Package catalog

Flat, lookup-shaped reference for every workspace package, grouped by layer. For the why behind the layers — what "kernel" means, the import-rule arrows, the worked example threading through them — see ../10-concepts/03-modular-monolith.md.

How to use this page

Find the package by name, click through to its source dir, then src/index.ts for the full export surface. The "Key exports" column lists the one to three grep-anchors most worth knowing — not the full API.

Layer 1 — kernel

Pure types, registries, errors, IDs, logger, paths. No tool-specific knowledge.

|---|---|---|---|

| @opensip-cli/core | packages/core/ | Kernel — language adapters, plugin loader, structured errors/catalogs, failure envelope, logger, IDs, abort-aware retry, project config, per-invocation execution scope | Tool, ToolRegistry, LanguageAdapter, LanguageRegistry, RunScope, runWithScope, currentScope, Registry, Signal, createSignal, discoverPlugins, discoverToolPackages, resolveProjectPaths, resolveUserPaths, renderGateCompareLines, projectJsonScalarMetadata, logger, ToolError, createToolError, defineErrorCatalog, normalizeFailure, withRetry, ValidationError |

Layer 2 — datastore, contracts, authoring helpers, tree-sitter, clone-detection, format, and cli-ui

@opensip-cli/datastore is the SQLite + Drizzle persistence kernel; it sits between core and the rest of this layer and depends only on core. Tools and session-store own their domain schemas (sessions in session-store; baseline/catalog in graph; baseline in fitness). Adding a new tool means adding a new schema module — datastore is paradigm-agnostic infrastructure.

@opensip-cli/contracts is the Tool/runner contract facade: it defines SignalEnvelope, ReviewBrief, exit codes, StoredSession, GraphCatalog, and small shared host-run runtime helpers such as command-result construction. Persistence, rendering, config I/O, and tool execution remain in their owning packages. It imports core only.

@opensip-cli/tool-test-kit is the public author-testing package. It provides a ToolCliContext test double, scope helpers, and command-spec assertion helpers without importing the CLI composition root.

@opensip-cli/tree-sitter is the grammar-agnostic tree-sitter substrate (ADR-0010): the web-tree-sitter lifecycle (parser init/load) plus grammar-agnostic node accessors. Like datastore it imports core only (plus web-tree-sitter) and sits below the adapters that consume it — the fitness lang- adapters and the four tree-sitter graph- adapters (via graph-adapter-common) share it so the WASM lifecycle and node-walking helpers live in exactly one place. A dependency-cruiser rule (tree-sitter-imports-core-only) pins it to that substrate position.

@opensip-cli/clone-detection is the shared function-body clone-detection substrate (ADR-0064): body hashing, MinHash/LSH primitives, the tool-neutral CloneCandidate shape, and exact/near-duplicate curation policy. It imports no workspace package, so graph and yagni can both depend on it without a tool-to-tool edge.

@opensip-cli/format is the pure presentation-label substrate (ADR-0144): formatDuration, formatScore, and narrow display projectors. It imports no workspace package so CLI, dashboard, and host history share one lexical path without layer cycles. Labels only — no suite/count aggregation.

@opensip-cli/cli-ui is the shared Ink/React presentational substrate (Banner, Spinner, RunHeader, theme). It is intentionally below tools so a tool with a live view can render with the common UI kit without depending on the CLI composition root.

|---|---|---|---|

| @opensip-cli/datastore | packages/datastore/ | SQLite + Drizzle persistence kernel — DataStore interface, factory, in-memory + on-disk backends, workspace migration store under migrations/, user_version schema-stamp guard | DataStore, DataStoreFactory, DataStoreOpenOptions, DataStoreMigrationError, DataStoreVersionError |

| @opensip-cli/contracts | packages/contracts/ | Shared contract facade — the SignalEnvelope/ReviewBrief/CommandResult shapes, exit codes, the cross-tool StoredSession type, GraphCatalog surface, and small tool-facing helpers | SignalEnvelope, ReviewBrief, reviewBriefSchema, compareReviewBriefRisks, RunVerdict, UnitResult, buildSignalEnvelope, CommandResult, EXIT_CODES, getErrorSuggestion, StoredSession, ToolSessionRecord, GraphCatalog, defineCommand |

| @opensip-cli/tool-test-kit | packages/tool-test-kit/ | Public tool-author test helpers — in-memory ToolCliContext double, scope helpers, and command-spec output assertions. Depends on core + contracts, not the CLI composition root. | createToolCliContextDouble, runCommandSpec, assertSignalEnvelope, assertCommandResult, makeTestScope |

| @opensip-cli/tree-sitter | packages/tree-sitter/ | Grammar-agnostic web-tree-sitter substrate (ADR-0010) — WASM parser lifecycle + node accessors, shared by the fitness lang-* and graph tree-sitter adapters. Depends on web-tree-sitter (and core) only | createParser, parseToTree, walkNodes, findEnclosing, nameOf, childrenOf, namedChildrenOf, nodeText |

| @opensip-cli/clone-detection | packages/clone-detection/ | Shared function-body clone-detection substrate (ADR-0064) — body digest, MinHash/LSH signatures, tool-neutral clone candidate shape, exact and near-duplicate curation policy. Leaf package; no workspace imports. | digestCanonicalBody, normalizeWhitespace, bodySignature, findDuplicateBodies, findNearDuplicates, isTestFilePath, CloneCandidate |

| @opensip-cli/format | packages/format/ | Pure presentation formatters + narrow display projectors (ADR-0144) — shared duration/score human labels for CLI, report, and host history. Leaf package; no workspace imports. Labels only; no suite aggregation. | formatDuration, formatScore, projectDurationDisplay, projectSessionDisplay |

| @opensip-cli/cli-ui | packages/cli-ui/ | Shared Ink/React presentational primitives — Banner, Spinner, RunHeader, theme. Extracted from cli/ so tools that ship a live view depend on the UI kit without pulling in the dispatcher. | Banner, Spinner, RunHeader, theme |

Layer 3 — config, codebase, session/output/dashboard libraries, external-tool substrate, and fitness language adapters

Packages above the substrate, below tool engines. These are shared libraries consumed by the CLI and tools but not tools themselves; the external-tool substrate turns local scanner descriptors into Tool implementations, and fitness language adapters implement LanguageAdapter.

Shared libraries

@opensip-cli/cli-live is the shared live-run shell: the state machine,

produce() seam, host glue, and error scrubbing that let tools render through

cli-ui without importing the CLI dispatcher.

|---|---|---|---|

| @opensip-cli/cli-live | packages/cli-live/ | Shared live-run runtime — host glue, produce() lifecycle, and error scrubbing over the cli-ui LiveRun shell. Extracted so tool packages can render live progress without depending on opensip-cli. | runToolLiveView, HostGlue, LiveRunSpec, LiveRunOutcome |

| @opensip-cli/config | packages/config/ | Project-config schema composer and document loaders — validates host-owned blocks plus tool-contributed namespaces as one strict document before dispatch | composeConfigSchema, validateConfigDocument, resolveConfig, loadCliDefaults, cliConfigSchema, ToolConfigDeclaration, hostConfigDeclarations, resolveEffectiveCloudConfig |

| @opensip-cli/targeting | packages/targeting/ | Host file-targeting runtime substrate (ADR-0037) — TargetRegistry, uniform glob expansion with globalExcludes, built once per run by the CLI bootstrap and exposed as scope.targets. Depends on config + core only (targeting-imports-config-core-only) | TargetRegistry, resolveTargets, preResolveAllTargets, applyGlobalExcludes |

| @opensip-cli/codebase | packages/codebase/ | Persistence-free bounded project inventory — deterministic target-backed file metadata, package-manifest facts, conservative verification argv, and read-optimized lookup maps. Retains no source or raw manifest content. | buildProjectInventory, readPackageManifestFacts, classifyFileRoles, ProjectInventory |

| @opensip-cli/shared-analysis | packages/shared-analysis/ | Shared cross-tool analysis runtime (Plan 09 Phase 7, extracted from contracts) — the changed→impact compute engine over GraphCatalog, review-brief risk derivation + correlation grouping, and the agent-catalog assembly both the CLI and MCP transports call. Types/schemas stay in contracts. | computeImpact, computeImpactAsync, buildComputeImpactIndex, signalToReviewBriefRisk, buildReviewBriefCorrelations, buildAgentCatalog, assembleAgentCatalog |

| @opensip-cli/session-store | packages/session-store/ | Session persistence — SessionRepo runtime over the (package-internal) sessions/session_tool_payload schema, session-id helpers. Depends on core, datastore, contracts | SessionRepo, SessionListOptions, generateSessionId, sanitizeForFilename |

| @opensip-cli/output | packages/output/ | Machine output layer (renamed from @opensip-cli/reporting, ADR-0011): pure format/ formatters + effectful sink/ delivery. Depends on core, contracts | formatSignalJson, formatSignalSarif, buildOpenSipSarif, formatSignalTableRows, formatSignalTableSummary, Formatter, postChunked, createCloudSignalSink, resolveSignalSink, resolveRepoIdentity, checkEntitlement |

| @opensip-cli/dashboard | packages/dashboard/ | Self-contained HTML report generator — renders fit/sim/graph/yagni sessions plus tool catalog data. Consumed by the CLI-owned report command and each tool's auto-open hook. | generateDashboardHtml |

| @opensip-cli/external-tool-adapter | packages/external-tool-adapter/ | External scanner substrate — wraps a user-installed CLI scanner as an OpenSIP Tool: binary resolution, run loop, SARIF/JSON ingest, severity mapping, doctor/version commands, provenance, and artifact handling. | defineExternalToolAdapter, ingestSarif, resolveBinary, runAcceptanceCase |

Language adapters (fitness — six languages)

Implement LanguageAdapter. Used by fitness checks and any future tool that needs per-language strip/parse routines.

|---|---|---|---|

| @opensip-cli/lang-typescript | packages/languages/lang-typescript/ | TypeScript/JavaScript adapter — TS compiler API + query layer | typescriptAdapter, filterContent, clearFilterCache |

Layer 4 — tools and tool adapters

Tool engines and opt-in tool adapters implement the Tool contract. They are peer domains: none imports another tool or the CLI.

|---|---|---|---|

| @opensip-cli/fitness | packages/fitness/engine/ | Fitness check engine, defineCheck, defineRecipe, gate. Returns a SignalEnvelope; SARIF/cloud egress is owned by the composition root (ADR-0011). The engine, recipe service, registries, gate/baseline primitives, and CLI handlers are package-internal (curated barrel, ADR-0013) — locked by public-api.test.ts | defineCheck, defineRecipe, getCheckConfig, fitnessTool (+ the AST/text authoring helpers: isTestFile, stripStringsAndComments, extractSnippet, …) |

| @opensip-cli/simulation | packages/simulation/engine/ | Simulation engine, two scenario kinds (load, chaos). Public barrel is scenario/recipe authoring API plus simulationTool; registry/lifecycle/recipe execution internals live on @opensip-cli/simulation/internal for tests only. | defineLoadScenario, defineChaosScenario, defineSimulationRecipe, simulationTool, SCENARIO_KINDS, ASSERTIONS, httpTarget, fault |

| @opensip-cli/graph | packages/graph/engine/ | Static call-graph + dead-end analysis kernel. Seven-stage staged pipeline (discover → inventory → edges → indexes → features → rules → render). Language-agnostic — adapters live in their own publishable packages (see "Graph language adapters" below); the CLI discovers them through the generic capability loader. Cross-package catalog consumers use the stable @opensip-cli/graph/read Result facade; repositories, rules, and orchestration remain private. | graphTool, GraphLanguageAdapter (type), defineGraphRecipe, defineRule; ./read: readCatalogIdentity, loadCatalogGeneration, rebuildCatalog, FeatureTable (type) |

| @opensip-cli/yagni | packages/yagni/engine/ | Advisory YAGNI reduction audit. Detector framework over TypeScript sources: config-surface reduction plus exact duplicate-body candidates. Duplicate detection builds yagni's own TypeScript inventory and consumes @opensip-cli/clone-detection (ADR-0064); no runtime @opensip-cli/graph dependency. Returns a SignalEnvelope with metadata.yagni on each finding. Advisory defaults (failOnErrors: 0). | yagniTool, YAGNI_STABLE_ID, YAGNI_CONTRACT_VERSION |

| @opensip-cli/mcp | packages/mcp/ | MCP stdio tool — exposes the OpenSIP graph catalog and stored session results to coding agents over Model Context Protocol. Loaded by the host like any other bundled Tool package. | mcpTool, tool, MCP_IDENTITY, MCP_STABLE_ID |

| @opensip-cli/tool-gitleaks | packages/tool-gitleaks/ | Opt-in external scanner adapter for Gitleaks — committed-secret scanning via a user-installed gitleaks binary, normalized into OpenSIP Signals with doctor/version commands. | tool, parseGitleaksJson, GITLEAKS_IDENTITY, GITLEAKS_STABLE_ID |

| @opensip-cli/tool-osv-scanner | packages/tool-osv-scanner/ | Opt-in external scanner adapter for OSV-Scanner — dependency vulnerability scanning via a user-installed osv-scanner binary, normalized into OpenSIP Signals with doctor/version commands. | tool, parseOsvJson, OSV_SCANNER_IDENTITY, OSV_SCANNER_STABLE_ID |

| @opensip-cli/tool-trivy | packages/tool-trivy/ | Opt-in external scanner adapter for Trivy — filesystem vulnerability and misconfiguration scanning via a user-installed trivy binary, normalized through the shared SARIF ingest path. | tool, TRIVY_IDENTITY, TRIVY_STABLE_ID |

| @opensip-cli/tool-semgrep | packages/tool-semgrep/ | Opt-in external scanner adapter for Semgrep — SAST/policy scanning via a user-installed semgrep binary, normalized through the shared SARIF ingest path. | tool, SEMGREP_IDENTITY, SEMGREP_STABLE_ID |

| @opensip-cli/tool-ast-grep | packages/tool-ast-grep/ | Opt-in external scanner adapter for ast-grep — structural search scanning via a user-installed ast-grep binary and stdout SARIF ingestion. | tool, AST_GREP_IDENTITY, AST_GREP_STABLE_ID |

| @opensip-cli/tool-ruff | packages/tool-ruff/ | Opt-in external scanner adapter for Ruff — Python lint diagnostics via a user-installed ruff binary, normalized from JSON. | tool, parseRuffJson, RUFF_IDENTITY, RUFF_STABLE_ID |

| @opensip-cli/tool-golangci-lint | packages/tool-golangci-lint/ | Opt-in external scanner adapter for golangci-lint — Go lint aggregation via a user-installed golangci-lint binary, normalized from stdout JSON. | tool, parseGolangciLintJson, GOLANGCI_LINT_IDENTITY, GOLANGCI_LINT_STABLE_ID |

| @opensip-cli/tool-govulncheck | packages/tool-govulncheck/ | Opt-in external scanner adapter for govulncheck — Go vulnerability scanning via a user-installed govulncheck binary, normalized from JSON lines. | tool, parseGovulncheckJsonLines, GOVULNCHECK_IDENTITY, GOVULNCHECK_STABLE_ID |

| @opensip-cli/tool-cargo-deny | packages/tool-cargo-deny/ | Opt-in external scanner adapter for cargo-deny — Rust dependency policy scanning via a user-installed cargo-deny binary, normalized from JSON lines. | tool, parseCargoDenyJsonLines, CARGO_DENY_IDENTITY, CARGO_DENY_STABLE_ID |

| @opensip-cli/tool-bandit | packages/tool-bandit/ | Opt-in external scanner adapter for Bandit — Python security scanning via a user-installed bandit binary, normalized from JSON. | tool, parseBanditJson, BANDIT_IDENTITY, BANDIT_STABLE_ID |

| @opensip-cli/tool-pip-audit | packages/tool-pip-audit/ | Opt-in external scanner adapter for pip-audit — Python dependency vulnerability scanning via a user-installed pip-audit binary, normalized from JSON. | tool, parsePipAuditJson, PIP_AUDIT_IDENTITY, PIP_AUDIT_STABLE_ID |

| @opensip-cli/tool-cargo-clippy | packages/tool-cargo-clippy/ | Opt-in external scanner adapter for cargo clippy — Rust lint diagnostics via cargo clippy --message-format=json, normalized from JSON lines. | tool, parseCargoClippyJsonLines, CARGO_CLIPPY_IDENTITY, CARGO_CLIPPY_STABLE_ID |

| @opensip-cli/tool-spotbugs | packages/tool-spotbugs/ | Opt-in external scanner adapter for SpotBugs — Java bytecode analysis via a user-installed spotbugs binary, normalized through SARIF. | tool, SPOTBUGS_IDENTITY, SPOTBUGS_STABLE_ID |

| @opensip-cli/tool-pmd | packages/tool-pmd/ | Opt-in external scanner adapter for PMD — Java source analysis via a user-installed pmd binary, normalized through SARIF. | tool, PMD_IDENTITY, PMD_STABLE_ID |

| @opensip-cli/tool-dependency-check | packages/tool-dependency-check/ | Opt-in external scanner adapter for OWASP Dependency-Check — dependency vulnerability scanning via a user-installed dependency-check binary, normalized through SARIF. | tool, DEPENDENCY_CHECK_IDENTITY, DEPENDENCY_CHECK_STABLE_ID |

| @opensip-cli/tool-cppcheck | packages/tool-cppcheck/ | Opt-in external scanner adapter for Cppcheck — C/C++ static analysis via a user-installed cppcheck binary, normalized through SARIF. | tool, CPPCHECK_IDENTITY, CPPCHECK_STABLE_ID |

Layer 5 — fitness check packs and graph adapter packs

Graph language adapters (five languages + shared scaffolding)

Distinct from the fitness language adapters above — these implement the graph engine's GraphLanguageAdapter contract (catalog inventory, edge extraction). Each is a publishable npm package marked with opensipTools.kind: "graph-adapter" plus the graph-adapter target-domain epoch; the CLI discovers them per command through the generic capability loader, which routes each adapter export to graph's registrar.

The four tree-sitter adapters (Python, Rust, Go, Java) are backed by web-tree-sitter (the WASM build — no native tree-sitter binding) and share @opensip-cli/graph-adapter-common, the tree-sitter scaffolding package (discover/parse/walk/cache-key factories). It sits downstream of the engine and upstream of the four tree-sitter adapters. The TypeScript adapter is the exception — it resolves its call graph through the TS compiler API, not tree-sitter.

|---|---|---|---|

| @opensip-cli/graph-adapter-common | packages/graph/graph-adapter-common/ | Shared tree-sitter scaffolding (discover/parse/walk/cache-key factories) for the tree-sitter graph adapters. Depends on core, graph, web-tree-sitter. Downstream of the engine, upstream of go/java/python/rust | discover/parse/walk/cache-key factory helpers |

Fitness check packs

Each pack implements the FitPluginExports contract: a required checks: Check[] (each carrying its own display) plus optional recipes (there is no metadata export — name and version come from the pack's package.json). Discovered via the scope-independent opensipTools.kind: "fit-pack" marker with targetDomain: "fit-pack" / targetDomainApiVersion, or by exact package name in plugins.checkPackages:. See 80-implementation/02-plugin-loader.md for the resolution rules.

|---|---|---|---|

Layer 6 — composition root

Imports every layer below. The published binary.

|---|---|---|---|

| opensip-cli | packages/cli/ | The opensip command-line binary; argv parsing, Tool registration, top-level commands | bin/opensip, decideReportOpen, launchReport, printWelcome, executeUninstall, getErrorSuggestion (re-export) |

Folder name vs. package name. The directory is packages/cli/, but the

published npm package is the unscoped opensip-cli — the single package

end-users install with curl -fsSL https://opensip.ai/cli/install.sh | bash.

It is the only unscoped package; every other package is @opensip-cli/*.

The package installs the opensip binary.

Workspace-private (never published)

|---|---|---|---|

| @opensip-cli/agent-eval | packages/agent-eval/ | Black-box agent-usability gold-task evaluation harness (ADR-0157/0158). private: true; never published. Spawns the built CLI + MCP over stdio; zero workspace source imports. Measures OpenSIP vs native search/read/glob on frozen gold tasks (pnpm agent-eval, --smoke). Quality-baseline tasks exercise completeness/trust of context surfaces, not tool absence. | AGENT_EVAL_VERSION |

| @opensip-cli/test-support | packages/test-support/ | Cross-package TEST scaffolding (ADR-0040): RunScope test sugar + the per-check fixture-coverage harness consumed by each check pack's fixture-coverage.test.ts. private: true — excluded from the release order; production source may not import it (no-prod-import-of-test-support depcruise rule) | makeTestScope, withScope, withScopeSync, runCheckOnFixture, planCoverageCases, buildFixtureManifest |

| @opensip-cli/checks-dogfood | packages/fitness/checks-dogfood/ | Repository-only architecture checks used to dogfood OpenSIP's own boundaries. private: true; never published or imported by production source. | checks |

Adding a new package

Decide the layer. Apply the rules in ../10-concepts/03-modular-monolith.md: kernel = zero tool knowledge; contracts = used by every tool; tools = own a Tool contract; language adapters = implement LanguageAdapter; check packs = ship Check[]; cli = composition root only.
Add the dep-cruiser carve-out if needed. The default layer rules forbid most cross-layer edges; if your package needs an exception, add it to .config/dependency-cruiser.cjs and document it in ../80-implementation/05-layer-policy.md.
Add a row in the right table above with the canonical npm name, path, one-line role (concrete, not "fitness concerns"), and 1–3 key exports a reader would grep for.
Update the layer narrative in 10-concepts/03-modular-monolith.md if the new package changes what the layer means. Pure additions to an existing pattern don't need a narrative edit — just the row here.

Verification trail

Last verified at v0.8.5 against scripts/release-package-order.mjs (the publishable

package source of truth) and the layer tables above:

61 workspace packages total: 58 publishable (all at 0.8.5) and three

private packages: @opensip-cli/agent-eval, @opensip-cli/test-support, and

@opensip-cli/checks-dogfood. The root manifest is tooling metadata, not a

workspace package. The six runtime-layer counts below cover the 58

publishable packages; the three private packages are listed separately above:

Layer 1 (kernel): 1 — core
Layer 2 (datastore + contracts + authoring helpers + tree-sitter + clone-detection + format + cli-ui): 7 —

datastore, contracts, tool-test-kit, tree-sitter, clone-detection, format, cli-ui

Layer 3 (cli-live + config + targeting + codebase + shared-analysis + session-store + output + dashboard + external-tool substrate + fitness language adapters): 15 —

cli-live, config, targeting, codebase, shared-analysis, session-store, output, dashboard, lang-typescript,

lang-rust, lang-python, lang-java, lang-go, lang-cpp, external-tool-adapter

Layer 4 Tools/tool adapters: 21 — fitness, simulation, graph, yagni,

mcp, tool-gitleaks, tool-osv-scanner, tool-trivy, tool-semgrep,

tool-ast-grep, tool-ruff, tool-golangci-lint, tool-govulncheck,

tool-cargo-deny, tool-bandit, tool-pip-audit, tool-cargo-clippy,

tool-spotbugs, tool-pmd, tool-dependency-check, tool-cppcheck

Layer 5 (check packs + graph adapter packs/scaffolding): 13 —

checks-universal, checks-typescript, checks-python,

checks-java, checks-go, checks-cpp, checks-rust, graph-adapter-common,

graph-typescript, graph-python, graph-rust, graph-go, graph-java

Layer 6 (composition root): 1 — cli
The graph language adapters are publishable @opensip-cli/graph-* packages,

backed by the shared @opensip-cli/graph-adapter-common scaffolding package

and the @opensip-cli/tree-sitter substrate. The config composer

(@opensip-cli/config) and host file-targeting runtime

(@opensip-cli/targeting) are separate packages so tool engines stay focused

on their own domains. The fitness language adapters (@opensip-cli/lang-*)

and the graph language adapters (@opensip-cli/graph-*) are unrelated

siblings implementing different contracts (LanguageAdapter vs.

GraphLanguageAdapter) — see

50-extend/05-language-adapters.md

for the distinction.

Each package's package.json description and name field, read directly.
The dep-cruiser config for layer rules.