@shrkcrft/inspector 0.1.0-alpha.27 → 0.1.0-alpha.28

package/dist/resolve-project-config.d.ts

@@ -1,7 +1,7 @@
 import { type AppError, type Result } from '@shrkcrft/core';
 import { type LoadedConfig } from '@shrkcrft/config';
 /**
- * A {@link LoadedConfig} whose four data planes have had pack contributions
+ * A {@link LoadedConfig} whose data planes have had pack contributions
  * merged in (local-wins), plus the human-readable notes from that merge.
  */
 export interface IResolvedProjectConfig extends LoadedConfig {

package/dist/resolve-project-config.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"resolve-project-config.d.ts","sourceRoot":"","sources":["../src/resolve-project-config.ts"],"names":[],"mappings":"AAuBA,OAAO,EAGL,KAAK,QAAQ,EAMb,KAAK,MAAM,EACZ,MAAM,gBAAgB,CAAC;AACxB,OAAO,EAOL,KAAK,YAAY,EAClB,MAAM,kBAAkB,CAAC;AAG1B;;;GAGG;AACH,MAAM,WAAW,sBAAuB,SAAQ,YAAY;IAC1D;;;;;;OAMG;IACH,QAAQ,CAAC,gBAAgB,EAAE,SAAS,MAAM,EAAE,CAAC;CAC9C;AAoHD;;;;;;;GAOG;AACH,wBAAsB,oBAAoB,CACxC,GAAG,EAAE,MAAM,GACV,OAAO,CAAC,MAAM,CAAC,sBAAsB,EAAE,QAAQ,CAAC,CAAC,CAoEnD"}
+{"version":3,"file":"resolve-project-config.d.ts","sourceRoot":"","sources":["../src/resolve-project-config.ts"],"names":[],"mappings":"AAwBA,OAAO,EAGL,KAAK,QAAQ,EAQb,KAAK,MAAM,EACZ,MAAM,gBAAgB,CAAC;AACxB,OAAO,EASL,KAAK,YAAY,EAClB,MAAM,kBAAkB,CAAC;AAG1B;;;GAGG;AACH,MAAM,WAAW,sBAAuB,SAAQ,YAAY;IAC1D;;;;;;OAMG;IACH,QAAQ,CAAC,gBAAgB,EAAE,SAAS,MAAM,EAAE,CAAC;CAC9C;AAiID;;;;;;;GAOG;AACH,wBAAsB,oBAAoB,CACxC,GAAG,EAAE,MAAM,GACV,OAAO,CAAC,MAAM,CAAC,sBAAsB,EAAE,QAAQ,CAAC,CAAC,CAqGnD"}

package/dist/resolve-project-config.js

@@ -1,8 +1,9 @@
 /**
  * Pack-aware project-config resolution.
  *
- * The four "cross-file invariant as DATA" planes — `wiringRules`, `registries`,
- * `policyRules`, `reusePrimitives` — can be authored inline in a repo's
+ * The "cross-file invariant as DATA" planes — `wiringRules`, `registries`,
+ * `registrationGraph`, `policyRules`, `baselines`, `generatedArtifacts`,
+ * `reusePrimitives` — can be authored inline in a repo's
  * `sharkcraft.config.ts`. They can ALSO be SHIPPED by a framework pack (e.g. a
  * NestJS pack contributing "every @Injectable must be registered in a module"
  * as a wiring rule) via the new `wiringRuleFiles` / `registryFiles` /
@@ -22,7 +23,7 @@
 import { existsSync } from 'node:fs';
 import * as nodePath from 'node:path';
 import { importModuleViaLoader, ok, } from '@shrkcrft/core';
-import { loadProjectConfig, PolicyRuleSchema, RegistrationIdiomSchema, RegistryDeclarationSchema, ReusePrimitiveSchema, WiringRuleSchema, } from '@shrkcrft/config';
+import { BaselineRuleSchema, GeneratedArtifactRuleSchema, loadProjectConfig, PolicyRuleSchema, RegistrationIdiomSchema, RegistryDeclarationSchema, ReusePrimitiveSchema, WiringRuleSchema, } from '@shrkcrft/config';
 import { discoverPacks } from '@shrkcrft/packs';
 /**
  * Generic per-plane load + validate + merge. Seeds the merged map from the
@@ -31,7 +32,13 @@ import { discoverPacks } from '@shrkcrft/packs';
  * elements, and key collisions all become diagnostics and are skipped — never a
  * throw.
  */
-async function mergePlane(localArr, packContribs, schema, keyOf, planeLabel, diagnostics) {
+async function mergePlane(localArr, packContribs, schema, keyOf, planeLabel, diagnostics, 
+/**
+ * Optional per-item veto applied to PACK elements only. Returns the
+ * diagnostic to record when the element must not be adopted (used by the
+ * shell-executing planes — see the call sites).
+ */
+packGuard) {
     const merged = new Map();
     const localKeys = new Set();
     for (const item of localArr) {
@@ -68,6 +75,11 @@ async function mergePlane(localArr, packContribs, schema, keyOf, planeLabel, dia
                 continue;
             }
             const item = parsed.data;
+            const veto = packGuard?.(item, contrib.packageName);
+            if (veto !== undefined) {
+                diagnostics.push(veto);
+                continue;
+            }
             const key = keyOf(item);
             if (merged.has(key)) {
                 diagnostics.push(localKeys.has(key)
@@ -120,6 +132,19 @@ export async function resolveProjectConfig(cwd) {
     const registries = await mergePlane(base.config.registries ?? [], gatherPackContribs(validPacks, 'registryFiles'), RegistryDeclarationSchema, (r) => r.name, 'registry', diagnostics);
     const registrationGraph = await mergePlane(base.config.registrationGraph ?? [], gatherPackContribs(validPacks, 'registrationGraphFiles'), RegistrationIdiomSchema, (r) => r.name, 'registrationIdiom', diagnostics);
     const policyRules = await mergePlane(base.config.policyRules ?? [], gatherPackContribs(validPacks, 'policyRuleFiles'), PolicyRuleSchema, (r) => r.id, 'policyRule', diagnostics);
+    // The two SHELL-EXECUTING planes. A pack ships code the repo did not write;
+    // letting it also ship a command that `shrk baseline check` would then RUN is
+    // the same hazard the "pack-contributed verification commands are NOT
+    // auto-run" contract already forbids. So the merge keeps the safe subset —
+    // extractor computes and header-only generated rules — and drops the rest
+    // with a diagnostic. The guarantee is structural: no downstream caller has to
+    // remember to re-check provenance.
+    const baselines = await mergePlane(base.config.baselines ?? [], gatherPackContribs(validPacks, 'baselineFiles'), BaselineRuleSchema, (r) => r.id, 'baseline', diagnostics, (item, packName) => item.compute?.kind === 'command'
+        ? `pack ${packName}: baseline "${item.id}" declares a shell \`compute.run\` — pack-contributed commands are never auto-run — skipped`
+        : undefined);
+    const generatedArtifacts = await mergePlane(base.config.generatedArtifacts ?? [], gatherPackContribs(validPacks, 'generatedArtifactFiles'), GeneratedArtifactRuleSchema, (r) => r.id, 'generatedArtifact', diagnostics, (item, packName) => item.regen !== undefined
+        ? `pack ${packName}: generatedArtifact "${item.id}" declares a \`regen\` command — pack-contributed commands are never auto-run — skipped`
+        : undefined);
     const reusePrimitives = await mergePlane(base.config.reusePrimitives ?? [], gatherPackContribs(validPacks, 'reusePrimitiveFiles'), ReusePrimitiveSchema, (r) => r.symbol, 'reusePrimitive', diagnostics);
     return ok({
         ...base,
@@ -129,6 +154,8 @@ export async function resolveProjectConfig(cwd) {
             registries,
             registrationGraph,
             policyRules,
+            baselines,
+            generatedArtifacts,
             reusePrimitives,
         },
         planeDiagnostics: diagnostics,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@shrkcrft/inspector",
-  "version": "0.1.0-alpha.27",
+  "version": "0.1.0-alpha.28",
   "description": "SharkCraft inspector: project overview, doctor checks, AI-agent instructions.",
   "license": "MIT",
   "author": "SharkCraft contributors",
@@ -42,22 +42,22 @@
     "typecheck": "tsc --noEmit -p tsconfig.json"
   },
   "dependencies": {
-    "@shrkcrft/core": "^0.1.0-alpha.27",
-    "@shrkcrft/config": "^0.1.0-alpha.27",
-    "@shrkcrft/workspace": "^0.1.0-alpha.27",
-    "@shrkcrft/knowledge": "^0.1.0-alpha.27",
-    "@shrkcrft/rules": "^0.1.0-alpha.27",
-    "@shrkcrft/paths": "^0.1.0-alpha.27",
-    "@shrkcrft/templates": "^0.1.0-alpha.27",
-    "@shrkcrft/context": "^0.1.0-alpha.27",
-    "@shrkcrft/pipelines": "^0.1.0-alpha.27",
-    "@shrkcrft/packs": "^0.1.0-alpha.27",
-    "@shrkcrft/presets": "^0.1.0-alpha.27",
-    "@shrkcrft/boundaries": "^0.1.0-alpha.27",
-    "@shrkcrft/generator": "^0.1.0-alpha.27",
-    "@shrkcrft/importer": "^0.1.0-alpha.27",
-    "@shrkcrft/plugin-api": "^0.1.0-alpha.27",
-    "@shrkcrft/dashboard-api": "^0.1.0-alpha.27",
+    "@shrkcrft/core": "^0.1.0-alpha.28",
+    "@shrkcrft/config": "^0.1.0-alpha.28",
+    "@shrkcrft/workspace": "^0.1.0-alpha.28",
+    "@shrkcrft/knowledge": "^0.1.0-alpha.28",
+    "@shrkcrft/rules": "^0.1.0-alpha.28",
+    "@shrkcrft/paths": "^0.1.0-alpha.28",
+    "@shrkcrft/templates": "^0.1.0-alpha.28",
+    "@shrkcrft/context": "^0.1.0-alpha.28",
+    "@shrkcrft/pipelines": "^0.1.0-alpha.28",
+    "@shrkcrft/packs": "^0.1.0-alpha.28",
+    "@shrkcrft/presets": "^0.1.0-alpha.28",
+    "@shrkcrft/boundaries": "^0.1.0-alpha.28",
+    "@shrkcrft/generator": "^0.1.0-alpha.28",
+    "@shrkcrft/importer": "^0.1.0-alpha.28",
+    "@shrkcrft/plugin-api": "^0.1.0-alpha.28",
+    "@shrkcrft/dashboard-api": "^0.1.0-alpha.28",
     "typescript": "^5.6.0"
   },
   "publishConfig": {