@goodbones/oxlint 0.1.0-beta.2 → 0.1.0-beta.21

package/build/esm/surface-rule.js.map

@@ -1 +1 @@
-{"version":3,"file":"surface-rule.js","sourceRoot":"","sources":["../../src/surface-rule.ts"],"names":[],"mappings":"AAAA,OAAO,EAGL,eAAe,EAEf,aAAa,EAEb,qBAAqB,GACtB,MAAM,iBAAiB,CAAC;AAEzB,OAAO,EAIL,cAAc,GACf,MAAM,iBAAiB,CAAC;AAwCzB,MAAM,eAAe,GAAG,CAAC,KAAc,EAAyC,EAAE,CAChF,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;AAEvB,MAAM,MAAM,GAAG,CAAC,IAAkC,EAAiB,EAAE;IACnE,IAAI,IAAI,KAAK,IAAI,IAAI,IAAI,KAAK,SAAS;QAAE,OAAO,IAAI,CAAC;IACrD,IAAI,OAAO,IAAI,CAAC,IAAI,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC,IAAI,CAAC;IACpD,OAAO,OAAO,IAAI,CAAC,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC;AAC5D,CAAC,CAAC;AAEF,gDAAgD;AAChD,MAAM,YAAY,GAAG,CAAC,OAAuC,EAAyB,EAAE;IACtF,IAAI,OAAO,KAAK,IAAI,IAAI,OAAO,KAAK,SAAS;QAAE,OAAO,EAAE,CAAC;IACzD,QAAQ,OAAO,CAAC,IAAI,EAAE,CAAC;QACrB,KAAK,YAAY;YACf,OAAO,OAAO,OAAO,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QAChE,KAAK,eAAe;YAClB,OAAO,CAAC,OAAO,CAAC,UAAU,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,QAAQ,EAAE,EAAE,CACrD,YAAY,CAAC,QAAQ,CAAC,KAAK,IAAI,QAAQ,CAAC,QAAQ,CAAC,CAClD,CAAC;QACJ,KAAK,cAAc;YACjB,OAAO,CAAC,OAAO,CAAC,QAAQ,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC;QACxD,KAAK,mBAAmB;YACtB,OAAO,YAAY,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QACpC,KAAK,aAAa;YAChB,OAAO,YAAY,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;QACxC;YACE,OAAO,EAAE,CAAC;IACd,CAAC;AACH,CAAC,CAAC;AAEF,+EAA+E;AAC/E,MAAM,eAAe,GAAG,CACtB,SAAwB,EAC2B,EAAE;IACrD,MAAM,KAAK,GAAG,CAAC,QAAyB,EAAqD,EAAE;QAC7F,MAAM,IAAI,GAAG,MAAM,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;QAClC,OAAO,IAAI,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC,CAAC;IACjD,CAAC,CAAC;IACF,QAAQ,SAAS,CAAC,IAAI,EAAE,CAAC;QACvB,KAAK,qBAAqB;YACxB,OAAO,KAAK,CAAC,UAAU,CAAC,CAAC;QAC3B,KAAK,kBAAkB;YACrB,OAAO,KAAK,CAAC,OAAO,CAAC,CAAC;QACxB,KAAK,qBAAqB;YACxB,OAAO,CAAC,SAAS,CAAC,YAAY,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,WAAW,EAAE,EAAE,CAC5D,YAAY,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,UAAU,CAAU,CAAC,CACxE,CAAC;QACJ,KAAK,wBAAwB;YAC3B,OAAO,KAAK,CAAC,MAAM,CAAC,CAAC;QACvB,KAAK,wBAAwB;YAC3B,OAAO,KAAK,CAAC,WAAW,CAAC,CAAC;QAC5B,KAAK,mBAAmB;YACtB,OAAO,KAAK,CAAC,MAAM,CAAC,CAAC;QACvB,KAAK,qBAAqB;YACxB,OAAO,KAAK,CAAC,OAAO,CAAC,CAAC;QACxB;YACE,OAAO,EAAE,CAAC;IACd,CAAC;AACH,CAAC,CAAC;AAIF,6EAA6E;AAC7E,0EAA0E;AAC1E,yEAAyE;AACzE,qDAAqD;AACrD,MAAM,SAAS,GAAG,CAAC,IAAY,EAAE,IAAkC,EAAwB,EAAE;IAC3F,MAAM,MAAM,GAAG,IAAI,GAAG,EAA2B,CAAC;IAClD,KAAK,MAAM,SAAS,IAAI,IAAI,EAAE,CAAC;QAC7B,MAAM,WAAW,GACf,SAAS,CAAC,IAAI,KAAK,wBAAwB,IAAI,SAAS,CAAC,IAAI,KAAK,0BAA0B;YAC1F,CAAC,CAAC,SAAS,CAAC,WAAW;YACvB,CAAC,CAAC,SAAS,CAAC;QAChB,IAAI,WAAW,KAAK,IAAI,IAAI,WAAW,KAAK,SAAS;YAAE,SAAS;QAChE,KAAK,MAAM,CAAC,IAAI,EAAE,QAAQ,CAAC,IAAI,eAAe,CAAC,WAAW,CAAC;YAAE,MAAM,CAAC,GAAG,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;IAC1F,CAAC;IAED,MAAM,KAAK,GAAiB,EAAE,CAAC;IAC/B,MAAM,IAAI,GAAG,CACX,IAAoB,EACpB,IAAY,EACZ,IAAwB,EACxB,QAAyB,EACzB,QAAiB,EACX,EAAE;QACR,KAAK,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,EAAE,CAAC,CAAC;IACvE,CAAC,CAAC;IAEF,KAAK,MAAM,SAAS,IAAI,IAAI,EAAE,CAAC;QAC7B,QAAQ,SAAS,CAAC,IAAI,EAAE,CAAC;YACvB,KAAK,wBAAwB,EAAE,CAAC;gBAC9B,MAAM,WAAW,GAAG,SAAS,CAAC,WAAW,CAAC;gBAC1C,IAAI,WAAW,KAAK,IAAI,IAAI,WAAW,KAAK,SAAS,EAAE,CAAC;oBACtD,KAAK,MAAM,CAAC,IAAI,EAAE,QAAQ,CAAC,IAAI,eAAe,CAAC,WAAW,CAAC,EAAE,CAAC;wBAC5D,IAAI,CAAC,WAAW,EAAE,IAAI,EAAE,OAAO,EAAE,QAAQ,EAAE,KAAK,CAAC,CAAC;oBACpD,CAAC;oBACD,MAAM;gBACR,CAAC;gBACD,MAAM,QAAQ,GAAG,OAAO,SAAS,CAAC,MAAM,EAAE,KAAK,KAAK,QAAQ,CAAC;gBAC7D,KAAK,MAAM,SAAS,IAAI,SAAS,CAAC,UAAU,IAAI,EAAE,EAAE,CAAC;oBACnD,MAAM,IAAI,GAAG,MAAM,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC;oBACxC,IAAI,IAAI,KAAK,IAAI;wBAAE,SAAS;oBAC5B,MAAM,KAAK,GAAG,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,IAAI,CAAC;oBAC9C,MAAM,QAAQ,GAAG,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,OAAO,CAAC,CAAC;oBACrE,IAAI,CAAC,SAAS,EAAE,IAAI,EAAE,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,OAAO,EAAE,QAAQ,EAAE,QAAQ,CAAC,CAAC;gBACtF,CAAC;gBACD,MAAM;YACR,CAAC;YACD,KAAK,0BAA0B,EAAE,CAAC;gBAChC,MAAM,WAAW,GAAG,SAAS,CAAC,WAAW,CAAC;gBAC1C,MAAM,QAAQ,GACZ,WAAW,KAAK,IAAI,IAAI,WAAW,KAAK,SAAS;oBAC/C,CAAC,CAAC,YAAY;oBACd,CAAC,CAAC,WAAW,CAAC,IAAI,KAAK,qBAAqB;wBAC1C,CAAC,CAAC,UAAU;wBACZ,CAAC,CAAC,WAAW,CAAC,IAAI,KAAK,kBAAkB;4BACvC,CAAC,CAAC,OAAO;4BACT,CAAC,CAAC,WAAW,CAAC,IAAI,KAAK,wBAAwB;gCAC7C,CAAC,CAAC,WAAW;gCACb,CAAC,CAAC,WAAW,CAAC,IAAI,KAAK,YAAY;oCACjC,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,WAAW,CAAC,IAAI,EAAE,CAAC,IAAI,YAAY,CAAC;oCACzD,CAAC,CAAC,YAAY,CAAC;gBAC3B,IAAI,CAAC,SAAS,EAAE,SAAS,EAAE,SAAS,EAAE,QAAQ,EAAE,KAAK,CAAC,CAAC;gBACvD,MAAM;YACR,CAAC;YACD,KAAK,sBAAsB;gBACzB,IAAI,CAAC,SAAS,EAAE,MAAM,CAAC,SAAS,CAAC,QAAQ,CAAC,IAAI,GAAG,EAAE,WAAW,EAAE,OAAO,EAAE,IAAI,CAAC,CAAC;gBAC/E,MAAM;YACR;gBACE,MAAM;QACV,CAAC;IACH,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,eAAe,GAAG,CAAC,MAAoB,EAAc,EAAE,CAAC,CAAC;IACpE,IAAI,EAAE;QACJ,IAAI,EAAE,SAAkB;QACxB,IAAI,EAAE;YACJ,WAAW,EACT,iHAAiH;SACpH;QACD,MAAM,EAAE,EAAE;KACX;IAED,UAAU,CAAC,OAAoB;QAC7B,IAAI,IAAI,GAAG,EAAE,CAAC;QACd,IAAI,QAAQ,GAAuC,EAAE,CAAC;QAEtD,OAAO;YACL,MAAM;gBACJ,IAAI,GAAG,cAAc,CAAC,MAAM,CAAC,QAAQ,EAAE,OAAO,CAAC,QAAQ,CAAC,CAAC;gBACzD,IAAI,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;oBAAE,OAAO,KAAK,CAAC;gBACxC,QAAQ,GAAG,qBAAqB,CAAC,MAAM,CAAC,YAAY,EAAE,IAAI,CAAC,CAAC;gBAC5D,OAAO,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC;YAC7B,CAAC;YAED,OAAO,CAAC,IAAiB;gBACvB,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC;oBAAE,OAAO;gBACxC,MAAM,KAAK,GAAG,SAAS,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC;gBACzC,MAAM,UAAU,GAAG,eAAe,CAChC,QAAQ,EACR,IAAI,EACJ,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,CAC7B,CAAC;gBAEF,uEAAuE;gBACvE,sCAAsC;gBACtC,MAAM,IAAI,GAAG,IAAI,GAAG,EAAS,CAAC;gBAC9B,KAAK,MAAM,SAAS,IAAI,UAAU,EAAE,CAAC;oBACnC,IAAI,MAAM,CAAC,QAAQ,CAAC,WAAW,CAAC,SAAS,CAAC;wBAAE,SAAS;oBACrD,MAAM,EAAE,GACN,SAAS,CAAC,OAAO,KAAK,IAAI;wBACxB,CAAC,CAAC,SAAS;wBACX,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,KAAK,SAAS,CAAC,OAAO,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC;oBACjF,IAAI,EAAE,KAAK,SAAS;wBAAE,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;oBACnC,OAAO,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,EAAE,EAAE,IAAI,IAAI,IAAI,EAAE,OAAO,EAAE,aAAa,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;gBAChF,CAAC;YACH,CAAC;SACF,CAAC;IACJ,CAAC;CACF,CAAC,CAAC"}
+{"version":3,"file":"surface-rule.js","sourceRoot":"","sources":["../../src/surface-rule.ts"],"names":[],"mappings":"AAAA,OAAO,EAEL,eAAe,EACf,aAAa,EAEb,qBAAqB,GACtB,MAAM,iBAAiB,CAAC;AAGzB,OAAO,EACL,EAAE,EACF,cAAc,EAId,cAAc,GACf,MAAM,iBAAiB,CAAC;AAEzB,MAAM,CAAC,MAAM,eAAe,GAAG,CAAC,MAAoB,EAAc,EAAE,CAAC,CAAC;IACpE,IAAI,EAAE;QACJ,IAAI,EAAE,SAAkB;QACxB,IAAI,EAAE;YACJ,WAAW,EACT,iHAAiH;SACpH;QACD,MAAM,EAAE,EAAE;KACX;IAED,UAAU,CAAC,OAAoB;QAC7B,IAAI,IAAI,GAAG,EAAE,CAAC;QACd,IAAI,QAAQ,GAAuC,EAAE,CAAC;QAEtD,OAAO;YACL,MAAM;gBACJ,IAAI,GAAG,cAAc,CAAC,MAAM,CAAC,QAAQ,EAAE,OAAO,CAAC,QAAQ,CAAC,CAAC;gBACzD,IAAI,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;oBAAE,OAAO,KAAK,CAAC;gBACxC,QAAQ,GAAG,qBAAqB,CAAC,MAAM,CAAC,YAAY,EAAE,IAAI,CAAC,CAAC;gBAC5D,OAAO,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC;YAC7B,CAAC;YAED,OAAO,CAAC,IAAa;gBACnB,MAAM,KAAK,GAAG,cAAc,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,WAAW,CAAC;gBACrD,MAAM,UAAU,GAAG,eAAe,CAAC,QAAQ,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC;gBAE1D,uEAAuE;gBACvE,sCAAsC;gBACtC,MAAM,IAAI,GAAG,IAAI,GAAG,EAAkB,CAAC;gBACvC,KAAK,MAAM,SAAS,IAAI,UAAU,EAAE,CAAC;oBACnC,IAAI,MAAM,CAAC,QAAQ,CAAC,WAAW,CAAC,SAAS,CAAC;wBAAE,SAAS;oBACrD,MAAM,IAAI,GACR,SAAS,CAAC,OAAO,KAAK,IAAI;wBACxB,CAAC,CAAC,SAAS;wBACX,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,IAAI,KAAK,SAAS,CAAC,OAAO,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC;oBAC5E,IAAI,IAAI,KAAK,SAAS;wBAAE,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;oBACvC,OAAO,CAAC,MAAM,CAAC;wBACb,IAAI,EAAE,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC;wBAC/C,OAAO,EAAE,aAAa,CAAC,SAAS,CAAC;qBAClC,CAAC,CAAC;gBACL,CAAC;YACH,CAAC;SACF,CAAC;IACJ,CAAC;CACF,CAAC,CAAC"}

package/package.json

@@ -1,9 +1,9 @@
 {
   "name": "@goodbones/oxlint",
-  "version": "0.1.0-beta.2",
+  "version": "0.1.0-beta.21",
   "type": "module",
   "license": "MIT",
-  "description": "The oxlint plugin for @goodbones/core: the imports, exports, members, structure and surface families as five oxlint rules, evaluated in the editor and in CI from the same manifest the CLI reads.",
+  "description": "The oxlint plugin for @goodbones/core: the imports, exports, members, structure, surface and campaigns families as six oxlint rules, evaluated in the editor and in CI from the same manifest the CLI reads.",
   "author": "zacharyweidenbach",
   "keywords": [
     "architecture",
@@ -43,16 +43,28 @@
     "!src/**/*.test.ts"
   ],
   "dependencies": {
-    "effect": "4.0.0-beta.94",
-    "@goodbones/typescript": "0.1.0-beta.2",
-    "@goodbones/core": "0.1.0-beta.2"
+    "effect": "4.0.5",
+    "@goodbones/core": "0.1.0-beta.18",
+    "@goodbones/typescript": "0.1.0-beta.19"
   },
   "peerDependencies": {
-    "oxlint": ">=1.77.0"
+    "oxlint": ">=1.77.0",
+    "@goodbones/ast-grep": "^0.1.3-beta.7",
+    "@goodbones/campaigns": "^0.1.1-beta.9"
+  },
+  "peerDependenciesMeta": {
+    "@goodbones/ast-grep": {
+      "optional": true
+    },
+    "@goodbones/campaigns": {
+      "optional": true
+    }
   },
   "devDependencies": {
     "@types/node": "^25.9.4",
-    "oxlint": "1.81.0"
+    "oxlint": "1.81.0",
+    "@goodbones/campaigns": "0.1.1-beta.9",
+    "@goodbones/ast-grep": "0.1.3-beta.7"
   },
   "nx": {
     "includedScripts": []

package/src/campaigns/host.ts

@@ -0,0 +1,45 @@
+// What the plugin asks of the campaigns family, as one value.
+//
+// `@goodbones/campaigns` is an optional peer: a user who never runs a
+// campaign does not install it. So nothing outside this folder names it, and
+// nothing here reaches it at run time — this module and `none.ts` import its
+// types only, which compile away. `live.ts` is the one module that loads it,
+// and the composition root reaches `live.ts` through `importOptional`, so a
+// repository without the package lints with every other rule.
+import type {
+  LoadedPolicy as CorePolicy,
+  PolicyExtension,
+  UninstalledExtension,
+} from "@goodbones/core";
+
+import type { OxlintRule } from "../oxlint-api.js";
+
+export type CampaignsHost = {
+  // The `campaigns` rule over the loaded policy.
+  readonly rule: (policy: CorePolicy) => OxlintRule;
+};
+
+// The policy as this host carries it: the core's, with the campaigns family
+// it was composed with — the live one, or `none`.
+export type LoadedPolicy = CorePolicy & { readonly campaigns: CampaignsHost };
+
+// What the composition root hands the loader for the family: the manifest
+// with each `fn` term's function imported and replaced by its name, the
+// extension that claims the family's keys — or, with the family not
+// installed, those keys named as uninstalled.
+export type Composition = {
+  readonly manifest: unknown;
+  readonly extensions: ReadonlyArray<PolicyExtension>;
+  readonly uninstalled: ReadonlyArray<UninstalledExtension>;
+};
+
+export type CampaignsFamily = {
+  readonly host: CampaignsHost;
+  readonly compose: (
+    repoRoot: string,
+    configPath: string,
+    manifest: unknown,
+  ) => Promise<Composition>;
+  // Run once the policy has loaded and before oxlint lints a file.
+  readonly prepare: (policy: CorePolicy) => Promise<void>;
+};

package/src/campaigns/live.ts

@@ -0,0 +1,106 @@
+import * as path from "node:path";
+
+import {
+  campaignsExtension,
+  campaignsOf,
+  discoverSectors,
+  loadCampaignFunctions,
+  makeReportSourceLive,
+  reportSpecsOf,
+  type SectorIndex,
+} from "@goodbones/campaigns";
+import {
+  globToRegExp,
+  listSourceFiles,
+  listWorkspaceProjects,
+  type LoadedPolicy,
+  ReportUnavailable,
+} from "@goodbones/core";
+
+import type { CampaignsFamily } from "./host.js";
+import { makeCampaignsRule } from "./rule.js";
+
+// The campaigns family as the plugin runs it, over `@goodbones/campaigns`.
+// The one module that loads the package: the composition root imports it
+// through `importOptional`, so its absence is `none`, not a failure to load.
+
+// A `marker` or `nx` perimeter needs the other files to say which sector a
+// file is in — the markers, or the workspace's projects — so the plugin
+// reads them once at load, from a walk of the repository that reads no
+// source text but the markers'. The other perimeters answer from the path
+// or the file itself, and need nothing here.
+const discoverSectorIndexes = (policy: LoadedPolicy): ReadonlyMap<string, SectorIndex> => {
+  const indexes = new Map<string, SectorIndex>();
+  const needing = campaignsOf(policy).campaignRules.filter(
+    (rule) => rule.perimeter?.kind === "marker" || rule.perimeter?.kind === "nx",
+  );
+  if (needing.length === 0) return indexes;
+  const widened = [...new Set(needing.flatMap((rule) => rule.extensions))];
+  const files = listSourceFiles(policy.repoRoot, ["."], policy.languages, widened);
+  const known = new Set(policy.languages.flatMap((one) => one.extensions));
+  const projects = needing.some((rule) => rule.perimeter?.kind === "nx")
+    ? listWorkspaceProjects(policy.repoRoot, ["."])
+    : [];
+  for (const rule of needing) {
+    const scoped = files.filter(
+      (file) =>
+        rule.scope.some((pattern) => pattern.test(file)) &&
+        (known.has(path.extname(file)) || rule.extensions.includes(path.extname(file))),
+    );
+    indexes.set(
+      rule.id,
+      discoverSectors(rule, {
+        files: scoped,
+        readText: (file) => policy.fileSystem.readText(file),
+        globToRegExp,
+        projects,
+      }),
+    );
+  }
+  return indexes;
+};
+
+export const liveCampaigns: CampaignsFamily = {
+  // The sectors a `marker` or `nx` perimeter births are read once here,
+  // from the markers and the workspace, before any file is linted.
+  host: { rule: (policy) => makeCampaignsRule(policy, discoverSectorIndexes(policy)) },
+  // The `fn` terms are imported here, before the policy loads, as the CLI
+  // does. A `report` command runs once per process — once per editor session
+  // for oxlint's language server, which then sees that report until it
+  // restarts. A report the build writes to a file is the predictable form.
+  compose: async (repoRoot, configPath, manifest) => {
+    const loaded = await loadCampaignFunctions(configPath, manifest);
+    return {
+      manifest: loaded.manifest,
+      extensions: [
+        campaignsExtension({
+          functions: loaded.functions,
+          reports: makeReportSourceLive(repoRoot),
+        }),
+      ],
+      uninstalled: [],
+    };
+  },
+  // Every `report` a campaign names is read now, while oxlint has linted
+  // nothing. A `command` forks this process, and once the linter is running
+  // Linux can refuse the fork: the linter's per-thread AST buffers merge
+  // into one mapping larger than RAM and swap together, which the default
+  // overcommit heuristic refuses to duplicate. The source keeps the answer,
+  // and a failure, so the rules read what was read here — a term's several
+  // commands run at once. A report that cannot be read is not a load
+  // failure — the campaigns rule reports it once, on the first file a
+  // campaign naming it selects; one that does not parse is.
+  prepare: async (policy) => {
+    const campaigns = campaignsOf(policy);
+    await Promise.all(
+      reportSpecsOf(campaigns.campaignRules).map(async (spec) => {
+        if (campaigns.reports.read !== undefined) return campaigns.reports.read(spec);
+        try {
+          campaigns.reports.diagnosticsOf(spec, "");
+        } catch (cause) {
+          if (!(cause instanceof ReportUnavailable)) throw cause;
+        }
+      }),
+    );
+  },
+};

package/src/campaigns/none.ts

@@ -0,0 +1,54 @@
+import type { UninstalledExtension } from "@goodbones/core";
+
+import type { OxlintRule, Program, RuleContext } from "../oxlint-api.js";
+import type { CampaignsFamily } from "./host.js";
+
+// The package the family comes in, and the manifest keys it would claim: a
+// manifest that uses one without it is refused naming the package, rather
+// than as a misspelling.
+export const CAMPAIGNS_PACKAGE = "@goodbones/campaigns";
+
+const UNINSTALLED: UninstalledExtension = {
+  manifestKeys: ["campaigns", "ledger"],
+  install: CAMPAIGNS_PACKAGE,
+};
+
+// The `campaigns` rule without the family. oxlint refuses a configuration
+// naming a rule the plugin does not register, with no word of why, so the
+// rule is registered anyway and says what to install — once per process, on
+// the first file, rather than on every file of the run.
+export const notInstalledRule = (): OxlintRule => {
+  let said = false;
+  return {
+    meta: {
+      type: "problem" as const,
+      docs: { description: `the campaigns, which need ${CAMPAIGNS_PACKAGE} installed` },
+      schema: [],
+    },
+    createOnce(context: RuleContext) {
+      return {
+        before() {
+          return !said;
+        },
+        Program(_node: Program) {
+          if (said) return;
+          said = true;
+          context.report({
+            message:
+              `architecture/campaigns needs \`${CAMPAIGNS_PACKAGE}\`, which is not installed. ` +
+              `Install it beside @goodbones/oxlint, or turn the rule off.`,
+            loc: { line: 1, column: 0 },
+          });
+        },
+      };
+    },
+  };
+};
+
+// The family, when it is not installed.
+export const campaignsNotInstalled: CampaignsFamily = {
+  host: { rule: notInstalledRule },
+  compose: (_repoRoot, _configPath, manifest) =>
+    Promise.resolve({ manifest, extensions: [], uninstalled: [UNINSTALLED] }),
+  prepare: () => Promise.resolve(),
+};

package/src/campaigns/rule.ts

@@ -0,0 +1,243 @@
+import * as path from "node:path";
+
+import {
+  type CampaignHit,
+  type CampaignInput,
+  campaignsOf,
+  campaignsSelecting,
+  type CompiledCampaign,
+  type CompiledObjective,
+  detectorCandidatesOf,
+  detectorOf,
+  evaluateObjectives,
+  isShared,
+  ledgerKeyOf,
+  ledgerPhaseOf,
+  membershipOf,
+  needsSyntax,
+  objectivesInWindow,
+  positionOf,
+  reconcileSector,
+  sectorEntryOf,
+  type SectorIndex,
+  sharedWindow,
+} from "@goodbones/campaigns";
+import { formatMessage, type LoadedPolicy, ReportUnavailable } from "@goodbones/core";
+import { sourceFactsOf } from "@goodbones/typescript";
+
+import {
+  factsOfProgram,
+  type OxlintRule,
+  type Program,
+  type RuleContext,
+  toRepoRelative,
+} from "../oxlint-api.js";
+
+// The campaigns family, one file at a time: every hit of an objective in
+// window for the file's sector that its ledger does not carry, reported at
+// the match's position with the objective's `how` as the message. The
+// facts come from oxlint's tree through the pack's reader, as the other
+// rules read them; the `syntax` term is answered by the same matcher the
+// CLI uses, over `sourceCode.text` — "one engine" is this family's parity
+// contract, rather than a corpus.
+//
+// The sector comes from the perimeter on this file (a marker or nx index
+// the host built at load, for the two forms that need the other files),
+// and the sector's phase from the ledgers — which objectives carry
+// holdouts for it, and its record's `reached` and attestations — never
+// from a walk. So the plugin's answer is the code as of the last `clear`,
+// and the CLI's is the code now; between a fix and its `clear` they
+// differ, and `check` fails on the stale holdout until they agree. A
+// `has` objective and an end state are never reported here: their holdout
+// is the sector, and they reach this file only as the phase they put it at.
+
+// The sectors a host discovered at load, per campaign, for the perimeters
+// that need the other files.
+export type SectorIndexes = ReadonlyMap<string, SectorIndex>;
+
+const unledgered = (
+  policy: LoadedPolicy,
+  rule: CompiledCampaign,
+  sector: string,
+  root: string,
+  hits: ReadonlyArray<CampaignHit>,
+): ReadonlyArray<CampaignHit> => {
+  const carried = new Set<CampaignHit>();
+  const byObjective = new Map<string, Array<CampaignHit>>();
+  for (const hit of hits) {
+    byObjective.set(hit.objective, [...(byObjective.get(hit.objective) ?? []), hit]);
+  }
+  for (const [objectiveId, own] of byObjective) {
+    const objective = rule.objectives.find((one) => one.id === objectiveId);
+    const ledger = campaignsOf(policy).ledgers.get(ledgerKeyOf(rule.id, objectiveId));
+    if (objective === undefined || ledger === undefined) continue;
+    const entries = own.map((hit) => sectorEntryOf(hit.violation, root));
+    const known = new Set(reconcileSector(ledger, sector, entries, objective.unit).ledgered);
+    own.forEach((hit, i) => {
+      if (known.has(entries[i] ?? "")) carried.add(hit);
+    });
+  }
+  return hits.filter((hit) => !carried.has(hit));
+};
+
+// The objectives in window for the sector, read off the ledgers: the phase
+// they place it at (a sector no `clear` has placed stands at the first, as
+// the legacy does), with a prerequisite counted by what the shared files'
+// ledger carries. On the shared files themselves, which stand on no phase, it is
+// what is read over it. A prerequisite is never reported on a sector's own
+// file — its holdouts are the shared files'.
+const inWindowFor = (
+  policy: LoadedPolicy,
+  rule: CompiledCampaign,
+  sector: string,
+): ReadonlyArray<CompiledObjective> => {
+  const window = isShared(rule, sector)
+    ? sharedWindow(rule)
+    : objectivesInWindow(
+        rule,
+        ledgerPhaseOf(policy, rule, sector),
+        positionOf(rule, campaignsOf(policy).sectorRecords.get(ledgerKeyOf(rule.id, sector))),
+      ).filter((one) => !one.overShared);
+  return window.filter((one) => one.detect !== null);
+};
+
+// A `report` a campaign names that cannot be read — a command the kernel
+// refused to spawn, a file no step wrote — is one fact about the run, not
+// one about each file the campaign selects. The live source keeps the
+// failure per spec; this keeps which failures have been said, so the first
+// selected file carries the notice and the rest stay quiet. Without it, a
+// lint of eight hundred files is eight hundred copies of oxlint's generic
+// "error running JS plugin", with the cause dropped by the terser formats.
+const aside = (cause: ReportUnavailable): string =>
+  `A report a campaign names could not be read, so no campaign naming it is judged in this ` +
+  `run: ${cause.message}`;
+
+export const makeCampaignsRule = (
+  policy: LoadedPolicy,
+  indexes: SectorIndexes = new Map(),
+): OxlintRule => {
+  // Per rule instance, which is per plugin load — one process — rather than
+  // per `createOnce`, which a host may call more often than that.
+  const said = new Set<string>();
+  const known = new Set(policy.languages.flatMap((one) => one.extensions));
+  return {
+    meta: {
+      type: "problem" as const,
+      docs: {
+        description:
+          "the campaigns: every place a pattern the repository is migrating away from still occurs, in a sector whose phase asks for it, that its ledger does not carry",
+      },
+      schema: [],
+    },
+
+    createOnce(context: RuleContext) {
+      let file = "";
+      let selected: ReadonlyArray<CompiledCampaign> = [];
+
+      return {
+        before() {
+          file = toRepoRelative(policy.repoRoot, context.filename);
+          if (file.startsWith("..")) return false;
+          // A file the packs would not walk — one oxlint lints anyway — is
+          // seen only by a campaign that widened its scope to it, so both
+          // hosts answer about the same files.
+          const extension = path.extname(file);
+          selected = campaignsSelecting(campaignsOf(policy).campaignRules, file).filter(
+            (rule) =>
+              known.size === 0 || known.has(extension) || rule.extensions.includes(extension),
+          );
+          return selected.length > 0;
+        },
+
+        Program(node: Program) {
+          const text = context.sourceCode.text;
+          const detectors = selected.flatMap((rule) => [
+            ...rule.objectives.flatMap((one) => {
+              const detect = detectorOf(one);
+              return detect === null ? [] : [detect];
+            }),
+            ...(rule.perimeter?.kind === "match" ? [rule.perimeter.detect] : []),
+          ]);
+          const input: CampaignInput = {
+            file,
+            text,
+            facts: sourceFactsOf(factsOfProgram(file, node)),
+            resolver: policy.resolver,
+            fileSystem: policy.fileSystem,
+            syntax: needsSyntax(detectors) ? policy.syntax.parse(file, text) : null,
+            functions: campaignsOf(policy).functions,
+            reports: campaignsOf(policy).reports,
+          };
+          // One campaign at a time, so a report one of them cannot read costs
+          // that campaign's answer for this file and not its neighbours'.
+          const unrecorded: Array<CampaignHit> = [];
+          for (const rule of selected) {
+            try {
+              const perimeter = rule.perimeter;
+              const anchors =
+                perimeter?.kind === "match"
+                  ? detectorCandidatesOf(perimeter.detect, perimeter.unit, input).map(
+                      (one) => one.key.split("#")[0] ?? one.key,
+                    )
+                  : [];
+              const place = membershipOf(rule, file, indexes.get(rule.id) ?? null, anchors);
+              // Hits grouped by the sector they fall in, then judged
+              // against that sector's window and ledger.
+              const bySector = new Map<string, { root: string; hits: Array<CampaignHit> }>();
+              const windows = new Map<string, ReadonlySet<string>>();
+              const placedAt = (subject: string | null) => {
+                const placement = place(subject);
+                if (placement === null) return null;
+                if (!windows.has(placement.sector)) {
+                  windows.set(
+                    placement.sector,
+                    new Set(inWindowFor(policy, rule, placement.sector).map((one) => one.id)),
+                  );
+                }
+                return placement;
+              };
+              const whole = placedAt(null);
+              const candidates =
+                whole === null
+                  ? rule.objectives.filter((one) => one.detect !== null)
+                  : rule.objectives.filter(
+                      (one) =>
+                        one.detect !== null && (windows.get(whole.sector)?.has(one.id) ?? false),
+                    );
+              if (perimeter?.kind !== "match" && whole === null) continue;
+              for (const hit of evaluateObjectives(candidates, input)) {
+                const placement = placedAt(hit.violation.subject);
+                if (placement === null) continue;
+                if (!(windows.get(placement.sector)?.has(hit.objective) ?? false)) continue;
+                const group = bySector.get(placement.sector) ?? { root: placement.root, hits: [] };
+                group.hits.push(hit);
+                bySector.set(placement.sector, group);
+              }
+              for (const [sector, group] of bySector) {
+                for (const hit of unledgered(policy, rule, sector, group.root, group.hits)) {
+                  unrecorded.push(hit);
+                }
+              }
+            } catch (cause) {
+              if (!(cause instanceof ReportUnavailable)) throw cause;
+              const message = aside(cause);
+              if (said.has(message)) continue;
+              said.add(message);
+              context.report({ message, loc: { line: 1, column: 0 } });
+            }
+          }
+
+          for (const hit of unrecorded) {
+            // A match lands where it was found; a file-unit hit, on line 1, as
+            // the structure rule places a finding about the file itself.
+            const at = hit.range ?? { start: { line: 0, column: 0 } };
+            context.report({
+              message: formatMessage(hit.violation),
+              loc: { line: at.start.line + 1, column: at.start.column },
+            });
+          }
+        },
+      };
+    },
+  };
+};

package/src/config-loader.ts

@@ -2,7 +2,7 @@ import * as path from "node:path";
 
 import {
   findManifestFile,
-  type LoadedPolicy,
+  importOptional,
   loadPolicy,
   makeFileSystemLive,
   readManifestFile,
@@ -10,16 +10,42 @@ import {
 import { typescriptLanguage } from "@goodbones/typescript";
 import * as Result from "effect/Result";
 
-export type { LoadedPolicy } from "@goodbones/core";
+import type { CampaignsFamily, LoadedPolicy } from "./campaigns/host.js";
+import { campaignsNotInstalled } from "./campaigns/none.js";
+
+export type { LoadedPolicy } from "./campaigns/host.js";
+
+// The campaigns family, when `@goodbones/campaigns` is installed beside the
+// plugin, and `none` when it is not. Everything that names the package is
+// under `campaigns/`, reached through this one import.
+const hostCampaigns = async (): Promise<CampaignsFamily> =>
+  (await importOptional(() => import("./campaigns/live.js"), "@goodbones/campaigns"))
+    ?.liveCampaigns ?? campaignsNotInstalled;
+
+// The clock the campaigns are judged by; `ARCHITECTURE_NOW` pins it, as it
+// does for the CLI.
+const hostNow = (): number => {
+  const pinned = process.env.ARCHITECTURE_NOW;
+  if (pinned === undefined || pinned === "") return Date.now();
+  const parsed = /^\d+$/.test(pinned) ? Number(pinned) : Date.parse(pinned);
+  if (Number.isNaN(parsed)) {
+    throw new Error(`ARCHITECTURE_NOW is ${JSON.stringify(pinned)}, which is not a date.`);
+  }
+  return parsed;
+};
 
 // The plugin's composition root: read the manifest file, construct the
 // language packs and the live file system, and hand them to the loader. A load
 // failure throws out of here and out of oxlint's import of the plugin — a
 // plugin that came up with no policy would report nothing and be
 // indistinguishable from a clean codebase.
+//
+// `given` is the family to compose: found by `hostCampaigns` unless a test
+// names one, which is how the plugin is run as if the package were absent.
 export const loadPolicyFromFile = async (
   repoRoot: string,
   configFilename?: string,
+  given?: CampaignsFamily,
 ): Promise<LoadedPolicy> => {
   // Named, or discovered: architecture.yaml, .yml, .json, or .config.mjs,
   // exactly one of which may be present.
@@ -28,14 +54,25 @@ export const loadPolicyFromFile = async (
       ? findManifestFile(repoRoot)
       : path.resolve(repoRoot, configFilename);
   const read = await readManifestFile(configPath);
+  const campaigns = given ?? (await hostCampaigns());
+  const composed = await campaigns.compose(repoRoot, configPath, read.manifest);
+  // The syntax matcher, for the campaigns family's `syntax` term, is an
+  // optional peer with a native binary: composed into the pack when it is
+  // installed, and the plugin parses with it for that family only. A
+  // campaign that needs it without it is refused at load, naming it.
+  const astGrep = await importOptional(() => import("@goodbones/ast-grep"), "@goodbones/ast-grep");
   const loaded = loadPolicy({
     repoRoot,
     configPath,
-    manifest: read.manifest,
+    manifest: composed.manifest,
     locate: read.locate,
-    languages: [typescriptLanguage()],
+    languages: [typescriptLanguage(astGrep === null ? {} : { syntax: astGrep.astGrepMatcher() })],
     fileSystem: makeFileSystemLive(repoRoot),
+    extensions: composed.extensions,
+    uninstalled: composed.uninstalled,
+    now: hostNow(),
   });
   if (Result.isFailure(loaded)) throw loaded.failure;
-  return loaded.success;
+  await campaigns.prepare(loaded.success);
+  return { ...loaded.success, campaigns: campaigns.host };
 };