@massu/core 1.6.3 → 1.7.0

package/dist/cli.js

@@ -9542,14 +9542,33 @@ function domainFromWorkspace(pkg) {
     allowedImportsFrom: []
   };
 }
-function topLevelSrcSubdirs(root) {
-  const srcDir = join5(root, "src");
-  if (!existsSync7(srcDir)) return [];
-  try {
-    return readdirSync5(srcDir, { withFileTypes: true }).filter((e2) => e2.isDirectory() && !IGNORED_SUBDIRS.has(e2.name)).map((e2) => e2.name).sort();
-  } catch {
-    return [];
+function topLevelSrcSubdirs(root, sourceDirs) {
+  const effective = sourceDirs.length > 0 ? sourceDirs : ["src"];
+  const seen = /* @__PURE__ */ new Set();
+  for (const rel of effective) {
+    const abs = join5(root, rel);
+    if (!existsSync7(abs)) continue;
+    try {
+      for (const e2 of readdirSync5(abs, { withFileTypes: true })) {
+        if (!e2.isDirectory()) continue;
+        if (IGNORED_SUBDIRS.has(e2.name)) continue;
+        seen.add(e2.name);
+      }
+    } catch {
+    }
+  }
+  return Array.from(seen).sort();
+}
+function flattenSourceDirs(sourceDirs) {
+  const flat = /* @__PURE__ */ new Set();
+  for (const entry of Object.values(sourceDirs)) {
+    if (!entry) continue;
+    for (const dir of entry.source_dirs) {
+      if (dir === "." || dir === "") continue;
+      flat.add(dir);
+    }
   }
+  return Array.from(flat);
 }
 function inferDomains(projectRoot, monorepo, sourceDirs) {
   const domains = [];
@@ -9558,7 +9577,8 @@ function inferDomains(projectRoot, monorepo, sourceDirs) {
       domains.push(domainFromWorkspace(pkg));
     }
   } else {
-    const subdirs = topLevelSrcSubdirs(projectRoot);
+    const flat = flattenSourceDirs(sourceDirs);
+    const subdirs = topLevelSrcSubdirs(projectRoot, flat);
     for (const s of subdirs) {
       domains.push({
         name: titleCase(s),
@@ -13780,6 +13800,9 @@ function annotateToolDefinitions(defs) {
     };
   });
 }
+function isCloudFeatureAvailable() {
+  return getConfig().cloud?.enabled === true;
+}
 async function validateLicense(apiKey) {
   const keyHash = createHash4("sha256").update(apiKey).digest("hex");
   const memDb = getMemoryDb();
@@ -26723,7 +26746,8 @@ function getToolDefinitions() {
     ...getSecurityToolDefinitions(),
     ...getDependencyToolDefinitions(),
     // Enterprise layer (team knowledge, regression detection)
-    ...getTeamToolDefinitions(),
+    // P-A-003: team tools are cloud-gated — only listed when cloud.enabled is true.
+    ...isCloudFeatureAvailable() ? getTeamToolDefinitions() : [],
     ...getRegressionToolDefinitions(),
     // Knowledge layer (indexed .claude/ knowledge — rules, patterns, incidents)
     ...getKnowledgeToolDefinitions(),
@@ -26927,7 +26951,7 @@ async function handleToolCall(name, args2, dataDb, codegraphDb) {
         memDb.close();
       }
     }
-    if (isTeamTool(name)) {
+    if (isTeamTool(name) && isCloudFeatureAvailable()) {
       const memDb = getMemoryDb();
       try {
         return handleTeamToolCall(name, args2, memDb);

package/dist/hooks/session-start.js

@@ -8360,14 +8360,33 @@ function domainFromWorkspace(pkg) {
     allowedImportsFrom: []
   };
 }
-function topLevelSrcSubdirs(root) {
-  const srcDir = join3(root, "src");
-  if (!existsSync5(srcDir)) return [];
-  try {
-    return readdirSync3(srcDir, { withFileTypes: true }).filter((e) => e.isDirectory() && !IGNORED_SUBDIRS.has(e.name)).map((e) => e.name).sort();
-  } catch {
-    return [];
+function topLevelSrcSubdirs(root, sourceDirs) {
+  const effective = sourceDirs.length > 0 ? sourceDirs : ["src"];
+  const seen = /* @__PURE__ */ new Set();
+  for (const rel of effective) {
+    const abs = join3(root, rel);
+    if (!existsSync5(abs)) continue;
+    try {
+      for (const e of readdirSync3(abs, { withFileTypes: true })) {
+        if (!e.isDirectory()) continue;
+        if (IGNORED_SUBDIRS.has(e.name)) continue;
+        seen.add(e.name);
+      }
+    } catch {
+    }
+  }
+  return Array.from(seen).sort();
+}
+function flattenSourceDirs(sourceDirs) {
+  const flat = /* @__PURE__ */ new Set();
+  for (const entry of Object.values(sourceDirs)) {
+    if (!entry) continue;
+    for (const dir of entry.source_dirs) {
+      if (dir === "." || dir === "") continue;
+      flat.add(dir);
+    }
   }
+  return Array.from(flat);
 }
 function inferDomains(projectRoot, monorepo, sourceDirs) {
   const domains = [];
@@ -8376,7 +8395,8 @@ function inferDomains(projectRoot, monorepo, sourceDirs) {
       domains.push(domainFromWorkspace(pkg));
     }
   } else {
-    const subdirs = topLevelSrcSubdirs(projectRoot);
+    const flat = flattenSourceDirs(sourceDirs);
+    const subdirs = topLevelSrcSubdirs(projectRoot, flat);
     for (const s of subdirs) {
       domains.push({
         name: titleCase(s),

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@massu/core",
-  "version": "1.6.3",
+  "version": "1.7.0",
   "type": "module",
   "description": "AI Engineering Governance MCP Server - Session memory, knowledge system, feature registry, code intelligence, rule enforcement, tiered tooling (12 free / 72 total), 55+ workflow commands, 11 agents, 20+ patterns",
   "main": "src/server.ts",

package/src/detect/domain-inferrer.ts

@@ -67,17 +67,69 @@ function domainFromWorkspace(pkg: WorkspacePackage): DomainConfig {
   };
 }
 
-function topLevelSrcSubdirs(root: string): string[] {
-  const srcDir = join(root, 'src');
-  if (!existsSync(srcDir)) return [];
-  try {
-    return readdirSync(srcDir, { withFileTypes: true })
-      .filter((e) => e.isDirectory() && !IGNORED_SUBDIRS.has(e.name))
-      .map((e) => e.name)
-      .sort();
-  } catch {
-    return [];
+/**
+ * Enumerate domain candidates under each detected source directory.
+ *
+ * The `sourceDirs` argument is the flattened, unique list of relative
+ * source paths produced upstream by the source-dir detector
+ * (`detectSourceDirs` in `source-dir-detector.ts`). For each path that
+ * exists under `root`, this function lists immediate subdirectories as
+ * candidate domain names. Hardcoded `src/` lookup was removed (plan
+ * `plan-1.7.0-cohesive-cleanup` P-B-002) — the function now consumes
+ * the detection pipeline's output verbatim, so projects whose source
+ * lives at non-`src/` paths (e.g. `lib/`, `apps/<x>/src/`) are no
+ * longer silently dropped.
+ *
+ * Empty `sourceDirs` is treated as a legacy single-repo `src/` lookup
+ * to preserve behavior for callers that pre-date the source-dir
+ * pipeline (CLI / test harnesses that hand-wire `inferDomains`).
+ *
+ * Returns deduplicated subdir names sorted alphabetically.
+ */
+function topLevelSrcSubdirs(root: string, sourceDirs: readonly string[]): string[] {
+  const effective = sourceDirs.length > 0 ? sourceDirs : ['src'];
+  const seen = new Set<string>();
+  for (const rel of effective) {
+    const abs = join(root, rel);
+    if (!existsSync(abs)) continue;
+    try {
+      for (const e of readdirSync(abs, { withFileTypes: true })) {
+        if (!e.isDirectory()) continue;
+        if (IGNORED_SUBDIRS.has(e.name)) continue;
+        seen.add(e.name);
+      }
+    } catch {
+      // skip directories that cannot be read; do not throw.
+    }
+  }
+  return Array.from(seen).sort();
+}
+
+/**
+ * Flatten a `SourceDirMap` into a unique, deduplicated list of relative
+ * source paths across all detected languages.
+ *
+ * Drops the root sentinels `.` and `''` — those are emitted by the
+ * source-dir-detector when source files live directly at the project
+ * root (e.g. Django's `manage.py` or Swift's `Package.swift`). Treating
+ * them as enumerable source dirs causes spurious top-level directory
+ * inclusion (Tests/, Sources/, etc.), which collides with the
+ * language-fallback path in `inferDomains`. Root-source repos rely on
+ * the language-fallback path to emit `{Python}` / `{Swift}` domains,
+ * NOT a fan-out of every root subdirectory.
+ *
+ * Order is not guaranteed — callers that need determinism must sort.
+ */
+function flattenSourceDirs(sourceDirs: SourceDirMap): string[] {
+  const flat = new Set<string>();
+  for (const entry of Object.values(sourceDirs)) {
+    if (!entry) continue;
+    for (const dir of entry.source_dirs) {
+      if (dir === '.' || dir === '') continue;
+      flat.add(dir);
+    }
   }
+  return Array.from(flat);
 }
 
 /**
@@ -100,8 +152,11 @@ export function inferDomains(
       domains.push(domainFromWorkspace(pkg));
     }
   } else {
-    // Single repo: suggest one domain per top-level src/<subdir>/ if src/ exists.
-    const subdirs = topLevelSrcSubdirs(projectRoot);
+    // Single repo: suggest one domain per top-level <sourceDir>/<subdir>/ for
+    // every detected source dir (formerly hardcoded to `src/` only — see
+    // P-B-002 in plan-1.7.0-cohesive-cleanup).
+    const flat = flattenSourceDirs(sourceDirs);
+    const subdirs = topLevelSrcSubdirs(projectRoot, flat);
     for (const s of subdirs) {
       domains.push({
         name: titleCase(s),

package/src/license.ts

@@ -203,6 +203,26 @@ export function annotateToolDefinitions(defs: ToolDefinition[]): ToolDefinition[
   });
 }
 
+// ============================================================
+// plan-1.7.0-cohesive-cleanup P-A-003: Cloud feature availability gate
+// ============================================================
+
+/**
+ * Whether cloud-gated tool surfaces (team knowledge, etc.) are exposed.
+ *
+ * Returns true ONLY when `massu.config.yaml` opts the workspace into the
+ * cloud feature surface via `cloud.enabled: true`. Defaults to false for
+ * fresh installs (the schema's `enabled` default is `false`).
+ *
+ * This is distinct from {@link isLicenseTool} (which matches tool NAMES);
+ * `isCloudFeatureAvailable` is a runtime feature-availability check used
+ * by `tools.ts` to gate team-tool registration and routing at the
+ * tools-list and dispatch boundaries.
+ */
+export function isCloudFeatureAvailable(): boolean {
+  return getConfig().cloud?.enabled === true;
+}
+
 // ============================================================
 // P3-005/P3-006/P3-007/P3-013: License validation & caching
 // ============================================================

package/src/security/registry-pubkey.generated.ts

@@ -1,4 +1,4 @@
-// AUTO-GENERATED by scripts/bundle-pubkey.mjs at 2026-05-11T22:54:34.471Z.
+// AUTO-GENERATED by scripts/bundle-pubkey.mjs at 2026-05-12T04:00:39.397Z.
 // Source pem: packages/core/security/registry-pubkey.pem
 // RAW-bytes sha256: 3b6226d036c472e533110d11a7d0cd2773ce1d7d4f1003517d5bd69c5418ed4c
 // DO NOT EDIT — regenerate via `node scripts/bundle-pubkey.mjs` or

package/src/tools.ts

@@ -38,7 +38,7 @@ import { getKnowledgeToolDefinitions, isKnowledgeTool, handleKnowledgeToolCall }
 import { getKnowledgeDb } from './knowledge-db.ts';
 import { getPythonToolDefinitions, isPythonTool, handlePythonToolCall } from './python-tools.ts';
 import { getConfig, getProjectRoot, getResolvedPaths } from './config.ts';
-import { getCurrentTier, getToolTier, isToolAllowed, annotateToolDefinitions, getLicenseToolDefinitions, isLicenseTool, handleLicenseToolCall } from './license.ts';
+import { getCurrentTier, getToolTier, isToolAllowed, annotateToolDefinitions, getLicenseToolDefinitions, isLicenseTool, handleLicenseToolCall, isCloudFeatureAvailable } from './license.ts';
 
 export interface ToolDefinition {
   name: string;
@@ -172,7 +172,8 @@ export function getToolDefinitions(): ToolDefinition[] {
     ...getSecurityToolDefinitions(),
     ...getDependencyToolDefinitions(),
     // Enterprise layer (team knowledge, regression detection)
-    ...getTeamToolDefinitions(),
+    // P-A-003: team tools are cloud-gated — only listed when cloud.enabled is true.
+    ...(isCloudFeatureAvailable() ? getTeamToolDefinitions() : []),
     ...getRegressionToolDefinitions(),
     // Knowledge layer (indexed .claude/ knowledge — rules, patterns, incidents)
     ...getKnowledgeToolDefinitions(),
@@ -410,7 +411,9 @@ export async function handleToolCall(
     }
 
     // Route enterprise layer tools
-    if (isTeamTool(name)) {
+    // P-A-003: team-tool dispatch gated on cloud availability; if a stale client
+    // still has the tool name cached, fall through to the unknown-tool branch.
+    if (isTeamTool(name) && isCloudFeatureAvailable()) {
       const memDb = getMemoryDb();
       try { return handleTeamToolCall(name, args, memDb); }
       finally { memDb.close(); }