@agent-teams/engineering-foundation 0.3.0 → 0.4.0

package/dist/capabilities/repository-security-baseline/application/rules.d.ts

@@ -0,0 +1,23 @@
+import type { DiagnosticSeverity } from "../../../check-contract.js";
+export interface RepositorySecurityRuleMetadata {
+    readonly id: string;
+    readonly severity: DiagnosticSeverity;
+    readonly rationale: string;
+    readonly remediation: string;
+    readonly documentation: string;
+    readonly requiresArchitectureReview: boolean;
+}
+export declare const REPOSITORY_SECURITY_RULES: Readonly<{
+    actionNotPinned: RepositorySecurityRuleMetadata;
+    dependencyReviewMissing: RepositorySecurityRuleMetadata;
+    dangerousTrigger: RepositorySecurityRuleMetadata;
+    eventInterpolationInRun: RepositorySecurityRuleMetadata;
+    packageFilesUnsafe: RepositorySecurityRuleMetadata;
+    packageProvenanceMissing: RepositorySecurityRuleMetadata;
+    permissionsInvalid: RepositorySecurityRuleMetadata;
+    sbomMissing: RepositorySecurityRuleMetadata;
+    privilegedJobMismatch: RepositorySecurityRuleMetadata;
+    stalePrivilegedJob: RepositorySecurityRuleMetadata;
+}>;
+export declare const REPOSITORY_SECURITY_RULES_BY_ID: ReadonlyMap<string, RepositorySecurityRuleMetadata>;
+//# sourceMappingURL=rules.d.ts.map

package/dist/capabilities/repository-security-baseline/application/rules.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"rules.d.ts","sourceRoot":"","sources":["../../../../src/capabilities/repository-security-baseline/application/rules.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,4BAA4B,CAAC;AAErE,MAAM,WAAW,8BAA8B;IAC7C,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,QAAQ,EAAE,kBAAkB,CAAC;IACtC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,0BAA0B,EAAE,OAAO,CAAC;CAC9C;AAiBD,eAAO,MAAM,yBAAyB;;;;;;;;;;;EAmDpC,CAAC;AAEH,eAAO,MAAM,+BAA+B,EAAE,WAAW,CACvD,MAAM,EACN,8BAA8B,CAG/B,CAAC"}

package/dist/capabilities/repository-security-baseline/application/rules.js

@@ -0,0 +1,24 @@
+function rule(suffix, rationale, remediation) {
+    return Object.freeze({
+        id: `repository.security-baseline.${suffix}`,
+        severity: "error",
+        rationale,
+        remediation,
+        documentation: "docs/security/repository-security-baseline.md",
+        requiresArchitectureReview: false
+    });
+}
+export const REPOSITORY_SECURITY_RULES = Object.freeze({
+    actionNotPinned: rule("action-not-pinned", "Mutable action references can change without repository review.", "Pin external actions to a full 40-character commit SHA."),
+    dependencyReviewMissing: rule("dependency-review-missing", "Dependency changes need a pull-request vulnerability gate.", "Run the pinned actions/dependency-review-action from the declared workflow."),
+    dangerousTrigger: rule("dangerous-trigger", "pull_request_target executes privileged base-branch code around untrusted pull-request data.", "Use pull_request or introduce a separately reviewed privileged workflow design."),
+    eventInterpolationInRun: rule("event-interpolation-in-run", "Direct event-data interpolation into a shell command enables command injection.", "Pass event data through a quoted environment variable instead of interpolating it in run."),
+    packageFilesUnsafe: rule("package-files-unsafe", "A broad npm files declaration can publish source, tests, local state, or credentials.", "Use a narrow explicit files allowlist without root, parent, recursive, source, test, or secret paths."),
+    packageProvenanceMissing: rule("package-provenance-missing", "Published packages need verifiable build provenance.", "Set publishConfig.provenance to true in the publishable package manifest."),
+    permissionsInvalid: rule("permissions-invalid", "Workflow token permissions must default to an explicit read-only map.", "Declare root permissions as an object containing only read or none values."),
+    sbomMissing: rule("sbom-missing", "The dependency inventory must be reproducibly exported for each reviewed revision.", "Run a pinned anchore/sbom-action from the declared SBOM workflow."),
+    privilegedJobMismatch: rule("privileged-job-mismatch", "Write-capable jobs need an exact reviewed permission declaration.", "Declare the job in privilegedJobs with the exact permission map, or remove write access."),
+    stalePrivilegedJob: rule("stale-privileged-job", "A stale privilege declaration can hide workflow ownership drift.", "Remove the declaration or restore the exact governed workflow job.")
+});
+export const REPOSITORY_SECURITY_RULES_BY_ID = new Map(Object.values(REPOSITORY_SECURITY_RULES).map((metadata) => [metadata.id, metadata]));
+//# sourceMappingURL=rules.js.map

package/dist/capabilities/repository-security-baseline/application/rules.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"rules.js","sourceRoot":"","sources":["../../../../src/capabilities/repository-security-baseline/application/rules.ts"],"names":[],"mappings":"AAWA,SAAS,IAAI,CACX,MAAc,EACd,SAAiB,EACjB,WAAmB;IAEnB,OAAO,MAAM,CAAC,MAAM,CAAC;QACnB,EAAE,EAAE,gCAAgC,MAAM,EAAE;QAC5C,QAAQ,EAAE,OAAO;QACjB,SAAS;QACT,WAAW;QACX,aAAa,EAAE,+CAA+C;QAC9D,0BAA0B,EAAE,KAAK;KAClC,CAAC,CAAC;AACL,CAAC;AAED,MAAM,CAAC,MAAM,yBAAyB,GAAG,MAAM,CAAC,MAAM,CAAC;IACrD,eAAe,EAAE,IAAI,CACnB,mBAAmB,EACnB,iEAAiE,EACjE,yDAAyD,CAC1D;IACD,uBAAuB,EAAE,IAAI,CAC3B,2BAA2B,EAC3B,4DAA4D,EAC5D,6EAA6E,CAC9E;IACD,gBAAgB,EAAE,IAAI,CACpB,mBAAmB,EACnB,8FAA8F,EAC9F,iFAAiF,CAClF;IACD,uBAAuB,EAAE,IAAI,CAC3B,4BAA4B,EAC5B,iFAAiF,EACjF,2FAA2F,CAC5F;IACD,kBAAkB,EAAE,IAAI,CACtB,sBAAsB,EACtB,uFAAuF,EACvF,uGAAuG,CACxG;IACD,wBAAwB,EAAE,IAAI,CAC5B,4BAA4B,EAC5B,sDAAsD,EACtD,2EAA2E,CAC5E;IACD,kBAAkB,EAAE,IAAI,CACtB,qBAAqB,EACrB,uEAAuE,EACvE,4EAA4E,CAC7E;IACD,WAAW,EAAE,IAAI,CACf,cAAc,EACd,oFAAoF,EACpF,mEAAmE,CACpE;IACD,qBAAqB,EAAE,IAAI,CACzB,yBAAyB,EACzB,mEAAmE,EACnE,0FAA0F,CAC3F;IACD,kBAAkB,EAAE,IAAI,CACtB,sBAAsB,EACtB,kEAAkE,EAClE,oEAAoE,CACrE;CACF,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,+BAA+B,GAGxC,IAAI,GAAG,CACT,MAAM,CAAC,MAAM,CAAC,yBAAyB,CAAC,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,QAAQ,CAAC,EAAE,EAAE,QAAQ,CAAC,CAAC,CACpF,CAAC"}

package/dist/capabilities/repository-security-baseline/application/use-cases/analyze-repository-security.d.ts

@@ -0,0 +1,9 @@
+import type { FoundationDiagnostic } from "../../../../check-contract.js";
+import type { RepositorySecurityPolicy } from "../model/repository-security.js";
+import type { RepositorySecurityReader } from "../ports/repository-security-reader.js";
+export declare function analyzeRepositorySecurity(input: {
+    readonly consumerRoot: string;
+    readonly policy: RepositorySecurityPolicy;
+    readonly signal?: AbortSignal;
+}, reader: RepositorySecurityReader): Promise<readonly FoundationDiagnostic[]>;
+//# sourceMappingURL=analyze-repository-security.d.ts.map

package/dist/capabilities/repository-security-baseline/application/use-cases/analyze-repository-security.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"analyze-repository-security.d.ts","sourceRoot":"","sources":["../../../../../src/capabilities/repository-security-baseline/application/use-cases/analyze-repository-security.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,+BAA+B,CAAC;AAE1E,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,iCAAiC,CAAC;AAChF,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,wCAAwC,CAAC;AAGvF,wBAAsB,yBAAyB,CAC7C,KAAK,EAAE;IACL,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,MAAM,EAAE,wBAAwB,CAAC;IAC1C,QAAQ,CAAC,MAAM,CAAC,EAAE,WAAW,CAAC;CAC/B,EACD,MAAM,EAAE,wBAAwB,GAC/B,OAAO,CAAC,SAAS,oBAAoB,EAAE,CAAC,CAM1C"}

package/dist/capabilities/repository-security-baseline/application/use-cases/analyze-repository-security.js

@@ -0,0 +1,7 @@
+import { assertNotCancelled } from "../../../../strict-yaml.js";
+import { evaluateRepositorySecurity } from "../policies/evaluate-repository-security.js";
+export async function analyzeRepositorySecurity(input, reader) {
+    assertNotCancelled(input.signal);
+    return evaluateRepositorySecurity(input.policy, await reader.read(input.consumerRoot, input.policy, input.signal));
+}
+//# sourceMappingURL=analyze-repository-security.js.map

package/dist/capabilities/repository-security-baseline/application/use-cases/analyze-repository-security.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"analyze-repository-security.js","sourceRoot":"","sources":["../../../../../src/capabilities/repository-security-baseline/application/use-cases/analyze-repository-security.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,kBAAkB,EAAE,MAAM,4BAA4B,CAAC;AAGhE,OAAO,EAAE,0BAA0B,EAAE,MAAM,6CAA6C,CAAC;AAEzF,MAAM,CAAC,KAAK,UAAU,yBAAyB,CAC7C,KAIC,EACD,MAAgC;IAEhC,kBAAkB,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IACjC,OAAO,0BAA0B,CAC/B,KAAK,CAAC,MAAM,EACZ,MAAM,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,YAAY,EAAE,KAAK,CAAC,MAAM,EAAE,KAAK,CAAC,MAAM,CAAC,CAClE,CAAC;AACJ,CAAC"}

package/dist/capabilities/repository-security-baseline/contract/config.d.ts

@@ -0,0 +1,5 @@
+import type { RepositorySecurityPolicy } from "../application/model/repository-security.js";
+export declare const CAPABILITY_ID: "repository.security-baseline";
+export declare const CAPABILITY_CONFIG_SCHEMA_VERSION: 1;
+export declare function loadCapabilityConfig(consumerRoot: string, configPath: string, signal?: AbortSignal): Promise<RepositorySecurityPolicy>;
+//# sourceMappingURL=config.d.ts.map

package/dist/capabilities/repository-security-baseline/contract/config.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.d.ts","sourceRoot":"","sources":["../../../../src/capabilities/repository-security-baseline/contract/config.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAEV,wBAAwB,EAEzB,MAAM,6CAA6C,CAAC;AAErD,eAAO,MAAM,aAAa,EAAG,8BAAuC,CAAC;AACrE,eAAO,MAAM,gCAAgC,EAAG,CAAU,CAAC;AAoD3D,wBAAsB,oBAAoB,CACxC,YAAY,EAAE,MAAM,EACpB,UAAU,EAAE,MAAM,EAClB,MAAM,CAAC,EAAE,WAAW,GACnB,OAAO,CAAC,wBAAwB,CAAC,CA4CnC"}

package/dist/capabilities/repository-security-baseline/contract/config.js

@@ -0,0 +1,86 @@
+import { CapabilityInputError } from "../../../capability-runtime.js";
+import { assertSchema } from "../../../schema-catalog.js";
+import { assertRepositoryRelativePath, loadStrictYamlFile } from "../../../strict-yaml.js";
+export const CAPABILITY_ID = "repository.security-baseline";
+export const CAPABILITY_CONFIG_SCHEMA_VERSION = 1;
+function inputError(message) {
+    throw new CapabilityInputError({
+        code: "REPOSITORY_SECURITY_CONFIG_INVALID",
+        message,
+        phase: "repository-security-config",
+        retryable: false
+    });
+}
+function record(value, field) {
+    if (typeof value !== "object" || value === null || Array.isArray(value)) {
+        inputError(`${field} must be an object.`);
+    }
+    return value;
+}
+function string(value, field) {
+    if (typeof value !== "string") {
+        inputError(`${field} must be a string.`);
+    }
+    return value;
+}
+function path(value, field) {
+    const result = string(value, field);
+    assertRepositoryRelativePath(result, "repository-security-config");
+    return result;
+}
+function mapPrivilegedJob(value, index) {
+    const field = `privilegedJobs[${index}]`;
+    const input = record(value, field);
+    const permissionInput = record(input["permissions"], `${field}.permissions`);
+    const permissions = {};
+    for (const [name, permission] of Object.entries(permissionInput)) {
+        if (permission !== "none" && permission !== "read" && permission !== "write") {
+            inputError(`${field}.permissions.${name} is invalid.`);
+        }
+        permissions[name] = permission;
+    }
+    if (!Object.values(permissions).includes("write")) {
+        inputError(`${field} must govern at least one write permission.`);
+    }
+    return Object.freeze({
+        workflowPath: path(input["workflowPath"], `${field}.workflowPath`),
+        jobId: string(input["jobId"], `${field}.jobId`),
+        permissions: Object.freeze(permissions)
+    });
+}
+export async function loadCapabilityConfig(consumerRoot, configPath, signal) {
+    const input = await loadStrictYamlFile(consumerRoot, configPath, "repository-security-config", signal);
+    await assertSchema("repository-security-baseline/v1", input, "repository-security-config");
+    const root = record(input, "repository security config");
+    const workflowDirectory = path(root["workflowDirectory"], "workflowDirectory");
+    const dependencyReviewWorkflow = path(root["dependencyReviewWorkflow"], "dependencyReviewWorkflow");
+    const sbomWorkflow = path(root["sbomWorkflow"], "sbomWorkflow");
+    for (const governedWorkflow of [dependencyReviewWorkflow, sbomWorkflow]) {
+        if (!governedWorkflow.startsWith(`${workflowDirectory}/`)) {
+            inputError(`${governedWorkflow} must be inside workflowDirectory.`);
+        }
+    }
+    const privilegedInput = root["privilegedJobs"];
+    const manifestsInput = root["publishablePackageManifests"];
+    if (!Array.isArray(privilegedInput) || !Array.isArray(manifestsInput)) {
+        inputError("privilegedJobs and publishablePackageManifests must be arrays.");
+    }
+    const privilegedJobs = privilegedInput.map(mapPrivilegedJob);
+    const privilegedKeys = privilegedJobs.map(({ workflowPath, jobId }) => `${workflowPath}:${jobId}`);
+    if (new Set(privilegedKeys).size !== privilegedKeys.length) {
+        inputError("Privileged workflow job declarations must be unique.");
+    }
+    for (const privileged of privilegedJobs) {
+        if (!privileged.workflowPath.startsWith(`${workflowDirectory}/`)) {
+            inputError(`Privileged workflow must be inside ${workflowDirectory}: ${privileged.workflowPath}.`);
+        }
+    }
+    return Object.freeze({
+        workflowDirectory,
+        dependencyReviewWorkflow,
+        sbomWorkflow,
+        privilegedJobs: Object.freeze(privilegedJobs),
+        publishablePackageManifests: Object.freeze(manifestsInput.map((value, index) => path(value, `publishablePackageManifests[${index}]`)))
+    });
+}
+//# sourceMappingURL=config.js.map

package/dist/capabilities/repository-security-baseline/contract/config.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.js","sourceRoot":"","sources":["../../../../src/capabilities/repository-security-baseline/contract/config.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,oBAAoB,EAAE,MAAM,gCAAgC,CAAC;AACtE,OAAO,EAAE,YAAY,EAAE,MAAM,4BAA4B,CAAC;AAC1D,OAAO,EAAE,4BAA4B,EAAE,kBAAkB,EAAE,MAAM,yBAAyB,CAAC;AAO3F,MAAM,CAAC,MAAM,aAAa,GAAG,8BAAuC,CAAC;AACrE,MAAM,CAAC,MAAM,gCAAgC,GAAG,CAAU,CAAC;AAE3D,SAAS,UAAU,CAAC,OAAe;IACjC,MAAM,IAAI,oBAAoB,CAAC;QAC7B,IAAI,EAAE,oCAAoC;QAC1C,OAAO;QACP,KAAK,EAAE,4BAA4B;QACnC,SAAS,EAAE,KAAK;KACjB,CAAC,CAAC;AACL,CAAC;AAED,SAAS,MAAM,CAAC,KAAc,EAAE,KAAa;IAC3C,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACxE,UAAU,CAAC,GAAG,KAAK,qBAAqB,CAAC,CAAC;IAC5C,CAAC;IACD,OAAO,KAAgC,CAAC;AAC1C,CAAC;AAED,SAAS,MAAM,CAAC,KAAc,EAAE,KAAa;IAC3C,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC9B,UAAU,CAAC,GAAG,KAAK,oBAAoB,CAAC,CAAC;IAC3C,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,IAAI,CAAC,KAAc,EAAE,KAAa;IACzC,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;IACpC,4BAA4B,CAAC,MAAM,EAAE,4BAA4B,CAAC,CAAC;IACnE,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAS,gBAAgB,CAAC,KAAc,EAAE,KAAa;IACrD,MAAM,KAAK,GAAG,kBAAkB,KAAK,GAAG,CAAC;IACzC,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;IACnC,MAAM,eAAe,GAAG,MAAM,CAAC,KAAK,CAAC,aAAa,CAAC,EAAE,GAAG,KAAK,cAAc,CAAC,CAAC;IAC7E,MAAM,WAAW,GAAuC,EAAE,CAAC;IAC3D,KAAK,MAAM,CAAC,IAAI,EAAE,UAAU,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,eAAe,CAAC,EAAE,CAAC;QACjE,IAAI,UAAU,KAAK,MAAM,IAAI,UAAU,KAAK,MAAM,IAAI,UAAU,KAAK,OAAO,EAAE,CAAC;YAC7E,UAAU,CAAC,GAAG,KAAK,gBAAgB,IAAI,cAAc,CAAC,CAAC;QACzD,CAAC;QACD,WAAW,CAAC,IAAI,CAAC,GAAG,UAAU,CAAC;IACjC,CAAC;IACD,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;QAClD,UAAU,CAAC,GAAG,KAAK,6CAA6C,CAAC,CAAC;IACpE,CAAC;IACD,OAAO,MAAM,CAAC,MAAM,CAAC;QACnB,YAAY,EAAE,IAAI,CAAC,KAAK,CAAC,cAAc,CAAC,EAAE,GAAG,KAAK,eAAe,CAAC;QAClE,KAAK,EAAE,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,GAAG,KAAK,QAAQ,CAAC;QAC/C,WAAW,EAAE,MAAM,CAAC,MAAM,CAAC,WAAW,CAAC;KACxC,CAAC,CAAC;AACL,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,oBAAoB,CACxC,YAAoB,EACpB,UAAkB,EAClB,MAAoB;IAEpB,MAAM,KAAK,GAAG,MAAM,kBAAkB,CACpC,YAAY,EACZ,UAAU,EACV,4BAA4B,EAC5B,MAAM,CACP,CAAC;IACF,MAAM,YAAY,CAAC,iCAAiC,EAAE,KAAK,EAAE,4BAA4B,CAAC,CAAC;IAC3F,MAAM,IAAI,GAAG,MAAM,CAAC,KAAK,EAAE,4BAA4B,CAAC,CAAC;IACzD,MAAM,iBAAiB,GAAG,IAAI,CAAC,IAAI,CAAC,mBAAmB,CAAC,EAAE,mBAAmB,CAAC,CAAC;IAC/E,MAAM,wBAAwB,GAAG,IAAI,CACnC,IAAI,CAAC,0BAA0B,CAAC,EAChC,0BAA0B,CAC3B,CAAC;IACF,MAAM,YAAY,GAAG,IAAI,CAAC,IAAI,CAAC,cAAc,CAAC,EAAE,cAAc,CAAC,CAAC;IAChE,KAAK,MAAM,gBAAgB,IAAI,CAAC,wBAAwB,EAAE,YAAY,CAAC,EAAE,CAAC;QACxE,IAAI,CAAC,gBAAgB,CAAC,UAAU,CAAC,GAAG,iBAAiB,GAAG,CAAC,EAAE,CAAC;YAC1D,UAAU,CAAC,GAAG,gBAAgB,oCAAoC,CAAC,CAAC;QACtE,CAAC;IACH,CAAC;IACD,MAAM,eAAe,GAAG,IAAI,CAAC,gBAAgB,CAAC,CAAC;IAC/C,MAAM,cAAc,GAAG,IAAI,CAAC,6BAA6B,CAAC,CAAC;IAC3D,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,eAAe,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,cAAc,CAAC,EAAE,CAAC;QACtE,UAAU,CAAC,gEAAgE,CAAC,CAAC;IAC/E,CAAC;IACD,MAAM,cAAc,GAAG,eAAe,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC;IAC7D,MAAM,cAAc,GAAG,cAAc,CAAC,GAAG,CAAC,CAAC,EAAE,YAAY,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC,GAAG,YAAY,IAAI,KAAK,EAAE,CAAC,CAAC;IACnG,IAAI,IAAI,GAAG,CAAC,cAAc,CAAC,CAAC,IAAI,KAAK,cAAc,CAAC,MAAM,EAAE,CAAC;QAC3D,UAAU,CAAC,sDAAsD,CAAC,CAAC;IACrE,CAAC;IACD,KAAK,MAAM,UAAU,IAAI,cAAc,EAAE,CAAC;QACxC,IAAI,CAAC,UAAU,CAAC,YAAY,CAAC,UAAU,CAAC,GAAG,iBAAiB,GAAG,CAAC,EAAE,CAAC;YACjE,UAAU,CAAC,sCAAsC,iBAAiB,KAAK,UAAU,CAAC,YAAY,GAAG,CAAC,CAAC;QACrG,CAAC;IACH,CAAC;IACD,OAAO,MAAM,CAAC,MAAM,CAAC;QACnB,iBAAiB;QACjB,wBAAwB;QACxB,YAAY;QACZ,cAAc,EAAE,MAAM,CAAC,MAAM,CAAC,cAAc,CAAC;QAC7C,2BAA2B,EAAE,MAAM,CAAC,MAAM,CACxC,cAAc,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,KAAK,EAAE,+BAA+B,KAAK,GAAG,CAAC,CAAC,CAC3F;KACF,CAAC,CAAC;AACL,CAAC"}

package/dist/capabilities/repository-security-baseline/module.d.ts

@@ -0,0 +1,5 @@
+import { type CapabilityDefinition } from "../../capability-runtime.js";
+import { REPOSITORY_SECURITY_RULES_BY_ID } from "./application/rules.js";
+export { REPOSITORY_SECURITY_RULES_BY_ID };
+export declare function createRepositorySecurityBaselineCapability(): CapabilityDefinition;
+//# sourceMappingURL=module.d.ts.map

package/dist/capabilities/repository-security-baseline/module.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"module.d.ts","sourceRoot":"","sources":["../../../src/capabilities/repository-security-baseline/module.ts"],"names":[],"mappings":"AAAA,OAAO,EAGL,KAAK,oBAAoB,EAE1B,MAAM,6BAA6B,CAAC;AAErC,OAAO,EAAE,+BAA+B,EAAE,MAAM,wBAAwB,CAAC;AAQzE,OAAO,EAAE,+BAA+B,EAAE,CAAC;AAE3C,wBAAgB,0CAA0C,IAAI,oBAAoB,CA+CjF"}

package/dist/capabilities/repository-security-baseline/module.js

@@ -0,0 +1,49 @@
+import { CapabilityInputError, capabilityReport } from "../../capability-runtime.js";
+import { FilesystemRepositorySecurityReader } from "./adapters/outbound/filesystem/filesystem-repository-security-reader.js";
+import { REPOSITORY_SECURITY_RULES_BY_ID } from "./application/rules.js";
+import { analyzeRepositorySecurity } from "./application/use-cases/analyze-repository-security.js";
+import { CAPABILITY_CONFIG_SCHEMA_VERSION, CAPABILITY_ID, loadCapabilityConfig } from "./contract/config.js";
+export { REPOSITORY_SECURITY_RULES_BY_ID };
+export function createRepositorySecurityBaselineCapability() {
+    const reader = new FilesystemRepositorySecurityReader();
+    return Object.freeze({
+        id: CAPABILITY_ID,
+        configSchemaVersion: CAPABILITY_CONFIG_SCHEMA_VERSION,
+        async run(invocation) {
+            try {
+                const policy = await loadCapabilityConfig(invocation.consumerRoot, invocation.configPath, invocation.signal);
+                return capabilityReport({
+                    capabilityId: CAPABILITY_ID,
+                    capabilityConfigSchemaVersion: CAPABILITY_CONFIG_SCHEMA_VERSION,
+                    diagnostics: await analyzeRepositorySecurity({
+                        consumerRoot: invocation.consumerRoot,
+                        policy,
+                        ...(invocation.signal === undefined ? {} : { signal: invocation.signal })
+                    }, reader)
+                });
+            }
+            catch (error) {
+                if (error instanceof CapabilityInputError) {
+                    return capabilityReport({
+                        capabilityId: CAPABILITY_ID,
+                        capabilityConfigSchemaVersion: CAPABILITY_CONFIG_SCHEMA_VERSION,
+                        outcome: error.problem.code === "EXECUTION_CANCELLED" ? "cancelled" : "invalid-input",
+                        problem: error.problem
+                    });
+                }
+                return capabilityReport({
+                    capabilityId: CAPABILITY_ID,
+                    capabilityConfigSchemaVersion: CAPABILITY_CONFIG_SCHEMA_VERSION,
+                    outcome: "failed",
+                    problem: {
+                        code: "CAPABILITY_EXECUTION_FAILED",
+                        message: "Repository security baseline capability execution failed.",
+                        phase: "repository-security-execution",
+                        retryable: false
+                    }
+                });
+            }
+        }
+    });
+}
+//# sourceMappingURL=module.js.map

package/dist/capabilities/repository-security-baseline/module.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"module.js","sourceRoot":"","sources":["../../../src/capabilities/repository-security-baseline/module.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,oBAAoB,EACpB,gBAAgB,EAGjB,MAAM,6BAA6B,CAAC;AACrC,OAAO,EAAE,kCAAkC,EAAE,MAAM,yEAAyE,CAAC;AAC7H,OAAO,EAAE,+BAA+B,EAAE,MAAM,wBAAwB,CAAC;AACzE,OAAO,EAAE,yBAAyB,EAAE,MAAM,wDAAwD,CAAC;AACnG,OAAO,EACL,gCAAgC,EAChC,aAAa,EACb,oBAAoB,EACrB,MAAM,sBAAsB,CAAC;AAE9B,OAAO,EAAE,+BAA+B,EAAE,CAAC;AAE3C,MAAM,UAAU,0CAA0C;IACxD,MAAM,MAAM,GAAG,IAAI,kCAAkC,EAAE,CAAC;IACxD,OAAO,MAAM,CAAC,MAAM,CAAC;QACnB,EAAE,EAAE,aAAa;QACjB,mBAAmB,EAAE,gCAAgC;QACrD,KAAK,CAAC,GAAG,CAAC,UAAgC;YACxC,IAAI,CAAC;gBACH,MAAM,MAAM,GAAG,MAAM,oBAAoB,CACvC,UAAU,CAAC,YAAY,EACvB,UAAU,CAAC,UAAU,EACrB,UAAU,CAAC,MAAM,CAClB,CAAC;gBACF,OAAO,gBAAgB,CAAC;oBACtB,YAAY,EAAE,aAAa;oBAC3B,6BAA6B,EAAE,gCAAgC;oBAC/D,WAAW,EAAE,MAAM,yBAAyB,CAC1C;wBACE,YAAY,EAAE,UAAU,CAAC,YAAY;wBACrC,MAAM;wBACN,GAAG,CAAC,UAAU,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,UAAU,CAAC,MAAM,EAAE,CAAC;qBAC1E,EACD,MAAM,CACP;iBACF,CAAC,CAAC;YACL,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,IAAI,KAAK,YAAY,oBAAoB,EAAE,CAAC;oBAC1C,OAAO,gBAAgB,CAAC;wBACtB,YAAY,EAAE,aAAa;wBAC3B,6BAA6B,EAAE,gCAAgC;wBAC/D,OAAO,EAAE,KAAK,CAAC,OAAO,CAAC,IAAI,KAAK,qBAAqB,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,eAAe;wBACrF,OAAO,EAAE,KAAK,CAAC,OAAO;qBACvB,CAAC,CAAC;gBACL,CAAC;gBACD,OAAO,gBAAgB,CAAC;oBACtB,YAAY,EAAE,aAAa;oBAC3B,6BAA6B,EAAE,gCAAgC;oBAC/D,OAAO,EAAE,QAAQ;oBACjB,OAAO,EAAE;wBACP,IAAI,EAAE,6BAA6B;wBACnC,OAAO,EAAE,2DAA2D;wBACpE,KAAK,EAAE,+BAA+B;wBACtC,SAAS,EAAE,KAAK;qBACjB;iBACF,CAAC,CAAC;YACL,CAAC;QACH,CAAC;KACF,CAAC,CAAC;AACL,CAAC"}

package/dist/capabilities/source-dependencies/adapters/outbound/oxc/oxc-source-dependency-parser.d.ts

@@ -1,4 +1,5 @@
-import type { ParsedSourceDependencies, SourceFileSnapshot } from "../../../application/model/source-workspace.js";
+import type { SourceFileSnapshot } from "../../../../../source-inventory/application/model/source-file-snapshot.js";
+import type { ParsedSourceDependencies } from "../../../application/model/source-workspace.js";
 import type { SourceDependencyParser } from "../../../application/ports/source-dependency-parser.js";
 export declare class OxcSourceDependencyParser implements SourceDependencyParser {
     parse(file: SourceFileSnapshot): ParsedSourceDependencies;

package/dist/capabilities/source-dependencies/adapters/outbound/oxc/oxc-source-dependency-parser.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"oxc-source-dependency-parser.d.ts","sourceRoot":"","sources":["../../../../../../src/capabilities/source-dependencies/adapters/outbound/oxc/oxc-source-dependency-parser.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EACV,wBAAwB,EAGxB,kBAAkB,EAEnB,MAAM,gDAAgD,CAAC;AACxD,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,wDAAwD,CAAC;AAkBrG,qBAAa,yBAA0B,YAAW,sBAAsB;IACtE,KAAK,CAAC,IAAI,EAAE,kBAAkB,GAAG,wBAAwB,CAoGxD;CACF"}
+{"version":3,"file":"oxc-source-dependency-parser.d.ts","sourceRoot":"","sources":["../../../../../../src/capabilities/source-dependencies/adapters/outbound/oxc/oxc-source-dependency-parser.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,2EAA2E,CAAC;AACpH,OAAO,KAAK,EACV,wBAAwB,EAIzB,MAAM,gDAAgD,CAAC;AACxD,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,wDAAwD,CAAC;AAkBrG,qBAAa,yBAA0B,YAAW,sBAAsB;IACtE,KAAK,CAAC,IAAI,EAAE,kBAAkB,GAAG,wBAAwB,CAoGxD;CACF"}

package/dist/capabilities/source-dependencies/application/model/source-workspace.d.ts

@@ -1,4 +1,5 @@
 import type { WorkspacePackage } from "../../../../workspace-inventory/application/model/workspace-inventory.js";
+import type { SourceFileSnapshot } from "../../../../source-inventory/application/model/source-file-snapshot.js";
 declare const SOURCE_DEPENDENCY_KINDS: readonly ["commonjs", "dynamic", "export", "export-type", "import-equals", "import-equals-type", "static", "static-type", "type-query"];
 export type SourceDependencyKind = (typeof SOURCE_DEPENDENCY_KINDS)[number];
 export interface SourceDependencyReference {
@@ -17,10 +18,6 @@ export interface ParsedSourceDependencies {
     readonly references: readonly SourceDependencyReference[];
     readonly unresolved: readonly UnresolvedSourceDependency[];
 }
-export interface SourceFileSnapshot {
-    readonly path: string;
-    readonly source: string;
-}
 interface ParsedSourceFile extends SourceFileSnapshot {
     readonly parsed: ParsedSourceDependencies;
 }

package/dist/capabilities/source-dependencies/application/model/source-workspace.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"source-workspace.d.ts","sourceRoot":"","sources":["../../../../../src/capabilities/source-dependencies/application/model/source-workspace.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,0EAA0E,CAAC;AAEjH,QAAA,MAAM,uBAAuB,YAC3B,UAAU,EACV,SAAS,EACT,QAAQ,EACR,aAAa,EACb,eAAe,EACf,oBAAoB,EACpB,QAAQ,EACR,aAAa,EACb,YAAY,CACJ,CAAC;AAEX,MAAM,MAAM,oBAAoB,GAAG,CAAC,OAAO,uBAAuB,CAAC,CAAC,MAAM,CAAC,CAAC;AAE5E,MAAM,WAAW,yBAAyB;IACxC,QAAQ,CAAC,IAAI,EAAE,oBAAoB,CAAC;IACpC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;CACtB;AAED,MAAM,WAAW,0BAA0B;IACzC,QAAQ,CAAC,IAAI,EAAE,UAAU,GAAG,SAAS,GAAG,YAAY,CAAC;IACrD,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;CACtB;AAED,MAAM,WAAW,wBAAwB;IACvC,QAAQ,CAAC,eAAe,EAAE,MAAM,CAAC;IACjC,QAAQ,CAAC,UAAU,EAAE,SAAS,yBAAyB,EAAE,CAAC;IAC1D,QAAQ,CAAC,UAAU,EAAE,SAAS,0BAA0B,EAAE,CAAC;CAC5D;AAED,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;CACzB;AAED,UAAU,gBAAiB,SAAQ,kBAAkB;IACnD,QAAQ,CAAC,MAAM,EAAE,wBAAwB,CAAC;CAC3C;AAED,MAAM,WAAW,0BAA0B;IACzC,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,KAAK,EAAE,SAAS,MAAM,EAAE,CAAC;IAClC,QAAQ,CAAC,iBAAiB,EAAE,SAAS,MAAM,EAAE,CAAC;IAC9C,QAAQ,CAAC,eAAe,EAAE,SAAS,MAAM,EAAE,CAAC;IAC5C,QAAQ,CAAC,eAAe,EAAE,SAAS,MAAM,EAAE,CAAC;IAC5C,QAAQ,CAAC,wBAAwB,EAAE,SAAS,0BAA0B,CAAC,MAAM,CAAC,EAAE,CAAC;CAClF;AAED,MAAM,WAAW,wBAAwB;IACvC,QAAQ,CAAC,qBAAqB,EAAE,qBAAqB,CAAC;IACtD,QAAQ,CAAC,aAAa,EAAE,SAAS,MAAM,EAAE,CAAC;IAC1C,QAAQ,CAAC,UAAU,EAAE,SAAS,0BAA0B,EAAE,CAAC;CAC5D;AAED,MAAM,WAAW,oBAAqB,SAAQ,gBAAgB;IAC5D,QAAQ,CAAC,QAAQ,EAAE,0BAA0B,CAAC;IAC9C,QAAQ,CAAC,gBAAgB,EAAE,gBAAgB,CAAC;CAC7C;AAED,MAAM,MAAM,wBAAwB,GAChC;IACE,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAC;IACzB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;CAC5B,GACD;IACE,QAAQ,CAAC,IAAI,EAAE,kBAAkB,CAAC;IAClC,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,WAAW,EAAE,aAAa,GAAG,SAAS,GAAG,YAAY,CAAC;CAChE,GACD;IACE,QAAQ,CAAC,IAAI,EAAE,YAAY,CAAC;IAC5B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,gBAAgB,EAAE,gBAAgB,CAAC;CAC7C,GACD;IACE,QAAQ,CAAC,IAAI,EAAE,aAAa,CAAC;IAC7B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;CACzB,GACD;IACE,QAAQ,CAAC,IAAI,EAAE,YAAY,CAAC;IAC5B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;CACzB,GACD;IACE,QAAQ,CAAC,IAAI,EAAE,mBAAmB,CAAC;IACnC,QAAQ,CAAC,gBAAgB,EAAE,gBAAgB,CAAC;IAC5C,QAAQ,CAAC,WAAW,EAAE,aAAa,GAAG,SAAS,GAAG,YAAY,CAAC;IAC/D,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAC;IAC3B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;CAC1B,CAAC"}
+{"version":3,"file":"source-workspace.d.ts","sourceRoot":"","sources":["../../../../../src/capabilities/source-dependencies/application/model/source-workspace.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,0EAA0E,CAAC;AACjH,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,wEAAwE,CAAC;AAEjH,QAAA,MAAM,uBAAuB,YAC3B,UAAU,EACV,SAAS,EACT,QAAQ,EACR,aAAa,EACb,eAAe,EACf,oBAAoB,EACpB,QAAQ,EACR,aAAa,EACb,YAAY,CACJ,CAAC;AAEX,MAAM,MAAM,oBAAoB,GAAG,CAAC,OAAO,uBAAuB,CAAC,CAAC,MAAM,CAAC,CAAC;AAE5E,MAAM,WAAW,yBAAyB;IACxC,QAAQ,CAAC,IAAI,EAAE,oBAAoB,CAAC;IACpC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;CACtB;AAED,MAAM,WAAW,0BAA0B;IACzC,QAAQ,CAAC,IAAI,EAAE,UAAU,GAAG,SAAS,GAAG,YAAY,CAAC;IACrD,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;CACtB;AAED,MAAM,WAAW,wBAAwB;IACvC,QAAQ,CAAC,eAAe,EAAE,MAAM,CAAC;IACjC,QAAQ,CAAC,UAAU,EAAE,SAAS,yBAAyB,EAAE,CAAC;IAC1D,QAAQ,CAAC,UAAU,EAAE,SAAS,0BAA0B,EAAE,CAAC;CAC5D;AAED,UAAU,gBAAiB,SAAQ,kBAAkB;IACnD,QAAQ,CAAC,MAAM,EAAE,wBAAwB,CAAC;CAC3C;AAED,MAAM,WAAW,0BAA0B;IACzC,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,KAAK,EAAE,SAAS,MAAM,EAAE,CAAC;IAClC,QAAQ,CAAC,iBAAiB,EAAE,SAAS,MAAM,EAAE,CAAC;IAC9C,QAAQ,CAAC,eAAe,EAAE,SAAS,MAAM,EAAE,CAAC;IAC5C,QAAQ,CAAC,eAAe,EAAE,SAAS,MAAM,EAAE,CAAC;IAC5C,QAAQ,CAAC,wBAAwB,EAAE,SAAS,0BAA0B,CAAC,MAAM,CAAC,EAAE,CAAC;CAClF;AAED,MAAM,WAAW,wBAAwB;IACvC,QAAQ,CAAC,qBAAqB,EAAE,qBAAqB,CAAC;IACtD,QAAQ,CAAC,aAAa,EAAE,SAAS,MAAM,EAAE,CAAC;IAC1C,QAAQ,CAAC,UAAU,EAAE,SAAS,0BAA0B,EAAE,CAAC;CAC5D;AAED,MAAM,WAAW,oBAAqB,SAAQ,gBAAgB;IAC5D,QAAQ,CAAC,QAAQ,EAAE,0BAA0B,CAAC;IAC9C,QAAQ,CAAC,gBAAgB,EAAE,gBAAgB,CAAC;CAC7C;AAED,MAAM,MAAM,wBAAwB,GAChC;IACE,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAC;IACzB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;CAC5B,GACD;IACE,QAAQ,CAAC,IAAI,EAAE,kBAAkB,CAAC;IAClC,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,WAAW,EAAE,aAAa,GAAG,SAAS,GAAG,YAAY,CAAC;CAChE,GACD;IACE,QAAQ,CAAC,IAAI,EAAE,YAAY,CAAC;IAC5B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,gBAAgB,EAAE,gBAAgB,CAAC;CAC7C,GACD;IACE,QAAQ,CAAC,IAAI,EAAE,aAAa,CAAC;IAC7B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;CACzB,GACD;IACE,QAAQ,CAAC,IAAI,EAAE,YAAY,CAAC;IAC5B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;CACzB,GACD;IACE,QAAQ,CAAC,IAAI,EAAE,mBAAmB,CAAC;IACnC,QAAQ,CAAC,gBAAgB,EAAE,gBAAgB,CAAC;IAC5C,QAAQ,CAAC,WAAW,EAAE,aAAa,GAAG,SAAS,GAAG,YAAY,CAAC;IAC/D,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAC;IAC3B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;CAC1B,CAAC"}

package/dist/capabilities/source-dependencies/application/model/source-workspace.js.map

@@ -1 +1 @@
-{"version":3,"file":"source-workspace.js","sourceRoot":"","sources":["../../../../../src/capabilities/source-dependencies/application/model/source-workspace.ts"],"names":[],"mappings":"AAEA,MAAM,uBAAuB,GAAG;IAC9B,UAAU;IACV,SAAS;IACT,QAAQ;IACR,aAAa;IACb,eAAe;IACf,oBAAoB;IACpB,QAAQ;IACR,aAAa;IACb,YAAY;CACJ,CAAC"}
+{"version":3,"file":"source-workspace.js","sourceRoot":"","sources":["../../../../../src/capabilities/source-dependencies/application/model/source-workspace.ts"],"names":[],"mappings":"AAGA,MAAM,uBAAuB,GAAG;IAC9B,UAAU;IACV,SAAS;IACT,QAAQ;IACR,aAAa;IACb,eAAe;IACf,oBAAoB;IACpB,QAAQ;IACR,aAAa;IACb,YAAY;CACJ,CAAC"}

package/dist/capabilities/source-dependencies/application/policies/evaluate-source-dependencies.d.ts

@@ -1,6 +1,7 @@
 import type { FoundationDiagnostic } from "../../../../check-contract.js";
+import type { SourceFileSnapshot } from "../../../../source-inventory/application/model/source-file-snapshot.js";
 import type { WorkspaceInventory } from "../../../../workspace-inventory/application/model/workspace-inventory.js";
-import type { ClassifiedSourceFile, SourceArchitecturePolicy, SourceFileSnapshot } from "../model/source-workspace.js";
+import type { ClassifiedSourceFile, SourceArchitecturePolicy } from "../model/source-workspace.js";
 import type { SourceDependencyResolver } from "../ports/source-dependency-resolver.js";
 interface EvaluationInput {
     readonly policy: SourceArchitecturePolicy;

package/dist/capabilities/source-dependencies/application/policies/evaluate-source-dependencies.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"evaluate-source-dependencies.d.ts","sourceRoot":"","sources":["../../../../../src/capabilities/source-dependencies/application/policies/evaluate-source-dependencies.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAEV,oBAAoB,EACrB,MAAM,+BAA+B,CAAC;AACvC,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,0EAA0E,CAAC;AACnH,OAAO,KAAK,EAEV,oBAAoB,EAEpB,wBAAwB,EAExB,kBAAkB,EACnB,MAAM,8BAA8B,CAAC;AACtC,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,wCAAwC,CAAC;AAMvF,UAAU,eAAe;IACvB,QAAQ,CAAC,MAAM,EAAE,wBAAwB,CAAC;IAC1C,QAAQ,CAAC,SAAS,EAAE,kBAAkB,CAAC;IACvC,QAAQ,CAAC,cAAc,EAAE,SAAS,kBAAkB,EAAE,CAAC;IACvD,QAAQ,CAAC,eAAe,EAAE,SAAS,oBAAoB,EAAE,CAAC;IAC1D,QAAQ,CAAC,QAAQ,EAAE,wBAAwB,CAAC;CAC7C;AAqMD,wBAAgB,0BAA0B,CACxC,KAAK,EAAE,eAAe,GACrB,SAAS,oBAAoB,EAAE,CAiEjC"}
+{"version":3,"file":"evaluate-source-dependencies.d.ts","sourceRoot":"","sources":["../../../../../src/capabilities/source-dependencies/application/policies/evaluate-source-dependencies.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAEV,oBAAoB,EACrB,MAAM,+BAA+B,CAAC;AACvC,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,wEAAwE,CAAC;AACjH,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,0EAA0E,CAAC;AACnH,OAAO,KAAK,EAEV,oBAAoB,EAEpB,wBAAwB,EAEzB,MAAM,8BAA8B,CAAC;AACtC,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,wCAAwC,CAAC;AAMvF,UAAU,eAAe;IACvB,QAAQ,CAAC,MAAM,EAAE,wBAAwB,CAAC;IAC1C,QAAQ,CAAC,SAAS,EAAE,kBAAkB,CAAC;IACvC,QAAQ,CAAC,cAAc,EAAE,SAAS,kBAAkB,EAAE,CAAC;IACvD,QAAQ,CAAC,eAAe,EAAE,SAAS,oBAAoB,EAAE,CAAC;IAC1D,QAAQ,CAAC,QAAQ,EAAE,wBAAwB,CAAC;CAC7C;AAqMD,wBAAgB,0BAA0B,CACxC,KAAK,EAAE,eAAe,GACrB,SAAS,oBAAoB,EAAE,CAiEjC"}

package/dist/capabilities/source-dependencies/application/ports/source-dependency-parser.d.ts

@@ -1,4 +1,5 @@
-import type { ParsedSourceDependencies, SourceFileSnapshot } from "../model/source-workspace.js";
+import type { SourceFileSnapshot } from "../../../../source-inventory/application/model/source-file-snapshot.js";
+import type { ParsedSourceDependencies } from "../model/source-workspace.js";
 export interface SourceDependencyParser {
     parse(file: SourceFileSnapshot): ParsedSourceDependencies;
 }

package/dist/capabilities/source-dependencies/application/ports/source-dependency-parser.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"source-dependency-parser.d.ts","sourceRoot":"","sources":["../../../../../src/capabilities/source-dependencies/application/ports/source-dependency-parser.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,wBAAwB,EACxB,kBAAkB,EACnB,MAAM,8BAA8B,CAAC;AAEtC,MAAM,WAAW,sBAAsB;IACrC,KAAK,CAAC,IAAI,EAAE,kBAAkB,GAAG,wBAAwB,CAAC;CAC3D"}
+{"version":3,"file":"source-dependency-parser.d.ts","sourceRoot":"","sources":["../../../../../src/capabilities/source-dependencies/application/ports/source-dependency-parser.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,wEAAwE,CAAC;AACjH,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,8BAA8B,CAAC;AAE7E,MAAM,WAAW,sBAAsB;IACrC,KAAK,CAAC,IAAI,EAAE,kBAAkB,GAAG,wBAAwB,CAAC;CAC3D"}

package/dist/capabilities/source-dependencies/application/use-cases/analyze-source-dependencies.d.ts

@@ -1,9 +1,9 @@
 import type { FoundationDiagnostic } from "../../../../check-contract.js";
+import type { SourceTreeReader } from "../../../../source-inventory/application/ports/source-tree-reader.js";
 import type { WorkspaceInventoryReader } from "../../../../workspace-inventory/application/ports/workspace-inventory-reader.js";
 import type { SourceArchitecturePolicy } from "../model/source-workspace.js";
 import type { SourceDependencyParser } from "../ports/source-dependency-parser.js";
 import type { SourceDependencyResolver } from "../ports/source-dependency-resolver.js";
-import type { SourceTreeReader } from "../ports/source-tree-reader.js";
 export interface AnalyzeSourceDependenciesInput {
     readonly consumerRoot: string;
     readonly policy: SourceArchitecturePolicy;

package/dist/capabilities/source-dependencies/application/use-cases/analyze-source-dependencies.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"analyze-source-dependencies.d.ts","sourceRoot":"","sources":["../../../../../src/capabilities/source-dependencies/application/use-cases/analyze-source-dependencies.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,+BAA+B,CAAC;AAG1E,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,iFAAiF,CAAC;AAChI,OAAO,KAAK,EAGV,wBAAwB,EAEzB,MAAM,8BAA8B,CAAC;AACtC,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,sCAAsC,CAAC;AACnF,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,wCAAwC,CAAC;AACvF,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,gCAAgC,CAAC;AAGvE,MAAM,WAAW,8BAA8B;IAC7C,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,MAAM,EAAE,wBAAwB,CAAC;IAC1C,QAAQ,CAAC,MAAM,CAAC,EAAE,WAAW,CAAC;CAC/B;AAED,MAAM,WAAW,qCAAqC;IACpD,QAAQ,CAAC,eAAe,EAAE,wBAAwB,CAAC;IACnD,QAAQ,CAAC,MAAM,EAAE,sBAAsB,CAAC;IACxC,QAAQ,CAAC,QAAQ,EAAE,wBAAwB,CAAC;IAC5C,QAAQ,CAAC,YAAY,EAAE,gBAAgB,CAAC;CACzC;AA+ED,wBAAsB,yBAAyB,CAC7C,KAAK,EAAE,8BAA8B,EACrC,YAAY,EAAE,qCAAqC,GAClD,OAAO,CAAC,SAAS,oBAAoB,EAAE,CAAC,CA4B1C"}
+{"version":3,"file":"analyze-source-dependencies.d.ts","sourceRoot":"","sources":["../../../../../src/capabilities/source-dependencies/application/use-cases/analyze-source-dependencies.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,+BAA+B,CAAC;AAE1E,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,sEAAsE,CAAC;AAG7G,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,iFAAiF,CAAC;AAChI,OAAO,KAAK,EAGV,wBAAwB,EACzB,MAAM,8BAA8B,CAAC;AACtC,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,sCAAsC,CAAC;AACnF,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,wCAAwC,CAAC;AAGvF,MAAM,WAAW,8BAA8B;IAC7C,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,MAAM,EAAE,wBAAwB,CAAC;IAC1C,QAAQ,CAAC,MAAM,CAAC,EAAE,WAAW,CAAC;CAC/B;AAED,MAAM,WAAW,qCAAqC;IACpD,QAAQ,CAAC,eAAe,EAAE,wBAAwB,CAAC;IACnD,QAAQ,CAAC,MAAM,EAAE,sBAAsB,CAAC;IACxC,QAAQ,CAAC,QAAQ,EAAE,wBAAwB,CAAC;IAC5C,QAAQ,CAAC,YAAY,EAAE,gBAAgB,CAAC;CACzC;AA+ED,wBAAsB,yBAAyB,CAC7C,KAAK,EAAE,8BAA8B,EACrC,YAAY,EAAE,qCAAqC,GAClD,OAAO,CAAC,SAAS,oBAAoB,EAAE,CAAC,CA4B1C"}

package/dist/capabilities/source-dependencies/application/use-cases/analyze-source-dependencies.js.map

@@ -1 +1 @@
-{"version":3,"file":"analyze-source-dependencies.js","sourceRoot":"","sources":["../../../../../src/capabilities/source-dependencies/application/use-cases/analyze-source-dependencies.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,oBAAoB,EAAE,MAAM,mCAAmC,CAAC;AAEzE,OAAO,EAAE,kBAAkB,EAAE,MAAM,4BAA4B,CAAC;AAYhE,OAAO,EAAE,0BAA0B,EAAE,MAAM,6CAA6C,CAAC;AAezF,SAAS,UAAU,CAAC,IAAY,EAAE,IAAY;IAC5C,OAAO,IAAI,KAAK,IAAI,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,IAAI,GAAG,CAAC,CAAC;AACtD,CAAC;AAED,SAAS,eAAe,CACtB,IAAwB,EACxB,UAAiD;IAEjD,OAAO,UAAU;SACd,MAAM,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC;SAChF,QAAQ,CACP,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CACd,IAAI,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACjD,IAAI,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACpD,IAAI,CAAC,EAAE,CAAC,aAAa,CAAC,KAAK,CAAC,EAAE,CAAC,CAClC,CAAC,CAAC,CAAC,CAAC;AACT,CAAC;AAED,SAAS,iBAAiB,CACxB,IAAY,EACZ,QAAqC;IAErC,OAAO,QAAQ;SACZ,MAAM,CAAC,CAAC,gBAAgB,EAAE,EAAE,CAC3B,gBAAgB,CAAC,QAAQ,KAAK,GAAG;QAC/B,CAAC,CAAC,IAAI;QACN,CAAC,CAAC,UAAU,CAAC,IAAI,EAAE,gBAAgB,CAAC,QAAQ,CAAC,CAChD;SACA,QAAQ,CACP,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CACd,KAAK,CAAC,QAAQ,CAAC,MAAM,GAAG,IAAI,CAAC,QAAQ,CAAC,MAAM;QAC5C,IAAI,CAAC,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,IAAI,CAAC,CACtC,CAAC,CAAC,CAAC,CAAC;AACT,CAAC;AAED,SAAS,aAAa,CACpB,KAAoC,EACpC,MAAgC,EAChC,QAAqC,EACrC,MAA8B,EAC9B,MAA+B;IAE/B,MAAM,UAAU,GAA2B,EAAE,CAAC;IAC9C,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,kBAAkB,CAAC,MAAM,CAAC,CAAC;QAC3B,MAAM,QAAQ,GAAG,eAAe,CAAC,IAAI,EAAE,MAAM,CAAC,UAAU,CAAC,CAAC;QAC1D,MAAM,gBAAgB,GAAG,iBAAiB,CAAC,IAAI,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;QAChE,IAAI,QAAQ,KAAK,SAAS,IAAI,gBAAgB,KAAK,SAAS,EAAE,CAAC;YAC7D,SAAS;QACX,CAAC;QACD,UAAU,CAAC,IAAI,CAAC;YACd,GAAG,IAAI;YACP,QAAQ;YACR,gBAAgB;YAChB,MAAM,EAAE,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC;SAC3B,CAAC,CAAC;IACL,CAAC;IACD,OAAO,UAAU,CAAC;AACpB,CAAC;AAED,SAAS,qBAAqB,CAC5B,QAAqC;IAErC,MAAM,KAAK,GAAG,IAAI,GAAG,EAAU,CAAC;IAChC,KAAK,MAAM,gBAAgB,IAAI,QAAQ,EAAE,CAAC;QACxC,IAAI,gBAAgB,CAAC,IAAI,CAAC,UAAU,CAAC,WAAW,CAAC,IAAI,KAAK,CAAC,GAAG,CAAC,gBAAgB,CAAC,IAAI,CAAC,EAAE,CAAC;YACtF,MAAM,IAAI,oBAAoB,CAAC;gBAC7B,IAAI,EAAE,4BAA4B;gBAClC,OAAO,EAAE,+DAA+D;gBACxE,KAAK,EAAE,4BAA4B;gBACnC,SAAS,EAAE,KAAK;aACjB,CAAC,CAAC;QACL,CAAC;QACD,KAAK,CAAC,GAAG,CAAC,gBAAgB,CAAC,IAAI,CAAC,CAAC;IACnC,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,yBAAyB,CAC7C,KAAqC,EACrC,YAAmD;IAEnD,MAAM,CAAC,SAAS,EAAE,WAAW,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;QACjD,YAAY,CAAC,eAAe,CAAC,IAAI,CAC/B,KAAK,CAAC,YAAY,EAClB,KAAK,CAAC,MAAM,CAAC,qBAAqB,EAClC,KAAK,CAAC,MAAM,CACb;QACD,YAAY,CAAC,YAAY,CAAC,IAAI,CAC5B,KAAK,CAAC,YAAY,EAClB,KAAK,CAAC,MAAM,CAAC,aAAa,EAC1B,KAAK,CAAC,MAAM,CACb;KACF,CAAC,CAAC;IACH,qBAAqB,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC;IAC1C,MAAM,eAAe,GAAG,aAAa,CACnC,WAAW,EACX,KAAK,CAAC,MAAM,EACZ,SAAS,CAAC,QAAQ,EAClB,YAAY,CAAC,MAAM,EACnB,KAAK,CAAC,MAAM,CACb,CAAC;IACF,OAAO,0BAA0B,CAAC;QAChC,MAAM,EAAE,KAAK,CAAC,MAAM;QACpB,SAAS;QACT,cAAc,EAAE,WAAW;QAC3B,eAAe;QACf,QAAQ,EAAE,YAAY,CAAC,QAAQ;KAChC,CAAC,CAAC;AACL,CAAC"}
+{"version":3,"file":"analyze-source-dependencies.js","sourceRoot":"","sources":["../../../../../src/capabilities/source-dependencies/application/use-cases/analyze-source-dependencies.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,oBAAoB,EAAE,MAAM,mCAAmC,CAAC;AAIzE,OAAO,EAAE,kBAAkB,EAAE,MAAM,4BAA4B,CAAC;AAUhE,OAAO,EAAE,0BAA0B,EAAE,MAAM,6CAA6C,CAAC;AAezF,SAAS,UAAU,CAAC,IAAY,EAAE,IAAY;IAC5C,OAAO,IAAI,KAAK,IAAI,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,IAAI,GAAG,CAAC,CAAC;AACtD,CAAC;AAED,SAAS,eAAe,CACtB,IAAwB,EACxB,UAAiD;IAEjD,OAAO,UAAU;SACd,MAAM,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC;SAChF,QAAQ,CACP,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CACd,IAAI,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACjD,IAAI,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACpD,IAAI,CAAC,EAAE,CAAC,aAAa,CAAC,KAAK,CAAC,EAAE,CAAC,CAClC,CAAC,CAAC,CAAC,CAAC;AACT,CAAC;AAED,SAAS,iBAAiB,CACxB,IAAY,EACZ,QAAqC;IAErC,OAAO,QAAQ;SACZ,MAAM,CAAC,CAAC,gBAAgB,EAAE,EAAE,CAC3B,gBAAgB,CAAC,QAAQ,KAAK,GAAG;QAC/B,CAAC,CAAC,IAAI;QACN,CAAC,CAAC,UAAU,CAAC,IAAI,EAAE,gBAAgB,CAAC,QAAQ,CAAC,CAChD;SACA,QAAQ,CACP,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CACd,KAAK,CAAC,QAAQ,CAAC,MAAM,GAAG,IAAI,CAAC,QAAQ,CAAC,MAAM;QAC5C,IAAI,CAAC,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,IAAI,CAAC,CACtC,CAAC,CAAC,CAAC,CAAC;AACT,CAAC;AAED,SAAS,aAAa,CACpB,KAAoC,EACpC,MAAgC,EAChC,QAAqC,EACrC,MAA8B,EAC9B,MAA+B;IAE/B,MAAM,UAAU,GAA2B,EAAE,CAAC;IAC9C,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,kBAAkB,CAAC,MAAM,CAAC,CAAC;QAC3B,MAAM,QAAQ,GAAG,eAAe,CAAC,IAAI,EAAE,MAAM,CAAC,UAAU,CAAC,CAAC;QAC1D,MAAM,gBAAgB,GAAG,iBAAiB,CAAC,IAAI,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;QAChE,IAAI,QAAQ,KAAK,SAAS,IAAI,gBAAgB,KAAK,SAAS,EAAE,CAAC;YAC7D,SAAS;QACX,CAAC;QACD,UAAU,CAAC,IAAI,CAAC;YACd,GAAG,IAAI;YACP,QAAQ;YACR,gBAAgB;YAChB,MAAM,EAAE,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC;SAC3B,CAAC,CAAC;IACL,CAAC;IACD,OAAO,UAAU,CAAC;AACpB,CAAC;AAED,SAAS,qBAAqB,CAC5B,QAAqC;IAErC,MAAM,KAAK,GAAG,IAAI,GAAG,EAAU,CAAC;IAChC,KAAK,MAAM,gBAAgB,IAAI,QAAQ,EAAE,CAAC;QACxC,IAAI,gBAAgB,CAAC,IAAI,CAAC,UAAU,CAAC,WAAW,CAAC,IAAI,KAAK,CAAC,GAAG,CAAC,gBAAgB,CAAC,IAAI,CAAC,EAAE,CAAC;YACtF,MAAM,IAAI,oBAAoB,CAAC;gBAC7B,IAAI,EAAE,4BAA4B;gBAClC,OAAO,EAAE,+DAA+D;gBACxE,KAAK,EAAE,4BAA4B;gBACnC,SAAS,EAAE,KAAK;aACjB,CAAC,CAAC;QACL,CAAC;QACD,KAAK,CAAC,GAAG,CAAC,gBAAgB,CAAC,IAAI,CAAC,CAAC;IACnC,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,yBAAyB,CAC7C,KAAqC,EACrC,YAAmD;IAEnD,MAAM,CAAC,SAAS,EAAE,WAAW,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;QACjD,YAAY,CAAC,eAAe,CAAC,IAAI,CAC/B,KAAK,CAAC,YAAY,EAClB,KAAK,CAAC,MAAM,CAAC,qBAAqB,EAClC,KAAK,CAAC,MAAM,CACb;QACD,YAAY,CAAC,YAAY,CAAC,IAAI,CAC5B,KAAK,CAAC,YAAY,EAClB,KAAK,CAAC,MAAM,CAAC,aAAa,EAC1B,KAAK,CAAC,MAAM,CACb;KACF,CAAC,CAAC;IACH,qBAAqB,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC;IAC1C,MAAM,eAAe,GAAG,aAAa,CACnC,WAAW,EACX,KAAK,CAAC,MAAM,EACZ,SAAS,CAAC,QAAQ,EAClB,YAAY,CAAC,MAAM,EACnB,KAAK,CAAC,MAAM,CACb,CAAC;IACF,OAAO,0BAA0B,CAAC;QAChC,MAAM,EAAE,KAAK,CAAC,MAAM;QACpB,SAAS;QACT,cAAc,EAAE,WAAW;QAC3B,eAAe;QACf,QAAQ,EAAE,YAAY,CAAC,QAAQ;KAChC,CAAC,CAAC;AACL,CAAC"}

package/dist/capabilities/source-dependencies/module.js

@@ -1,6 +1,6 @@
 import { CapabilityInputError, capabilityReport } from "../../capability-runtime.js";
+import { FilesystemSourceTreeReader } from "../../source-inventory/adapters/outbound/filesystem/filesystem-source-tree-reader.js";
 import { PnpmWorkspaceInventoryReader } from "../../workspace-inventory/adapters/outbound/pnpm/pnpm-workspace-inventory-reader.js";
-import { FilesystemSourceTreeReader } from "./adapters/outbound/filesystem/filesystem-source-tree-reader.js";
 import { NodeSourceDependencyResolver } from "./adapters/outbound/node/node-source-dependency-resolver.js";
 import { OxcSourceDependencyParser } from "./adapters/outbound/oxc/oxc-source-dependency-parser.js";
 import { analyzeSourceDependencies } from "./application/use-cases/analyze-source-dependencies.js";

package/dist/capabilities/source-dependencies/module.js.map

@@ -1 +1 @@
-{"version":3,"file":"module.js","sourceRoot":"","sources":["../../../src/capabilities/source-dependencies/module.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,oBAAoB,EACpB,gBAAgB,EAGjB,MAAM,6BAA6B,CAAC;AACrC,OAAO,EAAE,4BAA4B,EAAE,MAAM,qFAAqF,CAAC;AACnI,OAAO,EAAE,0BAA0B,EAAE,MAAM,iEAAiE,CAAC;AAC7G,OAAO,EAAE,4BAA4B,EAAE,MAAM,6DAA6D,CAAC;AAC3G,OAAO,EAAE,yBAAyB,EAAE,MAAM,yDAAyD,CAAC;AACpG,OAAO,EAAE,yBAAyB,EAAE,MAAM,wDAAwD,CAAC;AACnG,OAAO,EAAE,6BAA6B,EAAE,MAAM,wBAAwB,CAAC;AACvE,OAAO,EACL,gCAAgC,EAChC,aAAa,EACb,oBAAoB,EACrB,MAAM,sBAAsB,CAAC;AAE9B,OAAO,EAAE,6BAA6B,EAAE,CAAC;AAEzC,MAAM,UAAU,kCAAkC;IAChD,MAAM,YAAY,GAAG,MAAM,CAAC,MAAM,CAAC;QACjC,eAAe,EAAE,IAAI,4BAA4B,EAAE;QACnD,MAAM,EAAE,IAAI,yBAAyB,EAAE;QACvC,QAAQ,EAAE,IAAI,4BAA4B,EAAE;QAC5C,YAAY,EAAE,IAAI,0BAA0B,EAAE;KAC/C,CAAC,CAAC;IACH,OAAO,MAAM,CAAC,MAAM,CAAC;QACnB,EAAE,EAAE,aAAa;QACjB,mBAAmB,EAAE,gCAAgC;QACrD,KAAK,CAAC,GAAG,CAAC,UAAgC;YACxC,IAAI,CAAC;gBACH,MAAM,MAAM,GAAG,MAAM,oBAAoB,CACvC,UAAU,CAAC,YAAY,EACvB,UAAU,CAAC,UAAU,EACrB,UAAU,CAAC,MAAM,CAClB,CAAC;gBACF,OAAO,gBAAgB,CAAC;oBACtB,YAAY,EAAE,aAAa;oBAC3B,6BAA6B,EAAE,gCAAgC;oBAC/D,WAAW,EAAE,MAAM,yBAAyB,CAC1C;wBACE,YAAY,EAAE,UAAU,CAAC,YAAY;wBACrC,MAAM;wBACN,GAAG,CAAC,UAAU,CAAC,MAAM,KAAK,SAAS;4BACjC,CAAC,CAAC,EAAE;4BACJ,CAAC,CAAC,EAAE,MAAM,EAAE,UAAU,CAAC,MAAM,EAAE,CAAC;qBACnC,EACD,YAAY,CACb;iBACF,CAAC,CAAC;YACL,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,IAAI,KAAK,YAAY,oBAAoB,EAAE,CAAC;oBAC1C,OAAO,gBAAgB,CAAC;wBACtB,YAAY,EAAE,aAAa;wBAC3B,6BAA6B,EAAE,gCAAgC;wBAC/D,OAAO,EACL,KAAK,CAAC,OAAO,CAAC,IAAI,KAAK,qBAAqB;4BAC1C,CAAC,CAAC,WAAW;4BACb,CAAC,CAAC,eAAe;wBACrB,OAAO,EAAE,KAAK,CAAC,OAAO;qBACvB,CAAC,CAAC;gBACL,CAAC;gBACD,OAAO,gBAAgB,CAAC;oBACtB,YAAY,EAAE,aAAa;oBAC3B,6BAA6B,EAAE,gCAAgC;oBAC/D,OAAO,EAAE,QAAQ;oBACjB,OAAO,EAAE;wBACP,IAAI,EAAE,6BAA6B;wBACnC,OAAO,EAAE,gDAAgD;wBACzD,KAAK,EAAE,6BAA6B;wBACpC,SAAS,EAAE,KAAK;qBACjB;iBACF,CAAC,CAAC;YACL,CAAC;QACH,CAAC;KACF,CAAC,CAAC;AACL,CAAC"}
+{"version":3,"file":"module.js","sourceRoot":"","sources":["../../../src/capabilities/source-dependencies/module.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,oBAAoB,EACpB,gBAAgB,EAGjB,MAAM,6BAA6B,CAAC;AACrC,OAAO,EAAE,0BAA0B,EAAE,MAAM,sFAAsF,CAAC;AAClI,OAAO,EAAE,4BAA4B,EAAE,MAAM,qFAAqF,CAAC;AACnI,OAAO,EAAE,4BAA4B,EAAE,MAAM,6DAA6D,CAAC;AAC3G,OAAO,EAAE,yBAAyB,EAAE,MAAM,yDAAyD,CAAC;AACpG,OAAO,EAAE,yBAAyB,EAAE,MAAM,wDAAwD,CAAC;AACnG,OAAO,EAAE,6BAA6B,EAAE,MAAM,wBAAwB,CAAC;AACvE,OAAO,EACL,gCAAgC,EAChC,aAAa,EACb,oBAAoB,EACrB,MAAM,sBAAsB,CAAC;AAE9B,OAAO,EAAE,6BAA6B,EAAE,CAAC;AAEzC,MAAM,UAAU,kCAAkC;IAChD,MAAM,YAAY,GAAG,MAAM,CAAC,MAAM,CAAC;QACjC,eAAe,EAAE,IAAI,4BAA4B,EAAE;QACnD,MAAM,EAAE,IAAI,yBAAyB,EAAE;QACvC,QAAQ,EAAE,IAAI,4BAA4B,EAAE;QAC5C,YAAY,EAAE,IAAI,0BAA0B,EAAE;KAC/C,CAAC,CAAC;IACH,OAAO,MAAM,CAAC,MAAM,CAAC;QACnB,EAAE,EAAE,aAAa;QACjB,mBAAmB,EAAE,gCAAgC;QACrD,KAAK,CAAC,GAAG,CAAC,UAAgC;YACxC,IAAI,CAAC;gBACH,MAAM,MAAM,GAAG,MAAM,oBAAoB,CACvC,UAAU,CAAC,YAAY,EACvB,UAAU,CAAC,UAAU,EACrB,UAAU,CAAC,MAAM,CAClB,CAAC;gBACF,OAAO,gBAAgB,CAAC;oBACtB,YAAY,EAAE,aAAa;oBAC3B,6BAA6B,EAAE,gCAAgC;oBAC/D,WAAW,EAAE,MAAM,yBAAyB,CAC1C;wBACE,YAAY,EAAE,UAAU,CAAC,YAAY;wBACrC,MAAM;wBACN,GAAG,CAAC,UAAU,CAAC,MAAM,KAAK,SAAS;4BACjC,CAAC,CAAC,EAAE;4BACJ,CAAC,CAAC,EAAE,MAAM,EAAE,UAAU,CAAC,MAAM,EAAE,CAAC;qBACnC,EACD,YAAY,CACb;iBACF,CAAC,CAAC;YACL,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,IAAI,KAAK,YAAY,oBAAoB,EAAE,CAAC;oBAC1C,OAAO,gBAAgB,CAAC;wBACtB,YAAY,EAAE,aAAa;wBAC3B,6BAA6B,EAAE,gCAAgC;wBAC/D,OAAO,EACL,KAAK,CAAC,OAAO,CAAC,IAAI,KAAK,qBAAqB;4BAC1C,CAAC,CAAC,WAAW;4BACb,CAAC,CAAC,eAAe;wBACrB,OAAO,EAAE,KAAK,CAAC,OAAO;qBACvB,CAAC,CAAC;gBACL,CAAC;gBACD,OAAO,gBAAgB,CAAC;oBACtB,YAAY,EAAE,aAAa;oBAC3B,6BAA6B,EAAE,gCAAgC;oBAC/D,OAAO,EAAE,QAAQ;oBACjB,OAAO,EAAE;wBACP,IAAI,EAAE,6BAA6B;wBACnC,OAAO,EAAE,gDAAgD;wBACzD,KAAK,EAAE,6BAA6B;wBACpC,SAAS,EAAE,KAAK;qBACjB;iBACF,CAAC,CAAC;YACL,CAAC;QACH,CAAC;KACF,CAAC,CAAC;AACL,CAAC"}

package/dist/capabilities/suppression-governance/adapters/outbound/oxc/oxc-suppression-scanner.d.ts

@@ -0,0 +1,7 @@
+import type { SourceFileSnapshot } from "../../../../../source-inventory/application/model/source-file-snapshot.js";
+import type { SuppressionScan } from "../../../application/model/suppression-governance.js";
+import type { SuppressionScanner } from "../../../application/ports/suppression-scanner.js";
+export declare class OxcSuppressionScanner implements SuppressionScanner {
+    scan(file: SourceFileSnapshot): SuppressionScan;
+}
+//# sourceMappingURL=oxc-suppression-scanner.d.ts.map

package/dist/capabilities/suppression-governance/adapters/outbound/oxc/oxc-suppression-scanner.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"oxc-suppression-scanner.d.ts","sourceRoot":"","sources":["../../../../../../src/capabilities/suppression-governance/adapters/outbound/oxc/oxc-suppression-scanner.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,2EAA2E,CAAC;AACpH,OAAO,KAAK,EAGV,eAAe,EAChB,MAAM,sDAAsD,CAAC;AAC9D,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,mDAAmD,CAAC;AAsH5F,qBAAa,qBAAsB,YAAW,kBAAkB;IAC9D,IAAI,CAAC,IAAI,EAAE,kBAAkB,GAAG,eAAe,CAqB9C;CACF"}

package/dist/capabilities/suppression-governance/adapters/outbound/oxc/oxc-suppression-scanner.js

@@ -0,0 +1,115 @@
+import { parseSync } from "oxc-parser";
+function lineStarts(source) {
+    const starts = [0];
+    for (let index = 0; index < source.length; index += 1) {
+        if (source.charCodeAt(index) === 10) {
+            starts.push(index + 1);
+        }
+    }
+    return starts;
+}
+function locate(comment, starts) {
+    let low = 0;
+    let high = starts.length - 1;
+    while (low <= high) {
+        const middle = Math.floor((low + high) / 2);
+        const start = starts[middle];
+        const next = starts[middle + 1] ?? Number.POSITIVE_INFINITY;
+        if (start === undefined) {
+            break;
+        }
+        if (comment.start < start) {
+            high = middle - 1;
+        }
+        else if (comment.start >= next) {
+            low = middle + 1;
+        }
+        else {
+            return { comment, line: middle + 1, column: comment.start - start + 1 };
+        }
+    }
+    return { comment, line: 1, column: 1 };
+}
+function rules(value) {
+    if (value === undefined) {
+        return [];
+    }
+    return [...new Set(value.split(/[\s,]+/u).filter((entry) => entry.length > 0))]
+        .toSorted();
+}
+function directive(input) {
+    return {
+        kind: input.kind,
+        path: input.file.path,
+        line: input.location.line,
+        column: input.location.column,
+        rules: input.rules ?? [],
+        scope: input.scope ?? "line"
+    };
+}
+function parseComment(file, location, sourceLines) {
+    const value = location.comment.value.trim();
+    const lint = /^(oxlint|eslint)-(disable-next-line|disable-line|disable)(?:\s+(.+))?$/u.exec(value);
+    if (lint !== null) {
+        const tool = lint[1];
+        const form = lint[2];
+        if (tool === undefined || form === undefined) {
+            return undefined;
+        }
+        return directive({
+            file,
+            location,
+            kind: `${tool}-${form}`,
+            rules: rules(lint[3]),
+            scope: form === "disable" ? "file" : "line"
+        });
+    }
+    const typescript = /^@ts-(expect-error|ignore|nocheck)\b(?:\s*:?.*)?$/u.exec(value);
+    if (typescript !== null) {
+        const form = typescript[1];
+        if (form === undefined) {
+            return undefined;
+        }
+        return directive({
+            file,
+            location,
+            kind: `typescript-${form}`,
+            rules: form === "expect-error" ? ["typescript/type-error"] : [],
+            scope: form === "nocheck" ? "file" : "line"
+        });
+    }
+    const astGrep = /^ast-grep-ignore(?:\s*:\s*(.*))?$/u.exec(value);
+    if (astGrep === null) {
+        return undefined;
+    }
+    const fileLevel = location.line === 1 && (sourceLines[1]?.trim().length ?? 0) === 0;
+    return directive({
+        file,
+        location,
+        kind: "ast-grep-ignore",
+        rules: rules(astGrep[1]),
+        scope: fileLevel ? "file" : "line"
+    });
+}
+export class OxcSuppressionScanner {
+    scan(file) {
+        const parsed = parseSync(file.path, file.source, { astType: "ts" });
+        if (parsed.errors.length > 0) {
+            return { path: file.path, parseErrorCount: parsed.errors.length, directives: [] };
+        }
+        const starts = lineStarts(file.source);
+        const sourceLines = file.source.split(/\r?\n/u);
+        const directives = parsed.comments
+            .map((comment) => parseComment(file, locate(comment, starts), sourceLines))
+            .filter((candidate) => candidate !== undefined)
+            .toSorted((left, right) => left.line - right.line ||
+            left.column - right.column ||
+            left.kind.localeCompare(right.kind));
+        return {
+            path: file.path,
+            parseErrorCount: 0,
+            directives
+        };
+    }
+}
+//# sourceMappingURL=oxc-suppression-scanner.js.map

package/dist/capabilities/suppression-governance/adapters/outbound/oxc/oxc-suppression-scanner.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"oxc-suppression-scanner.js","sourceRoot":"","sources":["../../../../../../src/capabilities/suppression-governance/adapters/outbound/oxc/oxc-suppression-scanner.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAgB,MAAM,YAAY,CAAC;AAgBrD,SAAS,UAAU,CAAC,MAAc;IAChC,MAAM,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC;IACnB,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,MAAM,CAAC,MAAM,EAAE,KAAK,IAAI,CAAC,EAAE,CAAC;QACtD,IAAI,MAAM,CAAC,UAAU,CAAC,KAAK,CAAC,KAAK,EAAE,EAAE,CAAC;YACpC,MAAM,CAAC,IAAI,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC;QACzB,CAAC;IACH,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAS,MAAM,CAAC,OAAgB,EAAE,MAAyB;IACzD,IAAI,GAAG,GAAG,CAAC,CAAC;IACZ,IAAI,IAAI,GAAG,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC;IAC7B,OAAO,GAAG,IAAI,IAAI,EAAE,CAAC;QACnB,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;QAC5C,MAAM,KAAK,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC;QAC7B,MAAM,IAAI,GAAG,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,IAAI,MAAM,CAAC,iBAAiB,CAAC;QAC5D,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;YACxB,MAAM;QACR,CAAC;QACD,IAAI,OAAO,CAAC,KAAK,GAAG,KAAK,EAAE,CAAC;YAC1B,IAAI,GAAG,MAAM,GAAG,CAAC,CAAC;QACpB,CAAC;aAAM,IAAI,OAAO,CAAC,KAAK,IAAI,IAAI,EAAE,CAAC;YACjC,GAAG,GAAG,MAAM,GAAG,CAAC,CAAC;QACnB,CAAC;aAAM,CAAC;YACN,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,GAAG,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,KAAK,GAAG,KAAK,GAAG,CAAC,EAAE,CAAC;QAC1E,CAAC;IACH,CAAC;IACD,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,CAAC;AACzC,CAAC;AAED,SAAS,KAAK,CAAC,KAAyB;IACtC,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;QACxB,OAAO,EAAE,CAAC;IACZ,CAAC;IACD,OAAO,CAAC,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC;SAC5E,QAAQ,EAAE,CAAC;AAChB,CAAC;AAED,SAAS,SAAS,CAAC,KAMlB;IACC,OAAO;QACL,IAAI,EAAE,KAAK,CAAC,IAAI;QAChB,IAAI,EAAE,KAAK,CAAC,IAAI,CAAC,IAAI;QACrB,IAAI,EAAE,KAAK,CAAC,QAAQ,CAAC,IAAI;QACzB,MAAM,EAAE,KAAK,CAAC,QAAQ,CAAC,MAAM;QAC7B,KAAK,EAAE,KAAK,CAAC,KAAK,IAAI,EAAE;QACxB,KAAK,EAAE,KAAK,CAAC,KAAK,IAAI,MAAM;KAC7B,CAAC;AACJ,CAAC;AAED,SAAS,YAAY,CACnB,IAAwB,EACxB,QAAwB,EACxB,WAA8B;IAE9B,MAAM,KAAK,GAAG,QAAQ,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;IAC5C,MAAM,IAAI,GAAG,yEAAyE,CAAC,IAAI,CACzF,KAAK,CACN,CAAC;IACF,IAAI,IAAI,KAAK,IAAI,EAAE,CAAC;QAClB,MAAM,IAAI,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;QACrB,MAAM,IAAI,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;QACrB,IAAI,IAAI,KAAK,SAAS,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;YAC7C,OAAO,SAAS,CAAC;QACnB,CAAC;QACD,OAAO,SAAS,CAAC;YACf,IAAI;YACJ,QAAQ;YACR,IAAI,EAAE,GAAG,IAAI,IAAI,IAAI,EAA8B;YACnD,KAAK,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YACrB,KAAK,EAAE,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM;SAC5C,CAAC,CAAC;IACL,CAAC;IAED,MAAM,UAAU,GAAG,oDAAoD,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACpF,IAAI,UAAU,KAAK,IAAI,EAAE,CAAC;QACxB,MAAM,IAAI,GAAG,UAAU,CAAC,CAAC,CAAC,CAAC;QAC3B,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;YACvB,OAAO,SAAS,CAAC;QACnB,CAAC;QACD,OAAO,SAAS,CAAC;YACf,IAAI;YACJ,QAAQ;YACR,IAAI,EAAE,cAAc,IAAI,EAA8B;YACtD,KAAK,EAAE,IAAI,KAAK,cAAc,CAAC,CAAC,CAAC,CAAC,uBAAuB,CAAC,CAAC,CAAC,CAAC,EAAE;YAC/D,KAAK,EAAE,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM;SAC5C,CAAC,CAAC;IACL,CAAC;IAED,MAAM,OAAO,GAAG,oCAAoC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACjE,IAAI,OAAO,KAAK,IAAI,EAAE,CAAC;QACrB,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,MAAM,SAAS,GACb,QAAQ,CAAC,IAAI,KAAK,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,MAAM,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC;IACpE,OAAO,SAAS,CAAC;QACf,IAAI;QACJ,QAAQ;QACR,IAAI,EAAE,iBAAiB;QACvB,KAAK,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;QACxB,KAAK,EAAE,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM;KACnC,CAAC,CAAC;AACL,CAAC;AAED,MAAM,OAAO,qBAAqB;IAChC,IAAI,CAAC,IAAwB;QAC3B,MAAM,MAAM,GAAG,SAAS,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,MAAM,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;QACpE,IAAI,MAAM,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC7B,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,eAAe,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,UAAU,EAAE,EAAE,EAAE,CAAC;QACpF,CAAC;QACD,MAAM,MAAM,GAAG,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACvC,MAAM,WAAW,GAAG,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;QAChD,MAAM,UAAU,GAAG,MAAM,CAAC,QAAQ;aAC/B,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,OAAO,EAAE,MAAM,CAAC,EAAE,WAAW,CAAC,CAAC;aAC1E,MAAM,CAAC,CAAC,SAAS,EAAqC,EAAE,CAAC,SAAS,KAAK,SAAS,CAAC;aACjF,QAAQ,CACP,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CACd,IAAI,CAAC,IAAI,GAAG,KAAK,CAAC,IAAI;YACtB,IAAI,CAAC,MAAM,GAAG,KAAK,CAAC,MAAM;YAC1B,IAAI,CAAC,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,IAAI,CAAC,CACtC,CAAC;QACJ,OAAO;YACL,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,eAAe,EAAE,CAAC;YAClB,UAAU;SACX,CAAC;IACJ,CAAC;CACF"}

package/dist/capabilities/suppression-governance/adapters/outbound/time/system-clock.d.ts

@@ -0,0 +1,5 @@
+import type { CalendarClock } from "../../../application/ports/calendar-clock.js";
+export declare class SystemCalendarClock implements CalendarClock {
+    today(): string;
+}
+//# sourceMappingURL=system-clock.d.ts.map

package/dist/capabilities/suppression-governance/adapters/outbound/time/system-clock.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"system-clock.d.ts","sourceRoot":"","sources":["../../../../../../src/capabilities/suppression-governance/adapters/outbound/time/system-clock.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,8CAA8C,CAAC;AAElF,qBAAa,mBAAoB,YAAW,aAAa;IACvD,KAAK,IAAI,MAAM,CAEd;CACF"}

package/dist/capabilities/suppression-governance/adapters/outbound/time/system-clock.js

@@ -0,0 +1,6 @@
+export class SystemCalendarClock {
+    today() {
+        return new Date().toISOString().slice(0, 10);
+    }
+}
+//# sourceMappingURL=system-clock.js.map

package/dist/capabilities/suppression-governance/adapters/outbound/time/system-clock.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"system-clock.js","sourceRoot":"","sources":["../../../../../../src/capabilities/suppression-governance/adapters/outbound/time/system-clock.ts"],"names":[],"mappings":"AAEA,MAAM,OAAO,mBAAmB;IAC9B,KAAK;QACH,OAAO,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IAC/C,CAAC;CACF"}

package/dist/capabilities/suppression-governance/application/model/iso-date.d.ts

@@ -0,0 +1,2 @@
+export declare function isoDateToEpochDay(value: string): number | undefined;
+//# sourceMappingURL=iso-date.d.ts.map

package/dist/capabilities/suppression-governance/application/model/iso-date.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"iso-date.d.ts","sourceRoot":"","sources":["../../../../../src/capabilities/suppression-governance/application/model/iso-date.ts"],"names":[],"mappings":"AAAA,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAyBnE"}