@codyswann/lisa 4.38.7 → 4.39.0

package/all/copy-overwrite/scripts/lib/gate-failure-diagnosis.mjs

@@ -137,6 +137,28 @@ const NO_TESTS_PATTERN = /^[ \t]*No test files found/m;
  */
 const SUMMARY_PATTERN = /^[ \t]*Test Files[ \t]+/m;
 
+/**
+ * Did this transcript come from a run that executed no test files at all?
+ *
+ * Exported because the caller needs it on the path this module cannot see.
+ * Everything else here runs only once a command has already failed, which is
+ * exactly the wrong side for the defect in CodySwannGT/lisa#3715: a runner
+ * invoked with `--passWithNoTests` collects nothing and exits **0**, so the
+ * runner reports success and the diagnosis below is never reached. The gate
+ * then records PASSED for a suite that ran nothing.
+ *
+ * Both halves are load-bearing, and the second one is why this is a shared
+ * predicate rather than a bare `includes`. A transcript that captures a nested
+ * runner can carry a child's `No test files found` while its own 826 files ran
+ * perfectly well; requiring the summary line to be ABSENT is what stops this
+ * being the same non-measurement defect in mirror image.
+ * @param {string} output The command's combined output.
+ * @returns {boolean} True when the transcript states it ran nothing and reached no verdict.
+ */
+export function ranNoTests(output) {
+  return NO_TESTS_PATTERN.test(output) && !SUMMARY_PATTERN.test(output);
+}
+
 /**
  * Prefixes a tool uses to say why it stopped, rather than what it measured.
  *
@@ -711,7 +733,7 @@ function classify(output, code, load, read) {
   // Directly below interference and above every measurement signature: a run
   // that executed no test files measured nothing, so its timeouts, its FAIL
   // lines and above all its coverage numbers are artefacts of not having run.
-  if (NO_TESTS_PATTERN.test(output) && !SUMMARY_PATTERN.test(output)) {
+  if (ranNoTests(output)) {
     return noTestsVerdict(output);
   }
 

package/all/copy-overwrite/scripts/lisa-hooks/parity-safety-net.sh

@@ -904,6 +904,7 @@ follow_scan() {
         redirected=""
         heredoc=0
         stdin_mode=0
+        noexec=0
         j=$((i + 1))
         while [ "$j" -lt "$n" ]; do
           follow_unwrap "${toks[j]}"
@@ -934,13 +935,35 @@ follow_scan() {
                 *) j=$((j + 1)) ;;
               esac
               ;;
+            # `-n` is NOEXEC: the shell reads and parses its operand, then exits
+            # without running a line of it. So a syntax check is the one shape
+            # that puts a path at a command position while provably executing
+            # nothing, and following it reads a file the command never runs.
+            #
+            # This guard hit that on ITSELF: its pattern list is destructive
+            # command literals living inside the guard, so `bash -n` on its own
+            # source was refused by its own patterns — and the same held for any
+            # file documenting destructive commands. See CodySwannGT/lisa#3803.
+            #
+            # `bash <file>` still executes and is still followed. Noexec is the
+            # distinction, not the program: this is not a read-only exemption.
+            --noexec) noexec=1; break ;;
             --*) j=$((j + 1)) ;;
             -*c*) inline=1; j=$((j + 1)) ;;
+            -*n*) noexec=1; break ;;
             -s | -[a-zA-Z]*s[a-zA-Z]*) stdin_mode=1; j=$((j + 1)) ;;
             -*) j=$((j + 1)) ;;
             *) break ;;
           esac
         done
+        if [ "$noexec" -eq 1 ]; then
+          # Nothing runs, so there is no script to follow and nothing to fail
+          # closed about. Checked before the heredoc and dispatcher arms: those
+          # decide WHICH text to read, and here there is no execution at all.
+          cmd_pos=0
+          i=$((j + 1))
+          continue
+        fi
         if [ "$heredoc" -eq 1 ] && [ "$inline" -eq 0 ]; then
           cmd_pos=0
           i=$((j + 1))

package/all/copy-overwrite/scripts/lisa-run-gates.mjs

@@ -53,7 +53,11 @@ import { tmpdir } from "node:os";
 import { dirname, join, relative } from "node:path";
 import { fileURLToPath } from "node:url";
 
-import { DIAGNOSIS, diagnoseFailure } from "./lib/gate-failure-diagnosis.mjs";
+import {
+  DIAGNOSIS,
+  diagnoseFailure,
+  ranNoTests,
+} from "./lib/gate-failure-diagnosis.mjs";
 import {
   killMarkNote,
   recentKillMarks,
@@ -422,6 +426,31 @@ function stateFor(kind) {
 function execute(gate, exec) {
   const { code, output } = normaliseExec(exec(gate.command, gate));
   if (code === 0) {
+    // A zero exit is not by itself a measurement. A runner invoked with
+    // `--passWithNoTests` — still shipped in the integration scripts of three
+    // package templates — collects nothing and exits 0, so the whole diagnosis
+    // below is unreachable on the one path that needs it and the gate records
+    // PASSED for a suite that ran nothing (CodySwannGT/lisa#3715).
+    //
+    // Deliberately narrow. This does NOT fire on "collected zero"; it fires
+    // only when the runner POSITIVELY SAYS it ran nothing and reached no
+    // verdict. A gate whose output carries no such statement — every non-test
+    // gate — still passes, which is what keeps the blast radius off them. And
+    // an interactive filtered run is not a gate invocation: a project that
+    // declared this gate declared that work exists for it.
+    if (ranNoTests(output)) {
+      return {
+        state: STATE.UNPROVABLE,
+        detail:
+          `${gate.command} (exit 0) — the runner reported it executed ZERO ` +
+          `test files, so this run measured nothing. A zero exit here is the ` +
+          `runner being told not to mind an empty collection, not evidence ` +
+          `the property holds`,
+        code: 0,
+        diagnosis: DIAGNOSIS.NO_TESTS_RAN,
+        evidence: [],
+      };
+    }
     return {
       state: STATE.PASSED,
       detail: gate.command,

package/all/deletions.json

@@ -141,5 +141,140 @@
     "scripts/setup-deploy-key.sh",
     ".coderabbit.yml",
     "HUMAN.md"
-  ]
+  ],
+  "basis": {
+    ".claude/commands/project": "needs-review",
+    ".claude/skills/coding-philosophy": "needs-review",
+    ".claude/skills/project-add-test-coverage": "needs-review",
+    ".claude/skills/project-archive": "needs-review",
+    ".claude/skills/project-bootstrap": "needs-review",
+    ".claude/skills/project-debrief": "needs-review",
+    ".claude/skills/project-document": "needs-review",
+    ".claude/skills/project-execute": "needs-review",
+    ".claude/skills/project-fix-linter-error": "needs-review",
+    ".claude/skills/project-implement": "needs-review",
+    ".claude/skills/project-local-code-review": "needs-review",
+    ".claude/skills/project-lower-code-complexity": "needs-review",
+    ".claude/skills/project-plan": "needs-review",
+    ".claude/skills/project-reduce-max-lines": "needs-review",
+    ".claude/skills/project-reduce-max-lines-per-function": "needs-review",
+    ".claude/skills/project-research": "needs-review",
+    ".claude/skills/project-review": "needs-review",
+    ".claude/skills/project-setup": "needs-review",
+    ".claude/skills/project-verify": "needs-review",
+    ".claude/skills/prompt-complexity-scorer": "needs-review",
+    ".claude/skills/git:commit": "needs-review",
+    ".claude/skills/git:commit-and-submit-pr": "needs-review",
+    ".claude/skills/git:prune": "needs-review",
+    ".claude/skills/git:submit-pr": "needs-review",
+    ".claude/skills/jira:create": "needs-review",
+    ".claude/skills/jira:sync": "needs-review",
+    ".claude/skills/jira:verify": "needs-review",
+    ".claude/skills/lisa:review-implementation": "needs-review",
+    ".claude/skills/plan:add-test-coverage": "needs-review",
+    ".claude/skills/plan:create": "needs-review",
+    ".claude/skills/plan:fix-linter-error": "needs-review",
+    ".claude/skills/plan:implement": "needs-review",
+    ".claude/skills/plan:local-code-review": "needs-review",
+    ".claude/skills/plan:lower-code-complexity": "needs-review",
+    ".claude/skills/plan:reduce-max-lines": "needs-review",
+    ".claude/skills/plan:reduce-max-lines-per-function": "needs-review",
+    ".claude/skills/pull-request:review": "needs-review",
+    ".claude/skills/security:zap-scan": "needs-review",
+    ".claude/skills/sonarqube:check": "needs-review",
+    ".claude/skills/sonarqube:fix": "needs-review",
+    ".claude/skills/tasks:load": "needs-review",
+    ".claude/skills/tasks:sync": "needs-review",
+    ".claude/REFERENCE.md": "needs-review",
+    ".claude/commands/plan/implement.md": "needs-review",
+    ".claude/rules/plan-governance.md": "needs-review",
+    ".claude/rules/plan.md": "needs-review",
+    ".claude/skills/plan-create": "needs-review",
+    ".claude/skills/plan-implement": "needs-review",
+    ".claude/agents/architecture-planner.md": "needs-review",
+    ".claude/agents/codebase-analyzer.md": "needs-review",
+    ".claude/agents/codebase-locator.md": "needs-review",
+    ".claude/agents/codebase-pattern-finder.md": "needs-review",
+    ".claude/agents/consistency-checker.md": "needs-review",
+    ".claude/agents/product-planner.md": "needs-review",
+    ".claude/agents/product-reviewer.md": "needs-review",
+    ".claude/agents/security-planner.md": "needs-review",
+    ".claude/agents/spec-analyst.md": "needs-review",
+    ".claude/agents/tech-reviewer.md": "needs-review",
+    ".claude/agents/test-coverage-agent.md": "needs-review",
+    ".claude/agents/test-strategist.md": "needs-review",
+    ".claude/agents/agent-architect.md": "needs-review",
+    ".claude/agents/architecture-specialist.md": "needs-review",
+    ".claude/agents/debug-specialist.md": "needs-review",
+    ".claude/agents/git-history-analyzer.md": "needs-review",
+    ".claude/agents/hooks-expert.md": "needs-review",
+    ".claude/agents/implementer.md": "needs-review",
+    ".claude/agents/learner.md": "needs-review",
+    ".claude/agents/performance-specialist.md": "needs-review",
+    ".claude/agents/product-specialist.md": "needs-review",
+    ".claude/agents/quality-specialist.md": "needs-review",
+    ".claude/agents/security-specialist.md": "needs-review",
+    ".claude/agents/skill-evaluator.md": "needs-review",
+    ".claude/agents/slash-command-architect.md": "needs-review",
+    ".claude/agents/test-specialist.md": "needs-review",
+    ".claude/agents/verification-specialist.md": "needs-review",
+    ".claude/agents/web-search-researcher.md": "needs-review",
+    ".claude/commands/git": "needs-review",
+    ".claude/commands/jira": "needs-review",
+    ".claude/commands/lisa": "needs-review",
+    ".claude/commands/plan": "needs-review",
+    ".claude/commands/plans": "needs-review",
+    ".claude/commands/pull-request": "needs-review",
+    ".claude/commands/security": "needs-review",
+    ".claude/commands/sonarqube": "needs-review",
+    ".claude/commands/tasks": "needs-review",
+    ".claude/skills/agent-design-best-practices": "needs-review",
+    ".claude/skills/git-commit": "needs-review",
+    ".claude/skills/git-commit-and-submit-pr": "needs-review",
+    ".claude/skills/git-commit-submit-pr-and-verify": "needs-review",
+    ".claude/skills/git-commit-submit-pr-deploy-and-verify": "needs-review",
+    ".claude/skills/git-prune": "needs-review",
+    ".claude/skills/git-submit-pr": "needs-review",
+    ".claude/skills/jira-add-journey": "needs-review",
+    ".claude/skills/jira-create": "needs-review",
+    ".claude/skills/jira-evidence": "needs-review",
+    ".claude/skills/jira-fix": "needs-review",
+    ".claude/skills/jira-implement": "needs-review",
+    ".claude/skills/jira-journey": "needs-review",
+    ".claude/skills/jira-sync": "needs-review",
+    ".claude/skills/jira-verify": "needs-review",
+    ".claude/skills/lisa-review-implementation": "needs-review",
+    ".claude/skills/plan-add-test-coverage": "needs-review",
+    ".claude/skills/plan-execute": "needs-review",
+    ".claude/skills/plan-fix-linter-error": "needs-review",
+    ".claude/skills/plan-local-code-review": "needs-review",
+    ".claude/skills/plan-lower-code-complexity": "needs-review",
+    ".claude/skills/plan-reduce-max-lines": "needs-review",
+    ".claude/skills/plan-reduce-max-lines-per-function": "needs-review",
+    ".claude/skills/pull-request-review": "needs-review",
+    ".claude/skills/security-zap-scan": "needs-review",
+    ".claude/skills/skill-creator": "needs-review",
+    ".claude/skills/sonarqube-check": "needs-review",
+    ".claude/skills/sonarqube-fix": "needs-review",
+    ".claude/skills/tasks-load": "needs-review",
+    ".claude/skills/tasks-sync": "needs-review",
+    ".claude/hooks/check-tired-boss.sh": "needs-review",
+    ".claude/hooks/debug-hook.sh": "needs-review",
+    ".claude/hooks/enforce-plan-rules.sh": "needs-review",
+    ".claude/hooks/notify-ntfy.sh": "needs-review",
+    ".claude/hooks/setup-jira-cli.sh": "needs-review",
+    ".claude/hooks/sync-tasks.sh": "needs-review",
+    ".claude/hooks/ticket-sync-reminder.sh": "needs-review",
+    ".claude/hooks/track-plan-sessions.sh": "needs-review",
+    ".claude/hooks/verify-completion.sh": "needs-review",
+    ".claude/hooks/README.md": "needs-review",
+    ".claude/rules/verfication.md": "needs-review",
+    ".claude/rules/lisa.md": "needs-review",
+    ".claude/rules/base-rules.md": "needs-review",
+    ".claude/rules/coding-philosophy.md": "needs-review",
+    ".claude/rules/intent-routing.md": "needs-review",
+    ".claude/rules/security-audit-handling.md": "needs-review",
+    ".claude/rules/verification.md": "needs-review",
+    ".lisa-manifest": "needs-review"
+  }
 }

package/cdk/deletions.json

@@ -5,5 +5,12 @@
     "jest.cdk.ts",
     "jest.base.ts",
     "jest.thresholds.json"
-  ]
+  ],
+  "basis": {
+    "jest.config.ts": "needs-review",
+    "jest.config.local.ts": "needs-review",
+    "jest.cdk.ts": "needs-review",
+    "jest.base.ts": "needs-review",
+    "jest.thresholds.json": "needs-review"
+  }
 }

package/dist/core/config.d.ts

@@ -272,6 +272,39 @@ export interface DeletionsConfig {
      * to any other path is recorded and unused.
      */
     readonly force?: Readonly<Record<string, string>>;
+    /**
+     * Why each declared path may be removed, keyed by that path.
+     *
+     * `deletions.json` authorises a removal by the path being LISTED, and nothing
+     * else — the manifest cannot see whether Lisa put that file in a given
+     * consumer's repository, because ownership is a per-consumer fact and this is
+     * a repo-side artifact. CodySwannGT/lisa#3656 closed the gap for
+     * `.github/workflows/` by reading each workflow's own ownership header, which
+     * covers 42 of 255 declared paths.
+     *
+     * The obvious rule for the other 213 — delete only what Lisa still ships —
+     * was measured and fails on 95% of them: 11 are attributable to a lane Lisa
+     * ships today and 202 are not, because the 202 ARE the point. They are skill
+     * trees Lisa renamed, and stranding them leaves every consumer carrying dead
+     * directories forever. So ownership stops being inferred and starts being
+     * declared, one of:
+     *
+     * - `owned` — Lisa installs this path today.
+     * - `legacy: <reason>` — Lisa shipped it once and no longer does; the reason
+     *   names the version or ticket.
+     * - `needs-review` — declared before this field existed. Authorises removal
+     *   exactly as before, so no consumer sees a behaviour change, while staying
+     *   countable as debt rather than passing as classified.
+     *
+     * An ABSENT basis means "I cannot tell", which is deliberately distinct from
+     * "not owned": the uncertain case keeps the file and says so. A path wrongly
+     * kept is visible and fixable; a path wrongly deleted is gone from someone
+     * else's repository with no undo.
+     *
+     * A `force` entry is itself a basis and outranks this map.
+     * @see core/deletion-basis
+     */
+    readonly basis?: Readonly<Record<string, string>>;
 }
 /**
  * Result of a Lisa operation

package/dist/core/config.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"config.d.ts","sourceRoot":"","sources":["../../src/core/config.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH,MAAM,MAAM,YAAY,GACpB,gBAAgB,GAChB,eAAe,GACf,aAAa,GACb,OAAO,GACP,cAAc,GACd,cAAc,CAAC;AAEnB;;GAEG;AACH,MAAM,MAAM,WAAW,GACnB,YAAY,GACZ,MAAM,GACN,QAAQ,GACR,KAAK,GACL,eAAe,GACf,QAAQ,GACR,aAAa,GACb,OAAO,CAAC;AAEZ;;GAEG;AACH,eAAO,MAAM,sBAAsB,EAAE,QAAQ,CAC3C,MAAM,CAAC,MAAM,EAAE,WAAW,GAAG,SAAS,CAAC,CAU/B,CAAC;AAEX;;GAEG;AACH,eAAO,MAAM,kBAAkB,EAAE,SAAS,WAAW,EAS3C,CAAC;AAEX;;GAEG;AACH,eAAO,MAAM,eAAe,EAAE,SAAS,YAAY,EAOzC,CAAC;AAEX;;;;;;;;;;;;;GAaG;AACH,MAAM,MAAM,OAAO,GACf,QAAQ,GACR,OAAO,GACP,QAAQ,GACR,KAAK,GACL,SAAS,GACT,UAAU,GACV,OAAO,CAAC;AAEZ;;GAEG;AACH,eAAO,MAAM,cAAc,EAAE,SAAS,OAAO,EAQnC,CAAC;AAEX;;;GAGG;AACH,eAAO,MAAM,eAAe,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAE7D,CAAC;AAEF;;;;GAIG;AACH,eAAO,MAAM,uBAAuB,EAAE,SAAS,MAAM,EAGpD,CAAC;AAEF;;;;;;;;;GASG;AACH,eAAO,MAAM,sBAAsB,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAEpE,CAAC;AAEF;;;;GAIG;AACH,MAAM,MAAM,SAAS,GAAG,QAAQ,GAAG,OAAO,GAAG,KAAK,GAAG,SAAS,GAAG,UAAU,CAAC;AAE5E;;;;;;;;;;;GAWG;AACH,wBAAgB,oBAAoB,CAClC,OAAO,EAAE,OAAO,EAChB,KAAK,EAAE,SAAS,GACf,OAAO,CAGT;AAED;;;GAGG;AACH,eAAO,MAAM,eAAe,EAAE,OAAkB,CAAC;AAEjD;;GAEG;AACH,MAAM,WAAW,UAAU;IACzB,+DAA+D;IAC/D,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IAEzB,4CAA4C;IAC5C,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IAEzB,8DAA8D;IAC9D,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAC;IAEzB,8DAA8D;IAC9D,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;IAE1B,4DAA4D;IAC5D,QAAQ,CAAC,YAAY,EAAE,OAAO,CAAC;IAE/B;;;;;OAKG;IACH,QAAQ,CAAC,YAAY,EAAE,OAAO,CAAC;IAE/B;;;;;;;;;;;;;;OAcG;IACH,QAAQ,CAAC,WAAW,CAAC,EAAE,OAAO,CAAC;IAE/B;;;;;OAKG;IACH,QAAQ,CAAC,SAAS,CAAC,EAAE,OAAO,CAAC;IAE7B;;;;;;;;;OASG;IACH,QAAQ,CAAC,gBAAgB,CAAC,EAAE,gBAAgB,CAAC;IAE7C,6EAA6E;IAC7E,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;CAC3B;AAED;;;;;;;GAOG;AACH,MAAM,MAAM,gBAAgB;AAC1B,gCAAgC;AAC9B;IAAE,QAAQ,CAAC,IAAI,EAAE,KAAK,CAAA;CAAE;AAC1B,4DAA4D;GAC1D;IAAE,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC;IAAC,QAAQ,CAAC,KAAK,EAAE,SAAS,MAAM,EAAE,CAAA;CAAE,CAAC;AAElE;;;;;GAKG;AACH,wBAAgB,kBAAkB,CAChC,YAAY,EAAE,MAAM,EACpB,OAAO,EAAE,gBAAgB,GAAG,SAAS,GACpC,OAAO,CAUT;AAgBD;;GAEG;AACH,MAAM,MAAM,aAAa,GAAG,OAAO,GAAG,UAAU,CAAC;AAEjD;;GAEG;AACH,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,QAAQ,EAAE,YAAY,CAAC;IAChC,QAAQ,CAAC,MAAM,EACX,QAAQ,GACR,SAAS;IACX;;;;;;;;OAQG;OACD,OAAO;IACT;;;;;;;;;OASG;OACD,YAAY;IACd;;;;;;;;;;;OAWG;OACD,UAAU,GACV,aAAa,GACb,UAAU,GACV,QAAQ,GACR,SAAS,CAAC;IACd,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;IAC7B;;;;;OAKG;IACH,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;CACxB;AAED;;GAEG;AACH,MAAM,WAAW,iBAAiB;IAChC,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,MAAM,CAAC;IAChB,kFAAkF;IAClF,KAAK,EAAE,MAAM,CAAC;IACd,8EAA8E;IAC9E,SAAS,EAAE,MAAM,CAAC;IAClB,iFAAiF;IACjF,QAAQ,EAAE,MAAM,CAAC;IACjB,WAAW,EAAE,MAAM,CAAC;IACpB,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,MAAM,CAAC;IAChB,iBAAiB,EAAE,MAAM,CAAC;IAC1B,iBAAiB,EAAE,MAAM,CAAC;CAC3B;AAED;;GAEG;AACH,MAAM,WAAW,eAAe;IAC9B,6CAA6C;IAC7C,QAAQ,CAAC,KAAK,EAAE,SAAS,MAAM,EAAE,CAAC;IAClC,oEAAoE;IACpE,QAAQ,CAAC,IAAI,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAClC;;;;;;;;;;;;;;;;;;;;;;OAsBG;IACH,QAAQ,CAAC,KAAK,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;CACnD;AAED;;GAEG;AACH,MAAM,WAAW,UAAU;IACzB,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;IAC1B,QAAQ,CAAC,QAAQ,EAAE,iBAAiB,CAAC;IACrC,QAAQ,CAAC,aAAa,EAAE,SAAS,WAAW,EAAE,CAAC;IAC/C,QAAQ,CAAC,IAAI,EAAE,aAAa,CAAC;IAC7B,QAAQ,CAAC,MAAM,EAAE,SAAS,MAAM,EAAE,CAAC;IACnC;;;;;;;;OAQG;IACH,QAAQ,CAAC,UAAU,EAAE,SAAS,MAAM,EAAE,CAAC;IACvC;;;;;;;;;;;;OAYG;IACH,QAAQ,CAAC,YAAY,EAAE,SAAS,MAAM,EAAE,CAAC;CAC1C;AAED;;;GAGG;AACH,wBAAgB,qBAAqB,IAAI,iBAAiB,CAezD"}
+{"version":3,"file":"config.d.ts","sourceRoot":"","sources":["../../src/core/config.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH,MAAM,MAAM,YAAY,GACpB,gBAAgB,GAChB,eAAe,GACf,aAAa,GACb,OAAO,GACP,cAAc,GACd,cAAc,CAAC;AAEnB;;GAEG;AACH,MAAM,MAAM,WAAW,GACnB,YAAY,GACZ,MAAM,GACN,QAAQ,GACR,KAAK,GACL,eAAe,GACf,QAAQ,GACR,aAAa,GACb,OAAO,CAAC;AAEZ;;GAEG;AACH,eAAO,MAAM,sBAAsB,EAAE,QAAQ,CAC3C,MAAM,CAAC,MAAM,EAAE,WAAW,GAAG,SAAS,CAAC,CAU/B,CAAC;AAEX;;GAEG;AACH,eAAO,MAAM,kBAAkB,EAAE,SAAS,WAAW,EAS3C,CAAC;AAEX;;GAEG;AACH,eAAO,MAAM,eAAe,EAAE,SAAS,YAAY,EAOzC,CAAC;AAEX;;;;;;;;;;;;;GAaG;AACH,MAAM,MAAM,OAAO,GACf,QAAQ,GACR,OAAO,GACP,QAAQ,GACR,KAAK,GACL,SAAS,GACT,UAAU,GACV,OAAO,CAAC;AAEZ;;GAEG;AACH,eAAO,MAAM,cAAc,EAAE,SAAS,OAAO,EAQnC,CAAC;AAEX;;;GAGG;AACH,eAAO,MAAM,eAAe,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAE7D,CAAC;AAEF;;;;GAIG;AACH,eAAO,MAAM,uBAAuB,EAAE,SAAS,MAAM,EAGpD,CAAC;AAEF;;;;;;;;;GASG;AACH,eAAO,MAAM,sBAAsB,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAEpE,CAAC;AAEF;;;;GAIG;AACH,MAAM,MAAM,SAAS,GAAG,QAAQ,GAAG,OAAO,GAAG,KAAK,GAAG,SAAS,GAAG,UAAU,CAAC;AAE5E;;;;;;;;;;;GAWG;AACH,wBAAgB,oBAAoB,CAClC,OAAO,EAAE,OAAO,EAChB,KAAK,EAAE,SAAS,GACf,OAAO,CAGT;AAED;;;GAGG;AACH,eAAO,MAAM,eAAe,EAAE,OAAkB,CAAC;AAEjD;;GAEG;AACH,MAAM,WAAW,UAAU;IACzB,+DAA+D;IAC/D,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IAEzB,4CAA4C;IAC5C,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IAEzB,8DAA8D;IAC9D,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAC;IAEzB,8DAA8D;IAC9D,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;IAE1B,4DAA4D;IAC5D,QAAQ,CAAC,YAAY,EAAE,OAAO,CAAC;IAE/B;;;;;OAKG;IACH,QAAQ,CAAC,YAAY,EAAE,OAAO,CAAC;IAE/B;;;;;;;;;;;;;;OAcG;IACH,QAAQ,CAAC,WAAW,CAAC,EAAE,OAAO,CAAC;IAE/B;;;;;OAKG;IACH,QAAQ,CAAC,SAAS,CAAC,EAAE,OAAO,CAAC;IAE7B;;;;;;;;;OASG;IACH,QAAQ,CAAC,gBAAgB,CAAC,EAAE,gBAAgB,CAAC;IAE7C,6EAA6E;IAC7E,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;CAC3B;AAED;;;;;;;GAOG;AACH,MAAM,MAAM,gBAAgB;AAC1B,gCAAgC;AAC9B;IAAE,QAAQ,CAAC,IAAI,EAAE,KAAK,CAAA;CAAE;AAC1B,4DAA4D;GAC1D;IAAE,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC;IAAC,QAAQ,CAAC,KAAK,EAAE,SAAS,MAAM,EAAE,CAAA;CAAE,CAAC;AAElE;;;;;GAKG;AACH,wBAAgB,kBAAkB,CAChC,YAAY,EAAE,MAAM,EACpB,OAAO,EAAE,gBAAgB,GAAG,SAAS,GACpC,OAAO,CAUT;AAgBD;;GAEG;AACH,MAAM,MAAM,aAAa,GAAG,OAAO,GAAG,UAAU,CAAC;AAEjD;;GAEG;AACH,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,QAAQ,EAAE,YAAY,CAAC;IAChC,QAAQ,CAAC,MAAM,EACX,QAAQ,GACR,SAAS;IACX;;;;;;;;OAQG;OACD,OAAO;IACT;;;;;;;;;OASG;OACD,YAAY;IACd;;;;;;;;;;;OAWG;OACD,UAAU,GACV,aAAa,GACb,UAAU,GACV,QAAQ,GACR,SAAS,CAAC;IACd,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;IAC7B;;;;;OAKG;IACH,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;CACxB;AAED;;GAEG;AACH,MAAM,WAAW,iBAAiB;IAChC,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,MAAM,CAAC;IAChB,kFAAkF;IAClF,KAAK,EAAE,MAAM,CAAC;IACd,8EAA8E;IAC9E,SAAS,EAAE,MAAM,CAAC;IAClB,iFAAiF;IACjF,QAAQ,EAAE,MAAM,CAAC;IACjB,WAAW,EAAE,MAAM,CAAC;IACpB,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,MAAM,CAAC;IAChB,iBAAiB,EAAE,MAAM,CAAC;IAC1B,iBAAiB,EAAE,MAAM,CAAC;CAC3B;AAED;;GAEG;AACH,MAAM,WAAW,eAAe;IAC9B,6CAA6C;IAC7C,QAAQ,CAAC,KAAK,EAAE,SAAS,MAAM,EAAE,CAAC;IAClC,oEAAoE;IACpE,QAAQ,CAAC,IAAI,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAClC;;;;;;;;;;;;;;;;;;;;;;OAsBG;IACH,QAAQ,CAAC,KAAK,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;IAClD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;OA+BG;IACH,QAAQ,CAAC,KAAK,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;CACnD;AAED;;GAEG;AACH,MAAM,WAAW,UAAU;IACzB,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;IAC1B,QAAQ,CAAC,QAAQ,EAAE,iBAAiB,CAAC;IACrC,QAAQ,CAAC,aAAa,EAAE,SAAS,WAAW,EAAE,CAAC;IAC/C,QAAQ,CAAC,IAAI,EAAE,aAAa,CAAC;IAC7B,QAAQ,CAAC,MAAM,EAAE,SAAS,MAAM,EAAE,CAAC;IACnC;;;;;;;;OAQG;IACH,QAAQ,CAAC,UAAU,EAAE,SAAS,MAAM,EAAE,CAAC;IACvC;;;;;;;;;;;;OAYG;IACH,QAAQ,CAAC,YAAY,EAAE,SAAS,MAAM,EAAE,CAAC;CAC1C;AAED;;;GAGG;AACH,wBAAgB,qBAAqB,IAAI,iBAAiB,CAezD"}

package/dist/core/config.js.map

@@ -1 +1 @@
-{"version":3,"file":"config.js","sourceRoot":"","sources":["../../src/core/config.ts"],"names":[],"mappings":"AAwBA;;GAEG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAE/B;IACF,IAAI,EAAE,YAAY;IAClB,MAAM,EAAE,YAAY;IACpB,GAAG,EAAE,YAAY;IACjB,eAAe,EAAE,YAAY;IAC7B,MAAM,EAAE,YAAY;IACpB,aAAa,EAAE,YAAY;IAC3B,UAAU,EAAE,SAAS;IACrB,KAAK,EAAE,SAAS;CACR,CAAC;AAEX;;GAEG;AACH,MAAM,CAAC,MAAM,kBAAkB,GAA2B;IACxD,YAAY;IACZ,aAAa;IACb,eAAe;IACf,QAAQ;IACR,MAAM;IACN,QAAQ;IACR,KAAK;IACL,OAAO;CACC,CAAC;AAEX;;GAEG;AACH,MAAM,CAAC,MAAM,eAAe,GAA4B;IACtD,gBAAgB;IAChB,eAAe;IACf,aAAa;IACb,OAAO;IACP,cAAc;IACd,cAAc;CACN,CAAC;AAyBX;;GAEG;AACH,MAAM,CAAC,MAAM,cAAc,GAAuB;IAChD,QAAQ;IACR,OAAO;IACP,QAAQ;IACR,KAAK;IACL,SAAS;IACT,UAAU;IACV,OAAO;CACC,CAAC;AAEX;;;GAGG;AACH,MAAM,CAAC,MAAM,eAAe,GAAsC;IAChE,GAAG,EAAE,OAAO;CACb,CAAC;AAEF;;;;GAIG;AACH,MAAM,CAAC,MAAM,uBAAuB,GAAsB;IACxD,GAAG,cAAc;IACjB,GAAG,MAAM,CAAC,IAAI,CAAC,eAAe,CAAC;CAChC,CAAC;AAEF;;;;;;;;;GASG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAAsC;IACvE,IAAI,EAAE,OAAO;CACd,CAAC;AASF;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,oBAAoB,CAClC,OAAgB,EAChB,KAAgB;IAEhB,IAAI,OAAO,KAAK,OAAO;QAAE,OAAO,IAAI,CAAC;IACrC,OAAO,OAAO,KAAK,KAAK,CAAC;AAC3B,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,MAAM,eAAe,GAAY,QAAQ,CAAC;AAoFjD;;;;;GAKG;AACH,MAAM,UAAU,kBAAkB,CAChC,YAAoB,EACpB,OAAqC;IAErC,IAAI,OAAO,KAAK,SAAS;QAAE,OAAO,KAAK,CAAC;IACxC,IAAI,OAAO,CAAC,IAAI,KAAK,KAAK;QAAE,OAAO,IAAI,CAAC;IACxC,8EAA8E;IAC9E,0CAA0C;IAC1C,MAAM,MAAM,GAAG,YAAY,CAAC,UAAU,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;IAClD,OAAO,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE;QAC9B,MAAM,KAAK,GAAG,oBAAoB,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,CAAC;QAC9D,OAAO,KAAK,KAAK,MAAM,IAAI,MAAM,CAAC,UAAU,CAAC,GAAG,KAAK,GAAG,CAAC,CAAC;IAC5D,CAAC,CAAC,CAAC;AACL,CAAC;AAED;;;;;;;;;GASG;AACH,SAAS,oBAAoB,CAAC,KAAa;IACzC,OAAO,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,oBAAoB,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC;AAChF,CAAC;AA0JD;;;GAGG;AACH,MAAM,UAAU,qBAAqB;IACnC,OAAO;QACL,MAAM,EAAE,CAAC;QACT,OAAO,EAAE,CAAC;QACV,KAAK,EAAE,CAAC;QACR,SAAS,EAAE,CAAC;QACZ,QAAQ,EAAE,CAAC;QACX,WAAW,EAAE,CAAC;QACd,QAAQ,EAAE,CAAC;QACX,MAAM,EAAE,CAAC;QACT,OAAO,EAAE,CAAC;QACV,OAAO,EAAE,CAAC;QACV,iBAAiB,EAAE,CAAC;QACpB,iBAAiB,EAAE,CAAC;KACrB,CAAC;AACJ,CAAC"}
+{"version":3,"file":"config.js","sourceRoot":"","sources":["../../src/core/config.ts"],"names":[],"mappings":"AAwBA;;GAEG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAE/B;IACF,IAAI,EAAE,YAAY;IAClB,MAAM,EAAE,YAAY;IACpB,GAAG,EAAE,YAAY;IACjB,eAAe,EAAE,YAAY;IAC7B,MAAM,EAAE,YAAY;IACpB,aAAa,EAAE,YAAY;IAC3B,UAAU,EAAE,SAAS;IACrB,KAAK,EAAE,SAAS;CACR,CAAC;AAEX;;GAEG;AACH,MAAM,CAAC,MAAM,kBAAkB,GAA2B;IACxD,YAAY;IACZ,aAAa;IACb,eAAe;IACf,QAAQ;IACR,MAAM;IACN,QAAQ;IACR,KAAK;IACL,OAAO;CACC,CAAC;AAEX;;GAEG;AACH,MAAM,CAAC,MAAM,eAAe,GAA4B;IACtD,gBAAgB;IAChB,eAAe;IACf,aAAa;IACb,OAAO;IACP,cAAc;IACd,cAAc;CACN,CAAC;AAyBX;;GAEG;AACH,MAAM,CAAC,MAAM,cAAc,GAAuB;IAChD,QAAQ;IACR,OAAO;IACP,QAAQ;IACR,KAAK;IACL,SAAS;IACT,UAAU;IACV,OAAO;CACC,CAAC;AAEX;;;GAGG;AACH,MAAM,CAAC,MAAM,eAAe,GAAsC;IAChE,GAAG,EAAE,OAAO;CACb,CAAC;AAEF;;;;GAIG;AACH,MAAM,CAAC,MAAM,uBAAuB,GAAsB;IACxD,GAAG,cAAc;IACjB,GAAG,MAAM,CAAC,IAAI,CAAC,eAAe,CAAC;CAChC,CAAC;AAEF;;;;;;;;;GASG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAAsC;IACvE,IAAI,EAAE,OAAO;CACd,CAAC;AASF;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,oBAAoB,CAClC,OAAgB,EAChB,KAAgB;IAEhB,IAAI,OAAO,KAAK,OAAO;QAAE,OAAO,IAAI,CAAC;IACrC,OAAO,OAAO,KAAK,KAAK,CAAC;AAC3B,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,MAAM,eAAe,GAAY,QAAQ,CAAC;AAoFjD;;;;;GAKG;AACH,MAAM,UAAU,kBAAkB,CAChC,YAAoB,EACpB,OAAqC;IAErC,IAAI,OAAO,KAAK,SAAS;QAAE,OAAO,KAAK,CAAC;IACxC,IAAI,OAAO,CAAC,IAAI,KAAK,KAAK;QAAE,OAAO,IAAI,CAAC;IACxC,8EAA8E;IAC9E,0CAA0C;IAC1C,MAAM,MAAM,GAAG,YAAY,CAAC,UAAU,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;IAClD,OAAO,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE;QAC9B,MAAM,KAAK,GAAG,oBAAoB,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,CAAC;QAC9D,OAAO,KAAK,KAAK,MAAM,IAAI,MAAM,CAAC,UAAU,CAAC,GAAG,KAAK,GAAG,CAAC,CAAC;IAC5D,CAAC,CAAC,CAAC;AACL,CAAC;AAED;;;;;;;;;GASG;AACH,SAAS,oBAAoB,CAAC,KAAa;IACzC,OAAO,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,oBAAoB,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC;AAChF,CAAC;AA2LD;;;GAGG;AACH,MAAM,UAAU,qBAAqB;IACnC,OAAO;QACL,MAAM,EAAE,CAAC;QACT,OAAO,EAAE,CAAC;QACV,KAAK,EAAE,CAAC;QACR,SAAS,EAAE,CAAC;QACZ,QAAQ,EAAE,CAAC;QACX,WAAW,EAAE,CAAC;QACd,QAAQ,EAAE,CAAC;QACX,MAAM,EAAE,CAAC;QACT,OAAO,EAAE,CAAC;QACV,OAAO,EAAE,CAAC;QACV,iBAAiB,EAAE,CAAC;QACpB,iBAAiB,EAAE,CAAC;KACrB,CAAC;AACJ,CAAC"}

package/dist/core/deletion-basis.d.ts

@@ -0,0 +1,107 @@
+/**
+ * Why a declared path may be removed from a consumer's repository.
+ *
+ * `deletions.json` removes host files BY DESTINATION PATH ONLY. The path being
+ * listed is the entire authorisation: nothing between the manifest and
+ * `fse.remove` looks at the file's contents, its origin, or whether Lisa ever
+ * installed it. CodySwannGT/lisa#3656 closed that for `.github/workflows/` by
+ * reading each workflow's own ownership header, which covers 42 of 255 declared
+ * paths. This module is about the other 213.
+ *
+ * ## Why the obvious gate is not the fix
+ *
+ * The natural rule — "only delete what Lisa currently ships" — was measured
+ * against `main` and fails on 95% of the manifest: of the 213 non-workflow
+ * paths, 11 are attributable to a lane Lisa still ships and 202 are not. The
+ * 202 are not marginal. They are `.claude/skills/project-*`,
+ * `.claude/skills/git:*`, `.claude/skills/jira:*` and friends — skill trees Lisa
+ * renamed. Stranding them leaves every consumer carrying dead directories
+ * forever, which is the harm the manifest exists to prevent. A gate that causes
+ * the harm it was written to stop is the wrong gate.
+ *
+ * The reason it fails is structural rather than incidental: ownership is a
+ * per-consumer fact and the manifest is a repo-side artifact. Lisa cannot see,
+ * from its own tree, whether it put a given file in someone else's repository.
+ * No amount of matching logic closes that gap, so this module stops trying to
+ * infer ownership and requires it to be DECLARED.
+ *
+ * ## The grammar
+ *
+ * Every declared path carries a basis, and `force` counts as one:
+ *
+ * - `owned` — Lisa installs this path today; the lane is the evidence.
+ * - `legacy: <reason>` — Lisa shipped it in an older version and no longer
+ *   does. The reason names the version or ticket. The honest home for the 202.
+ * - `needs-review` — declared before this field existed. Deletes exactly as it
+ *   did before, so nothing changes for an existing consumer, but it is
+ *   countable: debt kept visible rather than laundered as classified.
+ * - a `force` entry — a ruling that overrides even the workflow ownership gate.
+ *   Unchanged by this module; its five existing entries keep working verbatim.
+ *
+ * ## What an ABSENT basis means, and why it keeps
+ *
+ * Unclassified is not "not owned" — it is "I cannot tell", and the two must be
+ * distinguishable or the uncertain case gets silently resolved as one of them.
+ * The cheap error is to keep the file: a path wrongly kept is visible and
+ * fixable, a path wrongly deleted is gone from someone else's repository with
+ * no undo. So an unclassified path is kept and announced.
+ *
+ * Two rules this deliberately does NOT implement, both learned in #3656:
+ *
+ * 1. Ownership is never inferred from a filename. A probe of the form "does
+ *    Lisa ship a file with this name anywhere?" marks the highest-risk paths
+ *    SAFE precisely because Lisa knows those names.
+ * 2. Ownership never keys on "was it modified". "The host has local work here"
+ *    and "the host has re-armed the hazard" are the same observation on disk;
+ *    only a declared reason separates them.
+ * @module core/deletion-basis
+ */
+import type { DeletionsConfig } from "./config.js";
+/** How a declared deletion path is authorised. */
+export type DeletionBasisKind = "owned" | "legacy" | "needs-review" | "force" | "unclassified";
+/** The resolved basis for one declared path. */
+export interface DeletionBasis {
+    readonly kind: DeletionBasisKind;
+    /** Prose accompanying a `legacy` or `force` basis; empty otherwise. */
+    readonly reason: string;
+}
+/**
+ * Resolve why one declared path may be removed.
+ *
+ * `force` is checked first and wins: it is the strongest declaration in the
+ * manifest, and a path carrying one is authorised whatever else says.
+ * @param config - The parsed manifest.
+ * @param relativePath - Declared path, spelled as the manifest spells it.
+ * @returns The basis, or `unclassified` when the manifest does not say.
+ */
+export declare function resolveDeletionBasis(config: DeletionsConfig, relativePath: string): DeletionBasis;
+/**
+ * Whether a resolved basis authorises removal.
+ *
+ * `needs-review` authorises: this field lands with every existing path already
+ * marked, so an existing consumer sees byte-identical behaviour. The gate binds
+ * on paths added AFTER it, which is the whole point of shipping the mechanism
+ * before the prose.
+ * @param basis - A resolved basis.
+ * @returns True when the path may be removed.
+ */
+export declare function basisAuthorisesDeletion(basis: DeletionBasis): boolean;
+/**
+ * Every declared path in one manifest that carries no basis.
+ *
+ * This is what the authoring gate refuses on. It is deliberately separate from
+ * the runtime keep-decision above: the runtime rule is the fail-safe that
+ * protects consumers whatever manifest they have, and this is the check that
+ * stops an unclassified path being authored in the first place. A single
+ * mechanism doing both would have to choose which to be.
+ * @param config - The parsed manifest.
+ * @returns Unclassified paths, in declaration order.
+ */
+export declare function unclassifiedDeletionPaths(config: DeletionsConfig): readonly string[];
+/**
+ * Count declared paths by basis kind, for reporting the outstanding debt.
+ * @param config - The parsed manifest.
+ * @returns A count per kind, including zeroes.
+ */
+export declare function countDeletionBases(config: DeletionsConfig): Readonly<Record<DeletionBasisKind, number>>;
+//# sourceMappingURL=deletion-basis.d.ts.map

package/dist/core/deletion-basis.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"deletion-basis.d.ts","sourceRoot":"","sources":["../../src/core/deletion-basis.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAyDG;AACH,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAEnD,kDAAkD;AAClD,MAAM,MAAM,iBAAiB,GACzB,OAAO,GACP,QAAQ,GACR,cAAc,GACd,OAAO,GACP,cAAc,CAAC;AAEnB,gDAAgD;AAChD,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,IAAI,EAAE,iBAAiB,CAAC;IACjC,uEAAuE;IACvE,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;CACzB;AAMD;;;;;;;;GAQG;AACH,wBAAgB,oBAAoB,CAClC,MAAM,EAAE,eAAe,EACvB,YAAY,EAAE,MAAM,GACnB,aAAa,CAqBf;AAED;;;;;;;;;GASG;AACH,wBAAgB,uBAAuB,CAAC,KAAK,EAAE,aAAa,GAAG,OAAO,CAErE;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,yBAAyB,CACvC,MAAM,EAAE,eAAe,GACtB,SAAS,MAAM,EAAE,CAMnB;AAED;;;;GAIG;AACH,wBAAgB,kBAAkB,CAChC,MAAM,EAAE,eAAe,GACtB,QAAQ,CAAC,MAAM,CAAC,iBAAiB,EAAE,MAAM,CAAC,CAAC,CAc7C"}

package/dist/core/deletion-basis.js

@@ -0,0 +1,81 @@
+const NEEDS_REVIEW = "needs-review";
+const OWNED = "owned";
+const LEGACY_PREFIX = "legacy:";
+/**
+ * Resolve why one declared path may be removed.
+ *
+ * `force` is checked first and wins: it is the strongest declaration in the
+ * manifest, and a path carrying one is authorised whatever else says.
+ * @param config - The parsed manifest.
+ * @param relativePath - Declared path, spelled as the manifest spells it.
+ * @returns The basis, or `unclassified` when the manifest does not say.
+ */
+export function resolveDeletionBasis(config, relativePath) {
+    const forced = config.force?.[relativePath];
+    if (typeof forced === "string" && forced.trim() !== "")
+        return { kind: "force", reason: forced };
+    const declared = config.basis?.[relativePath];
+    if (typeof declared !== "string" || declared.trim() === "")
+        return { kind: "unclassified", reason: "" };
+    const value = declared.trim();
+    if (value === NEEDS_REVIEW)
+        return { kind: NEEDS_REVIEW, reason: "" };
+    if (value === OWNED)
+        return { kind: OWNED, reason: "" };
+    if (value.startsWith(LEGACY_PREFIX)) {
+        const reason = value.slice(LEGACY_PREFIX.length).trim();
+        // A `legacy` basis with no prose is unclassified in substance: the whole
+        // point of the kind is that somebody wrote down WHY, and an empty reason
+        // is the debt without the marker that makes it countable.
+        if (reason === "")
+            return { kind: "unclassified", reason: "" };
+        return { kind: "legacy", reason };
+    }
+    return { kind: "unclassified", reason: "" };
+}
+/**
+ * Whether a resolved basis authorises removal.
+ *
+ * `needs-review` authorises: this field lands with every existing path already
+ * marked, so an existing consumer sees byte-identical behaviour. The gate binds
+ * on paths added AFTER it, which is the whole point of shipping the mechanism
+ * before the prose.
+ * @param basis - A resolved basis.
+ * @returns True when the path may be removed.
+ */
+export function basisAuthorisesDeletion(basis) {
+    return basis.kind !== "unclassified";
+}
+/**
+ * Every declared path in one manifest that carries no basis.
+ *
+ * This is what the authoring gate refuses on. It is deliberately separate from
+ * the runtime keep-decision above: the runtime rule is the fail-safe that
+ * protects consumers whatever manifest they have, and this is the check that
+ * stops an unclassified path being authored in the first place. A single
+ * mechanism doing both would have to choose which to be.
+ * @param config - The parsed manifest.
+ * @returns Unclassified paths, in declaration order.
+ */
+export function unclassifiedDeletionPaths(config) {
+    const keep = new Set(config.keep ?? []);
+    return (config.paths ?? []).filter(p => !keep.has(p) && !basisAuthorisesDeletion(resolveDeletionBasis(config, p)));
+}
+/**
+ * Count declared paths by basis kind, for reporting the outstanding debt.
+ * @param config - The parsed manifest.
+ * @returns A count per kind, including zeroes.
+ */
+export function countDeletionBases(config) {
+    return (config.paths ?? []).reduce((counts, declaredPath) => {
+        const { kind } = resolveDeletionBasis(config, declaredPath);
+        return { ...counts, [kind]: counts[kind] + 1 };
+    }, {
+        owned: 0,
+        legacy: 0,
+        [NEEDS_REVIEW]: 0,
+        force: 0,
+        unclassified: 0,
+    });
+}
+//# sourceMappingURL=deletion-basis.js.map

package/dist/core/deletion-basis.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"deletion-basis.js","sourceRoot":"","sources":["../../src/core/deletion-basis.ts"],"names":[],"mappings":"AA2EA,MAAM,YAAY,GAAG,cAAc,CAAC;AACpC,MAAM,KAAK,GAAG,OAAO,CAAC;AACtB,MAAM,aAAa,GAAG,SAAS,CAAC;AAEhC;;;;;;;;GAQG;AACH,MAAM,UAAU,oBAAoB,CAClC,MAAuB,EACvB,YAAoB;IAEpB,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,EAAE,CAAC,YAAY,CAAC,CAAC;IAC5C,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,CAAC,IAAI,EAAE,KAAK,EAAE;QACpD,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;IAE3C,MAAM,QAAQ,GAAG,MAAM,CAAC,KAAK,EAAE,CAAC,YAAY,CAAC,CAAC;IAC9C,IAAI,OAAO,QAAQ,KAAK,QAAQ,IAAI,QAAQ,CAAC,IAAI,EAAE,KAAK,EAAE;QACxD,OAAO,EAAE,IAAI,EAAE,cAAc,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC;IAE9C,MAAM,KAAK,GAAG,QAAQ,CAAC,IAAI,EAAE,CAAC;IAC9B,IAAI,KAAK,KAAK,YAAY;QAAE,OAAO,EAAE,IAAI,EAAE,YAAY,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC;IACtE,IAAI,KAAK,KAAK,KAAK;QAAE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC;IACxD,IAAI,KAAK,CAAC,UAAU,CAAC,aAAa,CAAC,EAAE,CAAC;QACpC,MAAM,MAAM,GAAG,KAAK,CAAC,KAAK,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC;QACxD,yEAAyE;QACzE,yEAAyE;QACzE,0DAA0D;QAC1D,IAAI,MAAM,KAAK,EAAE;YAAE,OAAO,EAAE,IAAI,EAAE,cAAc,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC;QAC/D,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC;IACpC,CAAC;IACD,OAAO,EAAE,IAAI,EAAE,cAAc,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC;AAC9C,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,uBAAuB,CAAC,KAAoB;IAC1D,OAAO,KAAK,CAAC,IAAI,KAAK,cAAc,CAAC;AACvC,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,UAAU,yBAAyB,CACvC,MAAuB;IAEvB,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC;IACxC,OAAO,CAAC,MAAM,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,MAAM,CAChC,CAAC,CAAC,EAAE,CACF,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,uBAAuB,CAAC,oBAAoB,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,CAC5E,CAAC;AACJ,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,kBAAkB,CAChC,MAAuB;IAEvB,OAAO,CAAC,MAAM,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,MAAM,CAChC,CAAC,MAAM,EAAE,YAAY,EAAE,EAAE;QACvB,MAAM,EAAE,IAAI,EAAE,GAAG,oBAAoB,CAAC,MAAM,EAAE,YAAY,CAAC,CAAC;QAC5D,OAAO,EAAE,GAAG,MAAM,EAAE,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;IACjD,CAAC,EACD;QACE,KAAK,EAAE,CAAC;QACR,MAAM,EAAE,CAAC;QACT,CAAC,YAAY,CAAC,EAAE,CAAC;QACjB,KAAK,EAAE,CAAC;QACR,YAAY,EAAE,CAAC;KAChB,CACF,CAAC;AACJ,CAAC"}

package/dist/core/lisa-owned-hash-ledger.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"lisa-owned-hash-ledger.d.ts","sourceRoot":"","sources":["../../src/core/lisa-owned-hash-ledger.ts"],"names":[],"mappings":"AACA,6EAA6E;AAE7E;;;;;;;GAOG;AACH,eAAO,MAAM,sBAAsB,EAAE,QAAQ,CAC3C,MAAM,CAAC,MAAM,EAAE,SAAS,MAAM,EAAE,CAAC,CA8/BjC,CAAC;AAEH;;;;;;;;;;;;;;;GAeG;AACH,eAAO,MAAM,+BAA+B,EAAE,QAAQ,CACpD,MAAM,CAAC,MAAM,EAAE,SAAS,MAAM,EAAE,CAAC,CAi6BjC,CAAC"}
+{"version":3,"file":"lisa-owned-hash-ledger.d.ts","sourceRoot":"","sources":["../../src/core/lisa-owned-hash-ledger.ts"],"names":[],"mappings":"AACA,6EAA6E;AAE7E;;;;;;;GAOG;AACH,eAAO,MAAM,sBAAsB,EAAE,QAAQ,CAC3C,MAAM,CAAC,MAAM,EAAE,SAAS,MAAM,EAAE,CAAC,CAigCjC,CAAC;AAEH;;;;;;;;;;;;;;;GAeG;AACH,eAAO,MAAM,+BAA+B,EAAE,QAAQ,CACpD,MAAM,CAAC,MAAM,EAAE,SAAS,MAAM,EAAE,CAAC,CAo6BjC,CAAC"}

package/dist/core/lisa-owned-hash-ledger.js

@@ -350,6 +350,7 @@ export const LISA_OWNED_HASH_LEDGER = Object.freeze({
         "b4a0b1a0df6e944313b4a197925a0003fb9aed517fbd5708deda2a2a67f53faf",
         "b93880769e7ac402879200ce80a32095baa38d1fbc47cf17804bd6df49ce3b8a",
         "bc135e1c130844a2e5daf769104e78a42fd804de06ae79b7b50bf357b3d76795",
+        "ca4f5084989115c7fe87ce3b8d895938146af6b1d01e11b9b342519d09832d6a",
         "d0ec5b439c3c5118d95c813322593d68fefc395e687a8e203f776662896621fe",
         "d234617dc907bb563455419957f2f419702fcd1c10b9d39e19d5bab8ca962008",
         "e07bab7dc4c4c296e2007cf26fab694b1238545dc37816e88d849606d8f9e760",
@@ -719,6 +720,7 @@ export const LISA_OWNED_HASH_LEDGER = Object.freeze({
         "b6fbbda29d897a7c39cf0524c91d5c66a47054df32e036f15cdabefdc34ac72a",
         "b83c5043a0f29b2d8851258acfe6906aab7922cd80f486e25220e55f26a8c0a5",
         "baf3c78b7c333735142cc1a7bc19369f953a4699f7be517bb4e3c12167d5c60b",
+        "c0aa42f5e0a15a5d1938369129d0b7f726a4db1a80389d427e6f9647d7cf97fa",
         "c4a51de3f1512e7e18935612137e4ddaf548db68f878d8239fcc85436b0f27c7",
         "c57b70eed03b74e7c8335c40b0c2b1102e217e507337b71fcf3d2bec5a450bf8",
         "caea02a07027fc1c74d47e08b36299d369c5c9f7c4043da8828fbca3c64eb2aa",
@@ -843,6 +845,7 @@ export const LISA_OWNED_HASH_LEDGER = Object.freeze({
         "c8f5c6d9fb3bb341feac51e64fbc14e83233b376eb0a047795cb72d302b771b4",
         "cd79864ea6ccfbf33341d537a08436aefbb9eff55a78bb3ff5002f8b3b9cfe55",
         "d078570b2a7964eb481cd05e118e2a6559968020392c6e570d90cec8f20c5487",
+        "daf2f7b54950869632c7ecc02201a0c3fd482195594ae641075dd9718cfdfebd",
         "e00f16cdc399c8ee61c7a3972469fbb4b662e0fff00bd9d3d6910f3f27a5f04c",
         "e429308896cf0450b2e5dfae9a580dde1a8da351503998c07ca3506e8b2ffdce",
         "ed643bb28356e9c3f7e351227e690763d6b5e275a78d232cd9dba2d1fc55cffe",
@@ -1366,6 +1369,7 @@ export const LISA_OWNED_HASH_HISTORY_DERIVED = Object.freeze({
         "b4a0b1a0df6e944313b4a197925a0003fb9aed517fbd5708deda2a2a67f53faf",
         "b93880769e7ac402879200ce80a32095baa38d1fbc47cf17804bd6df49ce3b8a",
         "bc135e1c130844a2e5daf769104e78a42fd804de06ae79b7b50bf357b3d76795",
+        "ca4f5084989115c7fe87ce3b8d895938146af6b1d01e11b9b342519d09832d6a",
         "d0ec5b439c3c5118d95c813322593d68fefc395e687a8e203f776662896621fe",
         "d234617dc907bb563455419957f2f419702fcd1c10b9d39e19d5bab8ca962008",
         "e07bab7dc4c4c296e2007cf26fab694b1238545dc37816e88d849606d8f9e760",
@@ -1688,6 +1692,7 @@ export const LISA_OWNED_HASH_HISTORY_DERIVED = Object.freeze({
         "b5505f55a5092f1d451ae5a01ada85a031e5b063d08fc0ce5527d94b67191a60",
         "b6fbbda29d897a7c39cf0524c91d5c66a47054df32e036f15cdabefdc34ac72a",
         "b83c5043a0f29b2d8851258acfe6906aab7922cd80f486e25220e55f26a8c0a5",
+        "c0aa42f5e0a15a5d1938369129d0b7f726a4db1a80389d427e6f9647d7cf97fa",
         "c4a51de3f1512e7e18935612137e4ddaf548db68f878d8239fcc85436b0f27c7",
         "c57b70eed03b74e7c8335c40b0c2b1102e217e507337b71fcf3d2bec5a450bf8",
         "caea02a07027fc1c74d47e08b36299d369c5c9f7c4043da8828fbca3c64eb2aa",
@@ -1794,6 +1799,7 @@ export const LISA_OWNED_HASH_HISTORY_DERIVED = Object.freeze({
         "c8f5c6d9fb3bb341feac51e64fbc14e83233b376eb0a047795cb72d302b771b4",
         "cd79864ea6ccfbf33341d537a08436aefbb9eff55a78bb3ff5002f8b3b9cfe55",
         "d078570b2a7964eb481cd05e118e2a6559968020392c6e570d90cec8f20c5487",
+        "daf2f7b54950869632c7ecc02201a0c3fd482195594ae641075dd9718cfdfebd",
         "e00f16cdc399c8ee61c7a3972469fbb4b662e0fff00bd9d3d6910f3f27a5f04c",
         "ed643bb28356e9c3f7e351227e690763d6b5e275a78d232cd9dba2d1fc55cffe",
     ]),