@spikedpunch/align-core 0.1.0

package/dist/build/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/build/types.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,EAAE,MAAM,qBAAqB,CAAC;AACpE,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,gBAAgB,CAAC;AAC7C,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,uBAAuB,CAAC;AAEzD;6FAC6F;AAC7F,MAAM,MAAM,aAAa,GACrB,uBAAuB,GACvB,iBAAiB,GACjB,kBAAkB,GAClB,qBAAqB,GACrB,wBAAwB,CAAC;AAE7B,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,UAAU,EAAE,gBAAgB,CAAC;IACtC,QAAQ,CAAC,eAAe,EAAE,WAAW,CAAC;IACtC,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,MAAM,EAAE,aAAa,CAAC;IAC/B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;CACzB;AAED,MAAM,MAAM,WAAW,GAAG,UAAU,GAAG,QAAQ,GAAG,OAAO,GAAG,OAAO,CAAC;AAEpE,MAAM,WAAW,qBAAqB;IACpC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,IAAI,EAAE,WAAW,CAAC;IAC3B,4FAA4F;IAC5F,QAAQ,CAAC,OAAO,EAAE,SAAS,MAAM,EAAE,CAAC;CACrC;AAED;;wBAEwB;AACxB,MAAM,WAAW,oBAAoB;IACnC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,QAAQ,EAAE,SAAS,MAAM,EAAE,CAAC;CACtC;AAED,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,QAAQ,EAAE,SAAS,qBAAqB,EAAE,CAAC;IACpD,QAAQ,CAAC,KAAK,EAAE,SAAS,MAAM,EAAE,CAAC;IAClC,QAAQ,CAAC,OAAO,EAAE,SAAS,eAAe,EAAE,CAAC;IAC7C,QAAQ,CAAC,aAAa,EAAE,SAAS,oBAAoB,EAAE,CAAC;CACzD"}

package/dist/build/types.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=types.js.map

package/dist/build/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../src/build/types.ts"],"names":[],"mappings":""}

package/dist/components/glob.d.ts

@@ -0,0 +1,10 @@
+/**
+ * Minimal dependency-free glob matcher for component file selectors (ADR 003). align/core's
+ * only runtime dependency is zod, so this is a small hand-rolled glob-to-regex compiler rather
+ * than pulling in micromatch/minimatch — it only needs to support the pattern vocabulary
+ * component selectors actually use: `*` (one path segment), `**` (zero or more segments), `?`
+ * (one character), and literal path segments.
+ */
+export declare function globToRegExp(pattern: string): RegExp;
+export declare function globMatch(pattern: string, filePath: string): boolean;
+//# sourceMappingURL=glob.d.ts.map

package/dist/components/glob.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"glob.d.ts","sourceRoot":"","sources":["../../src/components/glob.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,wBAAgB,YAAY,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CAiCpD;AAID,wBAAgB,SAAS,CAAC,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAOpE"}

package/dist/components/glob.js

@@ -0,0 +1,52 @@
+/**
+ * Minimal dependency-free glob matcher for component file selectors (ADR 003). align/core's
+ * only runtime dependency is zod, so this is a small hand-rolled glob-to-regex compiler rather
+ * than pulling in micromatch/minimatch — it only needs to support the pattern vocabulary
+ * component selectors actually use: `*` (one path segment), `**` (zero or more segments), `?`
+ * (one character), and literal path segments.
+ */
+export function globToRegExp(pattern) {
+    const normalized = pattern.split('\\').join('/');
+    let out = '';
+    let i = 0;
+    while (i < normalized.length) {
+        const c = normalized[i];
+        if (c === '*') {
+            if (normalized[i + 1] === '*') {
+                // `**` — consume any following `/` so `a/**/b` and `a/**` both behave sanely.
+                let j = i + 2;
+                if (normalized[j] === '/')
+                    j += 1;
+                out += '.*';
+                i = j;
+                continue;
+            }
+            out += '[^/]*';
+            i += 1;
+            continue;
+        }
+        if (c === '?') {
+            out += '[^/]';
+            i += 1;
+            continue;
+        }
+        if (c !== undefined && '.+^${}()|[]\\'.includes(c)) {
+            out += `\\${c}`;
+            i += 1;
+            continue;
+        }
+        out += c;
+        i += 1;
+    }
+    return new RegExp(`^${out}$`);
+}
+const regexCache = new Map();
+export function globMatch(pattern, filePath) {
+    let re = regexCache.get(pattern);
+    if (re === undefined) {
+        re = globToRegExp(pattern);
+        regexCache.set(pattern, re);
+    }
+    return re.test(filePath);
+}
+//# sourceMappingURL=glob.js.map

package/dist/components/glob.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"glob.js","sourceRoot":"","sources":["../../src/components/glob.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,MAAM,UAAU,YAAY,CAAC,OAAe;IAC1C,MAAM,UAAU,GAAG,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACjD,IAAI,GAAG,GAAG,EAAE,CAAC;IACb,IAAI,CAAC,GAAG,CAAC,CAAC;IACV,OAAO,CAAC,GAAG,UAAU,CAAC,MAAM,EAAE,CAAC;QAC7B,MAAM,CAAC,GAAG,UAAU,CAAC,CAAC,CAAC,CAAC;QACxB,IAAI,CAAC,KAAK,GAAG,EAAE,CAAC;YACd,IAAI,UAAU,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,GAAG,EAAE,CAAC;gBAC9B,8EAA8E;gBAC9E,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;gBACd,IAAI,UAAU,CAAC,CAAC,CAAC,KAAK,GAAG;oBAAE,CAAC,IAAI,CAAC,CAAC;gBAClC,GAAG,IAAI,IAAI,CAAC;gBACZ,CAAC,GAAG,CAAC,CAAC;gBACN,SAAS;YACX,CAAC;YACD,GAAG,IAAI,OAAO,CAAC;YACf,CAAC,IAAI,CAAC,CAAC;YACP,SAAS;QACX,CAAC;QACD,IAAI,CAAC,KAAK,GAAG,EAAE,CAAC;YACd,GAAG,IAAI,MAAM,CAAC;YACd,CAAC,IAAI,CAAC,CAAC;YACP,SAAS;QACX,CAAC;QACD,IAAI,CAAC,KAAK,SAAS,IAAI,eAAe,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC;YACnD,GAAG,IAAI,KAAK,CAAC,EAAE,CAAC;YAChB,CAAC,IAAI,CAAC,CAAC;YACP,SAAS;QACX,CAAC;QACD,GAAG,IAAI,CAAC,CAAC;QACT,CAAC,IAAI,CAAC,CAAC;IACT,CAAC;IACD,OAAO,IAAI,MAAM,CAAC,IAAI,GAAG,GAAG,CAAC,CAAC;AAChC,CAAC;AAED,MAAM,UAAU,GAAG,IAAI,GAAG,EAAkB,CAAC;AAE7C,MAAM,UAAU,SAAS,CAAC,OAAe,EAAE,QAAgB;IACzD,IAAI,EAAE,GAAG,UAAU,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;IACjC,IAAI,EAAE,KAAK,SAAS,EAAE,CAAC;QACrB,EAAE,GAAG,YAAY,CAAC,OAAO,CAAC,CAAC;QAC3B,UAAU,CAAC,GAAG,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;IAC9B,CAAC;IACD,OAAO,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;AAC3B,CAAC"}

package/dist/components/registry.d.ts

@@ -0,0 +1,51 @@
+import type { ComponentName, RepoRelativePath } from '../types/branded.js';
+import type { ComponentDefinitionIR, EmptyPolicy } from '../types/ir.js';
+/** Package name -> repo-relative directory (with trailing slash), e.g. from pnpm-workspace.yaml. */
+export type WorkspacePackageIndex = ReadonlyMap<string, RepoRelativePath>;
+export declare class ComponentValidationError extends Error {
+    readonly componentName: ComponentName;
+    constructor(message: string, componentName: ComponentName);
+}
+/** First-component-match-wins classification, in the order components are declared. */
+export declare function classifyFile(file: RepoRelativePath, components: Readonly<Record<ComponentName, ComponentDefinitionIR>>, workspacePackages: WorkspacePackageIndex): ComponentName | undefined;
+/**
+ * Load-time validation (ADR 003): a `package:` selector naming a package absent from the
+ * resolved workspace inventory is an error, and a component whose selector resolves to zero
+ * files is a load-time error pointing at the component definition — unless its empty policy
+ * (`empty: 'allow' | 'until-populated'`, greenfield mode, ADR 003 amendment) opts out. Both
+ * checks run against the current scan's file list, since v1 has no separate config-build step;
+ * the closest analog to "load time" is "the first scan after config load."
+ */
+export declare function validateComponents(components: Readonly<Record<ComponentName, ComponentDefinitionIR>>, allFiles: readonly RepoRelativePath[], workspacePackages: WorkspacePackageIndex): void;
+/** R1 (greenfield mode, IMPLEMENTATION_PLAN.md Design Reserve "Greenfield mode"): every component
+ * that is green ONLY because it matched zero files this scan (`empty: 'allow'` or
+ * `'until-populated'`, and currently zero classified files) — the data `align explain`/`doctor`
+ * already had, now surfaced in the loop a check-agent actually runs (`align check`'s human output,
+ * `--json`, and the MCP `align_check` payload; `orchestrator.ts` calls this once per check and
+ * threads the result onto `CheckRun.ungroundedComponents`). A component with `empty: 'fail'` never
+ * reaches here empty (it would have thrown in `validateComponents`/`validateClassifiedComponents`
+ * first) — this function only ever returns entries for the two policies that tolerate emptiness,
+ * closing the exact visibility hole this file's `validateClassifiedComponents` doc comment names:
+ * "the same false-green class as an unknown ComponentRef," now distinguishable in the verdict
+ * itself rather than requiring a per-rule `align explain` to notice `exampleFiles: []`.
+ */
+export declare function findUngroundedComponents(components: Readonly<Record<ComponentName, ComponentDefinitionIR>>, classifiedComponents: ReadonlySet<string>): UngroundedComponent[];
+export interface UngroundedComponent {
+    readonly name: ComponentName;
+    readonly selector: string;
+    readonly policy: Exclude<EmptyPolicy, 'fail'>;
+}
+/**
+ * Classification-based companion to `validateComponents`, for callers that only have the
+ * *classified* scan result rather than the raw file list + workspace inventory (the
+ * `GateOrchestrator` — see its check-time validation step). Enforces the same ADR 003
+ * empty-selector-fails-by-default doctrine one step later in the pipeline, where it also catches
+ * a case selector-based validation structurally cannot: a component whose selector DOES match
+ * files but loses every one of them to an earlier component under first-match-wins
+ * classification (`classifyFile` above) — zero classified files means every rule referencing the
+ * component evaluates vacuously green, the same false-green class as an unknown ComponentRef
+ * (`rules/component-refs.ts`). Fail-fast on the first offender, same convention as
+ * `validateComponents`.
+ */
+export declare function validateClassifiedComponents(components: Readonly<Record<ComponentName, ComponentDefinitionIR>>, classifiedComponents: ReadonlySet<string>): void;
+//# sourceMappingURL=registry.d.ts.map

package/dist/components/registry.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"registry.d.ts","sourceRoot":"","sources":["../../src/components/registry.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAE,gBAAgB,EAAE,MAAM,qBAAqB,CAAC;AAC3E,OAAO,KAAK,EAAE,qBAAqB,EAAE,WAAW,EAAE,MAAM,gBAAgB,CAAC;AAGzE,oGAAoG;AACpG,MAAM,MAAM,qBAAqB,GAAG,WAAW,CAAC,MAAM,EAAE,gBAAgB,CAAC,CAAC;AAE1E,qBAAa,wBAAyB,SAAQ,KAAK;aAG/B,aAAa,EAAE,aAAa;gBAD5C,OAAO,EAAE,MAAM,EACC,aAAa,EAAE,aAAa;CAK/C;AAiBD,uFAAuF;AACvF,wBAAgB,YAAY,CAC1B,IAAI,EAAE,gBAAgB,EACtB,UAAU,EAAE,QAAQ,CAAC,MAAM,CAAC,aAAa,EAAE,qBAAqB,CAAC,CAAC,EAClE,iBAAiB,EAAE,qBAAqB,GACvC,aAAa,GAAG,SAAS,CAM3B;AAED;;;;;;;GAOG;AACH,wBAAgB,kBAAkB,CAChC,UAAU,EAAE,QAAQ,CAAC,MAAM,CAAC,aAAa,EAAE,qBAAqB,CAAC,CAAC,EAClE,QAAQ,EAAE,SAAS,gBAAgB,EAAE,EACrC,iBAAiB,EAAE,qBAAqB,GACvC,IAAI,CAgCN;AAQD;;;;;;;;;;;GAWG;AACH,wBAAgB,wBAAwB,CACtC,UAAU,EAAE,QAAQ,CAAC,MAAM,CAAC,aAAa,EAAE,qBAAqB,CAAC,CAAC,EAClE,oBAAoB,EAAE,WAAW,CAAC,MAAM,CAAC,GACxC,mBAAmB,EAAE,CASvB;AAED,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,IAAI,EAAE,aAAa,CAAC;IAC7B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC;CAC/C;AAED;;;;;;;;;;;GAWG;AACH,wBAAgB,4BAA4B,CAC1C,UAAU,EAAE,QAAQ,CAAC,MAAM,CAAC,aAAa,EAAE,qBAAqB,CAAC,CAAC,EAClE,oBAAoB,EAAE,WAAW,CAAC,MAAM,CAAC,GACxC,IAAI,CAgBN"}

package/dist/components/registry.js

@@ -0,0 +1,121 @@
+import { globMatch } from './glob.js';
+export class ComponentValidationError extends Error {
+    componentName;
+    constructor(message, componentName) {
+        super(message);
+        this.componentName = componentName;
+        this.name = 'ComponentValidationError';
+    }
+}
+function matchesSelector(file, def, workspacePackages) {
+    if (def.selector.kind === 'glob') {
+        return def.selector.patterns.some((pattern) => globMatch(pattern, file));
+    }
+    // 'package' selector: file belongs if it falls under any named package's directory.
+    return def.selector.packageNames.some((name) => {
+        const dir = workspacePackages.get(name);
+        return dir !== undefined && (file === dir.replace(/\/$/, '') || file.startsWith(dir));
+    });
+}
+/** First-component-match-wins classification, in the order components are declared. */
+export function classifyFile(file, components, workspacePackages) {
+    for (const name of Object.keys(components)) {
+        const def = components[name];
+        if (def !== undefined && matchesSelector(file, def, workspacePackages))
+            return name;
+    }
+    return undefined;
+}
+/**
+ * Load-time validation (ADR 003): a `package:` selector naming a package absent from the
+ * resolved workspace inventory is an error, and a component whose selector resolves to zero
+ * files is a load-time error pointing at the component definition — unless its empty policy
+ * (`empty: 'allow' | 'until-populated'`, greenfield mode, ADR 003 amendment) opts out. Both
+ * checks run against the current scan's file list, since v1 has no separate config-build step;
+ * the closest analog to "load time" is "the first scan after config load."
+ */
+export function validateComponents(components, allFiles, workspacePackages) {
+    for (const name of Object.keys(components)) {
+        const def = components[name];
+        if (def === undefined)
+            continue;
+        if (def.selector.kind === 'package') {
+            for (const pkgName of def.selector.packageNames) {
+                if (!workspacePackages.has(pkgName)) {
+                    throw new ComponentValidationError(`Component '${name}' references package '${pkgName}', which is not in the resolved ` +
+                        `workspace inventory. Check pnpm-workspace.yaml / package.json names.`, name);
+                }
+            }
+        }
+        if (def.empty !== 'fail')
+            continue;
+        const matched = allFiles.some((file) => matchesSelector(file, def, workspacePackages));
+        if (!matched) {
+            throw new ComponentValidationError(`Component '${name}' (selector: ${describeSelector(def)}) matches zero files. Likely ` +
+                `cause: its directory was renamed/moved or the selector is stale. If this is expected, ` +
+                `set empty: 'until-populated' on the component definition (greenfield — auto-arms once ` +
+                `files land, and shows as a distinct 'ungrounded, provisionally green' line in \`align ` +
+                `check\` rather than plain green) or empty: 'allow' for a component that stays ` +
+                `permanently optional. (\`allowEmpty: true\` is still supported as a deprecated alias ` +
+                `for \`empty: 'allow'\`.)`, name);
+        }
+    }
+}
+function describeSelector(def) {
+    return def.selector.kind === 'glob'
+        ? def.selector.patterns.join(', ')
+        : `package: ${def.selector.packageNames.join(', ')}`;
+}
+/** R1 (greenfield mode, IMPLEMENTATION_PLAN.md Design Reserve "Greenfield mode"): every component
+ * that is green ONLY because it matched zero files this scan (`empty: 'allow'` or
+ * `'until-populated'`, and currently zero classified files) — the data `align explain`/`doctor`
+ * already had, now surfaced in the loop a check-agent actually runs (`align check`'s human output,
+ * `--json`, and the MCP `align_check` payload; `orchestrator.ts` calls this once per check and
+ * threads the result onto `CheckRun.ungroundedComponents`). A component with `empty: 'fail'` never
+ * reaches here empty (it would have thrown in `validateComponents`/`validateClassifiedComponents`
+ * first) — this function only ever returns entries for the two policies that tolerate emptiness,
+ * closing the exact visibility hole this file's `validateClassifiedComponents` doc comment names:
+ * "the same false-green class as an unknown ComponentRef," now distinguishable in the verdict
+ * itself rather than requiring a per-rule `align explain` to notice `exampleFiles: []`.
+ */
+export function findUngroundedComponents(components, classifiedComponents) {
+    const out = [];
+    for (const name of Object.keys(components)) {
+        const def = components[name];
+        if (def === undefined || def.empty === 'fail')
+            continue;
+        if (classifiedComponents.has(name))
+            continue;
+        out.push({ name, selector: describeSelector(def), policy: def.empty });
+    }
+    return out;
+}
+/**
+ * Classification-based companion to `validateComponents`, for callers that only have the
+ * *classified* scan result rather than the raw file list + workspace inventory (the
+ * `GateOrchestrator` — see its check-time validation step). Enforces the same ADR 003
+ * empty-selector-fails-by-default doctrine one step later in the pipeline, where it also catches
+ * a case selector-based validation structurally cannot: a component whose selector DOES match
+ * files but loses every one of them to an earlier component under first-match-wins
+ * classification (`classifyFile` above) — zero classified files means every rule referencing the
+ * component evaluates vacuously green, the same false-green class as an unknown ComponentRef
+ * (`rules/component-refs.ts`). Fail-fast on the first offender, same convention as
+ * `validateComponents`.
+ */
+export function validateClassifiedComponents(components, classifiedComponents) {
+    for (const name of Object.keys(components)) {
+        const def = components[name];
+        if (def === undefined || def.empty !== 'fail')
+            continue;
+        if (classifiedComponents.has(name))
+            continue;
+        throw new ComponentValidationError(`Component '${name}' (selector: ${describeSelector(def)}) has zero files classified to it ` +
+            `in this scan — every rule referencing '${name}' would silently pass. Likely cause: its ` +
+            `directory was renamed/moved, the selector is stale, or an earlier component's selector ` +
+            `claims all of its files (components classify first-match-wins, in declaration order). ` +
+            `If '${name}' is legitimately empty, set empty: 'until-populated' (greenfield — auto-arms ` +
+            `once files land) or empty: 'allow' (permanent) on the component definition. ` +
+            `(\`allowEmpty: true\` is still supported as a deprecated alias for \`empty: 'allow'\`.)`, name);
+    }
+}
+//# sourceMappingURL=registry.js.map

package/dist/components/registry.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"registry.js","sourceRoot":"","sources":["../../src/components/registry.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AAKtC,MAAM,OAAO,wBAAyB,SAAQ,KAAK;IAG/B;IAFlB,YACE,OAAe,EACC,aAA4B;QAE5C,KAAK,CAAC,OAAO,CAAC,CAAC;QAFC,kBAAa,GAAb,aAAa,CAAe;QAG5C,IAAI,CAAC,IAAI,GAAG,0BAA0B,CAAC;IACzC,CAAC;CACF;AAED,SAAS,eAAe,CACtB,IAAsB,EACtB,GAA0B,EAC1B,iBAAwC;IAExC,IAAI,GAAG,CAAC,QAAQ,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;QACjC,OAAO,GAAG,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,SAAS,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC,CAAC;IAC3E,CAAC;IACD,oFAAoF;IACpF,OAAO,GAAG,CAAC,QAAQ,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE;QAC7C,MAAM,GAAG,GAAG,iBAAiB,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACxC,OAAO,GAAG,KAAK,SAAS,IAAI,CAAC,IAAI,KAAK,GAAG,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC;IACxF,CAAC,CAAC,CAAC;AACL,CAAC;AAED,uFAAuF;AACvF,MAAM,UAAU,YAAY,CAC1B,IAAsB,EACtB,UAAkE,EAClE,iBAAwC;IAExC,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,IAAI,CAAC,UAAU,CAAoB,EAAE,CAAC;QAC9D,MAAM,GAAG,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC;QAC7B,IAAI,GAAG,KAAK,SAAS,IAAI,eAAe,CAAC,IAAI,EAAE,GAAG,EAAE,iBAAiB,CAAC;YAAE,OAAO,IAAI,CAAC;IACtF,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,kBAAkB,CAChC,UAAkE,EAClE,QAAqC,EACrC,iBAAwC;IAExC,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,IAAI,CAAC,UAAU,CAAoB,EAAE,CAAC;QAC9D,MAAM,GAAG,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC;QAC7B,IAAI,GAAG,KAAK,SAAS;YAAE,SAAS;QAEhC,IAAI,GAAG,CAAC,QAAQ,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;YACpC,KAAK,MAAM,OAAO,IAAI,GAAG,CAAC,QAAQ,CAAC,YAAY,EAAE,CAAC;gBAChD,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC;oBACpC,MAAM,IAAI,wBAAwB,CAChC,cAAc,IAAI,yBAAyB,OAAO,kCAAkC;wBAClF,sEAAsE,EACxE,IAAI,CACL,CAAC;gBACJ,CAAC;YACH,CAAC;QACH,CAAC;QAED,IAAI,GAAG,CAAC,KAAK,KAAK,MAAM;YAAE,SAAS;QACnC,MAAM,OAAO,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,eAAe,CAAC,IAAI,EAAE,GAAG,EAAE,iBAAiB,CAAC,CAAC,CAAC;QACvF,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,MAAM,IAAI,wBAAwB,CAChC,cAAc,IAAI,gBAAgB,gBAAgB,CAAC,GAAG,CAAC,+BAA+B;gBACpF,wFAAwF;gBACxF,wFAAwF;gBACxF,wFAAwF;gBACxF,gFAAgF;gBAChF,uFAAuF;gBACvF,0BAA0B,EAC5B,IAAI,CACL,CAAC;QACJ,CAAC;IACH,CAAC;AACH,CAAC;AAED,SAAS,gBAAgB,CAAC,GAA0B;IAClD,OAAO,GAAG,CAAC,QAAQ,CAAC,IAAI,KAAK,MAAM;QACjC,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC;QAClC,CAAC,CAAC,YAAY,GAAG,CAAC,QAAQ,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;AACzD,CAAC;AAED;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,wBAAwB,CACtC,UAAkE,EAClE,oBAAyC;IAEzC,MAAM,GAAG,GAA0B,EAAE,CAAC;IACtC,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,IAAI,CAAC,UAAU,CAAoB,EAAE,CAAC;QAC9D,MAAM,GAAG,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC;QAC7B,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,CAAC,KAAK,KAAK,MAAM;YAAE,SAAS;QACxD,IAAI,oBAAoB,CAAC,GAAG,CAAC,IAAI,CAAC;YAAE,SAAS;QAC7C,GAAG,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,gBAAgB,CAAC,GAAG,CAAC,EAAE,MAAM,EAAE,GAAG,CAAC,KAAK,EAAE,CAAC,CAAC;IACzE,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAQD;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,4BAA4B,CAC1C,UAAkE,EAClE,oBAAyC;IAEzC,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,IAAI,CAAC,UAAU,CAAoB,EAAE,CAAC;QAC9D,MAAM,GAAG,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC;QAC7B,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,CAAC,KAAK,KAAK,MAAM;YAAE,SAAS;QACxD,IAAI,oBAAoB,CAAC,GAAG,CAAC,IAAI,CAAC;YAAE,SAAS;QAC7C,MAAM,IAAI,wBAAwB,CAChC,cAAc,IAAI,gBAAgB,gBAAgB,CAAC,GAAG,CAAC,oCAAoC;YACzF,0CAA0C,IAAI,2CAA2C;YACzF,yFAAyF;YACzF,wFAAwF;YACxF,OAAO,IAAI,gFAAgF;YAC3F,8EAA8E;YAC9E,yFAAyF,EAC3F,IAAI,CACL,CAAC;IACJ,CAAC;AACH,CAAC"}

package/dist/dsl/factories.d.ts

@@ -0,0 +1,86 @@
+/**
+ * DSL builder factories (ADR 002/013) — split out of `dsl/index.ts` so this module can be the
+ * single source of truth for the verb surface: `dsl/index.ts`'s `defineProject` imports these
+ * factory constructors to build `ComponentContext`, and `dsl/verb-manifest.ts` imports the same
+ * constructors to runtime-introspect the verb table `align skill` renders (Stage 5,
+ * IMPLEMENTATION_PLAN.md). Neither consumer hand-duplicates the verb list — both read this file.
+ */
+import { type ComponentName } from '../types/branded.js';
+import type { RuleIR, RuleProvenance } from '../types/ir.js';
+export interface ComponentToken {
+    readonly name: ComponentName;
+}
+export interface RuleBuilder {
+    /** Hoists into `provenance.because` (ADR 002) — the single field feeding terminal output, IDE
+     * hover, and future fix-prompt explanations. */
+    because(text: string): RuleBuilder;
+    /** Internal: finalizes into one or more concrete RuleIR nodes. Some verbs (`isIsolated()`,
+     * `cannotDependOn()`) expand into multiple no-dependency rules. `id` is pre-filled with a
+     * semantic, human-readable slug (e.g. `arch.no-dependency:api->ui`); `defineProject` only
+     * appends a numeric suffix if two rules would otherwise collide, so ids stay stable across
+     * config edits that don't touch the colliding rules themselves. */
+    build(): readonly RuleIR[];
+}
+export declare function ruleBuilder(makeBase: (provenance: RuleProvenance) => readonly RuleIR[]): RuleBuilder;
+export interface LayerRuleBuilder {
+    /** dependencies outside this allowlist are violations */
+    canOnlyDependOn(...refs: readonly ComponentToken[]): RuleBuilder;
+    /** dependencies on this denylist are violations; everything else is permitted */
+    cannotDependOn(...refs: readonly ComponentToken[]): RuleBuilder;
+}
+export interface ComponentRuleBuilder {
+    /** no other component may depend on this one, and it depends on none */
+    isIsolated(): RuleBuilder;
+    /** every file classified to this component must stay at or under `max` lines — `arch.metric`
+     * (max-LOC), promoted 2026-07-12 on kluster ruleset evidence (IMPLEMENTATION_PLAN.md's Promotion
+     * log: two 2,100+-line files were structurally invisible to every dependency/cycle rule). Only
+     * the `loc` metric is promoted — `fan-in`/`fan-out`/`instability` verbs stay reserved pending
+     * their own evidence. */
+    maxLinesPerFile(max: number): RuleBuilder;
+}
+export interface NoCyclesOptions {
+    readonly includeTypeOnly?: boolean;
+}
+export interface ArchFactory {
+    layer(token: ComponentToken): LayerRuleBuilder;
+    component(token: ComponentToken): ComponentRuleBuilder;
+    /** Not in ADR 002's illustrative vocabulary table, but `arch.no-cycles` is a v1 IR rule kind
+     * with no other documented authoring path — added following the same negation-free, positive
+     * verb convention (deviation noted in the Stage 1 final report). */
+    noCycles(scope?: ComponentToken | 'repo', options?: NoCyclesOptions): RuleBuilder;
+}
+export interface CustomFactory {
+    /** Produces a `custom.host` IR rule (ADR 002's escape hatch, docs/proposals/rule-expansion-
+     * evaluation.md §B.0) referencing a predicate registered by the same name in align.config.ts's
+     * sibling `hostRules` export (`{ [hostRuleName]: HostPredicate }`, `@spikedpunch/align-core`'s
+     * `HostPredicateRegistry`) — not passed through `defineProject` itself, since `RulesetIR` is
+     * portable JSON (ADR 002) and predicates are functions. `defineProject` only builds the
+     * reference (`hostRuleName`, `portable: false`); `validateHostRules` (the orchestrator's guard
+     * step) is what confirms the name actually resolves to a registered predicate at check time —
+     * the same "reference must resolve or the gate errors" doctrine every other selector in this
+     * file already follows (ADR 008 amendment). */
+    host(hostRuleName: string): RuleBuilder;
+}
+export type ComponentContext<T extends Record<string, unknown>> = {
+    readonly [K in keyof T]: ComponentToken;
+} & {
+    readonly arch: ArchFactory;
+    readonly custom: CustomFactory;
+    readonly security: SecurityFactory;
+};
+export declare function makeCustomFactory(): CustomFactory;
+export interface SecurityManifestFactory {
+    /** Any dependency specifier resolving to a git/http(s)/file/link source (not registry, not
+     * `workspace:`) is a violation — `security.manifest.source-hygiene`. */
+    sourceHygiene(): RuleBuilder;
+    /** Every current runtime/dev dependency is fingerprinted (name + declaring manifest); baseline
+     * consent (`align init` / `baseline accept`) seeds what's there today, so only a genuinely new
+     * dependency added later shows red — `security.manifest.new-dependency`. */
+    newDependencyGate(): RuleBuilder;
+}
+export interface SecurityFactory {
+    readonly manifest: SecurityManifestFactory;
+}
+export declare function makeSecurityFactory(): SecurityFactory;
+export declare function makeArchFactory(allComponents: readonly ComponentToken[]): ArchFactory;
+//# sourceMappingURL=factories.d.ts.map

package/dist/dsl/factories.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"factories.d.ts","sourceRoot":"","sources":["../../src/dsl/factories.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,OAAO,EAAY,KAAK,aAAa,EAAE,MAAM,qBAAqB,CAAC;AACnE,OAAO,KAAK,EAMV,MAAM,EACN,cAAc,EAGf,MAAM,gBAAgB,CAAC;AAMxB,MAAM,WAAW,cAAc;IAC7B,QAAQ,CAAC,IAAI,EAAE,aAAa,CAAC;CAC9B;AAED,MAAM,WAAW,WAAW;IAC1B;oDACgD;IAChD,OAAO,CAAC,IAAI,EAAE,MAAM,GAAG,WAAW,CAAC;IACnC;;;;uEAImE;IACnE,KAAK,IAAI,SAAS,MAAM,EAAE,CAAC;CAC5B;AAED,wBAAgB,WAAW,CAAC,QAAQ,EAAE,CAAC,UAAU,EAAE,cAAc,KAAK,SAAS,MAAM,EAAE,GAAG,WAAW,CAYpG;AAED,MAAM,WAAW,gBAAgB;IAC/B,yDAAyD;IACzD,eAAe,CAAC,GAAG,IAAI,EAAE,SAAS,cAAc,EAAE,GAAG,WAAW,CAAC;IACjE,iFAAiF;IACjF,cAAc,CAAC,GAAG,IAAI,EAAE,SAAS,cAAc,EAAE,GAAG,WAAW,CAAC;CACjE;AAED,MAAM,WAAW,oBAAoB;IACnC,wEAAwE;IACxE,UAAU,IAAI,WAAW,CAAC;IAC1B;;;;6BAIyB;IACzB,eAAe,CAAC,GAAG,EAAE,MAAM,GAAG,WAAW,CAAC;CAC3C;AAED,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,eAAe,CAAC,EAAE,OAAO,CAAC;CACpC;AAED,MAAM,WAAW,WAAW;IAC1B,KAAK,CAAC,KAAK,EAAE,cAAc,GAAG,gBAAgB,CAAC;IAC/C,SAAS,CAAC,KAAK,EAAE,cAAc,GAAG,oBAAoB,CAAC;IACvD;;wEAEoE;IACpE,QAAQ,CAAC,KAAK,CAAC,EAAE,cAAc,GAAG,MAAM,EAAE,OAAO,CAAC,EAAE,eAAe,GAAG,WAAW,CAAC;CACnF;AAED,MAAM,WAAW,aAAa;IAC5B;;;;;;;;mDAQ+C;IAC/C,IAAI,CAAC,YAAY,EAAE,MAAM,GAAG,WAAW,CAAC;CACzC;AAED,MAAM,MAAM,gBAAgB,CAAC,CAAC,SAAS,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,IAAI;IAChE,QAAQ,EAAE,CAAC,IAAI,MAAM,CAAC,GAAG,cAAc;CACxC,GAAG;IACF,QAAQ,CAAC,IAAI,EAAE,WAAW,CAAC;IAC3B,QAAQ,CAAC,MAAM,EAAE,aAAa,CAAC;IAC/B,QAAQ,CAAC,QAAQ,EAAE,eAAe,CAAC;CACpC,CAAC;AAEF,wBAAgB,iBAAiB,IAAI,aAAa,CAejD;AAYD,MAAM,WAAW,uBAAuB;IACtC;4EACwE;IACxE,aAAa,IAAI,WAAW,CAAC;IAC7B;;gFAE4E;IAC5E,iBAAiB,IAAI,WAAW,CAAC;CAClC;AAED,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,QAAQ,EAAE,uBAAuB,CAAC;CAC5C;AAED,wBAAgB,mBAAmB,IAAI,eAAe,CAyBrD;AAED,wBAAgB,eAAe,CAAC,aAAa,EAAE,SAAS,cAAc,EAAE,GAAG,WAAW,CAoFrF"}

package/dist/dsl/factories.js

@@ -0,0 +1,145 @@
+/**
+ * DSL builder factories (ADR 002/013) — split out of `dsl/index.ts` so this module can be the
+ * single source of truth for the verb surface: `dsl/index.ts`'s `defineProject` imports these
+ * factory constructors to build `ComponentContext`, and `dsl/verb-manifest.ts` imports the same
+ * constructors to runtime-introspect the verb table `align skill` renders (Stage 5,
+ * IMPLEMENTATION_PLAN.md). Neither consumer hand-duplicates the verb list — both read this file.
+ */
+import { toRuleId } from '../types/branded.js';
+export function ruleBuilder(makeBase) {
+    let provenance = {};
+    const self = {
+        because(text) {
+            provenance = { ...provenance, because: text };
+            return self;
+        },
+        build() {
+            return makeBase(provenance);
+        },
+    };
+    return self;
+}
+export function makeCustomFactory() {
+    return {
+        host(hostRuleName) {
+            return ruleBuilder((provenance) => {
+                const rule = {
+                    kind: 'custom.host',
+                    id: toRuleId(`custom.host:${hostRuleName}`),
+                    hostRuleName,
+                    portable: false,
+                    provenance,
+                };
+                return [rule];
+            });
+        },
+    };
+}
+export function makeSecurityFactory() {
+    return {
+        manifest: {
+            sourceHygiene() {
+                return ruleBuilder((provenance) => {
+                    const rule = {
+                        kind: 'security.manifest.source-hygiene',
+                        id: toRuleId('security.manifest.source-hygiene'),
+                        provenance,
+                    };
+                    return [rule];
+                });
+            },
+            newDependencyGate() {
+                return ruleBuilder((provenance) => {
+                    const rule = {
+                        kind: 'security.manifest.new-dependency',
+                        id: toRuleId('security.manifest.new-dependency'),
+                        provenance,
+                    };
+                    return [rule];
+                });
+            },
+        },
+    };
+}
+export function makeArchFactory(allComponents) {
+    return {
+        layer(token) {
+            return {
+                canOnlyDependOn(...refs) {
+                    return ruleBuilder((provenance) => {
+                        const rule = {
+                            kind: 'arch.layers',
+                            id: toRuleId(`arch.layers:${token.name}`),
+                            layers: [{ layer: token.name, canDependOn: refs.map((r) => r.name) }],
+                            provenance,
+                        };
+                        return [rule];
+                    });
+                },
+                cannotDependOn(...refs) {
+                    return ruleBuilder((provenance) => refs.map((ref) => ({
+                        kind: 'arch.no-dependency',
+                        id: toRuleId(`arch.no-dependency:${token.name}->${ref.name}`),
+                        from: token.name,
+                        to: ref.name,
+                        provenance,
+                    })));
+                },
+            };
+        },
+        component(token) {
+            return {
+                isIsolated() {
+                    return ruleBuilder((provenance) => {
+                        const others = allComponents.filter((c) => c.name !== token.name);
+                        const rules = [];
+                        for (const other of others) {
+                            rules.push({
+                                kind: 'arch.no-dependency',
+                                id: toRuleId(`arch.no-dependency:${other.name}->${token.name}`),
+                                from: other.name,
+                                to: token.name,
+                                provenance,
+                            });
+                            rules.push({
+                                kind: 'arch.no-dependency',
+                                id: toRuleId(`arch.no-dependency:${token.name}->${other.name}`),
+                                from: token.name,
+                                to: other.name,
+                                provenance,
+                            });
+                        }
+                        return rules;
+                    });
+                },
+                maxLinesPerFile(max) {
+                    return ruleBuilder((provenance) => {
+                        const rule = {
+                            kind: 'arch.metric',
+                            id: toRuleId(`arch.metric:loc:${token.name}`),
+                            target: token.name,
+                            metric: 'loc',
+                            max,
+                            provenance,
+                        };
+                        return [rule];
+                    });
+                },
+            };
+        },
+        noCycles(scope, options) {
+            return ruleBuilder((provenance) => {
+                const scopeValue = scope === undefined || scope === 'repo' ? 'repo' : scope.name;
+                const rule = {
+                    kind: 'arch.no-cycles',
+                    id: toRuleId(`arch.no-cycles:${scopeValue}`),
+                    scope: scopeValue,
+                    includeTypeOnly: options?.includeTypeOnly ?? false,
+                    provenance,
+                };
+                return [rule];
+            });
+        },
+    };
+}
+//# sourceMappingURL=factories.js.map

package/dist/dsl/factories.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"factories.js","sourceRoot":"","sources":["../../src/dsl/factories.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,OAAO,EAAE,QAAQ,EAAsB,MAAM,qBAAqB,CAAC;AAiCnE,MAAM,UAAU,WAAW,CAAC,QAA2D;IACrF,IAAI,UAAU,GAAmB,EAAE,CAAC;IACpC,MAAM,IAAI,GAAgB;QACxB,OAAO,CAAC,IAAY;YAClB,UAAU,GAAG,EAAE,GAAG,UAAU,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;YAC9C,OAAO,IAAI,CAAC;QACd,CAAC;QACD,KAAK;YACH,OAAO,QAAQ,CAAC,UAAU,CAAC,CAAC;QAC9B,CAAC;KACF,CAAC;IACF,OAAO,IAAI,CAAC;AACd,CAAC;AAsDD,MAAM,UAAU,iBAAiB;IAC/B,OAAO;QACL,IAAI,CAAC,YAAoB;YACvB,OAAO,WAAW,CAAC,CAAC,UAAU,EAAE,EAAE;gBAChC,MAAM,IAAI,GAAmB;oBAC3B,IAAI,EAAE,aAAa;oBACnB,EAAE,EAAE,QAAQ,CAAC,eAAe,YAAY,EAAE,CAAC;oBAC3C,YAAY;oBACZ,QAAQ,EAAE,KAAK;oBACf,UAAU;iBACX,CAAC;gBACF,OAAO,CAAC,IAAI,CAAC,CAAC;YAChB,CAAC,CAAC,CAAC;QACL,CAAC;KACF,CAAC;AACJ,CAAC;AA0BD,MAAM,UAAU,mBAAmB;IACjC,OAAO;QACL,QAAQ,EAAE;YACR,aAAa;gBACX,OAAO,WAAW,CAAC,CAAC,UAAU,EAAE,EAAE;oBAChC,MAAM,IAAI,GAAsC;wBAC9C,IAAI,EAAE,kCAAkC;wBACxC,EAAE,EAAE,QAAQ,CAAC,kCAAkC,CAAC;wBAChD,UAAU;qBACX,CAAC;oBACF,OAAO,CAAC,IAAI,CAAC,CAAC;gBAChB,CAAC,CAAC,CAAC;YACL,CAAC;YACD,iBAAiB;gBACf,OAAO,WAAW,CAAC,CAAC,UAAU,EAAE,EAAE;oBAChC,MAAM,IAAI,GAAsC;wBAC9C,IAAI,EAAE,kCAAkC;wBACxC,EAAE,EAAE,QAAQ,CAAC,kCAAkC,CAAC;wBAChD,UAAU;qBACX,CAAC;oBACF,OAAO,CAAC,IAAI,CAAC,CAAC;gBAChB,CAAC,CAAC,CAAC;YACL,CAAC;SACF;KACF,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,aAAwC;IACtE,OAAO;QACL,KAAK,CAAC,KAAqB;YACzB,OAAO;gBACL,eAAe,CAAC,GAAG,IAA+B;oBAChD,OAAO,WAAW,CAAC,CAAC,UAAU,EAAE,EAAE;wBAChC,MAAM,IAAI,GAAmB;4BAC3B,IAAI,EAAE,aAAa;4BACnB,EAAE,EAAE,QAAQ,CAAC,eAAe,KAAK,CAAC,IAAI,EAAE,CAAC;4BACzC,MAAM,EAAE,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,IAAI,EAAE,WAAW,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC;4BACrE,UAAU;yBACX,CAAC;wBACF,OAAO,CAAC,IAAI,CAAC,CAAC;oBAChB,CAAC,CAAC,CAAC;gBACL,CAAC;gBACD,cAAc,CAAC,GAAG,IAA+B;oBAC/C,OAAO,WAAW,CAAC,CAAC,UAAU,EAAE,EAAE,CAChC,IAAI,CAAC,GAAG,CACN,CAAC,GAAG,EAAwB,EAAE,CAAC,CAAC;wBAC9B,IAAI,EAAE,oBAAoB;wBAC1B,EAAE,EAAE,QAAQ,CAAC,sBAAsB,KAAK,CAAC,IAAI,KAAK,GAAG,CAAC,IAAI,EAAE,CAAC;wBAC7D,IAAI,EAAE,KAAK,CAAC,IAAI;wBAChB,EAAE,EAAE,GAAG,CAAC,IAAI;wBACZ,UAAU;qBACX,CAAC,CACH,CACF,CAAC;gBACJ,CAAC;aACF,CAAC;QACJ,CAAC;QACD,SAAS,CAAC,KAAqB;YAC7B,OAAO;gBACL,UAAU;oBACR,OAAO,WAAW,CAAC,CAAC,UAAU,EAAE,EAAE;wBAChC,MAAM,MAAM,GAAG,aAAa,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,KAAK,CAAC,IAAI,CAAC,CAAC;wBAClE,MAAM,KAAK,GAA2B,EAAE,CAAC;wBACzC,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;4BAC3B,KAAK,CAAC,IAAI,CAAC;gCACT,IAAI,EAAE,oBAAoB;gCAC1B,EAAE,EAAE,QAAQ,CAAC,sBAAsB,KAAK,CAAC,IAAI,KAAK,KAAK,CAAC,IAAI,EAAE,CAAC;gCAC/D,IAAI,EAAE,KAAK,CAAC,IAAI;gCAChB,EAAE,EAAE,KAAK,CAAC,IAAI;gCACd,UAAU;6BACX,CAAC,CAAC;4BACH,KAAK,CAAC,IAAI,CAAC;gCACT,IAAI,EAAE,oBAAoB;gCAC1B,EAAE,EAAE,QAAQ,CAAC,sBAAsB,KAAK,CAAC,IAAI,KAAK,KAAK,CAAC,IAAI,EAAE,CAAC;gCAC/D,IAAI,EAAE,KAAK,CAAC,IAAI;gCAChB,EAAE,EAAE,KAAK,CAAC,IAAI;gCACd,UAAU;6BACX,CAAC,CAAC;wBACL,CAAC;wBACD,OAAO,KAAK,CAAC;oBACf,CAAC,CAAC,CAAC;gBACL,CAAC;gBACD,eAAe,CAAC,GAAW;oBACzB,OAAO,WAAW,CAAC,CAAC,UAAU,EAAE,EAAE;wBAChC,MAAM,IAAI,GAAmB;4BAC3B,IAAI,EAAE,aAAa;4BACnB,EAAE,EAAE,QAAQ,CAAC,mBAAmB,KAAK,CAAC,IAAI,EAAE,CAAC;4BAC7C,MAAM,EAAE,KAAK,CAAC,IAAI;4BAClB,MAAM,EAAE,KAAK;4BACb,GAAG;4BACH,UAAU;yBACX,CAAC;wBACF,OAAO,CAAC,IAAI,CAAC,CAAC;oBAChB,CAAC,CAAC,CAAC;gBACL,CAAC;aACF,CAAC;QACJ,CAAC;QACD,QAAQ,CAAC,KAA+B,EAAE,OAAyB;YACjE,OAAO,WAAW,CAAC,CAAC,UAAU,EAAE,EAAE;gBAChC,MAAM,UAAU,GAAG,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC;gBACjF,MAAM,IAAI,GAAqB;oBAC7B,IAAI,EAAE,gBAAgB;oBACtB,EAAE,EAAE,QAAQ,CAAC,kBAAkB,UAAU,EAAE,CAAC;oBAC5C,KAAK,EAAE,UAAU;oBACjB,eAAe,EAAE,OAAO,EAAE,eAAe,IAAI,KAAK;oBAClD,UAAU;iBACX,CAAC;gBACF,OAAO,CAAC,IAAI,CAAC,CAAC;YAChB,CAAC,CAAC,CAAC;QACL,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/dsl/index.d.ts

@@ -0,0 +1,46 @@
+import type { EmptyPolicy, RulesetIR } from '../types/ir.js';
+import { type ComponentContext as ComponentContextBase, type RuleBuilder } from './factories.js';
+export * from './factories.js';
+export * from './verb-manifest.js';
+export type ComponentDeclaration = string | {
+    readonly pattern: string;
+    /**
+     * @deprecated Use `empty: 'allow'` instead — kept for back-compat (align's own dogfood
+     * config history and external adopters, e.g. kluster's `sdd` component, already authored
+     * `allowEmpty: true`; it keeps working, unchanged, as an alias). `allowEmpty: true` resolves
+     * to `empty: 'allow'` when `empty` itself is not also set; `empty` wins if both are present.
+     */
+    readonly allowEmpty?: boolean;
+    /**
+     * Greenfield mode (IMPLEMENTATION_PLAN.md Design Reserve "Greenfield mode", ADR 003
+     * amendment) — the empty-selector policy, as a 3-state discriminant:
+     * - `'fail'` (default): a component matching zero files is a load-time error (unchanged
+     *   ADR 003 empty-selector-fails-by-default safety).
+     * - `'allow'`: empty tolerated permanently — same as `allowEmpty: true`, now additionally
+     *   surfaced as an `ungrounded-component` advisory in `align check` (R1) instead of an
+     *   indistinguishable plain `green`.
+     * - `'until-populated'`: empty tolerated + surfaced the same way, but self-heals — once the
+     *   component has >=1 classified file, the empty-check simply stops firing and its rules
+     *   evaluate normally (no manual flag flip). Use this for architecture-first authoring:
+     *   components declared before any code exists.
+     */
+    readonly empty?: EmptyPolicy;
+};
+export type ComponentsInput = Record<string, ComponentDeclaration>;
+type ReservedFactoryName = 'arch' | 'metrics' | 'gates' | 'security' | 'custom';
+/** Forces a type error at the call site of `defineProject` when a component key shadows a
+ * reserved factory name — the colliding key's required value type collapses to `never`. */
+type NoReservedComponentKeys<T> = {
+    readonly [K in Extract<keyof T, ReservedFactoryName>]?: never;
+};
+export type ComponentContext<T extends ComponentsInput> = ComponentContextBase<T>;
+export interface DefineProjectConfig<T extends ComponentsInput> {
+    readonly components: T & NoReservedComponentKeys<T>;
+    readonly rules?: (c: ComponentContext<T>) => readonly RuleBuilder[];
+}
+/**
+ * `rules` is optional — `defineProject({ components })` alone is valid; zero-DSL day-one value
+ * is unaffected by whether an architecture ruleset exists yet (ADR 002/009).
+ */
+export declare function defineProject<T extends ComponentsInput>(config: DefineProjectConfig<T>): RulesetIR;
+//# sourceMappingURL=index.d.ts.map

package/dist/dsl/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/dsl/index.ts"],"names":[],"mappings":"AAMA,OAAO,KAAK,EAAyB,WAAW,EAAwB,SAAS,EAAE,MAAM,gBAAgB,CAAC;AAE1G,OAAO,EAIL,KAAK,gBAAgB,IAAI,oBAAoB,EAE7C,KAAK,WAAW,EACjB,MAAM,gBAAgB,CAAC;AAExB,cAAc,gBAAgB,CAAC;AAC/B,cAAc,oBAAoB,CAAC;AAMnC,MAAM,MAAM,oBAAoB,GAC5B,MAAM,GACN;IACE,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB;;;;;OAKG;IACH,QAAQ,CAAC,UAAU,CAAC,EAAE,OAAO,CAAC;IAC9B;;;;;;;;;;;;OAYG;IACH,QAAQ,CAAC,KAAK,CAAC,EAAE,WAAW,CAAC;CAC9B,CAAC;AAEN,MAAM,MAAM,eAAe,GAAG,MAAM,CAAC,MAAM,EAAE,oBAAoB,CAAC,CAAC;AAwBnE,KAAK,mBAAmB,GAAG,MAAM,GAAG,SAAS,GAAG,OAAO,GAAG,UAAU,GAAG,QAAQ,CAAC;AAEhF;2FAC2F;AAC3F,KAAK,uBAAuB,CAAC,CAAC,IAAI;IAChC,QAAQ,EAAE,CAAC,IAAI,OAAO,CAAC,MAAM,CAAC,EAAE,mBAAmB,CAAC,CAAC,CAAC,EAAE,KAAK;CAC9D,CAAC;AASF,MAAM,MAAM,gBAAgB,CAAC,CAAC,SAAS,eAAe,IAAI,oBAAoB,CAAC,CAAC,CAAC,CAAC;AAMlF,MAAM,WAAW,mBAAmB,CAAC,CAAC,SAAS,eAAe;IAC5D,QAAQ,CAAC,UAAU,EAAE,CAAC,GAAG,uBAAuB,CAAC,CAAC,CAAC,CAAC;IACpD,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,EAAE,gBAAgB,CAAC,CAAC,CAAC,KAAK,SAAS,WAAW,EAAE,CAAC;CACrE;AAED;;;GAGG;AACH,wBAAgB,aAAa,CAAC,CAAC,SAAS,eAAe,EAAE,MAAM,EAAE,mBAAmB,CAAC,CAAC,CAAC,GAAG,SAAS,CA2BlG"}

package/dist/dsl/index.js

@@ -0,0 +1,67 @@
+/**
+ * Fluent authoring surface -> IR serializer (ADR 002). Exported as the `@spikedpunch/align-core/dsl` subpath
+ * — folded into `@spikedpunch/align-core` for v1 (ARCHITECTURE.md §5: single consumer, extraction to a
+ * standalone `@spikedpunch/align-dsl` package is cheap and deferred until a second consumer needs it).
+ */
+import { toComponentName, toRuleId } from '../types/branded.js';
+import { rulesetIRSchema } from '../types/ir.js';
+import { makeArchFactory, makeCustomFactory, makeSecurityFactory, } from './factories.js';
+export * from './factories.js';
+export * from './verb-manifest.js';
+function parseSelector(pattern) {
+    if (pattern.startsWith('package:')) {
+        return { kind: 'package', packageNames: [pattern.slice('package:'.length)] };
+    }
+    return { kind: 'glob', patterns: [pattern] };
+}
+function resolveComponentDefinition(name, decl) {
+    if (typeof decl === 'string') {
+        return { name, selector: parseSelector(decl), empty: 'fail' };
+    }
+    // `empty` wins if both are authored; `allowEmpty: true` alone resolves to `empty: 'allow'`
+    // (deprecated-alias back-compat — see the `ComponentDeclaration` doc comment above).
+    const empty = decl.empty ?? (decl.allowEmpty === true ? 'allow' : 'fail');
+    return { name, selector: parseSelector(decl.pattern), empty };
+}
+/**
+ * `rules` is optional — `defineProject({ components })` alone is valid; zero-DSL day-one value
+ * is unaffected by whether an architecture ruleset exists yet (ADR 002/009).
+ */
+export function defineProject(config) {
+    const componentEntries = Object.entries(config.components);
+    const components = {};
+    const tokens = {};
+    for (const [name, decl] of componentEntries) {
+        components[name] = resolveComponentDefinition(name, decl);
+        tokens[name] = { name: toComponentName(name) };
+    }
+    const context = {
+        ...tokens,
+        arch: makeArchFactory(Object.values(tokens)),
+        custom: makeCustomFactory(),
+        security: makeSecurityFactory(),
+    };
+    const builders = config.rules?.(context) ?? [];
+    const usedIds = new Set();
+    const rules = [];
+    for (const builder of builders) {
+        for (const rule of builder.build()) {
+            rules.push({ ...rule, id: dedupeRuleId(rule.id, usedIds) });
+        }
+    }
+    return rulesetIRSchema.parse({ irVersion: '1', components, rules });
+}
+/** Semantic ids (e.g. `arch.no-dependency:api->ui`) are stable across unrelated config edits;
+ * a numeric suffix is appended only on an actual collision (e.g. two `.cannotDependOn()` calls
+ * naming the same pair). */
+function dedupeRuleId(base, usedIds) {
+    let candidate = base;
+    let suffix = 2;
+    while (usedIds.has(candidate)) {
+        candidate = `${base}-${suffix}`;
+        suffix += 1;
+    }
+    usedIds.add(candidate);
+    return toRuleId(candidate);
+}
+//# sourceMappingURL=index.js.map