@mnci/cli 4.41.0 → 4.43.0

package/dist/cli.js

@@ -7896,6 +7896,10 @@ function runKinds(options) {
 
 // src/workspace-diagnostics/check-invariants.use-case.ts
 var import_node_child_process = require("child_process");
+var import_node_fs30 = require("fs");
+var import_node_path35 = require("path");
+
+// src/workspace-diagnostics/locate-stranded-release-tags.use-case.ts
 var import_node_fs29 = require("fs");
 var import_node_path34 = require("path");
 
@@ -7924,14 +7928,28 @@ function findStrandedReleaseTags(projects, tags) {
   return stranded;
 }
 
+// src/workspace-diagnostics/locate-stranded-release-tags.use-case.ts
+var MNCI_TAG_PATTERN = "{projectName}@{version}";
+function locateStrandedReleaseTags(workspaceRoot, tagPattern) {
+  if (tagPattern !== void 0 && tagPattern !== MNCI_TAG_PATTERN) {
+    return [];
+  }
+  const listed = runCapture("git", ["tag", "--list"], workspaceRoot);
+  if (listed.status !== 0) {
+    return [];
+  }
+  const projects = (0, import_node_fs29.globSync)("{apps,libs,packages}/*/package.json", { cwd: workspaceRoot }).map((path) => readJson((0, import_node_path34.join)(workspaceRoot, path))).filter((manifest) => manifest.private !== true && manifest.name !== void 0).map((manifest) => manifest.name);
+  return findStrandedReleaseTags(projects, listed.stdout.split(/\r?\n/).filter(Boolean));
+}
+
 // src/workspace-diagnostics/check-invariants.use-case.ts
 var SUPPORTED_ESLINT_MAJOR = ESLINT_VERSION.replace(/^\D*/, "").split(".", 1)[0];
 function toPosix2(path) {
   return path.replaceAll("\\", "/");
 }
 function checkEslintConfigs(workspaceRoot) {
-  const rootConfigs = (0, import_node_fs29.globSync)("eslint.config.{js,mjs,cjs,ts,mts,cts}", { cwd: workspaceRoot });
-  const projectConfigs = (0, import_node_fs29.globSync)("{apps,libs,packages}/*/eslint.config.{js,mjs,cjs,ts,mts,cts}", {
+  const rootConfigs = (0, import_node_fs30.globSync)("eslint.config.{js,mjs,cjs,ts,mts,cts}", { cwd: workspaceRoot });
+  const projectConfigs = (0, import_node_fs30.globSync)("{apps,libs,packages}/*/eslint.config.{js,mjs,cjs,ts,mts,cts}", {
     cwd: workspaceRoot
   }).map((config) => toPosix2(config));
   return [
@@ -7951,10 +7969,10 @@ function checkEslintConfigs(workspaceRoot) {
   ];
 }
 function checkEslintEntryPointReachesTheRules(workspaceRoot) {
-  const rules = (0, import_node_path34.join)(workspaceRoot, ESLINT_MNCI_FILENAME);
-  if (!(0, import_node_fs29.existsSync)(rules)) return [];
-  const entryPoint = (0, import_node_path34.join)(workspaceRoot, ESLINT_USER_FILENAME);
-  const source = (0, import_node_fs29.existsSync)(entryPoint) ? (0, import_node_fs29.readFileSync)(entryPoint, "utf8") : "";
+  const rules = (0, import_node_path35.join)(workspaceRoot, ESLINT_MNCI_FILENAME);
+  if (!(0, import_node_fs30.existsSync)(rules)) return [];
+  const entryPoint = (0, import_node_path35.join)(workspaceRoot, ESLINT_USER_FILENAME);
+  const source = (0, import_node_fs30.existsSync)(entryPoint) ? (0, import_node_fs30.readFileSync)(entryPoint, "utf8") : "";
   return [
     {
       check: `${ESLINT_USER_FILENAME} imports the mnci rules`,
@@ -7967,7 +7985,7 @@ function checkEslintEntryPointReachesTheRules(workspaceRoot) {
 function declaredDevDependencies(workspaceRoot) {
   try {
     const manifest = readJson(
-      (0, import_node_path34.join)(workspaceRoot, "package.json")
+      (0, import_node_path35.join)(workspaceRoot, "package.json")
     );
     return manifest.devDependencies ?? {};
   } catch {
@@ -7975,7 +7993,7 @@ function declaredDevDependencies(workspaceRoot) {
   }
 }
 function checkNoRetiredFormatter(workspaceRoot) {
-  const files = RETIRED_FORMATTER_FILES.filter((file) => fileExists((0, import_node_path34.join)(workspaceRoot, file)));
+  const files = RETIRED_FORMATTER_FILES.filter((file) => fileExists((0, import_node_path35.join)(workspaceRoot, file)));
   const declared = ["prettier", "eslint-config-prettier", "oxlint", "oxfmt", "@mnci/oxlint-config"].filter((name) => declaredDevDependencies(workspaceRoot)[name] !== void 0);
   const stale = [...files, ...declared];
   if (stale.length === 0) {
@@ -8001,7 +8019,7 @@ function checkEslintPlugin(nxJson) {
   };
 }
 function checkResolvedEslint(workspaceRoot) {
-  const manifestPath = (0, import_node_path34.join)(workspaceRoot, "node_modules/eslint/package.json");
+  const manifestPath = (0, import_node_path35.join)(workspaceRoot, "node_modules/eslint/package.json");
   if (!fileExists(manifestPath)) {
     return void 0;
   }
@@ -8019,11 +8037,11 @@ function checkResolvedEslint(workspaceRoot) {
   }
 }
 function checkNpmrc(workspaceRoot, registry, scope) {
-  const npmrcPath = (0, import_node_path34.join)(workspaceRoot, ".npmrc");
+  const npmrcPath = (0, import_node_path35.join)(workspaceRoot, ".npmrc");
   if (!registry || !fileExists(npmrcPath)) {
     return void 0;
   }
-  const npmrc = (0, import_node_fs29.readFileSync)(npmrcPath, "utf8");
+  const npmrc = (0, import_node_fs30.readFileSync)(npmrcPath, "utf8");
   if (registry.kind === "npm") {
     return {
       check: ".npmrc authenticates the public registry",
@@ -8040,11 +8058,11 @@ function checkNpmrc(workspaceRoot, registry, scope) {
   };
 }
 function checkNpmrcCredentialResolves(workspaceRoot, environment = process.env) {
-  const npmrcPath = (0, import_node_path34.join)(workspaceRoot, ".npmrc");
+  const npmrcPath = (0, import_node_path35.join)(workspaceRoot, ".npmrc");
   if (!fileExists(npmrcPath)) {
     return void 0;
   }
-  const npmrc = (0, import_node_fs29.readFileSync)(npmrcPath, "utf8");
+  const npmrc = (0, import_node_fs30.readFileSync)(npmrcPath, "utf8");
   const credentials = npmrc.split("\n").filter((line) => !line.trimStart().startsWith(";") && !line.trimStart().startsWith("#")).filter((line) => /(?:_authToken|_password|_auth)\s*=/u.test(line));
   const referenced = [
     ...new Set(
@@ -8068,13 +8086,13 @@ function checkNpmrcCredentialResolves(workspaceRoot, environment = process.env)
   };
 }
 function checkNpmAuthMatchesPipeline(workspaceRoot, registry) {
-  const npmrcPath = (0, import_node_path34.join)(workspaceRoot, ".npmrc");
-  const pipelinePath = (0, import_node_path34.join)(workspaceRoot, "azure-pipelines.yml");
+  const npmrcPath = (0, import_node_path35.join)(workspaceRoot, ".npmrc");
+  const pipelinePath = (0, import_node_path35.join)(workspaceRoot, "azure-pipelines.yml");
   if (registry?.kind !== "azure-artifacts" || !fileExists(npmrcPath) || !fileExists(pipelinePath)) {
     return void 0;
   }
-  const holdsCredentials = (0, import_node_fs29.readFileSync)(npmrcPath, "utf8").split("\n").filter((line) => !line.trimStart().startsWith(";") && !line.trimStart().startsWith("#")).some((line) => /(?:_authToken|_password|_auth)\s*=/u.test(line));
-  const runsTask = (0, import_node_fs29.readFileSync)(pipelinePath, "utf8").includes("npmAuthenticate@0");
+  const holdsCredentials = (0, import_node_fs30.readFileSync)(npmrcPath, "utf8").split("\n").filter((line) => !line.trimStart().startsWith(";") && !line.trimStart().startsWith("#")).some((line) => /(?:_authToken|_password|_auth)\s*=/u.test(line));
+  const runsTask = (0, import_node_fs30.readFileSync)(pipelinePath, "utf8").includes("npmAuthenticate@0");
   if (!holdsCredentials && !runsTask) {
     return {
       check: "npm auth: .npmrc and azure-pipelines.yml agree",
@@ -8119,13 +8137,13 @@ function npmjsCredentialShape(credentials, environment) {
 }
 function checkVersionActions(workspaceRoot) {
   const candidates = [
-    ...(0, import_node_fs29.globSync)("packages/*/pubspec.yaml", { cwd: workspaceRoot }),
-    ...(0, import_node_fs29.globSync)("packages/*/*.csproj", { cwd: workspaceRoot }),
-    ...(0, import_node_fs29.globSync)("python-packages/*/pyproject.toml", { cwd: workspaceRoot })
+    ...(0, import_node_fs30.globSync)("packages/*/pubspec.yaml", { cwd: workspaceRoot }),
+    ...(0, import_node_fs30.globSync)("packages/*/*.csproj", { cwd: workspaceRoot }),
+    ...(0, import_node_fs30.globSync)("python-packages/*/pyproject.toml", { cwd: workspaceRoot })
   ].map((manifest) => toPosix2(manifest));
   return candidates.flatMap((manifest) => {
     const projectRoot = manifest.slice(0, manifest.lastIndexOf("/"));
-    const projectJsonPath = (0, import_node_path34.join)(workspaceRoot, projectRoot, "project.json");
+    const projectJsonPath = (0, import_node_path35.join)(workspaceRoot, projectRoot, "project.json");
     let hasOverride = false;
     try {
       const projectJson = readJson(projectJsonPath);
@@ -8154,7 +8172,7 @@ function declaredTargets(workspaceRoot, projectRoot) {
   ]) {
     try {
       const targets = extract(
-        readJson((0, import_node_path34.join)(workspaceRoot, projectRoot, file))
+        readJson((0, import_node_path35.join)(workspaceRoot, projectRoot, file))
       );
       if (targets && typeof targets === "object") {
         sources.push({
@@ -8170,8 +8188,8 @@ function declaredTargets(workspaceRoot, projectRoot) {
 function checkTargetFilesExist(workspaceRoot) {
   const projectRoots = new Set(
     [
-      ...(0, import_node_fs29.globSync)("{apps,libs,packages}/*/project.json", { cwd: workspaceRoot }),
-      ...(0, import_node_fs29.globSync)("{apps,libs,packages}/*/package.json", { cwd: workspaceRoot })
+      ...(0, import_node_fs30.globSync)("{apps,libs,packages}/*/project.json", { cwd: workspaceRoot }),
+      ...(0, import_node_fs30.globSync)("{apps,libs,packages}/*/package.json", { cwd: workspaceRoot })
     ].map((manifest) => toPosix2(manifest).split("/").slice(0, 2).join("/"))
   );
   return [...projectRoots].flatMap(
@@ -8186,7 +8204,7 @@ function checkOneTargetsFiles(workspaceRoot, source, targetName, target) {
   return TARGET_FILE_OPTIONS.flatMap((option) => {
     const value = target?.options?.[option];
     const checkable = typeof value === "string" && !value.includes("{");
-    if (!checkable || fileExists((0, import_node_path34.join)(workspaceRoot, value))) {
+    if (!checkable || fileExists((0, import_node_path35.join)(workspaceRoot, value))) {
       return [];
     }
     return [
@@ -8225,15 +8243,15 @@ function checkGoPluginRegistered(workspaceRoot) {
   };
 }
 function checkGoWorkInSync(workspaceRoot) {
-  const goWorkPath = (0, import_node_path34.join)(workspaceRoot, "go.work");
+  const goWorkPath = (0, import_node_path35.join)(workspaceRoot, "go.work");
   if (!fileExists(goWorkPath)) {
     return void 0;
   }
-  const contents = (0, import_node_fs29.existsSync)(goWorkPath) ? (0, import_node_fs29.readFileSync)(goWorkPath, "utf8") : "";
+  const contents = (0, import_node_fs30.existsSync)(goWorkPath) ? (0, import_node_fs30.readFileSync)(goWorkPath, "utf8") : "";
   const blockEntries = Array.from(contents.matchAll(/(?:^|\n)\s*use\s+\(([^)]*)\)/g), (match) => match[1].split("\n")).flat();
   const singleEntries = Array.from(contents.matchAll(/(?:^|\n)\s*use\s+(\.\S+)/g), (match) => match[1]);
   const uses = [...blockEntries, ...singleEntries].map((entry) => entry.trim()).filter(Boolean);
-  const stale = uses.filter((entry) => !(0, import_node_fs29.existsSync)((0, import_node_path34.join)(workspaceRoot, entry, "go.mod")));
+  const stale = uses.filter((entry) => !(0, import_node_fs30.existsSync)((0, import_node_path35.join)(workspaceRoot, entry, "go.mod")));
   return {
     check: "every go.work `use` entry points to a module that still exists",
     ok: stale.length === 0,
@@ -8249,9 +8267,9 @@ function checkNativeApps(workspaceRoot) {
     { file: ".github/workflows/ci.yml", marker: "native (${{ matrix.os }})" },
     { file: "azure-pipelines.yml", marker: "- job: native" }
   ];
-  const findings = pipelines.filter(({ file }) => fileExists((0, import_node_path34.join)(workspaceRoot, file))).map(({ file, marker }) => ({
+  const findings = pipelines.filter(({ file }) => fileExists((0, import_node_path35.join)(workspaceRoot, file))).map(({ file, marker }) => ({
     check: `${file} builds the native apps on every OS`,
-    ok: (0, import_node_fs29.readFileSync)((0, import_node_path34.join)(workspaceRoot, file), "utf8").includes(marker),
+    ok: (0, import_node_fs30.readFileSync)((0, import_node_path35.join)(workspaceRoot, file), "utf8").includes(marker),
     detail: `${file} has no native job: CI would verify a cgo app on the one agent that cannot build it`,
     remedy: "run `mnci upgrade`"
   }));
@@ -8264,7 +8282,7 @@ function checkNativeApps(workspaceRoot) {
   return findings;
 }
 function checkNoRootRuntimeDependencies(workspaceRoot) {
-  const manifestPath = (0, import_node_path34.join)(workspaceRoot, "package.json");
+  const manifestPath = (0, import_node_path35.join)(workspaceRoot, "package.json");
   if (!fileExists(manifestPath)) {
     return void 0;
   }
@@ -8284,14 +8302,14 @@ function checkNoRootRuntimeDependencies(workspaceRoot) {
   };
 }
 function checkRollupSourceMaps(workspaceRoot) {
-  const configs = (0, import_node_fs29.globSync)(["packages/*/rollup.config.cjs", "libs/*/rollup.config.cjs"], {
+  const configs = (0, import_node_fs30.globSync)(["packages/*/rollup.config.cjs", "libs/*/rollup.config.cjs"], {
     cwd: workspaceRoot
   }).map((config) => toPosix2(config));
   return configs.flatMap((relativePath) => {
-    const configPath = (0, import_node_path34.join)(workspaceRoot, relativePath);
+    const configPath = (0, import_node_path35.join)(workspaceRoot, relativePath);
     let config;
     try {
-      config = (0, import_node_fs29.readFileSync)(configPath, "utf8");
+      config = (0, import_node_fs30.readFileSync)(configPath, "utf8");
     } catch {
       return [];
     }
@@ -8306,11 +8324,11 @@ function checkRollupSourceMaps(workspaceRoot) {
   });
 }
 function checkDeclarationSpecifiers(workspaceRoot) {
-  const configs = (0, import_node_fs29.globSync)(["packages/*/rollup.config.cjs", "libs/*/rollup.config.cjs"], {
+  const configs = (0, import_node_fs30.globSync)(["packages/*/rollup.config.cjs", "libs/*/rollup.config.cjs"], {
     cwd: workspaceRoot
   }).map((config) => toPosix2(config));
   return configs.flatMap((relativePath) => {
-    const configPath = (0, import_node_path34.join)(workspaceRoot, relativePath);
+    const configPath = (0, import_node_path35.join)(workspaceRoot, relativePath);
     if (!fileExists(configPath)) {
       return [];
     }
@@ -8325,7 +8343,7 @@ function checkDeclarationSpecifiers(workspaceRoot) {
           // `plugins` array (what @nx/react:library writes). For any other shape it would no-op, and
           // naming a command that silently does nothing is the failure mode the source-map check
           // above goes out of its way to avoid, so the remedy depends on the shape.
-          remedy: canAddDeclarationSpecifierPlugin((0, import_node_fs29.readFileSync)(configPath, "utf8")) ? "run `mnci upgrade`, which adds the plugin to the plugins array of withNx's second argument" : "add the plugin to withNx's second argument by hand (copy it from a freshly `mnci add npm-lib`'d project) \u2014 mnci does not recognise the shape of this config, so `mnci upgrade` cannot add it"
+          remedy: canAddDeclarationSpecifierPlugin((0, import_node_fs30.readFileSync)(configPath, "utf8")) ? "run `mnci upgrade`, which adds the plugin to the plugins array of withNx's second argument" : "add the plugin to withNx's second argument by hand (copy it from a freshly `mnci add npm-lib`'d project) \u2014 mnci does not recognise the shape of this config, so `mnci upgrade` cannot add it"
         }
       ];
     }
@@ -8341,8 +8359,8 @@ function checkDeclarationSpecifiers(workspaceRoot) {
 }
 function checkPipelinePhases(workspaceRoot) {
   const files = ["azure-pipelines.yml", ".github/workflows/ci.yml"];
-  return files.filter((file) => fileExists((0, import_node_path34.join)(workspaceRoot, file))).flatMap((file) => {
-    const { verifyActive, switchedOff } = inspectPipeline((0, import_node_fs29.readFileSync)((0, import_node_path34.join)(workspaceRoot, file), "utf8"));
+  return files.filter((file) => fileExists((0, import_node_path35.join)(workspaceRoot, file))).flatMap((file) => {
+    const { verifyActive, switchedOff } = inspectPipeline((0, import_node_fs30.readFileSync)((0, import_node_path35.join)(workspaceRoot, file), "utf8"));
     const verify = {
       check: `${file} runs the enforced verify phase`,
       ok: verifyActive,
@@ -8383,7 +8401,7 @@ function checkDependencyRangesNotPreserved(nxJson) {
   };
 }
 function checkLockfileHasNoLocalRegistry(workspaceRoot) {
-  if (!fileExists((0, import_node_path34.join)(workspaceRoot, "package-lock.json"))) {
+  if (!fileExists((0, import_node_path35.join)(workspaceRoot, "package-lock.json"))) {
     return void 0;
   }
   return {
@@ -8394,16 +8412,7 @@ function checkLockfileHasNoLocalRegistry(workspaceRoot) {
   };
 }
 function checkReleaseTagsResolve(workspaceRoot, nxJson) {
-  const pattern = nxJson.release?.releaseTag?.pattern;
-  if (pattern !== void 0 && pattern !== "{projectName}@{version}") {
-    return void 0;
-  }
-  const listed = runCapture("git", ["tag", "--list"], workspaceRoot);
-  if (listed.status !== 0) {
-    return void 0;
-  }
-  const projects = (0, import_node_fs29.globSync)("{apps,libs,packages}/*/package.json", { cwd: workspaceRoot }).map((path) => readJson((0, import_node_path34.join)(workspaceRoot, path))).filter((manifest) => manifest.private !== true && manifest.name !== void 0).map((manifest) => manifest.name);
-  const stranded = findStrandedReleaseTags(projects, listed.stdout.split(/\r?\n/).filter(Boolean));
+  const stranded = locateStrandedReleaseTags(workspaceRoot, nxJson.release?.releaseTag?.pattern);
   return {
     check: "release tags resolve under each project's current name",
     ok: stranded.length === 0,
@@ -8412,7 +8421,7 @@ function checkReleaseTagsResolve(workspaceRoot, nxJson) {
   };
 }
 function collectFindings(workspaceRoot) {
-  const nxJsonPath = (0, import_node_path34.join)(workspaceRoot, "nx.json");
+  const nxJsonPath = (0, import_node_path35.join)(workspaceRoot, "nx.json");
   if (!fileExists(nxJsonPath)) {
     throw new Error(
       `No nx.json found in ${workspaceRoot} \u2014 run 'mnci doctor' from the workspace root.`
@@ -8476,11 +8485,146 @@ function runDoctor(workspaceRoot, options = {}) {
   process.exitCode = 1;
 }
 
+// src/repository-adoption/inspect-repository.use-case.ts
+var import_node_fs31 = require("fs");
+var import_node_path36 = require("path");
+var LOCKFILES = [
+  ["package-lock.json", "npm"],
+  ["pnpm-lock.yaml", "pnpm"],
+  ["yarn.lock", "yarn"],
+  ["bun.lock", "bun"],
+  ["bun.lockb", "bun"]
+];
+var PERSONAL_FILES = ["CLAUDE.md", "AGENTS.md"];
+var RETIRED_FILE_PATTERN = /^(?:\.prettierrc.*|\.prettierignore|\.oxfmtrc\.json|oxlint\.config\.ts)$/;
+var RETIRED_NAMES = ["prettier", "oxfmt", "oxlint", "verdaccio"];
+function retiredNamesIn(manifest) {
+  const declared = Object.keys({ ...manifest.dependencies, ...manifest.devDependencies });
+  const scripts = Object.values(manifest.scripts ?? {}).join(" ");
+  return RETIRED_NAMES.filter((name) => declared.includes(name) || new RegExp(String.raw`\b${name}\b`).test(scripts));
+}
+function inspectRepository(repositoryRoot) {
+  const inside = runCapture("git", ["rev-parse", "--is-inside-work-tree"], repositoryRoot);
+  const isGitRepo = inside.status === 0 && inside.stdout.trim() === "true";
+  const dirty = isGitRepo && runCapture("git", ["status", "--porcelain"], repositoryRoot).stdout.trim() !== "";
+  const tags = isGitRepo ? runCapture("git", ["tag", "--list"], repositoryRoot).stdout.split(/\r?\n/).filter(Boolean) : [];
+  const manifestPath = (0, import_node_path36.join)(repositoryRoot, "package.json");
+  const manifest = fileExists(manifestPath) ? readJson(manifestPath) : {};
+  const nxJsonPath = (0, import_node_path36.join)(repositoryRoot, "nx.json");
+  const nxJson = fileExists(nxJsonPath) ? readJson(nxJsonPath) : {};
+  const ci = [];
+  const pipelines = [];
+  if ((0, import_node_fs31.existsSync)((0, import_node_path36.join)(repositoryRoot, "azure-pipelines.yml"))) {
+    ci.push("azure");
+    pipelines.push((0, import_node_path36.join)(repositoryRoot, "azure-pipelines.yml"));
+  }
+  const workflows = (0, import_node_path36.join)(repositoryRoot, ".github", "workflows");
+  if ((0, import_node_fs31.existsSync)(workflows)) {
+    const files = (0, import_node_fs31.readdirSync)(workflows).filter((file) => /\.ya?ml$/.test(file));
+    if (files.length > 0) {
+      ci.push("github");
+      pipelines.push(...files.map((file) => (0, import_node_path36.join)(workflows, file)));
+    }
+  }
+  const rootFiles = (0, import_node_fs31.readdirSync)(repositoryRoot);
+  return {
+    isGitRepo,
+    dirty,
+    packageManager: LOCKFILES.find(([file]) => rootFiles.includes(file))?.[1],
+    nxVersion: manifest.devDependencies?.nx ?? manifest.dependencies?.nx,
+    alreadyMnci: nxJson.mnci !== void 0,
+    projects: locateProjects(repositoryRoot).map(({ name, dir, ecosystem }) => ({ name, dir, ecosystem })),
+    tagCount: tags.length,
+    strandedTags: isGitRepo ? locateStrandedReleaseTags(repositoryRoot, nxJson.release?.releaseTag?.pattern) : [],
+    ci,
+    pipelineUsesMnci: pipelines.some((file) => /\bmnci ci\b/.test((0, import_node_fs31.readFileSync)(file, "utf8"))),
+    retiredTooling: [.../* @__PURE__ */ new Set([...rootFiles.filter((file) => RETIRED_FILE_PATTERN.test(file) || file === ".verdaccio"), ...retiredNamesIn(manifest)])],
+    personalFiles: PERSONAL_FILES.filter((file) => rootFiles.includes(file))
+  };
+}
+
+// src/repository-adoption/judge-adoption.policy.ts
+function judgeAdoption(facts) {
+  const findings = [];
+  const blocker = (detail, step) => {
+    findings.push({ severity: "blocker", detail, step });
+  };
+  const warning = (detail, step) => {
+    findings.push({ severity: "warning", detail, step });
+  };
+  if (!facts.isGitRepo) {
+    blocker("this directory is not a git repository", "run `git init` (or clone the repository) so every step can be its own commit");
+  } else if (facts.dirty) {
+    blocker("the working tree has uncommitted changes", "commit or stash them, so adoption starts from a state you can return to");
+  }
+  if (facts.packageManager !== void 0 && facts.packageManager !== "npm") {
+    blocker(`the repository uses ${facts.packageManager}; mnci workspaces are npm workspaces`, "convert to npm first (out of scope for adopt for now)");
+  }
+  if (facts.projects.length === 0) {
+    blocker("no project manifest was found under the repository", "run mnci adopt from the repository root, or `mnci new` for an empty one");
+  }
+  if (facts.alreadyMnci) {
+    warning("nx.json already carries an mnci block, so this is an mnci workspace", "use `mnci upgrade`; adopt is for repositories mnci has not touched");
+  }
+  if (facts.nxVersion === void 0) {
+    warning("Nx is not installed", "the toolchain step installs the Nx family at the version mnci supports (#380)");
+  }
+  if (facts.strandedTags.length > 0) {
+    warning(
+      `${facts.strandedTags.length} project(s) have release tags only under an old name (${facts.strandedTags.map((entry) => entry.project).join(", ")})`,
+      "the tags step creates the baseline tags before the first release (#379)"
+    );
+  }
+  if (facts.retiredTooling.length > 0) {
+    warning(`retired tooling is present: ${facts.retiredTooling.join(", ")}`, "the toolchain step removes it (#380)");
+  }
+  if (facts.ci.length > 0 && !facts.pipelineUsesMnci) {
+    warning(`an existing ${facts.ci.join(" and ")} pipeline does not call mnci`, "the pipeline step moves its custom steps into slots (#381)");
+  }
+  if (facts.personalFiles.length > 0) {
+    warning(`${facts.personalFiles.join(", ")} exist and are yours`, "adoption leaves them alone; only a block marked by Nx is ever removed");
+  }
+  const ordered = [...findings.filter((finding) => finding.severity === "blocker"), ...findings.filter((finding) => finding.severity === "warning")];
+  return { ready: ordered.every((finding) => finding.severity !== "blocker"), facts, findings: ordered };
+}
+
+// src/repository-adoption/run-adopt.use-case.ts
+function reportAdoption(repositoryRoot) {
+  return judgeAdoption(inspectRepository(repositoryRoot));
+}
+function runAdopt(repositoryRoot, options = {}) {
+  const report = reportAdoption(repositoryRoot);
+  if (!report.ready) {
+    process.exitCode = 1;
+  }
+  if (options.json === true) {
+    printJson(report);
+    return;
+  }
+  const { facts } = report;
+  logger.info(`${facts.projects.length} project(s), ${facts.tagCount} tag(s), ${facts.packageManager ?? "no lockfile"}, nx ${facts.nxVersion ?? "not installed"}`);
+  for (const finding of report.findings) {
+    const line = `${finding.severity === "blocker" ? "BLOCKER" : "warning"}: ${finding.detail}
+    next: ${finding.step}`;
+    if (finding.severity === "blocker") {
+      logger.error(line);
+    } else {
+      logger.warn(line);
+    }
+  }
+  if (report.ready) {
+    logger.success("Nothing blocks adoption. This was a read-only report; nothing was changed.");
+  } else {
+    logger.error("Adoption is blocked. Clear the blockers above and run the report again.");
+  }
+}
+
 // src/command-catalog/command-groups.config.ts
 var COMMAND_GROUPS = {
   new: "workspace",
   upgrade: "workspace",
   doctor: "workspace",
+  adopt: "inspect",
   add: "projects",
   install: "dependencies",
   sync: "dependencies",
@@ -8546,11 +8690,11 @@ function runCommands(program, options) {
 }
 
 // src/workspace-info/list-projects.use-case.ts
-var import_node_path35 = require("path");
+var import_node_path37 = require("path");
 var TYPE_TAG_PREFIX = "type:";
 function listProjects(workspaceRoot) {
   return locateProjects(workspaceRoot).map((location) => {
-    const projectJsonPath = (0, import_node_path35.join)(workspaceRoot, location.dir, "project.json");
+    const projectJsonPath = (0, import_node_path37.join)(workspaceRoot, location.dir, "project.json");
     const project = fileExists(projectJsonPath) ? readJson(projectJsonPath) : {};
     const typeTag = (project.tags ?? []).find((tag) => tag.startsWith(TYPE_TAG_PREFIX));
     return {
@@ -8563,7 +8707,7 @@ function listProjects(workspaceRoot) {
   }).toSorted((a, b) => a.dir.localeCompare(b.dir));
 }
 function runProjects(workspaceRoot, options) {
-  if (!fileExists((0, import_node_path35.join)(workspaceRoot, "nx.json"))) {
+  if (!fileExists((0, import_node_path37.join)(workspaceRoot, "nx.json"))) {
     throw new Error("No nx.json found here. Run `projects` from the workspace root.");
   }
   const projects = listProjects(workspaceRoot);
@@ -8577,11 +8721,11 @@ function runProjects(workspaceRoot, options) {
 }
 
 // src/workspace-info/read-workspace-info.use-case.ts
-var import_node_path37 = require("path");
+var import_node_path39 = require("path");
 
 // src/cli-version/check-for-update.use-case.ts
-var import_node_fs30 = require("fs");
-var import_node_path36 = require("path");
+var import_node_fs32 = require("fs");
+var import_node_path38 = require("path");
 var import_cross_spawn3 = __toESM(require("cross-spawn"));
 var PACKAGE_NAME2 = "@mnci/cli";
 var REGISTRY_TIMEOUT_MS = 2e3;
@@ -8640,8 +8784,8 @@ function releaseTriple(version) {
 }
 function readCliVersion(packageDirectory) {
   try {
-    const manifestPath = (0, import_node_path36.join)(packageDirectory, "..", "package.json");
-    const manifest = JSON.parse((0, import_node_fs30.readFileSync)(manifestPath, "utf8"));
+    const manifestPath = (0, import_node_path38.join)(packageDirectory, "..", "package.json");
+    const manifest = JSON.parse((0, import_node_fs32.readFileSync)(manifestPath, "utf8"));
     return manifest.version ?? "0.0.0";
   } catch {
     return "0.0.0";
@@ -8651,7 +8795,7 @@ function readCliVersion(packageDirectory) {
 // src/workspace-info/read-workspace-info.use-case.ts
 function readWorkspaceInfo(workspaceRoot, cliVersion) {
   const latest = fetchLatestVersion() ?? null;
-  const isWorkspace = fileExists((0, import_node_path37.join)(workspaceRoot, "nx.json"));
+  const isWorkspace = fileExists((0, import_node_path39.join)(workspaceRoot, "nx.json"));
   return {
     cli: {
       version: cliVersion,
@@ -8672,8 +8816,8 @@ function runInfo(workspaceRoot, cliVersion, options) {
 }
 
 // src/workspace-creation/adopt-directory.use-case.ts
-var import_node_fs31 = require("fs");
-var import_node_path38 = require("path");
+var import_node_fs33 = require("fs");
+var import_node_path40 = require("path");
 var NEVER_COPIED = /* @__PURE__ */ new Set([".git", "node_modules"]);
 var AGENT_AND_CI_ENTRIES = [
   "AGENTS.md",
@@ -8704,13 +8848,13 @@ var PREFLIGHT_BLOCKERS = [
   "packages"
 ];
 function assertAdoptableDirectory(target) {
-  if (!(0, import_node_fs31.existsSync)(target)) {
+  if (!(0, import_node_fs33.existsSync)(target)) {
     throw new Error(`--into '${target}' does not exist. Create or clone it first.`);
   }
-  if (!(0, import_node_fs31.statSync)(target).isDirectory()) {
+  if (!(0, import_node_fs33.statSync)(target).isDirectory()) {
     throw new Error(`--into '${target}' is not a directory.`);
   }
-  const blockers = PREFLIGHT_BLOCKERS.filter((entry) => (0, import_node_fs31.existsSync)((0, import_node_path38.join)(target, entry)));
+  const blockers = PREFLIGHT_BLOCKERS.filter((entry) => (0, import_node_fs33.existsSync)((0, import_node_path40.join)(target, entry)));
   if (blockers.length > 0) {
     throw new Error(
       `--into '${target}' already holds ${blockers.join(", ")}, so it is a project already. Use \`mnci upgrade\` to re-apply the overlay to an existing workspace, or point --into at an empty checkout.`
@@ -8718,15 +8862,15 @@ function assertAdoptableDirectory(target) {
   }
 }
 function mergeGitignore(generatedFile, targetFile) {
-  const existing = (0, import_node_fs31.readFileSync)(targetFile, "utf8");
+  const existing = (0, import_node_fs33.readFileSync)(targetFile, "utf8");
   const present = new Set(existing.split("\n").map((line) => line.trim()));
-  const additions = (0, import_node_fs31.readFileSync)(generatedFile, "utf8").split("\n").map((line) => line.trimEnd()).filter((line) => {
+  const additions = (0, import_node_fs33.readFileSync)(generatedFile, "utf8").split("\n").map((line) => line.trimEnd()).filter((line) => {
     const trimmed = line.trim();
     return trimmed !== "" && !trimmed.startsWith("#") && !present.has(trimmed);
   });
   if (additions.length === 0) return false;
   const separator = existing.endsWith("\n") ? "" : "\n";
-  (0, import_node_fs31.writeFileSync)(
+  (0, import_node_fs33.writeFileSync)(
     targetFile,
     `${existing}${separator}
 # Added by mnci (Nx workspace)
@@ -8736,9 +8880,9 @@ ${additions.join("\n")}
   return true;
 }
 function adoptGeneratedWorkspace(generatedRoot, target) {
-  const entries = (0, import_node_fs31.readdirSync)(generatedRoot).filter((entry) => !NEVER_COPIED.has(entry));
+  const entries = (0, import_node_fs33.readdirSync)(generatedRoot).filter((entry) => !NEVER_COPIED.has(entry));
   const collisions = entries.filter(
-    (entry) => (0, import_node_fs31.existsSync)((0, import_node_path38.join)(target, entry)) && !EXISTING_WINS.has(entry) && entry !== ".gitignore"
+    (entry) => (0, import_node_fs33.existsSync)((0, import_node_path40.join)(target, entry)) && !EXISTING_WINS.has(entry) && entry !== ".gitignore"
   );
   if (collisions.length > 0) {
     throw new Error(
@@ -8747,28 +8891,28 @@ function adoptGeneratedWorkspace(generatedRoot, target) {
   }
   const result = { copied: [], kept: [], mergedGitignore: false };
   for (const entry of entries) {
-    const from = (0, import_node_path38.join)(generatedRoot, entry);
-    const to = (0, import_node_path38.join)(target, entry);
-    if (entry === ".gitignore" && (0, import_node_fs31.existsSync)(to)) {
+    const from = (0, import_node_path40.join)(generatedRoot, entry);
+    const to = (0, import_node_path40.join)(target, entry);
+    if (entry === ".gitignore" && (0, import_node_fs33.existsSync)(to)) {
       result.mergedGitignore = mergeGitignore(from, to);
       result.kept.push(entry);
       continue;
     }
-    if ((0, import_node_fs31.existsSync)(to)) {
+    if ((0, import_node_fs33.existsSync)(to)) {
       result.kept.push(entry);
       continue;
     }
-    (0, import_node_fs31.cpSync)(from, to, { recursive: true });
+    (0, import_node_fs33.cpSync)(from, to, { recursive: true });
     result.copied.push(entry);
   }
-  (0, import_node_fs31.rmSync)(generatedRoot, { recursive: true, force: true });
+  (0, import_node_fs33.rmSync)(generatedRoot, { recursive: true, force: true });
   return result;
 }
 
 // src/workspace-creation/create-workspace.use-case.ts
-var import_node_fs32 = require("fs");
+var import_node_fs34 = require("fs");
 var import_node_os2 = require("os");
-var import_node_path39 = require("path");
+var import_node_path41 = require("path");
 function nxCloudProviderValue(ci) {
   return ci === "azure" ? "azure" : "github";
 }
@@ -8811,9 +8955,9 @@ async function resolveRegistry(options) {
   return await promptRegistry();
 }
 async function runNew(name, options) {
-  const adoptTarget = options.into === void 0 ? void 0 : (0, import_node_path39.resolve)(process.cwd(), options.into);
+  const adoptTarget = options.into === void 0 ? void 0 : (0, import_node_path41.resolve)(process.cwd(), options.into);
   if (adoptTarget !== void 0) assertAdoptableDirectory(adoptTarget);
-  const workspaceName = name ?? (adoptTarget === void 0 ? await promptText("Workspace name") : (0, import_node_path39.basename)(adoptTarget));
+  const workspaceName = name ?? (adoptTarget === void 0 ? await promptText("Workspace name") : (0, import_node_path41.basename)(adoptTarget));
   assertValidProjectName(workspaceName, "Workspace name");
   const scope = options.scope ?? (options.yes ? `@${workspaceName}` : await promptText("npm scope for publishable packages", `@${workspaceName}`));
   const registry = await resolveRegistry(options);
@@ -8826,8 +8970,8 @@ async function runNew(name, options) {
   const npmAuth = resolveNpmAuth(options.npmAuth, registry, ci);
   const stack = await resolveStack(options);
   const nxCloud = options.nxCloud ?? (options.yes ? false : await promptNxCloud());
-  const stagingParent = adoptTarget === void 0 ? process.cwd() : (0, import_node_fs32.mkdtempSync)((0, import_node_path39.join)((0, import_node_os2.tmpdir)(), "mnci-new-"));
-  let workspaceRoot = (0, import_node_path39.join)(stagingParent, workspaceName);
+  const stagingParent = adoptTarget === void 0 ? process.cwd() : (0, import_node_fs34.mkdtempSync)((0, import_node_path41.join)((0, import_node_os2.tmpdir)(), "mnci-new-"));
+  let workspaceRoot = (0, import_node_path41.join)(stagingParent, workspaceName);
   try {
     logger.step(`Creating Nx workspace '${workspaceName}' (preset: ts)`);
     runNpx(
@@ -8850,7 +8994,7 @@ async function runNew(name, options) {
       workspaceRoot = adoptTarget;
     }
   } finally {
-    if (adoptTarget !== void 0) (0, import_node_fs32.rmSync)(stagingParent, { recursive: true, force: true });
+    if (adoptTarget !== void 0) (0, import_node_fs34.rmSync)(stagingParent, { recursive: true, force: true });
   }
   logger.step(
     "Applying MoNecromanCI overlay (VS Code workspace, release config, .npmrc, commitlint, pipeline, stack)"
@@ -8860,8 +9004,8 @@ async function runNew(name, options) {
     { workspaceName, scope, registry, agent, variableGroup, ci, stack, ...npmAuth && { npmAuth } },
     logger.detail
   );
-  (0, import_node_fs32.rmSync)((0, import_node_path39.join)(workspaceRoot, "node_modules"), { recursive: true, force: true });
-  (0, import_node_fs32.rmSync)((0, import_node_path39.join)(workspaceRoot, "package-lock.json"), { force: true });
+  (0, import_node_fs34.rmSync)((0, import_node_path41.join)(workspaceRoot, "node_modules"), { recursive: true, force: true });
+  (0, import_node_fs34.rmSync)((0, import_node_path41.join)(workspaceRoot, "package-lock.json"), { force: true });
   logger.step("Installing the toolchain (commitlint + husky + linting/formatting)");
   const installStatus = runShell(
     "npm",
@@ -8899,12 +9043,12 @@ function projectKindHintLines(kinds = PROJECT_KINDS) {
 }
 
 // src/workspace-creation/interactive-wizard.use-case.ts
-var import_node_path41 = require("path");
+var import_node_path43 = require("path");
 var import_prompts4 = require("@inquirer/prompts");
 
 // src/workspace-upgrade/upgrade-workspace.use-case.ts
-var import_node_fs33 = require("fs");
-var import_node_path40 = require("path");
+var import_node_fs35 = require("fs");
+var import_node_path42 = require("path");
 function resolveRegistry2(options, persisted) {
   if (options.registry === "azure-artifacts" || options.organization && options.artifactsFeed) {
     const persistedAzure = persisted?.kind === "azure-artifacts" ? persisted : void 0;
@@ -8933,7 +9077,7 @@ function resolveWorkspaceName(workspaceRoot, persisted) {
     return persisted.workspaceName;
   }
   try {
-    const existing = (0, import_node_fs33.readdirSync)(workspaceRoot).find(
+    const existing = (0, import_node_fs35.readdirSync)(workspaceRoot).find(
       (file) => file.endsWith(".code-workspace") && file !== "undefined.code-workspace"
     );
     if (existing) {
@@ -8941,11 +9085,11 @@ function resolveWorkspaceName(workspaceRoot, persisted) {
     }
   } catch {
   }
-  return (0, import_node_path40.basename)(workspaceRoot);
+  return (0, import_node_path42.basename)(workspaceRoot);
 }
 function detectNpmAuth(workspaceRoot) {
   try {
-    return (0, import_node_fs33.readFileSync)((0, import_node_path40.join)(workspaceRoot, "azure-pipelines.yml"), "utf8").includes("npmAuthenticate@0") ? "build-identity" : void 0;
+    return (0, import_node_fs35.readFileSync)((0, import_node_path42.join)(workspaceRoot, "azure-pipelines.yml"), "utf8").includes("npmAuthenticate@0") ? "build-identity" : void 0;
   } catch {
     return void 0;
   }
@@ -8992,7 +9136,7 @@ function resolveOverlayOptions(workspaceRoot, options, persisted) {
   };
 }
 function runUpgrade(workspaceRoot, options) {
-  if (!fileExists((0, import_node_path40.join)(workspaceRoot, "nx.json"))) {
+  if (!fileExists((0, import_node_path42.join)(workspaceRoot, "nx.json"))) {
     throw new Error(
       `No nx.json found in ${workspaceRoot} \u2014 this does not look like an Nx workspace. Run 'mnci upgrade' from the workspace root.`
     );
@@ -9066,13 +9210,18 @@ function runUpgrade(workspaceRoot, options) {
     "Formatting the workspace (eslint --fix) \u2014 the slowest step, minutes on a large workspace"
   );
   runFormatter(workspaceRoot);
+  const nxJson = readJson((0, import_node_path42.join)(workspaceRoot, "nx.json"));
+  const stranded = locateStrandedReleaseTags(workspaceRoot, nxJson.release?.releaseTag?.pattern);
+  for (const entry of stranded) {
+    logger.warn(`${entry.project} has release tags only under ${entry.oldTag}: nx release would restart it from its disk version. Run \`git tag ${entry.newTag} ${entry.oldTag}^{commit}\` before the next release (\`mnci doctor\` lists them all).`);
+  }
   logger.success("Done. Review the changes with `git diff` before committing.");
   logger.info("Run `npm install` and commit package-lock.json too: the overlay may have added or moved a dependency, and CI installs with `npm ci`, which refuses a stale lockfile.");
 }
 
 // src/workspace-creation/interactive-wizard.use-case.ts
 async function runInteractive() {
-  const inWorkspace = fileExists((0, import_node_path41.join)(process.cwd(), "nx.json"));
+  const inWorkspace = fileExists((0, import_node_path43.join)(process.cwd(), "nx.json"));
   const choiceNew = { name: "Create a new monorepo", value: "new" };
   const choiceAdd = { name: "Add a project to this workspace", value: "add" };
   const choiceUpgrade = {
@@ -9124,6 +9273,9 @@ function buildProgram(cliVersion) {
   ).option("--json", "print the findings as one JSON document, each with its remedy").action((options) => {
     runDoctor(process.cwd(), options);
   });
+  program.command("adopt").description("Read an existing repository and report what bringing it under mnci would involve: blockers, warnings and the step that clears each. Read-only; exits non-zero when something blocks").option("--json", "print the report as one JSON document").action((options) => {
+    runAdopt(process.cwd(), options);
+  });
   program.command("ci").addArgument(new import_commander.Argument("<phase>", "which phase of the pipeline to run").choices(CI_PHASES)).description(
     "Run a phase of the CI pipeline here, the same way CI runs it: `verify` is the sync check and then every project (or, in a pull request, the affected ones) through lint, typecheck, test and build. `setup` installs the Python, Go and Flutter toolchains the workspace needs, `audit` fails on a known advisory that has a fix, `pack` builds the per-app artifacts, `release` versions, tags and publishes, and `native` builds the apps that need a C toolchain on this OS. Exits non-zero when it fails"
   ).action(async (phase) => {