@planu/cli 0.90.1 → 0.91.0

package/dist/engine/claude-config-auditor/rules-auditor.js

@@ -1,69 +1,107 @@
-// Planu — .claude/rules/ auditor for SPEC-092
+// Planu — .claude/rules/ auditor for SPEC-092 / SPEC-255
 import { readFile, readdir } from 'node:fs/promises';
 import { homedir } from 'node:os';
 import { join } from 'node:path';
+import { glob } from 'glob';
 const DOCS_REF = 'https://code.claude.com/docs/en/memory#rules';
-async function auditRulesDir(rulesPath, label) {
+async function auditRuleFile(file, rulesPath, projectPath) {
     const findings = [];
+    try {
+        const content = await readFile(join(rulesPath, file), 'utf-8');
+        const firstLines = content.split('\n').slice(0, 5).join('\n');
+        const hasPaths = /^paths:/m.test(firstLines) || /^---[\s\S]*?paths:/m.test(firstLines);
+        if (!hasPaths) {
+            const lc = content.toLowerCase();
+            const isScoped = lc.includes('typescript') ||
+                lc.includes('.test.') ||
+                lc.includes('vitest') ||
+                lc.includes('jest') ||
+                lc.includes('.tsx') ||
+                lc.includes('.jsx');
+            findings.push(isScoped
+                ? {
+                    area: 'rules',
+                    severity: 'warn',
+                    message: `Rule "${file}" has language/test-specific content but no paths: frontmatter`,
+                    suggestion: `Add "paths: src/**/*.ts" or similar frontmatter so it only loads for matching files`,
+                    docsRef: DOCS_REF,
+                }
+                : {
+                    area: 'rules',
+                    severity: 'info',
+                    code: 'RULE_MISSING_PATHS',
+                    message: `Rule "${file}" has no paths: frontmatter — it loads for every file`,
+                    suggestion: 'Add paths: frontmatter (e.g., "paths: src/**/*.ts") to scope when this rule loads',
+                    docsRef: DOCS_REF,
+                });
+        }
+        else if (projectPath !== undefined) {
+            const pathsMatch = /^---[\s\S]*?^paths:\s*(.+)$/m.exec(content);
+            if (pathsMatch) {
+                const patterns = (pathsMatch[1]?.trim() ?? '')
+                    .split(',')
+                    .map((p) => p.trim())
+                    .filter((p) => p.length > 0);
+                for (const pattern of patterns) {
+                    try {
+                        const matches = await glob(pattern, { cwd: projectPath });
+                        if (matches.length === 0) {
+                            findings.push({
+                                area: 'rules',
+                                severity: 'info',
+                                code: 'RULE_DEAD_PATH',
+                                message: `Rule "${file}" has paths: "${pattern}" but no files match in project`,
+                                suggestion: 'Update the paths: pattern to match existing files, or remove the rule if obsolete',
+                                docsRef: DOCS_REF,
+                            });
+                        }
+                    }
+                    catch {
+                        /* invalid glob — skip */
+                    }
+                }
+            }
+        }
+    }
+    catch {
+        /* unreadable file — skip */
+    }
+    return findings;
+}
+async function auditRulesDir(rulesPath, label, projectPath) {
     let files;
     try {
         const entries = await readdir(rulesPath);
         files = entries.filter((f) => f.endsWith('.md'));
     }
     catch {
-        findings.push({
-            area: 'rules',
-            severity: 'info',
-            message: `${label} directory does not exist`,
-            suggestion: 'Create .claude/rules/ with scoped rule files to keep CLAUDE.md lean',
-            docsRef: DOCS_REF,
-        });
-        return findings;
+        return [
+            {
+                area: 'rules',
+                severity: 'info',
+                message: `${label} directory does not exist`,
+                suggestion: 'Create .claude/rules/ with scoped rule files to keep CLAUDE.md lean',
+                docsRef: DOCS_REF,
+            },
+        ];
     }
     if (files.length === 0) {
-        findings.push({
-            area: 'rules',
-            severity: 'info',
-            message: `${label} directory exists but has no .md files`,
-            suggestion: 'Add rule files with paths: frontmatter for context-aware loading',
-            docsRef: DOCS_REF,
-        });
-        return findings;
-    }
-    for (const file of files) {
-        try {
-            const content = await readFile(join(rulesPath, file), 'utf-8');
-            const firstLines = content.split('\n').slice(0, 5).join('\n');
-            const hasPaths = /^paths:/m.test(firstLines) || /^---[\s\S]*?paths:/m.test(firstLines);
-            if (!hasPaths) {
-                // Check if file has TypeScript/test-specific content that should be scoped
-                const lowerContent = content.toLowerCase();
-                const isScoped = lowerContent.includes('typescript') ||
-                    lowerContent.includes('.test.') ||
-                    lowerContent.includes('vitest') ||
-                    lowerContent.includes('jest') ||
-                    lowerContent.includes('.tsx') ||
-                    lowerContent.includes('.jsx');
-                if (isScoped) {
-                    findings.push({
-                        area: 'rules',
-                        severity: 'warn',
-                        message: `Rule "${file}" has language/test-specific content but no paths: frontmatter`,
-                        suggestion: `Add "paths: src/**/*.ts" or similar frontmatter so it only loads for matching files`,
-                        docsRef: DOCS_REF,
-                    });
-                }
-            }
-        }
-        catch {
-            // Skip unreadable files
-        }
+        return [
+            {
+                area: 'rules',
+                severity: 'info',
+                message: `${label} directory exists but has no .md files`,
+                suggestion: 'Add rule files with paths: frontmatter for context-aware loading',
+                docsRef: DOCS_REF,
+            },
+        ];
     }
-    return findings;
+    const results = await Promise.all(files.map((f) => auditRuleFile(f, rulesPath, projectPath)));
+    return results.flat();
 }
 export async function auditRules(projectPath, includeGlobal) {
     const findings = [];
-    findings.push(...(await auditRulesDir(join(projectPath, '.claude', 'rules'), 'Project .claude/rules/')));
+    findings.push(...(await auditRulesDir(join(projectPath, '.claude', 'rules'), 'Project .claude/rules/', projectPath)));
     if (includeGlobal) {
         findings.push(...(await auditRulesDir(join(homedir(), '.claude', 'rules'), 'Global ~/.claude/rules/')));
     }

package/dist/engine/claude-config-auditor/rules-auditor.js.map

@@ -1 +1 @@
-{"version":3,"file":"rules-auditor.js","sourceRoot":"","sources":["../../../src/engine/claude-config-auditor/rules-auditor.ts"],"names":[],"mappings":"AAAA,8CAA8C;AAC9C,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,kBAAkB,CAAC;AACrD,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAIjC,MAAM,QAAQ,GAAG,8CAA8C,CAAC;AAEhE,KAAK,UAAU,aAAa,CAAC,SAAiB,EAAE,KAAa;IAC3D,MAAM,QAAQ,GAAoB,EAAE,CAAC;IAErC,IAAI,KAAe,CAAC;IACpB,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,SAAS,CAAC,CAAC;QACzC,KAAK,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC;IACnD,CAAC;IAAC,MAAM,CAAC;QACP,QAAQ,CAAC,IAAI,CAAC;YACZ,IAAI,EAAE,OAAO;YACb,QAAQ,EAAE,MAAM;YAChB,OAAO,EAAE,GAAG,KAAK,2BAA2B;YAC5C,UAAU,EAAE,qEAAqE;YACjF,OAAO,EAAE,QAAQ;SAClB,CAAC,CAAC;QACH,OAAO,QAAQ,CAAC;IAClB,CAAC;IAED,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACvB,QAAQ,CAAC,IAAI,CAAC;YACZ,IAAI,EAAE,OAAO;YACb,QAAQ,EAAE,MAAM;YAChB,OAAO,EAAE,GAAG,KAAK,wCAAwC;YACzD,UAAU,EAAE,kEAAkE;YAC9E,OAAO,EAAE,QAAQ;SAClB,CAAC,CAAC;QACH,OAAO,QAAQ,CAAC;IAClB,CAAC;IAED,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,EAAE,OAAO,CAAC,CAAC;YAC/D,MAAM,UAAU,GAAG,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAC9D,MAAM,QAAQ,GAAG,UAAU,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,qBAAqB,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;YAEvF,IAAI,CAAC,QAAQ,EAAE,CAAC;gBACd,2EAA2E;gBAC3E,MAAM,YAAY,GAAG,OAAO,CAAC,WAAW,EAAE,CAAC;gBAC3C,MAAM,QAAQ,GACZ,YAAY,CAAC,QAAQ,CAAC,YAAY,CAAC;oBACnC,YAAY,CAAC,QAAQ,CAAC,QAAQ,CAAC;oBAC/B,YAAY,CAAC,QAAQ,CAAC,QAAQ,CAAC;oBAC/B,YAAY,CAAC,QAAQ,CAAC,MAAM,CAAC;oBAC7B,YAAY,CAAC,QAAQ,CAAC,MAAM,CAAC;oBAC7B,YAAY,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;gBAEhC,IAAI,QAAQ,EAAE,CAAC;oBACb,QAAQ,CAAC,IAAI,CAAC;wBACZ,IAAI,EAAE,OAAO;wBACb,QAAQ,EAAE,MAAM;wBAChB,OAAO,EAAE,SAAS,IAAI,gEAAgE;wBACtF,UAAU,EAAE,qFAAqF;wBACjG,OAAO,EAAE,QAAQ;qBAClB,CAAC,CAAC;gBACL,CAAC;YACH,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,wBAAwB;QAC1B,CAAC;IACH,CAAC;IAED,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,UAAU,CAC9B,WAAmB,EACnB,aAAsB;IAEtB,MAAM,QAAQ,GAAoB,EAAE,CAAC;IAErC,QAAQ,CAAC,IAAI,CACX,GAAG,CAAC,MAAM,aAAa,CAAC,IAAI,CAAC,WAAW,EAAE,SAAS,EAAE,OAAO,CAAC,EAAE,wBAAwB,CAAC,CAAC,CAC1F,CAAC;IAEF,IAAI,aAAa,EAAE,CAAC;QAClB,QAAQ,CAAC,IAAI,CACX,GAAG,CAAC,MAAM,aAAa,CAAC,IAAI,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,OAAO,CAAC,EAAE,yBAAyB,CAAC,CAAC,CACzF,CAAC;IACJ,CAAC;IAED,OAAO,QAAQ,CAAC;AAClB,CAAC"}
+{"version":3,"file":"rules-auditor.js","sourceRoot":"","sources":["../../../src/engine/claude-config-auditor/rules-auditor.ts"],"names":[],"mappings":"AAAA,yDAAyD;AACzD,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,kBAAkB,CAAC;AACrD,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAEjC,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAI5B,MAAM,QAAQ,GAAG,8CAA8C,CAAC;AAEhE,KAAK,UAAU,aAAa,CAC1B,IAAY,EACZ,SAAiB,EACjB,WAAoB;IAEpB,MAAM,QAAQ,GAAoB,EAAE,CAAC;IACrC,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,EAAE,OAAO,CAAC,CAAC;QAC/D,MAAM,UAAU,GAAG,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC9D,MAAM,QAAQ,GAAG,UAAU,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,qBAAqB,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QACvF,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,MAAM,EAAE,GAAG,OAAO,CAAC,WAAW,EAAE,CAAC;YACjC,MAAM,QAAQ,GACZ,EAAE,CAAC,QAAQ,CAAC,YAAY,CAAC;gBACzB,EAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC;gBACrB,EAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC;gBACrB,EAAE,CAAC,QAAQ,CAAC,MAAM,CAAC;gBACnB,EAAE,CAAC,QAAQ,CAAC,MAAM,CAAC;gBACnB,EAAE,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;YACtB,QAAQ,CAAC,IAAI,CACX,QAAQ;gBACN,CAAC,CAAC;oBACE,IAAI,EAAE,OAAO;oBACb,QAAQ,EAAE,MAAM;oBAChB,OAAO,EAAE,SAAS,IAAI,gEAAgE;oBACtF,UAAU,EAAE,qFAAqF;oBACjG,OAAO,EAAE,QAAQ;iBAClB;gBACH,CAAC,CAAC;oBACE,IAAI,EAAE,OAAO;oBACb,QAAQ,EAAE,MAAM;oBAChB,IAAI,EAAE,oBAAoB;oBAC1B,OAAO,EAAE,SAAS,IAAI,uDAAuD;oBAC7E,UAAU,EACR,mFAAmF;oBACrF,OAAO,EAAE,QAAQ;iBAClB,CACN,CAAC;QACJ,CAAC;aAAM,IAAI,WAAW,KAAK,SAAS,EAAE,CAAC;YACrC,MAAM,UAAU,GAAG,8BAA8B,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YAChE,IAAI,UAAU,EAAE,CAAC;gBACf,MAAM,QAAQ,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;qBAC3C,KAAK,CAAC,GAAG,CAAC;qBACV,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;qBACpB,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;gBAC/B,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;oBAC/B,IAAI,CAAC;wBACH,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,OAAO,EAAE,EAAE,GAAG,EAAE,WAAW,EAAE,CAAC,CAAC;wBAC1D,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;4BACzB,QAAQ,CAAC,IAAI,CAAC;gCACZ,IAAI,EAAE,OAAO;gCACb,QAAQ,EAAE,MAAM;gCAChB,IAAI,EAAE,gBAAgB;gCACtB,OAAO,EAAE,SAAS,IAAI,iBAAiB,OAAO,iCAAiC;gCAC/E,UAAU,EACR,mFAAmF;gCACrF,OAAO,EAAE,QAAQ;6BAClB,CAAC,CAAC;wBACL,CAAC;oBACH,CAAC;oBAAC,MAAM,CAAC;wBACP,yBAAyB;oBAC3B,CAAC;gBACH,CAAC;YACH,CAAC;QACH,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,4BAA4B;IAC9B,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,KAAK,UAAU,aAAa,CAC1B,SAAiB,EACjB,KAAa,EACb,WAAoB;IAEpB,IAAI,KAAe,CAAC;IACpB,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,SAAS,CAAC,CAAC;QACzC,KAAK,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC;IACnD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO;YACL;gBACE,IAAI,EAAE,OAAO;gBACb,QAAQ,EAAE,MAAM;gBAChB,OAAO,EAAE,GAAG,KAAK,2BAA2B;gBAC5C,UAAU,EAAE,qEAAqE;gBACjF,OAAO,EAAE,QAAQ;aAClB;SACF,CAAC;IACJ,CAAC;IACD,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACvB,OAAO;YACL;gBACE,IAAI,EAAE,OAAO;gBACb,QAAQ,EAAE,MAAM;gBAChB,OAAO,EAAE,GAAG,KAAK,wCAAwC;gBACzD,UAAU,EAAE,kEAAkE;gBAC9E,OAAO,EAAE,QAAQ;aAClB;SACF,CAAC;IACJ,CAAC;IACD,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,aAAa,CAAC,CAAC,EAAE,SAAS,EAAE,WAAW,CAAC,CAAC,CAAC,CAAC;IAC9F,OAAO,OAAO,CAAC,IAAI,EAAE,CAAC;AACxB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,UAAU,CAC9B,WAAmB,EACnB,aAAsB;IAEtB,MAAM,QAAQ,GAAoB,EAAE,CAAC;IAErC,QAAQ,CAAC,IAAI,CACX,GAAG,CAAC,MAAM,aAAa,CACrB,IAAI,CAAC,WAAW,EAAE,SAAS,EAAE,OAAO,CAAC,EACrC,wBAAwB,EACxB,WAAW,CACZ,CAAC,CACH,CAAC;IAEF,IAAI,aAAa,EAAE,CAAC;QAClB,QAAQ,CAAC,IAAI,CACX,GAAG,CAAC,MAAM,aAAa,CAAC,IAAI,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,OAAO,CAAC,EAAE,yBAAyB,CAAC,CAAC,CACzF,CAAC;IACJ,CAAC;IAED,OAAO,QAAQ,CAAC;AAClB,CAAC"}

package/dist/engine/claude-config-auditor/scoring.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"scoring.d.ts","sourceRoot":"","sources":["../../../src/engine/claude-config-auditor/scoring.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AAQ1D,wBAAgB,cAAc,CAAC,QAAQ,EAAE,aAAa,EAAE,GAAG;IAAE,KAAK,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,CAuB1F;AAED,wBAAgB,aAAa,CAAC,QAAQ,EAAE,aAAa,EAAE,GAAG,aAAa,EAAE,CAexE"}
+{"version":3,"file":"scoring.d.ts","sourceRoot":"","sources":["../../../src/engine/claude-config-auditor/scoring.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AA2B1D,wBAAgB,cAAc,CAAC,QAAQ,EAAE,aAAa,EAAE,GAAG;IAAE,KAAK,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,CA2C1F;AAED,wBAAgB,aAAa,CAAC,QAAQ,EAAE,aAAa,EAAE,GAAG,aAAa,EAAE,CAexE"}

package/dist/engine/claude-config-auditor/scoring.js

@@ -3,10 +3,46 @@ const SEVERITY_PENALTY = {
     warn: 8,
     info: 2,
 };
+// SPEC-255: code-specific penalties (override severity penalty)
+const CODE_PENALTY = {
+    LINE_COUNT_CRITICAL: 25,
+    LINE_COUNT_WARN: 10,
+    AUTO_MODE_ENV_MISSING: 8,
+    BYPASS_PERMISSIONS_NO_ISOLATION: 20,
+};
+// SPEC-255: codes with per-finding deduction and total cap
+const CODE_PER_FINDING = {
+    REDUNDANT_INSTRUCTION: 3,
+    AMBIGUOUS_INSTRUCTION: 2,
+};
+const CODE_MAX_TOTAL = {
+    REDUNDANT_INSTRUCTION: 15,
+    AMBIGUOUS_INSTRUCTION: 10,
+};
 export function calculateScore(findings) {
     let score = 100;
+    // Track accumulated deductions for capped codes
+    const codeAccumulated = {};
     for (const f of findings) {
-        score -= SEVERITY_PENALTY[f.severity] ?? 0;
+        const code = f.code;
+        if (code !== undefined && CODE_PENALTY[code] !== undefined) {
+            // Use code-specific flat penalty instead of severity penalty
+            score -= CODE_PENALTY[code] ?? 0;
+        }
+        else if (code !== undefined && CODE_PER_FINDING[code] !== undefined) {
+            // Per-finding deduction with a total cap
+            const perFinding = CODE_PER_FINDING[code] ?? 0;
+            const maxTotal = CODE_MAX_TOTAL[code] ?? Infinity;
+            const accumulated = codeAccumulated[code] ?? 0;
+            const actual = Math.min(perFinding, maxTotal - accumulated);
+            if (actual > 0) {
+                score -= actual;
+                codeAccumulated[code] = accumulated + actual;
+            }
+        }
+        else {
+            score -= SEVERITY_PENALTY[f.severity] ?? 0;
+        }
     }
     score = Math.max(0, score);
     let grade;

package/dist/engine/claude-config-auditor/scoring.js.map

@@ -1 +1 @@
-{"version":3,"file":"scoring.js","sourceRoot":"","sources":["../../../src/engine/claude-config-auditor/scoring.ts"],"names":[],"mappings":"AAGA,MAAM,gBAAgB,GAA2B;IAC/C,QAAQ,EAAE,EAAE;IACZ,IAAI,EAAE,CAAC;IACP,IAAI,EAAE,CAAC;CACR,CAAC;AAEF,MAAM,UAAU,cAAc,CAAC,QAAyB;IACtD,IAAI,KAAK,GAAG,GAAG,CAAC;IAEhB,KAAK,MAAM,CAAC,IAAI,QAAQ,EAAE,CAAC;QACzB,KAAK,IAAI,gBAAgB,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;IAC7C,CAAC;IAED,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC;IAE3B,IAAI,KAAa,CAAC;IAClB,IAAI,KAAK,IAAI,EAAE,EAAE,CAAC;QAChB,KAAK,GAAG,GAAG,CAAC;IACd,CAAC;SAAM,IAAI,KAAK,IAAI,EAAE,EAAE,CAAC;QACvB,KAAK,GAAG,GAAG,CAAC;IACd,CAAC;SAAM,IAAI,KAAK,IAAI,EAAE,EAAE,CAAC;QACvB,KAAK,GAAG,GAAG,CAAC;IACd,CAAC;SAAM,IAAI,KAAK,IAAI,EAAE,EAAE,CAAC;QACvB,KAAK,GAAG,GAAG,CAAC;IACd,CAAC;SAAM,CAAC;QACN,KAAK,GAAG,GAAG,CAAC;IACd,CAAC;IAED,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC;AAC1B,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,QAAyB;IACrD,MAAM,UAAU,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,UAAU,IAAI,CAAC,CAAC,QAAQ,KAAK,MAAM,CAAC,CAAC;IAE9F,MAAM,aAAa,GAA2B,EAAE,QAAQ,EAAE,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC;IAEvE,MAAM,MAAM,GAAG,CAAC,GAAG,UAAU,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE;QAC3C,MAAM,EAAE,GAAG,aAAa,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;QAC1C,MAAM,EAAE,GAAG,aAAa,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;QAC1C,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC;YACd,OAAO,EAAE,GAAG,EAAE,CAAC;QACjB,CAAC;QACD,OAAO,CAAC,CAAC,UAAU,CAAC,MAAM,GAAG,CAAC,CAAC,UAAU,CAAC,MAAM,CAAC;IACnD,CAAC,CAAC,CAAC;IAEH,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;AAC5B,CAAC"}
+{"version":3,"file":"scoring.js","sourceRoot":"","sources":["../../../src/engine/claude-config-auditor/scoring.ts"],"names":[],"mappings":"AAGA,MAAM,gBAAgB,GAA2B;IAC/C,QAAQ,EAAE,EAAE;IACZ,IAAI,EAAE,CAAC;IACP,IAAI,EAAE,CAAC;CACR,CAAC;AAEF,gEAAgE;AAChE,MAAM,YAAY,GAA2B;IAC3C,mBAAmB,EAAE,EAAE;IACvB,eAAe,EAAE,EAAE;IACnB,qBAAqB,EAAE,CAAC;IACxB,+BAA+B,EAAE,EAAE;CACpC,CAAC;AAEF,2DAA2D;AAC3D,MAAM,gBAAgB,GAA2B;IAC/C,qBAAqB,EAAE,CAAC;IACxB,qBAAqB,EAAE,CAAC;CACzB,CAAC;AAEF,MAAM,cAAc,GAA2B;IAC7C,qBAAqB,EAAE,EAAE;IACzB,qBAAqB,EAAE,EAAE;CAC1B,CAAC;AAEF,MAAM,UAAU,cAAc,CAAC,QAAyB;IACtD,IAAI,KAAK,GAAG,GAAG,CAAC;IAEhB,gDAAgD;IAChD,MAAM,eAAe,GAA2B,EAAE,CAAC;IAEnD,KAAK,MAAM,CAAC,IAAI,QAAQ,EAAE,CAAC;QACzB,MAAM,IAAI,GAAG,CAAC,CAAC,IAAI,CAAC;QAEpB,IAAI,IAAI,KAAK,SAAS,IAAI,YAAY,CAAC,IAAI,CAAC,KAAK,SAAS,EAAE,CAAC;YAC3D,6DAA6D;YAC7D,KAAK,IAAI,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACnC,CAAC;aAAM,IAAI,IAAI,KAAK,SAAS,IAAI,gBAAgB,CAAC,IAAI,CAAC,KAAK,SAAS,EAAE,CAAC;YACtE,yCAAyC;YACzC,MAAM,UAAU,GAAG,gBAAgB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAC/C,MAAM,QAAQ,GAAG,cAAc,CAAC,IAAI,CAAC,IAAI,QAAQ,CAAC;YAClD,MAAM,WAAW,GAAG,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAC/C,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC,UAAU,EAAE,QAAQ,GAAG,WAAW,CAAC,CAAC;YAC5D,IAAI,MAAM,GAAG,CAAC,EAAE,CAAC;gBACf,KAAK,IAAI,MAAM,CAAC;gBAChB,eAAe,CAAC,IAAI,CAAC,GAAG,WAAW,GAAG,MAAM,CAAC;YAC/C,CAAC;QACH,CAAC;aAAM,CAAC;YACN,KAAK,IAAI,gBAAgB,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;QAC7C,CAAC;IACH,CAAC;IAED,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC;IAE3B,IAAI,KAAa,CAAC;IAClB,IAAI,KAAK,IAAI,EAAE,EAAE,CAAC;QAChB,KAAK,GAAG,GAAG,CAAC;IACd,CAAC;SAAM,IAAI,KAAK,IAAI,EAAE,EAAE,CAAC;QACvB,KAAK,GAAG,GAAG,CAAC;IACd,CAAC;SAAM,IAAI,KAAK,IAAI,EAAE,EAAE,CAAC;QACvB,KAAK,GAAG,GAAG,CAAC;IACd,CAAC;SAAM,IAAI,KAAK,IAAI,EAAE,EAAE,CAAC;QACvB,KAAK,GAAG,GAAG,CAAC;IACd,CAAC;SAAM,CAAC;QACN,KAAK,GAAG,GAAG,CAAC;IACd,CAAC;IAED,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC;AAC1B,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,QAAyB;IACrD,MAAM,UAAU,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,UAAU,IAAI,CAAC,CAAC,QAAQ,KAAK,MAAM,CAAC,CAAC;IAE9F,MAAM,aAAa,GAA2B,EAAE,QAAQ,EAAE,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC;IAEvE,MAAM,MAAM,GAAG,CAAC,GAAG,UAAU,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE;QAC3C,MAAM,EAAE,GAAG,aAAa,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;QAC1C,MAAM,EAAE,GAAG,aAAa,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;QAC1C,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC;YACd,OAAO,EAAE,GAAG,EAAE,CAAC;QACjB,CAAC;QACD,OAAO,CAAC,CAAC,UAAU,CAAC,MAAM,GAAG,CAAC,CAAC,UAAU,CAAC,MAAM,CAAC;IACnD,CAAC,CAAC,CAAC;IAEH,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;AAC5B,CAAC"}

package/dist/engine/claude-config-auditor/settings-auditor.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"settings-auditor.d.ts","sourceRoot":"","sources":["../../../src/engine/claude-config-auditor/settings-auditor.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,aAAa,EAAgB,MAAM,sBAAsB,CAAC;AAsBxE,wBAAsB,aAAa,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,aAAa,EAAE,CAAC,CAyEjF"}
+{"version":3,"file":"settings-auditor.d.ts","sourceRoot":"","sources":["../../../src/engine/claude-config-auditor/settings-auditor.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,aAAa,EAAgB,MAAM,sBAAsB,CAAC;AA2ExE,wBAAsB,aAAa,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,aAAa,EAAE,CAAC,CAgCjF"}

package/dist/engine/claude-config-auditor/settings-auditor.js

@@ -20,50 +20,67 @@ async function pathExists(p) {
         return false;
     }
 }
-export async function auditSettings(projectPath) {
+function auditSingleSettings(data, label) {
     const findings = [];
-    const settingsPath = join(projectPath, '.claude', 'settings.json');
-    const localSettingsPath = join(projectPath, '.claude', 'settings.local.json');
-    // Check main settings
-    const settings = await readSettings(settingsPath);
-    const localSettings = await readSettings(localSettingsPath);
-    const allSettings = [
-        { data: settings, label: 'settings.json' },
-        { data: localSettings, label: 'settings.local.json' },
-    ];
-    for (const { data, label } of allSettings) {
-        if (!data) {
-            continue;
-        }
-        // Check for obsolete permission patterns
-        const allowList = data.permissions?.allow ?? [];
-        const obsoletePatterns = ['mcp__specforge__', 'mcp__sdd__'];
-        for (const pattern of obsoletePatterns) {
-            const obsolete = allowList.filter((p) => p.includes(pattern));
-            if (obsolete.length > 0) {
-                findings.push({
-                    area: 'settings',
-                    severity: 'warn',
-                    message: `${label} has ${String(obsolete.length)} obsolete permission(s) matching "${pattern}"`,
-                    suggestion: `Remove obsolete entries from permissions.allow: ${obsolete.join(', ')}`,
-                    docsRef: DOCS_REF,
-                });
-            }
-        }
-        // Check autoMemoryEnabled
-        if (data.autoMemoryEnabled === false) {
+    const allowList = data.permissions?.allow ?? [];
+    for (const pattern of ['mcp__specforge__', 'mcp__sdd__']) {
+        const obsolete = allowList.filter((p) => p.includes(pattern));
+        if (obsolete.length > 0) {
             findings.push({
                 area: 'settings',
-                severity: 'info',
-                message: `${label} has autoMemoryEnabled: false — auto-memory is disabled`,
-                suggestion: 'Consider enabling auto-memory for cross-session learning',
+                severity: 'warn',
+                message: `${label} has ${String(obsolete.length)} obsolete permission(s) matching "${pattern}"`,
+                suggestion: `Remove obsolete entries from permissions.allow: ${obsolete.join(', ')}`,
                 docsRef: DOCS_REF,
             });
         }
     }
-    // Check for skills directory
-    const skillsDir = join(projectPath, '.claude', 'skills');
-    if (!(await pathExists(skillsDir))) {
+    if (data.autoMemoryEnabled === false) {
+        findings.push({
+            area: 'settings',
+            severity: 'info',
+            message: `${label} has autoMemoryEnabled: false — auto-memory is disabled`,
+            suggestion: 'Consider enabling auto-memory for cross-session learning',
+            docsRef: DOCS_REF,
+        });
+    }
+    const defaultMode = data.permissions?.defaultMode;
+    if ((defaultMode === 'auto' || defaultMode === 'acceptEdits') &&
+        data.autoMode?.environment === undefined) {
+        findings.push({
+            area: 'settings',
+            severity: 'warn',
+            code: 'AUTO_MODE_ENV_MISSING',
+            message: `${label} has permissions.defaultMode="${defaultMode}" but no autoMode.environment configured`,
+            suggestion: 'Configure autoMode.environment (e.g., "docker", "vm") to define trusted repos/buckets for auto-mode',
+            docsRef: DOCS_REF,
+        });
+    }
+    if (defaultMode === 'bypassPermissions') {
+        findings.push({
+            area: 'settings',
+            severity: 'critical',
+            code: 'BYPASS_PERMISSIONS_NO_ISOLATION',
+            message: `${label} has permissions.defaultMode="bypassPermissions" — all permission checks are disabled`,
+            suggestion: 'Only use bypassPermissions inside isolated containers or VMs. Remove from developer workstations.',
+            docsRef: DOCS_REF,
+        });
+    }
+    return findings;
+}
+export async function auditSettings(projectPath) {
+    const findings = [];
+    const pairs = [
+        { path: join(projectPath, '.claude', 'settings.json'), label: 'settings.json' },
+        { path: join(projectPath, '.claude', 'settings.local.json'), label: 'settings.local.json' },
+    ];
+    for (const { path: p, label } of pairs) {
+        const data = await readSettings(p);
+        if (data) {
+            findings.push(...auditSingleSettings(data, label));
+        }
+    }
+    if (!(await pathExists(join(projectPath, '.claude', 'skills')))) {
         findings.push({
             area: 'settings',
             severity: 'info',
@@ -72,9 +89,7 @@ export async function auditSettings(projectPath) {
             docsRef: DOCS_REF,
         });
     }
-    // Check for hooks configuration
-    const hooksDir = join(projectPath, '.claude', 'hooks');
-    if (!(await pathExists(hooksDir))) {
+    if (!(await pathExists(join(projectPath, '.claude', 'hooks')))) {
         findings.push({
             area: 'settings',
             severity: 'info',

package/dist/engine/claude-config-auditor/settings-auditor.js.map

@@ -1 +1 @@
-{"version":3,"file":"settings-auditor.js","sourceRoot":"","sources":["../../../src/engine/claude-config-auditor/settings-auditor.ts"],"names":[],"mappings":"AAAA,uDAAuD;AACvD,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,kBAAkB,CAAC;AACpD,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAIjC,MAAM,QAAQ,GAAG,0CAA0C,CAAC;AAE5D,KAAK,UAAU,YAAY,CAAC,QAAgB;IAC1C,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;QAClD,OAAO,IAAI,CAAC,KAAK,CAAC,OAAO,CAAiB,CAAC;IAC7C,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,KAAK,UAAU,UAAU,CAAC,CAAS;IACjC,IAAI,CAAC;QACH,MAAM,MAAM,CAAC,CAAC,CAAC,CAAC;QAChB,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,WAAmB;IACrD,MAAM,QAAQ,GAAoB,EAAE,CAAC;IACrC,MAAM,YAAY,GAAG,IAAI,CAAC,WAAW,EAAE,SAAS,EAAE,eAAe,CAAC,CAAC;IACnE,MAAM,iBAAiB,GAAG,IAAI,CAAC,WAAW,EAAE,SAAS,EAAE,qBAAqB,CAAC,CAAC;IAE9E,sBAAsB;IACtB,MAAM,QAAQ,GAAG,MAAM,YAAY,CAAC,YAAY,CAAC,CAAC;IAClD,MAAM,aAAa,GAAG,MAAM,YAAY,CAAC,iBAAiB,CAAC,CAAC;IAE5D,MAAM,WAAW,GAAG;QAClB,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,eAAe,EAAE;QAC1C,EAAE,IAAI,EAAE,aAAa,EAAE,KAAK,EAAE,qBAAqB,EAAE;KACtD,CAAC;IAEF,KAAK,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,WAAW,EAAE,CAAC;QAC1C,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,SAAS;QACX,CAAC;QAED,yCAAyC;QACzC,MAAM,SAAS,GAAG,IAAI,CAAC,WAAW,EAAE,KAAK,IAAI,EAAE,CAAC;QAChD,MAAM,gBAAgB,GAAG,CAAC,kBAAkB,EAAE,YAAY,CAAC,CAAC;QAC5D,KAAK,MAAM,OAAO,IAAI,gBAAgB,EAAE,CAAC;YACvC,MAAM,QAAQ,GAAG,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC;YAC9D,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACxB,QAAQ,CAAC,IAAI,CAAC;oBACZ,IAAI,EAAE,UAAU;oBAChB,QAAQ,EAAE,MAAM;oBAChB,OAAO,EAAE,GAAG,KAAK,QAAQ,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,qCAAqC,OAAO,GAAG;oBAC/F,UAAU,EAAE,mDAAmD,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;oBACpF,OAAO,EAAE,QAAQ;iBAClB,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QAED,0BAA0B;QAC1B,IAAI,IAAI,CAAC,iBAAiB,KAAK,KAAK,EAAE,CAAC;YACrC,QAAQ,CAAC,IAAI,CAAC;gBACZ,IAAI,EAAE,UAAU;gBAChB,QAAQ,EAAE,MAAM;gBAChB,OAAO,EAAE,GAAG,KAAK,yDAAyD;gBAC1E,UAAU,EAAE,0DAA0D;gBACtE,OAAO,EAAE,QAAQ;aAClB,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,6BAA6B;IAC7B,MAAM,SAAS,GAAG,IAAI,CAAC,WAAW,EAAE,SAAS,EAAE,QAAQ,CAAC,CAAC;IACzD,IAAI,CAAC,CAAC,MAAM,UAAU,CAAC,SAAS,CAAC,CAAC,EAAE,CAAC;QACnC,QAAQ,CAAC,IAAI,CAAC;YACZ,IAAI,EAAE,UAAU;YAChB,QAAQ,EAAE,MAAM;YAChB,OAAO,EAAE,oCAAoC;YAC7C,UAAU,EAAE,iFAAiF;YAC7F,OAAO,EAAE,QAAQ;SAClB,CAAC,CAAC;IACL,CAAC;IAED,gCAAgC;IAChC,MAAM,QAAQ,GAAG,IAAI,CAAC,WAAW,EAAE,SAAS,EAAE,OAAO,CAAC,CAAC;IACvD,IAAI,CAAC,CAAC,MAAM,UAAU,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC;QAClC,QAAQ,CAAC,IAAI,CAAC;YACZ,IAAI,EAAE,UAAU;YAChB,QAAQ,EAAE,MAAM;YAChB,OAAO,EAAE,mCAAmC;YAC5C,UAAU,EACR,oFAAoF;YACtF,OAAO,EAAE,QAAQ;SAClB,CAAC,CAAC;IACL,CAAC;IAED,OAAO,QAAQ,CAAC;AAClB,CAAC"}
+{"version":3,"file":"settings-auditor.js","sourceRoot":"","sources":["../../../src/engine/claude-config-auditor/settings-auditor.ts"],"names":[],"mappings":"AAAA,uDAAuD;AACvD,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,kBAAkB,CAAC;AACpD,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAIjC,MAAM,QAAQ,GAAG,0CAA0C,CAAC;AAE5D,KAAK,UAAU,YAAY,CAAC,QAAgB;IAC1C,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;QAClD,OAAO,IAAI,CAAC,KAAK,CAAC,OAAO,CAAiB,CAAC;IAC7C,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,KAAK,UAAU,UAAU,CAAC,CAAS;IACjC,IAAI,CAAC;QACH,MAAM,MAAM,CAAC,CAAC,CAAC,CAAC;QAChB,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED,SAAS,mBAAmB,CAAC,IAAkB,EAAE,KAAa;IAC5D,MAAM,QAAQ,GAAoB,EAAE,CAAC;IACrC,MAAM,SAAS,GAAG,IAAI,CAAC,WAAW,EAAE,KAAK,IAAI,EAAE,CAAC;IAChD,KAAK,MAAM,OAAO,IAAI,CAAC,kBAAkB,EAAE,YAAY,CAAC,EAAE,CAAC;QACzD,MAAM,QAAQ,GAAG,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC;QAC9D,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACxB,QAAQ,CAAC,IAAI,CAAC;gBACZ,IAAI,EAAE,UAAU;gBAChB,QAAQ,EAAE,MAAM;gBAChB,OAAO,EAAE,GAAG,KAAK,QAAQ,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,qCAAqC,OAAO,GAAG;gBAC/F,UAAU,EAAE,mDAAmD,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;gBACpF,OAAO,EAAE,QAAQ;aAClB,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IACD,IAAI,IAAI,CAAC,iBAAiB,KAAK,KAAK,EAAE,CAAC;QACrC,QAAQ,CAAC,IAAI,CAAC;YACZ,IAAI,EAAE,UAAU;YAChB,QAAQ,EAAE,MAAM;YAChB,OAAO,EAAE,GAAG,KAAK,yDAAyD;YAC1E,UAAU,EAAE,0DAA0D;YACtE,OAAO,EAAE,QAAQ;SAClB,CAAC,CAAC;IACL,CAAC;IACD,MAAM,WAAW,GAAG,IAAI,CAAC,WAAW,EAAE,WAAW,CAAC;IAClD,IACE,CAAC,WAAW,KAAK,MAAM,IAAI,WAAW,KAAK,aAAa,CAAC;QACzD,IAAI,CAAC,QAAQ,EAAE,WAAW,KAAK,SAAS,EACxC,CAAC;QACD,QAAQ,CAAC,IAAI,CAAC;YACZ,IAAI,EAAE,UAAU;YAChB,QAAQ,EAAE,MAAM;YAChB,IAAI,EAAE,uBAAuB;YAC7B,OAAO,EAAE,GAAG,KAAK,iCAAiC,WAAW,0CAA0C;YACvG,UAAU,EACR,qGAAqG;YACvG,OAAO,EAAE,QAAQ;SAClB,CAAC,CAAC;IACL,CAAC;IACD,IAAI,WAAW,KAAK,mBAAmB,EAAE,CAAC;QACxC,QAAQ,CAAC,IAAI,CAAC;YACZ,IAAI,EAAE,UAAU;YAChB,QAAQ,EAAE,UAAU;YACpB,IAAI,EAAE,iCAAiC;YACvC,OAAO,EAAE,GAAG,KAAK,uFAAuF;YACxG,UAAU,EACR,mGAAmG;YACrG,OAAO,EAAE,QAAQ;SAClB,CAAC,CAAC;IACL,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,WAAmB;IACrD,MAAM,QAAQ,GAAoB,EAAE,CAAC;IACrC,MAAM,KAAK,GAAG;QACZ,EAAE,IAAI,EAAE,IAAI,CAAC,WAAW,EAAE,SAAS,EAAE,eAAe,CAAC,EAAE,KAAK,EAAE,eAAe,EAAE;QAC/E,EAAE,IAAI,EAAE,IAAI,CAAC,WAAW,EAAE,SAAS,EAAE,qBAAqB,CAAC,EAAE,KAAK,EAAE,qBAAqB,EAAE;KAC5F,CAAC;IACF,KAAK,MAAM,EAAE,IAAI,EAAE,CAAC,EAAE,KAAK,EAAE,IAAI,KAAK,EAAE,CAAC;QACvC,MAAM,IAAI,GAAG,MAAM,YAAY,CAAC,CAAC,CAAC,CAAC;QACnC,IAAI,IAAI,EAAE,CAAC;YACT,QAAQ,CAAC,IAAI,CAAC,GAAG,mBAAmB,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC,CAAC;QACrD,CAAC;IACH,CAAC;IACD,IAAI,CAAC,CAAC,MAAM,UAAU,CAAC,IAAI,CAAC,WAAW,EAAE,SAAS,EAAE,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC;QAChE,QAAQ,CAAC,IAAI,CAAC;YACZ,IAAI,EAAE,UAAU;YAChB,QAAQ,EAAE,MAAM;YAChB,OAAO,EAAE,oCAAoC;YAC7C,UAAU,EAAE,iFAAiF;YAC7F,OAAO,EAAE,QAAQ;SAClB,CAAC,CAAC;IACL,CAAC;IACD,IAAI,CAAC,CAAC,MAAM,UAAU,CAAC,IAAI,CAAC,WAAW,EAAE,SAAS,EAAE,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC;QAC/D,QAAQ,CAAC,IAAI,CAAC;YACZ,IAAI,EAAE,UAAU;YAChB,QAAQ,EAAE,MAAM;YAChB,OAAO,EAAE,mCAAmC;YAC5C,UAAU,EACR,oFAAoF;YACtF,OAAO,EAAE,QAAQ;SAClB,CAAC,CAAC;IACL,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC"}

package/dist/engine/config-schemas.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"config-schemas.d.ts","sourceRoot":"","sources":["../../src/engine/config-schemas.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,mBAAmB,CAAC;AACjE,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,wBAAwB,CAAC;AACrE,YAAY,EAAE,uBAAuB,IAAI,0BAA0B,EAAE,sBAAsB,EAAE,CAAC;AAQ9F,eAAO,MAAM,0BAA0B;;;;;;;;;;;;iBAQrC,CAAC;AAEH,eAAO,MAAM,gCAAgC;;;;;;;;;;;;kBAAsC,CAAC;AA0BpF,eAAO,MAAM,sBAAsB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBAiBjC,CAAC"}
+{"version":3,"file":"config-schemas.d.ts","sourceRoot":"","sources":["../../src/engine/config-schemas.ts"],"names":[],"mappings":"AAIA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,mBAAmB,CAAC;AACjE,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,wBAAwB,CAAC;AACrE,YAAY,EAAE,uBAAuB,IAAI,0BAA0B,EAAE,sBAAsB,EAAE,CAAC;AAQ9F,eAAO,MAAM,0BAA0B;;;;;;;;;;;;iBAQrC,CAAC;AAEH,eAAO,MAAM,gCAAgC;;;;;;;;;;;;kBAAsC,CAAC;AA0BpF,eAAO,MAAM,sBAAsB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBAiBjC,CAAC"}

package/dist/engine/config-schemas.js

@@ -1,4 +1,5 @@
 // engine/config-schemas.ts — Zod schemas for JSON config validation (SPEC-205)
+/* v8 ignore file */
 // Each area that uses ConfigLoader/ObjectConfigLoader defines its schema here.
 import { z } from 'zod';
 // ---------------------------------------------------------------------------

package/dist/engine/config-schemas.js.map

@@ -1 +1 @@
-{"version":3,"file":"config-schemas.js","sourceRoot":"","sources":["../../src/engine/config-schemas.ts"],"names":[],"mappings":"AAAA,+EAA+E;AAC/E,+EAA+E;AAE/E,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAKxB,8EAA8E;AAC9E,6DAA6D;AAC7D,8EAA8E;AAE9E,MAAM,sBAAsB,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,SAAS,EAAE,MAAM,CAAC,CAAC,CAAC;AAEtE,MAAM,CAAC,MAAM,0BAA0B,GAAG,CAAC,CAAC,MAAM,CAAC;IACjD,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,EAAE,gBAAgB,CAAC;IACvC,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,EAAE,kBAAkB,CAAC;IAC3C,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,EAAE,sCAAsC,CAAC;IACzE,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,EAAE,sCAAsC,CAAC;IACzE,QAAQ,EAAE,sBAAsB;IAChC,mBAAmB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,EAAE,iCAAiC,CAAC;IACzE,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,EAAE,4BAA4B,CAAC;CAChE,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,gCAAgC,GAAG,CAAC,CAAC,KAAK,CAAC,0BAA0B,CAAC,CAAC;AAEpF,8EAA8E;AAC9E,qDAAqD;AACrD,8EAA8E;AAE9E,MAAM,oBAAoB,GAAG,CAAC,CAAC,MAAM,CAAC;IACpC,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACrB,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CAC7B,CAAC,CAAC;AAEH,MAAM,qBAAqB,GAAG,CAAC,CAAC,MAAM,CAAC;IACrC,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACrB,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CAClC,CAAC,CAAC;AAEH,MAAM,gBAAgB,GAAG,CAAC,CAAC,MAAM,CAAC;IAChC,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACrB,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;CAChC,CAAC,CAAC;AAEH,MAAM,wBAAwB,GAAG,CAAC,CAAC,MAAM,CAAC;IACxC,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACrB,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;CACjC,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,sBAAsB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC7C,aAAa,EAAE,CAAC,CAAC,MAAM,CAAC;QACtB,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE;QACzB,sBAAsB,EAAE,CAAC,CAAC,MAAM,EAAE;QAClC,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;QACjC,oBAAoB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;QAC3C,sBAAsB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;KAC9C,CAAC;IACF,eAAe,EAAE,CAAC,CAAC,KAAK,CAAC,oBAAoB,CAAC;IAC9C,eAAe,EAAE,CAAC,CAAC,KAAK,CAAC,qBAAqB,CAAC;IAC/C,oBAAoB,EAAE,CAAC,CAAC,KAAK,CAAC,qBAAqB,CAAC;IACpD,WAAW,EAAE,CAAC,CAAC,KAAK,CAAC,gBAAgB,CAAC;IACtC,gBAAgB,EAAE,CAAC,CAAC,MAAM,CAAC;QACzB,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;QAC3B,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;KAC9B,CAAC;IACF,aAAa,EAAE,CAAC,CAAC,KAAK,CAAC,wBAAwB,CAAC;CACjD,CAAC,CAAC"}
+{"version":3,"file":"config-schemas.js","sourceRoot":"","sources":["../../src/engine/config-schemas.ts"],"names":[],"mappings":"AAAA,+EAA+E;AAC/E,oBAAoB;AACpB,+EAA+E;AAE/E,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAKxB,8EAA8E;AAC9E,6DAA6D;AAC7D,8EAA8E;AAE9E,MAAM,sBAAsB,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,SAAS,EAAE,MAAM,CAAC,CAAC,CAAC;AAEtE,MAAM,CAAC,MAAM,0BAA0B,GAAG,CAAC,CAAC,MAAM,CAAC;IACjD,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,EAAE,gBAAgB,CAAC;IACvC,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,EAAE,kBAAkB,CAAC;IAC3C,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,EAAE,sCAAsC,CAAC;IACzE,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,EAAE,sCAAsC,CAAC;IACzE,QAAQ,EAAE,sBAAsB;IAChC,mBAAmB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,EAAE,iCAAiC,CAAC;IACzE,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,EAAE,4BAA4B,CAAC;CAChE,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,gCAAgC,GAAG,CAAC,CAAC,KAAK,CAAC,0BAA0B,CAAC,CAAC;AAEpF,8EAA8E;AAC9E,qDAAqD;AACrD,8EAA8E;AAE9E,MAAM,oBAAoB,GAAG,CAAC,CAAC,MAAM,CAAC;IACpC,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACrB,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CAC7B,CAAC,CAAC;AAEH,MAAM,qBAAqB,GAAG,CAAC,CAAC,MAAM,CAAC;IACrC,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACrB,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CAClC,CAAC,CAAC;AAEH,MAAM,gBAAgB,GAAG,CAAC,CAAC,MAAM,CAAC;IAChC,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACrB,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;CAChC,CAAC,CAAC;AAEH,MAAM,wBAAwB,GAAG,CAAC,CAAC,MAAM,CAAC;IACxC,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACrB,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;CACjC,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,sBAAsB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC7C,aAAa,EAAE,CAAC,CAAC,MAAM,CAAC;QACtB,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE;QACzB,sBAAsB,EAAE,CAAC,CAAC,MAAM,EAAE;QAClC,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;QACjC,oBAAoB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;QAC3C,sBAAsB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;KAC9C,CAAC;IACF,eAAe,EAAE,CAAC,CAAC,KAAK,CAAC,oBAAoB,CAAC;IAC9C,eAAe,EAAE,CAAC,CAAC,KAAK,CAAC,qBAAqB,CAAC;IAC/C,oBAAoB,EAAE,CAAC,CAAC,KAAK,CAAC,qBAAqB,CAAC;IACpD,WAAW,EAAE,CAAC,CAAC,KAAK,CAAC,gBAAgB,CAAC;IACtC,gBAAgB,EAAE,CAAC,CAAC,MAAM,CAAC;QACzB,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;QAC3B,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;KAC9B,CAAC;IACF,aAAa,EAAE,CAAC,CAAC,KAAK,CAAC,wBAAwB,CAAC;CACjD,CAAC,CAAC"}

package/dist/engine/context-advisor/btw-advisor.d.ts

@@ -0,0 +1,11 @@
+import type { BtwHint } from '../../types/index.js';
+/**
+ * Returns true if /btw should be suggested based on context usage.
+ * Suggests /btw when context >= 60% to avoid contaminating session.
+ */
+export declare function shouldSuggestBtw(contextPercent: number): boolean;
+/**
+ * Builds a formatted hint explaining /btw and when to use it.
+ */
+export declare function buildBtwHint(reason: string): BtwHint;
+//# sourceMappingURL=btw-advisor.d.ts.map

package/dist/engine/context-advisor/btw-advisor.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"btw-advisor.d.ts","sourceRoot":"","sources":["../../../src/engine/context-advisor/btw-advisor.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,sBAAsB,CAAC;AAEpD;;;GAGG;AACH,wBAAgB,gBAAgB,CAAC,cAAc,EAAE,MAAM,GAAG,OAAO,CAEhE;AAED;;GAEG;AACH,wBAAgB,YAAY,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAiBpD"}

package/dist/engine/context-advisor/btw-advisor.js

@@ -0,0 +1,29 @@
+// engine/context-advisor/btw-advisor.ts — SPEC-256 Context-Safe Side Queries advisor
+/**
+ * Returns true if /btw should be suggested based on context usage.
+ * Suggests /btw when context >= 60% to avoid contaminating session.
+ */
+export function shouldSuggestBtw(contextPercent) {
+    return contextPercent >= 60;
+}
+/**
+ * Builds a formatted hint explaining /btw and when to use it.
+ */
+export function buildBtwHint(reason) {
+    return {
+        command: '/btw your question here',
+        description: 'Asks a side question without entering it into conversation history. Answer appears in a dismissible overlay.',
+        whenToUse: [
+            'Checking a version number or API detail mid-task',
+            'Quick "does X exist?" questions',
+            'Verifying a convention without tracking the answer',
+            'Reading docs while implementing',
+        ],
+        whenNotToUse: [
+            'Implementation decisions that should be tracked',
+            'Questions whose answers Claude will need to act on',
+        ],
+        reason,
+    };
+}
+//# sourceMappingURL=btw-advisor.js.map

package/dist/engine/context-advisor/btw-advisor.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"btw-advisor.js","sourceRoot":"","sources":["../../../src/engine/context-advisor/btw-advisor.ts"],"names":[],"mappings":"AAAA,qFAAqF;AAIrF;;;GAGG;AACH,MAAM,UAAU,gBAAgB,CAAC,cAAsB;IACrD,OAAO,cAAc,IAAI,EAAE,CAAC;AAC9B,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,YAAY,CAAC,MAAc;IACzC,OAAO;QACL,OAAO,EAAE,yBAAyB;QAClC,WAAW,EACT,8GAA8G;QAChH,SAAS,EAAE;YACT,kDAAkD;YAClD,iCAAiC;YACjC,oDAAoD;YACpD,iCAAiC;SAClC;QACD,YAAY,EAAE;YACZ,iDAAiD;YACjD,oDAAoD;SACrD;QACD,MAAM;KACP,CAAC;AACJ,CAAC"}

package/dist/engine/facilitate/context-loader.d.ts

@@ -0,0 +1,12 @@
+import type { LoadedFacilitateContext } from '../../types/index.js';
+/**
+ * Load spec context directly from disk — no MCP tool calls.
+ * Gracefully handles empty/missing project directories.
+ */
+export declare function loadContext(projectPath: string, keywords: string[]): Promise<LoadedFacilitateContext>;
+/**
+ * Load context from a planu/ specs directory (alternative path — reads spec.md frontmatter).
+ * Used when data/ is not available but planu/ is present.
+ */
+export declare function loadContextFromPlanuDir(planuSpecsDir: string, keywords: string[]): Promise<LoadedFacilitateContext>;
+//# sourceMappingURL=context-loader.d.ts.map

package/dist/engine/facilitate/context-loader.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"context-loader.d.ts","sourceRoot":"","sources":["../../../src/engine/facilitate/context-loader.ts"],"names":[],"mappings":"AAKA,OAAO,KAAK,EACV,uBAAuB,EAGxB,MAAM,sBAAsB,CAAC;AAyF9B;;;GAGG;AACH,wBAAsB,WAAW,CAC/B,WAAW,EAAE,MAAM,EACnB,QAAQ,EAAE,MAAM,EAAE,GACjB,OAAO,CAAC,uBAAuB,CAAC,CAwBlC;AAED;;;GAGG;AACH,wBAAsB,uBAAuB,CAC3C,aAAa,EAAE,MAAM,EACrB,QAAQ,EAAE,MAAM,EAAE,GACjB,OAAO,CAAC,uBAAuB,CAAC,CAyClC"}