@nifrajs/cli 3.2.0 → 3.5.0

package/dist/project-facts.d.ts

@@ -1,11 +1,13 @@
 import type { CapabilityProjectReport } from "./capabilities-tool.js";
-import type { CheckAssuranceContext, CheckConfig, CheckDiagnostic } from "./check-diagnostics.js";
+import type { CheckAssuranceContext, CheckConfig, CheckTypecheckResult } from "./check-diagnostics.js";
 import type { ManifestDriftFinding, SourceFinding, StaticRouteFinding, TransitiveServerImportFinding } from "./check-scan.js";
 import type { DoctorResult } from "./doctor.js";
 import type { PipelineReport } from "./pipeline-report.js";
 import type { RulePack, SourceIndex } from "./rules/index.js";
 export interface ProjectSourceFindings {
     readonly fetches: readonly SourceFinding[];
+    /** Hand-rolled `new EventSource("/…")` / `new WebSocket("/…")` to the app's own streaming surface. */
+    readonly streams: readonly SourceFinding[];
     readonly untypedClients: readonly SourceFinding[];
     readonly removedImports: readonly SourceFinding[];
     readonly responseRoutes: readonly SourceFinding[];
@@ -21,6 +23,23 @@ export interface ProjectPolicyFacts {
     readonly checkConfig: CheckConfig;
     readonly rulePacks: readonly RulePack[];
 }
+export interface ContractCheckFacts {
+    readonly present: boolean;
+    readonly vacuous: boolean;
+    readonly diagnostics: readonly {
+        readonly route?: string;
+        readonly message: string;
+    }[];
+    readonly error?: string;
+}
+/** Check-wide inputs that rules format into diagnostics. Scanners populate facts; rules own policy. */
+export interface ProjectCheckFacts {
+    readonly typecheck: CheckTypecheckResult;
+    readonly sqlCompilerAvailable: boolean;
+    readonly checkConfigError?: string;
+    readonly checkConfigWarnings: readonly string[];
+    readonly contracts: ContractCheckFacts;
+}
 export interface ProjectFacts {
     readonly source: SourceIndex;
     readonly routes: readonly StaticRouteFinding[];
@@ -28,14 +47,14 @@ export interface ProjectFacts {
     readonly packages: ProjectPackageFacts;
     readonly pipeline?: PipelineReport;
     readonly policies: ProjectPolicyFacts;
+    readonly check: ProjectCheckFacts;
     readonly sourceFindings: ProjectSourceFindings;
-    readonly legacyDiagnostics: readonly CheckDiagnostic[];
 }
-export type ProjectFactsSeed = Omit<ProjectFacts, "legacyDiagnostics">;
+export type ProjectFactsSeed = ProjectFacts;
 /**
  * Publish the one immutable rule snapshot. The loader owns all mutable scan buffers; rules only see
  * these copied, frozen collections. Policy/config objects remain caller-owned because assurance config
  * can contain executable adapters and must not be frozen as a side effect of checking.
  */
-export declare function freezeProjectFacts(seed: ProjectFactsSeed, legacyDiagnostics: readonly CheckDiagnostic[]): ProjectFacts;
+export declare function freezeProjectFacts(seed: ProjectFactsSeed): ProjectFacts;
 //# sourceMappingURL=project-facts.d.ts.map

package/dist/project-facts.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"project-facts.d.ts","sourceRoot":"","sources":["../src/project-facts.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,wBAAwB,CAAA;AACrE,OAAO,KAAK,EAAE,qBAAqB,EAAE,WAAW,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAA;AACjG,OAAO,KAAK,EACV,oBAAoB,EACpB,aAAa,EACb,kBAAkB,EAClB,6BAA6B,EAC9B,MAAM,iBAAiB,CAAA;AACxB,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,aAAa,CAAA;AAC/C,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAA;AAC1D,OAAO,KAAK,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAA;AAE7D,MAAM,WAAW,qBAAqB;IACpC,QAAQ,CAAC,OAAO,EAAE,SAAS,aAAa,EAAE,CAAA;IAC1C,QAAQ,CAAC,cAAc,EAAE,SAAS,aAAa,EAAE,CAAA;IACjD,QAAQ,CAAC,cAAc,EAAE,SAAS,aAAa,EAAE,CAAA;IACjD,QAAQ,CAAC,cAAc,EAAE,SAAS,aAAa,EAAE,CAAA;IACjD,QAAQ,CAAC,eAAe,EAAE,SAAS,aAAa,EAAE,CAAA;CACnD;AAED,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,MAAM,EAAE,YAAY,CAAA;IAC7B,QAAQ,CAAC,aAAa,EAAE,SAAS,oBAAoB,EAAE,CAAA;CACxD;AAED,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,SAAS,CAAC,EAAE,qBAAqB,CAAA;IAC1C,QAAQ,CAAC,UAAU,CAAC,EAAE,uBAAuB,CAAA;IAC7C,QAAQ,CAAC,WAAW,EAAE,WAAW,CAAA;IACjC,QAAQ,CAAC,SAAS,EAAE,SAAS,QAAQ,EAAE,CAAA;CACxC;AAED,MAAM,WAAW,YAAY;IAC3B,QAAQ,CAAC,MAAM,EAAE,WAAW,CAAA;IAC5B,QAAQ,CAAC,MAAM,EAAE,SAAS,kBAAkB,EAAE,CAAA;IAC9C,QAAQ,CAAC,WAAW,EAAE,SAAS,6BAA6B,EAAE,CAAA;IAC9D,QAAQ,CAAC,QAAQ,EAAE,mBAAmB,CAAA;IACtC,QAAQ,CAAC,QAAQ,CAAC,EAAE,cAAc,CAAA;IAClC,QAAQ,CAAC,QAAQ,EAAE,kBAAkB,CAAA;IACrC,QAAQ,CAAC,cAAc,EAAE,qBAAqB,CAAA;IAC9C,QAAQ,CAAC,iBAAiB,EAAE,SAAS,eAAe,EAAE,CAAA;CACvD;AAED,MAAM,MAAM,gBAAgB,GAAG,IAAI,CAAC,YAAY,EAAE,mBAAmB,CAAC,CAAA;AAMtE;;;;GAIG;AACH,wBAAgB,kBAAkB,CAChC,IAAI,EAAE,gBAAgB,EACtB,iBAAiB,EAAE,SAAS,eAAe,EAAE,GAC5C,YAAY,CA0Bd"}
+{"version":3,"file":"project-facts.d.ts","sourceRoot":"","sources":["../src/project-facts.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,wBAAwB,CAAA;AACrE,OAAO,KAAK,EACV,qBAAqB,EACrB,WAAW,EACX,oBAAoB,EACrB,MAAM,wBAAwB,CAAA;AAC/B,OAAO,KAAK,EACV,oBAAoB,EACpB,aAAa,EACb,kBAAkB,EAClB,6BAA6B,EAC9B,MAAM,iBAAiB,CAAA;AACxB,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,aAAa,CAAA;AAC/C,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAA;AAC1D,OAAO,KAAK,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAA;AAE7D,MAAM,WAAW,qBAAqB;IACpC,QAAQ,CAAC,OAAO,EAAE,SAAS,aAAa,EAAE,CAAA;IAC1C,sGAAsG;IACtG,QAAQ,CAAC,OAAO,EAAE,SAAS,aAAa,EAAE,CAAA;IAC1C,QAAQ,CAAC,cAAc,EAAE,SAAS,aAAa,EAAE,CAAA;IACjD,QAAQ,CAAC,cAAc,EAAE,SAAS,aAAa,EAAE,CAAA;IACjD,QAAQ,CAAC,cAAc,EAAE,SAAS,aAAa,EAAE,CAAA;IACjD,QAAQ,CAAC,eAAe,EAAE,SAAS,aAAa,EAAE,CAAA;CACnD;AAED,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,MAAM,EAAE,YAAY,CAAA;IAC7B,QAAQ,CAAC,aAAa,EAAE,SAAS,oBAAoB,EAAE,CAAA;CACxD;AAED,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,SAAS,CAAC,EAAE,qBAAqB,CAAA;IAC1C,QAAQ,CAAC,UAAU,CAAC,EAAE,uBAAuB,CAAA;IAC7C,QAAQ,CAAC,WAAW,EAAE,WAAW,CAAA;IACjC,QAAQ,CAAC,SAAS,EAAE,SAAS,QAAQ,EAAE,CAAA;CACxC;AAED,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAA;IACzB,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAA;IACzB,QAAQ,CAAC,WAAW,EAAE,SAAS;QAAE,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;KAAE,EAAE,CAAA;IACtF,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAA;CACxB;AAED,uGAAuG;AACvG,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,SAAS,EAAE,oBAAoB,CAAA;IACxC,QAAQ,CAAC,oBAAoB,EAAE,OAAO,CAAA;IACtC,QAAQ,CAAC,gBAAgB,CAAC,EAAE,MAAM,CAAA;IAClC,QAAQ,CAAC,mBAAmB,EAAE,SAAS,MAAM,EAAE,CAAA;IAC/C,QAAQ,CAAC,SAAS,EAAE,kBAAkB,CAAA;CACvC;AAED,MAAM,WAAW,YAAY;IAC3B,QAAQ,CAAC,MAAM,EAAE,WAAW,CAAA;IAC5B,QAAQ,CAAC,MAAM,EAAE,SAAS,kBAAkB,EAAE,CAAA;IAC9C,QAAQ,CAAC,WAAW,EAAE,SAAS,6BAA6B,EAAE,CAAA;IAC9D,QAAQ,CAAC,QAAQ,EAAE,mBAAmB,CAAA;IACtC,QAAQ,CAAC,QAAQ,CAAC,EAAE,cAAc,CAAA;IAClC,QAAQ,CAAC,QAAQ,EAAE,kBAAkB,CAAA;IACrC,QAAQ,CAAC,KAAK,EAAE,iBAAiB,CAAA;IACjC,QAAQ,CAAC,cAAc,EAAE,qBAAqB,CAAA;CAC/C;AAED,MAAM,MAAM,gBAAgB,GAAG,YAAY,CAAA;AAM3C;;;;GAIG;AACH,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,gBAAgB,GAAG,YAAY,CAoCvE"}

package/dist/project-facts.js

@@ -6,9 +6,10 @@ function freezeFindings(findings) {
  * these copied, frozen collections. Policy/config objects remain caller-owned because assurance config
  * can contain executable adapters and must not be frozen as a side effect of checking.
  */
-export function freezeProjectFacts(seed, legacyDiagnostics) {
+export function freezeProjectFacts(seed) {
     const sourceFindings = Object.freeze({
         fetches: freezeFindings(seed.sourceFindings.fetches),
+        streams: freezeFindings(seed.sourceFindings.streams),
         untypedClients: freezeFindings(seed.sourceFindings.untypedClients),
         removedImports: freezeFindings(seed.sourceFindings.removedImports),
         responseRoutes: freezeFindings(seed.sourceFindings.responseRoutes),
@@ -18,6 +19,15 @@ export function freezeProjectFacts(seed, legacyDiagnostics) {
         ...seed.policies,
         rulePacks: Object.freeze([...seed.policies.rulePacks]),
     });
+    const check = Object.freeze({
+        ...seed.check,
+        typecheck: Object.freeze({ ...seed.check.typecheck }),
+        checkConfigWarnings: Object.freeze([...seed.check.checkConfigWarnings]),
+        contracts: Object.freeze({
+            ...seed.check.contracts,
+            diagnostics: freezeFindings(seed.check.contracts.diagnostics),
+        }),
+    });
     return Object.freeze({
         ...seed,
         source: Object.freeze(seed.source),
@@ -29,8 +39,8 @@ export function freezeProjectFacts(seed, legacyDiagnostics) {
         }),
         ...(seed.pipeline === undefined ? {} : { pipeline: Object.freeze(seed.pipeline) }),
         policies,
+        check,
         sourceFindings,
-        legacyDiagnostics: freezeFindings(legacyDiagnostics),
     });
 }
 //# sourceMappingURL=project-facts.js.map

package/dist/project-facts.js.map

@@ -1 +1 @@
-{"version":3,"file":"project-facts.js","sourceRoot":"","sources":["../src/project-facts.ts"],"names":[],"mappings":"AA6CA,SAAS,cAAc,CAAmB,QAAsB;IAC9D,OAAO,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,GAAG,OAAO,EAAE,CAAC,CAAC,CAAC,CAAA;AAChF,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,kBAAkB,CAChC,IAAsB,EACtB,iBAA6C;IAE7C,MAAM,cAAc,GAA0B,MAAM,CAAC,MAAM,CAAC;QAC1D,OAAO,EAAE,cAAc,CAAC,IAAI,CAAC,cAAc,CAAC,OAAO,CAAC;QACpD,cAAc,EAAE,cAAc,CAAC,IAAI,CAAC,cAAc,CAAC,cAAc,CAAC;QAClE,cAAc,EAAE,cAAc,CAAC,IAAI,CAAC,cAAc,CAAC,cAAc,CAAC;QAClE,cAAc,EAAE,cAAc,CAAC,IAAI,CAAC,cAAc,CAAC,cAAc,CAAC;QAClE,eAAe,EAAE,cAAc,CAAC,IAAI,CAAC,cAAc,CAAC,eAAe,CAAC;KACrE,CAAC,CAAA;IACF,MAAM,QAAQ,GAAG,MAAM,CAAC,MAAM,CAAC;QAC7B,GAAG,IAAI,CAAC,QAAQ;QAChB,SAAS,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC;KACvD,CAAC,CAAA;IACF,OAAO,MAAM,CAAC,MAAM,CAAC;QACnB,GAAG,IAAI;QACP,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC;QAClC,MAAM,EAAE,cAAc,CAAC,IAAI,CAAC,MAAM,CAAC;QACnC,WAAW,EAAE,cAAc,CAAC,IAAI,CAAC,WAAW,CAAC;QAC7C,QAAQ,EAAE,MAAM,CAAC,MAAM,CAAC;YACtB,MAAM,EAAE,IAAI,CAAC,QAAQ,CAAC,MAAM;YAC5B,aAAa,EAAE,cAAc,CAAC,IAAI,CAAC,QAAQ,CAAC,aAAa,CAAC;SAC3D,CAAC;QACF,GAAG,CAAC,IAAI,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;QAClF,QAAQ;QACR,cAAc;QACd,iBAAiB,EAAE,cAAc,CAAC,iBAAiB,CAAC;KACrD,CAAC,CAAA;AACJ,CAAC"}
+{"version":3,"file":"project-facts.js","sourceRoot":"","sources":["../src/project-facts.ts"],"names":[],"mappings":"AAmEA,SAAS,cAAc,CAAmB,QAAsB;IAC9D,OAAO,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,GAAG,OAAO,EAAE,CAAC,CAAC,CAAC,CAAA;AAChF,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,kBAAkB,CAAC,IAAsB;IACvD,MAAM,cAAc,GAA0B,MAAM,CAAC,MAAM,CAAC;QAC1D,OAAO,EAAE,cAAc,CAAC,IAAI,CAAC,cAAc,CAAC,OAAO,CAAC;QACpD,OAAO,EAAE,cAAc,CAAC,IAAI,CAAC,cAAc,CAAC,OAAO,CAAC;QACpD,cAAc,EAAE,cAAc,CAAC,IAAI,CAAC,cAAc,CAAC,cAAc,CAAC;QAClE,cAAc,EAAE,cAAc,CAAC,IAAI,CAAC,cAAc,CAAC,cAAc,CAAC;QAClE,cAAc,EAAE,cAAc,CAAC,IAAI,CAAC,cAAc,CAAC,cAAc,CAAC;QAClE,eAAe,EAAE,cAAc,CAAC,IAAI,CAAC,cAAc,CAAC,eAAe,CAAC;KACrE,CAAC,CAAA;IACF,MAAM,QAAQ,GAAG,MAAM,CAAC,MAAM,CAAC;QAC7B,GAAG,IAAI,CAAC,QAAQ;QAChB,SAAS,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC;KACvD,CAAC,CAAA;IACF,MAAM,KAAK,GAAG,MAAM,CAAC,MAAM,CAAC;QAC1B,GAAG,IAAI,CAAC,KAAK;QACb,SAAS,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,SAAS,EAAE,CAAC;QACrD,mBAAmB,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,mBAAmB,CAAC,CAAC;QACvE,SAAS,EAAE,MAAM,CAAC,MAAM,CAAC;YACvB,GAAG,IAAI,CAAC,KAAK,CAAC,SAAS;YACvB,WAAW,EAAE,cAAc,CAAC,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,WAAW,CAAC;SAC9D,CAAC;KACH,CAAC,CAAA;IACF,OAAO,MAAM,CAAC,MAAM,CAAC;QACnB,GAAG,IAAI;QACP,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC;QAClC,MAAM,EAAE,cAAc,CAAC,IAAI,CAAC,MAAM,CAAC;QACnC,WAAW,EAAE,cAAc,CAAC,IAAI,CAAC,WAAW,CAAC;QAC7C,QAAQ,EAAE,MAAM,CAAC,MAAM,CAAC;YACtB,MAAM,EAAE,IAAI,CAAC,QAAQ,CAAC,MAAM;YAC5B,aAAa,EAAE,cAAc,CAAC,IAAI,CAAC,QAAQ,CAAC,aAAa,CAAC;SAC3D,CAAC;QACF,GAAG,CAAC,IAAI,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;QAClF,QAAQ;QACR,KAAK;QACL,cAAc;KACf,CAAC,CAAA;AACJ,CAAC"}

package/dist/review.d.ts

@@ -0,0 +1,21 @@
+import type { ReviewReport } from "@nifrajs/agent-review";
+import type { CommandCtx, CommandSpec } from "./command-catalog.js";
+export interface ReviewInput {
+    readonly strict?: boolean | undefined;
+    readonly diff?: string | undefined;
+    readonly sarif?: string | undefined;
+    readonly fix?: boolean | undefined;
+    readonly dryRun?: boolean | undefined;
+    readonly write?: boolean | undefined;
+    readonly json?: boolean | undefined;
+}
+export declare class ReviewInputError extends Error {
+    readonly exitCode: 2;
+    constructor(message: string);
+}
+/** Parse and validate the shared CLI/MCP review input before any collector is invoked. */
+export declare function parseReviewInput(value: unknown): ReviewInput;
+export declare function runReview(input: ReviewInput, ctx: CommandCtx): Promise<ReviewReport>;
+export declare function renderReviewReport(report: ReviewReport): readonly string[];
+export declare const reviewSpec: CommandSpec<ReviewInput, ReviewReport>;
+//# sourceMappingURL=review.d.ts.map

package/dist/review.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"review.d.ts","sourceRoot":"","sources":["../src/review.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EASV,YAAY,EAIb,MAAM,uBAAuB,CAAA;AAE9B,OAAO,KAAK,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,sBAAsB,CAAA;AAMnE,MAAM,WAAW,WAAW;IAC1B,QAAQ,CAAC,MAAM,CAAC,EAAE,OAAO,GAAG,SAAS,CAAA;IACrC,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;IAClC,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;IACnC,QAAQ,CAAC,GAAG,CAAC,EAAE,OAAO,GAAG,SAAS,CAAA;IAClC,QAAQ,CAAC,MAAM,CAAC,EAAE,OAAO,GAAG,SAAS,CAAA;IACrC,QAAQ,CAAC,KAAK,CAAC,EAAE,OAAO,GAAG,SAAS,CAAA;IACpC,QAAQ,CAAC,IAAI,CAAC,EAAE,OAAO,GAAG,SAAS,CAAA;CACpC;AAED,qBAAa,gBAAiB,SAAQ,KAAK;IACzC,QAAQ,CAAC,QAAQ,EAAG,CAAC,CAAS;gBAElB,OAAO,EAAE,MAAM;CAI5B;AAmJD,0FAA0F;AAC1F,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,OAAO,GAAG,WAAW,CAwB5D;AAkoBD,wBAAsB,SAAS,CAAC,KAAK,EAAE,WAAW,EAAE,GAAG,EAAE,UAAU,GAAG,OAAO,CAAC,YAAY,CAAC,CAsE1F;AAED,wBAAgB,kBAAkB,CAAC,MAAM,EAAE,YAAY,GAAG,SAAS,MAAM,EAAE,CAsB1E;AAED,eAAO,MAAM,UAAU,EAAE,WAAW,CAAC,WAAW,EAAE,YAAY,CAiC7D,CAAA"}