redlinegate 0.0.1

package/dist/config/redline-json.js

@@ -0,0 +1,187 @@
+import { existsSync, readFileSync, writeFileSync } from 'node:fs';
+import { join } from 'node:path';
+import { RedlineError } from "../core/errors.js";
+import { ADMIN_CAPABILITIES, HOSTS } from "../platforms/types.js";
+import { isRung } from "../enforce/ladder.js";
+export const CONFIG_FILE = '.redline.json';
+export const CAPABILITY_KEYS = ['gate', 'mergePolicy', 'labels'];
+export const MENU_KEYS = [
+    'blockingGate',
+    'adrForLargeDiffs',
+    'accessibility',
+    'speckit',
+    'sensitivePathReviewers',
+];
+// The names an operator types, and where each one is recorded. Review
+// ownership resolves to `menu.sensitivePathReviewers` because that key already
+// is the switch — see the comment on CapabilitySelections.
+const CAPABILITY_NAMES = {
+    gate: 'gate',
+    'merge-policy': 'mergePolicy',
+    labels: 'labels',
+    'review-ownership': 'reviewOwnership',
+};
+// Not a capability an operator may decline. Secret scanning, push protection
+// and dependency alerts are the organisation's floor, not this repository's
+// preference, and unlike a gate pipeline or a branch policy there is no
+// "we already have our own" to respect: they are host settings that add to
+// whatever else the repository runs. An opt-out here would be a supported way
+// to fall below the floor, so the flag is refused by name — which is the one
+// thing a silent ignore could never do, tell the operator it did not happen.
+export const MANDATORY_CAPABILITIES = {
+    'security-floor': 'the security floor is the organisation-wide minimum: secret scanning, push protection and ' +
+        'dependency alerts are additive host settings, so nothing a repository already runs is ' +
+        'displaced by them',
+};
+export const OPTIONAL_CAPABILITIES = Object.keys(CAPABILITY_NAMES);
+// The gate install is what creates Redline's labels — GitHub pre-declares the
+// gate's soft-fail labels there, and Azure creates pull request labels on use —
+// so a deselected gate takes the labels with it whatever the operator chose for
+// them. True of the effective state, never of the record: `.redline.json` keeps
+// the operator's own choice, so re-selecting the gate brings the labels back
+// without a second flag.
+export function labelsCarriedByGate(capabilities) {
+    return !capabilities.gate && capabilities.labels;
+}
+// The operator-facing names of everything that is off, in the order they are
+// documented. `redline verify` reports the same list, which is how a reader
+// tells "off because we chose to" from "off because it broke" — so it reports
+// what is actually off, not only what was asked for: a capability reported as
+// on while nothing will ever create it is the silence this selection exists to
+// end. `labelsCarriedByGate` above is the one place the two differ.
+export function deselectedCapabilities(menu, capabilities) {
+    return OPTIONAL_CAPABILITIES.filter((name) => {
+        const key = CAPABILITY_NAMES[name];
+        if (key === 'reviewOwnership')
+            return !menu.sensitivePathReviewers;
+        if (key === 'labels')
+            return !capabilities.labels || labelsCarriedByGate(capabilities);
+        return key !== undefined && !capabilities[key];
+    });
+}
+// `--skip a,b` and `--with a,b`. Per capability, not a whole selection: naming
+// one capability must not silently re-select the others the repository already
+// declined.
+export function capabilitySelection(skip, keep) {
+    const flags = { menu: {}, capabilities: {} };
+    for (const name of skip) {
+        if (keep.includes(name)) {
+            throw new RedlineError('usage', `"${name}" is named in both --skip and --with, so neither can be meant`);
+        }
+    }
+    for (const [names, on] of [
+        [skip, false],
+        [keep, true],
+    ]) {
+        for (const name of names) {
+            const mandatory = MANDATORY_CAPABILITIES[name];
+            if (mandatory !== undefined) {
+                if (on)
+                    continue; // already on and staying on
+                throw new RedlineError('usage', `"${name}" cannot be deselected — ${mandatory}`);
+            }
+            const key = CAPABILITY_NAMES[name];
+            if (key === undefined) {
+                throw new RedlineError('usage', `unknown capability "${name}". Known: ${OPTIONAL_CAPABILITIES.join(', ')}`);
+            }
+            if (key === 'reviewOwnership')
+                flags.menu.sensitivePathReviewers = on;
+            else
+                flags.capabilities[key] = on;
+        }
+    }
+    return flags;
+}
+const bad = (what) => {
+    throw new RedlineError('failed', `${CONFIG_FILE} is invalid: ${what}`);
+};
+export function parseConfig(raw) {
+    if (typeof raw !== 'object' || raw === null || Array.isArray(raw))
+        bad('expected an object');
+    const o = raw;
+    const str = (key) => typeof o[key] === 'string' && o[key] !== '' ? o[key] : bad(`${key} must be a non-empty string`);
+    const host = str('host');
+    if (!HOSTS.includes(host))
+        bad(`host must be one of ${HOSTS.join(', ')}`);
+    const vendors = o['vendors'];
+    if (!Array.isArray(vendors) || !vendors.every((v) => typeof v === 'string')) {
+        bad('vendors must be an array of strings');
+    }
+    const menuRaw = o['menu'];
+    if (typeof menuRaw !== 'object' || menuRaw === null)
+        bad('menu must be an object');
+    const menuObj = menuRaw;
+    const menu = {};
+    for (const key of MENU_KEYS) {
+        if (typeof menuObj[key] !== 'boolean')
+            bad(`menu.${key} must be a boolean`);
+        menu[key] = menuObj[key];
+    }
+    const pending = o['pendingAdmin'];
+    if (!Array.isArray(pending))
+        bad('pendingAdmin must be an array');
+    for (const entry of pending) {
+        if (typeof entry !== 'string' || !ADMIN_CAPABILITIES.includes(entry)) {
+            bad(`pendingAdmin contains an unknown capability "${String(entry)}"`);
+        }
+    }
+    // Only an explicit `false` deselects. A key some other tool wrote, or one a
+    // hand edit mistyped, must never be the way a repository falls below the
+    // standard — so anything that is not `false` reads back selected, and a
+    // whole missing object selects everything.
+    const capabilityRaw = o['capabilities'];
+    const capabilityObj = typeof capabilityRaw === 'object' && capabilityRaw !== null && !Array.isArray(capabilityRaw)
+        ? capabilityRaw
+        : {};
+    const capabilities = {};
+    for (const key of CAPABILITY_KEYS)
+        capabilities[key] = capabilityObj[key] !== false;
+    const commandRaw = o['commandFiles'];
+    const commandFiles = {};
+    if (typeof commandRaw === 'object' && commandRaw !== null && !Array.isArray(commandRaw)) {
+        for (const [path, id] of Object.entries(commandRaw)) {
+            if (typeof id === 'string')
+                commandFiles[path] = id;
+        }
+    }
+    // Anything not a recognised rung reads back as `observe`. A typo must not be
+    // able to raise enforcement on a repository, and the failure direction for an
+    // unreadable value is the one that blocks nobody.
+    const rungRaw = o['rung'];
+    const rung = isRung(rungRaw) ? rungRaw : 'observe';
+    const onboardedAt = str('onboardedAt');
+    const lastRunRaw = o['lastRunAt'];
+    const lastRunAt = typeof lastRunRaw === 'string' && lastRunRaw !== '' ? lastRunRaw : onboardedAt;
+    return {
+        standardsVersion: str('standardsVersion'),
+        cliVersion: str('cliVersion'),
+        host: host,
+        profile: str('profile'),
+        vendors: vendors,
+        menu,
+        pendingAdmin: pending,
+        onboardedAt,
+        lastRunAt,
+        rung,
+        localRules: o['localRules'] === true,
+        capabilities,
+        commandFiles,
+    };
+}
+export function readConfig(cwd) {
+    const path = join(cwd, CONFIG_FILE);
+    if (!existsSync(path))
+        return null;
+    let raw;
+    try {
+        raw = JSON.parse(readFileSync(path, 'utf8'));
+    }
+    catch {
+        throw new RedlineError('failed', `${CONFIG_FILE} is not valid JSON`, 'delete it and re-run redline init');
+    }
+    return parseConfig(raw);
+}
+export function writeConfig(cwd, config) {
+    writeFileSync(join(cwd, CONFIG_FILE), `${JSON.stringify(config, null, 2)}\n`);
+}
+//# sourceMappingURL=redline-json.js.map

package/dist/config/redline-json.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"redline-json.js","sourceRoot":"","sources":["../../cli/config/redline-json.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AAClE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AACjD,OAAO,EAAE,kBAAkB,EAAE,KAAK,EAAmC,MAAM,uBAAuB,CAAC;AACnG,OAAO,EAAE,MAAM,EAAa,MAAM,sBAAsB,CAAC;AAEzD,MAAM,CAAC,MAAM,WAAW,GAAG,eAAe,CAAC;AA8B3C,MAAM,CAAC,MAAM,eAAe,GAAmC,CAAC,MAAM,EAAE,aAAa,EAAE,QAAQ,CAAC,CAAC;AA0CjG,MAAM,CAAC,MAAM,SAAS,GAA6B;IACjD,cAAc;IACd,kBAAkB;IAClB,eAAe;IACf,SAAS;IACT,wBAAwB;CACzB,CAAC;AAEF,sEAAsE;AACtE,+EAA+E;AAC/E,2DAA2D;AAC3D,MAAM,gBAAgB,GAAmE;IACvF,IAAI,EAAE,MAAM;IACZ,cAAc,EAAE,aAAa;IAC7B,MAAM,EAAE,QAAQ;IAChB,kBAAkB,EAAE,iBAAiB;CACtC,CAAC;AAEF,6EAA6E;AAC7E,4EAA4E;AAC5E,wEAAwE;AACxE,2EAA2E;AAC3E,8EAA8E;AAC9E,6EAA6E;AAC7E,6EAA6E;AAC7E,MAAM,CAAC,MAAM,sBAAsB,GAA2B;IAC5D,gBAAgB,EACd,4FAA4F;QAC5F,wFAAwF;QACxF,mBAAmB;CACtB,CAAC;AAEF,MAAM,CAAC,MAAM,qBAAqB,GAAG,MAAM,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC;AAEnE,8EAA8E;AAC9E,gFAAgF;AAChF,gFAAgF;AAChF,gFAAgF;AAChF,6EAA6E;AAC7E,yBAAyB;AACzB,MAAM,UAAU,mBAAmB,CAAC,YAAkC;IACpE,OAAO,CAAC,YAAY,CAAC,IAAI,IAAI,YAAY,CAAC,MAAM,CAAC;AACnD,CAAC;AAED,6EAA6E;AAC7E,4EAA4E;AAC5E,8EAA8E;AAC9E,8EAA8E;AAC9E,+EAA+E;AAC/E,oEAAoE;AACpE,MAAM,UAAU,sBAAsB,CACpC,IAAoB,EACpB,YAAkC;IAElC,OAAO,qBAAqB,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE;QAC3C,MAAM,GAAG,GAAG,gBAAgB,CAAC,IAAI,CAAC,CAAC;QACnC,IAAI,GAAG,KAAK,iBAAiB;YAAE,OAAO,CAAC,IAAI,CAAC,sBAAsB,CAAC;QACnE,IAAI,GAAG,KAAK,QAAQ;YAAE,OAAO,CAAC,YAAY,CAAC,MAAM,IAAI,mBAAmB,CAAC,YAAY,CAAC,CAAC;QACvF,OAAO,GAAG,KAAK,SAAS,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC;IACjD,CAAC,CAAC,CAAC;AACL,CAAC;AAOD,+EAA+E;AAC/E,+EAA+E;AAC/E,YAAY;AACZ,MAAM,UAAU,mBAAmB,CAAC,IAAc,EAAE,IAAc;IAChE,MAAM,KAAK,GAAoB,EAAE,IAAI,EAAE,EAAE,EAAE,YAAY,EAAE,EAAE,EAAE,CAAC;IAC9D,KAAK,MAAM,IAAI,IAAI,IAAI,EAAE,CAAC;QACxB,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;YACxB,MAAM,IAAI,YAAY,CAAC,OAAO,EAAE,IAAI,IAAI,+DAA+D,CAAC,CAAC;QAC3G,CAAC;IACH,CAAC;IACD,KAAK,MAAM,CAAC,KAAK,EAAE,EAAE,CAAC,IAAI;QACxB,CAAC,IAAI,EAAE,KAAK,CAAC;QACb,CAAC,IAAI,EAAE,IAAI,CAAC;KACJ,EAAE,CAAC;QACX,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YACzB,MAAM,SAAS,GAAG,sBAAsB,CAAC,IAAI,CAAC,CAAC;YAC/C,IAAI,SAAS,KAAK,SAAS,EAAE,CAAC;gBAC5B,IAAI,EAAE;oBAAE,SAAS,CAAC,4BAA4B;gBAC9C,MAAM,IAAI,YAAY,CAAC,OAAO,EAAE,IAAI,IAAI,4BAA4B,SAAS,EAAE,CAAC,CAAC;YACnF,CAAC;YACD,MAAM,GAAG,GAAG,gBAAgB,CAAC,IAAI,CAAC,CAAC;YACnC,IAAI,GAAG,KAAK,SAAS,EAAE,CAAC;gBACtB,MAAM,IAAI,YAAY,CACpB,OAAO,EACP,uBAAuB,IAAI,aAAa,qBAAqB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAC3E,CAAC;YACJ,CAAC;YACD,IAAI,GAAG,KAAK,iBAAiB;gBAAE,KAAK,CAAC,IAAI,CAAC,sBAAsB,GAAG,EAAE,CAAC;;gBACjE,KAAK,CAAC,YAAY,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC;QACpC,CAAC;IACH,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,MAAM,GAAG,GAAG,CAAC,IAAY,EAAS,EAAE;IAClC,MAAM,IAAI,YAAY,CAAC,QAAQ,EAAE,GAAG,WAAW,gBAAgB,IAAI,EAAE,CAAC,CAAC;AACzE,CAAC,CAAC;AAEF,MAAM,UAAU,WAAW,CAAC,GAAY;IACtC,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,GAAG,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC;QAAE,GAAG,CAAC,oBAAoB,CAAC,CAAC;IAC7F,MAAM,CAAC,GAAG,GAA8B,CAAC;IAEzC,MAAM,GAAG,GAAG,CAAC,GAAW,EAAU,EAAE,CAClC,OAAO,CAAC,CAAC,GAAG,CAAC,KAAK,QAAQ,IAAI,CAAC,CAAC,GAAG,CAAC,KAAK,EAAE,CAAC,CAAC,CAAE,CAAC,CAAC,GAAG,CAAY,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,GAAG,6BAA6B,CAAC,CAAC;IAE9G,MAAM,IAAI,GAAG,GAAG,CAAC,MAAM,CAAC,CAAC;IACzB,IAAI,CAAE,KAA2B,CAAC,QAAQ,CAAC,IAAI,CAAC;QAAE,GAAG,CAAC,uBAAuB,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAEjG,MAAM,OAAO,GAAG,CAAC,CAAC,SAAS,CAAC,CAAC;IAC7B,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC,EAAE,CAAC;QAC5E,GAAG,CAAC,qCAAqC,CAAC,CAAC;IAC7C,CAAC;IAED,MAAM,OAAO,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC;IAC1B,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,OAAO,KAAK,IAAI;QAAE,GAAG,CAAC,wBAAwB,CAAC,CAAC;IACnF,MAAM,OAAO,GAAG,OAAkC,CAAC;IACnD,MAAM,IAAI,GAAG,EAAoB,CAAC;IAClC,KAAK,MAAM,GAAG,IAAI,SAAS,EAAE,CAAC;QAC5B,IAAI,OAAO,OAAO,CAAC,GAAG,CAAC,KAAK,SAAS;YAAE,GAAG,CAAC,QAAQ,GAAG,oBAAoB,CAAC,CAAC;QAC5E,IAAI,CAAC,GAAG,CAAC,GAAG,OAAO,CAAC,GAAG,CAAY,CAAC;IACtC,CAAC;IAED,MAAM,OAAO,GAAG,CAAC,CAAC,cAAc,CAAC,CAAC;IAClC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC;QAAE,GAAG,CAAC,+BAA+B,CAAC,CAAC;IAClE,KAAK,MAAM,KAAK,IAAI,OAAoB,EAAE,CAAC;QACzC,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAE,kBAAwC,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;YAC5F,GAAG,CAAC,gDAAgD,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QACxE,CAAC;IACH,CAAC;IAED,4EAA4E;IAC5E,yEAAyE;IACzE,wEAAwE;IACxE,2CAA2C;IAC3C,MAAM,aAAa,GAAG,CAAC,CAAC,cAAc,CAAC,CAAC;IACxC,MAAM,aAAa,GACjB,OAAO,aAAa,KAAK,QAAQ,IAAI,aAAa,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,aAAa,CAAC;QAC1F,CAAC,CAAE,aAAyC;QAC5C,CAAC,CAAC,EAAE,CAAC;IACT,MAAM,YAAY,GAAG,EAA0B,CAAC;IAChD,KAAK,MAAM,GAAG,IAAI,eAAe;QAAE,YAAY,CAAC,GAAG,CAAC,GAAG,aAAa,CAAC,GAAG,CAAC,KAAK,KAAK,CAAC;IAEpF,MAAM,UAAU,GAAG,CAAC,CAAC,cAAc,CAAC,CAAC;IACrC,MAAM,YAAY,GAA2B,EAAE,CAAC;IAChD,IAAI,OAAO,UAAU,KAAK,QAAQ,IAAI,UAAU,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,CAAC;QACxF,KAAK,MAAM,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,UAAqC,CAAC,EAAE,CAAC;YAC/E,IAAI,OAAO,EAAE,KAAK,QAAQ;gBAAE,YAAY,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC;QACtD,CAAC;IACH,CAAC;IAED,6EAA6E;IAC7E,8EAA8E;IAC9E,kDAAkD;IAClD,MAAM,OAAO,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC;IAC1B,MAAM,IAAI,GAAS,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;IAEzD,MAAM,WAAW,GAAG,GAAG,CAAC,aAAa,CAAC,CAAC;IACvC,MAAM,UAAU,GAAG,CAAC,CAAC,WAAW,CAAC,CAAC;IAClC,MAAM,SAAS,GAAG,OAAO,UAAU,KAAK,QAAQ,IAAI,UAAU,KAAK,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,WAAW,CAAC;IAEjG,OAAO;QACL,gBAAgB,EAAE,GAAG,CAAC,kBAAkB,CAAC;QACzC,UAAU,EAAE,GAAG,CAAC,YAAY,CAAC;QAC7B,IAAI,EAAE,IAAY;QAClB,OAAO,EAAE,GAAG,CAAC,SAAS,CAAC;QACvB,OAAO,EAAE,OAAmB;QAC5B,IAAI;QACJ,YAAY,EAAE,OAA4B;QAC1C,WAAW;QACX,SAAS;QACT,IAAI;QACJ,UAAU,EAAE,CAAC,CAAC,YAAY,CAAC,KAAK,IAAI;QACpC,YAAY;QACZ,YAAY;KACb,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,UAAU,CAAC,GAAW;IACpC,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,EAAE,WAAW,CAAC,CAAC;IACpC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IACnC,IAAI,GAAY,CAAC;IACjB,IAAI,CAAC;QACH,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC;IAC/C,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,YAAY,CAAC,QAAQ,EAAE,GAAG,WAAW,oBAAoB,EAAE,mCAAmC,CAAC,CAAC;IAC5G,CAAC;IACD,OAAO,WAAW,CAAC,GAAG,CAAC,CAAC;AAC1B,CAAC;AAED,MAAM,UAAU,WAAW,CAAC,GAAW,EAAE,MAAqB;IAC5D,aAAa,CAAC,IAAI,CAAC,GAAG,EAAE,WAAW,CAAC,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC;AAChF,CAAC"}

package/dist/core/errors.js

@@ -0,0 +1,25 @@
+const EXIT_CODES = {
+    failed: 1,
+    usage: 2,
+    permission: 3,
+    host: 4,
+};
+export function exitCodeFor(kind) {
+    return EXIT_CODES[kind];
+}
+export class RedlineError extends Error {
+    kind;
+    exitCode;
+    hint;
+    constructor(kind, message, hint) {
+        super(message);
+        this.name = 'RedlineError';
+        this.kind = kind;
+        this.exitCode = exitCodeFor(kind);
+        this.hint = hint;
+    }
+}
+export function isRedlineError(e) {
+    return e instanceof RedlineError;
+}
+//# sourceMappingURL=errors.js.map

package/dist/core/errors.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"errors.js","sourceRoot":"","sources":["../../cli/core/errors.ts"],"names":[],"mappings":"AAEA,MAAM,UAAU,GAAqC;IACnD,MAAM,EAAE,CAAC;IACT,KAAK,EAAE,CAAC;IACR,UAAU,EAAE,CAAC;IACb,IAAI,EAAE,CAAC;CACR,CAAC;AAEF,MAAM,UAAU,WAAW,CAAC,IAAsB;IAChD,OAAO,UAAU,CAAC,IAAI,CAAC,CAAC;AAC1B,CAAC;AAED,MAAM,OAAO,YAAa,SAAQ,KAAK;IAC5B,IAAI,CAAmB;IACvB,QAAQ,CAAS;IACjB,IAAI,CAAqB;IAElC,YAAY,IAAsB,EAAE,OAAe,EAAE,IAAa;QAChE,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,cAAc,CAAC;QAC3B,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;QACjB,IAAI,CAAC,QAAQ,GAAG,WAAW,CAAC,IAAI,CAAC,CAAC;QAClC,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;IACnB,CAAC;CACF;AAED,MAAM,UAAU,cAAc,CAAC,CAAU;IACvC,OAAO,CAAC,YAAY,YAAY,CAAC;AACnC,CAAC"}

package/dist/core/git.js

@@ -0,0 +1,152 @@
+import { execFileSync } from 'node:child_process';
+import { RedlineError } from "./errors.js";
+export const execGit = (args, cwd) => execFileSync('git', args, { cwd, encoding: 'utf8', stdio: ['ignore', 'pipe', 'pipe'] }).trim();
+// git is a real system boundary: a rejected push, a protected branch, an
+// expired credential and a failing pre-commit hook are all routine, and
+// execFileSync reports them as a raw "Command failed: git push …" that the
+// CLI's catch-all turns into "redline failed unexpectedly". Every mutating
+// call below converts that into a RedlineError whose hint says what state
+// the working tree was left in.
+function stderrText(error) {
+    const stderr = typeof error === 'object' && error !== null
+        ? error['stderr']
+        : undefined;
+    return typeof stderr === 'string'
+        ? stderr
+        : Buffer.isBuffer(stderr)
+            ? stderr.toString('utf8')
+            : error instanceof Error
+                ? error.message
+                : String(error);
+}
+function gitFailure(error) {
+    return (stderrText(error).trim().split('\n').filter(Boolean).slice(-2).join(' — ') ||
+        'git reported no detail');
+}
+// The local non-fast-forward marker is " ! [rejected]"; a server-side policy
+// rejection prints " ! [remote rejected]" instead, which this deliberately
+// does not match — that one really is an access problem.
+const NON_FAST_FORWARD = /non-fast-forward|\[rejected\]/;
+export function createGit(cwd, run = execGit) {
+    const g = (...args) => run(args, cwd);
+    const currentBranch = () => {
+        try {
+            return g('rev-parse', '--abbrev-ref', 'HEAD');
+        }
+        catch {
+            return 'HEAD';
+        }
+    };
+    return {
+        isRepo() {
+            try {
+                return g('rev-parse', '--is-inside-work-tree') === 'true';
+            }
+            catch {
+                return false;
+            }
+        },
+        remoteUrl(remote = 'origin') {
+            // No remote configured is a routine brownfield state, not a crash:
+            // the empty string flows into parseRemote(''), whose usage error
+            // already tells the user to `git remote add origin <url>`.
+            try {
+                return g('remote', 'get-url', remote);
+            }
+            catch {
+                return '';
+            }
+        },
+        defaultBranch() {
+            try {
+                return g('symbolic-ref', '--short', 'refs/remotes/origin/HEAD').replace(/^origin\//, '');
+            }
+            catch {
+                return 'main';
+            }
+        },
+        currentBranch,
+        diff(range) {
+            try {
+                // No colour, no external diff tool, full context off: the output is
+                // parsed and shown to a model, not to a terminal.
+                return g('diff', '--no-color', '--no-ext-diff', range);
+            }
+            catch (error) {
+                throw new RedlineError('usage', `cannot diff ${range}: ${stderrText(error)}`, 'check the ref exists — `git fetch` first if it is a branch you have not pulled');
+            }
+        },
+        mergeBase(ref) {
+            try {
+                return g('merge-base', ref, 'HEAD');
+            }
+            catch (error) {
+                throw new RedlineError('usage', `cannot find the merge base with ${ref}: ${stderrText(error)}`, 'fetch the base branch first, or pass --base with one you have');
+            }
+        },
+        diffStaged() {
+            try {
+                return g('diff', '--no-color', '--no-ext-diff', '--cached');
+            }
+            catch (error) {
+                throw new RedlineError('usage', `cannot read the staged diff: ${stderrText(error)}`);
+            }
+        },
+        checkoutNewBranch(name) {
+            try {
+                g('checkout', '-B', name);
+            }
+            catch (error) {
+                throw new RedlineError('host', `could not create the branch "${name}": ${gitFailure(error)}`, `you are still on "${currentBranch()}" and nothing was committed — resolve the git error and re-run`);
+            }
+        },
+        checkoutBranch(name) {
+            try {
+                g('checkout', name);
+            }
+            catch (error) {
+                throw new RedlineError('host', `could not switch back to "${name}": ${gitFailure(error)}`, `you are on "${currentBranch()}" — switch back yourself with: git checkout ${name}`);
+            }
+        },
+        stagePaths(paths) {
+            if (paths.length === 0)
+                return;
+            g('add', '--', ...paths);
+        },
+        hasStagedChanges() {
+            try {
+                g('diff', '--cached', '--quiet');
+                return false;
+            }
+            catch {
+                return true;
+            }
+        },
+        commit(message) {
+            try {
+                g('commit', '-m', message);
+            }
+            catch (error) {
+                throw new RedlineError('host', `could not commit the Redline changes: ${gitFailure(error)}`, `the changes are still staged on "${currentBranch()}" — commit them yourself, or resolve the git error and re-run`);
+            }
+        },
+        // A push that git refuses is overwhelmingly an access problem — no write
+        // permission, a protected branch, an expired credential — so it maps to
+        // `permission` rather than `host`: the operator needs rights, not a
+        // retry. The exception is a non-fast-forward rejection: that means a
+        // previous partial run already pushed this branch, and telling the
+        // operator to "get push access" would be the wrong diagnosis.
+        push(branch) {
+            try {
+                g('push', '--set-upstream', 'origin', branch);
+            }
+            catch (error) {
+                if (NON_FAST_FORWARD.test(stderrText(error))) {
+                    throw new RedlineError('failed', `origin already has a "${branch}" branch this push cannot fast-forward: ${gitFailure(error)}`, `a previous run left it behind — delete it (git push origin --delete ${branch}) or merge its open pull request, then re-run`);
+                }
+                throw new RedlineError('permission', `could not push "${branch}" to origin: ${gitFailure(error)}`, `the Redline changes are committed locally on "${branch}" — push that branch and open the pull request yourself, or get push access and re-run`);
+            }
+        },
+    };
+}
+//# sourceMappingURL=git.js.map

package/dist/core/git.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"git.js","sourceRoot":"","sources":["../../cli/core/git.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAI3C,MAAM,CAAC,MAAM,OAAO,GAAc,CAAC,IAAI,EAAE,GAAG,EAAE,EAAE,CAC9C,YAAY,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE,GAAG,EAAE,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;AAuBjG,yEAAyE;AACzE,wEAAwE;AACxE,2EAA2E;AAC3E,2EAA2E;AAC3E,0EAA0E;AAC1E,gCAAgC;AAChC,SAAS,UAAU,CAAC,KAAc;IAChC,MAAM,MAAM,GACV,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI;QACzC,CAAC,CAAE,KAAiC,CAAC,QAAQ,CAAC;QAC9C,CAAC,CAAC,SAAS,CAAC;IAChB,OAAO,OAAO,MAAM,KAAK,QAAQ;QAC/B,CAAC,CAAC,MAAM;QACR,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC;YACvB,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC;YACzB,CAAC,CAAC,KAAK,YAAY,KAAK;gBACtB,CAAC,CAAC,KAAK,CAAC,OAAO;gBACf,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AACxB,CAAC;AAED,SAAS,UAAU,CAAC,KAAc;IAChC,OAAO,CACL,UAAU,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC;QAC1E,wBAAwB,CACzB,CAAC;AACJ,CAAC;AAED,6EAA6E;AAC7E,2EAA2E;AAC3E,yDAAyD;AACzD,MAAM,gBAAgB,GAAG,+BAA+B,CAAC;AAEzD,MAAM,UAAU,SAAS,CAAC,GAAW,EAAE,MAAiB,OAAO;IAC7D,MAAM,CAAC,GAAG,CAAC,GAAG,IAAc,EAAU,EAAE,CAAC,GAAG,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;IACxD,MAAM,aAAa,GAAG,GAAW,EAAE;QACjC,IAAI,CAAC;YACH,OAAO,CAAC,CAAC,WAAW,EAAE,cAAc,EAAE,MAAM,CAAC,CAAC;QAChD,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,MAAM,CAAC;QAChB,CAAC;IACH,CAAC,CAAC;IAEF,OAAO;QACL,MAAM;YACJ,IAAI,CAAC;gBACH,OAAO,CAAC,CAAC,WAAW,EAAE,uBAAuB,CAAC,KAAK,MAAM,CAAC;YAC5D,CAAC;YAAC,MAAM,CAAC;gBACP,OAAO,KAAK,CAAC;YACf,CAAC;QACH,CAAC;QACD,SAAS,CAAC,MAAM,GAAG,QAAQ;YACzB,mEAAmE;YACnE,iEAAiE;YACjE,2DAA2D;YAC3D,IAAI,CAAC;gBACH,OAAO,CAAC,CAAC,QAAQ,EAAE,SAAS,EAAE,MAAM,CAAC,CAAC;YACxC,CAAC;YAAC,MAAM,CAAC;gBACP,OAAO,EAAE,CAAC;YACZ,CAAC;QACH,CAAC;QACD,aAAa;YACX,IAAI,CAAC;gBACH,OAAO,CAAC,CAAC,cAAc,EAAE,SAAS,EAAE,0BAA0B,CAAC,CAAC,OAAO,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC;YAC3F,CAAC;YAAC,MAAM,CAAC;gBACP,OAAO,MAAM,CAAC;YAChB,CAAC;QACH,CAAC;QACD,aAAa;QACb,IAAI,CAAC,KAAK;YACR,IAAI,CAAC;gBACH,oEAAoE;gBACpE,kDAAkD;gBAClD,OAAO,CAAC,CAAC,MAAM,EAAE,YAAY,EAAE,eAAe,EAAE,KAAK,CAAC,CAAC;YACzD,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,MAAM,IAAI,YAAY,CACpB,OAAO,EACP,eAAe,KAAK,KAAK,UAAU,CAAC,KAAK,CAAC,EAAE,EAC5C,gFAAgF,CACjF,CAAC;YACJ,CAAC;QACH,CAAC;QACD,SAAS,CAAC,GAAG;YACX,IAAI,CAAC;gBACH,OAAO,CAAC,CAAC,YAAY,EAAE,GAAG,EAAE,MAAM,CAAC,CAAC;YACtC,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,MAAM,IAAI,YAAY,CACpB,OAAO,EACP,mCAAmC,GAAG,KAAK,UAAU,CAAC,KAAK,CAAC,EAAE,EAC9D,+DAA+D,CAChE,CAAC;YACJ,CAAC;QACH,CAAC;QACD,UAAU;YACR,IAAI,CAAC;gBACH,OAAO,CAAC,CAAC,MAAM,EAAE,YAAY,EAAE,eAAe,EAAE,UAAU,CAAC,CAAC;YAC9D,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,MAAM,IAAI,YAAY,CAAC,OAAO,EAAE,gCAAgC,UAAU,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;YACvF,CAAC;QACH,CAAC;QACD,iBAAiB,CAAC,IAAI;YACpB,IAAI,CAAC;gBACH,CAAC,CAAC,UAAU,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;YAC5B,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,MAAM,IAAI,YAAY,CACpB,MAAM,EACN,gCAAgC,IAAI,MAAM,UAAU,CAAC,KAAK,CAAC,EAAE,EAC7D,qBAAqB,aAAa,EAAE,gEAAgE,CACrG,CAAC;YACJ,CAAC;QACH,CAAC;QACD,cAAc,CAAC,IAAI;YACjB,IAAI,CAAC;gBACH,CAAC,CAAC,UAAU,EAAE,IAAI,CAAC,CAAC;YACtB,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,MAAM,IAAI,YAAY,CACpB,MAAM,EACN,6BAA6B,IAAI,MAAM,UAAU,CAAC,KAAK,CAAC,EAAE,EAC1D,eAAe,aAAa,EAAE,+CAA+C,IAAI,EAAE,CACpF,CAAC;YACJ,CAAC;QACH,CAAC;QACD,UAAU,CAAC,KAAK;YACd,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;gBAAE,OAAO;YAC/B,CAAC,CAAC,KAAK,EAAE,IAAI,EAAE,GAAG,KAAK,CAAC,CAAC;QAC3B,CAAC;QACD,gBAAgB;YACd,IAAI,CAAC;gBACH,CAAC,CAAC,MAAM,EAAE,UAAU,EAAE,SAAS,CAAC,CAAC;gBACjC,OAAO,KAAK,CAAC;YACf,CAAC;YAAC,MAAM,CAAC;gBACP,OAAO,IAAI,CAAC;YACd,CAAC;QACH,CAAC;QACD,MAAM,CAAC,OAAO;YACZ,IAAI,CAAC;gBACH,CAAC,CAAC,QAAQ,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC;YAC7B,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,MAAM,IAAI,YAAY,CACpB,MAAM,EACN,yCAAyC,UAAU,CAAC,KAAK,CAAC,EAAE,EAC5D,oCAAoC,aAAa,EAAE,+DAA+D,CACnH,CAAC;YACJ,CAAC;QACH,CAAC;QACD,yEAAyE;QACzE,wEAAwE;QACxE,oEAAoE;QACpE,qEAAqE;QACrE,mEAAmE;QACnE,8DAA8D;QAC9D,IAAI,CAAC,MAAM;YACT,IAAI,CAAC;gBACH,CAAC,CAAC,MAAM,EAAE,gBAAgB,EAAE,QAAQ,EAAE,MAAM,CAAC,CAAC;YAChD,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,IAAI,gBAAgB,CAAC,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC;oBAC7C,MAAM,IAAI,YAAY,CACpB,QAAQ,EACR,yBAAyB,MAAM,2CAA2C,UAAU,CAAC,KAAK,CAAC,EAAE,EAC7F,uEAAuE,MAAM,+CAA+C,CAC7H,CAAC;gBACJ,CAAC;gBACD,MAAM,IAAI,YAAY,CACpB,YAAY,EACZ,mBAAmB,MAAM,gBAAgB,UAAU,CAAC,KAAK,CAAC,EAAE,EAC5D,iDAAiD,MAAM,wFAAwF,CAChJ,CAAC;YACJ,CAAC;QACH,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/core/log.js

@@ -0,0 +1,22 @@
+const consoleSink = {
+    out: (line) => console.log(line),
+    err: (line) => console.error(line),
+};
+export function createLog(sink = consoleSink) {
+    return {
+        info: (line) => sink.out(line),
+        warn: (line) => sink.out(`warn  ${line}`),
+        error(message, hint) {
+            sink.err(`error  ${message}`);
+            if (hint)
+                sink.err(`       ${hint}`);
+        },
+        report(findings) {
+            for (const finding of findings) {
+                const marker = finding.unknown ? '  ??' : finding.ok ? 'ok  ' : 'FAIL';
+                sink.out(`${marker}  ${finding.check.padEnd(22)} ${finding.detail}`);
+            }
+        },
+    };
+}
+//# sourceMappingURL=log.js.map

package/dist/core/log.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"log.js","sourceRoot":"","sources":["../../cli/core/log.ts"],"names":[],"mappings":"AAsBA,MAAM,WAAW,GAAS;IACxB,GAAG,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC;IAChC,GAAG,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC;CACnC,CAAC;AAEF,MAAM,UAAU,SAAS,CAAC,OAAa,WAAW;IAChD,OAAO;QACL,IAAI,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC;QAC9B,IAAI,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,SAAS,IAAI,EAAE,CAAC;QACzC,KAAK,CAAC,OAAO,EAAE,IAAI;YACjB,IAAI,CAAC,GAAG,CAAC,UAAU,OAAO,EAAE,CAAC,CAAC;YAC9B,IAAI,IAAI;gBAAE,IAAI,CAAC,GAAG,CAAC,UAAU,IAAI,EAAE,CAAC,CAAC;QACvC,CAAC;QACD,MAAM,CAAC,QAAQ;YACb,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;gBAC/B,MAAM,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC;gBACvE,IAAI,CAAC,GAAG,CAAC,GAAG,MAAM,KAAK,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;YACvE,CAAC;QACH,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/core/severity.js

@@ -0,0 +1,16 @@
+// The three severities of the output contract, and their order.
+//
+// The contract itself lives in standards/core.md and is what every finding —
+// Redline's own or one ingested from another tool — is expressed in. There are
+// exactly three, deliberately: "do not invent severities" is a rule in the
+// standard, and a fourth would make every historical aggregate incomparable.
+export const SEVERITIES = ['BLOCKER', 'HIGH', 'SUGGESTION'];
+// Higher is more serious. Used to pick the most severe of a set, never to
+// average them: an average severity is not a thing.
+export const SEVERITY_RANK = {
+    BLOCKER: 3,
+    HIGH: 2,
+    SUGGESTION: 1,
+};
+export const isSeverity = (value) => typeof value === 'string' && SEVERITIES.includes(value);
+//# sourceMappingURL=severity.js.map

package/dist/core/severity.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"severity.js","sourceRoot":"","sources":["../../cli/core/severity.ts"],"names":[],"mappings":"AAAA,gEAAgE;AAChE,EAAE;AACF,6EAA6E;AAC7E,+EAA+E;AAC/E,2EAA2E;AAC3E,6EAA6E;AAC7E,MAAM,CAAC,MAAM,UAAU,GAAG,CAAC,SAAS,EAAE,MAAM,EAAE,YAAY,CAAU,CAAC;AAGrE,0EAA0E;AAC1E,oDAAoD;AACpD,MAAM,CAAC,MAAM,aAAa,GAA6B;IACrD,OAAO,EAAE,CAAC;IACV,IAAI,EAAE,CAAC;IACP,UAAU,EAAE,CAAC;CACd,CAAC;AAEF,MAAM,CAAC,MAAM,UAAU,GAAG,CAAC,KAAc,EAAqB,EAAE,CAC9D,OAAO,KAAK,KAAK,QAAQ,IAAK,UAAgC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC"}

package/dist/core/version.js

@@ -0,0 +1,15 @@
+import { readFileSync } from 'node:fs';
+import { RedlineError } from "./errors.js";
+export function parseVersion(raw) {
+    if (typeof raw !== 'object' || raw === null) {
+        throw new RedlineError('failed', 'package.json is not a JSON object');
+    }
+    const version = raw['version'];
+    if (typeof version !== 'string') {
+        throw new RedlineError('failed', 'package.json is missing a string "version" field');
+    }
+    return version;
+}
+const pkg = JSON.parse(readFileSync(new URL('../../package.json', import.meta.url), 'utf8'));
+export const CLI_VERSION = parseVersion(pkg);
+//# sourceMappingURL=version.js.map

package/dist/core/version.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"version.js","sourceRoot":"","sources":["../../cli/core/version.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACvC,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAE3C,MAAM,UAAU,YAAY,CAAC,GAAY;IACvC,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,GAAG,KAAK,IAAI,EAAE,CAAC;QAC5C,MAAM,IAAI,YAAY,CAAC,QAAQ,EAAE,mCAAmC,CAAC,CAAC;IACxE,CAAC;IACD,MAAM,OAAO,GAAI,GAA+B,CAAC,SAAS,CAAC,CAAC;IAC5D,IAAI,OAAO,OAAO,KAAK,QAAQ,EAAE,CAAC;QAChC,MAAM,IAAI,YAAY,CAAC,QAAQ,EAAE,kDAAkD,CAAC,CAAC;IACvF,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,MAAM,GAAG,GAAY,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,GAAG,CAAC,oBAAoB,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC;AAEtG,MAAM,CAAC,MAAM,WAAW,GAAW,YAAY,CAAC,GAAG,CAAC,CAAC"}

package/dist/detect/scan.js

@@ -0,0 +1,79 @@
+import { readdirSync, readFileSync } from 'node:fs';
+import { join } from 'node:path';
+const SKIP = new Set([
+    '.git',
+    'node_modules',
+    'dist',
+    'build',
+    'out',
+    'vendor',
+    'target',
+    '.next',
+    '.venv',
+    '__pycache__',
+]);
+const MAX_FILES = 5000;
+const MAX_DEPTH = 6;
+function isNonNullObject(value) {
+    return typeof value === 'object' && value !== null && !Array.isArray(value);
+}
+function parsePackageManifest(raw) {
+    if (!isNonNullObject(raw))
+        return undefined;
+    const { dependencies, devDependencies } = raw;
+    if (dependencies !== undefined && !isNonNullObject(dependencies))
+        return undefined;
+    if (devDependencies !== undefined && !isNonNullObject(devDependencies))
+        return undefined;
+    const manifest = {};
+    if (dependencies !== undefined)
+        manifest.dependencies = dependencies;
+    if (devDependencies !== undefined) {
+        manifest.devDependencies = devDependencies;
+    }
+    return manifest;
+}
+export function scanRepo(cwd) {
+    const paths = [];
+    // Breadth-first so root-level manifests (go.mod, pom.xml) always land within
+    // MAX_FILES, even when an early subtree alone would exhaust the budget.
+    const queue = [{ dir: cwd, prefix: '', depth: 0 }];
+    let frame;
+    while ((frame = queue.shift()) !== undefined && paths.length < MAX_FILES) {
+        let entries;
+        try {
+            entries = readdirSync(frame.dir, { withFileTypes: true });
+        }
+        catch {
+            continue;
+        }
+        for (const entry of entries) {
+            if (paths.length >= MAX_FILES)
+                break;
+            if (SKIP.has(entry.name))
+                continue;
+            const rel = frame.prefix ? `${frame.prefix}/${entry.name}` : entry.name;
+            if (!entry.isDirectory()) {
+                paths.push(rel);
+            }
+            else if (entry.name.endsWith('.xcodeproj')) {
+                // Xcode projects are directories; emit a marker so the ios signal fires,
+                // and skip their metadata contents.
+                paths.push(rel);
+            }
+            else if (frame.depth < MAX_DEPTH) {
+                queue.push({ dir: join(frame.dir, entry.name), prefix: rel, depth: frame.depth + 1 });
+            }
+        }
+    }
+    let packageJson;
+    try {
+        const raw = JSON.parse(readFileSync(join(cwd, 'package.json'), 'utf8'));
+        packageJson = parsePackageManifest(raw);
+    }
+    catch {
+        packageJson = undefined;
+    }
+    return packageJson === undefined ? { paths } : { paths, packageJson };
+}
+//# sourceMappingURL=scan.js.map

package/dist/detect/scan.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"scan.js","sourceRoot":"","sources":["../../cli/detect/scan.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACpD,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAGjC,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC;IACnB,MAAM;IACN,cAAc;IACd,MAAM;IACN,OAAO;IACP,KAAK;IACL,QAAQ;IACR,QAAQ;IACR,OAAO;IACP,OAAO;IACP,aAAa;CACd,CAAC,CAAC;AAEH,MAAM,SAAS,GAAG,IAAI,CAAC;AACvB,MAAM,SAAS,GAAG,CAAC,CAAC;AAEpB,SAAS,eAAe,CAAC,KAAc;IACrC,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;AAC9E,CAAC;AAED,SAAS,oBAAoB,CAAC,GAAY;IACxC,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC;QAAE,OAAO,SAAS,CAAC;IAC5C,MAAM,EAAE,YAAY,EAAE,eAAe,EAAE,GAAG,GAAG,CAAC;IAC9C,IAAI,YAAY,KAAK,SAAS,IAAI,CAAC,eAAe,CAAC,YAAY,CAAC;QAAE,OAAO,SAAS,CAAC;IACnF,IAAI,eAAe,KAAK,SAAS,IAAI,CAAC,eAAe,CAAC,eAAe,CAAC;QAAE,OAAO,SAAS,CAAC;IACzF,MAAM,QAAQ,GAAoB,EAAE,CAAC;IACrC,IAAI,YAAY,KAAK,SAAS;QAAE,QAAQ,CAAC,YAAY,GAAG,YAAsC,CAAC;IAC/F,IAAI,eAAe,KAAK,SAAS,EAAE,CAAC;QAClC,QAAQ,CAAC,eAAe,GAAG,eAAyC,CAAC;IACvE,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC;AAQD,MAAM,UAAU,QAAQ,CAAC,GAAW;IAClC,MAAM,KAAK,GAAa,EAAE,CAAC;IAE3B,6EAA6E;IAC7E,wEAAwE;IACxE,MAAM,KAAK,GAAgB,CAAC,EAAE,GAAG,EAAE,GAAG,EAAE,MAAM,EAAE,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC,CAAC;IAChE,IAAI,KAA4B,CAAC;IACjC,OAAO,CAAC,KAAK,GAAG,KAAK,CAAC,KAAK,EAAE,CAAC,KAAK,SAAS,IAAI,KAAK,CAAC,MAAM,GAAG,SAAS,EAAE,CAAC;QACzE,IAAI,OAAO,CAAC;QACZ,IAAI,CAAC;YACH,OAAO,GAAG,WAAW,CAAC,KAAK,CAAC,GAAG,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC;QAC5D,CAAC;QAAC,MAAM,CAAC;YACP,SAAS;QACX,CAAC;QACD,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;YAC5B,IAAI,KAAK,CAAC,MAAM,IAAI,SAAS;gBAAE,MAAM;YACrC,IAAI,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC;gBAAE,SAAS;YACnC,MAAM,GAAG,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,KAAK,CAAC,MAAM,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC;YACxE,IAAI,CAAC,KAAK,CAAC,WAAW,EAAE,EAAE,CAAC;gBACzB,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YAClB,CAAC;iBAAM,IAAI,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,YAAY,CAAC,EAAE,CAAC;gBAC7C,yEAAyE;gBACzE,oCAAoC;gBACpC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YAClB,CAAC;iBAAM,IAAI,KAAK,CAAC,KAAK,GAAG,SAAS,EAAE,CAAC;gBACnC,KAAK,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,GAAG,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,GAAG,CAAC,EAAE,CAAC,CAAC;YACxF,CAAC;QACH,CAAC;IACH,CAAC;IAED,IAAI,WAAwC,CAAC;IAC7C,IAAI,CAAC;QACH,MAAM,GAAG,GAAY,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,CAAC,GAAG,EAAE,cAAc,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC;QACjF,WAAW,GAAG,oBAAoB,CAAC,GAAG,CAAC,CAAC;IAC1C,CAAC;IAAC,MAAM,CAAC;QACP,WAAW,GAAG,SAAS,CAAC;IAC1B,CAAC;IAED,OAAO,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,WAAW,EAAE,CAAC;AACxE,CAAC"}

package/dist/detect/stack.js

@@ -0,0 +1,71 @@
+const RULES = [
+    {
+        profile: 'mobile-rn',
+        when: (s) => s.dep('react-native') || s.has('metro.config.js') || s.has('metro.config.cjs')
+            ? ['react-native dependency or metro config']
+            : null,
+    },
+    {
+        profile: 'fullstack-node',
+        when: (s) => (s.dep('@nestjs/core') || s.has('nest-cli.json')) && (s.dep('react') || s.ext('.tsx'))
+            ? ['nest and react in one repository']
+            : null,
+    },
+    {
+        profile: 'service-node',
+        when: (s) => (s.dep('@nestjs/core') || s.has('nest-cli.json') ? ['nest-cli.json'] : null),
+    },
+    {
+        profile: 'mobile-android',
+        when: (s) => s.has('AndroidManifest.xml') && (s.ext('.kt') || s.has('build.gradle.kts'))
+            ? ['AndroidManifest.xml with kotlin sources']
+            : null,
+    },
+    {
+        profile: 'mobile-ios',
+        when: (s) => s.has('Package.swift') || s.ext('.xcodeproj') || s.ext('.swift')
+            ? ['swift package or sources']
+            : null,
+    },
+    {
+        profile: 'service-java',
+        when: (s) => s.has('pom.xml') || s.has('build.gradle') || s.has('build.gradle.kts')
+            ? ['maven or gradle build file']
+            : null,
+    },
+    { profile: 'service-go', when: (s) => (s.has('go.mod') ? ['go.mod'] : null) },
+    {
+        profile: 'service-python',
+        when: (s) => s.has('pyproject.toml') || s.has('requirements.txt') || s.has('setup.py')
+            ? ['python project file']
+            : null,
+    },
+    {
+        profile: 'service-dotnet',
+        when: (s) => (s.ext('.csproj') || s.ext('.sln') ? ['dotnet project file'] : null),
+    },
+    {
+        profile: 'web',
+        when: (s) => (s.dep('react') || s.ext('.tsx') || s.ext('.jsx') ? ['react sources'] : null),
+    },
+    { profile: 'infra', when: (s) => (s.ext('.tf') ? ['terraform sources'] : null) },
+];
+export function proposeProfile(input) {
+    const names = new Set(input.paths.map((p) => p.split('/').at(-1) ?? p));
+    const deps = {
+        ...(input.packageJson?.dependencies ?? {}),
+        ...(input.packageJson?.devDependencies ?? {}),
+    };
+    const signals = {
+        has: (name) => names.has(name),
+        ext: (suffix) => input.paths.some((p) => p.endsWith(suffix)),
+        dep: (name) => name in deps,
+    };
+    for (const rule of RULES) {
+        const evidence = rule.when(signals);
+        if (evidence)
+            return { profile: rule.profile, confidence: 'high', evidence };
+    }
+    return { profile: 'tooling', confidence: 'low', evidence: ['no recognised stack signal'] };
+}
+//# sourceMappingURL=stack.js.map

package/dist/detect/stack.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"stack.js","sourceRoot":"","sources":["../../cli/detect/stack.ts"],"names":[],"mappings":"AA2BA,MAAM,KAAK,GAAW;IACpB;QACE,OAAO,EAAE,WAAW;QACpB,IAAI,EAAE,CAAC,CAAC,EAAE,EAAE,CACV,CAAC,CAAC,GAAG,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,iBAAiB,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,kBAAkB,CAAC;YAC5E,CAAC,CAAC,CAAC,yCAAyC,CAAC;YAC7C,CAAC,CAAC,IAAI;KACX;IACD;QACE,OAAO,EAAE,gBAAgB;QACzB,IAAI,EAAE,CAAC,CAAC,EAAE,EAAE,CACV,CAAC,CAAC,CAAC,GAAG,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;YACpF,CAAC,CAAC,CAAC,kCAAkC,CAAC;YACtC,CAAC,CAAC,IAAI;KACX;IACD;QACE,OAAO,EAAE,cAAc;QACvB,IAAI,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;KAC1F;IACD;QACE,OAAO,EAAE,gBAAgB;QACzB,IAAI,EAAE,CAAC,CAAC,EAAE,EAAE,CACV,CAAC,CAAC,GAAG,CAAC,qBAAqB,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,kBAAkB,CAAC,CAAC;YACzE,CAAC,CAAC,CAAC,yCAAyC,CAAC;YAC7C,CAAC,CAAC,IAAI;KACX;IACD;QACE,OAAO,EAAE,YAAY;QACrB,IAAI,EAAE,CAAC,CAAC,EAAE,EAAE,CACV,CAAC,CAAC,GAAG,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC;YAC9D,CAAC,CAAC,CAAC,0BAA0B,CAAC;YAC9B,CAAC,CAAC,IAAI;KACX;IACD;QACE,OAAO,EAAE,cAAc;QACvB,IAAI,EAAE,CAAC,CAAC,EAAE,EAAE,CACV,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,kBAAkB,CAAC;YACpE,CAAC,CAAC,CAAC,4BAA4B,CAAC;YAChC,CAAC,CAAC,IAAI;KACX;IACD,EAAE,OAAO,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE;IAC7E;QACE,OAAO,EAAE,gBAAgB;QACzB,IAAI,EAAE,CAAC,CAAC,EAAE,EAAE,CACV,CAAC,CAAC,GAAG,CAAC,gBAAgB,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,kBAAkB,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,UAAU,CAAC;YACvE,CAAC,CAAC,CAAC,qBAAqB,CAAC;YACzB,CAAC,CAAC,IAAI;KACX;IACD;QACE,OAAO,EAAE,gBAAgB;QACzB,IAAI,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;KAClF;IACD;QACE,OAAO,EAAE,KAAK;QACd,IAAI,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;KAC3F;IACD,EAAE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,mBAAmB,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE;CACjF,CAAC;AAEF,MAAM,UAAU,cAAc,CAAC,KAAkB;IAC/C,MAAM,KAAK,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACxE,MAAM,IAAI,GAAG;QACX,GAAG,CAAC,KAAK,CAAC,WAAW,EAAE,YAAY,IAAI,EAAE,CAAC;QAC1C,GAAG,CAAC,KAAK,CAAC,WAAW,EAAE,eAAe,IAAI,EAAE,CAAC;KAC9C,CAAC;IACF,MAAM,OAAO,GAAY;QACvB,GAAG,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC;QAC9B,GAAG,EAAE,CAAC,MAAM,EAAE,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;QAC5D,GAAG,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,IAAI,IAAI;KAC5B,CAAC;IAEF,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACpC,IAAI,QAAQ;YAAE,OAAO,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,UAAU,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC;IAC/E,CAAC;IACD,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,4BAA4B,CAAC,EAAE,CAAC;AAC7F,CAAC"}