@webpieces/code-rules 0.3.232 → 0.3.234

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@webpieces/code-rules",
-  "version": "0.3.232",
+  "version": "0.3.234",
   "description": "Standalone code validation rules extracted from architecture-validators, no Nx dependency required",
   "type": "commonjs",
   "main": "./src/index.js",
@@ -20,7 +20,7 @@
     "directory": "packages/tooling/code-rules"
   },
   "dependencies": {
-    "@webpieces/rules-config": "0.3.232"
+    "@webpieces/rules-config": "0.3.234"
   },
   "publishConfig": {
     "access": "public"

package/src/validate-code.js

@@ -16,6 +16,7 @@ const validate_catch_error_pattern_1 = require("./validate-catch-error-pattern")
 const validate_no_unmanaged_exceptions_1 = require("./validate-no-unmanaged-exceptions");
 const validate_no_direct_api_resolver_1 = require("./validate-no-direct-api-resolver");
 const validate_no_symbol_di_tokens_1 = require("./validate-no-symbol-di-tokens");
+const validate_match_rules_1 = require("./validate-match-rules");
 /**
  * Build every code validator from the typed WebpiecesRulesConfig. Each validator is
  * constructed with its own `*Config` (the genuinely-consumed config class), so the
@@ -23,7 +24,7 @@ const validate_no_symbol_di_tokens_1 = require("./validate-no-symbol-di-tokens")
  * config instance — `loadAndValidate` already validates that configured rules
  * carry an explicit `mode`, so in practice every key is present.
  */
-function buildValidators(config) {
+function buildValidators(config, matchRules) {
     return [
         new validate_modified_methods_1.MaxMethodLinesValidator(config['max-method-lines'] ?? new rules_config_1.MaxMethodLinesConfig()),
         new validate_modified_files_1.MaxFileLinesValidator(config['max-file-lines'] ?? new rules_config_1.MaxFileLinesConfig()),
@@ -38,6 +39,8 @@ function buildValidators(config) {
         new validate_no_unmanaged_exceptions_1.NoUnmanagedExceptionsValidator(config['no-unmanaged-exceptions'] ?? new rules_config_1.NoUnmanagedExceptionsConfig()),
         new validate_no_direct_api_resolver_1.NoDirectApiResolverValidator(config['angular-no-direct-api-in-resolver'] ?? new rules_config_1.AngularNoDirectApiInResolverConfig()),
         new validate_no_symbol_di_tokens_1.NoSymbolDiTokensValidator(config['no-symbol-di-tokens'] ?? new rules_config_1.NoSymbolDiTokensConfig()),
+        // One validator per client-authored match-rules entry (each with its own name/mode/epoch).
+        ...matchRules.map((mr) => new validate_match_rules_1.MatchRulesValidator(mr)),
     ];
 }
 /**
@@ -55,7 +58,7 @@ async function runValidator(workspaceRoot) {
         return { success: false };
     }
     console.log(`\n📄 Loaded config: ${loaded.configPath}`);
-    const validators = buildValidators(loaded.rulesConfig);
+    const validators = buildValidators(loaded.rulesConfig, loaded.matchRules);
     const active = validators.filter((v) => v.shouldRun());
     if (active.length === 0) {
         console.log('\n⏭️  Skipping all code validations (all modes: OFF)\n');

package/src/validate-code.js.map

@@ -1 +1 @@
-{"version":3,"file":"validate-code.js","sourceRoot":"","sources":["../../../../../packages/tooling/code-rules/src/validate-code.ts"],"names":[],"mappings":";;AAqEA,+BA4BC;AAjGD,0DAiBiC;AAEjC,mDAAgD;AAChD,2EAAsE;AACtE,uEAAkE;AAClE,mEAAqE;AACrE,yEAA2E;AAC3E,uEAAkE;AAClE,yEAAoE;AACpE,mDAA8D;AAC9D,6EAAwE;AACxE,uEAAmE;AACnE,iFAA4E;AAC5E,yFAAoF;AACpF,uFAAiF;AACjF,iFAA2E;AAI3E;;;;;;GAMG;AACH,SAAS,eAAe,CAAC,MAA4B;IACjD,OAAO;QACH,IAAI,mDAAuB,CAAC,MAAM,CAAC,kBAAkB,CAAC,IAAI,IAAI,mCAAoB,EAAE,CAAC;QACrF,IAAI,+CAAqB,CAAC,MAAM,CAAC,gBAAgB,CAAC,IAAI,IAAI,iCAAkB,EAAE,CAAC;QAC/E,IAAI,kDAA0B,CAAC,MAAM,CAAC,qBAAqB,CAAC,IAAI,IAAI,sCAAuB,EAAE,CAAC;QAC9F,IAAI,wDAA6B,CAAC,MAAM,CAAC,yBAAyB,CAAC,IAAI,IAAI,yCAA0B,EAAE,CAAC;QACxG,IAAI,+CAAqB,CAAC,MAAM,CAAC,gBAAgB,CAAC,IAAI,IAAI,iCAAkB,EAAE,CAAC;QAC/E,IAAI,iDAAsB,CAAC,MAAM,CAAC,iBAAiB,CAAC,IAAI,IAAI,kCAAmB,EAAE,CAAC;QAClF,IAAI,2CAA2B,CAAC,MAAM,CAAC,sBAAsB,CAAC,IAAI,IAAI,uCAAwB,EAAE,CAAC;QACjG,IAAI,qDAAwB,CAAC,MAAM,CAAC,kBAAkB,CAAC,IAAI,IAAI,oCAAqB,EAAE,CAAC;QACvF,IAAI,gDAAsB,CAAC,MAAM,CAAC,gBAAgB,CAAC,IAAI,IAAI,kCAAmB,EAAE,CAAC;QACjF,IAAI,yDAA0B,CAAC,MAAM,CAAC,qBAAqB,CAAC,IAAI,IAAI,sCAAuB,EAAE,CAAC;QAC9F,IAAI,iEAA8B,CAAC,MAAM,CAAC,yBAAyB,CAAC,IAAI,IAAI,0CAA2B,EAAE,CAAC;QAC1G,IAAI,8DAA4B,CAAC,MAAM,CAAC,mCAAmC,CAAC,IAAI,IAAI,iDAAkC,EAAE,CAAC;QACzH,IAAI,wDAAyB,CAAC,MAAM,CAAC,qBAAqB,CAAC,IAAI,IAAI,qCAAsB,EAAE,CAAC;KAC/F,CAAC;AACN,CAAC;AAED;;;;;;;GAOG;AACY,KAAK,UAAU,YAAY,CAAC,aAAqB;IAC5D,MAAM,MAAM,GAAG,IAAA,8BAAe,EAAC,aAAa,CAAC,CAAC;IAC9C,IAAI,MAAM,CAAC,UAAU,KAAK,IAAI,EAAE,CAAC;QAC7B,OAAO,CAAC,KAAK,CAAC,2EAA2E,CAAC,CAAC;QAC3F,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;IAC9B,CAAC;IAED,OAAO,CAAC,GAAG,CAAC,uBAAuB,MAAM,CAAC,UAAU,EAAE,CAAC,CAAC;IAExD,MAAM,UAAU,GAAG,eAAe,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;IACvD,MAAM,MAAM,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC,CAAgC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,EAAE,CAAC,CAAC;IAEtF,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACtB,OAAO,CAAC,GAAG,CAAC,wDAAwD,CAAC,CAAC;QACtE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;IAC7B,CAAC;IAED,OAAO,CAAC,GAAG,CAAC,iCAAiC,CAAC,CAAC;IAC/C,OAAO,CAAC,GAAG,CAAC,oBAAoB,MAAM,CAAC,GAAG,CAAC,CAAC,CAAgC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACvG,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAEhB,8FAA8F;IAC9F,uEAAuE;IACvE,MAAM,MAAM,GAAG,MAAM,IAAA,6BAAa,EAAC,MAAM,EAAE,aAAa,CAAC,CAAC;IAC1D,MAAM,UAAU,GAAG,MAAM,CAAC,OAAO,CAAC;IAElC,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,mCAAmC,CAAC,CAAC,CAAC,oCAAoC,CAAC,CAAC;IACrG,OAAO,EAAE,OAAO,EAAE,UAAU,EAAE,CAAC;AACnC,CAAC","sourcesContent":["import {\n    loadAndValidate,\n    WebpiecesRulesConfig,\n    BaseRuleConfig,\n    MaxMethodLinesConfig,\n    MaxFileLinesConfig,\n    RequireReturnTypeConfig,\n    NoInlineTypeLiteralsConfig,\n    NoAnyUnknownConfig,\n    NoImplicitAnyConfig,\n    PrismaValidateDtosConfig,\n    PrismaConverterConfig,\n    NoDestructureConfig,\n    CatchErrorPatternConfig,\n    NoUnmanagedExceptionsConfig,\n    AngularNoDirectApiInResolverConfig,\n    NoSymbolDiTokensConfig,\n} from '@webpieces/rules-config';\nimport { CodeValidator, ExecutorResult } from './code-validator';\nimport { runValidators } from './rule-reporter';\nimport { MaxMethodLinesValidator } from './validate-modified-methods';\nimport { MaxFileLinesValidator } from './validate-modified-files';\nimport { RequireReturnTypeValidator } from './validate-return-types';\nimport { NoInlineTypeLiteralsValidator } from './validate-no-inline-types';\nimport { NoAnyUnknownValidator } from './validate-no-any-unknown';\nimport { NoImplicitAnyValidator } from './validate-no-implicit-any';\nimport { PrismaValidateDtosValidator } from './validate-dtos';\nimport { PrismaConverterValidator } from './validate-prisma-converters';\nimport { NoDestructureValidator } from './validate-no-destructure';\nimport { CatchErrorPatternValidator } from './validate-catch-error-pattern';\nimport { NoUnmanagedExceptionsValidator } from './validate-no-unmanaged-exceptions';\nimport { NoDirectApiResolverValidator } from './validate-no-direct-api-resolver';\nimport { NoSymbolDiTokensValidator } from './validate-no-symbol-di-tokens';\n\nexport { ExecutorResult } from './code-validator';\n\n/**\n * Build every code validator from the typed WebpiecesRulesConfig. Each validator is\n * constructed with its own `*Config` (the genuinely-consumed config class), so the\n * config types are exercised at compile time. Missing rule keys fall back to an empty\n * config instance — `loadAndValidate` already validates that configured rules\n * carry an explicit `mode`, so in practice every key is present.\n */\nfunction buildValidators(config: WebpiecesRulesConfig): CodeValidator<BaseRuleConfig>[] {\n    return [\n        new MaxMethodLinesValidator(config['max-method-lines'] ?? new MaxMethodLinesConfig()),\n        new MaxFileLinesValidator(config['max-file-lines'] ?? new MaxFileLinesConfig()),\n        new RequireReturnTypeValidator(config['require-return-type'] ?? new RequireReturnTypeConfig()),\n        new NoInlineTypeLiteralsValidator(config['no-inline-type-literals'] ?? new NoInlineTypeLiteralsConfig()),\n        new NoAnyUnknownValidator(config['no-any-unknown'] ?? new NoAnyUnknownConfig()),\n        new NoImplicitAnyValidator(config['no-implicit-any'] ?? new NoImplicitAnyConfig()),\n        new PrismaValidateDtosValidator(config['prisma-validate-dtos'] ?? new PrismaValidateDtosConfig()),\n        new PrismaConverterValidator(config['prisma-converter'] ?? new PrismaConverterConfig()),\n        new NoDestructureValidator(config['no-destructure'] ?? new NoDestructureConfig()),\n        new CatchErrorPatternValidator(config['catch-error-pattern'] ?? new CatchErrorPatternConfig()),\n        new NoUnmanagedExceptionsValidator(config['no-unmanaged-exceptions'] ?? new NoUnmanagedExceptionsConfig()),\n        new NoDirectApiResolverValidator(config['angular-no-direct-api-in-resolver'] ?? new AngularNoDirectApiInResolverConfig()),\n        new NoSymbolDiTokensValidator(config['no-symbol-di-tokens'] ?? new NoSymbolDiTokensConfig()),\n    ];\n}\n\n/**\n * Run all configured code validators against the workspace.\n *\n * Owns config loading: callers just pass the workspace root. Config comes from\n * webpieces.config.json (loaded via @webpieces/rules-config so ai-hooks and this\n * executor agree on every rule's enabled/mode/options). A validator runs only when\n * `shouldRun()` is true (i.e. its mode is not OFF and no branch/epoch escape hatch matches).\n */\nexport default async function runValidator(workspaceRoot: string): Promise<ExecutorResult> {\n    const loaded = loadAndValidate(workspaceRoot);\n    if (loaded.configPath === null) {\n        console.error('\\n❌ No webpieces.config.json found at workspace root (or any ancestor).\\n');\n        return { success: false };\n    }\n\n    console.log(`\\n📄 Loaded config: ${loaded.configPath}`);\n\n    const validators = buildValidators(loaded.rulesConfig);\n    const active = validators.filter((v: CodeValidator<BaseRuleConfig>) => v.shouldRun());\n\n    if (active.length === 0) {\n        console.log('\\n⏭️  Skipping all code validations (all modes: OFF)\\n');\n        return { success: true };\n    }\n\n    console.log('\\n📏 Running Code Validations\\n');\n    console.log(`   Active rules: ${active.map((v: CodeValidator<BaseRuleConfig>) => v.name).join(', ')}`);\n    console.log('');\n\n    // Per-validator isolation lives in runValidators: a bug in one validator no longer aborts the\n    // rest, and a thrown RuleFailError is reported like any other failure.\n    const result = await runValidators(active, workspaceRoot);\n    const allSuccess = result.success;\n\n    console.log(allSuccess ? '\\n✅ All code validations passed\\n' : '\\n❌ Some code validations failed\\n');\n    return { success: allSuccess };\n}\n"]}
+{"version":3,"file":"validate-code.js","sourceRoot":"","sources":["../../../../../packages/tooling/code-rules/src/validate-code.ts"],"names":[],"mappings":";;AA4EA,+BA4BC;AAxGD,0DAiBiC;AAEjC,mDAAgD;AAChD,2EAAsE;AACtE,uEAAkE;AAClE,mEAAqE;AACrE,yEAA2E;AAC3E,uEAAkE;AAClE,yEAAoE;AACpE,mDAA8D;AAC9D,6EAAwE;AACxE,uEAAmE;AACnE,iFAA4E;AAC5E,yFAAoF;AACpF,uFAAiF;AACjF,iFAA2E;AAC3E,iEAA6D;AAK7D;;;;;;GAMG;AACH,SAAS,eAAe,CACpB,MAA4B,EAC5B,UAAsC;IAEtC,OAAO;QACH,IAAI,mDAAuB,CAAC,MAAM,CAAC,kBAAkB,CAAC,IAAI,IAAI,mCAAoB,EAAE,CAAC;QACrF,IAAI,+CAAqB,CAAC,MAAM,CAAC,gBAAgB,CAAC,IAAI,IAAI,iCAAkB,EAAE,CAAC;QAC/E,IAAI,kDAA0B,CAAC,MAAM,CAAC,qBAAqB,CAAC,IAAI,IAAI,sCAAuB,EAAE,CAAC;QAC9F,IAAI,wDAA6B,CAAC,MAAM,CAAC,yBAAyB,CAAC,IAAI,IAAI,yCAA0B,EAAE,CAAC;QACxG,IAAI,+CAAqB,CAAC,MAAM,CAAC,gBAAgB,CAAC,IAAI,IAAI,iCAAkB,EAAE,CAAC;QAC/E,IAAI,iDAAsB,CAAC,MAAM,CAAC,iBAAiB,CAAC,IAAI,IAAI,kCAAmB,EAAE,CAAC;QAClF,IAAI,2CAA2B,CAAC,MAAM,CAAC,sBAAsB,CAAC,IAAI,IAAI,uCAAwB,EAAE,CAAC;QACjG,IAAI,qDAAwB,CAAC,MAAM,CAAC,kBAAkB,CAAC,IAAI,IAAI,oCAAqB,EAAE,CAAC;QACvF,IAAI,gDAAsB,CAAC,MAAM,CAAC,gBAAgB,CAAC,IAAI,IAAI,kCAAmB,EAAE,CAAC;QACjF,IAAI,yDAA0B,CAAC,MAAM,CAAC,qBAAqB,CAAC,IAAI,IAAI,sCAAuB,EAAE,CAAC;QAC9F,IAAI,iEAA8B,CAAC,MAAM,CAAC,yBAAyB,CAAC,IAAI,IAAI,0CAA2B,EAAE,CAAC;QAC1G,IAAI,8DAA4B,CAAC,MAAM,CAAC,mCAAmC,CAAC,IAAI,IAAI,iDAAkC,EAAE,CAAC;QACzH,IAAI,wDAAyB,CAAC,MAAM,CAAC,qBAAqB,CAAC,IAAI,IAAI,qCAAsB,EAAE,CAAC;QAC5F,2FAA2F;QAC3F,GAAG,UAAU,CAAC,GAAG,CAAC,CAAC,EAAmB,EAAE,EAAE,CAAC,IAAI,0CAAmB,CAAC,EAAE,CAAC,CAAC;KAC1E,CAAC;AACN,CAAC;AAED;;;;;;;GAOG;AACY,KAAK,UAAU,YAAY,CAAC,aAAqB;IAC5D,MAAM,MAAM,GAAG,IAAA,8BAAe,EAAC,aAAa,CAAC,CAAC;IAC9C,IAAI,MAAM,CAAC,UAAU,KAAK,IAAI,EAAE,CAAC;QAC7B,OAAO,CAAC,KAAK,CAAC,2EAA2E,CAAC,CAAC;QAC3F,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;IAC9B,CAAC;IAED,OAAO,CAAC,GAAG,CAAC,uBAAuB,MAAM,CAAC,UAAU,EAAE,CAAC,CAAC;IAExD,MAAM,UAAU,GAAG,eAAe,CAAC,MAAM,CAAC,WAAW,EAAE,MAAM,CAAC,UAAU,CAAC,CAAC;IAC1E,MAAM,MAAM,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC,CAAgC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,EAAE,CAAC,CAAC;IAEtF,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACtB,OAAO,CAAC,GAAG,CAAC,wDAAwD,CAAC,CAAC;QACtE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;IAC7B,CAAC;IAED,OAAO,CAAC,GAAG,CAAC,iCAAiC,CAAC,CAAC;IAC/C,OAAO,CAAC,GAAG,CAAC,oBAAoB,MAAM,CAAC,GAAG,CAAC,CAAC,CAAgC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACvG,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAEhB,8FAA8F;IAC9F,uEAAuE;IACvE,MAAM,MAAM,GAAG,MAAM,IAAA,6BAAa,EAAC,MAAM,EAAE,aAAa,CAAC,CAAC;IAC1D,MAAM,UAAU,GAAG,MAAM,CAAC,OAAO,CAAC;IAElC,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,mCAAmC,CAAC,CAAC,CAAC,oCAAoC,CAAC,CAAC;IACrG,OAAO,EAAE,OAAO,EAAE,UAAU,EAAE,CAAC;AACnC,CAAC","sourcesContent":["import {\n    loadAndValidate,\n    WebpiecesRulesConfig,\n    BaseRuleConfig,\n    MaxMethodLinesConfig,\n    MaxFileLinesConfig,\n    RequireReturnTypeConfig,\n    NoInlineTypeLiteralsConfig,\n    NoAnyUnknownConfig,\n    NoImplicitAnyConfig,\n    PrismaValidateDtosConfig,\n    PrismaConverterConfig,\n    NoDestructureConfig,\n    CatchErrorPatternConfig,\n    NoUnmanagedExceptionsConfig,\n    AngularNoDirectApiInResolverConfig,\n    NoSymbolDiTokensConfig,\n} from '@webpieces/rules-config';\nimport { CodeValidator, ExecutorResult } from './code-validator';\nimport { runValidators } from './rule-reporter';\nimport { MaxMethodLinesValidator } from './validate-modified-methods';\nimport { MaxFileLinesValidator } from './validate-modified-files';\nimport { RequireReturnTypeValidator } from './validate-return-types';\nimport { NoInlineTypeLiteralsValidator } from './validate-no-inline-types';\nimport { NoAnyUnknownValidator } from './validate-no-any-unknown';\nimport { NoImplicitAnyValidator } from './validate-no-implicit-any';\nimport { PrismaValidateDtosValidator } from './validate-dtos';\nimport { PrismaConverterValidator } from './validate-prisma-converters';\nimport { NoDestructureValidator } from './validate-no-destructure';\nimport { CatchErrorPatternValidator } from './validate-catch-error-pattern';\nimport { NoUnmanagedExceptionsValidator } from './validate-no-unmanaged-exceptions';\nimport { NoDirectApiResolverValidator } from './validate-no-direct-api-resolver';\nimport { NoSymbolDiTokensValidator } from './validate-no-symbol-di-tokens';\nimport { MatchRulesValidator } from './validate-match-rules';\nimport { MatchRuleConfig } from '@webpieces/rules-config';\n\nexport { ExecutorResult } from './code-validator';\n\n/**\n * Build every code validator from the typed WebpiecesRulesConfig. Each validator is\n * constructed with its own `*Config` (the genuinely-consumed config class), so the\n * config types are exercised at compile time. Missing rule keys fall back to an empty\n * config instance — `loadAndValidate` already validates that configured rules\n * carry an explicit `mode`, so in practice every key is present.\n */\nfunction buildValidators(\n    config: WebpiecesRulesConfig,\n    matchRules: readonly MatchRuleConfig[],\n): CodeValidator<BaseRuleConfig>[] {\n    return [\n        new MaxMethodLinesValidator(config['max-method-lines'] ?? new MaxMethodLinesConfig()),\n        new MaxFileLinesValidator(config['max-file-lines'] ?? new MaxFileLinesConfig()),\n        new RequireReturnTypeValidator(config['require-return-type'] ?? new RequireReturnTypeConfig()),\n        new NoInlineTypeLiteralsValidator(config['no-inline-type-literals'] ?? new NoInlineTypeLiteralsConfig()),\n        new NoAnyUnknownValidator(config['no-any-unknown'] ?? new NoAnyUnknownConfig()),\n        new NoImplicitAnyValidator(config['no-implicit-any'] ?? new NoImplicitAnyConfig()),\n        new PrismaValidateDtosValidator(config['prisma-validate-dtos'] ?? new PrismaValidateDtosConfig()),\n        new PrismaConverterValidator(config['prisma-converter'] ?? new PrismaConverterConfig()),\n        new NoDestructureValidator(config['no-destructure'] ?? new NoDestructureConfig()),\n        new CatchErrorPatternValidator(config['catch-error-pattern'] ?? new CatchErrorPatternConfig()),\n        new NoUnmanagedExceptionsValidator(config['no-unmanaged-exceptions'] ?? new NoUnmanagedExceptionsConfig()),\n        new NoDirectApiResolverValidator(config['angular-no-direct-api-in-resolver'] ?? new AngularNoDirectApiInResolverConfig()),\n        new NoSymbolDiTokensValidator(config['no-symbol-di-tokens'] ?? new NoSymbolDiTokensConfig()),\n        // One validator per client-authored match-rules entry (each with its own name/mode/epoch).\n        ...matchRules.map((mr: MatchRuleConfig) => new MatchRulesValidator(mr)),\n    ];\n}\n\n/**\n * Run all configured code validators against the workspace.\n *\n * Owns config loading: callers just pass the workspace root. Config comes from\n * webpieces.config.json (loaded via @webpieces/rules-config so ai-hooks and this\n * executor agree on every rule's enabled/mode/options). A validator runs only when\n * `shouldRun()` is true (i.e. its mode is not OFF and no branch/epoch escape hatch matches).\n */\nexport default async function runValidator(workspaceRoot: string): Promise<ExecutorResult> {\n    const loaded = loadAndValidate(workspaceRoot);\n    if (loaded.configPath === null) {\n        console.error('\\n❌ No webpieces.config.json found at workspace root (or any ancestor).\\n');\n        return { success: false };\n    }\n\n    console.log(`\\n📄 Loaded config: ${loaded.configPath}`);\n\n    const validators = buildValidators(loaded.rulesConfig, loaded.matchRules);\n    const active = validators.filter((v: CodeValidator<BaseRuleConfig>) => v.shouldRun());\n\n    if (active.length === 0) {\n        console.log('\\n⏭️  Skipping all code validations (all modes: OFF)\\n');\n        return { success: true };\n    }\n\n    console.log('\\n📏 Running Code Validations\\n');\n    console.log(`   Active rules: ${active.map((v: CodeValidator<BaseRuleConfig>) => v.name).join(', ')}`);\n    console.log('');\n\n    // Per-validator isolation lives in runValidators: a bug in one validator no longer aborts the\n    // rest, and a thrown RuleFailError is reported like any other failure.\n    const result = await runValidators(active, workspaceRoot);\n    const allSuccess = result.success;\n\n    console.log(allSuccess ? '\\n✅ All code validations passed\\n' : '\\n❌ Some code validations failed\\n');\n    return { success: allSuccess };\n}\n"]}

package/src/validate-match-rules.d.ts

@@ -0,0 +1,22 @@
+/**
+ * Validate a single `match-rules` entry (a client-authored content guard) at build time.
+ *
+ * One MatchRulesValidator is constructed PER entry of the `match-rules` array (see validate-code.ts),
+ * so `shouldRun()` / mode / epoch apply per entry and the report shows the entry name. The regex
+ * matching + allowedPath/test-file exemption is shared with the ai-hook engine via
+ * findMatchRuleViolations; this validator adds diff-scoping (mode), the `// webpieces-disable <name>`
+ * filter, and the console report (renderMatchRuleMessage — the same text the ai-hook FixHint renders).
+ */
+import { MatchRuleConfig } from '@webpieces/rules-config';
+import { CodeValidator, ExecutorResult } from './code-validator';
+export declare class MatchViolationInfo {
+    readonly line: number;
+    readonly context: string;
+    readonly hasDisableComment: boolean;
+    constructor(line: number, context: string, hasDisableComment: boolean);
+}
+export declare function findViolationsInFile(filePath: string, workspaceRoot: string, config: MatchRuleConfig): MatchViolationInfo[];
+export declare class MatchRulesValidator extends CodeValidator<MatchRuleConfig> {
+    constructor(config: MatchRuleConfig);
+    run(workspaceRoot: string): Promise<ExecutorResult>;
+}

package/src/validate-match-rules.js

@@ -0,0 +1,162 @@
+"use strict";
+/**
+ * Validate a single `match-rules` entry (a client-authored content guard) at build time.
+ *
+ * One MatchRulesValidator is constructed PER entry of the `match-rules` array (see validate-code.ts),
+ * so `shouldRun()` / mode / epoch apply per entry and the report shows the entry name. The regex
+ * matching + allowedPath/test-file exemption is shared with the ai-hook engine via
+ * findMatchRuleViolations; this validator adds diff-scoping (mode), the `// webpieces-disable <name>`
+ * filter, and the console report (renderMatchRuleMessage — the same text the ai-hook FixHint renders).
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.MatchRulesValidator = exports.MatchViolationInfo = void 0;
+exports.findViolationsInFile = findViolationsInFile;
+const tslib_1 = require("tslib");
+const fs = tslib_1.__importStar(require("fs"));
+const path = tslib_1.__importStar(require("path"));
+const rules_config_1 = require("@webpieces/rules-config");
+const code_validator_1 = require("./code-validator");
+const resolve_mode_1 = require("./resolve-mode");
+class MatchViolation {
+    file;
+    line;
+    context;
+    constructor(file, line, context) {
+        this.file = file;
+        this.line = line;
+        this.context = context;
+    }
+}
+class MatchViolationInfo {
+    line;
+    context;
+    hasDisableComment;
+    constructor(line, context, hasDisableComment) {
+        this.line = line;
+        this.context = context;
+        this.hasDisableComment = hasDisableComment;
+    }
+}
+exports.MatchViolationInfo = MatchViolationInfo;
+function findViolationsInFile(filePath, workspaceRoot, config) {
+    const fullPath = path.join(workspaceRoot, filePath);
+    if (!fs.existsSync(fullPath))
+        return [];
+    const content = fs.readFileSync(fullPath, 'utf-8');
+    const lines = content.split('\n');
+    // Shared engine applies allowedPaths + test-file exemption and regex matching.
+    const hits = (0, rules_config_1.findMatchRuleViolations)(lines, filePath, config);
+    const disableAllowed = config.disableAllowed ?? true;
+    return hits.map((hit) => {
+        const line = lines[hit.line - 1] ?? '';
+        const prevLine = hit.line > 1 ? (lines[hit.line - 2] ?? '') : '';
+        const disabled = (0, rules_config_1.hasDisable)(line, config.name) || (0, rules_config_1.hasDisable)(prevLine, config.name);
+        return new MatchViolationInfo(hit.line, hit.context, disableAllowed && disabled);
+    });
+}
+function findViolationsForModifiedCode(workspaceRoot, changedFiles, base, head, config) {
+    const violations = [];
+    for (const file of changedFiles) {
+        const diff = (0, rules_config_1.getFileDiff)(workspaceRoot, file, base, head);
+        const changedLines = (0, rules_config_1.getChangedLineNumbers)(diff);
+        if (changedLines.size === 0)
+            continue;
+        for (const v of findViolationsInFile(file, workspaceRoot, config)) {
+            if (v.hasDisableComment)
+                continue;
+            if (!changedLines.has(v.line))
+                continue;
+            violations.push(new MatchViolation(file, v.line, v.context));
+        }
+    }
+    return violations;
+}
+function findViolationsForModifiedFiles(workspaceRoot, changedFiles, config) {
+    const violations = [];
+    for (const file of changedFiles) {
+        for (const v of findViolationsInFile(file, workspaceRoot, config)) {
+            if (v.hasDisableComment)
+                continue;
+            violations.push(new MatchViolation(file, v.line, v.context));
+        }
+    }
+    return violations;
+}
+function reportViolations(config, violations, mode) {
+    console.error('');
+    console.error(`❌ [${config.name}] matched disallowed pattern(s)!`);
+    console.error('');
+    console.error((0, rules_config_1.renderMatchRuleMessage)(config));
+    console.error('');
+    for (const v of violations) {
+        console.error(`  ❌ ${v.file}:${v.line}`);
+        console.error(`     ${v.context}`);
+    }
+    console.error('');
+    console.error(`   Current mode: ${mode}`);
+    console.error('');
+}
+function resolveMode(config) {
+    const normalMode = config.mode ?? 'OFF';
+    if (normalMode === 'OFF')
+        return normalMode;
+    const skip = (0, resolve_mode_1.shouldSkipRule)(config.ignoreModifiedUntilEpoch, config.ignoreRuleWhileOnBranch);
+    if (skip.skip) {
+        console.log(`\n⏭️  Skipping ${config.name} validation (${skip.reason})`);
+        console.log('');
+        return 'OFF';
+    }
+    return normalMode;
+}
+async function runValidatorImpl(config, workspaceRoot) {
+    const mode = resolveMode(config);
+    if (mode === 'OFF') {
+        console.log(`\n⏭️  Skipping ${config.name} validation (mode: OFF)`);
+        console.log('');
+        return { success: true };
+    }
+    console.log(`\n📏 Validating match-rule: ${config.name}\n`);
+    console.log(`   Mode: ${mode}`);
+    let base = process.env['NX_BASE'];
+    const head = process.env['NX_HEAD'];
+    if (!base) {
+        base = (0, rules_config_1.detectBase)(workspaceRoot) ?? undefined;
+        if (!base) {
+            console.log(`\n⏭️  Skipping ${config.name} validation (could not detect base branch)`);
+            console.log('');
+            return { success: true };
+        }
+    }
+    console.log(`   Base: ${base}`);
+    console.log(`   Head: ${head ?? 'working tree (includes uncommitted changes)'}`);
+    console.log('');
+    const changedFiles = (0, rules_config_1.getChangedFiles)(workspaceRoot, base, head);
+    if (changedFiles.length === 0) {
+        console.log('✅ No TypeScript files changed');
+        return { success: true };
+    }
+    console.log(`📂 Checking ${changedFiles.length} changed file(s)...`);
+    let violations = [];
+    if (mode === 'NEW_AND_MODIFIED_CODE') {
+        violations = findViolationsForModifiedCode(workspaceRoot, changedFiles, base, head, config);
+    }
+    else if (mode === 'NEW_AND_MODIFIED_FILES') {
+        violations = findViolationsForModifiedFiles(workspaceRoot, changedFiles, config);
+    }
+    if (violations.length === 0) {
+        console.log(`✅ No ${config.name} violations found`);
+        return { success: true };
+    }
+    reportViolations(config, violations, mode);
+    return { success: false };
+}
+class MatchRulesValidator extends code_validator_1.CodeValidator {
+    constructor(config) {
+        super(config, config.name);
+    }
+    async run(workspaceRoot) {
+        return runValidatorImpl(this.config, workspaceRoot);
+    }
+}
+exports.MatchRulesValidator = MatchRulesValidator;
+//# sourceMappingURL=validate-match-rules.js.map

package/src/validate-match-rules.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"validate-match-rules.js","sourceRoot":"","sources":["../../../../../packages/tooling/code-rules/src/validate-match-rules.ts"],"names":[],"mappings":";AAAA;;;;;;;;GAQG;;;AA2CH,oDAqBC;;AA9DD,+CAAyB;AACzB,mDAA6B;AAC7B,0DAWiC;AACjC,qDAAiE;AACjE,iDAAgD;AAEhD,MAAM,cAAc;IACP,IAAI,CAAS;IACb,IAAI,CAAS;IACb,OAAO,CAAS;IAEzB,YAAY,IAAY,EAAE,IAAY,EAAE,OAAe;QACnD,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;QACjB,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;QACjB,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;IAC3B,CAAC;CACJ;AAED,MAAa,kBAAkB;IAClB,IAAI,CAAS;IACb,OAAO,CAAS;IAChB,iBAAiB,CAAU;IAEpC,YAAY,IAAY,EAAE,OAAe,EAAE,iBAA0B;QACjE,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;QACjB,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;QACvB,IAAI,CAAC,iBAAiB,GAAG,iBAAiB,CAAC;IAC/C,CAAC;CACJ;AAVD,gDAUC;AAED,SAAgB,oBAAoB,CAChC,QAAgB,EAChB,aAAqB,EACrB,MAAuB;IAEvB,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,QAAQ,CAAC,CAAC;IACpD,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC;QAAE,OAAO,EAAE,CAAC;IAExC,MAAM,OAAO,GAAG,EAAE,CAAC,YAAY,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;IACnD,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAElC,+EAA+E;IAC/E,MAAM,IAAI,GAAG,IAAA,sCAAuB,EAAC,KAAK,EAAE,QAAQ,EAAE,MAAM,CAAC,CAAC;IAC9D,MAAM,cAAc,GAAG,MAAM,CAAC,cAAc,IAAI,IAAI,CAAC;IAErD,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,GAAuB,EAAE,EAAE;QACxC,MAAM,IAAI,GAAG,KAAK,CAAC,GAAG,CAAC,IAAI,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;QACvC,MAAM,QAAQ,GAAG,GAAG,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QACjE,MAAM,QAAQ,GAAG,IAAA,yBAAU,EAAC,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,IAAI,IAAA,yBAAU,EAAC,QAAQ,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC;QACpF,OAAO,IAAI,kBAAkB,CAAC,GAAG,CAAC,IAAI,EAAE,GAAG,CAAC,OAAO,EAAE,cAAc,IAAI,QAAQ,CAAC,CAAC;IACrF,CAAC,CAAC,CAAC;AACP,CAAC;AAED,SAAS,6BAA6B,CAClC,aAAqB,EACrB,YAAsB,EACtB,IAAY,EACZ,IAAwB,EACxB,MAAuB;IAEvB,MAAM,UAAU,GAAqB,EAAE,CAAC;IACxC,KAAK,MAAM,IAAI,IAAI,YAAY,EAAE,CAAC;QAC9B,MAAM,IAAI,GAAG,IAAA,0BAAW,EAAC,aAAa,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;QAC1D,MAAM,YAAY,GAAG,IAAA,oCAAqB,EAAC,IAAI,CAAC,CAAC;QACjD,IAAI,YAAY,CAAC,IAAI,KAAK,CAAC;YAAE,SAAS;QAEtC,KAAK,MAAM,CAAC,IAAI,oBAAoB,CAAC,IAAI,EAAE,aAAa,EAAE,MAAM,CAAC,EAAE,CAAC;YAChE,IAAI,CAAC,CAAC,iBAAiB;gBAAE,SAAS;YAClC,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC;gBAAE,SAAS;YACxC,UAAU,CAAC,IAAI,CAAC,IAAI,cAAc,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC;QACjE,CAAC;IACL,CAAC;IACD,OAAO,UAAU,CAAC;AACtB,CAAC;AAED,SAAS,8BAA8B,CACnC,aAAqB,EACrB,YAAsB,EACtB,MAAuB;IAEvB,MAAM,UAAU,GAAqB,EAAE,CAAC;IACxC,KAAK,MAAM,IAAI,IAAI,YAAY,EAAE,CAAC;QAC9B,KAAK,MAAM,CAAC,IAAI,oBAAoB,CAAC,IAAI,EAAE,aAAa,EAAE,MAAM,CAAC,EAAE,CAAC;YAChE,IAAI,CAAC,CAAC,iBAAiB;gBAAE,SAAS;YAClC,UAAU,CAAC,IAAI,CAAC,IAAI,cAAc,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC;QACjE,CAAC;IACL,CAAC;IACD,OAAO,UAAU,CAAC;AACtB,CAAC;AAED,SAAS,gBAAgB,CAAC,MAAuB,EAAE,UAA4B,EAAE,IAAsB;IACnG,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;IAClB,OAAO,CAAC,KAAK,CAAC,MAAM,MAAM,CAAC,IAAI,kCAAkC,CAAC,CAAC;IACnE,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;IAClB,OAAO,CAAC,KAAK,CAAC,IAAA,qCAAsB,EAAC,MAAM,CAAC,CAAC,CAAC;IAC9C,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;IAClB,KAAK,MAAM,CAAC,IAAI,UAAU,EAAE,CAAC;QACzB,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;QACzC,OAAO,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC;IACvC,CAAC;IACD,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;IAClB,OAAO,CAAC,KAAK,CAAC,oBAAoB,IAAI,EAAE,CAAC,CAAC;IAC1C,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;AACtB,CAAC;AAED,SAAS,WAAW,CAAC,MAAuB;IACxC,MAAM,UAAU,GAAqB,MAAM,CAAC,IAAI,IAAI,KAAK,CAAC;IAC1D,IAAI,UAAU,KAAK,KAAK;QAAE,OAAO,UAAU,CAAC;IAC5C,MAAM,IAAI,GAAG,IAAA,6BAAc,EAAC,MAAM,CAAC,wBAAwB,EAAE,MAAM,CAAC,uBAAuB,CAAC,CAAC;IAC7F,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;QACZ,OAAO,CAAC,GAAG,CAAC,kBAAkB,MAAM,CAAC,IAAI,gBAAgB,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC;QACzE,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAChB,OAAO,KAAK,CAAC;IACjB,CAAC;IACD,OAAO,UAAU,CAAC;AACtB,CAAC;AAED,KAAK,UAAU,gBAAgB,CAAC,MAAuB,EAAE,aAAqB;IAC1E,MAAM,IAAI,GAAG,WAAW,CAAC,MAAM,CAAC,CAAC;IACjC,IAAI,IAAI,KAAK,KAAK,EAAE,CAAC;QACjB,OAAO,CAAC,GAAG,CAAC,kBAAkB,MAAM,CAAC,IAAI,yBAAyB,CAAC,CAAC;QACpE,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAChB,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;IAC7B,CAAC;IAED,OAAO,CAAC,GAAG,CAAC,+BAA+B,MAAM,CAAC,IAAI,IAAI,CAAC,CAAC;IAC5D,OAAO,CAAC,GAAG,CAAC,YAAY,IAAI,EAAE,CAAC,CAAC;IAEhC,IAAI,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;IAClC,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;IACpC,IAAI,CAAC,IAAI,EAAE,CAAC;QACR,IAAI,GAAG,IAAA,yBAAU,EAAC,aAAa,CAAC,IAAI,SAAS,CAAC;QAC9C,IAAI,CAAC,IAAI,EAAE,CAAC;YACR,OAAO,CAAC,GAAG,CAAC,kBAAkB,MAAM,CAAC,IAAI,4CAA4C,CAAC,CAAC;YACvF,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YAChB,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;QAC7B,CAAC;IACL,CAAC;IAED,OAAO,CAAC,GAAG,CAAC,YAAY,IAAI,EAAE,CAAC,CAAC;IAChC,OAAO,CAAC,GAAG,CAAC,YAAY,IAAI,IAAI,6CAA6C,EAAE,CAAC,CAAC;IACjF,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAEhB,MAAM,YAAY,GAAG,IAAA,8BAAe,EAAC,aAAa,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;IAChE,IAAI,YAAY,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC5B,OAAO,CAAC,GAAG,CAAC,+BAA+B,CAAC,CAAC;QAC7C,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;IAC7B,CAAC;IAED,OAAO,CAAC,GAAG,CAAC,eAAe,YAAY,CAAC,MAAM,qBAAqB,CAAC,CAAC;IAErE,IAAI,UAAU,GAAqB,EAAE,CAAC;IACtC,IAAI,IAAI,KAAK,uBAAuB,EAAE,CAAC;QACnC,UAAU,GAAG,6BAA6B,CAAC,aAAa,EAAE,YAAY,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC;IAChG,CAAC;SAAM,IAAI,IAAI,KAAK,wBAAwB,EAAE,CAAC;QAC3C,UAAU,GAAG,8BAA8B,CAAC,aAAa,EAAE,YAAY,EAAE,MAAM,CAAC,CAAC;IACrF,CAAC;IAED,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC1B,OAAO,CAAC,GAAG,CAAC,QAAQ,MAAM,CAAC,IAAI,mBAAmB,CAAC,CAAC;QACpD,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;IAC7B,CAAC;IAED,gBAAgB,CAAC,MAAM,EAAE,UAAU,EAAE,IAAI,CAAC,CAAC;IAC3C,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;AAC9B,CAAC;AAED,MAAa,mBAAoB,SAAQ,8BAA8B;IACnE,YAAY,MAAuB;QAC/B,KAAK,CAAC,MAAM,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC;IAC/B,CAAC;IAED,KAAK,CAAC,GAAG,CAAC,aAAqB;QAC3B,OAAO,gBAAgB,CAAC,IAAI,CAAC,MAAM,EAAE,aAAa,CAAC,CAAC;IACxD,CAAC;CACJ;AARD,kDAQC","sourcesContent":["/**\n * Validate a single `match-rules` entry (a client-authored content guard) at build time.\n *\n * One MatchRulesValidator is constructed PER entry of the `match-rules` array (see validate-code.ts),\n * so `shouldRun()` / mode / epoch apply per entry and the report shows the entry name. The regex\n * matching + allowedPath/test-file exemption is shared with the ai-hook engine via\n * findMatchRuleViolations; this validator adds diff-scoping (mode), the `// webpieces-disable <name>`\n * filter, and the console report (renderMatchRuleMessage — the same text the ai-hook FixHint renders).\n */\n\nimport * as fs from 'fs';\nimport * as path from 'path';\nimport {\n    hasDisable,\n    MatchRuleConfig,\n    MatchRuleViolation,\n    findMatchRuleViolations,\n    renderMatchRuleMessage,\n    ModifiedCodeMode,\n    detectBase,\n    getChangedFiles,\n    getFileDiff,\n    getChangedLineNumbers,\n} from '@webpieces/rules-config';\nimport { CodeValidator, ExecutorResult } from './code-validator';\nimport { shouldSkipRule } from './resolve-mode';\n\nclass MatchViolation {\n    readonly file: string;\n    readonly line: number;\n    readonly context: string;\n\n    constructor(file: string, line: number, context: string) {\n        this.file = file;\n        this.line = line;\n        this.context = context;\n    }\n}\n\nexport class MatchViolationInfo {\n    readonly line: number;\n    readonly context: string;\n    readonly hasDisableComment: boolean;\n\n    constructor(line: number, context: string, hasDisableComment: boolean) {\n        this.line = line;\n        this.context = context;\n        this.hasDisableComment = hasDisableComment;\n    }\n}\n\nexport function findViolationsInFile(\n    filePath: string,\n    workspaceRoot: string,\n    config: MatchRuleConfig,\n): MatchViolationInfo[] {\n    const fullPath = path.join(workspaceRoot, filePath);\n    if (!fs.existsSync(fullPath)) return [];\n\n    const content = fs.readFileSync(fullPath, 'utf-8');\n    const lines = content.split('\\n');\n\n    // Shared engine applies allowedPaths + test-file exemption and regex matching.\n    const hits = findMatchRuleViolations(lines, filePath, config);\n    const disableAllowed = config.disableAllowed ?? true;\n\n    return hits.map((hit: MatchRuleViolation) => {\n        const line = lines[hit.line - 1] ?? '';\n        const prevLine = hit.line > 1 ? (lines[hit.line - 2] ?? '') : '';\n        const disabled = hasDisable(line, config.name) || hasDisable(prevLine, config.name);\n        return new MatchViolationInfo(hit.line, hit.context, disableAllowed && disabled);\n    });\n}\n\nfunction findViolationsForModifiedCode(\n    workspaceRoot: string,\n    changedFiles: string[],\n    base: string,\n    head: string | undefined,\n    config: MatchRuleConfig,\n): MatchViolation[] {\n    const violations: MatchViolation[] = [];\n    for (const file of changedFiles) {\n        const diff = getFileDiff(workspaceRoot, file, base, head);\n        const changedLines = getChangedLineNumbers(diff);\n        if (changedLines.size === 0) continue;\n\n        for (const v of findViolationsInFile(file, workspaceRoot, config)) {\n            if (v.hasDisableComment) continue;\n            if (!changedLines.has(v.line)) continue;\n            violations.push(new MatchViolation(file, v.line, v.context));\n        }\n    }\n    return violations;\n}\n\nfunction findViolationsForModifiedFiles(\n    workspaceRoot: string,\n    changedFiles: string[],\n    config: MatchRuleConfig,\n): MatchViolation[] {\n    const violations: MatchViolation[] = [];\n    for (const file of changedFiles) {\n        for (const v of findViolationsInFile(file, workspaceRoot, config)) {\n            if (v.hasDisableComment) continue;\n            violations.push(new MatchViolation(file, v.line, v.context));\n        }\n    }\n    return violations;\n}\n\nfunction reportViolations(config: MatchRuleConfig, violations: MatchViolation[], mode: ModifiedCodeMode): void {\n    console.error('');\n    console.error(`❌ [${config.name}] matched disallowed pattern(s)!`);\n    console.error('');\n    console.error(renderMatchRuleMessage(config));\n    console.error('');\n    for (const v of violations) {\n        console.error(`  ❌ ${v.file}:${v.line}`);\n        console.error(`     ${v.context}`);\n    }\n    console.error('');\n    console.error(`   Current mode: ${mode}`);\n    console.error('');\n}\n\nfunction resolveMode(config: MatchRuleConfig): ModifiedCodeMode {\n    const normalMode: ModifiedCodeMode = config.mode ?? 'OFF';\n    if (normalMode === 'OFF') return normalMode;\n    const skip = shouldSkipRule(config.ignoreModifiedUntilEpoch, config.ignoreRuleWhileOnBranch);\n    if (skip.skip) {\n        console.log(`\\n⏭️  Skipping ${config.name} validation (${skip.reason})`);\n        console.log('');\n        return 'OFF';\n    }\n    return normalMode;\n}\n\nasync function runValidatorImpl(config: MatchRuleConfig, workspaceRoot: string): Promise<ExecutorResult> {\n    const mode = resolveMode(config);\n    if (mode === 'OFF') {\n        console.log(`\\n⏭️  Skipping ${config.name} validation (mode: OFF)`);\n        console.log('');\n        return { success: true };\n    }\n\n    console.log(`\\n📏 Validating match-rule: ${config.name}\\n`);\n    console.log(`   Mode: ${mode}`);\n\n    let base = process.env['NX_BASE'];\n    const head = process.env['NX_HEAD'];\n    if (!base) {\n        base = detectBase(workspaceRoot) ?? undefined;\n        if (!base) {\n            console.log(`\\n⏭️  Skipping ${config.name} validation (could not detect base branch)`);\n            console.log('');\n            return { success: true };\n        }\n    }\n\n    console.log(`   Base: ${base}`);\n    console.log(`   Head: ${head ?? 'working tree (includes uncommitted changes)'}`);\n    console.log('');\n\n    const changedFiles = getChangedFiles(workspaceRoot, base, head);\n    if (changedFiles.length === 0) {\n        console.log('✅ No TypeScript files changed');\n        return { success: true };\n    }\n\n    console.log(`📂 Checking ${changedFiles.length} changed file(s)...`);\n\n    let violations: MatchViolation[] = [];\n    if (mode === 'NEW_AND_MODIFIED_CODE') {\n        violations = findViolationsForModifiedCode(workspaceRoot, changedFiles, base, head, config);\n    } else if (mode === 'NEW_AND_MODIFIED_FILES') {\n        violations = findViolationsForModifiedFiles(workspaceRoot, changedFiles, config);\n    }\n\n    if (violations.length === 0) {\n        console.log(`✅ No ${config.name} violations found`);\n        return { success: true };\n    }\n\n    reportViolations(config, violations, mode);\n    return { success: false };\n}\n\nexport class MatchRulesValidator extends CodeValidator<MatchRuleConfig> {\n    constructor(config: MatchRuleConfig) {\n        super(config, config.name);\n    }\n\n    async run(workspaceRoot: string): Promise<ExecutorResult> {\n        return runValidatorImpl(this.config, workspaceRoot);\n    }\n}\n"]}