@orkestrel/probe 0.0.27 → 0.0.29

package/dist/src/server/index.cjs

@@ -730,8 +730,12 @@ function matchesLiveProcess(id) {
 * Collects every regular file a target workspace holds, skipping the trees no inspection reads.
 *
 * @remarks
-* Skips a directory named `.git`, `dist`, or `node_modules` at any depth, and the directory
-* {@link TYPE_MIRROR} names, which would otherwise carry this package's own mirror into the walk. A
+* Skips a directory named `.git`, `dist`, or `node_modules` at any depth. Of the workspace-root
+* `tmp` directory it walks only `tmp/probes`: the scaffold tmp layout holds the runtime probes there
+* and nothing else an inspection reads, so a consumer's ignored data under `tmp/` is never read or
+* copied. The match is the lowercase `tmp` spelling exactly, and a `tmp` directory below the root is
+* walked like any other. The directory {@link TYPE_MIRROR} names is skipped as well, so this
+* package's own mirror stays out of the walk if it ever moves outside `tmp`. A
 * directory this host cannot list is skipped rather than raised, so one unreadable directory in a
 * consumer's tree is not a reason to refuse the whole walk. A symbolic link is not carried, whether
 * it names a file or a directory, so a file reached only through one is absent from the result; a
@@ -748,7 +752,9 @@ function matchesLiveProcess(id) {
 function collectWorkspaceFiles(workspace) {
 	const excluded = normalizePath(resolveWorkspaceFile(workspace, _src_core.TYPE_MIRROR));
 	const files = [];
-	const directories = [(0, node_path.resolve)(workspace)];
+	const root = (0, node_path.resolve)(workspace);
+	const scratch = (0, node_path.join)(root, "tmp");
+	const directories = [root];
 	while (directories.length > 0) {
 		const directory = directories.pop();
 		if (directory === void 0) break;
@@ -756,6 +762,7 @@ function collectWorkspaceFiles(workspace) {
 		const entries = reading.success ? reading.value : [];
 		for (const entry of entries) {
 			if (entry.name === ".git" || entry.name === "dist" || entry.name === "node_modules") continue;
+			if (directory === scratch && entry.name !== "probes") continue;
 			const path = (0, node_path.join)(directory, entry.name);
 			if (entry.isDirectory()) {
 				if (normalizePath(path) !== excluded) directories.push(path);
@@ -815,12 +822,12 @@ async function guardStage(stage, operation) {
 *
 * @remarks
 * The published claim schema constrains `Draft.path` to a non-empty string and nothing else, while
-* `isDraft` also refuses an absolute path and one that escapes the workspace. That one member is
-* the whole of the difference between the advertised contract and the enforced one, so a caller
-* refused after satisfying the schema is refused here and nowhere else. The whole input must first
-* satisfy that schema. Each draft is then tested with `isDraft` itself rather than with a second
-* copy of its rule. Reports nothing for a value carrying no draft member, including one refused for
-* a member this contract does not declare.
+* `isDraft` also refuses an absolute path and one that resolves outside the workspace. That one
+* member is the whole of the difference between the advertised contract and the enforced one, so a
+* caller refused after satisfying the schema is refused here and nowhere else. The whole input must
+* first satisfy that schema. Each draft is then tested with `isDraft` itself rather than with a
+* second copy of its rule. Reports nothing for a value carrying no draft member, including one
+* refused for a member this contract does not declare.
 *
 * This function lives in the server helpers rather than in core: core's leaf pair, `helpers.ts` and
 * `validators.ts`, may not consume the shapes module this function reads `CLAIM_SHAPE` from, and
@@ -855,10 +862,11 @@ function findRefusedPaths(value) {
 * `tsc --showConfig` spells a path relative to the project file, so a printed record carries an
 * absolute path only where a project itself declares one. Rewriting a contained absolute path to
 * its relative form keeps one commit checked out at two roots reading to one digest. A path that
-* escapes the workspace is left as it stands, because rewriting it would name a file outside the
-* tree by a relative spelling. Key order is the compiler's own and it differs between the supported
-* majors, so sorting removes a difference that means nothing. A `__proto__` key is dropped, as
-* the earlier assignment-built record dropped it, so a digest stays the same across releases.
+* resolves outside the workspace is left as it stands, because rewriting it would name a file
+* outside the tree by a relative spelling. Key order is the compiler's own and it differs between
+* the supported majors, so sorting removes a difference that means nothing. A `__proto__` key is
+* dropped, as the earlier assignment-built record dropped it, so a digest stays the same across
+* releases.
 *
 * @param workspace - The target workspace root
 * @param value - The value to rewrite
@@ -1094,10 +1102,10 @@ var Overlay = class {
 	}
 };
 // package.json
-var version = "0.0.27";
+var version = "0.0.29";
 var peerDependencies = {
 	"typescript": "^6.0.3 || ^7.0.2",
-	"vitest": "^4.1.12 || ^5.0.5"
+	"vitest": "^4.1.12 || ^5.1.0"
 };
 // src/server/stages/LintStage.ts
 /**
@@ -1346,10 +1354,10 @@ var LintStage = class {
 * Vitest service after 64 specifications rather than deleting from each map that service owns. Any
 * bound holds the retention flat, because the replacement releases everything the instance held,
 * and 64 is the value chosen. The inspection that crosses the bound pays the replacement
-* synchronously: it closes the resident service and warms a new one before it runs. On 2026-08-20,
-* over this package's own workspace on the host `guides/probe.md` § Cost names, two runs of 66
-* inspections put that one at 480 ms and 269 ms against median inspections of 156 ms and 155 ms, so
-* budget one call in 64 at 110 ms to 330 ms above the rest.
+* synchronously: it closes the resident service and warms a fresh service before it runs. On
+* 2026-08-20, over this package's own workspace on the host `guides/probe.md` § Cost names, two
+* runs of 66 inspections put that one at 480 ms and 269 ms against median inspections of 156 ms and
+* 155 ms, so budget one call in 64 at 110 ms to 330 ms above the rest.
 *
 * Every issue this stage emits names its party, and the stage emits an issue for every party
 * `Party` declares. An `origin: 'claimant'` issue is a failure Vitest reported about the candidate.
@@ -2089,8 +2097,8 @@ var TypeStage = class {
 	*
 	* @param project - The workspace-relative TypeScript project to resolve
 	* @returns The resolved workspace-relative path and the digest of its compiler options
-	* @throws When the project escapes the workspace, when the compiler refuses it, or when the
-	* stage has already been destroyed
+	* @throws When the project resolves outside the workspace, when the compiler refuses it, or when
+	* the stage has already been destroyed
 	*/
 	resolve(project) {
 		return guardStage(this.stage, this.#resolve(project));
@@ -3242,7 +3250,7 @@ var ProbeServer = class {
 				text: (0, _src_core.formatReceipt)(record)
 			}]
 		};
-		return ((0, _orkestrel_mcp.isBoundedJSON)(record, bounds) ? [
+		return ((0, _orkestrel_mcp.isBoundedJSON)(record, bounds) && (0, _orkestrel_contract.isRecord)(record) ? [
 			{
 				...rendered,
 				structuredContent: record