@codyswann/lisa 3.48.7 → 3.50.0

package/dist/cli/gate-report-facade.js

@@ -0,0 +1,224 @@
+/**
+ * Tier 3 — whether a CI job reads the declaration or runs a hardcoded command.
+ *
+ * That answer is written in `.github/workflows/quality.yml`, and a consumer
+ * holds no copy of it: it calls the reusable workflow by ref. So for most
+ * projects the honest answer is that the question cannot be answered here.
+ *
+ * It was, however, being refused UNCONDITIONALLY — including in the one
+ * repository where the file is present, which is Lisa's own. A refusal that
+ * does not look is indistinguishable from a refusal that looked and failed,
+ * and only one of those is true. So: when the workflow is on disk, read it and
+ * answer.
+ *
+ * The read is a deterministic YAML parse and nothing else. No agent, no
+ * judgement, no network. A job's façade is wired when its steps carry the
+ * resolve step — `id: gate` with a `GATE_ID` in its environment — which is the
+ * same signal `tests/integration/quality-gate-skip-jobs-mapping.test.ts`
+ * derives the shipped job table from, so the two cannot answer differently.
+ *
+ * Sibling workflows are scanned too, because a job that moved to a workflow of
+ * its own took its façade with it. Reading `quality.yml` alone would report a
+ * moved job as unwired on the grounds that it is no longer next door.
+ * @module cli/gate-report-facade
+ */
+import { readdir, readFile } from "node:fs/promises";
+import * as path from "node:path";
+import { loadYaml } from "../utils/yaml.js";
+/** The workflow Tier 3 is written in. */
+const QUALITY_YML = "quality.yml";
+/** Where a repository keeps its workflows. */
+const WORKFLOW_DIR = path.join(".github", "workflows");
+/** The step id every façade resolve step carries. */
+const RESOLVE_STEP_ID = "gate";
+/** The refusal a project with no copy of the workflow gets. */
+export const TIER_THREE_UNKNOWABLE = {
+    state: "unknown",
+    reason: "determined-by-quality-yml",
+    message: "Whether the CI job reads this declaration or runs a hardcoded command is written in quality.yml, which this project does not have — it calls the reusable workflow by ref.",
+};
+/**
+ * The gate one job's façade resolves, if it has one.
+ * @param job - One parsed job definition
+ * @returns The declared `GATE_ID`, or null
+ */
+function gateOfJob(job) {
+    if (job === null || typeof job !== "object")
+        return null;
+    const steps = Reflect.get(job, "steps");
+    if (!Array.isArray(steps))
+        return null;
+    const resolve = steps.find(step => step !== null &&
+        typeof step === "object" &&
+        Reflect.get(step, "id") === RESOLVE_STEP_ID);
+    if (resolve === undefined)
+        return null;
+    const environment = Reflect.get(resolve, "env");
+    if (environment === null || typeof environment !== "object")
+        return null;
+    const id = Reflect.get(environment, "GATE_ID");
+    return typeof id === "string" ? id : null;
+}
+/**
+ * Parse one workflow file into its name and its jobs.
+ * @param file - Absolute path
+ * @returns The parsed workflow, or null when it could not be read
+ */
+async function parseWorkflow(file) {
+    const source = await readFile(file, "utf8").catch(() => undefined);
+    if (source === undefined)
+        return null;
+    try {
+        const parsed = loadYaml(source);
+        if (parsed === null || typeof parsed !== "object")
+            return null;
+        const jobs = Reflect.get(parsed, "jobs");
+        if (jobs === null || typeof jobs !== "object")
+            return null;
+        const workflowName = Reflect.get(parsed, "name");
+        return {
+            workflowName: typeof workflowName === "string" ? workflowName : null,
+            jobs: jobs,
+        };
+    }
+    catch {
+        return null;
+    }
+}
+/**
+ * The contexts one job could post, in both spellings GitHub uses.
+ * @param workflowName - The declaring workflow's name
+ * @param job - The job definition
+ * @param jobId - The job's id, used when it declares no name
+ * @returns Candidate context strings
+ */
+function contextsOfJob(workflowName, job, jobId) {
+    const declared = job !== null && typeof job === "object" ? Reflect.get(job, "name") : null;
+    const name = typeof declared === "string" ? declared : jobId;
+    return workflowName === null ? [name] : [name, `${workflowName} / ${name}`];
+}
+/**
+ * Every `run:` block one job declares, concatenated.
+ * @param job - The job definition
+ * @returns The shell the job runs
+ */
+function shellOf(job) {
+    if (job === null || typeof job !== "object")
+        return "";
+    const steps = Reflect.get(job, "steps");
+    if (!Array.isArray(steps))
+        return "";
+    return steps
+        .map(step => {
+        if (step === null || typeof step !== "object")
+            return "";
+        const run = Reflect.get(step, "run");
+        return typeof run === "string" ? run : "";
+    })
+        .join("\n");
+}
+/**
+ * Every workflow file in the project, sorted so the report is stable.
+ * @param projectRoot - Project root
+ * @returns File names, sorted
+ */
+async function listWorkflowFiles(projectRoot) {
+    const entries = await readdir(path.join(projectRoot, WORKFLOW_DIR), {
+        withFileTypes: true,
+    }).catch(() => undefined);
+    if (entries === undefined)
+        return [];
+    return entries
+        .filter(entry => entry.isFile() &&
+        (entry.name.endsWith(".yml") || entry.name.endsWith(".yaml")))
+        .map(entry => entry.name)
+        .sort((left, right) => left.localeCompare(right));
+}
+/**
+ * Read what the project's own workflows say about façade wiring.
+ * @param projectRoot - Project root
+ * @returns The facts, empty when the project holds no workflows
+ */
+export async function readFacadeFacts(projectRoot) {
+    const names = await listWorkflowFiles(projectRoot);
+    const parsed = await Promise.all(names.map(async (name) => ({
+        name,
+        parsed: await parseWorkflow(path.join(projectRoot, WORKFLOW_DIR, name)),
+    })));
+    const readable = parsed.filter((entry) => entry.parsed !== null);
+    const sites = readable.flatMap(entry => Object.entries(entry.parsed.jobs).map(([job, definition]) => {
+        const contexts = contextsOfJob(entry.parsed.workflowName, definition, job);
+        return {
+            id: job,
+            name: contexts[0] ?? job,
+            contexts,
+            shell: shellOf(definition),
+            gate: gateOfJob(definition),
+        };
+    }));
+    const jobSites = [...sites].sort(byJobId);
+    const gatePairs = jobSites.flatMap((site) => site.gate === null ? [] : [[site.id, site.gate]]);
+    return {
+        qualityYmlPresent: readable.some(entry => entry.name === QUALITY_YML),
+        files: readable.map(entry => `${WORKFLOW_DIR}/${entry.name}`),
+        // Declaration order wins for a duplicated job id, because that is the job
+        // GitHub itself would run: a Map built from pairs keeps the LAST, so the
+        // list is reversed before it is built.
+        gatesByJob: new Map([...gatePairs].reverse()),
+        jobs: new Set(jobSites.map(site => site.id)),
+        projectContexts: new Set(jobSites.flatMap(site => site.contexts)),
+        jobSites,
+    };
+}
+/**
+ * Order two jobs by id, so the report is stable across machines.
+ * @param left - One job
+ * @param right - Another job
+ * @returns A comparison result
+ */
+function byJobId(left, right) {
+    return left.id.localeCompare(right.id);
+}
+/**
+ * How the report names the workflows it read.
+ * @param facts - The parsed workflow facts
+ * @returns The source block
+ */
+export function facadeSourceOf(facts) {
+    return { present: facts.qualityYmlPresent, files: facts.files };
+}
+/**
+ * Whether the CI job for one gate reads the declaration.
+ *
+ * Three answers, and the third is not a fourth state smuggled in: a job the
+ * workflow does not declare at all is a different fact from a job that runs a
+ * hardcoded command, and calling the first one `false` would report a gate as
+ * unwired on the strength of never having found it.
+ * @param facts - The parsed workflow facts
+ * @param gateId - The gate being reported
+ * @param qualityJob - The CI job the static table pairs with it
+ * @returns Whether that job's façade resolves this gate
+ */
+export function facadeFinding(facts, gateId, qualityJob) {
+    if (qualityJob === null) {
+        return {
+            state: "not-applicable",
+            reason: "no-mapped-job",
+            message: "Lisa's static job table pairs no CI job with this gate, so there is no job whose wiring could be read.",
+        };
+    }
+    if (!facts.qualityYmlPresent)
+        return TIER_THREE_UNKNOWABLE;
+    const resolved = facts.gatesByJob.get(qualityJob);
+    if (resolved !== undefined) {
+        return { state: "verified", value: resolved === gateId };
+    }
+    if (facts.jobs.has(qualityJob))
+        return { state: "verified", value: false };
+    return {
+        state: "unknown",
+        reason: "job-absent-from-this-workflow",
+        message: `quality.yml is present here but declares no job called ${qualityJob}, so whether that job reads this declaration cannot be read from this checkout.`,
+    };
+}
+//# sourceMappingURL=gate-report-facade.js.map

package/dist/cli/gate-report-facade.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"gate-report-facade.js","sourceRoot":"","sources":["../../src/cli/gate-report-facade.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AACrD,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAElC,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAG5C,yCAAyC;AACzC,MAAM,WAAW,GAAG,aAAa,CAAC;AAElC,8CAA8C;AAC9C,MAAM,YAAY,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC;AAEvD,qDAAqD;AACrD,MAAM,eAAe,GAAG,MAAM,CAAC;AAqC/B,+DAA+D;AAC/D,MAAM,CAAC,MAAM,qBAAqB,GAAmB;IACnD,KAAK,EAAE,SAAS;IAChB,MAAM,EAAE,2BAA2B;IACnC,OAAO,EACL,4KAA4K;CAC/K,CAAC;AAEF;;;;GAIG;AACH,SAAS,SAAS,CAAC,GAAY;IAC7B,IAAI,GAAG,KAAK,IAAI,IAAI,OAAO,GAAG,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC;IACzD,MAAM,KAAK,GAAY,OAAO,CAAC,GAAG,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;IACjD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IACvC,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,CACxB,IAAI,CAAC,EAAE,CACL,IAAI,KAAK,IAAI;QACb,OAAO,IAAI,KAAK,QAAQ;QACxB,OAAO,CAAC,GAAG,CAAC,IAAI,EAAE,IAAI,CAAC,KAAK,eAAe,CAC9C,CAAC;IACF,IAAI,OAAO,KAAK,SAAS;QAAE,OAAO,IAAI,CAAC;IACvC,MAAM,WAAW,GAAY,OAAO,CAAC,GAAG,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;IACzD,IAAI,WAAW,KAAK,IAAI,IAAI,OAAO,WAAW,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC;IACzE,MAAM,EAAE,GAAY,OAAO,CAAC,GAAG,CAAC,WAAW,EAAE,SAAS,CAAC,CAAC;IACxD,OAAO,OAAO,EAAE,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;AAC5C,CAAC;AAUD;;;;GAIG;AACH,KAAK,UAAU,aAAa,CAAC,IAAY;IACvC,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;IACnE,IAAI,MAAM,KAAK,SAAS;QAAE,OAAO,IAAI,CAAC;IACtC,IAAI,CAAC;QACH,MAAM,MAAM,GAAY,QAAQ,CAAC,MAAM,CAAC,CAAC;QACzC,IAAI,MAAM,KAAK,IAAI,IAAI,OAAO,MAAM,KAAK,QAAQ;YAAE,OAAO,IAAI,CAAC;QAC/D,MAAM,IAAI,GAAY,OAAO,CAAC,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QAClD,IAAI,IAAI,KAAK,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ;YAAE,OAAO,IAAI,CAAC;QAC3D,MAAM,YAAY,GAAY,OAAO,CAAC,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QAC1D,OAAO;YACL,YAAY,EAAE,OAAO,YAAY,KAAK,QAAQ,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,IAAI;YACpE,IAAI,EAAE,IAA+B;SACtC,CAAC;IACJ,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED;;;;;;GAMG;AACH,SAAS,aAAa,CACpB,YAA2B,EAC3B,GAAY,EACZ,KAAa;IAEb,MAAM,QAAQ,GACZ,GAAG,KAAK,IAAI,IAAI,OAAO,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IAC5E,MAAM,IAAI,GAAG,OAAO,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC;IAC7D,OAAO,YAAY,KAAK,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,GAAG,YAAY,MAAM,IAAI,EAAE,CAAC,CAAC;AAC9E,CAAC;AAED;;;;GAIG;AACH,SAAS,OAAO,CAAC,GAAY;IAC3B,IAAI,GAAG,KAAK,IAAI,IAAI,OAAO,GAAG,KAAK,QAAQ;QAAE,OAAO,EAAE,CAAC;IACvD,MAAM,KAAK,GAAY,OAAO,CAAC,GAAG,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;IACjD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,EAAE,CAAC;IACrC,OAAO,KAAK;SACT,GAAG,CAAC,IAAI,CAAC,EAAE;QACV,IAAI,IAAI,KAAK,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ;YAAE,OAAO,EAAE,CAAC;QACzD,MAAM,GAAG,GAAY,OAAO,CAAC,GAAG,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;QAC9C,OAAO,OAAO,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;IAC5C,CAAC,CAAC;SACD,IAAI,CAAC,IAAI,CAAC,CAAC;AAChB,CAAC;AAED;;;;GAIG;AACH,KAAK,UAAU,iBAAiB,CAAC,WAAmB;IAClD,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,YAAY,CAAC,EAAE;QAClE,aAAa,EAAE,IAAI;KACpB,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;IAC1B,IAAI,OAAO,KAAK,SAAS;QAAE,OAAO,EAAE,CAAC;IACrC,OAAO,OAAO;SACX,MAAM,CACL,KAAK,CAAC,EAAE,CACN,KAAK,CAAC,MAAM,EAAE;QACd,CAAC,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAChE;SACA,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC;SACxB,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC,CAAC;AACtD,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,eAAe,CACnC,WAAmB;IAEnB,MAAM,KAAK,GAAG,MAAM,iBAAiB,CAAC,WAAW,CAAC,CAAC;IACnD,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,GAAG,CAC9B,KAAK,CAAC,GAAG,CAAC,KAAK,EAAC,IAAI,EAAC,EAAE,CAAC,CAAC;QACvB,IAAI;QACJ,MAAM,EAAE,MAAM,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,YAAY,EAAE,IAAI,CAAC,CAAC;KACxE,CAAC,CAAC,CACJ,CAAC;IACF,MAAM,QAAQ,GAAG,MAAM,CAAC,MAAM,CAC5B,CAAC,KAAK,EAAyD,EAAE,CAC/D,KAAK,CAAC,MAAM,KAAK,IAAI,CACxB,CAAC;IACF,MAAM,KAAK,GAAG,QAAQ,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CACrC,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,UAAU,CAAC,EAAE,EAAE;QAC1D,MAAM,QAAQ,GAAG,aAAa,CAC5B,KAAK,CAAC,MAAM,CAAC,YAAY,EACzB,UAAU,EACV,GAAG,CACJ,CAAC;QACF,OAAO;YACL,EAAE,EAAE,GAAG;YACP,IAAI,EAAE,QAAQ,CAAC,CAAC,CAAC,IAAI,GAAG;YACxB,QAAQ;YACR,KAAK,EAAE,OAAO,CAAC,UAAU,CAAC;YAC1B,IAAI,EAAE,SAAS,CAAC,UAAU,CAAC;SAC5B,CAAC;IACJ,CAAC,CAAC,CACH,CAAC;IACF,MAAM,QAAQ,GAAG,CAAC,GAAG,KAAK,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IAC1C,MAAM,SAAS,GAAG,QAAQ,CAAC,OAAO,CAAC,CAAC,IAAI,EAAsB,EAAE,CAC9D,IAAI,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC,CACjD,CAAC;IACF,OAAO;QACL,iBAAiB,EAAE,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,IAAI,KAAK,WAAW,CAAC;QACrE,KAAK,EAAE,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,GAAG,YAAY,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC;QAC7D,0EAA0E;QAC1E,yEAAyE;QACzE,uCAAuC;QACvC,UAAU,EAAE,IAAI,GAAG,CAAC,CAAC,GAAG,SAAS,CAAC,CAAC,OAAO,EAAE,CAAC;QAC7C,IAAI,EAAE,IAAI,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAC5C,eAAe,EAAE,IAAI,GAAG,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QACjE,QAAQ;KACT,CAAC;AACJ,CAAC;AAED;;;;;GAKG;AACH,SAAS,OAAO,CAAC,IAAa,EAAE,KAAc;IAC5C,OAAO,IAAI,CAAC,EAAE,CAAC,aAAa,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;AACzC,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,cAAc,CAAC,KAAkB;IAC/C,OAAO,EAAE,OAAO,EAAE,KAAK,CAAC,iBAAiB,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,CAAC;AAClE,CAAC;AAED;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,aAAa,CAC3B,KAAkB,EAClB,MAAc,EACd,UAAyB;IAEzB,IAAI,UAAU,KAAK,IAAI,EAAE,CAAC;QACxB,OAAO;YACL,KAAK,EAAE,gBAAgB;YACvB,MAAM,EAAE,eAAe;YACvB,OAAO,EACL,wGAAwG;SAC3G,CAAC;IACJ,CAAC;IACD,IAAI,CAAC,KAAK,CAAC,iBAAiB;QAAE,OAAO,qBAAqB,CAAC;IAC3D,MAAM,QAAQ,GAAG,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;IAClD,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;QAC3B,OAAO,EAAE,KAAK,EAAE,UAAU,EAAE,KAAK,EAAE,QAAQ,KAAK,MAAM,EAAE,CAAC;IAC3D,CAAC;IACD,IAAI,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC;QAAE,OAAO,EAAE,KAAK,EAAE,UAAU,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC;IAC3E,OAAO;QACL,KAAK,EAAE,SAAS;QAChB,MAAM,EAAE,+BAA+B;QACvC,OAAO,EAAE,0DAA0D,UAAU,iFAAiF;KAC/J,CAAC;AACJ,CAAC"}

package/dist/cli/gate-report-fragment.d.ts

@@ -0,0 +1,11 @@
+import type { GateReport } from "./gate-report-types.js";
+/** The class every rule in the report's stylesheet is scoped to. */
+export declare const GATE_REPORT_ROOT_CLASS = "lisa-gate-report";
+/**
+ * Render the report as a fragment for the console tab.
+ * @param report - The emitter's output
+ * @param projectLabel - How to name the project being reported on
+ * @returns HTML with no document wrapper, safe to inject into the console
+ */
+export declare function renderGateReportFragment(report: GateReport, projectLabel: string): string;
+//# sourceMappingURL=gate-report-fragment.d.ts.map

package/dist/cli/gate-report-fragment.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"gate-report-fragment.d.ts","sourceRoot":"","sources":["../../src/cli/gate-report-fragment.ts"],"names":[],"mappings":"AAgCA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,wBAAwB,CAAC;AAEzD,oEAAoE;AACpE,eAAO,MAAM,sBAAsB,qBAAqB,CAAC;AAwCzD;;;;;GAKG;AACH,wBAAgB,wBAAwB,CACtC,MAAM,EAAE,UAAU,EAClB,YAAY,EAAE,MAAM,GACnB,MAAM,CA8BR"}

package/dist/cli/gate-report-fragment.js

@@ -0,0 +1,100 @@
+/**
+ * The gate report as an HTML fragment, for the Doctor tab in `lisa ui`.
+ *
+ * A fragment rather than a document because the ruling is that this is one
+ * surface: a tab alongside the console's other tabs, not a second page on a
+ * second port served by a second server.
+ *
+ * It is composed HERE and injected by the server at request time, and that is
+ * deliberate. `ui/index.html` is a single 13,000-line zero-build file with a
+ * known concurrent-edit hazard where union merges lose braces; appending a
+ * section of this size to it would make a bad merge materially worse and would
+ * put a second copy of this markup somewhere no test renders. The console
+ * gains a small block that asks the server for this string, so the file grows
+ * by tens of lines rather than hundreds, and opening `ui/index.html` straight
+ * from disk still works — the tab then says, in the report's own vocabulary,
+ * that it could not be derived without a server rather than showing an empty
+ * panel.
+ *
+ * Pure and total: report in, string out, no I/O, so the same emitter output
+ * always produces the same bytes.
+ * @module cli/gate-report-fragment
+ */
+import { chip, escapeHtml } from "./gate-report-html.js";
+import { gateRow } from "./gate-report-rows.js";
+import { agentHooksSection, requiredContextsSection, rulesetSection, summarySection, upstreamSection, } from "./gate-report-sections.js";
+import { GATE_REPORT_STYLE } from "./gate-report-style.js";
+/** The class every rule in the report's stylesheet is scoped to. */
+export const GATE_REPORT_ROOT_CLASS = "lisa-gate-report";
+/**
+ * The legend, which is where the three states are named for the reader.
+ * @returns A block of HTML
+ */
+function legend() {
+    return [
+        '<div class="lgr-legend">',
+        `<span><span class="lgr-state lgr-required">must</span> declared required</span>`,
+        `<span><span class="lgr-state lgr-optional">tells</span> declared optional</span>`,
+        `<span><span class="lgr-state lgr-off">off</span> declared off — different from never declared</span>`,
+        `<span><span class="lgr-state lgr-undeclared">not declared</span> the settings file never mentions it here</span>`,
+        `<span>${chip("b-A", "A")} declared, and something reads the declaration</span>`,
+        `<span>${chip("b-B", "B")} something runs it anyway; the settings file has no say</span>`,
+        `<span>${chip("b-C", "C")} declared, but nothing can run it</span>`,
+        `<span>${chip("b-D", "D")} nothing declares it and nothing runs it</span>`,
+        `<span>${chip("unknown", "not checked here")} this run could not determine it — NOT a pass</span>`,
+        "</div>",
+    ].join("");
+}
+/**
+ * The footer, which names what the report was derived from.
+ * @param report - The whole report
+ * @returns A block of HTML
+ */
+function footer(report) {
+    const runner = report.runner.state === "verified" ? report.runner.value : "unknown";
+    const problems = report.declarationProblems.length === 0
+        ? ""
+        : ` · <strong>${report.declarationProblems.length} declaration problem(s)</strong>: ${escapeHtml(report.declarationProblems.join("; "))}`;
+    const facade = report.facadeSource.present
+        ? `the workflow file was read from this checkout (${report.facadeSource.files.length} workflow file(s))`
+        : "this project holds no copy of the workflow, so what each cloud job does with a declaration could not be read";
+    return `<div class="lgr-foot"><p>Report format v${report.version} · registry read from the running Lisa package · runner <code>${escapeHtml(runner)}</code> · ${escapeHtml(facade)}${problems}</p></div>`;
+}
+/**
+ * Render the report as a fragment for the console tab.
+ * @param report - The emitter's output
+ * @param projectLabel - How to name the project being reported on
+ * @returns HTML with no document wrapper, safe to inject into the console
+ */
+export function renderGateReportFragment(report, projectLabel) {
+    const axis = report.momentAxis;
+    const head = axis
+        .map(moment => `<th class="lgr-m">${escapeHtml(moment)}</th>`)
+        .join("");
+    return [
+        `<div class="${GATE_REPORT_ROOT_CLASS}">`,
+        `<style>${GATE_REPORT_STYLE}</style>`,
+        `<p class="lgr-sub">Derived, not written. Every number below comes from ${escapeHtml(projectLabel)}'s own settings file, package scripts, git hooks and workflows, joined against Lisa's check registry. Nothing here is a language model's summary of those files.</p>`,
+        summarySection(report),
+        "<h2>Every check, and what governs it</h2>",
+        '<p class="lgr-lede">One row per check. One column per moment this project can declare a check at — there is no bare "deploy" column, because Lisa has no such moment: the deploy families take an environment suffix and only appear once a project names one.</p>',
+        legend(),
+        '<div class="lgr-scroll"><table>',
+        `<thead><tr><th>Check</th><th>What a pass proves</th><th>Command</th>${head}<th class="lgr-m">Blocks a merge</th><th>Cloud job</th></tr></thead>`,
+        `<tbody>${report.gates.map(row => gateRow(row, axis)).join("")}</tbody>`,
+        "</table></div>",
+        "<h2>What your settings imply, against what the repository requires</h2>",
+        '<p class="lgr-lede">The contexts the settings file implies, beside the ones the repository\'s branch-protection rules really require. Nothing compares these two automatically, so they are only ever equal by hand.</p>',
+        rulesetSection(report),
+        "<h2>What else gates my merges, and where does it come from</h2>",
+        '<p class="lgr-lede">Everything above describes Lisa\'s own jobs. This is every required check standing between a change and a merge, whoever put it there — including the ones Lisa neither ships nor governs.</p>',
+        requiredContextsSection(report),
+        "<h2>What runs on every edit</h2>",
+        agentHooksSection(report),
+        `<h2>${report.projectIsUpstream ? "Lisa's own limitations — and this project is Lisa" : "Not this project's — Lisa's"}</h2>`,
+        upstreamSection(report),
+        footer(report),
+        "</div>",
+    ].join("");
+}
+//# sourceMappingURL=gate-report-fragment.js.map

package/dist/cli/gate-report-fragment.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"gate-report-fragment.js","sourceRoot":"","sources":["../../src/cli/gate-report-fragment.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,MAAM,uBAAuB,CAAC;AACzD,OAAO,EAAE,OAAO,EAAE,MAAM,uBAAuB,CAAC;AAChD,OAAO,EACL,iBAAiB,EACjB,uBAAuB,EACvB,cAAc,EACd,cAAc,EACd,eAAe,GAChB,MAAM,2BAA2B,CAAC;AACnC,OAAO,EAAE,iBAAiB,EAAE,MAAM,wBAAwB,CAAC;AAG3D,oEAAoE;AACpE,MAAM,CAAC,MAAM,sBAAsB,GAAG,kBAAkB,CAAC;AAEzD;;;GAGG;AACH,SAAS,MAAM;IACb,OAAO;QACL,0BAA0B;QAC1B,iFAAiF;QACjF,kFAAkF;QAClF,sGAAsG;QACtG,kHAAkH;QAClH,SAAS,IAAI,CAAC,KAAK,EAAE,GAAG,CAAC,uDAAuD;QAChF,SAAS,IAAI,CAAC,KAAK,EAAE,GAAG,CAAC,gEAAgE;QACzF,SAAS,IAAI,CAAC,KAAK,EAAE,GAAG,CAAC,0CAA0C;QACnE,SAAS,IAAI,CAAC,KAAK,EAAE,GAAG,CAAC,iDAAiD;QAC1E,SAAS,IAAI,CAAC,SAAS,EAAE,kBAAkB,CAAC,sDAAsD;QAClG,QAAQ;KACT,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;AACb,CAAC;AAED;;;;GAIG;AACH,SAAS,MAAM,CAAC,MAAkB;IAChC,MAAM,MAAM,GACV,MAAM,CAAC,MAAM,CAAC,KAAK,KAAK,UAAU,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;IACvE,MAAM,QAAQ,GACZ,MAAM,CAAC,mBAAmB,CAAC,MAAM,KAAK,CAAC;QACrC,CAAC,CAAC,EAAE;QACJ,CAAC,CAAC,cAAc,MAAM,CAAC,mBAAmB,CAAC,MAAM,qCAAqC,UAAU,CAAC,MAAM,CAAC,mBAAmB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC;IAC9I,MAAM,MAAM,GAAG,MAAM,CAAC,YAAY,CAAC,OAAO;QACxC,CAAC,CAAC,kDAAkD,MAAM,CAAC,YAAY,CAAC,KAAK,CAAC,MAAM,oBAAoB;QACxG,CAAC,CAAC,8GAA8G,CAAC;IACnH,OAAO,2CAA2C,MAAM,CAAC,OAAO,iEAAiE,UAAU,CAAC,MAAM,CAAC,aAAa,UAAU,CAAC,MAAM,CAAC,GAAG,QAAQ,YAAY,CAAC;AAC5M,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,wBAAwB,CACtC,MAAkB,EAClB,YAAoB;IAEpB,MAAM,IAAI,GAAG,MAAM,CAAC,UAAU,CAAC;IAC/B,MAAM,IAAI,GAAG,IAAI;SACd,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,qBAAqB,UAAU,CAAC,MAAM,CAAC,OAAO,CAAC;SAC7D,IAAI,CAAC,EAAE,CAAC,CAAC;IACZ,OAAO;QACL,eAAe,sBAAsB,IAAI;QACzC,UAAU,iBAAiB,UAAU;QACrC,0EAA0E,UAAU,CAAC,YAAY,CAAC,sKAAsK;QACxQ,cAAc,CAAC,MAAM,CAAC;QACtB,2CAA2C;QAC3C,oQAAoQ;QACpQ,MAAM,EAAE;QACR,iCAAiC;QACjC,uEAAuE,IAAI,sEAAsE;QACjJ,UAAU,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,OAAO,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,UAAU;QACxE,gBAAgB;QAChB,yEAAyE;QACzE,0NAA0N;QAC1N,cAAc,CAAC,MAAM,CAAC;QACtB,iEAAiE;QACjE,oNAAoN;QACpN,uBAAuB,CAAC,MAAM,CAAC;QAC/B,kCAAkC;QAClC,iBAAiB,CAAC,MAAM,CAAC;QACzB,OAAO,MAAM,CAAC,iBAAiB,CAAC,CAAC,CAAC,mDAAmD,CAAC,CAAC,CAAC,6BAA6B,OAAO;QAC5H,eAAe,CAAC,MAAM,CAAC;QACvB,MAAM,CAAC,MAAM,CAAC;QACd,QAAQ;KACT,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;AACb,CAAC"}

package/dist/cli/gate-report-html.d.ts

@@ -0,0 +1,47 @@
+/**
+ * The report's HTML primitives.
+ *
+ * One escaper and one chip vocabulary, shared by every renderer, so a state
+ * cannot acquire a second spelling. The rule the chips exist to hold: an
+ * `unknown` must never look like a pass, and — the gap that shipped in the
+ * first cut — it must never look like nothing either. A caller that omits a
+ * chip because it had nothing to show has invented a fourth outcome the
+ * three-state design never sanctioned, and silence is the one outcome a reader
+ * cannot tell from "fine".
+ * @module cli/gate-report-html
+ */
+import type { Finding } from "./gate-report-types.js";
+/**
+ * Escape a string for interpolation into HTML.
+ * @param value - Raw text
+ * @returns Escaped text
+ */
+export declare function escapeHtml(value: string): string;
+/**
+ * One chip.
+ * @param variant - The chip's state class
+ * @param text - Its label
+ * @param title - Hover text explaining it
+ * @returns One chip of HTML
+ */
+export declare function chip(variant: string, text: string, title?: string): string;
+/**
+ * The chip for a finding this run could not determine.
+ *
+ * Carries the human message as hover text rather than dropping it: a report
+ * that says "not checked here" without saying why is indistinguishable from a
+ * bug in the report.
+ * @param finding - An unknown or not-applicable finding
+ * @param label - What to call it
+ * @returns One chip of HTML
+ */
+export declare function unknownChip(finding: Extract<Finding<unknown>, {
+    reason: string;
+}>, label?: string): string;
+/**
+ * One monospaced fragment.
+ * @param value - Raw text
+ * @returns The text inside a `code` element, escaped
+ */
+export declare function code(value: string): string;
+//# sourceMappingURL=gate-report-html.d.ts.map

package/dist/cli/gate-report-html.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"gate-report-html.d.ts","sourceRoot":"","sources":["../../src/cli/gate-report-html.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AACH,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,wBAAwB,CAAC;AAWtD;;;;GAIG;AACH,wBAAgB,UAAU,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAKhD;AAED;;;;;;GAMG;AACH,wBAAgB,IAAI,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,SAAK,GAAG,MAAM,CAGtE;AAED;;;;;;;;;GASG;AACH,wBAAgB,WAAW,CACzB,OAAO,EAAE,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE;IAAE,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC,EACtD,KAAK,SAAqB,GACzB,MAAM,CAER;AAED;;;;GAIG;AACH,wBAAgB,IAAI,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAE1C"}

package/dist/cli/gate-report-html.js

@@ -0,0 +1,49 @@
+/** Characters that must not reach the browser as markup. */
+const ESCAPES = {
+    "&": "&",
+    "<": "&lt;",
+    ">": "&gt;",
+    '"': "&quot;",
+    "'": "&#39;",
+};
+/**
+ * Escape a string for interpolation into HTML.
+ * @param value - Raw text
+ * @returns Escaped text
+ */
+export function escapeHtml(value) {
+    return value.replace(/[&<>"']/g, character => ESCAPES[character] ?? character);
+}
+/**
+ * One chip.
+ * @param variant - The chip's state class
+ * @param text - Its label
+ * @param title - Hover text explaining it
+ * @returns One chip of HTML
+ */
+export function chip(variant, text, title = "") {
+    const attribute = title === "" ? "" : ` title="${escapeHtml(title)}"`;
+    return `<span class="lgr-chip lgr-${escapeHtml(variant)}"${attribute}>${escapeHtml(text)}</span>`;
+}
+/**
+ * The chip for a finding this run could not determine.
+ *
+ * Carries the human message as hover text rather than dropping it: a report
+ * that says "not checked here" without saying why is indistinguishable from a
+ * bug in the report.
+ * @param finding - An unknown or not-applicable finding
+ * @param label - What to call it
+ * @returns One chip of HTML
+ */
+export function unknownChip(finding, label = "not checked here") {
+    return chip("unknown", label, finding.message);
+}
+/**
+ * One monospaced fragment.
+ * @param value - Raw text
+ * @returns The text inside a `code` element, escaped
+ */
+export function code(value) {
+    return `<code>${escapeHtml(value)}</code>`;
+}
+//# sourceMappingURL=gate-report-html.js.map

package/dist/cli/gate-report-html.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"gate-report-html.js","sourceRoot":"","sources":["../../src/cli/gate-report-html.ts"],"names":[],"mappings":"AAcA,4DAA4D;AAC5D,MAAM,OAAO,GAAqC;IAChD,GAAG,EAAE,OAAO;IACZ,GAAG,EAAE,MAAM;IACX,GAAG,EAAE,MAAM;IACX,GAAG,EAAE,QAAQ;IACb,GAAG,EAAE,OAAO;CACb,CAAC;AAEF;;;;GAIG;AACH,MAAM,UAAU,UAAU,CAAC,KAAa;IACtC,OAAO,KAAK,CAAC,OAAO,CAClB,UAAU,EACV,SAAS,CAAC,EAAE,CAAC,OAAO,CAAC,SAAS,CAAC,IAAI,SAAS,CAC7C,CAAC;AACJ,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,IAAI,CAAC,OAAe,EAAE,IAAY,EAAE,KAAK,GAAG,EAAE;IAC5D,MAAM,SAAS,GAAG,KAAK,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,WAAW,UAAU,CAAC,KAAK,CAAC,GAAG,CAAC;IACtE,OAAO,6BAA6B,UAAU,CAAC,OAAO,CAAC,IAAI,SAAS,IAAI,UAAU,CAAC,IAAI,CAAC,SAAS,CAAC;AACpG,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,WAAW,CACzB,OAAsD,EACtD,KAAK,GAAG,kBAAkB;IAE1B,OAAO,IAAI,CAAC,SAAS,EAAE,KAAK,EAAE,OAAO,CAAC,OAAO,CAAC,CAAC;AACjD,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,IAAI,CAAC,KAAa;IAChC,OAAO,SAAS,UAAU,CAAC,KAAK,CAAC,SAAS,CAAC;AAC7C,CAAC"}

package/dist/cli/gate-report-joins.d.ts

@@ -0,0 +1,37 @@
+import type { FacadeFacts } from "./gate-report-facade.js";
+import type { GateRegistryModule } from "./gate-report-registry.js";
+import type { Finding, MergeBlock, RequiredContextRow, RulesetComparison } from "./gate-report-types.js";
+/** Everything the joins need about this run. */
+export interface JoinContext {
+    /** The shipped registry. */
+    readonly registry: GateRegistryModule;
+    /** The project's gates block. */
+    readonly gates: Record<string, unknown>;
+    /** The live required contexts, or an unknown. */
+    readonly contexts: Finding<readonly string[]>;
+    /** What the project's own workflows say. */
+    readonly facade: FacadeFacts;
+    /** The moment a ruleset guards. */
+    readonly mergeMoment: string;
+    /** The workflow name a run gate's context is built from. */
+    readonly workflowName: string;
+}
+/**
+ * The Tier 2 answer for one cell, never defaulted to a verdict.
+ * @param context - The join inputs
+ * @returns A resolver for one cell's expected context
+ */
+export declare function mergeBlockResolver(context: JoinContext): (moment: string, expectedContext: string | null) => Finding<MergeBlock>;
+/**
+ * The ruleset comparison, or the same unknown the contexts came back with.
+ * @param context - The join inputs
+ * @returns The comparison
+ */
+export declare function buildRulesetFinding(context: JoinContext): Finding<RulesetComparison>;
+/**
+ * Every context a merge is blocked on, with who owns it.
+ * @param context - The join inputs
+ * @returns One row per required context, or the same unknown
+ */
+export declare function buildRequiredContexts(context: JoinContext): Finding<readonly RequiredContextRow[]>;
+//# sourceMappingURL=gate-report-joins.d.ts.map

package/dist/cli/gate-report-joins.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"gate-report-joins.d.ts","sourceRoot":"","sources":["../../src/cli/gate-report-joins.ts"],"names":[],"mappings":"AAmBA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,yBAAyB,CAAC;AAC3D,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,2BAA2B,CAAC;AAEpE,OAAO,KAAK,EACV,OAAO,EACP,UAAU,EACV,kBAAkB,EAClB,iBAAiB,EAClB,MAAM,wBAAwB,CAAC;AAEhC,gDAAgD;AAChD,MAAM,WAAW,WAAW;IAC1B,4BAA4B;IAC5B,QAAQ,CAAC,QAAQ,EAAE,kBAAkB,CAAC;IACtC,iCAAiC;IACjC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACxC,iDAAiD;IACjD,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAC,SAAS,MAAM,EAAE,CAAC,CAAC;IAC9C,4CAA4C;IAC5C,QAAQ,CAAC,MAAM,EAAE,WAAW,CAAC;IAC7B,mCAAmC;IACnC,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,4DAA4D;IAC5D,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;CAC/B;AAkBD;;;;GAIG;AACH,wBAAgB,kBAAkB,CAChC,OAAO,EAAE,WAAW,GACnB,CAAC,MAAM,EAAE,MAAM,EAAE,eAAe,EAAE,MAAM,GAAG,IAAI,KAAK,OAAO,CAAC,UAAU,CAAC,CAwBzE;AAED;;;;GAIG;AACH,wBAAgB,mBAAmB,CACjC,OAAO,EAAE,WAAW,GACnB,OAAO,CAAC,iBAAiB,CAAC,CAe5B;AAED;;;;GAIG;AACH,wBAAgB,qBAAqB,CACnC,OAAO,EAAE,WAAW,GACnB,OAAO,CAAC,SAAS,kBAAkB,EAAE,CAAC,CAaxC"}

package/dist/cli/gate-report-joins.js

@@ -0,0 +1,104 @@
+/**
+ * The joins between one project's declarations and the world outside it.
+ *
+ * Three of them, and each is a place two sources of truth are compared for the
+ * first time: the ruleset against the declaration (#2854's finding — nothing
+ * compares these today, so they are only ever equal by hand), every required
+ * context against who owns it, and one gate's implied context against the
+ * moment a ruleset can actually guard.
+ *
+ * Kept out of the report assembly because the assembly is a list of steps and
+ * these are the reasoning. Every one of them carries an unknown through rather
+ * than resolving it: a run that could not read branch protection has nothing to
+ * compare, and an empty comparison would report agreement.
+ * @module cli/gate-report-joins
+ */
+import { classifyRequiredContexts, lisaContextUniverse, } from "./gate-report-contexts.js";
+import { compareContexts } from "./gate-report-ruleset.js";
+/**
+ * The contexts a gates block implies at the merge moment.
+ * @param context - The join inputs
+ * @returns The contexts, or null when the block cannot be resolved
+ */
+function declaredContexts(context) {
+    try {
+        return context.registry.contextsFor(context.gates, {
+            moment: context.mergeMoment,
+            workflowName: context.workflowName,
+        });
+    }
+    catch {
+        return null;
+    }
+}
+/**
+ * The Tier 2 answer for one cell, never defaulted to a verdict.
+ * @param context - The join inputs
+ * @returns A resolver for one cell's expected context
+ */
+export function mergeBlockResolver(context) {
+    return (moment, expectedContext) => {
+        if (moment !== context.mergeMoment) {
+            return {
+                state: "not-applicable",
+                reason: "moment-produces-no-merge-context",
+                message: `A ruleset guards a merge, and only the ${context.mergeMoment} gate set produces the status contexts it names. A declaration at ${moment} is enforced by a hook, not by branch protection.`,
+            };
+        }
+        if (expectedContext === null) {
+            return {
+                state: "not-applicable",
+                reason: "no-required-declaration",
+                message: "Only a `required` declaration produces a status context, so there is nothing here for a ruleset to require.",
+            };
+        }
+        if (context.contexts.state !== "verified")
+            return context.contexts;
+        const required = context.contexts.value.includes(expectedContext);
+        return {
+            state: "verified",
+            value: { required, context: required ? expectedContext : null },
+        };
+    };
+}
+/**
+ * The ruleset comparison, or the same unknown the contexts came back with.
+ * @param context - The join inputs
+ * @returns The comparison
+ */
+export function buildRulesetFinding(context) {
+    if (context.contexts.state !== "verified")
+        return context.contexts;
+    const declared = declaredContexts(context);
+    if (declared === null) {
+        return {
+            state: "unknown",
+            reason: "declarations-unresolvable",
+            message: "The gates block could not be resolved, so the contexts it implies cannot be compared with the ruleset.",
+        };
+    }
+    return {
+        state: "verified",
+        value: compareContexts(declared, context.contexts.value),
+    };
+}
+/**
+ * Every context a merge is blocked on, with who owns it.
+ * @param context - The join inputs
+ * @returns One row per required context, or the same unknown
+ */
+export function buildRequiredContexts(context) {
+    return classifyRequiredContexts(context.contexts, {
+        declared: declaredContexts(context) ?? [],
+        lisaUniverse: lisaContextUniverse({
+            gateIds: Object.entries(context.registry.REGISTRY)
+                .filter(([, gate]) => gate.moments.includes(context.mergeMoment))
+                .map(([id]) => id),
+            moment: context.mergeMoment,
+            workflowName: context.workflowName,
+            contextsFor: context.registry.contextsFor,
+        }),
+        projectContexts: context.facade.projectContexts,
+    });
+}
+//# sourceMappingURL=gate-report-joins.js.map

package/dist/cli/gate-report-joins.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"gate-report-joins.js","sourceRoot":"","sources":["../../src/cli/gate-report-joins.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AACH,OAAO,EACL,wBAAwB,EACxB,mBAAmB,GACpB,MAAM,2BAA2B,CAAC;AAGnC,OAAO,EAAE,eAAe,EAAE,MAAM,0BAA0B,CAAC;AAwB3D;;;;GAIG;AACH,SAAS,gBAAgB,CAAC,OAAoB;IAC5C,IAAI,CAAC;QACH,OAAO,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAC,OAAO,CAAC,KAAK,EAAE;YACjD,MAAM,EAAE,OAAO,CAAC,WAAW;YAC3B,YAAY,EAAE,OAAO,CAAC,YAAY;SACnC,CAAC,CAAC;IACL,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,kBAAkB,CAChC,OAAoB;IAEpB,OAAO,CAAC,MAAM,EAAE,eAAe,EAAE,EAAE;QACjC,IAAI,MAAM,KAAK,OAAO,CAAC,WAAW,EAAE,CAAC;YACnC,OAAO;gBACL,KAAK,EAAE,gBAAgB;gBACvB,MAAM,EAAE,kCAAkC;gBAC1C,OAAO,EAAE,0CAA0C,OAAO,CAAC,WAAW,qEAAqE,MAAM,mDAAmD;aACrM,CAAC;QACJ,CAAC;QACD,IAAI,eAAe,KAAK,IAAI,EAAE,CAAC;YAC7B,OAAO;gBACL,KAAK,EAAE,gBAAgB;gBACvB,MAAM,EAAE,yBAAyB;gBACjC,OAAO,EACL,6GAA6G;aAChH,CAAC;QACJ,CAAC;QACD,IAAI,OAAO,CAAC,QAAQ,CAAC,KAAK,KAAK,UAAU;YAAE,OAAO,OAAO,CAAC,QAAQ,CAAC;QACnE,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC,QAAQ,CAAC,eAAe,CAAC,CAAC;QAClE,OAAO;YACL,KAAK,EAAE,UAAU;YACjB,KAAK,EAAE,EAAE,QAAQ,EAAE,OAAO,EAAE,QAAQ,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,IAAI,EAAE;SAChE,CAAC;IACJ,CAAC,CAAC;AACJ,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,mBAAmB,CACjC,OAAoB;IAEpB,IAAI,OAAO,CAAC,QAAQ,CAAC,KAAK,KAAK,UAAU;QAAE,OAAO,OAAO,CAAC,QAAQ,CAAC;IACnE,MAAM,QAAQ,GAAG,gBAAgB,CAAC,OAAO,CAAC,CAAC;IAC3C,IAAI,QAAQ,KAAK,IAAI,EAAE,CAAC;QACtB,OAAO;YACL,KAAK,EAAE,SAAS;YAChB,MAAM,EAAE,2BAA2B;YACnC,OAAO,EACL,wGAAwG;SAC3G,CAAC;IACJ,CAAC;IACD,OAAO;QACL,KAAK,EAAE,UAAU;QACjB,KAAK,EAAE,eAAe,CAAC,QAAQ,EAAE,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC;KACzD,CAAC;AACJ,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,qBAAqB,CACnC,OAAoB;IAEpB,OAAO,wBAAwB,CAAC,OAAO,CAAC,QAAQ,EAAE;QAChD,QAAQ,EAAE,gBAAgB,CAAC,OAAO,CAAC,IAAI,EAAE;QACzC,YAAY,EAAE,mBAAmB,CAAC;YAChC,OAAO,EAAE,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAC;iBAC/C,MAAM,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;iBAChE,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC;YACpB,MAAM,EAAE,OAAO,CAAC,WAAW;YAC3B,YAAY,EAAE,OAAO,CAAC,YAAY;YAClC,WAAW,EAAE,OAAO,CAAC,QAAQ,CAAC,WAAW;SAC1C,CAAC;QACF,eAAe,EAAE,OAAO,CAAC,MAAM,CAAC,eAAe;KAChD,CAAC,CAAC;AACL,CAAC"}

package/dist/cli/gate-report-merge.d.ts

@@ -0,0 +1,22 @@
+import { type FacadeFacts } from "./gate-report-facade.js";
+import type { Finding, MergeVerdict } from "./gate-report-types.js";
+/** Everything one row's verdict is derived from. */
+export interface MergeVerdictInputs {
+    /** The context this gate's own `required` declaration implies, if any. */
+    readonly expectedContext: string | null;
+    /** The task this gate resolves to at the merge moment. */
+    readonly task: string | null;
+    /** This gate's own CI job name, so another job's name can be told apart. */
+    readonly label: string;
+    /** The live required contexts, or an unknown. */
+    readonly required: Finding<readonly string[]>;
+    /** What the project's own workflows say. */
+    readonly facade: FacadeFacts;
+}
+/**
+ * Whether a merge is blocked on one gate, and under whose name.
+ * @param inputs - Verdict inputs
+ * @returns The verdict, or the honest refusal to give one
+ */
+export declare function mergeVerdict(inputs: MergeVerdictInputs): Finding<MergeVerdict>;
+//# sourceMappingURL=gate-report-merge.d.ts.map

package/dist/cli/gate-report-merge.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"gate-report-merge.d.ts","sourceRoot":"","sources":["../../src/cli/gate-report-merge.ts"],"names":[],"mappings":"AAsBA,OAAO,EAEL,KAAK,WAAW,EACjB,MAAM,yBAAyB,CAAC;AACjC,OAAO,KAAK,EAAE,OAAO,EAAE,YAAY,EAAE,MAAM,wBAAwB,CAAC;AAEpE,oDAAoD;AACpD,MAAM,WAAW,kBAAkB;IACjC,0EAA0E;IAC1E,QAAQ,CAAC,eAAe,EAAE,MAAM,GAAG,IAAI,CAAC;IACxC,0DAA0D;IAC1D,QAAQ,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,4EAA4E;IAC5E,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,iDAAiD;IACjD,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAC,SAAS,MAAM,EAAE,CAAC,CAAC;IAC9C,4CAA4C;IAC5C,QAAQ,CAAC,MAAM,EAAE,WAAW,CAAC;CAC9B;AAsBD;;;;GAIG;AACH,wBAAgB,YAAY,CAC1B,MAAM,EAAE,kBAAkB,GACzB,OAAO,CAAC,YAAY,CAAC,CA4BvB"}