@agentvibes/guardrails 0.1.0 → 0.2.0

package/dist/twinCoverageTest.js

@@ -0,0 +1,262 @@
+import { readdirSync, readFileSync } from "node:fs";
+import { join } from "node:path";
+import { match } from "ts-pattern";
+import { rulesDir } from "./packagePaths.js";
+const EXCEPTIONS = {
+    // ── JSX-node rules: the pattern cannot be spelled in a .ts grammar ──────
+    "classname-not-composed": {
+        only: "tsx",
+        kind: "impossible",
+        why: "matches a `jsx_attribute`; there are none in .ts",
+    },
+    "classname-visual-identity": {
+        only: "tsx",
+        kind: "impossible",
+        why: "matches a `jsx_attribute`; there are none in .ts",
+    },
+    "inline-map-row": {
+        only: "tsx",
+        kind: "impossible",
+        why: "matches `jsx_element` / `jsx_expression` inside a `.map()`; there are none in .ts",
+    },
+    "jsx-cond-and": {
+        only: "tsx",
+        kind: "impossible",
+        why: "the whole rule is `$COND && <JSX/>` patterns",
+    },
+    "jsx-ternary": {
+        only: "tsx",
+        kind: "impossible",
+        why: "requires a JSX consequence or alternative, by its `is-jsx` util",
+    },
+    // ── `files:`-scoped rules: the missing arm would have no file to read ───
+    "direct-store-import": {
+        only: "tsx",
+        kind: "impossible",
+        why: "`files:` is `**/*.tsx` only",
+    },
+    "screen-file-styling": {
+        only: "tsx",
+        kind: "impossible",
+        why: "`files:` is `**/*.screen.tsx` only (and it matches a `jsx_attribute`)",
+    },
+    "view-file-logic": {
+        only: "tsx",
+        kind: "impossible",
+        why: "`files:` is `**/*.view.tsx` only",
+    },
+    "view-imports-store": {
+        only: "tsx",
+        kind: "impossible",
+        why: "`files:` is `**/*.view.tsx` only",
+    },
+    // ── React-runtime rules: the construct only exists in a component ───────
+    "missing-observer": {
+        only: "tsx",
+        kind: "impossible",
+        why: "asks whether a COMPONENT reading a store is wrapped in `observer()`; a .ts module is not a component",
+    },
+    "mobx-effect-observable-dep": {
+        only: "tsx",
+        kind: "impossible",
+        why: "matches `useEffect(cb, [deps])` in a component; a .ts custom hook has no store to depend on in this shape",
+    },
+    "mobx-effect-store-write": {
+        only: "tsx",
+        kind: "impossible",
+        why: "matches a store write inside a component's `useEffect`",
+    },
+    "mobx-usestate-from-store": {
+        only: "tsx",
+        kind: "impossible",
+        why: "matches `useState(store.field)` — seeding component state from a store",
+    },
+    // ── Real gaps. Measured, tracked, not silently green. ───────────────────
+    "discriminator-ternary": {
+        only: "tsx",
+        kind: "gap",
+        why: "stands down when a branch is JSX, so what it matches is a plain ternary that .ts can hold too; measured 0 in .ts across the five consumer repos 2026-09-06 (is-760b0b4b)",
+    },
+    "match-bool-to-null": {
+        only: "tsx",
+        kind: "gap",
+        why: "the `match(cond).with(true, …).with(false, () => null)` pattern does not require JSX; measured 0 in .ts across the five consumer repos 2026-09-06 (is-760b0b4b)",
+    },
+    "hardcoded-url-in-component": {
+        only: "tsx",
+        kind: "gap",
+        why: "its `files:` globs already name `**/components/**/*.ts` and `**/screens/**/*.ts`, which `language: tsx` makes dead lines; measured 0 in .ts across the five consumer repos 2026-09-06 (is-760b0b4b)",
+    },
+    "ui-imports-app-store": {
+        only: "tsx",
+        kind: "gap",
+        why: "`files:` names whole directories, so the .ts files in them are unscanned; measured 0 in .ts across the five consumer repos 2026-09-06, but this rule is error-tier and its .ts arm can turn a consumer's CI red — that is a decision, not a chore (is-760b0b4b)",
+    },
+};
+/**
+ * Keys compared between the two arms of a family.
+ *
+ * `severity` is the one that must be byte-identical: the same code reported as
+ * a warning in `.ts` and an error in `.tsx` is a gate that depends on a file
+ * extension, and nothing else in this package works that way.
+ *
+ * `files` and `ignores` are compared with `.tsx` folded to `.ts`, because they
+ * SHOULD differ — the `.ts` arm ignores `**\/*.test.ts` and the tsx arm
+ * `**\/*.test.tsx`, naming the same intent. Folded, a real divergence (one arm
+ * scoped to a directory the other is not) still shows.
+ *
+ * `rule` and `utils` are deliberately NOT compared. The twin comments say "keep
+ * the rule block IDENTICAL" and that is the right default, but it is a rule of
+ * thumb rather than an invariant: `store-context-provider-tsx` carries an extra
+ * `jsx_opening_element` arm for `<XxxStoreContext.Provider>`, which cannot be
+ * spelled in the `.ts` grammar at all. Asserting identity here would force that
+ * correct rule to be wrong.
+ */
+const MUST_MATCH = ["severity"];
+const MUST_MATCH_FOLDED = ["files", "ignores"];
+/** Erase the one difference two arms are SUPPOSED to have: the extension. */
+function foldExtensions(block) {
+    return block.replace(/\.tsx\b/g, ".ts");
+}
+/** Split a rule file into its column-0 `key:` blocks, dropping column-0 comments. */
+function topLevelBlocks(text) {
+    const blocks = new Map();
+    let key;
+    let buf = [];
+    const flush = () => {
+        if (key !== undefined)
+            blocks.set(key, buf.join("\n").trimEnd());
+        key = undefined;
+        buf = [];
+    };
+    for (const line of text.split("\n")) {
+        const head = /^([A-Za-z_][A-Za-z0-9_-]*):(.*)$/.exec(line);
+        if (head?.[1] !== undefined) {
+            flush();
+            key = head[1];
+            buf = [head[2] ?? ""];
+        }
+        else if (line.startsWith("#")) {
+            // A column-0 comment is provenance prose. It ENDS the block above it —
+            // without this, the header comments between `id:` and `language:` were
+            // swallowed into the id and every family name came out as an essay.
+            flush();
+        }
+        else if (key !== undefined) {
+            buf.push(line);
+        }
+    }
+    flush();
+    return blocks;
+}
+function loadRules() {
+    const errors = [];
+    const rules = [];
+    for (const file of readdirSync(rulesDir)
+        .filter((f) => f.endsWith(".yml"))
+        .sort()) {
+        const blocks = topLevelBlocks(readFileSync(join(rulesDir, file), "utf8"));
+        const id = blocks.get("id")?.trim();
+        const language = blocks.get("language")?.trim();
+        if (id === undefined || id === "") {
+            errors.push(`${file}: no top-level \`id:\``);
+            continue;
+        }
+        if (language !== "typescript" && language !== "tsx") {
+            errors.push(`${file}: \`language:\` is ${language ?? "(absent)"}, expected typescript or tsx`);
+            continue;
+        }
+        if (id !== file.replace(/\.yml$/, "")) {
+            errors.push(`${file}: id \`${id}\` does not match the filename — ast-grep reports the id, so the two must agree`);
+        }
+        rules.push({ file, id, language, blocks });
+    }
+    return { rules, errors };
+}
+/** The id with a trailing `-ts` / `-tsx` stripped. */
+function familyOf(id) {
+    return id.replace(/-tsx$/, "").replace(/-ts$/, "");
+}
+function main() {
+    console.log("== rule twin coverage ==");
+    const { rules, errors } = loadRules();
+    let fail = errors.length > 0;
+    for (const e of errors)
+        console.log(`FAIL ${e}`);
+    const families = new Map();
+    for (const r of rules) {
+        const fam = families.get(familyOf(r.id)) ?? {};
+        const seen = fam[r.language];
+        if (seen !== undefined) {
+            console.log(`FAIL ${familyOf(r.id)}: two \`language: ${r.language}\` arms — ${seen.file} and ${r.file}`);
+            fail = true;
+        }
+        fam[r.language] = r;
+        families.set(familyOf(r.id), fam);
+    }
+    const gaps = [];
+    for (const [name, arms] of [...families].sort()) {
+        const exception = EXCEPTIONS[name];
+        const missing = arms.typescript === undefined ? "typescript" : arms.tsx === undefined ? "tsx" : undefined;
+        if (missing === undefined) {
+            if (exception !== undefined) {
+                console.log(`FAIL ${name}: both arms exist, but EXCEPTIONS still lists it as ${exception.only}-only — delete the stale entry`);
+                fail = true;
+            }
+            // Both arms present: they must agree on what they report.
+            const a = arms.typescript;
+            const b = arms.tsx;
+            if (a !== undefined && b !== undefined) {
+                const drifted = [
+                    ...MUST_MATCH.filter((k) => (a.blocks.get(k) ?? "") !== (b.blocks.get(k) ?? "")),
+                    ...MUST_MATCH_FOLDED.filter((k) => foldExtensions(a.blocks.get(k) ?? "") !== foldExtensions(b.blocks.get(k) ?? "")),
+                ];
+                if (drifted.length > 0) {
+                    console.log(`FAIL ${name}: ${a.file} and ${b.file} disagree on ${drifted.join(", ")} — twins are one rule wearing two ids`);
+                    fail = true;
+                }
+                else {
+                    console.log(`  ok  ${name}: ${a.id} + ${b.id}, same severity and same scope`);
+                }
+            }
+            continue;
+        }
+        const covered = missing === "tsx" ? "typescript" : "tsx";
+        if (exception === undefined) {
+            console.log(`FAIL ${name}: \`language: ${covered}\` only — no ${missing} arm and no EXCEPTIONS entry. ` +
+                `ast-grep's languages are disjoint, so this rule is blind to every .${missing === "tsx" ? "tsx" : "ts"} file. ` +
+                `Write ${name}${missing === "tsx" ? "-tsx" : "-ts"}.yml, or add an entry saying why it cannot fire there.`);
+            fail = true;
+            continue;
+        }
+        if (exception.only !== covered) {
+            console.log(`FAIL ${name}: EXCEPTIONS says ${exception.only}-only but the rule on disk is ${covered}-only`);
+            fail = true;
+            continue;
+        }
+        match(exception.kind)
+            .with("gap", () => {
+            gaps.push(`${name} (no .${missing === "tsx" ? "tsx" : "ts"} arm): ${exception.why}`);
+            console.log(`  ok  ${name}: ${covered}-only, KNOWN GAP — ${exception.why}`);
+        })
+            .with("impossible", () => {
+            console.log(`  ok  ${name}: ${covered}-only — ${exception.why}`);
+        })
+            .exhaustive();
+    }
+    if (gaps.length > 0) {
+        console.log("");
+        console.log(`known language gaps (${gaps.length}) — tracked, not fixed:`);
+        for (const g of gaps)
+            console.log(`  · ${g}`);
+    }
+    console.log("");
+    if (fail) {
+        console.error("twin coverage assertions FAILED");
+        return 1;
+    }
+    console.log(`all ${families.size} rule families accounted for`);
+    return 0;
+}
+process.exit(main());
+//# sourceMappingURL=twinCoverageTest.js.map

package/dist/twinCoverageTest.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"twinCoverageTest.js","sourceRoot":"","sources":["../src/twinCoverageTest.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACpD,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,KAAK,EAAE,MAAM,YAAY,CAAC;AACnC,OAAO,EAAE,QAAQ,EAAE,MAAM,mBAAmB,CAAC;AAgD7C,MAAM,UAAU,GAA8B;IAC5C,2EAA2E;IAC3E,wBAAwB,EAAE;QACxB,IAAI,EAAE,KAAK;QACX,IAAI,EAAE,YAAY;QAClB,GAAG,EAAE,kDAAkD;KACxD;IACD,2BAA2B,EAAE;QAC3B,IAAI,EAAE,KAAK;QACX,IAAI,EAAE,YAAY;QAClB,GAAG,EAAE,kDAAkD;KACxD;IACD,gBAAgB,EAAE;QAChB,IAAI,EAAE,KAAK;QACX,IAAI,EAAE,YAAY;QAClB,GAAG,EAAE,mFAAmF;KACzF;IACD,cAAc,EAAE;QACd,IAAI,EAAE,KAAK;QACX,IAAI,EAAE,YAAY;QAClB,GAAG,EAAE,8CAA8C;KACpD;IACD,aAAa,EAAE;QACb,IAAI,EAAE,KAAK;QACX,IAAI,EAAE,YAAY;QAClB,GAAG,EAAE,iEAAiE;KACvE;IAED,2EAA2E;IAC3E,qBAAqB,EAAE;QACrB,IAAI,EAAE,KAAK;QACX,IAAI,EAAE,YAAY;QAClB,GAAG,EAAE,6BAA6B;KACnC;IACD,qBAAqB,EAAE;QACrB,IAAI,EAAE,KAAK;QACX,IAAI,EAAE,YAAY;QAClB,GAAG,EAAE,uEAAuE;KAC7E;IACD,iBAAiB,EAAE;QACjB,IAAI,EAAE,KAAK;QACX,IAAI,EAAE,YAAY;QAClB,GAAG,EAAE,kCAAkC;KACxC;IACD,oBAAoB,EAAE;QACpB,IAAI,EAAE,KAAK;QACX,IAAI,EAAE,YAAY;QAClB,GAAG,EAAE,kCAAkC;KACxC;IAED,2EAA2E;IAC3E,kBAAkB,EAAE;QAClB,IAAI,EAAE,KAAK;QACX,IAAI,EAAE,YAAY;QAClB,GAAG,EAAE,sGAAsG;KAC5G;IACD,4BAA4B,EAAE;QAC5B,IAAI,EAAE,KAAK;QACX,IAAI,EAAE,YAAY;QAClB,GAAG,EAAE,2GAA2G;KACjH;IACD,yBAAyB,EAAE;QACzB,IAAI,EAAE,KAAK;QACX,IAAI,EAAE,YAAY;QAClB,GAAG,EAAE,wDAAwD;KAC9D;IACD,0BAA0B,EAAE;QAC1B,IAAI,EAAE,KAAK;QACX,IAAI,EAAE,YAAY;QAClB,GAAG,EAAE,wEAAwE;KAC9E;IAED,2EAA2E;IAC3E,uBAAuB,EAAE;QACvB,IAAI,EAAE,KAAK;QACX,IAAI,EAAE,KAAK;QACX,GAAG,EAAE,0KAA0K;KAChL;IACD,oBAAoB,EAAE;QACpB,IAAI,EAAE,KAAK;QACX,IAAI,EAAE,KAAK;QACX,GAAG,EAAE,iKAAiK;KACvK;IACD,4BAA4B,EAAE;QAC5B,IAAI,EAAE,KAAK;QACX,IAAI,EAAE,KAAK;QACX,GAAG,EAAE,qMAAqM;KAC3M;IACD,sBAAsB,EAAE;QACtB,IAAI,EAAE,KAAK;QACX,IAAI,EAAE,KAAK;QACX,GAAG,EAAE,iQAAiQ;KACvQ;CACF,CAAC;AAEF;;;;;;;;;;;;;;;;;;GAkBG;AACH,MAAM,UAAU,GAAG,CAAC,UAAU,CAAU,CAAC;AACzC,MAAM,iBAAiB,GAAG,CAAC,OAAO,EAAE,SAAS,CAAU,CAAC;AAExD,6EAA6E;AAC7E,SAAS,cAAc,CAAC,KAAa;IACnC,OAAO,KAAK,CAAC,OAAO,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC;AAC1C,CAAC;AAED,qFAAqF;AACrF,SAAS,cAAc,CAAC,IAAY;IAClC,MAAM,MAAM,GAAG,IAAI,GAAG,EAAkB,CAAC;IACzC,IAAI,GAAuB,CAAC;IAC5B,IAAI,GAAG,GAAa,EAAE,CAAC;IACvB,MAAM,KAAK,GAAG,GAAS,EAAE;QACvB,IAAI,GAAG,KAAK,SAAS;YAAE,MAAM,CAAC,GAAG,CAAC,GAAG,EAAE,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC;QACjE,GAAG,GAAG,SAAS,CAAC;QAChB,GAAG,GAAG,EAAE,CAAC;IACX,CAAC,CAAC;IACF,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;QACpC,MAAM,IAAI,GAAG,kCAAkC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC3D,IAAI,IAAI,EAAE,CAAC,CAAC,CAAC,KAAK,SAAS,EAAE,CAAC;YAC5B,KAAK,EAAE,CAAC;YACR,GAAG,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;YACd,GAAG,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;QACxB,CAAC;aAAM,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;YAChC,uEAAuE;YACvE,uEAAuE;YACvE,oEAAoE;YACpE,KAAK,EAAE,CAAC;QACV,CAAC;aAAM,IAAI,GAAG,KAAK,SAAS,EAAE,CAAC;YAC7B,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACjB,CAAC;IACH,CAAC;IACD,KAAK,EAAE,CAAC;IACR,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAS,SAAS;IAChB,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,MAAM,KAAK,GAAW,EAAE,CAAC;IACzB,KAAK,MAAM,IAAI,IAAI,WAAW,CAAC,QAAQ,CAAC;SACrC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;SACjC,IAAI,EAAE,EAAE,CAAC;QACV,MAAM,MAAM,GAAG,cAAc,CAAC,YAAY,CAAC,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC;QAC1E,MAAM,EAAE,GAAG,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,CAAC;QACpC,MAAM,QAAQ,GAAG,MAAM,CAAC,GAAG,CAAC,UAAU,CAAC,EAAE,IAAI,EAAE,CAAC;QAChD,IAAI,EAAE,KAAK,SAAS,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC;YAClC,MAAM,CAAC,IAAI,CAAC,GAAG,IAAI,wBAAwB,CAAC,CAAC;YAC7C,SAAS;QACX,CAAC;QACD,IAAI,QAAQ,KAAK,YAAY,IAAI,QAAQ,KAAK,KAAK,EAAE,CAAC;YACpD,MAAM,CAAC,IAAI,CACT,GAAG,IAAI,sBAAsB,QAAQ,IAAI,UAAU,8BAA8B,CAClF,CAAC;YACF,SAAS;QACX,CAAC;QACD,IAAI,EAAE,KAAK,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,EAAE,CAAC,EAAE,CAAC;YACtC,MAAM,CAAC,IAAI,CACT,GAAG,IAAI,UAAU,EAAE,iFAAiF,CACrG,CAAC;QACJ,CAAC;QACD,KAAK,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC,CAAC;IAC7C,CAAC;IACD,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC;AAC3B,CAAC;AAED,sDAAsD;AACtD,SAAS,QAAQ,CAAC,EAAU;IAC1B,OAAO,EAAE,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;AACrD,CAAC;AAED,SAAS,IAAI;IACX,OAAO,CAAC,GAAG,CAAC,0BAA0B,CAAC,CAAC;IACxC,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,SAAS,EAAE,CAAC;IACtC,IAAI,IAAI,GAAG,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC;IAC7B,KAAK,MAAM,CAAC,IAAI,MAAM;QAAE,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;IAEjD,MAAM,QAAQ,GAAG,IAAI,GAAG,EAA6C,CAAC;IACtE,KAAK,MAAM,CAAC,IAAI,KAAK,EAAE,CAAC;QACtB,MAAM,GAAG,GAAG,QAAQ,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;QAC/C,MAAM,IAAI,GAAG,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC;QAC7B,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;YACvB,OAAO,CAAC,GAAG,CACT,QAAQ,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC,qBAAqB,CAAC,CAAC,QAAQ,aAAa,IAAI,CAAC,IAAI,QAAQ,CAAC,CAAC,IAAI,EAAE,CAC5F,CAAC;YACF,IAAI,GAAG,IAAI,CAAC;QACd,CAAC;QACD,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;QACpB,QAAQ,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,GAAG,CAAC,CAAC;IACpC,CAAC;IAED,MAAM,IAAI,GAAa,EAAE,CAAC;IAC1B,KAAK,MAAM,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC,GAAG,QAAQ,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC;QAChD,MAAM,SAAS,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC;QACnC,MAAM,OAAO,GACX,IAAI,CAAC,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;QAE5F,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;YAC1B,IAAI,SAAS,KAAK,SAAS,EAAE,CAAC;gBAC5B,OAAO,CAAC,GAAG,CACT,QAAQ,IAAI,uDAAuD,SAAS,CAAC,IAAI,gCAAgC,CAClH,CAAC;gBACF,IAAI,GAAG,IAAI,CAAC;YACd,CAAC;YACD,0DAA0D;YAC1D,MAAM,CAAC,GAAG,IAAI,CAAC,UAAU,CAAC;YAC1B,MAAM,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC;YACnB,IAAI,CAAC,KAAK,SAAS,IAAI,CAAC,KAAK,SAAS,EAAE,CAAC;gBACvC,MAAM,OAAO,GAAG;oBACd,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;oBAChF,GAAG,iBAAiB,CAAC,MAAM,CACzB,CAAC,CAAC,EAAE,EAAE,CAAC,cAAc,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,KAAK,cAAc,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CACvF;iBACF,CAAC;gBACF,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;oBACvB,OAAO,CAAC,GAAG,CACT,QAAQ,IAAI,KAAK,CAAC,CAAC,IAAI,QAAQ,CAAC,CAAC,IAAI,gBAAgB,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,uCAAuC,CAC/G,CAAC;oBACF,IAAI,GAAG,IAAI,CAAC;gBACd,CAAC;qBAAM,CAAC;oBACN,OAAO,CAAC,GAAG,CAAC,SAAS,IAAI,KAAK,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,EAAE,gCAAgC,CAAC,CAAC;gBAChF,CAAC;YACH,CAAC;YACD,SAAS;QACX,CAAC;QAED,MAAM,OAAO,GAAG,OAAO,KAAK,KAAK,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,KAAK,CAAC;QACzD,IAAI,SAAS,KAAK,SAAS,EAAE,CAAC;YAC5B,OAAO,CAAC,GAAG,CACT,QAAQ,IAAI,iBAAiB,OAAO,gBAAgB,OAAO,gCAAgC;gBACzF,sEAAsE,OAAO,KAAK,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,SAAS;gBAC/G,SAAS,IAAI,GAAG,OAAO,KAAK,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,wDAAwD,CAC7G,CAAC;YACF,IAAI,GAAG,IAAI,CAAC;YACZ,SAAS;QACX,CAAC;QACD,IAAI,SAAS,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;YAC/B,OAAO,CAAC,GAAG,CACT,QAAQ,IAAI,qBAAqB,SAAS,CAAC,IAAI,iCAAiC,OAAO,OAAO,CAC/F,CAAC;YACF,IAAI,GAAG,IAAI,CAAC;YACZ,SAAS;QACX,CAAC;QACD,KAAK,CAAC,SAAS,CAAC,IAAI,CAAC;aAClB,IAAI,CAAC,KAAK,EAAE,GAAG,EAAE;YAChB,IAAI,CAAC,IAAI,CAAC,GAAG,IAAI,SAAS,OAAO,KAAK,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,UAAU,SAAS,CAAC,GAAG,EAAE,CAAC,CAAC;YACrF,OAAO,CAAC,GAAG,CAAC,SAAS,IAAI,KAAK,OAAO,sBAAsB,SAAS,CAAC,GAAG,EAAE,CAAC,CAAC;QAC9E,CAAC,CAAC;aACD,IAAI,CAAC,YAAY,EAAE,GAAG,EAAE;YACvB,OAAO,CAAC,GAAG,CAAC,SAAS,IAAI,KAAK,OAAO,WAAW,SAAS,CAAC,GAAG,EAAE,CAAC,CAAC;QACnE,CAAC,CAAC;aACD,UAAU,EAAE,CAAC;IAClB,CAAC;IAED,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACpB,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAChB,OAAO,CAAC,GAAG,CAAC,wBAAwB,IAAI,CAAC,MAAM,yBAAyB,CAAC,CAAC;QAC1E,KAAK,MAAM,CAAC,IAAI,IAAI;YAAE,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;IAChD,CAAC;IAED,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAChB,IAAI,IAAI,EAAE,CAAC;QACT,OAAO,CAAC,KAAK,CAAC,iCAAiC,CAAC,CAAC;QACjD,OAAO,CAAC,CAAC;IACX,CAAC;IACD,OAAO,CAAC,GAAG,CAAC,OAAO,QAAQ,CAAC,IAAI,8BAA8B,CAAC,CAAC;IAChE,OAAO,CAAC,CAAC;AACX,CAAC;AAED,OAAO,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC"}

package/dist/verify.d.ts

@@ -1,3 +1,3 @@
 import { type Finding } from "./findings.js";
-export declare function collectVerifyFindings(targets: string[], severityArgs?: string[]): Finding[];
+export declare function collectVerifyFindings(targets: string[], severityArgs?: string[], cwd?: string): Finding[];
 export declare function runVerify(targets: string[], json: boolean): number;

package/dist/verify.js

@@ -1,23 +1,46 @@
-import { scanFindings } from "./astGrep.js";
+import { AstGrepConfigError, scanFindings } from "./astGrep.js";
 import { formatFinding, hasErrors } from "./findings.js";
 import { rulesConfig } from "./packagePaths.js";
-import { dropScreenExempt, ScreenScopeError, screenExemptRuleIds, screensPattern, } from "./screenScope.js";
+import { driftMessage, presetDrift, presetEnforced } from "./presetDrift.js";
+import { dedupeFindings, ruleConfigs } from "./repoRules.js";
+import { dropScopeExempt, ScreenScopeError, scopeExemptRuleIds, scopePatterns, } from "./screenScope.js";
 import { SeverityConfigError, severityRaiseArgs } from "./severity.js";
 import { structureFindings } from "./structure.js";
 import { textGrepFindings } from "./textGrep.js";
-export function collectVerifyFindings(targets, severityArgs = []) {
-    const findings = [
-        ...scanFindings(rulesConfig, targets, severityArgs),
+export function collectVerifyFindings(targets, severityArgs = [], cwd = process.cwd()) {
+    // Canon first, then the repo's own sgconfig.yml when it has one — see
+    // repoRules.ts for why both and not either alone. The repo config normally
+    // lists the canon ruleDir too, so the overlap is deduped rather than
+    // reported twice.
+    const findings = dedupeFindings([
+        ...ruleConfigs(cwd, rulesConfig).flatMap((c) => scanFindings(c, targets, severityArgs)),
         ...textGrepFindings(targets),
         ...structureFindings(targets),
-    ];
+    ]);
     // Applied HERE rather than in `runVerify`, so verify-diff and the hooks get
     // the same scoping: a screen that is legal under `verify` must not be gated
     // by `verify-diff` on the same line.
-    return dropScreenExempt(findings, screensPattern(process.cwd()), screenExemptRuleIds());
+    return dropScopeExempt(findings, scopePatterns(cwd), scopeExemptRuleIds());
 }
 export function runVerify(targets, json) {
     const paths = targets.length > 0 ? targets : ["."];
+    // Preset drift is checked FIRST (is-9c7a78d7): a repo running its own biome
+    // config is not being linted by the thing this gate reports on, so a finding
+    // count from it means less than it looks. Enforcement is opt-in per repo
+    // (`[biome] preset = "enforced"`) while epic is-a70a5963 migrates the 37
+    // configs; unenforced, the drift is still SAID — silence is what let 37
+    // configs exist.
+    const drift = presetDrift(process.cwd());
+    if (drift.length > 0) {
+        const message = driftMessage(drift);
+        if (presetEnforced(process.cwd())) {
+            console.error(`guardrails verify: ${message}`);
+            return 2;
+        }
+        if (!json) {
+            console.log(`note: ${message}\n  Not gated here yet — add [biome] preset = "enforced" to .agentvibes/project.toml once this repo is migrated.`);
+        }
+    }
     // Both manifest sections are resolved here so a config the gate cannot honour
     // exits 2 with the reason — never a stack trace, and never silently dropped.
     let findings;
@@ -25,7 +48,9 @@ export function runVerify(targets, json) {
         findings = collectVerifyFindings(paths, severityRaiseArgs(process.cwd()));
     }
     catch (err) {
-        if (err instanceof SeverityConfigError || err instanceof ScreenScopeError) {
+        if (err instanceof SeverityConfigError ||
+            err instanceof ScreenScopeError ||
+            err instanceof AstGrepConfigError) {
             console.error(`guardrails verify: ${err.message}`);
             return 2;
         }

package/dist/verify.js.map

@@ -1 +1 @@
-{"version":3,"file":"verify.js","sourceRoot":"","sources":["../src/verify.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AAC5C,OAAO,EAAgB,aAAa,EAAE,SAAS,EAAE,MAAM,eAAe,CAAC;AACvE,OAAO,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAChD,OAAO,EACL,gBAAgB,EAChB,gBAAgB,EAChB,mBAAmB,EACnB,cAAc,GACf,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EAAE,mBAAmB,EAAE,iBAAiB,EAAE,MAAM,eAAe,CAAC;AACvE,OAAO,EAAE,iBAAiB,EAAE,MAAM,gBAAgB,CAAC;AACnD,OAAO,EAAE,gBAAgB,EAAE,MAAM,eAAe,CAAC;AAEjD,MAAM,UAAU,qBAAqB,CAAC,OAAiB,EAAE,eAAyB,EAAE;IAClF,MAAM,QAAQ,GAAG;QACf,GAAG,YAAY,CAAC,WAAW,EAAE,OAAO,EAAE,YAAY,CAAC;QACnD,GAAG,gBAAgB,CAAC,OAAO,CAAC;QAC5B,GAAG,iBAAiB,CAAC,OAAO,CAAC;KAC9B,CAAC;IACF,4EAA4E;IAC5E,4EAA4E;IAC5E,qCAAqC;IACrC,OAAO,gBAAgB,CAAC,QAAQ,EAAE,cAAc,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,EAAE,mBAAmB,EAAE,CAAC,CAAC;AAC1F,CAAC;AAED,MAAM,UAAU,SAAS,CAAC,OAAiB,EAAE,IAAa;IACxD,MAAM,KAAK,GAAG,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;IACnD,8EAA8E;IAC9E,6EAA6E;IAC7E,IAAI,QAAmB,CAAC;IACxB,IAAI,CAAC;QACH,QAAQ,GAAG,qBAAqB,CAAC,KAAK,EAAE,iBAAiB,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;IAC5E,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAI,GAAG,YAAY,mBAAmB,IAAI,GAAG,YAAY,gBAAgB,EAAE,CAAC;YAC1E,OAAO,CAAC,KAAK,CAAC,sBAAsB,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC;YACnD,OAAO,CAAC,CAAC;QACX,CAAC;QACD,MAAM,GAAG,CAAC;IACZ,CAAC;IACD,MAAM,MAAM,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC,MAAM,CAAC;IACrE,MAAM,QAAQ,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,MAAM,CAAC;IAEzE,IAAI,IAAI,EAAE,CAAC;QACT,OAAO,CAAC,GAAG,CACT,IAAI,CAAC,SAAS,CAAC,EAAE,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,QAAQ,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,CAC3F,CAAC;IACJ,CAAC;SAAM,CAAC;QACN,KAAK,MAAM,CAAC,IAAI,QAAQ;YAAE,OAAO,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,CAAC;QACxD,OAAO,CAAC,GAAG,CACT,sBAAsB,MAAM,cAAc,QAAQ,kBAAkB,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CACtF,CAAC;QACF,IAAI,MAAM,GAAG,CAAC,EAAE,CAAC;YACf,OAAO,CAAC,GAAG,CACT,0JAA0J,CAC3J,CAAC;QACJ,CAAC;IACH,CAAC;IACD,OAAO,SAAS,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AACrC,CAAC"}
+{"version":3,"file":"verify.js","sourceRoot":"","sources":["../src/verify.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,kBAAkB,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AAChE,OAAO,EAAgB,aAAa,EAAE,SAAS,EAAE,MAAM,eAAe,CAAC;AACvE,OAAO,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAChD,OAAO,EAAE,YAAY,EAAE,WAAW,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAC;AAC7E,OAAO,EAAE,cAAc,EAAE,WAAW,EAAE,MAAM,gBAAgB,CAAC;AAC7D,OAAO,EACL,eAAe,EACf,gBAAgB,EAChB,kBAAkB,EAClB,aAAa,GACd,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EAAE,mBAAmB,EAAE,iBAAiB,EAAE,MAAM,eAAe,CAAC;AACvE,OAAO,EAAE,iBAAiB,EAAE,MAAM,gBAAgB,CAAC;AACnD,OAAO,EAAE,gBAAgB,EAAE,MAAM,eAAe,CAAC;AAEjD,MAAM,UAAU,qBAAqB,CACnC,OAAiB,EACjB,eAAyB,EAAE,EAC3B,MAAc,OAAO,CAAC,GAAG,EAAE;IAE3B,sEAAsE;IACtE,2EAA2E;IAC3E,qEAAqE;IACrE,kBAAkB;IAClB,MAAM,QAAQ,GAAG,cAAc,CAAC;QAC9B,GAAG,WAAW,CAAC,GAAG,EAAE,WAAW,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,YAAY,CAAC,CAAC,EAAE,OAAO,EAAE,YAAY,CAAC,CAAC;QACvF,GAAG,gBAAgB,CAAC,OAAO,CAAC;QAC5B,GAAG,iBAAiB,CAAC,OAAO,CAAC;KAC9B,CAAC,CAAC;IACH,4EAA4E;IAC5E,4EAA4E;IAC5E,qCAAqC;IACrC,OAAO,eAAe,CAAC,QAAQ,EAAE,aAAa,CAAC,GAAG,CAAC,EAAE,kBAAkB,EAAE,CAAC,CAAC;AAC7E,CAAC;AAED,MAAM,UAAU,SAAS,CAAC,OAAiB,EAAE,IAAa;IACxD,MAAM,KAAK,GAAG,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;IAEnD,4EAA4E;IAC5E,6EAA6E;IAC7E,yEAAyE;IACzE,yEAAyE;IACzE,wEAAwE;IACxE,iBAAiB;IACjB,MAAM,KAAK,GAAG,WAAW,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC;IACzC,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACrB,MAAM,OAAO,GAAG,YAAY,CAAC,KAAK,CAAC,CAAC;QACpC,IAAI,cAAc,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC;YAClC,OAAO,CAAC,KAAK,CAAC,sBAAsB,OAAO,EAAE,CAAC,CAAC;YAC/C,OAAO,CAAC,CAAC;QACX,CAAC;QACD,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,OAAO,CAAC,GAAG,CACT,SAAS,OAAO,kHAAkH,CACnI,CAAC;QACJ,CAAC;IACH,CAAC;IAED,8EAA8E;IAC9E,6EAA6E;IAC7E,IAAI,QAAmB,CAAC;IACxB,IAAI,CAAC;QACH,QAAQ,GAAG,qBAAqB,CAAC,KAAK,EAAE,iBAAiB,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;IAC5E,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IACE,GAAG,YAAY,mBAAmB;YAClC,GAAG,YAAY,gBAAgB;YAC/B,GAAG,YAAY,kBAAkB,EACjC,CAAC;YACD,OAAO,CAAC,KAAK,CAAC,sBAAsB,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC;YACnD,OAAO,CAAC,CAAC;QACX,CAAC;QACD,MAAM,GAAG,CAAC;IACZ,CAAC;IACD,MAAM,MAAM,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC,MAAM,CAAC;IACrE,MAAM,QAAQ,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,MAAM,CAAC;IAEzE,IAAI,IAAI,EAAE,CAAC;QACT,OAAO,CAAC,GAAG,CACT,IAAI,CAAC,SAAS,CAAC,EAAE,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,QAAQ,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,CAC3F,CAAC;IACJ,CAAC;SAAM,CAAC;QACN,KAAK,MAAM,CAAC,IAAI,QAAQ;YAAE,OAAO,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,CAAC;QACxD,OAAO,CAAC,GAAG,CACT,sBAAsB,MAAM,cAAc,QAAQ,kBAAkB,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CACtF,CAAC;QACF,IAAI,MAAM,GAAG,CAAC,EAAE,CAAC;YACf,OAAO,CAAC,GAAG,CACT,0JAA0J,CAC3J,CAAC;QACJ,CAAC;IACH,CAAC;IACD,OAAO,SAAS,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AACrC,CAAC"}

package/dist/verifyDiff.js

@@ -1,9 +1,10 @@
 import { join, relative } from "node:path";
 import { match } from "ts-pattern";
-import { scanFindings } from "./astGrep.js";
+import { AstGrepConfigError, scanFindings } from "./astGrep.js";
 import { formatFinding } from "./findings.js";
 import { addedLines, changedFiles, gitRoot, resolveMergeBase } from "./gitDiff.js";
 import { rulesConfig } from "./packagePaths.js";
+import { dedupeFindings, ruleConfigs } from "./repoRules.js";
 import { SeverityConfigError, severityRaiseArgs } from "./severity.js";
 import { structureFindings } from "./structure.js";
 import { readTomlTable } from "./tomlTable.js";
@@ -80,10 +81,10 @@ export function runVerifyDiffCollect(cwd, base) {
         return { rungLabel: plan.rungLabel, filesScanned: 0, violations: [] };
     }
     const targets = plan.files ?? ["."];
-    const violations = [
-        ...scanFindings(rulesConfig, targets, severityArgs),
+    const violations = dedupeFindings([
+        ...ruleConfigs(cwd, rulesConfig).flatMap((c) => scanFindings(c, targets, severityArgs)),
         ...structureFindings(targets),
-    ]
+    ])
         .filter((f) => f.severity === "error")
         .filter(plan.keep);
     return { rungLabel: plan.rungLabel, filesScanned: plan.files?.length ?? -1, violations };
@@ -94,7 +95,7 @@ export function runVerifyDiff(base, json) {
         result = runVerifyDiffCollect(process.cwd(), base);
     }
     catch (err) {
-        if (err instanceof SeverityConfigError) {
+        if (err instanceof SeverityConfigError || err instanceof AstGrepConfigError) {
             console.error(`guardrails verify-diff: ${err.message}`);
             return 2;
         }

package/dist/verifyDiff.js.map

@@ -1 +1 @@
-{"version":3,"file":"verifyDiff.js","sourceRoot":"","sources":["../src/verifyDiff.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,WAAW,CAAC;AAC3C,OAAO,EAAE,KAAK,EAAE,MAAM,YAAY,CAAC;AACnC,OAAO,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AAC5C,OAAO,EAAgB,aAAa,EAAE,MAAM,eAAe,CAAC;AAC5D,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,OAAO,EAAE,gBAAgB,EAAE,MAAM,cAAc,CAAC;AACnF,OAAO,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAChD,OAAO,EAAE,mBAAmB,EAAE,iBAAiB,EAAE,MAAM,eAAe,CAAC;AACvE,OAAO,EAAE,iBAAiB,EAAE,MAAM,gBAAgB,CAAC;AACnD,OAAO,EAAE,aAAa,EAAE,MAAM,gBAAgB,CAAC;AA6B/C;;;;;;;GAOG;AACH,MAAM,UAAU,eAAe,CAAC,GAAW;IACzC,MAAM,GAAG,GAAG,aAAa,CAAC,IAAI,CAAC,GAAG,EAAE,aAAa,EAAE,cAAc,CAAC,EAAE,QAAQ,CAAC,CAAC,OAAO,CAAC;IACtF,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,KAAK,EAAE;QAAE,OAAO,SAAS,CAAC;IACtD,OAAO,IAAI,MAAM,CAAC,GAAG,CAAC,CAAC;AACzB,CAAC;AAED,SAAS,WAAW,CAAC,GAAW,EAAE,IAAwB;IACxD,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC;IAC1B,IAAI,IAAI,KAAK,SAAS;QAAE,OAAO,EAAE,IAAI,EAAE,YAAY,EAAE,CAAC;IACtD,MAAM,EAAE,GAAG,gBAAgB,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IACxC,IAAI,EAAE,KAAK,SAAS;QAAE,OAAO,EAAE,IAAI,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC;IAC1D,OAAO,EAAE,IAAI,EAAE,aAAa,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,EAAE,CAAC;AACtD,CAAC;AAED,SAAS,OAAO,CAAC,IAAU;IACzB,OAAO,KAAK,CAAC,IAAI,CAAC;SACf,IAAI,CAAC,EAAE,IAAI,EAAE,YAAY,EAAE,EAAE,GAAG,EAAE,CAAC,CAAC;QACnC,SAAS,EAAE,gFAAgF;QAC3F,KAAK,EAAE,SAAS;QAChB,IAAI,EAAE,GAAG,EAAE,CAAC,IAAI;KACjB,CAAC,CAAC;SACF,IAAI,CAAC,EAAE,IAAI,EAAE,YAAY,EAAE,EAAE,CAAC,EAAE,IAAI,EAAE,EAAE,EAAE;QACzC,MAAM,EAAE,OAAO,EAAE,SAAS,EAAE,GAAG,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QAC1D,OAAO;YACL,SAAS,EACP,oFAAoF;YACtF,KAAK,EAAE,CAAC,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,OAAO,EAAE,GAAG,SAAS,CAAC,CAAC,CAAC;YAC/C,IAAI,EAAE,GAAG,EAAE,CAAC,IAAI;SACjB,CAAC;IACJ,CAAC,CAAC;SACD,IAAI,CAAC,EAAE,IAAI,EAAE,aAAa,EAAE,EAAE,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,EAAE;QACrD,MAAM,EAAE,OAAO,EAAE,SAAS,EAAE,GAAG,YAAY,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;QAC7D,MAAM,YAAY,GAAG,IAAI,GAAG,CAAC,SAAS,CAAC,CAAC;QACxC,MAAM,WAAW,GAAG,IAAI,GAAG,EAAuB,CAAC;QACnD,OAAO;YACL,SAAS,EAAE,6BAA6B,SAAS,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE;YAChE,KAAK,EAAE,CAAC,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,OAAO,EAAE,GAAG,SAAS,CAAC,CAAC,CAAC;YAC/C,IAAI,EAAE,CAAC,CAAU,EAAE,EAAE;gBACnB,IAAI,YAAY,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC;oBAAE,OAAO,IAAI,CAAC;gBAC1C,IAAI,KAAK,GAAG,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;gBACpC,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;oBACxB,KAAK,GAAG,UAAU,CAAC,IAAI,EAAE,SAAS,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC;oBAC5C,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;gBACjC,CAAC;gBACD,OAAO,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;YAC3B,CAAC;SACF,CAAC;IACJ,CAAC,CAAC;SACD,UAAU,EAAE,CAAC;AAClB,CAAC;AAQD,+FAA+F;AAC/F,MAAM,UAAU,oBAAoB,CAAC,GAAW,EAAE,IAAwB;IACxE,MAAM,YAAY,GAAG,iBAAiB,CAAC,GAAG,CAAC,CAAC;IAC5C,MAAM,IAAI,GAAG,OAAO,CAAC,WAAW,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC,CAAC;IAC7C,MAAM,OAAO,GAAG,eAAe,CAAC,GAAG,CAAC,CAAC;IACrC,IAAI,OAAO,KAAK,SAAS,IAAI,IAAI,CAAC,KAAK,KAAK,SAAS,EAAE,CAAC;QACtD,0EAA0E;QAC1E,wEAAwE;QACxE,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;IACzE,CAAC;IACD,IAAI,IAAI,CAAC,KAAK,KAAK,SAAS,IAAI,IAAI,CAAC,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACxD,OAAO,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,YAAY,EAAE,CAAC,EAAE,UAAU,EAAE,EAAE,EAAE,CAAC;IACxE,CAAC;IACD,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,IAAI,CAAC,GAAG,CAAC,CAAC;IACpC,MAAM,UAAU,GAAG;QACjB,GAAG,YAAY,CAAC,WAAW,EAAE,OAAO,EAAE,YAAY,CAAC;QACnD,GAAG,iBAAiB,CAAC,OAAO,CAAC;KAC9B;SACE,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,OAAO,CAAC;SACrC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACrB,OAAO,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,YAAY,EAAE,IAAI,CAAC,KAAK,EAAE,MAAM,IAAI,CAAC,CAAC,EAAE,UAAU,EAAE,CAAC;AAC3F,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,IAAwB,EAAE,IAAa;IACnE,IAAI,MAAwB,CAAC;IAC7B,IAAI,CAAC;QACH,MAAM,GAAG,oBAAoB,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,IAAI,CAAC,CAAC;IACrD,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAI,GAAG,YAAY,mBAAmB,EAAE,CAAC;YACvC,OAAO,CAAC,KAAK,CAAC,2BAA2B,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC;YACxD,OAAO,CAAC,CAAC;QACX,CAAC;QACD,MAAM,GAAG,CAAC;IACZ,CAAC;IACD,MAAM,EAAE,SAAS,EAAE,YAAY,EAAE,UAAU,EAAE,KAAK,EAAE,GAAG,MAAM,CAAC;IAC9D,IAAI,YAAY,KAAK,CAAC,EAAE,CAAC;QACvB,MAAM,CAAC,IAAI,EAAE,SAAS,EAAE,CAAC,EAAE,EAAE,EAAE,6CAA6C,CAAC,CAAC;QAC9E,OAAO,CAAC,CAAC;IACX,CAAC;IACD,MAAM,CACJ,IAAI,EACJ,SAAS,EACT,YAAY,EACZ,KAAK,EACL,KAAK,CAAC,MAAM,KAAK,CAAC;QAChB,CAAC,CAAC,iCAAiC;QACnC,CAAC,CAAC,GAAG,KAAK,CAAC,MAAM,4BAA4B,CAChD,CAAC;IACF,OAAO,KAAK,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AACpC,CAAC;AAED,SAAS,MAAM,CACb,IAAa,EACb,IAAY,EACZ,KAAa,EACb,KAAgB,EAChB,OAAe;IAEf,IAAI,IAAI,EAAE,CAAC;QACT,OAAO,CAAC,GAAG,CACT,IAAI,CAAC,SAAS,CACZ,EAAE,OAAO,EAAE,aAAa,EAAE,IAAI,EAAE,YAAY,EAAE,KAAK,EAAE,UAAU,EAAE,KAAK,EAAE,OAAO,EAAE,EACjF,IAAI,EACJ,CAAC,CACF,CACF,CAAC;QACF,OAAO;IACT,CAAC;IACD,OAAO,CAAC,GAAG,CAAC,4BAA4B,IAAI,EAAE,CAAC,CAAC;IAChD,KAAK,MAAM,CAAC,IAAI,KAAK;QAAE,OAAO,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,CAAC;IACrD,OAAO,CAAC,GAAG,CAAC,2BAA2B,OAAO,EAAE,CAAC,CAAC;IAClD,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACrB,OAAO,CAAC,GAAG,CACT,0JAA0J,CAC3J,CAAC;IACJ,CAAC;AACH,CAAC"}
+{"version":3,"file":"verifyDiff.js","sourceRoot":"","sources":["../src/verifyDiff.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,WAAW,CAAC;AAC3C,OAAO,EAAE,KAAK,EAAE,MAAM,YAAY,CAAC;AACnC,OAAO,EAAE,kBAAkB,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AAChE,OAAO,EAAgB,aAAa,EAAE,MAAM,eAAe,CAAC;AAC5D,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,OAAO,EAAE,gBAAgB,EAAE,MAAM,cAAc,CAAC;AACnF,OAAO,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAChD,OAAO,EAAE,cAAc,EAAE,WAAW,EAAE,MAAM,gBAAgB,CAAC;AAC7D,OAAO,EAAE,mBAAmB,EAAE,iBAAiB,EAAE,MAAM,eAAe,CAAC;AACvE,OAAO,EAAE,iBAAiB,EAAE,MAAM,gBAAgB,CAAC;AACnD,OAAO,EAAE,aAAa,EAAE,MAAM,gBAAgB,CAAC;AA6B/C;;;;;;;GAOG;AACH,MAAM,UAAU,eAAe,CAAC,GAAW;IACzC,MAAM,GAAG,GAAG,aAAa,CAAC,IAAI,CAAC,GAAG,EAAE,aAAa,EAAE,cAAc,CAAC,EAAE,QAAQ,CAAC,CAAC,OAAO,CAAC;IACtF,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,KAAK,EAAE;QAAE,OAAO,SAAS,CAAC;IACtD,OAAO,IAAI,MAAM,CAAC,GAAG,CAAC,CAAC;AACzB,CAAC;AAED,SAAS,WAAW,CAAC,GAAW,EAAE,IAAwB;IACxD,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC;IAC1B,IAAI,IAAI,KAAK,SAAS;QAAE,OAAO,EAAE,IAAI,EAAE,YAAY,EAAE,CAAC;IACtD,MAAM,EAAE,GAAG,gBAAgB,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IACxC,IAAI,EAAE,KAAK,SAAS;QAAE,OAAO,EAAE,IAAI,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC;IAC1D,OAAO,EAAE,IAAI,EAAE,aAAa,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,EAAE,CAAC;AACtD,CAAC;AAED,SAAS,OAAO,CAAC,IAAU;IACzB,OAAO,KAAK,CAAC,IAAI,CAAC;SACf,IAAI,CAAC,EAAE,IAAI,EAAE,YAAY,EAAE,EAAE,GAAG,EAAE,CAAC,CAAC;QACnC,SAAS,EAAE,gFAAgF;QAC3F,KAAK,EAAE,SAAS;QAChB,IAAI,EAAE,GAAG,EAAE,CAAC,IAAI;KACjB,CAAC,CAAC;SACF,IAAI,CAAC,EAAE,IAAI,EAAE,YAAY,EAAE,EAAE,CAAC,EAAE,IAAI,EAAE,EAAE,EAAE;QACzC,MAAM,EAAE,OAAO,EAAE,SAAS,EAAE,GAAG,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QAC1D,OAAO;YACL,SAAS,EACP,oFAAoF;YACtF,KAAK,EAAE,CAAC,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,OAAO,EAAE,GAAG,SAAS,CAAC,CAAC,CAAC;YAC/C,IAAI,EAAE,GAAG,EAAE,CAAC,IAAI;SACjB,CAAC;IACJ,CAAC,CAAC;SACD,IAAI,CAAC,EAAE,IAAI,EAAE,aAAa,EAAE,EAAE,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,EAAE;QACrD,MAAM,EAAE,OAAO,EAAE,SAAS,EAAE,GAAG,YAAY,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;QAC7D,MAAM,YAAY,GAAG,IAAI,GAAG,CAAC,SAAS,CAAC,CAAC;QACxC,MAAM,WAAW,GAAG,IAAI,GAAG,EAAuB,CAAC;QACnD,OAAO;YACL,SAAS,EAAE,6BAA6B,SAAS,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE;YAChE,KAAK,EAAE,CAAC,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,OAAO,EAAE,GAAG,SAAS,CAAC,CAAC,CAAC;YAC/C,IAAI,EAAE,CAAC,CAAU,EAAE,EAAE;gBACnB,IAAI,YAAY,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC;oBAAE,OAAO,IAAI,CAAC;gBAC1C,IAAI,KAAK,GAAG,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;gBACpC,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;oBACxB,KAAK,GAAG,UAAU,CAAC,IAAI,EAAE,SAAS,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC;oBAC5C,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;gBACjC,CAAC;gBACD,OAAO,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;YAC3B,CAAC;SACF,CAAC;IACJ,CAAC,CAAC;SACD,UAAU,EAAE,CAAC;AAClB,CAAC;AAQD,+FAA+F;AAC/F,MAAM,UAAU,oBAAoB,CAAC,GAAW,EAAE,IAAwB;IACxE,MAAM,YAAY,GAAG,iBAAiB,CAAC,GAAG,CAAC,CAAC;IAC5C,MAAM,IAAI,GAAG,OAAO,CAAC,WAAW,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC,CAAC;IAC7C,MAAM,OAAO,GAAG,eAAe,CAAC,GAAG,CAAC,CAAC;IACrC,IAAI,OAAO,KAAK,SAAS,IAAI,IAAI,CAAC,KAAK,KAAK,SAAS,EAAE,CAAC;QACtD,0EAA0E;QAC1E,wEAAwE;QACxE,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;IACzE,CAAC;IACD,IAAI,IAAI,CAAC,KAAK,KAAK,SAAS,IAAI,IAAI,CAAC,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACxD,OAAO,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,YAAY,EAAE,CAAC,EAAE,UAAU,EAAE,EAAE,EAAE,CAAC;IACxE,CAAC;IACD,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,IAAI,CAAC,GAAG,CAAC,CAAC;IACpC,MAAM,UAAU,GAAG,cAAc,CAAC;QAChC,GAAG,WAAW,CAAC,GAAG,EAAE,WAAW,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,YAAY,CAAC,CAAC,EAAE,OAAO,EAAE,YAAY,CAAC,CAAC;QACvF,GAAG,iBAAiB,CAAC,OAAO,CAAC;KAC9B,CAAC;SACC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,OAAO,CAAC;SACrC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACrB,OAAO,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,YAAY,EAAE,IAAI,CAAC,KAAK,EAAE,MAAM,IAAI,CAAC,CAAC,EAAE,UAAU,EAAE,CAAC;AAC3F,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,IAAwB,EAAE,IAAa;IACnE,IAAI,MAAwB,CAAC;IAC7B,IAAI,CAAC;QACH,MAAM,GAAG,oBAAoB,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,IAAI,CAAC,CAAC;IACrD,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAI,GAAG,YAAY,mBAAmB,IAAI,GAAG,YAAY,kBAAkB,EAAE,CAAC;YAC5E,OAAO,CAAC,KAAK,CAAC,2BAA2B,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC;YACxD,OAAO,CAAC,CAAC;QACX,CAAC;QACD,MAAM,GAAG,CAAC;IACZ,CAAC;IACD,MAAM,EAAE,SAAS,EAAE,YAAY,EAAE,UAAU,EAAE,KAAK,EAAE,GAAG,MAAM,CAAC;IAC9D,IAAI,YAAY,KAAK,CAAC,EAAE,CAAC;QACvB,MAAM,CAAC,IAAI,EAAE,SAAS,EAAE,CAAC,EAAE,EAAE,EAAE,6CAA6C,CAAC,CAAC;QAC9E,OAAO,CAAC,CAAC;IACX,CAAC;IACD,MAAM,CACJ,IAAI,EACJ,SAAS,EACT,YAAY,EACZ,KAAK,EACL,KAAK,CAAC,MAAM,KAAK,CAAC;QAChB,CAAC,CAAC,iCAAiC;QACnC,CAAC,CAAC,GAAG,KAAK,CAAC,MAAM,4BAA4B,CAChD,CAAC;IACF,OAAO,KAAK,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AACpC,CAAC;AAED,SAAS,MAAM,CACb,IAAa,EACb,IAAY,EACZ,KAAa,EACb,KAAgB,EAChB,OAAe;IAEf,IAAI,IAAI,EAAE,CAAC;QACT,OAAO,CAAC,GAAG,CACT,IAAI,CAAC,SAAS,CACZ,EAAE,OAAO,EAAE,aAAa,EAAE,IAAI,EAAE,YAAY,EAAE,KAAK,EAAE,UAAU,EAAE,KAAK,EAAE,OAAO,EAAE,EACjF,IAAI,EACJ,CAAC,CACF,CACF,CAAC;QACF,OAAO;IACT,CAAC;IACD,OAAO,CAAC,GAAG,CAAC,4BAA4B,IAAI,EAAE,CAAC,CAAC;IAChD,KAAK,MAAM,CAAC,IAAI,KAAK;QAAE,OAAO,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,CAAC;IACrD,OAAO,CAAC,GAAG,CAAC,2BAA2B,OAAO,EAAE,CAAC,CAAC;IAClD,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACrB,OAAO,CAAC,GAAG,CACT,0JAA0J,CAC3J,CAAC;IACJ,CAAC;AACH,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@agentvibes/guardrails",
-  "version": "0.1.0",
+  "version": "0.2.0",
   "description": "Verification toolkit that makes agents write simple code: ast-grep rule canon, diff ratchet, biome/tsconfig presets, one CLI.",
   "license": "MIT",
   "repository": {
@@ -35,7 +35,7 @@
     "format": "biome check --write .",
     "test:rules": "node dist/testRules.js",
     "test:gate": "node dist/gateRed.js",
-    "check": "pnpm build && pnpm lint && pnpm test:rules && pnpm test:gate && pnpm test:metrics && pnpm test:init && pnpm test:severity && pnpm test:screens && pnpm test:hooks && pnpm test:iterate && pnpm test:leaks && pnpm leaks",
+    "check": "pnpm build && pnpm lint && pnpm test:rules && pnpm test:twins && pnpm test:repo-rules && pnpm test:preset && pnpm test:gate && pnpm test:sibling-clone && pnpm test:metrics && pnpm test:init && pnpm test:severity && pnpm test:screens && pnpm test:hooks && pnpm test:iterate && pnpm test:leaks && pnpm leaks",
     "test:metrics": "node dist/metricsCycle.js",
     "leaks": "node dist/cli.js leaks .",
     "test:leaks": "node dist/leaksRed.js",
@@ -43,7 +43,11 @@
     "test:severity": "node dist/severityTest.js",
     "test:hooks": "node dist/hookStopTest.js",
     "test:iterate": "node dist/iterateTest.js",
-    "test:screens": "node dist/screenScopeTest.js"
+    "test:screens": "node dist/screenScopeTest.js",
+    "test:twins": "node dist/twinCoverageTest.js",
+    "test:repo-rules": "node dist/repoRulesTest.js",
+    "test:preset": "node dist/presetDriftTest.js",
+    "test:sibling-clone": "node dist/siblingCloneTest.js"
   },
   "dependencies": {
     "ts-pattern": "^5.6.2",

package/rules/__fixtures__/demo-mode-by-default/bad.ts

@@ -0,0 +1,22 @@
+// Every pair here MUST be reported by `demo-mode-by-default-ts`.
+// The rule is scoped to the positions that decide what the app STARTS on:
+// an initialState-family function, a DEFAULT_/INITIAL_ binding, or the initial
+// argument of useState/useReducer.
+
+// The annotated form, which the rule caught from the start.
+export const DEFAULT_MODE: Mode = { kind: "demo" }
+
+// The `as const` form (is-9e66ec5a). This is the spelling people reach for
+// when the object carries no type annotation to hold the literal type, and it
+// was silently missed — DataSpool's retired local `no-fake-defaults` caught it,
+// so adopting the canon had been a coverage regression.
+export const DEFAULT_STATE = { mode: "demo" as const }
+
+// `as <Type>` and `satisfies <Type>`, the same wrapper wearing other names.
+export const DEFAULT_BACKEND = { source: "fixture" as Backend }
+export const INITIAL_MODE = { kind: "mock" satisfies Mode }
+
+// Inside an initialState-family function rather than a binding.
+export function initialState() {
+  return { mode: "demo" as const }
+}

package/rules/__fixtures__/demo-mode-by-default/bad.tsx

@@ -0,0 +1,22 @@
+// Every pair here MUST be reported by `demo-mode-by-default`.
+// The rule is scoped to the positions that decide what the app STARTS on:
+// an initialState-family function, a DEFAULT_/INITIAL_ binding, or the initial
+// argument of useState/useReducer.
+
+// The annotated form, which the rule caught from the start.
+export const DEFAULT_MODE: Mode = { kind: "demo" }
+
+// The `as const` form (is-9e66ec5a). This is the spelling people reach for
+// when the object carries no type annotation to hold the literal type, and it
+// was silently missed — DataSpool's retired local `no-fake-defaults` caught it,
+// so adopting the canon had been a coverage regression.
+export const DEFAULT_STATE = { mode: "demo" as const }
+
+// `as <Type>` and `satisfies <Type>`, the same wrapper wearing other names.
+export const DEFAULT_BACKEND = { source: "fixture" as Backend }
+export const INITIAL_MODE = { kind: "mock" satisfies Mode }
+
+// Inside an initialState-family function rather than a binding.
+export function initialState() {
+  return { mode: "demo" as const }
+}

package/rules/__fixtures__/demo-mode-by-default/good.ts

@@ -0,0 +1,21 @@
+// NOTHING in this file may be reported by `demo-mode-by-default-ts`.
+
+// The real source as the default is the whole point of the rule.
+export const DEFAULT_MODE = { kind: "live" as const }
+export const DEFAULT_BACKEND: Backend = { source: "api" }
+
+// A demo literal in a `.with(...)` match arm is the CORRECT pattern — an
+// explicit flag selecting the sandbox — and is excluded by design.
+export const pick = (flag: Flag) =>
+  match(flag)
+    .with("sandbox", () => ({ kind: "demo" as const }))
+    .with("real", () => ({ kind: "live" as const }))
+    .exhaustive()
+
+// Not a start-up position: an ordinary binding the rule deliberately ignores,
+// so the scope stays narrow rather than flagging every mention of a fixture.
+export const sampleRow = { kind: "demo" as const }
+
+// The quote characters are part of the match, so a longer string that merely
+// STARTS with a banned word is not a finding.
+export const DEFAULT_STATE = { kind: "demo-recording" as const }

package/rules/__fixtures__/demo-mode-by-default/good.tsx

@@ -0,0 +1,21 @@
+// NOTHING in this file may be reported by `demo-mode-by-default`.
+
+// The real source as the default is the whole point of the rule.
+export const DEFAULT_MODE = { kind: "live" as const }
+export const DEFAULT_BACKEND: Backend = { source: "api" }
+
+// A demo literal in a `.with(...)` match arm is the CORRECT pattern — an
+// explicit flag selecting the sandbox — and is excluded by design.
+export const pick = (flag: Flag) =>
+  match(flag)
+    .with("sandbox", () => ({ kind: "demo" as const }))
+    .with("real", () => ({ kind: "live" as const }))
+    .exhaustive()
+
+// Not a start-up position: an ordinary binding the rule deliberately ignores,
+// so the scope stays narrow rather than flagging every mention of a fixture.
+export const sampleRow = { kind: "demo" as const }
+
+// The quote characters are part of the match, so a longer string that merely
+// STARTS with a banned word is not a finding.
+export const DEFAULT_STATE = { kind: "demo-recording" as const }

package/rules/__fixtures__/json-roundtrip/bad.ts

@@ -0,0 +1,6 @@
+// Every clone here MUST be reported by `json-roundtrip`.
+export const a = (x: Draft) => JSON.parse(JSON.stringify(x))
+export const b = (x: Draft) => {
+  const copy = JSON.parse(JSON.stringify(x))
+  return copy
+}

package/rules/__fixtures__/json-roundtrip/bad.tsx

@@ -0,0 +1,8 @@
+// Every clone here MUST be reported by `json-roundtrip-tsx`.
+// The .ts arm (`json-roundtrip`) does NOT see this file.
+export const Card = ({ draft }: Props) => {
+  const snapshot = JSON.parse(JSON.stringify(draft))
+  return <pre>{snapshot.title}</pre>
+}
+
+export const clone = (x: Draft) => JSON.parse(JSON.stringify(x))

package/rules/__fixtures__/json-roundtrip/good.ts

@@ -0,0 +1,5 @@
+// NOTHING in this file may be reported by `json-roundtrip`.
+// The rule is the composed round trip, not either half on its own.
+export const a = (raw: string) => DraftSchema.parse(JSON.parse(raw))
+export const b = (x: Draft) => JSON.stringify(x)
+export const c = (x: Draft) => structuredClone(x)

package/rules/__fixtures__/json-roundtrip/good.tsx

@@ -0,0 +1,7 @@
+// NOTHING in this file may be reported by `json-roundtrip-tsx`.
+export const Card = ({ raw }: Props) => {
+  const draft = DraftSchema.parse(JSON.parse(raw))
+  return <pre>{draft.title}</pre>
+}
+
+export const clone = (x: Draft) => structuredClone(x)

package/rules/__fixtures__/kind-if-without-match/bad.ts

@@ -0,0 +1,17 @@
+// Every `if` here MUST be reported by `kind-if-without-match`.
+export const a = (r: R) => {
+  if (r.kind === "idle") return 0
+  return 1
+}
+export const b = (r: R) => {
+  if (r.type === "photo") return 0
+  return 1
+}
+export const c = (r: R) => {
+  if (r.status === "ready") return 0
+  return 1
+}
+export const d = (r: R) => {
+  if (r._obj === "Task") return 0
+  return 1
+}

package/rules/__fixtures__/kind-if-without-match/bad.tsx

@@ -0,0 +1,18 @@
+// Every `if` here MUST be reported by `kind-if-without-match-tsx`.
+// The .ts arm (`kind-if-without-match`) does NOT see this file.
+export const A = (r: R) => {
+  if (r.kind === "idle") return <Spinner />
+  return <List />
+}
+export const B = (r: R) => {
+  if (r.type === "photo") return <Photo />
+  return <Video />
+}
+export const C = (r: R) => {
+  if (r.status === "ready") return <List />
+  return <Spinner />
+}
+export const D = (r: R) => {
+  if (r._obj === "Task") return <Task />
+  return <Habit />
+}

package/rules/__fixtures__/kind-if-without-match/good.ts

@@ -0,0 +1,14 @@
+// NOTHING in this file may be reported by `kind-if-without-match`.
+import { match } from "ts-pattern"
+
+export const a = (r: R) =>
+  match(r)
+    .with({ kind: "idle" }, () => 0)
+    .with({ kind: "ready" }, () => 1)
+    .exhaustive()
+
+// Not a discriminant field, so not this rule's business.
+export const b = (r: R) => {
+  if (r.count === 0) return 0
+  return 1
+}