@opengroundplan/core 0.1.1 → 0.2.0

package/README.md

@@ -21,6 +21,6 @@ Two things worth knowing before writing a template:
 - A file that must land as `.gitignore` or `.npmrc` is stored undotted, because npm strips
   those names from any package tarball. The engine restores the dot.
 
-Full documentation is in the [repository](https://github.com/groundplan/groundplan#readme).
+Full documentation is in the [repository](https://github.com/groundplan/opengroundplan#readme).
 
 MIT licensed.

package/dist/agent-runtime.d.ts

@@ -0,0 +1,81 @@
+/**
+ * Provider-neutral agent runtime. Every AI coding tool that declares a verified headless
+ * `invoke` block ([adapters]) is a dispatchable agent behind one interface — Claude Code,
+ * Codex, Gemini, Aider, Cursor and the rest are described by data, not special-cased in code.
+ *
+ * This layer does not spawn anything. It answers two questions deterministically: which agents
+ * are available, and what exact command dispatches a prompt to one. Execution is the caller's
+ * (the CLI, a hook, an orchestrator) — keeping the boundary that templates and plans are data.
+ */
+import type { Adapter } from './schema.js';
+import type { Catalog } from './loader.js';
+export interface AgentDescriptor {
+    id: string;
+    name: string;
+    /** How to run it headlessly; absent means it cannot be dispatched to. */
+    invoke?: Adapter['invoke'];
+    readsAgentsMd: boolean;
+    deprecated: boolean;
+}
+/** A concrete command line, ready for the caller to spawn. `promptVia` says where the prompt goes. */
+export interface Dispatch {
+    binary: string;
+    args: string[];
+    promptVia: 'arg' | 'stdin';
+}
+/** Agents with a verified headless mode, most-preferred first (non-deprecated before deprecated). */
+export declare function availableAgents(catalog: Catalog): AgentDescriptor[];
+/**
+ * Substitute a task into an agent's invoke template. `{prompt}` and `{model}` are the only
+ * tokens replaced; everything else is literal, exactly as the delegation dispatcher does it.
+ */
+export declare function dispatch(agent: AgentDescriptor, task: {
+    prompt: string;
+    model?: string;
+    autoApprove?: boolean;
+}): Dispatch | null;
+export interface AgentRole {
+    role: string;
+    responsibility: string;
+    /** Lifecycle phases and task keywords this role owns, used to route tasks. */
+    phases: string[];
+    keywords: string[];
+}
+/** The engineering roles an orchestrator assigns work to. A taxonomy, not configuration. */
+export declare const AGENT_ROLES: AgentRole[];
+/**
+ * Route a task to the role that owns it. Every lifecycle phase except Implementation maps to a
+ * single role, so those go by phase. Implementation tasks all share a phase, so they route by
+ * keyword — matched on word boundaries, or "test suite" lands on Frontend because "suite" ends
+ * in "ui".
+ */
+export declare function roleFor(task: {
+    title: string;
+    phase: string;
+}): AgentRole;
+export interface RoleAssignment {
+    role: string;
+    responsibility: string;
+    /** The available agent this role dispatches to, or null when none is installed. */
+    agent: string | null;
+    tasks: string[];
+}
+/**
+ * Assign every task to a role, then bind each role to an available agent. Roles are distributed
+ * round-robin across agents so parallel work fans out; with one agent everything routes to it.
+ */
+export declare function orchestrate(tasks: {
+    id: string;
+    title: string;
+    phase: string;
+}[], agents: AgentDescriptor[]): RoleAssignment[];
+/**
+ * Group tasks into waves that can run in parallel (Phase 7). Each wave holds every task whose
+ * dependencies are all satisfied by earlier waves — a topological levelling. A dependency cycle,
+ * or a reference to an unknown task, leaves the remaining tasks in a final "blocked" wave rather
+ * than looping forever.
+ */
+export declare function executionWaves(tasks: {
+    id: string;
+    dependsOn: string[];
+}[]): string[][];

package/dist/agent-runtime.js

@@ -0,0 +1,108 @@
+/** Agents with a verified headless mode, most-preferred first (non-deprecated before deprecated). */
+export function availableAgents(catalog) {
+    return [...catalog.adapters.values()]
+        .map((a) => ({
+        id: a.id,
+        name: a.name,
+        invoke: a.invoke,
+        readsAgentsMd: a.readsAgentsMd,
+        deprecated: Boolean(a.invoke?.deprecated),
+    }))
+        .filter((a) => a.invoke !== undefined)
+        .sort((a, b) => Number(a.deprecated) - Number(b.deprecated) || a.id.localeCompare(b.id));
+}
+/**
+ * Substitute a task into an agent's invoke template. `{prompt}` and `{model}` are the only
+ * tokens replaced; everything else is literal, exactly as the delegation dispatcher does it.
+ */
+export function dispatch(agent, task) {
+    const invoke = agent.invoke;
+    if (!invoke)
+        return null;
+    const fill = (arg) => arg.replace('{prompt}', task.prompt).replace('{model}', task.model ?? '');
+    const args = invoke.args.map(fill);
+    if (task.model && invoke.modelFlag.length)
+        args.push(...invoke.modelFlag.map(fill));
+    if (task.autoApprove)
+        args.push(...invoke.autoApprove);
+    return { binary: invoke.binary, args, promptVia: invoke.promptVia };
+}
+/** The engineering roles an orchestrator assigns work to. A taxonomy, not configuration. */
+export const AGENT_ROLES = [
+    { role: 'Product Manager', responsibility: 'Requirements, scope, and acceptance criteria', phases: ['Discovery', 'Planning'], keywords: ['requirement', 'scope', 'backlog'] },
+    { role: 'Architect', responsibility: 'System boundaries, contracts, and the data model', phases: ['Architecture'], keywords: ['architecture', 'boundary', 'contract', 'scaffold', 'layout'] },
+    { role: 'Backend', responsibility: 'Services, APIs, and business logic', phases: ['Implementation'], keywords: ['api', 'service', 'auth', 'queue', 'cache', 'audit', 'versioning'] },
+    { role: 'Frontend', responsibility: 'UI, components, and client state', phases: ['Implementation'], keywords: ['ui', 'frontend', 'component', 'page'] },
+    { role: 'Database', responsibility: 'Schema, migrations, and access layer', phases: ['Implementation'], keywords: ['database', 'db', 'postgres', 'mongo', 'sqlite', 'migration', 'persistence'] },
+    { role: 'DevOps', responsibility: 'CI/CD, containers, and infrastructure', phases: ['Deployment'], keywords: ['ci', 'cd', 'docker', 'deploy', 'infrastructure', 'pipeline'] },
+    { role: 'Security', responsibility: 'Threat model, secrets, and dependency hygiene', phases: ['Security review'], keywords: ['security', 'threat', 'secret', 'supply-chain', 'auth'] },
+    { role: 'QA', responsibility: 'Test coverage across the pyramid', phases: ['Testing'], keywords: ['test', 'e2e', 'coverage', 'qa'] },
+    { role: 'Performance', responsibility: 'Load, latency, and cost against targets', phases: ['Performance review'], keywords: ['performance', 'load', 'latency', 'cache'] },
+    { role: 'Documentation', responsibility: 'READMEs, ADRs, and runbooks', phases: ['Monitoring'], keywords: ['doc', 'readme', 'adr', 'runbook', 'observability', 'monitoring'] },
+];
+/**
+ * Route a task to the role that owns it. Every lifecycle phase except Implementation maps to a
+ * single role, so those go by phase. Implementation tasks all share a phase, so they route by
+ * keyword — matched on word boundaries, or "test suite" lands on Frontend because "suite" ends
+ * in "ui".
+ */
+export function roleFor(task) {
+    if (task.phase !== 'Implementation') {
+        const byPhase = AGENT_ROLES.find((r) => r.phases.includes(task.phase) && !r.phases.includes('Implementation'));
+        if (byPhase)
+            return byPhase;
+    }
+    // Anchor at a word start (not both ends) so "postgres" matches "PostgreSQL" while "ui" still
+    // won't match the "ui" buried in "suite".
+    const text = task.title.toLowerCase();
+    const keyworded = AGENT_ROLES.find((r) => r.keywords.some((k) => new RegExp(`\\b${k}`).test(text)));
+    if (keyworded)
+        return keyworded;
+    return AGENT_ROLES.find((r) => r.phases.includes(task.phase)) ?? AGENT_ROLES.find((r) => r.role === 'Backend');
+}
+/**
+ * Assign every task to a role, then bind each role to an available agent. Roles are distributed
+ * round-robin across agents so parallel work fans out; with one agent everything routes to it.
+ */
+export function orchestrate(tasks, agents) {
+    const byRole = new Map();
+    for (const task of tasks) {
+        const role = roleFor(task);
+        const entry = byRole.get(role.role) ?? { role, tasks: [] };
+        entry.tasks.push(`${task.id} ${task.title}`);
+        byRole.set(role.role, entry);
+    }
+    const assignments = [...byRole.values()];
+    return assignments.map((a, i) => ({
+        role: a.role.role,
+        responsibility: a.role.responsibility,
+        agent: agents.length ? agents[i % agents.length].id : null,
+        tasks: a.tasks,
+    }));
+}
+/**
+ * Group tasks into waves that can run in parallel (Phase 7). Each wave holds every task whose
+ * dependencies are all satisfied by earlier waves — a topological levelling. A dependency cycle,
+ * or a reference to an unknown task, leaves the remaining tasks in a final "blocked" wave rather
+ * than looping forever.
+ */
+export function executionWaves(tasks) {
+    const ids = new Set(tasks.map((t) => t.id));
+    const done = new Set();
+    const remaining = [...tasks];
+    const waves = [];
+    while (remaining.length > 0) {
+        const ready = remaining.filter((t) => t.dependsOn.every((d) => done.has(d) || !ids.has(d)));
+        if (ready.length === 0) {
+            waves.push(remaining.map((t) => t.id)); // cycle or dangling dep — surface, don't hang
+            break;
+        }
+        waves.push(ready.map((t) => t.id));
+        for (const t of ready) {
+            done.add(t.id);
+            remaining.splice(remaining.indexOf(t), 1);
+        }
+    }
+    return waves;
+}
+//# sourceMappingURL=agent-runtime.js.map

package/dist/agent-runtime.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"agent-runtime.js","sourceRoot":"","sources":["../src/agent-runtime.ts"],"names":[],"mappings":"AA4BA,qGAAqG;AACrG,MAAM,UAAU,eAAe,CAAC,OAAgB;IAC9C,OAAO,CAAC,GAAG,OAAO,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC;SAClC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QACX,EAAE,EAAE,CAAC,CAAC,EAAE;QACR,IAAI,EAAE,CAAC,CAAC,IAAI;QACZ,MAAM,EAAE,CAAC,CAAC,MAAM;QAChB,aAAa,EAAE,CAAC,CAAC,aAAa;QAC9B,UAAU,EAAE,OAAO,CAAC,CAAC,CAAC,MAAM,EAAE,UAAU,CAAC;KAC1C,CAAC,CAAC;SACF,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,SAAS,CAAC;SACrC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,UAAU,CAAC,GAAG,MAAM,CAAC,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC,aAAa,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;AAC7F,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,QAAQ,CACtB,KAAsB,EACtB,IAA+D;IAE/D,MAAM,MAAM,GAAG,KAAK,CAAC,MAAM,CAAC;IAC5B,IAAI,CAAC,MAAM;QAAE,OAAO,IAAI,CAAC;IAEzB,MAAM,IAAI,GAAG,CAAC,GAAW,EAAE,EAAE,CAAC,GAAG,CAAC,OAAO,CAAC,UAAU,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,SAAS,EAAE,IAAI,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC;IACxG,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IACnC,IAAI,IAAI,CAAC,KAAK,IAAI,MAAM,CAAC,SAAS,CAAC,MAAM;QAAE,IAAI,CAAC,IAAI,CAAC,GAAG,MAAM,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC;IACpF,IAAI,IAAI,CAAC,WAAW;QAAE,IAAI,CAAC,IAAI,CAAC,GAAG,MAAM,CAAC,WAAW,CAAC,CAAC;IAEvD,OAAO,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,CAAC,SAAS,EAAE,CAAC;AACtE,CAAC;AAYD,4FAA4F;AAC5F,MAAM,CAAC,MAAM,WAAW,GAAgB;IACtC,EAAE,IAAI,EAAE,iBAAiB,EAAE,cAAc,EAAE,8CAA8C,EAAE,MAAM,EAAE,CAAC,WAAW,EAAE,UAAU,CAAC,EAAE,QAAQ,EAAE,CAAC,aAAa,EAAE,OAAO,EAAE,SAAS,CAAC,EAAE;IAC7K,EAAE,IAAI,EAAE,WAAW,EAAE,cAAc,EAAE,kDAAkD,EAAE,MAAM,EAAE,CAAC,cAAc,CAAC,EAAE,QAAQ,EAAE,CAAC,cAAc,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,QAAQ,CAAC,EAAE;IAC7L,EAAE,IAAI,EAAE,SAAS,EAAE,cAAc,EAAE,oCAAoC,EAAE,MAAM,EAAE,CAAC,gBAAgB,CAAC,EAAE,QAAQ,EAAE,CAAC,KAAK,EAAE,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,YAAY,CAAC,EAAE;IACpL,EAAE,IAAI,EAAE,UAAU,EAAE,cAAc,EAAE,kCAAkC,EAAE,MAAM,EAAE,CAAC,gBAAgB,CAAC,EAAE,QAAQ,EAAE,CAAC,IAAI,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,CAAC,EAAE;IACvJ,EAAE,IAAI,EAAE,UAAU,EAAE,cAAc,EAAE,sCAAsC,EAAE,MAAM,EAAE,CAAC,gBAAgB,CAAC,EAAE,QAAQ,EAAE,CAAC,UAAU,EAAE,IAAI,EAAE,UAAU,EAAE,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,aAAa,CAAC,EAAE;IACjM,EAAE,IAAI,EAAE,QAAQ,EAAE,cAAc,EAAE,uCAAuC,EAAE,MAAM,EAAE,CAAC,YAAY,CAAC,EAAE,QAAQ,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,gBAAgB,EAAE,UAAU,CAAC,EAAE;IAC7K,EAAE,IAAI,EAAE,UAAU,EAAE,cAAc,EAAE,+CAA+C,EAAE,MAAM,EAAE,CAAC,iBAAiB,CAAC,EAAE,QAAQ,EAAE,CAAC,UAAU,EAAE,QAAQ,EAAE,QAAQ,EAAE,cAAc,EAAE,MAAM,CAAC,EAAE;IACtL,EAAE,IAAI,EAAE,IAAI,EAAE,cAAc,EAAE,kCAAkC,EAAE,MAAM,EAAE,CAAC,SAAS,CAAC,EAAE,QAAQ,EAAE,CAAC,MAAM,EAAE,KAAK,EAAE,UAAU,EAAE,IAAI,CAAC,EAAE;IACpI,EAAE,IAAI,EAAE,aAAa,EAAE,cAAc,EAAE,yCAAyC,EAAE,MAAM,EAAE,CAAC,oBAAoB,CAAC,EAAE,QAAQ,EAAE,CAAC,aAAa,EAAE,MAAM,EAAE,SAAS,EAAE,OAAO,CAAC,EAAE;IACzK,EAAE,IAAI,EAAE,eAAe,EAAE,cAAc,EAAE,6BAA6B,EAAE,MAAM,EAAE,CAAC,YAAY,CAAC,EAAE,QAAQ,EAAE,CAAC,KAAK,EAAE,QAAQ,EAAE,KAAK,EAAE,SAAS,EAAE,eAAe,EAAE,YAAY,CAAC,EAAE;CAC/K,CAAC;AAEF;;;;;GAKG;AACH,MAAM,UAAU,OAAO,CAAC,IAAsC;IAC5D,IAAI,IAAI,CAAC,KAAK,KAAK,gBAAgB,EAAE,CAAC;QACpC,MAAM,OAAO,GAAG,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,gBAAgB,CAAC,CAAC,CAAC;QAC/G,IAAI,OAAO;YAAE,OAAO,OAAO,CAAC;IAC9B,CAAC;IACD,6FAA6F;IAC7F,0CAA0C;IAC1C,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,WAAW,EAAE,CAAC;IACtC,MAAM,SAAS,GAAG,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACpG,IAAI,SAAS;QAAE,OAAO,SAAS,CAAC;IAChC,OAAO,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,SAAS,CAAE,CAAC;AAClH,CAAC;AAUD;;;GAGG;AACH,MAAM,UAAU,WAAW,CACzB,KAAqD,EACrD,MAAyB;IAEzB,MAAM,MAAM,GAAG,IAAI,GAAG,EAAgD,CAAC;IACvE,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;QAC3B,MAAM,KAAK,GAAG,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC;QAC3D,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,EAAE,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC;QAC7C,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;IAC/B,CAAC;IAED,MAAM,WAAW,GAAG,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC;IACzC,OAAO,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC;QAChC,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI;QACjB,cAAc,EAAE,CAAC,CAAC,IAAI,CAAC,cAAc;QACrC,KAAK,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI;QAC1D,KAAK,EAAE,CAAC,CAAC,KAAK;KACf,CAAC,CAAC,CAAC;AACN,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,cAAc,CAAC,KAA4C;IACzE,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;IAC5C,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,MAAM,SAAS,GAAG,CAAC,GAAG,KAAK,CAAC,CAAC;IAC7B,MAAM,KAAK,GAAe,EAAE,CAAC;IAE7B,OAAO,SAAS,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC5B,MAAM,KAAK,GAAG,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAC5F,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACvB,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,8CAA8C;YACtF,MAAM;QACR,CAAC;QACD,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;QACnC,KAAK,MAAM,CAAC,IAAI,KAAK,EAAE,CAAC;YACtB,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;YACf,SAAS,CAAC,MAAM,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;QAC5C,CAAC;IACH,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC"}

package/dist/analysis.d.ts

@@ -0,0 +1,36 @@
+/**
+ * Architecture review before any code is generated — the "would a staff engineer sign off on
+ * this?" pass. Deterministic rules over the selected layers, the matched intent signals, and the
+ * stated priorities flag the gaps that sink production systems: no auth on a system with users,
+ * no observability, an unscalable datastore for a multi-tenant load, no test strategy, no CI.
+ *
+ * It also answers two questions every plan should: what to buy instead of build, and roughly
+ * what the infrastructure costs. Nothing here calls a model — every finding traces to a rule.
+ */
+import type { AutoSelection } from './autoplan.js';
+export interface Finding {
+    severity: 'high' | 'medium' | 'low';
+    area: string;
+    message: string;
+    recommendation: string;
+}
+export interface BuildVsBuy {
+    capability: string;
+    verdict: 'buy' | 'build';
+    option: string;
+    reason: string;
+}
+export interface CostBand {
+    item: string;
+    monthly: string;
+}
+/** Review the selection for the gaps that break production systems. High severity blocks sign-off. */
+export declare function reviewArchitecture(selection: AutoSelection): Finding[];
+/** The security-specific view of the review, for the Security Guardian section. */
+export declare function securityReview(selection: AutoSelection): Finding[];
+/** Capabilities better bought than built — with the reason a team usually regrets building them. */
+export declare function buildVsBuy(selection: AutoSelection): BuildVsBuy[];
+/** A rough monthly infrastructure estimate at a small production scale, from the selected layers. */
+export declare function costEstimate(selection: AutoSelection): CostBand[];
+/** The review as a single document for the blueprint. */
+export declare function renderReview(selection: AutoSelection): string;

package/dist/analysis.js

@@ -0,0 +1,106 @@
+const has = (layers, prefix) => layers.some((l) => l === prefix || l.startsWith(`${prefix}`));
+const signal = (s, id) => s.intent.matched.some((m) => m.signal === id);
+const priority = (s, c) => s.intent.priorities[c] ?? 0;
+/** A project has real users when it is multi-tenant, regulated, admin-facing, or an app/AI product. */
+const hasUsers = (s) => signal(s, 'multi-tenant') || signal(s, 'regulated') || signal(s, 'crud-admin') || s.intent.family === 'ai' || s.intent.family === 'application';
+/** Review the selection for the gaps that break production systems. High severity blocks sign-off. */
+export function reviewArchitecture(selection) {
+    const layers = selection.layers;
+    const out = [];
+    if (hasUsers(selection) && !has(layers, 'auth')) {
+        out.push({ severity: 'high', area: 'security', message: 'No authentication layer for a system that has users.', recommendation: 'Add auth-jwt (self-issued) or auth-oidc (external IdP).' });
+    }
+    if (!layers.some((l) => l.startsWith('testing'))) {
+        out.push({ severity: 'high', area: 'testing', message: 'No test strategy selected — nothing proves the system works.', recommendation: 'Add testing-unit at minimum; testing-e2e for user-facing flows.' });
+    }
+    if ((signal(selection, 'multi-tenant') || signal(selection, 'high-traffic')) && layers.includes('db-sqlite')) {
+        out.push({ severity: 'high', area: 'scaling', message: 'SQLite backs a multi-tenant or high-traffic system; it does not scale past a single node.', recommendation: 'Use db-postgres for concurrent, multi-tenant workloads.' });
+    }
+    if (!has(layers, 'observability')) {
+        out.push({ severity: 'medium', area: 'observability', message: 'No observability layer — production failures will be invisible.', recommendation: 'Add observability-otel for traces, metrics, and structured logs.' });
+    }
+    if (!layers.includes('security-supply-chain')) {
+        out.push({ severity: 'medium', area: 'security', message: 'No dependency or secret scanning (OWASP A03:2025 is supply-chain).', recommendation: 'Add security-supply-chain (Dependabot/Renovate, CodeQL, gitleaks, SBOM).' });
+    }
+    if (!layers.includes('ci-github-actions')) {
+        out.push({ severity: 'medium', area: 'ci', message: 'No CI pipeline — nothing gates a broken change from merging.', recommendation: 'Add ci-github-actions to run build, lint, and tests on every push.' });
+    }
+    if ((priority(selection, 'scalability') >= 3 || signal(selection, 'high-traffic')) && !has(layers, 'cache')) {
+        out.push({ severity: 'medium', area: 'scaling', message: 'Scalability is a stated priority but there is no caching layer.', recommendation: 'Add cache-redis to absorb read load and protect the datastore.' });
+    }
+    if (priority(selection, 'fault-tolerance') >= 3 && !layers.includes('health-checks')) {
+        out.push({ severity: 'low', area: 'resilience', message: 'Fault tolerance matters here but no health checks are selected.', recommendation: 'Add health-checks so an orchestrator can detect and replace a bad instance.' });
+    }
+    if (layers.some((l) => l.startsWith('db-'))) {
+        out.push({ severity: 'low', area: 'data', message: 'A datastore is selected; automated backups are not scaffolded.', recommendation: 'Configure managed backups / point-in-time recovery before launch.' });
+    }
+    return out;
+}
+/** The security-specific view of the review, for the Security Guardian section. */
+export function securityReview(selection) {
+    return reviewArchitecture(selection).filter((f) => f.area === 'security');
+}
+/** Capabilities better bought than built — with the reason a team usually regrets building them. */
+export function buildVsBuy(selection) {
+    const out = [];
+    const text = selection.intent.matched.map((m) => m.signal).join(' ') + ' ' + (selection.architecture ?? '');
+    const idea = selection.assumptions.join(' ').toLowerCase();
+    const wants = (t) => idea.includes(t) || text.includes(t);
+    if (wants('payment') || wants('billing') || wants('marketplace') || wants('subscription') || selection.layers.includes('audit-log')) {
+        out.push({ capability: 'Payments & billing', verdict: 'buy', option: 'Stripe', reason: 'PCI scope, fraud, tax, and dunning are a product on their own — building them rarely pays off.' });
+    }
+    if (selection.layers.some((l) => l.startsWith('auth'))) {
+        out.push({ capability: 'Authentication', verdict: selection.layers.includes('auth-oidc') ? 'buy' : 'build', option: selection.layers.includes('auth-oidc') ? 'Auth0 / Clerk / Cognito (OIDC)' : 'Self-issued JWT (in-repo)', reason: selection.layers.includes('auth-oidc') ? 'An external IdP is already the chosen approach; managed keeps you off the critical-security path.' : 'A first-party JWT layer is fine for a single service; move to a managed IdP when SSO or social login is needed.' });
+    }
+    if (selection.intent.family === 'ai') {
+        out.push({ capability: 'LLM inference', verdict: 'buy', option: 'Anthropic / OpenAI API', reason: 'Hosting and serving a frontier model is not the product; call a provider and spend effort on the app.' });
+    }
+    out.push({ capability: 'Email / notifications', verdict: 'buy', option: 'Resend / Postmark / SES', reason: 'Deliverability and compliance are a moving target; a provider handles both.' });
+    return out;
+}
+/** A rough monthly infrastructure estimate at a small production scale, from the selected layers. */
+export function costEstimate(selection) {
+    const bands = [{ item: 'App hosting (small instance / serverless)', monthly: '$5–25' }];
+    if (selection.layers.some((l) => l.startsWith('db-')))
+        bands.push({ item: 'Managed database', monthly: '$15–60' });
+    if (selection.layers.some((l) => l.startsWith('cache')))
+        bands.push({ item: 'Managed cache (Redis)', monthly: '$10–40' });
+    if (selection.layers.includes('queue-broker'))
+        bands.push({ item: 'Message broker', monthly: '$10–40' });
+    if (selection.layers.includes('observability-otel'))
+        bands.push({ item: 'Observability (traces/metrics/logs)', monthly: '$0–50' });
+    if (selection.intent.family === 'ai')
+        bands.push({ item: 'LLM API usage (variable)', monthly: '$20–500+' });
+    return bands;
+}
+/** The review as a single document for the blueprint. */
+export function renderReview(selection) {
+    const findings = reviewArchitecture(selection);
+    const blocking = findings.filter((f) => f.severity === 'high');
+    const badge = (s) => (s === 'high' ? '🔴' : s === 'medium' ? '🟡' : '⚪');
+    const lines = [
+        `# Architecture review`,
+        ``,
+        blocking.length
+            ? `**${blocking.length} blocking issue(s)** must be resolved before this is production-ready.`
+            : `No blocking issues — review the medium/low findings before launch.`,
+        ``,
+        `## Findings`,
+        ``,
+    ];
+    if (findings.length === 0)
+        lines.push(`_None. The selection covers the production baseline._`, ``);
+    for (const f of findings) {
+        lines.push(`- ${badge(f.severity)} **${f.area}** — ${f.message}`, `  - ${f.recommendation}`);
+    }
+    lines.push(``, `## Build vs buy`, ``);
+    for (const b of buildVsBuy(selection)) {
+        lines.push(`- **${b.capability}** → **${b.verdict.toUpperCase()}** (${b.option}) — ${b.reason}`);
+    }
+    lines.push(``, `## Rough monthly cost (small production scale)`, ``);
+    for (const c of costEstimate(selection))
+        lines.push(`- ${c.item}: ${c.monthly}`);
+    lines.push(``);
+    return lines.join('\n');
+}
+//# sourceMappingURL=analysis.js.map

package/dist/analysis.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"analysis.js","sourceRoot":"","sources":["../src/analysis.ts"],"names":[],"mappings":"AA8BA,MAAM,GAAG,GAAG,CAAC,MAAgB,EAAE,MAAc,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,MAAM,IAAI,CAAC,CAAC,UAAU,CAAC,GAAG,MAAM,EAAE,CAAC,CAAC,CAAC;AAChH,MAAM,MAAM,GAAG,CAAC,CAAgB,EAAE,EAAU,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,EAAE,CAAC,CAAC;AAC/F,MAAM,QAAQ,GAAG,CAAC,CAAgB,EAAE,CAAS,EAAE,EAAE,CAAE,CAAC,CAAC,MAAM,CAAC,UAAqC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;AAC1G,uGAAuG;AACvG,MAAM,QAAQ,GAAG,CAAC,CAAgB,EAAE,EAAE,CACpC,MAAM,CAAC,CAAC,EAAE,cAAc,CAAC,IAAI,MAAM,CAAC,CAAC,EAAE,WAAW,CAAC,IAAI,MAAM,CAAC,CAAC,EAAE,YAAY,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,MAAM,KAAK,IAAI,IAAI,CAAC,CAAC,MAAM,CAAC,MAAM,KAAK,aAAa,CAAC;AAElJ,sGAAsG;AACtG,MAAM,UAAU,kBAAkB,CAAC,SAAwB;IACzD,MAAM,MAAM,GAAG,SAAS,CAAC,MAAM,CAAC;IAChC,MAAM,GAAG,GAAc,EAAE,CAAC;IAE1B,IAAI,QAAQ,CAAC,SAAS,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,EAAE,CAAC;QAChD,GAAG,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,UAAU,EAAE,OAAO,EAAE,sDAAsD,EAAE,cAAc,EAAE,yDAAyD,EAAE,CAAC,CAAC;IAC/L,CAAC;IACD,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC,EAAE,CAAC;QACjD,GAAG,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,8DAA8D,EAAE,cAAc,EAAE,iEAAiE,EAAE,CAAC,CAAC;IAC9M,CAAC;IACD,IAAI,CAAC,MAAM,CAAC,SAAS,EAAE,cAAc,CAAC,IAAI,MAAM,CAAC,SAAS,EAAE,cAAc,CAAC,CAAC,IAAI,MAAM,CAAC,QAAQ,CAAC,WAAW,CAAC,EAAE,CAAC;QAC7G,GAAG,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,2FAA2F,EAAE,cAAc,EAAE,yDAAyD,EAAE,CAAC,CAAC;IACnO,CAAC;IACD,IAAI,CAAC,GAAG,CAAC,MAAM,EAAE,eAAe,CAAC,EAAE,CAAC;QAClC,GAAG,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,QAAQ,EAAE,IAAI,EAAE,eAAe,EAAE,OAAO,EAAE,iEAAiE,EAAE,cAAc,EAAE,kEAAkE,EAAE,CAAC,CAAC;IAC1N,CAAC;IACD,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,uBAAuB,CAAC,EAAE,CAAC;QAC9C,GAAG,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,QAAQ,EAAE,IAAI,EAAE,UAAU,EAAE,OAAO,EAAE,oEAAoE,EAAE,cAAc,EAAE,0EAA0E,EAAE,CAAC,CAAC;IAChO,CAAC;IACD,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,mBAAmB,CAAC,EAAE,CAAC;QAC1C,GAAG,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,QAAQ,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,8DAA8D,EAAE,cAAc,EAAE,oEAAoE,EAAE,CAAC,CAAC;IAC9M,CAAC;IACD,IAAI,CAAC,QAAQ,CAAC,SAAS,EAAE,aAAa,CAAC,IAAI,CAAC,IAAI,MAAM,CAAC,SAAS,EAAE,cAAc,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,CAAC;QAC5G,GAAG,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,QAAQ,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,iEAAiE,EAAE,cAAc,EAAE,gEAAgE,EAAE,CAAC,CAAC;IAClN,CAAC;IACD,IAAI,QAAQ,CAAC,SAAS,EAAE,iBAAiB,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,eAAe,CAAC,EAAE,CAAC;QACrF,GAAG,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,KAAK,EAAE,IAAI,EAAE,YAAY,EAAE,OAAO,EAAE,iEAAiE,EAAE,cAAc,EAAE,6EAA6E,EAAE,CAAC,CAAC;IAC/N,CAAC;IACD,IAAI,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC;QAC5C,GAAG,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,gEAAgE,EAAE,cAAc,EAAE,mEAAmE,EAAE,CAAC,CAAC;IAC9M,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,mFAAmF;AACnF,MAAM,UAAU,cAAc,CAAC,SAAwB;IACrD,OAAO,kBAAkB,CAAC,SAAS,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,UAAU,CAAC,CAAC;AAC5E,CAAC;AAED,oGAAoG;AACpG,MAAM,UAAU,UAAU,CAAC,SAAwB;IACjD,MAAM,GAAG,GAAiB,EAAE,CAAC;IAC7B,MAAM,IAAI,GAAG,SAAS,CAAC,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,GAAG,GAAG,CAAC,SAAS,CAAC,YAAY,IAAI,EAAE,CAAC,CAAC;IAC5G,MAAM,IAAI,GAAG,SAAS,CAAC,WAAW,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,WAAW,EAAE,CAAC;IAE3D,MAAM,KAAK,GAAG,CAAC,CAAS,EAAE,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;IAClE,IAAI,KAAK,CAAC,SAAS,CAAC,IAAI,KAAK,CAAC,SAAS,CAAC,IAAI,KAAK,CAAC,aAAa,CAAC,IAAI,KAAK,CAAC,cAAc,CAAC,IAAI,SAAS,CAAC,MAAM,CAAC,QAAQ,CAAC,WAAW,CAAC,EAAE,CAAC;QACpI,GAAG,CAAC,IAAI,CAAC,EAAE,UAAU,EAAE,oBAAoB,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,gGAAgG,EAAE,CAAC,CAAC;IAC7L,CAAC;IACD,IAAI,SAAS,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC;QACvD,GAAG,CAAC,IAAI,CAAC,EAAE,UAAU,EAAE,gBAAgB,EAAE,OAAO,EAAE,SAAS,CAAC,MAAM,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,SAAS,CAAC,MAAM,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,gCAAgC,CAAC,CAAC,CAAC,2BAA2B,EAAE,MAAM,EAAE,SAAS,CAAC,MAAM,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,mGAAmG,CAAC,CAAC,CAAC,iHAAiH,EAAE,CAAC,CAAC;IAC3e,CAAC;IACD,IAAI,SAAS,CAAC,MAAM,CAAC,MAAM,KAAK,IAAI,EAAE,CAAC;QACrC,GAAG,CAAC,IAAI,CAAC,EAAE,UAAU,EAAE,eAAe,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,wBAAwB,EAAE,MAAM,EAAE,uGAAuG,EAAE,CAAC,CAAC;IAC/M,CAAC;IACD,GAAG,CAAC,IAAI,CAAC,EAAE,UAAU,EAAE,uBAAuB,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,yBAAyB,EAAE,MAAM,EAAE,6EAA6E,EAAE,CAAC,CAAC;IAC5L,OAAO,GAAG,CAAC;AACb,CAAC;AAED,qGAAqG;AACrG,MAAM,UAAU,YAAY,CAAC,SAAwB;IACnD,MAAM,KAAK,GAAe,CAAC,EAAE,IAAI,EAAE,2CAA2C,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,CAAC;IACpG,IAAI,SAAS,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC;QAAE,KAAK,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,kBAAkB,EAAE,OAAO,EAAE,QAAQ,EAAE,CAAC,CAAC;IACnH,IAAI,SAAS,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC;QAAE,KAAK,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,uBAAuB,EAAE,OAAO,EAAE,QAAQ,EAAE,CAAC,CAAC;IAC1H,IAAI,SAAS,CAAC,MAAM,CAAC,QAAQ,CAAC,cAAc,CAAC;QAAE,KAAK,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,gBAAgB,EAAE,OAAO,EAAE,QAAQ,EAAE,CAAC,CAAC;IACzG,IAAI,SAAS,CAAC,MAAM,CAAC,QAAQ,CAAC,oBAAoB,CAAC;QAAE,KAAK,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,qCAAqC,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,CAAC;IACnI,IAAI,SAAS,CAAC,MAAM,CAAC,MAAM,KAAK,IAAI;QAAE,KAAK,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,0BAA0B,EAAE,OAAO,EAAE,UAAU,EAAE,CAAC,CAAC;IAC5G,OAAO,KAAK,CAAC;AACf,CAAC;AAED,yDAAyD;AACzD,MAAM,UAAU,YAAY,CAAC,SAAwB;IACnD,MAAM,QAAQ,GAAG,kBAAkB,CAAC,SAAS,CAAC,CAAC;IAC/C,MAAM,QAAQ,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,MAAM,CAAC,CAAC;IAC/D,MAAM,KAAK,GAAG,CAAC,CAAsB,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;IAE9F,MAAM,KAAK,GAAG;QACZ,uBAAuB;QACvB,EAAE;QACF,QAAQ,CAAC,MAAM;YACb,CAAC,CAAC,KAAK,QAAQ,CAAC,MAAM,wEAAwE;YAC9F,CAAC,CAAC,oEAAoE;QACxE,EAAE;QACF,aAAa;QACb,EAAE;KACH,CAAC;IACF,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC;QAAE,KAAK,CAAC,IAAI,CAAC,uDAAuD,EAAE,EAAE,CAAC,CAAC;IACnG,KAAK,MAAM,CAAC,IAAI,QAAQ,EAAE,CAAC;QACzB,KAAK,CAAC,IAAI,CAAC,KAAK,KAAK,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,IAAI,QAAQ,CAAC,CAAC,OAAO,EAAE,EAAE,OAAO,CAAC,CAAC,cAAc,EAAE,CAAC,CAAC;IAC/F,CAAC;IACD,KAAK,CAAC,IAAI,CAAC,EAAE,EAAE,iBAAiB,EAAE,EAAE,CAAC,CAAC;IACtC,KAAK,MAAM,CAAC,IAAI,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;QACtC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,UAAU,UAAU,CAAC,CAAC,OAAO,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC,MAAM,OAAO,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC;IACnG,CAAC;IACD,KAAK,CAAC,IAAI,CAAC,EAAE,EAAE,gDAAgD,EAAE,EAAE,CAAC,CAAC;IACrE,KAAK,MAAM,CAAC,IAAI,YAAY,CAAC,SAAS,CAAC;QAAE,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC;IACjF,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACf,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC1B,CAAC"}

package/dist/analyze.d.ts

@@ -0,0 +1,26 @@
+import { type Finding } from './analysis.js';
+import { type CtoReview, type Score } from './assessment.js';
+import type { Stack } from './schema.js';
+export interface RepoFacts {
+    stack: Stack;
+    /** Catalog capability ids detected in the repo. */
+    present: string[];
+    /** Baseline capabilities a production repo should have but this one lacks. */
+    missing: string[];
+    dependencies: number;
+}
+export interface RepoAnalysis {
+    dir: string;
+    facts: RepoFacts;
+    scores: Score[];
+    overall: number;
+    findings: Finding[];
+    cto: CtoReview;
+}
+/** Detect the stack and present capabilities from manifests and marker files. */
+export declare function detectRepo(dir: string): RepoFacts;
+/** Run the shared review/scoring/CTO engine over a set of repo facts. Reused by analyze and improve. */
+export declare function assessFacts(facts: RepoFacts): Omit<RepoAnalysis, 'dir' | 'facts'>;
+export declare function analyzeRepo(dir: string): RepoAnalysis;
+/** The analysis as files (filename → content) for the caller to write. */
+export declare function renderAnalysis(a: RepoAnalysis): Record<string, string>;

package/dist/analyze.js

@@ -0,0 +1,155 @@
+/**
+ * Repository intelligence — point Groundplan at an existing repo and get the same review it
+ * gives a new one. It detects the stack and which capabilities are already present, projects
+ * those onto a selection, and runs the one review/scoring/CTO engine over it. No parallel
+ * analysis logic: an existing repo and a planned one are judged by identical rules.
+ */
+import fs from 'node:fs';
+import path from 'node:path';
+import { reviewArchitecture } from './analysis.js';
+import { ctoReview, overallScore, qualityScores } from './assessment.js';
+const readIfExists = (file) => {
+    try {
+        return fs.readFileSync(file, 'utf8');
+    }
+    catch {
+        return '';
+    }
+};
+const exists = (dir, rel) => fs.existsSync(path.join(dir, rel));
+/** What a production repo is expected to have, by capability id. */
+const BASELINE = ['auth', 'testing', 'observability-otel', 'security-supply-chain', 'ci-github-actions'];
+/** Detect the stack and present capabilities from manifests and marker files. */
+export function detectRepo(dir) {
+    const pkgRaw = readIfExists(path.join(dir, 'package.json'));
+    let deps = new Set();
+    let manifest = '';
+    let stack = 'polyglot';
+    if (pkgRaw) {
+        try {
+            const pkg = JSON.parse(pkgRaw);
+            deps = new Set([...Object.keys(pkg.dependencies ?? {}), ...Object.keys(pkg.devDependencies ?? {})]);
+        }
+        catch {
+            /* a malformed package.json still counts as a node project */
+        }
+        manifest = pkgRaw;
+        stack = exists(dir, 'tsconfig.json') ? 'typescript' : 'node';
+    }
+    else if (exists(dir, 'pyproject.toml') || exists(dir, 'requirements.txt')) {
+        manifest = readIfExists(path.join(dir, 'pyproject.toml')) + readIfExists(path.join(dir, 'requirements.txt'));
+        stack = 'python';
+    }
+    else if (exists(dir, 'go.mod')) {
+        manifest = readIfExists(path.join(dir, 'go.mod'));
+        stack = 'go';
+    }
+    else {
+        const proj = fs.existsSync(dir) ? fs.readdirSync(dir).find((f) => f.endsWith('.csproj') || f.endsWith('.slnx')) : undefined;
+        if (proj) {
+            manifest = readIfExists(path.join(dir, proj));
+            stack = 'dotnet';
+        }
+    }
+    const dep = (name) => deps.has(name) || manifest.toLowerCase().includes(name.toLowerCase());
+    const present = [];
+    if (exists(dir, '.github/workflows'))
+        present.push('ci-github-actions');
+    if (exists(dir, 'Dockerfile') || exists(dir, 'compose.yaml') || exists(dir, 'docker-compose.yml'))
+        present.push('docker');
+    if (dep('vitest') || dep('jest') || dep('pytest') || dep('mocha') || exists(dir, 'tests') || exists(dir, 'test'))
+        present.push('testing-unit');
+    if (dep('jsonwebtoken') || dep('jose') || dep('passport') || dep('argon2') || dep('bcrypt'))
+        present.push('auth-jwt');
+    if (dep('pg') || dep('postgres') || dep('psycopg'))
+        present.push('db-postgres');
+    else if (dep('mongoose') || dep('mongodb') || dep('pymongo'))
+        present.push('db-mongo');
+    else if (dep('better-sqlite3') || dep('sqlite'))
+        present.push('db-sqlite');
+    if (dep('redis') || dep('ioredis'))
+        present.push('cache-redis');
+    if (dep('bullmq') || dep('amqplib') || dep('kafkajs') || dep('celery'))
+        present.push('queue-broker');
+    if (dep('opentelemetry'))
+        present.push('observability-otel');
+    if (exists(dir, '.gitleaks.toml') || dep('gitleaks') || exists(dir, '.github/dependabot.yml'))
+        present.push('security-supply-chain');
+    if (dep('eslint') || dep('prettier') || dep('ruff') || dep('golangci'))
+        present.push('lint-format');
+    const missing = BASELINE.filter((id) => !present.some((l) => l === id || l.startsWith(id)));
+    return { stack, present, missing, dependencies: deps.size };
+}
+/** Project the detected facts onto a selection so the one review engine can judge the repo. */
+function asSelection(facts) {
+    return {
+        intent: { priorities: {}, family: 'application', stack: facts.stack, teamSize: 4, impliedLayers: [], matched: [], confidence: 1 },
+        stack: facts.stack,
+        teamSize: 4,
+        architecture: undefined,
+        base: '',
+        layers: facts.present,
+        adapters: [],
+        ranked: [],
+        confidence: 1,
+        assumptions: [],
+        questions: [],
+    };
+}
+/** Run the shared review/scoring/CTO engine over a set of repo facts. Reused by analyze and improve. */
+export function assessFacts(facts) {
+    const selection = asSelection(facts);
+    const findings = reviewArchitecture(selection);
+    const scores = qualityScores(selection, findings);
+    return { scores, overall: overallScore(scores), findings, cto: ctoReview(selection, findings, scores) };
+}
+export function analyzeRepo(dir) {
+    const facts = detectRepo(dir);
+    return { dir, facts, ...assessFacts(facts) };
+}
+/** The analysis as files (filename → content) for the caller to write. */
+export function renderAnalysis(a) {
+    const bar = (n) => '█'.repeat(Math.round(n / 10)) + '░'.repeat(10 - Math.round(n / 10));
+    const report = [
+        `# Repository analysis`,
+        ``,
+        `Stack: **${a.facts.stack}** · Dependencies: **${a.facts.dependencies}** · Overall quality: **${a.overall}/100**`,
+        ``,
+        `## Detected capabilities`,
+        ``,
+        ...(a.facts.present.length ? a.facts.present.map((c) => `- ${c}`) : ['- (none detected)']),
+        ``,
+        `## Missing baseline`,
+        ``,
+        ...(a.facts.missing.length ? a.facts.missing.map((c) => `- ${c}`) : ['- None — the production baseline is covered.']),
+        ``,
+        `## Quality scores`,
+        ``,
+        `| Dimension | Score | |`,
+        `|---|---|---|`,
+        ...a.scores.map((s) => `| ${s.dimension} | ${s.score} | \`${bar(s.score)}\` |`),
+        ``,
+        `## CTO verdict: ${a.cto.verdict.toUpperCase().replace(/-/g, ' ')}`,
+        ``,
+        a.cto.summary,
+        ``,
+    ].join('\n');
+    const roadmap = [
+        `# Improvement roadmap`,
+        ``,
+        `Ordered by severity — the highest-impact fixes first.`,
+        ``,
+        ...['high', 'medium', 'low'].flatMap((sev) => {
+            const items = a.findings.filter((f) => f.severity === sev);
+            if (items.length === 0)
+                return [];
+            return [`## ${sev[0].toUpperCase() + sev.slice(1)} priority`, ``, ...items.map((f) => `- [ ] **${f.area}** — ${f.recommendation}`), ``];
+        }),
+    ].join('\n');
+    return {
+        'analysis-report.md': report,
+        'improvement-roadmap.md': roadmap,
+        'analysis.json': JSON.stringify({ facts: a.facts, overall: a.overall, scores: a.scores, findings: a.findings, cto: a.cto }, null, 2) + '\n',
+    };
+}
+//# sourceMappingURL=analyze.js.map

package/dist/analyze.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"analyze.js","sourceRoot":"","sources":["../src/analyze.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AACH,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,kBAAkB,EAAgB,MAAM,eAAe,CAAC;AACjE,OAAO,EAAE,SAAS,EAAE,YAAY,EAAE,aAAa,EAA8B,MAAM,iBAAiB,CAAC;AAsBrG,MAAM,YAAY,GAAG,CAAC,IAAY,EAAU,EAAE;IAC5C,IAAI,CAAC;QACH,OAAO,EAAE,CAAC,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IACvC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC,CAAC;AACF,MAAM,MAAM,GAAG,CAAC,GAAW,EAAE,GAAW,EAAE,EAAE,CAAC,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,CAAC;AAEhF,oEAAoE;AACpE,MAAM,QAAQ,GAAG,CAAC,MAAM,EAAE,SAAS,EAAE,oBAAoB,EAAE,uBAAuB,EAAE,mBAAmB,CAAC,CAAC;AAEzG,iFAAiF;AACjF,MAAM,UAAU,UAAU,CAAC,GAAW;IACpC,MAAM,MAAM,GAAG,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,cAAc,CAAC,CAAC,CAAC;IAC5D,IAAI,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC7B,IAAI,QAAQ,GAAG,EAAE,CAAC;IAClB,IAAI,KAAK,GAAU,UAAU,CAAC;IAE9B,IAAI,MAAM,EAAE,CAAC;QACX,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;YAC/B,IAAI,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,YAAY,IAAI,EAAE,CAAC,EAAE,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,eAAe,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;QACtG,CAAC;QAAC,MAAM,CAAC;YACP,6DAA6D;QAC/D,CAAC;QACD,QAAQ,GAAG,MAAM,CAAC;QAClB,KAAK,GAAG,MAAM,CAAC,GAAG,EAAE,eAAe,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,MAAM,CAAC;IAC/D,CAAC;SAAM,IAAI,MAAM,CAAC,GAAG,EAAE,gBAAgB,CAAC,IAAI,MAAM,CAAC,GAAG,EAAE,kBAAkB,CAAC,EAAE,CAAC;QAC5E,QAAQ,GAAG,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,gBAAgB,CAAC,CAAC,GAAG,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,kBAAkB,CAAC,CAAC,CAAC;QAC7G,KAAK,GAAG,QAAQ,CAAC;IACnB,CAAC;SAAM,IAAI,MAAM,CAAC,GAAG,EAAE,QAAQ,CAAC,EAAE,CAAC;QACjC,QAAQ,GAAG,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC,CAAC;QAClD,KAAK,GAAG,IAAI,CAAC;IACf,CAAC;SAAM,CAAC;QACN,MAAM,IAAI,GAAG,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QAC5H,IAAI,IAAI,EAAE,CAAC;YACT,QAAQ,GAAG,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC,CAAC;YAC9C,KAAK,GAAG,QAAQ,CAAC;QACnB,CAAC;IACH,CAAC;IAED,MAAM,GAAG,GAAG,CAAC,IAAY,EAAE,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,QAAQ,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC;IACpG,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,IAAI,MAAM,CAAC,GAAG,EAAE,mBAAmB,CAAC;QAAE,OAAO,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAC;IACxE,IAAI,MAAM,CAAC,GAAG,EAAE,YAAY,CAAC,IAAI,MAAM,CAAC,GAAG,EAAE,cAAc,CAAC,IAAI,MAAM,CAAC,GAAG,EAAE,oBAAoB,CAAC;QAAE,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IAC1H,IAAI,GAAG,CAAC,QAAQ,CAAC,IAAI,GAAG,CAAC,MAAM,CAAC,IAAI,GAAG,CAAC,QAAQ,CAAC,IAAI,GAAG,CAAC,OAAO,CAAC,IAAI,MAAM,CAAC,GAAG,EAAE,OAAO,CAAC,IAAI,MAAM,CAAC,GAAG,EAAE,MAAM,CAAC;QAAE,OAAO,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;IAC/I,IAAI,GAAG,CAAC,cAAc,CAAC,IAAI,GAAG,CAAC,MAAM,CAAC,IAAI,GAAG,CAAC,UAAU,CAAC,IAAI,GAAG,CAAC,QAAQ,CAAC,IAAI,GAAG,CAAC,QAAQ,CAAC;QAAE,OAAO,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;IACtH,IAAI,GAAG,CAAC,IAAI,CAAC,IAAI,GAAG,CAAC,UAAU,CAAC,IAAI,GAAG,CAAC,SAAS,CAAC;QAAE,OAAO,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;SAC3E,IAAI,GAAG,CAAC,UAAU,CAAC,IAAI,GAAG,CAAC,SAAS,CAAC,IAAI,GAAG,CAAC,SAAS,CAAC;QAAE,OAAO,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;SAClF,IAAI,GAAG,CAAC,gBAAgB,CAAC,IAAI,GAAG,CAAC,QAAQ,CAAC;QAAE,OAAO,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;IAC3E,IAAI,GAAG,CAAC,OAAO,CAAC,IAAI,GAAG,CAAC,SAAS,CAAC;QAAE,OAAO,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;IAChE,IAAI,GAAG,CAAC,QAAQ,CAAC,IAAI,GAAG,CAAC,SAAS,CAAC,IAAI,GAAG,CAAC,SAAS,CAAC,IAAI,GAAG,CAAC,QAAQ,CAAC;QAAE,OAAO,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;IACrG,IAAI,GAAG,CAAC,eAAe,CAAC;QAAE,OAAO,CAAC,IAAI,CAAC,oBAAoB,CAAC,CAAC;IAC7D,IAAI,MAAM,CAAC,GAAG,EAAE,gBAAgB,CAAC,IAAI,GAAG,CAAC,UAAU,CAAC,IAAI,MAAM,CAAC,GAAG,EAAE,wBAAwB,CAAC;QAAE,OAAO,CAAC,IAAI,CAAC,uBAAuB,CAAC,CAAC;IACrI,IAAI,GAAG,CAAC,QAAQ,CAAC,IAAI,GAAG,CAAC,UAAU,CAAC,IAAI,GAAG,CAAC,MAAM,CAAC,IAAI,GAAG,CAAC,UAAU,CAAC;QAAE,OAAO,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;IAEpG,MAAM,OAAO,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;IAC5F,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,OAAO,EAAE,YAAY,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC;AAC9D,CAAC;AAED,+FAA+F;AAC/F,SAAS,WAAW,CAAC,KAAgB;IACnC,OAAO;QACL,MAAM,EAAE,EAAE,UAAU,EAAE,EAAE,EAAE,MAAM,EAAE,aAAa,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,QAAQ,EAAE,CAAC,EAAE,aAAa,EAAE,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE,UAAU,EAAE,CAAC,EAAE;QACjI,KAAK,EAAE,KAAK,CAAC,KAAK;QAClB,QAAQ,EAAE,CAAC;QACX,YAAY,EAAE,SAAS;QACvB,IAAI,EAAE,EAAE;QACR,MAAM,EAAE,KAAK,CAAC,OAAO;QACrB,QAAQ,EAAE,EAAE;QACZ,MAAM,EAAE,EAAE;QACV,UAAU,EAAE,CAAC;QACb,WAAW,EAAE,EAAE;QACf,SAAS,EAAE,EAAE;KACd,CAAC;AACJ,CAAC;AAED,wGAAwG;AACxG,MAAM,UAAU,WAAW,CAAC,KAAgB;IAC1C,MAAM,SAAS,GAAG,WAAW,CAAC,KAAK,CAAC,CAAC;IACrC,MAAM,QAAQ,GAAG,kBAAkB,CAAC,SAAS,CAAC,CAAC;IAC/C,MAAM,MAAM,GAAG,aAAa,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;IAClD,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,YAAY,CAAC,MAAM,CAAC,EAAE,QAAQ,EAAE,GAAG,EAAE,SAAS,CAAC,SAAS,EAAE,QAAQ,EAAE,MAAM,CAAC,EAAE,CAAC;AAC1G,CAAC;AAED,MAAM,UAAU,WAAW,CAAC,GAAW;IACrC,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,CAAC,CAAC;IAC9B,OAAO,EAAE,GAAG,EAAE,KAAK,EAAE,GAAG,WAAW,CAAC,KAAK,CAAC,EAAE,CAAC;AAC/C,CAAC;AAED,0EAA0E;AAC1E,MAAM,UAAU,cAAc,CAAC,CAAe;IAC5C,MAAM,GAAG,GAAG,CAAC,CAAS,EAAE,EAAE,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC,GAAG,GAAG,CAAC,MAAM,CAAC,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;IAChG,MAAM,MAAM,GAAG;QACb,uBAAuB;QACvB,EAAE;QACF,YAAY,CAAC,CAAC,KAAK,CAAC,KAAK,wBAAwB,CAAC,CAAC,KAAK,CAAC,YAAY,2BAA2B,CAAC,CAAC,OAAO,QAAQ;QACjH,EAAE;QACF,0BAA0B;QAC1B,EAAE;QACF,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,mBAAmB,CAAC,CAAC;QAC1F,EAAE;QACF,qBAAqB;QACrB,EAAE;QACF,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,8CAA8C,CAAC,CAAC;QACrH,EAAE;QACF,mBAAmB;QACnB,EAAE;QACF,yBAAyB;QACzB,eAAe;QACf,GAAG,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,CAAC,SAAS,MAAM,CAAC,CAAC,KAAK,QAAQ,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC;QAC/E,EAAE;QACF,mBAAmB,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,EAAE;QACnE,EAAE;QACF,CAAC,CAAC,GAAG,CAAC,OAAO;QACb,EAAE;KACH,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAEb,MAAM,OAAO,GAAG;QACd,uBAAuB;QACvB,EAAE;QACF,uDAAuD;QACvD,EAAE;QACF,GAAG,CAAC,MAAM,EAAE,QAAQ,EAAE,KAAK,CAAC,CAAC,OAAO,CAAC,CAAC,GAAG,EAAE,EAAE;YAC3C,MAAM,KAAK,GAAG,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,GAAG,CAAC,CAAC;YAC3D,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;gBAAE,OAAO,EAAE,CAAC;YAClC,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,GAAG,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,WAAW,EAAE,EAAE,EAAE,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,WAAW,CAAC,CAAC,IAAI,QAAQ,CAAC,CAAC,cAAc,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC;QAC1I,CAAC,CAAC;KACH,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAEb,OAAO;QACL,oBAAoB,EAAE,MAAM;QAC5B,wBAAwB,EAAE,OAAO;QACjC,eAAe,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,QAAQ,EAAE,CAAC,CAAC,QAAQ,EAAE,GAAG,EAAE,CAAC,CAAC,GAAG,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI;KAC5I,CAAC;AACJ,CAAC"}

package/dist/assessment.d.ts

@@ -0,0 +1,39 @@
+/**
+ * The review layer over a blueprint: quality scores, Architecture Decision Records, and an
+ * independent "AI CTO" pass. All derived deterministically from the selection and the
+ * architecture review — the CTO review challenges the plan using the same findings a staff
+ * engineer would raise, so a low score and a blocking finding tell one consistent story.
+ */
+import type { AutoSelection } from './autoplan.js';
+import type { Finding } from './analysis.js';
+export interface Score {
+    dimension: string;
+    score: number;
+    note: string;
+}
+export interface ADR {
+    number: number;
+    title: string;
+    status: 'accepted' | 'proposed';
+    context: string;
+    decision: string;
+    alternatives: string[];
+    consequences: string[];
+}
+export interface CtoReview {
+    verdict: 'approved' | 'approved-with-conditions' | 'needs-work';
+    summary: string;
+    challenges: string[];
+    conditions: string[];
+}
+/**
+ * Ten quality dimensions, each scored from the selection and the review. A high-severity finding
+ * in a dimension's area caps it low; a covered baseline scores high. Deterministic, not vibes.
+ */
+export declare function qualityScores(selection: AutoSelection, findings: Finding[]): Score[];
+/** The overall score is the mean of the dimensions. */
+export declare function overallScore(scores: Score[]): number;
+/** One ADR per major decision — architecture and each choice-set layer (database, auth). */
+export declare function generateADRs(selection: AutoSelection): ADR[];
+/** The independent CTO pass — it challenges the plan using the review's high/medium findings. */
+export declare function ctoReview(selection: AutoSelection, findings: Finding[], scores: Score[]): CtoReview;