@opensip-cli/config 0.1.0

package/dist/document/host-declarations.js

@@ -0,0 +1,48 @@
+/**
+ * host-declarations — the document-level config blocks owned by the host
+ * (the config package itself), not by any Tool plugin.
+ *
+ * Each tool contributes a namespaced {@link ToolConfigDeclaration}
+ * (`fitness`/`graph`/`simulation`) that the composer strict-validates. The
+ * tool-agnostic blocks — `cli`, `dashboard`, `schemaVersion`, `plugins`, and
+ * (from Phase 1) `targets`/`globalExcludes`/`checkOverrides` — are owned by no
+ * tool. They are returned here as `ToolConfigDeclaration`s and composed BESIDE
+ * the tool declarations (the composer is namespace-agnostic), turning the
+ * previously-`.catchall`-tolerated top-level keys into claimed, strict
+ * namespaces (ADR-0023).
+ *
+ * `schemaVersion` is claimed as a permissive top-level `number` so the
+ * composed document does not reject it — but the version-COMPAT decision
+ * (`readConfigSchemaVersion` + `checkSchemaCompat`) stays in `core`, run in the
+ * pre-action gate BEFORE validation (ADR-0023 §Amendment).
+ */
+import { z } from 'zod';
+import { cliConfigSchema } from './cli-config.js';
+import { dashboardConfigSchema } from './dashboard.js';
+import { checkOverridesSchema, createPluginsConfigSchema, globalExcludesSchema, targetsRecordSchema, } from './targeting.js';
+/**
+ * The host's document-level declarations. Grows in Phase 1 (targeting).
+ *
+ * Returned as a fresh array per call (no shared mutable state); the
+ * composition root concatenates these with the per-tool declarations.
+ */
+export function hostConfigDeclarations(options = {}) {
+    return [
+        { namespace: 'cli', schema: cliConfigSchema },
+        { namespace: 'dashboard', schema: dashboardConfigSchema },
+        // Permissive: core owns version-compat; the schema only ensures a present
+        // value is a positive integer, never rejecting an absent one.
+        { namespace: 'schemaVersion', schema: z.number().int().min(1) },
+        // Shared two-layer scope model — three top-level keys, registered
+        // separately so the composed document matches the existing YAML exactly (no
+        // `targeting:` wrapper key; no rename).
+        { namespace: 'targets', schema: targetsRecordSchema },
+        { namespace: 'globalExcludes', schema: globalExcludesSchema },
+        { namespace: 'checkOverrides', schema: checkOverridesSchema },
+        {
+            namespace: 'plugins',
+            schema: createPluginsConfigSchema(options.pluginConfigKeys),
+        },
+    ];
+}
+//# sourceMappingURL=host-declarations.js.map

package/dist/document/host-declarations.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"host-declarations.js","sourceRoot":"","sources":["../../src/document/host-declarations.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,eAAe,EAAE,MAAM,iBAAiB,CAAC;AAClD,OAAO,EAAE,qBAAqB,EAAE,MAAM,gBAAgB,CAAC;AACvD,OAAO,EACL,oBAAoB,EACpB,yBAAyB,EACzB,oBAAoB,EACpB,mBAAmB,GAEpB,MAAM,gBAAgB,CAAC;AAqBxB;;;;;GAKG;AACH,MAAM,UAAU,sBAAsB,CACpC,UAAwC,EAAE;IAE1C,OAAO;QACL,EAAE,SAAS,EAAE,KAAK,EAAE,MAAM,EAAE,eAAe,EAAE;QAC7C,EAAE,SAAS,EAAE,WAAW,EAAE,MAAM,EAAE,qBAAqB,EAAE;QACzD,0EAA0E;QAC1E,8DAA8D;QAC9D,EAAE,SAAS,EAAE,eAAe,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE;QAC/D,kEAAkE;QAClE,4EAA4E;QAC5E,wCAAwC;QACxC,EAAE,SAAS,EAAE,SAAS,EAAE,MAAM,EAAE,mBAAmB,EAAE;QACrD,EAAE,SAAS,EAAE,gBAAgB,EAAE,MAAM,EAAE,oBAAoB,EAAE;QAC7D,EAAE,SAAS,EAAE,gBAAgB,EAAE,MAAM,EAAE,oBAAoB,EAAE;QAC7D;YACE,SAAS,EAAE,SAAS;YACpB,MAAM,EAAE,yBAAyB,CAAC,OAAO,CAAC,gBAAgB,CAAC;SAC5D;KACF,CAAC;AACJ,CAAC"}

package/dist/document/targeting.d.ts

@@ -0,0 +1,151 @@
+/**
+ * targeting — the shared two-layer scope model: the `targets:`,
+ * `globalExcludes:`, and `checkOverrides:` document-level blocks of
+ * `opensip-cli.config.yml`.
+ *
+ * This is cross-tool config, not a fitness concern — a project shipping only
+ * `graph` resolves its scope through the same model. Relocated here from
+ * `@opensip-cli/fitness` under ADR-0023. The data/runtime boundary:
+ *
+ *   - config owns the **document shape** — the types below and the Zod field
+ *     schemas — so the composed whole-document validation can strict-check the
+ *     three top-level blocks (the host declarations in {@link ./host-declarations}).
+ *   - fitness keeps the **runtime** — its `TargetRegistry`, the registry build +
+ *     the cross-validation that `checkOverrides` references known targets, and
+ *     `resolveTargetFiles` (glob expansion). It builds those from the schemas
+ *     here. Moving the registry down would invert the layer (config must not
+ *     import a fitness runtime type).
+ *
+ * The `plugins:` block type lives here too (it rides on the loaded
+ * `TargetsConfig`). Config owns the document shape + Zod validation; the
+ * plugin-discovery runtime still lives with the generic capability loader and
+ * each owning tool.
+ */
+import { z } from 'zod';
+/** Configuration for a named target (file set with include/exclude globs). */
+export interface TargetConfig {
+    /** Kebab-case identifier, e.g. 'backend', 'module-foundation' */
+    readonly name: string;
+    /** Human-readable description */
+    readonly description: string;
+    /** Glob patterns to include */
+    readonly include: readonly string[];
+    /** Glob patterns to exclude */
+    readonly exclude: readonly string[];
+    /** Tags for filtering/grouping */
+    readonly tags?: readonly string[];
+    /** Languages this target contains (e.g. 'typescript', 'tsx', 'json') */
+    readonly languages?: readonly string[];
+    /** Semantic concerns this target represents (e.g. 'backend', 'server', 'api') */
+    readonly concerns?: readonly string[];
+}
+/** A resolved target wrapping its configuration. */
+export interface Target {
+    readonly config: TargetConfig;
+}
+/**
+ * Per-check target overrides.
+ * Maps check slug → target name(s) to restrict which files a check runs against.
+ */
+export type CheckTargetMap = Readonly<Record<string, string | readonly string[]>>;
+/**
+ * Project-local plugin declarations — one list per plugin domain.
+ *
+ * When present in the config file, these override the default user-level
+ * plugin directory (`~/.opensip-cli/<domain>/`). Plugins get installed
+ * into `<project-root>/.opensip-cli/<domain>/` and are version-pinned
+ * by the project rather than by each developer's machine.
+ *
+ * Each entry is any npm install spec: `@scope/pkg`, `@scope/pkg@^1.2.3`,
+ * `./local-path`, `/abs/path/to/pkg.tgz`, `git+https://...`, etc.
+ */
+export interface PluginsConfig {
+    readonly fit?: readonly string[];
+    readonly sim?: readonly string[];
+    /**
+     * Explicit list of npm package names to load as check providers
+     * (e.g. ['@opensip-cli/checks-python', '@my-org/checks-internal']).
+     *
+     * Marker-based discovery still runs alongside this list; use this for
+     * packages that do not declare `opensipTools.kind: "fit-pack"` yet, or
+     * when you want to name a package explicitly in config.
+     */
+    readonly checkPackages?: readonly string[];
+    /**
+     * Exact simulation scenario package names to load from project `node_modules`.
+     * When present, capability discovery treats the explicit set as the pinned
+     * scenario source.
+     */
+    readonly scenarioPackages?: readonly string[];
+    /** Disable or enable simulation scenario name-pattern discovery. */
+    readonly autoDiscoverScenarios?: boolean;
+    /**
+     * Additional npm scopes to include in simulation scenario-package
+     * auto-discovery, on top of the platform default (`@opensip-cli`).
+     */
+    readonly packageScopes?: readonly string[];
+    /** Exact graph adapter package names to load from project `node_modules`. */
+    readonly graphAdapters?: readonly string[];
+    /** Disable or enable graph adapter marker discovery. */
+    readonly autoDiscoverGraphAdapters?: boolean;
+}
+/** The value shape expected for a capability discovery preference key. */
+export type PluginConfigKeyKind = 'packages' | 'autoDiscover' | 'scopes';
+/**
+ * One `plugins.<key>` declared by an admitted tool capability descriptor. The CLI
+ * maps manifest `capabilities[].discovery.configKeys` into this config-layer
+ * shape, keeping core manifest types out of `@opensip-cli/config`.
+ */
+export interface PluginConfigKeyDeclaration {
+    readonly key: string;
+    readonly kind: PluginConfigKeyKind;
+}
+/**
+ * Result of loading targets config, including both the target registry
+ * and per-check target overrides.
+ */
+export interface TargetsConfig {
+    /** Global file exclusion patterns (replaces .fitnessignore). */
+    readonly globalExcludes: readonly string[];
+    /** Per-check target overrides for third-party/marketplace checks. */
+    readonly checkOverrides: CheckTargetMap;
+    /**
+     * Project-local plugin declarations, keyed by domain. When any domain
+     * has entries here, plugin discovery for that domain reads from
+     * `<project>/.opensip-cli/<domain>/` instead of `~/.opensip-cli/<domain>/`.
+     */
+    readonly plugins?: PluginsConfig;
+}
+/** One named target's definition (a `targets.<name>` entry). Non-strict to
+ *  match the historical fitness loader (unknown keys are stripped, not rejected). */
+export declare const targetDefinitionSchema: z.ZodObject<{
+    description: z.ZodString;
+    include: z.ZodArray<z.ZodString>;
+    exclude: z.ZodOptional<z.ZodArray<z.ZodString>>;
+    tags: z.ZodOptional<z.ZodArray<z.ZodString>>;
+    languages: z.ZodOptional<z.ZodArray<z.ZodString>>;
+    concerns: z.ZodOptional<z.ZodArray<z.ZodString>>;
+}, z.core.$strip>;
+/** A `checkOverrides` value: a single target name or a non-empty list of them. */
+export declare const checkTargetValueSchema: z.ZodUnion<readonly [z.ZodString, z.ZodArray<z.ZodString>]>;
+/** The `targets:` block — a kebab-keyed record of target definitions. */
+export declare const targetsRecordSchema: z.ZodRecord<z.ZodString, z.ZodObject<{
+    description: z.ZodString;
+    include: z.ZodArray<z.ZodString>;
+    exclude: z.ZodOptional<z.ZodArray<z.ZodString>>;
+    tags: z.ZodOptional<z.ZodArray<z.ZodString>>;
+    languages: z.ZodOptional<z.ZodArray<z.ZodString>>;
+    concerns: z.ZodOptional<z.ZodArray<z.ZodString>>;
+}, z.core.$strip>>;
+/** The `globalExcludes:` block — a list of glob patterns. */
+export declare const globalExcludesSchema: z.ZodArray<z.ZodString>;
+/** The `checkOverrides:` block — slug → target name(s). */
+export declare const checkOverridesSchema: z.ZodRecord<z.ZodString, z.ZodUnion<readonly [z.ZodString, z.ZodArray<z.ZodString>]>>;
+/**
+ * Build the `plugins:` schema from the base project-local plugin domains plus
+ * the capability preference keys declared by admitted tool manifests.
+ */
+export declare function createPluginsConfigSchema(keys?: readonly PluginConfigKeyDeclaration[]): z.ZodObject<Record<string, z.ZodType>>;
+/** Base schema used by legacy loaders that do not have manifest context. */
+export declare const pluginsConfigSchema: z.ZodObject<Record<string, z.ZodType<unknown, unknown, z.core.$ZodTypeInternals<unknown, unknown>>>, z.core.$strip>;
+//# sourceMappingURL=targeting.d.ts.map

package/dist/document/targeting.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"targeting.d.ts","sourceRoot":"","sources":["../../src/document/targeting.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;GAsBG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAMxB,8EAA8E;AAC9E,MAAM,WAAW,YAAY;IAC3B,iEAAiE;IACjE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,iCAAiC;IACjC,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,+BAA+B;IAC/B,QAAQ,CAAC,OAAO,EAAE,SAAS,MAAM,EAAE,CAAC;IACpC,+BAA+B;IAC/B,QAAQ,CAAC,OAAO,EAAE,SAAS,MAAM,EAAE,CAAC;IACpC,kCAAkC;IAClC,QAAQ,CAAC,IAAI,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAClC,wEAAwE;IACxE,QAAQ,CAAC,SAAS,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IACvC,iFAAiF;IACjF,QAAQ,CAAC,QAAQ,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;CACvC;AAED,oDAAoD;AACpD,MAAM,WAAW,MAAM;IACrB,QAAQ,CAAC,MAAM,EAAE,YAAY,CAAC;CAC/B;AAED;;;GAGG;AACH,MAAM,MAAM,cAAc,GAAG,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,MAAM,EAAE,CAAC,CAAC,CAAC;AAElF;;;;;;;;;;GAUG;AACH,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,GAAG,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IACjC,QAAQ,CAAC,GAAG,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IACjC;;;;;;;OAOG;IACH,QAAQ,CAAC,aAAa,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAC3C;;;;OAIG;IACH,QAAQ,CAAC,gBAAgB,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAC9C,oEAAoE;IACpE,QAAQ,CAAC,qBAAqB,CAAC,EAAE,OAAO,CAAC;IACzC;;;OAGG;IACH,QAAQ,CAAC,aAAa,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAC3C,6EAA6E;IAC7E,QAAQ,CAAC,aAAa,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAC3C,wDAAwD;IACxD,QAAQ,CAAC,yBAAyB,CAAC,EAAE,OAAO,CAAC;CAC9C;AAED,0EAA0E;AAC1E,MAAM,MAAM,mBAAmB,GAAG,UAAU,GAAG,cAAc,GAAG,QAAQ,CAAC;AAEzE;;;;GAIG;AACH,MAAM,WAAW,0BAA0B;IACzC,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,IAAI,EAAE,mBAAmB,CAAC;CACpC;AAED;;;GAGG;AACH,MAAM,WAAW,aAAa;IAC5B,gEAAgE;IAChE,QAAQ,CAAC,cAAc,EAAE,SAAS,MAAM,EAAE,CAAC;IAC3C,qEAAqE;IACrE,QAAQ,CAAC,cAAc,EAAE,cAAc,CAAC;IACxC;;;;OAIG;IACH,QAAQ,CAAC,OAAO,CAAC,EAAE,aAAa,CAAC;CAClC;AAOD;qFACqF;AACrF,eAAO,MAAM,sBAAsB;;;;;;;iBAOjC,CAAC;AAEH,kFAAkF;AAClF,eAAO,MAAM,sBAAsB,6DAAoD,CAAC;AAExF,yEAAyE;AACzE,eAAO,MAAM,mBAAmB;;;;;;;kBAG/B,CAAC;AAEF,6DAA6D;AAC7D,eAAO,MAAM,oBAAoB,yBAAsB,CAAC;AAExD,2DAA2D;AAC3D,eAAO,MAAM,oBAAoB,uFAA+C,CAAC;AAIjF;;;GAGG;AACH,wBAAgB,yBAAyB,CACvC,IAAI,GAAE,SAAS,0BAA0B,EAAO,GAC/C,CAAC,CAAC,SAAS,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,CAWxC;AAED,4EAA4E;AAC5E,eAAO,MAAM,mBAAmB,qHAO9B,CAAC"}

package/dist/document/targeting.js

@@ -0,0 +1,71 @@
+/**
+ * targeting — the shared two-layer scope model: the `targets:`,
+ * `globalExcludes:`, and `checkOverrides:` document-level blocks of
+ * `opensip-cli.config.yml`.
+ *
+ * This is cross-tool config, not a fitness concern — a project shipping only
+ * `graph` resolves its scope through the same model. Relocated here from
+ * `@opensip-cli/fitness` under ADR-0023. The data/runtime boundary:
+ *
+ *   - config owns the **document shape** — the types below and the Zod field
+ *     schemas — so the composed whole-document validation can strict-check the
+ *     three top-level blocks (the host declarations in {@link ./host-declarations}).
+ *   - fitness keeps the **runtime** — its `TargetRegistry`, the registry build +
+ *     the cross-validation that `checkOverrides` references known targets, and
+ *     `resolveTargetFiles` (glob expansion). It builds those from the schemas
+ *     here. Moving the registry down would invert the layer (config must not
+ *     import a fitness runtime type).
+ *
+ * The `plugins:` block type lives here too (it rides on the loaded
+ * `TargetsConfig`). Config owns the document shape + Zod validation; the
+ * plugin-discovery runtime still lives with the generic capability loader and
+ * each owning tool.
+ */
+import { z } from 'zod';
+// =============================================================================
+// Field schemas (the document shape, in Zod) — single source for the loader,
+// the signalers whole-doc schema, and the host declarations.
+// =============================================================================
+/** One named target's definition (a `targets.<name>` entry). Non-strict to
+ *  match the historical fitness loader (unknown keys are stripped, not rejected). */
+export const targetDefinitionSchema = z.object({
+    description: z.string().min(1, 'description is required'),
+    include: z.array(z.string()).min(1, 'at least one include pattern is required'),
+    exclude: z.array(z.string()).optional(),
+    tags: z.array(z.string()).optional(),
+    languages: z.array(z.string()).optional(),
+    concerns: z.array(z.string()).optional(),
+});
+/** A `checkOverrides` value: a single target name or a non-empty list of them. */
+export const checkTargetValueSchema = z.union([z.string(), z.array(z.string()).min(1)]);
+/** The `targets:` block — a kebab-keyed record of target definitions. */
+export const targetsRecordSchema = z.record(z.string().regex(/^[a-z0-9]+(-[a-z0-9]+)*$/, 'target name must be kebab-case'), targetDefinitionSchema);
+/** The `globalExcludes:` block — a list of glob patterns. */
+export const globalExcludesSchema = z.array(z.string());
+/** The `checkOverrides:` block — slug → target name(s). */
+export const checkOverridesSchema = z.record(z.string(), checkTargetValueSchema);
+const pluginStringArraySchema = z.array(z.string());
+/**
+ * Build the `plugins:` schema from the base project-local plugin domains plus
+ * the capability preference keys declared by admitted tool manifests.
+ */
+export function createPluginsConfigSchema(keys = []) {
+    const shape = {
+        fit: pluginStringArraySchema.optional(),
+        sim: pluginStringArraySchema.optional(),
+    };
+    for (const { key, kind } of keys) {
+        shape[key] = (kind === 'autoDiscover' ? z.boolean() : pluginStringArraySchema).optional();
+    }
+    return z.object(shape).strict();
+}
+/** Base schema used by legacy loaders that do not have manifest context. */
+export const pluginsConfigSchema = createPluginsConfigSchema([
+    { key: 'checkPackages', kind: 'packages' },
+    { key: 'scenarioPackages', kind: 'packages' },
+    { key: 'autoDiscoverScenarios', kind: 'autoDiscover' },
+    { key: 'packageScopes', kind: 'scopes' },
+    { key: 'graphAdapters', kind: 'packages' },
+    { key: 'autoDiscoverGraphAdapters', kind: 'autoDiscover' },
+]);
+//# sourceMappingURL=targeting.js.map

package/dist/document/targeting.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"targeting.js","sourceRoot":"","sources":["../../src/document/targeting.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;GAsBG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AA2GxB,gFAAgF;AAChF,6EAA6E;AAC7E,6DAA6D;AAC7D,gFAAgF;AAEhF;qFACqF;AACrF,MAAM,CAAC,MAAM,sBAAsB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC7C,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,EAAE,yBAAyB,CAAC;IACzD,OAAO,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,EAAE,0CAA0C,CAAC;IAC/E,OAAO,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;IACvC,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;IACpC,SAAS,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;IACzC,QAAQ,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;CACzC,CAAC,CAAC;AAEH,kFAAkF;AAClF,MAAM,CAAC,MAAM,sBAAsB,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AAExF,yEAAyE;AACzE,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC,CAAC,MAAM,CACzC,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,0BAA0B,EAAE,gCAAgC,CAAC,EAC9E,sBAAsB,CACvB,CAAC;AAEF,6DAA6D;AAC7D,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC;AAExD,2DAA2D;AAC3D,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,sBAAsB,CAAC,CAAC;AAEjF,MAAM,uBAAuB,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC;AAEpD;;;GAGG;AACH,MAAM,UAAU,yBAAyB,CACvC,OAA8C,EAAE;IAEhD,MAAM,KAAK,GAA8B;QACvC,GAAG,EAAE,uBAAuB,CAAC,QAAQ,EAAE;QACvC,GAAG,EAAE,uBAAuB,CAAC,QAAQ,EAAE;KACxC,CAAC;IAEF,KAAK,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,IAAI,IAAI,EAAE,CAAC;QACjC,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,KAAK,cAAc,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,uBAAuB,CAAC,CAAC,QAAQ,EAAE,CAAC;IAC5F,CAAC;IAED,OAAO,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,EAAE,CAAC;AAClC,CAAC;AAED,4EAA4E;AAC5E,MAAM,CAAC,MAAM,mBAAmB,GAAG,yBAAyB,CAAC;IAC3D,EAAE,GAAG,EAAE,eAAe,EAAE,IAAI,EAAE,UAAU,EAAE;IAC1C,EAAE,GAAG,EAAE,kBAAkB,EAAE,IAAI,EAAE,UAAU,EAAE;IAC7C,EAAE,GAAG,EAAE,uBAAuB,EAAE,IAAI,EAAE,cAAc,EAAE;IACtD,EAAE,GAAG,EAAE,eAAe,EAAE,IAAI,EAAE,QAAQ,EAAE;IACxC,EAAE,GAAG,EAAE,eAAe,EAAE,IAAI,EAAE,UAAU,EAAE;IAC1C,EAAE,GAAG,EAAE,2BAA2B,EAAE,IAAI,EAAE,cAAc,EAAE;CAC3D,CAAC,CAAC"}

package/dist/document/template.d.ts

@@ -0,0 +1,43 @@
+/**
+ * template — render the document-level skeleton of `opensip-cli.config.yml`
+ * that `opensip init` scaffolds.
+ *
+ * The config package owns the *document shape*, so it owns the rendering of the
+ * host-owned blocks — `schemaVersion`, `globalExcludes`, and `targets` — that it
+ * also validates (the host declarations in {@link ./host-declarations}). This
+ * removes the second, hand-written definition of the document shape that used to
+ * live in the CLI's init templates and could drift from what the composed schema
+ * accepts (ADR-0023).
+ *
+ * The CLI supplies the per-language target *content* (include/exclude globs) and
+ * appends the per-tool blocks (e.g. `fitness:`) — those are tool-owned and the
+ * CLI is the composition root that knows them. A round-trip test
+ * (`renderDocumentHeader` output parses clean through the composed schema)
+ * guarantees the skeleton never drifts from validation.
+ */
+/** One named target as the template should scaffold it. */
+export interface TargetTemplateInput {
+    readonly name: string;
+    readonly description: string;
+    readonly languages: readonly string[];
+    readonly concerns?: readonly string[];
+    readonly include: readonly string[];
+    readonly exclude: readonly string[];
+}
+/** Inputs for the document-level skeleton. */
+export interface DocumentHeaderInput {
+    /** The schema version to stamp (the CLI's supported version). */
+    readonly schemaVersion: number;
+    /** The named targets to scaffold (the CLI provides per-language content). */
+    readonly targets: readonly TargetTemplateInput[];
+    /** Global exclude globs; a sensible default set is used when omitted. */
+    readonly globalExcludes?: readonly string[];
+}
+/**
+ * Render the host-owned document skeleton: the header comment, `schemaVersion`,
+ * `globalExcludes`, and the `targets` block. The result is valid YAML that
+ * parses clean through the composed whole-document schema (the host
+ * declarations). The CLI appends tool blocks (e.g. `fitness:`) after this.
+ */
+export declare function renderDocumentHeader(input: DocumentHeaderInput): string;
+//# sourceMappingURL=template.d.ts.map

package/dist/document/template.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"template.d.ts","sourceRoot":"","sources":["../../src/document/template.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAEH,2DAA2D;AAC3D,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,SAAS,EAAE,SAAS,MAAM,EAAE,CAAC;IACtC,QAAQ,CAAC,QAAQ,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IACtC,QAAQ,CAAC,OAAO,EAAE,SAAS,MAAM,EAAE,CAAC;IACpC,QAAQ,CAAC,OAAO,EAAE,SAAS,MAAM,EAAE,CAAC;CACrC;AAED,8CAA8C;AAC9C,MAAM,WAAW,mBAAmB;IAClC,iEAAiE;IACjE,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,6EAA6E;IAC7E,QAAQ,CAAC,OAAO,EAAE,SAAS,mBAAmB,EAAE,CAAC;IACjD,yEAAyE;IACzE,QAAQ,CAAC,cAAc,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;CAC7C;AAoBD;;;;;GAKG;AACH,wBAAgB,oBAAoB,CAAC,KAAK,EAAE,mBAAmB,GAAG,MAAM,CAqBvE"}

package/dist/document/template.js

@@ -0,0 +1,63 @@
+/**
+ * template — render the document-level skeleton of `opensip-cli.config.yml`
+ * that `opensip init` scaffolds.
+ *
+ * The config package owns the *document shape*, so it owns the rendering of the
+ * host-owned blocks — `schemaVersion`, `globalExcludes`, and `targets` — that it
+ * also validates (the host declarations in {@link ./host-declarations}). This
+ * removes the second, hand-written definition of the document shape that used to
+ * live in the CLI's init templates and could drift from what the composed schema
+ * accepts (ADR-0023).
+ *
+ * The CLI supplies the per-language target *content* (include/exclude globs) and
+ * appends the per-tool blocks (e.g. `fitness:`) — those are tool-owned and the
+ * CLI is the composition root that knows them. A round-trip test
+ * (`renderDocumentHeader` output parses clean through the composed schema)
+ * guarantees the skeleton never drifts from validation.
+ */
+const DEFAULT_GLOBAL_EXCLUDES = ['**/node_modules/**', '**/dist/**'];
+/** Render one target into the `targets:` block, matching `targetsRecordSchema`. */
+function renderTarget(t) {
+    const concerns = t.concerns ?? ['backend'];
+    return [
+        `  ${t.name}:`,
+        `    description: ${t.description}`,
+        `    languages: [${t.languages.join(', ')}]`,
+        `    concerns: [${concerns.join(', ')}]`,
+        '    include:',
+        ...t.include.map((p) => `      - "${p}"`),
+        '    exclude:',
+        ...t.exclude.map((p) => `      - "${p}"`),
+        '',
+    ];
+}
+/**
+ * Render the host-owned document skeleton: the header comment, `schemaVersion`,
+ * `globalExcludes`, and the `targets` block. The result is valid YAML that
+ * parses clean through the composed whole-document schema (the host
+ * declarations). The CLI appends tool blocks (e.g. `fitness:`) after this.
+ */
+export function renderDocumentHeader(input) {
+    const globalExcludes = input.globalExcludes ?? DEFAULT_GLOBAL_EXCLUDES;
+    const lines = [
+        '# OpenSIP CLI — project configuration',
+        '#',
+        '# Defines named target file sets for fitness checks. Each fitness',
+        '# check declares a `scope` (languages + concerns); discovery',
+        '# matches it against these targets to determine which files the',
+        '# check runs against.',
+        '#',
+        '# Docs: https://github.com/opensip-ai/opensip-cli#configuration',
+        '',
+        `schemaVersion: ${input.schemaVersion}`,
+        '',
+        'globalExcludes:',
+        ...globalExcludes.map((p) => `  - "${p}"`),
+        '',
+        'targets:',
+    ];
+    for (const t of input.targets)
+        lines.push(...renderTarget(t));
+    return lines.join('\n');
+}
+//# sourceMappingURL=template.js.map

package/dist/document/template.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"template.js","sourceRoot":"","sources":["../../src/document/template.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAsBH,MAAM,uBAAuB,GAAsB,CAAC,oBAAoB,EAAE,YAAY,CAAC,CAAC;AAExF,mFAAmF;AACnF,SAAS,YAAY,CAAC,CAAsB;IAC1C,MAAM,QAAQ,GAAG,CAAC,CAAC,QAAQ,IAAI,CAAC,SAAS,CAAC,CAAC;IAC3C,OAAO;QACL,KAAK,CAAC,CAAC,IAAI,GAAG;QACd,oBAAoB,CAAC,CAAC,WAAW,EAAE;QACnC,mBAAmB,CAAC,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG;QAC5C,kBAAkB,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG;QACxC,cAAc;QACd,GAAG,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,YAAY,CAAC,GAAG,CAAC;QACzC,cAAc;QACd,GAAG,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,YAAY,CAAC,GAAG,CAAC;QACzC,EAAE;KACH,CAAC;AACJ,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,oBAAoB,CAAC,KAA0B;IAC7D,MAAM,cAAc,GAAG,KAAK,CAAC,cAAc,IAAI,uBAAuB,CAAC;IACvE,MAAM,KAAK,GAAa;QACtB,uCAAuC;QACvC,GAAG;QACH,mEAAmE;QACnE,8DAA8D;QAC9D,iEAAiE;QACjE,uBAAuB;QACvB,GAAG;QACH,iEAAiE;QACjE,EAAE;QACF,kBAAkB,KAAK,CAAC,aAAa,EAAE;QACvC,EAAE;QACF,iBAAiB;QACjB,GAAG,cAAc,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,QAAQ,CAAC,GAAG,CAAC;QAC1C,EAAE;QACF,UAAU;KACX,CAAC;IACF,KAAK,MAAM,CAAC,IAAI,KAAK,CAAC,OAAO;QAAE,KAAK,CAAC,IAAI,CAAC,GAAG,YAAY,CAAC,CAAC,CAAC,CAAC,CAAC;IAC9D,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC1B,CAAC"}

package/dist/index.d.ts

@@ -0,0 +1,39 @@
+/**
+ * @opensip-cli/config — the capability-configuration layer.
+ *
+ * Each tool contributes a {@link ToolConfigDeclaration}; the host composes the
+ * registered namespaced Zod schemas into one strict whole-document schema
+ * ({@link composeConfigSchema}), validates a raw document against it
+ * ({@link validateConfigDocument}), resolves precedence across flags / env /
+ * file / defaults ({@link resolveConfig}), and emits a JSON Schema for editors
+ * and docs ({@link toJsonSchema}).
+ *
+ * The barrel also re-exports the kernel's {@link ConfigurationError} — the
+ * error every config-resolution path in this layer throws on a malformed or
+ * contradictory configuration. Surfacing it from the config package's own
+ * barrel means consumers `catch` against the configuration layer they call,
+ * not the kernel underneath it. (This re-export also keeps a runtime import of
+ * @opensip-cli/core live in the barrel.)
+ */
+export { ConfigurationError } from '@opensip-cli/core';
+export { composeConfigSchema, validateConfigDocument } from './composer.js';
+export { analyzeNamespaceClaims } from './namespace-claims.js';
+export type { NamespaceClaimReport, UnclaimedNamespace } from './namespace-claims.js';
+export type { EnvBindingDeclaration, EnvBindingType, ToolConfigDeclaration, } from './declaration.js';
+export { resolveConfig } from './precedence.js';
+export type { ResolveConfigInput, ResolvedConfig } from './precedence.js';
+export { resolveCapabilityPreferences } from './capability-preferences.js';
+export type { CapabilityPreferences } from './capability-preferences.js';
+export { toJsonSchema } from './json-schema.js';
+export type { JsonSchema } from './json-schema.js';
+export { loadCliDefaults, cliConfigSchema } from './document/cli-config.js';
+export type { CliDefaults } from './document/cli-config.js';
+export { dashboardConfigSchema } from './document/dashboard.js';
+export { targetDefinitionSchema, checkTargetValueSchema, targetsRecordSchema, globalExcludesSchema, checkOverridesSchema, pluginsConfigSchema, createPluginsConfigSchema, } from './document/targeting.js';
+export type { TargetConfig, Target, CheckTargetMap, PluginsConfig, PluginConfigKeyKind, PluginConfigKeyDeclaration, TargetsConfig, } from './document/targeting.js';
+export { GLOBAL_CONFIG_PATH, readGlobalConfig, writeGlobalConfig, resolveApiKey, resolveEffectiveCloudConfig, CONFIG_ENV_SPECS, } from './document/global-config.js';
+export type { GlobalConfig } from './document/global-config.js';
+export { renderDocumentHeader } from './document/template.js';
+export type { DocumentHeaderInput, TargetTemplateInput } from './document/template.js';
+export { hostConfigDeclarations } from './document/host-declarations.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAEH,OAAO,EAAE,kBAAkB,EAAE,MAAM,mBAAmB,CAAC;AAEvD,OAAO,EAAE,mBAAmB,EAAE,sBAAsB,EAAE,MAAM,eAAe,CAAC;AAG5E,OAAO,EAAE,sBAAsB,EAAE,MAAM,uBAAuB,CAAC;AAC/D,YAAY,EAAE,oBAAoB,EAAE,kBAAkB,EAAE,MAAM,uBAAuB,CAAC;AACtF,YAAY,EACV,qBAAqB,EACrB,cAAc,EACd,qBAAqB,GACtB,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EAAE,aAAa,EAAE,MAAM,iBAAiB,CAAC;AAChD,YAAY,EAAE,kBAAkB,EAAE,cAAc,EAAE,MAAM,iBAAiB,CAAC;AAK1E,OAAO,EAAE,4BAA4B,EAAE,MAAM,6BAA6B,CAAC;AAC3E,YAAY,EAAE,qBAAqB,EAAE,MAAM,6BAA6B,CAAC;AACzE,OAAO,EAAE,YAAY,EAAE,MAAM,kBAAkB,CAAC;AAChD,YAAY,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAGnD,OAAO,EAAE,eAAe,EAAE,eAAe,EAAE,MAAM,0BAA0B,CAAC;AAC5E,YAAY,EAAE,WAAW,EAAE,MAAM,0BAA0B,CAAC;AAC5D,OAAO,EAAE,qBAAqB,EAAE,MAAM,yBAAyB,CAAC;AAChE,OAAO,EACL,sBAAsB,EACtB,sBAAsB,EACtB,mBAAmB,EACnB,oBAAoB,EACpB,oBAAoB,EACpB,mBAAmB,EACnB,yBAAyB,GAC1B,MAAM,yBAAyB,CAAC;AACjC,YAAY,EACV,YAAY,EACZ,MAAM,EACN,cAAc,EACd,aAAa,EACb,mBAAmB,EACnB,0BAA0B,EAC1B,aAAa,GACd,MAAM,yBAAyB,CAAC;AACjC,OAAO,EACL,kBAAkB,EAClB,gBAAgB,EAChB,iBAAiB,EACjB,aAAa,EACb,2BAA2B,EAC3B,gBAAgB,GACjB,MAAM,6BAA6B,CAAC;AACrC,YAAY,EAAE,YAAY,EAAE,MAAM,6BAA6B,CAAC;AAChE,OAAO,EAAE,oBAAoB,EAAE,MAAM,wBAAwB,CAAC;AAC9D,YAAY,EAAE,mBAAmB,EAAE,mBAAmB,EAAE,MAAM,wBAAwB,CAAC;AACvF,OAAO,EAAE,sBAAsB,EAAE,MAAM,iCAAiC,CAAC"}

package/dist/index.js

@@ -0,0 +1,37 @@
+/**
+ * @opensip-cli/config — the capability-configuration layer.
+ *
+ * Each tool contributes a {@link ToolConfigDeclaration}; the host composes the
+ * registered namespaced Zod schemas into one strict whole-document schema
+ * ({@link composeConfigSchema}), validates a raw document against it
+ * ({@link validateConfigDocument}), resolves precedence across flags / env /
+ * file / defaults ({@link resolveConfig}), and emits a JSON Schema for editors
+ * and docs ({@link toJsonSchema}).
+ *
+ * The barrel also re-exports the kernel's {@link ConfigurationError} — the
+ * error every config-resolution path in this layer throws on a malformed or
+ * contradictory configuration. Surfacing it from the config package's own
+ * barrel means consumers `catch` against the configuration layer they call,
+ * not the kernel underneath it. (This re-export also keeps a runtime import of
+ * @opensip-cli/core live in the barrel.)
+ */
+export { ConfigurationError } from '@opensip-cli/core';
+export { composeConfigSchema, validateConfigDocument } from './composer.js';
+// ADR-0043: the unclaimed-namespace claim report (pure; the CLI emits the
+// warning / applies the loaded-tool rejection).
+export { analyzeNamespaceClaims } from './namespace-claims.js';
+export { resolveConfig } from './precedence.js';
+// One descriptor-driven capability-preference resolver (§5.3, Phase 3): reads a
+// domain's explicit-list / auto-discover / scopes from the project config through
+// the keys its discovery descriptor declares — replacing the three bespoke
+// per-tool readers with the documented keys unchanged.
+export { resolveCapabilityPreferences } from './capability-preferences.js';
+export { toJsonSchema } from './json-schema.js';
+// Document-level config blocks (the tool-agnostic surface — ADR-0023).
+export { loadCliDefaults, cliConfigSchema } from './document/cli-config.js';
+export { dashboardConfigSchema } from './document/dashboard.js';
+export { targetDefinitionSchema, checkTargetValueSchema, targetsRecordSchema, globalExcludesSchema, checkOverridesSchema, pluginsConfigSchema, createPluginsConfigSchema, } from './document/targeting.js';
+export { GLOBAL_CONFIG_PATH, readGlobalConfig, writeGlobalConfig, resolveApiKey, resolveEffectiveCloudConfig, CONFIG_ENV_SPECS, } from './document/global-config.js';
+export { renderDocumentHeader } from './document/template.js';
+export { hostConfigDeclarations } from './document/host-declarations.js';
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAEH,OAAO,EAAE,kBAAkB,EAAE,MAAM,mBAAmB,CAAC;AAEvD,OAAO,EAAE,mBAAmB,EAAE,sBAAsB,EAAE,MAAM,eAAe,CAAC;AAC5E,0EAA0E;AAC1E,gDAAgD;AAChD,OAAO,EAAE,sBAAsB,EAAE,MAAM,uBAAuB,CAAC;AAO/D,OAAO,EAAE,aAAa,EAAE,MAAM,iBAAiB,CAAC;AAEhD,gFAAgF;AAChF,kFAAkF;AAClF,2EAA2E;AAC3E,uDAAuD;AACvD,OAAO,EAAE,4BAA4B,EAAE,MAAM,6BAA6B,CAAC;AAE3E,OAAO,EAAE,YAAY,EAAE,MAAM,kBAAkB,CAAC;AAGhD,uEAAuE;AACvE,OAAO,EAAE,eAAe,EAAE,eAAe,EAAE,MAAM,0BAA0B,CAAC;AAE5E,OAAO,EAAE,qBAAqB,EAAE,MAAM,yBAAyB,CAAC;AAChE,OAAO,EACL,sBAAsB,EACtB,sBAAsB,EACtB,mBAAmB,EACnB,oBAAoB,EACpB,oBAAoB,EACpB,mBAAmB,EACnB,yBAAyB,GAC1B,MAAM,yBAAyB,CAAC;AAUjC,OAAO,EACL,kBAAkB,EAClB,gBAAgB,EAChB,iBAAiB,EACjB,aAAa,EACb,2BAA2B,EAC3B,gBAAgB,GACjB,MAAM,6BAA6B,CAAC;AAErC,OAAO,EAAE,oBAAoB,EAAE,MAAM,wBAAwB,CAAC;AAE9D,OAAO,EAAE,sBAAsB,EAAE,MAAM,iCAAiC,CAAC"}

package/dist/json-schema.d.ts

@@ -0,0 +1,23 @@
+/**
+ * json-schema — emit a JSON Schema for `opensip-cli.config.yml`.
+ *
+ * Editors and docs consume a JSON Schema for the whole document so an author
+ * gets completion + validation in their editor. The schema is generated from
+ * the composed Zod schema (see {@link ./composer}) — single source of truth, no
+ * hand-maintained mirror.
+ *
+ * zod 4 ships a built-in `z.toJSONSchema`, so no extra dependency is needed.
+ */
+import { type ZodType } from 'zod';
+/** A JSON Schema document (object form). */
+export type JsonSchema = Record<string, unknown>;
+/**
+ * Emit a JSON Schema for the composed config document.
+ *
+ * @param composed The whole-document schema returned by `composeConfigSchema`.
+ * @returns A JSON Schema object whose `properties` include each registered
+ *   namespace. The document-level catchall renders
+ *   as `additionalProperties`, so unclaimed top-level keys remain permitted.
+ */
+export declare function toJsonSchema(composed: ZodType): JsonSchema;
+//# sourceMappingURL=json-schema.d.ts.map

package/dist/json-schema.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"json-schema.d.ts","sourceRoot":"","sources":["../src/json-schema.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,EAAK,KAAK,OAAO,EAAE,MAAM,KAAK,CAAC;AAEtC,4CAA4C;AAC5C,MAAM,MAAM,UAAU,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;AAEjD;;;;;;;GAOG;AACH,wBAAgB,YAAY,CAAC,QAAQ,EAAE,OAAO,GAAG,UAAU,CAI1D"}

package/dist/json-schema.js

@@ -0,0 +1,25 @@
+/**
+ * json-schema — emit a JSON Schema for `opensip-cli.config.yml`.
+ *
+ * Editors and docs consume a JSON Schema for the whole document so an author
+ * gets completion + validation in their editor. The schema is generated from
+ * the composed Zod schema (see {@link ./composer}) — single source of truth, no
+ * hand-maintained mirror.
+ *
+ * zod 4 ships a built-in `z.toJSONSchema`, so no extra dependency is needed.
+ */
+import { z } from 'zod';
+/**
+ * Emit a JSON Schema for the composed config document.
+ *
+ * @param composed The whole-document schema returned by `composeConfigSchema`.
+ * @returns A JSON Schema object whose `properties` include each registered
+ *   namespace. The document-level catchall renders
+ *   as `additionalProperties`, so unclaimed top-level keys remain permitted.
+ */
+export function toJsonSchema(composed) {
+    // `io: 'input'` so the schema describes the *authored* document (pre-default
+    // application), which is what an editor validates as the user types.
+    return z.toJSONSchema(composed, { io: 'input' });
+}
+//# sourceMappingURL=json-schema.js.map

package/dist/json-schema.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"json-schema.js","sourceRoot":"","sources":["../src/json-schema.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,EAAE,CAAC,EAAgB,MAAM,KAAK,CAAC;AAKtC;;;;;;;GAOG;AACH,MAAM,UAAU,YAAY,CAAC,QAAiB;IAC5C,6EAA6E;IAC7E,qEAAqE;IACrE,OAAO,CAAC,CAAC,YAAY,CAAC,QAAQ,EAAE,EAAE,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC;AACnD,CAAC"}

package/dist/namespace-claims.d.ts

@@ -0,0 +1,29 @@
+/**
+ * namespace-claims — the ADR-0043 unclaimed-namespace report.
+ *
+ * The composer deliberately tolerates unclaimed top-level keys (the
+ * uninstalled-tool forward-compat contract, `composer.ts` rule 2) — but it
+ * tolerates them SILENTLY, which is the live typo hole: `fitnes:` validates
+ * cleanly and the user's config just never applies. This pure analyzer makes
+ * the tolerance observable: it names each unclaimed namespace and suggests
+ * the nearest claimed one when a typo is plausible. The CLI emits the warning
+ * (config stays log-free); rejection policy (a LOADED tool with an undeclared
+ * namespace) also lives at the caller, which knows the loaded-tool set.
+ */
+import type { ToolConfigDeclaration } from './declaration.js';
+/** One unclaimed top-level namespace, with a did-you-mean when one is close. */
+export interface UnclaimedNamespace {
+    readonly namespace: string;
+    /** The nearest claimed namespace within edit distance ≤ 2, when any. */
+    readonly suggestion?: string;
+}
+/** The ADR-0043 claim report for one validated document. */
+export interface NamespaceClaimReport {
+    readonly unclaimed: readonly UnclaimedNamespace[];
+}
+/**
+ * Report the document's top-level keys that no declaration claims. Pure: no
+ * IO, no logging — the caller decides warn-vs-reject per key (ADR-0043).
+ */
+export declare function analyzeNamespaceClaims(declarations: readonly ToolConfigDeclaration[], document: unknown): NamespaceClaimReport;
+//# sourceMappingURL=namespace-claims.d.ts.map

package/dist/namespace-claims.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"namespace-claims.d.ts","sourceRoot":"","sources":["../src/namespace-claims.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,kBAAkB,CAAC;AAE9D,gFAAgF;AAChF,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,wEAAwE;IACxE,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;CAC9B;AAED,4DAA4D;AAC5D,MAAM,WAAW,oBAAoB;IACnC,QAAQ,CAAC,SAAS,EAAE,SAAS,kBAAkB,EAAE,CAAC;CACnD;AAyBD;;;GAGG;AACH,wBAAgB,sBAAsB,CACpC,YAAY,EAAE,SAAS,qBAAqB,EAAE,EAC9C,QAAQ,EAAE,OAAO,GAChB,oBAAoB,CAoBtB"}