@codefast/cli 0.12.0 → 0.14.0

package/dist/audit/assertions/domain/double-assertion.js

@@ -0,0 +1,122 @@
+import { parseSync } from "oxc-parser";
+import { isOxcNode } from "#core/oxc-node";
+import { firstLineOf, lineOfOffset } from "#core/source-position";
+/**
+ * The comment that keeps one double assertion, with the reason it has to stay.
+ *
+ * @remarks It covers an assertion on its own line or the line below it, and must carry a reason
+ * after the colon; one that covers nothing is reported, so a kept assertion cannot outlive its cause.
+ *
+ * @since 0.13.0
+ */
+export const DOUBLE_ASSERTION_DIRECTIVE = "codefast-allow-double-assertion";
+const DOUBLE_ASSERTION_REASON = "double assertion through `unknown`/`any` — make the types agree, narrow with a type guard, or keep it " +
+    `with // ${DOUBLE_ASSERTION_DIRECTIVE}: <reason>`;
+// Most files hold neither, so a text probe spares them the parse.
+const CANDIDATE_TEXT = new RegExp(`\\bas\\s+(?:unknown|any)\\b|<(?:unknown|any)>|${DOUBLE_ASSERTION_DIRECTIVE}`);
+function isAssertion(node) {
+    return node.type === "TSAsExpression" || node.type === "TSTypeAssertion";
+}
+/** The assertion an outer one wraps, through any parentheses, when it erases to `unknown` or `any`. */
+function erasingInnerAssertion(outer) {
+    let inner = outer.expression;
+    while (isOxcNode(inner) && inner.type === "ParenthesizedExpression") {
+        inner = inner.expression;
+    }
+    if (!isOxcNode(inner) || !isAssertion(inner) || !isOxcNode(inner.typeAnnotation)) {
+        return undefined;
+    }
+    const erasedTo = inner.typeAnnotation.type;
+    return erasedTo === "TSUnknownKeyword" || erasedTo === "TSAnyKeyword" ? inner : undefined;
+}
+function collectDoubleAssertions(node, found) {
+    let next = node;
+    if (isAssertion(node)) {
+        const inner = erasingInnerAssertion(node);
+        if (inner !== undefined) {
+            found.push(node);
+            // The erased pair is one finding; what it wraps is walked on its own.
+            next = inner;
+        }
+    }
+    for (const value of Object.values(next)) {
+        if (Array.isArray(value)) {
+            for (const item of value) {
+                if (isOxcNode(item)) {
+                    collectDoubleAssertions(item, found);
+                }
+            }
+        }
+        else if (isOxcNode(value)) {
+            collectDoubleAssertions(value, found);
+        }
+    }
+}
+function parseDirective(sourceText, comment) {
+    if (comment.type !== "Line") {
+        return undefined;
+    }
+    const text = comment.value.trim();
+    if (!text.startsWith(DOUBLE_ASSERTION_DIRECTIVE)) {
+        return undefined;
+    }
+    const reason = /^:\s*(\S.*)$/.exec(text.slice(DOUBLE_ASSERTION_DIRECTIVE.length))?.[1] ?? "";
+    return {
+        line: lineOfOffset(sourceText, comment.start),
+        raw: sourceText.slice(comment.start, comment.end),
+        reason,
+        isUsed: false,
+    };
+}
+/**
+ * Scans one TypeScript source for double assertions through `unknown` or `any`, and for directives
+ * that keep none or give no reason.
+ *
+ * @remarks `x as unknown as T`, `(x as unknown) as T` and `<T><unknown>x` are one shape: the
+ * compiler found the two types unrelated, and the pair silences it instead of reconciling them.
+ *
+ * @since 0.13.0
+ */
+export function auditDoubleAssertionSource(filePath, sourceText) {
+    if (!CANDIDATE_TEXT.test(sourceText)) {
+        return [];
+    }
+    const { program, comments } = parseSync(filePath, sourceText);
+    const directives = comments.map((comment) => parseDirective(sourceText, comment)).filter((d) => d !== undefined);
+    const found = [];
+    if (isOxcNode(program)) {
+        collectDoubleAssertions(program, found);
+    }
+    const violations = [];
+    for (const assertion of found) {
+        const line = lineOfOffset(sourceText, assertion.start);
+        const directive = directives.find((candidate) => candidate.reason !== "" && (candidate.line === line || candidate.line === line - 1));
+        if (directive !== undefined) {
+            directive.isUsed = true;
+            continue;
+        }
+        violations.push({
+            line,
+            raw: firstLineOf(sourceText.slice(assertion.start, assertion.end)),
+            reason: DOUBLE_ASSERTION_REASON,
+        });
+    }
+    for (const directive of directives) {
+        if (directive.reason === "") {
+            violations.push({
+                line: directive.line,
+                raw: directive.raw,
+                reason: `a ${DOUBLE_ASSERTION_DIRECTIVE} directive states why after a colon`,
+            });
+        }
+        else if (!directive.isUsed) {
+            violations.push({
+                line: directive.line,
+                raw: directive.raw,
+                reason: `this ${DOUBLE_ASSERTION_DIRECTIVE} directive keeps no double assertion — remove it`,
+            });
+        }
+    }
+    violations.sort((a, b) => a.line - b.line);
+    return violations;
+}

package/dist/audit/assertions/output.d.ts

@@ -0,0 +1,7 @@
+import type { AssertionAuditResult } from "#audit/domain/types";
+/**
+ * Human-readable type-assertion report.
+ *
+ * @since 0.13.0
+ */
+export declare function presentAssertionAuditResult(result: AssertionAuditResult): void;

package/dist/audit/assertions/output.js

@@ -0,0 +1,21 @@
+import { logger } from "#core/logger";
+/**
+ * Human-readable type-assertion report.
+ *
+ * @since 0.13.0
+ */
+export function presentAssertionAuditResult(result) {
+    for (const file of result.files) {
+        logger.out(`\n${file.relativePath}`);
+        for (const { line, raw, reason } of file.violations) {
+            logger.out(`  ${line}: ${raw} → ${reason}`);
+        }
+    }
+    const allowlistSuffix = result.allowlistedCount > 0 ? ` (${result.allowlistedCount} allowlisted)` : "";
+    if (result.violationCount > 0) {
+        logger.out(`\n✖ ${result.violationCount} type-assertion violation(s)${allowlistSuffix}`);
+    }
+    else {
+        logger.out(`✓ No double assertions across ${result.scannedFileCount} file(s)${allowlistSuffix}`);
+    }
+}

package/dist/audit/assertions/prepare.d.ts

@@ -0,0 +1,16 @@
+import type { AuditCommandPrelude } from "#audit/prepare";
+import type { AppError } from "#core/errors";
+import type { Filesystem } from "#core/filesystem/filesystem";
+import type { Result } from "#core/result";
+/**
+ * Loads config and resolves the scan target for `audit assertions`.
+ *
+ * @remarks Defaults to the repo root, tests included: a double assertion in a test silences the
+ * compiler on the code the test is meant to hold to its types.
+ *
+ * @since 0.13.0
+ */
+export declare function prepareAssertionAudit(fs: Filesystem, args: {
+    readonly currentWorkingDirectory: string;
+    readonly rawTarget: string | undefined;
+}): Promise<Result<AuditCommandPrelude, AppError>>;

package/dist/audit/assertions/prepare.js

@@ -0,0 +1,12 @@
+import { prepareRepoRootAudit } from "#audit/prepare";
+/**
+ * Loads config and resolves the scan target for `audit assertions`.
+ *
+ * @remarks Defaults to the repo root, tests included: a double assertion in a test silences the
+ * compiler on the code the test is meant to hold to its types.
+ *
+ * @since 0.13.0
+ */
+export async function prepareAssertionAudit(fs, args) {
+    return prepareRepoRootAudit(fs, args, (config) => config.audit?.assertions?.allowlist ?? []);
+}

package/dist/audit/assertions/run.d.ts

@@ -0,0 +1,14 @@
+import type { AssertionAuditResult } from "#audit/domain/types";
+import { AppError } from "#core/errors";
+import type { Filesystem } from "#core/filesystem/filesystem";
+import type { Result } from "#core/result";
+/**
+ * Scans a target path for double assertions through `unknown` or `any`, tests included.
+ *
+ * @since 0.13.0
+ */
+export declare function runAssertionAudit(fs: Filesystem, args: {
+    readonly rootDir: string;
+    readonly targetPath: string;
+    readonly allowlist: ReadonlyArray<string>;
+}): Result<AssertionAuditResult, AppError>;

package/dist/audit/assertions/run.js

@@ -0,0 +1,40 @@
+import path from "node:path";
+import { auditDoubleAssertionSource } from "#audit/assertions/domain/double-assertion";
+import { AppError, messageFrom } from "#core/errors";
+import { err, ok } from "#core/result";
+import { walkTsxFiles } from "#core/workspace/typescript-walk";
+/**
+ * Scans a target path for double assertions through `unknown` or `any`, tests included.
+ *
+ * @since 0.13.0
+ */
+export function runAssertionAudit(fs, args) {
+    try {
+        const allowlist = new Set(args.allowlist);
+        const { rootDir, targetPath } = args;
+        const filesToScan = fs.statSync(targetPath).isFile() ? [targetPath] : walkTsxFiles(targetPath, fs);
+        const files = [];
+        let violationCount = 0;
+        let allowlistedCount = 0;
+        for (const absolutePath of filesToScan) {
+            const relativePath = path.relative(rootDir, absolutePath).split(path.sep).join("/");
+            const content = fs.readFileSync(absolutePath, "utf8");
+            const remaining = auditDoubleAssertionSource(absolutePath, content).filter(({ raw }) => {
+                const isAllowed = allowlist.has(raw) || allowlist.has(`${relativePath}:${raw}`);
+                if (isAllowed) {
+                    allowlistedCount++;
+                }
+                return !isAllowed;
+            });
+            if (remaining.length === 0) {
+                continue;
+            }
+            violationCount += remaining.length;
+            files.push({ relativePath, violations: remaining });
+        }
+        return ok({ files, violationCount, allowlistedCount, scannedFileCount: filesToScan.length });
+    }
+    catch (caughtError) {
+        return err(new AppError("INFRA_FAILURE", messageFrom(caughtError), caughtError));
+    }
+}

package/dist/audit/command.js

@@ -1,4 +1,9 @@
 import { Command } from "commander";
+import { exitCodeForAssertionAuditResult, formatAssertionAuditJsonOutput } from "#audit/assertions/cli-result";
+import { assertionAuditRunRequestSchema } from "#audit/assertions/cli-schema";
+import { presentAssertionAuditResult } from "#audit/assertions/output";
+import { prepareAssertionAudit } from "#audit/assertions/prepare";
+import { runAssertionAudit } from "#audit/assertions/run";
 import { exitCodeForCommentAuditResult, formatCommentAuditJsonOutput } from "#audit/comments/cli-result";
 import { commentAuditRunRequestSchema } from "#audit/comments/cli-schema";
 import { presentCommentAuditResult } from "#audit/comments/output";
@@ -14,6 +19,11 @@ import { importsAuditRunRequestSchema } from "#audit/imports/cli-schema";
 import { presentImportsAuditResult } from "#audit/imports/output";
 import { prepareImportsAudit } from "#audit/imports/prepare";
 import { runImportsAudit } from "#audit/imports/run";
+import { exitCodeForLayersAuditResult, formatLayersAuditJsonOutput } from "#audit/layers/cli-result";
+import { layersAuditRunRequestSchema } from "#audit/layers/cli-schema";
+import { presentLayersAuditResult } from "#audit/layers/output";
+import { prepareLayersAudit } from "#audit/layers/prepare";
+import { runLayersAudit } from "#audit/layers/run";
 import { exitCodeForLinkAuditResult, formatLinkAuditJsonOutput } from "#audit/links/cli-result";
 import { linkAuditRunRequestSchema } from "#audit/links/cli-schema";
 import { presentLinkAuditResult } from "#audit/links/output";
@@ -79,6 +89,22 @@ const importsCheck = {
     formatJson: formatImportsAuditJsonOutput,
     exitCode: exitCodeForImportsAuditResult,
 };
+const assertionsCheck = {
+    name: "assertions",
+    description: "Report double type assertions through unknown or any (x as unknown as T), tests included",
+    targetHelp: "Directory or file to scan (default: the repo root)",
+    schema: assertionAuditRunRequestSchema,
+    prepare: prepareAssertionAudit,
+    buildRequest: baseAuditRequest,
+    run: (fs, request) => runAssertionAudit(fs, {
+        rootDir: request.rootDir,
+        targetPath: request.targetPath,
+        allowlist: request.allowlist ?? [],
+    }),
+    present: presentAssertionAuditResult,
+    formatJson: formatAssertionAuditJsonOutput,
+    exitCode: exitCodeForAssertionAuditResult,
+};
 const displayNamesCheck = {
     name: "display-names",
     description: "Report token(), tag() and module display names that break the <namespace>:<Name> convention",
@@ -115,9 +141,26 @@ const commentsCheck = {
         command.option("--fix", "Rewrite every mechanically fixable divider in place", false);
     },
 };
+const layersCheck = {
+    name: "layers",
+    description: "Report value imports that point up a package's configured layers, and modules sitting in no layer",
+    targetHelp: "Directory or file to scan (default: the repo root, reaching every package audit.layers names)",
+    schema: layersAuditRunRequestSchema,
+    prepare: prepareLayersAudit,
+    buildRequest: (prelude, opts) => ({ ...baseAuditRequest(prelude, opts), packages: prelude.packages }),
+    run: (fs, request) => runLayersAudit(fs, {
+        rootDir: request.rootDir,
+        targetPath: request.targetPath,
+        allowlist: request.allowlist ?? [],
+        packages: request.packages,
+    }),
+    present: presentLayersAuditResult,
+    formatJson: formatLayersAuditJsonOutput,
+    exitCode: exitCodeForLayersAuditResult,
+};
 const publishCheck = {
     name: "publish",
-    description: "Report what breaks a consumer's install: #/ imports and exports/imports targets not shipped",
+    description: "Report what breaks a consumer's install: #/ imports, unshipped exports/imports targets, and stylesheet @source paths reaching nothing shipped",
     targetHelp: "Directory or file to scan (default: the repo root)",
     schema: publishAuditRunRequestSchema,
     prepare: preparePublishAudit,
@@ -156,8 +199,10 @@ export function createAuditCommand() {
     registerPipelineSubcommand(cmd, nodeFilesystem, auditCheckToPipeline(rtlCheck));
     registerPipelineSubcommand(cmd, nodeFilesystem, auditCheckToPipeline(linksCheck));
     registerPipelineSubcommand(cmd, nodeFilesystem, auditCheckToPipeline(importsCheck));
+    registerPipelineSubcommand(cmd, nodeFilesystem, auditCheckToPipeline(assertionsCheck));
     registerPipelineSubcommand(cmd, nodeFilesystem, auditCheckToPipeline(displayNamesCheck));
     registerPipelineSubcommand(cmd, nodeFilesystem, auditCheckToPipeline(commentsCheck));
+    registerPipelineSubcommand(cmd, nodeFilesystem, auditCheckToPipeline(layersCheck));
     registerPipelineSubcommand(cmd, nodeFilesystem, auditCheckToPipeline(publishCheck));
     return cmd;
 }

package/dist/audit/comments/domain/comment-content.d.ts

@@ -18,6 +18,18 @@ export interface CommentContentFinding {
     readonly raw: string;
     readonly defect: CommentContentDefectKind;
 }
+/**
+ * Returns whether a line is a `//` note: a line comment that is neither a divider nor a tooling directive.
+ *
+ * @since 0.14.0
+ */
+export declare function isNoteLine(line: string): boolean;
+/**
+ * Returns whether a line is a `//` tooling directive, which governs the code below it.
+ *
+ * @since 0.14.0
+ */
+export declare function isDirectiveLine(line: string): boolean;
 /**
  * Scans a source file's comments for banned content, in source order.
  *

package/dist/audit/comments/domain/comment-content.js

@@ -18,6 +18,22 @@ const declarationPattern = /^[ \t]*(?:export|const|let|var|function|class|interf
 // A divider or a tooling directive above a doc block is not a stacked note.
 const dividerLinePattern = /^[ \t]*\/\/[ \t]*[-=─_*~#]{2,}/;
 const directiveLinePattern = /^[ \t]*\/\/[ \t]*(?:oxlint-|eslint-|@ts-|prettier-)/;
+/**
+ * Returns whether a line is a `//` note: a line comment that is neither a divider nor a tooling directive.
+ *
+ * @since 0.14.0
+ */
+export function isNoteLine(line) {
+    return lineCommentPattern.test(line) && !dividerLinePattern.test(line) && !isDirectiveLine(line);
+}
+/**
+ * Returns whether a line is a `//` tooling directive, which governs the code below it.
+ *
+ * @since 0.14.0
+ */
+export function isDirectiveLine(line) {
+    return directiveLinePattern.test(line);
+}
 /**
  * Scans a source file's comments for banned content, in source order.
  *
@@ -37,10 +53,7 @@ export function scanCommentContent(content, language) {
         // A `//` run stacked directly above a doc block reads as a second doc — it belongs inside.
         if (language === "js" && !insideBlock && trimmed.startsWith("/**")) {
             let runStart = index;
-            while (runStart > 0 &&
-                lineCommentPattern.test(lines[runStart - 1]) &&
-                !dividerLinePattern.test(lines[runStart - 1]) &&
-                !directiveLinePattern.test(lines[runStart - 1])) {
+            while (runStart > 0 && isNoteLine(lines[runStart - 1])) {
                 runStart--;
             }
             if (runStart < index) {

package/dist/audit/display-names/domain/display-names.js

@@ -1,3 +1,4 @@
+import { lineOfOffset } from "#core/source-position";
 /** The owner: a kebab-case package, app or feature slug, or a scoped package name. */
 const NAMESPACE = /^(?:@[a-z0-9-]+\/)?[a-z0-9]+(?:-[a-z0-9]+)*$/;
 /** A token or module stands for a type or a unit of composition. */
@@ -59,13 +60,4 @@ function reasonFor(kind, name) {
     return PASCAL_CASE.test(local)
         ? null
         : `${label} '${local}' in '${name}' is not PascalCase — a ${kind} stands for a ${kind === "token" ? "type" : "unit of composition"}`;
-}
-function lineOfOffset(sourceText, offset) {
-    let line = 1;
-    for (let index = 0; index < offset; index++) {
-        if (sourceText.charCodeAt(index) === 10) {
-            line++;
-        }
-    }
-    return line;
 }

package/dist/audit/domain/types.d.ts

@@ -73,6 +73,37 @@ export type ImportsAuditResult = {
     readonly allowlistedCount: number;
     readonly scannedFileCount: number;
 };
+/**
+ * A double assertion through `unknown` or `any`, or a directive that keeps one without cause.
+ *
+ * @since 0.13.0
+ */
+export type AssertionViolation = {
+    readonly line: number;
+    /** The assertion or the directive as written, up to its first line break. */
+    readonly raw: string;
+    readonly reason: string;
+};
+/**
+ * The type-assertion violations found in one file.
+ *
+ * @since 0.13.0
+ */
+export type AssertionFileViolations = {
+    readonly relativePath: string;
+    readonly violations: Array<AssertionViolation>;
+};
+/**
+ * Outcome of one `audit assertions` run.
+ *
+ * @since 0.13.0
+ */
+export type AssertionAuditResult = {
+    readonly files: Array<AssertionFileViolations>;
+    readonly violationCount: number;
+    readonly allowlistedCount: number;
+    readonly scannedFileCount: number;
+};
 /**
  * A `token()`, `tag()` or module display name that breaks the display-name convention.
  *
@@ -200,6 +231,28 @@ export type UnshippedTargetViolation = {
     readonly subpath: string;
     readonly target: string;
 };
+/**
+ * A path a stylesheet registers with Tailwind's `@source`, as written.
+ *
+ * @since 0.13.0
+ */
+export type StylesheetSource = {
+    readonly line: number;
+    readonly pattern: string;
+};
+/**
+ * A shipped stylesheet whose `@source` paths reach no file its package's tarball ships.
+ *
+ * @since 0.13.0
+ */
+export type UnreachableStylesheetViolation = {
+    readonly packageName: string;
+    /** Repo-relative path of the stylesheet. */
+    readonly stylesheet: string;
+    readonly sources: Array<StylesheetSource>;
+    /** The `files` entries missing on disk, which is how an unbuilt `dist` shows up. */
+    readonly missingFilesEntries: Array<string>;
+};
 /**
  * Outcome of one `audit publish` run.
  *
@@ -208,7 +261,40 @@ export type UnshippedTargetViolation = {
 export type PublishAuditResult = {
     readonly legacyImportFiles: Array<LegacySubpathFile>;
     readonly unshipped: Array<UnshippedTargetViolation>;
+    readonly unreachableStylesheets: Array<UnreachableStylesheetViolation>;
     readonly legacyImportCount: number;
     readonly scannedFileCount: number;
     readonly packageCount: number;
+};
+/**
+ * A module outside every configured layer, or a value import that points up the layers.
+ *
+ * @since 0.14.0
+ */
+export type LayerViolation = {
+    readonly line: number;
+    /** The import or re-export as written, or the module path when the module itself is unplaced. */
+    readonly raw: string;
+    readonly reason: string;
+};
+/**
+ * The layering violations found in one file.
+ *
+ * @since 0.14.0
+ */
+export type LayerFileViolations = {
+    readonly relativePath: string;
+    readonly violations: Array<LayerViolation>;
+};
+/**
+ * Outcome of one `audit layers` run.
+ *
+ * @since 0.14.0
+ */
+export type LayersAuditResult = {
+    readonly files: Array<LayerFileViolations>;
+    readonly violationCount: number;
+    readonly allowlistedCount: number;
+    readonly scannedFileCount: number;
+    readonly packageCount: number;
 };

package/dist/audit/imports/domain/import-policy.js

@@ -1,4 +1,6 @@
 import { parseSync } from "oxc-parser";
+import { isOxcNode, programStatements } from "#core/oxc-node";
+import { firstLineOf, lineOfOffset } from "#core/source-position";
 /**
  * The import policies enforced across the monorepo: React members by name (never a namespace,
  * default, or implicit `React.*` UMD global), and Zod as a namespace repo-wide — the house form,
@@ -20,9 +22,6 @@ export const defaultImportPolicyRules = [
             "locale set into any bundle that reaches it)",
     },
 ];
-function isOxcNode(value) {
-    return typeof value === "object" && value !== null && typeof value.type === "string";
-}
 function isIdentifierNamed(node, name) {
     return isOxcNode(node) && node.type === "Identifier" && node.name === name;
 }
@@ -41,7 +40,7 @@ function importedName(specifier) {
  */
 export function auditImportPolicySource(filePath, sourceText, rules) {
     const { program } = parseSync(filePath, sourceText);
-    const statements = program.body;
+    const statements = programStatements(program);
     const violations = [];
     const boundUmdNames = new Set();
     for (const rule of rules) {
@@ -89,7 +88,7 @@ export function auditImportPolicySource(filePath, sourceText, rules) {
         }
     }
     for (const rule of rules) {
-        if (rule.umdGlobal !== undefined && !boundUmdNames.has(rule.umdGlobal)) {
+        if (rule.umdGlobal !== undefined && !boundUmdNames.has(rule.umdGlobal) && isOxcNode(program)) {
             collectUmdGlobalReferences(program, sourceText, rule, violations);
         }
     }
@@ -124,17 +123,4 @@ function collectUmdGlobalReferences(node, sourceText, rule, violations) {
             collectUmdGlobalReferences(value, sourceText, rule, violations);
         }
     }
-}
-function lineOfOffset(sourceText, offset) {
-    let line = 1;
-    for (let index = 0; index < offset; index++) {
-        if (sourceText.charCodeAt(index) === 10) {
-            line++;
-        }
-    }
-    return line;
-}
-function firstLineOf(text) {
-    const newlineIndex = text.indexOf("\n");
-    return newlineIndex === -1 ? text : text.slice(0, newlineIndex);
 }

package/dist/audit/layers/cli-result.d.ts

@@ -0,0 +1,13 @@
+import type { LayersAuditResult } from "#audit/domain/types";
+/**
+ * Exit `1` when any non-allowlisted layering violation remains.
+ *
+ * @since 0.14.0
+ */
+export declare function exitCodeForLayersAuditResult(result: LayersAuditResult): number;
+/**
+ * Machine-readable layering summary for `--json`.
+ *
+ * @since 0.14.0
+ */
+export declare function formatLayersAuditJsonOutput(result: LayersAuditResult, rootDir: string): string;

package/dist/audit/layers/cli-result.js

@@ -0,0 +1,22 @@
+import { CLI_EXIT_GENERAL_ERROR, CLI_EXIT_SUCCESS } from "#core/exit-codes";
+/**
+ * Exit `1` when any non-allowlisted layering violation remains.
+ *
+ * @since 0.14.0
+ */
+export function exitCodeForLayersAuditResult(result) {
+    return result.violationCount > 0 ? CLI_EXIT_GENERAL_ERROR : CLI_EXIT_SUCCESS;
+}
+/**
+ * Machine-readable layering summary for `--json`.
+ *
+ * @since 0.14.0
+ */
+export function formatLayersAuditJsonOutput(result, rootDir) {
+    return JSON.stringify({
+        schemaVersion: 1,
+        ok: result.violationCount === 0,
+        cwd: rootDir,
+        result,
+    });
+}

package/dist/audit/layers/cli-schema.d.ts

@@ -0,0 +1,29 @@
+import * as z from "zod";
+/**
+ * One layered package as the run reads it: its name, the absolute root the layers sit under, and the layers.
+ *
+ * @since 0.14.0
+ */
+export type LayersAuditPackage = {
+    readonly name: string;
+    readonly rootPath: string;
+    readonly layers: ReadonlyArray<ReadonlyArray<string>>;
+};
+/**
+ * Resolved request for a single layering audit run.
+ *
+ * @since 0.14.0
+ */
+export type LayersAuditRunRequest = {
+    readonly rootDir: string;
+    readonly targetPath: string;
+    readonly allowlist?: ReadonlyArray<string> | undefined;
+    readonly json: boolean;
+    readonly packages: ReadonlyArray<LayersAuditPackage>;
+};
+/**
+ * Zod schema for {@link LayersAuditRunRequest}.
+ *
+ * @since 0.14.0
+ */
+export declare const layersAuditRunRequestSchema: z.ZodType<LayersAuditRunRequest>;

package/dist/audit/layers/cli-schema.js

@@ -0,0 +1,17 @@
+import * as z from "zod";
+/**
+ * Zod schema for {@link LayersAuditRunRequest}.
+ *
+ * @since 0.14.0
+ */
+export const layersAuditRunRequestSchema = z.object({
+    rootDir: z.string().min(1),
+    targetPath: z.string().min(1),
+    allowlist: z.array(z.string()).optional(),
+    json: z.boolean(),
+    packages: z.array(z.object({
+        name: z.string().min(1),
+        rootPath: z.string().min(1),
+        layers: z.array(z.array(z.string().min(1))),
+    })),
+});