@webpieces/nx-webpieces-rules 0.4.651 → 0.4.652

package/README.md

@@ -34,7 +34,7 @@ the rule key `no-file-import-cycles`:
   "rules": {
     "no-file-import-cycles": {
       "mode": "ON",                            // "OFF" disables the gate everywhere
-      "ignoreModifiedUntilEpoch": 1771931925,  // epoch SECONDS — while now < epoch,
+      "turnOffRuleUntilEpoch": 1771931925,  // epoch SECONDS — while now < epoch,
                                                //   cycles are REPORTED but the build
                                                //   PASSES; after it, the gate fails again
       "ignoreTypeOnly": false                  // when true, ignore `import type`
@@ -50,9 +50,9 @@ Semantics, mirroring the method/file-size dated-disable model:
 | Situation                                   | Result                          |
 | ------------------------------------------- | ------------------------------- |
 | `mode: "OFF"`                               | Skipped (passes), no madge run  |
-| Cycle found, no `ignoreModifiedUntilEpoch`  | **Fails**                       |
-| Cycle found, `now < ignoreModifiedUntilEpoch` | Reported but **passes** (warn) |
-| Cycle found, `now >= ignoreModifiedUntilEpoch` | **Fails** again               |
+| Cycle found, no `turnOffRuleUntilEpoch`  | **Fails**                       |
+| Cycle found, `now < turnOffRuleUntilEpoch` | Reported but **passes** (warn) |
+| Cycle found, `now >= turnOffRuleUntilEpoch` | **Fails** again               |
 | No cycle                                    | Passes                          |
 
 The grace window lets you turn a strict gate on against an existing codebase

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@webpieces/nx-webpieces-rules",
-  "version": "0.4.651",
+  "version": "0.4.652",
   "description": "Nx-specific webpieces validation rules and graph tooling. Bundles all @webpieces rule packages with Nx graph validators and an inference plugin.",
   "type": "commonjs",
   "main": "./src/index.js",
@@ -18,11 +18,11 @@
     "README.md"
   ],
   "dependencies": {
-    "@webpieces/ai-hook-rules": "0.4.651",
-    "@webpieces/code-rules": "0.4.651",
-    "@webpieces/eslint-rules": "0.4.651",
-    "@webpieces/pr-gate": "0.4.651",
-    "@webpieces/rules-config": "0.4.651",
+    "@webpieces/ai-hook-rules": "0.4.652",
+    "@webpieces/code-rules": "0.4.652",
+    "@webpieces/eslint-rules": "0.4.652",
+    "@webpieces/pr-gate": "0.4.652",
+    "@webpieces/rules-config": "0.4.652",
     "madge": "8.0.0"
   },
   "peerDependencies": {

package/src/executors/validate-catch-error-pattern/schema.json

@@ -15,7 +15,7 @@
             "description": "Whether disable comments work. When false, no escape hatch.",
             "default": true
         },
-        "ignoreModifiedUntilEpoch": {
+        "turnOffRuleUntilEpoch": {
             "type": "number",
             "description": "Epoch seconds. Until this time, skip validation entirely. When expired, normal mode resumes. Omit when not needed."
         }

package/src/executors/validate-code/schema.json

@@ -23,7 +23,7 @@
                     "description": "Whether disable comments work. When false, no escape hatch (like old STRICT mode).",
                     "default": true
                 },
-                "ignoreModifiedUntilEpoch": {
+                "turnOffRuleUntilEpoch": {
                     "type": "number",
                     "description": "Epoch seconds. Until this time, skip modified-method validation (new methods still enforced). When expired, normal mode resumes. Omit when not needed."
                 }
@@ -48,7 +48,7 @@
                     "description": "Whether disable comments work. When false, no escape hatch (like old STRICT mode).",
                     "default": true
                 },
-                "ignoreModifiedUntilEpoch": {
+                "turnOffRuleUntilEpoch": {
                     "type": "number",
                     "description": "Epoch seconds. Until this time, skip modified-file validation. When expired, normal mode resumes. Omit when not needed."
                 }
@@ -68,7 +68,7 @@
                     "description": "Whether disable comments work. When false, no escape hatch.",
                     "default": true
                 },
-                "ignoreModifiedUntilEpoch": {
+                "turnOffRuleUntilEpoch": {
                     "type": "number",
                     "description": "Epoch seconds. Until this time, skip validation entirely. When expired, normal mode resumes. Omit when not needed."
                 }
@@ -88,7 +88,7 @@
                     "description": "Whether disable comments work. When false, no escape hatch.",
                     "default": true
                 },
-                "ignoreModifiedUntilEpoch": {
+                "turnOffRuleUntilEpoch": {
                     "type": "number",
                     "description": "Epoch seconds. Until this time, skip validation entirely. When expired, normal mode resumes. Omit when not needed."
                 }
@@ -108,7 +108,7 @@
                     "description": "Whether disable comments work. When false, no escape hatch.",
                     "default": true
                 },
-                "ignoreModifiedUntilEpoch": {
+                "turnOffRuleUntilEpoch": {
                     "type": "number",
                     "description": "Epoch seconds. Until this time, skip validation entirely. When expired, normal mode resumes. Omit when not needed."
                 }
@@ -128,7 +128,7 @@
                     "description": "Whether // webpieces-disable no-implicit-any comments work. When false, no escape hatch.",
                     "default": true
                 },
-                "ignoreModifiedUntilEpoch": {
+                "turnOffRuleUntilEpoch": {
                     "type": "number",
                     "description": "Epoch seconds. Until this time, skip validation entirely. When expired, normal mode resumes. Omit when not needed."
                 }
@@ -157,7 +157,7 @@
                     "items": { "type": "string" },
                     "description": "Array of directories (relative to workspace root) containing Dto files"
                 },
-                "ignoreModifiedUntilEpoch": {
+                "turnOffRuleUntilEpoch": {
                     "type": "number",
                     "description": "Epoch seconds. Until this time, skip DTO validation entirely. When expired, normal mode resumes. Omit when not needed."
                 }
@@ -191,7 +191,7 @@
                     "items": { "type": "string" },
                     "description": "Array of directory prefixes (relative to workspace root) to scope validation to. When set, only files under these paths are checked. When empty/omitted, all changed files are checked."
                 },
-                "ignoreModifiedUntilEpoch": {
+                "turnOffRuleUntilEpoch": {
                     "type": "number",
                     "description": "Epoch seconds. Until this time, skip prisma-converter validation entirely. When expired, normal mode resumes. Omit when not needed."
                 }
@@ -211,7 +211,7 @@
                     "description": "Whether disable comments work. When false, no escape hatch.",
                     "default": true
                 },
-                "ignoreModifiedUntilEpoch": {
+                "turnOffRuleUntilEpoch": {
                     "type": "number",
                     "description": "Epoch seconds. Until this time, skip validation entirely. When expired, normal mode resumes. Omit when not needed."
                 }
@@ -231,7 +231,7 @@
                     "description": "Whether disable comments work. When false, no escape hatch.",
                     "default": true
                 },
-                "ignoreModifiedUntilEpoch": {
+                "turnOffRuleUntilEpoch": {
                     "type": "number",
                     "description": "Epoch seconds. Until this time, skip validation entirely. When expired, normal mode resumes. Omit when not needed."
                 }
@@ -251,7 +251,7 @@
                     "description": "Whether disable comments work. When false, no escape hatch.",
                     "default": true
                 },
-                "ignoreModifiedUntilEpoch": {
+                "turnOffRuleUntilEpoch": {
                     "type": "number",
                     "description": "Epoch seconds. Until this time, skip validation entirely. When expired, normal mode resumes. Omit when not needed."
                 }
@@ -271,7 +271,7 @@
                     "description": "Whether disable comments work. When false, no escape hatch.",
                     "default": true
                 },
-                "ignoreModifiedUntilEpoch": {
+                "turnOffRuleUntilEpoch": {
                     "type": "number",
                     "description": "Epoch seconds. Until this time, skip validation entirely. When expired, normal mode resumes. Omit when not needed."
                 },

package/src/executors/validate-dtos/schema.json

@@ -24,7 +24,7 @@
             "description": "Whether @deprecated field exemption works. When false, all fields must match.",
             "default": true
         },
-        "ignoreModifiedUntilEpoch": {
+        "turnOffRuleUntilEpoch": {
             "type": "number",
             "description": "Epoch seconds. Until this time, skip DTO validation entirely. When expired, normal mode resumes. Omit when not needed."
         }

package/src/executors/validate-no-any-unknown/schema.json

@@ -15,7 +15,7 @@
             "description": "Whether disable comments work. When false, no escape hatch.",
             "default": true
         },
-        "ignoreModifiedUntilEpoch": {
+        "turnOffRuleUntilEpoch": {
             "type": "number",
             "description": "Epoch seconds. Until this time, skip validation entirely. When expired, normal mode resumes. Omit when not needed."
         }

package/src/executors/validate-no-destructure/schema.json

@@ -15,7 +15,7 @@
             "description": "Whether disable comments work. When false, no escape hatch.",
             "default": true
         },
-        "ignoreModifiedUntilEpoch": {
+        "turnOffRuleUntilEpoch": {
             "type": "number",
             "description": "Epoch seconds. Until this time, skip validation entirely. When expired, normal mode resumes. Omit when not needed."
         }

package/src/executors/validate-no-direct-api-resolver/schema.json

@@ -15,7 +15,7 @@
             "description": "Whether disable comments work. When false, no escape hatch.",
             "default": true
         },
-        "ignoreModifiedUntilEpoch": {
+        "turnOffRuleUntilEpoch": {
             "type": "number",
             "description": "Epoch seconds. Until this time, skip validation entirely. When expired, normal mode resumes. Omit when not needed."
         },

package/src/executors/validate-no-file-import-cycles/executor.d.ts

@@ -9,14 +9,16 @@
  * local madge and CI runners corrupted their npx cache fetching it), this executor:
  *   - invokes the madge it bundles as a dependency (deterministic, no network),
  *   - is driven by webpieces.config.json like every other webpieces rule, so it
- *     supports an on/off `mode` and a time-boxed `ignoreModifiedUntilEpoch`.
+ *     supports an on/off `mode` and a time-boxed `turnOffRuleUntilEpoch`.
  *
  * Config (webpieces.config.json, rule key `no-file-import-cycles`):
  *   "no-file-import-cycles": {
  *       "mode": "RUN_EVERY_TIME",           // "OFF" disables the gate everywhere
- *       "ignoreModifiedUntilEpoch": 1771931925,  // epoch SECONDS; while now < epoch,
+ *       "turnOffRuleUntilEpoch": 1771931925,  // epoch SECONDS; while now < epoch,
  *                                            //   cycles are reported but the gate PASSES
  *                                            //   (warn, don't fail). After it, fails again.
+ *       "turnOffRuleWhileOnBranch": null,   // branch name; while that branch is checked out,
+ *                                            //   cycles are reported but the gate PASSES
  *       "ignoreTypeOnly": true,             // ignore `import type` re-export cycles
  *                                            //   (erased at compile time, harmless at runtime)
  *       "excludePackages": ["@db/entities"] // npm package names whose source trees madge

package/src/executors/validate-no-file-import-cycles/executor.js

@@ -10,14 +10,16 @@
  * local madge and CI runners corrupted their npx cache fetching it), this executor:
  *   - invokes the madge it bundles as a dependency (deterministic, no network),
  *   - is driven by webpieces.config.json like every other webpieces rule, so it
- *     supports an on/off `mode` and a time-boxed `ignoreModifiedUntilEpoch`.
+ *     supports an on/off `mode` and a time-boxed `turnOffRuleUntilEpoch`.
  *
  * Config (webpieces.config.json, rule key `no-file-import-cycles`):
  *   "no-file-import-cycles": {
  *       "mode": "RUN_EVERY_TIME",           // "OFF" disables the gate everywhere
- *       "ignoreModifiedUntilEpoch": 1771931925,  // epoch SECONDS; while now < epoch,
+ *       "turnOffRuleUntilEpoch": 1771931925,  // epoch SECONDS; while now < epoch,
  *                                            //   cycles are reported but the gate PASSES
  *                                            //   (warn, don't fail). After it, fails again.
+ *       "turnOffRuleWhileOnBranch": null,   // branch name; while that branch is checked out,
+ *                                            //   cycles are reported but the gate PASSES
  *       "ignoreTypeOnly": true,             // ignore `import type` re-export cycles
  *                                            //   (erased at compile time, harmless at runtime)
  *       "excludePackages": ["@db/entities"] // npm package names whose source trees madge
@@ -47,8 +49,8 @@ function loadMadge() {
 }
 /**
  * Decide whether the gate should still FAIL on cycles (true) or only warn
- * (false), considering the universal escape hatches: the ignoreModifiedUntilEpoch
- * grace window and ignoreRuleWhileOnBranch. Logs a one-line explanation when a
+ * (false), considering the universal escape hatches: the turnOffRuleUntilEpoch
+ * grace window and turnOffRuleWhileOnBranch. Logs a one-line explanation when a
  * hatch is active.
  */
 function isFailingActive(epoch, branch) {
@@ -281,8 +283,9 @@ function reportCycles(projectName, cycles) {
     console.error('To exempt a path (generated code, a deliberate bidirectional model), add a pattern to');
     console.error(`"${RULE_NAME}".excludeRegExp in webpieces.config.json. Patterns match paths RELATIVE`);
     console.error('TO THE PROJECT, e.g. "^src/generated/" or "^src/modules/(item|category)/".');
-    console.error('To time-box a known cycle, a human can set "ignoreModifiedUntilEpoch"');
-    console.error(`(epoch seconds) on the "${RULE_NAME}" rule in webpieces.config.json.`);
+    console.error('To time-box a known cycle, a human can set "turnOffRuleUntilEpoch"');
+    console.error(`(epoch seconds) on the "${RULE_NAME}" rule in webpieces.config.json,`);
+    console.error(`or "turnOffRuleWhileOnBranch" (a branch name) to shelter one refactor branch.`);
     console.error(`To turn the gate off entirely, set "${RULE_NAME}".mode to "OFF".\n`);
 }
 async function runExecutor(_options, context) {
@@ -295,8 +298,11 @@ async function runExecutor(_options, context) {
     const projectName = context.projectName ?? 'project';
     const projectConfig = context.projectsConfigurations?.projects[projectName];
     const projectRoot = projectConfig ? path.join(context.root, projectConfig.root) : context.root;
-    const epoch = rule?.options['ignoreModifiedUntilEpoch'];
-    const branch = rule?.options['ignoreRuleWhileOnBranch'];
+    const epoch = rule?.options['turnOffRuleUntilEpoch'];
+    // turnOffRuleWhileOnBranch is required-but-NULLABLE in the config (null = "always on"), so narrow
+    // to a branch NAME here; anything else means no branch scoping.
+    const rawBranch = rule?.options['turnOffRuleWhileOnBranch'];
+    const branch = typeof rawBranch === 'string' ? rawBranch : undefined;
     const ignoreTypeOnly = rule?.options['ignoreTypeOnly'] ?? false;
     const excludePackages = rule?.options['excludePackages'] ?? [];
     const userExcludeRegExp = rule?.options['excludeRegExp'] ?? [];

package/src/executors/validate-no-file-import-cycles/executor.js.map

@@ -1 +1 @@
-{"version":3,"file":"executor.js","sourceRoot":"","sources":["../../../../../../../packages/tooling/nx-webpieces-rules/src/executors/validate-no-file-import-cycles/executor.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+BG;;AA+NH,8CA8BC;AA6DD,8BA4CC;;AAnWD,0DAA0E;AAC1E,+CAAyB;AACzB,mDAA6B;AAC7B,2CAAwC;AAYxC,MAAM,SAAS,GAAG,uBAAuB,CAAC;AAwB1C,SAAS,SAAS;IACd,8DAA8D;IAC9D,MAAM,GAAG,GAAgB,OAAO,CAAC,OAAO,CAAC,CAAC;IAC1C,OAAO,GAAG,CAAC,OAAO,IAAI,GAAG,CAAC;AAC9B,CAAC;AAED;;;;;GAKG;AACH,SAAS,eAAe,CAAC,KAAyB,EAAE,MAA0B;IAC1E,MAAM,IAAI,GAAG,IAAA,6BAAc,EAAC,KAAK,EAAE,MAAM,CAAC,CAAC;IAC3C,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;QACZ,OAAO,CAAC,GAAG,CACP,8BAA8B,IAAI,CAAC,MAAM,GAAG;YACxC,wDAAwD,CAC/D,CAAC;QACF,OAAO,KAAK,CAAC;IACjB,CAAC;IACD,OAAO,IAAI,CAAC;AAChB,CAAC;AAED,+EAA+E;AAC/E,gFAAgF;AAChF,0EAA0E;AAC1E,gFAAgF;AAChF,0EAA0E;AAC1E,MAAM,kBAAkB,GAAG,gEAAgE,CAAC;AAC5F,MAAM,yBAAyB,GAAG,YAAY,CAAC;AAE/C,SAAS,WAAW,CAAC,CAAS;IAC1B,OAAO,CAAC,CAAC,OAAO,CAAC,wBAAwB,EAAE,MAAM,CAAC,CAAC;AACvD,CAAC;AAED,MAAM,uBAAuB;IACzB,KAAK,CAA4B;CACpC;AACD,MAAM,YAAY;IACd,eAAe,CAA2B;CAC7C;AAED,iGAAiG;AACjG,SAAS,iBAAiB,CAAC,aAAqB;IAC5C,uGAAuG;IACvG,IAAI,CAAC;QACD,MAAM,YAAY,GAAG,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,oBAAoB,CAAC,CAAC;QACpE,MAAM,OAAO,GAAG,EAAE,CAAC,YAAY,CAAC,YAAY,EAAE,MAAM,CAAC,CAAC;QACtD,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAiB,CAAC;QACrD,OAAO,QAAQ,EAAE,eAAe,EAAE,KAAK,IAAI,IAAI,CAAC;QACpD,+FAA+F;IAC/F,CAAC;IAAC,OAAO,GAAY,EAAE,CAAC;QACpB,6BAA6B;QAC7B,OAAO,IAAI,CAAC;IAChB,CAAC;AACL,CAAC;AAED;;;GAGG;AACH,SAAS,eAAe,CAAC,SAAiB;IACtC,IAAI,GAAG,GAAG,EAAE,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;IACrF,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;IACpC,OAAO,GAAG,KAAK,MAAM,EAAE,CAAC;QACpB,IAAI,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,cAAc,CAAC,CAAC;YAAE,OAAO,GAAG,CAAC;QAC9D,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IAC5B,CAAC;IACD,OAAO,IAAI,CAAC;AAChB,CAAC;AAED,SAAS,iBAAiB,CAAC,OAAe,EAAE,aAAqB;IAC7D,wEAAwE;IACxE,sIAAsI;IACtI,IAAI,CAAC;QACD,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,OAAO,eAAe,EAAE,EAAE,KAAK,EAAE,CAAC,aAAa,CAAC,EAAE,CAAC,CAAC;QACvF,OAAO,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC;QAClD,qHAAqH;IACrH,CAAC;IAAC,OAAO,GAAY,EAAE,CAAC;QACpB,6BAA6B;QAC7B,wEAAwE;IAC5E,CAAC;IAED,kEAAkE;IAClE,mFAAmF;IACnF,gFAAgF;IAChF,MAAM,aAAa,GAAG,iBAAiB,CAAC,aAAa,CAAC,CAAC;IACvD,MAAM,OAAO,GAAG,aAAa,EAAE,CAAC,OAAO,CAAC,CAAC;IACzC,IAAI,CAAC,OAAO,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACnC,OAAO,CAAC,IAAI,CACR,uEAAuE,OAAO,GAAG;YAC7E,qEAAqE,CAC5E,CAAC;QACF,OAAO,IAAI,CAAC;IAChB,CAAC;IACD,2GAA2G;IAC3G,IAAI,CAAC;QACD,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,aAAa,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC;QACzD,MAAM,OAAO,GAAG,eAAe,CAAC,QAAQ,CAAC,CAAC;QAC1C,IAAI,CAAC,OAAO,EAAE,CAAC;YACX,OAAO,CAAC,IAAI,CACR,wCAAwC,OAAO,QAAQ,QAAQ,GAAG;gBAC9D,8DAA8D,CACrE,CAAC;YACF,OAAO,IAAI,CAAC;QAChB,CAAC;QACD,OAAO,OAAO,CAAC;IACnB,CAAC;IAAC,OAAO,GAAY,EAAE,CAAC;QACpB,MAAM,KAAK,GAAG,IAAA,iBAAO,EAAC,GAAG,CAAC,CAAC;QAC3B,OAAO,CAAC,IAAI,CACR,uEAAuE,OAAO,GAAG;YAC7E,wBAAwB,KAAK,CAAC,OAAO,eAAe,CAC3D,CAAC;QACF,OAAO,IAAI,CAAC;IAChB,CAAC;AACL,CAAC;AAED;;;;;GAKG;AACH,iJAAiJ;AACjJ,SAAS,cAAc,CAAC,GAAW;IAC/B,wGAAwG;IACxG,IAAI,CAAC;QACD,OAAO,EAAE,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC;QAChC,gFAAgF;IAChF,CAAC;IAAC,OAAO,GAAY,EAAE,CAAC;QACpB,6BAA6B;QAC7B,OAAO,GAAG,CAAC;IACf,CAAC;AACL,CAAC;AAED,kFAAkF;AAClF,iJAAiJ;AACjJ,SAAS,cAAc,CAAC,GAAW;IAC/B,6GAA6G;IAC7G,IAAI,CAAC;QACD,KAAK,MAAM,KAAK,IAAI,EAAE,CAAC,WAAW,CAAC,GAAG,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC;YAC/D,IAAI,KAAK,CAAC,IAAI,KAAK,cAAc,IAAI,KAAK,CAAC,IAAI,KAAK,MAAM,IAAI,KAAK,CAAC,IAAI,KAAK,OAAO;gBAAE,SAAS;YAC/F,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;YACxC,IAAI,KAAK,CAAC,WAAW,EAAE,EAAE,CAAC;gBACtB,IAAI,cAAc,CAAC,IAAI,CAAC;oBAAE,OAAO,IAAI,CAAC;YAC1C,CAAC;iBAAM,IAAI,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;gBACrE,OAAO,IAAI,CAAC;YAChB,CAAC;QACL,CAAC;QACD,OAAO,KAAK,CAAC;QACjB,8EAA8E;IAC9E,CAAC;IAAC,OAAO,GAAY,EAAE,CAAC;QACpB,6BAA6B;QAC7B,OAAO,KAAK,CAAC;IACjB,CAAC;AACL,CAAC;AAED;;;;;;;;GAQG;AACH,iJAAiJ;AACjJ,SAAS,mBAAmB,CAAC,GAAW,EAAE,IAAY,EAAE,OAAe;IACnE,qFAAqF;IACrF,MAAM,GAAG,GAAG,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAC/D,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,EAAE,CAAC;QACvB,OAAO,CAAC,IAAI,CACR,qDAAqD,OAAO,kBAAkB,GAAG,GAAG;YAChF,qFAAqF,CAC5F,CAAC;IACN,CAAC;IACD,OAAO,IAAI,WAAW,CAAC,GAAG,CAAC,OAAO,CAAC;AACvC,CAAC;AAED,iJAAiJ;AACjJ,SAAgB,iBAAiB,CAC7B,cAAuB,EACvB,eAAyB,EACzB,aAAqB,EACrB,WAAmB;AACnB,sFAAsF;AACtF,4FAA4F;AAC5F,8FAA8F;AAC9F,oBAA8B,EAAE;IAEhC,MAAM,aAAa,GAAG,CAAC,kBAAkB,EAAE,yBAAyB,EAAE,GAAG,iBAAiB,CAAC,CAAC;IAC5F,8EAA8E;IAC9E,kFAAkF;IAClF,MAAM,IAAI,GAAG,cAAc,CAAC,WAAW,CAAC,CAAC;IACzC,KAAK,MAAM,GAAG,IAAI,eAAe,EAAE,CAAC;QAChC,MAAM,GAAG,GAAG,iBAAiB,CAAC,GAAG,EAAE,aAAa,CAAC,CAAC;QAClD,IAAI,GAAG;YAAE,aAAa,CAAC,IAAI,CAAC,mBAAmB,CAAC,GAAG,EAAE,IAAI,EAAE,GAAG,CAAC,CAAC,CAAC;IACrE,CAAC;IACD,MAAM,OAAO,GAAiB;QAC1B,cAAc,EAAE,CAAC,IAAI,EAAE,KAAK,CAAC;QAC7B,aAAa;KAChB,CAAC;IACF,IAAI,cAAc,EAAE,CAAC;QACjB,iFAAiF;QACjF,OAAO,CAAC,gBAAgB,GAAG;YACvB,EAAE,EAAE,EAAE,eAAe,EAAE,IAAI,EAAE;YAC7B,GAAG,EAAE,EAAE,eAAe,EAAE,IAAI,EAAE;SACjC,CAAC;IACN,CAAC;IACD,OAAO,OAAO,CAAC;AACnB,CAAC;AAED;;;;;;;;;;GAUG;AACH,iJAAiJ;AACjJ,KAAK,UAAU,4BAA4B,CACvC,KAAc,EACd,WAAmB,EACnB,WAAyB,EACzB,iBAA2B;IAE3B,IAAI,iBAAiB,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO;IAC3C,MAAM,QAAQ,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC,WAAW,EAAE,WAAW,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC;IAC5E,KAAK,MAAM,OAAO,IAAI,iBAAiB,EAAE,CAAC;QACtC,IAAI,EAAU,CAAC;QACf,4GAA4G;QAC5G,IAAI,CAAC;YACD,EAAE,GAAG,IAAI,MAAM,CAAC,OAAO,CAAC,CAAC;YAC7B,iGAAiG;QACjG,CAAC;QAAC,OAAO,GAAY,EAAE,CAAC;YACpB,MAAM,KAAK,GAAG,IAAA,iBAAO,EAAC,GAAG,CAAC,CAAC;YAC3B,OAAO,CAAC,IAAI,CACR,mDAAmD,OAAO,wBAAwB;gBAC9E,KAAK,KAAK,CAAC,OAAO,eAAe,CACxC,CAAC;YACF,SAAS;QACb,CAAC;QACD,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,EAAU,EAAE,EAAE,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC;YAC9C,OAAO,CAAC,IAAI,CACR,mDAAmD,OAAO,uBAAuB;gBAC7E,IAAI,QAAQ,CAAC,MAAM,kDAAkD;gBACrE,6EAA6E;gBAC7E,oCAAoC,CAC3C,CAAC;QACN,CAAC;IACL,CAAC;AACL,CAAC;AAED,SAAS,YAAY,CAAC,WAAmB,EAAE,MAAkB;IACzD,OAAO,CAAC,KAAK,CAAC,aAAa,MAAM,CAAC,MAAM,gCAAgC,WAAW,KAAK,CAAC,CAAC;IAC1F,MAAM,CAAC,OAAO,CAAC,CAAC,KAAe,EAAE,CAAS,EAAE,EAAE;QAC1C,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;IACpE,CAAC,CAAC,CAAC;IACH,OAAO,CAAC,KAAK,CAAC,2EAA2E,CAAC,CAAC;IAC3F,OAAO,CAAC,KAAK,CAAC,uFAAuF,CAAC,CAAC;IACvG,OAAO,CAAC,KAAK,CAAC,IAAI,SAAS,yEAAyE,CAAC,CAAC;IACtG,OAAO,CAAC,KAAK,CAAC,4EAA4E,CAAC,CAAC;IAC5F,OAAO,CAAC,KAAK,CAAC,uEAAuE,CAAC,CAAC;IACvF,OAAO,CAAC,KAAK,CAAC,2BAA2B,SAAS,kCAAkC,CAAC,CAAC;IACtF,OAAO,CAAC,KAAK,CAAC,uCAAuC,SAAS,oBAAoB,CAAC,CAAC;AACxF,CAAC;AAEc,KAAK,UAAU,WAAW,CACrC,QAA2C,EAC3C,OAAwB;IAExB,MAAM,MAAM,GAAG,IAAA,8BAAe,EAAC,OAAO,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC;IACtD,MAAM,IAAI,GAAG,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;IAEzC,IAAI,IAAI,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;QACrB,OAAO,CAAC,GAAG,CAAC,kBAAkB,SAAS,gBAAgB,CAAC,CAAC;QACzD,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;IAC7B,CAAC;IAED,MAAM,WAAW,GAAG,OAAO,CAAC,WAAW,IAAI,SAAS,CAAC;IACrD,MAAM,aAAa,GAAG,OAAO,CAAC,sBAAsB,EAAE,QAAQ,CAAC,WAAW,CAAC,CAAC;IAC5E,MAAM,WAAW,GAAG,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,aAAa,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC;IAE/F,MAAM,KAAK,GAAG,IAAI,EAAE,OAAO,CAAC,0BAA0B,CAAuB,CAAC;IAC9E,MAAM,MAAM,GAAG,IAAI,EAAE,OAAO,CAAC,yBAAyB,CAAuB,CAAC;IAC9E,MAAM,cAAc,GAAI,IAAI,EAAE,OAAO,CAAC,gBAAgB,CAAyB,IAAI,KAAK,CAAC;IACzF,MAAM,eAAe,GAAI,IAAI,EAAE,OAAO,CAAC,iBAAiB,CAA0B,IAAI,EAAE,CAAC;IACzF,MAAM,iBAAiB,GAAI,IAAI,EAAE,OAAO,CAAC,eAAe,CAA0B,IAAI,EAAE,CAAC;IAEzF,OAAO,CAAC,GAAG,CAAC,kCAAkC,WAAW,YAAY,CAAC,CAAC;IAEvE,MAAM,KAAK,GAAG,SAAS,EAAE,CAAC;IAC1B,4FAA4F;IAC5F,gGAAgG;IAChG,wEAAwE;IACxE,MAAM,WAAW,GAAG,iBAAiB,CAAC,cAAc,EAAE,eAAe,EAAE,OAAO,CAAC,IAAI,EAAE,WAAW,CAAC,CAAC;IAClG,MAAM,OAAO,GAAG,iBAAiB,CAAC,cAAc,EAAE,eAAe,EAAE,OAAO,CAAC,IAAI,EAAE,WAAW,EAAE,iBAAiB,CAAC,CAAC;IACjH,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC;IACjD,MAAM,MAAM,GAAG,MAAM,CAAC,QAAQ,EAAE,CAAC;IAEjC,MAAM,4BAA4B,CAAC,KAAK,EAAE,WAAW,EAAE,WAAW,EAAE,iBAAiB,CAAC,CAAC;IAEvF,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACtB,OAAO,CAAC,GAAG,CAAC,qCAAqC,CAAC,CAAC;QACnD,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;IAC7B,CAAC;IAED,YAAY,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC;IAElC,yEAAyE;IACzE,OAAO,EAAE,OAAO,EAAE,CAAC,eAAe,CAAC,KAAK,EAAE,MAAM,CAAC,EAAE,CAAC;AACxD,CAAC","sourcesContent":["/**\n * Validate No File Import Cycles Executor\n *\n * Per-project circular-dependency gate. Runs `madge` over the project's\n * TypeScript sources and fails when an import cycle is found.\n *\n * Unlike the old `nx:run-commands` target (which shelled out to a runtime\n * `npx madge` fetch — undeclared, so consumers of the published plugin had no\n * local madge and CI runners corrupted their npx cache fetching it), this executor:\n *   - invokes the madge it bundles as a dependency (deterministic, no network),\n *   - is driven by webpieces.config.json like every other webpieces rule, so it\n *     supports an on/off `mode` and a time-boxed `ignoreModifiedUntilEpoch`.\n *\n * Config (webpieces.config.json, rule key `no-file-import-cycles`):\n *   \"no-file-import-cycles\": {\n *       \"mode\": \"RUN_EVERY_TIME\",           // \"OFF\" disables the gate everywhere\n *       \"ignoreModifiedUntilEpoch\": 1771931925,  // epoch SECONDS; while now < epoch,\n *                                            //   cycles are reported but the gate PASSES\n *                                            //   (warn, don't fail). After it, fails again.\n *       \"ignoreTypeOnly\": true,             // ignore `import type` re-export cycles\n *                                            //   (erased at compile time, harmless at runtime)\n *       \"excludePackages\": [\"@db/entities\"] // npm package names whose source trees madge\n *                                            //   should NOT traverse (stops foreign cycles\n *                                            //   from leaking into this project's report)\n *   }\n *\n * Mirrors the dated-disable model already used for the method/file-size rules:\n * the epoch is a grace window so a strict gate can be turned on against an\n * existing codebase without an open-ended \"off everywhere\" escape hatch.\n *\n * Usage: nx run <project>:validate-no-file-import-cycles\n */\n\nimport type { ExecutorContext } from '@nx/devkit';\nimport { loadAndValidate, shouldSkipRule } from '@webpieces/rules-config';\nimport * as fs from 'fs';\nimport * as path from 'path';\nimport { toError } from '../../toError';\n\nexport type ValidateNoFileImportCyclesMode = 'RUN_EVERY_TIME' | 'OFF';\n\nexport interface ValidateNoFileImportCyclesOptions {\n    // No options here — config comes from webpieces.config.json at runtime.\n}\n\nexport interface ExecutorResult {\n    success: boolean;\n}\n\nconst RULE_NAME = 'no-file-import-cycles';\n\n// madge ships no type declarations; describe the slice of its API we use.\n// webpieces-disable no-any-unknown -- minimal hand-typed surface for an untyped dependency\ninterface MadgeOptions {\n    fileExtensions: string[];\n    excludeRegExp?: string[];\n    detectiveOptions?: Record<string, unknown>;\n}\ninterface MadgeInstance {\n    circular(): string[][];\n    // The full dependency graph: id → its dependency ids. Keys are the ids madge\n    // traversed (relative to the base it was invoked with) — used to detect\n    // excludeRegExp patterns that match nothing.\n    obj(): Record<string, string[]>;\n}\ntype MadgeFn = (target: string, options: MadgeOptions) => Promise<MadgeInstance>;\n\n// madge's CJS export is the callable itself; some bundlers wrap it under `.default`.\ninterface MadgeModuleExtras {\n    default?: MadgeFn;\n}\ntype MadgeModule = MadgeFn & MadgeModuleExtras;\n\nfunction loadMadge(): MadgeFn {\n    // eslint-disable-next-line @typescript-eslint/no-var-requires\n    const mod: MadgeModule = require('madge');\n    return mod.default ?? mod;\n}\n\n/**\n * Decide whether the gate should still FAIL on cycles (true) or only warn\n * (false), considering the universal escape hatches: the ignoreModifiedUntilEpoch\n * grace window and ignoreRuleWhileOnBranch. Logs a one-line explanation when a\n * hatch is active.\n */\nfunction isFailingActive(epoch: number | undefined, branch: string | undefined): boolean {\n    const skip = shouldSkipRule(epoch, branch);\n    if (skip.skip) {\n        console.log(\n            `\\n⏳ no-file-import-cycles: ${skip.reason}.` +\n                '\\n   Cycles will be reported but NOT fail the build.\\n',\n        );\n        return false;\n    }\n    return true;\n}\n\n// Never scan build output or declaration files. A project that compiles into a\n// local `dist/` (or build/out/coverage) would otherwise report cycles among the\n// emitted `*.d.ts` files instead of — or in addition to — the real source\n// cycles, so the gate would flag compiled-output noise and could diverge from a\n// plain `madge src` run. Excluding these makes the gate scan source only.\nconst EXCLUDE_BUILD_DIRS = '(^|/)(node_modules|dist|build|out|coverage|\\\\.nx|\\\\.next)(/|$)';\nconst EXCLUDE_DECLARATION_FILES = '\\\\.d\\\\.ts$';\n\nfunction escapeRegex(s: string): string {\n    return s.replace(/[/\\-\\\\^$*+?.()|[\\]{}]/g, '\\\\$&');\n}\n\nclass TsconfigCompilerOptions {\n    paths?: Record<string, string[]>;\n}\nclass TsconfigBase {\n    compilerOptions?: TsconfigCompilerOptions;\n}\n\n/** Read tsconfig.base.json compilerOptions.paths from the workspace root, or null on failure. */\nfunction readTsconfigPaths(workspaceRoot: string): Record<string, string[]> | null {\n    // eslint-disable-next-line @webpieces/no-unmanaged-exceptions -- best-effort read; null on any failure\n    try {\n        const tsconfigPath = path.join(workspaceRoot, 'tsconfig.base.json');\n        const content = fs.readFileSync(tsconfigPath, 'utf8');\n        const tsconfig = JSON.parse(content) as TsconfigBase;\n        return tsconfig?.compilerOptions?.paths ?? null;\n    // webpieces-disable catch-error-pattern -- file missing or malformed JSON; caller handles null\n    } catch (err: unknown) {\n        //const error = toError(err);\n        return null;\n    }\n}\n\n/**\n * Walk up from startPath to find the nearest ancestor directory that contains\n * a package.json. Returns that directory path, or null if none found.\n */\nfunction findPackageRoot(startPath: string): string | null {\n    let dir = fs.statSync(startPath).isDirectory() ? startPath : path.dirname(startPath);\n    const fsRoot = path.parse(dir).root;\n    while (dir !== fsRoot) {\n        if (fs.existsSync(path.join(dir, 'package.json'))) return dir;\n        dir = path.dirname(dir);\n    }\n    return null;\n}\n\nfunction resolvePackageDir(pkgName: string, workspaceRoot: string): string | null {\n    // First try require.resolve (works for installed / symlinked packages).\n    // eslint-disable-next-line @webpieces/no-unmanaged-exceptions -- resolution failure is expected; fall through to tsconfig path lookup\n    try {\n        const pkgJson = require.resolve(`${pkgName}/package.json`, { paths: [workspaceRoot] });\n        return fs.realpathSync(path.dirname(pkgJson));\n    // webpieces-disable catch-error-pattern -- expected for non-installed packages; fall through to tsconfig path lookup\n    } catch (err: unknown) {\n        //const error = toError(err);\n        // Fall through to tsconfig path resolution for pnpm workspace packages.\n    }\n\n    // Fallback: resolve via tsconfig.base.json compilerOptions.paths.\n    // pnpm workspace packages are not in node_modules, so require.resolve fails above;\n    // tsconfig.base.json maps e.g. \"@acme-internal/db\" → [\"libraries/db/index.ts\"].\n    const tsconfigPaths = readTsconfigPaths(workspaceRoot);\n    const entries = tsconfigPaths?.[pkgName];\n    if (!entries || entries.length === 0) {\n        console.warn(\n            `⚠️  no-file-import-cycles: could not resolve excludePackages entry \"${pkgName}\"` +\n                ` — not found in node_modules or tsconfig.base.json paths. Skipping.`,\n        );\n        return null;\n    }\n    // eslint-disable-next-line @webpieces/no-unmanaged-exceptions -- best-effort fallback; warn on any failure\n    try {\n        const resolved = path.resolve(workspaceRoot, entries[0]);\n        const pkgRoot = findPackageRoot(resolved);\n        if (!pkgRoot) {\n            console.warn(\n                `⚠️  no-file-import-cycles: resolved \"${pkgName}\" → \"${resolved}\"` +\n                    ` but found no package.json in parent directories — skipping.`,\n            );\n            return null;\n        }\n        return pkgRoot;\n    } catch (err: unknown) {\n        const error = toError(err);\n        console.warn(\n            `⚠️  no-file-import-cycles: could not resolve excludePackages entry \"${pkgName}\"` +\n                ` via tsconfig paths (${error.message}) — skipping.`,\n        );\n        return null;\n    }\n}\n\n/**\n * Realpath a directory, tolerating a non-existent path (returns the input).\n * madge traverses through pnpm symlinks to real paths, and resolvePackageDir\n * already realpaths its result, so projectRoot must be realpath'd too or the\n * computed relative path won't line up with the ids madge emits.\n */\n// webpieces-disable no-function-outside-class -- nx executor module; file is functional by convention (see resolvePackageDir/reportCycles above)\nfunction realpathOrSelf(dir: string): string {\n    // eslint-disable-next-line @webpieces/no-unmanaged-exceptions -- best-effort; fall back to the raw path\n    try {\n        return fs.realpathSync(dir);\n    // webpieces-disable catch-error-pattern -- path may not exist yet; use it as-is\n    } catch (err: unknown) {\n        //const error = toError(err);\n        return dir;\n    }\n}\n\n/** True if dir contains at least one .ts/.tsx source file anywhere beneath it. */\n// webpieces-disable no-function-outside-class -- nx executor module; file is functional by convention (see resolvePackageDir/reportCycles above)\nfunction hasSourceFiles(dir: string): boolean {\n    // eslint-disable-next-line @webpieces/no-unmanaged-exceptions -- best-effort scan; false on any read failure\n    try {\n        for (const entry of fs.readdirSync(dir, { withFileTypes: true })) {\n            if (entry.name === 'node_modules' || entry.name === 'dist' || entry.name === 'build') continue;\n            const full = path.join(dir, entry.name);\n            if (entry.isDirectory()) {\n                if (hasSourceFiles(full)) return true;\n            } else if (/\\.tsx?$/.test(entry.name) && !entry.name.endsWith('.d.ts')) {\n                return true;\n            }\n        }\n        return false;\n    // webpieces-disable catch-error-pattern -- unreadable dir; treat as no source\n    } catch (err: unknown) {\n        //const error = toError(err);\n        return false;\n    }\n}\n\n/**\n * Build the exclude pattern for one resolved package dir, RELATIVE to the base\n * madge is invoked with (projectRoot). madge matches excludeRegExp against ids\n * relative to that base — e.g. '../../libraries/db/src/x.ts' — so an absolute\n * `^/abs/...` anchor can never match and silently excludes nothing. Returns the\n * relative-anchored pattern. Warns (but still returns the pattern) when the dir\n * holds no source madge would traverse, closing the resolves-but-matches-nothing\n * silent-failure gap.\n */\n// webpieces-disable no-function-outside-class -- nx executor module; file is functional by convention (see resolvePackageDir/reportCycles above)\nfunction buildExcludePattern(dir: string, base: string, pkgName: string): string {\n    // madge ids always use forward slashes; normalise path.sep so this holds on Windows.\n    const rel = path.relative(base, dir).split(path.sep).join('/');\n    if (!hasSourceFiles(dir)) {\n        console.warn(\n            `⚠️  no-file-import-cycles: excludePackages entry \"${pkgName}\" resolved to \"${dir}\"` +\n                ` but that directory contains no .ts/.tsx source — the exclusion will match nothing.`,\n        );\n    }\n    return `^${escapeRegex(rel)}(/|$)`;\n}\n\n// webpieces-disable no-function-outside-class -- nx executor module; file is functional by convention (see resolvePackageDir/reportCycles above)\nexport function buildMadgeOptions(\n    ignoreTypeOnly: boolean,\n    excludePackages: string[],\n    workspaceRoot: string,\n    projectRoot: string,\n    // Raw patterns from config, handed to madge verbatim. Matched against ids RELATIVE TO\n    // projectRoot (see NoFileImportCyclesConfig.excludeRegExp) — the executor warns on any that\n    // match nothing so a mis-anchored (workspace-rooted / absolute) pattern isn't a silent no-op.\n    userExcludeRegExp: string[] = [],\n): MadgeOptions {\n    const excludeRegExp = [EXCLUDE_BUILD_DIRS, EXCLUDE_DECLARATION_FILES, ...userExcludeRegExp];\n    // madge is invoked with projectRoot as its base and emits ids relative to it;\n    // realpath it to match resolvePackageDir's realpath'd result under pnpm symlinks.\n    const base = realpathOrSelf(projectRoot);\n    for (const pkg of excludePackages) {\n        const dir = resolvePackageDir(pkg, workspaceRoot);\n        if (dir) excludeRegExp.push(buildExcludePattern(dir, base, pkg));\n    }\n    const options: MadgeOptions = {\n        fileExtensions: ['ts', 'tsx'],\n        excludeRegExp,\n    };\n    if (ignoreTypeOnly) {\n        // dependency-tree's TS detective drops `import type {...}` edges with this flag.\n        options.detectiveOptions = {\n            ts: { skipTypeImports: true },\n            tsx: { skipTypeImports: true },\n        };\n    }\n    return options;\n}\n\n/**\n * The relative-id trap: madge matches excludeRegExp against ids RELATIVE TO\n * projectRoot (e.g. 'src/generated/api.ts'), so a workspace-anchored pattern\n * ('^libraries/apis/foo/src/...') or an absolute one ('^/abs/...') silently\n * matches nothing and the exclusion is a no-op. To make that visible, run madge\n * WITHOUT the user patterns to get the id universe and warn for any pattern that\n * matches none of it (or is not a valid regex). Same \"resolves but matches\n * nothing\" idea buildExcludePattern uses for excludePackages. Only invoked when\n * the consumer actually configured excludeRegExp, so the extra traversal is paid\n * only in the rare case that opts in.\n */\n// webpieces-disable no-function-outside-class -- nx executor module; file is functional by convention (see resolvePackageDir/reportCycles above)\nasync function warnOnUnmatchedExcludeRegExp(\n    madge: MadgeFn,\n    projectRoot: string,\n    baseOptions: MadgeOptions,\n    userExcludeRegExp: string[],\n): Promise<void> {\n    if (userExcludeRegExp.length === 0) return;\n    const universe = Object.keys((await madge(projectRoot, baseOptions)).obj());\n    for (const pattern of userExcludeRegExp) {\n        let re: RegExp;\n        // eslint-disable-next-line @webpieces/no-unmanaged-exceptions -- invalid user regex is reported, not thrown\n        try {\n            re = new RegExp(pattern);\n        // webpieces-disable catch-error-pattern -- surface the bad pattern to the consumer, then move on\n        } catch (err: unknown) {\n            const error = toError(err);\n            console.warn(\n                `⚠️  no-file-import-cycles: excludeRegExp entry \"${pattern}\" is not a valid regex` +\n                    ` (${error.message}) — skipping.`,\n            );\n            continue;\n        }\n        if (!universe.some((id: string) => re.test(id))) {\n            console.warn(\n                `⚠️  no-file-import-cycles: excludeRegExp entry \"${pattern}\" matched none of the` +\n                    ` ${universe.length} traversed file(s) — the exclusion does nothing.` +\n                    `\\n   Patterns match paths RELATIVE TO THE PROJECT (e.g. \"^src/generated/\"),` +\n                    ` not workspace-rooted or absolute.`,\n            );\n        }\n    }\n}\n\nfunction reportCycles(projectName: string, cycles: string[][]): void {\n    console.error(`\\n❌ Found ${cycles.length} circular import cycle(s) in ${projectName}:\\n`);\n    cycles.forEach((cycle: string[], i: number) => {\n        console.error(`  ${i + 1}. ${cycle.join(' → ')} → ${cycle[0]}`);\n    });\n    console.error('\\nTo fix, break the cycle (extract a shared module, or use an interface).');\n    console.error('To exempt a path (generated code, a deliberate bidirectional model), add a pattern to');\n    console.error(`\"${RULE_NAME}\".excludeRegExp in webpieces.config.json. Patterns match paths RELATIVE`);\n    console.error('TO THE PROJECT, e.g. \"^src/generated/\" or \"^src/modules/(item|category)/\".');\n    console.error('To time-box a known cycle, a human can set \"ignoreModifiedUntilEpoch\"');\n    console.error(`(epoch seconds) on the \"${RULE_NAME}\" rule in webpieces.config.json.`);\n    console.error(`To turn the gate off entirely, set \"${RULE_NAME}\".mode to \"OFF\".\\n`);\n}\n\nexport default async function runExecutor(\n    _options: ValidateNoFileImportCyclesOptions,\n    context: ExecutorContext,\n): Promise<ExecutorResult> {\n    const shared = loadAndValidate(context.root).resolved;\n    const rule = shared.rules.get(RULE_NAME);\n\n    if (rule && rule.isOff) {\n        console.log(`\\n⏭️  Skipping ${RULE_NAME} (mode: OFF)\\n`);\n        return { success: true };\n    }\n\n    const projectName = context.projectName ?? 'project';\n    const projectConfig = context.projectsConfigurations?.projects[projectName];\n    const projectRoot = projectConfig ? path.join(context.root, projectConfig.root) : context.root;\n\n    const epoch = rule?.options['ignoreModifiedUntilEpoch'] as number | undefined;\n    const branch = rule?.options['ignoreRuleWhileOnBranch'] as string | undefined;\n    const ignoreTypeOnly = (rule?.options['ignoreTypeOnly'] as boolean | undefined) ?? false;\n    const excludePackages = (rule?.options['excludePackages'] as string[] | undefined) ?? [];\n    const userExcludeRegExp = (rule?.options['excludeRegExp'] as string[] | undefined) ?? [];\n\n    console.log(`\\n🔁 Checking import cycles in ${projectName} (madge)\\n`);\n\n    const madge = loadMadge();\n    // baseOptions carries the built-in + excludePackages regexes only; the real run appends the\n    // consumer's excludeRegExp, and the warning pass re-uses baseOptions to see what those patterns\n    // *would* have to match against (madge's un-user-filtered id universe).\n    const baseOptions = buildMadgeOptions(ignoreTypeOnly, excludePackages, context.root, projectRoot);\n    const options = buildMadgeOptions(ignoreTypeOnly, excludePackages, context.root, projectRoot, userExcludeRegExp);\n    const result = await madge(projectRoot, options);\n    const cycles = result.circular();\n\n    await warnOnUnmatchedExcludeRegExp(madge, projectRoot, baseOptions, userExcludeRegExp);\n\n    if (cycles.length === 0) {\n        console.log('✅ No circular import cycles found\\n');\n        return { success: true };\n    }\n\n    reportCycles(projectName, cycles);\n\n    // Grace window or branch hatch active → report but pass; otherwise fail.\n    return { success: !isFailingActive(epoch, branch) };\n}\n"]}
+{"version":3,"file":"executor.js","sourceRoot":"","sources":["../../../../../../../packages/tooling/nx-webpieces-rules/src/executors/validate-no-file-import-cycles/executor.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAiCG;;AA+NH,8CA8BC;AA8DD,8BA+CC;;AAvWD,0DAA0E;AAC1E,+CAAyB;AACzB,mDAA6B;AAC7B,2CAAwC;AAYxC,MAAM,SAAS,GAAG,uBAAuB,CAAC;AAwB1C,SAAS,SAAS;IACd,8DAA8D;IAC9D,MAAM,GAAG,GAAgB,OAAO,CAAC,OAAO,CAAC,CAAC;IAC1C,OAAO,GAAG,CAAC,OAAO,IAAI,GAAG,CAAC;AAC9B,CAAC;AAED;;;;;GAKG;AACH,SAAS,eAAe,CAAC,KAAyB,EAAE,MAA0B;IAC1E,MAAM,IAAI,GAAG,IAAA,6BAAc,EAAC,KAAK,EAAE,MAAM,CAAC,CAAC;IAC3C,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;QACZ,OAAO,CAAC,GAAG,CACP,8BAA8B,IAAI,CAAC,MAAM,GAAG;YACxC,wDAAwD,CAC/D,CAAC;QACF,OAAO,KAAK,CAAC;IACjB,CAAC;IACD,OAAO,IAAI,CAAC;AAChB,CAAC;AAED,+EAA+E;AAC/E,gFAAgF;AAChF,0EAA0E;AAC1E,gFAAgF;AAChF,0EAA0E;AAC1E,MAAM,kBAAkB,GAAG,gEAAgE,CAAC;AAC5F,MAAM,yBAAyB,GAAG,YAAY,CAAC;AAE/C,SAAS,WAAW,CAAC,CAAS;IAC1B,OAAO,CAAC,CAAC,OAAO,CAAC,wBAAwB,EAAE,MAAM,CAAC,CAAC;AACvD,CAAC;AAED,MAAM,uBAAuB;IACzB,KAAK,CAA4B;CACpC;AACD,MAAM,YAAY;IACd,eAAe,CAA2B;CAC7C;AAED,iGAAiG;AACjG,SAAS,iBAAiB,CAAC,aAAqB;IAC5C,uGAAuG;IACvG,IAAI,CAAC;QACD,MAAM,YAAY,GAAG,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,oBAAoB,CAAC,CAAC;QACpE,MAAM,OAAO,GAAG,EAAE,CAAC,YAAY,CAAC,YAAY,EAAE,MAAM,CAAC,CAAC;QACtD,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAiB,CAAC;QACrD,OAAO,QAAQ,EAAE,eAAe,EAAE,KAAK,IAAI,IAAI,CAAC;QACpD,+FAA+F;IAC/F,CAAC;IAAC,OAAO,GAAY,EAAE,CAAC;QACpB,6BAA6B;QAC7B,OAAO,IAAI,CAAC;IAChB,CAAC;AACL,CAAC;AAED;;;GAGG;AACH,SAAS,eAAe,CAAC,SAAiB;IACtC,IAAI,GAAG,GAAG,EAAE,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;IACrF,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;IACpC,OAAO,GAAG,KAAK,MAAM,EAAE,CAAC;QACpB,IAAI,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,cAAc,CAAC,CAAC;YAAE,OAAO,GAAG,CAAC;QAC9D,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IAC5B,CAAC;IACD,OAAO,IAAI,CAAC;AAChB,CAAC;AAED,SAAS,iBAAiB,CAAC,OAAe,EAAE,aAAqB;IAC7D,wEAAwE;IACxE,sIAAsI;IACtI,IAAI,CAAC;QACD,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,OAAO,eAAe,EAAE,EAAE,KAAK,EAAE,CAAC,aAAa,CAAC,EAAE,CAAC,CAAC;QACvF,OAAO,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC;QAClD,qHAAqH;IACrH,CAAC;IAAC,OAAO,GAAY,EAAE,CAAC;QACpB,6BAA6B;QAC7B,wEAAwE;IAC5E,CAAC;IAED,kEAAkE;IAClE,mFAAmF;IACnF,gFAAgF;IAChF,MAAM,aAAa,GAAG,iBAAiB,CAAC,aAAa,CAAC,CAAC;IACvD,MAAM,OAAO,GAAG,aAAa,EAAE,CAAC,OAAO,CAAC,CAAC;IACzC,IAAI,CAAC,OAAO,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACnC,OAAO,CAAC,IAAI,CACR,uEAAuE,OAAO,GAAG;YAC7E,qEAAqE,CAC5E,CAAC;QACF,OAAO,IAAI,CAAC;IAChB,CAAC;IACD,2GAA2G;IAC3G,IAAI,CAAC;QACD,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,aAAa,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC;QACzD,MAAM,OAAO,GAAG,eAAe,CAAC,QAAQ,CAAC,CAAC;QAC1C,IAAI,CAAC,OAAO,EAAE,CAAC;YACX,OAAO,CAAC,IAAI,CACR,wCAAwC,OAAO,QAAQ,QAAQ,GAAG;gBAC9D,8DAA8D,CACrE,CAAC;YACF,OAAO,IAAI,CAAC;QAChB,CAAC;QACD,OAAO,OAAO,CAAC;IACnB,CAAC;IAAC,OAAO,GAAY,EAAE,CAAC;QACpB,MAAM,KAAK,GAAG,IAAA,iBAAO,EAAC,GAAG,CAAC,CAAC;QAC3B,OAAO,CAAC,IAAI,CACR,uEAAuE,OAAO,GAAG;YAC7E,wBAAwB,KAAK,CAAC,OAAO,eAAe,CAC3D,CAAC;QACF,OAAO,IAAI,CAAC;IAChB,CAAC;AACL,CAAC;AAED;;;;;GAKG;AACH,iJAAiJ;AACjJ,SAAS,cAAc,CAAC,GAAW;IAC/B,wGAAwG;IACxG,IAAI,CAAC;QACD,OAAO,EAAE,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC;QAChC,gFAAgF;IAChF,CAAC;IAAC,OAAO,GAAY,EAAE,CAAC;QACpB,6BAA6B;QAC7B,OAAO,GAAG,CAAC;IACf,CAAC;AACL,CAAC;AAED,kFAAkF;AAClF,iJAAiJ;AACjJ,SAAS,cAAc,CAAC,GAAW;IAC/B,6GAA6G;IAC7G,IAAI,CAAC;QACD,KAAK,MAAM,KAAK,IAAI,EAAE,CAAC,WAAW,CAAC,GAAG,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC;YAC/D,IAAI,KAAK,CAAC,IAAI,KAAK,cAAc,IAAI,KAAK,CAAC,IAAI,KAAK,MAAM,IAAI,KAAK,CAAC,IAAI,KAAK,OAAO;gBAAE,SAAS;YAC/F,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;YACxC,IAAI,KAAK,CAAC,WAAW,EAAE,EAAE,CAAC;gBACtB,IAAI,cAAc,CAAC,IAAI,CAAC;oBAAE,OAAO,IAAI,CAAC;YAC1C,CAAC;iBAAM,IAAI,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;gBACrE,OAAO,IAAI,CAAC;YAChB,CAAC;QACL,CAAC;QACD,OAAO,KAAK,CAAC;QACjB,8EAA8E;IAC9E,CAAC;IAAC,OAAO,GAAY,EAAE,CAAC;QACpB,6BAA6B;QAC7B,OAAO,KAAK,CAAC;IACjB,CAAC;AACL,CAAC;AAED;;;;;;;;GAQG;AACH,iJAAiJ;AACjJ,SAAS,mBAAmB,CAAC,GAAW,EAAE,IAAY,EAAE,OAAe;IACnE,qFAAqF;IACrF,MAAM,GAAG,GAAG,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAC/D,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,EAAE,CAAC;QACvB,OAAO,CAAC,IAAI,CACR,qDAAqD,OAAO,kBAAkB,GAAG,GAAG;YAChF,qFAAqF,CAC5F,CAAC;IACN,CAAC;IACD,OAAO,IAAI,WAAW,CAAC,GAAG,CAAC,OAAO,CAAC;AACvC,CAAC;AAED,iJAAiJ;AACjJ,SAAgB,iBAAiB,CAC7B,cAAuB,EACvB,eAAyB,EACzB,aAAqB,EACrB,WAAmB;AACnB,sFAAsF;AACtF,4FAA4F;AAC5F,8FAA8F;AAC9F,oBAA8B,EAAE;IAEhC,MAAM,aAAa,GAAG,CAAC,kBAAkB,EAAE,yBAAyB,EAAE,GAAG,iBAAiB,CAAC,CAAC;IAC5F,8EAA8E;IAC9E,kFAAkF;IAClF,MAAM,IAAI,GAAG,cAAc,CAAC,WAAW,CAAC,CAAC;IACzC,KAAK,MAAM,GAAG,IAAI,eAAe,EAAE,CAAC;QAChC,MAAM,GAAG,GAAG,iBAAiB,CAAC,GAAG,EAAE,aAAa,CAAC,CAAC;QAClD,IAAI,GAAG;YAAE,aAAa,CAAC,IAAI,CAAC,mBAAmB,CAAC,GAAG,EAAE,IAAI,EAAE,GAAG,CAAC,CAAC,CAAC;IACrE,CAAC;IACD,MAAM,OAAO,GAAiB;QAC1B,cAAc,EAAE,CAAC,IAAI,EAAE,KAAK,CAAC;QAC7B,aAAa;KAChB,CAAC;IACF,IAAI,cAAc,EAAE,CAAC;QACjB,iFAAiF;QACjF,OAAO,CAAC,gBAAgB,GAAG;YACvB,EAAE,EAAE,EAAE,eAAe,EAAE,IAAI,EAAE;YAC7B,GAAG,EAAE,EAAE,eAAe,EAAE,IAAI,EAAE;SACjC,CAAC;IACN,CAAC;IACD,OAAO,OAAO,CAAC;AACnB,CAAC;AAED;;;;;;;;;;GAUG;AACH,iJAAiJ;AACjJ,KAAK,UAAU,4BAA4B,CACvC,KAAc,EACd,WAAmB,EACnB,WAAyB,EACzB,iBAA2B;IAE3B,IAAI,iBAAiB,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO;IAC3C,MAAM,QAAQ,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC,WAAW,EAAE,WAAW,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC;IAC5E,KAAK,MAAM,OAAO,IAAI,iBAAiB,EAAE,CAAC;QACtC,IAAI,EAAU,CAAC;QACf,4GAA4G;QAC5G,IAAI,CAAC;YACD,EAAE,GAAG,IAAI,MAAM,CAAC,OAAO,CAAC,CAAC;YAC7B,iGAAiG;QACjG,CAAC;QAAC,OAAO,GAAY,EAAE,CAAC;YACpB,MAAM,KAAK,GAAG,IAAA,iBAAO,EAAC,GAAG,CAAC,CAAC;YAC3B,OAAO,CAAC,IAAI,CACR,mDAAmD,OAAO,wBAAwB;gBAC9E,KAAK,KAAK,CAAC,OAAO,eAAe,CACxC,CAAC;YACF,SAAS;QACb,CAAC;QACD,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,EAAU,EAAE,EAAE,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC;YAC9C,OAAO,CAAC,IAAI,CACR,mDAAmD,OAAO,uBAAuB;gBAC7E,IAAI,QAAQ,CAAC,MAAM,kDAAkD;gBACrE,6EAA6E;gBAC7E,oCAAoC,CAC3C,CAAC;QACN,CAAC;IACL,CAAC;AACL,CAAC;AAED,SAAS,YAAY,CAAC,WAAmB,EAAE,MAAkB;IACzD,OAAO,CAAC,KAAK,CAAC,aAAa,MAAM,CAAC,MAAM,gCAAgC,WAAW,KAAK,CAAC,CAAC;IAC1F,MAAM,CAAC,OAAO,CAAC,CAAC,KAAe,EAAE,CAAS,EAAE,EAAE;QAC1C,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;IACpE,CAAC,CAAC,CAAC;IACH,OAAO,CAAC,KAAK,CAAC,2EAA2E,CAAC,CAAC;IAC3F,OAAO,CAAC,KAAK,CAAC,uFAAuF,CAAC,CAAC;IACvG,OAAO,CAAC,KAAK,CAAC,IAAI,SAAS,yEAAyE,CAAC,CAAC;IACtG,OAAO,CAAC,KAAK,CAAC,4EAA4E,CAAC,CAAC;IAC5F,OAAO,CAAC,KAAK,CAAC,oEAAoE,CAAC,CAAC;IACpF,OAAO,CAAC,KAAK,CAAC,2BAA2B,SAAS,kCAAkC,CAAC,CAAC;IACtF,OAAO,CAAC,KAAK,CAAC,+EAA+E,CAAC,CAAC;IAC/F,OAAO,CAAC,KAAK,CAAC,uCAAuC,SAAS,oBAAoB,CAAC,CAAC;AACxF,CAAC;AAEc,KAAK,UAAU,WAAW,CACrC,QAA2C,EAC3C,OAAwB;IAExB,MAAM,MAAM,GAAG,IAAA,8BAAe,EAAC,OAAO,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC;IACtD,MAAM,IAAI,GAAG,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;IAEzC,IAAI,IAAI,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;QACrB,OAAO,CAAC,GAAG,CAAC,kBAAkB,SAAS,gBAAgB,CAAC,CAAC;QACzD,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;IAC7B,CAAC;IAED,MAAM,WAAW,GAAG,OAAO,CAAC,WAAW,IAAI,SAAS,CAAC;IACrD,MAAM,aAAa,GAAG,OAAO,CAAC,sBAAsB,EAAE,QAAQ,CAAC,WAAW,CAAC,CAAC;IAC5E,MAAM,WAAW,GAAG,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,aAAa,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC;IAE/F,MAAM,KAAK,GAAG,IAAI,EAAE,OAAO,CAAC,uBAAuB,CAAuB,CAAC;IAC3E,kGAAkG;IAClG,gEAAgE;IAChE,MAAM,SAAS,GAAG,IAAI,EAAE,OAAO,CAAC,0BAA0B,CAAC,CAAC;IAC5D,MAAM,MAAM,GAAG,OAAO,SAAS,KAAK,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC;IACrE,MAAM,cAAc,GAAI,IAAI,EAAE,OAAO,CAAC,gBAAgB,CAAyB,IAAI,KAAK,CAAC;IACzF,MAAM,eAAe,GAAI,IAAI,EAAE,OAAO,CAAC,iBAAiB,CAA0B,IAAI,EAAE,CAAC;IACzF,MAAM,iBAAiB,GAAI,IAAI,EAAE,OAAO,CAAC,eAAe,CAA0B,IAAI,EAAE,CAAC;IAEzF,OAAO,CAAC,GAAG,CAAC,kCAAkC,WAAW,YAAY,CAAC,CAAC;IAEvE,MAAM,KAAK,GAAG,SAAS,EAAE,CAAC;IAC1B,4FAA4F;IAC5F,gGAAgG;IAChG,wEAAwE;IACxE,MAAM,WAAW,GAAG,iBAAiB,CAAC,cAAc,EAAE,eAAe,EAAE,OAAO,CAAC,IAAI,EAAE,WAAW,CAAC,CAAC;IAClG,MAAM,OAAO,GAAG,iBAAiB,CAAC,cAAc,EAAE,eAAe,EAAE,OAAO,CAAC,IAAI,EAAE,WAAW,EAAE,iBAAiB,CAAC,CAAC;IACjH,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC;IACjD,MAAM,MAAM,GAAG,MAAM,CAAC,QAAQ,EAAE,CAAC;IAEjC,MAAM,4BAA4B,CAAC,KAAK,EAAE,WAAW,EAAE,WAAW,EAAE,iBAAiB,CAAC,CAAC;IAEvF,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACtB,OAAO,CAAC,GAAG,CAAC,qCAAqC,CAAC,CAAC;QACnD,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;IAC7B,CAAC;IAED,YAAY,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC;IAElC,yEAAyE;IACzE,OAAO,EAAE,OAAO,EAAE,CAAC,eAAe,CAAC,KAAK,EAAE,MAAM,CAAC,EAAE,CAAC;AACxD,CAAC","sourcesContent":["/**\n * Validate No File Import Cycles Executor\n *\n * Per-project circular-dependency gate. Runs `madge` over the project's\n * TypeScript sources and fails when an import cycle is found.\n *\n * Unlike the old `nx:run-commands` target (which shelled out to a runtime\n * `npx madge` fetch — undeclared, so consumers of the published plugin had no\n * local madge and CI runners corrupted their npx cache fetching it), this executor:\n *   - invokes the madge it bundles as a dependency (deterministic, no network),\n *   - is driven by webpieces.config.json like every other webpieces rule, so it\n *     supports an on/off `mode` and a time-boxed `turnOffRuleUntilEpoch`.\n *\n * Config (webpieces.config.json, rule key `no-file-import-cycles`):\n *   \"no-file-import-cycles\": {\n *       \"mode\": \"RUN_EVERY_TIME\",           // \"OFF\" disables the gate everywhere\n *       \"turnOffRuleUntilEpoch\": 1771931925,  // epoch SECONDS; while now < epoch,\n *                                            //   cycles are reported but the gate PASSES\n *                                            //   (warn, don't fail). After it, fails again.\n *       \"turnOffRuleWhileOnBranch\": null,   // branch name; while that branch is checked out,\n *                                            //   cycles are reported but the gate PASSES\n *       \"ignoreTypeOnly\": true,             // ignore `import type` re-export cycles\n *                                            //   (erased at compile time, harmless at runtime)\n *       \"excludePackages\": [\"@db/entities\"] // npm package names whose source trees madge\n *                                            //   should NOT traverse (stops foreign cycles\n *                                            //   from leaking into this project's report)\n *   }\n *\n * Mirrors the dated-disable model already used for the method/file-size rules:\n * the epoch is a grace window so a strict gate can be turned on against an\n * existing codebase without an open-ended \"off everywhere\" escape hatch.\n *\n * Usage: nx run <project>:validate-no-file-import-cycles\n */\n\nimport type { ExecutorContext } from '@nx/devkit';\nimport { loadAndValidate, shouldSkipRule } from '@webpieces/rules-config';\nimport * as fs from 'fs';\nimport * as path from 'path';\nimport { toError } from '../../toError';\n\nexport type ValidateNoFileImportCyclesMode = 'RUN_EVERY_TIME' | 'OFF';\n\nexport interface ValidateNoFileImportCyclesOptions {\n    // No options here — config comes from webpieces.config.json at runtime.\n}\n\nexport interface ExecutorResult {\n    success: boolean;\n}\n\nconst RULE_NAME = 'no-file-import-cycles';\n\n// madge ships no type declarations; describe the slice of its API we use.\n// webpieces-disable no-any-unknown -- minimal hand-typed surface for an untyped dependency\ninterface MadgeOptions {\n    fileExtensions: string[];\n    excludeRegExp?: string[];\n    detectiveOptions?: Record<string, unknown>;\n}\ninterface MadgeInstance {\n    circular(): string[][];\n    // The full dependency graph: id → its dependency ids. Keys are the ids madge\n    // traversed (relative to the base it was invoked with) — used to detect\n    // excludeRegExp patterns that match nothing.\n    obj(): Record<string, string[]>;\n}\ntype MadgeFn = (target: string, options: MadgeOptions) => Promise<MadgeInstance>;\n\n// madge's CJS export is the callable itself; some bundlers wrap it under `.default`.\ninterface MadgeModuleExtras {\n    default?: MadgeFn;\n}\ntype MadgeModule = MadgeFn & MadgeModuleExtras;\n\nfunction loadMadge(): MadgeFn {\n    // eslint-disable-next-line @typescript-eslint/no-var-requires\n    const mod: MadgeModule = require('madge');\n    return mod.default ?? mod;\n}\n\n/**\n * Decide whether the gate should still FAIL on cycles (true) or only warn\n * (false), considering the universal escape hatches: the turnOffRuleUntilEpoch\n * grace window and turnOffRuleWhileOnBranch. Logs a one-line explanation when a\n * hatch is active.\n */\nfunction isFailingActive(epoch: number | undefined, branch: string | undefined): boolean {\n    const skip = shouldSkipRule(epoch, branch);\n    if (skip.skip) {\n        console.log(\n            `\\n⏳ no-file-import-cycles: ${skip.reason}.` +\n                '\\n   Cycles will be reported but NOT fail the build.\\n',\n        );\n        return false;\n    }\n    return true;\n}\n\n// Never scan build output or declaration files. A project that compiles into a\n// local `dist/` (or build/out/coverage) would otherwise report cycles among the\n// emitted `*.d.ts` files instead of — or in addition to — the real source\n// cycles, so the gate would flag compiled-output noise and could diverge from a\n// plain `madge src` run. Excluding these makes the gate scan source only.\nconst EXCLUDE_BUILD_DIRS = '(^|/)(node_modules|dist|build|out|coverage|\\\\.nx|\\\\.next)(/|$)';\nconst EXCLUDE_DECLARATION_FILES = '\\\\.d\\\\.ts$';\n\nfunction escapeRegex(s: string): string {\n    return s.replace(/[/\\-\\\\^$*+?.()|[\\]{}]/g, '\\\\$&');\n}\n\nclass TsconfigCompilerOptions {\n    paths?: Record<string, string[]>;\n}\nclass TsconfigBase {\n    compilerOptions?: TsconfigCompilerOptions;\n}\n\n/** Read tsconfig.base.json compilerOptions.paths from the workspace root, or null on failure. */\nfunction readTsconfigPaths(workspaceRoot: string): Record<string, string[]> | null {\n    // eslint-disable-next-line @webpieces/no-unmanaged-exceptions -- best-effort read; null on any failure\n    try {\n        const tsconfigPath = path.join(workspaceRoot, 'tsconfig.base.json');\n        const content = fs.readFileSync(tsconfigPath, 'utf8');\n        const tsconfig = JSON.parse(content) as TsconfigBase;\n        return tsconfig?.compilerOptions?.paths ?? null;\n    // webpieces-disable catch-error-pattern -- file missing or malformed JSON; caller handles null\n    } catch (err: unknown) {\n        //const error = toError(err);\n        return null;\n    }\n}\n\n/**\n * Walk up from startPath to find the nearest ancestor directory that contains\n * a package.json. Returns that directory path, or null if none found.\n */\nfunction findPackageRoot(startPath: string): string | null {\n    let dir = fs.statSync(startPath).isDirectory() ? startPath : path.dirname(startPath);\n    const fsRoot = path.parse(dir).root;\n    while (dir !== fsRoot) {\n        if (fs.existsSync(path.join(dir, 'package.json'))) return dir;\n        dir = path.dirname(dir);\n    }\n    return null;\n}\n\nfunction resolvePackageDir(pkgName: string, workspaceRoot: string): string | null {\n    // First try require.resolve (works for installed / symlinked packages).\n    // eslint-disable-next-line @webpieces/no-unmanaged-exceptions -- resolution failure is expected; fall through to tsconfig path lookup\n    try {\n        const pkgJson = require.resolve(`${pkgName}/package.json`, { paths: [workspaceRoot] });\n        return fs.realpathSync(path.dirname(pkgJson));\n    // webpieces-disable catch-error-pattern -- expected for non-installed packages; fall through to tsconfig path lookup\n    } catch (err: unknown) {\n        //const error = toError(err);\n        // Fall through to tsconfig path resolution for pnpm workspace packages.\n    }\n\n    // Fallback: resolve via tsconfig.base.json compilerOptions.paths.\n    // pnpm workspace packages are not in node_modules, so require.resolve fails above;\n    // tsconfig.base.json maps e.g. \"@acme-internal/db\" → [\"libraries/db/index.ts\"].\n    const tsconfigPaths = readTsconfigPaths(workspaceRoot);\n    const entries = tsconfigPaths?.[pkgName];\n    if (!entries || entries.length === 0) {\n        console.warn(\n            `⚠️  no-file-import-cycles: could not resolve excludePackages entry \"${pkgName}\"` +\n                ` — not found in node_modules or tsconfig.base.json paths. Skipping.`,\n        );\n        return null;\n    }\n    // eslint-disable-next-line @webpieces/no-unmanaged-exceptions -- best-effort fallback; warn on any failure\n    try {\n        const resolved = path.resolve(workspaceRoot, entries[0]);\n        const pkgRoot = findPackageRoot(resolved);\n        if (!pkgRoot) {\n            console.warn(\n                `⚠️  no-file-import-cycles: resolved \"${pkgName}\" → \"${resolved}\"` +\n                    ` but found no package.json in parent directories — skipping.`,\n            );\n            return null;\n        }\n        return pkgRoot;\n    } catch (err: unknown) {\n        const error = toError(err);\n        console.warn(\n            `⚠️  no-file-import-cycles: could not resolve excludePackages entry \"${pkgName}\"` +\n                ` via tsconfig paths (${error.message}) — skipping.`,\n        );\n        return null;\n    }\n}\n\n/**\n * Realpath a directory, tolerating a non-existent path (returns the input).\n * madge traverses through pnpm symlinks to real paths, and resolvePackageDir\n * already realpaths its result, so projectRoot must be realpath'd too or the\n * computed relative path won't line up with the ids madge emits.\n */\n// webpieces-disable no-function-outside-class -- nx executor module; file is functional by convention (see resolvePackageDir/reportCycles above)\nfunction realpathOrSelf(dir: string): string {\n    // eslint-disable-next-line @webpieces/no-unmanaged-exceptions -- best-effort; fall back to the raw path\n    try {\n        return fs.realpathSync(dir);\n    // webpieces-disable catch-error-pattern -- path may not exist yet; use it as-is\n    } catch (err: unknown) {\n        //const error = toError(err);\n        return dir;\n    }\n}\n\n/** True if dir contains at least one .ts/.tsx source file anywhere beneath it. */\n// webpieces-disable no-function-outside-class -- nx executor module; file is functional by convention (see resolvePackageDir/reportCycles above)\nfunction hasSourceFiles(dir: string): boolean {\n    // eslint-disable-next-line @webpieces/no-unmanaged-exceptions -- best-effort scan; false on any read failure\n    try {\n        for (const entry of fs.readdirSync(dir, { withFileTypes: true })) {\n            if (entry.name === 'node_modules' || entry.name === 'dist' || entry.name === 'build') continue;\n            const full = path.join(dir, entry.name);\n            if (entry.isDirectory()) {\n                if (hasSourceFiles(full)) return true;\n            } else if (/\\.tsx?$/.test(entry.name) && !entry.name.endsWith('.d.ts')) {\n                return true;\n            }\n        }\n        return false;\n    // webpieces-disable catch-error-pattern -- unreadable dir; treat as no source\n    } catch (err: unknown) {\n        //const error = toError(err);\n        return false;\n    }\n}\n\n/**\n * Build the exclude pattern for one resolved package dir, RELATIVE to the base\n * madge is invoked with (projectRoot). madge matches excludeRegExp against ids\n * relative to that base — e.g. '../../libraries/db/src/x.ts' — so an absolute\n * `^/abs/...` anchor can never match and silently excludes nothing. Returns the\n * relative-anchored pattern. Warns (but still returns the pattern) when the dir\n * holds no source madge would traverse, closing the resolves-but-matches-nothing\n * silent-failure gap.\n */\n// webpieces-disable no-function-outside-class -- nx executor module; file is functional by convention (see resolvePackageDir/reportCycles above)\nfunction buildExcludePattern(dir: string, base: string, pkgName: string): string {\n    // madge ids always use forward slashes; normalise path.sep so this holds on Windows.\n    const rel = path.relative(base, dir).split(path.sep).join('/');\n    if (!hasSourceFiles(dir)) {\n        console.warn(\n            `⚠️  no-file-import-cycles: excludePackages entry \"${pkgName}\" resolved to \"${dir}\"` +\n                ` but that directory contains no .ts/.tsx source — the exclusion will match nothing.`,\n        );\n    }\n    return `^${escapeRegex(rel)}(/|$)`;\n}\n\n// webpieces-disable no-function-outside-class -- nx executor module; file is functional by convention (see resolvePackageDir/reportCycles above)\nexport function buildMadgeOptions(\n    ignoreTypeOnly: boolean,\n    excludePackages: string[],\n    workspaceRoot: string,\n    projectRoot: string,\n    // Raw patterns from config, handed to madge verbatim. Matched against ids RELATIVE TO\n    // projectRoot (see NoFileImportCyclesConfig.excludeRegExp) — the executor warns on any that\n    // match nothing so a mis-anchored (workspace-rooted / absolute) pattern isn't a silent no-op.\n    userExcludeRegExp: string[] = [],\n): MadgeOptions {\n    const excludeRegExp = [EXCLUDE_BUILD_DIRS, EXCLUDE_DECLARATION_FILES, ...userExcludeRegExp];\n    // madge is invoked with projectRoot as its base and emits ids relative to it;\n    // realpath it to match resolvePackageDir's realpath'd result under pnpm symlinks.\n    const base = realpathOrSelf(projectRoot);\n    for (const pkg of excludePackages) {\n        const dir = resolvePackageDir(pkg, workspaceRoot);\n        if (dir) excludeRegExp.push(buildExcludePattern(dir, base, pkg));\n    }\n    const options: MadgeOptions = {\n        fileExtensions: ['ts', 'tsx'],\n        excludeRegExp,\n    };\n    if (ignoreTypeOnly) {\n        // dependency-tree's TS detective drops `import type {...}` edges with this flag.\n        options.detectiveOptions = {\n            ts: { skipTypeImports: true },\n            tsx: { skipTypeImports: true },\n        };\n    }\n    return options;\n}\n\n/**\n * The relative-id trap: madge matches excludeRegExp against ids RELATIVE TO\n * projectRoot (e.g. 'src/generated/api.ts'), so a workspace-anchored pattern\n * ('^libraries/apis/foo/src/...') or an absolute one ('^/abs/...') silently\n * matches nothing and the exclusion is a no-op. To make that visible, run madge\n * WITHOUT the user patterns to get the id universe and warn for any pattern that\n * matches none of it (or is not a valid regex). Same \"resolves but matches\n * nothing\" idea buildExcludePattern uses for excludePackages. Only invoked when\n * the consumer actually configured excludeRegExp, so the extra traversal is paid\n * only in the rare case that opts in.\n */\n// webpieces-disable no-function-outside-class -- nx executor module; file is functional by convention (see resolvePackageDir/reportCycles above)\nasync function warnOnUnmatchedExcludeRegExp(\n    madge: MadgeFn,\n    projectRoot: string,\n    baseOptions: MadgeOptions,\n    userExcludeRegExp: string[],\n): Promise<void> {\n    if (userExcludeRegExp.length === 0) return;\n    const universe = Object.keys((await madge(projectRoot, baseOptions)).obj());\n    for (const pattern of userExcludeRegExp) {\n        let re: RegExp;\n        // eslint-disable-next-line @webpieces/no-unmanaged-exceptions -- invalid user regex is reported, not thrown\n        try {\n            re = new RegExp(pattern);\n        // webpieces-disable catch-error-pattern -- surface the bad pattern to the consumer, then move on\n        } catch (err: unknown) {\n            const error = toError(err);\n            console.warn(\n                `⚠️  no-file-import-cycles: excludeRegExp entry \"${pattern}\" is not a valid regex` +\n                    ` (${error.message}) — skipping.`,\n            );\n            continue;\n        }\n        if (!universe.some((id: string) => re.test(id))) {\n            console.warn(\n                `⚠️  no-file-import-cycles: excludeRegExp entry \"${pattern}\" matched none of the` +\n                    ` ${universe.length} traversed file(s) — the exclusion does nothing.` +\n                    `\\n   Patterns match paths RELATIVE TO THE PROJECT (e.g. \"^src/generated/\"),` +\n                    ` not workspace-rooted or absolute.`,\n            );\n        }\n    }\n}\n\nfunction reportCycles(projectName: string, cycles: string[][]): void {\n    console.error(`\\n❌ Found ${cycles.length} circular import cycle(s) in ${projectName}:\\n`);\n    cycles.forEach((cycle: string[], i: number) => {\n        console.error(`  ${i + 1}. ${cycle.join(' → ')} → ${cycle[0]}`);\n    });\n    console.error('\\nTo fix, break the cycle (extract a shared module, or use an interface).');\n    console.error('To exempt a path (generated code, a deliberate bidirectional model), add a pattern to');\n    console.error(`\"${RULE_NAME}\".excludeRegExp in webpieces.config.json. Patterns match paths RELATIVE`);\n    console.error('TO THE PROJECT, e.g. \"^src/generated/\" or \"^src/modules/(item|category)/\".');\n    console.error('To time-box a known cycle, a human can set \"turnOffRuleUntilEpoch\"');\n    console.error(`(epoch seconds) on the \"${RULE_NAME}\" rule in webpieces.config.json,`);\n    console.error(`or \"turnOffRuleWhileOnBranch\" (a branch name) to shelter one refactor branch.`);\n    console.error(`To turn the gate off entirely, set \"${RULE_NAME}\".mode to \"OFF\".\\n`);\n}\n\nexport default async function runExecutor(\n    _options: ValidateNoFileImportCyclesOptions,\n    context: ExecutorContext,\n): Promise<ExecutorResult> {\n    const shared = loadAndValidate(context.root).resolved;\n    const rule = shared.rules.get(RULE_NAME);\n\n    if (rule && rule.isOff) {\n        console.log(`\\n⏭️  Skipping ${RULE_NAME} (mode: OFF)\\n`);\n        return { success: true };\n    }\n\n    const projectName = context.projectName ?? 'project';\n    const projectConfig = context.projectsConfigurations?.projects[projectName];\n    const projectRoot = projectConfig ? path.join(context.root, projectConfig.root) : context.root;\n\n    const epoch = rule?.options['turnOffRuleUntilEpoch'] as number | undefined;\n    // turnOffRuleWhileOnBranch is required-but-NULLABLE in the config (null = \"always on\"), so narrow\n    // to a branch NAME here; anything else means no branch scoping.\n    const rawBranch = rule?.options['turnOffRuleWhileOnBranch'];\n    const branch = typeof rawBranch === 'string' ? rawBranch : undefined;\n    const ignoreTypeOnly = (rule?.options['ignoreTypeOnly'] as boolean | undefined) ?? false;\n    const excludePackages = (rule?.options['excludePackages'] as string[] | undefined) ?? [];\n    const userExcludeRegExp = (rule?.options['excludeRegExp'] as string[] | undefined) ?? [];\n\n    console.log(`\\n🔁 Checking import cycles in ${projectName} (madge)\\n`);\n\n    const madge = loadMadge();\n    // baseOptions carries the built-in + excludePackages regexes only; the real run appends the\n    // consumer's excludeRegExp, and the warning pass re-uses baseOptions to see what those patterns\n    // *would* have to match against (madge's un-user-filtered id universe).\n    const baseOptions = buildMadgeOptions(ignoreTypeOnly, excludePackages, context.root, projectRoot);\n    const options = buildMadgeOptions(ignoreTypeOnly, excludePackages, context.root, projectRoot, userExcludeRegExp);\n    const result = await madge(projectRoot, options);\n    const cycles = result.circular();\n\n    await warnOnUnmatchedExcludeRegExp(madge, projectRoot, baseOptions, userExcludeRegExp);\n\n    if (cycles.length === 0) {\n        console.log('✅ No circular import cycles found\\n');\n        return { success: true };\n    }\n\n    reportCycles(projectName, cycles);\n\n    // Grace window or branch hatch active → report but pass; otherwise fail.\n    return { success: !isFailingActive(epoch, branch) };\n}\n"]}

package/src/executors/validate-no-implicit-any/schema.json

@@ -15,7 +15,7 @@
             "description": "Whether // webpieces-disable no-implicit-any comments work. When false, no escape hatch.",
             "default": true
         },
-        "ignoreModifiedUntilEpoch": {
+        "turnOffRuleUntilEpoch": {
             "type": "number",
             "description": "Epoch seconds. Until this time, skip validation entirely. When expired, normal mode resumes. Omit when not needed."
         }

package/src/executors/validate-no-inline-types/schema.json

@@ -15,7 +15,7 @@
             "description": "Whether disable comments work. When false, no escape hatch.",
             "default": true
         },
-        "ignoreModifiedUntilEpoch": {
+        "turnOffRuleUntilEpoch": {
             "type": "number",
             "description": "Epoch seconds. Until this time, skip validation entirely. When expired, normal mode resumes. Omit when not needed."
         }

package/src/executors/validate-no-unmanaged-exceptions/schema.json

@@ -15,7 +15,7 @@
             "description": "Whether disable comments work. When false, no escape hatch.",
             "default": true
         },
-        "ignoreModifiedUntilEpoch": {
+        "turnOffRuleUntilEpoch": {
             "type": "number",
             "description": "Epoch seconds. Until this time, skip validation entirely. When expired, normal mode resumes. Omit when not needed."
         }

package/src/executors/validate-prisma-converters/schema.json

@@ -29,7 +29,7 @@
             "description": "Whether disable comments work. When false, no escape hatch.",
             "default": true
         },
-        "ignoreModifiedUntilEpoch": {
+        "turnOffRuleUntilEpoch": {
             "type": "number",
             "description": "Epoch seconds. Until this time, skip prisma-converter validation entirely. When expired, normal mode resumes. Omit when not needed."
         }

package/src/executors/validate-return-types/schema.json

@@ -15,7 +15,7 @@
             "description": "Whether disable comments work. When false, no escape hatch.",
             "default": true
         },
-        "ignoreModifiedUntilEpoch": {
+        "turnOffRuleUntilEpoch": {
             "type": "number",
             "description": "Epoch seconds. Until this time, skip validation entirely. When expired, normal mode resumes. Omit when not needed."
         }

package/src/executors/validate-ts-in-src/executor.d.ts

@@ -18,7 +18,9 @@
  *   "validate-ts-in-src": {
  *       "mode": "NEW_AND_MODIFIED_FILES", // "OFF" disables the rule
  *       "excludePaths": [...],   // dir names + globs, e.g. "**\/codegen.ts"
- *       "allowedRootFiles": [...]
+ *       "allowedRootFiles": [...],
+ *       "turnOffRuleUntilEpoch": 0,       // epoch SECONDS; skip the rule until it passes
+ *       "turnOffRuleWhileOnBranch": null  // branch name; skip the rule while it is checked out
  *   }
  *
  * Usage: nx run architecture:validate-ts-in-src
@@ -29,7 +31,8 @@ export interface ValidateTsInSrcOptions {
     mode?: ValidateTsInSrcMode;
     excludePaths?: string[];
     allowedRootFiles?: string[];
-    ignoreModifiedUntilEpoch?: number;
+    turnOffRuleUntilEpoch?: number;
+    turnOffRuleWhileOnBranch?: string | null;
 }
 export interface ExecutorResult {
     success: boolean;

package/src/executors/validate-ts-in-src/executor.js

@@ -19,7 +19,9 @@
  *   "validate-ts-in-src": {
  *       "mode": "NEW_AND_MODIFIED_FILES", // "OFF" disables the rule
  *       "excludePaths": [...],   // dir names + globs, e.g. "**\/codegen.ts"
- *       "allowedRootFiles": [...]
+ *       "allowedRootFiles": [...],
+ *       "turnOffRuleUntilEpoch": 0,       // epoch SECONDS; skip the rule until it passes
+ *       "turnOffRuleWhileOnBranch": null  // branch name; skip the rule while it is checked out
  *   }
  *
  * Usage: nx run architecture:validate-ts-in-src
@@ -191,8 +193,11 @@ async function runExecutor(_nxOptions, context) {
     const shared = (0, rules_config_1.loadAndValidate)(context.root).resolved;
     const rule = shared.rules.get('validate-ts-in-src');
     const rawMode = rule?.options['mode'] ?? 'NEW_AND_MODIFIED_FILES';
-    const epoch = rule?.options['ignoreModifiedUntilEpoch'];
-    const branch = rule?.options['ignoreRuleWhileOnBranch'];
+    const epoch = rule?.options['turnOffRuleUntilEpoch'];
+    // turnOffRuleWhileOnBranch is required-but-NULLABLE in the config (null = "always on"), so narrow
+    // to a branch NAME here; anything else means no branch scoping.
+    const rawBranch = rule?.options['turnOffRuleWhileOnBranch'];
+    const branch = typeof rawBranch === 'string' ? rawBranch : undefined;
     const effectiveMode = resolveMode(rawMode, epoch, branch);
     if (effectiveMode === 'OFF' || (rule && rule.isOff)) {
         console.log('\n⏭️  Skipping validate-ts-in-src (mode: OFF)\n');

package/src/executors/validate-ts-in-src/executor.js.map

@@ -1 +1 @@
-{"version":3,"file":"executor.js","sourceRoot":"","sources":["../../../../../../../packages/tooling/nx-webpieces-rules/src/executors/validate-ts-in-src/executor.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;;AAqNH,8BA4BC;;AA9OD,uCAAgG;AAChG,0DAAuH;AACvH,mDAA6B;AAC7B,+CAAyB;AAezB,MAAM,qBAAqB,GAAa;IACpC,cAAc,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM;IACrC,cAAc,EAAE,KAAK,EAAE,SAAS;IAChC,WAAW,EAAE,mBAAmB;CACnC,CAAC;AAEF,MAAM,0BAA0B,GAAa,CAAC,eAAe,CAAC,CAAC;AAE/D,MAAM,iBAAiB;IACnB,QAAQ,CAAS;IACjB,WAAW,CAAS;IAEpB,YAAY,QAAgB,EAAE,WAAmB;QAC7C,IAAI,CAAC,QAAQ,GAAG,QAAQ,CAAC;QACzB,IAAI,CAAC,WAAW,GAAG,WAAW,CAAC;IACnC,CAAC;CACJ;AAED,MAAM,iBAAiB;IACnB,QAAQ,CAAS;IAEjB,YAAY,QAAgB;QACxB,IAAI,CAAC,QAAQ,GAAG,QAAQ,CAAC;IAC7B,CAAC;CACJ;AAED,KAAK,UAAU,eAAe,CAAC,aAAqB;IAChD,MAAM,YAAY,GAAG,MAAM,IAAA,gCAAuB,GAAE,CAAC;IACrD,MAAM,cAAc,GAAG,IAAA,kDAAyC,EAAC,YAAY,CAAC,CAAC;IAC/E,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,MAAM,CAAC,cAAc,CAAC,QAAQ,CAAC,EAAE,CAAC;QACvD,IAAI,GAAG,CAAC,IAAI,KAAK,EAAE,IAAI,GAAG,CAAC,IAAI,KAAK,GAAG;YAAE,SAAS;QAClD,IAAI,GAAG,CAAC,IAAI,KAAK,cAAc;YAAE,SAAS;QAC1C,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC;IACnD,CAAC;IACD,OAAO,KAAK,CAAC;AACjB,CAAC;AAED,SAAS,uBAAuB,CAC5B,OAAe,EACf,YAAsB,EACtB,aAAqB,EACrB,YAAsB;IAEtB,IAAI,IAAA,6BAAc,EAAC,OAAO,EAAE,YAAY,CAAC;QAAE,OAAO,IAAI,CAAC;IACvD,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,OAAO,CAAC,CAAC;IACnD,KAAK,MAAM,WAAW,IAAI,YAAY,EAAE,CAAC;QACrC,IAAI,QAAQ,CAAC,UAAU,CAAC,WAAW,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,QAAQ,KAAK,WAAW,EAAE,CAAC;YAC1E,MAAM,YAAY,GAAG,IAAI,CAAC,QAAQ,CAAC,WAAW,EAAE,QAAQ,CAAC,CAAC;YAC1D,IAAI,YAAY,CAAC,UAAU,CAAC,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,YAAY,KAAK,KAAK;gBAAE,OAAO,IAAI,CAAC;YACrF,MAAM,WAAW,GAAG,IAAI,CAAC,QAAQ,CAAC,aAAa,EAAE,WAAW,CAAC,CAAC;YAC9D,OAAO,IAAI,iBAAiB,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC;QACvD,CAAC;IACL,CAAC;IACD,OAAO,IAAI,CAAC,CAAC,gDAAgD;AACjE,CAAC;AAED,SAAS,uBAAuB,CAC5B,OAAe,EACf,YAAsB,EACtB,aAAqB,EACrB,gBAA0B,EAC1B,YAAsB;IAEtB,IAAI,IAAA,6BAAc,EAAC,OAAO,EAAE,YAAY,CAAC;QAAE,OAAO,IAAI,CAAC;IACvD,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACtC,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,gBAAgB,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;QAAE,OAAO,IAAI,CAAC;IACjF,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,OAAO,CAAC,CAAC;IACnD,KAAK,MAAM,WAAW,IAAI,YAAY,EAAE,CAAC;QACrC,IAAI,QAAQ,CAAC,UAAU,CAAC,WAAW,GAAG,IAAI,CAAC,GAAG,CAAC;YAAE,OAAO,IAAI,CAAC,CAAC,qBAAqB;IACvF,CAAC;IACD,OAAO,IAAI,iBAAiB,CAAC,OAAO,CAAC,CAAC;AAC1C,CAAC;AAED,SAAS,WAAW,CAChB,UAA+B,EAC/B,KAAyB,EACzB,MAA0B;IAE1B,IAAI,UAAU,KAAK,KAAK,EAAE,CAAC;QACvB,OAAO,UAAU,CAAC;IACtB,CAAC;IACD,mFAAmF;IACnF,MAAM,IAAI,GAAG,IAAA,6BAAc,EAAC,KAAK,EAAE,MAAM,CAAC,CAAC;IAC3C,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;QACZ,OAAO,CAAC,GAAG,CAAC,iDAAiD,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC;QAC7E,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAChB,OAAO,KAAK,CAAC;IACjB,CAAC;IACD,OAAO,UAAU,CAAC;AACtB,CAAC;AAED,SAAS,qBAAqB,CAAC,UAA+B;IAC1D,OAAO,CAAC,KAAK,CAAC,oDAAoD,CAAC,CAAC;IACpE,OAAO,CAAC,KAAK,CAAC,oEAAoE,CAAC,CAAC;IACpF,OAAO,CAAC,KAAK,CAAC,iDAAiD,CAAC,CAAC;IACjE,OAAO,CAAC,KAAK,CAAC,+BAA+B,CAAC,CAAC;IAC/C,OAAO,CAAC,KAAK,CAAC,0CAA0C,CAAC,CAAC;IAC1D,OAAO,CAAC,KAAK,CAAC,oBAAoB,CAAC,CAAC;IACpC,OAAO,CAAC,KAAK,CAAC,oBAAoB,CAAC,CAAC;IACpC,OAAO,CAAC,KAAK,CAAC,uBAAuB,CAAC,CAAC;IAEvC,KAAK,MAAM,CAAC,IAAI,UAAU,EAAE,CAAC;QACzB,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC;IACvC,CAAC;IAED,OAAO,CAAC,KAAK,CAAC,qBAAqB,CAAC,CAAC;IACrC,OAAO,CAAC,KAAK,CAAC,oDAAoD,CAAC,CAAC;IACpE,OAAO,CAAC,KAAK,CAAC,4DAA4D,CAAC,CAAC;IAC5E,OAAO,CAAC,KAAK,CAAC,sEAAsE,CAAC,CAAC;IACtF,OAAO,CAAC,KAAK,CAAC,iDAAiD,CAAC,CAAC;AACrE,CAAC;AAED,SAAS,qBAAqB,CAAC,UAA+B;IAC1D,OAAO,CAAC,KAAK,CAAC,oDAAoD,CAAC,CAAC;IACpE,OAAO,CAAC,KAAK,CAAC,gEAAgE,CAAC,CAAC;IAChF,OAAO,CAAC,KAAK,CAAC,mEAAmE,CAAC,CAAC;IACnF,OAAO,CAAC,KAAK,CAAC,8CAA8C,CAAC,CAAC;IAE9D,KAAK,MAAM,CAAC,IAAI,UAAU,EAAE,CAAC;QACzB,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC;IACvC,CAAC;IAED,OAAO,CAAC,KAAK,CAAC,qBAAqB,CAAC,CAAC;IACrC,OAAO,CAAC,KAAK,CAAC,gEAAgE,CAAC,CAAC;IAChF,OAAO,CAAC,KAAK,CAAC,uEAAuE,CAAC,CAAC;IACvF,OAAO,CAAC,KAAK,CAAC,iFAAiF,CAAC,CAAC;IACjG,OAAO,CAAC,KAAK,CAAC,0EAA0E,CAAC,CAAC;IAC1F,OAAO,CAAC,KAAK,CAAC,yEAAyE,CAAC,CAAC;AAC7F,CAAC;AAED,KAAK,UAAU,oBAAoB,CAC/B,aAAqB,EACrB,YAAsB,EACtB,gBAA0B;IAE1B,OAAO,CAAC,GAAG,CAAC,qGAAqG,CAAC,CAAC;IAEnH,IAAI,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;IAClC,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;IAEpC,IAAI,CAAC,IAAI,EAAE,CAAC;QACR,IAAI,GAAG,IAAA,yBAAU,EAAC,aAAa,CAAC,IAAI,SAAS,CAAC;QAC9C,IAAI,CAAC,IAAI,EAAE,CAAC;YACR,OAAO,CAAC,GAAG,CAAC,+EAA+E,CAAC,CAAC;YAC7F,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;QAC7B,CAAC;IACL,CAAC;IAED,OAAO,CAAC,GAAG,CAAC,YAAY,IAAI,EAAE,CAAC,CAAC;IAChC,OAAO,CAAC,GAAG,CAAC,YAAY,IAAI,IAAI,6CAA6C,EAAE,CAAC,CAAC;IACjF,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAEhB,MAAM,YAAY,GAAG,MAAM,eAAe,CAAC,aAAa,CAAC,CAAC;IAC1D,uEAAuE;IACvE,6DAA6D;IAC7D,MAAM,YAAY,GAAG,IAAA,8BAAe,EAAC,aAAa,EAAE,IAAI,EAAE,IAAI,CAAC;SAC1D,MAAM,CAAC,CAAC,OAAe,EAAE,EAAE,CAAC,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC;IAEnF,IAAI,YAAY,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC5B,OAAO,CAAC,GAAG,CAAC,iCAAiC,CAAC,CAAC;QAC/C,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;IAC7B,CAAC;IAED,OAAO,CAAC,GAAG,CAAC,eAAe,YAAY,CAAC,MAAM,qBAAqB,CAAC,CAAC;IAErE,MAAM,kBAAkB,GAAwB,EAAE,CAAC;IACnD,MAAM,kBAAkB,GAAwB,EAAE,CAAC;IAEnD,KAAK,MAAM,OAAO,IAAI,YAAY,EAAE,CAAC;QACjC,MAAM,EAAE,GAAG,uBAAuB,CAAC,OAAO,EAAE,YAAY,EAAE,aAAa,EAAE,YAAY,CAAC,CAAC;QACvF,IAAI,EAAE;YAAE,kBAAkB,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACpC,MAAM,EAAE,GAAG,uBAAuB,CAAC,OAAO,EAAE,YAAY,EAAE,aAAa,EAAE,gBAAgB,EAAE,YAAY,CAAC,CAAC;QACzG,IAAI,EAAE;YAAE,kBAAkB,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACxC,CAAC;IAED,IAAI,kBAAkB,CAAC,MAAM,KAAK,CAAC,IAAI,kBAAkB,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACrE,OAAO,CAAC,GAAG,CAAC,kEAAkE,CAAC,CAAC;QAChF,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;IAC7B,CAAC;IAED,IAAI,kBAAkB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAChC,qBAAqB,CAAC,kBAAkB,CAAC,CAAC;IAC9C,CAAC;IACD,IAAI,kBAAkB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAChC,qBAAqB,CAAC,kBAAkB,CAAC,CAAC;IAC9C,CAAC;IAED,OAAO,CAAC,KAAK,CAAC,sFAAsF,CAAC,CAAC;IACtG,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;AAC9B,CAAC;AAEc,KAAK,UAAU,WAAW,CACrC,UAAkC,EAClC,OAAwB;IAExB,oEAAoE;IACpE,mDAAmD;IACnD,MAAM,MAAM,GAAG,IAAA,8BAAe,EAAC,OAAO,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC;IACtD,MAAM,IAAI,GAAG,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,oBAAoB,CAAC,CAAC;IAEpD,MAAM,OAAO,GAAI,IAAI,EAAE,OAAO,CAAC,MAAM,CAAqC,IAAI,wBAAwB,CAAC;IACvG,MAAM,KAAK,GAAG,IAAI,EAAE,OAAO,CAAC,0BAA0B,CAAuB,CAAC;IAC9E,MAAM,MAAM,GAAG,IAAI,EAAE,OAAO,CAAC,yBAAyB,CAAuB,CAAC;IAC9E,MAAM,aAAa,GAAG,WAAW,CAAC,OAAO,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC;IAE1D,IAAI,aAAa,KAAK,KAAK,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;QAClD,OAAO,CAAC,GAAG,CAAC,iDAAiD,CAAC,CAAC;QAC/D,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;IAC7B,CAAC;IAED,MAAM,aAAa,GAAG,OAAO,CAAC,IAAI,CAAC;IACnC,MAAM,YAAY,GACb,IAAI,EAAE,OAAO,CAAC,cAAc,CAA0B,IAAI,qBAAqB,CAAC;IACrF,MAAM,gBAAgB,GACjB,IAAI,EAAE,OAAO,CAAC,kBAAkB,CAA0B,IAAI,0BAA0B,CAAC;IAE9F,oFAAoF;IACpF,+EAA+E;IAC/E,OAAO,oBAAoB,CAAC,aAAa,EAAE,YAAY,EAAE,gBAAgB,CAAC,CAAC;AAC/E,CAAC","sourcesContent":["/**\n * Validate TypeScript Files in src/ Executor\n *\n * Two-layer rule:\n *   Layer 1: every .ts file inside an Nx project must live under src/\n *   Layer 2: every .ts file anywhere in the workspace must belong to some\n *            Nx project. Orphan files (at workspace root or in a non-project\n *            directory) fail the rule unless explicitly allowlisted.\n *\n * `excludePaths` is holistic — its bare dir names and globs exempt files\n * from BOTH layers. Defaults exempt **\\/*.d.ts and **\\/jest.config.ts.\n *\n * Only the files changed vs the base branch are validated (NEW_AND_MODIFIED_FILES),\n * so the rule applies cleanly to legacy projects — pre-existing orphan files\n * are grandfathered and only newly-touched files are checked.\n *\n * Configurable via webpieces.config.json:\n *   \"validate-ts-in-src\": {\n *       \"mode\": \"NEW_AND_MODIFIED_FILES\", // \"OFF\" disables the rule\n *       \"excludePaths\": [...],   // dir names + globs, e.g. \"**\\/codegen.ts\"\n *       \"allowedRootFiles\": [...]\n *   }\n *\n * Usage: nx run architecture:validate-ts-in-src\n */\n\nimport type { ExecutorContext } from '@nx/devkit';\nimport { createProjectGraphAsync, readProjectsConfigurationFromProjectGraph } from '@nx/devkit';\nimport { loadAndValidate, isPathExcluded, shouldSkipRule, detectBase, getChangedFiles } from '@webpieces/rules-config';\nimport * as path from 'path';\nimport * as fs from 'fs';\n\nexport type ValidateTsInSrcMode = 'OFF' | 'NEW_AND_MODIFIED_FILES';\n\nexport interface ValidateTsInSrcOptions {\n    mode?: ValidateTsInSrcMode;\n    excludePaths?: string[];\n    allowedRootFiles?: string[];\n    ignoreModifiedUntilEpoch?: number;\n}\n\nexport interface ExecutorResult {\n    success: boolean;\n}\n\nconst DEFAULT_EXCLUDE_PATHS: string[] = [\n    'node_modules', 'dist', '.nx', '.git',\n    'architecture', 'tmp', 'scripts',\n    '**/*.d.ts', '**/jest.config.ts',\n];\n\nconst DEFAULT_ALLOWED_ROOT_FILES: string[] = ['jest.setup.ts'];\n\nclass LayerOneViolation {\n    filePath: string;\n    projectName: string;\n\n    constructor(filePath: string, projectName: string) {\n        this.filePath = filePath;\n        this.projectName = projectName;\n    }\n}\n\nclass LayerTwoViolation {\n    filePath: string;\n\n    constructor(filePath: string) {\n        this.filePath = filePath;\n    }\n}\n\nasync function getProjectRoots(workspaceRoot: string): Promise<string[]> {\n    const projectGraph = await createProjectGraphAsync();\n    const projectsConfig = readProjectsConfigurationFromProjectGraph(projectGraph);\n    const roots: string[] = [];\n    for (const cfg of Object.values(projectsConfig.projects)) {\n        if (cfg.root === '' || cfg.root === '.') continue;\n        if (cfg.root === 'architecture') continue;\n        roots.push(path.join(workspaceRoot, cfg.root));\n    }\n    return roots;\n}\n\nfunction checkSingleFileLayerOne(\n    relPath: string,\n    projectRoots: string[],\n    workspaceRoot: string,\n    excludePaths: string[],\n): LayerOneViolation | null {\n    if (isPathExcluded(relPath, excludePaths)) return null;\n    const fullPath = path.join(workspaceRoot, relPath);\n    for (const projectRoot of projectRoots) {\n        if (fullPath.startsWith(projectRoot + path.sep) || fullPath === projectRoot) {\n            const relToProject = path.relative(projectRoot, fullPath);\n            if (relToProject.startsWith('src' + path.sep) || relToProject === 'src') return null;\n            const projectName = path.relative(workspaceRoot, projectRoot);\n            return new LayerOneViolation(relPath, projectName);\n        }\n    }\n    return null; // not in any project — that's layer 2's concern\n}\n\nfunction checkSingleFileLayerTwo(\n    relPath: string,\n    projectRoots: string[],\n    workspaceRoot: string,\n    allowedRootFiles: string[],\n    excludePaths: string[],\n): LayerTwoViolation | null {\n    if (isPathExcluded(relPath, excludePaths)) return null;\n    const parts = relPath.split(path.sep);\n    if (parts.length === 1 && allowedRootFiles.includes(parts[0] ?? '')) return null;\n    const fullPath = path.join(workspaceRoot, relPath);\n    for (const projectRoot of projectRoots) {\n        if (fullPath.startsWith(projectRoot + path.sep)) return null; // owned by a project\n    }\n    return new LayerTwoViolation(relPath);\n}\n\nfunction resolveMode(\n    normalMode: ValidateTsInSrcMode,\n    epoch: number | undefined,\n    branch: string | undefined,\n): ValidateTsInSrcMode {\n    if (normalMode === 'OFF') {\n        return normalMode;\n    }\n    // Honor the universal escape hatches: skip while on a named branch or until epoch.\n    const skip = shouldSkipRule(epoch, branch);\n    if (skip.skip) {\n        console.log(`\\n⏭️  Skipping validate-ts-in-src validation (${skip.reason})`);\n        console.log('');\n        return 'OFF';\n    }\n    return normalMode;\n}\n\nfunction reportLayerOneFailure(violations: LayerOneViolation[]): void {\n    console.error('❌ TypeScript files found outside src/ directory!\\n');\n    console.error('All .ts source files must be inside the project\\'s src/ directory.');\n    console.error('This enforces the standard project structure:\\n');\n    console.error('  packages/{category}/{name}/');\n    console.error('  ├── src/          ← ALL .ts files here');\n    console.error('  ├── package.json');\n    console.error('  ├── project.json');\n    console.error('  └── tsconfig.json\\n');\n\n    for (const v of violations) {\n        console.error(`  ❌ ${v.filePath}`);\n    }\n\n    console.error('\\nTo fix, pick one:');\n    console.error('  (a) Move the .ts file(s) into the src/ directory');\n    console.error('  (b) Add a glob/dir to validate-ts-in-src.excludePaths in');\n    console.error('      webpieces.config.json (e.g. \"**/codegen.ts\"). Defaults already');\n    console.error('      exempt **/*.d.ts and **/jest.config.ts.\\n');\n}\n\nfunction reportLayerTwoFailure(violations: LayerTwoViolation[]): void {\n    console.error('❌ TypeScript files found outside any Nx project!\\n');\n    console.error('Every .ts file must belong to an Nx project so it is compiled,');\n    console.error('linted, and tested under a known project config. Orphan files are');\n    console.error('invisible to the build graph and will rot.\\n');\n\n    for (const v of violations) {\n        console.error(`  ❌ ${v.filePath}`);\n    }\n\n    console.error('\\nTo fix, pick one:');\n    console.error('  (a) Move the file into an existing project\\'s src/ directory');\n    console.error('  (b) Create a new project (add project.json) that owns the directory');\n    console.error('  (c) Add the containing top-level directory to validate-ts-in-src.excludePaths');\n    console.error('      in nx.json targetDefaults, or add the filename to allowedRootFiles');\n    console.error('      if it is a legitimate workspace-root file (e.g., jest.setup.ts)\\n');\n}\n\nasync function runModifiedFilesMode(\n    workspaceRoot: string,\n    excludePaths: string[],\n    allowedRootFiles: string[],\n): Promise<ExecutorResult> {\n    console.log('\\n📁 Validating TypeScript files are in src/ and owned by a project (NEW_AND_MODIFIED_FILES mode)\\n');\n\n    let base = process.env['NX_BASE'];\n    const head = process.env['NX_HEAD'];\n\n    if (!base) {\n        base = detectBase(workspaceRoot) ?? undefined;\n        if (!base) {\n            console.log('\\n⏭️  Skipping validate-ts-in-src validation (could not detect base branch)\\n');\n            return { success: true };\n        }\n    }\n\n    console.log(`   Base: ${base}`);\n    console.log(`   Head: ${head ?? 'working tree (includes uncommitted changes)'}`);\n    console.log('');\n\n    const projectRoots = await getProjectRoots(workspaceRoot);\n    // git diff --name-only lists DELETED paths too (renames = delete+add);\n    // a file that no longer exists cannot be an orphan - skip it\n    const changedFiles = getChangedFiles(workspaceRoot, base, head)\n        .filter((relPath: string) => fs.existsSync(path.join(workspaceRoot, relPath)));\n\n    if (changedFiles.length === 0) {\n        console.log('✅ No TypeScript files changed\\n');\n        return { success: true };\n    }\n\n    console.log(`📂 Checking ${changedFiles.length} changed file(s)...`);\n\n    const layerOneViolations: LayerOneViolation[] = [];\n    const layerTwoViolations: LayerTwoViolation[] = [];\n\n    for (const relPath of changedFiles) {\n        const l1 = checkSingleFileLayerOne(relPath, projectRoots, workspaceRoot, excludePaths);\n        if (l1) layerOneViolations.push(l1);\n        const l2 = checkSingleFileLayerTwo(relPath, projectRoots, workspaceRoot, allowedRootFiles, excludePaths);\n        if (l2) layerTwoViolations.push(l2);\n    }\n\n    if (layerOneViolations.length === 0 && layerTwoViolations.length === 0) {\n        console.log('✅ All changed .ts files are inside a project\\'s src/ directory\\n');\n        return { success: true };\n    }\n\n    if (layerOneViolations.length > 0) {\n        reportLayerOneFailure(layerOneViolations);\n    }\n    if (layerTwoViolations.length > 0) {\n        reportLayerTwoFailure(layerTwoViolations);\n    }\n\n    console.error('To disable: set rules[\"validate-ts-in-src\"].mode to \"OFF\" in webpieces.config.json\\n');\n    return { success: false };\n}\n\nexport default async function runExecutor(\n    _nxOptions: ValidateTsInSrcOptions,\n    context: ExecutorContext,\n): Promise<ExecutorResult> {\n    // Config comes from webpieces.config.json — same source as ai-hooks\n    // and validate-code — via @webpieces/rules-config.\n    const shared = loadAndValidate(context.root).resolved;\n    const rule = shared.rules.get('validate-ts-in-src');\n\n    const rawMode = (rule?.options['mode'] as ValidateTsInSrcMode | undefined) ?? 'NEW_AND_MODIFIED_FILES';\n    const epoch = rule?.options['ignoreModifiedUntilEpoch'] as number | undefined;\n    const branch = rule?.options['ignoreRuleWhileOnBranch'] as string | undefined;\n    const effectiveMode = resolveMode(rawMode, epoch, branch);\n\n    if (effectiveMode === 'OFF' || (rule && rule.isOff)) {\n        console.log('\\n⏭️  Skipping validate-ts-in-src (mode: OFF)\\n');\n        return { success: true };\n    }\n\n    const workspaceRoot = context.root;\n    const excludePaths =\n        (rule?.options['excludePaths'] as string[] | undefined) ?? DEFAULT_EXCLUDE_PATHS;\n    const allowedRootFiles =\n        (rule?.options['allowedRootFiles'] as string[] | undefined) ?? DEFAULT_ALLOWED_ROOT_FILES;\n\n    // Only NEW_AND_MODIFIED_FILES remains once OFF is handled above — validate just the\n    // files changed vs the base branch (legacy-friendly; no whole-workspace scan).\n    return runModifiedFilesMode(workspaceRoot, excludePaths, allowedRootFiles);\n}\n"]}
+{"version":3,"file":"executor.js","sourceRoot":"","sources":["../../../../../../../packages/tooling/nx-webpieces-rules/src/executors/validate-ts-in-src/executor.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;;AAsNH,8BA+BC;;AAlPD,uCAAgG;AAChG,0DAAuH;AACvH,mDAA6B;AAC7B,+CAAyB;AAgBzB,MAAM,qBAAqB,GAAa;IACpC,cAAc,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM;IACrC,cAAc,EAAE,KAAK,EAAE,SAAS;IAChC,WAAW,EAAE,mBAAmB;CACnC,CAAC;AAEF,MAAM,0BAA0B,GAAa,CAAC,eAAe,CAAC,CAAC;AAE/D,MAAM,iBAAiB;IACnB,QAAQ,CAAS;IACjB,WAAW,CAAS;IAEpB,YAAY,QAAgB,EAAE,WAAmB;QAC7C,IAAI,CAAC,QAAQ,GAAG,QAAQ,CAAC;QACzB,IAAI,CAAC,WAAW,GAAG,WAAW,CAAC;IACnC,CAAC;CACJ;AAED,MAAM,iBAAiB;IACnB,QAAQ,CAAS;IAEjB,YAAY,QAAgB;QACxB,IAAI,CAAC,QAAQ,GAAG,QAAQ,CAAC;IAC7B,CAAC;CACJ;AAED,KAAK,UAAU,eAAe,CAAC,aAAqB;IAChD,MAAM,YAAY,GAAG,MAAM,IAAA,gCAAuB,GAAE,CAAC;IACrD,MAAM,cAAc,GAAG,IAAA,kDAAyC,EAAC,YAAY,CAAC,CAAC;IAC/E,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,MAAM,CAAC,cAAc,CAAC,QAAQ,CAAC,EAAE,CAAC;QACvD,IAAI,GAAG,CAAC,IAAI,KAAK,EAAE,IAAI,GAAG,CAAC,IAAI,KAAK,GAAG;YAAE,SAAS;QAClD,IAAI,GAAG,CAAC,IAAI,KAAK,cAAc;YAAE,SAAS;QAC1C,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC;IACnD,CAAC;IACD,OAAO,KAAK,CAAC;AACjB,CAAC;AAED,SAAS,uBAAuB,CAC5B,OAAe,EACf,YAAsB,EACtB,aAAqB,EACrB,YAAsB;IAEtB,IAAI,IAAA,6BAAc,EAAC,OAAO,EAAE,YAAY,CAAC;QAAE,OAAO,IAAI,CAAC;IACvD,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,OAAO,CAAC,CAAC;IACnD,KAAK,MAAM,WAAW,IAAI,YAAY,EAAE,CAAC;QACrC,IAAI,QAAQ,CAAC,UAAU,CAAC,WAAW,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,QAAQ,KAAK,WAAW,EAAE,CAAC;YAC1E,MAAM,YAAY,GAAG,IAAI,CAAC,QAAQ,CAAC,WAAW,EAAE,QAAQ,CAAC,CAAC;YAC1D,IAAI,YAAY,CAAC,UAAU,CAAC,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,YAAY,KAAK,KAAK;gBAAE,OAAO,IAAI,CAAC;YACrF,MAAM,WAAW,GAAG,IAAI,CAAC,QAAQ,CAAC,aAAa,EAAE,WAAW,CAAC,CAAC;YAC9D,OAAO,IAAI,iBAAiB,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC;QACvD,CAAC;IACL,CAAC;IACD,OAAO,IAAI,CAAC,CAAC,gDAAgD;AACjE,CAAC;AAED,SAAS,uBAAuB,CAC5B,OAAe,EACf,YAAsB,EACtB,aAAqB,EACrB,gBAA0B,EAC1B,YAAsB;IAEtB,IAAI,IAAA,6BAAc,EAAC,OAAO,EAAE,YAAY,CAAC;QAAE,OAAO,IAAI,CAAC;IACvD,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACtC,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,gBAAgB,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;QAAE,OAAO,IAAI,CAAC;IACjF,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,OAAO,CAAC,CAAC;IACnD,KAAK,MAAM,WAAW,IAAI,YAAY,EAAE,CAAC;QACrC,IAAI,QAAQ,CAAC,UAAU,CAAC,WAAW,GAAG,IAAI,CAAC,GAAG,CAAC;YAAE,OAAO,IAAI,CAAC,CAAC,qBAAqB;IACvF,CAAC;IACD,OAAO,IAAI,iBAAiB,CAAC,OAAO,CAAC,CAAC;AAC1C,CAAC;AAED,SAAS,WAAW,CAChB,UAA+B,EAC/B,KAAyB,EACzB,MAA0B;IAE1B,IAAI,UAAU,KAAK,KAAK,EAAE,CAAC;QACvB,OAAO,UAAU,CAAC;IACtB,CAAC;IACD,mFAAmF;IACnF,MAAM,IAAI,GAAG,IAAA,6BAAc,EAAC,KAAK,EAAE,MAAM,CAAC,CAAC;IAC3C,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;QACZ,OAAO,CAAC,GAAG,CAAC,iDAAiD,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC;QAC7E,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAChB,OAAO,KAAK,CAAC;IACjB,CAAC;IACD,OAAO,UAAU,CAAC;AACtB,CAAC;AAED,SAAS,qBAAqB,CAAC,UAA+B;IAC1D,OAAO,CAAC,KAAK,CAAC,oDAAoD,CAAC,CAAC;IACpE,OAAO,CAAC,KAAK,CAAC,oEAAoE,CAAC,CAAC;IACpF,OAAO,CAAC,KAAK,CAAC,iDAAiD,CAAC,CAAC;IACjE,OAAO,CAAC,KAAK,CAAC,+BAA+B,CAAC,CAAC;IAC/C,OAAO,CAAC,KAAK,CAAC,0CAA0C,CAAC,CAAC;IAC1D,OAAO,CAAC,KAAK,CAAC,oBAAoB,CAAC,CAAC;IACpC,OAAO,CAAC,KAAK,CAAC,oBAAoB,CAAC,CAAC;IACpC,OAAO,CAAC,KAAK,CAAC,uBAAuB,CAAC,CAAC;IAEvC,KAAK,MAAM,CAAC,IAAI,UAAU,EAAE,CAAC;QACzB,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC;IACvC,CAAC;IAED,OAAO,CAAC,KAAK,CAAC,qBAAqB,CAAC,CAAC;IACrC,OAAO,CAAC,KAAK,CAAC,oDAAoD,CAAC,CAAC;IACpE,OAAO,CAAC,KAAK,CAAC,4DAA4D,CAAC,CAAC;IAC5E,OAAO,CAAC,KAAK,CAAC,sEAAsE,CAAC,CAAC;IACtF,OAAO,CAAC,KAAK,CAAC,iDAAiD,CAAC,CAAC;AACrE,CAAC;AAED,SAAS,qBAAqB,CAAC,UAA+B;IAC1D,OAAO,CAAC,KAAK,CAAC,oDAAoD,CAAC,CAAC;IACpE,OAAO,CAAC,KAAK,CAAC,gEAAgE,CAAC,CAAC;IAChF,OAAO,CAAC,KAAK,CAAC,mEAAmE,CAAC,CAAC;IACnF,OAAO,CAAC,KAAK,CAAC,8CAA8C,CAAC,CAAC;IAE9D,KAAK,MAAM,CAAC,IAAI,UAAU,EAAE,CAAC;QACzB,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC;IACvC,CAAC;IAED,OAAO,CAAC,KAAK,CAAC,qBAAqB,CAAC,CAAC;IACrC,OAAO,CAAC,KAAK,CAAC,gEAAgE,CAAC,CAAC;IAChF,OAAO,CAAC,KAAK,CAAC,uEAAuE,CAAC,CAAC;IACvF,OAAO,CAAC,KAAK,CAAC,iFAAiF,CAAC,CAAC;IACjG,OAAO,CAAC,KAAK,CAAC,0EAA0E,CAAC,CAAC;IAC1F,OAAO,CAAC,KAAK,CAAC,yEAAyE,CAAC,CAAC;AAC7F,CAAC;AAED,KAAK,UAAU,oBAAoB,CAC/B,aAAqB,EACrB,YAAsB,EACtB,gBAA0B;IAE1B,OAAO,CAAC,GAAG,CAAC,qGAAqG,CAAC,CAAC;IAEnH,IAAI,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;IAClC,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;IAEpC,IAAI,CAAC,IAAI,EAAE,CAAC;QACR,IAAI,GAAG,IAAA,yBAAU,EAAC,aAAa,CAAC,IAAI,SAAS,CAAC;QAC9C,IAAI,CAAC,IAAI,EAAE,CAAC;YACR,OAAO,CAAC,GAAG,CAAC,+EAA+E,CAAC,CAAC;YAC7F,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;QAC7B,CAAC;IACL,CAAC;IAED,OAAO,CAAC,GAAG,CAAC,YAAY,IAAI,EAAE,CAAC,CAAC;IAChC,OAAO,CAAC,GAAG,CAAC,YAAY,IAAI,IAAI,6CAA6C,EAAE,CAAC,CAAC;IACjF,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAEhB,MAAM,YAAY,GAAG,MAAM,eAAe,CAAC,aAAa,CAAC,CAAC;IAC1D,uEAAuE;IACvE,6DAA6D;IAC7D,MAAM,YAAY,GAAG,IAAA,8BAAe,EAAC,aAAa,EAAE,IAAI,EAAE,IAAI,CAAC;SAC1D,MAAM,CAAC,CAAC,OAAe,EAAE,EAAE,CAAC,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC;IAEnF,IAAI,YAAY,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC5B,OAAO,CAAC,GAAG,CAAC,iCAAiC,CAAC,CAAC;QAC/C,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;IAC7B,CAAC;IAED,OAAO,CAAC,GAAG,CAAC,eAAe,YAAY,CAAC,MAAM,qBAAqB,CAAC,CAAC;IAErE,MAAM,kBAAkB,GAAwB,EAAE,CAAC;IACnD,MAAM,kBAAkB,GAAwB,EAAE,CAAC;IAEnD,KAAK,MAAM,OAAO,IAAI,YAAY,EAAE,CAAC;QACjC,MAAM,EAAE,GAAG,uBAAuB,CAAC,OAAO,EAAE,YAAY,EAAE,aAAa,EAAE,YAAY,CAAC,CAAC;QACvF,IAAI,EAAE;YAAE,kBAAkB,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACpC,MAAM,EAAE,GAAG,uBAAuB,CAAC,OAAO,EAAE,YAAY,EAAE,aAAa,EAAE,gBAAgB,EAAE,YAAY,CAAC,CAAC;QACzG,IAAI,EAAE;YAAE,kBAAkB,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACxC,CAAC;IAED,IAAI,kBAAkB,CAAC,MAAM,KAAK,CAAC,IAAI,kBAAkB,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACrE,OAAO,CAAC,GAAG,CAAC,kEAAkE,CAAC,CAAC;QAChF,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;IAC7B,CAAC;IAED,IAAI,kBAAkB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAChC,qBAAqB,CAAC,kBAAkB,CAAC,CAAC;IAC9C,CAAC;IACD,IAAI,kBAAkB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAChC,qBAAqB,CAAC,kBAAkB,CAAC,CAAC;IAC9C,CAAC;IAED,OAAO,CAAC,KAAK,CAAC,sFAAsF,CAAC,CAAC;IACtG,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;AAC9B,CAAC;AAEc,KAAK,UAAU,WAAW,CACrC,UAAkC,EAClC,OAAwB;IAExB,oEAAoE;IACpE,mDAAmD;IACnD,MAAM,MAAM,GAAG,IAAA,8BAAe,EAAC,OAAO,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC;IACtD,MAAM,IAAI,GAAG,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,oBAAoB,CAAC,CAAC;IAEpD,MAAM,OAAO,GAAI,IAAI,EAAE,OAAO,CAAC,MAAM,CAAqC,IAAI,wBAAwB,CAAC;IACvG,MAAM,KAAK,GAAG,IAAI,EAAE,OAAO,CAAC,uBAAuB,CAAuB,CAAC;IAC3E,kGAAkG;IAClG,gEAAgE;IAChE,MAAM,SAAS,GAAG,IAAI,EAAE,OAAO,CAAC,0BAA0B,CAAC,CAAC;IAC5D,MAAM,MAAM,GAAG,OAAO,SAAS,KAAK,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC;IACrE,MAAM,aAAa,GAAG,WAAW,CAAC,OAAO,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC;IAE1D,IAAI,aAAa,KAAK,KAAK,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;QAClD,OAAO,CAAC,GAAG,CAAC,iDAAiD,CAAC,CAAC;QAC/D,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;IAC7B,CAAC;IAED,MAAM,aAAa,GAAG,OAAO,CAAC,IAAI,CAAC;IACnC,MAAM,YAAY,GACb,IAAI,EAAE,OAAO,CAAC,cAAc,CAA0B,IAAI,qBAAqB,CAAC;IACrF,MAAM,gBAAgB,GACjB,IAAI,EAAE,OAAO,CAAC,kBAAkB,CAA0B,IAAI,0BAA0B,CAAC;IAE9F,oFAAoF;IACpF,+EAA+E;IAC/E,OAAO,oBAAoB,CAAC,aAAa,EAAE,YAAY,EAAE,gBAAgB,CAAC,CAAC;AAC/E,CAAC","sourcesContent":["/**\n * Validate TypeScript Files in src/ Executor\n *\n * Two-layer rule:\n *   Layer 1: every .ts file inside an Nx project must live under src/\n *   Layer 2: every .ts file anywhere in the workspace must belong to some\n *            Nx project. Orphan files (at workspace root or in a non-project\n *            directory) fail the rule unless explicitly allowlisted.\n *\n * `excludePaths` is holistic — its bare dir names and globs exempt files\n * from BOTH layers. Defaults exempt **\\/*.d.ts and **\\/jest.config.ts.\n *\n * Only the files changed vs the base branch are validated (NEW_AND_MODIFIED_FILES),\n * so the rule applies cleanly to legacy projects — pre-existing orphan files\n * are grandfathered and only newly-touched files are checked.\n *\n * Configurable via webpieces.config.json:\n *   \"validate-ts-in-src\": {\n *       \"mode\": \"NEW_AND_MODIFIED_FILES\", // \"OFF\" disables the rule\n *       \"excludePaths\": [...],   // dir names + globs, e.g. \"**\\/codegen.ts\"\n *       \"allowedRootFiles\": [...],\n *       \"turnOffRuleUntilEpoch\": 0,       // epoch SECONDS; skip the rule until it passes\n *       \"turnOffRuleWhileOnBranch\": null  // branch name; skip the rule while it is checked out\n *   }\n *\n * Usage: nx run architecture:validate-ts-in-src\n */\n\nimport type { ExecutorContext } from '@nx/devkit';\nimport { createProjectGraphAsync, readProjectsConfigurationFromProjectGraph } from '@nx/devkit';\nimport { loadAndValidate, isPathExcluded, shouldSkipRule, detectBase, getChangedFiles } from '@webpieces/rules-config';\nimport * as path from 'path';\nimport * as fs from 'fs';\n\nexport type ValidateTsInSrcMode = 'OFF' | 'NEW_AND_MODIFIED_FILES';\n\nexport interface ValidateTsInSrcOptions {\n    mode?: ValidateTsInSrcMode;\n    excludePaths?: string[];\n    allowedRootFiles?: string[];\n    turnOffRuleUntilEpoch?: number;\n    turnOffRuleWhileOnBranch?: string | null;\n}\n\nexport interface ExecutorResult {\n    success: boolean;\n}\n\nconst DEFAULT_EXCLUDE_PATHS: string[] = [\n    'node_modules', 'dist', '.nx', '.git',\n    'architecture', 'tmp', 'scripts',\n    '**/*.d.ts', '**/jest.config.ts',\n];\n\nconst DEFAULT_ALLOWED_ROOT_FILES: string[] = ['jest.setup.ts'];\n\nclass LayerOneViolation {\n    filePath: string;\n    projectName: string;\n\n    constructor(filePath: string, projectName: string) {\n        this.filePath = filePath;\n        this.projectName = projectName;\n    }\n}\n\nclass LayerTwoViolation {\n    filePath: string;\n\n    constructor(filePath: string) {\n        this.filePath = filePath;\n    }\n}\n\nasync function getProjectRoots(workspaceRoot: string): Promise<string[]> {\n    const projectGraph = await createProjectGraphAsync();\n    const projectsConfig = readProjectsConfigurationFromProjectGraph(projectGraph);\n    const roots: string[] = [];\n    for (const cfg of Object.values(projectsConfig.projects)) {\n        if (cfg.root === '' || cfg.root === '.') continue;\n        if (cfg.root === 'architecture') continue;\n        roots.push(path.join(workspaceRoot, cfg.root));\n    }\n    return roots;\n}\n\nfunction checkSingleFileLayerOne(\n    relPath: string,\n    projectRoots: string[],\n    workspaceRoot: string,\n    excludePaths: string[],\n): LayerOneViolation | null {\n    if (isPathExcluded(relPath, excludePaths)) return null;\n    const fullPath = path.join(workspaceRoot, relPath);\n    for (const projectRoot of projectRoots) {\n        if (fullPath.startsWith(projectRoot + path.sep) || fullPath === projectRoot) {\n            const relToProject = path.relative(projectRoot, fullPath);\n            if (relToProject.startsWith('src' + path.sep) || relToProject === 'src') return null;\n            const projectName = path.relative(workspaceRoot, projectRoot);\n            return new LayerOneViolation(relPath, projectName);\n        }\n    }\n    return null; // not in any project — that's layer 2's concern\n}\n\nfunction checkSingleFileLayerTwo(\n    relPath: string,\n    projectRoots: string[],\n    workspaceRoot: string,\n    allowedRootFiles: string[],\n    excludePaths: string[],\n): LayerTwoViolation | null {\n    if (isPathExcluded(relPath, excludePaths)) return null;\n    const parts = relPath.split(path.sep);\n    if (parts.length === 1 && allowedRootFiles.includes(parts[0] ?? '')) return null;\n    const fullPath = path.join(workspaceRoot, relPath);\n    for (const projectRoot of projectRoots) {\n        if (fullPath.startsWith(projectRoot + path.sep)) return null; // owned by a project\n    }\n    return new LayerTwoViolation(relPath);\n}\n\nfunction resolveMode(\n    normalMode: ValidateTsInSrcMode,\n    epoch: number | undefined,\n    branch: string | undefined,\n): ValidateTsInSrcMode {\n    if (normalMode === 'OFF') {\n        return normalMode;\n    }\n    // Honor the universal escape hatches: skip while on a named branch or until epoch.\n    const skip = shouldSkipRule(epoch, branch);\n    if (skip.skip) {\n        console.log(`\\n⏭️  Skipping validate-ts-in-src validation (${skip.reason})`);\n        console.log('');\n        return 'OFF';\n    }\n    return normalMode;\n}\n\nfunction reportLayerOneFailure(violations: LayerOneViolation[]): void {\n    console.error('❌ TypeScript files found outside src/ directory!\\n');\n    console.error('All .ts source files must be inside the project\\'s src/ directory.');\n    console.error('This enforces the standard project structure:\\n');\n    console.error('  packages/{category}/{name}/');\n    console.error('  ├── src/          ← ALL .ts files here');\n    console.error('  ├── package.json');\n    console.error('  ├── project.json');\n    console.error('  └── tsconfig.json\\n');\n\n    for (const v of violations) {\n        console.error(`  ❌ ${v.filePath}`);\n    }\n\n    console.error('\\nTo fix, pick one:');\n    console.error('  (a) Move the .ts file(s) into the src/ directory');\n    console.error('  (b) Add a glob/dir to validate-ts-in-src.excludePaths in');\n    console.error('      webpieces.config.json (e.g. \"**/codegen.ts\"). Defaults already');\n    console.error('      exempt **/*.d.ts and **/jest.config.ts.\\n');\n}\n\nfunction reportLayerTwoFailure(violations: LayerTwoViolation[]): void {\n    console.error('❌ TypeScript files found outside any Nx project!\\n');\n    console.error('Every .ts file must belong to an Nx project so it is compiled,');\n    console.error('linted, and tested under a known project config. Orphan files are');\n    console.error('invisible to the build graph and will rot.\\n');\n\n    for (const v of violations) {\n        console.error(`  ❌ ${v.filePath}`);\n    }\n\n    console.error('\\nTo fix, pick one:');\n    console.error('  (a) Move the file into an existing project\\'s src/ directory');\n    console.error('  (b) Create a new project (add project.json) that owns the directory');\n    console.error('  (c) Add the containing top-level directory to validate-ts-in-src.excludePaths');\n    console.error('      in nx.json targetDefaults, or add the filename to allowedRootFiles');\n    console.error('      if it is a legitimate workspace-root file (e.g., jest.setup.ts)\\n');\n}\n\nasync function runModifiedFilesMode(\n    workspaceRoot: string,\n    excludePaths: string[],\n    allowedRootFiles: string[],\n): Promise<ExecutorResult> {\n    console.log('\\n📁 Validating TypeScript files are in src/ and owned by a project (NEW_AND_MODIFIED_FILES mode)\\n');\n\n    let base = process.env['NX_BASE'];\n    const head = process.env['NX_HEAD'];\n\n    if (!base) {\n        base = detectBase(workspaceRoot) ?? undefined;\n        if (!base) {\n            console.log('\\n⏭️  Skipping validate-ts-in-src validation (could not detect base branch)\\n');\n            return { success: true };\n        }\n    }\n\n    console.log(`   Base: ${base}`);\n    console.log(`   Head: ${head ?? 'working tree (includes uncommitted changes)'}`);\n    console.log('');\n\n    const projectRoots = await getProjectRoots(workspaceRoot);\n    // git diff --name-only lists DELETED paths too (renames = delete+add);\n    // a file that no longer exists cannot be an orphan - skip it\n    const changedFiles = getChangedFiles(workspaceRoot, base, head)\n        .filter((relPath: string) => fs.existsSync(path.join(workspaceRoot, relPath)));\n\n    if (changedFiles.length === 0) {\n        console.log('✅ No TypeScript files changed\\n');\n        return { success: true };\n    }\n\n    console.log(`📂 Checking ${changedFiles.length} changed file(s)...`);\n\n    const layerOneViolations: LayerOneViolation[] = [];\n    const layerTwoViolations: LayerTwoViolation[] = [];\n\n    for (const relPath of changedFiles) {\n        const l1 = checkSingleFileLayerOne(relPath, projectRoots, workspaceRoot, excludePaths);\n        if (l1) layerOneViolations.push(l1);\n        const l2 = checkSingleFileLayerTwo(relPath, projectRoots, workspaceRoot, allowedRootFiles, excludePaths);\n        if (l2) layerTwoViolations.push(l2);\n    }\n\n    if (layerOneViolations.length === 0 && layerTwoViolations.length === 0) {\n        console.log('✅ All changed .ts files are inside a project\\'s src/ directory\\n');\n        return { success: true };\n    }\n\n    if (layerOneViolations.length > 0) {\n        reportLayerOneFailure(layerOneViolations);\n    }\n    if (layerTwoViolations.length > 0) {\n        reportLayerTwoFailure(layerTwoViolations);\n    }\n\n    console.error('To disable: set rules[\"validate-ts-in-src\"].mode to \"OFF\" in webpieces.config.json\\n');\n    return { success: false };\n}\n\nexport default async function runExecutor(\n    _nxOptions: ValidateTsInSrcOptions,\n    context: ExecutorContext,\n): Promise<ExecutorResult> {\n    // Config comes from webpieces.config.json — same source as ai-hooks\n    // and validate-code — via @webpieces/rules-config.\n    const shared = loadAndValidate(context.root).resolved;\n    const rule = shared.rules.get('validate-ts-in-src');\n\n    const rawMode = (rule?.options['mode'] as ValidateTsInSrcMode | undefined) ?? 'NEW_AND_MODIFIED_FILES';\n    const epoch = rule?.options['turnOffRuleUntilEpoch'] as number | undefined;\n    // turnOffRuleWhileOnBranch is required-but-NULLABLE in the config (null = \"always on\"), so narrow\n    // to a branch NAME here; anything else means no branch scoping.\n    const rawBranch = rule?.options['turnOffRuleWhileOnBranch'];\n    const branch = typeof rawBranch === 'string' ? rawBranch : undefined;\n    const effectiveMode = resolveMode(rawMode, epoch, branch);\n\n    if (effectiveMode === 'OFF' || (rule && rule.isOff)) {\n        console.log('\\n⏭️  Skipping validate-ts-in-src (mode: OFF)\\n');\n        return { success: true };\n    }\n\n    const workspaceRoot = context.root;\n    const excludePaths =\n        (rule?.options['excludePaths'] as string[] | undefined) ?? DEFAULT_EXCLUDE_PATHS;\n    const allowedRootFiles =\n        (rule?.options['allowedRootFiles'] as string[] | undefined) ?? DEFAULT_ALLOWED_ROOT_FILES;\n\n    // Only NEW_AND_MODIFIED_FILES remains once OFF is handled above — validate just the\n    // files changed vs the base branch (legacy-friendly; no whole-workspace scan).\n    return runModifiedFilesMode(workspaceRoot, excludePaths, allowedRootFiles);\n}\n"]}

package/src/lib/runtime-config.d.ts

@@ -6,7 +6,8 @@
  *
  *   "runtime-architecture": {
  *     "mode": "ON",                          // "OFF" disables the whole feature
- *     "ignoreModifiedUntilEpoch": 0,         // whole-rule punt (epoch seconds)
+ *     "turnOffRuleUntilEpoch": 0,            // whole-rule punt (epoch seconds)
+ *     "turnOffRuleWhileOnBranch": null,      // whole-rule punt while on a named branch
  *     "allowedCycles": [ { "services": ["a","b"], "reason": "...", "until": 1771931925 } ],
  *     "showExternalNodes": true,              // draw firestore/gmail/... as terminal nodes
  *     "externalApiPaths": ["libraries/apis/external/**"]  // where those vendor contracts live
@@ -21,8 +22,8 @@ export interface AllowedCycle {
 }
 export interface RuntimeRuleConfig {
     off: boolean;
-    ignoreModifiedUntilEpoch?: number;
-    ignoreRuleWhileOnBranch?: string;
+    turnOffRuleUntilEpoch?: number;
+    turnOffRuleWhileOnBranch?: string;
     allowedCycles: AllowedCycle[];
     /** Render the dashed external terminal nodes in the runtime viz (default true). */
     showExternalNodes: boolean;
@@ -36,8 +37,8 @@ export interface RuntimeRuleConfig {
 export declare function loadRuntimeConfig(workspaceRoot: string): RuntimeRuleConfig;
 /**
  * Whole-rule report-only window honoring BOTH escape hatches: skip while on the
- * named branch (ignoreRuleWhileOnBranch) or until the epoch passes
- * (ignoreModifiedUntilEpoch). When `.skip` is true, problems are reported but
+ * named branch (turnOffRuleWhileOnBranch) or until the epoch passes
+ * (turnOffRuleUntilEpoch). When `.skip` is true, problems are reported but
  * the build is not failed.
  */
 export declare function runtimeReportOnly(config: RuntimeRuleConfig): SkipRuleResult;

package/src/lib/runtime-config.js

@@ -7,7 +7,8 @@
  *
  *   "runtime-architecture": {
  *     "mode": "ON",                          // "OFF" disables the whole feature
- *     "ignoreModifiedUntilEpoch": 0,         // whole-rule punt (epoch seconds)
+ *     "turnOffRuleUntilEpoch": 0,            // whole-rule punt (epoch seconds)
+ *     "turnOffRuleWhileOnBranch": null,      // whole-rule punt while on a named branch
  *     "allowedCycles": [ { "services": ["a","b"], "reason": "...", "until": 1771931925 } ],
  *     "showExternalNodes": true,              // draw firestore/gmail/... as terminal nodes
  *     "externalApiPaths": ["libraries/apis/external/**"]  // where those vendor contracts live
@@ -31,8 +32,10 @@ function loadRuntimeConfig(workspaceRoot) {
     const raw = (rule?.options ?? {});
     return {
         off: rule?.isOff ?? false,
-        ignoreModifiedUntilEpoch: typeof raw.ignoreModifiedUntilEpoch === 'number' ? raw.ignoreModifiedUntilEpoch : undefined,
-        ignoreRuleWhileOnBranch: typeof raw.ignoreRuleWhileOnBranch === 'string' ? raw.ignoreRuleWhileOnBranch : undefined,
+        turnOffRuleUntilEpoch: typeof raw.turnOffRuleUntilEpoch === 'number' ? raw.turnOffRuleUntilEpoch : undefined,
+        // turnOffRuleWhileOnBranch is required-but-NULLABLE in the config ("null" = always on), so a
+        // non-string (null) collapses to undefined, which shouldSkipRule treats as "no branch scoping".
+        turnOffRuleWhileOnBranch: typeof raw.turnOffRuleWhileOnBranch === 'string' ? raw.turnOffRuleWhileOnBranch : undefined,
         allowedCycles: Array.isArray(raw.allowedCycles) ? raw.allowedCycles.filter(isUsableCycle) : [],
         // Opt-OUT: the external systems are the ones that page you at 3am, so they are drawn unless
         // a repo explicitly says its external surface is too noisy to be useful.
@@ -46,12 +49,12 @@ function loadRuntimeConfig(workspaceRoot) {
 }
 /**
  * Whole-rule report-only window honoring BOTH escape hatches: skip while on the
- * named branch (ignoreRuleWhileOnBranch) or until the epoch passes
- * (ignoreModifiedUntilEpoch). When `.skip` is true, problems are reported but
+ * named branch (turnOffRuleWhileOnBranch) or until the epoch passes
+ * (turnOffRuleUntilEpoch). When `.skip` is true, problems are reported but
  * the build is not failed.
  */
 function runtimeReportOnly(config) {
-    return (0, rules_config_1.shouldSkipRule)(config.ignoreModifiedUntilEpoch, config.ignoreRuleWhileOnBranch);
+    return (0, rules_config_1.shouldSkipRule)(config.turnOffRuleUntilEpoch, config.turnOffRuleWhileOnBranch);
 }
 /**
  * Whole-rule grace window: while now < epoch, failures are reported but do not

package/src/lib/runtime-config.js.map

@@ -1 +1 @@
-{"version":3,"file":"runtime-config.js","sourceRoot":"","sources":["../../../../../../packages/tooling/nx-webpieces-rules/src/lib/runtime-config.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;GAaG;;;AA4CH,8CAoBC;AAQD,8CAEC;AAMD,sCAGC;AAGD,8BAEC;AAtFD,0DAA0F;AAE7E,QAAA,iBAAiB,GAAG,sBAAsB,CAAC;AAmCxD,SAAS,aAAa,CAAC,KAAmB;IACtC,OAAO,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC;AACtE,CAAC;AAED,sEAAsE;AACtE,SAAgB,iBAAiB,CAAC,aAAqB;IACnD,MAAM,MAAM,GAAG,IAAA,8BAAe,EAAC,aAAa,CAAC,CAAC,QAAQ,CAAC;IACvD,MAAM,IAAI,GAAG,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,yBAAiB,CAAC,CAAC;IACjD,MAAM,GAAG,GAAG,CAAC,IAAI,EAAE,OAAO,IAAI,EAAE,CAAmB,CAAC;IACpD,OAAO;QACH,GAAG,EAAE,IAAI,EAAE,KAAK,IAAI,KAAK;QACzB,wBAAwB,EACpB,OAAO,GAAG,CAAC,wBAAwB,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,wBAAwB,CAAC,CAAC,CAAC,SAAS;QAC/F,uBAAuB,EACnB,OAAO,GAAG,CAAC,uBAAuB,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,uBAAuB,CAAC,CAAC,CAAC,SAAS;QAC7F,aAAa,EAAE,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,aAAa,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,EAAE;QAC9F,4FAA4F;QAC5F,yEAAyE;QACzE,iBAAiB,EAAE,GAAG,CAAC,iBAAiB,KAAK,KAAK;QAClD,0FAA0F;QAC1F,uEAAuE;QACvE,gBAAgB,EAAE,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC;YACjD,CAAC,CAAC,GAAG,CAAC,gBAAgB,CAAC,MAAM,CAAC,CAAC,KAAa,EAAE,EAAE,CAAC,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC;YAC/F,CAAC,CAAC,EAAE;KACX,CAAC;AACN,CAAC;AAED;;;;;GAKG;AACH,SAAgB,iBAAiB,CAAC,MAAyB;IACvD,OAAO,IAAA,6BAAc,EAAC,MAAM,CAAC,wBAAwB,EAAE,MAAM,CAAC,uBAAuB,CAAC,CAAC;AAC3F,CAAC;AAED;;;GAGG;AACH,SAAgB,aAAa,CAAC,KAAyB;IACnD,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,KAAK,CAAC;IACtC,OAAO,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,GAAG,KAAK,CAAC;AACrC,CAAC;AAED,wDAAwD;AACxD,SAAgB,SAAS,CAAC,KAAa;IACnC,OAAO,IAAI,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,CAAC,WAAW,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;AAC9D,CAAC","sourcesContent":["/**\n * Runtime Config\n *\n * Loads the `runtime-architecture` rule from webpieces.config.json and exposes\n * typed accessors shared by the generate + validate + visualize executors.\n *\n *   \"runtime-architecture\": {\n *     \"mode\": \"ON\",                          // \"OFF\" disables the whole feature\n *     \"ignoreModifiedUntilEpoch\": 0,         // whole-rule punt (epoch seconds)\n *     \"allowedCycles\": [ { \"services\": [\"a\",\"b\"], \"reason\": \"...\", \"until\": 1771931925 } ],\n *     \"showExternalNodes\": true,              // draw firestore/gmail/... as terminal nodes\n *     \"externalApiPaths\": [\"libraries/apis/external/**\"]  // where those vendor contracts live\n *   }\n */\n\nimport { loadAndValidate, shouldSkipRule, SkipRuleResult } from '@webpieces/rules-config';\n\nexport const RUNTIME_RULE_NAME = 'runtime-architecture';\n\nexport interface AllowedCycle {\n    services: string[];\n    reason?: string;\n    until?: number;\n}\n\nexport interface RuntimeRuleConfig {\n    off: boolean;\n    ignoreModifiedUntilEpoch?: number;\n    ignoreRuleWhileOnBranch?: string;\n    allowedCycles: AllowedCycle[];\n    /** Render the dashed external terminal nodes in the runtime viz (default true). */\n    showExternalNodes: boolean;\n    /**\n     * Globs of project roots whose exported `*Api` types are contracts for systems OUTSIDE this repo.\n     * Empty (the default) means the scan looks for no vendor seams at all.\n     */\n    externalApiPaths: string[];\n}\n\n/**\n * Typed view of the opaque webpieces.config.json option bag for this rule. The\n * config is trusted (it is the workspace's own file), so we cast once here and\n * defensively narrow arrays/numbers rather than threading `unknown` everywhere.\n */\ninterface RuntimeRuleRaw {\n    ignoreModifiedUntilEpoch?: number;\n    ignoreRuleWhileOnBranch?: string;\n    allowedCycles?: AllowedCycle[];\n    showExternalNodes?: boolean;\n    externalApiPaths?: string[];\n}\n\nfunction isUsableCycle(cycle: AllowedCycle): boolean {\n    return Array.isArray(cycle.services) && cycle.services.length > 0;\n}\n\n/** Load the runtime-architecture rule config (with safe defaults). */\nexport function loadRuntimeConfig(workspaceRoot: string): RuntimeRuleConfig {\n    const shared = loadAndValidate(workspaceRoot).resolved;\n    const rule = shared.rules.get(RUNTIME_RULE_NAME);\n    const raw = (rule?.options ?? {}) as RuntimeRuleRaw;\n    return {\n        off: rule?.isOff ?? false,\n        ignoreModifiedUntilEpoch:\n            typeof raw.ignoreModifiedUntilEpoch === 'number' ? raw.ignoreModifiedUntilEpoch : undefined,\n        ignoreRuleWhileOnBranch:\n            typeof raw.ignoreRuleWhileOnBranch === 'string' ? raw.ignoreRuleWhileOnBranch : undefined,\n        allowedCycles: Array.isArray(raw.allowedCycles) ? raw.allowedCycles.filter(isUsableCycle) : [],\n        // Opt-OUT: the external systems are the ones that page you at 3am, so they are drawn unless\n        // a repo explicitly says its external surface is too noisy to be useful.\n        showExternalNodes: raw.showExternalNodes !== false,\n        // Opt-IN: there is no safe guess for where a repo keeps its vendor wrappers, and guessing\n        // wrong would classify ordinary libraries as systems outside the repo.\n        externalApiPaths: Array.isArray(raw.externalApiPaths)\n            ? raw.externalApiPaths.filter((entry: string) => typeof entry === 'string' && entry.length > 0)\n            : [],\n    };\n}\n\n/**\n * Whole-rule report-only window honoring BOTH escape hatches: skip while on the\n * named branch (ignoreRuleWhileOnBranch) or until the epoch passes\n * (ignoreModifiedUntilEpoch). When `.skip` is true, problems are reported but\n * the build is not failed.\n */\nexport function runtimeReportOnly(config: RuntimeRuleConfig): SkipRuleResult {\n    return shouldSkipRule(config.ignoreModifiedUntilEpoch, config.ignoreRuleWhileOnBranch);\n}\n\n/**\n * Whole-rule grace window: while now < epoch, failures are reported but do not\n * fail the build (warn). Mirrors the other webpieces rules.\n */\nexport function isGraceActive(epoch: number | undefined): boolean {\n    if (epoch === undefined) return false;\n    return Date.now() / 1000 < epoch;\n}\n\n/** Format the epoch as an ISO date for log messages. */\nexport function epochDate(epoch: number): string {\n    return new Date(epoch * 1000).toISOString().split('T')[0];\n}\n"]}
+{"version":3,"file":"runtime-config.js","sourceRoot":"","sources":["../../../../../../packages/tooling/nx-webpieces-rules/src/lib/runtime-config.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;GAcG;;;AA4CH,8CAsBC;AAQD,8CAEC;AAMD,sCAGC;AAGD,8BAEC;AAxFD,0DAA0F;AAE7E,QAAA,iBAAiB,GAAG,sBAAsB,CAAC;AAmCxD,SAAS,aAAa,CAAC,KAAmB;IACtC,OAAO,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC;AACtE,CAAC;AAED,sEAAsE;AACtE,SAAgB,iBAAiB,CAAC,aAAqB;IACnD,MAAM,MAAM,GAAG,IAAA,8BAAe,EAAC,aAAa,CAAC,CAAC,QAAQ,CAAC;IACvD,MAAM,IAAI,GAAG,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,yBAAiB,CAAC,CAAC;IACjD,MAAM,GAAG,GAAG,CAAC,IAAI,EAAE,OAAO,IAAI,EAAE,CAAmB,CAAC;IACpD,OAAO;QACH,GAAG,EAAE,IAAI,EAAE,KAAK,IAAI,KAAK;QACzB,qBAAqB,EACjB,OAAO,GAAG,CAAC,qBAAqB,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,qBAAqB,CAAC,CAAC,CAAC,SAAS;QACzF,6FAA6F;QAC7F,gGAAgG;QAChG,wBAAwB,EACpB,OAAO,GAAG,CAAC,wBAAwB,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,wBAAwB,CAAC,CAAC,CAAC,SAAS;QAC/F,aAAa,EAAE,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,aAAa,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,EAAE;QAC9F,4FAA4F;QAC5F,yEAAyE;QACzE,iBAAiB,EAAE,GAAG,CAAC,iBAAiB,KAAK,KAAK;QAClD,0FAA0F;QAC1F,uEAAuE;QACvE,gBAAgB,EAAE,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC;YACjD,CAAC,CAAC,GAAG,CAAC,gBAAgB,CAAC,MAAM,CAAC,CAAC,KAAa,EAAE,EAAE,CAAC,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC;YAC/F,CAAC,CAAC,EAAE;KACX,CAAC;AACN,CAAC;AAED;;;;;GAKG;AACH,SAAgB,iBAAiB,CAAC,MAAyB;IACvD,OAAO,IAAA,6BAAc,EAAC,MAAM,CAAC,qBAAqB,EAAE,MAAM,CAAC,wBAAwB,CAAC,CAAC;AACzF,CAAC;AAED;;;GAGG;AACH,SAAgB,aAAa,CAAC,KAAyB;IACnD,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,KAAK,CAAC;IACtC,OAAO,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,GAAG,KAAK,CAAC;AACrC,CAAC;AAED,wDAAwD;AACxD,SAAgB,SAAS,CAAC,KAAa;IACnC,OAAO,IAAI,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,CAAC,WAAW,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;AAC9D,CAAC","sourcesContent":["/**\n * Runtime Config\n *\n * Loads the `runtime-architecture` rule from webpieces.config.json and exposes\n * typed accessors shared by the generate + validate + visualize executors.\n *\n *   \"runtime-architecture\": {\n *     \"mode\": \"ON\",                          // \"OFF\" disables the whole feature\n *     \"turnOffRuleUntilEpoch\": 0,            // whole-rule punt (epoch seconds)\n *     \"turnOffRuleWhileOnBranch\": null,      // whole-rule punt while on a named branch\n *     \"allowedCycles\": [ { \"services\": [\"a\",\"b\"], \"reason\": \"...\", \"until\": 1771931925 } ],\n *     \"showExternalNodes\": true,              // draw firestore/gmail/... as terminal nodes\n *     \"externalApiPaths\": [\"libraries/apis/external/**\"]  // where those vendor contracts live\n *   }\n */\n\nimport { loadAndValidate, shouldSkipRule, SkipRuleResult } from '@webpieces/rules-config';\n\nexport const RUNTIME_RULE_NAME = 'runtime-architecture';\n\nexport interface AllowedCycle {\n    services: string[];\n    reason?: string;\n    until?: number;\n}\n\nexport interface RuntimeRuleConfig {\n    off: boolean;\n    turnOffRuleUntilEpoch?: number;\n    turnOffRuleWhileOnBranch?: string;\n    allowedCycles: AllowedCycle[];\n    /** Render the dashed external terminal nodes in the runtime viz (default true). */\n    showExternalNodes: boolean;\n    /**\n     * Globs of project roots whose exported `*Api` types are contracts for systems OUTSIDE this repo.\n     * Empty (the default) means the scan looks for no vendor seams at all.\n     */\n    externalApiPaths: string[];\n}\n\n/**\n * Typed view of the opaque webpieces.config.json option bag for this rule. The\n * config is trusted (it is the workspace's own file), so we cast once here and\n * defensively narrow arrays/numbers rather than threading `unknown` everywhere.\n */\ninterface RuntimeRuleRaw {\n    turnOffRuleUntilEpoch?: number;\n    turnOffRuleWhileOnBranch?: string | null;\n    allowedCycles?: AllowedCycle[];\n    showExternalNodes?: boolean;\n    externalApiPaths?: string[];\n}\n\nfunction isUsableCycle(cycle: AllowedCycle): boolean {\n    return Array.isArray(cycle.services) && cycle.services.length > 0;\n}\n\n/** Load the runtime-architecture rule config (with safe defaults). */\nexport function loadRuntimeConfig(workspaceRoot: string): RuntimeRuleConfig {\n    const shared = loadAndValidate(workspaceRoot).resolved;\n    const rule = shared.rules.get(RUNTIME_RULE_NAME);\n    const raw = (rule?.options ?? {}) as RuntimeRuleRaw;\n    return {\n        off: rule?.isOff ?? false,\n        turnOffRuleUntilEpoch:\n            typeof raw.turnOffRuleUntilEpoch === 'number' ? raw.turnOffRuleUntilEpoch : undefined,\n        // turnOffRuleWhileOnBranch is required-but-NULLABLE in the config (\"null\" = always on), so a\n        // non-string (null) collapses to undefined, which shouldSkipRule treats as \"no branch scoping\".\n        turnOffRuleWhileOnBranch:\n            typeof raw.turnOffRuleWhileOnBranch === 'string' ? raw.turnOffRuleWhileOnBranch : undefined,\n        allowedCycles: Array.isArray(raw.allowedCycles) ? raw.allowedCycles.filter(isUsableCycle) : [],\n        // Opt-OUT: the external systems are the ones that page you at 3am, so they are drawn unless\n        // a repo explicitly says its external surface is too noisy to be useful.\n        showExternalNodes: raw.showExternalNodes !== false,\n        // Opt-IN: there is no safe guess for where a repo keeps its vendor wrappers, and guessing\n        // wrong would classify ordinary libraries as systems outside the repo.\n        externalApiPaths: Array.isArray(raw.externalApiPaths)\n            ? raw.externalApiPaths.filter((entry: string) => typeof entry === 'string' && entry.length > 0)\n            : [],\n    };\n}\n\n/**\n * Whole-rule report-only window honoring BOTH escape hatches: skip while on the\n * named branch (turnOffRuleWhileOnBranch) or until the epoch passes\n * (turnOffRuleUntilEpoch). When `.skip` is true, problems are reported but\n * the build is not failed.\n */\nexport function runtimeReportOnly(config: RuntimeRuleConfig): SkipRuleResult {\n    return shouldSkipRule(config.turnOffRuleUntilEpoch, config.turnOffRuleWhileOnBranch);\n}\n\n/**\n * Whole-rule grace window: while now < epoch, failures are reported but do not\n * fail the build (warn). Mirrors the other webpieces rules.\n */\nexport function isGraceActive(epoch: number | undefined): boolean {\n    if (epoch === undefined) return false;\n    return Date.now() / 1000 < epoch;\n}\n\n/** Format the epoch as an ISO date for log messages. */\nexport function epochDate(epoch: number): string {\n    return new Date(epoch * 1000).toISOString().split('T')[0];\n}\n"]}

package/src/plugin.js

@@ -446,7 +446,7 @@ function createHelpTarget() {
  * Uses the `validate-no-file-import-cycles` executor (which bundles madge as a
  * dependency) rather than a runtime `npx madge` fetch. The executor reads
  * webpieces.config.json so the gate can be turned on/off (`mode`) and
- * time-boxed (`ignoreModifiedUntilEpoch`) like every other webpieces rule.
+ * time-boxed (`turnOffRuleUntilEpoch`) like every other webpieces rule.
  *
  * Note `projectRoot` is intentionally unused now — the executor derives the
  * project root from the Nx context — but the param is kept for call-site

package/src/plugin.js.map

@@ -1 +1 @@
-{"version":3,"file":"plugin.js","sourceRoot":"","sources":["../../../../../packages/tooling/nx-webpieces-rules/src/plugin.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;;GAgBG;;;AAwMH,sDASC;AAmVD,wCAkBC;AApjBD,+BAAqC;AACrC,2BAAgC;AAQhC,uDAG2B;AAC3B,6DAAyD;AACzD,yDAAiE;AAoEjE,MAAM,eAAe,GAAwC;IACzD,YAAY,EAAE;QACV,OAAO,EAAE,IAAI;QACb,UAAU,EAAE,gCAAgC;QAC5C,eAAe,EAAE,EAAE;KACtB;IACD,SAAS,EAAE;QACP,OAAO,EAAE,IAAI;QACb,YAAY,EAAE,OAAO;QACrB,SAAS,EAAE,gCAAgC;QAC3C,WAAW,EAAE;YACT,QAAQ,EAAE,IAAI;YACd,qBAAqB,EAAE,IAAI;YAC3B,mBAAmB,EAAE,IAAI;YACzB,kBAAkB,EAAE,IAAI;YACxB,uBAAuB,EAAE,IAAI;YAC7B,qBAAqB,EAAE,IAAI;YAC3B,sBAAsB,EAAE,IAAI;YAC5B,eAAe,EAAE,IAAI;YACrB,gBAAgB,EAAE,IAAI;YACtB,mBAAmB,EAAE,IAAI;YACzB,oBAAoB,EAAE,IAAI;YAC1B,iBAAiB,EAAE,IAAI;YACvB,OAAO,EAAE,IAAI;YACb,kBAAkB,EAAE,EAAE;YACtB,6BAA6B,EAAE,EAAE;YACjC,qBAAqB,EAAE,GAAG;YAC1B,cAAc,EAAE,QAAQ;SAC3B;QACD,QAAQ,EAAE;YACN,QAAQ,EAAE,IAAI;YACd,SAAS,EAAE,IAAI;YACf,gBAAgB,EAAE,IAAI;SACzB;KACJ;CACJ,CAAC;AAEF,SAAS,gBAAgB,CACrB,OAA8C;IAE9C,MAAM,YAAY,GAAG;QACjB,GAAG,eAAe,CAAC,YAAY;QAC/B,GAAG,OAAO,EAAE,YAAY;KAC3B,CAAC;IAEF,MAAM,SAAS,GAAG;QACd,GAAG,eAAe,CAAC,SAAS;QAC5B,GAAG,OAAO,EAAE,SAAS;QACrB,WAAW,EAAE;YACT,GAAG,eAAe,CAAC,SAAS,CAAC,WAAW;YACxC,GAAG,OAAO,EAAE,SAAS,EAAE,WAAW;SACrC;QACD,QAAQ,EAAE;YACN,GAAG,eAAe,CAAC,SAAS,CAAC,QAAQ;YACrC,GAAG,OAAO,EAAE,SAAS,EAAE,QAAQ;SAClC;KACJ,CAAC;IAEF,OAAO;QACH,YAAY;QACZ,SAAS;KAC2B,CAAC;AAC7C,CAAC;AAED,KAAK,UAAU,mBAAmB,CAC9B,YAA+B,EAC/B,OAA8C,EAC9C,OAA6B;IAE7B,MAAM,IAAI,GAAG,gBAAgB,CAAC,OAAO,CAAC,CAAC;IACvC,MAAM,OAAO,GAAwB,EAAE,CAAC;IAExC,2CAA2C;IAC3C,sBAAsB,CAAC,OAAO,EAAE,YAAY,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC;IAE7D,wDAAwD;IACxD,oBAAoB,CAAC,OAAO,EAAE,YAAY,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC;IAE3D,OAAO,OAAO,CAAC;AACnB,CAAC;AAED,SAAS,sBAAsB,CAC3B,OAA4B,EAC5B,YAA+B,EAC/B,IAAyC,EACzC,OAA6B;IAE7B,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO;QAAE,OAAO;IAEpC,MAAM,WAAW,GAAG,IAAA,WAAI,EAAC,OAAO,CAAC,aAAa,EAAE,cAAc,CAAC,CAAC;IAChE,IAAI,CAAC,IAAA,eAAU,EAAC,WAAW,CAAC;QAAE,OAAO;IAErC,MAAM,gBAAgB,GAAG,mCAAmC,CAAC,IAAI,CAAC,CAAC;IACnE,IAAI,MAAM,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO;IAEvD,MAAM,MAAM,GAAsB;QAC9B,QAAQ,EAAE;YACN,YAAY,EAAE;gBACV,IAAI,EAAE,cAAc;gBACpB,IAAI,EAAE,cAAc;gBACpB,OAAO,EAAE,gBAAgB;aAC5B;SACJ;KACJ,CAAC;IAEF,MAAM,gBAAgB,GAAG,YAAY,CAAC,CAAC,CAAC,CAAC;IACzC,IAAI,gBAAgB,EAAE,CAAC;QACnB,OAAO,CAAC,IAAI,CAAC,CAAC,gBAAgB,EAAE,MAAM,CAAU,CAAC,CAAC;IACtD,CAAC;AACL,CAAC;AAGD,6FAA6F;AAC7F,oGAAoG;AACpG,qGAAqG;AACrG,8FAA8F;AAC9F,SAAgB,qBAAqB,CAAC,aAAqB,EAAE,WAAmB;IAC5E,IAAI,GAAG,GAAG,WAAW,CAAC;IACtB,OAAO,GAAG,IAAI,GAAG,KAAK,GAAG,IAAI,GAAG,KAAK,GAAG,EAAE,CAAC;QACvC,IAAI,IAAA,eAAU,EAAC,IAAA,WAAI,EAAC,aAAa,EAAE,GAAG,EAAE,MAAM,CAAC,CAAC;YAAE,OAAO,IAAI,CAAC;QAC9D,MAAM,MAAM,GAAG,IAAA,cAAO,EAAC,GAAG,CAAC,CAAC;QAC5B,IAAI,MAAM,KAAK,GAAG;YAAE,MAAM;QAC1B,GAAG,GAAG,MAAM,CAAC;IACjB,CAAC;IACD,OAAO,KAAK,CAAC;AACjB,CAAC;AAED,SAAS,oBAAoB,CACzB,OAA4B,EAC5B,YAA+B,EAC/B,IAAyC,EACzC,OAA6B;IAE7B,0EAA0E;IAC1E,MAAM,cAAc,GAAG,IAAI,GAAG,EAAU,CAAC;IAEzC,KAAK,MAAM,WAAW,IAAI,YAAY,EAAE,CAAC;QACrC,MAAM,aAAa,GAAG,WAAW,CAAC,QAAQ,CAAC,cAAc,CAAC,CAAC;QAC3D,MAAM,aAAa,GAAG,WAAW,CAAC,QAAQ,CAAC,cAAc,CAAC,CAAC;QAE3D,IAAI,CAAC,aAAa,IAAI,CAAC,aAAa;YAAE,SAAS;QAE/C,MAAM,WAAW,GAAG,IAAA,cAAO,EAAC,WAAW,CAAC,CAAC;QAEzC,gDAAgD;QAChD,IAAI,WAAW,KAAK,GAAG;YAAE,SAAS;QAElC,yFAAyF;QACzF,kFAAkF;QAClF,IAAI,qBAAqB,CAAC,OAAO,CAAC,aAAa,EAAE,WAAW,CAAC;YAAE,SAAS;QAExE,oDAAoD;QACpD,IAAI,cAAc,CAAC,GAAG,CAAC,WAAW,CAAC;YAAE,SAAS;QAE9C,uEAAuE;QACvE,0DAA0D;QAC1D,IAAI,aAAa,EAAE,CAAC;YAChB,MAAM,eAAe,GAAG,IAAA,WAAI,EAAC,OAAO,CAAC,aAAa,EAAE,WAAW,EAAE,cAAc,CAAC,CAAC;YACjF,IAAI,IAAA,eAAU,EAAC,eAAe,CAAC;gBAAE,SAAS;QAC9C,CAAC;QAED,cAAc,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;QAEhC,MAAM,mBAAmB,GACrB,IAAI,CAAC,SAAS,CAAC,OAAO,KAAK,IAAI;YAC/B,IAAA,eAAU,EAAC,IAAA,WAAI,EAAC,OAAO,CAAC,aAAa,EAAE,cAAc,CAAC,CAAC,CAAC;QAC5D,MAAM,OAAO,GAAG,sBAAsB,CAClC,aAAa,EACb,WAAW,EACX,IAAI,EACJ,mBAAmB,CACtB,CAAC;QAEF,IAAI,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,MAAM,KAAK,CAAC;YAAE,SAAS;QAEhD,MAAM,MAAM,GAAsB;YAC9B,QAAQ,EAAE;gBACN,CAAC,WAAW,CAAC,EAAE;oBACX,OAAO;iBACV;aACJ;SACJ,CAAC;QAEF,OAAO,CAAC,IAAI,CAAC,CAAC,WAAW,EAAE,MAAM,CAAU,CAAC,CAAC;IACjD,CAAC;AACL,CAAC;AAED;;;GAGG;AACH,SAAS,sBAAsB,CAC3B,aAAsB,EACtB,WAAmB,EACnB,IAAyC,EACzC,mBAA4B;IAE5B,MAAM,OAAO,GAAwC,EAAE,CAAC;IAExD,qFAAqF;IACrF,yFAAyF;IACzF,qBAAqB;IACrB,MAAM,iBAAiB,GAAa,EAAE,CAAC;IAEvC,0DAA0D;IAC1D,IAAI,aAAa,IAAI,IAAI,CAAC,YAAY,CAAC,OAAO,EAAE,CAAC;QAC7C,IAAI,CAAC,UAAU,CAAC,WAAW,EAAE,IAAI,CAAC,YAAY,CAAC,eAAgB,CAAC,EAAE,CAAC;YAC/D,MAAM,UAAU,GAAG,IAAI,CAAC,YAAY,CAAC,UAAW,CAAC;YACjD,OAAO,CAAC,UAAU,CAAC,GAAG,wBAAwB,CAAC,WAAW,EAAE,UAAU,CAAC,CAAC;YACxE,iBAAiB,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QACvC,CAAC;IACL,CAAC;IAED,0FAA0F;IAC1F,EAAE;IACF,sGAAsG;IACtG,sGAAsG;IACtG,iGAAiG;IACjG,+FAA+F;IAC/F,IAAI,aAAa,IAAI,IAAI,CAAC,SAAS,CAAC,WAAY,CAAC,OAAO,EAAE,CAAC;QACvD,OAAO,CAAC,mBAAmB,CAAC,GAAG,IAAA,8CAA2B,GAAE,CAAC;QAC7D,iBAAiB,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAC;IAChD,CAAC;IAED,oFAAoF;IACpF,+EAA+E;IAC/E,+EAA+E;IAC/E,OAAO,CAAC,IAAI,CAAC,GAAG,cAAc,CAAC,iBAAiB,EAAE,mBAAmB,CAAC,CAAC;IAEvE,OAAO,OAAO,CAAC;AACnB,CAAC;AAED;;;GAGG;AACU,QAAA,aAAa,GAA6C;IACnE,uDAAuD;IACvD,2BAA2B;IAE3B,qBAAqB;IACrB,mBAAmB;CACtB,CAAC;AAEF;;GAEG;AACH,SAAS,0BAA0B,CAC/B,WAA4E;IAE5E,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,IAAI,WAAY,CAAC,QAAQ;QAAE,OAAO,CAAC,IAAI,CAAC,iCAAiC,CAAC,CAAC;IAC3E,IAAI,WAAY,CAAC,qBAAqB;QAAE,OAAO,CAAC,IAAI,CAAC,iCAAiC,CAAC,CAAC;IACxF,IAAI,WAAY,CAAC,mBAAmB;QAAE,OAAO,CAAC,IAAI,CAAC,sBAAsB,CAAC,CAAC;IAC3E,2DAA2D;IAC3D,IACI,WAAY,CAAC,kBAAkB;QAC/B,WAAY,CAAC,uBAAuB;QACpC,WAAY,CAAC,qBAAqB,EACpC,CAAC;QACC,OAAO,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;IAClC,CAAC;IACD,IAAI,WAAY,CAAC,sBAAsB;QAAE,OAAO,CAAC,IAAI,CAAC,0BAA0B,CAAC,CAAC;IAClF,IAAI,WAAY,CAAC,eAAe;QAAE,OAAO,CAAC,IAAI,CAAC,oBAAoB,CAAC,CAAC;IACrE,IAAI,WAAY,CAAC,gBAAgB;QAAE,OAAO,CAAC,IAAI,CAAC,oBAAoB,CAAC,CAAC;IACtE,IAAI,WAAY,CAAC,mBAAmB;QAAE,OAAO,CAAC,IAAI,CAAC,+BAA+B,CAAC,CAAC;IACpF,IAAI,WAAY,CAAC,oBAAoB;QAAE,OAAO,CAAC,IAAI,CAAC,wBAAwB,CAAC,CAAC;IAC9E,IAAI,WAAY,CAAC,iBAAiB;QAAE,OAAO,CAAC,IAAI,CAAC,sBAAsB,CAAC,CAAC;IACzE,OAAO,OAAO,CAAC;AACnB,CAAC;AAED;;;GAGG;AACH,SAAS,mCAAmC,CACxC,IAAyC;IAEzC,MAAM,OAAO,GAAwC,EAAE,CAAC;IACxD,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,CAAC,SAAU,CAAC;IAC5C,MAAM,WAAW,GAAG,IAAI,CAAC,SAAS,CAAC,WAAY,CAAC;IAChD,8EAA8E;IAC9E,MAAM,aAAa,GAAG,IAAI,sCAAiB,EAAE,CAAC;IAE9C,qCAAqC;IACrC,OAAO,CAAC,MAAM,CAAC,GAAG,gBAAgB,EAAE,CAAC;IAErC,IAAI,IAAI,CAAC,SAAS,CAAC,QAAS,CAAC,QAAQ,EAAE,CAAC;QACpC,OAAO,CAAC,UAAU,CAAC,GAAG,oBAAoB,CAAC,SAAS,CAAC,CAAC;IAC1D,CAAC;IACD,IAAI,IAAI,CAAC,SAAS,CAAC,QAAS,CAAC,SAAS,EAAE,CAAC;QACrC,OAAO,CAAC,WAAW,CAAC,GAAG,kCAAkC,CAAC,SAAS,CAAC,CAAC;IACzE,CAAC;IACD,IAAI,IAAI,CAAC,SAAS,CAAC,QAAS,CAAC,gBAAgB,EAAE,CAAC;QAC5C,OAAO,CAAC,mBAAmB,CAAC,GAAG,IAAA,8CAA4B,GAAE,CAAC;IAClE,CAAC;IACD,IAAI,WAAW,CAAC,QAAQ,EAAE,CAAC;QACvB,OAAO,CAAC,iCAAiC,CAAC,GAAG,aAAa,CAAC,QAAQ,EAAE,CAAC;IAC1E,CAAC;IACD,IAAI,WAAW,CAAC,qBAAqB,EAAE,CAAC;QACpC,OAAO,CAAC,iCAAiC,CAAC,GAAG,6BAA6B,CAAC,SAAS,CAAC,CAAC;IAC1F,CAAC;IACD,IAAI,WAAW,CAAC,mBAAmB,EAAE,CAAC;QAClC,OAAO,CAAC,sBAAsB,CAAC,GAAG,aAAa,CAAC,WAAW,EAAE,CAAC;IAClE,CAAC;IACD,uGAAuG;IACvG,sGAAsG;IACtG,OAAO,CAAC,yBAAyB,CAAC,GAAG,aAAa,CAAC,aAAa,EAAE,CAAC;IACnE,2DAA2D;IAC3D,gEAAgE;IAChE,yFAAyF;IACzF,IACI,WAAW,CAAC,kBAAkB;QAC9B,WAAW,CAAC,uBAAuB;QACnC,WAAW,CAAC,qBAAqB,EACnC,CAAC;QACC,OAAO,CAAC,eAAe,CAAC,GAAG,aAAa,CAAC,IAAI,EAAE,CAAC;IACpD,CAAC;IACD,IAAI,WAAW,CAAC,sBAAsB,EAAE,CAAC;QACrC,OAAO,CAAC,0BAA0B,CAAC,GAAG,aAAa,CAAC,cAAc,EAAE,CAAC;IACzE,CAAC;IACD,IAAI,WAAW,CAAC,eAAe,EAAE,CAAC;QAC9B,OAAO,CAAC,oBAAoB,CAAC,GAAG,aAAa,CAAC,OAAO,EAAE,CAAC;IAC5D,CAAC;IACD,IAAI,WAAW,CAAC,gBAAgB,EAAE,CAAC;QAC/B,OAAO,CAAC,oBAAoB,CAAC,GAAG,aAAa,CAAC,QAAQ,EAAE,CAAC;IAC7D,CAAC;IACD,IAAI,WAAW,CAAC,mBAAmB,EAAE,CAAC;QAClC,OAAO,CAAC,+BAA+B,CAAC,GAAG,IAAA,yDAAuC,GAAE,CAAC;IACzF,CAAC;IACD,IAAI,WAAW,CAAC,oBAAoB,EAAE,CAAC;QACnC,OAAO,CAAC,wBAAwB,CAAC,GAAG,aAAa,CAAC,YAAY,EAAE,CAAC;IACrE,CAAC;IACD,IAAI,WAAW,CAAC,iBAAiB,EAAE,CAAC;QAChC,OAAO,CAAC,sBAAsB,CAAC,GAAG,aAAa,CAAC,SAAS,EAAE,CAAC;IAChE,CAAC;IAED,iEAAiE;IACjE,MAAM,iBAAiB,GAAG,0BAA0B,CAAC,WAAW,CAAC,CAAC;IAClE,IAAI,iBAAiB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC/B,OAAO,CAAC,mBAAmB,CAAC,GAAG,4BAA4B,CAAC,iBAAiB,CAAC,CAAC;IACnF,CAAC;IAED,OAAO,OAAO,CAAC;AACnB,CAAC;AAED,SAAS,oBAAoB,CAAC,SAAiB;IAC3C,OAAO;QACH,QAAQ,EAAE,wCAAwC;QAClD,KAAK,EAAE,KAAK;QACZ,OAAO,EAAE;YACL,gDAAgD;YAChD,gDAAgD;YAChD,wDAAwD;SAC3D;QACD,OAAO,EAAE,EAAE,SAAS,EAAE;QACtB,QAAQ,EAAE;YACN,YAAY,EAAE,CAAC,IAAI,CAAC;YACpB,WAAW,EACP,+GAA+G;SACtH;KACJ,CAAC;AACN,CAAC;AAED,SAAS,kCAAkC,CAAC,SAAiB;IACzD,OAAO;QACH,QAAQ,EAAE,yCAAyC;QACnD,SAAS,EAAE,CAAC,UAAU,CAAC;QACvB,OAAO,EAAE,EAAE,SAAS,EAAE;QACtB,QAAQ,EAAE;YACN,YAAY,EAAE,CAAC,IAAI,CAAC;YACpB,WAAW,EAAE,2DAA2D;SAC3E;KACJ,CAAC;AACN,CAAC;AAED,SAAS,6BAA6B,CAAC,SAAiB;IACpD,OAAO;QACH,QAAQ,EAAE,+DAA+D;QACzE,KAAK,EAAE,KAAK;QACZ,MAAM,EAAE,CAAC,SAAS,EAAE,gDAAgD,CAAC;QACrE,OAAO,EAAE,EAAE,SAAS,EAAE;QACtB,QAAQ,EAAE;YACN,YAAY,EAAE,CAAC,IAAI,CAAC;YACpB,WAAW,EAAE,2DAA2D;SAC3E;KACJ,CAAC;AACN,CAAC;AAED,SAAS,8BAA8B,CACnC,QAAgB,EAChB,IAAiC;IAEjC,OAAO;QACH,QAAQ,EAAE,oDAAoD;QAC9D,KAAK,EAAE,KAAK,EAAE,qCAAqC;QACnD,MAAM,EAAE,CAAC,SAAS,CAAC;QACnB,OAAO,EAAE,EAAE,GAAG,EAAE,QAAQ,EAAE,IAAI,EAAE;QAChC,QAAQ,EAAE;YACN,YAAY,EAAE,CAAC,IAAI,CAAC;YACpB,WAAW,EAAE,sCAAsC,QAAQ,qCAAqC;SACnG;KACJ,CAAC;AACN,CAAC;AAED,SAAS,mCAAmC,CACxC,QAAgB,EAChB,IAAiC;IAEjC,OAAO;QACH,QAAQ,EAAE,yDAAyD;QACnE,KAAK,EAAE,KAAK,EAAE,qCAAqC;QACnD,MAAM,EAAE,CAAC,SAAS,CAAC;QACnB,OAAO,EAAE,EAAE,GAAG,EAAE,QAAQ,EAAE,IAAI,EAAE;QAChC,QAAQ,EAAE;YACN,YAAY,EAAE,CAAC,IAAI,CAAC;YACpB,WAAW,EAAE,mDAAmD,QAAQ,qCAAqC;SAChH;KACJ,CAAC;AACN,CAAC;AAED,SAAS,iCAAiC,CACtC,QAAgB,EAChB,IAAiC;IAEjC,OAAO;QACH,QAAQ,EAAE,uDAAuD;QACjE,KAAK,EAAE,KAAK,EAAE,qCAAqC;QACnD,MAAM,EAAE,CAAC,SAAS,CAAC;QACnB,OAAO,EAAE,EAAE,GAAG,EAAE,QAAQ,EAAE,IAAI,EAAE;QAChC,QAAQ,EAAE;YACN,YAAY,EAAE,CAAC,IAAI,CAAC;YACpB,WAAW,EAAE,yCAAyC,QAAQ,yCAAyC;SAC1G;KACJ,CAAC;AACN,CAAC;AAED,SAAS,4BAA4B,CAAC,iBAA2B;IAC7D,OAAO;QACH,QAAQ,EAAE,SAAS;QACnB,KAAK,EAAE,IAAI;QACX,SAAS,EAAE,iBAAiB;QAC5B,QAAQ,EAAE;YACN,YAAY,EAAE,CAAC,IAAI,CAAC;YACpB,WAAW,EAAE,gFAAgF;SAChG;KACJ,CAAC;AACN,CAAC;AAED;;;;;;;;;;;;;GAaG;AACH,4QAA4Q;AAC5Q,SAAgB,cAAc,CAC1B,oBAA8B,EAC9B,mBAA4B;IAE5B,MAAM,SAAS,GAAa,CAAC,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,GAAG,oBAAoB,CAAC,CAAC;IAC/E,IAAI,mBAAmB,EAAE,CAAC;QACtB,SAAS,CAAC,IAAI,CAAC,gCAAgC,CAAC,CAAC;IACrD,CAAC;IACD,OAAO;QACH,QAAQ,EAAE,SAAS;QACnB,KAAK,EAAE,IAAI;QACX,SAAS;QACT,QAAQ,EAAE;YACN,YAAY,EAAE,CAAC,IAAI,CAAC;YACpB,WAAW,EACP,sFAAsF;SAC7F;KACJ,CAAC;AACN,CAAC;AAED,SAAS,gBAAgB;IACrB,OAAO;QACH,QAAQ,EAAE,oCAAoC;QAC9C,KAAK,EAAE,KAAK,EAAE,wCAAwC;QACtD,QAAQ,EAAE;YACN,YAAY,EAAE,CAAC,IAAI,CAAC;YACpB,WAAW,EAAE,qEAAqE;SACrF;KACJ,CAAC;AACN,CAAC;AAED;;;;;;;;;;;GAWG;AACH,SAAS,wBAAwB,CAAC,YAAoB,EAAE,WAAmB;IACvE,OAAO;QACH,QAAQ,EAAE,8DAA8D;QACxE,KAAK,EAAE,IAAI;QACX,MAAM,EAAE,CAAC,SAAS,CAAC;QACnB,OAAO,EAAE,EAAc;QACvB,QAAQ,EAAE;YACN,YAAY,EAAE,CAAC,OAAO,CAAC;YACvB,WAAW,EAAE,yDAAyD;SACzE;KACJ,CAAC;AACN,CAAC;AAED;;GAEG;AACH,SAAS,UAAU,CAAC,WAAmB,EAAE,eAAyB;IAC9D,IAAI,eAAe,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC/B,OAAO,KAAK,CAAC;IACjB,CAAC;IAED,oEAAoE;IACpE,OAAO,eAAe,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE;QACpC,gCAAgC;QAChC,MAAM,YAAY,GAAG,OAAO;aACvB,OAAO,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC,sBAAsB;aAC7C,OAAO,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC,CAAC,gCAAgC;QAE9D,MAAM,KAAK,GAAG,IAAI,MAAM,CAAC,IAAI,YAAY,GAAG,CAAC,CAAC;QAC9C,OAAO,KAAK,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;IACnC,CAAC,CAAC,CAAC;AACP,CAAC;AAED;;GAEG;AACH,kBAAe,EAAE,aAAa,EAAb,qBAAa,EAAE,CAAC","sourcesContent":["/**\n * Unified Nx Inference Plugin for @webpieces/nx-webpieces-rules\n *\n * This plugin automatically creates targets for:\n * 1. Workspace-level architecture validation (generate, visualize, validate-*)\n * 2. Per-project circular dependency checking\n *\n * Install with: nx add @webpieces/nx-webpieces-rules\n *\n * Usage:\n * Add to nx.json plugins array:\n * {\n *   \"plugins\": [\"@webpieces/nx-webpieces-rules\"]\n * }\n *\n * Then all targets appear automatically without manual project.json configuration.\n */\n\nimport { dirname, join } from 'path';\nimport { existsSync } from 'fs';\nimport type {\n    CreateNodesV2,\n    CreateNodesContextV2,\n    CreateNodesResultV2,\n    CreateNodesResult,\n    TargetConfiguration,\n} from '@nx/devkit';\nimport {\n    createVisualizeRuntimeTarget,\n    createValidateRuntimeArchitectureTarget,\n} from './runtime-targets';\nimport { ValidationTargets } from './validation-targets';\nimport { createDiGraphGenerateTarget } from './di-graph-targets';\n\n/**\n * Circular dependency checking options\n */\nexport interface CircularDepsOptions {\n    enabled?: boolean;\n    targetName?: string;\n    excludePatterns?: string[];\n}\n\n/**\n * Validation options for architecture checks\n */\nexport interface ValidationOptions {\n    noCycles?: boolean;\n    architectureUnchanged?: boolean;\n    validatePackageJson?: boolean;\n    validateNewMethods?: boolean;\n    validateModifiedMethods?: boolean;\n    validateModifiedFiles?: boolean;\n    validateVersionsLocked?: boolean;\n    validateTsInSrc?: boolean;\n    validateNxWiring?: boolean;\n    runtimeArchitecture?: boolean;\n    validateApiRelations?: boolean;\n    validateApiLibTag?: boolean;\n    diGraph?: boolean;\n    newMethodsMaxLines?: number;\n    modifiedAndNewMethodsMaxLines?: number;\n    modifiedFilesMaxLines?: number;\n    /**\n     * Validation mode for method/file size limits:\n     * - STRICT: All limits enforced, disable comments ignored\n     * - NORMAL: Limits enforced, disable comments with dates work\n     * - OFF: Skip size validations entirely (for fast iteration)\n     */\n    validationMode?: 'STRICT' | 'NORMAL' | 'OFF';\n}\n\n/**\n * Feature flags for workspace targets\n */\nexport interface FeatureOptions {\n    generate?: boolean;\n    visualize?: boolean;\n    visualizeRuntime?: boolean;\n}\n\n/**\n * Workspace-level configuration options\n */\nexport interface WorkspaceOptions {\n    enabled?: boolean;\n    targetPrefix?: string;\n    graphPath?: string;\n    validations?: ValidationOptions;\n    features?: FeatureOptions;\n}\n\n/**\n * Configuration for @webpieces/nx-webpieces-rules Nx plugin\n */\nexport interface ArchitecturePluginOptions {\n    circularDeps?: CircularDepsOptions;\n    workspace?: WorkspaceOptions;\n}\n\nconst DEFAULT_OPTIONS: Required<ArchitecturePluginOptions> = {\n    circularDeps: {\n        enabled: true,\n        targetName: 'validate-no-file-import-cycles',\n        excludePatterns: [],\n    },\n    workspace: {\n        enabled: true,\n        targetPrefix: 'arch:',\n        graphPath: 'architecture/dependencies.json',\n        validations: {\n            noCycles: true,\n            architectureUnchanged: true,\n            validatePackageJson: true,\n            validateNewMethods: true,\n            validateModifiedMethods: true,\n            validateModifiedFiles: true,\n            validateVersionsLocked: true,\n            validateTsInSrc: true,\n            validateNxWiring: true,\n            runtimeArchitecture: true,\n            validateApiRelations: true,\n            validateApiLibTag: true,\n            diGraph: true,\n            newMethodsMaxLines: 30,\n            modifiedAndNewMethodsMaxLines: 80,\n            modifiedFilesMaxLines: 900,\n            validationMode: 'NORMAL',\n        },\n        features: {\n            generate: true,\n            visualize: true,\n            visualizeRuntime: true,\n        },\n    },\n};\n\nfunction normalizeOptions(\n    options: ArchitecturePluginOptions | undefined,\n): Required<ArchitecturePluginOptions> {\n    const circularDeps = {\n        ...DEFAULT_OPTIONS.circularDeps,\n        ...options?.circularDeps,\n    };\n\n    const workspace = {\n        ...DEFAULT_OPTIONS.workspace,\n        ...options?.workspace,\n        validations: {\n            ...DEFAULT_OPTIONS.workspace.validations,\n            ...options?.workspace?.validations,\n        },\n        features: {\n            ...DEFAULT_OPTIONS.workspace.features,\n            ...options?.workspace?.features,\n        },\n    };\n\n    return {\n        circularDeps,\n        workspace,\n    } as Required<ArchitecturePluginOptions>;\n}\n\nasync function createNodesFunction(\n    projectFiles: readonly string[],\n    options: ArchitecturePluginOptions | undefined,\n    context: CreateNodesContextV2,\n): Promise<CreateNodesResultV2> {\n    const opts = normalizeOptions(options);\n    const results: CreateNodesResultV2 = [];\n\n    // Add workspace-level architecture targets\n    addArchitectureProject(results, projectFiles, opts, context);\n\n    // Add per-project targets (circular-deps, ci, di-graph)\n    addPerProjectTargets(results, projectFiles, opts, context);\n\n    return results;\n}\n\nfunction addArchitectureProject(\n    results: CreateNodesResultV2,\n    projectFiles: readonly string[],\n    opts: Required<ArchitecturePluginOptions>,\n    context: CreateNodesContextV2,\n): void {\n    if (!opts.workspace.enabled) return;\n\n    const archDirPath = join(context.workspaceRoot, 'architecture');\n    if (!existsSync(archDirPath)) return;\n\n    const workspaceTargets = createWorkspaceTargetsWithoutPrefix(opts);\n    if (Object.keys(workspaceTargets).length === 0) return;\n\n    const result: CreateNodesResult = {\n        projects: {\n            architecture: {\n                name: 'architecture',\n                root: 'architecture',\n                targets: workspaceTargets,\n            },\n        },\n    };\n\n    const firstProjectFile = projectFiles[0];\n    if (firstProjectFile) {\n        results.push([firstProjectFile, result] as const);\n    }\n}\n\n\n// A project sits inside a NESTED git repo (e.g. a clone under repositories/) when any of its\n// ancestor dirs — up to but NOT including the workspace root — contains a `.git`. Such projects are\n// separate repos, not part of THIS workspace's graph, so they must not get inferred targets (that is\n// what drags foreign clones into `nx affected`). Same repo-boundary signal the AI guards use.\nexport function isInsideNestedGitRepo(workspaceRoot: string, projectRoot: string): boolean {\n    let dir = projectRoot;\n    while (dir && dir !== '.' && dir !== '/') {\n        if (existsSync(join(workspaceRoot, dir, '.git'))) return true;\n        const parent = dirname(dir);\n        if (parent === dir) break;\n        dir = parent;\n    }\n    return false;\n}\n\nfunction addPerProjectTargets(\n    results: CreateNodesResultV2,\n    projectFiles: readonly string[],\n    opts: Required<ArchitecturePluginOptions>,\n    context: CreateNodesContextV2,\n): void {\n    // Track processed project roots to avoid duplicates when both files exist\n    const processedRoots = new Set<string>();\n\n    for (const projectFile of projectFiles) {\n        const isProjectJson = projectFile.endsWith('project.json');\n        const isPackageJson = projectFile.endsWith('package.json');\n\n        if (!isProjectJson && !isPackageJson) continue;\n\n        const projectRoot = dirname(projectFile);\n\n        // Skip root (workspace manifest, not a project)\n        if (projectRoot === '.') continue;\n\n        // Skip projects inside a nested git repo (vendored clones under repositories/): they are\n        // separate repos and must not be swept into this workspace's `nx affected` graph.\n        if (isInsideNestedGitRepo(context.workspaceRoot, projectRoot)) continue;\n\n        // Skip if we've already processed this project root\n        if (processedRoots.has(projectRoot)) continue;\n\n        // For package.json, skip if project.json also exists in same directory\n        // (prefer project.json - it will be processed separately)\n        if (isPackageJson) {\n            const projectJsonPath = join(context.workspaceRoot, projectRoot, 'project.json');\n            if (existsSync(projectJsonPath)) continue;\n        }\n\n        processedRoots.add(projectRoot);\n\n        const architectureEnabled =\n            opts.workspace.enabled === true &&\n            existsSync(join(context.workspaceRoot, 'architecture'));\n        const targets = buildPerProjectTargets(\n            isProjectJson,\n            projectRoot,\n            opts,\n            architectureEnabled,\n        );\n\n        if (Object.keys(targets).length === 0) continue;\n\n        const result: CreateNodesResult = {\n            projects: {\n                [projectRoot]: {\n                    targets,\n                },\n            },\n        };\n\n        results.push([projectFile, result] as const);\n    }\n}\n\n/**\n * Build the target map for one project. Most targets are project.json-only\n * (package.json-only projects may not have TypeScript source); `ci` goes on all.\n */\nfunction buildPerProjectTargets(\n    isProjectJson: boolean,\n    projectRoot: string,\n    opts: Required<ArchitecturePluginOptions>,\n    architectureEnabled: boolean,\n): Record<string, TargetConfiguration> {\n    const targets: Record<string, TargetConfiguration> = {};\n\n    // Per-project validation gates that `ci` must depend on. Collected as they are added\n    // so `ci` references only gates that actually exist on THIS project (a package.json-only\n    // project has none).\n    const validationTargets: string[] = [];\n\n    // Add circular-deps target ONLY for project.json projects\n    if (isProjectJson && opts.circularDeps.enabled) {\n        if (!isExcluded(projectRoot, opts.circularDeps.excludePatterns!)) {\n            const targetName = opts.circularDeps.targetName!;\n            targets[targetName] = createCircularDepsTarget(projectRoot, targetName);\n            validationTargets.push(targetName);\n        }\n    }\n\n    // Per-project DI design DAG: regenerate design.json/design.md/design.html on every build.\n    //\n    // `di-graph-generate` is itself pushed onto validationTargets so `ci` still RUNS it — it used to ride\n    // in only as the `dependsOn` of the deleted `validate-di-graph-unchanged` gate. There is no staleness\n    // gate here any more: \"the regenerated design files are committed\" is now one repo-wide check in\n    // `wp-review-upsert-pr` (see di-graph-targets.ts for why the per-project gate could not work).\n    if (isProjectJson && opts.workspace.validations!.diGraph) {\n        targets['di-graph-generate'] = createDiGraphGenerateTarget();\n        validationTargets.push('di-graph-generate');\n    }\n\n    // Add ci target to ALL projects (both project.json and package.json). ci aggregates\n    // lint + build + test + the validation gates that formerly rode on the compile\n    // executor's targetDefaults, so a bare `build` stays a fast compile-only step.\n    targets['ci'] = createCiTarget(validationTargets, architectureEnabled);\n\n    return targets;\n}\n\n/**\n * Nx V2 Inference Plugin\n * Matches project.json and package.json files to create targets\n */\nexport const createNodesV2: CreateNodesV2<ArchitecturePluginOptions> = [\n    // Pattern to match project.json and package.json files\n    '**/{project,package}.json',\n\n    // Inference function\n    createNodesFunction,\n];\n\n/**\n * Build list of enabled validation target names for validate-complete dependency chain\n */\nfunction buildValidationTargetsList(\n    validations: Required<ArchitecturePluginOptions>['workspace']['validations'],\n): string[] {\n    const targets: string[] = [];\n    if (validations!.noCycles) targets.push('validate-no-architecture-cycles');\n    if (validations!.architectureUnchanged) targets.push('validate-architecture-unchanged');\n    if (validations!.validatePackageJson) targets.push('validate-packagejson');\n    // Use combined validate-code instead of 3 separate targets\n    if (\n        validations!.validateNewMethods ||\n        validations!.validateModifiedMethods ||\n        validations!.validateModifiedFiles\n    ) {\n        targets.push('validate-code');\n    }\n    if (validations!.validateVersionsLocked) targets.push('validate-versions-locked');\n    if (validations!.validateTsInSrc) targets.push('validate-ts-in-src');\n    if (validations!.validateNxWiring) targets.push('validate-nx-wiring');\n    if (validations!.runtimeArchitecture) targets.push('validate-runtime-architecture');\n    if (validations!.validateApiRelations) targets.push('validate-api-relations');\n    if (validations!.validateApiLibTag) targets.push('validate-api-lib-tag');\n    return targets;\n}\n\n/**\n * Create workspace-level architecture validation targets WITHOUT prefix\n * Used for virtual 'architecture' project\n */\nfunction createWorkspaceTargetsWithoutPrefix(\n    opts: Required<ArchitecturePluginOptions>,\n): Record<string, TargetConfiguration> {\n    const targets: Record<string, TargetConfiguration> = {};\n    const graphPath = opts.workspace.graphPath!;\n    const validations = opts.workspace.validations!;\n    // One ValidationTargets instance, injected below to build each target config.\n    const targetFactory = new ValidationTargets();\n\n    // Add help target (always available)\n    targets['help'] = createHelpTarget();\n\n    if (opts.workspace.features!.generate) {\n        targets['generate'] = createGenerateTarget(graphPath);\n    }\n    if (opts.workspace.features!.visualize) {\n        targets['visualize'] = createVisualizeTargetWithoutPrefix(graphPath);\n    }\n    if (opts.workspace.features!.visualizeRuntime) {\n        targets['visualize-runtime'] = createVisualizeRuntimeTarget();\n    }\n    if (validations.noCycles) {\n        targets['validate-no-architecture-cycles'] = targetFactory.noCycles();\n    }\n    if (validations.architectureUnchanged) {\n        targets['validate-architecture-unchanged'] = createValidateUnchangedTarget(graphPath);\n    }\n    if (validations.validatePackageJson) {\n        targets['validate-packagejson'] = targetFactory.packageJson();\n    }\n    // Always available (cheap; success when a repo has no checklists). Kept out of the validate-complete /\n    // ci aggregate so it does not change existing gate behavior — consumers point a required check at it.\n    targets['validate-checklist-docs'] = targetFactory.checklistDocs();\n    // Use combined validate-code instead of 3 separate targets\n    // Options come from webpieces.config.json at the workspace root\n    // (loaded via @webpieces/rules-config; same source of truth as @webpieces/ai-hook-rules)\n    if (\n        validations.validateNewMethods ||\n        validations.validateModifiedMethods ||\n        validations.validateModifiedFiles\n    ) {\n        targets['validate-code'] = targetFactory.code();\n    }\n    if (validations.validateVersionsLocked) {\n        targets['validate-versions-locked'] = targetFactory.versionsLocked();\n    }\n    if (validations.validateTsInSrc) {\n        targets['validate-ts-in-src'] = targetFactory.tsInSrc();\n    }\n    if (validations.validateNxWiring) {\n        targets['validate-nx-wiring'] = targetFactory.nxWiring();\n    }\n    if (validations.runtimeArchitecture) {\n        targets['validate-runtime-architecture'] = createValidateRuntimeArchitectureTarget();\n    }\n    if (validations.validateApiRelations) {\n        targets['validate-api-relations'] = targetFactory.apiRelations();\n    }\n    if (validations.validateApiLibTag) {\n        targets['validate-api-lib-tag'] = targetFactory.apiLibTag();\n    }\n\n    // Add validate-complete target that runs all enabled validations\n    const validationTargets = buildValidationTargetsList(validations);\n    if (validationTargets.length > 0) {\n        targets['validate-complete'] = createValidateCompleteTarget(validationTargets);\n    }\n\n    return targets;\n}\n\nfunction createGenerateTarget(graphPath: string): TargetConfiguration {\n    return {\n        executor: '@webpieces/nx-webpieces-rules:generate',\n        cache: false,\n        outputs: [\n            '{workspaceRoot}/architecture/dependencies.json',\n            '{workspaceRoot}/architecture/dependencies.html',\n            '{workspaceRoot}/architecture/runtime-dependencies.json',\n        ],\n        options: { graphPath },\n        metadata: {\n            technologies: ['nx'],\n            description:\n                'Generate the architecture dependency graph (+ clickable dependencies.html) and the runtime microservice graph',\n        },\n    };\n}\n\nfunction createVisualizeTargetWithoutPrefix(graphPath: string): TargetConfiguration {\n    return {\n        executor: '@webpieces/nx-webpieces-rules:visualize',\n        dependsOn: ['generate'],\n        options: { graphPath },\n        metadata: {\n            technologies: ['nx'],\n            description: 'Generate visual representations of the architecture graph',\n        },\n    };\n}\n\nfunction createValidateUnchangedTarget(graphPath: string): TargetConfiguration {\n    return {\n        executor: '@webpieces/nx-webpieces-rules:validate-architecture-unchanged',\n        cache: false,\n        inputs: ['default', '{workspaceRoot}/architecture/dependencies.json'],\n        options: { graphPath },\n        metadata: {\n            technologies: ['nx'],\n            description: 'Validate the architecture matches the saved blessed graph',\n        },\n    };\n}\n\nfunction createValidateNewMethodsTarget(\n    maxLines: number,\n    mode: 'STRICT' | 'NORMAL' | 'OFF',\n): TargetConfiguration {\n    return {\n        executor: '@webpieces/nx-webpieces-rules:validate-new-methods',\n        cache: false, // Don't cache - depends on git state\n        inputs: ['default'],\n        options: { max: maxLines, mode },\n        metadata: {\n            technologies: ['nx'],\n            description: `Validate new methods do not exceed ${maxLines} lines (only runs in affected mode)`,\n        },\n    };\n}\n\nfunction createValidateModifiedMethodsTarget(\n    maxLines: number,\n    mode: 'STRICT' | 'NORMAL' | 'OFF',\n): TargetConfiguration {\n    return {\n        executor: '@webpieces/nx-webpieces-rules:validate-modified-methods',\n        cache: false, // Don't cache - depends on git state\n        inputs: ['default'],\n        options: { max: maxLines, mode },\n        metadata: {\n            technologies: ['nx'],\n            description: `Validate new and modified methods do not exceed ${maxLines} lines (encourages gradual cleanup)`,\n        },\n    };\n}\n\nfunction createValidateModifiedFilesTarget(\n    maxLines: number,\n    mode: 'STRICT' | 'NORMAL' | 'OFF',\n): TargetConfiguration {\n    return {\n        executor: '@webpieces/nx-webpieces-rules:validate-modified-files',\n        cache: false, // Don't cache - depends on git state\n        inputs: ['default'],\n        options: { max: maxLines, mode },\n        metadata: {\n            technologies: ['nx'],\n            description: `Validate modified files do not exceed ${maxLines} lines (encourages keeping files small)`,\n        },\n    };\n}\n\nfunction createValidateCompleteTarget(validationTargets: string[]): TargetConfiguration {\n    return {\n        executor: 'nx:noop',\n        cache: true,\n        dependsOn: validationTargets,\n        metadata: {\n            technologies: ['nx'],\n            description: 'Run all architecture validations (cycles, unchanged, package.json, code rules)',\n        },\n    };\n}\n\n/**\n * Create per-project ci target - Gradle-style composite target\n * Composite CI target: runs lint, build, test, and every validation gate.\n *\n * Validation (architecture graph completeness, per-project file-import cycles, DI-graph\n * unchanged) lives HERE, not on the build/compile target. That keeps `nx build` a fast\n * compile-only step for local iteration while `nx ci` is the full gate the PR check runs.\n *\n * The per-project gates are passed in because they exist only on project.json projects;\n * `architecture:validate-complete` is a cross-project dep added only when the workspace\n * `architecture` project exists.\n *\n * NOTE: Type checking is done by the build target (@nx/js:tsc) during compilation.\n */\n// webpieces-disable no-function-outside-class -- Nx inference plugin: createNodes invokes these as module-scope target factories; the entire plugin is intentionally functional (matching the surrounding 18 factories), a DI class is not how the Nx plugin API is called.\nexport function createCiTarget(\n    perProjectValidation: string[],\n    architectureEnabled: boolean,\n): TargetConfiguration {\n    const dependsOn: string[] = ['lint', 'build', 'test', ...perProjectValidation];\n    if (architectureEnabled) {\n        dependsOn.push('architecture:validate-complete');\n    }\n    return {\n        executor: 'nx:noop',\n        cache: true,\n        dependsOn,\n        metadata: {\n            technologies: ['nx'],\n            description:\n                'Run all CI checks: lint, build, test, and validation (Gradle-style composite target)',\n        },\n    };\n}\n\nfunction createHelpTarget(): TargetConfiguration {\n    return {\n        executor: '@webpieces/nx-webpieces-rules:help',\n        cache: false, // Never cache - always show help output\n        metadata: {\n            technologies: ['nx'],\n            description: 'Display help for @webpieces/nx-webpieces-rules commands and targets',\n        },\n    };\n}\n\n/**\n * Create per-project circular dependency checking target.\n *\n * Uses the `validate-no-file-import-cycles` executor (which bundles madge as a\n * dependency) rather than a runtime `npx madge` fetch. The executor reads\n * webpieces.config.json so the gate can be turned on/off (`mode`) and\n * time-boxed (`ignoreModifiedUntilEpoch`) like every other webpieces rule.\n *\n * Note `projectRoot` is intentionally unused now — the executor derives the\n * project root from the Nx context — but the param is kept for call-site\n * symmetry with the rest of the per-project target factories.\n */\nfunction createCircularDepsTarget(_projectRoot: string, _targetName: string): TargetConfiguration {\n    return {\n        executor: '@webpieces/nx-webpieces-rules:validate-no-file-import-cycles',\n        cache: true,\n        inputs: ['default'],\n        outputs: [] as string[],\n        metadata: {\n            technologies: ['madge'],\n            description: 'Check for circular file-import dependencies using madge',\n        },\n    };\n}\n\n/**\n * Check if a project should be excluded based on patterns\n */\nfunction isExcluded(projectRoot: string, excludePatterns: string[]): boolean {\n    if (excludePatterns.length === 0) {\n        return false;\n    }\n\n    // Simple glob matching (could be enhanced with minimatch if needed)\n    return excludePatterns.some((pattern) => {\n        // Convert glob pattern to regex\n        const regexPattern = pattern\n            .replace(/\\*\\*/g, '.*') // ** matches any path\n            .replace(/\\*/g, '[^/]*'); // * matches any string except /\n\n        const regex = new RegExp(`^${regexPattern}$`);\n        return regex.test(projectRoot);\n    });\n}\n\n/**\n * Export plugin as default for Nx\n */\nexport default { createNodesV2 };\n"]}
+{"version":3,"file":"plugin.js","sourceRoot":"","sources":["../../../../../packages/tooling/nx-webpieces-rules/src/plugin.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;;GAgBG;;;AAwMH,sDASC;AAmVD,wCAkBC;AApjBD,+BAAqC;AACrC,2BAAgC;AAQhC,uDAG2B;AAC3B,6DAAyD;AACzD,yDAAiE;AAoEjE,MAAM,eAAe,GAAwC;IACzD,YAAY,EAAE;QACV,OAAO,EAAE,IAAI;QACb,UAAU,EAAE,gCAAgC;QAC5C,eAAe,EAAE,EAAE;KACtB;IACD,SAAS,EAAE;QACP,OAAO,EAAE,IAAI;QACb,YAAY,EAAE,OAAO;QACrB,SAAS,EAAE,gCAAgC;QAC3C,WAAW,EAAE;YACT,QAAQ,EAAE,IAAI;YACd,qBAAqB,EAAE,IAAI;YAC3B,mBAAmB,EAAE,IAAI;YACzB,kBAAkB,EAAE,IAAI;YACxB,uBAAuB,EAAE,IAAI;YAC7B,qBAAqB,EAAE,IAAI;YAC3B,sBAAsB,EAAE,IAAI;YAC5B,eAAe,EAAE,IAAI;YACrB,gBAAgB,EAAE,IAAI;YACtB,mBAAmB,EAAE,IAAI;YACzB,oBAAoB,EAAE,IAAI;YAC1B,iBAAiB,EAAE,IAAI;YACvB,OAAO,EAAE,IAAI;YACb,kBAAkB,EAAE,EAAE;YACtB,6BAA6B,EAAE,EAAE;YACjC,qBAAqB,EAAE,GAAG;YAC1B,cAAc,EAAE,QAAQ;SAC3B;QACD,QAAQ,EAAE;YACN,QAAQ,EAAE,IAAI;YACd,SAAS,EAAE,IAAI;YACf,gBAAgB,EAAE,IAAI;SACzB;KACJ;CACJ,CAAC;AAEF,SAAS,gBAAgB,CACrB,OAA8C;IAE9C,MAAM,YAAY,GAAG;QACjB,GAAG,eAAe,CAAC,YAAY;QAC/B,GAAG,OAAO,EAAE,YAAY;KAC3B,CAAC;IAEF,MAAM,SAAS,GAAG;QACd,GAAG,eAAe,CAAC,SAAS;QAC5B,GAAG,OAAO,EAAE,SAAS;QACrB,WAAW,EAAE;YACT,GAAG,eAAe,CAAC,SAAS,CAAC,WAAW;YACxC,GAAG,OAAO,EAAE,SAAS,EAAE,WAAW;SACrC;QACD,QAAQ,EAAE;YACN,GAAG,eAAe,CAAC,SAAS,CAAC,QAAQ;YACrC,GAAG,OAAO,EAAE,SAAS,EAAE,QAAQ;SAClC;KACJ,CAAC;IAEF,OAAO;QACH,YAAY;QACZ,SAAS;KAC2B,CAAC;AAC7C,CAAC;AAED,KAAK,UAAU,mBAAmB,CAC9B,YAA+B,EAC/B,OAA8C,EAC9C,OAA6B;IAE7B,MAAM,IAAI,GAAG,gBAAgB,CAAC,OAAO,CAAC,CAAC;IACvC,MAAM,OAAO,GAAwB,EAAE,CAAC;IAExC,2CAA2C;IAC3C,sBAAsB,CAAC,OAAO,EAAE,YAAY,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC;IAE7D,wDAAwD;IACxD,oBAAoB,CAAC,OAAO,EAAE,YAAY,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC;IAE3D,OAAO,OAAO,CAAC;AACnB,CAAC;AAED,SAAS,sBAAsB,CAC3B,OAA4B,EAC5B,YAA+B,EAC/B,IAAyC,EACzC,OAA6B;IAE7B,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO;QAAE,OAAO;IAEpC,MAAM,WAAW,GAAG,IAAA,WAAI,EAAC,OAAO,CAAC,aAAa,EAAE,cAAc,CAAC,CAAC;IAChE,IAAI,CAAC,IAAA,eAAU,EAAC,WAAW,CAAC;QAAE,OAAO;IAErC,MAAM,gBAAgB,GAAG,mCAAmC,CAAC,IAAI,CAAC,CAAC;IACnE,IAAI,MAAM,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO;IAEvD,MAAM,MAAM,GAAsB;QAC9B,QAAQ,EAAE;YACN,YAAY,EAAE;gBACV,IAAI,EAAE,cAAc;gBACpB,IAAI,EAAE,cAAc;gBACpB,OAAO,EAAE,gBAAgB;aAC5B;SACJ;KACJ,CAAC;IAEF,MAAM,gBAAgB,GAAG,YAAY,CAAC,CAAC,CAAC,CAAC;IACzC,IAAI,gBAAgB,EAAE,CAAC;QACnB,OAAO,CAAC,IAAI,CAAC,CAAC,gBAAgB,EAAE,MAAM,CAAU,CAAC,CAAC;IACtD,CAAC;AACL,CAAC;AAGD,6FAA6F;AAC7F,oGAAoG;AACpG,qGAAqG;AACrG,8FAA8F;AAC9F,SAAgB,qBAAqB,CAAC,aAAqB,EAAE,WAAmB;IAC5E,IAAI,GAAG,GAAG,WAAW,CAAC;IACtB,OAAO,GAAG,IAAI,GAAG,KAAK,GAAG,IAAI,GAAG,KAAK,GAAG,EAAE,CAAC;QACvC,IAAI,IAAA,eAAU,EAAC,IAAA,WAAI,EAAC,aAAa,EAAE,GAAG,EAAE,MAAM,CAAC,CAAC;YAAE,OAAO,IAAI,CAAC;QAC9D,MAAM,MAAM,GAAG,IAAA,cAAO,EAAC,GAAG,CAAC,CAAC;QAC5B,IAAI,MAAM,KAAK,GAAG;YAAE,MAAM;QAC1B,GAAG,GAAG,MAAM,CAAC;IACjB,CAAC;IACD,OAAO,KAAK,CAAC;AACjB,CAAC;AAED,SAAS,oBAAoB,CACzB,OAA4B,EAC5B,YAA+B,EAC/B,IAAyC,EACzC,OAA6B;IAE7B,0EAA0E;IAC1E,MAAM,cAAc,GAAG,IAAI,GAAG,EAAU,CAAC;IAEzC,KAAK,MAAM,WAAW,IAAI,YAAY,EAAE,CAAC;QACrC,MAAM,aAAa,GAAG,WAAW,CAAC,QAAQ,CAAC,cAAc,CAAC,CAAC;QAC3D,MAAM,aAAa,GAAG,WAAW,CAAC,QAAQ,CAAC,cAAc,CAAC,CAAC;QAE3D,IAAI,CAAC,aAAa,IAAI,CAAC,aAAa;YAAE,SAAS;QAE/C,MAAM,WAAW,GAAG,IAAA,cAAO,EAAC,WAAW,CAAC,CAAC;QAEzC,gDAAgD;QAChD,IAAI,WAAW,KAAK,GAAG;YAAE,SAAS;QAElC,yFAAyF;QACzF,kFAAkF;QAClF,IAAI,qBAAqB,CAAC,OAAO,CAAC,aAAa,EAAE,WAAW,CAAC;YAAE,SAAS;QAExE,oDAAoD;QACpD,IAAI,cAAc,CAAC,GAAG,CAAC,WAAW,CAAC;YAAE,SAAS;QAE9C,uEAAuE;QACvE,0DAA0D;QAC1D,IAAI,aAAa,EAAE,CAAC;YAChB,MAAM,eAAe,GAAG,IAAA,WAAI,EAAC,OAAO,CAAC,aAAa,EAAE,WAAW,EAAE,cAAc,CAAC,CAAC;YACjF,IAAI,IAAA,eAAU,EAAC,eAAe,CAAC;gBAAE,SAAS;QAC9C,CAAC;QAED,cAAc,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;QAEhC,MAAM,mBAAmB,GACrB,IAAI,CAAC,SAAS,CAAC,OAAO,KAAK,IAAI;YAC/B,IAAA,eAAU,EAAC,IAAA,WAAI,EAAC,OAAO,CAAC,aAAa,EAAE,cAAc,CAAC,CAAC,CAAC;QAC5D,MAAM,OAAO,GAAG,sBAAsB,CAClC,aAAa,EACb,WAAW,EACX,IAAI,EACJ,mBAAmB,CACtB,CAAC;QAEF,IAAI,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,MAAM,KAAK,CAAC;YAAE,SAAS;QAEhD,MAAM,MAAM,GAAsB;YAC9B,QAAQ,EAAE;gBACN,CAAC,WAAW,CAAC,EAAE;oBACX,OAAO;iBACV;aACJ;SACJ,CAAC;QAEF,OAAO,CAAC,IAAI,CAAC,CAAC,WAAW,EAAE,MAAM,CAAU,CAAC,CAAC;IACjD,CAAC;AACL,CAAC;AAED;;;GAGG;AACH,SAAS,sBAAsB,CAC3B,aAAsB,EACtB,WAAmB,EACnB,IAAyC,EACzC,mBAA4B;IAE5B,MAAM,OAAO,GAAwC,EAAE,CAAC;IAExD,qFAAqF;IACrF,yFAAyF;IACzF,qBAAqB;IACrB,MAAM,iBAAiB,GAAa,EAAE,CAAC;IAEvC,0DAA0D;IAC1D,IAAI,aAAa,IAAI,IAAI,CAAC,YAAY,CAAC,OAAO,EAAE,CAAC;QAC7C,IAAI,CAAC,UAAU,CAAC,WAAW,EAAE,IAAI,CAAC,YAAY,CAAC,eAAgB,CAAC,EAAE,CAAC;YAC/D,MAAM,UAAU,GAAG,IAAI,CAAC,YAAY,CAAC,UAAW,CAAC;YACjD,OAAO,CAAC,UAAU,CAAC,GAAG,wBAAwB,CAAC,WAAW,EAAE,UAAU,CAAC,CAAC;YACxE,iBAAiB,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QACvC,CAAC;IACL,CAAC;IAED,0FAA0F;IAC1F,EAAE;IACF,sGAAsG;IACtG,sGAAsG;IACtG,iGAAiG;IACjG,+FAA+F;IAC/F,IAAI,aAAa,IAAI,IAAI,CAAC,SAAS,CAAC,WAAY,CAAC,OAAO,EAAE,CAAC;QACvD,OAAO,CAAC,mBAAmB,CAAC,GAAG,IAAA,8CAA2B,GAAE,CAAC;QAC7D,iBAAiB,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAC;IAChD,CAAC;IAED,oFAAoF;IACpF,+EAA+E;IAC/E,+EAA+E;IAC/E,OAAO,CAAC,IAAI,CAAC,GAAG,cAAc,CAAC,iBAAiB,EAAE,mBAAmB,CAAC,CAAC;IAEvE,OAAO,OAAO,CAAC;AACnB,CAAC;AAED;;;GAGG;AACU,QAAA,aAAa,GAA6C;IACnE,uDAAuD;IACvD,2BAA2B;IAE3B,qBAAqB;IACrB,mBAAmB;CACtB,CAAC;AAEF;;GAEG;AACH,SAAS,0BAA0B,CAC/B,WAA4E;IAE5E,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,IAAI,WAAY,CAAC,QAAQ;QAAE,OAAO,CAAC,IAAI,CAAC,iCAAiC,CAAC,CAAC;IAC3E,IAAI,WAAY,CAAC,qBAAqB;QAAE,OAAO,CAAC,IAAI,CAAC,iCAAiC,CAAC,CAAC;IACxF,IAAI,WAAY,CAAC,mBAAmB;QAAE,OAAO,CAAC,IAAI,CAAC,sBAAsB,CAAC,CAAC;IAC3E,2DAA2D;IAC3D,IACI,WAAY,CAAC,kBAAkB;QAC/B,WAAY,CAAC,uBAAuB;QACpC,WAAY,CAAC,qBAAqB,EACpC,CAAC;QACC,OAAO,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;IAClC,CAAC;IACD,IAAI,WAAY,CAAC,sBAAsB;QAAE,OAAO,CAAC,IAAI,CAAC,0BAA0B,CAAC,CAAC;IAClF,IAAI,WAAY,CAAC,eAAe;QAAE,OAAO,CAAC,IAAI,CAAC,oBAAoB,CAAC,CAAC;IACrE,IAAI,WAAY,CAAC,gBAAgB;QAAE,OAAO,CAAC,IAAI,CAAC,oBAAoB,CAAC,CAAC;IACtE,IAAI,WAAY,CAAC,mBAAmB;QAAE,OAAO,CAAC,IAAI,CAAC,+BAA+B,CAAC,CAAC;IACpF,IAAI,WAAY,CAAC,oBAAoB;QAAE,OAAO,CAAC,IAAI,CAAC,wBAAwB,CAAC,CAAC;IAC9E,IAAI,WAAY,CAAC,iBAAiB;QAAE,OAAO,CAAC,IAAI,CAAC,sBAAsB,CAAC,CAAC;IACzE,OAAO,OAAO,CAAC;AACnB,CAAC;AAED;;;GAGG;AACH,SAAS,mCAAmC,CACxC,IAAyC;IAEzC,MAAM,OAAO,GAAwC,EAAE,CAAC;IACxD,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,CAAC,SAAU,CAAC;IAC5C,MAAM,WAAW,GAAG,IAAI,CAAC,SAAS,CAAC,WAAY,CAAC;IAChD,8EAA8E;IAC9E,MAAM,aAAa,GAAG,IAAI,sCAAiB,EAAE,CAAC;IAE9C,qCAAqC;IACrC,OAAO,CAAC,MAAM,CAAC,GAAG,gBAAgB,EAAE,CAAC;IAErC,IAAI,IAAI,CAAC,SAAS,CAAC,QAAS,CAAC,QAAQ,EAAE,CAAC;QACpC,OAAO,CAAC,UAAU,CAAC,GAAG,oBAAoB,CAAC,SAAS,CAAC,CAAC;IAC1D,CAAC;IACD,IAAI,IAAI,CAAC,SAAS,CAAC,QAAS,CAAC,SAAS,EAAE,CAAC;QACrC,OAAO,CAAC,WAAW,CAAC,GAAG,kCAAkC,CAAC,SAAS,CAAC,CAAC;IACzE,CAAC;IACD,IAAI,IAAI,CAAC,SAAS,CAAC,QAAS,CAAC,gBAAgB,EAAE,CAAC;QAC5C,OAAO,CAAC,mBAAmB,CAAC,GAAG,IAAA,8CAA4B,GAAE,CAAC;IAClE,CAAC;IACD,IAAI,WAAW,CAAC,QAAQ,EAAE,CAAC;QACvB,OAAO,CAAC,iCAAiC,CAAC,GAAG,aAAa,CAAC,QAAQ,EAAE,CAAC;IAC1E,CAAC;IACD,IAAI,WAAW,CAAC,qBAAqB,EAAE,CAAC;QACpC,OAAO,CAAC,iCAAiC,CAAC,GAAG,6BAA6B,CAAC,SAAS,CAAC,CAAC;IAC1F,CAAC;IACD,IAAI,WAAW,CAAC,mBAAmB,EAAE,CAAC;QAClC,OAAO,CAAC,sBAAsB,CAAC,GAAG,aAAa,CAAC,WAAW,EAAE,CAAC;IAClE,CAAC;IACD,uGAAuG;IACvG,sGAAsG;IACtG,OAAO,CAAC,yBAAyB,CAAC,GAAG,aAAa,CAAC,aAAa,EAAE,CAAC;IACnE,2DAA2D;IAC3D,gEAAgE;IAChE,yFAAyF;IACzF,IACI,WAAW,CAAC,kBAAkB;QAC9B,WAAW,CAAC,uBAAuB;QACnC,WAAW,CAAC,qBAAqB,EACnC,CAAC;QACC,OAAO,CAAC,eAAe,CAAC,GAAG,aAAa,CAAC,IAAI,EAAE,CAAC;IACpD,CAAC;IACD,IAAI,WAAW,CAAC,sBAAsB,EAAE,CAAC;QACrC,OAAO,CAAC,0BAA0B,CAAC,GAAG,aAAa,CAAC,cAAc,EAAE,CAAC;IACzE,CAAC;IACD,IAAI,WAAW,CAAC,eAAe,EAAE,CAAC;QAC9B,OAAO,CAAC,oBAAoB,CAAC,GAAG,aAAa,CAAC,OAAO,EAAE,CAAC;IAC5D,CAAC;IACD,IAAI,WAAW,CAAC,gBAAgB,EAAE,CAAC;QAC/B,OAAO,CAAC,oBAAoB,CAAC,GAAG,aAAa,CAAC,QAAQ,EAAE,CAAC;IAC7D,CAAC;IACD,IAAI,WAAW,CAAC,mBAAmB,EAAE,CAAC;QAClC,OAAO,CAAC,+BAA+B,CAAC,GAAG,IAAA,yDAAuC,GAAE,CAAC;IACzF,CAAC;IACD,IAAI,WAAW,CAAC,oBAAoB,EAAE,CAAC;QACnC,OAAO,CAAC,wBAAwB,CAAC,GAAG,aAAa,CAAC,YAAY,EAAE,CAAC;IACrE,CAAC;IACD,IAAI,WAAW,CAAC,iBAAiB,EAAE,CAAC;QAChC,OAAO,CAAC,sBAAsB,CAAC,GAAG,aAAa,CAAC,SAAS,EAAE,CAAC;IAChE,CAAC;IAED,iEAAiE;IACjE,MAAM,iBAAiB,GAAG,0BAA0B,CAAC,WAAW,CAAC,CAAC;IAClE,IAAI,iBAAiB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC/B,OAAO,CAAC,mBAAmB,CAAC,GAAG,4BAA4B,CAAC,iBAAiB,CAAC,CAAC;IACnF,CAAC;IAED,OAAO,OAAO,CAAC;AACnB,CAAC;AAED,SAAS,oBAAoB,CAAC,SAAiB;IAC3C,OAAO;QACH,QAAQ,EAAE,wCAAwC;QAClD,KAAK,EAAE,KAAK;QACZ,OAAO,EAAE;YACL,gDAAgD;YAChD,gDAAgD;YAChD,wDAAwD;SAC3D;QACD,OAAO,EAAE,EAAE,SAAS,EAAE;QACtB,QAAQ,EAAE;YACN,YAAY,EAAE,CAAC,IAAI,CAAC;YACpB,WAAW,EACP,+GAA+G;SACtH;KACJ,CAAC;AACN,CAAC;AAED,SAAS,kCAAkC,CAAC,SAAiB;IACzD,OAAO;QACH,QAAQ,EAAE,yCAAyC;QACnD,SAAS,EAAE,CAAC,UAAU,CAAC;QACvB,OAAO,EAAE,EAAE,SAAS,EAAE;QACtB,QAAQ,EAAE;YACN,YAAY,EAAE,CAAC,IAAI,CAAC;YACpB,WAAW,EAAE,2DAA2D;SAC3E;KACJ,CAAC;AACN,CAAC;AAED,SAAS,6BAA6B,CAAC,SAAiB;IACpD,OAAO;QACH,QAAQ,EAAE,+DAA+D;QACzE,KAAK,EAAE,KAAK;QACZ,MAAM,EAAE,CAAC,SAAS,EAAE,gDAAgD,CAAC;QACrE,OAAO,EAAE,EAAE,SAAS,EAAE;QACtB,QAAQ,EAAE;YACN,YAAY,EAAE,CAAC,IAAI,CAAC;YACpB,WAAW,EAAE,2DAA2D;SAC3E;KACJ,CAAC;AACN,CAAC;AAED,SAAS,8BAA8B,CACnC,QAAgB,EAChB,IAAiC;IAEjC,OAAO;QACH,QAAQ,EAAE,oDAAoD;QAC9D,KAAK,EAAE,KAAK,EAAE,qCAAqC;QACnD,MAAM,EAAE,CAAC,SAAS,CAAC;QACnB,OAAO,EAAE,EAAE,GAAG,EAAE,QAAQ,EAAE,IAAI,EAAE;QAChC,QAAQ,EAAE;YACN,YAAY,EAAE,CAAC,IAAI,CAAC;YACpB,WAAW,EAAE,sCAAsC,QAAQ,qCAAqC;SACnG;KACJ,CAAC;AACN,CAAC;AAED,SAAS,mCAAmC,CACxC,QAAgB,EAChB,IAAiC;IAEjC,OAAO;QACH,QAAQ,EAAE,yDAAyD;QACnE,KAAK,EAAE,KAAK,EAAE,qCAAqC;QACnD,MAAM,EAAE,CAAC,SAAS,CAAC;QACnB,OAAO,EAAE,EAAE,GAAG,EAAE,QAAQ,EAAE,IAAI,EAAE;QAChC,QAAQ,EAAE;YACN,YAAY,EAAE,CAAC,IAAI,CAAC;YACpB,WAAW,EAAE,mDAAmD,QAAQ,qCAAqC;SAChH;KACJ,CAAC;AACN,CAAC;AAED,SAAS,iCAAiC,CACtC,QAAgB,EAChB,IAAiC;IAEjC,OAAO;QACH,QAAQ,EAAE,uDAAuD;QACjE,KAAK,EAAE,KAAK,EAAE,qCAAqC;QACnD,MAAM,EAAE,CAAC,SAAS,CAAC;QACnB,OAAO,EAAE,EAAE,GAAG,EAAE,QAAQ,EAAE,IAAI,EAAE;QAChC,QAAQ,EAAE;YACN,YAAY,EAAE,CAAC,IAAI,CAAC;YACpB,WAAW,EAAE,yCAAyC,QAAQ,yCAAyC;SAC1G;KACJ,CAAC;AACN,CAAC;AAED,SAAS,4BAA4B,CAAC,iBAA2B;IAC7D,OAAO;QACH,QAAQ,EAAE,SAAS;QACnB,KAAK,EAAE,IAAI;QACX,SAAS,EAAE,iBAAiB;QAC5B,QAAQ,EAAE;YACN,YAAY,EAAE,CAAC,IAAI,CAAC;YACpB,WAAW,EAAE,gFAAgF;SAChG;KACJ,CAAC;AACN,CAAC;AAED;;;;;;;;;;;;;GAaG;AACH,4QAA4Q;AAC5Q,SAAgB,cAAc,CAC1B,oBAA8B,EAC9B,mBAA4B;IAE5B,MAAM,SAAS,GAAa,CAAC,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,GAAG,oBAAoB,CAAC,CAAC;IAC/E,IAAI,mBAAmB,EAAE,CAAC;QACtB,SAAS,CAAC,IAAI,CAAC,gCAAgC,CAAC,CAAC;IACrD,CAAC;IACD,OAAO;QACH,QAAQ,EAAE,SAAS;QACnB,KAAK,EAAE,IAAI;QACX,SAAS;QACT,QAAQ,EAAE;YACN,YAAY,EAAE,CAAC,IAAI,CAAC;YACpB,WAAW,EACP,sFAAsF;SAC7F;KACJ,CAAC;AACN,CAAC;AAED,SAAS,gBAAgB;IACrB,OAAO;QACH,QAAQ,EAAE,oCAAoC;QAC9C,KAAK,EAAE,KAAK,EAAE,wCAAwC;QACtD,QAAQ,EAAE;YACN,YAAY,EAAE,CAAC,IAAI,CAAC;YACpB,WAAW,EAAE,qEAAqE;SACrF;KACJ,CAAC;AACN,CAAC;AAED;;;;;;;;;;;GAWG;AACH,SAAS,wBAAwB,CAAC,YAAoB,EAAE,WAAmB;IACvE,OAAO;QACH,QAAQ,EAAE,8DAA8D;QACxE,KAAK,EAAE,IAAI;QACX,MAAM,EAAE,CAAC,SAAS,CAAC;QACnB,OAAO,EAAE,EAAc;QACvB,QAAQ,EAAE;YACN,YAAY,EAAE,CAAC,OAAO,CAAC;YACvB,WAAW,EAAE,yDAAyD;SACzE;KACJ,CAAC;AACN,CAAC;AAED;;GAEG;AACH,SAAS,UAAU,CAAC,WAAmB,EAAE,eAAyB;IAC9D,IAAI,eAAe,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC/B,OAAO,KAAK,CAAC;IACjB,CAAC;IAED,oEAAoE;IACpE,OAAO,eAAe,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE;QACpC,gCAAgC;QAChC,MAAM,YAAY,GAAG,OAAO;aACvB,OAAO,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC,sBAAsB;aAC7C,OAAO,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC,CAAC,gCAAgC;QAE9D,MAAM,KAAK,GAAG,IAAI,MAAM,CAAC,IAAI,YAAY,GAAG,CAAC,CAAC;QAC9C,OAAO,KAAK,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;IACnC,CAAC,CAAC,CAAC;AACP,CAAC;AAED;;GAEG;AACH,kBAAe,EAAE,aAAa,EAAb,qBAAa,EAAE,CAAC","sourcesContent":["/**\n * Unified Nx Inference Plugin for @webpieces/nx-webpieces-rules\n *\n * This plugin automatically creates targets for:\n * 1. Workspace-level architecture validation (generate, visualize, validate-*)\n * 2. Per-project circular dependency checking\n *\n * Install with: nx add @webpieces/nx-webpieces-rules\n *\n * Usage:\n * Add to nx.json plugins array:\n * {\n *   \"plugins\": [\"@webpieces/nx-webpieces-rules\"]\n * }\n *\n * Then all targets appear automatically without manual project.json configuration.\n */\n\nimport { dirname, join } from 'path';\nimport { existsSync } from 'fs';\nimport type {\n    CreateNodesV2,\n    CreateNodesContextV2,\n    CreateNodesResultV2,\n    CreateNodesResult,\n    TargetConfiguration,\n} from '@nx/devkit';\nimport {\n    createVisualizeRuntimeTarget,\n    createValidateRuntimeArchitectureTarget,\n} from './runtime-targets';\nimport { ValidationTargets } from './validation-targets';\nimport { createDiGraphGenerateTarget } from './di-graph-targets';\n\n/**\n * Circular dependency checking options\n */\nexport interface CircularDepsOptions {\n    enabled?: boolean;\n    targetName?: string;\n    excludePatterns?: string[];\n}\n\n/**\n * Validation options for architecture checks\n */\nexport interface ValidationOptions {\n    noCycles?: boolean;\n    architectureUnchanged?: boolean;\n    validatePackageJson?: boolean;\n    validateNewMethods?: boolean;\n    validateModifiedMethods?: boolean;\n    validateModifiedFiles?: boolean;\n    validateVersionsLocked?: boolean;\n    validateTsInSrc?: boolean;\n    validateNxWiring?: boolean;\n    runtimeArchitecture?: boolean;\n    validateApiRelations?: boolean;\n    validateApiLibTag?: boolean;\n    diGraph?: boolean;\n    newMethodsMaxLines?: number;\n    modifiedAndNewMethodsMaxLines?: number;\n    modifiedFilesMaxLines?: number;\n    /**\n     * Validation mode for method/file size limits:\n     * - STRICT: All limits enforced, disable comments ignored\n     * - NORMAL: Limits enforced, disable comments with dates work\n     * - OFF: Skip size validations entirely (for fast iteration)\n     */\n    validationMode?: 'STRICT' | 'NORMAL' | 'OFF';\n}\n\n/**\n * Feature flags for workspace targets\n */\nexport interface FeatureOptions {\n    generate?: boolean;\n    visualize?: boolean;\n    visualizeRuntime?: boolean;\n}\n\n/**\n * Workspace-level configuration options\n */\nexport interface WorkspaceOptions {\n    enabled?: boolean;\n    targetPrefix?: string;\n    graphPath?: string;\n    validations?: ValidationOptions;\n    features?: FeatureOptions;\n}\n\n/**\n * Configuration for @webpieces/nx-webpieces-rules Nx plugin\n */\nexport interface ArchitecturePluginOptions {\n    circularDeps?: CircularDepsOptions;\n    workspace?: WorkspaceOptions;\n}\n\nconst DEFAULT_OPTIONS: Required<ArchitecturePluginOptions> = {\n    circularDeps: {\n        enabled: true,\n        targetName: 'validate-no-file-import-cycles',\n        excludePatterns: [],\n    },\n    workspace: {\n        enabled: true,\n        targetPrefix: 'arch:',\n        graphPath: 'architecture/dependencies.json',\n        validations: {\n            noCycles: true,\n            architectureUnchanged: true,\n            validatePackageJson: true,\n            validateNewMethods: true,\n            validateModifiedMethods: true,\n            validateModifiedFiles: true,\n            validateVersionsLocked: true,\n            validateTsInSrc: true,\n            validateNxWiring: true,\n            runtimeArchitecture: true,\n            validateApiRelations: true,\n            validateApiLibTag: true,\n            diGraph: true,\n            newMethodsMaxLines: 30,\n            modifiedAndNewMethodsMaxLines: 80,\n            modifiedFilesMaxLines: 900,\n            validationMode: 'NORMAL',\n        },\n        features: {\n            generate: true,\n            visualize: true,\n            visualizeRuntime: true,\n        },\n    },\n};\n\nfunction normalizeOptions(\n    options: ArchitecturePluginOptions | undefined,\n): Required<ArchitecturePluginOptions> {\n    const circularDeps = {\n        ...DEFAULT_OPTIONS.circularDeps,\n        ...options?.circularDeps,\n    };\n\n    const workspace = {\n        ...DEFAULT_OPTIONS.workspace,\n        ...options?.workspace,\n        validations: {\n            ...DEFAULT_OPTIONS.workspace.validations,\n            ...options?.workspace?.validations,\n        },\n        features: {\n            ...DEFAULT_OPTIONS.workspace.features,\n            ...options?.workspace?.features,\n        },\n    };\n\n    return {\n        circularDeps,\n        workspace,\n    } as Required<ArchitecturePluginOptions>;\n}\n\nasync function createNodesFunction(\n    projectFiles: readonly string[],\n    options: ArchitecturePluginOptions | undefined,\n    context: CreateNodesContextV2,\n): Promise<CreateNodesResultV2> {\n    const opts = normalizeOptions(options);\n    const results: CreateNodesResultV2 = [];\n\n    // Add workspace-level architecture targets\n    addArchitectureProject(results, projectFiles, opts, context);\n\n    // Add per-project targets (circular-deps, ci, di-graph)\n    addPerProjectTargets(results, projectFiles, opts, context);\n\n    return results;\n}\n\nfunction addArchitectureProject(\n    results: CreateNodesResultV2,\n    projectFiles: readonly string[],\n    opts: Required<ArchitecturePluginOptions>,\n    context: CreateNodesContextV2,\n): void {\n    if (!opts.workspace.enabled) return;\n\n    const archDirPath = join(context.workspaceRoot, 'architecture');\n    if (!existsSync(archDirPath)) return;\n\n    const workspaceTargets = createWorkspaceTargetsWithoutPrefix(opts);\n    if (Object.keys(workspaceTargets).length === 0) return;\n\n    const result: CreateNodesResult = {\n        projects: {\n            architecture: {\n                name: 'architecture',\n                root: 'architecture',\n                targets: workspaceTargets,\n            },\n        },\n    };\n\n    const firstProjectFile = projectFiles[0];\n    if (firstProjectFile) {\n        results.push([firstProjectFile, result] as const);\n    }\n}\n\n\n// A project sits inside a NESTED git repo (e.g. a clone under repositories/) when any of its\n// ancestor dirs — up to but NOT including the workspace root — contains a `.git`. Such projects are\n// separate repos, not part of THIS workspace's graph, so they must not get inferred targets (that is\n// what drags foreign clones into `nx affected`). Same repo-boundary signal the AI guards use.\nexport function isInsideNestedGitRepo(workspaceRoot: string, projectRoot: string): boolean {\n    let dir = projectRoot;\n    while (dir && dir !== '.' && dir !== '/') {\n        if (existsSync(join(workspaceRoot, dir, '.git'))) return true;\n        const parent = dirname(dir);\n        if (parent === dir) break;\n        dir = parent;\n    }\n    return false;\n}\n\nfunction addPerProjectTargets(\n    results: CreateNodesResultV2,\n    projectFiles: readonly string[],\n    opts: Required<ArchitecturePluginOptions>,\n    context: CreateNodesContextV2,\n): void {\n    // Track processed project roots to avoid duplicates when both files exist\n    const processedRoots = new Set<string>();\n\n    for (const projectFile of projectFiles) {\n        const isProjectJson = projectFile.endsWith('project.json');\n        const isPackageJson = projectFile.endsWith('package.json');\n\n        if (!isProjectJson && !isPackageJson) continue;\n\n        const projectRoot = dirname(projectFile);\n\n        // Skip root (workspace manifest, not a project)\n        if (projectRoot === '.') continue;\n\n        // Skip projects inside a nested git repo (vendored clones under repositories/): they are\n        // separate repos and must not be swept into this workspace's `nx affected` graph.\n        if (isInsideNestedGitRepo(context.workspaceRoot, projectRoot)) continue;\n\n        // Skip if we've already processed this project root\n        if (processedRoots.has(projectRoot)) continue;\n\n        // For package.json, skip if project.json also exists in same directory\n        // (prefer project.json - it will be processed separately)\n        if (isPackageJson) {\n            const projectJsonPath = join(context.workspaceRoot, projectRoot, 'project.json');\n            if (existsSync(projectJsonPath)) continue;\n        }\n\n        processedRoots.add(projectRoot);\n\n        const architectureEnabled =\n            opts.workspace.enabled === true &&\n            existsSync(join(context.workspaceRoot, 'architecture'));\n        const targets = buildPerProjectTargets(\n            isProjectJson,\n            projectRoot,\n            opts,\n            architectureEnabled,\n        );\n\n        if (Object.keys(targets).length === 0) continue;\n\n        const result: CreateNodesResult = {\n            projects: {\n                [projectRoot]: {\n                    targets,\n                },\n            },\n        };\n\n        results.push([projectFile, result] as const);\n    }\n}\n\n/**\n * Build the target map for one project. Most targets are project.json-only\n * (package.json-only projects may not have TypeScript source); `ci` goes on all.\n */\nfunction buildPerProjectTargets(\n    isProjectJson: boolean,\n    projectRoot: string,\n    opts: Required<ArchitecturePluginOptions>,\n    architectureEnabled: boolean,\n): Record<string, TargetConfiguration> {\n    const targets: Record<string, TargetConfiguration> = {};\n\n    // Per-project validation gates that `ci` must depend on. Collected as they are added\n    // so `ci` references only gates that actually exist on THIS project (a package.json-only\n    // project has none).\n    const validationTargets: string[] = [];\n\n    // Add circular-deps target ONLY for project.json projects\n    if (isProjectJson && opts.circularDeps.enabled) {\n        if (!isExcluded(projectRoot, opts.circularDeps.excludePatterns!)) {\n            const targetName = opts.circularDeps.targetName!;\n            targets[targetName] = createCircularDepsTarget(projectRoot, targetName);\n            validationTargets.push(targetName);\n        }\n    }\n\n    // Per-project DI design DAG: regenerate design.json/design.md/design.html on every build.\n    //\n    // `di-graph-generate` is itself pushed onto validationTargets so `ci` still RUNS it — it used to ride\n    // in only as the `dependsOn` of the deleted `validate-di-graph-unchanged` gate. There is no staleness\n    // gate here any more: \"the regenerated design files are committed\" is now one repo-wide check in\n    // `wp-review-upsert-pr` (see di-graph-targets.ts for why the per-project gate could not work).\n    if (isProjectJson && opts.workspace.validations!.diGraph) {\n        targets['di-graph-generate'] = createDiGraphGenerateTarget();\n        validationTargets.push('di-graph-generate');\n    }\n\n    // Add ci target to ALL projects (both project.json and package.json). ci aggregates\n    // lint + build + test + the validation gates that formerly rode on the compile\n    // executor's targetDefaults, so a bare `build` stays a fast compile-only step.\n    targets['ci'] = createCiTarget(validationTargets, architectureEnabled);\n\n    return targets;\n}\n\n/**\n * Nx V2 Inference Plugin\n * Matches project.json and package.json files to create targets\n */\nexport const createNodesV2: CreateNodesV2<ArchitecturePluginOptions> = [\n    // Pattern to match project.json and package.json files\n    '**/{project,package}.json',\n\n    // Inference function\n    createNodesFunction,\n];\n\n/**\n * Build list of enabled validation target names for validate-complete dependency chain\n */\nfunction buildValidationTargetsList(\n    validations: Required<ArchitecturePluginOptions>['workspace']['validations'],\n): string[] {\n    const targets: string[] = [];\n    if (validations!.noCycles) targets.push('validate-no-architecture-cycles');\n    if (validations!.architectureUnchanged) targets.push('validate-architecture-unchanged');\n    if (validations!.validatePackageJson) targets.push('validate-packagejson');\n    // Use combined validate-code instead of 3 separate targets\n    if (\n        validations!.validateNewMethods ||\n        validations!.validateModifiedMethods ||\n        validations!.validateModifiedFiles\n    ) {\n        targets.push('validate-code');\n    }\n    if (validations!.validateVersionsLocked) targets.push('validate-versions-locked');\n    if (validations!.validateTsInSrc) targets.push('validate-ts-in-src');\n    if (validations!.validateNxWiring) targets.push('validate-nx-wiring');\n    if (validations!.runtimeArchitecture) targets.push('validate-runtime-architecture');\n    if (validations!.validateApiRelations) targets.push('validate-api-relations');\n    if (validations!.validateApiLibTag) targets.push('validate-api-lib-tag');\n    return targets;\n}\n\n/**\n * Create workspace-level architecture validation targets WITHOUT prefix\n * Used for virtual 'architecture' project\n */\nfunction createWorkspaceTargetsWithoutPrefix(\n    opts: Required<ArchitecturePluginOptions>,\n): Record<string, TargetConfiguration> {\n    const targets: Record<string, TargetConfiguration> = {};\n    const graphPath = opts.workspace.graphPath!;\n    const validations = opts.workspace.validations!;\n    // One ValidationTargets instance, injected below to build each target config.\n    const targetFactory = new ValidationTargets();\n\n    // Add help target (always available)\n    targets['help'] = createHelpTarget();\n\n    if (opts.workspace.features!.generate) {\n        targets['generate'] = createGenerateTarget(graphPath);\n    }\n    if (opts.workspace.features!.visualize) {\n        targets['visualize'] = createVisualizeTargetWithoutPrefix(graphPath);\n    }\n    if (opts.workspace.features!.visualizeRuntime) {\n        targets['visualize-runtime'] = createVisualizeRuntimeTarget();\n    }\n    if (validations.noCycles) {\n        targets['validate-no-architecture-cycles'] = targetFactory.noCycles();\n    }\n    if (validations.architectureUnchanged) {\n        targets['validate-architecture-unchanged'] = createValidateUnchangedTarget(graphPath);\n    }\n    if (validations.validatePackageJson) {\n        targets['validate-packagejson'] = targetFactory.packageJson();\n    }\n    // Always available (cheap; success when a repo has no checklists). Kept out of the validate-complete /\n    // ci aggregate so it does not change existing gate behavior — consumers point a required check at it.\n    targets['validate-checklist-docs'] = targetFactory.checklistDocs();\n    // Use combined validate-code instead of 3 separate targets\n    // Options come from webpieces.config.json at the workspace root\n    // (loaded via @webpieces/rules-config; same source of truth as @webpieces/ai-hook-rules)\n    if (\n        validations.validateNewMethods ||\n        validations.validateModifiedMethods ||\n        validations.validateModifiedFiles\n    ) {\n        targets['validate-code'] = targetFactory.code();\n    }\n    if (validations.validateVersionsLocked) {\n        targets['validate-versions-locked'] = targetFactory.versionsLocked();\n    }\n    if (validations.validateTsInSrc) {\n        targets['validate-ts-in-src'] = targetFactory.tsInSrc();\n    }\n    if (validations.validateNxWiring) {\n        targets['validate-nx-wiring'] = targetFactory.nxWiring();\n    }\n    if (validations.runtimeArchitecture) {\n        targets['validate-runtime-architecture'] = createValidateRuntimeArchitectureTarget();\n    }\n    if (validations.validateApiRelations) {\n        targets['validate-api-relations'] = targetFactory.apiRelations();\n    }\n    if (validations.validateApiLibTag) {\n        targets['validate-api-lib-tag'] = targetFactory.apiLibTag();\n    }\n\n    // Add validate-complete target that runs all enabled validations\n    const validationTargets = buildValidationTargetsList(validations);\n    if (validationTargets.length > 0) {\n        targets['validate-complete'] = createValidateCompleteTarget(validationTargets);\n    }\n\n    return targets;\n}\n\nfunction createGenerateTarget(graphPath: string): TargetConfiguration {\n    return {\n        executor: '@webpieces/nx-webpieces-rules:generate',\n        cache: false,\n        outputs: [\n            '{workspaceRoot}/architecture/dependencies.json',\n            '{workspaceRoot}/architecture/dependencies.html',\n            '{workspaceRoot}/architecture/runtime-dependencies.json',\n        ],\n        options: { graphPath },\n        metadata: {\n            technologies: ['nx'],\n            description:\n                'Generate the architecture dependency graph (+ clickable dependencies.html) and the runtime microservice graph',\n        },\n    };\n}\n\nfunction createVisualizeTargetWithoutPrefix(graphPath: string): TargetConfiguration {\n    return {\n        executor: '@webpieces/nx-webpieces-rules:visualize',\n        dependsOn: ['generate'],\n        options: { graphPath },\n        metadata: {\n            technologies: ['nx'],\n            description: 'Generate visual representations of the architecture graph',\n        },\n    };\n}\n\nfunction createValidateUnchangedTarget(graphPath: string): TargetConfiguration {\n    return {\n        executor: '@webpieces/nx-webpieces-rules:validate-architecture-unchanged',\n        cache: false,\n        inputs: ['default', '{workspaceRoot}/architecture/dependencies.json'],\n        options: { graphPath },\n        metadata: {\n            technologies: ['nx'],\n            description: 'Validate the architecture matches the saved blessed graph',\n        },\n    };\n}\n\nfunction createValidateNewMethodsTarget(\n    maxLines: number,\n    mode: 'STRICT' | 'NORMAL' | 'OFF',\n): TargetConfiguration {\n    return {\n        executor: '@webpieces/nx-webpieces-rules:validate-new-methods',\n        cache: false, // Don't cache - depends on git state\n        inputs: ['default'],\n        options: { max: maxLines, mode },\n        metadata: {\n            technologies: ['nx'],\n            description: `Validate new methods do not exceed ${maxLines} lines (only runs in affected mode)`,\n        },\n    };\n}\n\nfunction createValidateModifiedMethodsTarget(\n    maxLines: number,\n    mode: 'STRICT' | 'NORMAL' | 'OFF',\n): TargetConfiguration {\n    return {\n        executor: '@webpieces/nx-webpieces-rules:validate-modified-methods',\n        cache: false, // Don't cache - depends on git state\n        inputs: ['default'],\n        options: { max: maxLines, mode },\n        metadata: {\n            technologies: ['nx'],\n            description: `Validate new and modified methods do not exceed ${maxLines} lines (encourages gradual cleanup)`,\n        },\n    };\n}\n\nfunction createValidateModifiedFilesTarget(\n    maxLines: number,\n    mode: 'STRICT' | 'NORMAL' | 'OFF',\n): TargetConfiguration {\n    return {\n        executor: '@webpieces/nx-webpieces-rules:validate-modified-files',\n        cache: false, // Don't cache - depends on git state\n        inputs: ['default'],\n        options: { max: maxLines, mode },\n        metadata: {\n            technologies: ['nx'],\n            description: `Validate modified files do not exceed ${maxLines} lines (encourages keeping files small)`,\n        },\n    };\n}\n\nfunction createValidateCompleteTarget(validationTargets: string[]): TargetConfiguration {\n    return {\n        executor: 'nx:noop',\n        cache: true,\n        dependsOn: validationTargets,\n        metadata: {\n            technologies: ['nx'],\n            description: 'Run all architecture validations (cycles, unchanged, package.json, code rules)',\n        },\n    };\n}\n\n/**\n * Create per-project ci target - Gradle-style composite target\n * Composite CI target: runs lint, build, test, and every validation gate.\n *\n * Validation (architecture graph completeness, per-project file-import cycles, DI-graph\n * unchanged) lives HERE, not on the build/compile target. That keeps `nx build` a fast\n * compile-only step for local iteration while `nx ci` is the full gate the PR check runs.\n *\n * The per-project gates are passed in because they exist only on project.json projects;\n * `architecture:validate-complete` is a cross-project dep added only when the workspace\n * `architecture` project exists.\n *\n * NOTE: Type checking is done by the build target (@nx/js:tsc) during compilation.\n */\n// webpieces-disable no-function-outside-class -- Nx inference plugin: createNodes invokes these as module-scope target factories; the entire plugin is intentionally functional (matching the surrounding 18 factories), a DI class is not how the Nx plugin API is called.\nexport function createCiTarget(\n    perProjectValidation: string[],\n    architectureEnabled: boolean,\n): TargetConfiguration {\n    const dependsOn: string[] = ['lint', 'build', 'test', ...perProjectValidation];\n    if (architectureEnabled) {\n        dependsOn.push('architecture:validate-complete');\n    }\n    return {\n        executor: 'nx:noop',\n        cache: true,\n        dependsOn,\n        metadata: {\n            technologies: ['nx'],\n            description:\n                'Run all CI checks: lint, build, test, and validation (Gradle-style composite target)',\n        },\n    };\n}\n\nfunction createHelpTarget(): TargetConfiguration {\n    return {\n        executor: '@webpieces/nx-webpieces-rules:help',\n        cache: false, // Never cache - always show help output\n        metadata: {\n            technologies: ['nx'],\n            description: 'Display help for @webpieces/nx-webpieces-rules commands and targets',\n        },\n    };\n}\n\n/**\n * Create per-project circular dependency checking target.\n *\n * Uses the `validate-no-file-import-cycles` executor (which bundles madge as a\n * dependency) rather than a runtime `npx madge` fetch. The executor reads\n * webpieces.config.json so the gate can be turned on/off (`mode`) and\n * time-boxed (`turnOffRuleUntilEpoch`) like every other webpieces rule.\n *\n * Note `projectRoot` is intentionally unused now — the executor derives the\n * project root from the Nx context — but the param is kept for call-site\n * symmetry with the rest of the per-project target factories.\n */\nfunction createCircularDepsTarget(_projectRoot: string, _targetName: string): TargetConfiguration {\n    return {\n        executor: '@webpieces/nx-webpieces-rules:validate-no-file-import-cycles',\n        cache: true,\n        inputs: ['default'],\n        outputs: [] as string[],\n        metadata: {\n            technologies: ['madge'],\n            description: 'Check for circular file-import dependencies using madge',\n        },\n    };\n}\n\n/**\n * Check if a project should be excluded based on patterns\n */\nfunction isExcluded(projectRoot: string, excludePatterns: string[]): boolean {\n    if (excludePatterns.length === 0) {\n        return false;\n    }\n\n    // Simple glob matching (could be enhanced with minimatch if needed)\n    return excludePatterns.some((pattern) => {\n        // Convert glob pattern to regex\n        const regexPattern = pattern\n            .replace(/\\*\\*/g, '.*') // ** matches any path\n            .replace(/\\*/g, '[^/]*'); // * matches any string except /\n\n        const regex = new RegExp(`^${regexPattern}$`);\n        return regex.test(projectRoot);\n    });\n}\n\n/**\n * Export plugin as default for Nx\n */\nexport default { createNodesV2 };\n"]}