@shrkcrft/inspector 0.1.0-alpha.30 → 0.1.0-alpha.32

package/dist/validate-contribution-file.js

@@ -0,0 +1,233 @@
+/**
+ * Validate ONE contribution file at build time through the SAME loader — or
+ * THE acceptance predicate the loader applies — that the engine runs at load
+ * (round 12, 12.1c / 12.1f). `shrk packs test --load` used to check only that
+ * each entry of 8 slots carried a string `id`, so a convention missing its
+ * required `severity` passed the build and then vanished at load.
+ *
+ *   - knowledge / rules / paths / path conventions / docs, templates,
+ *     pipelines, presets, boundary rules, scaffold patterns — the loader
+ *     function itself (each returns its `rejected` entries);
+ *   - the registry kinds (conventions, helpers, hints, playbooks, constructs,
+ *     …) — THE export reading (`readContributionExport`) and THE per-kind
+ *     predicate the registry loader calls (`<kind>RejectionReasons`), plus the
+ *     loader's own duplicate-id refusal within the file;
+ *   - the gate planes — THE merge seam's schema + shell veto
+ *     (`packPlaneElementRejectionReasons`);
+ *   - framework extractors — THE shared reading + shape predicate.
+ *
+ * What only a consuming repository can decide (a duplicate across files or
+ * packs, a facet's target construct, a `$use` extractor reference) is judged
+ * at load, not here.
+ */
+import { existsSync } from 'node:fs';
+import { importModuleViaLoader, readContributionExport, RejectionCause } from '@shrkcrft/core';
+import { MarkdownKnowledgeLoader, TypeScriptKnowledgeLoader, validateKnowledgeEntries } from '@shrkcrft/knowledge';
+import { loadTemplatesFromFile } from '@shrkcrft/templates';
+import { loadPipelinesFromFile } from '@shrkcrft/pipelines';
+import { loadPresetsFromFile } from '@shrkcrft/presets';
+import { loadBoundaryRulesFromFile } from '@shrkcrft/boundaries';
+import { frameworkExtractorExports, frameworkExtractorRejectionReasons } from '@shrkcrft/plugin-api';
+import { constructFacetRejectionReasons, constructRejectionReasons } from "./construct-registry.js";
+import { contractTemplateRejectionReasons } from "./contract-template-registry.js";
+import { conventionRejectionReasons } from "./convention-registry.js";
+import { decisionRejectionReasons } from "./decision-records.js";
+import { delegateRecipeRejectionReasons } from "./delegate-pack-recipes.js";
+import { feedbackRuleRejectionReasons } from "./feedback-ingestion.js";
+import { isKnowledgeContributionSlot } from "./knowledge-contribution-slots.js";
+import { migrationProfileRejectionReasons } from "./migration-profile-registry.js";
+import { packHelperRejectionReasons } from "./pack-helper-registry.js";
+import { contributionKindForSlot } from "./pack-contributions-inventory.js";
+import { playbookRejectionReasons } from "./playbook-registry.js";
+import { policyCheckRejectionReasons } from "./policy-registry.js";
+import { registrationHintRejectionReasons } from "./registration-hint-registry.js";
+import { packPlaneElementRejectionReasons, planeElementKey } from "./resolve-project-config.js";
+import { loadScaffoldPatternsFromFile } from "./scaffold-patterns.js";
+import { searchTuningRejectionReasons } from "./search-tuning-registry.js";
+import { routingHintRejectionReasons } from "./task-routing-hint-registry.js";
+import { testDefinitionRejectionReasons } from "./test-runner.js";
+const REGISTRY_SLOTS = {
+    conventionFiles: { namedKeys: ['conventions'], reasons: conventionRejectionReasons, dedupe: true },
+    helperFiles: { namedKeys: ['helpers'], reasons: packHelperRejectionReasons, dedupe: true },
+    taskRoutingHintFiles: { namedKeys: ['taskRoutingHints'], reasons: routingHintRejectionReasons, dedupe: true },
+    registrationHintFiles: { namedKeys: ['registrationHints'], reasons: registrationHintRejectionReasons, dedupe: true },
+    contractTemplateFiles: { namedKeys: ['contractTemplates'], reasons: contractTemplateRejectionReasons, dedupe: true },
+    migrationProfileFiles: { namedKeys: ['migrationProfiles'], reasons: migrationProfileRejectionReasons, dedupe: true },
+    playbookFiles: { namedKeys: ['playbooks'], reasons: playbookRejectionReasons },
+    constructFiles: { namedKeys: ['constructs'], reasons: constructRejectionReasons },
+    constructFacetFiles: { namedKeys: ['constructs'], reasons: constructFacetRejectionReasons },
+    searchTuningFiles: { namedKeys: ['searchTuning'], reasons: searchTuningRejectionReasons },
+    decisionFiles: { singleObject: false, reasons: decisionRejectionReasons, dedupe: true },
+    policyCheckFiles: { namedKeys: ['policyChecks'], singleObject: false, reasons: policyCheckRejectionReasons },
+    feedbackRuleFiles: { singleObject: false, reasons: feedbackRuleRejectionReasons, dedupe: true },
+    contextTestFiles: { singleObject: false, reasons: testDefinitionRejectionReasons },
+    agentTestFiles: { singleObject: false, reasons: testDefinitionRejectionReasons },
+    delegateRecipeFiles: { namedKeys: ['delegateRecipes'], reasons: delegateRecipeRejectionReasons, dedupe: true },
+};
+const GATE_PLANE_SLOTS = new Set([
+    'wiringRuleFiles',
+    'registryFiles',
+    'registrationGraphFiles',
+    'policyRuleFiles',
+    'reusePrimitiveFiles',
+    'baselineFiles',
+    'generatedArtifactFiles',
+    'docReferenceFiles',
+]);
+/** The import-failure line an inspection-time loader reports as a warning. */
+function importError(warnings) {
+    return warnings.find((w) => /^(failed to (?:import|load)|timed out)/i.test(w));
+}
+function idOf(raw, field = 'id') {
+    const v = raw && typeof raw === 'object' ? raw[field] : undefined;
+    return typeof v === 'string' && v.length > 0 ? v : undefined;
+}
+/** Validate `file`, declared under manifest `slot`. */
+export async function validateContributionFile(slot, file) {
+    const kind = contributionKindForSlot(slot);
+    const base = { slot, file, ...(kind ? { kind } : {}) };
+    const done = (accepted, rejected, loadError) => ({
+        ...base,
+        loaded: loadError === undefined,
+        ...(loadError !== undefined ? { loadError } : {}),
+        accepted: accepted.length,
+        acceptedIds: accepted,
+        rejected,
+    });
+    if (!existsSync(file))
+        return done([], [], 'the file does not exist');
+    // THE knowledge slots (round 15 follow-up, F11): the slot says "knowledge";
+    // which knowledge loader reads the file is the inspection's own choice (the
+    // same `canLoad` order). A file neither loader reads is `unvalidated` — the
+    // consumer skips it as an "unsupported contribution file".
+    if (isKnowledgeContributionSlot(slot)) {
+        const ts = new TypeScriptKnowledgeLoader();
+        const md = new MarkdownKnowledgeLoader();
+        const loader = ts.canLoad(file) ? ts : md.canLoad(file) ? md : null;
+        if (!loader)
+            return { ...done([], []), unvalidated: true };
+        const r = await loader.load(file);
+        // …and THE validator the consumer's inspection runs, over what the loader
+        // ACCEPTED (round 15): an issue that keeps the entry — a non-list
+        // `references` crashed every consumer verb while `--load` said "No issues".
+        const entryIssues = validateKnowledgeEntries(r.entries, { isPackContributed: () => true }).issues;
+        return {
+            ...done(r.entries.map((e) => e.id), r.rejected ?? [], importError(r.warnings)),
+            ...(entryIssues.length > 0 ? { entryIssues } : {}),
+        };
+    }
+    if (slot === 'templateFiles') {
+        const r = await loadTemplatesFromFile(file);
+        return done(r.templates.map((t) => t.id), r.rejected, importError(r.warnings));
+    }
+    if (slot === 'pipelineFiles') {
+        const r = await loadPipelinesFromFile(file);
+        return done(r.pipelines.map((p) => p.id), r.rejected, importError(r.warnings));
+    }
+    if (slot === 'presetFiles') {
+        const r = await loadPresetsFromFile(file);
+        return done(r.presets.map((p) => p.id), r.rejected, importError(r.warnings));
+    }
+    if (slot === 'boundaryFiles') {
+        const r = await loadBoundaryRulesFromFile(file);
+        const rejected = r.invalid.map((inv) => ({
+            file,
+            index: inv.index,
+            // The export the rule array came from — `(default[1])`, one wording with every kind.
+            ...(inv.exportName !== undefined ? { exportName: inv.exportName } : {}),
+            ...(inv.ruleId !== undefined ? { entryId: inv.ruleId } : {}),
+            reasons: inv.issues.map((i) => `${i.field}: ${i.message}`),
+            cause: RejectionCause.Invalid,
+        }));
+        return done(r.rules.map((x) => x.id), rejected, r.loadError);
+    }
+    if (slot === 'scaffoldPatternFiles') {
+        const r = await loadScaffoldPatternsFromFile(file);
+        return done(r.patterns.map((p) => p.id), r.rejected, importError(r.warnings));
+    }
+    let mod;
+    try {
+        mod = await importModuleViaLoader(file);
+    }
+    catch (e) {
+        return done([], [], (e.message ?? String(e)).split('\n')[0].trim());
+    }
+    if (GATE_PLANE_SLOTS.has(slot)) {
+        const arr = mod.default;
+        if (!Array.isArray(arr))
+            return done([], [], 'default export is not an array');
+        const accepted = [];
+        const rejected = [];
+        arr.forEach((raw, index) => {
+            const reasons = packPlaneElementRejectionReasons(slot, raw) ?? [];
+            // THE element-id reading the merge seam names a refused element by.
+            const id = planeElementKey(raw);
+            if (reasons.length > 0) {
+                rejected.push({
+                    file,
+                    index,
+                    exportName: 'default',
+                    ...(id !== undefined ? { entryId: id } : {}),
+                    reasons,
+                    cause: RejectionCause.Invalid,
+                });
+                return;
+            }
+            accepted.push(id ?? `default[${index}]`);
+        });
+        return done(accepted, rejected);
+    }
+    if (slot === 'frameworkExtractorFiles') {
+        const accepted = [];
+        const rejected = [];
+        const seen = new Set();
+        for (const c of frameworkExtractorExports(mod)) {
+            const reasons = frameworkExtractorRejectionReasons(c.value);
+            const name = idOf(c.value, 'framework');
+            const at = { file, index: c.index, exportName: c.exportName, ...(name ? { entryId: name } : {}) };
+            if (reasons.length > 0) {
+                rejected.push({ ...at, reasons, cause: RejectionCause.Invalid });
+            }
+            else if (seen.has(name)) {
+                rejected.push({ ...at, reasons: [`framework: "${name}" is already registered in this file`], cause: RejectionCause.DuplicateId });
+            }
+            else {
+                seen.add(name);
+                accepted.push(name);
+            }
+        }
+        return done(accepted, rejected);
+    }
+    const spec = REGISTRY_SLOTS[slot];
+    if (!spec)
+        return { ...done([], []), unvalidated: true };
+    const exp = readContributionExport(mod, {
+        ...(spec.namedKeys ? { namedKeys: spec.namedKeys } : {}),
+        ...(spec.singleObject === false ? { singleObject: false } : {}),
+    });
+    const accepted = [];
+    const rejected = [];
+    const seen = new Set();
+    exp.items.forEach((raw, i) => {
+        const id = idOf(raw);
+        const at = {
+            file,
+            index: exp.single ? -1 : i,
+            ...(exp.exportName ? { exportName: exp.exportName } : {}),
+            ...(id ? { entryId: id } : {}),
+        };
+        const reasons = spec.reasons(raw);
+        if (reasons.length > 0) {
+            rejected.push({ ...at, reasons, cause: RejectionCause.Invalid });
+            return;
+        }
+        if (spec.dedupe && id && seen.has(id)) {
+            rejected.push({ ...at, reasons: [`id: "${id}" is already declared in this file`], cause: RejectionCause.DuplicateId });
+            return;
+        }
+        if (id)
+            seen.add(id);
+        accepted.push(id ?? `${exp.exportName ?? 'default'}[${i}]`);
+    });
+    return done(accepted, rejected);
+}

package/dist/why-file.d.ts

@@ -41,7 +41,10 @@ export interface IWhyRule {
 export interface IWhyBoundaryRule {
     readonly id: string;
     readonly title: string;
+    /** The ENFORCED severity (an unset one is `error`, as the evaluator enforces it). */
     readonly severity?: string;
+    /** Inside `from`, but exempted (`exemptFiles` / `excludeTests` / a `!` glob): violations are suppressed. */
+    readonly exempt?: boolean;
     readonly from: readonly string[];
     readonly forbiddenImports?: readonly string[];
     readonly allowedImports?: readonly string[];

package/dist/why-file.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"why-file.d.ts","sourceRoot":"","sources":["../src/why-file.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAMH,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,2BAA2B,CAAC;AAEvE,eAAO,MAAM,eAAe,sBAAsB,CAAC;AAEnD,MAAM,MAAM,aAAa,GAAG,MAAM,GAAG,WAAW,GAAG,SAAS,CAAC;AAE7D,MAAM,WAAW,UAAU;IACzB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,IAAI,EAAE,aAAa,CAAC;CAC9B;AAED,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;CAC1B;AAED,MAAM,WAAW,QAAQ;IACvB,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,KAAK,EAAE,SAAS,MAAM,EAAE,CAAC;IAClC,QAAQ,CAAC,IAAI,EAAE,SAAS,MAAM,EAAE,CAAC;IACjC,QAAQ,CAAC,WAAW,EAAE,SAAS,MAAM,EAAE,CAAC;IACxC,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;CACzB;AAED,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,IAAI,EAAE,SAAS,MAAM,EAAE,CAAC;IACjC,QAAQ,CAAC,gBAAgB,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAC9C,QAAQ,CAAC,cAAc,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAC5C,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;CAC1B;AAED,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;CACzB;AAED,MAAM,WAAW,UAAU;IACzB,QAAQ,CAAC,MAAM,EAAE,OAAO,eAAe,CAAC;IACxC,QAAQ,CAAC,MAAM,EAAE,UAAU,CAAC;IAC5B,QAAQ,CAAC,eAAe,CAAC,EAAE,MAAM,CAAC;IAClC,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,eAAe,EAAE,SAAS,kBAAkB,EAAE,CAAC;IACxD,QAAQ,CAAC,KAAK,EAAE,SAAS,QAAQ,EAAE,CAAC;IACpC,QAAQ,CAAC,UAAU,EAAE,SAAS,gBAAgB,EAAE,CAAC;IACjD,QAAQ,CAAC,SAAS,EAAE,SAAS,aAAa,EAAE,CAAC;IAC7C,QAAQ,CAAC,aAAa,EAAE,SAAS,MAAM,EAAE,CAAC;CAC3C;AAED,MAAM,WAAW,oBAAoB;IACnC,QAAQ,CAAC,UAAU,EAAE,qBAAqB,CAAC;IAC3C,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;CACzB;AAED,wBAAgB,cAAc,CAAC,KAAK,EAAE,oBAAoB,GAAG,UAAU,CAuBtE"}
+{"version":3,"file":"why-file.d.ts","sourceRoot":"","sources":["../src/why-file.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAOH,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,2BAA2B,CAAC;AAEvE,eAAO,MAAM,eAAe,sBAAsB,CAAC;AAEnD,MAAM,MAAM,aAAa,GAAG,MAAM,GAAG,WAAW,GAAG,SAAS,CAAC;AAE7D,MAAM,WAAW,UAAU;IACzB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,IAAI,EAAE,aAAa,CAAC;CAC9B;AAED,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;CAC1B;AAED,MAAM,WAAW,QAAQ;IACvB,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,KAAK,EAAE,SAAS,MAAM,EAAE,CAAC;IAClC,QAAQ,CAAC,IAAI,EAAE,SAAS,MAAM,EAAE,CAAC;IACjC,QAAQ,CAAC,WAAW,EAAE,SAAS,MAAM,EAAE,CAAC;IACxC,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;CACzB;AAED,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,qFAAqF;IACrF,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAC3B,4GAA4G;IAC5G,QAAQ,CAAC,MAAM,CAAC,EAAE,OAAO,CAAC;IAC1B,QAAQ,CAAC,IAAI,EAAE,SAAS,MAAM,EAAE,CAAC;IACjC,QAAQ,CAAC,gBAAgB,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAC9C,QAAQ,CAAC,cAAc,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAC5C,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;CAC1B;AAED,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;CACzB;AAED,MAAM,WAAW,UAAU;IACzB,QAAQ,CAAC,MAAM,EAAE,OAAO,eAAe,CAAC;IACxC,QAAQ,CAAC,MAAM,EAAE,UAAU,CAAC;IAC5B,QAAQ,CAAC,eAAe,CAAC,EAAE,MAAM,CAAC;IAClC,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,eAAe,EAAE,SAAS,kBAAkB,EAAE,CAAC;IACxD,QAAQ,CAAC,KAAK,EAAE,SAAS,QAAQ,EAAE,CAAC;IACpC,QAAQ,CAAC,UAAU,EAAE,SAAS,gBAAgB,EAAE,CAAC;IACjD,QAAQ,CAAC,SAAS,EAAE,SAAS,aAAa,EAAE,CAAC;IAC7C,QAAQ,CAAC,aAAa,EAAE,SAAS,MAAM,EAAE,CAAC;CAC3C;AAED,MAAM,WAAW,oBAAoB;IACnC,QAAQ,CAAC,UAAU,EAAE,qBAAqB,CAAC;IAC3C,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;CACzB;AAED,wBAAgB,cAAc,CAAC,KAAK,EAAE,oBAAoB,GAAG,UAAU,CAuBtE"}

package/dist/why-file.js

@@ -15,8 +15,9 @@
  */
 import { existsSync, statSync } from 'node:fs';
 import * as nodePath from 'node:path';
-import { matchesAny } from '@shrkcrft/boundaries';
+import { boundaryRuleCovers, boundaryRuleSeverity, matchesAny } from '@shrkcrft/boundaries';
 import { deriveApplicability } from '@shrkcrft/rules';
+import { knowledgeAnchors, knowledgeReferences } from '@shrkcrft/knowledge';
 export const WHY_FILE_SCHEMA = 'sharkcraft.why/v1';
 export function buildWhyReport(input) {
     const limit = input.limit ?? 10;
@@ -113,14 +114,14 @@ function matchPathConventions(inspection, target) {
 function ruleReasonForFile(r, target, inferredPackage, inferredLayer) {
     const rel = target.relativePath;
     // 1. Explicit file/directory references that cover the target.
-    for (const ref of r.references ?? []) {
+    for (const ref of knowledgeReferences(r)) {
         const p = (ref.path ?? '').replace(/^\.\//, '');
         if ((ref.kind === 'file' || ref.kind === 'directory') && p && pathCovers(rel, p)) {
             return ref.kind === 'directory' ? `directory reference ${p}` : `file reference ${p}`;
         }
     }
     // 1b. Anchors that point at a covering path.
-    for (const a of r.anchors ?? []) {
+    for (const a of knowledgeAnchors(r)) {
         const p = (a.path ?? '').replace(/^\.\//, '');
         if (p && pathCovers(rel, p))
             return `anchor path ${p}`;
@@ -147,7 +148,7 @@ function ruleReasonForFile(r, target, inferredPackage, inferredLayer) {
     // 3. Package reference / scope-or-tag equal to the inferred package or layer.
     const labels = [...(r.scope ?? []), ...(r.tags ?? [])];
     if (inferredPackage) {
-        for (const ref of r.references ?? []) {
+        for (const ref of knowledgeReferences(r)) {
             if (ref.kind === 'package' && ref.id && samePath(ref.id, inferredPackage)) {
                 return `package reference ${ref.id}`;
             }
@@ -192,12 +193,16 @@ function matchBoundaries(inspection, target) {
     for (const rule of inspection.boundaryRegistry.list()) {
         if (rule.from.length === 0)
             continue;
-        if (!matchesAny(target.relativePath, rule.from))
+        // THE scope authority the evaluator itself uses — a `!` glob or an
+        // exemption is honoured here exactly as `check boundaries` honours it.
+        const decision = boundaryRuleCovers(rule, target.relativePath);
+        if (decision === 'out')
             continue;
         const entry = {
             id: rule.id,
             title: rule.title,
-            ...(rule.severity !== undefined ? { severity: rule.severity } : {}),
+            severity: boundaryRuleSeverity(rule),
+            ...(decision === 'exempt' ? { exempt: true } : {}),
             from: rule.from,
             ...(rule.forbiddenImports !== undefined ? { forbiddenImports: rule.forbiddenImports } : {}),
             ...(rule.allowedImports !== undefined ? { allowedImports: rule.allowedImports } : {}),
@@ -212,7 +217,7 @@ function matchKnowledge(inspection, target, limit) {
     const rel = target.relativePath.toLowerCase();
     const out = [];
     for (const k of inspection.knowledgeEntries) {
-        const refs = (k.references ?? []).map((r) => r.path ?? '');
+        const refs = knowledgeReferences(k).map((r) => r.path ?? '');
         const refMatch = refs.some((p) => p.toLowerCase() === rel || p.toLowerCase().endsWith(`/${basename}`));
         const contentMatch = ((k.content ?? '') + ' ' + (k.title ?? '')).toLowerCase().includes(basename);
         if (!refMatch && !contentMatch)

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@shrkcrft/inspector",
-  "version": "0.1.0-alpha.30",
+  "version": "0.1.0-alpha.32",
   "description": "SharkCraft inspector: project overview, doctor checks, AI-agent instructions.",
   "license": "MIT",
   "author": "SharkCraft contributors",
@@ -42,22 +42,22 @@
     "typecheck": "tsc --noEmit -p tsconfig.json"
   },
   "dependencies": {
-    "@shrkcrft/core": "^0.1.0-alpha.30",
-    "@shrkcrft/config": "^0.1.0-alpha.30",
-    "@shrkcrft/workspace": "^0.1.0-alpha.30",
-    "@shrkcrft/knowledge": "^0.1.0-alpha.30",
-    "@shrkcrft/rules": "^0.1.0-alpha.30",
-    "@shrkcrft/paths": "^0.1.0-alpha.30",
-    "@shrkcrft/templates": "^0.1.0-alpha.30",
-    "@shrkcrft/context": "^0.1.0-alpha.30",
-    "@shrkcrft/pipelines": "^0.1.0-alpha.30",
-    "@shrkcrft/packs": "^0.1.0-alpha.30",
-    "@shrkcrft/presets": "^0.1.0-alpha.30",
-    "@shrkcrft/boundaries": "^0.1.0-alpha.30",
-    "@shrkcrft/generator": "^0.1.0-alpha.30",
-    "@shrkcrft/importer": "^0.1.0-alpha.30",
-    "@shrkcrft/plugin-api": "^0.1.0-alpha.30",
-    "@shrkcrft/dashboard-api": "^0.1.0-alpha.30",
+    "@shrkcrft/core": "^0.1.0-alpha.32",
+    "@shrkcrft/config": "^0.1.0-alpha.32",
+    "@shrkcrft/workspace": "^0.1.0-alpha.32",
+    "@shrkcrft/knowledge": "^0.1.0-alpha.32",
+    "@shrkcrft/rules": "^0.1.0-alpha.32",
+    "@shrkcrft/paths": "^0.1.0-alpha.32",
+    "@shrkcrft/templates": "^0.1.0-alpha.32",
+    "@shrkcrft/context": "^0.1.0-alpha.32",
+    "@shrkcrft/pipelines": "^0.1.0-alpha.32",
+    "@shrkcrft/packs": "^0.1.0-alpha.32",
+    "@shrkcrft/presets": "^0.1.0-alpha.32",
+    "@shrkcrft/boundaries": "^0.1.0-alpha.32",
+    "@shrkcrft/generator": "^0.1.0-alpha.32",
+    "@shrkcrft/importer": "^0.1.0-alpha.32",
+    "@shrkcrft/plugin-api": "^0.1.0-alpha.32",
+    "@shrkcrft/dashboard-api": "^0.1.0-alpha.32",
     "typescript": "^5.6.0"
   },
   "publishConfig": {