@codyswann/lisa 3.49.0 → 3.51.0

package/dist/cli/gate-report-contexts.d.ts

@@ -0,0 +1,70 @@
+/**
+ * What else gates my merges, and where does it come from?
+ *
+ * The rest of this report describes Lisa's own jobs. A reader can reasonably
+ * take that for the whole picture of what stands between their work and a
+ * merge, and it is not: a project's CI almost always carries jobs Lisa neither
+ * ships nor governs — a third-party app, or a workflow the project wrote — and
+ * some of them are required.
+ *
+ * Four origins, because collapsing them loses the attribution. A context Lisa
+ * ships AND a declaration governs is working as intended. A context Lisa ships
+ * that nothing declares is the project's own settings gap. A context from the
+ * project's own workflow is the project's, and Lisa has no opinion about it. A
+ * context from something else entirely is neither the project's
+ * misconfiguration nor Lisa's defect, and reporting it as a gap in either is
+ * how a report manufactures a problem that does not exist.
+ * @module cli/gate-report-contexts
+ */
+import type { ContextOrigin, Finding, RequiredContextRow } from "./gate-report-types.js";
+/** Everything the classification needs. */
+export interface ContextOriginInputs {
+    /** Contexts the settings file's `required` declarations imply. */
+    readonly declared: readonly string[];
+    /** Every context Lisa could produce if every gate were declared required. */
+    readonly lisaUniverse: readonly string[];
+    /** Contexts the project's own workflows could post. */
+    readonly projectContexts: ReadonlySet<string>;
+}
+/**
+ * Which of the four origins a required context has.
+ * @param context - The context string
+ * @param inputs - Everything the classification needs
+ * @returns The origin
+ */
+export declare function originOf(context: string, inputs: ContextOriginInputs): ContextOrigin;
+/**
+ * Classify every context a merge is actually blocked on.
+ *
+ * Carries the unknown through unchanged. A run that could not read branch
+ * protection has no list to classify, and inventing an empty one would report
+ * "nothing else gates your merges" on the strength of not having looked.
+ * @param required - The live required contexts, or an unknown
+ * @param inputs - Everything the classification needs
+ * @returns One row per required context, sorted, or the same unknown
+ */
+export declare function classifyRequiredContexts(required: Finding<readonly string[]>, inputs: ContextOriginInputs): Finding<readonly RequiredContextRow[]>;
+/**
+ * Every context Lisa could produce, if every gate were declared required.
+ *
+ * Derived by asking the registry rather than by rebuilding its format string:
+ * an `await` gate posts under the awaited signal's own name and a `run` gate
+ * under the calling workflow's, and a second transcription of that rule is a
+ * second thing to keep true.
+ * @param options - Derivation inputs
+ * @param options.gateIds - Gate ids legal at the merge moment
+ * @param options.moment - The merge moment
+ * @param options.workflowName - The calling workflow's name
+ * @param options.contextsFor - The registry's own context derivation
+ * @returns Every context Lisa ships a job for, sorted
+ */
+export declare function lisaContextUniverse(options: {
+    gateIds: readonly string[];
+    moment: string;
+    workflowName: string;
+    contextsFor: (gates: Record<string, unknown>, options?: {
+        moment?: string;
+        workflowName?: string;
+    }) => string[];
+}): string[];
+//# sourceMappingURL=gate-report-contexts.d.ts.map

package/dist/cli/gate-report-contexts.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"gate-report-contexts.d.ts","sourceRoot":"","sources":["../../src/cli/gate-report-contexts.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AACH,OAAO,KAAK,EACV,aAAa,EACb,OAAO,EACP,kBAAkB,EACnB,MAAM,wBAAwB,CAAC;AAEhC,2CAA2C;AAC3C,MAAM,WAAW,mBAAmB;IAClC,kEAAkE;IAClE,QAAQ,CAAC,QAAQ,EAAE,SAAS,MAAM,EAAE,CAAC;IACrC,6EAA6E;IAC7E,QAAQ,CAAC,YAAY,EAAE,SAAS,MAAM,EAAE,CAAC;IACzC,uDAAuD;IACvD,QAAQ,CAAC,eAAe,EAAE,WAAW,CAAC,MAAM,CAAC,CAAC;CAC/C;AAcD;;;;;GAKG;AACH,wBAAgB,QAAQ,CACtB,OAAO,EAAE,MAAM,EACf,MAAM,EAAE,mBAAmB,GAC1B,aAAa,CAMf;AAED;;;;;;;;;GASG;AACH,wBAAgB,wBAAwB,CACtC,QAAQ,EAAE,OAAO,CAAC,SAAS,MAAM,EAAE,CAAC,EACpC,MAAM,EAAE,mBAAmB,GAC1B,OAAO,CAAC,SAAS,kBAAkB,EAAE,CAAC,CAWxC;AAED;;;;;;;;;;;;;GAaG;AACH,wBAAgB,mBAAmB,CAAC,OAAO,EAAE;IAC3C,OAAO,EAAE,SAAS,MAAM,EAAE,CAAC;IAC3B,MAAM,EAAE,MAAM,CAAC;IACf,YAAY,EAAE,MAAM,CAAC;IACrB,WAAW,EAAE,CACX,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC9B,OAAO,CAAC,EAAE;QAAE,MAAM,CAAC,EAAE,MAAM,CAAC;QAAC,YAAY,CAAC,EAAE,MAAM,CAAA;KAAE,KACjD,MAAM,EAAE,CAAC;CACf,GAAG,MAAM,EAAE,CAYX"}

package/dist/cli/gate-report-contexts.js

@@ -0,0 +1,72 @@
+/** What each origin means, in one operator-readable sentence. */
+const DETAILS = {
+    "lisa-governed": "Lisa ships the job and a declaration in this project's settings governs it. Changing the declaration changes what runs.",
+    "lisa-undeclared": "Lisa ships the job and it blocks merges, but nothing in this project's settings governs it — changing the settings file cannot turn it on, off, or into something else.",
+    "project-workflow": "This project's own workflow posts this context. Lisa neither ships nor governs it, and nothing here is a finding against it.",
+    "third-party": "Neither Lisa nor a workflow in this repository posts this context — it comes from an app installed on the repository. It gates merges and is outside both.",
+};
+/**
+ * Which of the four origins a required context has.
+ * @param context - The context string
+ * @param inputs - Everything the classification needs
+ * @returns The origin
+ */
+export function originOf(context, inputs) {
+    if (inputs.declared.includes(context))
+        return "lisa-governed";
+    if (inputs.lisaUniverse.includes(context))
+        return "lisa-undeclared";
+    return inputs.projectContexts.has(context)
+        ? "project-workflow"
+        : "third-party";
+}
+/**
+ * Classify every context a merge is actually blocked on.
+ *
+ * Carries the unknown through unchanged. A run that could not read branch
+ * protection has no list to classify, and inventing an empty one would report
+ * "nothing else gates your merges" on the strength of not having looked.
+ * @param required - The live required contexts, or an unknown
+ * @param inputs - Everything the classification needs
+ * @returns One row per required context, sorted, or the same unknown
+ */
+export function classifyRequiredContexts(required, inputs) {
+    if (required.state !== "verified")
+        return required;
+    return {
+        state: "verified",
+        value: [...required.value]
+            .sort((left, right) => left.localeCompare(right))
+            .map(context => {
+            const origin = originOf(context, inputs);
+            return { context, origin, detail: DETAILS[origin] };
+        }),
+    };
+}
+/**
+ * Every context Lisa could produce, if every gate were declared required.
+ *
+ * Derived by asking the registry rather than by rebuilding its format string:
+ * an `await` gate posts under the awaited signal's own name and a `run` gate
+ * under the calling workflow's, and a second transcription of that rule is a
+ * second thing to keep true.
+ * @param options - Derivation inputs
+ * @param options.gateIds - Gate ids legal at the merge moment
+ * @param options.moment - The merge moment
+ * @param options.workflowName - The calling workflow's name
+ * @param options.contextsFor - The registry's own context derivation
+ * @returns Every context Lisa ships a job for, sorted
+ */
+export function lisaContextUniverse(options) {
+    const everything = Object.fromEntries(options.gateIds.map(id => [id, { [options.moment]: "required" }]));
+    try {
+        return options.contextsFor(everything, {
+            moment: options.moment,
+            workflowName: options.workflowName,
+        });
+    }
+    catch {
+        return [];
+    }
+}
+//# sourceMappingURL=gate-report-contexts.js.map

package/dist/cli/gate-report-contexts.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"gate-report-contexts.js","sourceRoot":"","sources":["../../src/cli/gate-report-contexts.ts"],"names":[],"mappings":"AAkCA,iEAAiE;AACjE,MAAM,OAAO,GAA4C;IACvD,eAAe,EACb,yHAAyH;IAC3H,iBAAiB,EACf,yKAAyK;IAC3K,kBAAkB,EAChB,8HAA8H;IAChI,aAAa,EACX,4JAA4J;CAC/J,CAAC;AAEF;;;;;GAKG;AACH,MAAM,UAAU,QAAQ,CACtB,OAAe,EACf,MAA2B;IAE3B,IAAI,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,OAAO,CAAC;QAAE,OAAO,eAAe,CAAC;IAC9D,IAAI,MAAM,CAAC,YAAY,CAAC,QAAQ,CAAC,OAAO,CAAC;QAAE,OAAO,iBAAiB,CAAC;IACpE,OAAO,MAAM,CAAC,eAAe,CAAC,GAAG,CAAC,OAAO,CAAC;QACxC,CAAC,CAAC,kBAAkB;QACpB,CAAC,CAAC,aAAa,CAAC;AACpB,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,wBAAwB,CACtC,QAAoC,EACpC,MAA2B;IAE3B,IAAI,QAAQ,CAAC,KAAK,KAAK,UAAU;QAAE,OAAO,QAAQ,CAAC;IACnD,OAAO;QACL,KAAK,EAAE,UAAU;QACjB,KAAK,EAAE,CAAC,GAAG,QAAQ,CAAC,KAAK,CAAC;aACvB,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC;aAChD,GAAG,CAAC,OAAO,CAAC,EAAE;YACb,MAAM,MAAM,GAAG,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;YACzC,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;QACtD,CAAC,CAAC;KACL,CAAC;AACJ,CAAC;AAED;;;;;;;;;;;;;GAaG;AACH,MAAM,UAAU,mBAAmB,CAAC,OAQnC;IACC,MAAM,UAAU,GAAG,MAAM,CAAC,WAAW,CACnC,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC,CAClE,CAAC;IACF,IAAI,CAAC;QACH,OAAO,OAAO,CAAC,WAAW,CAAC,UAAU,EAAE;YACrC,MAAM,EAAE,OAAO,CAAC,MAAM;YACtB,YAAY,EAAE,OAAO,CAAC,YAAY;SACnC,CAAC,CAAC;IACL,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC"}

package/dist/cli/gate-report-facade.d.ts

@@ -0,0 +1,62 @@
+import type { FacadeSource, Finding } from "./gate-report-types.js";
+/** Everything the local workflows say about façade wiring. */
+export interface FacadeFacts {
+    /** Whether `quality.yml` itself was found and parsed. */
+    readonly qualityYmlPresent: boolean;
+    /** Workflow files parsed, project-relative and sorted. */
+    readonly files: readonly string[];
+    /** Job id -> the gate its façade resolves. */
+    readonly gatesByJob: ReadonlyMap<string, string>;
+    /** Every job id declared across the parsed workflows. */
+    readonly jobs: ReadonlySet<string>;
+    /**
+     * Every status context the project's OWN workflows could post.
+     *
+     * Both the bare job name and the `workflow / job` form, because GitHub
+     * spells a context differently depending on how the job was reached and a
+     * report that matched only one form would attribute a project's own job to a
+     * third party.
+     */
+    readonly projectContexts: ReadonlySet<string>;
+    /** Every job, with the shell it runs and the contexts it could post. */
+    readonly jobSites: readonly JobSite[];
+}
+/** One CI job, as the merge-verdict join reads it. */
+export interface JobSite {
+    /** The job's id. */
+    readonly id: string;
+    /** The job's `name:`, which is what a ruleset matches by string. */
+    readonly name: string;
+    /** The contexts it could post, in both spellings GitHub uses. */
+    readonly contexts: readonly string[];
+    /** Every `run:` block in the job, concatenated. */
+    readonly shell: string;
+}
+/** The refusal a project with no copy of the workflow gets. */
+export declare const TIER_THREE_UNKNOWABLE: Finding<never>;
+/**
+ * Read what the project's own workflows say about façade wiring.
+ * @param projectRoot - Project root
+ * @returns The facts, empty when the project holds no workflows
+ */
+export declare function readFacadeFacts(projectRoot: string): Promise<FacadeFacts>;
+/**
+ * How the report names the workflows it read.
+ * @param facts - The parsed workflow facts
+ * @returns The source block
+ */
+export declare function facadeSourceOf(facts: FacadeFacts): FacadeSource;
+/**
+ * Whether the CI job for one gate reads the declaration.
+ *
+ * Three answers, and the third is not a fourth state smuggled in: a job the
+ * workflow does not declare at all is a different fact from a job that runs a
+ * hardcoded command, and calling the first one `false` would report a gate as
+ * unwired on the strength of never having found it.
+ * @param facts - The parsed workflow facts
+ * @param gateId - The gate being reported
+ * @param qualityJob - The CI job the static table pairs with it
+ * @returns Whether that job's façade resolves this gate
+ */
+export declare function facadeFinding(facts: FacadeFacts, gateId: string, qualityJob: string | null): Finding<boolean>;
+//# sourceMappingURL=gate-report-facade.d.ts.map

package/dist/cli/gate-report-facade.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"gate-report-facade.d.ts","sourceRoot":"","sources":["../../src/cli/gate-report-facade.ts"],"names":[],"mappings":"AA4BA,OAAO,KAAK,EAAE,YAAY,EAAE,OAAO,EAAE,MAAM,wBAAwB,CAAC;AAWpE,8DAA8D;AAC9D,MAAM,WAAW,WAAW;IAC1B,yDAAyD;IACzD,QAAQ,CAAC,iBAAiB,EAAE,OAAO,CAAC;IACpC,0DAA0D;IAC1D,QAAQ,CAAC,KAAK,EAAE,SAAS,MAAM,EAAE,CAAC;IAClC,8CAA8C;IAC9C,QAAQ,CAAC,UAAU,EAAE,WAAW,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACjD,yDAAyD;IACzD,QAAQ,CAAC,IAAI,EAAE,WAAW,CAAC,MAAM,CAAC,CAAC;IACnC;;;;;;;OAOG;IACH,QAAQ,CAAC,eAAe,EAAE,WAAW,CAAC,MAAM,CAAC,CAAC;IAC9C,wEAAwE;IACxE,QAAQ,CAAC,QAAQ,EAAE,SAAS,OAAO,EAAE,CAAC;CACvC;AAED,sDAAsD;AACtD,MAAM,WAAW,OAAO;IACtB,oBAAoB;IACpB,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,oEAAoE;IACpE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,iEAAiE;IACjE,QAAQ,CAAC,QAAQ,EAAE,SAAS,MAAM,EAAE,CAAC;IACrC,mDAAmD;IACnD,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;CACxB;AAED,+DAA+D;AAC/D,eAAO,MAAM,qBAAqB,EAAE,OAAO,CAAC,KAAK,CAKhD,CAAC;AA+GF;;;;GAIG;AACH,wBAAsB,eAAe,CACnC,WAAW,EAAE,MAAM,GAClB,OAAO,CAAC,WAAW,CAAC,CA2CtB;AAYD;;;;GAIG;AACH,wBAAgB,cAAc,CAAC,KAAK,EAAE,WAAW,GAAG,YAAY,CAE/D;AAED;;;;;;;;;;;GAWG;AACH,wBAAgB,aAAa,CAC3B,KAAK,EAAE,WAAW,EAClB,MAAM,EAAE,MAAM,EACd,UAAU,EAAE,MAAM,GAAG,IAAI,GACxB,OAAO,CAAC,OAAO,CAAC,CAoBlB"}

package/dist/cli/gate-report-facade.js

@@ -0,0 +1,224 @@
+/**
+ * Tier 3 — whether a CI job reads the declaration or runs a hardcoded command.
+ *
+ * That answer is written in `.github/workflows/quality.yml`, and a consumer
+ * holds no copy of it: it calls the reusable workflow by ref. So for most
+ * projects the honest answer is that the question cannot be answered here.
+ *
+ * It was, however, being refused UNCONDITIONALLY — including in the one
+ * repository where the file is present, which is Lisa's own. A refusal that
+ * does not look is indistinguishable from a refusal that looked and failed,
+ * and only one of those is true. So: when the workflow is on disk, read it and
+ * answer.
+ *
+ * The read is a deterministic YAML parse and nothing else. No agent, no
+ * judgement, no network. A job's façade is wired when its steps carry the
+ * resolve step — `id: gate` with a `GATE_ID` in its environment — which is the
+ * same signal `tests/integration/quality-gate-skip-jobs-mapping.test.ts`
+ * derives the shipped job table from, so the two cannot answer differently.
+ *
+ * Sibling workflows are scanned too, because a job that moved to a workflow of
+ * its own took its façade with it. Reading `quality.yml` alone would report a
+ * moved job as unwired on the grounds that it is no longer next door.
+ * @module cli/gate-report-facade
+ */
+import { readdir, readFile } from "node:fs/promises";
+import * as path from "node:path";
+import { loadYaml } from "../utils/yaml.js";
+/** The workflow Tier 3 is written in. */
+const QUALITY_YML = "quality.yml";
+/** Where a repository keeps its workflows. */
+const WORKFLOW_DIR = path.join(".github", "workflows");
+/** The step id every façade resolve step carries. */
+const RESOLVE_STEP_ID = "gate";
+/** The refusal a project with no copy of the workflow gets. */
+export const TIER_THREE_UNKNOWABLE = {
+    state: "unknown",
+    reason: "determined-by-quality-yml",
+    message: "Whether the CI job reads this declaration or runs a hardcoded command is written in quality.yml, which this project does not have — it calls the reusable workflow by ref.",
+};
+/**
+ * The gate one job's façade resolves, if it has one.
+ * @param job - One parsed job definition
+ * @returns The declared `GATE_ID`, or null
+ */
+function gateOfJob(job) {
+    if (job === null || typeof job !== "object")
+        return null;
+    const steps = Reflect.get(job, "steps");
+    if (!Array.isArray(steps))
+        return null;
+    const resolve = steps.find(step => step !== null &&
+        typeof step === "object" &&
+        Reflect.get(step, "id") === RESOLVE_STEP_ID);
+    if (resolve === undefined)
+        return null;
+    const environment = Reflect.get(resolve, "env");
+    if (environment === null || typeof environment !== "object")
+        return null;
+    const id = Reflect.get(environment, "GATE_ID");
+    return typeof id === "string" ? id : null;
+}
+/**
+ * Parse one workflow file into its name and its jobs.
+ * @param file - Absolute path
+ * @returns The parsed workflow, or null when it could not be read
+ */
+async function parseWorkflow(file) {
+    const source = await readFile(file, "utf8").catch(() => undefined);
+    if (source === undefined)
+        return null;
+    try {
+        const parsed = loadYaml(source);
+        if (parsed === null || typeof parsed !== "object")
+            return null;
+        const jobs = Reflect.get(parsed, "jobs");
+        if (jobs === null || typeof jobs !== "object")
+            return null;
+        const workflowName = Reflect.get(parsed, "name");
+        return {
+            workflowName: typeof workflowName === "string" ? workflowName : null,
+            jobs: jobs,
+        };
+    }
+    catch {
+        return null;
+    }
+}
+/**
+ * The contexts one job could post, in both spellings GitHub uses.
+ * @param workflowName - The declaring workflow's name
+ * @param job - The job definition
+ * @param jobId - The job's id, used when it declares no name
+ * @returns Candidate context strings
+ */
+function contextsOfJob(workflowName, job, jobId) {
+    const declared = job !== null && typeof job === "object" ? Reflect.get(job, "name") : null;
+    const name = typeof declared === "string" ? declared : jobId;
+    return workflowName === null ? [name] : [name, `${workflowName} / ${name}`];
+}
+/**
+ * Every `run:` block one job declares, concatenated.
+ * @param job - The job definition
+ * @returns The shell the job runs
+ */
+function shellOf(job) {
+    if (job === null || typeof job !== "object")
+        return "";
+    const steps = Reflect.get(job, "steps");
+    if (!Array.isArray(steps))
+        return "";
+    return steps
+        .map(step => {
+        if (step === null || typeof step !== "object")
+            return "";
+        const run = Reflect.get(step, "run");
+        return typeof run === "string" ? run : "";
+    })
+        .join("\n");
+}
+/**
+ * Every workflow file in the project, sorted so the report is stable.
+ * @param projectRoot - Project root
+ * @returns File names, sorted
+ */
+async function listWorkflowFiles(projectRoot) {
+    const entries = await readdir(path.join(projectRoot, WORKFLOW_DIR), {
+        withFileTypes: true,
+    }).catch(() => undefined);
+    if (entries === undefined)
+        return [];
+    return entries
+        .filter(entry => entry.isFile() &&
+        (entry.name.endsWith(".yml") || entry.name.endsWith(".yaml")))
+        .map(entry => entry.name)
+        .sort((left, right) => left.localeCompare(right));
+}
+/**
+ * Read what the project's own workflows say about façade wiring.
+ * @param projectRoot - Project root
+ * @returns The facts, empty when the project holds no workflows
+ */
+export async function readFacadeFacts(projectRoot) {
+    const names = await listWorkflowFiles(projectRoot);
+    const parsed = await Promise.all(names.map(async (name) => ({
+        name,
+        parsed: await parseWorkflow(path.join(projectRoot, WORKFLOW_DIR, name)),
+    })));
+    const readable = parsed.filter((entry) => entry.parsed !== null);
+    const sites = readable.flatMap(entry => Object.entries(entry.parsed.jobs).map(([job, definition]) => {
+        const contexts = contextsOfJob(entry.parsed.workflowName, definition, job);
+        return {
+            id: job,
+            name: contexts[0] ?? job,
+            contexts,
+            shell: shellOf(definition),
+            gate: gateOfJob(definition),
+        };
+    }));
+    const jobSites = [...sites].sort(byJobId);
+    const gatePairs = jobSites.flatMap((site) => site.gate === null ? [] : [[site.id, site.gate]]);
+    return {
+        qualityYmlPresent: readable.some(entry => entry.name === QUALITY_YML),
+        files: readable.map(entry => `${WORKFLOW_DIR}/${entry.name}`),
+        // Declaration order wins for a duplicated job id, because that is the job
+        // GitHub itself would run: a Map built from pairs keeps the LAST, so the
+        // list is reversed before it is built.
+        gatesByJob: new Map([...gatePairs].reverse()),
+        jobs: new Set(jobSites.map(site => site.id)),
+        projectContexts: new Set(jobSites.flatMap(site => site.contexts)),
+        jobSites,
+    };
+}
+/**
+ * Order two jobs by id, so the report is stable across machines.
+ * @param left - One job
+ * @param right - Another job
+ * @returns A comparison result
+ */
+function byJobId(left, right) {
+    return left.id.localeCompare(right.id);
+}
+/**
+ * How the report names the workflows it read.
+ * @param facts - The parsed workflow facts
+ * @returns The source block
+ */
+export function facadeSourceOf(facts) {
+    return { present: facts.qualityYmlPresent, files: facts.files };
+}
+/**
+ * Whether the CI job for one gate reads the declaration.
+ *
+ * Three answers, and the third is not a fourth state smuggled in: a job the
+ * workflow does not declare at all is a different fact from a job that runs a
+ * hardcoded command, and calling the first one `false` would report a gate as
+ * unwired on the strength of never having found it.
+ * @param facts - The parsed workflow facts
+ * @param gateId - The gate being reported
+ * @param qualityJob - The CI job the static table pairs with it
+ * @returns Whether that job's façade resolves this gate
+ */
+export function facadeFinding(facts, gateId, qualityJob) {
+    if (qualityJob === null) {
+        return {
+            state: "not-applicable",
+            reason: "no-mapped-job",
+            message: "Lisa's static job table pairs no CI job with this gate, so there is no job whose wiring could be read.",
+        };
+    }
+    if (!facts.qualityYmlPresent)
+        return TIER_THREE_UNKNOWABLE;
+    const resolved = facts.gatesByJob.get(qualityJob);
+    if (resolved !== undefined) {
+        return { state: "verified", value: resolved === gateId };
+    }
+    if (facts.jobs.has(qualityJob))
+        return { state: "verified", value: false };
+    return {
+        state: "unknown",
+        reason: "job-absent-from-this-workflow",
+        message: `quality.yml is present here but declares no job called ${qualityJob}, so whether that job reads this declaration cannot be read from this checkout.`,
+    };
+}
+//# sourceMappingURL=gate-report-facade.js.map

package/dist/cli/gate-report-facade.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"gate-report-facade.js","sourceRoot":"","sources":["../../src/cli/gate-report-facade.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AACrD,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAElC,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAG5C,yCAAyC;AACzC,MAAM,WAAW,GAAG,aAAa,CAAC;AAElC,8CAA8C;AAC9C,MAAM,YAAY,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC;AAEvD,qDAAqD;AACrD,MAAM,eAAe,GAAG,MAAM,CAAC;AAqC/B,+DAA+D;AAC/D,MAAM,CAAC,MAAM,qBAAqB,GAAmB;IACnD,KAAK,EAAE,SAAS;IAChB,MAAM,EAAE,2BAA2B;IACnC,OAAO,EACL,4KAA4K;CAC/K,CAAC;AAEF;;;;GAIG;AACH,SAAS,SAAS,CAAC,GAAY;IAC7B,IAAI,GAAG,KAAK,IAAI,IAAI,OAAO,GAAG,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC;IACzD,MAAM,KAAK,GAAY,OAAO,CAAC,GAAG,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;IACjD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IACvC,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,CACxB,IAAI,CAAC,EAAE,CACL,IAAI,KAAK,IAAI;QACb,OAAO,IAAI,KAAK,QAAQ;QACxB,OAAO,CAAC,GAAG,CAAC,IAAI,EAAE,IAAI,CAAC,KAAK,eAAe,CAC9C,CAAC;IACF,IAAI,OAAO,KAAK,SAAS;QAAE,OAAO,IAAI,CAAC;IACvC,MAAM,WAAW,GAAY,OAAO,CAAC,GAAG,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;IACzD,IAAI,WAAW,KAAK,IAAI,IAAI,OAAO,WAAW,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC;IACzE,MAAM,EAAE,GAAY,OAAO,CAAC,GAAG,CAAC,WAAW,EAAE,SAAS,CAAC,CAAC;IACxD,OAAO,OAAO,EAAE,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;AAC5C,CAAC;AAUD;;;;GAIG;AACH,KAAK,UAAU,aAAa,CAAC,IAAY;IACvC,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;IACnE,IAAI,MAAM,KAAK,SAAS;QAAE,OAAO,IAAI,CAAC;IACtC,IAAI,CAAC;QACH,MAAM,MAAM,GAAY,QAAQ,CAAC,MAAM,CAAC,CAAC;QACzC,IAAI,MAAM,KAAK,IAAI,IAAI,OAAO,MAAM,KAAK,QAAQ;YAAE,OAAO,IAAI,CAAC;QAC/D,MAAM,IAAI,GAAY,OAAO,CAAC,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QAClD,IAAI,IAAI,KAAK,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ;YAAE,OAAO,IAAI,CAAC;QAC3D,MAAM,YAAY,GAAY,OAAO,CAAC,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QAC1D,OAAO;YACL,YAAY,EAAE,OAAO,YAAY,KAAK,QAAQ,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,IAAI;YACpE,IAAI,EAAE,IAA+B;SACtC,CAAC;IACJ,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED;;;;;;GAMG;AACH,SAAS,aAAa,CACpB,YAA2B,EAC3B,GAAY,EACZ,KAAa;IAEb,MAAM,QAAQ,GACZ,GAAG,KAAK,IAAI,IAAI,OAAO,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IAC5E,MAAM,IAAI,GAAG,OAAO,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC;IAC7D,OAAO,YAAY,KAAK,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,GAAG,YAAY,MAAM,IAAI,EAAE,CAAC,CAAC;AAC9E,CAAC;AAED;;;;GAIG;AACH,SAAS,OAAO,CAAC,GAAY;IAC3B,IAAI,GAAG,KAAK,IAAI,IAAI,OAAO,GAAG,KAAK,QAAQ;QAAE,OAAO,EAAE,CAAC;IACvD,MAAM,KAAK,GAAY,OAAO,CAAC,GAAG,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;IACjD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,EAAE,CAAC;IACrC,OAAO,KAAK;SACT,GAAG,CAAC,IAAI,CAAC,EAAE;QACV,IAAI,IAAI,KAAK,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ;YAAE,OAAO,EAAE,CAAC;QACzD,MAAM,GAAG,GAAY,OAAO,CAAC,GAAG,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;QAC9C,OAAO,OAAO,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;IAC5C,CAAC,CAAC;SACD,IAAI,CAAC,IAAI,CAAC,CAAC;AAChB,CAAC;AAED;;;;GAIG;AACH,KAAK,UAAU,iBAAiB,CAAC,WAAmB;IAClD,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,YAAY,CAAC,EAAE;QAClE,aAAa,EAAE,IAAI;KACpB,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;IAC1B,IAAI,OAAO,KAAK,SAAS;QAAE,OAAO,EAAE,CAAC;IACrC,OAAO,OAAO;SACX,MAAM,CACL,KAAK,CAAC,EAAE,CACN,KAAK,CAAC,MAAM,EAAE;QACd,CAAC,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAChE;SACA,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC;SACxB,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC,CAAC;AACtD,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,eAAe,CACnC,WAAmB;IAEnB,MAAM,KAAK,GAAG,MAAM,iBAAiB,CAAC,WAAW,CAAC,CAAC;IACnD,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,GAAG,CAC9B,KAAK,CAAC,GAAG,CAAC,KAAK,EAAC,IAAI,EAAC,EAAE,CAAC,CAAC;QACvB,IAAI;QACJ,MAAM,EAAE,MAAM,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,YAAY,EAAE,IAAI,CAAC,CAAC;KACxE,CAAC,CAAC,CACJ,CAAC;IACF,MAAM,QAAQ,GAAG,MAAM,CAAC,MAAM,CAC5B,CAAC,KAAK,EAAyD,EAAE,CAC/D,KAAK,CAAC,MAAM,KAAK,IAAI,CACxB,CAAC;IACF,MAAM,KAAK,GAAG,QAAQ,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CACrC,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,UAAU,CAAC,EAAE,EAAE;QAC1D,MAAM,QAAQ,GAAG,aAAa,CAC5B,KAAK,CAAC,MAAM,CAAC,YAAY,EACzB,UAAU,EACV,GAAG,CACJ,CAAC;QACF,OAAO;YACL,EAAE,EAAE,GAAG;YACP,IAAI,EAAE,QAAQ,CAAC,CAAC,CAAC,IAAI,GAAG;YACxB,QAAQ;YACR,KAAK,EAAE,OAAO,CAAC,UAAU,CAAC;YAC1B,IAAI,EAAE,SAAS,CAAC,UAAU,CAAC;SAC5B,CAAC;IACJ,CAAC,CAAC,CACH,CAAC;IACF,MAAM,QAAQ,GAAG,CAAC,GAAG,KAAK,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IAC1C,MAAM,SAAS,GAAG,QAAQ,CAAC,OAAO,CAAC,CAAC,IAAI,EAAsB,EAAE,CAC9D,IAAI,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC,CACjD,CAAC;IACF,OAAO;QACL,iBAAiB,EAAE,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,IAAI,KAAK,WAAW,CAAC;QACrE,KAAK,EAAE,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,GAAG,YAAY,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC;QAC7D,0EAA0E;QAC1E,yEAAyE;QACzE,uCAAuC;QACvC,UAAU,EAAE,IAAI,GAAG,CAAC,CAAC,GAAG,SAAS,CAAC,CAAC,OAAO,EAAE,CAAC;QAC7C,IAAI,EAAE,IAAI,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAC5C,eAAe,EAAE,IAAI,GAAG,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QACjE,QAAQ;KACT,CAAC;AACJ,CAAC;AAED;;;;;GAKG;AACH,SAAS,OAAO,CAAC,IAAa,EAAE,KAAc;IAC5C,OAAO,IAAI,CAAC,EAAE,CAAC,aAAa,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;AACzC,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,cAAc,CAAC,KAAkB;IAC/C,OAAO,EAAE,OAAO,EAAE,KAAK,CAAC,iBAAiB,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,CAAC;AAClE,CAAC;AAED;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,aAAa,CAC3B,KAAkB,EAClB,MAAc,EACd,UAAyB;IAEzB,IAAI,UAAU,KAAK,IAAI,EAAE,CAAC;QACxB,OAAO;YACL,KAAK,EAAE,gBAAgB;YACvB,MAAM,EAAE,eAAe;YACvB,OAAO,EACL,wGAAwG;SAC3G,CAAC;IACJ,CAAC;IACD,IAAI,CAAC,KAAK,CAAC,iBAAiB;QAAE,OAAO,qBAAqB,CAAC;IAC3D,MAAM,QAAQ,GAAG,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;IAClD,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;QAC3B,OAAO,EAAE,KAAK,EAAE,UAAU,EAAE,KAAK,EAAE,QAAQ,KAAK,MAAM,EAAE,CAAC;IAC3D,CAAC;IACD,IAAI,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC;QAAE,OAAO,EAAE,KAAK,EAAE,UAAU,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC;IAC3E,OAAO;QACL,KAAK,EAAE,SAAS;QAChB,MAAM,EAAE,+BAA+B;QACvC,OAAO,EAAE,0DAA0D,UAAU,iFAAiF;KAC/J,CAAC;AACJ,CAAC"}

package/dist/cli/gate-report-fragment.d.ts

@@ -0,0 +1,11 @@
+import type { GateReport } from "./gate-report-types.js";
+/** The class every rule in the report's stylesheet is scoped to. */
+export declare const GATE_REPORT_ROOT_CLASS = "lisa-gate-report";
+/**
+ * Render the report as a fragment for the console tab.
+ * @param report - The emitter's output
+ * @param projectLabel - How to name the project being reported on
+ * @returns HTML with no document wrapper, safe to inject into the console
+ */
+export declare function renderGateReportFragment(report: GateReport, projectLabel: string): string;
+//# sourceMappingURL=gate-report-fragment.d.ts.map

package/dist/cli/gate-report-fragment.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"gate-report-fragment.d.ts","sourceRoot":"","sources":["../../src/cli/gate-report-fragment.ts"],"names":[],"mappings":"AAgCA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,wBAAwB,CAAC;AAEzD,oEAAoE;AACpE,eAAO,MAAM,sBAAsB,qBAAqB,CAAC;AAwCzD;;;;;GAKG;AACH,wBAAgB,wBAAwB,CACtC,MAAM,EAAE,UAAU,EAClB,YAAY,EAAE,MAAM,GACnB,MAAM,CA8BR"}

package/dist/cli/gate-report-fragment.js

@@ -0,0 +1,100 @@
+/**
+ * The gate report as an HTML fragment, for the Doctor tab in `lisa ui`.
+ *
+ * A fragment rather than a document because the ruling is that this is one
+ * surface: a tab alongside the console's other tabs, not a second page on a
+ * second port served by a second server.
+ *
+ * It is composed HERE and injected by the server at request time, and that is
+ * deliberate. `ui/index.html` is a single 13,000-line zero-build file with a
+ * known concurrent-edit hazard where union merges lose braces; appending a
+ * section of this size to it would make a bad merge materially worse and would
+ * put a second copy of this markup somewhere no test renders. The console
+ * gains a small block that asks the server for this string, so the file grows
+ * by tens of lines rather than hundreds, and opening `ui/index.html` straight
+ * from disk still works — the tab then says, in the report's own vocabulary,
+ * that it could not be derived without a server rather than showing an empty
+ * panel.
+ *
+ * Pure and total: report in, string out, no I/O, so the same emitter output
+ * always produces the same bytes.
+ * @module cli/gate-report-fragment
+ */
+import { chip, escapeHtml } from "./gate-report-html.js";
+import { gateRow } from "./gate-report-rows.js";
+import { agentHooksSection, requiredContextsSection, rulesetSection, summarySection, upstreamSection, } from "./gate-report-sections.js";
+import { GATE_REPORT_STYLE } from "./gate-report-style.js";
+/** The class every rule in the report's stylesheet is scoped to. */
+export const GATE_REPORT_ROOT_CLASS = "lisa-gate-report";
+/**
+ * The legend, which is where the three states are named for the reader.
+ * @returns A block of HTML
+ */
+function legend() {
+    return [
+        '<div class="lgr-legend">',
+        `<span><span class="lgr-state lgr-required">must</span> declared required</span>`,
+        `<span><span class="lgr-state lgr-optional">tells</span> declared optional</span>`,
+        `<span><span class="lgr-state lgr-off">off</span> declared off — different from never declared</span>`,
+        `<span><span class="lgr-state lgr-undeclared">not declared</span> the settings file never mentions it here</span>`,
+        `<span>${chip("b-A", "A")} declared, and something reads the declaration</span>`,
+        `<span>${chip("b-B", "B")} something runs it anyway; the settings file has no say</span>`,
+        `<span>${chip("b-C", "C")} declared, but nothing can run it</span>`,
+        `<span>${chip("b-D", "D")} nothing declares it and nothing runs it</span>`,
+        `<span>${chip("unknown", "not checked here")} this run could not determine it — NOT a pass</span>`,
+        "</div>",
+    ].join("");
+}
+/**
+ * The footer, which names what the report was derived from.
+ * @param report - The whole report
+ * @returns A block of HTML
+ */
+function footer(report) {
+    const runner = report.runner.state === "verified" ? report.runner.value : "unknown";
+    const problems = report.declarationProblems.length === 0
+        ? ""
+        : ` · <strong>${report.declarationProblems.length} declaration problem(s)</strong>: ${escapeHtml(report.declarationProblems.join("; "))}`;
+    const facade = report.facadeSource.present
+        ? `the workflow file was read from this checkout (${report.facadeSource.files.length} workflow file(s))`
+        : "this project holds no copy of the workflow, so what each cloud job does with a declaration could not be read";
+    return `<div class="lgr-foot"><p>Report format v${report.version} · registry read from the running Lisa package · runner <code>${escapeHtml(runner)}</code> · ${escapeHtml(facade)}${problems}</p></div>`;
+}
+/**
+ * Render the report as a fragment for the console tab.
+ * @param report - The emitter's output
+ * @param projectLabel - How to name the project being reported on
+ * @returns HTML with no document wrapper, safe to inject into the console
+ */
+export function renderGateReportFragment(report, projectLabel) {
+    const axis = report.momentAxis;
+    const head = axis
+        .map(moment => `<th class="lgr-m">${escapeHtml(moment)}</th>`)
+        .join("");
+    return [
+        `<div class="${GATE_REPORT_ROOT_CLASS}">`,
+        `<style>${GATE_REPORT_STYLE}</style>`,
+        `<p class="lgr-sub">Derived, not written. Every number below comes from ${escapeHtml(projectLabel)}'s own settings file, package scripts, git hooks and workflows, joined against Lisa's check registry. Nothing here is a language model's summary of those files.</p>`,
+        summarySection(report),
+        "<h2>Every check, and what governs it</h2>",
+        '<p class="lgr-lede">One row per check. One column per moment this project can declare a check at — there is no bare "deploy" column, because Lisa has no such moment: the deploy families take an environment suffix and only appear once a project names one.</p>',
+        legend(),
+        '<div class="lgr-scroll"><table>',
+        `<thead><tr><th>Check</th><th>What a pass proves</th><th>Command</th>${head}<th class="lgr-m">Blocks a merge</th><th>Cloud job</th></tr></thead>`,
+        `<tbody>${report.gates.map(row => gateRow(row, axis)).join("")}</tbody>`,
+        "</table></div>",
+        "<h2>What your settings imply, against what the repository requires</h2>",
+        '<p class="lgr-lede">The contexts the settings file implies, beside the ones the repository\'s branch-protection rules really require. Nothing compares these two automatically, so they are only ever equal by hand.</p>',
+        rulesetSection(report),
+        "<h2>What else gates my merges, and where does it come from</h2>",
+        '<p class="lgr-lede">Everything above describes Lisa\'s own jobs. This is every required check standing between a change and a merge, whoever put it there — including the ones Lisa neither ships nor governs.</p>',
+        requiredContextsSection(report),
+        "<h2>What runs on every edit</h2>",
+        agentHooksSection(report),
+        `<h2>${report.projectIsUpstream ? "Lisa's own limitations — and this project is Lisa" : "Not this project's — Lisa's"}</h2>`,
+        upstreamSection(report),
+        footer(report),
+        "</div>",
+    ].join("");
+}
+//# sourceMappingURL=gate-report-fragment.js.map

package/dist/cli/gate-report-fragment.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"gate-report-fragment.js","sourceRoot":"","sources":["../../src/cli/gate-report-fragment.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,MAAM,uBAAuB,CAAC;AACzD,OAAO,EAAE,OAAO,EAAE,MAAM,uBAAuB,CAAC;AAChD,OAAO,EACL,iBAAiB,EACjB,uBAAuB,EACvB,cAAc,EACd,cAAc,EACd,eAAe,GAChB,MAAM,2BAA2B,CAAC;AACnC,OAAO,EAAE,iBAAiB,EAAE,MAAM,wBAAwB,CAAC;AAG3D,oEAAoE;AACpE,MAAM,CAAC,MAAM,sBAAsB,GAAG,kBAAkB,CAAC;AAEzD;;;GAGG;AACH,SAAS,MAAM;IACb,OAAO;QACL,0BAA0B;QAC1B,iFAAiF;QACjF,kFAAkF;QAClF,sGAAsG;QACtG,kHAAkH;QAClH,SAAS,IAAI,CAAC,KAAK,EAAE,GAAG,CAAC,uDAAuD;QAChF,SAAS,IAAI,CAAC,KAAK,EAAE,GAAG,CAAC,gEAAgE;QACzF,SAAS,IAAI,CAAC,KAAK,EAAE,GAAG,CAAC,0CAA0C;QACnE,SAAS,IAAI,CAAC,KAAK,EAAE,GAAG,CAAC,iDAAiD;QAC1E,SAAS,IAAI,CAAC,SAAS,EAAE,kBAAkB,CAAC,sDAAsD;QAClG,QAAQ;KACT,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;AACb,CAAC;AAED;;;;GAIG;AACH,SAAS,MAAM,CAAC,MAAkB;IAChC,MAAM,MAAM,GACV,MAAM,CAAC,MAAM,CAAC,KAAK,KAAK,UAAU,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;IACvE,MAAM,QAAQ,GACZ,MAAM,CAAC,mBAAmB,CAAC,MAAM,KAAK,CAAC;QACrC,CAAC,CAAC,EAAE;QACJ,CAAC,CAAC,cAAc,MAAM,CAAC,mBAAmB,CAAC,MAAM,qCAAqC,UAAU,CAAC,MAAM,CAAC,mBAAmB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC;IAC9I,MAAM,MAAM,GAAG,MAAM,CAAC,YAAY,CAAC,OAAO;QACxC,CAAC,CAAC,kDAAkD,MAAM,CAAC,YAAY,CAAC,KAAK,CAAC,MAAM,oBAAoB;QACxG,CAAC,CAAC,8GAA8G,CAAC;IACnH,OAAO,2CAA2C,MAAM,CAAC,OAAO,iEAAiE,UAAU,CAAC,MAAM,CAAC,aAAa,UAAU,CAAC,MAAM,CAAC,GAAG,QAAQ,YAAY,CAAC;AAC5M,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,wBAAwB,CACtC,MAAkB,EAClB,YAAoB;IAEpB,MAAM,IAAI,GAAG,MAAM,CAAC,UAAU,CAAC;IAC/B,MAAM,IAAI,GAAG,IAAI;SACd,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,qBAAqB,UAAU,CAAC,MAAM,CAAC,OAAO,CAAC;SAC7D,IAAI,CAAC,EAAE,CAAC,CAAC;IACZ,OAAO;QACL,eAAe,sBAAsB,IAAI;QACzC,UAAU,iBAAiB,UAAU;QACrC,0EAA0E,UAAU,CAAC,YAAY,CAAC,sKAAsK;QACxQ,cAAc,CAAC,MAAM,CAAC;QACtB,2CAA2C;QAC3C,oQAAoQ;QACpQ,MAAM,EAAE;QACR,iCAAiC;QACjC,uEAAuE,IAAI,sEAAsE;QACjJ,UAAU,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,OAAO,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,UAAU;QACxE,gBAAgB;QAChB,yEAAyE;QACzE,0NAA0N;QAC1N,cAAc,CAAC,MAAM,CAAC;QACtB,iEAAiE;QACjE,oNAAoN;QACpN,uBAAuB,CAAC,MAAM,CAAC;QAC/B,kCAAkC;QAClC,iBAAiB,CAAC,MAAM,CAAC;QACzB,OAAO,MAAM,CAAC,iBAAiB,CAAC,CAAC,CAAC,mDAAmD,CAAC,CAAC,CAAC,6BAA6B,OAAO;QAC5H,eAAe,CAAC,MAAM,CAAC;QACvB,MAAM,CAAC,MAAM,CAAC;QACd,QAAQ;KACT,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;AACb,CAAC"}

package/dist/cli/gate-report-html.d.ts

@@ -0,0 +1,47 @@
+/**
+ * The report's HTML primitives.
+ *
+ * One escaper and one chip vocabulary, shared by every renderer, so a state
+ * cannot acquire a second spelling. The rule the chips exist to hold: an
+ * `unknown` must never look like a pass, and — the gap that shipped in the
+ * first cut — it must never look like nothing either. A caller that omits a
+ * chip because it had nothing to show has invented a fourth outcome the
+ * three-state design never sanctioned, and silence is the one outcome a reader
+ * cannot tell from "fine".
+ * @module cli/gate-report-html
+ */
+import type { Finding } from "./gate-report-types.js";
+/**
+ * Escape a string for interpolation into HTML.
+ * @param value - Raw text
+ * @returns Escaped text
+ */
+export declare function escapeHtml(value: string): string;
+/**
+ * One chip.
+ * @param variant - The chip's state class
+ * @param text - Its label
+ * @param title - Hover text explaining it
+ * @returns One chip of HTML
+ */
+export declare function chip(variant: string, text: string, title?: string): string;
+/**
+ * The chip for a finding this run could not determine.
+ *
+ * Carries the human message as hover text rather than dropping it: a report
+ * that says "not checked here" without saying why is indistinguishable from a
+ * bug in the report.
+ * @param finding - An unknown or not-applicable finding
+ * @param label - What to call it
+ * @returns One chip of HTML
+ */
+export declare function unknownChip(finding: Extract<Finding<unknown>, {
+    reason: string;
+}>, label?: string): string;
+/**
+ * One monospaced fragment.
+ * @param value - Raw text
+ * @returns The text inside a `code` element, escaped
+ */
+export declare function code(value: string): string;
+//# sourceMappingURL=gate-report-html.d.ts.map

package/dist/cli/gate-report-html.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"gate-report-html.d.ts","sourceRoot":"","sources":["../../src/cli/gate-report-html.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AACH,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,wBAAwB,CAAC;AAWtD;;;;GAIG;AACH,wBAAgB,UAAU,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAKhD;AAED;;;;;;GAMG;AACH,wBAAgB,IAAI,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,SAAK,GAAG,MAAM,CAGtE;AAED;;;;;;;;;GASG;AACH,wBAAgB,WAAW,CACzB,OAAO,EAAE,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE;IAAE,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC,EACtD,KAAK,SAAqB,GACzB,MAAM,CAER;AAED;;;;GAIG;AACH,wBAAgB,IAAI,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAE1C"}