@codyswann/lisa 3.47.10 → 3.48.1

package/dist/cli/gate-report-types.d.ts

@@ -0,0 +1,206 @@
+/**
+ * The shape of the deterministic gate report.
+ *
+ * Every fact in this payload carries one of three states, never two.
+ * `verified` means this run checked it and this is the answer — including when
+ * the answer is "no". `unknown` means the fact exists but this run could not
+ * reach it. `not-applicable` means there is no such fact here at all.
+ *
+ * The distinction is the whole point of the report rather than a nicety. This
+ * repository has catalogued controls that reported success while proving
+ * nothing; a report that folded "could not check" into "pass" would be that
+ * defect sited at the one screen an operator would trust. So `unknown` is
+ * structurally distinct — not a boolean, not an absent key, not a default — and
+ * every count states its unknown band explicitly.
+ * @module cli/gate-report-types
+ */
+/** Report format version, bumped when a consumer would have to change. */
+export declare const GATE_REPORT_VERSION = 1;
+/**
+ * One fact, in one of the three states.
+ *
+ * `unknown` and `not-applicable` both carry a machine `reason` and a human
+ * `message`, matching the live-status `ProbeResult` contract the console
+ * already renders — a report that says "not checkable here" without saying why
+ * is indistinguishable from a bug.
+ */
+export type Finding<T> = {
+    readonly state: "verified";
+    readonly value: T;
+} | {
+    readonly state: "unknown";
+    readonly reason: string;
+    readonly message: string;
+} | {
+    readonly state: "not-applicable";
+    readonly reason: string;
+    readonly message: string;
+};
+/**
+ * What the settings file says about one gate at one moment.
+ *
+ * `off` and `not-declared` are deliberately separate. Collapsing them is what
+ * let a declaration govern nothing: the CI façade read both as
+ * `configured=false` and ran its built-in fallback, so `off` could not turn a
+ * job off.
+ */
+export type DeclarationState = "required" | "optional" | "off" | "not-declared";
+/** How a declared gate is proved. */
+export type ProofMode = "run" | "await" | "intercept" | "off";
+/**
+ * Which of the four task sources won, narrowest first.
+ *
+ * Two projects render identically and behave differently if a per-moment `run`
+ * is not distinguished from a gate-level one, so the report names the winner
+ * rather than only the result.
+ */
+export type TaskProvenance = "moment-run" | "gate-run" | "registry-task-at" | "registry-task" | "none";
+/**
+ * The four buckets, computed per (gate, moment) pair rather than per gate.
+ *
+ * A pair is genuinely mixed — the same gate can be A at push and B at
+ * pull-request in one repository — so a gate-level bucket would have to
+ * summarise a mixed verdict.
+ */
+export type Bucket = "A" | "B" | "C" | "D";
+/** One executor this run proved would run the gate's task. */
+export interface ExecutorEvidence {
+    /** How the executor was found. */
+    readonly kind: "gate-runner" | "hook-builtin" | "hook-literal";
+    /** Project-relative file holding it. Never an absolute path. */
+    readonly file: string;
+    /** Operator-readable sentence. */
+    readonly detail: string;
+}
+/** Whether a required status context stands between this gate and a merge. */
+export interface MergeBlock {
+    /** True when the ruleset requires a context this gate produces. */
+    readonly required: boolean;
+    /** The matching required context, when there is one. */
+    readonly context: string | null;
+}
+/** One (gate, moment) pair — the report's real unit. */
+export interface GateMomentCell {
+    /** The moment, including any `:environment` suffix. */
+    readonly moment: string;
+    /** Whether the registry permits declaring this gate here. */
+    readonly legal: boolean;
+    /** What the settings file says. */
+    readonly declaration: DeclarationState;
+    /** How it is proved, or null when nothing is declared. */
+    readonly mode: ProofMode | null;
+    /** The signal an `await` gate waits for. */
+    readonly awaits: string | null;
+    /** The task that would run. */
+    readonly task: string | null;
+    /** The task with the project's runner in front of it. */
+    readonly command: string | null;
+    /** Which of the four sources supplied the task. */
+    readonly provenance: TaskProvenance;
+    /** Whether `package.json` scripts actually define that task. */
+    readonly commandExists: Finding<boolean>;
+    /** Executors this run proved. Empty is a real answer, not an unknown. */
+    readonly executors: readonly ExecutorEvidence[];
+    /** The branch-protection context this declaration implies, if any. */
+    readonly expectedContext: string | null;
+    /** Tier 2 — the live ruleset, or an honest unknown. */
+    readonly blocksMerge: Finding<MergeBlock>;
+    /** Tier 3 — lives in a `quality.yml` no consumer holds. */
+    readonly facadeReadsDeclaration: Finding<boolean>;
+    /** A, B, C, D, or an explicit refusal to classify. */
+    readonly bucket: Finding<Bucket>;
+}
+/** One registry gate, with a cell for every moment on the report's axis. */
+export interface GateReportRow {
+    /** Registry id. */
+    readonly id: string;
+    /** CI job name — load-bearing, a ruleset names contexts by exact string. */
+    readonly label: string;
+    /** What a pass proves. */
+    readonly summary: string;
+    /** The moments the registry permits, sorted. */
+    readonly legalMoments: readonly string[];
+    /** The registry's default prover. */
+    readonly defaultTask: string | null;
+    /** Registry task swaps that ship to everyone, keyed by moment family. */
+    readonly taskAt: Readonly<Record<string, string>>;
+    /** A project-wide `run` override, applying at every moment. */
+    readonly projectTask: string | null;
+    /** Registry flag: the task may rewrite the working tree. */
+    readonly mayRewrite: boolean;
+    /** Registry flag: the task costs minutes, not seconds. */
+    readonly costly: boolean;
+    /** The interception this gate is, when a task cannot implement it. */
+    readonly interceptor: string | null;
+    /** The `quality.yml` job this gate maps to, from the static table. */
+    readonly qualityJob: string | null;
+    /** One cell per moment on the report's axis, in axis order. */
+    readonly moments: readonly GateMomentCell[];
+}
+/** One `skip_jobs` token the project still forwards, and its migration. */
+export interface SkipJobRow {
+    /** The token exactly as the caller spells it. */
+    readonly token: string;
+    /** One of the registry's `SKIP_JOB_STATUS` values. */
+    readonly status: string;
+    /** The gate that replaces it, or null. */
+    readonly gate: string | null;
+    /** The declaration to write, or null when none exists. */
+    readonly declaration: string | null;
+}
+/** How the declared contexts compare with the ones a ruleset requires. */
+export interface RulesetComparison {
+    /** Declared required and required by the ruleset. */
+    readonly matched: readonly string[];
+    /** Declared required, absent from the ruleset — governs nothing. */
+    readonly declaredNotRequired: readonly string[];
+    /** Required by the ruleset, governed by no declaration. */
+    readonly requiredNotDeclared: readonly string[];
+}
+/** Counts, each stating its denominator and its unknown band. */
+export interface GateReportSummary {
+    /** Registry gates in this report. */
+    readonly gateCount: number;
+    /** Moments on the report's axis. */
+    readonly momentCount: number;
+    /** Gates carrying at least one `required` or `optional` declaration. */
+    readonly governedBySettings: number;
+    /** Gates whose only declarations are `off`. */
+    readonly declaredOffOnly: number;
+    /** Gates the settings file never mentions. */
+    readonly notDeclared: number;
+    /** Legal (gate, moment) pairs — the denominator for the buckets. */
+    readonly legalCells: number;
+    /** Bucket membership counts. Unclassifiable pairs are counted separately. */
+    readonly buckets: Readonly<Record<Bucket, number>>;
+    /** Pairs this run declined to classify. Never folded into D. */
+    readonly bucketUnknown: number;
+    /** Declared pairs whose task is missing from `package.json` — bucket C. */
+    readonly declaredWithoutCommand: number;
+    /** Undeclared pairs proved anyway by a command written into a script. */
+    readonly provedAnyway: number;
+}
+/** The whole payload emitted under `lisa doctor --json`. */
+export interface GateReport {
+    /** Format version. */
+    readonly version: number;
+    /** Where the registry was read from, or why it could not be. */
+    readonly registrySource: Finding<string>;
+    /** The runner gate commands are built with. */
+    readonly runner: Finding<string>;
+    /** Whether the runner came from the project or from Lisa's default. */
+    readonly runnerSource: "declared" | "default" | "unknown";
+    /** Every moment the report has a column for, in a stable order. */
+    readonly momentAxis: readonly string[];
+    /** Everything `validateGates` objected to, verbatim. */
+    readonly declarationProblems: readonly string[];
+    /** One row per registry gate, sorted by id. */
+    readonly gates: readonly GateReportRow[];
+    /** The project's forwarded `skip_jobs` tokens. */
+    readonly skipJobs: Finding<readonly SkipJobRow[]>;
+    /** Declared contexts against the live ruleset — Tier 2. */
+    readonly ruleset: Finding<RulesetComparison>;
+    /** Counts. */
+    readonly summary: GateReportSummary;
+}
+//# sourceMappingURL=gate-report-types.d.ts.map

package/dist/cli/gate-report-types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"gate-report-types.d.ts","sourceRoot":"","sources":["../../src/cli/gate-report-types.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAEH,0EAA0E;AAC1E,eAAO,MAAM,mBAAmB,IAAI,CAAC;AAErC;;;;;;;GAOG;AACH,MAAM,MAAM,OAAO,CAAC,CAAC,IACjB;IAAE,QAAQ,CAAC,KAAK,EAAE,UAAU,CAAC;IAAC,QAAQ,CAAC,KAAK,EAAE,CAAC,CAAA;CAAE,GACjD;IACE,QAAQ,CAAC,KAAK,EAAE,SAAS,CAAC;IAC1B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;CAC1B,GACD;IACE,QAAQ,CAAC,KAAK,EAAE,gBAAgB,CAAC;IACjC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;CAC1B,CAAC;AAEN;;;;;;;GAOG;AACH,MAAM,MAAM,gBAAgB,GAAG,UAAU,GAAG,UAAU,GAAG,KAAK,GAAG,cAAc,CAAC;AAEhF,qCAAqC;AACrC,MAAM,MAAM,SAAS,GAAG,KAAK,GAAG,OAAO,GAAG,WAAW,GAAG,KAAK,CAAC;AAE9D;;;;;;GAMG;AACH,MAAM,MAAM,cAAc,GACtB,YAAY,GACZ,UAAU,GACV,kBAAkB,GAClB,eAAe,GACf,MAAM,CAAC;AAEX;;;;;;GAMG;AACH,MAAM,MAAM,MAAM,GAAG,GAAG,GAAG,GAAG,GAAG,GAAG,GAAG,GAAG,CAAC;AAE3C,8DAA8D;AAC9D,MAAM,WAAW,gBAAgB;IAC/B,kCAAkC;IAClC,QAAQ,CAAC,IAAI,EAAE,aAAa,GAAG,cAAc,GAAG,cAAc,CAAC;IAC/D,gEAAgE;IAChE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,kCAAkC;IAClC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;CACzB;AAED,8EAA8E;AAC9E,MAAM,WAAW,UAAU;IACzB,mEAAmE;IACnE,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAC;IAC3B,wDAAwD;IACxD,QAAQ,CAAC,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;CACjC;AAED,wDAAwD;AACxD,MAAM,WAAW,cAAc;IAC7B,uDAAuD;IACvD,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,6DAA6D;IAC7D,QAAQ,CAAC,KAAK,EAAE,OAAO,CAAC;IACxB,mCAAmC;IACnC,QAAQ,CAAC,WAAW,EAAE,gBAAgB,CAAC;IACvC,0DAA0D;IAC1D,QAAQ,CAAC,IAAI,EAAE,SAAS,GAAG,IAAI,CAAC;IAChC,4CAA4C;IAC5C,QAAQ,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IAC/B,+BAA+B;IAC/B,QAAQ,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,yDAAyD;IACzD,QAAQ,CAAC,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IAChC,mDAAmD;IACnD,QAAQ,CAAC,UAAU,EAAE,cAAc,CAAC;IACpC,gEAAgE;IAChE,QAAQ,CAAC,aAAa,EAAE,OAAO,CAAC,OAAO,CAAC,CAAC;IACzC,yEAAyE;IACzE,QAAQ,CAAC,SAAS,EAAE,SAAS,gBAAgB,EAAE,CAAC;IAChD,sEAAsE;IACtE,QAAQ,CAAC,eAAe,EAAE,MAAM,GAAG,IAAI,CAAC;IACxC,uDAAuD;IACvD,QAAQ,CAAC,WAAW,EAAE,OAAO,CAAC,UAAU,CAAC,CAAC;IAC1C,2DAA2D;IAC3D,QAAQ,CAAC,sBAAsB,EAAE,OAAO,CAAC,OAAO,CAAC,CAAC;IAClD,sDAAsD;IACtD,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC;CAClC;AAED,4EAA4E;AAC5E,MAAM,WAAW,aAAa;IAC5B,mBAAmB;IACnB,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,4EAA4E;IAC5E,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,0BAA0B;IAC1B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,gDAAgD;IAChD,QAAQ,CAAC,YAAY,EAAE,SAAS,MAAM,EAAE,CAAC;IACzC,qCAAqC;IACrC,QAAQ,CAAC,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IACpC,yEAAyE;IACzE,QAAQ,CAAC,MAAM,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;IAClD,+DAA+D;IAC/D,QAAQ,CAAC,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IACpC,4DAA4D;IAC5D,QAAQ,CAAC,UAAU,EAAE,OAAO,CAAC;IAC7B,0DAA0D;IAC1D,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAC;IACzB,sEAAsE;IACtE,QAAQ,CAAC,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IACpC,sEAAsE;IACtE,QAAQ,CAAC,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IACnC,+DAA+D;IAC/D,QAAQ,CAAC,OAAO,EAAE,SAAS,cAAc,EAAE,CAAC;CAC7C;AAED,2EAA2E;AAC3E,MAAM,WAAW,UAAU;IACzB,iDAAiD;IACjD,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,sDAAsD;IACtD,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,0CAA0C;IAC1C,QAAQ,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,0DAA0D;IAC1D,QAAQ,CAAC,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;CACrC;AAED,0EAA0E;AAC1E,MAAM,WAAW,iBAAiB;IAChC,qDAAqD;IACrD,QAAQ,CAAC,OAAO,EAAE,SAAS,MAAM,EAAE,CAAC;IACpC,oEAAoE;IACpE,QAAQ,CAAC,mBAAmB,EAAE,SAAS,MAAM,EAAE,CAAC;IAChD,2DAA2D;IAC3D,QAAQ,CAAC,mBAAmB,EAAE,SAAS,MAAM,EAAE,CAAC;CACjD;AAED,iEAAiE;AACjE,MAAM,WAAW,iBAAiB;IAChC,qCAAqC;IACrC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,oCAAoC;IACpC,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,wEAAwE;IACxE,QAAQ,CAAC,kBAAkB,EAAE,MAAM,CAAC;IACpC,+CAA+C;IAC/C,QAAQ,CAAC,eAAe,EAAE,MAAM,CAAC;IACjC,8CAA8C;IAC9C,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,oEAAoE;IACpE,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,6EAA6E;IAC7E,QAAQ,CAAC,OAAO,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;IACnD,gEAAgE;IAChE,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,2EAA2E;IAC3E,QAAQ,CAAC,sBAAsB,EAAE,MAAM,CAAC;IACxC,yEAAyE;IACzE,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;CAC/B;AAED,4DAA4D;AAC5D,MAAM,WAAW,UAAU;IACzB,sBAAsB;IACtB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,gEAAgE;IAChE,QAAQ,CAAC,cAAc,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC;IACzC,+CAA+C;IAC/C,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC;IACjC,uEAAuE;IACvE,QAAQ,CAAC,YAAY,EAAE,UAAU,GAAG,SAAS,GAAG,SAAS,CAAC;IAC1D,mEAAmE;IACnE,QAAQ,CAAC,UAAU,EAAE,SAAS,MAAM,EAAE,CAAC;IACvC,wDAAwD;IACxD,QAAQ,CAAC,mBAAmB,EAAE,SAAS,MAAM,EAAE,CAAC;IAChD,+CAA+C;IAC/C,QAAQ,CAAC,KAAK,EAAE,SAAS,aAAa,EAAE,CAAC;IACzC,kDAAkD;IAClD,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAC,SAAS,UAAU,EAAE,CAAC,CAAC;IAClD,2DAA2D;IAC3D,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC,iBAAiB,CAAC,CAAC;IAC7C,cAAc;IACd,QAAQ,CAAC,OAAO,EAAE,iBAAiB,CAAC;CACrC"}

package/dist/cli/gate-report-types.js

@@ -0,0 +1,19 @@
+/**
+ * The shape of the deterministic gate report.
+ *
+ * Every fact in this payload carries one of three states, never two.
+ * `verified` means this run checked it and this is the answer — including when
+ * the answer is "no". `unknown` means the fact exists but this run could not
+ * reach it. `not-applicable` means there is no such fact here at all.
+ *
+ * The distinction is the whole point of the report rather than a nicety. This
+ * repository has catalogued controls that reported success while proving
+ * nothing; a report that folded "could not check" into "pass" would be that
+ * defect sited at the one screen an operator would trust. So `unknown` is
+ * structurally distinct — not a boolean, not an absent key, not a default — and
+ * every count states its unknown band explicitly.
+ * @module cli/gate-report-types
+ */
+/** Report format version, bumped when a consumer would have to change. */
+export const GATE_REPORT_VERSION = 1;
+//# sourceMappingURL=gate-report-types.js.map

package/dist/cli/gate-report-types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"gate-report-types.js","sourceRoot":"","sources":["../../src/cli/gate-report-types.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAEH,0EAA0E;AAC1E,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC,CAAC"}

package/dist/cli/gate-report.d.ts

@@ -0,0 +1,35 @@
+import { type GateRegistryModule } from "./gate-report-registry.js";
+import { type RequiredContextsReader } from "./gate-report-ruleset.js";
+import { type SkipJobTokensReader } from "./gate-report-skip-jobs.js";
+import { type GateReport } from "./gate-report-types.js";
+/** Options for one report. */
+export interface GateReportOptions {
+    /** Project root to report on. */
+    readonly projectRoot: string;
+    /** Suppress the network call and report Tier 2 as `unknown`. */
+    readonly offline?: boolean;
+    /** Injectable Tier 2 reader, so tests never shell out. */
+    readonly readRequiredContexts?: RequiredContextsReader;
+    /** Injectable `skip_jobs` reader, for the same reason. */
+    readonly readSkipJobTokens?: SkipJobTokensReader;
+}
+/**
+ * Every moment the report has a column for.
+ *
+ * There is no fixed set. `MOMENTS` is five, and three families take an
+ * `:<environment>` suffix, so a project with staging and production has more
+ * deploy columns than one with production alone. The axis is therefore the
+ * fixed moments plus whatever family moments this project actually declares —
+ * and never a bare `deploy`, which is not a moment Lisa knows.
+ * @param registry - The shipped registry
+ * @param gates - The gates block
+ * @returns The axis, fixed moments first, then declared family moments sorted
+ */
+export declare function momentAxis(registry: GateRegistryModule, gates: Record<string, unknown>): string[];
+/**
+ * Build the gate report for one project.
+ * @param options - Report inputs
+ * @returns The report
+ */
+export declare function buildGateReport(options: GateReportOptions): Promise<GateReport>;
+//# sourceMappingURL=gate-report.d.ts.map

package/dist/cli/gate-report.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"gate-report.d.ts","sourceRoot":"","sources":["../../src/cli/gate-report.ts"],"names":[],"mappings":"AAwBA,OAAO,EAEL,KAAK,kBAAkB,EAExB,MAAM,2BAA2B,CAAC;AACnC,OAAO,EAIL,KAAK,sBAAsB,EAC5B,MAAM,0BAA0B,CAAC;AAClC,OAAO,EAGL,KAAK,mBAAmB,EACzB,MAAM,4BAA4B,CAAC;AAGpC,OAAO,EAIL,KAAK,UAAU,EAIhB,MAAM,wBAAwB,CAAC;AAQhC,8BAA8B;AAC9B,MAAM,WAAW,iBAAiB;IAChC,iCAAiC;IACjC,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,gEAAgE;IAChE,QAAQ,CAAC,OAAO,CAAC,EAAE,OAAO,CAAC;IAC3B,0DAA0D;IAC1D,QAAQ,CAAC,oBAAoB,CAAC,EAAE,sBAAsB,CAAC;IACvD,0DAA0D;IAC1D,QAAQ,CAAC,iBAAiB,CAAC,EAAE,mBAAmB,CAAC;CAClD;AA0BD;;;;;;;;;;;GAWG;AACH,wBAAgB,UAAU,CACxB,QAAQ,EAAE,kBAAkB,EAC5B,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAC7B,MAAM,EAAE,CASV;AA4ND;;;;GAIG;AACH,wBAAsB,eAAe,CACnC,OAAO,EAAE,iBAAiB,GACzB,OAAO,CAAC,UAAU,CAAC,CAoDrB"}

package/dist/cli/gate-report.js

@@ -0,0 +1,317 @@
+/**
+ * Build the deterministic gate report.
+ *
+ * Same project and config in, identical bytes out. That is the load-bearing
+ * property, not a nicety: an agent-written version of this report would differ
+ * between runs when nothing changed, so a real regression would be
+ * indistinguishable from a rephrasing — and the error class it would reproduce
+ * is documented. Four times in one session, "absent from the settings file" was
+ * read as "does not run" for a check that was in fact running from a workflow
+ * or a hook nobody had looked in. Deriving the answer removes the reader.
+ *
+ * The report splits into three tiers by what a consumer can actually reach.
+ * Tier 1 is everything derivable from files the project holds. Tier 2 is the
+ * live ruleset, which needs a network call and degrades to `unknown`. Tier 3 is
+ * whether a CI job reads the declaration or runs a hardcoded command — that
+ * lives in a `quality.yml` a consumer does not have, so it is stated as
+ * unknowable rather than inferred from the presence of a mapping row.
+ * @module cli/gate-report
+ */
+import { readFile } from "node:fs/promises";
+import * as path from "node:path";
+import { buildCell } from "./gate-report-cells.js";
+import { collectHookEvidence } from "./gate-report-executors.js";
+import { loadGateRegistry, } from "./gate-report-registry.js";
+import { compareContexts, defaultRequiredContextsReader, readRequiredContexts, } from "./gate-report-ruleset.js";
+import { buildSkipJobRows, defaultSkipJobTokensReader, } from "./gate-report-skip-jobs.js";
+import { readConfig } from "./gate-report-config.js";
+import { summarise } from "./gate-report-summary.js";
+import { GATE_REPORT_VERSION, } from "./gate-report-types.js";
+/** The workflow whose name prefixes a run gate's status context. */
+const QUALITY_WORKFLOW_NAME = "🔍 Quality Checks";
+/** The moment a ruleset guards, and the one `quality.yml` defaults to. */
+const MERGE_MOMENT = "pull-request";
+/**
+ * Read `package.json` scripts, distinguishing absent from unreadable.
+ * @param projectRoot - Project root
+ * @returns The scripts block, or null when it could not be read
+ */
+async function readScripts(projectRoot) {
+    const source = await readFile(path.join(projectRoot, "package.json"), "utf8").catch(() => undefined);
+    if (source === undefined)
+        return null;
+    try {
+        const parsed = JSON.parse(source);
+        if (parsed === null || typeof parsed !== "object")
+            return null;
+        const scripts = Reflect.get(parsed, "scripts");
+        if (scripts === null || typeof scripts !== "object")
+            return {};
+        return scripts;
+    }
+    catch {
+        return null;
+    }
+}
+/**
+ * Every moment the report has a column for.
+ *
+ * There is no fixed set. `MOMENTS` is five, and three families take an
+ * `:<environment>` suffix, so a project with staging and production has more
+ * deploy columns than one with production alone. The axis is therefore the
+ * fixed moments plus whatever family moments this project actually declares —
+ * and never a bare `deploy`, which is not a moment Lisa knows.
+ * @param registry - The shipped registry
+ * @param gates - The gates block
+ * @returns The axis, fixed moments first, then declared family moments sorted
+ */
+export function momentAxis(registry, gates) {
+    const declared = Object.values(gates)
+        .filter((gate) => typeof gate === "object" && gate !== null)
+        .flatMap(gate => Object.keys(gate))
+        .filter(key => !registry.MOMENTS.includes(key) && registry.isMoment(key));
+    return [
+        ...registry.MOMENTS,
+        ...[...new Set(declared)].sort((left, right) => left.localeCompare(right)),
+    ];
+}
+/**
+ * Resolve one moment, capturing a refusal rather than throwing it upward.
+ *
+ * `resolveMoment` asserts the whole gates block's moment keys, so one typo
+ * anywhere makes every moment unresolvable. That must surface as a stated
+ * problem, not as a report that looks like a project declaring nothing.
+ * @param registry - The shipped registry
+ * @param gates - The gates block
+ * @param runner - The project's runner
+ * @param moment - The moment to resolve
+ * @returns Resolved gates keyed by id, or the failure that prevented it
+ */
+function resolveOneMoment(registry, gates, runner, moment) {
+    try {
+        const entries = registry.resolveMoment({
+            gates,
+            moment,
+            runner,
+            includeOff: true,
+        });
+        return {
+            resolved: new Map(entries.map(entry => [entry.id, entry])),
+            failure: null,
+        };
+    }
+    catch (error) {
+        return {
+            resolved: null,
+            failure: error instanceof Error ? error.message : String(error),
+        };
+    }
+}
+/**
+ * The Tier 2 answer for one cell, never defaulted to a verdict.
+ * @param contexts - The live required contexts, or an unknown
+ * @returns A resolver for one cell's expected context
+ */
+function mergeBlockResolver(contexts) {
+    return (moment, expectedContext) => {
+        if (moment !== MERGE_MOMENT) {
+            return {
+                state: "not-applicable",
+                reason: "moment-produces-no-merge-context",
+                message: `A ruleset guards a merge, and only the ${MERGE_MOMENT} gate set produces the status contexts it names. A declaration at ${moment} is enforced by a hook, not by branch protection.`,
+            };
+        }
+        if (expectedContext === null) {
+            return {
+                state: "not-applicable",
+                reason: "no-required-declaration",
+                message: "Only a `required` declaration produces a status context, so there is nothing here for a ruleset to require.",
+            };
+        }
+        if (contexts.state !== "verified")
+            return contexts;
+        return {
+            state: "verified",
+            value: {
+                required: contexts.value.includes(expectedContext),
+                context: contexts.value.includes(expectedContext)
+                    ? expectedContext
+                    : null,
+            },
+        };
+    };
+}
+/**
+ * Build one gate's row.
+ * @param context - Report-wide cell inputs
+ * @param moments - Per-moment resolution results, in axis order
+ * @param id - Gate id
+ * @param jobForGate - Gate id -> `quality.yml` job
+ * @returns The row
+ */
+function buildRow(context, moments, id, jobForGate) {
+    const definition = context.registry.REGISTRY[id];
+    const cells = moments.map(moment => buildCell(context, moment, id));
+    return {
+        id,
+        label: definition?.label ?? id,
+        summary: definition?.summary ?? "",
+        legalMoments: [...(definition?.moments ?? [])].sort((left, right) => left.localeCompare(right)),
+        defaultTask: definition?.task ?? null,
+        taskAt: { ...definition?.taskAt },
+        projectTask: projectLevelTask(context.gates, id),
+        mayRewrite: definition?.mayRewrite === true,
+        costly: definition?.costly === true,
+        interceptor: context.registry.INTERCEPTORS[id] ?? null,
+        qualityJob: jobForGate.get(id) ?? null,
+        moments: cells,
+    };
+}
+/**
+ * A gate-level `run` override from the settings file.
+ * @param gates - The gates block
+ * @param id - Gate id
+ * @returns The task, or null
+ */
+function projectLevelTask(gates, id) {
+    const gate = gates[id];
+    if (typeof gate !== "object" || gate === null)
+        return null;
+    const run = Reflect.get(gate, "run");
+    return typeof run === "string" ? run : null;
+}
+/**
+ * Invert the static job table so a gate can name its CI job.
+ * @param registry - The shipped registry
+ * @returns Gate id -> job id
+ */
+function invertJobTable(registry) {
+    // Reversed before the Map is built so that when two jobs name one gate the
+    // FIRST in declaration order wins, which is the order the table reads in.
+    return new Map(Object.entries(registry.QUALITY_JOB_GATES)
+        .map(([job, gate]) => [gate, job])
+        .reverse());
+}
+/**
+ * The contexts a gates block implies at the merge moment.
+ * @param registry - The shipped registry
+ * @param gates - The gates block
+ * @returns The contexts, or null when the block cannot be resolved
+ */
+function declaredContexts(registry, gates) {
+    try {
+        return registry.contextsFor(gates, {
+            moment: MERGE_MOMENT,
+            workflowName: QUALITY_WORKFLOW_NAME,
+        });
+    }
+    catch {
+        return null;
+    }
+}
+/**
+ * The ruleset comparison, or the same unknown the contexts came back with.
+ * @param registry - The shipped registry
+ * @param gates - The gates block
+ * @param contexts - Live required contexts, or an unknown
+ * @returns The comparison
+ */
+function buildRulesetFinding(registry, gates, contexts) {
+    if (contexts.state !== "verified")
+        return contexts;
+    const declared = declaredContexts(registry, gates);
+    if (declared === null) {
+        return {
+            state: "unknown",
+            reason: "declarations-unresolvable",
+            message: "The gates block could not be resolved, so the contexts it implies cannot be compared with the ruleset.",
+        };
+    }
+    return {
+        state: "verified",
+        value: compareContexts(declared, contexts.value),
+    };
+}
+/**
+ * The report emitted when the shipped registry cannot be found.
+ * @returns A report that claims nothing
+ */
+function registryMissingReport() {
+    const missing = {
+        state: "unknown",
+        reason: "registry-not-found",
+        message: "Lisa's shipped gate registry could not be located, so no gate could be reported. Nothing here is a pass.",
+    };
+    return {
+        version: GATE_REPORT_VERSION,
+        registrySource: missing,
+        runner: missing,
+        runnerSource: "unknown",
+        momentAxis: [],
+        declarationProblems: [],
+        gates: [],
+        skipJobs: missing,
+        ruleset: missing,
+        summary: summarise([], 0),
+    };
+}
+/**
+ * Build the gate report for one project.
+ * @param options - Report inputs
+ * @returns The report
+ */
+export async function buildGateReport(options) {
+    const registry = await loadGateRegistry();
+    if (registry === null)
+        return registryMissingReport();
+    const { projectRoot } = options;
+    const parsed = readConfig(registry, projectRoot);
+    const gates = parsed.gates;
+    const axis = momentAxis(registry, gates);
+    const [scripts, hooks, contexts, skipJobs] = await Promise.all([
+        readScripts(projectRoot),
+        collectHookEvidence(projectRoot),
+        readRequiredContexts({
+            projectRoot,
+            offline: options.offline === true,
+            read: options.readRequiredContexts ?? defaultRequiredContextsReader,
+        }),
+        buildSkipJobRows({
+            registry,
+            projectRoot,
+            read: options.readSkipJobTokens ?? defaultSkipJobTokensReader,
+        }),
+    ]);
+    const context = {
+        registry,
+        gates,
+        hooks,
+        scripts,
+        runner: parsed.runner,
+        workflowName: QUALITY_WORKFLOW_NAME,
+        blocksMerge: mergeBlockResolver(contexts),
+    };
+    const moments = axis.map(moment => ({
+        moment,
+        ...resolveOneMoment(registry, gates, parsed.runner, moment),
+    }));
+    const jobForGate = invertJobTable(registry);
+    const rows = Object.keys(registry.REGISTRY)
+        .sort((left, right) => left.localeCompare(right))
+        .map(id => buildRow(context, moments, id, jobForGate));
+    return {
+        version: GATE_REPORT_VERSION,
+        // Deliberately a token, not the path. An absolute path differs per machine
+        // and would break the byte-identical property the report is built on.
+        registrySource: { state: "verified", value: "lisa-package" },
+        runner: parsed.runnerFinding,
+        runnerSource: parsed.runnerSource,
+        momentAxis: axis,
+        declarationProblems: parsed.problems,
+        gates: rows,
+        skipJobs,
+        ruleset: buildRulesetFinding(registry, gates, contexts),
+        summary: summarise(rows, axis.length),
+    };
+}
+//# sourceMappingURL=gate-report.js.map

package/dist/cli/gate-report.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"gate-report.js","sourceRoot":"","sources":["../../src/cli/gate-report.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AACH,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAC5C,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAElC,OAAO,EAAE,SAAS,EAAoB,MAAM,wBAAwB,CAAC;AACrE,OAAO,EAAE,mBAAmB,EAAE,MAAM,4BAA4B,CAAC;AACjE,OAAO,EACL,gBAAgB,GAGjB,MAAM,2BAA2B,CAAC;AACnC,OAAO,EACL,eAAe,EACf,6BAA6B,EAC7B,oBAAoB,GAErB,MAAM,0BAA0B,CAAC;AAClC,OAAO,EACL,gBAAgB,EAChB,0BAA0B,GAE3B,MAAM,4BAA4B,CAAC;AACpC,OAAO,EAAE,UAAU,EAAE,MAAM,yBAAyB,CAAC;AACrD,OAAO,EAAE,SAAS,EAAE,MAAM,0BAA0B,CAAC;AACrD,OAAO,EACL,mBAAmB,GAOpB,MAAM,wBAAwB,CAAC;AAEhC,oEAAoE;AACpE,MAAM,qBAAqB,GAAG,mBAAmB,CAAC;AAElD,0EAA0E;AAC1E,MAAM,YAAY,GAAG,cAAc,CAAC;AAcpC;;;;GAIG;AACH,KAAK,UAAU,WAAW,CACxB,WAAmB;IAEnB,MAAM,MAAM,GAAG,MAAM,QAAQ,CAC3B,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,cAAc,CAAC,EACtC,MAAM,CACP,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;IACzB,IAAI,MAAM,KAAK,SAAS;QAAE,OAAO,IAAI,CAAC;IACtC,IAAI,CAAC;QACH,MAAM,MAAM,GAAY,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QAC3C,IAAI,MAAM,KAAK,IAAI,IAAI,OAAO,MAAM,KAAK,QAAQ;YAAE,OAAO,IAAI,CAAC;QAC/D,MAAM,OAAO,GAAY,OAAO,CAAC,GAAG,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;QACxD,IAAI,OAAO,KAAK,IAAI,IAAI,OAAO,OAAO,KAAK,QAAQ;YAAE,OAAO,EAAE,CAAC;QAC/D,OAAO,OAAiC,CAAC;IAC3C,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,UAAU,CACxB,QAA4B,EAC5B,KAA8B;IAE9B,MAAM,QAAQ,GAAG,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC;SAClC,MAAM,CAAC,CAAC,IAAI,EAAkB,EAAE,CAAC,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,KAAK,IAAI,CAAC;SAC3E,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;SAClC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,QAAQ,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC;IAC5E,OAAO;QACL,GAAG,QAAQ,CAAC,OAAO;QACnB,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC;KAC3E,CAAC;AACJ,CAAC;AAED;;;;;;;;;;;GAWG;AACH,SAAS,gBAAgB,CACvB,QAA4B,EAC5B,KAA8B,EAC9B,MAAc,EACd,MAAc;IAEd,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,QAAQ,CAAC,aAAa,CAAC;YACrC,KAAK;YACL,MAAM;YACN,MAAM;YACN,UAAU,EAAE,IAAI;SACjB,CAAC,CAAC;QACH,OAAO;YACL,QAAQ,EAAE,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,EAAE,EAAE,KAAK,CAAC,CAAC,CAAC;YAC1D,OAAO,EAAE,IAAI;SACd,CAAC;IACJ,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO;YACL,QAAQ,EAAE,IAAI;YACd,OAAO,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;SAChE,CAAC;IACJ,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,SAAS,kBAAkB,CACzB,QAAoC;IAEpC,OAAO,CAAC,MAAM,EAAE,eAAe,EAAE,EAAE;QACjC,IAAI,MAAM,KAAK,YAAY,EAAE,CAAC;YAC5B,OAAO;gBACL,KAAK,EAAE,gBAAgB;gBACvB,MAAM,EAAE,kCAAkC;gBAC1C,OAAO,EAAE,0CAA0C,YAAY,qEAAqE,MAAM,mDAAmD;aAC9L,CAAC;QACJ,CAAC;QACD,IAAI,eAAe,KAAK,IAAI,EAAE,CAAC;YAC7B,OAAO;gBACL,KAAK,EAAE,gBAAgB;gBACvB,MAAM,EAAE,yBAAyB;gBACjC,OAAO,EACL,6GAA6G;aAChH,CAAC;QACJ,CAAC;QACD,IAAI,QAAQ,CAAC,KAAK,KAAK,UAAU;YAAE,OAAO,QAAQ,CAAC;QACnD,OAAO;YACL,KAAK,EAAE,UAAU;YACjB,KAAK,EAAE;gBACL,QAAQ,EAAE,QAAQ,CAAC,KAAK,CAAC,QAAQ,CAAC,eAAe,CAAC;gBAClD,OAAO,EAAE,QAAQ,CAAC,KAAK,CAAC,QAAQ,CAAC,eAAe,CAAC;oBAC/C,CAAC,CAAC,eAAe;oBACjB,CAAC,CAAC,IAAI;aACT;SACF,CAAC;IACJ,CAAC,CAAC;AACJ,CAAC;AAED;;;;;;;GAOG;AACH,SAAS,QAAQ,CACf,OAAoB,EACpB,OAIG,EACH,EAAU,EACV,UAAuC;IAEvC,MAAM,UAAU,GAAG,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;IACjD,MAAM,KAAK,GAAqB,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CACnD,SAAS,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE,CAAC,CAC/B,CAAC;IACF,OAAO;QACL,EAAE;QACF,KAAK,EAAE,UAAU,EAAE,KAAK,IAAI,EAAE;QAC9B,OAAO,EAAE,UAAU,EAAE,OAAO,IAAI,EAAE;QAClC,YAAY,EAAE,CAAC,GAAG,CAAC,UAAU,EAAE,OAAO,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAClE,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,CAC1B;QACD,WAAW,EAAE,UAAU,EAAE,IAAI,IAAI,IAAI;QACrC,MAAM,EAAE,EAAE,GAAG,UAAU,EAAE,MAAM,EAAE;QACjC,WAAW,EAAE,gBAAgB,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC;QAChD,UAAU,EAAE,UAAU,EAAE,UAAU,KAAK,IAAI;QAC3C,MAAM,EAAE,UAAU,EAAE,MAAM,KAAK,IAAI;QACnC,WAAW,EAAE,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAC,EAAE,CAAC,IAAI,IAAI;QACtD,UAAU,EAAE,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,IAAI;QACtC,OAAO,EAAE,KAAK;KACf,CAAC;AACJ,CAAC;AAED;;;;;GAKG;AACH,SAAS,gBAAgB,CACvB,KAA8B,EAC9B,EAAU;IAEV,MAAM,IAAI,GAAG,KAAK,CAAC,EAAE,CAAC,CAAC;IACvB,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC;IAC3D,MAAM,GAAG,GAAY,OAAO,CAAC,GAAG,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;IAC9C,OAAO,OAAO,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC;AAC9C,CAAC;AAED;;;;GAIG;AACH,SAAS,cAAc,CAAC,QAA4B;IAClD,2EAA2E;IAC3E,0EAA0E;IAC1E,OAAO,IAAI,GAAG,CACZ,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,iBAAiB,CAAC;SACvC,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,IAAI,CAAC,EAAoB,EAAE,CAAC,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;SACnD,OAAO,EAAE,CACb,CAAC;AACJ,CAAC;AAED;;;;;GAKG;AACH,SAAS,gBAAgB,CACvB,QAA4B,EAC5B,KAA8B;IAE9B,IAAI,CAAC;QACH,OAAO,QAAQ,CAAC,WAAW,CAAC,KAAK,EAAE;YACjC,MAAM,EAAE,YAAY;YACpB,YAAY,EAAE,qBAAqB;SACpC,CAAC,CAAC;IACL,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED;;;;;;GAMG;AACH,SAAS,mBAAmB,CAC1B,QAA4B,EAC5B,KAA8B,EAC9B,QAAoC;IAEpC,IAAI,QAAQ,CAAC,KAAK,KAAK,UAAU;QAAE,OAAO,QAAQ,CAAC;IACnD,MAAM,QAAQ,GAAG,gBAAgB,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;IACnD,IAAI,QAAQ,KAAK,IAAI,EAAE,CAAC;QACtB,OAAO;YACL,KAAK,EAAE,SAAS;YAChB,MAAM,EAAE,2BAA2B;YACnC,OAAO,EACL,wGAAwG;SAC3G,CAAC;IACJ,CAAC;IACD,OAAO;QACL,KAAK,EAAE,UAAU;QACjB,KAAK,EAAE,eAAe,CAAC,QAAQ,EAAE,QAAQ,CAAC,KAAK,CAAC;KACjD,CAAC;AACJ,CAAC;AAED;;;GAGG;AACH,SAAS,qBAAqB;IAC5B,MAAM,OAAO,GAAmB;QAC9B,KAAK,EAAE,SAAS;QAChB,MAAM,EAAE,oBAAoB;QAC5B,OAAO,EACL,0GAA0G;KAC7G,CAAC;IACF,OAAO;QACL,OAAO,EAAE,mBAAmB;QAC5B,cAAc,EAAE,OAAO;QACvB,MAAM,EAAE,OAAO;QACf,YAAY,EAAE,SAAS;QACvB,UAAU,EAAE,EAAE;QACd,mBAAmB,EAAE,EAAE;QACvB,KAAK,EAAE,EAAE;QACT,QAAQ,EAAE,OAAO;QACjB,OAAO,EAAE,OAAO;QAChB,OAAO,EAAE,SAAS,CAAC,EAAE,EAAE,CAAC,CAAC;KAC1B,CAAC;AACJ,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,eAAe,CACnC,OAA0B;IAE1B,MAAM,QAAQ,GAAG,MAAM,gBAAgB,EAAE,CAAC;IAC1C,IAAI,QAAQ,KAAK,IAAI;QAAE,OAAO,qBAAqB,EAAE,CAAC;IACtD,MAAM,EAAE,WAAW,EAAE,GAAG,OAAO,CAAC;IAChC,MAAM,MAAM,GAAG,UAAU,CAAC,QAAQ,EAAE,WAAW,CAAC,CAAC;IACjD,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC;IAC3B,MAAM,IAAI,GAAG,UAAU,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;IACzC,MAAM,CAAC,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,QAAQ,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;QAC7D,WAAW,CAAC,WAAW,CAAC;QACxB,mBAAmB,CAAC,WAAW,CAAC;QAChC,oBAAoB,CAAC;YACnB,WAAW;YACX,OAAO,EAAE,OAAO,CAAC,OAAO,KAAK,IAAI;YACjC,IAAI,EAAE,OAAO,CAAC,oBAAoB,IAAI,6BAA6B;SACpE,CAAC;QACF,gBAAgB,CAAC;YACf,QAAQ;YACR,WAAW;YACX,IAAI,EAAE,OAAO,CAAC,iBAAiB,IAAI,0BAA0B;SAC9D,CAAC;KACH,CAAC,CAAC;IACH,MAAM,OAAO,GAAgB;QAC3B,QAAQ;QACR,KAAK;QACL,KAAK;QACL,OAAO;QACP,MAAM,EAAE,MAAM,CAAC,MAAM;QACrB,YAAY,EAAE,qBAAqB;QACnC,WAAW,EAAE,kBAAkB,CAAC,QAAQ,CAAC;KAC1C,CAAC;IACF,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QAClC,MAAM;QACN,GAAG,gBAAgB,CAAC,QAAQ,EAAE,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC;KAC5D,CAAC,CAAC,CAAC;IACJ,MAAM,UAAU,GAAG,cAAc,CAAC,QAAQ,CAAC,CAAC;IAC5C,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC;SACxC,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC;SAChD,GAAG,CAAC,EAAE,CAAC,EAAE,CAAC,QAAQ,CAAC,OAAO,EAAE,OAAO,EAAE,EAAE,EAAE,UAAU,CAAC,CAAC,CAAC;IACzD,OAAO;QACL,OAAO,EAAE,mBAAmB;QAC5B,2EAA2E;QAC3E,sEAAsE;QACtE,cAAc,EAAE,EAAE,KAAK,EAAE,UAAU,EAAE,KAAK,EAAE,cAAc,EAAE;QAC5D,MAAM,EAAE,MAAM,CAAC,aAAa;QAC5B,YAAY,EAAE,MAAM,CAAC,YAAY;QACjC,UAAU,EAAE,IAAI;QAChB,mBAAmB,EAAE,MAAM,CAAC,QAAQ;QACpC,KAAK,EAAE,IAAI;QACX,QAAQ;QACR,OAAO,EAAE,mBAAmB,CAAC,QAAQ,EAAE,KAAK,EAAE,QAAQ,CAAC;QACvD,OAAO,EAAE,SAAS,CAAC,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC;KACtC,CAAC;AACJ,CAAC"}

package/dist/cli/ui-github-repo-gh.d.ts

@@ -37,6 +37,20 @@ export interface GithubRepoGhReads {
     readonly listLabels: (owner: string, repo: string, cwd: string, timeoutMs: number, signal: AbortSignal) => Promise<readonly GithubRemoteLabel[]>;
     readonly listSecretNames: (owner: string, repo: string, cwd: string, timeoutMs: number, signal: AbortSignal) => Promise<readonly string[]>;
 }
+/**
+ * Run `gh` without a shell and return stdout.
+ *
+ * Exported so every `gh` read in the CLI goes through one shell-free call site.
+ * A second one would mean a second place to get argument handling and the
+ * command-from-PATH exemption right, and the gate report needs a branch-rules
+ * read that belongs to no existing member of `GithubRepoGhReads`.
+ * @param args - gh argv after the executable
+ * @param cwd - Working directory
+ * @param timeoutMs - Child-process timeout
+ * @param signal - Probe cancellation signal
+ * @returns Trimmed stdout
+ */
+export declare function runGh(args: readonly string[], cwd: string, timeoutMs: number, signal: AbortSignal): Promise<string>;
 /** Default `gh` implementations used by `lisa ui`. */
 export declare const defaultGithubRepoGhReads: GithubRepoGhReads;
 //# sourceMappingURL=ui-github-repo-gh.d.ts.map

package/dist/cli/ui-github-repo-gh.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"ui-github-repo-gh.d.ts","sourceRoot":"","sources":["../../src/cli/ui-github-repo-gh.ts"],"names":[],"mappings":"AAWA,8DAA8D;AAC9D,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,kBAAkB,EAAE,OAAO,CAAC;IACrC,QAAQ,CAAC,kBAAkB,EAAE,OAAO,CAAC;IACrC,QAAQ,CAAC,kBAAkB,EAAE,OAAO,CAAC;IACrC,QAAQ,CAAC,gBAAgB,EAAE,OAAO,CAAC;IACnC,QAAQ,CAAC,mBAAmB,EAAE,OAAO,CAAC;IACtC,QAAQ,CAAC,sBAAsB,EAAE,OAAO,CAAC;IACzC,QAAQ,CAAC,kBAAkB,EAAE,MAAM,CAAC;IACpC,QAAQ,CAAC,UAAU,EAAE,OAAO,CAAC;IAC7B,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAC;IAC3B,QAAQ,CAAC,eAAe,EAAE,OAAO,CAAC;IAClC,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;CACjC;AAED,qCAAqC;AACrC,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAC;IACzB,wEAAwE;IACxE,QAAQ,CAAC,oBAAoB,CAAC,EAAE,OAAO,CAAC;IACxC,wEAAwE;IACxE,QAAQ,CAAC,mBAAmB,CAAC,EAAE,OAAO,CAAC;IACvC,gEAAgE;IAChE,QAAQ,CAAC,oBAAoB,CAAC,EAAE,OAAO,CAAC;CACzC;AAED,kDAAkD;AAClD,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;CACxB;AAED,8DAA8D;AAC9D,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,YAAY,EAAE,CACrB,KAAK,EAAE,MAAM,EACb,IAAI,EAAE,MAAM,EACZ,GAAG,EAAE,MAAM,EACX,SAAS,EAAE,MAAM,EACjB,MAAM,EAAE,WAAW,KAChB,OAAO,CAAC,kBAAkB,CAAC,CAAC;IACjC,QAAQ,CAAC,YAAY,EAAE,CACrB,KAAK,EAAE,MAAM,EACb,IAAI,EAAE,MAAM,EACZ,GAAG,EAAE,MAAM,EACX,SAAS,EAAE,MAAM,EACjB,MAAM,EAAE,WAAW,KAChB,OAAO,CAAC,SAAS,gBAAgB,EAAE,CAAC,CAAC;IAC1C,QAAQ,CAAC,UAAU,EAAE,CACnB,KAAK,EAAE,MAAM,EACb,IAAI,EAAE,MAAM,EACZ,GAAG,EAAE,MAAM,EACX,SAAS,EAAE,MAAM,EACjB,MAAM,EAAE,WAAW,KAChB,OAAO,CAAC,SAAS,iBAAiB,EAAE,CAAC,CAAC;IAC3C,QAAQ,CAAC,eAAe,EAAE,CACxB,KAAK,EAAE,MAAM,EACb,IAAI,EAAE,MAAM,EACZ,GAAG,EAAE,MAAM,EACX,SAAS,EAAE,MAAM,EACjB,MAAM,EAAE,WAAW,KAChB,OAAO,CAAC,SAAS,MAAM,EAAE,CAAC,CAAC;CACjC;AAoFD,sDAAsD;AACtD,eAAO,MAAM,wBAAwB,EAAE,iBA0EtC,CAAC"}
+{"version":3,"file":"ui-github-repo-gh.d.ts","sourceRoot":"","sources":["../../src/cli/ui-github-repo-gh.ts"],"names":[],"mappings":"AAWA,8DAA8D;AAC9D,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,kBAAkB,EAAE,OAAO,CAAC;IACrC,QAAQ,CAAC,kBAAkB,EAAE,OAAO,CAAC;IACrC,QAAQ,CAAC,kBAAkB,EAAE,OAAO,CAAC;IACrC,QAAQ,CAAC,gBAAgB,EAAE,OAAO,CAAC;IACnC,QAAQ,CAAC,mBAAmB,EAAE,OAAO,CAAC;IACtC,QAAQ,CAAC,sBAAsB,EAAE,OAAO,CAAC;IACzC,QAAQ,CAAC,kBAAkB,EAAE,MAAM,CAAC;IACpC,QAAQ,CAAC,UAAU,EAAE,OAAO,CAAC;IAC7B,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAC;IAC3B,QAAQ,CAAC,eAAe,EAAE,OAAO,CAAC;IAClC,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;CACjC;AAED,qCAAqC;AACrC,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAC;IACzB,wEAAwE;IACxE,QAAQ,CAAC,oBAAoB,CAAC,EAAE,OAAO,CAAC;IACxC,wEAAwE;IACxE,QAAQ,CAAC,mBAAmB,CAAC,EAAE,OAAO,CAAC;IACvC,gEAAgE;IAChE,QAAQ,CAAC,oBAAoB,CAAC,EAAE,OAAO,CAAC;CACzC;AAED,kDAAkD;AAClD,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;CACxB;AAED,8DAA8D;AAC9D,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,YAAY,EAAE,CACrB,KAAK,EAAE,MAAM,EACb,IAAI,EAAE,MAAM,EACZ,GAAG,EAAE,MAAM,EACX,SAAS,EAAE,MAAM,EACjB,MAAM,EAAE,WAAW,KAChB,OAAO,CAAC,kBAAkB,CAAC,CAAC;IACjC,QAAQ,CAAC,YAAY,EAAE,CACrB,KAAK,EAAE,MAAM,EACb,IAAI,EAAE,MAAM,EACZ,GAAG,EAAE,MAAM,EACX,SAAS,EAAE,MAAM,EACjB,MAAM,EAAE,WAAW,KAChB,OAAO,CAAC,SAAS,gBAAgB,EAAE,CAAC,CAAC;IAC1C,QAAQ,CAAC,UAAU,EAAE,CACnB,KAAK,EAAE,MAAM,EACb,IAAI,EAAE,MAAM,EACZ,GAAG,EAAE,MAAM,EACX,SAAS,EAAE,MAAM,EACjB,MAAM,EAAE,WAAW,KAChB,OAAO,CAAC,SAAS,iBAAiB,EAAE,CAAC,CAAC;IAC3C,QAAQ,CAAC,eAAe,EAAE,CACxB,KAAK,EAAE,MAAM,EACb,IAAI,EAAE,MAAM,EACZ,GAAG,EAAE,MAAM,EACX,SAAS,EAAE,MAAM,EACjB,MAAM,EAAE,WAAW,KAChB,OAAO,CAAC,SAAS,MAAM,EAAE,CAAC,CAAC;CACjC;AAED;;;;;;;;;;;;GAYG;AACH,wBAAgB,KAAK,CACnB,IAAI,EAAE,SAAS,MAAM,EAAE,EACvB,GAAG,EAAE,MAAM,EACX,SAAS,EAAE,MAAM,EACjB,MAAM,EAAE,WAAW,GAClB,OAAO,CAAC,MAAM,CAAC,CAiBjB;AAoDD,sDAAsD;AACtD,eAAO,MAAM,wBAAwB,EAAE,iBA0EtC,CAAC"}