@wrongstack/techstack 0.289.0

package/dist/discovery/index.d.ts

@@ -0,0 +1,58 @@
+/**
+ * TechStack — Discovery wrapper.
+ *
+ * Thin wrapper around the existing `detectLanguageWorkspaces()` from
+ * `@wrongstack/tools` that converts its output into TechStack Workspace[]
+ * objects. This is the single entry point for workspace discovery —
+ * all downstream code calls this, never the raw detector directly.
+ *
+ * @see docs/specs/techstack-sdd.md §3.2, §4.1
+ */
+import type { EcosystemId, Workspace, Coverage } from '../types.js';
+/**
+ * Raw workspace shape returned by detectLanguageWorkspaces().
+ * This mirrors the existing interface in packages/tools/src/languages/detect.ts
+ * and is intentionally minimal — the real detector returns more fields.
+ */
+export interface RawWorkspace {
+    readonly language: string;
+    readonly root: string;
+    readonly packageManager?: string | undefined;
+    readonly manifests?: readonly string[] | undefined;
+    readonly lockfiles?: readonly string[] | undefined;
+    readonly confidence?: number | undefined;
+    readonly supportedOperations?: readonly string[] | undefined;
+}
+/**
+ * Discover all workspaces in a target project root.
+ *
+ * Delegates to detectLanguageWorkspaces() and maps each result to a
+ * TechStack Workspace, normalizing the ecosystem identifier, computing
+ * coverage, and attaching evidence.
+ *
+ * The caller (the inventory engine) is responsible for:
+ * - Calling this with the *target* project root (never WrongStack's own root).
+ * - Threading the AbortSignal through.
+ */
+export declare function discoverWorkspaces(_projectRoot: string, _signal?: AbortSignal): Promise<readonly Workspace[]>;
+/**
+ * Map a raw language string to our EcosystemId.
+ * Falls back to the closest match or 'unknown' (not in EcosystemId —
+ * the caller filters those out and marks them as unsupported coverage).
+ */
+export declare function mapEcosystem(language: string): EcosystemId | undefined;
+/**
+ * Derive coverage from the raw workspace.
+ * If the ecosystem is unsupported or confidence is very low, coverage is partial/unsupported.
+ */
+export declare function deriveCoverage(ecosystem: EcosystemId | undefined, confidence: number): Coverage;
+/**
+ * Generate a stable id for a workspace.
+ */
+export declare function workspaceId(relativeRoot: string, ecosystem: string): string;
+/**
+ * Compute a fingerprint for a set of manifest+lockfile contents.
+ * Used for snapshot deduplication — if nothing changed, no need to re-analyze.
+ */
+export declare function computeFingerprint(fileContents: readonly string[]): string;
+//# sourceMappingURL=index.d.ts.map

package/dist/discovery/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/discovery/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAGH,OAAO,KAAK,EAAE,WAAW,EAAE,SAAS,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAC;AAEpE;;;;GAIG;AACH,MAAM,WAAW,YAAY;IAC3B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC7C,QAAQ,CAAC,SAAS,CAAC,EAAE,SAAS,MAAM,EAAE,GAAG,SAAS,CAAC;IACnD,QAAQ,CAAC,SAAS,CAAC,EAAE,SAAS,MAAM,EAAE,GAAG,SAAS,CAAC;IACnD,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACzC,QAAQ,CAAC,mBAAmB,CAAC,EAAE,SAAS,MAAM,EAAE,GAAG,SAAS,CAAC;CAC9D;AAED;;;;;;;;;;GAUG;AACH,wBAAsB,kBAAkB,CACtC,YAAY,EAAE,MAAM,EACpB,OAAO,CAAC,EAAE,WAAW,GACpB,OAAO,CAAC,SAAS,SAAS,EAAE,CAAC,CAQ/B;AAED;;;;GAIG;AACH,wBAAgB,YAAY,CAAC,QAAQ,EAAE,MAAM,GAAG,WAAW,GAAG,SAAS,CA4BtE;AAED;;;GAGG;AACH,wBAAgB,cAAc,CAAC,SAAS,EAAE,WAAW,GAAG,SAAS,EAAE,UAAU,EAAE,MAAM,GAAG,QAAQ,CAK/F;AAED;;GAEG;AACH,wBAAgB,WAAW,CAAC,YAAY,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,MAAM,CAM3E;AAED;;;GAGG;AACH,wBAAgB,kBAAkB,CAAC,YAAY,EAAE,SAAS,MAAM,EAAE,GAAG,MAAM,CAO1E"}

package/dist/discovery/workspace.d.ts

@@ -0,0 +1,49 @@
+/**
+ * TechStack — Workspace discovery wrapper.
+ *
+ * Wraps `detectLanguageWorkspaces()` from `@wrongstack/tools/languages` and
+ * maps each `DetectedWorkspace` into a TechStack `Workspace` with:
+ * - `EcosystemId` (TechStack's package-manager classification) instead of
+ *   the tools-package `LanguageProfileId` (which is language-shaped, not
+ *   package-manager-shaped — e.g. both `typescript` and `javascript` map to
+ *   `npm`).
+ * - `relativeRoot` (project-relative, portable across machines).
+ * - `lockfiles` extracted from the detected evidence (manifest/config/lockfile
+ *   kinds), independent of which evidence manifests were used.
+ * - `coverage` classified against the SDD §6 ecosystem support matrix
+ *   (Tier A → `full`, Tier B → `partial`, Tier C/unsupported → `unsupported`).
+ *
+ * Languages with no `EcosystemId` mapping (`deno`, `shell`) are dropped from
+ * the result — they cannot be inventoried by the TechStack pipeline.
+ *
+ * @see docs/specs/techstack-sdd.md §3.2, §6
+ */
+import type { DetectLanguageOptions, DetectedWorkspace } from '@wrongstack/tools/languages';
+import type { Coverage, EcosystemId, Workspace } from '../types.js';
+/**
+ * Map a single `DetectedWorkspace` to a TechStack `Workspace`.
+ * Returns `undefined` when the language has no TechStack ecosystem mapping.
+ */
+export declare function mapDetectedWorkspace(detected: DetectedWorkspace, projectRoot: string): Workspace | undefined;
+/**
+ * Discover all TechStack workspaces under `projectRoot` by delegating to
+ * `detectLanguageWorkspaces` and mapping each detected workspace.
+ *
+ * Workspaces whose language does not map to a TechStack ecosystem are
+ * silently dropped (e.g. `deno`, `shell`) — they cannot be inventoried and
+ * would only inflate coverage counts with `unsupported` entries that add no
+ * value at the inventory-engine boundary.
+ *
+ * Test-fixture directories (`fixtures`, `testdata`, …) are skipped so fake
+ * fixture manifests never enter the inventory; the project root itself is
+ * never skipped, so scanning a fixture directly (as tests do) still works.
+ *
+ * Results are sorted by `(ecosystem, relativeRoot, id)` for stable display.
+ */
+export declare function discoverWorkspaces(projectRoot: string, options?: Omit<DetectLanguageOptions, 'projectRoot'>): Promise<Workspace[]>;
+/**
+ * Coverage for a workspace's ecosystem — the per-workspace view of the
+ * SDD §6 tier matrix.
+ */
+export declare function coverageForEcosystem(ecosystem: EcosystemId): Coverage;
+//# sourceMappingURL=workspace.d.ts.map

package/dist/discovery/workspace.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"workspace.d.ts","sourceRoot":"","sources":["../../src/discovery/workspace.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAGH,OAAO,KAAK,EACV,qBAAqB,EACrB,iBAAiB,EAGlB,MAAM,6BAA6B,CAAC;AACrC,OAAO,KAAK,EAAE,QAAQ,EAAE,WAAW,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AAsFpE;;;GAGG;AACH,wBAAgB,oBAAoB,CAClC,QAAQ,EAAE,iBAAiB,EAC3B,WAAW,EAAE,MAAM,GAClB,SAAS,GAAG,SAAS,CAoBvB;AAkBD;;;;;;;;;;;;;;GAcG;AACH,wBAAsB,kBAAkB,CACtC,WAAW,EAAE,MAAM,EACnB,OAAO,CAAC,EAAE,IAAI,CAAC,qBAAqB,EAAE,aAAa,CAAC,GACnD,OAAO,CAAC,SAAS,EAAE,CAAC,CAmBtB;AAED;;;GAGG;AACH,wBAAgB,oBAAoB,CAAC,SAAS,EAAE,WAAW,GAAG,QAAQ,CAErE"}

package/dist/index.d.ts

@@ -0,0 +1,49 @@
+/**
+ * TechStack — public package barrel.
+ *
+ * Re-exports the foundation types, the ecosystem adapter contract, the PURL
+ * utilities, and the discovery wrapper. Inventory/enrichment/audit engines,
+ * registry clients, advisory clients, the policy classifier, the SQLite
+ * store, the report generator, and the idle-delivery coordinator are
+ * scheduled for later rollout phases per docs/specs/techstack-sdd.md §9.
+ *
+ * @see docs/specs/techstack-sdd.md
+ */
+export type { Coverage, DependencyObservation, DependencyScope, DependencyStatus, DeliveryOutbox, DeliveryStatus, EcosystemId, Evidence, Finding, Snapshot, SourceType, TechStackJob, TechStackJobKind, TechStackJobProgress, TechStackJobStatus, Workspace, } from './types.js';
+export type { AdvisoryEvidence, EcosystemAdapter, AuditOptions, InventoryOptions, RegistryEvidence, } from './adapters/interface.js';
+export { buildPurl, constructPurl, ecosystemForPurlType, parsePurl, parsePurlEcosystem, purlTypeForEcosystem, type ParsedEcosystemPurl, type PurlParts, } from './registry/purl.js';
+export { coverageForEcosystem, discoverWorkspaces, mapDetectedWorkspace, } from './discovery/workspace.js';
+export { NpmAdapter, npmAdapter } from './adapters/npm.js';
+export { PythonAdapter, pythonAdapter } from './adapters/python.js';
+export { RustAdapter, rustAdapter } from './adapters/rust.js';
+export { GoAdapter, goAdapter } from './adapters/go.js';
+export { DotNetAdapter, dotNetAdapter } from './adapters/dotnet.js';
+export { PhpAdapter, phpAdapter } from './adapters/php.js';
+export { DartAdapter, dartAdapter } from './adapters/dart.js';
+export { MavenAdapter, mavenAdapter } from './adapters/maven.js';
+export { RubyAdapter, rubyAdapter } from './adapters/ruby.js';
+export { ElixirAdapter, elixirAdapter } from './adapters/elixir.js';
+export { CppAdapter, cppAdapter } from './adapters/cpp.js';
+export { diffSnapshots } from './snapshot-diff.js';
+export type { SnapshotDiff } from './snapshot-diff.js';
+export { toSpdx, toCycloneDX } from './sbom.js';
+export type { CycloneDXBom, SpdxDocument } from './sbom.js';
+export { generateUpgradePlan, renderPlanMarkdown } from './remediation.js';
+export type { UpgradePlan, UpgradePlanItem } from './remediation.js';
+export { clearRegistryCache, lookupRegistry, lookupRegistryBatch, supportedRegistryEcosystems, } from './registry/client.js';
+export type { RegistryEntry } from './registry/client.js';
+export { queryOsvBatch, queryOsvSingle } from './advisory/osv.js';
+export type { OsvAdvisory, OsvBatchResult } from './advisory/osv.js';
+export { isNativeAuditAvailable, runNativeAudit, runNpmAudit, } from './advisory/native-audit.js';
+export type { NativeAdvisory, NativeAuditResult } from './advisory/native-audit.js';
+export { classifyStatus, compareVersions, failedLookupStatus, privateOrUnresolvedStatus, } from './policy/status.js';
+export type { AdvisoryStatusData, RegistryStatusData } from './policy/status.js';
+export { TechStackEngine } from './service.js';
+export type { AnalyzeOptions, EnrichOptions } from './service.js';
+export { clusterCandidates, createProviderLlm, createResearcher, createToolSearch, parseResearchJson, triageCandidates, DEFAULT_TRIAGE_LIMIT, } from './research/index.js';
+export type { CreateResearcherOptions, LlmAccessor, ResearchCluster, ResearchLlm, ResearchLlmRequest, ResearchOptions, ResearchSearch, ResearchSearchResult, SearchToolOptions, TechStackResearcher, TriageCandidate, TriageOptions, } from './research/index.js';
+export { TechStackStore } from './store/sqlite.js';
+export { applySchema, DDL } from './store/schema.js';
+export { attemptDelivery, drainPendingDeliveries } from './delivery/coordinator.js';
+export type { DeliveryCoordinatorOptions, DeliveryResult } from './delivery/coordinator.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAGH,YAAY,EACV,QAAQ,EACR,qBAAqB,EACrB,eAAe,EACf,gBAAgB,EAChB,cAAc,EACd,cAAc,EACd,WAAW,EACX,QAAQ,EACR,OAAO,EACP,QAAQ,EACR,UAAU,EACV,YAAY,EACZ,gBAAgB,EAChB,oBAAoB,EACpB,kBAAkB,EAClB,SAAS,GACV,MAAM,YAAY,CAAC;AAGpB,YAAY,EACV,gBAAgB,EAChB,gBAAgB,EAChB,YAAY,EACZ,gBAAgB,EAChB,gBAAgB,GACjB,MAAM,yBAAyB,CAAC;AAGjC,OAAO,EACL,SAAS,EACT,aAAa,EACb,oBAAoB,EACpB,SAAS,EACT,kBAAkB,EAClB,oBAAoB,EACpB,KAAK,mBAAmB,EACxB,KAAK,SAAS,GACf,MAAM,oBAAoB,CAAC;AAG5B,OAAO,EACL,oBAAoB,EACpB,kBAAkB,EAClB,oBAAoB,GACrB,MAAM,0BAA0B,CAAC;AAGlC,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC;AAC3D,OAAO,EAAE,aAAa,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AACpE,OAAO,EAAE,WAAW,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AAC9D,OAAO,EAAE,SAAS,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AACxD,OAAO,EAAE,aAAa,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AACpE,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC;AAC3D,OAAO,EAAE,WAAW,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AAG9D,OAAO,EAAE,YAAY,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AACjE,OAAO,EAAE,WAAW,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AAC9D,OAAO,EAAE,aAAa,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AAGpE,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC;AAG3D,OAAO,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AACnD,YAAY,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAGvD,OAAO,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,WAAW,CAAC;AAChD,YAAY,EAAE,YAAY,EAAE,YAAY,EAAE,MAAM,WAAW,CAAC;AAG5D,OAAO,EAAE,mBAAmB,EAAE,kBAAkB,EAAE,MAAM,kBAAkB,CAAC;AAC3E,YAAY,EAAE,WAAW,EAAE,eAAe,EAAE,MAAM,kBAAkB,CAAC;AAGrE,OAAO,EACL,kBAAkB,EAClB,cAAc,EACd,mBAAmB,EACnB,2BAA2B,GAC5B,MAAM,sBAAsB,CAAC;AAC9B,YAAY,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AAG1D,OAAO,EAAE,aAAa,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAC;AAClE,YAAY,EAAE,WAAW,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAC;AAGrE,OAAO,EACL,sBAAsB,EACtB,cAAc,EACd,WAAW,GACZ,MAAM,4BAA4B,CAAC;AACpC,YAAY,EAAE,cAAc,EAAE,iBAAiB,EAAE,MAAM,4BAA4B,CAAC;AAGpF,OAAO,EACL,cAAc,EACd,eAAe,EACf,kBAAkB,EAClB,yBAAyB,GAC1B,MAAM,oBAAoB,CAAC;AAC5B,YAAY,EAAE,kBAAkB,EAAE,kBAAkB,EAAE,MAAM,oBAAoB,CAAC;AAGjF,OAAO,EAAE,eAAe,EAAE,MAAM,cAAc,CAAC;AAC/C,YAAY,EAAE,cAAc,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AAGlE,OAAO,EACL,iBAAiB,EACjB,iBAAiB,EACjB,gBAAgB,EAChB,gBAAgB,EAChB,iBAAiB,EACjB,gBAAgB,EAChB,oBAAoB,GACrB,MAAM,qBAAqB,CAAC;AAC7B,YAAY,EACV,uBAAuB,EACvB,WAAW,EACX,eAAe,EACf,WAAW,EACX,kBAAkB,EAClB,eAAe,EACf,cAAc,EACd,oBAAoB,EACpB,iBAAiB,EACjB,mBAAmB,EACnB,eAAe,EACf,aAAa,GACd,MAAM,qBAAqB,CAAC;AAG7B,OAAO,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAC;AACnD,OAAO,EAAE,WAAW,EAAE,GAAG,EAAE,MAAM,mBAAmB,CAAC;AAGrD,OAAO,EAAE,eAAe,EAAE,sBAAsB,EAAE,MAAM,2BAA2B,CAAC;AACpF,YAAY,EAAE,0BAA0B,EAAE,cAAc,EAAE,MAAM,2BAA2B,CAAC"}