@slowcook-ai/cli 0.23.0 → 0.25.0

package/dist/commands/check/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/commands/check/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAKH,wBAAsB,KAAK,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAkB9E"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/commands/check/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAOH,wBAAsB,KAAK,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAsB9E"}

package/dist/commands/check/index.js

@@ -14,6 +14,8 @@
  */
 import { runMockIsolationCheck } from "./mock-isolation.js";
 import { runSpecValidateCli } from "./spec-validate.js";
+import { runProdHonestyCli } from "./prod-honesty.js";
+import { runProdBundleCli } from "./prod-bundle.js";
 export async function check(argv, _cliVersion) {
     const sub = argv[0];
     switch (sub) {
@@ -21,6 +23,10 @@ export async function check(argv, _cliVersion) {
             return runMockIsolationCli(argv.slice(1));
         case "spec":
             return runSpecValidateCli(argv.slice(1));
+        case "prod-honesty":
+            return runProdHonestyCli(argv.slice(1));
+        case "prod-bundle":
+            return runProdBundleCli(argv.slice(1));
         case undefined:
         case "help":
         case "--help":
@@ -39,6 +45,8 @@ slowcook check — static structural checks (0.16-α.13)
 
 Usage:
   slowcook check mock-isolation [--cwd <path>]
+  slowcook check prod-honesty [--cwd <path>] [--dir <src>]
+  slowcook check prod-bundle [--cwd <path>] [--dist <dist>]
   slowcook check spec [file...] [--cwd <path>]
 
 Subcommands:

package/dist/commands/check/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/commands/check/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH,OAAO,EAAE,qBAAqB,EAAE,MAAM,qBAAqB,CAAC;AAC5D,OAAO,EAAE,kBAAkB,EAAE,MAAM,oBAAoB,CAAC;AAExD,MAAM,CAAC,KAAK,UAAU,KAAK,CAAC,IAAc,EAAE,WAAmB;IAC7D,MAAM,GAAG,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;IACpB,QAAQ,GAAG,EAAE,CAAC;QACZ,KAAK,gBAAgB;YACnB,OAAO,mBAAmB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;QAC5C,KAAK,MAAM;YACT,OAAO,kBAAkB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;QAC3C,KAAK,SAAS,CAAC;QACf,KAAK,MAAM,CAAC;QACZ,KAAK,QAAQ,CAAC;QACd,KAAK,IAAI;YACP,SAAS,EAAE,CAAC;YACZ,OAAO;QACT;YACE,OAAO,CAAC,KAAK,CAAC,kBAAkB,GAAG,EAAE,CAAC,CAAC;YACvC,SAAS,EAAE,CAAC;YACZ,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACrB,CAAC;AACH,CAAC;AAED,SAAS,SAAS;IAChB,OAAO,CAAC,GAAG,CAAC;;;;;;;;;;;;;;;;;;CAkBb,CAAC,CAAC;AACH,CAAC;AAED,SAAS,mBAAmB,CAAC,IAAc;IACzC,IAAI,GAAG,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC;IACxB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACrC,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,OAAO,IAAI,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC;YACvC,GAAG,GAAG,IAAI,CAAC,CAAC,GAAG,CAAC,CAAE,CAAC;YACnB,CAAC,EAAE,CAAC;QACN,CAAC;IACH,CAAC;IACD,MAAM,MAAM,GAAG,qBAAqB,CAAC,GAAG,CAAC,CAAC;IAC1C,IAAI,MAAM,CAAC,YAAY,KAAK,CAAC,EAAE,CAAC;QAC9B,OAAO,CAAC,GAAG,CAAC,wDAAwD,GAAG,qBAAqB,CAAC,CAAC;QAC9F,OAAO;IACT,CAAC;IACD,IAAI,MAAM,CAAC,UAAU,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACnC,OAAO,CAAC,GAAG,CAAC,kCAAkC,MAAM,CAAC,YAAY,iBAAiB,CAAC,CAAC;QACpF,OAAO;IACT,CAAC;IACD,OAAO,CAAC,KAAK,CACX,kCAAkC,MAAM,CAAC,UAAU,CAAC,MAAM,wBAAwB,MAAM,CAAC,YAAY,aAAa,CACnH,CAAC;IACF,KAAK,MAAM,CAAC,IAAI,MAAM,CAAC,UAAU,EAAE,CAAC;QAClC,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;QACvC,OAAO,CAAC,KAAK,CAAC,eAAe,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC;QAC7D,OAAO,CAAC,KAAK,CAAC,eAAe,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC;IAC7C,CAAC;IACD,OAAO,CAAC,KAAK,CACX,yEAAyE;QACvE,8DAA8D,CACjE,CAAC;IACF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/commands/check/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH,OAAO,EAAE,qBAAqB,EAAE,MAAM,qBAAqB,CAAC;AAC5D,OAAO,EAAE,kBAAkB,EAAE,MAAM,oBAAoB,CAAC;AACxD,OAAO,EAAE,iBAAiB,EAAE,MAAM,mBAAmB,CAAC;AACtD,OAAO,EAAE,gBAAgB,EAAE,MAAM,kBAAkB,CAAC;AAEpD,MAAM,CAAC,KAAK,UAAU,KAAK,CAAC,IAAc,EAAE,WAAmB;IAC7D,MAAM,GAAG,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;IACpB,QAAQ,GAAG,EAAE,CAAC;QACZ,KAAK,gBAAgB;YACnB,OAAO,mBAAmB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;QAC5C,KAAK,MAAM;YACT,OAAO,kBAAkB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;QAC3C,KAAK,cAAc;YACjB,OAAO,iBAAiB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;QAC1C,KAAK,aAAa;YAChB,OAAO,gBAAgB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;QACzC,KAAK,SAAS,CAAC;QACf,KAAK,MAAM,CAAC;QACZ,KAAK,QAAQ,CAAC;QACd,KAAK,IAAI;YACP,SAAS,EAAE,CAAC;YACZ,OAAO;QACT;YACE,OAAO,CAAC,KAAK,CAAC,kBAAkB,GAAG,EAAE,CAAC,CAAC;YACvC,SAAS,EAAE,CAAC;YACZ,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACrB,CAAC;AACH,CAAC;AAED,SAAS,SAAS;IAChB,OAAO,CAAC,GAAG,CAAC;;;;;;;;;;;;;;;;;;;;CAoBb,CAAC,CAAC;AACH,CAAC;AAED,SAAS,mBAAmB,CAAC,IAAc;IACzC,IAAI,GAAG,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC;IACxB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACrC,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,OAAO,IAAI,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC;YACvC,GAAG,GAAG,IAAI,CAAC,CAAC,GAAG,CAAC,CAAE,CAAC;YACnB,CAAC,EAAE,CAAC;QACN,CAAC;IACH,CAAC;IACD,MAAM,MAAM,GAAG,qBAAqB,CAAC,GAAG,CAAC,CAAC;IAC1C,IAAI,MAAM,CAAC,YAAY,KAAK,CAAC,EAAE,CAAC;QAC9B,OAAO,CAAC,GAAG,CAAC,wDAAwD,GAAG,qBAAqB,CAAC,CAAC;QAC9F,OAAO;IACT,CAAC;IACD,IAAI,MAAM,CAAC,UAAU,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACnC,OAAO,CAAC,GAAG,CAAC,kCAAkC,MAAM,CAAC,YAAY,iBAAiB,CAAC,CAAC;QACpF,OAAO;IACT,CAAC;IACD,OAAO,CAAC,KAAK,CACX,kCAAkC,MAAM,CAAC,UAAU,CAAC,MAAM,wBAAwB,MAAM,CAAC,YAAY,aAAa,CACnH,CAAC;IACF,KAAK,MAAM,CAAC,IAAI,MAAM,CAAC,UAAU,EAAE,CAAC;QAClC,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;QACvC,OAAO,CAAC,KAAK,CAAC,eAAe,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC;QAC7D,OAAO,CAAC,KAAK,CAAC,eAAe,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC;IAC7C,CAAC;IACD,OAAO,CAAC,KAAK,CACX,yEAAyE;QACvE,8DAA8D,CACjE,CAAC;IACF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC"}

package/dist/commands/check/prod-bundle.d.ts

@@ -0,0 +1,48 @@
+/**
+ * `slowcook check prod-bundle` — no mock-data ENGINE in the prod bundle.
+ *
+ * `prod-honesty` (its sibling) checks whether fixture data *renders* in prod;
+ * this checks something deeper the directive demands: that the mock's data
+ * ENGINE is not even *present* in the shipped bundle. A design-first app runs
+ * an in-browser data engine (sql.js / SQLite WASM, or slowcook's own
+ * mock-runtime fixture provider) so the mock is reviewable. Prod must be
+ * ABRUPTLY DISCONNECTED from it — wired only to the real backend — so that a
+ * misconfigured flag can never resurrect mock data. A runtime flag that merely
+ * *bypasses* the engine is not enough: if the engine is in the bundle, it is a
+ * flag flip away from serving fake data.
+ *
+ * This scans a BUILT dist directory (post-`vite build`/`next build`) and fails
+ * when a forbidden engine marker appears in any emitted `.js`/`.wasm`. The
+ * clean fix is a build-time sever (conditional/dynamic import gated by the
+ * prod env literal) so the bundler tree-shakes the engine out entirely — then
+ * this check passes because the engine is genuinely gone, not hidden.
+ *
+ * Pure-disk, no LLM. Runs in the consumer's deploy (after build, before
+ * publish) and in CI.
+ */
+export interface BundleViolation {
+    file: string;
+    marker: string;
+    reason: string;
+}
+export interface ProdBundleResult {
+    violations: BundleViolation[];
+    filesScanned: number;
+}
+/**
+ * Default forbidden engine markers. Each is a string that only appears when a
+ * client-side data engine is bundled. `.wasm` filename patterns are matched
+ * against basenames; text markers are matched against `.js` contents.
+ */
+export declare const DEFAULT_FORBIDDEN: {
+    marker: string;
+    where: "wasm-name" | "js-text";
+    label: string;
+}[];
+export declare function runProdBundleCheck(repoRoot: string, distRel: string, forbidden?: {
+    marker: string;
+    where: "wasm-name" | "js-text";
+    label: string;
+}[]): ProdBundleResult;
+export declare function runProdBundleCli(argv: string[]): void;
+//# sourceMappingURL=prod-bundle.d.ts.map

package/dist/commands/check/prod-bundle.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"prod-bundle.d.ts","sourceRoot":"","sources":["../../../src/commands/check/prod-bundle.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;AAKH,MAAM,WAAW,eAAe;IAC9B,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,gBAAgB;IAC/B,UAAU,EAAE,eAAe,EAAE,CAAC;IAC9B,YAAY,EAAE,MAAM,CAAC;CACtB;AAED;;;;GAIG;AACH,eAAO,MAAM,iBAAiB,EAAE;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,WAAW,GAAG,SAAS,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,EAQhG,CAAC;AAgBF,wBAAgB,kBAAkB,CAChC,QAAQ,EAAE,MAAM,EAChB,OAAO,EAAE,MAAM,EACf,SAAS;YA3B+B,MAAM;WAAS,WAAW,GAAG,SAAS;WAAS,MAAM;GA2BhE,GAC5B,gBAAgB,CA+BlB;AAED,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,IAAI,CAsBrD"}

package/dist/commands/check/prod-bundle.js

@@ -0,0 +1,130 @@
+/**
+ * `slowcook check prod-bundle` — no mock-data ENGINE in the prod bundle.
+ *
+ * `prod-honesty` (its sibling) checks whether fixture data *renders* in prod;
+ * this checks something deeper the directive demands: that the mock's data
+ * ENGINE is not even *present* in the shipped bundle. A design-first app runs
+ * an in-browser data engine (sql.js / SQLite WASM, or slowcook's own
+ * mock-runtime fixture provider) so the mock is reviewable. Prod must be
+ * ABRUPTLY DISCONNECTED from it — wired only to the real backend — so that a
+ * misconfigured flag can never resurrect mock data. A runtime flag that merely
+ * *bypasses* the engine is not enough: if the engine is in the bundle, it is a
+ * flag flip away from serving fake data.
+ *
+ * This scans a BUILT dist directory (post-`vite build`/`next build`) and fails
+ * when a forbidden engine marker appears in any emitted `.js`/`.wasm`. The
+ * clean fix is a build-time sever (conditional/dynamic import gated by the
+ * prod env literal) so the bundler tree-shakes the engine out entirely — then
+ * this check passes because the engine is genuinely gone, not hidden.
+ *
+ * Pure-disk, no LLM. Runs in the consumer's deploy (after build, before
+ * publish) and in CI.
+ */
+import { readFileSync, existsSync, statSync, readdirSync } from "node:fs";
+import { join, relative, basename } from "node:path";
+/**
+ * Default forbidden engine markers. Each is a string that only appears when a
+ * client-side data engine is bundled. `.wasm` filename patterns are matched
+ * against basenames; text markers are matched against `.js` contents.
+ */
+export const DEFAULT_FORBIDDEN = [
+    { marker: "sql-wasm", where: "wasm-name", label: "sql.js SQLite WASM" },
+    { marker: "sql-wasm", where: "js-text", label: "sql.js loader" },
+    { marker: "initSqlJs", where: "js-text", label: "sql.js runtime" },
+    { marker: "SQLite format 3", where: "js-text", label: "embedded SQLite db" },
+    { marker: "better-sqlite3", where: "js-text", label: "better-sqlite3 engine" },
+    { marker: "@slowcook-ai/mock-runtime", where: "js-text", label: "slowcook mock-runtime fixture engine" },
+    { marker: "useScenarioFixture", where: "js-text", label: "mock fixture provider" },
+];
+function walkAssets(dir, acc = []) {
+    let entries;
+    try {
+        entries = readdirSync(dir);
+    }
+    catch {
+        return acc;
+    }
+    for (const name of entries) {
+        if (name.startsWith(".") || name === "node_modules")
+            continue;
+        const full = join(dir, name);
+        let st;
+        try {
+            st = statSync(full);
+        }
+        catch {
+            continue;
+        }
+        if (st.isDirectory())
+            walkAssets(full, acc);
+        else if (/\.(js|mjs|cjs|wasm)$/.test(name))
+            acc.push(full);
+    }
+    return acc;
+}
+export function runProdBundleCheck(repoRoot, distRel, forbidden = DEFAULT_FORBIDDEN) {
+    const distDir = join(repoRoot, distRel);
+    if (!existsSync(distDir))
+        return { violations: [], filesScanned: 0 };
+    const files = walkAssets(distDir);
+    const violations = [];
+    const seen = new Set(); // dedupe (file, label)
+    for (const abs of files) {
+        const rel = relative(repoRoot, abs).replace(/\\/g, "/");
+        const isWasm = abs.endsWith(".wasm");
+        const name = basename(abs);
+        if (isWasm) {
+            for (const f of forbidden) {
+                if (f.where === "wasm-name" && name.includes(f.marker)) {
+                    const key = rel + f.label;
+                    if (!seen.has(key)) {
+                        seen.add(key);
+                        violations.push({ file: rel, marker: f.marker, reason: f.label });
+                    }
+                }
+            }
+            continue;
+        }
+        // text scan for .js
+        let body;
+        try {
+            body = readFileSync(abs, "utf8");
+        }
+        catch {
+            continue;
+        }
+        for (const f of forbidden) {
+            if (f.where === "js-text" && body.includes(f.marker)) {
+                const key = rel + f.label;
+                if (!seen.has(key)) {
+                    seen.add(key);
+                    violations.push({ file: rel, marker: f.marker, reason: f.label });
+                }
+            }
+        }
+    }
+    return { violations, filesScanned: files.length };
+}
+export function runProdBundleCli(argv) {
+    const cwdIdx = argv.indexOf("--cwd");
+    const repoRoot = cwdIdx >= 0 ? argv[cwdIdx + 1] : process.cwd();
+    const distIdx = argv.indexOf("--dist");
+    const dist = distIdx >= 0 ? argv[distIdx + 1] : "dist";
+    const { violations, filesScanned } = runProdBundleCheck(repoRoot, dist);
+    if (filesScanned === 0) {
+        console.error(`✗ prod-bundle: no built assets found under ${dist}/ — build first, then check the dist.`);
+        process.exit(2);
+    }
+    if (violations.length === 0) {
+        console.log(`✓ prod-bundle: ${filesScanned} assets clean — no mock-data engine in ${dist}/`);
+        return;
+    }
+    console.error(`✗ prod-bundle: a mock-data engine is present in ${dist}/ (${violations.length} marker(s))\n`);
+    for (const v of violations) {
+        console.error(`  ${v.file}`);
+        console.error(`    contains ${v.reason} (\`${v.marker}\`) — prod must be SEVERED from the mock engine, not just flag-bypassed.`);
+        console.error(`    Fix: gate the engine's import behind a build-time env literal so the bundler tree-shakes it out of prod.\n`);
+    }
+    process.exit(1);
+}
+//# sourceMappingURL=prod-bundle.js.map

package/dist/commands/check/prod-bundle.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"prod-bundle.js","sourceRoot":"","sources":["../../../src/commands/check/prod-bundle.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;AAEH,OAAO,EAAE,YAAY,EAAE,UAAU,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,SAAS,CAAC;AAC1E,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,WAAW,CAAC;AAarD;;;;GAIG;AACH,MAAM,CAAC,MAAM,iBAAiB,GAAwE;IACpG,EAAE,MAAM,EAAE,UAAU,EAAE,KAAK,EAAE,WAAW,EAAE,KAAK,EAAE,oBAAoB,EAAE;IACvE,EAAE,MAAM,EAAE,UAAU,EAAE,KAAK,EAAE,SAAS,EAAE,KAAK,EAAE,eAAe,EAAE;IAChE,EAAE,MAAM,EAAE,WAAW,EAAE,KAAK,EAAE,SAAS,EAAE,KAAK,EAAE,gBAAgB,EAAE;IAClE,EAAE,MAAM,EAAE,iBAAiB,EAAE,KAAK,EAAE,SAAS,EAAE,KAAK,EAAE,oBAAoB,EAAE;IAC5E,EAAE,MAAM,EAAE,gBAAgB,EAAE,KAAK,EAAE,SAAS,EAAE,KAAK,EAAE,uBAAuB,EAAE;IAC9E,EAAE,MAAM,EAAE,2BAA2B,EAAE,KAAK,EAAE,SAAS,EAAE,KAAK,EAAE,sCAAsC,EAAE;IACxG,EAAE,MAAM,EAAE,oBAAoB,EAAE,KAAK,EAAE,SAAS,EAAE,KAAK,EAAE,uBAAuB,EAAE;CACnF,CAAC;AAEF,SAAS,UAAU,CAAC,GAAW,EAAE,MAAgB,EAAE;IACjD,IAAI,OAAiB,CAAC;IACtB,IAAI,CAAC;QAAC,OAAO,GAAG,WAAW,CAAC,GAAG,CAAC,CAAC;IAAC,CAAC;IAAC,MAAM,CAAC;QAAC,OAAO,GAAG,CAAC;IAAC,CAAC;IACzD,KAAK,MAAM,IAAI,IAAI,OAAO,EAAE,CAAC;QAC3B,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,IAAI,KAAK,cAAc;YAAE,SAAS;QAC9D,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;QAC7B,IAAI,EAAE,CAAC;QACP,IAAI,CAAC;YAAC,EAAE,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC;QAAC,CAAC;QAAC,MAAM,CAAC;YAAC,SAAS;QAAC,CAAC;QAChD,IAAI,EAAE,CAAC,WAAW,EAAE;YAAE,UAAU,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;aACvC,IAAI,sBAAsB,CAAC,IAAI,CAAC,IAAI,CAAC;YAAE,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC7D,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,MAAM,UAAU,kBAAkB,CAChC,QAAgB,EAChB,OAAe,EACf,SAAS,GAAG,iBAAiB;IAE7B,MAAM,OAAO,GAAG,IAAI,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;IACxC,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC;QAAE,OAAO,EAAE,UAAU,EAAE,EAAE,EAAE,YAAY,EAAE,CAAC,EAAE,CAAC;IACrE,MAAM,KAAK,GAAG,UAAU,CAAC,OAAO,CAAC,CAAC;IAClC,MAAM,UAAU,GAAsB,EAAE,CAAC;IACzC,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC,CAAC,uBAAuB;IAEvD,KAAK,MAAM,GAAG,IAAI,KAAK,EAAE,CAAC;QACxB,MAAM,GAAG,GAAG,QAAQ,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;QACxD,MAAM,MAAM,GAAG,GAAG,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;QACrC,MAAM,IAAI,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC;QAC3B,IAAI,MAAM,EAAE,CAAC;YACX,KAAK,MAAM,CAAC,IAAI,SAAS,EAAE,CAAC;gBAC1B,IAAI,CAAC,CAAC,KAAK,KAAK,WAAW,IAAI,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC;oBACvD,MAAM,GAAG,GAAG,GAAG,GAAG,CAAC,CAAC,KAAK,CAAC;oBAC1B,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;wBAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;wBAAC,UAAU,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,GAAG,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC;oBAAC,CAAC;gBAC3G,CAAC;YACH,CAAC;YACD,SAAS;QACX,CAAC;QACD,oBAAoB;QACpB,IAAI,IAAY,CAAC;QACjB,IAAI,CAAC;YAAC,IAAI,GAAG,YAAY,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;QAAC,CAAC;QAAC,MAAM,CAAC;YAAC,SAAS;QAAC,CAAC;QAC7D,KAAK,MAAM,CAAC,IAAI,SAAS,EAAE,CAAC;YAC1B,IAAI,CAAC,CAAC,KAAK,KAAK,SAAS,IAAI,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC;gBACrD,MAAM,GAAG,GAAG,GAAG,GAAG,CAAC,CAAC,KAAK,CAAC;gBAC1B,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;oBAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;oBAAC,UAAU,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,GAAG,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC;gBAAC,CAAC;YAC3G,CAAC;QACH,CAAC;IACH,CAAC;IACD,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC;AACpD,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,IAAc;IAC7C,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;IACrC,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAE,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC;IACjE,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;IACvC,MAAM,IAAI,GAAG,OAAO,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,GAAG,CAAC,CAAE,CAAC,CAAC,CAAC,MAAM,CAAC;IACxD,MAAM,EAAE,UAAU,EAAE,YAAY,EAAE,GAAG,kBAAkB,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;IAExE,IAAI,YAAY,KAAK,CAAC,EAAE,CAAC;QACvB,OAAO,CAAC,KAAK,CAAC,8CAA8C,IAAI,uCAAuC,CAAC,CAAC;QACzG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IACD,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC5B,OAAO,CAAC,GAAG,CAAC,kBAAkB,YAAY,0CAA0C,IAAI,GAAG,CAAC,CAAC;QAC7F,OAAO;IACT,CAAC;IACD,OAAO,CAAC,KAAK,CAAC,mDAAmD,IAAI,MAAM,UAAU,CAAC,MAAM,eAAe,CAAC,CAAC;IAC7G,KAAK,MAAM,CAAC,IAAI,UAAU,EAAE,CAAC;QAC3B,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;QAC7B,OAAO,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC,MAAM,OAAO,CAAC,CAAC,MAAM,0EAA0E,CAAC,CAAC;QACjI,OAAO,CAAC,KAAK,CAAC,gHAAgH,CAAC,CAAC;IAClI,CAAC;IACD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC"}

package/dist/commands/check/prod-honesty.d.ts

@@ -0,0 +1,54 @@
+/**
+ * `slowcook check prod-honesty` — the mock→prod honesty backbone.
+ *
+ * The mock is design scaffolding: it is *populated* (fixtures), *open* (every
+ * route reachable, no auth walls), and *theatrical* (buttons do local-state
+ * transitions) — all so a human can review it. Those three affordances must
+ * NOT survive into production. The port→brew pipeline strips them when the
+ * mock declares them through the seams; this check is the teeth that fail the
+ * build when scaffolding leaks anyway.
+ *
+ * Why a check and not a test: fixtures, open routes, and dead CTAs are
+ * *absence* obligations ("this fake thing is gone"), and a green test suite
+ * proves presence, not absence. The defect is precisely the code no test
+ * covers — so the enforcement cannot itself be a test.
+ *
+ * Pure-disk, no LLM, no tsc. Regex + readFileSync, mirroring mock-isolation.
+ *
+ * Scans the PRODUCTION tree (default `src/`, override `--dir`). Flags three
+ * classes, each mapping to a field-reported defect:
+ *
+ *   A (fixtures)  — an inline literal array of ≥2 object literals that is
+ *                   rendered (`.map(`) in the same file, and the file has no
+ *                   data seam (`useDataDomain` / a `*BackendOn()` live-mode
+ *                   gate). The canonical leak: `const ITEMS = [{…},{…}]` +
+ *                   `{ITEMS.map(…)}` shipped verbatim from the mock.
+ *   B (gating)    — a file under a routes/pages/app tree that renders route
+ *                   definitions but contains no auth-guard reference
+ *                   (`requireAuth` / `RequireAuth` / `getSession` / redirect
+ *                   to a sign-in path). Heuristic; tuned to catch a router
+ *                   that gates nothing.
+ *   C (dead CTA)  — an `onClick`/`onSubmit` handler whose body only calls a
+ *                   `setState`-shaped setter with no `fetch`/`navigate`/router
+ *                   push and no explicit `deferred`/disabled acknowledgement.
+ *
+ * Escape hatch: a line or file carrying `// @slowcook-honest` (optionally
+ * `// @slowcook-honest: reason`) is exempt — for the deliberate exceptions
+ * (a genuinely public route, a label-map constant, a demo-only file). Every
+ * exemption is greppable, so the reviewer sees exactly what was waived.
+ */
+export type HonestyClass = "fixture" | "gating" | "dead_cta";
+export interface HonestyViolation {
+    file: string;
+    line: number;
+    cls: HonestyClass;
+    reason: string;
+}
+export interface ProdHonestyResult {
+    violations: HonestyViolation[];
+    filesChecked: number;
+}
+export declare function checkFileHonesty(absFile: string, body: string, repoRoot: string): HonestyViolation[];
+export declare function runProdHonestyCheck(repoRoot: string, dir?: string): ProdHonestyResult;
+export declare function runProdHonestyCli(argv: string[]): void;
+//# sourceMappingURL=prod-honesty.d.ts.map

package/dist/commands/check/prod-honesty.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"prod-honesty.d.ts","sourceRoot":"","sources":["../../../src/commands/check/prod-honesty.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAsCG;AAKH,MAAM,MAAM,YAAY,GAAG,SAAS,GAAG,QAAQ,GAAG,UAAU,CAAC;AAE7D,MAAM,WAAW,gBAAgB;IAC/B,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,GAAG,EAAE,YAAY,CAAC;IAClB,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,iBAAiB;IAChC,UAAU,EAAE,gBAAgB,EAAE,CAAC;IAC/B,YAAY,EAAE,MAAM,CAAC;CACtB;AA+HD,wBAAgB,gBAAgB,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,gBAAgB,EAAE,CASpG;AAED,wBAAgB,mBAAmB,CAAC,QAAQ,EAAE,MAAM,EAAE,GAAG,SAAQ,GAAG,iBAAiB,CASpF;AAED,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,IAAI,CAsBtD"}

package/dist/commands/check/prod-honesty.js

@@ -0,0 +1,238 @@
+/**
+ * `slowcook check prod-honesty` — the mock→prod honesty backbone.
+ *
+ * The mock is design scaffolding: it is *populated* (fixtures), *open* (every
+ * route reachable, no auth walls), and *theatrical* (buttons do local-state
+ * transitions) — all so a human can review it. Those three affordances must
+ * NOT survive into production. The port→brew pipeline strips them when the
+ * mock declares them through the seams; this check is the teeth that fail the
+ * build when scaffolding leaks anyway.
+ *
+ * Why a check and not a test: fixtures, open routes, and dead CTAs are
+ * *absence* obligations ("this fake thing is gone"), and a green test suite
+ * proves presence, not absence. The defect is precisely the code no test
+ * covers — so the enforcement cannot itself be a test.
+ *
+ * Pure-disk, no LLM, no tsc. Regex + readFileSync, mirroring mock-isolation.
+ *
+ * Scans the PRODUCTION tree (default `src/`, override `--dir`). Flags three
+ * classes, each mapping to a field-reported defect:
+ *
+ *   A (fixtures)  — an inline literal array of ≥2 object literals that is
+ *                   rendered (`.map(`) in the same file, and the file has no
+ *                   data seam (`useDataDomain` / a `*BackendOn()` live-mode
+ *                   gate). The canonical leak: `const ITEMS = [{…},{…}]` +
+ *                   `{ITEMS.map(…)}` shipped verbatim from the mock.
+ *   B (gating)    — a file under a routes/pages/app tree that renders route
+ *                   definitions but contains no auth-guard reference
+ *                   (`requireAuth` / `RequireAuth` / `getSession` / redirect
+ *                   to a sign-in path). Heuristic; tuned to catch a router
+ *                   that gates nothing.
+ *   C (dead CTA)  — an `onClick`/`onSubmit` handler whose body only calls a
+ *                   `setState`-shaped setter with no `fetch`/`navigate`/router
+ *                   push and no explicit `deferred`/disabled acknowledgement.
+ *
+ * Escape hatch: a line or file carrying `// @slowcook-honest` (optionally
+ * `// @slowcook-honest: reason`) is exempt — for the deliberate exceptions
+ * (a genuinely public route, a label-map constant, a demo-only file). Every
+ * exemption is greppable, so the reviewer sees exactly what was waived.
+ */
+import { readFileSync, existsSync, statSync, readdirSync } from "node:fs";
+import { join, relative } from "node:path";
+const EXEMPT = /@slowcook-honest\b/;
+function walkTsxFiles(dir, acc = []) {
+    let entries;
+    try {
+        entries = readdirSync(dir);
+    }
+    catch {
+        return acc;
+    }
+    for (const name of entries) {
+        if (name.startsWith("."))
+            continue;
+        if (name === "node_modules" || name === ".next" || name === "dist" || name === "build")
+            continue;
+        // never scan test files — they legitimately hold fixtures + theater
+        if (/\.(test|spec)\.(tsx?|jsx?)$/.test(name))
+            continue;
+        if (/(^|\/)(test|tests|__tests__|__mocks__|fixtures)$/.test(name))
+            continue;
+        const full = join(dir, name);
+        let st;
+        try {
+            st = statSync(full);
+        }
+        catch {
+            continue;
+        }
+        if (st.isDirectory()) {
+            if (name === "test" || name === "tests" || name === "__tests__" || name === "__mocks__" || name === "fixtures")
+                continue;
+            walkTsxFiles(full, acc);
+        }
+        else if (/\.(tsx|jsx)$/.test(name)) {
+            acc.push(full);
+        }
+    }
+    return acc;
+}
+/** true if the file routes data through a live backend seam. */
+function hasDataSeam(body) {
+    return /useDataDomain\s*[<(]/.test(body)
+        || /\b\w*[Bb]ackendOn\s*\(\)/.test(body) // dataBackendOn(), authBackendOn(), etc.
+        || /import\.meta\.env\.\w*_BACKEND/.test(body)
+        || /process\.env\.\w*_BACKEND/.test(body);
+}
+/** A (fixtures): an inline ≥2-entry object-literal array that is .map-rendered. */
+function findFixtureLeaks(lines, body) {
+    if (hasDataSeam(body))
+        return []; // behind the seam → the port/flag handles it
+    const out = [];
+    // const NAME ... = [ ... ] spanning up to the closing bracket; detect ≥2 `{`
+    const declRe = /\bconst\s+([A-Za-z_$][\w$]*)\s*(?::[^=]+)?=\s*\[/;
+    for (let i = 0; i < lines.length; i++) {
+        const m = lines[i].match(declRe);
+        if (!m)
+            continue;
+        const name = m[1];
+        // gather until the array closes (bounded scan)
+        let depth = 0, started = false, objectCount = 0, endLine = i;
+        for (let j = i; j < Math.min(lines.length, i + 60); j++) {
+            for (const ch of lines[j]) {
+                if (ch === "[") {
+                    depth++;
+                    started = true;
+                }
+                else if (ch === "]") {
+                    depth--;
+                }
+                else if (ch === "{" && depth >= 1)
+                    objectCount++;
+            }
+            if (started && depth <= 0) {
+                endLine = j;
+                break;
+            }
+        }
+        if (objectCount < 2)
+            continue; // not a fixture-shaped list
+        // is it rendered? `{NAME.map(` or `NAME.map(` anywhere in the file
+        if (new RegExp(`\\b${name}\\.map\\s*\\(`).test(body)) {
+            if (EXEMPT.test(lines[i]))
+                continue;
+            out.push({
+                line: i + 1,
+                reason: `\`${name}\` is an inline fixture (${objectCount} entries) rendered in this file with no data seam. In prod this ships sample data. Route it through useDataDomain / a live-mode gate, or mark \`// @slowcook-honest\` if it's a config map.`,
+            });
+        }
+        i = endLine;
+    }
+    return out;
+}
+/** B (gating): a route/page file that defines routes but references no guard. */
+function findGatingGaps(relFile, body) {
+    const isRouteFile = /(^|\/)(App|routes?|router|pages?|app)\.(tsx|jsx)$/i.test(relFile)
+        || /(^|\/)(routes?|router)\//i.test(relFile);
+    if (!isRouteFile)
+        return [];
+    const routeCount = (body.match(/<Route\b/g) ?? []).length;
+    if (routeCount < 3)
+        return []; // a leaf page, not a router
+    const hasGuard = /requireAuth|RequireAuth|getSession|getSessionMember|useSession|redirect\(["'`]\/(sign-?in|login)/i.test(body);
+    if (hasGuard || EXEMPT.test(body))
+        return [];
+    return [{
+            line: 1,
+            reason: `This router defines ${routeCount} routes but references no auth guard (RequireAuth/getSession/redirect-to-signin). In prod, guests reach internal pages. Gate non-public routes, or mark \`// @slowcook-honest\` if every route here is genuinely public.`,
+        }];
+}
+/**
+ * C (dead CTA): an onClick/onSubmit that flips a state CLAIMING AN OUTCOME
+ * (submitted / sent / done / success / provisioning / created / saved …)
+ * without a real effect. This is the precise "fakes success" tell — it does
+ * NOT flag legitimate local view-state (open a modal, switch a tab, toggle a
+ * filter), which keeps the check high-signal enough to gate CI.
+ */
+const OUTCOME_SETTER = /\bset(?:Submitted|Sent|Done|Success|Complete|Completed|Provisioning|Provisioned|Confirmed|Saved|Created|Saved|Redeemed|Approved|Accepted|Booked|Paid|Requested|Connected|Finished)\b/;
+function findDeadCtas(lines) {
+    const out = [];
+    const handlerRe = /\bon(?:Click|Submit)\s*=\s*\{[^}]*=>\s*([^}]*)\}/;
+    for (let i = 0; i < lines.length; i++) {
+        const line = lines[i];
+        const m = line.match(handlerRe);
+        if (!m)
+            continue;
+        const inline = m[1].trim();
+        if (!inline)
+            continue; // named handler ref — inline judge out of scope for v1
+        // a FAKE success sets the outcome truthy; a reset (setSent(false)) is
+        // legitimate local view-state, not a dead CTA.
+        const outcomeM = inline.match(new RegExp(OUTCOME_SETTER.source + "\\s*\\(\\s*([^,)]*)"));
+        const claimsOutcome = !!outcomeM && !/^(false|null|undefined|""|''|``|0)$/.test((outcomeM[1] ?? "").trim());
+        const hasRealEffect = /\bfetch\s*\(|\bnavigate\s*\(|\.push\s*\(|\brouter\.|\baxios|href\s*=|window\.location|\bmutate\w*\s*\(|void\s+\w+\(|await\s/.test(inline);
+        // a BARE `disabled` (always-off) or `disabled={true}` is an honest
+        // acknowledgement; a CONDITIONAL `disabled={expr}` is NOT — the button is
+        // live when the condition is false, so a fake-success there still ships.
+        const bareDisabled = /\bdisabled(?![=\w])/.test(line) || /\bdisabled\s*=\s*\{?\s*true\s*\}?/.test(line);
+        // a leading `// @slowcook-honest` (this line or up to 2 lines above, like
+        // eslint-disable-next-line) is a valid, greppable acknowledgement.
+        const markerWindow = [line, lines[i - 1] ?? "", lines[i - 2] ?? ""].some((l) => EXEMPT.test(l));
+        const acknowledged = /deferred|coming.?soon/i.test(line) || bareDisabled || markerWindow;
+        if (claimsOutcome && !hasRealEffect && !acknowledged) {
+            out.push({
+                line: i + 1,
+                reason: `This onClick flips a success/outcome state with no fetch/navigation — a button that FAKES success. Wire the real effect, render an honest disabled/deferred state, or mark \`// @slowcook-honest\`.`,
+            });
+        }
+    }
+    return out;
+}
+export function checkFileHonesty(absFile, body, repoRoot) {
+    const relFile = relative(repoRoot, absFile).replace(/\\/g, "/");
+    if (EXEMPT.test(body.split(/\r?\n/)[0] ?? ""))
+        return []; // whole-file exemption on line 1
+    const lines = body.split(/\r?\n/);
+    const v = [];
+    for (const f of findFixtureLeaks(lines, body))
+        v.push({ file: relFile, line: f.line, cls: "fixture", reason: f.reason });
+    for (const f of findGatingGaps(relFile, body))
+        v.push({ file: relFile, line: f.line, cls: "gating", reason: f.reason });
+    for (const f of findDeadCtas(lines))
+        v.push({ file: relFile, line: f.line, cls: "dead_cta", reason: f.reason });
+    return v;
+}
+export function runProdHonestyCheck(repoRoot, dir = "src") {
+    const target = join(repoRoot, dir);
+    if (!existsSync(target))
+        return { violations: [], filesChecked: 0 };
+    const files = walkTsxFiles(target);
+    const violations = [];
+    for (const absFile of files) {
+        violations.push(...checkFileHonesty(absFile, readFileSync(absFile, "utf8"), repoRoot));
+    }
+    return { violations, filesChecked: files.length };
+}
+export function runProdHonestyCli(argv) {
+    const cwdIdx = argv.indexOf("--cwd");
+    const repoRoot = cwdIdx >= 0 ? argv[cwdIdx + 1] : process.cwd();
+    const dirIdx = argv.indexOf("--dir");
+    const dir = dirIdx >= 0 ? argv[dirIdx + 1] : "src";
+    const { violations, filesChecked } = runProdHonestyCheck(repoRoot, dir);
+    const LABEL = {
+        fixture: "A · fixture data in prod",
+        gating: "B · route not gated",
+        dead_cta: "C · CTA with no real effect",
+    };
+    if (violations.length === 0) {
+        console.log(`✓ prod-honesty: ${filesChecked} files clean (no fixture/gating/dead-CTA leaks in ${dir}/)`);
+        return;
+    }
+    console.error(`✗ prod-honesty: ${violations.length} issue(s) across ${filesChecked} files in ${dir}/\n`);
+    for (const v of violations) {
+        console.error(`  ${v.file}:${v.line}  [${LABEL[v.cls]}]`);
+        console.error(`    ${v.reason}\n`);
+    }
+    process.exit(1);
+}
+//# sourceMappingURL=prod-honesty.js.map

package/dist/commands/check/prod-honesty.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"prod-honesty.js","sourceRoot":"","sources":["../../../src/commands/check/prod-honesty.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAsCG;AAEH,OAAO,EAAE,YAAY,EAAE,UAAU,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,SAAS,CAAC;AAC1E,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,WAAW,CAAC;AAgB3C,MAAM,MAAM,GAAG,oBAAoB,CAAC;AAEpC,SAAS,YAAY,CAAC,GAAW,EAAE,MAAgB,EAAE;IACnD,IAAI,OAAiB,CAAC;IACtB,IAAI,CAAC;QACH,OAAO,GAAG,WAAW,CAAC,GAAG,CAAC,CAAC;IAC7B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,GAAG,CAAC;IACb,CAAC;IACD,KAAK,MAAM,IAAI,IAAI,OAAO,EAAE,CAAC;QAC3B,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;YAAE,SAAS;QACnC,IAAI,IAAI,KAAK,cAAc,IAAI,IAAI,KAAK,OAAO,IAAI,IAAI,KAAK,MAAM,IAAI,IAAI,KAAK,OAAO;YAAE,SAAS;QACjG,oEAAoE;QACpE,IAAI,6BAA6B,CAAC,IAAI,CAAC,IAAI,CAAC;YAAE,SAAS;QACvD,IAAI,kDAAkD,CAAC,IAAI,CAAC,IAAI,CAAC;YAAE,SAAS;QAC5E,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;QAC7B,IAAI,EAAE,CAAC;QACP,IAAI,CAAC;YAAC,EAAE,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC;QAAC,CAAC;QAAC,MAAM,CAAC;YAAC,SAAS;QAAC,CAAC;QAChD,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,CAAC;YACrB,IAAI,IAAI,KAAK,MAAM,IAAI,IAAI,KAAK,OAAO,IAAI,IAAI,KAAK,WAAW,IAAI,IAAI,KAAK,WAAW,IAAI,IAAI,KAAK,UAAU;gBAAE,SAAS;YACzH,YAAY,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;QAC1B,CAAC;aAAM,IAAI,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;YACrC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACjB,CAAC;IACH,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,gEAAgE;AAChE,SAAS,WAAW,CAAC,IAAY;IAC/B,OAAO,sBAAsB,CAAC,IAAI,CAAC,IAAI,CAAC;WACnC,0BAA0B,CAAC,IAAI,CAAC,IAAI,CAAC,CAAG,yCAAyC;WACjF,gCAAgC,CAAC,IAAI,CAAC,IAAI,CAAC;WAC3C,2BAA2B,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC9C,CAAC;AAED,mFAAmF;AACnF,SAAS,gBAAgB,CAAC,KAAe,EAAE,IAAY;IACrD,IAAI,WAAW,CAAC,IAAI,CAAC;QAAE,OAAO,EAAE,CAAC,CAAC,6CAA6C;IAC/E,MAAM,GAAG,GAAuC,EAAE,CAAC;IACnD,6EAA6E;IAC7E,MAAM,MAAM,GAAG,kDAAkD,CAAC;IAClE,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACtC,MAAM,CAAC,GAAG,KAAK,CAAC,CAAC,CAAE,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QAClC,IAAI,CAAC,CAAC;YAAE,SAAS;QACjB,MAAM,IAAI,GAAG,CAAC,CAAC,CAAC,CAAE,CAAC;QACnB,+CAA+C;QAC/C,IAAI,KAAK,GAAG,CAAC,EAAE,OAAO,GAAG,KAAK,EAAE,WAAW,GAAG,CAAC,EAAE,OAAO,GAAG,CAAC,CAAC;QAC7D,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;YACxD,KAAK,MAAM,EAAE,IAAI,KAAK,CAAC,CAAC,CAAE,EAAE,CAAC;gBAC3B,IAAI,EAAE,KAAK,GAAG,EAAE,CAAC;oBAAC,KAAK,EAAE,CAAC;oBAAC,OAAO,GAAG,IAAI,CAAC;gBAAC,CAAC;qBACvC,IAAI,EAAE,KAAK,GAAG,EAAE,CAAC;oBAAC,KAAK,EAAE,CAAC;gBAAC,CAAC;qBAC5B,IAAI,EAAE,KAAK,GAAG,IAAI,KAAK,IAAI,CAAC;oBAAE,WAAW,EAAE,CAAC;YACnD,CAAC;YACD,IAAI,OAAO,IAAI,KAAK,IAAI,CAAC,EAAE,CAAC;gBAAC,OAAO,GAAG,CAAC,CAAC;gBAAC,MAAM;YAAC,CAAC;QACpD,CAAC;QACD,IAAI,WAAW,GAAG,CAAC;YAAE,SAAS,CAAC,4BAA4B;QAC3D,mEAAmE;QACnE,IAAI,IAAI,MAAM,CAAC,MAAM,IAAI,eAAe,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;YACrD,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAE,CAAC;gBAAE,SAAS;YACrC,GAAG,CAAC,IAAI,CAAC;gBACP,IAAI,EAAE,CAAC,GAAG,CAAC;gBACX,MAAM,EAAE,KAAK,IAAI,4BAA4B,WAAW,6LAA6L;aACtP,CAAC,CAAC;QACL,CAAC;QACD,CAAC,GAAG,OAAO,CAAC;IACd,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,iFAAiF;AACjF,SAAS,cAAc,CAAC,OAAe,EAAE,IAAY;IACnD,MAAM,WAAW,GAAG,oDAAoD,CAAC,IAAI,CAAC,OAAO,CAAC;WACjF,2BAA2B,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IAC/C,IAAI,CAAC,WAAW;QAAE,OAAO,EAAE,CAAC;IAC5B,MAAM,UAAU,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC;IAC1D,IAAI,UAAU,GAAG,CAAC;QAAE,OAAO,EAAE,CAAC,CAAC,4BAA4B;IAC3D,MAAM,QAAQ,GAAG,mGAAmG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAChI,IAAI,QAAQ,IAAI,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC;QAAE,OAAO,EAAE,CAAC;IAC7C,OAAO,CAAC;YACN,IAAI,EAAE,CAAC;YACP,MAAM,EAAE,uBAAuB,UAAU,0NAA0N;SACpQ,CAAC,CAAC;AACL,CAAC;AAED;;;;;;GAMG;AACH,MAAM,cAAc,GAAG,sLAAsL,CAAC;AAC9M,SAAS,YAAY,CAAC,KAAe;IACnC,MAAM,GAAG,GAAuC,EAAE,CAAC;IACnD,MAAM,SAAS,GAAG,kDAAkD,CAAC;IACrE,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACtC,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,CAAE,CAAC;QACvB,MAAM,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;QAChC,IAAI,CAAC,CAAC;YAAE,SAAS;QACjB,MAAM,MAAM,GAAG,CAAC,CAAC,CAAC,CAAE,CAAC,IAAI,EAAE,CAAC;QAC5B,IAAI,CAAC,MAAM;YAAE,SAAS,CAAC,uDAAuD;QAC9E,sEAAsE;QACtE,+CAA+C;QAC/C,MAAM,QAAQ,GAAG,MAAM,CAAC,KAAK,CAAC,IAAI,MAAM,CAAC,cAAc,CAAC,MAAM,GAAG,qBAAqB,CAAC,CAAC,CAAC;QACzF,MAAM,aAAa,GAAG,CAAC,CAAC,QAAQ,IAAI,CAAC,qCAAqC,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;QAC5G,MAAM,aAAa,GAAG,6HAA6H,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACjK,mEAAmE;QACnE,0EAA0E;QAC1E,yEAAyE;QACzE,MAAM,YAAY,GAAG,qBAAqB,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,mCAAmC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACxG,0EAA0E;QAC1E,mEAAmE;QACnE,MAAM,YAAY,GAAG,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;QAChG,MAAM,YAAY,GAAG,wBAAwB,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,YAAY,IAAI,YAAY,CAAC;QACzF,IAAI,aAAa,IAAI,CAAC,aAAa,IAAI,CAAC,YAAY,EAAE,CAAC;YACrD,GAAG,CAAC,IAAI,CAAC;gBACP,IAAI,EAAE,CAAC,GAAG,CAAC;gBACX,MAAM,EAAE,qMAAqM;aAC9M,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,OAAe,EAAE,IAAY,EAAE,QAAgB;IAC9E,MAAM,OAAO,GAAG,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;IAChE,IAAI,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;QAAE,OAAO,EAAE,CAAC,CAAC,iCAAiC;IAC3F,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IAClC,MAAM,CAAC,GAAuB,EAAE,CAAC;IACjC,KAAK,MAAM,CAAC,IAAI,gBAAgB,CAAC,KAAK,EAAE,IAAI,CAAC;QAAE,CAAC,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,GAAG,EAAE,SAAS,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC;IACzH,KAAK,MAAM,CAAC,IAAI,cAAc,CAAC,OAAO,EAAE,IAAI,CAAC;QAAE,CAAC,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,GAAG,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC;IACxH,KAAK,MAAM,CAAC,IAAI,YAAY,CAAC,KAAK,CAAC;QAAE,CAAC,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,GAAG,EAAE,UAAU,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC;IAChH,OAAO,CAAC,CAAC;AACX,CAAC;AAED,MAAM,UAAU,mBAAmB,CAAC,QAAgB,EAAE,GAAG,GAAG,KAAK;IAC/D,MAAM,MAAM,GAAG,IAAI,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC;IACnC,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC;QAAE,OAAO,EAAE,UAAU,EAAE,EAAE,EAAE,YAAY,EAAE,CAAC,EAAE,CAAC;IACpE,MAAM,KAAK,GAAG,YAAY,CAAC,MAAM,CAAC,CAAC;IACnC,MAAM,UAAU,GAAuB,EAAE,CAAC;IAC1C,KAAK,MAAM,OAAO,IAAI,KAAK,EAAE,CAAC;QAC5B,UAAU,CAAC,IAAI,CAAC,GAAG,gBAAgB,CAAC,OAAO,EAAE,YAAY,CAAC,OAAO,EAAE,MAAM,CAAC,EAAE,QAAQ,CAAC,CAAC,CAAC;IACzF,CAAC;IACD,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC;AACpD,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,IAAc;IAC9C,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;IACrC,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAE,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC;IACjE,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;IACrC,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAE,CAAC,CAAC,CAAC,KAAK,CAAC;IACpD,MAAM,EAAE,UAAU,EAAE,YAAY,EAAE,GAAG,mBAAmB,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC;IAExE,MAAM,KAAK,GAAiC;QAC1C,OAAO,EAAE,0BAA0B;QACnC,MAAM,EAAE,qBAAqB;QAC7B,QAAQ,EAAE,6BAA6B;KACxC,CAAC;IACF,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC5B,OAAO,CAAC,GAAG,CAAC,mBAAmB,YAAY,qDAAqD,GAAG,IAAI,CAAC,CAAC;QACzG,OAAO;IACT,CAAC;IACD,OAAO,CAAC,KAAK,CAAC,mBAAmB,UAAU,CAAC,MAAM,oBAAoB,YAAY,aAAa,GAAG,KAAK,CAAC,CAAC;IACzG,KAAK,MAAM,CAAC,IAAI,UAAU,EAAE,CAAC;QAC3B,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,IAAI,MAAM,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAC1D,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC;IACrC,CAAC;IACD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@slowcook-ai/cli",
-  "version": "0.23.0",
+  "version": "0.25.0",
   "description": "CLI for the slowcook brewing harness",
   "license": "MIT",
   "author": "aminazar",
@@ -41,13 +41,13 @@
     "ts-morph": "^28.0.0",
     "yaml": "^2.9.0",
     "zod": "^4.4.3",
-    "@slowcook-ai/core": "^0.16.0",
-    "@slowcook-ai/forge-github": "^0.14.0",
+    "@slowcook-ai/core": "^0.17.0",
     "@slowcook-ai/stack-ts": "^0.9.9",
-    "@slowcook-ai/recorder": "^0.9.1",
+    "@slowcook-ai/forge-github": "^0.14.0",
+    "@slowcook-ai/llm-anthropic": "^0.21.0",
+    "@slowcook-ai/gates": "^0.11.0",
     "@slowcook-ai/review-overlay": "^0.11.0",
-    "@slowcook-ai/llm-anthropic": "^0.20.0",
-    "@slowcook-ai/gates": "^0.11.0"
+    "@slowcook-ai/recorder": "^0.9.1"
   },
   "devDependencies": {
     "@types/node": "^26.0.1"