@lamentis/naome 1.3.10 → 1.3.12

package/templates/naome-root/docs/naome/architecture-fitness.md

@@ -50,6 +50,32 @@ contexts:
       - "src/billing/index.ts"
 
 rules:
+  no_forbidden_layer_dependencies:
+    enabled: true
+    severity: error
+  no_cross_context_internal_imports:
+    enabled: true
+    severity: error
+  public_api_boundary:
+    enabled: true
+    severity: error
+  no_cycles:
+    enabled: true
+    severity: error
+  no_transitive_forbidden_layer_dependencies:
+    enabled: true
+    severity: error
+  max_imports_per_file:
+    enabled: true
+    value: 20
+    severity: warning
+  max_fan_out:
+    enabled: true
+    value: 20
+    severity: warning
+  external_dependency_policy:
+    enabled: true
+    severity: error
   max_file_lines:
     enabled: true
     value: 400
@@ -58,6 +84,19 @@ rules:
     enabled: true
     severity: error
 
+allowed_dependencies:
+  domain:
+  infrastructure:
+    - domain
+
+external_dependencies:
+  domain:
+    allow: []
+  infrastructure:
+    allow:
+      - "stripe"
+      - "@supabase/*"
+
 ignore:
   - path: "generated/**"
     reason: "Generated code is not architecture-owned."
@@ -69,6 +108,19 @@ ignore:
 - `arch.generated_manual_boundary` prevents changed files under explicitly
   ignored generated paths from being accepted without regeneration or a config
   change.
+- `arch.no_forbidden_layer_dependencies` rejects import edges whose source
+  layer is not allowed to depend on the imported file's layer.
+- `arch.no_cross_context_internal_imports` rejects imports into another bounded
+  context's internal files.
+- `arch.public_api_boundary` requires cross-context imports to target declared
+  `public_api` paths.
+- `arch.no_cycles` detects file-level import cycles.
+- `arch.no_transitive_forbidden_layer_dependencies` catches indirect reachability
+  from a layer to a forbidden layer.
+- `arch.max_imports_per_file` and `arch.max_fan_out` enforce local dependency
+  budgets.
+- `arch.external_dependency_policy` enforces allowed external packages per layer
+  or context.
 
 ## Agent Integration
 
@@ -85,13 +137,16 @@ fails only on configured error rules.
 
 ## Language Support
 
-The v1.3.10 foundation classifies TypeScript, JavaScript, Rust, Python, Go,
-Java, Kotlin, and Swift files by path extension. Import extractors, resolver
-rules, cycle detection, layer dependency rules, and manifest extraction are
-planned follow-up slices before v1.4.0.
+The v1.3.12 foundation classifies TypeScript, JavaScript, Rust, Python, Go,
+Java, Kotlin, and Swift files by path extension. It extracts import facts for
+TypeScript, JavaScript, Rust, Python, and Go, resolves relative imports and
+simple repository-absolute aliases, and represents unresolved imports
+explicitly as graph nodes instead of dropping them. Architecture rules now
+cover layers, bounded contexts, public APIs, cycles, transitive layer reach,
+import/fan-out budgets, and external dependency policies.
 
 ## Limitations
 
-This release intentionally starts with path extraction, graph construction,
-file budgets, generated/manual boundaries, JSON output, human output, and CLI
-integration. It does not yet resolve imports or validate cross-layer imports.
+This release intentionally keeps validation file-graph based. Manifest
+extractors, SARIF output, persistent scan caching, and deeper symbol-level call
+analysis remain planned follow-up slices before v1.4.0.