dev-cockpit 0.6.0 → 0.6.2

package/dist/health/predicates/composer-drift.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"composer-drift.d.ts","sourceRoot":"","sources":["../../../src/health/predicates/composer-drift.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAGH,OAAO,KAAK,EAAE,WAAW,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAC9D,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AAExD,MAAM,WAAW,yBAAyB;IACxC;;;;OAIG;IACH,WAAW,CAAC,EAAE,MAAM,EAAE,CAAC;CACxB;AAoBD,wBAAsB,kBAAkB,CACtC,GAAG,EAAE,aAAa,EAClB,IAAI,GAAE,yBAA8B,GACnC,OAAO,CAAC,YAAY,CAAC,CA0CvB;AAeD,MAAM,WAAW,+BAAgC,SAAQ,yBAAyB;IAChF,EAAE,CAAC,EAAE,MAAM,CAAC;IACZ,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,QAAQ,CAAC,EAAE,WAAW,CAAC,UAAU,CAAC,CAAC;IACnC,QAAQ,CAAC,EAAE,WAAW,CAAC,UAAU,CAAC,CAAC;IACnC,WAAW,CAAC,EAAE,WAAW,CAAC,aAAa,CAAC,CAAC;CAC1C;AAED,wBAAgB,wBAAwB,CACtC,IAAI,GAAE,+BAAoC,GACzC,WAAW,CAiBb"}
+{"version":3,"file":"composer-drift.d.ts","sourceRoot":"","sources":["../../../src/health/predicates/composer-drift.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAIH,OAAO,KAAK,EAAE,WAAW,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAC9D,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AAExD,MAAM,WAAW,yBAAyB;IACxC;;;;OAIG;IACH,WAAW,CAAC,EAAE,MAAM,EAAE,CAAC;CACxB;AAyBD,wBAAsB,kBAAkB,CACtC,GAAG,EAAE,aAAa,EAClB,IAAI,GAAE,yBAA8B,GACnC,OAAO,CAAC,YAAY,CAAC,CA0CvB;AAeD,MAAM,WAAW,+BAAgC,SAAQ,yBAAyB;IAChF,EAAE,CAAC,EAAE,MAAM,CAAC;IACZ,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,QAAQ,CAAC,EAAE,WAAW,CAAC,UAAU,CAAC,CAAC;IACnC,QAAQ,CAAC,EAAE,WAAW,CAAC,UAAU,CAAC,CAAC;IACnC,WAAW,CAAC,EAAE,WAAW,CAAC,aAAa,CAAC,CAAC;CAC1C;AAED,wBAAgB,wBAAwB,CACtC,IAAI,GAAE,+BAAoC,GACzC,WAAW,CA4Bb"}

package/dist/health/remediations.d.ts

@@ -24,4 +24,15 @@ export declare function runRemediation(key: RemediationKey, checks: HealthCheck[
  */
 export declare function findRemediation(key: RemediationKey, checks: HealthCheck[]): HealthCheck | undefined;
 export declare function dispatchRemediation(remediation: Remediation, ctx: HealthContext, workspaceRoot: string, sourceId: string): Promise<void>;
+/**
+ * Run a single command, streaming its stdout/stderr into the health output log
+ * under `health:<sourceId>`. Resolves with the process exit code once it exits.
+ *
+ * Shared by the `command`-shape dispatcher above and by `run`-shape
+ * remediations that need to invoke one or more commands with a proper per-call
+ * `cwd` (e.g. `composer install` in several package dirs). Keeping this the one
+ * way a remediation reaches a subprocess means commands stay plain argv — no
+ * shell string is ever parsed, so `&&` / `(cd …)` can't leak into argv.
+ */
+export declare function streamCommand(ctx: HealthContext, sourceId: string, program: string, args: string[], cwd: string): Promise<number>;
 //# sourceMappingURL=remediations.d.ts.map

package/dist/health/remediations.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"remediations.d.ts","sourceRoot":"","sources":["../../src/health/remediations.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,WAAW,EAAE,aAAa,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AAE1E,MAAM,MAAM,cAAc,GAAG,MAAM,CAAC;AAEpC;;;;;;;;GAQG;AACH,wBAAgB,eAAe,CAC7B,GAAG,EAAE,cAAc,EACnB,MAAM,EAAE,WAAW,EAAE,EACrB,WAAW,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC,GACrC,WAAW,EAAE,CASf;AAED;;;;;GAKG;AACH,wBAAgB,kBAAkB,CAAC,MAAM,EAAE,WAAW,EAAE,GAAG,WAAW,EAAE,CAevE;AAED,wBAAsB,cAAc,CAClC,GAAG,EAAE,cAAc,EACnB,MAAM,EAAE,WAAW,EAAE,EACrB,GAAG,EAAE,aAAa,EAClB,aAAa,EAAE,MAAM,EACrB,WAAW,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC,GACrC,OAAO,CAAC,IAAI,CAAC,CAQf;AAED;;;GAGG;AACH,wBAAgB,eAAe,CAC7B,GAAG,EAAE,cAAc,EACnB,MAAM,EAAE,WAAW,EAAE,GACpB,WAAW,GAAG,SAAS,CAEzB;AAED,wBAAsB,mBAAmB,CACvC,WAAW,EAAE,WAAW,EACxB,GAAG,EAAE,aAAa,EAClB,aAAa,EAAE,MAAM,EACrB,QAAQ,EAAE,MAAM,GACf,OAAO,CAAC,IAAI,CAAC,CAiCf"}
+{"version":3,"file":"remediations.d.ts","sourceRoot":"","sources":["../../src/health/remediations.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EACV,WAAW,EACX,aAAa,EAEb,WAAW,EACZ,MAAM,YAAY,CAAC;AAEpB,MAAM,MAAM,cAAc,GAAG,MAAM,CAAC;AAEpC;;;;;;;;GAQG;AACH,wBAAgB,eAAe,CAC7B,GAAG,EAAE,cAAc,EACnB,MAAM,EAAE,WAAW,EAAE,EACrB,WAAW,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC,GACrC,WAAW,EAAE,CASf;AAED;;;;;GAKG;AACH,wBAAgB,kBAAkB,CAAC,MAAM,EAAE,WAAW,EAAE,GAAG,WAAW,EAAE,CAevE;AAED,wBAAsB,cAAc,CAClC,GAAG,EAAE,cAAc,EACnB,MAAM,EAAE,WAAW,EAAE,EACrB,GAAG,EAAE,aAAa,EAClB,aAAa,EAAE,MAAM,EACrB,WAAW,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC,GACrC,OAAO,CAAC,IAAI,CAAC,CAQf;AAED;;;GAGG;AACH,wBAAgB,eAAe,CAC7B,GAAG,EAAE,cAAc,EACnB,MAAM,EAAE,WAAW,EAAE,GACpB,WAAW,GAAG,SAAS,CAEzB;AAED,wBAAsB,mBAAmB,CACvC,WAAW,EAAE,WAAW,EACxB,GAAG,EAAE,aAAa,EAClB,aAAa,EAAE,MAAM,EACrB,QAAQ,EAAE,MAAM,GACf,OAAO,CAAC,IAAI,CAAC,CAef;AAED;;;;;;;;;GASG;AACH,wBAAsB,aAAa,CACjC,GAAG,EAAE,aAAa,EAClB,QAAQ,EAAE,MAAM,EAChB,OAAO,EAAE,MAAM,EACf,IAAI,EAAE,MAAM,EAAE,EACd,GAAG,EAAE,MAAM,GACV,OAAO,CAAC,MAAM,CAAC,CAmBjB"}

package/dist/index.js

@@ -88257,22 +88257,24 @@ async function dispatchRemediation(remediation, ctx, workspaceRoot, sourceId) {
   if (!program2) return;
   const args = parts.slice(1);
   const cwd = remediation.cwd ?? workspaceRoot;
+  await streamCommand(ctx, sourceId, program2, args, cwd);
+}
+async function streamCommand(ctx, sourceId, program2, args, cwd) {
+  const emit = (severity, text) => ctx.appendOutput?.({ ts: Date.now(), source: `health:${sourceId}`, severity, text });
   const handle = spawnStream(program2, args, {
     cwd,
-    onStdout: (line2) => ctx.appendOutput?.({
-      ts: Date.now(),
-      source: `health:${sourceId}`,
-      severity: "info",
-      text: line2
-    }),
-    onStderr: (line2) => ctx.appendOutput?.({
-      ts: Date.now(),
-      source: `health:${sourceId}`,
-      severity: "warn",
-      text: line2
-    })
+    // Stream both channels as info. Many CLIs (composer, git, npm) write all of
+    // their normal progress to stderr, so the channel says nothing about
+    // severity — treating stderr as a warning renders ordinary success output
+    // as a wall of ⚠. Success vs failure is decided by the exit code below.
+    onStdout: (line2) => emit("info", line2),
+    onStderr: (line2) => emit("info", line2)
   });
-  await handle.exitCode;
+  const code = await handle.exitCode;
+  const label = [program2, ...args].join(" ");
+  if (code === 0) emit("info", `\u2713 ${label}`);
+  else emit("error", `\u2717 ${label} failed (exit ${code})`);
+  return code;
 }
 
 // src/health/notify-resolver.ts
@@ -91134,7 +91136,12 @@ function resolveScopes(workspaceRoot, dirs) {
     const base = rel ? path15.join(workspaceRoot, rel) : workspaceRoot;
     return {
       lock: path15.join(base, "composer.lock"),
-      vendor: path15.join(base, "vendor"),
+      // Compare against the autoload dump, which `composer install` regenerates
+      // on EVERY run — even a no-op "Nothing to install". The `vendor/`
+      // directory mtime only moves when entries are added/removed directly in
+      // it, so a clean reinstall would never bump it and a drift flagged
+      // against the dir could never clear.
+      installed: path15.join(base, "vendor", "autoload.php"),
       label: rel || "root"
     };
   });
@@ -91152,18 +91159,18 @@ async function checkComposerDrift(ctx, opts = {}) {
     } catch {
       continue;
     }
-    if (!fs19.existsSync(scope.vendor)) {
+    if (!fs19.existsSync(scope.installed)) {
       missing.push(scope.label);
       continue;
     }
-    let vendorMtime;
+    let installedMtime;
     try {
-      vendorMtime = fs19.statSync(scope.vendor).mtimeMs;
+      installedMtime = fs19.statSync(scope.installed).mtimeMs;
     } catch {
-      stale.push(`${scope.label} (vendor unreadable)`);
+      stale.push(`${scope.label} (autoload unreadable)`);
       continue;
     }
-    if (lockMtime > vendorMtime) {
+    if (lockMtime > installedMtime) {
       stale.push(scope.label);
     }
   }
@@ -91171,7 +91178,7 @@ async function checkComposerDrift(ctx, opts = {}) {
     return status3("ok", "composer.lock and vendor/ are in sync");
   }
   const parts = [];
-  if (missing.length > 0) parts.push(`vendor missing in: ${missing.join(", ")}`);
+  if (missing.length > 0) parts.push(`dependencies not installed in: ${missing.join(", ")}`);
   if (stale.length > 0) parts.push(`composer.lock newer than vendor/ in: ${stale.join(", ")}`);
   return status3("error", `${parts.join("; ")} \u2014 run composer install`);
 }
@@ -91186,17 +91193,29 @@ function status3(severity, detail) {
 }
 function createComposerDriftCheck(opts = {}) {
   const dirs = opts.packageDirs ?? ["."];
-  const defaultCommand = dirs.map((d) => d === "" || d === "." ? "composer install" : `(cd ${d} && composer install)`).join(" && ");
+  const id = opts.id ?? "composer-drift";
   return {
-    id: opts.id ?? "composer-drift",
+    id,
     label: opts.label ?? "Composer",
     severity: opts.severity ?? "error",
     triggers: opts.triggers ?? ["startup", "lockfile"],
     predicate: (ctx) => checkComposerDrift(ctx, opts),
+    // Run `composer install` once per package dir, each in its own cwd. A
+    // declarative `command` string can't express this without shell syntax
+    // (`&&`, `(cd …)`), and the dispatcher runs commands as plain argv — so
+    // that syntax would reach composer as bogus package arguments. The `run`
+    // shape keeps each invocation a clean argv in the right directory and
+    // short-circuits on the first failure, mirroring `&&`.
     remediation: opts.remediation ?? {
       key: "R",
       label: "Run composer install",
-      command: defaultCommand
+      run: async (ctx, workspaceRoot) => {
+        for (const d of dirs) {
+          const cwd = d === "" || d === "." ? workspaceRoot : path15.join(workspaceRoot, d);
+          const code = await streamCommand(ctx, id, "composer", ["install"], cwd);
+          if (code !== 0) break;
+        }
+      }
     }
   };
 }