@codyswann/lisa 4.57.0 → 4.57.2

package/README.md

@@ -179,6 +179,13 @@ lisa apply .
 lisa doctor
 ```
 
+An incompatible dependency override can stop Lisa, including `doctor`, from
+loading. For the known `minimatch` / `brace-expansion` import failure, the CLI
+reports the parent's declared range, the version Node actually resolves, and
+any direct override in the current directory's `package.json`. It preserves the
+original error and does not change dependencies. Nested selectors and unreadable
+manifests remain unverified; this diagnostic is not a full lockfile audit.
+
 When Lisa is invoked during installation it prints this next step. Package
 managers that do not run its lifecycle scripts cannot display that notice.
 Existing host hooks using `LISA_POSTINSTALL=1`, `--postinstall-safe`, or the

package/dist/cli-load-diagnostic.d.ts

@@ -0,0 +1,8 @@
+/**
+ * Explain the demonstrated minimatch/brace-expansion loading failure.
+ * This is not a lockfile audit and never changes or installs dependencies.
+ * @param error - Original CLI loading error
+ * @returns Additional context, or null for unrelated errors
+ */
+export declare function describeCliDependencyFailure(error: unknown): Promise<string | null>;
+//# sourceMappingURL=cli-load-diagnostic.d.ts.map

package/dist/cli-load-diagnostic.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cli-load-diagnostic.d.ts","sourceRoot":"","sources":["../src/cli-load-diagnostic.ts"],"names":[],"mappings":"AA2DA;;;;;GAKG;AACH,wBAAsB,4BAA4B,CAChD,KAAK,EAAE,OAAO,GACb,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CA2BxB"}

package/dist/cli-load-diagnostic.js

@@ -0,0 +1,83 @@
+/** A bounded startup diagnostic that remains loadable when CLI dependencies fail. */
+import { readFile } from "node:fs/promises";
+import { createRequire } from "node:module";
+import path from "node:path";
+const DEPENDENCY = "brace-expansion";
+/**
+ * Read a manifest without evaluating the package's executable entrypoint.
+ * @param filename - Manifest path
+ * @returns Parsed object
+ */
+async function readManifest(filename) {
+    const value = JSON.parse(await readFile(filename, "utf8"));
+    if (value === null || typeof value !== "object" || Array.isArray(value)) {
+        throw new Error("Manifest is not an object");
+    }
+    return value;
+}
+/**
+ * Render version/range text without exposing credentials from URL overrides.
+ * @param value - A version or override value
+ * @returns Safe diagnostic text
+ */
+function rangeText(value) {
+    return typeof value === "string" &&
+        value.length <= 100 &&
+        /^[0-9xXv*~^<>=|.\s+-]+$/u.test(value)
+        ? value
+        : "unverified non-version value (withheld)";
+}
+/**
+ * Identify direct host overrides; unsupported selectors stay explicitly unverified.
+ * @returns Human-readable current-directory override evidence
+ */
+async function describeHostOverride() {
+    try {
+        const manifest = await readManifest(path.resolve("package.json"));
+        const matches = ["overrides", "resolutions"].flatMap(section => {
+            const entries = manifest[section];
+            if (!entries || typeof entries !== "object" || Array.isArray(entries))
+                return [];
+            const value = entries[DEPENDENCY];
+            return value === undefined
+                ? []
+                : [`${section}.${DEPENDENCY}: ${rangeText(value)}`];
+        });
+        return matches.length > 0
+            ? `Current directory package.json ${matches.join("; ")}.`
+            : "No direct brace-expansion override was identified in the current directory's package.json; nested selectors and other manifests were not verified.";
+    }
+    catch {
+        return "Could not read the current directory's package.json; the responsible override is unverified.";
+    }
+}
+/**
+ * Explain the demonstrated minimatch/brace-expansion loading failure.
+ * This is not a lockfile audit and never changes or installs dependencies.
+ * @param error - Original CLI loading error
+ * @returns Additional context, or null for unrelated errors
+ */
+export async function describeCliDependencyFailure(error) {
+    if (!(error instanceof Error) ||
+        !/['"]brace-expansion['"]/u.test(error.message))
+        return null;
+    const override = await describeHostOverride();
+    try {
+        const resolveFromLisa = createRequire(import.meta.url);
+        const parentPath = resolveFromLisa.resolve("minimatch/package.json");
+        const parent = await readManifest(parentPath);
+        const child = await readManifest(createRequire(parentPath).resolve("brace-expansion/package.json"));
+        const dependencies = parent.dependencies;
+        return [
+            "Lisa could not load its dependencies; the requested command did not run.",
+            `minimatch@${rangeText(parent.version)} declares brace-expansion ${rangeText(dependencies?.[DEPENDENCY])}; Node resolves brace-expansion@${rangeText(child.version)}.`,
+            override,
+            "@isaacs/brace-expansion is a different package and does not govern brace-expansion.",
+            "Review the override and reinstall with a version that satisfies the parent's declared range. No files were changed by this diagnostic.",
+        ].join("\n");
+    }
+    catch {
+        return `Lisa could not load brace-expansion, and its installed dependency chain could not be verified.\n${override}`;
+    }
+}
+//# sourceMappingURL=cli-load-diagnostic.js.map

package/dist/cli-load-diagnostic.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cli-load-diagnostic.js","sourceRoot":"","sources":["../src/cli-load-diagnostic.ts"],"names":[],"mappings":"AAAA,qFAAqF;AACrF,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAC5C,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAC5C,OAAO,IAAI,MAAM,WAAW,CAAC;AAE7B,MAAM,UAAU,GAAG,iBAAiB,CAAC;AAErC;;;;GAIG;AACH,KAAK,UAAU,YAAY,CACzB,QAAgB;IAEhB,MAAM,KAAK,GAAY,IAAI,CAAC,KAAK,CAAC,MAAM,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC,CAAC;IACpE,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACxE,MAAM,IAAI,KAAK,CAAC,2BAA2B,CAAC,CAAC;IAC/C,CAAC;IACD,OAAO,KAAgC,CAAC;AAC1C,CAAC;AAED;;;;GAIG;AACH,SAAS,SAAS,CAAC,KAAc;IAC/B,OAAO,OAAO,KAAK,KAAK,QAAQ;QAC9B,KAAK,CAAC,MAAM,IAAI,GAAG;QACnB,0BAA0B,CAAC,IAAI,CAAC,KAAK,CAAC;QACtC,CAAC,CAAC,KAAK;QACP,CAAC,CAAC,yCAAyC,CAAC;AAChD,CAAC;AAED;;;GAGG;AACH,KAAK,UAAU,oBAAoB;IACjC,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,MAAM,YAAY,CAAC,IAAI,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC,CAAC;QAClE,MAAM,OAAO,GAAG,CAAC,WAAW,EAAE,aAAa,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE;YAC7D,MAAM,OAAO,GAAG,QAAQ,CAAC,OAAO,CAAC,CAAC;YAClC,IAAI,CAAC,OAAO,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC;gBACnE,OAAO,EAAE,CAAC;YACZ,MAAM,KAAK,GAAI,OAAmC,CAAC,UAAU,CAAC,CAAC;YAC/D,OAAO,KAAK,KAAK,SAAS;gBACxB,CAAC,CAAC,EAAE;gBACJ,CAAC,CAAC,CAAC,GAAG,OAAO,IAAI,UAAU,KAAK,SAAS,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QACxD,CAAC,CAAC,CAAC;QACH,OAAO,OAAO,CAAC,MAAM,GAAG,CAAC;YACvB,CAAC,CAAC,kCAAkC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG;YACzD,CAAC,CAAC,oJAAoJ,CAAC;IAC3J,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,8FAA8F,CAAC;IACxG,CAAC;AACH,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,4BAA4B,CAChD,KAAc;IAEd,IACE,CAAC,CAAC,KAAK,YAAY,KAAK,CAAC;QACzB,CAAC,0BAA0B,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC;QAE/C,OAAO,IAAI,CAAC;IACd,MAAM,QAAQ,GAAG,MAAM,oBAAoB,EAAE,CAAC;IAC9C,IAAI,CAAC;QACH,MAAM,eAAe,GAAG,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACvD,MAAM,UAAU,GAAG,eAAe,CAAC,OAAO,CAAC,wBAAwB,CAAC,CAAC;QACrE,MAAM,MAAM,GAAG,MAAM,YAAY,CAAC,UAAU,CAAC,CAAC;QAC9C,MAAM,KAAK,GAAG,MAAM,YAAY,CAC9B,aAAa,CAAC,UAAU,CAAC,CAAC,OAAO,CAAC,8BAA8B,CAAC,CAClE,CAAC;QACF,MAAM,YAAY,GAAG,MAAM,CAAC,YAEf,CAAC;QACd,OAAO;YACL,0EAA0E;YAC1E,aAAa,SAAS,CAAC,MAAM,CAAC,OAAO,CAAC,6BAA6B,SAAS,CAAC,YAAY,EAAE,CAAC,UAAU,CAAC,CAAC,mCAAmC,SAAS,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG;YACtK,QAAQ;YACR,qFAAqF;YACrF,wIAAwI;SACzI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACf,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,mGAAmG,QAAQ,EAAE,CAAC;IACvH,CAAC;AACH,CAAC"}

package/dist/core/nightly-e2e-guard-behavior-certificate.js

@@ -41,9 +41,9 @@ export const NIGHTLY_E2E_GUARD_BEHAVIOR_CERTIFICATES = Object.freeze({
     }),
     cd02b94b4db5134984c7b69f905af71c96bb5aac09a18fb3c6aef5ab0c22cf17: Object.freeze({
         contractVersion: "1.9.0",
-        packageVersions: Object.freeze(["4.57.0"]),
+        packageVersions: Object.freeze(["4.57.2"]),
         provenances: Object.freeze([
-            "workspace package @codyswann/lisa@4.57.0 (typescript/copy-overwrite/scripts/check-nightly-e2e-health.mjs)",
+            "workspace package @codyswann/lisa@4.57.2 (typescript/copy-overwrite/scripts/check-nightly-e2e-health.mjs)",
         ]),
     }),
     dfd2fef680de5ef03e63075e8a61c62ca4d95cdfdff6201939b79c748d3397f6: Object.freeze({

package/dist/core/upstream-evidence-manifest.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"upstream-evidence-manifest.d.ts","sourceRoot":"","sources":["../../src/core/upstream-evidence-manifest.ts"],"names":[],"mappings":"AACA,iFAAiF;AACjF,eAAO,MAAM,0BAA0B,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAskFpE,CAAC;AAEL,4EAA4E;AAC5E,eAAO,MAAM,yBAAyB,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,IAAI,CAAC,CAm9QjE,CAAC;AAEL,sFAAsF;AACtF,eAAO,MAAM,uBAAuB,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,IAAI,CAAC,CAk6I/D,CAAC"}
+{"version":3,"file":"upstream-evidence-manifest.d.ts","sourceRoot":"","sources":["../../src/core/upstream-evidence-manifest.ts"],"names":[],"mappings":"AACA,iFAAiF;AACjF,eAAO,MAAM,0BAA0B,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAskFpE,CAAC;AAEL,4EAA4E;AAC5E,eAAO,MAAM,yBAAyB,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,IAAI,CAAC,CAq9QjE,CAAC;AAEL,sFAAsF;AACtF,eAAO,MAAM,uBAAuB,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,IAAI,CAAC,CAk6I/D,CAAC"}

package/dist/core/upstream-evidence-manifest.js

@@ -7372,6 +7372,7 @@ export const UPSTREAM_SURFACE_MANIFEST = Object.freeze({
     "src/agy/mcp-installer.ts": true,
     "src/agy/plugin-installer.ts": true,
     "src/claude/claude-md-installer.ts": true,
+    "src/cli-load-diagnostic.ts": true,
     "src/cli/apply.ts": true,
     "src/cli/check-learnings-budget-cmd.ts": true,
     "src/cli/cross-pollinate-cmd.ts": true,
@@ -8384,6 +8385,7 @@ export const UPSTREAM_SURFACE_MANIFEST = Object.freeze({
     "tests/unit/cli/lisa-test-run-process-group.test.ts": true,
     "tests/unit/cli/lisa-test-run-protocol-state.test.ts": true,
     "tests/unit/cli/merge-learnings-cmd.test.ts": true,
+    "tests/unit/cli/override-load-diagnostic.test.ts": true,
     "tests/unit/cli/parse-refresh-templates.test.ts": true,
     "tests/unit/cli/postinstall-declaration.test.ts": true,
     "tests/unit/cli/prompts.test.ts": true,