carveout 0.1.2 → 0.2.0

package/dist/src/api.d.ts

@@ -14,10 +14,14 @@
  * lockfile. `test/api.test.ts` holds it to that with `child_process` made
  * to throw.
  *
+ * `walk` returns the walk `plan` and `cut` make, whole, for a platform
+ * that generates its own stubs and project from it.
+ *
  * Also exported: the policy's text checks (`integrityOf`,
  * `gainedIntegrity`, `weakenedTest`) and the slice and project modules
  * `core.ts` gathers, forked from sandbox-factory's core.
  */
+import type { ReachResult } from "./slice/reach.js";
 import { type CarveoutRecord, type Patch, type PlanSurface } from "./carve.js";
 import { type CutEdge, type SliceExposure, type SliceExternals, type SliceOrigin, type SliceTestLeft, type TestRunner } from "./core.js";
 import type { Readiness } from "./readiness.js";
@@ -25,6 +29,7 @@ import type { Receipt } from "./receipt.js";
 export * from "./core.js";
 export { gainedIntegrity, integrityOf, weakenedTest, type Refusal } from "./policy.js";
 export type { CarveoutRecord, Patch, PlanSurface, Readiness, Receipt };
+export type { ReachResult };
 /** The walk's bounds, as `carveout plan` and `cut` take them. */
 export interface WalkOptions {
     /** The repository's checkout root. */
@@ -90,6 +95,15 @@ export interface PlanResult {
 }
 /** `carveout plan`: the files, cuts, public surface and tests of a cut, from the import graph. Writes nothing. */
 export declare function plan(options: WalkOptions): PlanResult;
+/**
+ * The walk itself, as `plan` and `cut` make it: the included files with
+ * their depths, every edge that crosses the slice's edge in either
+ * direction, the links inside it with the specifiers the source wrote,
+ * the imports that resolve to no file, and the tests, helpers, private and
+ * pure files it carried. For a platform that generates its own stubs and
+ * project from the walk (sandbox-factory's slice tool). Writes nothing.
+ */
+export declare function walk(options: WalkOptions): ReachResult;
 export interface CutOptions extends WalkOptions {
     /** An empty or new folder, outside the repository. */
     readonly out: string;

package/dist/src/api.js

@@ -14,6 +14,9 @@
  * lockfile. `test/api.test.ts` holds it to that with `child_process` made
  * to throw.
  *
+ * `walk` returns the walk `plan` and `cut` make, whole, for a platform
+ * that generates its own stubs and project from it.
+ *
  * Also exported: the policy's text checks (`integrityOf`,
  * `gainedIntegrity`, `weakenedTest`) and the slice and project modules
  * `core.ts` gathers, forked from sandbox-factory's core.
@@ -69,6 +72,17 @@ export function plan(options) {
         blockers: planBlockers(planned),
     };
 }
+/**
+ * The walk itself, as `plan` and `cut` make it: the included files with
+ * their depths, every edge that crosses the slice's edge in either
+ * direction, the links inside it with the specifiers the source wrote,
+ * the imports that resolve to no file, and the tests, helpers, private and
+ * pure files it carried. For a platform that generates its own stubs and
+ * project from the walk (sandbox-factory's slice tool). Writes nothing.
+ */
+export function walk(options) {
+    return planSlice(requestOf(options)).walk;
+}
 /**
  * `carveout cut`: writes the folder and its `carveout.json` as the CLI
  * does, and returns the receipt as data instead of writing it under

package/dist/src/carve.d.ts

@@ -14,7 +14,7 @@ import { type SandboxSpec } from "./sandbox.js";
 import { type Readiness } from "./readiness.js";
 import { type AliasRule, type FolderPseudonyms } from "./pseudonyms/index.js";
 import { type Receipt } from "./receipt.js";
-export declare const CARVEOUT_VERSION = "0.1.2";
+export declare const CARVEOUT_VERSION = "0.2.0";
 export declare const RECORD_PATH = "carveout.json";
 export declare const RECORD_SCHEMA_VERSION = 1;
 export declare const BOUNDARY_PATH = "BOUNDARY.md";

package/dist/src/carve.js

@@ -35,7 +35,7 @@ import { sandboxRun } from "./sandbox.js";
 import { configuredFolders, liveCandidates } from "./readiness.js";
 import { exactToFolder, fromFolder, specifierPackages, toFolder, keptNames, looseLeaks, maskKept, pseudonymize, vocabularyBlockers, vocabularyLeaks, workspaceNames, ownedNames, workspaceVocabulary, } from "./pseudonyms/index.js";
 import { RECEIPT_SCHEMA_VERSION, folderRecordFor, folderView, newCutId, receiptPathFor, trustedBaseline, trustedCut, trustedCutWith, writeReceipt, } from "./receipt.js";
-export const CARVEOUT_VERSION = "0.1.2";
+export const CARVEOUT_VERSION = "0.2.0";
 export const RECORD_PATH = "carveout.json";
 export const RECORD_SCHEMA_VERSION = 1;
 /** Blockers that stop a cut before it writes anything. */

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "carveout",
-  "version": "0.1.2",
+  "version": "0.2.0",
   "description": "Hand one part of a closed TypeScript repository to an outside contractor: a slice, stubbed and mocked, that installs, builds and tests on its own, and a checked patch back. Also checks a change made in the repository: what it reaches, the tests to run, and weakened tests or config edits.",
   "keywords": [
     "carveout",

package/skills/carveout/SKILL.md

@@ -17,14 +17,14 @@ description: >-
 license: MIT
 compatibility: >-
   Node 22.12 or later, git and npm; Docker to run a returned folder's code. Runs
-  the carveout@0.1.2 CLI from npm; online cuts read the npm registry.
+  the carveout@0.2.0 CLI from npm; online cuts read the npm registry.
 ---
 
 # carveout
 
-`carveout <command>` is the CLI, `carveout@0.1.2`. When `carveout --version`
+`carveout <command>` is the CLI, `carveout@0.2.0`. When `carveout --version`
 prints another version or nothing, ask the person before installing it:
-`npm i -g carveout@0.1.2`, or put `npx carveout@0.1.2` in place of `carveout` in
+`npm i -g carveout@0.2.0`, or put `npx carveout@0.2.0` in place of `carveout` in
 each command (in a clone of the repository, `node dist/src/cli.js` after
 `npm install && npm run build`). Node 22.12 or later, and `git` and `npm` on
 PATH.
@@ -69,15 +69,16 @@ kept. The sections below are each step in full.
 
 ## Hosted mode
 
-When the `lunox` MCP tools are available and signed in (the plugin bundles the
-server; `/mcp` signs in), they read the person's Lunox workspace:
-`list_workspaces`, `list_repositories`, `get_snapshot` (the commit a snapshot
-was taken at and what was read from its file tree), `list_sandboxes`,
-`get_sandbox` and `get_run`. They are read-only: slices are not planned, cut or
-patched through them yet, so do that in local mode. Starting a sandbox, approving a slice and other confirmations happen in
-the platform's web app: point the person there and never act for them. Never
-ask for a token in the chat; the CLI signs in with `carveout login` in their
-own terminal. Local mode, the steps below, is unchanged and the default.
+With the `lunox` MCP tools signed in (the plugin bundles the server; `/mcp`
+signs in), read the workspace with `list_workspaces`, `list_repositories`,
+`get_snapshot`, `list_sandboxes`, `get_sandbox` and `get_run`. For a connected
+repository, and only when asked: `plan_slice` (read it with `get_run`),
+`start_sandbox`, `cut_slice` (a draft version from a slice run and the approved
+proposal) and `get_handout` (public files and the hidden suite's hash, never
+the hidden tests). The platform keeps the receipt; patching stays local.
+Approvals and publishing happen in the web app: point the person there. Never
+ask for a token; the CLI signs in with `carveout login`. Local mode, below, is
+the default.
 
 ## 1. Plan
 

package/skills/carveout-gate/SKILL.md

@@ -14,7 +14,7 @@ description: >-
   test to make it pass.
 license: MIT
 compatibility: >-
-  Node 22.12 or later, git and npm. Runs the carveout@0.1.2 CLI from npm.
+  Node 22.12 or later, git and npm. Runs the carveout@0.2.0 CLI from npm.
 ---
 
 # carveout-gate
@@ -23,9 +23,9 @@ What a change made in the repository reaches, and whether it weakened the checks
 that would catch it. To hand a part of the repository to someone outside it
 instead, use the `carveout` skill.
 
-`carveout <command>` is the CLI, `carveout@0.1.2`. When `carveout --version`
+`carveout <command>` is the CLI, `carveout@0.2.0`. When `carveout --version`
 prints another version or nothing, ask the person before installing it:
-`npm i -g carveout@0.1.2`, or put `npx carveout@0.1.2` in place of `carveout` in
+`npm i -g carveout@0.2.0`, or put `npx carveout@0.2.0` in place of `carveout` in
 each command (in a clone of the repository, `node dist/src/cli.js` after
 `npm install && npm run build`). Node 22.12 or later, and `git` and `npm` on
 PATH.