@agentxm/workspace-lint 0.28.4 → 0.28.5

package/dist/src/catalog/index.d.ts

@@ -1,30 +1,15 @@
 /**
- * Catalog barrel — aggregates the per-namespace rule catalogs for consumers
- * that want the full v1 rule set.
- *
- * Phase 3a lands `skillRules`; Phase 3b lands `packRules`; Phase 3c will
- * append `workspaceRules` without touching existing imports.
- *
- * `allCatalogRuleIds` is the concatenation used by the rule-id snapshot test
- * (`./rule-ids.snapshot.test.ts`). Per-catalog consumers (registry publish,
- * `axm lint`) should import the specific catalog they need so the other
- * catalogs tree-shake out.
+ * Complete executable lint catalog and its observable metadata.
  *
  * @experimental This API is unstable and may change without notice.
  * @packageDocumentation
  */
+import type { LintCatalogRuleMetadata } from "@agentxm/registry-protocol/unstable/lint/catalog-metadata";
 export { liveOnlyWorkspaceRules, repositoryWorkspaceRules, workspaceRules } from "./workspace.js";
 export { buildLintWorkspace, buildNativeInstalledSkillInfo, buildAcquiredInstalledSkillInfo, buildInstalledPackInfo, acquiredSkillDisplayRoot, registryNativeSkillDisplayRoot, registryPackDisplayRoot, type BuildLintWorkspaceArgs, type BuildInstalledPackInfoArgs, type BuildAcquiredInstalledSkillInfoArgs, type BuildInstalledSkillInfoNativeArgs, type LintWorkspace, type LintWorkspaceView, } from "./workspace-read-model/lint-workspace.js";
-/**
- * Concatenated rule-id array across every currently-exported catalog, in the
- * order catalogs were introduced (Phase 3a: `skillRules`; Phase 3b:
- * `packRules`; Phase 3c: `workspaceRules`).
- *
- * Used by the rule-id snapshot test; production callers should not depend on
- * this value.
- *
- * @experimental This API is unstable and may change without notice.
- */
+/** Metadata derived from the executable rules and their view catalogs. */
+export declare const allCatalogRuleMetadata: ReadonlyArray<LintCatalogRuleMetadata>;
+/** Every executable lint-rule identity, in catalog/reporting order. */
 export declare const allCatalogRuleIds: ReadonlyArray<string>;
 /** Error-severity rule identities that require an exhaustive recovery contract. */
 export declare const allCatalogErrorRuleIds: ReadonlyArray<string>;

package/dist/src/catalog/index.js

@@ -1,14 +1,5 @@
 /**
- * Catalog barrel — aggregates the per-namespace rule catalogs for consumers
- * that want the full v1 rule set.
- *
- * Phase 3a lands `skillRules`; Phase 3b lands `packRules`; Phase 3c will
- * append `workspaceRules` without touching existing imports.
- *
- * `allCatalogRuleIds` is the concatenation used by the rule-id snapshot test
- * (`./rule-ids.snapshot.test.ts`). Per-catalog consumers (registry publish,
- * `axm lint`) should import the specific catalog they need so the other
- * catalogs tree-shake out.
+ * Complete executable lint catalog and its observable metadata.
  *
  * @experimental This API is unstable and may change without notice.
  * @packageDocumentation
@@ -21,40 +12,39 @@ import { hookRules } from "@agentxm/registry-protocol/unstable/lint/catalog/hook
 import { ruleRules } from "@agentxm/registry-protocol/unstable/lint/catalog/rule";
 import { knowledgeRules } from "@agentxm/registry-protocol/unstable/lint/catalog/knowledge";
 import { workspaceRules } from "./workspace.js";
+import { repositoryWorkspaceRules } from "./workspace.js";
 export { liveOnlyWorkspaceRules, repositoryWorkspaceRules, workspaceRules } from "./workspace.js";
-// Phase 3c workspace read-model builder helpers.
+// Workspace read-model builder helpers.
 export { buildLintWorkspace, buildNativeInstalledSkillInfo, buildAcquiredInstalledSkillInfo, buildInstalledPackInfo, acquiredSkillDisplayRoot, registryNativeSkillDisplayRoot, registryPackDisplayRoot, } from "./workspace-read-model/lint-workspace.js";
-/**
- * Concatenated rule-id array across every currently-exported catalog, in the
- * order catalogs were introduced (Phase 3a: `skillRules`; Phase 3b:
- * `packRules`; Phase 3c: `workspaceRules`).
- *
- * Used by the rule-id snapshot test; production callers should not depend on
- * this value.
- *
- * @experimental This API is unstable and may change without notice.
- */
-export const allCatalogRuleIds = [
-    ...skillRules.map((r) => r.id),
-    ...packRules.map((r) => r.id),
-    ...subagentRules.map((r) => r.id),
-    ...mcpServerRules.map((r) => r.id),
-    ...hookRules.map((r) => r.id),
-    ...ruleRules.map((r) => r.id),
-    ...knowledgeRules.map((r) => r.id),
-    ...workspaceRules.map((r) => r.id),
-];
+const repositoryViews = Object.freeze(["workspace", "git-index"]);
+const liveWorkspaceView = Object.freeze(["workspace"]);
+const describeRules = (group, rules, views) => rules.map((rule) => ({
+    id: rule.id,
+    defaultSeverity: rule.severity,
+    group,
+    views,
+}));
+const repositoryWorkspaceRuleIds = new Set(repositoryWorkspaceRules.map((rule) => rule.id));
+/** Metadata derived from the executable rules and their view catalogs. */
+export const allCatalogRuleMetadata = Object.freeze([
+    ...describeRules("skill", skillRules, repositoryViews),
+    ...describeRules("pack", packRules, repositoryViews),
+    ...describeRules("subagent", subagentRules, repositoryViews),
+    ...describeRules("mcp-server", mcpServerRules, repositoryViews),
+    ...describeRules("hook", hookRules, repositoryViews),
+    ...describeRules("rule", ruleRules, repositoryViews),
+    ...describeRules("knowledge", knowledgeRules, repositoryViews),
+    ...workspaceRules.map((rule) => ({
+        id: rule.id,
+        defaultSeverity: rule.severity,
+        group: "workspace",
+        views: repositoryWorkspaceRuleIds.has(rule.id) ? repositoryViews : liveWorkspaceView,
+    })),
+]);
+/** Every executable lint-rule identity, in catalog/reporting order. */
+export const allCatalogRuleIds = Object.freeze(allCatalogRuleMetadata.map((entry) => entry.id));
 /** Error-severity rule identities that require an exhaustive recovery contract. */
-export const allCatalogErrorRuleIds = [
-    ...skillRules,
-    ...packRules,
-    ...subagentRules,
-    ...mcpServerRules,
-    ...hookRules,
-    ...ruleRules,
-    ...knowledgeRules,
-    ...workspaceRules,
-]
-    .filter((rule) => rule.severity === "error")
-    .map((rule) => rule.id);
+export const allCatalogErrorRuleIds = Object.freeze(allCatalogRuleMetadata
+    .filter((entry) => entry.defaultSeverity === "error")
+    .map((entry) => entry.id));
 //# sourceMappingURL=index.js.map

package/dist/src/catalog/workspace/agents-detected-declared.js

@@ -42,11 +42,15 @@ export const agentsDetectedDeclaredRule = {
             return EMPTY_ADVISORY_FINDINGS;
         }
         const detected = yield* scoped.agents.detected;
+        const outputs = context.agentOutputs === undefined ? undefined : yield* context.agentOutputs;
         const findings = [];
         for (const detection of detected) {
             if (detection.status !== "unmanaged-present") {
                 continue;
             }
+            if (outputs?.outputs.some((output) => output.ownership === "owned" && output.claimantAgentIds.includes(detection.agentId)) === true) {
+                continue;
+            }
             findings.push({
                 kind: "advisory",
                 ruleId: RULE_ID,

package/dist/src/catalog/workspace/agents-projections-stale.d.ts

@@ -0,0 +1,5 @@
+/** `workspace/agents-projections-stale` — AXM-owned agent output has no desired claimant. */
+import type { WorkspaceRuleContext } from "../../workspace-context.js";
+import type { AdvisoryRule } from "@agentxm/registry-protocol/unstable/lint/rule";
+export declare const agentsProjectionsStaleRule: AdvisoryRule<WorkspaceRuleContext>;
+//# sourceMappingURL=agents-projections-stale.d.ts.map

package/dist/src/catalog/workspace/agents-projections-stale.js

@@ -0,0 +1,20 @@
+/** `workspace/agents-projections-stale` — AXM-owned agent output has no desired claimant. */
+import * as Effect from "effect/Effect";
+import { EMPTY_ADVISORY_FINDINGS } from "./helpers/empty.js";
+const RULE_ID = "workspace/agents-projections-stale";
+export const agentsProjectionsStaleRule = {
+    id: RULE_ID,
+    description: "AXM-owned agent projections have a desired claimant and expected unit name.",
+    kind: "advisory",
+    severity: "warning",
+    check: (context) => context.agentOutputs === undefined
+        ? Effect.succeed(EMPTY_ADVISORY_FINDINGS)
+        : context.agentOutputs.pipe(Effect.map((inventory) => inventory.ownedResidue.map((output) => ({
+            kind: "advisory",
+            ruleId: RULE_ID,
+            severity: "warning",
+            message: `AXM-owned ${output.extensionType} projection '${output.entryName}' is no longer desired.`,
+            location: { file: output.path },
+        })))),
+};
+//# sourceMappingURL=agents-projections-stale.js.map

package/dist/src/catalog/workspace/axm-skill-compatible.js

@@ -1,4 +1,5 @@
 import * as Effect from "effect/Effect";
+import * as Option from "effect/Option";
 import * as Result from "effect/Result";
 import { formatAxmSkillCompatibilityTarget } from "@agentxm/extension-workspace";
 import { canonicalDisplayRoot } from "./display-paths.js";
@@ -28,7 +29,9 @@ export const axmSkillCompatibleRule = {
                 },
             ];
         }
-        const compatibility = compatibilityResult.success;
+        if (Option.isNone(compatibilityResult.success))
+            return EMPTY_ADVISORY_FINDINGS;
+        const compatibility = compatibilityResult.success.value;
         if (compatibility.status === "compatible")
             return EMPTY_ADVISORY_FINDINGS;
         const recovery = compatibility.recovery.nextAction;

package/dist/src/catalog/workspace/axm-skill-declared.d.ts

@@ -0,0 +1,4 @@
+import type { AdvisoryRule } from "@agentxm/registry-protocol/unstable/lint/rule";
+import type { WorkspaceRuleContext } from "../../workspace-context.js";
+export declare const axmSkillDeclaredRule: AdvisoryRule<WorkspaceRuleContext>;
+//# sourceMappingURL=axm-skill-declared.d.ts.map

package/dist/src/catalog/workspace/axm-skill-declared.js

@@ -0,0 +1,29 @@
+import * as Effect from "effect/Effect";
+import * as Option from "effect/Option";
+import * as Result from "effect/Result";
+import { EMPTY_ADVISORY_FINDINGS } from "./helpers/empty.js";
+const RULE_ID = "workspace/axm-skill-declared";
+export const axmSkillDeclaredRule = {
+    id: RULE_ID,
+    description: "The workspace declares the official AXM skill.",
+    kind: "advisory",
+    severity: "info",
+    check: (context) => Effect.gen(function* () {
+        if (context.axmSkillCompatibility === undefined)
+            return EMPTY_ADVISORY_FINDINGS;
+        const compatibilityResult = yield* Effect.result(context.axmSkillCompatibility);
+        if (Result.isFailure(compatibilityResult) || Option.isSome(compatibilityResult.success)) {
+            return EMPTY_ADVISORY_FINDINGS;
+        }
+        return [
+            {
+                kind: "advisory",
+                ruleId: RULE_ID,
+                severity: "info",
+                message: "This workspace does not declare the official AXM skill. Install it with `axm skills install @agentxm/skills/axm --bundled`.",
+                location: { file: "axm.json" },
+            },
+        ];
+    }),
+};
+//# sourceMappingURL=axm-skill-declared.js.map

package/dist/src/catalog/workspace/mcps-shared-target-compatible.js

@@ -2,6 +2,7 @@ import * as Effect from "effect/Effect";
 import * as Option from "effect/Option";
 import * as Result from "effect/Result";
 import { inferInlineRemoteTransport, resolveSharedMcpTarget, groupConfiguredMcpTargets, } from "@agentxm/extension-workspace";
+import { isMcpServerApplicableToAgent } from "@agentxm/workspace-state";
 import { settingsDisplayPath } from "./display-paths.js";
 const RULE_ID = "workspace/mcps-shared-target-compatible";
 const transportFor = (entry) => {
@@ -45,6 +46,19 @@ export const mcpServerSharedTargetCompatibleRule = {
             if (transport === undefined)
                 return [];
             return groups.flatMap((group) => {
+                const applicableAgentIds = group.members
+                    .filter((member) => isMcpServerApplicableToAgent(entry, member.agentId))
+                    .map((member) => member.agentId);
+                if (applicableAgentIds.length === 0)
+                    return [];
+                if (applicableAgentIds.length < group.members.length) {
+                    const untargetedAgentIds = group.members
+                        .filter((member) => !isMcpServerApplicableToAgent(entry, member.agentId))
+                        .map((member) => member.agentId);
+                    return [
+                        findingFor(serverName, group.path, `MCP target policy cannot be represented; targeted agents ${applicableAgentIds.join(", ")} share it with untargeted agents ${untargetedAgentIds.join(", ")}.`, settingsDisplayPath(context.subject.scope)),
+                    ];
+                }
                 const resolution = resolveSharedMcpTarget({ members: group.members, transport });
                 return resolution._tag === "conflict"
                     ? [

package/dist/src/catalog/workspace/packs-dependencies-resolved.js

@@ -29,10 +29,15 @@ export const packsDependenciesResolvedRule = {
         };
         const findings = [];
         for (const node of graphResult.success.nodes) {
+            const hasAcceptedResolution = node.type === "mcp-server"
+                ? lockedNames["mcp-server"].has(node.identity)
+                : node.type === "pack"
+                    ? false
+                    : lockedNames[node.type].has(node.name);
             if (node.type === "pack" ||
                 node.identity.startsWith("workspace:") ||
                 !node.origins.some((origin) => origin.type === "pack") ||
-                lockedNames[node.type].has(node.name)) {
+                hasAcceptedResolution) {
                 continue;
             }
             findings.push({

package/dist/src/catalog/workspace/projection-ownership-valid.d.ts

@@ -0,0 +1,10 @@
+import { type ProjectionInvariantFact } from "@agentxm/extension-workspace";
+import type { WorkspaceRuleContext } from "../../workspace-context.js";
+import type { AdvisoryRule, LintFinding } from "@agentxm/registry-protocol/unstable/lint/rule";
+/**
+ * Formatting and body edits are not lint concerns for generated documents.
+ * Report only ownership proof that AXM cannot safely interpret or replace.
+ */
+export declare const projectionOwnershipValidRule: AdvisoryRule<WorkspaceRuleContext>;
+export declare const findingsForProjectionOwnership: (facts: ReadonlyArray<ProjectionInvariantFact>) => ReadonlyArray<LintFinding>;
+//# sourceMappingURL=projection-ownership-valid.d.ts.map

package/dist/src/catalog/workspace/projection-ownership-valid.js

@@ -0,0 +1,27 @@
+import * as Effect from "effect/Effect";
+import { projectionFactHasInvalidOwnership, } from "@agentxm/extension-workspace";
+import { EMPTY_LINT_FINDINGS } from "./helpers/empty.js";
+const RULE_ID = "workspace/projection-ownership-valid";
+/**
+ * Formatting and body edits are not lint concerns for generated documents.
+ * Report only ownership proof that AXM cannot safely interpret or replace.
+ */
+export const projectionOwnershipValidRule = {
+    id: RULE_ID,
+    description: "AXM-managed projections carry valid, supported ownership proof.",
+    kind: "advisory",
+    severity: "error",
+    check: (context) => Effect.gen(function* () {
+        if (context.projections === undefined)
+            return EMPTY_LINT_FINDINGS;
+        return findingsForProjectionOwnership(yield* context.projections.facts);
+    }),
+};
+export const findingsForProjectionOwnership = (facts) => facts.filter(projectionFactHasInvalidOwnership).map((fact) => ({
+    kind: "advisory",
+    ruleId: RULE_ID,
+    severity: "error",
+    message: fact.observation.message ??
+        `The AXM ownership proof at ${fact.subject.path} is invalid or unsupported.`,
+}));
+//# sourceMappingURL=projection-ownership-valid.js.map

package/dist/src/catalog/workspace/source-endpoints-aligned.js

@@ -10,8 +10,8 @@ const lockedEntries = (lockfile) => [
         extension: `skill:${name}`,
         entry,
     })),
-    ...Object.entries(lockfile.mcpServers ?? {}).map(([name, entry]) => ({
-        extension: `mcp-server:${name}`,
+    ...Object.values(lockfile.mcpServers ?? {}).map((entry) => ({
+        extension: `mcp-server:${entry.workspaceName}`,
         entry,
     })),
     ...Object.entries(lockfile.subagents ?? {}).map(([name, entry]) => ({

package/dist/src/catalog/workspace.d.ts

@@ -1,38 +1,10 @@
 /**
- * `workspace/*` rule catalog — the v1 rule set.
+ * Executable `workspace/*` rule catalog.
  *
- * Per the lint design, `axm lint` (locally only —
- * never publish) runs exactly these rules against each workspace read model.
- * Rules are grouped by classification invariant — foundation first, then
- * one group per invariant that install-family rules enforce:
- *
- * | ID                                      | Severity | Autofix     |
- * | --------------------------------------- | -------- | ----------- |
- * | `workspace/initialized`                 | error    | —           |
- * | `workspace/settings-schema-valid`       | error    | —           |
- * | `workspace/settings-keys-recognized`    | error    | —           |
- * | `workspace/lockfile-valid`              | error    | autofixing  |
- * | `workspace/desired-state-reconcilable`  | error    | —           |
- * | `workspace/agents-recognized`           | error    | —           |
- * | `workspace/agents-detected-declared`    | warning  | —           |
- * | `workspace/skills-declarations-valid`   | error    | —           |
- * | `workspace/packs-declarations-valid`    | error    | —           |
- * | `workspace/knowledge-state-valid`       | error    | —           |
- * | `workspace/skills-lockfile-aligned`     | error    | autofixing  |
- * | `workspace/skills-integrity-valid`      | error    | autofixing  |
- * | `workspace/skills-artifacts-correct`    | error    | autofixing  |
- * | `workspace/skills-managed`              | error    | —           |
- * | `workspace/packs-dependencies-resolved` | error    | —           |
- * | `workspace/recommended-packs-retained`  | warning  | —           |
- *
- * Autofix rides per-extension Operations only (§6). No `editFile`,
- * `writeFile`, or `syncWorkspace()` reference — arms whose remediation can't
- * be expressed in the operation vocabulary ship as `AdvisoryFinding` with a
- * CLI suggestion instead.
- *
- * Rule ids are **registered with the lint config allowlist at module-load
- * time**, so importing this catalog extends the set of accepted
- * `axm.json` `lint.rules` keys.
+ * Rules are ordered for deterministic reporting and partitioned positively by
+ * the evidence available in repository and live-workspace views. Identity,
+ * default severity, and view membership are specified in the static catalog
+ * metadata and checked against these executable values.
  *
  * @experimental This API is unstable and may change without notice.
  * @packageDocumentation
@@ -40,13 +12,9 @@
 import type { LintRule } from "@agentxm/registry-protocol/unstable/lint/rule";
 import type { WorkspaceRuleContext } from "../workspace-context.js";
 /**
- * Ordered v1 `workspace/*` rule catalog. Declaration order is the evaluation
- * order within a single `evaluateContexts` call (deterministic ordering is
- * test-observable; see `evaluate.ts`). The catalog groups foundation rules
- * first, then install-family rules by classification invariant: declaration
- * validity, lockfile alignment, integrity, artifact correctness, the
- * unmanaged-class-empty check, pack dependency resolution, and implicit
- * retention.
+ * Ordered repository-safe `workspace/*` rule catalog. Declaration order is
+ * the evaluation order within a single `evaluateContexts` call. It groups
+ * foundation rules first, then install-family rules by invariant.
  *
  * @experimental This API is unstable and may change without notice.
  */

package/dist/src/catalog/workspace.js

@@ -1,54 +1,26 @@
 /**
- * `workspace/*` rule catalog — the v1 rule set.
+ * Executable `workspace/*` rule catalog.
  *
- * Per the lint design, `axm lint` (locally only —
- * never publish) runs exactly these rules against each workspace read model.
- * Rules are grouped by classification invariant — foundation first, then
- * one group per invariant that install-family rules enforce:
- *
- * | ID                                      | Severity | Autofix     |
- * | --------------------------------------- | -------- | ----------- |
- * | `workspace/initialized`                 | error    | —           |
- * | `workspace/settings-schema-valid`       | error    | —           |
- * | `workspace/settings-keys-recognized`    | error    | —           |
- * | `workspace/lockfile-valid`              | error    | autofixing  |
- * | `workspace/desired-state-reconcilable`  | error    | —           |
- * | `workspace/agents-recognized`           | error    | —           |
- * | `workspace/agents-detected-declared`    | warning  | —           |
- * | `workspace/skills-declarations-valid`   | error    | —           |
- * | `workspace/packs-declarations-valid`    | error    | —           |
- * | `workspace/knowledge-state-valid`       | error    | —           |
- * | `workspace/skills-lockfile-aligned`     | error    | autofixing  |
- * | `workspace/skills-integrity-valid`      | error    | autofixing  |
- * | `workspace/skills-artifacts-correct`    | error    | autofixing  |
- * | `workspace/skills-managed`              | error    | —           |
- * | `workspace/packs-dependencies-resolved` | error    | —           |
- * | `workspace/recommended-packs-retained`  | warning  | —           |
- *
- * Autofix rides per-extension Operations only (§6). No `editFile`,
- * `writeFile`, or `syncWorkspace()` reference — arms whose remediation can't
- * be expressed in the operation vocabulary ship as `AdvisoryFinding` with a
- * CLI suggestion instead.
- *
- * Rule ids are **registered with the lint config allowlist at module-load
- * time**, so importing this catalog extends the set of accepted
- * `axm.json` `lint.rules` keys.
+ * Rules are ordered for deterministic reporting and partitioned positively by
+ * the evidence available in repository and live-workspace views. Identity,
+ * default severity, and view membership are specified in the static catalog
+ * metadata and checked against these executable values.
  *
  * @experimental This API is unstable and may change without notice.
  * @packageDocumentation
  */
-import { registerLintRuleIds } from "@agentxm/registry-protocol/unstable/lint/config";
 import { initializedRule } from "./workspace/initialized.js";
 import { settingsSchemaValidRule } from "./workspace/settings-schema-valid.js";
 import { settingsKeysRecognizedRule } from "./workspace/settings-keys-recognized.js";
 import { lockfileValidRule } from "./workspace/lockfile-valid.js";
 import { agentsRecognizedRule } from "./workspace/agents-recognized.js";
 import { agentsDetectedDeclaredRule } from "./workspace/agents-detected-declared.js";
+import { agentsProjectionsStaleRule } from "./workspace/agents-projections-stale.js";
 import { instructionsSourcePresentRule } from "./workspace/instructions-source-present.js";
 import { instructionsTargetCurrentRule } from "./workspace/instructions-target-current.js";
 import { instructionsTargetUnownedRule } from "./workspace/instructions-target-unowned.js";
 import { instructionsTargetStaleRule } from "./workspace/instructions-target-stale.js";
-import { projectionsCurrentRule } from "./workspace/projections-current.js";
+import { projectionOwnershipValidRule } from "./workspace/projection-ownership-valid.js";
 import { instructionsAgentSupportedRule } from "./workspace/instructions-agent-supported.js";
 import { instructionsGitignoreCurrentRule } from "./workspace/instructions-gitignore-current.js";
 import { skillsDeclarationsValidRule } from "./workspace/skills-declarations-valid.js";
@@ -65,18 +37,15 @@ import { mcpServerSharedTargetCompatibleRule } from "./workspace/mcps-shared-tar
 import { mcpServerAgentOrphanedRule } from "./workspace/mcps-agent-orphaned.js";
 import { desiredStateReconcilableRule } from "./workspace/desired-state-reconcilable.js";
 import { knowledgeStateValidRule } from "./workspace/knowledge-state-valid.js";
+import { axmSkillDeclaredRule } from "./workspace/axm-skill-declared.js";
 import { axmSkillCompatibleRule } from "./workspace/axm-skill-compatible.js";
 import { hookOwnershipAmbiguousRule } from "./workspace/hook-ownership-ambiguous.js";
 import { managedFileUnownedRule } from "./workspace/managed-file-unowned.js";
 import { sourceEndpointsAlignedRule } from "./workspace/source-endpoints-aligned.js";
 /**
- * Ordered v1 `workspace/*` rule catalog. Declaration order is the evaluation
- * order within a single `evaluateContexts` call (deterministic ordering is
- * test-observable; see `evaluate.ts`). The catalog groups foundation rules
- * first, then install-family rules by classification invariant: declaration
- * validity, lockfile alignment, integrity, artifact correctness, the
- * unmanaged-class-empty check, pack dependency resolution, and implicit
- * retention.
+ * Ordered repository-safe `workspace/*` rule catalog. Declaration order is
+ * the evaluation order within a single `evaluateContexts` call. It groups
+ * foundation rules first, then install-family rules by invariant.
  *
  * @experimental This API is unstable and may change without notice.
  */
@@ -88,6 +57,7 @@ export const repositoryWorkspaceRules = [
     lockfileValidRule,
     sourceEndpointsAlignedRule,
     desiredStateReconcilableRule,
+    axmSkillDeclaredRule,
     axmSkillCompatibleRule,
     agentsRecognizedRule,
     instructionsSourcePresentRule,
@@ -113,15 +83,16 @@ export const repositoryWorkspaceRules = [
 /** Rules whose evidence exists only in the live managed workspace. */
 export const liveOnlyWorkspaceRules = [
     agentsDetectedDeclaredRule,
+    agentsProjectionsStaleRule,
     instructionsTargetCurrentRule,
     instructionsTargetUnownedRule,
     instructionsTargetStaleRule,
-    projectionsCurrentRule,
+    projectionOwnershipValidRule,
     hookOwnershipAmbiguousRule,
     managedFileUnownedRule,
-    skillsArtifactsCorrectRule,
     mcpServerAgentDriftRule,
     mcpServerAgentOrphanedRule,
+    skillsArtifactsCorrectRule,
 ];
 /** Complete workspace-view catalog, retained as the public catalog surface. */
 export const workspaceRules = [
@@ -131,16 +102,18 @@ export const workspaceRules = [
     lockfileValidRule,
     sourceEndpointsAlignedRule,
     desiredStateReconcilableRule,
+    axmSkillDeclaredRule,
     axmSkillCompatibleRule,
     agentsRecognizedRule,
     agentsDetectedDeclaredRule,
+    agentsProjectionsStaleRule,
     instructionsSourcePresentRule,
     instructionsTargetCurrentRule,
     instructionsTargetUnownedRule,
     instructionsTargetStaleRule,
     instructionsAgentSupportedRule,
     instructionsGitignoreCurrentRule,
-    projectionsCurrentRule,
+    projectionOwnershipValidRule,
     hookOwnershipAmbiguousRule,
     managedFileUnownedRule,
     skillsDeclarationsValidRule,
@@ -157,8 +130,4 @@ export const workspaceRules = [
     skillsArtifactsCorrectRule,
     packsDependenciesResolvedRule,
 ];
-// Register ids into the `LintConfig.rules` allowlist. Module-load side effect:
-// a consumer that imports this catalog (or the `catalog/index` barrel) enables
-// `axm.json` `lint.rules` to reference any of the above rule ids.
-registerLintRuleIds(workspaceRules.map((r) => r.id));
 //# sourceMappingURL=workspace.js.map

package/dist/src/cli.js

@@ -699,9 +699,8 @@ const formatGroupedOverviewSentence = (args) => {
     if (args.fixableCount > 0) {
         parts.push(`${args.fixableCount} ${pluralize(args.fixableCount, "can", "can")} be fixed automatically.`);
     }
-    const manualCount = args.diagnosticCount - args.fixableCount;
-    if (manualCount > 0) {
-        parts.push(`${manualCount} ${pluralize(manualCount, "needs", "need")} manual attention.`);
+    if (args.manualCount > 0) {
+        parts.push(`${args.manualCount} ${pluralize(args.manualCount, "needs", "need")} manual attention.`);
     }
     return parts.join(" ");
 };
@@ -873,6 +872,7 @@ const toGroupedLintHumanBlocks = (args) => {
             message: formatGroupedOverviewSentence({
                 diagnosticCount: diagnostics.length,
                 fixableCount,
+                manualCount: diagnostics.filter((diagnostic) => diagnostic.severity !== "info" && !diagnostic.fixable).length,
             }),
             counts: summary.counts,
             notes: [],
@@ -921,6 +921,7 @@ const toSummaryLintHumanBlocks = (args) => {
             message: formatGroupedOverviewSentence({
                 diagnosticCount: diagnostics.length,
                 fixableCount,
+                manualCount: diagnostics.filter((diagnostic) => diagnostic.severity !== "info" && !diagnostic.fixable).length,
             }),
             counts: summary.counts,
             notes: [],

package/dist/src/index.d.ts

@@ -1,9 +1,9 @@
 export type { WorkspaceRuleContext, WorkspaceSubject } from "./workspace-context.js";
 export { CATALOG_GROUP_ORDER, LIVE_ONLY_LINT_CATALOGS, LINT_CATALOGS, REPOSITORY_LINT_CATALOGS, emptyCatalogRuleContexts, lintCatalogsForView, type CatalogContext, type CatalogGroup, type CatalogRuleContexts, type LintView, } from "./catalog-contexts.js";
 export { LintInputSchema, LintJsonDocumentSchema, LintJsonFindingSchema, type LintInput, type LintJsonDocument, type LintJsonFinding, } from "./json-schema.js";
-export { findingsForProjectionFacts } from "./catalog/workspace/projections-current.js";
+export { findingsForProjectionOwnership } from "./catalog/workspace/projection-ownership-valid.js";
 export { collectRenderedFindings, countFindings, detectPublishGateDrift, evaluateAllCatalogs, renderFindingsText, resolveLintExitCategory, summarizeEvaluations, toLintHumanBlocks, toLintJsonDocument, type FindingCounts, type GroupEvaluations, type LintHumanBlock, type LintHumanDiagnostic, type LintHumanReporter, type LintExitCategory, type LintSummary, type RenderFindingsArgs, type RenderedFinding, } from "./cli.js";
-export { allCatalogErrorRuleIds, allCatalogRuleIds, buildAcquiredInstalledSkillInfo, buildInstalledPackInfo, buildLintWorkspace, buildNativeInstalledSkillInfo, acquiredSkillDisplayRoot, registryNativeSkillDisplayRoot, registryPackDisplayRoot, liveOnlyWorkspaceRules, repositoryWorkspaceRules, workspaceRules, type BuildInstalledPackInfoArgs, type BuildAcquiredInstalledSkillInfoArgs, type BuildInstalledSkillInfoNativeArgs, type BuildLintWorkspaceArgs, type LintWorkspace, type LintWorkspaceView, } from "./catalog/index.js";
+export { allCatalogErrorRuleIds, allCatalogRuleMetadata, allCatalogRuleIds, buildAcquiredInstalledSkillInfo, buildInstalledPackInfo, buildLintWorkspace, buildNativeInstalledSkillInfo, acquiredSkillDisplayRoot, registryNativeSkillDisplayRoot, registryPackDisplayRoot, liveOnlyWorkspaceRules, repositoryWorkspaceRules, workspaceRules, type BuildInstalledPackInfoArgs, type BuildAcquiredInstalledSkillInfoArgs, type BuildInstalledSkillInfoNativeArgs, type BuildLintWorkspaceArgs, type LintWorkspace, type LintWorkspaceView, } from "./catalog/index.js";
 export { LintStagingFailed } from "./run/errors.js";
 export { isolatedGitEnvironment, materializeGitIndexWorkspace, type StagedWorkspace, } from "./run/staged-workspace.js";
 export { applyDeterminedRepairs, lintConfigFromSettings, loadSettingsDocument, remapLintSummaryPaths, resolveLintRoot, type PathRemapper, } from "./run/settings.js";

package/dist/src/index.js

@@ -3,16 +3,13 @@
 export { CATALOG_GROUP_ORDER, LIVE_ONLY_LINT_CATALOGS, LINT_CATALOGS, REPOSITORY_LINT_CATALOGS, emptyCatalogRuleContexts, lintCatalogsForView, } from "./catalog-contexts.js";
 // `--json` document schema + derived types
 export { LintInputSchema, LintJsonDocumentSchema, LintJsonFindingSchema, } from "./json-schema.js";
-export { findingsForProjectionFacts } from "./catalog/workspace/projections-current.js";
+export { findingsForProjectionOwnership } from "./catalog/workspace/projection-ownership-valid.js";
 // Lint runner (Phase 5) — reusable primitives the `axm lint` CLI composes
 // over. Keeps the CLI command file a thin surface over flag parsing and
 // rendering per task 5.11.
 export { collectRenderedFindings, countFindings, detectPublishGateDrift, evaluateAllCatalogs, renderFindingsText, resolveLintExitCategory, summarizeEvaluations, toLintHumanBlocks, toLintJsonDocument, } from "./cli.js";
-// Rule catalogs (Phase 3a lands `skillRules`; Phase 3b lands `packRules`;
-// Phase 3c lands `workspaceRules`). Importing this index triggers each
-// catalog's module-load `registerLintRuleIds(...)` call so
-// `axm.json` `lint.rules` keys can reference any exported rule id.
-export { allCatalogErrorRuleIds, allCatalogRuleIds, buildAcquiredInstalledSkillInfo, buildInstalledPackInfo, buildLintWorkspace, buildNativeInstalledSkillInfo, acquiredSkillDisplayRoot, registryNativeSkillDisplayRoot, registryPackDisplayRoot, liveOnlyWorkspaceRules, repositoryWorkspaceRules, workspaceRules, } from "./catalog/index.js";
+// Rule catalogs and their stable metadata.
+export { allCatalogErrorRuleIds, allCatalogRuleMetadata, allCatalogRuleIds, buildAcquiredInstalledSkillInfo, buildInstalledPackInfo, buildLintWorkspace, buildNativeInstalledSkillInfo, acquiredSkillDisplayRoot, registryNativeSkillDisplayRoot, registryPackDisplayRoot, liveOnlyWorkspaceRules, repositoryWorkspaceRules, workspaceRules, } from "./catalog/index.js";
 // Lint-run policy: root resolution, settings-derived configuration,
 // determined repairs, staged Git-index input, and path remapping.
 export { LintStagingFailed } from "./run/errors.js";

package/dist/src/json-schema.js

@@ -59,7 +59,7 @@ const LintJsonSummarySchema = Schema.Struct({
     exitCategory: Schema.Literals(["clean", "warnings", "errors"]).annotate({
         identifier: "LintExitCategory",
         title: "Lint Exit Category",
-        description: "Whether the run was clean, produced warnings, or produced errors.",
+        description: "Whether the run has errors, has warnings without errors, or is clean of both; informational findings remain clean.",
     }),
 }).annotate({
     identifier: "LintJsonSummary",

package/dist/src/workspace-context.d.ts

@@ -12,7 +12,7 @@ import type * as Effect from "effect/Effect";
 import type * as Option from "effect/Option";
 import type { ExtensionType } from "@agentxm/extension-model/unstable/extensions/common";
 import type { Handle } from "@agentxm/extension-model/unstable/extensions/handle";
-import type { PackDependencyReachability, AxmSkillCompatibility, WorkspaceOwnershipIssue, InstructionProjectionSnapshot } from "@agentxm/extension-workspace";
+import type { PackDependencyReachability, AgentOutputInventory, AxmSkillCompatibility, WorkspaceOwnershipIssue, InstructionProjectionSnapshot } from "@agentxm/extension-workspace";
 import type { ProjectionInvariantFact } from "@agentxm/extension-workspace";
 import type { CanonicalObservation } from "@agentxm/workspace-state";
 import type { DesiredExtensionNode, DesiredStateGraph } from "@agentxm/workspace-state";
@@ -47,6 +47,8 @@ export interface WorkspaceRuleContext {
     /** Read-back currency for aggregate managed output units. */
     readonly projections?: WorkspaceProjectionsAccessor;
     readonly ownership?: Effect.Effect<ReadonlyArray<WorkspaceOwnershipIssue>>;
+    /** Owned and unowned agent-native outputs observed from resolved containers. */
+    readonly agentOutputs?: Effect.Effect<AgentOutputInventory>;
     /**
      * Installed non-pack extension manifests, keyed by nothing — rules walk the
      * list. Landed for `workspace/recommended-packs-retained`, which needs the
@@ -62,7 +64,7 @@ export interface WorkspaceRuleContext {
     /** Effective configured owner (project, then user scope), when available. */
     readonly owner?: Effect.Effect<Option.Option<Handle>>;
     /** One caller-built evaluation over the authoritative installed AXM skill. */
-    readonly axmSkillCompatibility?: Effect.Effect<AxmSkillCompatibility, SettingsReadError | LockfileReadError>;
+    readonly axmSkillCompatibility?: Effect.Effect<Option.Option<AxmSkillCompatibility>, SettingsReadError | LockfileReadError>;
     /** Deterministic desired-state preflight used by local reconciliation-health rules. */
     readonly health?: {
         readonly desiredState: Effect.Effect<DesiredStateGraph, WorkspaceHealthFailure>;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@agentxm/workspace-lint",
-  "version": "0.28.4",
+  "version": "0.28.5",
   "description": "AXM workspace-lint feature: workspace facts, lint rules, findings, normalization, and bounded fix planning for the axm CLI. Unstable and unsupported — use the axm.sh CLI.",
   "type": "module",
   "license": "FSL-1.1-MIT",
@@ -18,6 +18,7 @@
   "exports": {
     ".": {
       "types": "./dist/src/index.d.ts",
+      "axm-source": "./src/index.ts",
       "default": "./dist/src/index.js"
     }
   },
@@ -36,12 +37,12 @@
   },
   "dependencies": {
     "effect": "4.0.0-rc.112",
-    "@agentxm/extension-sources": "^0.28.4",
-    "@agentxm/registry-protocol": "^0.28.4",
-    "@agentxm/extension-workspace": "^0.28.4",
-    "@agentxm/workspace-operations": "^0.28.4",
-    "@agentxm/extension-model": "^0.28.4",
-    "@agentxm/workspace-state": "^0.28.4"
+    "@agentxm/extension-sources": "^0.28.5",
+    "@agentxm/registry-protocol": "^0.28.5",
+    "@agentxm/workspace-state": "^0.28.5",
+    "@agentxm/workspace-operations": "^0.28.5",
+    "@agentxm/extension-model": "^0.28.5",
+    "@agentxm/extension-workspace": "^0.28.5"
   },
   "devDependencies": {
     "@effect/platform-node": "4.0.0-rc.112",
@@ -50,6 +51,6 @@
     "@typescript/native": "npm:typescript@^7.0.2",
     "typescript": "npm:@typescript/typescript6@^6.0.2",
     "vitest": "^4.1.10",
-    "@agentxm/agent-integration": "^0.28.4"
+    "@agentxm/agent-integration": "^0.28.5"
   }
 }

package/dist/src/catalog/workspace/projections-current.d.ts

@@ -1,15 +0,0 @@
-import { type ProjectionInvariantFact } from "@agentxm/extension-workspace";
-import type { WorkspaceRuleContext } from "../../workspace-context.js";
-import type { AdvisoryRule, LintFinding } from "@agentxm/registry-protocol/unstable/lint/rule";
-/**
- * Managed output units render their complete contributor sets and content.
- *
- * Evidence is read back from the outputs themselves: an extension whose
- * canonical content is installed and reachable can still be absent from, or
- * stale in, its projection. The accessor yields no verdict when currency
- * cannot be judged (incomplete desired-state graph, missing canonical
- * content); root-cause rules own those conditions.
- */
-export declare const projectionsCurrentRule: AdvisoryRule<WorkspaceRuleContext>;
-export declare const findingsForProjectionFacts: (facts: ReadonlyArray<ProjectionInvariantFact>) => ReadonlyArray<LintFinding>;
-//# sourceMappingURL=projections-current.d.ts.map

package/dist/src/catalog/workspace/projections-current.js

@@ -1,35 +0,0 @@
-import * as Effect from "effect/Effect";
-import { projectionFactIsViolation, } from "@agentxm/extension-workspace";
-import { EMPTY_LINT_FINDINGS } from "./helpers/empty.js";
-const RULE_ID = "workspace/projections-current";
-/**
- * Managed output units render their complete contributor sets and content.
- *
- * Evidence is read back from the outputs themselves: an extension whose
- * canonical content is installed and reachable can still be absent from, or
- * stale in, its projection. The accessor yields no verdict when currency
- * cannot be judged (incomplete desired-state graph, missing canonical
- * content); root-cause rules own those conditions.
- */
-export const projectionsCurrentRule = {
-    id: RULE_ID,
-    description: "Managed outputs render every enabled reachable contributor exactly once.",
-    kind: "advisory",
-    severity: "error",
-    check: (context) => Effect.gen(function* () {
-        if (context.projections === undefined)
-            return EMPTY_LINT_FINDINGS;
-        return findingsForProjectionFacts(yield* context.projections.facts);
-    }),
-};
-const contributorSuffix = (fact) => fact.affectedContributors.length === 0
-    ? ""
-    : ` Affected contributors: ${fact.affectedContributors.join(", ")}.`;
-export const findingsForProjectionFacts = (facts) => facts.filter(projectionFactIsViolation).map((fact) => ({
-    kind: "advisory",
-    ruleId: RULE_ID,
-    severity: "error",
-    message: fact.observation.message ??
-        `The AXM-owned projection at ${fact.subject.path} is ${fact.observation.status}.${contributorSuffix(fact)}`,
-}));
-//# sourceMappingURL=projections-current.js.map