@promptci/core 0.0.1 → 0.2.0

package/dist/within-section-dedup.js

@@ -0,0 +1,148 @@
+/**
+ * Within-section semantic dedup detector (FEAT-013).
+ *
+ * The cross-file `detectDuplicates` detector works at section granularity and
+ * misses a single section that restates the same point several ways. This
+ * detector looks *inside* a section: for sections with more than five
+ * paragraphs, it computes pairwise Jaccard similarity on the paragraphs and
+ * flags any pair that is ≥ 0.65 similar, naming the paragraph numbers.
+ *
+ * Info severity only — near-duplicate prose within one section is worth a
+ * gentle nudge, not a hard failure. Deterministic: no clock, network, or
+ * randomness.
+ */
+import * as crypto from 'node:crypto';
+import { INSTRUCTION_FILE_TYPES } from './types.js';
+import { snippet } from './evidence.js';
+import { fileIdPath } from './finding-id.js';
+/** Persistent, always-loaded instruction files this detector applies to. */
+const TARGET_FILE_TYPES = INSTRUCTION_FILE_TYPES;
+const MIN_PARAGRAPHS = 6; // "> 5 paragraphs"
+const PARAGRAPH_JACCARD_THRESHOLD = 0.65;
+const MIN_PARAGRAPH_CHARS = 40; // normalised; shorter paragraphs are too noisy
+const MIN_PARAGRAPH_TOKENS = 8;
+/** Normalise paragraph text for comparison: lowercase, strip markdown, collapse ws. */
+function normalize(text) {
+    return text
+        .toLowerCase()
+        .replace(/^#{1,6}\s+/gm, '')
+        .replace(/^[\s]*[-*+]\s+/gm, '')
+        .replace(/^[\s]*\d+[.)]\s+/gm, '')
+        .replace(/\s+/g, ' ')
+        .trim();
+}
+function tokenize(text) {
+    return new Set(text.match(/\b\w+\b/g) ?? []);
+}
+function jaccard(a, b) {
+    if (a.size === 0 || b.size === 0)
+        return 0;
+    let intersection = 0;
+    for (const t of a)
+        if (b.has(t))
+            intersection++;
+    return intersection / (a.size + b.size - intersection);
+}
+/**
+ * Split a section into paragraphs (blank-line separated), tracking each
+ * paragraph's 1-based number and its start line within the file. Code-fence
+ * paragraphs are skipped entirely — a repeated code block is the concern of the
+ * duplicate-section detector, not prose dedup.
+ */
+function splitParagraphs(section) {
+    const lines = section.text.split('\n');
+    const paragraphs = [];
+    let current = [];
+    let currentStart = section.startLine;
+    let paragraphNumber = 0;
+    const flush = () => {
+        if (current.length === 0)
+            return;
+        paragraphNumber++;
+        const text = current.join('\n');
+        if (!text.includes('```') && !text.includes('~~~')) {
+            const norm = normalize(text);
+            const tokens = tokenize(norm);
+            if (norm.length >= MIN_PARAGRAPH_CHARS && tokens.size >= MIN_PARAGRAPH_TOKENS) {
+                paragraphs.push({ number: paragraphNumber, text, startLine: currentStart, tokens });
+            }
+        }
+        current = [];
+    };
+    for (let i = 0; i < lines.length; i++) {
+        const line = lines[i] ?? '';
+        if (line.trim() === '') {
+            flush();
+        }
+        else {
+            if (current.length === 0)
+                currentStart = section.startLine + i;
+            current.push(line);
+        }
+    }
+    flush();
+    return paragraphs;
+}
+function issueId(filePath, startLine) {
+    const hash = crypto
+        .createHash('sha1')
+        .update(`within-section-dup:${filePath}:${startLine}`)
+        .digest('hex')
+        .slice(0, 12);
+    return `within-section-dup-${hash}`;
+}
+export function detectWithinSectionDedup(files) {
+    const issues = [];
+    for (const file of files) {
+        if (!TARGET_FILE_TYPES.has(file.fileType))
+            continue;
+        for (const section of file.sections) {
+            const paragraphs = splitParagraphs(section);
+            // "> 5 paragraphs" is measured against the qualifying (comparable)
+            // paragraphs — trivial one-liners never counted toward the section total.
+            if (paragraphs.length < MIN_PARAGRAPHS)
+                continue;
+            // Find the single strongest similar pair (and how many pairs cross the bar).
+            let best = null;
+            let pairCount = 0;
+            for (let i = 0; i < paragraphs.length; i++) {
+                for (let j = i + 1; j < paragraphs.length; j++) {
+                    const sim = jaccard(paragraphs[i].tokens, paragraphs[j].tokens);
+                    if (sim >= PARAGRAPH_JACCARD_THRESHOLD) {
+                        pairCount++;
+                        if (!best || sim > best.sim)
+                            best = { a: paragraphs[i], b: paragraphs[j], sim };
+                    }
+                }
+            }
+            if (!best)
+                continue;
+            const heading = section.heading ?? '(untitled section)';
+            const pct = Math.round(best.sim * 100);
+            const morePairs = pairCount > 1 ? ` (${pairCount} similar pairs in total)` : '';
+            issues.push({
+                id: issueId(fileIdPath(file), section.startLine),
+                severity: 'info',
+                category: 'duplicate',
+                title: `Possible repetition within section: ${heading}`,
+                summary: `Within "${heading}", paragraphs ${best.a.number} and ${best.b.number} are about ` +
+                    `${pct}% similar${morePairs}. The section may be restating the same point several ` +
+                    `ways — consider consolidating.`,
+                filePaths: [file.path],
+                locations: [
+                    { filePath: file.path, startLine: best.a.startLine, endLine: best.a.startLine },
+                    { filePath: file.path, startLine: best.b.startLine, endLine: best.b.startLine },
+                ],
+                evidence: [
+                    `Paragraph ${best.a.number}: "${snippet(best.a.text, 120)}"`,
+                    `Paragraph ${best.b.number}: "${snippet(best.b.text, 120)}"`,
+                ],
+                recommendation: 'Merge the near-duplicate paragraphs into one clear statement. If both are ' +
+                    'intentional (e.g. a summary and a detailed version), make the distinction explicit.',
+                confidence: 0.5,
+            });
+        }
+    }
+    return issues;
+}
+//# sourceMappingURL=within-section-dedup.js.map

package/dist/within-section-dedup.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"within-section-dedup.js","sourceRoot":"","sources":["../src/within-section-dedup.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,OAAO,KAAK,MAAM,MAAM,aAAa,CAAC;AAEtC,OAAO,EAAE,sBAAsB,EAAE,MAAM,YAAY,CAAC;AACpD,OAAO,EAAE,OAAO,EAAE,MAAM,eAAe,CAAC;AACxC,OAAO,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAC;AAE7C,4EAA4E;AAC5E,MAAM,iBAAiB,GAAG,sBAAsB,CAAC;AAEjD,MAAM,cAAc,GAAG,CAAC,CAAC,CAAC,mBAAmB;AAC7C,MAAM,2BAA2B,GAAG,IAAI,CAAC;AACzC,MAAM,mBAAmB,GAAG,EAAE,CAAC,CAAC,+CAA+C;AAC/E,MAAM,oBAAoB,GAAG,CAAC,CAAC;AAU/B,uFAAuF;AACvF,SAAS,SAAS,CAAC,IAAY;IAC7B,OAAO,IAAI;SACR,WAAW,EAAE;SACb,OAAO,CAAC,cAAc,EAAE,EAAE,CAAC;SAC3B,OAAO,CAAC,kBAAkB,EAAE,EAAE,CAAC;SAC/B,OAAO,CAAC,oBAAoB,EAAE,EAAE,CAAC;SACjC,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC;SACpB,IAAI,EAAE,CAAC;AACZ,CAAC;AAED,SAAS,QAAQ,CAAC,IAAY;IAC5B,OAAO,IAAI,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,IAAI,EAAE,CAAC,CAAC;AAC/C,CAAC;AAED,SAAS,OAAO,CAAC,CAAc,EAAE,CAAc;IAC7C,IAAI,CAAC,CAAC,IAAI,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,KAAK,CAAC;QAAE,OAAO,CAAC,CAAC;IAC3C,IAAI,YAAY,GAAG,CAAC,CAAC;IACrB,KAAK,MAAM,CAAC,IAAI,CAAC;QAAE,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;YAAE,YAAY,EAAE,CAAC;IAChD,OAAO,YAAY,GAAG,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,IAAI,GAAG,YAAY,CAAC,CAAC;AACzD,CAAC;AAED;;;;;GAKG;AACH,SAAS,eAAe,CAAC,OAA2B;IAClD,MAAM,KAAK,GAAG,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IACvC,MAAM,UAAU,GAAgB,EAAE,CAAC;IACnC,IAAI,OAAO,GAAa,EAAE,CAAC;IAC3B,IAAI,YAAY,GAAG,OAAO,CAAC,SAAS,CAAC;IACrC,IAAI,eAAe,GAAG,CAAC,CAAC;IAExB,MAAM,KAAK,GAAG,GAAG,EAAE;QACjB,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO;QACjC,eAAe,EAAE,CAAC;QAClB,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAChC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;YACnD,MAAM,IAAI,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC;YAC7B,MAAM,MAAM,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC;YAC9B,IAAI,IAAI,CAAC,MAAM,IAAI,mBAAmB,IAAI,MAAM,CAAC,IAAI,IAAI,oBAAoB,EAAE,CAAC;gBAC9E,UAAU,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,eAAe,EAAE,IAAI,EAAE,SAAS,EAAE,YAAY,EAAE,MAAM,EAAE,CAAC,CAAC;YACtF,CAAC;QACH,CAAC;QACD,OAAO,GAAG,EAAE,CAAC;IACf,CAAC,CAAC;IAEF,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACtC,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;QAC5B,IAAI,IAAI,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC;YACvB,KAAK,EAAE,CAAC;QACV,CAAC;aAAM,CAAC;YACN,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;gBAAE,YAAY,GAAG,OAAO,CAAC,SAAS,GAAG,CAAC,CAAC;YAC/D,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACrB,CAAC;IACH,CAAC;IACD,KAAK,EAAE,CAAC;IAER,OAAO,UAAU,CAAC;AACpB,CAAC;AAED,SAAS,OAAO,CAAC,QAAgB,EAAE,SAAiB;IAClD,MAAM,IAAI,GAAG,MAAM;SAChB,UAAU,CAAC,MAAM,CAAC;SAClB,MAAM,CAAC,sBAAsB,QAAQ,IAAI,SAAS,EAAE,CAAC;SACrD,MAAM,CAAC,KAAK,CAAC;SACb,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IAChB,OAAO,sBAAsB,IAAI,EAAE,CAAC;AACtC,CAAC;AAED,MAAM,UAAU,wBAAwB,CAAC,KAAwB;IAC/D,MAAM,MAAM,GAAoB,EAAE,CAAC;IAEnC,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC;YAAE,SAAS;QAEpD,KAAK,MAAM,OAAO,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;YACpC,MAAM,UAAU,GAAG,eAAe,CAAC,OAAO,CAAC,CAAC;YAC5C,mEAAmE;YACnE,0EAA0E;YAC1E,IAAI,UAAU,CAAC,MAAM,GAAG,cAAc;gBAAE,SAAS;YAEjD,6EAA6E;YAC7E,IAAI,IAAI,GAAuD,IAAI,CAAC;YACpE,IAAI,SAAS,GAAG,CAAC,CAAC;YAElB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,UAAU,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;gBAC3C,KAAK,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,UAAU,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;oBAC/C,MAAM,GAAG,GAAG,OAAO,CAAC,UAAU,CAAC,CAAC,CAAE,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC,CAAE,CAAC,MAAM,CAAC,CAAC;oBAClE,IAAI,GAAG,IAAI,2BAA2B,EAAE,CAAC;wBACvC,SAAS,EAAE,CAAC;wBACZ,IAAI,CAAC,IAAI,IAAI,GAAG,GAAG,IAAI,CAAC,GAAG;4BAAE,IAAI,GAAG,EAAE,CAAC,EAAE,UAAU,CAAC,CAAC,CAAE,EAAE,CAAC,EAAE,UAAU,CAAC,CAAC,CAAE,EAAE,GAAG,EAAE,CAAC;oBACpF,CAAC;gBACH,CAAC;YACH,CAAC;YAED,IAAI,CAAC,IAAI;gBAAE,SAAS;YAEpB,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,IAAI,oBAAoB,CAAC;YACxD,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,GAAG,GAAG,CAAC,CAAC;YACvC,MAAM,SAAS,GAAG,SAAS,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,SAAS,0BAA0B,CAAC,CAAC,CAAC,EAAE,CAAC;YAEhF,MAAM,CAAC,IAAI,CAAC;gBACV,EAAE,EAAE,OAAO,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,OAAO,CAAC,SAAS,CAAC;gBAChD,QAAQ,EAAE,MAAM;gBAChB,QAAQ,EAAE,WAAW;gBACrB,KAAK,EAAE,uCAAuC,OAAO,EAAE;gBACvD,OAAO,EACL,WAAW,OAAO,iBAAiB,IAAI,CAAC,CAAC,CAAC,MAAM,QAAQ,IAAI,CAAC,CAAC,CAAC,MAAM,aAAa;oBAClF,GAAG,GAAG,YAAY,SAAS,wDAAwD;oBACnF,gCAAgC;gBAClC,SAAS,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC;gBACtB,SAAS,EAAE;oBACT,EAAE,QAAQ,EAAE,IAAI,CAAC,IAAI,EAAE,SAAS,EAAE,IAAI,CAAC,CAAC,CAAC,SAAS,EAAE,OAAO,EAAE,IAAI,CAAC,CAAC,CAAC,SAAS,EAAE;oBAC/E,EAAE,QAAQ,EAAE,IAAI,CAAC,IAAI,EAAE,SAAS,EAAE,IAAI,CAAC,CAAC,CAAC,SAAS,EAAE,OAAO,EAAE,IAAI,CAAC,CAAC,CAAC,SAAS,EAAE;iBAChF;gBACD,QAAQ,EAAE;oBACR,aAAa,IAAI,CAAC,CAAC,CAAC,MAAM,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,EAAE,GAAG,CAAC,GAAG;oBAC5D,aAAa,IAAI,CAAC,CAAC,CAAC,MAAM,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,EAAE,GAAG,CAAC,GAAG;iBAC7D;gBACD,cAAc,EACZ,4EAA4E;oBAC5E,qFAAqF;gBACvF,UAAU,EAAE,GAAG;aAChB,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC"}

package/dist/workspace-manifests.d.ts

@@ -0,0 +1,80 @@
+/**
+ * Workspace package.json facts shared by the script-validity checks
+ * (command-validity and manifest-consistency).
+ *
+ * A package-manager command is only a "missing script" when nothing the repo
+ * can run under that name exists. Two kinds of names are never scripts and must
+ * not be reported as missing:
+ *
+ *  - Dependencies and their binaries: `pnpm vitest run` and `yarn tsc --noEmit`
+ *    fall through to the installed binary when no script of that name exists.
+ *  - Scripts defined by a workspace package rather than the root manifest:
+ *    `pnpm --filter web dev` or `pnpm -r build` in a monorepo.
+ *
+ * `node_modules/.bin` is not available when scanning a checkout, so a binary is
+ * accepted only when a package that provides it is declared in some workspace
+ * manifest (or, for a dependency whose name IS the command, the dependency
+ * itself). Everything here is deterministic and offline.
+ */
+import type { RepoContext } from './repo-context.js';
+export type WorkspaceManifest = {
+    /** Repo-relative POSIX directory of the package ('.' = repo root). */
+    dir: string;
+    name?: string;
+    scripts: Record<string, string>;
+    /**
+     * Names from dependencies, devDependencies, peerDependencies and
+     * optionalDependencies, minus `workspace:` links to sibling packages (those
+     * are packages of this repo, not installed tools).
+     */
+    dependencies: string[];
+    /**
+     * Version spec per dependency named in `dependencies` (first block wins:
+     * dependencies, devDependencies, peerDependencies, optionalDependencies).
+     * Optional so hand-built manifests keep type-checking.
+     */
+    versions?: Record<string, string>;
+    /** Binary names the package itself exposes (`bin`). */
+    bins: string[];
+};
+export type WorkspaceDiscovery = {
+    manifests: WorkspaceManifest[];
+    /** More manifests matched than were read: the list is a sample, not the whole workspace. */
+    truncated: boolean;
+};
+export declare function parseWorkspaceManifest(dir: string, raw: string): WorkspaceManifest | undefined;
+/**
+ * `packages:` entries of pnpm-workspace.yaml — the small subset of YAML it
+ * uses: a block list (indented or not) or a flow list (`['a/*', "b/*"]`,
+ * possibly across lines).
+ */
+export declare function pnpmWorkspaceGlobs(rawYaml: string | undefined): string[];
+/**
+ * Read the root manifest and every workspace package manifest. Workspace
+ * directories come from the declared `workspaces` globs (package.json or
+ * pnpm-workspace.yaml) or, when none are declared, the conventional
+ * `apps/`, `packages/` and `libs/` roots. Only dependency trees and VCS
+ * directories are ignored — a declared glob may legitimately reach
+ * `tools/build/`. Paths the scan's `exclude` patterns cover (`isExcluded`) are
+ * never read.
+ */
+export declare function discoverWorkspaceManifests(repoRoot: string, rawRootPackageJson: string | undefined, isExcluded?: (posixPath: string) => boolean): Promise<WorkspaceDiscovery>;
+/**
+ * True when `pnpm|yarn|bun <name>` would run an installed binary:
+ *  - a workspace package exposes it (`bin`);
+ *  - a dependency is literally named `<name>`; or
+ *  - `<name>` is a well-known tool binary AND a package providing it is declared.
+ *
+ * When workspace discovery is absent or was truncated the declared packages are
+ * not the whole picture, so a well-known tool binary is accepted unconditionally.
+ */
+export declare function isKnownBinary(context: RepoContext, name: string): boolean;
+/** True when the root manifest or any workspace package defines the script. */
+export declare function anyWorkspaceHasScript(context: RepoContext, name: string): boolean;
+/**
+ * Workspaces a pnpm/npm/yarn selector (package name, path, or glob) refers to.
+ * `*`, `**` and exclusion/dependents selectors (`!web`, `[origin/main]`) select
+ * every workspace — they cannot be evaluated statically, so stay permissive.
+ */
+export declare function selectWorkspaces(context: RepoContext, selector: string): WorkspaceManifest[];
+//# sourceMappingURL=workspace-manifests.d.ts.map

package/dist/workspace-manifests.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"workspace-manifests.d.ts","sourceRoot":"","sources":["../src/workspace-manifests.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAOH,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAErD,MAAM,MAAM,iBAAiB,GAAG;IAC9B,sEAAsE;IACtE,GAAG,EAAE,MAAM,CAAC;IACZ,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAChC;;;;OAIG;IACH,YAAY,EAAE,MAAM,EAAE,CAAC;IACvB;;;;OAIG;IACH,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAClC,uDAAuD;IACvD,IAAI,EAAE,MAAM,EAAE,CAAC;CAChB,CAAC;AAEF,MAAM,MAAM,kBAAkB,GAAG;IAC/B,SAAS,EAAE,iBAAiB,EAAE,CAAC;IAC/B,4FAA4F;IAC5F,SAAS,EAAE,OAAO,CAAC;CACpB,CAAC;AAgFF,wBAAgB,sBAAsB,CAAC,GAAG,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,iBAAiB,GAAG,SAAS,CA2B9F;AA0BD;;;;GAIG;AACH,wBAAgB,kBAAkB,CAAC,OAAO,EAAE,MAAM,GAAG,SAAS,GAAG,MAAM,EAAE,CAiCxE;AAkBD;;;;;;;;GAQG;AACH,wBAAsB,0BAA0B,CAC9C,QAAQ,EAAE,MAAM,EAChB,kBAAkB,EAAE,MAAM,GAAG,SAAS,EACtC,UAAU,GAAE,CAAC,SAAS,EAAE,MAAM,KAAK,OAAqB,GACvD,OAAO,CAAC,kBAAkB,CAAC,CAuC7B;AAmBD;;;;;;;;GAQG;AACH,wBAAgB,aAAa,CAAC,OAAO,EAAE,WAAW,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAQzE;AAED,+EAA+E;AAC/E,wBAAgB,qBAAqB,CAAC,OAAO,EAAE,WAAW,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAGjF;AAED;;;;GAIG;AACH,wBAAgB,gBAAgB,CAAC,OAAO,EAAE,WAAW,EAAE,QAAQ,EAAE,MAAM,GAAG,iBAAiB,EAAE,CAgB5F"}

package/dist/workspace-manifests.js

@@ -0,0 +1,333 @@
+/**
+ * Workspace package.json facts shared by the script-validity checks
+ * (command-validity and manifest-consistency).
+ *
+ * A package-manager command is only a "missing script" when nothing the repo
+ * can run under that name exists. Two kinds of names are never scripts and must
+ * not be reported as missing:
+ *
+ *  - Dependencies and their binaries: `pnpm vitest run` and `yarn tsc --noEmit`
+ *    fall through to the installed binary when no script of that name exists.
+ *  - Scripts defined by a workspace package rather than the root manifest:
+ *    `pnpm --filter web dev` or `pnpm -r build` in a monorepo.
+ *
+ * `node_modules/.bin` is not available when scanning a checkout, so a binary is
+ * accepted only when a package that provides it is declared in some workspace
+ * manifest (or, for a dependency whose name IS the command, the dependency
+ * itself). Everything here is deterministic and offline.
+ */
+import * as fs from 'node:fs/promises';
+import * as path from 'node:path';
+import micromatch from 'micromatch';
+import { listFiles, resolveReadableWithinRoot, resolveWithinRoot } from './ai-config.js';
+import { MAX_FILE_SIZE } from './scanner.js';
+/** Upper bound on workspace manifests read, so a huge repo cannot stall a scan. */
+const MAX_WORKSPACE_MANIFESTS = 200;
+/** Conventional workspace roots, used when no `workspaces` globs are declared. */
+const CONVENTIONAL_WORKSPACE_GLOBS = ['apps/*', 'packages/*', 'libs/*'];
+const DEPENDENCY_BLOCKS = ['dependencies', 'devDependencies', 'peerDependencies', 'optionalDependencies'];
+// ── Well-known binaries ───────────────────────────────────────────────────────
+/**
+ * Common JS/TS tool binaries and the packages that install them. A bare
+ * `pnpm <bin>` / `yarn <bin>` runs the installed binary, so `pnpm prisma
+ * migrate` is valid when `prisma` is a dependency somewhere in the workspace —
+ * and a missing script when nothing installs it.
+ */
+const BIN_PROVIDERS = {
+    // compilers / bundlers / transpilers
+    tsc: ['typescript'], tsserver: ['typescript'], tsx: ['tsx'], 'ts-node': ['ts-node'],
+    tsup: ['tsup'], 'tsc-alias': ['tsc-alias'], 'vue-tsc': ['vue-tsc'], esbuild: ['esbuild'],
+    rollup: ['rollup'], webpack: ['webpack-cli', 'webpack'], vite: ['vite'], swc: ['@swc/cli'],
+    babel: ['@babel/cli'], parcel: ['parcel'], rspack: ['@rspack/cli'], unbuild: ['unbuild'],
+    bunchee: ['bunchee'],
+    // lint / format / type tools
+    eslint: ['eslint'], prettier: ['prettier'], biome: ['@biomejs/biome'], oxlint: ['oxlint'],
+    stylelint: ['stylelint'], knip: ['knip'], depcheck: ['depcheck'], madge: ['madge'],
+    commitlint: ['@commitlint/cli'], 'svelte-check': ['svelte-check'], typedoc: ['typedoc'],
+    'size-limit': ['size-limit'],
+    // test runners
+    vitest: ['vitest'], jest: ['jest'], mocha: ['mocha'], ava: ['ava'],
+    playwright: ['@playwright/test', 'playwright'], cypress: ['cypress'],
+    storybook: ['storybook', '@storybook/cli'], msw: ['msw'],
+    // monorepo / release
+    turbo: ['turbo'], nx: ['nx'], lerna: ['lerna'], changeset: ['@changesets/cli'],
+    'semantic-release': ['semantic-release'], husky: ['husky'], 'lint-staged': ['lint-staged'],
+    // frameworks
+    next: ['next'], nuxt: ['nuxt'], nuxi: ['nuxt', 'nuxi'], astro: ['astro'], remix: ['@remix-run/dev'],
+    expo: ['expo'], eas: ['eas-cli'], 'react-native': ['react-native'], ng: ['@angular/cli'],
+    nest: ['@nestjs/cli'], gatsby: ['gatsby'], docusaurus: ['@docusaurus/core'], vitepress: ['vitepress'],
+    tauri: ['@tauri-apps/cli'], electron: ['electron'], 'electron-builder': ['electron-builder'],
+    sanity: ['sanity', '@sanity/cli'], strapi: ['@strapi/strapi'],
+    // data / infra / deploy
+    prisma: ['prisma'], 'drizzle-kit': ['drizzle-kit'], knex: ['knex'], typeorm: ['typeorm'],
+    sequelize: ['sequelize-cli'], supabase: ['supabase'], wrangler: ['wrangler'], vercel: ['vercel'],
+    netlify: ['netlify-cli'], firebase: ['firebase-tools'], sst: ['sst'], cdk: ['aws-cdk'],
+    serverless: ['serverless'],
+    // process / shell helpers
+    nodemon: ['nodemon'], concurrently: ['concurrently'], 'cross-env': ['cross-env'], rimraf: ['rimraf'],
+    dotenv: ['dotenv-cli', 'dotenv'], 'npm-run-all': ['npm-run-all', 'npm-run-all2'],
+    'run-s': ['npm-run-all', 'npm-run-all2'], 'run-p': ['npm-run-all', 'npm-run-all2'],
+    // css / codegen
+    tailwindcss: ['tailwindcss', '@tailwindcss/cli'], postcss: ['postcss-cli'],
+    'graphql-codegen': ['@graphql-codegen/cli'], 'openapi-typescript': ['openapi-typescript'],
+};
+// ── Discovery (async; called once while building the RepoContext) ─────────────
+function stringKeys(value) {
+    if (typeof value !== 'object' || value === null || Array.isArray(value))
+        return [];
+    return Object.keys(value);
+}
+function stringRecord(value) {
+    if (typeof value !== 'object' || value === null || Array.isArray(value))
+        return {};
+    const out = {};
+    for (const [key, v] of Object.entries(value)) {
+        if (typeof v === 'string')
+            out[key] = v;
+    }
+    return out;
+}
+/** Bin names a manifest exposes: a string `bin` is named after the (unscoped) package. */
+function binNames(parsed) {
+    const { bin, name } = parsed;
+    if (typeof bin === 'string' && typeof name === 'string')
+        return [name.split('/').pop()];
+    return stringKeys(bin);
+}
+export function parseWorkspaceManifest(dir, raw) {
+    let parsed;
+    try {
+        parsed = JSON.parse(raw);
+    }
+    catch {
+        return undefined;
+    }
+    if (typeof parsed !== 'object' || parsed === null || Array.isArray(parsed))
+        return undefined;
+    const obj = parsed;
+    const dependencies = new Set();
+    const versions = {};
+    for (const block of DEPENDENCY_BLOCKS) {
+        const specs = stringRecord(obj[block]);
+        for (const dep of Object.keys(specs)) {
+            if (specs[dep].startsWith('workspace:'))
+                continue;
+            dependencies.add(dep);
+            if (!(dep in versions))
+                versions[dep] = specs[dep];
+        }
+    }
+    return {
+        dir,
+        name: typeof obj.name === 'string' ? obj.name : undefined,
+        scripts: stringRecord(obj.scripts),
+        dependencies: [...dependencies].sort(),
+        versions,
+        bins: binNames(obj),
+    };
+}
+/** `workspaces` globs from package.json (array form, or yarn's `{ packages: [...] }`). */
+function packageJsonWorkspaceGlobs(rawPackageJson) {
+    if (!rawPackageJson)
+        return [];
+    try {
+        const parsed = JSON.parse(rawPackageJson);
+        const ws = parsed.workspaces;
+        const list = Array.isArray(ws)
+            ? ws
+            : typeof ws === 'object' && ws !== null && Array.isArray(ws.packages)
+                ? ws.packages
+                : [];
+        return list.filter((g) => typeof g === 'string');
+    }
+    catch {
+        return [];
+    }
+}
+function unquoteYamlScalar(raw) {
+    const trimmed = raw.trim();
+    const quoted = /^(?:"([^"]*)"|'([^']*)')/.exec(trimmed);
+    if (quoted)
+        return quoted[1] ?? quoted[2] ?? '';
+    return trimmed.replace(/\s+#.*$/, '');
+}
+/**
+ * `packages:` entries of pnpm-workspace.yaml — the small subset of YAML it
+ * uses: a block list (indented or not) or a flow list (`['a/*', "b/*"]`,
+ * possibly across lines).
+ */
+export function pnpmWorkspaceGlobs(rawYaml) {
+    if (!rawYaml)
+        return [];
+    const lines = rawYaml.split(/\r?\n/);
+    const globs = [];
+    for (let i = 0; i < lines.length; i++) {
+        const header = /^packages\s*:\s*(.*)$/.exec(lines[i]);
+        if (!header)
+            continue;
+        const rest = header[1].trim();
+        if (rest.startsWith('[')) {
+            let flow = rest;
+            for (let j = i + 1; !flow.includes(']') && j < lines.length; j++)
+                flow += ` ${lines[j].trim()}`;
+            const inner = flow.slice(1, flow.includes(']') ? flow.indexOf(']') : undefined);
+            for (const item of inner.split(',')) {
+                const glob = unquoteYamlScalar(item);
+                if (glob)
+                    globs.push(glob);
+            }
+            break;
+        }
+        for (let j = i + 1; j < lines.length; j++) {
+            const line = lines[j];
+            const item = /^\s*-\s+(.*)$/.exec(line); // `- x` at any indent, including column 0
+            if (item) {
+                const glob = unquoteYamlScalar(item[1]);
+                if (glob)
+                    globs.push(glob);
+                continue;
+            }
+            // Blank lines and comments continue the list; the next top-level key ends it.
+            if (line.trim() === '' || /^\s*#/.test(line) || /^\s/.test(line))
+                continue;
+            break;
+        }
+        break;
+    }
+    return globs;
+}
+/**
+ * A workspace glob is only followed when it stays inside the repository: an
+ * absolute path or a `..` segment would let a hostile `workspaces` entry read
+ * package.json files of sibling directories.
+ */
+function isContainedGlob(glob) {
+    const posix = glob.replace(/\\/g, '/');
+    if (posix.startsWith('/') || /^[a-zA-Z]:/.test(posix))
+        return false;
+    return !posix.split('/').includes('..');
+}
+function toManifestGlob(workspaceGlob) {
+    const trimmed = workspaceGlob.replace(/^\.\//, '').replace(/\/+$/, '');
+    return `${trimmed}/package.json`;
+}
+/**
+ * Read the root manifest and every workspace package manifest. Workspace
+ * directories come from the declared `workspaces` globs (package.json or
+ * pnpm-workspace.yaml) or, when none are declared, the conventional
+ * `apps/`, `packages/` and `libs/` roots. Only dependency trees and VCS
+ * directories are ignored — a declared glob may legitimately reach
+ * `tools/build/`. Paths the scan's `exclude` patterns cover (`isExcluded`) are
+ * never read.
+ */
+export async function discoverWorkspaceManifests(repoRoot, rawRootPackageJson, isExcluded = () => false) {
+    let pnpmYaml;
+    try {
+        const abs = resolveReadableWithinRoot(repoRoot, 'pnpm-workspace.yaml');
+        pnpmYaml = abs ? await fs.readFile(abs, 'utf-8') : undefined;
+    }
+    catch {
+        pnpmYaml = undefined;
+    }
+    const declared = [...packageJsonWorkspaceGlobs(rawRootPackageJson), ...pnpmWorkspaceGlobs(pnpmYaml)];
+    const positive = declared.filter((g) => !g.startsWith('!') && isContainedGlob(g));
+    const negative = declared.filter((g) => g.startsWith('!')).map((g) => g.slice(1));
+    const globs = positive.length > 0 ? positive : CONVENTIONAL_WORKSPACE_GLOBS;
+    const ignore = [
+        '**/node_modules/**', '**/.git/**',
+        ...negative.filter(isContainedGlob).map((g) => `${g.replace(/\/+$/, '')}/**`),
+    ];
+    const matched = listFiles(repoRoot, globs.map(toManifestGlob), ignore)
+        .filter((rel) => resolveWithinRoot(repoRoot, rel) !== null && !isExcluded(rel));
+    const truncated = matched.length > MAX_WORKSPACE_MANIFESTS;
+    const manifests = [];
+    const rootManifest = rawRootPackageJson ? parseWorkspaceManifest('.', rawRootPackageJson) : undefined;
+    if (rootManifest)
+        manifests.push(rootManifest);
+    for (const rel of matched.slice(0, MAX_WORKSPACE_MANIFESTS)) {
+        if (rel === 'package.json')
+            continue;
+        try {
+            const abs = resolveReadableWithinRoot(repoRoot, rel);
+            if (!abs)
+                continue;
+            const stat = await fs.stat(abs);
+            if (!stat.isFile() || stat.size > MAX_FILE_SIZE)
+                continue;
+            const manifest = parseWorkspaceManifest(path.posix.dirname(rel), await fs.readFile(abs, 'utf-8'));
+            if (manifest)
+                manifests.push(manifest);
+        }
+        catch {
+            // unreadable — skip
+        }
+    }
+    return { manifests, truncated };
+}
+// ── Queries (pure; used by the detectors) ─────────────────────────────────────
+/** Dependency names declared anywhere in the workspace, without @types and sibling-package links. */
+function installedPackages(context) {
+    const localNames = new Set((context.workspaces ?? []).map((ws) => ws.name).filter((n) => !!n));
+    const names = new Set();
+    const add = (dep) => {
+        if (!dep.startsWith('@types/') && !localNames.has(dep))
+            names.add(dep);
+    };
+    const { dependencies, devDependencies, peerDependencies } = context.packageJson;
+    for (const block of [dependencies, devDependencies, peerDependencies]) {
+        for (const [dep, spec] of Object.entries(block))
+            if (!spec.startsWith('workspace:'))
+                add(dep);
+    }
+    for (const ws of context.workspaces ?? [])
+        ws.dependencies.forEach(add);
+    return names;
+}
+/**
+ * True when `pnpm|yarn|bun <name>` would run an installed binary:
+ *  - a workspace package exposes it (`bin`);
+ *  - a dependency is literally named `<name>`; or
+ *  - `<name>` is a well-known tool binary AND a package providing it is declared.
+ *
+ * When workspace discovery is absent or was truncated the declared packages are
+ * not the whole picture, so a well-known tool binary is accepted unconditionally.
+ */
+export function isKnownBinary(context, name) {
+    if ((context.workspaces ?? []).some((ws) => ws.bins.includes(name)))
+        return true;
+    const installed = installedPackages(context);
+    if (installed.has(name))
+        return true;
+    const providers = BIN_PROVIDERS[name];
+    if (!providers)
+        return false;
+    if (context.workspaces === undefined || context.workspacesTruncated)
+        return true;
+    return providers.some((provider) => installed.has(provider));
+}
+/** True when the root manifest or any workspace package defines the script. */
+export function anyWorkspaceHasScript(context, name) {
+    if (context.packageJson.scripts[name])
+        return true;
+    return (context.workspaces ?? []).some((ws) => !!ws.scripts[name]);
+}
+/**
+ * Workspaces a pnpm/npm/yarn selector (package name, path, or glob) refers to.
+ * `*`, `**` and exclusion/dependents selectors (`!web`, `[origin/main]`) select
+ * every workspace — they cannot be evaluated statically, so stay permissive.
+ */
+export function selectWorkspaces(context, selector) {
+    const workspaces = context.workspaces ?? [];
+    if (selector === '*' || selector === '**' || selector.startsWith('!') || selector.startsWith('[')) {
+        return workspaces;
+    }
+    const posix = selector.replace(/\\/g, '/').replace(/^\.\//, '').replace(/\/+$/, '');
+    const options = { dot: true };
+    return workspaces.filter((ws) => ws.name === selector ||
+        ws.dir === posix ||
+        ws.dir.endsWith(`/${posix}`) ||
+        (/[*?[{]/.test(selector) &&
+            ((ws.name !== undefined && micromatch.isMatch(ws.name, selector, options)) ||
+                micromatch.isMatch(ws.dir, posix, options))));
+}
+//# sourceMappingURL=workspace-manifests.js.map

package/dist/workspace-manifests.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"workspace-manifests.js","sourceRoot":"","sources":["../src/workspace-manifests.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAEH,OAAO,KAAK,EAAE,MAAM,kBAAkB,CAAC;AACvC,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAClC,OAAO,UAAU,MAAM,YAAY,CAAC;AACpC,OAAO,EAAE,SAAS,EAAE,yBAAyB,EAAE,iBAAiB,EAAE,MAAM,gBAAgB,CAAC;AACzF,OAAO,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AA8B7C,mFAAmF;AACnF,MAAM,uBAAuB,GAAG,GAAG,CAAC;AAEpC,kFAAkF;AAClF,MAAM,4BAA4B,GAAG,CAAC,QAAQ,EAAE,YAAY,EAAE,QAAQ,CAAC,CAAC;AAExE,MAAM,iBAAiB,GAAG,CAAC,cAAc,EAAE,iBAAiB,EAAE,kBAAkB,EAAE,sBAAsB,CAAU,CAAC;AAEnH,iFAAiF;AAEjF;;;;;GAKG;AACH,MAAM,aAAa,GAAgD;IACjE,qCAAqC;IACrC,GAAG,EAAE,CAAC,YAAY,CAAC,EAAE,QAAQ,EAAE,CAAC,YAAY,CAAC,EAAE,GAAG,EAAE,CAAC,KAAK,CAAC,EAAE,SAAS,EAAE,CAAC,SAAS,CAAC;IACnF,IAAI,EAAE,CAAC,MAAM,CAAC,EAAE,WAAW,EAAE,CAAC,WAAW,CAAC,EAAE,SAAS,EAAE,CAAC,SAAS,CAAC,EAAE,OAAO,EAAE,CAAC,SAAS,CAAC;IACxF,MAAM,EAAE,CAAC,QAAQ,CAAC,EAAE,OAAO,EAAE,CAAC,aAAa,EAAE,SAAS,CAAC,EAAE,IAAI,EAAE,CAAC,MAAM,CAAC,EAAE,GAAG,EAAE,CAAC,UAAU,CAAC;IAC1F,KAAK,EAAE,CAAC,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC,QAAQ,CAAC,EAAE,MAAM,EAAE,CAAC,aAAa,CAAC,EAAE,OAAO,EAAE,CAAC,SAAS,CAAC;IACxF,OAAO,EAAE,CAAC,SAAS,CAAC;IACpB,6BAA6B;IAC7B,MAAM,EAAE,CAAC,QAAQ,CAAC,EAAE,QAAQ,EAAE,CAAC,UAAU,CAAC,EAAE,KAAK,EAAE,CAAC,gBAAgB,CAAC,EAAE,MAAM,EAAE,CAAC,QAAQ,CAAC;IACzF,SAAS,EAAE,CAAC,WAAW,CAAC,EAAE,IAAI,EAAE,CAAC,MAAM,CAAC,EAAE,QAAQ,EAAE,CAAC,UAAU,CAAC,EAAE,KAAK,EAAE,CAAC,OAAO,CAAC;IAClF,UAAU,EAAE,CAAC,iBAAiB,CAAC,EAAE,cAAc,EAAE,CAAC,cAAc,CAAC,EAAE,OAAO,EAAE,CAAC,SAAS,CAAC;IACvF,YAAY,EAAE,CAAC,YAAY,CAAC;IAC5B,eAAe;IACf,MAAM,EAAE,CAAC,QAAQ,CAAC,EAAE,IAAI,EAAE,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,CAAC,OAAO,CAAC,EAAE,GAAG,EAAE,CAAC,KAAK,CAAC;IAClE,UAAU,EAAE,CAAC,kBAAkB,EAAE,YAAY,CAAC,EAAE,OAAO,EAAE,CAAC,SAAS,CAAC;IACpE,SAAS,EAAE,CAAC,WAAW,EAAE,gBAAgB,CAAC,EAAE,GAAG,EAAE,CAAC,KAAK,CAAC;IACxD,qBAAqB;IACrB,KAAK,EAAE,CAAC,OAAO,CAAC,EAAE,EAAE,EAAE,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,CAAC,OAAO,CAAC,EAAE,SAAS,EAAE,CAAC,iBAAiB,CAAC;IAC9E,kBAAkB,EAAE,CAAC,kBAAkB,CAAC,EAAE,KAAK,EAAE,CAAC,OAAO,CAAC,EAAE,aAAa,EAAE,CAAC,aAAa,CAAC;IAC1F,aAAa;IACb,IAAI,EAAE,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,MAAM,EAAE,MAAM,CAAC,EAAE,KAAK,EAAE,CAAC,OAAO,CAAC,EAAE,KAAK,EAAE,CAAC,gBAAgB,CAAC;IACnG,IAAI,EAAE,CAAC,MAAM,CAAC,EAAE,GAAG,EAAE,CAAC,SAAS,CAAC,EAAE,cAAc,EAAE,CAAC,cAAc,CAAC,EAAE,EAAE,EAAE,CAAC,cAAc,CAAC;IACxF,IAAI,EAAE,CAAC,aAAa,CAAC,EAAE,MAAM,EAAE,CAAC,QAAQ,CAAC,EAAE,UAAU,EAAE,CAAC,kBAAkB,CAAC,EAAE,SAAS,EAAE,CAAC,WAAW,CAAC;IACrG,KAAK,EAAE,CAAC,iBAAiB,CAAC,EAAE,QAAQ,EAAE,CAAC,UAAU,CAAC,EAAE,kBAAkB,EAAE,CAAC,kBAAkB,CAAC;IAC5F,MAAM,EAAE,CAAC,QAAQ,EAAE,aAAa,CAAC,EAAE,MAAM,EAAE,CAAC,gBAAgB,CAAC;IAC7D,wBAAwB;IACxB,MAAM,EAAE,CAAC,QAAQ,CAAC,EAAE,aAAa,EAAE,CAAC,aAAa,CAAC,EAAE,IAAI,EAAE,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,CAAC,SAAS,CAAC;IACxF,SAAS,EAAE,CAAC,eAAe,CAAC,EAAE,QAAQ,EAAE,CAAC,UAAU,CAAC,EAAE,QAAQ,EAAE,CAAC,UAAU,CAAC,EAAE,MAAM,EAAE,CAAC,QAAQ,CAAC;IAChG,OAAO,EAAE,CAAC,aAAa,CAAC,EAAE,QAAQ,EAAE,CAAC,gBAAgB,CAAC,EAAE,GAAG,EAAE,CAAC,KAAK,CAAC,EAAE,GAAG,EAAE,CAAC,SAAS,CAAC;IACtF,UAAU,EAAE,CAAC,YAAY,CAAC;IAC1B,0BAA0B;IAC1B,OAAO,EAAE,CAAC,SAAS,CAAC,EAAE,YAAY,EAAE,CAAC,cAAc,CAAC,EAAE,WAAW,EAAE,CAAC,WAAW,CAAC,EAAE,MAAM,EAAE,CAAC,QAAQ,CAAC;IACpG,MAAM,EAAE,CAAC,YAAY,EAAE,QAAQ,CAAC,EAAE,aAAa,EAAE,CAAC,aAAa,EAAE,cAAc,CAAC;IAChF,OAAO,EAAE,CAAC,aAAa,EAAE,cAAc,CAAC,EAAE,OAAO,EAAE,CAAC,aAAa,EAAE,cAAc,CAAC;IAClF,gBAAgB;IAChB,WAAW,EAAE,CAAC,aAAa,EAAE,kBAAkB,CAAC,EAAE,OAAO,EAAE,CAAC,aAAa,CAAC;IAC1E,iBAAiB,EAAE,CAAC,sBAAsB,CAAC,EAAE,oBAAoB,EAAE,CAAC,oBAAoB,CAAC;CAC1F,CAAC;AAEF,iFAAiF;AAEjF,SAAS,UAAU,CAAC,KAAc;IAChC,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,EAAE,CAAC;IACnF,OAAO,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;AAC5B,CAAC;AAED,SAAS,YAAY,CAAC,KAAc;IAClC,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,EAAE,CAAC;IACnF,MAAM,GAAG,GAA2B,EAAE,CAAC;IACvC,KAAK,MAAM,CAAC,GAAG,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QAC7C,IAAI,OAAO,CAAC,KAAK,QAAQ;YAAE,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IAC1C,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,0FAA0F;AAC1F,SAAS,QAAQ,CAAC,MAA+B;IAC/C,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,GAAG,MAAM,CAAC;IAC7B,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,OAAO,IAAI,KAAK,QAAQ;QAAE,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,EAAG,CAAC,CAAC;IACzF,OAAO,UAAU,CAAC,GAAG,CAAC,CAAC;AACzB,CAAC;AAED,MAAM,UAAU,sBAAsB,CAAC,GAAW,EAAE,GAAW;IAC7D,IAAI,MAAe,CAAC;IACpB,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC3B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC;QAAE,OAAO,SAAS,CAAC;IAC7F,MAAM,GAAG,GAAG,MAAiC,CAAC;IAC9C,MAAM,YAAY,GAAG,IAAI,GAAG,EAAU,CAAC;IACvC,MAAM,QAAQ,GAA2B,EAAE,CAAC;IAC5C,KAAK,MAAM,KAAK,IAAI,iBAAiB,EAAE,CAAC;QACtC,MAAM,KAAK,GAAG,YAAY,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC;QACvC,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;YACrC,IAAI,KAAK,CAAC,GAAG,CAAE,CAAC,UAAU,CAAC,YAAY,CAAC;gBAAE,SAAS;YACnD,YAAY,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;YACtB,IAAI,CAAC,CAAC,GAAG,IAAI,QAAQ,CAAC;gBAAE,QAAQ,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC,GAAG,CAAE,CAAC;QACtD,CAAC;IACH,CAAC;IACD,OAAO;QACL,GAAG;QACH,IAAI,EAAE,OAAO,GAAG,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS;QACzD,OAAO,EAAE,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC;QAClC,YAAY,EAAE,CAAC,GAAG,YAAY,CAAC,CAAC,IAAI,EAAE;QACtC,QAAQ;QACR,IAAI,EAAE,QAAQ,CAAC,GAAG,CAAC;KACpB,CAAC;AACJ,CAAC;AAED,0FAA0F;AAC1F,SAAS,yBAAyB,CAAC,cAAkC;IACnE,IAAI,CAAC,cAAc;QAAE,OAAO,EAAE,CAAC;IAC/B,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,cAAc,CAA6B,CAAC;QACtE,MAAM,EAAE,GAAG,MAAM,CAAC,UAAU,CAAC;QAC7B,MAAM,IAAI,GAAG,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC;YAC5B,CAAC,CAAC,EAAE;YACJ,CAAC,CAAC,OAAO,EAAE,KAAK,QAAQ,IAAI,EAAE,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,CAAE,EAA6B,CAAC,QAAQ,CAAC;gBAC/F,CAAC,CAAE,EAA8B,CAAC,QAAQ;gBAC1C,CAAC,CAAC,EAAE,CAAC;QACT,OAAO,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAe,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC,CAAC;IAChE,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC;AAED,SAAS,iBAAiB,CAAC,GAAW;IACpC,MAAM,OAAO,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC;IAC3B,MAAM,MAAM,GAAG,0BAA0B,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IACxD,IAAI,MAAM;QAAE,OAAO,MAAM,CAAC,CAAC,CAAC,IAAI,MAAM,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IAChD,OAAO,OAAO,CAAC,OAAO,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC;AACxC,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,kBAAkB,CAAC,OAA2B;IAC5D,IAAI,CAAC,OAAO;QAAE,OAAO,EAAE,CAAC;IACxB,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IACrC,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACtC,MAAM,MAAM,GAAG,uBAAuB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAE,CAAC,CAAC;QACvD,IAAI,CAAC,MAAM;YAAE,SAAS;QACtB,MAAM,IAAI,GAAG,MAAM,CAAC,CAAC,CAAE,CAAC,IAAI,EAAE,CAAC;QAC/B,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;YACzB,IAAI,IAAI,GAAG,IAAI,CAAC;YAChB,KAAK,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE;gBAAE,IAAI,IAAI,IAAI,KAAK,CAAC,CAAC,CAAE,CAAC,IAAI,EAAE,EAAE,CAAC;YACjG,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;YAChF,KAAK,MAAM,IAAI,IAAI,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC;gBACpC,MAAM,IAAI,GAAG,iBAAiB,CAAC,IAAI,CAAC,CAAC;gBACrC,IAAI,IAAI;oBAAE,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAC7B,CAAC;YACD,MAAM;QACR,CAAC;QACD,KAAK,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;YAC1C,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,CAAE,CAAC;YACvB,MAAM,IAAI,GAAG,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,0CAA0C;YACnF,IAAI,IAAI,EAAE,CAAC;gBACT,MAAM,IAAI,GAAG,iBAAiB,CAAC,IAAI,CAAC,CAAC,CAAE,CAAC,CAAC;gBACzC,IAAI,IAAI;oBAAE,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;gBAC3B,SAAS;YACX,CAAC;YACD,8EAA8E;YAC9E,IAAI,IAAI,CAAC,IAAI,EAAE,KAAK,EAAE,IAAI,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC;gBAAE,SAAS;YAC3E,MAAM;QACR,CAAC;QACD,MAAM;IACR,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;;GAIG;AACH,SAAS,eAAe,CAAC,IAAY;IACnC,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;IACvC,IAAI,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,YAAY,CAAC,IAAI,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IACpE,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;AAC1C,CAAC;AAED,SAAS,cAAc,CAAC,aAAqB;IAC3C,MAAM,OAAO,GAAG,aAAa,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IACvE,OAAO,GAAG,OAAO,eAAe,CAAC;AACnC,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,CAAC,KAAK,UAAU,0BAA0B,CAC9C,QAAgB,EAChB,kBAAsC,EACtC,aAA6C,GAAG,EAAE,CAAC,KAAK;IAExD,IAAI,QAA4B,CAAC;IACjC,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,yBAAyB,CAAC,QAAQ,EAAE,qBAAqB,CAAC,CAAC;QACvE,QAAQ,GAAG,GAAG,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IAC/D,CAAC;IAAC,MAAM,CAAC;QACP,QAAQ,GAAG,SAAS,CAAC;IACvB,CAAC;IACD,MAAM,QAAQ,GAAG,CAAC,GAAG,yBAAyB,CAAC,kBAAkB,CAAC,EAAE,GAAG,kBAAkB,CAAC,QAAQ,CAAC,CAAC,CAAC;IACrG,MAAM,QAAQ,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,eAAe,CAAC,CAAC,CAAC,CAAC,CAAC;IAClF,MAAM,QAAQ,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;IAClF,MAAM,KAAK,GAAG,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,4BAA4B,CAAC;IAE5E,MAAM,MAAM,GAAG;QACb,oBAAoB,EAAE,YAAY;QAClC,GAAG,QAAQ,CAAC,MAAM,CAAC,eAAe,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,KAAK,CAAC;KAC9E,CAAC;IACF,MAAM,OAAO,GAAG,SAAS,CAAC,QAAQ,EAAE,KAAK,CAAC,GAAG,CAAC,cAAc,CAAC,EAAE,MAAM,CAAC;SACnE,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,iBAAiB,CAAC,QAAQ,EAAE,GAAG,CAAC,KAAK,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC;IAClF,MAAM,SAAS,GAAG,OAAO,CAAC,MAAM,GAAG,uBAAuB,CAAC;IAE3D,MAAM,SAAS,GAAwB,EAAE,CAAC;IAC1C,MAAM,YAAY,GAAG,kBAAkB,CAAC,CAAC,CAAC,sBAAsB,CAAC,GAAG,EAAE,kBAAkB,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IACtG,IAAI,YAAY;QAAE,SAAS,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;IAE/C,KAAK,MAAM,GAAG,IAAI,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,uBAAuB,CAAC,EAAE,CAAC;QAC5D,IAAI,GAAG,KAAK,cAAc;YAAE,SAAS;QACrC,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,yBAAyB,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC;YACrD,IAAI,CAAC,GAAG;gBAAE,SAAS;YACnB,MAAM,IAAI,GAAG,MAAM,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YAChC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,IAAI,CAAC,IAAI,GAAG,aAAa;gBAAE,SAAS;YAC1D,MAAM,QAAQ,GAAG,sBAAsB,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,MAAM,EAAE,CAAC,QAAQ,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC,CAAC;YAClG,IAAI,QAAQ;gBAAE,SAAS,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QACzC,CAAC;QAAC,MAAM,CAAC;YACP,oBAAoB;QACtB,CAAC;IACH,CAAC;IACD,OAAO,EAAE,SAAS,EAAE,SAAS,EAAE,CAAC;AAClC,CAAC;AAED,iFAAiF;AAEjF,qGAAqG;AACrG,SAAS,iBAAiB,CAAC,OAAoB;IAC7C,MAAM,UAAU,GAAG,IAAI,GAAG,CAAC,CAAC,OAAO,CAAC,UAAU,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAe,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAC5G,MAAM,KAAK,GAAG,IAAI,GAAG,EAAU,CAAC;IAChC,MAAM,GAAG,GAAG,CAAC,GAAW,EAAQ,EAAE;QAChC,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,SAAS,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,GAAG,CAAC;YAAE,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IACzE,CAAC,CAAC;IACF,MAAM,EAAE,YAAY,EAAE,eAAe,EAAE,gBAAgB,EAAE,GAAG,OAAO,CAAC,WAAW,CAAC;IAChF,KAAK,MAAM,KAAK,IAAI,CAAC,YAAY,EAAE,eAAe,EAAE,gBAAgB,CAAC,EAAE,CAAC;QACtE,KAAK,MAAM,CAAC,GAAG,EAAE,IAAI,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC;YAAE,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,YAAY,CAAC;gBAAE,GAAG,CAAC,GAAG,CAAC,CAAC;IAChG,CAAC;IACD,KAAK,MAAM,EAAE,IAAI,OAAO,CAAC,UAAU,IAAI,EAAE;QAAE,EAAE,CAAC,YAAY,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IACxE,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,aAAa,CAAC,OAAoB,EAAE,IAAY;IAC9D,IAAI,CAAC,OAAO,CAAC,UAAU,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;QAAE,OAAO,IAAI,CAAC;IACjF,MAAM,SAAS,GAAG,iBAAiB,CAAC,OAAO,CAAC,CAAC;IAC7C,IAAI,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IACrC,MAAM,SAAS,GAAG,aAAa,CAAC,IAAI,CAAC,CAAC;IACtC,IAAI,CAAC,SAAS;QAAE,OAAO,KAAK,CAAC;IAC7B,IAAI,OAAO,CAAC,UAAU,KAAK,SAAS,IAAI,OAAO,CAAC,mBAAmB;QAAE,OAAO,IAAI,CAAC;IACjF,OAAO,SAAS,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,SAAS,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC;AAC/D,CAAC;AAED,+EAA+E;AAC/E,MAAM,UAAU,qBAAqB,CAAC,OAAoB,EAAE,IAAY;IACtE,IAAI,OAAO,CAAC,WAAW,CAAC,OAAO,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IACnD,OAAO,CAAC,OAAO,CAAC,UAAU,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC;AACrE,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,gBAAgB,CAAC,OAAoB,EAAE,QAAgB;IACrE,MAAM,UAAU,GAAG,OAAO,CAAC,UAAU,IAAI,EAAE,CAAC;IAC5C,IAAI,QAAQ,KAAK,GAAG,IAAI,QAAQ,KAAK,IAAI,IAAI,QAAQ,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,QAAQ,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;QAClG,OAAO,UAAU,CAAC;IACpB,CAAC;IACD,MAAM,KAAK,GAAG,QAAQ,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IACpF,MAAM,OAAO,GAAG,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC;IAC9B,OAAO,UAAU,CAAC,MAAM,CACtB,CAAC,EAAE,EAAE,EAAE,CACL,EAAE,CAAC,IAAI,KAAK,QAAQ;QACpB,EAAE,CAAC,GAAG,KAAK,KAAK;QAChB,EAAE,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,KAAK,EAAE,CAAC;QAC5B,CAAC,QAAQ,CAAC,IAAI,CAAC,QAAQ,CAAC;YACtB,CAAC,CAAC,EAAE,CAAC,IAAI,KAAK,SAAS,IAAI,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC,IAAI,EAAE,QAAQ,EAAE,OAAO,CAAC,CAAC;gBACxE,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC,GAAG,EAAE,KAAK,EAAE,OAAO,CAAC,CAAC,CAAC,CACnD,CAAC;AACJ,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@promptci/core",
-  "version": "0.0.1",
+  "version": "0.2.0",
   "description": "Deterministic scanner for AI coding instruction files (CLAUDE.md, AGENTS.md, .cursorrules) — detectors, scoring, and report generation",
   "license": "Apache-2.0",
   "type": "module",
@@ -40,15 +40,18 @@
     "prompt",
     "scanner"
   ],
+  "scripts": {
+    "build": "tsc -p tsconfig.json",
+    "typecheck": "tsc -p tsconfig.json --noEmit",
+    "prepublishOnly": "pnpm run build"
+  },
   "devDependencies": {
     "@types/node": "*",
-    "typescript": "*"
+    "typescript": "*",
+    "@types/micromatch": "*"
   },
   "dependencies": {
-    "fast-glob": "^3.3.3"
-  },
-  "scripts": {
-    "build": "tsc -p tsconfig.json",
-    "typecheck": "tsc -p tsconfig.json --noEmit"
+    "fast-glob": "^3.3.3",
+    "micromatch": "^4.0.8"
   }
-}
+}

package/dist/cheap-model-routing.d.ts

@@ -1,4 +0,0 @@
-import type { RepoContext } from './repo-context.js';
-import type { PromptCiIssue } from './types.js';
-export declare function detectCheapModelRouting(context: RepoContext): PromptCiIssue[];
-//# sourceMappingURL=cheap-model-routing.d.ts.map

package/dist/cheap-model-routing.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"cheap-model-routing.d.ts","sourceRoot":"","sources":["../src/cheap-model-routing.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AACrD,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AAWhD,wBAAgB,uBAAuB,CAAC,OAAO,EAAE,WAAW,GAAG,aAAa,EAAE,CAsC7E"}