@ankhorage/rules 0.2.0

package/dist/features/configuration/domain/validateRulesConfig.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"validateRulesConfig.js","sourceRoot":"","sources":["../../../../src/features/configuration/domain/validateRulesConfig.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,2BAA2B,CAAC;AAYrD,wFAAwF;AACxF,MAAM,UAAU,mBAAmB,CACjC,KAAc,EACd,UAAkD,EAAE;IAEpD,MAAM,gBAAgB,GAAG,4BAA4B,CAAC,KAAK,CAAC,CAAC;IAC7D,IAAI,gBAAgB,CAAC,MAAM,KAAK,IAAI;QAAE,OAAO,gBAAgB,CAAC;IAE9D,MAAM,WAAW,GAAG,uBAAuB,CAAC,gBAAgB,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC9E,OAAO;QACL,MAAM,EAAE,WAAW,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,gBAAgB,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI;QACjE,WAAW;KACZ,CAAC;AACJ,CAAC;AAED,wFAAwF;AACxF,SAAS,4BAA4B,CAAC,KAAc;IAClD,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC;QAAE,OAAO,aAAa,CAAC,oCAAoC,CAAC,CAAC;IACjF,IAAI,KAAK,CAAC,OAAO,KAAK,CAAC;QAAE,OAAO,aAAa,CAAC,iCAAiC,EAAE,SAAS,CAAC,CAAC;IAC5F,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC;QAChC,OAAO,aAAa,CAAC,sCAAsC,EAAE,OAAO,CAAC,CAAC;IACxE,CAAC;IAED,MAAM,WAAW,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,uBAAuB,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC,CAAC;IAC3F,MAAM,WAAW,GAAG,WAAW,CAAC,OAAO,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;IACxE,IAAI,WAAW,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC;IAEjE,MAAM,KAAK,GAAG,WAAW,CAAC,OAAO,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAC3F,MAAM,YAAY,GAAG,oBAAoB,CAAC,KAAK,CAAC,CAAC;IACjD,IAAI,YAAY,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC5B,OAAO;YACL,MAAM,EAAE,IAAI;YACZ,WAAW,EAAE,YAAY,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC;gBACrC,IAAI,EAAE,iBAAiB;gBACvB,OAAO,EAAE,+BAA+B,EAAE,mBAAmB;gBAC7D,IAAI,EAAE,OAAO;gBACb,MAAM,EAAE,EAAE;aACX,CAAC,CAAC;SACJ,CAAC;IACJ,CAAC;IAED,OAAO,EAAE,MAAM,EAAE,EAAE,OAAO,EAAE,CAAC,EAAE,KAAK,EAAE,EAAE,WAAW,EAAE,EAAE,EAAE,CAAC;AAC5D,CAAC;AAED,4FAA4F;AAC5F,SAAS,uBAAuB,CAC9B,KAAc,EACd,KAAa;IAKb,MAAM,IAAI,GAAG,SAAS,KAAK,GAAG,CAAC;IAC/B,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;QACrB,OAAO,gBAAgB,CAAC,gBAAgB,EAAE,IAAI,EAAE,oBAAoB,CAAC,CAAC;IACxE,CAAC;IACD,IAAI,CAAC,gBAAgB,CAAC,KAAK,CAAC,EAAE,CAAC,EAAE,CAAC;QAChC,OAAO,gBAAgB,CAAC,iBAAiB,EAAE,GAAG,IAAI,KAAK,EAAE,+BAA+B,CAAC,CAAC;IAC5F,CAAC;IACD,IAAI,OAAO,KAAK,CAAC,OAAO,KAAK,SAAS,EAAE,CAAC;QACvC,OAAO,gBAAgB,CACrB,gBAAgB,EAChB,GAAG,IAAI,UAAU,EACjB,gCAAgC,EAChC,KAAK,CAAC,EAAE,CACT,CAAC;IACJ,CAAC;IACD,IAAI,KAAK,CAAC,QAAQ,KAAK,SAAS,IAAI,CAAC,cAAc,CAAC,KAAK,CAAC,QAAQ,CAAC,EAAE,CAAC;QACpE,OAAO,gBAAgB,CACrB,kBAAkB,EAClB,GAAG,IAAI,WAAW,EAClB,4BAA4B,EAC5B,KAAK,CAAC,EAAE,CACT,CAAC;IACJ,CAAC;IACD,IAAI,KAAK,CAAC,OAAO,KAAK,SAAS,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC;QAC/D,OAAO,gBAAgB,CACrB,iBAAiB,EACjB,GAAG,IAAI,UAAU,EACjB,iCAAiC,EACjC,KAAK,CAAC,EAAE,CACT,CAAC;IACJ,CAAC;IAED,OAAO;QACL,WAAW,EAAE,EAAE;QACf,IAAI,EAAE;YACJ,EAAE,EAAE,KAAK,CAAC,EAAE;YACZ,OAAO,EAAE,KAAK,CAAC,OAAO;YACtB,GAAG,CAAC,KAAK,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAE,CAAC;YACrE,GAAG,CAAC,KAAK,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,CAAC;SACnE;KACF,CAAC;AACJ,CAAC;AAED,yGAAyG;AACzG,SAAS,uBAAuB,CAC9B,MAAmB,EACnB,OAA+C;IAE/C,MAAM,EAAE,QAAQ,EAAE,GAAG,OAAO,CAAC;IAC7B,IAAI,QAAQ,KAAK,SAAS;QAAE,OAAO,EAAE,CAAC;IAEtC,MAAM,qBAAqB,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,YAAY,IAAI,EAAE,CAAC,CAAC;IAClE,OAAO,MAAM,CAAC,KAAK,CAAC,MAAM,CAA0B,CAAC,WAAW,EAAE,cAAc,EAAE,KAAK,EAAE,EAAE;QACzF,IAAI,CAAC,cAAc,CAAC,OAAO;YAAE,OAAO,WAAW,CAAC;QAChD,MAAM,IAAI,GAAG,QAAQ,CAAC,QAAQ,CAAC,GAAG,CAAC,cAAc,CAAC,EAAE,CAAC,CAAC;QACtD,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;YACvB,OAAO;gBACL,GAAG,WAAW;gBACd;oBACE,IAAI,EAAE,cAAuB;oBAC7B,OAAO,EAAE,uCAAuC,cAAc,CAAC,EAAE,IAAI;oBACrE,IAAI,EAAE,SAAS,KAAK,MAAM;oBAC1B,MAAM,EAAE,cAAc,CAAC,EAAE;iBAC1B;aACF,CAAC;QACJ,CAAC;QAED,MAAM,mBAAmB,GACvB,OAAO,CAAC,YAAY,KAAK,SAAS;YAChC,CAAC,CAAC,EAAE;YACJ,CAAC,CAAC,CAAC,IAAI,CAAC,oBAAoB,IAAI,EAAE,CAAC,CAAC,MAAM,CACtC,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC,qBAAqB,CAAC,GAAG,CAAC,UAAU,CAAC,CACvD,CAAC;QACR,MAAM,qBAAqB,GAAG,mBAAmB,CAAC,GAAG,CAAC,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC;YACrE,IAAI,EAAE,oBAA6B;YACnC,OAAO,EAAE,SAAS,IAAI,CAAC,EAAE,sCAAsC,UAAU,IAAI;YAC7E,IAAI,EAAE,SAAS,KAAK,GAAG;YACvB,MAAM,EAAE,IAAI,CAAC,EAAE;SAChB,CAAC,CAAC,CAAC;QACJ,MAAM,iBAAiB,GAAG,CAAC,IAAI,CAAC,eAAe,EAAE,CAAC,cAAc,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC,GAAG,CAClF,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC;YACf,IAAI,EAAE,iBAA0B;YAChC,OAAO,EAAE,SAAS,IAAI,CAAC,EAAE,MAAM,UAAU,CAAC,OAAO,EAAE;YACnD,MAAM,EAAE,IAAI,CAAC,EAAE;YACf,GAAG,CAAC,UAAU,CAAC,IAAI,KAAK,SAAS;gBAC/B,CAAC,CAAC,EAAE;gBACJ,CAAC,CAAC,EAAE,IAAI,EAAE,SAAS,KAAK,aAAa,UAAU,CAAC,IAAI,EAAE,EAAE,CAAC;SAC5D,CAAC,CACH,CAAC;QACF,OAAO,CAAC,GAAG,WAAW,EAAE,GAAG,qBAAqB,EAAE,GAAG,iBAAiB,CAAC,CAAC;IAC1E,CAAC,EAAE,EAAE,CAAC,CAAC;AACT,CAAC;AAED,gEAAgE;AAChE,SAAS,aAAa,CAAC,OAAe,EAAE,IAAa;IACnD,OAAO;QACL,MAAM,EAAE,IAAI;QACZ,WAAW,EAAE,CAAC,EAAE,IAAI,EAAE,gBAAgB,EAAE,OAAO,EAAE,GAAG,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC;KAC5F,CAAC;AACJ,CAAC;AAED,2EAA2E;AAC3E,SAAS,gBAAgB,CACvB,IAAmC,EACnC,IAAY,EACZ,MAAc,EACd,MAAe;IAEf,OAAO;QACL,IAAI,EAAE,IAAI;QACV,WAAW,EAAE;YACX;gBACE,IAAI;gBACJ,OAAO,EAAE,cAAc,IAAI,IAAI,MAAM,EAAE;gBACvC,IAAI;gBACJ,GAAG,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC;aAC5C;SACF;KACF,CAAC;AACJ,CAAC;AAED,uFAAuF;AACvF,SAAS,oBAAoB,CAAC,KAAiC;IAC7D,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,OAAO,KAAK,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,EAAE;QAC5B,IAAI,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;YAAE,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACxC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAClB,OAAO,EAAE,CAAC;IACZ,CAAC,CAAC,CAAC;AACL,CAAC;AAED,kEAAkE;AAClE,SAAS,cAAc,CAAC,KAAc;IACpC,OAAO,KAAK,KAAK,OAAO,IAAI,KAAK,KAAK,MAAM,IAAI,KAAK,KAAK,SAAS,CAAC;AACtE,CAAC;AAED,oFAAoF;AACpF,SAAS,WAAW,CAAC,KAAc;IACjC,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,SAAS,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC;IAC3F,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;IAC7D,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;IAC1D,OAAO,QAAQ,CAAC,KAAK,CAAC,IAAI,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;AACpE,CAAC;AAED,8EAA8E;AAC9E,SAAS,gBAAgB,CAAC,KAAc;IACtC,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,CAAC;AAC9D,CAAC","sourcesContent":["import { isRecord } from '@ankhorage/utility/object';\n\nimport type {\n  JsonValue,\n  RulesConfig,\n  RulesConfigDiagnostic,\n  RulesConfigRule,\n  RulesConfigValidationOptions,\n  RulesConfigValidationResult,\n  RuleSeverity,\n} from '../../../types/rules.js';\n\n/*** Validate canonical rules.json data, optionally against a concrete rule registry. */\nexport function validateRulesConfig<TContext>(\n  value: unknown,\n  options: RulesConfigValidationOptions<TContext> = {},\n): RulesConfigValidationResult {\n  const structuralResult = validateRulesConfigStructure(value);\n  if (structuralResult.config === null) return structuralResult;\n\n  const diagnostics = validateConfiguredRules(structuralResult.config, options);\n  return {\n    config: diagnostics.length === 0 ? structuralResult.config : null,\n    diagnostics,\n  };\n}\n\n/*** Validate the JSON-only shape before any provider-specific interpretation occurs. */\nfunction validateRulesConfigStructure(value: unknown): RulesConfigValidationResult {\n  if (!isRecord(value)) return invalidConfig('rules.json must contain an object.');\n  if (value.version !== 1) return invalidConfig('rules.json \"version\" must be 1.', 'version');\n  if (!Array.isArray(value.rules)) {\n    return invalidConfig('rules.json \"rules\" must be an array.', 'rules');\n  }\n\n  const ruleResults = value.rules.map((rule, index) => validateRulesConfigRule(rule, index));\n  const diagnostics = ruleResults.flatMap((result) => result.diagnostics);\n  if (diagnostics.length > 0) return { config: null, diagnostics };\n\n  const rules = ruleResults.flatMap((result) => (result.rule === null ? [] : [result.rule]));\n  const duplicateIds = findDuplicateRuleIds(rules);\n  if (duplicateIds.length > 0) {\n    return {\n      config: null,\n      diagnostics: duplicateIds.map((id) => ({\n        code: 'invalid-rule-id',\n        message: `rules.json configures rule \"${id}\" more than once.`,\n        path: 'rules',\n        ruleId: id,\n      })),\n    };\n  }\n\n  return { config: { version: 1, rules }, diagnostics: [] };\n}\n\n/*** Validate one serialized rule selection while retaining its original options exactly. */\nfunction validateRulesConfigRule(\n  value: unknown,\n  index: number,\n): {\n  readonly diagnostics: readonly RulesConfigDiagnostic[];\n  readonly rule: RulesConfigRule | null;\n} {\n  const path = `rules[${index}]`;\n  if (!isRecord(value)) {\n    return invalidRuleField('invalid-config', path, 'must be an object.');\n  }\n  if (!isNonEmptyString(value.id)) {\n    return invalidRuleField('invalid-rule-id', `${path}.id`, 'must define a non-empty \"id\".');\n  }\n  if (typeof value.enabled !== 'boolean') {\n    return invalidRuleField(\n      'invalid-config',\n      `${path}.enabled`,\n      'must define boolean \"enabled\".',\n      value.id,\n    );\n  }\n  if (value.severity !== undefined && !isRuleSeverity(value.severity)) {\n    return invalidRuleField(\n      'invalid-severity',\n      `${path}.severity`,\n      'has an invalid \"severity\".',\n      value.id,\n    );\n  }\n  if (value.options !== undefined && !isJsonValue(value.options)) {\n    return invalidRuleField(\n      'invalid-options',\n      `${path}.options`,\n      'has non-serializable \"options\".',\n      value.id,\n    );\n  }\n\n  return {\n    diagnostics: [],\n    rule: {\n      id: value.id,\n      enabled: value.enabled,\n      ...(value.severity === undefined ? {} : { severity: value.severity }),\n      ...(value.options === undefined ? {} : { options: value.options }),\n    },\n  };\n}\n\n/*** Apply optional registry and capability knowledge without creating provider-specific engine paths. */\nfunction validateConfiguredRules<TContext>(\n  config: RulesConfig,\n  options: RulesConfigValidationOptions<TContext>,\n): readonly RulesConfigDiagnostic[] {\n  const { registry } = options;\n  if (registry === undefined) return [];\n\n  const availableCapabilities = new Set(options.capabilities ?? []);\n  return config.rules.reduce<RulesConfigDiagnostic[]>((diagnostics, configuredRule, index) => {\n    if (!configuredRule.enabled) return diagnostics;\n    const rule = registry.ruleById.get(configuredRule.id);\n    if (rule === undefined) {\n      return [\n        ...diagnostics,\n        {\n          code: 'unknown-rule' as const,\n          message: `rules.json configures unknown rule \"${configuredRule.id}\".`,\n          path: `rules[${index}].id`,\n          ruleId: configuredRule.id,\n        },\n      ];\n    }\n\n    const missingCapabilities =\n      options.capabilities === undefined\n        ? []\n        : (rule.requiredCapabilities ?? []).filter(\n            (capability) => !availableCapabilities.has(capability),\n          );\n    const capabilityDiagnostics = missingCapabilities.map((capability) => ({\n      code: 'missing-capability' as const,\n      message: `Rule \"${rule.id}\" requires unavailable capability \"${capability}\".`,\n      path: `rules[${index}]`,\n      ruleId: rule.id,\n    }));\n    const optionDiagnostics = (rule.validateOptions?.(configuredRule.options) ?? []).map(\n      (diagnostic) => ({\n        code: 'invalid-options' as const,\n        message: `Rule \"${rule.id}\": ${diagnostic.message}`,\n        ruleId: rule.id,\n        ...(diagnostic.path === undefined\n          ? {}\n          : { path: `rules[${index}].options.${diagnostic.path}` }),\n      }),\n    );\n    return [...diagnostics, ...capabilityDiagnostics, ...optionDiagnostics];\n  }, []);\n}\n\n/*** Create a consistent structural configuration diagnostic. */\nfunction invalidConfig(message: string, path?: string): RulesConfigValidationResult {\n  return {\n    config: null,\n    diagnostics: [{ code: 'invalid-config', message, ...(path === undefined ? {} : { path }) }],\n  };\n}\n\n/*** Create a field-specific diagnostic for one invalid configured rule. */\nfunction invalidRuleField(\n  code: RulesConfigDiagnostic['code'],\n  path: string,\n  detail: string,\n  ruleId?: string,\n): { readonly diagnostics: readonly RulesConfigDiagnostic[]; readonly rule: null } {\n  return {\n    rule: null,\n    diagnostics: [\n      {\n        code,\n        message: `rules.json ${path} ${detail}`,\n        path,\n        ...(ruleId === undefined ? {} : { ruleId }),\n      },\n    ],\n  };\n}\n\n/*** Find duplicate explicit rule selections without relying on object-key ordering. */\nfunction findDuplicateRuleIds(rules: readonly RulesConfigRule[]): readonly string[] {\n  const seen = new Set<string>();\n  return rules.flatMap((rule) => {\n    if (seen.has(rule.id)) return [rule.id];\n    seen.add(rule.id);\n    return [];\n  });\n}\n\n/*** Determine whether a value is a supported generic severity. */\nfunction isRuleSeverity(value: unknown): value is RuleSeverity {\n  return value === 'error' || value === 'info' || value === 'warning';\n}\n\n/*** Determine whether a value can be preserved losslessly in JSON configuration. */\nfunction isJsonValue(value: unknown): value is JsonValue {\n  if (value === null || typeof value === 'boolean' || typeof value === 'string') return true;\n  if (typeof value === 'number') return Number.isFinite(value);\n  if (Array.isArray(value)) return value.every(isJsonValue);\n  return isRecord(value) && Object.values(value).every(isJsonValue);\n}\n\n/*** Determine whether a raw configuration field is a non-empty identifier. */\nfunction isNonEmptyString(value: unknown): value is string {\n  return typeof value === 'string' && value.trim().length > 0;\n}\n"]}

package/dist/features/evaluation/domain/createRuleRegistry.d.ts

@@ -0,0 +1,4 @@
+import type { RuleRegistry, RuleSet } from '../../../types/rules.js';
+/*** Create a deterministic registry from independently owned RuleSets. */
+export declare function createRuleRegistry<TContext>(ruleSets: readonly RuleSet<TContext>[]): RuleRegistry<TContext>;
+//# sourceMappingURL=createRuleRegistry.d.ts.map

package/dist/features/evaluation/domain/createRuleRegistry.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"createRuleRegistry.d.ts","sourceRoot":"","sources":["../../../../src/features/evaluation/domain/createRuleRegistry.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAQ,YAAY,EAAE,OAAO,EAAE,MAAM,yBAAyB,CAAC;AAG3E,0EAA0E;AAC1E,wBAAgB,kBAAkB,CAAC,QAAQ,EACzC,QAAQ,EAAE,SAAS,OAAO,CAAC,QAAQ,CAAC,EAAE,GACrC,YAAY,CAAC,QAAQ,CAAC,CAWxB"}

package/dist/features/evaluation/domain/createRuleRegistry.js

@@ -0,0 +1,36 @@
+import { compareRuleEntityIds } from '../../../utils/compareRuleEntityIds.js';
+/*** Create a deterministic registry from independently owned RuleSets. */
+export function createRuleRegistry(ruleSets) {
+    const sortedRuleSets = [...ruleSets].sort(compareRuleEntityIds);
+    assertUniqueRuleSetIds(sortedRuleSets);
+    const rules = sortedRuleSets.flatMap((ruleSet) => ruleSet.rules).sort(compareRuleEntityIds);
+    assertUniqueRuleIds(rules);
+    return {
+        ruleSets: sortedRuleSets,
+        rules,
+        ruleById: new Map(rules.map((rule) => [rule.id, rule])),
+    };
+}
+/*** Reject ambiguous provider composition before evaluating a registry. */
+function assertUniqueRuleSetIds(ruleSets) {
+    const duplicateId = findDuplicateId(ruleSets.map((ruleSet) => ruleSet.id));
+    if (duplicateId !== null)
+        throw new Error(`Duplicate RuleSet ID: ${duplicateId}`);
+}
+/*** Reject multiple providers that claim the same public rule identifier. */
+function assertUniqueRuleIds(rules) {
+    const duplicateId = findDuplicateId(rules.map((rule) => rule.id));
+    if (duplicateId !== null)
+        throw new Error(`Duplicate rule ID: ${duplicateId}`);
+}
+/*** Find the first duplicate in an already deterministic sequence of identifiers. */
+function findDuplicateId(ids) {
+    const seen = new Set();
+    for (const id of ids) {
+        if (seen.has(id))
+            return id;
+        seen.add(id);
+    }
+    return null;
+}
+//# sourceMappingURL=createRuleRegistry.js.map

package/dist/features/evaluation/domain/createRuleRegistry.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"createRuleRegistry.js","sourceRoot":"","sources":["../../../../src/features/evaluation/domain/createRuleRegistry.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,oBAAoB,EAAE,MAAM,wCAAwC,CAAC;AAE9E,0EAA0E;AAC1E,MAAM,UAAU,kBAAkB,CAChC,QAAsC;IAEtC,MAAM,cAAc,GAAG,CAAC,GAAG,QAAQ,CAAC,CAAC,IAAI,CAAC,oBAAoB,CAAC,CAAC;IAChE,sBAAsB,CAAC,cAAc,CAAC,CAAC;IACvC,MAAM,KAAK,GAAG,cAAc,CAAC,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,oBAAoB,CAAC,CAAC;IAC5F,mBAAmB,CAAC,KAAK,CAAC,CAAC;IAE3B,OAAO;QACL,QAAQ,EAAE,cAAc;QACxB,KAAK;QACL,QAAQ,EAAE,IAAI,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC,CAAC;KACxD,CAAC;AACJ,CAAC;AAED,2EAA2E;AAC3E,SAAS,sBAAsB,CAAW,QAAsC;IAC9E,MAAM,WAAW,GAAG,eAAe,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC;IAC3E,IAAI,WAAW,KAAK,IAAI;QAAE,MAAM,IAAI,KAAK,CAAC,yBAAyB,WAAW,EAAE,CAAC,CAAC;AACpF,CAAC;AAED,6EAA6E;AAC7E,SAAS,mBAAmB,CAAW,KAAgC;IACrE,MAAM,WAAW,GAAG,eAAe,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC;IAClE,IAAI,WAAW,KAAK,IAAI;QAAE,MAAM,IAAI,KAAK,CAAC,sBAAsB,WAAW,EAAE,CAAC,CAAC;AACjF,CAAC;AAED,qFAAqF;AACrF,SAAS,eAAe,CAAC,GAAsB;IAC7C,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,KAAK,MAAM,EAAE,IAAI,GAAG,EAAE,CAAC;QACrB,IAAI,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;YAAE,OAAO,EAAE,CAAC;QAC5B,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IACf,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC","sourcesContent":["import type { Rule, RuleRegistry, RuleSet } from '../../../types/rules.js';\nimport { compareRuleEntityIds } from '../../../utils/compareRuleEntityIds.js';\n\n/*** Create a deterministic registry from independently owned RuleSets. */\nexport function createRuleRegistry<TContext>(\n  ruleSets: readonly RuleSet<TContext>[],\n): RuleRegistry<TContext> {\n  const sortedRuleSets = [...ruleSets].sort(compareRuleEntityIds);\n  assertUniqueRuleSetIds(sortedRuleSets);\n  const rules = sortedRuleSets.flatMap((ruleSet) => ruleSet.rules).sort(compareRuleEntityIds);\n  assertUniqueRuleIds(rules);\n\n  return {\n    ruleSets: sortedRuleSets,\n    rules,\n    ruleById: new Map(rules.map((rule) => [rule.id, rule])),\n  };\n}\n\n/*** Reject ambiguous provider composition before evaluating a registry. */\nfunction assertUniqueRuleSetIds<TContext>(ruleSets: readonly RuleSet<TContext>[]): void {\n  const duplicateId = findDuplicateId(ruleSets.map((ruleSet) => ruleSet.id));\n  if (duplicateId !== null) throw new Error(`Duplicate RuleSet ID: ${duplicateId}`);\n}\n\n/*** Reject multiple providers that claim the same public rule identifier. */\nfunction assertUniqueRuleIds<TContext>(rules: readonly Rule<TContext>[]): void {\n  const duplicateId = findDuplicateId(rules.map((rule) => rule.id));\n  if (duplicateId !== null) throw new Error(`Duplicate rule ID: ${duplicateId}`);\n}\n\n/*** Find the first duplicate in an already deterministic sequence of identifiers. */\nfunction findDuplicateId(ids: readonly string[]): string | null {\n  const seen = new Set<string>();\n  for (const id of ids) {\n    if (seen.has(id)) return id;\n    seen.add(id);\n  }\n  return null;\n}\n"]}

package/dist/features/evaluation/domain/evaluateConfiguredRules.d.ts

@@ -0,0 +1,4 @@
+import type { EvaluateConfiguredRulesOptions, RuleEvaluationResult, RuleRegistry, RulesConfig } from '../../../types/rules.js';
+/*** Resolve a configured Rule registry and evaluate its enabled rules without provider branches. */
+export declare function evaluateConfiguredRules<TContext>(context: TContext, config: RulesConfig, registry: RuleRegistry<TContext>, options?: EvaluateConfiguredRulesOptions): RuleEvaluationResult;
+//# sourceMappingURL=evaluateConfiguredRules.d.ts.map

package/dist/features/evaluation/domain/evaluateConfiguredRules.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"evaluateConfiguredRules.d.ts","sourceRoot":"","sources":["../../../../src/features/evaluation/domain/evaluateConfiguredRules.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,8BAA8B,EAE9B,oBAAoB,EAEpB,YAAY,EACZ,WAAW,EAEZ,MAAM,yBAAyB,CAAC;AAIjC,oGAAoG;AACpG,wBAAgB,uBAAuB,CAAC,QAAQ,EAC9C,OAAO,EAAE,QAAQ,EACjB,MAAM,EAAE,WAAW,EACnB,QAAQ,EAAE,YAAY,CAAC,QAAQ,CAAC,EAChC,OAAO,GAAE,8BAAmC,GAC3C,oBAAoB,CA6BtB"}

package/dist/features/evaluation/domain/evaluateConfiguredRules.js

@@ -0,0 +1,52 @@
+import { validateRulesConfig } from '../../configuration/domain/validateRulesConfig.js';
+import { evaluateRules } from './evaluateRules.js';
+/*** Resolve a configured Rule registry and evaluate its enabled rules without provider branches. */
+export function evaluateConfiguredRules(context, config, registry, options = {}) {
+    const validation = validateRulesConfig(config, {
+        registry,
+        capabilities: options.capabilities,
+    });
+    if (validation.config === null) {
+        return {
+            findings: [],
+            diagnostics: validation.diagnostics.map(toEvaluationDiagnostic),
+        };
+    }
+    const enabledConfigurations = validation.config.rules.filter((rule) => rule.enabled);
+    const optionsByRuleId = new Map(enabledConfigurations.map((rule) => [rule.id, rule.options]));
+    const selectedRules = enabledConfigurations.flatMap((configuredRule) => {
+        const rule = registry.ruleById.get(configuredRule.id);
+        return rule === undefined ? [] : [rule];
+    });
+    const result = evaluateRules(context, selectedRules, {
+        capabilities: options.capabilities,
+        optionsByRuleId,
+    });
+    return {
+        diagnostics: result.diagnostics,
+        findings: applyConfiguredSeverities(result.findings, validation.config),
+    };
+}
+/*** Translate config validation failures into the evaluator's portable diagnostic shape. */
+function toEvaluationDiagnostic(diagnostic) {
+    return {
+        code: diagnostic.code === 'missing-capability'
+            ? 'missing-capability'
+            : diagnostic.code === 'unknown-rule'
+                ? 'unknown-rule'
+                : diagnostic.code === 'invalid-options'
+                    ? 'invalid-options'
+                    : 'invalid-config',
+        ruleId: diagnostic.ruleId ?? 'rules.config',
+        message: diagnostic.message,
+    };
+}
+/*** Apply configured severity overrides after providers have produced neutral findings. */
+function applyConfiguredSeverities(findings, config) {
+    const severityByRuleId = new Map(config.rules.map((rule) => [rule.id, rule.severity]));
+    return findings.map((finding) => ({
+        ...finding,
+        severity: severityByRuleId.get(finding.ruleId) ?? finding.severity,
+    }));
+}
+//# sourceMappingURL=evaluateConfiguredRules.js.map

package/dist/features/evaluation/domain/evaluateConfiguredRules.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"evaluateConfiguredRules.js","sourceRoot":"","sources":["../../../../src/features/evaluation/domain/evaluateConfiguredRules.ts"],"names":[],"mappings":"AASA,OAAO,EAAE,mBAAmB,EAAE,MAAM,mDAAmD,CAAC;AACxF,OAAO,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AAEnD,oGAAoG;AACpG,MAAM,UAAU,uBAAuB,CACrC,OAAiB,EACjB,MAAmB,EACnB,QAAgC,EAChC,UAA0C,EAAE;IAE5C,MAAM,UAAU,GAAG,mBAAmB,CAAC,MAAM,EAAE;QAC7C,QAAQ;QACR,YAAY,EAAE,OAAO,CAAC,YAAY;KACnC,CAAC,CAAC;IACH,IAAI,UAAU,CAAC,MAAM,KAAK,IAAI,EAAE,CAAC;QAC/B,OAAO;YACL,QAAQ,EAAE,EAAE;YACZ,WAAW,EAAE,UAAU,CAAC,WAAW,CAAC,GAAG,CAAC,sBAAsB,CAAC;SAChE,CAAC;IACJ,CAAC;IAED,MAAM,qBAAqB,GAAG,UAAU,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IACrF,MAAM,eAAe,GAAG,IAAI,GAAG,CAC7B,qBAAqB,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,EAAE,EAAE,IAAI,CAAC,OAAO,CAAU,CAAC,CACtE,CAAC;IACF,MAAM,aAAa,GAAG,qBAAqB,CAAC,OAAO,CAAC,CAAC,cAAc,EAAE,EAAE;QACrE,MAAM,IAAI,GAAG,QAAQ,CAAC,QAAQ,CAAC,GAAG,CAAC,cAAc,CAAC,EAAE,CAAC,CAAC;QACtD,OAAO,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;IAC1C,CAAC,CAAC,CAAC;IACH,MAAM,MAAM,GAAG,aAAa,CAAC,OAAO,EAAE,aAAa,EAAE;QACnD,YAAY,EAAE,OAAO,CAAC,YAAY;QAClC,eAAe;KAChB,CAAC,CAAC;IAEH,OAAO;QACL,WAAW,EAAE,MAAM,CAAC,WAAW;QAC/B,QAAQ,EAAE,yBAAyB,CAAC,MAAM,CAAC,QAAQ,EAAE,UAAU,CAAC,MAAM,CAAC;KACxE,CAAC;AACJ,CAAC;AAED,4FAA4F;AAC5F,SAAS,sBAAsB,CAAC,UAAiC;IAC/D,OAAO;QACL,IAAI,EACF,UAAU,CAAC,IAAI,KAAK,oBAAoB;YACtC,CAAC,CAAC,oBAAoB;YACtB,CAAC,CAAC,UAAU,CAAC,IAAI,KAAK,cAAc;gBAClC,CAAC,CAAC,cAAc;gBAChB,CAAC,CAAC,UAAU,CAAC,IAAI,KAAK,iBAAiB;oBACrC,CAAC,CAAC,iBAAiB;oBACnB,CAAC,CAAC,gBAAgB;QAC1B,MAAM,EAAE,UAAU,CAAC,MAAM,IAAI,cAAc;QAC3C,OAAO,EAAE,UAAU,CAAC,OAAO;KAC5B,CAAC;AACJ,CAAC;AAED,2FAA2F;AAC3F,SAAS,yBAAyB,CAChC,QAAgC,EAChC,MAAmB;IAEnB,MAAM,gBAAgB,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,EAAE,EAAE,IAAI,CAAC,QAAQ,CAAU,CAAC,CAAC,CAAC;IAChG,OAAO,QAAQ,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;QAChC,GAAG,OAAO;QACV,QAAQ,EAAE,gBAAgB,CAAC,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,OAAO,CAAC,QAAQ;KACnE,CAAC,CAAC,CAAC;AACN,CAAC","sourcesContent":["import type {\n  EvaluateConfiguredRulesOptions,\n  RuleEvaluationDiagnostic,\n  RuleEvaluationResult,\n  RuleFinding,\n  RuleRegistry,\n  RulesConfig,\n  RulesConfigDiagnostic,\n} from '../../../types/rules.js';\nimport { validateRulesConfig } from '../../configuration/domain/validateRulesConfig.js';\nimport { evaluateRules } from './evaluateRules.js';\n\n/*** Resolve a configured Rule registry and evaluate its enabled rules without provider branches. */\nexport function evaluateConfiguredRules<TContext>(\n  context: TContext,\n  config: RulesConfig,\n  registry: RuleRegistry<TContext>,\n  options: EvaluateConfiguredRulesOptions = {},\n): RuleEvaluationResult {\n  const validation = validateRulesConfig(config, {\n    registry,\n    capabilities: options.capabilities,\n  });\n  if (validation.config === null) {\n    return {\n      findings: [],\n      diagnostics: validation.diagnostics.map(toEvaluationDiagnostic),\n    };\n  }\n\n  const enabledConfigurations = validation.config.rules.filter((rule) => rule.enabled);\n  const optionsByRuleId = new Map(\n    enabledConfigurations.map((rule) => [rule.id, rule.options] as const),\n  );\n  const selectedRules = enabledConfigurations.flatMap((configuredRule) => {\n    const rule = registry.ruleById.get(configuredRule.id);\n    return rule === undefined ? [] : [rule];\n  });\n  const result = evaluateRules(context, selectedRules, {\n    capabilities: options.capabilities,\n    optionsByRuleId,\n  });\n\n  return {\n    diagnostics: result.diagnostics,\n    findings: applyConfiguredSeverities(result.findings, validation.config),\n  };\n}\n\n/*** Translate config validation failures into the evaluator's portable diagnostic shape. */\nfunction toEvaluationDiagnostic(diagnostic: RulesConfigDiagnostic): RuleEvaluationDiagnostic {\n  return {\n    code:\n      diagnostic.code === 'missing-capability'\n        ? 'missing-capability'\n        : diagnostic.code === 'unknown-rule'\n          ? 'unknown-rule'\n          : diagnostic.code === 'invalid-options'\n            ? 'invalid-options'\n            : 'invalid-config',\n    ruleId: diagnostic.ruleId ?? 'rules.config',\n    message: diagnostic.message,\n  };\n}\n\n/*** Apply configured severity overrides after providers have produced neutral findings. */\nfunction applyConfiguredSeverities(\n  findings: readonly RuleFinding[],\n  config: RulesConfig,\n): readonly RuleFinding[] {\n  const severityByRuleId = new Map(config.rules.map((rule) => [rule.id, rule.severity] as const));\n  return findings.map((finding) => ({\n    ...finding,\n    severity: severityByRuleId.get(finding.ruleId) ?? finding.severity,\n  }));\n}\n"]}

package/dist/features/evaluation/domain/evaluateRules.d.ts

@@ -0,0 +1,4 @@
+import type { EvaluateRulesOptions, Rule, RuleEvaluationResult } from '../../../types/rules.js';
+/*** Evaluate unrelated rules in deterministic identifier order through one generic mechanism. */
+export declare function evaluateRules<TContext>(context: TContext, rules: readonly Rule<TContext>[], options?: EvaluateRulesOptions): RuleEvaluationResult;
+//# sourceMappingURL=evaluateRules.d.ts.map

package/dist/features/evaluation/domain/evaluateRules.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"evaluateRules.d.ts","sourceRoot":"","sources":["../../../../src/features/evaluation/domain/evaluateRules.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,oBAAoB,EACpB,IAAI,EAEJ,oBAAoB,EAGrB,MAAM,yBAAyB,CAAC;AAGjC,iGAAiG;AACjG,wBAAgB,aAAa,CAAC,QAAQ,EACpC,OAAO,EAAE,QAAQ,EACjB,KAAK,EAAE,SAAS,IAAI,CAAC,QAAQ,CAAC,EAAE,EAChC,OAAO,GAAE,oBAAyB,GACjC,oBAAoB,CAWtB"}

package/dist/features/evaluation/domain/evaluateRules.js

@@ -0,0 +1,53 @@
+import { compareRuleEntityIds } from '../../../utils/compareRuleEntityIds.js';
+/*** Evaluate unrelated rules in deterministic identifier order through one generic mechanism. */
+export function evaluateRules(context, rules, options = {}) {
+    const availableCapabilities = new Set(options.capabilities ?? []);
+    const orderedRules = [...rules].sort(compareRuleEntityIds);
+    const results = orderedRules.map((rule) => evaluateRule(context, rule, availableCapabilities, options));
+    return {
+        diagnostics: results.flatMap((result) => result.diagnostics),
+        findings: results.flatMap((result) => result.findings),
+    };
+}
+/*** Evaluate one rule only when its declared input capabilities are available. */
+function evaluateRule(context, rule, availableCapabilities, options) {
+    const missingCapabilities = (rule.requiredCapabilities ?? []).filter((capability) => !availableCapabilities.has(capability));
+    if (missingCapabilities.length > 0) {
+        return {
+            findings: [],
+            diagnostics: missingCapabilities.map((capability) => ({
+                code: 'missing-capability',
+                ruleId: rule.id,
+                message: `Rule "${rule.id}" requires unavailable capability "${capability}".`,
+            })),
+        };
+    }
+    const ruleOptions = options.optionsByRuleId?.get(rule.id);
+    const optionDiagnostics = rule.validateOptions?.(ruleOptions) ?? [];
+    if (optionDiagnostics.length > 0) {
+        return {
+            findings: [],
+            diagnostics: optionDiagnostics.map((diagnostic) => ({
+                code: 'invalid-options',
+                ruleId: rule.id,
+                message: `Rule "${rule.id}": ${diagnostic.message}`,
+            })),
+        };
+    }
+    return {
+        diagnostics: [],
+        findings: rule
+            .evaluate({ context, options: ruleOptions })
+            .map((finding) => canonicalizeFinding(finding, rule.id, rule.defaultSeverity)),
+    };
+}
+/*** Preserve provider evidence while making identifier and severity engine-controlled facts. */
+function canonicalizeFinding(finding, ruleId, severity) {
+    return {
+        ...finding,
+        ruleId,
+        severity,
+        subjects: [...finding.subjects].sort(compareRuleEntityIds),
+    };
+}
+//# sourceMappingURL=evaluateRules.js.map

package/dist/features/evaluation/domain/evaluateRules.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"evaluateRules.js","sourceRoot":"","sources":["../../../../src/features/evaluation/domain/evaluateRules.ts"],"names":[],"mappings":"AAQA,OAAO,EAAE,oBAAoB,EAAE,MAAM,wCAAwC,CAAC;AAE9E,iGAAiG;AACjG,MAAM,UAAU,aAAa,CAC3B,OAAiB,EACjB,KAAgC,EAChC,UAAgC,EAAE;IAElC,MAAM,qBAAqB,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,YAAY,IAAI,EAAE,CAAC,CAAC;IAClE,MAAM,YAAY,GAAG,CAAC,GAAG,KAAK,CAAC,CAAC,IAAI,CAAC,oBAAoB,CAAC,CAAC;IAC3D,MAAM,OAAO,GAAG,YAAY,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CACxC,YAAY,CAAC,OAAO,EAAE,IAAI,EAAE,qBAAqB,EAAE,OAAO,CAAC,CAC5D,CAAC;IAEF,OAAO;QACL,WAAW,EAAE,OAAO,CAAC,OAAO,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,WAAW,CAAC;QAC5D,QAAQ,EAAE,OAAO,CAAC,OAAO,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC;KACvD,CAAC;AACJ,CAAC;AAED,kFAAkF;AAClF,SAAS,YAAY,CACnB,OAAiB,EACjB,IAAoB,EACpB,qBAA0C,EAC1C,OAA6B;IAK7B,MAAM,mBAAmB,GAAG,CAAC,IAAI,CAAC,oBAAoB,IAAI,EAAE,CAAC,CAAC,MAAM,CAClE,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC,qBAAqB,CAAC,GAAG,CAAC,UAAU,CAAC,CACvD,CAAC;IACF,IAAI,mBAAmB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACnC,OAAO;YACL,QAAQ,EAAE,EAAE;YACZ,WAAW,EAAE,mBAAmB,CAAC,GAAG,CAAC,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC;gBACpD,IAAI,EAAE,oBAAoB;gBAC1B,MAAM,EAAE,IAAI,CAAC,EAAE;gBACf,OAAO,EAAE,SAAS,IAAI,CAAC,EAAE,sCAAsC,UAAU,IAAI;aAC9E,CAAC,CAAC;SACJ,CAAC;IACJ,CAAC;IAED,MAAM,WAAW,GAAG,OAAO,CAAC,eAAe,EAAE,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAC1D,MAAM,iBAAiB,GAAG,IAAI,CAAC,eAAe,EAAE,CAAC,WAAW,CAAC,IAAI,EAAE,CAAC;IACpE,IAAI,iBAAiB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACjC,OAAO;YACL,QAAQ,EAAE,EAAE;YACZ,WAAW,EAAE,iBAAiB,CAAC,GAAG,CAAC,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC;gBAClD,IAAI,EAAE,iBAAiB;gBACvB,MAAM,EAAE,IAAI,CAAC,EAAE;gBACf,OAAO,EAAE,SAAS,IAAI,CAAC,EAAE,MAAM,UAAU,CAAC,OAAO,EAAE;aACpD,CAAC,CAAC;SACJ,CAAC;IACJ,CAAC;IAED,OAAO;QACL,WAAW,EAAE,EAAE;QACf,QAAQ,EAAE,IAAI;aACX,QAAQ,CAAC,EAAE,OAAO,EAAE,OAAO,EAAE,WAAW,EAAE,CAAC;aAC3C,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,mBAAmB,CAAC,OAAO,EAAE,IAAI,CAAC,EAAE,EAAE,IAAI,CAAC,eAAe,CAAC,CAAC;KACjF,CAAC;AACJ,CAAC;AAED,gGAAgG;AAChG,SAAS,mBAAmB,CAC1B,OAAoB,EACpB,MAAc,EACd,QAAsB;IAEtB,OAAO;QACL,GAAG,OAAO;QACV,MAAM;QACN,QAAQ;QACR,QAAQ,EAAE,CAAC,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,oBAAoB,CAAC;KAC3D,CAAC;AACJ,CAAC","sourcesContent":["import type {\n  EvaluateRulesOptions,\n  Rule,\n  RuleEvaluationDiagnostic,\n  RuleEvaluationResult,\n  RuleFinding,\n  RuleSeverity,\n} from '../../../types/rules.js';\nimport { compareRuleEntityIds } from '../../../utils/compareRuleEntityIds.js';\n\n/*** Evaluate unrelated rules in deterministic identifier order through one generic mechanism. */\nexport function evaluateRules<TContext>(\n  context: TContext,\n  rules: readonly Rule<TContext>[],\n  options: EvaluateRulesOptions = {},\n): RuleEvaluationResult {\n  const availableCapabilities = new Set(options.capabilities ?? []);\n  const orderedRules = [...rules].sort(compareRuleEntityIds);\n  const results = orderedRules.map((rule) =>\n    evaluateRule(context, rule, availableCapabilities, options),\n  );\n\n  return {\n    diagnostics: results.flatMap((result) => result.diagnostics),\n    findings: results.flatMap((result) => result.findings),\n  };\n}\n\n/*** Evaluate one rule only when its declared input capabilities are available. */\nfunction evaluateRule<TContext>(\n  context: TContext,\n  rule: Rule<TContext>,\n  availableCapabilities: ReadonlySet<string>,\n  options: EvaluateRulesOptions,\n): {\n  readonly diagnostics: readonly RuleEvaluationDiagnostic[];\n  readonly findings: readonly RuleFinding[];\n} {\n  const missingCapabilities = (rule.requiredCapabilities ?? []).filter(\n    (capability) => !availableCapabilities.has(capability),\n  );\n  if (missingCapabilities.length > 0) {\n    return {\n      findings: [],\n      diagnostics: missingCapabilities.map((capability) => ({\n        code: 'missing-capability',\n        ruleId: rule.id,\n        message: `Rule \"${rule.id}\" requires unavailable capability \"${capability}\".`,\n      })),\n    };\n  }\n\n  const ruleOptions = options.optionsByRuleId?.get(rule.id);\n  const optionDiagnostics = rule.validateOptions?.(ruleOptions) ?? [];\n  if (optionDiagnostics.length > 0) {\n    return {\n      findings: [],\n      diagnostics: optionDiagnostics.map((diagnostic) => ({\n        code: 'invalid-options',\n        ruleId: rule.id,\n        message: `Rule \"${rule.id}\": ${diagnostic.message}`,\n      })),\n    };\n  }\n\n  return {\n    diagnostics: [],\n    findings: rule\n      .evaluate({ context, options: ruleOptions })\n      .map((finding) => canonicalizeFinding(finding, rule.id, rule.defaultSeverity)),\n  };\n}\n\n/*** Preserve provider evidence while making identifier and severity engine-controlled facts. */\nfunction canonicalizeFinding(\n  finding: RuleFinding,\n  ruleId: string,\n  severity: RuleSeverity,\n): RuleFinding {\n  return {\n    ...finding,\n    ruleId,\n    severity,\n    subjects: [...finding.subjects].sort(compareRuleEntityIds),\n  };\n}\n"]}

package/dist/features/evaluation/domain/resolveRulesStatus.d.ts

@@ -0,0 +1,4 @@
+import type { RuleEvaluationResult, RulesStatusDescriptor } from '../../../types/rules.js';
+/*** Summarize the complete Rules evaluation result without treating failed evaluation as canonical. */
+export declare function resolveRulesStatus(result: Pick<RuleEvaluationResult, 'diagnostics' | 'findings'>): RulesStatusDescriptor;
+//# sourceMappingURL=resolveRulesStatus.d.ts.map

package/dist/features/evaluation/domain/resolveRulesStatus.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"resolveRulesStatus.d.ts","sourceRoot":"","sources":["../../../../src/features/evaluation/domain/resolveRulesStatus.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,oBAAoB,EAAE,qBAAqB,EAAE,MAAM,yBAAyB,CAAC;AAE3F,uGAAuG;AACvG,wBAAgB,kBAAkB,CAChC,MAAM,EAAE,IAAI,CAAC,oBAAoB,EAAE,aAAa,GAAG,UAAU,CAAC,GAC7D,qBAAqB,CAWvB"}

package/dist/features/evaluation/domain/resolveRulesStatus.js

@@ -0,0 +1,12 @@
+/*** Summarize the complete Rules evaluation result without treating failed evaluation as canonical. */
+export function resolveRulesStatus(result) {
+    if (result.diagnostics.length > 0 ||
+        result.findings.some((finding) => finding.severity === 'error')) {
+        return { status: 'invalid', color: 'red' };
+    }
+    if (result.findings.some((finding) => finding.severity === 'warning')) {
+        return { status: 'warnings', color: 'yellow' };
+    }
+    return { status: 'canonical', color: 'green' };
+}
+//# sourceMappingURL=resolveRulesStatus.js.map

package/dist/features/evaluation/domain/resolveRulesStatus.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"resolveRulesStatus.js","sourceRoot":"","sources":["../../../../src/features/evaluation/domain/resolveRulesStatus.ts"],"names":[],"mappings":"AAEA,uGAAuG;AACvG,MAAM,UAAU,kBAAkB,CAChC,MAA8D;IAE9D,IACE,MAAM,CAAC,WAAW,CAAC,MAAM,GAAG,CAAC;QAC7B,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,QAAQ,KAAK,OAAO,CAAC,EAC/D,CAAC;QACD,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC;IAC7C,CAAC;IACD,IAAI,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,QAAQ,KAAK,SAAS,CAAC,EAAE,CAAC;QACtE,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC;IACjD,CAAC;IACD,OAAO,EAAE,MAAM,EAAE,WAAW,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC;AACjD,CAAC","sourcesContent":["import type { RuleEvaluationResult, RulesStatusDescriptor } from '../../../types/rules.js';\n\n/*** Summarize the complete Rules evaluation result without treating failed evaluation as canonical. */\nexport function resolveRulesStatus(\n  result: Pick<RuleEvaluationResult, 'diagnostics' | 'findings'>,\n): RulesStatusDescriptor {\n  if (\n    result.diagnostics.length > 0 ||\n    result.findings.some((finding) => finding.severity === 'error')\n  ) {\n    return { status: 'invalid', color: 'red' };\n  }\n  if (result.findings.some((finding) => finding.severity === 'warning')) {\n    return { status: 'warnings', color: 'yellow' };\n  }\n  return { status: 'canonical', color: 'green' };\n}\n"]}

package/dist/index.d.ts

@@ -0,0 +1,9 @@
+export { writeRulesConfigAsync } from './features/configuration/adapters/filesystem/writeRulesConfigAsync.js';
+export { readRulesConfigAsync } from './features/configuration/composition/readRulesConfigAsync.js';
+export { validateRulesConfig } from './features/configuration/domain/validateRulesConfig.js';
+export { createRuleRegistry } from './features/evaluation/domain/createRuleRegistry.js';
+export { evaluateConfiguredRules } from './features/evaluation/domain/evaluateConfiguredRules.js';
+export { evaluateRules } from './features/evaluation/domain/evaluateRules.js';
+export { resolveRulesStatus } from './features/evaluation/domain/resolveRulesStatus.js';
+export type { EvaluateConfiguredRulesOptions, EvaluateRulesOptions, JsonValue, Rule, RuleCapability, RuleEvaluationDiagnostic, RuleEvaluationResult, RuleFinding, RuleOptionDiagnostic, RuleRegistry, RulesConfig, RulesConfigDiagnostic, RulesConfigReadResult, RulesConfigRule, RulesConfigValidationOptions, RulesConfigValidationResult, RuleSet, RuleSeverity, RuleSourceLocation, RulesStatusDescriptor, RuleSubject, } from './types/rules.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,qBAAqB,EAAE,MAAM,uEAAuE,CAAC;AAC9G,OAAO,EAAE,oBAAoB,EAAE,MAAM,8DAA8D,CAAC;AACpG,OAAO,EAAE,mBAAmB,EAAE,MAAM,wDAAwD,CAAC;AAC7F,OAAO,EAAE,kBAAkB,EAAE,MAAM,oDAAoD,CAAC;AACxF,OAAO,EAAE,uBAAuB,EAAE,MAAM,yDAAyD,CAAC;AAClG,OAAO,EAAE,aAAa,EAAE,MAAM,+CAA+C,CAAC;AAC9E,OAAO,EAAE,kBAAkB,EAAE,MAAM,oDAAoD,CAAC;AACxF,YAAY,EACV,8BAA8B,EAC9B,oBAAoB,EACpB,SAAS,EACT,IAAI,EACJ,cAAc,EACd,wBAAwB,EACxB,oBAAoB,EACpB,WAAW,EACX,oBAAoB,EACpB,YAAY,EACZ,WAAW,EACX,qBAAqB,EACrB,qBAAqB,EACrB,eAAe,EACf,4BAA4B,EAC5B,2BAA2B,EAC3B,OAAO,EACP,YAAY,EACZ,kBAAkB,EAClB,qBAAqB,EACrB,WAAW,GACZ,MAAM,kBAAkB,CAAC"}

package/dist/index.js

@@ -0,0 +1,8 @@
+export { writeRulesConfigAsync } from './features/configuration/adapters/filesystem/writeRulesConfigAsync.js';
+export { readRulesConfigAsync } from './features/configuration/composition/readRulesConfigAsync.js';
+export { validateRulesConfig } from './features/configuration/domain/validateRulesConfig.js';
+export { createRuleRegistry } from './features/evaluation/domain/createRuleRegistry.js';
+export { evaluateConfiguredRules } from './features/evaluation/domain/evaluateConfiguredRules.js';
+export { evaluateRules } from './features/evaluation/domain/evaluateRules.js';
+export { resolveRulesStatus } from './features/evaluation/domain/resolveRulesStatus.js';
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,qBAAqB,EAAE,MAAM,uEAAuE,CAAC;AAC9G,OAAO,EAAE,oBAAoB,EAAE,MAAM,8DAA8D,CAAC;AACpG,OAAO,EAAE,mBAAmB,EAAE,MAAM,wDAAwD,CAAC;AAC7F,OAAO,EAAE,kBAAkB,EAAE,MAAM,oDAAoD,CAAC;AACxF,OAAO,EAAE,uBAAuB,EAAE,MAAM,yDAAyD,CAAC;AAClG,OAAO,EAAE,aAAa,EAAE,MAAM,+CAA+C,CAAC;AAC9E,OAAO,EAAE,kBAAkB,EAAE,MAAM,oDAAoD,CAAC","sourcesContent":["export { writeRulesConfigAsync } from './features/configuration/adapters/filesystem/writeRulesConfigAsync.js';\nexport { readRulesConfigAsync } from './features/configuration/composition/readRulesConfigAsync.js';\nexport { validateRulesConfig } from './features/configuration/domain/validateRulesConfig.js';\nexport { createRuleRegistry } from './features/evaluation/domain/createRuleRegistry.js';\nexport { evaluateConfiguredRules } from './features/evaluation/domain/evaluateConfiguredRules.js';\nexport { evaluateRules } from './features/evaluation/domain/evaluateRules.js';\nexport { resolveRulesStatus } from './features/evaluation/domain/resolveRulesStatus.js';\nexport type {\n  EvaluateConfiguredRulesOptions,\n  EvaluateRulesOptions,\n  JsonValue,\n  Rule,\n  RuleCapability,\n  RuleEvaluationDiagnostic,\n  RuleEvaluationResult,\n  RuleFinding,\n  RuleOptionDiagnostic,\n  RuleRegistry,\n  RulesConfig,\n  RulesConfigDiagnostic,\n  RulesConfigReadResult,\n  RulesConfigRule,\n  RulesConfigValidationOptions,\n  RulesConfigValidationResult,\n  RuleSet,\n  RuleSeverity,\n  RuleSourceLocation,\n  RulesStatusDescriptor,\n  RuleSubject,\n} from './types/rules.js';\n"]}

package/dist/types/rules.d.ts

@@ -0,0 +1,121 @@
+/*** A JSON value that can be stored in a portable Rules configuration or finding. */
+export type JsonValue = boolean | null | number | string | readonly JsonValue[] | {
+    readonly [key: string]: JsonValue;
+};
+/*** A capability that a rule needs from the context supplied by its consumer. */
+export type RuleCapability = string;
+/*** The canonical impact levels used by every Rules provider. */
+export type RuleSeverity = 'error' | 'info' | 'warning';
+/*** An affected semantic subject reported independently of any presentation consumer. */
+export interface RuleSubject {
+    readonly id: string;
+    readonly kind: string;
+    readonly path?: string;
+}
+/*** An optional source location supplied as factual evidence by a provider. */
+export interface RuleSourceLocation {
+    readonly column?: number;
+    readonly endColumn?: number;
+    readonly endLine?: number;
+    readonly line: number;
+    readonly path: string;
+}
+/*** One serializable, consumer-neutral result produced by a rule. */
+export interface RuleFinding<TEvidence extends JsonValue = JsonValue> {
+    readonly evidence: TEvidence;
+    readonly message: string;
+    readonly ruleId: string;
+    readonly severity: RuleSeverity;
+    readonly sourceLocation?: RuleSourceLocation;
+    readonly subjects: readonly RuleSubject[];
+}
+/*** A validation error returned by a provider for its own serializable options. */
+export interface RuleOptionDiagnostic {
+    readonly code: string;
+    readonly message: string;
+    readonly path?: string;
+}
+/*** A deterministic, provider-owned policy unit evaluated by the generic engine. */
+export interface Rule<TContext = unknown, TOptions extends JsonValue = JsonValue, TEvidence extends JsonValue = JsonValue> {
+    readonly defaultSeverity: RuleSeverity;
+    evaluate(input: {
+        readonly context: TContext;
+        readonly options: TOptions | undefined;
+    }): readonly RuleFinding<TEvidence>[];
+    readonly id: string;
+    readonly requiredCapabilities?: readonly RuleCapability[];
+    readonly summary: string;
+    validateOptions?(options: JsonValue | undefined): readonly RuleOptionDiagnostic[];
+}
+/*** A named collection of independently supplied rules that can compose with other providers. */
+export interface RuleSet<TContext = unknown> {
+    readonly id: string;
+    readonly rules: readonly Rule<TContext>[];
+}
+/*** A registry that resolves rules without provider discovery or domain-specific branches. */
+export interface RuleRegistry<TContext = unknown> {
+    readonly ruleSets: readonly RuleSet<TContext>[];
+    readonly rules: readonly Rule<TContext>[];
+    readonly ruleById: ReadonlyMap<string, Rule<TContext>>;
+}
+/*** One enabled/disabled rule selection with serializable provider options. */
+export interface RulesConfigRule {
+    readonly enabled: boolean;
+    readonly id: string;
+    readonly options?: JsonValue;
+    readonly severity?: RuleSeverity;
+}
+/*** The canonical JSON-only configuration stored in a repository rules.json file. */
+export interface RulesConfig {
+    readonly rules: readonly RulesConfigRule[];
+    readonly version: 1;
+}
+/*** A portable diagnostic emitted while parsing or applying a Rules configuration. */
+export interface RulesConfigDiagnostic {
+    readonly code: 'invalid-config' | 'invalid-options' | 'invalid-rule-id' | 'invalid-severity' | 'missing-capability' | 'unknown-rule';
+    readonly message: string;
+    readonly path?: string;
+    readonly ruleId?: string;
+}
+/*** The result of validating a raw JSON configuration against optional provider knowledge. */
+export interface RulesConfigValidationResult {
+    readonly config: RulesConfig | null;
+    readonly diagnostics: readonly RulesConfigDiagnostic[];
+}
+/*** Extra facts used to validate configured rule IDs, options, and required capabilities. */
+export interface RulesConfigValidationOptions<TContext = unknown> {
+    readonly capabilities?: readonly RuleCapability[];
+    readonly registry?: RuleRegistry<TContext>;
+}
+/*** The result of reading a repository rules.json file without hiding parse failures. */
+export interface RulesConfigReadResult {
+    readonly config: RulesConfig | null;
+    readonly diagnostics: readonly RulesConfigDiagnostic[];
+    readonly path: string;
+}
+/*** One execution diagnostic that explains why a configured rule could not run. */
+export interface RuleEvaluationDiagnostic {
+    readonly code: 'invalid-config' | 'invalid-options' | 'missing-capability' | 'unknown-rule';
+    readonly message: string;
+    readonly ruleId: string;
+}
+/*** The deterministic generic result shared by every Rules consumer. */
+export interface RuleEvaluationResult {
+    readonly diagnostics: readonly RuleEvaluationDiagnostic[];
+    readonly findings: readonly RuleFinding[];
+}
+/*** Direct evaluator inputs that are independent of any repository configuration format. */
+export interface EvaluateRulesOptions {
+    readonly capabilities?: readonly RuleCapability[];
+    readonly optionsByRuleId?: ReadonlyMap<string, JsonValue | undefined>;
+}
+/*** Configured evaluator inputs that preserve the caller's explicit capability set. */
+export interface EvaluateConfiguredRulesOptions {
+    readonly capabilities?: readonly RuleCapability[];
+}
+/*** A stable status summary suitable for consumer-specific presentation. */
+export interface RulesStatusDescriptor {
+    readonly color: 'green' | 'red' | 'yellow';
+    readonly status: 'canonical' | 'invalid' | 'warnings';
+}
+//# sourceMappingURL=rules.d.ts.map

package/dist/types/rules.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"rules.d.ts","sourceRoot":"","sources":["../../src/types/rules.ts"],"names":[],"mappings":"AAAA,qFAAqF;AACrF,MAAM,MAAM,SAAS,GACnB,OAAO,GAAG,IAAI,GAAG,MAAM,GAAG,MAAM,GAAG,SAAS,SAAS,EAAE,GAAG;IAAE,QAAQ,EAAE,GAAG,EAAE,MAAM,GAAG,SAAS,CAAA;CAAE,CAAC;AAElG,iFAAiF;AACjF,MAAM,MAAM,cAAc,GAAG,MAAM,CAAC;AAEpC,iEAAiE;AACjE,MAAM,MAAM,YAAY,GAAG,OAAO,GAAG,MAAM,GAAG,SAAS,CAAC;AAExD,yFAAyF;AACzF,MAAM,WAAW,WAAW;IAC1B,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;CACxB;AAED,+EAA+E;AAC/E,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;CACvB;AAED,qEAAqE;AACrE,MAAM,WAAW,WAAW,CAAC,SAAS,SAAS,SAAS,GAAG,SAAS;IAClE,QAAQ,CAAC,QAAQ,EAAE,SAAS,CAAC;IAC7B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,QAAQ,EAAE,YAAY,CAAC;IAChC,QAAQ,CAAC,cAAc,CAAC,EAAE,kBAAkB,CAAC;IAC7C,QAAQ,CAAC,QAAQ,EAAE,SAAS,WAAW,EAAE,CAAC;CAC3C;AAED,mFAAmF;AACnF,MAAM,WAAW,oBAAoB;IACnC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;CACxB;AAED,oFAAoF;AACpF,MAAM,WAAW,IAAI,CACnB,QAAQ,GAAG,OAAO,EAClB,QAAQ,SAAS,SAAS,GAAG,SAAS,EACtC,SAAS,SAAS,SAAS,GAAG,SAAS;IAEvC,QAAQ,CAAC,eAAe,EAAE,YAAY,CAAC;IACvC,QAAQ,CAAC,KAAK,EAAE;QACd,QAAQ,CAAC,OAAO,EAAE,QAAQ,CAAC;QAC3B,QAAQ,CAAC,OAAO,EAAE,QAAQ,GAAG,SAAS,CAAC;KACxC,GAAG,SAAS,WAAW,CAAC,SAAS,CAAC,EAAE,CAAC;IACtC,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,oBAAoB,CAAC,EAAE,SAAS,cAAc,EAAE,CAAC;IAC1D,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,eAAe,CAAC,CAAC,OAAO,EAAE,SAAS,GAAG,SAAS,GAAG,SAAS,oBAAoB,EAAE,CAAC;CACnF;AAED,iGAAiG;AACjG,MAAM,WAAW,OAAO,CAAC,QAAQ,GAAG,OAAO;IACzC,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,KAAK,EAAE,SAAS,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;CAC3C;AAED,8FAA8F;AAC9F,MAAM,WAAW,YAAY,CAAC,QAAQ,GAAG,OAAO;IAC9C,QAAQ,CAAC,QAAQ,EAAE,SAAS,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC;IAChD,QAAQ,CAAC,KAAK,EAAE,SAAS,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;IAC1C,QAAQ,CAAC,QAAQ,EAAE,WAAW,CAAC,MAAM,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC;CACxD;AAED,+EAA+E;AAC/E,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;IAC1B,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,OAAO,CAAC,EAAE,SAAS,CAAC;IAC7B,QAAQ,CAAC,QAAQ,CAAC,EAAE,YAAY,CAAC;CAClC;AAED,qFAAqF;AACrF,MAAM,WAAW,WAAW;IAC1B,QAAQ,CAAC,KAAK,EAAE,SAAS,eAAe,EAAE,CAAC;IAC3C,QAAQ,CAAC,OAAO,EAAE,CAAC,CAAC;CACrB;AAED,sFAAsF;AACtF,MAAM,WAAW,qBAAqB;IACpC,QAAQ,CAAC,IAAI,EACT,gBAAgB,GAChB,iBAAiB,GACjB,iBAAiB,GACjB,kBAAkB,GAClB,oBAAoB,GACpB,cAAc,CAAC;IACnB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;CAC1B;AAED,8FAA8F;AAC9F,MAAM,WAAW,2BAA2B;IAC1C,QAAQ,CAAC,MAAM,EAAE,WAAW,GAAG,IAAI,CAAC;IACpC,QAAQ,CAAC,WAAW,EAAE,SAAS,qBAAqB,EAAE,CAAC;CACxD;AAED,6FAA6F;AAC7F,MAAM,WAAW,4BAA4B,CAAC,QAAQ,GAAG,OAAO;IAC9D,QAAQ,CAAC,YAAY,CAAC,EAAE,SAAS,cAAc,EAAE,CAAC;IAClD,QAAQ,CAAC,QAAQ,CAAC,EAAE,YAAY,CAAC,QAAQ,CAAC,CAAC;CAC5C;AAED,yFAAyF;AACzF,MAAM,WAAW,qBAAqB;IACpC,QAAQ,CAAC,MAAM,EAAE,WAAW,GAAG,IAAI,CAAC;IACpC,QAAQ,CAAC,WAAW,EAAE,SAAS,qBAAqB,EAAE,CAAC;IACvD,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;CACvB;AAED,mFAAmF;AACnF,MAAM,WAAW,wBAAwB;IACvC,QAAQ,CAAC,IAAI,EAAE,gBAAgB,GAAG,iBAAiB,GAAG,oBAAoB,GAAG,cAAc,CAAC;IAC5F,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;CACzB;AAED,wEAAwE;AACxE,MAAM,WAAW,oBAAoB;IACnC,QAAQ,CAAC,WAAW,EAAE,SAAS,wBAAwB,EAAE,CAAC;IAC1D,QAAQ,CAAC,QAAQ,EAAE,SAAS,WAAW,EAAE,CAAC;CAC3C;AAED,4FAA4F;AAC5F,MAAM,WAAW,oBAAoB;IACnC,QAAQ,CAAC,YAAY,CAAC,EAAE,SAAS,cAAc,EAAE,CAAC;IAClD,QAAQ,CAAC,eAAe,CAAC,EAAE,WAAW,CAAC,MAAM,EAAE,SAAS,GAAG,SAAS,CAAC,CAAC;CACvE;AAED,uFAAuF;AACvF,MAAM,WAAW,8BAA8B;IAC7C,QAAQ,CAAC,YAAY,CAAC,EAAE,SAAS,cAAc,EAAE,CAAC;CACnD;AAED,4EAA4E;AAC5E,MAAM,WAAW,qBAAqB;IACpC,QAAQ,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,GAAG,QAAQ,CAAC;IAC3C,QAAQ,CAAC,MAAM,EAAE,WAAW,GAAG,SAAS,GAAG,UAAU,CAAC;CACvD"}

package/dist/types/rules.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=rules.js.map

package/dist/types/rules.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"rules.js","sourceRoot":"","sources":["../../src/types/rules.ts"],"names":[],"mappings":"","sourcesContent":["/*** A JSON value that can be stored in a portable Rules configuration or finding. */\nexport type JsonValue =\n  boolean | null | number | string | readonly JsonValue[] | { readonly [key: string]: JsonValue };\n\n/*** A capability that a rule needs from the context supplied by its consumer. */\nexport type RuleCapability = string;\n\n/*** The canonical impact levels used by every Rules provider. */\nexport type RuleSeverity = 'error' | 'info' | 'warning';\n\n/*** An affected semantic subject reported independently of any presentation consumer. */\nexport interface RuleSubject {\n  readonly id: string;\n  readonly kind: string;\n  readonly path?: string;\n}\n\n/*** An optional source location supplied as factual evidence by a provider. */\nexport interface RuleSourceLocation {\n  readonly column?: number;\n  readonly endColumn?: number;\n  readonly endLine?: number;\n  readonly line: number;\n  readonly path: string;\n}\n\n/*** One serializable, consumer-neutral result produced by a rule. */\nexport interface RuleFinding<TEvidence extends JsonValue = JsonValue> {\n  readonly evidence: TEvidence;\n  readonly message: string;\n  readonly ruleId: string;\n  readonly severity: RuleSeverity;\n  readonly sourceLocation?: RuleSourceLocation;\n  readonly subjects: readonly RuleSubject[];\n}\n\n/*** A validation error returned by a provider for its own serializable options. */\nexport interface RuleOptionDiagnostic {\n  readonly code: string;\n  readonly message: string;\n  readonly path?: string;\n}\n\n/*** A deterministic, provider-owned policy unit evaluated by the generic engine. */\nexport interface Rule<\n  TContext = unknown,\n  TOptions extends JsonValue = JsonValue,\n  TEvidence extends JsonValue = JsonValue,\n> {\n  readonly defaultSeverity: RuleSeverity;\n  evaluate(input: {\n    readonly context: TContext;\n    readonly options: TOptions | undefined;\n  }): readonly RuleFinding<TEvidence>[];\n  readonly id: string;\n  readonly requiredCapabilities?: readonly RuleCapability[];\n  readonly summary: string;\n  validateOptions?(options: JsonValue | undefined): readonly RuleOptionDiagnostic[];\n}\n\n/*** A named collection of independently supplied rules that can compose with other providers. */\nexport interface RuleSet<TContext = unknown> {\n  readonly id: string;\n  readonly rules: readonly Rule<TContext>[];\n}\n\n/*** A registry that resolves rules without provider discovery or domain-specific branches. */\nexport interface RuleRegistry<TContext = unknown> {\n  readonly ruleSets: readonly RuleSet<TContext>[];\n  readonly rules: readonly Rule<TContext>[];\n  readonly ruleById: ReadonlyMap<string, Rule<TContext>>;\n}\n\n/*** One enabled/disabled rule selection with serializable provider options. */\nexport interface RulesConfigRule {\n  readonly enabled: boolean;\n  readonly id: string;\n  readonly options?: JsonValue;\n  readonly severity?: RuleSeverity;\n}\n\n/*** The canonical JSON-only configuration stored in a repository rules.json file. */\nexport interface RulesConfig {\n  readonly rules: readonly RulesConfigRule[];\n  readonly version: 1;\n}\n\n/*** A portable diagnostic emitted while parsing or applying a Rules configuration. */\nexport interface RulesConfigDiagnostic {\n  readonly code:\n    | 'invalid-config'\n    | 'invalid-options'\n    | 'invalid-rule-id'\n    | 'invalid-severity'\n    | 'missing-capability'\n    | 'unknown-rule';\n  readonly message: string;\n  readonly path?: string;\n  readonly ruleId?: string;\n}\n\n/*** The result of validating a raw JSON configuration against optional provider knowledge. */\nexport interface RulesConfigValidationResult {\n  readonly config: RulesConfig | null;\n  readonly diagnostics: readonly RulesConfigDiagnostic[];\n}\n\n/*** Extra facts used to validate configured rule IDs, options, and required capabilities. */\nexport interface RulesConfigValidationOptions<TContext = unknown> {\n  readonly capabilities?: readonly RuleCapability[];\n  readonly registry?: RuleRegistry<TContext>;\n}\n\n/*** The result of reading a repository rules.json file without hiding parse failures. */\nexport interface RulesConfigReadResult {\n  readonly config: RulesConfig | null;\n  readonly diagnostics: readonly RulesConfigDiagnostic[];\n  readonly path: string;\n}\n\n/*** One execution diagnostic that explains why a configured rule could not run. */\nexport interface RuleEvaluationDiagnostic {\n  readonly code: 'invalid-config' | 'invalid-options' | 'missing-capability' | 'unknown-rule';\n  readonly message: string;\n  readonly ruleId: string;\n}\n\n/*** The deterministic generic result shared by every Rules consumer. */\nexport interface RuleEvaluationResult {\n  readonly diagnostics: readonly RuleEvaluationDiagnostic[];\n  readonly findings: readonly RuleFinding[];\n}\n\n/*** Direct evaluator inputs that are independent of any repository configuration format. */\nexport interface EvaluateRulesOptions {\n  readonly capabilities?: readonly RuleCapability[];\n  readonly optionsByRuleId?: ReadonlyMap<string, JsonValue | undefined>;\n}\n\n/*** Configured evaluator inputs that preserve the caller's explicit capability set. */\nexport interface EvaluateConfiguredRulesOptions {\n  readonly capabilities?: readonly RuleCapability[];\n}\n\n/*** A stable status summary suitable for consumer-specific presentation. */\nexport interface RulesStatusDescriptor {\n  readonly color: 'green' | 'red' | 'yellow';\n  readonly status: 'canonical' | 'invalid' | 'warnings';\n}\n"]}

package/dist/utils/compareRuleEntityIds.d.ts

@@ -0,0 +1,7 @@
+/*** Compare Rules-domain entities by identifier using locale-independent code-unit ordering. */
+export declare function compareRuleEntityIds(left: {
+    readonly id: string;
+}, right: {
+    readonly id: string;
+}): number;
+//# sourceMappingURL=compareRuleEntityIds.d.ts.map

package/dist/utils/compareRuleEntityIds.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"compareRuleEntityIds.d.ts","sourceRoot":"","sources":["../../src/utils/compareRuleEntityIds.ts"],"names":[],"mappings":"AAAA,gGAAgG;AAChG,wBAAgB,oBAAoB,CAClC,IAAI,EAAE;IAAE,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAA;CAAE,EAC7B,KAAK,EAAE;IAAE,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAA;CAAE,GAC7B,MAAM,CAIR"}

package/dist/utils/compareRuleEntityIds.js

@@ -0,0 +1,9 @@
+/*** Compare Rules-domain entities by identifier using locale-independent code-unit ordering. */
+export function compareRuleEntityIds(left, right) {
+    if (left.id < right.id)
+        return -1;
+    if (left.id > right.id)
+        return 1;
+    return 0;
+}
+//# sourceMappingURL=compareRuleEntityIds.js.map

package/dist/utils/compareRuleEntityIds.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"compareRuleEntityIds.js","sourceRoot":"","sources":["../../src/utils/compareRuleEntityIds.ts"],"names":[],"mappings":"AAAA,gGAAgG;AAChG,MAAM,UAAU,oBAAoB,CAClC,IAA6B,EAC7B,KAA8B;IAE9B,IAAI,IAAI,CAAC,EAAE,GAAG,KAAK,CAAC,EAAE;QAAE,OAAO,CAAC,CAAC,CAAC;IAClC,IAAI,IAAI,CAAC,EAAE,GAAG,KAAK,CAAC,EAAE;QAAE,OAAO,CAAC,CAAC;IACjC,OAAO,CAAC,CAAC;AACX,CAAC","sourcesContent":["/*** Compare Rules-domain entities by identifier using locale-independent code-unit ordering. */\nexport function compareRuleEntityIds(\n  left: { readonly id: string },\n  right: { readonly id: string },\n): number {\n  if (left.id < right.id) return -1;\n  if (left.id > right.id) return 1;\n  return 0;\n}\n"]}

package/package.json

@@ -0,0 +1,83 @@
+{
+  "name": "@ankhorage/rules",
+  "version": "0.2.0",
+  "description": "Domain-agnostic rule engine and JSON configuration for Ankhorage.",
+  "license": "MIT",
+  "type": "module",
+  "sideEffects": false,
+  "publishConfig": {
+    "access": "public"
+  },
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/ankhorage/rules.git"
+  },
+  "homepage": "https://github.com/ankhorage/rules#readme",
+  "bugs": {
+    "url": "https://github.com/ankhorage/rules/issues"
+  },
+  "files": [
+    "dist",
+    "README.md",
+    "CHANGELOG.md",
+    "LICENSE"
+  ],
+  "main": "./dist/index.js",
+  "types": "./dist/index.d.ts",
+  "exports": {
+    ".": {
+      "types": "./dist/index.d.ts",
+      "import": "./dist/index.js"
+    },
+    "./cli": {
+      "types": "./dist/cli/index.d.ts",
+      "import": "./dist/cli/index.js"
+    },
+    "./package.json": "./package.json"
+  },
+  "bin": {
+    "ankhorage-rules": "./dist/cli/standalone.js"
+  },
+  "ankh": {
+    "category": "rules",
+    "provider": "./dist/cli/index.js",
+    "capabilities": [
+      "rules.config.validate"
+    ]
+  },
+  "devDependencies": {
+    "@ankhorage/ankh": "^0.10.4",
+    "@ankhorage/devtools": "^2.0.8",
+    "@ankhorage/paradox": "^0.2.6",
+    "@types/bun": "^1.4.2",
+    "@types/node": "^26.6.2",
+    "typescript": "~6.0.3"
+  },
+  "dependencies": {
+    "@ankhorage/utility": "^1.9.0"
+  },
+  "packageManager": "bun@1.4.2",
+  "keywords": [
+    "ankhorage",
+    "rules",
+    "configuration",
+    "evaluation"
+  ],
+  "scripts": {
+    "build": "rm -rf dist tsconfig.tsbuildinfo tsconfig.build.tsbuildinfo && bun x tsc -p tsconfig.build.json",
+    "check-types": "bun x tsc --noEmit -p tsconfig.json",
+    "typecheck": "bun run check-types",
+    "test": "bun test",
+    "test:standalone": "bun run build && bun scripts/test-standalone.ts",
+    "docs": "bunx @ankhorage/paradox && ankhorage-prettier --write README.md paradox",
+    "changeset": "ankhorage-changeset",
+    "changeset:status": "ankhorage-changeset status --since=origin/main",
+    "version-packages": "ankhorage-changeset version",
+    "prepack": "bun run build",
+    "lint": "ankhorage-eslint . --max-warnings=0",
+    "lint:fix": "ankhorage-eslint . --fix --max-warnings=0",
+    "format": "ankhorage-prettier --write .",
+    "format:check": "ankhorage-prettier --check .",
+    "knip:check": "ankhorage-knip"
+  }
+}