@spikedpunch/align-core 0.1.0

package/dist/payload/builder.js

@@ -0,0 +1,61 @@
+// Priority sort before pagination/truncation (ADR 007 rule 3): architecture > security > types >
+// lint > format. v1 only ever populates 'architecture', but the ordering contract is fixed now.
+const CATEGORY_PRIORITY = {
+    architecture: 0,
+    security: 1,
+    types: 2,
+    lint: 3,
+    format: 4,
+};
+/**
+ * Priority sort, cap-per-rule, and page the violations from a `CheckRun` into the structured-only
+ * MCP payload shape (ADR 007). Passing gates contribute counts only — never per-item text.
+ */
+export function buildMcpCheckPayload(run, options = {}) {
+    const maxPerRule = options.maxPerRule ?? 10;
+    const pageSize = options.pageSize ?? 50;
+    const offset = options.cursor === undefined ? 0 : Number.parseInt(options.cursor, 10) || 0;
+    const allViolations = run.gates.flatMap((g) => g.violations);
+    const sorted = sortViolations(allViolations);
+    const capped = capPerRule(sorted, maxPerRule);
+    const page = capped.slice(offset, offset + pageSize);
+    const hasMore = offset + pageSize < capped.length;
+    return {
+        verdict: run.verdict,
+        gates: run.gates.map((g) => ({
+            gate: g.gate,
+            status: g.status,
+            violationCount: g.violations.length,
+            baselinedCount: g.baselinedCount,
+            ...(g.passCount === undefined ? {} : { passCount: g.passCount }),
+        })),
+        violations: page,
+        ...(capped.length > pageSize ? { pagination: { cursor: String(offset + pageSize), hasMore } } : {}),
+        advisories: run.advisories,
+        ungroundedComponents: run.ungroundedComponents,
+    };
+}
+function sortViolations(violations) {
+    return [...violations].sort((a, b) => {
+        const byCategory = CATEGORY_PRIORITY[a.category] - CATEGORY_PRIORITY[b.category];
+        if (byCategory !== 0)
+            return byCategory;
+        const byRule = a.ruleId.localeCompare(b.ruleId);
+        if (byRule !== 0)
+            return byRule;
+        return a.file.localeCompare(b.file);
+    });
+}
+function capPerRule(violations, maxPerRule) {
+    const seenPerRule = new Map();
+    const out = [];
+    for (const v of violations) {
+        const count = seenPerRule.get(v.ruleId) ?? 0;
+        if (count >= maxPerRule)
+            continue;
+        seenPerRule.set(v.ruleId, count + 1);
+        out.push(v);
+    }
+    return out;
+}
+//# sourceMappingURL=builder.js.map

package/dist/payload/builder.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"builder.js","sourceRoot":"","sources":["../../src/payload/builder.ts"],"names":[],"mappings":"AAOA,iGAAiG;AACjG,gGAAgG;AAChG,MAAM,iBAAiB,GAAuC;IAC5D,YAAY,EAAE,CAAC;IACf,QAAQ,EAAE,CAAC;IACX,KAAK,EAAE,CAAC;IACR,IAAI,EAAE,CAAC;IACP,MAAM,EAAE,CAAC;CACV,CAAC;AA4BF;;;GAGG;AACH,MAAM,UAAU,oBAAoB,CAAC,GAAa,EAAE,UAAoC,EAAE;IACxF,MAAM,UAAU,GAAG,OAAO,CAAC,UAAU,IAAI,EAAE,CAAC;IAC5C,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,IAAI,EAAE,CAAC;IACxC,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC;IAE3F,MAAM,aAAa,GAAG,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC;IAC7D,MAAM,MAAM,GAAG,cAAc,CAAC,aAAa,CAAC,CAAC;IAC7C,MAAM,MAAM,GAAG,UAAU,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;IAE9C,MAAM,IAAI,GAAG,MAAM,CAAC,KAAK,CAAC,MAAM,EAAE,MAAM,GAAG,QAAQ,CAAC,CAAC;IACrD,MAAM,OAAO,GAAG,MAAM,GAAG,QAAQ,GAAG,MAAM,CAAC,MAAM,CAAC;IAElD,OAAO;QACL,OAAO,EAAE,GAAG,CAAC,OAAO;QACpB,KAAK,EAAE,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YAC3B,IAAI,EAAE,CAAC,CAAC,IAAI;YACZ,MAAM,EAAE,CAAC,CAAC,MAAM;YAChB,cAAc,EAAE,CAAC,CAAC,UAAU,CAAC,MAAM;YACnC,cAAc,EAAE,CAAC,CAAC,cAAc;YAChC,GAAG,CAAC,CAAC,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,SAAS,EAAE,CAAC;SACjE,CAAC,CAAC;QACH,UAAU,EAAE,IAAI;QAChB,GAAG,CAAC,MAAM,CAAC,MAAM,GAAG,QAAQ,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,GAAG,QAAQ,CAAC,EAAE,OAAO,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACnG,UAAU,EAAE,GAAG,CAAC,UAAU;QAC1B,oBAAoB,EAAE,GAAG,CAAC,oBAAoB;KAC/C,CAAC;AACJ,CAAC;AAED,SAAS,cAAc,CAAC,UAAgC;IACtD,OAAO,CAAC,GAAG,UAAU,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE;QACnC,MAAM,UAAU,GAAG,iBAAiB,CAAC,CAAC,CAAC,QAAQ,CAAC,GAAG,iBAAiB,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC;QACjF,IAAI,UAAU,KAAK,CAAC;YAAE,OAAO,UAAU,CAAC;QACxC,MAAM,MAAM,GAAG,CAAC,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;QAChD,IAAI,MAAM,KAAK,CAAC;YAAE,OAAO,MAAM,CAAC;QAChC,OAAO,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;IACtC,CAAC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,UAAU,CAAC,UAAgC,EAAE,UAAkB;IACtE,MAAM,WAAW,GAAG,IAAI,GAAG,EAAkB,CAAC;IAC9C,MAAM,GAAG,GAAgB,EAAE,CAAC;IAC5B,KAAK,MAAM,CAAC,IAAI,UAAU,EAAE,CAAC;QAC3B,MAAM,KAAK,GAAG,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QAC7C,IAAI,KAAK,IAAI,UAAU;YAAE,SAAS;QAClC,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC;QACrC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACd,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC"}

package/dist/payload/mermaid.d.ts

@@ -0,0 +1,22 @@
+import type { Violation } from '../types/violation.js';
+/**
+ * Fenced Mermaid `graph LR` diagram for one architecture violation instance — an `explain`-only
+ * surface (ADR 007: pull-on-demand prose/diagram, never included in the terse `align_check` /
+ * `align_violations` machine payloads). One violation's diagram, not the whole rule's violation
+ * set — explain answers "why did THIS fire and how do I read it", not a full survey.
+ *
+ * - `no-cycles`: the cycle's chain, with the suggested break edge drawn as a dashed link labeled
+ *   `BREAK: <specifier>` instead of a normal solid arrow.
+ * - `no-dependency` / `layers`: the two-node offending edge, component/layer names alongside the
+ *   concrete files, labeled with the forbidden specifier.
+ * - `metric`: a single node (there is no offending edge — the violation is file-level, not
+ *   import-direction-level) labeled with the component, file, and measured-vs-max lines.
+ * - `custom`: a single node (a host predicate's violation is whatever shape the predicate chose —
+ *   there's no structural edge/chain align itself derived) labeled with the file and the
+ *   predicate's own message.
+ * - `manifest-source-hygiene` / `manifest-new-dependency`: a single node (ADR 013 — the manifest
+ *   scan domain has no import-graph edges to draw) labeled with the declaring manifest, the
+ *   dependency name, and its specifier.
+ */
+export declare function buildViolationMermaid(violation: Violation): string;
+//# sourceMappingURL=mermaid.d.ts.map

package/dist/payload/mermaid.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"mermaid.d.ts","sourceRoot":"","sources":["../../src/payload/mermaid.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAa,SAAS,EAAE,MAAM,uBAAuB,CAAC;AAElE;;;;;;;;;;;;;;;;;;GAkBG;AACH,wBAAgB,qBAAqB,CAAC,SAAS,EAAE,SAAS,GAAG,MAAM,CAuBlE"}

package/dist/payload/mermaid.js

@@ -0,0 +1,89 @@
+/**
+ * Fenced Mermaid `graph LR` diagram for one architecture violation instance — an `explain`-only
+ * surface (ADR 007: pull-on-demand prose/diagram, never included in the terse `align_check` /
+ * `align_violations` machine payloads). One violation's diagram, not the whole rule's violation
+ * set — explain answers "why did THIS fire and how do I read it", not a full survey.
+ *
+ * - `no-cycles`: the cycle's chain, with the suggested break edge drawn as a dashed link labeled
+ *   `BREAK: <specifier>` instead of a normal solid arrow.
+ * - `no-dependency` / `layers`: the two-node offending edge, component/layer names alongside the
+ *   concrete files, labeled with the forbidden specifier.
+ * - `metric`: a single node (there is no offending edge — the violation is file-level, not
+ *   import-direction-level) labeled with the component, file, and measured-vs-max lines.
+ * - `custom`: a single node (a host predicate's violation is whatever shape the predicate chose —
+ *   there's no structural edge/chain align itself derived) labeled with the file and the
+ *   predicate's own message.
+ * - `manifest-source-hygiene` / `manifest-new-dependency`: a single node (ADR 013 — the manifest
+ *   scan domain has no import-graph edges to draw) labeled with the declaring manifest, the
+ *   dependency name, and its specifier.
+ */
+export function buildViolationMermaid(violation) {
+    switch (violation.kind) {
+        case 'no-cycles':
+            return fence(cycleDiagram(violation.chain, violation.suggestedBreakEdge));
+        case 'no-dependency':
+            return fence(edgeDiagram(violation.fromComponent, violation.fromFile, violation.toComponent, violation.toFile, violation.specifier));
+        case 'layers':
+            return fence(edgeDiagram(violation.fromLayer, violation.fromFile, violation.toLayer, violation.toFile, violation.specifier));
+        case 'metric':
+            return fence(metricDiagram(violation.component, violation.file, violation.value, violation.threshold));
+        case 'custom':
+            return fence(customDiagram(violation.file, violation.hostRuleName, violation.detail));
+        case 'manifest-source-hygiene':
+            return fence(manifestDiagram(violation.file, violation.depName, violation.specifier));
+        case 'manifest-new-dependency':
+            return fence(manifestDiagram(violation.file, violation.depName, violation.specifier));
+        default: {
+            const exhaustive = violation;
+            throw new Error(`unhandled violation kind: ${JSON.stringify(exhaustive)}`);
+        }
+    }
+}
+function fence(body) {
+    return `\`\`\`mermaid\n${body}\n\`\`\``;
+}
+function cycleDiagram(chain, suggestedBreakEdge) {
+    const ids = new Map();
+    const lines = ['graph LR'];
+    const idFor = (file) => {
+        const existing = ids.get(file);
+        if (existing !== undefined)
+            return existing;
+        const id = `n${ids.size}`;
+        ids.set(file, id);
+        lines.push(`  ${id}["${escapeLabel(file)}"]`);
+        return id;
+    };
+    for (const hop of chain) {
+        const fromId = idFor(hop.from);
+        const toId = idFor(hop.to);
+        lines.push(sameEdge(hop, suggestedBreakEdge)
+            ? `  ${fromId} -. "BREAK: ${escapeLabel(hop.specifier)}" .-> ${toId}`
+            : `  ${fromId} -->|"${escapeLabel(hop.specifier)}"| ${toId}`);
+    }
+    return lines.join('\n');
+}
+function sameEdge(a, b) {
+    return a.from === b.from && a.to === b.to && a.specifier === b.specifier;
+}
+function edgeDiagram(fromLabel, fromFile, toLabel, toFile, specifier) {
+    return [
+        'graph LR',
+        `  a["${escapeLabel(fromLabel)}<br/>${escapeLabel(fromFile)}"]`,
+        `  b["${escapeLabel(toLabel)}<br/>${escapeLabel(toFile)}"]`,
+        `  a -->|"${escapeLabel(specifier)} (forbidden)"| b`,
+    ].join('\n');
+}
+function metricDiagram(component, file, value, threshold) {
+    return ['graph LR', `  a["${escapeLabel(component)}<br/>${escapeLabel(file)}<br/>${value} lines (max ${threshold})"]`].join('\n');
+}
+function customDiagram(file, hostRuleName, detail) {
+    return ['graph LR', `  a["${escapeLabel(file)}<br/>predicate: ${escapeLabel(hostRuleName)}<br/>${escapeLabel(detail)}"]`].join('\n');
+}
+function manifestDiagram(file, depName, specifier) {
+    return ['graph LR', `  a["${escapeLabel(file)}<br/>${escapeLabel(depName)}: ${escapeLabel(specifier)}"]`].join('\n');
+}
+function escapeLabel(s) {
+    return s.replace(/"/g, '\\"');
+}
+//# sourceMappingURL=mermaid.js.map

package/dist/payload/mermaid.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"mermaid.js","sourceRoot":"","sources":["../../src/payload/mermaid.ts"],"names":[],"mappings":"AAEA;;;;;;;;;;;;;;;;;;GAkBG;AACH,MAAM,UAAU,qBAAqB,CAAC,SAAoB;IACxD,QAAQ,SAAS,CAAC,IAAI,EAAE,CAAC;QACvB,KAAK,WAAW;YACd,OAAO,KAAK,CAAC,YAAY,CAAC,SAAS,CAAC,KAAK,EAAE,SAAS,CAAC,kBAAkB,CAAC,CAAC,CAAC;QAC5E,KAAK,eAAe;YAClB,OAAO,KAAK,CACV,WAAW,CAAC,SAAS,CAAC,aAAa,EAAE,SAAS,CAAC,QAAQ,EAAE,SAAS,CAAC,WAAW,EAAE,SAAS,CAAC,MAAM,EAAE,SAAS,CAAC,SAAS,CAAC,CACvH,CAAC;QACJ,KAAK,QAAQ;YACX,OAAO,KAAK,CAAC,WAAW,CAAC,SAAS,CAAC,SAAS,EAAE,SAAS,CAAC,QAAQ,EAAE,SAAS,CAAC,OAAO,EAAE,SAAS,CAAC,MAAM,EAAE,SAAS,CAAC,SAAS,CAAC,CAAC,CAAC;QAC/H,KAAK,QAAQ;YACX,OAAO,KAAK,CAAC,aAAa,CAAC,SAAS,CAAC,SAAS,EAAE,SAAS,CAAC,IAAI,EAAE,SAAS,CAAC,KAAK,EAAE,SAAS,CAAC,SAAS,CAAC,CAAC,CAAC;QACzG,KAAK,QAAQ;YACX,OAAO,KAAK,CAAC,aAAa,CAAC,SAAS,CAAC,IAAI,EAAE,SAAS,CAAC,YAAY,EAAE,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC;QACxF,KAAK,yBAAyB;YAC5B,OAAO,KAAK,CAAC,eAAe,CAAC,SAAS,CAAC,IAAI,EAAE,SAAS,CAAC,OAAO,EAAE,SAAS,CAAC,SAAS,CAAC,CAAC,CAAC;QACxF,KAAK,yBAAyB;YAC5B,OAAO,KAAK,CAAC,eAAe,CAAC,SAAS,CAAC,IAAI,EAAE,SAAS,CAAC,OAAO,EAAE,SAAS,CAAC,SAAS,CAAC,CAAC,CAAC;QACxF,OAAO,CAAC,CAAC,CAAC;YACR,MAAM,UAAU,GAAU,SAAS,CAAC;YACpC,MAAM,IAAI,KAAK,CAAC,6BAA6B,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC;QAC7E,CAAC;IACH,CAAC;AACH,CAAC;AAED,SAAS,KAAK,CAAC,IAAY;IACzB,OAAO,kBAAkB,IAAI,UAAU,CAAC;AAC1C,CAAC;AAED,SAAS,YAAY,CAAC,KAA2B,EAAE,kBAA6B;IAC9E,MAAM,GAAG,GAAG,IAAI,GAAG,EAAkB,CAAC;IACtC,MAAM,KAAK,GAAa,CAAC,UAAU,CAAC,CAAC;IAErC,MAAM,KAAK,GAAG,CAAC,IAAY,EAAU,EAAE;QACrC,MAAM,QAAQ,GAAG,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAC/B,IAAI,QAAQ,KAAK,SAAS;YAAE,OAAO,QAAQ,CAAC;QAC5C,MAAM,EAAE,GAAG,IAAI,GAAG,CAAC,IAAI,EAAE,CAAC;QAC1B,GAAG,CAAC,GAAG,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;QAClB,KAAK,CAAC,IAAI,CAAC,KAAK,EAAE,KAAK,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC9C,OAAO,EAAE,CAAC;IACZ,CAAC,CAAC;IAEF,KAAK,MAAM,GAAG,IAAI,KAAK,EAAE,CAAC;QACxB,MAAM,MAAM,GAAG,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAC/B,MAAM,IAAI,GAAG,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAC3B,KAAK,CAAC,IAAI,CACR,QAAQ,CAAC,GAAG,EAAE,kBAAkB,CAAC;YAC/B,CAAC,CAAC,KAAK,MAAM,eAAe,WAAW,CAAC,GAAG,CAAC,SAAS,CAAC,SAAS,IAAI,EAAE;YACrE,CAAC,CAAC,KAAK,MAAM,SAAS,WAAW,CAAC,GAAG,CAAC,SAAS,CAAC,MAAM,IAAI,EAAE,CAC/D,CAAC;IACJ,CAAC;IACD,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC1B,CAAC;AAED,SAAS,QAAQ,CAAC,CAAY,EAAE,CAAY;IAC1C,OAAO,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,SAAS,KAAK,CAAC,CAAC,SAAS,CAAC;AAC3E,CAAC;AAED,SAAS,WAAW,CAAC,SAAiB,EAAE,QAAgB,EAAE,OAAe,EAAE,MAAc,EAAE,SAAiB;IAC1G,OAAO;QACL,UAAU;QACV,QAAQ,WAAW,CAAC,SAAS,CAAC,QAAQ,WAAW,CAAC,QAAQ,CAAC,IAAI;QAC/D,QAAQ,WAAW,CAAC,OAAO,CAAC,QAAQ,WAAW,CAAC,MAAM,CAAC,IAAI;QAC3D,YAAY,WAAW,CAAC,SAAS,CAAC,kBAAkB;KACrD,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACf,CAAC;AAED,SAAS,aAAa,CAAC,SAAiB,EAAE,IAAY,EAAE,KAAa,EAAE,SAAiB;IACtF,OAAO,CAAC,UAAU,EAAE,QAAQ,WAAW,CAAC,SAAS,CAAC,QAAQ,WAAW,CAAC,IAAI,CAAC,QAAQ,KAAK,eAAe,SAAS,KAAK,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACpI,CAAC;AAED,SAAS,aAAa,CAAC,IAAY,EAAE,YAAoB,EAAE,MAAc;IACvE,OAAO,CAAC,UAAU,EAAE,QAAQ,WAAW,CAAC,IAAI,CAAC,mBAAmB,WAAW,CAAC,YAAY,CAAC,QAAQ,WAAW,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACvI,CAAC;AAED,SAAS,eAAe,CAAC,IAAY,EAAE,OAAe,EAAE,SAAiB;IACvE,OAAO,CAAC,UAAU,EAAE,QAAQ,WAAW,CAAC,IAAI,CAAC,QAAQ,WAAW,CAAC,OAAO,CAAC,KAAK,WAAW,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACvH,CAAC;AAED,SAAS,WAAW,CAAC,CAAS;IAC5B,OAAO,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;AAChC,CAAC"}

package/dist/plugin/registry.d.ts

@@ -0,0 +1,24 @@
+import type { RepoRelativePath } from '../types/branded.js';
+import type { Scanner } from '../scanner.js';
+export interface LanguagePlugin {
+    readonly id: string;
+    readonly fileMatch: readonly string[];
+    readonly scanner: Scanner;
+}
+export interface PluginRegistry {
+    getPluginForFile(file: RepoRelativePath): LanguagePlugin | undefined;
+    getAllPlugins(): readonly LanguagePlugin[];
+}
+/**
+ * v1's registry implementation is a one-element static list — no cross-plugin file-match
+ * conflict resolution, no priority ordering, no merged-graph logic across plugins. Those are
+ * real problems only a second `LanguagePlugin` creates; the interface is written generically so
+ * adding one is additive at the CLI composition root, not an interface rewrite.
+ */
+export declare class StaticPluginRegistry implements PluginRegistry {
+    private readonly plugins;
+    constructor(plugins: readonly LanguagePlugin[]);
+    getPluginForFile(file: RepoRelativePath): LanguagePlugin | undefined;
+    getAllPlugins(): readonly LanguagePlugin[];
+}
+//# sourceMappingURL=registry.d.ts.map

package/dist/plugin/registry.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"registry.d.ts","sourceRoot":"","sources":["../../src/plugin/registry.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,qBAAqB,CAAC;AAC5D,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,eAAe,CAAC;AAG7C,MAAM,WAAW,cAAc;IAC7B,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,SAAS,EAAE,SAAS,MAAM,EAAE,CAAC;IACtC,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;CAC3B;AAED,MAAM,WAAW,cAAc;IAC7B,gBAAgB,CAAC,IAAI,EAAE,gBAAgB,GAAG,cAAc,GAAG,SAAS,CAAC;IACrE,aAAa,IAAI,SAAS,cAAc,EAAE,CAAC;CAC5C;AAED;;;;;GAKG;AACH,qBAAa,oBAAqB,YAAW,cAAc;IAC7C,OAAO,CAAC,QAAQ,CAAC,OAAO;gBAAP,OAAO,EAAE,SAAS,cAAc,EAAE;IAE/D,gBAAgB,CAAC,IAAI,EAAE,gBAAgB,GAAG,cAAc,GAAG,SAAS;IAOpE,aAAa,IAAI,SAAS,cAAc,EAAE;CAG3C"}

package/dist/plugin/registry.js

@@ -0,0 +1,24 @@
+import { globMatch } from '../components/glob.js';
+/**
+ * v1's registry implementation is a one-element static list — no cross-plugin file-match
+ * conflict resolution, no priority ordering, no merged-graph logic across plugins. Those are
+ * real problems only a second `LanguagePlugin` creates; the interface is written generically so
+ * adding one is additive at the CLI composition root, not an interface rewrite.
+ */
+export class StaticPluginRegistry {
+    plugins;
+    constructor(plugins) {
+        this.plugins = plugins;
+    }
+    getPluginForFile(file) {
+        for (const plugin of this.plugins) {
+            if (plugin.fileMatch.some((pattern) => globMatch(pattern, file)))
+                return plugin;
+        }
+        return undefined;
+    }
+    getAllPlugins() {
+        return this.plugins;
+    }
+}
+//# sourceMappingURL=registry.js.map

package/dist/plugin/registry.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"registry.js","sourceRoot":"","sources":["../../src/plugin/registry.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,SAAS,EAAE,MAAM,uBAAuB,CAAC;AAalD;;;;;GAKG;AACH,MAAM,OAAO,oBAAoB;IACF;IAA7B,YAA6B,OAAkC;QAAlC,YAAO,GAAP,OAAO,CAA2B;IAAG,CAAC;IAEnE,gBAAgB,CAAC,IAAsB;QACrC,KAAK,MAAM,MAAM,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;YAClC,IAAI,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,SAAS,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;gBAAE,OAAO,MAAM,CAAC;QAClF,CAAC;QACD,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,aAAa;QACX,OAAO,IAAI,CAAC,OAAO,CAAC;IACtB,CAAC;CACF"}

package/dist/rules/component-refs.d.ts

@@ -0,0 +1,26 @@
+import type { ComponentName } from '../types/branded.js';
+import type { ComponentDefinitionIR, RuleIR } from '../types/ir.js';
+/** Thrown when a rule (hand-authored in `align.config.ts` or machine-written in
+ * `.align/generated-rules.json`) references a component name absent from the current components
+ * registry — a config-load-time hard error (ADR 003's empty-selector-fails-by-default doctrine
+ * extended to the symmetric case: a *ComponentRef* naming a component that no longer exists).
+ * Without this check, `evaluateRule` (`rules/evaluators.ts`) simply never matches a component
+ * name absent from the graph, so the rule silently evaluates to zero violations — a false-green,
+ * severity-zero bug class (ARCHITECTURE.md's stated invariant), most commonly triggered by a
+ * component rename/removal in `align.config.ts` leaving a stale reference behind in generated
+ * or hand-authored rules. */
+export declare class UnknownComponentRefError extends Error {
+    readonly ruleId: string;
+    readonly componentName: string;
+    constructor(ruleId: string, componentName: string);
+}
+/**
+ * Load-time validation (companion to `components/registry.ts`'s `validateComponents`, which
+ * checks components against files; this checks rules against components): every `ComponentRef`
+ * embedded in every rule — merged generated + hand-authored alike, since both share one
+ * `RuleIR[]` by the time this runs (`build/merge.ts`) — must name a component present in the
+ * registry. Throws `UnknownComponentRefError` on the first offender found (fail-fast, same
+ * convention as `validateComponents`), not a collected list — one bad ref is enough to halt.
+ */
+export declare function validateRuleComponentRefs(rules: readonly RuleIR[], components: Readonly<Record<ComponentName, ComponentDefinitionIR>>): void;
+//# sourceMappingURL=component-refs.d.ts.map

package/dist/rules/component-refs.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"component-refs.d.ts","sourceRoot":"","sources":["../../src/rules/component-refs.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AACzD,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,EAAE,MAAM,gBAAgB,CAAC;AAEpE;;;;;;;;6BAQ6B;AAC7B,qBAAa,wBAAyB,SAAQ,KAAK;aAI/B,MAAM,EAAE,MAAM;aACd,aAAa,EAAE,MAAM;gBADrB,MAAM,EAAE,MAAM,EACd,aAAa,EAAE,MAAM;CAUxC;AAwCD;;;;;;;GAOG;AACH,wBAAgB,yBAAyB,CACvC,KAAK,EAAE,SAAS,MAAM,EAAE,EACxB,UAAU,EAAE,QAAQ,CAAC,MAAM,CAAC,aAAa,EAAE,qBAAqB,CAAC,CAAC,GACjE,IAAI,CAQN"}

package/dist/rules/component-refs.js

@@ -0,0 +1,81 @@
+/** Thrown when a rule (hand-authored in `align.config.ts` or machine-written in
+ * `.align/generated-rules.json`) references a component name absent from the current components
+ * registry — a config-load-time hard error (ADR 003's empty-selector-fails-by-default doctrine
+ * extended to the symmetric case: a *ComponentRef* naming a component that no longer exists).
+ * Without this check, `evaluateRule` (`rules/evaluators.ts`) simply never matches a component
+ * name absent from the graph, so the rule silently evaluates to zero violations — a false-green,
+ * severity-zero bug class (ARCHITECTURE.md's stated invariant), most commonly triggered by a
+ * component rename/removal in `align.config.ts` leaving a stale reference behind in generated
+ * or hand-authored rules. */
+export class UnknownComponentRefError extends Error {
+    ruleId;
+    componentName;
+    constructor(
+    // Matches `RuleIR['id']`'s actual (unbranded) type — same convention as
+    // `GeneratedRuleCollisionError` in `build/merge.ts`.
+    ruleId, componentName) {
+        super(`Rule '${ruleId}' references unknown component '${componentName}', which is not defined in ` +
+            `the components registry. Likely cause: the component was renamed or removed since this rule ` +
+            `was written — if this is a generated rule, re-run \`align build\` to refresh ` +
+            `.align/generated-rules.json; if hand-authored, update align.config.ts.`);
+        this.ruleId = ruleId;
+        this.componentName = componentName;
+        this.name = 'UnknownComponentRefError';
+    }
+}
+/** Every `ComponentRef` a rule embeds, in a fixed, deterministic order — one generator per IR
+ * kind, exhaustively switched (a new `RuleIR` kind missing a case here is a compile error, same
+ * discipline as `evaluateRule`'s dispatcher). `custom.host` carries no `ComponentRef` — it
+ * references a host predicate by name (`hostRuleName`), validated by `rules/host-rules.ts`'s
+ * `validateHostRules`, not by this component-reference guard. */
+function* componentRefsOf(rule) {
+    switch (rule.kind) {
+        case 'arch.no-dependency':
+            yield rule.from;
+            yield rule.to;
+            return;
+        case 'arch.no-cycles':
+            if (rule.scope !== 'repo')
+                yield rule.scope;
+            return;
+        case 'arch.layers':
+            for (const layerDef of rule.layers) {
+                yield layerDef.layer;
+                yield* layerDef.canDependOn;
+            }
+            return;
+        case 'arch.metric':
+            yield rule.target;
+            return;
+        case 'custom.host':
+            return;
+        // `security.manifest.*` (ADR 013) carries no `ComponentRef` — the manifest scan domain has no
+        // notion of align's file-classified components (same no-op shape as `custom.host`, which
+        // references a host predicate by name instead).
+        case 'security.manifest.source-hygiene':
+        case 'security.manifest.new-dependency':
+            return;
+        default: {
+            const exhaustive = rule;
+            throw new Error(`unhandled rule kind: ${JSON.stringify(exhaustive)}`);
+        }
+    }
+}
+/**
+ * Load-time validation (companion to `components/registry.ts`'s `validateComponents`, which
+ * checks components against files; this checks rules against components): every `ComponentRef`
+ * embedded in every rule — merged generated + hand-authored alike, since both share one
+ * `RuleIR[]` by the time this runs (`build/merge.ts`) — must name a component present in the
+ * registry. Throws `UnknownComponentRefError` on the first offender found (fail-fast, same
+ * convention as `validateComponents`), not a collected list — one bad ref is enough to halt.
+ */
+export function validateRuleComponentRefs(rules, components) {
+    for (const rule of rules) {
+        for (const ref of componentRefsOf(rule)) {
+            if (!(ref in components)) {
+                throw new UnknownComponentRefError(rule.id, ref);
+            }
+        }
+    }
+}
+//# sourceMappingURL=component-refs.js.map

package/dist/rules/component-refs.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"component-refs.js","sourceRoot":"","sources":["../../src/rules/component-refs.ts"],"names":[],"mappings":"AAGA;;;;;;;;6BAQ6B;AAC7B,MAAM,OAAO,wBAAyB,SAAQ,KAAK;IAI/B;IACA;IAJlB;IACE,wEAAwE;IACxE,qDAAqD;IACrC,MAAc,EACd,aAAqB;QAErC,KAAK,CACH,SAAS,MAAM,mCAAmC,aAAa,6BAA6B;YAC1F,8FAA8F;YAC9F,+EAA+E;YAC/E,wEAAwE,CAC3E,CAAC;QARc,WAAM,GAAN,MAAM,CAAQ;QACd,kBAAa,GAAb,aAAa,CAAQ;QAQrC,IAAI,CAAC,IAAI,GAAG,0BAA0B,CAAC;IACzC,CAAC;CACF;AAED;;;;iEAIiE;AACjE,QAAQ,CAAC,CAAC,eAAe,CAAC,IAAY;IACpC,QAAQ,IAAI,CAAC,IAAI,EAAE,CAAC;QAClB,KAAK,oBAAoB;YACvB,MAAM,IAAI,CAAC,IAAI,CAAC;YAChB,MAAM,IAAI,CAAC,EAAE,CAAC;YACd,OAAO;QACT,KAAK,gBAAgB;YACnB,IAAI,IAAI,CAAC,KAAK,KAAK,MAAM;gBAAE,MAAM,IAAI,CAAC,KAAK,CAAC;YAC5C,OAAO;QACT,KAAK,aAAa;YAChB,KAAK,MAAM,QAAQ,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;gBACnC,MAAM,QAAQ,CAAC,KAAK,CAAC;gBACrB,KAAK,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC;YAC9B,CAAC;YACD,OAAO;QACT,KAAK,aAAa;YAChB,MAAM,IAAI,CAAC,MAAM,CAAC;YAClB,OAAO;QACT,KAAK,aAAa;YAChB,OAAO;QACT,8FAA8F;QAC9F,yFAAyF;QACzF,gDAAgD;QAChD,KAAK,kCAAkC,CAAC;QACxC,KAAK,kCAAkC;YACrC,OAAO;QACT,OAAO,CAAC,CAAC,CAAC;YACR,MAAM,UAAU,GAAU,IAAI,CAAC;YAC/B,MAAM,IAAI,KAAK,CAAC,wBAAwB,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC;QACxE,CAAC;IACH,CAAC;AACH,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,yBAAyB,CACvC,KAAwB,EACxB,UAAkE;IAElE,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,KAAK,MAAM,GAAG,IAAI,eAAe,CAAC,IAAI,CAAC,EAAE,CAAC;YACxC,IAAI,CAAC,CAAC,GAAG,IAAI,UAAU,CAAC,EAAE,CAAC;gBACzB,MAAM,IAAI,wBAAwB,CAAC,IAAI,CAAC,EAAE,EAAE,GAAG,CAAC,CAAC;YACnD,CAAC;QACH,CAAC;IACH,CAAC;AACH,CAAC"}

package/dist/rules/evaluators.d.ts

@@ -0,0 +1,50 @@
+import type { ComponentName } from '../types/branded.js';
+import type { ArchLayersRule, ArchMetricRule, ArchNoCyclesRule, ArchNoDependencyRule, ComponentDefinitionIR, RuleIR } from '../types/ir.js';
+import type { DependencyGraph } from '../types/graph.js';
+import type { Violation } from '../types/violation.js';
+import { type HostPredicateRegistry } from './host-rules.js';
+/**
+ * Pure function: (rule, graph, components) -> violations. No I/O, no mutation, fully testable
+ * with plain data (CODING_BEST_PRACTICES.md §14). One evaluator per RuleIR kind; `evaluateRule`
+ * dispatches by `kind` through an exhaustive switch so a new IR kind missing an evaluator is a
+ * compile error, not a silent no-op.
+ */
+export type RuleEvaluator<TRule extends RuleIR = RuleIR> = (rule: TRule, graph: DependencyGraph, components: Readonly<Record<ComponentName, ComponentDefinitionIR>>) => readonly Violation[];
+export declare function becauseField(because: string | undefined): {
+    readonly because: string;
+} | Record<string, never>;
+export declare const evaluateNoDependency: RuleEvaluator<ArchNoDependencyRule>;
+export declare const evaluateNoCycles: RuleEvaluator<ArchNoCyclesRule>;
+export declare const evaluateLayers: RuleEvaluator<ArchLayersRule>;
+/**
+ * `arch.metric` (max-LOC only, promoted 2026-07-12 on kluster ruleset evidence —
+ * IMPLEMENTATION_PLAN.md's Promotion log: two 2,100+-line files were structurally invisible to
+ * every dependency/cycle rule). One violation per file classified to `rule.target` whose `loc`
+ * exceeds `rule.max` — `loc` is already on every `DependencyGraphNode` (no new scanning).
+ */
+export declare const evaluateMetric: RuleEvaluator<ArchMetricRule>;
+/**
+ * Exhaustive dispatcher: a new `RuleIR` discriminant without a case here is a compile error
+ * (never-check, CODING_BEST_PRACTICES.md §17.2), not a silent no-op.
+ *
+ * `hostPredicates` defaults to the empty registry — every `arch.*` evaluator ignores it entirely
+ * (they never took it before registration existed); only `custom.host` reads it. A predicate that
+ * throws propagates out of this function uncaught (`HostPredicateExecutionError`) exactly like a
+ * malformed rule would — the orchestrator's evaluation-loop guard is what turns that into gate
+ * `error` (`orchestrator.ts`), not this function, which stays a pure dispatcher.
+ *
+ * `security.manifest.*` kinds (ADR 013) return `[]` here, deliberately: this dispatcher only ever
+ * receives a `DependencyGraph` (TS-source scan output), and manifest rules evaluate against a
+ * disjoint scan domain (`ManifestInventory`) that this function never has access to. They are real
+ * `RuleIR` members (needed so the DSL/tier-2/build pipeline can author and round-trip them), but
+ * their actual evaluation always goes through `evaluateManifestRule`
+ * (`rules/manifest-evaluators.ts`) against real manifest data — `GateOrchestrator`'s `security` gate
+ * calls it directly and never routes these kinds through this function (`ruleCategoryOf` partitions
+ * `RulesetIR.rules` before either dispatcher runs, `rules/rule-category.ts`). Returning `[]` here
+ * (rather than throwing) keeps `align build`/`align explain`'s generic graph-based preview paths
+ * working without a manifest scan available to them — see ADR 013's follow-up ladder for the known
+ * gap this leaves (their impact-delta preview under-reports manifest-rule violations; `align check`
+ * remains authoritative).
+ */
+export declare function evaluateRule(rule: RuleIR, graph: DependencyGraph, components: Readonly<Record<ComponentName, ComponentDefinitionIR>>, hostPredicates?: HostPredicateRegistry): readonly Violation[];
+//# sourceMappingURL=evaluators.d.ts.map

package/dist/rules/evaluators.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"evaluators.d.ts","sourceRoot":"","sources":["../../src/rules/evaluators.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAoB,MAAM,qBAAqB,CAAC;AAE3E,OAAO,KAAK,EAAE,cAAc,EAAE,cAAc,EAAE,gBAAgB,EAAE,oBAAoB,EAAE,qBAAqB,EAAE,MAAM,EAAE,MAAM,gBAAgB,CAAC;AAC5I,OAAO,KAAK,EAAE,eAAe,EAAiC,MAAM,mBAAmB,CAAC;AACxF,OAAO,KAAK,EAAa,SAAS,EAAE,MAAM,uBAAuB,CAAC;AAGlE,OAAO,EAAsB,KAAK,qBAAqB,EAAE,MAAM,iBAAiB,CAAC;AAQjF;;;;;GAKG;AACH,MAAM,MAAM,aAAa,CAAC,KAAK,SAAS,MAAM,GAAG,MAAM,IAAI,CACzD,IAAI,EAAE,KAAK,EACX,KAAK,EAAE,eAAe,EACtB,UAAU,EAAE,QAAQ,CAAC,MAAM,CAAC,aAAa,EAAE,qBAAqB,CAAC,CAAC,KAC/D,SAAS,SAAS,EAAE,CAAC;AAO1B,wBAAgB,YAAY,CAAC,OAAO,EAAE,MAAM,GAAG,SAAS,GAAG;IAAE,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;CAAE,GAAG,MAAM,CAAC,MAAM,EAAE,KAAK,CAAC,CAE9G;AAED,eAAO,MAAM,oBAAoB,EAAE,aAAa,CAAC,oBAAoB,CA8BpE,CAAC;AAKF,eAAO,MAAM,gBAAgB,EAAE,aAAa,CAAC,gBAAgB,CA+D5D,CAAC;AAEF,eAAO,MAAM,cAAc,EAAE,aAAa,CAAC,cAAc,CAoCxD,CAAC;AAEF;;;;;GAKG;AACH,eAAO,MAAM,cAAc,EAAE,aAAa,CAAC,cAAc,CAyBxD,CAAC;AAEF;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,wBAAgB,YAAY,CAC1B,IAAI,EAAE,MAAM,EACZ,KAAK,EAAE,eAAe,EACtB,UAAU,EAAE,QAAQ,CAAC,MAAM,CAAC,aAAa,EAAE,qBAAqB,CAAC,CAAC,EAClE,cAAc,GAAE,qBAA0C,GACzD,SAAS,SAAS,EAAE,CAoBtB"}