deepdebug-local-agent 1.0.23 → 1.2.0

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "deepdebug-local-agent",
-  "version": "1.0.23",
+  "version": "1.2.0",
   "description": "DeepDebug Local Agent - AI-powered code debugging assistant",
   "private": false,
   "type": "module",
@@ -41,9 +41,14 @@
     "js-yaml": "^4.1.0",
     "pg": "^8.20.0",
     "pidusage": "^3.0.2",
+    "pino": "^10.3.1",
+    "prom-client": "^15.1.3",
     "properties-reader": "^2.3.0",
     "ssh2": "^1.16.0",
     "strip-ansi": "^7.1.0",
+    "tree-sitter": "^0.22.4",
+    "tree-sitter-swift": "^0.7.1",
+    "typescript": "^5.9.3",
     "unidiff": "^1.0.2",
     "ws": "^8.18.0"
   },
@@ -75,10 +80,10 @@
   "license": "Proprietary",
   "repository": {
     "type": "git",
-    "url": "https://github.com/williambella/deepdebug-local-agent.git"
+    "url": "git+https://github.com/VISIONHAMMER/deepdebug-local-agent.git"
   },
-  "homepage": "https://deepdebug.ai",
+  "homepage": "https://visionhammer.io",
   "bugs": {
-    "url": "https://github.com/williambella/deepdebug-local-agent/issues"
+    "url": "https://github.com/VISIONHAMMER/deepdebug-local-agent/issues"
   }
 }

package/scripts/next-version.mjs

@@ -0,0 +1,75 @@
+#!/usr/bin/env node
+/**
+ * next-version.mjs: semantic version for the automatic npm release.
+ *
+ *   major (X.0.0)  a breaking change: "type!:" subject or a "BREAKING CHANGE:" footer
+ *   minor (0.X.0)  new functionality: a "feat:" commit
+ *   patch (0.0.X)  everything else (fix, perf, refactor, docs, chore, ci, ...)
+ *
+ * Conventional Commits. The highest level among the commits since the last release
+ * tag wins. Merge commits and the CI auto-bump commits ("[skip ci]") are ignored.
+ *
+ * CLI: git log -z --no-merges --format=%B <range> | node scripts/next-version.mjs <base-version>
+ * prints the next version; stderr says which commit decided the bump.
+ */
+import { fileURLToPath } from 'node:url'
+
+const SUBJECT_TYPE = /^([a-z]+)(\([^)]*\))?(!)?:\s/i
+const BREAKING_FOOTER = /^BREAKING[ -]CHANGE:\s/m
+
+/** @param {string} message full commit message (subject + body) */
+export function classify(message) {
+  const text = String(message || '').trim()
+  if (!text) return null
+  const subject = text.split('\n', 1)[0]
+  if (/\[skip ci\]/i.test(subject) || /^Merge /.test(subject)) return null
+  const m = SUBJECT_TYPE.exec(subject)
+  if (BREAKING_FOOTER.test(text) || (m && m[3])) return 'major'
+  if (m && m[1].toLowerCase() === 'feat') return 'minor'
+  return 'patch'
+}
+
+const RANK = { patch: 0, minor: 1, major: 2 }
+
+/** @param {string[]} messages commit messages since the last release */
+export function bumpFor(messages) {
+  let level = 'patch'
+  for (const msg of messages) {
+    const c = classify(msg)
+    if (c && RANK[c] > RANK[level]) level = c
+  }
+  return level
+}
+
+/** @param {string} base X.Y.Z  @param {'major'|'minor'|'patch'} bump */
+export function nextVersion(base, bump) {
+  const parts = String(base).split('.').map(Number)
+  if (parts.length !== 3 || parts.some((n) => !Number.isInteger(n) || n < 0)) {
+    throw new Error(`base version '${base}' is not X.Y.Z`)
+  }
+  const [a, b, c] = parts
+  if (bump === 'major') return `${a + 1}.0.0`
+  if (bump === 'minor') return `${a}.${b + 1}.0`
+  return `${a}.${b}.${c + 1}`
+}
+
+async function main() {
+  const base = process.argv[2]
+  if (!base) {
+    console.error('usage: next-version.mjs <base-version> < commit messages separated by NUL')
+    process.exit(2)
+  }
+  const chunks = []
+  for await (const chunk of process.stdin) chunks.push(chunk)
+  const messages = Buffer.concat(chunks).toString('utf8').split('\0')
+  const bump = bumpFor(messages)
+  console.error(`[next-version] ${messages.filter((m) => classify(m)).length} releasable commit(s) since the last release, bump=${bump}`)
+  console.log(nextVersion(base, bump))
+}
+
+if (process.argv[1] === fileURLToPath(import.meta.url)) {
+  main().catch((e) => {
+    console.error(e.message)
+    process.exit(1)
+  })
+}

package/scripts/upgrade-observability-push.sh

@@ -0,0 +1,227 @@
+#!/usr/bin/env bash
+# Upgrade an installed DeepDebug client observability bundle so that:
+#   1. Alloy also pushes the Docker log stream to VisionHammer
+#      (OTLP/HTTP JSON -> <gateway>/api/v1/webhooks/logs/otlp, Bearer <trigger secret>),
+#      which feeds Live logs and the services list;
+#   2. Alertmanager sends the trigger secret as a Bearer header instead of ?s= in the URL.
+#
+# Safe to re-run (idempotent). Backs up both files, validates the new configs with the
+# same images the stack runs, restarts only alloy + alertmanager, and rolls back on failure.
+#
+# Usage (on the server, as a user that can run docker):
+#   sudo bash upgrade-observability-push.sh            # apply
+#   sudo bash upgrade-observability-push.sh --dry-run  # show what would change
+# Optional env:
+#   INSTALL_DIR=/path/to/deepdebug-observability   (auto-detected otherwise)
+#   GATEWAY_URL=https://api-qa.visionhammer.io     (read from alertmanager.yml otherwise)
+set -euo pipefail
+
+DRY_RUN=0
+[[ "${1:-}" == "--dry-run" ]] && DRY_RUN=1
+
+log()  { printf '\033[1;34m[upgrade]\033[0m %s\n' "$*"; }
+warn() { printf '\033[1;33m[upgrade]\033[0m %s\n' "$*" >&2; }
+die()  { printf '\033[1;31m[upgrade]\033[0m %s\n' "$*" >&2; exit 1; }
+mask() { local s="$1"; printf '%s...%s' "${s:0:8}" "${s: -4}"; }
+
+command -v docker >/dev/null || die "docker not found"
+docker compose version >/dev/null 2>&1 || die "docker compose plugin not found"
+command -v curl >/dev/null || die "curl not found"
+
+# ---------------------------------------------------------------- locate the stack
+find_install_dir() {
+  if [[ -n "${INSTALL_DIR:-}" ]]; then echo "$INSTALL_DIR"; return; fi
+  # 1) the running compose project
+  local cfg
+  cfg=$(docker compose ls --all --format json 2>/dev/null \
+        | tr '{' '\n' | grep '"Name":"deepdebug-observability"' \
+        | sed -n 's/.*"ConfigFiles":"\([^",]*\).*/\1/p' | head -1 || true)
+  if [[ -n "$cfg" && -f "$cfg" ]]; then dirname "$cfg"; return; fi
+  # 2) default provision paths
+  local d
+  for d in "$HOME/.deepdebug/observability/deepdebug-observability" \
+           /root/.deepdebug/observability/deepdebug-observability \
+           /home/*/.deepdebug/observability/deepdebug-observability; do
+    [[ -f "$d/docker-compose.yml" ]] && { echo "$d"; return; }
+  done
+}
+
+DIR=$(find_install_dir || true)
+[[ -n "$DIR" && -f "$DIR/docker-compose.yml" ]] \
+  || die "observability bundle not found; set INSTALL_DIR=/path/to/deepdebug-observability"
+ALLOY="$DIR/alloy/config.alloy"
+AM="$DIR/alertmanager/alertmanager.yml"
+[[ -f "$ALLOY" ]] || die "missing $ALLOY"
+[[ -f "$AM" ]] || die "missing $AM"
+log "bundle: $DIR"
+
+# ---------------------------------------------------------------- secret + gateway
+SECRET=$(grep -oE 'vht_[A-Za-z0-9._-]+' "$AM" | head -1 || true)
+[[ -n "$SECRET" ]] || die "no vht_ trigger secret found in $AM"
+if [[ -z "${GATEWAY_URL:-}" ]]; then
+  GATEWAY_URL=$(grep -oE "https?://[^/'\" ]+" "$AM" | head -1 || true)
+fi
+GATEWAY_URL="${GATEWAY_URL%/}"
+[[ "$GATEWAY_URL" =~ ^https?://[A-Za-z0-9.:-]+$ ]] || die "could not determine GATEWAY_URL (set it explicitly)"
+log "gateway: $GATEWAY_URL   secret: $(mask "$SECRET")"
+case "$GATEWAY_URL" in
+  https://api-qa.visionhammer.io|https://api.visionhammer.io) ;;
+  *) warn "gateway is not api-qa/api.visionhammer.io; the push endpoint only exists on the current gateway." ;;
+esac
+
+# ---------------------------------------------------------------- 1. probe the endpoint
+# An empty OTLP batch authenticates and registers the SELF_HOSTED log source without
+# writing any log line.
+code=$(curl -sS -o /tmp/vh-otlp-probe.$$ -w '%{http_code}' -m 20 \
+  -X POST "$GATEWAY_URL/api/v1/webhooks/logs/otlp" \
+  -H "Authorization: Bearer $SECRET" -H 'Content-Type: application/json' \
+  --data '{"resourceLogs":[]}' || echo 000)
+case "$code" in
+  200) log "push endpoint OK (200)" ;;
+  401) die "push endpoint rejected the secret (401): the trigger source is disabled or the secret changed" ;;
+  404) die "push endpoint not deployed yet on $GATEWAY_URL (404); retry after the gateway deploy" ;;
+  *)   die "push endpoint probe failed (HTTP $code): $(head -c 300 /tmp/vh-otlp-probe.$$ 2>/dev/null)" ;;
+esac
+rm -f /tmp/vh-otlp-probe.$$
+
+# ---------------------------------------------------------------- 2. build new configs
+TMP=$(mktemp -d)
+trap 'rm -rf "$TMP"' EXIT
+cp "$ALLOY" "$TMP/config.alloy"
+cp "$AM" "$TMP/alertmanager.yml"
+
+alloy_changed=0
+if grep -q 'otelcol.exporter.otlphttp "visionhammer"' "$TMP/config.alloy"; then
+  log "alloy: push already configured"
+else
+  # loki.process "default" must also forward to the OTLP receiver.
+  n=$(grep -c 'forward_to = \[loki.write.default.receiver\]' "$TMP/config.alloy" || true)
+  [[ "$n" == "1" ]] || die "alloy config does not look like the stock bundle (expected one 'forward_to = [loki.write.default.receiver]', found $n); edit $ALLOY by hand"
+  sed -i 's|forward_to = \[loki.write.default.receiver\]|forward_to = [loki.write.default.receiver, otelcol.receiver.loki.visionhammer.receiver]|' "$TMP/config.alloy"
+  cat >> "$TMP/config.alloy" <<EOF
+
+// ---- push to VisionHammer: Loki entries -> OTLP logs (labels become attributes) ----
+otelcol.receiver.loki "visionhammer" {
+  output {
+    logs = [otelcol.processor.batch.visionhammer.input]
+  }
+}
+
+otelcol.processor.batch "visionhammer" {
+  send_batch_size     = 500
+  send_batch_max_size = 2000
+  timeout             = "5s"
+  output {
+    logs = [otelcol.exporter.otlphttp.visionhammer.input]
+  }
+}
+
+otelcol.exporter.otlphttp "visionhammer" {
+  client {
+    endpoint    = "$GATEWAY_URL"
+    compression = "gzip"
+    headers     = { "Authorization" = "Bearer $SECRET" }
+  }
+  encoding      = "json"
+  logs_endpoint = "$GATEWAY_URL/api/v1/webhooks/logs/otlp"
+}
+EOF
+  alloy_changed=1
+  log "alloy: push blocks added"
+fi
+
+am_changed=0
+if grep -q 'webhooks/alertmanager?s=' "$TMP/alertmanager.yml"; then
+  # Drop ?s=... from the URL and add http_config.authorization at the same indent
+  # as the url key of that list item.
+  # Each receiver keeps ITS OWN secret (a bundle may post to QA and PROD gateways,
+  # each registered with a different vht_ secret).
+  awk '
+    /webhooks\/alertmanager\?s=/ {
+      match($0, /vht_[A-Za-z0-9._-]+/)
+      secret = substr($0, RSTART, RLENGTH)
+      line = $0
+      sub(/\?s=[^'"'"'" ]*/, "", line)
+      print line
+      match($0, /^[ ]*(- )?/)
+      ind = RLENGTH
+      pad = sprintf("%" ind "s", "")
+      print pad "http_config:"
+      print pad "  authorization:"
+      print pad "    type: Bearer"
+      print pad "    credentials: '"'"'" secret "'"'"'"
+      next
+    }
+    { print }
+  ' "$TMP/alertmanager.yml" > "$TMP/alertmanager.yml.new"
+  mv "$TMP/alertmanager.yml.new" "$TMP/alertmanager.yml"
+  am_changed=1
+  log "alertmanager: secret moved from ?s= to Authorization header"
+else
+  log "alertmanager: already uses header auth (or a custom config); left unchanged"
+fi
+
+if [[ $alloy_changed == 0 && $am_changed == 0 ]]; then
+  log "nothing to do"; exit 0
+fi
+
+# Mask every vht_ secret in printed output, not only the first one.
+mask_all() { sed -E 's/(vht_[A-Za-z0-9]{4})[A-Za-z0-9._-]*([A-Za-z0-9._-]{4})/\1...\2/g'; }
+show_diff() { diff -u "$1" "$2" | mask_all || true; }
+[[ $alloy_changed == 1 ]] && show_diff "$ALLOY" "$TMP/config.alloy"
+[[ $am_changed == 1 ]] && show_diff "$AM" "$TMP/alertmanager.yml"
+
+if [[ $DRY_RUN == 1 ]]; then log "dry run: nothing written"; exit 0; fi
+
+# ---------------------------------------------------------------- 3. validate with the stack's images
+image_of() { grep -E "^\s*image:\s*.*$1" "$DIR/docker-compose.yml" | head -1 | awk '{print $2}'; }
+ALLOY_IMG=$(image_of 'grafana/alloy'); ALLOY_IMG=${ALLOY_IMG:-grafana/alloy:v1.3.1}
+AM_IMG=$(image_of 'prom/alertmanager'); AM_IMG=${AM_IMG:-prom/alertmanager:v0.27.0}
+
+if [[ $alloy_changed == 1 ]]; then
+  docker run --rm -v "$TMP/config.alloy:/c/config.alloy:ro" "$ALLOY_IMG" fmt /c/config.alloy >/dev/null \
+    || die "new alloy config failed validation; nothing changed"
+  log "alloy config valid ($ALLOY_IMG)"
+fi
+if [[ $am_changed == 1 ]]; then
+  docker run --rm --entrypoint amtool -v "$TMP/alertmanager.yml:/c/am.yml:ro" "$AM_IMG" check-config /c/am.yml >/dev/null \
+    || die "new alertmanager config failed validation; nothing changed"
+  log "alertmanager config valid ($AM_IMG)"
+fi
+
+# ---------------------------------------------------------------- 4. apply + restart
+STAMP=$(date +%Y%m%d-%H%M%S)
+cp -p "$ALLOY" "$ALLOY.bak-$STAMP"
+cp -p "$AM" "$AM.bak-$STAMP"
+log "backups: *.bak-$STAMP"
+# Overwrite in place (keeps owner/permissions and the bind-mounted inode semantics on restart).
+cat "$TMP/config.alloy" > "$ALLOY"
+cat "$TMP/alertmanager.yml" > "$AM"
+
+rollback() {
+  warn "rolling back to *.bak-$STAMP"
+  cat "$ALLOY.bak-$STAMP" > "$ALLOY"
+  cat "$AM.bak-$STAMP" > "$AM"
+  (cd "$DIR" && docker compose restart alloy alertmanager >/dev/null 2>&1) || true
+  die "$1"
+}
+
+(cd "$DIR" && docker compose restart alloy alertmanager) || rollback "restart failed"
+
+# ---------------------------------------------------------------- 5. verify
+log "waiting 30s for alloy to ship its first batch..."
+sleep 30
+running=$(cd "$DIR" && docker compose ps --status running --services 2>/dev/null || true)
+grep -qx alloy <<<"$running" || rollback "alloy is not running after the restart"
+grep -qx alertmanager <<<"$running" || rollback "alertmanager is not running after the restart"
+
+errs=$(cd "$DIR" && docker compose logs --since 40s alloy 2>&1 \
+       | grep -iE 'level=error|Exporting failed|permanent error' | grep -i 'visionhammer\|otlphttp' || true)
+if [[ -n "$errs" ]]; then
+  warn "alloy reported export errors:"
+  mask_all <<<"$errs" | tail -5 >&2
+  rollback "alloy cannot push to $GATEWAY_URL"
+fi
+
+log "done. Logs should appear in VisionHammer > Live logs within ~1-2 minutes."
+log "to undo: cp $ALLOY.bak-$STAMP $ALLOY; cp $AM.bak-$STAMP $AM; (cd $DIR && docker compose restart alloy alertmanager)"

package/src/ai-engine.js

@@ -1,6 +1,6 @@
 // ============================================
 // 🧠 AI VIBE CODING ENGINE
-// Ficheiro: ai-engine.js
+// File: ai-engine.js
 // Coloca em: ~/deepdebug-local-agent/src/ai-engine.js
 // ============================================
 
@@ -15,15 +15,15 @@ const execAsync = promisify(exec);
 /**
  * AIVibeCodingEngine
  *
- * Sistema universal de auto-healing que usa AI para resolver
- * QUALQUER erro automaticamente - não apenas startup.
+ * Universal auto-healing system that uses AI to resolve
+ * ANY error automatically - not just startup.
  *
  * Features:
- * - Monitorização de erros em tempo real
- * - Classificação automática de erros
+ * - Real-time error monitoring
+ * - Automatic error classification
  * - Quick fixes locais (sem chamar AI)
- * - Escala para AI quando quick fixes falham
- * - Histórico de fixes para reutilização
+ * - Escalates to AI when quick fixes fail
+ * - Fix history for reuse
  */
 export class AIVibeCodingEngine extends EventEmitter {
     constructor(processManager, getWorkspaceRoot) {
@@ -34,12 +34,12 @@ export class AIVibeCodingEngine extends EventEmitter {
         this.maxRetries = 3;
         this.isActive = true;
 
-        // Histórico
+        // History
         this.errorHistory = [];
         this.fixHistory = [];
         this.pendingFixes = [];
 
-        // Estado
+        // State
         this.currentSession = null;
         this.lastSuccessfulConfig = null;
 
@@ -54,14 +54,14 @@ export class AIVibeCodingEngine extends EventEmitter {
     // ============================================
 
     setupErrorMonitoring() {
-        // Monitorar logs do ProcessManager
+        // Monitor ProcessManager logs
         this.processManager.on('log', async ({ serviceId, message, type }) => {
             if (this.isActive && message && this.isError(message)) {
                 await this.handleRuntimeError(serviceId, message, type);
             }
         });
 
-        // Monitorar crashes
+        // Monitor crashes
         this.processManager.on('stopped', async ({ serviceId, code, signal }) => {
             if (this.isActive && code !== 0 && code !== null) {
                 console.log(`🧠 [AI-Engine] Process ${serviceId} crashed (code: ${code})`);
@@ -69,7 +69,7 @@ export class AIVibeCodingEngine extends EventEmitter {
             }
         });
 
-        // Monitorar erros de processo
+        // Monitor process errors
         this.processManager.on('error', async ({ serviceId, error }) => {
             if (this.isActive) {
                 console.log(`🧠 [AI-Engine] Process error: ${error}`);
@@ -212,7 +212,7 @@ export class AIVibeCodingEngine extends EventEmitter {
     async handleRuntimeError(serviceId, errorMessage, type) {
         const classification = this.classifyError(errorMessage);
 
-        // Debounce: evitar duplicatas em 5 segundos
+        // Debounce: avoid duplicates within 5 seconds
         const recentSimilar = this.errorHistory.find(e =>
             e.classification.type === classification.type &&
             Date.now() - e.timestamp < 5000
@@ -235,10 +235,10 @@ export class AIVibeCodingEngine extends EventEmitter {
         console.log(`🧠 [AI-Engine] Error detected: ${classification.type} (${classification.severity})`);
         console.log(`   Message: ${errorMessage.substring(0, 150)}...`);
 
-        // Emitir evento
+        // Emit the event
         this.emit('error_detected', errorEntry);
 
-        // Se auto-fixável, preparar fix
+        // If auto-fixable, prepare a fix
         if (classification.autoFixable) {
             const quickFix = this.getQuickFix(classification.type, errorMessage);
             if (quickFix) {
@@ -357,14 +357,14 @@ export class AIVibeCodingEngine extends EventEmitter {
             attempts++;
             console.log(`\n🔄 [AI-Engine] Attempt ${attempts}/${this.maxRetries}`);
 
-            // Aplicar fixes pendentes
+            // Apply pending fixes
             if (attempts > 1 && this.pendingFixes.length > 0) {
                 const fix = this.pendingFixes.shift();
                 console.log(`💡 [AI-Engine] Applying fix: ${fix.fix.description}`);
                 currentConfig = await this.applyFix(currentConfig, fix.fix);
             }
 
-            // Recompilar se necessário
+            // Recompile if needed
             if (currentConfig.recompile) {
                 console.log('🔨 [AI-Engine] Recompiling...');
                 const compileResult = await this.recompile();
@@ -379,7 +379,7 @@ export class AIVibeCodingEngine extends EventEmitter {
                 delete currentConfig.recompile;
             }
 
-            // Tentar iniciar
+            // Try to start
             const result = await this.attemptStart(currentConfig);
 
             this.currentSession.attempts.push({
@@ -419,14 +419,14 @@ export class AIVibeCodingEngine extends EventEmitter {
             lastError = result.error;
             console.log(`❌ [AI-Engine] Attempt ${attempts} failed: ${lastError?.substring(0, 100)}...`);
 
-            // Obter fix
+            // Get a fix
             const fix = await this.getFix(result.error, result.logs, currentConfig);
 
             if (fix) {
                 console.log(`💡 [AI-Engine] Fix: ${fix.description}`);
                 currentConfig = await this.applyFix(currentConfig, fix);
             } else {
-                // Tentar AI
+                // Try AI
                 console.log(`🤖 [AI-Engine] Requesting AI analysis...`);
                 const aiAnalysis = await this.analyzeWithAI('startup', lastError, currentConfig);
                 if (aiAnalysis?.newConfig) {
@@ -536,7 +536,7 @@ export class AIVibeCodingEngine extends EventEmitter {
             return quickFix;
         }
 
-        // Verificar histórico
+        // Check the history
         const similarFix = this.findSimilarFix(classification.type);
         if (similarFix) {
             console.log(`📚 [AI-Engine] Found similar fix in history`);
@@ -707,7 +707,7 @@ export class AIVibeCodingEngine extends EventEmitter {
         }
 
         try {
-            // Importar detectProject dinamicamente para evitar dependência circular
+            // Import detectProject dynamically to avoid a circular dependency
             const { detectProject } = await import('./detectors.js');
             const meta = await detectProject(workspaceRoot);
 

package/src/config/trusted-signing-keys.json

@@ -0,0 +1,3 @@
+[
+  { "keyId": "vh-2026-09", "publicKey": "MCowBQYDK2VwAyEAp1QFJcXW1Xgz+B0Qppsgqc87rZmwrggKYC3dh4n7aBg=" }
+]

package/src/detectors/build-tool-detector.js

@@ -0,0 +1,50 @@
+/**
+ * build-tool-detector.js — PASSO 0 of the fix validation ladder.
+ *
+ * Thin facade over the battle-tested detectProject() (src/detectors.js) that
+ * normalizes its output into the {stack, tier} shape the auto-fix engine
+ * consumes. One source of truth: marker priority, multi-language and the
+ * "Swift wins" product rule all live in detectProject — this file only maps.
+ *
+ * Tiers (validation ladder):
+ *   A = C1 structural + C2 syntax + C3 build    (maven/gradle/node)
+ *   B = C1 + C2, build unsupported on this host (xcode/swift — needs macOS)
+ *   C = C1 only                                 (anything unrecognized)
+ */
+import { detectProject } from '../detectors.js';
+
+const STACK_BY_BUILD_TOOL = {
+    maven: 'maven',
+    gradle: 'gradle',
+    npm: 'node',
+    yarn: 'node',
+    pnpm: 'node',
+    xcodebuild: 'xcode',
+    swiftpm: 'xcode',
+    cocoapods: 'xcode',
+    go: 'go',
+    pip: 'python',
+    poetry: 'python',
+    bundler: 'ruby',
+    rake: 'ruby',
+};
+
+const TIER_BY_STACK = {
+    maven: 'A',
+    gradle: 'A',
+    node: 'A',
+    xcode: 'B',
+};
+
+export async function detectBuildTool(workspacePath) {
+    const meta = await detectProject(workspacePath);
+    const buildTool = meta?.buildTool || 'unknown';
+    const stack = STACK_BY_BUILD_TOOL[buildTool] || 'unknown';
+    return {
+        stack,
+        tier: TIER_BY_STACK[stack] || 'C',
+        language: meta?.language || 'unknown',
+        buildTool,
+        marker: meta?.marker || null,
+    };
+}