [
+        {
+            kind: "gate-runner",
+            file: hook.file,
+            detail: `${hook.file} runs the gate runner at ${query.moment}, which reads this declaration`,
+        },
+    ];
+}
+/**
+ * One hook's contribution to one (gate, moment) pair.
+ * @param hook - The hook file
+ * @param query - The pair being reported
+ * @returns Evidence from this hook alone
+ */
+function evidenceFrom(hook, query) {
+    const runner = runnerEvidence(hook, query);
+    if (!hook.moments.includes(query.moment))
+        return runner;
+    if (!hook.builtinGates.includes(query.gateId)) {
+        return [...runner, ...unmarkedEvidence(hook, query.task)];
+    }
+    return [
+        ...runner,
+        {
+            kind: "hook-builtin",
+            file: hook.file,
+            detail: `${hook.file} carries a built-in ${query.gateId} step that runs unless the declaration covers it`,
+        },
+    ];
+}
+/**
+ * Every executor proved for one gate at one moment.
+ * @param evidence - Hook evidence for the project
+ * @param query - The pair being reported
+ * @returns Executors, sorted by file then kind
+ */
+export function executorsFor(evidence, query) {
+    const found = evidence.files.flatMap(hook => evidenceFrom(hook, query));
+    return [...found].sort((left, right) => left.file.localeCompare(right.file) || left.kind.localeCompare(right.kind));
+}
+//# sourceMappingURL=gate-report-executors.js.map

package/dist/cli/gate-report-executors.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"gate-report-executors.js","sourceRoot":"","sources":["../../src/cli/gate-report-executors.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AACrD,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAIlC,gEAAgE;AAChE,MAAM,qBAAqB,GAAG,oBAAoB,CAAC;AAEnD;;;;;;;;;GASG;AACH,MAAM,WAAW,GAAG,kCAAkC,CAAC;AAEvD;;;;;;;GAOG;AACH,MAAM,cAAc,GAAG,mDAAmD,CAAC;AAE3E,iEAAiE;AACjE,MAAM,aAAa,GAAG,MAAM,CAAC,GAAG,CAAA,+EAA+E,CAAC;AAEhH;;;;;;GAMG;AACH,MAAM,iBAAiB,GAAqC;IAC1D,YAAY,EAAE,QAAQ;IACtB,YAAY,EAAE,QAAQ;IACtB,oBAAoB,EAAE,QAAQ;IAC9B,UAAU,EAAE,MAAM;CACnB,CAAC;AAkCF;;;;GAIG;AACH,SAAS,MAAM,CAAC,MAAwB;IACtC,OAAO,CAAC,GAAG,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC,CAAC;AACtE,CAAC;AAED;;;;;;;;GAQG;AACH,SAAS,aAAa,CAAC,IAAY;IACjC,OAAO,IAAI;SACR,KAAK,CAAC,IAAI,CAAC;SACX,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;SAClD,IAAI,CAAC,IAAI,CAAC,CAAC;AAChB,CAAC;AAED;;;;;GAKG;AACH,SAAS,QAAQ,CAAC,IAAY,EAAE,OAAe;IAC7C,OAAO,MAAM,CACX,IAAI,GAAG,CACL,CAAC,GAAG,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;SACxB,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;SACtB,MAAM,CAAC,CAAC,KAAK,EAAmB,EAAE,CAAC,KAAK,KAAK,SAAS,CAAC,CAC3D,CACF,CAAC;AACJ,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,YAAY,CAAC,IAAY,EAAE,GAAW;IACpD,MAAM,IAAI,GAAG,aAAa,CAAC,GAAG,CAAC,CAAC;IAChC,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC;IACnD,MAAM,iBAAiB,GAAG,IAAI,CAAC,QAAQ,CAAC,qBAAqB,CAAC;QAC5D,CAAC,CAAC,QAAQ,CAAC,IAAI,EAAE,WAAW,CAAC;QAC7B,CAAC,CAAC,EAAE,CAAC;IACP,MAAM,MAAM,GAAG,iBAAiB,CAAC,IAAI,CAAC,CAAC;IACvC,MAAM,UAAU,GACd,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,iBAAiB,CAAC,CAAC,CAAC,CAAC,GAAG,iBAAiB,EAAE,MAAM,CAAC,CAAC;IAC5E,OAAO;QACL,IAAI;QACJ,IAAI;QACJ,OAAO,EAAE,MAAM,CAAC,IAAI,GAAG,CAAC,UAAU,CAAC,CAAC;QACpC,iBAAiB;QACjB,YAAY,EAAE,QAAQ,CAAC,IAAI,EAAE,cAAc,CAAC;KAC7C,CAAC;AACJ,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,mBAAmB,CACvC,WAAmB;IAEnB,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,QAAQ,CAAC,CAAC;IAC7C,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,GAAG,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC,KAAK,CAC/D,GAAG,EAAE,CAAC,SAAS,CAChB,CAAC;IACF,IAAI,OAAO,KAAK,SAAS;QAAE,OAAO,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC;IAChD,MAAM,KAAK,GAAG,MAAM,CAClB,OAAO;SACJ,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,MAAM,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC;SAC9D,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAC5B,CAAC;IACF,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,GAAG,CAC5B,KAAK,CAAC,GAAG,CAAC,KAAK,EAAC,IAAI,EAAC,EAAE;QACrB,MAAM,GAAG,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,CAAC,KAAK,CAC5D,GAAG,EAAE,CAAC,SAAS,CAChB,CAAC;QACF,OAAO,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,YAAY,CAAC,UAAU,IAAI,EAAE,EAAE,GAAG,CAAC,CAAC;IACxE,CAAC,CAAC,CACH,CAAC;IACF,OAAO,EAAE,KAAK,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC,IAAI,EAAoB,EAAE,CAAC,IAAI,KAAK,IAAI,CAAC,EAAE,CAAC;AAC3E,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,eAAe,CAAC,IAAY,EAAE,IAAY;IACxD,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,qBAAqB,EAAE,MAAM,CAAC,GAAG,CAAA,KAAK,CAAC,CAAC;IACrE,MAAM,OAAO,GAAG,IAAI,MAAM,CACxB,MAAM,CAAC,GAAG,CAAA,iBAAiB,aAAa,WAAW,OAAO,uBAAuB,EACjF,GAAG,CACJ,CAAC;IACF,OAAO,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC5B,CAAC;AAED;;;;;GAKG;AACH,SAAS,gBAAgB,CACvB,IAAc,EACd,IAAmB;IAEnB,IAAI,IAAI,KAAK,IAAI,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC;QAAE,OAAO,EAAE,CAAC;IAClE,OAAO;QACL;YACE,IAAI,EAAE,cAAc;YACpB,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,MAAM,EAAE,GAAG,IAAI,CAAC,IAAI,WAAW,IAAI,0DAA0D;SAC9F;KACF,CAAC;AACJ,CAAC;AAED;;;;;GAKG;AACH,SAAS,cAAc,CACrB,IAAc,EACd,KAAoB;IAEpB,IAAI,CAAC,KAAK,CAAC,QAAQ,IAAI,CAAC,IAAI,CAAC,iBAAiB,CAAC,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC;QACtE,OAAO,EAAE,CAAC;IACZ,CAAC;IACD,OAAO;QACL;YACE,IAAI,EAAE,aAAa;YACnB,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,MAAM,EAAE,GAAG,IAAI,CAAC,IAAI,4BAA4B,KAAK,CAAC,MAAM,gCAAgC;SAC7F;KACF,CAAC;AACJ,CAAC;AAED;;;;;GAKG;AACH,SAAS,YAAY,CACnB,IAAc,EACd,KAAoB;IAEpB,MAAM,MAAM,GAAG,cAAc,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;IAC3C,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC;QAAE,OAAO,MAAM,CAAC;IACxD,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC;QAC9C,OAAO,CAAC,GAAG,MAAM,EAAE,GAAG,gBAAgB,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC;IAC5D,CAAC;IACD,OAAO;QACL,GAAG,MAAM;QACT;YACE,IAAI,EAAE,cAAc;YACpB,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,MAAM,EAAE,GAAG,IAAI,CAAC,IAAI,uBAAuB,KAAK,CAAC,MAAM,kDAAkD;SAC1G;KACF,CAAC;AACJ,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,YAAY,CAC1B,QAAsB,EACtB,KAAoB;IAEpB,MAAM,KAAK,GAAG,QAAQ,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC,YAAY,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC,CAAC;IACxE,OAAO,CAAC,GAAG,KAAK,CAAC,CAAC,IAAI,CACpB,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CACd,IAAI,CAAC,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,IAAI,CAAC,CAC7E,CAAC;AACJ,CAAC"}

package/dist/cli/gate-report-preview.d.ts

@@ -0,0 +1,27 @@
+/**
+ * Render the gate report as a standalone HTML page.
+ *
+ * Deliberately NOT part of `ui/index.html`. That file is one 13,000-line
+ * document with no build step and a known hazard where concurrent edits merge
+ * badly, and where the report should finally live is an open question nobody
+ * has ruled on. A separate page sidesteps both: it is a viewing surface for a
+ * payload that already exists, not a decision about the console's structure.
+ *
+ * Pure and total — report in, string out, no I/O — so the same emitter output
+ * always produces the same bytes.
+ *
+ * The rendering rule that matters: `unknown` must never look like a pass. A
+ * cell this run could not determine is drawn in its own hatched, muted style
+ * with its own label, and the header counts it in a band of its own rather
+ * than folding it into a green total.
+ * @module cli/gate-report-preview
+ */
+import type { GateReport } from "./gate-report-types.js";
+/**
+ * Render the whole page.
+ * @param report - The emitter's output
+ * @param projectLabel - How to name the project being reported on
+ * @returns A complete, self-contained HTML document
+ */
+export declare function renderGateReportPreview(report: GateReport, projectLabel: string): string;
+//# sourceMappingURL=gate-report-preview.d.ts.map

package/dist/cli/gate-report-preview.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"gate-report-preview.d.ts","sourceRoot":"","sources":["../../src/cli/gate-report-preview.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AACH,OAAO,KAAK,EAGV,UAAU,EAEX,MAAM,wBAAwB,CAAC;AA+LhC;;;;;GAKG;AACH,wBAAgB,uBAAuB,CACrC,MAAM,EAAE,UAAU,EAClB,YAAY,EAAE,MAAM,GACnB,MAAM,CAgDR"}

package/dist/cli/gate-report-preview.js

@@ -0,0 +1,286 @@
+/** How each declaration state is written and coloured. */
+const DECLARATION_LABELS = {
+    required: "must",
+    optional: "tells",
+    off: "off",
+    "not-declared": "not declared",
+};
+/** Escape text for HTML text nodes and attribute values. */
+const ESCAPES = {
+    "&": "&",
+    "<": "&lt;",
+    ">": "&gt;",
+    '"': "&quot;",
+    "'": "&#39;",
+};
+/**
+ * Escape a string for interpolation into HTML.
+ * @param value - Raw text
+ * @returns Escaped text
+ */
+function escapeHtml(value) {
+    return value.replace(/[&<>"']/g, character => ESCAPES[character] ?? character);
+}
+/**
+ * The bucket chip for one cell, or the honest refusal to classify it.
+ * @param bucket - The cell's bucket finding
+ * @returns One chip of HTML
+ */
+function bucketChip(bucket) {
+    if (bucket.state === "not-applicable")
+        return "";
+    if (bucket.state === "unknown") {
+        return `<span class="chip unknown" title="${escapeHtml(bucket.message)}">not checked here</span>`;
+    }
+    const titles = {
+        A: "declared, and an executor resolves the declaration",
+        B: "an executor exists, but no declaration reaches it",
+        C: "a declaration exists that nothing can execute",
+        D: "neither declared nor executed",
+    };
+    return `<span class="chip b-${bucket.value}" title="${escapeHtml(titles[bucket.value] ?? "")}">${bucket.value}</span>`;
+}
+/**
+ * One matrix cell.
+ * @param cell - The (gate, moment) pair
+ * @returns A table cell
+ */
+function momentCell(cell) {
+    if (!cell.legal) {
+        return '<td class="m illegal" title="the registry does not permit declaring this gate here"></td>';
+    }
+    const label = DECLARATION_LABELS[cell.declaration] ?? cell.declaration;
+    const state = cell.declaration === "not-declared" ? "undeclared" : cell.declaration;
+    return `<td class="m"><span class="state ${state}">${escapeHtml(label)}</span>${bucketChip(cell.bucket)}</td>`;
+}
+/**
+ * Whether `package.json` has the command, said in three states.
+ * @param cell - The cell carrying the command
+ * @returns One chip of HTML
+ */
+function commandChip(cell) {
+    if (cell.commandExists.state === "unknown") {
+        return '<span class="chip unknown">command not checked</span>';
+    }
+    if (cell.commandExists.state === "not-applicable")
+        return "";
+    return cell.commandExists.value
+        ? '<span class="chip ok">script exists</span>'
+        : '<span class="chip bad">no such script</span>';
+}
+/**
+ * The first cell of a row that carries a resolved command, for the task column.
+ * @param row - One gate's row
+ * @returns The most informative cell, or undefined
+ */
+function representativeCell(row) {
+    return (row.moments.find(cell => cell.legal && cell.declaration !== "not-declared") ?? row.moments.find(cell => cell.legal));
+}
+/**
+ * Legal moments the project's own axis has no column for.
+ *
+ * There is no bare `deploy` moment in Lisa, and the deploy families only get a
+ * column when a project declares an environment. Naming them here keeps the
+ * information without inventing a column the project does not have.
+ * @param row - One gate's row
+ * @param axis - The report's moment axis
+ * @returns Human text, or an empty string
+ */
+function offAxisMoments(row, axis) {
+    const families = row.legalMoments.filter(moment => !axis.includes(moment) && !axis.some(one => one.startsWith(`${moment}:`)));
+    return families.length === 0
+        ? ""
+        : `<div class="offaxis">also legal at ${escapeHtml(families.join(", "))}</div>`;
+}
+/**
+ * The cloud job a gate maps to, from the static table.
+ * @param job - The job id, or null when the table has no pair for this gate
+ * @returns One cell fragment
+ */
+function jobCell(job) {
+    return job === null
+        ? '<span class="chip none">no job</span>'
+        : `<code>${escapeHtml(job)}</code>`;
+}
+/**
+ * One gate row.
+ * @param row - The gate
+ * @param axis - The report's moment axis
+ * @returns A table row
+ */
+function gateRow(row, axis) {
+    const cell = representativeCell(row);
+    const task = cell?.task ?? row.defaultTask ?? "—";
+    return [
+        "<tr>",
+        `<td><span class="gid">${escapeHtml(row.id)}</span><span class="glabel">${escapeHtml(row.label)}</span>`,
+        offAxisMoments(row, axis),
+        "</td>",
+        `<td class="proves">${escapeHtml(row.summary)}</td>`,
+        `<td><code>${escapeHtml(task)}</code>${cell === undefined ? "" : commandChip(cell)}</td>`,
+        row.moments.map(momentCell).join(""),
+        `<td>${jobCell(row.qualityJob)}<div class="tier3">reads the declaration: not checkable here</div></td>`,
+        "</tr>",
+    ].join("");
+}
+/**
+ * The ruleset section — including the case where it was not read.
+ * @param report - The whole report
+ * @returns A section of HTML
+ */
+function rulesetSection(report) {
+    if (report.ruleset.state !== "verified") {
+        return `<p class="unknown-note">Branch protection was not read this run — <strong>${escapeHtml(report.ruleset.reason)}</strong>. ${escapeHtml(report.ruleset.message)} Nothing below claims a gate does or does not block a merge.</p>`;
+    }
+    const { matched, declaredNotRequired, requiredNotDeclared } = report.ruleset.value;
+    const list = (values) => values.length === 0
+        ? "<li><em>none</em></li>"
+        : values
+            .map(value => `<li><code>${escapeHtml(value)}</code></li>`)
+            .join("");
+    return [
+        '<div class="cols">',
+        `<div><h3>Matched <span class="count">${matched.length}</span></h3><p>Declared <code>required</code>, and the ruleset requires it.</p><ul>${list(matched)}</ul></div>`,
+        `<div><h3>Declared, not required <span class="count">${declaredNotRequired.length}</span></h3><p>The settings file asks for it; the ruleset does not enforce it, so it blocks nothing.</p><ul>${list(declaredNotRequired)}</ul></div>`,
+        `<div class="sharp"><h3>Required, not declared <span class="count">${requiredNotDeclared.length}</span></h3><p>A merge is blocked on these, and <strong>no declaration governs them</strong>. Changing the settings file cannot turn them on, off, or into something else.</p><ul>${list(requiredNotDeclared)}</ul></div>`,
+        "</div>",
+    ].join("");
+}
+/**
+ * The header counts, each with its denominator and its unknown band.
+ * @param report - The whole report
+ * @returns A section of HTML
+ */
+function summarySection(report) {
+    const s = report.summary;
+    const verified = s.buckets.A + s.buckets.B + s.buckets.C + s.buckets.D;
+    return [
+        '<div class="stats">',
+        `<div class="stat"><b>${s.governedBySettings}</b><span>of ${s.gateCount} properties governed by the settings file</span></div>`,
+        `<div class="stat"><b>${s.provedAnyway}</b><span>proved anyway by a command written into a script</span></div>`,
+        `<div class="stat"><b>${s.declaredOffOnly}</b><span>mentioned only to be switched off</span></div>`,
+        `<div class="stat"><b>${s.notDeclared}</b><span>never mentioned at all</span></div>`,
+        "</div>",
+        `<p class="denominator"><strong>${verified} of ${s.legalCells}</strong> gate-and-moment pairs were classified in this run — A ${s.buckets.A} · B ${s.buckets.B} · C ${s.buckets.C} · D ${s.buckets.D}. The other <strong>${s.bucketUnknown}</strong> are <span class="chip unknown">not checked here</span>: this run could not determine them, and they are counted separately rather than added to anything green.</p>`,
+    ].join("");
+}
+/**
+ * Render the whole page.
+ * @param report - The emitter's output
+ * @param projectLabel - How to name the project being reported on
+ * @returns A complete, self-contained HTML document
+ */
+export function renderGateReportPreview(report, projectLabel) {
+    const axis = report.momentAxis;
+    const head = axis
+        .map(moment => `<th class="m">${escapeHtml(moment)}</th>`)
+        .join("");
+    return `<!doctype html>
+<html lang="en"><head><meta charset="utf-8">
+<meta name="viewport" content="width=device-width,initial-scale=1">
+<title>Gate report — ${escapeHtml(projectLabel)}</title>
+<style>${STYLE}</style></head><body>
+<div class="wrap">
+<header>
+<h1>What this project's checks actually prove</h1>
+<p class="sub">Derived, not written. Every number below comes from ${escapeHtml(projectLabel)}'s own settings file, package scripts and git hooks, joined against Lisa's check registry. Nothing here is a language model's summary of those files.</p>
+${summarySection(report)}
+</header>
+
+<section>
+<h2>Every check, and what governs it</h2>
+<p class="lede">One row per check. One column per moment this project can declare a check at — there is no bare "deploy" column, because Lisa has no such moment: the deploy families take an environment suffix and only appear once a project names one.</p>
+<div class="legend">
+<span><span class="state required">must</span> declared required</span>
+<span><span class="state optional">tells</span> declared optional</span>
+<span><span class="state off">off</span> declared off — different from never declared</span>
+<span><span class="state undeclared">not declared</span> the settings file never mentions it here</span>
+<span><span class="chip b-A">A</span> declared, and something reads the declaration</span>
+<span><span class="chip b-B">B</span> something runs it anyway; the settings file has no say</span>
+<span><span class="chip b-C">C</span> declared, but nothing can run it</span>
+<span><span class="chip unknown">not checked here</span> this run could not determine it — NOT a pass</span>
+</div>
+<div class="scroll"><table>
+<thead><tr><th>Check</th><th>What a pass proves</th><th>Command</th>${head}<th>Cloud job</th></tr></thead>
+<tbody>${report.gates.map(row => gateRow(row, axis)).join("")}</tbody>
+</table></div>
+</section>
+
+<section>
+<h2>What a merge is actually blocked on</h2>
+<p class="lede">The contexts the settings file implies, beside the ones the repository's branch-protection rules really require. Nothing compares these two today, so they are only ever equal by hand.</p>
+${rulesetSection(report)}
+</section>
+
+<footer>
+<p>Report format v${String(report.version)} · registry read from the running Lisa package · runner <code>${escapeHtml(report.runner.state === "verified" ? report.runner.value : "unknown")}</code>${report.declarationProblems.length === 0 ? "" : ` · <strong>${String(report.declarationProblems.length)} declaration problem(s)</strong>: ${escapeHtml(report.declarationProblems.join("; "))}`}</p>
+<p>Not rendered yet, and deliberately: the agent on-edit scripts, the table of cloud jobs that ignore the settings file, and any filtering.</p>
+</footer>
+</div>
+</body></html>`;
+}
+/** All styling, inlined so the file opens from disk with no server. */
+const STYLE = `
+:root{--bg:#0f1115;--panel:#161923;--line:#252a38;--ink:#e6e9f2;--dim:#98a0b5;
+--ok:#3fb950;--warn:#d29922;--bad:#f85149;--unk:#6b7280;--acc:#58a6ff}
+*{box-sizing:border-box}
+body{margin:0;background:var(--bg);color:var(--ink);
+font:15px/1.55 ui-sans-serif,-apple-system,"Segoe UI",Roboto,sans-serif}
+.wrap{max-width:1500px;margin:0 auto;padding:32px 24px 72px}
+h1{font-size:26px;margin:0 0 8px}
+h2{font-size:19px;margin:40px 0 6px;padding-top:24px;border-top:1px solid var(--line)}
+h3{font-size:14px;margin:0 0 4px;text-transform:uppercase;letter-spacing:.06em;color:var(--dim)}
+.sub,.lede{color:var(--dim);margin:0 0 16px;max-width:80ch}
+.stats{display:flex;flex-wrap:wrap;gap:12px;margin:20px 0 12px}
+.stat{background:var(--panel);border:1px solid var(--line);border-radius:10px;
+padding:12px 16px;min-width:170px}
+.stat b{display:block;font-size:28px;line-height:1.1}
+.stat span{color:var(--dim);font-size:12.5px}
+.denominator{background:var(--panel);border:1px solid var(--line);border-left:3px solid var(--acc);
+border-radius:8px;padding:12px 16px;margin:0;max-width:100ch}
+.legend{display:flex;flex-wrap:wrap;gap:8px 18px;margin:14px 0;color:var(--dim);font-size:12.5px}
+.legend>span{display:flex;align-items:center;gap:6px}
+.scroll{overflow-x:auto;border:1px solid var(--line);border-radius:10px}
+table{border-collapse:collapse;width:100%;font-size:13px;background:var(--panel)}
+th,td{text-align:left;padding:9px 11px;border-bottom:1px solid var(--line);vertical-align:top}
+th{position:sticky;top:0;background:#1b2030;font-size:11.5px;text-transform:uppercase;
+letter-spacing:.05em;color:var(--dim);z-index:1}
+th.m,td.m{text-align:center;white-space:nowrap}
+td.illegal{background:repeating-linear-gradient(45deg,transparent,transparent 5px,#1b2030 5px,#1b2030 10px)}
+tr:hover td{background:#1a1f2e}
+.gid{display:block;font-family:ui-monospace,monospace;font-size:12px;color:var(--acc)}
+.glabel{display:block;color:var(--dim);font-size:12px}
+.offaxis{margin-top:4px;color:var(--unk);font-size:11px;font-style:italic}
+.proves{color:var(--dim);max-width:34ch}
+code{font-family:ui-monospace,monospace;font-size:12px;background:#10131c;
+border:1px solid var(--line);border-radius:4px;padding:1px 5px}
+.state{display:inline-block;font-size:11px;border-radius:5px;padding:2px 7px;font-weight:600}
+.required{background:#1d3a24;color:#7ee787;border:1px solid #2ea04326}
+.optional{background:#3a3117;color:#e3b341;border:1px solid #d2992226}
+.off{background:#3a1d1d;color:#ff9492;border:1px solid #f8514926}
+.undeclared{background:#1b2030;color:var(--unk);border:1px dashed #3a4157}
+.chip{display:inline-block;margin-left:5px;font-size:10.5px;border-radius:4px;
+padding:1px 5px;font-weight:600;vertical-align:1px}
+.b-A{background:#123021;color:#7ee787}
+.b-B{background:#3a2c12;color:#e3b341}
+.b-C{background:#3a1616;color:#ff9492}
+.b-D{background:#2a2a2a;color:#bbb}
+.ok{background:#123021;color:#7ee787}
+.bad{background:#3a1616;color:#ff9492}
+.none{background:#1b2030;color:var(--unk)}
+.unknown{background:repeating-linear-gradient(45deg,#22262f,#22262f 3px,#191d25 3px,#191d25 6px);
+color:#9aa3b8;border:1px dashed #3f465c}
+.tier3{margin-top:5px;font-size:11px;color:var(--unk);font-style:italic}
+.unknown-note{background:repeating-linear-gradient(45deg,#22262f,#22262f 4px,#191d25 4px,#191d25 8px);
+border:1px dashed #3f465c;border-radius:8px;padding:14px 16px;color:#c2c9db}
+.cols{display:grid;grid-template-columns:repeat(auto-fit,minmax(300px,1fr));gap:14px}
+.cols>div{background:var(--panel);border:1px solid var(--line);border-radius:10px;padding:14px 16px}
+.cols .sharp{border-color:#7d2b2b;background:#1e1618}
+.cols p{color:var(--dim);font-size:12.5px;margin:0 0 8px}
+.cols ul{margin:0;padding-left:18px}
+.cols li{margin:3px 0;font-size:12.5px}
+.count{float:right;color:var(--ink);font-size:13px}
+footer{margin-top:44px;padding-top:18px;border-top:1px solid var(--line);
+color:var(--unk);font-size:12.5px}
+`;
+//# sourceMappingURL=gate-report-preview.js.map