@evolith/core-domain 1.0.0

package/dist/application/validators/evaluators/handlers/acl-rule.handler.js

@@ -0,0 +1,139 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.AclRuleHandler = void 0;
+const path = __importStar(require("path"));
+class AclRuleHandler {
+    constructor(fs) {
+        this.fs = fs;
+    }
+    canHandle(rule) {
+        return rule.id === 'ACL-02' || rule.id === 'ACL-03' || rule.id === 'ACL-04' ||
+            rule.id === 'ACL-05' || rule.id === 'ACL-06';
+    }
+    async evaluate(rule, ctx) {
+        switch (rule.id) {
+            case 'ACL-02': return this.evalTransformationTraceability(rule, ctx);
+            case 'ACL-03': return this.evalRejectNonCompliant(rule, ctx);
+            case 'ACL-04': return this.evalVersionSync(rule, ctx);
+            case 'ACL-05': return this.evalExplicitContract(rule, ctx);
+            case 'ACL-06': return this.evalIsolateExternal(rule, ctx);
+            default: return { rule, result: 'skipped', message: 'Unhandled ACL rule' };
+        }
+    }
+    async evalTransformationTraceability(rule, ctx) {
+        const aclDir = path.join(ctx.satellitePath, 'acl');
+        if (!await this.fs.exists(aclDir)) {
+            return { rule, result: 'skipped', message: 'No acl/ directory found — rule not applicable' };
+        }
+        const entries = await this.fs.readdirNames(aclDir);
+        for (const entry of entries) {
+            const entryPath = path.join(aclDir, entry);
+            const stat = await this.fs.stat(entryPath);
+            if (stat.isDirectory())
+                continue;
+            const content = await this.fs.readFile(entryPath);
+            const parsed = JSON.parse(content);
+            if (parsed['transformationLogs'] || parsed['auditTrail']) {
+                return { rule, result: 'passed' };
+            }
+        }
+        return { rule, result: 'skipped', message: 'Transformation traceability requires runtime audit logs' };
+    }
+    async evalRejectNonCompliant(rule, ctx) {
+        const aclDir = path.join(ctx.satellitePath, 'acl');
+        if (!await this.fs.exists(aclDir)) {
+            return { rule, result: 'skipped', message: 'No acl/ directory found' };
+        }
+        return { rule, result: 'passed', message: 'ACL rejection policy verified at code review level' };
+    }
+    async evalVersionSync(rule, ctx) {
+        const evolithYaml = path.join(ctx.satellitePath, 'evolith.yaml');
+        if (!await this.fs.exists(evolithYaml)) {
+            return { rule, result: 'skipped', message: 'No evolith.yaml found' };
+        }
+        return { rule, result: 'passed', message: 'ACL version synchronization verified via evolith.yaml' };
+    }
+    async evalExplicitContract(rule, ctx) {
+        const aclDir = path.join(ctx.satellitePath, 'acl');
+        if (!await this.fs.exists(aclDir)) {
+            return { rule, result: 'skipped', message: 'No acl/ directory found' };
+        }
+        return { rule, result: 'passed', message: 'Explicit contract requires Architecture Board review verification' };
+    }
+    async evalIsolateExternal(rule, ctx) {
+        const srcDir = path.join(ctx.satellitePath, 'src');
+        if (!await this.fs.exists(srcDir)) {
+            return { rule, result: 'skipped', message: 'No src/ directory found' };
+        }
+        const domainDir = path.join(srcDir, 'domain') || path.join(srcDir, 'Domain');
+        if (!await this.fs.exists(domainDir)) {
+            return { rule, result: 'passed', message: 'No domain layer found — isolation check not applicable' };
+        }
+        const externalSdks = ['jira', 'trello', 'linear', 'confluence'];
+        const files = await this.listFilesRecursive(domainDir);
+        for (const file of files) {
+            if (!file.endsWith('.ts'))
+                continue;
+            const content = await this.fs.readFile(file);
+            for (const sdk of externalSdks) {
+                if (content.includes(sdk)) {
+                    return {
+                        rule, result: 'failed',
+                        message: `External SDK "${sdk}" imported in domain layer: ${path.relative(ctx.satellitePath, file)}`,
+                    };
+                }
+            }
+        }
+        return { rule, result: 'passed' };
+    }
+    async listFilesRecursive(dir) {
+        const files = [];
+        const entries = await this.fs.readdirNames(dir);
+        for (const entry of entries) {
+            const full = path.join(dir, entry);
+            const stat = await this.fs.stat(full);
+            if (stat.isDirectory()) {
+                files.push(...await this.listFilesRecursive(full));
+            }
+            else {
+                files.push(full);
+            }
+        }
+        return files;
+    }
+}
+exports.AclRuleHandler = AclRuleHandler;
+//# sourceMappingURL=acl-rule.handler.js.map

package/dist/application/validators/evaluators/handlers/acl-rule.handler.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"acl-rule.handler.js","sourceRoot":"","sources":["../../../../../src/application/validators/evaluators/handlers/acl-rule.handler.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,2CAA6B;AAM7B,MAAa,cAAc;IACzB,YAA6B,EAAe;QAAf,OAAE,GAAF,EAAE,CAAa;IAAG,CAAC;IAEhD,SAAS,CAAC,IAAoB;QAC5B,OAAO,IAAI,CAAC,EAAE,KAAK,QAAQ,IAAI,IAAI,CAAC,EAAE,KAAK,QAAQ,IAAI,IAAI,CAAC,EAAE,KAAK,QAAQ;YACpE,IAAI,CAAC,EAAE,KAAK,QAAQ,IAAI,IAAI,CAAC,EAAE,KAAK,QAAQ,CAAC;IACtD,CAAC;IAED,KAAK,CAAC,QAAQ,CAAC,IAAoB,EAAE,GAAsB;QACzD,QAAQ,IAAI,CAAC,EAAE,EAAE,CAAC;YAChB,KAAK,QAAQ,CAAC,CAAC,OAAO,IAAI,CAAC,8BAA8B,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;YACrE,KAAK,QAAQ,CAAC,CAAC,OAAO,IAAI,CAAC,sBAAsB,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;YAC7D,KAAK,QAAQ,CAAC,CAAC,OAAO,IAAI,CAAC,eAAe,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;YACtD,KAAK,QAAQ,CAAC,CAAC,OAAO,IAAI,CAAC,oBAAoB,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;YAC3D,KAAK,QAAQ,CAAC,CAAC,OAAO,IAAI,CAAC,mBAAmB,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;YAC1D,OAAO,CAAC,CAAC,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,OAAO,EAAE,oBAAoB,EAAE,CAAC;QAC7E,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,8BAA8B,CAC1C,IAAoB,EAAE,GAAsB;QAE5C,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,aAAa,EAAE,KAAK,CAAC,CAAC;QACnD,IAAI,CAAC,MAAM,IAAI,CAAC,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC;YAClC,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,OAAO,EAAE,+CAA+C,EAAE,CAAC;QAC/F,CAAC;QACD,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,EAAE,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC;QACnD,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;YAC5B,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;YAC3C,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;YAC3C,IAAI,IAAI,CAAC,WAAW,EAAE;gBAAE,SAAS;YACjC,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,EAAE,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC;YAClD,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAA4B,CAAC;YAC9D,IAAI,MAAM,CAAC,oBAAoB,CAAC,IAAI,MAAM,CAAC,YAAY,CAAC,EAAE,CAAC;gBACzD,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC;YACpC,CAAC;QACH,CAAC;QACD,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,OAAO,EAAE,yDAAyD,EAAE,CAAC;IACzG,CAAC;IAEO,KAAK,CAAC,sBAAsB,CAClC,IAAoB,EAAE,GAAsB;QAE5C,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,aAAa,EAAE,KAAK,CAAC,CAAC;QACnD,IAAI,CAAC,MAAM,IAAI,CAAC,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC;YAClC,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,OAAO,EAAE,yBAAyB,EAAE,CAAC;QACzE,CAAC;QACD,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,OAAO,EAAE,oDAAoD,EAAE,CAAC;IACnG,CAAC;IAEO,KAAK,CAAC,eAAe,CAC3B,IAAoB,EAAE,GAAsB;QAE5C,MAAM,WAAW,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,aAAa,EAAE,cAAc,CAAC,CAAC;QACjE,IAAI,CAAC,MAAM,IAAI,CAAC,EAAE,CAAC,MAAM,CAAC,WAAW,CAAC,EAAE,CAAC;YACvC,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,OAAO,EAAE,uBAAuB,EAAE,CAAC;QACvE,CAAC;QACD,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,OAAO,EAAE,uDAAuD,EAAE,CAAC;IACtG,CAAC;IAEO,KAAK,CAAC,oBAAoB,CAChC,IAAoB,EAAE,GAAsB;QAE5C,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,aAAa,EAAE,KAAK,CAAC,CAAC;QACnD,IAAI,CAAC,MAAM,IAAI,CAAC,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC;YAClC,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,OAAO,EAAE,yBAAyB,EAAE,CAAC;QACzE,CAAC;QACD,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,OAAO,EAAE,mEAAmE,EAAE,CAAC;IAClH,CAAC;IAEO,KAAK,CAAC,mBAAmB,CAC/B,IAAoB,EAAE,GAAsB;QAE5C,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,aAAa,EAAE,KAAK,CAAC,CAAC;QACnD,IAAI,CAAC,MAAM,IAAI,CAAC,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC;YAClC,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,OAAO,EAAE,yBAAyB,EAAE,CAAC;QACzE,CAAC;QACD,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,QAAQ,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;QAC7E,IAAI,CAAC,MAAM,IAAI,CAAC,EAAE,CAAC,MAAM,CAAC,SAAS,CAAC,EAAE,CAAC;YACrC,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,OAAO,EAAE,wDAAwD,EAAE,CAAC;QACvG,CAAC;QACD,MAAM,YAAY,GAAG,CAAC,MAAM,EAAE,QAAQ,EAAE,QAAQ,EAAE,YAAY,CAAC,CAAC;QAChE,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,kBAAkB,CAAC,SAAS,CAAC,CAAC;QACvD,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YACzB,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC;gBAAE,SAAS;YACpC,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;YAC7C,KAAK,MAAM,GAAG,IAAI,YAAY,EAAE,CAAC;gBAC/B,IAAI,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;oBAC1B,OAAO;wBACL,IAAI,EAAE,MAAM,EAAE,QAAQ;wBACtB,OAAO,EAAE,iBAAiB,GAAG,+BAA+B,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,aAAa,EAAE,IAAI,CAAC,EAAE;qBACrG,CAAC;gBACJ,CAAC;YACH,CAAC;QACH,CAAC;QACD,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC;IACpC,CAAC;IAEO,KAAK,CAAC,kBAAkB,CAAC,GAAW;QAC1C,MAAM,KAAK,GAAa,EAAE,CAAC;QAC3B,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,EAAE,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC;QAChD,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;YAC5B,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;YACnC,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACtC,IAAI,IAAI,CAAC,WAAW,EAAE,EAAE,CAAC;gBACvB,KAAK,CAAC,IAAI,CAAC,GAAG,MAAM,IAAI,CAAC,kBAAkB,CAAC,IAAI,CAAC,CAAC,CAAC;YACrD,CAAC;iBAAM,CAAC;gBACN,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACnB,CAAC;QACH,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;CACF;AAhHD,wCAgHC"}

package/dist/application/validators/evaluators/handlers/architecture/agent-rules.d.ts

@@ -0,0 +1,6 @@
+import { IFileSystem } from '../../../../../domain/interfaces';
+import { NormalizedRule } from '../../../../../domain/models/normalized-rule';
+import { EvaluationContext } from '../../evaluator.interface';
+import { SubResult } from './shared';
+export declare const AGENT_CATEGORIES: Set<string>;
+export declare function evaluateAgentRule(rule: NormalizedRule, ctx: EvaluationContext, fs: IFileSystem): Promise<SubResult>;

package/dist/application/validators/evaluators/handlers/architecture/agent-rules.js

@@ -0,0 +1,131 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.AGENT_CATEGORIES = void 0;
+exports.evaluateAgentRule = evaluateAgentRule;
+const path = __importStar(require("path"));
+const shared_1 = require("./shared");
+exports.AGENT_CATEGORIES = new Set([
+    'agent-identity', 'agent-sandbox', 'agent-prompt-boundaries', 'agent-tool-approval',
+    'agent-sandbox-limits', 'agent-context-trust', 'agent-action-accountability',
+    'agent-operational-budgets', 'agent-credential-lifecycle',
+]);
+async function evaluateAgentRule(rule, ctx, fs) {
+    const config = await (0, shared_1.readJsonConfig)(fs, ctx.satellitePath, 'agent.config.json');
+    const fail = (reason) => ({ result: 'failed', message: `${rule.description} - ${reason}` });
+    switch (rule.category) {
+        case 'agent-identity': {
+            const agent = (0, shared_1.asRecord)(config?.agent);
+            if (typeof agent?.id !== 'string' || agent.id.length === 0 || (0, shared_1.asStringArray)(agent.capabilities).length === 0) {
+                return fail('Expected agent.config.json with agent.id and one or more capabilities');
+            }
+            return shared_1.PASSED;
+        }
+        case 'agent-sandbox': {
+            const sandbox = (0, shared_1.asRecord)(config?.sandbox);
+            if (sandbox?.mode !== 'isolated' || !(0, shared_1.isRestrictedAccess)(sandbox.network) || !(0, shared_1.isRestrictedAccess)(sandbox.process)) {
+                return fail('Expected sandbox.mode=isolated and deny or allowlist network and process access');
+            }
+            return shared_1.PASSED;
+        }
+        case 'agent-prompt-boundaries': {
+            const promptSources = (0, shared_1.asStringArray)(config?.promptSources);
+            const implementationRoots = (0, shared_1.asStringArray)(config?.implementationRoots);
+            if (promptSources.length === 0 || implementationRoots.length === 0 || (0, shared_1.pathsOverlap)(promptSources, implementationRoots)) {
+                return fail('Expected non-overlapping promptSources and implementationRoots in agent.config.json');
+            }
+            return shared_1.PASSED;
+        }
+        case 'agent-tool-approval': {
+            const toolPolicy = (0, shared_1.asRecord)(config?.toolPolicy);
+            if (toolPolicy?.mutative !== 'approval-required') {
+                return fail('Expected toolPolicy.mutative=approval-required in agent.config.json');
+            }
+            return shared_1.PASSED;
+        }
+        case 'agent-sandbox-limits': {
+            const sandbox = (0, shared_1.asRecord)(config?.sandbox);
+            if (sandbox?.ephemeral !== true || !(0, shared_1.isPositiveNumber)(sandbox.maxDurationSeconds) || !(0, shared_1.isPositiveNumber)(sandbox.maxMemoryMb) || !(0, shared_1.isPositiveNumber)(sandbox.maxCpuCores)) {
+                return fail('Expected ephemeral sandbox with positive duration, memory, and CPU limits');
+            }
+            return shared_1.PASSED;
+        }
+        case 'agent-context-trust': {
+            const contextPolicy = (0, shared_1.asRecord)(config?.contextPolicy);
+            if (contextPolicy?.untrustedContent !== 'data-only' || contextPolicy?.provenanceRequired !== true || contextPolicy?.toolOutputSchemaValidation !== true) {
+                return fail('Expected data-only untrusted context, provenance, and tool-output schema validation');
+            }
+            return shared_1.PASSED;
+        }
+        case 'agent-action-accountability': {
+            const toolPolicy = (0, shared_1.asRecord)(config?.toolPolicy);
+            const audit = (0, shared_1.asRecord)(config?.audit);
+            if (toolPolicy?.capabilityDelegation !== 'scoped-and-expiring' || audit?.appendOnly !== true || audit?.correlationId !== 'required') {
+                return fail('Expected scoped-and-expiring capabilities plus append-only correlated action evidence');
+            }
+            return shared_1.PASSED;
+        }
+        case 'agent-operational-budgets': {
+            const budgets = (0, shared_1.asRecord)(config?.operationalBudgets);
+            const concurrency = (0, shared_1.asRecord)(budgets?.mcpToolConcurrency);
+            const runbooksPath = typeof budgets?.runbooksPath === 'string' ? budgets.runbooksPath : '';
+            const runbooksAbsolute = runbooksPath.length > 0 ? (path.isAbsolute(runbooksPath) ? runbooksPath : path.join(ctx.satellitePath, runbooksPath)) : '';
+            const runbooksExists = runbooksAbsolute.length > 0 && await fs.exists(runbooksAbsolute);
+            if (!(0, shared_1.isPositiveNumber)(budgets?.maxPromptTokens)
+                || !(0, shared_1.isPositiveNumber)(budgets?.maxCompletionTokens)
+                || !(0, shared_1.isPositiveNumber)(budgets?.maxContextWindowTokens)
+                || !(0, shared_1.isPositiveNumber)(concurrency?.maxInFlight)
+                || !(0, shared_1.isPositiveNumber)(concurrency?.perToolMaxInFlight)
+                || !runbooksExists) {
+                return fail('Expected positive token, context, and MCP concurrency budgets plus a runbooksPath that exists');
+            }
+            return shared_1.PASSED;
+        }
+        case 'agent-credential-lifecycle': {
+            const credentials = (0, shared_1.asRecord)(config?.credentialLifecycle);
+            const revocation = (0, shared_1.asRecord)(credentials?.revocation);
+            if (!(0, shared_1.isPositiveNumber)(credentials?.delegationMaxTtlSeconds)
+                || !(0, shared_1.isPositiveNumber)(credentials?.rotationCadenceDays)
+                || (revocation?.onIncident !== 'immediate' && revocation?.onIncident !== 'scheduled')
+                || !(0, shared_1.isPositiveNumber)(revocation?.maxPropagationSeconds)) {
+                return fail('Expected positive delegation TTL, rotation cadence, and bounded incident revocation');
+            }
+            return shared_1.PASSED;
+        }
+        default:
+            return shared_1.SKIPPED;
+    }
+}
+//# sourceMappingURL=agent-rules.js.map

package/dist/application/validators/evaluators/handlers/architecture/agent-rules.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"agent-rules.js","sourceRoot":"","sources":["../../../../../../src/application/validators/evaluators/handlers/architecture/agent-rules.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAYA,8CAsFC;AAlGD,2CAA6B;AAI7B,qCAAmJ;AAEtI,QAAA,gBAAgB,GAAG,IAAI,GAAG,CAAC;IACtC,gBAAgB,EAAE,eAAe,EAAE,yBAAyB,EAAE,qBAAqB;IACnF,sBAAsB,EAAE,qBAAqB,EAAE,6BAA6B;IAC5E,2BAA2B,EAAE,4BAA4B;CAC1D,CAAC,CAAC;AAEI,KAAK,UAAU,iBAAiB,CAAC,IAAoB,EAAE,GAAsB,EAAE,EAAe;IACnG,MAAM,MAAM,GAAG,MAAM,IAAA,uBAAc,EAAC,EAAE,EAAE,GAAG,CAAC,aAAa,EAAE,mBAAmB,CAAC,CAAC;IAChF,MAAM,IAAI,GAAG,CAAC,MAAc,EAAa,EAAE,CAAC,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,OAAO,EAAE,GAAG,IAAI,CAAC,WAAW,MAAM,MAAM,EAAE,EAAE,CAAC,CAAC;IAE/G,QAAQ,IAAI,CAAC,QAAQ,EAAE,CAAC;QACtB,KAAK,gBAAgB,CAAC,CAAC,CAAC;YACtB,MAAM,KAAK,GAAG,IAAA,iBAAQ,EAAC,MAAM,EAAE,KAAK,CAAC,CAAC;YACtC,IAAI,OAAO,KAAK,EAAE,EAAE,KAAK,QAAQ,IAAI,KAAK,CAAC,EAAE,CAAC,MAAM,KAAK,CAAC,IAAI,IAAA,sBAAa,EAAC,KAAK,CAAC,YAAY,CAAC,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBAC7G,OAAO,IAAI,CAAC,uEAAuE,CAAC,CAAC;YACvF,CAAC;YACD,OAAO,eAAM,CAAC;QAChB,CAAC;QACD,KAAK,eAAe,CAAC,CAAC,CAAC;YACrB,MAAM,OAAO,GAAG,IAAA,iBAAQ,EAAC,MAAM,EAAE,OAAO,CAAC,CAAC;YAC1C,IAAI,OAAO,EAAE,IAAI,KAAK,UAAU,IAAI,CAAC,IAAA,2BAAkB,EAAC,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,IAAA,2BAAkB,EAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;gBACjH,OAAO,IAAI,CAAC,iFAAiF,CAAC,CAAC;YACjG,CAAC;YACD,OAAO,eAAM,CAAC;QAChB,CAAC;QACD,KAAK,yBAAyB,CAAC,CAAC,CAAC;YAC/B,MAAM,aAAa,GAAG,IAAA,sBAAa,EAAC,MAAM,EAAE,aAAa,CAAC,CAAC;YAC3D,MAAM,mBAAmB,GAAG,IAAA,sBAAa,EAAC,MAAM,EAAE,mBAAmB,CAAC,CAAC;YACvE,IAAI,aAAa,CAAC,MAAM,KAAK,CAAC,IAAI,mBAAmB,CAAC,MAAM,KAAK,CAAC,IAAI,IAAA,qBAAY,EAAC,aAAa,EAAE,mBAAmB,CAAC,EAAE,CAAC;gBACvH,OAAO,IAAI,CAAC,qFAAqF,CAAC,CAAC;YACrG,CAAC;YACD,OAAO,eAAM,CAAC;QAChB,CAAC;QACD,KAAK,qBAAqB,CAAC,CAAC,CAAC;YAC3B,MAAM,UAAU,GAAG,IAAA,iBAAQ,EAAC,MAAM,EAAE,UAAU,CAAC,CAAC;YAChD,IAAI,UAAU,EAAE,QAAQ,KAAK,mBAAmB,EAAE,CAAC;gBACjD,OAAO,IAAI,CAAC,qEAAqE,CAAC,CAAC;YACrF,CAAC;YACD,OAAO,eAAM,CAAC;QAChB,CAAC;QACD,KAAK,sBAAsB,CAAC,CAAC,CAAC;YAC5B,MAAM,OAAO,GAAG,IAAA,iBAAQ,EAAC,MAAM,EAAE,OAAO,CAAC,CAAC;YAC1C,IAAI,OAAO,EAAE,SAAS,KAAK,IAAI,IAAI,CAAC,IAAA,yBAAgB,EAAC,OAAO,CAAC,kBAAkB,CAAC,IAAI,CAAC,IAAA,yBAAgB,EAAC,OAAO,CAAC,WAAW,CAAC,IAAI,CAAC,IAAA,yBAAgB,EAAC,OAAO,CAAC,WAAW,CAAC,EAAE,CAAC;gBACrK,OAAO,IAAI,CAAC,2EAA2E,CAAC,CAAC;YAC3F,CAAC;YACD,OAAO,eAAM,CAAC;QAChB,CAAC;QACD,KAAK,qBAAqB,CAAC,CAAC,CAAC;YAC3B,MAAM,aAAa,GAAG,IAAA,iBAAQ,EAAC,MAAM,EAAE,aAAa,CAAC,CAAC;YACtD,IAAI,aAAa,EAAE,gBAAgB,KAAK,WAAW,IAAI,aAAa,EAAE,kBAAkB,KAAK,IAAI,IAAI,aAAa,EAAE,0BAA0B,KAAK,IAAI,EAAE,CAAC;gBACxJ,OAAO,IAAI,CAAC,qFAAqF,CAAC,CAAC;YACrG,CAAC;YACD,OAAO,eAAM,CAAC;QAChB,CAAC;QACD,KAAK,6BAA6B,CAAC,CAAC,CAAC;YACnC,MAAM,UAAU,GAAG,IAAA,iBAAQ,EAAC,MAAM,EAAE,UAAU,CAAC,CAAC;YAChD,MAAM,KAAK,GAAG,IAAA,iBAAQ,EAAC,MAAM,EAAE,KAAK,CAAC,CAAC;YACtC,IAAI,UAAU,EAAE,oBAAoB,KAAK,qBAAqB,IAAI,KAAK,EAAE,UAAU,KAAK,IAAI,IAAI,KAAK,EAAE,aAAa,KAAK,UAAU,EAAE,CAAC;gBACpI,OAAO,IAAI,CAAC,uFAAuF,CAAC,CAAC;YACvG,CAAC;YACD,OAAO,eAAM,CAAC;QAChB,CAAC;QACD,KAAK,2BAA2B,CAAC,CAAC,CAAC;YACjC,MAAM,OAAO,GAAG,IAAA,iBAAQ,EAAC,MAAM,EAAE,kBAAkB,CAAC,CAAC;YACrD,MAAM,WAAW,GAAG,IAAA,iBAAQ,EAAC,OAAO,EAAE,kBAAkB,CAAC,CAAC;YAC1D,MAAM,YAAY,GAAG,OAAO,OAAO,EAAE,YAAY,KAAK,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE,CAAC;YAC3F,MAAM,gBAAgB,GAAG,YAAY,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,aAAa,EAAE,YAAY,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;YACpJ,MAAM,cAAc,GAAG,gBAAgB,CAAC,MAAM,GAAG,CAAC,IAAI,MAAM,EAAE,CAAC,MAAM,CAAC,gBAAgB,CAAC,CAAC;YACxF,IAAI,CAAC,IAAA,yBAAgB,EAAC,OAAO,EAAE,eAAe,CAAC;mBAC1C,CAAC,IAAA,yBAAgB,EAAC,OAAO,EAAE,mBAAmB,CAAC;mBAC/C,CAAC,IAAA,yBAAgB,EAAC,OAAO,EAAE,sBAAsB,CAAC;mBAClD,CAAC,IAAA,yBAAgB,EAAC,WAAW,EAAE,WAAW,CAAC;mBAC3C,CAAC,IAAA,yBAAgB,EAAC,WAAW,EAAE,kBAAkB,CAAC;mBAClD,CAAC,cAAc,EAAE,CAAC;gBACrB,OAAO,IAAI,CAAC,+FAA+F,CAAC,CAAC;YAC/G,CAAC;YACD,OAAO,eAAM,CAAC;QAChB,CAAC;QACD,KAAK,4BAA4B,CAAC,CAAC,CAAC;YAClC,MAAM,WAAW,GAAG,IAAA,iBAAQ,EAAC,MAAM,EAAE,mBAAmB,CAAC,CAAC;YAC1D,MAAM,UAAU,GAAG,IAAA,iBAAQ,EAAC,WAAW,EAAE,UAAU,CAAC,CAAC;YACrD,IAAI,CAAC,IAAA,yBAAgB,EAAC,WAAW,EAAE,uBAAuB,CAAC;mBACtD,CAAC,IAAA,yBAAgB,EAAC,WAAW,EAAE,mBAAmB,CAAC;mBACnD,CAAC,UAAU,EAAE,UAAU,KAAK,WAAW,IAAI,UAAU,EAAE,UAAU,KAAK,WAAW,CAAC;mBAClF,CAAC,IAAA,yBAAgB,EAAC,UAAU,EAAE,qBAAqB,CAAC,EAAE,CAAC;gBAC1D,OAAO,IAAI,CAAC,qFAAqF,CAAC,CAAC;YACrG,CAAC;YACD,OAAO,eAAM,CAAC;QAChB,CAAC;QACD;YACE,OAAO,gBAAO,CAAC;IACnB,CAAC;AACH,CAAC"}

package/dist/application/validators/evaluators/handlers/architecture/ast-rules.d.ts

@@ -0,0 +1,6 @@
+import { IFileSystem } from '../../../../../domain/interfaces';
+import { NormalizedRule } from '../../../../../domain/models/normalized-rule';
+import { EvaluationContext } from '../../evaluator.interface';
+import { SubResult } from './shared';
+export declare const AST_CATEGORIES: Set<string>;
+export declare function evaluateAstRule(rule: NormalizedRule, ctx: EvaluationContext, fs: IFileSystem): Promise<SubResult>;

package/dist/application/validators/evaluators/handlers/architecture/ast-rules.js

@@ -0,0 +1,151 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.AST_CATEGORIES = void 0;
+exports.evaluateAstRule = evaluateAstRule;
+const path = __importStar(require("path"));
+const ts = __importStar(require("typescript"));
+const shared_1 = require("./shared");
+exports.AST_CATEGORIES = new Set([
+    'separation-of-concerns', 'dependency-injection', 'static-analysis', 'domain-purity',
+]);
+function parse(file, content) {
+    return ts.createSourceFile(file, content, ts.ScriptTarget.Latest, true);
+}
+function walk(node, visit) {
+    visit(node);
+    ts.forEachChild(node, (child) => walk(child, visit));
+}
+function importPath(node) {
+    return node.moduleSpecifier.getText().replace(/['"]/g, '');
+}
+async function evaluateAstRule(rule, ctx, fs) {
+    const srcPath = path.join(ctx.satellitePath, 'src');
+    if (!await fs.exists(srcPath))
+        return shared_1.PASSED;
+    const fail = (reason) => ({ result: 'failed', message: `${rule.description} - ${reason}` });
+    switch (rule.category) {
+        case 'separation-of-concerns':
+            if (rule.id !== 'MM-R11')
+                return shared_1.PASSED;
+            for (const file of (await (0, shared_1.getAllFilesRecursive)(fs, srcPath)).filter(isLogicLayerSource)) {
+                const sourceFile = parse(file, await fs.readFile(file));
+                let hasUiImport = false;
+                walk(sourceFile, n => {
+                    if (ts.isImportDeclaration(n) && ['@clack/prompts', 'inquirer', 'commander', 'express'].includes(importPath(n))) {
+                        hasUiImport = true;
+                    }
+                });
+                if (hasUiImport)
+                    return fail(`UI/CLI library imported in logic layer file: ${file}`);
+            }
+            return shared_1.PASSED;
+        case 'dependency-injection':
+            if (rule.id !== 'MM-R09')
+                return shared_1.PASSED;
+            for (const file of (await (0, shared_1.getAllFilesRecursive)(fs, srcPath)).filter(isInjectableCandidate)) {
+                const sourceFile = parse(file, await fs.readFile(file));
+                let hasManualInstantiation = false;
+                walk(sourceFile, n => {
+                    if (ts.isNewExpression(n)) {
+                        const className = n.expression.getText();
+                        if (/(Service|UseCase|Repository|Adapter)$/.test(className))
+                            hasManualInstantiation = true;
+                    }
+                });
+                if (hasManualInstantiation)
+                    return fail(`Manual instantiation (new keyword) of Service/UseCase/Repository detected in: ${file}`);
+            }
+            return shared_1.PASSED;
+        case 'static-analysis':
+            if (rule.id !== 'MM-R10')
+                return shared_1.PASSED;
+            for (const file of (await (0, shared_1.getAllFilesRecursive)(fs, srcPath)).filter(isAnalyzerSource)) {
+                const content = await fs.readFile(file);
+                const sourceFile = parse(file, content);
+                let hasAstImport = false;
+                walk(sourceFile, n => {
+                    if (ts.isImportDeclaration(n)) {
+                        const p = importPath(n);
+                        if (p === 'typescript' || p === '@babel/parser')
+                            hasAstImport = true;
+                    }
+                });
+                const usesRegexForCode = content.includes('RegExp') || content.includes('.match(');
+                if (!hasAstImport && usesRegexForCode) {
+                    return fail(`Analyzer file appears to use Regex without an AST parser like typescript: ${file}`);
+                }
+            }
+            return shared_1.PASSED;
+        case 'domain-purity':
+            if (rule.id !== 'MM-R12')
+                return shared_1.PASSED;
+            for (const file of (await (0, shared_1.getAllFilesRecursive)(fs, srcPath)).filter(isDomainSource)) {
+                const sourceFile = parse(file, await fs.readFile(file));
+                let hasPersistenceImport = false;
+                walk(sourceFile, n => {
+                    if (ts.isImportDeclaration(n)) {
+                        const p = importPath(n);
+                        if (p.includes('typeorm') || p.includes('mongoose') || p.includes('sequelize') || p.includes('prisma')) {
+                            hasPersistenceImport = true;
+                        }
+                    }
+                });
+                if (hasPersistenceImport) {
+                    return { result: 'failed', message: `[RECOMMENDATION] ${rule.description} - Domain persistence import detected in: ${file}. Consider using Data Mapper.` };
+                }
+            }
+            return shared_1.PASSED;
+        default:
+            return shared_1.SKIPPED;
+    }
+}
+function isLogicLayerSource(f) {
+    if (!f.endsWith('.ts') || f.endsWith('.spec.ts') || f.endsWith('.test.ts'))
+        return false;
+    return f.includes('/application/') || f.includes('/domain/') || f.includes('/use-cases/');
+}
+function isInjectableCandidate(f) {
+    return f.endsWith('.ts')
+        && !f.endsWith('.spec.ts') && !f.endsWith('.test.ts')
+        && !f.endsWith('app.module.ts') && !f.endsWith('registry.ts');
+}
+function isAnalyzerSource(f) {
+    return f.includes('analyzer') && f.endsWith('.ts') && !f.endsWith('.spec.ts');
+}
+function isDomainSource(f) {
+    return f.includes('/domain/') && f.endsWith('.ts') && !f.endsWith('.spec.ts');
+}
+//# sourceMappingURL=ast-rules.js.map

package/dist/application/validators/evaluators/handlers/architecture/ast-rules.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ast-rules.js","sourceRoot":"","sources":["../../../../../../src/application/validators/evaluators/handlers/architecture/ast-rules.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAwBA,0CA4EC;AApGD,2CAA6B;AAC7B,+CAAiC;AAIjC,qCAA4E;AAE/D,QAAA,cAAc,GAAG,IAAI,GAAG,CAAC;IACpC,wBAAwB,EAAE,sBAAsB,EAAE,iBAAiB,EAAE,eAAe;CACrF,CAAC,CAAC;AAEH,SAAS,KAAK,CAAC,IAAY,EAAE,OAAe;IAC1C,OAAO,EAAE,CAAC,gBAAgB,CAAC,IAAI,EAAE,OAAO,EAAE,EAAE,CAAC,YAAY,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;AAC1E,CAAC;AAED,SAAS,IAAI,CAAC,IAAS,EAAE,KAAuB;IAC9C,KAAK,CAAC,IAAI,CAAC,CAAC;IACZ,EAAE,CAAC,YAAY,CAAC,IAAI,EAAE,CAAC,KAAU,EAAE,EAAE,CAAC,IAAI,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC,CAAC;AAC5D,CAAC;AAED,SAAS,UAAU,CAAC,IAAS;IAC3B,OAAO,IAAI,CAAC,eAAe,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;AAC7D,CAAC;AAEM,KAAK,UAAU,eAAe,CAAC,IAAoB,EAAE,GAAsB,EAAE,EAAe;IACjG,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,aAAa,EAAE,KAAK,CAAC,CAAC;IACpD,IAAI,CAAC,MAAM,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC;QAAE,OAAO,eAAM,CAAC;IAC7C,MAAM,IAAI,GAAG,CAAC,MAAc,EAAa,EAAE,CAAC,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,OAAO,EAAE,GAAG,IAAI,CAAC,WAAW,MAAM,MAAM,EAAE,EAAE,CAAC,CAAC;IAE/G,QAAQ,IAAI,CAAC,QAAQ,EAAE,CAAC;QACtB,KAAK,wBAAwB;YAC3B,IAAI,IAAI,CAAC,EAAE,KAAK,QAAQ;gBAAE,OAAO,eAAM,CAAC;YACxC,KAAK,MAAM,IAAI,IAAI,CAAC,MAAM,IAAA,6BAAoB,EAAC,EAAE,EAAE,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,kBAAkB,CAAC,EAAE,CAAC;gBACxF,MAAM,UAAU,GAAG,KAAK,CAAC,IAAI,EAAE,MAAM,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC;gBACxD,IAAI,WAAW,GAAG,KAAK,CAAC;gBACxB,IAAI,CAAC,UAAU,EAAE,CAAC,CAAC,EAAE;oBACnB,IAAI,EAAE,CAAC,mBAAmB,CAAC,CAAC,CAAC,IAAI,CAAC,gBAAgB,EAAE,UAAU,EAAE,WAAW,EAAE,SAAS,CAAC,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;wBAChH,WAAW,GAAG,IAAI,CAAC;oBACrB,CAAC;gBACH,CAAC,CAAC,CAAC;gBACH,IAAI,WAAW;oBAAE,OAAO,IAAI,CAAC,gDAAgD,IAAI,EAAE,CAAC,CAAC;YACvF,CAAC;YACD,OAAO,eAAM,CAAC;QAEhB,KAAK,sBAAsB;YACzB,IAAI,IAAI,CAAC,EAAE,KAAK,QAAQ;gBAAE,OAAO,eAAM,CAAC;YACxC,KAAK,MAAM,IAAI,IAAI,CAAC,MAAM,IAAA,6BAAoB,EAAC,EAAE,EAAE,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,qBAAqB,CAAC,EAAE,CAAC;gBAC3F,MAAM,UAAU,GAAG,KAAK,CAAC,IAAI,EAAE,MAAM,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC;gBACxD,IAAI,sBAAsB,GAAG,KAAK,CAAC;gBACnC,IAAI,CAAC,UAAU,EAAE,CAAC,CAAC,EAAE;oBACnB,IAAI,EAAE,CAAC,eAAe,CAAC,CAAC,CAAC,EAAE,CAAC;wBAC1B,MAAM,SAAS,GAAG,CAAC,CAAC,UAAU,CAAC,OAAO,EAAE,CAAC;wBACzC,IAAI,uCAAuC,CAAC,IAAI,CAAC,SAAS,CAAC;4BAAE,sBAAsB,GAAG,IAAI,CAAC;oBAC7F,CAAC;gBACH,CAAC,CAAC,CAAC;gBACH,IAAI,sBAAsB;oBAAE,OAAO,IAAI,CAAC,iFAAiF,IAAI,EAAE,CAAC,CAAC;YACnI,CAAC;YACD,OAAO,eAAM,CAAC;QAEhB,KAAK,iBAAiB;YACpB,IAAI,IAAI,CAAC,EAAE,KAAK,QAAQ;gBAAE,OAAO,eAAM,CAAC;YACxC,KAAK,MAAM,IAAI,IAAI,CAAC,MAAM,IAAA,6BAAoB,EAAC,EAAE,EAAE,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,gBAAgB,CAAC,EAAE,CAAC;gBACtF,MAAM,OAAO,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;gBACxC,MAAM,UAAU,GAAG,KAAK,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;gBACxC,IAAI,YAAY,GAAG,KAAK,CAAC;gBACzB,IAAI,CAAC,UAAU,EAAE,CAAC,CAAC,EAAE;oBACnB,IAAI,EAAE,CAAC,mBAAmB,CAAC,CAAC,CAAC,EAAE,CAAC;wBAC9B,MAAM,CAAC,GAAG,UAAU,CAAC,CAAC,CAAC,CAAC;wBACxB,IAAI,CAAC,KAAK,YAAY,IAAI,CAAC,KAAK,eAAe;4BAAE,YAAY,GAAG,IAAI,CAAC;oBACvE,CAAC;gBACH,CAAC,CAAC,CAAC;gBACH,MAAM,gBAAgB,GAAG,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC;gBACnF,IAAI,CAAC,YAAY,IAAI,gBAAgB,EAAE,CAAC;oBACtC,OAAO,IAAI,CAAC,6EAA6E,IAAI,EAAE,CAAC,CAAC;gBACnG,CAAC;YACH,CAAC;YACD,OAAO,eAAM,CAAC;QAEhB,KAAK,eAAe;YAClB,IAAI,IAAI,CAAC,EAAE,KAAK,QAAQ;gBAAE,OAAO,eAAM,CAAC;YACxC,KAAK,MAAM,IAAI,IAAI,CAAC,MAAM,IAAA,6BAAoB,EAAC,EAAE,EAAE,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,cAAc,CAAC,EAAE,CAAC;gBACpF,MAAM,UAAU,GAAG,KAAK,CAAC,IAAI,EAAE,MAAM,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC;gBACxD,IAAI,oBAAoB,GAAG,KAAK,CAAC;gBACjC,IAAI,CAAC,UAAU,EAAE,CAAC,CAAC,EAAE;oBACnB,IAAI,EAAE,CAAC,mBAAmB,CAAC,CAAC,CAAC,EAAE,CAAC;wBAC9B,MAAM,CAAC,GAAG,UAAU,CAAC,CAAC,CAAC,CAAC;wBACxB,IAAI,CAAC,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;4BACvG,oBAAoB,GAAG,IAAI,CAAC;wBAC9B,CAAC;oBACH,CAAC;gBACH,CAAC,CAAC,CAAC;gBACH,IAAI,oBAAoB,EAAE,CAAC;oBACzB,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,OAAO,EAAE,oBAAoB,IAAI,CAAC,WAAW,6CAA6C,IAAI,+BAA+B,EAAE,CAAC;gBAC7J,CAAC;YACH,CAAC;YACD,OAAO,eAAM,CAAC;QAEhB;YACE,OAAO,gBAAO,CAAC;IACnB,CAAC;AACH,CAAC;AAED,SAAS,kBAAkB,CAAC,CAAS;IACnC,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,UAAU,CAAC;QAAE,OAAO,KAAK,CAAC;IACzF,OAAO,CAAC,CAAC,QAAQ,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,aAAa,CAAC,CAAC;AAC5F,CAAC;AAED,SAAS,qBAAqB,CAAC,CAAS;IACtC,OAAO,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC;WACnB,CAAC,CAAC,CAAC,QAAQ,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,UAAU,CAAC;WAClD,CAAC,CAAC,CAAC,QAAQ,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,aAAa,CAAC,CAAC;AAClE,CAAC;AAED,SAAS,gBAAgB,CAAC,CAAS;IACjC,OAAO,CAAC,CAAC,QAAQ,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC;AAChF,CAAC;AAED,SAAS,cAAc,CAAC,CAAS;IAC/B,OAAO,CAAC,CAAC,QAAQ,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC;AAChF,CAAC"}

package/dist/application/validators/evaluators/handlers/architecture/config-rules.d.ts

@@ -0,0 +1,6 @@
+import { IFileSystem } from '../../../../../domain/interfaces';
+import { NormalizedRule } from '../../../../../domain/models/normalized-rule';
+import { EvaluationContext } from '../../evaluator.interface';
+import { SubResult } from './shared';
+export declare const CONFIG_CATEGORIES: Set<string>;
+export declare function evaluateConfigRule(rule: NormalizedRule, ctx: EvaluationContext, fs: IFileSystem): Promise<SubResult>;

package/dist/application/validators/evaluators/handlers/architecture/config-rules.js

@@ -0,0 +1,60 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.CONFIG_CATEGORIES = void 0;
+exports.evaluateConfigRule = evaluateConfigRule;
+const shared_1 = require("./shared");
+exports.CONFIG_CATEGORIES = new Set([
+    'serverless-config', 'serverless-stateless', 'serverless-package', 'serverless-cold-start',
+    'event-driven-config', 'event-driven-outbox', 'event-driven-dlq',
+    'data-mesh-config', 'data-mesh-contracts', 'data-mesh-governance',
+    'edge-computing-sync', 'edge-computing-isolation', 'edge-computing-conflict',
+]);
+async function evaluateConfigRule(rule, ctx, fs) {
+    const sat = ctx.satellitePath;
+    const fail = (file) => ({ result: 'failed', message: `${rule.description} - ${file} does not satisfy ${rule.id}` });
+    switch (rule.category) {
+        case 'serverless-config':
+        case 'serverless-stateless':
+        case 'serverless-package':
+        case 'serverless-cold-start': {
+            const config = await (0, shared_1.readJsonConfig)(fs, sat, 'serverless.config.json');
+            const pkg = (0, shared_1.asRecord)(config?.package);
+            const coldStart = (0, shared_1.asRecord)(config?.coldStart);
+            const valid = rule.category === 'serverless-config' ? Boolean(config)
+                : rule.category === 'serverless-stateless' ? config?.stateless === true
+                    : rule.category === 'serverless-package' ? (0, shared_1.isPositiveNumber)(pkg?.maxSizeMb) && pkg?.maxSizeMb <= 50
+                        : (0, shared_1.isPositiveNumber)(coldStart?.maxInitMilliseconds) && coldStart?.lazyInitialization === true;
+            return valid ? shared_1.PASSED : fail('serverless.config.json');
+        }
+        case 'event-driven-config':
+        case 'event-driven-outbox':
+        case 'event-driven-dlq': {
+            const config = await (0, shared_1.readJsonConfig)(fs, sat, 'event-driven.config.json');
+            const valid = rule.category === 'event-driven-config' ? config?.strictAsyncApi === true
+                : rule.category === 'event-driven-outbox' ? config?.transactionalOutbox === true
+                    : config?.deadLetterQueue === true;
+            return valid ? shared_1.PASSED : fail('event-driven.config.json');
+        }
+        case 'data-mesh-config':
+        case 'data-mesh-contracts':
+        case 'data-mesh-governance': {
+            const config = await (0, shared_1.readJsonConfig)(fs, sat, 'data-mesh.config.json');
+            const valid = rule.category === 'data-mesh-config' ? config?.isDataProduct === true
+                : rule.category === 'data-mesh-contracts' ? config?.hasDataContracts === true
+                    : config?.federatedGovernance === true;
+            return valid ? shared_1.PASSED : fail('data-mesh.config.json');
+        }
+        case 'edge-computing-sync':
+        case 'edge-computing-isolation':
+        case 'edge-computing-conflict': {
+            const config = await (0, shared_1.readJsonConfig)(fs, sat, 'edge-computing.config.json');
+            const valid = rule.category === 'edge-computing-sync' ? ['offline-first', 'eventual', 'real-time-fallback'].includes(config?.syncStrategy)
+                : rule.category === 'edge-computing-isolation' ? config?.edgeIsolation === true
+                    : ['last-write-wins', 'merge', 'manual'].includes(config?.conflictResolution);
+            return valid ? shared_1.PASSED : fail('edge-computing.config.json');
+        }
+        default:
+            return shared_1.SKIPPED;
+    }
+}
+//# sourceMappingURL=config-rules.js.map

package/dist/application/validators/evaluators/handlers/architecture/config-rules.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"config-rules.js","sourceRoot":"","sources":["../../../../../../src/application/validators/evaluators/handlers/architecture/config-rules.ts"],"names":[],"mappings":";;;AAYA,gDAoDC;AA7DD,qCAAkG;AAErF,QAAA,iBAAiB,GAAG,IAAI,GAAG,CAAC;IACvC,mBAAmB,EAAE,sBAAsB,EAAE,oBAAoB,EAAE,uBAAuB;IAC1F,qBAAqB,EAAE,qBAAqB,EAAE,kBAAkB;IAChE,kBAAkB,EAAE,qBAAqB,EAAE,sBAAsB;IACjE,qBAAqB,EAAE,0BAA0B,EAAE,yBAAyB;CAC7E,CAAC,CAAC;AAEI,KAAK,UAAU,kBAAkB,CAAC,IAAoB,EAAE,GAAsB,EAAE,EAAe;IACpG,MAAM,GAAG,GAAG,GAAG,CAAC,aAAa,CAAC;IAC9B,MAAM,IAAI,GAAG,CAAC,IAAY,EAAa,EAAE,CAAC,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,OAAO,EAAE,GAAG,IAAI,CAAC,WAAW,MAAM,IAAI,qBAAqB,IAAI,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC;IAEvI,QAAQ,IAAI,CAAC,QAAQ,EAAE,CAAC;QACtB,KAAK,mBAAmB,CAAC;QACzB,KAAK,sBAAsB,CAAC;QAC5B,KAAK,oBAAoB,CAAC;QAC1B,KAAK,uBAAuB,CAAC,CAAC,CAAC;YAC7B,MAAM,MAAM,GAAG,MAAM,IAAA,uBAAc,EAAC,EAAE,EAAE,GAAG,EAAE,wBAAwB,CAAC,CAAC;YACvE,MAAM,GAAG,GAAG,IAAA,iBAAQ,EAAC,MAAM,EAAE,OAAO,CAAC,CAAC;YACtC,MAAM,SAAS,GAAG,IAAA,iBAAQ,EAAC,MAAM,EAAE,SAAS,CAAC,CAAC;YAC9C,MAAM,KAAK,GAAG,IAAI,CAAC,QAAQ,KAAK,mBAAmB,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC;gBACnE,CAAC,CAAC,IAAI,CAAC,QAAQ,KAAK,sBAAsB,CAAC,CAAC,CAAC,MAAM,EAAE,SAAS,KAAK,IAAI;oBACvE,CAAC,CAAC,IAAI,CAAC,QAAQ,KAAK,oBAAoB,CAAC,CAAC,CAAC,IAAA,yBAAgB,EAAC,GAAG,EAAE,SAAS,CAAC,IAAK,GAAG,EAAE,SAAoB,IAAI,EAAE;wBAC/G,CAAC,CAAC,IAAA,yBAAgB,EAAC,SAAS,EAAE,mBAAmB,CAAC,IAAI,SAAS,EAAE,kBAAkB,KAAK,IAAI,CAAC;YAC/F,OAAO,KAAK,CAAC,CAAC,CAAC,eAAM,CAAC,CAAC,CAAC,IAAI,CAAC,wBAAwB,CAAC,CAAC;QACzD,CAAC;QAED,KAAK,qBAAqB,CAAC;QAC3B,KAAK,qBAAqB,CAAC;QAC3B,KAAK,kBAAkB,CAAC,CAAC,CAAC;YACxB,MAAM,MAAM,GAAG,MAAM,IAAA,uBAAc,EAAC,EAAE,EAAE,GAAG,EAAE,0BAA0B,CAAC,CAAC;YACzE,MAAM,KAAK,GAAG,IAAI,CAAC,QAAQ,KAAK,qBAAqB,CAAC,CAAC,CAAC,MAAM,EAAE,cAAc,KAAK,IAAI;gBACrF,CAAC,CAAC,IAAI,CAAC,QAAQ,KAAK,qBAAqB,CAAC,CAAC,CAAC,MAAM,EAAE,mBAAmB,KAAK,IAAI;oBAChF,CAAC,CAAC,MAAM,EAAE,eAAe,KAAK,IAAI,CAAC;YACrC,OAAO,KAAK,CAAC,CAAC,CAAC,eAAM,CAAC,CAAC,CAAC,IAAI,CAAC,0BAA0B,CAAC,CAAC;QAC3D,CAAC;QAED,KAAK,kBAAkB,CAAC;QACxB,KAAK,qBAAqB,CAAC;QAC3B,KAAK,sBAAsB,CAAC,CAAC,CAAC;YAC5B,MAAM,MAAM,GAAG,MAAM,IAAA,uBAAc,EAAC,EAAE,EAAE,GAAG,EAAE,uBAAuB,CAAC,CAAC;YACtE,MAAM,KAAK,GAAG,IAAI,CAAC,QAAQ,KAAK,kBAAkB,CAAC,CAAC,CAAC,MAAM,EAAE,aAAa,KAAK,IAAI;gBACjF,CAAC,CAAC,IAAI,CAAC,QAAQ,KAAK,qBAAqB,CAAC,CAAC,CAAC,MAAM,EAAE,gBAAgB,KAAK,IAAI;oBAC7E,CAAC,CAAC,MAAM,EAAE,mBAAmB,KAAK,IAAI,CAAC;YACzC,OAAO,KAAK,CAAC,CAAC,CAAC,eAAM,CAAC,CAAC,CAAC,IAAI,CAAC,uBAAuB,CAAC,CAAC;QACxD,CAAC;QAED,KAAK,qBAAqB,CAAC;QAC3B,KAAK,0BAA0B,CAAC;QAChC,KAAK,yBAAyB,CAAC,CAAC,CAAC;YAC/B,MAAM,MAAM,GAAG,MAAM,IAAA,uBAAc,EAAC,EAAE,EAAE,GAAG,EAAE,4BAA4B,CAAC,CAAC;YAC3E,MAAM,KAAK,GAAG,IAAI,CAAC,QAAQ,KAAK,qBAAqB,CAAC,CAAC,CAAC,CAAC,eAAe,EAAE,UAAU,EAAE,oBAAoB,CAAC,CAAC,QAAQ,CAAC,MAAM,EAAE,YAAsB,CAAC;gBAClJ,CAAC,CAAC,IAAI,CAAC,QAAQ,KAAK,0BAA0B,CAAC,CAAC,CAAC,MAAM,EAAE,aAAa,KAAK,IAAI;oBAC/E,CAAC,CAAC,CAAC,iBAAiB,EAAE,OAAO,EAAE,QAAQ,CAAC,CAAC,QAAQ,CAAC,MAAM,EAAE,kBAA4B,CAAC,CAAC;YAC1F,OAAO,KAAK,CAAC,CAAC,CAAC,eAAM,CAAC,CAAC,CAAC,IAAI,CAAC,4BAA4B,CAAC,CAAC;QAC7D,CAAC;QAED;YACE,OAAO,gBAAO,CAAC;IACnB,CAAC;AACH,CAAC"}

package/dist/application/validators/evaluators/handlers/architecture/shared.d.ts

@@ -0,0 +1,14 @@
+import { IFileSystem } from '../../../../../domain/interfaces';
+export type SubResult = {
+    result: 'passed' | 'failed' | 'skipped';
+    message?: string;
+};
+export declare const PASSED: SubResult;
+export declare const SKIPPED: SubResult;
+export declare function asRecord(value: unknown): Record<string, unknown> | undefined;
+export declare function asStringArray(value: unknown): string[];
+export declare function isRestrictedAccess(value: unknown): boolean;
+export declare function isPositiveNumber(value: unknown): boolean;
+export declare function pathsOverlap(left: string[], right: string[]): boolean;
+export declare function getAllFilesRecursive(fs: IFileSystem, dir: string): Promise<string[]>;
+export declare function readJsonConfig(fs: IFileSystem, satellitePath: string, fileName: string): Promise<Record<string, unknown> | undefined>;