@decantr/cli 3.0.2 → 3.1.0

package/dist/bin.js

@@ -1,6 +1,6 @@
 #!/usr/bin/env node
-import "./chunk-GN63PIKK.js";
+import "./chunk-WSL6ZSTZ.js";
 import "./chunk-SIDKK73N.js";
-import "./chunk-B2PJDAMS.js";
-import "./chunk-4NDOHCYY.js";
-import "./chunk-7Z74ETDR.js";
+import "./chunk-TXNLMAN5.js";
+import "./chunk-BY6S6IWG.js";
+import "./chunk-GPN2THFD.js";

package/dist/{chunk-4NDOHCYY.js → chunk-BY6S6IWG.js}

@@ -3,14 +3,14 @@ import {
   sendProjectHealthCiFailedTelemetry,
   sendProjectHealthPromptTelemetry,
   sendProjectHealthReportTelemetry
-} from "./chunk-7Z74ETDR.js";
+} from "./chunk-GPN2THFD.js";
 
 // src/commands/health.ts
 import { execFileSync as execFileSync2 } from "child_process";
 import { createHash as createHash2 } from "crypto";
 import { existsSync as existsSync5, mkdirSync as mkdirSync4, readFileSync as readFileSync5, writeFileSync as writeFileSync4 } from "fs";
 import { createRequire } from "module";
-import { dirname as dirname3, isAbsolute as isAbsolute3, join as join5, relative as relative3, resolve as resolve2 } from "path";
+import { dirname as dirname3, isAbsolute as isAbsolute4, join as join5, relative as relative3, resolve as resolve3 } from "path";
 import { fileURLToPath } from "url";
 import {
   anchorFindingsToGraph,
@@ -114,8 +114,8 @@ function resolveWorkspaceInfo(cwd, projectArg) {
 
 // src/commands/graph.ts
 import { createHash } from "crypto";
-import { existsSync as existsSync4, mkdirSync as mkdirSync3, readFileSync as readFileSync4, writeFileSync as writeFileSync3 } from "fs";
-import { dirname as dirname2, isAbsolute as isAbsolute2, join as join4, relative as relative2 } from "path";
+import { existsSync as existsSync4, mkdirSync as mkdirSync3, readFileSync as readFileSync4, statSync as statSync2, writeFileSync as writeFileSync3 } from "fs";
+import { dirname as dirname2, isAbsolute as isAbsolute3, join as join4, relative as relative2 } from "path";
 import {
   buildContractCapsuleFromSnapshot,
   buildGraphImpactContext,
@@ -138,7 +138,7 @@ import {
 // src/local-law.ts
 import { execFileSync } from "child_process";
 import { existsSync as existsSync2, mkdirSync, readdirSync as readdirSync2, readFileSync as readFileSync2, statSync, writeFileSync } from "fs";
-import { basename, extname, join as join2, relative, sep } from "path";
+import { basename, extname, isAbsolute as isAbsolute2, join as join2, relative, resolve as resolve2, sep } from "path";
 import { isV4 } from "@decantr/essence-spec";
 var SOURCE_EXTENSIONS = /* @__PURE__ */ new Set([
   ".astro",
@@ -827,12 +827,13 @@ function createLocalLawTaskSummary(projectRoot) {
 function changedFiles(projectRoot, since) {
   const changed = /* @__PURE__ */ new Set();
   try {
+    const gitRoot = gitTopLevel(projectRoot) ?? projectRoot;
     const commands = since ? [
-      ["diff", "--name-only", since, "--"],
-      ["diff", "--name-only", "--cached"]
+      ["diff", "--name-only", "--relative", since, "--"],
+      ["diff", "--name-only", "--relative", "--cached"]
     ] : [
-      ["diff", "--name-only"],
-      ["diff", "--name-only", "--cached"]
+      ["diff", "--name-only", "--relative"],
+      ["diff", "--name-only", "--relative", "--cached"]
     ];
     for (const args of commands) {
       const output = execFileSync("git", args, {
@@ -842,13 +843,38 @@ function changedFiles(projectRoot, since) {
       });
       for (const line of output.split(/\r?\n/)) {
         const file = line.trim();
-        if (file) changed.add(normalizePath(file));
+        const projectFile = changedFileForProject(projectRoot, gitRoot, file);
+        if (projectFile) changed.add(projectFile);
       }
     }
   } catch {
   }
   return [...changed].sort();
 }
+function gitTopLevel(projectRoot) {
+  try {
+    return execFileSync("git", ["rev-parse", "--show-toplevel"], {
+      cwd: projectRoot,
+      encoding: "utf-8",
+      stdio: ["ignore", "pipe", "ignore"]
+    }).trim();
+  } catch {
+    return null;
+  }
+}
+function changedFileForProject(projectRoot, gitRoot, file) {
+  if (!file) return null;
+  const absoluteProjectRoot = resolve2(projectRoot);
+  const candidateAbsoluteFiles = isAbsolute2(file) ? [file] : [join2(absoluteProjectRoot, file), join2(gitRoot, file)];
+  for (const absoluteFile of candidateAbsoluteFiles) {
+    const projectRelative = normalizePath(relative(absoluteProjectRoot, absoluteFile));
+    if (!projectRelative || projectRelative.startsWith("../") || projectRelative === "..") {
+      continue;
+    }
+    return projectRelative;
+  }
+  return null;
+}
 function routeImpacts(projectRoot, files) {
   const analysis = readJsonFile(
     join2(projectRoot, ".decantr", "analysis.json")
@@ -1647,17 +1673,24 @@ function readGraphSnapshotSelection(artifacts, snapshotId) {
 }
 function projectRelativePath(projectRoot, path) {
   if (!path) return null;
-  const absolutePath = isAbsolute2(path) ? path : join4(projectRoot, path);
+  const absolutePath = isAbsolute3(path) ? path : join4(projectRoot, path);
   const relativePath = relative2(projectRoot, absolutePath).replace(/\\/g, "/");
-  if (!relativePath || relativePath.startsWith("..") || isAbsolute2(relativePath)) {
+  if (!relativePath || relativePath.startsWith("..") || isAbsolute3(relativePath)) {
     return null;
   }
   return relativePath;
 }
+function pathIsFile(path) {
+  try {
+    return statSync2(path).isFile();
+  } catch {
+    return false;
+  }
+}
 function existingProjectRelativePath(projectRoot, path) {
   const relativePath = projectRelativePath(projectRoot, path);
   if (!relativePath) return null;
-  return existsSync4(join4(projectRoot, relativePath)) ? relativePath : null;
+  return pathIsFile(join4(projectRoot, relativePath)) ? relativePath : null;
 }
 function stripJsonComments(value) {
   return value.replace(/\/\*[\s\S]*?\*\//g, "").replace(/(^|[^:])\/\/.*$/gm, "$1");
@@ -1708,7 +1741,7 @@ function existingImportCandidate(projectRoot, candidate) {
     join4(relativeCandidate, "index.cts").replace(/\\/g, "/")
   ];
   for (const possible of candidates) {
-    if (existsSync4(join4(projectRoot, possible))) return possible;
+    if (pathIsFile(join4(projectRoot, possible))) return possible;
   }
   return null;
 }
@@ -1841,7 +1874,7 @@ function sourceArtifacts(projectRoot, componentReuseAudit = null) {
       const routeFile = projectRelativePath(projectRoot, route.file);
       if (!routeFile) continue;
       const routeFilePath = join4(projectRoot, routeFile);
-      if (!existsSync4(routeFilePath)) continue;
+      if (!pathIsFile(routeFilePath)) continue;
       sources.push({
         id: `src:${routeFile}`,
         kind: "route-source",
@@ -1860,7 +1893,7 @@ function sourceArtifacts(projectRoot, componentReuseAudit = null) {
     const componentFile = projectRelativePath(projectRoot, declaration.file);
     if (!componentFile) continue;
     const componentPath = join4(projectRoot, componentFile);
-    if (!existsSync4(componentPath)) continue;
+    if (!pathIsFile(componentPath)) continue;
     if (sources.some((source) => source.id === `src:${componentFile}`)) continue;
     sources.push({
       id: `src:${componentFile}`,
@@ -1879,7 +1912,7 @@ function sourceArtifacts(projectRoot, componentReuseAudit = null) {
     const importingFile = projectRelativePath(projectRoot, importReference.file);
     if (!importingFile) continue;
     const importingPath = join4(projectRoot, importingFile);
-    if (existsSync4(importingPath) && !sources.some((source) => source.id === `src:${importingFile}`)) {
+    if (pathIsFile(importingPath) && !sources.some((source) => source.id === `src:${importingFile}`)) {
       sources.push({
         id: `src:${importingFile}`,
         kind: "code-source",
@@ -1899,7 +1932,7 @@ function sourceArtifacts(projectRoot, componentReuseAudit = null) {
     );
     if (!importedFile) continue;
     const importedPath = join4(projectRoot, importedFile);
-    if (!existsSync4(importedPath)) continue;
+    if (!pathIsFile(importedPath)) continue;
     if (sources.some((source) => source.id === `src:${importedFile}`)) continue;
     sources.push({
       id: `src:${importedFile}`,
@@ -1928,7 +1961,7 @@ function sourceArtifacts(projectRoot, componentReuseAudit = null) {
     for (const route of visualManifest.routes ?? []) {
       if (!route.screenshot) continue;
       const screenshotPath = join4(projectRoot, route.screenshot);
-      if (!existsSync4(screenshotPath)) continue;
+      if (!pathIsFile(screenshotPath)) continue;
       sources.push({
         id: `src:${route.screenshot}`,
         kind: "visual-screenshot",
@@ -2596,7 +2629,7 @@ function augmentProjectGraph(snapshot, projectRoot, sources, componentReuseAudit
 function pathForDisplay(projectRoot, path, displayRoot) {
   if (!displayRoot) return path.replace(`${projectRoot}/`, "");
   const relativePath = relative2(displayRoot, path).replace(/\\/g, "/");
-  if (relativePath && !relativePath.startsWith("..") && !isAbsolute2(relativePath)) {
+  if (relativePath && !relativePath.startsWith("..") && !isAbsolute3(relativePath)) {
     return relativePath;
   }
   return path;
@@ -2836,7 +2869,7 @@ function graphSourceNodeIdForFile(projectRoot, snapshot, file) {
   })?.id ?? null;
 }
 function resolvePathFromCwd(path) {
-  return isAbsolute2(path) ? path : join4(process.cwd(), path);
+  return isAbsolute3(path) ? path : join4(process.cwd(), path);
 }
 function impactContextPayload(impactContext, selection) {
   if (!selection) return void 0;
@@ -3467,7 +3500,7 @@ function commandsForFinding(source) {
     case "runtime":
       return ["npm run build", "decantr health"];
     case "interaction":
-      return ["decantr check --strict", "decantr health"];
+      return ["decantr verify --brownfield --local-patterns", "decantr verify --evidence"];
     case "assertion":
       return ["decantr refresh", "decantr health --evidence"];
     case "browser":
@@ -3477,7 +3510,7 @@ function commandsForFinding(source) {
     case "style-bridge":
       return ["decantr codify --style-bridge", "decantr verify --evidence"];
     case "graph":
-      return ["decantr graph", "decantr health"];
+      return ["decantr graph", "decantr verify --evidence"];
     case "check":
       return ["decantr check", "decantr health"];
     default:
@@ -3531,7 +3564,7 @@ function commandContextForProject(projectRoot) {
     /\\/g,
     "/"
   );
-  const projectPath = relativeProjectPath && !relativeProjectPath.startsWith("..") && !isAbsolute3(relativeProjectPath) ? relativeProjectPath : null;
+  const projectPath = relativeProjectPath && !relativeProjectPath.startsWith("..") && !isAbsolute4(relativeProjectPath) ? relativeProjectPath : null;
   const projectFlag = projectPath ? ` --project ${projectPath}` : "";
   const essencePath = projectPath ? `${projectPath}/decantr.essence.json` : "decantr.essence.json";
   return {
@@ -3566,6 +3599,10 @@ function rewriteHealthCommand(command, context) {
     /^decantr graph\b/,
     `decantr graph --project ${context.projectPath}`
   );
+  rewritten = rewritten.replace(
+    /^decantr verify\b/,
+    `decantr verify --project ${context.projectPath}`
+  );
   rewritten = rewritten.replace(/^decantr audit\b/, context.verifyCommand);
   rewritten = rewritten.replace(/^decantr health\b/, context.verifyCommand);
   return rewritten;
@@ -3796,7 +3833,7 @@ function isDuplicateFinding(existing, finding) {
 }
 function resolveOptionalPath(projectRoot, path) {
   if (!path) return void 0;
-  return isAbsolute3(path) ? path : resolve2(projectRoot, path);
+  return isAbsolute4(path) ? path : resolve3(projectRoot, path);
 }
 function hasProjectPlaywright(projectRoot) {
   try {
@@ -4013,7 +4050,7 @@ function parseDecantrCssTokenNames(projectRoot) {
 function collectDesignTokenEvidence(projectRoot, designTokensPath) {
   const resolved = resolveOptionalPath(projectRoot, designTokensPath);
   if (!resolved) return void 0;
-  const sourceLabel = isAbsolute3(designTokensPath ?? "") ? "<design-tokens>" : designTokensPath ?? "<design-tokens>";
+  const sourceLabel = isAbsolute4(designTokensPath ?? "") ? "<design-tokens>" : designTokensPath ?? "<design-tokens>";
   if (!existsSync5(resolved)) {
     return {
       source: sourceLabel,
@@ -4609,7 +4646,7 @@ async function cmdHealth(projectRoot = process.cwd(), options = {}) {
     const format2 = resolveFormat(options);
     const payload2 = format2 === "json" ? formatDiagnosticCatalogJson() : format2 === "markdown" ? formatDiagnosticCatalogMarkdown() : formatDiagnosticCatalogText();
     if (options.output) {
-      const outputPath = isAbsolute3(options.output) ? options.output : join5(projectRoot, options.output);
+      const outputPath = isAbsolute4(options.output) ? options.output : join5(projectRoot, options.output);
       mkdirSync4(dirname3(outputPath), { recursive: true });
       writeFileSync4(outputPath, payload2, "utf-8");
       if (!options.ci) {
@@ -4664,7 +4701,7 @@ async function cmdHealth(projectRoot = process.cwd(), options = {}) {
 ` : format === "json" ? formatProjectHealthJson(report) : format === "markdown" ? formatProjectHealthMarkdown(report) : formatProjectHealthText(report);
   const payload = baselineComparison && !options.evidence && format === "text" ? `${basePayload}${formatBaselineComparisonText(baselineComparison)}` : basePayload;
   if (options.output) {
-    const outputPath = isAbsolute3(options.output) ? options.output : join5(projectRoot, options.output);
+    const outputPath = isAbsolute4(options.output) ? options.output : join5(projectRoot, options.output);
     mkdirSync4(dirname3(outputPath), { recursive: true });
     writeFileSync4(outputPath, payload, "utf-8");
     if (!options.ci) {

package/dist/{chunk-7Z74ETDR.js → chunk-GPN2THFD.js}

@@ -456,6 +456,8 @@ function walkSvelteKitRoutes(dir, baseDir, segments) {
   return routes;
 }
 var ROUTER_FILE_EXTENSIONS = /* @__PURE__ */ new Set([".tsx", ".ts", ".jsx", ".js"]);
+var ROUTE_VARIABLE_NAMES = "(?:path|pathname|route|currentPath|currentRoute|locationPath|activePath)";
+var ROUTE_ASSET_EXTENSION_RE = /\.(?:avif|bmp|css|gif|ico|jpeg|jpg|js|json|map|mp4|pdf|png|svg|webp|woff2?)$/i;
 function collectRouteCandidateFiles(dir, files, depth = 0) {
   if (depth > 5) return;
   let entries;
@@ -496,30 +498,72 @@ function scanReactRouter(projectRoot) {
       continue;
     }
     const isReactRouterFile = content.includes("react-router-dom") || content.includes("react-router") || content.includes("<Routes") || content.includes("createBrowserRouter") || content.includes("createHashRouter") || content.includes("RouterProvider") || content.includes("HashRouter") || content.includes("BrowserRouter");
-    if (!isReactRouterFile) continue;
     const relativePath = relative2(projectRoot, absolutePath);
     const pathMatches = /* @__PURE__ */ new Set();
-    for (const match of content.matchAll(/<Route\b[^>]*\bpath=["'`]([^"'`]+)["'`]/g)) {
-      pathMatches.add(match[1]);
+    if (isReactRouterFile) {
+      for (const match of content.matchAll(/<Route\b[^>]*\bpath=["'`]([^"'`]+)["'`]/g)) {
+        pathMatches.add(match[1]);
+      }
+      for (const match of content.matchAll(/\bpath\s*:\s*["'`]([^"'`]+)["'`]/g)) {
+        pathMatches.add(match[1]);
+      }
     }
-    for (const match of content.matchAll(/\bpath\s*:\s*["'`]([^"'`]+)["'`]/g)) {
-      pathMatches.add(match[1]);
+    for (const route of detectPathnameBranchRoutes(content)) {
+      pathMatches.add(route);
     }
+    if (!isReactRouterFile && pathMatches.size === 0) continue;
     if (pathMatches.size === 0 && (content.includes("<Routes") || content.includes("RouterProvider"))) {
       pathMatches.add("/");
     }
     for (const path of pathMatches) {
-      if (!routeMap.has(path)) {
-        routeMap.set(path, {
-          path,
-          file: relativePath,
-          hasLayout: false
-        });
-      }
+      const routePath = normalizeDetectedRouteLiteral(path);
+      if (!routePath || routeMap.has(routePath)) continue;
+      routeMap.set(routePath, {
+        path: routePath,
+        file: relativePath,
+        hasLayout: false
+      });
     }
   }
   return [...routeMap.values()];
 }
+function normalizeDetectedRouteLiteral(value) {
+  const cleaned = value.trim().split(/[?#]/)[0];
+  if (!cleaned || cleaned === "/") return "/";
+  if (cleaned === "*" || cleaned === "**" || cleaned.startsWith("#")) return null;
+  if (!cleaned.startsWith("/") || cleaned.startsWith("//")) return null;
+  if (ROUTE_ASSET_EXTENSION_RE.test(cleaned)) return null;
+  return cleaned.replace(/\/+$/g, "") || "/";
+}
+function collectRouteLiterals(pattern, content, routes) {
+  let count = 0;
+  for (const match of content.matchAll(pattern)) {
+    const route = normalizeDetectedRouteLiteral(match[1] ?? "");
+    if (!route) continue;
+    routes.add(route);
+    count += 1;
+  }
+  return count;
+}
+function detectPathnameBranchRoutes(content) {
+  const routes = /* @__PURE__ */ new Set();
+  const comparison = new RegExp(
+    `\\b${ROUTE_VARIABLE_NAMES}\\b\\s*(?:===|!==|==|!=)\\s*["'\`](\\/[^"'\`]+)["'\`]`,
+    "g"
+  );
+  const reversedComparison = new RegExp(
+    `["'\`](\\/[^"'\`]+)["'\`]\\s*(?:===|!==|==|!=)\\s*\\b${ROUTE_VARIABLE_NAMES}\\b`,
+    "g"
+  );
+  const strongMatches = collectRouteLiterals(comparison, content, routes) + collectRouteLiterals(reversedComparison, content, routes) + collectRouteLiterals(/\bcase\s+["'`](\/[^"'`]+)["'`]\s*:/g, content, routes);
+  const hasPathnameSignal = /\b(?:window\.|document\.)?location\.pathname\b|\bpathname\b/.test(
+    content
+  );
+  if (strongMatches > 0 || hasPathnameSignal) {
+    collectRouteLiterals(/\b(?:href|to)\s*=\s*["'`](\/[^"'`]+)["'`]/g, content, routes);
+  }
+  return [...routes];
+}
 function hasReactRouterDependency(projectRoot) {
   return hasDependency(projectRoot, ["react-router", "react-router-dom"]);
 }
@@ -1091,9 +1135,37 @@ function routePathname(route) {
 function declaredRouteObserved(route, observedRoutes) {
   return observedRoutes.has(route) || route.includes("?") && observedRoutes.has(routePathname(route));
 }
+function sectionForRoute(essence, route) {
+  const mappedSectionId = essence.blueprint.routes?.[route]?.section;
+  const sections = essence.blueprint.sections ?? [];
+  if (mappedSectionId) {
+    return sections.find((section) => section.id === mappedSectionId) ?? null;
+  }
+  return sections.find(
+    (section) => section.pages?.some((page) => page.route === route || page.route === routePathname(route))
+  ) ?? null;
+}
+function readObservedRouteSource(projectRoot, file) {
+  if (!file || file === ".") return "";
+  try {
+    return readFileSync5(join5(projectRoot, file), "utf-8");
+  } catch {
+    return "";
+  }
+}
+function routeLooksPublicFullBleed(path, file, code) {
+  return /\b(?:pricing|plans|marketing|landing|public|hero|full-bleed|fullbleed|marketing-bleed)\b/i.test(
+    `${path} ${file} ${code}`
+  );
+}
+function routeLooksAppShell(file, code) {
+  return /\b(?:sidebar|side-nav|sidenav|app-frame|dashboard-shell|app-shell)\b|<\s*(?:Sidebar|AppShell|DashboardShell)\b/i.test(
+    `${file} ${code}`
+  );
+}
 function hasDoctrineEffect(essence, key) {
   const effects = essence.dna.constraints?.effects;
-  return Boolean(effects && effects[key]);
+  return Boolean(effects?.[key]);
 }
 function hasActionableDoctrineSource(doctrine, area) {
   return doctrine.sources.some(
@@ -1168,6 +1240,32 @@ function scanBrownfieldIssues(projectRoot, essence) {
       suggestion: "Confirm whether these are generated/dynamic routes or stale contract entries."
     });
   }
+  const shellDriftRoutes = [];
+  for (const route of routes.routes.slice(0, 80)) {
+    const section = sectionForRoute(essence, route.path);
+    const shell = section?.shell ?? "";
+    if (!shell) continue;
+    const source = readObservedRouteSource(projectRoot, route.file);
+    const shellHasSidebar = /\bsidebar\b/i.test(shell);
+    const shellIsPublicLight = /^(?:main-only|main-footer|topnav-main|topnav-main-footer)$/i.test(
+      shell
+    );
+    if (shellHasSidebar && routeLooksPublicFullBleed(route.path, route.file, source)) {
+      shellDriftRoutes.push(`${route.path} (${shell} vs public/full-bleed source)`);
+    } else if (shellIsPublicLight && routeLooksAppShell(route.file, source)) {
+      shellDriftRoutes.push(`${route.path} (${shell} vs app-shell source)`);
+    }
+  }
+  if (shellDriftRoutes.length > 0) {
+    issues.push({
+      type: "warning",
+      rule: "brownfield-shell-drift",
+      message: `Observed route shell signals disagree with the Decantr section shell: ${routeLabel(
+        shellDriftRoutes
+      )}.`,
+      suggestion: "Regenerate and merge a brownfield proposal, or update the affected section shell after reviewing the route source."
+    });
+  }
   const adoptionMode = projectJson.initialized?.adoptionMode;
   const themeId = essence.dna.theme.id;
   if (adoptionMode === "contract-only" && themeId === "luminarum" && (styling.approach !== "unknown" || styling.cssVariables.length > 0)) {

package/dist/{chunk-B2PJDAMS.js → chunk-TXNLMAN5.js}

@@ -1,7 +1,7 @@
 import {
   createProjectHealthReport,
   listWorkspaceAppCandidates
-} from "./chunk-4NDOHCYY.js";
+} from "./chunk-BY6S6IWG.js";
 
 // src/commands/workspace.ts
 import { execFileSync } from "child_process";

package/dist/{chunk-GN63PIKK.js → chunk-WSL6ZSTZ.js}

@@ -22,7 +22,7 @@ import {
   listWorkspaceCandidates,
   listWorkspaceProjects,
   shouldFailWorkspaceHealth
-} from "./chunk-B2PJDAMS.js";
+} from "./chunk-TXNLMAN5.js";
 import {
   acceptBrownfieldLocalLaw,
   acceptStyleBridge,
@@ -52,7 +52,7 @@ import {
   writeBrownfieldCodifyProposal,
   writeHostedPatternMappingProposal,
   writeStyleBridgeProposal
-} from "./chunk-4NDOHCYY.js";
+} from "./chunk-BY6S6IWG.js";
 import {
   buildGuardRegistryContext,
   createDoctrineMap,
@@ -69,7 +69,7 @@ import {
   sendCliCommandTelemetry,
   sendNewProjectCompletedTelemetry,
   writeDoctrineMap
-} from "./chunk-7Z74ETDR.js";
+} from "./chunk-GPN2THFD.js";
 
 // src/index.ts
 import { existsSync as existsSync28, mkdirSync as mkdirSync15, readdirSync as readdirSync8, readFileSync as readFileSync21, writeFileSync as writeFileSync18 } from "fs";
@@ -1523,6 +1523,35 @@ function doctrineEffects(ambient) {
   }
   return Object.keys(effects).length > 0 ? effects : void 0;
 }
+function readRouteSource(projectRoot, file) {
+  if (!file || file === ".") return "";
+  try {
+    return readFileSync4(join5(projectRoot, file), "utf-8");
+  } catch {
+    return "";
+  }
+}
+function publicSurfaceShell(input, code) {
+  const hasFooter = input.layout.hasFooter || /\bfooter\b|<\s*Footer\b/i.test(code);
+  const hasTopNav = input.layout.hasTopNav || /\b(?:topnav|top-nav|navbar|header)\b|<\s*(?:Header|Nav|Navbar)\b/i.test(code);
+  if (hasTopNav && hasFooter) return "topnav-main-footer";
+  if (hasTopNav) return "topnav-main";
+  if (hasFooter) return "main-footer";
+  return "main-only";
+}
+function routeShellPattern(input, route, classified, fallbackShell) {
+  const code = readRouteSource(input.project.projectRoot, route.file);
+  const routeEvidence = `${route.path} ${route.file} ${code}`;
+  if (classified.role === "public" || /\b(?:pricing|plans|marketing|landing|public|hero|full-bleed|fullbleed|marketing-bleed)\b/i.test(
+    routeEvidence
+  )) {
+    return publicSurfaceShell(input, code);
+  }
+  if (/\b(?:sidebar|side-nav|sidenav|app-frame|dashboard-shell)\b/i.test(routeEvidence)) {
+    return fallbackShell;
+  }
+  return fallbackShell;
+}
 function createBrownfieldProposal(input) {
   const target = input.project.framework !== "unknown" ? input.project.framework : "generic-web";
   const shell = input.layout.shellPattern || "observed-existing-shell";
@@ -1531,10 +1560,11 @@ function createBrownfieldProposal(input) {
   const observedRoutes = input.routes.routes.length > 0 ? input.routes.routes : [{ path: "/", file: ".", hasLayout: false }];
   for (const route of observedRoutes) {
     const classified = routeDomain(route.path);
+    const observedShell = routeShellPattern(input, route, classified, shell);
     const section = sectionMap.get(classified.sectionId) ?? {
       id: classified.sectionId,
       role: classified.role,
-      shell,
+      shell: observedShell,
       features: featuresForSection(classified.sectionId, input.features.detected),
       description: classified.description,
       pages: [],
@@ -1550,7 +1580,8 @@ function createBrownfieldProposal(input) {
         route: route.path,
         layout: ["existing-surface"],
         directives: [
-          `Observed source: ${route.file}. Treat this route as existing product surface, not scaffold territory.`
+          `Observed source: ${route.file}. Treat this route as existing product surface, not scaffold territory.`,
+          `Observed shell: ${observedShell}. Preserve this route's shell posture unless the user explicitly approves a layout migration.`
         ]
       });
     }
@@ -10828,7 +10859,7 @@ async function cmdAdoptWorkflow(args) {
   await cmdGraph(projectRoot, { displayRoot: process.cwd() });
   if (process.exitCode && process.exitCode !== 0) return;
   if (runVerify) {
-    const { cmdHealth } = await import("./health-DDT4RABT.js");
+    const { cmdHealth } = await import("./health-IOTIZT7Z.js");
     await cmdHealth(projectRoot, {
       browser: runBrowser,
       browserBaseUrl: baseUrl,
@@ -10899,7 +10930,7 @@ async function cmdVerifyWorkflow(args) {
     return;
   }
   if (workspaceMode) {
-    const { cmdWorkspace } = await import("./workspace-3XNCMZ5L.js");
+    const { cmdWorkspace } = await import("./workspace-72SJI3MW.js");
     await cmdWorkspace(process.cwd(), ["workspace", "health", ...withoutWorkflowOnlyFlags(args)]);
     return;
   }
@@ -10932,7 +10963,7 @@ async function cmdVerifyWorkflow(args) {
   }
   let guardExitCode;
   if (brownfield) {
-    const { cmdHeal, collectCheckIssues } = await import("./heal-HHVVTVIH.js");
+    const { cmdHeal, collectCheckIssues } = await import("./heal-2DKBFWB6.js");
     if (quietOutput) {
       const result = collectCheckIssues(workspaceInfo.appRoot, { brownfield: true });
       guardExitCode = result.issues.some((issue) => issue.type === "error") ? 1 : void 0;
@@ -10942,7 +10973,7 @@ async function cmdVerifyWorkflow(args) {
       process.exitCode = void 0;
     }
   }
-  const { cmdHealth, parseHealthArgs } = await import("./health-DDT4RABT.js");
+  const { cmdHealth, parseHealthArgs } = await import("./health-IOTIZT7Z.js");
   await cmdHealth(workspaceInfo.appRoot, parseHealthArgs(healthArgs));
   if (localPatterns) {
     const validation = validateLocalLaw(workspaceInfo.appRoot);
@@ -12445,7 +12476,7 @@ async function main() {
           `${YELLOW12}Note: \`decantr heal\` is deprecated. Use \`decantr check\` instead.${RESET16}`
         );
       }
-      const { cmdHeal } = await import("./heal-HHVVTVIH.js");
+      const { cmdHeal } = await import("./heal-2DKBFWB6.js");
       const { flags } = parseLooseArgs(args);
       const workspaceInfo = resolveWorkflowProject(flags, "check");
       if (!workspaceInfo) break;
@@ -12470,7 +12501,7 @@ async function main() {
         const { flags } = parseLooseArgs(args);
         const workspaceInfo = resolveWorkflowProject(flags, "health");
         if (!workspaceInfo) break;
-        const { cmdHealth, parseHealthArgs } = await import("./health-DDT4RABT.js");
+        const { cmdHealth, parseHealthArgs } = await import("./health-IOTIZT7Z.js");
         await cmdHealth(workspaceInfo.appRoot, parseHealthArgs(stripProjectArgs(args)));
       } catch (e) {
         console.error(error2(e.message));
@@ -12498,7 +12529,7 @@ async function main() {
           cmdStudioHelp();
           break;
         }
-        const { cmdStudio, parseStudioArgs } = await import("./studio-WDJ3BOCU.js");
+        const { cmdStudio, parseStudioArgs } = await import("./studio-DLWUMCC3.js");
         await cmdStudio(process.cwd(), parseStudioArgs(args));
       } catch (e) {
         console.error(error2(e.message));
@@ -12512,7 +12543,7 @@ async function main() {
           cmdWorkspaceHelp();
           break;
         }
-        const { cmdWorkspace } = await import("./workspace-3XNCMZ5L.js");
+        const { cmdWorkspace } = await import("./workspace-72SJI3MW.js");
         await cmdWorkspace(process.cwd(), args);
       } catch (e) {
         console.error(error2(e.message));

package/dist/{heal-HHVVTVIH.js → heal-2DKBFWB6.js}

@@ -1,7 +1,7 @@
 import {
   cmdHeal,
   collectCheckIssues
-} from "./chunk-7Z74ETDR.js";
+} from "./chunk-GPN2THFD.js";
 export {
   cmdHeal,
   collectCheckIssues

package/dist/{health-DDT4RABT.js → health-IOTIZT7Z.js}

@@ -13,8 +13,8 @@ import {
   renderProjectHealthCiWorkflow,
   shouldFailHealth,
   writeProjectHealthCiWorkflow
-} from "./chunk-4NDOHCYY.js";
-import "./chunk-7Z74ETDR.js";
+} from "./chunk-BY6S6IWG.js";
+import "./chunk-GPN2THFD.js";
 export {
   cmdHealth,
   collectDesignTokenEvidence,

package/dist/index.js

@@ -1,5 +1,5 @@
-import "./chunk-GN63PIKK.js";
+import "./chunk-WSL6ZSTZ.js";
 import "./chunk-SIDKK73N.js";
-import "./chunk-B2PJDAMS.js";
-import "./chunk-4NDOHCYY.js";
-import "./chunk-7Z74ETDR.js";
+import "./chunk-TXNLMAN5.js";
+import "./chunk-BY6S6IWG.js";
+import "./chunk-GPN2THFD.js";

package/dist/{studio-WDJ3BOCU.js → studio-DLWUMCC3.js}

@@ -1,13 +1,13 @@
 import {
   createWorkspaceHealthReport
-} from "./chunk-B2PJDAMS.js";
+} from "./chunk-TXNLMAN5.js";
 import {
   createProjectHealthReport
-} from "./chunk-4NDOHCYY.js";
+} from "./chunk-BY6S6IWG.js";
 import {
   sendStudioHealthRefreshedTelemetry,
   sendStudioStartedTelemetry
-} from "./chunk-7Z74ETDR.js";
+} from "./chunk-GPN2THFD.js";
 
 // src/commands/studio.ts
 import { readFileSync } from "fs";

package/dist/{workspace-3XNCMZ5L.js → workspace-72SJI3MW.js}

@@ -7,9 +7,9 @@ import {
   listWorkspaceProjects,
   parseWorkspaceArgs,
   shouldFailWorkspaceHealth
-} from "./chunk-B2PJDAMS.js";
-import "./chunk-4NDOHCYY.js";
-import "./chunk-7Z74ETDR.js";
+} from "./chunk-TXNLMAN5.js";
+import "./chunk-BY6S6IWG.js";
+import "./chunk-GPN2THFD.js";
 export {
   cmdWorkspace,
   createWorkspaceHealthReport,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@decantr/cli",
-  "version": "3.0.2",
+  "version": "3.1.0",
   "description": "Decantr CLI - adopt, verify, graph, and govern frontend codebases touched by AI agents",
   "keywords": [
     "decantr",
@@ -49,11 +49,11 @@
   },
   "dependencies": {
     "ajv": "^8.20.0",
-    "@decantr/core": "3.0.2",
-    "@decantr/registry": "3.0.2",
-    "@decantr/verifier": "3.0.2",
-    "@decantr/essence-spec": "3.0.2",
-    "@decantr/telemetry": "3.0.2"
+    "@decantr/core": "3.1.0",
+    "@decantr/registry": "3.1.0",
+    "@decantr/essence-spec": "3.1.0",
+    "@decantr/telemetry": "3.1.0",
+    "@decantr/verifier": "3.1.0"
   },
   "scripts": {
     "build": "tsup",