@archpilotlabs/archpilot 0.2.4 → 0.2.6

package/CHANGELOG.md

@@ -1,5 +1,65 @@
 # Changelog
 
+## 0.2.6
+
+### Improved
+
+- Improved Smart Init component and repository topology classification across complex monorepos and multi-module repositories.
+- Improved component classification accuracy across TypeScript/NestJS, Java/Spring, frontend, backend, library, multi-module, and mixed repository structures.
+- Improved API-design analysis precision for terminal or unconditional collection endpoints.
+- Improved event-architecture analysis for Spring listener declarations and inherited event types.
+- Improved data-query-risk handling for real-world SQL, JPQL, Spring Data repository, and query-builder patterns.
+- Bounded data-query-risk analysis for complex Java/Spring repository declarations to avoid pathological validation time.
+- Expanded regression coverage from validation against multiple real public repository shapes.
+
+### Fixed
+
+- Fixed runtime Nx projects and shared libraries being missed or misclassified in package-layout workspaces.
+- Fixed Maven runtime, library, support, distribution, and deploy-skipped modules being over- or under-promoted during Smart Init.
+- Fixed file-like candidate paths aborting Smart Init traversal.
+- Fixed terminal throw-only collection endpoints being reported as missing pagination.
+- Fixed Spring event listeners using annotation attributes, `ApplicationListener<T>`, or parent event types being treated as unhandled.
+- Fixed bounded Spring Data repository queries with `Pageable` or `Limit` parameters being reported as unbounded collection reads.
+- Fixed SQL-looking comments, non-query files, and Spring configuration files contributing noisy data-query-risk findings.
+
+### Notes
+
+- This release focuses on public-repository model accuracy and analyzer correctness.
+- These changes improve model and finding accuracy without changing rule IDs, severities, score weights, scoring caps, or normalization behavior.
+- Existing architecture configurations remain backward compatible.
+
+---
+
+## 0.2.5
+
+### Improved
+
+- Improved Smart Init classification for mixed backend, frontend, and library monorepos.
+- Improved NestJS detection so runtime applications with package publishing metadata are classified as backend services, while reusable NestJS packages remain libraries.
+- Improved component discovery so test-only packages, build and lint tooling, and scaffold templates are excluded from default governed architecture boundaries.
+- Improved backend resource detection for GraphQL APIs and PostgreSQL databases.
+- Improved data-query-risk analysis for parameterized and interpolated query limits, PostgreSQL catalog lookups, and existence queries.
+- Improved source-scope handling for authorization analysis and controller-role detection.
+- Improved CLI version reporting in bundled and packed executables.
+
+### Fixed
+
+- Fixed NestJS backend applications being classified only as Node.js libraries when package entry points or publishing metadata were present.
+- Fixed Playwright test packages, lint-rule packages, build tooling, and nested scaffold templates being proposed as governed components.
+- Fixed authorization findings being emitted from confirmed specification and test source.
+- Fixed bounded SQL queries using parameterized or interpolated `LIMIT` values being reported as unbounded collection reads.
+- Fixed PostgreSQL catalog identity and existence lookups being treated as application collection queries.
+- Fixed generic `handlers` directories being interpreted as controller layers without structural controller evidence.
+- Fixed bundled CLI artifacts reporting a stale version because package metadata could not be resolved at runtime.
+
+### Notes
+
+- These changes improve model and finding accuracy without changing rule IDs, severities, score weights, scoring caps, or normalization behavior.
+- Oversized services, direct persistence access, unbounded collection processing, repeated query patterns, and dependency-boundary violations remain reportable when supported by credible evidence.
+- Documentation, examples, integration tests, and tooling remain governed when explicitly included by the generated or reviewed architecture configuration.
+
+---
+
 ## 0.2.4
 
 ### Improved

package/dist/archpilot-cli.js

@@ -12907,7 +12907,7 @@ ${lanes.join("\n")}
               return process.memoryUsage().heapUsed;
             },
             getFileSize(path74) {
-              const stat = statSync(path74);
+              const stat = statSync2(path74);
               if (stat == null ? void 0 : stat.isFile()) {
                 return stat.size;
               }
@@ -12951,7 +12951,7 @@ ${lanes.join("\n")}
             }
           };
           return nodeSystem;
-          function statSync(path74) {
+          function statSync2(path74) {
             try {
               return _fs.statSync(path74, statSyncOptions);
             } catch {
@@ -13010,7 +13010,7 @@ ${lanes.join("\n")}
               activeSession.post("Profiler.stop", (err, { profile }) => {
                 var _a;
                 if (!err) {
-                  if ((_a = statSync(profilePath)) == null ? void 0 : _a.isDirectory()) {
+                  if ((_a = statSync2(profilePath)) == null ? void 0 : _a.isDirectory()) {
                     profilePath = _path.join(profilePath, `${(/* @__PURE__ */ new Date()).toISOString().replace(/:/g, "-")}+P${process.pid}.cpuprofile`);
                   }
                   try {
@@ -13130,7 +13130,7 @@ ${lanes.join("\n")}
                 let stat;
                 if (typeof dirent === "string" || dirent.isSymbolicLink()) {
                   const name = combinePaths(path74, entry);
-                  stat = statSync(name);
+                  stat = statSync2(name);
                   if (!stat) {
                     continue;
                   }
@@ -13154,7 +13154,7 @@ ${lanes.join("\n")}
             return matchFiles(path74, extensions, excludes, includes, useCaseSensitiveFileNames2, process.cwd(), depth, getAccessibleFileSystemEntries, realpath);
           }
           function fileSystemEntryExists(path74, entryKind) {
-            const stat = statSync(path74);
+            const stat = statSync2(path74);
             if (!stat) {
               return false;
             }
@@ -13196,7 +13196,7 @@ ${lanes.join("\n")}
           }
           function getModifiedTime3(path74) {
             var _a;
-            return (_a = statSync(path74)) == null ? void 0 : _a.mtime;
+            return (_a = statSync2(path74)) == null ? void 0 : _a.mtime;
           }
           function setModifiedTime(path74, time) {
             try {
@@ -225435,6 +225435,7 @@ init_sourceScopeClassification();
 var maxFileSizeBytes = 256 * 1024;
 var supplementalRiskScanExtensions = [".json", ".yaml", ".yml", ".sql"];
 var backendCodeExtensions = [".ts", ".tsx", ".js", ".jsx", ".mjs", ".cjs", ".java", ".cs", ".py", ".php", ".go"];
+var methodBodyScanExtensions = new Set(backendCodeExtensions);
 var supplementalIgnoredDirectoryNames = [".vscode-test", ".tmp"];
 var batchingEvidencePattern = /\b(?:DataLoader|Promise\.all|findMany\s*\([\s\S]{0,300}\bin\b|where\s*:\s*\{[\s\S]{0,300}\bin\s*:|include\s*:|join\s*\(|leftJoin|innerJoin|JOIN\b)\b/iu;
 var queryReadPattern = /\b((?:this\.)?(?:prisma\.(\w+)|([A-Za-z_$][\w$]*Repository|repository))\.(find\w*|count|aggregate|groupBy)\s*\()/giu;
@@ -225443,6 +225444,7 @@ var boundEvidencePattern = /\b(?:take|limit|page|cursor|skip|offset|PageRequest|
 var repeatedQueryPattern = /\b((?:this\.)?(?:prisma\.(\w+)|(\w*Repository|repository))\.(find\w*|count|aggregate|groupBy)\s*\(\s*(?:\{[\s\S]{0,300}?\}|\w+)\s*\))/giu;
 var tenantPredicatePattern = /\b(?:tenantId|tenant_id|organizationId|organization_id|orgId|org_id|accountId|account_id|workspaceId|workspace_id|companyId|company_id|customerId|customer_id)\b/u;
 var codePaginationEvidencePattern = /\b(?:take|skip|limit|offset|page|perPage|pageSize|cursor|Pageable|PageRequest|paginate|simplePaginate|Limit|Offset|Take|Skip|TOP\s+\d+)\b/iu;
+var sqlQueryInvocationHintPattern = /\b(?:query|execute|executeQuery|createNativeQuery|createQuery|FromSqlRaw|FromSqlInterpolated|Query|QueryContext|QueryRow|QueryRowContext|Exec|ExecContext|Raw|text|DB::select|DB::statement|DB::raw|DB::table)\s*\(|\$queryRaw\s*\(|\$executeRaw\s*\(|@Query\s*\(/u;
 function getLineStarts(file) {
   if (file.lineStarts) {
     return file.lineStarts;
@@ -225656,21 +225658,38 @@ function hasSelectStar(statement) {
   return /\bselect\s+(distinct\s+)?\*/i.test(statement);
 }
 function hasPaginationEvidence(statement) {
-  return /\blimit\s+\d+\b|\boffset\s+\d+\b|\bfetch\s+(first|next)\b|\btop\s+\d+\b/i.test(
+  const boundValuePattern = "(?:\\d+|\\$\\d+|\\?|:[A-Za-z_]\\w*|@[A-Za-z_]\\w*|\\$\\{[^}]{1,120}\\}|[A-Za-z_]\\w*)";
+  const valueTerminatorPattern = "(?=\\s|,|;|\\)|$)";
+  return new RegExp(
+    `\\blimit\\s+${boundValuePattern}${valueTerminatorPattern}|\\boffset\\s+${boundValuePattern}${valueTerminatorPattern}|\\bfetch\\s+(first|next)\\b|\\btop\\s+${boundValuePattern}${valueTerminatorPattern}`,
+    "i"
+  ).test(
     statement
   );
 }
 function hasEqualityPredicate(statement, columnPattern) {
+  const whereMatch = /\bwhere\b/iu.exec(statement);
+  if (!whereMatch) {
+    return false;
+  }
+  const predicateWindow = statement.slice(whereMatch.index, whereMatch.index + 1200);
   return new RegExp(
-    `\\bwhere\\b[\\s\\S]*\\b(?:${columnPattern})\\b\\s*=\\s*(?:[\\w$:@?]+|'[^']+'|"[^"]+"|\\d+)`,
+    `\\b(?:${columnPattern})\\b\\s*=\\s*(?:[\\w$:@?]+|'[^']+'|"[^"]+"|\\d+)`,
     "iu"
-  ).test(statement);
+  ).test(predicateWindow);
 }
 function isCatalogIdentifierPointLookup(statement) {
-  return /\bfrom\s+information_schema\.schemata\b/iu.test(statement) && hasEqualityPredicate(statement, "schema_name");
+  const metadataSourcePattern = /\bfrom\s+(?:information_schema\.(?:schemata|tables|columns|key_column_usage|table_constraints)|pg_catalog\.(?:pg_class|pg_namespace|pg_attribute|pg_constraint|pg_type|pg_enum|pg_tables|pg_indexes)|pg_(?:class|namespace|attribute|constraint|type|enum|tables|indexes))\b/iu;
+  if (!metadataSourcePattern.test(statement)) {
+    return false;
+  }
+  return hasEqualityPredicate(statement, "schema_name|table_schema|table_name|column_name|constraint_name") || hasEqualityPredicate(statement, "schemaname|tablename|relname|nspname|attname|conname|typname|enumlabel|indexname");
 }
 function isObviousPointLookup(statement) {
   const normalized = statement.toLowerCase();
+  if (/\bselect\s+exists\s*\(/i.test(normalized)) {
+    return true;
+  }
   if (!normalized.includes("where")) {
     return false;
   }
@@ -226258,6 +226277,9 @@ function detectRepeatedQueryPattern(method) {
 }
 function extractSqlQueryLiterals(content) {
   const queries = [];
+  if (!sqlQueryInvocationHintPattern.test(content)) {
+    return queries;
+  }
   const searchableContent = maskSourceComments(content);
   const patterns = [
     /(?:\b(?:[\w$]+\.)?(?:query|execute|executeQuery|createNativeQuery|createQuery|FromSqlRaw|FromSqlInterpolated|Query|QueryContext|QueryRow|QueryRowContext|Exec|ExecContext|Raw|text)|\$queryRaw|\$executeRaw)\s*\([^'"`)]{0,180}?(['"`])([\s\S]{0,900}?)\1/giu,
@@ -226279,7 +226301,7 @@ function extractSqlQueryLiterals(content) {
   return queries;
 }
 function maskSourceComments(content) {
-  let masked = "";
+  const masked = [];
   let index = 0;
   let state = "code";
   let escaped = false;
@@ -226288,27 +226310,27 @@ function maskSourceComments(content) {
     const next = content[index + 1] ?? "";
     if (state === "line-comment") {
       if (current === "\r" || current === "\n") {
-        masked += current;
+        masked.push(current);
         state = "code";
       } else {
-        masked += " ";
+        masked.push(" ");
       }
       index += 1;
       continue;
     }
     if (state === "block-comment") {
       if (current === "*" && next === "/") {
-        masked += "  ";
+        masked.push("  ");
         index += 2;
         state = "code";
         continue;
       }
-      masked += current === "\r" || current === "\n" ? current : " ";
+      masked.push(current === "\r" || current === "\n" ? current : " ");
       index += 1;
       continue;
     }
     if (state === "single" || state === "double" || state === "template") {
-      masked += current;
+      masked.push(current);
       if (escaped) {
         escaped = false;
       } else if (current === "\\") {
@@ -226320,13 +226342,13 @@ function maskSourceComments(content) {
       continue;
     }
     if (current === "/" && next === "/") {
-      masked += "  ";
+      masked.push("  ");
       index += 2;
       state = "line-comment";
       continue;
     }
     if (current === "/" && next === "*") {
-      masked += "  ";
+      masked.push("  ");
       index += 2;
       state = "block-comment";
       continue;
@@ -226338,10 +226360,10 @@ function maskSourceComments(content) {
     } else if (current === "`") {
       state = "template";
     }
-    masked += current;
+    masked.push(current);
     index += 1;
   }
-  return masked;
+  return masked.join("");
 }
 function detectCodeSqlQueryShapeFindings(file, config) {
   const findings = [];
@@ -226371,7 +226393,7 @@ function detectCodeSqlQueryShapeFindings(file, config) {
           target: firstTable ?? "sql-query"
         }));
       }
-      if (statement.queryType === "select" && !isOperationalOrBatchQueryContext(file) && !hasPaginationEvidence(statement.statement) && !isObviousPointLookup(statement.statement) && !/\bcount\s*\(/i.test(statement.statement)) {
+      if (statement.queryType === "select" && !isOperationalOrBatchQueryContext(file) && !hasPaginationEvidence(statement.statement) && !hasSpringDataRepositoryMethodBoundEvidence(file.content, query.offset) && !isObviousPointLookup(statement.statement) && !/\bcount\s*\(/i.test(statement.statement)) {
         findings.push(createCodeFinding({
           id: "AP-DQR-003",
           message: `Potential unbounded query risk: SELECT query${firstTable ? ` on table '${firstTable}'` : ""} has no LIMIT/OFFSET/FETCH pagination evidence.`,
@@ -226385,6 +226407,18 @@ function detectCodeSqlQueryShapeFindings(file, config) {
   }
   return findings;
 }
+function hasSpringDataRepositoryMethodBoundEvidence(content, queryOffset) {
+  const annotationOffset = content.lastIndexOf("@Query", queryOffset);
+  if (annotationOffset < 0 || queryOffset - annotationOffset > 2400) {
+    return false;
+  }
+  const semicolonOffset = content.indexOf(";", queryOffset);
+  if (semicolonOffset < queryOffset || semicolonOffset - annotationOffset > 3200) {
+    return false;
+  }
+  const declarationWindow = content.slice(queryOffset, semicolonOffset + 1);
+  return /\b(?:Page|Slice|Window)\s*</u.test(declarationWindow) && /\b(?:Pageable|Limit)\s+\w+\b/u.test(declarationWindow);
+}
 function collectOrmReadEvidence(method) {
   const patterns = [
     [/\b(?:this\.)?prisma\.\w+\.findMany\s*\(/giu, "prisma.findMany"],
@@ -226502,7 +226536,11 @@ function detectCodeQueryRiskFindings(files, config, astCache) {
     if (isProductionBackend) {
       findings.push(...detectCodeSqlQueryShapeFindings(file, config));
     }
-    for (const method of extractMethodBodies(file, astCache)) {
+    if (!methodBodyScanExtensions.has(file.extension)) {
+      continue;
+    }
+    const methods = extractMethodBodies(file, astCache);
+    for (const method of methods) {
       if (!isProductionBackend) {
         continue;
       }
@@ -227467,6 +227505,7 @@ var import_node_fs26 = require("node:fs");
 var ts4 = __toESM(require_typescript());
 init_moduleDiscovery();
 init_archpilotIgnore();
+init_sourceScopeClassification();
 var RuleIds = {
   AUTH_MISSING_ENFORCEMENT: "AP-AUTH-001",
   AUTH_INCONSISTENT_ENFORCEMENT: "AP-AUTH-002",
@@ -227897,7 +227936,10 @@ function isProtectedLooking(endpoint) {
 }
 function detectAuthorizationFindings(files, contract, astCache) {
   const findings = [];
-  for (const file of files) {
+  const productionFiles = files.filter(
+    (file) => isProductionBackendGovernanceScope(classifyValidationSourceScope(file.relativePath))
+  );
+  for (const file of productionFiles) {
     const moduleName = inferModuleForPath3(contract, file.relativePath);
     const endpoints = extractEndpoints(file, moduleName);
     if (endpoints.length === 0 && !isControllerFile(file, astCache)) {
@@ -227932,7 +227974,7 @@ function detectAuthorizationFindings(files, contract, astCache) {
       }
     }
   }
-  for (const file of files.filter((candidate) => isRepositoryFile(candidate, astCache))) {
+  for (const file of productionFiles.filter((candidate) => isRepositoryFile(candidate, astCache))) {
     const roleMatch = executableAuthorizationDecisionPattern.exec(file.content);
     if (!roleMatch) {
       continue;
@@ -228415,7 +228457,7 @@ function classifySourceFile2(file, contract, astCache) {
   const scope = classifyValidationSourceScope(file.relativePath);
   const roles = new Set(getDeclaredRoles2(file, astCache));
   const lowerPath = file.relativePath.toLowerCase();
-  if (/(^|[./_-])controller\.(ts|tsx|js|jsx|mjs|cjs|java|cs|py|php|go)$/u.test(lowerPath) || /(^|\/)(controllers?|routers?|routes?|handlers?)\//u.test(lowerPath)) {
+  if (/(^|[./_-])controller\.(ts|tsx|js|jsx|mjs|cjs|java|cs|py|php|go)$/u.test(lowerPath) || /(^|\/)(controllers?|routers?|routes?)\//u.test(lowerPath)) {
     roles.add("controller");
   }
   if (/(^|[./_-])service\.(ts|tsx|js|jsx|mjs|cjs|java|cs|py|php|go)$/u.test(lowerPath) || /(^|\/)(services?)\//u.test(lowerPath)) {
@@ -229954,8 +229996,15 @@ function isStaticCollectionBackedEndpoint(endpoint) {
   }
   return isStaticCollectionExpression(stripStaticLiteralNoise(expression));
 }
+function isUnconditionallyTerminalThrowEndpoint(endpoint) {
+  const body = endpoint.body.trim().replace(/^\{\s*/u, "").replace(/\s*\}$/u, "").trim();
+  if (!/^throw\s+new\s+[A-Z]\w*(?:Exception|Error)\s*\([^;{}]*\)\s*;?$/u.test(body)) {
+    return false;
+  }
+  return !/\b(?:if|for|while|switch|try|catch|return|await|yield)\b/u.test(body);
+}
 function detectPaginationFindings(endpoints, contractEndpoints) {
-  return endpoints.filter((endpoint) => isCollectionGet(endpoint) && !hasPaginationEvidence2(endpoint, contractEndpoints) && !isStaticCollectionBackedEndpoint(endpoint)).map((endpoint) => createFinding4({
+  return endpoints.filter((endpoint) => isCollectionGet(endpoint) && !hasPaginationEvidence2(endpoint, contractEndpoints) && !isStaticCollectionBackedEndpoint(endpoint) && !isUnconditionallyTerminalThrowEndpoint(endpoint)).map((endpoint) => createFinding4({
     id: RuleIds3.MISSING_PAGINATION,
     message: `Collection endpoint ${endpoint.httpMethod.toUpperCase()} ${endpoint.path} lacks visible pagination evidence.`,
     endpoint
@@ -230715,12 +230764,14 @@ function extractTypeScriptSignals(file, astCache) {
     ts6.forEachChild(node, visit);
   };
   visit(sourceFile);
-  return { publishes, handlers: handlers2, publicEventNames: /* @__PURE__ */ new Set() };
+  return { publishes, handlers: handlers2, publicEventNames: /* @__PURE__ */ new Set(), eventTypeParents: /* @__PURE__ */ new Map() };
 }
 function extractJavaSignals(file) {
   const publishes = [];
   const handlers2 = [];
-  for (const match of file.content.matchAll(/@EventListener\s*(?:\(\s*([A-Za-z]\w*Event)\.class\s*\))?/gu)) {
+  for (const match of file.content.matchAll(
+    /@EventListener\s*(?:\(\s*(?:(?:classes|value)\s*=\s*)?(?:\{\s*)?([A-Za-z_]\w*)\.class\s*(?:\})?\s*\))?/gu
+  )) {
     const eventName = match[1] ?? "ApplicationEvent";
     handlers2.push({
       eventName,
@@ -230732,6 +230783,21 @@ function extractJavaSignals(file) {
       publishes: []
     });
   }
+  for (const match of file.content.matchAll(/\b(?:class|interface)\s+\w+[^{;]*\bApplicationListener\s*<\s*([A-Za-z_]\w*)\s*>/gu)) {
+    const eventName = match[1];
+    if (!eventName) {
+      continue;
+    }
+    handlers2.push({
+      eventName,
+      normalizedName: normalizeEventName(eventName),
+      file,
+      line: lineNumberForOffset5(file, match.index ?? 0),
+      module: file.module,
+      style: classifyEventStyle(eventName),
+      publishes: []
+    });
+  }
   for (const match of file.content.matchAll(/(?:await\s+)?(?:\w+\.)?(?:publishEvent|publish|emit)\s*\(\s*(?:(new)\s+([A-Za-z_]\w*(?:\.[A-Za-z_]\w*)*)\s*\(|(["'])([A-Za-z][\w.]*Event?|[a-z][\w.]+)\3|([A-Z][A-Za-z0-9_]*Event)\b)/gu)) {
     const constructedType = match[2]?.split(".").at(-1);
     const eventName = constructedType ?? match[4] ?? match[5];
@@ -230749,7 +230815,23 @@ function extractJavaSignals(file) {
       assignedOrReturned: false
     });
   }
-  return { publishes, handlers: handlers2, publicEventNames: /* @__PURE__ */ new Set() };
+  return { publishes, handlers: handlers2, publicEventNames: /* @__PURE__ */ new Set(), eventTypeParents: extractJavaEventTypeParents(file) };
+}
+function extractJavaEventTypeParents(file) {
+  const parentsByType = /* @__PURE__ */ new Map();
+  for (const match of file.content.matchAll(/\b(?:class|record)\s+([A-Za-z_]\w*)(?:\s*<[^>{}]+>)?\s+extends\s+([A-Za-z_]\w*)/gu)) {
+    const child = match[1];
+    const parent = match[2];
+    if (!child || !parent || !child.endsWith("Event")) {
+      continue;
+    }
+    const normalizedChild = normalizeEventName(child);
+    const normalizedParent = normalizeEventName(parent);
+    const parents = parentsByType.get(normalizedChild) ?? /* @__PURE__ */ new Set();
+    parents.add(normalizedParent);
+    parentsByType.set(normalizedChild, parents);
+  }
+  return parentsByType;
 }
 function extractPublishSignalsFromText(file, body, baseOffset, pattern) {
   const publishes = [];
@@ -230795,7 +230877,7 @@ function extractCsharpSignals(file) {
       publishes: extractPublishSignalsFromText(file, classBody, classOpenBrace >= 0 ? classOpenBrace : classStart, csharpPublishPattern)
     });
   }
-  return { publishes, handlers: handlers2, publicEventNames: /* @__PURE__ */ new Set() };
+  return { publishes, handlers: handlers2, publicEventNames: /* @__PURE__ */ new Set(), eventTypeParents: /* @__PURE__ */ new Map() };
 }
 function extractPythonSignals(file) {
   const publishes = extractPublishSignalsFromText(file, file.content, 0, pythonPublishPattern);
@@ -230818,7 +230900,7 @@ function extractPythonSignals(file) {
       publishes: extractPublishSignalsFromText(file, block, blockStart, pythonPublishPattern)
     });
   }
-  return { publishes, handlers: handlers2, publicEventNames: /* @__PURE__ */ new Set() };
+  return { publishes, handlers: handlers2, publicEventNames: /* @__PURE__ */ new Set(), eventTypeParents: /* @__PURE__ */ new Map() };
 }
 function extractPhpSignals(file) {
   const publishes = extractPublishSignalsFromText(file, file.content, 0, phpEventPublishPattern);
@@ -230843,7 +230925,7 @@ function extractPhpSignals(file) {
       publishes: extractPublishSignalsFromText(file, classBody, classOpenBrace >= 0 ? classOpenBrace : classStart, phpEventPublishPattern)
     });
   }
-  return { publishes, handlers: handlers2, publicEventNames: /* @__PURE__ */ new Set() };
+  return { publishes, handlers: handlers2, publicEventNames: /* @__PURE__ */ new Set(), eventTypeParents: /* @__PURE__ */ new Map() };
 }
 function extractGoSignals(file) {
   const publishes = extractPublishSignalsFromText(file, file.content, 0, goPublishPattern);
@@ -230863,7 +230945,7 @@ function extractGoSignals(file) {
       publishes: []
     });
   }
-  return { publishes, handlers: handlers2, publicEventNames: /* @__PURE__ */ new Set() };
+  return { publishes, handlers: handlers2, publicEventNames: /* @__PURE__ */ new Set(), eventTypeParents: /* @__PURE__ */ new Map() };
 }
 function isTypeScriptLikeExtension(extension) {
   return [".ts", ".tsx", ".js", ".jsx", ".mjs", ".cjs"].includes(extension);
@@ -230963,6 +231045,7 @@ function collectPublicTypeScriptEventNames(files, contract, astCache) {
 function collectSignals(files, contract, astCache) {
   const publishes = [];
   const handlers2 = [];
+  const eventTypeParents = /* @__PURE__ */ new Map();
   const publicEventNames = collectPublicTypeScriptEventNames(files, contract, astCache);
   for (const file of files) {
     let signals;
@@ -230988,14 +231071,41 @@ function collectSignals(files, contract, astCache) {
     }
     publishes.push(...signals.publishes);
     handlers2.push(...signals.handlers);
+    for (const [eventName, parents] of signals.eventTypeParents) {
+      const existing = eventTypeParents.get(eventName) ?? /* @__PURE__ */ new Set();
+      for (const parent of parents) {
+        existing.add(parent);
+      }
+      eventTypeParents.set(eventName, existing);
+    }
+  }
+  return { publishes, handlers: handlers2, publicEventNames, eventTypeParents };
+}
+function isHandledEventName(normalizedName, handledNames, eventTypeParents) {
+  const queue = [normalizedName];
+  const visited = /* @__PURE__ */ new Set();
+  while (queue.length > 0) {
+    const current = queue.shift();
+    if (!current || visited.has(current)) {
+      continue;
+    }
+    if (handledNames.has(current)) {
+      return true;
+    }
+    visited.add(current);
+    for (const parent of eventTypeParents.get(current) ?? []) {
+      if (!visited.has(parent)) {
+        queue.push(parent);
+      }
+    }
   }
-  return { publishes, handlers: handlers2, publicEventNames };
+  return false;
 }
 function buildEventFindings(signals) {
   const findings = [];
   const handledNames = new Set(signals.handlers.map((handler) => handler.normalizedName));
   for (const publish of signals.publishes) {
-    if (!handledNames.has(publish.normalizedName)) {
+    if (!isHandledEventName(publish.normalizedName, handledNames, signals.eventTypeParents)) {
       if (signals.publicEventNames.has(publish.normalizedName)) {
         continue;
       }
@@ -242997,8 +243107,6 @@ var ignoredRootPathPrefixes = [
   "static",
   "assets",
   "vendor",
-  "plugins",
-  "plugin",
   "themes",
   "theme",
   "generated",
@@ -243021,8 +243129,12 @@ function pushEvidence(evidence, message) {
 function safeReadDirectoryEntries(directoryPath) {
   try {
     return fs52.readdirSync(directoryPath, { withFileTypes: true });
-  } catch {
-    return [];
+  } catch (error) {
+    const code = typeof error === "object" && error !== null && "code" in error ? String(error.code) : "";
+    if (code === "ENOENT" || code === "ENOTDIR") {
+      return [];
+    }
+    throw error;
   }
 }
 function safeReadJsonFile(jsonPath) {
@@ -245596,8 +245708,6 @@ function isIgnoredComponentCandidatePath(componentPath) {
     "static",
     "assets",
     "vendor",
-    "plugins",
-    "plugin",
     "themes",
     "theme",
     "generated",
@@ -245618,6 +245728,36 @@ function pathExists19(pathValue) {
     return false;
   }
 }
+function isSafeMissingPathError(error) {
+  const code = typeof error === "object" && error !== null && "code" in error ? String(error.code) : "";
+  return code === "ENOENT" || code === "ENOTDIR";
+}
+function isDirectoryPath(pathValue) {
+  try {
+    return fs58.statSync(pathValue).isDirectory();
+  } catch (error) {
+    if (isSafeMissingPathError(error)) {
+      return false;
+    }
+    throw error;
+  }
+}
+function readDirectoryEntriesForTraversal(directoryPath, options) {
+  if (!isDirectoryPath(directoryPath)) {
+    return [];
+  }
+  try {
+    return fs58.readdirSync(directoryPath, {
+      withFileTypes: true,
+      ...options?.recursive ? { recursive: true } : {}
+    });
+  } catch (error) {
+    if (isSafeMissingPathError(error)) {
+      return [];
+    }
+    throw error;
+  }
+}
 function hasManifest2(workspaceRoot, componentPath) {
   const absoluteRoot = componentPath === "." ? workspaceRoot : path64.join(workspaceRoot, ...componentPath.split("/"));
   return [
@@ -245625,7 +245765,8 @@ function hasManifest2(workspaceRoot, componentPath) {
     "pom.xml",
     "requirements.txt",
     "go.mod",
-    "composer.json"
+    "composer.json",
+    "project.json"
   ].some((fileName) => pathExists19(path64.join(absoluteRoot, fileName)));
 }
 function safeReadJson(filePath) {
@@ -245648,9 +245789,21 @@ function recordKeys(value) {
 function hasObject(value) {
   return Boolean(value && typeof value === "object" && !Array.isArray(value));
 }
+function readStringProperty(value, key) {
+  const field = value?.[key];
+  return typeof field === "string" && field.trim().length > 0 ? field.trim() : void 0;
+}
 function hasPackagePublishSurface(packageJson) {
   return hasObject(packageJson?.exports) || typeof packageJson?.main === "string" || typeof packageJson?.module === "string" || typeof packageJson?.types === "string" || hasObject(packageJson?.publishConfig) || Array.isArray(packageJson?.files);
 }
+function packageDependencyNames(packageJson) {
+  return [
+    ...recordKeys(packageJson?.dependencies),
+    ...recordKeys(packageJson?.devDependencies),
+    ...recordKeys(packageJson?.peerDependencies),
+    ...recordKeys(packageJson?.optionalDependencies)
+  ];
+}
 function absoluteComponentRoot(workspaceRoot, componentPath) {
   return componentPath === "." ? workspaceRoot : path64.join(workspaceRoot, ...componentPath.split("/"));
 }
@@ -245658,6 +245811,136 @@ function readPackageJson(workspaceRoot, componentPath) {
   const absoluteRoot = absoluteComponentRoot(workspaceRoot, componentPath);
   return safeReadJson(path64.join(absoluteRoot, "package.json"));
 }
+function readProjectJson(workspaceRoot, componentPath) {
+  const absoluteRoot = absoluteComponentRoot(workspaceRoot, componentPath);
+  return safeReadJson(path64.join(absoluteRoot, "project.json"));
+}
+function readNxWorkspaceLayout(workspaceRoot) {
+  const nxJson = safeReadJson(path64.join(workspaceRoot, "nx.json"));
+  const workspaceLayout = nxJson?.workspaceLayout;
+  if (!hasObject(workspaceLayout)) {
+    return {};
+  }
+  const layout = workspaceLayout;
+  return {
+    ...typeof layout.appsDir === "string" && layout.appsDir.trim().length > 0 ? { appsDir: normalizePath25(layout.appsDir.trim()) } : {},
+    ...typeof layout.libsDir === "string" && layout.libsDir.trim().length > 0 ? { libsDir: normalizePath25(layout.libsDir.trim()) } : {}
+  };
+}
+function readTargetMap(projectJson) {
+  const targets = projectJson?.targets ?? projectJson?.architect;
+  return hasObject(targets) ? targets : {};
+}
+function targetExecutorText(target) {
+  if (!hasObject(target)) {
+    return "";
+  }
+  const typed = target;
+  const executor = typeof typed.executor === "string" ? typed.executor : "";
+  const builder = typeof typed.builder === "string" ? typed.builder : "";
+  const options = hasObject(typed.options) ? typed.options : {};
+  const main = typeof options.main === "string" ? options.main : "";
+  const index = typeof options.index === "string" ? options.index : "";
+  const outputPath = typeof options.outputPath === "string" ? options.outputPath : "";
+  return `${executor} ${builder} ${main} ${index} ${outputPath}`.toLowerCase();
+}
+function hasNxRuntimeProjectEvidence(projectJson) {
+  const projectType = readStringProperty(projectJson, "projectType");
+  if (projectType === "library") {
+    return false;
+  }
+  const targets = readTargetMap(projectJson);
+  const targetNames = Object.keys(targets);
+  const targetText = targetNames.map((targetName) => `${targetName} ${targetExecutorText(targets[targetName])}`).join(" ");
+  const hasRuntimeTarget = /\b(?:serve|start|preview|worker|package:container|deploy:static)\b/u.test(targetText);
+  const hasBuildEntrypoint = /\bbuild\b/u.test(targetNames.join(" ")) && /(?:\bmain\b|src\/main|src\/index|public\/index|webpack|vite|next|node|container|browser|dev-server)/u.test(targetText);
+  return projectType === "application" || hasRuntimeTarget || hasBuildEntrypoint;
+}
+function hasNxSupportOnlyProjectEvidence(projectJson) {
+  const projectType = readStringProperty(projectJson, "projectType");
+  const targets = readTargetMap(projectJson);
+  const targetNames = Object.keys(targets);
+  if (targetNames.length === 0) {
+    return false;
+  }
+  const targetText = targetNames.map((targetName) => `${targetName} ${targetExecutorText(targets[targetName])}`).join(" ");
+  const hasOnlySupportTargets = targetNames.every(
+    (targetName) => /^(?:e2e|test|unit-test|integration-test|lint|typecheck|format|smoke|bench|benchmark)$/u.test(targetName)
+  );
+  const hasTestExecutor = /(?:cypress|playwright|jest|vitest|mocha|karma|protractor)/u.test(targetText);
+  return projectType !== "library" && (hasOnlySupportTargets || hasTestExecutor);
+}
+function classifyNxRuntimeKind(projectJson) {
+  if (!hasNxRuntimeProjectEvidence(projectJson)) {
+    return void 0;
+  }
+  const targets = readTargetMap(projectJson);
+  const targetText = Object.entries(targets).map(([targetName, target]) => `${targetName} ${targetExecutorText(target)}`).join(" ");
+  if (/(?:webpack:dev-server|webpack-dev-server|src\/index\.(?:tsx|jsx|ts|js)|public\/index\.html|browser|react|vite|next|angular|deploy:static)/u.test(targetText)) {
+    return "frontend";
+  }
+  if (/(?:@nx\/js:node|@nrwl\/node|src\/main\.(?:ts|js)|target:\s*node|node\b|container|worker|queue)/u.test(targetText)) {
+    return /\bworker\b/u.test(targetText) ? "worker" : "backend";
+  }
+  return void 0;
+}
+function collectNxProjectCandidates(workspaceRoot) {
+  if (!pathExists19(path64.join(workspaceRoot, "nx.json"))) {
+    return [];
+  }
+  const candidates = /* @__PURE__ */ new Map();
+  const workspaceLayout = readNxWorkspaceLayout(workspaceRoot);
+  const preferredRoots = new Set(
+    ["apps", "packages", "services", "libs", workspaceLayout.appsDir, workspaceLayout.libsDir].filter((entry) => typeof entry === "string" && entry.length > 0).map(normalizePath25)
+  );
+  const maxDepth = 5;
+  const queue = [
+    { absolutePath: workspaceRoot, relativePath: "", depth: 0 }
+  ];
+  const addCandidate = (candidatePath, evidence) => {
+    const normalized = normalizePath25(candidatePath);
+    const existing = candidates.get(normalized) ?? { path: normalized, evidence: [] };
+    addEvidence6(existing.evidence, evidence);
+    candidates.set(normalized, existing);
+  };
+  while (queue.length > 0) {
+    const current = queue.shift();
+    if (!current) {
+      continue;
+    }
+    for (const entry of readDirectoryEntriesForTraversal(current.absolutePath)) {
+      if (!entry.isDirectory()) {
+        continue;
+      }
+      if ([".git", ".archpilot", "node_modules", "dist", "build", "out", "coverage"].includes(entry.name)) {
+        continue;
+      }
+      const relativePath = normalizePath25(current.relativePath ? `${current.relativePath}/${entry.name}` : entry.name);
+      if (current.depth >= maxDepth) {
+        continue;
+      }
+      const projectJsonPath = path64.join(current.absolutePath, entry.name, "project.json");
+      if (pathExists19(projectJsonPath)) {
+        const projectJson = safeReadJson(projectJsonPath);
+        const projectRoot = normalizePath25(readStringProperty(projectJson, "root") ?? relativePath);
+        if (hasNxRuntimeProjectEvidence(projectJson)) {
+          addCandidate(projectRoot, "Detected Nx runtime project metadata");
+        } else if (readStringProperty(projectJson, "sourceRoot")) {
+          addCandidate(projectRoot, "Detected Nx source-bearing project metadata");
+        }
+      }
+      const firstSegment = relativePath.split("/")[0] ?? "";
+      if (current.depth === 0 || preferredRoots.has(firstSegment) || preferredRoots.has(relativePath.split("/").slice(0, 2).join("/"))) {
+        queue.push({
+          absolutePath: path64.join(current.absolutePath, entry.name),
+          relativePath,
+          depth: current.depth + 1
+        });
+      }
+    }
+  }
+  return [...candidates.values()].sort((left, right) => left.path.localeCompare(right.path));
+}
 function readTextFileSafe(filePath) {
   try {
     return fs58.readFileSync(filePath, { encoding: "utf8" });
@@ -245704,6 +245987,8 @@ function readMavenMetadata(workspaceRoot, componentPath) {
     testScopedDependencyCount: dependencyBlocks.filter((block) => /<scope>\s*test\s*<\/scope>/iu.test(block)).length,
     totalDependencyCount: dependencyBlocks.length,
     hasMavenPluginConfiguration: packaging === "maven-plugin" || /maven-plugin-plugin|<goalPrefix>|<mojo/iu.test(normalizedPom),
+    hasAssemblyPackagingConfiguration: /maven-assembly-plugin|<goal>\s*single\s*<\/goal>|<descriptor>[^<]*(?:assembly|dist|distribution)[^<]*<\/descriptor>/iu.test(normalizedPom),
+    hasDeploySkipConfiguration: /<maven\.deploy\.skip>\s*true\s*<\/maven\.deploy\.skip>|<artifactId>\s*maven-deploy-plugin\s*<\/artifactId>[\s\S]*?<skip>\s*true\s*<\/skip>/iu.test(normalizedPom),
     hasTestLifecycleConfiguration: /maven-surefire-plugin|maven-failsafe-plugin|integration-test|failsafe|surefire/iu.test(normalizedPom),
     hasArquillianEvidence: /arquillian/iu.test(normalizedPom),
     hasMainJava: pathExists19(path64.join(absoluteRoot, "src", "main", "java")),
@@ -245836,6 +246121,12 @@ function buildRootCandidates(input2) {
     addCandidate(root, `Detected project root ${root}`);
   }
   if (input2.workspaceRoot) {
+    for (const candidate of collectNxProjectCandidates(input2.workspaceRoot)) {
+      addCandidate(candidate.path, "Detected Nx project metadata");
+      for (const evidence of candidate.evidence) {
+        addCandidate(candidate.path, evidence);
+      }
+    }
     const mavenRoots = [".", ...input2.topology.detectedRoots ?? []];
     for (const candidate of collectMavenReactorCandidates(input2.workspaceRoot, mavenRoots)) {
       addCandidate(
@@ -245919,10 +246210,7 @@ function isUnderJvmResourceRoot4(componentPath) {
   return /(^|\/)src\/main\/resources(?:\/|$)/u.test(normalizePath25(componentPath).toLowerCase());
 }
 function hasFileUnderRoot(root, pattern) {
-  if (!pathExists19(root)) {
-    return false;
-  }
-  const entries = fs58.readdirSync(root, { recursive: true, withFileTypes: true });
+  const entries = readDirectoryEntriesForTraversal(root, { recursive: true });
   return entries.some((entry) => entry.isFile() && pattern.test(entry.name));
 }
 var javaMainMethodPattern = /\bpublic\s+static\s+void\s+main\s*\(\s*String\s*(?:(?:\[\s*\]\s*)|\.\.\.\s*)[A-Za-z_$][\w$]*\s*(?:\[\s*\])?\s*\)/u;
@@ -246040,10 +246328,7 @@ function readMavenProductionSourceFiles(workspaceRoot, componentPath) {
   ];
   const files = [];
   for (const sourceRoot of mainRoots) {
-    if (!pathExists19(sourceRoot)) {
-      continue;
-    }
-    const entries = fs58.readdirSync(sourceRoot, { recursive: true, withFileTypes: true });
+    const entries = readDirectoryEntriesForTraversal(sourceRoot, { recursive: true });
     for (const entry of entries) {
       if (!entry.isFile() || !/\.(?:java|kt|scala)$/iu.test(entry.name)) {
         continue;
@@ -246215,24 +246500,67 @@ function hasRuntimeSourceFiles(workspaceRoot, componentPath) {
     path64.join(absoluteRoot, "server")
   ];
   for (const sourceRoot of sourceRoots) {
-    if (!pathExists19(sourceRoot)) {
-      continue;
-    }
-    const entries = fs58.readdirSync(sourceRoot, { recursive: true, withFileTypes: true });
+    const entries = readDirectoryEntriesForTraversal(sourceRoot, { recursive: true });
     if (entries.some((entry) => entry.isFile() && /\.(?:ts|tsx|js|jsx|java|cs|py|php|go)$/iu.test(entry.name))) {
       return true;
     }
   }
   return false;
 }
+function hasFileMatchingUnderRoot(root, pattern) {
+  const entries = readDirectoryEntriesForTraversal(root, { recursive: true });
+  return entries.some((entry) => entry.isFile() && pattern.test(normalizePath25(path64.join(entry.parentPath, entry.name))));
+}
+function hasNestRuntimeApplicationEvidence(workspaceRoot, componentPath, packageJson = readPackageJson(workspaceRoot, componentPath)) {
+  const absoluteRoot = absoluteComponentRoot(workspaceRoot, componentPath);
+  const dependencies = new Set(packageDependencyNames(packageJson));
+  const scripts = recordKeys(packageJson?.scripts);
+  const hasNestCore = dependencies.has("@nestjs/core");
+  if (!hasNestCore) {
+    return false;
+  }
+  const hasRuntimePlatform = dependencies.has("@nestjs/platform-express") || dependencies.has("@nestjs/platform-fastify") || dependencies.has("@nestjs/microservices") || dependencies.has("@nestjs/graphql") || dependencies.has("@nestjs/apollo");
+  const hasRunnableScript = scripts.some((script) => /^(?:start|serve|dev|worker)(?::|$)/u.test(script));
+  const hasNestCliConfig = ["nest-cli.json", "nest.config.js", "nest.config.ts"].some(
+    (fileName) => pathExists19(path64.join(absoluteRoot, fileName))
+  );
+  const hasBootstrapEntrypoint = [
+    path64.join(absoluteRoot, "src", "main.ts"),
+    path64.join(absoluteRoot, "src", "main.js"),
+    path64.join(absoluteRoot, "main.ts"),
+    path64.join(absoluteRoot, "main.js")
+  ].some((filePath) => {
+    const contents = readTextFileSafe(filePath);
+    return Boolean(contents && /\bNestFactory\.create(?:ApplicationContext)?\s*\(/u.test(contents));
+  });
+  const srcRoot = path64.join(absoluteRoot, "src");
+  const hasRuntimeSourceShape = hasFileMatchingUnderRoot(srcRoot, /\.(?:controller|resolver|gateway|processor|module|worker|queue)\.(?:ts|js)$/iu) || hasFileMatchingUnderRoot(srcRoot, /[/\\](?:controllers?|resolvers?|queues?|workers?)[/\\][^/\\]+\.(?:ts|js)$/iu);
+  const hasDatabaseRuntimeIntegration = [...dependencies].some(
+    (dependency) => /^(?:typeorm|@nestjs\/typeorm|@prisma\/client|prisma|mongoose|@nestjs\/mongoose|sequelize|@mikro-orm\/core)$/u.test(dependency)
+  );
+  const structuralEvidenceCount = [
+    hasRuntimePlatform,
+    hasRunnableScript,
+    hasNestCliConfig,
+    hasBootstrapEntrypoint,
+    hasRuntimeSourceShape,
+    hasDatabaseRuntimeIntegration
+  ].filter(Boolean).length;
+  return hasBootstrapEntrypoint || hasRuntimePlatform && structuralEvidenceCount >= 2 || hasRunnableScript && hasRuntimeSourceShape && structuralEvidenceCount >= 3;
+}
 function resolveKind(workspaceRoot, candidate, localProjectKinds) {
   const lowerPath = candidate.path.toLowerCase();
   const packageJson = readPackageJson(workspaceRoot, candidate.path);
+  const projectJson = readProjectJson(workspaceRoot, candidate.path);
+  const nxProjectType = readStringProperty(projectJson, "projectType");
   const maven = readMavenMetadata(workspaceRoot, candidate.path);
+  const dependencies = new Set(packageDependencyNames(packageJson));
   const hasRunnableFrontendEvidence = hasRunnableFrontendComponentEvidence(workspaceRoot, candidate.path);
+  const hasNestRuntimeEvidence = hasNestRuntimeApplicationEvidence(workspaceRoot, candidate.path, packageJson);
+  const nxRuntimeKind = classifyNxRuntimeKind(projectJson);
   const hasPublishSurface = hasPackagePublishSurface(packageJson);
   const hasMavenRunnableEvidence = Boolean(
-    maven && (hasMavenMainEntrypoint(workspaceRoot, candidate.path) || hasMavenConfiguredMainClassEntrypoint(workspaceRoot, candidate.path, maven.configuredMainClass) || maven.hasSpringBootPlugin && maven.hasSpringBootRepackageGoal && hasMavenMainEntrypoint(workspaceRoot, candidate.path) || maven.packaging === "war" && hasMavenMainEntrypoint(workspaceRoot, candidate.path))
+    maven && (hasMavenMainEntrypoint(workspaceRoot, candidate.path) || hasMavenConfiguredMainClassEntrypoint(workspaceRoot, candidate.path, maven.configuredMainClass) || maven.configuredMainClass && maven.hasSpringBootStarterDependency || maven.hasSpringBootPlugin && maven.hasSpringBootRepackageGoal && hasMavenMainEntrypoint(workspaceRoot, candidate.path) || maven.packaging === "war" && hasMavenMainEntrypoint(workspaceRoot, candidate.path))
   );
   const hasMavenLibraryEvidence = Boolean(
     maven && !hasMavenRunnableEvidence && (maven.packaging === "jar" || maven.packaging === "maven-plugin" || maven.packaging === "pom") && (hasMavenMainJvmSource(workspaceRoot, candidate.path) || maven.hasMainResources || maven.hasDependencyManagement || maven.hasSpringBootAutoconfigureDependency || maven.hasSpringBootAutoconfigureProcessor || hasMavenAutoConfigurationMetadata(workspaceRoot, candidate.path) || maven.hasDocumentationTooling || maven.hasTestJava || maven.hasTestResources)
@@ -246240,6 +246568,12 @@ function resolveKind(workspaceRoot, candidate, localProjectKinds) {
   if (lowerPath.endsWith("/db") || lowerPath.endsWith("/database") || lowerPath.endsWith("/data")) {
     return "data";
   }
+  if (nxRuntimeKind) {
+    return nxRuntimeKind;
+  }
+  if (nxProjectType === "library") {
+    return "library";
+  }
   if (hasMavenLibraryEvidence) {
     return "library";
   }
@@ -246251,6 +246585,12 @@ function resolveKind(workspaceRoot, candidate, localProjectKinds) {
     return hasPublishSurface && !hasRunnableFrontendEvidence ? "library" : "frontend";
   }
   if (classification === "backend_app") {
+    if (hasPublishSurface && dependencies.has("@nestjs/core") && !hasNestRuntimeEvidence) {
+      return "library";
+    }
+    return "backend";
+  }
+  if (hasNestRuntimeEvidence) {
     return "backend";
   }
   if (hasRunnableFrontendEvidence && localProjectKinds.primaryKind !== "backend" && localProjectKinds.primaryKind !== "service" && localProjectKinds.primaryKind !== "cli") {
@@ -246314,6 +246654,7 @@ function hasAnyToken(value, patterns) {
 }
 function classifyGovernanceRole(input2) {
   const packageJson = readPackageJson(input2.workspaceRoot, input2.candidate.path);
+  const projectJson = readProjectJson(input2.workspaceRoot, input2.candidate.path);
   const maven = readMavenMetadata(input2.workspaceRoot, input2.candidate.path);
   const evidence = [];
   let supportScore = 0;
@@ -246327,11 +246668,18 @@ function classifyGovernanceRole(input2) {
   const scripts = recordKeys(packageJson?.scripts);
   const dependencies = recordKeys(packageJson?.dependencies);
   const devDependencies = recordKeys(packageJson?.devDependencies);
+  const projectTags = toStringArray(projectJson?.tags);
+  const projectTargets = recordKeys(projectJson?.targets);
   const scriptText = scripts.join(" ").toLowerCase();
+  const projectMetadataText = `${projectTags.join(" ")} ${projectTargets.join(" ")}`.toLowerCase();
   const dependencyText = [...dependencies, ...devDependencies].join(" ").toLowerCase();
+  const hasRunnableFrontendEvidence = hasRunnableFrontendComponentEvidence(input2.workspaceRoot, input2.candidate.path);
+  const hasNestRuntimeEvidence = hasNestRuntimeApplicationEvidence(input2.workspaceRoot, input2.candidate.path, packageJson);
+  const nxRuntimeKind = classifyNxRuntimeKind(projectJson);
+  const hasNxSupportOnlyEvidence = hasNxSupportOnlyProjectEvidence(projectJson);
   const hasStrongSupportPath = hasAnyToken(pathText, [
-    /(^|\/)(testing|test-plugins|cypress-tests|fixtures?|examples?|benchmarks?|smoke)(\/|$)/u,
-    /(^|\/)(dev-server|scaffold|scaffolding|generators?|devkit|tooling|tools)(\/|$)/u
+    /(^|\/)(testing|e2e-testing|test-plugins|cypress-tests|fixtures?|benchmarks?|smoke)(\/|$)/u,
+    /(^|\/)(dev-server|scaffold|scaffolding|generators?|devkit|tooling|tools|templates?)(\/|$)/u
   ]);
   const isPlainResourcesSurface = isUnderJvmResourceRoot4(pathText) && !hasRuntimeSourceFiles(input2.workspaceRoot, input2.candidate.path) && !packageJson && !maven;
   const hasPublishSurface = hasPackagePublishSurface(packageJson);
@@ -246343,9 +246691,11 @@ function classifyGovernanceRole(input2) {
   const hasMavenMainEntrypointEvidence = Boolean(maven && hasMavenMainEntrypoint(input2.workspaceRoot, input2.candidate.path));
   const hasMavenMainJvmSourceEvidence = Boolean(maven && hasMavenMainJvmSource(input2.workspaceRoot, input2.candidate.path));
   const hasMavenAutoConfigurationEvidence = Boolean(maven && (hasMavenAutoConfigurationMetadata(input2.workspaceRoot, input2.candidate.path) || maven.hasSpringBootAutoconfigureDependency || maven.hasSpringBootAutoconfigureProcessor));
-  const hasMavenExecutableConfiguration = Boolean(maven && (hasMavenConfiguredMainClassEntrypoint(input2.workspaceRoot, input2.candidate.path, maven.configuredMainClass) || maven.hasSpringBootPlugin && maven.hasSpringBootRepackageGoal && hasMavenMainEntrypointEvidence || maven.packaging === "war" && hasMavenMainEntrypointEvidence));
+  const hasMavenExecutableConfiguration = Boolean(maven && (hasMavenConfiguredMainClassEntrypoint(input2.workspaceRoot, input2.candidate.path, maven.configuredMainClass) || maven.configuredMainClass && maven.hasSpringBootStarterDependency || maven.hasSpringBootPlugin && maven.hasSpringBootRepackageGoal && hasMavenMainEntrypointEvidence || maven.packaging === "war" && hasMavenMainEntrypointEvidence));
   const hasMavenRunnableApplicationEvidence = Boolean(hasMavenMainEntrypointEvidence || hasMavenExecutableConfiguration);
-  const isMavenPomOnly = Boolean(maven?.packaging === "pom" && !hasMavenMainSource && !hasMavenTestSource);
+  const isMavenPomOnly = Boolean(
+    maven?.packaging === "pom" && !hasMavenRunnableApplicationEvidence && !hasMavenMainSource && !hasMavenTestSource
+  );
   const hasMavenTestContext = hasAnyToken(pathText, [
     /(^|\/)(test-framework|testsuite|integration-tests?|test-apps)(\/|$)/u
   ]) && (hasAnyToken(mavenMetadataText, [/\b(test|testsuite|test framework|arquillian|integration test)\b/u]) || Boolean(maven?.hasTestLifecycleConfiguration || maven?.hasArquillianEvidence || hasMavenTestSource));
@@ -246353,7 +246703,7 @@ function classifyGovernanceRole(input2) {
     maven?.packaging === "pom" && maven.hasDependencyManagement && !hasMavenMainSource && hasAnyToken(mavenMetadataText, [/\b(bom|bill of materials|dependency management|platform)\b/u])
   );
   const hasMavenDistributionPackagingEvidence = Boolean(
-    maven?.packaging === "pom" && !hasMavenMainSource && hasAnyToken(pathText, [/(^|\/)(distribution|dist|downloads|assembl(y|ies)|feature-packs?)(\/|$)/u])
+    maven && !hasMavenMainSource && (maven.hasAssemblyPackagingConfiguration || maven.hasDeploySkipConfiguration && maven.hasDocumentationTooling || hasAnyToken(mavenMetadataText, [/\b(distribution|assembly|release package|packaging bundle)\b/u]))
   );
   const hasMavenStarterPackagingEvidence = Boolean(
     maven && !hasMavenMainJvmSourceEvidence && hasAnyToken(`${pathText} ${mavenMetadataText}`, [/\bstarters?\b|\bspring-boot-starter\b|\bstarter[-\s]/u])
@@ -246376,6 +246726,22 @@ function classifyGovernanceRole(input2) {
     runtimeScore += 1;
     addEvidence6(evidence, `Runtime framework stack signal: ${input2.stack}`);
   }
+  if (hasNestRuntimeEvidence) {
+    runtimeScore += 3;
+    addEvidence6(evidence, "NestJS runtime application evidence");
+  }
+  if (input2.kind === "frontend" && hasRunnableFrontendEvidence) {
+    runtimeScore += 3;
+    addEvidence6(evidence, "Runnable frontend application evidence");
+  }
+  if (nxRuntimeKind) {
+    runtimeScore += 3;
+    addEvidence6(evidence, `Nx runtime project evidence: ${nxRuntimeKind}`);
+  }
+  if (hasNxSupportOnlyEvidence) {
+    supportScore += 4;
+    addEvidence6(evidence, "Nx project metadata indicates test/tooling-only workspace");
+  }
   if (hasPublishSurface && !isPrivate) {
     runtimeScore += 1;
     addEvidence6(evidence, "Published package surface signal");
@@ -246386,7 +246752,7 @@ function classifyGovernanceRole(input2) {
   if (maven?.hasPom) {
     addEvidence6(evidence, `Maven packaging ${maven.packaging ?? "jar"}`);
   }
-  if (maven && (maven.packaging === "jar" || maven.packaging === "war") && hasMavenRunnableApplicationEvidence) {
+  if (maven && hasMavenRunnableApplicationEvidence) {
     runtimeScore += 3;
     addEvidence6(evidence, "Maven executable application evidence");
   }
@@ -246400,25 +246766,41 @@ function classifyGovernanceRole(input2) {
   if (hasMavenAutoConfigurationEvidence && !hasMavenRunnableApplicationEvidence) {
     addEvidence6(evidence, "Maven Spring Boot auto-configuration/starter library evidence");
   }
-  if (hasAnyToken(descriptiveManifestText, [/\b(e2e|end-to-end|testing|test helper|test utilities|fixtures?)\b/u])) {
+  if (hasAnyToken(descriptiveManifestText, [/\b(e2e|end-to-end|testing|test helper|test utilities|fixtures?|test harness)\b/u])) {
     supportScore += 3;
     addEvidence6(evidence, "Package metadata describes test/support usage");
   }
+  if (hasAnyToken(`${packageName.toLowerCase()} ${projectMetadataText}`, [/\b(e2e|end-to-end|testing|test harness|scope:testing|test:ui|test:debug|test:report)\b/u]) && hasAnyToken(dependencyText, [/\b(?:playwright|@playwright\/test|cypress|vitest|jest|mocha)\b/u])) {
+    supportScore += 4;
+    addEvidence6(evidence, "Project metadata and dependencies indicate test-only workspace");
+  }
   if (hasAnyToken(descriptiveManifestText, [/\b(scaffold|scaffolding|generator|codegen|template|starter|create)\b/u])) {
     supportScore += 3;
     addEvidence6(evidence, "Package metadata describes scaffolding/generation usage");
   }
-  if (hasAnyToken(descriptiveManifestText, [/\b(dev server|development server|development tooling|tooling|devkit)\b/u])) {
+  if (hasAnyToken(descriptiveManifestText, [/\b(dev server|development server|development tooling|tooling|devkit|lint rules?|linter|build tooling|repository tooling)\b/u])) {
     supportScore += 2;
     addEvidence6(evidence, "Package metadata describes development/tooling usage");
   }
   if (hasAnyToken(pathText, [
-    /(^|\/)(test|tests|testing|__tests__|cypress|cypress-tests|fixtures?|examples?|benchmarks?|smoke)(\/|$)/u,
-    /(^|\/)(dev-server|test-plugins|scaffold|scaffolding|generators?|devkit|tooling|tools)(\/|$)/u
+    /(^|\/)(test|tests|testing|e2e-testing|__tests__|cypress|cypress-tests|fixtures?|benchmarks?|smoke)(\/|$)/u,
+    /(^|\/)(dev-server|test-plugins|scaffold|scaffolding|generators?|devkit|tooling|tools|templates?)(\/|$)/u
   ])) {
     supportScore += 1;
     addEvidence6(evidence, "Path contains support/tooling role tokens");
   }
+  if (maven && hasStrongSupportPath && !hasMavenRunnableApplicationEvidence) {
+    supportScore += 3;
+    addEvidence6(evidence, "Maven module path and metadata indicate support/tooling role");
+  }
+  if (hasAnyToken(pathText, [/(^|\/)(?:src\/constants\/)?templates?(\/|$)/u])) {
+    supportScore += 4;
+    addEvidence6(evidence, "Nested scaffold/template source surface");
+  }
+  if (hasAnyToken(dependencyText, [/\b(?:eslint|oxlint|prettier|typescript-eslint|ts-morph|jscodeshift|schematics|yeoman)\b/u])) {
+    supportScore += 2;
+    addEvidence6(evidence, "Package dependencies indicate lint/build/generation tooling");
+  }
   if (scripts.length > 0 && scripts.every((script) => /^(test|e2e|smoke|bench|benchmark|lint|typecheck|dev|dev:|load-test|generate|scaffold)/u.test(script))) {
     supportScore += 1;
     addEvidence6(evidence, "Package scripts are dominated by development/test workflows");
@@ -246443,6 +246825,10 @@ function classifyGovernanceRole(input2) {
     supportScore += 4;
     addEvidence6(evidence, "Maven documentation tooling without JVM runtime source");
   }
+  if (maven?.hasDeploySkipConfiguration && !hasMavenMainJvmSourceEvidence && !hasMavenRunnableApplicationEvidence) {
+    supportScore += 4;
+    addEvidence6(evidence, "Maven deploy-skipped artifact without runtime source");
+  }
   if (hasMavenBomEvidence) {
     supportScore += 5;
     addEvidence6(evidence, "Maven BOM/dependency-management module without runtime source");
@@ -246471,6 +246857,10 @@ function classifyGovernanceRole(input2) {
     supportScore += 4;
     addEvidence6(evidence, "Maven starter/resource artifact without JVM runtime source");
   }
+  if (hasMavenDistributionPackagingEvidence) {
+    supportScore += 4;
+    addEvidence6(evidence, "Maven distribution/release packaging without runtime source");
+  }
   if (isPlainResourcesSurface) {
     supportScore += 4;
     addEvidence6(evidence, "Resources-only surface without runtime source or manifest evidence");
@@ -246493,7 +246883,7 @@ function classifyGovernanceRole(input2) {
     supportScore += 3;
     addEvidence6(evidence, "Maven documentation/build/distribution packaging evidence without runtime source");
   }
-  if (supportScore >= 3 && supportScore > runtimeScore || hasStrongSupportPath && supportScore >= 2 && runtimeScore <= 5 || maven?.packaging === "maven-plugin" && input2.candidate.path !== "." && supportScore >= 5 || maven && supportScore >= 5 && !hasMavenMainSource || maven && supportScore >= 4 && hasMavenTestContext || maven && supportScore >= 4 && hasMavenDistributionPackagingEvidence && hasAnyToken(mavenMetadataText, [/\b(docs?|documentation|metadata tests?|licenses?|maven plugins?|builds?)\b/u])) {
+  if (supportScore >= 3 && supportScore > runtimeScore || hasStrongSupportPath && supportScore >= 2 && runtimeScore <= 5 || maven?.packaging === "maven-plugin" && input2.candidate.path !== "." && supportScore >= 5 || maven && supportScore >= 5 && !hasMavenMainJvmSourceEvidence && !hasMavenRunnableApplicationEvidence || maven && supportScore >= 4 && maven.hasDeploySkipConfiguration && !hasMavenMainJvmSourceEvidence && !hasMavenRunnableApplicationEvidence || maven && supportScore >= 4 && hasStrongSupportPath && !hasMavenMainJvmSourceEvidence && !hasMavenRunnableApplicationEvidence || maven && supportScore >= 4 && hasMavenTestContext || maven && supportScore >= 4 && hasMavenDistributionPackagingEvidence && hasAnyToken(mavenMetadataText, [/\b(docs?|documentation|metadata tests?|licenses?|maven plugins?|builds?)\b/u])) {
     return {
       governanceRole: "support",
       governanceEvidence: uniqueSorted4(evidence),
@@ -250154,6 +250544,9 @@ function readFlagValue(args, flag) {
   return value && value.length > 0 ? value : void 0;
 }
 async function readCliPackageVersion() {
+  if ("0.2.6".trim().length > 0) {
+    return "0.2.6".trim();
+  }
   const candidatePackageJsonPaths = [
     path73.join(__dirname, "..", "package.json"),
     path73.join(__dirname, "..", "..", "..", "..", "cli", "package.json")

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@archpilotlabs/archpilot",
-  "version": "0.2.4",
+  "version": "0.2.6",
   "description": "Executable architecture governance CLI for Smart Init, validation, drift detection, and CI.",
   "homepage": "https://archpilot.org",
   "bugs": {