@spikedpunch/align-cli 0.1.0

package/dist/commands/check.js

@@ -0,0 +1,203 @@
+import { assertNoCustomHostRules, buildMcpCheckPayload, renderViolationMessage, } from '@spikedpunch/align-core';
+import { loadConfig } from '../config.js';
+import { createOrchestrator } from '../composition-root.js';
+import { readBaseline, readGeneratedRules, readRulesetIr, readRulesLock, writeBaseline } from '../align-dir.js';
+import { verifyFrozenRules } from './build.js';
+import { buildCheckEvent, computeAndPersistViolationTransitions, computeRulesetIrHash, createTelemetryRecorder } from '../telemetry/index.js';
+/** Carried Stage 3 affordance (approved ahead of Stage 4): when generated rules are active
+ * (`.align/generated-rules.json` + `.align/rules.lock.json` both present, ADR 011), surface a
+ * one-line summary so a human/agent reading `align check` output knows doc-built rules are in
+ * force without having to separately inspect `.align/`. Trusted mode only — `--untrusted`'s
+ * effective ruleset was already merged into the exported artifact at `align export-ir` time, so
+ * re-reading the live `.align/generated-rules.json` here would describe the wrong ruleset (and
+ * would be a config-adjacent filesystem read done for cosmetics, not a scan need). */
+function generatedRulesSummary(rootDir) {
+    const generated = readGeneratedRules(rootDir);
+    const lock = readRulesLock(rootDir);
+    if (generated === undefined || lock === undefined || generated.rules.length === 0)
+        return undefined;
+    return { count: generated.rules.length, doc: lock.docPath, builtAt: new Date(lock.builtAt).toISOString().slice(0, 10) };
+}
+/**
+ * `align check` — FRESH scan every run (ADR 005: rescan-on-check, no caching of any kind).
+ * Exit 0 only on a fully green verdict (and, with `--frozen-rules`, no doc/generated-rules
+ * drift); 1 on red or error (ADR 008: error is environmental and halts/escalates, but from a
+ * shell's perspective both are "not safe to proceed"); 1 on a `--untrusted` refuse (missing IR
+ * artifact, custom.host present) — refusal is also "not safe to proceed", just before a scan ever
+ * starts.
+ */
+export async function runCheck(rootDir, options) {
+    if (options.untrusted === true && options.frozenRules === true) {
+        console.error('--untrusted and --frozen-rules cannot be combined: frozen-rules verification reads the live ' +
+            'align.config.ts/.align/generated-rules.json/.align/rules.lock.json trio to detect drift, which ' +
+            "is exactly the trusted-mode filesystem state --untrusted's committed-IR-only contract excludes. " +
+            'Run `align build --verify` (or plain `align check --frozen-rules`) in a trusted checkout instead.');
+        return 1;
+    }
+    return options.untrusted === true ? runUntrustedCheck(rootDir, options) : runTrustedCheck(rootDir, options);
+}
+async function runTrustedCheck(rootDir, options) {
+    const { ruleset, excludes, hostRules, telemetry } = await loadConfig(rootDir);
+    const { orchestrator, baselineStore } = createOrchestrator(ruleset, readBaseline(rootDir), hostRules);
+    const recorder = createTelemetryRecorder(rootDir, 'check', options.telemetryPreConfig, telemetry);
+    const rulesetIrHash = computeRulesetIrHash(ruleset);
+    const wallStart = performance.now();
+    const run = await orchestrator.check({ rootDir, excludes });
+    const wallMs = performance.now() - wallStart;
+    persistMovedBaseline(rootDir, run, baselineStore);
+    let effectiveRun = run;
+    if (options.frozenRules === true) {
+        const frozen = verifyFrozenRules(rootDir);
+        effectiveRun = {
+            ...run,
+            // A false 'green' verdict is a severity-zero bug class (ARCHITECTURE.md's stated
+            // invariant) — drift/divergence must flip the VERDICT ITSELF, not just the exit code, so
+            // `--json` consumers (agents, CI) reading `verdict` alone never get a lying "green" while
+            // `advisories` quietly explains why they shouldn't have trusted it.
+            verdict: !frozen.ok && run.verdict === 'green' ? 'red' : run.verdict,
+            advisories: [...run.advisories, ...frozen.advisories],
+        };
+    }
+    recordCheckTelemetry(rootDir, recorder, effectiveRun, wallMs, rulesetIrHash, 'check');
+    return emit(effectiveRun, options, generatedRulesSummary(rootDir));
+}
+/**
+ * The one place `check`'s telemetry gets recorded (both trusted and `--untrusted` paths funnel
+ * through this) — a `check` event unconditionally, plus one `violation-appeared`/
+ * `violation-resolved` event per fingerprint transition against `.align/telemetry-state.json`
+ * (only computed/persisted when the recorder is actually enabled — an OFF run must never touch
+ * that file, IMPLEMENTATION_PLAN.md's telemetry spec). An `error`/`gate-error` event replaces the
+ * `check` event when the verdict itself is `'error'` (a gate genuinely couldn't produce a
+ * trustworthy result — ADR 008), since a latency/violation-count number for a run that didn't
+ * really complete would misrepresent the distribution the summarizer command computes.
+ */
+function recordCheckTelemetry(rootDir, recorder, run, wallMs, rulesetIrHash, command) {
+    if (!recorder.enabled)
+        return;
+    if (run.verdict === 'error') {
+        const errorGate = run.gates.find((g) => g.status === 'error');
+        recorder.record({ kind: 'error', errorKind: 'gate-error', message: shortMessage(errorGate?.errorMessage ?? 'unknown gate error'), command }, { ...(rulesetIrHash !== undefined ? { rulesetIrHash } : {}) });
+        return;
+    }
+    recorder.record(buildCheckEvent(run, wallMs), { ...(rulesetIrHash !== undefined ? { rulesetIrHash } : {}) });
+    const violations = run.gates.flatMap((g) => g.violations);
+    for (const event of computeAndPersistViolationTransitions(rootDir, violations)) {
+        recorder.record(event, { ...(rulesetIrHash !== undefined ? { rulesetIrHash } : {}) });
+    }
+}
+/** SHORT message only — no secrets, no file contents (IMPLEMENTATION_PLAN.md's telemetry spec).
+ * `errorMessage` on a `GateResult` is already environmental/plain-string (never LLM-facing prose
+ * embedding source text, `gates/types.ts`), but is truncated defensively here anyway since it can
+ * originate from an arbitrary thrown `Error`'s `.message`. */
+function shortMessage(message, maxLength = 200) {
+    return message.length > maxLength ? `${message.slice(0, maxLength)}…` : message;
+}
+/**
+ * `align check --untrusted` (ADR 014). Everything above `orchestrator.check` is deliberately
+ * different code paths from `runTrustedCheck`, not a shared branch inside it — the whole point is
+ * that `loadConfig` (which dynamically imports align.config.ts) is never even referenced in this
+ * function's call graph. `hostPredicates` is always the empty map here — safe unconditionally
+ * because `assertNoCustomHostRules` below already refused any ruleset that would have needed one.
+ */
+async function runUntrustedCheck(rootDir, options) {
+    // Built before the IR artifact is even read, from flags/`ALIGN_TELEMETRY` only — `--untrusted`
+    // never calls `loadConfig` (ADR 014), so `align.config.ts`'s `telemetry` export can never
+    // contribute to this decision under this mode, by the same design that keeps `hostRules` out of
+    // reach here. This lets a refusal itself be recorded (`untrusted-refusal`) below.
+    const recorder = createTelemetryRecorder(rootDir, 'check --untrusted', options.telemetryPreConfig, undefined);
+    let exported;
+    try {
+        exported = readRulesetIr(rootDir, options.ir);
+    }
+    catch (err) {
+        const message = `${err instanceof Error ? err.message : String(err)} — refusing to run. A corrupted or ` +
+            'hand-edited IR artifact is never treated as absent (that would silently drop rules); re-run ' +
+            '`align export-ir` in a trusted checkout to regenerate it.';
+        console.error(`align check --untrusted: ${message}`);
+        recorder.record({ kind: 'error', errorKind: 'untrusted-refusal', message: shortMessage(message), command: 'check --untrusted' });
+        return 1;
+    }
+    if (exported === undefined) {
+        const path = options.ir ?? '.align/ruleset-ir.json';
+        const message = `no committed IR ruleset found at ${path}. --untrusted cannot execute align.config.ts, so there is ` +
+            'nothing to check it against. Run `align export-ir` in a trusted checkout to produce it, or run ' +
+            '`align check` without --untrusted only on repos you trust to execute code.';
+        console.error(`align check --untrusted: ${message}`);
+        recorder.record({ kind: 'error', errorKind: 'untrusted-refusal', message: shortMessage(message), command: 'check --untrusted' });
+        return 1;
+    }
+    try {
+        assertNoCustomHostRules(exported.ruleset.rules);
+    }
+    catch (err) {
+        const message = err instanceof Error ? err.message : String(err);
+        console.error(`align check --untrusted: ${message}`);
+        recorder.record({ kind: 'error', errorKind: 'untrusted-refusal', message: shortMessage(message), command: 'check --untrusted' });
+        return 1;
+    }
+    const rulesetIrHash = computeRulesetIrHash(exported.ruleset);
+    const { orchestrator, baselineStore } = createOrchestrator(exported.ruleset, readBaseline(rootDir), new Map());
+    const wallStart = performance.now();
+    const run = await orchestrator.check({ rootDir, excludes: exported.excludes });
+    const wallMs = performance.now() - wallStart;
+    persistMovedBaseline(rootDir, run, baselineStore);
+    recordCheckTelemetry(rootDir, recorder, run, wallMs, rulesetIrHash, 'check --untrusted');
+    return emit(run, options, undefined);
+}
+function persistMovedBaseline(rootDir, run, baselineStore) {
+    // Move-transfer (ADR 006) mutated the in-memory store during `check` — persist so a rename
+    // doesn't need a separate `align baseline prune` run to stop being reported every time.
+    if (run.advisories.some((a) => a.kind === 'baseline-moved')) {
+        writeBaseline(rootDir, baselineStore.snapshot());
+    }
+}
+function emit(run, options, generatedRules) {
+    if (options.json) {
+        const payload = buildMcpCheckPayload(run);
+        const withGeneratedRules = generatedRules === undefined ? payload : { ...payload, generatedRules: { ...generatedRules } };
+        process.stdout.write(`${JSON.stringify(withGeneratedRules, null, 2)}\n`);
+        return run.verdict === 'green' ? 0 : 1;
+    }
+    printHuman(run, generatedRules);
+    return run.verdict === 'green' ? 0 : 1;
+}
+function printHuman(run, generatedRules) {
+    for (const gate of run.gates) {
+        const label = `${gate.gate}`.padEnd(12);
+        if (gate.status === 'error') {
+            console.log(`  ${label} ERROR   ${gate.errorMessage ?? ''}`);
+            continue;
+        }
+        if (gate.status === 'skipped') {
+            console.log(`  ${label} skipped`);
+            continue;
+        }
+        const suffix = gate.baselinedCount > 0 ? ` (${gate.baselinedCount} baselined)` : '';
+        console.log(`  ${label} ${gate.status === 'green' ? 'green ' : 'RED   '} ${gate.violations.length} violation(s)${suffix}`);
+    }
+    if (generatedRules !== undefined) {
+        console.log(`  +${generatedRules.count} rules from ${generatedRules.doc} (built ${generatedRules.builtAt})`);
+    }
+    const violations = run.gates.flatMap((g) => g.violations);
+    if (violations.length > 0) {
+        console.log('');
+        for (const v of violations) {
+            console.log(`  ${v.file}:${v.range.startLine} [${v.ruleId}] ${renderViolationMessage(v)}`);
+        }
+    }
+    console.log('');
+    if (run.advisories.length > 0) {
+        for (const a of run.advisories)
+            console.log(`  advisory (${a.kind}): ${a.message}`);
+    }
+    // R1 (greenfield mode): a distinct line near the verdict — not buried in `align explain`/
+    // `doctor` — so a check-agent's own loop sees "green because compliant" vs. "green because
+    // empty" as different states (registry.ts's `findUngroundedComponents` doc comment names the
+    // false-green hole this closes).
+    if (run.ungroundedComponents.length > 0) {
+        const names = run.ungroundedComponents.map((c) => c.name).join(', ');
+        console.log(`⚠ ${run.ungroundedComponents.length} component(s) matched no files (ungrounded, provisionally green): ${names}`);
+    }
+    console.log(`verdict: ${run.verdict}`);
+}
+//# sourceMappingURL=check.js.map

package/dist/commands/check.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"check.js","sourceRoot":"","sources":["../../src/commands/check.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,uBAAuB,EACvB,oBAAoB,EACpB,sBAAsB,GAIvB,MAAM,yBAAyB,CAAC;AACjC,OAAO,EAAE,UAAU,EAAE,MAAM,cAAc,CAAC;AAC1C,OAAO,EAAE,kBAAkB,EAAE,MAAM,wBAAwB,CAAC;AAC5D,OAAO,EAAE,YAAY,EAAE,kBAAkB,EAAE,aAAa,EAAE,aAAa,EAAE,aAAa,EAAE,MAAM,iBAAiB,CAAC;AAChH,OAAO,EAAE,iBAAiB,EAAE,MAAM,YAAY,CAAC;AAC/C,OAAO,EAAE,eAAe,EAAE,qCAAqC,EAAE,oBAAoB,EAAE,uBAAuB,EAAE,MAAM,uBAAuB,CAAC;AAE9I;;;;;;sFAMsF;AACtF,SAAS,qBAAqB,CAAC,OAAe;IAC5C,MAAM,SAAS,GAAG,kBAAkB,CAAC,OAAO,CAAC,CAAC;IAC9C,MAAM,IAAI,GAAG,aAAa,CAAC,OAAO,CAAC,CAAC;IACpC,IAAI,SAAS,KAAK,SAAS,IAAI,IAAI,KAAK,SAAS,IAAI,SAAS,CAAC,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,SAAS,CAAC;IACpG,OAAO,EAAE,KAAK,EAAE,SAAS,CAAC,KAAK,CAAC,MAAM,EAAE,GAAG,EAAE,IAAI,CAAC,OAAO,EAAE,OAAO,EAAE,IAAI,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,WAAW,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC;AAC1H,CAAC;AAwBD;;;;;;;GAOG;AACH,MAAM,CAAC,KAAK,UAAU,QAAQ,CAAC,OAAe,EAAE,OAAqB;IACnE,IAAI,OAAO,CAAC,SAAS,KAAK,IAAI,IAAI,OAAO,CAAC,WAAW,KAAK,IAAI,EAAE,CAAC;QAC/D,OAAO,CAAC,KAAK,CACX,8FAA8F;YAC5F,iGAAiG;YACjG,kGAAkG;YAClG,mGAAmG,CACtG,CAAC;QACF,OAAO,CAAC,CAAC;IACX,CAAC;IAED,OAAO,OAAO,CAAC,SAAS,KAAK,IAAI,CAAC,CAAC,CAAC,iBAAiB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,eAAe,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;AAC9G,CAAC;AAED,KAAK,UAAU,eAAe,CAAC,OAAe,EAAE,OAAqB;IACnE,MAAM,EAAE,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,SAAS,EAAE,GAAG,MAAM,UAAU,CAAC,OAAO,CAAC,CAAC;IAC9E,MAAM,EAAE,YAAY,EAAE,aAAa,EAAE,GAAG,kBAAkB,CAAC,OAAO,EAAE,YAAY,CAAC,OAAO,CAAC,EAAE,SAAS,CAAC,CAAC;IAEtG,MAAM,QAAQ,GAAG,uBAAuB,CAAC,OAAO,EAAE,OAAO,EAAE,OAAO,CAAC,kBAAkB,EAAE,SAAS,CAAC,CAAC;IAClG,MAAM,aAAa,GAAG,oBAAoB,CAAC,OAAO,CAAC,CAAC;IAEpD,MAAM,SAAS,GAAG,WAAW,CAAC,GAAG,EAAE,CAAC;IACpC,MAAM,GAAG,GAAG,MAAM,YAAY,CAAC,KAAK,CAAC,EAAE,OAAO,EAAE,QAAQ,EAAE,CAAC,CAAC;IAC5D,MAAM,MAAM,GAAG,WAAW,CAAC,GAAG,EAAE,GAAG,SAAS,CAAC;IAC7C,oBAAoB,CAAC,OAAO,EAAE,GAAG,EAAE,aAAa,CAAC,CAAC;IAElD,IAAI,YAAY,GAAG,GAAG,CAAC;IACvB,IAAI,OAAO,CAAC,WAAW,KAAK,IAAI,EAAE,CAAC;QACjC,MAAM,MAAM,GAAG,iBAAiB,CAAC,OAAO,CAAC,CAAC;QAC1C,YAAY,GAAG;YACb,GAAG,GAAG;YACN,iFAAiF;YACjF,yFAAyF;YACzF,0FAA0F;YAC1F,oEAAoE;YACpE,OAAO,EAAE,CAAC,MAAM,CAAC,EAAE,IAAI,GAAG,CAAC,OAAO,KAAK,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO;YACpE,UAAU,EAAE,CAAC,GAAG,GAAG,CAAC,UAAU,EAAE,GAAG,MAAM,CAAC,UAAU,CAAC;SACtD,CAAC;IACJ,CAAC;IAED,oBAAoB,CAAC,OAAO,EAAE,QAAQ,EAAE,YAAY,EAAE,MAAM,EAAE,aAAa,EAAE,OAAO,CAAC,CAAC;IAEtF,OAAO,IAAI,CAAC,YAAY,EAAE,OAAO,EAAE,qBAAqB,CAAC,OAAO,CAAC,CAAC,CAAC;AACrE,CAAC;AAED;;;;;;;;;GASG;AACH,SAAS,oBAAoB,CAC3B,OAAe,EACf,QAAoD,EACpD,GAAa,EACb,MAAc,EACd,aAAiC,EACjC,OAAe;IAEf,IAAI,CAAC,QAAQ,CAAC,OAAO;QAAE,OAAO;IAE9B,IAAI,GAAG,CAAC,OAAO,KAAK,OAAO,EAAE,CAAC;QAC5B,MAAM,SAAS,GAAG,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,OAAO,CAAC,CAAC;QAC9D,QAAQ,CAAC,MAAM,CACb,EAAE,IAAI,EAAE,OAAO,EAAE,SAAS,EAAE,YAAY,EAAE,OAAO,EAAE,YAAY,CAAC,SAAS,EAAE,YAAY,IAAI,oBAAoB,CAAC,EAAE,OAAO,EAAE,EAC3H,EAAE,GAAG,CAAC,aAAa,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAC9D,CAAC;QACF,OAAO;IACT,CAAC;IAED,QAAQ,CAAC,MAAM,CAAC,eAAe,CAAC,GAAG,EAAE,MAAM,CAAC,EAAE,EAAE,GAAG,CAAC,aAAa,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;IAE7G,MAAM,UAAU,GAAG,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC;IAC1D,KAAK,MAAM,KAAK,IAAI,qCAAqC,CAAC,OAAO,EAAE,UAAU,CAAC,EAAE,CAAC;QAC/E,QAAQ,CAAC,MAAM,CAAC,KAAK,EAAE,EAAE,GAAG,CAAC,aAAa,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;IACxF,CAAC;AACH,CAAC;AAED;;;8DAG8D;AAC9D,SAAS,YAAY,CAAC,OAAe,EAAE,SAAS,GAAG,GAAG;IACpD,OAAO,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC;AAClF,CAAC;AAED;;;;;;GAMG;AACH,KAAK,UAAU,iBAAiB,CAAC,OAAe,EAAE,OAAqB;IACrE,+FAA+F;IAC/F,0FAA0F;IAC1F,gGAAgG;IAChG,kFAAkF;IAClF,MAAM,QAAQ,GAAG,uBAAuB,CAAC,OAAO,EAAE,mBAAmB,EAAE,OAAO,CAAC,kBAAkB,EAAE,SAAS,CAAC,CAAC;IAE9G,IAAI,QAAqC,CAAC;IAC1C,IAAI,CAAC;QACH,QAAQ,GAAG,aAAa,CAAC,OAAO,EAAE,OAAO,CAAC,EAAE,CAAC,CAAC;IAChD,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,OAAO,GAAG,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,qCAAqC;YACtG,8FAA8F;YAC9F,2DAA2D,CAAC;QAC9D,OAAO,CAAC,KAAK,CAAC,4BAA4B,OAAO,EAAE,CAAC,CAAC;QACrD,QAAQ,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,SAAS,EAAE,mBAAmB,EAAE,OAAO,EAAE,YAAY,CAAC,OAAO,CAAC,EAAE,OAAO,EAAE,mBAAmB,EAAE,CAAC,CAAC;QACjI,OAAO,CAAC,CAAC;IACX,CAAC;IACD,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;QAC3B,MAAM,IAAI,GAAG,OAAO,CAAC,EAAE,IAAI,wBAAwB,CAAC;QACpD,MAAM,OAAO,GACX,oCAAoC,IAAI,4DAA4D;YACpG,iGAAiG;YACjG,4EAA4E,CAAC;QAC/E,OAAO,CAAC,KAAK,CAAC,4BAA4B,OAAO,EAAE,CAAC,CAAC;QACrD,QAAQ,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,SAAS,EAAE,mBAAmB,EAAE,OAAO,EAAE,YAAY,CAAC,OAAO,CAAC,EAAE,OAAO,EAAE,mBAAmB,EAAE,CAAC,CAAC;QACjI,OAAO,CAAC,CAAC;IACX,CAAC;IAED,IAAI,CAAC;QACH,uBAAuB,CAAC,QAAQ,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;IAClD,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,OAAO,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QACjE,OAAO,CAAC,KAAK,CAAC,4BAA4B,OAAO,EAAE,CAAC,CAAC;QACrD,QAAQ,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,SAAS,EAAE,mBAAmB,EAAE,OAAO,EAAE,YAAY,CAAC,OAAO,CAAC,EAAE,OAAO,EAAE,mBAAmB,EAAE,CAAC,CAAC;QACjI,OAAO,CAAC,CAAC;IACX,CAAC;IAED,MAAM,aAAa,GAAG,oBAAoB,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;IAC7D,MAAM,EAAE,YAAY,EAAE,aAAa,EAAE,GAAG,kBAAkB,CAAC,QAAQ,CAAC,OAAO,EAAE,YAAY,CAAC,OAAO,CAAC,EAAE,IAAI,GAAG,EAAE,CAAC,CAAC;IAC/G,MAAM,SAAS,GAAG,WAAW,CAAC,GAAG,EAAE,CAAC;IACpC,MAAM,GAAG,GAAG,MAAM,YAAY,CAAC,KAAK,CAAC,EAAE,OAAO,EAAE,QAAQ,EAAE,QAAQ,CAAC,QAAQ,EAAE,CAAC,CAAC;IAC/E,MAAM,MAAM,GAAG,WAAW,CAAC,GAAG,EAAE,GAAG,SAAS,CAAC;IAC7C,oBAAoB,CAAC,OAAO,EAAE,GAAG,EAAE,aAAa,CAAC,CAAC;IAElD,oBAAoB,CAAC,OAAO,EAAE,QAAQ,EAAE,GAAG,EAAE,MAAM,EAAE,aAAa,EAAE,mBAAmB,CAAC,CAAC;IAEzF,OAAO,IAAI,CAAC,GAAG,EAAE,OAAO,EAAE,SAAS,CAAC,CAAC;AACvC,CAAC;AAED,SAAS,oBAAoB,CAAC,OAAe,EAAE,GAAa,EAAE,aAAoC;IAChG,2FAA2F;IAC3F,wFAAwF;IACxF,IAAI,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,gBAAgB,CAAC,EAAE,CAAC;QAC5D,aAAa,CAAC,OAAO,EAAE,aAAa,CAAC,QAAQ,EAAE,CAAC,CAAC;IACnD,CAAC;AACH,CAAC;AAED,SAAS,IAAI,CACX,GAAa,EACb,OAAqB,EACrB,cAAsG;IAEtG,IAAI,OAAO,CAAC,IAAI,EAAE,CAAC;QACjB,MAAM,OAAO,GAAG,oBAAoB,CAAC,GAAG,CAAC,CAAC;QAC1C,MAAM,kBAAkB,GAAG,cAAc,KAAK,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,GAAG,OAAO,EAAE,cAAc,EAAE,EAAE,GAAG,cAAc,EAAE,EAAE,CAAC;QAC1H,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,kBAAkB,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC;QACzE,OAAO,GAAG,CAAC,OAAO,KAAK,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACzC,CAAC;IAED,UAAU,CAAC,GAAG,EAAE,cAAc,CAAC,CAAC;IAChC,OAAO,GAAG,CAAC,OAAO,KAAK,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AACzC,CAAC;AAED,SAAS,UAAU,CAAC,GAAa,EAAE,cAA2F;IAC5H,KAAK,MAAM,IAAI,IAAI,GAAG,CAAC,KAAK,EAAE,CAAC;QAC7B,MAAM,KAAK,GAAG,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QACxC,IAAI,IAAI,CAAC,MAAM,KAAK,OAAO,EAAE,CAAC;YAC5B,OAAO,CAAC,GAAG,CAAC,KAAK,KAAK,YAAY,IAAI,CAAC,YAAY,IAAI,EAAE,EAAE,CAAC,CAAC;YAC7D,SAAS;QACX,CAAC;QACD,IAAI,IAAI,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;YAC9B,OAAO,CAAC,GAAG,CAAC,KAAK,KAAK,UAAU,CAAC,CAAC;YAClC,SAAS;QACX,CAAC;QACD,MAAM,MAAM,GAAG,IAAI,CAAC,cAAc,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,IAAI,CAAC,cAAc,aAAa,CAAC,CAAC,CAAC,EAAE,CAAC;QACpF,OAAO,CAAC,GAAG,CAAC,KAAK,KAAK,IAAI,IAAI,CAAC,MAAM,KAAK,OAAO,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,QAAQ,IAAI,IAAI,CAAC,UAAU,CAAC,MAAM,gBAAgB,MAAM,EAAE,CAAC,CAAC;IAC7H,CAAC;IAED,IAAI,cAAc,KAAK,SAAS,EAAE,CAAC;QACjC,OAAO,CAAC,GAAG,CAAC,MAAM,cAAc,CAAC,KAAK,eAAe,cAAc,CAAC,GAAG,WAAW,cAAc,CAAC,OAAO,GAAG,CAAC,CAAC;IAC/G,CAAC;IAED,MAAM,UAAU,GAAG,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC;IAC1D,IAAI,UAAU,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC1B,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAChB,KAAK,MAAM,CAAC,IAAI,UAAU,EAAE,CAAC;YAC3B,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,KAAK,CAAC,SAAS,KAAK,CAAC,CAAC,MAAM,KAAK,sBAAsB,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;QAC7F,CAAC;IACH,CAAC;IAED,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAChB,IAAI,GAAG,CAAC,UAAU,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC9B,KAAK,MAAM,CAAC,IAAI,GAAG,CAAC,UAAU;YAAE,OAAO,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC,IAAI,MAAM,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC;IACtF,CAAC;IACD,0FAA0F;IAC1F,2FAA2F;IAC3F,6FAA6F;IAC7F,iCAAiC;IACjC,IAAI,GAAG,CAAC,oBAAoB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACxC,MAAM,KAAK,GAAG,GAAG,CAAC,oBAAoB,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACrE,OAAO,CAAC,GAAG,CACT,KAAK,GAAG,CAAC,oBAAoB,CAAC,MAAM,qEAAqE,KAAK,EAAE,CACjH,CAAC;IACJ,CAAC;IACD,OAAO,CAAC,GAAG,CAAC,YAAY,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC;AACzC,CAAC"}

package/dist/commands/doctor.d.ts

@@ -0,0 +1,20 @@
+import { type Advisory, type UncertaintyMarker } from '@spikedpunch/align-core';
+export interface DoctorOptions {
+    readonly json: boolean;
+}
+export interface DoctorJsonPayload {
+    readonly advisories: readonly Advisory[];
+    readonly uncertainty: {
+        readonly total: number;
+        readonly detail: readonly UncertaintyMarker[];
+    };
+}
+/**
+ * `align doctor` — read-only advisory survey (Stage 2; `--json` per-specifier uncertainty detail
+ * added Stage 3). Unlike `align check`, doctor never fails a build: it's a diagnostic tool for the
+ * humans/agents configuring align on a repo, not a gate. Exit code is always 0; every failure mode
+ * downgrades to an advisory instead of throwing, since a misconfigured repo is exactly the case
+ * doctor exists to help someone understand.
+ */
+export declare function runDoctor(rootDir: string, options?: DoctorOptions): Promise<number>;
+//# sourceMappingURL=doctor.d.ts.map

package/dist/commands/doctor.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"doctor.d.ts","sourceRoot":"","sources":["../../src/commands/doctor.ts"],"names":[],"mappings":"AAEA,OAAO,EAAyE,KAAK,QAAQ,EAAE,KAAK,iBAAiB,EAAE,MAAM,yBAAyB,CAAC;AAqBvJ,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC;CACxB;AAED,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,UAAU,EAAE,SAAS,QAAQ,EAAE,CAAC;IACzC,QAAQ,CAAC,WAAW,EAAE;QACpB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;QACvB,QAAQ,CAAC,MAAM,EAAE,SAAS,iBAAiB,EAAE,CAAC;KAC/C,CAAC;CACH;AA+HD;;;;;;GAMG;AACH,wBAAsB,SAAS,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,GAAE,aAA+B,GAAG,OAAO,CAAC,MAAM,CAAC,CAc1G"}

package/dist/commands/doctor.js

@@ -0,0 +1,173 @@
+import * as fs from 'node:fs';
+import * as path from 'node:path';
+import { buildUncertaintyAdvisories, findUngroundedComponents, toComponentName } from '@spikedpunch/align-core';
+import { TypeScriptPlugin, UNMAPPED_COMPONENT, findDeadAliases, findOrphanedPackages } from '@spikedpunch/align-plugin-typescript';
+import { loadConfig } from '../config.js';
+import { ALIGN_VERSION } from '../telemetry/index.js';
+import { parseSkillVersionMarker } from '../skill/version-stamp.js';
+const UNMAPPED_EXAMPLES = 5;
+/** Stage 2 live-probe DX finding, carried into Stage 3: the agent had to script against the
+ * scanner API to get per-specifier uncertainty detail — `buildUncertaintyAdvisories` only
+ * produces grouped counts. `--json` exposes the raw markers directly, capped so a repo with
+ * thousands of uncertain specifiers can't blow up the payload (ADR 007 discipline extended to
+ * doctor's own output). */
+const UNCERTAINTY_DETAIL_CAP = 50;
+/** Stage 5 polish, evidence: `RULESET_REPORT.md` (kluster ruleset exercise) logged 47
+ * orphaned-package advisories and 34 dead-alias hits as DX friction in the human-readable
+ * `align doctor` output — a wall of near-identical lines with no way to see "how many kinds of
+ * problem do I have" at a glance. Human output now shows the first N per kind + a "and M more"
+ * pointer to `--json`, which stays complete (uncapped except for the pre-existing per-specifier
+ * uncertainty detail cap above). */
+const DOCTOR_HUMAN_DISPLAY_CAP = 10;
+/**
+ * `align skill --install` writes a point-in-time snapshot (`install.ts`/`version-stamp.ts`) that
+ * goes stale as align evolves — a SKILL.md installed before some feature shipped won't mention it,
+ * with nothing telling the human or agent the snapshot is behind. `doctor` is the natural
+ * read-only advisory surface for that: no advisory if there is no installed file (nothing to be
+ * stale about), a distinct message for a pre-stamping install (no marker at all) versus a stamped
+ * install that's simply behind the running binary's own `ALIGN_VERSION`. Deliberately simple
+ * string inequality, not semver comparison — any mismatch, including a missing marker, means
+ * "refresh"; there's no notion of a snapshot being "close enough".
+ */
+function buildStaleSkillAdvisory(rootDir) {
+    const filePath = path.join(rootDir, '.claude', 'skills', 'align', 'SKILL.md');
+    if (!fs.existsSync(filePath))
+        return undefined;
+    const content = fs.readFileSync(filePath, 'utf8');
+    const installedVersion = parseSkillVersionMarker(content);
+    if (installedVersion === undefined) {
+        return {
+            kind: 'stale-skill',
+            message: 'installed align skill snapshot predates version stamping — run `align skill --install` to refresh',
+        };
+    }
+    if (installedVersion !== ALIGN_VERSION) {
+        return {
+            kind: 'stale-skill',
+            message: `installed align skill snapshot is v${installedVersion} (current: v${ALIGN_VERSION}) — run \`align skill --install\` to refresh`,
+        };
+    }
+    return undefined;
+}
+async function collectDoctorReport(rootDir) {
+    const advisories = [];
+    let uncertain = [];
+    const staleSkill = buildStaleSkillAdvisory(rootDir);
+    if (staleSkill !== undefined)
+        advisories.push(staleSkill);
+    const loaded = await loadConfig(rootDir).catch((err) => {
+        advisories.push({
+            kind: 'config-error',
+            message: `Could not load align.config.ts: ${err instanceof Error ? err.message : String(err)}`,
+        });
+        return undefined;
+    });
+    const excludes = loaded?.excludes ?? [];
+    if (loaded !== undefined) {
+        const { ruleset, excludes: loadedExcludes } = loaded;
+        const plugin = new TypeScriptPlugin();
+        const graph = await plugin.scanner.scan({ rootDir, components: ruleset.components, excludes: loadedExcludes }).catch((err) => {
+            advisories.push({ kind: 'scan-error', message: err instanceof Error ? err.message : String(err) });
+            return undefined;
+        });
+        if (graph !== undefined) {
+            uncertain = graph.uncertain;
+            advisories.push(...buildUncertaintyAdvisories(graph.uncertain));
+            const unmapped = graph.nodes.filter((n) => n.component === UNMAPPED_COMPONENT);
+            if (unmapped.length > 0) {
+                const examples = unmapped.slice(0, UNMAPPED_EXAMPLES).map((n) => n.file);
+                const more = unmapped.length > UNMAPPED_EXAMPLES ? `, +${unmapped.length - UNMAPPED_EXAMPLES} more` : '';
+                advisories.push({
+                    kind: 'unmapped-files',
+                    message: `${unmapped.length} file(s) matched no component selector: ${examples.join(', ')}${more}.`,
+                });
+            }
+            const seenComponents = new Set(graph.nodes.map((n) => n.component));
+            // R4 (greenfield mode, IMPLEMENTATION_PLAN.md Design Reserve): ungrounded components (empty
+            // policy `'allow'`/`'until-populated'`, currently zero classified files) get a
+            // policy-specific suggestion — `doctor` is the proactive advisory surface (R1's `align
+            // check` line is the always-visible one; this is the "what do I do about it" detail).
+            for (const ungrounded of findUngroundedComponents(ruleset.components, seenComponents)) {
+                const suggestion = ungrounded.policy === 'until-populated'
+                    ? 'expected for architecture-first authoring — rules load now and enforce automatically once files land under this selector; if that never happens, double-check the glob.'
+                    : "permanently tolerated (empty: 'allow') — if this component was meant to be populated by now, check the selector, or switch to empty: 'until-populated' so doctor flags the transition.";
+                advisories.push({
+                    kind: 'ungrounded-component',
+                    message: `Component '${ungrounded.name}' (selector: ${ungrounded.selector}, empty: '${ungrounded.policy}') matched zero files — ${suggestion}`,
+                });
+            }
+            // The auto-arm/populated half of R2: a `'until-populated'` component that now HAS files no
+            // longer needs the marker — the empty-check has already stopped firing for it (nothing to
+            // fix functionally), but the marker itself is stale documentation an author should clean up.
+            for (const name of Object.keys(ruleset.components)) {
+                const def = ruleset.components[toComponentName(name)];
+                if (def === undefined || def.empty !== 'until-populated')
+                    continue;
+                if (!seenComponents.has(toComponentName(name)))
+                    continue; // still empty — not this advisory
+                const fileCount = graph.nodes.filter((n) => n.component === toComponentName(name)).length;
+                advisories.push({
+                    kind: 'until-populated-now-populated',
+                    message: `Component '${name}' is now populated (${fileCount} file(s) classified) — remove its empty: 'until-populated' marker, it's no longer needed.`,
+                });
+            }
+        }
+    }
+    for (const alias of findDeadAliases(rootDir, excludes)) {
+        advisories.push({
+            kind: 'dead-alias',
+            message: `${alias.tsconfig}: alias '${alias.alias}' -> '${alias.target}' does not resolve to an existing path.`,
+        });
+    }
+    for (const pkg of findOrphanedPackages(rootDir, excludes)) {
+        advisories.push({
+            kind: 'workspace-orphaned-package',
+            message: `${pkg.dir} (package '${pkg.name}') is on disk but not covered by any pnpm-workspace.yaml glob.`,
+        });
+    }
+    return { advisories, uncertain };
+}
+/**
+ * `align doctor` — read-only advisory survey (Stage 2; `--json` per-specifier uncertainty detail
+ * added Stage 3). Unlike `align check`, doctor never fails a build: it's a diagnostic tool for the
+ * humans/agents configuring align on a repo, not a gate. Exit code is always 0; every failure mode
+ * downgrades to an advisory instead of throwing, since a misconfigured repo is exactly the case
+ * doctor exists to help someone understand.
+ */
+export async function runDoctor(rootDir, options = { json: false }) {
+    const { advisories, uncertain } = await collectDoctorReport(rootDir);
+    if (options.json) {
+        const payload = {
+            advisories,
+            uncertainty: { total: uncertain.length, detail: uncertain.slice(0, UNCERTAINTY_DETAIL_CAP) },
+        };
+        process.stdout.write(`${JSON.stringify(payload, null, 2)}\n`);
+        return 0;
+    }
+    printReport(advisories);
+    return 0; // advisory tool — never fails the build
+}
+function printReport(advisories) {
+    if (advisories.length === 0) {
+        console.log('align doctor: no advisories.');
+        return;
+    }
+    console.log(`align doctor: ${advisories.length} advisory(ies)\n`);
+    const byKind = new Map();
+    for (const a of advisories) {
+        const list = byKind.get(a.kind);
+        if (list === undefined)
+            byKind.set(a.kind, [a]);
+        else
+            list.push(a);
+    }
+    for (const [kind, list] of byKind) {
+        console.log(`  ${kind} (${list.length}):`);
+        for (const a of list.slice(0, DOCTOR_HUMAN_DISPLAY_CAP))
+            console.log(`    - ${a.message}`);
+        if (list.length > DOCTOR_HUMAN_DISPLAY_CAP) {
+            console.log(`    ... and ${list.length - DOCTOR_HUMAN_DISPLAY_CAP} more (use --json for all)`);
+        }
+    }
+}
+//# sourceMappingURL=doctor.js.map

package/dist/commands/doctor.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"doctor.js","sourceRoot":"","sources":["../../src/commands/doctor.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,MAAM,SAAS,CAAC;AAC9B,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAClC,OAAO,EAAE,0BAA0B,EAAE,wBAAwB,EAAE,eAAe,EAAyC,MAAM,yBAAyB,CAAC;AACvJ,OAAO,EAAE,gBAAgB,EAAE,kBAAkB,EAAE,eAAe,EAAE,oBAAoB,EAAE,MAAM,sCAAsC,CAAC;AACnI,OAAO,EAAE,UAAU,EAAE,MAAM,cAAc,CAAC;AAC1C,OAAO,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAC;AACtD,OAAO,EAAE,uBAAuB,EAAE,MAAM,2BAA2B,CAAC;AAEpE,MAAM,iBAAiB,GAAG,CAAC,CAAC;AAC5B;;;;2BAI2B;AAC3B,MAAM,sBAAsB,GAAG,EAAE,CAAC;AAClC;;;;;oCAKoC;AACpC,MAAM,wBAAwB,GAAG,EAAE,CAAC;AAmBpC;;;;;;;;;GASG;AACH,SAAS,uBAAuB,CAAC,OAAe;IAC9C,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,OAAO,EAAE,UAAU,CAAC,CAAC;IAC9E,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC;QAAE,OAAO,SAAS,CAAC;IAE/C,MAAM,OAAO,GAAG,EAAE,CAAC,YAAY,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;IAClD,MAAM,gBAAgB,GAAG,uBAAuB,CAAC,OAAO,CAAC,CAAC;IAE1D,IAAI,gBAAgB,KAAK,SAAS,EAAE,CAAC;QACnC,OAAO;YACL,IAAI,EAAE,aAAa;YACnB,OAAO,EAAE,mGAAmG;SAC7G,CAAC;IACJ,CAAC;IACD,IAAI,gBAAgB,KAAK,aAAa,EAAE,CAAC;QACvC,OAAO;YACL,IAAI,EAAE,aAAa;YACnB,OAAO,EAAE,sCAAsC,gBAAgB,eAAe,aAAa,8CAA8C;SAC1I,CAAC;IACJ,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,KAAK,UAAU,mBAAmB,CAAC,OAAe;IAChD,MAAM,UAAU,GAAe,EAAE,CAAC;IAClC,IAAI,SAAS,GAAiC,EAAE,CAAC;IAEjD,MAAM,UAAU,GAAG,uBAAuB,CAAC,OAAO,CAAC,CAAC;IACpD,IAAI,UAAU,KAAK,SAAS;QAAE,UAAU,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;IAE1D,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,OAAO,CAAC,CAAC,KAAK,CAAC,CAAC,GAAY,EAAE,EAAE;QAC9D,UAAU,CAAC,IAAI,CAAC;YACd,IAAI,EAAE,cAAc;YACpB,OAAO,EAAE,mCAAmC,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE;SAC/F,CAAC,CAAC;QACH,OAAO,SAAS,CAAC;IACnB,CAAC,CAAC,CAAC;IACH,MAAM,QAAQ,GAAG,MAAM,EAAE,QAAQ,IAAI,EAAE,CAAC;IAExC,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;QACzB,MAAM,EAAE,OAAO,EAAE,QAAQ,EAAE,cAAc,EAAE,GAAG,MAAM,CAAC;QACrD,MAAM,MAAM,GAAG,IAAI,gBAAgB,EAAE,CAAC;QACtC,MAAM,KAAK,GAAG,MAAM,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,UAAU,EAAE,OAAO,CAAC,UAAU,EAAE,QAAQ,EAAE,cAAc,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,GAAY,EAAE,EAAE;YACpI,UAAU,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,YAAY,EAAE,OAAO,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YACnG,OAAO,SAAS,CAAC;QACnB,CAAC,CAAC,CAAC;QAEH,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;YACxB,SAAS,GAAG,KAAK,CAAC,SAAS,CAAC;YAC5B,UAAU,CAAC,IAAI,CAAC,GAAG,0BAA0B,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC;YAEhE,MAAM,QAAQ,GAAG,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,KAAK,kBAAkB,CAAC,CAAC;YAC/E,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACxB,MAAM,QAAQ,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,iBAAiB,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;gBACzE,MAAM,IAAI,GAAG,QAAQ,CAAC,MAAM,GAAG,iBAAiB,CAAC,CAAC,CAAC,MAAM,QAAQ,CAAC,MAAM,GAAG,iBAAiB,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC;gBACzG,UAAU,CAAC,IAAI,CAAC;oBACd,IAAI,EAAE,gBAAgB;oBACtB,OAAO,EAAE,GAAG,QAAQ,CAAC,MAAM,2CAA2C,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,IAAI,GAAG;iBACpG,CAAC,CAAC;YACL,CAAC;YAED,MAAM,cAAc,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC;YAEpE,4FAA4F;YAC5F,+EAA+E;YAC/E,uFAAuF;YACvF,sFAAsF;YACtF,KAAK,MAAM,UAAU,IAAI,wBAAwB,CAAC,OAAO,CAAC,UAAU,EAAE,cAAc,CAAC,EAAE,CAAC;gBACtF,MAAM,UAAU,GACd,UAAU,CAAC,MAAM,KAAK,iBAAiB;oBACrC,CAAC,CAAC,yKAAyK;oBAC3K,CAAC,CAAC,wLAAwL,CAAC;gBAC/L,UAAU,CAAC,IAAI,CAAC;oBACd,IAAI,EAAE,sBAAsB;oBAC5B,OAAO,EAAE,cAAc,UAAU,CAAC,IAAI,gBAAgB,UAAU,CAAC,QAAQ,aAAa,UAAU,CAAC,MAAM,2BAA2B,UAAU,EAAE;iBAC/I,CAAC,CAAC;YACL,CAAC;YAED,2FAA2F;YAC3F,0FAA0F;YAC1F,6FAA6F;YAC7F,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,CAAC;gBACnD,MAAM,GAAG,GAAG,OAAO,CAAC,UAAU,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC,CAAC;gBACtD,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,CAAC,KAAK,KAAK,iBAAiB;oBAAE,SAAS;gBACnE,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC;oBAAE,SAAS,CAAC,kCAAkC;gBAC5F,MAAM,SAAS,GAAG,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,KAAK,eAAe,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC;gBAC1F,UAAU,CAAC,IAAI,CAAC;oBACd,IAAI,EAAE,+BAA+B;oBACrC,OAAO,EAAE,cAAc,IAAI,uBAAuB,SAAS,2FAA2F;iBACvJ,CAAC,CAAC;YACL,CAAC;QACH,CAAC;IACH,CAAC;IAED,KAAK,MAAM,KAAK,IAAI,eAAe,CAAC,OAAO,EAAE,QAAQ,CAAC,EAAE,CAAC;QACvD,UAAU,CAAC,IAAI,CAAC;YACd,IAAI,EAAE,YAAY;YAClB,OAAO,EAAE,GAAG,KAAK,CAAC,QAAQ,YAAY,KAAK,CAAC,KAAK,SAAS,KAAK,CAAC,MAAM,yCAAyC;SAChH,CAAC,CAAC;IACL,CAAC;IAED,KAAK,MAAM,GAAG,IAAI,oBAAoB,CAAC,OAAO,EAAE,QAAQ,CAAC,EAAE,CAAC;QAC1D,UAAU,CAAC,IAAI,CAAC;YACd,IAAI,EAAE,4BAA4B;YAClC,OAAO,EAAE,GAAG,GAAG,CAAC,GAAG,cAAc,GAAG,CAAC,IAAI,gEAAgE;SAC1G,CAAC,CAAC;IACL,CAAC;IAED,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,CAAC;AACnC,CAAC;AAED;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,SAAS,CAAC,OAAe,EAAE,UAAyB,EAAE,IAAI,EAAE,KAAK,EAAE;IACvF,MAAM,EAAE,UAAU,EAAE,SAAS,EAAE,GAAG,MAAM,mBAAmB,CAAC,OAAO,CAAC,CAAC;IAErE,IAAI,OAAO,CAAC,IAAI,EAAE,CAAC;QACjB,MAAM,OAAO,GAAsB;YACjC,UAAU;YACV,WAAW,EAAE,EAAE,KAAK,EAAE,SAAS,CAAC,MAAM,EAAE,MAAM,EAAE,SAAS,CAAC,KAAK,CAAC,CAAC,EAAE,sBAAsB,CAAC,EAAE;SAC7F,CAAC;QACF,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC;QAC9D,OAAO,CAAC,CAAC;IACX,CAAC;IAED,WAAW,CAAC,UAAU,CAAC,CAAC;IACxB,OAAO,CAAC,CAAC,CAAC,wCAAwC;AACpD,CAAC;AAED,SAAS,WAAW,CAAC,UAA+B;IAClD,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC5B,OAAO,CAAC,GAAG,CAAC,8BAA8B,CAAC,CAAC;QAC5C,OAAO;IACT,CAAC;IACD,OAAO,CAAC,GAAG,CAAC,iBAAiB,UAAU,CAAC,MAAM,kBAAkB,CAAC,CAAC;IAClE,MAAM,MAAM,GAAG,IAAI,GAAG,EAAsB,CAAC;IAC7C,KAAK,MAAM,CAAC,IAAI,UAAU,EAAE,CAAC;QAC3B,MAAM,IAAI,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;QAChC,IAAI,IAAI,KAAK,SAAS;YAAE,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;;YAC3C,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACpB,CAAC;IACD,KAAK,MAAM,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,MAAM,EAAE,CAAC;QAClC,OAAO,CAAC,GAAG,CAAC,KAAK,IAAI,KAAK,IAAI,CAAC,MAAM,IAAI,CAAC,CAAC;QAC3C,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,wBAAwB,CAAC;YAAE,OAAO,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC;QAC3F,IAAI,IAAI,CAAC,MAAM,GAAG,wBAAwB,EAAE,CAAC;YAC3C,OAAO,CAAC,GAAG,CAAC,eAAe,IAAI,CAAC,MAAM,GAAG,wBAAwB,4BAA4B,CAAC,CAAC;QACjG,CAAC;IACH,CAAC;AACH,CAAC"}

package/dist/commands/explain.d.ts

@@ -0,0 +1,3 @@
+import type { McpExplainRulePayload } from '@spikedpunch/align-core';
+export declare function buildExplainPayload(rootDir: string, ruleId: string): Promise<McpExplainRulePayload | undefined>;
+//# sourceMappingURL=explain.d.ts.map

package/dist/commands/explain.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"explain.d.ts","sourceRoot":"","sources":["../../src/commands/explain.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,qBAAqB,EAAoB,MAAM,yBAAyB,CAAC;AAOvF,wBAAsB,mBAAmB,CAAC,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,qBAAqB,GAAG,SAAS,CAAC,CAmCrH"}

package/dist/commands/explain.js

@@ -0,0 +1,54 @@
+import { buildViolationMermaid, evaluateRule, toComponentName, toRuleId } from '@spikedpunch/align-core';
+import { TypeScriptPlugin } from '@spikedpunch/align-plugin-typescript';
+import { loadConfig } from '../config.js';
+const EXAMPLES_PER_COMPONENT = 3;
+export async function buildExplainPayload(rootDir, ruleId) {
+    const { ruleset, excludes, hostRules } = await loadConfig(rootDir);
+    const rule = ruleset.rules.find((r) => r.id === ruleId);
+    if (rule === undefined)
+        return undefined;
+    const plugin = new TypeScriptPlugin();
+    const graph = await plugin.scanner.scan({ rootDir, components: ruleset.components, excludes });
+    const filesByComponent = new Map();
+    for (const node of graph.nodes) {
+        const list = filesByComponent.get(node.component) ?? [];
+        if (list.length < EXAMPLES_PER_COMPONENT)
+            list.push(node.file);
+        filesByComponent.set(node.component, list);
+    }
+    const componentNames = collectComponentNames(rule);
+    const components = componentNames.map((name) => ({
+        name: toComponentName(name),
+        exampleFiles: filesByComponent.get(name) ?? [],
+    }));
+    // Mermaid is explain-only (ADR 007: pull-on-demand, never in align_check/align_violations).
+    // Diagram ONE representative violation instance, if the rule currently has any — a rule with
+    // no live violations has no "offending path" to visualize.
+    const violations = evaluateRule(rule, graph, ruleset.components, hostRules);
+    const firstViolation = violations[0];
+    const mermaid = firstViolation === undefined ? undefined : buildViolationMermaid(firstViolation);
+    return {
+        ruleId: toRuleId(rule.id),
+        kind: rule.kind,
+        ...(rule.provenance.because === undefined ? {} : { because: rule.provenance.because }),
+        components,
+        ...(mermaid === undefined ? {} : { mermaid }),
+    };
+}
+function collectComponentNames(rule) {
+    if (rule.kind === 'arch.no-dependency')
+        return [String(rule['from']), String(rule['to'])];
+    if (rule.kind === 'arch.no-cycles') {
+        const scope = rule['scope'];
+        return scope === 'repo' ? [] : [String(scope)];
+    }
+    if (rule.kind === 'arch.layers') {
+        const layers = rule['layers'];
+        return [...new Set(layers.flatMap((l) => [l.layer, ...l.canDependOn]))];
+    }
+    if (rule.kind === 'arch.metric')
+        return [String(rule['target'])];
+    // `security.manifest.*` (ADR 013): no `ComponentRef` — falls through to the default `[]`.
+    return [];
+}
+//# sourceMappingURL=explain.js.map

package/dist/commands/explain.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"explain.js","sourceRoot":"","sources":["../../src/commands/explain.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,qBAAqB,EAAE,YAAY,EAAE,eAAe,EAAE,QAAQ,EAAE,MAAM,yBAAyB,CAAC;AACzG,OAAO,EAAE,gBAAgB,EAAE,MAAM,sCAAsC,CAAC;AACxE,OAAO,EAAE,UAAU,EAAE,MAAM,cAAc,CAAC;AAE1C,MAAM,sBAAsB,GAAG,CAAC,CAAC;AAEjC,MAAM,CAAC,KAAK,UAAU,mBAAmB,CAAC,OAAe,EAAE,MAAc;IACvE,MAAM,EAAE,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,GAAG,MAAM,UAAU,CAAC,OAAO,CAAC,CAAC;IACnE,MAAM,IAAI,GAAG,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,MAAM,CAAC,CAAC;IACxD,IAAI,IAAI,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IAEzC,MAAM,MAAM,GAAG,IAAI,gBAAgB,EAAE,CAAC;IACtC,MAAM,KAAK,GAAG,MAAM,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,UAAU,EAAE,OAAO,CAAC,UAAU,EAAE,QAAQ,EAAE,CAAC,CAAC;IAE/F,MAAM,gBAAgB,GAAG,IAAI,GAAG,EAA8B,CAAC;IAC/D,KAAK,MAAM,IAAI,IAAI,KAAK,CAAC,KAAK,EAAE,CAAC;QAC/B,MAAM,IAAI,GAAG,gBAAgB,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,CAAC;QACxD,IAAI,IAAI,CAAC,MAAM,GAAG,sBAAsB;YAAE,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC/D,gBAAgB,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;IAC7C,CAAC;IAED,MAAM,cAAc,GAAG,qBAAqB,CAAC,IAAI,CAAC,CAAC;IACnD,MAAM,UAAU,GAAG,cAAc,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;QAC/C,IAAI,EAAE,eAAe,CAAC,IAAI,CAAC;QAC3B,YAAY,EAAE,gBAAgB,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE;KAC/C,CAAC,CAAC,CAAC;IAEJ,4FAA4F;IAC5F,6FAA6F;IAC7F,2DAA2D;IAC3D,MAAM,UAAU,GAAG,YAAY,CAAC,IAAI,EAAE,KAAK,EAAE,OAAO,CAAC,UAAU,EAAE,SAAS,CAAC,CAAC;IAC5E,MAAM,cAAc,GAAG,UAAU,CAAC,CAAC,CAAC,CAAC;IACrC,MAAM,OAAO,GAAG,cAAc,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,qBAAqB,CAAC,cAAc,CAAC,CAAC;IAEjG,OAAO;QACL,MAAM,EAAE,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QACzB,IAAI,EAAE,IAAI,CAAC,IAAI;QACf,GAAG,CAAC,IAAI,CAAC,UAAU,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,IAAI,CAAC,UAAU,CAAC,OAAO,EAAE,CAAC;QACtF,UAAU;QACV,GAAG,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC;KAC9C,CAAC;AACJ,CAAC;AAED,SAAS,qBAAqB,CAAC,IAA4C;IACzE,IAAI,IAAI,CAAC,IAAI,KAAK,oBAAoB;QAAE,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,EAAE,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAC1F,IAAI,IAAI,CAAC,IAAI,KAAK,gBAAgB,EAAE,CAAC;QACnC,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,CAAC;QAC5B,OAAO,KAAK,KAAK,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;IACjD,CAAC;IACD,IAAI,IAAI,CAAC,IAAI,KAAK,aAAa,EAAE,CAAC;QAChC,MAAM,MAAM,GAAG,IAAI,CAAC,QAAQ,CAAiE,CAAC;QAC9F,OAAO,CAAC,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,CAAC;IAC1E,CAAC;IACD,IAAI,IAAI,CAAC,IAAI,KAAK,aAAa;QAAE,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;IACjE,0FAA0F;IAC1F,OAAO,EAAE,CAAC;AACZ,CAAC"}

package/dist/commands/export-ir.d.ts

@@ -0,0 +1,21 @@
+export interface ExportIrOptions {
+    /** Overrides the default `.align/ruleset-ir.json` output location (absolute or repo-root-relative). */
+    readonly out?: string;
+}
+/**
+ * `align export-ir` (ADR 014) — runs ONCE in a trusted context (imports align.config.ts exactly
+ * like `align check` already does) and writes the resulting EFFECTIVE ruleset — hand-authored
+ * rules plus any `.align/generated-rules.json` rules already merged in, same `loadConfig` path
+ * `align check` uses — as portable JSON. `align check --untrusted` reads this file and never
+ * imports align.config.ts at all. Re-run this command (in a trusted checkout, e.g. CI before an
+ * agent gets an untrusted clone, or as a pre-commit/release step) whenever align.config.ts or the
+ * doc it's built from changes — the artifact is a snapshot, not a live view.
+ *
+ * Deliberately does not export `hostRules` — predicate functions cannot survive a JSON boundary
+ * (ADR 002 amendment) and are unconditionally unavailable under --untrusted regardless
+ * (`assertNoCustomHostRules`). A ruleset containing `custom.host` rules exports successfully (this
+ * command has no opinion on trusted-mode rule content) but prints an advisory naming them, since
+ * `align check --untrusted` against this exact file will refuse to run until they're removed.
+ */
+export declare function runExportIr(rootDir: string, options?: ExportIrOptions): Promise<number>;
+//# sourceMappingURL=export-ir.d.ts.map

package/dist/commands/export-ir.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"export-ir.d.ts","sourceRoot":"","sources":["../../src/commands/export-ir.ts"],"names":[],"mappings":"AAIA,MAAM,WAAW,eAAe;IAC9B,uGAAuG;IACvG,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC;CACvB;AAED;;;;;;;;;;;;;;GAcG;AACH,wBAAsB,WAAW,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,GAAE,eAAoB,GAAG,OAAO,CAAC,MAAM,CAAC,CAkBjG"}

package/dist/commands/export-ir.js

@@ -0,0 +1,33 @@
+import { buildExportedRuleset } from '@spikedpunch/align-core';
+import { loadConfig } from '../config.js';
+import { writeRulesetIr } from '../align-dir.js';
+/**
+ * `align export-ir` (ADR 014) — runs ONCE in a trusted context (imports align.config.ts exactly
+ * like `align check` already does) and writes the resulting EFFECTIVE ruleset — hand-authored
+ * rules plus any `.align/generated-rules.json` rules already merged in, same `loadConfig` path
+ * `align check` uses — as portable JSON. `align check --untrusted` reads this file and never
+ * imports align.config.ts at all. Re-run this command (in a trusted checkout, e.g. CI before an
+ * agent gets an untrusted clone, or as a pre-commit/release step) whenever align.config.ts or the
+ * doc it's built from changes — the artifact is a snapshot, not a live view.
+ *
+ * Deliberately does not export `hostRules` — predicate functions cannot survive a JSON boundary
+ * (ADR 002 amendment) and are unconditionally unavailable under --untrusted regardless
+ * (`assertNoCustomHostRules`). A ruleset containing `custom.host` rules exports successfully (this
+ * command has no opinion on trusted-mode rule content) but prints an advisory naming them, since
+ * `align check --untrusted` against this exact file will refuse to run until they're removed.
+ */
+export async function runExportIr(rootDir, options = {}) {
+    const { ruleset, excludes } = await loadConfig(rootDir);
+    const exported = buildExportedRuleset(ruleset, excludes);
+    const writtenTo = writeRulesetIr(rootDir, exported, options.out);
+    const componentCount = Object.keys(exported.ruleset.components).length;
+    console.log(`align export-ir: wrote ${exported.ruleset.rules.length} rule(s), ${componentCount} component(s) to ${writtenTo}`);
+    const hostRuleIds = exported.ruleset.rules.filter((r) => r.kind === 'custom.host').map((r) => r.id);
+    if (hostRuleIds.length > 0) {
+        console.log(`  advisory: ${hostRuleIds.length} custom.host rule(s) exported (${hostRuleIds.join(', ')}) — ` +
+            `\`align check --untrusted\` will refuse to run against this file until they are removed ` +
+            `(a host predicate is code, and --untrusted never has a predicate registry to consult).`);
+    }
+    return 0;
+}
+//# sourceMappingURL=export-ir.js.map

package/dist/commands/export-ir.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"export-ir.js","sourceRoot":"","sources":["../../src/commands/export-ir.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,oBAAoB,EAAE,MAAM,yBAAyB,CAAC;AAC/D,OAAO,EAAE,UAAU,EAAE,MAAM,cAAc,CAAC;AAC1C,OAAO,EAAE,cAAc,EAAE,MAAM,iBAAiB,CAAC;AAOjD;;;;;;;;;;;;;;GAcG;AACH,MAAM,CAAC,KAAK,UAAU,WAAW,CAAC,OAAe,EAAE,UAA2B,EAAE;IAC9E,MAAM,EAAE,OAAO,EAAE,QAAQ,EAAE,GAAG,MAAM,UAAU,CAAC,OAAO,CAAC,CAAC;IACxD,MAAM,QAAQ,GAAG,oBAAoB,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;IACzD,MAAM,SAAS,GAAG,cAAc,CAAC,OAAO,EAAE,QAAQ,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC;IAEjE,MAAM,cAAc,GAAG,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,MAAM,CAAC;IACvE,OAAO,CAAC,GAAG,CAAC,0BAA0B,QAAQ,CAAC,OAAO,CAAC,KAAK,CAAC,MAAM,aAAa,cAAc,oBAAoB,SAAS,EAAE,CAAC,CAAC;IAE/H,MAAM,WAAW,GAAG,QAAQ,CAAC,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,aAAa,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;IACpG,IAAI,WAAW,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC3B,OAAO,CAAC,GAAG,CACT,eAAe,WAAW,CAAC,MAAM,kCAAkC,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM;YAC7F,0FAA0F;YAC1F,wFAAwF,CAC3F,CAAC;IACJ,CAAC;IAED,OAAO,CAAC,CAAC;AACX,CAAC"}

package/dist/commands/init.d.ts

@@ -0,0 +1,13 @@
+export interface InitOptions {
+    readonly acceptExisting: boolean;
+    readonly nonInteractive?: boolean;
+    /** R4 (greenfield mode, IMPLEMENTATION_PLAN.md Design Reserve): force every detected component
+     * to `empty: 'until-populated'` regardless of today's file count — for a repo that's
+     * architecture-first from commit zero (components declared, zero files under any of them yet).
+     * Without this flag, `runInit` still auto-detects per-component zero-file matches and marks
+     * only those — this flag is for the "every component is empty right now" case auto-detection
+     * alone already covers, made explicit for a human who wants to say so up front. */
+    readonly greenfield?: boolean;
+}
+export declare function runInit(rootDir: string, options: InitOptions): Promise<number>;
+//# sourceMappingURL=init.d.ts.map

package/dist/commands/init.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"init.d.ts","sourceRoot":"","sources":["../../src/commands/init.ts"],"names":[],"mappings":"AAgBA,MAAM,WAAW,WAAW;IAC1B,QAAQ,CAAC,cAAc,EAAE,OAAO,CAAC;IACjC,QAAQ,CAAC,cAAc,CAAC,EAAE,OAAO,CAAC;IAClC;;;;;uFAKmF;IACnF,QAAQ,CAAC,UAAU,CAAC,EAAE,OAAO,CAAC;CAC/B;AAED,wBAAsB,OAAO,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,WAAW,GAAG,OAAO,CAAC,MAAM,CAAC,CAmGpF"}