@nifrajs/cli 2.10.0 → 2.12.0

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@nifrajs/cli",
-  "version": "2.10.0",
+  "version": "2.12.0",
   "description": "The nifra CLI - zero-config dev/build/start for a nifra app (`nifra dev`, `nifra build`, `nifra start`).",
   "keywords": [
     "bun",
@@ -25,6 +25,31 @@
       "bun": "./src/mcp-http.ts",
       "types": "./dist/mcp-http.d.ts",
       "default": "./dist/mcp-http.js"
+    },
+    "./diagnostics": {
+      "bun": "./src/diagnostics.ts",
+      "types": "./dist/diagnostics.d.ts",
+      "default": "./dist/diagnostics.js"
+    },
+    "./rules": {
+      "bun": "./src/rules/index.ts",
+      "types": "./dist/rules/index.d.ts",
+      "default": "./dist/rules/index.js"
+    },
+    "./fix-recipes": {
+      "bun": "./src/fix-recipes.ts",
+      "types": "./dist/fix-recipes.d.ts",
+      "default": "./dist/fix-recipes.js"
+    },
+    "./assure": {
+      "bun": "./src/assure.ts",
+      "types": "./dist/assure.d.ts",
+      "default": "./dist/assure.js"
+    },
+    "./work-graph": {
+      "bun": "./src/work-graph.ts",
+      "types": "./dist/work-graph.d.ts",
+      "default": "./dist/work-graph.js"
     }
   },
   "files": [
@@ -41,14 +66,14 @@
     "access": "public"
   },
   "dependencies": {
-    "@nifrajs/client": "2.10.0",
-    "@nifrajs/core": "2.10.0",
-    "@nifrajs/mcp": "2.10.0",
-    "@nifrajs/runner": "2.10.0",
-    "@nifrajs/schema": "2.10.0",
-    "@nifrajs/testing": "2.10.0",
-    "@nifrajs/web": "2.10.0",
-    "create-nifra": "2.10.0"
+    "@nifrajs/client": "2.12.0",
+    "@nifrajs/core": "2.12.0",
+    "@nifrajs/mcp": "2.12.0",
+    "@nifrajs/runner": "2.12.0",
+    "@nifrajs/schema": "2.12.0",
+    "@nifrajs/testing": "2.12.0",
+    "@nifrajs/web": "2.12.0",
+    "create-nifra": "2.12.0"
   },
   "repository": {
     "type": "git",

package/src/assure-hydration.ts

@@ -0,0 +1,606 @@
+import { existsSync, statSync } from "node:fs"
+import { mkdir, mkdtemp, readFile, rm, writeFile } from "node:fs/promises"
+import { tmpdir } from "node:os"
+import { basename, join, resolve } from "node:path"
+import { fileURLToPath, pathToFileURL } from "node:url"
+import { inProcessClient } from "@nifrajs/client"
+import { defineReplayFile } from "@nifrajs/core/replay"
+import { type AppLike, runApp } from "@nifrajs/runner"
+import { createWebApp, type RenderAdapter } from "@nifrajs/web"
+import { type BuildManifest, buildClient } from "@nifrajs/web/build"
+import { discoverRoutes } from "@nifrajs/web/fs"
+import type { BunPlugin } from "bun"
+import { collectDoctorResult } from "./doctor.ts"
+import { loadApp, resolvePlugins } from "./load.ts"
+
+const HYDRATION_ASSURANCE = Symbol.for("nifra.hydration.assurance")
+const SOURCE_GLOB = "**/*.{ts,tsx,js,jsx,vue,svelte,mdx}"
+const IGNORED = /(^|\/)(node_modules|dist|build|coverage|\.git|\.nifra)\//
+
+export interface HydrationResult {
+  readonly diagnostics: readonly import("./diagnostics.ts").Diagnostic[]
+  readonly skipReason?: string
+  /** Relative replay files, one for every route that produced a failure. */
+  readonly replays?: readonly string[]
+}
+
+export interface HydrationOptions {
+  readonly routes?: readonly string[]
+  readonly interact?: boolean
+  readonly seed?: string
+}
+
+function seedNumber(seed: string): number {
+  let value = 0x811c9dc5
+  for (const character of seed) {
+    value ^= character.charCodeAt(0)
+    value = Math.imul(value, 0x01000193)
+  }
+  return value >>> 0
+}
+
+/** Freeze the small nondeterministic surface that can make SSR and CSR disagree by luck. */
+function installDeterministicRuntime(seed: string): void {
+  let randomState = seedNumber(seed) || 1
+  const epoch = 1_700_000_000_000 + (seedNumber(`${seed}:clock`) % 86_400_000)
+  Date.now = () => epoch
+  Math.random = () => {
+    randomState = Math.imul(randomState, 1_664_525) + 1_013_904_223
+    return (randomState >>> 0) / 4_294_967_296
+  }
+
+  const realSetTimeout = globalThis.setTimeout.bind(globalThis)
+  const realSetInterval = globalThis.setInterval.bind(globalThis)
+  globalThis.setTimeout = ((
+    handler: Parameters<typeof setTimeout>[0],
+    timeout?: number,
+    ...args: unknown[]
+  ) =>
+    realSetTimeout(
+      handler,
+      Number.isFinite(timeout) ? Math.max(0, timeout ?? 0) : 0,
+      ...args,
+    )) as typeof setTimeout
+  globalThis.setInterval = ((
+    handler: Parameters<typeof setInterval>[0],
+    timeout?: number,
+    ...args: unknown[]
+  ) =>
+    realSetInterval(
+      handler,
+      Number.isFinite(timeout) ? Math.max(0, timeout ?? 0) : 0,
+      ...args,
+    )) as typeof setInterval
+}
+
+interface BuiltHydrationApp {
+  readonly app: AppLike
+  readonly client: BuildManifest
+  readonly outputDir: string
+  readonly framework: string
+}
+
+function diagnostic(
+  code: "NF-H001" | "NF-H002" | "NF-H003" | "NF-H004",
+  message: string,
+  file?: string,
+  evidence?: readonly string[],
+  severity: "error" | "info" = "error",
+): import("./diagnostics.ts").Diagnostic {
+  return Object.freeze({
+    code,
+    severity,
+    message,
+    ...(file === undefined ? {} : { file }),
+    ...(evidence === undefined ? {} : { evidence }),
+    verify: "nifra assure --hydration --strict --json",
+  })
+}
+
+function frameworkName(clientModule: string): string {
+  if (clientModule.includes("web-react")) return "react"
+  if (clientModule.includes("web-vue")) return "vue"
+  if (clientModule.includes("web-svelte")) return "svelte"
+  if (clientModule.includes("web-solid")) return "solid"
+  if (clientModule.includes("web-preact")) return "preact"
+  return "custom"
+}
+
+function routePath(pattern: string): string {
+  const path = pattern
+    .replace(/\[\.\.\.([^\]]+)\]/g, "probe")
+    .replace(/\[([^\]]+)\]/g, "probe")
+    .replace(/:([A-Za-z0-9_]+)/g, "probe")
+    .replace(/\*([A-Za-z0-9_]+)?/g, "probe")
+  return path === "" ? "/" : path.startsWith("/") ? path : `/${path}`
+}
+
+async function digest(value: unknown): Promise<string> {
+  const bytes = new TextEncoder().encode(JSON.stringify(value))
+  const hash = new Uint8Array(await crypto.subtle.digest("SHA-256", bytes))
+  return [...hash].map((item) => item.toString(16).padStart(2, "0")).join("")
+}
+
+async function writeReplay(
+  cwd: string,
+  route: string,
+  seed: string,
+  inputs: unknown,
+): Promise<string> {
+  const inputsDigest = await digest(inputs)
+  const replay = defineReplayFile({
+    gate: "hydration",
+    case: route,
+    seed,
+    inputsDigest,
+    meta:
+      inputs !== null &&
+      typeof inputs === "object" &&
+      typeof (inputs as { framework?: unknown }).framework === "string"
+        ? { framework: (inputs as { framework: string }).framework }
+        : {},
+  })
+  const relative = `.nifra/replays/hydration-${inputsDigest.slice(0, 16)}.json`
+  const path = resolve(cwd, relative)
+  await mkdir(join(cwd, ".nifra", "replays"), { recursive: true })
+  await writeFile(path, `${JSON.stringify(replay, null, 2)}\n`, "utf8")
+  return relative
+}
+
+async function loadOptionalDom(cwd: string): Promise<
+  | {
+      readonly Window: new (options?: { url?: string }) => unknown
+    }
+  | undefined
+> {
+  try {
+    const entry = Bun.resolveSync("happy-dom", cwd)
+    const loaded = (await import(pathToFileURL(entry).href)) as {
+      readonly Window?: new (options?: { url?: string }) => unknown
+    }
+    return loaded.Window === undefined ? undefined : { Window: loaded.Window }
+  } catch {
+    return undefined
+  }
+}
+
+async function buildHydrationApp(cwd: string): Promise<BuiltHydrationApp | { skipReason: string }> {
+  const loaded = await loadApp(cwd, "dist")
+  if (loaded.framework.clientModule.trim() === "")
+    return { skipReason: "no client bundle configured" }
+
+  const workDir = await mkdtemp(join(tmpdir(), "nifra-hydration-"))
+  try {
+    const clientOutput = join(workDir, "assets")
+    const plugins = await resolvePlugins(loaded.framework.clientPlugins)
+    const client = await buildClient({
+      routesDir: loaded.routesDir,
+      outDir: clientOutput,
+      clientModule: loaded.framework.clientModule,
+      ...(plugins.length === 0 ? {} : { plugins: plugins as BunPlugin[] }),
+      ...(loaded.framework.conditions === undefined
+        ? {}
+        : { conditions: loaded.framework.conditions }),
+      ...(loaded.framework.define === undefined ? {} : { define: loaded.framework.define }),
+      publicDir: false,
+      ...(loaded.framework.publicEnvPrefix === undefined
+        ? {}
+        : { publicEnvPrefix: loaded.framework.publicEnvPrefix }),
+    })
+    if (client.entry.trim() === "" || client.assets.length === 0) {
+      await rm(workDir, { recursive: true, force: true })
+      return { skipReason: "client build emitted no browser assets" }
+    }
+    const serverPlugins = await resolvePlugins(loaded.framework.serverPlugins)
+    if (serverPlugins.length > 0) {
+      const { plugin } = await import("bun")
+      for (const item of serverPlugins) plugin(item as BunPlugin)
+    }
+    const webApp = createWebApp({
+      adapter: loaded.framework.adapter as RenderAdapter,
+      manifest: discoverRoutes(loaded.routesDir),
+      clientEntry: client.entry,
+      ...(loaded.backend === undefined ? {} : { api: inProcessClient(loaded.backend as never) }),
+    }) as unknown as AppLike
+    return {
+      app: webApp,
+      client,
+      outputDir: clientOutput,
+      framework: frameworkName(loaded.framework.clientModule),
+    }
+  } catch (error) {
+    await rm(workDir, { recursive: true, force: true })
+    throw error
+  }
+}
+
+function sourceBranch(content: string): boolean {
+  return /typeof\s+window\s*!==?\s*["']undefined["']/.test(content)
+}
+
+async function sourceFiles(cwd: string): Promise<Array<{ file: string; content: string }>> {
+  const files: Array<{ file: string; content: string }> = []
+  for await (const file of new Bun.Glob(SOURCE_GLOB).scan({ cwd, onlyFiles: true, dot: false })) {
+    if (IGNORED.test(file)) continue
+    files.push({ file, content: await readFile(join(cwd, file), "utf8") })
+  }
+  return files
+}
+
+function outputPath(outputDir: string, entry: string): string {
+  return join(outputDir, basename(entry))
+}
+
+function globalValue(html: string, name: string): unknown {
+  const expression = new RegExp(`window\\.${name}=([\\s\\S]*?)(?:</script>|;window\\.)`)
+  const value = expression.exec(html)?.[1]?.replace(/;$/, "")
+  if (value === undefined) return undefined
+  try {
+    return JSON.parse(value)
+  } catch {
+    return undefined
+  }
+}
+
+async function runDomHydration(
+  cwd: string,
+  built: BuiltHydrationApp,
+  html: string,
+  path: string,
+  interact: boolean,
+): Promise<import("./diagnostics.ts").Diagnostic[]> {
+  const domModule = await loadOptionalDom(cwd)
+  if (domModule === undefined) return []
+  const windowValue = new domModule.Window({ url: `http://nifra.test${path}` }) as Record<
+    string,
+    unknown
+  >
+  const documentValue = windowValue.document as Record<string, unknown>
+  const globals = globalThis as unknown as Record<string, unknown>
+  const globalRecord = globalThis as unknown as Record<PropertyKey, unknown>
+  const runtimeKey = Symbol.for("nifra.hydration.runtime")
+  const previous = new Map<string, unknown>()
+  const names = [
+    "window",
+    "document",
+    "navigator",
+    "location",
+    "history",
+    "HTMLElement",
+    "Element",
+    "Node",
+    "Event",
+    "MouseEvent",
+    "requestAnimationFrame",
+    "cancelAnimationFrame",
+  ]
+  for (const name of names) {
+    previous.set(name, globals[name])
+    if (name === "window") globals[name] = windowValue
+    else if (name === "document") globals[name] = documentValue
+    else if (name === "requestAnimationFrame")
+      globals[name] = (callback: () => void) => setTimeout(callback, 0)
+    else if (name === "cancelAnimationFrame") globals[name] = (id: number) => clearTimeout(id)
+    else globals[name] = windowValue[name]
+  }
+  const windowRecord = windowValue as Record<string, unknown>
+  windowRecord.__NIFRA_ROUTE__ = globalValue(html, "__NIFRA_ROUTE__")
+  windowRecord.__NIFRA_DATA__ = globalValue(html, "__NIFRA_DATA__")
+  windowRecord.__NIFRA_LAYOUT_DATA__ = globalValue(html, "__NIFRA_LAYOUT_DATA__")
+  windowRecord.__NIFRA_ACTION__ = globalValue(html, "__NIFRA_ACTION__")
+  windowRecord.console = console
+  const errors: string[] = []
+  const recover = (error: unknown, info?: unknown): void => {
+    errors.push(`${String(error)}${info === undefined ? "" : ` ${String(info)}`}`)
+  }
+  const assuranceRecord = globalRecord[HYDRATION_ASSURANCE]
+  const runtimeRecord = globalRecord[runtimeKey]
+  globalRecord[HYDRATION_ASSURANCE] = { onRecoverableError: recover }
+  delete globalRecord[runtimeKey]
+  try {
+    const write = documentValue.write as ((value: string) => void) | undefined
+    if (write === undefined) throw new Error("DOM runner does not implement document.write")
+    write.call(documentValue, html)
+    const beforeRoot = (
+      documentValue.querySelector as (selector: string) => { innerHTML?: unknown } | null
+    )("#root")
+    const before = String(beforeRoot?.innerHTML ?? "")
+    const entry = outputPath(built.outputDir, built.client.entry)
+    const originalError = console.error
+    const originalWarn = console.warn
+    console.error = (...args) => {
+      const message = args.map(String).join(" ")
+      if (/hydr|mismatch|server|client|expected|recover/i.test(message)) errors.push(message)
+      originalError(...args)
+    }
+    console.warn = (...args) => {
+      const message = args.map(String).join(" ")
+      if (/hydr|mismatch|server|client|expected|recover/i.test(message)) errors.push(message)
+      originalWarn(...args)
+    }
+    try {
+      await import(`${pathToFileURL(entry).href}?nifra-hydration=${encodeURIComponent(path)}`)
+      await new Promise((resolvePromise) => setTimeout(resolvePromise, 0))
+    } finally {
+      console.error = originalError
+      console.warn = originalWarn
+    }
+    const afterRoot = (
+      documentValue.querySelector as (selector: string) => { innerHTML?: unknown } | null
+    )("#root")
+    const after = String(afterRoot?.innerHTML ?? "")
+    const diagnostics: import("./diagnostics.ts").Diagnostic[] = []
+    if (errors.length > 0 || before !== after) {
+      diagnostics.push(
+        diagnostic("NF-H001", "client hydration reported a recoverable mismatch", undefined, [
+          built.framework,
+          ...errors.slice(0, 3),
+        ]),
+      )
+    }
+    const runtime = globalRecord[runtimeKey] as
+      | { framework?: unknown; identities?: unknown[] }
+      | undefined
+    if (
+      runtime !== undefined &&
+      Array.isArray(runtime.identities) &&
+      runtime.identities.length !== 1
+    ) {
+      diagnostics.push(
+        diagnostic(
+          "NF-H002",
+          "hydration loaded more than one framework runtime identity",
+          undefined,
+          [built.framework, `identities=${runtime.identities.length}`],
+        ),
+      )
+    }
+    if (interact) {
+      const probes = documentValue.querySelectorAll as
+        | ((selector: string) => { length: number; [index: number]: { click?: () => void } })
+        | undefined
+      const elements = probes?.call(documentValue, "[data-nifra-hydration-probe]")
+      if (elements !== undefined && elements.length > 0) {
+        const first = elements[0]
+        if (first?.click !== undefined) first.click()
+        const hydrated = documentValue.documentElement as {
+          hasAttribute?: (name: string) => boolean
+        }
+        if (hydrated.hasAttribute?.("data-nifra-hydrated") !== true)
+          diagnostics.push(
+            diagnostic("NF-H004", "hydration probe did not become interactive", undefined, [
+              built.framework,
+            ]),
+          )
+      }
+    }
+    return diagnostics
+  } finally {
+    if (assuranceRecord === undefined) delete globalRecord[HYDRATION_ASSURANCE]
+    else globalRecord[HYDRATION_ASSURANCE] = assuranceRecord
+    if (runtimeRecord === undefined) delete globalRecord[runtimeKey]
+    else globalRecord[runtimeKey] = runtimeRecord
+    for (const [name, value] of previous) {
+      if (value === undefined) delete globals[name]
+      else globals[name] = value
+    }
+  }
+}
+
+async function runHydrationProof(cwd: string, options: HydrationOptions): Promise<HydrationResult> {
+  const files = await sourceFiles(cwd)
+  const diagnostics: import("./diagnostics.ts").Diagnostic[] = []
+  const replays: string[] = []
+  const seed = options.seed ?? "nifra-hydration-1"
+  installDeterministicRuntime(seed)
+  const existingDist = join(cwd, "dist")
+  const latestSource = Math.max(...files.map((file) => statSync(join(cwd, file.file)).mtimeMs), 0)
+  if (existsSync(existingDist) && latestSource > statSync(existingDist).mtimeMs) {
+    const replay = await writeReplay(cwd, "dist", seed, {
+      latestSource,
+      dist: statSync(existingDist).mtimeMs,
+    })
+    replays.push(replay)
+    diagnostics.push(
+      diagnostic(
+        "NF-H003",
+        "client build output is older than the route source; rebuild before hydrating",
+        "dist",
+        [replay],
+      ),
+    )
+  }
+
+  let built: BuiltHydrationApp | { skipReason: string }
+  try {
+    built = await buildHydrationApp(cwd)
+  } catch (error) {
+    const replay = await writeReplay(cwd, "build", seed, {
+      message: error instanceof Error ? error.message : String(error),
+    })
+    replays.push(replay)
+    return {
+      diagnostics: [
+        diagnostic(
+          "NF-H001",
+          `hydration client build failed: ${error instanceof Error ? error.message : String(error)}`,
+          undefined,
+          [replay],
+        ),
+      ],
+      replays,
+    }
+  }
+  if ("skipReason" in built)
+    return {
+      diagnostics,
+      ...(diagnostics.length === 0 ? { skipReason: built.skipReason } : {}),
+      replays,
+    }
+
+  const framework = built.framework
+  const cleanup = async (): Promise<void> => {
+    await rm(resolve(built.outputDir, ".."), { recursive: true, force: true })
+  }
+  const doctor = await collectDoctorResult(cwd)
+  const duplicate = doctor.duplicateInstalls.filter((finding) => finding.package === framework)
+  if (duplicate.length > 0) {
+    const replay = await writeReplay(cwd, framework, seed, {
+      framework,
+      copies: duplicate.map((item) => item.copies.length),
+    })
+    replays.push(replay)
+    diagnostics.push(
+      diagnostic(
+        "NF-H002",
+        `multiple ${framework} runtime installations reached the client build`,
+        undefined,
+        [framework, replay],
+      ),
+    )
+  }
+  for (const file of files) {
+    if (!sourceBranch(file.content)) continue
+    const replay = await writeReplay(cwd, file.file, seed, { framework, source: file.file })
+    replays.push(replay)
+    // Advisory only: `typeof window` guards are the standard SSR-safe idiom and most of them never
+    // touch render output. The DOM before/after comparison below is the authoritative mismatch proof.
+    diagnostics.push(
+      diagnostic(
+        "NF-H001",
+        "source branches on window state; confirm render output is identical before hydration",
+        file.file,
+        [framework, replay],
+        "info",
+      ),
+    )
+  }
+
+  const manifest = discoverRoutes(join(cwd, "routes"))
+  const requested = options.routes?.length
+    ? [...options.routes]
+    : manifest.routes.slice(0, 20).map((route) => routePath(route.pattern))
+  const requests = requested.length === 0 ? [{ path: "/" }] : requested.map((path) => ({ path }))
+  const results: unknown[] = []
+  for (const request of requests) {
+    installDeterministicRuntime(`${seed}:${request.path}`)
+    const [result] = await runApp(built.app, [request])
+    results.push(result)
+  }
+  const domModule = await loadOptionalDom(cwd)
+  if (domModule === undefined) {
+    await cleanup()
+    return diagnostics.length === 0
+      ? {
+          diagnostics,
+          skipReason: "no happy-dom dependency configured for DOM hydration execution",
+        }
+      : { diagnostics, replays }
+  }
+  try {
+    for (let index = 0; index < results.length; index++) {
+      const result = results[index] as { status?: number; body?: unknown }
+      if (result.status !== 200 || typeof result.body !== "string") continue
+      const route = requested[index] ?? "/"
+      try {
+        // SSR and CSR for one route start from the same deterministic clock, random stream, and timer
+        // surface. A route that reads one of them therefore either matches exactly or reports NF-H001.
+        installDeterministicRuntime(`${seed}:${route}`)
+        const pageDiagnostics = await runDomHydration(
+          cwd,
+          built,
+          result.body,
+          route,
+          options.interact === true,
+        )
+        if (pageDiagnostics.length > 0) {
+          const replay = await writeReplay(cwd, route, seed, {
+            framework,
+            route,
+            assets: built.client.assets,
+          })
+          replays.push(replay)
+          diagnostics.push(
+            ...pageDiagnostics.map((item) => ({
+              ...item,
+              evidence: [...(item.evidence ?? []), replay],
+            })),
+          )
+        }
+      } catch (error) {
+        const replay = await writeReplay(cwd, route, seed, {
+          framework,
+          route,
+          assets: built.client.assets,
+        })
+        replays.push(replay)
+        diagnostics.push(
+          diagnostic(
+            "NF-H001",
+            `hydration execution failed: ${error instanceof Error ? error.message : String(error)}`,
+            undefined,
+            [framework, replay],
+          ),
+        )
+      }
+    }
+    return { diagnostics, ...(replays.length === 0 ? {} : { replays }) }
+  } finally {
+    await cleanup()
+  }
+}
+
+/** Run hydration in a fresh process so the project's current client and framework modules are isolated. */
+export async function runHydrationAssurance(
+  cwd: string,
+  options: HydrationOptions = {},
+): Promise<HydrationResult> {
+  const root = resolve(cwd)
+  const entry = fileURLToPath(import.meta.url)
+  const proc = Bun.spawn(
+    [process.execPath, entry, root, "--nifra-hydration-child", JSON.stringify(options)],
+    {
+      stdin: "ignore",
+      stdout: "pipe",
+      stderr: "pipe",
+    },
+  )
+  const [stdout, stderr] = await Promise.all([
+    new Response(proc.stdout).text(),
+    new Response(proc.stderr).text(),
+  ])
+  await proc.exited
+  try {
+    return JSON.parse(stdout) as HydrationResult
+  } catch {
+    return {
+      diagnostics: [
+        diagnostic(
+          "NF-H001",
+          `hydration runner failed: ${stderr.trim() || stdout.trim() || "no result"}`,
+        ),
+      ],
+    }
+  }
+}
+
+if (import.meta.main && process.argv.includes("--nifra-hydration-child")) {
+  const cwd = process.argv[2] ?? process.cwd()
+  const rawOptions = process.argv[4]
+  try {
+    process.chdir(cwd)
+    const options = rawOptions === undefined ? {} : (JSON.parse(rawOptions) as HydrationOptions)
+    const result = await runHydrationProof(cwd, options)
+    await Bun.write(Bun.stdout, JSON.stringify(result))
+  } catch (error) {
+    await Bun.write(
+      Bun.stdout,
+      JSON.stringify({
+        diagnostics: [
+          diagnostic("NF-H001", error instanceof Error ? error.message : String(error)),
+        ],
+      }),
+    )
+  }
+  process.exit(0)
+}