@codyswann/lisa 4.85.0 → 4.86.1

package/all/copy-overwrite/scripts/lib/completion-proof-content.mjs

@@ -362,45 +362,86 @@ export function validateObligations(record, scope, claims) {
   );
 }
 
-/** Use the same canonical parser/integrity implementation as the TS writer. */
+/**
+ * Whether one usage entry is the canonical Verify entry for this work item.
+ * @param {any} entry Parsed usage entry, if any.
+ * @param {string} ref Work-item reference.
+ * @param {any} context Provider context.
+ * @returns {boolean} True when the flow and artifact identity both match.
+ */
+function isVerifyEntryFor(entry, ref, context) {
+  const identity = String(entry?.artifactRef ?? "").replace(/^github:/, "");
+  const linear =
+    context.provider === "linear" &&
+    identity === `linear:${context.scope.split("/")[0]}/${ref}`;
+  return (
+    ["lisa-verify", "verify"].includes(entry?.flow) &&
+    (linear ||
+      identity === ref ||
+      identity === `https://github.com/${ref.replace("#", "/issues/")}`)
+  );
+}
+
+/**
+ * Use the same canonical parser/integrity implementation as the TS writer.
+ *
+ * Every comment on the work item is read, from any author. A `## Lisa Usage`
+ * section that is malformed or fails its integrity check therefore cannot be
+ * allowed to fail the whole authorization: one stray or hand-edited comment
+ * would otherwise turn a completed item into `invalid-proof`
+ * (CodySwannGT/lisa#4564). Such a section contributes no entries and is
+ * skipped, and an expected id is satisfied when ANY intact section carries the
+ * matching Verify entry, so a later conflicting copy cannot shadow it. Nothing
+ * is accepted that was not accepted before: every expected id still needs an
+ * intact, well-formed section holding the Verify entry for this exact item.
+ */
 export function validateVerifyUsage(documents, ref, expectedIds, context) {
   requireProof(
     Array.isArray(expectedIds) && expectedIds.length > 0,
     "Canonical Verify usage is missing."
   );
   const found = new Map();
-  for (const document of documents) {
-    const usage = section(document, "Lisa Usage");
+  let skipped = 0;
+  for (const [index, document] of documents.entries()) {
+    let usage;
+    try {
+      usage = section(document, "Lisa Usage");
+    } catch (error) {
+      // documents[0] is the work-item body; a duplicate heading there stays
+      // fatal. In a comment it is one more stray section to skip.
+      if (index === 0) throw error;
+      skipped += 1;
+      continue;
+    }
     if (!usage) continue;
     const canonical = `## Lisa Usage\n${usage}\n`;
     let parsed;
     try {
       parsed = parseLisaUsageSection(canonical);
     } catch {
-      requireProof(
-        false,
-        "The current canonical Verify usage section is malformed."
-      );
+      skipped += 1;
+      continue;
     }
     if (!parsed.range) continue;
-    requireProof(
-      verifyLisaUsageSectionIntegrity(canonical).ok,
-      "The canonical usage ledger failed its stored-surface integrity check."
-    );
-    for (const entry of parsed.entries) found.set(entry.entryId, entry);
+    if (!verifyLisaUsageSectionIntegrity(canonical).ok) {
+      skipped += 1;
+      continue;
+    }
+    for (const entry of parsed.entries) {
+      if (!found.has(entry.entryId)) found.set(entry.entryId, []);
+      found.get(entry.entryId).push(entry);
+    }
   }
+  const note =
+    skipped > 0
+      ? ` ${skipped} malformed or integrity-failing usage section(s) were ignored.`
+      : "";
   for (const id of expectedIds) {
-    const entry = found.get(id);
-    const identity = String(entry?.artifactRef ?? "").replace(/^github:/, "");
-    const linear =
-      context.provider === "linear" &&
-      identity === `linear:${context.scope.split("/")[0]}/${ref}`;
     requireProof(
-      ["lisa-verify", "verify"].includes(entry?.flow) &&
-        (linear ||
-          identity === ref ||
-          identity === `https://github.com/${ref.replace("#", "/issues/")}`),
-      `Canonical Verify usage entry ${id} is absent or belongs to another work item.`
+      (found.get(id) ?? []).some(entry =>
+        isVerifyEntryFor(entry, ref, context)
+      ),
+      `Canonical Verify usage entry ${id} is absent or belongs to another work item.${note}`
     );
     // acceptedAt/lifecycleSources attest the later native terminal event. They
     // are deliberately not prerequisites of the transition they describe.

package/all/copy-overwrite/scripts/lib/npm-update-hosted-hook.mjs

@@ -19,8 +19,13 @@ const ENTRY = fileURLToPath(import.meta.url);
 const PRELOAD = fileURLToPath(
   new URL("./npm-update-hook-preload.mjs", import.meta.url)
 );
+// Byte-for-byte the `-e` payload of `rails-prepush` in
+// rails/copy-overwrite/lefthook.yml. `hookEntry` matches it exactly, so any
+// edit to that lefthook command must be mirrored here; the regression test
+// `npm-update-hosted-hook-rails-inline.test.ts` reads the lefthook file and
+// fails when the two drift (CodySwannGT/lisa#4564).
 const RAILS_INLINE =
-  'try { const { main } = await import("./scripts/lisa-rails-prepush.mjs"); process.exitCode = await main(process.argv.slice(1)); } catch { console.error("Managed Rails push tooling is unavailable or damaged. Run full Lisa apply and retry; raw bootstrap errors are withheld."); process.exitCode = 1; }';
+  'try { const { main } = await import("./scripts/lisa-rails-prepush.mjs"); const rc = await main(process.argv.slice(1)); if (rc !== 0) console.error(`Rails pre-push refused (exit ${rc}). Retry the same git push command and inspect rails-prepush output for scanner and work-item details.`); process.exitCode = rc; } catch { console.error("Managed Rails push tooling is unavailable or damaged. Run full Lisa apply and retry; raw bootstrap errors are withheld."); process.exitCode = 1; }';
 
 /** Context carries no token; the broker independently retains its immutable read subject in parent memory. */
 export function hostedHookContext(file) {

package/all/copy-overwrite/scripts/lisa-hooks/parity-safety-net.sh

@@ -3475,12 +3475,28 @@ if [ -f "$rules_file" ]; then
     # here — before the remaining rules ran, and with an exit status that is
     # not a refusal. The `||` puts the pipeline in a condition context, where
     # a non-zero status is expected rather than fatal.
-    # Consume the whole input: grep -q can close an early match while printf
-    # is still writing, making pipefail report SIGPIPE instead of the match.
+    # A here-string, never a pipe. With `printf | grep` under pipefail, a grep
+    # that stops at its first match (`-q`, and GNU grep whose stdout is
+    # /dev/null, which it treats as `-q`) closes the pipe while printf is still
+    # writing; printf takes SIGPIPE and the pipeline reports 141 instead of
+    # grep's 0. 141 lands in the `*)` arm below and a rule that MATCHED was
+    # reported as an invalid regex and not enforced (CodySwannGT/lisa#4564).
+    # A here-string has no writer process, so the status is grep's alone.
+    #
+    # The here-string is staged by the shell (a pipe, or a temp file for a
+    # large body or on Bash 3.2), and that staging can fail: no temp space,
+    # a file-size limit. A failed redirection on a bare `grep … <<<` returns
+    # 1, the same status as "no match", so the rule would silently pass. The
+    # brace group separates the two: grep's own status is captured INSIDE it,
+    # so the group itself only fails when the redirection could not be set up.
     rule_status=0
-    printf '%s' "$custom_command_str" | grep -Ei -- "$rule" >/dev/null || rule_status=$?
+    { grep -qEi -- "$rule" || rule_status=$?; } <<<"$custom_command_str" \
+      || rule_status=unstaged
     case "$rule_status" in
       0) block "matched a project custom safety rule (${rules_file##*/}): $rule" ;;
+      # Fail closed: the rule could not be evaluated at all, which is not the
+      # same thing as the rule not matching.
+      unstaged) block "could not stage the command to check project custom safety rule (${rules_file##*/}): $rule" ;;
       1) ;; # no match
       # grep exits 2 on a malformed ERE. Treated as no-match before, so a typo
       # in a project's rules file silently disabled that rule — a guard the

package/all/copy-overwrite/scripts/npm-updater-helper-graph.json

@@ -103,7 +103,7 @@
       "children": []
     },
     "lib/completion-proof-content.mjs": {
-      "sha256": "78b34223d054913c2e900830070cbb1fb2dc267423ec458ae76553ceed0d38c6",
+      "sha256": "679702f6e3cce3919e01c79fe5016d3215f15b067bcab2fb9eeffb0350e7c64f",
       "staticImports": [
         "lib/completion-proof-shape.mjs",
         "lib/usage-ledger-integrity.mjs",
@@ -733,7 +733,7 @@
       "children": []
     },
     "lib/npm-update-hosted-hook.mjs": {
-      "sha256": "0e9cf3bf55b9b979d22553f01ad4d17c0a85058b2b87657bd3126b9034e9f8c1",
+      "sha256": "801b41f0f3f455c08b4e86a64f076190a5f245492959a154d70b897dd0d60a31",
       "staticImports": [
         "lib/npm-update-contract.mjs",
         "lib/npm-update-invariants.mjs",

package/dist/cli/doctor-session-manager-pending.d.ts

@@ -0,0 +1,17 @@
+import { type Finding } from "./doctor-session-manager-trust.js";
+/** What the pending-human scan adds to the check. */
+export interface PendingHumanReport {
+    /** One line listing the waiting items, or undefined when there are none. */
+    readonly note: string | undefined;
+    readonly findings: readonly Finding[];
+}
+/**
+ * List the items pending a human and warn about unmarked ones.
+ * @param targetPath - Project root
+ * @param block - Merged `sessionManager` block
+ * @param read - Text reader
+ * @param now - Clock
+ * @returns The note and findings
+ */
+export declare function pendingHumanReport(targetPath: string, block: Record<string, unknown>, read: (file: string) => Promise<string>, now: () => Date): Promise<PendingHumanReport>;
+//# sourceMappingURL=doctor-session-manager-pending.d.ts.map

package/dist/cli/doctor-session-manager-pending.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"doctor-session-manager-pending.d.ts","sourceRoot":"","sources":["../../src/cli/doctor-session-manager-pending.ts"],"names":[],"mappings":"AAiBA,OAAO,EACL,KAAK,OAAO,EAGb,MAAM,mCAAmC,CAAC;AAgB3C,qDAAqD;AACrD,MAAM,WAAW,kBAAkB;IACjC,4EAA4E;IAC5E,QAAQ,CAAC,IAAI,EAAE,MAAM,GAAG,SAAS,CAAC;IAClC,QAAQ,CAAC,QAAQ,EAAE,SAAS,OAAO,EAAE,CAAC;CACvC;AA0ED;;;;;;;GAOG;AACH,wBAAsB,kBAAkB,CACtC,UAAU,EAAE,MAAM,EAClB,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC9B,IAAI,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,OAAO,CAAC,MAAM,CAAC,EACvC,GAAG,EAAE,MAAM,IAAI,GACd,OAAO,CAAC,kBAAkB,CAAC,CAgC7B"}

package/dist/cli/doctor-session-manager-pending.js

@@ -0,0 +1,130 @@
+/**
+ * Items waiting on a human, for the session-manager doctor check
+ * (CodySwannGT/lisa#4555, part 3).
+ *
+ * The manager marks an item that needs a person and keeps dispatching others.
+ * Doctor lists what is waiting so an operator sees it without the tracker, and
+ * warns about one failure only it can see from outside: a question recorded in
+ * the ledger more than one cycle `interval` ago whose tracker mark was never
+ * read back (`markedAt: null`). The manager records the question before it
+ * writes the mark, so this is a cycle that crashed or was stopped mid-way and
+ * has not finished the job since, and nobody on the tracker knows the item is
+ * waiting.
+ *
+ * Only the ref, kind and age are printed, never the question text: it came
+ * from a worker or a ticket and could carry anything.
+ */
+import * as path from "node:path";
+import { isRecord, readJson, } from "./doctor-session-manager-trust.js";
+/** The cycle interval when `sessionManager.interval` is absent. */
+const DEFAULT_INTERVAL_MS = 5 * 60_000;
+const MINUTE_MS = 60_000;
+const HOUR_MS = 60 * MINUTE_MS;
+const DAY_MS = 24 * HOUR_MS;
+const UNIT_MS = {
+    s: 1000,
+    m: MINUTE_MS,
+    h: HOUR_MS,
+    d: DAY_MS,
+};
+/**
+ * Parse a cycle interval such as `5m`; anything else is the default.
+ * @param value - `sessionManager.interval`
+ * @returns Interval in milliseconds
+ */
+function intervalMs(value) {
+    const match = typeof value === "string" ? /^(\d+)([smhd])$/.exec(value) : null;
+    if (!match)
+        return DEFAULT_INTERVAL_MS;
+    return Number(match[1]) * (UNIT_MS[match[2] ?? "m"] ?? MINUTE_MS);
+}
+/**
+ * A short age such as `3h` or `20m`.
+ * @param ms - Age in milliseconds
+ * @returns Age text
+ */
+function age(ms) {
+    if (ms >= DAY_MS)
+        return `${Math.floor(ms / DAY_MS)}d`;
+    if (ms >= HOUR_MS)
+        return `${Math.floor(ms / HOUR_MS)}h`;
+    return `${Math.max(0, Math.floor(ms / MINUTE_MS))}m`;
+}
+/**
+ * The waiting items in a parsed ledger, oldest first.
+ * @param ledger - Parsed ledger.json
+ * @param now - Current time in ms
+ * @returns Waiting items
+ */
+function waitingItems(ledger, now) {
+    const items = isRecord(ledger.items) ? ledger.items : {};
+    const rows = Object.entries(items).flatMap(([ref, item]) => {
+        const question = isRecord(item) ? item.pendingQuestion : undefined;
+        if (!isRecord(question))
+            return [];
+        const asked = Date.parse(String(question.askedAt ?? ""));
+        return [
+            {
+                ref,
+                kind: typeof question.kind === "string" ? question.kind : "worker-question",
+                ageMs: Number.isNaN(asked) ? 0 : now - asked,
+                marked: typeof question.markedAt === "string",
+            },
+        ];
+    });
+    return [...rows].sort((a, b) => b.ageMs - a.ageMs);
+}
+/**
+ * Why the ledger could not be loaded: unparseable JSON, or a read that
+ * failed (permissions, a directory in its place), told apart so the
+ * operator fixes the right thing. Only the error code is shown.
+ * @param error - What reading or parsing threw
+ * @returns Phrase completing "<file> …"
+ */
+function ledgerProblem(error) {
+    if (error instanceof SyntaxError)
+        return "is not valid JSON";
+    const code = isRecord(error) && typeof error.code === "string" ? error.code : undefined;
+    return code === undefined
+        ? "could not be read"
+        : `could not be read (${code})`;
+}
+/**
+ * List the items pending a human and warn about unmarked ones.
+ * @param targetPath - Project root
+ * @param block - Merged `sessionManager` block
+ * @param read - Text reader
+ * @param now - Clock
+ * @returns The note and findings
+ */
+export async function pendingHumanReport(targetPath, block, read, now) {
+    const file = path.join(targetPath, ".lisa", "session-manager", "ledger.json");
+    const loaded = await readJson(read, file).then(value => ({ ledger: value, problem: undefined }), (error) => ({ ledger: undefined, problem: ledgerProblem(error) }));
+    if (loaded.problem !== undefined) {
+        return {
+            note: undefined,
+            findings: [
+                {
+                    status: "warn",
+                    text: `${file} ${loaded.problem}, so doctor cannot list the items waiting on a human; the manager also refuses it until it is repaired`,
+                },
+            ],
+        };
+    }
+    const ledger = loaded.ledger;
+    const waiting = ledger === undefined ? [] : waitingItems(ledger, now().getTime());
+    if (waiting.length === 0)
+        return { note: undefined, findings: [] };
+    const limit = intervalMs(block.interval);
+    const unmarked = waiting.filter(item => !item.marked && item.ageMs > limit);
+    return {
+        note: `${waiting.length} pending a human: ${waiting
+            .map(item => `${item.ref} (${item.kind}, ${age(item.ageMs)})`)
+            .join(", ")}`,
+        findings: unmarked.map(item => ({
+            status: "warn",
+            text: `${item.ref} has waited ${age(item.ageMs)} for a human but was never marked human-needed on the tracker, so nobody there knows; check the manager is running (session-manager.mjs status) and let its next cycle mark it`,
+        })),
+    };
+}
+//# sourceMappingURL=doctor-session-manager-pending.js.map

package/dist/cli/doctor-session-manager-pending.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"doctor-session-manager-pending.js","sourceRoot":"","sources":["../../src/cli/doctor-session-manager-pending.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AACH,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAClC,OAAO,EAEL,QAAQ,EACR,QAAQ,GACT,MAAM,mCAAmC,CAAC;AAE3C,mEAAmE;AACnE,MAAM,mBAAmB,GAAG,CAAC,GAAG,MAAM,CAAC;AAEvC,MAAM,SAAS,GAAG,MAAM,CAAC;AACzB,MAAM,OAAO,GAAG,EAAE,GAAG,SAAS,CAAC;AAC/B,MAAM,MAAM,GAAG,EAAE,GAAG,OAAO,CAAC;AAE5B,MAAM,OAAO,GAAqC;IAChD,CAAC,EAAE,IAAI;IACP,CAAC,EAAE,SAAS;IACZ,CAAC,EAAE,OAAO;IACV,CAAC,EAAE,MAAM;CACV,CAAC;AASF;;;;GAIG;AACH,SAAS,UAAU,CAAC,KAAc;IAChC,MAAM,KAAK,GACT,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,iBAAiB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IACnE,IAAI,CAAC,KAAK;QAAE,OAAO,mBAAmB,CAAC;IACvC,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,IAAI,SAAS,CAAC,CAAC;AACpE,CAAC;AAED;;;;GAIG;AACH,SAAS,GAAG,CAAC,EAAU;IACrB,IAAI,EAAE,IAAI,MAAM;QAAE,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,GAAG,MAAM,CAAC,GAAG,CAAC;IACvD,IAAI,EAAE,IAAI,OAAO;QAAE,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,GAAG,OAAO,CAAC,GAAG,CAAC;IACzD,OAAO,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,EAAE,GAAG,SAAS,CAAC,CAAC,GAAG,CAAC;AACvD,CAAC;AAUD;;;;;GAKG;AACH,SAAS,YAAY,CAAC,MAA+B,EAAE,GAAW;IAChE,MAAM,KAAK,GAAG,QAAQ,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;IACzD,MAAM,IAAI,GAAG,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,EAAE,IAAI,CAAC,EAAE,EAAE;QACzD,MAAM,QAAQ,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC,CAAC,SAAS,CAAC;QACnE,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC;YAAE,OAAO,EAAE,CAAC;QACnC,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,QAAQ,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,CAAC;QACzD,OAAO;YACL;gBACE,GAAG;gBACH,IAAI,EACF,OAAO,QAAQ,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,iBAAiB;gBACvE,KAAK,EAAE,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,GAAG,KAAK;gBAC5C,MAAM,EAAE,OAAO,QAAQ,CAAC,QAAQ,KAAK,QAAQ;aAC9C;SACF,CAAC;IACJ,CAAC,CAAC,CAAC;IACH,OAAO,CAAC,GAAG,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC;AACrD,CAAC;AAED;;;;;;GAMG;AACH,SAAS,aAAa,CAAC,KAAc;IACnC,IAAI,KAAK,YAAY,WAAW;QAAE,OAAO,mBAAmB,CAAC;IAC7D,MAAM,IAAI,GACR,QAAQ,CAAC,KAAK,CAAC,IAAI,OAAO,KAAK,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;IAC7E,OAAO,IAAI,KAAK,SAAS;QACvB,CAAC,CAAC,mBAAmB;QACrB,CAAC,CAAC,sBAAsB,IAAI,GAAG,CAAC;AACpC,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACtC,UAAkB,EAClB,KAA8B,EAC9B,IAAuC,EACvC,GAAe;IAEf,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,OAAO,EAAE,iBAAiB,EAAE,aAAa,CAAC,CAAC;IAC9E,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,IAAI,CAC5C,KAAK,CAAC,EAAE,CAAC,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,SAAS,EAAE,CAAC,EAChD,CAAC,KAAc,EAAE,EAAE,CAAC,CAAC,EAAE,MAAM,EAAE,SAAS,EAAE,OAAO,EAAE,aAAa,CAAC,KAAK,CAAC,EAAE,CAAC,CAC3E,CAAC;IACF,IAAI,MAAM,CAAC,OAAO,KAAK,SAAS,EAAE,CAAC;QACjC,OAAO;YACL,IAAI,EAAE,SAAS;YACf,QAAQ,EAAE;gBACR;oBACE,MAAM,EAAE,MAAM;oBACd,IAAI,EAAE,GAAG,IAAI,IAAI,MAAM,CAAC,OAAO,wGAAwG;iBACxI;aACF;SACF,CAAC;IACJ,CAAC;IACD,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC;IAC7B,MAAM,OAAO,GACX,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,YAAY,CAAC,MAAM,EAAE,GAAG,EAAE,CAAC,OAAO,EAAE,CAAC,CAAC;IACpE,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC;IACnE,MAAM,KAAK,GAAG,UAAU,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;IACzC,MAAM,QAAQ,GAAG,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,MAAM,IAAI,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC,CAAC;IAC5E,OAAO;QACL,IAAI,EAAE,GAAG,OAAO,CAAC,MAAM,qBAAqB,OAAO;aAChD,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,GAAG,KAAK,IAAI,CAAC,IAAI,KAAK,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC;aAC7D,IAAI,CAAC,IAAI,CAAC,EAAE;QACf,QAAQ,EAAE,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;YAC9B,MAAM,EAAE,MAAe;YACvB,IAAI,EAAE,GAAG,IAAI,CAAC,GAAG,eAAe,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,gLAAgL;SAChO,CAAC,CAAC;KACJ,CAAC;AACJ,CAAC"}

package/dist/cli/doctor-session-manager-token.d.ts

@@ -0,0 +1,69 @@
+import { type Finding } from "./doctor-session-manager-trust.js";
+/** Resolved inputs the Telegram findings read. */
+export interface TelegramContext {
+    readonly claudeDir: string;
+    readonly sharedDir: string;
+    readonly env: NodeJS.ProcessEnv;
+    readonly read: (file: string) => Promise<string>;
+    readonly statFile: (file: string) => Promise<{
+        readonly mode: number;
+    }>;
+    /** The configured secrets provider, or undefined when none (or `env`). */
+    readonly secretsProvider: string | undefined;
+    /** The provider secret name for this manager. */
+    readonly secretName: string;
+}
+/**
+ * The provider secret name for a manager: `TELEGRAM_BOT_TOKEN_<NAME>` with
+ * the name upper-snaked. Must agree with the session-manager CLI's
+ * `telegramSecretName` (token-store.mjs); a test pins the two together.
+ * @param managerName - `sessionManager.name`
+ * @returns Secret name
+ */
+export declare function telegramSecretNameFor(managerName: unknown): string;
+/**
+ * The secrets provider the session-manager CLI will use for this project, or
+ * undefined when it uses none (`env`, or no provider at all). Decided exactly
+ * the way the CLI's `loadTokenSecrets` does through `lisa-secrets-access`'s
+ * `readConfig`: only the committed `.lisa.config.json` counts (the local
+ * override is never read for `secrets`), its `secrets.provider` defaulting
+ * to `env`; with no committed file at all, the environment fallback
+ * (`LISA_TENANT` or `LISA_SECRETS_NAMESPACE` names a tenant, and
+ * `LISA_PROVIDER` / `LISA_SECRETS_PROVIDER` its provider, default
+ * `bitwarden`). A test pins this to the CLI. Known gap: with no config file
+ * at the root the CLI also looks under `LISA_PROJECT_DIR` /
+ * `CLAUDE_PROJECT_DIR`; doctor only looks at the project it was pointed at.
+ * @param targetPath - Project root
+ * @param read - Text reader
+ * @param env - Doctor's environment
+ * @returns Provider name, or undefined for none
+ */
+export declare function secretsProviderAt(targetPath: string, read: (file: string) => Promise<string>, env: NodeJS.ProcessEnv): Promise<string | undefined>;
+/**
+ * Resolve the configured state dir to an absolute path, expanding `~`.
+ * @param raw - Configured `notify.stateDir`
+ * @param home - Home directory
+ * @param projectRoot - Base for a relative path
+ * @returns Absolute path, or undefined when unset
+ */
+export declare function resolveStateDir(raw: unknown, home: string, projectRoot: string): string | undefined;
+/**
+ * The plaintext-token findings that hold with no notification channel too
+ * (the spec's "doctor flags any plaintext token file it finds"): an exported
+ * `TELEGRAM_BOT_TOKEN*` variable, by name only, and a token file in the
+ * shared Telegram state dir, by existence only (never read). The Telegram
+ * requirements themselves (state dir, plugin scope, `TELEGRAM_STATE_DIR`)
+ * are skipped, since no bot is configured.
+ * @param ctx - The shared dir, environment and mode reader
+ * @returns Findings
+ */
+export declare function plaintextTokenFindings(ctx: Pick<TelegramContext, "sharedDir" | "env" | "statFile">): Promise<readonly Finding[]>;
+/**
+ * Every Telegram finding: the state dir and its token file, the user-scope
+ * plugin and shared default dir, and exported Telegram variables.
+ * @param ctx - Resolved inputs
+ * @param stateDir - Absolute state dir, or undefined when unset
+ * @returns Findings
+ */
+export declare function telegramFindings(ctx: TelegramContext, stateDir: string | undefined): Promise<readonly Finding[]>;
+//# sourceMappingURL=doctor-session-manager-token.d.ts.map

package/dist/cli/doctor-session-manager-token.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"doctor-session-manager-token.d.ts","sourceRoot":"","sources":["../../src/cli/doctor-session-manager-token.ts"],"names":[],"mappings":"AA0BA,OAAO,EACL,KAAK,OAAO,EAIb,MAAM,mCAAmC,CAAC;AAY3C,kDAAkD;AAClD,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC,UAAU,CAAC;IAChC,QAAQ,CAAC,IAAI,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,OAAO,CAAC,MAAM,CAAC,CAAC;IACjD,QAAQ,CAAC,QAAQ,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,OAAO,CAAC;QAAE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IACxE,0EAA0E;IAC1E,QAAQ,CAAC,eAAe,EAAE,MAAM,GAAG,SAAS,CAAC;IAC7C,iDAAiD;IACjD,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;CAC7B;AAED;;;;;;GAMG;AACH,wBAAgB,qBAAqB,CAAC,WAAW,EAAE,OAAO,GAAG,MAAM,CAKlE;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,wBAAsB,iBAAiB,CACrC,UAAU,EAAE,MAAM,EAClB,IAAI,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,OAAO,CAAC,MAAM,CAAC,EACvC,GAAG,EAAE,MAAM,CAAC,UAAU,GACrB,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CAU7B;AAyBD;;;;;;GAMG;AACH,wBAAgB,eAAe,CAC7B,GAAG,EAAE,OAAO,EACZ,IAAI,EAAE,MAAM,EACZ,WAAW,EAAE,MAAM,GAClB,MAAM,GAAG,SAAS,CAMpB;AAuID;;;;;;;;;GASG;AACH,wBAAsB,sBAAsB,CAC1C,GAAG,EAAE,IAAI,CAAC,eAAe,EAAE,WAAW,GAAG,KAAK,GAAG,UAAU,CAAC,GAC3D,OAAO,CAAC,SAAS,OAAO,EAAE,CAAC,CAa7B;AAED;;;;;;GAMG;AACH,wBAAsB,gBAAgB,CACpC,GAAG,EAAE,eAAe,EACpB,QAAQ,EAAE,MAAM,GAAG,SAAS,GAC3B,OAAO,CAAC,SAAS,OAAO,EAAE,CAAC,CAM7B"}