@codyswann/lisa 4.54.13 → 4.55.0

package/dist/cli/doctor-cdk-preset-adoption.js

@@ -0,0 +1,316 @@
+/**
+ * `lisa doctor` check: is this repository carrying a CDK application preset it
+ * was never eligible for?
+ *
+ * `src/detection/detectors/cdk.ts` closed the decision — nothing is classified
+ * as a CDK app now without a `cdk.json`. That guard runs at detection time, so
+ * it reaches the next apply and nothing else: a repository admitted by the old
+ * `aws-cdk*`-dependency arm keeps its preset, its force-merged runtime
+ * dependencies, and — because the dead-code gate's entry globs are ordinary
+ * TypeScript directory names — a knip run that measures a fraction of the
+ * source and exits zero. None of that announces itself, and the first of them
+ * actively reports success (CodySwannGT/lisa#3533, CodySwannGT/lisa#3711).
+ *
+ * This check REPORTS. It removes nothing: a repository may since have come to
+ * depend on something the preset delivered, and that judgement is not one a
+ * health probe gets to make.
+ *
+ * The whole point is that an affected repository can find ITSELF, so a probe
+ * that cannot look must never render as a repository with nothing to report.
+ * Every filesystem answer here is three-valued — present, absent, or
+ * undeterminable — and the last one fails rather than passing quietly.
+ * @module cli/doctor-cdk-preset-adoption
+ */
+import { readFile, stat } from "node:fs/promises";
+import * as path from "node:path";
+import { CDK_APP_MARKER, CDK_PRESET_ARTIFACTS, CDK_PRESET_BIN_ENTRY, CDK_PRESET_FORCED_DEPENDENCIES, cdkAppEntrySource, classifyCdkPresetAdoption, } from "../core/cdk-preset-adoption.js";
+/** Name of the CDK preset-adoption check as doctor reports it. */
+export const CDK_PRESET_ADOPTION_CHECK_NAME = "CDK preset earned?";
+/** Repo-relative manifest the preset force-merges its dependencies into. */
+const PACKAGE_JSON = "package.json";
+/**
+ * Errno codes that ANSWER the question rather than refusing it: the path is
+ * genuinely not there. Anything else — a permission denial, an I/O error, a
+ * symlink loop — means the probe could not look, which is a different answer
+ * and must not be spelled the same way.
+ */
+const ABSENT_CODES = new Set(["ENOENT", "ENOTDIR", "ENAMETOOLONG"]);
+/**
+ * The errno code of a rejected filesystem call, when it carries one.
+ * @param error - Value thrown by a filesystem call
+ * @returns The errno code, or undefined when the value carries none
+ */
+function errnoCode(error) {
+    const code = typeof error === "object" && error !== null
+        ? error.code
+        : undefined;
+    return typeof code === "string" ? code : undefined;
+}
+/**
+ * Answer whether a repo-relative path exists, REJECTING when the filesystem
+ * declines to say.
+ *
+ * `fs-extra`'s `pathExists` resolves false for every failure, including a
+ * permission denial, so a repository this process cannot read would report the
+ * same "no CDK preset here" as a healthy one.
+ * @param projectRoot - Absolute project root
+ * @param relativePath - Repo-relative path to probe
+ * @returns True when the path is present, false when it is provably absent
+ * @throws {Error} When the filesystem cannot answer
+ */
+async function probeExists(projectRoot, relativePath) {
+    try {
+        await stat(path.join(projectRoot, relativePath));
+        return true;
+    }
+    catch (error) {
+        const code = errnoCode(error);
+        if (code !== undefined && ABSENT_CODES.has(code))
+            return false;
+        throw new Error(`could not read ${relativePath}: ${code ?? String(error)}`, {
+            cause: error,
+        });
+    }
+}
+/**
+ * Read a repo-relative file, REJECTING when the filesystem declines to say.
+ * @param projectRoot - Absolute project root
+ * @param relativePath - Repo-relative path to read
+ * @returns The file text, or null when the file is provably absent
+ * @throws {Error} When the file exists but could not be read
+ */
+async function readTextOrAbsent(projectRoot, relativePath) {
+    try {
+        return await readFile(path.join(projectRoot, relativePath), "utf8");
+    }
+    catch (error) {
+        const code = errnoCode(error);
+        if (code !== undefined && ABSENT_CODES.has(code))
+            return null;
+        throw new Error(`could not read ${relativePath}: ${code ?? String(error)}`, {
+            cause: error,
+        });
+    }
+}
+/**
+ * Read a repo-relative JSON document, REJECTING when the filesystem declines
+ * to say and when the bytes will not parse.
+ *
+ * A document that exists but cannot be parsed is not a document with nothing
+ * in it, and must not be classified as one.
+ * @param projectRoot - Absolute project root
+ * @param relativePath - Repo-relative path to read
+ * @returns The parsed document, or null when the file is provably absent
+ * @throws {Error} When the file exists but could not be read or parsed
+ */
+async function readJsonOrAbsent(projectRoot, relativePath) {
+    const text = await readTextOrAbsent(projectRoot, relativePath);
+    if (text === null)
+        return null;
+    try {
+        return JSON.parse(text);
+    }
+    catch (error) {
+        throw new Error(`could not parse ${relativePath}: ${error instanceof Error ? error.message : String(error)}`, { cause: error });
+    }
+}
+/**
+ * Which CDK-exclusive preset artifacts this repository carries.
+ * @param projectRoot - Absolute project root
+ * @returns Present artifacts, in the order the preset ships them
+ * @throws {Error} When an artifact can be neither confirmed nor ruled out
+ */
+async function presentPresetArtifacts(projectRoot) {
+    const present = await Promise.all(CDK_PRESET_ARTIFACTS.map(artifact => probeExists(projectRoot, artifact)));
+    return CDK_PRESET_ARTIFACTS.filter((_, index) => present[index] === true);
+}
+/**
+ * What the repository's `cdk.json` declares as its application entrypoint.
+ *
+ * The marker alone is not enough. `cdk.json` is itself part of what the preset
+ * delivers, under `create-only`, so a repository admitted by the old predicate
+ * and then applied holds a marker Lisa wrote for it. A real CDK app cannot
+ * synth without the entry its `app` command names; a repository holding a
+ * seeded marker has never had one.
+ * @param projectRoot - Absolute project root
+ * @param marker - Parsed `cdk.json` document
+ * @returns What the marker's `app` command turns out to name
+ * @throws {Error} When the entry can be neither confirmed nor ruled out
+ */
+async function resolveAppEntry(projectRoot, marker) {
+    const app = typeof marker === "object" && marker !== null
+        ? marker.app
+        : undefined;
+    if (typeof app !== "string")
+        return { kind: "unrecognised" };
+    const source = cdkAppEntrySource(app);
+    if (source === null)
+        return { kind: "unrecognised" };
+    return {
+        kind: "resolved",
+        source,
+        present: await probeExists(projectRoot, source),
+    };
+}
+/**
+ * Which of the preset's force-merged package.json entries this repository
+ * still carries, stated so the reader knows what to back out.
+ * @param manifest - Parsed `package.json`, or null when absent
+ * @returns Operator-readable clauses, empty when none are present
+ */
+function describeMergedEntries(manifest) {
+    if (typeof manifest !== "object" || manifest === null)
+        return [];
+    const record = manifest;
+    const dependencies = typeof record.dependencies === "object" && record.dependencies !== null
+        ? record.dependencies
+        : {};
+    const merged = CDK_PRESET_FORCED_DEPENDENCIES.filter(name => name in dependencies);
+    const bin = typeof record.bin === "object" && record.bin !== null
+        ? record.bin
+        : {};
+    return [
+        merged.length > 0
+            ? [`runtime dependencies \`${merged.join("`, `")}\` in ${PACKAGE_JSON}`]
+            : [],
+        bin[CDK_PRESET_BIN_ENTRY.name] === CDK_PRESET_BIN_ENTRY.target
+            ? [
+                `a \`bin.${CDK_PRESET_BIN_ENTRY.name}\` entry pointing at ` +
+                    `\`${CDK_PRESET_BIN_ENTRY.target}\``,
+            ]
+            : [],
+    ].flat();
+}
+/** What an operator has to weigh before backing any of this out. */
+const REMEDY = "Nothing here is removed automatically: the repository may since have come " +
+    "to depend on something the preset delivered. Decide per file, then keep " +
+    `the decision by making sure no \`${CDK_APP_MARKER}\` is present — while ` +
+    "one is, every apply re-merges the entries above";
+/**
+ * The consequence worth stating, because it is the one that reports success.
+ */
+const QUIET_CONSEQUENCE = "The preset's knip `entry` globs include ordinary TypeScript directory " +
+    "names (`config`, `util`, `utils`, `functions`), so the dead-code gate may " +
+    "be measuring a fraction of the source and passing";
+/**
+ * Report whether a repository carries a CDK preset it was never eligible for.
+ *
+ * Fails rather than warns on a hit: a dead-code gate reporting success over a
+ * fraction of the source is a live false green, and force-merged runtime
+ * dependencies return on every apply until the marker is gone. Fails equally
+ * when the question could not be answered, for the reason in the module note.
+ * @param targetPath - Project path to inspect
+ * @returns Doctor check result
+ */
+export async function checkCdkPresetAdoption(targetPath) {
+    try {
+        const root = await stat(targetPath);
+        if (!root.isDirectory()) {
+            throw new Error(`${targetPath} is not a directory`);
+        }
+        return await assess(targetPath);
+    }
+    catch (error) {
+        return {
+            name: CDK_PRESET_ADOPTION_CHECK_NAME,
+            status: "fail",
+            detail: "Could not determine whether this repository carries a CDK " +
+                `application preset: ${error instanceof Error ? error.message : String(error)}. Treated as a failure rather than a pass: a tree that could not be ` +
+                "read is not a tree with nothing in it",
+        };
+    }
+}
+/**
+ * Gather the evidence and turn it into the check line it earns.
+ * @param projectRoot - Absolute project root
+ * @returns Doctor check result
+ * @throws {Error} When any part of the evidence cannot be gathered
+ */
+async function assess(projectRoot) {
+    const presetArtifacts = await presentPresetArtifacts(projectRoot);
+    if (presetArtifacts.length === 0) {
+        return ok("No CDK application preset artifacts in this repository");
+    }
+    const marker = await readJsonOrAbsent(projectRoot, CDK_APP_MARKER);
+    const hasAppMarker = marker !== null;
+    const appEntry = hasAppMarker
+        ? await resolveAppEntry(projectRoot, marker)
+        : null;
+    const adoption = classifyCdkPresetAdoption({
+        presetArtifacts,
+        hasAppMarker,
+        appEntry,
+    });
+    if (adoption === "eligible") {
+        return ok(`Carries the CDK application preset and has a ${CDK_APP_MARKER}`);
+    }
+    if (adoption === "undeterminable") {
+        return {
+            name: CDK_PRESET_ADOPTION_CHECK_NAME,
+            status: "warn",
+            detail: `This repository carries the CDK application preset and a ` +
+                `${CDK_APP_MARKER}, but that marker names no application entry this ` +
+                "check can look for, so whether the preset was earned could not be " +
+                `settled. Confirm by hand that \`${CDK_APP_MARKER}\` drives a real ` +
+                `CDK app; if it does not, see ${QUIET_CONSEQUENCE.toLowerCase()}`,
+        };
+    }
+    return {
+        name: CDK_PRESET_ADOPTION_CHECK_NAME,
+        status: "fail",
+        detail: ineligibleDetail(presetArtifacts, appEntry !== null && appEntry.kind === "resolved"
+            ? appEntry.source
+            : null, await mergedEntries(projectRoot)),
+    };
+}
+/**
+ * The preset's force-merged manifest entries, or why they could not be listed.
+ *
+ * A manifest this check cannot read does not unsettle the verdict — the
+ * verdict was already reached from the artifacts and the marker — so the
+ * failure is stated as part of the finding instead of replacing it with
+ * "could not determine".
+ * @param projectRoot - Absolute project root
+ * @returns Operator-readable clauses, empty when there are none to state
+ */
+async function mergedEntries(projectRoot) {
+    try {
+        return describeMergedEntries(await readJsonOrAbsent(projectRoot, PACKAGE_JSON));
+    }
+    catch (error) {
+        return [
+            `entries this check could not list, because ${PACKAGE_JSON} would not ` +
+                `read (${error instanceof Error ? error.message : String(error)})`,
+        ];
+    }
+}
+/**
+ * State the finding, what it delivered, and what the reader has to decide.
+ * @param presetArtifacts - CDK-exclusive artifacts found
+ * @param missingEntry - Entry the marker names but does not have, if any
+ * @param delivered - Force-merged package.json entries still present
+ * @returns One operator-readable detail line
+ */
+function ineligibleDetail(presetArtifacts, missingEntry, delivered) {
+    const why = missingEntry === null
+        ? `there is no ${CDK_APP_MARKER}, which is the only thing that admits ` +
+            "the preset"
+        : `its ${CDK_APP_MARKER} names an application entry ` +
+            `(\`${missingEntry}\`) that does not exist, so the marker is one ` +
+            "Lisa seeded rather than one this repository wrote";
+    const merged = delivered.length > 0
+        ? ` It also force-merged ${delivered.join(" and ")}.`
+        : "";
+    return ("This repository carries the CDK application preset it was never " +
+        `eligible for: \`${presetArtifacts.join("`, `")}\` are present and ` +
+        `${why}.${merged} ${QUIET_CONSEQUENCE}. ${REMEDY}`);
+}
+/**
+ * A passing line for this check.
+ * @param detail - What was found
+ * @returns Doctor check result
+ */
+function ok(detail) {
+    return { name: CDK_PRESET_ADOPTION_CHECK_NAME, status: "ok", detail };
+}
+//# sourceMappingURL=doctor-cdk-preset-adoption.js.map

package/dist/cli/doctor-cdk-preset-adoption.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"doctor-cdk-preset-adoption.js","sourceRoot":"","sources":["../../src/cli/doctor-cdk-preset-adoption.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,kBAAkB,CAAC;AAClD,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAElC,OAAO,EACL,cAAc,EACd,oBAAoB,EACpB,oBAAoB,EACpB,8BAA8B,EAC9B,iBAAiB,EACjB,yBAAyB,GAE1B,MAAM,gCAAgC,CAAC;AAGxC,kEAAkE;AAClE,MAAM,CAAC,MAAM,8BAA8B,GAAG,oBAAoB,CAAC;AAEnE,4EAA4E;AAC5E,MAAM,YAAY,GAAG,cAAc,CAAC;AAEpC;;;;;GAKG;AACH,MAAM,YAAY,GAAG,IAAI,GAAG,CAAC,CAAC,QAAQ,EAAE,SAAS,EAAE,cAAc,CAAC,CAAC,CAAC;AAEpE;;;;GAIG;AACH,SAAS,SAAS,CAAC,KAAc;IAC/B,MAAM,IAAI,GACR,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI;QACzC,CAAC,CAAE,KAA4B,CAAC,IAAI;QACpC,CAAC,CAAC,SAAS,CAAC;IAChB,OAAO,OAAO,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;AACrD,CAAC;AAED;;;;;;;;;;;GAWG;AACH,KAAK,UAAU,WAAW,CACxB,WAAmB,EACnB,YAAoB;IAEpB,IAAI,CAAC;QACH,MAAM,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,YAAY,CAAC,CAAC,CAAC;QACjD,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,IAAI,GAAG,SAAS,CAAC,KAAK,CAAC,CAAC;QAC9B,IAAI,IAAI,KAAK,SAAS,IAAI,YAAY,CAAC,GAAG,CAAC,IAAI,CAAC;YAAE,OAAO,KAAK,CAAC;QAC/D,MAAM,IAAI,KAAK,CACb,kBAAkB,YAAY,KAAK,IAAI,IAAI,MAAM,CAAC,KAAK,CAAC,EAAE,EAC1D;YACE,KAAK,EAAE,KAAK;SACb,CACF,CAAC;IACJ,CAAC;AACH,CAAC;AAED;;;;;;GAMG;AACH,KAAK,UAAU,gBAAgB,CAC7B,WAAmB,EACnB,YAAoB;IAEpB,IAAI,CAAC;QACH,OAAO,MAAM,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,YAAY,CAAC,EAAE,MAAM,CAAC,CAAC;IACtE,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,IAAI,GAAG,SAAS,CAAC,KAAK,CAAC,CAAC;QAC9B,IAAI,IAAI,KAAK,SAAS,IAAI,YAAY,CAAC,GAAG,CAAC,IAAI,CAAC;YAAE,OAAO,IAAI,CAAC;QAC9D,MAAM,IAAI,KAAK,CACb,kBAAkB,YAAY,KAAK,IAAI,IAAI,MAAM,CAAC,KAAK,CAAC,EAAE,EAC1D;YACE,KAAK,EAAE,KAAK;SACb,CACF,CAAC;IACJ,CAAC;AACH,CAAC;AAED;;;;;;;;;;GAUG;AACH,KAAK,UAAU,gBAAgB,CAC7B,WAAmB,EACnB,YAAoB;IAEpB,MAAM,IAAI,GAAG,MAAM,gBAAgB,CAAC,WAAW,EAAE,YAAY,CAAC,CAAC;IAC/D,IAAI,IAAI,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC;IAC/B,IAAI,CAAC;QACH,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAY,CAAC;IACrC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,IAAI,KAAK,CACb,mBAAmB,YAAY,KAC7B,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CACvD,EAAE,EACF,EAAE,KAAK,EAAE,KAAK,EAAE,CACjB,CAAC;IACJ,CAAC;AACH,CAAC;AAED;;;;;GAKG;AACH,KAAK,UAAU,sBAAsB,CACnC,WAAmB;IAEnB,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,GAAG,CAC/B,oBAAoB,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC,WAAW,CAAC,WAAW,EAAE,QAAQ,CAAC,CAAC,CACzE,CAAC;IACF,OAAO,oBAAoB,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,KAAK,IAAI,CAAC,CAAC;AAC5E,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,KAAK,UAAU,eAAe,CAC5B,WAAmB,EACnB,MAAe;IAEf,MAAM,GAAG,GACP,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,KAAK,IAAI;QAC3C,CAAC,CAAE,MAA4B,CAAC,GAAG;QACnC,CAAC,CAAC,SAAS,CAAC;IAChB,IAAI,OAAO,GAAG,KAAK,QAAQ;QAAE,OAAO,EAAE,IAAI,EAAE,cAAc,EAAE,CAAC;IAC7D,MAAM,MAAM,GAAG,iBAAiB,CAAC,GAAG,CAAC,CAAC;IACtC,IAAI,MAAM,KAAK,IAAI;QAAE,OAAO,EAAE,IAAI,EAAE,cAAc,EAAE,CAAC;IACrD,OAAO;QACL,IAAI,EAAE,UAAU;QAChB,MAAM;QACN,OAAO,EAAE,MAAM,WAAW,CAAC,WAAW,EAAE,MAAM,CAAC;KAChD,CAAC;AACJ,CAAC;AAED;;;;;GAKG;AACH,SAAS,qBAAqB,CAAC,QAAiB;IAC9C,IAAI,OAAO,QAAQ,KAAK,QAAQ,IAAI,QAAQ,KAAK,IAAI;QAAE,OAAO,EAAE,CAAC;IACjE,MAAM,MAAM,GAAG,QAGd,CAAC;IACF,MAAM,YAAY,GAChB,OAAO,MAAM,CAAC,YAAY,KAAK,QAAQ,IAAI,MAAM,CAAC,YAAY,KAAK,IAAI;QACrE,CAAC,CAAE,MAAM,CAAC,YAAwC;QAClD,CAAC,CAAC,EAAE,CAAC;IACT,MAAM,MAAM,GAAG,8BAA8B,CAAC,MAAM,CAClD,IAAI,CAAC,EAAE,CAAC,IAAI,IAAI,YAAY,CAC7B,CAAC;IACF,MAAM,GAAG,GACP,OAAO,MAAM,CAAC,GAAG,KAAK,QAAQ,IAAI,MAAM,CAAC,GAAG,KAAK,IAAI;QACnD,CAAC,CAAE,MAAM,CAAC,GAA+B;QACzC,CAAC,CAAC,EAAE,CAAC;IACT,OAAO;QACL,MAAM,CAAC,MAAM,GAAG,CAAC;YACf,CAAC,CAAC,CAAC,0BAA0B,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,SAAS,YAAY,EAAE,CAAC;YACxE,CAAC,CAAC,EAAE;QACN,GAAG,CAAC,oBAAoB,CAAC,IAAI,CAAC,KAAK,oBAAoB,CAAC,MAAM;YAC5D,CAAC,CAAC;gBACE,WAAW,oBAAoB,CAAC,IAAI,uBAAuB;oBACzD,KAAK,oBAAoB,CAAC,MAAM,IAAI;aACvC;YACH,CAAC,CAAC,EAAE;KACP,CAAC,IAAI,EAAE,CAAC;AACX,CAAC;AAED,oEAAoE;AACpE,MAAM,MAAM,GACV,4EAA4E;IAC5E,0EAA0E;IAC1E,oCAAoC,cAAc,wBAAwB;IAC1E,iDAAiD,CAAC;AAEpD;;GAEG;AACH,MAAM,iBAAiB,GACrB,wEAAwE;IACxE,4EAA4E;IAC5E,mDAAmD,CAAC;AAEtD;;;;;;;;;GASG;AACH,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAC1C,UAAkB;IAElB,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,CAAC;QACpC,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,EAAE,CAAC;YACxB,MAAM,IAAI,KAAK,CAAC,GAAG,UAAU,qBAAqB,CAAC,CAAC;QACtD,CAAC;QACD,OAAO,MAAM,MAAM,CAAC,UAAU,CAAC,CAAC;IAClC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO;YACL,IAAI,EAAE,8BAA8B;YACpC,MAAM,EAAE,MAAM;YACd,MAAM,EACJ,4DAA4D;gBAC5D,uBACE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CACvD,sEAAsE;gBACtE,uCAAuC;SAC1C,CAAC;IACJ,CAAC;AACH,CAAC;AAED;;;;;GAKG;AACH,KAAK,UAAU,MAAM,CAAC,WAAmB;IACvC,MAAM,eAAe,GAAG,MAAM,sBAAsB,CAAC,WAAW,CAAC,CAAC;IAClE,IAAI,eAAe,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACjC,OAAO,EAAE,CAAC,wDAAwD,CAAC,CAAC;IACtE,CAAC;IACD,MAAM,MAAM,GAAG,MAAM,gBAAgB,CAAC,WAAW,EAAE,cAAc,CAAC,CAAC;IACnE,MAAM,YAAY,GAAG,MAAM,KAAK,IAAI,CAAC;IACrC,MAAM,QAAQ,GAAG,YAAY;QAC3B,CAAC,CAAC,MAAM,eAAe,CAAC,WAAW,EAAE,MAAM,CAAC;QAC5C,CAAC,CAAC,IAAI,CAAC;IACT,MAAM,QAAQ,GAAG,yBAAyB,CAAC;QACzC,eAAe;QACf,YAAY;QACZ,QAAQ;KACT,CAAC,CAAC;IACH,IAAI,QAAQ,KAAK,UAAU,EAAE,CAAC;QAC5B,OAAO,EAAE,CAAC,gDAAgD,cAAc,EAAE,CAAC,CAAC;IAC9E,CAAC;IACD,IAAI,QAAQ,KAAK,gBAAgB,EAAE,CAAC;QAClC,OAAO;YACL,IAAI,EAAE,8BAA8B;YACpC,MAAM,EAAE,MAAM;YACd,MAAM,EACJ,2DAA2D;gBAC3D,GAAG,cAAc,oDAAoD;gBACrE,oEAAoE;gBACpE,mCAAmC,cAAc,mBAAmB;gBACpE,gCAAgC,iBAAiB,CAAC,WAAW,EAAE,EAAE;SACpE,CAAC;IACJ,CAAC;IACD,OAAO;QACL,IAAI,EAAE,8BAA8B;QACpC,MAAM,EAAE,MAAM;QACd,MAAM,EAAE,gBAAgB,CACtB,eAAe,EACf,QAAQ,KAAK,IAAI,IAAI,QAAQ,CAAC,IAAI,KAAK,UAAU;YAC/C,CAAC,CAAC,QAAQ,CAAC,MAAM;YACjB,CAAC,CAAC,IAAI,EACR,MAAM,aAAa,CAAC,WAAW,CAAC,CACjC;KACF,CAAC;AACJ,CAAC;AAED;;;;;;;;;GASG;AACH,KAAK,UAAU,aAAa,CAAC,WAAmB;IAC9C,IAAI,CAAC;QACH,OAAO,qBAAqB,CAC1B,MAAM,gBAAgB,CAAC,WAAW,EAAE,YAAY,CAAC,CAClD,CAAC;IACJ,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO;YACL,8CAA8C,YAAY,aAAa;gBACrE,SAAS,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG;SACrE,CAAC;IACJ,CAAC;AACH,CAAC;AAED;;;;;;GAMG;AACH,SAAS,gBAAgB,CACvB,eAAkC,EAClC,YAA2B,EAC3B,SAA4B;IAE5B,MAAM,GAAG,GACP,YAAY,KAAK,IAAI;QACnB,CAAC,CAAC,eAAe,cAAc,wCAAwC;YACrE,YAAY;QACd,CAAC,CAAC,OAAO,cAAc,8BAA8B;YACnD,MAAM,YAAY,gDAAgD;YAClE,mDAAmD,CAAC;IAC1D,MAAM,MAAM,GACV,SAAS,CAAC,MAAM,GAAG,CAAC;QAClB,CAAC,CAAC,yBAAyB,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG;QACrD,CAAC,CAAC,EAAE,CAAC;IACT,OAAO,CACL,kEAAkE;QAClE,mBAAmB,eAAe,CAAC,IAAI,CAAC,MAAM,CAAC,qBAAqB;QACpE,GAAG,GAAG,IAAI,MAAM,IAAI,iBAAiB,KAAK,MAAM,EAAE,CACnD,CAAC;AACJ,CAAC;AAED;;;;GAIG;AACH,SAAS,EAAE,CAAC,MAAc;IACxB,OAAO,EAAE,IAAI,EAAE,8BAA8B,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;AACxE,CAAC"}

package/dist/cli/doctor-config-shadowing.d.ts

@@ -0,0 +1,22 @@
+/** Name of the config-precedence check as doctor reports it. */
+export declare const CONFIG_SHADOWING_CHECK_NAME = "Config precedence clean?";
+/** Shape of one doctor check result (structurally identical to doctor's). */
+interface ShadowingCheckResult {
+    name: string;
+    status: "ok" | "warn" | "fail";
+    detail: string;
+}
+/**
+ * Report whether Lisa's seeded config files outrank configs the project wrote
+ * itself.
+ *
+ * Fails rather than warns on a hit: the project's configuration is not being
+ * read right now, the remedy is one deletion, and nothing else in the toolchain
+ * will ever mention it. Fails equally when the tree could not be inspected,
+ * for the reason in the module note.
+ * @param targetPath - Project path to inspect
+ * @returns Doctor check result
+ */
+export declare function checkConfigShadowing(targetPath: string): Promise<ShadowingCheckResult>;
+export {};
+//# sourceMappingURL=doctor-config-shadowing.d.ts.map

package/dist/cli/doctor-config-shadowing.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"doctor-config-shadowing.d.ts","sourceRoot":"","sources":["../../src/cli/doctor-config-shadowing.ts"],"names":[],"mappings":"AA2BA,gEAAgE;AAChE,eAAO,MAAM,2BAA2B,6BAA6B,CAAC;AAEtE,6EAA6E;AAC7E,UAAU,oBAAoB;IAC5B,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,IAAI,GAAG,MAAM,GAAG,MAAM,CAAC;IAC/B,MAAM,EAAE,MAAM,CAAC;CAChB;AAwED;;;;;;;;;;GAUG;AACH,wBAAsB,oBAAoB,CACxC,UAAU,EAAE,MAAM,GACjB,OAAO,CAAC,oBAAoB,CAAC,CA6B/B"}

package/dist/cli/doctor-config-shadowing.js

@@ -0,0 +1,123 @@
+/**
+ * `lisa doctor` check: is a Lisa-seeded config outranking the project's own?
+ *
+ * `src/core/config-shadowing.ts` closed the create path — Lisa no longer
+ * writes `knip.json` into a repository that already configures knip under a
+ * filename `knip.json` would outrank. That guard is reached once per path, on
+ * the write that never happens again, so it cannot reach the repositories that
+ * already received the file. Those are the silent population: the seeded file
+ * is neither tracked nor gitignored, so it reads as something a developer
+ * created; the postinstall that wrote it is skipped under `CI`, so no pipeline
+ * ever reproduces it; and until this check, nothing in Lisa looked for the
+ * pair (CodySwannGT/lisa#3858).
+ *
+ * The whole point is that an affected repository can find ITSELF, which means
+ * a probe that cannot read must never render as a clean tree. Every filesystem
+ * answer here is three-valued — present, absent, or undeterminable — and the
+ * last one fails rather than passing quietly, because "reported nothing"
+ * looking identical to "found nothing" is the defect this check exists to end.
+ * @module cli/doctor-config-shadowing
+ */
+import { stat } from "node:fs/promises";
+import * as path from "node:path";
+import { installedConfigShadowings, } from "../core/config-shadowing.js";
+/** Name of the config-precedence check as doctor reports it. */
+export const CONFIG_SHADOWING_CHECK_NAME = "Config precedence clean?";
+/**
+ * Errno codes that answer the question rather than refusing it: the path is
+ * genuinely not there. Anything else — a permission denial, an I/O error, a
+ * symlink loop — means the probe could not look, which is not the same answer
+ * and must not be spelled the same way.
+ */
+const ABSENT_CODES = new Set(["ENOENT", "ENOTDIR", "ENAMETOOLONG"]);
+/**
+ * The errno code of a rejected filesystem call, when it carries one.
+ * @param error - Value thrown by a filesystem call
+ * @returns The errno code, or undefined when the value carries none
+ */
+function errnoCode(error) {
+    const code = typeof error === "object" && error !== null
+        ? error.code
+        : undefined;
+    return typeof code === "string" ? code : undefined;
+}
+/**
+ * Answer whether a repo-relative path exists, REJECTING when the filesystem
+ * declines to say.
+ *
+ * `fs-extra`'s `pathExists` resolves false for every failure, including a
+ * permission denial, so a directory this process cannot read would report the
+ * same "no shadowing here" as a healthy one.
+ * @param projectRoot - Absolute project root
+ * @param relativePath - Repo-relative path to probe
+ * @returns True when the path is present, false when it is provably absent
+ * @throws {Error} When the filesystem cannot answer
+ */
+async function probeExists(projectRoot, relativePath) {
+    try {
+        await stat(path.join(projectRoot, relativePath));
+        return true;
+    }
+    catch (error) {
+        const code = errnoCode(error);
+        if (code !== undefined && ABSENT_CODES.has(code))
+            return false;
+        throw new Error(`could not read ${relativePath}: ${code ?? String(error)}`, { cause: error });
+    }
+}
+/**
+ * One installed shadowing, stated so the reader knows which file is being
+ * read, which is being ignored, and what to do about it.
+ *
+ * Names the losing file explicitly. An operator who has spent an afternoon
+ * editing settings that were never loaded needs to be told that specific
+ * thing, not that "a precedence conflict exists".
+ * @param shadowing - Pair found on disk
+ * @returns One operator-readable clause
+ */
+function describeShadowing(shadowing) {
+    return (`${shadowing.template} outranks ${shadowing.sibling}, so ${shadowing.tool} ` +
+        `reads ${shadowing.template} and the settings in ${shadowing.sibling} are ` +
+        `not being read. Lisa seeded ${shadowing.template}; delete it to restore ` +
+        `${shadowing.sibling}. \`lisa apply\` will not write it back, because it ` +
+        `now stands down whenever a config it would outrank is present`);
+}
+/**
+ * Report whether Lisa's seeded config files outrank configs the project wrote
+ * itself.
+ *
+ * Fails rather than warns on a hit: the project's configuration is not being
+ * read right now, the remedy is one deletion, and nothing else in the toolchain
+ * will ever mention it. Fails equally when the tree could not be inspected,
+ * for the reason in the module note.
+ * @param targetPath - Project path to inspect
+ * @returns Doctor check result
+ */
+export async function checkConfigShadowing(targetPath) {
+    try {
+        const root = await stat(targetPath);
+        if (!root.isDirectory()) {
+            throw new Error(`${targetPath} is not a directory`);
+        }
+        const shadowings = await installedConfigShadowings(relativePath => probeExists(targetPath, relativePath));
+        return shadowings.length === 0
+            ? {
+                name: CONFIG_SHADOWING_CHECK_NAME,
+                status: "ok",
+                detail: "No Lisa-seeded config outranks a config this project wrote",
+            }
+            : {
+                name: CONFIG_SHADOWING_CHECK_NAME,
+                status: "fail",
+                detail: shadowings.map(describeShadowing).join(". "),
+            };
+    }
+    catch (error) {
+        return {
+            name: CONFIG_SHADOWING_CHECK_NAME,
+            status: "fail",
+            detail: `Could not determine config precedence: ${error instanceof Error ? error.message : String(error)}. Treated as a failure rather than a pass: an unreadable tree is not a clean one`,
+        };
+    }
+}
+//# sourceMappingURL=doctor-config-shadowing.js.map

package/dist/cli/doctor-config-shadowing.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"doctor-config-shadowing.js","sourceRoot":"","sources":["../../src/cli/doctor-config-shadowing.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AACH,OAAO,EAAE,IAAI,EAAE,MAAM,kBAAkB,CAAC;AACxC,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAClC,OAAO,EACL,yBAAyB,GAE1B,MAAM,6BAA6B,CAAC;AAErC,gEAAgE;AAChE,MAAM,CAAC,MAAM,2BAA2B,GAAG,0BAA0B,CAAC;AAStE;;;;;GAKG;AACH,MAAM,YAAY,GAAG,IAAI,GAAG,CAAC,CAAC,QAAQ,EAAE,SAAS,EAAE,cAAc,CAAC,CAAC,CAAC;AAEpE;;;;GAIG;AACH,SAAS,SAAS,CAAC,KAAc;IAC/B,MAAM,IAAI,GACR,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI;QACzC,CAAC,CAAE,KAA4B,CAAC,IAAI;QACpC,CAAC,CAAC,SAAS,CAAC;IAChB,OAAO,OAAO,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;AACrD,CAAC;AAED;;;;;;;;;;;GAWG;AACH,KAAK,UAAU,WAAW,CACxB,WAAmB,EACnB,YAAoB;IAEpB,IAAI,CAAC;QACH,MAAM,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,YAAY,CAAC,CAAC,CAAC;QACjD,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,IAAI,GAAG,SAAS,CAAC,KAAK,CAAC,CAAC;QAC9B,IAAI,IAAI,KAAK,SAAS,IAAI,YAAY,CAAC,GAAG,CAAC,IAAI,CAAC;YAAE,OAAO,KAAK,CAAC;QAC/D,MAAM,IAAI,KAAK,CACb,kBAAkB,YAAY,KAAK,IAAI,IAAI,MAAM,CAAC,KAAK,CAAC,EAAE,EAC1D,EAAE,KAAK,EAAE,KAAK,EAAE,CACjB,CAAC;IACJ,CAAC;AACH,CAAC;AAED;;;;;;;;;GASG;AACH,SAAS,iBAAiB,CAAC,SAAmC;IAC5D,OAAO,CACL,GAAG,SAAS,CAAC,QAAQ,aAAa,SAAS,CAAC,OAAO,QAAQ,SAAS,CAAC,IAAI,GAAG;QAC5E,SAAS,SAAS,CAAC,QAAQ,wBAAwB,SAAS,CAAC,OAAO,OAAO;QAC3E,+BAA+B,SAAS,CAAC,QAAQ,yBAAyB;QAC1E,GAAG,SAAS,CAAC,OAAO,sDAAsD;QAC1E,+DAA+D,CAChE,CAAC;AACJ,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,CAAC,KAAK,UAAU,oBAAoB,CACxC,UAAkB;IAElB,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,CAAC;QACpC,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,EAAE,CAAC;YACxB,MAAM,IAAI,KAAK,CAAC,GAAG,UAAU,qBAAqB,CAAC,CAAC;QACtD,CAAC;QACD,MAAM,UAAU,GAAG,MAAM,yBAAyB,CAAC,YAAY,CAAC,EAAE,CAChE,WAAW,CAAC,UAAU,EAAE,YAAY,CAAC,CACtC,CAAC;QACF,OAAO,UAAU,CAAC,MAAM,KAAK,CAAC;YAC5B,CAAC,CAAC;gBACE,IAAI,EAAE,2BAA2B;gBACjC,MAAM,EAAE,IAAI;gBACZ,MAAM,EAAE,4DAA4D;aACrE;YACH,CAAC,CAAC;gBACE,IAAI,EAAE,2BAA2B;gBACjC,MAAM,EAAE,MAAM;gBACd,MAAM,EAAE,UAAU,CAAC,GAAG,CAAC,iBAAiB,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC;aACrD,CAAC;IACR,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO;YACL,IAAI,EAAE,2BAA2B;YACjC,MAAM,EAAE,MAAM;YACd,MAAM,EAAE,0CACN,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CACvD,kFAAkF;SACnF,CAAC;IACJ,CAAC;AACH,CAAC"}

package/dist/cli/doctor-rails-deploy-intent.d.ts

@@ -0,0 +1,15 @@
+import type { DoctorCheck } from "./doctor.js";
+/** Name of the deploy-intent check as doctor reports it. */
+export declare const RAILS_DEPLOY_INTENT_CHECK_NAME = "Rails production deploy intent stated?";
+/**
+ * Report whether a Rails project's deploy workflow states its production
+ * intent.
+ *
+ * Warns rather than fails on a hit: nothing is broken, and the remedy is a
+ * human decision about a host-owned file. Fails when the question could not
+ * be answered, for the reason in the module note.
+ * @param targetPath - Project path to inspect
+ * @returns Doctor check result
+ */
+export declare function checkRailsDeployIntent(targetPath: string): Promise<DoctorCheck>;
+//# sourceMappingURL=doctor-rails-deploy-intent.d.ts.map

package/dist/cli/doctor-rails-deploy-intent.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"doctor-rails-deploy-intent.d.ts","sourceRoot":"","sources":["../../src/cli/doctor-rails-deploy-intent.ts"],"names":[],"mappings":"AA8BA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAE/C,4DAA4D;AAC5D,eAAO,MAAM,8BAA8B,2CACD,CAAC;AA8G3C;;;;;;;;;GASG;AACH,wBAAsB,sBAAsB,CAC1C,UAAU,EAAE,MAAM,GACjB,OAAO,CAAC,WAAW,CAAC,CA0BtB"}