@nifrajs/cli 2.11.0 → 2.12.0

package/dist/fix-recipes.js

@@ -0,0 +1,106 @@
+import { existsSync } from "node:fs";
+import { readFile, writeFile } from "node:fs/promises";
+import { join } from "node:path";
+import { resolveInsideProject } from "./project-path.js";
+const recipes = new Map();
+export function registerFixRecipe(recipe) {
+    if (recipes.has(recipe.id))
+        throw new Error(`duplicate fix recipe: ${recipe.id}`);
+    recipes.set(recipe.id, Object.freeze(recipe));
+}
+export function getFixRecipe(id) {
+    return recipes.get(id);
+}
+export function listFixRecipes() {
+    return Object.freeze([...recipes.values()]);
+}
+registerFixRecipe({
+    id: "security.timing-safe-equal",
+    description: "Replace a direct secret comparison with a length check and timing-safe comparison.",
+    verify: "nifra check --lints-only",
+    async apply(root, diagnostic) {
+        if (diagnostic.file === undefined || diagnostic.line === undefined)
+            return [];
+        const path = await resolveInsideProject(root, diagnostic.file);
+        if (path === undefined)
+            return [];
+        const lines = (await readFile(path, "utf8")).split("\n");
+        const index = diagnostic.line - 1;
+        const original = lines[index];
+        if (original === undefined || original.includes("@nifra-gate-reviewed"))
+            return [];
+        const comparison = /\b([A-Za-z_$][\w$]*)\s*(===|!==|==|!=)\s*([A-Za-z_$][\w$]*)/.exec(original);
+        if (comparison === null)
+            return [];
+        const left = comparison[1];
+        const operator = comparison[2];
+        const right = comparison[3];
+        const expression = `nifraTimingSafeEqual(${left}, ${right})`;
+        const replacement = operator === "!==" || operator === "!=" ? `!${expression}` : expression;
+        lines[index] = original.replace(comparison[0], replacement);
+        if (!lines.some((line) => line.includes("function nifraTimingSafeEqual"))) {
+            lines.unshift('import { timingSafeEqual } from "node:crypto"', "", "function nifraTimingSafeEqual(left: string, right: string): boolean {", "  const leftBytes = Buffer.from(left)", "  const rightBytes = Buffer.from(right)", "  return leftBytes.length === rightBytes.length && timingSafeEqual(leftBytes, rightBytes)", "}", "");
+        }
+        await writeFile(path, lines.join("\n"), "utf8");
+        return [diagnostic.file];
+    },
+});
+registerFixRecipe({
+    id: "manifest.sync",
+    description: "Regenerate generated server manifests from the current route tree.",
+    verify: "nifra check --lints-only",
+    async apply(root) {
+        const { syncServerManifests } = await import("./sync-manifest.js");
+        const results = await syncServerManifests(root);
+        return results.filter((result) => result.changed).map((result) => result.file);
+    },
+});
+registerFixRecipe({
+    id: "contracts.snapshot",
+    description: "Refresh the opt-in contract lock after reviewing an intentional route change.",
+    verify: "nifra contracts check",
+    async apply(root) {
+        const { snapshotContracts } = await import("./contracts.js");
+        await snapshotContracts(root);
+        return ["contracts.lock.json"];
+    },
+});
+registerFixRecipe({
+    id: "workspace-dist.rebuild",
+    description: "Rebuild the workspace-linked package whose artifact is older than its source.",
+    verify: "nifra doctor --json",
+    async apply(root, diagnostic) {
+        const packageName = diagnostic.evidence?.[0];
+        if (packageName === undefined || !/^@?[A-Za-z0-9_.-]+(?:\/[A-Za-z0-9_.-]+)?$/.test(packageName))
+            return [];
+        // The segment regex above admits "." and "..", which would resolve outside node_modules.
+        if (packageName.split("/").some((segment) => segment === "." || segment === ".."))
+            return [];
+        const packageDir = await resolveInsideProject(root, join("node_modules", packageName));
+        if (packageDir === undefined)
+            return [];
+        const packageJson = await resolveInsideProject(root, join("node_modules", packageName, "package.json"));
+        if (packageJson === undefined || !existsSync(packageJson))
+            return [];
+        const proc = Bun.spawn(["bun", "run", "build"], {
+            cwd: packageDir,
+            stdout: "ignore",
+            stderr: "pipe",
+        });
+        const error = await new Response(proc.stderr).text();
+        const exitCode = await proc.exited;
+        if (exitCode !== 0)
+            throw new Error(error.trim() || `build failed for ${packageName}`);
+        return [diagnostic.evidence?.[1] ?? packageName];
+    },
+});
+export async function applyDiagnosticRecipe(root, diagnostic) {
+    const recipeId = diagnostic.fix?.recipe;
+    if (recipeId === undefined)
+        return [];
+    const recipe = getFixRecipe(recipeId);
+    if (recipe === undefined)
+        return [];
+    return recipe.apply(root, diagnostic);
+}
+//# sourceMappingURL=fix-recipes.js.map

package/dist/fix-recipes.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"fix-recipes.js","sourceRoot":"","sources":["../src/fix-recipes.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,SAAS,CAAA;AACpC,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAA;AACtD,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAA;AAEhC,OAAO,EAAE,oBAAoB,EAAE,MAAM,mBAAmB,CAAA;AASxD,MAAM,OAAO,GAAG,IAAI,GAAG,EAAqB,CAAA;AAE5C,MAAM,UAAU,iBAAiB,CAAC,MAAiB;IACjD,IAAI,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,yBAAyB,MAAM,CAAC,EAAE,EAAE,CAAC,CAAA;IACjF,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAA;AAC/C,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,EAAU;IACrC,OAAO,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAA;AACxB,CAAC;AAED,MAAM,UAAU,cAAc;IAC5B,OAAO,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,CAAA;AAC7C,CAAC;AAED,iBAAiB,CAAC;IAChB,EAAE,EAAE,4BAA4B;IAChC,WAAW,EAAE,oFAAoF;IACjG,MAAM,EAAE,0BAA0B;IAClC,KAAK,CAAC,KAAK,CAAC,IAAI,EAAE,UAAU;QAC1B,IAAI,UAAU,CAAC,IAAI,KAAK,SAAS,IAAI,UAAU,CAAC,IAAI,KAAK,SAAS;YAAE,OAAO,EAAE,CAAA;QAC7E,MAAM,IAAI,GAAG,MAAM,oBAAoB,CAAC,IAAI,EAAE,UAAU,CAAC,IAAI,CAAC,CAAA;QAC9D,IAAI,IAAI,KAAK,SAAS;YAAE,OAAO,EAAE,CAAA;QACjC,MAAM,KAAK,GAAG,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAA;QACxD,MAAM,KAAK,GAAG,UAAU,CAAC,IAAI,GAAG,CAAC,CAAA;QACjC,MAAM,QAAQ,GAAG,KAAK,CAAC,KAAK,CAAC,CAAA;QAC7B,IAAI,QAAQ,KAAK,SAAS,IAAI,QAAQ,CAAC,QAAQ,CAAC,sBAAsB,CAAC;YAAE,OAAO,EAAE,CAAA;QAClF,MAAM,UAAU,GAAG,6DAA6D,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAA;QAC/F,IAAI,UAAU,KAAK,IAAI;YAAE,OAAO,EAAE,CAAA;QAClC,MAAM,IAAI,GAAG,UAAU,CAAC,CAAC,CAAW,CAAA;QACpC,MAAM,QAAQ,GAAG,UAAU,CAAC,CAAC,CAAW,CAAA;QACxC,MAAM,KAAK,GAAG,UAAU,CAAC,CAAC,CAAW,CAAA;QACrC,MAAM,UAAU,GAAG,wBAAwB,IAAI,KAAK,KAAK,GAAG,CAAA;QAC5D,MAAM,WAAW,GAAG,QAAQ,KAAK,KAAK,IAAI,QAAQ,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,UAAU,EAAE,CAAC,CAAC,CAAC,UAAU,CAAA;QAC3F,KAAK,CAAC,KAAK,CAAC,GAAG,QAAQ,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,WAAW,CAAC,CAAA;QAC3D,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,+BAA+B,CAAC,CAAC,EAAE,CAAC;YAC1E,KAAK,CAAC,OAAO,CACX,+CAA+C,EAC/C,EAAE,EACF,uEAAuE,EACvE,uCAAuC,EACvC,yCAAyC,EACzC,2FAA2F,EAC3F,GAAG,EACH,EAAE,CACH,CAAA;QACH,CAAC;QACD,MAAM,SAAS,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC,CAAA;QAC/C,OAAO,CAAC,UAAU,CAAC,IAAI,CAAC,CAAA;IAC1B,CAAC;CACF,CAAC,CAAA;AAEF,iBAAiB,CAAC;IAChB,EAAE,EAAE,eAAe;IACnB,WAAW,EAAE,oEAAoE;IACjF,MAAM,EAAE,0BAA0B;IAClC,KAAK,CAAC,KAAK,CAAC,IAAI;QACd,MAAM,EAAE,mBAAmB,EAAE,GAAG,MAAM,MAAM,CAAC,oBAAoB,CAAC,CAAA;QAClE,MAAM,OAAO,GAAG,MAAM,mBAAmB,CAAC,IAAI,CAAC,CAAA;QAC/C,OAAO,OAAO,CAAC,MAAM,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAA;IAChF,CAAC;CACF,CAAC,CAAA;AAEF,iBAAiB,CAAC;IAChB,EAAE,EAAE,oBAAoB;IACxB,WAAW,EAAE,+EAA+E;IAC5F,MAAM,EAAE,uBAAuB;IAC/B,KAAK,CAAC,KAAK,CAAC,IAAI;QACd,MAAM,EAAE,iBAAiB,EAAE,GAAG,MAAM,MAAM,CAAC,gBAAgB,CAAC,CAAA;QAC5D,MAAM,iBAAiB,CAAC,IAAI,CAAC,CAAA;QAC7B,OAAO,CAAC,qBAAqB,CAAC,CAAA;IAChC,CAAC;CACF,CAAC,CAAA;AAEF,iBAAiB,CAAC;IAChB,EAAE,EAAE,wBAAwB;IAC5B,WAAW,EAAE,+EAA+E;IAC5F,MAAM,EAAE,qBAAqB;IAC7B,KAAK,CAAC,KAAK,CAAC,IAAI,EAAE,UAAU;QAC1B,MAAM,WAAW,GAAG,UAAU,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,CAAA;QAC5C,IAAI,WAAW,KAAK,SAAS,IAAI,CAAC,2CAA2C,CAAC,IAAI,CAAC,WAAW,CAAC;YAC7F,OAAO,EAAE,CAAA;QACX,yFAAyF;QACzF,IAAI,WAAW,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,KAAK,GAAG,IAAI,OAAO,KAAK,IAAI,CAAC;YAAE,OAAO,EAAE,CAAA;QAC5F,MAAM,UAAU,GAAG,MAAM,oBAAoB,CAAC,IAAI,EAAE,IAAI,CAAC,cAAc,EAAE,WAAW,CAAC,CAAC,CAAA;QACtF,IAAI,UAAU,KAAK,SAAS;YAAE,OAAO,EAAE,CAAA;QACvC,MAAM,WAAW,GAAG,MAAM,oBAAoB,CAC5C,IAAI,EACJ,IAAI,CAAC,cAAc,EAAE,WAAW,EAAE,cAAc,CAAC,CAClD,CAAA;QACD,IAAI,WAAW,KAAK,SAAS,IAAI,CAAC,UAAU,CAAC,WAAW,CAAC;YAAE,OAAO,EAAE,CAAA;QACpE,MAAM,IAAI,GAAG,GAAG,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,KAAK,EAAE,OAAO,CAAC,EAAE;YAC9C,GAAG,EAAE,UAAU;YACf,MAAM,EAAE,QAAQ;YAChB,MAAM,EAAE,MAAM;SACf,CAAC,CAAA;QACF,MAAM,KAAK,GAAG,MAAM,IAAI,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,CAAA;QACpD,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,MAAM,CAAA;QAClC,IAAI,QAAQ,KAAK,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,KAAK,CAAC,IAAI,EAAE,IAAI,oBAAoB,WAAW,EAAE,CAAC,CAAA;QACtF,OAAO,CAAC,UAAU,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,IAAI,WAAW,CAAC,CAAA;IAClD,CAAC;CACF,CAAC,CAAA;AAEF,MAAM,CAAC,KAAK,UAAU,qBAAqB,CACzC,IAAY,EACZ,UAAsB;IAEtB,MAAM,QAAQ,GAAG,UAAU,CAAC,GAAG,EAAE,MAAM,CAAA;IACvC,IAAI,QAAQ,KAAK,SAAS;QAAE,OAAO,EAAE,CAAA;IACrC,MAAM,MAAM,GAAG,YAAY,CAAC,QAAQ,CAAC,CAAA;IACrC,IAAI,MAAM,KAAK,SAAS;QAAE,OAAO,EAAE,CAAA;IACnC,OAAO,MAAM,CAAC,KAAK,CAAC,IAAI,EAAE,UAAU,CAAC,CAAA;AACvC,CAAC"}

package/dist/init-agents.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"init-agents.d.ts","sourceRoot":"","sources":["../src/init-agents.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAcH,kGAAkG;AAClG,MAAM,WAAW,oBAAoB;IACnC,wCAAwC;IACxC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;IACrB;uGACmG;IACnG,QAAQ,CAAC,MAAM,EAAE,OAAO,GAAG,UAAU,GAAG,SAAS,GAAG,SAAS,CAAA;IAC7D,2FAA2F;IAC3F,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAA;CACvB;AAED,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAA;IACpB,QAAQ,CAAC,KAAK,EAAE,SAAS,oBAAoB,EAAE,CAAA;CAChD;AAED,MAAM,WAAW,iBAAiB;IAChC,mGAAmG;IACnG,QAAQ,CAAC,KAAK,CAAC,EAAE,OAAO,CAAA;CACzB;AAED;;gFAEgF;AAChF,wBAAgB,QAAQ,CAAC,GAAG,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,MAAM,CAOzD;AA0DD;;;GAGG;AACH,wBAAsB,UAAU,CAC9B,GAAG,EAAE,MAAM,EACX,IAAI,GAAE,iBAAsB,GAC3B,OAAO,CAAC,gBAAgB,CAAC,CAS3B;AASD,mDAAmD;AACnD,wBAAgB,gBAAgB,CAAC,MAAM,EAAE,gBAAgB,GAAG,MAAM,CAUjE;AAED;;;;GAIG;AACH,wBAAsB,aAAa,CACjC,GAAG,EAAE,MAAM,EACX,IAAI,GAAE;IAAE,QAAQ,CAAC,IAAI,CAAC,EAAE,OAAO,CAAC;IAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,OAAO,CAAA;CAAO,GAC/D,OAAO,CAAC,OAAO,CAAC,CAQlB"}
+{"version":3,"file":"init-agents.d.ts","sourceRoot":"","sources":["../src/init-agents.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAeH,kGAAkG;AAClG,MAAM,WAAW,oBAAoB;IACnC,wCAAwC;IACxC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;IACrB;uGACmG;IACnG,QAAQ,CAAC,MAAM,EAAE,OAAO,GAAG,UAAU,GAAG,SAAS,GAAG,SAAS,CAAA;IAC7D,2FAA2F;IAC3F,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAA;CACvB;AAED,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAA;IACpB,QAAQ,CAAC,KAAK,EAAE,SAAS,oBAAoB,EAAE,CAAA;CAChD;AAED,MAAM,WAAW,iBAAiB;IAChC,mGAAmG;IACnG,QAAQ,CAAC,KAAK,CAAC,EAAE,OAAO,CAAA;CACzB;AAED;;gFAEgF;AAChF,wBAAgB,QAAQ,CAAC,GAAG,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,MAAM,CAOzD;AAkHD;;;GAGG;AACH,wBAAsB,UAAU,CAC9B,GAAG,EAAE,MAAM,EACX,IAAI,GAAE,iBAAsB,GAC3B,OAAO,CAAC,gBAAgB,CAAC,CAS3B;AASD,mDAAmD;AACnD,wBAAgB,gBAAgB,CAAC,MAAM,EAAE,gBAAgB,GAAG,MAAM,CAUjE;AAED;;;;GAIG;AACH,wBAAsB,aAAa,CACjC,GAAG,EAAE,MAAM,EACX,IAAI,GAAE;IAAE,QAAQ,CAAC,IAAI,CAAC,EAAE,OAAO,CAAC;IAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,OAAO,CAAA;CAAO,GAC/D,OAAO,CAAC,OAAO,CAAC,CAQlB"}

package/dist/init-agents.js

@@ -17,7 +17,7 @@
  * is not needed for that append since it's additive. Every write path is resolved + confined under the
  * cwd (no `..` traversal escaping the project root).
  */
-import { mkdir, readFile, writeFile } from "node:fs/promises";
+import { lstat, mkdir, readFile, rename, rm, writeFile } from "node:fs/promises";
 import { isAbsolute, relative, resolve } from "node:path";
 import { AGENTS_MD_PATH, agentsMcpSection, CLAUDE_MD_PATH, CURSOR_MCP_JSON_PATH, claudeMd, MCP_JSON_PATH, mcpJson, } from "create-nifra/agent-files";
 /** Confine a project-relative path under `cwd` and return the absolute path. Rejects a spec that escapes
@@ -34,20 +34,74 @@ export function safeJoin(cwd, rel) {
 const fileExists = (path) => readFile(path)
     .then(() => true)
     .catch(() => false);
+/** `lstat`, with "it isn't there" reported as `undefined` instead of a throw. Every other failure
+ * (EACCES, ELOOP, ...) still propagates - only absence is an expected outcome here. */
+async function lstatOrMissing(path) {
+    try {
+        return await lstat(path);
+    }
+    catch (error) {
+        if (error.code === "ENOENT")
+            return undefined;
+        throw error;
+    }
+}
+/**
+ * Refuse to write through a symlinked ancestor. `safeJoin` only proves the *textual* path stays
+ * under the project root; a symlinked `.cursor` still lands the write wherever it points. The walk
+ * stops at the first missing segment - `mkdir` will create the rest, so there is nothing to check.
+ */
+async function assertSafeParents(cwd, abs) {
+    const rel = relative(cwd, resolve(abs, ".."));
+    let current = cwd;
+    for (const part of rel.split(/[\\/]/).filter(Boolean)) {
+        current = resolve(current, part);
+        const stat = await lstatOrMissing(current);
+        if (stat === undefined)
+            break;
+        if (stat.isSymbolicLink() || !stat.isDirectory()) {
+            throw new Error(`[nifra] refusing unsafe parent path: ${part}`);
+        }
+    }
+}
+/** Refuse to write anything that is not a plain absent-or-regular file: a symlink here would
+ * redirect the write, and a directory or device node would make it fail in a confusing way. */
+async function assertRegularTarget(abs, rel) {
+    const stat = await lstatOrMissing(abs);
+    if (stat !== undefined && (stat.isSymbolicLink() || !stat.isFile())) {
+        throw new Error(`[nifra] refusing to write non-regular file: ${rel}`);
+    }
+}
 /**
  * Write a whole-file generator's output to `path` unless it already exists and `force` is false.
  * Returns the per-file result for the report.
  */
 async function writeOwned(cwd, rel, content, force) {
     const abs = safeJoin(cwd, rel);
+    await assertSafeParents(cwd, abs);
+    await assertRegularTarget(abs, rel);
     if (!force && (await fileExists(abs))) {
         return { path: rel, action: "skipped", note: "exists - pass --force to overwrite" };
     }
     // `.cursor/mcp.json` needs its parent dir; `recursive` is a no-op for the root-level files.
     await mkdir(resolve(abs, ".."), { recursive: true });
-    await writeFile(abs, content);
+    await atomicWrite(abs, content);
     return { path: rel, action: "wrote" };
 }
+/** Write via a sibling temp file so a crash mid-write can't leave a half-written config in place.
+ * `wx` fails rather than following an existing name, and the temp is cleaned up on any failure so a
+ * botched run doesn't litter the user's project. */
+async function atomicWrite(abs, content) {
+    const tmp = `${abs}.nifra-${process.pid}-${Date.now()}`;
+    await writeFile(tmp, content, { flag: "wx" });
+    try {
+        await rename(tmp, abs);
+    }
+    catch (error) {
+        await rm(tmp, { force: true });
+        throw error;
+    }
+}
 /**
  * AGENTS.md is additive, not owned: if it exists and already has the MCP section, leave it; if it exists
  * without the section, append the section (preserving the user's conventions); if it's absent, write a
@@ -56,6 +110,8 @@ async function writeOwned(cwd, rel, content, force) {
  */
 async function ensureAgentsMd(cwd) {
     const abs = safeJoin(cwd, AGENTS_MD_PATH);
+    await assertSafeParents(cwd, abs);
+    await assertRegularTarget(abs, AGENTS_MD_PATH);
     const section = agentsMcpSection();
     let existing;
     try {
@@ -65,7 +121,7 @@ async function ensureAgentsMd(cwd) {
         existing = undefined; // no AGENTS.md yet
     }
     if (existing === undefined) {
-        await writeFile(abs, `# AGENTS.md\n\nGuidance for AI coding agents working in this repo.\n\n${section}\n`);
+        await atomicWrite(abs, `# AGENTS.md\n\nGuidance for AI coding agents working in this repo.\n\n${section}\n`);
         return { path: AGENTS_MD_PATH, action: "wrote" };
     }
     // Match on the section heading, not the full body, so a reformatted-but-present section still counts.
@@ -73,7 +129,7 @@ async function ensureAgentsMd(cwd) {
         return { path: AGENTS_MD_PATH, action: "present", note: "already has an MCP section" };
     }
     const sep = existing.endsWith("\n") ? "\n" : "\n\n";
-    await writeFile(abs, `${existing}${sep}${section}\n`);
+    await atomicWrite(abs, `${existing}${sep}${section}\n`);
     return { path: AGENTS_MD_PATH, action: "appended" };
 }
 /**

package/dist/init-agents.js.map

@@ -1 +1 @@
-{"version":3,"file":"init-agents.js","sourceRoot":"","sources":["../src/init-agents.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAEH,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAA;AAC7D,OAAO,EAAE,UAAU,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,WAAW,CAAA;AACzD,OAAO,EACL,cAAc,EACd,gBAAgB,EAChB,cAAc,EACd,oBAAoB,EACpB,QAAQ,EACR,aAAa,EACb,OAAO,GACR,MAAM,0BAA0B,CAAA;AAuBjC;;gFAEgF;AAChF,MAAM,UAAU,QAAQ,CAAC,GAAW,EAAE,GAAW;IAC/C,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,EAAE,GAAG,CAAC,CAAA;IAC7B,MAAM,MAAM,GAAG,QAAQ,CAAC,GAAG,EAAE,GAAG,CAAC,CAAA;IACjC,IAAI,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC;QAClD,MAAM,IAAI,KAAK,CAAC,uDAAuD,GAAG,EAAE,CAAC,CAAA;IAC/E,CAAC;IACD,OAAO,GAAG,CAAA;AACZ,CAAC;AAED,MAAM,UAAU,GAAG,CAAC,IAAY,EAAoB,EAAE,CACpD,QAAQ,CAAC,IAAI,CAAC;KACX,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC;KAChB,KAAK,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC,CAAA;AAEvB;;;GAGG;AACH,KAAK,UAAU,UAAU,CACvB,GAAW,EACX,GAAW,EACX,OAAe,EACf,KAAc;IAEd,MAAM,GAAG,GAAG,QAAQ,CAAC,GAAG,EAAE,GAAG,CAAC,CAAA;IAC9B,IAAI,CAAC,KAAK,IAAI,CAAC,MAAM,UAAU,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC;QACtC,OAAO,EAAE,IAAI,EAAE,GAAG,EAAE,MAAM,EAAE,SAAS,EAAE,IAAI,EAAE,oCAAoC,EAAE,CAAA;IACrF,CAAC;IACD,4FAA4F;IAC5F,MAAM,KAAK,CAAC,OAAO,CAAC,GAAG,EAAE,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAA;IACpD,MAAM,SAAS,CAAC,GAAG,EAAE,OAAO,CAAC,CAAA;IAC7B,OAAO,EAAE,IAAI,EAAE,GAAG,EAAE,MAAM,EAAE,OAAO,EAAE,CAAA;AACvC,CAAC;AAED;;;;;GAKG;AACH,KAAK,UAAU,cAAc,CAAC,GAAW;IACvC,MAAM,GAAG,GAAG,QAAQ,CAAC,GAAG,EAAE,cAAc,CAAC,CAAA;IACzC,MAAM,OAAO,GAAG,gBAAgB,EAAE,CAAA;IAClC,IAAI,QAA4B,CAAA;IAChC,IAAI,CAAC;QACH,QAAQ,GAAG,MAAM,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC,CAAA;IACxC,CAAC;IAAC,MAAM,CAAC;QACP,QAAQ,GAAG,SAAS,CAAA,CAAC,mBAAmB;IAC1C,CAAC;IACD,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;QAC3B,MAAM,SAAS,CACb,GAAG,EACH,yEAAyE,OAAO,IAAI,CACrF,CAAA;QACD,OAAO,EAAE,IAAI,EAAE,cAAc,EAAE,MAAM,EAAE,OAAO,EAAE,CAAA;IAClD,CAAC;IACD,sGAAsG;IACtG,IAAI,QAAQ,CAAC,QAAQ,CAAC,eAAe,CAAC,EAAE,CAAC;QACvC,OAAO,EAAE,IAAI,EAAE,cAAc,EAAE,MAAM,EAAE,SAAS,EAAE,IAAI,EAAE,4BAA4B,EAAE,CAAA;IACxF,CAAC;IACD,MAAM,GAAG,GAAG,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAA;IACnD,MAAM,SAAS,CAAC,GAAG,EAAE,GAAG,QAAQ,GAAG,GAAG,GAAG,OAAO,IAAI,CAAC,CAAA;IACrD,OAAO,EAAE,IAAI,EAAE,cAAc,EAAE,MAAM,EAAE,UAAU,EAAE,CAAA;AACrD,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,UAAU,CAC9B,GAAW,EACX,OAA0B,EAAE;IAE5B,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,IAAI,KAAK,CAAA;IACjC,4FAA4F;IAC5F,MAAM,KAAK,GAA2B,EAAE,CAAA;IACxC,KAAK,CAAC,IAAI,CAAC,MAAM,UAAU,CAAC,GAAG,EAAE,aAAa,EAAE,OAAO,EAAE,EAAE,KAAK,CAAC,CAAC,CAAA;IAClE,KAAK,CAAC,IAAI,CAAC,MAAM,UAAU,CAAC,GAAG,EAAE,oBAAoB,EAAE,OAAO,EAAE,EAAE,KAAK,CAAC,CAAC,CAAA;IACzE,KAAK,CAAC,IAAI,CAAC,MAAM,UAAU,CAAC,GAAG,EAAE,cAAc,EAAE,QAAQ,EAAE,EAAE,KAAK,CAAC,CAAC,CAAA;IACpE,KAAK,CAAC,IAAI,CAAC,MAAM,cAAc,CAAC,GAAG,CAAC,CAAC,CAAA;IACrC,OAAO,EAAE,GAAG,EAAE,KAAK,EAAE,CAAA;AACvB,CAAC;AAED,MAAM,YAAY,GAA6D;IAC7E,KAAK,EAAE,SAAS;IAChB,QAAQ,EAAE,2BAA2B;IACrC,OAAO,EAAE,WAAW;IACpB,OAAO,EAAE,QAAQ;CAClB,CAAA;AAED,mDAAmD;AACnD,MAAM,UAAU,gBAAgB,CAAC,MAAwB;IACvD,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE;QACnC,MAAM,IAAI,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC,EAAE,CAAA;QAC1C,OAAO,KAAK,YAAY,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,IAAI,GAAG,IAAI,EAAE,CAAA;IACvD,CAAC,CAAC,CAAA;IACF,MAAM,QAAQ,GAAG,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,OAAO,IAAI,CAAC,CAAC,MAAM,KAAK,UAAU,CAAC,CAAA;IAC1F,MAAM,MAAM,GAAG,QAAQ;QACrB,CAAC,CAAC,iJAAiJ;QACnJ,CAAC,CAAC,6FAA6F,CAAA;IACjG,OAAO,wBAAwB,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,MAAM,EAAE,CAAA;AAC9D,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,aAAa,CACjC,GAAW,EACX,OAA8D,EAAE;IAEhE,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,GAAG,EAAE,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,IAAI,KAAK,EAAE,CAAC,CAAA;IACpE,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;QACd,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAA;IAC9C,CAAC;SAAM,CAAC;QACN,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC,MAAM,CAAC,CAAC,CAAA;IACvC,CAAC;IACD,OAAO,IAAI,CAAA;AACb,CAAC"}
+{"version":3,"file":"init-agents.js","sourceRoot":"","sources":["../src/init-agents.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAGH,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAA;AAChF,OAAO,EAAE,UAAU,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,WAAW,CAAA;AACzD,OAAO,EACL,cAAc,EACd,gBAAgB,EAChB,cAAc,EACd,oBAAoB,EACpB,QAAQ,EACR,aAAa,EACb,OAAO,GACR,MAAM,0BAA0B,CAAA;AAuBjC;;gFAEgF;AAChF,MAAM,UAAU,QAAQ,CAAC,GAAW,EAAE,GAAW;IAC/C,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,EAAE,GAAG,CAAC,CAAA;IAC7B,MAAM,MAAM,GAAG,QAAQ,CAAC,GAAG,EAAE,GAAG,CAAC,CAAA;IACjC,IAAI,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC;QAClD,MAAM,IAAI,KAAK,CAAC,uDAAuD,GAAG,EAAE,CAAC,CAAA;IAC/E,CAAC;IACD,OAAO,GAAG,CAAA;AACZ,CAAC;AAED,MAAM,UAAU,GAAG,CAAC,IAAY,EAAoB,EAAE,CACpD,QAAQ,CAAC,IAAI,CAAC;KACX,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC;KAChB,KAAK,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC,CAAA;AAEvB;uFACuF;AACvF,KAAK,UAAU,cAAc,CAAC,IAAY;IACxC,IAAI,CAAC;QACH,OAAO,MAAM,KAAK,CAAC,IAAI,CAAC,CAAA;IAC1B,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;YAAE,OAAO,SAAS,CAAA;QACxE,MAAM,KAAK,CAAA;IACb,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,KAAK,UAAU,iBAAiB,CAAC,GAAW,EAAE,GAAW;IACvD,MAAM,GAAG,GAAG,QAAQ,CAAC,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC,CAAA;IAC7C,IAAI,OAAO,GAAG,GAAG,CAAA;IACjB,KAAK,MAAM,IAAI,IAAI,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC;QACtD,OAAO,GAAG,OAAO,CAAC,OAAO,EAAE,IAAI,CAAC,CAAA;QAChC,MAAM,IAAI,GAAG,MAAM,cAAc,CAAC,OAAO,CAAC,CAAA;QAC1C,IAAI,IAAI,KAAK,SAAS;YAAE,MAAK;QAC7B,IAAI,IAAI,CAAC,cAAc,EAAE,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,EAAE,CAAC;YACjD,MAAM,IAAI,KAAK,CAAC,wCAAwC,IAAI,EAAE,CAAC,CAAA;QACjE,CAAC;IACH,CAAC;AACH,CAAC;AAED;+FAC+F;AAC/F,KAAK,UAAU,mBAAmB,CAAC,GAAW,EAAE,GAAW;IACzD,MAAM,IAAI,GAAG,MAAM,cAAc,CAAC,GAAG,CAAC,CAAA;IACtC,IAAI,IAAI,KAAK,SAAS,IAAI,CAAC,IAAI,CAAC,cAAc,EAAE,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,EAAE,CAAC;QACpE,MAAM,IAAI,KAAK,CAAC,+CAA+C,GAAG,EAAE,CAAC,CAAA;IACvE,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,KAAK,UAAU,UAAU,CACvB,GAAW,EACX,GAAW,EACX,OAAe,EACf,KAAc;IAEd,MAAM,GAAG,GAAG,QAAQ,CAAC,GAAG,EAAE,GAAG,CAAC,CAAA;IAC9B,MAAM,iBAAiB,CAAC,GAAG,EAAE,GAAG,CAAC,CAAA;IACjC,MAAM,mBAAmB,CAAC,GAAG,EAAE,GAAG,CAAC,CAAA;IACnC,IAAI,CAAC,KAAK,IAAI,CAAC,MAAM,UAAU,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC;QACtC,OAAO,EAAE,IAAI,EAAE,GAAG,EAAE,MAAM,EAAE,SAAS,EAAE,IAAI,EAAE,oCAAoC,EAAE,CAAA;IACrF,CAAC;IACD,4FAA4F;IAC5F,MAAM,KAAK,CAAC,OAAO,CAAC,GAAG,EAAE,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAA;IACpD,MAAM,WAAW,CAAC,GAAG,EAAE,OAAO,CAAC,CAAA;IAC/B,OAAO,EAAE,IAAI,EAAE,GAAG,EAAE,MAAM,EAAE,OAAO,EAAE,CAAA;AACvC,CAAC;AAED;;oDAEoD;AACpD,KAAK,UAAU,WAAW,CAAC,GAAW,EAAE,OAAe;IACrD,MAAM,GAAG,GAAG,GAAG,GAAG,UAAU,OAAO,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,EAAE,EAAE,CAAA;IACvD,MAAM,SAAS,CAAC,GAAG,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAA;IAC7C,IAAI,CAAC;QACH,MAAM,MAAM,CAAC,GAAG,EAAE,GAAG,CAAC,CAAA;IACxB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,EAAE,CAAC,GAAG,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAA;QAC9B,MAAM,KAAK,CAAA;IACb,CAAC;AACH,CAAC;AAED;;;;;GAKG;AACH,KAAK,UAAU,cAAc,CAAC,GAAW;IACvC,MAAM,GAAG,GAAG,QAAQ,CAAC,GAAG,EAAE,cAAc,CAAC,CAAA;IACzC,MAAM,iBAAiB,CAAC,GAAG,EAAE,GAAG,CAAC,CAAA;IACjC,MAAM,mBAAmB,CAAC,GAAG,EAAE,cAAc,CAAC,CAAA;IAC9C,MAAM,OAAO,GAAG,gBAAgB,EAAE,CAAA;IAClC,IAAI,QAA4B,CAAA;IAChC,IAAI,CAAC;QACH,QAAQ,GAAG,MAAM,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC,CAAA;IACxC,CAAC;IAAC,MAAM,CAAC;QACP,QAAQ,GAAG,SAAS,CAAA,CAAC,mBAAmB;IAC1C,CAAC;IACD,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;QAC3B,MAAM,WAAW,CACf,GAAG,EACH,yEAAyE,OAAO,IAAI,CACrF,CAAA;QACD,OAAO,EAAE,IAAI,EAAE,cAAc,EAAE,MAAM,EAAE,OAAO,EAAE,CAAA;IAClD,CAAC;IACD,sGAAsG;IACtG,IAAI,QAAQ,CAAC,QAAQ,CAAC,eAAe,CAAC,EAAE,CAAC;QACvC,OAAO,EAAE,IAAI,EAAE,cAAc,EAAE,MAAM,EAAE,SAAS,EAAE,IAAI,EAAE,4BAA4B,EAAE,CAAA;IACxF,CAAC;IACD,MAAM,GAAG,GAAG,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAA;IACnD,MAAM,WAAW,CAAC,GAAG,EAAE,GAAG,QAAQ,GAAG,GAAG,GAAG,OAAO,IAAI,CAAC,CAAA;IACvD,OAAO,EAAE,IAAI,EAAE,cAAc,EAAE,MAAM,EAAE,UAAU,EAAE,CAAA;AACrD,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,UAAU,CAC9B,GAAW,EACX,OAA0B,EAAE;IAE5B,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,IAAI,KAAK,CAAA;IACjC,4FAA4F;IAC5F,MAAM,KAAK,GAA2B,EAAE,CAAA;IACxC,KAAK,CAAC,IAAI,CAAC,MAAM,UAAU,CAAC,GAAG,EAAE,aAAa,EAAE,OAAO,EAAE,EAAE,KAAK,CAAC,CAAC,CAAA;IAClE,KAAK,CAAC,IAAI,CAAC,MAAM,UAAU,CAAC,GAAG,EAAE,oBAAoB,EAAE,OAAO,EAAE,EAAE,KAAK,CAAC,CAAC,CAAA;IACzE,KAAK,CAAC,IAAI,CAAC,MAAM,UAAU,CAAC,GAAG,EAAE,cAAc,EAAE,QAAQ,EAAE,EAAE,KAAK,CAAC,CAAC,CAAA;IACpE,KAAK,CAAC,IAAI,CAAC,MAAM,cAAc,CAAC,GAAG,CAAC,CAAC,CAAA;IACrC,OAAO,EAAE,GAAG,EAAE,KAAK,EAAE,CAAA;AACvB,CAAC;AAED,MAAM,YAAY,GAA6D;IAC7E,KAAK,EAAE,SAAS;IAChB,QAAQ,EAAE,2BAA2B;IACrC,OAAO,EAAE,WAAW;IACpB,OAAO,EAAE,QAAQ;CAClB,CAAA;AAED,mDAAmD;AACnD,MAAM,UAAU,gBAAgB,CAAC,MAAwB;IACvD,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE;QACnC,MAAM,IAAI,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC,EAAE,CAAA;QAC1C,OAAO,KAAK,YAAY,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,IAAI,GAAG,IAAI,EAAE,CAAA;IACvD,CAAC,CAAC,CAAA;IACF,MAAM,QAAQ,GAAG,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,OAAO,IAAI,CAAC,CAAC,MAAM,KAAK,UAAU,CAAC,CAAA;IAC1F,MAAM,MAAM,GAAG,QAAQ;QACrB,CAAC,CAAC,iJAAiJ;QACnJ,CAAC,CAAC,6FAA6F,CAAA;IACjG,OAAO,wBAAwB,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,MAAM,EAAE,CAAA;AAC9D,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,aAAa,CACjC,GAAW,EACX,OAA8D,EAAE;IAEhE,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,GAAG,EAAE,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,IAAI,KAAK,EAAE,CAAC,CAAA;IACpE,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;QACd,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAA;IAC9C,CAAC;SAAM,CAAC;QACN,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC,MAAM,CAAC,CAAC,CAAA;IACvC,CAAC;IACD,OAAO,IAAI,CAAA;AACb,CAAC"}

package/dist/internal/source-facts.d.ts

@@ -0,0 +1,15 @@
+import type * as TSApi from "typescript";
+import type { TypeScriptApi } from "./typescript-import.js";
+/**
+ * The deliberately small AST seam used by source lints. It is not a project-wide TypeScript
+ * Program: a rule asks for a file only after its lexical fast path found a candidate. That keeps
+ * cold checks and projects without a TypeScript install on the existing conservative path.
+ */
+export interface SourceFacts {
+    parse(file: string, content: string): TSApi.SourceFile | undefined;
+    isValueImportAt(source: TSApi.SourceFile, position: number, specifier: string): boolean | undefined;
+    isRouteRegistrationAt(source: TSApi.SourceFile, position: number, method: string, path: string): boolean | undefined;
+    isResponseSyntaxAt(source: TSApi.SourceFile, position: number): boolean | undefined;
+}
+export declare function createSourceFacts(ts: TypeScriptApi): SourceFacts;
+//# sourceMappingURL=source-facts.d.ts.map

package/dist/internal/source-facts.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"source-facts.d.ts","sourceRoot":"","sources":["../../src/internal/source-facts.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,KAAK,KAAK,MAAM,YAAY,CAAA;AACxC,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,wBAAwB,CAAA;AAE3D;;;;GAIG;AACH,MAAM,WAAW,WAAW;IAC1B,KAAK,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,KAAK,CAAC,UAAU,GAAG,SAAS,CAAA;IAClE,eAAe,CACb,MAAM,EAAE,KAAK,CAAC,UAAU,EACxB,QAAQ,EAAE,MAAM,EAChB,SAAS,EAAE,MAAM,GAChB,OAAO,GAAG,SAAS,CAAA;IACtB,qBAAqB,CACnB,MAAM,EAAE,KAAK,CAAC,UAAU,EACxB,QAAQ,EAAE,MAAM,EAChB,MAAM,EAAE,MAAM,EACd,IAAI,EAAE,MAAM,GACX,OAAO,GAAG,SAAS,CAAA;IACtB,kBAAkB,CAAC,MAAM,EAAE,KAAK,CAAC,UAAU,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,GAAG,SAAS,CAAA;CACpF;AAuCD,wBAAgB,iBAAiB,CAAC,EAAE,EAAE,aAAa,GAAG,WAAW,CAuEhE"}

package/dist/internal/source-facts.js

@@ -0,0 +1,82 @@
+function nodeAt(ts, source, position) {
+    let best = source;
+    const visit = (node) => {
+        if (position < node.pos || position >= node.end)
+            return;
+        best = node;
+        ts.forEachChild(node, visit);
+    };
+    visit(source);
+    return best;
+}
+function ancestorAt(ts, source, position, predicate) {
+    let node = nodeAt(ts, source, Math.max(0, Math.min(position, source.end - 1)));
+    for (;;) {
+        if (predicate(node))
+            return node;
+        if (node === source)
+            return undefined;
+        node = node.parent;
+    }
+}
+function rawResponseExpression(ts, node) {
+    if (ts.isNewExpression(node)) {
+        return ts.isIdentifier(node.expression) && node.expression.text === "Response";
+    }
+    if (!ts.isCallExpression(node) || !ts.isPropertyAccessExpression(node.expression))
+        return false;
+    return (ts.isIdentifier(node.expression.expression) &&
+        node.expression.expression.text === "Response" &&
+        node.expression.name.text === "json");
+}
+export function createSourceFacts(ts) {
+    const cache = new Map();
+    const parse = (file, content) => {
+        const cached = cache.get(file);
+        if (cached?.content === content)
+            return cached.source;
+        const kind = /\.tsx?$/.test(file) ? ts.ScriptKind.TSX : ts.ScriptKind.JS;
+        const source = ts.createSourceFile(file, content, ts.ScriptTarget.Latest, true, kind);
+        const diagnostics = source.parseDiagnostics;
+        const parsed = diagnostics !== undefined && diagnostics.length > 0 ? undefined : source;
+        cache.set(file, { content, source: parsed });
+        return parsed;
+    };
+    const isValueImportAt = (source, position, specifier) => {
+        const declaration = ancestorAt(ts, source, position, ts.isImportDeclaration);
+        if (declaration === undefined || !ts.isStringLiteral(declaration.moduleSpecifier))
+            return undefined;
+        if (declaration.moduleSpecifier.text !== specifier)
+            return undefined;
+        const clause = declaration.importClause;
+        if (clause === undefined)
+            return true; // side-effect import
+        if (clause.isTypeOnly)
+            return false;
+        if (clause.namedBindings !== undefined && ts.isNamedImports(clause.namedBindings)) {
+            return clause.namedBindings.elements.some((element) => !element.isTypeOnly);
+        }
+        return true; // default and namespace bindings are runtime imports
+    };
+    const isRouteRegistrationAt = (source, position, method, path) => {
+        const call = ancestorAt(ts, source, position, ts.isCallExpression);
+        if (call === undefined || !ts.isPropertyAccessExpression(call.expression))
+            return false;
+        const name = call.expression.name.text.toUpperCase();
+        const first = call.arguments[0];
+        return (name === method && first !== undefined && ts.isStringLiteralLike(first) && first.text === path);
+    };
+    const isResponseSyntaxAt = (source, position) => {
+        const returnStatement = ancestorAt(ts, source, position, ts.isReturnStatement);
+        if (returnStatement !== undefined) {
+            return (returnStatement.expression !== undefined &&
+                rawResponseExpression(ts, returnStatement.expression));
+        }
+        const arrow = ancestorAt(ts, source, position, ts.isArrowFunction);
+        if (arrow !== undefined && !ts.isBlock(arrow.body))
+            return rawResponseExpression(ts, arrow.body);
+        return false;
+    };
+    return { parse, isValueImportAt, isRouteRegistrationAt, isResponseSyntaxAt };
+}
+//# sourceMappingURL=source-facts.js.map

package/dist/internal/source-facts.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"source-facts.js","sourceRoot":"","sources":["../../src/internal/source-facts.ts"],"names":[],"mappings":"AAwBA,SAAS,MAAM,CAAC,EAAiB,EAAE,MAAwB,EAAE,QAAgB;IAC3E,IAAI,IAAI,GAAe,MAAM,CAAA;IAC7B,MAAM,KAAK,GAAG,CAAC,IAAgB,EAAQ,EAAE;QACvC,IAAI,QAAQ,GAAG,IAAI,CAAC,GAAG,IAAI,QAAQ,IAAI,IAAI,CAAC,GAAG;YAAE,OAAM;QACvD,IAAI,GAAG,IAAI,CAAA;QACX,EAAE,CAAC,YAAY,CAAC,IAAI,EAAE,KAAK,CAAC,CAAA;IAC9B,CAAC,CAAA;IACD,KAAK,CAAC,MAAM,CAAC,CAAA;IACb,OAAO,IAAI,CAAA;AACb,CAAC;AAED,SAAS,UAAU,CACjB,EAAiB,EACjB,MAAwB,EACxB,QAAgB,EAChB,SAAwC;IAExC,IAAI,IAAI,GAAe,MAAM,CAAC,EAAE,EAAE,MAAM,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,QAAQ,EAAE,MAAM,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC,CAAA;IAC1F,SAAS,CAAC;QACR,IAAI,SAAS,CAAC,IAAI,CAAC;YAAE,OAAO,IAAI,CAAA;QAChC,IAAI,IAAI,KAAK,MAAM;YAAE,OAAO,SAAS,CAAA;QACrC,IAAI,GAAG,IAAI,CAAC,MAAM,CAAA;IACpB,CAAC;AACH,CAAC;AAED,SAAS,qBAAqB,CAAC,EAAiB,EAAE,IAAsB;IACtE,IAAI,EAAE,CAAC,eAAe,CAAC,IAAI,CAAC,EAAE,CAAC;QAC7B,OAAO,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,IAAI,CAAC,UAAU,CAAC,IAAI,KAAK,UAAU,CAAA;IAChF,CAAC;IACD,IAAI,CAAC,EAAE,CAAC,gBAAgB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,0BAA0B,CAAC,IAAI,CAAC,UAAU,CAAC;QAAE,OAAO,KAAK,CAAA;IAC/F,OAAO,CACL,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC;QAC3C,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,IAAI,KAAK,UAAU;QAC9C,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,KAAK,MAAM,CACrC,CAAA;AACH,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,EAAiB;IACjD,MAAM,KAAK,GAAG,IAAI,GAAG,EAAqE,CAAA;IAE1F,MAAM,KAAK,GAAG,CAAC,IAAY,EAAE,OAAe,EAAgC,EAAE;QAC5E,MAAM,MAAM,GAAG,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAA;QAC9B,IAAI,MAAM,EAAE,OAAO,KAAK,OAAO;YAAE,OAAO,MAAM,CAAC,MAAM,CAAA;QACrD,MAAM,IAAI,GAAG,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,UAAU,CAAC,EAAE,CAAA;QACxE,MAAM,MAAM,GAAG,EAAE,CAAC,gBAAgB,CAAC,IAAI,EAAE,OAAO,EAAE,EAAE,CAAC,YAAY,CAAC,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,CAAA;QACrF,MAAM,WAAW,GACf,MACD,CAAC,gBAAgB,CAAA;QAClB,MAAM,MAAM,GAAG,WAAW,KAAK,SAAS,IAAI,WAAW,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,CAAA;QACvF,KAAK,CAAC,GAAG,CAAC,IAAI,EAAE,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAA;QAC5C,OAAO,MAAM,CAAA;IACf,CAAC,CAAA;IAED,MAAM,eAAe,GAAG,CACtB,MAAwB,EACxB,QAAgB,EAChB,SAAiB,EACI,EAAE;QACvB,MAAM,WAAW,GAAG,UAAU,CAAC,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE,EAAE,CAAC,mBAAmB,CAE9D,CAAA;QACb,IAAI,WAAW,KAAK,SAAS,IAAI,CAAC,EAAE,CAAC,eAAe,CAAC,WAAW,CAAC,eAAe,CAAC;YAC/E,OAAO,SAAS,CAAA;QAClB,IAAI,WAAW,CAAC,eAAe,CAAC,IAAI,KAAK,SAAS;YAAE,OAAO,SAAS,CAAA;QACpE,MAAM,MAAM,GAAG,WAAW,CAAC,YAAY,CAAA;QACvC,IAAI,MAAM,KAAK,SAAS;YAAE,OAAO,IAAI,CAAA,CAAC,qBAAqB;QAC3D,IAAI,MAAM,CAAC,UAAU;YAAE,OAAO,KAAK,CAAA;QACnC,IAAI,MAAM,CAAC,aAAa,KAAK,SAAS,IAAI,EAAE,CAAC,cAAc,CAAC,MAAM,CAAC,aAAa,CAAC,EAAE,CAAC;YAClF,OAAO,MAAM,CAAC,aAAa,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,UAAU,CAAC,CAAA;QAC7E,CAAC;QACD,OAAO,IAAI,CAAA,CAAC,qDAAqD;IACnE,CAAC,CAAA;IAED,MAAM,qBAAqB,GAAG,CAC5B,MAAwB,EACxB,QAAgB,EAChB,MAAc,EACd,IAAY,EACS,EAAE;QACvB,MAAM,IAAI,GAAG,UAAU,CAAC,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE,EAAE,CAAC,gBAAgB,CAEpD,CAAA;QACb,IAAI,IAAI,KAAK,SAAS,IAAI,CAAC,EAAE,CAAC,0BAA0B,CAAC,IAAI,CAAC,UAAU,CAAC;YAAE,OAAO,KAAK,CAAA;QACvF,MAAM,IAAI,GAAG,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,CAAA;QACpD,MAAM,KAAK,GAAG,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAA;QAC/B,OAAO,CACL,IAAI,KAAK,MAAM,IAAI,KAAK,KAAK,SAAS,IAAI,EAAE,CAAC,mBAAmB,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,IAAI,KAAK,IAAI,CAC/F,CAAA;IACH,CAAC,CAAA;IAED,MAAM,kBAAkB,GAAG,CAAC,MAAwB,EAAE,QAAgB,EAAuB,EAAE;QAC7F,MAAM,eAAe,GAAG,UAAU,CAAC,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE,EAAE,CAAC,iBAAiB,CAEhE,CAAA;QACb,IAAI,eAAe,KAAK,SAAS,EAAE,CAAC;YAClC,OAAO,CACL,eAAe,CAAC,UAAU,KAAK,SAAS;gBACxC,qBAAqB,CAAC,EAAE,EAAE,eAAe,CAAC,UAAU,CAAC,CACtD,CAAA;QACH,CAAC;QACD,MAAM,KAAK,GAAG,UAAU,CAAC,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE,EAAE,CAAC,eAAe,CAEpD,CAAA;QACb,IAAI,KAAK,KAAK,SAAS,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC;YAAE,OAAO,qBAAqB,CAAC,EAAE,EAAE,KAAK,CAAC,IAAI,CAAC,CAAA;QAChG,OAAO,KAAK,CAAA;IACd,CAAC,CAAA;IAED,OAAO,EAAE,KAAK,EAAE,eAAe,EAAE,qBAAqB,EAAE,kBAAkB,EAAE,CAAA;AAC9E,CAAC"}

package/dist/internal/typescript-import.d.ts

@@ -21,4 +21,13 @@ export type TypeScriptApi = typeof import("typescript");
  * them the wrong way - so that error is rethrown for the caller to report.
  */
 export declare function importTypeScript(): Promise<TypeScriptApi | undefined>;
+/**
+ * Import TypeScript resolved from the PROJECT root first, falling back to the CLI's own dependency
+ * tree. A bare `import("typescript")` resolves relative to this file - the CLI's install - so a
+ * globally-installed or bunx-run CLI could miss the project's compiler (or load a different major)
+ * depending on where the CLI happened to live, while the project's own `typescript` sat unused in
+ * its node_modules. Resolving from `root` makes the verdicts a function of the project, not of how
+ * the CLI was installed - the same cwd-invariance the typecheck gate's tsc resolution has.
+ */
+export declare function importProjectTypeScript(root: string): Promise<TypeScriptApi | undefined>;
 //# sourceMappingURL=typescript-import.d.ts.map

package/dist/internal/typescript-import.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"typescript-import.d.ts","sourceRoot":"","sources":["../../src/internal/typescript-import.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,8FAA8F;AAC9F,MAAM,MAAM,aAAa,GAAG,cAAc,YAAY,CAAC,CAAA;AAEvD;;;;;;GAMG;AACH,wBAAsB,gBAAgB,IAAI,OAAO,CAAC,aAAa,GAAG,SAAS,CAAC,CAQ3E"}
+{"version":3,"file":"typescript-import.d.ts","sourceRoot":"","sources":["../../src/internal/typescript-import.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,8FAA8F;AAC9F,MAAM,MAAM,aAAa,GAAG,cAAc,YAAY,CAAC,CAAA;AAEvD;;;;;;GAMG;AACH,wBAAsB,gBAAgB,IAAI,OAAO,CAAC,aAAa,GAAG,SAAS,CAAC,CAQ3E;AAED;;;;;;;GAOG;AACH,wBAAsB,uBAAuB,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,aAAa,GAAG,SAAS,CAAC,CAmB9F"}

package/dist/internal/typescript-import.js

@@ -11,6 +11,14 @@
  * - the templates all ship a `typecheck` script - so this resolves in practice; the point is that an
  * install does not pay for it.
  */
+var __rewriteRelativeImportExtension = (this && this.__rewriteRelativeImportExtension) || function (path, preserveJsx) {
+    if (typeof path === "string" && /^\.\.?\//.test(path)) {
+        return path.replace(/\.(tsx)$|((?:\.d)?)((?:\.[^./]+?)?)\.([cm]?)ts$/i, function (m, tsx, d, ext, cm) {
+            return tsx ? preserveJsx ? ".jsx" : ".js" : d && (!ext || !cm) ? m : (d + ext + "." + cm.toLowerCase() + "js");
+        });
+    }
+    return path;
+};
 /**
  * Import the project's TypeScript, or `undefined` when it is not installed.
  *
@@ -29,4 +37,34 @@ export async function importTypeScript() {
         throw cause;
     }
 }
+/**
+ * Import TypeScript resolved from the PROJECT root first, falling back to the CLI's own dependency
+ * tree. A bare `import("typescript")` resolves relative to this file - the CLI's install - so a
+ * globally-installed or bunx-run CLI could miss the project's compiler (or load a different major)
+ * depending on where the CLI happened to live, while the project's own `typescript` sat unused in
+ * its node_modules. Resolving from `root` makes the verdicts a function of the project, not of how
+ * the CLI was installed - the same cwd-invariance the typecheck gate's tsc resolution has.
+ */
+export async function importProjectTypeScript(root) {
+    let resolved;
+    try {
+        resolved = Bun.resolveSync("typescript", root);
+    }
+    catch {
+        // Unresolvable from the project (not installed there, or a non-Bun host without resolveSync):
+        // fall back to the CLI's own tree, which keeps the previous behavior as the floor.
+        return importTypeScript();
+    }
+    try {
+        return (await import(__rewriteRelativeImportExtension(resolved)));
+    }
+    catch (cause) {
+        // Same contract as importTypeScript: a compiler that RESOLVES and then fails evaluating is a
+        // broken install, not a missing one - rethrow rather than silently checking with another copy.
+        const message = cause instanceof Error ? cause.message : String(cause);
+        if (/cannot find (?:package|module)|ERR_MODULE_NOT_FOUND/i.test(message))
+            return importTypeScript();
+        throw cause;
+    }
+}
 //# sourceMappingURL=typescript-import.js.map

package/dist/internal/typescript-import.js.map

@@ -1 +1 @@
-{"version":3,"file":"typescript-import.js","sourceRoot":"","sources":["../../src/internal/typescript-import.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAKH;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB;IACpC,IAAI,CAAC;QACH,OAAO,CAAC,MAAM,MAAM,CAAC,YAAY,CAAC,CAAkB,CAAA;IACtD,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,OAAO,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;QACtE,IAAI,sDAAsD,CAAC,IAAI,CAAC,OAAO,CAAC;YAAE,OAAO,SAAS,CAAA;QAC1F,MAAM,KAAK,CAAA;IACb,CAAC;AACH,CAAC"}
+{"version":3,"file":"typescript-import.js","sourceRoot":"","sources":["../../src/internal/typescript-import.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;;;;;;;;;AAKH;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB;IACpC,IAAI,CAAC;QACH,OAAO,CAAC,MAAM,MAAM,CAAC,YAAY,CAAC,CAAkB,CAAA;IACtD,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,OAAO,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;QACtE,IAAI,sDAAsD,CAAC,IAAI,CAAC,OAAO,CAAC;YAAE,OAAO,SAAS,CAAA;QAC1F,MAAM,KAAK,CAAA;IACb,CAAC;AACH,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAAC,IAAY;IACxD,IAAI,QAAgB,CAAA;IACpB,IAAI,CAAC;QACH,QAAQ,GAAG,GAAG,CAAC,WAAW,CAAC,YAAY,EAAE,IAAI,CAAC,CAAA;IAChD,CAAC;IAAC,MAAM,CAAC;QACP,8FAA8F;QAC9F,mFAAmF;QACnF,OAAO,gBAAgB,EAAE,CAAA;IAC3B,CAAC;IACD,IAAI,CAAC;QACH,OAAO,CAAC,MAAM,MAAM,kCAAC,QAAQ,EAAC,CAAkB,CAAA;IAClD,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,6FAA6F;QAC7F,+FAA+F;QAC/F,MAAM,OAAO,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;QACtE,IAAI,sDAAsD,CAAC,IAAI,CAAC,OAAO,CAAC;YACtE,OAAO,gBAAgB,EAAE,CAAA;QAC3B,MAAM,KAAK,CAAA;IACb,CAAC;AACH,CAAC"}

package/dist/introspect.d.ts

@@ -4,11 +4,14 @@
  * prompt. Used by `nifra context` (stdout) and the `nifra mcp` server (a tool result), so an agent sees
  * *this* project's actual surface, not just generic docs.
  */
-import { type ReflectedRoute } from "@nifrajs/core/reflection";
+import { type ProjectEvidenceSnapshot } from "@nifrajs/core/evidence";
+import type { ReflectedRoute } from "@nifrajs/core/reflection";
 import type { Manifest } from "@nifrajs/web";
 import type { LoadedApp } from "./load.js";
 /** Read the backend's registered routes, if it's a `server()` with a `.routes()` method. */
 export declare function backendRoutes(backend: unknown): ReflectedRoute[];
+/** Adapt the canonical token-only snapshot to the legacy reflection view used by Markdown helpers. */
+export declare function reflectedRoutesFromEvidence(evidence: ProjectEvidenceSnapshot): ReflectedRoute[];
 /**
  * Render a JSON Schema as a compact TypeScript-like type (`{ id: string, name?: string }`) - the
  * shape agents already think in, at a fraction of the raw JSON Schema's tokens (~70-80% smaller).
@@ -66,7 +69,8 @@ export interface RouteJson {
  * Markdown brief. Optionally filtered to routes whose path starts with `pathPrefix`. Reuses the exact
  * same `call` form and TS-shaped contracts the Markdown brief shows.
  */
-export declare function routesToJson(app: LoadedApp, pathPrefix?: string): RouteJson[];
+export declare function routesToJsonFromEvidence(evidence: ProjectEvidenceSnapshot, pathPrefix?: string): RouteJson[];
+export declare function routesToJson(app: LoadedApp, pathPrefix?: string, evidence?: ProjectEvidenceSnapshot): RouteJson[];
 /** The kind of route: a file-routed `page` (SSR/SSG) or a backend `api` (HTTP handler). */
 export type RouteKind = "page" | "api";
 /** One row of the unified route table. */

package/dist/introspect.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"introspect.d.ts","sourceRoot":"","sources":["../src/introspect.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,KAAK,cAAc,EAAwC,MAAM,0BAA0B,CAAA;AACpG,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,cAAc,CAAA;AAE5C,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,WAAW,CAAA;AAG1C,4FAA4F;AAC5F,wBAAgB,aAAa,CAAC,OAAO,EAAE,OAAO,GAAG,cAAc,EAAE,CAEhE;AAcD;;;;;GAKG;AACH,wBAAgB,QAAQ,CAAC,MAAM,EAAE,OAAO,EAAE,KAAK,SAAI,GAAG,MAAM,CAsC3D;AAuBD;;;;;;;GAOG;AACH,wBAAgB,UAAU,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,GAAG,MAAM,CAwBhF;AAED,oGAAoG;AACpG,wBAAgB,gBAAgB,CAAC,MAAM,EAAE,SAAS,cAAc,EAAE,GAAG,MAAM,CAY1E;AAED;;;6EAG6E;AAC7E,wBAAgB,qBAAqB,CAAC,MAAM,EAAE,SAAS,cAAc,EAAE,GAAG,MAAM,CAQ/E;AAED,kFAAkF;AAClF,wBAAgB,iBAAiB,CAAC,QAAQ,EAAE,QAAQ,GAAG,SAAS,GAAG,MAAM,CAQxE;AAwBD;;oDAEoD;AACpD,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAA;IACtB,QAAQ,CAAC,IAAI,CAAC,EAAE,KAAK,GAAG,OAAO,CAAA;CAChC;AAED;;;;;;;GAOG;AACH,wBAAgB,eAAe,CAAC,GAAG,EAAE,SAAS,EAAE,MAAM,CAAC,EAAE,aAAa,GAAG,MAAM,CAwC9E;AAED;6FAC6F;AAC7F,MAAM,WAAW,SAAS;IACxB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;IACvB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;IACrB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;IACrB,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAA;IACtB,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAA;IACvB,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAA;CAC3B;AAED;;;;;GAKG;AACH,wBAAgB,YAAY,CAAC,GAAG,EAAE,SAAS,EAAE,UAAU,CAAC,EAAE,MAAM,GAAG,SAAS,EAAE,CA6B7E;AAcD,2FAA2F;AAC3F,MAAM,MAAM,SAAS,GAAG,MAAM,GAAG,KAAK,CAAA;AAEtC,0CAA0C;AAC1C,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAA;IACxB,gEAAgE;IAChE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;IACrB,4FAA4F;IAC5F,QAAQ,CAAC,OAAO,EAAE,SAAS,MAAM,EAAE,CAAA;IACnC,6EAA6E;IAC7E,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAA;IACtB;;mFAE+E;IAC/E,QAAQ,CAAC,WAAW,CAAC,EAAE,OAAO,CAAA;CAC/B;AAED;2FAC2F;AAC3F,MAAM,WAAW,cAAc;IAC7B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;IACxB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;IACrB,QAAQ,CAAC,SAAS,EAAE,OAAO,CAAA;CAC5B;AAED,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,KAAK,EAAE,SAAS,cAAc,EAAE,CAAA;IACzC,QAAQ,CAAC,GAAG,EAAE,aAAa,CAAC,IAAI,CAAC,cAAc,EAAE,QAAQ,GAAG,MAAM,CAAC,CAAC,CAAA;IACpE;0EACsE;IACtE,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAA;CAC5B;AASD;;;;;;GAMG;AACH,wBAAgB,eAAe,CAAC,KAAK,EAAE,eAAe,GAAG,eAAe,EAAE,CAgCzE;AAED,sGAAsG;AACtG,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,SAAS,eAAe,EAAE,GAAG,MAAM,CAiBzE;AAED,+EAA+E;AAC/E,MAAM,WAAW,YAAY;IAC3B,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAA;IACxB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;IACrB,QAAQ,CAAC,OAAO,EAAE,SAAS,MAAM,EAAE,CAAA;IACnC,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAA;IACtB,QAAQ,CAAC,WAAW,CAAC,EAAE,OAAO,CAAA;CAC/B;AAED;uEACuE;AACvE,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,SAAS,eAAe,EAAE,GAAG;IAClE,QAAQ,CAAC,MAAM,EAAE,SAAS,YAAY,EAAE,CAAA;CACzC,CAUA;AAED,MAAM,WAAW,cAAc;IAC7B,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAA;IACnB,QAAQ,CAAC,IAAI,EAAE,MAAM,GAAG,SAAS,CAAA;IACjC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;IACrB,QAAQ,CAAC,OAAO,CAAC,EAAE,SAAS,MAAM,EAAE,CAAA;IACpC,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAA;IACtB,QAAQ,CAAC,WAAW,CAAC,EAAE,OAAO,CAAA;CAC/B;AAED,MAAM,WAAW,cAAc;IAC7B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;IACrB,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAA;CACpB;AAED,MAAM,WAAW,UAAU;IACzB,QAAQ,CAAC,KAAK,EAAE,SAAS,cAAc,EAAE,CAAA;IACzC,QAAQ,CAAC,KAAK,EAAE,SAAS,cAAc,EAAE,CAAA;CAC1C;AASD,gGAAgG;AAChG,wBAAgB,eAAe,CAAC,IAAI,EAAE,SAAS,eAAe,EAAE,GAAG,UAAU,CA+B5E;AAED,2DAA2D;AAC3D,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,UAAU,GAAG,UAAU,CAQ9D;AAkBD,sFAAsF;AACtF,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,UAAU,GAAG,MAAM,CAU1D;AAmCD,wBAAsB,cAAc,CAClC,GAAG,EAAE,SAAS,EACd,IAAI,GAAE;IAAE,QAAQ,CAAC,IAAI,CAAC,EAAE,OAAO,CAAA;CAAO,GACrC,OAAO,CAAC,MAAM,CAAC,CAGjB;AAED,2EAA2E;AAC3E,wBAAsB,kBAAkB,CACtC,GAAG,EAAE,SAAS,EACd,IAAI,GAAE;IAAE,QAAQ,CAAC,IAAI,CAAC,EAAE,OAAO,CAAA;CAAO,GACrC,OAAO,CAAC,MAAM,CAAC,CAGjB"}
+{"version":3,"file":"introspect.d.ts","sourceRoot":"","sources":["../src/introspect.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAGL,KAAK,uBAAuB,EAE7B,MAAM,wBAAwB,CAAA;AAC/B,OAAO,KAAK,EAAE,cAAc,EAAoB,MAAM,0BAA0B,CAAA;AAChF,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,cAAc,CAAA;AAE5C,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,WAAW,CAAA;AAG1C,4FAA4F;AAC5F,wBAAgB,aAAa,CAAC,OAAO,EAAE,OAAO,GAAG,cAAc,EAAE,CAEhE;AAqCD,sGAAsG;AACtG,wBAAgB,2BAA2B,CAAC,QAAQ,EAAE,uBAAuB,GAAG,cAAc,EAAE,CAc/F;AAcD;;;;;GAKG;AACH,wBAAgB,QAAQ,CAAC,MAAM,EAAE,OAAO,EAAE,KAAK,SAAI,GAAG,MAAM,CAsC3D;AAuBD;;;;;;;GAOG;AACH,wBAAgB,UAAU,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,GAAG,MAAM,CAwBhF;AAED,oGAAoG;AACpG,wBAAgB,gBAAgB,CAAC,MAAM,EAAE,SAAS,cAAc,EAAE,GAAG,MAAM,CAY1E;AAED;;;6EAG6E;AAC7E,wBAAgB,qBAAqB,CAAC,MAAM,EAAE,SAAS,cAAc,EAAE,GAAG,MAAM,CAQ/E;AAED,kFAAkF;AAClF,wBAAgB,iBAAiB,CAAC,QAAQ,EAAE,QAAQ,GAAG,SAAS,GAAG,MAAM,CAQxE;AAwBD;;oDAEoD;AACpD,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAA;IACtB,QAAQ,CAAC,IAAI,CAAC,EAAE,KAAK,GAAG,OAAO,CAAA;CAChC;AAED;;;;;;;GAOG;AACH,wBAAgB,eAAe,CAAC,GAAG,EAAE,SAAS,EAAE,MAAM,CAAC,EAAE,aAAa,GAAG,MAAM,CAwC9E;AAED;6FAC6F;AAC7F,MAAM,WAAW,SAAS;IACxB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;IACvB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;IACrB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;IACrB,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAA;IACtB,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAA;IACvB,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAA;CAC3B;AAED;;;;;GAKG;AACH,wBAAgB,wBAAwB,CACtC,QAAQ,EAAE,uBAAuB,EACjC,UAAU,CAAC,EAAE,MAAM,GAClB,SAAS,EAAE,CA6Bb;AAED,wBAAgB,YAAY,CAC1B,GAAG,EAAE,SAAS,EACd,UAAU,CAAC,EAAE,MAAM,EACnB,QAAQ,CAAC,EAAE,uBAAuB,GACjC,SAAS,EAAE,CAEb;AAcD,2FAA2F;AAC3F,MAAM,MAAM,SAAS,GAAG,MAAM,GAAG,KAAK,CAAA;AAEtC,0CAA0C;AAC1C,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAA;IACxB,gEAAgE;IAChE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;IACrB,4FAA4F;IAC5F,QAAQ,CAAC,OAAO,EAAE,SAAS,MAAM,EAAE,CAAA;IACnC,6EAA6E;IAC7E,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAA;IACtB;;mFAE+E;IAC/E,QAAQ,CAAC,WAAW,CAAC,EAAE,OAAO,CAAA;CAC/B;AAED;2FAC2F;AAC3F,MAAM,WAAW,cAAc;IAC7B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;IACxB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;IACrB,QAAQ,CAAC,SAAS,EAAE,OAAO,CAAA;CAC5B;AAED,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,KAAK,EAAE,SAAS,cAAc,EAAE,CAAA;IACzC,QAAQ,CAAC,GAAG,EAAE,aAAa,CAAC,IAAI,CAAC,cAAc,EAAE,QAAQ,GAAG,MAAM,CAAC,CAAC,CAAA;IACpE;0EACsE;IACtE,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAA;CAC5B;AASD;;;;;;GAMG;AACH,wBAAgB,eAAe,CAAC,KAAK,EAAE,eAAe,GAAG,eAAe,EAAE,CAgCzE;AAED,sGAAsG;AACtG,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,SAAS,eAAe,EAAE,GAAG,MAAM,CAiBzE;AAED,+EAA+E;AAC/E,MAAM,WAAW,YAAY;IAC3B,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAA;IACxB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;IACrB,QAAQ,CAAC,OAAO,EAAE,SAAS,MAAM,EAAE,CAAA;IACnC,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAA;IACtB,QAAQ,CAAC,WAAW,CAAC,EAAE,OAAO,CAAA;CAC/B;AAED;uEACuE;AACvE,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,SAAS,eAAe,EAAE,GAAG;IAClE,QAAQ,CAAC,MAAM,EAAE,SAAS,YAAY,EAAE,CAAA;CACzC,CAUA;AAED,MAAM,WAAW,cAAc;IAC7B,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAA;IACnB,QAAQ,CAAC,IAAI,EAAE,MAAM,GAAG,SAAS,CAAA;IACjC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;IACrB,QAAQ,CAAC,OAAO,CAAC,EAAE,SAAS,MAAM,EAAE,CAAA;IACpC,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAA;IACtB,QAAQ,CAAC,WAAW,CAAC,EAAE,OAAO,CAAA;CAC/B;AAED,MAAM,WAAW,cAAc;IAC7B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;IACrB,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAA;CACpB;AAED,MAAM,WAAW,UAAU;IACzB,QAAQ,CAAC,KAAK,EAAE,SAAS,cAAc,EAAE,CAAA;IACzC,QAAQ,CAAC,KAAK,EAAE,SAAS,cAAc,EAAE,CAAA;CAC1C;AASD,gGAAgG;AAChG,wBAAgB,eAAe,CAAC,IAAI,EAAE,SAAS,eAAe,EAAE,GAAG,UAAU,CA+B5E;AAED,2DAA2D;AAC3D,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,UAAU,GAAG,UAAU,CAQ9D;AAkBD,sFAAsF;AACtF,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,UAAU,GAAG,MAAM,CAU1D;AAmCD,wBAAsB,cAAc,CAClC,GAAG,EAAE,SAAS,EACd,IAAI,GAAE;IAAE,QAAQ,CAAC,IAAI,CAAC,EAAE,OAAO,CAAA;CAAO,GACrC,OAAO,CAAC,MAAM,CAAC,CAGjB;AAED,2EAA2E;AAC3E,wBAAsB,kBAAkB,CACtC,GAAG,EAAE,SAAS,EACd,IAAI,GAAE;IAAE,QAAQ,CAAC,IAAI,CAAC,EAAE,OAAO,CAAA;CAAO,GACrC,OAAO,CAAC,MAAM,CAAC,CAGjB"}

package/dist/introspect.js

@@ -4,12 +4,58 @@
  * prompt. Used by `nifra context` (stdout) and the `nifra mcp` server (a tool result), so an agent sees
  * *this* project's actual surface, not just generic docs.
  */
-import { reflectRoutes } from "@nifrajs/core/reflection";
+import { snapshotProjectEvidence, } from "@nifrajs/core/evidence";
 import { discoverRoutes } from "@nifrajs/web/fs";
 import { chooseBuildPipeline, describePipeline } from "./pipeline-guard.js";
 /** Read the backend's registered routes, if it's a `server()` with a `.routes()` method. */
 export function backendRoutes(backend) {
-    return [...reflectRoutes(backend)];
+    return reflectedRoutesFromEvidence(snapshotProjectEvidence(backend));
+}
+function schemaPartToReflection(value) {
+    return value === undefined
+        ? undefined
+        : { standard: undefined, jsonSchema: value.jsonSchema, fields: value.fields };
+}
+function schemaFromEvidence(schema) {
+    if (schema === undefined)
+        return undefined;
+    const errors = Object.fromEntries(Object.entries(schema.errors ?? {}).map(([status, value]) => [
+        status,
+        schemaPartToReflection(value),
+    ]));
+    const headers = schemaPartToReflection(schema.headers);
+    const body = schemaPartToReflection(schema.body);
+    const query = schemaPartToReflection(schema.query);
+    const params = schemaPartToReflection(schema.params);
+    const response = schemaPartToReflection(schema.response);
+    const sse = schemaPartToReflection(schema.sse);
+    return {
+        ...(schema.bodyLimit !== undefined ? { bodyLimit: schema.bodyLimit } : {}),
+        ...(schema.bodyLimitReason !== undefined ? { bodyLimitReason: schema.bodyLimitReason } : {}),
+        ...(headers !== undefined ? { headers } : {}),
+        ...(body !== undefined ? { body } : {}),
+        ...(query !== undefined ? { query } : {}),
+        ...(params !== undefined ? { params } : {}),
+        ...(response !== undefined ? { response } : {}),
+        ...(Object.keys(errors).length > 0 ? { errors } : {}),
+        ...(sse !== undefined ? { sse } : {}),
+    };
+}
+/** Adapt the canonical token-only snapshot to the legacy reflection view used by Markdown helpers. */
+export function reflectedRoutesFromEvidence(evidence) {
+    return evidence.routes.map((route) => {
+        const schema = schemaFromEvidence(route.schema);
+        return {
+            method: route.method,
+            path: route.path,
+            ...(schema !== undefined ? { schema } : {}),
+            ...(route.assurance !== undefined ? { assurance: route.assurance } : {}),
+            ...(route.capabilities !== undefined ? { capabilities: route.capabilities } : {}),
+            ...(route.family === true ? { family: true } : {}),
+            ...(route.classification !== undefined ? { classification: route.classification } : {}),
+            ...(route.tool !== undefined ? { tool: route.tool } : {}),
+        };
+    });
 }
 /**
  * Render a JSON Schema as a compact TypeScript-like type (`{ id: string, name?: string }`) - the
@@ -228,7 +274,7 @@ export function describeProject(app, filter) {
  * Markdown brief. Optionally filtered to routes whose path starts with `pathPrefix`. Reuses the exact
  * same `call` form and TS-shaped contracts the Markdown brief shows.
  */
-export function routesToJson(app, pathPrefix) {
+export function routesToJsonFromEvidence(evidence, pathPrefix) {
     const shape = (v) => {
         if (!v)
             return undefined;
@@ -237,7 +283,7 @@ export function routesToJson(app, pathPrefix) {
             ? tsTypeOf(js)
             : "(validated; shape not introspectable from this validator)";
     };
-    let routes = backendRoutes(app.backend);
+    let routes = [...evidence.routes];
     if (pathPrefix !== undefined && pathPrefix !== "") {
         routes = routes.filter((r) => r.path.startsWith(pathPrefix));
     }
@@ -259,6 +305,9 @@ export function routesToJson(app, pathPrefix) {
         };
     });
 }
+export function routesToJson(app, pathPrefix, evidence) {
+    return routesToJsonFromEvidence(evidence ?? snapshotProjectEvidence(app.backend), pathPrefix);
+}
 /** True when `path` is at or under `prefix` as a path segment boundary (`/api` matches `/api` and
  * `/api/x`, but not `/apiary`). An empty prefix matches nothing (auto-mount disabled). */
 function isUnderPrefix(path, prefix) {