@estiva-app/ui 0.35.2 → 0.37.0

package/dist/gates/chunk-DBMUQAR6.js

@@ -1,607 +0,0 @@
-#!/usr/bin/env node
-import {
-  repositoryOf
-} from "./chunk-YKZXKVR2.js";
-
-// src/gates/count.ts
-import { existsSync, readFileSync, writeFileSync } from "node:fs";
-import { createRequire } from "node:module";
-import { join, relative } from "node:path";
-import { pathToFileURL } from "node:url";
-import { APP_RULE_IDS, countGates, PACKAGE_RULE_IDS } from "../eslint/index.js";
-async function eslintFrom(root) {
-  const resolved = createRequire(join(root, "package.json")).resolve("eslint");
-  return (await import(pathToFileURL(resolved).href)).ESLint;
-}
-async function writeGateCount({ root = process.cwd(), repo, audience = "app", config = "eslint.gates.config.js" }) {
-  const out = join(root, ".gates-count.json");
-  const ESLint = await eslintFrom(root);
-  const eslint = new ESLint({
-    cwd: root,
-    overrideConfigFile: join(root, config),
-    overrideConfig: { settings: { estiva: { reportEscapes: true } } }
-  });
-  const { rules, disabled } = countGates(await eslint.lintFiles(["."]), audience === "package" ? PACKAGE_RULE_IDS : APP_RULE_IDS);
-  const previous = existsSync(out) ? JSON.parse(readFileSync(out, "utf8")) : null;
-  const changed = JSON.stringify(previous?.rules) !== JSON.stringify(rules);
-  if (changed) {
-    const count = { schemaVersion: 1, repo, generatedAt: (/* @__PURE__ */ new Date()).toISOString(), rules };
-    writeFileSync(out, `${JSON.stringify(count, null, 2)}
-`);
-  }
-  const lines = [changed ? ".gates-count.json: written" : ".gates-count.json: unchanged"];
-  for (const [id, c] of Object.entries(rules)) lines.push(`  ${id}: ${c.errors} errors, ${c.warnings} warnings, ${c.escapes} escapes`);
-  const failures = [];
-  if (disabled.length > 0) {
-    failures.push("", "An eslint-disable switched a gate rule off. Write the reason above the element instead: // @estiva-escape: <reason>");
-    for (const d of disabled) failures.push(`  ${relative(root, d.filePath)}:${d.line}  ${d.ruleId}`);
-  }
-  return { rules, disabled, changed, lines, failures };
-}
-
-// src/gates/hook.ts
-import { spawnSync } from "node:child_process";
-import { createHash } from "node:crypto";
-import { existsSync as existsSync2, mkdirSync, readFileSync as readFileSync2, writeFileSync as writeFileSync2 } from "node:fs";
-import { createRequire as createRequire2 } from "node:module";
-import { tmpdir } from "node:os";
-import { basename, isAbsolute, join as join2, relative as relative2, resolve, sep } from "node:path";
-import { fileURLToPath, pathToFileURL as pathToFileURL2 } from "node:url";
-import { countGates as countGates2 } from "../eslint/index.js";
-var PASS = { code: 0, message: "" };
-var APP_SOURCE = /^src\/.+\.[cm]?[jt]sx?$/;
-async function runHook({ root, app = ".", audience = "app", input, seen } = {}) {
-  let call;
-  try {
-    call = input ?? JSON.parse(readFileSync2(0, "utf8"));
-  } catch {
-    return PASS;
-  }
-  const args = call.tool_input ?? {};
-  if (typeof args.file_path !== "string") return PASS;
-  const top = root ?? process.env.CLAUDE_PROJECT_DIR ?? call.cwd ?? process.cwd();
-  const appDir = resolve(top, app);
-  const file = isAbsolute(args.file_path) ? args.file_path : resolve(call.cwd ?? top, args.file_path);
-  const rel = relative2(appDir, file).split(sep).join("/");
-  const source = audience === "package" ? /^src\/.+\.tsx$/ : APP_SOURCE;
-  if (rel.startsWith("../") || isAbsolute(rel) || !source.test(rel) || /\.test\.[cm]?[jt]sx?$/.test(rel) || /\.d\.[cm]?ts$/.test(rel)) return PASS;
-  const text = proposed(call.tool_name, args, file);
-  if (text === null) return PASS;
-  const resolved = createRequire2(join2(appDir, "package.json")).resolve("eslint");
-  const { ESLint } = await import(pathToFileURL2(resolved).href);
-  const config = join2(appDir, "eslint.gates.config.js");
-  const eslint = new ESLint({ cwd: appDir, overrideConfigFile: config });
-  const results = await eslint.lintText(text, { filePath: file });
-  const errors = results.flatMap((r) => r.messages.filter((m) => m.severity === 2 && m.ruleId));
-  const { disabled } = countGates2(results);
-  if (errors.length === 0 && disabled.length === 0) return searchFirst(call, file, text, appDir, top, seen) ?? PASS;
-  const shown = (p) => relative2(top, p).split(sep).join("/");
-  const lines = [`${shown(file)} was not written: the UI Guardrails refuse it (${shown(config)}).`];
-  for (const m of errors) lines.push(`  ${m.line}:${m.column}  ${m.message}${m.ruleId ? `  (${m.ruleId})` : ""}`);
-  const keep = audience === "package" ? "Keep it only" : "Keep the element only";
-  for (const d of disabled) lines.push(`  ${d.line}  an eslint-disable switches ${d.ruleId} off. ${keep} with its reason on the line above: // @estiva-escape: <reason>`);
-  return { code: 2, message: `${lines.join("\n")}
-` };
-}
-function newPart(tool, file, text) {
-  if (tool !== "Write" || existsSync2(file) || !file.endsWith(".tsx") || /\.stories\.tsx$/.test(file)) return null;
-  if (!/<\/[A-Za-z]|\/>/.test(text)) return null;
-  const named = /export\s+(?:default\s+)?(?:async\s+)?(?:function|const|class)\s+([A-Z][A-Za-z0-9]*)/.exec(text)?.[1];
-  if (named) return named;
-  return /export\s+default\s+function\s*\(/.test(text) ? basename(file, ".tsx") : null;
-}
-var wordsOf = (name) => name.replace(/([a-z0-9])([A-Z])/g, "$1 $2").replace(/([A-Z])([A-Z][a-z])/g, "$1 $2").toLowerCase();
-function findCommand() {
-  for (const at of ["../registry/cli.js", "../../dist/registry/cli.js"]) {
-    const path = fileURLToPath(new URL(at, import.meta.url));
-    if (existsSync2(path)) return path;
-  }
-  return null;
-}
-function searchFirst(call, file, text, appDir, top, seen) {
-  const part = newPart(call.tool_name, file, text);
-  const command = findCommand();
-  if (!part || !command) return null;
-  const folder = seen ?? join2(tmpdir(), "estiva-ui-search-first");
-  const mark = join2(folder, createHash("sha1").update(`${call.session_id ?? ""}
-${resolve(file)}`).digest("hex"));
-  if (existsSync2(mark)) return null;
-  const words = wordsOf(part);
-  const repo = basename(repositoryOf(appDir));
-  const run = spawnSync(process.execPath, [command, "find", ...words.split(" "), "--root", appDir, "--repo", repo, "--limit", "5"], { encoding: "utf8", timeout: 6e4 });
-  if (run.status !== 0 || !run.stdout.trim()) return null;
-  try {
-    mkdirSync(folder, { recursive: true });
-    writeFileSync2(mark, "");
-  } catch {
-    return null;
-  }
-  const shown = relative2(top, file).split(sep).join("/");
-  return {
-    code: 2,
-    message: `${shown} was not written yet: it adds a new part, ${part}. Search before building (UIG-20). What already exists for "${words}":
-
-${run.stdout.trim()}
-
-If one of these does the job, use it, and read its page first. If the words were wrong, run \`npm run ui:find <other words>\`. If nothing fits, tell the person, then write the file again: it goes through.
-`
-  };
-}
-function proposed(tool, args, file) {
-  if (tool === "Write") return typeof args.content === "string" ? args.content : null;
-  if (tool !== "Edit" || typeof args.old_string !== "string" || typeof args.new_string !== "string") return null;
-  const { old_string: from, new_string: to } = args;
-  const current = existsSync2(file) ? readFileSync2(file, "utf8") : "";
-  for (const text of [current, current.replace(/\r\n/g, "\n")]) {
-    if (!text.includes(from)) continue;
-    return args.replace_all === true ? text.split(from).join(to) : text.replace(from, () => to);
-  }
-  return null;
-}
-
-// src/gates/status.ts
-import { execFileSync, spawnSync as spawnSync2 } from "node:child_process";
-import { existsSync as existsSync3, readdirSync, readFileSync as readFileSync3, statSync } from "node:fs";
-import { createRequire as createRequire3 } from "node:module";
-import { join as join3, relative as relative3, resolve as resolve2 } from "node:path";
-import { pathToFileURL as pathToFileURL3 } from "node:url";
-var { version } = createRequire3(import.meta.url)("../../package.json");
-var ENGINE = `@estiva-app/ui@${version}`;
-var PASS2 = (detail) => ({ result: "pass", detail });
-var FAIL = (detail) => ({ result: "fail", detail });
-var PART = (detail) => ({ result: "part", detail });
-var UNKNOWN = (detail) => ({ result: "unknown", detail });
-var said = (e) => {
-  const err = e;
-  return { text: `${err.stdout ?? ""}${err.stderr ?? ""}`, message: String(err.message ?? e), code: err.code };
-};
-function helpers(ROOT) {
-  const abs = (rel) => resolve2(ROOT, rel);
-  const exists = (rel) => existsSync3(abs(rel));
-  const read = (rel) => readFileSync3(abs(rel), "utf8");
-  const git = (...a) => {
-    try {
-      return execFileSync("git", a, { cwd: ROOT, stdio: ["ignore", "pipe", "ignore"] }).toString().trim();
-    } catch {
-      return null;
-    }
-  };
-  const listFiles = (rel, test) => {
-    const out = [];
-    const walk = (dir) => {
-      if (!existsSync3(dir)) return;
-      for (const name of readdirSync(dir)) {
-        if (["node_modules", ".git", "dist", "storybook-static", ".verify-shots"].includes(name)) continue;
-        const p = join3(dir, name);
-        if (statSync(p).isDirectory()) walk(p);
-        else if (test(name, p)) out.push(relative3(ROOT, p).replace(/\\/g, "/"));
-      }
-    };
-    walk(abs(rel));
-    return out;
-  };
-  const escape = (s) => s.replace(/[.*+?^${}()|[\]\\]/g, "\\$&");
-  return {
-    PASS: PASS2,
-    FAIL,
-    PART,
-    UNKNOWN,
-    exists,
-    read,
-    listFiles,
-    // The registry bundle's own builder, loaded only when a check asks for it:
-    // it reads TypeScript with TypeScript, which the other checks never need.
-    async catalogue(appDir) {
-      try {
-        const { buildAppRegistry, validateRegistry } = await import("../registry/index.js");
-        const registry = buildAppRegistry({ root: abs(appDir) });
-        const problems = validateRegistry(registry);
-        if (problems.length) return FAIL(`${problems.length} problems, the first: ${problems[0]}`);
-        return PASS2(`${registry.entries.length} parts in ${registry.builtFrom.files} files, each described and sorted`);
-      } catch (error) {
-        const lines = String(error instanceof Error ? error.message : error).split("\n");
-        return FAIL(lines.length > 1 ? `${lines.length - 1} problems, the first: ${lines[1].trim()}` : lines[0]);
-      }
-    },
-    async contract(appDir) {
-      try {
-        const { buildAppRegistry, contractProblems, CONTRACT_KINDS } = await import("../registry/index.js");
-        const registry = buildAppRegistry({ root: abs(appDir) });
-        const problems = contractProblems(registry, abs(appDir));
-        const owed = registry.entries.filter((entry) => CONTRACT_KINDS.includes(entry.app?.class ?? "")).length;
-        if (problems.length) return FAIL(`${problems.length} of ${owed}; the first: ${problems[0]}`);
-        return PASS2(`all ${owed} reusable parts keep the usage-page contract and are drawn somewhere`);
-      } catch (error) {
-        return FAIL(String(error instanceof Error ? error.message : error).split("\n")[0]);
-      }
-    },
-    instructions(limit = 200) {
-      if (!exists("CLAUDE.md")) return FAIL("there is no CLAUDE.md");
-      const lines = (rel) => read(rel).replace(/\r?\n$/, "").split(/\r?\n/).length;
-      const imports = [...read("CLAUDE.md").matchAll(/^@(\S+)\s*$/gm)].map((m) => m[1]);
-      const missing = imports.filter((rel) => !exists(rel));
-      if (missing.length) return FAIL(`CLAUDE.md imports ${missing.join(", ")}, which is not there`);
-      const total = imports.reduce((n, rel) => n + lines(rel), lines("CLAUDE.md"));
-      const what = imports.length ? `CLAUDE.md with ${imports.join(", ")}` : "CLAUDE.md";
-      if (total >= limit) return FAIL(`${what}: ${total} lines load into every session; the limit is ${limit}`);
-      const rules = listFiles(".claude/rules", (n) => n.endsWith(".md"));
-      const unscoped = rules.filter((rel) => {
-        const front = /^---\r?\n([\s\S]*?)\r?\n---/.exec(read(rel));
-        return !front || !/^paths:/m.test(front[1]);
-      });
-      if (unscoped.length) return FAIL(`${unscoped.join(", ")} has no paths:, so it loads into every session`);
-      return PASS2(`${what}: ${total} lines in every session; ${rules.length ? `${rules.length} rule files, each loading only for its paths` : "no rule files"}`);
-    },
-    file(rel) {
-      return exists(rel) ? PASS2(`${rel} exists`) : FAIL(`${rel} does not exist`);
-    },
-    committed(rel) {
-      if (!exists(rel)) return FAIL(`${rel} does not exist`);
-      return git("ls-files", "--error-unmatch", rel) ? PASS2(`${rel} is committed`) : FAIL(`${rel} exists but is not committed`);
-    },
-    contains(rel, needle, label) {
-      if (!exists(rel)) return FAIL(`${rel} does not exist`);
-      const hit = typeof needle === "string" ? read(rel).includes(needle) : needle.test(read(rel));
-      return hit ? PASS2(label ?? `${rel} has ${needle}`) : FAIL(label ? `not yet: ${label}` : `${rel} has no ${needle}`);
-    },
-    lacks(rel, needle, label) {
-      if (!exists(rel)) return FAIL(`${rel} does not exist`);
-      const hit = typeof needle === "string" ? read(rel).includes(needle) : needle.test(read(rel));
-      return hit ? FAIL(`${rel} still has ${needle}`) : PASS2(label ?? `${rel} has no ${needle}`);
-    },
-    script(pkgRel, name) {
-      if (!exists(pkgRel)) return FAIL(`${pkgRel} does not exist`);
-      const cmd = JSON.parse(read(pkgRel)).scripts?.[name];
-      return cmd ? PASS2(`${pkgRel} runs "${name}": ${cmd}`) : FAIL(`${pkgRel} has no "${name}" script`);
-    },
-    async loads(rel) {
-      if (!exists(rel)) return FAIL(`${rel} does not exist`);
-      try {
-        const mod = await import(pathToFileURL3(abs(rel)).href);
-        return mod.default ? PASS2(`${rel} loads`) : FAIL(`${rel} has no default export`);
-      } catch (e) {
-        return FAIL(`${rel} does not load: ${said(e).message.split("\n")[0]}`);
-      }
-    },
-    /** A workflow step that runs `npm run <script>`; a regex matches the script name. */
-    ci(script) {
-      const files = listFiles(".github/workflows", (n) => /\.ya?ml$/.test(n));
-      const name = typeof script === "string" ? escape(script) : script.source;
-      const step = new RegExp(`npm run (${name})(?![\\w:-])`);
-      for (const f of files) {
-        const m = read(f).match(step);
-        if (m) return PASS2(`${f} runs npm run ${m[1]}`);
-      }
-      return FAIL(`no workflow runs npm run ${script}`);
-    },
-    /**
-     * A workflow job, by its id, with a step that runs `npm run <script>`. Branch
-     * protection requires a whole job by its name, so a required check needs the
-     * job, not the step somewhere (UIG-6). A job is a key two spaces in under
-     * `jobs:`, and ends at the next line that is not indented further; a comment
-     * line does not count.
-     */
-    ciJob(job, script) {
-      const files = listFiles(".github/workflows", (n) => /\.ya?ml$/.test(n));
-      const header = new RegExp(`^  ${escape(job)}:\\s*(#.*)?$`);
-      const step = new RegExp(`^(?!\\s*#).*npm run ${escape(script)}(?![\\w:-])`, "m");
-      for (const f of files) {
-        const lines = read(f).split(/\r?\n/);
-        const from = lines.findIndex((l) => /^jobs:\s*$/.test(l));
-        const start = from === -1 ? -1 : lines.findIndex((l, i) => i > from && header.test(l));
-        if (start === -1) continue;
-        const end = lines.findIndex((l, i) => i > start && /^ {0,2}\S/.test(l));
-        const body = lines.slice(start + 1, end === -1 ? void 0 : end).join("\n");
-        return step.test(body) ? PASS2(`${f}: the job ${job} runs npm run ${script}`) : FAIL(`${f}: the job ${job} does not run npm run ${script}`);
-      }
-      return FAIL(`no workflow has a job ${job}`);
-    },
-    hook(settingsRel, needle) {
-      if (!exists(settingsRel)) return FAIL(`${settingsRel} does not exist`);
-      let s;
-      try {
-        s = JSON.parse(read(settingsRel));
-      } catch {
-        return FAIL(`${settingsRel} is not valid JSON`);
-      }
-      const entries = (s.hooks?.PreToolUse ?? []).flatMap((m) => (m.hooks ?? []).map((x) => ({ matcher: m.matcher ?? "", command: x.command ?? "" })));
-      const hit = entries.find((e) => e.command.includes(needle));
-      if (!hit) return FAIL(entries.length ? `${settingsRel} has PreToolUse hooks, none running ${needle}` : `${settingsRel} has no PreToolUse hook`);
-      let matches;
-      try {
-        matches = hit.matcher === "" || hit.matcher === "*" || new RegExp(`^(?:${hit.matcher})$`).test("Write");
-      } catch {
-        return FAIL(`${settingsRel}: the hook's matcher "${hit.matcher}" is not a pattern`);
-      }
-      if (!matches) return FAIL(`${settingsRel}: the hook runs only for "${hit.matcher}", never for a Write`);
-      const top = ROOT.split("\\").join("/");
-      const app = /--app\s+("?)([^"\s]+)\1/.exec(hit.command)?.[2] ?? ".";
-      const input = JSON.stringify({
-        hook_event_name: "PreToolUse",
-        cwd: top,
-        tool_name: "Write",
-        tool_input: { file_path: `${resolve2(ROOT, app, "src", "__gates_hook_probe__.tsx").split("\\").join("/")}`, content: 'export function Probe() {\n  return <div><button type="button">x</button></div>\n}\n' }
-      });
-      const command = hit.command.replace(/\$\{?CLAUDE_PROJECT_DIR\}?/g, top);
-      const run = spawnSync2(command, { cwd: ROOT, input, shell: true, encoding: "utf8", timeout: 12e4, env: { ...process.env, CLAUDE_PROJECT_DIR: top } });
-      if (run.status === 2 && /<button>/.test(`${run.stderr ?? ""}${run.stdout ?? ""}`)) return PASS2(`${settingsRel}: the hook ran and refused a raw <button> (exit 2)`);
-      const why = `${run.stderr ?? ""}${run.stdout ?? ""}`.trim().split(/\r?\n/)[0] || (run.error ? String(run.error.message) : "no output");
-      return FAIL(`${settingsRel}: the hook ran and let a raw <button> through (exit ${run.status ?? "none"}): ${why}`);
-    },
-    json(rel, test = () => true, label) {
-      if (!exists(rel)) return FAIL(`${rel} does not exist`);
-      let data;
-      try {
-        data = JSON.parse(read(rel));
-      } catch {
-        return FAIL(`${rel} is not valid JSON`);
-      }
-      if (!git("ls-files", "--error-unmatch", rel)) return FAIL(`${rel} is not committed`);
-      return test(data) ? PASS2(label ?? `${rel} is committed and parses`) : FAIL(`${rel} parses, but ${label ?? "fails its test"}`);
-    },
-    /** Lints a line of code that is never written to disk, the way the hook will. */
-    async lint({ cwd = ".", config, file, code, expect, mentions }) {
-      const cfg = join3(cwd, config);
-      if (!exists(cfg)) return FAIL(`${cfg} does not exist`);
-      let ESLint;
-      try {
-        const req = createRequire3(join3(abs(cwd), "package.json"));
-        ({ ESLint } = await import(pathToFileURL3(req.resolve("eslint")).href));
-      } catch (e) {
-        return UNKNOWN(`could not load eslint from ${cwd}: ${said(e).message.split("\n")[0]}`);
-      }
-      let results;
-      try {
-        const eslint = new ESLint({ cwd: abs(cwd), overrideConfigFile: config });
-        results = await eslint.lintText(code, { filePath: join3(abs(cwd), file), warnIgnored: true });
-      } catch (e) {
-        return UNKNOWN(`${cfg} could not lint ${file}: ${said(e).message.split("\n")[0]}`);
-      }
-      const messages = results.flatMap((r) => r.messages);
-      const ignored = messages.some((m) => /ignored/i.test(m.message) && !m.ruleId);
-      const fatal = messages.find((m) => m.fatal && !/ignored/i.test(m.message));
-      if (fatal) return UNKNOWN(`${file} did not parse: ${fatal.message}`);
-      const want = expect === "error" ? 2 : expect === "warning" ? 1 : 0;
-      if (want === 0) {
-        const any = messages.filter((m) => m.ruleId && m.severity === 2);
-        return any.length ? FAIL(`${file} gets an error it should not: ${any[0].message}`) : PASS2(`${file}: no error${ignored ? " (not linted)" : ""}`);
-      }
-      if (ignored) return FAIL(`${cfg} does not lint ${file}`);
-      const hit = messages.find((m) => m.ruleId && m.severity === want && (!mentions || m.message.includes(mentions)));
-      const kind = want === 2 ? "error" : "warning";
-      return hit ? PASS2(`${file} gets ${want === 2 ? "an" : "a"} ${kind}: ${hit.message}`) : FAIL(`${file} gets no ${kind}${mentions ? ` naming ${mentions}` : ""}`);
-    },
-    /**
-     * A GitHub setting, not a file, so it is asked of GitHub: the checks a merge
-     * into the default branch must pass, from the rulesets in force on it
-     * (`rules/branches/<branch>`, which anyone who can read the repository may
-     * see) and from classic protection as `branches/<branch>` reports it. Not
-     * `branches/<branch>/protection`: GitHub answers "Not Found" there to anyone
-     * who is not an admin, and it knows nothing of rulesets (UIG-6).
-     */
-    protectedBranch(pattern) {
-      const url = git("remote", "get-url", "origin");
-      const slug = url?.match(/github\.com[:/](.+?)(?:\.git)?$/)?.[1];
-      if (!slug) return UNKNOWN("no GitHub remote");
-      const branch = (git("symbolic-ref", "--short", "refs/remotes/origin/HEAD") ?? "origin/main").replace(/^origin\//, "");
-      const ask = (path) => JSON.parse(execFileSync("gh", ["api", path], { stdio: ["ignore", "pipe", "pipe"], timeout: 2e4 }).toString());
-      let rules;
-      let classic;
-      try {
-        rules = ask(`repos/${slug}/rules/branches/${branch}`);
-        classic = ask(`repos/${slug}/branches/${branch}`).protection?.required_status_checks;
-      } catch (e) {
-        const s = said(e);
-        return UNKNOWN(`could not ask GitHub (${s.code === "ENOENT" ? "gh is not installed" : s.text.split("\n")[0] || s.message})`);
-      }
-      const names = [
-        ...rules.filter((r) => r.type === "required_status_checks").flatMap((r) => r.parameters?.required_status_checks ?? []).map((c) => c.context),
-        ...classic?.contexts ?? [],
-        ...(classic?.checks ?? []).map((c) => c.context)
-      ];
-      const hit = names.find((n) => pattern.test(n));
-      if (hit) return PASS2(`${slug} ${branch} requires "${hit}"`);
-      return FAIL(names.length ? `${slug} ${branch} requires ${names.map((n) => `"${n}"`).join(", ")}, none matching ${pattern}` : `${slug} ${branch} requires no check to merge`);
-    },
-    gh(args, label) {
-      try {
-        execFileSync("gh", args, { stdio: ["ignore", "pipe", "pipe"], timeout: 2e4 });
-        return PASS2(label);
-      } catch (e) {
-        const s = said(e);
-        if (/could not resolve|not found|HTTP 404/i.test(s.text)) return FAIL(`not yet: ${label}`);
-        return UNKNOWN(`could not ask GitHub (${s.code === "ENOENT" ? "gh is not installed" : s.text.split("\n")[0] || s.message})`);
-      }
-    },
-    /** How many of `files` pass `test`: all is a pass, some is a part. */
-    share(files, test, label) {
-      if (!files.length) return FAIL(`no files to check for: ${label}`);
-      const ok = files.filter(test).length;
-      const detail = `${ok} of ${files.length}: ${label}`;
-      return ok === files.length ? PASS2(detail) : ok ? PART(detail) : FAIL(detail);
-    }
-  };
-}
-var STATUS = { done: "\u2705", started: "\u{1F6A7}", none: "\u2B1C", unknown: "\u2754" };
-function statusOf(checks) {
-  const n = (r) => checks.filter((c) => c.result === r).length;
-  const pass = n("pass"), part = n("part"), fail = n("fail"), unknown = n("unknown");
-  if (!checks.length) return "unknown";
-  if (pass === checks.length) return "done";
-  if (pass + part > 0) return fail === 0 && unknown > 0 ? "unknown" : "started";
-  return fail > 0 ? "none" : "unknown";
-}
-async function runRepo(ROOT, app, h) {
-  const checksFile = join3(ROOT, app, "scripts", "gates-checks.mjs");
-  const define = (await import(pathToFileURL3(checksFile).href)).default;
-  const spec = define(h);
-  const git = (...a) => {
-    try {
-      return execFileSync("git", a, { cwd: ROOT, stdio: ["ignore", "pipe", "ignore"] }).toString().trim();
-    } catch {
-      return null;
-    }
-  };
-  const rows = [];
-  for (const t of spec.tickets) {
-    const checks = [];
-    for (const c of t.checks ?? []) {
-      if (c.aggregate) continue;
-      let r;
-      try {
-        r = await c.run();
-      } catch (e) {
-        r = UNKNOWN(`the check threw: ${said(e).message}`);
-      }
-      checks.push({ repo: spec.repo, what: c.what, ...r });
-    }
-    rows.push({ ref: t.ref, title: t.title, owner: t.owner, checks });
-  }
-  return { spec, report: { schema: 1, repo: spec.repo, branch: git("rev-parse", "--abbrev-ref", "HEAD"), commit: git("rev-parse", "--short", "HEAD"), engine: ENGINE, rows } };
-}
-function runSibling(dir, app, shown) {
-  const copy = join3(dir, "scripts", "gates-status.mjs");
-  const installed = createRequire3(join3(dir, app, "package.json"));
-  let script = copy;
-  const args = ["--json"];
-  if (!existsSync3(copy)) {
-    try {
-      script = join3(installed.resolve("@estiva-app/ui/package.json"), "..", "dist", "gates", "cli.js");
-      args.unshift("status");
-      if (app !== ".") args.push("--app", app);
-    } catch {
-      return { error: `${shown} has neither its own gates-status.mjs nor @estiva-app/ui installed${app === "." ? "" : ` in ${app}`}` };
-    }
-    if (!existsSync3(script)) return { error: `${shown} has an @estiva-app/ui with no gates engine: install 0.21.0 or later` };
-  }
-  try {
-    const out = execFileSync(process.execPath, [script, ...args], { cwd: dir, stdio: ["ignore", "pipe", "pipe"], timeout: 3e5, maxBuffer: 16 * 1024 * 1024 });
-    return { report: JSON.parse(out.toString()) };
-  } catch (e) {
-    const err = e;
-    return { error: `its gates:status failed: ${String(err.stderr ?? err.message).split("\n").filter(Boolean).slice(-1)[0]}` };
-  }
-}
-function behindMain(dir) {
-  const git = (...a) => {
-    try {
-      return execFileSync("git", a, { cwd: dir, stdio: ["ignore", "pipe", "ignore"], timeout: 3e4 }).toString().trim();
-    } catch {
-      return null;
-    }
-  };
-  if (git("rev-parse", "--is-inside-work-tree") !== "true") return "";
-  const fetched = git("fetch", "-q", "origin") !== null;
-  const main = (git("symbolic-ref", "--short", "refs/remotes/origin/HEAD") ?? "origin/main").trim();
-  const count = Number(git("rev-list", "--count", `HEAD..${main}`));
-  const stale = fetched ? "" : " (could not fetch: compared with the last fetch)";
-  if (!Number.isFinite(count) || count === 0) return stale ? ` \xB7${stale}` : "";
-  return ` \xB7 \u26A0\uFE0F ${count} commit${count === 1 ? "" : "s"} behind ${main}${stale}: pull, or this reads old code`;
-}
-function pad(s, n) {
-  const len = [...s].length;
-  return len >= n ? s : s + " ".repeat(n - len);
-}
-function printRows(rows, { showOwner, detail }) {
-  const lines = [];
-  const width = Math.max(...rows.map((r) => [...r.title ?? ""].length));
-  for (const r of rows) {
-    const pass = r.checks.filter((c) => c.result === "pass").length;
-    const count = r.checks.length ? `${pass} of ${r.checks.length}` : "no checks here";
-    lines.push(`${STATUS[r.status ?? "unknown"]}  ${pad(r.ref, 7)} ${pad(r.title ?? "", width)}  ${showOwner ? pad(r.ownerRepo ?? "", 10) : ""}${count}`);
-    if (detail || r.status === "started" || r.status === "unknown") {
-      for (const c of r.checks) {
-        const mark = { pass: "\u2713", part: "\xBD", fail: "\u2717", unknown: "?" }[c.result];
-        lines.push(`        ${mark} ${showOwner ? `${pad(c.repo, 10)} ` : ""}${c.what} \u2014 ${c.detail}`);
-      }
-    }
-  }
-  return lines.join("\n");
-}
-function summary(rows) {
-  const n = (s) => rows.filter((r) => r.status === s).length;
-  return `${STATUS.done} ${n("done")} done \xB7 ${STATUS.started} ${n("started")} started \xB7 ${STATUS.none} ${n("none")} not started \xB7 ${STATUS.unknown} ${n("unknown")} could not check`;
-}
-async function runStatus({ root = process.cwd(), app = ".", json = false, detail = false } = {}) {
-  const ROOT = resolve2(root);
-  const h = helpers(ROOT);
-  const shown = (dir) => (relative3(ROOT, dir) || dir).replace(/\\/g, "/");
-  const { spec, report } = await runRepo(ROOT, app, h);
-  if (json) return JSON.stringify(report);
-  const out = [];
-  out.push("UI Guardrails \xB7 gates:status", "Read from the code. Nothing here is a hand-ticked list.", "");
-  out.push(`${pad(spec.repo, 10)} ${report.branch} @ ${report.commit}${behindMain(ROOT)}`);
-  if (!spec.all) {
-    const own = report.rows.filter((r) => r.owner).map((r) => ({ ...r, ownerRepo: spec.repo, status: statusOf(r.checks) }));
-    const parts = report.rows.filter((r) => !r.owner).map((r) => ({ ...r, ownerRepo: "", status: statusOf(r.checks) }));
-    out.push("", `Tickets ${spec.repo} owns (${own.length}):`, printRows(own, { showOwner: false, detail }));
-    out.push("", `Parts of tickets another repo owns, checked here (${parts.length}):`, printRows(parts, { showOwner: false, detail }));
-    out.push("", "For every ticket across the repos, run npm run gates:status in estiva-ui.");
-    return out.join("\n");
-  }
-  const reports = [report];
-  const found = [];
-  for (const s of spec.siblings ?? []) {
-    const dir = resolve2(ROOT, process.env[s.env] ?? s.path);
-    if (!existsSync3(join3(dir, "package.json"))) {
-      found.push({ name: s.name, note: `not found at ${shown(dir)} (set ${s.env} to point at it)`, missing: true });
-      continue;
-    }
-    const r = runSibling(dir, s.app ?? ".", shown(dir));
-    if (!r.report) {
-      found.push({ name: s.name, note: r.error ?? "no report", missing: true });
-      continue;
-    }
-    const copy = r.report.engine !== ENGINE ? r.report.engine.startsWith("@estiva-app/ui@") ? ` \xB7 on ${r.report.engine}'s engine` : " \xB7 runs its own copy of the status engine; UIG-32 moves it onto the package" : "";
-    found.push({ name: s.name, note: `${r.report.branch} @ ${r.report.commit}, found at ${shown(dir)}${copy}${behindMain(dir)}` });
-    reports.push(r.report);
-  }
-  for (const f of found) out.push(`${pad(f.name, 10)} ${f.note}`);
-  const problems = [];
-  const known = new Set(spec.all.map((t) => t.ref));
-  for (const rep of reports) {
-    for (const r of rep.rows.filter((r2) => !known.has(r2.ref))) problems.push(`${rep.repo} reports ${r.ref}, which is not one of the tickets`);
-  }
-  const rows = spec.all.map((t) => {
-    const pieces = reports.flatMap((rep) => rep.rows.filter((r) => r.ref === t.ref).map((r) => ({ rep, r })));
-    const claims = pieces.filter((p) => p.r.owner).map((p) => p.rep.repo);
-    const ownerMissing = found.some((f) => f.name === t.owner && f.missing);
-    if (!ownerMissing && (claims.length !== 1 || claims[0] !== t.owner)) {
-      problems.push(`${t.ref}: should be owned by ${t.owner}, is claimed by ${claims.join(" and ") || "no repo"}`);
-    }
-    for (const p of pieces.filter((p2) => !p2.r.owner && !(t.parts ?? []).includes(p2.rep.repo))) {
-      problems.push(`${t.ref}: ${p.rep.repo} checks a part of it, but the ticket list does not name ${p.rep.repo}`);
-    }
-    const checks = pieces.flatMap((p) => p.r.checks);
-    for (const f of found.filter((f2) => f2.missing)) {
-      if ((t.parts ?? []).includes(f.name) || t.owner === f.name) checks.push({ repo: f.name, what: `${f.name}'s part`, result: "unknown", detail: f.note });
-    }
-    return { ref: t.ref, title: t.title, ownerRepo: t.owner, checks, aggregate: t.aggregate };
-  });
-  for (const row of rows) row.status = statusOf(row.checks);
-  for (const row of rows.filter((r) => r.aggregate)) {
-    const others = rows.filter((r) => r !== row);
-    const done = others.filter((r) => r.status === "done").length;
-    row.checks.push({ repo: "all", what: "every other ticket is done", ...done === others.length ? PASS2(`${done} of ${others.length} done`) : FAIL(`${done} of ${others.length} done`) });
-    row.status = statusOf(row.checks);
-  }
-  out.push("", printRows(rows, { showOwner: true, detail }), "", summary(rows));
-  const owners = Object.entries(rows.reduce((a, r) => ({ ...a, [r.ownerRepo ?? ""]: (a[r.ownerRepo ?? ""] ?? 0) + 1 }), {})).map(([k, v]) => `${k} ${v}`).join(", ");
-  out.push(`${rows.length} tickets. Owned by ${owners}.`);
-  const unchecked = found.filter((f) => f.missing && spec.all.some((t) => t.owner === f.name)).map((f) => f.name);
-  if (problems.length) out.push(`\u26A0\uFE0F Ownership does not add up:
-  ${problems.join("\n  ")}`);
-  else if (unchecked.length) out.push(`\u2754 Ownership not fully checked: ${unchecked.join(" and ")} could not be read.`);
-  else out.push("\u2705 Each ticket is owned by exactly one repo, and every repo agrees.");
-  if (!detail) out.push("Add -- --detail to see every check.");
-  return out.join("\n");
-}
-
-export {
-  writeGateCount,
-  runHook,
-  ENGINE,
-  helpers,
-  runStatus
-};
-//# sourceMappingURL=chunk-DBMUQAR6.js.map