@drkmttr/adhere 0.3.0 → 0.3.1

package/README.md

@@ -78,10 +78,11 @@ prints a completion script.
 
 `adhere lint` reads the `.ts` files under the working directory, except `.d.ts`,
 `.test.ts`, and config files. When the working directory contains `agents/`,
-`apps/`, or `packages/`, only those trees are read. Paths under
-`node_modules/`, `dist/`, `coverage/`, `vendor/`, `e2e/`, `references/`,
-`.adhere/`, `.agents/`, `.claude/`, `.direnv/`, `.alchemy/`, or `.vite/` are
-skipped. `.tsx` files are not read, and `.gitignore` is not consulted.
+`apps/`, or `packages/`, only those trees are read. Below the working
+directory, anything under `node_modules/`, `dist/`, `coverage/`, `vendor/`,
+`e2e/`, `references/`, `.adhere/`, `.agents/`, `.claude/`, `.direnv/`,
+`.alchemy/`, or `.vite/` is skipped; the directories above it do not count.
+`.tsx` files are not read, and `.gitignore` is not consulted.
 
 ### Init
 
@@ -175,7 +176,8 @@ const Port = Schema.Int.pipe(
 validation refuses the run with its path in the message. `loadRules(directory)`
 from the package root does the same load for your own tooling.
 
-Nested `.adhere/` directories are also discovered. A rule in
+Nested `.adhere/` directories are also discovered, except under
+`node_modules/`, `dist/`, and the other skipped directories (above). A rule in
 `packages/api/.adhere/data/brand-ports.md` has the same id,
 `data/brand-ports`, but applies only to files under `packages/api/`. Root
 `.adhere/` rules apply project-wide. If a nested rule has the same id as a root
@@ -306,5 +308,6 @@ before it can be given trusted publishers on npmjs.com. npm checks the
 workflow that started the run, so every package has two: `release.yaml`, which
 calls the publish workflow for tag releases, and `publish.yaml`, for manual
 runs. The publish workflow can be run manually for an already-created release
-tag if a publish needs to be retried; it skips platform packages whose version
-is already on npm.
+tag if a publish needs to be retried; it skips every package whose version is
+already on npm. The main package's `files` list keeps it to `bin/`, `src/`,
+`presets/`, and `skills/`.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@drkmttr/adhere",
-  "version": "0.3.0",
+  "version": "0.3.1",
   "private": false,
   "description": "Lints a repository against reference code in .adhere/, judged by Jev.",
   "repository": {
@@ -17,6 +17,12 @@
   "exports": {
     ".": "./src/index.ts"
   },
+  "files": [
+    "bin",
+    "src",
+    "presets",
+    "skills"
+  ],
   "publishConfig": {
     "access": "public"
   },
@@ -61,10 +67,10 @@
     }
   },
   "optionalDependencies": {
-    "@drkmttr/adhere-darwin-arm64": "0.3.0",
-    "@drkmttr/adhere-darwin-x64": "0.3.0",
-    "@drkmttr/adhere-linux-arm64": "0.3.0",
-    "@drkmttr/adhere-linux-x64": "0.3.0",
-    "@drkmttr/adhere-win32-x64": "0.3.0"
+    "@drkmttr/adhere-darwin-arm64": "0.3.1",
+    "@drkmttr/adhere-darwin-x64": "0.3.1",
+    "@drkmttr/adhere-linux-arm64": "0.3.1",
+    "@drkmttr/adhere-linux-x64": "0.3.1",
+    "@drkmttr/adhere-win32-x64": "0.3.1"
   }
 }

package/src/config.ts

@@ -38,6 +38,25 @@ export const CONFIG_FILES = [
   "adhere.config.ts",
   ".adhere.config.ts",
 ] as const;
+/**
+ * Directories never read into, for source files or for nested `.adhere/`
+ * rules: dependency, generated, vendored, and tool trees. Matched as whole
+ * path segments below the working directory, so a repo that itself sits under
+ * one of these names is still read.
+ */
+export const SKIPPED_DIRECTORIES: ReadonlySet<string> = new Set([
+  "node_modules",
+  "dist",
+  ".agents",
+  ".claude",
+  ".direnv",
+  ".alchemy",
+  "coverage",
+  ".vite",
+  "references",
+  "vendor",
+  "e2e",
+]);
 export interface AdhereConfig extends Schema.Schema.Type<typeof AdhereConfig> {}
 
 /** The shape a config file default-exports. */

package/src/rules.ts

@@ -1,4 +1,10 @@
-import { ConfigUnavailable, type Rule, type RuleId, type RuleSource } from "#config.ts";
+import {
+  ConfigUnavailable,
+  type Rule,
+  type RuleId,
+  type RuleSource,
+  SKIPPED_DIRECTORIES,
+} from "#config.ts";
 import { parseRuleMarkdown } from "#markdown.ts";
 import { Effect, FileSystem, Path, Record } from "effect";
 
@@ -31,7 +37,13 @@ const isMarkdown = (path: string): boolean => path.endsWith(".md");
 const isNestedRuleFile = (relative: string): boolean => {
   const segments = segmentsOf(relative);
   const adhere = segments.lastIndexOf(ADHERE_SEGMENT);
-  return adhere >= 0 && segments[adhere + 1] !== CACHE_SEGMENT && isMarkdown(relative);
+  return (
+    adhere >= 0 &&
+    segments[adhere + 1] !== CACHE_SEGMENT &&
+    isMarkdown(relative) &&
+    // Only the path to the `.adhere/`: `.adhere/e2e/` is a rule topic, not a skip.
+    !segments.slice(0, adhere).some((segment) => SKIPPED_DIRECTORIES.has(segment))
+  );
 };
 
 const rulePathOf = (segments: ReadonlyArray<string>): ReadonlyArray<string> => {

package/src/services/SourceWalker.ts

@@ -1,4 +1,5 @@
 import { Context, Effect, FileSystem, Layer, Path } from "effect";
+import { ADHERE_DIRECTORY, SKIPPED_DIRECTORIES } from "#config.ts";
 import type { ScannedFile } from "#models/Audit.ts";
 import { WalkUnavailable } from "#models/Audit.ts";
 
@@ -20,21 +21,15 @@ export class SourceWalker extends Context.Service<
  * trees. Otherwise read the working directory itself.
  */
 const WORKSPACE_DIRS = ["agents", "apps", "packages"] as const;
-/** Path fragments that mark generated, vendored, or dependency trees. */
-const SKIPS = [
-  "/node_modules/",
-  "/.adhere/",
-  "/dist/",
-  "/.agents/",
-  "/.claude/",
-  "/.direnv/",
-  "/.alchemy/",
-  "/coverage/",
-  "/.vite/",
-  "/references/",
-  "/vendor/",
-  "/e2e/",
-] as const;
+/**
+ * A path, relative to the root being read, through a skipped directory or
+ * through `.adhere/`, whose files are rules and cache rather than source.
+ * Relative, so the directories above the working directory never count.
+ */
+export const isInSkippedTree = (relative: string): boolean =>
+  relative
+    .split(/[\\/]/)
+    .some((segment) => segment === ADHERE_DIRECTORY || SKIPPED_DIRECTORIES.has(segment));
 
 const isInside = (file: string, root: string): boolean =>
   file === root || file.startsWith(`${root}/`);
@@ -45,7 +40,6 @@ const isScannable = (file: string, self: string): boolean =>
   !file.endsWith(".test.ts") &&
   !file.endsWith("/adhere.config.ts") &&
   !file.endsWith("/.adhere.config.ts") &&
-  SKIPS.every((skip) => !file.includes(skip)) &&
   // The audit's own detector patterns are data, not violations of themselves.
   !isInside(file, self);
 
@@ -57,7 +51,10 @@ const rooted = (root: string, paths: ReadonlyArray<string>) => paths.map((rel) =
 
 /** What the root actually contains: only paths the audit reads. */
 const scannable = (root: string, paths: ReadonlyArray<string>, self: string) =>
-  rooted(root, paths).filter((file) => isScannable(file, self));
+  rooted(
+    root,
+    paths.filter((relative) => !isInSkippedTree(relative)),
+  ).filter((file) => isScannable(file, self));
 
 /** One root's paths, filtered to what the audit reads. */
 const listRoot = Effect.fn("SourceWalker.listRoot")(

package/.adhere/config.ts

@@ -1,7 +0,0 @@
-import type { Config } from "../src/index.ts";
-
-// Type-only import: erased at runtime, so the compiled binary loads this file
-// without resolving the package (see README, "Configuration").
-export default {
-  presets: ["effect"],
-} satisfies Config;

package/.adhere/rules/refusals-name-the-file.md

@@ -1,17 +0,0 @@
----
-description: An error raised while reading a config, rule, or cache file names that file in its message, so the user can open it.
-threshold: 0.8
----
-
-Adhere's own rule. A refusal is the only thing the user sees, so it points
-at the file it is about.
-
-```ts
-const front =
-  yield *
-  Schema.decodeUnknownEffect(FrontMatter)(fields).pipe(
-    Effect.mapError((problem) =>
-      ConfigUnavailable.make({ message: `${file}: ${problem.message}` }),
-    ),
-  );
-```

package/.github/workflows/ci.yaml

@@ -1,27 +0,0 @@
-name: CI
-
-on:
-  pull_request:
-  push:
-    branches: [main]
-
-jobs:
-  verify:
-    runs-on: ubuntu-latest
-    steps:
-      - uses: actions/checkout@v4
-      - uses: oven-sh/setup-bun@v2
-        with:
-          bun-version: "1.4.2"
-      - run: bun install --frozen-lockfile
-      - run: bun run typecheck
-      - run: bun run test
-      - run: bun run build:npm
-      - name: Run the launcher against the linux-x64 package
-        run: |
-          # Outside the checkout, where the launcher has no source to fall back to.
-          launcher="$RUNNER_TEMP/launcher"
-          mkdir -p "$launcher/node_modules/@drkmttr"
-          cp -r bin "$launcher/bin"
-          ln -s "$PWD/dist/npm/linux-x64" "$launcher/node_modules/@drkmttr/adhere-linux-x64"
-          node "$launcher/bin/adhere.js" --version

package/.github/workflows/publish.yaml

@@ -1,68 +0,0 @@
-name: Publish
-
-on:
-  workflow_call:
-    inputs:
-      tag_name:
-        description: "Release tag to publish, for example v0.3.0."
-        required: true
-        type: string
-  workflow_dispatch:
-    inputs:
-      tag_name:
-        description: "Release tag to publish, for example v0.3.0."
-        required: true
-        type: string
-
-permissions:
-  id-token: write
-  contents: read
-
-jobs:
-  publish:
-    runs-on: ubuntu-latest
-    steps:
-      - uses: actions/checkout@v4
-        with:
-          ref: main
-      - uses: oven-sh/setup-bun@v2
-        with:
-          bun-version: "1.4.2"
-      - uses: actions/setup-node@v4
-        with:
-          node-version: "24"
-          registry-url: "https://registry.npmjs.org"
-      - name: Verify release tag matches package version
-        env:
-          TAG_NAME: ${{ inputs.tag_name }}
-        run: |
-          version="${TAG_NAME#v}"
-          if [[ "$version" == "$TAG_NAME" || ! "$version" =~ ^[0-9]+\.[0-9]+\.[0-9]+([-.+][0-9A-Za-z.-]+)?$ ]]; then
-            echo "Release tags must look like vX.Y.Z, optionally with a prerelease/build suffix." >&2
-            exit 1
-          fi
-          package_version="$(node -p "require('./package.json').version")"
-          if [ "$version" != "$package_version" ]; then
-            echo "Release tag $TAG_NAME does not match package.json version $package_version." >&2
-            exit 1
-          fi
-      - run: bun install --frozen-lockfile
-      - run: bun run typecheck
-      - run: bun run test
-      - run: bun run build:npm
-      - name: Publish the platform packages
-        run: |
-          for directory in dist/npm/*/; do
-            name="$(node -p "require('./${directory}package.json').name")"
-            version="$(node -p "require('./${directory}package.json').version")"
-            # A rerun after a partial publish skips the versions already on npm.
-            if npm view "$name@$version" version >/dev/null 2>&1; then
-              echo "$name@$version is already published."
-            else
-              npm publish "$directory" --access public --provenance
-            fi
-          done
-      - name: Publish @drkmttr/adhere with the platform packages as optional dependencies
-        run: |
-          bun scripts/npm-packages.ts pin
-          npm publish --access public --provenance

package/.github/workflows/release.yaml

@@ -1,71 +0,0 @@
-name: Release
-
-on:
-  push:
-    tags:
-      - "v*"
-
-permissions:
-  contents: write
-
-jobs:
-  release:
-    runs-on: ubuntu-latest
-    steps:
-      - name: Derive version from tag
-        id: release
-        shell: bash
-        run: |
-          version="${GITHUB_REF_NAME#v}"
-          if [[ "$version" == "$GITHUB_REF_NAME" || ! "$version" =~ ^[0-9]+\.[0-9]+\.[0-9]+([-.+][0-9A-Za-z.-]+)?$ ]]; then
-            echo "Release tags must look like vX.Y.Z, optionally with a prerelease/build suffix." >&2
-            exit 1
-          fi
-          echo "version=$version" >> "$GITHUB_OUTPUT"
-
-      - uses: actions/checkout@v4
-        with:
-          ref: main
-          fetch-depth: 0
-
-      - name: Ensure tag was cut from current main
-        shell: bash
-        run: |
-          tag_sha="$(git rev-list -n 1 "$GITHUB_REF_NAME")"
-          main_sha="$(git rev-parse HEAD)"
-          if [[ "$tag_sha" != "$main_sha" ]]; then
-            echo "Tag $GITHUB_REF_NAME must point at current main before release-it adds the version bump commit." >&2
-            echo "tag=$tag_sha main=$main_sha" >&2
-            exit 1
-          fi
-
-      - uses: oven-sh/setup-bun@v2
-        with:
-          bun-version: "1.4.2"
-
-      - uses: actions/setup-node@v4
-        with:
-          node-version: "24"
-
-      - name: Configure git author
-        run: |
-          git config user.name "github-actions[bot]"
-          git config user.email "41898282+github-actions[bot]@users.noreply.github.com"
-
-      - run: bun install --frozen-lockfile
-      - run: bun run typecheck
-      - run: bun run test
-      - run: bun run build:npm
-      - name: Create GitHub release
-        run: bun run release -- --ci "${{ steps.release.outputs.version }}"
-        env:
-          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
-
-  publish:
-    needs: release
-    uses: ./.github/workflows/publish.yaml
-    permissions:
-      contents: read
-      id-token: write
-    with:
-      tag_name: ${{ github.ref_name }}