@orkestrel/probe 0.0.26 → 0.0.28

package/dist/src/server/index.js

@@ -5,14 +5,14 @@ import { createHash, randomUUID } from "node:crypto";
 import { basename, dirname, extname, isAbsolute, join, relative, resolve, sep } from "node:path";
 import { fileURLToPath, pathToFileURL } from "node:url";
 import { attempt, compileGuard, compileSchema, isArray, isError, isFunction, isNumber, isObject, isRecord, isString, parseJSON, schemaToParameters } from "@orkestrel/contract";
-import { CLAIM_SHAPE, LINT_DEADLINE, LINT_TEARDOWN, PROBE_DEADLINE, PROBE_KEYS, PROBE_RESTARTS, PROBE_SPECIFICATIONS, PROBE_WARM, ProbeError, RUNTIME_PLUGIN, TYPE_MIRROR, computeReceipt, createDestroyedError, formatCheck, formatReceipt, formatSpecification, formatVerdict, isClaim, isDraft, isProbeError, isVerdict, matchesSpecification } from "../core/index.js";
+import { CLAIM_SHAPE, LINT_DEADLINE, LINT_TEARDOWN, PROBE_DEADLINE, PROBE_KEYS, PROBE_RESTARTS, PROBE_SPECIFICATIONS, PROBE_WARM, ProbeError, RUNTIME_PLUGIN, TYPE_MIRROR, computeReceipt, createDestroyedError, formatReceipt, formatSpecification, formatStageResult, formatVerdict, isClaim, isDraft, isProbeError, isVerdict, matchesSpecification } from "../core/index.js";
 import { inspectProcess, killTree } from "@orkestrel/process/server";
 import { Emitter } from "@orkestrel/emitter";
 import { createPool, isPoolError } from "@orkestrel/pool";
 import { createLSPClient, isLSPError } from "@orkestrel/lsp";
 import { addAbortListener } from "node:events";
 import { createTimeout } from "@orkestrel/timeout";
-import { createStdioClientTransport } from "@orkestrel/lsp/server";
+import { createLSPStdioTransport } from "@orkestrel/lsp/server";
 import { PassThrough } from "node:stream";
 import { AsyncLocalStorage } from "node:async_hooks";
 import { spawn } from "node:child_process";
@@ -729,8 +729,12 @@ function matchesLiveProcess(id) {
 * Collects every regular file a target workspace holds, skipping the trees no inspection reads.
 *
 * @remarks
-* Skips a directory named `.git`, `dist`, or `node_modules` at any depth, and the directory
-* {@link TYPE_MIRROR} names, which would otherwise carry this package's own mirror into the walk. A
+* Skips a directory named `.git`, `dist`, or `node_modules` at any depth. Of the workspace-root
+* `tmp` directory it walks only `tmp/probes`: the scaffold tmp layout holds the runtime probes there
+* and nothing else an inspection reads, so a consumer's ignored data under `tmp/` is never read or
+* copied. The match is the lowercase `tmp` spelling exactly, and a `tmp` directory below the root is
+* walked like any other. The directory {@link TYPE_MIRROR} names is skipped as well, so this
+* package's own mirror stays out of the walk if it ever moves outside `tmp`. A
 * directory this host cannot list is skipped rather than raised, so one unreadable directory in a
 * consumer's tree is not a reason to refuse the whole walk. A symbolic link is not carried, whether
 * it names a file or a directory, so a file reached only through one is absent from the result; a
@@ -747,7 +751,9 @@ function matchesLiveProcess(id) {
 function collectWorkspaceFiles(workspace) {
 	const excluded = normalizePath(resolveWorkspaceFile(workspace, TYPE_MIRROR));
 	const files = [];
-	const directories = [resolve(workspace)];
+	const root = resolve(workspace);
+	const scratch = join(root, "tmp");
+	const directories = [root];
 	while (directories.length > 0) {
 		const directory = directories.pop();
 		if (directory === void 0) break;
@@ -755,6 +761,7 @@ function collectWorkspaceFiles(workspace) {
 		const entries = reading.success ? reading.value : [];
 		for (const entry of entries) {
 			if (entry.name === ".git" || entry.name === "dist" || entry.name === "node_modules") continue;
+			if (directory === scratch && entry.name !== "probes") continue;
 			const path = join(directory, entry.name);
 			if (entry.isDirectory()) {
 				if (normalizePath(path) !== excluded) directories.push(path);
@@ -814,12 +821,12 @@ async function guardStage(stage, operation) {
 *
 * @remarks
 * The published claim schema constrains `Draft.path` to a non-empty string and nothing else, while
-* `isDraft` also refuses an absolute path and one that escapes the workspace. That one member is
-* the whole of the difference between the advertised contract and the enforced one, so a caller
-* refused after satisfying the schema is refused here and nowhere else. The whole input must first
-* satisfy that schema. Each draft is then tested with `isDraft` itself rather than with a second
-* copy of its rule. Reports nothing for a value carrying no draft member, including one refused for
-* a member this contract does not declare.
+* `isDraft` also refuses an absolute path and one that resolves outside the workspace. That one
+* member is the whole of the difference between the advertised contract and the enforced one, so a
+* caller refused after satisfying the schema is refused here and nowhere else. The whole input must
+* first satisfy that schema. Each draft is then tested with `isDraft` itself rather than with a
+* second copy of its rule. Reports nothing for a value carrying no draft member, including one
+* refused for a member this contract does not declare.
 *
 * This function lives in the server helpers rather than in core: core's leaf pair, `helpers.ts` and
 * `validators.ts`, may not consume the shapes module this function reads `CLAIM_SHAPE` from, and
@@ -854,10 +861,11 @@ function findRefusedPaths(value) {
 * `tsc --showConfig` spells a path relative to the project file, so a printed record carries an
 * absolute path only where a project itself declares one. Rewriting a contained absolute path to
 * its relative form keeps one commit checked out at two roots reading to one digest. A path that
-* escapes the workspace is left as it stands, because rewriting it would name a file outside the
-* tree by a relative spelling. Key order is the compiler's own and it differs between the supported
-* majors, so sorting removes a difference that means nothing. A `__proto__` key is dropped, as
-* the earlier assignment-built record dropped it, so a digest stays the same across releases.
+* resolves outside the workspace is left as it stands, because rewriting it would name a file
+* outside the tree by a relative spelling. Key order is the compiler's own and it differs between
+* the supported majors, so sorting removes a difference that means nothing. A `__proto__` key is
+* dropped, as the earlier assignment-built record dropped it, so a digest stays the same across
+* releases.
 *
 * @param workspace - The target workspace root
 * @param value - The value to rewrite
@@ -896,10 +904,10 @@ function normalizeValue(workspace, value) {
 *
 * @example
 * ```ts
-* computeDigest('/srv/checkout', { strict: true }).length // 32
+* computeWorkspaceDigest('/srv/checkout', { strict: true }).length // 32
 * ```
 */
-function computeDigest(workspace, value) {
+function computeWorkspaceDigest(workspace, value) {
 	return createHash("sha256").update(JSON.stringify(normalizeValue(workspace, value))).digest("hex").slice(0, 32);
 }
 /**
@@ -1093,7 +1101,7 @@ var Overlay = class {
 	}
 };
 // package.json
-var version = "0.0.26";
+var version = "0.0.28";
 var peerDependencies = {
 	"typescript": "^6.0.3 || ^7.0.2",
 	"vitest": "^4.1.12 || ^5.0.5"
@@ -1104,7 +1112,7 @@ var peerDependencies = {
 *
 * @remarks
 * Starting launches the target workspace's Oxlint binary with its Language Server Protocol mode
-* and hands the conversation to `@orkestrel/lsp`: `createStdioClientTransport` owns the child
+* and hands the conversation to `@orkestrel/lsp`: `createLSPStdioTransport` owns the child
 * process and its bytes, and `createLSPClient` owns the framing, the request correlation, the
 * capabilities this stage advertises, and the choice between pulled and pushed diagnostics. This
 * stage owns the workspace, the candidate identity, and the projection from a diagnostic to an
@@ -1132,7 +1140,7 @@ var peerDependencies = {
 * @example
 * ```ts
 * const stage = new LintStage('/srv/checkout')
-* const check = await stage.inspect(subject, { signal: AbortSignal.timeout(30_000) })
+* const result = await stage.inspect(subject, { signal: AbortSignal.timeout(30_000) })
 * await stage.destroy()
 * ```
 */
@@ -1205,7 +1213,7 @@ var LintStage = class {
 	}
 	async #warm() {
 		const binary = resolveWorkspaceBinary(this.#workspace, "oxlint");
-		const transport = createStdioClientTransport({
+		const transport = createLSPStdioTransport({
 			server: {
 				command: [
 					process.execPath,
@@ -1345,10 +1353,10 @@ var LintStage = class {
 * Vitest service after 64 specifications rather than deleting from each map that service owns. Any
 * bound holds the retention flat, because the replacement releases everything the instance held,
 * and 64 is the value chosen. The inspection that crosses the bound pays the replacement
-* synchronously: it closes the resident service and warms a new one before it runs. On 2026-08-20,
-* over this package's own workspace on the host `guides/probe.md` § Cost names, two runs of 66
-* inspections put that one at 480 ms and 269 ms against median inspections of 156 ms and 155 ms, so
-* budget one call in 64 at 110 ms to 330 ms above the rest.
+* synchronously: it closes the resident service and warms a fresh service before it runs. On
+* 2026-08-20, over this package's own workspace on the host `guides/probe.md` § Cost names, two
+* runs of 66 inspections put that one at 480 ms and 269 ms against median inspections of 156 ms and
+* 155 ms, so budget one call in 64 at 110 ms to 330 ms above the rest.
 *
 * Every issue this stage emits names its party, and the stage emits an issue for every party
 * `Party` declares. An `origin: 'claimant'` issue is a failure Vitest reported about the candidate.
@@ -1373,7 +1381,7 @@ var LintStage = class {
 * @example
 * ```ts
 * const stage = new RuntimeStage('/srv/checkout')
-* const check = await stage.inspect(subject)
+* const result = await stage.inspect(subject)
 * await stage.destroy()
 * ```
 */
@@ -2019,7 +2027,7 @@ var RuntimeStage = class {
 * @example
 * ```ts
 * const stage = new TypeStage('/srv/checkout')
-* const check = await stage.inspect(subject, 'configs/src/tsconfig.core.json')
+* const result = await stage.inspect(subject, 'configs/src/tsconfig.core.json')
 * await stage.destroy()
 * ```
 */
@@ -2088,8 +2096,8 @@ var TypeStage = class {
 	*
 	* @param project - The workspace-relative TypeScript project to resolve
 	* @returns The resolved workspace-relative path and the digest of its compiler options
-	* @throws When the project escapes the workspace, when the compiler refuses it, or when the
-	* stage has already been destroyed
+	* @throws When the project resolves outside the workspace, when the compiler refuses it, or when
+	* the stage has already been destroyed
 	*/
 	resolve(project) {
 		return guardStage(this.stage, this.#resolve(project));
@@ -2158,7 +2166,7 @@ var TypeStage = class {
 		}
 		return {
 			path: contained,
-			digest: computeDigest(this.#workspace, config.compilerOptions)
+			digest: computeWorkspaceDigest(this.#workspace, config.compilerOptions)
 		};
 	}
 	async #destroy() {
@@ -2609,7 +2617,7 @@ var Probe = class {
 			const started = performance.now();
 			const id = randomUUID();
 			const project = await this.#resolve(claim);
-			const digest = computeDigest(this.#workspace, {
+			const digest = computeWorkspaceDigest(this.#workspace, {
 				case: claim.case,
 				control: claim.control
 			});
@@ -2773,21 +2781,21 @@ var Probe = class {
 			const beforeType = await this.#inspect(typeClaim.case, typeClaim);
 			const beforeRuntime = await this.#inspect(runtimeClaim.case, runtimeClaim);
 			const before = [...beforeType, ...beforeRuntime];
-			if (before.some((check) => check.issues.length > 0)) throw new ProbeError(`The probe boot control did not begin clean\n${before.map(formatCheck).join("\n")}`, {
+			if (before.some((result) => result.issues.length > 0)) throw new ProbeError(`The probe boot control did not begin clean\n${before.map(formatStageResult).join("\n")}`, {
 				origin: "instrument",
 				code: "malformed"
 			});
 			resolveWorkspaceFile(this.#workspace, relative(this.#workspace, typeDependency), true);
 			overwriteFile(typeDependency, formatSpecification("export type Signal = number\n", revision));
 			const afterType = await this.#inspect(typeClaim.control, typeClaim);
-			const type = afterType.find((check) => check.stage === typeClaim.control.stage);
-			const tolerant = afterType.find((check) => check.stage === "runtime");
-			if (type === void 0 || type.issues.length === 0) throw new ProbeError(`The probe boot type control did not detect a mutated dependency\n${afterType.map(formatCheck).join("\n")}`, {
+			const type = afterType.find((result) => result.stage === typeClaim.control.stage);
+			const tolerant = afterType.find((result) => result.stage === "runtime");
+			if (type === void 0 || type.issues.length === 0) throw new ProbeError(`The probe boot type control did not detect a mutated dependency\n${afterType.map(formatStageResult).join("\n")}`, {
 				origin: "instrument",
 				code: "malformed",
 				context: { stage: typeClaim.control.stage }
 			});
-			if (tolerant === void 0 || tolerant.issues.length > 0) throw new ProbeError(`The probe boot type control did not remain runtime-clean\n${afterType.map(formatCheck).join("\n")}`, {
+			if (tolerant === void 0 || tolerant.issues.length > 0) throw new ProbeError(`The probe boot type control did not remain runtime-clean\n${afterType.map(formatStageResult).join("\n")}`, {
 				origin: "instrument",
 				code: "malformed",
 				context: { stage: "runtime" }
@@ -2795,8 +2803,8 @@ var Probe = class {
 			resolveWorkspaceFile(this.#workspace, relative(this.#workspace, runtimeDependency), true);
 			overwriteFile(runtimeDependency, formatSpecification("export const SIGNAL = 'after'\n", revision));
 			const afterRuntime = await this.#inspect(runtimeClaim.control, runtimeClaim);
-			const runtime = afterRuntime.find((check) => check.stage === runtimeClaim.control.stage);
-			if (runtime === void 0 || runtime.issues.length === 0) throw new ProbeError(`The probe boot runtime control did not detect a mutated dependency\n${afterRuntime.map(formatCheck).join("\n")}`, {
+			const runtime = afterRuntime.find((result) => result.stage === runtimeClaim.control.stage);
+			if (runtime === void 0 || runtime.issues.length === 0) throw new ProbeError(`The probe boot runtime control did not detect a mutated dependency\n${afterRuntime.map(formatStageResult).join("\n")}`, {
 				origin: "instrument",
 				code: "malformed",
 				context: { stage: runtimeClaim.control.stage }
@@ -3251,6 +3259,6 @@ var ProbeServer = class {
 		] : [rendered, minimal]).find((arm) => isBoundedJSON(arm, bounds)) ?? minimal;
 	}
 };
-export { LintStage, Overlay, Probe, ProbeServer, RuntimeStage, TypeStage, buildRevisionPath, captureListeners, collectWorkspaceFiles, computeDigest, createHandshakeError, describeUnknown, escapesRoot, filterUniqueIssues, findRefusedPaths, guardStage, inferDocumentLanguage, inferTestProject, inferTypeProject, isRefusedName, loadWorkspaceVitest, matchesLiveProcess, matchesWorkspaceModule, normalizePath, normalizeValue, overwriteFile, parseProjectConfig, parseRevisionOwner, readFaultCode, readWorkspaceManifest, relativeWorkspaceFile, relativeWorkspaceMessage, releaseListeners, resolveWorkspaceBinary, resolveWorkspaceFile, resolveWorkspaceModule, scanDiagnostics };
+export { LintStage, Overlay, Probe, ProbeServer, RuntimeStage, TypeStage, buildRevisionPath, captureListeners, collectWorkspaceFiles, computeWorkspaceDigest, createHandshakeError, describeUnknown, escapesRoot, filterUniqueIssues, findRefusedPaths, guardStage, inferDocumentLanguage, inferTestProject, inferTypeProject, isRefusedName, loadWorkspaceVitest, matchesLiveProcess, matchesWorkspaceModule, normalizePath, normalizeValue, overwriteFile, parseProjectConfig, parseRevisionOwner, readFaultCode, readWorkspaceManifest, relativeWorkspaceFile, relativeWorkspaceMessage, releaseListeners, resolveWorkspaceBinary, resolveWorkspaceFile, resolveWorkspaceModule, scanDiagnostics };
 
 //# sourceMappingURL=index.js.map