@decantr/verifier 3.6.1 → 3.8.0

package/README.md

@@ -15,7 +15,8 @@ npm install @decantr/verifier
 
 - `auditProject()` for project-level Decantr audits
 - `auditBuiltDist()` for built-output runtime verification against emitted HTML, assets, and route hints
-- `scanProject()` for read-only Brownfield reconnaissance of framework, routes, components, styling, static-hosting hints, Decantr presence, and assistant-rule files
+- `discoverProject()` for shared read-only Brownfield discovery of workspace/app scope, package manager, framework, language, source-declared routes, taskable routes, component inventory, styling authority, Decantr presence, and assistant-rule files
+- `scanProject()` for read-only Brownfield reconnaissance that emits `scan-report.v2` by default using the shared discovery substrate
 - `auditComponentReuse()` for the first AST-derived component reuse drift slice, focused on AI reimplementing common UI primitives instead of importing project-owned components, plus local import references that the typed graph can turn into source-to-source impact edges
 - `auditStyleBridgeDrift()` for accepted style bridge drift, focused on production `className`, common class-helper values, stylesheet declarations, and hardcoded inline color styles that bypass project-owned token/class authority
 - `collectProjectSourceFiles()` for the shared production-source file selection used by Project Health, component reuse drift, style bridge drift, and typed graph source provenance
@@ -96,12 +97,13 @@ function isBlocking(report: ProjectHealthReport) {
 - `@decantr/verifier/schema/loop-readiness.v2.json`
 - `@decantr/verifier/schema/proof-field-report.v2.json`
 - `@decantr/verifier/schema/scan-report.v1.json`
+- `@decantr/verifier/schema/scan-report.v2.json`
 - `@decantr/verifier/schema/workspace-health-report.v1.json`
 - `@decantr/verifier/schema/workspace-health-report.v2.json`
 - `@decantr/verifier/schema/file-critique-report.v1.json`
 - `@decantr/verifier/schema/showcase-shortlist-report.v1.json`
 
-The v2 schema assets are the active Decantr 3.5 contracts for Project Health, CI, Workspace Health, Evidence Bundles, runtime probes, authority resolution, loop readiness, and proof field reports. v1 health/evidence schemas remain published for stored-artifact compatibility; audit, scan, file-critique, and showcase reports remain v1 until those wires need to change. See [Report Schemas](https://decantr.ai/reference/report-schemas.md).
+The v2 schema assets are the active Decantr 3 contracts for Project Health, CI, Workspace Health, Evidence Bundles, runtime probes, authority resolution, loop readiness, proof field reports, and Brownfield scan reports. v1 health/evidence/scan schemas remain published for stored-artifact compatibility; audit, file-critique, and showcase reports remain v1 until those wires need to change. See [Report Schemas](https://decantr.ai/reference/report-schemas.md).
 
 ## Security And Permissions
 

package/dist/index.d.ts

@@ -516,6 +516,99 @@ interface ComponentReuseAudit {
 }
 declare function auditComponentReuse(projectRoot: string, sourceFiles: string[]): ComponentReuseAudit;
 
+type DiscoveryConfidenceLevel = 'high' | 'medium' | 'low';
+type DiscoveryPackageManager = 'npm' | 'pnpm' | 'yarn' | 'bun' | 'unknown';
+type DiscoveryFramework = 'angular' | 'astro' | 'html' | 'nextjs' | 'nuxt' | 'react' | 'solid' | 'svelte' | 'vue' | 'unknown';
+type DiscoveryPrimaryLanguage = 'go' | 'html' | 'javascript' | 'python' | 'rust' | 'typescript' | 'unknown';
+type DiscoveryRouteStrategy = 'angular-router' | 'app-router' | 'mixed-next-router' | 'none' | 'nuxt-router' | 'pages-router' | 'react-router' | 'source-declared' | 'static-html' | 'sveltekit-router' | 'vue-router';
+type DiscoveryRouteSignalKind = 'angular-router' | 'file-route' | 'html-route' | 'pathname-branch' | 'react-router' | 'source-declared' | 'tanstack-router' | 'vue-router';
+interface DiscoveryRouteSignal {
+    path: string;
+    file: string;
+    kind: DiscoveryRouteSignalKind;
+    confidence: DiscoveryConfidenceLevel;
+    taskable: boolean;
+    evidence: string;
+}
+interface DiscoveryRoute {
+    path: string;
+    file: string;
+    hasLayout: boolean;
+    confidence: DiscoveryConfidenceLevel;
+    source: DiscoveryRouteSignalKind;
+}
+interface DiscoveryComponent {
+    name: string;
+    file: string;
+    kind: 'exported' | 'default-export' | 'wrapper' | 'pascal-file' | 'route-local';
+    confidence: DiscoveryConfidenceLevel;
+}
+interface DiscoveryProjectIdentity {
+    framework: DiscoveryFramework;
+    frameworkVersion: string | null;
+    packageManager: DiscoveryPackageManager;
+    primaryLanguage: DiscoveryPrimaryLanguage;
+    hasTypeScript: boolean;
+    hasTailwind: boolean;
+    hasDecantr: boolean;
+    packageName: string | null;
+    packageJsonPresent: boolean;
+    packageJsonValid: boolean;
+    dependencies: Record<string, string>;
+    evidence: string[];
+}
+interface DiscoveryWorkspaceScope {
+    workspaceRoot: string;
+    appRoot: string;
+    projectPath: string;
+    scope: 'single-app' | 'workspace-app';
+}
+interface DiscoveryRoutes {
+    strategy: DiscoveryRouteStrategy;
+    routeSignals: DiscoveryRouteSignal[];
+    taskableRoutes: DiscoveryRoute[];
+    routeSignalCount: number;
+    taskableRouteCount: number;
+    confidence: DiscoveryConfidenceLevel;
+    limitations: string[];
+}
+interface DiscoveryComponents {
+    pageCount: number;
+    componentCount: number;
+    directories: string[];
+    items: DiscoveryComponent[];
+    confidence: DiscoveryConfidenceLevel;
+    evidence: string[];
+    limitations: string[];
+}
+interface DiscoveryStyling {
+    approach: string;
+    configFile: string | null;
+    cssVariableCount: number;
+    colorTokenCount: number;
+    darkMode: boolean;
+    themeSignals: string[];
+}
+interface ProjectDiscovery {
+    schemaVersion: 'discovery.v1';
+    generatedAt: string;
+    workspace: DiscoveryWorkspaceScope;
+    project: DiscoveryProjectIdentity;
+    routes: DiscoveryRoutes;
+    components: DiscoveryComponents;
+    styling: DiscoveryStyling;
+    assistant: {
+        ruleFiles: string[];
+    };
+    confidence: {
+        level: DiscoveryConfidenceLevel;
+        score: number;
+        reasons: string[];
+    };
+    limitations: string[];
+}
+declare function discoverProject(projectRoot: string): ProjectDiscovery;
+
 /**
  * Experiential interaction verifier.
  *
@@ -589,7 +682,9 @@ type ScanInputKind = 'local' | 'github-repo' | 'github-pages';
 type ScanConfidence = 'high' | 'medium' | 'low';
 type ScanApplicabilityStatus = 'strong_fit' | 'partial_fit' | 'not_applicable' | 'unknown';
 type ScanFindingSeverity = 'success' | 'info' | 'warn' | 'error';
-declare const SCAN_REPORT_SCHEMA_URL = "https://decantr.ai/schemas/scan-report.v1.json";
+declare const SCAN_REPORT_V1_SCHEMA_URL = "https://decantr.ai/schemas/scan-report.v1.json";
+declare const SCAN_REPORT_V2_SCHEMA_URL = "https://decantr.ai/schemas/scan-report.v2.json";
+declare const SCAN_REPORT_SCHEMA_URL = "https://decantr.ai/schemas/scan-report.v2.json";
 interface ScanInputV1 {
     kind: ScanInputKind;
     value: string;
@@ -669,7 +764,7 @@ interface ScanGraphPreviewV1 {
     } | null;
 }
 interface ScanReportV1 {
-    $schema: typeof SCAN_REPORT_SCHEMA_URL;
+    $schema: typeof SCAN_REPORT_V1_SCHEMA_URL;
     schemaVersion: 'scan-report.v1';
     generatedAt: string;
     input: ScanInputV1;
@@ -735,6 +830,70 @@ interface ScanReportV1 {
         notes: string[];
     };
 }
+interface ScanRouteSignalV2 {
+    path: string;
+    file: string;
+    kind: string;
+    confidence: DiscoveryConfidenceLevel;
+    taskable: boolean;
+    evidence: string;
+}
+interface ScanComponentV2 {
+    name: string;
+    file: string;
+    kind: DiscoveryComponent['kind'];
+    confidence: DiscoveryConfidenceLevel;
+}
+interface ScanDiscoveryV2 {
+    schemaVersion: 'discovery.v1';
+    workspace: {
+        projectPath: string;
+        scope: 'single-app' | 'workspace-app';
+    };
+    projectEvidence: string[];
+    routeSignalCount: number;
+    taskableRouteCount: number;
+    routeConfidence: DiscoveryConfidenceLevel;
+    componentConfidence: DiscoveryConfidenceLevel;
+    componentEvidence: string[];
+    limitations: string[];
+}
+interface ScanReportV2 {
+    $schema: typeof SCAN_REPORT_V2_SCHEMA_URL;
+    schemaVersion: 'scan-report.v2';
+    generatedAt: string;
+    input: ScanInputV1;
+    source: ScanReportV1['source'];
+    confidence: ScanReportV1['confidence'];
+    applicability: ScanReportV1['applicability'];
+    project: ScanReportV1['project'] & {
+        evidence: string[];
+        workspaceScope: 'single-app' | 'workspace-app';
+        projectPath: string;
+    };
+    routes: ScanReportV1['routes'] & {
+        routeSignalCount: number;
+        taskableRouteCount: number;
+        confidence: DiscoveryConfidenceLevel;
+        signals: ScanRouteSignalV2[];
+    };
+    components: ScanReportV1['components'] & {
+        confidence: DiscoveryConfidenceLevel;
+        evidence: string[];
+        items: ScanComponentV2[];
+        limitations: string[];
+    };
+    styling: ScanReportV1['styling'];
+    staticHosting: ScanReportV1['staticHosting'];
+    assistant: ScanReportV1['assistant'];
+    graphPreview?: ScanGraphPreviewV1;
+    pagesProbe: PublishedSiteProbeV1 | null;
+    discovery: ScanDiscoveryV2;
+    findings: ScanFindingV1[];
+    recommendedCommands: string[];
+    privacy: ScanReportV1['privacy'];
+}
+type ScanReport = ScanReportV2;
 interface ScanProjectOptions {
     input?: ScanInputV1;
     repository?: ScanRepositoryV1 | null;
@@ -748,7 +907,7 @@ interface GitHubScanInputResolution {
     publishedSiteUrl: string | null;
     warnings: string[];
 }
-declare function scanProject(projectRoot: string, options?: ScanProjectOptions): Promise<ScanReportV1>;
+declare function scanProject(projectRoot: string, options?: ScanProjectOptions): Promise<ScanReportV2>;
 declare function createUnavailableScanReport(input: {
     scanInput: ScanInputV1;
     repository?: ScanRepositoryV1 | null;
@@ -757,7 +916,7 @@ declare function createUnavailableScanReport(input: {
     title: string;
     message: string;
     evidence?: string[];
-}): ScanReportV1;
+}): ScanReportV2;
 declare function probePublishedSite(url: string, options?: {
     timeoutMs?: number;
     fetchImpl?: typeof fetch;
@@ -914,7 +1073,7 @@ declare const VERIFICATION_SCHEMA_URLS: {
     readonly projectHealth: "https://decantr.ai/schemas/project-health-report.v2.json";
     readonly decantrCi: "https://decantr.ai/schemas/decantr-ci-report.v2.json";
     readonly evidenceBundle: "https://decantr.ai/schemas/evidence-bundle.v2.json";
-    readonly scanReport: "https://decantr.ai/schemas/scan-report.v1.json";
+    readonly scanReport: "https://decantr.ai/schemas/scan-report.v2.json";
     readonly workspaceHealth: "https://decantr.ai/schemas/workspace-health-report.v2.json";
     readonly fileCritique: "https://decantr.ai/schemas/file-critique-report.v1.json";
     readonly showcaseShortlist: "https://decantr.ai/schemas/showcase-shortlist-report.v1.json";
@@ -1375,4 +1534,4 @@ declare function auditProject(projectRoot: string): Promise<ProjectAuditReport>;
 declare function critiqueSource({ filePath, code, reviewPack, packManifest, treatmentsCss, adoptionMode, }: CritiqueSourceInput): FileCritiqueReport;
 declare function critiqueFile(filePath: string, projectRoot: string): Promise<FileCritiqueReport>;
 
-export { AUTHORITY_RESOLUTION_V2_SCHEMA_URL, type AuthorityConflict, type AuthorityLaneId, type AuthorityOrderEntry, type AuthorityResolution, type AuthorityResolutionAction, type AuthorityResolutionActionKind, type BuiltDistAuditOptions, COMPONENT_REUSE_RULE_ID, type CodeComponentDeclaration, type CodeImportReference, type ComponentReuseAudit, type ComponentReuseFinding, type ContractAssertion, type ContractAssertionCategory, type CritiqueSourceInput, DECANTR_CI_REPORT_V2_SCHEMA_URL, EVIDENCE_BUNDLE_SCHEMA_URL, EVIDENCE_BUNDLE_V2_SCHEMA_URL, type EvidenceBundle, type EvidenceBundleInput, type EvidenceConfidenceLevel, type EvidenceProvenanceEntry, type EvidenceRepairPlan, type EvidenceRepairPlanAction, type EvidenceTier, type EvidenceTierCapability, type EvidenceTierOptions, type EvidenceTierStage, type EvidenceTierStatus, type ExtractSourceStringLiteralOptions, type FileCritiqueReport, type GitHubScanInputResolution, type GraphAnchorEdge, type GraphAnchorFindingInput, type GraphAnchorNode, type GraphAnchorSnapshot, type GraphImpactSummary, INTERACTION_SIGNALS, type InteractionMissingFinding, type InteractionRequirement, type InteractionSignal, KNOWN_VERIFICATION_DIAGNOSTICS, LOOP_READINESS_V2_SCHEMA_URL, type LoopInstructionBlock, type LoopReadiness, type LoopReadinessState, type MissingPackManifestFile, PROJECT_HEALTH_REPORT_V2_SCHEMA_URL, PROOF_FIELD_REPORT_V2_SCHEMA_URL, type PackManifest, type ProjectAuditReport, type ProjectHealthFinding, type ProjectHealthFindingLike, type ProjectHealthFindingSource, type ProjectHealthGraphSummary, type ProjectHealthPackSummary, type ProjectHealthRemediation, type ProjectHealthReport, type ProjectHealthReportLike, type ProjectHealthRouteSummary, type ProjectHealthStatus, type ProjectSourceFile, type ProjectSourceKind, type ProjectSourceLanguage, type ProjectSourceProgram, type ProjectSourceProgramOptions, type PublishedSiteProbeV1, RAW_CONTROL_REUSE_RULE_ID, RUNTIME_PROBE_PAYLOAD_V2_SCHEMA_URL, type RawControlReuseFinding, type ResolveSourceSymbolOriginOptions, type RuntimeAudit, SCAN_REPORT_SCHEMA_URL, STYLE_BRIDGE_ARBITRARY_VALUE_RULE_ID, type ScanApplicabilityStatus, type ScanConfidence, type ScanFindingSeverity, type ScanFindingV1, type ScanInputKind, type ScanInputV1, type ScanProjectOptions, type ScanReportV1, type ScanRepositoryV1, type ScanRouteV1, type ShowcaseShortlistVerificationEntry, type ShowcaseShortlistVerificationReport, type SourceImportKind, type SourceImportReference, type SourceImportResolution, type SourceImportResolutionKind, type SourceInventory, type SourceInventoryOptions, type SourceInventorySkipReason, type SourceInventorySkippedPath, type SourceLocation, type SourceStringLiteral, type SourceStringLiteralContext, type SourceSymbolOrigin, type StyleBridgeDriftAudit, type StyleBridgeDriftFinding, VERIFICATION_COMMON_V2_SCHEMA_URL, VERIFICATION_SCHEMA_URLS, type VerificationDiagnosticCatalogEntry, type VerificationDiagnosticInput, type VerificationDiagnosticMetadata, type VerificationFinding, type VerificationGraphAnchor, type VerificationGraphAnchorConfidence, type VerificationRepairAction, type VerificationScore, type VerificationSeverity, WORKSPACE_HEALTH_REPORT_V2_SCHEMA_URL, anchorFindingsToGraph, auditBuiltDist, auditComponentReuse, auditProject, auditStyleBridgeDrift, buildProjectHealthRepairPlan, collectMissingPackManifestFiles, collectProjectSourceFiles, collectSourceImports, createAuthorityOrder, createAuthorityResolution, createContractAssertions, createEvidenceBundle, createEvidenceTier, createLoopReadiness, createProjectSourceProgram, createSourceInventory, createUnavailableScanReport, critiqueFile, critiqueSource, deriveVerificationDiagnostic, emptyRuntimeAudit, extractRouteHintsFromEssence, extractSourceStringLiterals, getProjectSourceFile, isPathInsideProject, isSupportedSourceExtension, listKnownInteractions, normalizeSourcePath, probePublishedSite, resolveGitHubScanInput, resolveGraphAnchorForFinding, resolveSourceImport, resolveSourceSymbolOrigin, scanProject, sourceKindFromPath, sourceLanguageFromPath, sourceLocationForNode, sourceScriptKindFromPath, verifyInteractionsInSource };
+export { AUTHORITY_RESOLUTION_V2_SCHEMA_URL, type AuthorityConflict, type AuthorityLaneId, type AuthorityOrderEntry, type AuthorityResolution, type AuthorityResolutionAction, type AuthorityResolutionActionKind, type BuiltDistAuditOptions, COMPONENT_REUSE_RULE_ID, type CodeComponentDeclaration, type CodeImportReference, type ComponentReuseAudit, type ComponentReuseFinding, type ContractAssertion, type ContractAssertionCategory, type CritiqueSourceInput, DECANTR_CI_REPORT_V2_SCHEMA_URL, type DiscoveryComponent, type DiscoveryConfidenceLevel, type DiscoveryFramework, type DiscoveryPackageManager, type DiscoveryPrimaryLanguage, type DiscoveryRoute, type DiscoveryRouteSignal, type DiscoveryRouteSignalKind, type DiscoveryRouteStrategy, type DiscoveryRoutes, type DiscoveryStyling, EVIDENCE_BUNDLE_SCHEMA_URL, EVIDENCE_BUNDLE_V2_SCHEMA_URL, type EvidenceBundle, type EvidenceBundleInput, type EvidenceConfidenceLevel, type EvidenceProvenanceEntry, type EvidenceRepairPlan, type EvidenceRepairPlanAction, type EvidenceTier, type EvidenceTierCapability, type EvidenceTierOptions, type EvidenceTierStage, type EvidenceTierStatus, type ExtractSourceStringLiteralOptions, type FileCritiqueReport, type GitHubScanInputResolution, type GraphAnchorEdge, type GraphAnchorFindingInput, type GraphAnchorNode, type GraphAnchorSnapshot, type GraphImpactSummary, INTERACTION_SIGNALS, type InteractionMissingFinding, type InteractionRequirement, type InteractionSignal, KNOWN_VERIFICATION_DIAGNOSTICS, LOOP_READINESS_V2_SCHEMA_URL, type LoopInstructionBlock, type LoopReadiness, type LoopReadinessState, type MissingPackManifestFile, PROJECT_HEALTH_REPORT_V2_SCHEMA_URL, PROOF_FIELD_REPORT_V2_SCHEMA_URL, type PackManifest, type ProjectAuditReport, type ProjectDiscovery, type ProjectHealthFinding, type ProjectHealthFindingLike, type ProjectHealthFindingSource, type ProjectHealthGraphSummary, type ProjectHealthPackSummary, type ProjectHealthRemediation, type ProjectHealthReport, type ProjectHealthReportLike, type ProjectHealthRouteSummary, type ProjectHealthStatus, type ProjectSourceFile, type ProjectSourceKind, type ProjectSourceLanguage, type ProjectSourceProgram, type ProjectSourceProgramOptions, type PublishedSiteProbeV1, RAW_CONTROL_REUSE_RULE_ID, RUNTIME_PROBE_PAYLOAD_V2_SCHEMA_URL, type RawControlReuseFinding, type ResolveSourceSymbolOriginOptions, type RuntimeAudit, SCAN_REPORT_SCHEMA_URL, SCAN_REPORT_V1_SCHEMA_URL, SCAN_REPORT_V2_SCHEMA_URL, STYLE_BRIDGE_ARBITRARY_VALUE_RULE_ID, type ScanApplicabilityStatus, type ScanConfidence, type ScanFindingSeverity, type ScanFindingV1, type ScanInputKind, type ScanInputV1, type ScanProjectOptions, type ScanReport, type ScanReportV1, type ScanReportV2, type ScanRepositoryV1, type ScanRouteSignalV2, type ScanRouteV1, type ShowcaseShortlistVerificationEntry, type ShowcaseShortlistVerificationReport, type SourceImportKind, type SourceImportReference, type SourceImportResolution, type SourceImportResolutionKind, type SourceInventory, type SourceInventoryOptions, type SourceInventorySkipReason, type SourceInventorySkippedPath, type SourceLocation, type SourceStringLiteral, type SourceStringLiteralContext, type SourceSymbolOrigin, type StyleBridgeDriftAudit, type StyleBridgeDriftFinding, VERIFICATION_COMMON_V2_SCHEMA_URL, VERIFICATION_SCHEMA_URLS, type VerificationDiagnosticCatalogEntry, type VerificationDiagnosticInput, type VerificationDiagnosticMetadata, type VerificationFinding, type VerificationGraphAnchor, type VerificationGraphAnchorConfidence, type VerificationRepairAction, type VerificationScore, type VerificationSeverity, WORKSPACE_HEALTH_REPORT_V2_SCHEMA_URL, anchorFindingsToGraph, auditBuiltDist, auditComponentReuse, auditProject, auditStyleBridgeDrift, buildProjectHealthRepairPlan, collectMissingPackManifestFiles, collectProjectSourceFiles, collectSourceImports, createAuthorityOrder, createAuthorityResolution, createContractAssertions, createEvidenceBundle, createEvidenceTier, createLoopReadiness, createProjectSourceProgram, createSourceInventory, createUnavailableScanReport, critiqueFile, critiqueSource, deriveVerificationDiagnostic, discoverProject, emptyRuntimeAudit, extractRouteHintsFromEssence, extractSourceStringLiterals, getProjectSourceFile, isPathInsideProject, isSupportedSourceExtension, listKnownInteractions, normalizeSourcePath, probePublishedSite, resolveGitHubScanInput, resolveGraphAnchorForFinding, resolveSourceImport, resolveSourceSymbolOrigin, scanProject, sourceKindFromPath, sourceLanguageFromPath, sourceLocationForNode, sourceScriptKindFromPath, verifyInteractionsInSource };