@webpieces/nx-webpieces-rules 0.4.846 → 0.4.848

package/src/lib/saved-snapshot.js

@@ -0,0 +1,80 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.SavedSnapshot = void 0;
+const rules_config_1 = require("@webpieces/rules-config");
+const graph_loader_1 = require("./graph-loader");
+const runtime_graph_io_1 = require("./runtime-graph-io");
+const toError_1 = require("../toError");
+/** Saved graphs have no reliable generation timestamp; file mtimes also change on checkout. */
+class SavedSnapshot {
+    refresh() {
+        return 'Refresh explicitly: pnpm nx run architecture:generate';
+    }
+    message() {
+        return ('Saved generated snapshot. Viewing does not refresh architecture facts. ' +
+            'Freshness unknown: no reliable generation provenance is recorded; current source has not been checked. ' +
+            this.refresh());
+    }
+    html() {
+        return (`<p class="hint"><strong>Saved generated snapshot.</strong> Viewing does not refresh architecture facts. ` +
+            `Freshness unknown; current source has not been checked. ` +
+            `Refresh explicitly: <code>pnpm nx run architecture:generate</code>.</p>`);
+    }
+    loadProjects(workspaceRoot, graphPath) {
+        const file = this.readArtifact(graphPath, () => (0, graph_loader_1.loadBlessedGraph)(workspaceRoot, graphPath));
+        if (file === null)
+            throw this.failure(`No saved graph found at ${graphPath}`);
+        this.validateProjects(file.projects, graphPath);
+        return file;
+    }
+    loadRuntime(workspaceRoot) {
+        if (!(0, runtime_graph_io_1.runtimeGraphFileExists)(workspaceRoot)) {
+            throw this.failure(`No saved graph found at ${runtime_graph_io_1.DEFAULT_RUNTIME_GRAPH_PATH}`);
+        }
+        const graph = this.readArtifact(runtime_graph_io_1.DEFAULT_RUNTIME_GRAPH_PATH, () => (0, runtime_graph_io_1.loadRuntimeGraph)(workspaceRoot));
+        this.validateRuntime(graph);
+        return graph;
+    }
+    readArtifact(graphPath, load) {
+        // eslint-disable-next-line @webpieces/no-unmanaged-exceptions -- saved JSON decoding boundary adds the artifact path and repair while preserving the cause
+        try {
+            return load();
+        }
+        catch (err) {
+            const error = (0, toError_1.toError)(err);
+            if (error instanceof rules_config_1.RuleFailError)
+                throw error;
+            throw this.failure(`Failed to read saved graph at ${graphPath}: ${error.message}`, error);
+        }
+    }
+    failure(message, cause) {
+        return new rules_config_1.RuleFailError('saved-architecture-snapshot', message, undefined, undefined, [new rules_config_1.Option(this.refresh(), true)], undefined, cause);
+    }
+    // webpieces-disable no-any-unknown -- saved JSON is untrusted until its shape has been checked
+    isMap(value) {
+        return value !== null && typeof value === 'object' && !Array.isArray(value);
+    }
+    validateProjects(graph, graphPath) {
+        if (!this.isMap(graph) ||
+            Object.values(graph).some((entry) => !this.isMap(entry) ||
+                !Number.isFinite(entry.level) ||
+                !Array.isArray(entry.dependsOn) ||
+                entry.dependsOn.some((dep) => typeof dep !== 'string'))) {
+            throw this.failure(`Unusable saved project graph at ${graphPath}: expected projects with numeric level and string dependsOn arrays`);
+        }
+    }
+    validateRuntime(graph) {
+        if (graph === null ||
+            !this.isMap(graph) ||
+            !this.isMap(graph.services) ||
+            !this.isMap(graph.apis) ||
+            !this.isMap(graph.queues) ||
+            !Array.isArray(graph.runtimeEdges) ||
+            !Array.isArray(graph.unresolvedUses) ||
+            !Array.isArray(graph.triggers)) {
+            throw this.failure(`Unusable saved runtime graph at ${runtime_graph_io_1.DEFAULT_RUNTIME_GRAPH_PATH}: expected services, apis, queues and runtimeEdges, unresolvedUses, triggers arrays`);
+        }
+    }
+}
+exports.SavedSnapshot = SavedSnapshot;
+//# sourceMappingURL=saved-snapshot.js.map

package/src/lib/saved-snapshot.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"saved-snapshot.js","sourceRoot":"","sources":["../../../../../../packages/tooling/nx-webpieces-rules/src/lib/saved-snapshot.ts"],"names":[],"mappings":";;;AAAA,0DAAgE;AAGhE,iDAAoE;AACpE,yDAI4B;AAC5B,wCAAqC;AAErC,+FAA+F;AAC/F,MAAa,aAAa;IACtB,OAAO;QACH,OAAO,uDAAuD,CAAC;IACnE,CAAC;IAED,OAAO;QACH,OAAO,CACH,yEAAyE;YACzE,yGAAyG;YACzG,IAAI,CAAC,OAAO,EAAE,CACjB,CAAC;IACN,CAAC;IAED,IAAI;QACA,OAAO,CACH,0GAA0G;YAC1G,0DAA0D;YAC1D,yEAAyE,CAC5E,CAAC;IACN,CAAC;IAED,YAAY,CAAC,aAAqB,EAAE,SAAiB;QACjD,MAAM,IAAI,GAAG,IAAI,CAAC,YAAY,CAAC,SAAS,EAAE,GAAG,EAAE,CAAC,IAAA,+BAAgB,EAAC,aAAa,EAAE,SAAS,CAAC,CAAC,CAAC;QAC5F,IAAI,IAAI,KAAK,IAAI;YAAE,MAAM,IAAI,CAAC,OAAO,CAAC,2BAA2B,SAAS,EAAE,CAAC,CAAC;QAC9E,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC;QAChD,OAAO,IAAI,CAAC;IAChB,CAAC;IAED,WAAW,CAAC,aAAqB;QAC7B,IAAI,CAAC,IAAA,yCAAsB,EAAC,aAAa,CAAC,EAAE,CAAC;YACzC,MAAM,IAAI,CAAC,OAAO,CAAC,2BAA2B,6CAA0B,EAAE,CAAC,CAAC;QAChF,CAAC;QACD,MAAM,KAAK,GAAG,IAAI,CAAC,YAAY,CAAC,6CAA0B,EAAE,GAAG,EAAE,CAC7D,IAAA,mCAAgB,EAAC,aAAa,CAAC,CAClC,CAAC;QACF,IAAI,CAAC,eAAe,CAAC,KAAK,CAAC,CAAC;QAC5B,OAAO,KAAK,CAAC;IACjB,CAAC;IAEO,YAAY,CAAI,SAAiB,EAAE,IAAa;QACpD,2JAA2J;QAC3J,IAAI,CAAC;YACD,OAAO,IAAI,EAAE,CAAC;QAClB,CAAC;QAAC,OAAO,GAAY,EAAE,CAAC;YACpB,MAAM,KAAK,GAAG,IAAA,iBAAO,EAAC,GAAG,CAAC,CAAC;YAC3B,IAAI,KAAK,YAAY,4BAAa;gBAAE,MAAM,KAAK,CAAC;YAChD,MAAM,IAAI,CAAC,OAAO,CACd,iCAAiC,SAAS,KAAK,KAAK,CAAC,OAAO,EAAE,EAC9D,KAAK,CACR,CAAC;QACN,CAAC;IACL,CAAC;IAEO,OAAO,CAAC,OAAe,EAAE,KAAa;QAC1C,OAAO,IAAI,4BAAa,CACpB,6BAA6B,EAC7B,OAAO,EACP,SAAS,EACT,SAAS,EACT,CAAC,IAAI,qBAAM,CAAC,IAAI,CAAC,OAAO,EAAE,EAAE,IAAI,CAAC,CAAC,EAClC,SAAS,EACT,KAAK,CACR,CAAC;IACN,CAAC;IAED,+FAA+F;IACvF,KAAK,CAAC,KAAc;QACxB,OAAO,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;IAChF,CAAC;IAED,gBAAgB,CAAC,KAAoB,EAAE,SAAiB;QACpD,IACI,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC;YAClB,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,IAAI,CACrB,CAAC,KAAK,EAAE,EAAE,CACN,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC;gBAClB,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,KAAK,CAAC;gBAC7B,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,SAAS,CAAC;gBAC/B,KAAK,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,OAAO,GAAG,KAAK,QAAQ,CAAC,CAC7D,EACH,CAAC;YACC,MAAM,IAAI,CAAC,OAAO,CACd,mCAAmC,SAAS,oEAAoE,CACnH,CAAC;QACN,CAAC;IACL,CAAC;IAED,eAAe,CAAC,KAA0B;QACtC,IACI,KAAK,KAAK,IAAI;YACd,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC;YAClB,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,QAAQ,CAAC;YAC3B,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC;YACvB,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC;YACzB,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,YAAY,CAAC;YAClC,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,cAAc,CAAC;YACpC,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,QAAQ,CAAC,EAChC,CAAC;YACC,MAAM,IAAI,CAAC,OAAO,CACd,mCAAmC,6CAA0B,qFAAqF,CACrJ,CAAC;QACN,CAAC;IACL,CAAC;CACJ;AAvGD,sCAuGC","sourcesContent":["import { RuleFailError, Option } from '@webpieces/rules-config';\nimport type { EnhancedGraph } from './graph-sorter';\nimport type { RuntimeGraph } from './runtime-graph-model';\nimport { DependenciesFile, loadBlessedGraph } from './graph-loader';\nimport {\n    DEFAULT_RUNTIME_GRAPH_PATH,\n    loadRuntimeGraph,\n    runtimeGraphFileExists,\n} from './runtime-graph-io';\nimport { toError } from '../toError';\n\n/** Saved graphs have no reliable generation timestamp; file mtimes also change on checkout. */\nexport class SavedSnapshot {\n    refresh(): string {\n        return 'Refresh explicitly: pnpm nx run architecture:generate';\n    }\n\n    message(): string {\n        return (\n            'Saved generated snapshot. Viewing does not refresh architecture facts. ' +\n            'Freshness unknown: no reliable generation provenance is recorded; current source has not been checked. ' +\n            this.refresh()\n        );\n    }\n\n    html(): string {\n        return (\n            `<p class=\"hint\"><strong>Saved generated snapshot.</strong> Viewing does not refresh architecture facts. ` +\n            `Freshness unknown; current source has not been checked. ` +\n            `Refresh explicitly: <code>pnpm nx run architecture:generate</code>.</p>`\n        );\n    }\n\n    loadProjects(workspaceRoot: string, graphPath: string): DependenciesFile {\n        const file = this.readArtifact(graphPath, () => loadBlessedGraph(workspaceRoot, graphPath));\n        if (file === null) throw this.failure(`No saved graph found at ${graphPath}`);\n        this.validateProjects(file.projects, graphPath);\n        return file;\n    }\n\n    loadRuntime(workspaceRoot: string): RuntimeGraph {\n        if (!runtimeGraphFileExists(workspaceRoot)) {\n            throw this.failure(`No saved graph found at ${DEFAULT_RUNTIME_GRAPH_PATH}`);\n        }\n        const graph = this.readArtifact(DEFAULT_RUNTIME_GRAPH_PATH, () =>\n            loadRuntimeGraph(workspaceRoot),\n        );\n        this.validateRuntime(graph);\n        return graph;\n    }\n\n    private readArtifact<T>(graphPath: string, load: () => T): T {\n        // eslint-disable-next-line @webpieces/no-unmanaged-exceptions -- saved JSON decoding boundary adds the artifact path and repair while preserving the cause\n        try {\n            return load();\n        } catch (err: unknown) {\n            const error = toError(err);\n            if (error instanceof RuleFailError) throw error;\n            throw this.failure(\n                `Failed to read saved graph at ${graphPath}: ${error.message}`,\n                error,\n            );\n        }\n    }\n\n    private failure(message: string, cause?: Error): RuleFailError {\n        return new RuleFailError(\n            'saved-architecture-snapshot',\n            message,\n            undefined,\n            undefined,\n            [new Option(this.refresh(), true)],\n            undefined,\n            cause,\n        );\n    }\n\n    // webpieces-disable no-any-unknown -- saved JSON is untrusted until its shape has been checked\n    private isMap(value: unknown): boolean {\n        return value !== null && typeof value === 'object' && !Array.isArray(value);\n    }\n\n    validateProjects(graph: EnhancedGraph, graphPath: string): void {\n        if (\n            !this.isMap(graph) ||\n            Object.values(graph).some(\n                (entry) =>\n                    !this.isMap(entry) ||\n                    !Number.isFinite(entry.level) ||\n                    !Array.isArray(entry.dependsOn) ||\n                    entry.dependsOn.some((dep) => typeof dep !== 'string'),\n            )\n        ) {\n            throw this.failure(\n                `Unusable saved project graph at ${graphPath}: expected projects with numeric level and string dependsOn arrays`,\n            );\n        }\n    }\n\n    validateRuntime(graph: RuntimeGraph | null): asserts graph is RuntimeGraph {\n        if (\n            graph === null ||\n            !this.isMap(graph) ||\n            !this.isMap(graph.services) ||\n            !this.isMap(graph.apis) ||\n            !this.isMap(graph.queues) ||\n            !Array.isArray(graph.runtimeEdges) ||\n            !Array.isArray(graph.unresolvedUses) ||\n            !Array.isArray(graph.triggers)\n        ) {\n            throw this.failure(\n                `Unusable saved runtime graph at ${DEFAULT_RUNTIME_GRAPH_PATH}: expected services, apis, queues and runtimeEdges, unresolvedUses, triggers arrays`,\n            );\n        }\n    }\n}\n"]}

package/src/native-actions.d.ts

@@ -0,0 +1,23 @@
+import type { ExecutorContext } from '@nx/devkit';
+import { BuildPolicyResult } from '@webpieces/rules-sdk';
+/** Native owner actions are shared where one existing scan enforces several configured policies. */
+export declare class NativeAction {
+    readonly name: string;
+    readonly scope: 'workspace' | 'projects';
+    readonly execute: (context: ExecutorContext) => Promise<BuildPolicyResult>;
+    constructor(name: string, scope: 'workspace' | 'projects', execute: (context: ExecutorContext) => Promise<BuildPolicyResult>);
+}
+/** Metadata holds lazy imports only; importing the pack never imports an executor or the Nx runtime. */
+export declare class NativeActions {
+    readonly fileCycles: NativeAction;
+    readonly runtime: NativeAction;
+    readonly wiring: NativeAction;
+    readonly design: NativeAction;
+    readonly architecture: NativeAction;
+    readonly cycles: NativeAction;
+    readonly packageJson: NativeAction;
+    readonly versions: NativeAction;
+    readonly eslintSync: NativeAction;
+    readonly tsInSrc: NativeAction;
+    readonly graphPolicies: NativeAction;
+}

package/src/native-actions.js

@@ -0,0 +1,69 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.NativeActions = exports.NativeAction = void 0;
+const rules_sdk_1 = require("@webpieces/rules-sdk");
+/** Native owner actions are shared where one existing scan enforces several configured policies. */
+class NativeAction {
+    name;
+    scope;
+    execute;
+    constructor(name, scope, execute) {
+        this.name = name;
+        this.scope = scope;
+        this.execute = execute;
+    }
+}
+exports.NativeAction = NativeAction;
+/** Metadata holds lazy imports only; importing the pack never imports an executor or the Nx runtime. */
+class NativeActions {
+    fileCycles = new NativeAction('file-cycles', 'projects', async (context) => (await Promise.resolve().then(() => __importStar(require('./executors/validate-no-file-import-cycles/executor')))).default({}, context));
+    runtime = new NativeAction('runtime', 'workspace', async (context) => (await Promise.resolve().then(() => __importStar(require('./executors/validate-runtime-architecture/executor')))).default({}, context));
+    wiring = new NativeAction('wiring', 'workspace', async (context) => (await Promise.resolve().then(() => __importStar(require('./executors/validate-nx-wiring/executor')))).default({}, context));
+    design = new NativeAction('design', 'projects', async (context) => (await Promise.resolve().then(() => __importStar(require('./executors/di-graph-generate/executor')))).default({}, context));
+    architecture = new NativeAction('architecture', 'workspace', async (context) => (await Promise.resolve().then(() => __importStar(require('./executors/validate-architecture-unchanged/executor')))).default({}, context));
+    cycles = new NativeAction('cycles', 'workspace', async (context) => (await Promise.resolve().then(() => __importStar(require('./executors/validate-no-architecture-cycles/executor')))).default({}, context));
+    packageJson = new NativeAction('package-json', 'workspace', async (context) => (await Promise.resolve().then(() => __importStar(require('./executors/validate-packagejson/executor')))).default({}, context));
+    versions = new NativeAction('versions', 'workspace', async (context) => (await Promise.resolve().then(() => __importStar(require('./executors/validate-versions-locked/executor')))).default({}, context));
+    eslintSync = new NativeAction('eslint-sync', 'workspace', async (context) => (await Promise.resolve().then(() => __importStar(require('./executors/validate-eslint-sync/executor')))).default({}, context));
+    tsInSrc = new NativeAction('ts-in-src', 'workspace', async (context) => (await Promise.resolve().then(() => __importStar(require('./executors/validate-ts-in-src/executor')))).default({}, context));
+    graphPolicies = new NativeAction('graph-policies', 'workspace', async (context) => {
+        const graph = await Promise.resolve().then(() => __importStar(require('./executors/validate-architecture-unchanged/executor')));
+        await new graph.CurrentGraphBuilder().build(context.root);
+        return new rules_sdk_1.BuildPolicyResult(true);
+    });
+}
+exports.NativeActions = NativeActions;
+//# sourceMappingURL=native-actions.js.map

package/src/native-actions.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"native-actions.js","sourceRoot":"","sources":["../../../../../packages/tooling/nx-webpieces-rules/src/native-actions.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AACA,oDAAyD;AAEzD,oGAAoG;AACpG,MAAa,YAAY;IAER;IACA;IACA;IAHb,YACa,IAAY,EACZ,KAA+B,EAC/B,OAAiE;QAFjE,SAAI,GAAJ,IAAI,CAAQ;QACZ,UAAK,GAAL,KAAK,CAA0B;QAC/B,YAAO,GAAP,OAAO,CAA0D;IAC3E,CAAC;CACP;AAND,oCAMC;AAED,wGAAwG;AACxG,MAAa,aAAa;IACb,UAAU,GAAG,IAAI,YAAY,CAClC,aAAa,EACb,UAAU,EACV,KAAK,EAAE,OAAwB,EAAE,EAAE,CAC/B,CAAC,wDAAa,qDAAqD,GAAC,CAAC,CAAC,OAAO,CACzE,EAAE,EACF,OAAO,CACV,CACR,CAAC;IACO,OAAO,GAAG,IAAI,YAAY,CAAC,SAAS,EAAE,WAAW,EAAE,KAAK,EAAE,OAAwB,EAAE,EAAE,CAC3F,CAAC,wDAAa,oDAAoD,GAAC,CAAC,CAAC,OAAO,CAAC,EAAE,EAAE,OAAO,CAAC,CAC5F,CAAC;IACO,MAAM,GAAG,IAAI,YAAY,CAAC,QAAQ,EAAE,WAAW,EAAE,KAAK,EAAE,OAAwB,EAAE,EAAE,CACzF,CAAC,wDAAa,yCAAyC,GAAC,CAAC,CAAC,OAAO,CAAC,EAAE,EAAE,OAAO,CAAC,CACjF,CAAC;IACO,MAAM,GAAG,IAAI,YAAY,CAAC,QAAQ,EAAE,UAAU,EAAE,KAAK,EAAE,OAAwB,EAAE,EAAE,CACxF,CAAC,wDAAa,wCAAwC,GAAC,CAAC,CAAC,OAAO,CAAC,EAAE,EAAE,OAAO,CAAC,CAChF,CAAC;IACO,YAAY,GAAG,IAAI,YAAY,CACpC,cAAc,EACd,WAAW,EACX,KAAK,EAAE,OAAwB,EAAE,EAAE,CAC/B,CAAC,wDAAa,sDAAsD,GAAC,CAAC,CAAC,OAAO,CAC1E,EAAE,EACF,OAAO,CACV,CACR,CAAC;IACO,MAAM,GAAG,IAAI,YAAY,CAAC,QAAQ,EAAE,WAAW,EAAE,KAAK,EAAE,OAAwB,EAAE,EAAE,CACzF,CAAC,wDAAa,sDAAsD,GAAC,CAAC,CAAC,OAAO,CAAC,EAAE,EAAE,OAAO,CAAC,CAC9F,CAAC;IACO,WAAW,GAAG,IAAI,YAAY,CACnC,cAAc,EACd,WAAW,EACX,KAAK,EAAE,OAAwB,EAAE,EAAE,CAC/B,CAAC,wDAAa,2CAA2C,GAAC,CAAC,CAAC,OAAO,CAAC,EAAE,EAAE,OAAO,CAAC,CACvF,CAAC;IACO,QAAQ,GAAG,IAAI,YAAY,CAChC,UAAU,EACV,WAAW,EACX,KAAK,EAAE,OAAwB,EAAE,EAAE,CAC/B,CAAC,wDAAa,+CAA+C,GAAC,CAAC,CAAC,OAAO,CAAC,EAAE,EAAE,OAAO,CAAC,CAC3F,CAAC;IACO,UAAU,GAAG,IAAI,YAAY,CAClC,aAAa,EACb,WAAW,EACX,KAAK,EAAE,OAAwB,EAAE,EAAE,CAC/B,CAAC,wDAAa,2CAA2C,GAAC,CAAC,CAAC,OAAO,CAAC,EAAE,EAAE,OAAO,CAAC,CACvF,CAAC;IACO,OAAO,GAAG,IAAI,YAAY,CAC/B,WAAW,EACX,WAAW,EACX,KAAK,EAAE,OAAwB,EAAE,EAAE,CAC/B,CAAC,wDAAa,yCAAyC,GAAC,CAAC,CAAC,OAAO,CAAC,EAAE,EAAE,OAAO,CAAC,CACrF,CAAC;IACO,aAAa,GAAG,IAAI,YAAY,CACrC,gBAAgB,EAChB,WAAW,EACX,KAAK,EAAE,OAAwB,EAAE,EAAE;QAC/B,MAAM,KAAK,GAAG,wDAAa,sDAAsD,GAAC,CAAC;QACnF,MAAM,IAAI,KAAK,CAAC,mBAAmB,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QAC1D,OAAO,IAAI,6BAAiB,CAAC,IAAI,CAAC,CAAC;IACvC,CAAC,CACJ,CAAC;CACL;AAhED,sCAgEC","sourcesContent":["import type { ExecutorContext } from '@nx/devkit';\nimport { BuildPolicyResult } from '@webpieces/rules-sdk';\n\n/** Native owner actions are shared where one existing scan enforces several configured policies. */\nexport class NativeAction {\n    constructor(\n        readonly name: string,\n        readonly scope: 'workspace' | 'projects',\n        readonly execute: (context: ExecutorContext) => Promise<BuildPolicyResult>,\n    ) {}\n}\n\n/** Metadata holds lazy imports only; importing the pack never imports an executor or the Nx runtime. */\nexport class NativeActions {\n    readonly fileCycles = new NativeAction(\n        'file-cycles',\n        'projects',\n        async (context: ExecutorContext) =>\n            (await import('./executors/validate-no-file-import-cycles/executor')).default(\n                {},\n                context,\n            ),\n    );\n    readonly runtime = new NativeAction('runtime', 'workspace', async (context: ExecutorContext) =>\n        (await import('./executors/validate-runtime-architecture/executor')).default({}, context),\n    );\n    readonly wiring = new NativeAction('wiring', 'workspace', async (context: ExecutorContext) =>\n        (await import('./executors/validate-nx-wiring/executor')).default({}, context),\n    );\n    readonly design = new NativeAction('design', 'projects', async (context: ExecutorContext) =>\n        (await import('./executors/di-graph-generate/executor')).default({}, context),\n    );\n    readonly architecture = new NativeAction(\n        'architecture',\n        'workspace',\n        async (context: ExecutorContext) =>\n            (await import('./executors/validate-architecture-unchanged/executor')).default(\n                {},\n                context,\n            ),\n    );\n    readonly cycles = new NativeAction('cycles', 'workspace', async (context: ExecutorContext) =>\n        (await import('./executors/validate-no-architecture-cycles/executor')).default({}, context),\n    );\n    readonly packageJson = new NativeAction(\n        'package-json',\n        'workspace',\n        async (context: ExecutorContext) =>\n            (await import('./executors/validate-packagejson/executor')).default({}, context),\n    );\n    readonly versions = new NativeAction(\n        'versions',\n        'workspace',\n        async (context: ExecutorContext) =>\n            (await import('./executors/validate-versions-locked/executor')).default({}, context),\n    );\n    readonly eslintSync = new NativeAction(\n        'eslint-sync',\n        'workspace',\n        async (context: ExecutorContext) =>\n            (await import('./executors/validate-eslint-sync/executor')).default({}, context),\n    );\n    readonly tsInSrc = new NativeAction(\n        'ts-in-src',\n        'workspace',\n        async (context: ExecutorContext) =>\n            (await import('./executors/validate-ts-in-src/executor')).default({}, context),\n    );\n    readonly graphPolicies = new NativeAction(\n        'graph-policies',\n        'workspace',\n        async (context: ExecutorContext) => {\n            const graph = await import('./executors/validate-architecture-unchanged/executor');\n            await new graph.CurrentGraphBuilder().build(context.root);\n            return new BuildPolicyResult(true);\n        },\n    );\n}\n"]}

package/src/nx-policy-registry.d.ts

@@ -0,0 +1,8 @@
+import { OwnedRuleDefinition } from '@webpieces/rules-sdk';
+import { NativeAction } from './native-actions';
+export declare class NxPolicy {
+    readonly definition: OwnedRuleDefinition;
+    readonly action: NativeAction;
+    constructor(definition: OwnedRuleDefinition, action: NativeAction);
+}
+export declare const NX_POLICIES: readonly NxPolicy[];

package/src/nx-policy-registry.js

@@ -0,0 +1,40 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.NX_POLICIES = exports.NxPolicy = void 0;
+const rule_help_1 = require("./rule-help");
+const rule_settings_1 = require("./rule-settings");
+const rules_sdk_1 = require("@webpieces/rules-sdk");
+const rule_configs_1 = require("./configs/rule-configs");
+const no_root_union_config_1 = require("./configs/no-root-union-config");
+const api_doc_rules_config_1 = require("./configs/api-doc-rules-config");
+const tag_truth_configs_1 = require("./configs/tag-truth-configs");
+const native_actions_1 = require("./native-actions");
+class NxPolicy {
+    definition;
+    action;
+    constructor(definition, action) {
+        this.definition = definition;
+        this.action = action;
+    }
+}
+exports.NxPolicy = NxPolicy;
+const actions = new native_actions_1.NativeActions();
+exports.NX_POLICIES = [
+    new NxPolicy(new rules_sdk_1.OwnedRuleDefinition('no-file-import-cycles', rule_configs_1.NoFileImportCyclesConfig.SCHEMA, rules_sdk_1.RULE_SCHEMA_API_VERSION, rule_settings_1.optionalTuning['no-file-import-cycles'], rule_settings_1.recommendedSeeds['no-file-import-cycles'], 'rules', rule_help_1.ruleHelp['no-file-import-cycles']), actions.fileCycles),
+    new NxPolicy(new rules_sdk_1.OwnedRuleDefinition('runtime-architecture', rule_configs_1.RuntimeArchitectureConfig.SCHEMA, rules_sdk_1.RULE_SCHEMA_API_VERSION, rule_settings_1.optionalTuning['runtime-architecture'], rule_settings_1.recommendedSeeds['runtime-architecture'], 'rules', rule_help_1.ruleHelp['runtime-architecture']), actions.runtime),
+    new NxPolicy(new rules_sdk_1.OwnedRuleDefinition('nx-wiring', rule_configs_1.NxWiringConfig.SCHEMA, rules_sdk_1.RULE_SCHEMA_API_VERSION, rule_settings_1.optionalTuning['nx-wiring'], rule_settings_1.recommendedSeeds['nx-wiring'], 'rules', rule_help_1.ruleHelp['nx-wiring']), actions.wiring),
+    new NxPolicy(new rules_sdk_1.OwnedRuleDefinition('di-graph', rule_configs_1.DiGraphConfig.SCHEMA, rules_sdk_1.RULE_SCHEMA_API_VERSION, rule_settings_1.optionalTuning['di-graph'], rule_settings_1.recommendedSeeds['di-graph'], 'rules', rule_help_1.ruleHelp['di-graph']), actions.design),
+    new NxPolicy(new rules_sdk_1.OwnedRuleDefinition('missing-design-annotation', rule_configs_1.MissingDesignAnnotationConfig.SCHEMA, rules_sdk_1.RULE_SCHEMA_API_VERSION, rule_settings_1.optionalTuning['missing-design-annotation'], rule_settings_1.recommendedSeeds['missing-design-annotation'], 'rules', rule_help_1.ruleHelp['missing-design-annotation']), actions.design),
+    new NxPolicy(new rules_sdk_1.OwnedRuleDefinition('validate-architecture-unchanged', rule_configs_1.ValidateArchitectureUnchangedConfig.SCHEMA, rules_sdk_1.RULE_SCHEMA_API_VERSION, rule_settings_1.optionalTuning['validate-architecture-unchanged'], rule_settings_1.recommendedSeeds['validate-architecture-unchanged'], 'rules', rule_help_1.ruleHelp['validate-architecture-unchanged']), actions.architecture),
+    new NxPolicy(new rules_sdk_1.OwnedRuleDefinition('validate-no-architecture-cycles', rule_configs_1.ValidateNoArchitectureCyclesConfig.SCHEMA, rules_sdk_1.RULE_SCHEMA_API_VERSION, rule_settings_1.optionalTuning['validate-no-architecture-cycles'], rule_settings_1.recommendedSeeds['validate-no-architecture-cycles'], 'rules', rule_help_1.ruleHelp['validate-no-architecture-cycles']), actions.cycles),
+    new NxPolicy(new rules_sdk_1.OwnedRuleDefinition('validate-packagejson', rule_configs_1.ValidatePackageJsonConfig.SCHEMA, rules_sdk_1.RULE_SCHEMA_API_VERSION, rule_settings_1.optionalTuning['validate-packagejson'], rule_settings_1.recommendedSeeds['validate-packagejson'], 'rules', rule_help_1.ruleHelp['validate-packagejson']), actions.packageJson),
+    new NxPolicy(new rules_sdk_1.OwnedRuleDefinition('validate-versions-locked', rule_configs_1.ValidateVersionsLockedConfig.SCHEMA, rules_sdk_1.RULE_SCHEMA_API_VERSION, rule_settings_1.optionalTuning['validate-versions-locked'], rule_settings_1.recommendedSeeds['validate-versions-locked'], 'rules', rule_help_1.ruleHelp['validate-versions-locked']), actions.versions),
+    new NxPolicy(new rules_sdk_1.OwnedRuleDefinition('validate-eslint-sync', rule_configs_1.ValidateEslintSyncConfig.SCHEMA, rules_sdk_1.RULE_SCHEMA_API_VERSION, rule_settings_1.optionalTuning['validate-eslint-sync'], rule_settings_1.recommendedSeeds['validate-eslint-sync'], 'rules', rule_help_1.ruleHelp['validate-eslint-sync']), actions.eslintSync),
+    new NxPolicy(new rules_sdk_1.OwnedRuleDefinition('no-root-union-api-type', no_root_union_config_1.NoRootUnionApiTypeConfig.SCHEMA, rules_sdk_1.RULE_SCHEMA_API_VERSION, rule_settings_1.optionalTuning['no-root-union-api-type'], rule_settings_1.recommendedSeeds['no-root-union-api-type'], 'rules', rule_help_1.ruleHelp['no-root-union-api-type']), actions.graphPolicies),
+    new NxPolicy(new rules_sdk_1.OwnedRuleDefinition('api-rules-for-openapi', api_doc_rules_config_1.ApiRulesForOpenApiConfig.SCHEMA, rules_sdk_1.RULE_SCHEMA_API_VERSION, rule_settings_1.optionalTuning['api-rules-for-openapi'], rule_settings_1.recommendedSeeds['api-rules-for-openapi'], 'rules', rule_help_1.ruleHelp['api-rules-for-openapi']), actions.graphPolicies),
+    new NxPolicy(new rules_sdk_1.OwnedRuleDefinition('api-rules-for-mcp', api_doc_rules_config_1.ApiRulesForMcpConfig.SCHEMA, rules_sdk_1.RULE_SCHEMA_API_VERSION, rule_settings_1.optionalTuning['api-rules-for-mcp'], rule_settings_1.recommendedSeeds['api-rules-for-mcp'], 'rules', rule_help_1.ruleHelp['api-rules-for-mcp']), actions.graphPolicies),
+    new NxPolicy(new rules_sdk_1.OwnedRuleDefinition('api-lib-dependencies', tag_truth_configs_1.ApiLibDependenciesConfig.SCHEMA, rules_sdk_1.RULE_SCHEMA_API_VERSION, rule_settings_1.optionalTuning['api-lib-dependencies'], rule_settings_1.recommendedSeeds['api-lib-dependencies'], 'rules', rule_help_1.ruleHelp['api-lib-dependencies']), actions.graphPolicies),
+    new NxPolicy(new rules_sdk_1.OwnedRuleDefinition('api-lib-path', tag_truth_configs_1.ApiLibPathConfig.SCHEMA, rules_sdk_1.RULE_SCHEMA_API_VERSION, rule_settings_1.optionalTuning['api-lib-path'], rule_settings_1.recommendedSeeds['api-lib-path'], 'rules', rule_help_1.ruleHelp['api-lib-path']), actions.graphPolicies),
+    new NxPolicy(new rules_sdk_1.OwnedRuleDefinition('framework-folder', tag_truth_configs_1.FrameworkFolderConfig.SCHEMA, rules_sdk_1.RULE_SCHEMA_API_VERSION, rule_settings_1.optionalTuning['framework-folder'], rule_settings_1.recommendedSeeds['framework-folder'], 'rules', rule_help_1.ruleHelp['framework-folder']), actions.graphPolicies),
+];
+//# sourceMappingURL=nx-policy-registry.js.map

package/src/nx-policy-registry.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"nx-policy-registry.js","sourceRoot":"","sources":["../../../../../packages/tooling/nx-webpieces-rules/src/nx-policy-registry.ts"],"names":[],"mappings":";;;AAAA,2CAAuC;AACvC,mDAAmE;AACnE,oDAAoF;AACpF,yDAWgC;AAChC,yEAA0E;AAC1E,yEAAgG;AAChG,mEAIqC;AACrC,qDAA+D;AAE/D,MAAa,QAAQ;IAEJ;IACA;IAFb,YACa,UAA+B,EAC/B,MAAoB;QADpB,eAAU,GAAV,UAAU,CAAqB;QAC/B,WAAM,GAAN,MAAM,CAAc;IAC9B,CAAC;CACP;AALD,4BAKC;AAED,MAAM,OAAO,GAAG,IAAI,8BAAa,EAAE,CAAC;AACvB,QAAA,WAAW,GAAwB;IAC5C,IAAI,QAAQ,CACR,IAAI,+BAAmB,CACnB,uBAAuB,EACvB,uCAAwB,CAAC,MAAM,EAC/B,mCAAuB,EACvB,8BAAc,CAAC,uBAAuB,CAAC,EACvC,gCAAgB,CAAC,uBAAuB,CAAC,EACzC,OAAO,EACP,oBAAQ,CAAC,uBAAuB,CAAC,CACpC,EACD,OAAO,CAAC,UAAU,CACrB;IACD,IAAI,QAAQ,CACR,IAAI,+BAAmB,CACnB,sBAAsB,EACtB,wCAAyB,CAAC,MAAM,EAChC,mCAAuB,EACvB,8BAAc,CAAC,sBAAsB,CAAC,EACtC,gCAAgB,CAAC,sBAAsB,CAAC,EACxC,OAAO,EACP,oBAAQ,CAAC,sBAAsB,CAAC,CACnC,EACD,OAAO,CAAC,OAAO,CAClB;IACD,IAAI,QAAQ,CACR,IAAI,+BAAmB,CACnB,WAAW,EACX,6BAAc,CAAC,MAAM,EACrB,mCAAuB,EACvB,8BAAc,CAAC,WAAW,CAAC,EAC3B,gCAAgB,CAAC,WAAW,CAAC,EAC7B,OAAO,EACP,oBAAQ,CAAC,WAAW,CAAC,CACxB,EACD,OAAO,CAAC,MAAM,CACjB;IACD,IAAI,QAAQ,CACR,IAAI,+BAAmB,CACnB,UAAU,EACV,4BAAa,CAAC,MAAM,EACpB,mCAAuB,EACvB,8BAAc,CAAC,UAAU,CAAC,EAC1B,gCAAgB,CAAC,UAAU,CAAC,EAC5B,OAAO,EACP,oBAAQ,CAAC,UAAU,CAAC,CACvB,EACD,OAAO,CAAC,MAAM,CACjB;IACD,IAAI,QAAQ,CACR,IAAI,+BAAmB,CACnB,2BAA2B,EAC3B,4CAA6B,CAAC,MAAM,EACpC,mCAAuB,EACvB,8BAAc,CAAC,2BAA2B,CAAC,EAC3C,gCAAgB,CAAC,2BAA2B,CAAC,EAC7C,OAAO,EACP,oBAAQ,CAAC,2BAA2B,CAAC,CACxC,EACD,OAAO,CAAC,MAAM,CACjB;IACD,IAAI,QAAQ,CACR,IAAI,+BAAmB,CACnB,iCAAiC,EACjC,kDAAmC,CAAC,MAAM,EAC1C,mCAAuB,EACvB,8BAAc,CAAC,iCAAiC,CAAC,EACjD,gCAAgB,CAAC,iCAAiC,CAAC,EACnD,OAAO,EACP,oBAAQ,CAAC,iCAAiC,CAAC,CAC9C,EACD,OAAO,CAAC,YAAY,CACvB;IACD,IAAI,QAAQ,CACR,IAAI,+BAAmB,CACnB,iCAAiC,EACjC,iDAAkC,CAAC,MAAM,EACzC,mCAAuB,EACvB,8BAAc,CAAC,iCAAiC,CAAC,EACjD,gCAAgB,CAAC,iCAAiC,CAAC,EACnD,OAAO,EACP,oBAAQ,CAAC,iCAAiC,CAAC,CAC9C,EACD,OAAO,CAAC,MAAM,CACjB;IACD,IAAI,QAAQ,CACR,IAAI,+BAAmB,CACnB,sBAAsB,EACtB,wCAAyB,CAAC,MAAM,EAChC,mCAAuB,EACvB,8BAAc,CAAC,sBAAsB,CAAC,EACtC,gCAAgB,CAAC,sBAAsB,CAAC,EACxC,OAAO,EACP,oBAAQ,CAAC,sBAAsB,CAAC,CACnC,EACD,OAAO,CAAC,WAAW,CACtB;IACD,IAAI,QAAQ,CACR,IAAI,+BAAmB,CACnB,0BAA0B,EAC1B,2CAA4B,CAAC,MAAM,EACnC,mCAAuB,EACvB,8BAAc,CAAC,0BAA0B,CAAC,EAC1C,gCAAgB,CAAC,0BAA0B,CAAC,EAC5C,OAAO,EACP,oBAAQ,CAAC,0BAA0B,CAAC,CACvC,EACD,OAAO,CAAC,QAAQ,CACnB;IACD,IAAI,QAAQ,CACR,IAAI,+BAAmB,CACnB,sBAAsB,EACtB,uCAAwB,CAAC,MAAM,EAC/B,mCAAuB,EACvB,8BAAc,CAAC,sBAAsB,CAAC,EACtC,gCAAgB,CAAC,sBAAsB,CAAC,EACxC,OAAO,EACP,oBAAQ,CAAC,sBAAsB,CAAC,CACnC,EACD,OAAO,CAAC,UAAU,CACrB;IACD,IAAI,QAAQ,CACR,IAAI,+BAAmB,CACnB,wBAAwB,EACxB,+CAAwB,CAAC,MAAM,EAC/B,mCAAuB,EACvB,8BAAc,CAAC,wBAAwB,CAAC,EACxC,gCAAgB,CAAC,wBAAwB,CAAC,EAC1C,OAAO,EACP,oBAAQ,CAAC,wBAAwB,CAAC,CACrC,EACD,OAAO,CAAC,aAAa,CACxB;IACD,IAAI,QAAQ,CACR,IAAI,+BAAmB,CACnB,uBAAuB,EACvB,+CAAwB,CAAC,MAAM,EAC/B,mCAAuB,EACvB,8BAAc,CAAC,uBAAuB,CAAC,EACvC,gCAAgB,CAAC,uBAAuB,CAAC,EACzC,OAAO,EACP,oBAAQ,CAAC,uBAAuB,CAAC,CACpC,EACD,OAAO,CAAC,aAAa,CACxB;IACD,IAAI,QAAQ,CACR,IAAI,+BAAmB,CACnB,mBAAmB,EACnB,2CAAoB,CAAC,MAAM,EAC3B,mCAAuB,EACvB,8BAAc,CAAC,mBAAmB,CAAC,EACnC,gCAAgB,CAAC,mBAAmB,CAAC,EACrC,OAAO,EACP,oBAAQ,CAAC,mBAAmB,CAAC,CAChC,EACD,OAAO,CAAC,aAAa,CACxB;IACD,IAAI,QAAQ,CACR,IAAI,+BAAmB,CACnB,sBAAsB,EACtB,4CAAwB,CAAC,MAAM,EAC/B,mCAAuB,EACvB,8BAAc,CAAC,sBAAsB,CAAC,EACtC,gCAAgB,CAAC,sBAAsB,CAAC,EACxC,OAAO,EACP,oBAAQ,CAAC,sBAAsB,CAAC,CACnC,EACD,OAAO,CAAC,aAAa,CACxB;IACD,IAAI,QAAQ,CACR,IAAI,+BAAmB,CACnB,cAAc,EACd,oCAAgB,CAAC,MAAM,EACvB,mCAAuB,EACvB,8BAAc,CAAC,cAAc,CAAC,EAC9B,gCAAgB,CAAC,cAAc,CAAC,EAChC,OAAO,EACP,oBAAQ,CAAC,cAAc,CAAC,CAC3B,EACD,OAAO,CAAC,aAAa,CACxB;IACD,IAAI,QAAQ,CACR,IAAI,+BAAmB,CACnB,kBAAkB,EAClB,yCAAqB,CAAC,MAAM,EAC5B,mCAAuB,EACvB,8BAAc,CAAC,kBAAkB,CAAC,EAClC,gCAAgB,CAAC,kBAAkB,CAAC,EACpC,OAAO,EACP,oBAAQ,CAAC,kBAAkB,CAAC,CAC/B,EACD,OAAO,CAAC,aAAa,CACxB;CACJ,CAAC","sourcesContent":["import { ruleHelp } from './rule-help';\nimport { optionalTuning, recommendedSeeds } from './rule-settings';\nimport { OwnedRuleDefinition, RULE_SCHEMA_API_VERSION } from '@webpieces/rules-sdk';\nimport {\n    NoFileImportCyclesConfig,\n    RuntimeArchitectureConfig,\n    NxWiringConfig,\n    DiGraphConfig,\n    MissingDesignAnnotationConfig,\n    ValidateArchitectureUnchangedConfig,\n    ValidateNoArchitectureCyclesConfig,\n    ValidatePackageJsonConfig,\n    ValidateVersionsLockedConfig,\n    ValidateEslintSyncConfig,\n} from './configs/rule-configs';\nimport { NoRootUnionApiTypeConfig } from './configs/no-root-union-config';\nimport { ApiRulesForOpenApiConfig, ApiRulesForMcpConfig } from './configs/api-doc-rules-config';\nimport {\n    ApiLibDependenciesConfig,\n    ApiLibPathConfig,\n    FrameworkFolderConfig,\n} from './configs/tag-truth-configs';\nimport { NativeActions, NativeAction } from './native-actions';\n\nexport class NxPolicy {\n    constructor(\n        readonly definition: OwnedRuleDefinition,\n        readonly action: NativeAction,\n    ) {}\n}\n\nconst actions = new NativeActions();\nexport const NX_POLICIES: readonly NxPolicy[] = [\n    new NxPolicy(\n        new OwnedRuleDefinition(\n            'no-file-import-cycles',\n            NoFileImportCyclesConfig.SCHEMA,\n            RULE_SCHEMA_API_VERSION,\n            optionalTuning['no-file-import-cycles'],\n            recommendedSeeds['no-file-import-cycles'],\n            'rules',\n            ruleHelp['no-file-import-cycles'],\n        ),\n        actions.fileCycles,\n    ),\n    new NxPolicy(\n        new OwnedRuleDefinition(\n            'runtime-architecture',\n            RuntimeArchitectureConfig.SCHEMA,\n            RULE_SCHEMA_API_VERSION,\n            optionalTuning['runtime-architecture'],\n            recommendedSeeds['runtime-architecture'],\n            'rules',\n            ruleHelp['runtime-architecture'],\n        ),\n        actions.runtime,\n    ),\n    new NxPolicy(\n        new OwnedRuleDefinition(\n            'nx-wiring',\n            NxWiringConfig.SCHEMA,\n            RULE_SCHEMA_API_VERSION,\n            optionalTuning['nx-wiring'],\n            recommendedSeeds['nx-wiring'],\n            'rules',\n            ruleHelp['nx-wiring'],\n        ),\n        actions.wiring,\n    ),\n    new NxPolicy(\n        new OwnedRuleDefinition(\n            'di-graph',\n            DiGraphConfig.SCHEMA,\n            RULE_SCHEMA_API_VERSION,\n            optionalTuning['di-graph'],\n            recommendedSeeds['di-graph'],\n            'rules',\n            ruleHelp['di-graph'],\n        ),\n        actions.design,\n    ),\n    new NxPolicy(\n        new OwnedRuleDefinition(\n            'missing-design-annotation',\n            MissingDesignAnnotationConfig.SCHEMA,\n            RULE_SCHEMA_API_VERSION,\n            optionalTuning['missing-design-annotation'],\n            recommendedSeeds['missing-design-annotation'],\n            'rules',\n            ruleHelp['missing-design-annotation'],\n        ),\n        actions.design,\n    ),\n    new NxPolicy(\n        new OwnedRuleDefinition(\n            'validate-architecture-unchanged',\n            ValidateArchitectureUnchangedConfig.SCHEMA,\n            RULE_SCHEMA_API_VERSION,\n            optionalTuning['validate-architecture-unchanged'],\n            recommendedSeeds['validate-architecture-unchanged'],\n            'rules',\n            ruleHelp['validate-architecture-unchanged'],\n        ),\n        actions.architecture,\n    ),\n    new NxPolicy(\n        new OwnedRuleDefinition(\n            'validate-no-architecture-cycles',\n            ValidateNoArchitectureCyclesConfig.SCHEMA,\n            RULE_SCHEMA_API_VERSION,\n            optionalTuning['validate-no-architecture-cycles'],\n            recommendedSeeds['validate-no-architecture-cycles'],\n            'rules',\n            ruleHelp['validate-no-architecture-cycles'],\n        ),\n        actions.cycles,\n    ),\n    new NxPolicy(\n        new OwnedRuleDefinition(\n            'validate-packagejson',\n            ValidatePackageJsonConfig.SCHEMA,\n            RULE_SCHEMA_API_VERSION,\n            optionalTuning['validate-packagejson'],\n            recommendedSeeds['validate-packagejson'],\n            'rules',\n            ruleHelp['validate-packagejson'],\n        ),\n        actions.packageJson,\n    ),\n    new NxPolicy(\n        new OwnedRuleDefinition(\n            'validate-versions-locked',\n            ValidateVersionsLockedConfig.SCHEMA,\n            RULE_SCHEMA_API_VERSION,\n            optionalTuning['validate-versions-locked'],\n            recommendedSeeds['validate-versions-locked'],\n            'rules',\n            ruleHelp['validate-versions-locked'],\n        ),\n        actions.versions,\n    ),\n    new NxPolicy(\n        new OwnedRuleDefinition(\n            'validate-eslint-sync',\n            ValidateEslintSyncConfig.SCHEMA,\n            RULE_SCHEMA_API_VERSION,\n            optionalTuning['validate-eslint-sync'],\n            recommendedSeeds['validate-eslint-sync'],\n            'rules',\n            ruleHelp['validate-eslint-sync'],\n        ),\n        actions.eslintSync,\n    ),\n    new NxPolicy(\n        new OwnedRuleDefinition(\n            'no-root-union-api-type',\n            NoRootUnionApiTypeConfig.SCHEMA,\n            RULE_SCHEMA_API_VERSION,\n            optionalTuning['no-root-union-api-type'],\n            recommendedSeeds['no-root-union-api-type'],\n            'rules',\n            ruleHelp['no-root-union-api-type'],\n        ),\n        actions.graphPolicies,\n    ),\n    new NxPolicy(\n        new OwnedRuleDefinition(\n            'api-rules-for-openapi',\n            ApiRulesForOpenApiConfig.SCHEMA,\n            RULE_SCHEMA_API_VERSION,\n            optionalTuning['api-rules-for-openapi'],\n            recommendedSeeds['api-rules-for-openapi'],\n            'rules',\n            ruleHelp['api-rules-for-openapi'],\n        ),\n        actions.graphPolicies,\n    ),\n    new NxPolicy(\n        new OwnedRuleDefinition(\n            'api-rules-for-mcp',\n            ApiRulesForMcpConfig.SCHEMA,\n            RULE_SCHEMA_API_VERSION,\n            optionalTuning['api-rules-for-mcp'],\n            recommendedSeeds['api-rules-for-mcp'],\n            'rules',\n            ruleHelp['api-rules-for-mcp'],\n        ),\n        actions.graphPolicies,\n    ),\n    new NxPolicy(\n        new OwnedRuleDefinition(\n            'api-lib-dependencies',\n            ApiLibDependenciesConfig.SCHEMA,\n            RULE_SCHEMA_API_VERSION,\n            optionalTuning['api-lib-dependencies'],\n            recommendedSeeds['api-lib-dependencies'],\n            'rules',\n            ruleHelp['api-lib-dependencies'],\n        ),\n        actions.graphPolicies,\n    ),\n    new NxPolicy(\n        new OwnedRuleDefinition(\n            'api-lib-path',\n            ApiLibPathConfig.SCHEMA,\n            RULE_SCHEMA_API_VERSION,\n            optionalTuning['api-lib-path'],\n            recommendedSeeds['api-lib-path'],\n            'rules',\n            ruleHelp['api-lib-path'],\n        ),\n        actions.graphPolicies,\n    ),\n    new NxPolicy(\n        new OwnedRuleDefinition(\n            'framework-folder',\n            FrameworkFolderConfig.SCHEMA,\n            RULE_SCHEMA_API_VERSION,\n            optionalTuning['framework-folder'],\n            recommendedSeeds['framework-folder'],\n            'rules',\n            ruleHelp['framework-folder'],\n        ),\n        actions.graphPolicies,\n    ),\n];\n"]}

package/src/pack-build-runner.d.ts

@@ -0,0 +1,6 @@
+import { BuildPolicyResult } from '@webpieces/rules-sdk';
+import { LoadedConfig } from '@webpieces/rules-config';
+/** Native checks retain their targets; one generic target runs other declared build providers. */
+export declare class PackBuildRunner {
+    run(root: string, loaded: LoadedConfig): Promise<BuildPolicyResult>;
+}

package/src/pack-build-runner.js

@@ -0,0 +1,46 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.PackBuildRunner = void 0;
+const rules_sdk_1 = require("@webpieces/rules-sdk");
+const rules_config_1 = require("@webpieces/rules-config");
+const toError_1 = require("./toError");
+const rule_pack_1 = require("./rule-pack");
+class BuildActivation extends rules_config_1.AbstractRule {
+}
+/** Native checks retain their targets; one generic target runs other declared build providers. */
+class PackBuildRunner {
+    async run(root, loaded) {
+        const modules = new rules_config_1.RuleRuntimeModules(), loader = new rules_config_1.NodeRuleRuntimeModuleLoader(root);
+        let success = true;
+        const groups = modules
+            .groups(loaded.ruleRegistry, 'build')
+            .filter((group) => group.providerPack !== rule_pack_1.rulePackManifest.packageName);
+        for (const group of groups) {
+            const request = modules.request(root, loaded.rulesConfig, group);
+            const exports = modules.load(group, loaded.ruleRegistry.manifestModules, loader);
+            const checks = await modules.createBuildPolicies(exports, request);
+            for (const check of checks) {
+                const activation = new BuildActivation(request.configs[check.configKey], check.name, check.configKey);
+                if (!activation.shouldRun() || !check.shouldRun())
+                    continue;
+                // eslint-disable-next-line @webpieces/no-unmanaged-exceptions -- isolate checks and preserve human-facing policy failures
+                try {
+                    const result = await check.run(root);
+                    if (!result || result.success !== true)
+                        success = false;
+                    // webpieces-disable no-any-unknown -- external JSON or runtime exports are validated before policy execution
+                }
+                catch (err) {
+                    const error = (0, toError_1.toError)(err);
+                    console.error(error instanceof rules_config_1.RuleFailError
+                        ? (0, rules_config_1.renderRuleFailForHuman)(error)
+                        : `Build policy ${check.name} failed: ${error.message}`);
+                    success = false;
+                }
+            }
+        }
+        return new rules_sdk_1.BuildPolicyResult(success);
+    }
+}
+exports.PackBuildRunner = PackBuildRunner;
+//# sourceMappingURL=pack-build-runner.js.map

package/src/pack-build-runner.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"pack-build-runner.js","sourceRoot":"","sources":["../../../../../packages/tooling/nx-webpieces-rules/src/pack-build-runner.ts"],"names":[],"mappings":";;;AAAA,oDAAuF;AACvF,0DAQiC;AACjC,uCAAoC;AACpC,2CAA+C;AAE/C,MAAM,eAAgB,SAAQ,2BAA4B;CAAG;AAE7D,kGAAkG;AAClG,MAAa,eAAe;IACxB,KAAK,CAAC,GAAG,CAAC,IAAY,EAAE,MAAoB;QACxC,MAAM,OAAO,GAAG,IAAI,iCAAkB,EAAE,EACpC,MAAM,GAAG,IAAI,0CAA2B,CAAC,IAAI,CAAC,CAAC;QACnD,IAAI,OAAO,GAAG,IAAI,CAAC;QACnB,MAAM,MAAM,GAAG,OAAO;aACjB,MAAM,CAAC,MAAM,CAAC,YAAY,EAAE,OAAO,CAAC;aACpC,MAAM,CACH,CAAC,KAA+B,EAAE,EAAE,CAChC,KAAK,CAAC,YAAY,KAAK,4BAAgB,CAAC,WAAW,CAC1D,CAAC;QACN,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;YACzB,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,CAC3B,IAAI,EACJ,MAAM,CAAC,WAA2C,EAClD,KAAK,CACR,CAAC;YACF,MAAM,OAAO,GAAG,OAAO,CAAC,IAAI,CAAC,KAAK,EAAE,MAAM,CAAC,YAAY,CAAC,eAAe,EAAE,MAAM,CAAC,CAAC;YACjF,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,mBAAmB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;YACnE,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;gBACzB,MAAM,UAAU,GAAG,IAAI,eAAe,CAClC,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,SAAS,CAAmB,EAClD,KAAK,CAAC,IAAI,EACV,KAAK,CAAC,SAAS,CAClB,CAAC;gBACF,IAAI,CAAC,UAAU,CAAC,SAAS,EAAE,IAAI,CAAC,KAAK,CAAC,SAAS,EAAE;oBAAE,SAAS;gBAC5D,0HAA0H;gBAC1H,IAAI,CAAC;oBACD,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;oBACrC,IAAI,CAAC,MAAM,IAAI,MAAM,CAAC,OAAO,KAAK,IAAI;wBAAE,OAAO,GAAG,KAAK,CAAC;oBAC5D,6GAA6G;gBAC7G,CAAC;gBAAC,OAAO,GAAY,EAAE,CAAC;oBACpB,MAAM,KAAK,GAAG,IAAA,iBAAO,EAAC,GAAG,CAAC,CAAC;oBAC3B,OAAO,CAAC,KAAK,CACT,KAAK,YAAY,4BAAa;wBAC1B,CAAC,CAAC,IAAA,qCAAsB,EAAC,KAAK,CAAC;wBAC/B,CAAC,CAAC,gBAAgB,KAAK,CAAC,IAAI,YAAY,KAAK,CAAC,OAAO,EAAE,CAC9D,CAAC;oBACF,OAAO,GAAG,KAAK,CAAC;gBACpB,CAAC;YACL,CAAC;QACL,CAAC;QACD,OAAO,IAAI,6BAAiB,CAAC,OAAO,CAAC,CAAC;IAC1C,CAAC;CACJ;AA5CD,0CA4CC","sourcesContent":["import { BaseRuleConfig, ConfigObject, BuildPolicyResult } from '@webpieces/rules-sdk';\nimport {\n    AbstractRule,\n    LoadedConfig,\n    NodeRuleRuntimeModuleLoader,\n    RuleRuntimeModules,\n    RuntimeContributionGroup,\n    renderRuleFailForHuman,\n    RuleFailError,\n} from '@webpieces/rules-config';\nimport { toError } from './toError';\nimport { rulePackManifest } from './rule-pack';\n\nclass BuildActivation extends AbstractRule<BaseRuleConfig> {}\n\n/** Native checks retain their targets; one generic target runs other declared build providers. */\nexport class PackBuildRunner {\n    async run(root: string, loaded: LoadedConfig): Promise<BuildPolicyResult> {\n        const modules = new RuleRuntimeModules(),\n            loader = new NodeRuleRuntimeModuleLoader(root);\n        let success = true;\n        const groups = modules\n            .groups(loaded.ruleRegistry, 'build')\n            .filter(\n                (group: RuntimeContributionGroup) =>\n                    group.providerPack !== rulePackManifest.packageName,\n            );\n        for (const group of groups) {\n            const request = modules.request(\n                root,\n                loaded.rulesConfig as Record<string, ConfigObject>,\n                group,\n            );\n            const exports = modules.load(group, loaded.ruleRegistry.manifestModules, loader);\n            const checks = await modules.createBuildPolicies(exports, request);\n            for (const check of checks) {\n                const activation = new BuildActivation(\n                    request.configs[check.configKey] as BaseRuleConfig,\n                    check.name,\n                    check.configKey,\n                );\n                if (!activation.shouldRun() || !check.shouldRun()) continue;\n                // eslint-disable-next-line @webpieces/no-unmanaged-exceptions -- isolate checks and preserve human-facing policy failures\n                try {\n                    const result = await check.run(root);\n                    if (!result || result.success !== true) success = false;\n                // webpieces-disable no-any-unknown -- external JSON or runtime exports are validated before policy execution\n                } catch (err: unknown) {\n                    const error = toError(err);\n                    console.error(\n                        error instanceof RuleFailError\n                            ? renderRuleFailForHuman(error)\n                            : `Build policy ${check.name} failed: ${error.message}`,\n                    );\n                    success = false;\n                }\n            }\n        }\n        return new BuildPolicyResult(success);\n    }\n}\n"]}

package/src/plugin.js

@@ -177,7 +177,9 @@ function addPerProjectTargets(results, projectFiles, opts, context) {
         processedRoots.add(projectRoot);
         const architectureEnabled = opts.workspace.enabled === true &&
             (0, fs_1.existsSync)((0, path_1.join)(context.workspaceRoot, 'architecture'));
-        const targets = buildPerProjectTargets(isProjectJson, projectRoot, opts, architectureEnabled, isProjectJson ? new generate_targets_1.RawProjectJsonReader().read(context.workspaceRoot, projectFile, projectRoot) : undefined);
+        const targets = buildPerProjectTargets(isProjectJson, projectRoot, opts, architectureEnabled, isProjectJson
+            ? new generate_targets_1.RawProjectJsonReader().read(context.workspaceRoot, projectFile, projectRoot)
+            : undefined);
         if (Object.keys(targets).length === 0)
             continue;
         const result = {
@@ -311,8 +313,8 @@ function createWorkspaceTargetsWithoutPrefix(opts) {
     // ci aggregate so it does not change existing gate behavior — consumers point a required check at it.
     targets['validate-checklist-docs'] = targetFactory.checklistDocs();
     // Use combined validate-code instead of 3 separate targets
-    // Options come from webpieces.config.json at the workspace root
-    // (loaded via @webpieces/rules-config; same source of truth as @webpieces/ai-hook-rules)
+    // Options come from declared owner files' direct policy-ID maps, resolved by
+    // @webpieces/rules-config from the root rulePacks declaration.
     if (validations.validateNewMethods ||
         validations.validateModifiedMethods ||
         validations.validateModifiedFiles) {
@@ -363,11 +365,11 @@ function createGenerateTarget(graphPath) {
 function createVisualizeTargetWithoutPrefix(graphPath) {
     return {
         executor: '@webpieces/nx-webpieces-rules:visualize',
-        dependsOn: ['generate'],
+        cache: false,
         options: { graphPath },
         metadata: {
             technologies: ['nx'],
-            description: 'Generate visual representations of the architecture graph',
+            description: 'View saved architecture without refreshing; refresh: pnpm nx run architecture:generate',
         },
     };
 }
@@ -383,42 +385,6 @@ function createValidateUnchangedTarget(graphPath) {
         },
     };
 }
-function createValidateNewMethodsTarget(maxLines, mode) {
-    return {
-        executor: '@webpieces/nx-webpieces-rules:validate-new-methods',
-        cache: false, // Don't cache - depends on git state
-        inputs: ['default'],
-        options: { max: maxLines, mode },
-        metadata: {
-            technologies: ['nx'],
-            description: `Validate new methods do not exceed ${maxLines} lines (only runs in affected mode)`,
-        },
-    };
-}
-function createValidateModifiedMethodsTarget(maxLines, mode) {
-    return {
-        executor: '@webpieces/nx-webpieces-rules:validate-modified-methods',
-        cache: false, // Don't cache - depends on git state
-        inputs: ['default'],
-        options: { max: maxLines, mode },
-        metadata: {
-            technologies: ['nx'],
-            description: `Validate new and modified methods do not exceed ${maxLines} lines (encourages gradual cleanup)`,
-        },
-    };
-}
-function createValidateModifiedFilesTarget(maxLines, mode) {
-    return {
-        executor: '@webpieces/nx-webpieces-rules:validate-modified-files',
-        cache: false, // Don't cache - depends on git state
-        inputs: ['default'],
-        options: { max: maxLines, mode },
-        metadata: {
-            technologies: ['nx'],
-            description: `Validate modified files do not exceed ${maxLines} lines (encourages keeping files small)`,
-        },
-    };
-}
 function createValidateCompleteTarget(validationTargets) {
     return {
         executor: 'nx:noop',
@@ -493,7 +459,7 @@ function createHelpTarget() {
  *
  * Uses the `validate-no-file-import-cycles` executor (which bundles madge as a
  * dependency) rather than a runtime `npx madge` fetch. The executor reads
- * webpieces.config.json so the gate can be turned on/off (`mode`) and
+ * the declared Nx owner file's direct policy-ID map to turn the gate on/off (`mode`) and
  * time-boxed (`turnOffRuleUntilEpoch`) like every other webpieces rule.
  *
  * Note `projectRoot` is intentionally unused now — the executor derives the