@printwithsynergy/synergy-mcp 0.1.1

package/dist/tools/blast-radius.js

@@ -0,0 +1,205 @@
+/**
+ * blast_radius — given a target (symbol, HTTP route, or env var),
+ * scan every configured repo's working tree and return the call
+ * sites.
+ *
+ * V1 uses ripgrep-style regex matching tuned to the language of
+ * each repo (Python vs TypeScript). It's not full AST analysis —
+ * ctxo (https://github.com/anthropics/code-review-graph) does that
+ * for TS/Go/C# but doesn't ship a Python plugin yet. Grep is the
+ * working substitute that lint-pdf's CLAUDE.md already calls out.
+ *
+ * Three target kinds:
+ *
+ * 1. `symbol` — e.g. `CodexDocument`, `withTenant`. Matches Python
+ *    `from X import Y` lines and TS `import { Y } from 'X'` lines,
+ *    plus bare usage sites.
+ * 2. `route` — e.g. `POST /v1/extract` or `/api/v1/jobs`. Matches
+ *    quoted occurrences of the path in any source file.
+ * 3. `env_var` — e.g. `LENS_SERVER_URL`, `STRIPE_SECRET_KEY`.
+ *    Matches `process.env.X`, `process.env["X"]`, `os.getenv("X")`,
+ *    `os.environ.get("X")`, `os.environ["X"]`, and YAML `X:` lines.
+ */
+import { readFileSync, readdirSync, statSync } from "node:fs";
+import { extname, join } from "node:path";
+import { z } from "zod";
+import { KNOWN_REPOS, REPO_LANG, resolveAllRepoPaths, } from "../config.js";
+export const BlastRadiusInput = z.object({
+    target: z
+        .string()
+        .min(1)
+        .describe("What to search for. Examples: 'CodexDocument' (a symbol), '/v1/extract' (an HTTP route), 'LENS_SERVER_URL' (an env var). Use `kind` to disambiguate."),
+    kind: z
+        .enum(["symbol", "route", "env_var"])
+        .default("symbol")
+        .describe("How to interpret `target`. 'symbol' matches import lines + bare usage. 'route' matches the path string as a quoted literal. 'env_var' matches process.env / os.environ / os.getenv access."),
+    repos: z
+        .array(z.string())
+        .optional()
+        .describe("Optional subset of repos to search. When omitted, searches all configured repos."),
+    max_results_per_repo: z
+        .number()
+        .int()
+        .positive()
+        .default(50)
+        .describe("Cap on hits per repo to keep the response bounded."),
+});
+function escapeRegex(s) {
+    return s.replace(/[.*+?^${}()|[\]\\]/g, "\\$&");
+}
+function buildPatterns(target, kind, lang) {
+    const t = escapeRegex(target);
+    if (kind === "env_var") {
+        return [
+            {
+                kind: "env",
+                re: new RegExp(
+                // TS: process.env.X, process.env['X'], process.env["X"]
+                // Python: os.getenv("X"), os.environ["X"], os.environ.get("X")
+                // YAML: X: value
+                `(?:process\\.env(?:\\.${t}|\\[['"]${t}['"]\\]))|(?:os\\.getenv\\(['"]${t}['"]\\))|(?:os\\.environ(?:\\[['"]${t}['"]\\]|\\.get\\(['"]${t}['"]\\)))|(?:^\\s*${t}\\s*:)`, "m"),
+            },
+        ];
+    }
+    if (kind === "route") {
+        return [
+            {
+                kind: "route",
+                re: new RegExp(`['"\`]${t}['"\`]`),
+            },
+        ];
+    }
+    // symbol
+    const patterns = [];
+    if (lang === "python") {
+        patterns.push({
+            kind: "import",
+            re: new RegExp(`^\\s*from\\s+\\S+\\s+import\\s+[^#]*\\b${t}\\b`, "m"),
+        });
+    }
+    else {
+        patterns.push({
+            kind: "import",
+            re: new RegExp(`^\\s*import\\s+(?:[^;]*\\{[^}]*\\b${t}\\b[^}]*\\}|\\*\\s+as\\s+${t}|${t})`, "m"),
+        });
+    }
+    patterns.push({
+        kind: "usage",
+        re: new RegExp(`\\b${t}\\b`),
+    });
+    return patterns;
+}
+const SOURCE_EXT = new Set([
+    ".ts",
+    ".tsx",
+    ".js",
+    ".jsx",
+    ".mjs",
+    ".cjs",
+    ".py",
+    ".pyi",
+    ".yml",
+    ".yaml",
+]);
+function isSearchable(name) {
+    return SOURCE_EXT.has(extname(name));
+}
+function walk(dir, onFile, depth = 0, maxDepth = 8) {
+    if (depth > maxDepth)
+        return true;
+    let entries;
+    try {
+        entries = readdirSync(dir);
+    }
+    catch {
+        return true;
+    }
+    for (const name of entries) {
+        if (name === "node_modules" ||
+            name === ".git" ||
+            name === "dist" ||
+            name === "build" ||
+            name === ".venv" ||
+            name === "__pycache__" ||
+            name === ".turbo" ||
+            name === ".next") {
+            continue;
+        }
+        const full = join(dir, name);
+        let s;
+        try {
+            s = statSync(full);
+        }
+        catch {
+            continue;
+        }
+        if (s.isDirectory()) {
+            const keepGoing = walk(full, onFile, depth + 1, maxDepth);
+            if (!keepGoing)
+                return false;
+        }
+        else if (s.isFile() && isSearchable(name)) {
+            const keepGoing = onFile(full);
+            if (!keepGoing)
+                return false;
+        }
+    }
+    return true;
+}
+function searchRepo(repo, root, patterns, cap) {
+    const hits = [];
+    walk(root, (file) => {
+        let text;
+        try {
+            text = readFileSync(file, "utf8");
+        }
+        catch {
+            return true;
+        }
+        const lines = text.split("\n");
+        for (let i = 0; i < lines.length; i++) {
+            const line = lines[i] ?? "";
+            for (const p of patterns) {
+                if (p.re.test(line)) {
+                    hits.push({
+                        repo,
+                        file,
+                        line: i + 1,
+                        text: line.trim().slice(0, 300),
+                        kind: p.kind,
+                    });
+                    if (hits.length >= cap)
+                        return false;
+                    break;
+                }
+            }
+        }
+        return true;
+    });
+    return hits;
+}
+export async function blastRadius(input) {
+    const paths = resolveAllRepoPaths();
+    const notes = [];
+    const subset = input.repos
+        ? input.repos.filter((r) => KNOWN_REPOS.includes(r))
+        : KNOWN_REPOS;
+    const allHits = [];
+    for (const repo of subset) {
+        const root = paths[repo];
+        if (!root) {
+            notes.push(`repo ${repo}: not configured`);
+            continue;
+        }
+        const patterns = buildPatterns(input.target, input.kind, REPO_LANG[repo]);
+        const hits = searchRepo(repo, root, patterns, input.max_results_per_repo);
+        allHits.push(...hits);
+    }
+    return {
+        target: input.target,
+        kind: input.kind,
+        hits: allHits,
+        notes,
+    };
+}
+//# sourceMappingURL=blast-radius.js.map

package/dist/tools/blast-radius.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"blast-radius.js","sourceRoot":"","sources":["../../src/tools/blast-radius.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,OAAO,EAAc,YAAY,EAAE,WAAW,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AAC1E,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAC1C,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EACL,WAAW,EACX,SAAS,EAGT,mBAAmB,GACpB,MAAM,cAAc,CAAC;AAEtB,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,CAAC,MAAM,CAAC;IACvC,MAAM,EAAE,CAAC;SACN,MAAM,EAAE;SACR,GAAG,CAAC,CAAC,CAAC;SACN,QAAQ,CACP,sJAAsJ,CACvJ;IACH,IAAI,EAAE,CAAC;SACJ,IAAI,CAAC,CAAC,QAAQ,EAAE,OAAO,EAAE,SAAS,CAAC,CAAC;SACpC,OAAO,CAAC,QAAQ,CAAC;SACjB,QAAQ,CACP,4LAA4L,CAC7L;IACH,KAAK,EAAE,CAAC;SACL,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;SACjB,QAAQ,EAAE;SACV,QAAQ,CACP,kFAAkF,CACnF;IACH,oBAAoB,EAAE,CAAC;SACpB,MAAM,EAAE;SACR,GAAG,EAAE;SACL,QAAQ,EAAE;SACV,OAAO,CAAC,EAAE,CAAC;SACX,QAAQ,CAAC,oDAAoD,CAAC;CAClE,CAAC,CAAC;AAUH,SAAS,WAAW,CAAC,CAAS;IAC5B,OAAO,CAAC,CAAC,OAAO,CAAC,qBAAqB,EAAE,MAAM,CAAC,CAAC;AAClD,CAAC;AAED,SAAS,aAAa,CACpB,MAAc,EACd,IAA8C,EAC9C,IAAc;IAEd,MAAM,CAAC,GAAG,WAAW,CAAC,MAAM,CAAC,CAAC;IAC9B,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;QACvB,OAAO;YACL;gBACE,IAAI,EAAE,KAAc;gBACpB,EAAE,EAAE,IAAI,MAAM;gBACZ,wDAAwD;gBACxD,+DAA+D;gBAC/D,iBAAiB;gBACjB,yBAAyB,CAAC,WAAW,CAAC,kCAAkC,CAAC,qCAAqC,CAAC,wBAAwB,CAAC,qBAAqB,CAAC,QAAQ,EACtK,GAAG,CACJ;aACF;SACF,CAAC;IACJ,CAAC;IACD,IAAI,IAAI,KAAK,OAAO,EAAE,CAAC;QACrB,OAAO;YACL;gBACE,IAAI,EAAE,OAAgB;gBACtB,EAAE,EAAE,IAAI,MAAM,CAAC,SAAS,CAAC,QAAQ,CAAC;aACnC;SACF,CAAC;IACJ,CAAC;IACD,SAAS;IACT,MAAM,QAAQ,GAAmD,EAAE,CAAC;IACpE,IAAI,IAAI,KAAK,QAAQ,EAAE,CAAC;QACtB,QAAQ,CAAC,IAAI,CAAC;YACZ,IAAI,EAAE,QAAiB;YACvB,EAAE,EAAE,IAAI,MAAM,CAAC,0CAA0C,CAAC,KAAK,EAAE,GAAG,CAAC;SACtE,CAAC,CAAC;IACL,CAAC;SAAM,CAAC;QACN,QAAQ,CAAC,IAAI,CAAC;YACZ,IAAI,EAAE,QAAiB;YACvB,EAAE,EAAE,IAAI,MAAM,CACZ,qCAAqC,CAAC,4BAA4B,CAAC,IAAI,CAAC,GAAG,EAC3E,GAAG,CACJ;SACF,CAAC,CAAC;IACL,CAAC;IACD,QAAQ,CAAC,IAAI,CAAC;QACZ,IAAI,EAAE,OAAgB;QACtB,EAAE,EAAE,IAAI,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC;KAC7B,CAAC,CAAC;IACH,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,MAAM,UAAU,GAAG,IAAI,GAAG,CAAC;IACzB,KAAK;IACL,MAAM;IACN,KAAK;IACL,MAAM;IACN,MAAM;IACN,MAAM;IACN,KAAK;IACL,MAAM;IACN,MAAM;IACN,OAAO;CACR,CAAC,CAAC;AAEH,SAAS,YAAY,CAAC,IAAY;IAChC,OAAO,UAAU,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC;AACvC,CAAC;AAED,SAAS,IAAI,CACX,GAAW,EACX,MAAiC,EACjC,KAAK,GAAG,CAAC,EACT,QAAQ,GAAG,CAAC;IAEZ,IAAI,KAAK,GAAG,QAAQ;QAAE,OAAO,IAAI,CAAC;IAClC,IAAI,OAAiB,CAAC;IACtB,IAAI,CAAC;QACH,OAAO,GAAG,WAAW,CAAC,GAAG,CAAC,CAAC;IAC7B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;IACD,KAAK,MAAM,IAAI,IAAI,OAAO,EAAE,CAAC;QAC3B,IACE,IAAI,KAAK,cAAc;YACvB,IAAI,KAAK,MAAM;YACf,IAAI,KAAK,MAAM;YACf,IAAI,KAAK,OAAO;YAChB,IAAI,KAAK,OAAO;YAChB,IAAI,KAAK,aAAa;YACtB,IAAI,KAAK,QAAQ;YACjB,IAAI,KAAK,OAAO,EAChB,CAAC;YACD,SAAS;QACX,CAAC;QACD,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;QAC7B,IAAI,CAA8B,CAAC;QACnC,IAAI,CAAC;YACH,CAAC,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC;QACrB,CAAC;QAAC,MAAM,CAAC;YACP,SAAS;QACX,CAAC;QACD,IAAI,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC;YACpB,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,GAAG,CAAC,EAAE,QAAQ,CAAC,CAAC;YAC1D,IAAI,CAAC,SAAS;gBAAE,OAAO,KAAK,CAAC;QAC/B,CAAC;aAAM,IAAI,CAAC,CAAC,MAAM,EAAE,IAAI,YAAY,CAAC,IAAI,CAAC,EAAE,CAAC;YAC5C,MAAM,SAAS,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC;YAC/B,IAAI,CAAC,SAAS;gBAAE,OAAO,KAAK,CAAC;QAC/B,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,UAAU,CACjB,IAAc,EACd,IAAY,EACZ,QAAwD,EACxD,GAAW;IAEX,MAAM,IAAI,GAAqB,EAAE,CAAC;IAClC,IAAI,CAAC,IAAI,EAAE,CAAC,IAAI,EAAE,EAAE;QAClB,IAAI,IAAY,CAAC;QACjB,IAAI,CAAC;YACH,IAAI,GAAG,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QACpC,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,IAAI,CAAC;QACd,CAAC;QACD,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAC/B,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;YACtC,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;YAC5B,KAAK,MAAM,CAAC,IAAI,QAAQ,EAAE,CAAC;gBACzB,IAAI,CAAC,CAAC,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;oBACpB,IAAI,CAAC,IAAI,CAAC;wBACR,IAAI;wBACJ,IAAI;wBACJ,IAAI,EAAE,CAAC,GAAG,CAAC;wBACX,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC;wBAC/B,IAAI,EAAE,CAAC,CAAC,IAAI;qBACb,CAAC,CAAC;oBACH,IAAI,IAAI,CAAC,MAAM,IAAI,GAAG;wBAAE,OAAO,KAAK,CAAC;oBACrC,MAAM;gBACR,CAAC;YACH,CAAC;QACH,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC,CAAC,CAAC;IACH,OAAO,IAAI,CAAC;AACd,CAAC;AASD,MAAM,CAAC,KAAK,UAAU,WAAW,CAC/B,KAAuC;IAEvC,MAAM,KAAK,GAAG,mBAAmB,EAAE,CAAC;IACpC,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,MAAM,MAAM,GAAG,KAAK,CAAC,KAAK;QACxB,CAAC,CAAE,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CACxB,WAAW,CAAC,QAAQ,CAAC,CAAa,CAAC,CACrB;QAClB,CAAC,CAAC,WAAW,CAAC;IAEhB,MAAM,OAAO,GAAqB,EAAE,CAAC;IACrC,KAAK,MAAM,IAAI,IAAI,MAAM,EAAE,CAAC;QAC1B,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC;QACzB,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,KAAK,CAAC,IAAI,CAAC,QAAQ,IAAI,kBAAkB,CAAC,CAAC;YAC3C,SAAS;QACX,CAAC;QACD,MAAM,QAAQ,GAAG,aAAa,CAAC,KAAK,CAAC,MAAM,EAAE,KAAK,CAAC,IAAI,EAAE,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC;QAC1E,MAAM,IAAI,GAAG,UAAU,CAAC,IAAI,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,CAAC,oBAAoB,CAAC,CAAC;QAC1E,OAAO,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,CAAC;IACxB,CAAC;IAED,OAAO;QACL,MAAM,EAAE,KAAK,CAAC,MAAM;QACpB,IAAI,EAAE,KAAK,CAAC,IAAI;QAChB,IAAI,EAAE,OAAO;QACb,KAAK;KACN,CAAC;AACJ,CAAC"}

package/dist/tools/floor-pin-grid.d.ts

@@ -0,0 +1,23 @@
+import { z } from "zod";
+import { type RepoName } from "../config.js";
+export declare const FloorPinGridInput: z.ZodObject<{
+    package: z.ZodOptional<z.ZodString>;
+}, "strip", z.ZodTypeAny, {
+    package?: string | undefined;
+}, {
+    package?: string | undefined;
+}>;
+/** A single row in the grid. */
+export interface FloorPinRow {
+    repo: RepoName;
+    package: string;
+    spec: string;
+    /** Which manifest file + section the pin came from. */
+    source: string;
+}
+export interface FloorPinGridResult {
+    rows: FloorPinRow[];
+    notes: string[];
+}
+export declare function floorPinGrid(input: z.infer<typeof FloorPinGridInput>): Promise<FloorPinGridResult>;
+//# sourceMappingURL=floor-pin-grid.d.ts.map

package/dist/tools/floor-pin-grid.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"floor-pin-grid.d.ts","sourceRoot":"","sources":["../../src/tools/floor-pin-grid.ts"],"names":[],"mappings":"AAeA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAe,KAAK,QAAQ,EAAuB,MAAM,cAAc,CAAC;AAE/E,eAAO,MAAM,iBAAiB;;;;;;EAO5B,CAAC;AAEH,gCAAgC;AAChC,MAAM,WAAW,WAAW;IAC1B,IAAI,EAAE,QAAQ,CAAC;IACf,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,EAAE,MAAM,CAAC;IACb,uDAAuD;IACvD,MAAM,EAAE,MAAM,CAAC;CAChB;AA+FD,MAAM,WAAW,kBAAkB;IACjC,IAAI,EAAE,WAAW,EAAE,CAAC;IACpB,KAAK,EAAE,MAAM,EAAE,CAAC;CACjB;AAED,wBAAsB,YAAY,CAChC,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,OAAO,iBAAiB,CAAC,GACvC,OAAO,CAAC,kBAAkB,CAAC,CA8B7B"}

package/dist/tools/floor-pin-grid.js

@@ -0,0 +1,133 @@
+/**
+ * floor_pin_grid — return the version-pin matrix for org packages
+ * across every configured repo.
+ *
+ * Audits Python `pyproject.toml` `dependencies = [...]` lists and
+ * Node `package.json` `dependencies` + `devDependencies` +
+ * `peerDependencies` for the known printwithsynergy package names.
+ *
+ * Audit finding #2 in the cross-stack audit caught lint-pdf pinning
+ * `codex-pdf>=1.19.0` with no upper bound while compile-pdf pinned
+ * `>=1.15.0,<2.0`. This tool surfaces that mismatch as a one-call
+ * grid query.
+ */
+import { existsSync, readFileSync } from "node:fs";
+import { join } from "node:path";
+import { z } from "zod";
+import { KNOWN_REPOS, resolveAllRepoPaths } from "../config.js";
+export const FloorPinGridInput = z.object({
+    package: z
+        .string()
+        .optional()
+        .describe("Optional package-name filter (e.g. 'codex-pdf' or '@printwithsynergy/lens-pdf'). When omitted, returns rows for every detected org package across every repo."),
+});
+/** Known org package names worth surfacing in the grid. */
+const ORG_PACKAGES = [
+    "codex-pdf",
+    "lint-pdf",
+    "compile-pdf",
+    "@printwithsynergy/codex-client",
+    "@printwithsynergy/lens-pdf",
+    "@printwithsynergy/client",
+    "@printwithsynergy/synergy-mcp",
+];
+function isOrgPackage(name) {
+    return ORG_PACKAGES.includes(name);
+}
+/** Parse a single pyproject.toml `dependencies = [...]` entry.
+ *
+ * Hand-rolled rather than `[\\s\\S]*?\\]` regex because package specs
+ * legitimately contain `]` (e.g. `uvicorn[standard]>=0.30.0`), which
+ * a lazy regex would close on. We walk lines instead: find
+ * `^dependencies = [`, then accumulate until `^]` at line start. */
+function parsePyprojectDeps(repo, root) {
+    const path = join(root, "pyproject.toml");
+    if (!existsSync(path))
+        return [];
+    const text = readFileSync(path, "utf8");
+    const rows = [];
+    const lines = text.split("\n");
+    let inDeps = false;
+    for (const line of lines) {
+        if (!inDeps) {
+            if (/^dependencies\s*=\s*\[/.test(line))
+                inDeps = true;
+            continue;
+        }
+        if (/^\]\s*$/.test(line))
+            break;
+        // Match the package name + version spec inside quotes; the spec
+        // may legitimately contain commas + < > = ~ ! characters.
+        const m = line.match(/['"]([A-Za-z0-9_.\-]+)(\[[^\]]*\])?([<>=!~,][^'"]*)?['"]/);
+        if (m?.[1]) {
+            const name = m[1].trim();
+            const spec = (m[3] ?? "").trim() || "(unpinned)";
+            if (isOrgPackage(name)) {
+                rows.push({
+                    repo,
+                    package: name,
+                    spec,
+                    source: "pyproject.toml#dependencies",
+                });
+            }
+        }
+    }
+    return rows;
+}
+/** Parse package.json dep sections for org packages. */
+function parsePackageJson(repo, root) {
+    const path = join(root, "package.json");
+    if (!existsSync(path))
+        return [];
+    const rows = [];
+    try {
+        const parsed = JSON.parse(readFileSync(path, "utf8"));
+        for (const section of [
+            "dependencies",
+            "devDependencies",
+            "peerDependencies",
+        ]) {
+            const block = parsed[section];
+            if (block && typeof block === "object") {
+                for (const [name, spec] of Object.entries(block)) {
+                    if (isOrgPackage(name)) {
+                        rows.push({
+                            repo,
+                            package: name,
+                            spec,
+                            source: `package.json#${section}`,
+                        });
+                    }
+                }
+            }
+        }
+    }
+    catch {
+        // Malformed JSON — skip rather than throw; surface as empty rows.
+    }
+    return rows;
+}
+export async function floorPinGrid(input) {
+    const paths = resolveAllRepoPaths();
+    const rows = [];
+    const notes = [];
+    for (const repo of KNOWN_REPOS) {
+        const root = paths[repo];
+        if (!root) {
+            notes.push(`repo ${repo}: not configured (set SYNERGY_MCP_PATH_${repo
+                .toUpperCase()
+                .replace(/-/g, "_")} or SYNERGY_MCP_STACK_ROOT)`);
+            continue;
+        }
+        rows.push(...parsePyprojectDeps(repo, root));
+        rows.push(...parsePackageJson(repo, root));
+    }
+    const filtered = input.package
+        ? rows.filter((r) => r.package === input.package)
+        : rows;
+    return {
+        rows: filtered.sort((a, b) => a.package.localeCompare(b.package) || a.repo.localeCompare(b.repo)),
+        notes,
+    };
+}
+//# sourceMappingURL=floor-pin-grid.js.map

package/dist/tools/floor-pin-grid.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"floor-pin-grid.js","sourceRoot":"","sources":["../../src/tools/floor-pin-grid.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AACH,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACnD,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,WAAW,EAAiB,mBAAmB,EAAE,MAAM,cAAc,CAAC;AAE/E,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC,CAAC,MAAM,CAAC;IACxC,OAAO,EAAE,CAAC;SACP,MAAM,EAAE;SACR,QAAQ,EAAE;SACV,QAAQ,CACP,+JAA+J,CAChK;CACJ,CAAC,CAAC;AAWH,2DAA2D;AAC3D,MAAM,YAAY,GAAG;IACnB,WAAW;IACX,UAAU;IACV,aAAa;IACb,gCAAgC;IAChC,4BAA4B;IAC5B,0BAA0B;IAC1B,+BAA+B;CAChC,CAAC;AAEF,SAAS,YAAY,CAAC,IAAY;IAChC,OAAO,YAAY,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;AACrC,CAAC;AAED;;;;;oEAKoE;AACpE,SAAS,kBAAkB,CAAC,IAAc,EAAE,IAAY;IACtD,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,EAAE,gBAAgB,CAAC,CAAC;IAC1C,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;QAAE,OAAO,EAAE,CAAC;IACjC,MAAM,IAAI,GAAG,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IACxC,MAAM,IAAI,GAAkB,EAAE,CAAC;IAE/B,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAC/B,IAAI,MAAM,GAAG,KAAK,CAAC;IACnB,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,IAAI,wBAAwB,CAAC,IAAI,CAAC,IAAI,CAAC;gBAAE,MAAM,GAAG,IAAI,CAAC;YACvD,SAAS;QACX,CAAC;QACD,IAAI,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC;YAAE,MAAM;QAChC,gEAAgE;QAChE,0DAA0D;QAC1D,MAAM,CAAC,GAAG,IAAI,CAAC,KAAK,CAClB,0DAA0D,CAC3D,CAAC;QACF,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACX,MAAM,IAAI,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;YACzB,MAAM,IAAI,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,IAAI,YAAY,CAAC;YACjD,IAAI,YAAY,CAAC,IAAI,CAAC,EAAE,CAAC;gBACvB,IAAI,CAAC,IAAI,CAAC;oBACR,IAAI;oBACJ,OAAO,EAAE,IAAI;oBACb,IAAI;oBACJ,MAAM,EAAE,6BAA6B;iBACtC,CAAC,CAAC;YACL,CAAC;QACH,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,wDAAwD;AACxD,SAAS,gBAAgB,CAAC,IAAc,EAAE,IAAY;IACpD,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,EAAE,cAAc,CAAC,CAAC;IACxC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;QAAE,OAAO,EAAE,CAAC;IACjC,MAAM,IAAI,GAAkB,EAAE,CAAC;IAC/B,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAGnD,CAAC;QACF,KAAK,MAAM,OAAO,IAAI;YACpB,cAAc;YACd,iBAAiB;YACjB,kBAAkB;SACnB,EAAE,CAAC;YACF,MAAM,KAAK,GAAG,MAAM,CAAC,OAAO,CAAC,CAAC;YAC9B,IAAI,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;gBACvC,KAAK,MAAM,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,MAAM,CAAC,OAAO,CACvC,KAA+B,CAChC,EAAE,CAAC;oBACF,IAAI,YAAY,CAAC,IAAI,CAAC,EAAE,CAAC;wBACvB,IAAI,CAAC,IAAI,CAAC;4BACR,IAAI;4BACJ,OAAO,EAAE,IAAI;4BACb,IAAI;4BACJ,MAAM,EAAE,gBAAgB,OAAO,EAAE;yBAClC,CAAC,CAAC;oBACL,CAAC;gBACH,CAAC;YACH,CAAC;QACH,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,kEAAkE;IACpE,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAOD,MAAM,CAAC,KAAK,UAAU,YAAY,CAChC,KAAwC;IAExC,MAAM,KAAK,GAAG,mBAAmB,EAAE,CAAC;IACpC,MAAM,IAAI,GAAkB,EAAE,CAAC;IAC/B,MAAM,KAAK,GAAa,EAAE,CAAC;IAE3B,KAAK,MAAM,IAAI,IAAI,WAAW,EAAE,CAAC;QAC/B,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC;QACzB,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,KAAK,CAAC,IAAI,CACR,QAAQ,IAAI,0CAA0C,IAAI;iBACvD,WAAW,EAAE;iBACb,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,6BAA6B,CACnD,CAAC;YACF,SAAS;QACX,CAAC;QACD,IAAI,CAAC,IAAI,CAAC,GAAG,kBAAkB,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC;QAC7C,IAAI,CAAC,IAAI,CAAC,GAAG,gBAAgB,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC;IAC7C,CAAC;IAED,MAAM,QAAQ,GAAG,KAAK,CAAC,OAAO;QAC5B,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,KAAK,KAAK,CAAC,OAAO,CAAC;QACjD,CAAC,CAAC,IAAI,CAAC;IAET,OAAO;QACL,IAAI,EAAE,QAAQ,CAAC,IAAI,CACjB,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CACP,CAAC,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,CACrE;QACD,KAAK;KACN,CAAC;AACJ,CAAC"}

package/dist/tools/pattern-audit.d.ts

@@ -0,0 +1,30 @@
+import { z } from "zod";
+import { type RepoName } from "../config.js";
+export declare const PatternAuditInput: z.ZodObject<{
+    patterns: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
+}, "strip", z.ZodTypeAny, {
+    patterns?: string[] | undefined;
+}, {
+    patterns?: string[] | undefined;
+}>;
+export interface PatternRow {
+    repo: RepoName;
+    pattern: string;
+    present: boolean;
+    evidence: string;
+}
+/** Return all pattern names this tool knows. */
+export declare function knownPatterns(): {
+    name: string;
+    description: string;
+}[];
+export interface PatternAuditResult {
+    rows: PatternRow[];
+    notes: string[];
+    available_patterns: {
+        name: string;
+        description: string;
+    }[];
+}
+export declare function patternAudit(input: z.infer<typeof PatternAuditInput>): Promise<PatternAuditResult>;
+//# sourceMappingURL=pattern-audit.d.ts.map

package/dist/tools/pattern-audit.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"pattern-audit.d.ts","sourceRoot":"","sources":["../../src/tools/pattern-audit.ts"],"names":[],"mappings":"AAWA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAe,KAAK,QAAQ,EAAuB,MAAM,cAAc,CAAC;AAE/E,eAAO,MAAM,iBAAiB;;;;;;EAO5B,CAAC;AAEH,MAAM,WAAW,UAAU;IACzB,IAAI,EAAE,QAAQ,CAAC;IACf,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,OAAO,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC;CAClB;AAiGD,gDAAgD;AAChD,wBAAgB,aAAa,IAAI;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,WAAW,EAAE,MAAM,CAAA;CAAE,EAAE,CAKvE;AA+DD,MAAM,WAAW,kBAAkB;IACjC,IAAI,EAAE,UAAU,EAAE,CAAC;IACnB,KAAK,EAAE,MAAM,EAAE,CAAC;IAChB,kBAAkB,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,WAAW,EAAE,MAAM,CAAA;KAAE,EAAE,CAAC;CAC7D;AAED,wBAAsB,YAAY,CAChC,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,OAAO,iBAAiB,CAAC,GACvC,OAAO,CAAC,kBAAkB,CAAC,CAwB7B"}

package/dist/tools/pattern-audit.js

@@ -0,0 +1,184 @@
+/**
+ * pattern_audit — return the (repo × pattern) matrix for the patterns
+ * the cross-stack audit found inconsistently applied.
+ *
+ * Each pattern has a probe function that decides {present, evidence}
+ * for a given repo working tree. Patterns are intentionally cheap:
+ * file-exists checks, regex matches against well-known manifests,
+ * or directory presence. No AST.
+ */
+import { existsSync, readFileSync, readdirSync, statSync } from "node:fs";
+import { join } from "node:path";
+import { z } from "zod";
+import { KNOWN_REPOS, resolveAllRepoPaths } from "../config.js";
+export const PatternAuditInput = z.object({
+    patterns: z
+        .array(z.string())
+        .optional()
+        .describe("Optional subset of pattern names to evaluate. When omitted, evaluates all known patterns. See the description of `pattern` in each row for the full list."),
+});
+const PROBES = {
+    has_ci: {
+        description: "Repo has at least one .github/workflows/*.yml file. Audit finding #1 caught platform with zero workflows on main.",
+        probe: (root) => {
+            const dir = join(root, ".github", "workflows");
+            if (!existsSync(dir))
+                return { present: false, evidence: "no .github/workflows" };
+            const files = readdirSync(dir).filter((f) => f.endsWith(".yml") || f.endsWith(".yaml"));
+            return {
+                present: files.length > 0,
+                evidence: files.join(", ") || "(empty dir)",
+            };
+        },
+    },
+    has_openapi_contract_endpoint: {
+        description: "Repo exposes a /v1/contract HTTP endpoint (the codex/compile convention).",
+        probe: (root) => {
+            const hits = grepFirst(root, /["']\/v1\/contract["']/, ["src", "apps"]);
+            return hits
+                ? { present: true, evidence: hits }
+                : { present: false, evidence: "no /v1/contract reference" };
+        },
+    },
+    has_consume_surface_audit: {
+        description: "Repo has scripts/consume_surface_audit.py (compile-pdf's tripwire — banning re-implementation of an upstream's primitives).",
+        probe: (root) => {
+            const p = join(root, "scripts", "consume_surface_audit.py");
+            return existsSync(p)
+                ? { present: true, evidence: "scripts/consume_surface_audit.py" }
+                : { present: false, evidence: "not present" };
+        },
+    },
+    has_engine_purity_audit: {
+        description: "Repo has scripts/check_engine_purity.sh (lint-pdf's tripwire — banning analyzer-side imports of host services).",
+        probe: (root) => {
+            const p = join(root, "scripts", "check_engine_purity.sh");
+            return existsSync(p)
+                ? { present: true, evidence: "scripts/check_engine_purity.sh" }
+                : { present: false, evidence: "not present" };
+        },
+    },
+    has_openapi_descriptions_audit: {
+        description: "Repo has scripts/check_openapi_descriptions.py (lint-pdf's tripwire — every Pydantic Field must include description=).",
+        probe: (root) => {
+            const p = join(root, "scripts", "check_openapi_descriptions.py");
+            return existsSync(p)
+                ? { present: true, evidence: "scripts/check_openapi_descriptions.py" }
+                : { present: false, evidence: "not present" };
+        },
+    },
+    has_problem_details_errors: {
+        description: "Repo emits RFC 7807 Problem Details (audit finding #13: the org-aligned target error envelope).",
+        probe: (root) => {
+            const hits = grepFirst(root, /problem[-_]?details|application\/problem\+json|rfc7807/i, ["src", "apps", "packages"]);
+            return hits
+                ? { present: true, evidence: hits }
+                : { present: false, evidence: "no Problem Details reference" };
+        },
+    },
+    has_claude_md_deep: {
+        description: "CLAUDE.md is longer than 50 lines (a rough proxy for 'has architectural rules', not just process bullets).",
+        probe: (root) => {
+            const p = join(root, "CLAUDE.md");
+            if (!existsSync(p))
+                return { present: false, evidence: "no CLAUDE.md" };
+            const lines = readFileSync(p, "utf8").split("\n").length;
+            return {
+                present: lines >= 50,
+                evidence: `${lines} lines`,
+            };
+        },
+    },
+};
+/** Return all pattern names this tool knows. */
+export function knownPatterns() {
+    return Object.entries(PROBES).map(([name, p]) => ({
+        name,
+        description: p.description,
+    }));
+}
+/** Walk a few top-level directories looking for the first match of `re`. */
+function grepFirst(root, re, dirs) {
+    for (const dir of dirs) {
+        const p = join(root, dir);
+        if (!existsSync(p))
+            continue;
+        const hit = walkFirst(p, re, 0, 4);
+        if (hit)
+            return hit;
+    }
+    return null;
+}
+function walkFirst(dir, re, depth, maxDepth) {
+    if (depth > maxDepth)
+        return null;
+    let entries;
+    try {
+        entries = readdirSync(dir);
+    }
+    catch {
+        return null;
+    }
+    for (const name of entries) {
+        if (name === "node_modules" || name === ".git" || name === "dist")
+            continue;
+        const full = join(dir, name);
+        let s;
+        try {
+            s = statSync(full);
+        }
+        catch {
+            continue;
+        }
+        if (s.isDirectory()) {
+            const sub = walkFirst(full, re, depth + 1, maxDepth);
+            if (sub)
+                return sub;
+        }
+        else if (s.isFile() &&
+            /\.(ts|tsx|js|py|json|toml|yml|yaml|md)$/.test(name)) {
+            try {
+                const text = readFileSync(full, "utf8");
+                if (re.test(text)) {
+                    // Find the first line that hits
+                    const lines = text.split("\n");
+                    for (let i = 0; i < lines.length; i++) {
+                        const line = lines[i];
+                        if (line !== undefined && re.test(line)) {
+                            return `${full}:${i + 1}`;
+                        }
+                    }
+                    return full;
+                }
+            }
+            catch {
+                // ignore binary/unreadable
+            }
+        }
+    }
+    return null;
+}
+export async function patternAudit(input) {
+    const paths = resolveAllRepoPaths();
+    const notes = [];
+    const probesToRun = input.patterns ?? Object.keys(PROBES);
+    const rows = [];
+    for (const repo of KNOWN_REPOS) {
+        const root = paths[repo];
+        if (!root) {
+            notes.push(`repo ${repo}: not configured`);
+            continue;
+        }
+        for (const name of probesToRun) {
+            const probe = PROBES[name];
+            if (!probe) {
+                notes.push(`pattern '${name}' is not known; ignored`);
+                continue;
+            }
+            const result = probe.probe(root);
+            rows.push({ repo, pattern: name, ...result });
+        }
+    }
+    return { rows, notes, available_patterns: knownPatterns() };
+}
+//# sourceMappingURL=pattern-audit.js.map

package/dist/tools/pattern-audit.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"pattern-audit.js","sourceRoot":"","sources":["../../src/tools/pattern-audit.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AACH,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,WAAW,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AAC1E,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,WAAW,EAAiB,mBAAmB,EAAE,MAAM,cAAc,CAAC;AAE/E,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC,CAAC,MAAM,CAAC;IACxC,QAAQ,EAAE,CAAC;SACR,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;SACjB,QAAQ,EAAE;SACV,QAAQ,CACP,2JAA2J,CAC5J;CACJ,CAAC,CAAC;AAYH,MAAM,MAAM,GAA0D;IACpE,MAAM,EAAE;QACN,WAAW,EACT,mHAAmH;QACrH,KAAK,EAAE,CAAC,IAAI,EAAE,EAAE;YACd,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,EAAE,SAAS,EAAE,WAAW,CAAC,CAAC;YAC/C,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;gBAClB,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,sBAAsB,EAAE,CAAC;YAC9D,MAAM,KAAK,GAAG,WAAW,CAAC,GAAG,CAAC,CAAC,MAAM,CACnC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,CACjD,CAAC;YACF,OAAO;gBACL,OAAO,EAAE,KAAK,CAAC,MAAM,GAAG,CAAC;gBACzB,QAAQ,EAAE,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,aAAa;aAC5C,CAAC;QACJ,CAAC;KACF;IAED,6BAA6B,EAAE;QAC7B,WAAW,EACT,2EAA2E;QAC7E,KAAK,EAAE,CAAC,IAAI,EAAE,EAAE;YACd,MAAM,IAAI,GAAG,SAAS,CAAC,IAAI,EAAE,wBAAwB,EAAE,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC;YACxE,OAAO,IAAI;gBACT,CAAC,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE;gBACnC,CAAC,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,2BAA2B,EAAE,CAAC;QAChE,CAAC;KACF;IAED,yBAAyB,EAAE;QACzB,WAAW,EACT,6HAA6H;QAC/H,KAAK,EAAE,CAAC,IAAI,EAAE,EAAE;YACd,MAAM,CAAC,GAAG,IAAI,CAAC,IAAI,EAAE,SAAS,EAAE,0BAA0B,CAAC,CAAC;YAC5D,OAAO,UAAU,CAAC,CAAC,CAAC;gBAClB,CAAC,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,kCAAkC,EAAE;gBACjE,CAAC,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,aAAa,EAAE,CAAC;QAClD,CAAC;KACF;IAED,uBAAuB,EAAE;QACvB,WAAW,EACT,iHAAiH;QACnH,KAAK,EAAE,CAAC,IAAI,EAAE,EAAE;YACd,MAAM,CAAC,GAAG,IAAI,CAAC,IAAI,EAAE,SAAS,EAAE,wBAAwB,CAAC,CAAC;YAC1D,OAAO,UAAU,CAAC,CAAC,CAAC;gBAClB,CAAC,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,gCAAgC,EAAE;gBAC/D,CAAC,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,aAAa,EAAE,CAAC;QAClD,CAAC;KACF;IAED,8BAA8B,EAAE;QAC9B,WAAW,EACT,wHAAwH;QAC1H,KAAK,EAAE,CAAC,IAAI,EAAE,EAAE;YACd,MAAM,CAAC,GAAG,IAAI,CAAC,IAAI,EAAE,SAAS,EAAE,+BAA+B,CAAC,CAAC;YACjE,OAAO,UAAU,CAAC,CAAC,CAAC;gBAClB,CAAC,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,uCAAuC,EAAE;gBACtE,CAAC,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,aAAa,EAAE,CAAC;QAClD,CAAC;KACF;IAED,0BAA0B,EAAE;QAC1B,WAAW,EACT,iGAAiG;QACnG,KAAK,EAAE,CAAC,IAAI,EAAE,EAAE;YACd,MAAM,IAAI,GAAG,SAAS,CACpB,IAAI,EACJ,yDAAyD,EACzD,CAAC,KAAK,EAAE,MAAM,EAAE,UAAU,CAAC,CAC5B,CAAC;YACF,OAAO,IAAI;gBACT,CAAC,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE;gBACnC,CAAC,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,8BAA8B,EAAE,CAAC;QACnE,CAAC;KACF;IAED,kBAAkB,EAAE;QAClB,WAAW,EACT,4GAA4G;QAC9G,KAAK,EAAE,CAAC,IAAI,EAAE,EAAE;YACd,MAAM,CAAC,GAAG,IAAI,CAAC,IAAI,EAAE,WAAW,CAAC,CAAC;YAClC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC;gBAAE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,cAAc,EAAE,CAAC;YACxE,MAAM,KAAK,GAAG,YAAY,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC;YACzD,OAAO;gBACL,OAAO,EAAE,KAAK,IAAI,EAAE;gBACpB,QAAQ,EAAE,GAAG,KAAK,QAAQ;aAC3B,CAAC;QACJ,CAAC;KACF;CACF,CAAC;AAEF,gDAAgD;AAChD,MAAM,UAAU,aAAa;IAC3B,OAAO,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QAChD,IAAI;QACJ,WAAW,EAAE,CAAC,CAAC,WAAW;KAC3B,CAAC,CAAC,CAAC;AACN,CAAC;AAED,4EAA4E;AAC5E,SAAS,SAAS,CAAC,IAAY,EAAE,EAAU,EAAE,IAAc;IACzD,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;QACvB,MAAM,CAAC,GAAG,IAAI,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;QAC1B,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC;YAAE,SAAS;QAC7B,MAAM,GAAG,GAAG,SAAS,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC;QACnC,IAAI,GAAG;YAAE,OAAO,GAAG,CAAC;IACtB,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,SAAS,CAChB,GAAW,EACX,EAAU,EACV,KAAa,EACb,QAAgB;IAEhB,IAAI,KAAK,GAAG,QAAQ;QAAE,OAAO,IAAI,CAAC;IAClC,IAAI,OAAiB,CAAC;IACtB,IAAI,CAAC;QACH,OAAO,GAAG,WAAW,CAAC,GAAG,CAAC,CAAC;IAC7B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;IACD,KAAK,MAAM,IAAI,IAAI,OAAO,EAAE,CAAC;QAC3B,IAAI,IAAI,KAAK,cAAc,IAAI,IAAI,KAAK,MAAM,IAAI,IAAI,KAAK,MAAM;YAAE,SAAS;QAC5E,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;QAC7B,IAAI,CAA8B,CAAC;QACnC,IAAI,CAAC;YACH,CAAC,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC;QACrB,CAAC;QAAC,MAAM,CAAC;YACP,SAAS;QACX,CAAC;QACD,IAAI,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC;YACpB,MAAM,GAAG,GAAG,SAAS,CAAC,IAAI,EAAE,EAAE,EAAE,KAAK,GAAG,CAAC,EAAE,QAAQ,CAAC,CAAC;YACrD,IAAI,GAAG;gBAAE,OAAO,GAAG,CAAC;QACtB,CAAC;aAAM,IACL,CAAC,CAAC,MAAM,EAAE;YACV,yCAAyC,CAAC,IAAI,CAAC,IAAI,CAAC,EACpD,CAAC;YACD,IAAI,CAAC;gBACH,MAAM,IAAI,GAAG,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;gBACxC,IAAI,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;oBAClB,gCAAgC;oBAChC,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;oBAC/B,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;wBACtC,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;wBACtB,IAAI,IAAI,KAAK,SAAS,IAAI,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;4BACxC,OAAO,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;wBAC5B,CAAC;oBACH,CAAC;oBACD,OAAO,IAAI,CAAC;gBACd,CAAC;YACH,CAAC;YAAC,MAAM,CAAC;gBACP,2BAA2B;YAC7B,CAAC;QACH,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAQD,MAAM,CAAC,KAAK,UAAU,YAAY,CAChC,KAAwC;IAExC,MAAM,KAAK,GAAG,mBAAmB,EAAE,CAAC;IACpC,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,MAAM,WAAW,GAAG,KAAK,CAAC,QAAQ,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IAE1D,MAAM,IAAI,GAAiB,EAAE,CAAC;IAC9B,KAAK,MAAM,IAAI,IAAI,WAAW,EAAE,CAAC;QAC/B,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC;QACzB,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,KAAK,CAAC,IAAI,CAAC,QAAQ,IAAI,kBAAkB,CAAC,CAAC;YAC3C,SAAS;QACX,CAAC;QACD,KAAK,MAAM,IAAI,IAAI,WAAW,EAAE,CAAC;YAC/B,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC;YAC3B,IAAI,CAAC,KAAK,EAAE,CAAC;gBACX,KAAK,CAAC,IAAI,CAAC,YAAY,IAAI,yBAAyB,CAAC,CAAC;gBACtD,SAAS;YACX,CAAC;YACD,MAAM,MAAM,GAAG,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YACjC,IAAI,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,GAAG,MAAM,EAAE,CAAC,CAAC;QAChD,CAAC;IACH,CAAC;IAED,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,kBAAkB,EAAE,aAAa,EAAE,EAAE,CAAC;AAC9D,CAAC"}

package/dist/tools/stack-health-grid.d.ts

@@ -0,0 +1,35 @@
+/**
+ * stack_health_grid — fetch /healthz (and /v1/contract when available)
+ * across the configured prod URLs for the stack, in parallel, and
+ * return a grid with status code + latency + version skew.
+ *
+ * Audit finding #15 in the cross-stack audit caught five different
+ * health/contract endpoint patterns. This tool branches per-service
+ * so the caller doesn't have to.
+ */
+import { z } from "zod";
+import { type RepoName } from "../config.js";
+export declare const StackHealthGridInput: z.ZodObject<{
+    repos: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
+    timeout_ms: z.ZodDefault<z.ZodNumber>;
+}, "strip", z.ZodTypeAny, {
+    timeout_ms: number;
+    repos?: string[] | undefined;
+}, {
+    repos?: string[] | undefined;
+    timeout_ms?: number | undefined;
+}>;
+export interface HealthRow {
+    repo: RepoName;
+    url: string;
+    endpoint: "healthz" | "v1/healthz" | "health" | "ready" | "v1/contract";
+    status: number | "timeout" | "error";
+    latency_ms: number | null;
+    body_summary: string;
+}
+export interface StackHealthGridResult {
+    rows: HealthRow[];
+    notes: string[];
+}
+export declare function stackHealthGrid(input: z.infer<typeof StackHealthGridInput>): Promise<StackHealthGridResult>;
+//# sourceMappingURL=stack-health-grid.d.ts.map

package/dist/tools/stack-health-grid.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"stack-health-grid.d.ts","sourceRoot":"","sources":["../../src/tools/stack-health-grid.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AACH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAA0B,KAAK,QAAQ,EAAE,MAAM,cAAc,CAAC;AAErE,eAAO,MAAM,oBAAoB;;;;;;;;;EAe/B,CAAC;AAEH,MAAM,WAAW,SAAS;IACxB,IAAI,EAAE,QAAQ,CAAC;IACf,GAAG,EAAE,MAAM,CAAC;IACZ,QAAQ,EAAE,SAAS,GAAG,YAAY,GAAG,QAAQ,GAAG,OAAO,GAAG,aAAa,CAAC;IACxE,MAAM,EAAE,MAAM,GAAG,SAAS,GAAG,OAAO,CAAC;IACrC,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,YAAY,EAAE,MAAM,CAAC;CACtB;AAsED,MAAM,WAAW,qBAAqB;IACpC,IAAI,EAAE,SAAS,EAAE,CAAC;IAClB,KAAK,EAAE,MAAM,EAAE,CAAC;CACjB;AAED,wBAAsB,eAAe,CACnC,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,OAAO,oBAAoB,CAAC,GAC1C,OAAO,CAAC,qBAAqB,CAAC,CAmChC"}