@software-dlc/cli 0.157.2

package/dist/local/health-inspection.js

@@ -0,0 +1,407 @@
+import { inspectHealthProjection } from './health-projection.js';
+import { execFile } from 'node:child_process';
+import { realpath, readdir } from 'node:fs/promises';
+import { homedir } from 'node:os';
+import { join, resolve } from 'node:path';
+import { promisify } from 'node:util';
+import { z } from 'zod';
+import { parseRepositoryConfig } from './config.js';
+import { active_environment_selector_schema, environment_metadata_schema, trusted_connection_registry_schema, environmentSidecarDirectory, serviceOriginFingerprint } from './environment-sidecar.js';
+import { HealthFiles, HealthInspectionError } from './health-files.js';
+import { inspectHealthStore } from './health-store.js';
+import { local_health_report_schema } from './health-schema.js';
+import { checkOperation, currentOperation, operationSignal, OperationError, runOperation } from './operation.js';
+const exec_file = promisify(execFile);
+async function gitRead(cwd, args, absent_ok = false) {
+    checkOperation();
+    const signal = currentOperation()?.signal;
+    const command = exec_file('git', [
+        '--no-optional-locks',
+        '-c',
+        'core.fsmonitor=false',
+        '-c',
+        'core.untrackedCache=false',
+        ...args
+    ], {
+        cwd,
+        encoding: 'utf8',
+        maxBuffer: 64 * 1024,
+        signal,
+        env: {
+            PATH: process.env.PATH,
+            HOME: process.env.HOME,
+            NODE_ENV: 'production',
+            LC_ALL: 'C',
+            GIT_OPTIONAL_LOCKS: '0',
+            GIT_CONFIG_NOSYSTEM: '1',
+            GIT_CONFIG_GLOBAL: '/dev/null'
+        }
+    });
+    let kill_timer;
+    const abort = () => {
+        kill_timer = setTimeout(() => command.child.kill('SIGKILL'), 1000);
+    };
+    const closed = new Promise((resolve) => command.child.once('close', () => {
+        clearTimeout(kill_timer);
+        signal?.removeEventListener('abort', abort);
+        resolve();
+    }));
+    signal?.addEventListener('abort', abort, { once: true });
+    if (signal?.aborted)
+        abort();
+    const [result] = await Promise.allSettled([command, closed]);
+    checkOperation();
+    if (result.status === 'fulfilled')
+        return result.value.stdout.trim();
+    const error = result.reason;
+    if (typeof error === 'object' && error) {
+        if (absent_ok && 'code' in error && error.code === 1)
+            return null;
+        if ('stderr' in error &&
+            typeof error.stderr === 'string' &&
+            error.stderr.includes('not a git repository'))
+            throw new HealthInspectionError('not_repository');
+    }
+    throw new HealthInspectionError('source_unavailable');
+}
+async function readSource(cwd) {
+    const root = await gitRead(cwd, ['rev-parse', '--show-toplevel']);
+    if (!root)
+        throw new HealthInspectionError('source_unavailable');
+    const ref = await gitRead(root, ['symbolic-ref', '--quiet', 'HEAD'], true);
+    const head = await gitRead(root, ['rev-parse', '--verify', '--quiet', 'HEAD'], true);
+    // Status may execute clean/process filters or recurse into submodules. Keep
+    // dirtiness unknown when that repository configuration prevents safe inspection.
+    const configured_commands = await gitRead(root, [
+        'config',
+        '--name-only',
+        '--get-regexp',
+        '^(filter\\..*\\.(clean|process)|submodule\\..*)$'
+    ], true);
+    const gitmodules = await gitRead(root, ['ls-files', '--', '.gitmodules']);
+    const status = configured_commands || gitmodules
+        ? null
+        : await gitRead(root, [
+            'status',
+            '--porcelain=v1',
+            '--ignore-submodules=all'
+        ]);
+    return {
+        root: await realpath(root),
+        source: {
+            availability: 'known',
+            state: !head
+                ? 'unborn'
+                : ref
+                    ? 'named'
+                    : 'detached',
+            ref,
+            head,
+            dirty: status === null ? null : Boolean(status)
+        }
+    };
+}
+function initialReport() {
+    return {
+        schema_version: 1,
+        observed_at: new Date().toISOString(),
+        complete: false,
+        mode: 'unknown',
+        observation_consistency: 'best_effort',
+        source: {
+            availability: 'unknown',
+            state: 'unknown',
+            ref: null,
+            head: null,
+            dirty: null
+        },
+        environment: {
+            availability: 'not_checked',
+            profile: null,
+            connection: 'not_checked',
+            credential: 'not_checked',
+            repository_id: null
+        },
+        binding: { availability: 'not_checked', value: null },
+        session: { availability: 'not_checked', value: null },
+        projection: {
+            state: 'not_checked',
+            base_revision: null,
+            base_graph_hash: null
+        },
+        pending: {
+            availability: 'not_checked',
+            count: null,
+            entries: [],
+            truncated: false
+        },
+        remote: { status: 'not_checked' },
+        inventory_status: 'not_checked',
+        capabilities: {},
+        diagnostics: { entries: [], count: 0, truncated: false },
+        next_action: null
+    };
+}
+function diagnose(report, code, facet, severity = 'warning') {
+    if (report.diagnostics.entries.some((entry) => entry.code === code && entry.facet === facet))
+        return;
+    report.diagnostics.count++;
+    if (report.diagnostics.entries.length < 50)
+        report.diagnostics.entries.push({
+            code,
+            facet,
+            severity,
+            summary: code.replaceAll('_', ' '),
+            evidence_scope: 'local_observation'
+        });
+    else
+        report.diagnostics.truncated = true;
+}
+function unknownStore(report) {
+    report.binding = { availability: 'unknown', value: null };
+    report.session = { availability: 'unknown', value: null };
+    report.pending = {
+        availability: 'unknown',
+        count: null,
+        entries: [],
+        truncated: false
+    };
+    report.projection = {
+        state: 'unknown',
+        base_revision: null,
+        base_graph_hash: null
+    };
+}
+async function busy(files, root) {
+    for (const name of ['.sdlc.switch.json', '.sdlc.migration.json'])
+        if (await files.observe(join(root, name)))
+            return true;
+    const directory = join(root, '.sdlc.transition');
+    if (!(await files.observe(directory)))
+        return false;
+    return (await readdir(directory)).some((name) => name === 'workspace-operation.lock' ||
+        /^\.workspace-operation-.*\.lock$/.test(name));
+}
+/** Internal source/config/store observation. No adapter dispatch or capability/action policy yet. */
+export async function inspectLocalHealth(input) {
+    const report = initialReport();
+    const files = new HealthFiles();
+    const env = input.env ?? process.env;
+    const inspect = async () => {
+        let source;
+        try {
+            source = await readSource(input.cwd);
+            report.source = source.source;
+            if (source.source.dirty === null)
+                diagnose(report, 'source_dirty_not_checked', 'source', 'info');
+        }
+        catch (error) {
+            checkOperation();
+            const code = error instanceof HealthInspectionError
+                ? error.code
+                : 'source_unavailable';
+            if (code === 'not_repository')
+                report.source = {
+                    availability: 'missing',
+                    state: 'not_repository',
+                    ref: null,
+                    head: null,
+                    dirty: null
+                };
+            diagnose(report, code, 'source');
+            report.observation_consistency = 'unavailable';
+            return;
+        }
+        if (source.source.state === 'detached')
+            diagnose(report, 'detached_ref', 'source');
+        if (source.source.state === 'unborn')
+            diagnose(report, 'unborn_ref', 'source');
+        if (await busy(files, source.root)) {
+            unknownStore(report);
+            diagnose(report, 'operation_busy', 'inspection');
+            return;
+        }
+        try {
+            const selector_text = await files.read(join(source.root, '.sdlc.active'));
+            const selector = selector_text === null
+                ? null
+                : active_environment_selector_schema.parse(JSON.parse(selector_text));
+            const profile = selector?.profile ?? 'live';
+            const sidecar = environmentSidecarDirectory({
+                repository_root: source.root,
+                profile
+            });
+            const config_text = await files.read(join(sidecar, 'config.json'));
+            if (config_text === null) {
+                report.environment.availability = 'missing';
+                diagnose(report, 'environment_missing', 'environment');
+                return;
+            }
+            const config = parseRepositoryConfig(config_text);
+            const repository_id = z.string().uuid().parse(config.repository_id);
+            const metadata_text = await files.read(join(sidecar, 'state', 'environment.json'));
+            if (metadata_text === null) {
+                report.environment.availability = 'unknown';
+                diagnose(report, 'environment_inconsistent', 'environment');
+                return;
+            }
+            const metadata = environment_metadata_schema.parse(JSON.parse(metadata_text));
+            if (metadata.profile !== profile)
+                throw new HealthInspectionError('environment_inconsistent');
+            report.mode = 'hosted';
+            report.environment = {
+                availability: 'known',
+                profile,
+                repository_id,
+                connection: 'not_checked',
+                credential: 'not_checked'
+            };
+            const registry_path = resolve(env.SDLC_CONNECTIONS_FILE ??
+                join(homedir(), '.config/software-dlc/connections.json'));
+            try {
+                const text = await files.read(registry_path);
+                const registry = text === null
+                    ? null
+                    : trusted_connection_registry_schema.parse(JSON.parse(text));
+                const connection = registry?.connections.find((entry) => entry.connection_id === metadata.connection_id);
+                if (!connection) {
+                    report.environment.connection = 'missing';
+                    diagnose(report, 'connection_missing', 'environment');
+                }
+                else if (connection.origin_fingerprint !== metadata.origin_fingerprint ||
+                    serviceOriginFingerprint(connection.base_url) !==
+                        metadata.origin_fingerprint) {
+                    report.environment.connection = 'invalid';
+                    diagnose(report, 'environment_inconsistent', 'environment');
+                }
+                else {
+                    report.environment.connection = 'present';
+                    report.environment.credential = env[connection.credential_env]?.trim()
+                        ? 'present'
+                        : 'missing';
+                    if (report.environment.credential === 'missing')
+                        diagnose(report, 'credential_missing', 'environment');
+                }
+            }
+            catch (error) {
+                checkOperation();
+                if (error instanceof HealthInspectionError &&
+                    error.code === 'changed_during_read')
+                    throw error;
+                report.environment.connection = 'invalid';
+                diagnose(report, 'environment_inconsistent', 'environment');
+            }
+            if (env.SDLC_STATE_DIR && env.SDLC_STATE_PROFILE !== profile)
+                throw new HealthInspectionError('environment_inconsistent');
+            const state_dir = env.SDLC_STATE_DIR
+                ? resolve(env.SDLC_STATE_DIR)
+                : join(sidecar, 'state');
+            try {
+                const stored = await inspectHealthStore(files, state_dir, source.source.ref, input.inspection === 'status');
+                if (!stored) {
+                    report.binding.availability = 'missing';
+                    report.session.availability = 'missing';
+                    report.pending.availability = 'missing';
+                    diagnose(report, 'state_missing', 'inspection');
+                }
+                else {
+                    report.binding = {
+                        availability: stored.binding ? 'known' : 'missing',
+                        value: stored.binding
+                    };
+                    report.session = {
+                        availability: stored.session ? 'known' : 'missing',
+                        value: stored.session
+                    };
+                    report.pending = stored.pending;
+                    if (stored.projection) {
+                        report.projection.base_revision = stored.projection.base_revision;
+                        report.projection.base_graph_hash =
+                            stored.projection.base_graph_hash;
+                    }
+                    else
+                        report.projection.state = 'missing';
+                    if (!stored.binding)
+                        diagnose(report, 'binding_missing', 'binding');
+                    else if (!stored.session)
+                        diagnose(report, 'session_missing', 'session');
+                    if (stored.pending.count > 0)
+                        diagnose(report, 'pending_changes', 'pending');
+                    if (input.inspection === 'status') {
+                        if (stored.projection_error) {
+                            report.projection.state = 'unknown';
+                            diagnose(report, stored.projection_error, 'projection');
+                        }
+                        else if (stored.projection_details) {
+                            const observed = await inspectHealthProjection({
+                                files,
+                                repository_root: source.root,
+                                state_dir,
+                                details: stored.projection_details
+                            });
+                            report.projection.state = observed.state;
+                            if (observed.reason)
+                                diagnose(report, observed.reason, 'projection');
+                        }
+                    }
+                }
+            }
+            catch (error) {
+                checkOperation();
+                unknownStore(report);
+                diagnose(report, error instanceof HealthInspectionError
+                    ? error.code
+                    : 'state_unavailable', 'inspection');
+            }
+        }
+        catch (error) {
+            checkOperation();
+            report.environment.availability = 'unknown';
+            unknownStore(report);
+            diagnose(report, error instanceof HealthInspectionError
+                ? error.code
+                : 'environment_inconsistent', 'inspection');
+        }
+        finally {
+            const after = await readSource(source.root);
+            if (JSON.stringify(after.source) !== JSON.stringify(source.source) ||
+                (await files.changed()) ||
+                (await busy(files, source.root))) {
+                report.observation_consistency = 'changed_during_read';
+                report.complete = false;
+                report.source.availability = 'unknown';
+                report.environment.availability = 'unknown';
+                unknownStore(report);
+                diagnose(report, 'changed_during_read', 'inspection');
+            }
+        }
+    };
+    try {
+        checkOperation();
+        await runOperation({
+            operation: 'context',
+            timeout_ms: input.timeout_ms,
+            signal: operationSignal(input.signal),
+            on_cleanup_timeout: input.on_cleanup_timeout,
+            run: inspect
+        });
+        report.complete = report.observation_consistency !== 'changed_during_read';
+    }
+    catch (error) {
+        if (error instanceof OperationError && error.code === 'invalid_timeout')
+            throw error;
+        report.complete = false;
+        report.observation_consistency = 'unavailable';
+        unknownStore(report);
+        diagnose(report, error instanceof OperationError &&
+            ['cancelled', 'deadline_exceeded'].includes(error.code)
+            ? error.code
+            : 'state_unavailable', 'inspection');
+    }
+    diagnose(report, 'remote_not_checked', 'remote', 'info');
+    diagnose(report, 'inventory_not_checked', 'capabilities', 'info');
+    if (report.projection.state === 'not_checked')
+        diagnose(report, 'projection_not_checked', 'projection', 'info');
+    return local_health_report_schema.parse(report);
+}
+//# sourceMappingURL=health-inspection.js.map

package/dist/local/health-inspection.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"health-inspection.js","sourceRoot":"","sources":["../../src/local/health-inspection.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,uBAAuB,EAAE,MAAM,wBAAwB,CAAC;AACjE,OAAO,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAC9C,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,kBAAkB,CAAC;AACrD,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAC1C,OAAO,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AACtC,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,qBAAqB,EAAE,MAAM,aAAa,CAAC;AACpD,OAAO,EACL,kCAAkC,EAClC,2BAA2B,EAC3B,kCAAkC,EAClC,2BAA2B,EAC3B,wBAAwB,EACzB,MAAM,0BAA0B,CAAC;AAClC,OAAO,EAAE,WAAW,EAAE,qBAAqB,EAAE,MAAM,mBAAmB,CAAC;AACvE,OAAO,EAAE,kBAAkB,EAAE,MAAM,mBAAmB,CAAC;AACvD,OAAO,EACL,0BAA0B,EAG3B,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EACL,cAAc,EACd,gBAAgB,EAChB,eAAe,EACf,cAAc,EACd,YAAY,EACb,MAAM,gBAAgB,CAAC;AACxB,MAAM,SAAS,GAAG,SAAS,CAAC,QAAQ,CAAC,CAAC;AAEtC,KAAK,UAAU,OAAO,CACpB,GAAW,EACX,IAAc,EACd,SAAS,GAAG,KAAK;IAEjB,cAAc,EAAE,CAAC;IACjB,MAAM,MAAM,GAAG,gBAAgB,EAAE,EAAE,MAAM,CAAC;IAC1C,MAAM,OAAO,GAAG,SAAS,CACvB,KAAK,EACL;QACE,qBAAqB;QACrB,IAAI;QACJ,sBAAsB;QACtB,IAAI;QACJ,2BAA2B;QAC3B,GAAG,IAAI;KACR,EACD;QACE,GAAG;QACH,QAAQ,EAAE,MAAM;QAChB,SAAS,EAAE,EAAE,GAAG,IAAI;QACpB,MAAM;QACN,GAAG,EAAE;YACH,IAAI,EAAE,OAAO,CAAC,GAAG,CAAC,IAAI;YACtB,IAAI,EAAE,OAAO,CAAC,GAAG,CAAC,IAAI;YACtB,QAAQ,EAAE,YAAY;YACtB,MAAM,EAAE,GAAG;YACX,kBAAkB,EAAE,GAAG;YACvB,mBAAmB,EAAE,GAAG;YACxB,iBAAiB,EAAE,WAAW;SAC/B;KACF,CACF,CAAC;IACF,IAAI,UAAqD,CAAC;IAC1D,MAAM,KAAK,GAAG,GAAG,EAAE;QACjB,UAAU,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,IAAI,CAAC,CAAC;IACrE,CAAC,CAAC;IACF,MAAM,MAAM,GAAG,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE,CAC3C,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,EAAE;QAC/B,YAAY,CAAC,UAAU,CAAC,CAAC;QACzB,MAAM,EAAE,mBAAmB,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;QAC5C,OAAO,EAAE,CAAC;IACZ,CAAC,CAAC,CACH,CAAC;IACF,MAAM,EAAE,gBAAgB,CAAC,OAAO,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;IACzD,IAAI,MAAM,EAAE,OAAO;QAAE,KAAK,EAAE,CAAC;IAC7B,MAAM,CAAC,MAAM,CAAC,GAAG,MAAM,OAAO,CAAC,UAAU,CAAC,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC,CAAC;IAC7D,cAAc,EAAE,CAAC;IACjB,IAAI,MAAM,CAAC,MAAM,KAAK,WAAW;QAAE,OAAO,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;IACrE,MAAM,KAAK,GAAY,MAAM,CAAC,MAAM,CAAC;IACrC,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,EAAE,CAAC;QACvC,IAAI,SAAS,IAAI,MAAM,IAAI,KAAK,IAAI,KAAK,CAAC,IAAI,KAAK,CAAC;YAAE,OAAO,IAAI,CAAC;QAClE,IACE,QAAQ,IAAI,KAAK;YACjB,OAAO,KAAK,CAAC,MAAM,KAAK,QAAQ;YAChC,KAAK,CAAC,MAAM,CAAC,QAAQ,CAAC,sBAAsB,CAAC;YAE7C,MAAM,IAAI,qBAAqB,CAAC,gBAAgB,CAAC,CAAC;IACtD,CAAC;IACD,MAAM,IAAI,qBAAqB,CAAC,oBAAoB,CAAC,CAAC;AACxD,CAAC;AACD,KAAK,UAAU,UAAU,CAAC,GAAW;IACnC,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE,iBAAiB,CAAC,CAAC,CAAC;IAClE,IAAI,CAAC,IAAI;QAAE,MAAM,IAAI,qBAAqB,CAAC,oBAAoB,CAAC,CAAC;IACjE,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,IAAI,EAAE,CAAC,cAAc,EAAE,SAAS,EAAE,MAAM,CAAC,EAAE,IAAI,CAAC,CAAC;IAC3E,MAAM,IAAI,GAAG,MAAM,OAAO,CACxB,IAAI,EACJ,CAAC,WAAW,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,CAAC,EAC5C,IAAI,CACL,CAAC;IACF,4EAA4E;IAC5E,iFAAiF;IACjF,MAAM,mBAAmB,GAAG,MAAM,OAAO,CACvC,IAAI,EACJ;QACE,QAAQ;QACR,aAAa;QACb,cAAc;QACd,kDAAkD;KACnD,EACD,IAAI,CACL,CAAC;IACF,MAAM,UAAU,GAAG,MAAM,OAAO,CAAC,IAAI,EAAE,CAAC,UAAU,EAAE,IAAI,EAAE,aAAa,CAAC,CAAC,CAAC;IAC1E,MAAM,MAAM,GACV,mBAAmB,IAAI,UAAU;QAC/B,CAAC,CAAC,IAAI;QACN,CAAC,CAAC,MAAM,OAAO,CAAC,IAAI,EAAE;YAClB,QAAQ;YACR,gBAAgB;YAChB,yBAAyB;SAC1B,CAAC,CAAC;IACT,OAAO;QACL,IAAI,EAAE,MAAM,QAAQ,CAAC,IAAI,CAAC;QAC1B,MAAM,EAAE;YACN,YAAY,EAAE,OAAgB;YAC9B,KAAK,EAAE,CAAC,IAAI;gBACV,CAAC,CAAE,QAAkB;gBACrB,CAAC,CAAC,GAAG;oBACH,CAAC,CAAE,OAAiB;oBACpB,CAAC,CAAE,UAAoB;YAC3B,GAAG;YACH,IAAI;YACJ,KAAK,EAAE,MAAM,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC;SAChD;KACF,CAAC;AACJ,CAAC;AACD,SAAS,aAAa;IACpB,OAAO;QACL,cAAc,EAAE,CAAC;QACjB,WAAW,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;QACrC,QAAQ,EAAE,KAAK;QACf,IAAI,EAAE,SAAS;QACf,uBAAuB,EAAE,aAAa;QACtC,MAAM,EAAE;YACN,YAAY,EAAE,SAAS;YACvB,KAAK,EAAE,SAAS;YAChB,GAAG,EAAE,IAAI;YACT,IAAI,EAAE,IAAI;YACV,KAAK,EAAE,IAAI;SACZ;QACD,WAAW,EAAE;YACX,YAAY,EAAE,aAAa;YAC3B,OAAO,EAAE,IAAI;YACb,UAAU,EAAE,aAAa;YACzB,UAAU,EAAE,aAAa;YACzB,aAAa,EAAE,IAAI;SACpB;QACD,OAAO,EAAE,EAAE,YAAY,EAAE,aAAa,EAAE,KAAK,EAAE,IAAI,EAAE;QACrD,OAAO,EAAE,EAAE,YAAY,EAAE,aAAa,EAAE,KAAK,EAAE,IAAI,EAAE;QACrD,UAAU,EAAE;YACV,KAAK,EAAE,aAAa;YACpB,aAAa,EAAE,IAAI;YACnB,eAAe,EAAE,IAAI;SACtB;QACD,OAAO,EAAE;YACP,YAAY,EAAE,aAAa;YAC3B,KAAK,EAAE,IAAI;YACX,OAAO,EAAE,EAAE;YACX,SAAS,EAAE,KAAK;SACjB;QACD,MAAM,EAAE,EAAE,MAAM,EAAE,aAAa,EAAE;QACjC,gBAAgB,EAAE,aAAa;QAC/B,YAAY,EAAE,EAAE;QAChB,WAAW,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,SAAS,EAAE,KAAK,EAAE;QACxD,WAAW,EAAE,IAAI;KAClB,CAAC;AACJ,CAAC;AACD,SAAS,QAAQ,CACf,MAAyB,EACzB,IAAkB,EAClB,KAAmE,EACnE,WAAyC,SAAS;IAElD,IACE,MAAM,CAAC,WAAW,CAAC,OAAO,CAAC,IAAI,CAC7B,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,KAAK,IAAI,IAAI,KAAK,CAAC,KAAK,KAAK,KAAK,CACxD;QAED,OAAO;IACT,MAAM,CAAC,WAAW,CAAC,KAAK,EAAE,CAAC;IAC3B,IAAI,MAAM,CAAC,WAAW,CAAC,OAAO,CAAC,MAAM,GAAG,EAAE;QACxC,MAAM,CAAC,WAAW,CAAC,OAAO,CAAC,IAAI,CAAC;YAC9B,IAAI;YACJ,KAAK;YACL,QAAQ;YACR,OAAO,EAAE,IAAI,CAAC,UAAU,CAAC,GAAG,EAAE,GAAG,CAAC;YAClC,cAAc,EAAE,mBAAmB;SACpC,CAAC,CAAC;;QACA,MAAM,CAAC,WAAW,CAAC,SAAS,GAAG,IAAI,CAAC;AAC3C,CAAC;AACD,SAAS,YAAY,CAAC,MAAyB;IAC7C,MAAM,CAAC,OAAO,GAAG,EAAE,YAAY,EAAE,SAAS,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;IAC1D,MAAM,CAAC,OAAO,GAAG,EAAE,YAAY,EAAE,SAAS,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;IAC1D,MAAM,CAAC,OAAO,GAAG;QACf,YAAY,EAAE,SAAS;QACvB,KAAK,EAAE,IAAI;QACX,OAAO,EAAE,EAAE;QACX,SAAS,EAAE,KAAK;KACjB,CAAC;IACF,MAAM,CAAC,UAAU,GAAG;QAClB,KAAK,EAAE,SAAS;QAChB,aAAa,EAAE,IAAI;QACnB,eAAe,EAAE,IAAI;KACtB,CAAC;AACJ,CAAC;AACD,KAAK,UAAU,IAAI,CAAC,KAAkB,EAAE,IAAY;IAClD,KAAK,MAAM,IAAI,IAAI,CAAC,mBAAmB,EAAE,sBAAsB,CAAC;QAC9D,IAAI,MAAM,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;YAAE,OAAO,IAAI,CAAC;IACzD,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,EAAE,kBAAkB,CAAC,CAAC;IACjD,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;QAAE,OAAO,KAAK,CAAC;IACpD,OAAO,CAAC,MAAM,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CACpC,CAAC,IAAI,EAAE,EAAE,CACP,IAAI,KAAK,0BAA0B;QACnC,kCAAkC,CAAC,IAAI,CAAC,IAAI,CAAC,CAChD,CAAC;AACJ,CAAC;AAED,qGAAqG;AACrG,MAAM,CAAC,KAAK,UAAU,kBAAkB,CAAC,KAOxC;IACC,MAAM,MAAM,GAAG,aAAa,EAAE,CAAC;IAC/B,MAAM,KAAK,GAAG,IAAI,WAAW,EAAE,CAAC;IAChC,MAAM,GAAG,GAAG,KAAK,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,CAAC;IACrC,MAAM,OAAO,GAAG,KAAK,IAAI,EAAE;QACzB,IAAI,MAA8C,CAAC;QACnD,IAAI,CAAC;YACH,MAAM,GAAG,MAAM,UAAU,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;YACrC,MAAM,CAAC,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC;YAC9B,IAAI,MAAM,CAAC,MAAM,CAAC,KAAK,KAAK,IAAI;gBAC9B,QAAQ,CAAC,MAAM,EAAE,0BAA0B,EAAE,QAAQ,EAAE,MAAM,CAAC,CAAC;QACnE,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,cAAc,EAAE,CAAC;YACjB,MAAM,IAAI,GACR,KAAK,YAAY,qBAAqB;gBACpC,CAAC,CAAC,KAAK,CAAC,IAAI;gBACZ,CAAC,CAAC,oBAAoB,CAAC;YAC3B,IAAI,IAAI,KAAK,gBAAgB;gBAC3B,MAAM,CAAC,MAAM,GAAG;oBACd,YAAY,EAAE,SAAS;oBACvB,KAAK,EAAE,gBAAgB;oBACvB,GAAG,EAAE,IAAI;oBACT,IAAI,EAAE,IAAI;oBACV,KAAK,EAAE,IAAI;iBACZ,CAAC;YACJ,QAAQ,CAAC,MAAM,EAAE,IAAI,EAAE,QAAQ,CAAC,CAAC;YACjC,MAAM,CAAC,uBAAuB,GAAG,aAAa,CAAC;YAC/C,OAAO;QACT,CAAC;QACD,IAAI,MAAM,CAAC,MAAM,CAAC,KAAK,KAAK,UAAU;YACpC,QAAQ,CAAC,MAAM,EAAE,cAAc,EAAE,QAAQ,CAAC,CAAC;QAC7C,IAAI,MAAM,CAAC,MAAM,CAAC,KAAK,KAAK,QAAQ;YAClC,QAAQ,CAAC,MAAM,EAAE,YAAY,EAAE,QAAQ,CAAC,CAAC;QAC3C,IAAI,MAAM,IAAI,CAAC,KAAK,EAAE,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC;YACnC,YAAY,CAAC,MAAM,CAAC,CAAC;YACrB,QAAQ,CAAC,MAAM,EAAE,gBAAgB,EAAE,YAAY,CAAC,CAAC;YACjD,OAAO;QACT,CAAC;QACD,IAAI,CAAC;YACH,MAAM,aAAa,GAAG,MAAM,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,cAAc,CAAC,CAAC,CAAC;YAC1E,MAAM,QAAQ,GACZ,aAAa,KAAK,IAAI;gBACpB,CAAC,CAAC,IAAI;gBACN,CAAC,CAAC,kCAAkC,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC,CAAC;YAC1E,MAAM,OAAO,GAAG,QAAQ,EAAE,OAAO,IAAI,MAAM,CAAC;YAC5C,MAAM,OAAO,GAAG,2BAA2B,CAAC;gBAC1C,eAAe,EAAE,MAAM,CAAC,IAAI;gBAC5B,OAAO;aACR,CAAC,CAAC;YACH,MAAM,WAAW,GAAG,MAAM,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,aAAa,CAAC,CAAC,CAAC;YACnE,IAAI,WAAW,KAAK,IAAI,EAAE,CAAC;gBACzB,MAAM,CAAC,WAAW,CAAC,YAAY,GAAG,SAAS,CAAC;gBAC5C,QAAQ,CAAC,MAAM,EAAE,qBAAqB,EAAE,aAAa,CAAC,CAAC;gBACvD,OAAO;YACT,CAAC;YACD,MAAM,MAAM,GAAG,qBAAqB,CAAC,WAAW,CAAC,CAAC;YAClD,MAAM,aAAa,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC;YACpE,MAAM,aAAa,GAAG,MAAM,KAAK,CAAC,IAAI,CACpC,IAAI,CAAC,OAAO,EAAE,OAAO,EAAE,kBAAkB,CAAC,CAC3C,CAAC;YACF,IAAI,aAAa,KAAK,IAAI,EAAE,CAAC;gBAC3B,MAAM,CAAC,WAAW,CAAC,YAAY,GAAG,SAAS,CAAC;gBAC5C,QAAQ,CAAC,MAAM,EAAE,0BAA0B,EAAE,aAAa,CAAC,CAAC;gBAC5D,OAAO;YACT,CAAC;YACD,MAAM,QAAQ,GAAG,2BAA2B,CAAC,KAAK,CAChD,IAAI,CAAC,KAAK,CAAC,aAAa,CAAC,CAC1B,CAAC;YACF,IAAI,QAAQ,CAAC,OAAO,KAAK,OAAO;gBAC9B,MAAM,IAAI,qBAAqB,CAAC,0BAA0B,CAAC,CAAC;YAC9D,MAAM,CAAC,IAAI,GAAG,QAAQ,CAAC;YACvB,MAAM,CAAC,WAAW,GAAG;gBACnB,YAAY,EAAE,OAAO;gBACrB,OAAO;gBACP,aAAa;gBACb,UAAU,EAAE,aAAa;gBACzB,UAAU,EAAE,aAAa;aAC1B,CAAC;YACF,MAAM,aAAa,GAAG,OAAO,CAC3B,GAAG,CAAC,qBAAqB;gBACvB,IAAI,CAAC,OAAO,EAAE,EAAE,uCAAuC,CAAC,CAC3D,CAAC;YACF,IAAI,CAAC;gBACH,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;gBAC7C,MAAM,QAAQ,GACZ,IAAI,KAAK,IAAI;oBACX,CAAC,CAAC,IAAI;oBACN,CAAC,CAAC,kCAAkC,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC;gBACjE,MAAM,UAAU,GAAG,QAAQ,EAAE,WAAW,CAAC,IAAI,CAC3C,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,aAAa,KAAK,QAAQ,CAAC,aAAa,CAC1D,CAAC;gBACF,IAAI,CAAC,UAAU,EAAE,CAAC;oBAChB,MAAM,CAAC,WAAW,CAAC,UAAU,GAAG,SAAS,CAAC;oBAC1C,QAAQ,CAAC,MAAM,EAAE,oBAAoB,EAAE,aAAa,CAAC,CAAC;gBACxD,CAAC;qBAAM,IACL,UAAU,CAAC,kBAAkB,KAAK,QAAQ,CAAC,kBAAkB;oBAC7D,wBAAwB,CAAC,UAAU,CAAC,QAAQ,CAAC;wBAC3C,QAAQ,CAAC,kBAAkB,EAC7B,CAAC;oBACD,MAAM,CAAC,WAAW,CAAC,UAAU,GAAG,SAAS,CAAC;oBAC1C,QAAQ,CAAC,MAAM,EAAE,0BAA0B,EAAE,aAAa,CAAC,CAAC;gBAC9D,CAAC;qBAAM,CAAC;oBACN,MAAM,CAAC,WAAW,CAAC,UAAU,GAAG,SAAS,CAAC;oBAC1C,MAAM,CAAC,WAAW,CAAC,UAAU,GAAG,GAAG,CAAC,UAAU,CAAC,cAAc,CAAC,EAAE,IAAI,EAAE;wBACpE,CAAC,CAAC,SAAS;wBACX,CAAC,CAAC,SAAS,CAAC;oBACd,IAAI,MAAM,CAAC,WAAW,CAAC,UAAU,KAAK,SAAS;wBAC7C,QAAQ,CAAC,MAAM,EAAE,oBAAoB,EAAE,aAAa,CAAC,CAAC;gBAC1D,CAAC;YACH,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,cAAc,EAAE,CAAC;gBACjB,IACE,KAAK,YAAY,qBAAqB;oBACtC,KAAK,CAAC,IAAI,KAAK,qBAAqB;oBAEpC,MAAM,KAAK,CAAC;gBACd,MAAM,CAAC,WAAW,CAAC,UAAU,GAAG,SAAS,CAAC;gBAC1C,QAAQ,CAAC,MAAM,EAAE,0BAA0B,EAAE,aAAa,CAAC,CAAC;YAC9D,CAAC;YACD,IAAI,GAAG,CAAC,cAAc,IAAI,GAAG,CAAC,kBAAkB,KAAK,OAAO;gBAC1D,MAAM,IAAI,qBAAqB,CAAC,0BAA0B,CAAC,CAAC;YAC9D,MAAM,SAAS,GAAG,GAAG,CAAC,cAAc;gBAClC,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC;gBAC7B,CAAC,CAAC,IAAI,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;YAC3B,IAAI,CAAC;gBACH,MAAM,MAAM,GAAG,MAAM,kBAAkB,CACrC,KAAK,EACL,SAAS,EACT,MAAM,CAAC,MAAM,CAAC,GAAG,EACjB,KAAK,CAAC,UAAU,KAAK,QAAQ,CAC9B,CAAC;gBACF,IAAI,CAAC,MAAM,EAAE,CAAC;oBACZ,MAAM,CAAC,OAAO,CAAC,YAAY,GAAG,SAAS,CAAC;oBACxC,MAAM,CAAC,OAAO,CAAC,YAAY,GAAG,SAAS,CAAC;oBACxC,MAAM,CAAC,OAAO,CAAC,YAAY,GAAG,SAAS,CAAC;oBACxC,QAAQ,CAAC,MAAM,EAAE,eAAe,EAAE,YAAY,CAAC,CAAC;gBAClD,CAAC;qBAAM,CAAC;oBACN,MAAM,CAAC,OAAO,GAAG;wBACf,YAAY,EAAE,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS;wBAClD,KAAK,EAAE,MAAM,CAAC,OAAO;qBACtB,CAAC;oBACF,MAAM,CAAC,OAAO,GAAG;wBACf,YAAY,EAAE,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS;wBAClD,KAAK,EAAE,MAAM,CAAC,OAAO;qBACtB,CAAC;oBACF,MAAM,CAAC,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC;oBAChC,IAAI,MAAM,CAAC,UAAU,EAAE,CAAC;wBACtB,MAAM,CAAC,UAAU,CAAC,aAAa,GAAG,MAAM,CAAC,UAAU,CAAC,aAAa,CAAC;wBAClE,MAAM,CAAC,UAAU,CAAC,eAAe;4BAC/B,MAAM,CAAC,UAAU,CAAC,eAAe,CAAC;oBACtC,CAAC;;wBAAM,MAAM,CAAC,UAAU,CAAC,KAAK,GAAG,SAAS,CAAC;oBAC3C,IAAI,CAAC,MAAM,CAAC,OAAO;wBAAE,QAAQ,CAAC,MAAM,EAAE,iBAAiB,EAAE,SAAS,CAAC,CAAC;yBAC/D,IAAI,CAAC,MAAM,CAAC,OAAO;wBACtB,QAAQ,CAAC,MAAM,EAAE,iBAAiB,EAAE,SAAS,CAAC,CAAC;oBACjD,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,GAAG,CAAC;wBAC1B,QAAQ,CAAC,MAAM,EAAE,iBAAiB,EAAE,SAAS,CAAC,CAAC;oBACjD,IAAI,KAAK,CAAC,UAAU,KAAK,QAAQ,EAAE,CAAC;wBAClC,IAAI,MAAM,CAAC,gBAAgB,EAAE,CAAC;4BAC5B,MAAM,CAAC,UAAU,CAAC,KAAK,GAAG,SAAS,CAAC;4BACpC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC,gBAAgB,EAAE,YAAY,CAAC,CAAC;wBAC1D,CAAC;6BAAM,IAAI,MAAM,CAAC,kBAAkB,EAAE,CAAC;4BACrC,MAAM,QAAQ,GAAG,MAAM,uBAAuB,CAAC;gCAC7C,KAAK;gCACL,eAAe,EAAE,MAAM,CAAC,IAAI;gCAC5B,SAAS;gCACT,OAAO,EAAE,MAAM,CAAC,kBAAkB;6BACnC,CAAC,CAAC;4BACH,MAAM,CAAC,UAAU,CAAC,KAAK,GAAG,QAAQ,CAAC,KAAK,CAAC;4BACzC,IAAI,QAAQ,CAAC,MAAM;gCACjB,QAAQ,CAAC,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE,YAAY,CAAC,CAAC;wBACpD,CAAC;oBACH,CAAC;gBACH,CAAC;YACH,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,cAAc,EAAE,CAAC;gBACjB,YAAY,CAAC,MAAM,CAAC,CAAC;gBACrB,QAAQ,CACN,MAAM,EACN,KAAK,YAAY,qBAAqB;oBACpC,CAAC,CAAC,KAAK,CAAC,IAAI;oBACZ,CAAC,CAAC,mBAAmB,EACvB,YAAY,CACb,CAAC;YACJ,CAAC;QACH,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,cAAc,EAAE,CAAC;YACjB,MAAM,CAAC,WAAW,CAAC,YAAY,GAAG,SAAS,CAAC;YAC5C,YAAY,CAAC,MAAM,CAAC,CAAC;YACrB,QAAQ,CACN,MAAM,EACN,KAAK,YAAY,qBAAqB;gBACpC,CAAC,CAAC,KAAK,CAAC,IAAI;gBACZ,CAAC,CAAC,0BAA0B,EAC9B,YAAY,CACb,CAAC;QACJ,CAAC;gBAAS,CAAC;YACT,MAAM,KAAK,GAAG,MAAM,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;YAC5C,IACE,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,MAAM,CAAC;gBAC9D,CAAC,MAAM,KAAK,CAAC,OAAO,EAAE,CAAC;gBACvB,CAAC,MAAM,IAAI,CAAC,KAAK,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC,EAChC,CAAC;gBACD,MAAM,CAAC,uBAAuB,GAAG,qBAAqB,CAAC;gBACvD,MAAM,CAAC,QAAQ,GAAG,KAAK,CAAC;gBACxB,MAAM,CAAC,MAAM,CAAC,YAAY,GAAG,SAAS,CAAC;gBACvC,MAAM,CAAC,WAAW,CAAC,YAAY,GAAG,SAAS,CAAC;gBAC5C,YAAY,CAAC,MAAM,CAAC,CAAC;gBACrB,QAAQ,CAAC,MAAM,EAAE,qBAAqB,EAAE,YAAY,CAAC,CAAC;YACxD,CAAC;QACH,CAAC;IACH,CAAC,CAAC;IACF,IAAI,CAAC;QACH,cAAc,EAAE,CAAC;QACjB,MAAM,YAAY,CAAC;YACjB,SAAS,EAAE,SAAS;YACpB,UAAU,EAAE,KAAK,CAAC,UAAU;YAC5B,MAAM,EAAE,eAAe,CAAC,KAAK,CAAC,MAAM,CAAC;YACrC,kBAAkB,EAAE,KAAK,CAAC,kBAAkB;YAC5C,GAAG,EAAE,OAAO;SACb,CAAC,CAAC;QACH,MAAM,CAAC,QAAQ,GAAG,MAAM,CAAC,uBAAuB,KAAK,qBAAqB,CAAC;IAC7E,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,KAAK,YAAY,cAAc,IAAI,KAAK,CAAC,IAAI,KAAK,iBAAiB;YACrE,MAAM,KAAK,CAAC;QACd,MAAM,CAAC,QAAQ,GAAG,KAAK,CAAC;QACxB,MAAM,CAAC,uBAAuB,GAAG,aAAa,CAAC;QAC/C,YAAY,CAAC,MAAM,CAAC,CAAC;QACrB,QAAQ,CACN,MAAM,EACN,KAAK,YAAY,cAAc;YAC7B,CAAC,WAAW,EAAE,mBAAmB,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC;YACvD,CAAC,CAAE,KAAK,CAAC,IAA0C;YACnD,CAAC,CAAC,mBAAmB,EACvB,YAAY,CACb,CAAC;IACJ,CAAC;IACD,QAAQ,CAAC,MAAM,EAAE,oBAAoB,EAAE,QAAQ,EAAE,MAAM,CAAC,CAAC;IACzD,QAAQ,CAAC,MAAM,EAAE,uBAAuB,EAAE,cAAc,EAAE,MAAM,CAAC,CAAC;IAClE,IAAI,MAAM,CAAC,UAAU,CAAC,KAAK,KAAK,aAAa;QAC3C,QAAQ,CAAC,MAAM,EAAE,wBAAwB,EAAE,YAAY,EAAE,MAAM,CAAC,CAAC;IACnE,OAAO,0BAA0B,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;AAClD,CAAC"}

package/dist/local/health-policy.d.ts

@@ -0,0 +1,11 @@
+import { type LocalHealthReport } from './health-schema.js';
+/** Pure advisory derivation. Never performs I/O or grants execution authority.
+ * Internal inspection alone retains not_checked; only an adapter supplies support.
+ */
+export declare function applyHealthPolicy(report: LocalHealthReport, adapter: {
+    kind: 'cli';
+} | {
+    kind: 'mcp';
+    tool_names: readonly string[];
+}): LocalHealthReport;
+//# sourceMappingURL=health-policy.d.ts.map

package/dist/local/health-policy.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"health-policy.d.ts","sourceRoot":"","sources":["../../src/local/health-policy.ts"],"names":[],"mappings":"AACA,OAAO,EAEL,KAAK,iBAAiB,EAEvB,MAAM,oBAAoB,CAAC;AAoW5B;;GAEG;AACH,wBAAgB,iBAAiB,CAC/B,MAAM,EAAE,iBAAiB,EACzB,OAAO,EAAE;IAAE,IAAI,EAAE,KAAK,CAAA;CAAE,GAAG;IAAE,IAAI,EAAE,KAAK,CAAC;IAAC,UAAU,EAAE,SAAS,MAAM,EAAE,CAAA;CAAE,GACxE,iBAAiB,CAgCnB"}