@isaacriehm/cairn-core 0.1.0

package/dist/sensors/index.d.ts

@@ -0,0 +1,13 @@
+export type { Attestation, AttestationDelivered, AttestationDeferred, DiffEntry, ProjectGlobs, SensorFinding, SensorInput, SensorLanguage, SensorResult, SensorSweepResult, StubCatalog, StubPattern, } from "./types.js";
+export { getDiff, diffHasGlobMatch, filterDiffByGlobs } from "./diff.js";
+export { loadStubCatalog, parseStubCatalog, loadSensorRegistry } from "./catalog.js";
+export type { SensorRegistry, SensorRegistryEntry } from "./catalog.js";
+export { detectStubMatches, runStubCatalog, detectLanguage } from "./stub-catalog.js";
+export type { StubMatch } from "./stub-catalog.js";
+export { extractAttestation, runAttestationCrossCheck, } from "./attestation.js";
+export { runRouteHandlerNonEmpty, runDtoNoFakeFields, } from "./structural.js";
+export { loadAcceptedDecisions, decisionsInScope, listMirrorFiles, runDecisionAssertions, } from "./decisions.js";
+export { formatRemediation } from "./remediation.js";
+export type { RemediationOptions } from "./remediation.js";
+export { runSensors } from "./runner.js";
+export type { RunSensorsArgs } from "./runner.js";

package/dist/sensors/index.js

@@ -0,0 +1,9 @@
+export { getDiff, diffHasGlobMatch, filterDiffByGlobs } from "./diff.js";
+export { loadStubCatalog, parseStubCatalog, loadSensorRegistry } from "./catalog.js";
+export { detectStubMatches, runStubCatalog, detectLanguage } from "./stub-catalog.js";
+export { extractAttestation, runAttestationCrossCheck, } from "./attestation.js";
+export { runRouteHandlerNonEmpty, runDtoNoFakeFields, } from "./structural.js";
+export { loadAcceptedDecisions, decisionsInScope, listMirrorFiles, runDecisionAssertions, } from "./decisions.js";
+export { formatRemediation } from "./remediation.js";
+export { runSensors } from "./runner.js";
+//# sourceMappingURL=index.js.map

package/dist/sensors/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/sensors/index.ts"],"names":[],"mappings":"AAeA,OAAO,EAAE,OAAO,EAAE,gBAAgB,EAAE,iBAAiB,EAAE,MAAM,WAAW,CAAC;AACzE,OAAO,EAAE,eAAe,EAAE,gBAAgB,EAAE,kBAAkB,EAAE,MAAM,cAAc,CAAC;AAErF,OAAO,EAAE,iBAAiB,EAAE,cAAc,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAC;AAEtF,OAAO,EACL,kBAAkB,EAClB,wBAAwB,GACzB,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EACL,uBAAuB,EACvB,kBAAkB,GACnB,MAAM,iBAAiB,CAAC;AACzB,OAAO,EACL,qBAAqB,EACrB,gBAAgB,EAChB,eAAe,EACf,qBAAqB,GACtB,MAAM,gBAAgB,CAAC;AACxB,OAAO,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAC;AAErD,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC"}

package/dist/sensors/remediation.d.ts

@@ -0,0 +1,20 @@
+/**
+ * Build a remediation prompt from sensor findings.
+ *
+ * Per OpenAI's pattern: failure messages are remediation prompts the agent
+ * consumes on retry. The orchestrator appends this body to the original
+ * prompt and re-dispatches the agent. The agent sees concrete failures with
+ * paths, lines, matched text, and remediation guidance.
+ */
+import type { SensorResult } from "./types.js";
+export interface RemediationOptions {
+    /** Number of the upcoming retry (1 = first retry). */
+    attempt: number;
+    /** Max attempts the orchestrator will allow. */
+    maxAttempts: number;
+}
+/**
+ * Format a remediation prompt body to be appended to the original task
+ * prompt. Empty string when there are no hard failures.
+ */
+export declare function formatRemediation(results: SensorResult[], opts: RemediationOptions): string;

package/dist/sensors/remediation.js

@@ -0,0 +1,65 @@
+/**
+ * Build a remediation prompt from sensor findings.
+ *
+ * Per OpenAI's pattern: failure messages are remediation prompts the agent
+ * consumes on retry. The orchestrator appends this body to the original
+ * prompt and re-dispatches the agent. The agent sees concrete failures with
+ * paths, lines, matched text, and remediation guidance.
+ */
+/**
+ * Format a remediation prompt body to be appended to the original task
+ * prompt. Empty string when there are no hard failures.
+ */
+export function formatRemediation(results, opts) {
+    const hardFails = results.filter((r) => !r.ok);
+    if (hardFails.length === 0)
+        return "";
+    const lines = [];
+    lines.push("## Sensor failures (from previous attempt)", "", `Your previous turn was rejected by ${hardFails.length} sensor(s). Read each finding below; the path/line/match are concrete. Fix every hard finding before your next turn — this is retry attempt ${opts.attempt} of ${opts.maxAttempts}.`, "", "Do NOT re-run the parts that already passed. Edit only what the failures point to.", "");
+    for (const result of hardFails) {
+        const hard = result.findings.filter((f) => f.severity === "hard");
+        if (hard.length === 0)
+            continue;
+        lines.push(`### Sensor \`${result.sensor_id}\` — ${hard.length} failure(s)`);
+        lines.push("");
+        for (const finding of hard) {
+            lines.push(formatFinding(finding));
+        }
+        lines.push("");
+    }
+    // Append soft findings as advisory context (not gating).
+    const softFindings = results.flatMap((r) => r.findings).filter((f) => f.severity === "soft");
+    if (softFindings.length > 0) {
+        lines.push("### Advisory (soft) findings");
+        lines.push("");
+        lines.push("These do not block your run but represent debt or surfaces a reviewer will inspect:");
+        lines.push("");
+        for (const f of softFindings)
+            lines.push(formatFinding(f));
+        lines.push("");
+    }
+    lines.push("## What to do", "", "1. Re-emit your `attestation:` YAML block at the END of your reply, with corrected `delivered`, `files_touched`, `todos_introduced`, and `stubs_introduced` values.", "2. Edit the files listed above to remove the stub patterns / fix the assertions / fill the empty handlers.", "3. Do NOT re-introduce TODO/FIXME/XXX/HACK markers, `throw new Error('not implemented')`, `as any` casts, or any pattern flagged in `.cairn/config/stub-patterns.yaml`.", "4. If any failure is genuinely impossible to satisfy (e.g. an assertion contradicts a current decision), emit a `blocked_by:` block in your final response instead of a partial diff.", "");
+    return lines.join("\n");
+}
+function formatFinding(f) {
+    const where = [];
+    if (f.path !== undefined && f.line !== undefined)
+        where.push(`${f.path}:${f.line}`);
+    else if (f.path !== undefined)
+        where.push(f.path);
+    if (f.pattern_id)
+        where.push(`pattern=${f.pattern_id}`);
+    if (f.decision_id)
+        where.push(`decision=${f.decision_id}`);
+    if (f.assertion_id)
+        where.push(`assertion=${f.assertion_id}`);
+    const head = where.length > 0 ? `[${where.join(" • ")}] ` : "";
+    let body = f.message;
+    if (f.matched_text)
+        body += `\n  matched: \`${truncate(f.matched_text, 160)}\``;
+    return `- ${head}${body}`;
+}
+function truncate(s, max) {
+    return s.length <= max ? s : `${s.slice(0, max)}…`;
+}
+//# sourceMappingURL=remediation.js.map

package/dist/sensors/remediation.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"remediation.js","sourceRoot":"","sources":["../../src/sensors/remediation.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAWH;;;GAGG;AACH,MAAM,UAAU,iBAAiB,CAC/B,OAAuB,EACvB,IAAwB;IAExB,MAAM,SAAS,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;IAC/C,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,CAAC;IAEtC,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,KAAK,CAAC,IAAI,CACR,4CAA4C,EAC5C,EAAE,EACF,sCAAsC,SAAS,CAAC,MAAM,+IAA+I,IAAI,CAAC,OAAO,OAAO,IAAI,CAAC,WAAW,GAAG,EAC3O,EAAE,EACF,oFAAoF,EACpF,EAAE,CACH,CAAC;IAEF,KAAK,MAAM,MAAM,IAAI,SAAS,EAAE,CAAC;QAC/B,MAAM,IAAI,GAAG,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,MAAM,CAAC,CAAC;QAClE,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;YAAE,SAAS;QAChC,KAAK,CAAC,IAAI,CAAC,gBAAgB,MAAM,CAAC,SAAS,QAAQ,IAAI,CAAC,MAAM,aAAa,CAAC,CAAC;QAC7E,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACf,KAAK,MAAM,OAAO,IAAI,IAAI,EAAE,CAAC;YAC3B,KAAK,CAAC,IAAI,CAAC,aAAa,CAAC,OAAO,CAAC,CAAC,CAAC;QACrC,CAAC;QACD,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACjB,CAAC;IAED,yDAAyD;IACzD,MAAM,YAAY,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,MAAM,CAAC,CAAC;IAC7F,IAAI,YAAY,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC5B,KAAK,CAAC,IAAI,CAAC,8BAA8B,CAAC,CAAC;QAC3C,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACf,KAAK,CAAC,IAAI,CAAC,qFAAqF,CAAC,CAAC;QAClG,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACf,KAAK,MAAM,CAAC,IAAI,YAAY;YAAE,KAAK,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,CAAC;QAC3D,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACjB,CAAC;IAED,KAAK,CAAC,IAAI,CACR,eAAe,EACf,EAAE,EACF,qKAAqK,EACrK,4GAA4G,EAC5G,yKAAyK,EACzK,uLAAuL,EACvL,EAAE,CACH,CAAC;IACF,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC1B,CAAC;AAED,SAAS,aAAa,CAAC,CAAgB;IACrC,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,IAAI,CAAC,CAAC,IAAI,KAAK,SAAS,IAAI,CAAC,CAAC,IAAI,KAAK,SAAS;QAAE,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;SAC/E,IAAI,CAAC,CAAC,IAAI,KAAK,SAAS;QAAE,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;IAClD,IAAI,CAAC,CAAC,UAAU;QAAE,KAAK,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,UAAU,EAAE,CAAC,CAAC;IACxD,IAAI,CAAC,CAAC,WAAW;QAAE,KAAK,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC;IAC3D,IAAI,CAAC,CAAC,YAAY;QAAE,KAAK,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,YAAY,EAAE,CAAC,CAAC;IAC9D,MAAM,IAAI,GAAG,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;IAC/D,IAAI,IAAI,GAAG,CAAC,CAAC,OAAO,CAAC;IACrB,IAAI,CAAC,CAAC,YAAY;QAAE,IAAI,IAAI,kBAAkB,QAAQ,CAAC,CAAC,CAAC,YAAY,EAAE,GAAG,CAAC,IAAI,CAAC;IAChF,OAAO,KAAK,IAAI,GAAG,IAAI,EAAE,CAAC;AAC5B,CAAC;AAED,SAAS,QAAQ,CAAC,CAAS,EAAE,GAAW;IACtC,OAAO,CAAC,CAAC,MAAM,IAAI,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,GAAG,CAAC;AACrD,CAAC"}

package/dist/sensors/runner.d.ts

@@ -0,0 +1,44 @@
+/**
+ * Sensor runner — orchestrator-facing entry point.
+ *
+ * Composes Layer A + Layer B + Layer D + decision-assertions into a single
+ * sweep. Returns the aggregated result + the remediation prompt body the
+ * orchestrator feeds back to the agent on retry.
+ *
+ * Phase 9 wires the implementer-side stack only. Layer C (reviewer subagent)
+ * is Phase 10; Layer E (high-stakes E2E) and U (UAT) are Phases 11+. Soft
+ * findings emitted here are intentionally surfaced for those later layers
+ * to consume.
+ */
+import type { Attestation, ProjectGlobs, SensorLanguage, SensorSweepResult } from "./types.js";
+export interface RunSensorsArgs {
+    /** Mirror checkout where the agent worked. */
+    mirrorPath: string;
+    /** SHA pin captured at workspace prep. */
+    shaPin: string;
+    /** Final assistant text, used to extract the attestation block. */
+    finalAssistantText?: string;
+    /** Languages active for this profile (filters Layer A patterns). */
+    languages: SensorLanguage[];
+    /** Project-block globs from workflow.md. */
+    projectGlobs: ProjectGlobs;
+    /** Run id used in log lines. */
+    runId: string;
+    /** Number of this attempt (1 = first run, 2 = first retry). */
+    attempt: number;
+    /** Max attempts the orchestrator will allow. */
+    maxAttempts: number;
+    /**
+     * Optional pre-extracted attestation. Useful for tests / smokes that
+     * inject the attestation directly without going through the assistant
+     * stream. When supplied, finalAssistantText is ignored for extraction.
+     */
+    attestation?: Attestation;
+}
+/**
+ * Run all sensors for a finished implementer run. Returns:
+ *   - per-sensor results (with `ok` + findings)
+ *   - aggregate `ok` (false if any hard failure)
+ *   - remediation prompt body for the next retry (empty string on success)
+ */
+export declare function runSensors(args: RunSensorsArgs): Promise<SensorSweepResult>;

package/dist/sensors/runner.js

@@ -0,0 +1,95 @@
+/**
+ * Sensor runner — orchestrator-facing entry point.
+ *
+ * Composes Layer A + Layer B + Layer D + decision-assertions into a single
+ * sweep. Returns the aggregated result + the remediation prompt body the
+ * orchestrator feeds back to the agent on retry.
+ *
+ * Phase 9 wires the implementer-side stack only. Layer C (reviewer subagent)
+ * is Phase 10; Layer E (high-stakes E2E) and U (UAT) are Phases 11+. Soft
+ * findings emitted here are intentionally surfaced for those later layers
+ * to consume.
+ */
+import { logger } from "../logger.js";
+import { decisionsInScope, loadAcceptedDecisions, runDecisionAssertions } from "./decisions.js";
+import { extractAttestation, runAttestationCrossCheck } from "./attestation.js";
+import { getDiff } from "./diff.js";
+import { loadStubCatalog } from "./catalog.js";
+import { formatRemediation } from "./remediation.js";
+import { runStubCatalog } from "./stub-catalog.js";
+import { runDtoNoFakeFields, runRouteHandlerNonEmpty } from "./structural.js";
+const log = logger("sensors.runner");
+/**
+ * Run all sensors for a finished implementer run. Returns:
+ *   - per-sensor results (with `ok` + findings)
+ *   - aggregate `ok` (false if any hard failure)
+ *   - remediation prompt body for the next retry (empty string on success)
+ */
+export async function runSensors(args) {
+    const startedAt = Date.now();
+    const diff = await getDiff({ mirrorPath: args.mirrorPath, shaPin: args.shaPin });
+    const stubCatalog = loadStubCatalog(args.mirrorPath);
+    const acceptedDecisions = loadAcceptedDecisions(args.mirrorPath);
+    const inScope = decisionsInScope(acceptedDecisions, diff);
+    const attestation = args.attestation ?? extractAttestation(args.finalAssistantText ?? "");
+    const results = [];
+    // Layer A — stub-pattern catalog.
+    results.push(runStubCatalog({
+        diff,
+        catalog: stubCatalog,
+        languages: args.languages,
+    }));
+    // Layer B — attestation cross-check.
+    results.push(runAttestationCrossCheck({
+        attestation,
+        diff,
+        stubCatalog,
+        ignoreGlobs: [".cairn/runs/active/**", ".cairn/inbox/processed/**"],
+    }));
+    // Layer D — generic structural sensors.
+    results.push(runRouteHandlerNonEmpty({
+        diff,
+        globs: args.projectGlobs.route_handler_globs,
+    }));
+    results.push(runDtoNoFakeFields({
+        diff,
+        globs: args.projectGlobs.dto_globs,
+    }));
+    // Decision-assertions.
+    results.push(runDecisionAssertions({
+        mirrorPath: args.mirrorPath,
+        diff,
+        decisions: inScope,
+    }));
+    const hard_failures = results.filter((r) => !r.ok).length;
+    const soft_findings = results.reduce((n, r) => n + r.findings.filter((f) => f.severity === "soft").length, 0);
+    const ok = hard_failures === 0;
+    const remediation_prompt = ok
+        ? ""
+        : formatRemediation(results, {
+            attempt: args.attempt,
+            maxAttempts: args.maxAttempts,
+        });
+    log.info({
+        run_id: args.runId,
+        attempt: args.attempt,
+        ok,
+        hard_failures,
+        soft_findings,
+        sensors: results.map((r) => ({
+            id: r.sensor_id,
+            ok: r.ok,
+            findings: r.findings.length,
+            skipped: r.skipped?.reason,
+        })),
+    }, "sensor sweep complete");
+    return {
+        ok,
+        hard_failures,
+        soft_findings,
+        results,
+        remediation_prompt,
+        duration_ms: Date.now() - startedAt,
+    };
+}
+//# sourceMappingURL=runner.js.map

package/dist/sensors/runner.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"runner.js","sourceRoot":"","sources":["../../src/sensors/runner.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,OAAO,EAAE,MAAM,EAAE,MAAM,cAAc,CAAC;AACtC,OAAO,EAAE,gBAAgB,EAAE,qBAAqB,EAAE,qBAAqB,EAAE,MAAM,gBAAgB,CAAC;AAChG,OAAO,EAAE,kBAAkB,EAAE,wBAAwB,EAAE,MAAM,kBAAkB,CAAC;AAChF,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,EAAE,eAAe,EAAE,MAAM,cAAc,CAAC;AAC/C,OAAO,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAC;AACrD,OAAO,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAC;AACnD,OAAO,EAAE,kBAAkB,EAAE,uBAAuB,EAAE,MAAM,iBAAiB,CAAC;AAS9E,MAAM,GAAG,GAAG,MAAM,CAAC,gBAAgB,CAAC,CAAC;AA2BrC;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,UAAU,CAAC,IAAoB;IACnD,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IAC7B,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,EAAE,UAAU,EAAE,IAAI,CAAC,UAAU,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC;IAEjF,MAAM,WAAW,GAAG,eAAe,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;IACrD,MAAM,iBAAiB,GAAG,qBAAqB,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;IACjE,MAAM,OAAO,GAAG,gBAAgB,CAAC,iBAAiB,EAAE,IAAI,CAAC,CAAC;IAE1D,MAAM,WAAW,GACf,IAAI,CAAC,WAAW,IAAI,kBAAkB,CAAC,IAAI,CAAC,kBAAkB,IAAI,EAAE,CAAC,CAAC;IAExE,MAAM,OAAO,GAAmB,EAAE,CAAC;IAEnC,kCAAkC;IAClC,OAAO,CAAC,IAAI,CACV,cAAc,CAAC;QACb,IAAI;QACJ,OAAO,EAAE,WAAW;QACpB,SAAS,EAAE,IAAI,CAAC,SAAS;KAC1B,CAAC,CACH,CAAC;IAEF,qCAAqC;IACrC,OAAO,CAAC,IAAI,CACV,wBAAwB,CAAC;QACvB,WAAW;QACX,IAAI;QACJ,WAAW;QACX,WAAW,EAAE,CAAC,uBAAuB,EAAE,2BAA2B,CAAC;KACpE,CAAC,CACH,CAAC;IAEF,wCAAwC;IACxC,OAAO,CAAC,IAAI,CACV,uBAAuB,CAAC;QACtB,IAAI;QACJ,KAAK,EAAE,IAAI,CAAC,YAAY,CAAC,mBAAmB;KAC7C,CAAC,CACH,CAAC;IACF,OAAO,CAAC,IAAI,CACV,kBAAkB,CAAC;QACjB,IAAI;QACJ,KAAK,EAAE,IAAI,CAAC,YAAY,CAAC,SAAS;KACnC,CAAC,CACH,CAAC;IAEF,uBAAuB;IACvB,OAAO,CAAC,IAAI,CACV,qBAAqB,CAAC;QACpB,UAAU,EAAE,IAAI,CAAC,UAAU;QAC3B,IAAI;QACJ,SAAS,EAAE,OAAO;KACnB,CAAC,CACH,CAAC;IAEF,MAAM,aAAa,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,MAAM,CAAC;IAC1D,MAAM,aAAa,GAAG,OAAO,CAAC,MAAM,CAClC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,MAAM,CAAC,CAAC,MAAM,EACpE,CAAC,CACF,CAAC;IACF,MAAM,EAAE,GAAG,aAAa,KAAK,CAAC,CAAC;IAC/B,MAAM,kBAAkB,GAAG,EAAE;QAC3B,CAAC,CAAC,EAAE;QACJ,CAAC,CAAC,iBAAiB,CAAC,OAAO,EAAE;YACzB,OAAO,EAAE,IAAI,CAAC,OAAO;YACrB,WAAW,EAAE,IAAI,CAAC,WAAW;SAC9B,CAAC,CAAC;IAEP,GAAG,CAAC,IAAI,CACN;QACE,MAAM,EAAE,IAAI,CAAC,KAAK;QAClB,OAAO,EAAE,IAAI,CAAC,OAAO;QACrB,EAAE;QACF,aAAa;QACb,aAAa;QACb,OAAO,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YAC3B,EAAE,EAAE,CAAC,CAAC,SAAS;YACf,EAAE,EAAE,CAAC,CAAC,EAAE;YACR,QAAQ,EAAE,CAAC,CAAC,QAAQ,CAAC,MAAM;YAC3B,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,MAAM;SAC3B,CAAC,CAAC;KACJ,EACD,uBAAuB,CACxB,CAAC;IAEF,OAAO;QACL,EAAE;QACF,aAAa;QACb,aAAa;QACb,OAAO;QACP,kBAAkB;QAClB,WAAW,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS;KACpC,CAAC;AACJ,CAAC"}

package/dist/sensors/structural.d.ts

@@ -0,0 +1,30 @@
+/**
+ * Layer D — generic project-agnostic structural sensors.
+ *
+ * Triggered when the diff touches files matching the project's glob keys.
+ * Each sensor inspects the POST-change content of those files (not just
+ * the diff) — Layer D is "do these load-bearing files follow contract",
+ * which is stricter than Layer A's "did this run add new debt".
+ *
+ *   route-handler-non-empty — every method in a route/controller class has a
+ *                             non-trivial body. Catches "added handler that
+ *                             does nothing" disguised as completion.
+ *   dto-no-fake-fields      — @IsOptional() fields with no other validator
+ *                             are fake-thoroughness; they look like work and
+ *                             do nothing.
+ *
+ * Both are pattern-based; profiles plug stack-specific globs. The regex is
+ * intentionally conservative (false-negatives over false-positives) — sensors
+ * that fail-loud-on-noise get disabled which defeats the purpose.
+ */
+import type { DiffEntry, SensorResult } from "./types.js";
+/** Run route-handler-non-empty against changed files matching globs. */
+export declare function runRouteHandlerNonEmpty(args: {
+    diff: DiffEntry[];
+    globs: string[] | undefined;
+}): SensorResult;
+/** Run dto-no-fake-fields against changed files matching globs. */
+export declare function runDtoNoFakeFields(args: {
+    diff: DiffEntry[];
+    globs: string[] | undefined;
+}): SensorResult;

package/dist/sensors/structural.js

@@ -0,0 +1,204 @@
+/**
+ * Layer D — generic project-agnostic structural sensors.
+ *
+ * Triggered when the diff touches files matching the project's glob keys.
+ * Each sensor inspects the POST-change content of those files (not just
+ * the diff) — Layer D is "do these load-bearing files follow contract",
+ * which is stricter than Layer A's "did this run add new debt".
+ *
+ *   route-handler-non-empty — every method in a route/controller class has a
+ *                             non-trivial body. Catches "added handler that
+ *                             does nothing" disguised as completion.
+ *   dto-no-fake-fields      — @IsOptional() fields with no other validator
+ *                             are fake-thoroughness; they look like work and
+ *                             do nothing.
+ *
+ * Both are pattern-based; profiles plug stack-specific globs. The regex is
+ * intentionally conservative (false-negatives over false-positives) — sensors
+ * that fail-loud-on-noise get disabled which defeats the purpose.
+ */
+import { matchAnyGlob } from "../ground/glob.js";
+const ROUTE_SENSOR_ID = "route-handler-non-empty";
+const DTO_SENSOR_ID = "dto-no-fake-fields";
+/** Method body that's effectively a no-op — language-agnostic regex. */
+const EMPTY_BODY_PATTERNS = [
+    // TypeScript/JavaScript class method with empty body or null/undefined return.
+    {
+        regex: /^\s*(?:public|private|protected|async)?\s*(?:async\s+)?(\w+)\s*\([^)]*\)\s*(?::\s*[^{]+)?\{\s*(?:return\s*(?:null|undefined)?\s*;?)?\s*\}/gm,
+        reason: "empty / return-null / return-undefined body",
+    },
+    // throw new Error('not implemented').
+    {
+        regex: /\b(\w+)\s*\([^)]*\)\s*(?::\s*[^{]+)?\{\s*throw\s+new\s+Error\s*\(\s*['"`][^'"`]*not[\s_]?implemented/gi,
+        reason: "throws not-implemented",
+    },
+    // Python: `def foo(...): pass` with nothing else.
+    {
+        regex: /def\s+(\w+)\s*\([^)]*\)\s*(?:->[^:]+)?:\s*\n\s*pass\s*\n/g,
+        reason: "Python def with `pass` body",
+    },
+    // Python: `def foo(...): return None`.
+    {
+        regex: /def\s+(\w+)\s*\([^)]*\)\s*(?:->[^:]+)?:\s*\n\s*return(?:\s+None)?\s*\n/g,
+        reason: "Python def returning None",
+    },
+];
+/** Detect a class context for TypeScript/JavaScript controllers. */
+const TS_CONTROLLER_HINT = /\bclass\s+\w+(?:Controller|Resource|Resolver|Handler)\b|@(?:Controller|Resource|Resolver|Handler)\b|extends\s+(?:Controller|Resource)\b/;
+/** Detect Python route registration. */
+const PY_ROUTE_HINT = /@(?:app|router|blueprint|bp)\.(?:get|post|put|patch|delete|route)\b|@route\b|class\s+\w+(?:View|Resource)\b/;
+/** Run route-handler-non-empty against changed files matching globs. */
+export function runRouteHandlerNonEmpty(args) {
+    const startedAt = Date.now();
+    const findings = [];
+    if (!args.globs || args.globs.length === 0) {
+        return {
+            sensor_id: ROUTE_SENSOR_ID,
+            ok: true,
+            duration_ms: Date.now() - startedAt,
+            findings,
+            skipped: { reason: "route_handler_globs not configured for this project" },
+        };
+    }
+    const inScope = args.diff.filter((d) => d.status !== "deleted" && matchAnyGlob(d.path, args.globs ?? []));
+    if (inScope.length === 0) {
+        return {
+            sensor_id: ROUTE_SENSOR_ID,
+            ok: true,
+            duration_ms: Date.now() - startedAt,
+            findings,
+            skipped: { reason: "no diff entries match route_handler_globs" },
+        };
+    }
+    for (const entry of inScope) {
+        const text = entry.afterContent ?? "";
+        if (text.length === 0)
+            continue;
+        if (!isRouteHandlerFile(entry.path, text))
+            continue;
+        for (const { regex, reason } of EMPTY_BODY_PATTERNS) {
+            const re = new RegExp(regex.source, regex.flags);
+            let m;
+            while ((m = re.exec(text)) !== null) {
+                const methodName = m[1] ?? "<anon>";
+                if (METHOD_ALLOWLIST.has(methodName))
+                    continue;
+                const line = lineOf(text, m.index);
+                findings.push({
+                    sensor_id: ROUTE_SENSOR_ID,
+                    path: entry.path,
+                    line,
+                    matched_text: m[0].slice(0, 200),
+                    message: `${entry.path}:${line} route-handler method \`${methodName}\` — ${reason}`,
+                    severity: "hard",
+                });
+                if (re.lastIndex === m.index)
+                    re.lastIndex += 1;
+            }
+        }
+    }
+    return {
+        sensor_id: ROUTE_SENSOR_ID,
+        ok: findings.length === 0,
+        duration_ms: Date.now() - startedAt,
+        findings,
+    };
+}
+/** Run dto-no-fake-fields against changed files matching globs. */
+export function runDtoNoFakeFields(args) {
+    const startedAt = Date.now();
+    const findings = [];
+    if (!args.globs || args.globs.length === 0) {
+        return {
+            sensor_id: DTO_SENSOR_ID,
+            ok: true,
+            duration_ms: Date.now() - startedAt,
+            findings,
+            skipped: { reason: "dto_globs not configured for this project" },
+        };
+    }
+    const inScope = args.diff.filter((d) => d.status !== "deleted" && matchAnyGlob(d.path, args.globs ?? []));
+    if (inScope.length === 0) {
+        return {
+            sensor_id: DTO_SENSOR_ID,
+            ok: true,
+            duration_ms: Date.now() - startedAt,
+            findings,
+            skipped: { reason: "no diff entries match dto_globs" },
+        };
+    }
+    for (const entry of inScope) {
+        const text = entry.afterContent ?? "";
+        if (text.length === 0)
+            continue;
+        findings.push(...findFakeOptionalFields(entry.path, text));
+    }
+    return {
+        sensor_id: DTO_SENSOR_ID,
+        ok: findings.every((f) => f.severity !== "hard"),
+        duration_ms: Date.now() - startedAt,
+        findings,
+    };
+}
+/**
+ * `@IsOptional()` followed by a property declaration with NO additional
+ * validator decorator on the same or preceding line(s). Capture group 1 is
+ * the field name.
+ */
+function findFakeOptionalFields(path, text) {
+    const findings = [];
+    // Match `@IsOptional()\n  fieldName?: Type;` with no other validator.
+    const re = /@IsOptional\s*\(\s*\)\s*\n((?:\s*@[A-Z]\w+\s*\([^)]*\)\s*\n)*)\s*(\w+)\s*\??\s*:\s*[^;\n]+;?/g;
+    let m;
+    while ((m = re.exec(text)) !== null) {
+        const otherDecorators = m[1] ?? "";
+        const field = m[2] ?? "";
+        // If only `@IsOptional()` and nothing else, that's fake-thoroughness.
+        if (otherDecorators.trim().length === 0) {
+            const line = lineOf(text, m.index);
+            findings.push({
+                sensor_id: DTO_SENSOR_ID,
+                path,
+                line,
+                matched_text: m[0].slice(0, 200),
+                message: `${path}:${line} field \`${field}\` decorated only with @IsOptional() — add a validator (@IsString, @IsNumber, etc.) or remove the decorator`,
+                severity: "soft",
+            });
+        }
+        if (re.lastIndex === m.index)
+            re.lastIndex += 1;
+    }
+    return findings;
+}
+/** Methods we don't want to flag: constructors, framework hooks, etc. */
+const METHOD_ALLOWLIST = new Set([
+    "constructor",
+    "ngOnInit",
+    "ngOnDestroy",
+    "onModuleInit",
+    "onModuleDestroy",
+    "onApplicationBootstrap",
+    "onApplicationShutdown",
+    "render",
+]);
+/** Heuristic: file LOOKS like a route/controller before regex-scanning bodies. */
+function isRouteHandlerFile(path, text) {
+    if (TS_CONTROLLER_HINT.test(text))
+        return true;
+    if (PY_ROUTE_HINT.test(text))
+        return true;
+    // Conservative fallback — if the path matches the glob but the file doesn't
+    // declare a class or route decorator, skip rather than false-positive.
+    void path;
+    return false;
+}
+/** 1-based line number from a character offset. */
+function lineOf(text, charIndex) {
+    let line = 1;
+    for (let i = 0; i < charIndex && i < text.length; i++) {
+        if (text.charCodeAt(i) === 10)
+            line += 1;
+    }
+    return line;
+}
+//# sourceMappingURL=structural.js.map

package/dist/sensors/structural.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"structural.js","sourceRoot":"","sources":["../../src/sensors/structural.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAEH,OAAO,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AAGjD,MAAM,eAAe,GAAG,yBAAyB,CAAC;AAClD,MAAM,aAAa,GAAG,oBAAoB,CAAC;AAE3C,wEAAwE;AACxE,MAAM,mBAAmB,GAAwC;IAC/D,+EAA+E;IAC/E;QACE,KAAK,EAAE,6IAA6I;QACpJ,MAAM,EAAE,6CAA6C;KACtD;IACD,sCAAsC;IACtC;QACE,KAAK,EAAE,wGAAwG;QAC/G,MAAM,EAAE,wBAAwB;KACjC;IACD,kDAAkD;IAClD;QACE,KAAK,EAAE,2DAA2D;QAClE,MAAM,EAAE,6BAA6B;KACtC;IACD,uCAAuC;IACvC;QACE,KAAK,EAAE,yEAAyE;QAChF,MAAM,EAAE,2BAA2B;KACpC;CACF,CAAC;AAEF,oEAAoE;AACpE,MAAM,kBAAkB,GAAG,yIAAyI,CAAC;AAErK,wCAAwC;AACxC,MAAM,aAAa,GAAG,6GAA6G,CAAC;AAEpI,wEAAwE;AACxE,MAAM,UAAU,uBAAuB,CAAC,IAGvC;IACC,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IAC7B,MAAM,QAAQ,GAAoB,EAAE,CAAC;IACrC,IAAI,CAAC,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC3C,OAAO;YACL,SAAS,EAAE,eAAe;YAC1B,EAAE,EAAE,IAAI;YACR,WAAW,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS;YACnC,QAAQ;YACR,OAAO,EAAE,EAAE,MAAM,EAAE,qDAAqD,EAAE;SAC3E,CAAC;IACJ,CAAC;IACD,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,CAC9B,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,SAAS,IAAI,YAAY,CAAC,CAAC,CAAC,IAAI,EAAE,IAAI,CAAC,KAAK,IAAI,EAAE,CAAC,CACxE,CAAC;IACF,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACzB,OAAO;YACL,SAAS,EAAE,eAAe;YAC1B,EAAE,EAAE,IAAI;YACR,WAAW,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS;YACnC,QAAQ;YACR,OAAO,EAAE,EAAE,MAAM,EAAE,2CAA2C,EAAE;SACjE,CAAC;IACJ,CAAC;IACD,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;QAC5B,MAAM,IAAI,GAAG,KAAK,CAAC,YAAY,IAAI,EAAE,CAAC;QACtC,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;YAAE,SAAS;QAChC,IAAI,CAAC,kBAAkB,CAAC,KAAK,CAAC,IAAI,EAAE,IAAI,CAAC;YAAE,SAAS;QACpD,KAAK,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,mBAAmB,EAAE,CAAC;YACpD,MAAM,EAAE,GAAG,IAAI,MAAM,CAAC,KAAK,CAAC,MAAM,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC;YACjD,IAAI,CAAyB,CAAC;YAC9B,OAAO,CAAC,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;gBACpC,MAAM,UAAU,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,QAAQ,CAAC;gBACpC,IAAI,gBAAgB,CAAC,GAAG,CAAC,UAAU,CAAC;oBAAE,SAAS;gBAC/C,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC;gBACnC,QAAQ,CAAC,IAAI,CAAC;oBACZ,SAAS,EAAE,eAAe;oBAC1B,IAAI,EAAE,KAAK,CAAC,IAAI;oBAChB,IAAI;oBACJ,YAAY,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC;oBAChC,OAAO,EAAE,GAAG,KAAK,CAAC,IAAI,IAAI,IAAI,2BAA2B,UAAU,QAAQ,MAAM,EAAE;oBACnF,QAAQ,EAAE,MAAM;iBACjB,CAAC,CAAC;gBACH,IAAI,EAAE,CAAC,SAAS,KAAK,CAAC,CAAC,KAAK;oBAAE,EAAE,CAAC,SAAS,IAAI,CAAC,CAAC;YAClD,CAAC;QACH,CAAC;IACH,CAAC;IACD,OAAO;QACL,SAAS,EAAE,eAAe;QAC1B,EAAE,EAAE,QAAQ,CAAC,MAAM,KAAK,CAAC;QACzB,WAAW,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS;QACnC,QAAQ;KACT,CAAC;AACJ,CAAC;AAED,mEAAmE;AACnE,MAAM,UAAU,kBAAkB,CAAC,IAGlC;IACC,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IAC7B,MAAM,QAAQ,GAAoB,EAAE,CAAC;IACrC,IAAI,CAAC,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC3C,OAAO;YACL,SAAS,EAAE,aAAa;YACxB,EAAE,EAAE,IAAI;YACR,WAAW,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS;YACnC,QAAQ;YACR,OAAO,EAAE,EAAE,MAAM,EAAE,2CAA2C,EAAE;SACjE,CAAC;IACJ,CAAC;IACD,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,CAC9B,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,SAAS,IAAI,YAAY,CAAC,CAAC,CAAC,IAAI,EAAE,IAAI,CAAC,KAAK,IAAI,EAAE,CAAC,CACxE,CAAC;IACF,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACzB,OAAO;YACL,SAAS,EAAE,aAAa;YACxB,EAAE,EAAE,IAAI;YACR,WAAW,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS;YACnC,QAAQ;YACR,OAAO,EAAE,EAAE,MAAM,EAAE,iCAAiC,EAAE;SACvD,CAAC;IACJ,CAAC;IACD,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;QAC5B,MAAM,IAAI,GAAG,KAAK,CAAC,YAAY,IAAI,EAAE,CAAC;QACtC,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;YAAE,SAAS;QAChC,QAAQ,CAAC,IAAI,CAAC,GAAG,sBAAsB,CAAC,KAAK,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC;IAC7D,CAAC;IACD,OAAO;QACL,SAAS,EAAE,aAAa;QACxB,EAAE,EAAE,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,MAAM,CAAC;QAChD,WAAW,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS;QACnC,QAAQ;KACT,CAAC;AACJ,CAAC;AAED;;;;GAIG;AACH,SAAS,sBAAsB,CAAC,IAAY,EAAE,IAAY;IACxD,MAAM,QAAQ,GAAoB,EAAE,CAAC;IACrC,sEAAsE;IACtE,MAAM,EAAE,GAAG,+FAA+F,CAAC;IAC3G,IAAI,CAAyB,CAAC;IAC9B,OAAO,CAAC,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;QACpC,MAAM,eAAe,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;QACnC,MAAM,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;QACzB,sEAAsE;QACtE,IAAI,eAAe,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACxC,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC;YACnC,QAAQ,CAAC,IAAI,CAAC;gBACZ,SAAS,EAAE,aAAa;gBACxB,IAAI;gBACJ,IAAI;gBACJ,YAAY,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC;gBAChC,OAAO,EAAE,GAAG,IAAI,IAAI,IAAI,YAAY,KAAK,6GAA6G;gBACtJ,QAAQ,EAAE,MAAM;aACjB,CAAC,CAAC;QACL,CAAC;QACD,IAAI,EAAE,CAAC,SAAS,KAAK,CAAC,CAAC,KAAK;YAAE,EAAE,CAAC,SAAS,IAAI,CAAC,CAAC;IAClD,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,yEAAyE;AACzE,MAAM,gBAAgB,GAAG,IAAI,GAAG,CAAS;IACvC,aAAa;IACb,UAAU;IACV,aAAa;IACb,cAAc;IACd,iBAAiB;IACjB,wBAAwB;IACxB,uBAAuB;IACvB,QAAQ;CACT,CAAC,CAAC;AAEH,kFAAkF;AAClF,SAAS,kBAAkB,CAAC,IAAY,EAAE,IAAY;IACpD,IAAI,kBAAkB,CAAC,IAAI,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IAC/C,IAAI,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IAC1C,4EAA4E;IAC5E,uEAAuE;IACvE,KAAK,IAAI,CAAC;IACV,OAAO,KAAK,CAAC;AACf,CAAC;AAED,mDAAmD;AACnD,SAAS,MAAM,CAAC,IAAY,EAAE,SAAiB;IAC7C,IAAI,IAAI,GAAG,CAAC,CAAC;IACb,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,SAAS,IAAI,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACtD,IAAI,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,KAAK,EAAE;YAAE,IAAI,IAAI,CAAC,CAAC;IAC3C,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC"}

package/dist/sensors/stub-catalog.d.ts

@@ -0,0 +1,39 @@
+/**
+ * Layer A — mechanical stub-pattern catalog.
+ *
+ * Run regex patterns from `.cairn/config/stub-patterns.yaml` against every
+ * file changed in the diff. Hard-severity match fails the run; soft-severity
+ * contributes to attestation cross-check (stubs_introduced count).
+ *
+ * Per PRIMER §10 Layer A. Catalog grows additively via /oops dialog (L25).
+ */
+import type { DiffEntry, SensorLanguage, SensorResult, StubCatalog } from "./types.js";
+/** Detect language from extension. Returns undefined for binaries / unknown. */
+export declare function detectLanguage(path: string): SensorLanguage | undefined;
+/** A single stub-pattern regex match found inside the diff. */
+export interface StubMatch {
+    sensor_id: string;
+    pattern_id: string;
+    description: string;
+    severity: "hard" | "soft";
+    path: string;
+    line: number;
+    matched_text: string;
+}
+/**
+ * Walk the diff and emit a match for every regex hit on lines that were
+ * added or are part of a new file. Modified files: only count hits on lines
+ * not present at the SHA pin (i.e. genuinely-new debt).
+ */
+export declare function detectStubMatches(args: {
+    diff: DiffEntry[];
+    catalog: StubCatalog;
+    /** Filter patterns to these languages. `undefined` = all languages. */
+    languages: readonly SensorLanguage[] | undefined;
+}): StubMatch[];
+/** Run the Layer A sensor against a diff. */
+export declare function runStubCatalog(args: {
+    diff: DiffEntry[];
+    catalog: StubCatalog;
+    languages: readonly SensorLanguage[];
+}): SensorResult;