@agentxm/client-core 0.2.0 → 0.3.2

package/dist/src/unstable/lint/cli.d.ts

@@ -0,0 +1,297 @@
+/**
+ * Lint runner — the reusable core of `axm lint`.
+ *
+ * The `axm lint` CLI command file is a thin surface over flag parsing and
+ * rendering; the logic that evaluates rule catalogs, renders findings, detects
+ * publish-gate drift, and (under `--fix`) composes the autofix plan lives in
+ * this module.
+ *
+ * Phase 5 entry points (see `openspec/changes/add-lint-engine/tasks.md`):
+ *
+ * - {@link evaluateAllCatalogs}         — concurrent evaluation of the three
+ *   v1 rule catalogs against pre-built contexts.
+ * - {@link summarizeEvaluations}        — group, count, and derive the exit
+ *   category from raw `Evaluated<*>` lists.
+ * - {@link detectPublishGateDrift}      — compute whether the configured
+ *   `LintConfig` weakens any `skill/*` / `pack/*` platform-default-`error`
+ *   rule (task 5.7).
+ * - {@link renderFindingsText}          — finding-first human renderer (task
+ *   5.6).
+ * - {@link toLintJsonDocument}          — `--json` document shape (task 5.6).
+ * - {@link resolveLintExitCategory}     — exit-code contract evaluator (task
+ *   5.9).
+ *
+ * Lint-intent → canonical `Operation` adapter composition happens in the CLI
+ * handler (`packages/cli/src/root/lint/handler.ts`), which re-resolves each
+ * intent's `source` via the `resolveConfigured*` helpers and hands the
+ * resulting canonical Operation to the per-extension plan-step builder. The
+ * runner here stays accessor-free.
+ *
+ * @experimental This API is unstable and may change without notice.
+ * @packageDocumentation
+ */
+import * as Effect from "effect/Effect";
+import type { LintConfig } from "./config.js";
+import { platformCanonicalLintConfig } from "./config.js";
+import type { Evaluated } from "./evaluate.js";
+import type { PackRuleContext, SkillRuleContext, WorkspaceRuleContext } from "./context.js";
+import type { AutofixingRule, LintFinding, Severity } from "./rule.js";
+/**
+ * A single finding annotated with the context that produced it.
+ *
+ * `displayRoot` carries the context's rendering root; `path` is the
+ * pre-composed display path for the finding so consumers (text / JSON /
+ * summary logs) don't re-derive it.
+ *
+ * @experimental This API is unstable and may change without notice.
+ */
+export interface RenderedFinding {
+    readonly group: "skill" | "pack" | "workspace";
+    readonly displayRoot: string;
+    readonly path: string;
+    readonly finding: LintFinding;
+}
+/**
+ * Per-group evaluation result. The raw `Evaluated<*>` list is retained so
+ * downstream consumers (render, JSON emitter, `collectFixOperations`) can
+ * walk evaluations without re-running rules.
+ *
+ * @experimental This API is unstable and may change without notice.
+ */
+export interface GroupEvaluations {
+    readonly skills: ReadonlyArray<Evaluated<SkillRuleContext>>;
+    readonly packs: ReadonlyArray<Evaluated<PackRuleContext>>;
+    readonly workspace: ReadonlyArray<Evaluated<WorkspaceRuleContext>>;
+}
+/**
+ * Aggregate counts across all emitted findings.
+ *
+ * `total` === `errors + warnings + infos` — info findings participate in
+ * rendering and in the JSON envelope, but never influence exit code.
+ *
+ * @experimental This API is unstable and may change without notice.
+ */
+export interface FindingCounts {
+    readonly total: number;
+    readonly errors: number;
+    readonly warnings: number;
+    readonly infos: number;
+}
+/**
+ * Possible exit-code categories for `axm lint`.
+ *
+ * - `"clean"` — zero findings, or only info-severity findings; zero exit.
+ * - `"warnings"` — at least one warning, no errors; non-zero only when
+ *   `--strict` is set (see {@link resolveLintExitCategory}).
+ * - `"errors"` — at least one error; non-zero exit regardless of flags.
+ *
+ * @experimental This API is unstable and may change without notice.
+ */
+export type LintExitCategory = "clean" | "warnings" | "errors";
+/**
+ * Build the three v1 evaluation groups concurrently.
+ *
+ * The evaluator is a pure `Effect.Effect<ReadonlyArray<Evaluated<C>>>`; this
+ * helper simply hands the three catalogs to `Effect.all` with unbounded
+ * concurrency so catalog evaluations run in parallel but findings stay in
+ * stable catalog order inside each group.
+ *
+ * @experimental This API is unstable and may change without notice.
+ */
+export declare const evaluateAllCatalogs: (args: {
+    readonly skillContexts: ReadonlyArray<SkillRuleContext>;
+    readonly packContexts: ReadonlyArray<PackRuleContext>;
+    readonly workspaceContext: WorkspaceRuleContext;
+    readonly config: LintConfig;
+}) => Effect.Effect<GroupEvaluations>;
+/**
+ * Flatten a {@link GroupEvaluations} triple into a single `RenderedFinding[]`
+ * in stable group-then-catalog order.
+ *
+ * @experimental This API is unstable and may change without notice.
+ */
+export declare const collectRenderedFindings: (evaluations: GroupEvaluations) => ReadonlyArray<RenderedFinding>;
+/**
+ * Count findings by severity across every group.
+ *
+ * @experimental This API is unstable and may change without notice.
+ */
+export declare const countFindings: (findings: ReadonlyArray<RenderedFinding>) => FindingCounts;
+/**
+ * Aggregated summary — counts + derived exit category — computed from a
+ * {@link GroupEvaluations} triple.
+ *
+ * @experimental This API is unstable and may change without notice.
+ */
+export interface LintSummary {
+    readonly findings: ReadonlyArray<RenderedFinding>;
+    readonly counts: FindingCounts;
+    readonly exitCategory: LintExitCategory;
+    readonly driftBanner: ReadonlyArray<string>;
+}
+/**
+ * Derive a full {@link LintSummary} (findings, counts, exit category, drift
+ * banner rule ids) from raw evaluations + the configured severity overrides.
+ *
+ * @experimental This API is unstable and may change without notice.
+ */
+export declare const summarizeEvaluations: (evaluations: GroupEvaluations, config: LintConfig) => LintSummary;
+/**
+ * Translate a {@link LintExitCategory} + `--strict` into the exit-code
+ * policy.
+ *
+ * | Category     | --strict=false | --strict=true |
+ * | ------------ | -------------- | ------------- |
+ * | `"clean"`    | `0`            | `0`           |
+ * | `"warnings"` | `0`            | non-zero      |
+ * | `"errors"`   | non-zero       | non-zero      |
+ *
+ * The return value is a discriminated enum; the CLI handler maps the `"fail"`
+ * branch to its platform exit-code primitive.
+ *
+ * @experimental This API is unstable and may change without notice.
+ */
+export declare const resolveLintExitCategory: (args: {
+    readonly category: LintExitCategory;
+    readonly strict: boolean;
+}) => "success" | "fail";
+/**
+ * Identify every configured `lint.rules` entry that weakens a platform-canonical
+ * `error`-severity `skill/*` or `pack/*` rule.
+ *
+ * The publish gate runs the `skill/*` and `pack/*` catalogs against
+ * {@link platformCanonicalLintConfig}; any workspace override that lowers a
+ * rule in those namespaces from `error` to `off | info | warn` creates a
+ * publish-gate divergence the user should know about (they'll see `error`
+ * findings from the registry that don't appear locally).
+ *
+ * Workspace-only rule weakenings (`workspace/*`) do NOT trigger the banner —
+ * those never reach publish.
+ *
+ * Returns the rule ids that trigger the banner, in catalog order, so the
+ * renderer can produce stable deterministic output.
+ *
+ * @experimental This API is unstable and may change without notice.
+ */
+export declare const detectPublishGateDrift: (config: LintConfig) => ReadonlyArray<string>;
+/**
+ * Input for the human text renderer.
+ *
+ * The `fixSummary` slot is reserved for the trailing `--fix` summary line
+ * (populated after `applyPlan` completes). When `undefined`, no summary is
+ * rendered — the read-only `axm lint` run.
+ *
+ * @experimental This API is unstable and may change without notice.
+ */
+export interface RenderFindingsArgs {
+    readonly summary: LintSummary;
+    readonly fixSummary?: FixSummary;
+}
+/**
+ * Outcome of a `--fix` run; used by the renderer and the JSON emitter.
+ *
+ * @experimental This API is unstable and may change without notice.
+ */
+export interface FixSummary {
+    readonly attempted: number;
+    readonly applied: number;
+    readonly failed: number;
+    readonly warnings: ReadonlyArray<string>;
+}
+/**
+ * Render a finding-first human text report.
+ *
+ * Output shape (one line per entry, grouped first by context type then by
+ * severity within each group):
+ *
+ *     DRIFT: The registry will still block publish on these rules:
+ *       - skill/manifest-schema-valid
+ *
+ *     WORKSPACE
+ *       [error] workspace/lockfile-valid  axm-lock.yaml is missing.  ./axm-lock.yaml
+ *       [warning] workspace/...  ...
+ *
+ *     SKILLS
+ *       [error] ...
+ *
+ *     Summary: 2 errors, 1 warning.
+ *     Applied 3 fixes; 1 warning surfaced from applyPlan.
+ *
+ * @experimental This API is unstable and may change without notice.
+ */
+export declare const renderFindingsText: (args: RenderFindingsArgs) => ReadonlyArray<string>;
+/**
+ * JSON-renderable finding entry used by the `--json` document.
+ *
+ * @experimental This API is unstable and may change without notice.
+ */
+export interface LintJsonFinding {
+    readonly group: "skill" | "pack" | "workspace";
+    readonly kind: "autofixable" | "advisory";
+    readonly ruleId: string;
+    readonly severity: Severity;
+    readonly message: string;
+    readonly displayRoot: string;
+    readonly path: string;
+    readonly location?: {
+        readonly file: string;
+        readonly line?: number;
+        readonly column?: number;
+    };
+    readonly suggestions: ReadonlyArray<string>;
+}
+/**
+ * JSON envelope shape returned under `axm lint --json`.
+ *
+ * Mirrors the design doc §9 envelope for the CLI and matches the registry
+ * publish failure envelope structure (`findings[]`, `displayRoot` per entry,
+ * per-finding `path` pre-composed). `--fix` runs add a `fix` summary block.
+ *
+ * @experimental This API is unstable and may change without notice.
+ */
+export interface LintJsonDocument {
+    readonly findings: ReadonlyArray<LintJsonFinding>;
+    readonly summary: {
+        readonly total: number;
+        readonly errors: number;
+        readonly warnings: number;
+        readonly infos: number;
+        readonly exitCategory: LintExitCategory;
+    };
+    readonly driftBanner: ReadonlyArray<string>;
+    readonly fix?: {
+        readonly attempted: number;
+        readonly applied: number;
+        readonly failed: number;
+        readonly warnings: ReadonlyArray<string>;
+    };
+}
+/**
+ * Build the `--json` document from a {@link LintSummary} (+ optional fix
+ * summary).
+ *
+ * @experimental This API is unstable and may change without notice.
+ */
+export declare const toLintJsonDocument: (args: {
+    readonly summary: LintSummary;
+    readonly fixSummary?: FixSummary;
+}) => LintJsonDocument;
+/**
+ * Walk workspace evaluations (the only v1 namespace that ships
+ * `AutofixingRule`s) and return the set of `(rule, finding, context)` triples
+ * the CLI handler can dispatch on to produce canonical Operations.
+ *
+ * The returned triples point at the already-evaluated `AutofixableFinding`
+ * values so the renderer and the fix pipeline share a single source of truth.
+ *
+ * @experimental This API is unstable and may change without notice.
+ */
+export declare const collectAutofixableEntries: (evaluations: GroupEvaluations) => ReadonlyArray<{
+    readonly rule: AutofixingRule<WorkspaceRuleContext>;
+    readonly context: WorkspaceRuleContext;
+    readonly finding: LintFinding & {
+        readonly kind: "autofixable";
+    };
+}>;
+export { platformCanonicalLintConfig };
+//# sourceMappingURL=cli.d.ts.map

package/dist/src/unstable/lint/cli.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cli.d.ts","sourceRoot":"","sources":["../../../../src/unstable/lint/cli.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+BG;AAEH,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;AAExC,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAC9C,OAAO,EAAE,2BAA2B,EAAE,MAAM,aAAa,CAAC;AAC1D,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,eAAe,CAAC;AAE/C,OAAO,KAAK,EAAE,eAAe,EAAE,gBAAgB,EAAE,oBAAoB,EAAE,MAAM,cAAc,CAAC;AAC5F,OAAO,KAAK,EAAE,cAAc,EAAE,WAAW,EAAE,QAAQ,EAAE,MAAM,WAAW,CAAC;AAOvE;;;;;;;;GAQG;AACH,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,GAAG,WAAW,CAAC;IAC/C,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,OAAO,EAAE,WAAW,CAAC;CAC/B;AAED;;;;;;GAMG;AACH,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,CAAC,MAAM,EAAE,aAAa,CAAC,SAAS,CAAC,gBAAgB,CAAC,CAAC,CAAC;IAC5D,QAAQ,CAAC,KAAK,EAAE,aAAa,CAAC,SAAS,CAAC,eAAe,CAAC,CAAC,CAAC;IAC1D,QAAQ,CAAC,SAAS,EAAE,aAAa,CAAC,SAAS,CAAC,oBAAoB,CAAC,CAAC,CAAC;CACpE;AAED;;;;;;;GAOG;AACH,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;CACxB;AAED;;;;;;;;;GASG;AACH,MAAM,MAAM,gBAAgB,GAAG,OAAO,GAAG,UAAU,GAAG,QAAQ,CAAC;AAM/D;;;;;;;;;GASG;AACH,eAAO,MAAM,mBAAmB,GAAI,MAAM;IACxC,QAAQ,CAAC,aAAa,EAAE,aAAa,CAAC,gBAAgB,CAAC,CAAC;IACxD,QAAQ,CAAC,YAAY,EAAE,aAAa,CAAC,eAAe,CAAC,CAAC;IACtD,QAAQ,CAAC,gBAAgB,EAAE,oBAAoB,CAAC;IAChD,QAAQ,CAAC,MAAM,EAAE,UAAU,CAAC;CAC7B,KAAG,MAAM,CAAC,MAAM,CAAC,gBAAgB,CAW9B,CAAC;AAqCL;;;;;GAKG;AACH,eAAO,MAAM,uBAAuB,GAClC,aAAa,gBAAgB,KAC5B,aAAa,CAAC,eAAe,CAI/B,CAAC;AAEF;;;;GAIG;AACH,eAAO,MAAM,aAAa,GAAI,UAAU,aAAa,CAAC,eAAe,CAAC,KAAG,aAkBxE,CAAC;AAEF;;;;;GAKG;AACH,MAAM,WAAW,WAAW;IAC1B,QAAQ,CAAC,QAAQ,EAAE,aAAa,CAAC,eAAe,CAAC,CAAC;IAClD,QAAQ,CAAC,MAAM,EAAE,aAAa,CAAC;IAC/B,QAAQ,CAAC,YAAY,EAAE,gBAAgB,CAAC;IACxC,QAAQ,CAAC,WAAW,EAAE,aAAa,CAAC,MAAM,CAAC,CAAC;CAC7C;AAED;;;;;GAKG;AACH,eAAO,MAAM,oBAAoB,GAC/B,aAAa,gBAAgB,EAC7B,QAAQ,UAAU,KACjB,WASF,CAAC;AAgBF;;;;;;;;;;;;;;GAcG;AACH,eAAO,MAAM,uBAAuB,GAAI,MAAM;IAC5C,QAAQ,CAAC,QAAQ,EAAE,gBAAgB,CAAC;IACpC,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAC;CAC1B,KAAG,SAAS,GAAG,MASf,CAAC;AAMF;;;;;;;;;;;;;;;;;GAiBG;AACH,eAAO,MAAM,sBAAsB,GAAI,QAAQ,UAAU,KAAG,aAAa,CAAC,MAAM,CA8B/E,CAAC;AAMF;;;;;;;;GAQG;AACH,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,OAAO,EAAE,WAAW,CAAC;IAC9B,QAAQ,CAAC,UAAU,CAAC,EAAE,UAAU,CAAC;CAClC;AAED;;;;GAIG;AACH,MAAM,WAAW,UAAU;IACzB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,QAAQ,EAAE,aAAa,CAAC,MAAM,CAAC,CAAC;CAC1C;AAED;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,eAAO,MAAM,kBAAkB,GAAI,MAAM,kBAAkB,KAAG,aAAa,CAAC,MAAM,CAoDjF,CAAC;AAyBF;;;;GAIG;AACH,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,GAAG,WAAW,CAAC;IAC/C,QAAQ,CAAC,IAAI,EAAE,aAAa,GAAG,UAAU,CAAC;IAC1C,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,QAAQ,EAAE,QAAQ,CAAC;IAC5B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,QAAQ,CAAC,EAAE;QAClB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;QACtB,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;QACvB,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;KAC1B,CAAC;IACF,QAAQ,CAAC,WAAW,EAAE,aAAa,CAAC,MAAM,CAAC,CAAC;CAC7C;AAED;;;;;;;;GAQG;AACH,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,CAAC,QAAQ,EAAE,aAAa,CAAC,eAAe,CAAC,CAAC;IAClD,QAAQ,CAAC,OAAO,EAAE;QAChB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;QACvB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;QACxB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;QAC1B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;QACvB,QAAQ,CAAC,YAAY,EAAE,gBAAgB,CAAC;KACzC,CAAC;IACF,QAAQ,CAAC,WAAW,EAAE,aAAa,CAAC,MAAM,CAAC,CAAC;IAC5C,QAAQ,CAAC,GAAG,CAAC,EAAE;QACb,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;QAC3B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;QACzB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;QACxB,QAAQ,CAAC,QAAQ,EAAE,aAAa,CAAC,MAAM,CAAC,CAAC;KAC1C,CAAC;CACH;AA0BD;;;;;GAKG;AACH,eAAO,MAAM,kBAAkB,GAAI,MAAM;IACvC,QAAQ,CAAC,OAAO,EAAE,WAAW,CAAC;IAC9B,QAAQ,CAAC,UAAU,CAAC,EAAE,UAAU,CAAC;CAClC,KAAG,gBAyBH,CAAC;AAMF;;;;;;;;;GASG;AACH,eAAO,MAAM,yBAAyB,GACpC,aAAa,gBAAgB,KAC5B,aAAa,CAAC;IACf,QAAQ,CAAC,IAAI,EAAE,cAAc,CAAC,oBAAoB,CAAC,CAAC;IACpD,QAAQ,CAAC,OAAO,EAAE,oBAAoB,CAAC;IACvC,QAAQ,CAAC,OAAO,EAAE,WAAW,GAAG;QAAE,QAAQ,CAAC,IAAI,EAAE,aAAa,CAAA;KAAE,CAAC;CAClE,CAiBA,CAAC;AAMF,OAAO,EAAE,2BAA2B,EAAE,CAAC"}

package/dist/src/unstable/lint/cli.js

@@ -0,0 +1,388 @@
+/**
+ * Lint runner — the reusable core of `axm lint`.
+ *
+ * The `axm lint` CLI command file is a thin surface over flag parsing and
+ * rendering; the logic that evaluates rule catalogs, renders findings, detects
+ * publish-gate drift, and (under `--fix`) composes the autofix plan lives in
+ * this module.
+ *
+ * Phase 5 entry points (see `openspec/changes/add-lint-engine/tasks.md`):
+ *
+ * - {@link evaluateAllCatalogs}         — concurrent evaluation of the three
+ *   v1 rule catalogs against pre-built contexts.
+ * - {@link summarizeEvaluations}        — group, count, and derive the exit
+ *   category from raw `Evaluated<*>` lists.
+ * - {@link detectPublishGateDrift}      — compute whether the configured
+ *   `LintConfig` weakens any `skill/*` / `pack/*` platform-default-`error`
+ *   rule (task 5.7).
+ * - {@link renderFindingsText}          — finding-first human renderer (task
+ *   5.6).
+ * - {@link toLintJsonDocument}          — `--json` document shape (task 5.6).
+ * - {@link resolveLintExitCategory}     — exit-code contract evaluator (task
+ *   5.9).
+ *
+ * Lint-intent → canonical `Operation` adapter composition happens in the CLI
+ * handler (`packages/cli/src/root/lint/handler.ts`), which re-resolves each
+ * intent's `source` via the `resolveConfigured*` helpers and hands the
+ * resulting canonical Operation to the per-extension plan-step builder. The
+ * runner here stays accessor-free.
+ *
+ * @experimental This API is unstable and may change without notice.
+ * @packageDocumentation
+ */
+import * as Effect from "effect/Effect";
+import { composePath } from "./compose-path.js";
+import { platformCanonicalLintConfig } from "./config.js";
+import { evaluateContexts } from "./evaluate.js";
+import { packRules, skillRules, workspaceRules } from "./catalog/index.js";
+// -----------------------------------------------------------------------------
+// Evaluation
+// -----------------------------------------------------------------------------
+/**
+ * Build the three v1 evaluation groups concurrently.
+ *
+ * The evaluator is a pure `Effect.Effect<ReadonlyArray<Evaluated<C>>>`; this
+ * helper simply hands the three catalogs to `Effect.all` with unbounded
+ * concurrency so catalog evaluations run in parallel but findings stay in
+ * stable catalog order inside each group.
+ *
+ * @experimental This API is unstable and may change without notice.
+ */
+export const evaluateAllCatalogs = (args) => Effect.gen(function* () {
+    const [skills, packs, workspace] = yield* Effect.all([
+        evaluateContexts(skillRules, args.skillContexts, args.config),
+        evaluateContexts(packRules, args.packContexts, args.config),
+        evaluateContexts(workspaceRules, [args.workspaceContext], args.config),
+    ], { concurrency: "unbounded" });
+    return { skills, packs, workspace };
+});
+// -----------------------------------------------------------------------------
+// Summary
+// -----------------------------------------------------------------------------
+const severityOrder = (s) => {
+    switch (s) {
+        case "error":
+            return 0;
+        case "warning":
+            return 1;
+        case "info":
+            return 2;
+    }
+};
+const flattenEvaluated = (group, evaluated, getDisplayRoot) => {
+    const out = [];
+    for (const entry of evaluated) {
+        const displayRoot = getDisplayRoot(entry.context);
+        for (const finding of entry.findings) {
+            out.push({
+                group,
+                displayRoot,
+                path: composePath(displayRoot, finding.location),
+                finding,
+            });
+        }
+    }
+    return out;
+};
+/**
+ * Flatten a {@link GroupEvaluations} triple into a single `RenderedFinding[]`
+ * in stable group-then-catalog order.
+ *
+ * @experimental This API is unstable and may change without notice.
+ */
+export const collectRenderedFindings = (evaluations) => [
+    ...flattenEvaluated("skill", evaluations.skills, (c) => c.displayRoot),
+    ...flattenEvaluated("pack", evaluations.packs, (c) => c.displayRoot),
+    ...flattenEvaluated("workspace", evaluations.workspace, (c) => c.displayRoot),
+];
+/**
+ * Count findings by severity across every group.
+ *
+ * @experimental This API is unstable and may change without notice.
+ */
+export const countFindings = (findings) => {
+    let errors = 0;
+    let warnings = 0;
+    let infos = 0;
+    for (const f of findings) {
+        switch (f.finding.severity) {
+            case "error":
+                errors += 1;
+                break;
+            case "warning":
+                warnings += 1;
+                break;
+            case "info":
+                infos += 1;
+                break;
+        }
+    }
+    return { total: findings.length, errors, warnings, infos };
+};
+/**
+ * Derive a full {@link LintSummary} (findings, counts, exit category, drift
+ * banner rule ids) from raw evaluations + the configured severity overrides.
+ *
+ * @experimental This API is unstable and may change without notice.
+ */
+export const summarizeEvaluations = (evaluations, config) => {
+    const findings = collectRenderedFindings(evaluations);
+    const counts = countFindings(findings);
+    return {
+        findings,
+        counts,
+        exitCategory: exitCategoryFromCounts(counts),
+        driftBanner: detectPublishGateDrift(config),
+    };
+};
+const exitCategoryFromCounts = (counts) => {
+    if (counts.errors > 0) {
+        return "errors";
+    }
+    if (counts.warnings > 0) {
+        return "warnings";
+    }
+    return "clean";
+};
+// -----------------------------------------------------------------------------
+// Exit-code contract (task 5.9)
+// -----------------------------------------------------------------------------
+/**
+ * Translate a {@link LintExitCategory} + `--strict` into the exit-code
+ * policy.
+ *
+ * | Category     | --strict=false | --strict=true |
+ * | ------------ | -------------- | ------------- |
+ * | `"clean"`    | `0`            | `0`           |
+ * | `"warnings"` | `0`            | non-zero      |
+ * | `"errors"`   | non-zero       | non-zero      |
+ *
+ * The return value is a discriminated enum; the CLI handler maps the `"fail"`
+ * branch to its platform exit-code primitive.
+ *
+ * @experimental This API is unstable and may change without notice.
+ */
+export const resolveLintExitCategory = (args) => {
+    switch (args.category) {
+        case "errors":
+            return "fail";
+        case "warnings":
+            return args.strict ? "fail" : "success";
+        case "clean":
+            return "success";
+    }
+};
+// -----------------------------------------------------------------------------
+// Drift banner (task 5.7)
+// -----------------------------------------------------------------------------
+/**
+ * Identify every configured `lint.rules` entry that weakens a platform-canonical
+ * `error`-severity `skill/*` or `pack/*` rule.
+ *
+ * The publish gate runs the `skill/*` and `pack/*` catalogs against
+ * {@link platformCanonicalLintConfig}; any workspace override that lowers a
+ * rule in those namespaces from `error` to `off | info | warn` creates a
+ * publish-gate divergence the user should know about (they'll see `error`
+ * findings from the registry that don't appear locally).
+ *
+ * Workspace-only rule weakenings (`workspace/*`) do NOT trigger the banner —
+ * those never reach publish.
+ *
+ * Returns the rule ids that trigger the banner, in catalog order, so the
+ * renderer can produce stable deterministic output.
+ *
+ * @experimental This API is unstable and may change without notice.
+ */
+export const detectPublishGateDrift = (config) => {
+    const overrides = config.rules ?? {};
+    if (Object.keys(overrides).length === 0) {
+        return [];
+    }
+    // Only the `id` and `severity` fields of each rule matter for drift
+    // detection — rule-id snapshotting is public API, and severity is the
+    // platform canonical default the workspace override weakens. The helper
+    // is called against each catalog's concrete rule type so no assertion
+    // is needed to widen the generic parameter.
+    const weakened = [];
+    const visitCatalog = (rules) => {
+        for (const rule of rules) {
+            if (rule.severity !== "error") {
+                continue;
+            }
+            const override = overrides[rule.id];
+            if (override === undefined) {
+                continue;
+            }
+            if (override === "off" || override === "info" || override === "warn") {
+                weakened.push(rule.id);
+            }
+        }
+    };
+    visitCatalog(skillRules);
+    visitCatalog(packRules);
+    return weakened;
+};
+/**
+ * Render a finding-first human text report.
+ *
+ * Output shape (one line per entry, grouped first by context type then by
+ * severity within each group):
+ *
+ *     DRIFT: The registry will still block publish on these rules:
+ *       - skill/manifest-schema-valid
+ *
+ *     WORKSPACE
+ *       [error] workspace/lockfile-valid  axm-lock.yaml is missing.  ./axm-lock.yaml
+ *       [warning] workspace/...  ...
+ *
+ *     SKILLS
+ *       [error] ...
+ *
+ *     Summary: 2 errors, 1 warning.
+ *     Applied 3 fixes; 1 warning surfaced from applyPlan.
+ *
+ * @experimental This API is unstable and may change without notice.
+ */
+export const renderFindingsText = (args) => {
+    const lines = [];
+    const { summary, fixSummary } = args;
+    if (summary.driftBanner.length > 0) {
+        lines.push("DRIFT: The registry will still block publish on these rules:");
+        for (const id of summary.driftBanner) {
+            lines.push(`  - ${id}`);
+        }
+        lines.push("");
+    }
+    const groups = [
+        { key: "workspace", label: "WORKSPACE" },
+        { key: "skill", label: "SKILLS" },
+        { key: "pack", label: "PACKS" },
+    ];
+    for (const group of groups) {
+        const inGroup = summary.findings.filter((f) => f.group === group.key);
+        if (inGroup.length === 0) {
+            continue;
+        }
+        const sorted = [...inGroup].sort((a, b) => severityOrder(a.finding.severity) - severityOrder(b.finding.severity));
+        lines.push(group.label);
+        for (const entry of sorted) {
+            lines.push(`  [${entry.finding.severity}] ${entry.finding.ruleId}  ${entry.finding.message}  ${entry.path}`);
+        }
+        lines.push("");
+    }
+    if (summary.findings.length === 0 && summary.driftBanner.length === 0) {
+        lines.push("No findings.");
+    }
+    else {
+        lines.push(formatCountsSentence(summary.counts));
+    }
+    if (fixSummary !== undefined) {
+        lines.push(formatFixSummary(fixSummary));
+        for (const warning of fixSummary.warnings) {
+            lines.push(`  warning: ${warning}`);
+        }
+    }
+    return lines;
+};
+const formatCountsSentence = (counts) => {
+    const parts = [];
+    parts.push(`${counts.errors} ${pluralize(counts.errors, "error", "errors")}`);
+    parts.push(`${counts.warnings} ${pluralize(counts.warnings, "warning", "warnings")}`);
+    if (counts.infos > 0) {
+        parts.push(`${counts.infos} ${pluralize(counts.infos, "info", "infos")}`);
+    }
+    return `Summary: ${parts.join(", ")}.`;
+};
+const formatFixSummary = (fix) => {
+    const appliedLabel = pluralize(fix.applied, "fix", "fixes");
+    const warningsLabel = pluralize(fix.warnings.length, "warning", "warnings");
+    return `Applied ${fix.applied} ${appliedLabel}; ${fix.warnings.length} ${warningsLabel}, ${fix.failed} failed.`;
+};
+const pluralize = (n, singular, plural) => n === 1 ? singular : plural;
+const toJsonFinding = (entry) => {
+    const base = {
+        group: entry.group,
+        kind: entry.finding.kind,
+        ruleId: entry.finding.ruleId,
+        severity: entry.finding.severity,
+        message: entry.finding.message,
+        displayRoot: entry.displayRoot,
+        path: entry.path,
+        suggestions: [...entry.finding.suggestions],
+    };
+    if (entry.finding.location === undefined) {
+        return base;
+    }
+    const loc = {
+        file: entry.finding.location.file,
+        ...(entry.finding.location.line !== undefined ? { line: entry.finding.location.line } : {}),
+        ...(entry.finding.location.column !== undefined
+            ? { column: entry.finding.location.column }
+            : {}),
+    };
+    return { ...base, location: loc };
+};
+/**
+ * Build the `--json` document from a {@link LintSummary} (+ optional fix
+ * summary).
+ *
+ * @experimental This API is unstable and may change without notice.
+ */
+export const toLintJsonDocument = (args) => {
+    const { summary, fixSummary } = args;
+    const base = {
+        findings: summary.findings.map(toJsonFinding),
+        summary: {
+            total: summary.counts.total,
+            errors: summary.counts.errors,
+            warnings: summary.counts.warnings,
+            infos: summary.counts.infos,
+            exitCategory: summary.exitCategory,
+        },
+        driftBanner: summary.driftBanner,
+    };
+    if (fixSummary === undefined) {
+        return base;
+    }
+    return {
+        ...base,
+        fix: {
+            attempted: fixSummary.attempted,
+            applied: fixSummary.applied,
+            failed: fixSummary.failed,
+            warnings: fixSummary.warnings,
+        },
+    };
+};
+// -----------------------------------------------------------------------------
+// Autofix rule surface (helper for the CLI handler)
+// -----------------------------------------------------------------------------
+/**
+ * Walk workspace evaluations (the only v1 namespace that ships
+ * `AutofixingRule`s) and return the set of `(rule, finding, context)` triples
+ * the CLI handler can dispatch on to produce canonical Operations.
+ *
+ * The returned triples point at the already-evaluated `AutofixableFinding`
+ * values so the renderer and the fix pipeline share a single source of truth.
+ *
+ * @experimental This API is unstable and may change without notice.
+ */
+export const collectAutofixableEntries = (evaluations) => {
+    const out = [];
+    for (const entry of evaluations.workspace) {
+        if (entry.rule.kind !== "autofixing") {
+            continue;
+        }
+        for (const finding of entry.findings) {
+            if (finding.kind === "autofixable") {
+                out.push({ rule: entry.rule, context: entry.context, finding });
+            }
+        }
+    }
+    return out;
+};
+// -----------------------------------------------------------------------------
+// Re-exports that CLI callers use alongside the runner
+// -----------------------------------------------------------------------------
+export { platformCanonicalLintConfig };
+//# sourceMappingURL=cli.js.map