redeploy 0.2.74__tar.gz → 0.2.76__tar.gz

{redeploy-0.2.74 → redeploy-0.2.76}/PKG-INFO

@@ -1,8 +1,8 @@
 Metadata-Version: 2.4
 Name: redeploy
-Version: 0.2.74
+Version: 0.2.76
 Summary: Infrastructure migration toolkit: detect → plan → apply
-License: Apache-2.0
+License-Expression: Apache-2.0
 Requires-Python: >=3.11
 Description-Content-Type: text/markdown
 Requires-Dist: pydantic>=2.0
@@ -33,17 +33,17 @@ Requires-Dist: mcp>=1.0; extra == "mcp"
 
 ## AI Cost Tracking
 
-![PyPI](https://img.shields.io/badge/pypi-costs-blue) ![Version](https://img.shields.io/badge/version-0.2.74-blue) ![Python](https://img.shields.io/badge/python-3.9+-blue) ![License](https://img.shields.io/badge/license-Apache--2.0-green)
-![AI Cost](https://img.shields.io/badge/AI%20Cost-$7.50-orange) ![Human Time](https://img.shields.io/badge/Human%20Time-40.0h-blue) ![Model](https://img.shields.io/badge/Model-openrouter%2Fqwen%2Fqwen3--coder--next-lightgrey)
+![PyPI](https://img.shields.io/badge/pypi-costs-blue) ![Version](https://img.shields.io/badge/version-0.2.76-blue) ![Python](https://img.shields.io/badge/python-3.9+-blue) ![License](https://img.shields.io/badge/license-Apache--2.0-green)
+![AI Cost](https://img.shields.io/badge/AI%20Cost-$5.41-orange) ![Human Time](https://img.shields.io/badge/Human%20Time-42.0h-blue) ![Model](https://img.shields.io/badge/Model-openrouter%2Fqwen%2Fqwen3--coder--next-lightgrey)
 
-- 🤖 **LLM usage:** $7.5000 (95 commits)
-- 👤 **Human dev:** ~$3998 (40.0h @ $100/h, 30min dedup)
+- 🤖 **LLM usage:** $5.4083 (98 commits)
+- 👤 **Human dev:** ~$4198 (42.0h @ $100/h, 30min dedup)
 
-Generated on 2026-04-30 using [openrouter/qwen/qwen3-coder-next](https://openrouter.ai/qwen/qwen3-coder-next)
+Generated on 2026-05-20 using [openrouter/qwen/qwen3-coder-next](https://openrouter.ai/qwen/qwen3-coder-next)
 
 ---
 
-![PyPI](https://img.shields.io/badge/pypi-redeploy-blue) ![Version](https://img.shields.io/badge/version-0.2.74-blue) ![Python](https://img.shields.io/badge/python-3.10+-blue) ![License](https://img.shields.io/badge/license-Apache--2.0-green)
+![PyPI](https://img.shields.io/badge/pypi-redeploy-blue) ![Version](https://img.shields.io/badge/version-0.2.76-blue) ![Python](https://img.shields.io/badge/python-3.10+-blue) ![License](https://img.shields.io/badge/license-Apache--2.0-green)
 
 Infrastructure migration and device deploy toolkit — VPS, Raspberry Pi kiosk, Podman Quadlet, k3s.
 

{redeploy-0.2.74 → redeploy-0.2.76}/README.md

@@ -3,17 +3,17 @@
 
 ## AI Cost Tracking
 
-![PyPI](https://img.shields.io/badge/pypi-costs-blue) ![Version](https://img.shields.io/badge/version-0.2.74-blue) ![Python](https://img.shields.io/badge/python-3.9+-blue) ![License](https://img.shields.io/badge/license-Apache--2.0-green)
-![AI Cost](https://img.shields.io/badge/AI%20Cost-$7.50-orange) ![Human Time](https://img.shields.io/badge/Human%20Time-40.0h-blue) ![Model](https://img.shields.io/badge/Model-openrouter%2Fqwen%2Fqwen3--coder--next-lightgrey)
+![PyPI](https://img.shields.io/badge/pypi-costs-blue) ![Version](https://img.shields.io/badge/version-0.2.76-blue) ![Python](https://img.shields.io/badge/python-3.9+-blue) ![License](https://img.shields.io/badge/license-Apache--2.0-green)
+![AI Cost](https://img.shields.io/badge/AI%20Cost-$5.41-orange) ![Human Time](https://img.shields.io/badge/Human%20Time-42.0h-blue) ![Model](https://img.shields.io/badge/Model-openrouter%2Fqwen%2Fqwen3--coder--next-lightgrey)
 
-- 🤖 **LLM usage:** $7.5000 (95 commits)
-- 👤 **Human dev:** ~$3998 (40.0h @ $100/h, 30min dedup)
+- 🤖 **LLM usage:** $5.4083 (98 commits)
+- 👤 **Human dev:** ~$4198 (42.0h @ $100/h, 30min dedup)
 
-Generated on 2026-04-30 using [openrouter/qwen/qwen3-coder-next](https://openrouter.ai/qwen/qwen3-coder-next)
+Generated on 2026-05-20 using [openrouter/qwen/qwen3-coder-next](https://openrouter.ai/qwen/qwen3-coder-next)
 
 ---
 
-![PyPI](https://img.shields.io/badge/pypi-redeploy-blue) ![Version](https://img.shields.io/badge/version-0.2.74-blue) ![Python](https://img.shields.io/badge/python-3.10+-blue) ![License](https://img.shields.io/badge/license-Apache--2.0-green)
+![PyPI](https://img.shields.io/badge/pypi-redeploy-blue) ![Version](https://img.shields.io/badge/version-0.2.76-blue) ![Python](https://img.shields.io/badge/python-3.10+-blue) ![License](https://img.shields.io/badge/license-Apache--2.0-green)
 
 Infrastructure migration and device deploy toolkit — VPS, Raspberry Pi kiosk, Podman Quadlet, k3s.
 

{redeploy-0.2.74 → redeploy-0.2.76}/pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "setuptools.build_meta"
 
 [project]
 name = "redeploy"
-version = "0.2.74"
+version = "0.2.76"
 description = "Infrastructure migration toolkit: detect → plan → apply"
 readme = "README.md"
 requires-python = ">=3.11"
@@ -22,6 +22,7 @@ dependencies = [
     "costs>=0.1.20",
     "pfix>=0.1.60",
 ]
+license = "Apache-2.0"
 
 [project.scripts]
 redeploy = "redeploy.cli:cli"
@@ -36,8 +37,6 @@ dev = ["pytest>=8.0", "ruff>=0.4",
 op3 = ["op3>=0.1.8"]
 mcp = ["mcp>=1.0"]
 
-[project.license]
-text = "Apache-2.0"
 [tool.ruff]
 line-length = 100
 

{redeploy-0.2.74 → redeploy-0.2.76}/redeploy/__init__.py

@@ -7,7 +7,7 @@ Public API (stable from 0.2.0, semver guaranteed)::
 
 Everything not listed in ``__all__`` is internal and may change without notice.
 """
-__version__ = "0.2.74"
+__version__ = "0.2.76"
 
 # ── Core models ───────────────────────────────────────────────────────────────
 from .models import (  # noqa: F401

{redeploy-0.2.74 → redeploy-0.2.76}/redeploy/analyze/__init__.py

@@ -1,7 +1,8 @@
 """Static analysis for migration specs — pre-flight checks before plan/apply."""
 from __future__ import annotations
 
-from .spec_analyzer import SpecAnalyzer, AnalysisResult, IssueSeverity
+from .models import AnalysisResult, IssueSeverity
+from .spec_analyzer import SpecAnalyzer
 from .preflight_schema import PreflightResult, generate_preflight_schema, save_preflight_schema
 
 __all__ = [

redeploy-0.2.76/redeploy/analyze/checkers/__init__.py

@@ -0,0 +1,47 @@
+"""Built-in static checkers for redeploy specs."""
+from .base import Checker
+from .binary import BinaryChecker, extract_binaries
+from .command_ref import CommandRefChecker
+from .compose import ComposeChecker, scan_compose_file
+from .docker_build import DockerBuildChecker, collect_sync_mappings, parse_docker_build
+from .env import EnvFileChecker
+from .path import CommandPathChecker, PathChecker, is_inside, resolve_local_path
+from .reference import ReferenceChecker
+
+# Backward-compatible private aliases used in tests.
+_Checker = Checker
+_PathChecker = PathChecker
+_CommandPathChecker = CommandPathChecker
+_ReferenceChecker = ReferenceChecker
+_ComposeChecker = ComposeChecker
+_DockerBuildChecker = DockerBuildChecker
+_CommandRefChecker = CommandRefChecker
+_EnvFileChecker = EnvFileChecker
+_BinaryChecker = BinaryChecker
+
+__all__ = [
+    "Checker",
+    "PathChecker",
+    "CommandPathChecker",
+    "ReferenceChecker",
+    "ComposeChecker",
+    "DockerBuildChecker",
+    "CommandRefChecker",
+    "EnvFileChecker",
+    "BinaryChecker",
+    "scan_compose_file",
+    "collect_sync_mappings",
+    "parse_docker_build",
+    "extract_binaries",
+    "resolve_local_path",
+    "is_inside",
+    "_Checker",
+    "_PathChecker",
+    "_CommandPathChecker",
+    "_ReferenceChecker",
+    "_ComposeChecker",
+    "_DockerBuildChecker",
+    "_CommandRefChecker",
+    "_EnvFileChecker",
+    "_BinaryChecker",
+]

redeploy-0.2.76/redeploy/analyze/checkers/base.py

@@ -0,0 +1,19 @@
+"""Base class for static spec checkers."""
+from __future__ import annotations
+
+from pathlib import Path
+
+from ..models import AnalysisResult
+from ...markpact.models import MarkpactDocument
+from ...models.spec import MigrationSpec
+
+
+class Checker:
+    def check(
+        self,
+        spec: MigrationSpec,
+        document: MarkpactDocument | None,
+        base_dir: Path,
+        result: AnalysisResult,
+    ) -> None:
+        raise NotImplementedError

redeploy-0.2.76/redeploy/analyze/checkers/binary.py

@@ -0,0 +1,74 @@
+"""Local binary availability checks for shell commands."""
+from __future__ import annotations
+
+import re
+import shlex
+import shutil
+
+from ..models import AnalysisResult, IssueSeverity
+from .base import Checker
+
+_WRAPPERS = frozenset({"sudo", "env", "command", "nohup", "time", "exec"})
+_KEYWORDS = frozenset({
+    "if", "then", "else", "fi", "for", "do", "done", "while", "case", "esac",
+    "function", "in", "until", "select", "echo", "true", "false", "test", "[", "[[",
+})
+_SEPARATORS = frozenset({"&&", "||", "|", ";", "(", ")", "{", "}"})
+
+
+def extract_binaries(cmd: str) -> list[str]:
+    try:
+        tokens = shlex.split(cmd, posix=True)
+    except ValueError:
+        tokens = cmd.split()
+
+    out: list[str] = []
+    expect_cmd = True
+    i = 0
+    while i < len(tokens):
+        tok = tokens[i]
+        if tok in _SEPARATORS:
+            expect_cmd = True
+            i += 1
+            continue
+        if expect_cmd:
+            if tok in _KEYWORDS or tok.startswith("$"):
+                if tok == "for":
+                    i += 1
+                i += 1
+                expect_cmd = False
+                continue
+            if "=" in tok and not tok.startswith("--") and "/" not in tok:
+                i += 1
+                continue
+            if tok in _WRAPPERS:
+                i += 1
+                continue
+            if re.match(r"^[a-zA-Z_][a-zA-Z0-9_.-]*$", tok) and len(tok) > 1:
+                out.append(tok)
+            expect_cmd = False
+        i += 1
+    return out
+
+
+class BinaryChecker(Checker):
+    """Warn if commands reference binaries not available locally (best-effort)."""
+
+    def check(self, spec, document, base_dir, result):
+        for step in spec.extra_steps:
+            action = str(step.get("action") or "")
+            if action in {"ensure_kanshi_profile"}:
+                continue
+            cmd = step.get("command") or ""
+            for binary in extract_binaries(cmd):
+                if shutil.which(binary) is None:
+                    result.add(
+                        IssueSeverity.WARNING,
+                        "binaries",
+                        f"Step '{step.get('id')}' command uses binary not found locally: '{binary}'",
+                        step.get("id"),
+                        suggestion=(
+                            f"Install '{binary}' locally for lint parity, or ignore if it "
+                            "exists only on remote host."
+                        ),
+                    )

redeploy-0.2.76/redeploy/analyze/checkers/command_ref.py

@@ -0,0 +1,83 @@
+"""command_ref dependency validation."""
+from __future__ import annotations
+
+from pathlib import Path
+
+from ..models import AnalysisResult, IssueSeverity
+from .base import Checker
+from .path import resolve_local_path
+
+
+class CommandRefChecker(Checker):
+    """Validate command_ref references for nested markdown/script dependencies."""
+
+    def check(self, spec, document, base_dir, result):
+        from ...markpact.parser import resolve_script_ref
+
+        in_doc_refs: set[str] = set()
+        if document:
+            for block in document.blocks:
+                if block.kind == "ref" and block.ref_id:
+                    in_doc_refs.add(block.ref_id)
+
+        for step in spec.extra_steps:
+            sid = step.get("id")
+            cref = step.get("command_ref")
+            if not cref:
+                continue
+
+            if "#" in cref:
+                self._check_external_ref(cref, sid, base_dir, document, in_doc_refs, result)
+                continue
+
+            if document and cref not in in_doc_refs:
+                result.add(
+                    IssueSeverity.WARNING,
+                    "command_ref",
+                    f"Step '{sid}' references unknown command_ref '{cref}'",
+                    sid,
+                    suggestion="Define a matching markpact:ref block in this spec.",
+                )
+
+    def _check_external_ref(
+        self,
+        cref: str,
+        sid: str | None,
+        base_dir: Path,
+        document,
+        in_doc_refs: set[str],
+        result: AnalysisResult,
+    ) -> None:
+        from ...markpact.parser import resolve_script_ref
+
+        file_part, ref_id = cref.split("#", 1)
+        if file_part:
+            file_path = resolve_local_path(file_part, base_dir)
+            if not file_path.exists():
+                result.add(
+                    IssueSeverity.ERROR,
+                    "command_ref",
+                    f"Step '{sid}' command_ref file missing: {file_part}",
+                    sid,
+                    suggestion=f"Create or fix path: {file_path}",
+                )
+                return
+            text = file_path.read_text(encoding="utf-8", errors="replace")
+            if resolve_script_ref(text, ref_id, language="bash") is None:
+                result.add(
+                    IssueSeverity.ERROR,
+                    "command_ref",
+                    f"Step '{sid}' command_ref '#{ref_id}' not found in {file_part}",
+                    sid,
+                    suggestion="Add a matching markpact:ref bash block or section heading script.",
+                )
+            return
+
+        if document and ref_id not in in_doc_refs:
+            result.add(
+                IssueSeverity.WARNING,
+                "command_ref",
+                f"Step '{sid}' command_ref '#{ref_id}' not found as markpact:ref in current spec",
+                sid,
+                suggestion="If this is a heading-based script, keep as-is; otherwise add markpact:ref block.",
+            )

redeploy-0.2.76/redeploy/analyze/checkers/compose.py

@@ -0,0 +1,143 @@
+"""Docker Compose static validation."""
+from __future__ import annotations
+
+from pathlib import Path
+
+import yaml
+
+from ..ignore import IgnoreList
+from ..models import AnalysisResult, IssueSeverity
+from .base import Checker
+
+
+def _is_ignored(check_path: Path, base_dir: Path, ign: IgnoreList) -> bool:
+    try:
+        rel = check_path.resolve().relative_to(base_dir.resolve())
+        return ign.is_ignored(rel)
+    except ValueError:
+        return False
+
+
+def _check_build_section(
+    svc_name: str,
+    svc: dict,
+    base_dir: Path,
+    result: AnalysisResult,
+    ign: IgnoreList,
+) -> None:
+    build = svc.get("build")
+    if not isinstance(build, dict):
+        return
+    ctx = build.get("context", ".")
+    ctx_path = base_dir / ctx if not str(ctx).startswith("/") else Path(ctx)
+    if not ctx_path.exists():
+        result.add(
+            IssueSeverity.ERROR, "compose",
+            f"Service '{svc_name}' build.context missing: {ctx}",
+            suggestion=f"Create directory {ctx_path} or fix context.",
+        )
+    dockerfile = build.get("dockerfile")
+    if not dockerfile:
+        return
+    df_path = ctx_path / dockerfile
+    if not df_path.exists() and not _is_ignored(df_path, base_dir, ign):
+        result.add(
+            IssueSeverity.ERROR, "compose",
+            f"Service '{svc_name}' Dockerfile missing: {df_path}",
+            suggestion=f"Create {df_path} or correct dockerfile path.",
+        )
+
+
+def _check_env_files(
+    svc_name: str,
+    svc: dict,
+    base_dir: Path,
+    result: AnalysisResult,
+    ign: IgnoreList,
+) -> None:
+    env_files = svc.get("env_file", [])
+    if isinstance(env_files, str):
+        env_files = [env_files]
+    for ef in env_files:
+        ef_path = base_dir / ef if not str(ef).startswith("/") else Path(ef)
+        if not ef_path.exists() and not _is_ignored(ef_path, base_dir, ign):
+            result.add(
+                IssueSeverity.WARNING, "compose",
+                f"Service '{svc_name}' env_file missing: {ef}",
+                suggestion=f"Create {ef_path} or remove env_file entry.",
+            )
+
+
+def _check_volumes(
+    svc_name: str,
+    svc: dict,
+    base_dir: Path,
+    result: AnalysisResult,
+    ign: IgnoreList,
+) -> None:
+    for vol in svc.get("volumes", []):
+        if not isinstance(vol, str) or ":" not in vol:
+            continue
+        host_part = vol.split(":", 1)[0]
+        if host_part.startswith("/"):
+            if not Path(host_part).exists() and not _is_ignored(Path(host_part), base_dir, ign):
+                result.add(
+                    IssueSeverity.WARNING, "compose",
+                    f"Service '{svc_name}' volume host path missing: {host_part}",
+                    suggestion="Ensure host path exists before deployment.",
+                )
+        elif host_part != "." and "/" in host_part:
+            hp = base_dir / host_part
+            if not hp.exists() and not _is_ignored(hp, base_dir, ign):
+                result.add(
+                    IssueSeverity.WARNING, "compose",
+                    f"Service '{svc_name}' relative volume path missing: {hp}",
+                    suggestion=f"Create {hp} or mount as named volume.",
+                )
+
+
+def scan_compose_file(
+    path: Path,
+    base_dir: Path,
+    result: AnalysisResult,
+    ign: IgnoreList,
+) -> None:
+    try:
+        data = yaml.safe_load(path.read_text()) or {}
+    except Exception as exc:
+        result.add(IssueSeverity.ERROR, "compose", f"Cannot parse {path}: {exc}")
+        return
+
+    for svc_name, svc in (data.get("services") or {}).items():
+        if not isinstance(svc, dict):
+            continue
+        _check_build_section(svc_name, svc, base_dir, result, ign)
+        _check_env_files(svc_name, svc, base_dir, result, ign)
+        _check_volumes(svc_name, svc, base_dir, result, ign)
+
+
+class ComposeChecker(Checker):
+    """Validate docker-compose files declared in spec or found in project."""
+
+    def check(self, spec, document, base_dir, result):
+        ign = IgnoreList(base_dir)
+        compose_files = list(spec.target.compose_files or [])
+        if not compose_files:
+            for candidate in (
+                "docker-compose.yml", "docker-compose.yaml",
+                "compose.yml", "compose.yaml",
+            ):
+                if (base_dir / candidate).exists():
+                    compose_files.append(candidate)
+                    break
+
+        for cf in compose_files:
+            path = base_dir / cf
+            if not path.exists():
+                result.add(
+                    IssueSeverity.ERROR, "compose",
+                    f"Declared compose file not found: {cf}",
+                    suggestion=f"Create {path} or remove from target.compose_files.",
+                )
+                continue
+            scan_compose_file(path, base_dir, result, ign)

redeploy-0.2.76/redeploy/analyze/checkers/docker_build.py

@@ -0,0 +1,160 @@
+"""Docker build command static validation."""
+from __future__ import annotations
+
+import re
+from pathlib import Path
+
+from ..models import AnalysisResult, IssueSeverity
+from .base import Checker
+
+DOCKER_BUILD_RE = re.compile(r"docker\s+(?:buildx\s+)?build\s+")
+FILE_FLAG_RE = re.compile(r"-f\s+(\S+)|--file[=\s]+(\S+)")
+STANDARD_DOCKERFILES = frozenset({
+    "Dockerfile", "dockerfile", "Dockerfile.prod", "Dockerfile.dev",
+})
+
+
+def collect_sync_mappings(spec) -> tuple[set[str], list[tuple[str, str]]]:
+    sync_dests: set[str] = set()
+    sync_mappings: list[tuple[str, str]] = []
+    for step in spec.extra_steps:
+        sid = step.get("id", "")
+        if not str(sid).startswith("sync_"):
+            continue
+        dst = step.get("dst", "")
+        src = step.get("src", "")
+        if dst:
+            sync_dests.add(dst.rstrip("/"))
+            if src:
+                sync_mappings.append((dst.rstrip("/"), src))
+    return sync_dests, sync_mappings
+
+
+def parse_docker_build(cmd: str) -> tuple[str | None, str]:
+    dockerfile = None
+    for match in FILE_FLAG_RE.finditer(cmd):
+        dockerfile = match.group(1) or match.group(2)
+        break
+
+    tokens = cmd.split()
+    context = "."
+    i = len(tokens) - 1
+    while i > 0:
+        token = tokens[i]
+        if token.startswith("-"):
+            i -= 1
+            continue
+        if i > 0 and tokens[i - 1] in ("-f", "--file"):
+            i -= 2
+            continue
+        if i > 0 and tokens[i - 1].startswith("--file="):
+            i -= 1
+            continue
+        context = token
+        break
+        i -= 1
+    return dockerfile, context
+
+
+def match_local_src(
+    sync_mappings: list[tuple[str, str]], remote_context: str,
+) -> str | None:
+    for remote_dst, local_src in sync_mappings:
+        if not remote_dst.startswith("~/"):
+            continue
+        dst_clean = remote_dst.rstrip("/")
+        if remote_context == dst_clean or remote_context.startswith(dst_clean + "/"):
+            return local_src
+    return None
+
+
+def resolve_local_dockerfile(local_src: str, dockerfile: str, base_dir: Path) -> Path | None:
+    src_path = Path(local_src.rstrip("/"))
+    if not src_path.is_absolute():
+        src_path = (base_dir / src_path).resolve()
+    if dockerfile.startswith("/"):
+        return Path(dockerfile)
+    return src_path / dockerfile
+
+
+class DockerBuildChecker(Checker):
+    """Validate docker build commands: Dockerfile exists, context is consistent."""
+
+    def check(self, spec, document, base_dir, result):
+        sync_dests, sync_mappings = collect_sync_mappings(spec)
+
+        for step in spec.extra_steps:
+            cmd = step.get("command", "")
+            if not DOCKER_BUILD_RE.search(cmd):
+                continue
+            sid = step.get("id", "unknown")
+            dockerfile, context = parse_docker_build(cmd)
+            self._check_dockerfile(dockerfile, sid, base_dir, result)
+            if context.startswith("~/"):
+                self._check_remote_context(
+                    context, dockerfile, sid, sync_dests, sync_mappings,
+                    base_dir, result,
+                )
+
+    def _check_dockerfile(
+        self, dockerfile: str | None, sid: str, base_dir: Path, result: AnalysisResult,
+    ) -> None:
+        if not dockerfile or dockerfile.startswith("/") or dockerfile.startswith("~"):
+            return
+        df_path = base_dir / dockerfile
+        if not df_path.exists():
+            result.add(
+                IssueSeverity.ERROR, "docker_build",
+                f"Step '{sid}' docker build references missing Dockerfile: {dockerfile}",
+                sid,
+                suggestion=f"Create {df_path} or use standard 'Dockerfile' name.",
+            )
+        elif dockerfile not in STANDARD_DOCKERFILES:
+            result.add(
+                IssueSeverity.WARNING, "docker_build",
+                f"Step '{sid}' uses non-standard Dockerfile name: {dockerfile}",
+                sid,
+                suggestion="Consider using standard 'Dockerfile' with multi-arch support.",
+            )
+
+    def _check_remote_context(
+        self,
+        context: str,
+        dockerfile: str | None,
+        sid: str,
+        sync_dests: set[str],
+        sync_mappings: list[tuple[str, str]],
+        base_dir: Path,
+        result: AnalysisResult,
+    ) -> None:
+        context_clean = context.rstrip("/")
+        context_remote = context_clean[2:]
+        sync_remote_paths = {
+            d[2:].rstrip("/") for d in sync_dests if d.startswith("~/")
+        }
+        matched = any(
+            context_remote == sp or context_remote.startswith(sp + "/")
+            for sp in sync_remote_paths
+        )
+        if not matched and sync_dests:
+            result.add(
+                IssueSeverity.WARNING, "docker_build",
+                f"Step '{sid}' docker build uses remote context '{context}' "
+                f"that doesn't match any sync destination",
+                sid,
+                suggestion=f"Sync destinations: {', '.join(sorted(sync_dests))} — verify context path.",
+            )
+        if not dockerfile or not matched:
+            return
+        local_src = match_local_src(sync_mappings, context_clean)
+        if not local_src:
+            return
+        local_df = resolve_local_dockerfile(local_src, dockerfile, base_dir)
+        if local_df is not None and not local_df.exists():
+            result.add(
+                IssueSeverity.ERROR,
+                "docker_build",
+                f"Step '{sid}' Dockerfile '{dockerfile}' not found in synced local source '{local_src}'",
+                sid,
+                suggestion=f"Ensure {dockerfile} exists under {local_src} before sync/build.",
+            )

redeploy-0.2.76/redeploy/analyze/checkers/env.py

@@ -0,0 +1,23 @@
+"""Environment file checkers."""
+from __future__ import annotations
+
+from pathlib import Path
+
+from ..models import AnalysisResult, IssueSeverity
+from .base import Checker
+
+
+class EnvFileChecker(Checker):
+    """Check that .env referenced by target.env_file exists."""
+
+    def check(self, spec, document, base_dir, result):
+        ef = spec.target.env_file or spec.source.env_file
+        if not ef:
+            return
+        path = base_dir / ef if not ef.startswith("/") else Path(ef)
+        if not path.exists():
+            result.add(
+                IssueSeverity.ERROR, "env",
+                f"env_file not found: {ef}",
+                suggestion=f"Create {path} or correct env_file path.",
+            )