@gobing-ai/ts-rule-engine 0.3.1 → 0.3.3

package/dist/fixers/test-stub-fixer.d.ts

@@ -11,7 +11,7 @@
  * @module rule-engine/fixers/test-stub-fixer
  */
 import { type ProcessExecutor } from '@gobing-ai/ts-runtime';
-import type { CapabilityRegistry } from '../host/capability-registry';
+import type { CapabilityRegistry } from '@gobing-ai/ts-runtime/plugin';
 import type { TestPathResolver } from '../resolvers/test-path-resolver';
 import type { Fix } from '../types';
 import type { RuleFixerInput, RuleFixerProvider } from './fixers';

package/dist/fixers/test-stub-fixer.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"test-stub-fixer.d.ts","sourceRoot":"","sources":["../../src/fixers/test-stub-fixer.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAGH,OAAO,EAAkB,KAAK,eAAe,EAAE,MAAM,uBAAuB,CAAC;AAC7E,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,6BAA6B,CAAC;AACtE,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,iCAAiC,CAAC;AACxE,OAAO,KAAK,EAAE,GAAG,EAAE,MAAM,UAAU,CAAC;AACpC,OAAO,KAAK,EAAE,cAAc,EAAE,iBAAiB,EAAE,MAAM,UAAU,CAAC;AAElE,0DAA0D;AAC1D,MAAM,WAAW,kBAAkB;IAC/B,kDAAkD;IAClD,MAAM,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;CAC1C;AAED,6EAA6E;AAC7E,eAAO,MAAM,cAAc,EAAE,kBAAyC,CAAC;AAEvE,wDAAwD;AACxD,MAAM,WAAW,iBAAiB;IAC9B,8CAA8C;IAC9C,QAAQ,CAAC,SAAS,EAAE,kBAAkB,CAAC,gBAAgB,CAAC,CAAC;IACzD,+DAA+D;IAC/D,QAAQ,CAAC,eAAe,EAAE,eAAe,CAAC;IAC1C,iDAAiD;IACjD,QAAQ,CAAC,UAAU,CAAC,EAAE,kBAAkB,CAAC;CAC5C;AAUD;;;;;;;GAOG;AACH,qBAAa,aAAc,YAAW,iBAAiB;IACnD,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAuC;IACjE,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAqB;gBAE5B,IAAI,EAAE,iBAAiB;IAOnC,wDAAwD;IAClD,WAAW,CAAC,KAAK,EAAE,cAAc,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC;CAkD3D"}
+{"version":3,"file":"test-stub-fixer.d.ts","sourceRoot":"","sources":["../../src/fixers/test-stub-fixer.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,OAAO,EAA4C,KAAK,eAAe,EAAE,MAAM,uBAAuB,CAAC;AACvG,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,8BAA8B,CAAC;AACvE,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,iCAAiC,CAAC;AACxE,OAAO,KAAK,EAAE,GAAG,EAAE,MAAM,UAAU,CAAC;AACpC,OAAO,KAAK,EAAE,cAAc,EAAE,iBAAiB,EAAE,MAAM,UAAU,CAAC;AAElE,0DAA0D;AAC1D,MAAM,WAAW,kBAAkB;IAC/B,kDAAkD;IAClD,MAAM,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;CAC1C;AAED,6EAA6E;AAC7E,eAAO,MAAM,cAAc,EAAE,kBAAyC,CAAC;AAEvE,wDAAwD;AACxD,MAAM,WAAW,iBAAiB;IAC9B,8CAA8C;IAC9C,QAAQ,CAAC,SAAS,EAAE,kBAAkB,CAAC,gBAAgB,CAAC,CAAC;IACzD,+DAA+D;IAC/D,QAAQ,CAAC,eAAe,EAAE,eAAe,CAAC;IAC1C,iDAAiD;IACjD,QAAQ,CAAC,UAAU,CAAC,EAAE,kBAAkB,CAAC;CAC5C;AAUD;;;;;;;GAOG;AACH,qBAAa,aAAc,YAAW,iBAAiB;IACnD,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAuC;IACjE,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAqB;gBAE5B,IAAI,EAAE,iBAAiB;IAOnC,wDAAwD;IAClD,WAAW,CAAC,KAAK,EAAE,cAAc,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC;CAkD3D"}

package/dist/fixers/test-stub-fixer.js

@@ -10,13 +10,12 @@
  *
  * @module rule-engine/fixers/test-stub-fixer
  */
-import { isAbsolute, join } from 'node:path';
-import { NodeFileSystem } from '@gobing-ai/ts-runtime';
+import { isAbsolutePath, joinPath, NodeFileSystem } from '@gobing-ai/ts-runtime';
 /** Real file-system implementation backed by the runtime FileSystem seam. */
 export const realFileSystem = new NodeFileSystem();
 /** Normalize a finding path to a repository-relative POSIX path, or return null when invalid. */
 function normalizeFindingPath(filePath) {
-    if (!filePath || isAbsolute(filePath))
+    if (!filePath || isAbsolutePath(filePath))
         return null;
     const normalized = filePath.replaceAll('\\', '/').replace(/^\.\//, '');
     if (normalized === '..' || normalized.startsWith('../') || normalized.includes('/../'))
@@ -68,7 +67,7 @@ export class TestStubFixer {
             catch {
                 continue;
             }
-            const absTestPath = join(context.workdir, testRelPath);
+            const absTestPath = joinPath(context.workdir, testRelPath);
             if (await this.fs.exists(absTestPath))
                 continue;
             // Export discovery is intentionally omitted — pass empty exports array.

package/dist/host/builtins.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"builtins.d.ts","sourceRoot":"","sources":["../../src/host/builtins.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AAqB7D,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAC;AAEzD,4DAA4D;AAC5D,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,cAAc,EAAE,QAAQ,CAAC,EAAE,eAAe,GAAG,IAAI,CAuBvF"}
+{"version":3,"file":"builtins.d.ts","sourceRoot":"","sources":["../../src/host/builtins.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AAsB7D,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAC;AAEzD,4DAA4D;AAC5D,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,cAAc,EAAE,QAAQ,CAAC,EAAE,eAAe,GAAG,IAAI,CAwBvF"}

package/dist/host/builtins.js

@@ -5,6 +5,7 @@ import { ForbiddenImportEvaluator } from '../evaluators/forbidden-import-evaluat
 import { ImportBoundaryEvaluator } from '../evaluators/import-boundary-evaluator.js';
 import { PathEvaluator } from '../evaluators/path-evaluator.js';
 import { RegexEvaluator } from '../evaluators/regex-evaluator.js';
+import { RipgrepEvaluator } from '../evaluators/ripgrep-evaluator.js';
 import { SchemaArtifactEvaluator } from '../evaluators/schema-artifact-evaluator.js';
 import { SecretsScannerEvaluator } from '../evaluators/secrets-scanner-evaluator.js';
 import { SgEvaluator } from '../evaluators/sg-evaluator.js';
@@ -15,10 +16,11 @@ import { TextFormatter } from '../formatters/text.js';
 import { GoTestPathResolver, PythonTestPathResolver, RustTestPathResolver, TypeScriptTestPathResolver, } from '../resolvers/test-path-resolver.js';
 /** Register bundled evaluators and formatters on a host. */
 export function registerBuiltins(host, executor) {
-    const regex = new RegexEvaluator();
     const path = new PathEvaluator();
-    host.evaluators.register('regex', regex, 'builtin');
-    host.evaluators.register('rg', regex, 'builtin');
+    // `regex` = JS RegExp engine; `rg` = real ripgrep engine (ReDoS-immune, prunes during
+    // traversal). The two are honestly named distinct engines, not aliases.
+    host.evaluators.register('regex', new RegexEvaluator(), 'builtin');
+    host.evaluators.register('rg', new RipgrepEvaluator(executor), 'builtin');
     host.evaluators.register('path', path, 'builtin');
     host.evaluators.register('file-exist', path, 'builtin');
     host.evaluators.register('forbidden-import', new ForbiddenImportEvaluator(), 'builtin');

package/dist/host/bundled-rules.d.ts

@@ -2,7 +2,7 @@
  * Resolve the absolute path to the rule presets bundled with
  * `@gobing-ai/ts-rule-engine`.
  *
- * The directory ships portable presets (`recommended`, `spur-dev`) and category
+ * The directory ships a generic example preset and category
  * folders (`typescript`, `structure`, `quality`) so a consumer gets a working
  * default ruleset without authoring any files. Pass the returned path as the
  * lowest-priority entry to {@link loadPreset}'s `roots`, letting project-local

package/dist/host/bundled-rules.js

@@ -12,7 +12,7 @@ const defaultFs = new NodeSyncFileSystem();
  * Resolve the absolute path to the rule presets bundled with
  * `@gobing-ai/ts-rule-engine`.
  *
- * The directory ships portable presets (`recommended`, `spur-dev`) and category
+ * The directory ships a generic example preset and category
  * folders (`typescript`, `structure`, `quality`) so a consumer gets a working
  * default ruleset without authoring any files. Pass the returned path as the
  * lowest-priority entry to {@link loadPreset}'s `roots`, letting project-local

package/dist/host/rule-engine-host.d.ts

@@ -1,6 +1,6 @@
+import { CapabilityRegistry } from '@gobing-ai/ts-runtime/plugin';
 import type { TestPathResolver } from '../resolvers/test-path-resolver';
 import type { ResultFormatter, RuleEvaluator } from '../types';
-import { CapabilityRegistry } from './capability-registry';
 /** Host container for rule-engine capabilities. */
 export declare class RuleEngineHost {
     /** Evaluator registry keyed by evaluator type. */

package/dist/host/rule-engine-host.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"rule-engine-host.d.ts","sourceRoot":"","sources":["../../src/host/rule-engine-host.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,iCAAiC,CAAC;AACxE,OAAO,KAAK,EAAE,eAAe,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AAC/D,OAAO,EAAE,kBAAkB,EAAE,MAAM,uBAAuB,CAAC;AAE3D,mDAAmD;AACnD,qBAAa,cAAc;IACvB,kDAAkD;IAClD,QAAQ,CAAC,UAAU,EAAE,kBAAkB,CAAC,aAAa,CAAC,CAAC;IACvD,kDAAkD;IAClD,QAAQ,CAAC,UAAU,EAAE,kBAAkB,CAAC,eAAe,CAAC,CAAC;IACzD,0DAA0D;IAC1D,QAAQ,CAAC,SAAS,EAAE,kBAAkB,CAAC,gBAAgB,CAAC,CAAC;;CAO5D"}
+{"version":3,"file":"rule-engine-host.d.ts","sourceRoot":"","sources":["../../src/host/rule-engine-host.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,kBAAkB,EAAE,MAAM,8BAA8B,CAAC;AAClE,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,iCAAiC,CAAC;AACxE,OAAO,KAAK,EAAE,eAAe,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AAE/D,mDAAmD;AACnD,qBAAa,cAAc;IACvB,kDAAkD;IAClD,QAAQ,CAAC,UAAU,EAAE,kBAAkB,CAAC,aAAa,CAAC,CAAC;IACvD,kDAAkD;IAClD,QAAQ,CAAC,UAAU,EAAE,kBAAkB,CAAC,eAAe,CAAC,CAAC;IACzD,0DAA0D;IAC1D,QAAQ,CAAC,SAAS,EAAE,kBAAkB,CAAC,gBAAgB,CAAC,CAAC;;CAO5D"}

package/dist/host/rule-engine-host.js

@@ -1,4 +1,4 @@
-import { CapabilityRegistry } from './capability-registry.js';
+import { CapabilityRegistry } from '@gobing-ai/ts-runtime/plugin';
 /** Host container for rule-engine capabilities. */
 export class RuleEngineHost {
     /** Evaluator registry keyed by evaluator type. */

package/dist/index.d.ts

@@ -1,12 +1,14 @@
+export { type CapabilityEntry, type CapabilityOrigin, CapabilityRegistry } from '@gobing-ai/ts-runtime/plugin';
 export * from './config/extensions';
 export * from './config/loader';
 export * from './engine';
+export { isRipgrepCompatiblePattern } from './evaluators/ripgrep-evaluator';
+export type { RuleEngineEvents } from './events';
 export * from './fixers/fixers';
 export * from './fixers/test-stub-fixer';
 export * from './formatters/json';
 export * from './formatters/text';
 export * from './host/bundled-rules';
-export * from './host/capability-registry';
 export * from './host/rule-engine-host';
 export * from './resolvers/test-path-resolver';
 export * from './types';

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,cAAc,qBAAqB,CAAC;AACpC,cAAc,iBAAiB,CAAC;AAChC,cAAc,UAAU,CAAC;AACzB,cAAc,iBAAiB,CAAC;AAChC,cAAc,0BAA0B,CAAC;AACzC,cAAc,mBAAmB,CAAC;AAClC,cAAc,mBAAmB,CAAC;AAClC,cAAc,sBAAsB,CAAC;AACrC,cAAc,4BAA4B,CAAC;AAC3C,cAAc,yBAAyB,CAAC;AACxC,cAAc,gCAAgC,CAAC;AAC/C,cAAc,SAAS,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,KAAK,eAAe,EAAE,KAAK,gBAAgB,EAAE,kBAAkB,EAAE,MAAM,8BAA8B,CAAC;AAC/G,cAAc,qBAAqB,CAAC;AACpC,cAAc,iBAAiB,CAAC;AAChC,cAAc,UAAU,CAAC;AAGzB,OAAO,EAAE,0BAA0B,EAAE,MAAM,gCAAgC,CAAC;AAC5E,YAAY,EAAE,gBAAgB,EAAE,MAAM,UAAU,CAAC;AACjD,cAAc,iBAAiB,CAAC;AAChC,cAAc,0BAA0B,CAAC;AACzC,cAAc,mBAAmB,CAAC;AAClC,cAAc,mBAAmB,CAAC;AAClC,cAAc,sBAAsB,CAAC;AACrC,cAAc,yBAAyB,CAAC;AACxC,cAAc,gCAAgC,CAAC;AAC/C,cAAc,SAAS,CAAC"}

package/dist/index.js

@@ -1,12 +1,18 @@
+// Public re-export of the shared plugin registry (ADR-010). Sourced directly from
+// the shared plugin core; the former host/capability-registry.ts shim was removed
+// once the one-release back-compat window closed.
+export { CapabilityRegistry } from '@gobing-ai/ts-runtime/plugin';
 export * from './config/extensions.js';
 export * from './config/loader.js';
 export * from './engine.js';
+// Public dialect helper for the `rg` (ripgrep) evaluator — consumed by the downstream
+// rule-file converter and the rg-dialect rule to keep JS-only patterns off the `rg` type.
+export { isRipgrepCompatiblePattern } from './evaluators/ripgrep-evaluator.js';
 export * from './fixers/fixers.js';
 export * from './fixers/test-stub-fixer.js';
 export * from './formatters/json.js';
 export * from './formatters/text.js';
 export * from './host/bundled-rules.js';
-export * from './host/capability-registry.js';
 export * from './host/rule-engine-host.js';
 export * from './resolvers/test-path-resolver.js';
 export * from './types.js';

package/dist/types.d.ts

@@ -1,6 +1,8 @@
 import { z } from 'zod';
 /** Finding severity emitted by the rule engine. */
 export type RuleSeverity = 'error' | 'warning' | 'info';
+/** Numeric rank for severity comparison; higher = more severe. */
+export declare const SEVERITY_RANK: Record<RuleSeverity, number>;
 /** Fix authority level for candidate fixes. */
 export type FixMode = 'none' | 'suggest' | 'auto';
 /** Structured configuration for a rule evaluator. */

package/dist/types.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,mDAAmD;AACnD,MAAM,MAAM,YAAY,GAAG,OAAO,GAAG,SAAS,GAAG,MAAM,CAAC;AAExD,+CAA+C;AAC/C,MAAM,MAAM,OAAO,GAAG,MAAM,GAAG,SAAS,GAAG,MAAM,CAAC;AAElD,qDAAqD;AACrD,MAAM,WAAW,mBAAmB;IAChC,iDAAiD;IACjD,IAAI,EAAE,MAAM,CAAC;IACb,kCAAkC;IAClC,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACpC;AAED,2DAA2D;AAC3D,MAAM,WAAW,cAAc;IAC3B,8BAA8B;IAC9B,EAAE,EAAE,MAAM,CAAC;IACX,kCAAkC;IAClC,WAAW,EAAE,MAAM,CAAC;IACpB,mCAAmC;IACnC,OAAO,EAAE,OAAO,CAAC;IACjB,6CAA6C;IAC7C,QAAQ,EAAE,YAAY,CAAC;IACvB,+BAA+B;IAC/B,SAAS,EAAE,mBAAmB,CAAC;IAC/B,uCAAuC;IACvC,OAAO,CAAC,EAAE,MAAM,EAAE,CAAC;IACnB,uCAAuC;IACvC,OAAO,CAAC,EAAE,MAAM,EAAE,CAAC;IACnB,6BAA6B;IAC7B,GAAG,CAAC,EAAE,aAAa,CAAC;CACvB;AAED,4CAA4C;AAC5C,MAAM,WAAW,aAAa;IAC1B,4CAA4C;IAC5C,IAAI,EAAE,OAAO,CAAC;IACd,uDAAuD;IACvD,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,0CAA0C;IAC1C,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACpC;AAED,4CAA4C;AAC5C,MAAM,WAAW,kBAAkB;IAC/B,sEAAsE;IACtE,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,2CAA2C;IAC3C,OAAO,CAAC,EAAE,MAAM,EAAE,CAAC;IACnB,2CAA2C;IAC3C,OAAO,CAAC,EAAE,MAAM,EAAE,CAAC;IACnB,mCAAmC;IACnC,QAAQ,CAAC,EAAE,YAAY,CAAC;IACxB,wBAAwB;IACxB,KAAK,EAAE,cAAc,EAAE,CAAC;IACxB,gFAAgF;IAChF,UAAU,CAAC,EAAE,gBAAgB,CAAC;CACjC;AAED,sEAAsE;AACtE,MAAM,WAAW,gBAAgB;IAC7B,uCAAuC;IACvC,SAAS,CAAC,EAAE,MAAM,EAAE,CAAC;IACrB,8BAA8B;IAC9B,UAAU,CAAC,EAAE,MAAM,EAAE,CAAC;IACtB,0BAA0B;IAC1B,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC;IAClB,8BAA8B;IAC9B,UAAU,CAAC,EAAE,MAAM,EAAE,CAAC;CACzB;AAED,yEAAyE;AACzE,MAAM,WAAW,gBAAgB;IAC7B,sEAAsE;IACtE,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,mBAAmB;IACnB,IAAI,EAAE,MAAM,CAAC;IACb,mDAAmD;IACnD,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,2BAA2B;IAC3B,OAAO,CAAC,EAAE,MAAM,EAAE,CAAC;IACnB,0BAA0B;IAC1B,SAAS,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE;QAAE,GAAG,CAAC,EAAE;YAAE,IAAI,EAAE,OAAO,CAAA;SAAE,CAAA;KAAE,CAAC,CAAC;IACxD,6EAA6E;IAC7E,UAAU,CAAC,EAAE,gBAAgB,CAAC;CACjC;AAED,sDAAsD;AACtD,MAAM,WAAW,GAAG;IAChB,mCAAmC;IACnC,MAAM,EAAE,MAAM,CAAC;IACf,6CAA6C;IAC7C,QAAQ,EAAE,MAAM,CAAC;IACjB,yBAAyB;IACzB,KAAK,EAAE,MAAM,CAAC;IACd,uBAAuB;IACvB,GAAG,EAAE,MAAM,CAAC;IACZ,2BAA2B;IAC3B,WAAW,EAAE,MAAM,CAAC;IACpB,qDAAqD;IACrD,IAAI,EAAE,OAAO,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;CAClC;AAED;;;;;;;GAOG;AACH,MAAM,MAAM,WAAW,GAAG,WAAW,GAAG,OAAO,CAAC;AAEhD,4CAA4C;AAC5C,MAAM,WAAW,iBAAiB;IAC9B,uBAAuB;IACvB,MAAM,EAAE,MAAM,CAAC;IACf,wBAAwB;IACxB,QAAQ,EAAE,YAAY,CAAC;IACvB,uBAAuB;IACvB,OAAO,EAAE,MAAM,CAAC;IAChB,yDAAyD;IACzD,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,sCAAsC;IACtC,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,8BAA8B;IAC9B,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,8CAA8C;IAC9C,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,0FAA0F;IAC1F,IAAI,CAAC,EAAE,WAAW,CAAC;CACtB;AAED,qDAAqD;AACrD,MAAM,WAAW,oBAAoB;IACjC,yCAAyC;IACzC,QAAQ,EAAE,iBAAiB,EAAE,CAAC;IAC9B,gDAAgD;IAChD,KAAK,EAAE,GAAG,EAAE,CAAC;CAChB;AAED,mDAAmD;AACnD,MAAM,WAAW,WAAW;IACxB,yCAAyC;IACzC,OAAO,EAAE,MAAM,CAAC;IAChB,4BAA4B;IAC5B,IAAI,EAAE,cAAc,CAAC;CACxB;AAED,yCAAyC;AACzC,MAAM,WAAW,aAAa;IAC1B,oDAAoD;IACpD,QAAQ,CAAC,IAAI,EAAE,cAAc,EAAE,OAAO,EAAE,WAAW,GAAG,OAAO,CAAC,oBAAoB,CAAC,CAAC;CACvF;AAED,yCAAyC;AACzC,MAAM,WAAW,eAAe;IAC5B,yDAAyD;IACzD,MAAM,CAAC,MAAM,EAAE,gBAAgB,GAAG,MAAM,CAAC;CAC5C;AAED,sCAAsC;AACtC,MAAM,WAAW,gBAAgB;IAC7B,yCAAyC;IACzC,QAAQ,EAAE,iBAAiB,EAAE,CAAC;IAC9B,gDAAgD;IAChD,KAAK,EAAE,GAAG,EAAE,CAAC;CAChB;AAED,qDAAqD;AACrD,wBAAgB,aAAa,CACzB,IAAI,EAAE,cAAc,EACpB,OAAO,EAAE,MAAM,EACf,QAAQ,EAAE,MAAM,GAAG,IAAI,EACvB,MAAM,GAAE,IAAI,CAAC,OAAO,CAAC,iBAAiB,CAAC,EAAE,QAAQ,GAAG,UAAU,GAAG,SAAS,GAAG,UAAU,CAAM,GAC9F,iBAAiB,CAQnB;AAED,6CAA6C;AAC7C,eAAO,MAAM,mBAAmB;;;;;;;;kBAMF,CAAC;AAE/B,+CAA+C;AAC/C,eAAO,MAAM,oBAAoB;;;;;;;;;;;;;;;;;;;;;;;;iBAe/B,CAAC;AAyBH;;;;GAIG;AACH,eAAO,MAAM,gBAAgB;;;;;kBAOhB,CAAC;AAEd,6CAA6C;AAC7C,eAAO,MAAM,wBAAwB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBAOnC,CAAC;AAEH,0CAA0C;AAC1C,eAAO,MAAM,sBAAsB;;;;;;;;;;;;;;;;;;;;iBASjC,CAAC"}
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,mDAAmD;AACnD,MAAM,MAAM,YAAY,GAAG,OAAO,GAAG,SAAS,GAAG,MAAM,CAAC;AAExD,kEAAkE;AAClE,eAAO,MAAM,aAAa,EAAE,MAAM,CAAC,YAAY,EAAE,MAAM,CAItD,CAAC;AAEF,+CAA+C;AAC/C,MAAM,MAAM,OAAO,GAAG,MAAM,GAAG,SAAS,GAAG,MAAM,CAAC;AAElD,qDAAqD;AACrD,MAAM,WAAW,mBAAmB;IAChC,iDAAiD;IACjD,IAAI,EAAE,MAAM,CAAC;IACb,kCAAkC;IAClC,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACpC;AAED,2DAA2D;AAC3D,MAAM,WAAW,cAAc;IAC3B,8BAA8B;IAC9B,EAAE,EAAE,MAAM,CAAC;IACX,kCAAkC;IAClC,WAAW,EAAE,MAAM,CAAC;IACpB,mCAAmC;IACnC,OAAO,EAAE,OAAO,CAAC;IACjB,6CAA6C;IAC7C,QAAQ,EAAE,YAAY,CAAC;IACvB,+BAA+B;IAC/B,SAAS,EAAE,mBAAmB,CAAC;IAC/B,uCAAuC;IACvC,OAAO,CAAC,EAAE,MAAM,EAAE,CAAC;IACnB,uCAAuC;IACvC,OAAO,CAAC,EAAE,MAAM,EAAE,CAAC;IACnB,6BAA6B;IAC7B,GAAG,CAAC,EAAE,aAAa,CAAC;CACvB;AAED,4CAA4C;AAC5C,MAAM,WAAW,aAAa;IAC1B,4CAA4C;IAC5C,IAAI,EAAE,OAAO,CAAC;IACd,uDAAuD;IACvD,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,0CAA0C;IAC1C,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACpC;AAED,4CAA4C;AAC5C,MAAM,WAAW,kBAAkB;IAC/B,sEAAsE;IACtE,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,2CAA2C;IAC3C,OAAO,CAAC,EAAE,MAAM,EAAE,CAAC;IACnB,2CAA2C;IAC3C,OAAO,CAAC,EAAE,MAAM,EAAE,CAAC;IACnB,mCAAmC;IACnC,QAAQ,CAAC,EAAE,YAAY,CAAC;IACxB,wBAAwB;IACxB,KAAK,EAAE,cAAc,EAAE,CAAC;IACxB,gFAAgF;IAChF,UAAU,CAAC,EAAE,gBAAgB,CAAC;CACjC;AAED,sEAAsE;AACtE,MAAM,WAAW,gBAAgB;IAC7B,uCAAuC;IACvC,SAAS,CAAC,EAAE,MAAM,EAAE,CAAC;IACrB,8BAA8B;IAC9B,UAAU,CAAC,EAAE,MAAM,EAAE,CAAC;IACtB,0BAA0B;IAC1B,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC;IAClB,8BAA8B;IAC9B,UAAU,CAAC,EAAE,MAAM,EAAE,CAAC;CACzB;AAED,yEAAyE;AACzE,MAAM,WAAW,gBAAgB;IAC7B,sEAAsE;IACtE,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,mBAAmB;IACnB,IAAI,EAAE,MAAM,CAAC;IACb,mDAAmD;IACnD,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,2BAA2B;IAC3B,OAAO,CAAC,EAAE,MAAM,EAAE,CAAC;IACnB,0BAA0B;IAC1B,SAAS,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE;QAAE,GAAG,CAAC,EAAE;YAAE,IAAI,EAAE,OAAO,CAAA;SAAE,CAAA;KAAE,CAAC,CAAC;IACxD,6EAA6E;IAC7E,UAAU,CAAC,EAAE,gBAAgB,CAAC;CACjC;AAED,sDAAsD;AACtD,MAAM,WAAW,GAAG;IAChB,mCAAmC;IACnC,MAAM,EAAE,MAAM,CAAC;IACf,6CAA6C;IAC7C,QAAQ,EAAE,MAAM,CAAC;IACjB,yBAAyB;IACzB,KAAK,EAAE,MAAM,CAAC;IACd,uBAAuB;IACvB,GAAG,EAAE,MAAM,CAAC;IACZ,2BAA2B;IAC3B,WAAW,EAAE,MAAM,CAAC;IACpB,qDAAqD;IACrD,IAAI,EAAE,OAAO,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;CAClC;AAED;;;;;;;GAOG;AACH,MAAM,MAAM,WAAW,GAAG,WAAW,GAAG,OAAO,CAAC;AAEhD,4CAA4C;AAC5C,MAAM,WAAW,iBAAiB;IAC9B,uBAAuB;IACvB,MAAM,EAAE,MAAM,CAAC;IACf,wBAAwB;IACxB,QAAQ,EAAE,YAAY,CAAC;IACvB,uBAAuB;IACvB,OAAO,EAAE,MAAM,CAAC;IAChB,yDAAyD;IACzD,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,sCAAsC;IACtC,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,8BAA8B;IAC9B,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,8CAA8C;IAC9C,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,0FAA0F;IAC1F,IAAI,CAAC,EAAE,WAAW,CAAC;CACtB;AAED,qDAAqD;AACrD,MAAM,WAAW,oBAAoB;IACjC,yCAAyC;IACzC,QAAQ,EAAE,iBAAiB,EAAE,CAAC;IAC9B,gDAAgD;IAChD,KAAK,EAAE,GAAG,EAAE,CAAC;CAChB;AAED,mDAAmD;AACnD,MAAM,WAAW,WAAW;IACxB,yCAAyC;IACzC,OAAO,EAAE,MAAM,CAAC;IAChB,4BAA4B;IAC5B,IAAI,EAAE,cAAc,CAAC;CACxB;AAED,yCAAyC;AACzC,MAAM,WAAW,aAAa;IAC1B,oDAAoD;IACpD,QAAQ,CAAC,IAAI,EAAE,cAAc,EAAE,OAAO,EAAE,WAAW,GAAG,OAAO,CAAC,oBAAoB,CAAC,CAAC;CACvF;AAED,yCAAyC;AACzC,MAAM,WAAW,eAAe;IAC5B,yDAAyD;IACzD,MAAM,CAAC,MAAM,EAAE,gBAAgB,GAAG,MAAM,CAAC;CAC5C;AAED,sCAAsC;AACtC,MAAM,WAAW,gBAAgB;IAC7B,yCAAyC;IACzC,QAAQ,EAAE,iBAAiB,EAAE,CAAC;IAC9B,gDAAgD;IAChD,KAAK,EAAE,GAAG,EAAE,CAAC;CAChB;AAED,qDAAqD;AACrD,wBAAgB,aAAa,CACzB,IAAI,EAAE,cAAc,EACpB,OAAO,EAAE,MAAM,EACf,QAAQ,EAAE,MAAM,GAAG,IAAI,EACvB,MAAM,GAAE,IAAI,CAAC,OAAO,CAAC,iBAAiB,CAAC,EAAE,QAAQ,GAAG,UAAU,GAAG,SAAS,GAAG,UAAU,CAAM,GAC9F,iBAAiB,CAQnB;AAED,6CAA6C;AAC7C,eAAO,MAAM,mBAAmB;;;;;;;;kBAMF,CAAC;AAE/B,+CAA+C;AAC/C,eAAO,MAAM,oBAAoB;;;;;;;;;;;;;;;;;;;;;;;;iBAe/B,CAAC;AAyBH;;;;GAIG;AACH,eAAO,MAAM,gBAAgB;;;;;kBAOhB,CAAC;AAEd,6CAA6C;AAC7C,eAAO,MAAM,wBAAwB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBAOnC,CAAC;AAEH,0CAA0C;AAC1C,eAAO,MAAM,sBAAsB;;;;;;;;;;;;;;;;;;;;iBASjC,CAAC"}

package/dist/types.js

@@ -1,5 +1,11 @@
 import { assertRelativeExtensionPath } from '@gobing-ai/ts-runtime/plugin';
 import { z } from 'zod';
+/** Numeric rank for severity comparison; higher = more severe. */
+export const SEVERITY_RANK = {
+    error: 3,
+    warning: 2,
+    info: 1,
+};
 /** Create a finding with inherited rule severity. */
 export function createFinding(rule, message, filePath, extras = {}) {
     return {

package/package.json

@@ -1,6 +1,6 @@
 {
     "name": "@gobing-ai/ts-rule-engine",
-    "version": "0.3.1",
+    "version": "0.3.3",
     "description": "@gobing-ai/ts-rule-engine — Constraint rule schemas, loading, evaluation, and result formatting.",
     "keywords": [
         "typescript",
@@ -49,10 +49,9 @@
         "release": "echo 'Manual publish is disabled. Releases go through GitHub Actions via Trusted Publishing — push a tag: git tag @gobing-ai/ts-rule-engine-v<version> && git push --tags' && exit 1"
     },
     "dependencies": {
-        "@gobing-ai/ts-ai-runner": "^0.3.1",
-        "@gobing-ai/ts-db": "^0.3.1",
-        "@gobing-ai/ts-runtime": "^0.3.1",
-        "@gobing-ai/ts-utils": "^0.3.1",
+        "@gobing-ai/ts-ai-runner": "^0.3.3",
+        "@gobing-ai/ts-infra": "^0.3.3",
+        "@gobing-ai/ts-runtime": "^0.3.3",
         "yaml": "^2.7.0",
         "zod": "^4.1.0"
     },

package/rules/example.yaml

@@ -0,0 +1,13 @@
+# Example preset — demonstrates the extends mechanism by composing all three
+# bundled rule categories (typescript, quality, structure).
+#
+# Load with: loadPreset('example', { roots: [bundledRulesRoot()] })
+#
+# Bundled with @gobing-ai/ts-rule-engine. A project may override individual rule
+# files by placing same-named files under a local rules root that shadows the
+# bundled copy.
+name: example
+extends:
+  - typescript
+  - quality
+  - structure

package/src/config/extensions.ts

@@ -1,6 +1,12 @@
-import { resolve } from 'node:path';
+import { fileURLToPath } from 'node:url';
+import type { Logger } from '@gobing-ai/ts-infra';
+import { basenamePath, dirnamePath, resolvePath, SEP } from '@gobing-ai/ts-runtime';
+import type {
+    ExtensionRef as SharedExtensionRef,
+    LoadExtensionsOptions as SharedLoadExtensionsOptions,
+} from '@gobing-ai/ts-runtime/plugin';
+import { loadExtensionModules } from '@gobing-ai/ts-runtime/plugin';
 import type { RuleEngineHost } from '../host/rule-engine-host';
-
 /** A capability kind a preset extension can contribute. */
 export type ExtensionKind = 'resolvers' | 'evaluators' | 'fixers' | 'formatters';
 
@@ -23,7 +29,7 @@ export interface LoadExtensionsOptions {
      */
     allowExtensions?: boolean;
     /** Optional sink for non-fatal warnings (e.g. built-in overrides). */
-    logger?: { warn: (message: string) => void };
+    logger?: Pick<Logger, 'warn'>;
     /** Optional module loader seam for tests or embedders with custom import policy. */
     moduleLoader?: (absPath: string) => Promise<Record<string, unknown>>;
 }
@@ -51,7 +57,7 @@ export function collectExtensions(
     const refs: ExtensionRef[] = [];
     for (const kind of ['resolvers', 'evaluators', 'fixers', 'formatters'] as ExtensionKind[]) {
         for (const path of extensions[kind] ?? []) {
-            refs.push({ kind, presetName: sourceName, absPath: resolve(sourceDir, path) });
+            refs.push({ kind, presetName: sourceName, absPath: resolvePath(sourceDir, path) });
         }
     }
     return refs;
@@ -61,13 +67,17 @@ export function collectExtensions(
  * Import each extension module and register its export on the matching host
  * registry.
  *
- * A module must default-export (or named-export `extension`) an object with a
- * `name: string` and the capability implementation. Loading is gated by
+ * Delegates generic loading (trust gate, path guard, module import, export-shape
+ * validation) to the shared ``loadExtensionModules`` from ts-runtime/plugin, then
+ * routes each capability to the correct host registry based on ``ref.kind``.
+ *
+ * A module must default-export (or named-export ``extension``) an object with a
+ * ``name: string`` and the capability implementation. Loading is gated by
  * {@link LoadExtensionsOptions.allowExtensions}; when refs are present but
  * loading is not allowed, this throws so the requirement is never silently dropped.
  *
- * @throws When extensions are present but `allowExtensions` is not true, or when
- *   a module cannot be imported or lacks a valid `name`.
+ * @throws When extensions are present but ``allowExtensions`` is not true, or when
+ *   a module cannot be imported or lacks a valid ``name``.
  */
 export async function loadExtensionsIntoHost(
     host: RuleEngineHost,
@@ -75,40 +85,59 @@ export async function loadExtensionsIntoHost(
     options: LoadExtensionsOptions = {},
 ): Promise<void> {
     if (refs.length === 0) return;
-    if (options.allowExtensions !== true) {
-        const first = refs[0] as ExtensionRef;
-        throw new Error(
-            `preset "${first.presetName}" declares ${first.kind} extension "${first.absPath}", but extensions are disabled — pass allowExtensions: true to load preset extension modules`,
-        );
-    }
 
-    const loadModule = options.moduleLoader ?? defaultModuleLoader;
+    // Normalize file:// URLs to file paths so dirname/basename produce valid
+    // path components that isAbsolute() accepts (e.g. import.meta.url in tests).
+    const toFilePath = (p: string): string => (p.startsWith('file://') ? fileURLToPath(p) : p);
+
+    // Defense-in-depth: pre-validate `..` traversal in caller-supplied absPath
+    // before the basename adaptation strips it.  The shared loader's
+    // assertRelativeExtensionPath also runs on the derived (basename) path.
     for (const ref of refs) {
-        const moduleExports = await loadModule(ref.absPath);
-        const candidate = moduleExports.default ?? moduleExports.extension;
-        if (
-            candidate === null ||
-            typeof candidate !== 'object' ||
-            typeof (candidate as { name?: unknown }).name !== 'string'
-        ) {
+        const segments = toFilePath(ref.absPath).split(SEP);
+        if (segments.includes('..')) {
             throw new Error(
-                `preset "${ref.presetName}" extension "${ref.absPath}" must export an object with a string "name"`,
+                `extension path "${ref.absPath}" declared by "${ref.presetName}" must not contain ".." traversal`,
             );
         }
-        const name = (candidate as { name: string }).name;
-        const registryKey = HOST_REGISTRY_BY_KIND[ref.kind];
+    }
+
+    // Adapt rule-engine ExtensionRef → shared ExtensionRef so the generic loader
+    // governs every import.  The shared loader resolves (baseDir, path) →
+    // absPath internally; we supply dirname/basename so the resolved path
+    // reconstructs the caller's original absPath.
+    const sharedRefs: SharedExtensionRef<ExtensionKind>[] = refs.map((ref) => {
+        const fp = toFilePath(ref.absPath);
+        return {
+            kind: ref.kind,
+            path: `./${basenamePath(fp)}`,
+            baseDir: dirnamePath(fp),
+            sourceName: ref.presetName,
+        };
+    });
+
+    const moduleLoader = options.moduleLoader ?? defaultModuleLoader;
+    const sharedOptions: SharedLoadExtensionsOptions = {
+        allowExtensions: options.allowExtensions,
+        logger: options.logger,
+        moduleLoader,
+    };
+
+    await loadExtensionModules<ExtensionKind>(sharedRefs, sharedOptions, async (sharedRef, extension) => {
+        const name = extension.name as string;
+        const registryKey = HOST_REGISTRY_BY_KIND[sharedRef.kind];
         if (registryKey === undefined) {
-            throw new Error(`preset "${ref.presetName}" ${ref.kind} extensions are not supported`);
+            throw new Error(`"${sharedRef.sourceName}" ${sharedRef.kind} extensions are not supported`);
         }
         const registry = host[registryKey] as unknown as {
             register: (name: string, impl: unknown, origin: 'builtin' | 'extension') => void;
             has?: (name: string) => boolean;
         };
         if (options.logger && registry.has?.(name)) {
-            options.logger.warn(`preset "${ref.presetName}" ${ref.kind} extension overrides existing "${name}"`);
+            options.logger.warn(`"${sharedRef.sourceName}" ${sharedRef.kind} extension overrides existing "${name}"`);
         }
-        registry.register(name, candidate, 'extension');
-    }
+        registry.register(name, extension, 'extension');
+    });
 }
 
 async function defaultModuleLoader(absPath: string): Promise<Record<string, unknown>> {

package/src/config/loader.ts

@@ -1,5 +1,13 @@
-import { basename, dirname, join, relative, resolve, sep } from 'node:path';
-import { loadStructuredConfig, NodeFileSystem } from '@gobing-ai/ts-runtime';
+import {
+    basenamePath,
+    dirnamePath,
+    joinPath,
+    loadStructuredConfig,
+    NodeFileSystem,
+    relativePath,
+    resolvePath,
+    SEP,
+} from '@gobing-ai/ts-runtime';
 import {
     type ConstraintRule,
     type ConstraintRuleFile,
@@ -27,6 +35,7 @@ export interface RuleLoaderOptions {
     fetch?: (input: string) => Promise<Response>;
 }
 
+/** Options for loading a single rule file directly from disk. */
 export interface RuleFileLoadOptions {
     /** When true, honor top-level `$schema` refs. Defaults to true. */
     validateSchema?: boolean;
@@ -58,12 +67,12 @@ interface MergedRoots {
  * the rest of a preset's categories from the lower-priority roots.
  */
 export async function loadPreset(name: string, options: RuleLoaderOptions): Promise<LoadedPreset> {
-    const merged = await buildMergedRoots(options.roots.map((root) => resolve(root)));
+    const merged = await buildMergedRoots(options.roots.map((root) => resolvePath(root)));
     const presetPath = findMergedPreset(merged, name);
     if (presetPath === null) return { rules: [], extensions: [] };
     const preset = PresetDefinitionSchema.parse(await readStructuredFile(presetPath, options)) as PresetDefinition;
     const rules: ConstraintRule[] = [];
-    const extensions = collectExtensions(preset.name, dirname(presetPath), preset.extensions);
+    const extensions = collectExtensions(preset.name, dirnamePath(presetPath), preset.extensions);
     for (const entry of preset.extends) {
         const loaded = await loadPresetEntry(merged, entry, new Set([name]), options);
         rules.push(...loaded.rules);
@@ -111,6 +120,12 @@ function assertFixModeNotPromoted(presetName: string, rule: ConstraintRule, over
     }
 }
 
+/**
+ * Load a preset's resolved rules (convenience wrapper).
+ *
+ * Shortcut for `(await loadPreset(name, options)).rules` — returns only the
+ * normalized rule set without the extension module refs.
+ */
 export async function loadPresetRules(name: string, options: RuleLoaderOptions): Promise<ConstraintRule[]> {
     return (await loadPreset(name, options)).rules;
 }
@@ -125,12 +140,12 @@ export async function loadPresetRules(name: string, options: RuleLoaderOptions):
  * object, not a `rules:` array) cannot declare extensions and yields `extensions: []`.
  */
 export async function loadRuleFile(filePath: string, options: RuleFileLoadOptions = {}): Promise<LoadedPreset> {
-    const resolved = resolve(filePath);
+    const resolved = resolvePath(filePath);
     const raw = await readStructuredFile(resolved, options);
     const rules = normalizeRuleFile(raw, resolved);
     const parsed = ConstraintRuleFileSchema.safeParse(raw);
     const extensions = parsed.success
-        ? collectExtensions(basename(resolved), dirname(resolved), parsed.data.extensions)
+        ? collectExtensions(basenamePath(resolved), dirnamePath(resolved), parsed.data.extensions)
         : [];
     return { rules, extensions };
 }
@@ -151,7 +166,7 @@ async function loadPresetEntry(
         const preset = PresetDefinitionSchema.safeParse(await readStructuredFile(presetPath, options));
         if (preset.success) {
             const rules: ConstraintRule[] = [];
-            const extensions = collectExtensions(preset.data.name, dirname(presetPath), preset.data.extensions);
+            const extensions = collectExtensions(preset.data.name, dirnamePath(presetPath), preset.data.extensions);
             for (const child of preset.data.extends) {
                 const loaded = await loadPresetEntry(merged, child, nextSeen, options);
                 rules.push(...loaded.rules);
@@ -196,7 +211,7 @@ async function buildMergedRoots(roots: readonly string[]): Promise<MergedRoots>
     const categories = new Set<string>();
     for (const root of roots) {
         for (const absPath of await walkYamlFiles(fs, root)) {
-            const relPath = relative(root, absPath).split(sep).join('/');
+            const relPath = relativePath(root, absPath).split(SEP).join('/');
             const slashIdx = relPath.indexOf('/');
             if (slashIdx > 0) categories.add(relPath.slice(0, slashIdx));
             if (!files.has(relPath)) files.set(relPath, absPath);
@@ -249,7 +264,7 @@ async function walkYamlFiles(fs: NodeFileSystem, dir: string, depth = 0): Promis
     const acc: string[] = [];
     for (const entry of (await fs.readDir(dir)).sort()) {
         if (depth === 0 && entry === 'presets') continue;
-        const fullPath = join(dir, entry);
+        const fullPath = joinPath(dir, entry);
         const entryStat = await fs.stat(fullPath);
         if (entryStat?.isDirectory()) {
             acc.push(...(await walkYamlFiles(fs, fullPath, depth + 1)));
@@ -267,7 +282,7 @@ async function listImmediateDirs(fs: NodeFileSystem, dir: string): Promise<strin
     const dirs: string[] = [];
     for (const entry of await fs.readDir(dir)) {
         if (entry === 'presets') continue;
-        const entryStat = await fs.stat(join(dir, entry));
+        const entryStat = await fs.stat(joinPath(dir, entry));
         if (entryStat?.isDirectory()) dirs.push(entry);
     }
     return dirs;
@@ -287,7 +302,7 @@ async function readStructuredFile(
 type ParsedRule = Omit<ConstraintRule, 'severity'> & { severity?: ConstraintRule['severity'] };
 
 function normalizeRuleFile(raw: unknown, filePath: string): ConstraintRule[] {
-    const sourceDir = dirname(filePath);
+    const sourceDir = dirnamePath(filePath);
     const maybeFile = ConstraintRuleFileSchema.safeParse(raw);
     if (maybeFile.success) return normalizeFileRules(maybeFile.data, sourceDir);
     const maybeRule = ConstraintRuleSchema.safeParse(raw);
@@ -297,7 +312,7 @@ function normalizeRuleFile(raw: unknown, filePath: string): ConstraintRule[] {
     // single-rule schema. Include field paths so the offending key is obvious.
     const isRuleFileShape = typeof raw === 'object' && raw !== null && 'rules' in raw;
     const issues = (isRuleFileShape ? maybeFile.error : maybeRule.error).issues;
-    throw new Error(`Invalid rule file "${basename(filePath)}": ${formatIssues(issues)}`);
+    throw new Error(`Invalid rule file "${basenamePath(filePath)}": ${formatIssues(issues)}`);
 }
 
 /** Render Zod issues as `path: message` fragments for actionable diagnostics. */