canary-test-cli 5.10.1 → 5.11.0

package/dist/doctor-manifest.js

@@ -37,6 +37,7 @@ exports.DEFAULT_CHECK_TIMEOUT_MS = exports.CHECK_TYPES = void 0;
 exports.manifestPath = manifestPath;
 exports.commandSucceedsHash = commandSucceedsHash;
 exports.loadManifest = loadManifest;
+exports.collectPersonas = collectPersonas;
 exports.filterByPersona = filterByPersona;
 exports.runCheck = runCheck;
 /**
@@ -185,6 +186,27 @@ function loadManifest(cloneDir) {
     }
     return { ok: true, checks };
 }
+/**
+ * The distinct persona tags declared across a set of checks, in first-seen
+ * order and de-duplicated case-insensitively (original casing preserved for
+ * display). This is the discoverable persona *vocabulary* — the engine ships
+ * none of its own, so it is derived entirely from overlay manifests. Used to
+ * tell a user which `--persona` values actually mean something (issue #294).
+ */
+function collectPersonas(checks) {
+    const seen = new Set();
+    const out = [];
+    for (const check of checks) {
+        for (const tag of check.persona ?? []) {
+            const key = tag.toLowerCase();
+            if (!seen.has(key)) {
+                seen.add(key);
+                out.push(tag);
+            }
+        }
+    }
+    return out;
+}
 /**
  * Keep checks that should run for `persona`: a null persona runs everything;
  * otherwise keep checks with no persona plus those whose persona list contains

package/dist/doctor.js

@@ -33,6 +33,7 @@ var __importStar = (this && this.__importStar) || (function () {
     };
 })();
 Object.defineProperty(exports, "__esModule", { value: true });
+exports.unknownPersonaHint = unknownPersonaHint;
 exports.runDoctor = runDoctor;
 /**
  * `canary doctor` — environment self-check (Phase 2).
@@ -60,6 +61,28 @@ function parsePersona(args) {
     }
     return null;
 }
+/**
+ * Fail-loud hint for an unrecognized `--persona` value (issue #294). Returns
+ * null when there is nothing to say — no persona was passed, or the passed
+ * persona is part of the known vocabulary. Otherwise returns a one-line,
+ * actionable message: the engine ships no persona vocabulary, so this lists
+ * the tags overlays actually declared (or says none are defined) instead of
+ * silently running only the persona-less checks and leaving the user to
+ * guess why their filter matched nothing.
+ */
+function unknownPersonaHint(persona, known) {
+    if (persona === null) {
+        return null;
+    }
+    const want = persona.toLowerCase();
+    if (known.some((p) => p.toLowerCase() === want)) {
+        return null;
+    }
+    if (known.length === 0) {
+        return `--persona '${persona}' matched no checks: no overlay defines any personas, so every check already runs. Drop the flag.`;
+    }
+    return `--persona '${persona}' is not a known persona. Valid options: ${known.join(", ")}. (Omit --persona to run every check.)`;
+}
 function renderCheck(r) {
     const line = `  ${SYMBOL[r.status]} ${r.label}\n`;
     return r.status === "fail" && r.remedy ? `${line}      → ${r.remedy}\n` : line;
@@ -69,7 +92,7 @@ async function overlayResults(entry, deps, persona) {
     const header = `Overlay: ${entry.name}`;
     const load = (0, doctor_manifest_js_1.loadManifest)(entry.path);
     if (!load.ok) {
-        return { header, results: [load.failure] };
+        return { group: { header, results: [load.failure] }, loadedChecks: [] };
     }
     const granted = registry.consentGranted(entry, (0, doctor_manifest_js_1.commandSucceedsHash)(load.checks));
     const checks = (0, doctor_manifest_js_1.filterByPersona)(load.checks, persona);
@@ -84,7 +107,9 @@ async function overlayResults(entry, deps, persona) {
     for (const check of checks) {
         results.push(await (0, doctor_manifest_js_1.runCheck)(check, ctx));
     }
-    return { header, results };
+    // Return the full (pre-filter) check set so the caller can build the
+    // persona vocabulary for a fail-loud hint on an unknown --persona.
+    return { group: { header, results }, loadedChecks: load.checks };
 }
 /**
  * Run `canary doctor`. Returns a process exit code: 0 when every check passed
@@ -111,10 +136,20 @@ async function runDoctor(args, deps = {}) {
     catch {
         reg = registry.emptyRegistry();
     }
+    const allChecks = [];
     for (const entry of reg.overlays) {
-        groups.push(await overlayResults(entry, deps, persona));
+        const { group, loadedChecks } = await overlayResults(entry, deps, persona);
+        groups.push(group);
+        allChecks.push(...loadedChecks);
     }
     out.write("canary doctor\n");
+    // Issue #294: if the user passed a --persona that no overlay declares,
+    // tell them the valid vocabulary instead of silently filtering to only
+    // the persona-less checks and leaving them to wonder why.
+    const personaHint = unknownPersonaHint(persona, (0, doctor_manifest_js_1.collectPersonas)(allChecks));
+    if (personaHint) {
+        out.write(`\n! ${personaHint}\n`);
+    }
     let failures = 0;
     for (const group of groups) {
         out.write(`\n${group.header}\n`);

package/dist/engine-checks.js

@@ -33,6 +33,7 @@ var __importStar = (this && this.__importStar) || (function () {
     };
 })();
 Object.defineProperty(exports, "__esModule", { value: true });
+exports.parseRegistryVersion = parseRegistryVersion;
 exports.isOlder = isOlder;
 exports.checkVersion = checkVersion;
 exports.checkGit = checkGit;
@@ -72,10 +73,11 @@ function ownVersion() {
         return null;
     }
 }
-/** Extract `version` from a registry dist-tag body; null on any parse error. */
-function parseRegistryVersion(body) {
+/** String `version` from a registry body; null on parse error or non-string shape (SEC-DES-001: registry JSON is untrusted). */
+function parseRegistryVersion(rawBody) {
     try {
-        return JSON.parse(body).version ?? null;
+        const v = JSON.parse(rawBody)?.version;
+        return typeof v === "string" ? v : null;
     }
     catch {
         return null;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "canary-test-cli",
-  "version": "5.10.1",
+  "version": "5.11.0",
   "description": "Canary — AI-powered test automation agent",
   "license": "MIT",
   "repository": {