@shrkcrft/inspector 0.1.0-alpha.2 → 0.1.0-alpha.21

package/dist/changed-preflight.js

@@ -11,8 +11,37 @@
  * planner is intentionally conservative: a gate's `skip` decision is always
  * accompanied by a reason so the operator can see what was elided.
  */
+import { existsSync, readFileSync } from 'node:fs';
 import * as nodePath from 'node:path';
 export const CHANGED_PREFLIGHT_SCHEMA = 'sharkcraft.changed-preflight/v1';
+/**
+ * Cheap, best-effort probe: does this look like a generic JS/TS monorepo
+ * (nx / pnpm workspaces / package.json workspaces / apps+libs)? Used to widen
+ * the "engine source changed" detection beyond SharkCraft's own
+ * `packages/<package-name>/src/` layout. A couple of stat calls — no full inspect.
+ */
+function isMonorepoLike(projectRoot) {
+    try {
+        if (existsSync(nodePath.join(projectRoot, 'nx.json')))
+            return true;
+        if (existsSync(nodePath.join(projectRoot, 'pnpm-workspace.yaml')))
+            return true;
+        if (existsSync(nodePath.join(projectRoot, 'apps')) ||
+            existsSync(nodePath.join(projectRoot, 'libs'))) {
+            return true;
+        }
+        const pkgPath = nodePath.join(projectRoot, 'package.json');
+        if (existsSync(pkgPath)) {
+            const pkg = JSON.parse(readFileSync(pkgPath, 'utf8'));
+            if (pkg.workspaces)
+                return true;
+        }
+    }
+    catch {
+        // Best-effort: treat any read/parse failure as "not obviously a monorepo".
+    }
+    return false;
+}
 export var PreflightProfile;
 (function (PreflightProfile) {
     PreflightProfile["Quick"] = "quick";
@@ -25,10 +54,23 @@ export var PreflightAction;
     PreflightAction["Skip"] = "skip";
     PreflightAction["Recommend"] = "recommend";
 })(PreflightAction || (PreflightAction = {}));
-function classifyChangedFiles(files) {
+function classifyChangedFiles(files, opts = {}) {
     const norm = files.map((f) => f.replace(/\\/g, '/'));
     const match = (re) => norm.some((p) => re.test(p));
-    const anyEngineSource = match(/^packages\/[^/]+\/src\//);
+    let anyEngineSource = match(/^packages\/[^/]+\/src\//);
+    // Monorepo-aware: on an nx / workspaces / apps+libs repo, source also lives
+    // under apps/*/src, libs/*/src, or a project-root src/ — not only
+    // SharkCraft's own packages/*/src/. Without this, a large nx change is
+    // misclassified as "no engine src changed" and every src-sensitive gate is
+    // skipped. Only widen when a monorepo signal is present, so this repo's own
+    // classification is unchanged.
+    if (!anyEngineSource && opts.projectRoot && isMonorepoLike(opts.projectRoot)) {
+        anyEngineSource = match(/^(apps|libs|packages)\/[^/]+\/(src|lib)\//) || match(/^src\//);
+    }
+    // Caller-supplied source roots (e.g. derived from config) always count.
+    if (!anyEngineSource && opts.sourceGlobs?.length) {
+        anyEngineSource = norm.some((p) => opts.sourceGlobs.some((g) => p.startsWith(g)));
+    }
     const anyPackages = match(/^packages\//);
     const anyTests = match(/__tests__\/|\.test\.ts$|e2e\//);
     const anySharkcraftAssets = match(/^sharkcraft\//);
@@ -71,7 +113,12 @@ function classifyChangedFiles(files) {
  */
 export function planChangedPreflight(options) {
     const profile = options.profile ?? PreflightProfile.Standard;
-    const cls = classifyChangedFiles(options.changedFiles);
+    const cls = classifyChangedFiles(options.changedFiles, {
+        projectRoot: options.projectRoot,
+        ...(options.sourceGlobs ? { sourceGlobs: options.sourceGlobs } : {}),
+    });
+    const testCmd = options.testCommand ?? 'bun test';
+    const typecheckCmd = options.typecheckCommand ?? 'bun x tsc -p tsconfig.base.json --noEmit';
     const explanations = [];
     const gates = [];
     // 1) Boundary check — needed when engine src changed.
@@ -249,7 +296,7 @@ export function planChangedPreflight(options) {
         gates.push({
             id: 'tests',
             title: 'Bun test suite (focused subset where possible)',
-            command: 'bun test',
+            command: testCmd,
             action: PreflightAction.Run,
             reason: 'strict profile + engine src changed',
             canFail: false,
@@ -259,7 +306,7 @@ export function planChangedPreflight(options) {
         gates.push({
             id: 'tests',
             title: 'Bun test suite',
-            command: 'bun test',
+            command: testCmd,
             action: PreflightAction.Recommend,
             reason: 'engine src or tests changed; full suite not auto-run',
             canFail: true,
@@ -269,7 +316,7 @@ export function planChangedPreflight(options) {
         gates.push({
             id: 'tests',
             title: 'Bun test suite',
-            command: 'bun test',
+            command: testCmd,
             action: PreflightAction.Skip,
             reason: 'no engine src or test changes',
             canFail: true,
@@ -281,7 +328,7 @@ export function planChangedPreflight(options) {
             gates.push({
                 id: 'typecheck',
                 title: 'TypeScript --noEmit',
-                command: 'bun x tsc -p tsconfig.base.json --noEmit',
+                command: typecheckCmd,
                 action: PreflightAction.Recommend,
                 reason: 'engine src changed; not auto-run on quick profile',
                 canFail: true,
@@ -291,7 +338,7 @@ export function planChangedPreflight(options) {
             gates.push({
                 id: 'typecheck',
                 title: 'TypeScript --noEmit',
-                command: 'bun x tsc -p tsconfig.base.json --noEmit',
+                command: typecheckCmd,
                 action: PreflightAction.Run,
                 reason: 'engine src changed',
                 canFail: false,
@@ -302,7 +349,7 @@ export function planChangedPreflight(options) {
         gates.push({
             id: 'typecheck',
             title: 'TypeScript --noEmit',
-            command: 'bun x tsc -p tsconfig.base.json --noEmit',
+            command: typecheckCmd,
             action: PreflightAction.Skip,
             reason: 'no engine src changed',
             canFail: true,

package/dist/changes-summary.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"changes-summary.d.ts","sourceRoot":"","sources":["../src/changes-summary.ts"],"names":[],"mappings":"AAcA,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,2BAA2B,CAAC;AAEvE,eAAO,MAAM,sBAAsB,kCAAkC,CAAC;AAEtE,oBAAY,UAAU;IACpB,GAAG,QAAQ;IACX,SAAS,eAAe;IACxB,SAAS,cAAc;IACvB,SAAS,cAAc;IACvB,SAAS,cAAc;IACvB,KAAK,UAAU;IACf,SAAS,cAAc;IACvB,OAAO,YAAY;IACnB,UAAU,eAAe;IACzB,KAAK,UAAU;IACf,IAAI,SAAS;IACb,SAAS,cAAc;IACvB,MAAM,WAAW;IACjB,SAAS,eAAe;IACxB,QAAQ,aAAa;IACrB,SAAS,cAAc;IACvB,WAAW,uBAAuB;IAClC,YAAY,kBAAkB;IAC9B,IAAI,SAAS;IACb,KAAK,UAAU;IACf,QAAQ,aAAa;IACrB,OAAO,YAAY;IACnB,GAAG,QAAQ;IACX,UAAU,2BAA2B;IACrC,OAAO,YAAY;IACnB,OAAO,YAAY;CACpB;AAED,MAAM,WAAW,mBAAmB;IAClC,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,UAAU,CAAC;IACjB,MAAM,EAAE,OAAO,CAAC;IAChB,KAAK,EAAE,OAAO,CAAC;IACf,SAAS,EAAE,OAAO,CAAC;IACnB,YAAY,EAAE,OAAO,CAAC;IACtB,QAAQ,EAAE,OAAO,CAAC;IAClB,WAAW,EAAE,OAAO,CAAC;IACrB,gBAAgB,EAAE,OAAO,CAAC;CAC3B;AAED,MAAM,WAAW,qBAAqB;IACpC,MAAM,EAAE,OAAO,sBAAsB,CAAC;IACtC,WAAW,EAAE,MAAM,CAAC;IACpB,MAAM,EAAE,OAAO,GAAG,QAAQ,GAAG,OAAO,GAAG,cAAc,CAAC;IACtD,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,wDAAwD;IACxD,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,UAAU,EAAE,MAAM,CAAC;IACnB,WAAW,EAAE,MAAM,CAAC,MAAM,EAAE,SAAS,MAAM,EAAE,CAAC,CAAC;IAC/C,KAAK,EAAE,SAAS,mBAAmB,EAAE,CAAC;IACtC,4CAA4C;IAC5C,eAAe,EAAE,SAAS,MAAM,EAAE,CAAC;IACnC,8BAA8B;IAC9B,eAAe,EAAE,SAAS,MAAM,EAAE,CAAC;IACnC,gDAAgD;IAChD,cAAc,EAAE,SAAS,MAAM,EAAE,CAAC;IAClC,0BAA0B;IAC1B,WAAW,EAAE,SAAS,MAAM,EAAE,CAAC;IAC/B,0BAA0B;IAC1B,YAAY,EAAE,SAAS,MAAM,EAAE,CAAC;IAChC,2CAA2C;IAC3C,iBAAiB,EAAE,SAAS,MAAM,EAAE,CAAC;IACrC,qCAAqC;IACrC,mBAAmB,EAAE,SAAS,MAAM,EAAE,CAAC;IACvC,0CAA0C;IAC1C,IAAI,EAAE,KAAK,GAAG,QAAQ,GAAG,MAAM,CAAC;IAChC,wCAAwC;IACxC,WAAW,EAAE,SAAS,MAAM,EAAE,CAAC;IAC/B,qCAAqC;IACrC,2BAA2B,EAAE,SAAS,MAAM,EAAE,CAAC;IAC/C,qCAAqC;IACrC,eAAe,EAAE,MAAM,CAAC;CACzB;AAED,MAAM,WAAW,sBAAsB;IACrC,qCAAqC;IACrC,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,6BAA6B;IAC7B,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,wCAAwC;IACxC,KAAK,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAC1B,+EAA+E;IAC/E,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AA4JD,wBAAsB,mBAAmB,CACvC,UAAU,EAAE,qBAAqB,EACjC,OAAO,GAAE,sBAA2B,GACnC,OAAO,CAAC,qBAAqB,CAAC,CAkDhC;AAED,wBAAgB,4BAA4B,CAAC,MAAM,EAAE,qBAAqB,GAAG,MAAM,CAiDlF"}
+{"version":3,"file":"changes-summary.d.ts","sourceRoot":"","sources":["../src/changes-summary.ts"],"names":[],"mappings":"AAeA,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,2BAA2B,CAAC;AAEvE,eAAO,MAAM,sBAAsB,kCAAkC,CAAC;AAEtE,oBAAY,UAAU;IACpB,GAAG,QAAQ;IACX,SAAS,eAAe;IACxB,SAAS,cAAc;IACvB,SAAS,cAAc;IACvB,SAAS,cAAc;IACvB,KAAK,UAAU;IACf,SAAS,cAAc;IACvB,OAAO,YAAY;IACnB,UAAU,eAAe;IACzB,KAAK,UAAU;IACf,IAAI,SAAS;IACb,SAAS,cAAc;IACvB,MAAM,WAAW;IACjB,SAAS,eAAe;IACxB,QAAQ,aAAa;IACrB,SAAS,cAAc;IACvB,WAAW,uBAAuB;IAClC,YAAY,kBAAkB;IAC9B,IAAI,SAAS;IACb,KAAK,UAAU;IACf,QAAQ,aAAa;IACrB,OAAO,YAAY;IACnB,GAAG,QAAQ;IACX,UAAU,2BAA2B;IACrC,OAAO,YAAY;IACnB,OAAO,YAAY;CACpB;AAED,MAAM,WAAW,mBAAmB;IAClC,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,UAAU,CAAC;IACjB,MAAM,EAAE,OAAO,CAAC;IAChB,KAAK,EAAE,OAAO,CAAC;IACf,SAAS,EAAE,OAAO,CAAC;IACnB,YAAY,EAAE,OAAO,CAAC;IACtB,QAAQ,EAAE,OAAO,CAAC;IAClB,WAAW,EAAE,OAAO,CAAC;IACrB,gBAAgB,EAAE,OAAO,CAAC;CAC3B;AAED,MAAM,WAAW,qBAAqB;IACpC,MAAM,EAAE,OAAO,sBAAsB,CAAC;IACtC,WAAW,EAAE,MAAM,CAAC;IACpB,MAAM,EAAE,OAAO,GAAG,QAAQ,GAAG,OAAO,GAAG,cAAc,CAAC;IACtD,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,wDAAwD;IACxD,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,UAAU,EAAE,MAAM,CAAC;IACnB,WAAW,EAAE,MAAM,CAAC,MAAM,EAAE,SAAS,MAAM,EAAE,CAAC,CAAC;IAC/C,KAAK,EAAE,SAAS,mBAAmB,EAAE,CAAC;IACtC,4CAA4C;IAC5C,eAAe,EAAE,SAAS,MAAM,EAAE,CAAC;IACnC,8BAA8B;IAC9B,eAAe,EAAE,SAAS,MAAM,EAAE,CAAC;IACnC,gDAAgD;IAChD,cAAc,EAAE,SAAS,MAAM,EAAE,CAAC;IAClC,0BAA0B;IAC1B,WAAW,EAAE,SAAS,MAAM,EAAE,CAAC;IAC/B,0BAA0B;IAC1B,YAAY,EAAE,SAAS,MAAM,EAAE,CAAC;IAChC,2CAA2C;IAC3C,iBAAiB,EAAE,SAAS,MAAM,EAAE,CAAC;IACrC,qCAAqC;IACrC,mBAAmB,EAAE,SAAS,MAAM,EAAE,CAAC;IACvC,0CAA0C;IAC1C,IAAI,EAAE,KAAK,GAAG,QAAQ,GAAG,MAAM,CAAC;IAChC,wCAAwC;IACxC,WAAW,EAAE,SAAS,MAAM,EAAE,CAAC;IAC/B,qCAAqC;IACrC,2BAA2B,EAAE,SAAS,MAAM,EAAE,CAAC;IAC/C,qCAAqC;IACrC,eAAe,EAAE,MAAM,CAAC;CACzB;AAED,MAAM,WAAW,sBAAsB;IACrC,qCAAqC;IACrC,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,6BAA6B;IAC7B,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,wCAAwC;IACxC,KAAK,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAC1B,+EAA+E;IAC/E,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAyKD,wBAAsB,mBAAmB,CACvC,UAAU,EAAE,qBAAqB,EACjC,OAAO,GAAE,sBAA2B,GACnC,OAAO,CAAC,qBAAqB,CAAC,CAsDhC;AAED,wBAAgB,4BAA4B,CAAC,MAAM,EAAE,qBAAqB,GAAG,MAAM,CAiDlF"}

package/dist/changes-summary.js

@@ -12,6 +12,7 @@
  * Read-only; no AI; deterministic. Schema: sharkcraft.changes-summary/v1.
  */
 import { getChangedFiles } from "./git-helpers.js";
+import { resolveVerificationCommands } from "./resolve-verification-commands.js";
 export const CHANGES_SUMMARY_SCHEMA = 'sharkcraft.changes-summary/v1';
 export var ChangeArea;
 (function (ChangeArea) {
@@ -90,6 +91,11 @@ function classifyArea(file) {
     if (/(?:^|\/)[\w-]*sharkcraft-pack\//.test(file)) {
         return ChangeArea.PackContrib;
     }
+    // Extension fallback so the summary stays useful in non-SharkCraft repos
+    // (e.g. a foreign monorepo's `architecture/*.md`) instead of bucketing every
+    // doc as `unknown`.
+    if (/\.mdx?$/i.test(file))
+        return ChangeArea.Docs;
     return ChangeArea.Unknown;
 }
 function classifyFile(file) {
@@ -170,10 +176,14 @@ function computeRisk(files) {
         return { risk: 'medium', reasons };
     return { risk: 'low', reasons };
 }
-function suggestValidationCommands(files) {
-    const out = new Set();
-    out.add('bun x tsc -p tsconfig.base.json --noEmit');
-    out.add('bun test');
+function suggestValidationCommands(files, inspection) {
+    // Project-aware base gates: prefer the repo's OWN configured
+    // verificationCommands (e.g. `nx build <app>` on an Nx repo) over the generic
+    // tsc/test pair, matching plan-simulate / review-packet / task-packet. The
+    // file-type conditional adds below are shrk meta-checks valid on any repo.
+    const out = new Set(resolveVerificationCommands(inspection, {
+        knowledgeDefaults: ['bun x tsc -p tsconfig.base.json --noEmit', 'bun test'],
+    }));
     if (files.some((f) => f.isMcpTool)) {
         out.add('shrk safety audit --deep');
         out.add('shrk commands doctor');
@@ -229,7 +239,11 @@ export async function buildChangesSummary(inspection, options = {}) {
         ref = options.since;
     }
     else {
-        changedFiles = getChangedFiles(cwd, {});
+        // Default working-tree view must include untracked files — otherwise a
+        // brand-new (never-staged) file is invisible to the summary, which made
+        // `totalFiles` undercount whole untracked directories. Mirrors every other
+        // working-tree caller (boundaries / propose-knowledge / architecture).
+        changedFiles = getChangedFiles(cwd, { includeWorktree: true });
         source = 'working-tree';
     }
     const classified = changedFiles.map(classifyFile);
@@ -260,7 +274,7 @@ export async function buildChangesSummary(inspection, options = {}) {
         safetyRelevantFiles,
         risk,
         riskReasons: reasons,
-        suggestedValidationCommands: suggestValidationCommands(classified),
+        suggestedValidationCommands: suggestValidationCommands(classified, inspection),
         likelyPrSummary: buildPrSummary(classified),
     };
 }

package/dist/check-guardrail-globs.d.ts

@@ -0,0 +1,16 @@
+export interface IGuardrailGlobResult {
+    /** Target paths covered by at least one guardrail glob. */
+    allowed: readonly string[];
+    /** Target paths covered by NO guardrail glob — these must not be written. */
+    refused: readonly string[];
+    /** True when every target path is allowed. */
+    ok: boolean;
+}
+/**
+ * Partition `targetPaths` into allowed / refused against the recipe's
+ * `guardrailGlobs` (allow-list). An empty glob list refuses everything — a
+ * recipe with no blast-radius fence must not write (the config validator also
+ * rejects this, but the check is defensive here too).
+ */
+export declare function checkGuardrailGlobs(targetPaths: readonly string[], guardrailGlobs: readonly string[]): IGuardrailGlobResult;
+//# sourceMappingURL=check-guardrail-globs.d.ts.map

package/dist/check-guardrail-globs.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"check-guardrail-globs.d.ts","sourceRoot":"","sources":["../src/check-guardrail-globs.ts"],"names":[],"mappings":"AAmBA,MAAM,WAAW,oBAAoB;IACnC,2DAA2D;IAC3D,OAAO,EAAE,SAAS,MAAM,EAAE,CAAC;IAC3B,6EAA6E;IAC7E,OAAO,EAAE,SAAS,MAAM,EAAE,CAAC;IAC3B,8CAA8C;IAC9C,EAAE,EAAE,OAAO,CAAC;CACb;AAED;;;;;GAKG;AACH,wBAAgB,mBAAmB,CACjC,WAAW,EAAE,SAAS,MAAM,EAAE,EAC9B,cAAc,EAAE,SAAS,MAAM,EAAE,GAChC,oBAAoB,CAWtB"}

package/dist/check-guardrail-globs.js

@@ -0,0 +1,38 @@
+/**
+ * Guardrail-glob enforcement for the delegate worker.
+ *
+ * A recipe declares an ALLOW-LIST of globs (`guardrailGlobs`). A worker-emitted
+ * target path that matches NONE of them is refused before any write — this is
+ * one of the deterministic fences the model cannot influence, layered ON TOP of
+ * the generator's `safeResolveTargetPath` floor.
+ *
+ * CRITICAL: the caller MUST pass the NORMALIZED relative path that will actually
+ * be written (the output of `safeResolveTargetPath`), not the raw string a
+ * worker emitted — otherwise a `../` traversal whose `**` the glob swallows
+ * would pass the fence yet write elsewhere in-root. Matching here is
+ * CASE-SENSITIVE (file paths are case-significant on the platforms that matter),
+ * so `src/**` does not also grant `SRC/…`.
+ *
+ * Pure: deterministic glob match; no I/O, no model.
+ */
+import { globToRegex, toPosix } from "./contract-file-rule.js";
+/**
+ * Partition `targetPaths` into allowed / refused against the recipe's
+ * `guardrailGlobs` (allow-list). An empty glob list refuses everything — a
+ * recipe with no blast-radius fence must not write (the config validator also
+ * rejects this, but the check is defensive here too).
+ */
+export function checkGuardrailGlobs(targetPaths, guardrailGlobs) {
+    const matchers = guardrailGlobs.map((g) => globToRegex(toPosix(g)));
+    const allowed = [];
+    const refused = [];
+    for (const path of targetPaths) {
+        const f = toPosix(path);
+        const covered = matchers.some((re) => re.test(f));
+        if (covered)
+            allowed.push(path);
+        else
+            refused.push(path);
+    }
+    return { allowed, refused, ok: refused.length === 0 };
+}

package/dist/code-intelligence-doctor.d.ts

@@ -0,0 +1,21 @@
+import { type IDoctorCheck } from './doctor-result.js';
+export interface ICodeIntelligenceDoctorOptions {
+    /**
+     * Overrides `Date.now()`. Used by tests to make age computations
+     * deterministic without touching the system clock.
+     */
+    nowMs?: number;
+    /**
+     * Override the stale-data threshold (days). Default 7. Tests use this
+     * to flip a fresh fixture into "stale" without changing mtime.
+     */
+    staleThresholdDays?: number;
+}
+/**
+ * Read every code-intelligence package's persisted state and produce a
+ * compact set of doctor findings. The function is sync (matches the
+ * rest of `runDoctor`) and silent when no state is present (e.g. the
+ * user has never run `shrk graph index`).
+ */
+export declare function buildCodeIntelligenceChecks(projectRoot: string, options?: ICodeIntelligenceDoctorOptions): IDoctorCheck[];
+//# sourceMappingURL=code-intelligence-doctor.d.ts.map

package/dist/code-intelligence-doctor.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"code-intelligence-doctor.d.ts","sourceRoot":"","sources":["../src/code-intelligence-doctor.ts"],"names":[],"mappings":"AAEA,OAAO,EAAkB,KAAK,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAoKvE,MAAM,WAAW,8BAA8B;IAC7C;;;OAGG;IACH,KAAK,CAAC,EAAE,MAAM,CAAC;IACf;;;OAGG;IACH,kBAAkB,CAAC,EAAE,MAAM,CAAC;CAC7B;AAED;;;;;GAKG;AACH,wBAAgB,2BAA2B,CACzC,WAAW,EAAE,MAAM,EACnB,OAAO,GAAE,8BAAmC,GAC3C,YAAY,EAAE,CAkBhB"}