forgecraft-mcp 0.5.0 → 1.0.0

package/README.md

@@ -1,7 +1,7 @@
 <p align="center">
   <h1 align="center">ForgeCraft</h1>
   <p align="center">
-    <strong>Production engineering standards for any AI coding assistant.</strong>
+    <strong>The quality contract your AI coding assistant works within.</strong>
   </p>
   <p align="center">
     <a href="https://www.npmjs.com/package/forgecraft-mcp"><img src="https://img.shields.io/npm/v/forgecraft-mcp.svg" alt="npm version"></a>
@@ -12,31 +12,156 @@
 
 ---
 
-AI coding assistants work better with clear engineering standards. Most start with a generic instruction file — ForgeCraft replaces that with production-grade standards: SOLID principles, testing pyramids, architecture patterns, CI/CD pipelines, domain-specific rules, and quality-gate hooks — all composed from 112 curated template blocks matched to your actual stack.
+> You hired an AI engineer. It's brilliant. It also installed the same 14 VS Code extensions twice today, spun up 6 Docker containers it will never clean up, and your disk went from 12 GB free to 0 KB in one session.
+>
+> A full disk doesn't fail gracefully. It kills VS Code, the terminal, Docker, and the database simultaneously.
 
-**Supports:** Claude (CLAUDE.md) · Cursor (.cursor/rules/) · GitHub Copilot (.github/copilot-instructions.md) · Windsurf (.windsurfrules) · Cline (.clinerules) · Aider (CONVENTIONS.md)
+ForgeCraft is the quality contract your AI coding assistant works within — so it builds fast **and** doesn't burn down the house.
 
 ```bash
 npx forgecraft-mcp setup .
 ```
 
-That's it. ForgeCraft scans your project, auto-detects your stack, and generates tailored instruction files in seconds.
+**Supports:** Claude (CLAUDE.md) · Cursor (.cursor/rules/) · GitHub Copilot (.github/copilot-instructions.md) · Windsurf (.windsurfrules) · Cline (.clinerules) · Aider (CONVENTIONS.md)
+
+---
+
+## The only formal quality framework built for AI-generated code
+
+Every session, every project, every AI assistant — measured against the same 7-property **Generative Specification** model. Not vibes. Not a linter score. A score out of 14 that tells you exactly where the gap is and why.
+
+```
+$ npx forgecraft-mcp verify .
+
+| Property        | Score | Evidence                                        |
+|-----------------|-------|-------------------------------------------------|
+| Self-Describing | ✅ 2/2 | CLAUDE.md — 352 non-empty lines                |
+| Bounded         | ✅ 2/2 | No direct DB calls in route files              |
+| Verifiable      | ✅ 2/2 | 64 test files — 87% coverage                   |
+| Defended        | ✅ 2/2 | Pre-commit hook + lint config present           |
+| Auditable       | ✅ 2/2 | 11 ADRs in docs/adrs/ + Status.md              |
+| Composable      | ✅ 2/2 | Service layer + repository layer detected       |
+| Executable      | ✅ 2/2 | Tests passed + CI pipeline configured           |
+
+Total: 14/14 ✅ PASS · Threshold 11/14
+```
+
+| Property | What it checks |
+|---|---|
+| **Self-Describing** | Does the codebase explain itself without you? |
+| **Bounded** | Is business logic leaking into your routes? |
+| **Verifiable** | Are there tests, and did they pass in a real runtime? |
+| **Defended** | Are hooks blocking bad commits before they land? |
+| **Auditable** | Is every architectural decision recorded and findable? |
+| **Composable** | Can you swap the database without touching the domain? |
+| **Executable** | Is there CI evidence this thing actually ran? |
+
+---
+
+## Dev environment hygiene — enforced by convention
+
+ForgeCraft injects enforceable rules into every project's AI instructions that make environment pollution a convention violation, not an incident.
+
+**VS Code extensions**
+Before installing: `code --list-extensions | grep -i <name>`. Only install if no version in the required major range is already present. The same extension doesn't get downloaded twice in the same day.
+
+**Docker containers**
+Check before creating: `docker ps -a --filter name=<service>`. If it exists, start it — don't create it. Prefer `docker compose up` (reuse) over bare `docker run` (always creates new). Logs capped at 500 MB. `docker system prune -f` is documented as a periodic maintenance step, not an emergency.
+
+**Python virtual environments**
+One `.venv` per project root. Reuse if the Python major.minor version matches. Never create a venv in a subdirectory unless it's a standalone installable package. Unused dependencies flagged by `pip list --not-required`.
+
+**Synthetic and time-series data**
+Before writing more than 100 MB of generated data, the AI asks: retain raw, condense statistically, or delete after the run? Synthetic datasets older than 7 days with no code reference: ask to delete.
+
+**General**
+If the workspace grows beyond 2 GB outside of known build artifacts (`node_modules/`, `.venv/`, `dist/`), surface a warning and stop. Never silently grow the workspace.
+
+---
+
+## Project setup in one sentence
+
+```
+Read the spec in docs/specs/, set up this project with ForgeCraft,
+scaffold it with the right tags, recommend the tech stack, start building.
+```
+
+That's the entire onboarding prompt. ForgeCraft reads the spec, picks the tags, writes the `CLAUDE.md`, emits `Status.md`, `docs/adrs/`, `docs/PRD.md`, `docs/TechSpec.md`, hooks, and skills. The AI has full context. You start building.
+
+ForgeCraft scans your project, auto-detects your stack, and generates tailored instruction files from 116 curated blocks — SOLID, hexagonal architecture, testing pyramids, CI/CD, and 24 domain-specific rule sets — in seconds.
+
+---
+
+## Quality gates that match your release phase
+
+Not a fixed checklist. Seven phases, each with gates that make sense for where you actually are.
+
+| Phase | Gates |
+|---|---|
+| **development** | Unit tests pass · lint clean · no layer violations · no hardcoded secrets |
+| **pre-release hardening** | Mutation testing ≥80% · DAST scan · 2× peak load · chaos (Toxiproxy) |
+| **release candidate** | OWASP Top 10 pentest · full mutation audit · compatibility matrix · accessibility |
+| **deployment gates** | Canary config verified · smoke tests pass · observability confirmed |
+| **post-deployment** | Synthetic probes live · 30-min error window monitored · incident runbook reviewed |
+
+Every hardening step is tagged `requires_human_review: true`. Some gates require a human. ForgeCraft knows which ones.
+
+---
+
+## ADRs, automatically sequenced
+
+Every non-obvious architectural decision gets recorded. ForgeCraft auto-sequences `docs/adrs/NNNN-slug.md` in MADR format — context, decision, alternatives, consequences. Your AI assistant reasons about past choices. Your team stops re-litigating them.
+
+```bash
+npx forgecraft-mcp generate_adr . --title "Use event sourcing for order history" \
+  --status Accepted \
+  --context "Order mutations need full audit trail for compliance" \
+  --decision "Append-only event log, project current state on read"
+# → docs/adrs/0004-use-event-sourcing-for-order-history.md
+```
+
+---
 
 ## `claude init` vs ForgeCraft
 
+`claude init` gets you started. ForgeCraft gets you to production standards — across every AI assistant, every session, every engineer on the team.
+
 | | `claude init` | ForgeCraft |
 |---|---|---|
-| **Instruction file** | Generic, one-size-fits-all | 112 curated blocks matched to your stack |
+| **Instruction file** | Generic, one-size-fits-all | 116 curated blocks matched to your stack |
 | **AI assistants** | Claude only | Claude, Cursor, Copilot, Windsurf, Cline, Aider |
 | **Architecture** | None | SOLID, hexagonal, clean code, DDD |
-| **Testing** | Basic mention | Testing pyramid with coverage targets (80%+) |
-| **Domain rules** | None | 18 domains (fintech, healthcare, gaming…) |
-| **Commit standards** | None | Conventional commits, atomic changes |
-| **Quality gates** | None | Pre-commit hooks that enforce standards |
-| **CI/CD** | None | Pipeline stages, environments, deploy guidance |
+| **Testing** | Basic mention | Testing pyramid, coverage targets, mutation gates |
+| **Domain rules** | None | 24 domains (fintech, healthcare, gaming…) |
+| **Quality score** | None | GS score out of 14 — know exactly where the gap is |
+| **Release phases** | None | 7 phases from development through post-deployment |
+| **Dev hygiene** | None | VS Code, Docker, Python venv, disk guard |
+| **ADRs** | None | Auto-sequenced, MADR format |
 | **Session continuity** | None | `Status.md` + `forgecraft.yaml` persist context |
 | **Drift detection** | None | `refresh` detects scope changes |
-| **Compliance scoring** | None | `audit` scores 0-100 |
+
+## Workflow Playbook
+
+After setup, your AI has the context. These prompts direct the work. Copy, paste, run.
+
+| Situation | Prompt |
+|---|---|
+| New project — scaffold structure | [Greenfield Setup](WORKFLOWS.md#greenfield-setup) |
+| Existing project — integrate ForgeCraft | [Brownfield Integration](WORKFLOWS.md#brownfield-integration) |
+| Audit shows `file_length` failures | [Decompose by responsibility](WORKFLOWS.md#file_length--file-too-large) |
+| Audit shows `hardcoded_url` failures | [Extract to env vars](WORKFLOWS.md#hardcoded_url--urls-or-hosts-in-source) |
+| Audit shows `hardcoded_credential` failures | [Remove secrets — do this first](WORKFLOWS.md#hardcoded_credential--secrets-in-source) |
+| Audit shows `layer_violation` failures | [Fix route → DB direct calls](WORKFLOWS.md#layer_violation--direct-db-call-in-route-handler) |
+| Audit shows `mock_in_source` failures | [Move mocks out of production](WORKFLOWS.md#mock_in_source--mock-data-in-production-code) |
+| Audit shows `missing_prd` failures | [Reverse-engineer spec docs](WORKFLOWS.md#missing_prd--missing_techspec--no-spec-docs) |
+| Audit shows `stale_status` failures | [Update Status.md](WORKFLOWS.md#stale_status--statusmd-not-updated) |
+| Score ≥ 80 and preparing to ship | [Pre-release hardening](WORKFLOWS.md#pre-release-hardening) |
+| Just deployed to production | [Post-deployment checklist](WORKFLOWS.md#post-deployment) |
+| Project scope changed | [Drift detection](WORKFLOWS.md#drift-detection) |
+
+→ [Full Workflow Playbook](WORKFLOWS.md) · [Online version](https://forgecraft.tools/docs/workflows)
+
+---
 
 ## How It Works
 
@@ -53,13 +178,13 @@ npx forgecraft-mcp setup .
 
 ForgeCraft is a **setup-time CLI tool**. Run it once to configure your project, then remove it — it has no runtime footprint.
 
-optional: add the MCP sentinel to let your AI assistant diagnose and recommend commands:
+Optionally add the MCP sentinel to let your AI assistant diagnose and recommend commands:
 
 ```bash
 claude mcp add forgecraft -- npx -y forgecraft-mcp
 ```
 
-The sentinel is a single lightweight tool (~200 tokens) that checks your project state and tells your AI what CLI command to run next. [Remove it](#mcp-sentinel) after initial setup to save tokens.
+The sentinel is a single tool (~200 tokens). It reads three artifacts — `forgecraft.yaml`, `CLAUDE.md`, `.claude/hooks` — derives the correct next CLI command, and returns it. Nothing more. This is the methodology's core principle expressed as tool design: a stateless reader, a finite artifact set, a derived action. [Remove it](#mcp-sentinel) after initial setup to reclaim token budget.
 
 ## What You Get
 
@@ -112,7 +237,7 @@ Tags are domain classifiers. ForgeCraft auto-detects them from your code, or you
 | `HEALTHCARE` | HIPAA, PHI handling, audit logs, encryption |
 | `MOBILE` | React Native/Flutter, offline-first, native APIs |
 | `REALTIME` | WebSockets, presence, conflict resolution |
-| `GAME` | Game loop, ECS, physics, rendering pipeline |
+| `GAME` | Game loop, ECS, Phaser 3, PixiJS, Three.js/WebGL, performance budgets |
 | `SOCIAL` | Feeds, connections, messaging, moderation |
 | `ANALYTICS` | Event tracking, dashboards, data warehousing |
 | `STATE-MACHINE` | Transitions, guards, event-driven workflows |
@@ -171,6 +296,7 @@ npx forgecraft-mcp <command> [dir] [flags]
 --tier core|recommended  Content depth (default: recommended)
 --targets claude cursor  AI assistant targets (default: claude)
 --dry-run                Preview without writing files
+--compact                Strip explanatory bullet tails and deduplicate lines (~20-40% smaller output)
 --apply                  Apply changes (for refresh)
 --language typescript    typescript | python (default: typescript)
 --scope focused          comprehensive | focused (for review)
@@ -184,11 +310,15 @@ Optionally add the ForgeCraft MCP sentinel to let your AI assistant diagnose you
 claude mcp add forgecraft -- npx -y forgecraft-mcp
 ```
 
-The sentinel is a **single minimal tool** (~200 tokens per request, vs ~1,500 for a full MCP tool suite). It checks whether `forgecraft.yaml`, `CLAUDE.md`, and `.claude/hooks` exist, then returns targeted CLI commands to run.
+The sentinel is a **single minimal tool** (~200 tokens per request, vs ~1,500 for a full tool suite). It checks whether `forgecraft.yaml`, `CLAUDE.md`, and `.claude/hooks` exist, then returns the targeted CLI command for the project's current state.
+
+**The design is intentional.** The full ForgeCraft command surface — 21 actions — lives in the CLI, not the MCP server. The MCP server exposes exactly one tool that reads three artifacts and returns one recommendation. This is the Generative Specification principle in the tool's own architecture: a stateless reader, a bounded artifact set, a derived action. The tool practices what it writes into your `CLAUDE.md`.
+
+A side effect: every declared MCP tool is read by the model on every turn whether invoked or not. One tool costs 200 tokens. Twenty-one tools costs 1,500. The sentinel keeps the methodology's recommended MCP budget (≤3 active servers) by design.
 
 **Recommended workflow:**
 1. Add the sentinel temporarily
-2. Let Claude run `npx forgecraft-mcp setup .`
+2. Let your AI assistant run `npx forgecraft-mcp setup .`
 3. Remove the sentinel: `claude mcp remove forgecraft`
 4. Re-add it when you need to refresh or audit
 
@@ -210,6 +340,47 @@ Add to `.claude/settings.json`:
 
 > **Already ran `claude init`?** Use `npx forgecraft-mcp generate . --merge` to merge with your existing CLAUDE.md, keeping your custom sections while adding production standards.
 
+---
+
+## Pricing
+
+| | **Free** | **Pro** | **Teams** |
+|---|---|---|---|
+| Projects / month | 2 | Unlimited | Unlimited |
+| GS scoring (`verify`) | ✓ | ✓ | ✓ |
+| Dev hygiene gates | ✓ | ✓ | ✓ |
+| All 24 tags | ✓ | ✓ | ✓ |
+| ADR generation | ✓ | ✓ | ✓ |
+| Quality gate flywheel | Read-only | **Contribute** | Priority |
+| Custom tags & templates | — | ✓ | ✓ |
+| Org-wide standards | — | — | ✓ |
+| Audit dashboard | — | — | ✓ |
+| Priority support | — | — | ✓ |
+
+_Free is for individual devs who want to experience the model. Pro is for engineers who want to contribute gates and grow the library. Teams is where organizations pay for the quality guarantee._
+
+### Earn Pro by contributing
+
+Propose a quality gate that gets accepted into the library → earn Pro months.
+
+- **Founding period** (first 6 months): 3 months Pro per accepted gate
+- **After founding period**: 1 month Pro per accepted gate  
+- **3+ accepted gates ever**: Lifetime Pro
+
+[Open a gate proposal →](.github/ISSUE_TEMPLATE/quality-gate-proposal.md) · [See contributors →](CONTRIBUTORS.md)
+
+---
+
+## Theoretical foundation
+
+ForgeCraft implements the **Generative Specification** model — a formal 7-property framework for evaluating AI-generated code quality. The model, the S_realized convergence formula, and the release phase framework are documented in the white paper.
+
+> [Generative Specification White Paper](https://github.com/jghiringhelli/argos) — the academic foundation behind the `verify` score
+
+The white paper is the theory. ForgeCraft is the toolchain. Quality gates proposed for the library that generalize into theoretical insights may be incorporated into future white paper revisions.
+
+---
+
 ## Configuration
 
 ### Fine-tune what your AI assistant sees
@@ -220,6 +391,7 @@ projectName: my-api
 tags: [UNIVERSAL, API, FINTECH]
 tier: recommended
 outputTargets: [claude, cursor, copilot]  # Generate for multiple assistants
+compact: true                             # Slim output (~20-40% fewer tokens)
 
 exclude:
   - cqrs-event-patterns    # Don't need this yet
@@ -299,7 +471,7 @@ git clone https://github.com/jghiringhelli/forgecraft-mcp.git
 cd forgecraft-mcp
 npm install
 npm run build
-npm test   # 229 tests, 16 suites
+npm test   # 610 tests, 42 suites
 ```
 
 ## License

package/dist/analyzers/anti-pattern.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"anti-pattern.d.ts","sourceRoot":"","sources":["../../src/analyzers/anti-pattern.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAMH,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AAIrD,uCAAuC;AACvC,UAAU,UAAU;IAClB,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,iBAAiB,EAAE,MAAM,CAAC;CACpC;AAOD;;GAEG;AACH,wBAAgB,gBAAgB,CAC9B,UAAU,EAAE,MAAM,EAClB,MAAM,GAAE,OAAO,CAAC,UAAU,CAAM,GAC/B;IAAE,UAAU,EAAE,UAAU,EAAE,CAAC;IAAC,QAAQ,EAAE,UAAU,EAAE,CAAA;CAAE,CA+FtD"}
+{"version":3,"file":"anti-pattern.d.ts","sourceRoot":"","sources":["../../src/analyzers/anti-pattern.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAMH,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AAIrD,uCAAuC;AACvC,UAAU,UAAU;IAClB,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,iBAAiB,EAAE,MAAM,CAAC;CACpC;AAOD;;GAEG;AACH,wBAAgB,gBAAgB,CAC9B,UAAU,EAAE,MAAM,EAClB,MAAM,GAAE,OAAO,CAAC,UAAU,CAAM,GAC/B;IAAE,UAAU,EAAE,UAAU,EAAE,CAAC;IAAC,QAAQ,EAAE,UAAU,EAAE,CAAA;CAAE,CAoGtD"}

package/dist/analyzers/anti-pattern.js

@@ -43,7 +43,11 @@ export function scanAntiPatterns(projectDir, config = {}) {
             }
             // Check for hardcoded URLs (skip config files)
             if (!isConfigFile(relPath)) {
-                const urlMatches = findPattern(lines, /(localhost|127\.0\.0\.1|0\.0\.0\.0)/, /\/\/|\/\*|\*|#|test|spec|mock/i);
+                const urlMatches = findPattern(lines, /(localhost|127\.0\.0\.1|0\.0\.0\.0)/, 
+                // Exclude: comments, test/spec/mock paths, regex literals,
+                // JS/TS env-var fallback defaults (process.env.X ?? 'localhost'),
+                // and Python env-var fallback defaults (os.environ.get("X", "localhost"))
+                /^\s*(\/\/|\/\*|\*|#)|test|spec|mock|\/\(.*localhost|\?\?.*['"`]|os\.environ|os\.getenv|environ\.get/i);
                 if (urlMatches.length > 0) {
                     violations.push({
                         check: "hardcoded_url",
@@ -53,7 +57,9 @@ export function scanAntiPatterns(projectDir, config = {}) {
                 }
             }
             // Check for mock/stub data in production code
-            const mockMatches = findPattern(lines, /\b(mock_data|fake_data|dummy_data|stub_response|FIXME.*return|TODO.*hardcod)/i);
+            const mockMatches = findPattern(lines, /\b(mock_data|fake_data|dummy_data|stub_response|FIXME.*return|TODO.*hardcod)/i, 
+            // Exclude: lines that are regex literal patterns or new RegExp constructs
+            /\/\\b\(|\/\(|new RegExp/i);
             if (mockMatches.length > 0) {
                 violations.push({
                     check: "mock_in_source",
@@ -103,7 +109,7 @@ function isSourceFile(filePath) {
  * Check if a file is a test file.
  */
 function isTestFile(filePath) {
-    return /(\btest[_.]|\.test\.|\.spec\.|__tests__|tests\/|test\/|fixtures\/|mock|conftest|\.d\.ts)/.test(filePath);
+    return /(\btest[_.]|\.test\.|\.spec\.|__tests__|tests[/\\]|test[/\\]|fixtures[/\\]|mock|conftest|\.d\.ts)/.test(filePath);
 }
 /**
  * Check if a file is a config file.

package/dist/analyzers/anti-pattern.js.map

@@ -1 +1 @@
-{"version":3,"file":"anti-pattern.js","sourceRoot":"","sources":["../../src/analyzers/anti-pattern.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,YAAY,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AACnD,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAC1C,OAAO,EAAE,YAAY,EAAE,MAAM,2BAA2B,CAAC;AACzD,OAAO,EAAE,YAAY,EAAE,MAAM,uBAAuB,CAAC;AAGrD,MAAM,MAAM,GAAG,YAAY,CAAC,wBAAwB,CAAC,CAAC;AAQtD,MAAM,cAAc,GAAe;IACjC,aAAa,EAAE,GAAG;IAClB,iBAAiB,EAAE,CAAC;CACrB,CAAC;AAEF;;GAEG;AACH,MAAM,UAAU,gBAAgB,CAC9B,UAAkB,EAClB,SAA8B,EAAE;IAEhC,MAAM,GAAG,GAAe,EAAE,GAAG,cAAc,EAAE,GAAG,MAAM,EAAE,CAAC;IACzD,MAAM,UAAU,GAAiB,EAAE,CAAC;IACpC,MAAM,QAAQ,GAAiB,EAAE,CAAC;IAElC,MAAM,QAAQ,GAAG,YAAY,CAAC,UAAU,CAAC,CAAC;IAC1C,MAAM,WAAW,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,YAAY,CAAC,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC;IAE9E,MAAM,CAAC,IAAI,CAAC,4BAA4B,EAAE;QACxC,UAAU,EAAE,QAAQ,CAAC,MAAM;QAC3B,WAAW,EAAE,WAAW,CAAC,MAAM;KAChC,CAAC,CAAC;IAEH,KAAK,MAAM,OAAO,IAAI,WAAW,EAAE,CAAC;QAClC,MAAM,QAAQ,GAAG,IAAI,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC;QAC3C,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC;YAAE,SAAS;QAEpC,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,YAAY,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;YAChD,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YAElC,oBAAoB;YACpB,IAAI,KAAK,CAAC,MAAM,GAAG,GAAG,CAAC,aAAa,EAAE,CAAC;gBACrC,QAAQ,CAAC,IAAI,CAAC;oBACZ,KAAK,EAAE,aAAa;oBACpB,OAAO,EAAE,GAAG,OAAO,KAAK,KAAK,CAAC,MAAM,eAAe,GAAG,CAAC,aAAa,wBAAwB;oBAC5F,QAAQ,EAAE,SAAS;iBACpB,CAAC,CAAC;YACL,CAAC;YAED,+CAA+C;YAC/C,IAAI,CAAC,YAAY,CAAC,OAAO,CAAC,EAAE,CAAC;gBAC3B,MAAM,UAAU,GAAG,WAAW,CAC5B,KAAK,EACL,qCAAqC,EACrC,gCAAgC,CACjC,CAAC;gBACF,IAAI,UAAU,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;oBAC1B,UAAU,CAAC,IAAI,CAAC;wBACd,KAAK,EAAE,eAAe;wBACtB,OAAO,EAAE,GAAG,OAAO,mCAAmC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,wBAAwB;wBACnG,QAAQ,EAAE,OAAO;qBAClB,CAAC,CAAC;gBACL,CAAC;YACH,CAAC;YAED,8CAA8C;YAC9C,MAAM,WAAW,GAAG,WAAW,CAC7B,KAAK,EACL,+EAA+E,CAChF,CAAC;YACF,IAAI,WAAW,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBAC3B,UAAU,CAAC,IAAI,CAAC;oBACd,KAAK,EAAE,gBAAgB;oBACvB,OAAO,EAAE,GAAG,OAAO,oCAAoC,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,gCAAgC;oBAC7G,QAAQ,EAAE,OAAO;iBAClB,CAAC,CAAC;YACL,CAAC;YAED,gDAAgD;YAChD,IAAI,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;gBACvD,MAAM,WAAW,GAAG,WAAW,CAAC,KAAK,EAAE,sBAAsB,CAAC,CAAC;gBAC/D,IAAI,WAAW,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;oBAC3B,QAAQ,CAAC,IAAI,CAAC;wBACZ,KAAK,EAAE,gBAAgB;wBACvB,OAAO,EAAE,GAAG,OAAO,6BAA6B,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,6BAA6B;wBACnG,QAAQ,EAAE,SAAS;qBACpB,CAAC,CAAC;gBACL,CAAC;YACH,CAAC;YAED,kCAAkC;YAClC,MAAM,WAAW,GAAG,WAAW,CAC7B,KAAK,EACL,yDAAyD,EACzD,yDAAyD,CAC1D,CAAC;YACF,IAAI,WAAW,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBAC3B,UAAU,CAAC,IAAI,CAAC;oBACd,KAAK,EAAE,sBAAsB;oBAC7B,OAAO,EAAE,GAAG,OAAO,8CAA8C,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG;oBAC1F,QAAQ,EAAE,OAAO;iBAClB,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,wBAAwB;QAC1B,CAAC;IACH,CAAC;IAED,MAAM,CAAC,IAAI,CAAC,4BAA4B,EAAE;QACxC,UAAU,EAAE,UAAU,CAAC,MAAM;QAC7B,QAAQ,EAAE,QAAQ,CAAC,MAAM;KAC1B,CAAC,CAAC;IAEH,OAAO,EAAE,UAAU,EAAE,QAAQ,EAAE,CAAC;AAClC,CAAC;AAED;;GAEG;AACH,SAAS,YAAY,CAAC,QAAgB;IACpC,MAAM,GAAG,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAC;IAC9B,OAAO,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;AACpF,CAAC;AAED;;GAEG;AACH,SAAS,UAAU,CAAC,QAAgB;IAClC,OAAO,0FAA0F,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;AACnH,CAAC;AAED;;GAEG;AACH,SAAS,YAAY,CAAC,QAAgB;IACpC,OAAO,oDAAoD,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;AAC7E,CAAC;AAED;;;GAGG;AACH,SAAS,WAAW,CAClB,KAAe,EACf,OAAe,EACf,cAAuB;IAEvB,MAAM,OAAO,GAAa,EAAE,CAAC;IAE7B,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACtC,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,CAAW,CAAC;QAChC,IAAI,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;YACvB,IAAI,CAAC,cAAc,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;gBAClD,OAAO,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;YACtB,CAAC;QACH,CAAC;IACH,CAAC;IAED,OAAO,OAAO,CAAC;AACjB,CAAC"}
+{"version":3,"file":"anti-pattern.js","sourceRoot":"","sources":["../../src/analyzers/anti-pattern.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,YAAY,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AACnD,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAC1C,OAAO,EAAE,YAAY,EAAE,MAAM,2BAA2B,CAAC;AACzD,OAAO,EAAE,YAAY,EAAE,MAAM,uBAAuB,CAAC;AAGrD,MAAM,MAAM,GAAG,YAAY,CAAC,wBAAwB,CAAC,CAAC;AAQtD,MAAM,cAAc,GAAe;IACjC,aAAa,EAAE,GAAG;IAClB,iBAAiB,EAAE,CAAC;CACrB,CAAC;AAEF;;GAEG;AACH,MAAM,UAAU,gBAAgB,CAC9B,UAAkB,EAClB,SAA8B,EAAE;IAEhC,MAAM,GAAG,GAAe,EAAE,GAAG,cAAc,EAAE,GAAG,MAAM,EAAE,CAAC;IACzD,MAAM,UAAU,GAAiB,EAAE,CAAC;IACpC,MAAM,QAAQ,GAAiB,EAAE,CAAC;IAElC,MAAM,QAAQ,GAAG,YAAY,CAAC,UAAU,CAAC,CAAC;IAC1C,MAAM,WAAW,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,YAAY,CAAC,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC;IAE9E,MAAM,CAAC,IAAI,CAAC,4BAA4B,EAAE;QACxC,UAAU,EAAE,QAAQ,CAAC,MAAM;QAC3B,WAAW,EAAE,WAAW,CAAC,MAAM;KAChC,CAAC,CAAC;IAEH,KAAK,MAAM,OAAO,IAAI,WAAW,EAAE,CAAC;QAClC,MAAM,QAAQ,GAAG,IAAI,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC;QAC3C,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC;YAAE,SAAS;QAEpC,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,YAAY,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;YAChD,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YAElC,oBAAoB;YACpB,IAAI,KAAK,CAAC,MAAM,GAAG,GAAG,CAAC,aAAa,EAAE,CAAC;gBACrC,QAAQ,CAAC,IAAI,CAAC;oBACZ,KAAK,EAAE,aAAa;oBACpB,OAAO,EAAE,GAAG,OAAO,KAAK,KAAK,CAAC,MAAM,eAAe,GAAG,CAAC,aAAa,wBAAwB;oBAC5F,QAAQ,EAAE,SAAS;iBACpB,CAAC,CAAC;YACL,CAAC;YAED,+CAA+C;YAC/C,IAAI,CAAC,YAAY,CAAC,OAAO,CAAC,EAAE,CAAC;gBAC3B,MAAM,UAAU,GAAG,WAAW,CAC5B,KAAK,EACL,qCAAqC;gBACrC,2DAA2D;gBAC3D,kEAAkE;gBAClE,0EAA0E;gBAC1E,sGAAsG,CACvG,CAAC;gBACF,IAAI,UAAU,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;oBAC1B,UAAU,CAAC,IAAI,CAAC;wBACd,KAAK,EAAE,eAAe;wBACtB,OAAO,EAAE,GAAG,OAAO,mCAAmC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,wBAAwB;wBACnG,QAAQ,EAAE,OAAO;qBAClB,CAAC,CAAC;gBACL,CAAC;YACH,CAAC;YAED,8CAA8C;YAC9C,MAAM,WAAW,GAAG,WAAW,CAC7B,KAAK,EACL,+EAA+E;YAC/E,0EAA0E;YAC1E,0BAA0B,CAC3B,CAAC;YACF,IAAI,WAAW,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBAC3B,UAAU,CAAC,IAAI,CAAC;oBACd,KAAK,EAAE,gBAAgB;oBACvB,OAAO,EAAE,GAAG,OAAO,oCAAoC,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,gCAAgC;oBAC7G,QAAQ,EAAE,OAAO;iBAClB,CAAC,CAAC;YACL,CAAC;YAED,gDAAgD;YAChD,IAAI,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;gBACvD,MAAM,WAAW,GAAG,WAAW,CAAC,KAAK,EAAE,sBAAsB,CAAC,CAAC;gBAC/D,IAAI,WAAW,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;oBAC3B,QAAQ,CAAC,IAAI,CAAC;wBACZ,KAAK,EAAE,gBAAgB;wBACvB,OAAO,EAAE,GAAG,OAAO,6BAA6B,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,6BAA6B;wBACnG,QAAQ,EAAE,SAAS;qBACpB,CAAC,CAAC;gBACL,CAAC;YACH,CAAC;YAED,kCAAkC;YAClC,MAAM,WAAW,GAAG,WAAW,CAC7B,KAAK,EACL,yDAAyD,EACzD,yDAAyD,CAC1D,CAAC;YACF,IAAI,WAAW,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBAC3B,UAAU,CAAC,IAAI,CAAC;oBACd,KAAK,EAAE,sBAAsB;oBAC7B,OAAO,EAAE,GAAG,OAAO,8CAA8C,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG;oBAC1F,QAAQ,EAAE,OAAO;iBAClB,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,wBAAwB;QAC1B,CAAC;IACH,CAAC;IAED,MAAM,CAAC,IAAI,CAAC,4BAA4B,EAAE;QACxC,UAAU,EAAE,UAAU,CAAC,MAAM;QAC7B,QAAQ,EAAE,QAAQ,CAAC,MAAM;KAC1B,CAAC,CAAC;IAEH,OAAO,EAAE,UAAU,EAAE,QAAQ,EAAE,CAAC;AAClC,CAAC;AAED;;GAEG;AACH,SAAS,YAAY,CAAC,QAAgB;IACpC,MAAM,GAAG,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAC;IAC9B,OAAO,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC,QAAQ,CAC1E,GAAG,CACJ,CAAC;AACJ,CAAC;AAED;;GAEG;AACH,SAAS,UAAU,CAAC,QAAgB;IAClC,OAAO,mGAAmG,CAAC,IAAI,CAC7G,QAAQ,CACT,CAAC;AACJ,CAAC;AAED;;GAEG;AACH,SAAS,YAAY,CAAC,QAAgB;IACpC,OAAO,oDAAoD,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;AAC7E,CAAC;AAED;;;GAGG;AACH,SAAS,WAAW,CAClB,KAAe,EACf,OAAe,EACf,cAAuB;IAEvB,MAAM,OAAO,GAAa,EAAE,CAAC;IAE7B,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACtC,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,CAAW,CAAC;QAChC,IAAI,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;YACvB,IAAI,CAAC,cAAc,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;gBAClD,OAAO,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;YACtB,CAAC;QACH,CAAC;IACH,CAAC;IAED,OAAO,OAAO,CAAC;AACjB,CAAC"}

package/dist/analyzers/code-probes.d.ts

@@ -0,0 +1,19 @@
+/**
+ * External code quality probes — language-agnostic design.
+ *
+ * Re-exports all probes from domain-scoped modules under probes/.
+ */
+export type { ProbeResult } from "./probes/tool-runner.js";
+export type { LocData } from "./probes/loc-probe.js";
+export type { CoverageData } from "./probes/coverage-probe.js";
+export type { LayerData } from "./probes/layer-probe.js";
+export type { DeadCodeData } from "./probes/dead-code-probe.js";
+export type { ComplexityData } from "./probes/complexity-probe.js";
+export type { MutationData } from "./probes/mutation-probe.js";
+export { probeLoc } from "./probes/loc-probe.js";
+export { probeCoverage } from "./probes/coverage-probe.js";
+export { probeLayerViolations } from "./probes/layer-probe.js";
+export { probeDeadCode } from "./probes/dead-code-probe.js";
+export { probeComplexity } from "./probes/complexity-probe.js";
+export { probeMutation } from "./probes/mutation-probe.js";
+//# sourceMappingURL=code-probes.d.ts.map

package/dist/analyzers/code-probes.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"code-probes.d.ts","sourceRoot":"","sources":["../../src/analyzers/code-probes.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,YAAY,EAAE,WAAW,EAAE,MAAM,yBAAyB,CAAC;AAC3D,YAAY,EAAE,OAAO,EAAE,MAAM,uBAAuB,CAAC;AACrD,YAAY,EAAE,YAAY,EAAE,MAAM,4BAA4B,CAAC;AAC/D,YAAY,EAAE,SAAS,EAAE,MAAM,yBAAyB,CAAC;AACzD,YAAY,EAAE,YAAY,EAAE,MAAM,6BAA6B,CAAC;AAChE,YAAY,EAAE,cAAc,EAAE,MAAM,8BAA8B,CAAC;AACnE,YAAY,EAAE,YAAY,EAAE,MAAM,4BAA4B,CAAC;AAE/D,OAAO,EAAE,QAAQ,EAAE,MAAM,uBAAuB,CAAC;AACjD,OAAO,EAAE,aAAa,EAAE,MAAM,4BAA4B,CAAC;AAC3D,OAAO,EAAE,oBAAoB,EAAE,MAAM,yBAAyB,CAAC;AAC/D,OAAO,EAAE,aAAa,EAAE,MAAM,6BAA6B,CAAC;AAC5D,OAAO,EAAE,eAAe,EAAE,MAAM,8BAA8B,CAAC;AAC/D,OAAO,EAAE,aAAa,EAAE,MAAM,4BAA4B,CAAC"}

package/dist/analyzers/code-probes.js

@@ -0,0 +1,12 @@
+/**
+ * External code quality probes — language-agnostic design.
+ *
+ * Re-exports all probes from domain-scoped modules under probes/.
+ */
+export { probeLoc } from "./probes/loc-probe.js";
+export { probeCoverage } from "./probes/coverage-probe.js";
+export { probeLayerViolations } from "./probes/layer-probe.js";
+export { probeDeadCode } from "./probes/dead-code-probe.js";
+export { probeComplexity } from "./probes/complexity-probe.js";
+export { probeMutation } from "./probes/mutation-probe.js";
+//# sourceMappingURL=code-probes.js.map

package/dist/analyzers/code-probes.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"code-probes.js","sourceRoot":"","sources":["../../src/analyzers/code-probes.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAUH,OAAO,EAAE,QAAQ,EAAE,MAAM,uBAAuB,CAAC;AACjD,OAAO,EAAE,aAAa,EAAE,MAAM,4BAA4B,CAAC;AAC3D,OAAO,EAAE,oBAAoB,EAAE,MAAM,yBAAyB,CAAC;AAC/D,OAAO,EAAE,aAAa,EAAE,MAAM,6BAA6B,CAAC;AAC5D,OAAO,EAAE,eAAe,EAAE,MAAM,8BAA8B,CAAC;AAC/D,OAAO,EAAE,aAAa,EAAE,MAAM,4BAA4B,CAAC"}

package/dist/analyzers/completeness-helpers.d.ts

@@ -0,0 +1,60 @@
+/**
+ * Shared constants and pure helper functions for completeness checks.
+ */
+import type { AuditCheck } from "../shared/types.js";
+import { readExceptions } from "../shared/exceptions.js";
+/** Known AI assistant instruction file paths to check. */
+export declare const KNOWN_INSTRUCTION_PATHS: string[];
+/**
+ * Check if any AI assistant instruction file exists.
+ *
+ * @param projectDir - Absolute path to project root
+ * @param passing - Accumulator for passing checks
+ * @param failing - Accumulator for failing checks
+ */
+export declare function checkInstructionFileExists(projectDir: string, passing: AuditCheck[], failing: AuditCheck[]): void;
+/**
+ * Check if a file or directory exists.
+ *
+ * @param projectDir - Absolute path to project root
+ * @param relativePath - Path relative to project root
+ * @param checkId - Unique check identifier
+ * @param description - Human-readable description for failure message
+ * @param passing - Accumulator for passing checks
+ * @param failing - Accumulator for failing checks
+ */
+export declare function checkFileExists(projectDir: string, relativePath: string, checkId: string, description: string, passing: AuditCheck[], failing: AuditCheck[]): void;
+/**
+ * Check if Status.md was updated recently (within 7 days).
+ *
+ * @param projectDir - Absolute path to project root
+ * @param passing - Accumulator for passing checks
+ * @param failing - Accumulator for failing checks
+ */
+export declare function checkStatusMdFreshness(projectDir: string, passing: AuditCheck[], failing: AuditCheck[]): void;
+/**
+ * Check if hook scripts are installed.
+ *
+ * @param projectDir - Absolute path to project root
+ * @param passing - Accumulator for passing checks
+ * @param failing - Accumulator for failing checks
+ */
+export declare function checkHooksInstalled(projectDir: string, passing: AuditCheck[], failing: AuditCheck[]): void;
+/**
+ * Check for shared modules (config, errors, logging).
+ *
+ * @param projectDir - Absolute path to project root
+ * @param passing - Accumulator for passing checks
+ * @param failing - Accumulator for failing checks
+ */
+export declare function checkSharedModules(projectDir: string, passing: AuditCheck[], failing: AuditCheck[]): void;
+/**
+ * Check package.json for required fields.
+ *
+ * @param projectDir - Absolute path to project root
+ * @param passing - Accumulator for passing checks
+ * @param failing - Accumulator for failing checks
+ * @param exceptions - Registered project exceptions (skips checks that match)
+ */
+export declare function checkPackageJson(projectDir: string, passing: AuditCheck[], failing: AuditCheck[], exceptions?: ReturnType<typeof readExceptions>): void;
+//# sourceMappingURL=completeness-helpers.d.ts.map

package/dist/analyzers/completeness-helpers.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"completeness-helpers.d.ts","sourceRoot":"","sources":["../../src/analyzers/completeness-helpers.ts"],"names":[],"mappings":"AAAA;;GAEG;AAIH,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AACrD,OAAO,EAAE,cAAc,EAAyB,MAAM,yBAAyB,CAAC;AAEhF,0DAA0D;AAC1D,eAAO,MAAM,uBAAuB,UAOnC,CAAC;AAEF;;;;;;GAMG;AACH,wBAAgB,0BAA0B,CACxC,UAAU,EAAE,MAAM,EAClB,OAAO,EAAE,UAAU,EAAE,EACrB,OAAO,EAAE,UAAU,EAAE,GACpB,IAAI,CAkBN;AAED;;;;;;;;;GASG;AACH,wBAAgB,eAAe,CAC7B,UAAU,EAAE,MAAM,EAClB,YAAY,EAAE,MAAM,EACpB,OAAO,EAAE,MAAM,EACf,WAAW,EAAE,MAAM,EACnB,OAAO,EAAE,UAAU,EAAE,EACrB,OAAO,EAAE,UAAU,EAAE,GACpB,IAAI,CAWN;AAED;;;;;;GAMG;AACH,wBAAgB,sBAAsB,CACpC,UAAU,EAAE,MAAM,EAClB,OAAO,EAAE,UAAU,EAAE,EACrB,OAAO,EAAE,UAAU,EAAE,GACpB,IAAI,CAwBN;AAED;;;;;;GAMG;AACH,wBAAgB,mBAAmB,CACjC,UAAU,EAAE,MAAM,EAClB,OAAO,EAAE,UAAU,EAAE,EACrB,OAAO,EAAE,UAAU,EAAE,GACpB,IAAI,CAqCN;AAED;;;;;;GAMG;AACH,wBAAgB,kBAAkB,CAChC,UAAU,EAAE,MAAM,EAClB,OAAO,EAAE,UAAU,EAAE,EACrB,OAAO,EAAE,UAAU,EAAE,GACpB,IAAI,CA4BN;AAED;;;;;;;GAOG;AACH,wBAAgB,gBAAgB,CAC9B,UAAU,EAAE,MAAM,EAClB,OAAO,EAAE,UAAU,EAAE,EACrB,OAAO,EAAE,UAAU,EAAE,EACrB,UAAU,GAAE,UAAU,CAAC,OAAO,cAAc,CAAM,GACjD,IAAI,CA0DN"}