@shrkcrft/boundaries 0.1.0-alpha.22 → 0.1.0-alpha.23

package/dist/index.d.ts

@@ -7,6 +7,7 @@ export * from './evaluate/evaluate-boundaries.js';
 export * from './scan/tsconfig-aliases.js';
 export * from './wiring/evaluate-wiring.js';
 export * from './wiring/scan-wiring-files.js';
+export * from './wiring/registry-query.js';
 export * from './policy/extract-templates.js';
 export * from './policy/evaluate-policy.js';
 export * from './policy/run-policy.js';

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,cAAc,0BAA0B,CAAC;AACzC,cAAc,iCAAiC,CAAC;AAChD,cAAc,mCAAmC,CAAC;AAClD,cAAc,gBAAgB,CAAC;AAC/B,cAAc,wBAAwB,CAAC;AACvC,cAAc,mCAAmC,CAAC;AAClD,cAAc,4BAA4B,CAAC;AAC3C,cAAc,6BAA6B,CAAC;AAC5C,cAAc,+BAA+B,CAAC;AAC9C,cAAc,+BAA+B,CAAC;AAC9C,cAAc,6BAA6B,CAAC;AAC5C,cAAc,wBAAwB,CAAC;AACvC,cAAc,sBAAsB,CAAC;AACrC,cAAc,sBAAsB,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,cAAc,0BAA0B,CAAC;AACzC,cAAc,iCAAiC,CAAC;AAChD,cAAc,mCAAmC,CAAC;AAClD,cAAc,gBAAgB,CAAC;AAC/B,cAAc,wBAAwB,CAAC;AACvC,cAAc,mCAAmC,CAAC;AAClD,cAAc,4BAA4B,CAAC;AAC3C,cAAc,6BAA6B,CAAC;AAC5C,cAAc,+BAA+B,CAAC;AAC9C,cAAc,4BAA4B,CAAC;AAC3C,cAAc,+BAA+B,CAAC;AAC9C,cAAc,6BAA6B,CAAC;AAC5C,cAAc,wBAAwB,CAAC;AACvC,cAAc,sBAAsB,CAAC;AACrC,cAAc,sBAAsB,CAAC"}

package/dist/index.js

@@ -7,6 +7,7 @@ export * from "./evaluate/evaluate-boundaries.js";
 export * from "./scan/tsconfig-aliases.js";
 export * from "./wiring/evaluate-wiring.js";
 export * from "./wiring/scan-wiring-files.js";
+export * from "./wiring/registry-query.js";
 export * from "./policy/extract-templates.js";
 export * from "./policy/evaluate-policy.js";
 export * from "./policy/run-policy.js";

package/dist/policy/evaluate-policy.d.ts

@@ -36,6 +36,14 @@ export interface IPolicyReport {
     readonly rules: readonly IPolicyRuleResult[];
     readonly findings: readonly IPolicyFinding[];
     readonly diagnostics: readonly string[];
+    /**
+     * Count of rules that actually scanned ≥1 unit. A rule whose globs matched 0
+     * files (e.g. a `style` rule in a project with no stylesheets) is NOT
+     * evaluated — a silent no-op the gate surfaces as `skipped` rather than a
+     * green pass. Misconfigured rules count as evaluated so their error is not
+     * swallowed by the gate's `evaluated === 0` skip path.
+     */
+    readonly evaluated: number;
     readonly verdict: 'pass' | 'errors' | 'warnings';
 }
 /** Resolves the content units to scan for a given rule (injected for purity/testability). */

package/dist/policy/evaluate-policy.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"evaluate-policy.d.ts","sourceRoot":"","sources":["../../src/policy/evaluate-policy.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,WAAW,EAAE,aAAa,EAAE,MAAM,gBAAgB,CAAC;AAGjE,eAAO,MAAM,kBAAkB,EAAG,2BAAoC,CAAC;AAEvE;;;;GAIG;AACH,MAAM,WAAW,WAAW;IAC1B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,6DAA6D;IAC7D,QAAQ,CAAC,cAAc,CAAC,EAAE,OAAO,CAAC;CACnC;AAED,MAAM,WAAW,cAAc;IAC7B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,OAAO,EAAE,aAAa,CAAC;IAChC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,uFAAuF;IACvF,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,QAAQ,EAAE,OAAO,GAAG,SAAS,CAAC;IACvC,QAAQ,CAAC,cAAc,CAAC,EAAE,OAAO,CAAC;CACnC;AAED,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,OAAO,EAAE,aAAa,CAAC;IAChC,QAAQ,CAAC,QAAQ,EAAE,OAAO,GAAG,SAAS,CAAC;IACvC,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;CACzB;AAED,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,MAAM,EAAE,OAAO,kBAAkB,CAAC;IAC3C,QAAQ,CAAC,KAAK,EAAE,SAAS,iBAAiB,EAAE,CAAC;IAC7C,QAAQ,CAAC,QAAQ,EAAE,SAAS,cAAc,EAAE,CAAC;IAC7C,QAAQ,CAAC,WAAW,EAAE,SAAS,MAAM,EAAE,CAAC;IACxC,QAAQ,CAAC,OAAO,EAAE,MAAM,GAAG,QAAQ,GAAG,UAAU,CAAC;CAClD;AAED,6FAA6F;AAC7F,MAAM,MAAM,kBAAkB,GAAG,CAAC,IAAI,EAAE,WAAW,KAAK,SAAS,WAAW,EAAE,CAAC;AAgB/E;;;;;GAKG;AACH,wBAAgB,cAAc,CAAC,KAAK,EAAE,SAAS,WAAW,EAAE,EAAE,OAAO,EAAE,kBAAkB,GAAG,aAAa,CAoExG"}
+{"version":3,"file":"evaluate-policy.d.ts","sourceRoot":"","sources":["../../src/policy/evaluate-policy.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,WAAW,EAAE,aAAa,EAAE,MAAM,gBAAgB,CAAC;AAGjE,eAAO,MAAM,kBAAkB,EAAG,2BAAoC,CAAC;AAEvE;;;;GAIG;AACH,MAAM,WAAW,WAAW;IAC1B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,6DAA6D;IAC7D,QAAQ,CAAC,cAAc,CAAC,EAAE,OAAO,CAAC;CACnC;AAED,MAAM,WAAW,cAAc;IAC7B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,OAAO,EAAE,aAAa,CAAC;IAChC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,uFAAuF;IACvF,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,QAAQ,EAAE,OAAO,GAAG,SAAS,CAAC;IACvC,QAAQ,CAAC,cAAc,CAAC,EAAE,OAAO,CAAC;CACnC;AAED,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,OAAO,EAAE,aAAa,CAAC;IAChC,QAAQ,CAAC,QAAQ,EAAE,OAAO,GAAG,SAAS,CAAC;IACvC,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;CACzB;AAED,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,MAAM,EAAE,OAAO,kBAAkB,CAAC;IAC3C,QAAQ,CAAC,KAAK,EAAE,SAAS,iBAAiB,EAAE,CAAC;IAC7C,QAAQ,CAAC,QAAQ,EAAE,SAAS,cAAc,EAAE,CAAC;IAC7C,QAAQ,CAAC,WAAW,EAAE,SAAS,MAAM,EAAE,CAAC;IACxC;;;;;;OAMG;IACH,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,OAAO,EAAE,MAAM,GAAG,QAAQ,GAAG,UAAU,CAAC;CAClD;AAED,6FAA6F;AAC7F,MAAM,MAAM,kBAAkB,GAAG,CAAC,IAAI,EAAE,WAAW,KAAK,SAAS,WAAW,EAAE,CAAC;AAgB/E;;;;;GAKG;AACH,wBAAgB,cAAc,CAAC,KAAK,EAAE,SAAS,WAAW,EAAE,EAAE,OAAO,EAAE,kBAAkB,GAAG,aAAa,CA2ExG"}

package/dist/policy/evaluate-policy.js

@@ -23,6 +23,7 @@ export function evaluatePolicy(rules, resolve) {
     const ruleResults = [];
     const findings = [];
     const diagnostics = [];
+    let evaluated = 0;
     let misconfigError = false;
     let misconfigWarn = false;
     for (const rule of rules) {
@@ -36,11 +37,17 @@ export function evaluatePolicy(rules, resolve) {
             else
                 misconfigWarn = true;
             ruleResults.push({ ruleId: rule.id, surface: rule.surface, severity, findingCount: 0, error: msg });
+            // A misconfigured rule attempted to run — count it as evaluated so its
+            // error isn't swallowed by the gate's `evaluated === 0` skip path.
+            evaluated += 1;
             continue;
         }
+        const units = resolve(rule);
+        if (units.length > 0)
+            evaluated += 1;
         let count = 0;
         let zeroWidth = false;
-        for (const unit of resolve(rule)) {
+        for (const unit of units) {
             re.lastIndex = 0;
             let m;
             while ((m = re.exec(unit.content)) !== null) {
@@ -87,6 +94,7 @@ export function evaluatePolicy(rules, resolve) {
         rules: ruleResults,
         findings,
         diagnostics,
+        evaluated,
         verdict: hasError ? 'errors' : hasWarn ? 'warnings' : 'pass',
     };
 }

package/dist/policy/run-policy.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"run-policy.d.ts","sourceRoot":"","sources":["../../src/policy/run-policy.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,WAAW,EAAE,aAAa,EAAE,MAAM,gBAAgB,CAAC;AAIjE,OAAO,EAAkB,KAAK,aAAa,EAAoB,MAAM,sBAAsB,CAAC;AAY5F,MAAM,WAAW,iBAAiB;IAChC,2CAA2C;IAC3C,QAAQ,CAAC,QAAQ,CAAC,EAAE,SAAS,aAAa,EAAE,CAAC;IAC7C,+BAA+B;IAC/B,QAAQ,CAAC,IAAI,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAClC,kEAAkE;IAClE,QAAQ,CAAC,WAAW,CAAC,EAAE,OAAO,CAAC;IAC/B,QAAQ,CAAC,YAAY,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAC1C,2FAA2F;IAC3F,QAAQ,CAAC,WAAW,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;CAC1C;AAMD;;;;;GAKG;AACH,wBAAgB,aAAa,CAC3B,WAAW,EAAE,MAAM,EACnB,KAAK,EAAE,SAAS,WAAW,EAAE,EAC7B,OAAO,GAAE,iBAAsB,GAC9B,aAAa,CAsCf"}
+{"version":3,"file":"run-policy.d.ts","sourceRoot":"","sources":["../../src/policy/run-policy.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,WAAW,EAAE,aAAa,EAAE,MAAM,gBAAgB,CAAC;AAIjE,OAAO,EAAkB,KAAK,aAAa,EAAoB,MAAM,sBAAsB,CAAC;AAY5F,MAAM,WAAW,iBAAiB;IAChC,2CAA2C;IAC3C,QAAQ,CAAC,QAAQ,CAAC,EAAE,SAAS,aAAa,EAAE,CAAC;IAC7C,+BAA+B;IAC/B,QAAQ,CAAC,IAAI,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAClC,kEAAkE;IAClE,QAAQ,CAAC,WAAW,CAAC,EAAE,OAAO,CAAC;IAC/B,QAAQ,CAAC,YAAY,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAC1C,2FAA2F;IAC3F,QAAQ,CAAC,WAAW,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;CAC1C;AAMD;;;;;GAKG;AACH,wBAAgB,aAAa,CAC3B,WAAW,EAAE,MAAM,EACnB,KAAK,EAAE,SAAS,WAAW,EAAE,EAC7B,OAAO,GAAE,iBAAsB,GAC9B,aAAa,CA6Cf"}

package/dist/policy/run-policy.js

@@ -35,14 +35,22 @@ export function runPolicyLint(projectRoot, rules, options = {}) {
         selected = selected.filter((r) => changed.some((c) => matchesAny(c, globsFor(r))));
     }
     if (selected.length === 0) {
-        return { schema: 'sharkcraft.policy-lint/v1', rules: [], findings: [], diagnostics: [], verdict: 'pass' };
+        return { schema: 'sharkcraft.policy-lint/v1', rules: [], findings: [], diagnostics: [], evaluated: 0, verdict: 'pass' };
     }
+    // Under --changed-only, restrict the SCANNED files to the changed set too (not
+    // just rule selection). Per-file regex findings have no cross-file dependency,
+    // so a pre-existing violation in a file the diff never touched is out of scope
+    // — this mirrors how `check boundaries`/wiring restrict to the changeset and
+    // stops the gate failing RED on untouched legacy debt.
+    const changedSet = options.changedOnly ? new Set(options.changedFiles ?? []) : undefined;
     const allGlobs = [...new Set(selected.flatMap((r) => [...globsFor(r)]))];
     const cache = readMatchingFiles(projectRoot, allGlobs, new Set(options.excludeDirs ?? []));
     return evaluatePolicy(selected, (rule) => {
         const globs = globsFor(rule);
         const units = [];
         for (const [path, content] of cache) {
+            if (changedSet && !changedSet.has(path))
+                continue;
             if (!matchesAny(path, globs))
                 continue;
             const ext = nodePath.extname(path).toLowerCase();

package/dist/scan/scan-imports.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"scan-imports.d.ts","sourceRoot":"","sources":["../../src/scan/scan-imports.ts"],"names":[],"mappings":"AAkBA,MAAM,WAAW,mBAAmB;IAClC,WAAW,EAAE,MAAM,CAAC;IACpB,WAAW,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAChC,iEAAiE;IACjE,OAAO,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;CAC7B;AAED,MAAM,WAAW,WAAW;IAC1B,6CAA6C;IAC7C,IAAI,EAAE,MAAM,CAAC;IACb,gCAAgC;IAChC,eAAe,EAAE,MAAM,CAAC;IACxB,0DAA0D;IAC1D,IAAI,EAAE,MAAM,CAAC;IACb;;;;;OAKG;IACH,IAAI,EAAE,UAAU,GAAG,UAAU,CAAC;CAC/B;AAED,MAAM,WAAW,iBAAiB;IAChC,YAAY,EAAE,MAAM,CAAC;IACrB,KAAK,EAAE,WAAW,EAAE,CAAC;IACrB,QAAQ,EAAE,MAAM,EAAE,CAAC;CACpB;AAoFD;;GAEG;AACH,wBAAgB,WAAW,CAAC,OAAO,EAAE,mBAAmB,GAAG,iBAAiB,CAyB3E;AAED;;GAEG;AACH,MAAM,WAAW,mBAAmB;IAClC,YAAY,EAAE,MAAM,CAAC;IACrB,YAAY,EAAE,MAAM,CAAC;IACrB,eAAe,EAAE,MAAM,CAAC;IACxB,eAAe,EAAE,MAAM,CAAC;IACxB,qBAAqB,EAAE,SAAS;QAAE,SAAS,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,EAAE,CAAC;IACvE,QAAQ,EAAE,SAAS,MAAM,EAAE,CAAC;CAC7B;AAED,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,iBAAiB,GAAG,mBAAmB,CAmB7E"}
+{"version":3,"file":"scan-imports.d.ts","sourceRoot":"","sources":["../../src/scan/scan-imports.ts"],"names":[],"mappings":"AAkBA,MAAM,WAAW,mBAAmB;IAClC,WAAW,EAAE,MAAM,CAAC;IACpB,WAAW,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAChC,iEAAiE;IACjE,OAAO,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;CAC7B;AAED,MAAM,WAAW,WAAW;IAC1B,6CAA6C;IAC7C,IAAI,EAAE,MAAM,CAAC;IACb,gCAAgC;IAChC,eAAe,EAAE,MAAM,CAAC;IACxB,0DAA0D;IAC1D,IAAI,EAAE,MAAM,CAAC;IACb;;;;;OAKG;IACH,IAAI,EAAE,UAAU,GAAG,UAAU,CAAC;CAC/B;AAED,MAAM,WAAW,iBAAiB;IAChC,YAAY,EAAE,MAAM,CAAC;IACrB,KAAK,EAAE,WAAW,EAAE,CAAC;IACrB,QAAQ,EAAE,MAAM,EAAE,CAAC;CACpB;AAkFD;;GAEG;AACH,wBAAgB,WAAW,CAAC,OAAO,EAAE,mBAAmB,GAAG,iBAAiB,CAyB3E;AAED;;GAEG;AACH,MAAM,WAAW,mBAAmB;IAClC,YAAY,EAAE,MAAM,CAAC;IACrB,YAAY,EAAE,MAAM,CAAC;IACrB,eAAe,EAAE,MAAM,CAAC;IACxB,eAAe,EAAE,MAAM,CAAC;IACxB,qBAAqB,EAAE,SAAS;QAAE,SAAS,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,EAAE,CAAC;IACvE,QAAQ,EAAE,SAAS,MAAM,EAAE,CAAC;CAC7B;AAED,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,iBAAiB,GAAG,mBAAmB,CAmB7E"}

package/dist/scan/scan-imports.js

@@ -1,4 +1,4 @@
-import { existsSync, readFileSync, readdirSync, statSync } from 'node:fs';
+import { existsSync, readFileSync, readdirSync } from 'node:fs';
 import * as nodePath from 'node:path';
 const SUPPORTED_EXTS = new Set(['.ts', '.tsx', '.js', '.jsx', '.mjs', '.cjs']);
 const DEFAULT_IGNORE = new Set([
@@ -46,18 +46,16 @@ function* walk(root, current, extraIgnore) {
         const name = String(entry.name);
         if (isIgnored(name, extraIgnore))
             continue;
+        // Do NOT descend into (or yield through) symlinks. Following a symlinked
+        // directory can inject phantom files into the graph — a self-referential
+        // loop (`src/loop -> src` => `src/loop/loop/loop/...`) only self-terminates
+        // by accident at PATH_MAX, and a link to a large external tree gets fully
+        // scanned. Mirror detect-workspace.ts's isTraversableDir pruning.
+        if (entry.isSymbolicLink())
+            continue;
         const full = nodePath.join(current, name);
-        try {
-            const isDir = entry.isDirectory() || entry.isSymbolicLink();
-            if (isDir) {
-                const stat = statSync(full);
-                if (stat.isDirectory()) {
-                    yield* walk(root, full, extraIgnore);
-                }
-                continue;
-            }
-        }
-        catch {
+        if (entry.isDirectory()) {
+            yield* walk(root, full, extraIgnore);
             continue;
         }
         if (entry.isFile()) {

package/dist/wiring/evaluate-wiring.d.ts

@@ -6,7 +6,7 @@ export interface IWiringFileEntry {
     readonly path: string;
     readonly content: string;
 }
-/** A captured token + where it was captured (for declared tokens). */
+/** A captured token + where it was captured. */
 export interface IWiringTokenSite {
     readonly token: string;
     readonly file: string;
@@ -14,12 +14,18 @@ export interface IWiringTokenSite {
 }
 export interface IWiringViolation {
     readonly ruleId: string;
-    /** The declared token that is not present in the registered set. */
+    /** The token that is missing from the other side. */
     readonly token: string;
-    /** Declaring file (project-relative) + 1-based line. */
+    /** Declaring (or registering) file (project-relative) + 1-based line. */
     readonly file: string;
     readonly line: number;
     readonly severity: 'error' | 'warning';
+    /**
+     * Which side the token is missing from. `declared-missing` (the subset case):
+     * declared but not registered. `registered-missing` (parity only): registered
+     * but never declared.
+     */
+    readonly direction?: 'declared-missing' | 'registered-missing';
     readonly hint?: string;
 }
 export interface IWiringRuleResult {
@@ -29,7 +35,7 @@ export interface IWiringRuleResult {
     readonly declaredCount: number;
     readonly registeredCount: number;
     readonly violations: readonly IWiringViolation[];
-    /** Set when the rule is misconfigured (bad regex / no capture group). */
+    /** Set when the rule is misconfigured (bad regex / no capture group / bad source). */
     readonly error?: string;
 }
 export interface IWiringReport {
@@ -38,15 +44,36 @@ export interface IWiringReport {
     readonly violations: readonly IWiringViolation[];
     /** Rule-level misconfiguration messages (never throws — degrades gracefully). */
     readonly diagnostics: readonly string[];
+    /**
+     * Count of rules that actually ran a comparison. A rule whose declared+
+     * registered globs matched 0 files is NOT evaluated (a silent no-op the gate
+     * surfaces as `skipped`). Misconfigured rules count as evaluated so their
+     * error is not swallowed.
+     */
+    readonly evaluated: number;
     readonly verdict: 'pass' | 'errors' | 'warnings';
 }
 /** Resolves a rule-side's globs to the concrete files (path + content) to scan. */
 export type WiringFileResolver = (source: IWiringSource) => readonly IWiringFileEntry[];
 /**
- * Pure wiring evaluation. For each rule: every DECLARED token that is not in the
- * REGISTERED set is a violation, reported at its first declaring site. The
- * `resolve` callback supplies the files for a given rule-side (injected so the
- * engine stays pure / testable — see `runWiring` for the fs-backed wiring).
+ * Public: extract every token site from ONE wiring source (regex capture group
+ * 1 or `arrayProperty` elements) over the given files. Shared by the wiring
+ * evaluator and the registry-inventory engine so both honour the exact same
+ * extraction semantics. A misconfigured source returns an `error` and no sites
+ * (never throws).
+ */
+export declare function collectSourceSites(source: IWiringSource, files: readonly IWiringFileEntry[]): {
+    sites: readonly IWiringTokenSite[];
+    error?: string;
+};
+/**
+ * Pure wiring evaluation. For each rule: the DECLARED token set is checked
+ * against the UNION of the REGISTERED sources. Every declared token absent from
+ * the registered set is a `declared-missing` violation; in `parity` mode every
+ * registered token absent from the declared set is also a `registered-missing`
+ * violation. With `groupBy`, membership is checked within the same dir/package.
+ * The `resolve` callback supplies the files for a given rule-side (injected so
+ * the engine stays pure / testable — see `runWiring` for the fs-backed wiring).
  */
 export declare function evaluateWiring(rules: readonly IWiringRule[], resolve: WiringFileResolver): IWiringReport;
 //# sourceMappingURL=evaluate-wiring.d.ts.map

package/dist/wiring/evaluate-wiring.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"evaluate-wiring.d.ts","sourceRoot":"","sources":["../../src/wiring/evaluate-wiring.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,WAAW,EAAE,aAAa,EAAE,MAAM,gBAAgB,CAAC;AAGjE,eAAO,MAAM,aAAa,EAAG,sBAA+B,CAAC;AAE7D,2CAA2C;AAC3C,MAAM,WAAW,gBAAgB;IAC/B,mCAAmC;IACnC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;CAC1B;AAED,sEAAsE;AACtE,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;CACvB;AAED,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,oEAAoE;IACpE,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,wDAAwD;IACxD,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,QAAQ,EAAE,OAAO,GAAG,SAAS,CAAC;IACvC,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;CACxB;AAED,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,QAAQ,EAAE,OAAO,GAAG,SAAS,CAAC;IACvC,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,eAAe,EAAE,MAAM,CAAC;IACjC,QAAQ,CAAC,UAAU,EAAE,SAAS,gBAAgB,EAAE,CAAC;IACjD,yEAAyE;IACzE,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;CACzB;AAED,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,MAAM,EAAE,OAAO,aAAa,CAAC;IACtC,QAAQ,CAAC,KAAK,EAAE,SAAS,iBAAiB,EAAE,CAAC;IAC7C,QAAQ,CAAC,UAAU,EAAE,SAAS,gBAAgB,EAAE,CAAC;IACjD,iFAAiF;IACjF,QAAQ,CAAC,WAAW,EAAE,SAAS,MAAM,EAAE,CAAC;IACxC,QAAQ,CAAC,OAAO,EAAE,MAAM,GAAG,QAAQ,GAAG,UAAU,CAAC;CAClD;AAED,mFAAmF;AACnF,MAAM,MAAM,kBAAkB,GAAG,CAAC,MAAM,EAAE,aAAa,KAAK,SAAS,gBAAgB,EAAE,CAAC;AAiDxF;;;;;GAKG;AACH,wBAAgB,cAAc,CAC5B,KAAK,EAAE,SAAS,WAAW,EAAE,EAC7B,OAAO,EAAE,kBAAkB,GAC1B,aAAa,CAkFf"}
+{"version":3,"file":"evaluate-wiring.d.ts","sourceRoot":"","sources":["../../src/wiring/evaluate-wiring.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,WAAW,EAAE,aAAa,EAAE,MAAM,gBAAgB,CAAC;AAGjE,eAAO,MAAM,aAAa,EAAG,sBAA+B,CAAC;AAE7D,2CAA2C;AAC3C,MAAM,WAAW,gBAAgB;IAC/B,mCAAmC;IACnC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;CAC1B;AAED,gDAAgD;AAChD,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;CACvB;AAED,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,qDAAqD;IACrD,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,yEAAyE;IACzE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,QAAQ,EAAE,OAAO,GAAG,SAAS,CAAC;IACvC;;;;OAIG;IACH,QAAQ,CAAC,SAAS,CAAC,EAAE,kBAAkB,GAAG,oBAAoB,CAAC;IAC/D,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;CACxB;AAED,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,QAAQ,EAAE,OAAO,GAAG,SAAS,CAAC;IACvC,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,eAAe,EAAE,MAAM,CAAC;IACjC,QAAQ,CAAC,UAAU,EAAE,SAAS,gBAAgB,EAAE,CAAC;IACjD,sFAAsF;IACtF,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;CACzB;AAED,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,MAAM,EAAE,OAAO,aAAa,CAAC;IACtC,QAAQ,CAAC,KAAK,EAAE,SAAS,iBAAiB,EAAE,CAAC;IAC7C,QAAQ,CAAC,UAAU,EAAE,SAAS,gBAAgB,EAAE,CAAC;IACjD,iFAAiF;IACjF,QAAQ,CAAC,WAAW,EAAE,SAAS,MAAM,EAAE,CAAC;IACxC;;;;;OAKG;IACH,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,OAAO,EAAE,MAAM,GAAG,QAAQ,GAAG,UAAU,CAAC;CAClD;AAED,mFAAmF;AACnF,MAAM,MAAM,kBAAkB,GAAG,CAAC,MAAM,EAAE,aAAa,KAAK,SAAS,gBAAgB,EAAE,CAAC;AAsCxF;;;;;;GAMG;AACH,wBAAgB,kBAAkB,CAChC,MAAM,EAAE,aAAa,EACrB,KAAK,EAAE,SAAS,gBAAgB,EAAE,GACjC;IAAE,KAAK,EAAE,SAAS,gBAAgB,EAAE,CAAC;IAAC,KAAK,CAAC,EAAE,MAAM,CAAA;CAAE,CAOxD;AAuJD;;;;;;;;GAQG;AACH,wBAAgB,cAAc,CAC5B,KAAK,EAAE,SAAS,WAAW,EAAE,EAC7B,OAAO,EAAE,kBAAkB,GAC1B,aAAa,CAsHf"}

package/dist/wiring/registry-query.d.ts

@@ -0,0 +1,40 @@
+import type { IRegistryDeclaration } from '@shrkcrft/core';
+export declare const REGISTRY_SCHEMA: "sharkcraft.registry-inventory/v1";
+/** Where an id was found (project-relative path + 1-based line). */
+export interface IRegistrySite {
+    readonly file: string;
+    readonly line: number;
+}
+/** One id in a registry: its declaration sites + (optional) consumer/binding sites. */
+export interface IRegistryEntry {
+    readonly id: string;
+    /** Declaration sites (from `source`), sorted by file then line. */
+    readonly sites: readonly IRegistrySite[];
+    /** Consumer/binding sites (from `consumer`), when the declaration sets one. */
+    readonly consumerSites?: readonly IRegistrySite[];
+}
+/** A scanned registry inventory: every distinct id and where it lives. */
+export interface IRegistryInventory {
+    readonly schema: typeof REGISTRY_SCHEMA;
+    readonly name: string;
+    readonly description?: string;
+    /** Distinct ids, sorted, each with its sites. */
+    readonly entries: readonly IRegistryEntry[];
+    /** Misconfiguration messages (bad regex / no capture group / bad source). */
+    readonly diagnostics: readonly string[];
+}
+export interface IScanRegistryOptions {
+    /** Project-relative directories to prune from the walk. */
+    readonly excludeDirs?: readonly string[];
+}
+/**
+ * Scan a declared registry, returning every distinct id and its declaration
+ * (and optional consumer) sites. Pure-engine output; the only IO is a single
+ * read-only tree walk over the union of the source/consumer globs.
+ */
+export declare function scanRegistry(projectRoot: string, decl: IRegistryDeclaration, options?: IScanRegistryOptions): IRegistryInventory;
+/** True if `id` is declared in the registry (alias-blind exact membership). */
+export declare function registryExists(inventory: IRegistryInventory, id: string): boolean;
+/** The entry for `id`, or undefined if not declared. */
+export declare function registryWhere(inventory: IRegistryInventory, id: string): IRegistryEntry | undefined;
+//# sourceMappingURL=registry-query.d.ts.map

package/dist/wiring/registry-query.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"registry-query.d.ts","sourceRoot":"","sources":["../../src/wiring/registry-query.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,gBAAgB,CAAC;AAK3D,eAAO,MAAM,eAAe,EAAG,kCAA2C,CAAC;AAE3E,oEAAoE;AACpE,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;CACvB;AAED,uFAAuF;AACvF,MAAM,WAAW,cAAc;IAC7B,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,mEAAmE;IACnE,QAAQ,CAAC,KAAK,EAAE,SAAS,aAAa,EAAE,CAAC;IACzC,+EAA+E;IAC/E,QAAQ,CAAC,aAAa,CAAC,EAAE,SAAS,aAAa,EAAE,CAAC;CACnD;AAED,0EAA0E;AAC1E,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,MAAM,EAAE,OAAO,eAAe,CAAC;IACxC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAC9B,iDAAiD;IACjD,QAAQ,CAAC,OAAO,EAAE,SAAS,cAAc,EAAE,CAAC;IAC5C,6EAA6E;IAC7E,QAAQ,CAAC,WAAW,EAAE,SAAS,MAAM,EAAE,CAAC;CACzC;AAED,MAAM,WAAW,oBAAoB;IACnC,2DAA2D;IAC3D,QAAQ,CAAC,WAAW,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;CAC1C;AAMD;;;;GAIG;AACH,wBAAgB,YAAY,CAC1B,WAAW,EAAE,MAAM,EACnB,IAAI,EAAE,oBAAoB,EAC1B,OAAO,GAAE,oBAAyB,GACjC,kBAAkB,CA+CpB;AAED,+EAA+E;AAC/E,wBAAgB,cAAc,CAAC,SAAS,EAAE,kBAAkB,EAAE,EAAE,EAAE,MAAM,GAAG,OAAO,CAEjF;AAED,wDAAwD;AACxD,wBAAgB,aAAa,CAAC,SAAS,EAAE,kBAAkB,EAAE,EAAE,EAAE,MAAM,GAAG,cAAc,GAAG,SAAS,CAEnG"}

package/dist/wiring/registry-query.js

@@ -0,0 +1,65 @@
+import { matchesAny } from "../scan/glob.js";
+import { readMatchingFiles } from "../util/walk-files.js";
+import { collectSourceSites } from "./evaluate-wiring.js";
+export const REGISTRY_SCHEMA = 'sharkcraft.registry-inventory/v1';
+function sortSites(sites) {
+    return [...sites].sort((a, b) => a.file.localeCompare(b.file) || a.line - b.line);
+}
+/**
+ * Scan a declared registry, returning every distinct id and its declaration
+ * (and optional consumer) sites. Pure-engine output; the only IO is a single
+ * read-only tree walk over the union of the source/consumer globs.
+ */
+export function scanRegistry(projectRoot, decl, options = {}) {
+    const globs = [
+        ...new Set([...decl.source.files, ...(decl.consumer ? decl.consumer.files : [])]),
+    ];
+    const cache = readMatchingFiles(projectRoot, globs, new Set(options.excludeDirs ?? []));
+    const entries = [...cache.entries()].map(([path, content]) => ({ path, content }));
+    const diagnostics = [];
+    const sourceFiles = entries.filter((f) => matchesAny(f.path, decl.source.files));
+    const declared = collectSourceSites(decl.source, sourceFiles);
+    if (declared.error)
+        diagnostics.push(`registry "${decl.name}" source: ${declared.error}`);
+    const consumerByToken = new Map();
+    if (decl.consumer) {
+        const consumerFiles = entries.filter((f) => matchesAny(f.path, decl.consumer.files));
+        const consumed = collectSourceSites(decl.consumer, consumerFiles);
+        if (consumed.error)
+            diagnostics.push(`registry "${decl.name}" consumer: ${consumed.error}`);
+        for (const s of consumed.sites) {
+            const list = consumerByToken.get(s.token) ?? [];
+            list.push({ file: s.file, line: s.line });
+            consumerByToken.set(s.token, list);
+        }
+    }
+    const declaredByToken = new Map();
+    for (const s of declared.sites) {
+        const list = declaredByToken.get(s.token) ?? [];
+        list.push({ file: s.file, line: s.line });
+        declaredByToken.set(s.token, list);
+    }
+    const entriesOut = [...declaredByToken.keys()].sort().map((id) => {
+        const consumerSites = consumerByToken.get(id);
+        return {
+            id,
+            sites: sortSites(declaredByToken.get(id) ?? []),
+            ...(consumerSites && consumerSites.length > 0 ? { consumerSites: sortSites(consumerSites) } : {}),
+        };
+    });
+    return {
+        schema: REGISTRY_SCHEMA,
+        name: decl.name,
+        ...(decl.description ? { description: decl.description } : {}),
+        entries: entriesOut,
+        diagnostics,
+    };
+}
+/** True if `id` is declared in the registry (alias-blind exact membership). */
+export function registryExists(inventory, id) {
+    return inventory.entries.some((e) => e.id === id);
+}
+/** The entry for `id`, or undefined if not declared. */
+export function registryWhere(inventory, id) {
+    return inventory.entries.find((e) => e.id === id);
+}

package/dist/wiring/scan-wiring-files.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"scan-wiring-files.d.ts","sourceRoot":"","sources":["../../src/wiring/scan-wiring-files.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,gBAAgB,CAAC;AAGlD,OAAO,EAGL,KAAK,aAAa,EACnB,MAAM,sBAAsB,CAAC;AAE9B,MAAM,WAAW,iBAAiB;IAChC,wEAAwE;IACxE,QAAQ,CAAC,YAAY,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAC1C,iGAAiG;IACjG,QAAQ,CAAC,WAAW,CAAC,EAAE,OAAO,CAAC;IAC/B,+BAA+B;IAC/B,QAAQ,CAAC,IAAI,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAClC,2FAA2F;IAC3F,QAAQ,CAAC,WAAW,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;CAC1C;AAED;;;;GAIG;AACH,wBAAgB,SAAS,CACvB,WAAW,EAAE,MAAM,EACnB,KAAK,EAAE,SAAS,WAAW,EAAE,EAC7B,OAAO,GAAE,iBAAsB,GAC9B,aAAa,CAyBf"}
+{"version":3,"file":"scan-wiring-files.d.ts","sourceRoot":"","sources":["../../src/wiring/scan-wiring-files.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,WAAW,EAAiB,MAAM,gBAAgB,CAAC;AAGjE,OAAO,EAGL,KAAK,aAAa,EACnB,MAAM,sBAAsB,CAAC;AAW9B,MAAM,WAAW,iBAAiB;IAChC,wEAAwE;IACxE,QAAQ,CAAC,YAAY,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAC1C,iGAAiG;IACjG,QAAQ,CAAC,WAAW,CAAC,EAAE,OAAO,CAAC;IAC/B,+BAA+B;IAC/B,QAAQ,CAAC,IAAI,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAClC,2FAA2F;IAC3F,QAAQ,CAAC,WAAW,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;CAC1C;AAED;;;;GAIG;AACH,wBAAgB,SAAS,CACvB,WAAW,EAAE,MAAM,EACnB,KAAK,EAAE,SAAS,WAAW,EAAE,EAC7B,OAAO,GAAE,iBAAsB,GAC9B,aAAa,CA8Bf"}

package/dist/wiring/scan-wiring-files.js

@@ -1,6 +1,14 @@
 import { matchesAny } from "../scan/glob.js";
 import { readMatchingFiles } from "../util/walk-files.js";
 import { evaluateWiring, } from "./evaluate-wiring.js";
+/** All file globs a rule references: its declared side + every registered source (union). */
+function ruleGlobs(rule) {
+    const reg = rule.registered;
+    const sources = Array.isArray(reg)
+        ? reg
+        : [reg];
+    return [...rule.declared.files, ...sources.flatMap((s) => [...s.files])];
+}
 /**
  * Filesystem-backed wiring run: walks the project once, reads only the files a
  * rule references (skipping oversized files), and evaluates every (selected)
@@ -15,17 +23,22 @@ export function runWiring(projectRoot, rules, options = {}) {
     if (options.changedOnly) {
         const changed = options.changedFiles ?? [];
         selected = selected.filter((r) => {
-            const globs = [...r.declared.files, ...r.registered.files];
+            const globs = ruleGlobs(r);
             return changed.some((c) => matchesAny(c, globs));
         });
     }
     if (selected.length === 0) {
-        return { schema: 'sharkcraft.wiring/v1', rules: [], violations: [], diagnostics: [], verdict: 'pass' };
+        return {
+            schema: 'sharkcraft.wiring/v1',
+            rules: [],
+            violations: [],
+            diagnostics: [],
+            evaluated: 0,
+            verdict: 'pass',
+        };
     }
     // Union of all globs across selected rules → one tree walk, cached reads.
-    const allGlobs = [
-        ...new Set(selected.flatMap((r) => [...r.declared.files, ...r.registered.files])),
-    ];
+    const allGlobs = [...new Set(selected.flatMap(ruleGlobs))];
     const cache = readMatchingFiles(projectRoot, allGlobs, new Set(options.excludeDirs ?? []));
     const entries = [...cache.entries()].map(([path, content]) => ({ path, content }));
     return evaluateWiring(selected, (source) => entries.filter((f) => matchesAny(f.path, source.files)));

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@shrkcrft/boundaries",
-  "version": "0.1.0-alpha.22",
+  "version": "0.1.0-alpha.23",
   "description": "SharkCraft boundary rules: detect when a repository violates its own architecture (forbidden imports across folder/package/layer boundaries).",
   "license": "MIT",
   "author": "SharkCraft contributors",
@@ -43,7 +43,7 @@
     "typecheck": "tsc --noEmit -p tsconfig.json"
   },
   "dependencies": {
-    "@shrkcrft/core": "^0.1.0-alpha.22"
+    "@shrkcrft/core": "^0.1.0-alpha.23"
   },
   "publishConfig": {
     "access": "public"