@massu/core 1.2.0 → 1.3.0

package/dist/hooks/auto-learning-pipeline.js

@@ -226,6 +226,7 @@ var PythonConfigSchema = z.object({
 var PathsConfigSchema = z.object({
   source: z.string().default("src"),
   aliases: z.record(z.string(), z.string()).default({ "@": "src" }),
+  monorepo_roots: z.array(z.string()).optional(),
   routers: z.string().optional(),
   routerRoot: z.string().optional(),
   pages: z.string().optional(),
@@ -384,13 +385,16 @@ Hint: run \`massu config refresh\` to regenerate a valid config or fix the liste
       name: parsed.project.name,
       root: projectRoot
     },
+    // Spread `fw` first so zod-`.passthrough()` extras (e.g., `framework.swift`,
+    // `framework.python`) survive into the consumer-visible Config. Then override
+    // the v2-backcompat-mirrored router/orm/ui values. Without the spread, the
+    // variant-resolution `pickVariant` (install-commands.ts) cannot see the
+    // top-level passthrough language blocks.
     framework: {
-      type: fw.type,
+      ...fw,
       router,
       orm,
-      ui,
-      primary: fw.primary,
-      languages: fw.languages
+      ui
     },
     paths: parsed.paths,
     toolPrefix: parsed.toolPrefix,

package/dist/hooks/classify-failure.js

@@ -226,6 +226,7 @@ var PythonConfigSchema = z.object({
 var PathsConfigSchema = z.object({
   source: z.string().default("src"),
   aliases: z.record(z.string(), z.string()).default({ "@": "src" }),
+  monorepo_roots: z.array(z.string()).optional(),
   routers: z.string().optional(),
   routerRoot: z.string().optional(),
   pages: z.string().optional(),
@@ -384,13 +385,16 @@ Hint: run \`massu config refresh\` to regenerate a valid config or fix the liste
       name: parsed.project.name,
       root: projectRoot
     },
+    // Spread `fw` first so zod-`.passthrough()` extras (e.g., `framework.swift`,
+    // `framework.python`) survive into the consumer-visible Config. Then override
+    // the v2-backcompat-mirrored router/orm/ui values. Without the spread, the
+    // variant-resolution `pickVariant` (install-commands.ts) cannot see the
+    // top-level passthrough language blocks.
     framework: {
-      type: fw.type,
+      ...fw,
       router,
       orm,
-      ui,
-      primary: fw.primary,
-      languages: fw.languages
+      ui
     },
     paths: parsed.paths,
     toolPrefix: parsed.toolPrefix,

package/dist/hooks/cost-tracker.js

@@ -226,6 +226,7 @@ var PythonConfigSchema = z.object({
 var PathsConfigSchema = z.object({
   source: z.string().default("src"),
   aliases: z.record(z.string(), z.string()).default({ "@": "src" }),
+  monorepo_roots: z.array(z.string()).optional(),
   routers: z.string().optional(),
   routerRoot: z.string().optional(),
   pages: z.string().optional(),
@@ -384,13 +385,16 @@ Hint: run \`massu config refresh\` to regenerate a valid config or fix the liste
       name: parsed.project.name,
       root: projectRoot
     },
+    // Spread `fw` first so zod-`.passthrough()` extras (e.g., `framework.swift`,
+    // `framework.python`) survive into the consumer-visible Config. Then override
+    // the v2-backcompat-mirrored router/orm/ui values. Without the spread, the
+    // variant-resolution `pickVariant` (install-commands.ts) cannot see the
+    // top-level passthrough language blocks.
     framework: {
-      type: fw.type,
+      ...fw,
       router,
       orm,
-      ui,
-      primary: fw.primary,
-      languages: fw.languages
+      ui
     },
     paths: parsed.paths,
     toolPrefix: parsed.toolPrefix,

package/dist/hooks/fix-detector.js

@@ -226,6 +226,7 @@ var PythonConfigSchema = z.object({
 var PathsConfigSchema = z.object({
   source: z.string().default("src"),
   aliases: z.record(z.string(), z.string()).default({ "@": "src" }),
+  monorepo_roots: z.array(z.string()).optional(),
   routers: z.string().optional(),
   routerRoot: z.string().optional(),
   pages: z.string().optional(),
@@ -384,13 +385,16 @@ Hint: run \`massu config refresh\` to regenerate a valid config or fix the liste
       name: parsed.project.name,
       root: projectRoot
     },
+    // Spread `fw` first so zod-`.passthrough()` extras (e.g., `framework.swift`,
+    // `framework.python`) survive into the consumer-visible Config. Then override
+    // the v2-backcompat-mirrored router/orm/ui values. Without the spread, the
+    // variant-resolution `pickVariant` (install-commands.ts) cannot see the
+    // top-level passthrough language blocks.
     framework: {
-      type: fw.type,
+      ...fw,
       router,
       orm,
-      ui,
-      primary: fw.primary,
-      languages: fw.languages
+      ui
     },
     paths: parsed.paths,
     toolPrefix: parsed.toolPrefix,

package/dist/hooks/incident-pipeline.js

@@ -225,6 +225,7 @@ var PythonConfigSchema = z.object({
 var PathsConfigSchema = z.object({
   source: z.string().default("src"),
   aliases: z.record(z.string(), z.string()).default({ "@": "src" }),
+  monorepo_roots: z.array(z.string()).optional(),
   routers: z.string().optional(),
   routerRoot: z.string().optional(),
   pages: z.string().optional(),
@@ -383,13 +384,16 @@ Hint: run \`massu config refresh\` to regenerate a valid config or fix the liste
       name: parsed.project.name,
       root: projectRoot
     },
+    // Spread `fw` first so zod-`.passthrough()` extras (e.g., `framework.swift`,
+    // `framework.python`) survive into the consumer-visible Config. Then override
+    // the v2-backcompat-mirrored router/orm/ui values. Without the spread, the
+    // variant-resolution `pickVariant` (install-commands.ts) cannot see the
+    // top-level passthrough language blocks.
     framework: {
-      type: fw.type,
+      ...fw,
       router,
       orm,
-      ui,
-      primary: fw.primary,
-      languages: fw.languages
+      ui
     },
     paths: parsed.paths,
     toolPrefix: parsed.toolPrefix,

package/dist/hooks/post-edit-context.js

@@ -224,6 +224,7 @@ var PythonConfigSchema = z.object({
 var PathsConfigSchema = z.object({
   source: z.string().default("src"),
   aliases: z.record(z.string(), z.string()).default({ "@": "src" }),
+  monorepo_roots: z.array(z.string()).optional(),
   routers: z.string().optional(),
   routerRoot: z.string().optional(),
   pages: z.string().optional(),
@@ -382,13 +383,16 @@ Hint: run \`massu config refresh\` to regenerate a valid config or fix the liste
       name: parsed.project.name,
       root: projectRoot
     },
+    // Spread `fw` first so zod-`.passthrough()` extras (e.g., `framework.swift`,
+    // `framework.python`) survive into the consumer-visible Config. Then override
+    // the v2-backcompat-mirrored router/orm/ui values. Without the spread, the
+    // variant-resolution `pickVariant` (install-commands.ts) cannot see the
+    // top-level passthrough language blocks.
     framework: {
-      type: fw.type,
+      ...fw,
       router,
       orm,
-      ui,
-      primary: fw.primary,
-      languages: fw.languages
+      ui
     },
     paths: parsed.paths,
     toolPrefix: parsed.toolPrefix,

package/dist/hooks/post-tool-use.js

@@ -226,6 +226,7 @@ var PythonConfigSchema = z.object({
 var PathsConfigSchema = z.object({
   source: z.string().default("src"),
   aliases: z.record(z.string(), z.string()).default({ "@": "src" }),
+  monorepo_roots: z.array(z.string()).optional(),
   routers: z.string().optional(),
   routerRoot: z.string().optional(),
   pages: z.string().optional(),
@@ -384,13 +385,16 @@ Hint: run \`massu config refresh\` to regenerate a valid config or fix the liste
       name: parsed.project.name,
       root: projectRoot
     },
+    // Spread `fw` first so zod-`.passthrough()` extras (e.g., `framework.swift`,
+    // `framework.python`) survive into the consumer-visible Config. Then override
+    // the v2-backcompat-mirrored router/orm/ui values. Without the spread, the
+    // variant-resolution `pickVariant` (install-commands.ts) cannot see the
+    // top-level passthrough language blocks.
     framework: {
-      type: fw.type,
+      ...fw,
       router,
       orm,
-      ui,
-      primary: fw.primary,
-      languages: fw.languages
+      ui
     },
     paths: parsed.paths,
     toolPrefix: parsed.toolPrefix,

package/dist/hooks/pre-compact.js

@@ -226,6 +226,7 @@ var PythonConfigSchema = z.object({
 var PathsConfigSchema = z.object({
   source: z.string().default("src"),
   aliases: z.record(z.string(), z.string()).default({ "@": "src" }),
+  monorepo_roots: z.array(z.string()).optional(),
   routers: z.string().optional(),
   routerRoot: z.string().optional(),
   pages: z.string().optional(),
@@ -384,13 +385,16 @@ Hint: run \`massu config refresh\` to regenerate a valid config or fix the liste
       name: parsed.project.name,
       root: projectRoot
     },
+    // Spread `fw` first so zod-`.passthrough()` extras (e.g., `framework.swift`,
+    // `framework.python`) survive into the consumer-visible Config. Then override
+    // the v2-backcompat-mirrored router/orm/ui values. Without the spread, the
+    // variant-resolution `pickVariant` (install-commands.ts) cannot see the
+    // top-level passthrough language blocks.
     framework: {
-      type: fw.type,
+      ...fw,
       router,
       orm,
-      ui,
-      primary: fw.primary,
-      languages: fw.languages
+      ui
     },
     paths: parsed.paths,
     toolPrefix: parsed.toolPrefix,

package/dist/hooks/pre-delete-check.js

@@ -225,6 +225,7 @@ var PythonConfigSchema = z.object({
 var PathsConfigSchema = z.object({
   source: z.string().default("src"),
   aliases: z.record(z.string(), z.string()).default({ "@": "src" }),
+  monorepo_roots: z.array(z.string()).optional(),
   routers: z.string().optional(),
   routerRoot: z.string().optional(),
   pages: z.string().optional(),
@@ -383,13 +384,16 @@ Hint: run \`massu config refresh\` to regenerate a valid config or fix the liste
       name: parsed.project.name,
       root: projectRoot
     },
+    // Spread `fw` first so zod-`.passthrough()` extras (e.g., `framework.swift`,
+    // `framework.python`) survive into the consumer-visible Config. Then override
+    // the v2-backcompat-mirrored router/orm/ui values. Without the spread, the
+    // variant-resolution `pickVariant` (install-commands.ts) cannot see the
+    // top-level passthrough language blocks.
     framework: {
-      type: fw.type,
+      ...fw,
       router,
       orm,
-      ui,
-      primary: fw.primary,
-      languages: fw.languages
+      ui
     },
     paths: parsed.paths,
     toolPrefix: parsed.toolPrefix,

package/dist/hooks/quality-event.js

@@ -226,6 +226,7 @@ var PythonConfigSchema = z.object({
 var PathsConfigSchema = z.object({
   source: z.string().default("src"),
   aliases: z.record(z.string(), z.string()).default({ "@": "src" }),
+  monorepo_roots: z.array(z.string()).optional(),
   routers: z.string().optional(),
   routerRoot: z.string().optional(),
   pages: z.string().optional(),
@@ -384,13 +385,16 @@ Hint: run \`massu config refresh\` to regenerate a valid config or fix the liste
       name: parsed.project.name,
       root: projectRoot
     },
+    // Spread `fw` first so zod-`.passthrough()` extras (e.g., `framework.swift`,
+    // `framework.python`) survive into the consumer-visible Config. Then override
+    // the v2-backcompat-mirrored router/orm/ui values. Without the spread, the
+    // variant-resolution `pickVariant` (install-commands.ts) cannot see the
+    // top-level passthrough language blocks.
     framework: {
-      type: fw.type,
+      ...fw,
       router,
       orm,
-      ui,
-      primary: fw.primary,
-      languages: fw.languages
+      ui
     },
     paths: parsed.paths,
     toolPrefix: parsed.toolPrefix,

package/dist/hooks/rule-enforcement-pipeline.js

@@ -224,6 +224,7 @@ var PythonConfigSchema = z.object({
 var PathsConfigSchema = z.object({
   source: z.string().default("src"),
   aliases: z.record(z.string(), z.string()).default({ "@": "src" }),
+  monorepo_roots: z.array(z.string()).optional(),
   routers: z.string().optional(),
   routerRoot: z.string().optional(),
   pages: z.string().optional(),
@@ -382,13 +383,16 @@ Hint: run \`massu config refresh\` to regenerate a valid config or fix the liste
       name: parsed.project.name,
       root: projectRoot
     },
+    // Spread `fw` first so zod-`.passthrough()` extras (e.g., `framework.swift`,
+    // `framework.python`) survive into the consumer-visible Config. Then override
+    // the v2-backcompat-mirrored router/orm/ui values. Without the spread, the
+    // variant-resolution `pickVariant` (install-commands.ts) cannot see the
+    // top-level passthrough language blocks.
     framework: {
-      type: fw.type,
+      ...fw,
       router,
       orm,
-      ui,
-      primary: fw.primary,
-      languages: fw.languages
+      ui
     },
     paths: parsed.paths,
     toolPrefix: parsed.toolPrefix,

package/dist/hooks/session-end.js

@@ -226,6 +226,7 @@ var PythonConfigSchema = z.object({
 var PathsConfigSchema = z.object({
   source: z.string().default("src"),
   aliases: z.record(z.string(), z.string()).default({ "@": "src" }),
+  monorepo_roots: z.array(z.string()).optional(),
   routers: z.string().optional(),
   routerRoot: z.string().optional(),
   pages: z.string().optional(),
@@ -384,13 +385,16 @@ Hint: run \`massu config refresh\` to regenerate a valid config or fix the liste
       name: parsed.project.name,
       root: projectRoot
     },
+    // Spread `fw` first so zod-`.passthrough()` extras (e.g., `framework.swift`,
+    // `framework.python`) survive into the consumer-visible Config. Then override
+    // the v2-backcompat-mirrored router/orm/ui values. Without the spread, the
+    // variant-resolution `pickVariant` (install-commands.ts) cannot see the
+    // top-level passthrough language blocks.
     framework: {
-      type: fw.type,
+      ...fw,
       router,
       orm,
-      ui,
-      primary: fw.primary,
-      languages: fw.languages
+      ui
     },
     paths: parsed.paths,
     toolPrefix: parsed.toolPrefix,

package/dist/hooks/session-start.js

@@ -6002,6 +6002,7 @@ var PythonConfigSchema = z.object({
 var PathsConfigSchema = z.object({
   source: z.string().default("src"),
   aliases: z.record(z.string(), z.string()).default({ "@": "src" }),
+  monorepo_roots: z.array(z.string()).optional(),
   routers: z.string().optional(),
   routerRoot: z.string().optional(),
   pages: z.string().optional(),
@@ -6160,13 +6161,16 @@ Hint: run \`massu config refresh\` to regenerate a valid config or fix the liste
       name: parsed.project.name,
       root: projectRoot
     },
+    // Spread `fw` first so zod-`.passthrough()` extras (e.g., `framework.swift`,
+    // `framework.python`) survive into the consumer-visible Config. Then override
+    // the v2-backcompat-mirrored router/orm/ui values. Without the spread, the
+    // variant-resolution `pickVariant` (install-commands.ts) cannot see the
+    // top-level passthrough language blocks.
     framework: {
-      type: fw.type,
+      ...fw,
       router,
       orm,
-      ui,
-      primary: fw.primary,
-      languages: fw.languages
+      ui
     },
     paths: parsed.paths,
     toolPrefix: parsed.toolPrefix,
@@ -8263,6 +8267,13 @@ var TEST_DIR_KEYWORDS = ["tests", "test", "__tests__", "spec", "specs"];
 function extsFor(language) {
   return EXTENSIONS[language] ?? [];
 }
+function extsWithFallback(language, fallbackTsForJs) {
+  const base = extsFor(language);
+  if (language === "javascript" && fallbackTsForJs) {
+    return [...base, "ts", "tsx"];
+  }
+  return base;
+}
 function isTestPath(language, path) {
   const segments = path.split("/");
   for (const seg of segments) {
@@ -8284,10 +8295,11 @@ function isInsideRoot(root, candidate) {
     return false;
   }
 }
-function detectSourceDirs(projectRoot, languages) {
+function detectSourceDirs(projectRoot, languages, opts) {
+  const fallbackTsForJs = opts?.fallbackTsForJs ?? false;
   const out = {};
   for (const lang of languages) {
-    const exts = extsFor(lang);
+    const exts = extsWithFallback(lang, fallbackTsForJs);
     if (exts.length === 0) continue;
     const patterns = exts.map((e) => `**/*.${e}`);
     let files;
@@ -8808,8 +8820,9 @@ async function runDetection(projectRoot, overrides) {
   const languages = Array.from(
     new Set(pkg.manifests.map((m) => m.language))
   );
+  const fallbackTsForJs = languages.includes("javascript") && !languages.includes("typescript");
   const [sourceDirs, monorepo] = await Promise.all([
-    Promise.resolve(detectSourceDirs(projectRoot, languages)),
+    Promise.resolve(detectSourceDirs(projectRoot, languages, { fallbackTsForJs })),
     Promise.resolve(detectMonorepo(projectRoot))
   ]);
   const domains = inferDomains(projectRoot, monorepo, sourceDirs);

package/dist/hooks/user-prompt.js

@@ -226,6 +226,7 @@ var PythonConfigSchema = z.object({
 var PathsConfigSchema = z.object({
   source: z.string().default("src"),
   aliases: z.record(z.string(), z.string()).default({ "@": "src" }),
+  monorepo_roots: z.array(z.string()).optional(),
   routers: z.string().optional(),
   routerRoot: z.string().optional(),
   pages: z.string().optional(),
@@ -384,13 +385,16 @@ Hint: run \`massu config refresh\` to regenerate a valid config or fix the liste
       name: parsed.project.name,
       root: projectRoot
     },
+    // Spread `fw` first so zod-`.passthrough()` extras (e.g., `framework.swift`,
+    // `framework.python`) survive into the consumer-visible Config. Then override
+    // the v2-backcompat-mirrored router/orm/ui values. Without the spread, the
+    // variant-resolution `pickVariant` (install-commands.ts) cannot see the
+    // top-level passthrough language blocks.
     framework: {
-      type: fw.type,
+      ...fw,
       router,
       orm,
-      ui,
-      primary: fw.primary,
-      languages: fw.languages
+      ui
     },
     paths: parsed.paths,
     toolPrefix: parsed.toolPrefix,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@massu/core",
-  "version": "1.2.0",
+  "version": "1.3.0",
   "type": "module",
   "description": "AI Engineering Governance MCP Server - Session memory, knowledge system, feature registry, code intelligence, rule enforcement, tiered tooling (12 free / 72 total), 55+ workflow commands, 11 agents, 20+ patterns",
   "main": "src/server.ts",

package/src/cli.ts

@@ -47,6 +47,11 @@ async function main(): Promise<void> {
       await runInstallCommands();
       break;
     }
+    case 'show-template': {
+      const { runShowTemplate } = await import('./commands/show-template.ts');
+      await runShowTemplate(args.slice(1));
+      break;
+    }
     case 'validate-config': {
       const { runValidateConfig } = await import('./commands/doctor.ts');
       await runValidateConfig();
@@ -136,6 +141,7 @@ Commands:
   doctor            Check installation health
   install-hooks     Install/update Claude Code hooks
   install-commands  Install/update slash commands
+  show-template     Print the resolved variant of a bundled template (e.g. for diffs)
   validate-config   Validate massu.config.yaml (alias: config validate)
   config <sub>      Config lifecycle: refresh | validate | upgrade | doctor | check-drift
 

package/src/commands/init.ts

@@ -231,7 +231,18 @@ export function detectPython(projectRoot: string): PythonDetection {
 // Legacy Config File Generation (preserved for cli.test.ts)
 // ============================================================
 
+/**
+ * @deprecated Since @massu/core@1.2.1. Use {@link buildConfigFromDetection}
+ * with {@link runDetection} for monorepo-aware path resolution and
+ * schema_version=2 output. This path hardcodes `paths.source = 'src'` and
+ * cannot emit `paths.monorepo_roots`, so it would roll back on every
+ * non-`src/` layout. Kept only for the legacy `cli.test.ts` smoke tests;
+ * new callers must use the v2 builder.
+ */
 export function generateConfig(projectRoot: string, framework: FrameworkDetection): boolean {
+  console.warn(
+    '[@massu/core] generateConfig() is deprecated since 1.2.1 — use buildConfigFromDetection instead. It cannot produce valid configs for monorepos.'
+  );
   const configPath = resolve(projectRoot, 'massu.config.yaml');
 
   if (existsSync(configPath)) {
@@ -294,6 +305,37 @@ ${yamlStringify(config)}`;
 // V2 Config Builder (detection-driven)
 // ============================================================
 
+/**
+ * Return the common top-level parent directory across every workspace
+ * package. Returns `'.'` when packages span multiple parents (e.g. a repo
+ * with both `apps/*` and `packages/*`) — the project root is always a valid
+ * paths.source value (see validateWrittenConfig at init.ts:572).
+ */
+function monorepoCommonRoot(
+  packages: ReadonlyArray<{ path: string }>
+): string {
+  const roots = monorepoDistinctRoots(packages);
+  return roots.length === 1 ? roots[0] : '.';
+}
+
+/**
+ * Return the distinct top-level parent directories of every workspace
+ * package (e.g. `['apps', 'packages']` when both are present). Sorted for
+ * determinism. Excludes root-level ('.') workspaces.
+ */
+function monorepoDistinctRoots(
+  packages: ReadonlyArray<{ path: string }>
+): string[] {
+  const set = new Set<string>();
+  for (const p of packages) {
+    const parts = p.path.split('/');
+    if (parts.length > 1 && parts[0] !== '' && parts[0] !== '.') {
+      set.add(parts[0]);
+    }
+  }
+  return [...set].sort();
+}
+
 /**
  * Build a schema_version=2 config object from a DetectionResult.
  *
@@ -364,11 +406,38 @@ export function buildConfigFromDetection(
   const legacyUi = (primaryEntry?.ui as string | undefined) ?? 'none';
 
   // Determine paths.source from primary language's dominant source dir.
+  // P1-003: when the primary language has no detectable source dir AND the
+  // repo is a monorepo, fall back to the common parent of workspace packages
+  // (e.g. 'apps' for turbo + apps/*, 'packages' for pnpm + packages/*). This
+  // prevents the validator from rejecting a nonexistent top-level 'src/' on
+  // monorepo shapes where code actually lives under apps/ or packages/.
   let pathsSource = 'src';
   if (primary) {
     const primaryDirs = detection.sourceDirs[primary]?.source_dirs ?? [];
     if (primaryDirs.length > 0) {
       pathsSource = primaryDirs[0];
+    } else if (
+      detection.monorepo.type !== 'single' &&
+      detection.monorepo.packages.length > 0
+    ) {
+      pathsSource = monorepoCommonRoot(detection.monorepo.packages);
+    }
+  }
+
+  // P1-005: emit `paths.monorepo_roots` as the distinct parent directories of
+  // every workspace package when this is a monorepo. Optional + additive;
+  // v1 consumers ignore it. When detection identified a monorepo type
+  // (turbo/nx/pnpm/etc) but no manifested workspace packages were found
+  // (e.g. fresh-install fixtures with apps/*/main.py that haven't declared
+  // sub-manifests yet), fall back to deriving roots from the resolved
+  // paths.source so the field is still accurate for monorepo-aware tools.
+  let monorepoRoots: string[] | undefined;
+  if (detection.monorepo.type !== 'single') {
+    if (detection.monorepo.packages.length > 0) {
+      monorepoRoots = monorepoDistinctRoots(detection.monorepo.packages);
+    } else if (pathsSource !== 'src' && pathsSource !== '.') {
+      // Derive from paths.source when no workspace manifests exist.
+      monorepoRoots = [pathsSource];
     }
   }
 
@@ -411,6 +480,14 @@ export function buildConfigFromDetection(
     frameworkBlock.languages = languageEntries;
   }
 
+  const pathsBlock: Record<string, unknown> = {
+    source: pathsSource,
+    aliases: { '@': pathsSource },
+  };
+  if (monorepoRoots && monorepoRoots.length > 0) {
+    pathsBlock.monorepo_roots = monorepoRoots;
+  }
+
   const config: Record<string, unknown> = {
     schema_version: 2,
     project: {
@@ -418,10 +495,7 @@ export function buildConfigFromDetection(
       root: 'auto',
     },
     framework: frameworkBlock,
-    paths: {
-      source: pathsSource,
-      aliases: { '@': pathsSource },
-    },
+    paths: pathsBlock,
     toolPrefix: 'massu',
     domains,
     rules: [],
@@ -588,6 +662,17 @@ export function validateWrittenConfig(
             }
           }
         }
+        // P2-001: verify paths.monorepo_roots entries exist on disk (parity
+        // with paths.source existence check at line 624-631 above).
+        const mRoots = (cfg.paths as Record<string, unknown>).monorepo_roots;
+        if (Array.isArray(mRoots)) {
+          for (const r of mRoots) {
+            if (typeof r !== 'string' || r === '.') continue;
+            if (!existsSync(resolve(projectRoot, r))) {
+              return `paths.monorepo_roots '${r}' does not exist on disk`;
+            }
+          }
+        }
       }
     } catch (err) {
       return err instanceof Error ? err.message : String(err);