roster-cli 0.1.0 → 0.1.3

package/README.md

@@ -83,9 +83,11 @@ Once installed:
   (overlap, missing harness/tools, routing ambiguity, cost); runs the bundled
   CLI and explains how to read the findings.
 - **`roster-drift.sh` hook** (`SessionStart`) — on each session, diffs
-  `.claude/agents/` against a cached snapshot and prints a short advisory if
+  `.claude/agents/` against a cached snapshot and emits a short advisory if
   agents were added/removed/changed (`ROSTER_DRIFT_DISABLE=1` to opt out).
-  Advisory only — never blocks a session.
+  The advisory goes to both Claude's session context (so it can offer an
+  audit proactively) and stderr (so you see it in the terminal). Advisory
+  only — never blocks a session.
 
 ## Contributing
 

package/dist/cli.js

@@ -169,5 +169,8 @@ export async function main(argv) {
 }
 const isDirectRun = process.argv[1] !== undefined && import.meta.url === `file://${process.argv[1]}`;
 if (isDirectRun) {
-    main(process.argv.slice(2)).then((code) => process.exit(code));
+    main(process.argv.slice(2)).then((code) => process.exit(code), (err) => {
+        console.error(err instanceof Error ? err.message : String(err));
+        process.exit(2);
+    });
 }

package/dist/rules/overlap.js

@@ -67,8 +67,12 @@ export const overlapRule = {
         pairs.sort((a, b) => b.score - a.score);
         const topPairs = pairs.slice(0, top);
         return topPairs.map(({ i, j, score }) => {
-            const a = agents[i].name;
-            const b = agents[j].name;
+            // Same name from two sources (e.g. a repo audited via dir that is also
+            // installed as a plugin) — disambiguate with the source label so the
+            // pair never renders as "x <-> x".
+            const sameName = agents[i].name === agents[j].name;
+            const a = sameName ? `${agents[i].name} (${agents[i].sourceLabel})` : agents[i].name;
+            const b = sameName ? `${agents[j].name} (${agents[j].sourceLabel})` : agents[j].name;
             const critical = failAbove !== undefined && score > failAbove;
             return {
                 ruleId: 'overlap',

package/dist/sources/dir.js

@@ -40,7 +40,17 @@ export const dirSource = {
         if (!dir) {
             throw new Error('sources/dir: opts.dir is required');
         }
-        const files = await collectMarkdownFiles(dir);
+        let files;
+        try {
+            files = await collectMarkdownFiles(dir);
+        }
+        catch (err) {
+            const code = err.code;
+            if (code === 'ENOENT' || code === 'ENOTDIR') {
+                throw new Error(`sources/dir: "${dir}" is not a readable directory`);
+            }
+            throw err;
+        }
         const agents = await Promise.all(files.map(async (filePath) => {
             const raw = await readFile(filePath, 'utf8');
             return parseAgentMarkdown(raw, filePath, `dir:${dir}`);

package/dist/sources/plugin-cache.js

@@ -12,21 +12,70 @@ async function readInstalledPlugins(pluginsRoot) {
         return undefined;
     }
 }
-function resolveActivePlugins(data) {
-    const active = [];
-    const seenInstallPaths = new Set();
+function compareVersions(a, b) {
+    const pa = a.split('.').map((n) => parseInt(n, 10));
+    const pb = b.split('.').map((n) => parseInt(n, 10));
+    for (let i = 0; i < Math.max(pa.length, pb.length); i++) {
+        const na = pa[i];
+        const nb = pb[i];
+        if (Number.isNaN(na ?? NaN) || Number.isNaN(nb ?? NaN)) {
+            // Non-numeric segment (git SHAs etc.) — fall back to string compare.
+            return a < b ? -1 : a > b ? 1 : 0;
+        }
+        if ((na ?? 0) !== (nb ?? 0))
+            return (na ?? 0) - (nb ?? 0);
+    }
+    return 0;
+}
+function pickPreferred(a, b, cwd) {
+    const aCwd = a.projectPath !== undefined && path.resolve(a.projectPath) === cwd;
+    const bCwd = b.projectPath !== undefined && path.resolve(b.projectPath) === cwd;
+    if (aCwd !== bCwd)
+        return aCwd ? a : b;
+    const aUser = a.scope === 'user';
+    const bUser = b.scope === 'user';
+    if (aUser !== bUser)
+        return aUser ? a : b;
+    return compareVersions(a.version, b.version) >= 0 ? a : b;
+}
+function resolveActivePlugins(data, cwd) {
+    const byName = new Map();
+    const skipped = [];
     for (const [key, entries] of Object.entries(data.plugins ?? {})) {
         const sepIndex = key.indexOf('@');
         const name = sepIndex === -1 ? key : key.slice(0, sepIndex);
         const marketplace = sepIndex === -1 ? '' : key.slice(sepIndex + 1);
         for (const entry of entries) {
-            if (!entry.installPath || seenInstallPaths.has(entry.installPath))
+            if (!entry.installPath)
                 continue;
-            seenInstallPaths.add(entry.installPath);
-            active.push({ name, marketplace, version: entry.version, installPath: entry.installPath });
+            const candidate = {
+                name,
+                marketplace,
+                version: entry.version,
+                installPath: entry.installPath,
+                scope: entry.scope,
+                projectPath: entry.projectPath,
+            };
+            const current = byName.get(name);
+            if (!current) {
+                byName.set(name, candidate);
+            }
+            else if (current.installPath !== candidate.installPath) {
+                const winner = pickPreferred(current, candidate, cwd);
+                const loser = winner === current ? candidate : current;
+                byName.set(name, winner);
+                skipped.push(loser);
+            }
+        }
+    }
+    for (const loser of skipped) {
+        const winner = byName.get(loser.name);
+        if (winner && winner.installPath !== loser.installPath) {
+            console.error(`sources/plugin-cache: skipped ${loser.name}@${loser.version}` +
+                `${loser.projectPath ? ` (pinned by ${loser.projectPath})` : ''} — using ${winner.version}`);
         }
     }
-    return active;
+    return [...byName.values()];
 }
 async function collectMarkdownFiles(root) {
     let entries;
@@ -71,8 +120,9 @@ export const pluginCacheSource = {
             console.error(`sources/plugin-cache: ${pluginsRoot}/installed_plugins.json not found — returning empty roster`);
             return [];
         }
+        const cwd = path.resolve(opts?.cwd ?? process.cwd());
         const pluginNameFilter = opts?.pluginName;
-        const activePlugins = resolveActivePlugins(data).filter((p) => !pluginNameFilter || p.name === pluginNameFilter);
+        const activePlugins = resolveActivePlugins(data, cwd).filter((p) => !pluginNameFilter || p.name === pluginNameFilter);
         const agentLists = await Promise.all(activePlugins.map(async (plugin) => {
             const agentsDir = path.join(plugin.installPath, 'agents');
             if (!(await dirExists(agentsDir)))

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "roster-cli",
-  "version": "0.1.0",
+  "version": "0.1.3",
   "description": "Zero-runtime-dep static auditor for Claude Code agent rosters \u2014 overlap, harness gaps, routing, cost.",
   "type": "module",
   "bin": {
@@ -15,7 +15,8 @@
   "scripts": {
     "build": "tsc",
     "test": "vitest run",
-    "prepublishOnly": "npm run build"
+    "prepublishOnly": "npm run build",
+    "prepare": "npm run build"
   },
   "devDependencies": {
     "typescript": "^5.6.3",