@codyswann/lisa 4.38.8 → 4.40.0

package/all/copy-overwrite/scripts/lisa-cross-worktree-guard.mjs

@@ -0,0 +1,276 @@
+#!/usr/bin/env node
+// This file is managed by Lisa and IS replaced on each `lisa` run.
+// Do not edit directly — durable changes belong upstream in Lisa.
+/**
+ * Refuse a commit that stages a NEW file byte-identical to uncommitted work
+ * living in a different linked worktree.
+ *
+ * WHAT THIS IS FOR. When several agents share one repository through linked
+ * worktrees, one agent's uncommitted file can be committed by another — the
+ * file is real, the branch is real, the commit succeeds, every gate passes,
+ * and the history is quietly wrong about who did what. One confirmed case:
+ * a 284-line test file staged in one worktree was committed an hour later
+ * from elsewhere, byte-identical, under a subtly different subject line.
+ *
+ * WHY IT MUST BE A HOOK AND NOT A HABIT. The failure mode is that nobody
+ * notices. A check an agent has to remember to run is a check that does not
+ * run on the commit where it mattered. This runs on every commit, needs no
+ * cooperation, and costs one `stat` per linked worktree per newly added file.
+ *
+ * WHY CONTENT AND NOT MESSAGE. The observed case had a rewritten subject
+ * line, so anything keyed on the message would have missed it. Blob identity
+ * cannot be edited away.
+ *
+ * THE LIMIT, STATED PLAINLY. This needs BOTH halves — the file being staged
+ * here and the original still present over there. Once the other worktree is
+ * removed, the comparison has nothing to match against and this guard is
+ * silent. A clean run is therefore not proof that no work was taken; it is
+ * proof that none is takeable *right now*. Deleting a worktree that holds
+ * uncommitted work permanently forecloses the only window in which its own
+ * case was detectable.
+ */
+
+import { execFileSync } from "node:child_process";
+import { existsSync, statSync } from "node:fs";
+import { join } from "node:path";
+
+/**
+ * Paths that are ambient session furniture rather than authored work.
+ *
+ * Matched with `startsWith` rather than a constructed RegExp: a literal prefix
+ * needs no pattern, and building one invites escaping that the shipped fixer
+ * then rewrites, which makes this file stop being a fixed point of Lisa's own
+ * formatter (#2788).
+ */
+const IGNORED_PREFIXES = [".codex/"];
+
+/**
+ * Content below this many bytes is not evidence of anything. A short or empty
+ * file collides across worktrees by coincidence — an empty `__init__`, a
+ * one-line barrel re-export, a placeholder — and a guard that fires on those
+ * teaches people to bypass it, which costs more than the cases it would catch.
+ */
+const MIN_INTERESTING_BYTES = 64;
+
+/**
+ * Run a command, returning its trimmed stdout, or `null` when it exits
+ * non-zero. Used for probes whose failure is a legitimate answer ("this path
+ * is not on main", "this path is not tracked there") rather than an error.
+ */
+function probe(args, cwd) {
+  try {
+    return execFileSync("git", args, {
+      cwd,
+      encoding: "utf8",
+      stdio: ["ignore", "pipe", "ignore"],
+    }).trim();
+  } catch {
+    return null;
+  }
+}
+
+function must(args, cwd) {
+  return execFileSync("git", args, {
+    cwd,
+    encoding: "utf8",
+    stdio: ["ignore", "pipe", "pipe"],
+  }).trim();
+}
+
+/** Absolute paths of every registered linked worktree, this one included. */
+function worktrees(repo) {
+  const out = probe(["worktree", "list", "--porcelain"], repo) ?? "";
+  return out
+    .split("\n")
+    .filter(line => line.startsWith("worktree "))
+    .map(line => line.slice("worktree ".length).trim())
+    .filter(Boolean);
+}
+
+/**
+ * Paths staged as ADDED in this commit.
+ *
+ * Deliberately only `A`. A modified tracked file is frequently identical
+ * across worktrees for honest reasons — a regenerated manifest is the common
+ * one, and it is deterministic, so two agents regenerating it produce the same
+ * bytes while differing from main. Firing on that would make the guard noise
+ * on nearly every commit. A brand-new file with identical content in two
+ * worktrees has no such innocent explanation.
+ */
+function stagedAdditions(repo) {
+  const out = probe(
+    ["diff", "--cached", "--name-only", "--diff-filter=A", "-z"],
+    repo
+  );
+  if (out === null) return [];
+  return out.split("\0").filter(Boolean);
+}
+
+/** The blob this commit is staging for `path`, or null when unreadable. */
+function stagedBlob(repo, path) {
+  return probe(["rev-parse", `:${path}`], repo);
+}
+
+/**
+ * Whether `blob` is simply what the integration branch already holds at
+ * `path`.
+ *
+ * THIS IS THE REJECTION CONTROL, and without it the guard is worthless rather
+ * than merely weak. Measured while designing this: a first pass without it
+ * fired on four files in one worktree that were byte-identical to `origin/main`
+ * — content every worktree carries for the ordinary reason. A guard that
+ * reports shared history as contamination fires on every worktree and is
+ * switched off within the hour.
+ */
+function isIntegrationContent(repo, defaultRef, path, blob) {
+  if (!defaultRef) return false;
+  return probe(["rev-parse", `${defaultRef}:${path}`], repo) === blob;
+}
+
+/** The remote-tracking integration ref, or null when it cannot be resolved. */
+function integrationRef(repo) {
+  const symref = probe(
+    ["symbolic-ref", "--quiet", "refs/remotes/origin/HEAD"],
+    repo
+  );
+  if (symref) return symref.replace(/^refs\/remotes\//, "");
+  for (const candidate of ["origin/main", "origin/master"]) {
+    if (probe(["rev-parse", "--verify", "--quiet", candidate], repo))
+      return candidate;
+  }
+  return null;
+}
+
+/**
+ * Paths the operator has explicitly cleared, as a comma-separated list.
+ *
+ * Deliberately path-scoped rather than a boolean. A blanket "off" switch on a
+ * guard like this gets set once, in frustration, and never unset — and the
+ * next real case passes silently. Naming the file keeps the override as narrow
+ * as the situation that justified it.
+ */
+function clearedPaths() {
+  const raw = process.env.LISA_ALLOW_CROSS_WORKTREE_BLOB;
+  if (!raw) return new Set();
+  return new Set(
+    raw
+      .split(",")
+      .map(entry => entry.trim())
+      .filter(Boolean)
+  );
+}
+
+function findCollisions(repo, self) {
+  const additions = stagedAdditions(repo);
+  if (additions.length === 0) return [];
+
+  const others = worktrees(repo).filter(tree => tree !== self);
+  if (others.length === 0) return [];
+
+  const defaultRef = integrationRef(repo);
+  const cleared = clearedPaths();
+  const collisions = [];
+
+  for (const path of additions) {
+    if (cleared.has(path)) continue;
+    if (IGNORED_PREFIXES.some(prefix => path.startsWith(prefix))) continue;
+
+    const blob = stagedBlob(repo, path);
+    if (!blob) continue;
+
+    const size = Number(probe(["cat-file", "-s", blob], repo));
+    if (!Number.isFinite(size) || size < MIN_INTERESTING_BYTES) continue;
+
+    if (isIntegrationContent(repo, defaultRef, path, blob)) continue;
+
+    for (const tree of others) {
+      const candidate = join(tree, path);
+      // The stat is the cheap filter: almost every worktree lacks the path,
+      // so almost every pair costs one failed stat and nothing else.
+      if (!existsSync(candidate)) continue;
+      let stats;
+      try {
+        stats = statSync(candidate);
+      } catch {
+        continue;
+      }
+      if (!stats.isFile()) continue;
+
+      const theirs = probe(["hash-object", candidate], repo);
+      if (theirs !== blob) continue;
+
+      // Tracked over there means it is shared history reaching that worktree
+      // through a branch, not that agent's work in progress.
+      const tracked = probe(["-C", tree, "ls-files", "--error-unmatch", path]);
+      if (tracked !== null) continue;
+
+      collisions.push({ path, tree });
+      break;
+    }
+  }
+
+  return collisions;
+}
+
+function report(collisions) {
+  const lines = [
+    "",
+    "❌ Commit blocked: staged content is also uncommitted in another worktree.",
+    "",
+  ];
+  for (const { path, tree } of collisions) {
+    lines.push(`   ${path}`);
+    lines.push(`     byte-identical to an uncommitted copy in ${tree}`);
+  }
+  lines.push("");
+  lines.push("   Each file above is being added here while the same bytes sit");
+  lines.push(
+    "   uncommitted in another worktree. Either another agent authored it and"
+  );
+  lines.push(
+    "   this commit would take credit for work in progress, or the same work"
+  );
+  lines.push("   is about to land twice on two branches.");
+  lines.push("");
+  lines.push("   Before retrying, establish which worktree authored it:");
+  lines.push(
+    "     git log --all --oneline --find-object=$(git rev-parse :<path>)"
+  );
+  lines.push(
+    "   Inspect the other branch through shared refs — git log, git show,"
+  );
+  lines.push(
+    "   git cat-file all reach it from here. Do NOT enter another agent's"
+  );
+  lines.push(
+    "   working tree, and do not delete it: it may hold the only copy."
+  );
+  lines.push("");
+  lines.push("   If this really is your own file, clear it by name:");
+  lines.push(
+    `     LISA_ALLOW_CROSS_WORKTREE_BLOB='${collisions.map(c => c.path).join(",")}' git commit ...`
+  );
+  lines.push("");
+  return lines.join("\n");
+}
+
+function main() {
+  let repo;
+  let self;
+  try {
+    repo = must(["rev-parse", "--show-toplevel"]);
+    self = repo;
+  } catch {
+    // Not a git repository, or git is unavailable. A commit is not happening
+    // here in any case; there is nothing for this guard to say.
+    return 0;
+  }
+
+  const collisions = findCollisions(repo, self);
+  if (collisions.length === 0) return 0;
+
+  process.stderr.write(report(collisions));
+  return 1;
+}
+
+process.exit(main());

package/all/deletions.json

@@ -141,5 +141,140 @@
     "scripts/setup-deploy-key.sh",
     ".coderabbit.yml",
     "HUMAN.md"
-  ]
+  ],
+  "basis": {
+    ".claude/commands/project": "needs-review",
+    ".claude/skills/coding-philosophy": "needs-review",
+    ".claude/skills/project-add-test-coverage": "needs-review",
+    ".claude/skills/project-archive": "needs-review",
+    ".claude/skills/project-bootstrap": "needs-review",
+    ".claude/skills/project-debrief": "needs-review",
+    ".claude/skills/project-document": "needs-review",
+    ".claude/skills/project-execute": "needs-review",
+    ".claude/skills/project-fix-linter-error": "needs-review",
+    ".claude/skills/project-implement": "needs-review",
+    ".claude/skills/project-local-code-review": "needs-review",
+    ".claude/skills/project-lower-code-complexity": "needs-review",
+    ".claude/skills/project-plan": "needs-review",
+    ".claude/skills/project-reduce-max-lines": "needs-review",
+    ".claude/skills/project-reduce-max-lines-per-function": "needs-review",
+    ".claude/skills/project-research": "needs-review",
+    ".claude/skills/project-review": "needs-review",
+    ".claude/skills/project-setup": "needs-review",
+    ".claude/skills/project-verify": "needs-review",
+    ".claude/skills/prompt-complexity-scorer": "needs-review",
+    ".claude/skills/git:commit": "needs-review",
+    ".claude/skills/git:commit-and-submit-pr": "needs-review",
+    ".claude/skills/git:prune": "needs-review",
+    ".claude/skills/git:submit-pr": "needs-review",
+    ".claude/skills/jira:create": "needs-review",
+    ".claude/skills/jira:sync": "needs-review",
+    ".claude/skills/jira:verify": "needs-review",
+    ".claude/skills/lisa:review-implementation": "needs-review",
+    ".claude/skills/plan:add-test-coverage": "needs-review",
+    ".claude/skills/plan:create": "needs-review",
+    ".claude/skills/plan:fix-linter-error": "needs-review",
+    ".claude/skills/plan:implement": "needs-review",
+    ".claude/skills/plan:local-code-review": "needs-review",
+    ".claude/skills/plan:lower-code-complexity": "needs-review",
+    ".claude/skills/plan:reduce-max-lines": "needs-review",
+    ".claude/skills/plan:reduce-max-lines-per-function": "needs-review",
+    ".claude/skills/pull-request:review": "needs-review",
+    ".claude/skills/security:zap-scan": "needs-review",
+    ".claude/skills/sonarqube:check": "needs-review",
+    ".claude/skills/sonarqube:fix": "needs-review",
+    ".claude/skills/tasks:load": "needs-review",
+    ".claude/skills/tasks:sync": "needs-review",
+    ".claude/REFERENCE.md": "needs-review",
+    ".claude/commands/plan/implement.md": "needs-review",
+    ".claude/rules/plan-governance.md": "needs-review",
+    ".claude/rules/plan.md": "needs-review",
+    ".claude/skills/plan-create": "needs-review",
+    ".claude/skills/plan-implement": "needs-review",
+    ".claude/agents/architecture-planner.md": "needs-review",
+    ".claude/agents/codebase-analyzer.md": "needs-review",
+    ".claude/agents/codebase-locator.md": "needs-review",
+    ".claude/agents/codebase-pattern-finder.md": "needs-review",
+    ".claude/agents/consistency-checker.md": "needs-review",
+    ".claude/agents/product-planner.md": "needs-review",
+    ".claude/agents/product-reviewer.md": "needs-review",
+    ".claude/agents/security-planner.md": "needs-review",
+    ".claude/agents/spec-analyst.md": "needs-review",
+    ".claude/agents/tech-reviewer.md": "needs-review",
+    ".claude/agents/test-coverage-agent.md": "needs-review",
+    ".claude/agents/test-strategist.md": "needs-review",
+    ".claude/agents/agent-architect.md": "needs-review",
+    ".claude/agents/architecture-specialist.md": "needs-review",
+    ".claude/agents/debug-specialist.md": "needs-review",
+    ".claude/agents/git-history-analyzer.md": "needs-review",
+    ".claude/agents/hooks-expert.md": "needs-review",
+    ".claude/agents/implementer.md": "needs-review",
+    ".claude/agents/learner.md": "needs-review",
+    ".claude/agents/performance-specialist.md": "needs-review",
+    ".claude/agents/product-specialist.md": "needs-review",
+    ".claude/agents/quality-specialist.md": "needs-review",
+    ".claude/agents/security-specialist.md": "needs-review",
+    ".claude/agents/skill-evaluator.md": "needs-review",
+    ".claude/agents/slash-command-architect.md": "needs-review",
+    ".claude/agents/test-specialist.md": "needs-review",
+    ".claude/agents/verification-specialist.md": "needs-review",
+    ".claude/agents/web-search-researcher.md": "needs-review",
+    ".claude/commands/git": "needs-review",
+    ".claude/commands/jira": "needs-review",
+    ".claude/commands/lisa": "needs-review",
+    ".claude/commands/plan": "needs-review",
+    ".claude/commands/plans": "needs-review",
+    ".claude/commands/pull-request": "needs-review",
+    ".claude/commands/security": "needs-review",
+    ".claude/commands/sonarqube": "needs-review",
+    ".claude/commands/tasks": "needs-review",
+    ".claude/skills/agent-design-best-practices": "needs-review",
+    ".claude/skills/git-commit": "needs-review",
+    ".claude/skills/git-commit-and-submit-pr": "needs-review",
+    ".claude/skills/git-commit-submit-pr-and-verify": "needs-review",
+    ".claude/skills/git-commit-submit-pr-deploy-and-verify": "needs-review",
+    ".claude/skills/git-prune": "needs-review",
+    ".claude/skills/git-submit-pr": "needs-review",
+    ".claude/skills/jira-add-journey": "needs-review",
+    ".claude/skills/jira-create": "needs-review",
+    ".claude/skills/jira-evidence": "needs-review",
+    ".claude/skills/jira-fix": "needs-review",
+    ".claude/skills/jira-implement": "needs-review",
+    ".claude/skills/jira-journey": "needs-review",
+    ".claude/skills/jira-sync": "needs-review",
+    ".claude/skills/jira-verify": "needs-review",
+    ".claude/skills/lisa-review-implementation": "needs-review",
+    ".claude/skills/plan-add-test-coverage": "needs-review",
+    ".claude/skills/plan-execute": "needs-review",
+    ".claude/skills/plan-fix-linter-error": "needs-review",
+    ".claude/skills/plan-local-code-review": "needs-review",
+    ".claude/skills/plan-lower-code-complexity": "needs-review",
+    ".claude/skills/plan-reduce-max-lines": "needs-review",
+    ".claude/skills/plan-reduce-max-lines-per-function": "needs-review",
+    ".claude/skills/pull-request-review": "needs-review",
+    ".claude/skills/security-zap-scan": "needs-review",
+    ".claude/skills/skill-creator": "needs-review",
+    ".claude/skills/sonarqube-check": "needs-review",
+    ".claude/skills/sonarqube-fix": "needs-review",
+    ".claude/skills/tasks-load": "needs-review",
+    ".claude/skills/tasks-sync": "needs-review",
+    ".claude/hooks/check-tired-boss.sh": "needs-review",
+    ".claude/hooks/debug-hook.sh": "needs-review",
+    ".claude/hooks/enforce-plan-rules.sh": "needs-review",
+    ".claude/hooks/notify-ntfy.sh": "needs-review",
+    ".claude/hooks/setup-jira-cli.sh": "needs-review",
+    ".claude/hooks/sync-tasks.sh": "needs-review",
+    ".claude/hooks/ticket-sync-reminder.sh": "needs-review",
+    ".claude/hooks/track-plan-sessions.sh": "needs-review",
+    ".claude/hooks/verify-completion.sh": "needs-review",
+    ".claude/hooks/README.md": "needs-review",
+    ".claude/rules/verfication.md": "needs-review",
+    ".claude/rules/lisa.md": "needs-review",
+    ".claude/rules/base-rules.md": "needs-review",
+    ".claude/rules/coding-philosophy.md": "needs-review",
+    ".claude/rules/intent-routing.md": "needs-review",
+    ".claude/rules/security-audit-handling.md": "needs-review",
+    ".claude/rules/verification.md": "needs-review",
+    ".lisa-manifest": "needs-review"
+  }
 }

package/cdk/deletions.json

@@ -5,5 +5,12 @@
     "jest.cdk.ts",
     "jest.base.ts",
     "jest.thresholds.json"
-  ]
+  ],
+  "basis": {
+    "jest.config.ts": "needs-review",
+    "jest.config.local.ts": "needs-review",
+    "jest.cdk.ts": "needs-review",
+    "jest.base.ts": "needs-review",
+    "jest.thresholds.json": "needs-review"
+  }
 }

package/dist/core/config.d.ts

@@ -272,6 +272,39 @@ export interface DeletionsConfig {
      * to any other path is recorded and unused.
      */
     readonly force?: Readonly<Record<string, string>>;
+    /**
+     * Why each declared path may be removed, keyed by that path.
+     *
+     * `deletions.json` authorises a removal by the path being LISTED, and nothing
+     * else — the manifest cannot see whether Lisa put that file in a given
+     * consumer's repository, because ownership is a per-consumer fact and this is
+     * a repo-side artifact. CodySwannGT/lisa#3656 closed the gap for
+     * `.github/workflows/` by reading each workflow's own ownership header, which
+     * covers 42 of 255 declared paths.
+     *
+     * The obvious rule for the other 213 — delete only what Lisa still ships —
+     * was measured and fails on 95% of them: 11 are attributable to a lane Lisa
+     * ships today and 202 are not, because the 202 ARE the point. They are skill
+     * trees Lisa renamed, and stranding them leaves every consumer carrying dead
+     * directories forever. So ownership stops being inferred and starts being
+     * declared, one of:
+     *
+     * - `owned` — Lisa installs this path today.
+     * - `legacy: <reason>` — Lisa shipped it once and no longer does; the reason
+     *   names the version or ticket.
+     * - `needs-review` — declared before this field existed. Authorises removal
+     *   exactly as before, so no consumer sees a behaviour change, while staying
+     *   countable as debt rather than passing as classified.
+     *
+     * An ABSENT basis means "I cannot tell", which is deliberately distinct from
+     * "not owned": the uncertain case keeps the file and says so. A path wrongly
+     * kept is visible and fixable; a path wrongly deleted is gone from someone
+     * else's repository with no undo.
+     *
+     * A `force` entry is itself a basis and outranks this map.
+     * @see core/deletion-basis
+     */
+    readonly basis?: Readonly<Record<string, string>>;
 }
 /**
  * Result of a Lisa operation

package/dist/core/config.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"config.d.ts","sourceRoot":"","sources":["../../src/core/config.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH,MAAM,MAAM,YAAY,GACpB,gBAAgB,GAChB,eAAe,GACf,aAAa,GACb,OAAO,GACP,cAAc,GACd,cAAc,CAAC;AAEnB;;GAEG;AACH,MAAM,MAAM,WAAW,GACnB,YAAY,GACZ,MAAM,GACN,QAAQ,GACR,KAAK,GACL,eAAe,GACf,QAAQ,GACR,aAAa,GACb,OAAO,CAAC;AAEZ;;GAEG;AACH,eAAO,MAAM,sBAAsB,EAAE,QAAQ,CAC3C,MAAM,CAAC,MAAM,EAAE,WAAW,GAAG,SAAS,CAAC,CAU/B,CAAC;AAEX;;GAEG;AACH,eAAO,MAAM,kBAAkB,EAAE,SAAS,WAAW,EAS3C,CAAC;AAEX;;GAEG;AACH,eAAO,MAAM,eAAe,EAAE,SAAS,YAAY,EAOzC,CAAC;AAEX;;;;;;;;;;;;;GAaG;AACH,MAAM,MAAM,OAAO,GACf,QAAQ,GACR,OAAO,GACP,QAAQ,GACR,KAAK,GACL,SAAS,GACT,UAAU,GACV,OAAO,CAAC;AAEZ;;GAEG;AACH,eAAO,MAAM,cAAc,EAAE,SAAS,OAAO,EAQnC,CAAC;AAEX;;;GAGG;AACH,eAAO,MAAM,eAAe,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAE7D,CAAC;AAEF;;;;GAIG;AACH,eAAO,MAAM,uBAAuB,EAAE,SAAS,MAAM,EAGpD,CAAC;AAEF;;;;;;;;;GASG;AACH,eAAO,MAAM,sBAAsB,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAEpE,CAAC;AAEF;;;;GAIG;AACH,MAAM,MAAM,SAAS,GAAG,QAAQ,GAAG,OAAO,GAAG,KAAK,GAAG,SAAS,GAAG,UAAU,CAAC;AAE5E;;;;;;;;;;;GAWG;AACH,wBAAgB,oBAAoB,CAClC,OAAO,EAAE,OAAO,EAChB,KAAK,EAAE,SAAS,GACf,OAAO,CAGT;AAED;;;GAGG;AACH,eAAO,MAAM,eAAe,EAAE,OAAkB,CAAC;AAEjD;;GAEG;AACH,MAAM,WAAW,UAAU;IACzB,+DAA+D;IAC/D,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IAEzB,4CAA4C;IAC5C,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IAEzB,8DAA8D;IAC9D,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAC;IAEzB,8DAA8D;IAC9D,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;IAE1B,4DAA4D;IAC5D,QAAQ,CAAC,YAAY,EAAE,OAAO,CAAC;IAE/B;;;;;OAKG;IACH,QAAQ,CAAC,YAAY,EAAE,OAAO,CAAC;IAE/B;;;;;;;;;;;;;;OAcG;IACH,QAAQ,CAAC,WAAW,CAAC,EAAE,OAAO,CAAC;IAE/B;;;;;OAKG;IACH,QAAQ,CAAC,SAAS,CAAC,EAAE,OAAO,CAAC;IAE7B;;;;;;;;;OASG;IACH,QAAQ,CAAC,gBAAgB,CAAC,EAAE,gBAAgB,CAAC;IAE7C,6EAA6E;IAC7E,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;CAC3B;AAED;;;;;;;GAOG;AACH,MAAM,MAAM,gBAAgB;AAC1B,gCAAgC;AAC9B;IAAE,QAAQ,CAAC,IAAI,EAAE,KAAK,CAAA;CAAE;AAC1B,4DAA4D;GAC1D;IAAE,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC;IAAC,QAAQ,CAAC,KAAK,EAAE,SAAS,MAAM,EAAE,CAAA;CAAE,CAAC;AAElE;;;;;GAKG;AACH,wBAAgB,kBAAkB,CAChC,YAAY,EAAE,MAAM,EACpB,OAAO,EAAE,gBAAgB,GAAG,SAAS,GACpC,OAAO,CAUT;AAgBD;;GAEG;AACH,MAAM,MAAM,aAAa,GAAG,OAAO,GAAG,UAAU,CAAC;AAEjD;;GAEG;AACH,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,QAAQ,EAAE,YAAY,CAAC;IAChC,QAAQ,CAAC,MAAM,EACX,QAAQ,GACR,SAAS;IACX;;;;;;;;OAQG;OACD,OAAO;IACT;;;;;;;;;OASG;OACD,YAAY;IACd;;;;;;;;;;;OAWG;OACD,UAAU,GACV,aAAa,GACb,UAAU,GACV,QAAQ,GACR,SAAS,CAAC;IACd,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;IAC7B;;;;;OAKG;IACH,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;CACxB;AAED;;GAEG;AACH,MAAM,WAAW,iBAAiB;IAChC,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,MAAM,CAAC;IAChB,kFAAkF;IAClF,KAAK,EAAE,MAAM,CAAC;IACd,8EAA8E;IAC9E,SAAS,EAAE,MAAM,CAAC;IAClB,iFAAiF;IACjF,QAAQ,EAAE,MAAM,CAAC;IACjB,WAAW,EAAE,MAAM,CAAC;IACpB,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,MAAM,CAAC;IAChB,iBAAiB,EAAE,MAAM,CAAC;IAC1B,iBAAiB,EAAE,MAAM,CAAC;CAC3B;AAED;;GAEG;AACH,MAAM,WAAW,eAAe;IAC9B,6CAA6C;IAC7C,QAAQ,CAAC,KAAK,EAAE,SAAS,MAAM,EAAE,CAAC;IAClC,oEAAoE;IACpE,QAAQ,CAAC,IAAI,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAClC;;;;;;;;;;;;;;;;;;;;;;OAsBG;IACH,QAAQ,CAAC,KAAK,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;CACnD;AAED;;GAEG;AACH,MAAM,WAAW,UAAU;IACzB,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;IAC1B,QAAQ,CAAC,QAAQ,EAAE,iBAAiB,CAAC;IACrC,QAAQ,CAAC,aAAa,EAAE,SAAS,WAAW,EAAE,CAAC;IAC/C,QAAQ,CAAC,IAAI,EAAE,aAAa,CAAC;IAC7B,QAAQ,CAAC,MAAM,EAAE,SAAS,MAAM,EAAE,CAAC;IACnC;;;;;;;;OAQG;IACH,QAAQ,CAAC,UAAU,EAAE,SAAS,MAAM,EAAE,CAAC;IACvC;;;;;;;;;;;;OAYG;IACH,QAAQ,CAAC,YAAY,EAAE,SAAS,MAAM,EAAE,CAAC;CAC1C;AAED;;;GAGG;AACH,wBAAgB,qBAAqB,IAAI,iBAAiB,CAezD"}
+{"version":3,"file":"config.d.ts","sourceRoot":"","sources":["../../src/core/config.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH,MAAM,MAAM,YAAY,GACpB,gBAAgB,GAChB,eAAe,GACf,aAAa,GACb,OAAO,GACP,cAAc,GACd,cAAc,CAAC;AAEnB;;GAEG;AACH,MAAM,MAAM,WAAW,GACnB,YAAY,GACZ,MAAM,GACN,QAAQ,GACR,KAAK,GACL,eAAe,GACf,QAAQ,GACR,aAAa,GACb,OAAO,CAAC;AAEZ;;GAEG;AACH,eAAO,MAAM,sBAAsB,EAAE,QAAQ,CAC3C,MAAM,CAAC,MAAM,EAAE,WAAW,GAAG,SAAS,CAAC,CAU/B,CAAC;AAEX;;GAEG;AACH,eAAO,MAAM,kBAAkB,EAAE,SAAS,WAAW,EAS3C,CAAC;AAEX;;GAEG;AACH,eAAO,MAAM,eAAe,EAAE,SAAS,YAAY,EAOzC,CAAC;AAEX;;;;;;;;;;;;;GAaG;AACH,MAAM,MAAM,OAAO,GACf,QAAQ,GACR,OAAO,GACP,QAAQ,GACR,KAAK,GACL,SAAS,GACT,UAAU,GACV,OAAO,CAAC;AAEZ;;GAEG;AACH,eAAO,MAAM,cAAc,EAAE,SAAS,OAAO,EAQnC,CAAC;AAEX;;;GAGG;AACH,eAAO,MAAM,eAAe,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAE7D,CAAC;AAEF;;;;GAIG;AACH,eAAO,MAAM,uBAAuB,EAAE,SAAS,MAAM,EAGpD,CAAC;AAEF;;;;;;;;;GASG;AACH,eAAO,MAAM,sBAAsB,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAEpE,CAAC;AAEF;;;;GAIG;AACH,MAAM,MAAM,SAAS,GAAG,QAAQ,GAAG,OAAO,GAAG,KAAK,GAAG,SAAS,GAAG,UAAU,CAAC;AAE5E;;;;;;;;;;;GAWG;AACH,wBAAgB,oBAAoB,CAClC,OAAO,EAAE,OAAO,EAChB,KAAK,EAAE,SAAS,GACf,OAAO,CAGT;AAED;;;GAGG;AACH,eAAO,MAAM,eAAe,EAAE,OAAkB,CAAC;AAEjD;;GAEG;AACH,MAAM,WAAW,UAAU;IACzB,+DAA+D;IAC/D,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IAEzB,4CAA4C;IAC5C,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IAEzB,8DAA8D;IAC9D,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAC;IAEzB,8DAA8D;IAC9D,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;IAE1B,4DAA4D;IAC5D,QAAQ,CAAC,YAAY,EAAE,OAAO,CAAC;IAE/B;;;;;OAKG;IACH,QAAQ,CAAC,YAAY,EAAE,OAAO,CAAC;IAE/B;;;;;;;;;;;;;;OAcG;IACH,QAAQ,CAAC,WAAW,CAAC,EAAE,OAAO,CAAC;IAE/B;;;;;OAKG;IACH,QAAQ,CAAC,SAAS,CAAC,EAAE,OAAO,CAAC;IAE7B;;;;;;;;;OASG;IACH,QAAQ,CAAC,gBAAgB,CAAC,EAAE,gBAAgB,CAAC;IAE7C,6EAA6E;IAC7E,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;CAC3B;AAED;;;;;;;GAOG;AACH,MAAM,MAAM,gBAAgB;AAC1B,gCAAgC;AAC9B;IAAE,QAAQ,CAAC,IAAI,EAAE,KAAK,CAAA;CAAE;AAC1B,4DAA4D;GAC1D;IAAE,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC;IAAC,QAAQ,CAAC,KAAK,EAAE,SAAS,MAAM,EAAE,CAAA;CAAE,CAAC;AAElE;;;;;GAKG;AACH,wBAAgB,kBAAkB,CAChC,YAAY,EAAE,MAAM,EACpB,OAAO,EAAE,gBAAgB,GAAG,SAAS,GACpC,OAAO,CAUT;AAgBD;;GAEG;AACH,MAAM,MAAM,aAAa,GAAG,OAAO,GAAG,UAAU,CAAC;AAEjD;;GAEG;AACH,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,QAAQ,EAAE,YAAY,CAAC;IAChC,QAAQ,CAAC,MAAM,EACX,QAAQ,GACR,SAAS;IACX;;;;;;;;OAQG;OACD,OAAO;IACT;;;;;;;;;OASG;OACD,YAAY;IACd;;;;;;;;;;;OAWG;OACD,UAAU,GACV,aAAa,GACb,UAAU,GACV,QAAQ,GACR,SAAS,CAAC;IACd,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;IAC7B;;;;;OAKG;IACH,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;CACxB;AAED;;GAEG;AACH,MAAM,WAAW,iBAAiB;IAChC,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,MAAM,CAAC;IAChB,kFAAkF;IAClF,KAAK,EAAE,MAAM,CAAC;IACd,8EAA8E;IAC9E,SAAS,EAAE,MAAM,CAAC;IAClB,iFAAiF;IACjF,QAAQ,EAAE,MAAM,CAAC;IACjB,WAAW,EAAE,MAAM,CAAC;IACpB,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,MAAM,CAAC;IAChB,iBAAiB,EAAE,MAAM,CAAC;IAC1B,iBAAiB,EAAE,MAAM,CAAC;CAC3B;AAED;;GAEG;AACH,MAAM,WAAW,eAAe;IAC9B,6CAA6C;IAC7C,QAAQ,CAAC,KAAK,EAAE,SAAS,MAAM,EAAE,CAAC;IAClC,oEAAoE;IACpE,QAAQ,CAAC,IAAI,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAClC;;;;;;;;;;;;;;;;;;;;;;OAsBG;IACH,QAAQ,CAAC,KAAK,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;IAClD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;OA+BG;IACH,QAAQ,CAAC,KAAK,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;CACnD;AAED;;GAEG;AACH,MAAM,WAAW,UAAU;IACzB,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;IAC1B,QAAQ,CAAC,QAAQ,EAAE,iBAAiB,CAAC;IACrC,QAAQ,CAAC,aAAa,EAAE,SAAS,WAAW,EAAE,CAAC;IAC/C,QAAQ,CAAC,IAAI,EAAE,aAAa,CAAC;IAC7B,QAAQ,CAAC,MAAM,EAAE,SAAS,MAAM,EAAE,CAAC;IACnC;;;;;;;;OAQG;IACH,QAAQ,CAAC,UAAU,EAAE,SAAS,MAAM,EAAE,CAAC;IACvC;;;;;;;;;;;;OAYG;IACH,QAAQ,CAAC,YAAY,EAAE,SAAS,MAAM,EAAE,CAAC;CAC1C;AAED;;;GAGG;AACH,wBAAgB,qBAAqB,IAAI,iBAAiB,CAezD"}

package/dist/core/config.js.map

@@ -1 +1 @@
-{"version":3,"file":"config.js","sourceRoot":"","sources":["../../src/core/config.ts"],"names":[],"mappings":"AAwBA;;GAEG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAE/B;IACF,IAAI,EAAE,YAAY;IAClB,MAAM,EAAE,YAAY;IACpB,GAAG,EAAE,YAAY;IACjB,eAAe,EAAE,YAAY;IAC7B,MAAM,EAAE,YAAY;IACpB,aAAa,EAAE,YAAY;IAC3B,UAAU,EAAE,SAAS;IACrB,KAAK,EAAE,SAAS;CACR,CAAC;AAEX;;GAEG;AACH,MAAM,CAAC,MAAM,kBAAkB,GAA2B;IACxD,YAAY;IACZ,aAAa;IACb,eAAe;IACf,QAAQ;IACR,MAAM;IACN,QAAQ;IACR,KAAK;IACL,OAAO;CACC,CAAC;AAEX;;GAEG;AACH,MAAM,CAAC,MAAM,eAAe,GAA4B;IACtD,gBAAgB;IAChB,eAAe;IACf,aAAa;IACb,OAAO;IACP,cAAc;IACd,cAAc;CACN,CAAC;AAyBX;;GAEG;AACH,MAAM,CAAC,MAAM,cAAc,GAAuB;IAChD,QAAQ;IACR,OAAO;IACP,QAAQ;IACR,KAAK;IACL,SAAS;IACT,UAAU;IACV,OAAO;CACC,CAAC;AAEX;;;GAGG;AACH,MAAM,CAAC,MAAM,eAAe,GAAsC;IAChE,GAAG,EAAE,OAAO;CACb,CAAC;AAEF;;;;GAIG;AACH,MAAM,CAAC,MAAM,uBAAuB,GAAsB;IACxD,GAAG,cAAc;IACjB,GAAG,MAAM,CAAC,IAAI,CAAC,eAAe,CAAC;CAChC,CAAC;AAEF;;;;;;;;;GASG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAAsC;IACvE,IAAI,EAAE,OAAO;CACd,CAAC;AASF;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,oBAAoB,CAClC,OAAgB,EAChB,KAAgB;IAEhB,IAAI,OAAO,KAAK,OAAO;QAAE,OAAO,IAAI,CAAC;IACrC,OAAO,OAAO,KAAK,KAAK,CAAC;AAC3B,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,MAAM,eAAe,GAAY,QAAQ,CAAC;AAoFjD;;;;;GAKG;AACH,MAAM,UAAU,kBAAkB,CAChC,YAAoB,EACpB,OAAqC;IAErC,IAAI,OAAO,KAAK,SAAS;QAAE,OAAO,KAAK,CAAC;IACxC,IAAI,OAAO,CAAC,IAAI,KAAK,KAAK;QAAE,OAAO,IAAI,CAAC;IACxC,8EAA8E;IAC9E,0CAA0C;IAC1C,MAAM,MAAM,GAAG,YAAY,CAAC,UAAU,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;IAClD,OAAO,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE;QAC9B,MAAM,KAAK,GAAG,oBAAoB,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,CAAC;QAC9D,OAAO,KAAK,KAAK,MAAM,IAAI,MAAM,CAAC,UAAU,CAAC,GAAG,KAAK,GAAG,CAAC,CAAC;IAC5D,CAAC,CAAC,CAAC;AACL,CAAC;AAED;;;;;;;;;GASG;AACH,SAAS,oBAAoB,CAAC,KAAa;IACzC,OAAO,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,oBAAoB,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC;AAChF,CAAC;AA0JD;;;GAGG;AACH,MAAM,UAAU,qBAAqB;IACnC,OAAO;QACL,MAAM,EAAE,CAAC;QACT,OAAO,EAAE,CAAC;QACV,KAAK,EAAE,CAAC;QACR,SAAS,EAAE,CAAC;QACZ,QAAQ,EAAE,CAAC;QACX,WAAW,EAAE,CAAC;QACd,QAAQ,EAAE,CAAC;QACX,MAAM,EAAE,CAAC;QACT,OAAO,EAAE,CAAC;QACV,OAAO,EAAE,CAAC;QACV,iBAAiB,EAAE,CAAC;QACpB,iBAAiB,EAAE,CAAC;KACrB,CAAC;AACJ,CAAC"}
+{"version":3,"file":"config.js","sourceRoot":"","sources":["../../src/core/config.ts"],"names":[],"mappings":"AAwBA;;GAEG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAE/B;IACF,IAAI,EAAE,YAAY;IAClB,MAAM,EAAE,YAAY;IACpB,GAAG,EAAE,YAAY;IACjB,eAAe,EAAE,YAAY;IAC7B,MAAM,EAAE,YAAY;IACpB,aAAa,EAAE,YAAY;IAC3B,UAAU,EAAE,SAAS;IACrB,KAAK,EAAE,SAAS;CACR,CAAC;AAEX;;GAEG;AACH,MAAM,CAAC,MAAM,kBAAkB,GAA2B;IACxD,YAAY;IACZ,aAAa;IACb,eAAe;IACf,QAAQ;IACR,MAAM;IACN,QAAQ;IACR,KAAK;IACL,OAAO;CACC,CAAC;AAEX;;GAEG;AACH,MAAM,CAAC,MAAM,eAAe,GAA4B;IACtD,gBAAgB;IAChB,eAAe;IACf,aAAa;IACb,OAAO;IACP,cAAc;IACd,cAAc;CACN,CAAC;AAyBX;;GAEG;AACH,MAAM,CAAC,MAAM,cAAc,GAAuB;IAChD,QAAQ;IACR,OAAO;IACP,QAAQ;IACR,KAAK;IACL,SAAS;IACT,UAAU;IACV,OAAO;CACC,CAAC;AAEX;;;GAGG;AACH,MAAM,CAAC,MAAM,eAAe,GAAsC;IAChE,GAAG,EAAE,OAAO;CACb,CAAC;AAEF;;;;GAIG;AACH,MAAM,CAAC,MAAM,uBAAuB,GAAsB;IACxD,GAAG,cAAc;IACjB,GAAG,MAAM,CAAC,IAAI,CAAC,eAAe,CAAC;CAChC,CAAC;AAEF;;;;;;;;;GASG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAAsC;IACvE,IAAI,EAAE,OAAO;CACd,CAAC;AASF;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,oBAAoB,CAClC,OAAgB,EAChB,KAAgB;IAEhB,IAAI,OAAO,KAAK,OAAO;QAAE,OAAO,IAAI,CAAC;IACrC,OAAO,OAAO,KAAK,KAAK,CAAC;AAC3B,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,MAAM,eAAe,GAAY,QAAQ,CAAC;AAoFjD;;;;;GAKG;AACH,MAAM,UAAU,kBAAkB,CAChC,YAAoB,EACpB,OAAqC;IAErC,IAAI,OAAO,KAAK,SAAS;QAAE,OAAO,KAAK,CAAC;IACxC,IAAI,OAAO,CAAC,IAAI,KAAK,KAAK;QAAE,OAAO,IAAI,CAAC;IACxC,8EAA8E;IAC9E,0CAA0C;IAC1C,MAAM,MAAM,GAAG,YAAY,CAAC,UAAU,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;IAClD,OAAO,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE;QAC9B,MAAM,KAAK,GAAG,oBAAoB,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,CAAC;QAC9D,OAAO,KAAK,KAAK,MAAM,IAAI,MAAM,CAAC,UAAU,CAAC,GAAG,KAAK,GAAG,CAAC,CAAC;IAC5D,CAAC,CAAC,CAAC;AACL,CAAC;AAED;;;;;;;;;GASG;AACH,SAAS,oBAAoB,CAAC,KAAa;IACzC,OAAO,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,oBAAoB,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC;AAChF,CAAC;AA2LD;;;GAGG;AACH,MAAM,UAAU,qBAAqB;IACnC,OAAO;QACL,MAAM,EAAE,CAAC;QACT,OAAO,EAAE,CAAC;QACV,KAAK,EAAE,CAAC;QACR,SAAS,EAAE,CAAC;QACZ,QAAQ,EAAE,CAAC;QACX,WAAW,EAAE,CAAC;QACd,QAAQ,EAAE,CAAC;QACX,MAAM,EAAE,CAAC;QACT,OAAO,EAAE,CAAC;QACV,OAAO,EAAE,CAAC;QACV,iBAAiB,EAAE,CAAC;QACpB,iBAAiB,EAAE,CAAC;KACrB,CAAC;AACJ,CAAC"}

package/dist/core/deletion-basis.d.ts

@@ -0,0 +1,107 @@
+/**
+ * Why a declared path may be removed from a consumer's repository.
+ *
+ * `deletions.json` removes host files BY DESTINATION PATH ONLY. The path being
+ * listed is the entire authorisation: nothing between the manifest and
+ * `fse.remove` looks at the file's contents, its origin, or whether Lisa ever
+ * installed it. CodySwannGT/lisa#3656 closed that for `.github/workflows/` by
+ * reading each workflow's own ownership header, which covers 42 of 255 declared
+ * paths. This module is about the other 213.
+ *
+ * ## Why the obvious gate is not the fix
+ *
+ * The natural rule — "only delete what Lisa currently ships" — was measured
+ * against `main` and fails on 95% of the manifest: of the 213 non-workflow
+ * paths, 11 are attributable to a lane Lisa still ships and 202 are not. The
+ * 202 are not marginal. They are `.claude/skills/project-*`,
+ * `.claude/skills/git:*`, `.claude/skills/jira:*` and friends — skill trees Lisa
+ * renamed. Stranding them leaves every consumer carrying dead directories
+ * forever, which is the harm the manifest exists to prevent. A gate that causes
+ * the harm it was written to stop is the wrong gate.
+ *
+ * The reason it fails is structural rather than incidental: ownership is a
+ * per-consumer fact and the manifest is a repo-side artifact. Lisa cannot see,
+ * from its own tree, whether it put a given file in someone else's repository.
+ * No amount of matching logic closes that gap, so this module stops trying to
+ * infer ownership and requires it to be DECLARED.
+ *
+ * ## The grammar
+ *
+ * Every declared path carries a basis, and `force` counts as one:
+ *
+ * - `owned` — Lisa installs this path today; the lane is the evidence.
+ * - `legacy: <reason>` — Lisa shipped it in an older version and no longer
+ *   does. The reason names the version or ticket. The honest home for the 202.
+ * - `needs-review` — declared before this field existed. Deletes exactly as it
+ *   did before, so nothing changes for an existing consumer, but it is
+ *   countable: debt kept visible rather than laundered as classified.
+ * - a `force` entry — a ruling that overrides even the workflow ownership gate.
+ *   Unchanged by this module; its five existing entries keep working verbatim.
+ *
+ * ## What an ABSENT basis means, and why it keeps
+ *
+ * Unclassified is not "not owned" — it is "I cannot tell", and the two must be
+ * distinguishable or the uncertain case gets silently resolved as one of them.
+ * The cheap error is to keep the file: a path wrongly kept is visible and
+ * fixable, a path wrongly deleted is gone from someone else's repository with
+ * no undo. So an unclassified path is kept and announced.
+ *
+ * Two rules this deliberately does NOT implement, both learned in #3656:
+ *
+ * 1. Ownership is never inferred from a filename. A probe of the form "does
+ *    Lisa ship a file with this name anywhere?" marks the highest-risk paths
+ *    SAFE precisely because Lisa knows those names.
+ * 2. Ownership never keys on "was it modified". "The host has local work here"
+ *    and "the host has re-armed the hazard" are the same observation on disk;
+ *    only a declared reason separates them.
+ * @module core/deletion-basis
+ */
+import type { DeletionsConfig } from "./config.js";
+/** How a declared deletion path is authorised. */
+export type DeletionBasisKind = "owned" | "legacy" | "needs-review" | "force" | "unclassified";
+/** The resolved basis for one declared path. */
+export interface DeletionBasis {
+    readonly kind: DeletionBasisKind;
+    /** Prose accompanying a `legacy` or `force` basis; empty otherwise. */
+    readonly reason: string;
+}
+/**
+ * Resolve why one declared path may be removed.
+ *
+ * `force` is checked first and wins: it is the strongest declaration in the
+ * manifest, and a path carrying one is authorised whatever else says.
+ * @param config - The parsed manifest.
+ * @param relativePath - Declared path, spelled as the manifest spells it.
+ * @returns The basis, or `unclassified` when the manifest does not say.
+ */
+export declare function resolveDeletionBasis(config: DeletionsConfig, relativePath: string): DeletionBasis;
+/**
+ * Whether a resolved basis authorises removal.
+ *
+ * `needs-review` authorises: this field lands with every existing path already
+ * marked, so an existing consumer sees byte-identical behaviour. The gate binds
+ * on paths added AFTER it, which is the whole point of shipping the mechanism
+ * before the prose.
+ * @param basis - A resolved basis.
+ * @returns True when the path may be removed.
+ */
+export declare function basisAuthorisesDeletion(basis: DeletionBasis): boolean;
+/**
+ * Every declared path in one manifest that carries no basis.
+ *
+ * This is what the authoring gate refuses on. It is deliberately separate from
+ * the runtime keep-decision above: the runtime rule is the fail-safe that
+ * protects consumers whatever manifest they have, and this is the check that
+ * stops an unclassified path being authored in the first place. A single
+ * mechanism doing both would have to choose which to be.
+ * @param config - The parsed manifest.
+ * @returns Unclassified paths, in declaration order.
+ */
+export declare function unclassifiedDeletionPaths(config: DeletionsConfig): readonly string[];
+/**
+ * Count declared paths by basis kind, for reporting the outstanding debt.
+ * @param config - The parsed manifest.
+ * @returns A count per kind, including zeroes.
+ */
+export declare function countDeletionBases(config: DeletionsConfig): Readonly<Record<DeletionBasisKind, number>>;
+//# sourceMappingURL=deletion-basis.d.ts.map

package/dist/core/deletion-basis.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"deletion-basis.d.ts","sourceRoot":"","sources":["../../src/core/deletion-basis.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAyDG;AACH,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAEnD,kDAAkD;AAClD,MAAM,MAAM,iBAAiB,GACzB,OAAO,GACP,QAAQ,GACR,cAAc,GACd,OAAO,GACP,cAAc,CAAC;AAEnB,gDAAgD;AAChD,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,IAAI,EAAE,iBAAiB,CAAC;IACjC,uEAAuE;IACvE,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;CACzB;AAMD;;;;;;;;GAQG;AACH,wBAAgB,oBAAoB,CAClC,MAAM,EAAE,eAAe,EACvB,YAAY,EAAE,MAAM,GACnB,aAAa,CAqBf;AAED;;;;;;;;;GASG;AACH,wBAAgB,uBAAuB,CAAC,KAAK,EAAE,aAAa,GAAG,OAAO,CAErE;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,yBAAyB,CACvC,MAAM,EAAE,eAAe,GACtB,SAAS,MAAM,EAAE,CAMnB;AAED;;;;GAIG;AACH,wBAAgB,kBAAkB,CAChC,MAAM,EAAE,eAAe,GACtB,QAAQ,CAAC,MAAM,CAAC,iBAAiB,EAAE,MAAM,CAAC,CAAC,CAc7C"}