@anatomytool/validate 1.0.0

package/dist/checks/memory-dangling-ref-check.js

@@ -0,0 +1,34 @@
+// src/checks/memory-dangling-ref-check.ts
+// Warns (does not error) on entry refs that look like local paths but no
+// longer exist on disk. Soft signal — file moves are common; right action
+// is human review, not auto-fix.
+import { existsSync } from "node:fs";
+import { resolve } from "node:path";
+export function memoryDanglingRefCheck(doc, repoRoot) {
+    const warnings = [];
+    const d = doc;
+    const entries = Array.isArray(d.entries) ? d.entries : [];
+    for (let i = 0; i < entries.length; i++) {
+        const refs = entries[i].refs;
+        if (!Array.isArray(refs))
+            continue;
+        for (let j = 0; j < refs.length; j++) {
+            const ref = refs[j];
+            if (typeof ref !== "string")
+                continue;
+            // Skip git: and entry: refs — only check local paths
+            if (ref.startsWith("git:") || ref.startsWith("entry:"))
+                continue;
+            const abs = resolve(repoRoot, ref);
+            if (!existsSync(abs)) {
+                warnings.push({
+                    code: "memory-dangling-ref",
+                    message: `entry refs path that no longer exists: ${ref}`,
+                    pointer: `/entries/${i}/refs/${j}`,
+                });
+            }
+        }
+    }
+    return { errors: [], warnings };
+}
+//# sourceMappingURL=memory-dangling-ref-check.js.map

package/dist/checks/memory-dangling-ref-check.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"memory-dangling-ref-check.js","sourceRoot":"","sources":["../../src/checks/memory-dangling-ref-check.ts"],"names":[],"mappings":"AAAA,0CAA0C;AAC1C,yEAAyE;AACzE,0EAA0E;AAC1E,iCAAiC;AAEjC,OAAO,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AACrC,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAOpC,MAAM,UAAU,sBAAsB,CACpC,GAAY,EACZ,QAAgB;IAEhB,MAAM,QAAQ,GAAc,EAAE,CAAC;IAC/B,MAAM,CAAC,GAAG,GAA4B,CAAC;IACvC,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAE,CAAC,CAAC,OAAmB,CAAC,CAAC,CAAC,EAAE,CAAC;IAEvE,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACxC,MAAM,IAAI,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;QAC7B,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC;YAAE,SAAS;QACnC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;YACrC,MAAM,GAAG,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;YACpB,IAAI,OAAO,GAAG,KAAK,QAAQ;gBAAE,SAAS;YACtC,qDAAqD;YACrD,IAAI,GAAG,CAAC,UAAU,CAAC,MAAM,CAAC,IAAI,GAAG,CAAC,UAAU,CAAC,QAAQ,CAAC;gBAAE,SAAS;YACjE,MAAM,GAAG,GAAG,OAAO,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC;YACnC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;gBACrB,QAAQ,CAAC,IAAI,CAAC;oBACZ,IAAI,EAAE,qBAAqB;oBAC3B,OAAO,EAAE,0CAA0C,GAAG,EAAE;oBACxD,OAAO,EAAE,YAAY,CAAC,SAAS,CAAC,EAAE;iBACnC,CAAC,CAAC;YACL,CAAC;QACH,CAAC;IACH,CAAC;IAED,OAAO,EAAE,MAAM,EAAE,EAAE,EAAE,QAAQ,EAAE,CAAC;AAClC,CAAC"}

package/dist/checks/memory-fingerprint-check.d.ts

@@ -0,0 +1,6 @@
+import type { ValidationError, Warning } from "../errors.js";
+export declare function memoryFingerprintCheck(doc: unknown, anatomyFingerprint: string): {
+    errors: ValidationError[];
+    warnings: Warning[];
+};
+//# sourceMappingURL=memory-fingerprint-check.d.ts.map

package/dist/checks/memory-fingerprint-check.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"memory-fingerprint-check.d.ts","sourceRoot":"","sources":["../../src/checks/memory-fingerprint-check.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,eAAe,EAAE,OAAO,EAAE,MAAM,cAAc,CAAC;AAE7D,wBAAgB,sBAAsB,CACpC,GAAG,EAAE,OAAO,EACZ,kBAAkB,EAAE,MAAM,GACzB;IAAE,MAAM,EAAE,eAAe,EAAE,CAAC;IAAC,QAAQ,EAAE,OAAO,EAAE,CAAA;CAAE,CAcpD"}

package/dist/checks/memory-fingerprint-check.js

@@ -0,0 +1,20 @@
+// src/checks/memory-fingerprint-check.ts
+// Verifies .anatomy-memory.repo_fingerprint matches the paired .anatomy's
+// [identity].fingerprint. Catches accidental cross-repo memory file copies.
+export function memoryFingerprintCheck(doc, anatomyFingerprint) {
+    const errors = [];
+    const d = doc;
+    if (typeof d.repo_fingerprint !== "string")
+        return { errors, warnings: [] };
+    if (d.repo_fingerprint !== anatomyFingerprint) {
+        errors.push({
+            code: "memory-fingerprint-mismatch",
+            message: `repo_fingerprint ${JSON.stringify(d.repo_fingerprint)} does not match paired .anatomy fingerprint ${JSON.stringify(anatomyFingerprint)}`,
+            pointer: "/repo_fingerprint",
+            expected: anatomyFingerprint,
+            actual: d.repo_fingerprint,
+        });
+    }
+    return { errors, warnings: [] };
+}
+//# sourceMappingURL=memory-fingerprint-check.js.map

package/dist/checks/memory-fingerprint-check.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"memory-fingerprint-check.js","sourceRoot":"","sources":["../../src/checks/memory-fingerprint-check.ts"],"names":[],"mappings":"AAAA,yCAAyC;AACzC,0EAA0E;AAC1E,4EAA4E;AAI5E,MAAM,UAAU,sBAAsB,CACpC,GAAY,EACZ,kBAA0B;IAE1B,MAAM,MAAM,GAAsB,EAAE,CAAC;IACrC,MAAM,CAAC,GAAG,GAAqC,CAAC;IAChD,IAAI,OAAO,CAAC,CAAC,gBAAgB,KAAK,QAAQ;QAAE,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC;IAC5E,IAAI,CAAC,CAAC,gBAAgB,KAAK,kBAAkB,EAAE,CAAC;QAC9C,MAAM,CAAC,IAAI,CAAC;YACV,IAAI,EAAE,6BAA6B;YACnC,OAAO,EAAE,oBAAoB,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,gBAAgB,CAAC,+CAA+C,IAAI,CAAC,SAAS,CAAC,kBAAkB,CAAC,EAAE;YAClJ,OAAO,EAAE,mBAAmB;YAC5B,QAAQ,EAAE,kBAAkB;YAC5B,MAAM,EAAE,CAAC,CAAC,gBAAgB;SAC3B,CAAC,CAAC;IACL,CAAC;IACD,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC;AAClC,CAAC"}

package/dist/checks/memory-supersession-check.d.ts

@@ -0,0 +1,6 @@
+import type { ValidationError, Warning } from "../errors.js";
+export declare function memorySupersessionCheck(doc: unknown): {
+    errors: ValidationError[];
+    warnings: Warning[];
+};
+//# sourceMappingURL=memory-supersession-check.d.ts.map

package/dist/checks/memory-supersession-check.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"memory-supersession-check.d.ts","sourceRoot":"","sources":["../../src/checks/memory-supersession-check.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,eAAe,EAAE,OAAO,EAAE,MAAM,cAAc,CAAC;AAO7D,wBAAgB,uBAAuB,CACrC,GAAG,EAAE,OAAO,GACX;IAAE,MAAM,EAAE,eAAe,EAAE,CAAC;IAAC,QAAQ,EAAE,OAAO,EAAE,CAAA;CAAE,CAyDpD"}

package/dist/checks/memory-supersession-check.js

@@ -0,0 +1,61 @@
+// src/checks/memory-supersession-check.ts
+// Cross-entry referential integrity: every superseded_by must point to an
+// existing id; the supersession graph must be acyclic.
+export function memorySupersessionCheck(doc) {
+    const errors = [];
+    const d = doc;
+    const entries = Array.isArray(d.entries) ? d.entries : [];
+    if (entries.length === 0)
+        return { errors, warnings: [] };
+    const idIndex = new Map();
+    for (let i = 0; i < entries.length; i++) {
+        const id = entries[i].id;
+        if (typeof id === "string")
+            idIndex.set(id, i);
+    }
+    // Existence check
+    for (let i = 0; i < entries.length; i++) {
+        const sb = entries[i].superseded_by;
+        if (typeof sb === "string" && !idIndex.has(sb)) {
+            errors.push({
+                code: "memory-supersedes-not-found",
+                message: `entry references superseded_by="${sb}" but no entry with that id exists`,
+                pointer: `/entries/${i}/superseded_by`,
+            });
+        }
+    }
+    // Cycle check (DFS coloring)
+    const WHITE = 0, GRAY = 1, BLACK = 2;
+    const color = new Array(entries.length).fill(WHITE);
+    const cycleReported = new Set();
+    function visit(i) {
+        if (color[i] === GRAY)
+            return true;
+        if (color[i] === BLACK)
+            return false;
+        color[i] = GRAY;
+        const sb = entries[i].superseded_by;
+        if (typeof sb === "string") {
+            const next = idIndex.get(sb);
+            if (next !== undefined && visit(next)) {
+                if (!cycleReported.has(i)) {
+                    errors.push({
+                        code: "memory-supersedes-cycle",
+                        message: `supersession chain forms a cycle starting at entry "${entries[i].id}"`,
+                        pointer: `/entries/${i}/superseded_by`,
+                    });
+                    cycleReported.add(i);
+                }
+                return true;
+            }
+        }
+        color[i] = BLACK;
+        return false;
+    }
+    for (let i = 0; i < entries.length; i++) {
+        if (color[i] === WHITE)
+            visit(i);
+    }
+    return { errors, warnings: [] };
+}
+//# sourceMappingURL=memory-supersession-check.js.map

package/dist/checks/memory-supersession-check.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"memory-supersession-check.js","sourceRoot":"","sources":["../../src/checks/memory-supersession-check.ts"],"names":[],"mappings":"AAAA,0CAA0C;AAC1C,0EAA0E;AAC1E,uDAAuD;AASvD,MAAM,UAAU,uBAAuB,CACrC,GAAY;IAEZ,MAAM,MAAM,GAAsB,EAAE,CAAC;IACrC,MAAM,CAAC,GAAG,GAA4B,CAAC;IACvC,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAE,CAAC,CAAC,OAAmB,CAAC,CAAC,CAAC,EAAE,CAAC;IACvE,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC;IAE1D,MAAM,OAAO,GAAG,IAAI,GAAG,EAAkB,CAAC;IAC1C,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACxC,MAAM,EAAE,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QACzB,IAAI,OAAO,EAAE,KAAK,QAAQ;YAAE,OAAO,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC;IACjD,CAAC;IAED,kBAAkB;IAClB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACxC,MAAM,EAAE,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC;QACpC,IAAI,OAAO,EAAE,KAAK,QAAQ,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,CAAC;YAC/C,MAAM,CAAC,IAAI,CAAC;gBACV,IAAI,EAAE,6BAA6B;gBACnC,OAAO,EAAE,mCAAmC,EAAE,oCAAoC;gBAClF,OAAO,EAAE,YAAY,CAAC,gBAAgB;aACvC,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,6BAA6B;IAC7B,MAAM,KAAK,GAAG,CAAC,EAAE,IAAI,GAAG,CAAC,EAAE,KAAK,GAAG,CAAC,CAAC;IACrC,MAAM,KAAK,GAAG,IAAI,KAAK,CAAS,OAAO,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAC5D,MAAM,aAAa,GAAG,IAAI,GAAG,EAAU,CAAC;IAExC,SAAS,KAAK,CAAC,CAAS;QACtB,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,IAAI;YAAE,OAAO,IAAI,CAAC;QACnC,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,KAAK;YAAE,OAAO,KAAK,CAAC;QACrC,KAAK,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC;QAChB,MAAM,EAAE,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC;QACpC,IAAI,OAAO,EAAE,KAAK,QAAQ,EAAE,CAAC;YAC3B,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YAC7B,IAAI,IAAI,KAAK,SAAS,IAAI,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;gBACtC,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;oBAC1B,MAAM,CAAC,IAAI,CAAC;wBACV,IAAI,EAAE,yBAAyB;wBAC/B,OAAO,EAAE,uDAAuD,OAAO,CAAC,CAAC,CAAC,CAAC,EAAE,GAAG;wBAChF,OAAO,EAAE,YAAY,CAAC,gBAAgB;qBACvC,CAAC,CAAC;oBACH,aAAa,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;gBACvB,CAAC;gBACD,OAAO,IAAI,CAAC;YACd,CAAC;QACH,CAAC;QACD,KAAK,CAAC,CAAC,CAAC,GAAG,KAAK,CAAC;QACjB,OAAO,KAAK,CAAC;IACf,CAAC;IAED,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACxC,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,KAAK;YAAE,KAAK,CAAC,CAAC,CAAC,CAAC;IACnC,CAAC;IAED,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC;AAClC,CAAC"}

package/dist/checks/memory-verification-check.d.ts

@@ -0,0 +1,6 @@
+import type { ValidationError, Warning } from "../errors.js";
+export declare function memoryVerificationCheck(doc: unknown): {
+    errors: ValidationError[];
+    warnings: Warning[];
+};
+//# sourceMappingURL=memory-verification-check.d.ts.map

package/dist/checks/memory-verification-check.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"memory-verification-check.d.ts","sourceRoot":"","sources":["../../src/checks/memory-verification-check.ts"],"names":[],"mappings":"AAWA,OAAO,KAAK,EAAE,eAAe,EAAE,OAAO,EAAE,MAAM,cAAc,CAAC;AAW7D,wBAAgB,uBAAuB,CACrC,GAAG,EAAE,OAAO,GACX;IAAE,MAAM,EAAE,eAAe,EAAE,CAAC;IAAC,QAAQ,EAAE,OAAO,EAAE,CAAA;CAAE,CAkDpD"}

package/dist/checks/memory-verification-check.js

@@ -0,0 +1,61 @@
+// src/checks/memory-verification-check.ts
+// v0.2 memory: validate the optional last_verified_at + verified_by fields.
+//   - memory-verified-by-malformed (error): a verified_by item doesn't match
+//     the attribution regex.
+//   - memory-verified-by-too-many (warning): verified_by has > 5 entries
+//     (the schema's maxItems is 5; this fires when an over-long array slips
+//     past schema validation, e.g. via a v0.2 file written by a non-conformant
+//     producer that still satisfies additionalProperties:true).
+//   - memory-last-verified-before-at (warning): last_verified_at < at, which
+//     almost always means a typo or clock skew rather than a meaningful state.
+const ATTRIBUTION_RE = /^(claude-session(:[a-z0-9-]+)?|human:[a-z0-9._-]+|@[a-z0-9._-]+)$/;
+const MAX_VERIFIED_BY = 5;
+export function memoryVerificationCheck(doc) {
+    const errors = [];
+    const warnings = [];
+    const d = doc;
+    const entries = Array.isArray(d.entries) ? d.entries : [];
+    if (entries.length === 0)
+        return { errors, warnings };
+    for (let i = 0; i < entries.length; i++) {
+        const e = entries[i];
+        // verified_by malformed item
+        if (Array.isArray(e.verified_by)) {
+            for (let j = 0; j < e.verified_by.length; j++) {
+                const v = e.verified_by[j];
+                if (typeof v !== "string" || !ATTRIBUTION_RE.test(v)) {
+                    errors.push({
+                        code: "memory-verified-by-malformed",
+                        message: `verified_by[${j}] is not a valid attribution string (expected human:<handle> | claude-session[:<model>] | @<handle>)`,
+                        pointer: `/entries/${i}/verified_by/${j}`,
+                        actual: typeof v === "string" ? v : `(${typeof v})`,
+                    });
+                }
+            }
+            // verified_by too many (warning — schema's maxItems should catch this,
+            // but a forward-compat additionalProperties:true read of a malformed
+            // file could surface it here too)
+            if (e.verified_by.length > MAX_VERIFIED_BY) {
+                warnings.push({
+                    code: "memory-verified-by-too-many",
+                    message: `verified_by has ${e.verified_by.length} entries; the schema cap is ${MAX_VERIFIED_BY}. CLI writers truncate to the most recent ${MAX_VERIFIED_BY} via LRU on next verify.`,
+                    pointer: `/entries/${i}/verified_by`,
+                });
+            }
+        }
+        // last_verified_at < at
+        if (typeof e.last_verified_at === "string" && typeof e.at === "string") {
+            // ISO-8601 lexical compare matches chronological order for normalized
+            // strings, which both fields are required by schema:format:date-time.
+            if (e.last_verified_at < e.at) {
+                warnings.push({
+                    code: "memory-last-verified-before-at",
+                    message: `last_verified_at (${e.last_verified_at}) is before the entry's creation timestamp (${e.at}); usually a typo or clock skew`,
+                    pointer: `/entries/${i}/last_verified_at`,
+                });
+            }
+        }
+    }
+    return { errors, warnings };
+}
+//# sourceMappingURL=memory-verification-check.js.map

package/dist/checks/memory-verification-check.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"memory-verification-check.js","sourceRoot":"","sources":["../../src/checks/memory-verification-check.ts"],"names":[],"mappings":"AAAA,0CAA0C;AAC1C,4EAA4E;AAC5E,6EAA6E;AAC7E,6BAA6B;AAC7B,yEAAyE;AACzE,4EAA4E;AAC5E,+EAA+E;AAC/E,gEAAgE;AAChE,6EAA6E;AAC7E,+EAA+E;AAU/E,MAAM,cAAc,GAAG,mEAAmE,CAAC;AAC3F,MAAM,eAAe,GAAG,CAAC,CAAC;AAE1B,MAAM,UAAU,uBAAuB,CACrC,GAAY;IAEZ,MAAM,MAAM,GAAsB,EAAE,CAAC;IACrC,MAAM,QAAQ,GAAc,EAAE,CAAC;IAC/B,MAAM,CAAC,GAAG,GAA4B,CAAC;IACvC,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAE,CAAC,CAAC,OAAmB,CAAC,CAAC,CAAC,EAAE,CAAC;IACvE,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC;IAEtD,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACxC,MAAM,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;QAErB,6BAA6B;QAC7B,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,WAAW,CAAC,EAAE,CAAC;YACjC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,WAAW,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;gBAC9C,MAAM,CAAC,GAAG,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC;gBAC3B,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;oBACrD,MAAM,CAAC,IAAI,CAAC;wBACV,IAAI,EAAE,8BAA8B;wBACpC,OAAO,EAAE,eAAe,CAAC,sGAAsG;wBAC/H,OAAO,EAAE,YAAY,CAAC,gBAAgB,CAAC,EAAE;wBACzC,MAAM,EAAE,OAAO,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,OAAO,CAAC,GAAG;qBACpD,CAAC,CAAC;gBACL,CAAC;YACH,CAAC;YACD,uEAAuE;YACvE,qEAAqE;YACrE,kCAAkC;YAClC,IAAI,CAAC,CAAC,WAAW,CAAC,MAAM,GAAG,eAAe,EAAE,CAAC;gBAC3C,QAAQ,CAAC,IAAI,CAAC;oBACZ,IAAI,EAAE,6BAA6B;oBACnC,OAAO,EAAE,mBAAmB,CAAC,CAAC,WAAW,CAAC,MAAM,+BAA+B,eAAe,6CAA6C,eAAe,0BAA0B;oBACpL,OAAO,EAAE,YAAY,CAAC,cAAc;iBACrC,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QAED,wBAAwB;QACxB,IAAI,OAAO,CAAC,CAAC,gBAAgB,KAAK,QAAQ,IAAI,OAAO,CAAC,CAAC,EAAE,KAAK,QAAQ,EAAE,CAAC;YACvE,sEAAsE;YACtE,sEAAsE;YACtE,IAAI,CAAC,CAAC,gBAAgB,GAAG,CAAC,CAAC,EAAE,EAAE,CAAC;gBAC9B,QAAQ,CAAC,IAAI,CAAC;oBACZ,IAAI,EAAE,gCAAgC;oBACtC,OAAO,EAAE,qBAAqB,CAAC,CAAC,gBAAgB,+CAA+C,CAAC,CAAC,EAAE,iCAAiC;oBACpI,OAAO,EAAE,YAAY,CAAC,mBAAmB;iBAC1C,CAAC,CAAC;YACL,CAAC;QACH,CAAC;IACH,CAAC;IAED,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC;AAC9B,CAAC"}

package/dist/checks/nested-path-escape.d.ts

@@ -0,0 +1,6 @@
+import type { ValidationError, Warning } from "../errors.js";
+export declare function nestedPathEscapeCheck(doc: unknown, anatomyDir?: string): {
+    errors: ValidationError[];
+    warnings: Warning[];
+};
+//# sourceMappingURL=nested-path-escape.d.ts.map

package/dist/checks/nested-path-escape.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"nested-path-escape.d.ts","sourceRoot":"","sources":["../../src/checks/nested-path-escape.ts"],"names":[],"mappings":"AAKA,OAAO,KAAK,EAAE,eAAe,EAAE,OAAO,EAAE,MAAM,cAAc,CAAC;AAmC7D,wBAAgB,qBAAqB,CAAC,GAAG,EAAE,OAAO,EAAE,UAAU,CAAC,EAAE,MAAM,GAAG;IACxE,MAAM,EAAE,eAAe,EAAE,CAAC;IAC1B,QAAQ,EAAE,OAAO,EAAE,CAAC;CACrB,CA6CA"}

package/dist/checks/nested-path-escape.js

@@ -0,0 +1,76 @@
+// src/checks/nested-path-escape.ts
+// When anatomyDir is supplied, every path-bearing field MUST resolve within
+// the anatomy's directory after lexical normalisation. The check uses POSIX
+// path semantics (forward slashes, lexical resolution); no filesystem access.
+function escapesScope(rawPath) {
+    // Lexical normalisation: split on / (path-bearing fields are POSIX-style
+    // relative paths per the v0.2 schema), resolve "." and ".." segments,
+    // and check whether the depth ever goes negative.
+    const segments = rawPath.split("/").filter(s => s.length > 0 && s !== ".");
+    let depth = 0;
+    for (const seg of segments) {
+        if (seg === "..") {
+            depth--;
+            if (depth < 0)
+                return true;
+        }
+        else {
+            depth++;
+        }
+    }
+    return false;
+}
+function checkPath(rawPath, pointer, errors) {
+    if (typeof rawPath !== "string")
+        return;
+    if (escapesScope(rawPath)) {
+        errors.push({
+            code: "nested-path-escape",
+            message: `path escapes the anatomy's directory: ${rawPath}`,
+            pointer,
+            actual: rawPath,
+        });
+    }
+}
+export function nestedPathEscapeCheck(doc, anatomyDir) {
+    if (anatomyDir === undefined)
+        return { errors: [], warnings: [] };
+    const errors = [];
+    const d = doc;
+    // entry_points
+    const eps = d?.operation?.entry_points;
+    if (Array.isArray(eps)) {
+        for (let i = 0; i < eps.length; i++) {
+            checkPath(eps[i]?.path, `/operation/entry_points/${i}/path`, errors);
+        }
+    }
+    // structure.entries
+    const ents = d?.structure?.entries;
+    if (Array.isArray(ents)) {
+        for (let i = 0; i < ents.length; i++) {
+            checkPath(ents[i]?.path, `/structure/entries/${i}/path`, errors);
+        }
+    }
+    // substance.capabilities/limitations source (both forms)
+    const subst = d?.substance;
+    if (subst) {
+        for (const arrName of ["capabilities", "limitations"]) {
+            const arr = subst[arrName];
+            if (!Array.isArray(arr))
+                continue;
+            for (let i = 0; i < arr.length; i++) {
+                const src = arr[i]?.source;
+                if (typeof src === "string") {
+                    const hashIdx = src.indexOf("#");
+                    const pathPart = hashIdx === -1 ? src : src.slice(0, hashIdx);
+                    checkPath(pathPart, `/substance/${arrName}/${i}/source`, errors);
+                }
+                else if (src && typeof src === "object" && typeof src.path === "string") {
+                    checkPath(src.path, `/substance/${arrName}/${i}/source/path`, errors);
+                }
+            }
+        }
+    }
+    return { errors, warnings: [] };
+}
+//# sourceMappingURL=nested-path-escape.js.map

package/dist/checks/nested-path-escape.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"nested-path-escape.js","sourceRoot":"","sources":["../../src/checks/nested-path-escape.ts"],"names":[],"mappings":"AAAA,mCAAmC;AACnC,4EAA4E;AAC5E,4EAA4E;AAC5E,8EAA8E;AAI9E,SAAS,YAAY,CAAC,OAAe;IACnC,yEAAyE;IACzE,sEAAsE;IACtE,kDAAkD;IAClD,MAAM,QAAQ,GAAG,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,KAAK,GAAG,CAAC,CAAC;IAC3E,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,KAAK,MAAM,GAAG,IAAI,QAAQ,EAAE,CAAC;QAC3B,IAAI,GAAG,KAAK,IAAI,EAAE,CAAC;YACjB,KAAK,EAAE,CAAC;YACR,IAAI,KAAK,GAAG,CAAC;gBAAE,OAAO,IAAI,CAAC;QAC7B,CAAC;aAAM,CAAC;YACN,KAAK,EAAE,CAAC;QACV,CAAC;IACH,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,SAAS,CAChB,OAAgB,EAChB,OAAe,EACf,MAAyB;IAEzB,IAAI,OAAO,OAAO,KAAK,QAAQ;QAAE,OAAO;IACxC,IAAI,YAAY,CAAC,OAAO,CAAC,EAAE,CAAC;QAC1B,MAAM,CAAC,IAAI,CAAC;YACV,IAAI,EAAE,oBAAoB;YAC1B,OAAO,EAAE,yCAAyC,OAAO,EAAE;YAC3D,OAAO;YACP,MAAM,EAAE,OAAO;SAChB,CAAC,CAAC;IACL,CAAC;AACH,CAAC;AAED,MAAM,UAAU,qBAAqB,CAAC,GAAY,EAAE,UAAmB;IAIrE,IAAI,UAAU,KAAK,SAAS;QAAE,OAAO,EAAE,MAAM,EAAE,EAAE,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC;IAClE,MAAM,MAAM,GAAsB,EAAE,CAAC;IACrC,MAAM,CAAC,GAAG,GAIT,CAAC;IAEF,eAAe;IACf,MAAM,GAAG,GAAG,CAAC,EAAE,SAAS,EAAE,YAAY,CAAC;IACvC,IAAI,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;QACvB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,GAAG,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;YACpC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,2BAA2B,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QACvE,CAAC;IACH,CAAC;IAED,oBAAoB;IACpB,MAAM,IAAI,GAAG,CAAC,EAAE,SAAS,EAAE,OAAO,CAAC;IACnC,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;QACxB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;YACrC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,sBAAsB,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QACnE,CAAC;IACH,CAAC;IAED,yDAAyD;IACzD,MAAM,KAAK,GAAG,CAAC,EAAE,SAAS,CAAC;IAC3B,IAAI,KAAK,EAAE,CAAC;QACV,KAAK,MAAM,OAAO,IAAI,CAAC,cAAc,EAAE,aAAa,CAAU,EAAE,CAAC;YAC/D,MAAM,GAAG,GAAG,KAAK,CAAC,OAAO,CAAC,CAAC;YAC3B,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC;gBAAE,SAAS;YAClC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,GAAG,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;gBACpC,MAAM,GAAG,GAAG,GAAG,CAAC,CAAC,CAAC,EAAE,MAAM,CAAC;gBAC3B,IAAI,OAAO,GAAG,KAAK,QAAQ,EAAE,CAAC;oBAC5B,MAAM,OAAO,GAAG,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;oBACjC,MAAM,QAAQ,GAAG,OAAO,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC;oBAC9D,SAAS,CAAC,QAAQ,EAAE,cAAc,OAAO,IAAI,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;gBACnE,CAAC;qBAAM,IAAI,GAAG,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,OAAQ,GAA0B,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;oBAClG,SAAS,CAAE,GAAwB,CAAC,IAAI,EAAE,cAAc,OAAO,IAAI,CAAC,cAAc,EAAE,MAAM,CAAC,CAAC;gBAC9F,CAAC;YACH,CAAC;QACH,CAAC;IACH,CAAC;IAED,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC;AAClC,CAAC"}

package/dist/checks/schema-check.d.ts

@@ -0,0 +1,6 @@
+import type { ValidationError, Warning } from "../errors.js";
+export declare function schemaCheck(doc: unknown): {
+    errors: ValidationError[];
+    warnings: Warning[];
+};
+//# sourceMappingURL=schema-check.d.ts.map

package/dist/checks/schema-check.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"schema-check.d.ts","sourceRoot":"","sources":["../../src/checks/schema-check.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,eAAe,EAAE,OAAO,EAAE,MAAM,cAAc,CAAC;AAE7D,wBAAgB,WAAW,CAAC,GAAG,EAAE,OAAO,GAAG;IACzC,MAAM,EAAE,eAAe,EAAE,CAAC;IAC1B,QAAQ,EAAE,OAAO,EAAE,CAAC;CACrB,CA2BA"}

package/dist/checks/schema-check.js

@@ -0,0 +1,32 @@
+// src/checks/schema-check.ts
+// Routes the parsed doc to the matching version's compiled JSON Schema based
+// on its declared anatomy_version, then maps AJV errors to ValidationError.
+// An unknown or missing anatomy_version produces an unsupported-anatomy-version
+// error so downstream checks can be skipped safely.
+import { compiledSchemas } from "../schema.js";
+export function schemaCheck(doc) {
+    const declared = doc?.anatomy_version;
+    const fn = typeof declared === "string" ? compiledSchemas.get(declared) : undefined;
+    if (!fn) {
+        return {
+            errors: [{
+                    code: "unsupported-anatomy-version",
+                    message: `unsupported anatomy_version: ${JSON.stringify(declared)}`,
+                    pointer: "/anatomy_version",
+                    actual: declared,
+                }],
+            warnings: [],
+        };
+    }
+    const ok = fn(doc);
+    if (ok)
+        return { errors: [], warnings: [] };
+    const errors = (fn.errors ?? []).map((e) => ({
+        code: "schema-violation",
+        message: e.message ?? "schema violation",
+        pointer: e.instancePath, // already a JSON Pointer in AJV
+        schemaKeyword: e.keyword,
+    }));
+    return { errors, warnings: [] };
+}
+//# sourceMappingURL=schema-check.js.map

package/dist/checks/schema-check.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"schema-check.js","sourceRoot":"","sources":["../../src/checks/schema-check.ts"],"names":[],"mappings":"AAAA,6BAA6B;AAC7B,6EAA6E;AAC7E,4EAA4E;AAC5E,gFAAgF;AAChF,oDAAoD;AAEpD,OAAO,EAAE,eAAe,EAAiB,MAAM,cAAc,CAAC;AAG9D,MAAM,UAAU,WAAW,CAAC,GAAY;IAItC,MAAM,QAAQ,GAAI,GAAqC,EAAE,eAAe,CAAC;IACzE,MAAM,EAAE,GAAG,OAAO,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,eAAe,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IAEpF,IAAI,CAAC,EAAE,EAAE,CAAC;QACR,OAAO;YACL,MAAM,EAAE,CAAC;oBACP,IAAI,EAAE,6BAA6B;oBACnC,OAAO,EAAE,gCAAgC,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,EAAE;oBACnE,OAAO,EAAE,kBAAkB;oBAC3B,MAAM,EAAE,QAAQ;iBACjB,CAAC;YACF,QAAQ,EAAE,EAAE;SACb,CAAC;IACJ,CAAC;IAED,MAAM,EAAE,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC;IACnB,IAAI,EAAE;QAAE,OAAO,EAAE,MAAM,EAAE,EAAE,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC;IAE5C,MAAM,MAAM,GAAsB,CAAC,EAAE,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAW,EAAE,EAAE,CAAC,CAAC;QACxE,IAAI,EAAE,kBAA2B;QACjC,OAAO,EAAE,CAAC,CAAC,OAAO,IAAI,kBAAkB;QACxC,OAAO,EAAE,CAAC,CAAC,YAAY,EAAE,gCAAgC;QACzD,aAAa,EAAE,CAAC,CAAC,OAAO;KACzB,CAAC,CAAC,CAAC;IAEJ,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC;AAClC,CAAC"}

package/dist/checks/source-cross-check.d.ts

@@ -0,0 +1,52 @@
+import type { ValidationError, Warning } from "../errors.js";
+type LiteralKind = "host-port" | "scoped-package" | "source-path";
+export declare function extractLiterals(text: string): Array<{
+    literal: string;
+    kind: LiteralKind;
+}>;
+/** Returns true if `name` appears in `haystack` inside a quoted string,
+ *  bounded on the right by either a closing quote or `/` (subpath imports
+ *  like `'@fontsource/inter/400.css'` or `'react-dom/client'`). The right-
+ *  side `/` is the only addition over a strict closing-quote match — `-` and
+ *  `.` are still rejected so `react` does not match `react-dom`/`react.foo`. */
+export declare function findQuotedReference(name: string, haystack: string): boolean;
+/** Reads ANATOMY_SOURCE_SCAN_BYTES (e.g. "16M", "32768K", "16777216").
+ *  Defaults to DEFAULT_MAX_TOTAL_BYTES (8 MB) when unset/malformed.
+ *  Surfaced via the source-cross-check-truncated warning when the budget
+ *  is exhausted, so monorepo users with >8MB of source can raise the cap
+ *  without splitting into cascading sub-.anatomy files (per the
+ *  2026-05-09 stress test on openclaw-fresh). */
+export declare function getMaxTotalBytes(): number;
+interface SourceIndex {
+    files: Array<{
+        relPath: string;
+        content: string;
+    }>;
+    combinedHaystack: string;
+    truncated: boolean;
+    /** The byte budget used for this index (from getMaxTotalBytes()). Echoed
+     *  in the truncation warning so the user sees what cap was applied. */
+    maxTotalBytes: number;
+    /** First file relative-path that exceeded the budget and was therefore
+     *  NOT loaded — gives the user a concrete pointer for what got skipped. */
+    firstSkippedRel?: string;
+    /** Parsed package.json `scripts` section, if package.json existed and parsed
+     *  as JSON. Used by the bare-command usage check in checkDependencyUsage. */
+    packageJsonScripts?: Record<string, string>;
+}
+/** Returns true if `name` appears as a whitespace/operator-bounded token in
+ *  any value of the parsed package.json scripts. Handles bare invocation
+ *  (`"prettier --write ."`), `npx <name>`, and chained commands
+ *  (`"npm run lint && vitest run"`). For `@scope/name` deps, also matches
+ *  the conventional bin form `<scope>-<name>` (e.g. `@electron/rebuild`
+ *  publishes a bin called `electron-rebuild`). */
+export declare function isUsedInScripts(name: string, scripts: Record<string, string> | undefined): boolean;
+export declare function buildSourceIndex(scanRoot: string, structureEntries: Array<{
+    path?: string;
+}>): SourceIndex;
+export declare function sourceCrossCheck(doc: unknown, repoRoot?: string, anatomyDir?: string): {
+    errors: ValidationError[];
+    warnings: Warning[];
+};
+export {};
+//# sourceMappingURL=source-cross-check.d.ts.map

package/dist/checks/source-cross-check.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"source-cross-check.d.ts","sourceRoot":"","sources":["../../src/checks/source-cross-check.ts"],"names":[],"mappings":"AAYA,OAAO,KAAK,EAAE,eAAe,EAAE,OAAO,EAAE,MAAM,cAAc,CAAC;AAE7D,KAAK,WAAW,GAAG,WAAW,GAAG,gBAAgB,GAAG,aAAa,CAAC;AAOlE,wBAAgB,eAAe,CAAC,IAAI,EAAE,MAAM,GAAG,KAAK,CAAC;IAAE,OAAO,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,WAAW,CAAA;CAAE,CAAC,CAiB3F;AAED;;;;gFAIgF;AAChF,wBAAgB,mBAAmB,CAAC,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAM3E;AA4CD;;;;;iDAKiD;AACjD,wBAAgB,gBAAgB,IAAI,MAAM,CAUzC;AAKD,UAAU,WAAW;IACnB,KAAK,EAAE,KAAK,CAAC;QAAE,OAAO,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IACnD,gBAAgB,EAAE,MAAM,CAAC;IACzB,SAAS,EAAE,OAAO,CAAC;IACnB;2EACuE;IACvE,aAAa,EAAE,MAAM,CAAC;IACtB;+EAC2E;IAC3E,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB;iFAC6E;IAC7E,kBAAkB,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CAC7C;AAaD;;;;;kDAKkD;AAClD,wBAAgB,eAAe,CAC7B,IAAI,EAAE,MAAM,EACZ,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,SAAS,GAC1C,OAAO,CAWT;AAsHD,wBAAgB,gBAAgB,CAC9B,QAAQ,EAAE,MAAM,EAChB,gBAAgB,EAAE,KAAK,CAAC;IAAE,IAAI,CAAC,EAAE,MAAM,CAAA;CAAE,CAAC,GACzC,WAAW,CA0Eb;AA6FD,wBAAgB,gBAAgB,CAC9B,GAAG,EAAE,OAAO,EACZ,QAAQ,CAAC,EAAE,MAAM,EACjB,UAAU,CAAC,EAAE,MAAM,GAClB;IAAE,MAAM,EAAE,eAAe,EAAE,CAAC;IAAC,QAAQ,EAAE,OAAO,EAAE,CAAA;CAAE,CAgCpD"}