@shrkcrft/inspector 0.1.0-alpha.30 → 0.1.0-alpha.31

package/dist/policy-registry.js

@@ -1,37 +1,82 @@
 import { existsSync } from 'node:fs';
 import * as nodePath from 'node:path';
-import { importModuleViaLoader } from '@shrkcrft/core';
+import { importModuleViaLoader, readContributionExport, RejectionCause, } from '@shrkcrft/core';
 const CACHE = new Map();
-async function idsFrom(file, namespace) {
+/**
+ * THE policy-declaration acceptance predicate (round 12, 12.1): a non-empty
+ * string `id` — `[]` means accepted. An id-less declaration used to be
+ * filtered out with no signal. (A declaration's `evaluate` is the policy
+ * engine's to run; an id alone is enough to be referenced.)
+ */
+export function policyCheckRejectionReasons(raw) {
+    if (!raw || typeof raw !== 'object' || Array.isArray(raw))
+        return ['(entry): must be an object'];
+    const id = raw.id;
+    return typeof id === 'string' && id.length > 0 ? [] : ['id: must be a non-empty string'];
+}
+async function declarationsFrom(file, source, namespace, sink, label, packageName) {
+    let exp;
     try {
-        const mod = (await importModuleViaLoader(file));
-        const decls = mod.default ?? mod.policyChecks ?? [];
-        return decls
-            .filter((d) => typeof d?.id === 'string')
-            .flatMap((d) => [d.id, namespace(d.id)]);
+        exp = readContributionExport(await importModuleViaLoader(file), {
+            namedKeys: ['policyChecks'],
+            singleObject: false,
+        });
     }
-    catch {
-        // A policy file that will not load is `evaluatePolicy`'s problem to report
-        // (it emits a load-failed check). Listing must not turn that into a crash.
+    catch (e) {
+        // A policy file that will not load must not crash listing — and must not
+        // vanish either: it is a load failure THE failure map reports.
+        sink.issues.push({
+            severity: 'warning',
+            code: 'load-failed',
+            message: `${label}: ${(e.message ?? String(e)).split('\n')[0].trim()}`,
+            source: file,
+            ...(packageName ? { packageName } : {}),
+        });
         return [];
     }
+    const ids = [];
+    exp.items.forEach((d, index) => {
+        const reasons = policyCheckRejectionReasons(d);
+        if (reasons.length > 0) {
+            sink.rejected.push({
+                file,
+                index,
+                ...(exp.exportName ? { exportName: exp.exportName } : {}),
+                reasons,
+                cause: RejectionCause.Invalid,
+            });
+            return;
+        }
+        const decl = d;
+        sink.declarations.push({
+            id: decl.id,
+            qualifiedId: namespace(decl.id),
+            source,
+            sourceFile: file,
+            ...(Array.isArray(decl.references) ? { references: decl.references } : {}),
+        });
+        ids.push(decl.id, namespace(decl.id));
+    });
+    return ids;
 }
-/** Load every declared policy id — local files first, then pack contributions. */
-export async function loadPolicyIds(inspection) {
+/** One load of every declared policy check — local files first, then pack contributions — cached per project. */
+async function loadPolicyCache(inspection) {
     const validPacks = inspection.packs?.validPacks ?? [];
     const cacheKey = `${inspection.projectRoot}:${validPacks
         .map((p) => p.packageName + '@' + p.packageVersion)
         .join(',')}`;
     const cached = CACHE.get(inspection.projectRoot);
     if (cached && cached.cacheKey === cacheKey)
-        return cached.list;
-    const out = [];
-    const cfg = inspection.config;
-    for (const rel of cfg?.localPolicyFiles ?? ['sharkcraft/policies.ts']) {
+        return cached;
+    const entry = { cacheKey, list: [], declarations: [], issues: [], rejected: [] };
+    // The local policy file is the policy engine's own default. `localPolicyFiles`
+    // is an engine INPUT (`evaluatePolicy`), not a config key — the strict config
+    // schema rejects it — so the config read that used to sit here was dead.
+    for (const rel of ['sharkcraft/policies.ts']) {
         const full = nodePath.isAbsolute(rel) ? rel : nodePath.join(inspection.projectRoot, rel);
         if (!existsSync(full))
             continue;
-        out.push(...(await idsFrom(full, (id) => `local:${id}`)));
+        entry.list.push(...(await declarationsFrom(full, 'local', (id) => `local:${id}`, entry, `Failed to load ${rel}`)));
     }
     for (const pack of validPacks) {
         const contributions = pack.manifest?.contributions;
@@ -41,11 +86,33 @@ export async function loadPolicyIds(inspection) {
             const full = nodePath.resolve(pack.packageRoot, rel);
             if (!existsSync(full))
                 continue;
-            out.push(...(await idsFrom(full, (id) => `pack:${pack.packageName}:${id}`)));
+            entry.list.push(...(await declarationsFrom(full, 'pack', (id) => `pack:${pack.packageName}:${id}`, entry, `Pack ${pack.packageName} (${rel})`, pack.packageName)));
         }
     }
-    CACHE.set(inspection.projectRoot, { cacheKey, list: out });
-    return out;
+    CACHE.set(inspection.projectRoot, entry);
+    return entry;
+}
+/** Load every declared policy id — local files first, then pack contributions. */
+export async function loadPolicyIds(inspection) {
+    return (await loadPolicyCache(inspection)).list;
+}
+/**
+ * The declared policy checks WITH what did not take effect (round 12, 12.1):
+ * files that failed to import and every declaration the loader refused — from
+ * the same one load {@link loadPolicyIds} reads.
+ */
+export async function loadPolicyDeclarationsWithIssues(inspection) {
+    const c = await loadPolicyCache(inspection);
+    return { declarations: c.declarations, issues: c.issues, rejected: c.rejected };
+}
+/**
+ * The declared policy checks (id, source, `references[]`) from the SAME cache
+ * {@link warmPolicyCache} fills — one reader of the declarations. Returns `[]`
+ * until the cache is warm; the staleness sweep reports that as "not in sweep",
+ * never as "no policies".
+ */
+export function listPolicyDeclarations(inspection) {
+    return CACHE.get(inspection.projectRoot)?.declarations ?? [];
 }
 /**
  * The cached policy ids.

package/dist/probed-id-fields.d.ts

@@ -0,0 +1,21 @@
+/**
+ * THE field → kind binding table for the asset id-list fields the self-config
+ * doctor probes (round 12, 12.3).
+ *
+ * The 12.3 defect was a BINDING, not a missing registry: `discovery.profileIds`
+ * (a WorkspaceProfile applicability filter) was probed against
+ * `migration-profile`, a readiness-gate registry, so it sat at NOT VERIFIED
+ * forever — and filling that unrelated registry flipped the doctor to a false
+ * "not registered" for a real, detected profile. The template path answered
+ * the same question against the same wrong kind with no empty-registry guard.
+ *
+ * The doctor's template, registration-hint and convention families iterate
+ * THIS table (each row through `probeIds`, THE resolver's loud-skip path), and
+ * the r76 binding lock proves every `*Ids` field of `IConventionAppliesTo`,
+ * `IRegistrationHintDiscovery` and template `metadata` has a row naming a
+ * declarable kind — so a new id-bearing field cannot ship unbound, and a
+ * binding cannot silently point at the wrong registry again.
+ */
+import type { IProbedIdField } from './i-probed-id-field.js';
+export declare const PROBED_ID_FIELDS: readonly IProbedIdField[];
+//# sourceMappingURL=probed-id-fields.d.ts.map

package/dist/probed-id-fields.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"probed-id-fields.d.ts","sourceRoot":"","sources":["../src/probed-id-fields.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AACH,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,wBAAwB,CAAC;AAG7D,eAAO,MAAM,gBAAgB,EAAE,SAAS,cAAc,EAuBhB,CAAC"}

package/dist/probed-id-fields.js

@@ -0,0 +1,25 @@
+import { ProbedIdSource } from "./probed-id-source.js";
+export const PROBED_ID_FIELDS = Object.freeze([
+    { source: ProbedIdSource.Template, field: 'metadata.requiredConventionIds', kind: 'convention', label: 'convention' },
+    { source: ProbedIdSource.Template, field: 'metadata.requiredHelperIds', kind: 'helper', label: 'helper' },
+    { source: ProbedIdSource.Template, field: 'metadata.requiredProfileIds', kind: 'workspace-profile', label: 'profile' },
+    {
+        source: ProbedIdSource.Template,
+        field: 'metadata.registrationHintIds',
+        kind: 'registration-hint',
+        label: 'registration-hint',
+    },
+    {
+        source: ProbedIdSource.RegistrationHint,
+        field: 'discovery.conventionIds',
+        kind: 'convention',
+        label: 'convention',
+    },
+    {
+        source: ProbedIdSource.RegistrationHint,
+        field: 'discovery.profileIds',
+        kind: 'workspace-profile',
+        label: 'profile',
+    },
+    { source: ProbedIdSource.Convention, field: 'appliesTo.profileIds', kind: 'workspace-profile', label: 'profile' },
+]);

package/dist/probed-id-source.d.ts

@@ -0,0 +1,11 @@
+/**
+ * The asset kinds whose id-list fields the self-config doctor probes through
+ * THE id resolver via {@link PROBED_ID_FIELDS} (each value is also the
+ * finding's `sourceKind` and the prefix of its `<source>-<label>-missing` code).
+ */
+export declare enum ProbedIdSource {
+    Template = "template",
+    RegistrationHint = "registration-hint",
+    Convention = "convention"
+}
+//# sourceMappingURL=probed-id-source.d.ts.map

package/dist/probed-id-source.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"probed-id-source.d.ts","sourceRoot":"","sources":["../src/probed-id-source.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,oBAAY,cAAc;IACxB,QAAQ,aAAa;IACrB,gBAAgB,sBAAsB;IACtC,UAAU,eAAe;CAC1B"}

package/dist/probed-id-source.js

@@ -0,0 +1,11 @@
+/**
+ * The asset kinds whose id-list fields the self-config doctor probes through
+ * THE id resolver via {@link PROBED_ID_FIELDS} (each value is also the
+ * finding's `sourceKind` and the prefix of its `<source>-<label>-missing` code).
+ */
+export var ProbedIdSource;
+(function (ProbedIdSource) {
+    ProbedIdSource["Template"] = "template";
+    ProbedIdSource["RegistrationHint"] = "registration-hint";
+    ProbedIdSource["Convention"] = "convention";
+})(ProbedIdSource || (ProbedIdSource = {}));

package/dist/profile-registry.d.ts

@@ -1,8 +1,17 @@
+import type { IdReferenceKind } from './reference-registry.js';
 import type { ISharkcraftInspection } from './sharkcraft-inspector.js';
 export declare const PROFILE_REGISTRY_SCHEMA = "sharkcraft.profile-registry/v1";
 export declare enum ProfileKind {
-    Migration = "migration"
+    Migration = "migration",
+    /** Builtin: the engine's WorkspaceProfile vocabulary, with per-repo detection. */
+    Workspace = "workspace"
 }
+/**
+ * The reference kind each profile kind's ids resolve as — so the declaration
+ * table (`REFERENCE_KIND_DECLARATIONS`) can say how a profile kind is filled,
+ * and a new {@link ProfileKind} without a resolver kind is a compile error.
+ */
+export declare const PROFILE_KIND_REFERENCE_KIND: Readonly<Record<ProfileKind, IdReferenceKind>>;
 export declare enum ProfileSource {
     Builtin = "builtin",
     Local = "local",
@@ -19,7 +28,12 @@ export interface IProfileEntry {
     readonly sourceFile?: string;
     readonly tags?: readonly string[];
     readonly appliesWhen?: readonly string[];
-    /** The full profile payload (shape depends on `kind`). */
+    /**
+     * `workspace` entries only: whether THIS repo exhibits the profile (the
+     * same fact as `payload.detected`). Absent on other kinds.
+     */
+    readonly detected?: boolean;
+    /** The full profile payload (shape depends on `kind`; `IWorkspaceProfilePayload` for `workspace`). */
     readonly payload: unknown;
 }
 export interface IProfileRegistryIssue {
@@ -29,6 +43,13 @@ export interface IProfileRegistryIssue {
     readonly profileId?: string;
     readonly kind?: ProfileKind;
 }
+/**
+ * THE builtin `workspace` profile entries: one per {@link WorkspaceProfile}
+ * id, labelled by THE label table, `detected` from this inspection's workspace
+ * detection. Synchronous and never empty — the resolver's `workspace-profile`
+ * kind reads it, so it can never loud-skip.
+ */
+export declare function listWorkspaceProfileEntries(inspection: ISharkcraftInspection): readonly IProfileEntry[];
 export declare function loadAllProfiles(inspection: ISharkcraftInspection): Promise<{
     entries: readonly IProfileEntry[];
     issues: readonly IProfileRegistryIssue[];
@@ -38,4 +59,6 @@ export declare function listProfiles(inspection: ISharkcraftInspection, options?
 }): Promise<readonly IProfileEntry[]>;
 export declare function findProfile(inspection: ISharkcraftInspection, id: string, kind?: ProfileKind): Promise<IProfileEntry | null>;
 export declare function listProfileIssues(inspection: ISharkcraftInspection): Promise<readonly IProfileRegistryIssue[]>;
+/** True when `value` names a {@link ProfileKind} — THE parse the CLI `--kind` flag and MCP `kind` input share. */
+export declare function isProfileKind(value: string): value is ProfileKind;
 //# sourceMappingURL=profile-registry.d.ts.map

package/dist/profile-registry.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"profile-registry.d.ts","sourceRoot":"","sources":["../src/profile-registry.ts"],"names":[],"mappings":"AAWA,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,2BAA2B,CAAC;AAEvE,eAAO,MAAM,uBAAuB,mCAAmC,CAAC;AAExE,oBAAY,WAAW;IACrB,SAAS,cAAc;CAExB;AAED,oBAAY,aAAa;IACvB,OAAO,YAAY;IACnB,KAAK,UAAU;IACf,IAAI,SAAS;IACb,OAAO,YAAY;CACpB;AAED,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,IAAI,EAAE,WAAW,CAAC;IAC3B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,MAAM,EAAE,aAAa,CAAC;IAC/B,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,IAAI,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAClC,QAAQ,CAAC,WAAW,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IACzC,0DAA0D;IAC1D,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;CAC3B;AAED,MAAM,WAAW,qBAAqB;IACpC,QAAQ,CAAC,QAAQ,EAAE,MAAM,GAAG,SAAS,GAAG,OAAO,CAAC;IAChD,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,IAAI,CAAC,EAAE,WAAW,CAAC;CAC7B;AAED,wBAAsB,eAAe,CACnC,UAAU,EAAE,qBAAqB,GAChC,OAAO,CAAC;IACT,OAAO,EAAE,SAAS,aAAa,EAAE,CAAC;IAClC,MAAM,EAAE,SAAS,qBAAqB,EAAE,CAAC;CAC1C,CAAC,CAsCD;AAED,wBAAsB,YAAY,CAChC,UAAU,EAAE,qBAAqB,EACjC,OAAO,GAAE;IAAE,IAAI,CAAC,EAAE,WAAW,CAAA;CAAO,GACnC,OAAO,CAAC,SAAS,aAAa,EAAE,CAAC,CAInC;AAED,wBAAsB,WAAW,CAC/B,UAAU,EAAE,qBAAqB,EACjC,EAAE,EAAE,MAAM,EACV,IAAI,CAAC,EAAE,WAAW,GACjB,OAAO,CAAC,aAAa,GAAG,IAAI,CAAC,CAK/B;AAED,wBAAsB,iBAAiB,CACrC,UAAU,EAAE,qBAAqB,GAChC,OAAO,CAAC,SAAS,qBAAqB,EAAE,CAAC,CAG3C"}
+{"version":3,"file":"profile-registry.d.ts","sourceRoot":"","sources":["../src/profile-registry.ts"],"names":[],"mappings":"AAsBA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,yBAAyB,CAAC;AAC/D,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,2BAA2B,CAAC;AAEvE,eAAO,MAAM,uBAAuB,mCAAmC,CAAC;AAExE,oBAAY,WAAW;IACrB,SAAS,cAAc;IACvB,kFAAkF;IAClF,SAAS,cAAc;CACxB;AAED;;;;GAIG;AACH,eAAO,MAAM,2BAA2B,EAAE,QAAQ,CAAC,MAAM,CAAC,WAAW,EAAE,eAAe,CAAC,CAGrF,CAAC;AAEH,oBAAY,aAAa;IACvB,OAAO,YAAY;IACnB,KAAK,UAAU;IACf,IAAI,SAAS;IACb,OAAO,YAAY;CACpB;AAED,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,IAAI,EAAE,WAAW,CAAC;IAC3B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,MAAM,EAAE,aAAa,CAAC;IAC/B,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,IAAI,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAClC,QAAQ,CAAC,WAAW,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IACzC;;;OAGG;IACH,QAAQ,CAAC,QAAQ,CAAC,EAAE,OAAO,CAAC;IAC5B,sGAAsG;IACtG,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;CAC3B;AAED,MAAM,WAAW,qBAAqB;IACpC,QAAQ,CAAC,QAAQ,EAAE,MAAM,GAAG,SAAS,GAAG,OAAO,CAAC;IAChD,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,IAAI,CAAC,EAAE,WAAW,CAAC;CAC7B;AAED;;;;;GAKG;AACH,wBAAgB,2BAA2B,CAAC,UAAU,EAAE,qBAAqB,GAAG,SAAS,aAAa,EAAE,CAoBvG;AAED,wBAAsB,eAAe,CACnC,UAAU,EAAE,qBAAqB,GAChC,OAAO,CAAC;IACT,OAAO,EAAE,SAAS,aAAa,EAAE,CAAC;IAClC,MAAM,EAAE,SAAS,qBAAqB,EAAE,CAAC;CAC1C,CAAC,CAuCD;AAED,wBAAsB,YAAY,CAChC,UAAU,EAAE,qBAAqB,EACjC,OAAO,GAAE;IAAE,IAAI,CAAC,EAAE,WAAW,CAAA;CAAO,GACnC,OAAO,CAAC,SAAS,aAAa,EAAE,CAAC,CAInC;AAED,wBAAsB,WAAW,CAC/B,UAAU,EAAE,qBAAqB,EACjC,EAAE,EAAE,MAAM,EACV,IAAI,CAAC,EAAE,WAAW,GACjB,OAAO,CAAC,aAAa,GAAG,IAAI,CAAC,CAK/B;AAED,wBAAsB,iBAAiB,CACrC,UAAU,EAAE,qBAAqB,GAChC,OAAO,CAAC,SAAS,qBAAqB,EAAE,CAAC,CAG3C;AAED,kHAAkH;AAClH,wBAAgB,aAAa,CAAC,KAAK,EAAE,MAAM,GAAG,KAAK,IAAI,WAAW,CAEjE"}

package/dist/profile-registry.js

@@ -1,20 +1,40 @@
 /**
  * Generic profile registry.
  *
- * Unifies profile-shaped contributions (migration profiles, future
- * profile kinds) under a single `shrk profiles ...` surface. The engine
- * ships zero built-in profiles; everything comes from pack contributions
- * or local config.
+ * Unifies profile-shaped vocabularies under a single `shrk profiles ...`
+ * surface (and MCP `list_profiles` / `get_profile`):
+ *
+ *   - `workspace` — BUILTIN: the engine's {@link WorkspaceProfile} vocabulary
+ *     (`has-typescript`, `is-library`, …). The applicability filters
+ *     (`IPreset.appliesTo`, a convention's `appliesTo.profileIds`, a
+ *     registration hint's `discovery.profileIds`, a template's
+ *     `metadata.requiredProfileIds`) name these ids, and THE id resolver's
+ *     `workspace-profile` kind reads {@link listWorkspaceProfileEntries} — the
+ *     same function `profiles list --kind workspace` prints. Every id is listed;
+ *     `detected` says whether this repo exhibits it.
+ *   - `migration` — pack-contributed (`migrationProfileFiles`) or local
+ *     (`sharkcraft/migration-profiles.ts`) migration-readiness gates.
  *
  * Read-only.
  */
+import { describeWorkspaceProfile, listWorkspaceProfiles } from '@shrkcrft/workspace';
 import { loadMigrationProfiles } from "./migration-profile-registry.js";
 export const PROFILE_REGISTRY_SCHEMA = 'sharkcraft.profile-registry/v1';
 export var ProfileKind;
 (function (ProfileKind) {
     ProfileKind["Migration"] = "migration";
-    /** Future: command-behavior, generator, boundary, naming, architecture, language, report. */
+    /** Builtin: the engine's WorkspaceProfile vocabulary, with per-repo detection. */
+    ProfileKind["Workspace"] = "workspace";
 })(ProfileKind || (ProfileKind = {}));
+/**
+ * The reference kind each profile kind's ids resolve as — so the declaration
+ * table (`REFERENCE_KIND_DECLARATIONS`) can say how a profile kind is filled,
+ * and a new {@link ProfileKind} without a resolver kind is a compile error.
+ */
+export const PROFILE_KIND_REFERENCE_KIND = Object.freeze({
+    [ProfileKind.Migration]: 'migration-profile',
+    [ProfileKind.Workspace]: 'workspace-profile',
+});
 export var ProfileSource;
 (function (ProfileSource) {
     ProfileSource["Builtin"] = "builtin";
@@ -22,8 +42,37 @@ export var ProfileSource;
     ProfileSource["Pack"] = "pack";
     ProfileSource["Fixture"] = "fixture";
 })(ProfileSource || (ProfileSource = {}));
+/**
+ * THE builtin `workspace` profile entries: one per {@link WorkspaceProfile}
+ * id, labelled by THE label table, `detected` from this inspection's workspace
+ * detection. Synchronous and never empty — the resolver's `workspace-profile`
+ * kind reads it, so it can never loud-skip.
+ */
+export function listWorkspaceProfileEntries(inspection) {
+    const evidence = new Map();
+    for (const e of inspection.workspace?.profileEvidence ?? [])
+        evidence.set(e.profile, e.reason);
+    const detected = new Set(inspection.workspace?.profiles ?? []);
+    return listWorkspaceProfiles().map((id) => {
+        const isDetected = detected.has(id);
+        const reason = evidence.get(id);
+        const payload = {
+            detected: isDetected,
+            ...(isDetected && reason !== undefined ? { reason } : {}),
+        };
+        return {
+            id,
+            kind: ProfileKind.Workspace,
+            title: describeWorkspaceProfile(id),
+            source: ProfileSource.Builtin,
+            detected: isDetected,
+            payload,
+        };
+    });
+}
 export async function loadAllProfiles(inspection) {
-    const entries = [];
+    // Builtin first: the vocabulary every applicability filter names.
+    const entries = [...listWorkspaceProfileEntries(inspection)];
     const issues = [];
     // Migration profiles
     try {
@@ -74,3 +123,7 @@ export async function listProfileIssues(inspection) {
     const { issues } = await loadAllProfiles(inspection);
     return issues;
 }
+/** True when `value` names a {@link ProfileKind} — THE parse the CLI `--kind` flag and MCP `kind` input share. */
+export function isProfileKind(value) {
+    return Object.values(ProfileKind).includes(value);
+}

package/dist/quality-gate-examination.d.ts

@@ -0,0 +1,15 @@
+/**
+ * How one quality gate's run counts toward the quality report's coverage —
+ * THE classification behind `IQualityReport.overall` and `shrk quality`'s item
+ * status, so the MCP / dashboard / report-site verdict and the CLI verdict
+ * cannot disagree about a gate.
+ */
+export declare enum QualityGateExamination {
+    /** It ran over its whole scope: its `passed` is a verdict. */
+    Examined = "examined",
+    /** It examined nothing and was optional: a deliberate skip, never counted as a pass. */
+    DeliberateSkip = "deliberate-skip",
+    /** It could not run, examined nothing while required, or examined only part of its scope. */
+    Unexamined = "unexamined"
+}
+//# sourceMappingURL=quality-gate-examination.d.ts.map

package/dist/quality-gate-examination.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"quality-gate-examination.d.ts","sourceRoot":"","sources":["../src/quality-gate-examination.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AACH,oBAAY,sBAAsB;IAChC,8DAA8D;IAC9D,QAAQ,aAAa;IACrB,wFAAwF;IACxF,cAAc,oBAAoB;IAClC,6FAA6F;IAC7F,UAAU,eAAe;CAC1B"}

package/dist/quality-gate-examination.js

@@ -0,0 +1,15 @@
+/**
+ * How one quality gate's run counts toward the quality report's coverage —
+ * THE classification behind `IQualityReport.overall` and `shrk quality`'s item
+ * status, so the MCP / dashboard / report-site verdict and the CLI verdict
+ * cannot disagree about a gate.
+ */
+export var QualityGateExamination;
+(function (QualityGateExamination) {
+    /** It ran over its whole scope: its `passed` is a verdict. */
+    QualityGateExamination["Examined"] = "examined";
+    /** It examined nothing and was optional: a deliberate skip, never counted as a pass. */
+    QualityGateExamination["DeliberateSkip"] = "deliberate-skip";
+    /** It could not run, examined nothing while required, or examined only part of its scope. */
+    QualityGateExamination["Unexamined"] = "unexamined";
+})(QualityGateExamination || (QualityGateExamination = {}));

package/dist/quality-gate-row-status.d.ts

@@ -0,0 +1,19 @@
+import { QualityGateStatus } from './quality-gate-status.js';
+import type { IQualityGateResult } from './quality-report.js';
+/**
+ * THE row status of one quality gate, for every renderer (the dashboard, the
+ * HTML report, the report site), derived from the one classification
+ * (`examineQualityGate`) that `overall` and `shrk quality` also read.
+ *
+ *   a deliberate (optional) skip                       → skipped
+ *   a gate that ran and failed (a finding dominates)   → fail / warn
+ *   unexamined: could not run, examined nothing while
+ *   required, or passed over part of its scope         → not-verified
+ *   anything else                                      → pass
+ *
+ * Before round 11 each renderer re-derived the row from `g.passed`, so a gate
+ * whose boundary rule had a dead scope glob read `pass` / `OK` next to an
+ * overall `not-verified`.
+ */
+export declare function qualityGateStatus(g: IQualityGateResult): QualityGateStatus;
+//# sourceMappingURL=quality-gate-row-status.d.ts.map

package/dist/quality-gate-row-status.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"quality-gate-row-status.d.ts","sourceRoot":"","sources":["../src/quality-gate-row-status.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,iBAAiB,EAAE,MAAM,0BAA0B,CAAC;AAE7D,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,qBAAqB,CAAC;AAE9D;;;;;;;;;;;;;;GAcG;AACH,wBAAgB,iBAAiB,CAAC,CAAC,EAAE,kBAAkB,GAAG,iBAAiB,CAM1E"}

package/dist/quality-gate-row-status.js

@@ -0,0 +1,28 @@
+import { QualityGateExamination } from "./quality-gate-examination.js";
+import { QualityGateStatus } from "./quality-gate-status.js";
+import { examineQualityGate } from "./quality-report-coverage.js";
+/**
+ * THE row status of one quality gate, for every renderer (the dashboard, the
+ * HTML report, the report site), derived from the one classification
+ * (`examineQualityGate`) that `overall` and `shrk quality` also read.
+ *
+ *   a deliberate (optional) skip                       → skipped
+ *   a gate that ran and failed (a finding dominates)   → fail / warn
+ *   unexamined: could not run, examined nothing while
+ *   required, or passed over part of its scope         → not-verified
+ *   anything else                                      → pass
+ *
+ * Before round 11 each renderer re-derived the row from `g.passed`, so a gate
+ * whose boundary rule had a dead scope glob read `pass` / `OK` next to an
+ * overall `not-verified`.
+ */
+export function qualityGateStatus(g) {
+    const exam = examineQualityGate(g);
+    if (exam === QualityGateExamination.DeliberateSkip)
+        return QualityGateStatus.Skipped;
+    if (g.executed && !g.passed)
+        return g.blocking ? QualityGateStatus.Fail : QualityGateStatus.Warn;
+    if (exam === QualityGateExamination.Unexamined)
+        return QualityGateStatus.NotVerified;
+    return QualityGateStatus.Pass;
+}

package/dist/quality-gate-status.d.ts

@@ -0,0 +1,16 @@
+/**
+ * How one quality gate's ROW reads on every renderer (the dashboard, the HTML
+ * report, the report site), derived once by `qualityGateStatus` from the one
+ * classification (`examineQualityGate`). A gate that passed over part of its
+ * scope is `not-verified`, never `pass` / `OK`.
+ */
+export declare enum QualityGateStatus {
+    Pass = "pass",
+    Warn = "warn",
+    Fail = "fail",
+    /** It could not run, examined nothing while required, or examined only part of its scope. */
+    NotVerified = "not-verified",
+    /** It examined nothing and was optional: a deliberate skip. */
+    Skipped = "skipped"
+}
+//# sourceMappingURL=quality-gate-status.d.ts.map

package/dist/quality-gate-status.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"quality-gate-status.d.ts","sourceRoot":"","sources":["../src/quality-gate-status.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AACH,oBAAY,iBAAiB;IAC3B,IAAI,SAAS;IACb,IAAI,SAAS;IACb,IAAI,SAAS;IACb,6FAA6F;IAC7F,WAAW,iBAAiB;IAC5B,+DAA+D;IAC/D,OAAO,YAAY;CACpB"}

package/dist/quality-gate-status.js

@@ -0,0 +1,16 @@
+/**
+ * How one quality gate's ROW reads on every renderer (the dashboard, the HTML
+ * report, the report site), derived once by `qualityGateStatus` from the one
+ * classification (`examineQualityGate`). A gate that passed over part of its
+ * scope is `not-verified`, never `pass` / `OK`.
+ */
+export var QualityGateStatus;
+(function (QualityGateStatus) {
+    QualityGateStatus["Pass"] = "pass";
+    QualityGateStatus["Warn"] = "warn";
+    QualityGateStatus["Fail"] = "fail";
+    /** It could not run, examined nothing while required, or examined only part of its scope. */
+    QualityGateStatus["NotVerified"] = "not-verified";
+    /** It examined nothing and was optional: a deliberate skip. */
+    QualityGateStatus["Skipped"] = "skipped";
+})(QualityGateStatus || (QualityGateStatus = {}));

package/dist/quality-html.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"quality-html.d.ts","sourceRoot":"","sources":["../src/quality-html.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAC;AA2B1D,wBAAgB,iBAAiB,CAAC,MAAM,EAAE,cAAc,GAAG,MAAM,CAwChE"}
+{"version":3,"file":"quality-html.d.ts","sourceRoot":"","sources":["../src/quality-html.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAC;AA8B1D,wBAAgB,iBAAiB,CAAC,MAAM,EAAE,cAAc,GAAG,MAAM,CAiDhE"}

package/dist/quality-html.js

@@ -1,3 +1,5 @@
+import { QualityGateStatus } from "./quality-gate-status.js";
+import { qualityGateStatus } from "./quality-gate-row-status.js";
 const CSS = `
 *{box-sizing:border-box}body{font-family:-apple-system,BlinkMacSystemFont,"Segoe UI",Roboto,sans-serif;margin:0;background:#0f1419;color:#e6e1cf;padding:2rem;line-height:1.55}
 h1,h2,h3{margin-top:1.4rem;color:#bae67e}
@@ -18,7 +20,8 @@ function escapeHtml(s) {
 function badgeFor(overall) {
     if (overall === 'pass')
         return `<span class="badge b-pass">${overall}</span>`;
-    if (overall === 'warn')
+    // Not verified is never drawn as a pass.
+    if (overall === 'warn' || overall === 'not-verified')
         return `<span class="badge b-warn">${overall}</span>`;
     return `<span class="badge b-fail">${overall}</span>`;
 }
@@ -35,8 +38,16 @@ export function renderQualityHtml(report) {
     out.push('<h2>Gates</h2>');
     out.push('<table><thead><tr><th>Gate</th><th>Verdict</th><th>Blocking</th><th>Executed</th><th>Notes</th></tr></thead><tbody>');
     for (const g of report.gates) {
-        const tag = g.passed ? 'b-pass' : g.blocking ? 'b-fail' : 'b-warn';
-        const verdict = g.passed ? 'pass' : g.blocking ? 'fail' : 'warn';
+        // THE row status (`qualityGateStatus`): a gate that passed over part of
+        // its scope is `not-verified`, never drawn as a pass.
+        const verdict = qualityGateStatus(g);
+        const tag = verdict === QualityGateStatus.Pass
+            ? 'b-pass'
+            : verdict === QualityGateStatus.Fail
+                ? 'b-fail'
+                : verdict === QualityGateStatus.Skipped
+                    ? 'b-skip'
+                    : 'b-warn';
         out.push(`<tr><td><code>${escapeHtml(g.id)}</code> — ${escapeHtml(g.label)}</td>` +
             `<td><span class="badge ${tag}">${verdict}</span></td>` +
             `<td>${g.blocking ? 'yes' : 'no'}</td>` +

package/dist/quality-report-coverage.d.ts

@@ -0,0 +1,26 @@
+import type { IVerdictCoverage } from '@shrkcrft/core';
+import { QualityGateExamination } from './quality-gate-examination.js';
+import type { IQualityGateResult } from './quality-report.js';
+/**
+ * THE classification of one quality gate's run:
+ *
+ *   - not executed (it threw, or MCP would not run it)  → unexamined
+ *   - `data.examinedNothing` (zero tests, zero rules)   → unexamined when the
+ *     gate is required (blocking), a deliberate skip when it is optional
+ *   - passed, with `data.partial` (a boundary rule whose scope glob went dead,
+ *     an agent test the runner could not evaluate)     → unexamined
+ *   - anything else                                     → examined
+ *
+ * `shrk quality` maps each gate onto its item through this one function, and
+ * `buildQualityReport` derives `overall` from it, so no consumer can read a
+ * pass over a gate the other calls partial.
+ */
+export declare function examineQualityGate(g: IQualityGateResult): QualityGateExamination;
+/**
+ * What a quality report examined, as one coverage record (unit `quality
+ * gates`): every gate but the deliberate skips was asked for, and the
+ * unexamined ones are named. Core's `coverageShortfall` over it is what turns
+ * a clean report into `not-verified`.
+ */
+export declare function qualityReportCoverage(gates: readonly IQualityGateResult[]): IVerdictCoverage;
+//# sourceMappingURL=quality-report-coverage.d.ts.map

package/dist/quality-report-coverage.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"quality-report-coverage.d.ts","sourceRoot":"","sources":["../src/quality-report-coverage.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,gBAAgB,CAAC;AACvD,OAAO,EAAE,sBAAsB,EAAE,MAAM,+BAA+B,CAAC;AACvE,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,qBAAqB,CAAC;AAE9D;;;;;;;;;;;;;GAaG;AACH,wBAAgB,kBAAkB,CAAC,CAAC,EAAE,kBAAkB,GAAG,sBAAsB,CAOhF;AAED;;;;;GAKG;AACH,wBAAgB,qBAAqB,CAAC,KAAK,EAAE,SAAS,kBAAkB,EAAE,GAAG,gBAAgB,CAgB5F"}

package/dist/quality-report-coverage.js

@@ -0,0 +1,48 @@
+import { QualityGateExamination } from "./quality-gate-examination.js";
+/**
+ * THE classification of one quality gate's run:
+ *
+ *   - not executed (it threw, or MCP would not run it)  → unexamined
+ *   - `data.examinedNothing` (zero tests, zero rules)   → unexamined when the
+ *     gate is required (blocking), a deliberate skip when it is optional
+ *   - passed, with `data.partial` (a boundary rule whose scope glob went dead,
+ *     an agent test the runner could not evaluate)     → unexamined
+ *   - anything else                                     → examined
+ *
+ * `shrk quality` maps each gate onto its item through this one function, and
+ * `buildQualityReport` derives `overall` from it, so no consumer can read a
+ * pass over a gate the other calls partial.
+ */
+export function examineQualityGate(g) {
+    if (!g.executed)
+        return QualityGateExamination.Unexamined;
+    if (g.data?.['examinedNothing'] === true) {
+        return g.blocking ? QualityGateExamination.Unexamined : QualityGateExamination.DeliberateSkip;
+    }
+    if (g.passed && g.data?.['partial'] === true)
+        return QualityGateExamination.Unexamined;
+    return QualityGateExamination.Examined;
+}
+/**
+ * What a quality report examined, as one coverage record (unit `quality
+ * gates`): every gate but the deliberate skips was asked for, and the
+ * unexamined ones are named. Core's `coverageShortfall` over it is what turns
+ * a clean report into `not-verified`.
+ */
+export function qualityReportCoverage(gates) {
+    const exams = gates.map((g) => ({ id: g.id, exam: examineQualityGate(g) }));
+    const deliberate = exams.filter((e) => e.exam === QualityGateExamination.DeliberateSkip).length;
+    const unexamined = exams.filter((e) => e.exam === QualityGateExamination.Unexamined).map((e) => e.id);
+    const expected = gates.length - deliberate;
+    return {
+        unit: 'quality gates',
+        expected,
+        examined: expected - unexamined.length,
+        ...(unexamined.length > 0
+            ? {
+                unexamined,
+                reason: 'could not run, examined nothing while required, or examined only part of their scope',
+            }
+            : {}),
+    };
+}