@noir-ai/cli 1.17.0-beta.1 → 1.18.0-beta.1

package/dist/hygiene-scan.js

@@ -15,6 +15,14 @@ var HYGIENE_MARKDOWN_EXTENSIONS = /\.(?:md|mdx)$/i;
 var HYGIENE_SKIP_DIRS = /* @__PURE__ */ new Set(["node_modules", "dist", "coverage"]);
 var HYGIENE_EXCLUDED_DIRS = /* @__PURE__ */ new Set(["docs/internal", "docs/decisions", "docs/roadmap"]);
 var HYGIENE_EXCLUDED_FILES = /* @__PURE__ */ new Set(["CHANGELOG.md"]);
+var HYGIENE_EXCLUDED_PATHS = /* @__PURE__ */ new Set([
+  "docs/README.md",
+  "docs/reference/cli.md",
+  "docs/reference/config.md",
+  "docs/reference/mcp-tools.md",
+  "docs/reference/packages.md",
+  "docs/reference/skills.md"
+]);
 function readDirEntries(dir) {
   try {
     return readdirSync(dir, { withFileTypes: true });
@@ -45,7 +53,8 @@ function hasScannableLayout(root) {
 }
 function addHygieneFile(rel, walk) {
   const name = rel.slice(rel.lastIndexOf("/") + 1);
-  if (name.startsWith(".") || HYGIENE_EXCLUDED_FILES.has(name)) return;
+  if (name.startsWith(".") || HYGIENE_EXCLUDED_FILES.has(name) || HYGIENE_EXCLUDED_PATHS.has(rel))
+    return;
   const kind = hygieneKindOf(rel);
   if (kind === null) return;
   if (walk.files.length >= HYGIENE_MAX_FILES) {

package/dist/hygiene-scan.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../src/hygiene-scan.ts"],"sourcesContent":["// Output hygiene — the repository-facing scan.\n//\n// The repository's own source and documents are checked against the hygiene\n// rules @noir-ai/skills declares: the patterns that make text read as machine\n// output. A fail-tier pattern is objectively mechanical (a divider drawn in\n// punctuation, numbered narration, a decorative emoji, a forbidden residue\n// token), so it blocks; a warn-tier pattern is a judgement call (a long comment\n// block, a marker nobody can act on), which would stall legitimate work if it\n// blocked, so it warns.\n//\n// The scan reads the repository's own text only. Generated and vendored trees,\n// the planning corpus, and formats the rules cannot read (JSON, an image\n// fixture) are out of scope; a file states its own exemption with the marker\n// the rules honour, so no path list is kept here.\n//\n// The scan runs only where the layout it is written for exists: a package\n// tree, `scripts/`, or `docs/`. Anywhere else — an ordinary application\n// repository, which is a README and little more — it reports an empty result\n// and reads nothing, root documents included. These rules judge the text this\n// project writes, not the prose of whoever happened to run the command.\n//\n// This module is the single source of truth for that scope: which files are\n// read, which directories are excluded, and the caps. `noir doctor` (via\n// `checkOutputHygiene` in ./commands/doctor.ts) and the CI gate\n// (scripts/hygiene-gate.mjs) both call `scanOutputHygiene`, so the two cannot\n// drift apart.\n\nimport { type Dirent, readdirSync, readFileSync, statSync } from 'node:fs';\nimport { join } from 'node:path';\nimport {\n  checkHygiene,\n  type HygieneKind,\n  type HygieneTier,\n  hasHygieneExemption,\n  humanizerFindings,\n  slopFindings,\n} from '@noir-ai/skills';\n\n/** How many findings the detail cell names before it reports the rest as a\n *  count. A tree that has drifted can carry hundreds, and the row is a signal\n *  to act on, not an inventory; the counts still cover every finding. */\nexport const HYGIENE_FINDING_CAP = 5;\n\n/** The largest file the scan reads. A file this big is generated data or a\n *  bundle rather than the source and prose the rules are written for. */\nexport const HYGIENE_MAX_FILE_BYTES = 512 * 1024;\n\n/** The most files one scan reads, so the check stays responsive in a tree far\n *  larger than this repository's. Reaching it is reported in the row. */\nexport const HYGIENE_MAX_FILES = 2000;\n\n/** The source extensions the check reads. Anything else is skipped: the rules\n *  are written for comments and for prose, and a data format (JSON, YAML) has\n *  no comment for them to read, while a binary fixture would only produce\n *  nonsense. */\nconst HYGIENE_CODE_EXTENSIONS = /\\.(?:ts|tsx|js|jsx|mjs|cjs|sh)$/i;\n\n/** The document extensions the check reads as prose. */\nconst HYGIENE_MARKDOWN_EXTENSIONS = /\\.(?:md|mdx)$/i;\n\n/** Directories the walk never descends into: dependencies, build output and\n *  coverage. A dot-directory is skipped too (`.git`, `.noir`, local scratch\n *  directories), which is how the maintainer's exclusion of session scratch is\n *  honoured by construction rather than by naming it here. */\nconst HYGIENE_SKIP_DIRS = new Set(['node_modules', 'dist', 'coverage']);\n\n/** Directories excluded from the scan by the maintainer's decision: the\n *  planning corpus, where decisions are recorded in the maintainer's own\n *  shorthand. Root-relative POSIX paths. */\nconst HYGIENE_EXCLUDED_DIRS = new Set(['docs/internal', 'docs/decisions', 'docs/roadmap']);\n\n/** The release log, excluded by basename wherever it sits: the root copy is the\n *  single source of truth and `docs/CHANGELOG.md` is a pointer to it. */\nconst HYGIENE_EXCLUDED_FILES = new Set(['CHANGELOG.md']);\n\n/** A file the scan will read, with the kind of text it holds. */\ninterface HygieneScanFile {\n  /** Root-relative POSIX path. */\n  path: string;\n  kind: HygieneKind;\n}\n\n/** One finding, reduced to what the report needs. */\nexport interface HygieneScanFinding {\n  path: string;\n  /** 1-based line number. */\n  line: number;\n  /** The rule id, exactly as the rule table declares it. */\n  id: string;\n  tier: HygieneTier;\n}\n\nexport interface HygieneScanResult {\n  /** Files read. */\n  scanned: number;\n  /** Files the scan did not read because they exceed the size cap. */\n  skipped: number;\n  /** True when the file cap stopped the scan before it read the whole tree, so\n   *  the counts below describe a prefix of it. */\n  truncated: boolean;\n  /** Every finding, failures first, then in reading order across the tree. */\n  findings: HygieneScanFinding[];\n  fail: number;\n  warn: number;\n}\n\n/** A walk in progress: the files it has accepted, and whether the file cap has\n *  stopped it. */\ninterface HygieneWalk {\n  files: HygieneScanFile[];\n  truncated: boolean;\n}\n\n/** `readdirSync` entries, or none when the directory does not exist. */\nfunction readDirEntries(dir: string): Dirent[] {\n  try {\n    return readdirSync(dir, { withFileTypes: true });\n  } catch {\n    return []; // absent or unreadable — there is nothing to scan\n  }\n}\n\n/** Whether `path` is an existing directory. */\nfunction isDirectory(path: string): boolean {\n  try {\n    return statSync(path).isDirectory();\n  } catch {\n    return false;\n  }\n}\n\n/** The kind of text a path holds, or `null` when the rules cannot read it. */\nfunction hygieneKindOf(path: string): HygieneKind | null {\n  if (HYGIENE_MARKDOWN_EXTENSIONS.test(path)) return 'markdown';\n  if (HYGIENE_CODE_EXTENSIONS.test(path)) return 'code';\n  return null;\n}\n\n/** The layout this check exists for: a package source or test tree, `scripts/`,\n *  or a documentation tree. A repository that has none of them is not the\n *  audience of these rules, and nothing is read there. */\nfunction hasScannableLayout(root: string): boolean {\n  if (isDirectory(join(root, 'docs')) || isDirectory(join(root, 'scripts'))) return true;\n  for (const entry of readDirEntries(join(root, 'packages'))) {\n    if (!entry.isDirectory()) continue;\n    if (isDirectory(join(root, 'packages', entry.name, 'src'))) return true;\n    if (isDirectory(join(root, 'packages', entry.name, 'test'))) return true;\n  }\n  return false;\n}\n\n/** Adds `rel` to the walk when it is a file the rules can read and the walk has\n *  room for it. A dot-file is never read (a dot-directory is skipped by the\n *  walk itself), and once the file cap is reached the walk records the\n *  truncation instead of adding more. */\nfunction addHygieneFile(rel: string, walk: HygieneWalk): void {\n  const name = rel.slice(rel.lastIndexOf('/') + 1);\n  if (name.startsWith('.') || HYGIENE_EXCLUDED_FILES.has(name)) return;\n  const kind = hygieneKindOf(rel);\n  if (kind === null) return;\n  if (walk.files.length >= HYGIENE_MAX_FILES) {\n    walk.truncated = true;\n    return;\n  }\n  walk.files.push({ path: rel, kind });\n}\n\n/** Offers every readable file under `root`/`relDir` to the walk. Symlinked\n *  directories are not followed: a link out of the tree is not the\n *  repository's own source, and a link to an ancestor would not terminate. */\nfunction walkScannable(\n  root: string,\n  relDir: string,\n  skip: ReadonlySet<string>,\n  walk: HygieneWalk,\n): void {\n  if (walk.truncated) return;\n  for (const entry of readDirEntries(join(root, relDir))) {\n    if (walk.truncated) return;\n    const rel = `${relDir}/${entry.name}`;\n    if (entry.isDirectory()) {\n      if (HYGIENE_SKIP_DIRS.has(entry.name) || entry.name.startsWith('.') || skip.has(rel)) {\n        continue;\n      }\n      walkScannable(root, rel, skip, walk);\n    } else if (entry.isFile()) {\n      addHygieneFile(rel, walk);\n    }\n  }\n}\n\nconst NO_SKIP_DIRS: ReadonlySet<string> = new Set();\n\n/** The files the check reads: documents at the root and under `docs/` (minus\n *  the planning corpus), the repository-authored agent skills, each package's\n *  sources and tests, and `scripts/`. Sorted by path so a report is the same on\n *  every run. Called only where {@link hasScannableLayout} holds. */\nfunction collectHygieneFiles(root: string): HygieneWalk {\n  const walk: HygieneWalk = { files: [], truncated: false };\n  for (const entry of readDirEntries(root)) {\n    if (entry.isFile()) addHygieneFile(entry.name, walk);\n  }\n  walkScannable(root, 'docs', HYGIENE_EXCLUDED_DIRS, walk);\n  walkScannable(root, '.claude/skills', NO_SKIP_DIRS, walk);\n  for (const entry of readDirEntries(join(root, 'packages'))) {\n    if (!entry.isDirectory()) continue;\n    walkScannable(root, `packages/${entry.name}/src`, NO_SKIP_DIRS, walk);\n    walkScannable(root, `packages/${entry.name}/test`, NO_SKIP_DIRS, walk);\n  }\n  walkScannable(root, 'scripts', NO_SKIP_DIRS, walk);\n  walk.files.sort((a, b) => (a.path < b.path ? -1 : a.path > b.path ? 1 : 0));\n  return walk;\n}\n\n/** What the scan left out, in one parenthesis. Empty when it left out nothing,\n *  so a complete report carries no note. */\nfunction hygieneOmissions(result: HygieneScanResult): string {\n  const notes: string[] = [];\n  if (result.skipped > 0) {\n    notes.push(\n      `${result.skipped} file${result.skipped === 1 ? '' : 's'} over ${HYGIENE_MAX_FILE_BYTES / 1024} KiB skipped`,\n    );\n  }\n  if (result.truncated) notes.push(`stopped at ${HYGIENE_MAX_FILES} files`);\n  return notes.length > 0 ? ` (${notes.join('; ')})` : '';\n}\n\n/** The counts line: how many findings of each tier, in how many files, and what\n *  the scan itself omitted. It names no location, so a caller that prints every\n *  finding on a line of its own pairs this with those lines instead of printing\n *  the same findings twice. */\nexport function hygieneCounts(result: HygieneScanResult): string {\n  const omitted = hygieneOmissions(result);\n  if (result.scanned === 0) {\n    return `nothing to scan (no packages/*/src, packages/*/test, scripts/ or documents found)${omitted}`;\n  }\n  if (result.findings.length === 0) {\n    return `clean — ${result.scanned} file${result.scanned === 1 ? '' : 's'} scanned${omitted}`;\n  }\n  const files = new Set(result.findings.map((f) => f.path)).size;\n  return `${result.fail} fail, ${result.warn} warn in ${files} file${files === 1 ? '' : 's'}${omitted}`;\n}\n\n/** The counts line followed by the locations that carry them, up to the cap.\n *  Failures are named before warnings, so a truncated list still shows what\n *  blocks. This is the doctor row, which has one line to work with. */\nexport function hygieneDetail(result: HygieneScanResult): string {\n  const counts = hygieneCounts(result);\n  if (result.scanned === 0 || result.findings.length === 0) return counts;\n  const named = result.findings.slice(0, HYGIENE_FINDING_CAP);\n  const hidden = result.findings.length - named.length;\n  const where = named.map((f) => `${f.path}:${f.line} ${f.id}`).join('; ');\n  return `${counts} — ${where}${hidden > 0 ? ` (+${hidden} more)` : ''}`;\n}\n\n/**\n * Reads the repository's own source and documents through `checkHygiene` and\n * returns the scan result: the files read, the findings (failures first), and\n * the fail/warn counts. It pushes no doctor row — that is the caller's\n * business (`checkOutputHygiene` in the doctor command, or the CI gate's own\n * report).\n *\n * Nothing is read unless {@link hasScannableLayout} holds, so a repository\n * without the layout gets an empty result and pays one `stat` per candidate.\n *\n * Each file is read once, and a file that carries the exemption marker comes\n * back from `checkHygiene` with no findings at all, so the marker costs one\n * scan of a file's text rather than a path list kept here. Files past the size\n * cap and files past the count cap are left out; the result says so.\n *\n * The scan never throws and never writes: an unreadable file is skipped, and\n * the commands that repair the tree (`noir skills lint`, the repository's own\n * sweep) are the caller's business.\n */\nexport function scanOutputHygiene(root: string): HygieneScanResult {\n  const empty: HygieneScanResult = {\n    scanned: 0,\n    skipped: 0,\n    truncated: false,\n    findings: [],\n    fail: 0,\n    warn: 0,\n  };\n  if (!hasScannableLayout(root)) return empty;\n  const walk = collectHygieneFiles(root);\n  const findings: HygieneScanFinding[] = [];\n  let scanned = 0;\n  let skipped = 0;\n  for (const file of walk.files) {\n    const abs = join(root, file.path);\n    try {\n      if (statSync(abs).size > HYGIENE_MAX_FILE_BYTES) {\n        skipped++;\n        continue;\n      }\n      const text = readFileSync(abs, 'utf8');\n      scanned++;\n      for (const found of checkHygiene(text, file.kind)) {\n        findings.push({ path: file.path, line: found.line, id: found.id, tier: found.tier });\n      }\n      if (file.kind === 'markdown' && !hasHygieneExemption(text, file.kind)) {\n        for (const found of [...slopFindings(text), ...humanizerFindings(text)]) {\n          findings.push({ path: file.path, line: found.line, id: found.id, tier: found.tier });\n        }\n      }\n    } catch {\n      // An unreadable path says nothing about hygiene — the store check owns\n      // broken files — so the scan moves on to the next one.\n    }\n  }\n  findings.sort((a, b) => {\n    if (a.tier !== b.tier) return a.tier === 'fail' ? -1 : 1;\n    if (a.path !== b.path) return a.path < b.path ? -1 : 1;\n    return a.line - b.line;\n  });\n  const fail = findings.filter((f) => f.tier === 'fail').length;\n  return {\n    scanned,\n    skipped,\n    truncated: walk.truncated,\n    findings,\n    fail,\n    warn: findings.length - fail,\n  };\n}\n"],"mappings":";AA2BA,SAAsB,aAAa,cAAc,gBAAgB;AACjE,SAAS,YAAY;AACrB;AAAA,EACE;AAAA,EAGA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AAKA,IAAM,sBAAsB;AAI5B,IAAM,yBAAyB,MAAM;AAIrC,IAAM,oBAAoB;AAMjC,IAAM,0BAA0B;AAGhC,IAAM,8BAA8B;AAMpC,IAAM,oBAAoB,oBAAI,IAAI,CAAC,gBAAgB,QAAQ,UAAU,CAAC;AAKtE,IAAM,wBAAwB,oBAAI,IAAI,CAAC,iBAAiB,kBAAkB,cAAc,CAAC;AAIzF,IAAM,yBAAyB,oBAAI,IAAI,CAAC,cAAc,CAAC;AAyCvD,SAAS,eAAe,KAAuB;AAC7C,MAAI;AACF,WAAO,YAAY,KAAK,EAAE,eAAe,KAAK,CAAC;AAAA,EACjD,QAAQ;AACN,WAAO,CAAC;AAAA,EACV;AACF;AAGA,SAAS,YAAY,MAAuB;AAC1C,MAAI;AACF,WAAO,SAAS,IAAI,EAAE,YAAY;AAAA,EACpC,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAGA,SAAS,cAAc,MAAkC;AACvD,MAAI,4BAA4B,KAAK,IAAI,EAAG,QAAO;AACnD,MAAI,wBAAwB,KAAK,IAAI,EAAG,QAAO;AAC/C,SAAO;AACT;AAKA,SAAS,mBAAmB,MAAuB;AACjD,MAAI,YAAY,KAAK,MAAM,MAAM,CAAC,KAAK,YAAY,KAAK,MAAM,SAAS,CAAC,EAAG,QAAO;AAClF,aAAW,SAAS,eAAe,KAAK,MAAM,UAAU,CAAC,GAAG;AAC1D,QAAI,CAAC,MAAM,YAAY,EAAG;AAC1B,QAAI,YAAY,KAAK,MAAM,YAAY,MAAM,MAAM,KAAK,CAAC,EAAG,QAAO;AACnE,QAAI,YAAY,KAAK,MAAM,YAAY,MAAM,MAAM,MAAM,CAAC,EAAG,QAAO;AAAA,EACtE;AACA,SAAO;AACT;AAMA,SAAS,eAAe,KAAa,MAAyB;AAC5D,QAAM,OAAO,IAAI,MAAM,IAAI,YAAY,GAAG,IAAI,CAAC;AAC/C,MAAI,KAAK,WAAW,GAAG,KAAK,uBAAuB,IAAI,IAAI,EAAG;AAC9D,QAAM,OAAO,cAAc,GAAG;AAC9B,MAAI,SAAS,KAAM;AACnB,MAAI,KAAK,MAAM,UAAU,mBAAmB;AAC1C,SAAK,YAAY;AACjB;AAAA,EACF;AACA,OAAK,MAAM,KAAK,EAAE,MAAM,KAAK,KAAK,CAAC;AACrC;AAKA,SAAS,cACP,MACA,QACA,MACA,MACM;AACN,MAAI,KAAK,UAAW;AACpB,aAAW,SAAS,eAAe,KAAK,MAAM,MAAM,CAAC,GAAG;AACtD,QAAI,KAAK,UAAW;AACpB,UAAM,MAAM,GAAG,MAAM,IAAI,MAAM,IAAI;AACnC,QAAI,MAAM,YAAY,GAAG;AACvB,UAAI,kBAAkB,IAAI,MAAM,IAAI,KAAK,MAAM,KAAK,WAAW,GAAG,KAAK,KAAK,IAAI,GAAG,GAAG;AACpF;AAAA,MACF;AACA,oBAAc,MAAM,KAAK,MAAM,IAAI;AAAA,IACrC,WAAW,MAAM,OAAO,GAAG;AACzB,qBAAe,KAAK,IAAI;AAAA,IAC1B;AAAA,EACF;AACF;AAEA,IAAM,eAAoC,oBAAI,IAAI;AAMlD,SAAS,oBAAoB,MAA2B;AACtD,QAAM,OAAoB,EAAE,OAAO,CAAC,GAAG,WAAW,MAAM;AACxD,aAAW,SAAS,eAAe,IAAI,GAAG;AACxC,QAAI,MAAM,OAAO,EAAG,gBAAe,MAAM,MAAM,IAAI;AAAA,EACrD;AACA,gBAAc,MAAM,QAAQ,uBAAuB,IAAI;AACvD,gBAAc,MAAM,kBAAkB,cAAc,IAAI;AACxD,aAAW,SAAS,eAAe,KAAK,MAAM,UAAU,CAAC,GAAG;AAC1D,QAAI,CAAC,MAAM,YAAY,EAAG;AAC1B,kBAAc,MAAM,YAAY,MAAM,IAAI,QAAQ,cAAc,IAAI;AACpE,kBAAc,MAAM,YAAY,MAAM,IAAI,SAAS,cAAc,IAAI;AAAA,EACvE;AACA,gBAAc,MAAM,WAAW,cAAc,IAAI;AACjD,OAAK,MAAM,KAAK,CAAC,GAAG,MAAO,EAAE,OAAO,EAAE,OAAO,KAAK,EAAE,OAAO,EAAE,OAAO,IAAI,CAAE;AAC1E,SAAO;AACT;AAIA,SAAS,iBAAiB,QAAmC;AAC3D,QAAM,QAAkB,CAAC;AACzB,MAAI,OAAO,UAAU,GAAG;AACtB,UAAM;AAAA,MACJ,GAAG,OAAO,OAAO,QAAQ,OAAO,YAAY,IAAI,KAAK,GAAG,SAAS,yBAAyB,IAAI;AAAA,IAChG;AAAA,EACF;AACA,MAAI,OAAO,UAAW,OAAM,KAAK,cAAc,iBAAiB,QAAQ;AACxE,SAAO,MAAM,SAAS,IAAI,KAAK,MAAM,KAAK,IAAI,CAAC,MAAM;AACvD;AAMO,SAAS,cAAc,QAAmC;AAC/D,QAAM,UAAU,iBAAiB,MAAM;AACvC,MAAI,OAAO,YAAY,GAAG;AACxB,WAAO,oFAAoF,OAAO;AAAA,EACpG;AACA,MAAI,OAAO,SAAS,WAAW,GAAG;AAChC,WAAO,gBAAW,OAAO,OAAO,QAAQ,OAAO,YAAY,IAAI,KAAK,GAAG,WAAW,OAAO;AAAA,EAC3F;AACA,QAAM,QAAQ,IAAI,IAAI,OAAO,SAAS,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,EAAE;AAC1D,SAAO,GAAG,OAAO,IAAI,UAAU,OAAO,IAAI,YAAY,KAAK,QAAQ,UAAU,IAAI,KAAK,GAAG,GAAG,OAAO;AACrG;AAKO,SAAS,cAAc,QAAmC;AAC/D,QAAM,SAAS,cAAc,MAAM;AACnC,MAAI,OAAO,YAAY,KAAK,OAAO,SAAS,WAAW,EAAG,QAAO;AACjE,QAAM,QAAQ,OAAO,SAAS,MAAM,GAAG,mBAAmB;AAC1D,QAAM,SAAS,OAAO,SAAS,SAAS,MAAM;AAC9C,QAAM,QAAQ,MAAM,IAAI,CAAC,MAAM,GAAG,EAAE,IAAI,IAAI,EAAE,IAAI,IAAI,EAAE,EAAE,EAAE,EAAE,KAAK,IAAI;AACvE,SAAO,GAAG,MAAM,WAAM,KAAK,GAAG,SAAS,IAAI,MAAM,MAAM,WAAW,EAAE;AACtE;AAqBO,SAAS,kBAAkB,MAAiC;AACjE,QAAM,QAA2B;AAAA,IAC/B,SAAS;AAAA,IACT,SAAS;AAAA,IACT,WAAW;AAAA,IACX,UAAU,CAAC;AAAA,IACX,MAAM;AAAA,IACN,MAAM;AAAA,EACR;AACA,MAAI,CAAC,mBAAmB,IAAI,EAAG,QAAO;AACtC,QAAM,OAAO,oBAAoB,IAAI;AACrC,QAAM,WAAiC,CAAC;AACxC,MAAI,UAAU;AACd,MAAI,UAAU;AACd,aAAW,QAAQ,KAAK,OAAO;AAC7B,UAAM,MAAM,KAAK,MAAM,KAAK,IAAI;AAChC,QAAI;AACF,UAAI,SAAS,GAAG,EAAE,OAAO,wBAAwB;AAC/C;AACA;AAAA,MACF;AACA,YAAM,OAAO,aAAa,KAAK,MAAM;AACrC;AACA,iBAAW,SAAS,aAAa,MAAM,KAAK,IAAI,GAAG;AACjD,iBAAS,KAAK,EAAE,MAAM,KAAK,MAAM,MAAM,MAAM,MAAM,IAAI,MAAM,IAAI,MAAM,MAAM,KAAK,CAAC;AAAA,MACrF;AACA,UAAI,KAAK,SAAS,cAAc,CAAC,oBAAoB,MAAM,KAAK,IAAI,GAAG;AACrE,mBAAW,SAAS,CAAC,GAAG,aAAa,IAAI,GAAG,GAAG,kBAAkB,IAAI,CAAC,GAAG;AACvE,mBAAS,KAAK,EAAE,MAAM,KAAK,MAAM,MAAM,MAAM,MAAM,IAAI,MAAM,IAAI,MAAM,MAAM,KAAK,CAAC;AAAA,QACrF;AAAA,MACF;AAAA,IACF,QAAQ;AAAA,IAGR;AAAA,EACF;AACA,WAAS,KAAK,CAAC,GAAG,MAAM;AACtB,QAAI,EAAE,SAAS,EAAE,KAAM,QAAO,EAAE,SAAS,SAAS,KAAK;AACvD,QAAI,EAAE,SAAS,EAAE,KAAM,QAAO,EAAE,OAAO,EAAE,OAAO,KAAK;AACrD,WAAO,EAAE,OAAO,EAAE;AAAA,EACpB,CAAC;AACD,QAAM,OAAO,SAAS,OAAO,CAAC,MAAM,EAAE,SAAS,MAAM,EAAE;AACvD,SAAO;AAAA,IACL;AAAA,IACA;AAAA,IACA,WAAW,KAAK;AAAA,IAChB;AAAA,IACA;AAAA,IACA,MAAM,SAAS,SAAS;AAAA,EAC1B;AACF;","names":[]}
+{"version":3,"sources":["../src/hygiene-scan.ts"],"sourcesContent":["// Output hygiene — the repository-facing scan.\n//\n// The repository's own source and documents are checked against the hygiene\n// rules @noir-ai/skills declares: the patterns that make text read as machine\n// output. A fail-tier pattern is objectively mechanical (a divider drawn in\n// punctuation, numbered narration, a decorative emoji, a forbidden residue\n// token), so it blocks; a warn-tier pattern is a judgement call (a long comment\n// block, a marker nobody can act on), which would stall legitimate work if it\n// blocked, so it warns.\n//\n// The scan reads the repository's own text only. Generated and vendored trees,\n// the planning corpus, and formats the rules cannot read (JSON, an image\n// fixture) are out of scope; a file states its own exemption with the marker\n// the rules honour, so no path list is kept here.\n//\n// The scan runs only where the layout it is written for exists: a package\n// tree, `scripts/`, or `docs/`. Anywhere else — an ordinary application\n// repository, which is a README and little more — it reports an empty result\n// and reads nothing, root documents included. These rules judge the text this\n// project writes, not the prose of whoever happened to run the command.\n//\n// This module is the single source of truth for that scope: which files are\n// read, which directories are excluded, and the caps. `noir doctor` (via\n// `checkOutputHygiene` in ./commands/doctor.ts) and the CI gate\n// (scripts/hygiene-gate.mjs) both call `scanOutputHygiene`, so the two cannot\n// drift apart.\n\nimport { type Dirent, readdirSync, readFileSync, statSync } from 'node:fs';\nimport { join } from 'node:path';\nimport {\n  checkHygiene,\n  type HygieneKind,\n  type HygieneTier,\n  hasHygieneExemption,\n  humanizerFindings,\n  slopFindings,\n} from '@noir-ai/skills';\n\n/** How many findings the detail cell names before it reports the rest as a\n *  count. A tree that has drifted can carry hundreds, and the row is a signal\n *  to act on, not an inventory; the counts still cover every finding. */\nexport const HYGIENE_FINDING_CAP = 5;\n\n/** The largest file the scan reads. A file this big is generated data or a\n *  bundle rather than the source and prose the rules are written for. */\nexport const HYGIENE_MAX_FILE_BYTES = 512 * 1024;\n\n/** The most files one scan reads, so the check stays responsive in a tree far\n *  larger than this repository's. Reaching it is reported in the row. */\nexport const HYGIENE_MAX_FILES = 2000;\n\n/** The source extensions the check reads. Anything else is skipped: the rules\n *  are written for comments and for prose, and a data format (JSON, YAML) has\n *  no comment for them to read, while a binary fixture would only produce\n *  nonsense. */\nconst HYGIENE_CODE_EXTENSIONS = /\\.(?:ts|tsx|js|jsx|mjs|cjs|sh)$/i;\n\n/** The document extensions the check reads as prose. */\nconst HYGIENE_MARKDOWN_EXTENSIONS = /\\.(?:md|mdx)$/i;\n\n/** Directories the walk never descends into: dependencies, build output and\n *  coverage. A dot-directory is skipped too (`.git`, `.noir`, local scratch\n *  directories), which is how the maintainer's exclusion of session scratch is\n *  honoured by construction rather than by naming it here. */\nconst HYGIENE_SKIP_DIRS = new Set(['node_modules', 'dist', 'coverage']);\n\n/** Directories excluded from the scan by the maintainer's decision: the\n *  planning corpus, where decisions are recorded in the maintainer's own\n *  shorthand. Root-relative POSIX paths. */\nconst HYGIENE_EXCLUDED_DIRS = new Set(['docs/internal', 'docs/decisions', 'docs/roadmap']);\n\n/** The release log, excluded by basename wherever it sits: the root copy is the\n *  single source of truth and `docs/CHANGELOG.md` is a pointer to it. */\nconst HYGIENE_EXCLUDED_FILES = new Set(['CHANGELOG.md']);\n\n/** Generated documentation, excluded by path: the reference pages and the\n *  `docs/README.md` index are regenerated from schemas, skill descriptions and\n *  tool definitions, so their prose is not the hand-written text the rules are\n *  written for. A rule finding there reflects the source, not a slop slip, and\n *  an edit would be overwritten by the next `pnpm docs:generate`. Root-relative\n *  POSIX paths. */\nconst HYGIENE_EXCLUDED_PATHS = new Set([\n  'docs/README.md',\n  'docs/reference/cli.md',\n  'docs/reference/config.md',\n  'docs/reference/mcp-tools.md',\n  'docs/reference/packages.md',\n  'docs/reference/skills.md',\n]);\n\n/** A file the scan will read, with the kind of text it holds. */\ninterface HygieneScanFile {\n  /** Root-relative POSIX path. */\n  path: string;\n  kind: HygieneKind;\n}\n\n/** One finding, reduced to what the report needs. */\nexport interface HygieneScanFinding {\n  path: string;\n  /** 1-based line number. */\n  line: number;\n  /** The rule id, exactly as the rule table declares it. */\n  id: string;\n  tier: HygieneTier;\n}\n\nexport interface HygieneScanResult {\n  /** Files read. */\n  scanned: number;\n  /** Files the scan did not read because they exceed the size cap. */\n  skipped: number;\n  /** True when the file cap stopped the scan before it read the whole tree, so\n   *  the counts below describe a prefix of it. */\n  truncated: boolean;\n  /** Every finding, failures first, then in reading order across the tree. */\n  findings: HygieneScanFinding[];\n  fail: number;\n  warn: number;\n}\n\n/** A walk in progress: the files it has accepted, and whether the file cap has\n *  stopped it. */\ninterface HygieneWalk {\n  files: HygieneScanFile[];\n  truncated: boolean;\n}\n\n/** `readdirSync` entries, or none when the directory does not exist. */\nfunction readDirEntries(dir: string): Dirent[] {\n  try {\n    return readdirSync(dir, { withFileTypes: true });\n  } catch {\n    return []; // absent or unreadable — there is nothing to scan\n  }\n}\n\n/** Whether `path` is an existing directory. */\nfunction isDirectory(path: string): boolean {\n  try {\n    return statSync(path).isDirectory();\n  } catch {\n    return false;\n  }\n}\n\n/** The kind of text a path holds, or `null` when the rules cannot read it. */\nfunction hygieneKindOf(path: string): HygieneKind | null {\n  if (HYGIENE_MARKDOWN_EXTENSIONS.test(path)) return 'markdown';\n  if (HYGIENE_CODE_EXTENSIONS.test(path)) return 'code';\n  return null;\n}\n\n/** The layout this check exists for: a package source or test tree, `scripts/`,\n *  or a documentation tree. A repository that has none of them is not the\n *  audience of these rules, and nothing is read there. */\nfunction hasScannableLayout(root: string): boolean {\n  if (isDirectory(join(root, 'docs')) || isDirectory(join(root, 'scripts'))) return true;\n  for (const entry of readDirEntries(join(root, 'packages'))) {\n    if (!entry.isDirectory()) continue;\n    if (isDirectory(join(root, 'packages', entry.name, 'src'))) return true;\n    if (isDirectory(join(root, 'packages', entry.name, 'test'))) return true;\n  }\n  return false;\n}\n\n/** Adds `rel` to the walk when it is a file the rules can read and the walk has\n *  room for it. A dot-file is never read (a dot-directory is skipped by the\n *  walk itself), and once the file cap is reached the walk records the\n *  truncation instead of adding more. */\nfunction addHygieneFile(rel: string, walk: HygieneWalk): void {\n  const name = rel.slice(rel.lastIndexOf('/') + 1);\n  if (name.startsWith('.') || HYGIENE_EXCLUDED_FILES.has(name) || HYGIENE_EXCLUDED_PATHS.has(rel))\n    return;\n  const kind = hygieneKindOf(rel);\n  if (kind === null) return;\n  if (walk.files.length >= HYGIENE_MAX_FILES) {\n    walk.truncated = true;\n    return;\n  }\n  walk.files.push({ path: rel, kind });\n}\n\n/** Offers every readable file under `root`/`relDir` to the walk. Symlinked\n *  directories are not followed: a link out of the tree is not the\n *  repository's own source, and a link to an ancestor would not terminate. */\nfunction walkScannable(\n  root: string,\n  relDir: string,\n  skip: ReadonlySet<string>,\n  walk: HygieneWalk,\n): void {\n  if (walk.truncated) return;\n  for (const entry of readDirEntries(join(root, relDir))) {\n    if (walk.truncated) return;\n    const rel = `${relDir}/${entry.name}`;\n    if (entry.isDirectory()) {\n      if (HYGIENE_SKIP_DIRS.has(entry.name) || entry.name.startsWith('.') || skip.has(rel)) {\n        continue;\n      }\n      walkScannable(root, rel, skip, walk);\n    } else if (entry.isFile()) {\n      addHygieneFile(rel, walk);\n    }\n  }\n}\n\nconst NO_SKIP_DIRS: ReadonlySet<string> = new Set();\n\n/** The files the check reads: documents at the root and under `docs/` (minus\n *  the planning corpus), the repository-authored agent skills, each package's\n *  sources and tests, and `scripts/`. Sorted by path so a report is the same on\n *  every run. Called only where {@link hasScannableLayout} holds. */\nfunction collectHygieneFiles(root: string): HygieneWalk {\n  const walk: HygieneWalk = { files: [], truncated: false };\n  for (const entry of readDirEntries(root)) {\n    if (entry.isFile()) addHygieneFile(entry.name, walk);\n  }\n  walkScannable(root, 'docs', HYGIENE_EXCLUDED_DIRS, walk);\n  walkScannable(root, '.claude/skills', NO_SKIP_DIRS, walk);\n  for (const entry of readDirEntries(join(root, 'packages'))) {\n    if (!entry.isDirectory()) continue;\n    walkScannable(root, `packages/${entry.name}/src`, NO_SKIP_DIRS, walk);\n    walkScannable(root, `packages/${entry.name}/test`, NO_SKIP_DIRS, walk);\n  }\n  walkScannable(root, 'scripts', NO_SKIP_DIRS, walk);\n  walk.files.sort((a, b) => (a.path < b.path ? -1 : a.path > b.path ? 1 : 0));\n  return walk;\n}\n\n/** What the scan left out, in one parenthesis. Empty when it left out nothing,\n *  so a complete report carries no note. */\nfunction hygieneOmissions(result: HygieneScanResult): string {\n  const notes: string[] = [];\n  if (result.skipped > 0) {\n    notes.push(\n      `${result.skipped} file${result.skipped === 1 ? '' : 's'} over ${HYGIENE_MAX_FILE_BYTES / 1024} KiB skipped`,\n    );\n  }\n  if (result.truncated) notes.push(`stopped at ${HYGIENE_MAX_FILES} files`);\n  return notes.length > 0 ? ` (${notes.join('; ')})` : '';\n}\n\n/** The counts line: how many findings of each tier, in how many files, and what\n *  the scan itself omitted. It names no location, so a caller that prints every\n *  finding on a line of its own pairs this with those lines instead of printing\n *  the same findings twice. */\nexport function hygieneCounts(result: HygieneScanResult): string {\n  const omitted = hygieneOmissions(result);\n  if (result.scanned === 0) {\n    return `nothing to scan (no packages/*/src, packages/*/test, scripts/ or documents found)${omitted}`;\n  }\n  if (result.findings.length === 0) {\n    return `clean — ${result.scanned} file${result.scanned === 1 ? '' : 's'} scanned${omitted}`;\n  }\n  const files = new Set(result.findings.map((f) => f.path)).size;\n  return `${result.fail} fail, ${result.warn} warn in ${files} file${files === 1 ? '' : 's'}${omitted}`;\n}\n\n/** The counts line followed by the locations that carry them, up to the cap.\n *  Failures are named before warnings, so a truncated list still shows what\n *  blocks. This is the doctor row, which has one line to work with. */\nexport function hygieneDetail(result: HygieneScanResult): string {\n  const counts = hygieneCounts(result);\n  if (result.scanned === 0 || result.findings.length === 0) return counts;\n  const named = result.findings.slice(0, HYGIENE_FINDING_CAP);\n  const hidden = result.findings.length - named.length;\n  const where = named.map((f) => `${f.path}:${f.line} ${f.id}`).join('; ');\n  return `${counts} — ${where}${hidden > 0 ? ` (+${hidden} more)` : ''}`;\n}\n\n/**\n * Reads the repository's own source and documents through `checkHygiene` and\n * returns the scan result: the files read, the findings (failures first), and\n * the fail/warn counts. It pushes no doctor row — that is the caller's\n * business (`checkOutputHygiene` in the doctor command, or the CI gate's own\n * report).\n *\n * Nothing is read unless {@link hasScannableLayout} holds, so a repository\n * without the layout gets an empty result and pays one `stat` per candidate.\n *\n * Each file is read once, and a file that carries the exemption marker comes\n * back from `checkHygiene` with no findings at all, so the marker costs one\n * scan of a file's text rather than a path list kept here. Files past the size\n * cap and files past the count cap are left out; the result says so.\n *\n * The scan never throws and never writes: an unreadable file is skipped, and\n * the commands that repair the tree (`noir skills lint`, the repository's own\n * sweep) are the caller's business.\n */\nexport function scanOutputHygiene(root: string): HygieneScanResult {\n  const empty: HygieneScanResult = {\n    scanned: 0,\n    skipped: 0,\n    truncated: false,\n    findings: [],\n    fail: 0,\n    warn: 0,\n  };\n  if (!hasScannableLayout(root)) return empty;\n  const walk = collectHygieneFiles(root);\n  const findings: HygieneScanFinding[] = [];\n  let scanned = 0;\n  let skipped = 0;\n  for (const file of walk.files) {\n    const abs = join(root, file.path);\n    try {\n      if (statSync(abs).size > HYGIENE_MAX_FILE_BYTES) {\n        skipped++;\n        continue;\n      }\n      const text = readFileSync(abs, 'utf8');\n      scanned++;\n      for (const found of checkHygiene(text, file.kind)) {\n        findings.push({ path: file.path, line: found.line, id: found.id, tier: found.tier });\n      }\n      if (file.kind === 'markdown' && !hasHygieneExemption(text, file.kind)) {\n        for (const found of [...slopFindings(text), ...humanizerFindings(text)]) {\n          findings.push({ path: file.path, line: found.line, id: found.id, tier: found.tier });\n        }\n      }\n    } catch {\n      // An unreadable path says nothing about hygiene — the store check owns\n      // broken files — so the scan moves on to the next one.\n    }\n  }\n  findings.sort((a, b) => {\n    if (a.tier !== b.tier) return a.tier === 'fail' ? -1 : 1;\n    if (a.path !== b.path) return a.path < b.path ? -1 : 1;\n    return a.line - b.line;\n  });\n  const fail = findings.filter((f) => f.tier === 'fail').length;\n  return {\n    scanned,\n    skipped,\n    truncated: walk.truncated,\n    findings,\n    fail,\n    warn: findings.length - fail,\n  };\n}\n"],"mappings":";AA2BA,SAAsB,aAAa,cAAc,gBAAgB;AACjE,SAAS,YAAY;AACrB;AAAA,EACE;AAAA,EAGA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AAKA,IAAM,sBAAsB;AAI5B,IAAM,yBAAyB,MAAM;AAIrC,IAAM,oBAAoB;AAMjC,IAAM,0BAA0B;AAGhC,IAAM,8BAA8B;AAMpC,IAAM,oBAAoB,oBAAI,IAAI,CAAC,gBAAgB,QAAQ,UAAU,CAAC;AAKtE,IAAM,wBAAwB,oBAAI,IAAI,CAAC,iBAAiB,kBAAkB,cAAc,CAAC;AAIzF,IAAM,yBAAyB,oBAAI,IAAI,CAAC,cAAc,CAAC;AAQvD,IAAM,yBAAyB,oBAAI,IAAI;AAAA,EACrC;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF,CAAC;AAyCD,SAAS,eAAe,KAAuB;AAC7C,MAAI;AACF,WAAO,YAAY,KAAK,EAAE,eAAe,KAAK,CAAC;AAAA,EACjD,QAAQ;AACN,WAAO,CAAC;AAAA,EACV;AACF;AAGA,SAAS,YAAY,MAAuB;AAC1C,MAAI;AACF,WAAO,SAAS,IAAI,EAAE,YAAY;AAAA,EACpC,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAGA,SAAS,cAAc,MAAkC;AACvD,MAAI,4BAA4B,KAAK,IAAI,EAAG,QAAO;AACnD,MAAI,wBAAwB,KAAK,IAAI,EAAG,QAAO;AAC/C,SAAO;AACT;AAKA,SAAS,mBAAmB,MAAuB;AACjD,MAAI,YAAY,KAAK,MAAM,MAAM,CAAC,KAAK,YAAY,KAAK,MAAM,SAAS,CAAC,EAAG,QAAO;AAClF,aAAW,SAAS,eAAe,KAAK,MAAM,UAAU,CAAC,GAAG;AAC1D,QAAI,CAAC,MAAM,YAAY,EAAG;AAC1B,QAAI,YAAY,KAAK,MAAM,YAAY,MAAM,MAAM,KAAK,CAAC,EAAG,QAAO;AACnE,QAAI,YAAY,KAAK,MAAM,YAAY,MAAM,MAAM,MAAM,CAAC,EAAG,QAAO;AAAA,EACtE;AACA,SAAO;AACT;AAMA,SAAS,eAAe,KAAa,MAAyB;AAC5D,QAAM,OAAO,IAAI,MAAM,IAAI,YAAY,GAAG,IAAI,CAAC;AAC/C,MAAI,KAAK,WAAW,GAAG,KAAK,uBAAuB,IAAI,IAAI,KAAK,uBAAuB,IAAI,GAAG;AAC5F;AACF,QAAM,OAAO,cAAc,GAAG;AAC9B,MAAI,SAAS,KAAM;AACnB,MAAI,KAAK,MAAM,UAAU,mBAAmB;AAC1C,SAAK,YAAY;AACjB;AAAA,EACF;AACA,OAAK,MAAM,KAAK,EAAE,MAAM,KAAK,KAAK,CAAC;AACrC;AAKA,SAAS,cACP,MACA,QACA,MACA,MACM;AACN,MAAI,KAAK,UAAW;AACpB,aAAW,SAAS,eAAe,KAAK,MAAM,MAAM,CAAC,GAAG;AACtD,QAAI,KAAK,UAAW;AACpB,UAAM,MAAM,GAAG,MAAM,IAAI,MAAM,IAAI;AACnC,QAAI,MAAM,YAAY,GAAG;AACvB,UAAI,kBAAkB,IAAI,MAAM,IAAI,KAAK,MAAM,KAAK,WAAW,GAAG,KAAK,KAAK,IAAI,GAAG,GAAG;AACpF;AAAA,MACF;AACA,oBAAc,MAAM,KAAK,MAAM,IAAI;AAAA,IACrC,WAAW,MAAM,OAAO,GAAG;AACzB,qBAAe,KAAK,IAAI;AAAA,IAC1B;AAAA,EACF;AACF;AAEA,IAAM,eAAoC,oBAAI,IAAI;AAMlD,SAAS,oBAAoB,MAA2B;AACtD,QAAM,OAAoB,EAAE,OAAO,CAAC,GAAG,WAAW,MAAM;AACxD,aAAW,SAAS,eAAe,IAAI,GAAG;AACxC,QAAI,MAAM,OAAO,EAAG,gBAAe,MAAM,MAAM,IAAI;AAAA,EACrD;AACA,gBAAc,MAAM,QAAQ,uBAAuB,IAAI;AACvD,gBAAc,MAAM,kBAAkB,cAAc,IAAI;AACxD,aAAW,SAAS,eAAe,KAAK,MAAM,UAAU,CAAC,GAAG;AAC1D,QAAI,CAAC,MAAM,YAAY,EAAG;AAC1B,kBAAc,MAAM,YAAY,MAAM,IAAI,QAAQ,cAAc,IAAI;AACpE,kBAAc,MAAM,YAAY,MAAM,IAAI,SAAS,cAAc,IAAI;AAAA,EACvE;AACA,gBAAc,MAAM,WAAW,cAAc,IAAI;AACjD,OAAK,MAAM,KAAK,CAAC,GAAG,MAAO,EAAE,OAAO,EAAE,OAAO,KAAK,EAAE,OAAO,EAAE,OAAO,IAAI,CAAE;AAC1E,SAAO;AACT;AAIA,SAAS,iBAAiB,QAAmC;AAC3D,QAAM,QAAkB,CAAC;AACzB,MAAI,OAAO,UAAU,GAAG;AACtB,UAAM;AAAA,MACJ,GAAG,OAAO,OAAO,QAAQ,OAAO,YAAY,IAAI,KAAK,GAAG,SAAS,yBAAyB,IAAI;AAAA,IAChG;AAAA,EACF;AACA,MAAI,OAAO,UAAW,OAAM,KAAK,cAAc,iBAAiB,QAAQ;AACxE,SAAO,MAAM,SAAS,IAAI,KAAK,MAAM,KAAK,IAAI,CAAC,MAAM;AACvD;AAMO,SAAS,cAAc,QAAmC;AAC/D,QAAM,UAAU,iBAAiB,MAAM;AACvC,MAAI,OAAO,YAAY,GAAG;AACxB,WAAO,oFAAoF,OAAO;AAAA,EACpG;AACA,MAAI,OAAO,SAAS,WAAW,GAAG;AAChC,WAAO,gBAAW,OAAO,OAAO,QAAQ,OAAO,YAAY,IAAI,KAAK,GAAG,WAAW,OAAO;AAAA,EAC3F;AACA,QAAM,QAAQ,IAAI,IAAI,OAAO,SAAS,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,EAAE;AAC1D,SAAO,GAAG,OAAO,IAAI,UAAU,OAAO,IAAI,YAAY,KAAK,QAAQ,UAAU,IAAI,KAAK,GAAG,GAAG,OAAO;AACrG;AAKO,SAAS,cAAc,QAAmC;AAC/D,QAAM,SAAS,cAAc,MAAM;AACnC,MAAI,OAAO,YAAY,KAAK,OAAO,SAAS,WAAW,EAAG,QAAO;AACjE,QAAM,QAAQ,OAAO,SAAS,MAAM,GAAG,mBAAmB;AAC1D,QAAM,SAAS,OAAO,SAAS,SAAS,MAAM;AAC9C,QAAM,QAAQ,MAAM,IAAI,CAAC,MAAM,GAAG,EAAE,IAAI,IAAI,EAAE,IAAI,IAAI,EAAE,EAAE,EAAE,EAAE,KAAK,IAAI;AACvE,SAAO,GAAG,MAAM,WAAM,KAAK,GAAG,SAAS,IAAI,MAAM,MAAM,WAAW,EAAE;AACtE;AAqBO,SAAS,kBAAkB,MAAiC;AACjE,QAAM,QAA2B;AAAA,IAC/B,SAAS;AAAA,IACT,SAAS;AAAA,IACT,WAAW;AAAA,IACX,UAAU,CAAC;AAAA,IACX,MAAM;AAAA,IACN,MAAM;AAAA,EACR;AACA,MAAI,CAAC,mBAAmB,IAAI,EAAG,QAAO;AACtC,QAAM,OAAO,oBAAoB,IAAI;AACrC,QAAM,WAAiC,CAAC;AACxC,MAAI,UAAU;AACd,MAAI,UAAU;AACd,aAAW,QAAQ,KAAK,OAAO;AAC7B,UAAM,MAAM,KAAK,MAAM,KAAK,IAAI;AAChC,QAAI;AACF,UAAI,SAAS,GAAG,EAAE,OAAO,wBAAwB;AAC/C;AACA;AAAA,MACF;AACA,YAAM,OAAO,aAAa,KAAK,MAAM;AACrC;AACA,iBAAW,SAAS,aAAa,MAAM,KAAK,IAAI,GAAG;AACjD,iBAAS,KAAK,EAAE,MAAM,KAAK,MAAM,MAAM,MAAM,MAAM,IAAI,MAAM,IAAI,MAAM,MAAM,KAAK,CAAC;AAAA,MACrF;AACA,UAAI,KAAK,SAAS,cAAc,CAAC,oBAAoB,MAAM,KAAK,IAAI,GAAG;AACrE,mBAAW,SAAS,CAAC,GAAG,aAAa,IAAI,GAAG,GAAG,kBAAkB,IAAI,CAAC,GAAG;AACvE,mBAAS,KAAK,EAAE,MAAM,KAAK,MAAM,MAAM,MAAM,MAAM,IAAI,MAAM,IAAI,MAAM,MAAM,KAAK,CAAC;AAAA,QACrF;AAAA,MACF;AAAA,IACF,QAAQ;AAAA,IAGR;AAAA,EACF;AACA,WAAS,KAAK,CAAC,GAAG,MAAM;AACtB,QAAI,EAAE,SAAS,EAAE,KAAM,QAAO,EAAE,SAAS,SAAS,KAAK;AACvD,QAAI,EAAE,SAAS,EAAE,KAAM,QAAO,EAAE,OAAO,EAAE,OAAO,KAAK;AACrD,WAAO,EAAE,OAAO,EAAE;AAAA,EACpB,CAAC;AACD,QAAM,OAAO,SAAS,OAAO,CAAC,MAAM,EAAE,SAAS,MAAM,EAAE;AACvD,SAAO;AAAA,IACL;AAAA,IACA;AAAA,IACA,WAAW,KAAK;AAAA,IAChB;AAAA,IACA;AAAA,IACA,MAAM,SAAS,SAAS;AAAA,EAC1B;AACF;","names":[]}

package/dist/index.js

@@ -3103,6 +3103,7 @@ function collectLeaves(cmd, path, out) {
   const isLeaf = hasAction(cmd) && children.length === 0;
   if (isLeaf) {
     const argv = path;
+    if (INTERNAL_LEAF_COMMANDS.has(argv.join(" "))) return;
     const id = argv.join(" ");
     const description = cmd.description() || argv.join(" ");
     out.push({
@@ -3126,7 +3127,7 @@ function buildPaletteCommands(program2) {
   collectLeaves(program2, [], out);
   return out;
 }
-var DESTRUCTIVE_PREFIXES;
+var DESTRUCTIVE_PREFIXES, INTERNAL_LEAF_COMMANDS;
 var init_registry = __esm({
   "src/tui/commands/registry.ts"() {
     "use strict";
@@ -3148,6 +3149,7 @@ var init_registry = __esm({
       ["update"],
       ["run"]
     ];
+    INTERNAL_LEAF_COMMANDS = /* @__PURE__ */ new Set(["hook"]);
   }
 });
 
@@ -3607,8 +3609,55 @@ var init_home = __esm({
   }
 });
 
+// src/commands/hook.ts
+import { existsSync as existsSync2, readFileSync as readFileSync2 } from "fs";
+import { join as join3 } from "path";
+function hook() {
+  let eventName = "SessionStart";
+  let root = process.cwd();
+  try {
+    const input = JSON.parse(readFileSync2(0, "utf8"));
+    if (typeof input.hook_event_name === "string" && input.hook_event_name !== "") {
+      eventName = input.hook_event_name;
+    }
+    if (typeof input.cwd === "string" && input.cwd !== "") root = input.cwd;
+  } catch {
+  }
+  process.stdout.write(JSON.stringify(hookOutput(eventName, root)));
+}
+function hookOutput(eventName, root) {
+  let routerPath = null;
+  let rulesPath = null;
+  for (let dir = root; ; dir = join3(dir, "..")) {
+    const router = join3(dir, ".noir", "router.md");
+    const rules = join3(dir, ".noir", "rules", "anti-slop.md");
+    if (existsSync2(router) || existsSync2(rules)) {
+      routerPath = router;
+      rulesPath = rules;
+      break;
+    }
+    const parent = join3(dir, "..");
+    if (parent === dir) break;
+  }
+  const parts = [];
+  for (const path of [routerPath, rulesPath]) {
+    if (path === null) continue;
+    try {
+      const text = readFileSync2(path, "utf8").trim();
+      if (text !== "") parts.push(text);
+    } catch {
+    }
+  }
+  return parts.length === 0 ? { hookSpecificOutput: { hookEventName: eventName } } : { hookSpecificOutput: { hookEventName: eventName, additionalContext: parts.join("\n\n") } };
+}
+var init_hook = __esm({
+  "src/commands/hook.ts"() {
+    "use strict";
+  }
+});
+
 // src/commands/memory.ts
-import { readFileSync as readFileSync2 } from "fs";
+import { readFileSync as readFileSync3 } from "fs";
 import { loadProjectInfo as loadProjectInfo11 } from "@noir-ai/core";
 function resolveWorkspace() {
   const routing = workspaceRoutingTarget(process.cwd());
@@ -3826,14 +3875,14 @@ async function resolveCaptureContent(opts) {
   if (typeof opts.content === "string" && opts.content.length > 0) return opts.content;
   if (typeof opts.file === "string" && opts.file.length > 0) {
     try {
-      return readFileSync2(opts.file, "utf8");
+      return readFileSync3(opts.file, "utf8");
     } catch {
       fail(EXIT.USAGE, `memory capture could not read --file ${opts.file}`, opts);
     }
   }
   if (!process.stdin.isTTY) {
     try {
-      return readFileSync2(0, "utf8");
+      return readFileSync3(0, "utf8");
     } catch {
       fail(
         EXIT.USAGE,
@@ -5216,8 +5265,8 @@ var init_run_status = __esm({
 });
 
 // src/commands/run.ts
-import { existsSync as existsSync2, mkdirSync as mkdirSync3, writeFileSync as writeFileSync4 } from "fs";
-import { join as join3 } from "path";
+import { existsSync as existsSync3, mkdirSync as mkdirSync3, writeFileSync as writeFileSync4 } from "fs";
+import { join as join4 } from "path";
 import { SUPPORTED_HOSTS } from "@noir-ai/adapters";
 import { isDeniedEnvKey as isDeniedEnvKey2, loadNoirEnv as loadNoirEnv2, NOIR_DIR as NOIR_DIR2, parseConfig, paths } from "@noir-ai/core";
 function credentialNote(env2, sources) {
@@ -5277,7 +5326,7 @@ async function runOnce(prompt, opts, resumeSessionId) {
   const customBinary = opts.command ?? profile.binary;
   const extraArgs = resumeSessionId === void 0 ? profile.args : [...profile.args ?? [], "--resume", resumeSessionId];
   const env2 = profile.env ? mergeEnv(process.env, profile.env) : void 0;
-  if (!existsSync2(join3(root, NOIR_DIR2, ".env"))) {
+  if (!existsSync3(join4(root, NOIR_DIR2, ".env"))) {
     log(
       `This project has no ${NOIR_DIR2}/.env \u2014 that is where Noir reads project credentials and run config from. Run \`noir init\` to scaffold one (\`noir run\` works without it).`,
       opts
@@ -5440,7 +5489,7 @@ function safeTranscript(host, lines) {
 function writeTranscript(host, lines, root = process.cwd()) {
   const ts = (/* @__PURE__ */ new Date()).toISOString().replace(/[:.]/g, "-");
   const dir = paths.transcriptsDir(root);
-  const file = join3(dir, `${host}-${ts}.jsonl`);
+  const file = join4(dir, `${host}-${ts}.jsonl`);
   try {
     mkdirSync3(dir, { recursive: true, mode: 448 });
     writeFileSync4(file, `${lines.join("\n")}${lines.length > 0 ? "\n" : ""}`, { mode: 384 });
@@ -5576,8 +5625,8 @@ var init_conflict = __esm({
 });
 
 // src/dedup-write.ts
-import { mkdirSync as mkdirSync4, readFileSync as readFileSync3, rmSync, writeFileSync as writeFileSync5 } from "fs";
-import { join as join4 } from "path";
+import { mkdirSync as mkdirSync4, readFileSync as readFileSync4, rmSync, writeFileSync as writeFileSync5 } from "fs";
+import { join as join5 } from "path";
 import { sha256Hex as sha256Hex2, sha256Hex12 } from "@noir-ai/core";
 async function checkWritePathDedup(root, res, opts) {
   const result = { found: [], conflicts: [] };
@@ -5588,10 +5637,10 @@ async function checkWritePathDedup(root, res, opts) {
   if (embed === void 0) return result;
   const cachedEmbed = makeCachedEmbed(cache, embed);
   for (const proposedRel of writtenHostFiles) {
-    const proposedAbs = join4(root, proposedRel);
+    const proposedAbs = join5(root, proposedRel);
     let proposedText;
     try {
-      proposedText = readFileSync3(proposedAbs, "utf8");
+      proposedText = readFileSync4(proposedAbs, "utf8");
     } catch {
       continue;
     }
@@ -5635,7 +5684,7 @@ async function checkWritePathDedup(root, res, opts) {
 `
       );
     }
-    const matchedText = safeRead(join4(root, matchedRel));
+    const matchedText = safeRead(join5(root, matchedRel));
     result.conflicts.push({
       path: proposedRel,
       mode: "artifact",
@@ -5719,21 +5768,21 @@ async function promptDedupAction(root, proposedRel, matchedRel, proposedText, si
   if (clack.isCancel(choice)) return "preserve";
   if (choice === "skip") {
     try {
-      rmSync(join4(root, proposedRel), { force: true });
+      rmSync(join5(root, proposedRel), { force: true });
     } catch {
     }
     return "preserve";
   } else if (choice === "replace") {
     try {
-      writeFileSync5(join4(root, matchedRel), proposedText, "utf8");
+      writeFileSync5(join5(root, matchedRel), proposedText, "utf8");
     } catch {
     }
     return "replace";
   } else if (choice === "mirror") {
     try {
-      const existing = readFileSync3(join4(root, matchedRel), "utf8");
+      const existing = readFileSync4(join5(root, matchedRel), "utf8");
       writeFileSync5(
-        join4(root, matchedRel),
+        join5(root, matchedRel),
         `${existing}
 
 <!-- mirrored from ${proposedRel} -->
@@ -5751,11 +5800,11 @@ function emptyCache() {
   return { version: DEDUP_CACHE_VERSION, model: "", entries: {} };
 }
 function cachePath(root) {
-  return join4(root, ".noir", "dedup-cache.json");
+  return join5(root, ".noir", "dedup-cache.json");
 }
 function loadCache(root) {
   try {
-    const raw = readFileSync3(cachePath(root), "utf8");
+    const raw = readFileSync4(cachePath(root), "utf8");
     const parsed = JSON.parse(raw);
     if (parsed.version !== DEDUP_CACHE_VERSION) return emptyCache();
     if (typeof parsed.entries !== "object" || parsed.entries === null) return emptyCache();
@@ -5770,7 +5819,7 @@ function loadCache(root) {
 }
 function saveCache(root, cache) {
   try {
-    mkdirSync4(join4(root, ".noir"), { recursive: true });
+    mkdirSync4(join5(root, ".noir"), { recursive: true });
     writeFileSync5(cachePath(root), JSON.stringify(cache), "utf8");
   } catch {
   }
@@ -5787,7 +5836,7 @@ function makeCachedEmbed(cache, embed) {
 }
 function safeRead(abs) {
   try {
-    return readFileSync3(abs, "utf8");
+    return readFileSync4(abs, "utf8");
   } catch {
     return void 0;
   }
@@ -5825,7 +5874,7 @@ var init_dedup_write = __esm({
 });
 
 // src/init.ts
-import { existsSync as existsSync3 } from "fs";
+import { existsSync as existsSync4 } from "fs";
 import { resolveAdapter as resolveAdapter2 } from "@noir-ai/adapters";
 import { loadProjectInfo as loadProjectInfo13, paths as paths2 } from "@noir-ai/core";
 import { scaffold } from "@noir-ai/create";
@@ -5890,7 +5939,7 @@ async function init(root, opts) {
 }
 function resolveInitHost(root, opts) {
   if (opts.host !== void 0) return opts.host;
-  if (!existsSync3(paths2.config(root))) return "claude";
+  if (!existsSync4(paths2.config(root))) return "claude";
   try {
     return loadProjectInfo13(root).config.host;
   } catch {
@@ -6362,7 +6411,7 @@ var sync_exports = {};
 __export(sync_exports, {
   sync: () => sync
 });
-import { existsSync as existsSync4 } from "fs";
+import { existsSync as existsSync5 } from "fs";
 import { resolveAdapter as resolveAdapter5 } from "@noir-ai/adapters";
 import { loadProjectInfo as loadProjectInfo17, paths as paths3 } from "@noir-ai/core";
 import { scaffold as scaffold3 } from "@noir-ai/create";
@@ -6435,7 +6484,7 @@ async function sync(root, opts = {}) {
 }
 function resolveSyncHost(root, opts) {
   if (opts.host !== void 0) return opts.host;
-  if (!existsSync4(paths3.config(root))) return "claude";
+  if (!existsSync5(paths3.config(root))) return "claude";
   try {
     return loadProjectInfo17(root).config.host;
   } catch {
@@ -6794,6 +6843,9 @@ function createProgram() {
   program2.command("env").description("which configuration is in effect and where each value comes from").action(async (...args) => {
     await env(toCliOptions(actionGlobals(args)));
   });
+  program2.command("hook", { hidden: true }).description("host hook runner (SessionStart / SubagentStart context injection)").action(async () => {
+    await hook();
+  });
   const contextGrp = program2.command("context").description("context engine");
   contextGrp.command("search").description("hybrid search over the indexed context").argument("<query>", "search query").option("--limit <n>", "max results", "10").action(async (...args) => {
     const cmd = trailingCmd(args);
@@ -7182,6 +7234,7 @@ var init_bin = __esm({
     init_env();
     init_handoff();
     init_home();
+    init_hook();
     init_memory();
     init_release();
     init_run();
@@ -7626,8 +7679,8 @@ var init_daemon_client = __esm({
 });
 
 // src/hygiene-scan.ts
-import { readdirSync as readdirSync2, readFileSync as readFileSync4, statSync } from "fs";
-import { join as join5 } from "path";
+import { readdirSync as readdirSync2, readFileSync as readFileSync5, statSync } from "fs";
+import { join as join6 } from "path";
 import {
   checkHygiene,
   hasHygieneExemption,
@@ -7654,17 +7707,18 @@ function hygieneKindOf(path) {
   return null;
 }
 function hasScannableLayout(root) {
-  if (isDirectory(join5(root, "docs")) || isDirectory(join5(root, "scripts"))) return true;
-  for (const entry of readDirEntries(join5(root, "packages"))) {
+  if (isDirectory(join6(root, "docs")) || isDirectory(join6(root, "scripts"))) return true;
+  for (const entry of readDirEntries(join6(root, "packages"))) {
     if (!entry.isDirectory()) continue;
-    if (isDirectory(join5(root, "packages", entry.name, "src"))) return true;
-    if (isDirectory(join5(root, "packages", entry.name, "test"))) return true;
+    if (isDirectory(join6(root, "packages", entry.name, "src"))) return true;
+    if (isDirectory(join6(root, "packages", entry.name, "test"))) return true;
   }
   return false;
 }
 function addHygieneFile(rel, walk) {
   const name = rel.slice(rel.lastIndexOf("/") + 1);
-  if (name.startsWith(".") || HYGIENE_EXCLUDED_FILES.has(name)) return;
+  if (name.startsWith(".") || HYGIENE_EXCLUDED_FILES.has(name) || HYGIENE_EXCLUDED_PATHS.has(rel))
+    return;
   const kind = hygieneKindOf(rel);
   if (kind === null) return;
   if (walk.files.length >= HYGIENE_MAX_FILES) {
@@ -7675,7 +7729,7 @@ function addHygieneFile(rel, walk) {
 }
 function walkScannable(root, relDir, skip, walk) {
   if (walk.truncated) return;
-  for (const entry of readDirEntries(join5(root, relDir))) {
+  for (const entry of readDirEntries(join6(root, relDir))) {
     if (walk.truncated) return;
     const rel = `${relDir}/${entry.name}`;
     if (entry.isDirectory()) {
@@ -7695,7 +7749,7 @@ function collectHygieneFiles(root) {
   }
   walkScannable(root, "docs", HYGIENE_EXCLUDED_DIRS, walk);
   walkScannable(root, ".claude/skills", NO_SKIP_DIRS, walk);
-  for (const entry of readDirEntries(join5(root, "packages"))) {
+  for (const entry of readDirEntries(join6(root, "packages"))) {
     if (!entry.isDirectory()) continue;
     walkScannable(root, `packages/${entry.name}/src`, NO_SKIP_DIRS, walk);
     walkScannable(root, `packages/${entry.name}/test`, NO_SKIP_DIRS, walk);
@@ -7748,13 +7802,13 @@ function scanOutputHygiene(root) {
   let scanned = 0;
   let skipped = 0;
   for (const file of walk.files) {
-    const abs = join5(root, file.path);
+    const abs = join6(root, file.path);
     try {
       if (statSync(abs).size > HYGIENE_MAX_FILE_BYTES) {
         skipped++;
         continue;
       }
-      const text = readFileSync4(abs, "utf8");
+      const text = readFileSync5(abs, "utf8");
       scanned++;
       for (const found of checkHygiene(text, file.kind)) {
         findings.push({ path: file.path, line: found.line, id: found.id, tier: found.tier });
@@ -7782,7 +7836,7 @@ function scanOutputHygiene(root) {
     warn: findings.length - fail2
   };
 }
-var HYGIENE_FINDING_CAP, HYGIENE_MAX_FILE_BYTES, HYGIENE_MAX_FILES, HYGIENE_CODE_EXTENSIONS, HYGIENE_MARKDOWN_EXTENSIONS, HYGIENE_SKIP_DIRS, HYGIENE_EXCLUDED_DIRS, HYGIENE_EXCLUDED_FILES, NO_SKIP_DIRS;
+var HYGIENE_FINDING_CAP, HYGIENE_MAX_FILE_BYTES, HYGIENE_MAX_FILES, HYGIENE_CODE_EXTENSIONS, HYGIENE_MARKDOWN_EXTENSIONS, HYGIENE_SKIP_DIRS, HYGIENE_EXCLUDED_DIRS, HYGIENE_EXCLUDED_FILES, HYGIENE_EXCLUDED_PATHS, NO_SKIP_DIRS;
 var init_hygiene_scan = __esm({
   "src/hygiene-scan.ts"() {
     "use strict";
@@ -7794,14 +7848,22 @@ var init_hygiene_scan = __esm({
     HYGIENE_SKIP_DIRS = /* @__PURE__ */ new Set(["node_modules", "dist", "coverage"]);
     HYGIENE_EXCLUDED_DIRS = /* @__PURE__ */ new Set(["docs/internal", "docs/decisions", "docs/roadmap"]);
     HYGIENE_EXCLUDED_FILES = /* @__PURE__ */ new Set(["CHANGELOG.md"]);
+    HYGIENE_EXCLUDED_PATHS = /* @__PURE__ */ new Set([
+      "docs/README.md",
+      "docs/reference/cli.md",
+      "docs/reference/config.md",
+      "docs/reference/mcp-tools.md",
+      "docs/reference/packages.md",
+      "docs/reference/skills.md"
+    ]);
     NO_SKIP_DIRS = /* @__PURE__ */ new Set();
   }
 });
 
 // src/commands/doctor.ts
 import { spawnSync as spawnSync3 } from "child_process";
-import { existsSync as existsSync5, readdirSync as readdirSync3, readFileSync as readFileSync5, statSync as statSync2 } from "fs";
-import { dirname, join as join6, relative } from "path";
+import { existsSync as existsSync6, readdirSync as readdirSync3, readFileSync as readFileSync6, statSync as statSync2 } from "fs";
+import { dirname, join as join7, relative } from "path";
 import { fileURLToPath } from "url";
 import { mcpConfigPathFor as mcpConfigPathFor2, resolveAdapter as resolveAdapter6 } from "@noir-ai/adapters";
 import {
@@ -7860,7 +7922,7 @@ async function checkRuntime(checks) {
 }
 function checkConfig(root) {
   const configPath = paths4.config(root);
-  if (!existsSync5(configPath)) {
+  if (!existsSync6(configPath)) {
     return {
       project: void 0,
       result: {
@@ -7960,7 +8022,7 @@ async function checkStore(checks, project, root) {
     return;
   }
   const dbPath = paths4.storeDb(root, project.id);
-  if (!existsSync5(dbPath)) {
+  if (!existsSync6(dbPath)) {
     checks.push({
       name: "store",
       status: "warn",
@@ -7999,7 +8061,7 @@ function describeEnvMode(cause, mode) {
   return cause === "legacy" ? `${lead} Nothing has changed its mode since the file was written, so the file predates the owner-only contract (an older Noir seeded it, a clone delivered it, it was created by hand, or it was saved by a tool that replaces the file) \u2014 this is not a change you made.` : `${lead} Its mode was changed after the file was written (a \`chmod\`, a \`chown\`, or a restore that re-applied metadata), so no older Noir left it this way.`;
 }
 function checkNoirEnv(checks, root, loaded) {
-  const path = join6(paths4.noirDir(root), ".env");
+  const path = join7(paths4.noirDir(root), ".env");
   let st;
   try {
     st = statSync2(path);
@@ -8118,10 +8180,10 @@ function checkScaffoldVersion(checks, root) {
   return { onDisk, current, drift };
 }
 function checkSeedDrift(checks, root) {
-  const seedPath = join6(root, ".noir", ".env.example");
+  const seedPath = join7(root, ".noir", ".env.example");
   let bytes;
   try {
-    bytes = readFileSync5(seedPath, "utf8");
+    bytes = readFileSync6(seedPath, "utf8");
   } catch {
     return;
   }
@@ -8148,7 +8210,7 @@ function checkRulesMdBudget(checks, root, project) {
     return null;
   }
   const rulesPath = paths4.rulesMd(root);
-  if (!existsSync5(rulesPath)) {
+  if (!existsSync6(rulesPath)) {
     checks.push({
       name: "rules budget",
       status: "ok",
@@ -8158,7 +8220,7 @@ function checkRulesMdBudget(checks, root, project) {
   }
   let content;
   try {
-    content = readFileSync5(rulesPath, "utf8");
+    content = readFileSync6(rulesPath, "utf8");
   } catch (e) {
     checks.push({
       name: "rules budget",
@@ -8212,7 +8274,7 @@ function checkHostArtifacts(checks, root, project) {
   if (host === "claude") expected.push("CLAUDE.md");
   else if (host === "gemini") expected.push("GEMINI.md");
   expected.push(relOr(mcpConfigPathFor2(host, root), root));
-  const missing = expected.filter((p) => !existsSync5(joinRoot(root, p)));
+  const missing = expected.filter((p) => !existsSync6(joinRoot(root, p)));
   const status2 = missing.length === 0 ? "ok" : "warn";
   const detail = missing.length === 0 ? `host=${host} \xB7 all ${expected.length} primary artifacts present` : `host=${host} \xB7 missing ${missing.join(", ")} (run \`noir sync\` to restore)`;
   checks.push({ name: "host artifacts", status: status2, detail });
@@ -8229,7 +8291,7 @@ function checkNestedNoir(checks, root) {
     ".noir/.npmignore",
     ".noir/.prettierignore"
   ];
-  const found = candidates.filter((rel) => existsSync5(join6(root, rel)));
+  const found = candidates.filter((rel) => existsSync6(join7(root, rel)));
   const detected = found.length > 0;
   checks.push({
     name: "nested .noir",
@@ -8251,11 +8313,11 @@ function collectDedupCandidates(root) {
   const rels = ["CLAUDE.md", "AGENTS.md", "GEMINI.md", ".noir/rules/RULES.md"];
   const out = [];
   for (const rel of rels) {
-    const abs = join6(root, rel);
-    if (!existsSync5(abs)) continue;
+    const abs = join7(root, rel);
+    if (!existsSync6(abs)) continue;
     let text;
     try {
-      text = readFileSync5(abs, "utf8");
+      text = readFileSync6(abs, "utf8");
     } catch {
       continue;
     }
@@ -8312,13 +8374,13 @@ async function checkSemanticDupDoctor(checks, root, project, opts = {}) {
 function resolveWorkspacePackagesDir() {
   let here = dirname(fileURLToPath(import.meta.url));
   for (let i = 0; i < 8; i++) {
-    const pkgPath = join6(here, "package.json");
-    if (existsSync5(pkgPath)) {
+    const pkgPath = join7(here, "package.json");
+    if (existsSync6(pkgPath)) {
       try {
-        const pkg = JSON.parse(readFileSync5(pkgPath, "utf8"));
+        const pkg = JSON.parse(readFileSync6(pkgPath, "utf8"));
         if (pkg.name === "@noir-ai/cli") {
           const packagesDir = dirname(here);
-          if (existsSync5(join6(dirname(packagesDir), "pnpm-workspace.yaml"))) {
+          if (existsSync6(join7(dirname(packagesDir), "pnpm-workspace.yaml"))) {
             return packagesDir;
           }
           return null;
@@ -8376,11 +8438,11 @@ function checkPublish(checks, packagesDir, opts = {}) {
   let checked = 0;
   let cliDir = null;
   for (const name of entries) {
-    const pkgPath = join6(packagesDir, name, "package.json");
-    if (!existsSync5(pkgPath)) continue;
+    const pkgPath = join7(packagesDir, name, "package.json");
+    if (!existsSync6(pkgPath)) continue;
     let pkg;
     try {
-      pkg = JSON.parse(readFileSync5(pkgPath, "utf8"));
+      pkg = JSON.parse(readFileSync6(pkgPath, "utf8"));
     } catch (e) {
       issues.push(`${name}/package.json: unparseable (${msg(e)})`);
       checked++;
@@ -8402,7 +8464,7 @@ function checkPublish(checks, packagesDir, opts = {}) {
       if (pkg.bin == null || typeof pkg.bin === "object" && Object.keys(pkg.bin).length === 0) {
         issues.push(`${name}/package.json: bin missing (cli package must declare a bin)`);
       }
-      cliDir = join6(packagesDir, name);
+      cliDir = join7(packagesDir, name);
     }
   }
   let packNote = "";
@@ -8484,11 +8546,11 @@ function renderHuman2(payload, opts) {
 }
 function fixOwnerOnlyPermissions(root, project) {
   const fixes = [
-    { path: ".noir/.env", outcome: ensureOwnerOnly(join6(paths4.noirDir(root), ".env")) }
+    { path: ".noir/.env", outcome: ensureOwnerOnly(join7(paths4.noirDir(root), ".env")) }
   ];
   if (project) {
     const dbRel = `.noir/store/${project.id}.db`;
-    fixes.push({ path: dbRel, outcome: ensureOwnerOnly(join6(root, dbRel)) });
+    fixes.push({ path: dbRel, outcome: ensureOwnerOnly(join7(root, dbRel)) });
     fixes.push({ path: ".noir/store", outcome: ensureOwnerOnlyDir(paths4.storeDir(root)) });
   }
   return fixes;