@ankhorage/doctor 0.11.96 → 0.12.1

package/dist/sourceArchitectureAnalysis.js

@@ -1,111 +1,107 @@
-import { promises as fs } from 'node:fs';
 import path from 'node:path';
-import { ARCHITECTURE_POLICY } from '@ankhorage/policy/architecture';
-import { getArchitecturePolicyRule } from './utils/getArchitecturePolicyRule.js';
-const SOURCE_POLICY = ARCHITECTURE_POLICY.source;
-/*** Validate folder-role combinations and inward source dependency direction. */
+import { createSourceGraphAsync } from '@ankhorage/dependency-graph';
+import { evaluateArchitectureProfile } from '@ankhorage/rules-architecture';
+const ENABLED_ARCHITECTURE_RULES = [
+    'package.architecture.domain-outward-import.disallowed',
+    'package.architecture.application-outward-import.disallowed',
+    'package.architecture.port-outward-import.disallowed',
+    'package.architecture.delivery-concrete-adapter-import.disallowed',
+];
+const ACTIVE_SOURCE_ROOTS = ['src', 'app', 'apps', 'packages', 'scripts'];
+const IGNORED_SOURCE_DIRECTORIES = new Set([
+    '.expo',
+    '.git',
+    '.next',
+    '__fixtures__',
+    '__tests__',
+    'build',
+    'coverage',
+    'dist',
+    'docs',
+    'fixtures',
+    'node_modules',
+    'paradox',
+    'test',
+    'tests',
+]);
+/***
+ * Evaluates Doctor's currently enforced source-architecture subset through rules-architecture.
+ */
 export async function analyzeSourceArchitecture(input) {
-    return [...(await analyzeDirectoryVocabularyAsync(input)), ...analyzeImportDirection(input)];
+    const graph = await createSourceGraphAsync({
+        projects: [{ id: 'doctor-target', rootPath: input.targetPath }],
+    });
+    const result = evaluateArchitectureProfile(filterActiveSourceGraph(graph), 'ankhorage', {
+        config: {
+            version: 1,
+            rules: ENABLED_ARCHITECTURE_RULES.map((id) => ({ enabled: true, id })),
+        },
+    });
+    return result.findings.map((finding) => toDoctorDiagnostic(input, finding));
 }
-/*** Validate architectural directory names only when a repository has introduced them. */
-async function analyzeDirectoryVocabularyAsync(input) {
-    const diagnostics = [];
-    const sourceRoot = path.join(input.targetPath, 'src');
-    for (const directoryName of SOURCE_POLICY.catchAllDirectories) {
-        const directoryPath = path.join(sourceRoot, directoryName);
-        if (await pathExistsAsync(directoryPath)) {
-            diagnostics.push(createDiagnostic(input, directoryPath, ARCHITECTURE_POLICY.rules.catchAllDirectory, `src/${directoryName}/ is a generic catch-all. Move code to an owning domain, feature, package edge, or utils/ according to the repository profile.`));
-        }
-    }
-    // Folder-role combination enforcement stays deferred until rules-architecture is canonical.
-    return diagnostics;
-}
-/*** Validate that relative source imports point inward across recognized architecture roles. */
-function analyzeImportDirection(input) {
-    return input.activeSourceImports.flatMap((sourceImport) => analyzeOneImportDirection(input, sourceImport));
-}
-/*** Validate one relative import against repository and layer boundaries. */
-function analyzeOneImportDirection(input, sourceImport) {
-    if (!sourceImport.specifier.startsWith('.'))
-        return [];
-    const targetPath = path.resolve(path.dirname(sourceImport.filePath), sourceImport.specifier);
-    const escaped = createEscapedRepositoryDiagnostic(input, sourceImport, targetPath);
-    if (escaped !== null)
-        return [escaped];
-    return analyzeRecognizedRoleDirection(input, sourceImport, targetPath);
-}
-/*** Report a relative import that escapes the standalone repository boundary. */
-function createEscapedRepositoryDiagnostic(input, sourceImport, targetPath) {
-    const relativeTarget = path.relative(input.targetPath, targetPath);
-    if (!relativeTarget.startsWith('..') && !path.isAbsolute(relativeTarget))
-        return null;
-    return createDiagnostic(input, sourceImport.filePath, getArchitecturePolicyRule(SOURCE_POLICY.repositoryBoundaryRuleId), `Relative import "${sourceImport.specifier}" escapes the standalone repository root.`);
-}
-/*** Apply inward dependency rules for recognized source architecture roles. */
-function analyzeRecognizedRoleDirection(input, sourceImport, targetPath) {
-    const sourceSegments = splitRelativePath(input.targetPath, sourceImport.filePath);
-    const targetSegments = splitRelativePath(input.targetPath, targetPath);
-    const deliveryPolicy = SOURCE_POLICY.thinDeliveryAdapter;
-    if (includesSegmentSequence(sourceSegments, deliveryPolicy.pathSegments) &&
-        targetSegments.includes(deliveryPolicy.concreteAdapterSegment)) {
-        return [
-            createDiagnostic(input, sourceImport.filePath, getArchitecturePolicyRule(deliveryPolicy.ruleId), `Thin delivery adapter must not wire concrete adapter implementation through "${sourceImport.specifier}". Import an application operation or composition boundary instead.`),
-        ];
-    }
-    const role = resolveSourceRole(sourceSegments);
-    if (role === null)
-        return [];
-    return createOutwardImportDiagnostic(input, sourceImport, targetSegments, role);
+/***
+ * Keeps architecture evaluation aligned with Doctor's existing active-source scan contract.
+ */
+function filterActiveSourceGraph(graph) {
+    const nodeById = new Map(graph.graph.nodes.map((node) => [node.id, node.data]));
+    return {
+        ...graph,
+        graph: {
+            nodes: graph.graph.nodes,
+            edges: graph.graph.edges.filter((edge) => {
+                if (edge.data.kind !== 'imports')
+                    return true;
+                const source = nodeById.get(edge.source);
+                const sourcePath = source?.path ?? source?.filePath;
+                return sourcePath === undefined || isActiveSourcePath(sourcePath);
+            }),
+        },
+    };
 }
-/*** Resolve the dependency rule owned by one recognized inner source role. */
-function resolveSourceRole(sourceSegments) {
-    for (const role of Object.values(SOURCE_POLICY.roles)) {
-        if (sourceSegments.some((segment) => role.segments.some((roleSegment) => roleSegment === segment))) {
-            return {
-                forbiddenSegments: new Set(role.forbiddenOutwardSegments),
-                label: role.label,
-                rule: getArchitecturePolicyRule(role.ruleId),
-            };
-        }
+/***
+ * Checks whether one portable path belongs to Doctor's active production-source surface.
+ */
+function isActiveSourcePath(sourcePath) {
+    const normalized = sourcePath.split(path.sep).join('/');
+    const [root, ...segments] = normalized.split('/').filter(Boolean);
+    if (root === undefined || !ACTIVE_SOURCE_ROOTS.some((candidate) => candidate === root)) {
+        return false;
     }
-    return null;
-}
-/*** Report one outward dependency when the imported path crosses a forbidden role. */
-function createOutwardImportDiagnostic(input, sourceImport, targetSegments, role) {
-    const outwardRole = targetSegments.find((segment) => role.forbiddenSegments.has(segment));
-    if (outwardRole === undefined)
-        return [];
-    return [
-        createDiagnostic(input, sourceImport.filePath, role.rule, `${role.label} must not import outward ${outwardRole}/ implementation through "${sourceImport.specifier}".`),
-    ];
-}
-/*** Check whether one path segment sequence occurs contiguously in another. */
-function includesSegmentSequence(segments, expected) {
-    return segments.some((_, index) => expected.every((segment, offset) => segments[index + offset] === segment));
-}
-/*** Split one repository path into normalized architecture segments. */
-function splitRelativePath(targetPath, filePath) {
-    return path.relative(targetPath, filePath).split(path.sep).filter(Boolean);
+    if (segments.some((segment) => IGNORED_SOURCE_DIRECTORIES.has(segment)))
+        return false;
+    const fileName = segments.at(-1) ?? '';
+    return !/(?:^|\.)(?:spec|test)\.[cm]?[jt]sx?$/u.test(fileName);
 }
-/*** Build one deterministic architecture diagnostic from Policy-owned metadata. */
-function createDiagnostic(input, diagnosticPath, rule, message) {
+/***
+ * Converts one architecture Rule finding into Doctor's stable diagnostic surface.
+ */
+function toDoctorDiagnostic(input, finding) {
+    const subjectPath = finding.sourceLocation?.path ?? finding.subjects[0]?.path ?? '.';
     return {
         code: 'field-invalid',
-        message,
-        path: diagnosticPath,
+        message: finding.message,
+        path: path.resolve(input.targetPath, subjectPath),
         profile: input.profile,
-        ruleId: rule.id,
-        severity: rule.severity,
+        ruleId: toDoctorRuleId(finding.ruleId),
+        severity: toDoctorSeverity(finding.severity),
     };
 }
-/*** Check whether a filesystem path exists. */
-async function pathExistsAsync(targetPath) {
-    try {
-        await fs.access(targetPath);
-        return true;
-    }
-    catch {
-        return false;
+/***
+ * Narrows architecture-provider rule ids to the subset Doctor intentionally enforces.
+ */
+function toDoctorRuleId(ruleId) {
+    const match = ENABLED_ARCHITECTURE_RULES.find((candidate) => candidate === ruleId);
+    if (match === undefined)
+        throw new Error('Unexpected Doctor architecture rule: ' + ruleId);
+    return match;
+}
+/***
+ * Narrows generic Rules severity to Doctor's diagnostic severity surface.
+ */
+function toDoctorSeverity(severity) {
+    if (severity === 'info') {
+        throw new Error('Doctor does not support info-level architecture diagnostics.');
     }
+    return severity;
 }
 //# sourceMappingURL=sourceArchitectureAnalysis.js.map

package/dist/sourceArchitectureAnalysis.js.map

@@ -1 +1 @@
-{"version":3,"file":"sourceArchitectureAnalysis.js","sourceRoot":"","sources":["../src/sourceArchitectureAnalysis.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,IAAI,EAAE,EAAE,MAAM,SAAS,CAAC;AACzC,OAAO,IAAI,MAAM,WAAW,CAAC;AAE7B,OAAO,EAAE,mBAAmB,EAAE,MAAM,gCAAgC,CAAC;AAGrE,OAAO,EAAE,yBAAyB,EAAE,MAAM,sCAAsC,CAAC;AAajF,MAAM,aAAa,GAAG,mBAAmB,CAAC,MAAM,CAAC;AAEjD,iFAAiF;AACjF,MAAM,CAAC,KAAK,UAAU,yBAAyB,CAC7C,KAAqC;IAErC,OAAO,CAAC,GAAG,CAAC,MAAM,+BAA+B,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,sBAAsB,CAAC,KAAK,CAAC,CAAC,CAAC;AAC/F,CAAC;AAED,0FAA0F;AAC1F,KAAK,UAAU,+BAA+B,CAC5C,KAAqC;IAErC,MAAM,WAAW,GAAuB,EAAE,CAAC;IAC3C,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC;IAEtD,KAAK,MAAM,aAAa,IAAI,aAAa,CAAC,mBAAmB,EAAE,CAAC;QAC9D,MAAM,aAAa,GAAG,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,aAAa,CAAC,CAAC;QAC3D,IAAI,MAAM,eAAe,CAAC,aAAa,CAAC,EAAE,CAAC;YACzC,WAAW,CAAC,IAAI,CACd,gBAAgB,CACd,KAAK,EACL,aAAa,EACb,mBAAmB,CAAC,KAAK,CAAC,iBAAiB,EAC3C,OAAO,aAAa,gIAAgI,CACrJ,CACF,CAAC;QACJ,CAAC;IACH,CAAC;IAED,4FAA4F;IAC5F,OAAO,WAAW,CAAC;AACrB,CAAC;AAED,gGAAgG;AAChG,SAAS,sBAAsB,CAAC,KAAqC;IACnE,OAAO,KAAK,CAAC,mBAAmB,CAAC,OAAO,CAAC,CAAC,YAAY,EAAE,EAAE,CACxD,yBAAyB,CAAC,KAAK,EAAE,YAAY,CAAC,CAC/C,CAAC;AACJ,CAAC;AAED,6EAA6E;AAC7E,SAAS,yBAAyB,CAChC,KAAqC,EACrC,YAA0B;IAE1B,IAAI,CAAC,YAAY,CAAC,SAAS,CAAC,UAAU,CAAC,GAAG,CAAC;QAAE,OAAO,EAAE,CAAC;IAEvD,MAAM,UAAU,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,YAAY,CAAC,QAAQ,CAAC,EAAE,YAAY,CAAC,SAAS,CAAC,CAAC;IAC7F,MAAM,OAAO,GAAG,iCAAiC,CAAC,KAAK,EAAE,YAAY,EAAE,UAAU,CAAC,CAAC;IACnF,IAAI,OAAO,KAAK,IAAI;QAAE,OAAO,CAAC,OAAO,CAAC,CAAC;IAEvC,OAAO,8BAA8B,CAAC,KAAK,EAAE,YAAY,EAAE,UAAU,CAAC,CAAC;AACzE,CAAC;AAED,iFAAiF;AACjF,SAAS,iCAAiC,CACxC,KAAqC,EACrC,YAA0B,EAC1B,UAAkB;IAElB,MAAM,cAAc,GAAG,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,UAAU,EAAE,UAAU,CAAC,CAAC;IACnE,IAAI,CAAC,cAAc,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,cAAc,CAAC;QAAE,OAAO,IAAI,CAAC;IAEtF,OAAO,gBAAgB,CACrB,KAAK,EACL,YAAY,CAAC,QAAQ,EACrB,yBAAyB,CAAC,aAAa,CAAC,wBAAwB,CAAC,EACjE,oBAAoB,YAAY,CAAC,SAAS,2CAA2C,CACtF,CAAC;AACJ,CAAC;AAED,+EAA+E;AAC/E,SAAS,8BAA8B,CACrC,KAAqC,EACrC,YAA0B,EAC1B,UAAkB;IAElB,MAAM,cAAc,GAAG,iBAAiB,CAAC,KAAK,CAAC,UAAU,EAAE,YAAY,CAAC,QAAQ,CAAC,CAAC;IAClF,MAAM,cAAc,GAAG,iBAAiB,CAAC,KAAK,CAAC,UAAU,EAAE,UAAU,CAAC,CAAC;IACvE,MAAM,cAAc,GAAG,aAAa,CAAC,mBAAmB,CAAC;IAEzD,IACE,uBAAuB,CAAC,cAAc,EAAE,cAAc,CAAC,YAAY,CAAC;QACpE,cAAc,CAAC,QAAQ,CAAC,cAAc,CAAC,sBAAsB,CAAC,EAC9D,CAAC;QACD,OAAO;YACL,gBAAgB,CACd,KAAK,EACL,YAAY,CAAC,QAAQ,EACrB,yBAAyB,CAAC,cAAc,CAAC,MAAM,CAAC,EAChD,gFAAgF,YAAY,CAAC,SAAS,qEAAqE,CAC5K;SACF,CAAC;IACJ,CAAC;IAED,MAAM,IAAI,GAAG,iBAAiB,CAAC,cAAc,CAAC,CAAC;IAC/C,IAAI,IAAI,KAAK,IAAI;QAAE,OAAO,EAAE,CAAC;IAE7B,OAAO,6BAA6B,CAAC,KAAK,EAAE,YAAY,EAAE,cAAc,EAAE,IAAI,CAAC,CAAC;AAClF,CAAC;AAED,8EAA8E;AAC9E,SAAS,iBAAiB,CAAC,cAAiC;IAC1D,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,EAAE,CAAC;QACtD,IACE,cAAc,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC,WAAW,KAAK,OAAO,CAAC,CAAC,EAC9F,CAAC;YACD,OAAO;gBACL,iBAAiB,EAAE,IAAI,GAAG,CAAS,IAAI,CAAC,wBAAwB,CAAC;gBACjE,KAAK,EAAE,IAAI,CAAC,KAAK;gBACjB,IAAI,EAAE,yBAAyB,CAAC,IAAI,CAAC,MAAM,CAAC;aAC7C,CAAC;QACJ,CAAC;IACH,CAAC;IAED,OAAO,IAAI,CAAC;AACd,CAAC;AAQD,sFAAsF;AACtF,SAAS,6BAA6B,CACpC,KAAqC,EACrC,YAA0B,EAC1B,cAAiC,EACjC,IAAoB;IAEpB,MAAM,WAAW,GAAG,cAAc,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC;IAC1F,IAAI,WAAW,KAAK,SAAS;QAAE,OAAO,EAAE,CAAC;IAEzC,OAAO;QACL,gBAAgB,CACd,KAAK,EACL,YAAY,CAAC,QAAQ,EACrB,IAAI,CAAC,IAAI,EACT,GAAG,IAAI,CAAC,KAAK,4BAA4B,WAAW,6BAA6B,YAAY,CAAC,SAAS,IAAI,CAC5G;KACF,CAAC;AACJ,CAAC;AAED,+EAA+E;AAC/E,SAAS,uBAAuB,CAC9B,QAA2B,EAC3B,QAA2B;IAE3B,OAAO,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,EAAE,CAChC,QAAQ,CAAC,KAAK,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE,CAAC,QAAQ,CAAC,KAAK,GAAG,MAAM,CAAC,KAAK,OAAO,CAAC,CAC1E,CAAC;AACJ,CAAC;AAED,wEAAwE;AACxE,SAAS,iBAAiB,CAAC,UAAkB,EAAE,QAAgB;IAC7D,OAAO,IAAI,CAAC,QAAQ,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;AAC7E,CAAC;AAED,mFAAmF;AACnF,SAAS,gBAAgB,CACvB,KAAqC,EACrC,cAAsB,EACtB,IAAkD,EAClD,OAAe;IAEf,OAAO;QACL,IAAI,EAAE,eAAe;QACrB,OAAO;QACP,IAAI,EAAE,cAAc;QACpB,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,MAAM,EAAE,IAAI,CAAC,EAAE;QACf,QAAQ,EAAE,IAAI,CAAC,QAAQ;KACxB,CAAC;AACJ,CAAC;AAED,+CAA+C;AAC/C,KAAK,UAAU,eAAe,CAAC,UAAkB;IAC/C,IAAI,CAAC;QACH,MAAM,EAAE,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;QAC5B,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC","sourcesContent":["import { promises as fs } from 'node:fs';\nimport path from 'node:path';\n\nimport { ARCHITECTURE_POLICY } from '@ankhorage/policy/architecture';\n\nimport type { DoctorDiagnostic, DoctorPolicyProfile } from './diagnostics.js';\nimport { getArchitecturePolicyRule } from './utils/getArchitecturePolicyRule.js';\n\ninterface SourceImport {\n  readonly filePath: string;\n  readonly specifier: string;\n}\n\ninterface AnalyzeSourceArchitectureInput {\n  readonly activeSourceImports: readonly SourceImport[];\n  readonly profile: DoctorPolicyProfile;\n  readonly targetPath: string;\n}\n\nconst SOURCE_POLICY = ARCHITECTURE_POLICY.source;\n\n/*** Validate folder-role combinations and inward source dependency direction. */\nexport async function analyzeSourceArchitecture(\n  input: AnalyzeSourceArchitectureInput,\n): Promise<DoctorDiagnostic[]> {\n  return [...(await analyzeDirectoryVocabularyAsync(input)), ...analyzeImportDirection(input)];\n}\n\n/*** Validate architectural directory names only when a repository has introduced them. */\nasync function analyzeDirectoryVocabularyAsync(\n  input: AnalyzeSourceArchitectureInput,\n): Promise<DoctorDiagnostic[]> {\n  const diagnostics: DoctorDiagnostic[] = [];\n  const sourceRoot = path.join(input.targetPath, 'src');\n\n  for (const directoryName of SOURCE_POLICY.catchAllDirectories) {\n    const directoryPath = path.join(sourceRoot, directoryName);\n    if (await pathExistsAsync(directoryPath)) {\n      diagnostics.push(\n        createDiagnostic(\n          input,\n          directoryPath,\n          ARCHITECTURE_POLICY.rules.catchAllDirectory,\n          `src/${directoryName}/ is a generic catch-all. Move code to an owning domain, feature, package edge, or utils/ according to the repository profile.`,\n        ),\n      );\n    }\n  }\n\n  // Folder-role combination enforcement stays deferred until rules-architecture is canonical.\n  return diagnostics;\n}\n\n/*** Validate that relative source imports point inward across recognized architecture roles. */\nfunction analyzeImportDirection(input: AnalyzeSourceArchitectureInput): DoctorDiagnostic[] {\n  return input.activeSourceImports.flatMap((sourceImport) =>\n    analyzeOneImportDirection(input, sourceImport),\n  );\n}\n\n/*** Validate one relative import against repository and layer boundaries. */\nfunction analyzeOneImportDirection(\n  input: AnalyzeSourceArchitectureInput,\n  sourceImport: SourceImport,\n): DoctorDiagnostic[] {\n  if (!sourceImport.specifier.startsWith('.')) return [];\n\n  const targetPath = path.resolve(path.dirname(sourceImport.filePath), sourceImport.specifier);\n  const escaped = createEscapedRepositoryDiagnostic(input, sourceImport, targetPath);\n  if (escaped !== null) return [escaped];\n\n  return analyzeRecognizedRoleDirection(input, sourceImport, targetPath);\n}\n\n/*** Report a relative import that escapes the standalone repository boundary. */\nfunction createEscapedRepositoryDiagnostic(\n  input: AnalyzeSourceArchitectureInput,\n  sourceImport: SourceImport,\n  targetPath: string,\n): DoctorDiagnostic | null {\n  const relativeTarget = path.relative(input.targetPath, targetPath);\n  if (!relativeTarget.startsWith('..') && !path.isAbsolute(relativeTarget)) return null;\n\n  return createDiagnostic(\n    input,\n    sourceImport.filePath,\n    getArchitecturePolicyRule(SOURCE_POLICY.repositoryBoundaryRuleId),\n    `Relative import \"${sourceImport.specifier}\" escapes the standalone repository root.`,\n  );\n}\n\n/*** Apply inward dependency rules for recognized source architecture roles. */\nfunction analyzeRecognizedRoleDirection(\n  input: AnalyzeSourceArchitectureInput,\n  sourceImport: SourceImport,\n  targetPath: string,\n): DoctorDiagnostic[] {\n  const sourceSegments = splitRelativePath(input.targetPath, sourceImport.filePath);\n  const targetSegments = splitRelativePath(input.targetPath, targetPath);\n  const deliveryPolicy = SOURCE_POLICY.thinDeliveryAdapter;\n\n  if (\n    includesSegmentSequence(sourceSegments, deliveryPolicy.pathSegments) &&\n    targetSegments.includes(deliveryPolicy.concreteAdapterSegment)\n  ) {\n    return [\n      createDiagnostic(\n        input,\n        sourceImport.filePath,\n        getArchitecturePolicyRule(deliveryPolicy.ruleId),\n        `Thin delivery adapter must not wire concrete adapter implementation through \"${sourceImport.specifier}\". Import an application operation or composition boundary instead.`,\n      ),\n    ];\n  }\n\n  const role = resolveSourceRole(sourceSegments);\n  if (role === null) return [];\n\n  return createOutwardImportDiagnostic(input, sourceImport, targetSegments, role);\n}\n\n/*** Resolve the dependency rule owned by one recognized inner source role. */\nfunction resolveSourceRole(sourceSegments: readonly string[]): SourceRoleRule | null {\n  for (const role of Object.values(SOURCE_POLICY.roles)) {\n    if (\n      sourceSegments.some((segment) => role.segments.some((roleSegment) => roleSegment === segment))\n    ) {\n      return {\n        forbiddenSegments: new Set<string>(role.forbiddenOutwardSegments),\n        label: role.label,\n        rule: getArchitecturePolicyRule(role.ruleId),\n      };\n    }\n  }\n\n  return null;\n}\n\ninterface SourceRoleRule {\n  readonly forbiddenSegments: ReadonlySet<string>;\n  readonly label: string;\n  readonly rule: ReturnType<typeof getArchitecturePolicyRule>;\n}\n\n/*** Report one outward dependency when the imported path crosses a forbidden role. */\nfunction createOutwardImportDiagnostic(\n  input: AnalyzeSourceArchitectureInput,\n  sourceImport: SourceImport,\n  targetSegments: readonly string[],\n  role: SourceRoleRule,\n): DoctorDiagnostic[] {\n  const outwardRole = targetSegments.find((segment) => role.forbiddenSegments.has(segment));\n  if (outwardRole === undefined) return [];\n\n  return [\n    createDiagnostic(\n      input,\n      sourceImport.filePath,\n      role.rule,\n      `${role.label} must not import outward ${outwardRole}/ implementation through \"${sourceImport.specifier}\".`,\n    ),\n  ];\n}\n\n/*** Check whether one path segment sequence occurs contiguously in another. */\nfunction includesSegmentSequence(\n  segments: readonly string[],\n  expected: readonly string[],\n): boolean {\n  return segments.some((_, index) =>\n    expected.every((segment, offset) => segments[index + offset] === segment),\n  );\n}\n\n/*** Split one repository path into normalized architecture segments. */\nfunction splitRelativePath(targetPath: string, filePath: string): readonly string[] {\n  return path.relative(targetPath, filePath).split(path.sep).filter(Boolean);\n}\n\n/*** Build one deterministic architecture diagnostic from Policy-owned metadata. */\nfunction createDiagnostic(\n  input: AnalyzeSourceArchitectureInput,\n  diagnosticPath: string,\n  rule: ReturnType<typeof getArchitecturePolicyRule>,\n  message: string,\n): DoctorDiagnostic {\n  return {\n    code: 'field-invalid',\n    message,\n    path: diagnosticPath,\n    profile: input.profile,\n    ruleId: rule.id,\n    severity: rule.severity,\n  };\n}\n\n/*** Check whether a filesystem path exists. */\nasync function pathExistsAsync(targetPath: string): Promise<boolean> {\n  try {\n    await fs.access(targetPath);\n    return true;\n  } catch {\n    return false;\n  }\n}\n"]}
+{"version":3,"file":"sourceArchitectureAnalysis.js","sourceRoot":"","sources":["../src/sourceArchitectureAnalysis.ts"],"names":[],"mappings":"AAAA,OAAO,IAAI,MAAM,WAAW,CAAC;AAE7B,OAAO,EAAE,sBAAsB,EAAoB,MAAM,6BAA6B,CAAC;AACvF,OAAO,EAAE,2BAA2B,EAAE,MAAM,+BAA+B,CAAC;AAS5E,MAAM,0BAA0B,GAAG;IACjC,uDAAuD;IACvD,4DAA4D;IAC5D,qDAAqD;IACrD,kEAAkE;CACxB,CAAC;AAE7C,MAAM,mBAAmB,GAAG,CAAC,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,UAAU,EAAE,SAAS,CAAU,CAAC;AACnF,MAAM,0BAA0B,GAAG,IAAI,GAAG,CAAC;IACzC,OAAO;IACP,MAAM;IACN,OAAO;IACP,cAAc;IACd,WAAW;IACX,OAAO;IACP,UAAU;IACV,MAAM;IACN,MAAM;IACN,UAAU;IACV,cAAc;IACd,SAAS;IACT,MAAM;IACN,OAAO;CACR,CAAC,CAAC;AAOH;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,yBAAyB,CAC7C,KAAqC;IAErC,MAAM,KAAK,GAAG,MAAM,sBAAsB,CAAC;QACzC,QAAQ,EAAE,CAAC,EAAE,EAAE,EAAE,eAAe,EAAE,QAAQ,EAAE,KAAK,CAAC,UAAU,EAAE,CAAC;KAChE,CAAC,CAAC;IACH,MAAM,MAAM,GAAG,2BAA2B,CAAC,uBAAuB,CAAC,KAAK,CAAC,EAAE,WAAW,EAAE;QACtF,MAAM,EAAE;YACN,OAAO,EAAE,CAAC;YACV,KAAK,EAAE,0BAA0B,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC,CAAC;SACvE;KACF,CAAC,CAAC;IAEH,OAAO,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,kBAAkB,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC,CAAC;AAC9E,CAAC;AAED;;GAEG;AACH,SAAS,uBAAuB,CAAC,KAAkB;IACjD,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,EAAE,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAChF,OAAO;QACL,GAAG,KAAK;QACR,KAAK,EAAE;YACL,KAAK,EAAE,KAAK,CAAC,KAAK,CAAC,KAAK;YACxB,KAAK,EAAE,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE;gBACvC,IAAI,IAAI,CAAC,IAAI,CAAC,IAAI,KAAK,SAAS;oBAAE,OAAO,IAAI,CAAC;gBAC9C,MAAM,MAAM,GAAG,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;gBACzC,MAAM,UAAU,GAAG,MAAM,EAAE,IAAI,IAAI,MAAM,EAAE,QAAQ,CAAC;gBACpD,OAAO,UAAU,KAAK,SAAS,IAAI,kBAAkB,CAAC,UAAU,CAAC,CAAC;YACpE,CAAC,CAAC;SACH;KACF,CAAC;AACJ,CAAC;AAED;;GAEG;AACH,SAAS,kBAAkB,CAAC,UAAkB;IAC5C,MAAM,UAAU,GAAG,UAAU,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACxD,MAAM,CAAC,IAAI,EAAE,GAAG,QAAQ,CAAC,GAAG,UAAU,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IAClE,IAAI,IAAI,KAAK,SAAS,IAAI,CAAC,mBAAmB,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,KAAK,IAAI,CAAC,EAAE,CAAC;QACvF,OAAO,KAAK,CAAC;IACf,CAAC;IACD,IAAI,QAAQ,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,0BAA0B,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QAAE,OAAO,KAAK,CAAC;IACtF,MAAM,QAAQ,GAAG,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IACvC,OAAO,CAAC,uCAAuC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;AACjE,CAAC;AAED;;GAEG;AACH,SAAS,kBAAkB,CACzB,KAAqC,EACrC,OAA2E;IAE3E,MAAM,WAAW,GAAG,OAAO,CAAC,cAAc,EAAE,IAAI,IAAI,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,IAAI,IAAI,GAAG,CAAC;IACrF,OAAO;QACL,IAAI,EAAE,eAAe;QACrB,OAAO,EAAE,OAAO,CAAC,OAAO;QACxB,IAAI,EAAE,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,UAAU,EAAE,WAAW,CAAC;QACjD,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,MAAM,EAAE,cAAc,CAAC,OAAO,CAAC,MAAM,CAAC;QACtC,QAAQ,EAAE,gBAAgB,CAAC,OAAO,CAAC,QAAQ,CAAC;KAC7C,CAAC;AACJ,CAAC;AAED;;GAEG;AACH,SAAS,cAAc,CAAC,MAAc;IACpC,MAAM,KAAK,GAAG,0BAA0B,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,KAAK,MAAM,CAAC,CAAC;IACnF,IAAI,KAAK,KAAK,SAAS;QAAE,MAAM,IAAI,KAAK,CAAC,uCAAuC,GAAG,MAAM,CAAC,CAAC;IAC3F,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;GAEG;AACH,SAAS,gBAAgB,CAAC,QAAsC;IAC9D,IAAI,QAAQ,KAAK,MAAM,EAAE,CAAC;QACxB,MAAM,IAAI,KAAK,CAAC,8DAA8D,CAAC,CAAC;IAClF,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC","sourcesContent":["import path from 'node:path';\n\nimport { createSourceGraphAsync, type SourceGraph } from '@ankhorage/dependency-graph';\nimport { evaluateArchitectureProfile } from '@ankhorage/rules-architecture';\n\nimport type {\n  DoctorDiagnostic,\n  DoctorDiagnosticSeverity,\n  DoctorPolicyProfile,\n  DoctorRuleId,\n} from './diagnostics.js';\n\nconst ENABLED_ARCHITECTURE_RULES = [\n  'package.architecture.domain-outward-import.disallowed',\n  'package.architecture.application-outward-import.disallowed',\n  'package.architecture.port-outward-import.disallowed',\n  'package.architecture.delivery-concrete-adapter-import.disallowed',\n] as const satisfies readonly DoctorRuleId[];\n\nconst ACTIVE_SOURCE_ROOTS = ['src', 'app', 'apps', 'packages', 'scripts'] as const;\nconst IGNORED_SOURCE_DIRECTORIES = new Set([\n  '.expo',\n  '.git',\n  '.next',\n  '__fixtures__',\n  '__tests__',\n  'build',\n  'coverage',\n  'dist',\n  'docs',\n  'fixtures',\n  'node_modules',\n  'paradox',\n  'test',\n  'tests',\n]);\n\ninterface AnalyzeSourceArchitectureInput {\n  readonly profile: DoctorPolicyProfile;\n  readonly targetPath: string;\n}\n\n/***\n * Evaluates Doctor's currently enforced source-architecture subset through rules-architecture.\n */\nexport async function analyzeSourceArchitecture(\n  input: AnalyzeSourceArchitectureInput,\n): Promise<DoctorDiagnostic[]> {\n  const graph = await createSourceGraphAsync({\n    projects: [{ id: 'doctor-target', rootPath: input.targetPath }],\n  });\n  const result = evaluateArchitectureProfile(filterActiveSourceGraph(graph), 'ankhorage', {\n    config: {\n      version: 1,\n      rules: ENABLED_ARCHITECTURE_RULES.map((id) => ({ enabled: true, id })),\n    },\n  });\n\n  return result.findings.map((finding) => toDoctorDiagnostic(input, finding));\n}\n\n/***\n * Keeps architecture evaluation aligned with Doctor's existing active-source scan contract.\n */\nfunction filterActiveSourceGraph(graph: SourceGraph): SourceGraph {\n  const nodeById = new Map(graph.graph.nodes.map((node) => [node.id, node.data]));\n  return {\n    ...graph,\n    graph: {\n      nodes: graph.graph.nodes,\n      edges: graph.graph.edges.filter((edge) => {\n        if (edge.data.kind !== 'imports') return true;\n        const source = nodeById.get(edge.source);\n        const sourcePath = source?.path ?? source?.filePath;\n        return sourcePath === undefined || isActiveSourcePath(sourcePath);\n      }),\n    },\n  };\n}\n\n/***\n * Checks whether one portable path belongs to Doctor's active production-source surface.\n */\nfunction isActiveSourcePath(sourcePath: string): boolean {\n  const normalized = sourcePath.split(path.sep).join('/');\n  const [root, ...segments] = normalized.split('/').filter(Boolean);\n  if (root === undefined || !ACTIVE_SOURCE_ROOTS.some((candidate) => candidate === root)) {\n    return false;\n  }\n  if (segments.some((segment) => IGNORED_SOURCE_DIRECTORIES.has(segment))) return false;\n  const fileName = segments.at(-1) ?? '';\n  return !/(?:^|\\.)(?:spec|test)\\.[cm]?[jt]sx?$/u.test(fileName);\n}\n\n/***\n * Converts one architecture Rule finding into Doctor's stable diagnostic surface.\n */\nfunction toDoctorDiagnostic(\n  input: AnalyzeSourceArchitectureInput,\n  finding: ReturnType<typeof evaluateArchitectureProfile>['findings'][number],\n): DoctorDiagnostic {\n  const subjectPath = finding.sourceLocation?.path ?? finding.subjects[0]?.path ?? '.';\n  return {\n    code: 'field-invalid',\n    message: finding.message,\n    path: path.resolve(input.targetPath, subjectPath),\n    profile: input.profile,\n    ruleId: toDoctorRuleId(finding.ruleId),\n    severity: toDoctorSeverity(finding.severity),\n  };\n}\n\n/***\n * Narrows architecture-provider rule ids to the subset Doctor intentionally enforces.\n */\nfunction toDoctorRuleId(ruleId: string): DoctorRuleId {\n  const match = ENABLED_ARCHITECTURE_RULES.find((candidate) => candidate === ruleId);\n  if (match === undefined) throw new Error('Unexpected Doctor architecture rule: ' + ruleId);\n  return match;\n}\n\n/***\n * Narrows generic Rules severity to Doctor's diagnostic severity surface.\n */\nfunction toDoctorSeverity(severity: 'error' | 'info' | 'warning'): DoctorDiagnosticSeverity {\n  if (severity === 'info') {\n    throw new Error('Doctor does not support info-level architecture diagnostics.');\n  }\n  return severity;\n}\n"]}

package/dist/utils/getRepositoryRule.d.ts

@@ -0,0 +1,9 @@
+import type { DoctorDiagnosticSeverity, DoctorRuleId } from '../diagnostics.js';
+/***
+ * Resolves one canonical repository rule by its stable Doctor rule id.
+ */
+export declare function getRepositoryRule(ruleId: DoctorRuleId): {
+    readonly id: DoctorRuleId;
+    readonly severity: DoctorDiagnosticSeverity;
+};
+//# sourceMappingURL=getRepositoryRule.d.ts.map

package/dist/utils/getRepositoryRule.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"getRepositoryRule.d.ts","sourceRoot":"","sources":["../../src/utils/getRepositoryRule.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,wBAAwB,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AAEhF;;GAEG;AACH,wBAAgB,iBAAiB,CAAC,MAAM,EAAE,YAAY,GAAG;IACvD,QAAQ,CAAC,EAAE,EAAE,YAAY,CAAC;IAC1B,QAAQ,CAAC,QAAQ,EAAE,wBAAwB,CAAC;CAC7C,CASA"}

package/dist/utils/getRepositoryRule.js

@@ -0,0 +1,15 @@
+import { createRepositoryRuleSet } from '@ankhorage/rules-repository';
+/***
+ * Resolves one canonical repository rule by its stable Doctor rule id.
+ */
+export function getRepositoryRule(ruleId) {
+    const rule = createRepositoryRuleSet().rules.find((candidate) => candidate.id === ruleId);
+    if (rule === undefined) {
+        throw new Error('Unknown repository rule: ' + ruleId);
+    }
+    if (rule.defaultSeverity === 'info') {
+        throw new Error('Doctor does not support info-level repository diagnostics: ' + ruleId);
+    }
+    return { id: ruleId, severity: rule.defaultSeverity };
+}
+//# sourceMappingURL=getRepositoryRule.js.map

package/dist/utils/getRepositoryRule.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"getRepositoryRule.js","sourceRoot":"","sources":["../../src/utils/getRepositoryRule.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,uBAAuB,EAAE,MAAM,6BAA6B,CAAC;AAItE;;GAEG;AACH,MAAM,UAAU,iBAAiB,CAAC,MAAoB;IAIpD,MAAM,IAAI,GAAG,uBAAuB,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,EAAE,KAAK,MAAM,CAAC,CAAC;IAC1F,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;QACvB,MAAM,IAAI,KAAK,CAAC,2BAA2B,GAAG,MAAM,CAAC,CAAC;IACxD,CAAC;IACD,IAAI,IAAI,CAAC,eAAe,KAAK,MAAM,EAAE,CAAC;QACpC,MAAM,IAAI,KAAK,CAAC,6DAA6D,GAAG,MAAM,CAAC,CAAC;IAC1F,CAAC;IACD,OAAO,EAAE,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,CAAC,eAAe,EAAE,CAAC;AACxD,CAAC","sourcesContent":["import { createRepositoryRuleSet } from '@ankhorage/rules-repository';\n\nimport type { DoctorDiagnosticSeverity, DoctorRuleId } from '../diagnostics.js';\n\n/***\n * Resolves one canonical repository rule by its stable Doctor rule id.\n */\nexport function getRepositoryRule(ruleId: DoctorRuleId): {\n  readonly id: DoctorRuleId;\n  readonly severity: DoctorDiagnosticSeverity;\n} {\n  const rule = createRepositoryRuleSet().rules.find((candidate) => candidate.id === ruleId);\n  if (rule === undefined) {\n    throw new Error('Unknown repository rule: ' + ruleId);\n  }\n  if (rule.defaultSeverity === 'info') {\n    throw new Error('Doctor does not support info-level repository diagnostics: ' + ruleId);\n  }\n  return { id: ruleId, severity: rule.defaultSeverity };\n}\n"]}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@ankhorage/doctor",
-  "version": "0.11.96",
+  "version": "0.12.1",
   "description": "Executable Ankh provider and standalone CLI for lightweight repo and package compliance diagnostics.",
   "license": "MIT",
   "publishConfig": {
@@ -79,13 +79,15 @@
   },
   "dependencies": {
     "@ankhorage/contracts": "^22.8.91",
+    "@ankhorage/dependency-graph": "^1.1.1",
+    "@ankhorage/rules-architecture": "^0.4.0",
+    "@ankhorage/rules-repository": "^0.2.0",
     "@ankhorage/supabase-auth": "^1.2.27",
-    "@ankhorage/utility": "^1.9.77",
-    "@ankhorage/policy": "^0.6.0"
+    "@ankhorage/utility": "^1.9.77"
   },
   "devDependencies": {
-    "@ankhorage/ankh": "^0.10.81",
-    "@ankhorage/devtools": "^2.0.115",
+    "@ankhorage/ankh": "^0.10.83",
+    "@ankhorage/devtools": "^2.1.1",
     "@ankhorage/paradox": "^0.2.25",
     "@types/bun": "^1.4.2",
     "@types/node": "^26.6.4",

package/src/analysis.ts

@@ -2,12 +2,12 @@ import { promises as fs } from 'node:fs';
 import path from 'node:path';
 import { pathToFileURL } from 'node:url';
 
-import { ARCHITECTURE_POLICY } from '@ankhorage/policy/architecture';
+import { REPOSITORY_RULE_METADATA } from '@ankhorage/rules-repository';
 import { uniqueSortedStrings } from '@ankhorage/utility/array';
 
 import type { DoctorDiagnostic, DoctorPolicyProfile, DoctorRuleId } from './diagnostics.js';
 import type { DoctorReadiness } from './readiness.js';
-import { getArchitecturePolicyRule } from './utils/getArchitecturePolicyRule.js';
+import { getRepositoryRule } from './utils/getRepositoryRule.js';
 
 export type DoctorTargetCheck = 'manifest' | 'package' | 'repo';
 export type DoctorTargetMode = 'fix' | 'package' | 'repo' | 'validate';
@@ -67,7 +67,7 @@ const REPO_MARKERS = [
   { label: 'yarn.lock', relativePath: 'yarn.lock' },
 ] as const;
 
-const PUBLIC_PACKAGE_POLICY = ARCHITECTURE_POLICY.publicPackage;
+const PUBLIC_PACKAGE_POLICY = REPOSITORY_RULE_METADATA.publicPackage;
 
 const PROVIDER_SOURCE_CANDIDATES = [
   path.join('src', 'ankh.provider.ts'),
@@ -348,7 +348,7 @@ async function analyzePackagePolicy(request: {
         message: 'Public package profiles must not set private: true.',
         path: request.packageJsonPath,
         profile: request.profile,
-        ...architecturePolicyRuleFields(PUBLIC_PACKAGE_POLICY.privateDisallowedRuleId),
+        ...repositoryRuleFields(PUBLIC_PACKAGE_POLICY.privateDisallowedRuleId),
       }),
     );
   }
@@ -363,7 +363,7 @@ async function analyzePackagePolicy(request: {
         message: `package.json "type" must be "${PUBLIC_PACKAGE_POLICY.packageType.value}".`,
         path: request.packageJsonPath,
         profile: request.profile,
-        ...architecturePolicyRuleFields(PUBLIC_PACKAGE_POLICY.packageType.ruleId),
+        ...repositoryRuleFields(PUBLIC_PACKAGE_POLICY.packageType.ruleId),
       }),
     );
   }
@@ -379,7 +379,7 @@ async function analyzePackagePolicy(request: {
         message: `package.json publishConfig.access must exist and equal "${PUBLIC_PACKAGE_POLICY.publishAccess.value}".`,
         path: request.packageJsonPath,
         profile: request.profile,
-        ...architecturePolicyRuleFields(PUBLIC_PACKAGE_POLICY.publishAccess.ruleId),
+        ...repositoryRuleFields(PUBLIC_PACKAGE_POLICY.publishAccess.ruleId),
       }),
     );
   }
@@ -391,7 +391,7 @@ async function analyzePackagePolicy(request: {
         message: 'package.json must define a Bun-aligned packageManager field.',
         path: request.packageJsonPath,
         profile: request.profile,
-        ...architecturePolicyRuleFields(PUBLIC_PACKAGE_POLICY.packageManager.requiredRuleId),
+        ...repositoryRuleFields(PUBLIC_PACKAGE_POLICY.packageManager.requiredRuleId),
       }),
     );
     request.plannedChanges.push(
@@ -409,7 +409,7 @@ async function analyzePackagePolicy(request: {
         message: 'package.json packageManager must be Bun-aligned, for example "bun@1.x".',
         path: request.packageJsonPath,
         profile: request.profile,
-        ...architecturePolicyRuleFields(PUBLIC_PACKAGE_POLICY.packageManager.bunRuleId),
+        ...repositoryRuleFields(PUBLIC_PACKAGE_POLICY.packageManager.bunRuleId),
       }),
     );
   }
@@ -423,7 +423,7 @@ async function analyzePackagePolicy(request: {
           message: `Missing required package script: ${requirement.name}`,
           path: request.packageJsonPath,
           profile: request.profile,
-          ...architecturePolicyRuleFields(requirement.ruleId),
+          ...repositoryRuleFields(requirement.ruleId),
         }),
       );
     }
@@ -440,7 +440,7 @@ async function analyzePackagePolicy(request: {
         message: 'Public package repos must declare TypeScript in dependencies or devDependencies.',
         path: request.packageJsonPath,
         profile: request.profile,
-        ...architecturePolicyRuleFields(PUBLIC_PACKAGE_POLICY.dependencyRules.typescript),
+        ...repositoryRuleFields(PUBLIC_PACKAGE_POLICY.dependencyRules.typescript),
       }),
     );
   }
@@ -463,7 +463,7 @@ async function analyzePackagePolicy(request: {
         message: 'Public package repos must declare @types/bun in devDependencies.',
         path: request.packageJsonPath,
         profile: request.profile,
-        ...architecturePolicyRuleFields(PUBLIC_PACKAGE_POLICY.dependencyRules.bunTypes),
+        ...repositoryRuleFields(PUBLIC_PACKAGE_POLICY.dependencyRules.bunTypes),
       }),
     );
   }
@@ -475,7 +475,7 @@ async function analyzePackagePolicy(request: {
         message: 'Public package repos must declare @types/node in devDependencies.',
         path: request.packageJsonPath,
         profile: request.profile,
-        ...architecturePolicyRuleFields(PUBLIC_PACKAGE_POLICY.dependencyRules.nodeTypes),
+        ...repositoryRuleFields(PUBLIC_PACKAGE_POLICY.dependencyRules.nodeTypes),
       }),
     );
   }
@@ -488,7 +488,7 @@ async function analyzePackagePolicy(request: {
           'This package consumes shared Ankhorage lint/format/knip tooling and must declare @ankhorage/devtools.',
         path: request.packageJsonPath,
         profile: request.profile,
-        ...architecturePolicyRuleFields(PUBLIC_PACKAGE_POLICY.dependencyRules.devtools),
+        ...repositoryRuleFields(PUBLIC_PACKAGE_POLICY.dependencyRules.devtools),
       }),
     );
   }
@@ -504,7 +504,7 @@ async function analyzePackagePolicy(request: {
         message: 'This package owns Paradox docs generation and must declare @ankhorage/paradox.',
         path: request.packageJsonPath,
         profile: request.profile,
-        ...architecturePolicyRuleFields(PUBLIC_PACKAGE_POLICY.dependencyRules.paradox),
+        ...repositoryRuleFields(PUBLIC_PACKAGE_POLICY.dependencyRules.paradox),
       }),
     );
   }
@@ -546,7 +546,7 @@ function createChangesetsDependencyDiagnostic(request: {
       : 'Public package repos must not declare @changesets/cli directly; @ankhorage/devtools owns Changesets execution.',
     path: request.packageJsonPath,
     profile: request.profile,
-    ...architecturePolicyRuleFields(PUBLIC_PACKAGE_POLICY.dependencyRules.changesets),
+    ...repositoryRuleFields(PUBLIC_PACKAGE_POLICY.dependencyRules.changesets),
   });
 }
 
@@ -943,7 +943,7 @@ async function maybeRequirePath(
       message: `Missing expected repo artifact: ${relativePath}`,
       path: absolutePath,
       profile: 'public-package',
-      ...architecturePolicyRuleFields(ruleId),
+      ...repositoryRuleFields(ruleId),
     }),
   );
   plannedChanges.push(
@@ -974,7 +974,7 @@ function requireNonEmptyStringField(request: {
       message: `package.json must define a non-empty "${request.fieldName}" field.`,
       path: request.packageJsonPath,
       profile: request.profile,
-      ...architecturePolicyRuleFields(request.ruleId),
+      ...repositoryRuleFields(request.ruleId),
     }),
   );
 }
@@ -997,7 +997,7 @@ function requireRecordField(request: {
       message: `package.json must define an object "${request.fieldName}" field.`,
       path: request.packageJsonPath,
       profile: request.profile,
-      ...architecturePolicyRuleFields(request.ruleId),
+      ...repositoryRuleFields(request.ruleId),
     }),
   );
 }
@@ -1020,7 +1020,7 @@ function requireStringArrayField(request: {
       message: `package.json must define a non-empty string array "${request.fieldName}" field.`,
       path: request.packageJsonPath,
       profile: request.profile,
-      ...architecturePolicyRuleFields(request.ruleId),
+      ...repositoryRuleFields(request.ruleId),
     }),
   );
 }
@@ -1113,11 +1113,9 @@ function createEarlyResult(targetPath: string, diagnostic: DoctorDiagnostic): Do
   };
 }
 
-/*** Return canonical rule id and severity for a Policy-owned generic package rule. */
-function architecturePolicyRuleFields(
-  ruleId: DoctorRuleId,
-): Pick<DoctorDiagnostic, 'ruleId' | 'severity'> {
-  const rule = getArchitecturePolicyRule(ruleId);
+/*** Return canonical rule id and severity from the repository Rules provider. */
+function repositoryRuleFields(ruleId: DoctorRuleId): Pick<DoctorDiagnostic, 'ruleId' | 'severity'> {
+  const rule = getRepositoryRule(ruleId);
   return { ruleId: rule.id, severity: rule.severity };
 }
 

package/src/bunPolicyAnalysis.ts

@@ -1,16 +1,17 @@
 import { promises as fs } from 'node:fs';
 import path from 'node:path';
 
-import { REPOSITORY_POLICY } from '@ankhorage/policy/repository';
+import { REPOSITORY_RULE_IDS, REPOSITORY_RULE_METADATA } from '@ankhorage/rules-repository';
 
 import type { DoctorAnalysisResult } from './analysis.js';
 import type { DoctorDiagnostic } from './diagnostics.js';
+import { getRepositoryRule } from './utils/getRepositoryRule.js';
 
-const BUN_POLICY = REPOSITORY_POLICY.runtime.bun;
+const BUN_POLICY = REPOSITORY_RULE_METADATA.runtime.bun;
 const REPAIR_HINT = 'Run "ankh devtools sync" to repair the managed Bun state.';
 const BUN_VERSION_PATTERN = /^\s*bun-version:\s*['"]?([^'"\s#]+)['"]?\s*(?:#.*)?$/mu;
 
-type RepositoryPolicyRule = (typeof REPOSITORY_POLICY.rules)[keyof typeof REPOSITORY_POLICY.rules];
+type RepositoryRule = ReturnType<typeof getRepositoryRule>;
 type WorkflowTarget = (typeof BUN_POLICY.workflowTargets)[number];
 
 /***
@@ -53,7 +54,7 @@ function analyzePackageBunPolicy(
       location: 'package.json#packageManager',
       path: packageJsonPath,
       profile: result.profile,
-      rule: REPOSITORY_POLICY.rules.packageManager,
+      rule: getRepositoryRule(REPOSITORY_RULE_IDS.bunPackageManager),
     });
   }
 
@@ -68,7 +69,7 @@ function analyzePackageBunPolicy(
       location: 'package.json#devDependencies.@types/bun',
       path: packageJsonPath,
       profile: result.profile,
-      rule: REPOSITORY_POLICY.rules.bunTypes,
+      rule: getRepositoryRule(REPOSITORY_RULE_IDS.bunTypes),
     });
   }
 
@@ -152,7 +153,7 @@ function pushMismatch(
     readonly location: string;
     readonly path: string;
     readonly profile: DoctorAnalysisResult['profile'];
-    readonly rule: RepositoryPolicyRule;
+    readonly rule: RepositoryRule;
   },
 ): void {
   if (input.actual === input.expected) return;
@@ -167,17 +168,6 @@ function pushMismatch(
   });
 }
 
-/***
- * Resolves one stable repository rule by its Policy-owned id.
- */
-function getRepositoryRule(ruleId: string): RepositoryPolicyRule {
-  const rule = Object.values(REPOSITORY_POLICY.rules).find((entry) => entry.id === ruleId);
-  if (rule === undefined) {
-    throw new Error(`Unknown repository policy rule: ${ruleId}`);
-  }
-  return rule;
-}
-
 /***
  * Copies updated diagnostics into the analysis result and optional fix plan.
  */