@codyswann/lisa 4.6.6 → 4.6.8

package/dist/cli/workflow-moments.d.ts

@@ -0,0 +1,67 @@
+/** The moment `quality.yml` resolves gates at when a caller declares none. */
+export declare const DEFAULT_MOMENT = "pull-request";
+/**
+ * Strip YAML quoting and a trailing comment from an inline scalar.
+ * @param raw - The text after `key:`
+ * @returns The scalar's value
+ */
+export declare function scalar(raw: string): string;
+/**
+ * The `moment` declared among the keys sitting at one indentation.
+ *
+ * Scoped by indentation rather than taken from anywhere in the file: a
+ * workflow may call `quality.yml` twice with different moments, and attributing
+ * one job's moment to the other's tokens would produce a declaration that is
+ * legal for neither.
+ * @param lines - The workflow file's lines
+ * @param at - Index to scan outwards from
+ * @param indent - The indentation of the keys to scan
+ * @returns The declared moment, or the workflow's default
+ */
+export declare function momentFor(lines: string[], at: number, indent: string): string;
+/**
+ * Every workflow file in a project's `.github/workflows` directory.
+ * @param targetPath - Project root
+ * @returns Absolute paths, empty when the directory is absent
+ */
+export declare function workflowFiles(targetPath: string): Promise<string[]>;
+/** One job that reaches `quality.yml`, whether or not it passes `skip_jobs`. */
+export interface QualityCall {
+    /** Workflow file, relative to the project root. */
+    readonly file: string;
+    /** The moment it resolves, or null when an expression decides it. */
+    readonly moment: string | null;
+}
+/**
+ * Every job in a project that reaches `quality.yml`.
+ * @param targetPath - Project root
+ * @returns One entry per job, in workflow-file order
+ */
+export declare function qualityCalls(targetPath: string): Promise<QualityCall[]>;
+/** What else in the project resolves the moment a token's caller resolves. */
+export interface MomentContext {
+    /** The moment the caller resolves. */
+    readonly moment: string;
+    /** Every job resolving it, this caller included, named by workflow file. */
+    readonly callers: readonly string[];
+    /** Jobs whose moment an expression sets, so doctor cannot pin which it is. */
+    readonly unpinned: readonly string[];
+}
+/**
+ * The clause naming the jobs whose moment could not be pinned, if any.
+ * @param context - The moment and every job resolving it
+ * @returns A parenthetical clause, or the empty string
+ */
+export declare function unpinnedClause(context: MomentContext): string;
+/**
+ * Which jobs resolve one moment.
+ *
+ * A job whose moment an expression decides counts against every moment: it may
+ * be this one, and leaving it out would under-report the callers a declaration
+ * governs — the direction that produces the harmful advice.
+ * @param calls - Every job in the project reaching `quality.yml`
+ * @param moment - The moment to resolve callers for
+ * @returns The moment and the jobs resolving it
+ */
+export declare function momentContext(calls: readonly QualityCall[], moment: string): MomentContext;
+//# sourceMappingURL=workflow-moments.d.ts.map

package/dist/cli/workflow-moments.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"workflow-moments.d.ts","sourceRoot":"","sources":["../../src/cli/workflow-moments.ts"],"names":[],"mappings":"AAoBA,8EAA8E;AAC9E,eAAO,MAAM,cAAc,iBAAiB,CAAC;AAuB7C;;;;GAIG;AACH,wBAAgB,MAAM,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAI1C;AAmBD;;;;;;;;;;;GAWG;AACH,wBAAgB,SAAS,CAAC,KAAK,EAAE,MAAM,EAAE,EAAE,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,MAAM,CAS7E;AAgDD;;;;GAIG;AACH,wBAAsB,aAAa,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,CAQzE;AAED,gFAAgF;AAChF,MAAM,WAAW,WAAW;IAC1B,mDAAmD;IACnD,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,qEAAqE;IACrE,QAAQ,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;CAChC;AAqCD;;;;GAIG;AACH,wBAAsB,YAAY,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,WAAW,EAAE,CAAC,CAM7E;AAED,8EAA8E;AAC9E,MAAM,WAAW,aAAa;IAC5B,sCAAsC;IACtC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,4EAA4E;IAC5E,QAAQ,CAAC,OAAO,EAAE,SAAS,MAAM,EAAE,CAAC;IACpC,8EAA8E;IAC9E,QAAQ,CAAC,QAAQ,EAAE,SAAS,MAAM,EAAE,CAAC;CACtC;AAED;;;;GAIG;AACH,wBAAgB,cAAc,CAAC,OAAO,EAAE,aAAa,GAAG,MAAM,CAO7D;AAED;;;;;;;;;GASG;AACH,wBAAgB,aAAa,CAC3B,KAAK,EAAE,SAAS,WAAW,EAAE,EAC7B,MAAM,EAAE,MAAM,GACb,aAAa,CAYf"}

package/dist/cli/workflow-moments.js

@@ -0,0 +1,225 @@
+/**
+ * Which moment each job in a project's workflows resolves `quality.yml` gates
+ * at, and which jobs reach `quality.yml` at all.
+ *
+ * Split out of `doctor-skip-jobs-migration` because the two questions have
+ * different populations. That check reports the jobs passing `skip_jobs`; the
+ * jobs that decide whether its advice is SAFE are mostly the ones passing no
+ * `skip_jobs` at all, because a gate declaration is keyed by gate and moment in
+ * `.lisa.config.json` and therefore governs every job resolving that moment
+ * (CodySwannGT/lisa#3100).
+ *
+ * Matched as text rather than through a YAML parse, for the same reason
+ * `doctor-reusable-workflow-refs` does: a caller whose YAML is malformed still
+ * passes the input, and a parse failure would silently drop the file from the
+ * audit — reporting a migrated project because one file could not be read.
+ * @module cli/workflow-moments
+ */
+import { readdir, readFile } from "node:fs/promises";
+import * as path from "node:path";
+/** The moment `quality.yml` resolves gates at when a caller declares none. */
+export const DEFAULT_MOMENT = "pull-request";
+/** A caller's `moment` input, whatever quoting style it uses. */
+const MOMENT_INPUT = /^([ \t]{0,64})moment:[ \t]{0,64}(.{0,4096})$/;
+/** Any `uses:` line, with its indentation and its unparsed value. */
+const USES_INPUT = /^([ \t]{0,64})uses:[ \t]{0,64}(.{0,4096})$/;
+/**
+ * A `uses:` value reaching `quality.yml`, directly or through `release.yml`.
+ *
+ * `release.yml` counts because it forwards its own `moment` input straight on
+ * to `quality.yml`, so a job calling it resolves a `quality.yml` gate set just
+ * as directly as a job naming `quality.yml` itself.
+ */
+const QUALITY_WORKFLOW = /workflows\/(?:quality|release)\.ya?ml(?:@|$)/;
+/** The `with:` key — the sibling of `uses:` whose children carry `moment`. */
+const WITH_BLOCK = /^with:[ \t]{0,64}(?:#.{0,512})?$/;
+/** A `workflow_call` trigger, in either the block or the inline-list form. */
+const WORKFLOW_CALL = /^(?:[ \t]{1,64}workflow_call:|on:.{0,256}workflow_call)/;
+/**
+ * Strip YAML quoting and a trailing comment from an inline scalar.
+ * @param raw - The text after `key:`
+ * @returns The scalar's value
+ */
+export function scalar(raw) {
+    const withoutComment = /^(['"])(.*?)\1/.exec(raw.trim());
+    if (withoutComment)
+        return withoutComment[2] ?? "";
+    return raw.split("#")[0]?.trim() ?? "";
+}
+/**
+ * A predicate for "this line is still a key of the block sitting at `indent`".
+ *
+ * Blank lines count as inside so a block separated by one is not cut in half.
+ * @param lines - The workflow file's lines
+ * @param indent - The leading whitespace of the block's keys
+ * @returns The predicate
+ */
+function blockAt(lines, indent) {
+    return (index) => {
+        const line = lines[index];
+        if (line === undefined)
+            return false;
+        if (line.trim() === "")
+            return true;
+        return line.startsWith(indent) && !/^[ \t]/.test(line.slice(indent.length));
+    };
+}
+/**
+ * The `moment` declared among the keys sitting at one indentation.
+ *
+ * Scoped by indentation rather than taken from anywhere in the file: a
+ * workflow may call `quality.yml` twice with different moments, and attributing
+ * one job's moment to the other's tokens would produce a declaration that is
+ * legal for neither.
+ * @param lines - The workflow file's lines
+ * @param at - Index to scan outwards from
+ * @param indent - The indentation of the keys to scan
+ * @returns The declared moment, or the workflow's default
+ */
+export function momentFor(lines, at, indent) {
+    const inBlock = blockAt(lines, indent);
+    const declaredAt = (index) => {
+        const match = MOMENT_INPUT.exec(lines[index] ?? "");
+        return match && match[1] === indent ? scalar(match[2] ?? "") : null;
+    };
+    const scan = (index, step) => inBlock(index) ? (declaredAt(index) ?? scan(index + step, step)) : null;
+    return scan(at - 1, -1) ?? scan(at + 1, 1) ?? DEFAULT_MOMENT;
+}
+/**
+ * The indentation of a block's first child line.
+ * @param lines - The workflow file's lines
+ * @param from - Index to start looking at
+ * @param outer - The parent key's leading whitespace
+ * @returns The child indentation, or null when the block has no children
+ */
+function firstChildIndent(lines, from, outer) {
+    const line = lines[from];
+    if (line === undefined)
+        return null;
+    if (line.trim() === "")
+        return firstChildIndent(lines, from + 1, outer);
+    const lead = /^[ \t]{0,128}/.exec(line)?.[0] ?? "";
+    return lead.length > outer.length && lead.startsWith(outer) ? lead : null;
+}
+/**
+ * The moment one `uses:` call resolves gates at.
+ *
+ * `with:` is a sibling key of `uses:` inside the same job and `moment:` is one
+ * of its children, so this locates the sibling `with:` and then reuses the
+ * indentation-scoped scan `momentFor` performs around a `skip_jobs` line.
+ * @param lines - The workflow file's lines
+ * @param at - Index of the `uses:` line
+ * @param indent - That line's leading whitespace
+ * @returns The declared moment, or the workflow's default
+ */
+function momentForCall(lines, at, indent) {
+    const inBlock = blockAt(lines, indent);
+    const findWith = (index, step) => {
+        if (!inBlock(index))
+            return null;
+        if (WITH_BLOCK.test((lines[index] ?? "").slice(indent.length)))
+            return index;
+        return findWith(index + step, step);
+    };
+    const withAt = findWith(at - 1, -1) ?? findWith(at + 1, 1);
+    if (withAt === null)
+        return DEFAULT_MOMENT;
+    const children = firstChildIndent(lines, withAt + 1, indent);
+    return children === null
+        ? DEFAULT_MOMENT
+        : momentFor(lines, withAt, children);
+}
+/**
+ * Every workflow file in a project's `.github/workflows` directory.
+ * @param targetPath - Project root
+ * @returns Absolute paths, empty when the directory is absent
+ */
+export async function workflowFiles(targetPath) {
+    const dir = path.join(targetPath, ".github", "workflows");
+    const entries = await readdir(dir).catch(() => undefined);
+    if (entries === undefined)
+        return [];
+    return entries
+        .filter(name => /\.ya?ml$/.test(name))
+        .sort((left, right) => left.localeCompare(right))
+        .map(name => path.join(dir, name));
+}
+/**
+ * Every job in one workflow that reaches `quality.yml`.
+ *
+ * A workflow that is itself called by others (`on: workflow_call`) is skipped.
+ * `release.yml` is one, and it forwards whatever moment ITS caller passed — so
+ * counting it would invent a caller no repository ever triggers, and would name
+ * a file the operator cannot edit.
+ * @param targetPath - Project root
+ * @param file - Absolute path to the workflow
+ * @returns One entry per job reaching `quality.yml`
+ */
+async function qualityCallsIn(targetPath, file) {
+    const lines = (await readFile(file, "utf8").catch(() => "")).split("\n");
+    if (lines.some(line => WORKFLOW_CALL.test(line)))
+        return [];
+    return lines.flatMap((line, index) => {
+        const match = USES_INPUT.exec(line);
+        if (match === null)
+            return [];
+        if (!QUALITY_WORKFLOW.test(scalar(match[2] ?? "")))
+            return [];
+        const moment = momentForCall(lines, index, match[1] ?? "");
+        return [
+            {
+                file: path.relative(targetPath, file),
+                // An expression is not a moment. Reported as null so the advice counts
+                // this job against EVERY moment and says it could not be pinned —
+                // guessing the default instead would shrink the set of callers a
+                // declaration is known to govern, which is the direction that harms.
+                moment: moment.includes("${{") ? null : moment,
+            },
+        ];
+    });
+}
+/**
+ * Every job in a project that reaches `quality.yml`.
+ * @param targetPath - Project root
+ * @returns One entry per job, in workflow-file order
+ */
+export async function qualityCalls(targetPath) {
+    const files = await workflowFiles(targetPath);
+    const perFile = await Promise.all(files.map(file => qualityCallsIn(targetPath, file)));
+    return perFile.flat();
+}
+/**
+ * The clause naming the jobs whose moment could not be pinned, if any.
+ * @param context - The moment and every job resolving it
+ * @returns A parenthetical clause, or the empty string
+ */
+export function unpinnedClause(context) {
+    if (context.unpinned.length === 0)
+        return "";
+    return (` (${context.unpinned.join(", ")} builds its moment from an expression, ` +
+        "so doctor cannot tell which moment it resolves and counts it here rather " +
+        "than assuming it is a different one)");
+}
+/**
+ * Which jobs resolve one moment.
+ *
+ * A job whose moment an expression decides counts against every moment: it may
+ * be this one, and leaving it out would under-report the callers a declaration
+ * governs — the direction that produces the harmful advice.
+ * @param calls - Every job in the project reaching `quality.yml`
+ * @param moment - The moment to resolve callers for
+ * @returns The moment and the jobs resolving it
+ */
+export function momentContext(calls, moment) {
+    const byName = (left, right) => left.localeCompare(right);
+    const unpinned = calls.filter(call => call.moment === null);
+    return {
+        moment,
+        callers: calls
+            .filter(call => call.moment === null || call.moment === moment)
+            .map(call => call.file)
+            .sort(byName),
+        unpinned: [...new Set(unpinned.map(call => call.file))].sort(byName),
+    };
+}
+//# sourceMappingURL=workflow-moments.js.map

package/dist/cli/workflow-moments.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"workflow-moments.js","sourceRoot":"","sources":["../../src/cli/workflow-moments.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AACH,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AACrD,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAElC,8EAA8E;AAC9E,MAAM,CAAC,MAAM,cAAc,GAAG,cAAc,CAAC;AAE7C,iEAAiE;AACjE,MAAM,YAAY,GAAG,8CAA8C,CAAC;AAEpE,qEAAqE;AACrE,MAAM,UAAU,GAAG,4CAA4C,CAAC;AAEhE;;;;;;GAMG;AACH,MAAM,gBAAgB,GAAG,8CAA8C,CAAC;AAExE,8EAA8E;AAC9E,MAAM,UAAU,GAAG,kCAAkC,CAAC;AAEtD,8EAA8E;AAC9E,MAAM,aAAa,GAAG,yDAAyD,CAAC;AAEhF;;;;GAIG;AACH,MAAM,UAAU,MAAM,CAAC,GAAW;IAChC,MAAM,cAAc,GAAG,gBAAgB,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC;IACzD,IAAI,cAAc;QAAE,OAAO,cAAc,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IACnD,OAAO,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;AACzC,CAAC;AAED;;;;;;;GAOG;AACH,SAAS,OAAO,CAAC,KAAe,EAAE,MAAc;IAC9C,OAAO,CAAC,KAAa,EAAW,EAAE;QAChC,MAAM,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC;QAC1B,IAAI,IAAI,KAAK,SAAS;YAAE,OAAO,KAAK,CAAC;QACrC,IAAI,IAAI,CAAC,IAAI,EAAE,KAAK,EAAE;YAAE,OAAO,IAAI,CAAC;QACpC,OAAO,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC;IAC9E,CAAC,CAAC;AACJ,CAAC;AAED;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,SAAS,CAAC,KAAe,EAAE,EAAU,EAAE,MAAc;IACnE,MAAM,OAAO,GAAG,OAAO,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;IACvC,MAAM,UAAU,GAAG,CAAC,KAAa,EAAiB,EAAE;QAClD,MAAM,KAAK,GAAG,YAAY,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC;QACpD,OAAO,KAAK,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IACtE,CAAC,CAAC;IACF,MAAM,IAAI,GAAG,CAAC,KAAa,EAAE,IAAY,EAAiB,EAAE,CAC1D,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,KAAK,CAAC,IAAI,IAAI,CAAC,KAAK,GAAG,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IAC1E,OAAO,IAAI,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC,IAAI,cAAc,CAAC;AAC/D,CAAC;AAED;;;;;;GAMG;AACH,SAAS,gBAAgB,CACvB,KAAe,EACf,IAAY,EACZ,KAAa;IAEb,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC;IACzB,IAAI,IAAI,KAAK,SAAS;QAAE,OAAO,IAAI,CAAC;IACpC,IAAI,IAAI,CAAC,IAAI,EAAE,KAAK,EAAE;QAAE,OAAO,gBAAgB,CAAC,KAAK,EAAE,IAAI,GAAG,CAAC,EAAE,KAAK,CAAC,CAAC;IACxE,MAAM,IAAI,GAAG,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IACnD,OAAO,IAAI,CAAC,MAAM,GAAG,KAAK,CAAC,MAAM,IAAI,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC;AAC5E,CAAC;AAED;;;;;;;;;;GAUG;AACH,SAAS,aAAa,CAAC,KAAe,EAAE,EAAU,EAAE,MAAc;IAChE,MAAM,OAAO,GAAG,OAAO,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;IACvC,MAAM,QAAQ,GAAG,CAAC,KAAa,EAAE,IAAY,EAAiB,EAAE;QAC9D,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC;YAAE,OAAO,IAAI,CAAC;QACjC,IAAI,UAAU,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;YAC5D,OAAO,KAAK,CAAC;QACf,OAAO,QAAQ,CAAC,KAAK,GAAG,IAAI,EAAE,IAAI,CAAC,CAAC;IACtC,CAAC,CAAC;IACF,MAAM,MAAM,GAAG,QAAQ,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,QAAQ,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC;IAC3D,IAAI,MAAM,KAAK,IAAI;QAAE,OAAO,cAAc,CAAC;IAC3C,MAAM,QAAQ,GAAG,gBAAgB,CAAC,KAAK,EAAE,MAAM,GAAG,CAAC,EAAE,MAAM,CAAC,CAAC;IAC7D,OAAO,QAAQ,KAAK,IAAI;QACtB,CAAC,CAAC,cAAc;QAChB,CAAC,CAAC,SAAS,CAAC,KAAK,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC;AACzC,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,UAAkB;IACpD,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,SAAS,EAAE,WAAW,CAAC,CAAC;IAC1D,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;IAC1D,IAAI,OAAO,KAAK,SAAS;QAAE,OAAO,EAAE,CAAC;IACrC,OAAO,OAAO;SACX,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;SACrC,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC;SAChD,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC,CAAC;AACvC,CAAC;AAUD;;;;;;;;;;GAUG;AACH,KAAK,UAAU,cAAc,CAC3B,UAAkB,EAClB,IAAY;IAEZ,MAAM,KAAK,GAAG,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IACzE,IAAI,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAAE,OAAO,EAAE,CAAC;IAC5D,OAAO,KAAK,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE;QACnC,MAAM,KAAK,GAAG,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACpC,IAAI,KAAK,KAAK,IAAI;YAAE,OAAO,EAAE,CAAC;QAC9B,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;YAAE,OAAO,EAAE,CAAC;QAC9D,MAAM,MAAM,GAAG,aAAa,CAAC,KAAK,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;QAC3D,OAAO;YACL;gBACE,IAAI,EAAE,IAAI,CAAC,QAAQ,CAAC,UAAU,EAAE,IAAI,CAAC;gBACrC,uEAAuE;gBACvE,kEAAkE;gBAClE,iEAAiE;gBACjE,qEAAqE;gBACrE,MAAM,EAAE,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM;aAC/C;SACF,CAAC;IACJ,CAAC,CAAC,CAAC;AACL,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,UAAkB;IACnD,MAAM,KAAK,GAAG,MAAM,aAAa,CAAC,UAAU,CAAC,CAAC;IAC9C,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,GAAG,CAC/B,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,cAAc,CAAC,UAAU,EAAE,IAAI,CAAC,CAAC,CACpD,CAAC;IACF,OAAO,OAAO,CAAC,IAAI,EAAE,CAAC;AACxB,CAAC;AAYD;;;;GAIG;AACH,MAAM,UAAU,cAAc,CAAC,OAAsB;IACnD,IAAI,OAAO,CAAC,QAAQ,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,CAAC;IAC7C,OAAO,CACL,KAAK,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,yCAAyC;QACzE,2EAA2E;QAC3E,sCAAsC,CACvC,CAAC;AACJ,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,aAAa,CAC3B,KAA6B,EAC7B,MAAc;IAEd,MAAM,MAAM,GAAG,CAAC,IAAY,EAAE,KAAa,EAAU,EAAE,CACrD,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC;IAC5B,MAAM,QAAQ,GAAG,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,MAAM,KAAK,IAAI,CAAC,CAAC;IAC5D,OAAO;QACL,MAAM;QACN,OAAO,EAAE,KAAK;aACX,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,MAAM,KAAK,IAAI,IAAI,IAAI,CAAC,MAAM,KAAK,MAAM,CAAC;aAC9D,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC;aACtB,IAAI,CAAC,MAAM,CAAC;QACf,QAAQ,EAAE,CAAC,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC;KACrE,CAAC;AACJ,CAAC"}

package/dist/core/upstream-evidence-manifest.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"upstream-evidence-manifest.d.ts","sourceRoot":"","sources":["../../src/core/upstream-evidence-manifest.ts"],"names":[],"mappings":"AACA,iFAAiF;AACjF,eAAO,MAAM,0BAA0B,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CA84EpE,CAAC;AAEL,4EAA4E;AAC5E,eAAO,MAAM,yBAAyB,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,IAAI,CAAC,CAskPjE,CAAC;AAEL,sFAAsF;AACtF,eAAO,MAAM,uBAAuB,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,IAAI,CAAC,CAk6I/D,CAAC"}
+{"version":3,"file":"upstream-evidence-manifest.d.ts","sourceRoot":"","sources":["../../src/core/upstream-evidence-manifest.ts"],"names":[],"mappings":"AACA,iFAAiF;AACjF,eAAO,MAAM,0BAA0B,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CA84EpE,CAAC;AAEL,4EAA4E;AAC5E,eAAO,MAAM,yBAAyB,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,IAAI,CAAC,CA2kPjE,CAAC;AAEL,sFAAsF;AACtF,eAAO,MAAM,uBAAuB,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,IAAI,CAAC,CAk6I/D,CAAC"}

package/dist/core/upstream-evidence-manifest.js

@@ -2,7 +2,7 @@
 /** Generated by scripts/generate-upstream-evidence-manifest.mjs. Do not edit. */
 export const UPSTREAM_EVIDENCE_MANIFEST = Object.freeze({
     "all/copy-contents/.gitattributes": "9d3831007e681186a3673e1037ef3fc82980cab2fc04e27c0868e562912c9e9f",
-    "all/copy-contents/gitignore": "8104ccd32d7e6137cae706511c5037d11d6b6045b8e2a9bb7b3a48a81c053cfa",
+    "all/copy-contents/gitignore": "06fc4bca36fabe2abc81e60b3e3886dcb9a0eacb4ae9d670beb2125a4eb4f850",
     "all/copy-overwrite/scripts/check-conflict-markers.mjs": "d7a689bcc122af7f38d1c536924fc2f3dcb503b09658ffc6035ccbe720d14d6b",
     "all/copy-overwrite/scripts/check-state-classification.mjs": "a72910f9885629dd6d8a739b900f5603e4b53d68ece64100a2a5647016b58e1e",
     "all/copy-overwrite/scripts/lib/bounded-spawn.mjs": "72e277ada531914d7bc51c3cb8dc67b8881aa817d96fa2f9f4d81668a3d3bbc1",
@@ -7192,6 +7192,7 @@ export const UPSTREAM_SURFACE_MANIFEST = Object.freeze({
     "src/cli/doctor-readiness-supply-chain-ruby.ts": true,
     "src/cli/doctor-readiness-supply-chain-scan.ts": true,
     "src/cli/doctor-readiness-supply-chain.ts": true,
+    "src/cli/doctor-readiness-tracking.ts": true,
     "src/cli/doctor-readiness-types.ts": true,
     "src/cli/doctor-readiness-workflows.ts": true,
     "src/cli/doctor-readiness-workspaces.ts": true,
@@ -7288,6 +7289,7 @@ export const UPSTREAM_SURFACE_MANIFEST = Object.freeze({
     "src/cli/update-cmd.ts": true,
     "src/cli/version-cmd.ts": true,
     "src/cli/version.ts": true,
+    "src/cli/workflow-moments.ts": true,
     "src/cli/workstation-cmd.ts": true,
     "src/codex/agent-installer.ts": true,
     "src/codex/agent-transformer.ts": true,
@@ -7805,12 +7807,14 @@ export const UPSTREAM_SURFACE_MANIFEST = Object.freeze({
     "tests/unit/cli/doctor-readiness-supply-chain-ruby.test.ts": true,
     "tests/unit/cli/doctor-readiness-supply-chain-workspaces.test.ts": true,
     "tests/unit/cli/doctor-readiness-supply-chain.test.ts": true,
+    "tests/unit/cli/doctor-readiness-tracking.test.ts": true,
     "tests/unit/cli/doctor-readiness-workflows.test.ts": true,
     "tests/unit/cli/doctor-readiness.test.ts": true,
     "tests/unit/cli/doctor-render.test.ts": true,
     "tests/unit/cli/doctor-reusable-workflow-refs.test.ts": true,
     "tests/unit/cli/doctor-serialize-legs-contract.test.ts": true,
     "tests/unit/cli/doctor-skip-jobs-migration.test.ts": true,
+    "tests/unit/cli/doctor-skip-jobs-moment-callers.test.ts": true,
     "tests/unit/cli/doctor-sonar.test.ts": true,
     "tests/unit/cli/doctor-traceability-gate.test.ts": true,
     "tests/unit/cli/doctor-worker-epoch.test.ts": true,
@@ -8560,6 +8564,7 @@ export const UPSTREAM_SURFACE_MANIFEST = Object.freeze({
     "tests/unit/strategies/queue-status-fixture-smoke-and-read-only.test.ts": true,
     "tests/unit/strategies/queue-status-prd-readers.test.ts": true,
     "tests/unit/strategies/queue-status-scaffold.test.ts": true,
+    "tests/unit/strategies/readiness-report-merge-exposure.test.ts": true,
     "tests/unit/strategies/readiness-rubric-contract.test.ts": true,
     "tests/unit/strategies/ready-role-filing-contract.test.ts": true,
     "tests/unit/strategies/rejection-detection-rule.test.ts": true,