@orkestrel/probe 0.0.27 → 0.0.28

package/dist/src/server/index.d.cts

@@ -55,8 +55,12 @@ export declare function captureListeners(emitter: EventEmitter, events: readonly
  * Collects every regular file a target workspace holds, skipping the trees no inspection reads.
  *
  * @remarks
- * Skips a directory named `.git`, `dist`, or `node_modules` at any depth, and the directory
- * {@link TYPE_MIRROR} names, which would otherwise carry this package's own mirror into the walk. A
+ * Skips a directory named `.git`, `dist`, or `node_modules` at any depth. Of the workspace-root
+ * `tmp` directory it walks only `tmp/probes`: the scaffold tmp layout holds the runtime probes there
+ * and nothing else an inspection reads, so a consumer's ignored data under `tmp/` is never read or
+ * copied. The match is the lowercase `tmp` spelling exactly, and a `tmp` directory below the root is
+ * walked like any other. The directory {@link TYPE_MIRROR} names is skipped as well, so this
+ * package's own mirror stays out of the walk if it ever moves outside `tmp`. A
  * directory this host cannot list is skipped rather than raised, so one unreadable directory in a
  * consumer's tree is not a reason to refuse the whole walk. A symbolic link is not carried, whether
  * it names a file or a directory, so a file reached only through one is absent from the result; a
@@ -220,12 +224,12 @@ export declare function filterUniqueIssues(issues: readonly Issue[]): readonly I
  *
  * @remarks
  * The published claim schema constrains `Draft.path` to a non-empty string and nothing else, while
- * `isDraft` also refuses an absolute path and one that escapes the workspace. That one member is
- * the whole of the difference between the advertised contract and the enforced one, so a caller
- * refused after satisfying the schema is refused here and nowhere else. The whole input must first
- * satisfy that schema. Each draft is then tested with `isDraft` itself rather than with a second
- * copy of its rule. Reports nothing for a value carrying no draft member, including one refused for
- * a member this contract does not declare.
+ * `isDraft` also refuses an absolute path and one that resolves outside the workspace. That one
+ * member is the whole of the difference between the advertised contract and the enforced one, so a
+ * caller refused after satisfying the schema is refused here and nowhere else. The whole input must
+ * first satisfy that schema. Each draft is then tested with `isDraft` itself rather than with a
+ * second copy of its rule. Reports nothing for a value carrying no draft member, including one
+ * refused for a member this contract does not declare.
  *
  * This function lives in the server helpers rather than in core: core's leaf pair, `helpers.ts` and
  * `validators.ts`, may not consume the shapes module this function reads `CLAIM_SHAPE` from, and
@@ -582,10 +586,11 @@ export declare function normalizePath(path: string): string;
  * `tsc --showConfig` spells a path relative to the project file, so a printed record carries an
  * absolute path only where a project itself declares one. Rewriting a contained absolute path to
  * its relative form keeps one commit checked out at two roots reading to one digest. A path that
- * escapes the workspace is left as it stands, because rewriting it would name a file outside the
- * tree by a relative spelling. Key order is the compiler's own and it differs between the supported
- * majors, so sorting removes a difference that means nothing. A `__proto__` key is dropped, as
- * the earlier assignment-built record dropped it, so a digest stays the same across releases.
+ * resolves outside the workspace is left as it stands, because rewriting it would name a file
+ * outside the tree by a relative spelling. Key order is the compiler's own and it differs between
+ * the supported majors, so sorting removes a difference that means nothing. A `__proto__` key is
+ * dropped, as the earlier assignment-built record dropped it, so a digest stays the same across
+ * releases.
  *
  * @param workspace - The target workspace root
  * @param value - The value to rewrite
@@ -1279,10 +1284,10 @@ export declare function resolveWorkspaceModule(workspace: string, specifier: str
  * Vitest service after 64 specifications rather than deleting from each map that service owns. Any
  * bound holds the retention flat, because the replacement releases everything the instance held,
  * and 64 is the value chosen. The inspection that crosses the bound pays the replacement
- * synchronously: it closes the resident service and warms a new one before it runs. On 2026-08-20,
- * over this package's own workspace on the host `guides/probe.md` § Cost names, two runs of 66
- * inspections put that one at 480 ms and 269 ms against median inspections of 156 ms and 155 ms, so
- * budget one call in 64 at 110 ms to 330 ms above the rest.
+ * synchronously: it closes the resident service and warms a fresh service before it runs. On
+ * 2026-08-20, over this package's own workspace on the host `guides/probe.md` § Cost names, two
+ * runs of 66 inspections put that one at 480 ms and 269 ms against median inspections of 156 ms and
+ * 155 ms, so budget one call in 64 at 110 ms to 330 ms above the rest.
  *
  * Every issue this stage emits names its party, and the stage emits an issue for every party
  * `Party` declares. An `origin: 'claimant'` issue is a failure Vitest reported about the candidate.
@@ -1528,8 +1533,8 @@ export declare class TypeStage implements TypeStageInterface {
      *
      * @param project - The workspace-relative TypeScript project to resolve
      * @returns The resolved workspace-relative path and the digest of its compiler options
-     * @throws When the project escapes the workspace, when the compiler refuses it, or when the
-     * stage has already been destroyed
+     * @throws When the project resolves outside the workspace, when the compiler refuses it, or when
+     * the stage has already been destroyed
      */
     resolve(project: string): Promise<Project>;
     /**
@@ -1585,8 +1590,8 @@ export declare interface TypeStageInterface extends StageInterface {
      *
      * @param project - The workspace-relative TypeScript project to resolve
      * @returns The resolved workspace-relative path and the digest of its compiler options
-     * @throws When the project escapes the workspace, when the compiler refuses it, or when the
-     * stage has already been destroyed
+     * @throws When the project resolves outside the workspace, when the compiler refuses it, or when
+     * the stage has already been destroyed
      *
      * @example
      * ```ts

package/dist/src/server/index.d.ts

@@ -55,8 +55,12 @@ export declare function captureListeners(emitter: EventEmitter, events: readonly
  * Collects every regular file a target workspace holds, skipping the trees no inspection reads.
  *
  * @remarks
- * Skips a directory named `.git`, `dist`, or `node_modules` at any depth, and the directory
- * {@link TYPE_MIRROR} names, which would otherwise carry this package's own mirror into the walk. A
+ * Skips a directory named `.git`, `dist`, or `node_modules` at any depth. Of the workspace-root
+ * `tmp` directory it walks only `tmp/probes`: the scaffold tmp layout holds the runtime probes there
+ * and nothing else an inspection reads, so a consumer's ignored data under `tmp/` is never read or
+ * copied. The match is the lowercase `tmp` spelling exactly, and a `tmp` directory below the root is
+ * walked like any other. The directory {@link TYPE_MIRROR} names is skipped as well, so this
+ * package's own mirror stays out of the walk if it ever moves outside `tmp`. A
  * directory this host cannot list is skipped rather than raised, so one unreadable directory in a
  * consumer's tree is not a reason to refuse the whole walk. A symbolic link is not carried, whether
  * it names a file or a directory, so a file reached only through one is absent from the result; a
@@ -220,12 +224,12 @@ export declare function filterUniqueIssues(issues: readonly Issue[]): readonly I
  *
  * @remarks
  * The published claim schema constrains `Draft.path` to a non-empty string and nothing else, while
- * `isDraft` also refuses an absolute path and one that escapes the workspace. That one member is
- * the whole of the difference between the advertised contract and the enforced one, so a caller
- * refused after satisfying the schema is refused here and nowhere else. The whole input must first
- * satisfy that schema. Each draft is then tested with `isDraft` itself rather than with a second
- * copy of its rule. Reports nothing for a value carrying no draft member, including one refused for
- * a member this contract does not declare.
+ * `isDraft` also refuses an absolute path and one that resolves outside the workspace. That one
+ * member is the whole of the difference between the advertised contract and the enforced one, so a
+ * caller refused after satisfying the schema is refused here and nowhere else. The whole input must
+ * first satisfy that schema. Each draft is then tested with `isDraft` itself rather than with a
+ * second copy of its rule. Reports nothing for a value carrying no draft member, including one
+ * refused for a member this contract does not declare.
  *
  * This function lives in the server helpers rather than in core: core's leaf pair, `helpers.ts` and
  * `validators.ts`, may not consume the shapes module this function reads `CLAIM_SHAPE` from, and
@@ -582,10 +586,11 @@ export declare function normalizePath(path: string): string;
  * `tsc --showConfig` spells a path relative to the project file, so a printed record carries an
  * absolute path only where a project itself declares one. Rewriting a contained absolute path to
  * its relative form keeps one commit checked out at two roots reading to one digest. A path that
- * escapes the workspace is left as it stands, because rewriting it would name a file outside the
- * tree by a relative spelling. Key order is the compiler's own and it differs between the supported
- * majors, so sorting removes a difference that means nothing. A `__proto__` key is dropped, as
- * the earlier assignment-built record dropped it, so a digest stays the same across releases.
+ * resolves outside the workspace is left as it stands, because rewriting it would name a file
+ * outside the tree by a relative spelling. Key order is the compiler's own and it differs between
+ * the supported majors, so sorting removes a difference that means nothing. A `__proto__` key is
+ * dropped, as the earlier assignment-built record dropped it, so a digest stays the same across
+ * releases.
  *
  * @param workspace - The target workspace root
  * @param value - The value to rewrite
@@ -1279,10 +1284,10 @@ export declare function resolveWorkspaceModule(workspace: string, specifier: str
  * Vitest service after 64 specifications rather than deleting from each map that service owns. Any
  * bound holds the retention flat, because the replacement releases everything the instance held,
  * and 64 is the value chosen. The inspection that crosses the bound pays the replacement
- * synchronously: it closes the resident service and warms a new one before it runs. On 2026-08-20,
- * over this package's own workspace on the host `guides/probe.md` § Cost names, two runs of 66
- * inspections put that one at 480 ms and 269 ms against median inspections of 156 ms and 155 ms, so
- * budget one call in 64 at 110 ms to 330 ms above the rest.
+ * synchronously: it closes the resident service and warms a fresh service before it runs. On
+ * 2026-08-20, over this package's own workspace on the host `guides/probe.md` § Cost names, two
+ * runs of 66 inspections put that one at 480 ms and 269 ms against median inspections of 156 ms and
+ * 155 ms, so budget one call in 64 at 110 ms to 330 ms above the rest.
  *
  * Every issue this stage emits names its party, and the stage emits an issue for every party
  * `Party` declares. An `origin: 'claimant'` issue is a failure Vitest reported about the candidate.
@@ -1528,8 +1533,8 @@ export declare class TypeStage implements TypeStageInterface {
      *
      * @param project - The workspace-relative TypeScript project to resolve
      * @returns The resolved workspace-relative path and the digest of its compiler options
-     * @throws When the project escapes the workspace, when the compiler refuses it, or when the
-     * stage has already been destroyed
+     * @throws When the project resolves outside the workspace, when the compiler refuses it, or when
+     * the stage has already been destroyed
      */
     resolve(project: string): Promise<Project>;
     /**
@@ -1585,8 +1590,8 @@ export declare interface TypeStageInterface extends StageInterface {
      *
      * @param project - The workspace-relative TypeScript project to resolve
      * @returns The resolved workspace-relative path and the digest of its compiler options
-     * @throws When the project escapes the workspace, when the compiler refuses it, or when the
-     * stage has already been destroyed
+     * @throws When the project resolves outside the workspace, when the compiler refuses it, or when
+     * the stage has already been destroyed
      *
      * @example
      * ```ts

package/dist/src/server/index.js

@@ -729,8 +729,12 @@ function matchesLiveProcess(id) {
 * Collects every regular file a target workspace holds, skipping the trees no inspection reads.
 *
 * @remarks
-* Skips a directory named `.git`, `dist`, or `node_modules` at any depth, and the directory
-* {@link TYPE_MIRROR} names, which would otherwise carry this package's own mirror into the walk. A
+* Skips a directory named `.git`, `dist`, or `node_modules` at any depth. Of the workspace-root
+* `tmp` directory it walks only `tmp/probes`: the scaffold tmp layout holds the runtime probes there
+* and nothing else an inspection reads, so a consumer's ignored data under `tmp/` is never read or
+* copied. The match is the lowercase `tmp` spelling exactly, and a `tmp` directory below the root is
+* walked like any other. The directory {@link TYPE_MIRROR} names is skipped as well, so this
+* package's own mirror stays out of the walk if it ever moves outside `tmp`. A
 * directory this host cannot list is skipped rather than raised, so one unreadable directory in a
 * consumer's tree is not a reason to refuse the whole walk. A symbolic link is not carried, whether
 * it names a file or a directory, so a file reached only through one is absent from the result; a
@@ -747,7 +751,9 @@ function matchesLiveProcess(id) {
 function collectWorkspaceFiles(workspace) {
 	const excluded = normalizePath(resolveWorkspaceFile(workspace, TYPE_MIRROR));
 	const files = [];
-	const directories = [resolve(workspace)];
+	const root = resolve(workspace);
+	const scratch = join(root, "tmp");
+	const directories = [root];
 	while (directories.length > 0) {
 		const directory = directories.pop();
 		if (directory === void 0) break;
@@ -755,6 +761,7 @@ function collectWorkspaceFiles(workspace) {
 		const entries = reading.success ? reading.value : [];
 		for (const entry of entries) {
 			if (entry.name === ".git" || entry.name === "dist" || entry.name === "node_modules") continue;
+			if (directory === scratch && entry.name !== "probes") continue;
 			const path = join(directory, entry.name);
 			if (entry.isDirectory()) {
 				if (normalizePath(path) !== excluded) directories.push(path);
@@ -814,12 +821,12 @@ async function guardStage(stage, operation) {
 *
 * @remarks
 * The published claim schema constrains `Draft.path` to a non-empty string and nothing else, while
-* `isDraft` also refuses an absolute path and one that escapes the workspace. That one member is
-* the whole of the difference between the advertised contract and the enforced one, so a caller
-* refused after satisfying the schema is refused here and nowhere else. The whole input must first
-* satisfy that schema. Each draft is then tested with `isDraft` itself rather than with a second
-* copy of its rule. Reports nothing for a value carrying no draft member, including one refused for
-* a member this contract does not declare.
+* `isDraft` also refuses an absolute path and one that resolves outside the workspace. That one
+* member is the whole of the difference between the advertised contract and the enforced one, so a
+* caller refused after satisfying the schema is refused here and nowhere else. The whole input must
+* first satisfy that schema. Each draft is then tested with `isDraft` itself rather than with a
+* second copy of its rule. Reports nothing for a value carrying no draft member, including one
+* refused for a member this contract does not declare.
 *
 * This function lives in the server helpers rather than in core: core's leaf pair, `helpers.ts` and
 * `validators.ts`, may not consume the shapes module this function reads `CLAIM_SHAPE` from, and
@@ -854,10 +861,11 @@ function findRefusedPaths(value) {
 * `tsc --showConfig` spells a path relative to the project file, so a printed record carries an
 * absolute path only where a project itself declares one. Rewriting a contained absolute path to
 * its relative form keeps one commit checked out at two roots reading to one digest. A path that
-* escapes the workspace is left as it stands, because rewriting it would name a file outside the
-* tree by a relative spelling. Key order is the compiler's own and it differs between the supported
-* majors, so sorting removes a difference that means nothing. A `__proto__` key is dropped, as
-* the earlier assignment-built record dropped it, so a digest stays the same across releases.
+* resolves outside the workspace is left as it stands, because rewriting it would name a file
+* outside the tree by a relative spelling. Key order is the compiler's own and it differs between
+* the supported majors, so sorting removes a difference that means nothing. A `__proto__` key is
+* dropped, as the earlier assignment-built record dropped it, so a digest stays the same across
+* releases.
 *
 * @param workspace - The target workspace root
 * @param value - The value to rewrite
@@ -1093,7 +1101,7 @@ var Overlay = class {
 	}
 };
 // package.json
-var version = "0.0.27";
+var version = "0.0.28";
 var peerDependencies = {
 	"typescript": "^6.0.3 || ^7.0.2",
 	"vitest": "^4.1.12 || ^5.0.5"
@@ -1345,10 +1353,10 @@ var LintStage = class {
 * Vitest service after 64 specifications rather than deleting from each map that service owns. Any
 * bound holds the retention flat, because the replacement releases everything the instance held,
 * and 64 is the value chosen. The inspection that crosses the bound pays the replacement
-* synchronously: it closes the resident service and warms a new one before it runs. On 2026-08-20,
-* over this package's own workspace on the host `guides/probe.md` § Cost names, two runs of 66
-* inspections put that one at 480 ms and 269 ms against median inspections of 156 ms and 155 ms, so
-* budget one call in 64 at 110 ms to 330 ms above the rest.
+* synchronously: it closes the resident service and warms a fresh service before it runs. On
+* 2026-08-20, over this package's own workspace on the host `guides/probe.md` § Cost names, two
+* runs of 66 inspections put that one at 480 ms and 269 ms against median inspections of 156 ms and
+* 155 ms, so budget one call in 64 at 110 ms to 330 ms above the rest.
 *
 * Every issue this stage emits names its party, and the stage emits an issue for every party
 * `Party` declares. An `origin: 'claimant'` issue is a failure Vitest reported about the candidate.
@@ -2088,8 +2096,8 @@ var TypeStage = class {
 	*
 	* @param project - The workspace-relative TypeScript project to resolve
 	* @returns The resolved workspace-relative path and the digest of its compiler options
-	* @throws When the project escapes the workspace, when the compiler refuses it, or when the
-	* stage has already been destroyed
+	* @throws When the project resolves outside the workspace, when the compiler refuses it, or when
+	* the stage has already been destroyed
 	*/
 	resolve(project) {
 		return guardStage(this.stage, this.#resolve(project));