@starci/eslint-canon-fe 9.14.4 → 9.15.1

package/CHANGELOG.md

@@ -1,5 +1,13 @@
 # Changelog
 
+## 9.15.1 - 2026-11-05
+
+- Fixed (FE-PACKAGES-2): the package config (`starciFePackagesConfig` and `scopeToPackages`, which the Grammar family's `...PackagesConfig` reads) covered only `packages/*/src/workbench/**` and `src/public/**`, and the back-end package config takes no `.tsx`, so a `.tsx` file anywhere else in a root package (a `src/client/` renderer of a block library) matched no config and was never linted. `PACKAGE_SOURCE_FILES` now also lists `packages/*/src/**/*.tsx`: every React file of a package source gets the front-end canon and the Grammar family rules, as the files of `fe/packages` do. The workbench contract stays back end; a plain `.ts` file outside the two subpaths stays the back-end canon's.
+
+## 9.15.0 - 2026-11-05
+
+- Changed (decision release-only-what-changed): the canon reads the @starci/hfs runtime from the installed hfs at run time, which it peers by `~5.13.0`, and bundles no copy; `runtime/` keeps only the project graph rule, the jsdoc, sonar and next helpers and the package-scripts template, and the stale forks (slots 3.13.0) are gone.
+
 ## 9.14.4 - 2026-11-05
 
 - Changed: the runtime copy of the canon pins gives the Grammar family its same-minor range (decision grammar-patch-range) and names `@starci/hfs` 5.12.0 and the Grammar family 0.22.0.

package/dist/comments.js

@@ -13,7 +13,7 @@
  * IS the other language, and a fixture reproducing a real string has to reproduce it exactly. A
  * judgement-based exception would be argued per file forever. The Vietnamese rule has no placement exemption at all.
  */
-import { hasSecondLanguage } from "#runtime/scripts/lib/language.mjs";
+import { hasSecondLanguage } from "@starci/hfs/runtime/scripts/lib/language.mjs";
 import { jsdocBefore } from "#runtime/scripts/lib/jsdoc.mjs";
 import { defineRule } from "./lib/rule.js";
 import { fileOf, inSlot } from "./lib/scope.js";

package/dist/explicit-surface.js

@@ -8,7 +8,7 @@
  * cache reads (`declarationSurface` of the bundled runtime), so the rule reports exactly the files the cache counts as open.
  */
 import ts from "typescript";
-import { explicitSurfaceRule } from "#runtime/scripts/hfs/explicit-surface-rule.mjs";
+import { explicitSurfaceRule } from "@starci/hfs/runtime/scripts/hfs/explicit-surface-rule.mjs";
 /** The rules this law contributes to the plugin. */
 export const rules = {
     "explicit-export-surface": explicitSurfaceRule({ ts }),

package/dist/index.js

@@ -8,7 +8,7 @@
  * Published IDs identify their owning law. Namespace migrations are explicit in the removed-vocabulary
  * catalog; compatibility aliases cannot create a second owner for a rule.
  */
-import { packEslintConfigs } from "#runtime/scripts/lib/rule-packs.mjs";
+import { packEslintConfigs } from "@starci/hfs/runtime/scripts/lib/rule-packs.mjs";
 import { createRequire } from "node:module";
 import { join } from "node:path";
 import { pathToFileURL } from "node:url";

package/dist/lib/config.d.ts

@@ -88,7 +88,7 @@ export declare const buildPlainSourceConfig: ({ root, plugin, hooks, reactHooks,
     readonly sonar: SonarPlugins;
     readonly canon?: boolean;
 }) => Linter.Config[];
-/** The front-end subpaths of a root workspace package: its workbench (drawn with Grammar) and its public face; the React-free workbench contract stays back end. */
+/** The front-end files of a root workspace package: its workbench (drawn with Grammar) and its public face, and every `.tsx` file of the package source wherever it sits (a `src/client/` renderer is drawn too: FE-PACKAGES-2); the React-free workbench contract stays back end. */
 export declare const PACKAGE_SOURCE_FILES: readonly string[];
 /** What a package folder never lints: installed packages, build output, generated wire types. */
 export declare const PACKAGE_IGNORED: readonly string[];

package/dist/lib/config.js

@@ -148,8 +148,8 @@ export const buildPlainSourceConfig = ({ root, plugin, hooks, reactHooks, tsPlug
         { files: [...PLAIN_SOURCE_FILES], ignores: [...OUTSIDE_THE_SCAN_FILES], plugins: { sonarjs: sonar.sonarjs, unicorn: sonar.unicorn }, rules: sonarWayRules(sonar.sonarjs, "fe").rules },
     ];
 };
-/** The front-end subpaths of a root workspace package: its workbench (drawn with Grammar) and its public face; the React-free workbench contract stays back end. */
-export const PACKAGE_SOURCE_FILES = Object.freeze(["packages/*/src/workbench/**/*.{ts,tsx}", "packages/*/src/public/**/*.{ts,tsx}"]);
+/** The front-end files of a root workspace package: its workbench (drawn with Grammar) and its public face, and every `.tsx` file of the package source wherever it sits (a `src/client/` renderer is drawn too: FE-PACKAGES-2); the React-free workbench contract stays back end. */
+export const PACKAGE_SOURCE_FILES = Object.freeze(["packages/*/src/workbench/**/*.{ts,tsx}", "packages/*/src/public/**/*.{ts,tsx}", "packages/*/src/**/*.tsx"]);
 const PACKAGE_CONTRACT = Object.freeze(["packages/*/src/workbench/contract/**"]);
 /** What a package folder never lints: installed packages, build output, generated wire types. */
 export const PACKAGE_IGNORED = Object.freeze(["**/node_modules/**", "**/.next/**", "**/dist/**", "**/coverage/**", "**/__generated__/**"]);

package/dist/lib/fe-stack.js

@@ -9,8 +9,8 @@
  */
 import { readFileSync } from "node:fs";
 import { join } from "node:path";
-import { parseYaml } from "#runtime/engine/yaml.mjs";
-import { globExpression } from "#runtime/scripts/lib/glob.mjs";
+import { parseYaml } from "@starci/hfs/runtime/engine/yaml.mjs";
+import { globExpression } from "@starci/hfs/runtime/scripts/lib/glob.mjs";
 import { RUNTIME_ROOT } from "./package-root.js";
 const CATALOG = join(RUNTIME_ROOT, "knowledge", "hfs", "fe-stack.yaml");
 /**

package/dist/lib/hfs.js

@@ -13,16 +13,18 @@
  */
 import { dirname } from "node:path";
 import { fileURLToPath } from "node:url";
-import { declaredHfsView, declaredPackagesHfsView, openHfsView, openPackagesHfsView } from "#runtime/scripts/hfs/view.mjs";
+import { declaredHfsView, declaredPackagesHfsView, openHfsView, openPackagesHfsView } from "@starci/hfs/runtime/scripts/hfs/view.mjs";
 import { RUNTIME_ROOT } from "./package-root.js";
 const RUNTIME = RUNTIME_ROOT;
+/** The view @starci/hfs returns, read through this package's own HfsView type (the runtime object is the same; the types are declared here). */
+const asView = (view) => view;
 /**
  * The HFS view of the side whose `eslint.config.mjs` (in fe/) calls this.
  *
  * @param configUrl - `import.meta.url` of the repository's `eslint.config.mjs`.
  * @returns The frozen HFS view.
  */
-export const loadHfs = (configUrl) => openHfsView({ runtimeRoot: RUNTIME, repoRoot: dirname(fileURLToPath(configUrl)) });
+export const loadHfs = (configUrl) => asView(openHfsView({ runtimeRoot: RUNTIME, repoRoot: dirname(fileURLToPath(configUrl)) }));
 /**
  * The HFS view of the fe side of an in-memory app declaration, for rule tests.
  *
@@ -30,7 +32,7 @@ export const loadHfs = (configUrl) => openHfsView({ runtimeRoot: RUNTIME, repoRo
  * @param repoRoot - The absolute fe side folder the linted filenames live under.
  * @returns The frozen HFS view.
  */
-export const hfsFromDeclaration = (declaration, repoRoot) => declaredHfsView({ runtimeRoot: RUNTIME, declaration, repoRoot, side: "fe" });
+export const hfsFromDeclaration = (declaration, repoRoot) => asView(declaredHfsView({ runtimeRoot: RUNTIME, declaration, repoRoot, side: "fe" }));
 /**
  * The HFS view of the root workspace packages of an app, judged by the laws of the fe side: the managed root `eslint.config.mjs`
  * (`packages/*` of the app root) calls this. Paths are the app's own; a package file is of the tier `package`.
@@ -38,7 +40,7 @@ export const hfsFromDeclaration = (declaration, repoRoot) => declaredHfsView({ r
  * @param configUrl - `import.meta.url` of the app root's `eslint.config.mjs`.
  * @returns The frozen HFS view (profile fe over the paths of the app root).
  */
-export const loadPackagesHfs = (configUrl) => openPackagesHfsView({ runtimeRoot: RUNTIME, repoRoot: dirname(fileURLToPath(configUrl)), side: "fe" });
+export const loadPackagesHfs = (configUrl) => asView(openPackagesHfsView({ runtimeRoot: RUNTIME, repoRoot: dirname(fileURLToPath(configUrl)), side: "fe" }));
 /**
  * The HFS view of the root packages of an in-memory app declaration, for rule tests.
  *
@@ -46,7 +48,7 @@ export const loadPackagesHfs = (configUrl) => openPackagesHfsView({ runtimeRoot:
  * @param repoRoot - The absolute app root the linted filenames live under.
  * @returns The frozen HFS view.
  */
-export const packagesHfsFromDeclaration = (declaration, repoRoot) => declaredPackagesHfsView({ runtimeRoot: RUNTIME, declaration, repoRoot, side: "fe" });
+export const packagesHfsFromDeclaration = (declaration, repoRoot) => asView(declaredPackagesHfsView({ runtimeRoot: RUNTIME, declaration, repoRoot, side: "fe" }));
 /** True for a value that carries the view's resolver (`slotOf`), the test the canon has always made of `settings.starci.hfs`. */
 export const isHfsView = (value) => typeof value === "object" && value !== null && "slotOf" in value && typeof value.slotOf === "function";
 /** The `starci.hfs` entry of a settings object, read without trusting its shape. */

package/dist/lib/owner-source.js

@@ -10,9 +10,9 @@ import { resolveImport } from "./scope.js";
 import { hfsOf } from "./hfs.js";
 import { walk } from "./ast.js";
 import { sourceCodeView } from "./eslint-boundary.js";
-import { loadArchitectureConfig } from "#runtime/scripts/hfs/architecture/config.mjs";
-import { workspaceSourceEntry } from "#runtime/scripts/hfs/architecture/typescript.mjs";
-import { openHfs } from "#runtime/scripts/hfs/slots.mjs";
+import { loadArchitectureConfig } from "@starci/hfs/runtime/scripts/hfs/architecture/config.mjs";
+import { workspaceSourceEntry } from "@starci/hfs/runtime/scripts/hfs/architecture/typescript.mjs";
+import { openHfs } from "@starci/hfs/runtime/scripts/hfs/slots.mjs";
 const RUNTIME = RUNTIME_ROOT;
 const roots = new WeakMap();
 const origins = new WeakMap();
@@ -27,15 +27,17 @@ const stateOf = (context) => {
     return state;
 };
 /** A workspace package from the text of its `package.json`. */
-const workspaceOf = (root, text) => {
+const workspaceOf = (root, relative, text) => {
     const manifest = JSON.parse(text);
     const record = typeof manifest === "object" && manifest !== null ? manifest : {};
     return {
         root,
+        relative,
+        app: false,
         workspace: true,
         name: "name" in record && typeof record.name === "string" ? record.name : null,
         manifest,
-        exports: "exports" in record ? record.exports : undefined
+        ...("exports" in record ? { exports: record.exports } : {})
     };
 };
 const workspaceFile = (context, source) => {
@@ -45,7 +47,7 @@ const workspaceFile = (context, source) => {
         const config = loadArchitectureConfig(state.root, { hfs });
         state.workspaces = config.workspaces.map((relative) => {
             const root = path.join(state.root, relative);
-            return workspaceOf(root, fs.readFileSync(path.join(root, "package.json"), "utf8"));
+            return workspaceOf(root, relative, fs.readFileSync(path.join(root, "package.json"), "utf8"));
         });
     }
     const workspace = state.workspaces.find((entry) => entry.name && (source === entry.name || source.startsWith(`${entry.name}/`)));

package/dist/lib/package-root.d.ts

@@ -1,4 +1,9 @@
 /** The folder holding this package's package.json. */
 export declare const PACKAGE_ROOT: string;
-/** The bundled runtime the canon reads the slot manifest, the architecture machine and its catalogs from. */
+/**
+ * The runtime of the installed @starci/hfs (its peer, a same-minor range): the slot manifest, the architecture machine and its catalogs are read from it
+ * at run time, never from a copy bundled here, so an hfs data change releases hfs alone (decision release-only-what-changed).
+ */
 export declare const RUNTIME_ROOT: string;
+/** The files this package keeps of its own in runtime/ (the project graph rule, the jsdoc, sonar and next helpers, the package-scripts template). */
+export declare const OWN_RUNTIME_ROOT: string;

package/dist/lib/package-root.js

@@ -2,9 +2,15 @@
  * The package's own root, the same from the TypeScript source (`src/lib`) and from the build (`dist/lib`): both sit two
  * levels below it, so every file the package reads beside its code (the bundled `runtime/`, the fixtures) resolves here.
  */
-import { join } from "node:path";
+import { createRequire } from "node:module";
+import { dirname, join } from "node:path";
 import { fileURLToPath } from "node:url";
 /** The folder holding this package's package.json. */
 export const PACKAGE_ROOT = fileURLToPath(new URL("../..", import.meta.url));
-/** The bundled runtime the canon reads the slot manifest, the architecture machine and its catalogs from. */
-export const RUNTIME_ROOT = join(PACKAGE_ROOT, "runtime");
+/**
+ * The runtime of the installed @starci/hfs (its peer, a same-minor range): the slot manifest, the architecture machine and its catalogs are read from it
+ * at run time, never from a copy bundled here, so an hfs data change releases hfs alone (decision release-only-what-changed).
+ */
+export const RUNTIME_ROOT = join(dirname(createRequire(import.meta.url).resolve("@starci/hfs/package.json")), "runtime");
+/** The files this package keeps of its own in runtime/ (the project graph rule, the jsdoc, sonar and next helpers, the package-scripts template). */
+export const OWN_RUNTIME_ROOT = join(PACKAGE_ROOT, "runtime");

package/dist/lib/page-body.js

@@ -1,5 +1,5 @@
-import { grammarContractFor } from "#runtime/scripts/lib/grammar-lint.mjs";
-import { canonicalStatusOwnerBinding } from "#runtime/scripts/hfs/architecture/canon-jsx-clones.mjs";
+import { grammarContractFor } from "@starci/hfs/runtime/scripts/lib/grammar-lint.mjs";
+import { canonicalStatusOwnerBinding } from "@starci/hfs/runtime/scripts/hfs/architecture/canon-jsx-clones.mjs";
 import { attribute, attributeValue, stringOf, walk } from "./ast.js";
 import { isFn, unwrap, variableOf } from "./bindings.js";
 import { hfsOf } from "./hfs.js";

package/dist/lib/root-page.js

@@ -5,7 +5,7 @@
  */
 import fs from "node:fs";
 import path from "node:path";
-import { grammarContractFor } from "#runtime/scripts/lib/grammar-lint.mjs";
+import { grammarContractFor } from "@starci/hfs/runtime/scripts/lib/grammar-lint.mjs";
 import { attribute, attributeValue, walk } from "./ast.js";
 import { importOf, isFn, unwrap, variableOf } from "./bindings.js";
 import { hfsOf } from "./hfs.js";

package/dist/project-graph.js

@@ -7,7 +7,7 @@
  * rules and their codes is `LINT_ENFORCERS` of the machine (scripts/hfs/architecture/surface.mjs); `starci app check` keeps the
  * findings that have no TypeScript file to sit on. A graph that cannot be built stops the run with the machine's message.
  */
-import { LINT_ENFORCERS, belongsTo, codeOf } from "#runtime/scripts/hfs/architecture/surface.mjs";
+import { LINT_ENFORCERS, belongsTo, codeOf } from "@starci/hfs/runtime/scripts/hfs/architecture/surface.mjs";
 import { projectGraph as buildProjectGraph, resetProjectGraphs } from "#runtime/scripts/hfs/project-graph.mjs";
 import { projectRule } from "#runtime/scripts/hfs/project-rule.mjs";
 import { hfsOf } from "./lib/hfs.js";

package/dist/swr-family.js

@@ -3,7 +3,7 @@ import { hfsOf } from "./lib/hfs.js";
 import { readFileSync, readdirSync } from "node:fs";
 import { join } from "node:path";
 import ts from "typescript";
-import { isBoundsExport } from "#runtime/scripts/hfs/architecture/contract-bounds.mjs";
+import { isBoundsExport } from "@starci/hfs/runtime/scripts/hfs/architecture/contract-bounds.mjs";
 import { stringOf, walk } from "./lib/ast.js";
 import { functionOf } from "./lib/bindings.js";
 import { defineRule } from "./lib/rule.js";

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@starci/eslint-canon-fe",
-  "version": "9.14.4",
+  "version": "9.15.1",
   "description": "Universal front-end lint laws for TypeScript and Next.js, independent of the selected Grammar family.",
   "type": "module",
   "license": "MIT",
@@ -51,6 +51,7 @@
     "node": ">=22.13.0"
   },
   "peerDependencies": {
+    "@starci/hfs": "~5.13.0",
     "eslint": ">=9",
     "eslint-plugin-react-hooks": ">=7",
     "typescript": ">=5.9"
@@ -78,6 +79,7 @@
     "eslint-plugin-unicorn": "65.0.0"
   },
   "devDependencies": {
+    "@starci/hfs": "file:../hfs",
     "@starci/tsconfig": "file:../tsconfig",
     "@types/node": "^24.19.2",
     "eslint": "^9.18.0",

package/runtime/bundle.json

@@ -1,201 +1,13 @@
 {
-  "generated": [
-    "config.example.yaml",
-    "engine/by-code-unit.mjs",
-    "engine/model-config.mjs",
-    "engine/orca-config.mjs",
-    "engine/plain-object.mjs",
-    "engine/release-config.mjs",
-    "engine/removed-vocabulary.mjs",
-    "engine/resources-config.mjs",
-    "engine/runtime-root.mjs",
-    "engine/secrets.mjs",
-    "engine/sonar-config.mjs",
-    "engine/temp-root.mjs",
-    "engine/yaml.mjs",
-    "knowledge/grammars/index.yaml",
-    "knowledge/hfs/canon-pins.yaml",
-    "knowledge/hfs/fe-stack.yaml",
-    "knowledge/patterns/fe/folder.yaml",
-    "knowledge/sonar-gate.yaml",
-    "modules/kernel/removed-vocabulary.yaml",
-    "modules/models/registry.yaml",
-    "modules/models/runtimes.yaml",
-    "modules/models/tiers.yaml",
-    "scripts/api/git/cat-file.mjs",
-    "scripts/api/git/config-get.mjs",
-    "scripts/api/git/diff.mjs",
-    "scripts/api/git/lib.mjs",
-    "scripts/api/git/ls-files.mjs",
-    "scripts/api/git/ls-tree.mjs",
-    "scripts/api/git/merge-base.mjs",
-    "scripts/api/git/remote.mjs",
-    "scripts/api/git/rev-parse-query.mjs",
-    "scripts/api/git/show.mjs",
-    "scripts/api/git/tag.mjs",
-    "scripts/hfs/allows.mjs",
-    "scripts/hfs/architecture/ast-walks.mjs",
-    "scripts/hfs/architecture/automatic-gates.mjs",
-    "scripts/hfs/architecture/backend-app-files.mjs",
-    "scripts/hfs/architecture/backend.mjs",
-    "scripts/hfs/architecture/background-unowned.mjs",
-    "scripts/hfs/architecture/canon-clones.mjs",
-    "scripts/hfs/architecture/canon-jsx-clones.mjs",
-    "scripts/hfs/architecture/client-reaches-server.mjs",
-    "scripts/hfs/architecture/clones.mjs",
-    "scripts/hfs/architecture/component-tiers.mjs",
-    "scripts/hfs/architecture/config-unread.mjs",
-    "scripts/hfs/architecture/config.mjs",
-    "scripts/hfs/architecture/connection-map.mjs",
-    "scripts/hfs/architecture/constructor-deps.mjs",
-    "scripts/hfs/architecture/context-coupling.mjs",
-    "scripts/hfs/architecture/context-map.mjs",
-    "scripts/hfs/architecture/context-owner.mjs",
-    "scripts/hfs/architecture/context-platform-tables.mjs",
-    "scripts/hfs/architecture/context-transaction.mjs",
-    "scripts/hfs/architecture/contract-bounds.mjs",
-    "scripts/hfs/architecture/contract-fixture-guard.mjs",
-    "scripts/hfs/architecture/contracts-readonly.mjs",
-    "scripts/hfs/architecture/contracts.mjs",
-    "scripts/hfs/architecture/cross-app-duplicate.mjs",
-    "scripts/hfs/architecture/dead-exports-bindings.mjs",
-    "scripts/hfs/architecture/dead-exports.mjs",
-    "scripts/hfs/architecture/default-deny.mjs",
-    "scripts/hfs/architecture/doc-language.mjs",
-    "scripts/hfs/architecture/entity-registry.mjs",
-    "scripts/hfs/architecture/entrypoint.mjs",
-    "scripts/hfs/architecture/error-codes.mjs",
-    "scripts/hfs/architecture/error-masked.mjs",
-    "scripts/hfs/architecture/fe-slot-allows.mjs",
-    "scripts/hfs/architecture/feature-shape.mjs",
-    "scripts/hfs/architecture/framework-pinned.mjs",
-    "scripts/hfs/architecture/frontend-block-render.mjs",
-    "scripts/hfs/architecture/frontend-grammar.mjs",
-    "scripts/hfs/architecture/frontend-routing.mjs",
-    "scripts/hfs/architecture/frontend-world-render.mjs",
-    "scripts/hfs/architecture/frontend-world.mjs",
-    "scripts/hfs/architecture/frontend.mjs",
-    "scripts/hfs/architecture/function-spec-providers.mjs",
-    "scripts/hfs/architecture/hfs-graph.mjs",
-    "scripts/hfs/architecture/hooks-are-hooks.mjs",
-    "scripts/hfs/architecture/i18n-keys.mjs",
-    "scripts/hfs/architecture/identity.mjs",
-    "scripts/hfs/architecture/index.mjs",
-    "scripts/hfs/architecture/injection-token-exported.mjs",
-    "scripts/hfs/architecture/jwt-ast.mjs",
-    "scripts/hfs/architecture/machine-ast.mjs",
-    "scripts/hfs/architecture/managed-scripts.mjs",
-    "scripts/hfs/architecture/module-per-transport.mjs",
-    "scripts/hfs/architecture/next-data-contract.mjs",
-    "scripts/hfs/architecture/next-data-inference.mjs",
-    "scripts/hfs/architecture/next-data-key.mjs",
-    "scripts/hfs/architecture/next-data-symbols.mjs",
-    "scripts/hfs/architecture/next-data.mjs",
-    "scripts/hfs/architecture/operation-contract-roots.mjs",
-    "scripts/hfs/architecture/owners.mjs",
-    "scripts/hfs/architecture/package-shape.mjs",
-    "scripts/hfs/architecture/presentation.mjs",
-    "scripts/hfs/architecture/reachability.mjs",
-    "scripts/hfs/architecture/register-once.mjs",
-    "scripts/hfs/architecture/registration.mjs",
-    "scripts/hfs/architecture/render-graph.mjs",
-    "scripts/hfs/architecture/render-prop-across-server.mjs",
-    "scripts/hfs/architecture/required-files.mjs",
-    "scripts/hfs/architecture/root-packages.mjs",
-    "scripts/hfs/architecture/route-files-thin.mjs",
-    "scripts/hfs/architecture/schema-owner.mjs",
-    "scripts/hfs/architecture/server-action.mjs",
-    "scripts/hfs/architecture/side-boundary.mjs",
-    "scripts/hfs/architecture/source-names-shape.mjs",
-    "scripts/hfs/architecture/source-names.mjs",
-    "scripts/hfs/architecture/sql-keys.mjs",
-    "scripts/hfs/architecture/sql-owner.mjs",
-    "scripts/hfs/architecture/sql-returning.mjs",
-    "scripts/hfs/architecture/sql-token-forms.mjs",
-    "scripts/hfs/architecture/sql-tokens.mjs",
-    "scripts/hfs/architecture/staged-consumers.mjs",
-    "scripts/hfs/architecture/surface-nesting.mjs",
-    "scripts/hfs/architecture/surface.mjs",
-    "scripts/hfs/architecture/symbols.mjs",
-    "scripts/hfs/architecture/test-world-files.mjs",
-    "scripts/hfs/architecture/tiers.mjs",
-    "scripts/hfs/architecture/transport-owner.mjs",
-    "scripts/hfs/architecture/type-context.mjs",
-    "scripts/hfs/architecture/typescript.mjs",
-    "scripts/hfs/architecture/unit-spec-providers.mjs",
-    "scripts/hfs/declaration-shape.mjs",
-    "scripts/hfs/declaration-slots.mjs",
-    "scripts/hfs/edition-slots.mjs",
-    "scripts/hfs/explicit-surface-rule.mjs",
-    "scripts/hfs/linear-text.mjs",
-    "scripts/hfs/param-names.mjs",
-    "scripts/hfs/path-findings.mjs",
-    "scripts/hfs/repo-identity.mjs",
-    "scripts/hfs/rule-catalog.mjs",
-    "scripts/hfs/rule-params-shape.mjs",
-    "scripts/hfs/rules/database-migrations.mjs",
-    "scripts/hfs/rules/fe-no-tests.mjs",
-    "scripts/hfs/rules/read.mjs",
-    "scripts/hfs/rules/spec-placement.mjs",
-    "scripts/hfs/slot-app-view.mjs",
-    "scripts/hfs/slot-classify.mjs",
-    "scripts/hfs/slot-errors.mjs",
-    "scripts/hfs/slot-imports.mjs",
-    "scripts/hfs/slot-manifest-shape.mjs",
-    "scripts/hfs/slot-match.mjs",
-    "scripts/hfs/slot-path.mjs",
-    "scripts/hfs/slot-required.mjs",
-    "scripts/hfs/slot-semantic-problems.mjs",
-    "scripts/hfs/slot-side-problems.mjs",
-    "scripts/hfs/slots.mjs",
-    "scripts/hfs/test-world-slot.mjs",
-    "scripts/hfs/trailing-slashes.mjs",
-    "scripts/hfs/typescript-programs.mjs",
-    "scripts/hfs/view.mjs",
-    "scripts/lib/declaration-surface.mjs",
-    "scripts/lib/dockerfile.mjs",
-    "scripts/lib/env.mjs",
-    "scripts/lib/event-contract.mjs",
-    "scripts/lib/git.mjs",
-    "scripts/lib/glob.mjs",
-    "scripts/lib/grammar-lint.mjs",
-    "scripts/lib/i18n.mjs",
-    "scripts/lib/in-order.mjs",
-    "scripts/lib/json-clone.mjs",
-    "scripts/lib/json.mjs",
-    "scripts/lib/language.mjs",
-    "scripts/lib/list.mjs",
-    "scripts/lib/mutation-fence.mjs",
-    "scripts/lib/path-key.mjs",
-    "scripts/lib/read-text.mjs",
-    "scripts/lib/regex.mjs",
-    "scripts/lib/rule-packs.mjs",
-    "scripts/lib/same-text.mjs",
-    "scripts/lib/sops-envelope.mjs",
-    "scripts/lib/stack-services.mjs",
-    "scripts/lib/ts-analysis.mjs",
-    "scripts/lib/ts-ast.mjs",
-    "scripts/lib/walk.mjs",
-    "scripts/lib/yaml-cached.mjs"
-  ],
+  "generated": [],
   "own": [
-    "engine/config.mjs",
-    "engine/invalid-config.mjs",
-    "knowledge/hfs/slots.yaml",
     "packages/hfs/templates/app/package-scripts/package.json",
     "scripts/api/git/recorded-lines.mjs",
-    "scripts/hfs/architecture/hfs.mjs",
-    "scripts/hfs/manifest-shape.mjs",
     "scripts/hfs/project-graph.mjs",
     "scripts/hfs/project-rule.mjs",
-    "scripts/hfs/rules/database-constants.mjs",
-    "scripts/hfs/rules/secrets.mjs",
-    "scripts/lib/git-hooks-dir.mjs",
     "scripts/lib/jsdoc.mjs",
     "scripts/lib/line-count.mjs",
     "scripts/lib/next-contract.mjs",
-    "scripts/lib/package-at.mjs",
-    "scripts/lib/secret-patterns.mjs",
     "scripts/lib/sonar-syntax-rules.mjs",
     "scripts/lib/sonar-way.mjs"
   ]

package/runtime/scripts/api/git/recorded-lines.mjs

@@ -2,12 +2,12 @@
 // size-growth rule compares the working file with.
 import path from 'node:path';
 import { existsSync } from 'node:fs';
-import { runGit } from './lib.mjs';
-import { mergeBase } from './merge-base.mjs';
-import { withoutGitLocalEnv } from '../../lib/git.mjs';
+import { runGit } from '@starci/hfs/runtime/scripts/api/git/lib.mjs';
+import { mergeBase } from '@starci/hfs/runtime/scripts/api/git/merge-base.mjs';
+import { withoutGitLocalEnv } from '@starci/hfs/runtime/scripts/lib/git.mjs';
 import { lineCount } from '../../lib/line-count.mjs';
-import { readEnv } from '../../lib/env.mjs';
-import { folded } from '../../lib/event-contract.mjs';
+import { readEnv } from '@starci/hfs/runtime/scripts/lib/env.mjs';
+import { folded } from '@starci/hfs/runtime/scripts/lib/event-contract.mjs';
 
 const ok = (result) => !result.error && result.status === 0;
 const pathKey = (value) => process.platform === 'win32' ? value.toLowerCase() : value;

package/runtime/scripts/hfs/project-graph.mjs

@@ -13,12 +13,12 @@
 // A graph that cannot be built (no tsconfig, unresolvable import, invalid declaration) is an error: a check that cannot run is
 // never a pass, so `projectGraph` throws the machine's own message and the lint run stops.
 import fs from 'node:fs';
-import { checkArchitecture } from './architecture/index.mjs';
-import { openHfs } from './slots.mjs';
-import { pathFindings } from './path-findings.mjs';
-import { lsFiles } from '../api/git/ls-files.mjs';
-import { posixPath } from '../lib/path-key.mjs';
-import { onLintSurface } from './architecture/surface.mjs';
+import { checkArchitecture } from '@starci/hfs/runtime/scripts/hfs/architecture/index.mjs';
+import { openHfs } from '@starci/hfs/runtime/scripts/hfs/slots.mjs';
+import { pathFindings } from '@starci/hfs/runtime/scripts/hfs/path-findings.mjs';
+import { lsFiles } from '@starci/hfs/runtime/scripts/api/git/ls-files.mjs';
+import { posixPath } from '@starci/hfs/runtime/scripts/lib/path-key.mjs';
+import { onLintSurface } from '@starci/hfs/runtime/scripts/hfs/architecture/surface.mjs';
 
 const cache = new Map();
 

package/runtime/scripts/hfs/project-rule.mjs

@@ -8,8 +8,8 @@
 // Both lint canons ship a byte copy of this file in runtime/ and build their rules with it.
 import path from 'node:path';
 import { projectGraph } from './project-graph.mjs';
-import { posixPath } from '../lib/path-key.mjs';
-import { belongsTo, codeOf } from './architecture/surface.mjs';
+import { posixPath } from '@starci/hfs/runtime/scripts/lib/path-key.mjs';
+import { belongsTo, codeOf } from '@starci/hfs/runtime/scripts/hfs/architecture/surface.mjs';
 
 /**
  * A rule reporting the graph findings of `codes` on the linted file.
@@ -23,7 +23,7 @@ export const projectRule = ({ enforcer, runtimeRoot, hfsOf }) => {
     create(context) {
       const hfs = hfsOf(context);
       const rel = posixPath(path.relative(hfs.repoRoot, context.filename));
-      if (rel.startsWith('..')) return {};
+      if (rel.startsWith('@starci/hfs/runtime/scripts')) return {};
       const { byFile } = projectGraph({ repoRoot: hfs.repoRoot, runtimeRoot: context.settings?.starci?.injectedRuntimeRoot ?? runtimeRoot, injectedTypeScript: context.settings?.starci?.injectedTypeScript?.() });
       const mine = (byFile.get(rel) ?? []).filter((finding) => belongsTo(enforcer, finding));
       return {