@warlock.js/core 5.29.0 → 5.31.0

package/esm/cli/commands/doctor/checks/jwt-secret.check.mjs

@@ -1,6 +1,6 @@
 import { config } from "../../../../config/config-getter.mjs";
 
-//#region ../core/src/cli/commands/doctor/checks/jwt-secret.check.ts
+//#region ../../packages/core/src/cli/commands/doctor/checks/jwt-secret.check.ts
 /**
 * A non-empty string, or `undefined`. A secret arrives from `env(...)`; an
 * unset variable yields `undefined` and a `.env` line with nothing after the
@@ -45,6 +45,7 @@ const jwtSecretCheck = {
 		return {
 			name: "jwt-secret",
 			status,
+			code: "WL1002",
 			detail: "auth is configured (auth.userType) but no JWT signing secret is set — every login and token operation will fail with a generic 500. Run `warlock jwt.generate` to create one, or set `auth.accessToken.secret`."
 		};
 	}

package/esm/cli/commands/doctor/checks/jwt-secret.check.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"jwt-secret.check.mjs","names":[],"sources":["../../../../../../../../../../core/src/cli/commands/doctor/checks/jwt-secret.check.ts"],"sourcesContent":["import { config } from \"../../../../config/config-getter\";\nimport type { CheckStatus, DoctorCheck } from \"../check.types\";\n\n/**\n * A non-empty string, or `undefined`. A secret arrives from `env(...)`; an\n * unset variable yields `undefined` and a `.env` line with nothing after the\n * `=` yields `\"\"` — both are \"not configured\".\n */\nfunction text(value: unknown): string | undefined {\n  return typeof value === \"string\" && value.trim().length > 0 ? value.trim() : undefined;\n}\n\n/**\n * Fails when the app has configured auth but no JWT signing secret is set.\n *\n * WHY THIS EXISTS. `authConfig.accessToken.secret()` throws \"no JWT secret\n * configured\" — but LAZILY, the first time a token is signed (a login). A fresh\n * scaffold's `src/config/auth.ts` reads `env(\"JWT_SECRET\")`, and a fresh `.env`\n * has none, so the app BOOTS clean and then 500s on the very first login, with\n * the real message going only to server stderr (finding 7b606e38). `doctor`\n * turns that first-login surprise into a pre-flight failure that names the fix.\n *\n * NEEDS NO BOOTED APP — it reads config only, like `optional-peers`.\n *\n * OPTS OUT when auth is not in use. The signal is `auth.userType`: the config\n * an app fills in to declare its authenticatable models (`{ user: User }`). An\n * app with no userType configured is not doing auth, so a missing secret is not\n * a finding for it — silence keeps the doctor's false-positive budget intact.\n *\n * The secret is resolved from BOTH the current key (`auth.accessToken.secret`)\n * and the legacy one (`auth.jwt.secret`) the scaffold still emits, so this does\n * not fire on a project that is simply using the older, still-supported shape.\n */\nexport const jwtSecretCheck: DoctorCheck = {\n  name: \"jwt-secret\",\n  run: () => {\n    const userType = config.get(\"auth.userType\");\n\n    const authInUse =\n      typeof userType === \"object\" && userType !== null && Object.keys(userType).length > 0;\n\n    if (!authInUse) return undefined;\n\n    const secret =\n      text(config.get(\"auth.accessToken.secret\")) ?? text(config.get(\"auth.jwt.secret\"));\n\n    const status: CheckStatus = secret ? \"ok\" : \"fail\";\n\n    if (secret) {\n      return { name: \"jwt-secret\", status, detail: \"A JWT signing secret is configured.\" };\n    }\n\n    return {\n      name: \"jwt-secret\",\n      status,\n      detail:\n        \"auth is configured (auth.userType) but no JWT signing secret is set — \" +\n        \"every login and token operation will fail with a generic 500. \" +\n        \"Run `warlock jwt.generate` to create one, or set `auth.accessToken.secret`.\",\n    };\n  },\n};\n"],"mappings":";;;;;;;;AAQA,SAAS,KAAK,OAAoC;CAChD,OAAO,OAAO,UAAU,YAAY,MAAM,KAAK,CAAC,CAAC,SAAS,IAAI,MAAM,KAAK,IAAI;AAC/E;;;;;;;;;;;;;;;;;;;;;;AAuBA,MAAa,iBAA8B;CACzC,MAAM;CACN,WAAW;EACT,MAAM,WAAW,OAAO,IAAI,eAAe;EAK3C,IAAI,EAFF,OAAO,aAAa,YAAY,aAAa,QAAQ,OAAO,KAAK,QAAQ,CAAC,CAAC,SAAS,IAEtE,OAAO;EAEvB,MAAM,SACJ,KAAK,OAAO,IAAI,yBAAyB,CAAC,KAAK,KAAK,OAAO,IAAI,iBAAiB,CAAC;EAEnF,MAAM,SAAsB,SAAS,OAAO;EAE5C,IAAI,QACF,OAAO;GAAE,MAAM;GAAc;GAAQ,QAAQ;EAAsC;EAGrF,OAAO;GACL,MAAM;GACN;GACA,QACE;EAGJ;CACF;AACF"}
+{"version":3,"file":"jwt-secret.check.mjs","names":[],"sources":["../../../../../../../../../../../packages/core/src/cli/commands/doctor/checks/jwt-secret.check.ts"],"sourcesContent":["import { config } from \"../../../../config/config-getter\";\nimport type { CheckStatus, DoctorCheck } from \"../check.types\";\n\n/**\n * A non-empty string, or `undefined`. A secret arrives from `env(...)`; an\n * unset variable yields `undefined` and a `.env` line with nothing after the\n * `=` yields `\"\"` — both are \"not configured\".\n */\nfunction text(value: unknown): string | undefined {\n  return typeof value === \"string\" && value.trim().length > 0 ? value.trim() : undefined;\n}\n\n/**\n * Fails when the app has configured auth but no JWT signing secret is set.\n *\n * WHY THIS EXISTS. `authConfig.accessToken.secret()` throws \"no JWT secret\n * configured\" — but LAZILY, the first time a token is signed (a login). A fresh\n * scaffold's `src/config/auth.ts` reads `env(\"JWT_SECRET\")`, and a fresh `.env`\n * has none, so the app BOOTS clean and then 500s on the very first login, with\n * the real message going only to server stderr (finding 7b606e38). `doctor`\n * turns that first-login surprise into a pre-flight failure that names the fix.\n *\n * NEEDS NO BOOTED APP — it reads config only, like `optional-peers`.\n *\n * OPTS OUT when auth is not in use. The signal is `auth.userType`: the config\n * an app fills in to declare its authenticatable models (`{ user: User }`). An\n * app with no userType configured is not doing auth, so a missing secret is not\n * a finding for it — silence keeps the doctor's false-positive budget intact.\n *\n * The secret is resolved from BOTH the current key (`auth.accessToken.secret`)\n * and the legacy one (`auth.jwt.secret`) the scaffold still emits, so this does\n * not fire on a project that is simply using the older, still-supported shape.\n */\nexport const jwtSecretCheck: DoctorCheck = {\n  name: \"jwt-secret\",\n  run: () => {\n    const userType = config.get(\"auth.userType\");\n\n    const authInUse =\n      typeof userType === \"object\" && userType !== null && Object.keys(userType).length > 0;\n\n    if (!authInUse) return undefined;\n\n    const secret =\n      text(config.get(\"auth.accessToken.secret\")) ?? text(config.get(\"auth.jwt.secret\"));\n\n    const status: CheckStatus = secret ? \"ok\" : \"fail\";\n\n    if (secret) {\n      return { name: \"jwt-secret\", status, detail: \"A JWT signing secret is configured.\" };\n    }\n\n    return {\n      name: \"jwt-secret\",\n      status,\n      code: \"WL1002\",\n      detail:\n        \"auth is configured (auth.userType) but no JWT signing secret is set — \" +\n        \"every login and token operation will fail with a generic 500. \" +\n        \"Run `warlock jwt.generate` to create one, or set `auth.accessToken.secret`.\",\n    };\n  },\n};\n"],"mappings":";;;;;;;;AAQA,SAAS,KAAK,OAAoC;CAChD,OAAO,OAAO,UAAU,YAAY,MAAM,KAAK,CAAC,CAAC,SAAS,IAAI,MAAM,KAAK,IAAI;AAC/E;;;;;;;;;;;;;;;;;;;;;;AAuBA,MAAa,iBAA8B;CACzC,MAAM;CACN,WAAW;EACT,MAAM,WAAW,OAAO,IAAI,eAAe;EAK3C,IAAI,EAFF,OAAO,aAAa,YAAY,aAAa,QAAQ,OAAO,KAAK,QAAQ,CAAC,CAAC,SAAS,IAEtE,OAAO;EAEvB,MAAM,SACJ,KAAK,OAAO,IAAI,yBAAyB,CAAC,KAAK,KAAK,OAAO,IAAI,iBAAiB,CAAC;EAEnF,MAAM,SAAsB,SAAS,OAAO;EAE5C,IAAI,QACF,OAAO;GAAE,MAAM;GAAc;GAAQ,QAAQ;EAAsC;EAGrF,OAAO;GACL,MAAM;GACN;GACA,MAAM;GACN,QACE;EAGJ;CACF;AACF"}

package/esm/cli/commands/doctor/checks/locales-ts-deprecated.check.mjs

@@ -5,7 +5,7 @@ import path from "node:path";
 import { existsSync, readFileSync, readdirSync, unlinkSync, writeFileSync } from "node:fs";
 import ts from "typescript";
 
-//#region ../core/src/cli/commands/doctor/checks/locales-ts-deprecated.check.ts
+//#region ../../packages/core/src/cli/commands/doctor/checks/locales-ts-deprecated.check.ts
 function localeSources() {
 	const appDirectory = appPath();
 	if (!existsSync(appDirectory)) return [];
@@ -158,6 +158,7 @@ const localesTsDeprecatedCheck = {
 		return {
 			name: "locales-ts-deprecated",
 			status: "warn",
+			code: "WL9101",
 			detail: `${sources.map((source) => {
 				return `${path.relative(process.cwd(), source.file).replaceAll("\\", "/")}: ${source.convertible ? "auto-convertible" : "manual"} (${source.reason})`;
 			}).join("; ")}. Auto-loaded locales.ts goes away in v6; run \`warlock doctor --fix\` to convert auto-convertible files.`

package/esm/cli/commands/doctor/checks/locales-ts-deprecated.check.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"locales-ts-deprecated.check.mjs","names":[],"sources":["../../../../../../../../../../core/src/cli/commands/doctor/checks/locales-ts-deprecated.check.ts"],"sourcesContent":["import { existsSync, readdirSync, readFileSync, unlinkSync, writeFileSync } from \"node:fs\";\nimport path from \"node:path\";\nimport ts from \"typescript\";\nimport { config } from \"../../../../config/config-getter\";\nimport {\n  parseLocaleDictionary,\n  type LocaleDictionaryEntries,\n} from \"../../../../localization/parse-locale-dictionary\";\nimport { appPath, rootPath } from \"../../../../utils/paths\";\nimport type { DoctorCheck } from \"../check.types\";\n\ntype LocaleSource = {\n  file: string;\n  module: string;\n};\n\nexport type LocaleInspection = LocaleSource & {\n  convertible: boolean;\n  reason: string;\n  group?: string;\n  dictionary?: Record<string, unknown>;\n  entries?: LocaleDictionaryEntries;\n};\n\nfunction localeSources(): LocaleSource[] {\n  const appDirectory = appPath();\n  if (!existsSync(appDirectory)) return [];\n\n  return readdirSync(appDirectory, { withFileTypes: true })\n    .filter((entry) => entry.isDirectory())\n    .map((entry) => ({\n      file: path.join(appDirectory, entry.name, \"utils\", \"locales.ts\"),\n      module: entry.name,\n    }))\n    .filter(({ file }) => existsSync(file));\n}\n\nfunction propertyName(property: ts.PropertyAssignment): string | undefined {\n  if (ts.isIdentifier(property.name) || ts.isStringLiteral(property.name))\n    return property.name.text;\n  return undefined;\n}\n\nfunction literalObject(node: ts.Expression): Record<string, unknown> | undefined {\n  if (!ts.isObjectLiteralExpression(node)) return undefined;\n  const value: Record<string, unknown> = Object.create(null);\n  for (const member of node.properties) {\n    if (!ts.isPropertyAssignment(member)) return undefined;\n    const key = propertyName(member);\n    if (key === undefined) return undefined;\n    if (ts.isStringLiteral(member.initializer) || ts.isNumericLiteral(member.initializer)) {\n      value[key] = ts.isNumericLiteral(member.initializer)\n        ? Number(member.initializer.text)\n        : member.initializer.text;\n      continue;\n    }\n    const nested = literalObject(member.initializer);\n    if (nested === undefined) return undefined;\n    value[key] = nested;\n  }\n  return value;\n}\n\nfunction flattenLiteral(\n  value: Record<string, unknown>,\n  group: string,\n  entries: LocaleDictionaryEntries,\n): boolean {\n  const values = Object.values(value);\n  if (values.every((item) => typeof item === \"string\" || typeof item === \"number\")) {\n    if (group === \"\") return false;\n    if (!values.every((item) => typeof item === \"string\")) return false;\n    entries[group] = value as Record<string, string>;\n    return true;\n  }\n  if (!values.every((item) => item !== null && typeof item === \"object\" && !Array.isArray(item)))\n    return false;\n  return Object.entries(value).every(([key, nested]) =>\n    flattenLiteral(\n      nested as Record<string, unknown>,\n      group === \"\" ? key : `${group}.${key}`,\n      entries,\n    ),\n  );\n}\n\nfunction inspect(source: LocaleSource): LocaleInspection {\n  const jsonFile = path.join(path.dirname(source.file), \"locales.json\");\n  if (existsSync(jsonFile))\n    return { ...source, convertible: false, reason: \"locales.json already exists\" };\n\n  const text = readFileSync(source.file, \"utf8\");\n  const program = ts.createSourceFile(source.file, text, ts.ScriptTarget.Latest, true);\n  const syntaxDiagnostics = ts.transpileModule(text, {\n    fileName: source.file,\n    reportDiagnostics: true,\n  }).diagnostics;\n  if (syntaxDiagnostics !== undefined && syntaxDiagnostics.length > 0)\n    return { ...source, convertible: false, reason: \"TypeScript syntax is invalid\" };\n  const [importStatement, callStatement] = program.statements;\n  if (\n    !importStatement ||\n    !ts.isImportDeclaration(importStatement) ||\n    !ts.isStringLiteral(importStatement.moduleSpecifier) ||\n    importStatement.moduleSpecifier.text !== \"@warlock.js/core\" ||\n    !importStatement.importClause ||\n    importStatement.importClause.isTypeOnly ||\n    importStatement.importClause.name ||\n    !importStatement.importClause.namedBindings ||\n    !ts.isNamedImports(importStatement.importClause.namedBindings) ||\n    importStatement.importClause.namedBindings.elements.length !== 1 ||\n    importStatement.importClause.namedBindings.elements[0]?.name.text !== \"groupedTranslations\" ||\n    importStatement.importClause.namedBindings.elements[0]?.propertyName\n  )\n    return {\n      ...source,\n      convertible: false,\n      reason: \"must import only groupedTranslations from @warlock.js/core\",\n    };\n\n  if (program.statements.length !== 2)\n    return {\n      ...source,\n      convertible: false,\n      reason: \"must contain only the groupedTranslations import and one call\",\n    };\n\n  if (\n    !callStatement ||\n    !ts.isExpressionStatement(callStatement) ||\n    !ts.isCallExpression(callStatement.expression)\n  )\n    return {\n      ...source,\n      convertible: false,\n      reason: \"must contain one top-level groupedTranslations call\",\n    };\n  const call = callStatement.expression;\n  if (\n    !ts.isIdentifier(call.expression) ||\n    call.expression.text !== \"groupedTranslations\" ||\n    call.arguments.length !== 2 ||\n    !ts.isStringLiteral(call.arguments[0]!)\n  )\n    return {\n      ...source,\n      convertible: false,\n      reason: \"must call groupedTranslations with a string group and object\",\n    };\n  const dictionary = literalObject(call.arguments[1]!);\n  if (!dictionary)\n    return {\n      ...source,\n      convertible: false,\n      reason: \"translation object must contain only literal keys, objects, strings, or numbers\",\n    };\n  const group = call.arguments[0].text;\n  const entries: LocaleDictionaryEntries = Object.create(null);\n  if (!flattenLiteral(dictionary, group, entries))\n    return {\n      ...source,\n      convertible: false,\n      reason: \"translation object has no valid literal locale entries\",\n    };\n  return {\n    ...source,\n    convertible: true,\n    reason: \"pure groupedTranslations literal\",\n    group,\n    dictionary,\n    entries,\n  };\n}\n\nexport function inspectLocaleSources(): LocaleInspection[] {\n  return localeSources().map(inspect);\n}\n\nfunction localeCodes(): readonly string[] | undefined {\n  const configured = config.key<unknown>(\"app.localeCodes\");\n  return Array.isArray(configured) && configured.every((code) => typeof code === \"string\")\n    ? configured\n    : undefined;\n}\n\nfunction sameEntries(left: LocaleDictionaryEntries, right: LocaleDictionaryEntries): boolean {\n  return JSON.stringify(left) === JSON.stringify(right);\n}\n\n/** Convert safe legacy locale sources, retaining a TS file whenever verification cannot prove equivalence. */\nexport function fixLocaleSources(): LocaleInspection[] {\n  return inspectLocaleSources().map((result) => {\n    if (!result.convertible || !result.group || !result.dictionary || !result.entries)\n      return result;\n    const jsonFile = path.join(path.dirname(result.file), \"locales.json\");\n    const document: Record<string, unknown> =\n      result.group === result.module\n        ? result.dictionary\n        : { $group: result.group, ...result.dictionary };\n    const json = `${JSON.stringify(document, null, 2)}\\n`;\n    writeFileSync(jsonFile, json);\n    try {\n      const parsed = parseLocaleDictionary({\n        sourceFile: rootPath(path.relative(process.cwd(), jsonFile)),\n        source: json,\n        defaultNamespace: result.module,\n        localeCodes: localeCodes(),\n      });\n      if (!sameEntries(result.entries, parsed.entries)) throw new Error(\"flattened entries differ\");\n    } catch (error) {\n      unlinkSync(jsonFile);\n      return {\n        ...result,\n        convertible: false,\n        reason: `verification failed: ${error instanceof Error ? error.message : String(error)}`,\n      };\n    }\n    unlinkSync(result.file);\n    return {\n      ...result,\n      reason: \"converted (comments in the TypeScript source are not retained)\",\n    };\n  });\n}\n\nexport const localesTsDeprecatedCheck: DoctorCheck = {\n  name: \"locales-ts-deprecated\",\n  run: () => {\n    const sources = inspectLocaleSources();\n    if (sources.length === 0) return undefined;\n    const details = sources.map((source) => {\n      const label = path.relative(process.cwd(), source.file).replaceAll(\"\\\\\", \"/\");\n      return `${label}: ${source.convertible ? \"auto-convertible\" : \"manual\"} (${source.reason})`;\n    });\n    return {\n      name: \"locales-ts-deprecated\",\n      status: \"warn\",\n      detail:\n        `${details.join(\"; \")}. Auto-loaded locales.ts goes away in v6; ` +\n        \"run `warlock doctor --fix` to convert auto-convertible files.\",\n    };\n  },\n};\n"],"mappings":";;;;;;;;AAwBA,SAAS,gBAAgC;CACvC,MAAM,eAAe,QAAQ;CAC7B,IAAI,CAAC,WAAW,YAAY,GAAG,OAAO,CAAC;CAEvC,OAAO,YAAY,cAAc,EAAE,eAAe,KAAK,CAAC,CAAC,CACtD,QAAQ,UAAU,MAAM,YAAY,CAAC,CAAC,CACtC,KAAK,WAAW;EACf,MAAM,KAAK,KAAK,cAAc,MAAM,MAAM,SAAS,YAAY;EAC/D,QAAQ,MAAM;CAChB,EAAE,CAAC,CACF,QAAQ,EAAE,WAAW,WAAW,IAAI,CAAC;AAC1C;AAEA,SAAS,aAAa,UAAqD;CACzE,IAAI,GAAG,aAAa,SAAS,IAAI,KAAK,GAAG,gBAAgB,SAAS,IAAI,GACpE,OAAO,SAAS,KAAK;AAEzB;AAEA,SAAS,cAAc,MAA0D;CAC/E,IAAI,CAAC,GAAG,0BAA0B,IAAI,GAAG,OAAO;CAChD,MAAM,QAAiC,OAAO,OAAO,IAAI;CACzD,KAAK,MAAM,UAAU,KAAK,YAAY;EACpC,IAAI,CAAC,GAAG,qBAAqB,MAAM,GAAG,OAAO;EAC7C,MAAM,MAAM,aAAa,MAAM;EAC/B,IAAI,QAAQ,QAAW,OAAO;EAC9B,IAAI,GAAG,gBAAgB,OAAO,WAAW,KAAK,GAAG,iBAAiB,OAAO,WAAW,GAAG;GACrF,MAAM,OAAO,GAAG,iBAAiB,OAAO,WAAW,IAC/C,OAAO,OAAO,YAAY,IAAI,IAC9B,OAAO,YAAY;GACvB;EACF;EACA,MAAM,SAAS,cAAc,OAAO,WAAW;EAC/C,IAAI,WAAW,QAAW,OAAO;EACjC,MAAM,OAAO;CACf;CACA,OAAO;AACT;AAEA,SAAS,eACP,OACA,OACA,SACS;CACT,MAAM,SAAS,OAAO,OAAO,KAAK;CAClC,IAAI,OAAO,OAAO,SAAS,OAAO,SAAS,YAAY,OAAO,SAAS,QAAQ,GAAG;EAChF,IAAI,UAAU,IAAI,OAAO;EACzB,IAAI,CAAC,OAAO,OAAO,SAAS,OAAO,SAAS,QAAQ,GAAG,OAAO;EAC9D,QAAQ,SAAS;EACjB,OAAO;CACT;CACA,IAAI,CAAC,OAAO,OAAO,SAAS,SAAS,QAAQ,OAAO,SAAS,YAAY,CAAC,MAAM,QAAQ,IAAI,CAAC,GAC3F,OAAO;CACT,OAAO,OAAO,QAAQ,KAAK,CAAC,CAAC,OAAO,CAAC,KAAK,YACxC,eACE,QACA,UAAU,KAAK,MAAM,GAAG,MAAM,GAAG,OACjC,OACF,CACF;AACF;AAEA,SAAS,QAAQ,QAAwC;CAEvD,IAAI,WADa,KAAK,KAAK,KAAK,QAAQ,OAAO,IAAI,GAAG,cAChC,CAAC,GACrB,OAAO;EAAE,GAAG;EAAQ,aAAa;EAAO,QAAQ;CAA8B;CAEhF,MAAM,OAAO,aAAa,OAAO,MAAM,MAAM;CAC7C,MAAM,UAAU,GAAG,iBAAiB,OAAO,MAAM,MAAM,GAAG,aAAa,QAAQ,IAAI;CACnF,MAAM,oBAAoB,GAAG,gBAAgB,MAAM;EACjD,UAAU,OAAO;EACjB,mBAAmB;CACrB,CAAC,CAAC,CAAC;CACH,IAAI,sBAAsB,UAAa,kBAAkB,SAAS,GAChE,OAAO;EAAE,GAAG;EAAQ,aAAa;EAAO,QAAQ;CAA+B;CACjF,MAAM,CAAC,iBAAiB,iBAAiB,QAAQ;CACjD,IACE,CAAC,mBACD,CAAC,GAAG,oBAAoB,eAAe,KACvC,CAAC,GAAG,gBAAgB,gBAAgB,eAAe,KACnD,gBAAgB,gBAAgB,SAAS,sBACzC,CAAC,gBAAgB,gBACjB,gBAAgB,aAAa,cAC7B,gBAAgB,aAAa,QAC7B,CAAC,gBAAgB,aAAa,iBAC9B,CAAC,GAAG,eAAe,gBAAgB,aAAa,aAAa,KAC7D,gBAAgB,aAAa,cAAc,SAAS,WAAW,KAC/D,gBAAgB,aAAa,cAAc,SAAS,EAAE,EAAE,KAAK,SAAS,yBACtE,gBAAgB,aAAa,cAAc,SAAS,EAAE,EAAE,cAExD,OAAO;EACL,GAAG;EACH,aAAa;EACb,QAAQ;CACV;CAEF,IAAI,QAAQ,WAAW,WAAW,GAChC,OAAO;EACL,GAAG;EACH,aAAa;EACb,QAAQ;CACV;CAEF,IACE,CAAC,iBACD,CAAC,GAAG,sBAAsB,aAAa,KACvC,CAAC,GAAG,iBAAiB,cAAc,UAAU,GAE7C,OAAO;EACL,GAAG;EACH,aAAa;EACb,QAAQ;CACV;CACF,MAAM,OAAO,cAAc;CAC3B,IACE,CAAC,GAAG,aAAa,KAAK,UAAU,KAChC,KAAK,WAAW,SAAS,yBACzB,KAAK,UAAU,WAAW,KAC1B,CAAC,GAAG,gBAAgB,KAAK,UAAU,EAAG,GAEtC,OAAO;EACL,GAAG;EACH,aAAa;EACb,QAAQ;CACV;CACF,MAAM,aAAa,cAAc,KAAK,UAAU,EAAG;CACnD,IAAI,CAAC,YACH,OAAO;EACL,GAAG;EACH,aAAa;EACb,QAAQ;CACV;CACF,MAAM,QAAQ,KAAK,UAAU,EAAE,CAAC;CAChC,MAAM,UAAmC,OAAO,OAAO,IAAI;CAC3D,IAAI,CAAC,eAAe,YAAY,OAAO,OAAO,GAC5C,OAAO;EACL,GAAG;EACH,aAAa;EACb,QAAQ;CACV;CACF,OAAO;EACL,GAAG;EACH,aAAa;EACb,QAAQ;EACR;EACA;EACA;CACF;AACF;AAEA,SAAgB,uBAA2C;CACzD,OAAO,cAAc,CAAC,CAAC,IAAI,OAAO;AACpC;AAEA,SAAS,cAA6C;CACpD,MAAM,aAAa,OAAO,IAAa,iBAAiB;CACxD,OAAO,MAAM,QAAQ,UAAU,KAAK,WAAW,OAAO,SAAS,OAAO,SAAS,QAAQ,IACnF,aACA;AACN;AAEA,SAAS,YAAY,MAA+B,OAAyC;CAC3F,OAAO,KAAK,UAAU,IAAI,MAAM,KAAK,UAAU,KAAK;AACtD;;AAGA,SAAgB,mBAAuC;CACrD,OAAO,qBAAqB,CAAC,CAAC,KAAK,WAAW;EAC5C,IAAI,CAAC,OAAO,eAAe,CAAC,OAAO,SAAS,CAAC,OAAO,cAAc,CAAC,OAAO,SACxE,OAAO;EACT,MAAM,WAAW,KAAK,KAAK,KAAK,QAAQ,OAAO,IAAI,GAAG,cAAc;EACpE,MAAM,WACJ,OAAO,UAAU,OAAO,SACpB,OAAO,aACP;GAAE,QAAQ,OAAO;GAAO,GAAG,OAAO;EAAW;EACnD,MAAM,OAAO,GAAG,KAAK,UAAU,UAAU,MAAM,CAAC,EAAE;EAClD,cAAc,UAAU,IAAI;EAC5B,IAAI;GACF,MAAM,SAAS,sBAAsB;IACnC,YAAY,SAAS,KAAK,SAAS,QAAQ,IAAI,GAAG,QAAQ,CAAC;IAC3D,QAAQ;IACR,kBAAkB,OAAO;IACzB,aAAa,YAAY;GAC3B,CAAC;GACD,IAAI,CAAC,YAAY,OAAO,SAAS,OAAO,OAAO,GAAG,MAAM,IAAI,MAAM,0BAA0B;EAC9F,SAAS,OAAO;GACd,WAAW,QAAQ;GACnB,OAAO;IACL,GAAG;IACH,aAAa;IACb,QAAQ,wBAAwB,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK;GACvF;EACF;EACA,WAAW,OAAO,IAAI;EACtB,OAAO;GACL,GAAG;GACH,QAAQ;EACV;CACF,CAAC;AACH;AAEA,MAAa,2BAAwC;CACnD,MAAM;CACN,WAAW;EACT,MAAM,UAAU,qBAAqB;EACrC,IAAI,QAAQ,WAAW,GAAG,OAAO;EAKjC,OAAO;GACL,MAAM;GACN,QAAQ;GACR,QACE,GARY,QAAQ,KAAK,WAAW;IAEtC,OAAO,GADO,KAAK,SAAS,QAAQ,IAAI,GAAG,OAAO,IAAI,CAAC,CAAC,WAAW,MAAM,GAC3D,EAAE,IAAI,OAAO,cAAc,qBAAqB,SAAS,IAAI,OAAO,OAAO;GAC3F,CAKa,CAAC,CAAC,KAAK,IAAI,EAAE;EAE1B;CACF;AACF"}
+{"version":3,"file":"locales-ts-deprecated.check.mjs","names":[],"sources":["../../../../../../../../../../../packages/core/src/cli/commands/doctor/checks/locales-ts-deprecated.check.ts"],"sourcesContent":["import { existsSync, readdirSync, readFileSync, unlinkSync, writeFileSync } from \"node:fs\";\nimport path from \"node:path\";\nimport ts from \"typescript\";\nimport { config } from \"../../../../config/config-getter\";\nimport {\n  parseLocaleDictionary,\n  type LocaleDictionaryEntries,\n} from \"../../../../localization/parse-locale-dictionary\";\nimport { appPath, rootPath } from \"../../../../utils/paths\";\nimport type { DoctorCheck } from \"../check.types\";\n\ntype LocaleSource = {\n  file: string;\n  module: string;\n};\n\nexport type LocaleInspection = LocaleSource & {\n  convertible: boolean;\n  reason: string;\n  group?: string;\n  dictionary?: Record<string, unknown>;\n  entries?: LocaleDictionaryEntries;\n};\n\nfunction localeSources(): LocaleSource[] {\n  const appDirectory = appPath();\n  if (!existsSync(appDirectory)) return [];\n\n  return readdirSync(appDirectory, { withFileTypes: true })\n    .filter((entry) => entry.isDirectory())\n    .map((entry) => ({\n      file: path.join(appDirectory, entry.name, \"utils\", \"locales.ts\"),\n      module: entry.name,\n    }))\n    .filter(({ file }) => existsSync(file));\n}\n\nfunction propertyName(property: ts.PropertyAssignment): string | undefined {\n  if (ts.isIdentifier(property.name) || ts.isStringLiteral(property.name))\n    return property.name.text;\n  return undefined;\n}\n\nfunction literalObject(node: ts.Expression): Record<string, unknown> | undefined {\n  if (!ts.isObjectLiteralExpression(node)) return undefined;\n  const value: Record<string, unknown> = Object.create(null);\n  for (const member of node.properties) {\n    if (!ts.isPropertyAssignment(member)) return undefined;\n    const key = propertyName(member);\n    if (key === undefined) return undefined;\n    if (ts.isStringLiteral(member.initializer) || ts.isNumericLiteral(member.initializer)) {\n      value[key] = ts.isNumericLiteral(member.initializer)\n        ? Number(member.initializer.text)\n        : member.initializer.text;\n      continue;\n    }\n    const nested = literalObject(member.initializer);\n    if (nested === undefined) return undefined;\n    value[key] = nested;\n  }\n  return value;\n}\n\nfunction flattenLiteral(\n  value: Record<string, unknown>,\n  group: string,\n  entries: LocaleDictionaryEntries,\n): boolean {\n  const values = Object.values(value);\n  if (values.every((item) => typeof item === \"string\" || typeof item === \"number\")) {\n    if (group === \"\") return false;\n    if (!values.every((item) => typeof item === \"string\")) return false;\n    entries[group] = value as Record<string, string>;\n    return true;\n  }\n  if (!values.every((item) => item !== null && typeof item === \"object\" && !Array.isArray(item)))\n    return false;\n  return Object.entries(value).every(([key, nested]) =>\n    flattenLiteral(\n      nested as Record<string, unknown>,\n      group === \"\" ? key : `${group}.${key}`,\n      entries,\n    ),\n  );\n}\n\nfunction inspect(source: LocaleSource): LocaleInspection {\n  const jsonFile = path.join(path.dirname(source.file), \"locales.json\");\n  if (existsSync(jsonFile))\n    return { ...source, convertible: false, reason: \"locales.json already exists\" };\n\n  const text = readFileSync(source.file, \"utf8\");\n  const program = ts.createSourceFile(source.file, text, ts.ScriptTarget.Latest, true);\n  const syntaxDiagnostics = ts.transpileModule(text, {\n    fileName: source.file,\n    reportDiagnostics: true,\n  }).diagnostics;\n  if (syntaxDiagnostics !== undefined && syntaxDiagnostics.length > 0)\n    return { ...source, convertible: false, reason: \"TypeScript syntax is invalid\" };\n  const [importStatement, callStatement] = program.statements;\n  if (\n    !importStatement ||\n    !ts.isImportDeclaration(importStatement) ||\n    !ts.isStringLiteral(importStatement.moduleSpecifier) ||\n    importStatement.moduleSpecifier.text !== \"@warlock.js/core\" ||\n    !importStatement.importClause ||\n    importStatement.importClause.isTypeOnly ||\n    importStatement.importClause.name ||\n    !importStatement.importClause.namedBindings ||\n    !ts.isNamedImports(importStatement.importClause.namedBindings) ||\n    importStatement.importClause.namedBindings.elements.length !== 1 ||\n    importStatement.importClause.namedBindings.elements[0]?.name.text !== \"groupedTranslations\" ||\n    importStatement.importClause.namedBindings.elements[0]?.propertyName\n  )\n    return {\n      ...source,\n      convertible: false,\n      reason: \"must import only groupedTranslations from @warlock.js/core\",\n    };\n\n  if (program.statements.length !== 2)\n    return {\n      ...source,\n      convertible: false,\n      reason: \"must contain only the groupedTranslations import and one call\",\n    };\n\n  if (\n    !callStatement ||\n    !ts.isExpressionStatement(callStatement) ||\n    !ts.isCallExpression(callStatement.expression)\n  )\n    return {\n      ...source,\n      convertible: false,\n      reason: \"must contain one top-level groupedTranslations call\",\n    };\n  const call = callStatement.expression;\n  if (\n    !ts.isIdentifier(call.expression) ||\n    call.expression.text !== \"groupedTranslations\" ||\n    call.arguments.length !== 2 ||\n    !ts.isStringLiteral(call.arguments[0]!)\n  )\n    return {\n      ...source,\n      convertible: false,\n      reason: \"must call groupedTranslations with a string group and object\",\n    };\n  const dictionary = literalObject(call.arguments[1]!);\n  if (!dictionary)\n    return {\n      ...source,\n      convertible: false,\n      reason: \"translation object must contain only literal keys, objects, strings, or numbers\",\n    };\n  const group = call.arguments[0].text;\n  const entries: LocaleDictionaryEntries = Object.create(null);\n  if (!flattenLiteral(dictionary, group, entries))\n    return {\n      ...source,\n      convertible: false,\n      reason: \"translation object has no valid literal locale entries\",\n    };\n  return {\n    ...source,\n    convertible: true,\n    reason: \"pure groupedTranslations literal\",\n    group,\n    dictionary,\n    entries,\n  };\n}\n\nexport function inspectLocaleSources(): LocaleInspection[] {\n  return localeSources().map(inspect);\n}\n\nfunction localeCodes(): readonly string[] | undefined {\n  const configured = config.key<unknown>(\"app.localeCodes\");\n  return Array.isArray(configured) && configured.every((code) => typeof code === \"string\")\n    ? configured\n    : undefined;\n}\n\nfunction sameEntries(left: LocaleDictionaryEntries, right: LocaleDictionaryEntries): boolean {\n  return JSON.stringify(left) === JSON.stringify(right);\n}\n\n/** Convert safe legacy locale sources, retaining a TS file whenever verification cannot prove equivalence. */\nexport function fixLocaleSources(): LocaleInspection[] {\n  return inspectLocaleSources().map((result) => {\n    if (!result.convertible || !result.group || !result.dictionary || !result.entries)\n      return result;\n    const jsonFile = path.join(path.dirname(result.file), \"locales.json\");\n    const document: Record<string, unknown> =\n      result.group === result.module\n        ? result.dictionary\n        : { $group: result.group, ...result.dictionary };\n    const json = `${JSON.stringify(document, null, 2)}\\n`;\n    writeFileSync(jsonFile, json);\n    try {\n      const parsed = parseLocaleDictionary({\n        sourceFile: rootPath(path.relative(process.cwd(), jsonFile)),\n        source: json,\n        defaultNamespace: result.module,\n        localeCodes: localeCodes(),\n      });\n      if (!sameEntries(result.entries, parsed.entries)) throw new Error(\"flattened entries differ\");\n    } catch (error) {\n      unlinkSync(jsonFile);\n      return {\n        ...result,\n        convertible: false,\n        reason: `verification failed: ${error instanceof Error ? error.message : String(error)}`,\n      };\n    }\n    unlinkSync(result.file);\n    return {\n      ...result,\n      reason: \"converted (comments in the TypeScript source are not retained)\",\n    };\n  });\n}\n\nexport const localesTsDeprecatedCheck: DoctorCheck = {\n  name: \"locales-ts-deprecated\",\n  run: () => {\n    const sources = inspectLocaleSources();\n    if (sources.length === 0) return undefined;\n    const details = sources.map((source) => {\n      const label = path.relative(process.cwd(), source.file).replaceAll(\"\\\\\", \"/\");\n      return `${label}: ${source.convertible ? \"auto-convertible\" : \"manual\"} (${source.reason})`;\n    });\n    return {\n      name: \"locales-ts-deprecated\",\n      status: \"warn\",\n      code: \"WL9101\",\n      detail:\n        `${details.join(\"; \")}. Auto-loaded locales.ts goes away in v6; ` +\n        \"run `warlock doctor --fix` to convert auto-convertible files.\",\n    };\n  },\n};\n"],"mappings":";;;;;;;;AAwBA,SAAS,gBAAgC;CACvC,MAAM,eAAe,QAAQ;CAC7B,IAAI,CAAC,WAAW,YAAY,GAAG,OAAO,CAAC;CAEvC,OAAO,YAAY,cAAc,EAAE,eAAe,KAAK,CAAC,CAAC,CACtD,QAAQ,UAAU,MAAM,YAAY,CAAC,CAAC,CACtC,KAAK,WAAW;EACf,MAAM,KAAK,KAAK,cAAc,MAAM,MAAM,SAAS,YAAY;EAC/D,QAAQ,MAAM;CAChB,EAAE,CAAC,CACF,QAAQ,EAAE,WAAW,WAAW,IAAI,CAAC;AAC1C;AAEA,SAAS,aAAa,UAAqD;CACzE,IAAI,GAAG,aAAa,SAAS,IAAI,KAAK,GAAG,gBAAgB,SAAS,IAAI,GACpE,OAAO,SAAS,KAAK;AAEzB;AAEA,SAAS,cAAc,MAA0D;CAC/E,IAAI,CAAC,GAAG,0BAA0B,IAAI,GAAG,OAAO;CAChD,MAAM,QAAiC,OAAO,OAAO,IAAI;CACzD,KAAK,MAAM,UAAU,KAAK,YAAY;EACpC,IAAI,CAAC,GAAG,qBAAqB,MAAM,GAAG,OAAO;EAC7C,MAAM,MAAM,aAAa,MAAM;EAC/B,IAAI,QAAQ,QAAW,OAAO;EAC9B,IAAI,GAAG,gBAAgB,OAAO,WAAW,KAAK,GAAG,iBAAiB,OAAO,WAAW,GAAG;GACrF,MAAM,OAAO,GAAG,iBAAiB,OAAO,WAAW,IAC/C,OAAO,OAAO,YAAY,IAAI,IAC9B,OAAO,YAAY;GACvB;EACF;EACA,MAAM,SAAS,cAAc,OAAO,WAAW;EAC/C,IAAI,WAAW,QAAW,OAAO;EACjC,MAAM,OAAO;CACf;CACA,OAAO;AACT;AAEA,SAAS,eACP,OACA,OACA,SACS;CACT,MAAM,SAAS,OAAO,OAAO,KAAK;CAClC,IAAI,OAAO,OAAO,SAAS,OAAO,SAAS,YAAY,OAAO,SAAS,QAAQ,GAAG;EAChF,IAAI,UAAU,IAAI,OAAO;EACzB,IAAI,CAAC,OAAO,OAAO,SAAS,OAAO,SAAS,QAAQ,GAAG,OAAO;EAC9D,QAAQ,SAAS;EACjB,OAAO;CACT;CACA,IAAI,CAAC,OAAO,OAAO,SAAS,SAAS,QAAQ,OAAO,SAAS,YAAY,CAAC,MAAM,QAAQ,IAAI,CAAC,GAC3F,OAAO;CACT,OAAO,OAAO,QAAQ,KAAK,CAAC,CAAC,OAAO,CAAC,KAAK,YACxC,eACE,QACA,UAAU,KAAK,MAAM,GAAG,MAAM,GAAG,OACjC,OACF,CACF;AACF;AAEA,SAAS,QAAQ,QAAwC;CAEvD,IAAI,WADa,KAAK,KAAK,KAAK,QAAQ,OAAO,IAAI,GAAG,cAChC,CAAC,GACrB,OAAO;EAAE,GAAG;EAAQ,aAAa;EAAO,QAAQ;CAA8B;CAEhF,MAAM,OAAO,aAAa,OAAO,MAAM,MAAM;CAC7C,MAAM,UAAU,GAAG,iBAAiB,OAAO,MAAM,MAAM,GAAG,aAAa,QAAQ,IAAI;CACnF,MAAM,oBAAoB,GAAG,gBAAgB,MAAM;EACjD,UAAU,OAAO;EACjB,mBAAmB;CACrB,CAAC,CAAC,CAAC;CACH,IAAI,sBAAsB,UAAa,kBAAkB,SAAS,GAChE,OAAO;EAAE,GAAG;EAAQ,aAAa;EAAO,QAAQ;CAA+B;CACjF,MAAM,CAAC,iBAAiB,iBAAiB,QAAQ;CACjD,IACE,CAAC,mBACD,CAAC,GAAG,oBAAoB,eAAe,KACvC,CAAC,GAAG,gBAAgB,gBAAgB,eAAe,KACnD,gBAAgB,gBAAgB,SAAS,sBACzC,CAAC,gBAAgB,gBACjB,gBAAgB,aAAa,cAC7B,gBAAgB,aAAa,QAC7B,CAAC,gBAAgB,aAAa,iBAC9B,CAAC,GAAG,eAAe,gBAAgB,aAAa,aAAa,KAC7D,gBAAgB,aAAa,cAAc,SAAS,WAAW,KAC/D,gBAAgB,aAAa,cAAc,SAAS,EAAE,EAAE,KAAK,SAAS,yBACtE,gBAAgB,aAAa,cAAc,SAAS,EAAE,EAAE,cAExD,OAAO;EACL,GAAG;EACH,aAAa;EACb,QAAQ;CACV;CAEF,IAAI,QAAQ,WAAW,WAAW,GAChC,OAAO;EACL,GAAG;EACH,aAAa;EACb,QAAQ;CACV;CAEF,IACE,CAAC,iBACD,CAAC,GAAG,sBAAsB,aAAa,KACvC,CAAC,GAAG,iBAAiB,cAAc,UAAU,GAE7C,OAAO;EACL,GAAG;EACH,aAAa;EACb,QAAQ;CACV;CACF,MAAM,OAAO,cAAc;CAC3B,IACE,CAAC,GAAG,aAAa,KAAK,UAAU,KAChC,KAAK,WAAW,SAAS,yBACzB,KAAK,UAAU,WAAW,KAC1B,CAAC,GAAG,gBAAgB,KAAK,UAAU,EAAG,GAEtC,OAAO;EACL,GAAG;EACH,aAAa;EACb,QAAQ;CACV;CACF,MAAM,aAAa,cAAc,KAAK,UAAU,EAAG;CACnD,IAAI,CAAC,YACH,OAAO;EACL,GAAG;EACH,aAAa;EACb,QAAQ;CACV;CACF,MAAM,QAAQ,KAAK,UAAU,EAAE,CAAC;CAChC,MAAM,UAAmC,OAAO,OAAO,IAAI;CAC3D,IAAI,CAAC,eAAe,YAAY,OAAO,OAAO,GAC5C,OAAO;EACL,GAAG;EACH,aAAa;EACb,QAAQ;CACV;CACF,OAAO;EACL,GAAG;EACH,aAAa;EACb,QAAQ;EACR;EACA;EACA;CACF;AACF;AAEA,SAAgB,uBAA2C;CACzD,OAAO,cAAc,CAAC,CAAC,IAAI,OAAO;AACpC;AAEA,SAAS,cAA6C;CACpD,MAAM,aAAa,OAAO,IAAa,iBAAiB;CACxD,OAAO,MAAM,QAAQ,UAAU,KAAK,WAAW,OAAO,SAAS,OAAO,SAAS,QAAQ,IACnF,aACA;AACN;AAEA,SAAS,YAAY,MAA+B,OAAyC;CAC3F,OAAO,KAAK,UAAU,IAAI,MAAM,KAAK,UAAU,KAAK;AACtD;;AAGA,SAAgB,mBAAuC;CACrD,OAAO,qBAAqB,CAAC,CAAC,KAAK,WAAW;EAC5C,IAAI,CAAC,OAAO,eAAe,CAAC,OAAO,SAAS,CAAC,OAAO,cAAc,CAAC,OAAO,SACxE,OAAO;EACT,MAAM,WAAW,KAAK,KAAK,KAAK,QAAQ,OAAO,IAAI,GAAG,cAAc;EACpE,MAAM,WACJ,OAAO,UAAU,OAAO,SACpB,OAAO,aACP;GAAE,QAAQ,OAAO;GAAO,GAAG,OAAO;EAAW;EACnD,MAAM,OAAO,GAAG,KAAK,UAAU,UAAU,MAAM,CAAC,EAAE;EAClD,cAAc,UAAU,IAAI;EAC5B,IAAI;GACF,MAAM,SAAS,sBAAsB;IACnC,YAAY,SAAS,KAAK,SAAS,QAAQ,IAAI,GAAG,QAAQ,CAAC;IAC3D,QAAQ;IACR,kBAAkB,OAAO;IACzB,aAAa,YAAY;GAC3B,CAAC;GACD,IAAI,CAAC,YAAY,OAAO,SAAS,OAAO,OAAO,GAAG,MAAM,IAAI,MAAM,0BAA0B;EAC9F,SAAS,OAAO;GACd,WAAW,QAAQ;GACnB,OAAO;IACL,GAAG;IACH,aAAa;IACb,QAAQ,wBAAwB,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK;GACvF;EACF;EACA,WAAW,OAAO,IAAI;EACtB,OAAO;GACL,GAAG;GACH,QAAQ;EACV;CACF,CAAC;AACH;AAEA,MAAa,2BAAwC;CACnD,MAAM;CACN,WAAW;EACT,MAAM,UAAU,qBAAqB;EACrC,IAAI,QAAQ,WAAW,GAAG,OAAO;EAKjC,OAAO;GACL,MAAM;GACN,QAAQ;GACR,MAAM;GACN,QACE,GATY,QAAQ,KAAK,WAAW;IAEtC,OAAO,GADO,KAAK,SAAS,QAAQ,IAAI,GAAG,OAAO,IAAI,CAAC,CAAC,WAAW,MAAM,GAC3D,EAAE,IAAI,OAAO,cAAc,qBAAqB,SAAS,IAAI,OAAO,OAAO;GAC3F,CAMa,CAAC,CAAC,KAAK,IAAI,EAAE;EAE1B;CACF;AACF"}

package/esm/cli/commands/doctor/checks/optional-peers.check.mjs

@@ -1,7 +1,7 @@
 import { config } from "../../../../config/config-getter.mjs";
 import { createRequire } from "node:module";
 
-//#region ../core/src/cli/commands/doctor/checks/optional-peers.check.ts
+//#region ../../packages/core/src/cli/commands/doctor/checks/optional-peers.check.ts
 /**
 * Resolve from the project's working directory, not from core's own
 * `node_modules`, so the probe reflects what the *consuming app* has installed.
@@ -139,6 +139,7 @@ const optionalPeersCheck = {
 		if (missing.length > 0) return {
 			name: "optional-peers",
 			status,
+			code: "WL2007",
 			detail: `${missing.length} configured feature(s) have no driver installed:\n` + missing.map((peer) => `  - ${peer.package} — required by ${peer.because}`).join("\n")
 		};
 		return {

package/esm/cli/commands/doctor/checks/optional-peers.check.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"optional-peers.check.mjs","names":[],"sources":["../../../../../../../../../../core/src/cli/commands/doctor/checks/optional-peers.check.ts"],"sourcesContent":["import { createRequire } from \"node:module\";\nimport { config } from \"../../../../config/config-getter\";\nimport type { CheckStatus, DoctorCheck } from \"../check.types\";\n\n/**\n * A package this project's own configuration requires, and what asked for it.\n */\ntype RequiredPeer = {\n  /** The npm package name to probe via `require.resolve`. */\n  package: string;\n\n  /** The config that asked for it, quoted back to the user verbatim. */\n  because: string;\n};\n\n/**\n * Resolve from the project's working directory, not from core's own\n * `node_modules`, so the probe reflects what the *consuming app* has installed.\n */\nconst projectRequire = createRequire(`${process.cwd()}/package.json`);\n\n/**\n * Whether a package can be resolved from the project. A failed resolve (the\n * normal \"not installed\" case) is swallowed and reported as missing.\n */\nfunction isInstalled(packageName: string): boolean {\n  try {\n    projectRequire.resolve(packageName);\n    return true;\n  } catch {\n    return false;\n  }\n}\n\n/**\n * A non-empty string, or `undefined`. Config values arrive from `env(...)` and\n * an unset variable yields `undefined` — but a `.env` line with nothing after\n * the `=` yields `\"\"`, which is \"not configured\" just as much.\n */\nfunction text(value: unknown): string | undefined {\n  return typeof value === \"string\" && value.trim().length > 0 ? value.trim() : undefined;\n}\n\n/**\n * The database driver's package. `driver` is a closed union in cascade\n * (`mongodb | postgres | mysql`) and mysql is not implemented by cascade, so it\n * has no peer to report; an unrecognised value means the config is\n * wrong in a way this check is not the right one to report.\n */\nfunction databasePeer(): RequiredPeer | undefined {\n  const driver = text(config.get(\"database.driver\"));\n\n  const packageName =\n    driver === \"mongodb\"\n      ? \"mongodb\"\n      : driver === \"postgres\"\n        ? \"pg\"\n        : undefined;\n\n  return packageName\n    ? { package: packageName, because: `database.driver = \"${driver}\"` }\n    : undefined;\n}\n\n/**\n * The selected cache driver. Only the DEFAULT matters: `cache.drivers` is a\n * menu the scaffold fills in for every driver the framework ships, and warning\n * about a menu entry nobody selected is the false positive this whole check was\n * rewritten to remove.\n */\nfunction cachePeer(): RequiredPeer | undefined {\n  const selected = text(config.get(\"cache.default\"));\n\n  if (!selected || !/redis/i.test(selected)) return undefined;\n\n  return { package: \"redis\", because: `cache.default = \"${selected}\"` };\n}\n\n/**\n * The selected storage driver, read through its canonical `driver` field\n * (`local` / `s3` / `r2` / `spaces`) rather than the key the app happened to\n * name it, so a driver called \"cdn\" is still recognised as S3.\n */\nfunction storagePeer(): RequiredPeer | undefined {\n  const selected = text(config.get(\"storage.default\"));\n\n  if (!selected) return undefined;\n\n  const driver = text(config.get(`storage.drivers.${selected}.driver`));\n\n  if (!driver || driver === \"local\") return undefined;\n\n  return {\n    package: \"@aws-sdk/client-s3\",\n    because: `storage.default = \"${selected}\" (driver \"${driver}\")`,\n  };\n}\n\n/**\n * The mail transport. A `mail` config with no host and no driver is the\n * scaffold's placeholder — every field is an unset env var — so it asks for\n * nothing and this stays quiet.\n */\nfunction mailPeer(): RequiredPeer | undefined {\n  const driver = text(config.get(\"mail.driver\"));\n\n  if (driver === \"ses\") {\n    return { package: \"@aws-sdk/client-sesv2\", because: `mail.driver = \"ses\"` };\n  }\n\n  const host = text(config.get(\"mail.host\"));\n\n  if (!host) return undefined;\n\n  return { package: \"nodemailer\", because: `mail.host = \"${host}\"` };\n}\n\n/**\n * Realtime sockets. The connector no-ops without a `socket` config, so the\n * presence of that config is exactly the request for the peer.\n */\nfunction socketPeer(): RequiredPeer | undefined {\n  if (!config.get(\"socket\")) return undefined;\n\n  return { package: \"socket.io\", because: \"a socket config is present\" };\n}\n\n/**\n * Every peer THIS project's configuration asks for.\n */\nfunction requiredPeers(): RequiredPeer[] {\n  return [databasePeer(), cachePeer(), storagePeer(), mailPeer(), socketPeer()].filter(\n    (peer): peer is RequiredPeer => Boolean(peer),\n  );\n}\n\n/**\n * Checks that every optional peer the project's own configuration selects is\n * actually installed.\n *\n * NEEDS NO BOOTED APP — it reads config and resolves module paths. It runs after\n * the boot pass only because config is loaded by then.\n *\n * WHAT THIS REPLACED, AND WHY: the previous version probed nine packages and\n * warned about every one that was absent. Every one of them is an OPTIONAL\n * peer — a fresh app installs none of them by design — so the check warned, at\n * length, about the framework's own default state. \"No MySQL driver installed\"\n * is not a diagnosis for someone who never wanted MySQL; it is noise that\n * teaches the reader to skim past the line where a real finding will one day\n * appear.\n *\n * Inverted, it becomes a genuine one: a project whose config selects a driver\n * whose package is missing is broken — it will throw the first time that\n * feature is used — so a missing peer here is a `fail`, not a warning.\n */\nexport const optionalPeersCheck: DoctorCheck = {\n  name: \"optional-peers\",\n  run: () => {\n    const required = requiredPeers();\n\n    if (required.length === 0) {\n      return undefined;\n    }\n\n    const missing = required.filter((peer) => !isInstalled(peer.package));\n\n    const status: CheckStatus = missing.length > 0 ? \"fail\" : \"ok\";\n\n    if (missing.length > 0) {\n      return {\n        name: \"optional-peers\",\n        status,\n        detail:\n          `${missing.length} configured feature(s) have no driver installed:\\n` +\n          missing.map((peer) => `  - ${peer.package} — required by ${peer.because}`).join(\"\\n\"),\n      };\n    }\n\n    return {\n      name: \"optional-peers\",\n      status,\n      detail: `every configured driver is installed (${required\n        .map((peer) => peer.package)\n        .join(\", \")})`,\n    };\n  },\n};\n"],"mappings":";;;;;;;;AAmBA,MAAM,iBAAiB,cAAc,GAAG,QAAQ,IAAI,EAAE,cAAc;;;;;AAMpE,SAAS,YAAY,aAA8B;CACjD,IAAI;EACF,eAAe,QAAQ,WAAW;EAClC,OAAO;CACT,QAAQ;EACN,OAAO;CACT;AACF;;;;;;AAOA,SAAS,KAAK,OAAoC;CAChD,OAAO,OAAO,UAAU,YAAY,MAAM,KAAK,CAAC,CAAC,SAAS,IAAI,MAAM,KAAK,IAAI;AAC/E;;;;;;;AAQA,SAAS,eAAyC;CAChD,MAAM,SAAS,KAAK,OAAO,IAAI,iBAAiB,CAAC;CAEjD,MAAM,cACJ,WAAW,YACP,YACA,WAAW,aACT,OACA;CAER,OAAO,cACH;EAAE,SAAS;EAAa,SAAS,sBAAsB,OAAO;CAAG,IACjE;AACN;;;;;;;AAQA,SAAS,YAAsC;CAC7C,MAAM,WAAW,KAAK,OAAO,IAAI,eAAe,CAAC;CAEjD,IAAI,CAAC,YAAY,CAAC,SAAS,KAAK,QAAQ,GAAG,OAAO;CAElD,OAAO;EAAE,SAAS;EAAS,SAAS,oBAAoB,SAAS;CAAG;AACtE;;;;;;AAOA,SAAS,cAAwC;CAC/C,MAAM,WAAW,KAAK,OAAO,IAAI,iBAAiB,CAAC;CAEnD,IAAI,CAAC,UAAU,OAAO;CAEtB,MAAM,SAAS,KAAK,OAAO,IAAI,mBAAmB,SAAS,QAAQ,CAAC;CAEpE,IAAI,CAAC,UAAU,WAAW,SAAS,OAAO;CAE1C,OAAO;EACL,SAAS;EACT,SAAS,sBAAsB,SAAS,aAAa,OAAO;CAC9D;AACF;;;;;;AAOA,SAAS,WAAqC;CAG5C,IAFe,KAAK,OAAO,IAAI,aAAa,CAEnC,MAAM,OACb,OAAO;EAAE,SAAS;EAAyB,SAAS;CAAsB;CAG5E,MAAM,OAAO,KAAK,OAAO,IAAI,WAAW,CAAC;CAEzC,IAAI,CAAC,MAAM,OAAO;CAElB,OAAO;EAAE,SAAS;EAAc,SAAS,gBAAgB,KAAK;CAAG;AACnE;;;;;AAMA,SAAS,aAAuC;CAC9C,IAAI,CAAC,OAAO,IAAI,QAAQ,GAAG,OAAO;CAElC,OAAO;EAAE,SAAS;EAAa,SAAS;CAA6B;AACvE;;;;AAKA,SAAS,gBAAgC;CACvC,OAAO;EAAC,aAAa;EAAG,UAAU;EAAG,YAAY;EAAG,SAAS;EAAG,WAAW;CAAC,CAAC,CAAC,QAC3E,SAA+B,QAAQ,IAAI,CAC9C;AACF;;;;;;;;;;;;;;;;;;;;AAqBA,MAAa,qBAAkC;CAC7C,MAAM;CACN,WAAW;EACT,MAAM,WAAW,cAAc;EAE/B,IAAI,SAAS,WAAW,GACtB;EAGF,MAAM,UAAU,SAAS,QAAQ,SAAS,CAAC,YAAY,KAAK,OAAO,CAAC;EAEpE,MAAM,SAAsB,QAAQ,SAAS,IAAI,SAAS;EAE1D,IAAI,QAAQ,SAAS,GACnB,OAAO;GACL,MAAM;GACN;GACA,QACE,GAAG,QAAQ,OAAO,sDAClB,QAAQ,KAAK,SAAS,OAAO,KAAK,QAAQ,iBAAiB,KAAK,SAAS,CAAC,CAAC,KAAK,IAAI;EACxF;EAGF,OAAO;GACL,MAAM;GACN;GACA,QAAQ,yCAAyC,SAC9C,KAAK,SAAS,KAAK,OAAO,CAAC,CAC3B,KAAK,IAAI,EAAE;EAChB;CACF;AACF"}
+{"version":3,"file":"optional-peers.check.mjs","names":[],"sources":["../../../../../../../../../../../packages/core/src/cli/commands/doctor/checks/optional-peers.check.ts"],"sourcesContent":["import { createRequire } from \"node:module\";\nimport { config } from \"../../../../config/config-getter\";\nimport type { CheckStatus, DoctorCheck } from \"../check.types\";\n\n/**\n * A package this project's own configuration requires, and what asked for it.\n */\ntype RequiredPeer = {\n  /** The npm package name to probe via `require.resolve`. */\n  package: string;\n\n  /** The config that asked for it, quoted back to the user verbatim. */\n  because: string;\n};\n\n/**\n * Resolve from the project's working directory, not from core's own\n * `node_modules`, so the probe reflects what the *consuming app* has installed.\n */\nconst projectRequire = createRequire(`${process.cwd()}/package.json`);\n\n/**\n * Whether a package can be resolved from the project. A failed resolve (the\n * normal \"not installed\" case) is swallowed and reported as missing.\n */\nfunction isInstalled(packageName: string): boolean {\n  try {\n    projectRequire.resolve(packageName);\n    return true;\n  } catch {\n    return false;\n  }\n}\n\n/**\n * A non-empty string, or `undefined`. Config values arrive from `env(...)` and\n * an unset variable yields `undefined` — but a `.env` line with nothing after\n * the `=` yields `\"\"`, which is \"not configured\" just as much.\n */\nfunction text(value: unknown): string | undefined {\n  return typeof value === \"string\" && value.trim().length > 0 ? value.trim() : undefined;\n}\n\n/**\n * The database driver's package. `driver` is a closed union in cascade\n * (`mongodb | postgres | mysql`) and mysql is not implemented by cascade, so it\n * has no peer to report; an unrecognised value means the config is\n * wrong in a way this check is not the right one to report.\n */\nfunction databasePeer(): RequiredPeer | undefined {\n  const driver = text(config.get(\"database.driver\"));\n\n  const packageName = driver === \"mongodb\" ? \"mongodb\" : driver === \"postgres\" ? \"pg\" : undefined;\n\n  return packageName\n    ? { package: packageName, because: `database.driver = \"${driver}\"` }\n    : undefined;\n}\n\n/**\n * The selected cache driver. Only the DEFAULT matters: `cache.drivers` is a\n * menu the scaffold fills in for every driver the framework ships, and warning\n * about a menu entry nobody selected is the false positive this whole check was\n * rewritten to remove.\n */\nfunction cachePeer(): RequiredPeer | undefined {\n  const selected = text(config.get(\"cache.default\"));\n\n  if (!selected || !/redis/i.test(selected)) return undefined;\n\n  return { package: \"redis\", because: `cache.default = \"${selected}\"` };\n}\n\n/**\n * The selected storage driver, read through its canonical `driver` field\n * (`local` / `s3` / `r2` / `spaces`) rather than the key the app happened to\n * name it, so a driver called \"cdn\" is still recognised as S3.\n */\nfunction storagePeer(): RequiredPeer | undefined {\n  const selected = text(config.get(\"storage.default\"));\n\n  if (!selected) return undefined;\n\n  const driver = text(config.get(`storage.drivers.${selected}.driver`));\n\n  if (!driver || driver === \"local\") return undefined;\n\n  return {\n    package: \"@aws-sdk/client-s3\",\n    because: `storage.default = \"${selected}\" (driver \"${driver}\")`,\n  };\n}\n\n/**\n * The mail transport. A `mail` config with no host and no driver is the\n * scaffold's placeholder — every field is an unset env var — so it asks for\n * nothing and this stays quiet.\n */\nfunction mailPeer(): RequiredPeer | undefined {\n  const driver = text(config.get(\"mail.driver\"));\n\n  if (driver === \"ses\") {\n    return { package: \"@aws-sdk/client-sesv2\", because: `mail.driver = \"ses\"` };\n  }\n\n  const host = text(config.get(\"mail.host\"));\n\n  if (!host) return undefined;\n\n  return { package: \"nodemailer\", because: `mail.host = \"${host}\"` };\n}\n\n/**\n * Realtime sockets. The connector no-ops without a `socket` config, so the\n * presence of that config is exactly the request for the peer.\n */\nfunction socketPeer(): RequiredPeer | undefined {\n  if (!config.get(\"socket\")) return undefined;\n\n  return { package: \"socket.io\", because: \"a socket config is present\" };\n}\n\n/**\n * Every peer THIS project's configuration asks for.\n */\nfunction requiredPeers(): RequiredPeer[] {\n  return [databasePeer(), cachePeer(), storagePeer(), mailPeer(), socketPeer()].filter(\n    (peer): peer is RequiredPeer => Boolean(peer),\n  );\n}\n\n/**\n * Checks that every optional peer the project's own configuration selects is\n * actually installed.\n *\n * NEEDS NO BOOTED APP — it reads config and resolves module paths. It runs after\n * the boot pass only because config is loaded by then.\n *\n * WHAT THIS REPLACED, AND WHY: the previous version probed nine packages and\n * warned about every one that was absent. Every one of them is an OPTIONAL\n * peer — a fresh app installs none of them by design — so the check warned, at\n * length, about the framework's own default state. \"No MySQL driver installed\"\n * is not a diagnosis for someone who never wanted MySQL; it is noise that\n * teaches the reader to skim past the line where a real finding will one day\n * appear.\n *\n * Inverted, it becomes a genuine one: a project whose config selects a driver\n * whose package is missing is broken — it will throw the first time that\n * feature is used — so a missing peer here is a `fail`, not a warning.\n */\nexport const optionalPeersCheck: DoctorCheck = {\n  name: \"optional-peers\",\n  run: () => {\n    const required = requiredPeers();\n\n    if (required.length === 0) {\n      return undefined;\n    }\n\n    const missing = required.filter((peer) => !isInstalled(peer.package));\n\n    const status: CheckStatus = missing.length > 0 ? \"fail\" : \"ok\";\n\n    if (missing.length > 0) {\n      return {\n        name: \"optional-peers\",\n        status,\n        code: \"WL2007\",\n        detail:\n          `${missing.length} configured feature(s) have no driver installed:\\n` +\n          missing.map((peer) => `  - ${peer.package} — required by ${peer.because}`).join(\"\\n\"),\n      };\n    }\n\n    return {\n      name: \"optional-peers\",\n      status,\n      detail: `every configured driver is installed (${required\n        .map((peer) => peer.package)\n        .join(\", \")})`,\n    };\n  },\n};\n"],"mappings":";;;;;;;;AAmBA,MAAM,iBAAiB,cAAc,GAAG,QAAQ,IAAI,EAAE,cAAc;;;;;AAMpE,SAAS,YAAY,aAA8B;CACjD,IAAI;EACF,eAAe,QAAQ,WAAW;EAClC,OAAO;CACT,QAAQ;EACN,OAAO;CACT;AACF;;;;;;AAOA,SAAS,KAAK,OAAoC;CAChD,OAAO,OAAO,UAAU,YAAY,MAAM,KAAK,CAAC,CAAC,SAAS,IAAI,MAAM,KAAK,IAAI;AAC/E;;;;;;;AAQA,SAAS,eAAyC;CAChD,MAAM,SAAS,KAAK,OAAO,IAAI,iBAAiB,CAAC;CAEjD,MAAM,cAAc,WAAW,YAAY,YAAY,WAAW,aAAa,OAAO;CAEtF,OAAO,cACH;EAAE,SAAS;EAAa,SAAS,sBAAsB,OAAO;CAAG,IACjE;AACN;;;;;;;AAQA,SAAS,YAAsC;CAC7C,MAAM,WAAW,KAAK,OAAO,IAAI,eAAe,CAAC;CAEjD,IAAI,CAAC,YAAY,CAAC,SAAS,KAAK,QAAQ,GAAG,OAAO;CAElD,OAAO;EAAE,SAAS;EAAS,SAAS,oBAAoB,SAAS;CAAG;AACtE;;;;;;AAOA,SAAS,cAAwC;CAC/C,MAAM,WAAW,KAAK,OAAO,IAAI,iBAAiB,CAAC;CAEnD,IAAI,CAAC,UAAU,OAAO;CAEtB,MAAM,SAAS,KAAK,OAAO,IAAI,mBAAmB,SAAS,QAAQ,CAAC;CAEpE,IAAI,CAAC,UAAU,WAAW,SAAS,OAAO;CAE1C,OAAO;EACL,SAAS;EACT,SAAS,sBAAsB,SAAS,aAAa,OAAO;CAC9D;AACF;;;;;;AAOA,SAAS,WAAqC;CAG5C,IAFe,KAAK,OAAO,IAAI,aAAa,CAEnC,MAAM,OACb,OAAO;EAAE,SAAS;EAAyB,SAAS;CAAsB;CAG5E,MAAM,OAAO,KAAK,OAAO,IAAI,WAAW,CAAC;CAEzC,IAAI,CAAC,MAAM,OAAO;CAElB,OAAO;EAAE,SAAS;EAAc,SAAS,gBAAgB,KAAK;CAAG;AACnE;;;;;AAMA,SAAS,aAAuC;CAC9C,IAAI,CAAC,OAAO,IAAI,QAAQ,GAAG,OAAO;CAElC,OAAO;EAAE,SAAS;EAAa,SAAS;CAA6B;AACvE;;;;AAKA,SAAS,gBAAgC;CACvC,OAAO;EAAC,aAAa;EAAG,UAAU;EAAG,YAAY;EAAG,SAAS;EAAG,WAAW;CAAC,CAAC,CAAC,QAC3E,SAA+B,QAAQ,IAAI,CAC9C;AACF;;;;;;;;;;;;;;;;;;;;AAqBA,MAAa,qBAAkC;CAC7C,MAAM;CACN,WAAW;EACT,MAAM,WAAW,cAAc;EAE/B,IAAI,SAAS,WAAW,GACtB;EAGF,MAAM,UAAU,SAAS,QAAQ,SAAS,CAAC,YAAY,KAAK,OAAO,CAAC;EAEpE,MAAM,SAAsB,QAAQ,SAAS,IAAI,SAAS;EAE1D,IAAI,QAAQ,SAAS,GACnB,OAAO;GACL,MAAM;GACN;GACA,MAAM;GACN,QACE,GAAG,QAAQ,OAAO,sDAClB,QAAQ,KAAK,SAAS,OAAO,KAAK,QAAQ,iBAAiB,KAAK,SAAS,CAAC,CAAC,KAAK,IAAI;EACxF;EAGF,OAAO;GACL,MAAM;GACN;GACA,QAAQ,yCAAyC,SAC9C,KAAK,SAAS,KAAK,OAAO,CAAC,CAC3B,KAAK,IAAI,EAAE;EAChB;CACF;AACF"}

package/esm/cli/commands/doctor/checks/release-hygiene.check.mjs

@@ -1,7 +1,7 @@
 import { rootPath } from "../../../../utils/paths.mjs";
 import { existsSync, readFileSync } from "node:fs";
 
-//#region ../core/src/cli/commands/doctor/checks/release-hygiene.check.ts
+//#region ../../packages/core/src/cli/commands/doctor/checks/release-hygiene.check.ts
 /**
 * Parse the top-most `## x.y.z[ - YYYY-MM-DD]` heading out of a CHANGELOG body.
 * Returns `undefined` when no version heading is present.
@@ -56,22 +56,26 @@ const releaseHygieneCheck = {
 		if (typeof pkgVersion !== "string") return {
 			name: "release-hygiene",
 			status: "fail",
+			code: "WL9102",
 			detail: "package.json is publishable but has no string version field"
 		};
 		if (!existsSync(changelogPath)) return {
 			name: "release-hygiene",
 			status: "warn",
+			code: "WL9103",
 			detail: `no CHANGELOG.md at project root (package.json is ${pkgVersion})`
 		};
 		const heading = parseTopHeading(readFileSync(changelogPath, "utf8"));
 		if (!heading) return {
 			name: "release-hygiene",
 			status: "warn",
+			code: "WL9103",
 			detail: "CHANGELOG.md has no parseable `## x.y.z` heading"
 		};
 		if (heading.version !== pkgVersion) return {
 			name: "release-hygiene",
 			status: "fail",
+			code: "WL9102",
 			detail: `package.json ${pkgVersion} ≠ top CHANGELOG heading ${heading.version}`
 		};
 		return {

package/esm/cli/commands/doctor/checks/release-hygiene.check.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"release-hygiene.check.mjs","names":[],"sources":["../../../../../../../../../../core/src/cli/commands/doctor/checks/release-hygiene.check.ts"],"sourcesContent":["import { existsSync, readFileSync } from \"node:fs\";\nimport { rootPath } from \"../../../../utils/paths\";\nimport type { DoctorCheck } from \"../check.types\";\n\n/**\n * A `## x.y.z` changelog heading with an optional ` - YYYY-MM-DD` suffix.\n * Mirrors the shape parsed by the tier-0 release-hygiene unit guard; inlined\n * here because that guard lives in the test tree and is not importable from\n * `src`.\n */\ntype ChangelogHeading = {\n  version: string;\n  date?: string;\n};\n\n/**\n * The parts of `package.json` this check reads.\n */\ntype ProjectManifest = {\n  version?: unknown;\n  private?: unknown;\n  name?: unknown;\n};\n\n/**\n * Parse the top-most `## x.y.z[ - YYYY-MM-DD]` heading out of a CHANGELOG body.\n * Returns `undefined` when no version heading is present.\n */\nfunction parseTopHeading(changelog: string): ChangelogHeading | undefined {\n  const match = changelog.match(/^##\\s+(\\d+)\\.(\\d+)\\.(\\d+)(?:\\s*[-–]\\s*(\\d{4}-\\d{2}-\\d{2}))?\\s*$/m);\n\n  if (!match) {\n    return undefined;\n  }\n\n  const [, major, minor, patch, date] = match;\n\n  return {\n    version: `${major}.${minor}.${patch}`,\n    date,\n  };\n}\n\n/**\n * Whether this project is something anyone could `npm publish`.\n *\n * THE GATE, and the reason it exists: a changelog is a promise to the people\n * who install your package. An application has no such people. Running this\n * check on every project projected the framework monorepo's own release\n * practice onto users building an app, who were told — on every single run,\n * forever — that their private application was missing a CHANGELOG.md it had no\n * reason to have. `\"private\": true` is exactly the field npm itself reads to\n * refuse a publish, so it is the honest test of whether the concern applies.\n */\nfunction isPublishable(manifest: ProjectManifest): boolean {\n  return manifest.private !== true && typeof manifest.name === \"string\";\n}\n\n/**\n * Checks that a PUBLISHABLE package's `package.json` version matches the\n * top-most `## x.y.z` heading in `CHANGELOG.md` — the same version↔changelog\n * invariant the release-hygiene unit guard enforces, surfaced as a pre-release\n * doctor check.\n *\n * NEEDS NO BOOTED APP — it reads two files from the project root.\n *\n * Verdicts:\n * - `\"private\": true`, or no package name → not applicable, no line at all;\n * - no `CHANGELOG.md` → `warn` (recommended for a published package, not\n *   mandatory);\n * - no parseable heading → `warn`;\n * - heading version ≠ package.json version → `fail`;\n * - otherwise → `ok`.\n */\nexport const releaseHygieneCheck: DoctorCheck = {\n  name: \"release-hygiene\",\n  run: () => {\n    const packageJsonPath = rootPath(\"package.json\");\n    const changelogPath = rootPath(\"CHANGELOG.md\");\n\n    const manifest: ProjectManifest = JSON.parse(readFileSync(packageJsonPath, \"utf8\"));\n\n    if (!isPublishable(manifest)) {\n      return undefined;\n    }\n\n    const pkgVersion = manifest.version;\n\n    if (typeof pkgVersion !== \"string\") {\n      return {\n        name: \"release-hygiene\",\n        status: \"fail\",\n        detail: \"package.json is publishable but has no string version field\",\n      };\n    }\n\n    if (!existsSync(changelogPath)) {\n      return {\n        name: \"release-hygiene\",\n        status: \"warn\",\n        detail: `no CHANGELOG.md at project root (package.json is ${pkgVersion})`,\n      };\n    }\n\n    const changelog = readFileSync(changelogPath, \"utf8\");\n    const heading = parseTopHeading(changelog);\n\n    if (!heading) {\n      return {\n        name: \"release-hygiene\",\n        status: \"warn\",\n        detail: \"CHANGELOG.md has no parseable `## x.y.z` heading\",\n      };\n    }\n\n    if (heading.version !== pkgVersion) {\n      return {\n        name: \"release-hygiene\",\n        status: \"fail\",\n        detail: `package.json ${pkgVersion} ≠ top CHANGELOG heading ${heading.version}`,\n      };\n    }\n\n    return {\n      name: \"release-hygiene\",\n      status: \"ok\",\n      detail: `package.json and CHANGELOG agree on ${pkgVersion}`,\n    };\n  },\n};\n"],"mappings":";;;;;;;;AA4BA,SAAS,gBAAgB,WAAiD;CACxE,MAAM,QAAQ,UAAU,MAAM,kEAAkE;CAEhG,IAAI,CAAC,OACH;CAGF,MAAM,GAAG,OAAO,OAAO,OAAO,QAAQ;CAEtC,OAAO;EACL,SAAS,GAAG,MAAM,GAAG,MAAM,GAAG;EAC9B;CACF;AACF;;;;;;;;;;;;AAaA,SAAS,cAAc,UAAoC;CACzD,OAAO,SAAS,YAAY,QAAQ,OAAO,SAAS,SAAS;AAC/D;;;;;;;;;;;;;;;;;AAkBA,MAAa,sBAAmC;CAC9C,MAAM;CACN,WAAW;EACT,MAAM,kBAAkB,SAAS,cAAc;EAC/C,MAAM,gBAAgB,SAAS,cAAc;EAE7C,MAAM,WAA4B,KAAK,MAAM,aAAa,iBAAiB,MAAM,CAAC;EAElF,IAAI,CAAC,cAAc,QAAQ,GACzB;EAGF,MAAM,aAAa,SAAS;EAE5B,IAAI,OAAO,eAAe,UACxB,OAAO;GACL,MAAM;GACN,QAAQ;GACR,QAAQ;EACV;EAGF,IAAI,CAAC,WAAW,aAAa,GAC3B,OAAO;GACL,MAAM;GACN,QAAQ;GACR,QAAQ,oDAAoD,WAAW;EACzE;EAIF,MAAM,UAAU,gBADE,aAAa,eAAe,MACN,CAAC;EAEzC,IAAI,CAAC,SACH,OAAO;GACL,MAAM;GACN,QAAQ;GACR,QAAQ;EACV;EAGF,IAAI,QAAQ,YAAY,YACtB,OAAO;GACL,MAAM;GACN,QAAQ;GACR,QAAQ,gBAAgB,WAAW,2BAA2B,QAAQ;EACxE;EAGF,OAAO;GACL,MAAM;GACN,QAAQ;GACR,QAAQ,uCAAuC;EACjD;CACF;AACF"}
+{"version":3,"file":"release-hygiene.check.mjs","names":[],"sources":["../../../../../../../../../../../packages/core/src/cli/commands/doctor/checks/release-hygiene.check.ts"],"sourcesContent":["import { existsSync, readFileSync } from \"node:fs\";\nimport { rootPath } from \"../../../../utils/paths\";\nimport type { DoctorCheck } from \"../check.types\";\n\n/**\n * A `## x.y.z` changelog heading with an optional ` - YYYY-MM-DD` suffix.\n * Mirrors the shape parsed by the tier-0 release-hygiene unit guard; inlined\n * here because that guard lives in the test tree and is not importable from\n * `src`.\n */\ntype ChangelogHeading = {\n  version: string;\n  date?: string;\n};\n\n/**\n * The parts of `package.json` this check reads.\n */\ntype ProjectManifest = {\n  version?: unknown;\n  private?: unknown;\n  name?: unknown;\n};\n\n/**\n * Parse the top-most `## x.y.z[ - YYYY-MM-DD]` heading out of a CHANGELOG body.\n * Returns `undefined` when no version heading is present.\n */\nfunction parseTopHeading(changelog: string): ChangelogHeading | undefined {\n  const match = changelog.match(/^##\\s+(\\d+)\\.(\\d+)\\.(\\d+)(?:\\s*[-–]\\s*(\\d{4}-\\d{2}-\\d{2}))?\\s*$/m);\n\n  if (!match) {\n    return undefined;\n  }\n\n  const [, major, minor, patch, date] = match;\n\n  return {\n    version: `${major}.${minor}.${patch}`,\n    date,\n  };\n}\n\n/**\n * Whether this project is something anyone could `npm publish`.\n *\n * THE GATE, and the reason it exists: a changelog is a promise to the people\n * who install your package. An application has no such people. Running this\n * check on every project projected the framework monorepo's own release\n * practice onto users building an app, who were told — on every single run,\n * forever — that their private application was missing a CHANGELOG.md it had no\n * reason to have. `\"private\": true` is exactly the field npm itself reads to\n * refuse a publish, so it is the honest test of whether the concern applies.\n */\nfunction isPublishable(manifest: ProjectManifest): boolean {\n  return manifest.private !== true && typeof manifest.name === \"string\";\n}\n\n/**\n * Checks that a PUBLISHABLE package's `package.json` version matches the\n * top-most `## x.y.z` heading in `CHANGELOG.md` — the same version↔changelog\n * invariant the release-hygiene unit guard enforces, surfaced as a pre-release\n * doctor check.\n *\n * NEEDS NO BOOTED APP — it reads two files from the project root.\n *\n * Verdicts:\n * - `\"private\": true`, or no package name → not applicable, no line at all;\n * - no `CHANGELOG.md` → `warn` (recommended for a published package, not\n *   mandatory);\n * - no parseable heading → `warn`;\n * - heading version ≠ package.json version → `fail`;\n * - otherwise → `ok`.\n */\nexport const releaseHygieneCheck: DoctorCheck = {\n  name: \"release-hygiene\",\n  run: () => {\n    const packageJsonPath = rootPath(\"package.json\");\n    const changelogPath = rootPath(\"CHANGELOG.md\");\n\n    const manifest: ProjectManifest = JSON.parse(readFileSync(packageJsonPath, \"utf8\"));\n\n    if (!isPublishable(manifest)) {\n      return undefined;\n    }\n\n    const pkgVersion = manifest.version;\n\n    if (typeof pkgVersion !== \"string\") {\n      return {\n        name: \"release-hygiene\",\n        status: \"fail\",\n        code: \"WL9102\",\n        detail: \"package.json is publishable but has no string version field\",\n      };\n    }\n\n    if (!existsSync(changelogPath)) {\n      return {\n        name: \"release-hygiene\",\n        status: \"warn\",\n        code: \"WL9103\",\n        detail: `no CHANGELOG.md at project root (package.json is ${pkgVersion})`,\n      };\n    }\n\n    const changelog = readFileSync(changelogPath, \"utf8\");\n    const heading = parseTopHeading(changelog);\n\n    if (!heading) {\n      return {\n        name: \"release-hygiene\",\n        status: \"warn\",\n        code: \"WL9103\",\n        detail: \"CHANGELOG.md has no parseable `## x.y.z` heading\",\n      };\n    }\n\n    if (heading.version !== pkgVersion) {\n      return {\n        name: \"release-hygiene\",\n        status: \"fail\",\n        code: \"WL9102\",\n        detail: `package.json ${pkgVersion} ≠ top CHANGELOG heading ${heading.version}`,\n      };\n    }\n\n    return {\n      name: \"release-hygiene\",\n      status: \"ok\",\n      detail: `package.json and CHANGELOG agree on ${pkgVersion}`,\n    };\n  },\n};\n"],"mappings":";;;;;;;;AA4BA,SAAS,gBAAgB,WAAiD;CACxE,MAAM,QAAQ,UAAU,MAAM,kEAAkE;CAEhG,IAAI,CAAC,OACH;CAGF,MAAM,GAAG,OAAO,OAAO,OAAO,QAAQ;CAEtC,OAAO;EACL,SAAS,GAAG,MAAM,GAAG,MAAM,GAAG;EAC9B;CACF;AACF;;;;;;;;;;;;AAaA,SAAS,cAAc,UAAoC;CACzD,OAAO,SAAS,YAAY,QAAQ,OAAO,SAAS,SAAS;AAC/D;;;;;;;;;;;;;;;;;AAkBA,MAAa,sBAAmC;CAC9C,MAAM;CACN,WAAW;EACT,MAAM,kBAAkB,SAAS,cAAc;EAC/C,MAAM,gBAAgB,SAAS,cAAc;EAE7C,MAAM,WAA4B,KAAK,MAAM,aAAa,iBAAiB,MAAM,CAAC;EAElF,IAAI,CAAC,cAAc,QAAQ,GACzB;EAGF,MAAM,aAAa,SAAS;EAE5B,IAAI,OAAO,eAAe,UACxB,OAAO;GACL,MAAM;GACN,QAAQ;GACR,MAAM;GACN,QAAQ;EACV;EAGF,IAAI,CAAC,WAAW,aAAa,GAC3B,OAAO;GACL,MAAM;GACN,QAAQ;GACR,MAAM;GACN,QAAQ,oDAAoD,WAAW;EACzE;EAIF,MAAM,UAAU,gBADE,aAAa,eAAe,MACN,CAAC;EAEzC,IAAI,CAAC,SACH,OAAO;GACL,MAAM;GACN,QAAQ;GACR,MAAM;GACN,QAAQ;EACV;EAGF,IAAI,QAAQ,YAAY,YACtB,OAAO;GACL,MAAM;GACN,QAAQ;GACR,MAAM;GACN,QAAQ,gBAAgB,WAAW,2BAA2B,QAAQ;EACxE;EAGF,OAAO;GACL,MAAM;GACN,QAAQ;GACR,QAAQ,uCAAuC;EACjD;CACF;AACF"}

package/esm/cli/commands/doctor/checks/routes.check.mjs

@@ -1,4 +1,4 @@
-//#region ../core/src/cli/commands/doctor/checks/routes.check.ts
+//#region ../../packages/core/src/cli/commands/doctor/checks/routes.check.ts
 /**
 * Describe the failed modules as an indented block, one per line, cause first.
 * The file that failed is the only thing that makes this actionable, so it is
@@ -35,11 +35,13 @@ const routesCheck = {
 		if (context.moduleFailures.length > 0) return {
 			name: "routes",
 			status: "fail",
+			code: "WL2001",
 			detail: `${context.moduleFailures.length} app module(s) failed to load — the routes they declare will 404:\n` + describeFailures(context)
 		};
 		if (!context.booted) return {
 			name: "routes",
 			status: "fail",
+			code: "WL2002",
 			detail: "app modules could not be discovered — nothing to report on"
 		};
 		if (context.totalRoutes === 0) {
@@ -51,6 +53,7 @@ const routesCheck = {
 			return {
 				name: "routes",
 				status: "fail",
+				code: "WL3005",
 				detail: `${context.routeModules} route module(s) loaded without error but registered 0 routes — every request will 404`
 			};
 		}

package/esm/cli/commands/doctor/checks/routes.check.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"routes.check.mjs","names":[],"sources":["../../../../../../../../../../core/src/cli/commands/doctor/checks/routes.check.ts"],"sourcesContent":["import type { DoctorBootContext, DoctorCheck } from \"../check.types\";\n\n/**\n * Describe the failed modules as an indented block, one per line, cause first.\n * The file that failed is the only thing that makes this actionable, so it is\n * never summarised away.\n */\nfunction describeFailures(context: DoctorBootContext): string {\n  return context.moduleFailures\n    .map((failure) => `  - ${failure.file}: ${failure.message}`)\n    .join(\"\\n\");\n}\n\n/**\n * Reports the route surface the app will actually serve.\n *\n * NEEDS A BOOTED APP — and now gets one. Routes exist only as the side effect of\n * importing the module that declares them, so a doctor that did not import app\n * code reported `0 routes` for an app the dev server served fourteen routes\n * for. The boot pass imports the same modules, in the same order, and boots\n * (never starts) the same connectors, so the number printed here is the number\n * `warlock dev` prints for the same project — the two are read off the same\n * router after the same registrations.\n *\n * Verdicts:\n * - a module failed to import → `fail`, naming every file and its cause. This\n *   is the finding doctor exists for: a route file that throws on import is\n *   invisible at runtime, it just 404s;\n * - route modules on disk but nothing registered → `fail` (they loaded and\n *   registered nothing, which is not a state a working app is in);\n * - no route modules at all → `ok`, stated plainly. A worker or CLI-only app is\n *   a legitimate shape and must not be nagged;\n * - otherwise → `ok` with the count, split into what app code registered and\n *   what connectors added.\n */\nexport const routesCheck: DoctorCheck = {\n  name: \"routes\",\n  run: (context) => {\n    if (context.moduleFailures.length > 0) {\n      const count = context.moduleFailures.length;\n\n      return {\n        name: \"routes\",\n        status: \"fail\",\n        detail:\n          `${count} app module(s) failed to load — the routes they declare will 404:\\n` +\n          describeFailures(context),\n      };\n    }\n\n    if (!context.booted) {\n      return {\n        name: \"routes\",\n        status: \"fail\",\n        detail: \"app modules could not be discovered — nothing to report on\",\n      };\n    }\n\n    if (context.totalRoutes === 0) {\n      if (context.routeModules === 0) {\n        return {\n          name: \"routes\",\n          status: \"ok\",\n          detail: \"no route modules found (src/app/*/routes.ts) — this app serves no HTTP routes\",\n        };\n      }\n\n      return {\n        name: \"routes\",\n        status: \"fail\",\n        detail:\n          `${context.routeModules} route module(s) loaded without error but registered 0 routes — ` +\n          \"every request will 404\",\n      };\n    }\n\n    const fromConnectors = context.totalRoutes - context.appRoutes;\n    const breakdown =\n      fromConnectors > 0\n        ? `${context.appRoutes} from ${context.routeModules} route module(s), ` +\n          `${fromConnectors} from connectors`\n        : `from ${context.routeModules} route module(s)`;\n\n    return {\n      name: \"routes\",\n      status: \"ok\",\n      detail: `${context.totalRoutes} registered (${breakdown})`,\n    };\n  },\n};\n"],"mappings":";;;;;;AAOA,SAAS,iBAAiB,SAAoC;CAC5D,OAAO,QAAQ,eACZ,KAAK,YAAY,OAAO,QAAQ,KAAK,IAAI,QAAQ,SAAS,CAAC,CAC3D,KAAK,IAAI;AACd;;;;;;;;;;;;;;;;;;;;;;;AAwBA,MAAa,cAA2B;CACtC,MAAM;CACN,MAAM,YAAY;EAChB,IAAI,QAAQ,eAAe,SAAS,GAGlC,OAAO;GACL,MAAM;GACN,QAAQ;GACR,QACE,GANU,QAAQ,eAAe,OAMxB,uEACT,iBAAiB,OAAO;EAC5B;EAGF,IAAI,CAAC,QAAQ,QACX,OAAO;GACL,MAAM;GACN,QAAQ;GACR,QAAQ;EACV;EAGF,IAAI,QAAQ,gBAAgB,GAAG;GAC7B,IAAI,QAAQ,iBAAiB,GAC3B,OAAO;IACL,MAAM;IACN,QAAQ;IACR,QAAQ;GACV;GAGF,OAAO;IACL,MAAM;IACN,QAAQ;IACR,QACE,GAAG,QAAQ,aAAa;GAE5B;EACF;EAEA,MAAM,iBAAiB,QAAQ,cAAc,QAAQ;EACrD,MAAM,YACJ,iBAAiB,IACb,GAAG,QAAQ,UAAU,QAAQ,QAAQ,aAAa,oBAC/C,eAAe,oBAClB,QAAQ,QAAQ,aAAa;EAEnC,OAAO;GACL,MAAM;GACN,QAAQ;GACR,QAAQ,GAAG,QAAQ,YAAY,eAAe,UAAU;EAC1D;CACF;AACF"}
+{"version":3,"file":"routes.check.mjs","names":[],"sources":["../../../../../../../../../../../packages/core/src/cli/commands/doctor/checks/routes.check.ts"],"sourcesContent":["import type { DoctorBootContext, DoctorCheck } from \"../check.types\";\n\n/**\n * Describe the failed modules as an indented block, one per line, cause first.\n * The file that failed is the only thing that makes this actionable, so it is\n * never summarised away.\n */\nfunction describeFailures(context: DoctorBootContext): string {\n  return context.moduleFailures\n    .map((failure) => `  - ${failure.file}: ${failure.message}`)\n    .join(\"\\n\");\n}\n\n/**\n * Reports the route surface the app will actually serve.\n *\n * NEEDS A BOOTED APP — and now gets one. Routes exist only as the side effect of\n * importing the module that declares them, so a doctor that did not import app\n * code reported `0 routes` for an app the dev server served fourteen routes\n * for. The boot pass imports the same modules, in the same order, and boots\n * (never starts) the same connectors, so the number printed here is the number\n * `warlock dev` prints for the same project — the two are read off the same\n * router after the same registrations.\n *\n * Verdicts:\n * - a module failed to import → `fail`, naming every file and its cause. This\n *   is the finding doctor exists for: a route file that throws on import is\n *   invisible at runtime, it just 404s;\n * - route modules on disk but nothing registered → `fail` (they loaded and\n *   registered nothing, which is not a state a working app is in);\n * - no route modules at all → `ok`, stated plainly. A worker or CLI-only app is\n *   a legitimate shape and must not be nagged;\n * - otherwise → `ok` with the count, split into what app code registered and\n *   what connectors added.\n */\nexport const routesCheck: DoctorCheck = {\n  name: \"routes\",\n  run: (context) => {\n    if (context.moduleFailures.length > 0) {\n      const count = context.moduleFailures.length;\n\n      return {\n        name: \"routes\",\n        status: \"fail\",\n        code: \"WL2001\",\n        detail:\n          `${count} app module(s) failed to load — the routes they declare will 404:\\n` +\n          describeFailures(context),\n      };\n    }\n\n    if (!context.booted) {\n      return {\n        name: \"routes\",\n        status: \"fail\",\n        code: \"WL2002\",\n        detail: \"app modules could not be discovered — nothing to report on\",\n      };\n    }\n\n    if (context.totalRoutes === 0) {\n      if (context.routeModules === 0) {\n        return {\n          name: \"routes\",\n          status: \"ok\",\n          detail: \"no route modules found (src/app/*/routes.ts) — this app serves no HTTP routes\",\n        };\n      }\n\n      return {\n        name: \"routes\",\n        status: \"fail\",\n        code: \"WL3005\",\n        detail:\n          `${context.routeModules} route module(s) loaded without error but registered 0 routes — ` +\n          \"every request will 404\",\n      };\n    }\n\n    const fromConnectors = context.totalRoutes - context.appRoutes;\n    const breakdown =\n      fromConnectors > 0\n        ? `${context.appRoutes} from ${context.routeModules} route module(s), ` +\n          `${fromConnectors} from connectors`\n        : `from ${context.routeModules} route module(s)`;\n\n    return {\n      name: \"routes\",\n      status: \"ok\",\n      detail: `${context.totalRoutes} registered (${breakdown})`,\n    };\n  },\n};\n"],"mappings":";;;;;;AAOA,SAAS,iBAAiB,SAAoC;CAC5D,OAAO,QAAQ,eACZ,KAAK,YAAY,OAAO,QAAQ,KAAK,IAAI,QAAQ,SAAS,CAAC,CAC3D,KAAK,IAAI;AACd;;;;;;;;;;;;;;;;;;;;;;;AAwBA,MAAa,cAA2B;CACtC,MAAM;CACN,MAAM,YAAY;EAChB,IAAI,QAAQ,eAAe,SAAS,GAGlC,OAAO;GACL,MAAM;GACN,QAAQ;GACR,MAAM;GACN,QACE,GAPU,QAAQ,eAAe,OAOxB,uEACT,iBAAiB,OAAO;EAC5B;EAGF,IAAI,CAAC,QAAQ,QACX,OAAO;GACL,MAAM;GACN,QAAQ;GACR,MAAM;GACN,QAAQ;EACV;EAGF,IAAI,QAAQ,gBAAgB,GAAG;GAC7B,IAAI,QAAQ,iBAAiB,GAC3B,OAAO;IACL,MAAM;IACN,QAAQ;IACR,QAAQ;GACV;GAGF,OAAO;IACL,MAAM;IACN,QAAQ;IACR,MAAM;IACN,QACE,GAAG,QAAQ,aAAa;GAE5B;EACF;EAEA,MAAM,iBAAiB,QAAQ,cAAc,QAAQ;EACrD,MAAM,YACJ,iBAAiB,IACb,GAAG,QAAQ,UAAU,QAAQ,QAAQ,aAAa,oBAC/C,eAAe,oBAClB,QAAQ,QAAQ,aAAa;EAEnC,OAAO;GACL,MAAM;GACN,QAAQ;GACR,QAAQ,GAAG,QAAQ,YAAY,eAAe,UAAU;EAC1D;CACF;AACF"}

package/esm/cli/commands/doctor/doctor-command.action.mjs

@@ -1,10 +1,12 @@
 import { bootForDiagnostics } from "./boot-for-diagnostics.mjs";
+import { withConsoleOnStderr } from "../routes/with-console-on-stderr.mjs";
+import { flushAndExit } from "../../flush-and-exit.mjs";
 import { fixLocaleSources } from "./checks/locales-ts-deprecated.check.mjs";
 import { defaultDoctorChecks } from "./checks/index.mjs";
-import { printReport } from "./format-report.mjs";
+import { printReport, toDoctorJson } from "./format-report.mjs";
 import { runChecks } from "./run-checks.mjs";
 
-//#region ../core/src/cli/commands/doctor/doctor-command.action.ts
+//#region ../../packages/core/src/cli/commands/doctor/doctor-command.action.ts
 /**
 * Action behind `warlock doctor`.
 *
@@ -26,16 +28,22 @@ import { runChecks } from "./run-checks.mjs";
 * banner and exits zero — which also disposes of the handles the boot pass
 * left open (a Fastify instance, a Vite dev server for `web` apps).
 *
-* @param data Parsed CLI args, including the optional safe migration flag.
+* With `--json` the report is printed as JSON (see `toDoctorJson`): every
+* finding carries its stable `WL` code, `hint`, `skill` and `docs`.
+*
+* @param data Parsed CLI args: the optional safe migration flag and `--json`.
 */
 async function doctorCommandAction(data) {
+	const json = data.options.json === true;
+	const log = json ? console.error : console.log;
 	if (data.options.fix === true) for (const result of fixLocaleSources()) {
 		const file = result.file.replace(process.cwd(), ".").replaceAll("\\", "/");
-		console.log(`${result.convertible ? "converted" : "manual"} ${file}: ${result.reason}`);
+		log(`${result.convertible ? "converted" : "manual"} ${file}: ${result.reason}`);
 	}
-	const report = await runChecks(defaultDoctorChecks, await bootForDiagnostics());
-	printReport(report);
-	if (report.hasFailures) process.exit(report.exitCode);
+	const report = await runChecks(defaultDoctorChecks, json ? await withConsoleOnStderr(bootForDiagnostics) : await bootForDiagnostics());
+	if (json) console.log(JSON.stringify(toDoctorJson(report), null, 2));
+	else printReport(report);
+	if (report.hasFailures) await flushAndExit(report.exitCode);
 }
 
 //#endregion

package/esm/cli/commands/doctor/doctor-command.action.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"doctor-command.action.mjs","names":[],"sources":["../../../../../../../../../core/src/cli/commands/doctor/doctor-command.action.ts"],"sourcesContent":["import type { CommandActionData } from \"../../../commands/types\";\nimport { bootForDiagnostics } from \"./boot-for-diagnostics\";\nimport { defaultDoctorChecks } from \"./checks\";\nimport { fixLocaleSources } from \"./checks/locales-ts-deprecated.check\";\nimport { printReport } from \"./format-report\";\nimport { runChecks } from \"./run-checks\";\n\n/**\n * Action behind `warlock doctor`.\n *\n * Two steps, in this order and for a reason: ONE boot pass, then every check\n * against what that pass observed. The checks never boot anything themselves,\n * so the report cannot contain two lines that inspected the app at different\n * moments and contradicted each other — which is exactly what it used to\n * contain (`routes: 0 registered` beside `health: /health + /ready\n * registered`, in the same run, on an app serving fourteen routes).\n *\n * The pass boots every connector and starts none, so no database, cache or\n * socket connection is opened and no port is bound. See\n * `boot-for-diagnostics.ts`.\n *\n * A failing check is REPORTED (a line in the report + a non-zero exit), never\n * thrown: the runner converts any thrown check into a `fail` result first.\n *\n * On success this simply returns; the CLI manager then prints its own success\n * banner and exits zero — which also disposes of the handles the boot pass\n * left open (a Fastify instance, a Vite dev server for `web` apps).\n *\n * @param data Parsed CLI args, including the optional safe migration flag.\n */\nexport async function doctorCommandAction(data: CommandActionData): Promise<void> {\n  if (data.options.fix === true) {\n    for (const result of fixLocaleSources()) {\n      const file = result.file.replace(process.cwd(), \".\").replaceAll(\"\\\\\", \"/\");\n      console.log(`${result.convertible ? \"converted\" : \"manual\"} ${file}: ${result.reason}`);\n    }\n  }\n  const context = await bootForDiagnostics();\n\n  const report = await runChecks(defaultDoctorChecks, context);\n\n  printReport(report);\n\n  if (report.hasFailures) {\n    process.exit(report.exitCode);\n  }\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AA8BA,eAAsB,oBAAoB,MAAwC;CAChF,IAAI,KAAK,QAAQ,QAAQ,MACvB,KAAK,MAAM,UAAU,iBAAiB,GAAG;EACvC,MAAM,OAAO,OAAO,KAAK,QAAQ,QAAQ,IAAI,GAAG,GAAG,CAAC,CAAC,WAAW,MAAM,GAAG;EACzE,QAAQ,IAAI,GAAG,OAAO,cAAc,cAAc,SAAS,GAAG,KAAK,IAAI,OAAO,QAAQ;CACxF;CAIF,MAAM,SAAS,MAAM,UAAU,qBAAqB,MAF9B,mBAAmB,CAEkB;CAE3D,YAAY,MAAM;CAElB,IAAI,OAAO,aACT,QAAQ,KAAK,OAAO,QAAQ;AAEhC"}
+{"version":3,"file":"doctor-command.action.mjs","names":[],"sources":["../../../../../../../../../../packages/core/src/cli/commands/doctor/doctor-command.action.ts"],"sourcesContent":["import type { CommandActionData } from \"../../../commands/types\";\nimport { bootForDiagnostics } from \"./boot-for-diagnostics\";\nimport { defaultDoctorChecks } from \"./checks\";\nimport { fixLocaleSources } from \"./checks/locales-ts-deprecated.check\";\nimport { flushAndExit } from \"../../flush-and-exit\";\nimport { withConsoleOnStderr } from \"../routes/with-console-on-stderr\";\nimport { printReport, toDoctorJson } from \"./format-report\";\nimport { runChecks } from \"./run-checks\";\n\n/**\n * Action behind `warlock doctor`.\n *\n * Two steps, in this order and for a reason: ONE boot pass, then every check\n * against what that pass observed. The checks never boot anything themselves,\n * so the report cannot contain two lines that inspected the app at different\n * moments and contradicted each other — which is exactly what it used to\n * contain (`routes: 0 registered` beside `health: /health + /ready\n * registered`, in the same run, on an app serving fourteen routes).\n *\n * The pass boots every connector and starts none, so no database, cache or\n * socket connection is opened and no port is bound. See\n * `boot-for-diagnostics.ts`.\n *\n * A failing check is REPORTED (a line in the report + a non-zero exit), never\n * thrown: the runner converts any thrown check into a `fail` result first.\n *\n * On success this simply returns; the CLI manager then prints its own success\n * banner and exits zero — which also disposes of the handles the boot pass\n * left open (a Fastify instance, a Vite dev server for `web` apps).\n *\n * With `--json` the report is printed as JSON (see `toDoctorJson`): every\n * finding carries its stable `WL` code, `hint`, `skill` and `docs`.\n *\n * @param data Parsed CLI args: the optional safe migration flag and `--json`.\n */\nexport async function doctorCommandAction(data: CommandActionData): Promise<void> {\n  const json = data.options.json === true;\n\n  // With `--json`, stdout carries the report alone: the fix log and the boot's\n  // progress lines go to stderr.\n  const log = json ? console.error : console.log;\n\n  if (data.options.fix === true) {\n    for (const result of fixLocaleSources()) {\n      const file = result.file.replace(process.cwd(), \".\").replaceAll(\"\\\\\", \"/\");\n      log(`${result.convertible ? \"converted\" : \"manual\"} ${file}: ${result.reason}`);\n    }\n  }\n\n  const context = json ? await withConsoleOnStderr(bootForDiagnostics) : await bootForDiagnostics();\n\n  const report = await runChecks(defaultDoctorChecks, context);\n\n  if (json) {\n    console.log(JSON.stringify(toDoctorJson(report), null, 2));\n  } else {\n    printReport(report);\n  }\n\n  if (report.hasFailures) {\n    await flushAndExit(report.exitCode);\n  }\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAmCA,eAAsB,oBAAoB,MAAwC;CAChF,MAAM,OAAO,KAAK,QAAQ,SAAS;CAInC,MAAM,MAAM,OAAO,QAAQ,QAAQ,QAAQ;CAE3C,IAAI,KAAK,QAAQ,QAAQ,MACvB,KAAK,MAAM,UAAU,iBAAiB,GAAG;EACvC,MAAM,OAAO,OAAO,KAAK,QAAQ,QAAQ,IAAI,GAAG,GAAG,CAAC,CAAC,WAAW,MAAM,GAAG;EACzE,IAAI,GAAG,OAAO,cAAc,cAAc,SAAS,GAAG,KAAK,IAAI,OAAO,QAAQ;CAChF;CAKF,MAAM,SAAS,MAAM,UAAU,qBAFf,OAAO,MAAM,oBAAoB,kBAAkB,IAAI,MAAM,mBAAmB,CAErC;CAE3D,IAAI,MACF,QAAQ,IAAI,KAAK,UAAU,aAAa,MAAM,GAAG,MAAM,CAAC,CAAC;MAEzD,YAAY,MAAM;CAGpB,IAAI,OAAO,aACT,MAAM,aAAa,OAAO,QAAQ;AAEtC"}

package/esm/cli/commands/doctor/format-report.mjs

@@ -1,6 +1,7 @@
+import { ERROR_CODES, errorCodeDocsUrl } from "../../../errors/error-codes.mjs";
 import { colors } from "@mongez/copper";
 
-//#region ../core/src/cli/commands/doctor/format-report.ts
+//#region ../../packages/core/src/cli/commands/doctor/format-report.ts
 /**
 * The glyph shown beside each check, keyed by status.
 */
@@ -31,14 +32,41 @@ function colorizeSymbol(status) {
 function printReport(report) {
 	for (const result of report.results) {
 		const symbol = colorizeSymbol(result.status);
-		console.log(`${symbol} ${colors.bold(result.name)}: ${result.detail}`);
+		const code = result.code ? colors.dim(` [${result.code}]`) : "";
+		console.log(`${symbol} ${colors.bold(result.name)}: ${result.detail}${code}`);
 	}
 	const { ok, warn, fail } = report.summary;
 	const summaryLine = `Summary: ${ok} ok, ${warn} warn, ${fail} fail`;
 	console.log("");
 	console.log(report.hasFailures ? colors.red(summaryLine) : colors.green(summaryLine));
 }
+/**
+* The machine-readable form of a doctor report: each finding with its stable
+* code and the same `hint` / `skill` / `docs` fields `warlock check --json`
+* prints, so one consumer reads both.
+*
+* @param report The aggregated doctor report.
+*/
+function toDoctorJson(report) {
+	return {
+		schemaVersion: 1,
+		results: report.results.map((result) => {
+			const definition = result.code ? ERROR_CODES[result.code] : void 0;
+			return {
+				name: result.name,
+				status: result.status,
+				detail: result.detail,
+				code: result.code ?? null,
+				hint: definition?.fix ?? null,
+				skill: definition?.skill ?? null,
+				docs: result.code ? errorCodeDocsUrl(result.code) : null
+			};
+		}),
+		summary: { ...report.summary },
+		exitCode: report.exitCode
+	};
+}
 
 //#endregion
-export { printReport };
+export { printReport, toDoctorJson };
 //# sourceMappingURL=format-report.mjs.map

package/esm/cli/commands/doctor/format-report.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"format-report.mjs","names":[],"sources":["../../../../../../../../../core/src/cli/commands/doctor/format-report.ts"],"sourcesContent":["import { colors } from \"@mongez/copper\";\nimport type { CheckStatus, DoctorReport } from \"./check.types\";\n\n/**\n * The glyph shown beside each check, keyed by status.\n */\nconst STATUS_SYMBOL: Record<CheckStatus, string> = {\n  ok: \"✓\",\n  warn: \"⚠\",\n  fail: \"✗\",\n};\n\n/**\n * Colorize a status glyph. Kept separate from {@link STATUS_SYMBOL} so the\n * plain glyphs remain available for snapshot-friendly, color-free assertions.\n */\nfunction colorizeSymbol(status: CheckStatus): string {\n  const symbol = STATUS_SYMBOL[status];\n\n  switch (status) {\n    case \"ok\":\n      return colors.green(symbol);\n    case \"warn\":\n      return colors.yellow(symbol);\n    case \"fail\":\n      return colors.red(symbol);\n  }\n}\n\n/**\n * Build the report body as an ordered list of plain (uncolored) lines:\n * one `<symbol> <name>: <detail>` line per check, a blank line, then a summary\n * line. Returned as strings (not printed) so the formatting is unit-testable.\n *\n * @param report The aggregated doctor report.\n * @returns The lines to print, top to bottom.\n */\nexport function formatReportLines(report: DoctorReport): string[] {\n  const lines = report.results.map((result) => {\n    return `${STATUS_SYMBOL[result.status]} ${result.name}: ${result.detail}`;\n  });\n\n  const { ok, warn, fail } = report.summary;\n\n  lines.push(\"\");\n  lines.push(`Summary: ${ok} ok, ${warn} warn, ${fail} fail`);\n\n  return lines;\n}\n\n/**\n * Print the report to stdout with colored status glyphs and a colored summary\n * verdict. Thin wrapper over {@link formatReportLines} — the structured report\n * stays the source of truth for the exit code.\n *\n * @param report The aggregated doctor report.\n */\nexport function printReport(report: DoctorReport): void {\n  for (const result of report.results) {\n    const symbol = colorizeSymbol(result.status);\n\n    console.log(`${symbol} ${colors.bold(result.name)}: ${result.detail}`);\n  }\n\n  const { ok, warn, fail } = report.summary;\n  const summaryLine = `Summary: ${ok} ok, ${warn} warn, ${fail} fail`;\n\n  console.log(\"\");\n  console.log(report.hasFailures ? colors.red(summaryLine) : colors.green(summaryLine));\n}\n"],"mappings":";;;;;;AAMA,MAAM,gBAA6C;CACjD,IAAI;CACJ,MAAM;CACN,MAAM;AACR;;;;;AAMA,SAAS,eAAe,QAA6B;CACnD,MAAM,SAAS,cAAc;CAE7B,QAAQ,QAAR;EACE,KAAK,MACH,OAAO,OAAO,MAAM,MAAM;EAC5B,KAAK,QACH,OAAO,OAAO,OAAO,MAAM;EAC7B,KAAK,QACH,OAAO,OAAO,IAAI,MAAM;CAC5B;AACF;;;;;;;;AA8BA,SAAgB,YAAY,QAA4B;CACtD,KAAK,MAAM,UAAU,OAAO,SAAS;EACnC,MAAM,SAAS,eAAe,OAAO,MAAM;EAE3C,QAAQ,IAAI,GAAG,OAAO,GAAG,OAAO,KAAK,OAAO,IAAI,EAAE,IAAI,OAAO,QAAQ;CACvE;CAEA,MAAM,EAAE,IAAI,MAAM,SAAS,OAAO;CAClC,MAAM,cAAc,YAAY,GAAG,OAAO,KAAK,SAAS,KAAK;CAE7D,QAAQ,IAAI,EAAE;CACd,QAAQ,IAAI,OAAO,cAAc,OAAO,IAAI,WAAW,IAAI,OAAO,MAAM,WAAW,CAAC;AACtF"}
+{"version":3,"file":"format-report.mjs","names":[],"sources":["../../../../../../../../../../packages/core/src/cli/commands/doctor/format-report.ts"],"sourcesContent":["import { colors } from \"@mongez/copper\";\nimport { ERROR_CODES, errorCodeDocsUrl, type WarlockErrorCode } from \"../../../errors/error-codes\";\nimport type { CheckStatus, DoctorReport } from \"./check.types\";\n\n/**\n * The glyph shown beside each check, keyed by status.\n */\nconst STATUS_SYMBOL: Record<CheckStatus, string> = {\n  ok: \"✓\",\n  warn: \"⚠\",\n  fail: \"✗\",\n};\n\n/**\n * Colorize a status glyph. Kept separate from {@link STATUS_SYMBOL} so the\n * plain glyphs remain available for snapshot-friendly, color-free assertions.\n */\nfunction colorizeSymbol(status: CheckStatus): string {\n  const symbol = STATUS_SYMBOL[status];\n\n  switch (status) {\n    case \"ok\":\n      return colors.green(symbol);\n    case \"warn\":\n      return colors.yellow(symbol);\n    case \"fail\":\n      return colors.red(symbol);\n  }\n}\n\n/**\n * Build the report body as an ordered list of plain (uncolored) lines:\n * one `<symbol> <name>: <detail>` line per check, a blank line, then a summary\n * line. Returned as strings (not printed) so the formatting is unit-testable.\n *\n * @param report The aggregated doctor report.\n * @returns The lines to print, top to bottom.\n */\nexport function formatReportLines(report: DoctorReport): string[] {\n  const lines = report.results.map((result) => {\n    const code = result.code ? ` [${result.code}]` : \"\";\n\n    return `${STATUS_SYMBOL[result.status]} ${result.name}: ${result.detail}${code}`;\n  });\n\n  const { ok, warn, fail } = report.summary;\n\n  lines.push(\"\");\n  lines.push(`Summary: ${ok} ok, ${warn} warn, ${fail} fail`);\n\n  return lines;\n}\n\n/**\n * Print the report to stdout with colored status glyphs and a colored summary\n * verdict. Thin wrapper over {@link formatReportLines} — the structured report\n * stays the source of truth for the exit code.\n *\n * @param report The aggregated doctor report.\n */\nexport function printReport(report: DoctorReport): void {\n  for (const result of report.results) {\n    const symbol = colorizeSymbol(result.status);\n\n    const code = result.code ? colors.dim(` [${result.code}]`) : \"\";\n\n    console.log(`${symbol} ${colors.bold(result.name)}: ${result.detail}${code}`);\n  }\n\n  const { ok, warn, fail } = report.summary;\n  const summaryLine = `Summary: ${ok} ok, ${warn} warn, ${fail} fail`;\n\n  console.log(\"\");\n  console.log(report.hasFailures ? colors.red(summaryLine) : colors.green(summaryLine));\n}\n\n/** One check in `warlock doctor --json`. Every key is always present. */\nexport type DoctorJsonResult = {\n  name: string;\n  status: CheckStatus;\n  detail: string;\n  /** Stable Warlock error code of a `warn`/`fail` verdict, else `null`. */\n  code: WarlockErrorCode | null;\n  /** One line on what to do, from the code registry, else `null`. */\n  hint: string | null;\n  /** Slug of the skill that explains the fix, else `null`. */\n  skill: string | null;\n  /** Docs URL of the code, else `null`. */\n  docs: string | null;\n};\n\n/** What `warlock doctor --json` prints. */\nexport type DoctorJsonReport = {\n  schemaVersion: 1;\n  results: DoctorJsonResult[];\n  summary: Record<CheckStatus, number>;\n  exitCode: 0 | 1;\n};\n\n/**\n * The machine-readable form of a doctor report: each finding with its stable\n * code and the same `hint` / `skill` / `docs` fields `warlock check --json`\n * prints, so one consumer reads both.\n *\n * @param report The aggregated doctor report.\n */\nexport function toDoctorJson(report: DoctorReport): DoctorJsonReport {\n  return {\n    schemaVersion: 1,\n    results: report.results.map((result) => {\n      const definition = result.code ? ERROR_CODES[result.code] : undefined;\n\n      return {\n        name: result.name,\n        status: result.status,\n        detail: result.detail,\n        code: result.code ?? null,\n        hint: definition?.fix ?? null,\n        skill: definition?.skill ?? null,\n        docs: result.code ? errorCodeDocsUrl(result.code) : null,\n      };\n    }),\n    summary: { ...report.summary },\n    exitCode: report.exitCode,\n  };\n}\n"],"mappings":";;;;;;;AAOA,MAAM,gBAA6C;CACjD,IAAI;CACJ,MAAM;CACN,MAAM;AACR;;;;;AAMA,SAAS,eAAe,QAA6B;CACnD,MAAM,SAAS,cAAc;CAE7B,QAAQ,QAAR;EACE,KAAK,MACH,OAAO,OAAO,MAAM,MAAM;EAC5B,KAAK,QACH,OAAO,OAAO,OAAO,MAAM;EAC7B,KAAK,QACH,OAAO,OAAO,IAAI,MAAM;CAC5B;AACF;;;;;;;;AAgCA,SAAgB,YAAY,QAA4B;CACtD,KAAK,MAAM,UAAU,OAAO,SAAS;EACnC,MAAM,SAAS,eAAe,OAAO,MAAM;EAE3C,MAAM,OAAO,OAAO,OAAO,OAAO,IAAI,KAAK,OAAO,KAAK,EAAE,IAAI;EAE7D,QAAQ,IAAI,GAAG,OAAO,GAAG,OAAO,KAAK,OAAO,IAAI,EAAE,IAAI,OAAO,SAAS,MAAM;CAC9E;CAEA,MAAM,EAAE,IAAI,MAAM,SAAS,OAAO;CAClC,MAAM,cAAc,YAAY,GAAG,OAAO,KAAK,SAAS,KAAK;CAE7D,QAAQ,IAAI,EAAE;CACd,QAAQ,IAAI,OAAO,cAAc,OAAO,IAAI,WAAW,IAAI,OAAO,MAAM,WAAW,CAAC;AACtF;;;;;;;;AAgCA,SAAgB,aAAa,QAAwC;CACnE,OAAO;EACL,eAAe;EACf,SAAS,OAAO,QAAQ,KAAK,WAAW;GACtC,MAAM,aAAa,OAAO,OAAO,YAAY,OAAO,QAAQ;GAE5D,OAAO;IACL,MAAM,OAAO;IACb,QAAQ,OAAO;IACf,QAAQ,OAAO;IACf,MAAM,OAAO,QAAQ;IACrB,MAAM,YAAY,OAAO;IACzB,OAAO,YAAY,SAAS;IAC5B,MAAM,OAAO,OAAO,iBAAiB,OAAO,IAAI,IAAI;GACtD;EACF,CAAC;EACD,SAAS,EAAE,GAAG,OAAO,QAAQ;EAC7B,UAAU,OAAO;CACnB;AACF"}

package/esm/cli/commands/doctor/run-checks.mjs

@@ -1,4 +1,4 @@
-//#region ../core/src/cli/commands/doctor/run-checks.ts
+//#region ../../packages/core/src/cli/commands/doctor/run-checks.ts
 /**
 * Run one check defensively: a check that throws (or rejects) is recorded as a
 * `fail` carrying the error message, never re-thrown. This is what keeps

package/esm/cli/commands/doctor/run-checks.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"run-checks.mjs","names":[],"sources":["../../../../../../../../../core/src/cli/commands/doctor/run-checks.ts"],"sourcesContent":["import type {\n  CheckResult,\n  CheckStatus,\n  DoctorBootContext,\n  DoctorCheck,\n  DoctorReport,\n} from \"./check.types\";\n\n/**\n * Run one check defensively: a check that throws (or rejects) is recorded as a\n * `fail` carrying the error message, never re-thrown. This is what keeps\n * `doctor` itself crash-proof — a broken probe degrades to a failed check\n * instead of taking the whole command down.\n *\n * A check that returns `undefined` does not apply to this project; the caller\n * drops it from the report rather than printing a line about nothing.\n */\nasync function runOne(\n  check: DoctorCheck,\n  context: DoctorBootContext,\n): Promise<CheckResult | undefined> {\n  try {\n    return await check.run(context);\n  } catch (error) {\n    const message = error instanceof Error ? error.message : String(error);\n\n    return {\n      name: check.name,\n      status: \"fail\",\n      detail: `check threw: ${message}`,\n    };\n  }\n}\n\n/**\n * Run every check and aggregate the results into a {@link DoctorReport}.\n *\n * Checks run in registration order against ONE shared boot context, so the\n * report can never contain two checks that disagree about the app because they\n * inspected it at different moments. Each is isolated via {@link runOne}, so\n * one throwing check cannot abort the others. The exit code is `1` if any check\n * resolved to `fail`, otherwise `0` — warnings never fail the command.\n *\n * @param checks The diagnostic probes to execute.\n * @param context What the boot pass observed.\n * @returns The aggregated report (results + per-status counts + exit code).\n */\nexport async function runChecks(\n  checks: DoctorCheck[],\n  context: DoctorBootContext,\n): Promise<DoctorReport> {\n  const results: CheckResult[] = [];\n\n  for (const check of checks) {\n    const result = await runOne(check, context);\n\n    // `undefined` is \"not applicable to this project\" — omitted entirely.\n    if (result) {\n      results.push(result);\n    }\n  }\n\n  const summary: Record<CheckStatus, number> = { ok: 0, warn: 0, fail: 0 };\n\n  for (const result of results) {\n    summary[result.status] += 1;\n  }\n\n  const hasFailures = summary.fail > 0;\n\n  return {\n    results,\n    summary,\n    hasFailures,\n    exitCode: hasFailures ? 1 : 0,\n  };\n}\n"],"mappings":";;;;;;;;;;AAiBA,eAAe,OACb,OACA,SACkC;CAClC,IAAI;EACF,OAAO,MAAM,MAAM,IAAI,OAAO;CAChC,SAAS,OAAO;EACd,MAAM,UAAU,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK;EAErE,OAAO;GACL,MAAM,MAAM;GACZ,QAAQ;GACR,QAAQ,gBAAgB;EAC1B;CACF;AACF;;;;;;;;;;;;;;AAeA,eAAsB,UACpB,QACA,SACuB;CACvB,MAAM,UAAyB,CAAC;CAEhC,KAAK,MAAM,SAAS,QAAQ;EAC1B,MAAM,SAAS,MAAM,OAAO,OAAO,OAAO;EAG1C,IAAI,QACF,QAAQ,KAAK,MAAM;CAEvB;CAEA,MAAM,UAAuC;EAAE,IAAI;EAAG,MAAM;EAAG,MAAM;CAAE;CAEvE,KAAK,MAAM,UAAU,SACnB,QAAQ,OAAO,WAAW;CAG5B,MAAM,cAAc,QAAQ,OAAO;CAEnC,OAAO;EACL;EACA;EACA;EACA,UAAU,cAAc,IAAI;CAC9B;AACF"}
+{"version":3,"file":"run-checks.mjs","names":[],"sources":["../../../../../../../../../../packages/core/src/cli/commands/doctor/run-checks.ts"],"sourcesContent":["import type {\n  CheckResult,\n  CheckStatus,\n  DoctorBootContext,\n  DoctorCheck,\n  DoctorReport,\n} from \"./check.types\";\n\n/**\n * Run one check defensively: a check that throws (or rejects) is recorded as a\n * `fail` carrying the error message, never re-thrown. This is what keeps\n * `doctor` itself crash-proof — a broken probe degrades to a failed check\n * instead of taking the whole command down.\n *\n * A check that returns `undefined` does not apply to this project; the caller\n * drops it from the report rather than printing a line about nothing.\n */\nasync function runOne(\n  check: DoctorCheck,\n  context: DoctorBootContext,\n): Promise<CheckResult | undefined> {\n  try {\n    return await check.run(context);\n  } catch (error) {\n    const message = error instanceof Error ? error.message : String(error);\n\n    return {\n      name: check.name,\n      status: \"fail\",\n      detail: `check threw: ${message}`,\n    };\n  }\n}\n\n/**\n * Run every check and aggregate the results into a {@link DoctorReport}.\n *\n * Checks run in registration order against ONE shared boot context, so the\n * report can never contain two checks that disagree about the app because they\n * inspected it at different moments. Each is isolated via {@link runOne}, so\n * one throwing check cannot abort the others. The exit code is `1` if any check\n * resolved to `fail`, otherwise `0` — warnings never fail the command.\n *\n * @param checks The diagnostic probes to execute.\n * @param context What the boot pass observed.\n * @returns The aggregated report (results + per-status counts + exit code).\n */\nexport async function runChecks(\n  checks: DoctorCheck[],\n  context: DoctorBootContext,\n): Promise<DoctorReport> {\n  const results: CheckResult[] = [];\n\n  for (const check of checks) {\n    const result = await runOne(check, context);\n\n    // `undefined` is \"not applicable to this project\" — omitted entirely.\n    if (result) {\n      results.push(result);\n    }\n  }\n\n  const summary: Record<CheckStatus, number> = { ok: 0, warn: 0, fail: 0 };\n\n  for (const result of results) {\n    summary[result.status] += 1;\n  }\n\n  const hasFailures = summary.fail > 0;\n\n  return {\n    results,\n    summary,\n    hasFailures,\n    exitCode: hasFailures ? 1 : 0,\n  };\n}\n"],"mappings":";;;;;;;;;;AAiBA,eAAe,OACb,OACA,SACkC;CAClC,IAAI;EACF,OAAO,MAAM,MAAM,IAAI,OAAO;CAChC,SAAS,OAAO;EACd,MAAM,UAAU,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK;EAErE,OAAO;GACL,MAAM,MAAM;GACZ,QAAQ;GACR,QAAQ,gBAAgB;EAC1B;CACF;AACF;;;;;;;;;;;;;;AAeA,eAAsB,UACpB,QACA,SACuB;CACvB,MAAM,UAAyB,CAAC;CAEhC,KAAK,MAAM,SAAS,QAAQ;EAC1B,MAAM,SAAS,MAAM,OAAO,OAAO,OAAO;EAG1C,IAAI,QACF,QAAQ,KAAK,MAAM;CAEvB;CAEA,MAAM,UAAuC;EAAE,IAAI;EAAG,MAAM;EAAG,MAAM;CAAE;CAEvE,KAAK,MAAM,UAAU,SACnB,QAAQ,OAAO,WAAW;CAG5B,MAAM,cAAc,QAAQ,OAAO;CAEnC,OAAO;EACL;EACA;EACA;EACA,UAAU,cAAc,IAAI;CAC9B;AACF"}

package/esm/cli/commands/doctor.command.mjs

@@ -1,7 +1,7 @@
 import { command } from "../../commands/cli-command.mjs";
 import { doctorCommandAction } from "./doctor/doctor-command.action.mjs";
 
-//#region ../core/src/cli/commands/doctor.command.ts
+//#region ../../packages/core/src/cli/commands/doctor.command.ts
 /**
 * `warlock doctor` — run a set of diagnostic checks against the real app and
 * print a grouped pass/warn/fail report. Exits non-zero if any check fails.
@@ -28,6 +28,10 @@ const doctorCommand = command({
 		text: "--fix",
 		description: "Convert safely auto-convertible legacy utils/locales.ts files to locales.json",
 		type: "boolean"
+	}, {
+		text: "--json, -j",
+		description: "Print the report as JSON, each finding with its stable error code",
+		type: "boolean"
 	}],
 	preload: {
 		runtimeStrategy: "development",

package/esm/cli/commands/doctor.command.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"doctor.command.mjs","names":[],"sources":["../../../../../../../../core/src/cli/commands/doctor.command.ts"],"sourcesContent":["import { command } from \"../../commands/cli-command\";\nimport { doctorCommandAction } from \"./doctor/doctor-command.action\";\n\n/**\n * `warlock doctor` — run a set of diagnostic checks against the real app and\n * print a grouped pass/warn/fail report. Exits non-zero if any check fails.\n *\n * Preload plan: config + env + framework bootstrap, and NO connectors. The\n * `connectors` preloader would START them (open the database, dial the cache,\n * bind the port); doctor's own boot pass BOOTS them instead — the phase where\n * routes and endpoints register — which is what gives the checks a real app to\n * read without opening a single connection. See\n * `doctor/boot-for-diagnostics.ts` for that seam.\n *\n * `runtimeStrategy: \"development\"` is declared, not defaulted: connectors branch\n * on it (`web` serves pages from a manifest in production and from Vite in\n * development, `http` picks its router scan the same way), and a diagnostic\n * command that left the strategy unset would take the production branch by\n * accident — refusing to boot a perfectly healthy app because no build manifest\n * exists. Doctor reads a working tree, so it says so.\n */\nexport const doctorCommand = command({\n  name: \"doctor\",\n  description:\n    \"Boot the app read-only (no connections, no port) and report on its routes, config, connectors, drivers and health endpoints\",\n  action: doctorCommandAction,\n  options: [\n    {\n      text: \"--fix\",\n      description: \"Convert safely auto-convertible legacy utils/locales.ts files to locales.json\",\n      type: \"boolean\",\n    },\n  ],\n  preload: {\n    runtimeStrategy: \"development\",\n    config: true,\n    env: true,\n    bootstrap: true,\n  },\n});\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;AAqBA,MAAa,gBAAgB,QAAQ;CACnC,MAAM;CACN,aACE;CACF,QAAQ;CACR,SAAS,CACP;EACE,MAAM;EACN,aAAa;EACb,MAAM;CACR,CACF;CACA,SAAS;EACP,iBAAiB;EACjB,QAAQ;EACR,KAAK;EACL,WAAW;CACb;AACF,CAAC"}
+{"version":3,"file":"doctor.command.mjs","names":[],"sources":["../../../../../../../../../packages/core/src/cli/commands/doctor.command.ts"],"sourcesContent":["import { command } from \"../../commands/cli-command\";\nimport { doctorCommandAction } from \"./doctor/doctor-command.action\";\n\n/**\n * `warlock doctor` — run a set of diagnostic checks against the real app and\n * print a grouped pass/warn/fail report. Exits non-zero if any check fails.\n *\n * Preload plan: config + env + framework bootstrap, and NO connectors. The\n * `connectors` preloader would START them (open the database, dial the cache,\n * bind the port); doctor's own boot pass BOOTS them instead — the phase where\n * routes and endpoints register — which is what gives the checks a real app to\n * read without opening a single connection. See\n * `doctor/boot-for-diagnostics.ts` for that seam.\n *\n * `runtimeStrategy: \"development\"` is declared, not defaulted: connectors branch\n * on it (`web` serves pages from a manifest in production and from Vite in\n * development, `http` picks its router scan the same way), and a diagnostic\n * command that left the strategy unset would take the production branch by\n * accident — refusing to boot a perfectly healthy app because no build manifest\n * exists. Doctor reads a working tree, so it says so.\n */\nexport const doctorCommand = command({\n  name: \"doctor\",\n  description:\n    \"Boot the app read-only (no connections, no port) and report on its routes, config, connectors, drivers and health endpoints\",\n  action: doctorCommandAction,\n  options: [\n    {\n      text: \"--fix\",\n      description: \"Convert safely auto-convertible legacy utils/locales.ts files to locales.json\",\n      type: \"boolean\",\n    },\n    {\n      text: \"--json, -j\",\n      description: \"Print the report as JSON, each finding with its stable error code\",\n      type: \"boolean\",\n    },\n  ],\n  preload: {\n    runtimeStrategy: \"development\",\n    config: true,\n    env: true,\n    bootstrap: true,\n  },\n});\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;AAqBA,MAAa,gBAAgB,QAAQ;CACnC,MAAM;CACN,aACE;CACF,QAAQ;CACR,SAAS,CACP;EACE,MAAM;EACN,aAAa;EACb,MAAM;CACR,GACA;EACE,MAAM;EACN,aAAa;EACb,MAAM;CACR,CACF;CACA,SAAS;EACP,iBAAiB;EACjB,QAAQ;EACR,KAAK;EACL,WAAW;CACb;AACF,CAAC"}

package/esm/cli/commands/drop-tables.command.mjs

@@ -1,7 +1,7 @@
 import { command } from "../../commands/cli-command.mjs";
 import { dropTablesAction } from "../../database/drop-tables-action.mjs";
 
-//#region ../core/src/cli/commands/drop-tables.command.ts
+//#region ../../packages/core/src/cli/commands/drop-tables.command.ts
 const dropTablesCommand = command({
 	name: "drop.tables",
 	description: "Drop all tables in the database",

package/esm/cli/commands/drop-tables.command.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"drop-tables.command.mjs","names":[],"sources":["../../../../../../../../core/src/cli/commands/drop-tables.command.ts"],"sourcesContent":["import { dropTablesAction } from \"../../database/drop-tables-action\";\nimport { command } from \"../../commands/cli-command\";\n\nexport const dropTablesCommand = command({\n  name: \"drop.tables\",\n  description: \"Drop all tables in the database\",\n  action: dropTablesAction,\n  preload: {\n    config: [\"database\", \"log\"],\n    env: true,\n    connectors: [\"database\", \"logger\"],\n  },\n  options: [\n    {\n      text: \"--force, -f\",\n      description: \"Drop tables without confirmation\",\n      type: \"boolean\",\n    },\n  ],\n});\n"],"mappings":";;;;AAGA,MAAa,oBAAoB,QAAQ;CACvC,MAAM;CACN,aAAa;CACb,QAAQ;CACR,SAAS;EACP,QAAQ,CAAC,YAAY,KAAK;EAC1B,KAAK;EACL,YAAY,CAAC,YAAY,QAAQ;CACnC;CACA,SAAS,CACP;EACE,MAAM;EACN,aAAa;EACb,MAAM;CACR,CACF;AACF,CAAC"}
+{"version":3,"file":"drop-tables.command.mjs","names":[],"sources":["../../../../../../../../../packages/core/src/cli/commands/drop-tables.command.ts"],"sourcesContent":["import { dropTablesAction } from \"../../database/drop-tables-action\";\nimport { command } from \"../../commands/cli-command\";\n\nexport const dropTablesCommand = command({\n  name: \"drop.tables\",\n  description: \"Drop all tables in the database\",\n  action: dropTablesAction,\n  preload: {\n    config: [\"database\", \"log\"],\n    env: true,\n    connectors: [\"database\", \"logger\"],\n  },\n  options: [\n    {\n      text: \"--force, -f\",\n      description: \"Drop tables without confirmation\",\n      type: \"boolean\",\n    },\n  ],\n});\n"],"mappings":";;;;AAGA,MAAa,oBAAoB,QAAQ;CACvC,MAAM;CACN,aAAa;CACb,QAAQ;CACR,SAAS;EACP,QAAQ,CAAC,YAAY,KAAK;EAC1B,KAAK;EACL,YAAY,CAAC,YAAY,QAAQ;CACnC;CACA,SAAS,CACP;EACE,MAAM;EACN,aAAa;EACb,MAAM;CACR,CACF;AACF,CAAC"}

package/esm/cli/commands/explain/explain-command.action.mjs

@@ -0,0 +1,64 @@
+import { ERROR_CODES, errorCodeDocsUrl, explainErrorCode, isWarlockErrorCode } from "../../../errors/error-codes.mjs";
+import { colors } from "@mongez/copper";
+
+//#region ../../packages/core/src/cli/commands/explain/explain-command.action.ts
+function withDocs(definition) {
+	return {
+		...definition,
+		docs: isWarlockErrorCode(definition.code) ? errorCodeDocsUrl(definition.code) : ""
+	};
+}
+/**
+* The lines `warlock explain <code>` prints, uncolored, so they are testable.
+*
+* @param definition The registry entry to describe.
+*/
+function formatExplanation(definition) {
+	const { docs } = withDocs(definition);
+	return [
+		`${definition.code}  ${definition.title}`,
+		"",
+		`  Area:     ${definition.area} (${definition.category === "environment" ? "this machine" : "your code"})`,
+		`  Fix:      ${definition.fix}`,
+		`  Skill:    ${definition.skill}`,
+		`  Docs:     ${docs}`,
+		...definition.errorNames?.length ? [`  Thrown as: ${definition.errorNames.join(", ")}`] : []
+	];
+}
+/** One line per registered code, for `warlock explain` without an argument. */
+function formatCodeList() {
+	return Object.values(ERROR_CODES).map((definition) => `${definition.code}  ${definition.title}`);
+}
+/**
+* Action behind `warlock explain [code]`.
+*
+* With a code, prints what it means and what to do; with `--json`, the registry
+* entry as JSON. Without a code, lists every code (or, with `--json`, every
+* entry). An unknown code is thrown, so the CLI exits 1.
+*
+* @param data Parsed CLI args: the code as the first positional, `options.json`.
+*/
+async function explainCommandAction({ args, options }) {
+	const requested = args[0];
+	if (requested === void 0 || requested.trim() === "") {
+		if (options.json) {
+			console.log(JSON.stringify(Object.values(ERROR_CODES).map(withDocs), null, 2));
+			return;
+		}
+		for (const line of formatCodeList()) console.log(line);
+		return;
+	}
+	const definition = explainErrorCode(requested);
+	if (!definition) throw new Error(`Unknown error code ${JSON.stringify(requested)}. Run \`warlock explain\` to list every code.`);
+	if (options.json) {
+		console.log(JSON.stringify(withDocs(definition), null, 2));
+		return;
+	}
+	const [heading, ...rest] = formatExplanation(definition);
+	console.log(colors.bold(heading ?? definition.code));
+	for (const line of rest) console.log(line);
+}
+
+//#endregion
+export { explainCommandAction };
+//# sourceMappingURL=explain-command.action.mjs.map

package/esm/cli/commands/explain/explain-command.action.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"explain-command.action.mjs","names":[],"sources":["../../../../../../../../../../packages/core/src/cli/commands/explain/explain-command.action.ts"],"sourcesContent":["import { colors } from \"@mongez/copper\";\nimport type { CommandActionData } from \"../../../commands/types\";\nimport {\n  ERROR_CODES,\n  type ErrorCodeDefinition,\n  errorCodeDocsUrl,\n  explainErrorCode,\n  isWarlockErrorCode,\n} from \"../../../errors/error-codes\";\n\n/** What `warlock explain <code> --json` prints: the registry entry plus its docs URL. */\nexport type ExplainedErrorCode = ErrorCodeDefinition & { docs: string };\n\nfunction withDocs(definition: ErrorCodeDefinition): ExplainedErrorCode {\n  return {\n    ...definition,\n    docs: isWarlockErrorCode(definition.code) ? errorCodeDocsUrl(definition.code) : \"\",\n  };\n}\n\n/**\n * The lines `warlock explain <code>` prints, uncolored, so they are testable.\n *\n * @param definition The registry entry to describe.\n */\nexport function formatExplanation(definition: ErrorCodeDefinition): string[] {\n  const { docs } = withDocs(definition);\n\n  return [\n    `${definition.code}  ${definition.title}`,\n    \"\",\n    `  Area:     ${definition.area} (${definition.category === \"environment\" ? \"this machine\" : \"your code\"})`,\n    `  Fix:      ${definition.fix}`,\n    `  Skill:    ${definition.skill}`,\n    `  Docs:     ${docs}`,\n    ...(definition.errorNames?.length ? [`  Thrown as: ${definition.errorNames.join(\", \")}`] : []),\n  ];\n}\n\n/** One line per registered code, for `warlock explain` without an argument. */\nexport function formatCodeList(): string[] {\n  return Object.values(ERROR_CODES).map(\n    (definition: ErrorCodeDefinition) => `${definition.code}  ${definition.title}`,\n  );\n}\n\n/**\n * Action behind `warlock explain [code]`.\n *\n * With a code, prints what it means and what to do; with `--json`, the registry\n * entry as JSON. Without a code, lists every code (or, with `--json`, every\n * entry). An unknown code is thrown, so the CLI exits 1.\n *\n * @param data Parsed CLI args: the code as the first positional, `options.json`.\n */\nexport async function explainCommandAction({ args, options }: CommandActionData): Promise<void> {\n  const requested = args[0];\n\n  if (requested === undefined || requested.trim() === \"\") {\n    if (options.json) {\n      console.log(JSON.stringify(Object.values(ERROR_CODES).map(withDocs), null, 2));\n      return;\n    }\n\n    for (const line of formatCodeList()) {\n      console.log(line);\n    }\n\n    return;\n  }\n\n  const definition = explainErrorCode(requested);\n\n  if (!definition) {\n    // Thrown, not printed: the CLI reports it on stderr and exits 1.\n    throw new Error(\n      `Unknown error code ${JSON.stringify(requested)}. Run \\`warlock explain\\` to list every code.`,\n    );\n  }\n\n  if (options.json) {\n    console.log(JSON.stringify(withDocs(definition), null, 2));\n    return;\n  }\n\n  const [heading, ...rest] = formatExplanation(definition);\n\n  console.log(colors.bold(heading ?? definition.code));\n\n  for (const line of rest) {\n    console.log(line);\n  }\n}\n"],"mappings":";;;;AAaA,SAAS,SAAS,YAAqD;CACrE,OAAO;EACL,GAAG;EACH,MAAM,mBAAmB,WAAW,IAAI,IAAI,iBAAiB,WAAW,IAAI,IAAI;CAClF;AACF;;;;;;AAOA,SAAgB,kBAAkB,YAA2C;CAC3E,MAAM,EAAE,SAAS,SAAS,UAAU;CAEpC,OAAO;EACL,GAAG,WAAW,KAAK,IAAI,WAAW;EAClC;EACA,eAAe,WAAW,KAAK,IAAI,WAAW,aAAa,gBAAgB,iBAAiB,YAAY;EACxG,eAAe,WAAW;EAC1B,eAAe,WAAW;EAC1B,eAAe;EACf,GAAI,WAAW,YAAY,SAAS,CAAC,gBAAgB,WAAW,WAAW,KAAK,IAAI,GAAG,IAAI,CAAC;CAC9F;AACF;;AAGA,SAAgB,iBAA2B;CACzC,OAAO,OAAO,OAAO,WAAW,CAAC,CAAC,KAC/B,eAAoC,GAAG,WAAW,KAAK,IAAI,WAAW,OACzE;AACF;;;;;;;;;;AAWA,eAAsB,qBAAqB,EAAE,MAAM,WAA6C;CAC9F,MAAM,YAAY,KAAK;CAEvB,IAAI,cAAc,UAAa,UAAU,KAAK,MAAM,IAAI;EACtD,IAAI,QAAQ,MAAM;GAChB,QAAQ,IAAI,KAAK,UAAU,OAAO,OAAO,WAAW,CAAC,CAAC,IAAI,QAAQ,GAAG,MAAM,CAAC,CAAC;GAC7E;EACF;EAEA,KAAK,MAAM,QAAQ,eAAe,GAChC,QAAQ,IAAI,IAAI;EAGlB;CACF;CAEA,MAAM,aAAa,iBAAiB,SAAS;CAE7C,IAAI,CAAC,YAEH,MAAM,IAAI,MACR,sBAAsB,KAAK,UAAU,SAAS,EAAE,8CAClD;CAGF,IAAI,QAAQ,MAAM;EAChB,QAAQ,IAAI,KAAK,UAAU,SAAS,UAAU,GAAG,MAAM,CAAC,CAAC;EACzD;CACF;CAEA,MAAM,CAAC,SAAS,GAAG,QAAQ,kBAAkB,UAAU;CAEvD,QAAQ,IAAI,OAAO,KAAK,WAAW,WAAW,IAAI,CAAC;CAEnD,KAAK,MAAM,QAAQ,MACjB,QAAQ,IAAI,IAAI;AAEpB"}