@warlock.js/core 5.30.0 → 5.32.0

package/esm/cli/commands/doctor/checks/health.check.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"health.check.mjs","names":[],"sources":["../../../../../../../../../../../packages/core/src/cli/commands/doctor/checks/health.check.ts"],"sourcesContent":["import { config } from \"../../../../config/config-getter\";\nimport { container } from \"../../../../container\";\nimport { router } from \"../../../../router/router\";\nimport type { DoctorCheck } from \"../check.types\";\n\n/**\n * Ask the booted Fastify instance whether a GET route exists at this path.\n *\n * `hasRoute` is the instance's own answer, not a re-derivation of the config\n * that was supposed to produce it — which is the entire point of asking it.\n * Guarded because it is the one part of this check that depends on a Fastify\n * API: if the instance cannot answer, the check says so instead of inventing a\n * verdict from the config flag it is meant to be verifying.\n */\nfunction fastifyHasGet(path: string): boolean | undefined {\n  const http = container.tryGet<any>(\"http.server\");\n\n  if (!http || typeof http.hasRoute !== \"function\") return undefined;\n\n  try {\n    return Boolean(http.hasRoute({ method: \"GET\", url: path }));\n  } catch {\n    return undefined;\n  }\n}\n\n/**\n * Whether an app route already claims this path. The HTTP connector puts the\n * probes on the Fastify instance directly and the router scans app routes onto\n * the same instance at `start()`, so a collision is a duplicate registration:\n * Fastify refuses it and the server does not start.\n */\nfunction appRouteClaims(path: string): boolean {\n  return router.list().some((route) => {\n    const method = String(route.method).toUpperCase();\n\n    return route.path === path && (method === \"GET\" || method === \"ALL\");\n  });\n}\n\n/**\n * Confirms the liveness (`/health`) and readiness (`/ready`) endpoints are\n * really there.\n *\n * NEEDS A BOOTED APP: the HTTP connector registers the probes during `boot()`,\n * which the boot pass runs. Previously this check read `http.health.enabled`\n * and reported the endpoints as \"registered\" on that basis alone — in the same\n * report where `routes` said zero, because nothing had been booted at all. It\n * was reporting an intention as a fact, and the two lines contradicted each\n * other in the owner's own run.\n *\n * Verdicts:\n * - no `http` config → not applicable, no line;\n * - `http.health.enabled = false` → `ok`. Turning the probes off is a supported\n *   choice, and a warning that fires on a deliberate setting every single run\n *   is not read by the time it matters;\n * - an app route already claims a probe's path → `fail`: Fastify will refuse\n *   the duplicate and the server will not start;\n * - the instance says the route is absent → `fail`;\n * - otherwise → `ok`, with the paths that are actually registered.\n */\nexport const healthCheck: DoctorCheck = {\n  name: \"health\",\n  run: (context) => {\n    if (!config.get(\"http\")) {\n      return undefined;\n    }\n\n    const healthConfig = config.get(\"http.health\");\n\n    if (healthConfig?.enabled === false) {\n      return {\n        name: \"health\",\n        status: \"ok\",\n        detail: \"probes disabled by config (http.health.enabled = false)\",\n      };\n    }\n\n    const livenessPath = healthConfig?.path ?? \"/health\";\n    const readinessPath = healthConfig?.readinessPath ?? \"/ready\";\n\n    const collisions = [livenessPath, readinessPath].filter(appRouteClaims);\n\n    if (collisions.length > 0) {\n      return {\n        name: \"health\",\n        status: \"fail\",\n        detail:\n          `an app route already claims ${collisions.join(\" and \")} — Fastify refuses the ` +\n          \"duplicate registration and the server will not start. Move the app route, or \" +\n          \"rename the probe via http.health.path / http.health.readinessPath\",\n      };\n    }\n\n    // The HTTP connector is what registers the probes. If it did not boot, the\n    // connectors check already says so with the reason — reporting the same\n    // defect a second time here as a health failure would inflate one problem\n    // into two.\n    if (!context.connectors.booted.includes(\"http\")) {\n      return undefined;\n    }\n\n    const registered = [livenessPath, readinessPath].map(fastifyHasGet);\n\n    if (registered.some((answer) => answer === undefined)) {\n      return {\n        name: \"health\",\n        status: \"warn\",\n        detail:\n          \"could not read the http server's route table — \" +\n          `${livenessPath} + ${readinessPath} unverified`,\n      };\n    }\n\n    const missing = [livenessPath, readinessPath].filter((_path, index) => !registered[index]);\n\n    if (missing.length > 0) {\n      return {\n        name: \"health\",\n        status: \"fail\",\n        detail: `enabled in config but not registered on the http server: ${missing.join(\", \")}`,\n      };\n    }\n\n    return {\n      name: \"health\",\n      status: \"ok\",\n      detail: `liveness ${livenessPath} + readiness ${readinessPath} registered`,\n    };\n  },\n};\n"],"mappings":";;;;;;;;;;;;;;AAcA,SAAS,cAAc,MAAmC;CACxD,MAAM,OAAO,UAAU,OAAY,aAAa;CAEhD,IAAI,CAAC,QAAQ,OAAO,KAAK,aAAa,YAAY,OAAO;CAEzD,IAAI;EACF,OAAO,QAAQ,KAAK,SAAS;GAAE,QAAQ;GAAO,KAAK;EAAK,CAAC,CAAC;CAC5D,QAAQ;EACN;CACF;AACF;;;;;;;AAQA,SAAS,eAAe,MAAuB;CAC7C,OAAO,OAAO,KAAK,CAAC,CAAC,MAAM,UAAU;EACnC,MAAM,SAAS,OAAO,MAAM,MAAM,CAAC,CAAC,YAAY;EAEhD,OAAO,MAAM,SAAS,SAAS,WAAW,SAAS,WAAW;CAChE,CAAC;AACH;;;;;;;;;;;;;;;;;;;;;;AAuBA,MAAa,cAA2B;CACtC,MAAM;CACN,MAAM,YAAY;EAChB,IAAI,CAAC,OAAO,IAAI,MAAM,GACpB;EAGF,MAAM,eAAe,OAAO,IAAI,aAAa;EAE7C,IAAI,cAAc,YAAY,OAC5B,OAAO;GACL,MAAM;GACN,QAAQ;GACR,QAAQ;EACV;EAGF,MAAM,eAAe,cAAc,QAAQ;EAC3C,MAAM,gBAAgB,cAAc,iBAAiB;EAErD,MAAM,aAAa,CAAC,cAAc,aAAa,CAAC,CAAC,OAAO,cAAc;EAEtE,IAAI,WAAW,SAAS,GACtB,OAAO;GACL,MAAM;GACN,QAAQ;GACR,QACE,+BAA+B,WAAW,KAAK,OAAO,EAAE;EAG5D;EAOF,IAAI,CAAC,QAAQ,WAAW,OAAO,SAAS,MAAM,GAC5C;EAGF,MAAM,aAAa,CAAC,cAAc,aAAa,CAAC,CAAC,IAAI,aAAa;EAElE,IAAI,WAAW,MAAM,WAAW,WAAW,MAAS,GAClD,OAAO;GACL,MAAM;GACN,QAAQ;GACR,QACE,kDACG,aAAa,KAAK,cAAc;EACvC;EAGF,MAAM,UAAU,CAAC,cAAc,aAAa,CAAC,CAAC,QAAQ,OAAO,UAAU,CAAC,WAAW,MAAM;EAEzF,IAAI,QAAQ,SAAS,GACnB,OAAO;GACL,MAAM;GACN,QAAQ;GACR,QAAQ,4DAA4D,QAAQ,KAAK,IAAI;EACvF;EAGF,OAAO;GACL,MAAM;GACN,QAAQ;GACR,QAAQ,YAAY,aAAa,eAAe,cAAc;EAChE;CACF;AACF"}
+{"version":3,"file":"health.check.mjs","names":[],"sources":["../../../../../../../../../../../packages/core/src/cli/commands/doctor/checks/health.check.ts"],"sourcesContent":["import { config } from \"../../../../config/config-getter\";\nimport { container } from \"../../../../container\";\nimport { router } from \"../../../../router/router\";\nimport type { DoctorCheck } from \"../check.types\";\n\n/**\n * Ask the booted Fastify instance whether a GET route exists at this path.\n *\n * `hasRoute` is the instance's own answer, not a re-derivation of the config\n * that was supposed to produce it — which is the entire point of asking it.\n * Guarded because it is the one part of this check that depends on a Fastify\n * API: if the instance cannot answer, the check says so instead of inventing a\n * verdict from the config flag it is meant to be verifying.\n */\nfunction fastifyHasGet(path: string): boolean | undefined {\n  const http = container.tryGet<any>(\"http.server\");\n\n  if (!http || typeof http.hasRoute !== \"function\") return undefined;\n\n  try {\n    return Boolean(http.hasRoute({ method: \"GET\", url: path }));\n  } catch {\n    return undefined;\n  }\n}\n\n/**\n * Whether an app route already claims this path. The HTTP connector puts the\n * probes on the Fastify instance directly and the router scans app routes onto\n * the same instance at `start()`, so a collision is a duplicate registration:\n * Fastify refuses it and the server does not start.\n */\nfunction appRouteClaims(path: string): boolean {\n  return router.list().some((route) => {\n    const method = String(route.method).toUpperCase();\n\n    return route.path === path && (method === \"GET\" || method === \"ALL\");\n  });\n}\n\n/**\n * Confirms the liveness (`/health`) and readiness (`/ready`) endpoints are\n * really there.\n *\n * NEEDS A BOOTED APP: the HTTP connector registers the probes during `boot()`,\n * which the boot pass runs. Previously this check read `http.health.enabled`\n * and reported the endpoints as \"registered\" on that basis alone — in the same\n * report where `routes` said zero, because nothing had been booted at all. It\n * was reporting an intention as a fact, and the two lines contradicted each\n * other in the owner's own run.\n *\n * Verdicts:\n * - no `http` config → not applicable, no line;\n * - `http.health.enabled = false` → `ok`. Turning the probes off is a supported\n *   choice, and a warning that fires on a deliberate setting every single run\n *   is not read by the time it matters;\n * - an app route already claims a probe's path → `fail`: Fastify will refuse\n *   the duplicate and the server will not start;\n * - the instance says the route is absent → `fail`;\n * - otherwise → `ok`, with the paths that are actually registered.\n */\nexport const healthCheck: DoctorCheck = {\n  name: \"health\",\n  run: (context) => {\n    if (!config.get(\"http\")) {\n      return undefined;\n    }\n\n    const healthConfig = config.get(\"http.health\");\n\n    if (healthConfig?.enabled === false) {\n      return {\n        name: \"health\",\n        status: \"ok\",\n        detail: \"probes disabled by config (http.health.enabled = false)\",\n      };\n    }\n\n    const livenessPath = healthConfig?.path ?? \"/health\";\n    const readinessPath = healthConfig?.readinessPath ?? \"/ready\";\n\n    const collisions = [livenessPath, readinessPath].filter(appRouteClaims);\n\n    if (collisions.length > 0) {\n      return {\n        name: \"health\",\n        status: \"fail\",\n        code: \"WL5002\",\n        detail:\n          `an app route already claims ${collisions.join(\" and \")} — Fastify refuses the ` +\n          \"duplicate registration and the server will not start. Move the app route, or \" +\n          \"rename the probe via http.health.path / http.health.readinessPath\",\n      };\n    }\n\n    // The HTTP connector is what registers the probes. If it did not boot, the\n    // connectors check already says so with the reason — reporting the same\n    // defect a second time here as a health failure would inflate one problem\n    // into two.\n    if (!context.connectors.booted.includes(\"http\")) {\n      return undefined;\n    }\n\n    const registered = [livenessPath, readinessPath].map(fastifyHasGet);\n\n    if (registered.some((answer) => answer === undefined)) {\n      return {\n        name: \"health\",\n        status: \"warn\",\n        code: \"WL5003\",\n        detail:\n          \"could not read the http server's route table — \" +\n          `${livenessPath} + ${readinessPath} unverified`,\n      };\n    }\n\n    const missing = [livenessPath, readinessPath].filter((_path, index) => !registered[index]);\n\n    if (missing.length > 0) {\n      return {\n        name: \"health\",\n        status: \"fail\",\n        code: \"WL5003\",\n        detail: `enabled in config but not registered on the http server: ${missing.join(\", \")}`,\n      };\n    }\n\n    return {\n      name: \"health\",\n      status: \"ok\",\n      detail: `liveness ${livenessPath} + readiness ${readinessPath} registered`,\n    };\n  },\n};\n"],"mappings":";;;;;;;;;;;;;;AAcA,SAAS,cAAc,MAAmC;CACxD,MAAM,OAAO,UAAU,OAAY,aAAa;CAEhD,IAAI,CAAC,QAAQ,OAAO,KAAK,aAAa,YAAY,OAAO;CAEzD,IAAI;EACF,OAAO,QAAQ,KAAK,SAAS;GAAE,QAAQ;GAAO,KAAK;EAAK,CAAC,CAAC;CAC5D,QAAQ;EACN;CACF;AACF;;;;;;;AAQA,SAAS,eAAe,MAAuB;CAC7C,OAAO,OAAO,KAAK,CAAC,CAAC,MAAM,UAAU;EACnC,MAAM,SAAS,OAAO,MAAM,MAAM,CAAC,CAAC,YAAY;EAEhD,OAAO,MAAM,SAAS,SAAS,WAAW,SAAS,WAAW;CAChE,CAAC;AACH;;;;;;;;;;;;;;;;;;;;;;AAuBA,MAAa,cAA2B;CACtC,MAAM;CACN,MAAM,YAAY;EAChB,IAAI,CAAC,OAAO,IAAI,MAAM,GACpB;EAGF,MAAM,eAAe,OAAO,IAAI,aAAa;EAE7C,IAAI,cAAc,YAAY,OAC5B,OAAO;GACL,MAAM;GACN,QAAQ;GACR,QAAQ;EACV;EAGF,MAAM,eAAe,cAAc,QAAQ;EAC3C,MAAM,gBAAgB,cAAc,iBAAiB;EAErD,MAAM,aAAa,CAAC,cAAc,aAAa,CAAC,CAAC,OAAO,cAAc;EAEtE,IAAI,WAAW,SAAS,GACtB,OAAO;GACL,MAAM;GACN,QAAQ;GACR,MAAM;GACN,QACE,+BAA+B,WAAW,KAAK,OAAO,EAAE;EAG5D;EAOF,IAAI,CAAC,QAAQ,WAAW,OAAO,SAAS,MAAM,GAC5C;EAGF,MAAM,aAAa,CAAC,cAAc,aAAa,CAAC,CAAC,IAAI,aAAa;EAElE,IAAI,WAAW,MAAM,WAAW,WAAW,MAAS,GAClD,OAAO;GACL,MAAM;GACN,QAAQ;GACR,MAAM;GACN,QACE,kDACG,aAAa,KAAK,cAAc;EACvC;EAGF,MAAM,UAAU,CAAC,cAAc,aAAa,CAAC,CAAC,QAAQ,OAAO,UAAU,CAAC,WAAW,MAAM;EAEzF,IAAI,QAAQ,SAAS,GACnB,OAAO;GACL,MAAM;GACN,QAAQ;GACR,MAAM;GACN,QAAQ,4DAA4D,QAAQ,KAAK,IAAI;EACvF;EAGF,OAAO;GACL,MAAM;GACN,QAAQ;GACR,QAAQ,YAAY,aAAa,eAAe,cAAc;EAChE;CACF;AACF"}

package/esm/cli/commands/doctor/checks/jwt-secret.check.mjs

@@ -45,6 +45,7 @@ const jwtSecretCheck = {
 		return {
 			name: "jwt-secret",
 			status,
+			code: "WL1002",
 			detail: "auth is configured (auth.userType) but no JWT signing secret is set — every login and token operation will fail with a generic 500. Run `warlock jwt.generate` to create one, or set `auth.accessToken.secret`."
 		};
 	}

package/esm/cli/commands/doctor/checks/jwt-secret.check.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"jwt-secret.check.mjs","names":[],"sources":["../../../../../../../../../../../packages/core/src/cli/commands/doctor/checks/jwt-secret.check.ts"],"sourcesContent":["import { config } from \"../../../../config/config-getter\";\nimport type { CheckStatus, DoctorCheck } from \"../check.types\";\n\n/**\n * A non-empty string, or `undefined`. A secret arrives from `env(...)`; an\n * unset variable yields `undefined` and a `.env` line with nothing after the\n * `=` yields `\"\"` — both are \"not configured\".\n */\nfunction text(value: unknown): string | undefined {\n  return typeof value === \"string\" && value.trim().length > 0 ? value.trim() : undefined;\n}\n\n/**\n * Fails when the app has configured auth but no JWT signing secret is set.\n *\n * WHY THIS EXISTS. `authConfig.accessToken.secret()` throws \"no JWT secret\n * configured\" — but LAZILY, the first time a token is signed (a login). A fresh\n * scaffold's `src/config/auth.ts` reads `env(\"JWT_SECRET\")`, and a fresh `.env`\n * has none, so the app BOOTS clean and then 500s on the very first login, with\n * the real message going only to server stderr (finding 7b606e38). `doctor`\n * turns that first-login surprise into a pre-flight failure that names the fix.\n *\n * NEEDS NO BOOTED APP — it reads config only, like `optional-peers`.\n *\n * OPTS OUT when auth is not in use. The signal is `auth.userType`: the config\n * an app fills in to declare its authenticatable models (`{ user: User }`). An\n * app with no userType configured is not doing auth, so a missing secret is not\n * a finding for it — silence keeps the doctor's false-positive budget intact.\n *\n * The secret is resolved from BOTH the current key (`auth.accessToken.secret`)\n * and the legacy one (`auth.jwt.secret`) the scaffold still emits, so this does\n * not fire on a project that is simply using the older, still-supported shape.\n */\nexport const jwtSecretCheck: DoctorCheck = {\n  name: \"jwt-secret\",\n  run: () => {\n    const userType = config.get(\"auth.userType\");\n\n    const authInUse =\n      typeof userType === \"object\" && userType !== null && Object.keys(userType).length > 0;\n\n    if (!authInUse) return undefined;\n\n    const secret =\n      text(config.get(\"auth.accessToken.secret\")) ?? text(config.get(\"auth.jwt.secret\"));\n\n    const status: CheckStatus = secret ? \"ok\" : \"fail\";\n\n    if (secret) {\n      return { name: \"jwt-secret\", status, detail: \"A JWT signing secret is configured.\" };\n    }\n\n    return {\n      name: \"jwt-secret\",\n      status,\n      detail:\n        \"auth is configured (auth.userType) but no JWT signing secret is set — \" +\n        \"every login and token operation will fail with a generic 500. \" +\n        \"Run `warlock jwt.generate` to create one, or set `auth.accessToken.secret`.\",\n    };\n  },\n};\n"],"mappings":";;;;;;;;AAQA,SAAS,KAAK,OAAoC;CAChD,OAAO,OAAO,UAAU,YAAY,MAAM,KAAK,CAAC,CAAC,SAAS,IAAI,MAAM,KAAK,IAAI;AAC/E;;;;;;;;;;;;;;;;;;;;;;AAuBA,MAAa,iBAA8B;CACzC,MAAM;CACN,WAAW;EACT,MAAM,WAAW,OAAO,IAAI,eAAe;EAK3C,IAAI,EAFF,OAAO,aAAa,YAAY,aAAa,QAAQ,OAAO,KAAK,QAAQ,CAAC,CAAC,SAAS,IAEtE,OAAO;EAEvB,MAAM,SACJ,KAAK,OAAO,IAAI,yBAAyB,CAAC,KAAK,KAAK,OAAO,IAAI,iBAAiB,CAAC;EAEnF,MAAM,SAAsB,SAAS,OAAO;EAE5C,IAAI,QACF,OAAO;GAAE,MAAM;GAAc;GAAQ,QAAQ;EAAsC;EAGrF,OAAO;GACL,MAAM;GACN;GACA,QACE;EAGJ;CACF;AACF"}
+{"version":3,"file":"jwt-secret.check.mjs","names":[],"sources":["../../../../../../../../../../../packages/core/src/cli/commands/doctor/checks/jwt-secret.check.ts"],"sourcesContent":["import { config } from \"../../../../config/config-getter\";\nimport type { CheckStatus, DoctorCheck } from \"../check.types\";\n\n/**\n * A non-empty string, or `undefined`. A secret arrives from `env(...)`; an\n * unset variable yields `undefined` and a `.env` line with nothing after the\n * `=` yields `\"\"` — both are \"not configured\".\n */\nfunction text(value: unknown): string | undefined {\n  return typeof value === \"string\" && value.trim().length > 0 ? value.trim() : undefined;\n}\n\n/**\n * Fails when the app has configured auth but no JWT signing secret is set.\n *\n * WHY THIS EXISTS. `authConfig.accessToken.secret()` throws \"no JWT secret\n * configured\" — but LAZILY, the first time a token is signed (a login). A fresh\n * scaffold's `src/config/auth.ts` reads `env(\"JWT_SECRET\")`, and a fresh `.env`\n * has none, so the app BOOTS clean and then 500s on the very first login, with\n * the real message going only to server stderr (finding 7b606e38). `doctor`\n * turns that first-login surprise into a pre-flight failure that names the fix.\n *\n * NEEDS NO BOOTED APP — it reads config only, like `optional-peers`.\n *\n * OPTS OUT when auth is not in use. The signal is `auth.userType`: the config\n * an app fills in to declare its authenticatable models (`{ user: User }`). An\n * app with no userType configured is not doing auth, so a missing secret is not\n * a finding for it — silence keeps the doctor's false-positive budget intact.\n *\n * The secret is resolved from BOTH the current key (`auth.accessToken.secret`)\n * and the legacy one (`auth.jwt.secret`) the scaffold still emits, so this does\n * not fire on a project that is simply using the older, still-supported shape.\n */\nexport const jwtSecretCheck: DoctorCheck = {\n  name: \"jwt-secret\",\n  run: () => {\n    const userType = config.get(\"auth.userType\");\n\n    const authInUse =\n      typeof userType === \"object\" && userType !== null && Object.keys(userType).length > 0;\n\n    if (!authInUse) return undefined;\n\n    const secret =\n      text(config.get(\"auth.accessToken.secret\")) ?? text(config.get(\"auth.jwt.secret\"));\n\n    const status: CheckStatus = secret ? \"ok\" : \"fail\";\n\n    if (secret) {\n      return { name: \"jwt-secret\", status, detail: \"A JWT signing secret is configured.\" };\n    }\n\n    return {\n      name: \"jwt-secret\",\n      status,\n      code: \"WL1002\",\n      detail:\n        \"auth is configured (auth.userType) but no JWT signing secret is set — \" +\n        \"every login and token operation will fail with a generic 500. \" +\n        \"Run `warlock jwt.generate` to create one, or set `auth.accessToken.secret`.\",\n    };\n  },\n};\n"],"mappings":";;;;;;;;AAQA,SAAS,KAAK,OAAoC;CAChD,OAAO,OAAO,UAAU,YAAY,MAAM,KAAK,CAAC,CAAC,SAAS,IAAI,MAAM,KAAK,IAAI;AAC/E;;;;;;;;;;;;;;;;;;;;;;AAuBA,MAAa,iBAA8B;CACzC,MAAM;CACN,WAAW;EACT,MAAM,WAAW,OAAO,IAAI,eAAe;EAK3C,IAAI,EAFF,OAAO,aAAa,YAAY,aAAa,QAAQ,OAAO,KAAK,QAAQ,CAAC,CAAC,SAAS,IAEtE,OAAO;EAEvB,MAAM,SACJ,KAAK,OAAO,IAAI,yBAAyB,CAAC,KAAK,KAAK,OAAO,IAAI,iBAAiB,CAAC;EAEnF,MAAM,SAAsB,SAAS,OAAO;EAE5C,IAAI,QACF,OAAO;GAAE,MAAM;GAAc;GAAQ,QAAQ;EAAsC;EAGrF,OAAO;GACL,MAAM;GACN;GACA,MAAM;GACN,QACE;EAGJ;CACF;AACF"}

package/esm/cli/commands/doctor/checks/locales-ts-deprecated.check.mjs

@@ -1,9 +1,10 @@
 import { config } from "../../../../config/config-getter.mjs";
 import { appPath, rootPath } from "../../../../utils/paths.mjs";
 import { parseLocaleDictionary } from "../../../../localization/parse-locale-dictionary.mjs";
+import { isExpressionStatement, isIdentifier, isNumericLiteral, isPropertyAssignment, isStringLiteral, keyName, parseSourceFile, valueText } from "../../../../tooling/syntax/ast.mjs";
 import path from "node:path";
 import { existsSync, readFileSync, readdirSync, unlinkSync, writeFileSync } from "node:fs";
-import ts from "typescript";
+import { parseSync } from "oxc-parser";
 
 //#region ../../packages/core/src/cli/commands/doctor/checks/locales-ts-deprecated.check.ts
 function localeSources() {
@@ -14,23 +15,19 @@ function localeSources() {
 		module: entry.name
 	})).filter(({ file }) => existsSync(file));
 }
-function propertyName(property) {
-	if (ts.isIdentifier(property.name) || ts.isStringLiteral(property.name)) return property.name.text;
-}
 function literalObject(node) {
-	if (!ts.isObjectLiteralExpression(node)) return void 0;
+	if (node?.type !== "ObjectExpression") return void 0;
 	const value = Object.create(null);
 	for (const member of node.properties) {
-		if (!ts.isPropertyAssignment(member)) return void 0;
-		const key = propertyName(member);
+		if (!isPropertyAssignment(member)) return void 0;
+		const key = keyName(member.key);
 		if (key === void 0) return void 0;
-		if (ts.isStringLiteral(member.initializer) || ts.isNumericLiteral(member.initializer)) {
-			value[key] = ts.isNumericLiteral(member.initializer) ? Number(member.initializer.text) : member.initializer.text;
-			continue;
+		if (isStringLiteral(member.value) || isNumericLiteral(member.value)) value[key] = member.value.value;
+		else {
+			const nested = literalObject(member.value);
+			if (nested === void 0) return void 0;
+			value[key] = nested;
 		}
-		const nested = literalObject(member.initializer);
-		if (nested === void 0) return void 0;
-		value[key] = nested;
 	}
 	return value;
 }
@@ -46,40 +43,38 @@ function flattenLiteral(value, group, entries) {
 	return Object.entries(value).every(([key, nested]) => flattenLiteral(nested, group === "" ? key : `${group}.${key}`, entries));
 }
 function inspect(source) {
-	if (existsSync(path.join(path.dirname(source.file), "locales.json"))) return {
+	const jsonFile = path.join(path.dirname(source.file), "locales.json");
+	if (existsSync(jsonFile)) return {
 		...source,
 		convertible: false,
 		reason: "locales.json already exists"
 	};
 	const text = readFileSync(source.file, "utf8");
-	const program = ts.createSourceFile(source.file, text, ts.ScriptTarget.Latest, true);
-	const syntaxDiagnostics = ts.transpileModule(text, {
-		fileName: source.file,
-		reportDiagnostics: true
-	}).diagnostics;
-	if (syntaxDiagnostics !== void 0 && syntaxDiagnostics.length > 0) return {
+	const program = parseSourceFile(source.file, text);
+	if (parseSync(source.file, text).errors.length > 0) return {
 		...source,
 		convertible: false,
 		reason: "TypeScript syntax is invalid"
 	};
-	const [importStatement, callStatement] = program.statements;
-	if (!importStatement || !ts.isImportDeclaration(importStatement) || !ts.isStringLiteral(importStatement.moduleSpecifier) || importStatement.moduleSpecifier.text !== "@warlock.js/core" || !importStatement.importClause || importStatement.importClause.isTypeOnly || importStatement.importClause.name || !importStatement.importClause.namedBindings || !ts.isNamedImports(importStatement.importClause.namedBindings) || importStatement.importClause.namedBindings.elements.length !== 1 || importStatement.importClause.namedBindings.elements[0]?.name.text !== "groupedTranslations" || importStatement.importClause.namedBindings.elements[0]?.propertyName) return {
+	const [importStatement, callStatement] = program.body;
+	const binding = importStatement?.type === "ImportDeclaration" ? importStatement.specifiers[0] : void 0;
+	if (importStatement?.type !== "ImportDeclaration" || importStatement.source.value !== "@warlock.js/core" || importStatement.importKind === "type" || importStatement.specifiers.length !== 1 || binding?.type !== "ImportSpecifier" || binding.importKind === "type" || binding.local.name !== "groupedTranslations" || valueText(binding.imported) !== "groupedTranslations") return {
 		...source,
 		convertible: false,
 		reason: "must import only groupedTranslations from @warlock.js/core"
 	};
-	if (program.statements.length !== 2) return {
+	if (program.body.length !== 2) return {
 		...source,
 		convertible: false,
 		reason: "must contain only the groupedTranslations import and one call"
 	};
-	if (!callStatement || !ts.isExpressionStatement(callStatement) || !ts.isCallExpression(callStatement.expression)) return {
+	if (!callStatement || !isExpressionStatement(callStatement) || callStatement.expression.type !== "CallExpression") return {
 		...source,
 		convertible: false,
 		reason: "must contain one top-level groupedTranslations call"
 	};
 	const call = callStatement.expression;
-	if (!ts.isIdentifier(call.expression) || call.expression.text !== "groupedTranslations" || call.arguments.length !== 2 || !ts.isStringLiteral(call.arguments[0])) return {
+	if (!isIdentifier(call.callee) || valueText(call.callee) !== "groupedTranslations" || call.arguments.length !== 2 || !call.arguments[0] || !isStringLiteral(call.arguments[0])) return {
 		...source,
 		convertible: false,
 		reason: "must call groupedTranslations with a string group and object"
@@ -90,7 +85,7 @@ function inspect(source) {
 		convertible: false,
 		reason: "translation object must contain only literal keys, objects, strings, or numbers"
 	};
-	const group = call.arguments[0].text;
+	const group = call.arguments[0].value;
 	const entries = Object.create(null);
 	if (!flattenLiteral(dictionary, group, entries)) return {
 		...source,
@@ -158,6 +153,7 @@ const localesTsDeprecatedCheck = {
 		return {
 			name: "locales-ts-deprecated",
 			status: "warn",
+			code: "WL9101",
 			detail: `${sources.map((source) => {
 				return `${path.relative(process.cwd(), source.file).replaceAll("\\", "/")}: ${source.convertible ? "auto-convertible" : "manual"} (${source.reason})`;
 			}).join("; ")}. Auto-loaded locales.ts goes away in v6; run \`warlock doctor --fix\` to convert auto-convertible files.`
@@ -166,5 +162,5 @@ const localesTsDeprecatedCheck = {
 };
 
 //#endregion
-export { fixLocaleSources, localesTsDeprecatedCheck };
+export { fixLocaleSources, inspectLocaleSources, localesTsDeprecatedCheck };
 //# sourceMappingURL=locales-ts-deprecated.check.mjs.map

package/esm/cli/commands/doctor/checks/locales-ts-deprecated.check.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"locales-ts-deprecated.check.mjs","names":[],"sources":["../../../../../../../../../../../packages/core/src/cli/commands/doctor/checks/locales-ts-deprecated.check.ts"],"sourcesContent":["import { existsSync, readdirSync, readFileSync, unlinkSync, writeFileSync } from \"node:fs\";\nimport path from \"node:path\";\nimport ts from \"typescript\";\nimport { config } from \"../../../../config/config-getter\";\nimport {\n  parseLocaleDictionary,\n  type LocaleDictionaryEntries,\n} from \"../../../../localization/parse-locale-dictionary\";\nimport { appPath, rootPath } from \"../../../../utils/paths\";\nimport type { DoctorCheck } from \"../check.types\";\n\ntype LocaleSource = {\n  file: string;\n  module: string;\n};\n\nexport type LocaleInspection = LocaleSource & {\n  convertible: boolean;\n  reason: string;\n  group?: string;\n  dictionary?: Record<string, unknown>;\n  entries?: LocaleDictionaryEntries;\n};\n\nfunction localeSources(): LocaleSource[] {\n  const appDirectory = appPath();\n  if (!existsSync(appDirectory)) return [];\n\n  return readdirSync(appDirectory, { withFileTypes: true })\n    .filter((entry) => entry.isDirectory())\n    .map((entry) => ({\n      file: path.join(appDirectory, entry.name, \"utils\", \"locales.ts\"),\n      module: entry.name,\n    }))\n    .filter(({ file }) => existsSync(file));\n}\n\nfunction propertyName(property: ts.PropertyAssignment): string | undefined {\n  if (ts.isIdentifier(property.name) || ts.isStringLiteral(property.name))\n    return property.name.text;\n  return undefined;\n}\n\nfunction literalObject(node: ts.Expression): Record<string, unknown> | undefined {\n  if (!ts.isObjectLiteralExpression(node)) return undefined;\n  const value: Record<string, unknown> = Object.create(null);\n  for (const member of node.properties) {\n    if (!ts.isPropertyAssignment(member)) return undefined;\n    const key = propertyName(member);\n    if (key === undefined) return undefined;\n    if (ts.isStringLiteral(member.initializer) || ts.isNumericLiteral(member.initializer)) {\n      value[key] = ts.isNumericLiteral(member.initializer)\n        ? Number(member.initializer.text)\n        : member.initializer.text;\n      continue;\n    }\n    const nested = literalObject(member.initializer);\n    if (nested === undefined) return undefined;\n    value[key] = nested;\n  }\n  return value;\n}\n\nfunction flattenLiteral(\n  value: Record<string, unknown>,\n  group: string,\n  entries: LocaleDictionaryEntries,\n): boolean {\n  const values = Object.values(value);\n  if (values.every((item) => typeof item === \"string\" || typeof item === \"number\")) {\n    if (group === \"\") return false;\n    if (!values.every((item) => typeof item === \"string\")) return false;\n    entries[group] = value as Record<string, string>;\n    return true;\n  }\n  if (!values.every((item) => item !== null && typeof item === \"object\" && !Array.isArray(item)))\n    return false;\n  return Object.entries(value).every(([key, nested]) =>\n    flattenLiteral(\n      nested as Record<string, unknown>,\n      group === \"\" ? key : `${group}.${key}`,\n      entries,\n    ),\n  );\n}\n\nfunction inspect(source: LocaleSource): LocaleInspection {\n  const jsonFile = path.join(path.dirname(source.file), \"locales.json\");\n  if (existsSync(jsonFile))\n    return { ...source, convertible: false, reason: \"locales.json already exists\" };\n\n  const text = readFileSync(source.file, \"utf8\");\n  const program = ts.createSourceFile(source.file, text, ts.ScriptTarget.Latest, true);\n  const syntaxDiagnostics = ts.transpileModule(text, {\n    fileName: source.file,\n    reportDiagnostics: true,\n  }).diagnostics;\n  if (syntaxDiagnostics !== undefined && syntaxDiagnostics.length > 0)\n    return { ...source, convertible: false, reason: \"TypeScript syntax is invalid\" };\n  const [importStatement, callStatement] = program.statements;\n  if (\n    !importStatement ||\n    !ts.isImportDeclaration(importStatement) ||\n    !ts.isStringLiteral(importStatement.moduleSpecifier) ||\n    importStatement.moduleSpecifier.text !== \"@warlock.js/core\" ||\n    !importStatement.importClause ||\n    importStatement.importClause.isTypeOnly ||\n    importStatement.importClause.name ||\n    !importStatement.importClause.namedBindings ||\n    !ts.isNamedImports(importStatement.importClause.namedBindings) ||\n    importStatement.importClause.namedBindings.elements.length !== 1 ||\n    importStatement.importClause.namedBindings.elements[0]?.name.text !== \"groupedTranslations\" ||\n    importStatement.importClause.namedBindings.elements[0]?.propertyName\n  )\n    return {\n      ...source,\n      convertible: false,\n      reason: \"must import only groupedTranslations from @warlock.js/core\",\n    };\n\n  if (program.statements.length !== 2)\n    return {\n      ...source,\n      convertible: false,\n      reason: \"must contain only the groupedTranslations import and one call\",\n    };\n\n  if (\n    !callStatement ||\n    !ts.isExpressionStatement(callStatement) ||\n    !ts.isCallExpression(callStatement.expression)\n  )\n    return {\n      ...source,\n      convertible: false,\n      reason: \"must contain one top-level groupedTranslations call\",\n    };\n  const call = callStatement.expression;\n  if (\n    !ts.isIdentifier(call.expression) ||\n    call.expression.text !== \"groupedTranslations\" ||\n    call.arguments.length !== 2 ||\n    !ts.isStringLiteral(call.arguments[0]!)\n  )\n    return {\n      ...source,\n      convertible: false,\n      reason: \"must call groupedTranslations with a string group and object\",\n    };\n  const dictionary = literalObject(call.arguments[1]!);\n  if (!dictionary)\n    return {\n      ...source,\n      convertible: false,\n      reason: \"translation object must contain only literal keys, objects, strings, or numbers\",\n    };\n  const group = call.arguments[0].text;\n  const entries: LocaleDictionaryEntries = Object.create(null);\n  if (!flattenLiteral(dictionary, group, entries))\n    return {\n      ...source,\n      convertible: false,\n      reason: \"translation object has no valid literal locale entries\",\n    };\n  return {\n    ...source,\n    convertible: true,\n    reason: \"pure groupedTranslations literal\",\n    group,\n    dictionary,\n    entries,\n  };\n}\n\nexport function inspectLocaleSources(): LocaleInspection[] {\n  return localeSources().map(inspect);\n}\n\nfunction localeCodes(): readonly string[] | undefined {\n  const configured = config.key<unknown>(\"app.localeCodes\");\n  return Array.isArray(configured) && configured.every((code) => typeof code === \"string\")\n    ? configured\n    : undefined;\n}\n\nfunction sameEntries(left: LocaleDictionaryEntries, right: LocaleDictionaryEntries): boolean {\n  return JSON.stringify(left) === JSON.stringify(right);\n}\n\n/** Convert safe legacy locale sources, retaining a TS file whenever verification cannot prove equivalence. */\nexport function fixLocaleSources(): LocaleInspection[] {\n  return inspectLocaleSources().map((result) => {\n    if (!result.convertible || !result.group || !result.dictionary || !result.entries)\n      return result;\n    const jsonFile = path.join(path.dirname(result.file), \"locales.json\");\n    const document: Record<string, unknown> =\n      result.group === result.module\n        ? result.dictionary\n        : { $group: result.group, ...result.dictionary };\n    const json = `${JSON.stringify(document, null, 2)}\\n`;\n    writeFileSync(jsonFile, json);\n    try {\n      const parsed = parseLocaleDictionary({\n        sourceFile: rootPath(path.relative(process.cwd(), jsonFile)),\n        source: json,\n        defaultNamespace: result.module,\n        localeCodes: localeCodes(),\n      });\n      if (!sameEntries(result.entries, parsed.entries)) throw new Error(\"flattened entries differ\");\n    } catch (error) {\n      unlinkSync(jsonFile);\n      return {\n        ...result,\n        convertible: false,\n        reason: `verification failed: ${error instanceof Error ? error.message : String(error)}`,\n      };\n    }\n    unlinkSync(result.file);\n    return {\n      ...result,\n      reason: \"converted (comments in the TypeScript source are not retained)\",\n    };\n  });\n}\n\nexport const localesTsDeprecatedCheck: DoctorCheck = {\n  name: \"locales-ts-deprecated\",\n  run: () => {\n    const sources = inspectLocaleSources();\n    if (sources.length === 0) return undefined;\n    const details = sources.map((source) => {\n      const label = path.relative(process.cwd(), source.file).replaceAll(\"\\\\\", \"/\");\n      return `${label}: ${source.convertible ? \"auto-convertible\" : \"manual\"} (${source.reason})`;\n    });\n    return {\n      name: \"locales-ts-deprecated\",\n      status: \"warn\",\n      detail:\n        `${details.join(\"; \")}. Auto-loaded locales.ts goes away in v6; ` +\n        \"run `warlock doctor --fix` to convert auto-convertible files.\",\n    };\n  },\n};\n"],"mappings":";;;;;;;;AAwBA,SAAS,gBAAgC;CACvC,MAAM,eAAe,QAAQ;CAC7B,IAAI,CAAC,WAAW,YAAY,GAAG,OAAO,CAAC;CAEvC,OAAO,YAAY,cAAc,EAAE,eAAe,KAAK,CAAC,CAAC,CACtD,QAAQ,UAAU,MAAM,YAAY,CAAC,CAAC,CACtC,KAAK,WAAW;EACf,MAAM,KAAK,KAAK,cAAc,MAAM,MAAM,SAAS,YAAY;EAC/D,QAAQ,MAAM;CAChB,EAAE,CAAC,CACF,QAAQ,EAAE,WAAW,WAAW,IAAI,CAAC;AAC1C;AAEA,SAAS,aAAa,UAAqD;CACzE,IAAI,GAAG,aAAa,SAAS,IAAI,KAAK,GAAG,gBAAgB,SAAS,IAAI,GACpE,OAAO,SAAS,KAAK;AAEzB;AAEA,SAAS,cAAc,MAA0D;CAC/E,IAAI,CAAC,GAAG,0BAA0B,IAAI,GAAG,OAAO;CAChD,MAAM,QAAiC,OAAO,OAAO,IAAI;CACzD,KAAK,MAAM,UAAU,KAAK,YAAY;EACpC,IAAI,CAAC,GAAG,qBAAqB,MAAM,GAAG,OAAO;EAC7C,MAAM,MAAM,aAAa,MAAM;EAC/B,IAAI,QAAQ,QAAW,OAAO;EAC9B,IAAI,GAAG,gBAAgB,OAAO,WAAW,KAAK,GAAG,iBAAiB,OAAO,WAAW,GAAG;GACrF,MAAM,OAAO,GAAG,iBAAiB,OAAO,WAAW,IAC/C,OAAO,OAAO,YAAY,IAAI,IAC9B,OAAO,YAAY;GACvB;EACF;EACA,MAAM,SAAS,cAAc,OAAO,WAAW;EAC/C,IAAI,WAAW,QAAW,OAAO;EACjC,MAAM,OAAO;CACf;CACA,OAAO;AACT;AAEA,SAAS,eACP,OACA,OACA,SACS;CACT,MAAM,SAAS,OAAO,OAAO,KAAK;CAClC,IAAI,OAAO,OAAO,SAAS,OAAO,SAAS,YAAY,OAAO,SAAS,QAAQ,GAAG;EAChF,IAAI,UAAU,IAAI,OAAO;EACzB,IAAI,CAAC,OAAO,OAAO,SAAS,OAAO,SAAS,QAAQ,GAAG,OAAO;EAC9D,QAAQ,SAAS;EACjB,OAAO;CACT;CACA,IAAI,CAAC,OAAO,OAAO,SAAS,SAAS,QAAQ,OAAO,SAAS,YAAY,CAAC,MAAM,QAAQ,IAAI,CAAC,GAC3F,OAAO;CACT,OAAO,OAAO,QAAQ,KAAK,CAAC,CAAC,OAAO,CAAC,KAAK,YACxC,eACE,QACA,UAAU,KAAK,MAAM,GAAG,MAAM,GAAG,OACjC,OACF,CACF;AACF;AAEA,SAAS,QAAQ,QAAwC;CAEvD,IAAI,WADa,KAAK,KAAK,KAAK,QAAQ,OAAO,IAAI,GAAG,cAChC,CAAC,GACrB,OAAO;EAAE,GAAG;EAAQ,aAAa;EAAO,QAAQ;CAA8B;CAEhF,MAAM,OAAO,aAAa,OAAO,MAAM,MAAM;CAC7C,MAAM,UAAU,GAAG,iBAAiB,OAAO,MAAM,MAAM,GAAG,aAAa,QAAQ,IAAI;CACnF,MAAM,oBAAoB,GAAG,gBAAgB,MAAM;EACjD,UAAU,OAAO;EACjB,mBAAmB;CACrB,CAAC,CAAC,CAAC;CACH,IAAI,sBAAsB,UAAa,kBAAkB,SAAS,GAChE,OAAO;EAAE,GAAG;EAAQ,aAAa;EAAO,QAAQ;CAA+B;CACjF,MAAM,CAAC,iBAAiB,iBAAiB,QAAQ;CACjD,IACE,CAAC,mBACD,CAAC,GAAG,oBAAoB,eAAe,KACvC,CAAC,GAAG,gBAAgB,gBAAgB,eAAe,KACnD,gBAAgB,gBAAgB,SAAS,sBACzC,CAAC,gBAAgB,gBACjB,gBAAgB,aAAa,cAC7B,gBAAgB,aAAa,QAC7B,CAAC,gBAAgB,aAAa,iBAC9B,CAAC,GAAG,eAAe,gBAAgB,aAAa,aAAa,KAC7D,gBAAgB,aAAa,cAAc,SAAS,WAAW,KAC/D,gBAAgB,aAAa,cAAc,SAAS,EAAE,EAAE,KAAK,SAAS,yBACtE,gBAAgB,aAAa,cAAc,SAAS,EAAE,EAAE,cAExD,OAAO;EACL,GAAG;EACH,aAAa;EACb,QAAQ;CACV;CAEF,IAAI,QAAQ,WAAW,WAAW,GAChC,OAAO;EACL,GAAG;EACH,aAAa;EACb,QAAQ;CACV;CAEF,IACE,CAAC,iBACD,CAAC,GAAG,sBAAsB,aAAa,KACvC,CAAC,GAAG,iBAAiB,cAAc,UAAU,GAE7C,OAAO;EACL,GAAG;EACH,aAAa;EACb,QAAQ;CACV;CACF,MAAM,OAAO,cAAc;CAC3B,IACE,CAAC,GAAG,aAAa,KAAK,UAAU,KAChC,KAAK,WAAW,SAAS,yBACzB,KAAK,UAAU,WAAW,KAC1B,CAAC,GAAG,gBAAgB,KAAK,UAAU,EAAG,GAEtC,OAAO;EACL,GAAG;EACH,aAAa;EACb,QAAQ;CACV;CACF,MAAM,aAAa,cAAc,KAAK,UAAU,EAAG;CACnD,IAAI,CAAC,YACH,OAAO;EACL,GAAG;EACH,aAAa;EACb,QAAQ;CACV;CACF,MAAM,QAAQ,KAAK,UAAU,EAAE,CAAC;CAChC,MAAM,UAAmC,OAAO,OAAO,IAAI;CAC3D,IAAI,CAAC,eAAe,YAAY,OAAO,OAAO,GAC5C,OAAO;EACL,GAAG;EACH,aAAa;EACb,QAAQ;CACV;CACF,OAAO;EACL,GAAG;EACH,aAAa;EACb,QAAQ;EACR;EACA;EACA;CACF;AACF;AAEA,SAAgB,uBAA2C;CACzD,OAAO,cAAc,CAAC,CAAC,IAAI,OAAO;AACpC;AAEA,SAAS,cAA6C;CACpD,MAAM,aAAa,OAAO,IAAa,iBAAiB;CACxD,OAAO,MAAM,QAAQ,UAAU,KAAK,WAAW,OAAO,SAAS,OAAO,SAAS,QAAQ,IACnF,aACA;AACN;AAEA,SAAS,YAAY,MAA+B,OAAyC;CAC3F,OAAO,KAAK,UAAU,IAAI,MAAM,KAAK,UAAU,KAAK;AACtD;;AAGA,SAAgB,mBAAuC;CACrD,OAAO,qBAAqB,CAAC,CAAC,KAAK,WAAW;EAC5C,IAAI,CAAC,OAAO,eAAe,CAAC,OAAO,SAAS,CAAC,OAAO,cAAc,CAAC,OAAO,SACxE,OAAO;EACT,MAAM,WAAW,KAAK,KAAK,KAAK,QAAQ,OAAO,IAAI,GAAG,cAAc;EACpE,MAAM,WACJ,OAAO,UAAU,OAAO,SACpB,OAAO,aACP;GAAE,QAAQ,OAAO;GAAO,GAAG,OAAO;EAAW;EACnD,MAAM,OAAO,GAAG,KAAK,UAAU,UAAU,MAAM,CAAC,EAAE;EAClD,cAAc,UAAU,IAAI;EAC5B,IAAI;GACF,MAAM,SAAS,sBAAsB;IACnC,YAAY,SAAS,KAAK,SAAS,QAAQ,IAAI,GAAG,QAAQ,CAAC;IAC3D,QAAQ;IACR,kBAAkB,OAAO;IACzB,aAAa,YAAY;GAC3B,CAAC;GACD,IAAI,CAAC,YAAY,OAAO,SAAS,OAAO,OAAO,GAAG,MAAM,IAAI,MAAM,0BAA0B;EAC9F,SAAS,OAAO;GACd,WAAW,QAAQ;GACnB,OAAO;IACL,GAAG;IACH,aAAa;IACb,QAAQ,wBAAwB,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK;GACvF;EACF;EACA,WAAW,OAAO,IAAI;EACtB,OAAO;GACL,GAAG;GACH,QAAQ;EACV;CACF,CAAC;AACH;AAEA,MAAa,2BAAwC;CACnD,MAAM;CACN,WAAW;EACT,MAAM,UAAU,qBAAqB;EACrC,IAAI,QAAQ,WAAW,GAAG,OAAO;EAKjC,OAAO;GACL,MAAM;GACN,QAAQ;GACR,QACE,GARY,QAAQ,KAAK,WAAW;IAEtC,OAAO,GADO,KAAK,SAAS,QAAQ,IAAI,GAAG,OAAO,IAAI,CAAC,CAAC,WAAW,MAAM,GAC3D,EAAE,IAAI,OAAO,cAAc,qBAAqB,SAAS,IAAI,OAAO,OAAO;GAC3F,CAKa,CAAC,CAAC,KAAK,IAAI,EAAE;EAE1B;CACF;AACF"}
+{"version":3,"file":"locales-ts-deprecated.check.mjs","names":["ast.isPropertyAssignment","ast.keyName","ast.isStringLiteral","ast.isNumericLiteral","ast.parseSourceFile","ast.valueText","ast.isExpressionStatement","ast.isIdentifier"],"sources":["../../../../../../../../../../../packages/core/src/cli/commands/doctor/checks/locales-ts-deprecated.check.ts"],"sourcesContent":["import { existsSync, readdirSync, readFileSync, unlinkSync, writeFileSync } from \"node:fs\";\nimport path from \"node:path\";\nimport { parseSync } from \"oxc-parser\";\nimport * as ast from \"../../../../tooling/syntax/ast\";\nimport { config } from \"../../../../config/config-getter\";\nimport {\n  parseLocaleDictionary,\n  type LocaleDictionaryEntries,\n} from \"../../../../localization/parse-locale-dictionary\";\nimport { appPath, rootPath } from \"../../../../utils/paths\";\nimport type { DoctorCheck } from \"../check.types\";\n\ntype LocaleSource = {\n  file: string;\n  module: string;\n};\n\nexport type LocaleInspection = LocaleSource & {\n  convertible: boolean;\n  reason: string;\n  group?: string;\n  dictionary?: Record<string, unknown>;\n  entries?: LocaleDictionaryEntries;\n};\n\nfunction localeSources(): LocaleSource[] {\n  const appDirectory = appPath();\n  if (!existsSync(appDirectory)) return [];\n\n  return readdirSync(appDirectory, { withFileTypes: true })\n    .filter((entry) => entry.isDirectory())\n    .map((entry) => ({\n      file: path.join(appDirectory, entry.name, \"utils\", \"locales.ts\"),\n      module: entry.name,\n    }))\n    .filter(({ file }) => existsSync(file));\n}\n\nfunction literalObject(node: ast.Node | undefined): Record<string, unknown> | undefined {\n  if (node?.type !== \"ObjectExpression\") return undefined;\n  const value: Record<string, unknown> = Object.create(null);\n  for (const member of node.properties) {\n    if (!ast.isPropertyAssignment(member)) return undefined;\n    const key = ast.keyName(member.key);\n    if (key === undefined) return undefined;\n    if (ast.isStringLiteral(member.value) || ast.isNumericLiteral(member.value))\n      value[key] = member.value.value;\n    else {\n      const nested = literalObject(member.value);\n      if (nested === undefined) return undefined;\n      value[key] = nested;\n    }\n  }\n  return value;\n}\n\nfunction flattenLiteral(\n  value: Record<string, unknown>,\n  group: string,\n  entries: LocaleDictionaryEntries,\n): boolean {\n  const values = Object.values(value);\n  if (values.every((item) => typeof item === \"string\" || typeof item === \"number\")) {\n    if (group === \"\") return false;\n    if (!values.every((item) => typeof item === \"string\")) return false;\n    entries[group] = value as Record<string, string>;\n    return true;\n  }\n  if (!values.every((item) => item !== null && typeof item === \"object\" && !Array.isArray(item)))\n    return false;\n  return Object.entries(value).every(([key, nested]) =>\n    flattenLiteral(\n      nested as Record<string, unknown>,\n      group === \"\" ? key : `${group}.${key}`,\n      entries,\n    ),\n  );\n}\n\nfunction inspect(source: LocaleSource): LocaleInspection {\n  const jsonFile = path.join(path.dirname(source.file), \"locales.json\");\n  if (existsSync(jsonFile))\n    return { ...source, convertible: false, reason: \"locales.json already exists\" };\n\n  const text = readFileSync(source.file, \"utf8\");\n  const program = ast.parseSourceFile(source.file, text);\n  if (parseSync(source.file, text).errors.length > 0)\n    return { ...source, convertible: false, reason: \"TypeScript syntax is invalid\" };\n  const [importStatement, callStatement] = program.body;\n  const binding =\n    importStatement?.type === \"ImportDeclaration\" ? importStatement.specifiers[0] : undefined;\n  if (\n    importStatement?.type !== \"ImportDeclaration\" ||\n    importStatement.source.value !== \"@warlock.js/core\" ||\n    importStatement.importKind === \"type\" ||\n    importStatement.specifiers.length !== 1 ||\n    binding?.type !== \"ImportSpecifier\" ||\n    binding.importKind === \"type\" ||\n    binding.local.name !== \"groupedTranslations\" ||\n    ast.valueText(binding.imported) !== \"groupedTranslations\"\n  )\n    return {\n      ...source,\n      convertible: false,\n      reason: \"must import only groupedTranslations from @warlock.js/core\",\n    };\n\n  if (program.body.length !== 2)\n    return {\n      ...source,\n      convertible: false,\n      reason: \"must contain only the groupedTranslations import and one call\",\n    };\n\n  if (\n    !callStatement ||\n    !ast.isExpressionStatement(callStatement) ||\n    callStatement.expression.type !== \"CallExpression\"\n  )\n    return {\n      ...source,\n      convertible: false,\n      reason: \"must contain one top-level groupedTranslations call\",\n    };\n  const call = callStatement.expression;\n  if (\n    !ast.isIdentifier(call.callee) ||\n    ast.valueText(call.callee) !== \"groupedTranslations\" ||\n    call.arguments.length !== 2 ||\n    !call.arguments[0] ||\n    !ast.isStringLiteral(call.arguments[0])\n  )\n    return {\n      ...source,\n      convertible: false,\n      reason: \"must call groupedTranslations with a string group and object\",\n    };\n  const dictionary = literalObject(call.arguments[1]);\n  if (!dictionary)\n    return {\n      ...source,\n      convertible: false,\n      reason: \"translation object must contain only literal keys, objects, strings, or numbers\",\n    };\n  const group = call.arguments[0].value;\n  const entries: LocaleDictionaryEntries = Object.create(null);\n  if (!flattenLiteral(dictionary, group, entries))\n    return {\n      ...source,\n      convertible: false,\n      reason: \"translation object has no valid literal locale entries\",\n    };\n  return {\n    ...source,\n    convertible: true,\n    reason: \"pure groupedTranslations literal\",\n    group,\n    dictionary,\n    entries,\n  };\n}\n\nexport function inspectLocaleSources(): LocaleInspection[] {\n  return localeSources().map(inspect);\n}\n\nfunction localeCodes(): readonly string[] | undefined {\n  const configured = config.key<unknown>(\"app.localeCodes\");\n  return Array.isArray(configured) && configured.every((code) => typeof code === \"string\")\n    ? configured\n    : undefined;\n}\n\nfunction sameEntries(left: LocaleDictionaryEntries, right: LocaleDictionaryEntries): boolean {\n  return JSON.stringify(left) === JSON.stringify(right);\n}\n\n/** Convert safe legacy locale sources, retaining a TS file whenever verification cannot prove equivalence. */\nexport function fixLocaleSources(): LocaleInspection[] {\n  return inspectLocaleSources().map((result) => {\n    if (!result.convertible || !result.group || !result.dictionary || !result.entries)\n      return result;\n    const jsonFile = path.join(path.dirname(result.file), \"locales.json\");\n    const document: Record<string, unknown> =\n      result.group === result.module\n        ? result.dictionary\n        : { $group: result.group, ...result.dictionary };\n    const json = `${JSON.stringify(document, null, 2)}\\n`;\n    writeFileSync(jsonFile, json);\n    try {\n      const parsed = parseLocaleDictionary({\n        sourceFile: rootPath(path.relative(process.cwd(), jsonFile)),\n        source: json,\n        defaultNamespace: result.module,\n        localeCodes: localeCodes(),\n      });\n      if (!sameEntries(result.entries, parsed.entries)) throw new Error(\"flattened entries differ\");\n    } catch (error) {\n      unlinkSync(jsonFile);\n      return {\n        ...result,\n        convertible: false,\n        reason: `verification failed: ${error instanceof Error ? error.message : String(error)}`,\n      };\n    }\n    unlinkSync(result.file);\n    return {\n      ...result,\n      reason: \"converted (comments in the TypeScript source are not retained)\",\n    };\n  });\n}\n\nexport const localesTsDeprecatedCheck: DoctorCheck = {\n  name: \"locales-ts-deprecated\",\n  run: () => {\n    const sources = inspectLocaleSources();\n    if (sources.length === 0) return undefined;\n    const details = sources.map((source) => {\n      const label = path.relative(process.cwd(), source.file).replaceAll(\"\\\\\", \"/\");\n      return `${label}: ${source.convertible ? \"auto-convertible\" : \"manual\"} (${source.reason})`;\n    });\n    return {\n      name: \"locales-ts-deprecated\",\n      status: \"warn\",\n      code: \"WL9101\",\n      detail:\n        `${details.join(\"; \")}. Auto-loaded locales.ts goes away in v6; ` +\n        \"run `warlock doctor --fix` to convert auto-convertible files.\",\n    };\n  },\n};\n"],"mappings":";;;;;;;;;AAyBA,SAAS,gBAAgC;CACvC,MAAM,eAAe,QAAQ;CAC7B,IAAI,CAAC,WAAW,YAAY,GAAG,OAAO,CAAC;CAEvC,OAAO,YAAY,cAAc,EAAE,eAAe,KAAK,CAAC,CAAC,CACtD,QAAQ,UAAU,MAAM,YAAY,CAAC,CAAC,CACtC,KAAK,WAAW;EACf,MAAM,KAAK,KAAK,cAAc,MAAM,MAAM,SAAS,YAAY;EAC/D,QAAQ,MAAM;CAChB,EAAE,CAAC,CACF,QAAQ,EAAE,WAAW,WAAW,IAAI,CAAC;AAC1C;AAEA,SAAS,cAAc,MAAiE;CACtF,IAAI,MAAM,SAAS,oBAAoB,OAAO;CAC9C,MAAM,QAAiC,OAAO,OAAO,IAAI;CACzD,KAAK,MAAM,UAAU,KAAK,YAAY;EACpC,IAAI,CAACA,qBAAyB,MAAM,GAAG,OAAO;EAC9C,MAAM,MAAMC,QAAY,OAAO,GAAG;EAClC,IAAI,QAAQ,QAAW,OAAO;EAC9B,IAAIC,gBAAoB,OAAO,KAAK,KAAKC,iBAAqB,OAAO,KAAK,GACxE,MAAM,OAAO,OAAO,MAAM;OACvB;GACH,MAAM,SAAS,cAAc,OAAO,KAAK;GACzC,IAAI,WAAW,QAAW,OAAO;GACjC,MAAM,OAAO;EACf;CACF;CACA,OAAO;AACT;AAEA,SAAS,eACP,OACA,OACA,SACS;CACT,MAAM,SAAS,OAAO,OAAO,KAAK;CAClC,IAAI,OAAO,OAAO,SAAS,OAAO,SAAS,YAAY,OAAO,SAAS,QAAQ,GAAG;EAChF,IAAI,UAAU,IAAI,OAAO;EACzB,IAAI,CAAC,OAAO,OAAO,SAAS,OAAO,SAAS,QAAQ,GAAG,OAAO;EAC9D,QAAQ,SAAS;EACjB,OAAO;CACT;CACA,IAAI,CAAC,OAAO,OAAO,SAAS,SAAS,QAAQ,OAAO,SAAS,YAAY,CAAC,MAAM,QAAQ,IAAI,CAAC,GAC3F,OAAO;CACT,OAAO,OAAO,QAAQ,KAAK,CAAC,CAAC,OAAO,CAAC,KAAK,YACxC,eACE,QACA,UAAU,KAAK,MAAM,GAAG,MAAM,GAAG,OACjC,OACF,CACF;AACF;AAEA,SAAS,QAAQ,QAAwC;CACvD,MAAM,WAAW,KAAK,KAAK,KAAK,QAAQ,OAAO,IAAI,GAAG,cAAc;CACpE,IAAI,WAAW,QAAQ,GACrB,OAAO;EAAE,GAAG;EAAQ,aAAa;EAAO,QAAQ;CAA8B;CAEhF,MAAM,OAAO,aAAa,OAAO,MAAM,MAAM;CAC7C,MAAM,UAAUC,gBAAoB,OAAO,MAAM,IAAI;CACrD,IAAI,UAAU,OAAO,MAAM,IAAI,CAAC,CAAC,OAAO,SAAS,GAC/C,OAAO;EAAE,GAAG;EAAQ,aAAa;EAAO,QAAQ;CAA+B;CACjF,MAAM,CAAC,iBAAiB,iBAAiB,QAAQ;CACjD,MAAM,UACJ,iBAAiB,SAAS,sBAAsB,gBAAgB,WAAW,KAAK;CAClF,IACE,iBAAiB,SAAS,uBAC1B,gBAAgB,OAAO,UAAU,sBACjC,gBAAgB,eAAe,UAC/B,gBAAgB,WAAW,WAAW,KACtC,SAAS,SAAS,qBAClB,QAAQ,eAAe,UACvB,QAAQ,MAAM,SAAS,yBACvBC,UAAc,QAAQ,QAAQ,MAAM,uBAEpC,OAAO;EACL,GAAG;EACH,aAAa;EACb,QAAQ;CACV;CAEF,IAAI,QAAQ,KAAK,WAAW,GAC1B,OAAO;EACL,GAAG;EACH,aAAa;EACb,QAAQ;CACV;CAEF,IACE,CAAC,iBACD,CAACC,sBAA0B,aAAa,KACxC,cAAc,WAAW,SAAS,kBAElC,OAAO;EACL,GAAG;EACH,aAAa;EACb,QAAQ;CACV;CACF,MAAM,OAAO,cAAc;CAC3B,IACE,CAACC,aAAiB,KAAK,MAAM,KAC7BF,UAAc,KAAK,MAAM,MAAM,yBAC/B,KAAK,UAAU,WAAW,KAC1B,CAAC,KAAK,UAAU,MAChB,CAACH,gBAAoB,KAAK,UAAU,EAAE,GAEtC,OAAO;EACL,GAAG;EACH,aAAa;EACb,QAAQ;CACV;CACF,MAAM,aAAa,cAAc,KAAK,UAAU,EAAE;CAClD,IAAI,CAAC,YACH,OAAO;EACL,GAAG;EACH,aAAa;EACb,QAAQ;CACV;CACF,MAAM,QAAQ,KAAK,UAAU,EAAE,CAAC;CAChC,MAAM,UAAmC,OAAO,OAAO,IAAI;CAC3D,IAAI,CAAC,eAAe,YAAY,OAAO,OAAO,GAC5C,OAAO;EACL,GAAG;EACH,aAAa;EACb,QAAQ;CACV;CACF,OAAO;EACL,GAAG;EACH,aAAa;EACb,QAAQ;EACR;EACA;EACA;CACF;AACF;AAEA,SAAgB,uBAA2C;CACzD,OAAO,cAAc,CAAC,CAAC,IAAI,OAAO;AACpC;AAEA,SAAS,cAA6C;CACpD,MAAM,aAAa,OAAO,IAAa,iBAAiB;CACxD,OAAO,MAAM,QAAQ,UAAU,KAAK,WAAW,OAAO,SAAS,OAAO,SAAS,QAAQ,IACnF,aACA;AACN;AAEA,SAAS,YAAY,MAA+B,OAAyC;CAC3F,OAAO,KAAK,UAAU,IAAI,MAAM,KAAK,UAAU,KAAK;AACtD;;AAGA,SAAgB,mBAAuC;CACrD,OAAO,qBAAqB,CAAC,CAAC,KAAK,WAAW;EAC5C,IAAI,CAAC,OAAO,eAAe,CAAC,OAAO,SAAS,CAAC,OAAO,cAAc,CAAC,OAAO,SACxE,OAAO;EACT,MAAM,WAAW,KAAK,KAAK,KAAK,QAAQ,OAAO,IAAI,GAAG,cAAc;EACpE,MAAM,WACJ,OAAO,UAAU,OAAO,SACpB,OAAO,aACP;GAAE,QAAQ,OAAO;GAAO,GAAG,OAAO;EAAW;EACnD,MAAM,OAAO,GAAG,KAAK,UAAU,UAAU,MAAM,CAAC,EAAE;EAClD,cAAc,UAAU,IAAI;EAC5B,IAAI;GACF,MAAM,SAAS,sBAAsB;IACnC,YAAY,SAAS,KAAK,SAAS,QAAQ,IAAI,GAAG,QAAQ,CAAC;IAC3D,QAAQ;IACR,kBAAkB,OAAO;IACzB,aAAa,YAAY;GAC3B,CAAC;GACD,IAAI,CAAC,YAAY,OAAO,SAAS,OAAO,OAAO,GAAG,MAAM,IAAI,MAAM,0BAA0B;EAC9F,SAAS,OAAO;GACd,WAAW,QAAQ;GACnB,OAAO;IACL,GAAG;IACH,aAAa;IACb,QAAQ,wBAAwB,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK;GACvF;EACF;EACA,WAAW,OAAO,IAAI;EACtB,OAAO;GACL,GAAG;GACH,QAAQ;EACV;CACF,CAAC;AACH;AAEA,MAAa,2BAAwC;CACnD,MAAM;CACN,WAAW;EACT,MAAM,UAAU,qBAAqB;EACrC,IAAI,QAAQ,WAAW,GAAG,OAAO;EAKjC,OAAO;GACL,MAAM;GACN,QAAQ;GACR,MAAM;GACN,QACE,GATY,QAAQ,KAAK,WAAW;IAEtC,OAAO,GADO,KAAK,SAAS,QAAQ,IAAI,GAAG,OAAO,IAAI,CAAC,CAAC,WAAW,MAAM,GAC3D,EAAE,IAAI,OAAO,cAAc,qBAAqB,SAAS,IAAI,OAAO,OAAO;GAC3F,CAMa,CAAC,CAAC,KAAK,IAAI,EAAE;EAE1B;CACF;AACF"}

package/esm/cli/commands/doctor/checks/optional-peers.check.mjs

@@ -139,6 +139,7 @@ const optionalPeersCheck = {
 		if (missing.length > 0) return {
 			name: "optional-peers",
 			status,
+			code: "WL2007",
 			detail: `${missing.length} configured feature(s) have no driver installed:\n` + missing.map((peer) => `  - ${peer.package} — required by ${peer.because}`).join("\n")
 		};
 		return {

package/esm/cli/commands/doctor/checks/optional-peers.check.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"optional-peers.check.mjs","names":[],"sources":["../../../../../../../../../../../packages/core/src/cli/commands/doctor/checks/optional-peers.check.ts"],"sourcesContent":["import { createRequire } from \"node:module\";\nimport { config } from \"../../../../config/config-getter\";\nimport type { CheckStatus, DoctorCheck } from \"../check.types\";\n\n/**\n * A package this project's own configuration requires, and what asked for it.\n */\ntype RequiredPeer = {\n  /** The npm package name to probe via `require.resolve`. */\n  package: string;\n\n  /** The config that asked for it, quoted back to the user verbatim. */\n  because: string;\n};\n\n/**\n * Resolve from the project's working directory, not from core's own\n * `node_modules`, so the probe reflects what the *consuming app* has installed.\n */\nconst projectRequire = createRequire(`${process.cwd()}/package.json`);\n\n/**\n * Whether a package can be resolved from the project. A failed resolve (the\n * normal \"not installed\" case) is swallowed and reported as missing.\n */\nfunction isInstalled(packageName: string): boolean {\n  try {\n    projectRequire.resolve(packageName);\n    return true;\n  } catch {\n    return false;\n  }\n}\n\n/**\n * A non-empty string, or `undefined`. Config values arrive from `env(...)` and\n * an unset variable yields `undefined` — but a `.env` line with nothing after\n * the `=` yields `\"\"`, which is \"not configured\" just as much.\n */\nfunction text(value: unknown): string | undefined {\n  return typeof value === \"string\" && value.trim().length > 0 ? value.trim() : undefined;\n}\n\n/**\n * The database driver's package. `driver` is a closed union in cascade\n * (`mongodb | postgres | mysql`) and mysql is not implemented by cascade, so it\n * has no peer to report; an unrecognised value means the config is\n * wrong in a way this check is not the right one to report.\n */\nfunction databasePeer(): RequiredPeer | undefined {\n  const driver = text(config.get(\"database.driver\"));\n\n  const packageName =\n    driver === \"mongodb\"\n      ? \"mongodb\"\n      : driver === \"postgres\"\n        ? \"pg\"\n        : undefined;\n\n  return packageName\n    ? { package: packageName, because: `database.driver = \"${driver}\"` }\n    : undefined;\n}\n\n/**\n * The selected cache driver. Only the DEFAULT matters: `cache.drivers` is a\n * menu the scaffold fills in for every driver the framework ships, and warning\n * about a menu entry nobody selected is the false positive this whole check was\n * rewritten to remove.\n */\nfunction cachePeer(): RequiredPeer | undefined {\n  const selected = text(config.get(\"cache.default\"));\n\n  if (!selected || !/redis/i.test(selected)) return undefined;\n\n  return { package: \"redis\", because: `cache.default = \"${selected}\"` };\n}\n\n/**\n * The selected storage driver, read through its canonical `driver` field\n * (`local` / `s3` / `r2` / `spaces`) rather than the key the app happened to\n * name it, so a driver called \"cdn\" is still recognised as S3.\n */\nfunction storagePeer(): RequiredPeer | undefined {\n  const selected = text(config.get(\"storage.default\"));\n\n  if (!selected) return undefined;\n\n  const driver = text(config.get(`storage.drivers.${selected}.driver`));\n\n  if (!driver || driver === \"local\") return undefined;\n\n  return {\n    package: \"@aws-sdk/client-s3\",\n    because: `storage.default = \"${selected}\" (driver \"${driver}\")`,\n  };\n}\n\n/**\n * The mail transport. A `mail` config with no host and no driver is the\n * scaffold's placeholder — every field is an unset env var — so it asks for\n * nothing and this stays quiet.\n */\nfunction mailPeer(): RequiredPeer | undefined {\n  const driver = text(config.get(\"mail.driver\"));\n\n  if (driver === \"ses\") {\n    return { package: \"@aws-sdk/client-sesv2\", because: `mail.driver = \"ses\"` };\n  }\n\n  const host = text(config.get(\"mail.host\"));\n\n  if (!host) return undefined;\n\n  return { package: \"nodemailer\", because: `mail.host = \"${host}\"` };\n}\n\n/**\n * Realtime sockets. The connector no-ops without a `socket` config, so the\n * presence of that config is exactly the request for the peer.\n */\nfunction socketPeer(): RequiredPeer | undefined {\n  if (!config.get(\"socket\")) return undefined;\n\n  return { package: \"socket.io\", because: \"a socket config is present\" };\n}\n\n/**\n * Every peer THIS project's configuration asks for.\n */\nfunction requiredPeers(): RequiredPeer[] {\n  return [databasePeer(), cachePeer(), storagePeer(), mailPeer(), socketPeer()].filter(\n    (peer): peer is RequiredPeer => Boolean(peer),\n  );\n}\n\n/**\n * Checks that every optional peer the project's own configuration selects is\n * actually installed.\n *\n * NEEDS NO BOOTED APP — it reads config and resolves module paths. It runs after\n * the boot pass only because config is loaded by then.\n *\n * WHAT THIS REPLACED, AND WHY: the previous version probed nine packages and\n * warned about every one that was absent. Every one of them is an OPTIONAL\n * peer — a fresh app installs none of them by design — so the check warned, at\n * length, about the framework's own default state. \"No MySQL driver installed\"\n * is not a diagnosis for someone who never wanted MySQL; it is noise that\n * teaches the reader to skim past the line where a real finding will one day\n * appear.\n *\n * Inverted, it becomes a genuine one: a project whose config selects a driver\n * whose package is missing is broken — it will throw the first time that\n * feature is used — so a missing peer here is a `fail`, not a warning.\n */\nexport const optionalPeersCheck: DoctorCheck = {\n  name: \"optional-peers\",\n  run: () => {\n    const required = requiredPeers();\n\n    if (required.length === 0) {\n      return undefined;\n    }\n\n    const missing = required.filter((peer) => !isInstalled(peer.package));\n\n    const status: CheckStatus = missing.length > 0 ? \"fail\" : \"ok\";\n\n    if (missing.length > 0) {\n      return {\n        name: \"optional-peers\",\n        status,\n        detail:\n          `${missing.length} configured feature(s) have no driver installed:\\n` +\n          missing.map((peer) => `  - ${peer.package} — required by ${peer.because}`).join(\"\\n\"),\n      };\n    }\n\n    return {\n      name: \"optional-peers\",\n      status,\n      detail: `every configured driver is installed (${required\n        .map((peer) => peer.package)\n        .join(\", \")})`,\n    };\n  },\n};\n"],"mappings":";;;;;;;;AAmBA,MAAM,iBAAiB,cAAc,GAAG,QAAQ,IAAI,EAAE,cAAc;;;;;AAMpE,SAAS,YAAY,aAA8B;CACjD,IAAI;EACF,eAAe,QAAQ,WAAW;EAClC,OAAO;CACT,QAAQ;EACN,OAAO;CACT;AACF;;;;;;AAOA,SAAS,KAAK,OAAoC;CAChD,OAAO,OAAO,UAAU,YAAY,MAAM,KAAK,CAAC,CAAC,SAAS,IAAI,MAAM,KAAK,IAAI;AAC/E;;;;;;;AAQA,SAAS,eAAyC;CAChD,MAAM,SAAS,KAAK,OAAO,IAAI,iBAAiB,CAAC;CAEjD,MAAM,cACJ,WAAW,YACP,YACA,WAAW,aACT,OACA;CAER,OAAO,cACH;EAAE,SAAS;EAAa,SAAS,sBAAsB,OAAO;CAAG,IACjE;AACN;;;;;;;AAQA,SAAS,YAAsC;CAC7C,MAAM,WAAW,KAAK,OAAO,IAAI,eAAe,CAAC;CAEjD,IAAI,CAAC,YAAY,CAAC,SAAS,KAAK,QAAQ,GAAG,OAAO;CAElD,OAAO;EAAE,SAAS;EAAS,SAAS,oBAAoB,SAAS;CAAG;AACtE;;;;;;AAOA,SAAS,cAAwC;CAC/C,MAAM,WAAW,KAAK,OAAO,IAAI,iBAAiB,CAAC;CAEnD,IAAI,CAAC,UAAU,OAAO;CAEtB,MAAM,SAAS,KAAK,OAAO,IAAI,mBAAmB,SAAS,QAAQ,CAAC;CAEpE,IAAI,CAAC,UAAU,WAAW,SAAS,OAAO;CAE1C,OAAO;EACL,SAAS;EACT,SAAS,sBAAsB,SAAS,aAAa,OAAO;CAC9D;AACF;;;;;;AAOA,SAAS,WAAqC;CAG5C,IAFe,KAAK,OAAO,IAAI,aAAa,CAEnC,MAAM,OACb,OAAO;EAAE,SAAS;EAAyB,SAAS;CAAsB;CAG5E,MAAM,OAAO,KAAK,OAAO,IAAI,WAAW,CAAC;CAEzC,IAAI,CAAC,MAAM,OAAO;CAElB,OAAO;EAAE,SAAS;EAAc,SAAS,gBAAgB,KAAK;CAAG;AACnE;;;;;AAMA,SAAS,aAAuC;CAC9C,IAAI,CAAC,OAAO,IAAI,QAAQ,GAAG,OAAO;CAElC,OAAO;EAAE,SAAS;EAAa,SAAS;CAA6B;AACvE;;;;AAKA,SAAS,gBAAgC;CACvC,OAAO;EAAC,aAAa;EAAG,UAAU;EAAG,YAAY;EAAG,SAAS;EAAG,WAAW;CAAC,CAAC,CAAC,QAC3E,SAA+B,QAAQ,IAAI,CAC9C;AACF;;;;;;;;;;;;;;;;;;;;AAqBA,MAAa,qBAAkC;CAC7C,MAAM;CACN,WAAW;EACT,MAAM,WAAW,cAAc;EAE/B,IAAI,SAAS,WAAW,GACtB;EAGF,MAAM,UAAU,SAAS,QAAQ,SAAS,CAAC,YAAY,KAAK,OAAO,CAAC;EAEpE,MAAM,SAAsB,QAAQ,SAAS,IAAI,SAAS;EAE1D,IAAI,QAAQ,SAAS,GACnB,OAAO;GACL,MAAM;GACN;GACA,QACE,GAAG,QAAQ,OAAO,sDAClB,QAAQ,KAAK,SAAS,OAAO,KAAK,QAAQ,iBAAiB,KAAK,SAAS,CAAC,CAAC,KAAK,IAAI;EACxF;EAGF,OAAO;GACL,MAAM;GACN;GACA,QAAQ,yCAAyC,SAC9C,KAAK,SAAS,KAAK,OAAO,CAAC,CAC3B,KAAK,IAAI,EAAE;EAChB;CACF;AACF"}
+{"version":3,"file":"optional-peers.check.mjs","names":[],"sources":["../../../../../../../../../../../packages/core/src/cli/commands/doctor/checks/optional-peers.check.ts"],"sourcesContent":["import { createRequire } from \"node:module\";\nimport { config } from \"../../../../config/config-getter\";\nimport type { CheckStatus, DoctorCheck } from \"../check.types\";\n\n/**\n * A package this project's own configuration requires, and what asked for it.\n */\ntype RequiredPeer = {\n  /** The npm package name to probe via `require.resolve`. */\n  package: string;\n\n  /** The config that asked for it, quoted back to the user verbatim. */\n  because: string;\n};\n\n/**\n * Resolve from the project's working directory, not from core's own\n * `node_modules`, so the probe reflects what the *consuming app* has installed.\n */\nconst projectRequire = createRequire(`${process.cwd()}/package.json`);\n\n/**\n * Whether a package can be resolved from the project. A failed resolve (the\n * normal \"not installed\" case) is swallowed and reported as missing.\n */\nfunction isInstalled(packageName: string): boolean {\n  try {\n    projectRequire.resolve(packageName);\n    return true;\n  } catch {\n    return false;\n  }\n}\n\n/**\n * A non-empty string, or `undefined`. Config values arrive from `env(...)` and\n * an unset variable yields `undefined` — but a `.env` line with nothing after\n * the `=` yields `\"\"`, which is \"not configured\" just as much.\n */\nfunction text(value: unknown): string | undefined {\n  return typeof value === \"string\" && value.trim().length > 0 ? value.trim() : undefined;\n}\n\n/**\n * The database driver's package. `driver` is a closed union in cascade\n * (`mongodb | postgres | mysql`) and mysql is not implemented by cascade, so it\n * has no peer to report; an unrecognised value means the config is\n * wrong in a way this check is not the right one to report.\n */\nfunction databasePeer(): RequiredPeer | undefined {\n  const driver = text(config.get(\"database.driver\"));\n\n  const packageName = driver === \"mongodb\" ? \"mongodb\" : driver === \"postgres\" ? \"pg\" : undefined;\n\n  return packageName\n    ? { package: packageName, because: `database.driver = \"${driver}\"` }\n    : undefined;\n}\n\n/**\n * The selected cache driver. Only the DEFAULT matters: `cache.drivers` is a\n * menu the scaffold fills in for every driver the framework ships, and warning\n * about a menu entry nobody selected is the false positive this whole check was\n * rewritten to remove.\n */\nfunction cachePeer(): RequiredPeer | undefined {\n  const selected = text(config.get(\"cache.default\"));\n\n  if (!selected || !/redis/i.test(selected)) return undefined;\n\n  return { package: \"redis\", because: `cache.default = \"${selected}\"` };\n}\n\n/**\n * The selected storage driver, read through its canonical `driver` field\n * (`local` / `s3` / `r2` / `spaces`) rather than the key the app happened to\n * name it, so a driver called \"cdn\" is still recognised as S3.\n */\nfunction storagePeer(): RequiredPeer | undefined {\n  const selected = text(config.get(\"storage.default\"));\n\n  if (!selected) return undefined;\n\n  const driver = text(config.get(`storage.drivers.${selected}.driver`));\n\n  if (!driver || driver === \"local\") return undefined;\n\n  return {\n    package: \"@aws-sdk/client-s3\",\n    because: `storage.default = \"${selected}\" (driver \"${driver}\")`,\n  };\n}\n\n/**\n * The mail transport. A `mail` config with no host and no driver is the\n * scaffold's placeholder — every field is an unset env var — so it asks for\n * nothing and this stays quiet.\n */\nfunction mailPeer(): RequiredPeer | undefined {\n  const driver = text(config.get(\"mail.driver\"));\n\n  if (driver === \"ses\") {\n    return { package: \"@aws-sdk/client-sesv2\", because: `mail.driver = \"ses\"` };\n  }\n\n  const host = text(config.get(\"mail.host\"));\n\n  if (!host) return undefined;\n\n  return { package: \"nodemailer\", because: `mail.host = \"${host}\"` };\n}\n\n/**\n * Realtime sockets. The connector no-ops without a `socket` config, so the\n * presence of that config is exactly the request for the peer.\n */\nfunction socketPeer(): RequiredPeer | undefined {\n  if (!config.get(\"socket\")) return undefined;\n\n  return { package: \"socket.io\", because: \"a socket config is present\" };\n}\n\n/**\n * Every peer THIS project's configuration asks for.\n */\nfunction requiredPeers(): RequiredPeer[] {\n  return [databasePeer(), cachePeer(), storagePeer(), mailPeer(), socketPeer()].filter(\n    (peer): peer is RequiredPeer => Boolean(peer),\n  );\n}\n\n/**\n * Checks that every optional peer the project's own configuration selects is\n * actually installed.\n *\n * NEEDS NO BOOTED APP — it reads config and resolves module paths. It runs after\n * the boot pass only because config is loaded by then.\n *\n * WHAT THIS REPLACED, AND WHY: the previous version probed nine packages and\n * warned about every one that was absent. Every one of them is an OPTIONAL\n * peer — a fresh app installs none of them by design — so the check warned, at\n * length, about the framework's own default state. \"No MySQL driver installed\"\n * is not a diagnosis for someone who never wanted MySQL; it is noise that\n * teaches the reader to skim past the line where a real finding will one day\n * appear.\n *\n * Inverted, it becomes a genuine one: a project whose config selects a driver\n * whose package is missing is broken — it will throw the first time that\n * feature is used — so a missing peer here is a `fail`, not a warning.\n */\nexport const optionalPeersCheck: DoctorCheck = {\n  name: \"optional-peers\",\n  run: () => {\n    const required = requiredPeers();\n\n    if (required.length === 0) {\n      return undefined;\n    }\n\n    const missing = required.filter((peer) => !isInstalled(peer.package));\n\n    const status: CheckStatus = missing.length > 0 ? \"fail\" : \"ok\";\n\n    if (missing.length > 0) {\n      return {\n        name: \"optional-peers\",\n        status,\n        code: \"WL2007\",\n        detail:\n          `${missing.length} configured feature(s) have no driver installed:\\n` +\n          missing.map((peer) => `  - ${peer.package} — required by ${peer.because}`).join(\"\\n\"),\n      };\n    }\n\n    return {\n      name: \"optional-peers\",\n      status,\n      detail: `every configured driver is installed (${required\n        .map((peer) => peer.package)\n        .join(\", \")})`,\n    };\n  },\n};\n"],"mappings":";;;;;;;;AAmBA,MAAM,iBAAiB,cAAc,GAAG,QAAQ,IAAI,EAAE,cAAc;;;;;AAMpE,SAAS,YAAY,aAA8B;CACjD,IAAI;EACF,eAAe,QAAQ,WAAW;EAClC,OAAO;CACT,QAAQ;EACN,OAAO;CACT;AACF;;;;;;AAOA,SAAS,KAAK,OAAoC;CAChD,OAAO,OAAO,UAAU,YAAY,MAAM,KAAK,CAAC,CAAC,SAAS,IAAI,MAAM,KAAK,IAAI;AAC/E;;;;;;;AAQA,SAAS,eAAyC;CAChD,MAAM,SAAS,KAAK,OAAO,IAAI,iBAAiB,CAAC;CAEjD,MAAM,cAAc,WAAW,YAAY,YAAY,WAAW,aAAa,OAAO;CAEtF,OAAO,cACH;EAAE,SAAS;EAAa,SAAS,sBAAsB,OAAO;CAAG,IACjE;AACN;;;;;;;AAQA,SAAS,YAAsC;CAC7C,MAAM,WAAW,KAAK,OAAO,IAAI,eAAe,CAAC;CAEjD,IAAI,CAAC,YAAY,CAAC,SAAS,KAAK,QAAQ,GAAG,OAAO;CAElD,OAAO;EAAE,SAAS;EAAS,SAAS,oBAAoB,SAAS;CAAG;AACtE;;;;;;AAOA,SAAS,cAAwC;CAC/C,MAAM,WAAW,KAAK,OAAO,IAAI,iBAAiB,CAAC;CAEnD,IAAI,CAAC,UAAU,OAAO;CAEtB,MAAM,SAAS,KAAK,OAAO,IAAI,mBAAmB,SAAS,QAAQ,CAAC;CAEpE,IAAI,CAAC,UAAU,WAAW,SAAS,OAAO;CAE1C,OAAO;EACL,SAAS;EACT,SAAS,sBAAsB,SAAS,aAAa,OAAO;CAC9D;AACF;;;;;;AAOA,SAAS,WAAqC;CAG5C,IAFe,KAAK,OAAO,IAAI,aAAa,CAEnC,MAAM,OACb,OAAO;EAAE,SAAS;EAAyB,SAAS;CAAsB;CAG5E,MAAM,OAAO,KAAK,OAAO,IAAI,WAAW,CAAC;CAEzC,IAAI,CAAC,MAAM,OAAO;CAElB,OAAO;EAAE,SAAS;EAAc,SAAS,gBAAgB,KAAK;CAAG;AACnE;;;;;AAMA,SAAS,aAAuC;CAC9C,IAAI,CAAC,OAAO,IAAI,QAAQ,GAAG,OAAO;CAElC,OAAO;EAAE,SAAS;EAAa,SAAS;CAA6B;AACvE;;;;AAKA,SAAS,gBAAgC;CACvC,OAAO;EAAC,aAAa;EAAG,UAAU;EAAG,YAAY;EAAG,SAAS;EAAG,WAAW;CAAC,CAAC,CAAC,QAC3E,SAA+B,QAAQ,IAAI,CAC9C;AACF;;;;;;;;;;;;;;;;;;;;AAqBA,MAAa,qBAAkC;CAC7C,MAAM;CACN,WAAW;EACT,MAAM,WAAW,cAAc;EAE/B,IAAI,SAAS,WAAW,GACtB;EAGF,MAAM,UAAU,SAAS,QAAQ,SAAS,CAAC,YAAY,KAAK,OAAO,CAAC;EAEpE,MAAM,SAAsB,QAAQ,SAAS,IAAI,SAAS;EAE1D,IAAI,QAAQ,SAAS,GACnB,OAAO;GACL,MAAM;GACN;GACA,MAAM;GACN,QACE,GAAG,QAAQ,OAAO,sDAClB,QAAQ,KAAK,SAAS,OAAO,KAAK,QAAQ,iBAAiB,KAAK,SAAS,CAAC,CAAC,KAAK,IAAI;EACxF;EAGF,OAAO;GACL,MAAM;GACN;GACA,QAAQ,yCAAyC,SAC9C,KAAK,SAAS,KAAK,OAAO,CAAC,CAC3B,KAAK,IAAI,EAAE;EAChB;CACF;AACF"}

package/esm/cli/commands/doctor/checks/release-hygiene.check.mjs

@@ -56,22 +56,26 @@ const releaseHygieneCheck = {
 		if (typeof pkgVersion !== "string") return {
 			name: "release-hygiene",
 			status: "fail",
+			code: "WL9102",
 			detail: "package.json is publishable but has no string version field"
 		};
 		if (!existsSync(changelogPath)) return {
 			name: "release-hygiene",
 			status: "warn",
+			code: "WL9103",
 			detail: `no CHANGELOG.md at project root (package.json is ${pkgVersion})`
 		};
 		const heading = parseTopHeading(readFileSync(changelogPath, "utf8"));
 		if (!heading) return {
 			name: "release-hygiene",
 			status: "warn",
+			code: "WL9103",
 			detail: "CHANGELOG.md has no parseable `## x.y.z` heading"
 		};
 		if (heading.version !== pkgVersion) return {
 			name: "release-hygiene",
 			status: "fail",
+			code: "WL9102",
 			detail: `package.json ${pkgVersion} ≠ top CHANGELOG heading ${heading.version}`
 		};
 		return {

package/esm/cli/commands/doctor/checks/release-hygiene.check.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"release-hygiene.check.mjs","names":[],"sources":["../../../../../../../../../../../packages/core/src/cli/commands/doctor/checks/release-hygiene.check.ts"],"sourcesContent":["import { existsSync, readFileSync } from \"node:fs\";\nimport { rootPath } from \"../../../../utils/paths\";\nimport type { DoctorCheck } from \"../check.types\";\n\n/**\n * A `## x.y.z` changelog heading with an optional ` - YYYY-MM-DD` suffix.\n * Mirrors the shape parsed by the tier-0 release-hygiene unit guard; inlined\n * here because that guard lives in the test tree and is not importable from\n * `src`.\n */\ntype ChangelogHeading = {\n  version: string;\n  date?: string;\n};\n\n/**\n * The parts of `package.json` this check reads.\n */\ntype ProjectManifest = {\n  version?: unknown;\n  private?: unknown;\n  name?: unknown;\n};\n\n/**\n * Parse the top-most `## x.y.z[ - YYYY-MM-DD]` heading out of a CHANGELOG body.\n * Returns `undefined` when no version heading is present.\n */\nfunction parseTopHeading(changelog: string): ChangelogHeading | undefined {\n  const match = changelog.match(/^##\\s+(\\d+)\\.(\\d+)\\.(\\d+)(?:\\s*[-–]\\s*(\\d{4}-\\d{2}-\\d{2}))?\\s*$/m);\n\n  if (!match) {\n    return undefined;\n  }\n\n  const [, major, minor, patch, date] = match;\n\n  return {\n    version: `${major}.${minor}.${patch}`,\n    date,\n  };\n}\n\n/**\n * Whether this project is something anyone could `npm publish`.\n *\n * THE GATE, and the reason it exists: a changelog is a promise to the people\n * who install your package. An application has no such people. Running this\n * check on every project projected the framework monorepo's own release\n * practice onto users building an app, who were told — on every single run,\n * forever — that their private application was missing a CHANGELOG.md it had no\n * reason to have. `\"private\": true` is exactly the field npm itself reads to\n * refuse a publish, so it is the honest test of whether the concern applies.\n */\nfunction isPublishable(manifest: ProjectManifest): boolean {\n  return manifest.private !== true && typeof manifest.name === \"string\";\n}\n\n/**\n * Checks that a PUBLISHABLE package's `package.json` version matches the\n * top-most `## x.y.z` heading in `CHANGELOG.md` — the same version↔changelog\n * invariant the release-hygiene unit guard enforces, surfaced as a pre-release\n * doctor check.\n *\n * NEEDS NO BOOTED APP — it reads two files from the project root.\n *\n * Verdicts:\n * - `\"private\": true`, or no package name → not applicable, no line at all;\n * - no `CHANGELOG.md` → `warn` (recommended for a published package, not\n *   mandatory);\n * - no parseable heading → `warn`;\n * - heading version ≠ package.json version → `fail`;\n * - otherwise → `ok`.\n */\nexport const releaseHygieneCheck: DoctorCheck = {\n  name: \"release-hygiene\",\n  run: () => {\n    const packageJsonPath = rootPath(\"package.json\");\n    const changelogPath = rootPath(\"CHANGELOG.md\");\n\n    const manifest: ProjectManifest = JSON.parse(readFileSync(packageJsonPath, \"utf8\"));\n\n    if (!isPublishable(manifest)) {\n      return undefined;\n    }\n\n    const pkgVersion = manifest.version;\n\n    if (typeof pkgVersion !== \"string\") {\n      return {\n        name: \"release-hygiene\",\n        status: \"fail\",\n        detail: \"package.json is publishable but has no string version field\",\n      };\n    }\n\n    if (!existsSync(changelogPath)) {\n      return {\n        name: \"release-hygiene\",\n        status: \"warn\",\n        detail: `no CHANGELOG.md at project root (package.json is ${pkgVersion})`,\n      };\n    }\n\n    const changelog = readFileSync(changelogPath, \"utf8\");\n    const heading = parseTopHeading(changelog);\n\n    if (!heading) {\n      return {\n        name: \"release-hygiene\",\n        status: \"warn\",\n        detail: \"CHANGELOG.md has no parseable `## x.y.z` heading\",\n      };\n    }\n\n    if (heading.version !== pkgVersion) {\n      return {\n        name: \"release-hygiene\",\n        status: \"fail\",\n        detail: `package.json ${pkgVersion} ≠ top CHANGELOG heading ${heading.version}`,\n      };\n    }\n\n    return {\n      name: \"release-hygiene\",\n      status: \"ok\",\n      detail: `package.json and CHANGELOG agree on ${pkgVersion}`,\n    };\n  },\n};\n"],"mappings":";;;;;;;;AA4BA,SAAS,gBAAgB,WAAiD;CACxE,MAAM,QAAQ,UAAU,MAAM,kEAAkE;CAEhG,IAAI,CAAC,OACH;CAGF,MAAM,GAAG,OAAO,OAAO,OAAO,QAAQ;CAEtC,OAAO;EACL,SAAS,GAAG,MAAM,GAAG,MAAM,GAAG;EAC9B;CACF;AACF;;;;;;;;;;;;AAaA,SAAS,cAAc,UAAoC;CACzD,OAAO,SAAS,YAAY,QAAQ,OAAO,SAAS,SAAS;AAC/D;;;;;;;;;;;;;;;;;AAkBA,MAAa,sBAAmC;CAC9C,MAAM;CACN,WAAW;EACT,MAAM,kBAAkB,SAAS,cAAc;EAC/C,MAAM,gBAAgB,SAAS,cAAc;EAE7C,MAAM,WAA4B,KAAK,MAAM,aAAa,iBAAiB,MAAM,CAAC;EAElF,IAAI,CAAC,cAAc,QAAQ,GACzB;EAGF,MAAM,aAAa,SAAS;EAE5B,IAAI,OAAO,eAAe,UACxB,OAAO;GACL,MAAM;GACN,QAAQ;GACR,QAAQ;EACV;EAGF,IAAI,CAAC,WAAW,aAAa,GAC3B,OAAO;GACL,MAAM;GACN,QAAQ;GACR,QAAQ,oDAAoD,WAAW;EACzE;EAIF,MAAM,UAAU,gBADE,aAAa,eAAe,MACN,CAAC;EAEzC,IAAI,CAAC,SACH,OAAO;GACL,MAAM;GACN,QAAQ;GACR,QAAQ;EACV;EAGF,IAAI,QAAQ,YAAY,YACtB,OAAO;GACL,MAAM;GACN,QAAQ;GACR,QAAQ,gBAAgB,WAAW,2BAA2B,QAAQ;EACxE;EAGF,OAAO;GACL,MAAM;GACN,QAAQ;GACR,QAAQ,uCAAuC;EACjD;CACF;AACF"}
+{"version":3,"file":"release-hygiene.check.mjs","names":[],"sources":["../../../../../../../../../../../packages/core/src/cli/commands/doctor/checks/release-hygiene.check.ts"],"sourcesContent":["import { existsSync, readFileSync } from \"node:fs\";\nimport { rootPath } from \"../../../../utils/paths\";\nimport type { DoctorCheck } from \"../check.types\";\n\n/**\n * A `## x.y.z` changelog heading with an optional ` - YYYY-MM-DD` suffix.\n * Mirrors the shape parsed by the tier-0 release-hygiene unit guard; inlined\n * here because that guard lives in the test tree and is not importable from\n * `src`.\n */\ntype ChangelogHeading = {\n  version: string;\n  date?: string;\n};\n\n/**\n * The parts of `package.json` this check reads.\n */\ntype ProjectManifest = {\n  version?: unknown;\n  private?: unknown;\n  name?: unknown;\n};\n\n/**\n * Parse the top-most `## x.y.z[ - YYYY-MM-DD]` heading out of a CHANGELOG body.\n * Returns `undefined` when no version heading is present.\n */\nfunction parseTopHeading(changelog: string): ChangelogHeading | undefined {\n  const match = changelog.match(/^##\\s+(\\d+)\\.(\\d+)\\.(\\d+)(?:\\s*[-–]\\s*(\\d{4}-\\d{2}-\\d{2}))?\\s*$/m);\n\n  if (!match) {\n    return undefined;\n  }\n\n  const [, major, minor, patch, date] = match;\n\n  return {\n    version: `${major}.${minor}.${patch}`,\n    date,\n  };\n}\n\n/**\n * Whether this project is something anyone could `npm publish`.\n *\n * THE GATE, and the reason it exists: a changelog is a promise to the people\n * who install your package. An application has no such people. Running this\n * check on every project projected the framework monorepo's own release\n * practice onto users building an app, who were told — on every single run,\n * forever — that their private application was missing a CHANGELOG.md it had no\n * reason to have. `\"private\": true` is exactly the field npm itself reads to\n * refuse a publish, so it is the honest test of whether the concern applies.\n */\nfunction isPublishable(manifest: ProjectManifest): boolean {\n  return manifest.private !== true && typeof manifest.name === \"string\";\n}\n\n/**\n * Checks that a PUBLISHABLE package's `package.json` version matches the\n * top-most `## x.y.z` heading in `CHANGELOG.md` — the same version↔changelog\n * invariant the release-hygiene unit guard enforces, surfaced as a pre-release\n * doctor check.\n *\n * NEEDS NO BOOTED APP — it reads two files from the project root.\n *\n * Verdicts:\n * - `\"private\": true`, or no package name → not applicable, no line at all;\n * - no `CHANGELOG.md` → `warn` (recommended for a published package, not\n *   mandatory);\n * - no parseable heading → `warn`;\n * - heading version ≠ package.json version → `fail`;\n * - otherwise → `ok`.\n */\nexport const releaseHygieneCheck: DoctorCheck = {\n  name: \"release-hygiene\",\n  run: () => {\n    const packageJsonPath = rootPath(\"package.json\");\n    const changelogPath = rootPath(\"CHANGELOG.md\");\n\n    const manifest: ProjectManifest = JSON.parse(readFileSync(packageJsonPath, \"utf8\"));\n\n    if (!isPublishable(manifest)) {\n      return undefined;\n    }\n\n    const pkgVersion = manifest.version;\n\n    if (typeof pkgVersion !== \"string\") {\n      return {\n        name: \"release-hygiene\",\n        status: \"fail\",\n        code: \"WL9102\",\n        detail: \"package.json is publishable but has no string version field\",\n      };\n    }\n\n    if (!existsSync(changelogPath)) {\n      return {\n        name: \"release-hygiene\",\n        status: \"warn\",\n        code: \"WL9103\",\n        detail: `no CHANGELOG.md at project root (package.json is ${pkgVersion})`,\n      };\n    }\n\n    const changelog = readFileSync(changelogPath, \"utf8\");\n    const heading = parseTopHeading(changelog);\n\n    if (!heading) {\n      return {\n        name: \"release-hygiene\",\n        status: \"warn\",\n        code: \"WL9103\",\n        detail: \"CHANGELOG.md has no parseable `## x.y.z` heading\",\n      };\n    }\n\n    if (heading.version !== pkgVersion) {\n      return {\n        name: \"release-hygiene\",\n        status: \"fail\",\n        code: \"WL9102\",\n        detail: `package.json ${pkgVersion} ≠ top CHANGELOG heading ${heading.version}`,\n      };\n    }\n\n    return {\n      name: \"release-hygiene\",\n      status: \"ok\",\n      detail: `package.json and CHANGELOG agree on ${pkgVersion}`,\n    };\n  },\n};\n"],"mappings":";;;;;;;;AA4BA,SAAS,gBAAgB,WAAiD;CACxE,MAAM,QAAQ,UAAU,MAAM,kEAAkE;CAEhG,IAAI,CAAC,OACH;CAGF,MAAM,GAAG,OAAO,OAAO,OAAO,QAAQ;CAEtC,OAAO;EACL,SAAS,GAAG,MAAM,GAAG,MAAM,GAAG;EAC9B;CACF;AACF;;;;;;;;;;;;AAaA,SAAS,cAAc,UAAoC;CACzD,OAAO,SAAS,YAAY,QAAQ,OAAO,SAAS,SAAS;AAC/D;;;;;;;;;;;;;;;;;AAkBA,MAAa,sBAAmC;CAC9C,MAAM;CACN,WAAW;EACT,MAAM,kBAAkB,SAAS,cAAc;EAC/C,MAAM,gBAAgB,SAAS,cAAc;EAE7C,MAAM,WAA4B,KAAK,MAAM,aAAa,iBAAiB,MAAM,CAAC;EAElF,IAAI,CAAC,cAAc,QAAQ,GACzB;EAGF,MAAM,aAAa,SAAS;EAE5B,IAAI,OAAO,eAAe,UACxB,OAAO;GACL,MAAM;GACN,QAAQ;GACR,MAAM;GACN,QAAQ;EACV;EAGF,IAAI,CAAC,WAAW,aAAa,GAC3B,OAAO;GACL,MAAM;GACN,QAAQ;GACR,MAAM;GACN,QAAQ,oDAAoD,WAAW;EACzE;EAIF,MAAM,UAAU,gBADE,aAAa,eAAe,MACN,CAAC;EAEzC,IAAI,CAAC,SACH,OAAO;GACL,MAAM;GACN,QAAQ;GACR,MAAM;GACN,QAAQ;EACV;EAGF,IAAI,QAAQ,YAAY,YACtB,OAAO;GACL,MAAM;GACN,QAAQ;GACR,MAAM;GACN,QAAQ,gBAAgB,WAAW,2BAA2B,QAAQ;EACxE;EAGF,OAAO;GACL,MAAM;GACN,QAAQ;GACR,QAAQ,uCAAuC;EACjD;CACF;AACF"}

package/esm/cli/commands/doctor/checks/routes.check.mjs

@@ -35,11 +35,13 @@ const routesCheck = {
 		if (context.moduleFailures.length > 0) return {
 			name: "routes",
 			status: "fail",
+			code: "WL2001",
 			detail: `${context.moduleFailures.length} app module(s) failed to load — the routes they declare will 404:\n` + describeFailures(context)
 		};
 		if (!context.booted) return {
 			name: "routes",
 			status: "fail",
+			code: "WL2002",
 			detail: "app modules could not be discovered — nothing to report on"
 		};
 		if (context.totalRoutes === 0) {
@@ -51,6 +53,7 @@ const routesCheck = {
 			return {
 				name: "routes",
 				status: "fail",
+				code: "WL3005",
 				detail: `${context.routeModules} route module(s) loaded without error but registered 0 routes — every request will 404`
 			};
 		}

package/esm/cli/commands/doctor/checks/routes.check.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"routes.check.mjs","names":[],"sources":["../../../../../../../../../../../packages/core/src/cli/commands/doctor/checks/routes.check.ts"],"sourcesContent":["import type { DoctorBootContext, DoctorCheck } from \"../check.types\";\n\n/**\n * Describe the failed modules as an indented block, one per line, cause first.\n * The file that failed is the only thing that makes this actionable, so it is\n * never summarised away.\n */\nfunction describeFailures(context: DoctorBootContext): string {\n  return context.moduleFailures\n    .map((failure) => `  - ${failure.file}: ${failure.message}`)\n    .join(\"\\n\");\n}\n\n/**\n * Reports the route surface the app will actually serve.\n *\n * NEEDS A BOOTED APP — and now gets one. Routes exist only as the side effect of\n * importing the module that declares them, so a doctor that did not import app\n * code reported `0 routes` for an app the dev server served fourteen routes\n * for. The boot pass imports the same modules, in the same order, and boots\n * (never starts) the same connectors, so the number printed here is the number\n * `warlock dev` prints for the same project — the two are read off the same\n * router after the same registrations.\n *\n * Verdicts:\n * - a module failed to import → `fail`, naming every file and its cause. This\n *   is the finding doctor exists for: a route file that throws on import is\n *   invisible at runtime, it just 404s;\n * - route modules on disk but nothing registered → `fail` (they loaded and\n *   registered nothing, which is not a state a working app is in);\n * - no route modules at all → `ok`, stated plainly. A worker or CLI-only app is\n *   a legitimate shape and must not be nagged;\n * - otherwise → `ok` with the count, split into what app code registered and\n *   what connectors added.\n */\nexport const routesCheck: DoctorCheck = {\n  name: \"routes\",\n  run: (context) => {\n    if (context.moduleFailures.length > 0) {\n      const count = context.moduleFailures.length;\n\n      return {\n        name: \"routes\",\n        status: \"fail\",\n        detail:\n          `${count} app module(s) failed to load — the routes they declare will 404:\\n` +\n          describeFailures(context),\n      };\n    }\n\n    if (!context.booted) {\n      return {\n        name: \"routes\",\n        status: \"fail\",\n        detail: \"app modules could not be discovered — nothing to report on\",\n      };\n    }\n\n    if (context.totalRoutes === 0) {\n      if (context.routeModules === 0) {\n        return {\n          name: \"routes\",\n          status: \"ok\",\n          detail: \"no route modules found (src/app/*/routes.ts) — this app serves no HTTP routes\",\n        };\n      }\n\n      return {\n        name: \"routes\",\n        status: \"fail\",\n        detail:\n          `${context.routeModules} route module(s) loaded without error but registered 0 routes — ` +\n          \"every request will 404\",\n      };\n    }\n\n    const fromConnectors = context.totalRoutes - context.appRoutes;\n    const breakdown =\n      fromConnectors > 0\n        ? `${context.appRoutes} from ${context.routeModules} route module(s), ` +\n          `${fromConnectors} from connectors`\n        : `from ${context.routeModules} route module(s)`;\n\n    return {\n      name: \"routes\",\n      status: \"ok\",\n      detail: `${context.totalRoutes} registered (${breakdown})`,\n    };\n  },\n};\n"],"mappings":";;;;;;AAOA,SAAS,iBAAiB,SAAoC;CAC5D,OAAO,QAAQ,eACZ,KAAK,YAAY,OAAO,QAAQ,KAAK,IAAI,QAAQ,SAAS,CAAC,CAC3D,KAAK,IAAI;AACd;;;;;;;;;;;;;;;;;;;;;;;AAwBA,MAAa,cAA2B;CACtC,MAAM;CACN,MAAM,YAAY;EAChB,IAAI,QAAQ,eAAe,SAAS,GAGlC,OAAO;GACL,MAAM;GACN,QAAQ;GACR,QACE,GANU,QAAQ,eAAe,OAMxB,uEACT,iBAAiB,OAAO;EAC5B;EAGF,IAAI,CAAC,QAAQ,QACX,OAAO;GACL,MAAM;GACN,QAAQ;GACR,QAAQ;EACV;EAGF,IAAI,QAAQ,gBAAgB,GAAG;GAC7B,IAAI,QAAQ,iBAAiB,GAC3B,OAAO;IACL,MAAM;IACN,QAAQ;IACR,QAAQ;GACV;GAGF,OAAO;IACL,MAAM;IACN,QAAQ;IACR,QACE,GAAG,QAAQ,aAAa;GAE5B;EACF;EAEA,MAAM,iBAAiB,QAAQ,cAAc,QAAQ;EACrD,MAAM,YACJ,iBAAiB,IACb,GAAG,QAAQ,UAAU,QAAQ,QAAQ,aAAa,oBAC/C,eAAe,oBAClB,QAAQ,QAAQ,aAAa;EAEnC,OAAO;GACL,MAAM;GACN,QAAQ;GACR,QAAQ,GAAG,QAAQ,YAAY,eAAe,UAAU;EAC1D;CACF;AACF"}
+{"version":3,"file":"routes.check.mjs","names":[],"sources":["../../../../../../../../../../../packages/core/src/cli/commands/doctor/checks/routes.check.ts"],"sourcesContent":["import type { DoctorBootContext, DoctorCheck } from \"../check.types\";\n\n/**\n * Describe the failed modules as an indented block, one per line, cause first.\n * The file that failed is the only thing that makes this actionable, so it is\n * never summarised away.\n */\nfunction describeFailures(context: DoctorBootContext): string {\n  return context.moduleFailures\n    .map((failure) => `  - ${failure.file}: ${failure.message}`)\n    .join(\"\\n\");\n}\n\n/**\n * Reports the route surface the app will actually serve.\n *\n * NEEDS A BOOTED APP — and now gets one. Routes exist only as the side effect of\n * importing the module that declares them, so a doctor that did not import app\n * code reported `0 routes` for an app the dev server served fourteen routes\n * for. The boot pass imports the same modules, in the same order, and boots\n * (never starts) the same connectors, so the number printed here is the number\n * `warlock dev` prints for the same project — the two are read off the same\n * router after the same registrations.\n *\n * Verdicts:\n * - a module failed to import → `fail`, naming every file and its cause. This\n *   is the finding doctor exists for: a route file that throws on import is\n *   invisible at runtime, it just 404s;\n * - route modules on disk but nothing registered → `fail` (they loaded and\n *   registered nothing, which is not a state a working app is in);\n * - no route modules at all → `ok`, stated plainly. A worker or CLI-only app is\n *   a legitimate shape and must not be nagged;\n * - otherwise → `ok` with the count, split into what app code registered and\n *   what connectors added.\n */\nexport const routesCheck: DoctorCheck = {\n  name: \"routes\",\n  run: (context) => {\n    if (context.moduleFailures.length > 0) {\n      const count = context.moduleFailures.length;\n\n      return {\n        name: \"routes\",\n        status: \"fail\",\n        code: \"WL2001\",\n        detail:\n          `${count} app module(s) failed to load — the routes they declare will 404:\\n` +\n          describeFailures(context),\n      };\n    }\n\n    if (!context.booted) {\n      return {\n        name: \"routes\",\n        status: \"fail\",\n        code: \"WL2002\",\n        detail: \"app modules could not be discovered — nothing to report on\",\n      };\n    }\n\n    if (context.totalRoutes === 0) {\n      if (context.routeModules === 0) {\n        return {\n          name: \"routes\",\n          status: \"ok\",\n          detail: \"no route modules found (src/app/*/routes.ts) — this app serves no HTTP routes\",\n        };\n      }\n\n      return {\n        name: \"routes\",\n        status: \"fail\",\n        code: \"WL3005\",\n        detail:\n          `${context.routeModules} route module(s) loaded without error but registered 0 routes — ` +\n          \"every request will 404\",\n      };\n    }\n\n    const fromConnectors = context.totalRoutes - context.appRoutes;\n    const breakdown =\n      fromConnectors > 0\n        ? `${context.appRoutes} from ${context.routeModules} route module(s), ` +\n          `${fromConnectors} from connectors`\n        : `from ${context.routeModules} route module(s)`;\n\n    return {\n      name: \"routes\",\n      status: \"ok\",\n      detail: `${context.totalRoutes} registered (${breakdown})`,\n    };\n  },\n};\n"],"mappings":";;;;;;AAOA,SAAS,iBAAiB,SAAoC;CAC5D,OAAO,QAAQ,eACZ,KAAK,YAAY,OAAO,QAAQ,KAAK,IAAI,QAAQ,SAAS,CAAC,CAC3D,KAAK,IAAI;AACd;;;;;;;;;;;;;;;;;;;;;;;AAwBA,MAAa,cAA2B;CACtC,MAAM;CACN,MAAM,YAAY;EAChB,IAAI,QAAQ,eAAe,SAAS,GAGlC,OAAO;GACL,MAAM;GACN,QAAQ;GACR,MAAM;GACN,QACE,GAPU,QAAQ,eAAe,OAOxB,uEACT,iBAAiB,OAAO;EAC5B;EAGF,IAAI,CAAC,QAAQ,QACX,OAAO;GACL,MAAM;GACN,QAAQ;GACR,MAAM;GACN,QAAQ;EACV;EAGF,IAAI,QAAQ,gBAAgB,GAAG;GAC7B,IAAI,QAAQ,iBAAiB,GAC3B,OAAO;IACL,MAAM;IACN,QAAQ;IACR,QAAQ;GACV;GAGF,OAAO;IACL,MAAM;IACN,QAAQ;IACR,MAAM;IACN,QACE,GAAG,QAAQ,aAAa;GAE5B;EACF;EAEA,MAAM,iBAAiB,QAAQ,cAAc,QAAQ;EACrD,MAAM,YACJ,iBAAiB,IACb,GAAG,QAAQ,UAAU,QAAQ,QAAQ,aAAa,oBAC/C,eAAe,oBAClB,QAAQ,QAAQ,aAAa;EAEnC,OAAO;GACL,MAAM;GACN,QAAQ;GACR,QAAQ,GAAG,QAAQ,YAAY,eAAe,UAAU;EAC1D;CACF;AACF"}

package/esm/cli/commands/doctor/doctor-command.action.mjs

@@ -1,7 +1,9 @@
 import { bootForDiagnostics } from "./boot-for-diagnostics.mjs";
+import { withConsoleOnStderr } from "../routes/with-console-on-stderr.mjs";
+import { flushAndExit } from "../../flush-and-exit.mjs";
 import { fixLocaleSources } from "./checks/locales-ts-deprecated.check.mjs";
 import { defaultDoctorChecks } from "./checks/index.mjs";
-import { printReport } from "./format-report.mjs";
+import { printReport, toDoctorJson } from "./format-report.mjs";
 import { runChecks } from "./run-checks.mjs";
 
 //#region ../../packages/core/src/cli/commands/doctor/doctor-command.action.ts
@@ -26,16 +28,23 @@ import { runChecks } from "./run-checks.mjs";
 * banner and exits zero — which also disposes of the handles the boot pass
 * left open (a Fastify instance, a Vite dev server for `web` apps).
 *
-* @param data Parsed CLI args, including the optional safe migration flag.
+* With `--json` the report is printed as JSON (see `toDoctorJson`): every
+* finding carries its stable `WL` code, `hint`, `skill` and `docs`.
+*
+* @param data Parsed CLI args: the optional safe migration flag and `--json`.
 */
 async function doctorCommandAction(data) {
+	const json = data.options.json === true;
+	const log = json ? console.error : console.log;
 	if (data.options.fix === true) for (const result of fixLocaleSources()) {
 		const file = result.file.replace(process.cwd(), ".").replaceAll("\\", "/");
-		console.log(`${result.convertible ? "converted" : "manual"} ${file}: ${result.reason}`);
+		log(`${result.convertible ? "converted" : "manual"} ${file}: ${result.reason}`);
 	}
-	const report = await runChecks(defaultDoctorChecks, await bootForDiagnostics());
-	printReport(report);
-	if (report.hasFailures) process.exit(report.exitCode);
+	const context = json ? await withConsoleOnStderr(bootForDiagnostics) : await bootForDiagnostics();
+	const report = await runChecks(defaultDoctorChecks, context);
+	if (json) console.log(JSON.stringify(toDoctorJson(report), null, 2));
+	else printReport(report);
+	if (report.hasFailures) await flushAndExit(report.exitCode);
 }
 
 //#endregion

package/esm/cli/commands/doctor/doctor-command.action.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"doctor-command.action.mjs","names":[],"sources":["../../../../../../../../../../packages/core/src/cli/commands/doctor/doctor-command.action.ts"],"sourcesContent":["import type { CommandActionData } from \"../../../commands/types\";\nimport { bootForDiagnostics } from \"./boot-for-diagnostics\";\nimport { defaultDoctorChecks } from \"./checks\";\nimport { fixLocaleSources } from \"./checks/locales-ts-deprecated.check\";\nimport { printReport } from \"./format-report\";\nimport { runChecks } from \"./run-checks\";\n\n/**\n * Action behind `warlock doctor`.\n *\n * Two steps, in this order and for a reason: ONE boot pass, then every check\n * against what that pass observed. The checks never boot anything themselves,\n * so the report cannot contain two lines that inspected the app at different\n * moments and contradicted each other — which is exactly what it used to\n * contain (`routes: 0 registered` beside `health: /health + /ready\n * registered`, in the same run, on an app serving fourteen routes).\n *\n * The pass boots every connector and starts none, so no database, cache or\n * socket connection is opened and no port is bound. See\n * `boot-for-diagnostics.ts`.\n *\n * A failing check is REPORTED (a line in the report + a non-zero exit), never\n * thrown: the runner converts any thrown check into a `fail` result first.\n *\n * On success this simply returns; the CLI manager then prints its own success\n * banner and exits zero — which also disposes of the handles the boot pass\n * left open (a Fastify instance, a Vite dev server for `web` apps).\n *\n * @param data Parsed CLI args, including the optional safe migration flag.\n */\nexport async function doctorCommandAction(data: CommandActionData): Promise<void> {\n  if (data.options.fix === true) {\n    for (const result of fixLocaleSources()) {\n      const file = result.file.replace(process.cwd(), \".\").replaceAll(\"\\\\\", \"/\");\n      console.log(`${result.convertible ? \"converted\" : \"manual\"} ${file}: ${result.reason}`);\n    }\n  }\n  const context = await bootForDiagnostics();\n\n  const report = await runChecks(defaultDoctorChecks, context);\n\n  printReport(report);\n\n  if (report.hasFailures) {\n    process.exit(report.exitCode);\n  }\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AA8BA,eAAsB,oBAAoB,MAAwC;CAChF,IAAI,KAAK,QAAQ,QAAQ,MACvB,KAAK,MAAM,UAAU,iBAAiB,GAAG;EACvC,MAAM,OAAO,OAAO,KAAK,QAAQ,QAAQ,IAAI,GAAG,GAAG,CAAC,CAAC,WAAW,MAAM,GAAG;EACzE,QAAQ,IAAI,GAAG,OAAO,cAAc,cAAc,SAAS,GAAG,KAAK,IAAI,OAAO,QAAQ;CACxF;CAIF,MAAM,SAAS,MAAM,UAAU,qBAAqB,MAF9B,mBAAmB,CAEkB;CAE3D,YAAY,MAAM;CAElB,IAAI,OAAO,aACT,QAAQ,KAAK,OAAO,QAAQ;AAEhC"}
+{"version":3,"file":"doctor-command.action.mjs","names":[],"sources":["../../../../../../../../../../packages/core/src/cli/commands/doctor/doctor-command.action.ts"],"sourcesContent":["import type { CommandActionData } from \"../../../commands/types\";\nimport { bootForDiagnostics } from \"./boot-for-diagnostics\";\nimport { defaultDoctorChecks } from \"./checks\";\nimport { fixLocaleSources } from \"./checks/locales-ts-deprecated.check\";\nimport { flushAndExit } from \"../../flush-and-exit\";\nimport { withConsoleOnStderr } from \"../routes/with-console-on-stderr\";\nimport { printReport, toDoctorJson } from \"./format-report\";\nimport { runChecks } from \"./run-checks\";\n\n/**\n * Action behind `warlock doctor`.\n *\n * Two steps, in this order and for a reason: ONE boot pass, then every check\n * against what that pass observed. The checks never boot anything themselves,\n * so the report cannot contain two lines that inspected the app at different\n * moments and contradicted each other — which is exactly what it used to\n * contain (`routes: 0 registered` beside `health: /health + /ready\n * registered`, in the same run, on an app serving fourteen routes).\n *\n * The pass boots every connector and starts none, so no database, cache or\n * socket connection is opened and no port is bound. See\n * `boot-for-diagnostics.ts`.\n *\n * A failing check is REPORTED (a line in the report + a non-zero exit), never\n * thrown: the runner converts any thrown check into a `fail` result first.\n *\n * On success this simply returns; the CLI manager then prints its own success\n * banner and exits zero — which also disposes of the handles the boot pass\n * left open (a Fastify instance, a Vite dev server for `web` apps).\n *\n * With `--json` the report is printed as JSON (see `toDoctorJson`): every\n * finding carries its stable `WL` code, `hint`, `skill` and `docs`.\n *\n * @param data Parsed CLI args: the optional safe migration flag and `--json`.\n */\nexport async function doctorCommandAction(data: CommandActionData): Promise<void> {\n  const json = data.options.json === true;\n\n  // With `--json`, stdout carries the report alone: the fix log and the boot's\n  // progress lines go to stderr.\n  const log = json ? console.error : console.log;\n\n  if (data.options.fix === true) {\n    for (const result of fixLocaleSources()) {\n      const file = result.file.replace(process.cwd(), \".\").replaceAll(\"\\\\\", \"/\");\n      log(`${result.convertible ? \"converted\" : \"manual\"} ${file}: ${result.reason}`);\n    }\n  }\n\n  const context = json ? await withConsoleOnStderr(bootForDiagnostics) : await bootForDiagnostics();\n\n  const report = await runChecks(defaultDoctorChecks, context);\n\n  if (json) {\n    console.log(JSON.stringify(toDoctorJson(report), null, 2));\n  } else {\n    printReport(report);\n  }\n\n  if (report.hasFailures) {\n    await flushAndExit(report.exitCode);\n  }\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAmCA,eAAsB,oBAAoB,MAAwC;CAChF,MAAM,OAAO,KAAK,QAAQ,SAAS;CAInC,MAAM,MAAM,OAAO,QAAQ,QAAQ,QAAQ;CAE3C,IAAI,KAAK,QAAQ,QAAQ,MACvB,KAAK,MAAM,UAAU,iBAAiB,GAAG;EACvC,MAAM,OAAO,OAAO,KAAK,QAAQ,QAAQ,IAAI,GAAG,GAAG,CAAC,CAAC,WAAW,MAAM,GAAG;EACzE,IAAI,GAAG,OAAO,cAAc,cAAc,SAAS,GAAG,KAAK,IAAI,OAAO,QAAQ;CAChF;CAGF,MAAM,UAAU,OAAO,MAAM,oBAAoB,kBAAkB,IAAI,MAAM,mBAAmB;CAEhG,MAAM,SAAS,MAAM,UAAU,qBAAqB,OAAO;CAE3D,IAAI,MACF,QAAQ,IAAI,KAAK,UAAU,aAAa,MAAM,GAAG,MAAM,CAAC,CAAC;MAEzD,YAAY,MAAM;CAGpB,IAAI,OAAO,aACT,MAAM,aAAa,OAAO,QAAQ;AAEtC"}

package/esm/cli/commands/doctor/format-report.mjs

@@ -1,3 +1,4 @@
+import { ERROR_CODES, errorCodeDocsUrl } from "../../../errors/error-codes.mjs";
 import { colors } from "@mongez/copper";
 
 //#region ../../packages/core/src/cli/commands/doctor/format-report.ts
@@ -31,14 +32,41 @@ function colorizeSymbol(status) {
 function printReport(report) {
 	for (const result of report.results) {
 		const symbol = colorizeSymbol(result.status);
-		console.log(`${symbol} ${colors.bold(result.name)}: ${result.detail}`);
+		const code = result.code ? colors.dim(` [${result.code}]`) : "";
+		console.log(`${symbol} ${colors.bold(result.name)}: ${result.detail}${code}`);
 	}
 	const { ok, warn, fail } = report.summary;
 	const summaryLine = `Summary: ${ok} ok, ${warn} warn, ${fail} fail`;
 	console.log("");
 	console.log(report.hasFailures ? colors.red(summaryLine) : colors.green(summaryLine));
 }
+/**
+* The machine-readable form of a doctor report: each finding with its stable
+* code and the same `hint` / `skill` / `docs` fields `warlock check --json`
+* prints, so one consumer reads both.
+*
+* @param report The aggregated doctor report.
+*/
+function toDoctorJson(report) {
+	return {
+		schemaVersion: 1,
+		results: report.results.map((result) => {
+			const definition = result.code ? ERROR_CODES[result.code] : void 0;
+			return {
+				name: result.name,
+				status: result.status,
+				detail: result.detail,
+				code: result.code ?? null,
+				hint: definition?.fix ?? null,
+				skill: definition?.skill ?? null,
+				docs: result.code ? errorCodeDocsUrl(result.code) : null
+			};
+		}),
+		summary: { ...report.summary },
+		exitCode: report.exitCode
+	};
+}
 
 //#endregion
-export { printReport };
+export { printReport, toDoctorJson };
 //# sourceMappingURL=format-report.mjs.map

package/esm/cli/commands/doctor/format-report.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"format-report.mjs","names":[],"sources":["../../../../../../../../../../packages/core/src/cli/commands/doctor/format-report.ts"],"sourcesContent":["import { colors } from \"@mongez/copper\";\nimport type { CheckStatus, DoctorReport } from \"./check.types\";\n\n/**\n * The glyph shown beside each check, keyed by status.\n */\nconst STATUS_SYMBOL: Record<CheckStatus, string> = {\n  ok: \"✓\",\n  warn: \"⚠\",\n  fail: \"✗\",\n};\n\n/**\n * Colorize a status glyph. Kept separate from {@link STATUS_SYMBOL} so the\n * plain glyphs remain available for snapshot-friendly, color-free assertions.\n */\nfunction colorizeSymbol(status: CheckStatus): string {\n  const symbol = STATUS_SYMBOL[status];\n\n  switch (status) {\n    case \"ok\":\n      return colors.green(symbol);\n    case \"warn\":\n      return colors.yellow(symbol);\n    case \"fail\":\n      return colors.red(symbol);\n  }\n}\n\n/**\n * Build the report body as an ordered list of plain (uncolored) lines:\n * one `<symbol> <name>: <detail>` line per check, a blank line, then a summary\n * line. Returned as strings (not printed) so the formatting is unit-testable.\n *\n * @param report The aggregated doctor report.\n * @returns The lines to print, top to bottom.\n */\nexport function formatReportLines(report: DoctorReport): string[] {\n  const lines = report.results.map((result) => {\n    return `${STATUS_SYMBOL[result.status]} ${result.name}: ${result.detail}`;\n  });\n\n  const { ok, warn, fail } = report.summary;\n\n  lines.push(\"\");\n  lines.push(`Summary: ${ok} ok, ${warn} warn, ${fail} fail`);\n\n  return lines;\n}\n\n/**\n * Print the report to stdout with colored status glyphs and a colored summary\n * verdict. Thin wrapper over {@link formatReportLines} — the structured report\n * stays the source of truth for the exit code.\n *\n * @param report The aggregated doctor report.\n */\nexport function printReport(report: DoctorReport): void {\n  for (const result of report.results) {\n    const symbol = colorizeSymbol(result.status);\n\n    console.log(`${symbol} ${colors.bold(result.name)}: ${result.detail}`);\n  }\n\n  const { ok, warn, fail } = report.summary;\n  const summaryLine = `Summary: ${ok} ok, ${warn} warn, ${fail} fail`;\n\n  console.log(\"\");\n  console.log(report.hasFailures ? colors.red(summaryLine) : colors.green(summaryLine));\n}\n"],"mappings":";;;;;;AAMA,MAAM,gBAA6C;CACjD,IAAI;CACJ,MAAM;CACN,MAAM;AACR;;;;;AAMA,SAAS,eAAe,QAA6B;CACnD,MAAM,SAAS,cAAc;CAE7B,QAAQ,QAAR;EACE,KAAK,MACH,OAAO,OAAO,MAAM,MAAM;EAC5B,KAAK,QACH,OAAO,OAAO,OAAO,MAAM;EAC7B,KAAK,QACH,OAAO,OAAO,IAAI,MAAM;CAC5B;AACF;;;;;;;;AA8BA,SAAgB,YAAY,QAA4B;CACtD,KAAK,MAAM,UAAU,OAAO,SAAS;EACnC,MAAM,SAAS,eAAe,OAAO,MAAM;EAE3C,QAAQ,IAAI,GAAG,OAAO,GAAG,OAAO,KAAK,OAAO,IAAI,EAAE,IAAI,OAAO,QAAQ;CACvE;CAEA,MAAM,EAAE,IAAI,MAAM,SAAS,OAAO;CAClC,MAAM,cAAc,YAAY,GAAG,OAAO,KAAK,SAAS,KAAK;CAE7D,QAAQ,IAAI,EAAE;CACd,QAAQ,IAAI,OAAO,cAAc,OAAO,IAAI,WAAW,IAAI,OAAO,MAAM,WAAW,CAAC;AACtF"}
+{"version":3,"file":"format-report.mjs","names":[],"sources":["../../../../../../../../../../packages/core/src/cli/commands/doctor/format-report.ts"],"sourcesContent":["import { colors } from \"@mongez/copper\";\nimport { ERROR_CODES, errorCodeDocsUrl, type WarlockErrorCode } from \"../../../errors/error-codes\";\nimport type { CheckStatus, DoctorReport } from \"./check.types\";\n\n/**\n * The glyph shown beside each check, keyed by status.\n */\nconst STATUS_SYMBOL: Record<CheckStatus, string> = {\n  ok: \"✓\",\n  warn: \"⚠\",\n  fail: \"✗\",\n};\n\n/**\n * Colorize a status glyph. Kept separate from {@link STATUS_SYMBOL} so the\n * plain glyphs remain available for snapshot-friendly, color-free assertions.\n */\nfunction colorizeSymbol(status: CheckStatus): string {\n  const symbol = STATUS_SYMBOL[status];\n\n  switch (status) {\n    case \"ok\":\n      return colors.green(symbol);\n    case \"warn\":\n      return colors.yellow(symbol);\n    case \"fail\":\n      return colors.red(symbol);\n  }\n}\n\n/**\n * Build the report body as an ordered list of plain (uncolored) lines:\n * one `<symbol> <name>: <detail>` line per check, a blank line, then a summary\n * line. Returned as strings (not printed) so the formatting is unit-testable.\n *\n * @param report The aggregated doctor report.\n * @returns The lines to print, top to bottom.\n */\nexport function formatReportLines(report: DoctorReport): string[] {\n  const lines = report.results.map((result) => {\n    const code = result.code ? ` [${result.code}]` : \"\";\n\n    return `${STATUS_SYMBOL[result.status]} ${result.name}: ${result.detail}${code}`;\n  });\n\n  const { ok, warn, fail } = report.summary;\n\n  lines.push(\"\");\n  lines.push(`Summary: ${ok} ok, ${warn} warn, ${fail} fail`);\n\n  return lines;\n}\n\n/**\n * Print the report to stdout with colored status glyphs and a colored summary\n * verdict. Thin wrapper over {@link formatReportLines} — the structured report\n * stays the source of truth for the exit code.\n *\n * @param report The aggregated doctor report.\n */\nexport function printReport(report: DoctorReport): void {\n  for (const result of report.results) {\n    const symbol = colorizeSymbol(result.status);\n\n    const code = result.code ? colors.dim(` [${result.code}]`) : \"\";\n\n    console.log(`${symbol} ${colors.bold(result.name)}: ${result.detail}${code}`);\n  }\n\n  const { ok, warn, fail } = report.summary;\n  const summaryLine = `Summary: ${ok} ok, ${warn} warn, ${fail} fail`;\n\n  console.log(\"\");\n  console.log(report.hasFailures ? colors.red(summaryLine) : colors.green(summaryLine));\n}\n\n/** One check in `warlock doctor --json`. Every key is always present. */\nexport type DoctorJsonResult = {\n  name: string;\n  status: CheckStatus;\n  detail: string;\n  /** Stable Warlock error code of a `warn`/`fail` verdict, else `null`. */\n  code: WarlockErrorCode | null;\n  /** One line on what to do, from the code registry, else `null`. */\n  hint: string | null;\n  /** Slug of the skill that explains the fix, else `null`. */\n  skill: string | null;\n  /** Docs URL of the code, else `null`. */\n  docs: string | null;\n};\n\n/** What `warlock doctor --json` prints. */\nexport type DoctorJsonReport = {\n  schemaVersion: 1;\n  results: DoctorJsonResult[];\n  summary: Record<CheckStatus, number>;\n  exitCode: 0 | 1;\n};\n\n/**\n * The machine-readable form of a doctor report: each finding with its stable\n * code and the same `hint` / `skill` / `docs` fields `warlock check --json`\n * prints, so one consumer reads both.\n *\n * @param report The aggregated doctor report.\n */\nexport function toDoctorJson(report: DoctorReport): DoctorJsonReport {\n  return {\n    schemaVersion: 1,\n    results: report.results.map((result) => {\n      const definition = result.code ? ERROR_CODES[result.code] : undefined;\n\n      return {\n        name: result.name,\n        status: result.status,\n        detail: result.detail,\n        code: result.code ?? null,\n        hint: definition?.fix ?? null,\n        skill: definition?.skill ?? null,\n        docs: result.code ? errorCodeDocsUrl(result.code) : null,\n      };\n    }),\n    summary: { ...report.summary },\n    exitCode: report.exitCode,\n  };\n}\n"],"mappings":";;;;;;;AAOA,MAAM,gBAA6C;CACjD,IAAI;CACJ,MAAM;CACN,MAAM;AACR;;;;;AAMA,SAAS,eAAe,QAA6B;CACnD,MAAM,SAAS,cAAc;CAE7B,QAAQ,QAAR;EACE,KAAK,MACH,OAAO,OAAO,MAAM,MAAM;EAC5B,KAAK,QACH,OAAO,OAAO,OAAO,MAAM;EAC7B,KAAK,QACH,OAAO,OAAO,IAAI,MAAM;CAC5B;AACF;;;;;;;;AAgCA,SAAgB,YAAY,QAA4B;CACtD,KAAK,MAAM,UAAU,OAAO,SAAS;EACnC,MAAM,SAAS,eAAe,OAAO,MAAM;EAE3C,MAAM,OAAO,OAAO,OAAO,OAAO,IAAI,KAAK,OAAO,KAAK,EAAE,IAAI;EAE7D,QAAQ,IAAI,GAAG,OAAO,GAAG,OAAO,KAAK,OAAO,IAAI,EAAE,IAAI,OAAO,SAAS,MAAM;CAC9E;CAEA,MAAM,EAAE,IAAI,MAAM,SAAS,OAAO;CAClC,MAAM,cAAc,YAAY,GAAG,OAAO,KAAK,SAAS,KAAK;CAE7D,QAAQ,IAAI,EAAE;CACd,QAAQ,IAAI,OAAO,cAAc,OAAO,IAAI,WAAW,IAAI,OAAO,MAAM,WAAW,CAAC;AACtF;;;;;;;;AAgCA,SAAgB,aAAa,QAAwC;CACnE,OAAO;EACL,eAAe;EACf,SAAS,OAAO,QAAQ,KAAK,WAAW;GACtC,MAAM,aAAa,OAAO,OAAO,YAAY,OAAO,QAAQ;GAE5D,OAAO;IACL,MAAM,OAAO;IACb,QAAQ,OAAO;IACf,QAAQ,OAAO;IACf,MAAM,OAAO,QAAQ;IACrB,MAAM,YAAY,OAAO;IACzB,OAAO,YAAY,SAAS;IAC5B,MAAM,OAAO,OAAO,iBAAiB,OAAO,IAAI,IAAI;GACtD;EACF,CAAC;EACD,SAAS,EAAE,GAAG,OAAO,QAAQ;EAC7B,UAAU,OAAO;CACnB;AACF"}

package/esm/cli/commands/doctor.command.mjs

@@ -28,6 +28,10 @@ const doctorCommand = command({
 		text: "--fix",
 		description: "Convert safely auto-convertible legacy utils/locales.ts files to locales.json",
 		type: "boolean"
+	}, {
+		text: "--json, -j",
+		description: "Print the report as JSON, each finding with its stable error code",
+		type: "boolean"
 	}],
 	preload: {
 		runtimeStrategy: "development",

package/esm/cli/commands/doctor.command.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"doctor.command.mjs","names":[],"sources":["../../../../../../../../../packages/core/src/cli/commands/doctor.command.ts"],"sourcesContent":["import { command } from \"../../commands/cli-command\";\nimport { doctorCommandAction } from \"./doctor/doctor-command.action\";\n\n/**\n * `warlock doctor` — run a set of diagnostic checks against the real app and\n * print a grouped pass/warn/fail report. Exits non-zero if any check fails.\n *\n * Preload plan: config + env + framework bootstrap, and NO connectors. The\n * `connectors` preloader would START them (open the database, dial the cache,\n * bind the port); doctor's own boot pass BOOTS them instead — the phase where\n * routes and endpoints register — which is what gives the checks a real app to\n * read without opening a single connection. See\n * `doctor/boot-for-diagnostics.ts` for that seam.\n *\n * `runtimeStrategy: \"development\"` is declared, not defaulted: connectors branch\n * on it (`web` serves pages from a manifest in production and from Vite in\n * development, `http` picks its router scan the same way), and a diagnostic\n * command that left the strategy unset would take the production branch by\n * accident — refusing to boot a perfectly healthy app because no build manifest\n * exists. Doctor reads a working tree, so it says so.\n */\nexport const doctorCommand = command({\n  name: \"doctor\",\n  description:\n    \"Boot the app read-only (no connections, no port) and report on its routes, config, connectors, drivers and health endpoints\",\n  action: doctorCommandAction,\n  options: [\n    {\n      text: \"--fix\",\n      description: \"Convert safely auto-convertible legacy utils/locales.ts files to locales.json\",\n      type: \"boolean\",\n    },\n  ],\n  preload: {\n    runtimeStrategy: \"development\",\n    config: true,\n    env: true,\n    bootstrap: true,\n  },\n});\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;AAqBA,MAAa,gBAAgB,QAAQ;CACnC,MAAM;CACN,aACE;CACF,QAAQ;CACR,SAAS,CACP;EACE,MAAM;EACN,aAAa;EACb,MAAM;CACR,CACF;CACA,SAAS;EACP,iBAAiB;EACjB,QAAQ;EACR,KAAK;EACL,WAAW;CACb;AACF,CAAC"}
+{"version":3,"file":"doctor.command.mjs","names":[],"sources":["../../../../../../../../../packages/core/src/cli/commands/doctor.command.ts"],"sourcesContent":["import { command } from \"../../commands/cli-command\";\nimport { doctorCommandAction } from \"./doctor/doctor-command.action\";\n\n/**\n * `warlock doctor` — run a set of diagnostic checks against the real app and\n * print a grouped pass/warn/fail report. Exits non-zero if any check fails.\n *\n * Preload plan: config + env + framework bootstrap, and NO connectors. The\n * `connectors` preloader would START them (open the database, dial the cache,\n * bind the port); doctor's own boot pass BOOTS them instead — the phase where\n * routes and endpoints register — which is what gives the checks a real app to\n * read without opening a single connection. See\n * `doctor/boot-for-diagnostics.ts` for that seam.\n *\n * `runtimeStrategy: \"development\"` is declared, not defaulted: connectors branch\n * on it (`web` serves pages from a manifest in production and from Vite in\n * development, `http` picks its router scan the same way), and a diagnostic\n * command that left the strategy unset would take the production branch by\n * accident — refusing to boot a perfectly healthy app because no build manifest\n * exists. Doctor reads a working tree, so it says so.\n */\nexport const doctorCommand = command({\n  name: \"doctor\",\n  description:\n    \"Boot the app read-only (no connections, no port) and report on its routes, config, connectors, drivers and health endpoints\",\n  action: doctorCommandAction,\n  options: [\n    {\n      text: \"--fix\",\n      description: \"Convert safely auto-convertible legacy utils/locales.ts files to locales.json\",\n      type: \"boolean\",\n    },\n    {\n      text: \"--json, -j\",\n      description: \"Print the report as JSON, each finding with its stable error code\",\n      type: \"boolean\",\n    },\n  ],\n  preload: {\n    runtimeStrategy: \"development\",\n    config: true,\n    env: true,\n    bootstrap: true,\n  },\n});\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;AAqBA,MAAa,gBAAgB,QAAQ;CACnC,MAAM;CACN,aACE;CACF,QAAQ;CACR,SAAS,CACP;EACE,MAAM;EACN,aAAa;EACb,MAAM;CACR,GACA;EACE,MAAM;EACN,aAAa;EACb,MAAM;CACR,CACF;CACA,SAAS;EACP,iBAAiB;EACjB,QAAQ;EACR,KAAK;EACL,WAAW;CACb;AACF,CAAC"}