cxgrd 0.1.0

package/dist/team/graph-sync.d.ts

@@ -0,0 +1,10 @@
+import type { CgDirectory } from '../cg-directory';
+import type { ActiveSession } from '../auth/auth-session';
+import type { GraphBundle, SyncMeta } from './types';
+export declare function buildBundleFromCg(cgDir: CgDirectory, projectRoot: string, session: ActiveSession): Promise<GraphBundle | null>;
+export declare function applyBundleToCg(cgDir: CgDirectory, bundle: GraphBundle): Promise<void>;
+export declare function readSyncMeta(cgDir: CgDirectory): Promise<SyncMeta | null>;
+export declare function writeSyncMeta(cgDir: CgDirectory, meta: SyncMeta): Promise<void>;
+export declare function syncPush(cgDir: CgDirectory, projectRoot: string, session: ActiveSession): Promise<GraphBundle>;
+export declare function syncPull(cgDir: CgDirectory, projectRoot: string, session: ActiveSession): Promise<GraphBundle | null>;
+//# sourceMappingURL=graph-sync.d.ts.map

package/dist/team/graph-sync.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"graph-sync.d.ts","sourceRoot":"","sources":["../../src/team/graph-sync.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,WAAW,EAAU,MAAM,iBAAiB,CAAC;AAC3D,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AAC1D,OAAO,KAAK,EAAE,WAAW,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AAIrD,wBAAsB,iBAAiB,CACrC,KAAK,EAAE,WAAW,EAClB,WAAW,EAAE,MAAM,EACnB,OAAO,EAAE,aAAa,GACrB,OAAO,CAAC,WAAW,GAAG,IAAI,CAAC,CAkB7B;AAED,wBAAsB,eAAe,CAAC,KAAK,EAAE,WAAW,EAAE,MAAM,EAAE,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC,CAM5F;AAED,wBAAsB,YAAY,CAAC,KAAK,EAAE,WAAW,GAAG,OAAO,CAAC,QAAQ,GAAG,IAAI,CAAC,CAQ/E;AAED,wBAAsB,aAAa,CAAC,KAAK,EAAE,WAAW,EAAE,IAAI,EAAE,QAAQ,GAAG,OAAO,CAAC,IAAI,CAAC,CAGrF;AAED,wBAAsB,QAAQ,CAC5B,KAAK,EAAE,WAAW,EAClB,WAAW,EAAE,MAAM,EACnB,OAAO,EAAE,aAAa,GACrB,OAAO,CAAC,WAAW,CAAC,CAgBtB;AAED,wBAAsB,QAAQ,CAC5B,KAAK,EAAE,WAAW,EAClB,WAAW,EAAE,MAAM,EACnB,OAAO,EAAE,aAAa,GACrB,OAAO,CAAC,WAAW,GAAG,IAAI,CAAC,CAkB7B"}

package/dist/team/graph-sync.js

@@ -0,0 +1,78 @@
+import { join } from 'path';
+import { writeFile, readFile } from 'fs/promises';
+import { existsSync } from 'fs';
+import { resolveRepoIdentity } from './repo-identity';
+import { pushGraph, pullGraph } from './cloud-client';
+export async function buildBundleFromCg(cgDir, projectRoot, session) {
+    const graph = await cgDir.readGraph();
+    if (!graph)
+        return null;
+    const identity = resolveRepoIdentity(projectRoot);
+    return {
+        version: 1,
+        repoId: identity.repoId,
+        gitRef: identity.gitRef,
+        uploadedAt: Date.now(),
+        uploadedBy: session.email,
+        graph,
+        symbols: await cgDir.readSymbols(),
+        arch: await cgDir.readArch(),
+        meta: await cgDir.readMeta(),
+        patterns: await cgDir.readPatterns(),
+    };
+}
+export async function applyBundleToCg(cgDir, bundle) {
+    await cgDir.writeGraph(bundle.graph);
+    await cgDir.writeSymbols(bundle.symbols);
+    if (bundle.arch)
+        await cgDir.writeArch(bundle.arch);
+    if (bundle.meta)
+        await cgDir.writeMeta(bundle.meta);
+    if (bundle.patterns)
+        await cgDir.writePatterns(bundle.patterns);
+}
+export async function readSyncMeta(cgDir) {
+    const path = join(cgDir.getPath(), 'sync-meta.json');
+    if (!existsSync(path))
+        return null;
+    try {
+        return JSON.parse(await readFile(path, 'utf-8'));
+    }
+    catch {
+        return null;
+    }
+}
+export async function writeSyncMeta(cgDir, meta) {
+    const path = join(cgDir.getPath(), 'sync-meta.json');
+    await writeFile(path, JSON.stringify(meta, null, 2), 'utf-8');
+}
+export async function syncPush(cgDir, projectRoot, session) {
+    const bundle = await buildBundleFromCg(cgDir, projectRoot, session);
+    if (!bundle) {
+        throw new Error('No local graph. Run cxgrd scan first.');
+    }
+    await pushGraph(session, bundle);
+    await writeSyncMeta(cgDir, {
+        repoId: bundle.repoId,
+        gitRef: bundle.gitRef,
+        lastPushedAt: bundle.uploadedAt,
+        remoteUploadedAt: bundle.uploadedAt,
+    });
+    return bundle;
+}
+export async function syncPull(cgDir, projectRoot, session) {
+    const identity = resolveRepoIdentity(projectRoot);
+    const remote = await pullGraph(session, identity.repoId, identity.gitRef);
+    if (!remote) {
+        return null;
+    }
+    await applyBundleToCg(cgDir, remote);
+    await writeSyncMeta(cgDir, {
+        repoId: identity.repoId,
+        gitRef: identity.gitRef,
+        lastPulledAt: Date.now(),
+        remoteUploadedAt: remote.uploadedAt,
+    });
+    return remote;
+}
+//# sourceMappingURL=graph-sync.js.map

package/dist/team/graph-sync.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"graph-sync.js","sourceRoot":"","sources":["../../src/team/graph-sync.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAC5B,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAC;AAClD,OAAO,EAAE,UAAU,EAAE,MAAM,IAAI,CAAC;AAIhC,OAAO,EAAE,mBAAmB,EAAE,MAAM,iBAAiB,CAAC;AACtD,OAAO,EAAE,SAAS,EAAE,SAAS,EAAE,MAAM,gBAAgB,CAAC;AAEtD,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,KAAkB,EAClB,WAAmB,EACnB,OAAsB;IAEtB,MAAM,KAAK,GAAG,MAAM,KAAK,CAAC,SAAS,EAAE,CAAC;IACtC,IAAI,CAAC,KAAK;QAAE,OAAO,IAAI,CAAC;IAExB,MAAM,QAAQ,GAAG,mBAAmB,CAAC,WAAW,CAAC,CAAC;IAElD,OAAO;QACL,OAAO,EAAE,CAAC;QACV,MAAM,EAAE,QAAQ,CAAC,MAAM;QACvB,MAAM,EAAE,QAAQ,CAAC,MAAM;QACvB,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE;QACtB,UAAU,EAAE,OAAO,CAAC,KAAK;QACzB,KAAK;QACL,OAAO,EAAE,MAAM,KAAK,CAAC,WAAW,EAAE;QAClC,IAAI,EAAE,MAAM,KAAK,CAAC,QAAQ,EAAE;QAC5B,IAAI,EAAE,MAAM,KAAK,CAAC,QAAQ,EAAE;QAC5B,QAAQ,EAAE,MAAM,KAAK,CAAC,YAAY,EAAE;KACrC,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,KAAkB,EAAE,MAAmB;IAC3E,MAAM,KAAK,CAAC,UAAU,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IACrC,MAAM,KAAK,CAAC,YAAY,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IACzC,IAAI,MAAM,CAAC,IAAI;QAAE,MAAM,KAAK,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IACpD,IAAI,MAAM,CAAC,IAAI;QAAE,MAAM,KAAK,CAAC,SAAS,CAAC,MAAM,CAAC,IAAc,CAAC,CAAC;IAC9D,IAAI,MAAM,CAAC,QAAQ;QAAE,MAAM,KAAK,CAAC,aAAa,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;AAClE,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,KAAkB;IACnD,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE,EAAE,gBAAgB,CAAC,CAAC;IACrD,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IACnC,IAAI,CAAC;QACH,OAAO,IAAI,CAAC,KAAK,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC,CAAa,CAAC;IAC/D,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,KAAkB,EAAE,IAAc;IACpE,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE,EAAE,gBAAgB,CAAC,CAAC;IACrD,MAAM,SAAS,CAAC,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC;AAChE,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,QAAQ,CAC5B,KAAkB,EAClB,WAAmB,EACnB,OAAsB;IAEtB,MAAM,MAAM,GAAG,MAAM,iBAAiB,CAAC,KAAK,EAAE,WAAW,EAAE,OAAO,CAAC,CAAC;IACpE,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,MAAM,IAAI,KAAK,CAAC,uCAAuC,CAAC,CAAC;IAC3D,CAAC;IAED,MAAM,SAAS,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;IAEjC,MAAM,aAAa,CAAC,KAAK,EAAE;QACzB,MAAM,EAAE,MAAM,CAAC,MAAM;QACrB,MAAM,EAAE,MAAM,CAAC,MAAM;QACrB,YAAY,EAAE,MAAM,CAAC,UAAU;QAC/B,gBAAgB,EAAE,MAAM,CAAC,UAAU;KACpC,CAAC,CAAC;IAEH,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,QAAQ,CAC5B,KAAkB,EAClB,WAAmB,EACnB,OAAsB;IAEtB,MAAM,QAAQ,GAAG,mBAAmB,CAAC,WAAW,CAAC,CAAC;IAClD,MAAM,MAAM,GAAG,MAAM,SAAS,CAAC,OAAO,EAAE,QAAQ,CAAC,MAAM,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC;IAE1E,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,OAAO,IAAI,CAAC;IACd,CAAC;IAED,MAAM,eAAe,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;IAErC,MAAM,aAAa,CAAC,KAAK,EAAE;QACzB,MAAM,EAAE,QAAQ,CAAC,MAAM;QACvB,MAAM,EAAE,QAAQ,CAAC,MAAM;QACvB,YAAY,EAAE,IAAI,CAAC,GAAG,EAAE;QACxB,gBAAgB,EAAE,MAAM,CAAC,UAAU;KACpC,CAAC,CAAC;IAEH,OAAO,MAAM,CAAC;AAChB,CAAC"}

package/dist/team/policy-cache.d.ts

@@ -0,0 +1,7 @@
+import type { CgDirectory } from '../cg-directory';
+import type { OrgPolicyDocument } from './types';
+import type { ActiveSession } from '../auth/auth-session';
+export declare function refreshOrgPolicyCache(cgDir: CgDirectory, session: ActiveSession): Promise<OrgPolicyDocument>;
+export declare function readCachedOrgPolicy(cgDir: CgDirectory): Promise<OrgPolicyDocument | null>;
+export declare function getOrgPolicy(cgDir: CgDirectory, session: ActiveSession, refresh?: boolean): Promise<OrgPolicyDocument>;
+//# sourceMappingURL=policy-cache.d.ts.map

package/dist/team/policy-cache.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"policy-cache.d.ts","sourceRoot":"","sources":["../../src/team/policy-cache.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,iBAAiB,CAAC;AACnD,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,SAAS,CAAC;AAEjD,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AAE1D,wBAAsB,qBAAqB,CACzC,KAAK,EAAE,WAAW,EAClB,OAAO,EAAE,aAAa,GACrB,OAAO,CAAC,iBAAiB,CAAC,CAM5B;AAED,wBAAsB,mBAAmB,CAAC,KAAK,EAAE,WAAW,GAAG,OAAO,CAAC,iBAAiB,GAAG,IAAI,CAAC,CAQ/F;AAED,wBAAsB,YAAY,CAChC,KAAK,EAAE,WAAW,EAClB,OAAO,EAAE,aAAa,EACtB,OAAO,UAAQ,GACd,OAAO,CAAC,iBAAiB,CAAC,CAM5B"}

package/dist/team/policy-cache.js

@@ -0,0 +1,31 @@
+import { readFile, writeFile, mkdir } from 'fs/promises';
+import { join } from 'path';
+import { existsSync } from 'fs';
+import { fetchOrgPolicy } from './cloud-client';
+export async function refreshOrgPolicyCache(cgDir, session) {
+    const policy = await fetchOrgPolicy(session);
+    const path = join(cgDir.getPath(), 'org-policy.json');
+    await mkdir(cgDir.getPath(), { recursive: true });
+    await writeFile(path, JSON.stringify(policy, null, 2), 'utf-8');
+    return policy;
+}
+export async function readCachedOrgPolicy(cgDir) {
+    const path = join(cgDir.getPath(), 'org-policy.json');
+    if (!existsSync(path))
+        return null;
+    try {
+        return JSON.parse(await readFile(path, 'utf-8'));
+    }
+    catch {
+        return null;
+    }
+}
+export async function getOrgPolicy(cgDir, session, refresh = false) {
+    if (!refresh) {
+        const cached = await readCachedOrgPolicy(cgDir);
+        if (cached)
+            return cached;
+    }
+    return refreshOrgPolicyCache(cgDir, session);
+}
+//# sourceMappingURL=policy-cache.js.map

package/dist/team/policy-cache.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"policy-cache.js","sourceRoot":"","sources":["../../src/team/policy-cache.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,KAAK,EAAE,MAAM,aAAa,CAAC;AACzD,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAC5B,OAAO,EAAE,UAAU,EAAE,MAAM,IAAI,CAAC;AAGhC,OAAO,EAAE,cAAc,EAAE,MAAM,gBAAgB,CAAC;AAGhD,MAAM,CAAC,KAAK,UAAU,qBAAqB,CACzC,KAAkB,EAClB,OAAsB;IAEtB,MAAM,MAAM,GAAG,MAAM,cAAc,CAAC,OAAO,CAAC,CAAC;IAC7C,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE,EAAE,iBAAiB,CAAC,CAAC;IACtD,MAAM,KAAK,CAAC,KAAK,CAAC,OAAO,EAAE,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAClD,MAAM,SAAS,CAAC,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC;IAChE,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,mBAAmB,CAAC,KAAkB;IAC1D,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE,EAAE,iBAAiB,CAAC,CAAC;IACtD,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IACnC,IAAI,CAAC;QACH,OAAO,IAAI,CAAC,KAAK,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC,CAAsB,CAAC;IACxE,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,YAAY,CAChC,KAAkB,EAClB,OAAsB,EACtB,OAAO,GAAG,KAAK;IAEf,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,MAAM,MAAM,GAAG,MAAM,mBAAmB,CAAC,KAAK,CAAC,CAAC;QAChD,IAAI,MAAM;YAAE,OAAO,MAAM,CAAC;IAC5B,CAAC;IACD,OAAO,qBAAqB,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;AAC/C,CAAC"}

package/dist/team/policy-engine.d.ts

@@ -0,0 +1,3 @@
+import type { OrgPolicyDocument, OrgRole, PolicyEvaluation } from './types';
+export declare function evaluateOrgPolicy(riskScore: number, riskLevel: string, role: OrgRole, policy: OrgPolicyDocument): PolicyEvaluation;
+//# sourceMappingURL=policy-engine.d.ts.map

package/dist/team/policy-engine.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"policy-engine.d.ts","sourceRoot":"","sources":["../../src/team/policy-engine.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,iBAAiB,EAAE,OAAO,EAAE,gBAAgB,EAAE,MAAM,SAAS,CAAC;AAE5E,wBAAgB,iBAAiB,CAC/B,SAAS,EAAE,MAAM,EACjB,SAAS,EAAE,MAAM,EACjB,IAAI,EAAE,OAAO,EACb,MAAM,EAAE,iBAAiB,GACxB,gBAAgB,CAqClB"}

package/dist/team/policy-engine.js

@@ -0,0 +1,35 @@
+export function evaluateOrgPolicy(riskScore, riskLevel, role, policy) {
+    const rolePolicy = policy.roles[role] || policy.roles.member;
+    const mergeThreshold = policy.merge.blockIfBlastRadiusAbove;
+    const roleThreshold = rolePolicy.maxBlastRadius;
+    const effectiveThreshold = Math.min(mergeThreshold, roleThreshold);
+    const normalizedLevel = riskLevel.toLowerCase();
+    if (rolePolicy.blockOnRiskLevels.includes(normalizedLevel)) {
+        return {
+            allowed: false,
+            reason: `Org policy blocks commits when risk level is ${normalizedLevel} for role "${role}"`,
+            riskScore,
+            riskLevel,
+            thresholdUsed: effectiveThreshold,
+            role,
+        };
+    }
+    if (riskScore > effectiveThreshold) {
+        return {
+            allowed: false,
+            reason: `Blast radius score ${riskScore} exceeds org threshold ${effectiveThreshold} (role: ${role})`,
+            riskScore,
+            riskLevel,
+            thresholdUsed: effectiveThreshold,
+            role,
+        };
+    }
+    return {
+        allowed: true,
+        riskScore,
+        riskLevel,
+        thresholdUsed: effectiveThreshold,
+        role,
+    };
+}
+//# sourceMappingURL=policy-engine.js.map

package/dist/team/policy-engine.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"policy-engine.js","sourceRoot":"","sources":["../../src/team/policy-engine.ts"],"names":[],"mappings":"AAEA,MAAM,UAAU,iBAAiB,CAC/B,SAAiB,EACjB,SAAiB,EACjB,IAAa,EACb,MAAyB;IAEzB,MAAM,UAAU,GAAG,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC;IAC7D,MAAM,cAAc,GAAG,MAAM,CAAC,KAAK,CAAC,uBAAuB,CAAC;IAC5D,MAAM,aAAa,GAAG,UAAU,CAAC,cAAc,CAAC;IAChD,MAAM,kBAAkB,GAAG,IAAI,CAAC,GAAG,CAAC,cAAc,EAAE,aAAa,CAAC,CAAC;IAEnE,MAAM,eAAe,GAAG,SAAS,CAAC,WAAW,EAA4C,CAAC;IAE1F,IAAI,UAAU,CAAC,iBAAiB,CAAC,QAAQ,CAAC,eAAe,CAAC,EAAE,CAAC;QAC3D,OAAO;YACL,OAAO,EAAE,KAAK;YACd,MAAM,EAAE,gDAAgD,eAAe,cAAc,IAAI,GAAG;YAC5F,SAAS;YACT,SAAS;YACT,aAAa,EAAE,kBAAkB;YACjC,IAAI;SACL,CAAC;IACJ,CAAC;IAED,IAAI,SAAS,GAAG,kBAAkB,EAAE,CAAC;QACnC,OAAO;YACL,OAAO,EAAE,KAAK;YACd,MAAM,EAAE,sBAAsB,SAAS,0BAA0B,kBAAkB,WAAW,IAAI,GAAG;YACrG,SAAS;YACT,SAAS;YACT,aAAa,EAAE,kBAAkB;YACjC,IAAI;SACL,CAAC;IACJ,CAAC;IAED,OAAO;QACL,OAAO,EAAE,IAAI;QACb,SAAS;QACT,SAAS;QACT,aAAa,EAAE,kBAAkB;QACjC,IAAI;KACL,CAAC;AACJ,CAAC"}

package/dist/team/policy-engine.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=policy-engine.test.d.ts.map

package/dist/team/policy-engine.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"policy-engine.test.d.ts","sourceRoot":"","sources":["../../src/team/policy-engine.test.ts"],"names":[],"mappings":""}

package/dist/team/policy-engine.test.js

@@ -0,0 +1,29 @@
+import { describe, it } from 'node:test';
+import assert from 'node:assert/strict';
+import { evaluateOrgPolicy } from './policy-engine';
+const policy = {
+    version: 1,
+    orgId: 'org_test',
+    defaultMaxBlastRadius: 100,
+    roles: {
+        member: { maxBlastRadius: 85, blockOnRiskLevels: ['critical'] },
+        lead: { maxBlastRadius: 70, blockOnRiskLevels: ['critical', 'high'] },
+        admin: { maxBlastRadius: 100, blockOnRiskLevels: [] },
+    },
+    merge: { blockIfBlastRadiusAbove: 80, requireCheckPass: false },
+};
+describe('evaluateOrgPolicy', () => {
+    it('blocks member when score exceeds merge threshold', () => {
+        const r = evaluateOrgPolicy(90, 'medium', 'member', policy);
+        assert.equal(r.allowed, false);
+    });
+    it('allows member below threshold', () => {
+        const r = evaluateOrgPolicy(50, 'low', 'member', policy);
+        assert.equal(r.allowed, true);
+    });
+    it('blocks lead on high risk level', () => {
+        const r = evaluateOrgPolicy(40, 'high', 'lead', policy);
+        assert.equal(r.allowed, false);
+    });
+});
+//# sourceMappingURL=policy-engine.test.js.map

package/dist/team/policy-engine.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"policy-engine.test.js","sourceRoot":"","sources":["../../src/team/policy-engine.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,WAAW,CAAC;AACzC,OAAO,MAAM,MAAM,oBAAoB,CAAC;AACxC,OAAO,EAAE,iBAAiB,EAAE,MAAM,iBAAiB,CAAC;AAGpD,MAAM,MAAM,GAAsB;IAChC,OAAO,EAAE,CAAC;IACV,KAAK,EAAE,UAAU;IACjB,qBAAqB,EAAE,GAAG;IAC1B,KAAK,EAAE;QACL,MAAM,EAAE,EAAE,cAAc,EAAE,EAAE,EAAE,iBAAiB,EAAE,CAAC,UAAU,CAAC,EAAE;QAC/D,IAAI,EAAE,EAAE,cAAc,EAAE,EAAE,EAAE,iBAAiB,EAAE,CAAC,UAAU,EAAE,MAAM,CAAC,EAAE;QACrE,KAAK,EAAE,EAAE,cAAc,EAAE,GAAG,EAAE,iBAAiB,EAAE,EAAE,EAAE;KACtD;IACD,KAAK,EAAE,EAAE,uBAAuB,EAAE,EAAE,EAAE,gBAAgB,EAAE,KAAK,EAAE;CAChE,CAAC;AAEF,QAAQ,CAAC,mBAAmB,EAAE,GAAG,EAAE;IACjC,EAAE,CAAC,kDAAkD,EAAE,GAAG,EAAE;QAC1D,MAAM,CAAC,GAAG,iBAAiB,CAAC,EAAE,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,CAAC,CAAC;QAC5D,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;IACjC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,+BAA+B,EAAE,GAAG,EAAE;QACvC,MAAM,CAAC,GAAG,iBAAiB,CAAC,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM,CAAC,CAAC;QACzD,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;IAChC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,gCAAgC,EAAE,GAAG,EAAE;QACxC,MAAM,CAAC,GAAG,iBAAiB,CAAC,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC;QACxD,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;IACjC,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/team/repo-identity.d.ts

@@ -0,0 +1,7 @@
+export interface RepoIdentity {
+    repoId: string;
+    gitRef: string;
+    remoteUrl?: string;
+}
+export declare function resolveRepoIdentity(projectRoot: string): RepoIdentity;
+//# sourceMappingURL=repo-identity.d.ts.map

package/dist/team/repo-identity.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"repo-identity.d.ts","sourceRoot":"","sources":["../../src/team/repo-identity.ts"],"names":[],"mappings":"AAGA,MAAM,WAAW,YAAY;IAC3B,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED,wBAAgB,mBAAmB,CAAC,WAAW,EAAE,MAAM,GAAG,YAAY,CAMrE"}

package/dist/team/repo-identity.js

@@ -0,0 +1,41 @@
+import { createHash } from 'crypto';
+import { execSync } from 'child_process';
+export function resolveRepoIdentity(projectRoot) {
+    const remoteUrl = getGitRemote(projectRoot);
+    const gitRef = getGitRef(projectRoot);
+    const repoId = hashRepoId(remoteUrl || projectRoot);
+    return { repoId, gitRef, remoteUrl };
+}
+function getGitRemote(cwd) {
+    try {
+        const url = execSync('git config --get remote.origin.url', {
+            cwd,
+            encoding: 'utf-8',
+            stdio: ['pipe', 'pipe', 'ignore'],
+        }).trim();
+        return url || undefined;
+    }
+    catch {
+        return undefined;
+    }
+}
+function getGitRef(cwd) {
+    try {
+        const branch = execSync('git rev-parse --abbrev-ref HEAD', {
+            cwd,
+            encoding: 'utf-8',
+            stdio: ['pipe', 'pipe', 'ignore'],
+        }).trim();
+        if (branch && branch !== 'HEAD') {
+            return branch;
+        }
+    }
+    catch {
+        // fall through
+    }
+    return 'local';
+}
+function hashRepoId(seed) {
+    return createHash('sha256').update(seed).digest('hex').slice(0, 16);
+}
+//# sourceMappingURL=repo-identity.js.map

package/dist/team/repo-identity.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"repo-identity.js","sourceRoot":"","sources":["../../src/team/repo-identity.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,QAAQ,CAAC;AACpC,OAAO,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAC;AAQzC,MAAM,UAAU,mBAAmB,CAAC,WAAmB;IACrD,MAAM,SAAS,GAAG,YAAY,CAAC,WAAW,CAAC,CAAC;IAC5C,MAAM,MAAM,GAAG,SAAS,CAAC,WAAW,CAAC,CAAC;IACtC,MAAM,MAAM,GAAG,UAAU,CAAC,SAAS,IAAI,WAAW,CAAC,CAAC;IAEpD,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC;AACvC,CAAC;AAED,SAAS,YAAY,CAAC,GAAW;IAC/B,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,QAAQ,CAAC,oCAAoC,EAAE;YACzD,GAAG;YACH,QAAQ,EAAE,OAAO;YACjB,KAAK,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,QAAQ,CAAC;SAClC,CAAC,CAAC,IAAI,EAAE,CAAC;QACV,OAAO,GAAG,IAAI,SAAS,CAAC;IAC1B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC;AAED,SAAS,SAAS,CAAC,GAAW;IAC5B,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,QAAQ,CAAC,iCAAiC,EAAE;YACzD,GAAG;YACH,QAAQ,EAAE,OAAO;YACjB,KAAK,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,QAAQ,CAAC;SAClC,CAAC,CAAC,IAAI,EAAE,CAAC;QACV,IAAI,MAAM,IAAI,MAAM,KAAK,MAAM,EAAE,CAAC;YAChC,OAAO,MAAM,CAAC;QAChB,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,eAAe;IACjB,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,SAAS,UAAU,CAAC,IAAY;IAC9B,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;AACtE,CAAC"}

package/dist/team/types.d.ts

@@ -0,0 +1,53 @@
+export type OrgRole = 'member' | 'lead' | 'admin';
+export interface GraphBundle {
+    version: 1;
+    repoId: string;
+    gitRef: string;
+    uploadedAt: number;
+    uploadedBy?: string;
+    graph: unknown;
+    symbols: Record<string, string[]>;
+    arch: unknown;
+    meta: unknown;
+    patterns?: unknown;
+}
+export interface SyncMeta {
+    repoId: string;
+    gitRef: string;
+    lastPushedAt?: number;
+    lastPulledAt?: number;
+    remoteUploadedAt?: number;
+}
+export interface OrgPolicyDocument {
+    version: 1;
+    orgId: string;
+    defaultMaxBlastRadius: number;
+    roles: Record<OrgRole, {
+        maxBlastRadius: number;
+        blockOnRiskLevels: Array<'critical' | 'high' | 'medium' | 'low'>;
+    }>;
+    merge: {
+        blockIfBlastRadiusAbove: number;
+        requireCheckPass: boolean;
+    };
+}
+export interface AuditEventPayload {
+    eventType: 'scan' | 'input' | 'check' | 'sync' | 'precommit' | 'prompt';
+    repoId: string;
+    gitRef: string;
+    riskScore?: number;
+    riskLevel?: string;
+    affectedCount?: number;
+    passed?: boolean;
+    summary?: string;
+    metadata?: Record<string, unknown>;
+}
+export interface PolicyEvaluation {
+    allowed: boolean;
+    reason?: string;
+    riskScore: number;
+    riskLevel: string;
+    thresholdUsed: number;
+    role: OrgRole;
+}
+//# sourceMappingURL=types.d.ts.map

package/dist/team/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/team/types.ts"],"names":[],"mappings":"AAAA,MAAM,MAAM,OAAO,GAAG,QAAQ,GAAG,MAAM,GAAG,OAAO,CAAC;AAElD,MAAM,WAAW,WAAW;IAC1B,OAAO,EAAE,CAAC,CAAC;IACX,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;IACf,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,KAAK,EAAE,OAAO,CAAC;IACf,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC;IAClC,IAAI,EAAE,OAAO,CAAC;IACd,IAAI,EAAE,OAAO,CAAC;IACd,QAAQ,CAAC,EAAE,OAAO,CAAC;CACpB;AAED,MAAM,WAAW,QAAQ;IACvB,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;IACf,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,gBAAgB,CAAC,EAAE,MAAM,CAAC;CAC3B;AAED,MAAM,WAAW,iBAAiB;IAChC,OAAO,EAAE,CAAC,CAAC;IACX,KAAK,EAAE,MAAM,CAAC;IACd,qBAAqB,EAAE,MAAM,CAAC;IAC9B,KAAK,EAAE,MAAM,CACX,OAAO,EACP;QACE,cAAc,EAAE,MAAM,CAAC;QACvB,iBAAiB,EAAE,KAAK,CAAC,UAAU,GAAG,MAAM,GAAG,QAAQ,GAAG,KAAK,CAAC,CAAC;KAClE,CACF,CAAC;IACF,KAAK,EAAE;QACL,uBAAuB,EAAE,MAAM,CAAC;QAChC,gBAAgB,EAAE,OAAO,CAAC;KAC3B,CAAC;CACH;AAED,MAAM,WAAW,iBAAiB;IAChC,SAAS,EAAE,MAAM,GAAG,OAAO,GAAG,OAAO,GAAG,MAAM,GAAG,WAAW,GAAG,QAAQ,CAAC;IACxE,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACpC;AAED,MAAM,WAAW,gBAAgB;IAC/B,OAAO,EAAE,OAAO,CAAC;IACjB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,aAAa,EAAE,MAAM,CAAC;IACtB,IAAI,EAAE,OAAO,CAAC;CACf"}

package/dist/team/types.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=types.js.map

package/dist/team/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../src/team/types.ts"],"names":[],"mappings":""}

package/dist/toolchain/probe.d.ts

@@ -0,0 +1,9 @@
+import type { CompilerLanguage, DoctorReport, ToolProbe } from './types';
+export declare function probeRuntime(): Promise<ToolProbe[]>;
+export declare function toolReadyForLanguage(probes: ToolProbe[], language: CompilerLanguage): boolean;
+export declare function evaluateStrictReadiness(languages: CompilerLanguage[], probes: ToolProbe[]): {
+    ready: boolean;
+    blockers: string[];
+};
+export declare function buildDoctorReport(projectPath?: string): Promise<DoctorReport>;
+//# sourceMappingURL=probe.d.ts.map

package/dist/toolchain/probe.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"probe.d.ts","sourceRoot":"","sources":["../../src/toolchain/probe.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,gBAAgB,EAAE,YAAY,EAAwB,SAAS,EAAE,MAAM,SAAS,CAAC;AAM/F,wBAAsB,YAAY,IAAI,OAAO,CAAC,SAAS,EAAE,CAAC,CAkDzD;AAED,wBAAgB,oBAAoB,CAAC,MAAM,EAAE,SAAS,EAAE,EAAE,QAAQ,EAAE,gBAAgB,GAAG,OAAO,CAS7F;AAED,wBAAgB,uBAAuB,CACrC,SAAS,EAAE,gBAAgB,EAAE,EAC7B,MAAM,EAAE,SAAS,EAAE,GAClB;IAAE,KAAK,EAAE,OAAO,CAAC;IAAC,QAAQ,EAAE,MAAM,EAAE,CAAA;CAAE,CAmBxC;AAUD,wBAAsB,iBAAiB,CAAC,WAAW,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,YAAY,CAAC,CA2CnF"}

package/dist/toolchain/probe.js

@@ -0,0 +1,123 @@
+import ts from 'typescript';
+import { commandExists } from '../check/run-command';
+import { detectProjectCompilerNeeds } from './project-languages';
+import { CgDirectory } from '../cg-directory';
+const MIN_NODE_MAJOR = 18;
+export async function probeRuntime() {
+    const probes = [];
+    const nodeMajor = Number.parseInt(process.versions.node.split('.')[0] ?? '0', 10);
+    probes.push({
+        name: 'Node.js',
+        status: nodeMajor >= MIN_NODE_MAJOR ? 'ok' : 'missing',
+        detail: nodeMajor >= MIN_NODE_MAJOR
+            ? `v${process.versions.node} (required >=${MIN_NODE_MAJOR})`
+            : `v${process.versions.node} — upgrade to Node ${MIN_NODE_MAJOR}+`,
+        requiredForCxgrd: true,
+        installHint: 'https://nodejs.org/',
+    });
+    const hasGit = await commandExists('git');
+    probes.push({
+        name: 'Git',
+        status: hasGit ? 'ok' : 'warning',
+        detail: hasGit ? 'available (for --staged / pre-commit hooks)' : 'not on PATH — scoped checks need git',
+        requiredForCxgrd: false,
+        installHint: hasGit ? undefined : 'https://git-scm.com/',
+    });
+    probes.push({
+        name: 'TypeScript (bundled)',
+        status: 'ok',
+        detail: `typescript@${ts.version} ships with cxgrd — no global tsc required`,
+        requiredForCxgrd: false,
+    });
+    const hasPyright = await commandExists('pyright');
+    probes.push({
+        name: 'Pyright',
+        status: hasPyright ? 'ok' : 'missing',
+        detail: hasPyright ? 'on PATH' : 'not on PATH',
+        installHint: 'pip install pyright',
+        requiredForCxgrd: false,
+    });
+    const hasCargo = await commandExists('cargo');
+    probes.push({
+        name: 'Cargo (Rust)',
+        status: hasCargo ? 'ok' : 'missing',
+        detail: hasCargo ? 'on PATH' : 'not on PATH',
+        installHint: 'https://rustup.rs/',
+        requiredForCxgrd: false,
+    });
+    return probes;
+}
+export function toolReadyForLanguage(probes, language) {
+    switch (language) {
+        case 'typescript':
+            return probes.find((p) => p.name.startsWith('TypeScript'))?.status === 'ok';
+        case 'python':
+            return probes.find((p) => p.name === 'Pyright')?.status === 'ok';
+        case 'rust':
+            return probes.find((p) => p.name.startsWith('Cargo'))?.status === 'ok';
+    }
+}
+export function evaluateStrictReadiness(languages, probes) {
+    const blockers = [];
+    for (const lang of languages) {
+        if (!toolReadyForLanguage(probes, lang)) {
+            const probe = probes.find((p) => lang === 'typescript'
+                ? p.name.startsWith('TypeScript')
+                : lang === 'python'
+                    ? p.name === 'Pyright'
+                    : p.name.startsWith('Cargo'));
+            blockers.push(`${lang}: ${probe?.installHint ? `install via ${probe.installHint}` : probe?.detail || 'tool missing'}`);
+        }
+    }
+    return { ready: blockers.length === 0, blockers };
+}
+function languagesFromNeeds(needs) {
+    const langs = [];
+    if (needs.typescript.count > 0)
+        langs.push('typescript');
+    if (needs.python.count > 0)
+        langs.push('python');
+    if (needs.rust.count > 0)
+        langs.push('rust');
+    return langs;
+}
+export async function buildDoctorReport(projectPath) {
+    const probes = await probeRuntime();
+    const blockers = [];
+    const nodeProbe = probes.find((p) => p.name === 'Node.js');
+    if (nodeProbe?.status !== 'ok') {
+        blockers.push(nodeProbe?.detail || 'Node.js version too old');
+    }
+    let projectNeeds;
+    let graphPresent = false;
+    let metaLanguages;
+    let readyForStrictCheck = true;
+    if (projectPath) {
+        const cgDir = new CgDirectory(projectPath);
+        graphPresent = (await cgDir.readGraph()) !== null;
+        const meta = await cgDir.readMeta();
+        metaLanguages = meta?.languages;
+        projectNeeds = await detectProjectCompilerNeeds(projectPath);
+        const languages = languagesFromNeeds(projectNeeds);
+        const strictEval = evaluateStrictReadiness(languages, probes);
+        readyForStrictCheck = strictEval.ready && graphPresent;
+        blockers.push(...strictEval.blockers);
+        if (!graphPresent) {
+            blockers.push('No .cg/graph.json — run `cxgrd scan` first');
+            readyForStrictCheck = false;
+        }
+    }
+    else {
+        readyForStrictCheck = nodeProbe?.status === 'ok';
+    }
+    return {
+        probes,
+        projectPath,
+        projectNeeds,
+        graphPresent,
+        metaLanguages,
+        readyForStrictCheck,
+        blockers: [...new Set(blockers)],
+    };
+}
+//# sourceMappingURL=probe.js.map

package/dist/toolchain/probe.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"probe.js","sourceRoot":"","sources":["../../src/toolchain/probe.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,YAAY,CAAC;AAC5B,OAAO,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AAErD,OAAO,EAAE,0BAA0B,EAAE,MAAM,qBAAqB,CAAC;AACjE,OAAO,EAAE,WAAW,EAAE,MAAM,iBAAiB,CAAC;AAE9C,MAAM,cAAc,GAAG,EAAE,CAAC;AAE1B,MAAM,CAAC,KAAK,UAAU,YAAY;IAChC,MAAM,MAAM,GAAgB,EAAE,CAAC;IAE/B,MAAM,SAAS,GAAG,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,GAAG,EAAE,EAAE,CAAC,CAAC;IAClF,MAAM,CAAC,IAAI,CAAC;QACV,IAAI,EAAE,SAAS;QACf,MAAM,EAAE,SAAS,IAAI,cAAc,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS;QACtD,MAAM,EACJ,SAAS,IAAI,cAAc;YACzB,CAAC,CAAC,IAAI,OAAO,CAAC,QAAQ,CAAC,IAAI,gBAAgB,cAAc,GAAG;YAC5D,CAAC,CAAC,IAAI,OAAO,CAAC,QAAQ,CAAC,IAAI,sBAAsB,cAAc,GAAG;QACtE,gBAAgB,EAAE,IAAI;QACtB,WAAW,EAAE,qBAAqB;KACnC,CAAC,CAAC;IAEH,MAAM,MAAM,GAAG,MAAM,aAAa,CAAC,KAAK,CAAC,CAAC;IAC1C,MAAM,CAAC,IAAI,CAAC;QACV,IAAI,EAAE,KAAK;QACX,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS;QACjC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC,6CAA6C,CAAC,CAAC,CAAC,sCAAsC;QACvG,gBAAgB,EAAE,KAAK;QACvB,WAAW,EAAE,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,sBAAsB;KACzD,CAAC,CAAC;IAEH,MAAM,CAAC,IAAI,CAAC;QACV,IAAI,EAAE,sBAAsB;QAC5B,MAAM,EAAE,IAAI;QACZ,MAAM,EAAE,cAAc,EAAE,CAAC,OAAO,4CAA4C;QAC5E,gBAAgB,EAAE,KAAK;KACxB,CAAC,CAAC;IAEH,MAAM,UAAU,GAAG,MAAM,aAAa,CAAC,SAAS,CAAC,CAAC;IAClD,MAAM,CAAC,IAAI,CAAC;QACV,IAAI,EAAE,SAAS;QACf,MAAM,EAAE,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS;QACrC,MAAM,EAAE,UAAU,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,aAAa;QAC9C,WAAW,EAAE,qBAAqB;QAClC,gBAAgB,EAAE,KAAK;KACxB,CAAC,CAAC;IAEH,MAAM,QAAQ,GAAG,MAAM,aAAa,CAAC,OAAO,CAAC,CAAC;IAC9C,MAAM,CAAC,IAAI,CAAC;QACV,IAAI,EAAE,cAAc;QACpB,MAAM,EAAE,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS;QACnC,MAAM,EAAE,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,aAAa;QAC5C,WAAW,EAAE,oBAAoB;QACjC,gBAAgB,EAAE,KAAK;KACxB,CAAC,CAAC;IAEH,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,MAAM,UAAU,oBAAoB,CAAC,MAAmB,EAAE,QAA0B;IAClF,QAAQ,QAAQ,EAAE,CAAC;QACjB,KAAK,YAAY;YACf,OAAO,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,YAAY,CAAC,CAAC,EAAE,MAAM,KAAK,IAAI,CAAC;QAC9E,KAAK,QAAQ;YACX,OAAO,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,SAAS,CAAC,EAAE,MAAM,KAAK,IAAI,CAAC;QACnE,KAAK,MAAM;YACT,OAAO,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,EAAE,MAAM,KAAK,IAAI,CAAC;IAC3E,CAAC;AACH,CAAC;AAED,MAAM,UAAU,uBAAuB,CACrC,SAA6B,EAC7B,MAAmB;IAEnB,MAAM,QAAQ,GAAa,EAAE,CAAC;IAE9B,KAAK,MAAM,IAAI,IAAI,SAAS,EAAE,CAAC;QAC7B,IAAI,CAAC,oBAAoB,CAAC,MAAM,EAAE,IAAI,CAAC,EAAE,CAAC;YACxC,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAC9B,IAAI,KAAK,YAAY;gBACnB,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,YAAY,CAAC;gBACjC,CAAC,CAAC,IAAI,KAAK,QAAQ;oBACjB,CAAC,CAAC,CAAC,CAAC,IAAI,KAAK,SAAS;oBACtB,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,CACjC,CAAC;YACF,QAAQ,CAAC,IAAI,CACX,GAAG,IAAI,KAAK,KAAK,EAAE,WAAW,CAAC,CAAC,CAAC,eAAe,KAAK,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,KAAK,EAAE,MAAM,IAAI,cAAc,EAAE,CACxG,CAAC;QACJ,CAAC;IACH,CAAC;IAED,OAAO,EAAE,KAAK,EAAE,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,QAAQ,EAAE,CAAC;AACpD,CAAC;AAED,SAAS,kBAAkB,CAAC,KAA2B;IACrD,MAAM,KAAK,GAAuB,EAAE,CAAC;IACrC,IAAI,KAAK,CAAC,UAAU,CAAC,KAAK,GAAG,CAAC;QAAE,KAAK,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;IACzD,IAAI,KAAK,CAAC,MAAM,CAAC,KAAK,GAAG,CAAC;QAAE,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IACjD,IAAI,KAAK,CAAC,IAAI,CAAC,KAAK,GAAG,CAAC;QAAE,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IAC7C,OAAO,KAAK,CAAC;AACf,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,iBAAiB,CAAC,WAAoB;IAC1D,MAAM,MAAM,GAAG,MAAM,YAAY,EAAE,CAAC;IACpC,MAAM,QAAQ,GAAa,EAAE,CAAC;IAE9B,MAAM,SAAS,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC;IAC3D,IAAI,SAAS,EAAE,MAAM,KAAK,IAAI,EAAE,CAAC;QAC/B,QAAQ,CAAC,IAAI,CAAC,SAAS,EAAE,MAAM,IAAI,yBAAyB,CAAC,CAAC;IAChE,CAAC;IAED,IAAI,YAA8C,CAAC;IACnD,IAAI,YAAY,GAAG,KAAK,CAAC;IACzB,IAAI,aAAmC,CAAC;IACxC,IAAI,mBAAmB,GAAG,IAAI,CAAC;IAE/B,IAAI,WAAW,EAAE,CAAC;QAChB,MAAM,KAAK,GAAG,IAAI,WAAW,CAAC,WAAW,CAAC,CAAC;QAC3C,YAAY,GAAG,CAAC,MAAM,KAAK,CAAC,SAAS,EAAE,CAAC,KAAK,IAAI,CAAC;QAClD,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,QAAQ,EAAE,CAAC;QACpC,aAAa,GAAG,IAAI,EAAE,SAAS,CAAC;QAEhC,YAAY,GAAG,MAAM,0BAA0B,CAAC,WAAW,CAAC,CAAC;QAC7D,MAAM,SAAS,GAAG,kBAAkB,CAAC,YAAY,CAAC,CAAC;QACnD,MAAM,UAAU,GAAG,uBAAuB,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;QAC9D,mBAAmB,GAAG,UAAU,CAAC,KAAK,IAAI,YAAY,CAAC;QACvD,QAAQ,CAAC,IAAI,CAAC,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC;QAEtC,IAAI,CAAC,YAAY,EAAE,CAAC;YAClB,QAAQ,CAAC,IAAI,CAAC,4CAA4C,CAAC,CAAC;YAC5D,mBAAmB,GAAG,KAAK,CAAC;QAC9B,CAAC;IACH,CAAC;SAAM,CAAC;QACN,mBAAmB,GAAG,SAAS,EAAE,MAAM,KAAK,IAAI,CAAC;IACnD,CAAC;IAED,OAAO;QACL,MAAM;QACN,WAAW;QACX,YAAY;QACZ,YAAY;QACZ,aAAa;QACb,mBAAmB;QACnB,QAAQ,EAAE,CAAC,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,CAAC;KACjC,CAAC;AACJ,CAAC"}

package/dist/toolchain/project-languages.d.ts

@@ -0,0 +1,4 @@
+import type { CompilerLanguage, ProjectCompilerNeeds } from './types';
+export declare function getCompilerLanguagesInScope(projectRoot: string, scopeFiles: Set<string> | null): Promise<CompilerLanguage[]>;
+export declare function detectProjectCompilerNeeds(projectRoot: string): Promise<ProjectCompilerNeeds>;
+//# sourceMappingURL=project-languages.d.ts.map

package/dist/toolchain/project-languages.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"project-languages.d.ts","sourceRoot":"","sources":["../../src/toolchain/project-languages.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,gBAAgB,EAAE,oBAAoB,EAAE,MAAM,SAAS,CAAC;AAEtE,wBAAsB,2BAA2B,CAC/C,WAAW,EAAE,MAAM,EACnB,UAAU,EAAE,GAAG,CAAC,MAAM,CAAC,GAAG,IAAI,GAC7B,OAAO,CAAC,gBAAgB,EAAE,CAAC,CAoB7B;AAED,wBAAsB,0BAA0B,CAC9C,WAAW,EAAE,MAAM,GAClB,OAAO,CAAC,oBAAoB,CAAC,CAmB/B"}

package/dist/toolchain/project-languages.js

@@ -0,0 +1,41 @@
+import { relative } from 'path';
+import { discoverPythonProjects, discoverRustWorkspaces, discoverTypeScriptProjects, projectOverlapsScope, } from '../check/project-tooling';
+export async function getCompilerLanguagesInScope(projectRoot, scopeFiles) {
+    const langs = new Set();
+    for (const project of await discoverTypeScriptProjects(projectRoot)) {
+        if (projectOverlapsScope(project.rootDir, projectRoot, scopeFiles)) {
+            langs.add('typescript');
+        }
+    }
+    for (const project of await discoverPythonProjects(projectRoot)) {
+        if (projectOverlapsScope(project.rootDir, projectRoot, scopeFiles)) {
+            langs.add('python');
+        }
+    }
+    for (const workspace of await discoverRustWorkspaces(projectRoot)) {
+        if (projectOverlapsScope(workspace.rootDir, projectRoot, scopeFiles)) {
+            langs.add('rust');
+        }
+    }
+    return [...langs];
+}
+export async function detectProjectCompilerNeeds(projectRoot) {
+    const ts = await discoverTypeScriptProjects(projectRoot);
+    const py = await discoverPythonProjects(projectRoot);
+    const rust = await discoverRustWorkspaces(projectRoot);
+    return {
+        typescript: {
+            count: ts.length,
+            paths: ts.map((p) => relative(projectRoot, p.configPath).replace(/\\/g, '/') || '.'),
+        },
+        python: {
+            count: py.length,
+            paths: py.map((p) => relative(projectRoot, p.rootDir).replace(/\\/g, '/') || '.'),
+        },
+        rust: {
+            count: rust.length,
+            paths: rust.map((w) => relative(projectRoot, w.manifestPath).replace(/\\/g, '/') || '.'),
+        },
+    };
+}
+//# sourceMappingURL=project-languages.js.map

package/dist/toolchain/project-languages.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"project-languages.js","sourceRoot":"","sources":["../../src/toolchain/project-languages.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,MAAM,CAAC;AAChC,OAAO,EACL,sBAAsB,EACtB,sBAAsB,EACtB,0BAA0B,EAC1B,oBAAoB,GACrB,MAAM,0BAA0B,CAAC;AAGlC,MAAM,CAAC,KAAK,UAAU,2BAA2B,CAC/C,WAAmB,EACnB,UAA8B;IAE9B,MAAM,KAAK,GAAG,IAAI,GAAG,EAAoB,CAAC;IAE1C,KAAK,MAAM,OAAO,IAAI,MAAM,0BAA0B,CAAC,WAAW,CAAC,EAAE,CAAC;QACpE,IAAI,oBAAoB,CAAC,OAAO,CAAC,OAAO,EAAE,WAAW,EAAE,UAAU,CAAC,EAAE,CAAC;YACnE,KAAK,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;QAC1B,CAAC;IACH,CAAC;IACD,KAAK,MAAM,OAAO,IAAI,MAAM,sBAAsB,CAAC,WAAW,CAAC,EAAE,CAAC;QAChE,IAAI,oBAAoB,CAAC,OAAO,CAAC,OAAO,EAAE,WAAW,EAAE,UAAU,CAAC,EAAE,CAAC;YACnE,KAAK,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QACtB,CAAC;IACH,CAAC;IACD,KAAK,MAAM,SAAS,IAAI,MAAM,sBAAsB,CAAC,WAAW,CAAC,EAAE,CAAC;QAClE,IAAI,oBAAoB,CAAC,SAAS,CAAC,OAAO,EAAE,WAAW,EAAE,UAAU,CAAC,EAAE,CAAC;YACrE,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QACpB,CAAC;IACH,CAAC;IAED,OAAO,CAAC,GAAG,KAAK,CAAC,CAAC;AACpB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,0BAA0B,CAC9C,WAAmB;IAEnB,MAAM,EAAE,GAAG,MAAM,0BAA0B,CAAC,WAAW,CAAC,CAAC;IACzD,MAAM,EAAE,GAAG,MAAM,sBAAsB,CAAC,WAAW,CAAC,CAAC;IACrD,MAAM,IAAI,GAAG,MAAM,sBAAsB,CAAC,WAAW,CAAC,CAAC;IAEvD,OAAO;QACL,UAAU,EAAE;YACV,KAAK,EAAE,EAAE,CAAC,MAAM;YAChB,KAAK,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,QAAQ,CAAC,WAAW,EAAE,CAAC,CAAC,UAAU,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,IAAI,GAAG,CAAC;SACrF;QACD,MAAM,EAAE;YACN,KAAK,EAAE,EAAE,CAAC,MAAM;YAChB,KAAK,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,QAAQ,CAAC,WAAW,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,IAAI,GAAG,CAAC;SAClF;QACD,IAAI,EAAE;YACJ,KAAK,EAAE,IAAI,CAAC,MAAM;YAClB,KAAK,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,QAAQ,CAAC,WAAW,EAAE,CAAC,CAAC,YAAY,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,IAAI,GAAG,CAAC;SACzF;KACF,CAAC;AACJ,CAAC"}

package/dist/toolchain/types.d.ts

@@ -0,0 +1,32 @@
+export type CompilerLanguage = 'typescript' | 'python' | 'rust';
+export interface ToolProbe {
+    name: string;
+    status: 'ok' | 'missing' | 'warning';
+    detail: string;
+    installHint?: string;
+    requiredForCxgrd: boolean;
+}
+export interface ProjectCompilerNeeds {
+    typescript: {
+        count: number;
+        paths: string[];
+    };
+    python: {
+        count: number;
+        paths: string[];
+    };
+    rust: {
+        count: number;
+        paths: string[];
+    };
+}
+export interface DoctorReport {
+    probes: ToolProbe[];
+    projectPath?: string;
+    projectNeeds?: ProjectCompilerNeeds;
+    graphPresent: boolean;
+    metaLanguages?: string[];
+    readyForStrictCheck: boolean;
+    blockers: string[];
+}
+//# sourceMappingURL=types.d.ts.map

package/dist/toolchain/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/toolchain/types.ts"],"names":[],"mappings":"AAAA,MAAM,MAAM,gBAAgB,GAAG,YAAY,GAAG,QAAQ,GAAG,MAAM,CAAC;AAEhE,MAAM,WAAW,SAAS;IACxB,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,IAAI,GAAG,SAAS,GAAG,SAAS,CAAC;IACrC,MAAM,EAAE,MAAM,CAAC;IACf,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,gBAAgB,EAAE,OAAO,CAAC;CAC3B;AAED,MAAM,WAAW,oBAAoB;IACnC,UAAU,EAAE;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,EAAE,CAAA;KAAE,CAAC;IAC/C,MAAM,EAAE;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,EAAE,CAAA;KAAE,CAAC;IAC3C,IAAI,EAAE;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,EAAE,CAAA;KAAE,CAAC;CAC1C;AAED,MAAM,WAAW,YAAY;IAC3B,MAAM,EAAE,SAAS,EAAE,CAAC;IACpB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,YAAY,CAAC,EAAE,oBAAoB,CAAC;IACpC,YAAY,EAAE,OAAO,CAAC;IACtB,aAAa,CAAC,EAAE,MAAM,EAAE,CAAC;IACzB,mBAAmB,EAAE,OAAO,CAAC;IAC7B,QAAQ,EAAE,MAAM,EAAE,CAAC;CACpB"}

package/dist/toolchain/types.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=types.js.map

package/dist/toolchain/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../src/toolchain/types.ts"],"names":[],"mappings":""}