@opensip-cli/checks-typescript 0.1.6 → 0.1.8

package/dist/__tests__/shared-program.test.js

@@ -0,0 +1,41 @@
+import { mkdtempSync, rmSync, writeFileSync } from 'node:fs';
+import { tmpdir } from 'node:os';
+import { join } from 'node:path';
+import { RunScope, runWithScope } from '@opensip-cli/core';
+import { afterEach, beforeEach, describe, expect, it } from 'vitest';
+import { getSharedTypeCheckedProgram } from '../shared/type-program.js';
+let dir;
+let file;
+beforeEach(() => {
+    dir = mkdtempSync(join(tmpdir(), 'opensip-shared-prog-'));
+    file = join(dir, 'a.ts');
+    writeFileSync(file, 'export const x: string | null = null;\n');
+});
+afterEach(() => {
+    rmSync(dir, { recursive: true, force: true });
+});
+describe('getSharedTypeCheckedProgram', () => {
+    it('builds the Program once per run and reuses it across calls (memoized on the subscope cell)', async () => {
+        const scope = new RunScope();
+        // Minimal fitness subscope: the helper only reads `fitness.tsProgram`.
+        Object.assign(scope, { fitness: { tsProgram: { value: undefined } } });
+        await runWithScope(scope, () => {
+            const first = getSharedTypeCheckedProgram([file]);
+            const second = getSharedTypeCheckedProgram([file]);
+            expect(second).toBe(first); // same instance → built exactly once per run
+            return Promise.resolve();
+        });
+    });
+    it('builds a fresh, uncached Program when the run has no fitness subscope cell', async () => {
+        // A bare scope (no fitness subscope) overrides any ambient test scope; with
+        // no cell to memoize into, each call builds a fresh Program.
+        const scope = new RunScope();
+        await runWithScope(scope, () => {
+            const a = getSharedTypeCheckedProgram([file]);
+            const b = getSharedTypeCheckedProgram([file]);
+            expect(a).not.toBe(b);
+            return Promise.resolve();
+        });
+    });
+});
+//# sourceMappingURL=shared-program.test.js.map

package/dist/__tests__/shared-program.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"shared-program.test.js","sourceRoot":"","sources":["../../src/__tests__/shared-program.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AAC7D,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AACjC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAEjC,OAAO,EAAE,QAAQ,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AAC3D,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AAErE,OAAO,EAAE,2BAA2B,EAAE,MAAM,2BAA2B,CAAC;AAExE,IAAI,GAAW,CAAC;AAChB,IAAI,IAAY,CAAC;AAEjB,UAAU,CAAC,GAAG,EAAE;IACd,GAAG,GAAG,WAAW,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,sBAAsB,CAAC,CAAC,CAAC;IAC1D,IAAI,GAAG,IAAI,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;IACzB,aAAa,CAAC,IAAI,EAAE,yCAAyC,CAAC,CAAC;AACjE,CAAC,CAAC,CAAC;AACH,SAAS,CAAC,GAAG,EAAE;IACb,MAAM,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;AAChD,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,6BAA6B,EAAE,GAAG,EAAE;IAC3C,EAAE,CAAC,4FAA4F,EAAE,KAAK,IAAI,EAAE;QAC1G,MAAM,KAAK,GAAG,IAAI,QAAQ,EAAE,CAAC;QAC7B,uEAAuE;QACvE,MAAM,CAAC,MAAM,CAAC,KAAK,EAAE,EAAE,OAAO,EAAE,EAAE,SAAS,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE,EAAE,EAAE,CAAC,CAAC;QACvE,MAAM,YAAY,CAAC,KAAK,EAAE,GAAG,EAAE;YAC7B,MAAM,KAAK,GAAG,2BAA2B,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;YAClD,MAAM,MAAM,GAAG,2BAA2B,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;YACnD,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,6CAA6C;YACzE,OAAO,OAAO,CAAC,OAAO,EAAE,CAAC;QAC3B,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,4EAA4E,EAAE,KAAK,IAAI,EAAE;QAC1F,4EAA4E;QAC5E,6DAA6D;QAC7D,MAAM,KAAK,GAAG,IAAI,QAAQ,EAAE,CAAC;QAC7B,MAAM,YAAY,CAAC,KAAK,EAAE,GAAG,EAAE;YAC7B,MAAM,CAAC,GAAG,2BAA2B,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;YAC9C,MAAM,CAAC,GAAG,2BAA2B,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;YAC9C,MAAM,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YACtB,OAAO,OAAO,CAAC,OAAO,EAAE,CAAC;QAC3B,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/__tests__/shipped-allowlists-are-generic.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=shipped-allowlists-are-generic.test.d.ts.map

package/dist/__tests__/shipped-allowlists-are-generic.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"shipped-allowlists-are-generic.test.d.ts","sourceRoot":"","sources":["../../src/__tests__/shipped-allowlists-are-generic.test.ts"],"names":[],"mappings":""}

package/dist/__tests__/shipped-allowlists-are-generic.test.js

@@ -0,0 +1,64 @@
+/**
+ * @fileoverview De-leak guard (b): the hardcoded allowlists shipped inside the
+ * generic @opensip-cli/checks-* packs must contain only language/library-generic
+ * entries — never project-specific symbols carried over from the private
+ * codebase this tool was extracted from. A leaked safe-symbol silently
+ * suppresses real findings in any adopter that happens to use that name.
+ *
+ * Companion to the source-text guard (a) in
+ * opensip-cli/fit/checks/shipped-checks-must-be-generic.mjs. This one inspects
+ * the live exported data structures, so it catches a leak the moment it is added
+ * to an array — independent of the dogfood run.
+ */
+import { describe, expect, it } from 'vitest';
+import { DOMAIN_SPECIFIC_FUNCTION_NAMES } from '../checks/quality/code-structure/duplicate-utility-functions.js';
+import { SAFE_BUILDER_PREFIXES, SAFE_METHOD_PREFIXES, } from '../checks/quality/data-integrity/null-safety.js';
+import { THROW_ALLOWED_PATHS } from '../checks/quality/patterns/result-pattern-consistency.js';
+/**
+ * Distinctive project-specific identifiers / brand tokens from the original
+ * (pre-open-source) private codebase. None may appear in ANY shipped allowlist;
+ * adopters supply their own via recipe config (`additionalSafeBuilders`, etc.).
+ *
+ * Deliberately limited to UNAMBIGUOUS identifiers: generic-sounding names that
+ * legitimately appear in some allowlists (`getConfig`, `getLogger` are valid
+ * duplicate-name exemptions in DOMAIN_SPECIFIC_FUNCTION_NAMES) are NOT listed, so
+ * this stays false-positive-free.
+ */
+const FOREIGN_ALLOWLIST_TOKEN = /Escrow|I18nError|getSqlite|getDatabase|getRegistry|getSync|getTenantId|TypedEventBus|CredentialConfig|ContextManager|stripThinkTags|getNumberFormatter|getDateFormatter|formatRelative|ensureError|extractErrorMessage|chronoswap|sanitizeForPrompt/i;
+/**
+ * The only bare (non-member, non-call) identifiers allowed in
+ * SAFE_BUILDER_PREFIXES: documented library entry points. Every other entry
+ * must be member-qualified (`Object.`, `db.`) or a constructor/call (`new URL(`,
+ * `prepare(`). A bare camelCase identifier is almost always a project-specific
+ * getter and belongs in recipe config, not the shipped pack.
+ */
+const REVIEWED_BARE_LIBRARY_BUILDERS = new Set(['createQueryBuilder', 'getRepository']); // TypeORM
+function asStrings(entries) {
+    return [...entries].map((e) => (e instanceof RegExp ? e.source : e));
+}
+describe('shipped allowlists are generic (de-leak guard b)', () => {
+    // Count gate: any add/remove to the shipped safe-builder allowlist trips this,
+    // forcing the author to bump the count AND have a reviewer confirm the new
+    // entry is genuinely generic (not a project-specific symbol that belongs in
+    // an adopter's `additionalSafeBuilders` recipe config).
+    it('SAFE_BUILDER_PREFIXES holds exactly the reviewed number of generic entries', () => {
+        expect(SAFE_BUILDER_PREFIXES).toHaveLength(54);
+    });
+    it('every SAFE_BUILDER_PREFIXES entry is a language/library construct, not a bare project getter', () => {
+        const bareLeaks = SAFE_BUILDER_PREFIXES.filter((e) => !e.includes('.') && !e.includes('(') && !REVIEWED_BARE_LIBRARY_BUILDERS.has(e));
+        expect(bareLeaks).toEqual([]);
+    });
+    it('no shipped allowlist contains a foreign project-specific identifier', () => {
+        const arrays = {
+            SAFE_BUILDER_PREFIXES: asStrings(SAFE_BUILDER_PREFIXES),
+            SAFE_METHOD_PREFIXES: asStrings(SAFE_METHOD_PREFIXES),
+            THROW_ALLOWED_PATHS: asStrings(THROW_ALLOWED_PATHS),
+            DOMAIN_SPECIFIC_FUNCTION_NAMES: asStrings(DOMAIN_SPECIFIC_FUNCTION_NAMES),
+        };
+        for (const [name, entries] of Object.entries(arrays)) {
+            const leaked = entries.filter((e) => FOREIGN_ALLOWLIST_TOKEN.test(e));
+            expect(leaked, `${name} must not contain foreign-domain symbols`).toEqual([]);
+        }
+    });
+});
+//# sourceMappingURL=shipped-allowlists-are-generic.test.js.map

package/dist/__tests__/shipped-allowlists-are-generic.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"shipped-allowlists-are-generic.test.js","sourceRoot":"","sources":["../../src/__tests__/shipped-allowlists-are-generic.test.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AACH,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AAE9C,OAAO,EAAE,8BAA8B,EAAE,MAAM,iEAAiE,CAAC;AACjH,OAAO,EACL,qBAAqB,EACrB,oBAAoB,GACrB,MAAM,iDAAiD,CAAC;AACzD,OAAO,EAAE,mBAAmB,EAAE,MAAM,0DAA0D,CAAC;AAE/F;;;;;;;;;GASG;AACH,MAAM,uBAAuB,GAC3B,sPAAsP,CAAC;AAEzP;;;;;;GAMG;AACH,MAAM,8BAA8B,GAAG,IAAI,GAAG,CAAC,CAAC,oBAAoB,EAAE,eAAe,CAAC,CAAC,CAAC,CAAC,UAAU;AAEnG,SAAS,SAAS,CAAC,OAAkC;IACnD,OAAO,CAAC,GAAG,OAAO,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,YAAY,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AACvE,CAAC;AAED,QAAQ,CAAC,kDAAkD,EAAE,GAAG,EAAE;IAChE,+EAA+E;IAC/E,2EAA2E;IAC3E,4EAA4E;IAC5E,wDAAwD;IACxD,EAAE,CAAC,4EAA4E,EAAE,GAAG,EAAE;QACpF,MAAM,CAAC,qBAAqB,CAAC,CAAC,YAAY,CAAC,EAAE,CAAC,CAAC;IACjD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,8FAA8F,EAAE,GAAG,EAAE;QACtG,MAAM,SAAS,GAAG,qBAAqB,CAAC,MAAM,CAC5C,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,8BAA8B,CAAC,GAAG,CAAC,CAAC,CAAC,CACtF,CAAC;QACF,MAAM,CAAC,SAAS,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;IAChC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,qEAAqE,EAAE,GAAG,EAAE;QAC7E,MAAM,MAAM,GAA6B;YACvC,qBAAqB,EAAE,SAAS,CAAC,qBAAqB,CAAC;YACvD,oBAAoB,EAAE,SAAS,CAAC,oBAAoB,CAAC;YACrD,mBAAmB,EAAE,SAAS,CAAC,mBAAmB,CAAC;YACnD,8BAA8B,EAAE,SAAS,CAAC,8BAA8B,CAAC;SAC1E,CAAC;QACF,KAAK,MAAM,CAAC,IAAI,EAAE,OAAO,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;YACrD,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,uBAAuB,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;YACtE,MAAM,CAAC,MAAM,EAAE,GAAG,IAAI,0CAA0C,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;QAChF,CAAC;IACH,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/__tests__/subprocess-correlation-required.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=subprocess-correlation-required.test.d.ts.map

package/dist/__tests__/subprocess-correlation-required.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"subprocess-correlation-required.test.d.ts","sourceRoot":"","sources":["../../src/__tests__/subprocess-correlation-required.test.ts"],"names":[],"mappings":""}

package/dist/__tests__/subprocess-correlation-required.test.js

@@ -0,0 +1,114 @@
+/**
+ * @fileoverview Behaviour tests for the subprocess-correlation-required
+ * architecture check (ADR-0054 readiness; subprocess-correlation-telemetry spec).
+ */
+import { runCheckOnFixture } from '@opensip-cli/test-support';
+import { describe, expect, it } from 'vitest';
+import { analyzeSubprocessCorrelationRequired } from '../checks/architecture/subprocess-correlation-required.js';
+import { checks } from '../index.js';
+const SHARD_RUNNER = 'packages/graph/engine/src/cli/orchestrate/shard-runner.ts';
+const WORKSPACE_RUNNER = 'packages/graph/engine/src/cli/workspace-runner.ts';
+const HEAP_PREFLIGHT = 'packages/graph/engine/src/cli/heap-preflight.ts';
+const OUT_OF_SCOPE = 'packages/core/src/runtime/subprocess-transport.ts';
+function check() {
+    const c = checks.find((x) => x.config.slug === 'subprocess-correlation-required');
+    if (!c)
+        throw new Error('check not found: subprocess-correlation-required');
+    return c;
+}
+async function findingsFor(file) {
+    const run = await runCheckOnFixture(check(), { files: [file] });
+    return run.findings.length;
+}
+describe('analyzeSubprocessCorrelationRequired (AST)', () => {
+    it('flags a worker spawn that forwards env but not correlation', () => {
+        const v = analyzeSubprocessCorrelationRequired([
+            "import { spawn } from 'node:child_process';",
+            'export function spawnShardWorker(cliScript: string, specPath: string): void {',
+            "  spawn(process.execPath, [cliScript, 'graph-shard-worker', specPath], {",
+            '    env: { ...process.env },',
+            '  });',
+            '}',
+        ].join('\n'), SHARD_RUNNER);
+        expect(v).toHaveLength(1);
+        expect(v[0]?.message).toContain('RunCorrelation');
+        expect(v[0]?.severity).toBe('error');
+    });
+    it('allows a worker spawn that merges correlationToEnv', () => {
+        const v = analyzeSubprocessCorrelationRequired([
+            "import { spawn } from 'node:child_process';",
+            "import { correlationToEnv, currentScope } from '@opensip-cli/core';",
+            'export function spawnShardWorker(cliScript: string, specPath: string): void {',
+            '  const correlation = currentScope()?.correlation;',
+            "  spawn(process.execPath, [cliScript, 'graph-shard-worker', specPath], {",
+            '    env: { ...process.env, ...(correlation ? correlationToEnv(correlation) : {}) },',
+            '  });',
+            '}',
+        ].join('\n'), SHARD_RUNNER);
+        expect(v).toEqual([]);
+    });
+    it('allows a worker fork that writes a correlation field on the descriptor', () => {
+        const v = analyzeSubprocessCorrelationRequired([
+            "import { fork } from 'node:child_process';",
+            'export function forkWorker(command: string, specPath: string, correlation: unknown): void {',
+            '  const descriptor = {',
+            "    argv: ['graph-run-worker', specPath],",
+            '    correlation,',
+            '  };',
+            '  void descriptor;',
+            "  fork(command, ['graph-run-worker', specPath], { env: { ...process.env } });",
+            '}',
+        ].join('\n'), SHARD_RUNNER);
+        expect(v).toEqual([]);
+    });
+    it('does NOT flag a plain (non-worker) subcommand spawn', () => {
+        const v = analyzeSubprocessCorrelationRequired([
+            "import { spawn } from 'node:child_process';",
+            'export function spawnGraphChild(cliScript: string, rootDir: string): void {',
+            "  spawn(process.execPath, [cliScript, 'graph', rootDir, '--json'], {",
+            '    env: process.env,',
+            '  });',
+            '}',
+        ].join('\n'), WORKSPACE_RUNNER);
+        expect(v).toEqual([]);
+    });
+    it('does NOT flag a same-process re-exec (no worker subcommand literal)', () => {
+        const v = analyzeSubprocessCorrelationRequired([
+            "import { spawn } from 'node:child_process';",
+            'export function elevate(): void {',
+            '  spawn(process.execPath, process.argv.slice(1), {',
+            '    env: { ...process.env, NODE_OPTIONS: "--max-old-space-size=4096" },',
+            '    stdio: "inherit",',
+            '  });',
+            '}',
+        ].join('\n'), HEAP_PREFLIGHT);
+        expect(v).toEqual([]);
+    });
+});
+describe('subprocess-correlation-required (gate)', () => {
+    it('flags an uncorrelated worker spawn under packages/graph', async () => {
+        expect(await findingsFor({
+            path: SHARD_RUNNER,
+            content: [
+                "import { spawn } from 'node:child_process';",
+                'export function spawnShardWorker(cliScript: string, specPath: string): void {',
+                "  spawn(process.execPath, [cliScript, 'graph-shard-worker', specPath], {",
+                '    env: { ...process.env },',
+                '  });',
+                '}',
+            ].join('\n'),
+        })).toBeGreaterThanOrEqual(1);
+    });
+    it('does NOT flag spawn/fork sites outside the gated packages', async () => {
+        expect(await findingsFor({
+            path: OUT_OF_SCOPE,
+            content: [
+                "import { fork } from 'node:child_process';",
+                'export function forkWorker(command: string, specPath: string): void {',
+                "  fork(command, ['graph-run-worker', specPath], { env: { ...process.env } });",
+                '}',
+            ].join('\n'),
+        })).toBe(0);
+    });
+});
+//# sourceMappingURL=subprocess-correlation-required.test.js.map

package/dist/__tests__/subprocess-correlation-required.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"subprocess-correlation-required.test.js","sourceRoot":"","sources":["../../src/__tests__/subprocess-correlation-required.test.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,OAAO,EAAE,iBAAiB,EAAoB,MAAM,2BAA2B,CAAC;AAChF,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AAE9C,OAAO,EAAE,oCAAoC,EAAE,MAAM,2DAA2D,CAAC;AACjH,OAAO,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AAErC,MAAM,YAAY,GAAG,2DAA2D,CAAC;AACjF,MAAM,gBAAgB,GAAG,mDAAmD,CAAC;AAC7E,MAAM,cAAc,GAAG,iDAAiD,CAAC;AACzE,MAAM,YAAY,GAAG,mDAAmD,CAAC;AAEzE,SAAS,KAAK;IACZ,MAAM,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,KAAK,iCAAiC,CAAC,CAAC;IAClF,IAAI,CAAC,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,kDAAkD,CAAC,CAAC;IAC5E,OAAO,CAAC,CAAC;AACX,CAAC;AAED,KAAK,UAAU,WAAW,CAAC,IAAiB;IAC1C,MAAM,GAAG,GAAG,MAAM,iBAAiB,CAAC,KAAK,EAAE,EAAE,EAAE,KAAK,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAChE,OAAO,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC;AAC7B,CAAC;AAED,QAAQ,CAAC,4CAA4C,EAAE,GAAG,EAAE;IAC1D,EAAE,CAAC,4DAA4D,EAAE,GAAG,EAAE;QACpE,MAAM,CAAC,GAAG,oCAAoC,CAC5C;YACE,6CAA6C;YAC7C,+EAA+E;YAC/E,0EAA0E;YAC1E,8BAA8B;YAC9B,OAAO;YACP,GAAG;SACJ,CAAC,IAAI,CAAC,IAAI,CAAC,EACZ,YAAY,CACb,CAAC;QACF,MAAM,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;QAC1B,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC,SAAS,CAAC,gBAAgB,CAAC,CAAC;QAClD,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IACvC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,oDAAoD,EAAE,GAAG,EAAE;QAC5D,MAAM,CAAC,GAAG,oCAAoC,CAC5C;YACE,6CAA6C;YAC7C,qEAAqE;YACrE,+EAA+E;YAC/E,oDAAoD;YACpD,0EAA0E;YAC1E,qFAAqF;YACrF,OAAO;YACP,GAAG;SACJ,CAAC,IAAI,CAAC,IAAI,CAAC,EACZ,YAAY,CACb,CAAC;QACF,MAAM,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;IACxB,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,wEAAwE,EAAE,GAAG,EAAE;QAChF,MAAM,CAAC,GAAG,oCAAoC,CAC5C;YACE,4CAA4C;YAC5C,6FAA6F;YAC7F,wBAAwB;YACxB,2CAA2C;YAC3C,kBAAkB;YAClB,MAAM;YACN,oBAAoB;YACpB,+EAA+E;YAC/E,GAAG;SACJ,CAAC,IAAI,CAAC,IAAI,CAAC,EACZ,YAAY,CACb,CAAC;QACF,MAAM,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;IACxB,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,qDAAqD,EAAE,GAAG,EAAE;QAC7D,MAAM,CAAC,GAAG,oCAAoC,CAC5C;YACE,6CAA6C;YAC7C,6EAA6E;YAC7E,sEAAsE;YACtE,uBAAuB;YACvB,OAAO;YACP,GAAG;SACJ,CAAC,IAAI,CAAC,IAAI,CAAC,EACZ,gBAAgB,CACjB,CAAC;QACF,MAAM,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;IACxB,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,qEAAqE,EAAE,GAAG,EAAE;QAC7E,MAAM,CAAC,GAAG,oCAAoC,CAC5C;YACE,6CAA6C;YAC7C,mCAAmC;YACnC,oDAAoD;YACpD,yEAAyE;YACzE,uBAAuB;YACvB,OAAO;YACP,GAAG;SACJ,CAAC,IAAI,CAAC,IAAI,CAAC,EACZ,cAAc,CACf,CAAC;QACF,MAAM,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;IACxB,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,wCAAwC,EAAE,GAAG,EAAE;IACtD,EAAE,CAAC,yDAAyD,EAAE,KAAK,IAAI,EAAE;QACvE,MAAM,CACJ,MAAM,WAAW,CAAC;YAChB,IAAI,EAAE,YAAY;YAClB,OAAO,EAAE;gBACP,6CAA6C;gBAC7C,+EAA+E;gBAC/E,0EAA0E;gBAC1E,8BAA8B;gBAC9B,OAAO;gBACP,GAAG;aACJ,CAAC,IAAI,CAAC,IAAI,CAAC;SACb,CAAC,CACH,CAAC,sBAAsB,CAAC,CAAC,CAAC,CAAC;IAC9B,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,2DAA2D,EAAE,KAAK,IAAI,EAAE;QACzE,MAAM,CACJ,MAAM,WAAW,CAAC;YAChB,IAAI,EAAE,YAAY;YAClB,OAAO,EAAE;gBACP,4CAA4C;gBAC5C,uEAAuE;gBACvE,+EAA+E;gBAC/E,GAAG;aACJ,CAAC,IAAI,CAAC,IAAI,CAAC;SACb,CAAC,CACH,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACZ,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/checks/architecture/host-tool-runtime-import-boundary.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"host-tool-runtime-import-boundary.d.ts","sourceRoot":"","sources":["../../../src/checks/architecture/host-tool-runtime-import-boundary.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,EAA2B,KAAK,cAAc,EAAE,MAAM,sBAAsB,CAAC;AA2EpF,wEAAwE;AACxE,wBAAgB,oCAAoC,CAClD,OAAO,EAAE,MAAM,EACf,QAAQ,EAAE,MAAM,GACf,cAAc,EAAE,CAyClB;AAED,eAAO,MAAM,6BAA6B,sCAYxC,CAAC"}
+{"version":3,"file":"host-tool-runtime-import-boundary.d.ts","sourceRoot":"","sources":["../../../src/checks/architecture/host-tool-runtime-import-boundary.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,EAA2B,KAAK,cAAc,EAAE,MAAM,sBAAsB,CAAC;AA4EpF,wEAAwE;AACxE,wBAAgB,oCAAoC,CAClD,OAAO,EAAE,MAAM,EACf,QAAQ,EAAE,MAAM,GACf,cAAc,EAAE,CAyClB;AAED,eAAO,MAAM,6BAA6B,sCAYxC,CAAC"}

package/dist/checks/architecture/host-tool-runtime-import-boundary.js

@@ -17,6 +17,7 @@ const IMPORT_RUNTIME = 'importToolRuntime';
 const POLICY_HELPER = 'hostRuntimeImportPolicyFor';
 const ALLOWED_CALLSITE_SUFFIXES = new Set([
     'packages/cli/src/bootstrap/admit-tool-package.ts',
+    'packages/cli/src/bootstrap/register-tools.ts',
     'packages/cli/src/bootstrap/register-tools-discovery.ts',
 ]);
 function normalized(path) {
@@ -103,7 +104,7 @@ export function analyzeHostToolRuntimeImportBoundary(content, filePath) {
                             `(ADR-0054 transition). Found host-process runtime import in ${normalized(filePath)}.`,
                         severity: 'error',
                         line,
-                        suggestion: 'Route tool runtime loading through admit-tool-package/register-tools-discovery, or the ADR-0054 worker boundary.',
+                        suggestion: 'Route tool runtime loading through admit-tool-package/register-tools, or the ADR-0054 worker boundary.',
                     });
                 }
                 else if (node.arguments.length < 2 || !isPolicyArg(node.arguments[1])) {

package/dist/checks/architecture/host-tool-runtime-import-boundary.js.map

@@ -1 +1 @@
-{"version":3,"file":"host-tool-runtime-import-boundary.js","sourceRoot":"","sources":["../../../src/checks/architecture/host-tool-runtime-import-boundary.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AACH,4LAA4L;AAC5L,OAAO,EAAE,WAAW,EAAE,UAAU,EAAuB,MAAM,sBAAsB,CAAC;AACpF,OAAO,EAAE,mBAAmB,EAAE,MAAM,8BAA8B,CAAC;AACnE,OAAO,KAAK,EAAE,MAAM,YAAY,CAAC;AAEjC,MAAM,aAAa,GAAG,mBAAmB,CAAC;AAC1C,MAAM,cAAc,GAAG,mBAAmB,CAAC;AAC3C,MAAM,aAAa,GAAG,4BAA4B,CAAC;AAEnD,MAAM,yBAAyB,GAAG,IAAI,GAAG,CAAC;IACxC,kDAAkD;IAClD,wDAAwD;CACzD,CAAC,CAAC;AAEH,SAAS,UAAU,CAAC,IAAY;IAC9B,OAAO,IAAI,CAAC,UAAU,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;AACpC,CAAC;AAED,SAAS,iBAAiB,CAAC,QAAgB;IACzC,MAAM,CAAC,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC;IAC/B,KAAK,MAAM,MAAM,IAAI,yBAAyB,EAAE,CAAC;QAC/C,IAAI,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC;YAAE,OAAO,IAAI,CAAC;IACtC,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,gBAAgB,CAAC,IAAqB;IAC7C,IAAI,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,eAAe,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,gBAAgB,CAAC,IAAI,CAAC,EAAE,CAAC;QACnF,OAAO,IAAI,CAAC,IAAI,CAAC;IACnB,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,SAAS,aAAa,CAAC,IAAmB;IACxC,OAAO,IAAI,CAAC,IAAI,KAAK,EAAE,CAAC,UAAU,CAAC,WAAW,CAAC;AACjD,CAAC;AAED,SAAS,WAAW,CAAC,GAAkB;IACrC,IAAI,EAAE,CAAC,gBAAgB,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,YAAY,CAAC,GAAG,CAAC,UAAU,CAAC,EAAE,CAAC;QAChE,OAAO,GAAG,CAAC,UAAU,CAAC,IAAI,KAAK,aAAa,CAAC;IAC/C,CAAC;IACD,IAAI,CAAC,EAAE,CAAC,yBAAyB,CAAC,GAAG,CAAC;QAAE,OAAO,KAAK,CAAC;IAErD,IAAI,SAAS,GAAG,KAAK,CAAC;IACtB,IAAI,aAAa,GAAG,KAAK,CAAC;IAC1B,KAAK,MAAM,IAAI,IAAI,GAAG,CAAC,UAAU,EAAE,CAAC;QAClC,IAAI,CAAC,EAAE,CAAC,oBAAoB,CAAC,IAAI,CAAC;YAAE,SAAS;QAC7C,MAAM,IAAI,GAAG,gBAAgB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACzC,IAAI,IAAI,KAAK,QAAQ;YAAE,SAAS,GAAG,IAAI,CAAC;QACxC,IAAI,IAAI,KAAK,mBAAmB,IAAI,aAAa,CAAC,IAAI,CAAC,WAAW,CAAC,EAAE,CAAC;YACpE,aAAa,GAAG,IAAI,CAAC;QACvB,CAAC;IACH,CAAC;IACD,OAAO,SAAS,IAAI,CAAC,aAAa,IAAI,GAAG,CAAC,OAAO,EAAE,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC,CAAC;AAC7E,CAAC;AAED,SAAS,uBAAuB,CAAC,UAAyB;IACxD,MAAM,KAAK,GAAG,IAAI,GAAG,EAAU,CAAC;IAChC,KAAK,MAAM,IAAI,IAAI,UAAU,CAAC,UAAU,EAAE,CAAC;QACzC,IAAI,CAAC,EAAE,CAAC,mBAAmB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,eAAe,CAAC,IAAI,CAAC,eAAe,CAAC;YAAE,SAAS;QACzF,MAAM,MAAM,GAAG,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC;QACzC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,wBAAwB,CAAC,IAAI,MAAM,KAAK,yBAAyB,EAAE,CAAC;YACvF,SAAS;QACX,CAAC;QACD,MAAM,KAAK,GAAG,IAAI,CAAC,YAAY,EAAE,aAAa,CAAC;QAC/C,IAAI,KAAK,KAAK,SAAS,IAAI,CAAC,EAAE,CAAC,cAAc,CAAC,KAAK,CAAC;YAAE,SAAS;QAC/D,KAAK,MAAM,OAAO,IAAI,KAAK,CAAC,QAAQ,EAAE,CAAC;YACrC,MAAM,QAAQ,GAAG,CAAC,OAAO,CAAC,YAAY,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC;YAC7D,IAAI,QAAQ,KAAK,cAAc;gBAAE,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAChE,CAAC;IACH,CAAC;IACD,+DAA+D;IAC/D,IAAI,iBAAiB,CAAC,UAAU,CAAC,QAAQ,CAAC;QAAE,KAAK,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC;IACtE,OAAO,KAAK,CAAC;AACf,CAAC;AAED,wEAAwE;AACxE,MAAM,UAAU,oCAAoC,CAClD,OAAe,EACf,QAAgB;IAEhB,MAAM,UAAU,GAAqB,EAAE,CAAC;IACxC,MAAM,UAAU,GAAG,mBAAmB,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;IAC1D,IAAI,CAAC,UAAU;QAAE,OAAO,UAAU,CAAC;IAEnC,MAAM,YAAY,GAAG,uBAAuB,CAAC,UAAU,CAAC,CAAC;IACzD,IAAI,YAAY,CAAC,IAAI,KAAK,CAAC;QAAE,OAAO,UAAU,CAAC;IAE/C,MAAM,WAAW,GAAG,iBAAiB,CAAC,QAAQ,CAAC,CAAC;IAChD,MAAM,KAAK,GAAG,CAAC,IAAa,EAAQ,EAAE;QACpC,IAAI,EAAE,CAAC,gBAAgB,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE,CAAC;YAClE,MAAM,MAAM,GAAG,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;YACpC,IAAI,YAAY,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;gBAC7B,MAAM,IAAI,GAAG,UAAU,CAAC,6BAA6B,CAAC,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC;gBAC1F,IAAI,CAAC,WAAW,EAAE,CAAC;oBACjB,UAAU,CAAC,IAAI,CAAC;wBACd,OAAO,EACL,kFAAkF;4BAClF,+DAA+D,UAAU,CAAC,QAAQ,CAAC,GAAG;wBACxF,QAAQ,EAAE,OAAO;wBACjB,IAAI;wBACJ,UAAU,EACR,kHAAkH;qBACrH,CAAC,CAAC;gBACL,CAAC;qBAAM,IAAI,IAAI,CAAC,SAAS,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;oBACxE,UAAU,CAAC,IAAI,CAAC;wBACd,OAAO,EACL,6EAA6E;4BAC7E,+EAA+E;wBACjF,QAAQ,EAAE,OAAO;wBACjB,IAAI;wBACJ,UAAU,EACR,gHAAgH;qBACnH,CAAC,CAAC;gBACL,CAAC;YACH,CAAC;QACH,CAAC;QACD,EAAE,CAAC,YAAY,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;IAC/B,CAAC,CAAC;IACF,KAAK,CAAC,UAAU,CAAC,CAAC;IAClB,OAAO,UAAU,CAAC;AACpB,CAAC;AAED,MAAM,CAAC,MAAM,6BAA6B,GAAG,WAAW,CAAC;IACvD,EAAE,EAAE,sCAAsC;IAC1C,IAAI,EAAE,mCAAmC;IACzC,WAAW,EACT,wHAAwH;IAC1H,KAAK,EAAE,EAAE,SAAS,EAAE,CAAC,YAAY,CAAC,EAAE,QAAQ,EAAE,CAAC,SAAS,CAAC,EAAE;IAC3D,IAAI,EAAE,CAAC,cAAc,CAAC;IACtB,SAAS,EAAE,CAAC,IAAI,EAAE,KAAK,CAAC;IACxB,OAAO,EAAE,CAAC,OAAO,EAAE,QAAQ,EAAE,EAAE;QAC7B,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,QAAQ,CAAC,aAAa,CAAC,IAAI,UAAU,CAAC,QAAQ,CAAC;YAAE,OAAO,EAAE,CAAC;QACrF,OAAO,oCAAoC,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;IACjE,CAAC;CACF,CAAC,CAAC"}
+{"version":3,"file":"host-tool-runtime-import-boundary.js","sourceRoot":"","sources":["../../../src/checks/architecture/host-tool-runtime-import-boundary.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AACH,4LAA4L;AAC5L,OAAO,EAAE,WAAW,EAAE,UAAU,EAAuB,MAAM,sBAAsB,CAAC;AACpF,OAAO,EAAE,mBAAmB,EAAE,MAAM,8BAA8B,CAAC;AACnE,OAAO,KAAK,EAAE,MAAM,YAAY,CAAC;AAEjC,MAAM,aAAa,GAAG,mBAAmB,CAAC;AAC1C,MAAM,cAAc,GAAG,mBAAmB,CAAC;AAC3C,MAAM,aAAa,GAAG,4BAA4B,CAAC;AAEnD,MAAM,yBAAyB,GAAG,IAAI,GAAG,CAAC;IACxC,kDAAkD;IAClD,8CAA8C;IAC9C,wDAAwD;CACzD,CAAC,CAAC;AAEH,SAAS,UAAU,CAAC,IAAY;IAC9B,OAAO,IAAI,CAAC,UAAU,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;AACpC,CAAC;AAED,SAAS,iBAAiB,CAAC,QAAgB;IACzC,MAAM,CAAC,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC;IAC/B,KAAK,MAAM,MAAM,IAAI,yBAAyB,EAAE,CAAC;QAC/C,IAAI,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC;YAAE,OAAO,IAAI,CAAC;IACtC,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,gBAAgB,CAAC,IAAqB;IAC7C,IAAI,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,eAAe,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,gBAAgB,CAAC,IAAI,CAAC,EAAE,CAAC;QACnF,OAAO,IAAI,CAAC,IAAI,CAAC;IACnB,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,SAAS,aAAa,CAAC,IAAmB;IACxC,OAAO,IAAI,CAAC,IAAI,KAAK,EAAE,CAAC,UAAU,CAAC,WAAW,CAAC;AACjD,CAAC;AAED,SAAS,WAAW,CAAC,GAAkB;IACrC,IAAI,EAAE,CAAC,gBAAgB,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,YAAY,CAAC,GAAG,CAAC,UAAU,CAAC,EAAE,CAAC;QAChE,OAAO,GAAG,CAAC,UAAU,CAAC,IAAI,KAAK,aAAa,CAAC;IAC/C,CAAC;IACD,IAAI,CAAC,EAAE,CAAC,yBAAyB,CAAC,GAAG,CAAC;QAAE,OAAO,KAAK,CAAC;IAErD,IAAI,SAAS,GAAG,KAAK,CAAC;IACtB,IAAI,aAAa,GAAG,KAAK,CAAC;IAC1B,KAAK,MAAM,IAAI,IAAI,GAAG,CAAC,UAAU,EAAE,CAAC;QAClC,IAAI,CAAC,EAAE,CAAC,oBAAoB,CAAC,IAAI,CAAC;YAAE,SAAS;QAC7C,MAAM,IAAI,GAAG,gBAAgB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACzC,IAAI,IAAI,KAAK,QAAQ;YAAE,SAAS,GAAG,IAAI,CAAC;QACxC,IAAI,IAAI,KAAK,mBAAmB,IAAI,aAAa,CAAC,IAAI,CAAC,WAAW,CAAC,EAAE,CAAC;YACpE,aAAa,GAAG,IAAI,CAAC;QACvB,CAAC;IACH,CAAC;IACD,OAAO,SAAS,IAAI,CAAC,aAAa,IAAI,GAAG,CAAC,OAAO,EAAE,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC,CAAC;AAC7E,CAAC;AAED,SAAS,uBAAuB,CAAC,UAAyB;IACxD,MAAM,KAAK,GAAG,IAAI,GAAG,EAAU,CAAC;IAChC,KAAK,MAAM,IAAI,IAAI,UAAU,CAAC,UAAU,EAAE,CAAC;QACzC,IAAI,CAAC,EAAE,CAAC,mBAAmB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,eAAe,CAAC,IAAI,CAAC,eAAe,CAAC;YAAE,SAAS;QACzF,MAAM,MAAM,GAAG,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC;QACzC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,wBAAwB,CAAC,IAAI,MAAM,KAAK,yBAAyB,EAAE,CAAC;YACvF,SAAS;QACX,CAAC;QACD,MAAM,KAAK,GAAG,IAAI,CAAC,YAAY,EAAE,aAAa,CAAC;QAC/C,IAAI,KAAK,KAAK,SAAS,IAAI,CAAC,EAAE,CAAC,cAAc,CAAC,KAAK,CAAC;YAAE,SAAS;QAC/D,KAAK,MAAM,OAAO,IAAI,KAAK,CAAC,QAAQ,EAAE,CAAC;YACrC,MAAM,QAAQ,GAAG,CAAC,OAAO,CAAC,YAAY,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC;YAC7D,IAAI,QAAQ,KAAK,cAAc;gBAAE,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAChE,CAAC;IACH,CAAC;IACD,+DAA+D;IAC/D,IAAI,iBAAiB,CAAC,UAAU,CAAC,QAAQ,CAAC;QAAE,KAAK,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC;IACtE,OAAO,KAAK,CAAC;AACf,CAAC;AAED,wEAAwE;AACxE,MAAM,UAAU,oCAAoC,CAClD,OAAe,EACf,QAAgB;IAEhB,MAAM,UAAU,GAAqB,EAAE,CAAC;IACxC,MAAM,UAAU,GAAG,mBAAmB,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;IAC1D,IAAI,CAAC,UAAU;QAAE,OAAO,UAAU,CAAC;IAEnC,MAAM,YAAY,GAAG,uBAAuB,CAAC,UAAU,CAAC,CAAC;IACzD,IAAI,YAAY,CAAC,IAAI,KAAK,CAAC;QAAE,OAAO,UAAU,CAAC;IAE/C,MAAM,WAAW,GAAG,iBAAiB,CAAC,QAAQ,CAAC,CAAC;IAChD,MAAM,KAAK,GAAG,CAAC,IAAa,EAAQ,EAAE;QACpC,IAAI,EAAE,CAAC,gBAAgB,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE,CAAC;YAClE,MAAM,MAAM,GAAG,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;YACpC,IAAI,YAAY,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;gBAC7B,MAAM,IAAI,GAAG,UAAU,CAAC,6BAA6B,CAAC,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC;gBAC1F,IAAI,CAAC,WAAW,EAAE,CAAC;oBACjB,UAAU,CAAC,IAAI,CAAC;wBACd,OAAO,EACL,kFAAkF;4BAClF,+DAA+D,UAAU,CAAC,QAAQ,CAAC,GAAG;wBACxF,QAAQ,EAAE,OAAO;wBACjB,IAAI;wBACJ,UAAU,EACR,wGAAwG;qBAC3G,CAAC,CAAC;gBACL,CAAC;qBAAM,IAAI,IAAI,CAAC,SAAS,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;oBACxE,UAAU,CAAC,IAAI,CAAC;wBACd,OAAO,EACL,6EAA6E;4BAC7E,+EAA+E;wBACjF,QAAQ,EAAE,OAAO;wBACjB,IAAI;wBACJ,UAAU,EACR,gHAAgH;qBACnH,CAAC,CAAC;gBACL,CAAC;YACH,CAAC;QACH,CAAC;QACD,EAAE,CAAC,YAAY,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;IAC/B,CAAC,CAAC;IACF,KAAK,CAAC,UAAU,CAAC,CAAC;IAClB,OAAO,UAAU,CAAC;AACpB,CAAC;AAED,MAAM,CAAC,MAAM,6BAA6B,GAAG,WAAW,CAAC;IACvD,EAAE,EAAE,sCAAsC;IAC1C,IAAI,EAAE,mCAAmC;IACzC,WAAW,EACT,wHAAwH;IAC1H,KAAK,EAAE,EAAE,SAAS,EAAE,CAAC,YAAY,CAAC,EAAE,QAAQ,EAAE,CAAC,SAAS,CAAC,EAAE;IAC3D,IAAI,EAAE,CAAC,cAAc,CAAC;IACtB,SAAS,EAAE,CAAC,IAAI,EAAE,KAAK,CAAC;IACxB,OAAO,EAAE,CAAC,OAAO,EAAE,QAAQ,EAAE,EAAE;QAC7B,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,QAAQ,CAAC,aAAa,CAAC,IAAI,UAAU,CAAC,QAAQ,CAAC;YAAE,OAAO,EAAE,CAAC;QACrF,OAAO,oCAAoC,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;IACjE,CAAC;CACF,CAAC,CAAC"}

package/dist/checks/architecture/index.d.ts

@@ -5,7 +5,9 @@ export * from './host-tool-runtime-import-boundary.js';
 export * from './missing-type-exports.js';
 export * from './module-coupling-fan-out.js';
 export * from './no-bootstrap-tool-import.js';
+export * from './no-run-done-result.js';
 export * from './package-json-exports-field.js';
 export * from './phantom-dependency-detection.js';
+export * from './subprocess-correlation-required.js';
 export * from './tsconfig-extends-validation.js';
 //# sourceMappingURL=index.d.ts.map

package/dist/checks/architecture/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/checks/architecture/index.ts"],"names":[],"mappings":"AAAA,cAAc,gCAAgC,CAAC;AAC/C,cAAc,mCAAmC,CAAC;AAClD,cAAc,uCAAuC,CAAC;AACtD,cAAc,wCAAwC,CAAC;AACvD,cAAc,2BAA2B,CAAC;AAC1C,cAAc,8BAA8B,CAAC;AAC7C,cAAc,+BAA+B,CAAC;AAC9C,cAAc,iCAAiC,CAAC;AAChD,cAAc,mCAAmC,CAAC;AAClD,cAAc,kCAAkC,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/checks/architecture/index.ts"],"names":[],"mappings":"AAAA,cAAc,gCAAgC,CAAC;AAC/C,cAAc,mCAAmC,CAAC;AAClD,cAAc,uCAAuC,CAAC;AACtD,cAAc,wCAAwC,CAAC;AACvD,cAAc,2BAA2B,CAAC;AAC1C,cAAc,8BAA8B,CAAC;AAC7C,cAAc,+BAA+B,CAAC;AAC9C,cAAc,yBAAyB,CAAC;AACxC,cAAc,iCAAiC,CAAC;AAChD,cAAc,mCAAmC,CAAC;AAClD,cAAc,sCAAsC,CAAC;AACrD,cAAc,kCAAkC,CAAC"}

package/dist/checks/architecture/index.js

@@ -5,7 +5,9 @@ export * from './host-tool-runtime-import-boundary.js';
 export * from './missing-type-exports.js';
 export * from './module-coupling-fan-out.js';
 export * from './no-bootstrap-tool-import.js';
+export * from './no-run-done-result.js';
 export * from './package-json-exports-field.js';
 export * from './phantom-dependency-detection.js';
+export * from './subprocess-correlation-required.js';
 export * from './tsconfig-extends-validation.js';
 //# sourceMappingURL=index.js.map

package/dist/checks/architecture/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/checks/architecture/index.ts"],"names":[],"mappings":"AAAA,cAAc,gCAAgC,CAAC;AAC/C,cAAc,mCAAmC,CAAC;AAClD,cAAc,uCAAuC,CAAC;AACtD,cAAc,wCAAwC,CAAC;AACvD,cAAc,2BAA2B,CAAC;AAC1C,cAAc,8BAA8B,CAAC;AAC7C,cAAc,+BAA+B,CAAC;AAC9C,cAAc,iCAAiC,CAAC;AAChD,cAAc,mCAAmC,CAAC;AAClD,cAAc,kCAAkC,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/checks/architecture/index.ts"],"names":[],"mappings":"AAAA,cAAc,gCAAgC,CAAC;AAC/C,cAAc,mCAAmC,CAAC;AAClD,cAAc,uCAAuC,CAAC;AACtD,cAAc,wCAAwC,CAAC;AACvD,cAAc,2BAA2B,CAAC;AAC1C,cAAc,8BAA8B,CAAC;AAC7C,cAAc,+BAA+B,CAAC;AAC9C,cAAc,yBAAyB,CAAC;AACxC,cAAc,iCAAiC,CAAC;AAChD,cAAc,mCAAmC,CAAC;AAClD,cAAc,sCAAsC,CAAC;AACrD,cAAc,kCAAkC,CAAC"}

package/dist/checks/architecture/no-run-done-result.d.ts

@@ -0,0 +1,27 @@
+/**
+ * @fileoverview Run commands render via RunPresentation — no per-tool `*DoneResult`.
+ *
+ * The envelope-first-presentation plan (ADR-0011) collapsed the three
+ * near-identical per-tool run-result interfaces (one each for fit/sim/graph) into
+ * a single render-only `RunPresentation` (`type: 'run-presentation'`) on the
+ * `CommandResult` union. Each of those interfaces only wrapped a `SignalEnvelope`
+ * plus render-only adjuncts, so the union grew one variant per tool and
+ * `resultToView` carried one near-duplicate render case per tool. They were
+ * hard-removed in RP-3.
+ *
+ * This check guards the `@opensip-cli/contracts` command-result surface against a
+ * regression: re-declaring a per-tool run done-result interface/type (a name
+ * ending `…DoneResult` for fit/sim/graph) OR a discriminator property
+ * `type: 'fit-done' | 'sim-done' | 'graph-done'`. Run commands must render through
+ * the one `RunPresentation` variant.
+ *
+ * Path-gated to `packages/contracts/src/` (the contract surface) and test-exempt.
+ * AST-based so a `*-done` string appearing as TEXT (a comment, a doc example, an
+ * unrelated string) is not flagged — only a real type/interface declaration or a
+ * `type:` discriminator literal in a type declaration counts.
+ */
+import { type CheckViolation } from '@opensip-cli/fitness';
+/** Pure analysis over a parsed source file. Exported for unit tests. */
+export declare function analyzeNoRunDoneResult(content: string, filePath: string): CheckViolation[];
+export declare const noRunDoneResult: import("@opensip-cli/fitness").Check;
+//# sourceMappingURL=no-run-done-result.d.ts.map

package/dist/checks/architecture/no-run-done-result.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"no-run-done-result.d.ts","sourceRoot":"","sources":["../../../src/checks/architecture/no-run-done-result.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;AAEH,OAAO,EAA2B,KAAK,cAAc,EAAE,MAAM,sBAAsB,CAAC;AA0CpF,wEAAwE;AACxE,wBAAgB,sBAAsB,CAAC,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,cAAc,EAAE,CAoC1F;AAED,eAAO,MAAM,eAAe,sCAqB1B,CAAC"}

package/dist/checks/architecture/no-run-done-result.js

@@ -0,0 +1,120 @@
+/**
+ * @fileoverview Run commands render via RunPresentation — no per-tool `*DoneResult`.
+ *
+ * The envelope-first-presentation plan (ADR-0011) collapsed the three
+ * near-identical per-tool run-result interfaces (one each for fit/sim/graph) into
+ * a single render-only `RunPresentation` (`type: 'run-presentation'`) on the
+ * `CommandResult` union. Each of those interfaces only wrapped a `SignalEnvelope`
+ * plus render-only adjuncts, so the union grew one variant per tool and
+ * `resultToView` carried one near-duplicate render case per tool. They were
+ * hard-removed in RP-3.
+ *
+ * This check guards the `@opensip-cli/contracts` command-result surface against a
+ * regression: re-declaring a per-tool run done-result interface/type (a name
+ * ending `…DoneResult` for fit/sim/graph) OR a discriminator property
+ * `type: 'fit-done' | 'sim-done' | 'graph-done'`. Run commands must render through
+ * the one `RunPresentation` variant.
+ *
+ * Path-gated to `packages/contracts/src/` (the contract surface) and test-exempt.
+ * AST-based so a `*-done` string appearing as TEXT (a comment, a doc example, an
+ * unrelated string) is not flagged — only a real type/interface declaration or a
+ * `type:` discriminator literal in a type declaration counts.
+ */
+// @fitness-ignore-file shipped-checks-must-be-generic -- opensip-internal dogfood guard for the envelope-first-presentation contract surface; AST precision keeps it from flagging the `*-done` literals that legitimately appear in prose. Needs @opensip-cli/lang-typescript, which a project-local .mjs cannot import.
+import { defineCheck, isTestFile } from '@opensip-cli/fitness';
+import { getSharedSourceFile } from '@opensip-cli/lang-typescript';
+import * as ts from 'typescript';
+/** The contract surface this check guards. */
+const CONTRACTS_SRC_PATH = 'packages/contracts/src/';
+/** A re-introduced per-tool run done-result type name (fit/sim/graph). */
+const DONE_RESULT_NAME_RE = /^(?:Fit|Sim|Graph)DoneResult$/;
+/** A re-introduced per-tool run done-result discriminator literal. */
+const DONE_RESULT_DISCRIMINATOR = new Set([
+    'fit-done',
+    'sim-done',
+    'graph-done',
+]);
+const GUIDANCE = 'Run commands render via the single RunPresentation variant (ADR-0011 / ' +
+    'envelope-first-presentation plan); do not re-introduce per-tool *DoneResult types.';
+function normalized(path) {
+    return path.replaceAll('\\', '/');
+}
+/** A `type:` property whose value is a `fit-done|sim-done|graph-done` string literal. */
+function isDoneDiscriminatorMember(member) {
+    if (!ts.isPropertySignature(member) || member.type === undefined)
+        return false;
+    if (!ts.isIdentifier(member.name) || member.name.text !== 'type')
+        return false;
+    if (!ts.isLiteralTypeNode(member.type) || !ts.isStringLiteral(member.type.literal)) {
+        return false;
+    }
+    return DONE_RESULT_DISCRIMINATOR.has(member.type.literal.text);
+}
+/** Walk a type node's members (interface body or type-literal) for a done discriminator. */
+function membersOf(node) {
+    if (ts.isInterfaceDeclaration(node))
+        return node.members;
+    if (ts.isTypeAliasDeclaration(node) && ts.isTypeLiteralNode(node.type))
+        return node.type.members;
+    return undefined;
+}
+/** Pure analysis over a parsed source file. Exported for unit tests. */
+export function analyzeNoRunDoneResult(content, filePath) {
+    const violations = [];
+    const sourceFile = getSharedSourceFile(filePath, content);
+    if (!sourceFile)
+        return violations;
+    const lineOf = (node) => sourceFile.getLineAndCharacterOfPosition(node.getStart(sourceFile)).line + 1;
+    const visit = (node) => {
+        if (ts.isInterfaceDeclaration(node) || ts.isTypeAliasDeclaration(node)) {
+            const name = node.name.text;
+            if (DONE_RESULT_NAME_RE.test(name)) {
+                violations.push({
+                    filePath,
+                    line: lineOf(node),
+                    message: `Type '${name}' re-introduces a per-tool run done-result. ${GUIDANCE}`,
+                    severity: 'error',
+                    suggestion: 'Render the run via the RunPresentation variant on CommandResult.',
+                });
+            }
+            else {
+                const members = membersOf(node);
+                if (members?.some(isDoneDiscriminatorMember)) {
+                    violations.push({
+                        filePath,
+                        line: lineOf(node),
+                        message: `Type '${name}' declares a per-tool run done-result discriminator. ${GUIDANCE}`,
+                        severity: 'error',
+                        suggestion: "Use the shared `type: 'run-presentation'` run variant instead.",
+                    });
+                }
+            }
+        }
+        ts.forEachChild(node, visit);
+    };
+    visit(sourceFile);
+    return violations;
+}
+export const noRunDoneResult = defineCheck({
+    id: 'a3d9f1c4-7b2e-4f6a-9c1d-8e5b0a2f4d63',
+    slug: 'architecture-no-run-done-result',
+    description: 'Run commands render via the single RunPresentation variant; the contracts surface must not re-introduce a per-tool *DoneResult run type',
+    longDescription: `**Purpose:** Guard the \`@opensip-cli/contracts\` command-result surface against re-growing one run-result interface per tool.
+
+**Detects (in \`packages/contracts/src/\` only):**
+- A re-declared per-tool run done-result type/interface (name ending \`…DoneResult\` for fit/sim/graph).
+- A discriminator property \`type: 'fit-done' | 'sim-done' | 'graph-done'\` on a type/interface declaration.
+
+**Why it matters:** The envelope-first-presentation plan (ADR-0011) collapsed the three per-tool run results into one render-only \`RunPresentation\`. Re-introducing a per-tool done-result would re-grow the union and \`resultToView\` and diverge the human render from the envelope verdict.
+
+**Scope:** Contracts package source only; test files exempt.`,
+    scope: { languages: ['typescript'], concerns: ['backend'] },
+    tags: ['architecture', 'contracts'],
+    fileTypes: ['ts'],
+    analyze: (content, filePath) => {
+        if (!normalized(filePath).includes(CONTRACTS_SRC_PATH) || isTestFile(filePath))
+            return [];
+        return analyzeNoRunDoneResult(content, filePath);
+    },
+});
+//# sourceMappingURL=no-run-done-result.js.map

package/dist/checks/architecture/no-run-done-result.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"no-run-done-result.js","sourceRoot":"","sources":["../../../src/checks/architecture/no-run-done-result.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,0TAA0T;AAC1T,OAAO,EAAE,WAAW,EAAE,UAAU,EAAuB,MAAM,sBAAsB,CAAC;AACpF,OAAO,EAAE,mBAAmB,EAAE,MAAM,8BAA8B,CAAC;AACnE,OAAO,KAAK,EAAE,MAAM,YAAY,CAAC;AAEjC,8CAA8C;AAC9C,MAAM,kBAAkB,GAAG,yBAAyB,CAAC;AAErD,0EAA0E;AAC1E,MAAM,mBAAmB,GAAG,+BAA+B,CAAC;AAE5D,sEAAsE;AACtE,MAAM,yBAAyB,GAAwB,IAAI,GAAG,CAAC;IAC7D,UAAU;IACV,UAAU;IACV,YAAY;CACb,CAAC,CAAC;AAEH,MAAM,QAAQ,GACZ,yEAAyE;IACzE,oFAAoF,CAAC;AAEvF,SAAS,UAAU,CAAC,IAAY;IAC9B,OAAO,IAAI,CAAC,UAAU,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;AACpC,CAAC;AAED,yFAAyF;AACzF,SAAS,yBAAyB,CAAC,MAAsB;IACvD,IAAI,CAAC,EAAE,CAAC,mBAAmB,CAAC,MAAM,CAAC,IAAI,MAAM,CAAC,IAAI,KAAK,SAAS;QAAE,OAAO,KAAK,CAAC;IAC/E,IAAI,CAAC,EAAE,CAAC,YAAY,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,IAAI,KAAK,MAAM;QAAE,OAAO,KAAK,CAAC;IAC/E,IAAI,CAAC,EAAE,CAAC,iBAAiB,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,eAAe,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;QACnF,OAAO,KAAK,CAAC;IACf,CAAC;IACD,OAAO,yBAAyB,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;AACjE,CAAC;AAED,4FAA4F;AAC5F,SAAS,SAAS,CAAC,IAAa;IAC9B,IAAI,EAAE,CAAC,sBAAsB,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC,OAAO,CAAC;IACzD,IAAI,EAAE,CAAC,sBAAsB,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,iBAAiB,CAAC,IAAI,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC;IACjG,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,wEAAwE;AACxE,MAAM,UAAU,sBAAsB,CAAC,OAAe,EAAE,QAAgB;IACtE,MAAM,UAAU,GAAqB,EAAE,CAAC;IACxC,MAAM,UAAU,GAAG,mBAAmB,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;IAC1D,IAAI,CAAC,UAAU;QAAE,OAAO,UAAU,CAAC;IAEnC,MAAM,MAAM,GAAG,CAAC,IAAa,EAAU,EAAE,CACvC,UAAU,CAAC,6BAA6B,CAAC,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC;IAE/E,MAAM,KAAK,GAAG,CAAC,IAAa,EAAQ,EAAE;QACpC,IAAI,EAAE,CAAC,sBAAsB,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,sBAAsB,CAAC,IAAI,CAAC,EAAE,CAAC;YACvE,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC;YAC5B,IAAI,mBAAmB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;gBACnC,UAAU,CAAC,IAAI,CAAC;oBACd,QAAQ;oBACR,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC;oBAClB,OAAO,EAAE,SAAS,IAAI,+CAA+C,QAAQ,EAAE;oBAC/E,QAAQ,EAAE,OAAO;oBACjB,UAAU,EAAE,kEAAkE;iBAC/E,CAAC,CAAC;YACL,CAAC;iBAAM,CAAC;gBACN,MAAM,OAAO,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC;gBAChC,IAAI,OAAO,EAAE,IAAI,CAAC,yBAAyB,CAAC,EAAE,CAAC;oBAC7C,UAAU,CAAC,IAAI,CAAC;wBACd,QAAQ;wBACR,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC;wBAClB,OAAO,EAAE,SAAS,IAAI,wDAAwD,QAAQ,EAAE;wBACxF,QAAQ,EAAE,OAAO;wBACjB,UAAU,EAAE,gEAAgE;qBAC7E,CAAC,CAAC;gBACL,CAAC;YACH,CAAC;QACH,CAAC;QACD,EAAE,CAAC,YAAY,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;IAC/B,CAAC,CAAC;IACF,KAAK,CAAC,UAAU,CAAC,CAAC;IAClB,OAAO,UAAU,CAAC;AACpB,CAAC;AAED,MAAM,CAAC,MAAM,eAAe,GAAG,WAAW,CAAC;IACzC,EAAE,EAAE,sCAAsC;IAC1C,IAAI,EAAE,iCAAiC;IACvC,WAAW,EACT,yIAAyI;IAC3I,eAAe,EAAE;;;;;;;;6DAQ0C;IAC3D,KAAK,EAAE,EAAE,SAAS,EAAE,CAAC,YAAY,CAAC,EAAE,QAAQ,EAAE,CAAC,SAAS,CAAC,EAAE;IAC3D,IAAI,EAAE,CAAC,cAAc,EAAE,WAAW,CAAC;IACnC,SAAS,EAAE,CAAC,IAAI,CAAC;IACjB,OAAO,EAAE,CAAC,OAAO,EAAE,QAAQ,EAAE,EAAE;QAC7B,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,QAAQ,CAAC,kBAAkB,CAAC,IAAI,UAAU,CAAC,QAAQ,CAAC;YAAE,OAAO,EAAE,CAAC;QAC1F,OAAO,sBAAsB,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;IACnD,CAAC;CACF,CAAC,CAAC"}

package/dist/checks/architecture/subprocess-correlation-required.d.ts

@@ -0,0 +1,28 @@
+/**
+ * @fileoverview Guard that every CLI worker spawn/fork forwards the RunCorrelation bag.
+ *
+ * The subprocess-correlation-telemetry spec (and ADR-0054 readiness) requires
+ * that when the CLI spawns or forks a child CLI *worker* subcommand (e.g.
+ * `graph-shard-worker`, `graph-run-worker`, any future `*-run-worker`), the
+ * parent forwards its {@link RunCorrelation} bag so a child failure is
+ * attributable to the parent run/trace from JSONL logs alone. `runId` travels
+ * via `OPENSIP_RUN_ID` env (merged through `correlationToEnv`); the rest travels
+ * via env + the worker spec/descriptor's `correlation` field.
+ *
+ * This check fires on a spawn/fork of a `*-worker` subcommand that forwards env
+ * (so it clearly inherits the parent environment) but does NOT reference
+ * `correlationToEnv` or write a `correlation` field anywhere in the enclosing
+ * function — i.e. the parent forgot to carry correlation. It is bounded to the
+ * two host packages that own real worker spawn/fork sites (`packages/graph` and
+ * `packages/cli`); the generic fork transport (`packages/core`) is out of scope
+ * by design.
+ */
+import { type CheckViolation } from '@opensip-cli/fitness';
+/**
+ * Pure analysis over a parsed source file. Exported for unit tests. Returns one
+ * error per spawn/fork of a CLI `*-worker` subcommand whose enclosing function
+ * shows no correlation forwarding.
+ */
+export declare function analyzeSubprocessCorrelationRequired(content: string, filePath: string): CheckViolation[];
+export declare const subprocessCorrelationRequired: import("@opensip-cli/fitness").Check;
+//# sourceMappingURL=subprocess-correlation-required.d.ts.map

package/dist/checks/architecture/subprocess-correlation-required.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"subprocess-correlation-required.d.ts","sourceRoot":"","sources":["../../../src/checks/architecture/subprocess-correlation-required.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAEH,OAAO,EAA2B,KAAK,cAAc,EAAE,MAAM,sBAAsB,CAAC;AAsGpF;;;;GAIG;AACH,wBAAgB,oCAAoC,CAClD,OAAO,EAAE,MAAM,EACf,QAAQ,EAAE,MAAM,GACf,cAAc,EAAE,CAoClB;AAED,eAAO,MAAM,6BAA6B,sCAYxC,CAAC"}