Merge remote-tracking branch 'origin/main' into feat/external-eval

# Conflicts:
#	package.json

Author: aryamthecodebreaker

examples/README.md

@@ -21,3 +21,9 @@ Expected shape:
 - The report should include an authentication risk note.
 
 See `reports/password-reset.md` for a sample report.
+
+## pnpm + Turborepo Workspace
+
+`pnpm-turbo-workspace` is a two-package pnpm monorepo with Turborepo task wiring. It proves that test routing picks the nearest package script (`pnpm --dir packages/utils run test` or `pnpm --dir apps/api run test`) depending on the task, instead of always suggesting the root `turbo run test`.
+
+The input tasks and full expected reports are checked in; `npm run smoke` asserts the routing and fails on report drift. See [`pnpm-turbo-workspace/README.md`](pnpm-turbo-workspace/README.md).

examples/pnpm-turbo-workspace/README.md

@@ -0,0 +1,44 @@
+# pnpm + Turborepo Workspace Example
+
+A minimal pnpm workspace with Turborepo task wiring, used to prove workspace-aware script routing on a realistic monorepo shape:
+
+```text
+apps/api            @example/api    (test, typecheck scripts)
+packages/utils      @example/utils  (test, typecheck scripts)
+package.json        root turbo run test / typecheck
+```
+
+`apps/api` depends on `@example/utils`, and both packages own separate `test` and `typecheck` scripts, so the right routing answer changes with the task.
+
+## Tasks and expected routing
+
+From the repository root:
+
+```bash
+npm install
+npm run build
+node packages/cli/dist/cli.js plan --issue "roundToCents keeps fractions of a cent when formatting currency" --repo examples/pnpm-turbo-workspace
+```
+
+- Context should rank `packages/utils/src/currency.ts`.
+- The first test route should be `pnpm --dir packages/utils run test` — the nearest package, not the root `turbo run test`.
+
+```bash
+node packages/cli/dist/cli.js plan --issue "orderTotal ignores unknown discountCode values" --repo examples/pnpm-turbo-workspace
+```
+
+- Context should rank `apps/api/src/orders.ts` first.
+- The first test route should switch to `pnpm --dir apps/api run test`.
+
+The full generated reports are checked in under [`../reports/`](../reports) (outside this example so the reports never feed back into their own scan):
+
+- [`../reports/workspace-utils-rounding.md`](../reports/workspace-utils-rounding.md)
+- [`../reports/workspace-api-discount.md`](../reports/workspace-api-discount.md)
+
+## CI guard
+
+`npm run smoke` runs [`scripts/smoke-workspace.mjs`](../../scripts/smoke-workspace.mjs), which asserts the nearest-package routing for both tasks and fails if the checked-in reports drift from generated output. After an intentional ranking change, refresh them with:
+
+```bash
+node scripts/smoke-workspace.mjs --update
+```

examples/pnpm-turbo-workspace/apps/api/package.json

@@ -0,0 +1,17 @@
+{
+  "name": "@example/api",
+  "version": "0.0.0",
+  "private": true,
+  "type": "module",
+  "scripts": {
+    "test": "vitest run",
+    "typecheck": "tsc --noEmit"
+  },
+  "dependencies": {
+    "@example/utils": "workspace:*"
+  },
+  "devDependencies": {
+    "typescript": "^6.0.0",
+    "vitest": "^4.0.0"
+  }
+}

examples/pnpm-turbo-workspace/apps/api/src/orders.ts

@@ -0,0 +1,13 @@
+import { applyDiscount } from "@example/utils";
+
+export type Order = {
+  total: number;
+  discountCode?: string;
+};
+
+export function orderTotal(order: Order): number {
+  if (order.discountCode === "SAVE10") {
+    return applyDiscount(order.total, 10);
+  }
+  return order.total;
+}

examples/pnpm-turbo-workspace/apps/api/test/orders.test.ts

@@ -0,0 +1,10 @@
+import { expect, it } from "vitest";
+import { orderTotal } from "../src/orders.js";
+
+it("applies the SAVE10 discount code", () => {
+  expect(orderTotal({ total: 20, discountCode: "SAVE10" })).toBe(18);
+});
+
+it("charges the full total without a discount code", () => {
+  expect(orderTotal({ total: 20 })).toBe(20);
+});

examples/pnpm-turbo-workspace/package.json

@@ -0,0 +1,12 @@
+{
+  "name": "pnpm-turbo-workspace-example",
+  "version": "0.0.0",
+  "private": true,
+  "scripts": {
+    "test": "turbo run test",
+    "typecheck": "turbo run typecheck"
+  },
+  "devDependencies": {
+    "turbo": "^2.5.0"
+  }
+}

examples/pnpm-turbo-workspace/packages/utils/package.json

@@ -0,0 +1,14 @@
+{
+  "name": "@example/utils",
+  "version": "0.0.0",
+  "private": true,
+  "type": "module",
+  "scripts": {
+    "test": "vitest run",
+    "typecheck": "tsc --noEmit"
+  },
+  "devDependencies": {
+    "typescript": "^6.0.0",
+    "vitest": "^4.0.0"
+  }
+}

examples/pnpm-turbo-workspace/packages/utils/src/currency.ts

@@ -0,0 +1,8 @@
+export function applyDiscount(total: number, percent: number): number {
+  const discounted = total * (1 - percent / 100);
+  return roundToCents(discounted);
+}
+
+export function roundToCents(amount: number): number {
+  return Math.round(amount * 100) / 100;
+}

examples/pnpm-turbo-workspace/packages/utils/test/currency.test.ts

@@ -0,0 +1,10 @@
+import { expect, it } from "vitest";
+import { applyDiscount, roundToCents } from "../src/currency.js";
+
+it("applies a percentage discount", () => {
+  expect(applyDiscount(20, 10)).toBe(18);
+});
+
+it("rounds amounts to whole cents", () => {
+  expect(roundToCents(17.999)).toBe(18);
+});