mythik-cli 0.1.0

package/dist/config.js

@@ -0,0 +1,112 @@
+import fs from 'fs';
+import path from 'path';
+export function loadConfig(options = {}) {
+    const cwd = options.cwd ?? process.cwd();
+    const flags = options.flags ?? {};
+    let config;
+    // Priority 1: CLI flags
+    if (flags.store) {
+        config = buildConfigFromFlags(flags);
+    }
+    // Priority 2: Env vars
+    else if (process.env.MYTHIK_STORE) {
+        config = buildConfigFromEnv();
+    }
+    // Priority 3: .mythikrc file (search upward)
+    else {
+        const rcPath = findRcFile(cwd);
+        if (!rcPath) {
+            throw new Error(`No configuration found\n\n` +
+                `  Looked for .mythikrc from ${cwd} upward.\n` +
+                `  Also checked: MYTHIK_STORE, MYTHIK_SUPABASE_URL env vars.\n\n` +
+                `  Fix: run mythik init\n` +
+                `       or create .mythikrc manually\n` +
+                `       or pass --store, --url, --key flags`);
+        }
+        const raw = JSON.parse(fs.readFileSync(rcPath, 'utf-8'));
+        config = resolveEnvVars(raw);
+    }
+    // --table flag overrides store table for any store type
+    if (flags.table) {
+        if (config.sqlserver)
+            config.sqlserver.table = flags.table;
+        if (config.supabase)
+            config.supabase.table = flags.table;
+    }
+    return config;
+}
+function findRcFile(startDir) {
+    let dir = path.resolve(startDir);
+    const root = path.parse(dir).root;
+    while (true) {
+        const candidate = path.join(dir, '.mythikrc');
+        if (fs.existsSync(candidate))
+            return candidate;
+        const parent = path.dirname(dir);
+        if (parent === dir || dir === root)
+            return null;
+        dir = parent;
+    }
+}
+function buildConfigFromFlags(flags) {
+    const config = { store: flags.store };
+    if (flags.store === 'supabase') {
+        config.supabase = { url: flags.url ?? '', apiKey: flags.key ?? '' };
+    }
+    else if (flags.store === 'sqlserver') {
+        config.sqlserver = {
+            server: flags.server ?? flags.url ?? '',
+            database: flags.database ?? flags.db ?? '',
+            user: flags.user ?? undefined,
+            password: flags.password ?? undefined,
+        };
+    }
+    else if (flags.store === 'file') {
+        config.file = { dir: flags.dir ?? './specs' };
+    }
+    return config;
+}
+function buildConfigFromEnv() {
+    const store = process.env.MYTHIK_STORE;
+    const config = { store };
+    if (store === 'supabase') {
+        config.supabase = {
+            url: process.env.MYTHIK_SUPABASE_URL ?? '',
+            apiKey: process.env.MYTHIK_API_KEY ?? '',
+        };
+    }
+    else if (store === 'file') {
+        config.file = { dir: process.env.MYTHIK_FILE_DIR ?? './specs' };
+    }
+    return config;
+}
+export function resolveEnvVars(config) {
+    const clone = structuredClone(config);
+    if (clone.supabase) {
+        clone.supabase.url = resolveValue(clone.supabase.url);
+        clone.supabase.apiKey = resolveValue(clone.supabase.apiKey);
+    }
+    if (clone.file) {
+        clone.file.dir = resolveValue(clone.file.dir);
+    }
+    if (clone.sqlserver) {
+        clone.sqlserver.server = resolveValue(clone.sqlserver.server);
+        clone.sqlserver.database = resolveValue(clone.sqlserver.database);
+        if (clone.sqlserver.user)
+            clone.sqlserver.user = resolveValue(clone.sqlserver.user);
+        if (clone.sqlserver.password)
+            clone.sqlserver.password = resolveValue(clone.sqlserver.password);
+    }
+    return clone;
+}
+function resolveValue(value) {
+    if (!value.startsWith('$'))
+        return value;
+    const envName = value.slice(1);
+    const resolved = process.env[envName];
+    if (resolved === undefined) {
+        throw new Error(`Environment variable ${envName} is not set (referenced as "${value}" in .mythikrc)`);
+    }
+    return resolved;
+}
+//# sourceMappingURL=config.js.map

package/dist/config.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.js","sourceRoot":"","sources":["../src/config.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,IAAI,CAAC;AACpB,OAAO,IAAI,MAAM,MAAM,CAAC;AAsBxB,MAAM,UAAU,UAAU,CAAC,UAA6B,EAAE;IACxD,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC;IACzC,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,IAAI,EAAE,CAAC;IAElC,IAAI,MAAoB,CAAC;IAEzB,wBAAwB;IACxB,IAAI,KAAK,CAAC,KAAK,EAAE,CAAC;QAChB,MAAM,GAAG,oBAAoB,CAAC,KAAK,CAAC,CAAC;IACvC,CAAC;IACD,uBAAuB;SAClB,IAAI,OAAO,CAAC,GAAG,CAAC,YAAY,EAAE,CAAC;QAClC,MAAM,GAAG,kBAAkB,EAAE,CAAC;IAChC,CAAC;IACD,6CAA6C;SACxC,CAAC;QACJ,MAAM,MAAM,GAAG,UAAU,CAAC,GAAG,CAAC,CAAC;QAC/B,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,MAAM,IAAI,KAAK,CACb,4BAA4B;gBAC5B,+BAA+B,GAAG,YAAY;gBAC9C,iEAAiE;gBACjE,0BAA0B;gBAC1B,uCAAuC;gBACvC,4CAA4C,CAC7C,CAAC;QACJ,CAAC;QACD,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,YAAY,CAAC,MAAM,EAAE,OAAO,CAAC,CAAiB,CAAC;QACzE,MAAM,GAAG,cAAc,CAAC,GAAG,CAAC,CAAC;IAC/B,CAAC;IAED,wDAAwD;IACxD,IAAI,KAAK,CAAC,KAAK,EAAE,CAAC;QAChB,IAAI,MAAM,CAAC,SAAS;YAAE,MAAM,CAAC,SAAS,CAAC,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC;QAC3D,IAAI,MAAM,CAAC,QAAQ;YAAE,MAAM,CAAC,QAAQ,CAAC,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC;IAC3D,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAS,UAAU,CAAC,QAAgB;IAClC,IAAI,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;IACjC,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;IAElC,OAAO,IAAI,EAAE,CAAC;QACZ,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,WAAW,CAAC,CAAC;QAC9C,IAAI,EAAE,CAAC,UAAU,CAAC,SAAS,CAAC;YAAE,OAAO,SAAS,CAAC;QAC/C,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QACjC,IAAI,MAAM,KAAK,GAAG,IAAI,GAAG,KAAK,IAAI;YAAE,OAAO,IAAI,CAAC;QAChD,GAAG,GAAG,MAAM,CAAC;IACf,CAAC;AACH,CAAC;AAED,SAAS,oBAAoB,CAAC,KAA6B;IACzD,MAAM,MAAM,GAAiB,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,CAAC;IAEpD,IAAI,KAAK,CAAC,KAAK,KAAK,UAAU,EAAE,CAAC;QAC/B,MAAM,CAAC,QAAQ,GAAG,EAAE,GAAG,EAAE,KAAK,CAAC,GAAG,IAAI,EAAE,EAAE,MAAM,EAAE,KAAK,CAAC,GAAG,IAAI,EAAE,EAAE,CAAC;IACtE,CAAC;SAAM,IAAI,KAAK,CAAC,KAAK,KAAK,WAAW,EAAE,CAAC;QACvC,MAAM,CAAC,SAAS,GAAG;YACjB,MAAM,EAAE,KAAK,CAAC,MAAM,IAAI,KAAK,CAAC,GAAG,IAAI,EAAE;YACvC,QAAQ,EAAE,KAAK,CAAC,QAAQ,IAAI,KAAK,CAAC,EAAE,IAAI,EAAE;YAC1C,IAAI,EAAE,KAAK,CAAC,IAAI,IAAI,SAAS;YAC7B,QAAQ,EAAE,KAAK,CAAC,QAAQ,IAAI,SAAS;SACtC,CAAC;IACJ,CAAC;SAAM,IAAI,KAAK,CAAC,KAAK,KAAK,MAAM,EAAE,CAAC;QAClC,MAAM,CAAC,IAAI,GAAG,EAAE,GAAG,EAAE,KAAK,CAAC,GAAG,IAAI,SAAS,EAAE,CAAC;IAChD,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAS,kBAAkB;IACzB,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,YAAa,CAAC;IACxC,MAAM,MAAM,GAAiB,EAAE,KAAK,EAAE,CAAC;IAEvC,IAAI,KAAK,KAAK,UAAU,EAAE,CAAC;QACzB,MAAM,CAAC,QAAQ,GAAG;YAChB,GAAG,EAAE,OAAO,CAAC,GAAG,CAAC,mBAAmB,IAAI,EAAE;YAC1C,MAAM,EAAE,OAAO,CAAC,GAAG,CAAC,cAAc,IAAI,EAAE;SACzC,CAAC;IACJ,CAAC;SAAM,IAAI,KAAK,KAAK,MAAM,EAAE,CAAC;QAC5B,MAAM,CAAC,IAAI,GAAG,EAAE,GAAG,EAAE,OAAO,CAAC,GAAG,CAAC,eAAe,IAAI,SAAS,EAAE,CAAC;IAClE,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,MAAoB;IACjD,MAAM,KAAK,GAAG,eAAe,CAAC,MAAM,CAAC,CAAC;IAEtC,IAAI,KAAK,CAAC,QAAQ,EAAE,CAAC;QACnB,KAAK,CAAC,QAAQ,CAAC,GAAG,GAAG,YAAY,CAAC,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;QACtD,KAAK,CAAC,QAAQ,CAAC,MAAM,GAAG,YAAY,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;IAC9D,CAAC;IACD,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC;QACf,KAAK,CAAC,IAAI,CAAC,GAAG,GAAG,YAAY,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAChD,CAAC;IACD,IAAI,KAAK,CAAC,SAAS,EAAE,CAAC;QACpB,KAAK,CAAC,SAAS,CAAC,MAAM,GAAG,YAAY,CAAC,KAAK,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;QAC9D,KAAK,CAAC,SAAS,CAAC,QAAQ,GAAG,YAAY,CAAC,KAAK,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC;QAClE,IAAI,KAAK,CAAC,SAAS,CAAC,IAAI;YAAE,KAAK,CAAC,SAAS,CAAC,IAAI,GAAG,YAAY,CAAC,KAAK,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;QACpF,IAAI,KAAK,CAAC,SAAS,CAAC,QAAQ;YAAE,KAAK,CAAC,SAAS,CAAC,QAAQ,GAAG,YAAY,CAAC,KAAK,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC;IAClG,CAAC;IAED,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,YAAY,CAAC,KAAa;IACjC,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC;QAAE,OAAO,KAAK,CAAC;IACzC,MAAM,OAAO,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IAC/B,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;IACtC,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;QAC3B,MAAM,IAAI,KAAK,CACb,wBAAwB,OAAO,+BAA+B,KAAK,iBAAiB,CACrF,CAAC;IACJ,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC"}

package/dist/input-resolver.d.ts

@@ -0,0 +1,22 @@
+export interface ResolveInputOptions {
+    /** `--from-file <path>` flag value. `-` means stdin. */
+    fromFile?: string;
+    /** Positional argument (patch command only — passes raw JSON inline). */
+    positional?: string;
+    /** Stream to read from when fromFile is `-` or unset. Inject for testability. */
+    stdin: NodeJS.ReadableStream;
+    /** Whether stdin is a TTY (no piped input). Inject for testability. */
+    stdinIsTTY: boolean;
+}
+/**
+ * Resolves command input from one of the three approved sources:
+ * - `--from-file <path>` (cross-shell ergonomics)
+ * - `--from-file -` (stdin alias)
+ * - Stdin pipe / positional argument (legacy paths)
+ *
+ * Explicit sources win over ambient stdin. This avoids false conflicts in
+ * shells/agents where stdin is non-TTY even when no pipe was intended.
+ * Use `--from-file -` or omit explicit sources to read stdin.
+ */
+export declare function resolveInput(opts: ResolveInputOptions): Promise<string>;
+//# sourceMappingURL=input-resolver.d.ts.map

package/dist/input-resolver.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"input-resolver.d.ts","sourceRoot":"","sources":["../src/input-resolver.ts"],"names":[],"mappings":"AAEA,MAAM,WAAW,mBAAmB;IAClC,wDAAwD;IACxD,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,yEAAyE;IACzE,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,iFAAiF;IACjF,KAAK,EAAE,MAAM,CAAC,cAAc,CAAC;IAC7B,uEAAuE;IACvE,UAAU,EAAE,OAAO,CAAC;CACrB;AAED;;;;;;;;;GASG;AACH,wBAAsB,YAAY,CAAC,IAAI,EAAE,mBAAmB,GAAG,OAAO,CAAC,MAAM,CAAC,CAmC7E"}

package/dist/input-resolver.js

@@ -0,0 +1,55 @@
+import { readFile } from 'node:fs/promises';
+/**
+ * Resolves command input from one of the three approved sources:
+ * - `--from-file <path>` (cross-shell ergonomics)
+ * - `--from-file -` (stdin alias)
+ * - Stdin pipe / positional argument (legacy paths)
+ *
+ * Explicit sources win over ambient stdin. This avoids false conflicts in
+ * shells/agents where stdin is non-TTY even when no pipe was intended.
+ * Use `--from-file -` or omit explicit sources to read stdin.
+ */
+export async function resolveInput(opts) {
+    // Non-TTY stdin implies piped/redirected input. Actual emptiness is detected
+    // later when the stream yields no chunks.
+    const stdinHasContent = !opts.stdinIsTTY;
+    const sources = [];
+    if (opts.fromFile !== undefined)
+        sources.push('--from-file');
+    if (opts.positional !== undefined)
+        sources.push('positional argument');
+    if (sources.length > 1) {
+        throw new Error(`Conflicting input sources: ${sources.join(', ')}. Use ONE of: --from-file <path>, stdin pipe, or positional argument.`);
+    }
+    if (opts.fromFile !== undefined) {
+        if (opts.fromFile === '-') {
+            return readStream(opts.stdin);
+        }
+        try {
+            const content = await readFile(opts.fromFile, 'utf-8');
+            return content.trim();
+        }
+        catch (err) {
+            throw new Error(`Could not read file "${opts.fromFile}": ${err.message}`);
+        }
+    }
+    if (opts.positional !== undefined) {
+        return opts.positional;
+    }
+    if (stdinHasContent) {
+        return readStream(opts.stdin);
+    }
+    throw new Error('No input. Provide --from-file <path>, pipe stdin, or pass an argument.');
+}
+async function readStream(stream) {
+    // Stream may emit string OR Buffer chunks depending on the producer:
+    // - process.stdin → Buffer chunks (production CLI path)
+    // - Readable.from([strings]) → string chunks (test injections)
+    // Both paths active by design; do not reduce to Buffer-only without breaking tests.
+    const parts = [];
+    for await (const chunk of stream) {
+        parts.push(typeof chunk === 'string' ? chunk : chunk.toString('utf-8'));
+    }
+    return parts.join('').trim();
+}
+//# sourceMappingURL=input-resolver.js.map

package/dist/input-resolver.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"input-resolver.js","sourceRoot":"","sources":["../src/input-resolver.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAa5C;;;;;;;;;GASG;AACH,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,IAAyB;IAC1D,6EAA6E;IAC7E,0CAA0C;IAC1C,MAAM,eAAe,GAAG,CAAC,IAAI,CAAC,UAAU,CAAC;IACzC,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,IAAI,IAAI,CAAC,QAAQ,KAAK,SAAS;QAAE,OAAO,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;IAC7D,IAAI,IAAI,CAAC,UAAU,KAAK,SAAS;QAAE,OAAO,CAAC,IAAI,CAAC,qBAAqB,CAAC,CAAC;IAEvE,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACvB,MAAM,IAAI,KAAK,CACb,8BAA8B,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,uEAAuE,CACxH,CAAC;IACJ,CAAC;IAED,IAAI,IAAI,CAAC,QAAQ,KAAK,SAAS,EAAE,CAAC;QAChC,IAAI,IAAI,CAAC,QAAQ,KAAK,GAAG,EAAE,CAAC;YAC1B,OAAO,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAChC,CAAC;QACD,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;YACvD,OAAO,OAAO,CAAC,IAAI,EAAE,CAAC;QACxB,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,IAAI,KAAK,CAAC,wBAAwB,IAAI,CAAC,QAAQ,MAAO,GAAa,CAAC,OAAO,EAAE,CAAC,CAAC;QACvF,CAAC;IACH,CAAC;IAED,IAAI,IAAI,CAAC,UAAU,KAAK,SAAS,EAAE,CAAC;QAClC,OAAO,IAAI,CAAC,UAAU,CAAC;IACzB,CAAC;IAED,IAAI,eAAe,EAAE,CAAC;QACpB,OAAO,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAChC,CAAC;IAED,MAAM,IAAI,KAAK,CAAC,wEAAwE,CAAC,CAAC;AAC5F,CAAC;AAED,KAAK,UAAU,UAAU,CAAC,MAA6B;IACrD,qEAAqE;IACrE,wDAAwD;IACxD,+DAA+D;IAC/D,oFAAoF;IACpF,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,IAAI,KAAK,EAAE,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QACjC,KAAK,CAAC,IAAI,CAAC,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAE,KAAgB,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC;IACtF,CAAC;IACD,OAAO,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;AAC/B,CAAC"}

package/dist/levenshtein.d.ts

@@ -0,0 +1,2 @@
+export { levenshtein, suggest } from 'mythik';
+//# sourceMappingURL=levenshtein.d.ts.map

package/dist/levenshtein.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"levenshtein.d.ts","sourceRoot":"","sources":["../src/levenshtein.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,OAAO,EAAE,MAAM,QAAQ,CAAC"}

package/dist/levenshtein.js

@@ -0,0 +1,2 @@
+export { levenshtein, suggest } from 'mythik';
+//# sourceMappingURL=levenshtein.js.map

package/dist/levenshtein.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"levenshtein.js","sourceRoot":"","sources":["../src/levenshtein.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,OAAO,EAAE,MAAM,QAAQ,CAAC"}

package/dist/lint/code-rules.d.ts

@@ -0,0 +1,30 @@
+/**
+ * Code lint rule motor — TypeScript Compiler API (peerDep optional).
+ *
+ * `typescript` is declared as peerDependency (optional) in mythik-cli.
+ * Most Mythik consumers already have TS installed; if not, code rules
+ * skip cleanly via graceful degradation (loadTypeScript returns null).
+ *
+ * Rule 4 implementation: code-store-save-bypass — see scanCodeFile (Task 7).
+ */
+import type { LintFinding } from './types.js';
+/**
+ * Dynamic import of `typescript` with graceful degradation.
+ * Returns null if TS not installed or import fails.
+ * Result is cached across calls (vi.resetModules() in tests resets the cache).
+ */
+export declare function loadTypeScript(): Promise<typeof import('typescript') | null>;
+/**
+ * Scan a TypeScript/JavaScript source file for code lint violations.
+ *
+ * Rule: code-store-save-bypass — error when calling `<identifier>.save(...)`
+ * where identifier matches case-insensitive `/store$/i` AND file is NOT inside
+ * `packages/core/` or `packages/cli/` (allowed framework internal paths).
+ *
+ * @param filePath - Relative path of the file (used in LintFinding.file + path filter).
+ * @param content - Source file content.
+ * @param ts - TypeScript Compiler API (from loadTypeScript()).
+ * @returns LintFinding[] — empty if no violations.
+ */
+export declare function scanCodeFile(filePath: string, content: string, ts: typeof import('typescript')): LintFinding[];
+//# sourceMappingURL=code-rules.d.ts.map

package/dist/lint/code-rules.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"code-rules.d.ts","sourceRoot":"","sources":["../../src/lint/code-rules.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AAI9C;;;;GAIG;AACH,wBAAsB,cAAc,IAAI,OAAO,CAAC,cAAc,YAAY,CAAC,GAAG,IAAI,CAAC,CAQlF;AAYD;;;;;;;;;;;GAWG;AACH,wBAAgB,YAAY,CAC1B,QAAQ,EAAE,MAAM,EAChB,OAAO,EAAE,MAAM,EACf,EAAE,EAAE,cAAc,YAAY,CAAC,GAC9B,WAAW,EAAE,CAiCf"}

package/dist/lint/code-rules.js

@@ -0,0 +1,81 @@
+/**
+ * Code lint rule motor — TypeScript Compiler API (peerDep optional).
+ *
+ * `typescript` is declared as peerDependency (optional) in mythik-cli.
+ * Most Mythik consumers already have TS installed; if not, code rules
+ * skip cleanly via graceful degradation (loadTypeScript returns null).
+ *
+ * Rule 4 implementation: code-store-save-bypass — see scanCodeFile (Task 7).
+ */
+let cachedTs = undefined;
+/**
+ * Dynamic import of `typescript` with graceful degradation.
+ * Returns null if TS not installed or import fails.
+ * Result is cached across calls (vi.resetModules() in tests resets the cache).
+ */
+export async function loadTypeScript() {
+    if (cachedTs !== undefined)
+        return cachedTs;
+    try {
+        cachedTs = await import('typescript');
+    }
+    catch {
+        cachedTs = null;
+    }
+    return cachedTs;
+}
+const STORE_NAME_PATTERN = /store$/i;
+const ALLOWED_PATH_PATTERNS = [
+    /(^|[/\\])packages[/\\]core[/\\]/,
+    /(^|[/\\])packages[/\\]cli[/\\]/,
+];
+function isAllowedFilePath(filePath) {
+    return ALLOWED_PATH_PATTERNS.some(re => re.test(filePath));
+}
+/**
+ * Scan a TypeScript/JavaScript source file for code lint violations.
+ *
+ * Rule: code-store-save-bypass — error when calling `<identifier>.save(...)`
+ * where identifier matches case-insensitive `/store$/i` AND file is NOT inside
+ * `packages/core/` or `packages/cli/` (allowed framework internal paths).
+ *
+ * @param filePath - Relative path of the file (used in LintFinding.file + path filter).
+ * @param content - Source file content.
+ * @param ts - TypeScript Compiler API (from loadTypeScript()).
+ * @returns LintFinding[] — empty if no violations.
+ */
+export function scanCodeFile(filePath, content, ts) {
+    if (isAllowedFilePath(filePath))
+        return [];
+    const findings = [];
+    const sourceFile = ts.createSourceFile(filePath, content, ts.ScriptTarget.Latest, true);
+    function visit(node) {
+        if (ts.isCallExpression(node)) {
+            const callee = node.expression;
+            if (ts.isPropertyAccessExpression(callee) && callee.name.text === 'save') {
+                const receiver = callee.expression;
+                if (ts.isIdentifier(receiver) && STORE_NAME_PATTERN.test(receiver.text)) {
+                    const lineCol = sourceFile.getLineAndCharacterOfPosition(callee.getStart(sourceFile));
+                    findings.push({
+                        file: filePath,
+                        ruleId: 'code-store-save-bypass',
+                        severity: 'error',
+                        message: `${receiver.text}.save() bypasses validation pipeline — use runPush from mythik-cli/api or 'mythik push --from-file'`,
+                        location: { line: lineCol.line + 1, column: lineCol.character },
+                        suggestedFix: {
+                            type: 'code-snippet',
+                            before: `${receiver.text}.save(<id>, <doc>)`,
+                            after: `await runPush({ store, screenId: <id>, doc: <doc> })`,
+                            explanation: `Use runPush from mythik-cli/api for validated writes. Or: mythik push <id> --from-file <path>`,
+                        },
+                        docRef: 'reference-doc.md#rule-249',
+                    });
+                }
+            }
+        }
+        ts.forEachChild(node, visit);
+    }
+    visit(sourceFile);
+    return findings;
+}
+//# sourceMappingURL=code-rules.js.map

package/dist/lint/code-rules.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"code-rules.js","sourceRoot":"","sources":["../../src/lint/code-rules.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAIH,IAAI,QAAQ,GAAmD,SAAS,CAAC;AAEzE;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc;IAClC,IAAI,QAAQ,KAAK,SAAS;QAAE,OAAO,QAAQ,CAAC;IAC5C,IAAI,CAAC;QACH,QAAQ,GAAG,MAAM,MAAM,CAAC,YAAY,CAAC,CAAC;IACxC,CAAC;IAAC,MAAM,CAAC;QACP,QAAQ,GAAG,IAAI,CAAC;IAClB,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,MAAM,kBAAkB,GAAG,SAAS,CAAC;AACrC,MAAM,qBAAqB,GAAG;IAC5B,iCAAiC;IACjC,gCAAgC;CACjC,CAAC;AAEF,SAAS,iBAAiB,CAAC,QAAgB;IACzC,OAAO,qBAAqB,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC;AAC7D,CAAC;AAED;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,YAAY,CAC1B,QAAgB,EAChB,OAAe,EACf,EAA+B;IAE/B,IAAI,iBAAiB,CAAC,QAAQ,CAAC;QAAE,OAAO,EAAE,CAAC;IAC3C,MAAM,QAAQ,GAAkB,EAAE,CAAC;IACnC,MAAM,UAAU,GAAG,EAAE,CAAC,gBAAgB,CAAC,QAAQ,EAAE,OAAO,EAAE,EAAE,CAAC,YAAY,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;IAExF,SAAS,KAAK,CAAC,IAA+B;QAC5C,IAAI,EAAE,CAAC,gBAAgB,CAAC,IAAI,CAAC,EAAE,CAAC;YAC9B,MAAM,MAAM,GAAG,IAAI,CAAC,UAAU,CAAC;YAC/B,IAAI,EAAE,CAAC,0BAA0B,CAAC,MAAM,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;gBACzE,MAAM,QAAQ,GAAG,MAAM,CAAC,UAAU,CAAC;gBACnC,IAAI,EAAE,CAAC,YAAY,CAAC,QAAQ,CAAC,IAAI,kBAAkB,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;oBACxE,MAAM,OAAO,GAAG,UAAU,CAAC,6BAA6B,CAAC,MAAM,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC,CAAC;oBACtF,QAAQ,CAAC,IAAI,CAAC;wBACZ,IAAI,EAAE,QAAQ;wBACd,MAAM,EAAE,wBAAwB;wBAChC,QAAQ,EAAE,OAAO;wBACjB,OAAO,EAAE,GAAG,QAAQ,CAAC,IAAI,qGAAqG;wBAC9H,QAAQ,EAAE,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,GAAG,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,SAAS,EAAE;wBAC/D,YAAY,EAAE;4BACZ,IAAI,EAAE,cAAc;4BACpB,MAAM,EAAE,GAAG,QAAQ,CAAC,IAAI,oBAAoB;4BAC5C,KAAK,EAAE,sDAAsD;4BAC7D,WAAW,EAAE,+FAA+F;yBAC7G;wBACD,MAAM,EAAE,2BAA2B;qBACpC,CAAC,CAAC;gBACL,CAAC;YACH,CAAC;QACH,CAAC;QACD,EAAE,CAAC,YAAY,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;IAC/B,CAAC;IACD,KAAK,CAAC,UAAU,CAAC,CAAC;IAClB,OAAO,QAAQ,CAAC;AAClB,CAAC"}

package/dist/lint/format.d.ts

@@ -0,0 +1,12 @@
+/**
+ * Output renderers for `mythik lint`.
+ *
+ * - formatHuman: file-grouped, color-coded, with suggested fixes inline
+ * - formatJson: structured machine output (one-line JSON)
+ * - computeExitCode: 0 if no errors (warnings OK), 1 if any error
+ */
+import type { LintResult } from './types.js';
+export declare function formatJson(result: LintResult): string;
+export declare function formatHuman(result: LintResult): string;
+export declare function computeExitCode(result: LintResult): number;
+//# sourceMappingURL=format.d.ts.map

package/dist/lint/format.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"format.d.ts","sourceRoot":"","sources":["../../src/lint/format.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,YAAY,CAAC;AAU7C,wBAAgB,UAAU,CAAC,MAAM,EAAE,UAAU,GAAG,MAAM,CAErD;AAED,wBAAgB,WAAW,CAAC,MAAM,EAAE,UAAU,GAAG,MAAM,CAiDtD;AAED,wBAAgB,eAAe,CAAC,MAAM,EAAE,UAAU,GAAG,MAAM,CAE1D"}

package/dist/lint/format.js

@@ -0,0 +1,68 @@
+/**
+ * Output renderers for `mythik lint`.
+ *
+ * - formatHuman: file-grouped, color-coded, with suggested fixes inline
+ * - formatJson: structured machine output (one-line JSON)
+ * - computeExitCode: 0 if no errors (warnings OK), 1 if any error
+ */
+const RED = '\x1b[31m';
+const YELLOW = '\x1b[33m';
+const GREEN = '\x1b[32m';
+const CYAN = '\x1b[36m';
+const DIM = '\x1b[2m';
+const BOLD = '\x1b[1m';
+const RESET = '\x1b[0m';
+export function formatJson(result) {
+    return JSON.stringify(result);
+}
+export function formatHuman(result) {
+    const lines = [];
+    const { findings, summary } = result;
+    if (findings.length === 0) {
+        lines.push(`${GREEN}✓${RESET} ${BOLD}Lint clean${RESET} — ${summary.files} file${summary.files !== 1 ? 's' : ''} scanned, 0 errors, 0 warnings`);
+        return lines.join('\n');
+    }
+    // Group by file
+    const byFile = new Map();
+    for (const f of findings) {
+        if (!byFile.has(f.file))
+            byFile.set(f.file, []);
+        byFile.get(f.file).push(f);
+    }
+    for (const [file, fs] of byFile) {
+        lines.push('');
+        lines.push(`${BOLD}${file}${RESET}`);
+        for (const f of fs) {
+            const sevColor = f.severity === 'error' ? RED : YELLOW;
+            const sevSymbol = f.severity === 'error' ? '✗' : '⚠';
+            const loc = f.location.line !== undefined
+                ? `:${f.location.line}:${f.location.column ?? 0}`
+                : f.location.jsonPath ? ` ${f.location.jsonPath}` : '';
+            lines.push(`  ${sevColor}${sevSymbol}${RESET} ${DIM}${f.ruleId}${RESET}${loc}`);
+            lines.push(`    ${f.message}`);
+            if (f.suggestedFix) {
+                if (f.suggestedFix.type === 'json-patch') {
+                    lines.push(`    ${CYAN}→${RESET} ${f.suggestedFix.description}`);
+                    lines.push(`      ${DIM}${JSON.stringify(f.suggestedFix.patch)}${RESET}`);
+                }
+                else {
+                    lines.push(`    ${CYAN}→${RESET} ${f.suggestedFix.explanation}`);
+                    lines.push(`      ${DIM}before:${RESET} ${f.suggestedFix.before}`);
+                    lines.push(`      ${DIM}after:${RESET}  ${f.suggestedFix.after}`);
+                }
+            }
+            if (f.docRef) {
+                lines.push(`    ${DIM}see ${f.docRef}${RESET}`);
+            }
+        }
+    }
+    lines.push('');
+    const errClr = summary.errors > 0 ? RED : GREEN;
+    const warnClr = summary.warnings > 0 ? YELLOW : DIM;
+    lines.push(`${BOLD}Summary:${RESET} ${errClr}${summary.errors} error${summary.errors !== 1 ? 's' : ''}${RESET}, ${warnClr}${summary.warnings} warning${summary.warnings !== 1 ? 's' : ''}${RESET} across ${summary.files} file${summary.files !== 1 ? 's' : ''}`);
+    return lines.join('\n');
+}
+export function computeExitCode(result) {
+    return result.summary.errors > 0 ? 1 : 0;
+}
+//# sourceMappingURL=format.js.map

package/dist/lint/format.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"format.js","sourceRoot":"","sources":["../../src/lint/format.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAIH,MAAM,GAAG,GAAG,UAAU,CAAC;AACvB,MAAM,MAAM,GAAG,UAAU,CAAC;AAC1B,MAAM,KAAK,GAAG,UAAU,CAAC;AACzB,MAAM,IAAI,GAAG,UAAU,CAAC;AACxB,MAAM,GAAG,GAAG,SAAS,CAAC;AACtB,MAAM,IAAI,GAAG,SAAS,CAAC;AACvB,MAAM,KAAK,GAAG,SAAS,CAAC;AAExB,MAAM,UAAU,UAAU,CAAC,MAAkB;IAC3C,OAAO,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;AAChC,CAAC;AAED,MAAM,UAAU,WAAW,CAAC,MAAkB;IAC5C,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,MAAM,EAAE,QAAQ,EAAE,OAAO,EAAE,GAAG,MAAM,CAAC;IAErC,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC1B,KAAK,CAAC,IAAI,CAAC,GAAG,KAAK,IAAI,KAAK,IAAI,IAAI,aAAa,KAAK,MAAM,OAAO,CAAC,KAAK,QAAQ,OAAO,CAAC,KAAK,KAAK,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,gCAAgC,CAAC,CAAC;QACjJ,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC1B,CAAC;IAED,gBAAgB;IAChB,MAAM,MAAM,GAAG,IAAI,GAAG,EAA2B,CAAC;IAClD,KAAK,MAAM,CAAC,IAAI,QAAQ,EAAE,CAAC;QACzB,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC;YAAE,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;QAChD,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAE,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAC9B,CAAC;IAED,KAAK,MAAM,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,MAAM,EAAE,CAAC;QAChC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACf,KAAK,CAAC,IAAI,CAAC,GAAG,IAAI,GAAG,IAAI,GAAG,KAAK,EAAE,CAAC,CAAC;QACrC,KAAK,MAAM,CAAC,IAAI,EAAE,EAAE,CAAC;YACnB,MAAM,QAAQ,GAAG,CAAC,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC;YACvD,MAAM,SAAS,GAAG,CAAC,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC;YACrD,MAAM,GAAG,GAAG,CAAC,CAAC,QAAQ,CAAC,IAAI,KAAK,SAAS;gBACvC,CAAC,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,IAAI,IAAI,CAAC,CAAC,QAAQ,CAAC,MAAM,IAAI,CAAC,EAAE;gBACjD,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACzD,KAAK,CAAC,IAAI,CAAC,KAAK,QAAQ,GAAG,SAAS,GAAG,KAAK,IAAI,GAAG,GAAG,CAAC,CAAC,MAAM,GAAG,KAAK,GAAG,GAAG,EAAE,CAAC,CAAC;YAChF,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC;YAC/B,IAAI,CAAC,CAAC,YAAY,EAAE,CAAC;gBACnB,IAAI,CAAC,CAAC,YAAY,CAAC,IAAI,KAAK,YAAY,EAAE,CAAC;oBACzC,KAAK,CAAC,IAAI,CAAC,OAAO,IAAI,IAAI,KAAK,IAAI,CAAC,CAAC,YAAY,CAAC,WAAW,EAAE,CAAC,CAAC;oBACjE,KAAK,CAAC,IAAI,CAAC,SAAS,GAAG,GAAG,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,YAAY,CAAC,KAAK,CAAC,GAAG,KAAK,EAAE,CAAC,CAAC;gBAC5E,CAAC;qBAAM,CAAC;oBACN,KAAK,CAAC,IAAI,CAAC,OAAO,IAAI,IAAI,KAAK,IAAI,CAAC,CAAC,YAAY,CAAC,WAAW,EAAE,CAAC,CAAC;oBACjE,KAAK,CAAC,IAAI,CAAC,SAAS,GAAG,UAAU,KAAK,IAAI,CAAC,CAAC,YAAY,CAAC,MAAM,EAAE,CAAC,CAAC;oBACnE,KAAK,CAAC,IAAI,CAAC,SAAS,GAAG,SAAS,KAAK,KAAK,CAAC,CAAC,YAAY,CAAC,KAAK,EAAE,CAAC,CAAC;gBACpE,CAAC;YACH,CAAC;YACD,IAAI,CAAC,CAAC,MAAM,EAAE,CAAC;gBACb,KAAK,CAAC,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC,CAAC,MAAM,GAAG,KAAK,EAAE,CAAC,CAAC;YAClD,CAAC;QACH,CAAC;IACH,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACf,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC;IAChD,MAAM,OAAO,GAAG,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC;IACpD,KAAK,CAAC,IAAI,CAAC,GAAG,IAAI,WAAW,KAAK,IAAI,MAAM,GAAG,OAAO,CAAC,MAAM,SAAS,OAAO,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,GAAG,KAAK,KAAK,OAAO,GAAG,OAAO,CAAC,QAAQ,WAAW,OAAO,CAAC,QAAQ,KAAK,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,GAAG,KAAK,WAAW,OAAO,CAAC,KAAK,QAAQ,OAAO,CAAC,KAAK,KAAK,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IAElQ,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC1B,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,MAAkB;IAChD,OAAO,MAAM,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AAC3C,CAAC"}

package/dist/lint/orchestrator.d.ts

@@ -0,0 +1,17 @@
+/**
+ * `runLint` — entry point for `mythik lint` command and `mythik-cli/api` programmatic export.
+ *
+ * Coordinates spec + code lint phases:
+ * 1. Discover targets (via spec-discovery)
+ * 2. Run spec rules (via mythik validators) — convert ValidationError to LintFinding
+ * 3. Run code rules (via lint/code-rules.ts) — TypeScript Compiler API scan
+ * 4. Aggregate findings + compute summary
+ *
+ * Spec rules: rule 1 in spec-validator.ts (Spec docs), rules 2+3 in api-spec-validator.ts (ApiSpec docs).
+ * Code rule: rule 4 in code-rules.ts (TypeScript Compiler API).
+ *
+ * peerDep TS optional: code rules degrade gracefully when typescript not installed.
+ */
+import type { LintResult, LintOptions } from './types.js';
+export declare function runLint(opts?: LintOptions): Promise<LintResult>;
+//# sourceMappingURL=orchestrator.d.ts.map

package/dist/lint/orchestrator.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"orchestrator.d.ts","sourceRoot":"","sources":["../../src/lint/orchestrator.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAKH,OAAO,KAAK,EAAe,UAAU,EAAE,WAAW,EAAgB,MAAM,YAAY,CAAC;AAsDrF,wBAAsB,OAAO,CAAC,IAAI,GAAE,WAAgB,GAAG,OAAO,CAAC,UAAU,CAAC,CAqDzE"}

package/dist/lint/orchestrator.js

@@ -0,0 +1,124 @@
+/**
+ * `runLint` — entry point for `mythik lint` command and `mythik-cli/api` programmatic export.
+ *
+ * Coordinates spec + code lint phases:
+ * 1. Discover targets (via spec-discovery)
+ * 2. Run spec rules (via mythik validators) — convert ValidationError to LintFinding
+ * 3. Run code rules (via lint/code-rules.ts) — TypeScript Compiler API scan
+ * 4. Aggregate findings + compute summary
+ *
+ * Spec rules: rule 1 in spec-validator.ts (Spec docs), rules 2+3 in api-spec-validator.ts (ApiSpec docs).
+ * Code rule: rule 4 in code-rules.ts (TypeScript Compiler API).
+ *
+ * peerDep TS optional: code rules degrade gracefully when typescript not installed.
+ */
+import * as fs from 'node:fs';
+import * as path from 'node:path';
+import { validateSpec, validateApiSpec } from 'mythik';
+import { validationErrorToLintFinding } from './types.js';
+import { discoverSpecs, discoverCode } from './spec-discovery.js';
+import { loadTypeScript, scanCodeFile } from './code-rules.js';
+function detectDocKind(parsed) {
+    if (!parsed || typeof parsed !== 'object')
+        return 'unknown';
+    const o = parsed;
+    // Spec docs have root + elements
+    if (typeof o.root === 'string' && o.elements && typeof o.elements === 'object')
+        return 'spec';
+    // ApiSpec docs have endpoints (object) or catalogs.
+    // Note: ApiSpec.endpoints is Record<string, EndpointConfig> (object, not array) — see
+    // packages/server/src/types.ts and packages/core/src/security/api-spec-validator.ts:85.
+    if ((o.endpoints && typeof o.endpoints === 'object') || (o.catalogs && typeof o.catalogs === 'object'))
+        return 'apispec';
+    return 'unknown';
+}
+async function lintSpecFile(file, cwd) {
+    let parsed;
+    try {
+        parsed = JSON.parse(fs.readFileSync(file, 'utf-8'));
+    }
+    catch {
+        return []; // Not parseable as JSON — skip silently
+    }
+    const kind = detectDocKind(parsed);
+    if (kind === 'unknown')
+        return []; // Not a Mythik spec — skip
+    const findings = [];
+    const relFile = path.relative(cwd, file);
+    if (kind === 'spec') {
+        const result = validateSpec(parsed);
+        const lintWarnings = (result.warnings ?? []).filter(w => w.ruleId !== undefined);
+        for (const w of lintWarnings) {
+            findings.push(validationErrorToLintFinding(w, relFile, 'warning'));
+        }
+    }
+    else if (kind === 'apispec') {
+        const result = validateApiSpec(parsed);
+        const lintWarnings = result.lintWarnings ?? [];
+        for (const w of lintWarnings) {
+            // Severity inferred by ruleId — only spec-crud-id-collision is error
+            const severity = w.ruleId === 'spec-crud-id-collision' ? 'error' : 'warning';
+            findings.push(validationErrorToLintFinding(w, relFile, severity));
+        }
+    }
+    return findings;
+}
+async function lintCodeFile(file, ts, cwd) {
+    const content = fs.readFileSync(file, 'utf-8');
+    const relFile = path.relative(cwd, file);
+    return scanCodeFile(relFile, content, ts);
+}
+export async function runLint(opts = {}) {
+    const findings = [];
+    const scopes = new Set();
+    const filesScanned = new Set();
+    const cwd = opts.cwd ?? process.cwd();
+    // Spec phase
+    if (!opts.codeOnly) {
+        const specTargets = await discoverSpecs(opts);
+        if (specTargets.length > 0)
+            scopes.add('specs');
+        for (const file of specTargets) {
+            filesScanned.add(file);
+            const fileFindings = await lintSpecFile(file, cwd);
+            findings.push(...fileFindings);
+        }
+    }
+    // Code phase
+    if (!opts.specsOnly) {
+        const codeTargets = await discoverCode(opts);
+        if (codeTargets.length > 0)
+            scopes.add('code');
+        if (codeTargets.length > 0) {
+            const ts = await loadTypeScript();
+            if (!ts) {
+                findings.push({
+                    file: '(global)',
+                    ruleId: 'lint-meta-no-typescript',
+                    severity: 'warning',
+                    message: 'Code rules skipped: TypeScript not installed. Install with: pnpm add -D typescript',
+                    location: {},
+                });
+            }
+            else {
+                for (const file of codeTargets) {
+                    filesScanned.add(file);
+                    const fileFindings = await lintCodeFile(file, ts, cwd);
+                    findings.push(...fileFindings);
+                }
+            }
+        }
+    }
+    const errors = findings.filter(f => f.severity === 'error').length;
+    const warnings = findings.filter(f => f.severity === 'warning').length;
+    return {
+        findings,
+        summary: {
+            errors,
+            warnings,
+            files: filesScanned.size,
+            scopes: Array.from(scopes),
+        },
+    };
+}
+//# sourceMappingURL=orchestrator.js.map

package/dist/lint/orchestrator.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"orchestrator.js","sourceRoot":"","sources":["../../src/lint/orchestrator.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH,OAAO,KAAK,EAAE,MAAM,SAAS,CAAC;AAC9B,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAClC,OAAO,EAAE,YAAY,EAAE,eAAe,EAAE,MAAM,QAAQ,CAAC;AAEvD,OAAO,EAAE,4BAA4B,EAAE,MAAM,YAAY,CAAC;AAC1D,OAAO,EAAE,aAAa,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AAClE,OAAO,EAAE,cAAc,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAC;AAE/D,SAAS,aAAa,CAAC,MAAe;IACpC,IAAI,CAAC,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ;QAAE,OAAO,SAAS,CAAC;IAC5D,MAAM,CAAC,GAAG,MAAiC,CAAC;IAC5C,iCAAiC;IACjC,IAAI,OAAO,CAAC,CAAC,IAAI,KAAK,QAAQ,IAAI,CAAC,CAAC,QAAQ,IAAI,OAAO,CAAC,CAAC,QAAQ,KAAK,QAAQ;QAAE,OAAO,MAAM,CAAC;IAC9F,oDAAoD;IACpD,sFAAsF;IACtF,wFAAwF;IACxF,IAAI,CAAC,CAAC,CAAC,SAAS,IAAI,OAAO,CAAC,CAAC,SAAS,KAAK,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,QAAQ,IAAI,OAAO,CAAC,CAAC,QAAQ,KAAK,QAAQ,CAAC;QAAE,OAAO,SAAS,CAAC;IACzH,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,KAAK,UAAU,YAAY,CAAC,IAAY,EAAE,GAAW;IACnD,IAAI,MAAe,CAAC;IACpB,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,YAAY,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC,CAAC;IACtD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC,CAAC,wCAAwC;IACrD,CAAC;IACD,MAAM,IAAI,GAAG,aAAa,CAAC,MAAM,CAAC,CAAC;IACnC,IAAI,IAAI,KAAK,SAAS;QAAE,OAAO,EAAE,CAAC,CAAC,2BAA2B;IAE9D,MAAM,QAAQ,GAAkB,EAAE,CAAC;IACnC,MAAM,OAAO,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;IAEzC,IAAI,IAAI,KAAK,MAAM,EAAE,CAAC;QACpB,MAAM,MAAM,GAAG,YAAY,CAAC,MAAM,CAAC,CAAC;QACpC,MAAM,YAAY,GAAG,CAAC,MAAM,CAAC,QAAQ,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC;QACjF,KAAK,MAAM,CAAC,IAAI,YAAY,EAAE,CAAC;YAC7B,QAAQ,CAAC,IAAI,CAAC,4BAA4B,CAAC,CAAC,EAAE,OAAO,EAAE,SAAS,CAAC,CAAC,CAAC;QACrE,CAAC;IACH,CAAC;SAAM,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;QAC9B,MAAM,MAAM,GAAG,eAAe,CAAC,MAAM,CAAC,CAAC;QACvC,MAAM,YAAY,GAAG,MAAM,CAAC,YAAY,IAAI,EAAE,CAAC;QAC/C,KAAK,MAAM,CAAC,IAAI,YAAY,EAAE,CAAC;YAC7B,qEAAqE;YACrE,MAAM,QAAQ,GAAiB,CAAC,CAAC,MAAM,KAAK,wBAAwB,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;YAC3F,QAAQ,CAAC,IAAI,CAAC,4BAA4B,CAAC,CAAC,EAAE,OAAO,EAAE,QAAQ,CAAC,CAAC,CAAC;QACpE,CAAC;IACH,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,KAAK,UAAU,YAAY,CAAC,IAAY,EAAE,EAA+B,EAAE,GAAW;IACpF,MAAM,OAAO,GAAG,EAAE,CAAC,YAAY,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;IAC/C,MAAM,OAAO,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;IACzC,OAAO,YAAY,CAAC,OAAO,EAAE,OAAO,EAAE,EAAE,CAAC,CAAC;AAC5C,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,OAAO,CAAC,OAAoB,EAAE;IAClD,MAAM,QAAQ,GAAkB,EAAE,CAAC;IACnC,MAAM,MAAM,GAA0B,IAAI,GAAG,EAAE,CAAC;IAChD,MAAM,YAAY,GAAgB,IAAI,GAAG,EAAE,CAAC;IAC5C,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC;IAEtC,aAAa;IACb,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC;QACnB,MAAM,WAAW,GAAG,MAAM,aAAa,CAAC,IAAI,CAAC,CAAC;QAC9C,IAAI,WAAW,CAAC,MAAM,GAAG,CAAC;YAAE,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QAChD,KAAK,MAAM,IAAI,IAAI,WAAW,EAAE,CAAC;YAC/B,YAAY,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;YACvB,MAAM,YAAY,GAAG,MAAM,YAAY,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;YACnD,QAAQ,CAAC,IAAI,CAAC,GAAG,YAAY,CAAC,CAAC;QACjC,CAAC;IACH,CAAC;IAED,aAAa;IACb,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC;QACpB,MAAM,WAAW,GAAG,MAAM,YAAY,CAAC,IAAI,CAAC,CAAC;QAC7C,IAAI,WAAW,CAAC,MAAM,GAAG,CAAC;YAAE,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QAC/C,IAAI,WAAW,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC3B,MAAM,EAAE,GAAG,MAAM,cAAc,EAAE,CAAC;YAClC,IAAI,CAAC,EAAE,EAAE,CAAC;gBACR,QAAQ,CAAC,IAAI,CAAC;oBACZ,IAAI,EAAE,UAAU;oBAChB,MAAM,EAAE,yBAAyB;oBACjC,QAAQ,EAAE,SAAS;oBACnB,OAAO,EAAE,oFAAoF;oBAC7F,QAAQ,EAAE,EAAE;iBACb,CAAC,CAAC;YACL,CAAC;iBAAM,CAAC;gBACN,KAAK,MAAM,IAAI,IAAI,WAAW,EAAE,CAAC;oBAC/B,YAAY,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;oBACvB,MAAM,YAAY,GAAG,MAAM,YAAY,CAAC,IAAI,EAAE,EAAE,EAAE,GAAG,CAAC,CAAC;oBACvD,QAAQ,CAAC,IAAI,CAAC,GAAG,YAAY,CAAC,CAAC;gBACjC,CAAC;YACH,CAAC;QACH,CAAC;IACH,CAAC;IAED,MAAM,MAAM,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC,MAAM,CAAC;IACnE,MAAM,QAAQ,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,MAAM,CAAC;IAEvE,OAAO;QACL,QAAQ;QACR,OAAO,EAAE;YACP,MAAM;YACN,QAAQ;YACR,KAAK,EAAE,YAAY,CAAC,IAAI;YACxB,MAAM,EAAE,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC;SAC3B;KACF,CAAC;AACJ,CAAC"}

package/dist/lint/spec-discovery.d.ts

@@ -0,0 +1,14 @@
+/**
+ * Auto-discovery for `mythik lint` — finds spec files (`*.json`) and code
+ * files (`*.{ts,tsx,js,jsx}`) based on LintOptions.
+ *
+ * Resolution order:
+ * 1. Explicit `fromFile` flag → single file (filtered by extension)
+ * 2. Explicit `fromDir` flag → walk directory
+ * 3. No flags → spec auto-discovery via `.mythikrc` file store dir;
+ *               code auto-discovery via `codeDir` (default './src')
+ */
+import type { LintOptions } from './types.js';
+export declare function discoverSpecs(opts: LintOptions): Promise<string[]>;
+export declare function discoverCode(opts: LintOptions): Promise<string[]>;
+//# sourceMappingURL=spec-discovery.d.ts.map

package/dist/lint/spec-discovery.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"spec-discovery.d.ts","sourceRoot":"","sources":["../../src/lint/spec-discovery.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAKH,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AAwB9C,wBAAsB,aAAa,CAAC,IAAI,EAAE,WAAW,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,CAmBxE;AAED,wBAAsB,YAAY,CAAC,IAAI,EAAE,WAAW,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,CAavE"}