cohorte 2.10.1 → 3.0.0-dev.1

package/dist/chunks/run-CgTWYlcd.mjs

@@ -0,0 +1,82 @@
+import { n as sha256Hex } from "./canonical-C8UxeEmB.mjs";
+import { N as errorOf, j as CohorteError } from "./src-Cu3TxNob.mjs";
+import { n as createKeyStore, r as createTrustStore } from "./auth-BT5oVp76.mjs";
+import { i as resolveConfig, n as loadConfig } from "./src-DcU4IXMe.mjs";
+import { join } from "node:path";
+import { existsSync } from "node:fs";
+//#region src/commands/run/index.ts
+const run = {
+	verb: "run",
+	async run(ctx, args) {
+		const valueAfter = (flag) => {
+			const index = args.positionals.indexOf(flag);
+			return index >= 0 ? args.positionals[index + 1] : void 0;
+		};
+		const profile = valueAfter("--profile") ?? args.positionals.find((value) => [
+			"feature",
+			"bugfix",
+			"review"
+		].includes(value)) ?? "feature";
+		if (![
+			"feature",
+			"bugfix",
+			"review"
+		].includes(profile)) return 2;
+		const spec = args.positionals.find((value, index) => !value.startsWith("--") && args.positionals[index - 1] !== "--profile" && args.positionals[index - 1] !== "--runtime" && args.positionals[index - 1] !== "--script" && args.positionals[index - 1] !== "--model" && ![
+			"feature",
+			"bugfix",
+			"review"
+		].includes(value));
+		const model = valueAfter("--model");
+		const waitValue = valueAfter("--wait");
+		const waitMs = waitValue === void 0 ? void 0 : Number(waitValue) * 1e3;
+		if (waitValue !== void 0 && (!Number.isFinite(waitMs) || waitMs < 0)) return 2;
+		const trustProjectConfig = args.positionals.includes("--trust-project-config");
+		let consent;
+		if (ctx.env.HOME && existsSync(join(ctx.cwd, ".cohorte", "config.yaml"))) {
+			const home = ctx.env.HOME ?? ctx.cwd;
+			const loaded = await loadConfig({
+				cwd: ctx.cwd,
+				home
+			});
+			const keys = createKeyStore({ directory: join(home, ".cohorte", "keys") });
+			const trustStore = createTrustStore({
+				directory: join(home, ".cohorte", "trust"),
+				keys
+			});
+			const resolved = await resolveConfig(loaded, {
+				trustStore,
+				projectKeyId: sha256Hex(loaded.projectRoot).slice(0, 24)
+			});
+			if (resolved.status === "untrusted" && !trustProjectConfig) throw new CohorteError(errorOf("security/project-policy-untrusted", `project policy is untrusted (${resolved.loosenedKeys.join(", ") || "unknown key"})`));
+			if (resolved.status === "untrusted") consent = {
+				policySha256: resolved.policySha256,
+				via: "cli-flag"
+			};
+		}
+		const payload = {
+			profile,
+			unattended: false,
+			...spec ? { spec: { path: spec } } : {},
+			...valueAfter("--runtime") ? { runtime: valueAfter("--runtime") } : {},
+			...valueAfter("--script") ? { fakeScript: valueAfter("--script") } : {},
+			...model ? { modelOverrides: { implementer: {
+				provider: "default",
+				model
+			} } } : {},
+			...consent ? { consent } : {}
+		};
+		const result = waitMs === void 0 ? await ctx.controller.send("start", payload) : await ctx.controller.send("start", payload, { waitMs });
+		if (result.status === "pending" && result.result && typeof result.result === "object" && "runId" in result.result) {
+			const runId = result.result.runId;
+			if (runId) await ctx.hostSpawner.spawnDetached(runId);
+		}
+		if (args.json) ctx.stdio.stdout.write(`${JSON.stringify(result)}\n`);
+		else ctx.stdio.stdout.write(`${result.status}\n`);
+		return result.status === "rejected" ? 3 : result.status === "pending" ? 4 : 0;
+	}
+};
+//#endregion
+export { run as default };
+
+//# sourceMappingURL=run-CgTWYlcd.mjs.map

package/dist/chunks/run-CgTWYlcd.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"run-CgTWYlcd.mjs","names":[],"sources":["../../../../apps/cli/src/commands/run/index.ts"],"sourcesContent":["// apps/cli/src/commands/run/index.ts — DESIGN §9 verb `run` (PLAN §3 rule 3 \"later units fill\n// stub files that lie inside their owned paths; they never edit ... the registry\"). Wave-0 stub: exits with the\n// documented not-available error (spec 24 `configuration/phase-not-available`); filled by the Wave-4/5\n// unit that owns `apps/cli/src/commands/run/**`.\nimport { existsSync } from 'node:fs';\nimport { join } from 'node:path';\nimport { CohorteError, errorOf, type Sha256, sha256Hex } from '@cohorte/base';\nimport { loadConfig, resolveConfig } from '@cohorte/config';\nimport { createKeyStore, createTrustStore } from '@cohorte/security/auth';\nimport type { CommandModule } from '../../contract/index.ts';\n\nconst run: CommandModule = {\n  verb: 'run',\n  async run(ctx, args) {\n    const valueAfter = (flag: string): string | undefined => {\n      const index = args.positionals.indexOf(flag);\n      return index >= 0 ? args.positionals[index + 1] : undefined;\n    };\n    const profile = (valueAfter('--profile') ??\n      args.positionals.find((value) => ['feature', 'bugfix', 'review'].includes(value)) ??\n      'feature') as 'feature' | 'bugfix' | 'review';\n    if (!['feature', 'bugfix', 'review'].includes(profile)) return 2;\n    const spec = args.positionals.find(\n      (value, index) =>\n        !value.startsWith('--') &&\n        args.positionals[index - 1] !== '--profile' &&\n        args.positionals[index - 1] !== '--runtime' &&\n        args.positionals[index - 1] !== '--script' &&\n        args.positionals[index - 1] !== '--model' &&\n        !['feature', 'bugfix', 'review'].includes(value),\n    );\n    const model = valueAfter('--model');\n    const waitValue = valueAfter('--wait');\n    const waitMs = waitValue === undefined ? undefined : Number(waitValue) * 1000;\n    if (waitValue !== undefined && (!Number.isFinite(waitMs) || (waitMs as number) < 0)) return 2;\n    const trustProjectConfig = args.positionals.includes('--trust-project-config');\n    let consent: { policySha256: Sha256; via: 'cli-flag' } | undefined;\n    // Test/fake contexts intentionally omit HOME; a real CLI invocation always\n    // supplies it and is the only context allowed to resolve project trust.\n    if (ctx.env.HOME && existsSync(join(ctx.cwd, '.cohorte', 'config.yaml'))) {\n      const home = ctx.env.HOME ?? ctx.cwd;\n      const loaded = await loadConfig({ cwd: ctx.cwd, home });\n      const keys = createKeyStore({ directory: join(home, '.cohorte', 'keys') });\n      const trustStore = createTrustStore({ directory: join(home, '.cohorte', 'trust'), keys });\n      const resolved = await resolveConfig(loaded, {\n        trustStore,\n        projectKeyId: sha256Hex(loaded.projectRoot).slice(0, 24),\n      });\n      if (resolved.status === 'untrusted' && !trustProjectConfig) {\n        throw new CohorteError(\n          errorOf(\n            'security/project-policy-untrusted',\n            `project policy is untrusted (${resolved.loosenedKeys.join(', ') || 'unknown key'})`,\n          ),\n        );\n      }\n      if (resolved.status === 'untrusted') consent = { policySha256: resolved.policySha256, via: 'cli-flag' };\n    }\n    const payload = {\n      profile,\n      unattended: false,\n      ...(spec ? { spec: { path: spec } } : {}),\n      ...(valueAfter('--runtime') ? { runtime: valueAfter('--runtime') as string } : {}),\n      ...(valueAfter('--script') ? { fakeScript: valueAfter('--script') as string } : {}),\n      ...(model ? { modelOverrides: { implementer: { provider: 'default', model } } } : {}),\n      ...(consent ? { consent } : {}),\n    };\n    const result =\n      waitMs === undefined\n        ? await ctx.controller.send('start', payload)\n        : await ctx.controller.send('start', payload, { waitMs });\n    if (result.status === 'pending' && result.result && typeof result.result === 'object' && 'runId' in result.result) {\n      const runId = (result.result as { runId?: string }).runId;\n      if (runId) await ctx.hostSpawner.spawnDetached(runId);\n    }\n    if (args.json) ctx.stdio.stdout.write(`${JSON.stringify(result)}\\n`);\n    else ctx.stdio.stdout.write(`${result.status}\\n`);\n    return result.status === 'rejected' ? 3 : result.status === 'pending' ? 4 : 0;\n  },\n};\n\nexport default run;\n"],"mappings":";;;;;;;AAWA,MAAM,MAAqB;CACzB,MAAM;CACN,MAAM,IAAI,KAAK,MAAM;EACnB,MAAM,cAAc,SAAqC;GACvD,MAAM,QAAQ,KAAK,YAAY,QAAQ,IAAI;GAC3C,OAAO,SAAS,IAAI,KAAK,YAAY,QAAQ,KAAK,KAAA;EACpD;EACA,MAAM,UAAW,WAAW,WAAW,KACrC,KAAK,YAAY,MAAM,UAAU;GAAC;GAAW;GAAU;EAAQ,CAAC,CAAC,SAAS,KAAK,CAAC,KAChF;EACF,IAAI,CAAC;GAAC;GAAW;GAAU;EAAQ,CAAC,CAAC,SAAS,OAAO,GAAG,OAAO;EAC/D,MAAM,OAAO,KAAK,YAAY,MAC3B,OAAO,UACN,CAAC,MAAM,WAAW,IAAI,KACtB,KAAK,YAAY,QAAQ,OAAO,eAChC,KAAK,YAAY,QAAQ,OAAO,eAChC,KAAK,YAAY,QAAQ,OAAO,cAChC,KAAK,YAAY,QAAQ,OAAO,aAChC,CAAC;GAAC;GAAW;GAAU;EAAQ,CAAC,CAAC,SAAS,KAAK,CACnD;EACA,MAAM,QAAQ,WAAW,SAAS;EAClC,MAAM,YAAY,WAAW,QAAQ;EACrC,MAAM,SAAS,cAAc,KAAA,IAAY,KAAA,IAAY,OAAO,SAAS,IAAI;EACzE,IAAI,cAAc,KAAA,MAAc,CAAC,OAAO,SAAS,MAAM,KAAM,SAAoB,IAAI,OAAO;EAC5F,MAAM,qBAAqB,KAAK,YAAY,SAAS,wBAAwB;EAC7E,IAAI;EAGJ,IAAI,IAAI,IAAI,QAAQ,WAAW,KAAK,IAAI,KAAK,YAAY,aAAa,CAAC,GAAG;GACxE,MAAM,OAAO,IAAI,IAAI,QAAQ,IAAI;GACjC,MAAM,SAAS,MAAM,WAAW;IAAE,KAAK,IAAI;IAAK;GAAK,CAAC;GACtD,MAAM,OAAO,eAAe,EAAE,WAAW,KAAK,MAAM,YAAY,MAAM,EAAE,CAAC;GACzE,MAAM,aAAa,iBAAiB;IAAE,WAAW,KAAK,MAAM,YAAY,OAAO;IAAG;GAAK,CAAC;GACxF,MAAM,WAAW,MAAM,cAAc,QAAQ;IAC3C;IACA,cAAc,UAAU,OAAO,WAAW,CAAC,CAAC,MAAM,GAAG,EAAE;GACzD,CAAC;GACD,IAAI,SAAS,WAAW,eAAe,CAAC,oBACtC,MAAM,IAAI,aACR,QACE,qCACA,gCAAgC,SAAS,aAAa,KAAK,IAAI,KAAK,cAAc,EACpF,CACF;GAEF,IAAI,SAAS,WAAW,aAAa,UAAU;IAAE,cAAc,SAAS;IAAc,KAAK;GAAW;EACxG;EACA,MAAM,UAAU;GACd;GACA,YAAY;GACZ,GAAI,OAAO,EAAE,MAAM,EAAE,MAAM,KAAK,EAAE,IAAI,CAAC;GACvC,GAAI,WAAW,WAAW,IAAI,EAAE,SAAS,WAAW,WAAW,EAAY,IAAI,CAAC;GAChF,GAAI,WAAW,UAAU,IAAI,EAAE,YAAY,WAAW,UAAU,EAAY,IAAI,CAAC;GACjF,GAAI,QAAQ,EAAE,gBAAgB,EAAE,aAAa;IAAE,UAAU;IAAW;GAAM,EAAE,EAAE,IAAI,CAAC;GACnF,GAAI,UAAU,EAAE,QAAQ,IAAI,CAAC;EAC/B;EACA,MAAM,SACJ,WAAW,KAAA,IACP,MAAM,IAAI,WAAW,KAAK,SAAS,OAAO,IAC1C,MAAM,IAAI,WAAW,KAAK,SAAS,SAAS,EAAE,OAAO,CAAC;EAC5D,IAAI,OAAO,WAAW,aAAa,OAAO,UAAU,OAAO,OAAO,WAAW,YAAY,WAAW,OAAO,QAAQ;GACjH,MAAM,QAAS,OAAO,OAA8B;GACpD,IAAI,OAAO,MAAM,IAAI,YAAY,cAAc,KAAK;EACtD;EACA,IAAI,KAAK,MAAM,IAAI,MAAM,OAAO,MAAM,GAAG,KAAK,UAAU,MAAM,EAAE,GAAG;OAC9D,IAAI,MAAM,OAAO,MAAM,GAAG,OAAO,OAAO,GAAG;EAChD,OAAO,OAAO,WAAW,aAAa,IAAI,OAAO,WAAW,YAAY,IAAI;CAC9E;AACF"}

package/dist/chunks/run-tool-C3rAv4XF.mjs

@@ -0,0 +1,26 @@
+//#region src/commands/run-tool/index.ts
+const runTool = {
+	verb: "run-tool",
+	async run(ctx, args) {
+		const [runId, tool, inputText, ...justificationParts] = args.positionals;
+		if (!runId || !tool || !inputText || justificationParts.length === 0) return 2;
+		let input;
+		try {
+			input = JSON.parse(inputText);
+		} catch {
+			return 2;
+		}
+		const result = await ctx.controller.send("run-tool", {
+			tool,
+			input,
+			justification: justificationParts.join(" ")
+		}, { runId });
+		if (args.json) ctx.stdio.stdout.write(`${JSON.stringify(result)}\n`);
+		else ctx.stdio.stdout.write(`${result.status}\n`);
+		return result.status === "rejected" ? 3 : result.status === "pending" ? 4 : 0;
+	}
+};
+//#endregion
+export { runTool as default };
+
+//# sourceMappingURL=run-tool-C3rAv4XF.mjs.map

package/dist/chunks/run-tool-C3rAv4XF.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"run-tool-C3rAv4XF.mjs","names":[],"sources":["../../../../apps/cli/src/commands/run-tool/index.ts"],"sourcesContent":["import type { CommandModule } from '../../contract/index.ts';\n\nconst runTool: CommandModule = {\n  verb: 'run-tool',\n  async run(ctx, args) {\n    const [runId, tool, inputText, ...justificationParts] = args.positionals;\n    if (!runId || !tool || !inputText || justificationParts.length === 0) return 2;\n    let input: unknown;\n    try {\n      input = JSON.parse(inputText);\n    } catch {\n      return 2;\n    }\n    const result = await ctx.controller.send(\n      'run-tool',\n      { tool, input: input as never, justification: justificationParts.join(' ') },\n      { runId },\n    );\n    if (args.json) ctx.stdio.stdout.write(`${JSON.stringify(result)}\\n`);\n    else ctx.stdio.stdout.write(`${result.status}\\n`);\n    return result.status === 'rejected' ? 3 : result.status === 'pending' ? 4 : 0;\n  },\n};\n\nexport default runTool;\n"],"mappings":";AAEA,MAAM,UAAyB;CAC7B,MAAM;CACN,MAAM,IAAI,KAAK,MAAM;EACnB,MAAM,CAAC,OAAO,MAAM,WAAW,GAAG,sBAAsB,KAAK;EAC7D,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,aAAa,mBAAmB,WAAW,GAAG,OAAO;EAC7E,IAAI;EACJ,IAAI;GACF,QAAQ,KAAK,MAAM,SAAS;EAC9B,QAAQ;GACN,OAAO;EACT;EACA,MAAM,SAAS,MAAM,IAAI,WAAW,KAClC,YACA;GAAE;GAAa;GAAgB,eAAe,mBAAmB,KAAK,GAAG;EAAE,GAC3E,EAAE,MAAM,CACV;EACA,IAAI,KAAK,MAAM,IAAI,MAAM,OAAO,MAAM,GAAG,KAAK,UAAU,MAAM,EAAE,GAAG;OAC9D,IAAI,MAAM,OAAO,MAAM,GAAG,OAAO,OAAO,GAAG;EAChD,OAAO,OAAO,WAAW,aAAa,IAAI,OAAO,WAAW,YAAY,IAAI;CAC9E;AACF"}

package/dist/chunks/scan-8Gy_B6kI.mjs

@@ -0,0 +1,122 @@
+import { readFile, readdir } from "node:fs/promises";
+import { join, relative } from "node:path";
+//#region ../../packages/project-model/src/scan/index.ts
+async function filesUnder(root) {
+	const found = [];
+	const visit = async (dir) => {
+		try {
+			const entries = await readdir(dir, { withFileTypes: true });
+			for (const entry of entries.sort((a, b) => a.name.localeCompare(b.name))) {
+				if (entry.name === ".git" || entry.name === "node_modules" || entry.name === ".cohorte" || entry.name === ".pi" || entry.name === ".build" || entry.name === "dist" || entry.name === "coverage") continue;
+				const path = join(dir, entry.name);
+				if (entry.isDirectory()) await visit(path);
+				else if (entry.isFile()) found.push(relative(root, path).split("\\").join("/"));
+			}
+		} catch {
+			return;
+		}
+	};
+	await visit(root);
+	return found.sort();
+}
+function field(value, detector, sources, className = "observed") {
+	return {
+		value,
+		class: className,
+		provenance: {
+			detector,
+			sources
+		}
+	};
+}
+async function scanRepository(root, options) {
+	const files = await filesUnder(root);
+	const packagePath = join(root, "package.json");
+	let pkg = {};
+	try {
+		pkg = JSON.parse(await readFile(packagePath, "utf8"));
+	} catch {}
+	const ext = /* @__PURE__ */ new Map([
+		[".ts", "typescript"],
+		[".tsx", "typescript"],
+		[".js", "javascript"],
+		[".jsx", "javascript"],
+		[".py", "python"],
+		[".go", "go"],
+		[".rs", "rust"],
+		[".java", "java"]
+	]);
+	const languages = [...new Set(files.map((file) => ext.get(file.slice(file.lastIndexOf(".")))).filter((value) => value !== void 0))].sort();
+	const supportedLocks = [
+		"pnpm-lock.yaml",
+		"package-lock.json",
+		"yarn.lock",
+		"bun.lockb"
+	];
+	const locks = files.filter((file) => supportedLocks.includes(file));
+	const lock = locks.length === 1 ? locks[0] : void 0;
+	const packageManager = lock === void 0 ? pkg.packageManager?.split("@")[0] ?? null : lock === "pnpm-lock.yaml" ? "pnpm" : lock === "package-lock.json" ? "npm" : lock === "yarn.lock" ? "yarn" : "bun";
+	const deps = {
+		...pkg.dependencies ?? {},
+		...pkg.devDependencies ?? {}
+	};
+	const frameworks = Object.keys(deps).filter((name) => /^(react|vue|angular|svelte|next|nuxt|express|nestjs|fastify|vite|vitest|jest|playwright)/i.test(name)).sort();
+	const scripts = pkg.scripts ?? {};
+	const commands = {};
+	for (const name of Object.keys(scripts).sort()) {
+		const command = scripts[name];
+		if (command !== void 0) commands[name] = field(command.split(/\s+/u), "package-json", ["package.json"]);
+	}
+	const testLocations = files.filter((file) => /(^|\/)(test|tests|__tests__)(\/|$)|\.(test|spec)\./u.test(file));
+	const surfaces = {};
+	const topLevel = [...new Set(files.map((file) => file.split("/")[0]).filter((name) => Boolean(name && !name.startsWith("."))))];
+	for (const name of topLevel.sort()) {
+		const paths = files.filter((file) => file === name || file.startsWith(`${name}/`));
+		if (paths.length) surfaces[name.replace(/[^A-Za-z0-9_.-]/g, "_")] = { paths: field([`${name}/**`], "workspace-layout", paths) };
+	}
+	const id = pkg.name?.replace(/^@[^/]+\//u, "") ?? (relative(process.cwd(), root).replace(/[^A-Za-z0-9_.-]/g, "_") || "project");
+	const unknowns = locks.length > 1 ? [{
+		id: "package-manager",
+		question: "more than one supported lockfile was detected; which package manager is authoritative?",
+		candidates: [...locks].sort(),
+		sources: [...locks].sort()
+	}] : [];
+	return {
+		schemaVersion: 1,
+		project: {
+			id: field(id, "package-json", ["package.json"], "human"),
+			root: field(root, "filesystem", [])
+		},
+		stack: {
+			languages: field(languages, "file-extensions", files),
+			packageManager: field(packageManager, "lockfile", lock ? [lock] : []),
+			frameworks: field(frameworks, "package-json", ["package.json"])
+		},
+		surfaces,
+		commands,
+		testStrategy: field({
+			runner: scripts.test ? scripts.test.split(/\s+/u)[0] ?? null : null,
+			locations: testLocations
+		}, "package-json", ["package.json"]),
+		deploymentHints: field(files.filter((file) => /(^|\/)(Dockerfile|Procfile|vercel\.json|fly\.toml)$/u.test(file)), "file-presence", files),
+		ownership: field({ codeowners: files.includes(".github/CODEOWNERS") ? ".github/CODEOWNERS" : null }, "file-presence", [".github/CODEOWNERS"]),
+		risks: packageManager === null ? [{
+			id: "missing-lockfile",
+			severity: "medium",
+			message: "no supported lockfile was detected",
+			sources: []
+		}] : [],
+		conventions: field(files.filter((file) => /(^|\/)(CONTRIBUTING|conventions)\.(md|yaml)$/iu.test(file)), "file-presence", files),
+		generatedArtifacts: field(["manifest.yaml", "project.yaml"], "manifest", [".cohorte/manifest.yaml"]),
+		unknowns,
+		provenance: {
+			generatedAt: options.clock.now(),
+			toolVersion: options.toolVersion,
+			analysis: "deterministic"
+		}
+	};
+}
+//#endregion
+export { scanRepository as t };
+
+//# sourceMappingURL=scan-8Gy_B6kI.mjs.map

package/dist/chunks/scan-8Gy_B6kI.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"scan-8Gy_B6kI.mjs","names":[],"sources":["../../../../packages/project-model/src/scan/index.ts"],"sourcesContent":["// Deterministic repository scan: bounded filesystem observations, never guessed semantics.\n\nimport { readdir, readFile } from 'node:fs/promises';\nimport { join, relative } from 'node:path';\nimport type { Clock } from '@cohorte/base';\nimport type { ProjectModel } from '../contract.ts';\n\nexport interface ScanOptions {\n  clock: Clock;\n  /** stamped into `provenance.toolVersion` */\n  toolVersion: string;\n}\n\nasync function filesUnder(root: string): Promise<string[]> {\n  const found: string[] = [];\n  const visit = async (dir: string): Promise<void> => {\n    try {\n      const entries = await readdir(dir, { withFileTypes: true });\n      for (const entry of entries.sort((a, b) => a.name.localeCompare(b.name))) {\n        if (\n          entry.name === '.git' ||\n          entry.name === 'node_modules' ||\n          entry.name === '.cohorte' ||\n          entry.name === '.pi' ||\n          entry.name === '.build' ||\n          entry.name === 'dist' ||\n          entry.name === 'coverage'\n        )\n          continue;\n        const path = join(dir, entry.name);\n        if (entry.isDirectory()) await visit(path);\n        else if (entry.isFile()) found.push(relative(root, path).split('\\\\').join('/'));\n      }\n    } catch {\n      return;\n    }\n  };\n  await visit(root);\n  return found.sort();\n}\n\nfunction field<T>(\n  value: T,\n  detector: string,\n  sources: string[],\n  className: ProjectModel['project']['id']['class'] = 'observed',\n) {\n  return { value, class: className, provenance: { detector, sources } };\n}\n\nexport async function scanRepository(root: string, options: ScanOptions): Promise<ProjectModel> {\n  const files = await filesUnder(root);\n  const packagePath = join(root, 'package.json');\n  let pkg: {\n    name?: string;\n    packageManager?: string;\n    scripts?: Record<string, string>;\n    dependencies?: Record<string, string>;\n    devDependencies?: Record<string, string>;\n  } = {};\n  try {\n    pkg = JSON.parse(await readFile(packagePath, 'utf8')) as typeof pkg;\n  } catch {\n    /* absent or invalid package.json is an observation */\n  }\n  const ext = new Map<string, string>([\n    ['.ts', 'typescript'],\n    ['.tsx', 'typescript'],\n    ['.js', 'javascript'],\n    ['.jsx', 'javascript'],\n    ['.py', 'python'],\n    ['.go', 'go'],\n    ['.rs', 'rust'],\n    ['.java', 'java'],\n  ]);\n  const languages = [\n    ...new Set(\n      files\n        .map((file) => ext.get(file.slice(file.lastIndexOf('.'))))\n        .filter((value): value is string => value !== undefined),\n    ),\n  ].sort();\n  const supportedLocks = ['pnpm-lock.yaml', 'package-lock.json', 'yarn.lock', 'bun.lockb'];\n  const locks = files.filter((file) => supportedLocks.includes(file));\n  const lock = locks.length === 1 ? locks[0] : undefined;\n  const packageManager =\n    lock === undefined\n      ? (pkg.packageManager?.split('@')[0] ?? null)\n      : lock === 'pnpm-lock.yaml'\n        ? 'pnpm'\n        : lock === 'package-lock.json'\n          ? 'npm'\n          : lock === 'yarn.lock'\n            ? 'yarn'\n            : 'bun';\n  const deps = { ...(pkg.dependencies ?? {}), ...(pkg.devDependencies ?? {}) };\n  const frameworks = Object.keys(deps)\n    .filter((name) =>\n      /^(react|vue|angular|svelte|next|nuxt|express|nestjs|fastify|vite|vitest|jest|playwright)/i.test(name),\n    )\n    .sort();\n  const scripts = pkg.scripts ?? {};\n  const commands: Record<string, ReturnType<typeof field<string[]>>> = {};\n  for (const name of Object.keys(scripts).sort()) {\n    const command = scripts[name];\n    if (command !== undefined) commands[name] = field(command.split(/\\s+/u), 'package-json', ['package.json']);\n  }\n  const testLocations = files.filter((file) => /(^|\\/)(test|tests|__tests__)(\\/|$)|\\.(test|spec)\\./u.test(file));\n  const surfaces: ProjectModel['surfaces'] = {};\n  const topLevel: string[] = [\n    ...new Set(\n      files.map((file) => file.split('/')[0]).filter((name): name is string => Boolean(name && !name.startsWith('.'))),\n    ),\n  ];\n  for (const name of topLevel.sort()) {\n    const paths = files.filter((file) => file === name || file.startsWith(`${name}/`));\n    if (paths.length)\n      surfaces[name.replace(/[^A-Za-z0-9_.-]/g, '_')] = { paths: field([`${name}/**`], 'workspace-layout', paths) };\n  }\n  const id =\n    pkg.name?.replace(/^@[^/]+\\//u, '') ??\n    (relative(process.cwd(), root).replace(/[^A-Za-z0-9_.-]/g, '_') || 'project');\n  const unknowns =\n    locks.length > 1\n      ? [\n          {\n            id: 'package-manager',\n            question: 'more than one supported lockfile was detected; which package manager is authoritative?',\n            candidates: [...locks].sort(),\n            sources: [...locks].sort(),\n          },\n        ]\n      : [];\n  return {\n    schemaVersion: 1,\n    project: { id: field(id, 'package-json', ['package.json'], 'human'), root: field(root, 'filesystem', []) },\n    stack: {\n      languages: field(languages, 'file-extensions', files),\n      packageManager: field(packageManager, 'lockfile', lock ? [lock] : []),\n      frameworks: field(frameworks, 'package-json', ['package.json']),\n    },\n    surfaces,\n    commands,\n    testStrategy: field(\n      { runner: scripts.test ? (scripts.test.split(/\\s+/u)[0] ?? null) : null, locations: testLocations },\n      'package-json',\n      ['package.json'],\n    ),\n    deploymentHints: field(\n      files.filter((file) => /(^|\\/)(Dockerfile|Procfile|vercel\\.json|fly\\.toml)$/u.test(file)),\n      'file-presence',\n      files,\n    ),\n    ownership: field(\n      { codeowners: files.includes('.github/CODEOWNERS') ? '.github/CODEOWNERS' : null },\n      'file-presence',\n      ['.github/CODEOWNERS'],\n    ),\n    risks:\n      packageManager === null\n        ? [{ id: 'missing-lockfile', severity: 'medium', message: 'no supported lockfile was detected', sources: [] }]\n        : [],\n    conventions: field(\n      files.filter((file) => /(^|\\/)(CONTRIBUTING|conventions)\\.(md|yaml)$/iu.test(file)),\n      'file-presence',\n      files,\n    ),\n    generatedArtifacts: field(['manifest.yaml', 'project.yaml'], 'manifest', ['.cohorte/manifest.yaml']),\n    unknowns,\n    provenance: { generatedAt: options.clock.now(), toolVersion: options.toolVersion, analysis: 'deterministic' },\n  };\n}\n"],"mappings":";;;AAaA,eAAe,WAAW,MAAiC;CACzD,MAAM,QAAkB,CAAC;CACzB,MAAM,QAAQ,OAAO,QAA+B;EAClD,IAAI;GACF,MAAM,UAAU,MAAM,QAAQ,KAAK,EAAE,eAAe,KAAK,CAAC;GAC1D,KAAK,MAAM,SAAS,QAAQ,MAAM,GAAG,MAAM,EAAE,KAAK,cAAc,EAAE,IAAI,CAAC,GAAG;IACxE,IACE,MAAM,SAAS,UACf,MAAM,SAAS,kBACf,MAAM,SAAS,cACf,MAAM,SAAS,SACf,MAAM,SAAS,YACf,MAAM,SAAS,UACf,MAAM,SAAS,YAEf;IACF,MAAM,OAAO,KAAK,KAAK,MAAM,IAAI;IACjC,IAAI,MAAM,YAAY,GAAG,MAAM,MAAM,IAAI;SACpC,IAAI,MAAM,OAAO,GAAG,MAAM,KAAK,SAAS,MAAM,IAAI,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC,KAAK,GAAG,CAAC;GAChF;EACF,QAAQ;GACN;EACF;CACF;CACA,MAAM,MAAM,IAAI;CAChB,OAAO,MAAM,KAAK;AACpB;AAEA,SAAS,MACP,OACA,UACA,SACA,YAAoD,YACpD;CACA,OAAO;EAAE;EAAO,OAAO;EAAW,YAAY;GAAE;GAAU;EAAQ;CAAE;AACtE;AAEA,eAAsB,eAAe,MAAc,SAA6C;CAC9F,MAAM,QAAQ,MAAM,WAAW,IAAI;CACnC,MAAM,cAAc,KAAK,MAAM,cAAc;CAC7C,IAAI,MAMA,CAAC;CACL,IAAI;EACF,MAAM,KAAK,MAAM,MAAM,SAAS,aAAa,MAAM,CAAC;CACtD,QAAQ,CAER;CACA,MAAM,sBAAM,IAAI,IAAoB;EAClC,CAAC,OAAO,YAAY;EACpB,CAAC,QAAQ,YAAY;EACrB,CAAC,OAAO,YAAY;EACpB,CAAC,QAAQ,YAAY;EACrB,CAAC,OAAO,QAAQ;EAChB,CAAC,OAAO,IAAI;EACZ,CAAC,OAAO,MAAM;EACd,CAAC,SAAS,MAAM;CAClB,CAAC;CACD,MAAM,YAAY,CAChB,GAAG,IAAI,IACL,MACG,KAAK,SAAS,IAAI,IAAI,KAAK,MAAM,KAAK,YAAY,GAAG,CAAC,CAAC,CAAC,CAAC,CACzD,QAAQ,UAA2B,UAAU,KAAA,CAAS,CAC3D,CACF,CAAC,CAAC,KAAK;CACP,MAAM,iBAAiB;EAAC;EAAkB;EAAqB;EAAa;CAAW;CACvF,MAAM,QAAQ,MAAM,QAAQ,SAAS,eAAe,SAAS,IAAI,CAAC;CAClE,MAAM,OAAO,MAAM,WAAW,IAAI,MAAM,KAAK,KAAA;CAC7C,MAAM,iBACJ,SAAS,KAAA,IACJ,IAAI,gBAAgB,MAAM,GAAG,CAAC,CAAC,MAAM,OACtC,SAAS,mBACP,SACA,SAAS,sBACP,QACA,SAAS,cACP,SACA;CACZ,MAAM,OAAO;EAAE,GAAI,IAAI,gBAAgB,CAAC;EAAI,GAAI,IAAI,mBAAmB,CAAC;CAAG;CAC3E,MAAM,aAAa,OAAO,KAAK,IAAI,CAAC,CACjC,QAAQ,SACP,4FAA4F,KAAK,IAAI,CACvG,CAAC,CACA,KAAK;CACR,MAAM,UAAU,IAAI,WAAW,CAAC;CAChC,MAAM,WAA+D,CAAC;CACtE,KAAK,MAAM,QAAQ,OAAO,KAAK,OAAO,CAAC,CAAC,KAAK,GAAG;EAC9C,MAAM,UAAU,QAAQ;EACxB,IAAI,YAAY,KAAA,GAAW,SAAS,QAAQ,MAAM,QAAQ,MAAM,MAAM,GAAG,gBAAgB,CAAC,cAAc,CAAC;CAC3G;CACA,MAAM,gBAAgB,MAAM,QAAQ,SAAS,sDAAsD,KAAK,IAAI,CAAC;CAC7G,MAAM,WAAqC,CAAC;CAC5C,MAAM,WAAqB,CACzB,GAAG,IAAI,IACL,MAAM,KAAK,SAAS,KAAK,MAAM,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,QAAQ,SAAyB,QAAQ,QAAQ,CAAC,KAAK,WAAW,GAAG,CAAC,CAAC,CACjH,CACF;CACA,KAAK,MAAM,QAAQ,SAAS,KAAK,GAAG;EAClC,MAAM,QAAQ,MAAM,QAAQ,SAAS,SAAS,QAAQ,KAAK,WAAW,GAAG,KAAK,EAAE,CAAC;EACjF,IAAI,MAAM,QACR,SAAS,KAAK,QAAQ,oBAAoB,GAAG,KAAK,EAAE,OAAO,MAAM,CAAC,GAAG,KAAK,IAAI,GAAG,oBAAoB,KAAK,EAAE;CAChH;CACA,MAAM,KACJ,IAAI,MAAM,QAAQ,cAAc,EAAE,MACjC,SAAS,QAAQ,IAAI,GAAG,IAAI,CAAC,CAAC,QAAQ,oBAAoB,GAAG,KAAK;CACrE,MAAM,WACJ,MAAM,SAAS,IACX,CACE;EACE,IAAI;EACJ,UAAU;EACV,YAAY,CAAC,GAAG,KAAK,CAAC,CAAC,KAAK;EAC5B,SAAS,CAAC,GAAG,KAAK,CAAC,CAAC,KAAK;CAC3B,CACF,IACA,CAAC;CACP,OAAO;EACL,eAAe;EACf,SAAS;GAAE,IAAI,MAAM,IAAI,gBAAgB,CAAC,cAAc,GAAG,OAAO;GAAG,MAAM,MAAM,MAAM,cAAc,CAAC,CAAC;EAAE;EACzG,OAAO;GACL,WAAW,MAAM,WAAW,mBAAmB,KAAK;GACpD,gBAAgB,MAAM,gBAAgB,YAAY,OAAO,CAAC,IAAI,IAAI,CAAC,CAAC;GACpE,YAAY,MAAM,YAAY,gBAAgB,CAAC,cAAc,CAAC;EAChE;EACA;EACA;EACA,cAAc,MACZ;GAAE,QAAQ,QAAQ,OAAQ,QAAQ,KAAK,MAAM,MAAM,CAAC,CAAC,MAAM,OAAQ;GAAM,WAAW;EAAc,GAClG,gBACA,CAAC,cAAc,CACjB;EACA,iBAAiB,MACf,MAAM,QAAQ,SAAS,uDAAuD,KAAK,IAAI,CAAC,GACxF,iBACA,KACF;EACA,WAAW,MACT,EAAE,YAAY,MAAM,SAAS,oBAAoB,IAAI,uBAAuB,KAAK,GACjF,iBACA,CAAC,oBAAoB,CACvB;EACA,OACE,mBAAmB,OACf,CAAC;GAAE,IAAI;GAAoB,UAAU;GAAU,SAAS;GAAsC,SAAS,CAAC;EAAE,CAAC,IAC3G,CAAC;EACP,aAAa,MACX,MAAM,QAAQ,SAAS,iDAAiD,KAAK,IAAI,CAAC,GAClF,iBACA,KACF;EACA,oBAAoB,MAAM,CAAC,iBAAiB,cAAc,GAAG,YAAY,CAAC,wBAAwB,CAAC;EACnG;EACA,YAAY;GAAE,aAAa,QAAQ,MAAM,IAAI;GAAG,aAAa,QAAQ;GAAa,UAAU;EAAgB;CAC9G;AACF"}