npm - @webpieces/nx-webpieces-rules - Versions diffs - 0.4.847 → 0.4.849 - Mend

@webpieces/nx-webpieces-rules 0.4.847 → 0.4.849

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (96) hide show

package/src/executors/validate-code/schema.json CHANGED Viewed

@@ -1,7 +1,7 @@
 {
     "$schema": "http://json-schema.org/schema",
     "title": "Validate Code Executor",
-    "description": "Combined validation for new methods, modified methods, and file sizes. Configure via targetDefaults in nx.json for runtime options (no cache issues).",
+    "description": "Execute client-declared build contributions. Every policy option comes from its owner config; these flags request an ephemeral single-rule debug run.",
     "type": "object",
     "properties": {
         "rule": {
@@ -14,287 +14,12 @@
         },
         "projects": {
             "type": ["string", "array"],
-            "items": { "type": "string" },
+            "items": {
+                "type": "string"
+            },
             "description": "DEBUG run: judge only files owned by these nx projects, comma-separated, e.g. lang-apis,lang-fsdb-api. Prints a site count per project."
-        },
-        "methodMaxLimit": {
-            "type": "object",
-            "description": "Configuration for method line limit validation",
-            "properties": {
-                "limit": {
-                    "type": "number",
-                    "description": "Maximum lines allowed for methods",
-                    "default": 80
-                },
-                "mode": {
-                    "type": "string",
-                    "description": "OFF: skip validation. NEW_METHODS: only new methods in diff. NEW_AND_MODIFIED_METHODS: new methods + methods with changes. NEW_AND_MODIFIED_FILES: all methods in modified files.",
-                    "default": "NEW_AND_MODIFIED_METHODS"
-                },
-                "disableAllowed": {
-                    "type": "boolean",
-                    "description": "Whether disable comments work. When false, no escape hatch (like old STRICT mode).",
-                    "default": true
-                },
-                "turnOffRuleUntilEpoch": {
-                    "type": "number",
-                    "description": "Epoch seconds. Until this time, skip modified-method validation (new methods still enforced). When expired, normal mode resumes. Omit when not needed."
-                }
-            }
-        },
-        "fileMaxLimit": {
-            "type": "object",
-            "description": "Configuration for file line limit validation",
-            "properties": {
-                "limit": {
-                    "type": "number",
-                    "description": "Maximum lines for modified files",
-                    "default": 900
-                },
-                "mode": {
-                    "type": "string",
-                    "description": "OFF: skip validation. NEW_AND_MODIFIED_FILES: all code in modified files.",
-                    "default": "NEW_AND_MODIFIED_FILES"
-                },
-                "disableAllowed": {
-                    "type": "boolean",
-                    "description": "Whether disable comments work. When false, no escape hatch (like old STRICT mode).",
-                    "default": true
-                },
-                "turnOffRuleUntilEpoch": {
-                    "type": "number",
-                    "description": "Epoch seconds. Until this time, skip modified-file validation. When expired, normal mode resumes. Omit when not needed."
-                }
-            }
-        },
-        "requireReturnType": {
-            "type": "object",
-            "description": "Configuration for return type validation",
-            "properties": {
-                "mode": {
-                    "type": "string",
-                    "description": "OFF: skip return type validation. NEW_METHODS: only new methods in diff. NEW_AND_MODIFIED_METHODS: new methods + methods with changes. NEW_AND_MODIFIED_FILES: all methods in modified files.",
-                    "default": "OFF"
-                },
-                "disableAllowed": {
-                    "type": "boolean",
-                    "description": "Whether disable comments work. When false, no escape hatch.",
-                    "default": true
-                },
-                "turnOffRuleUntilEpoch": {
-                    "type": "number",
-                    "description": "Epoch seconds. Until this time, skip validation entirely. When expired, normal mode resumes. Omit when not needed."
-                }
-            }
-        },
-        "noInlineTypeLiterals": {
-            "type": "object",
-            "description": "Configuration for no-inline-types validation",
-            "properties": {
-                "mode": {
-                    "type": "string",
-                    "description": "OFF: skip validation. NEW_METHODS: only new methods. NEW_AND_MODIFIED_METHODS: new + modified methods. NEW_AND_MODIFIED_FILES: all in modified files. Disallows inline type literals like { x: number } - use named types instead.",
-                    "default": "OFF"
-                },
-                "disableAllowed": {
-                    "type": "boolean",
-                    "description": "Whether disable comments work. When false, no escape hatch.",
-                    "default": true
-                },
-                "turnOffRuleUntilEpoch": {
-                    "type": "number",
-                    "description": "Epoch seconds. Until this time, skip validation entirely. When expired, normal mode resumes. Omit when not needed."
-                }
-            }
-        },
-        "noAnyUnknown": {
-            "type": "object",
-            "description": "Configuration for no-any-unknown validation",
-            "properties": {
-                "mode": {
-                    "type": "string",
-                    "description": "OFF: skip validation. NEW_AND_MODIFIED_CODE: only changed lines in diff. NEW_AND_MODIFIED_FILES: all in modified files. Disallows `any` and `unknown` TypeScript keywords.",
-                    "default": "OFF"
-                },
-                "disableAllowed": {
-                    "type": "boolean",
-                    "description": "Whether disable comments work. When false, no escape hatch.",
-                    "default": true
-                },
-                "turnOffRuleUntilEpoch": {
-                    "type": "number",
-                    "description": "Epoch seconds. Until this time, skip validation entirely. When expired, normal mode resumes. Omit when not needed."
-                }
-            }
-        },
-        "noImplicitAny": {
-            "type": "object",
-            "description": "Configuration for no-implicit-any validation (TS7006/7005/7018/etc via the TypeScript compiler).",
-            "properties": {
-                "mode": {
-                    "type": "string",
-                    "description": "OFF: skip validation. NEW_AND_MODIFIED_CODE: only implicit-any on changed lines. NEW_AND_MODIFIED_FILES: all implicit-any in modified files.",
-                    "default": "OFF"
-                },
-                "disableAllowed": {
-                    "type": "boolean",
-                    "description": "Whether // webpieces-disable no-implicit-any comments work. When false, no escape hatch.",
-                    "default": true
-                },
-                "turnOffRuleUntilEpoch": {
-                    "type": "number",
-                    "description": "Epoch seconds. Until this time, skip validation entirely. When expired, normal mode resumes. Omit when not needed."
-                }
-            }
-        },
-        "validateDtos": {
-            "type": "object",
-            "description": "Validate DTO fields match Prisma Dbo model fields. Prevents AI from inventing field names.",
-            "properties": {
-                "mode": {
-                    "type": "string",
-                    "description": "OFF: skip validation. MODIFIED_CLASS: only validate Dto classes with changed lines. NEW_AND_MODIFIED_FILES: validate all Dtos in modified files.",
-                    "default": "OFF"
-                },
-                "disableAllowed": {
-                    "type": "boolean",
-                    "description": "Whether @deprecated field exemption works. When false, all fields must match.",
-                    "default": true
-                },
-                "prismaSchemaPath": {
-                    "type": "string",
-                    "description": "Relative path from workspace root to schema.prisma"
-                },
-                "dtoSourcePaths": {
-                    "type": "array",
-                    "items": { "type": "string" },
-                    "description": "Array of directories (relative to workspace root) containing Dto files"
-                },
-                "turnOffRuleUntilEpoch": {
-                    "type": "number",
-                    "description": "Epoch seconds. Until this time, skip DTO validation entirely. When expired, normal mode resumes. Omit when not needed."
-                }
-            }
-        },
-        "prismaConverter": {
-            "type": "object",
-            "description": "Validate Prisma converter methods follow scalable patterns: correct Dbo parameter, no async, no standalone functions, Dto creation only in converter directories.",
-            "properties": {
-                "mode": {
-                    "type": "string",
-                    "description": "OFF: skip validation. NEW_AND_MODIFIED_METHODS: validate new/modified methods in converters + changed lines in non-converters. NEW_AND_MODIFIED_FILES: validate all methods in modified files.",
-                    "default": "OFF"
-                },
-                "disableAllowed": {
-                    "type": "boolean",
-                    "description": "Whether disable comments work. When false, no escape hatch.",
-                    "default": true
-                },
-                "schemaPath": {
-                    "type": "string",
-                    "description": "Relative path from workspace root to schema.prisma"
-                },
-                "convertersPaths": {
-                    "type": "array",
-                    "items": { "type": "string" },
-                    "description": "Array of directories (relative to workspace root) containing converter files"
-                },
-                "enforcePaths": {
-                    "type": "array",
-                    "items": { "type": "string" },
-                    "description": "Array of directory prefixes (relative to workspace root) to scope validation to. When set, only files under these paths are checked. When empty/omitted, all changed files are checked."
-                },
-                "turnOffRuleUntilEpoch": {
-                    "type": "number",
-                    "description": "Epoch seconds. Until this time, skip prisma-converter validation entirely. When expired, normal mode resumes. Omit when not needed."
-                }
-            }
-        },
-        "noDestructure": {
-            "type": "object",
-            "description": "Validate no destructuring patterns are used. Destructuring hurts code traceability.",
-            "properties": {
-                "mode": {
-                    "type": "string",
-                    "description": "OFF: skip validation. NEW_AND_MODIFIED_CODE: only changed lines in diff. NEW_AND_MODIFIED_FILES: all in modified files. Disallows destructuring patterns.",
-                    "default": "OFF"
-                },
-                "disableAllowed": {
-                    "type": "boolean",
-                    "description": "Whether disable comments work. When false, no escape hatch.",
-                    "default": true
-                },
-                "turnOffRuleUntilEpoch": {
-                    "type": "number",
-                    "description": "Epoch seconds. Until this time, skip validation entirely. When expired, normal mode resumes. Omit when not needed."
-                }
-            }
-        },
-        "catchErrorPattern": {
-            "type": "object",
-            "description": "Validate catch blocks follow standardized pattern: catch (err: unknown) { const error = toError(err); }",
-            "properties": {
-                "mode": {
-                    "type": "string",
-                    "description": "OFF: skip validation. NEW_AND_MODIFIED_CODE: only catch blocks on changed lines. NEW_AND_MODIFIED_FILES: all catch blocks in modified files.",
-                    "default": "OFF"
-                },
-                "disableAllowed": {
-                    "type": "boolean",
-                    "description": "Whether disable comments work. When false, no escape hatch.",
-                    "default": true
-                },
-                "turnOffRuleUntilEpoch": {
-                    "type": "number",
-                    "description": "Epoch seconds. Until this time, skip validation entirely. When expired, normal mode resumes. Omit when not needed."
-                }
-            }
-        },
-        "noUnmanagedExceptions": {
-            "type": "object",
-            "description": "Validate try/catch blocks are not used outside chokepoints. Exceptions should bubble to filters/globalErrorHandlers.",
-            "properties": {
-                "mode": {
-                    "type": "string",
-                    "description": "OFF: skip validation. NEW_AND_MODIFIED_CODE: only changed lines in diff. NEW_AND_MODIFIED_FILES: all in modified files. Disallows try/catch blocks.",
-                    "default": "OFF"
-                },
-                "disableAllowed": {
-                    "type": "boolean",
-                    "description": "Whether disable comments work. When false, no escape hatch.",
-                    "default": true
-                },
-                "turnOffRuleUntilEpoch": {
-                    "type": "number",
-                    "description": "Epoch seconds. Until this time, skip validation entirely. When expired, normal mode resumes. Omit when not needed."
-                }
-            }
-        },
-        "noDirectApiInResolver": {
-            "type": "object",
-            "description": "Validate resolvers use services (not APIs) and components subscribe to service observables (not route.snapshot.data).",
-            "properties": {
-                "mode": {
-                    "type": "string",
-                    "description": "OFF: skip validation. NEW_AND_MODIFIED_CODE: only changed lines in diff. NEW_AND_MODIFIED_METHODS: violations in new/modified method/route scopes. NEW_AND_MODIFIED_FILES: all in modified files.",
-                    "default": "OFF"
-                },
-                "disableAllowed": {
-                    "type": "boolean",
-                    "description": "Whether disable comments work. When false, no escape hatch.",
-                    "default": true
-                },
-                "turnOffRuleUntilEpoch": {
-                    "type": "number",
-                    "description": "Epoch seconds. Until this time, skip validation entirely. When expired, normal mode resumes. Omit when not needed."
-                },
-                "enforcePaths": {
-                    "type": "array",
-                    "items": { "type": "string" },
-                    "description": "Array of directory prefixes (relative to workspace root) to scope validation to. When set, only files under these paths are checked. When empty/omitted, all changed files are checked."
-                }
-            }
         }
     },
-    "required": []
+    "required": [],
+    "additionalProperties": false
 }

package/src/executors/validate-runtime-architecture/schema.json CHANGED Viewed

@@ -1,7 +1,7 @@
 {
     "$schema": "http://json-schema.org/schema",
     "title": "Validate Runtime Architecture Executor",
-    "description": "Workspace: validate the runtime microservice graph has no disallowed cycles and matches the committed runtime-dependencies.json. Config from webpieces.config.json (runtime-architecture).",
+    "description": "Workspace: validate the runtime microservice graph has no disallowed cycles and matches the committed runtime-dependencies.json. Config from the declared Nx owner file's direct runtime-architecture entry.",
     "type": "object",
     "properties": {},
     "required": []

package/src/lib/api-usage/wire-closure.d.ts CHANGED Viewed

@@ -18,12 +18,12 @@
  * its own package owns its schema, and the generator's fail-closed components check covers it.
  */
 import { DocumentedType } from '@webpieces/api-doc-model';
-import { RequiredTypeSuffixEntry } from "@webpieces/code-rules";
+import { WireSuffixEntry } from './wire-suffix-entry';
 import { ProjectInfo } from '../project-info';
 /** The `required-type-suffix` entries the wire closure enforces; empty when that rule is OFF. */
 export declare class WireClosureRule {
-    readonly suffixEntries: readonly RequiredTypeSuffixEntry[];
-    constructor(suffixEntries: readonly RequiredTypeSuffixEntry[]);
+    readonly suffixEntries: readonly WireSuffixEntry[];
+    constructor(suffixEntries: readonly WireSuffixEntry[]);
     /** Only the role check — what a unit test or a repo with `required-type-suffix` OFF gets. */
     static withoutSuffixes(): WireClosureRule;
     /** `required-type-suffix`'s entries, unless that rule is OFF or time-boxed / branch-scoped off. */

package/src/lib/api-usage/wire-closure.js CHANGED Viewed

@@ -22,8 +22,8 @@ Object.defineProperty(exports, "__esModule", { value: true });
 exports.WireClosure = exports.WireClosureVerdict = exports.WireClosureRule = void 0;
 const tslib_1 = require("tslib");
 const path = tslib_1.__importStar(require("path"));
-const code_rules_1 = require("@webpieces/code-rules");
 const rules_config_1 = require("@webpieces/rules-config");
+const rules_config_2 = require("@webpieces/rules-config");
 const role_resolver_1 = require("../role-resolver");
 const rule_gate_1 = require("../rule-gate");
 const API_LIB_ROLE = 'api-lib';
@@ -41,10 +41,10 @@ class WireClosureRule {
     /** `required-type-suffix`'s entries, unless that rule is OFF or time-boxed / branch-scoped off. */
     // webpieces-disable no-function-outside-class -- static factory of this class
     static fromConfig(workspaceRoot) {
-        if (new rule_gate_1.RuleGate().skipReason(workspaceRoot, "required-type-suffix", true) !== null) {
+        if (new rule_gate_1.RuleGate().skipReason(workspaceRoot, 'required-type-suffix', true) !== null) {
             return WireClosureRule.withoutSuffixes();
         }
-        const rule = (0, rules_config_1.loadAndValidate)(workspaceRoot).resolved.rules.get("required-type-suffix");
+        const rule = (0, rules_config_2.loadAndValidate)(workspaceRoot).resolved.rules.get('required-type-suffix');
         const entries = rule?.options['entries'];
         return new WireClosureRule(Array.isArray(entries) ? entries : []);
     }
@@ -74,7 +74,7 @@ class WireClosure {
     workspaceRoot;
     rule;
     roots;
-    picker = new code_rules_1.SuffixEntryPicker();
+    picker = new rules_config_1.FirstPathMatch();
     constructor(workspaceRoot, projectInfos, rule) {
         this.workspaceRoot = workspaceRoot;
         this.rule = rule;
@@ -102,7 +102,7 @@ class WireClosure {
                 `string-literal union. Retagging '${owner.name}' is not a way out unless it holds only ` +
                 'contracts and wire types (validate-api-lib-tag refuses a role:api-lib with an implementation).'));
         }
-        const governing = this.picker.winner(relFile, this.rule.suffixEntries);
+        const governing = this.picker.winner(relFile, this.rule.suffixEntries.map((entry) => new rules_config_1.PathMatchCandidate(entry.paths, entry)));
         if (governing !== undefined && !this.endsInSuffix(type.name, governing.entry.suffixes)) {
             verdicts.push(new WireClosureVerdict(`'${type.name}' goes over the wire from ${relFile} but does not end in one of ` +
                 `[${governing.entry.suffixes.join(', ')}], which the required-type-suffix entry ` +

package/src/lib/api-usage/wire-closure.js.map CHANGED Viewed

	@@ -1 +1 @@
1	- {"version":3,"file":"wire-closure.js","sourceRoot":"","sources":["../../../../../../../packages/tooling/nx-webpieces-rules/src/lib/api-usage/wire-closure.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;;;;GAkBG;;;;AAEH,mDAA6B;AAE7B,sDAA0D;AAC1D,0DAA0D;AAG1D,oDAA+C;AAC/C,4CAAwC;AAExC,MAAM,YAAY,GAAG,SAAS,CAAC;AAE/B,iGAAiG;AACjG,MAAa,eAAe;IACI;IAA5B,YAA4B,aAAiD;QAAjD,kBAAa,GAAb,aAAa,CAAoC;IAAG,CAAC;IAEjF,6FAA6F;IAC7F,8EAA8E;IAC9E,MAAM,CAAC,eAAe;QAClB,OAAO,IAAI,eAAe,CAAC,EAAE,CAAC,CAAC;IACnC,CAAC;IAED,mGAAmG;IACnG,8EAA8E;IAC9E,MAAM,CAAC,UAAU,CAAC,aAAqB;QACnC,IAAI,IAAI,oBAAQ,EAAE,CAAC,UAAU,CAAC,aAAa,EAAE,sBAAsB,EAAE,IAAI,CAAC,KAAK,IAAI,EAAE,CAAC;YAClF,OAAO,eAAe,CAAC,eAAe,EAAE,CAAC;QAC7C,CAAC;QACD,MAAM,IAAI,GAAG,IAAA,8BAAe,EAAC,aAAa,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,sBAAsB,CAAC,CAAC;QACvF,MAAM,OAAO,GAAG,IAAI,EAAE,OAAO,CAAC,SAAS,CAAC,CAAC;QACzC,OAAO,IAAI,eAAe,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,CAAE,OAAqC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;IACrG,CAAC;CACJ;AAnBD,0CAmBC;AAED,mFAAmF;AACnF,MAAa,kBAAkB;IAEP;IACA;IAFpB,YACoB,IAAY,EACZ,IAAY;QADZ,SAAI,GAAJ,IAAI,CAAQ;QACZ,SAAI,GAAJ,IAAI,CAAQ;IAC7B,CAAC;CACP;AALD,gDAKC;AAED,+EAA+E;AAC/E,MAAM,SAAS;IAES;IACA;IAFpB,YACoB,IAAiB,EACjB,GAAW;QADX,SAAI,GAAJ,IAAI,CAAa;QACjB,QAAG,GAAH,GAAG,CAAQ;IAC5B,CAAC;CACP;AAED,yFAAyF;AACzF,MAAa,WAAW;IAKC;IAEA;IANJ,KAAK,CAAc;IACnB,MAAM,GAAG,IAAI,8BAAiB,EAAE,CAAC;IAElD,YACqB,aAAqB,EACtC,YAAsC,EACrB,IAAqB;QAFrB,kBAAa,GAAb,aAAa,CAAQ;QAErB,SAAI,GAAJ,IAAI,CAAiB;QAEtC,IAAI,CAAC,KAAK,GAAG,CAAC,GAAG,YAAY,CAAC,MAAM,EAAE,CAAC;aAClC,MAAM,CAAC,CAAC,IAAiB,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,KAAK,EAAE,IAAI,IAAI,CAAC,IAAI,KAAK,GAAG,CAAC;aACpE,GAAG,CAAC,CAAC,IAAiB,EAAE,EAAE,CAAC,IAAI,SAAS,CAAC,IAAI,EAAE,IAAI,CAAC,OAAO,CAAC,aAAa,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;YACxF,+DAA+D;aAC9D,IAAI,CAAC,CAAC,CAAY,EAAE,CAAY,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,GAAG,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IAC3E,CAAC;IAED,0EAA0E;IAC1E,KAAK,CAAC,IAAoB,EAAE,OAAe;QACvC,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,aAAa,EAAE,OAAO,CAAC,CAAC;QACtD,IAAI,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,cAAc,CAAC;YAAE,OAAO,EAAE,CAAC;QAC5D,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QAChC,IAAI,KAAK,KAAK,IAAI;YAAE,OAAO,EAAE,CAAC;QAC9B,MAAM,OAAO,GAAG,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,aAAa,EAAE,GAAG,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACjF,MAAM,IAAI,GAAG,IAAA,2BAAW,EAAC,KAAK,CAAC,CAAC,IAAI,IAAI,MAAM,CAAC;QAC/C,MAAM,QAAQ,GAAG,GAAG,IAAI,CAAC,WAAW,IAAI,YAAY,cAAc,KAAK,CAAC,IAAI,WAAW,IAAI,GAAG,CAAC;QAC/F,MAAM,QAAQ,GAAyB,EAAE,CAAC;QAC1C,IAAI,IAAI,KAAK,YAAY,EAAE,CAAC;YACxB,QAAQ,CAAC,IAAI,CAAC,IAAI,kBAAkB,CAChC,IAAI,IAAI,CAAC,IAAI,2CAA2C,QAAQ,gCAAgC;gBAC5F,4EAA4E,EAChF,SAAS,IAAI,CAAC,IAAI,uEAAuE;gBACrF,oCAAoC,KAAK,CAAC,IAAI,0CAA0C;gBACxF,gGAAgG,CACvG,CAAC,CAAC;QACP,CAAC;QACD,MAAM,SAAS,GAAG,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,OAAO,EAAE,IAAI,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;QACvE,IAAI,SAAS,KAAK,SAAS,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,EAAE,SAAS,CAAC,KAAK,CAAC,QAAQ,CAAC,EAAE,CAAC;YACrF,QAAQ,CAAC,IAAI,CAAC,IAAI,kBAAkB,CAChC,IAAI,IAAI,CAAC,IAAI,6BAA6B,OAAO,8BAA8B;gBAC3E,IAAI,SAAS,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,0CAA0C;gBACjF,IAAI,SAAS,CAAC,IAAI,iBAAiB,EACvC,WAAW,IAAI,CAAC,IAAI,sBAAsB,SAAS,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,wBAAwB;gBACjG,qFAAqF,CAC5F,CAAC,CAAC;QACP,CAAC;QACD,OAAO,QAAQ,CAAC;IACpB,CAAC;IAEO,YAAY,CAAC,IAAY,EAAE,QAA2B;QAC1D,OAAO,QAAQ,CAAC,IAAI,CAAC,CAAC,MAAc,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC,MAAM,IAAI,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC;IACnG,CAAC;IAEO,OAAO,CAAC,GAAW;QACvB,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;YAC5B,IAAI,GAAG,KAAK,IAAI,CAAC,GAAG,IAAI,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC;gBAAE,OAAO,IAAI,CAAC,IAAI,CAAC;QAClF,CAAC;QACD,OAAO,IAAI,CAAC;IAChB,CAAC;CACJ;AA1DD,kCA0DC","sourcesContent":["/*\n The WIRE CLOSURE of a contract (#1064, D4): every named type an `@ApiPath` contract reaches must be\n * DECLARED in a `role:api-lib` project, and must end in a suffix that project's `required-type-suffix`\n * entry demands.\n \n Why it lives here and not in the dependency rule: `api-lib-dependencies` only sees project EDGES. A\n * relative-path import into another library, or a DTO library that itself reaches outside, puts a type\n * on the wire without any edge the graph rule could refuse. The extractor already follows every type a\n * contract reaches through the compiler — the same walk `api-rules-for-openapi` / `api-rules-for-mcp`\n * run, with no generate tag needed — so this is one more question asked of each type that walk found.\n \n Every api-lib rule before this one (`required-type-suffix`, `one-enum-spelling-in-api-lib`,\n * `no-utility-types-in-api-lib`, `no-inline-import-in-api-lib`) reads only source files INSIDE the api\n * library. A type declared in another package was, by construction, outside every one of them — which is\n * how `AiProvider` and the `BrowserTelemetry` trio reached the wire from a general library unchecked.\n \n A type declared OUTSIDE the workspace (a published package under node_modules) is not judged here:\n * its own package owns its schema, and the generator's fail-closed components check covers it.\n /\n\nimport as path from 'path';\nimport { DocumentedType } from '@webpieces/api-doc-model';\nimport { SuffixEntryPicker } from '@webpieces/code-rules';\nimport { loadAndValidate } from \"@webpieces/rules-config\";\nimport { RequiredTypeSuffixEntry } from \"@webpieces/code-rules\";\nimport { ProjectInfo } from '../project-info';\nimport { resolveRole } from '../role-resolver';\nimport { RuleGate } from '../rule-gate';\n\nconst API_LIB_ROLE = 'api-lib';\n\n/** The `required-type-suffix` entries the wire closure enforces; empty when that rule is OFF. /\nexport class WireClosureRule {\n constructor(public readonly suffixEntries: readonly RequiredTypeSuffixEntry[]) {}\n\n /* Only the role check — what a unit test or a repo with `required-type-suffix` OFF gets. /\n // webpieces-disable no-function-outside-class -- static factory of this class\n static withoutSuffixes(): WireClosureRule {\n return new WireClosureRule([]);\n }\n\n /* `required-type-suffix`'s entries, unless that rule is OFF or time-boxed / branch-scoped off. /\n // webpieces-disable no-function-outside-class -- static factory of this class\n static fromConfig(workspaceRoot: string): WireClosureRule {\n if (new RuleGate().skipReason(workspaceRoot, \"required-type-suffix\", true) !== null) {\n return WireClosureRule.withoutSuffixes();\n }\n const rule = loadAndValidate(workspaceRoot).resolved.rules.get(\"required-type-suffix\");\n const entries = rule?.options['entries'];\n return new WireClosureRule(Array.isArray(entries) ? (entries as RequiredTypeSuffixEntry[]) : []);\n }\n}\n\n/* ONE wire-closure finding: what is wrong with a reached type, and what to do. /\nexport class WireClosureVerdict {\n constructor(\n public readonly what: string,\n public readonly cure: string,\n ) {}\n}\n\n/* A workspace project root, absolute, for the longest-prefix owner lookup. /\nclass OwnedRoot {\n constructor(\n public readonly info: ProjectInfo,\n public readonly abs: string,\n ) {}\n}\n\n/* Judges every type a contract reaches against the api-lib role and the suffix rule. /\nexport class WireClosure {\n private readonly roots: OwnedRoot[];\n private readonly picker = new SuffixEntryPicker();\n\n constructor(\n private readonly workspaceRoot: string,\n projectInfos: Map<string, ProjectInfo>,\n private readonly rule: WireClosureRule,\n ) {\n this.roots = [...projectInfos.values()]\n .filter((info: ProjectInfo) => info.root !== '' && info.root !== '.')\n .map((info: ProjectInfo) => new OwnedRoot(info, path.resolve(workspaceRoot, info.root)))\n // Longest root first so a nested project wins over its parent.\n .sort((a: OwnedRoot, b: OwnedRoot) => b.abs.length - a.abs.length);\n }\n\n /* Every verdict for ONE reached type, declared in the file `absFile`. */\n judge(type: DocumentedType, absFile: string): WireClosureVerdict[] {\n const abs = path.resolve(this.workspaceRoot, absFile);\n if (abs.split(path.sep).includes('node_modules')) return [];\n const owner = this.ownerOf(abs);\n if (owner === null) return [];\n const relFile = path.relative(this.workspaceRoot, abs).split(path.sep).join('/');\n const role = resolveRole(owner).role ?? 'none';\n const declared = `${type.packageName ?? 'no package'} (project '${owner.name}', role:${role})`;\n const verdicts: WireClosureVerdict[] = [];\n if (role !== API_LIB_ROLE) {\n verdicts.push(new WireClosureVerdict(\n `'${type.name}' goes over the wire but is declared in ${declared}, which is not a role:api-lib ` +\n 'project — every type a contract reaches must be declared in an api library',\n `Move '${type.name}' into a role:api-lib project — as a '…Dto' string enum when it is a ` +\n `string-literal union. Retagging '${owner.name}' is not a way out unless it holds only ` +\n 'contracts and wire types (validate-api-lib-tag refuses a role:api-lib with an implementation).',\n ));\n }\n const governing = this.picker.winner(relFile, this.rule.suffixEntries);\n if (governing !== undefined && !this.endsInSuffix(type.name, governing.entry.suffixes)) {\n verdicts.push(new WireClosureVerdict(\n `'${type.name}' goes over the wire from ${relFile} but does not end in one of ` +\n `[${governing.entry.suffixes.join(', ')}], which the required-type-suffix entry ` +\n `'${governing.glob}' demands of it`,\n `Rename '${type.name}' to end in one of ${governing.entry.suffixes.join(', ')} — the suffix tells a ` +\n 'reader which layer a type belongs to, and a wire type is the layer a partner reads.',\n ));\n }\n return verdicts;\n }\n\n private endsInSuffix(name: string, suffixes: readonly string[]): boolean {\n return suffixes.some((suffix: string) => name.length > suffix.length && name.endsWith(suffix));\n }\n\n private ownerOf(abs: string): ProjectInfo \| null {\n for (const root of this.roots) {\n if (abs === root.abs \|\| abs.startsWith(root.abs + path.sep)) return root.info;\n }\n return null;\n }\n}\n"]}
1	+ {"version":3,"file":"wire-closure.js","sourceRoot":"","sources":["../../../../../../../packages/tooling/nx-webpieces-rules/src/lib/api-usage/wire-closure.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;;;;GAkBG;;;;AAEH,mDAA6B;AAE7B,0DAA6E;AAC7E,0DAA0D;AAG1D,oDAA+C;AAC/C,4CAAwC;AAExC,MAAM,YAAY,GAAG,SAAS,CAAC;AAE/B,iGAAiG;AACjG,MAAa,eAAe;IACI;IAA5B,YAA4B,aAAyC;QAAzC,kBAAa,GAAb,aAAa,CAA4B;IAAG,CAAC;IAEzE,6FAA6F;IAC7F,8EAA8E;IAC9E,MAAM,CAAC,eAAe;QAClB,OAAO,IAAI,eAAe,CAAC,EAAE,CAAC,CAAC;IACnC,CAAC;IAED,mGAAmG;IACnG,8EAA8E;IAC9E,MAAM,CAAC,UAAU,CAAC,aAAqB;QACnC,IAAI,IAAI,oBAAQ,EAAE,CAAC,UAAU,CAAC,aAAa,EAAE,sBAAsB,EAAE,IAAI,CAAC,KAAK,IAAI,EAAE,CAAC;YAClF,OAAO,eAAe,CAAC,eAAe,EAAE,CAAC;QAC7C,CAAC;QACD,MAAM,IAAI,GAAG,IAAA,8BAAe,EAAC,aAAa,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,sBAAsB,CAAC,CAAC;QACvF,MAAM,OAAO,GAAG,IAAI,EAAE,OAAO,CAAC,SAAS,CAAC,CAAC;QACzC,OAAO,IAAI,eAAe,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,CAAE,OAA6B,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;IAC7F,CAAC;CACJ;AAnBD,0CAmBC;AAED,mFAAmF;AACnF,MAAa,kBAAkB;IAEP;IACA;IAFpB,YACoB,IAAY,EACZ,IAAY;QADZ,SAAI,GAAJ,IAAI,CAAQ;QACZ,SAAI,GAAJ,IAAI,CAAQ;IAC7B,CAAC;CACP;AALD,gDAKC;AAED,+EAA+E;AAC/E,MAAM,SAAS;IAES;IACA;IAFpB,YACoB,IAAiB,EACjB,GAAW;QADX,SAAI,GAAJ,IAAI,CAAa;QACjB,QAAG,GAAH,GAAG,CAAQ;IAC5B,CAAC;CACP;AAED,yFAAyF;AACzF,MAAa,WAAW;IAKC;IAEA;IANJ,KAAK,CAAc;IACnB,MAAM,GAAG,IAAI,6BAAc,EAAE,CAAC;IAE/C,YACqB,aAAqB,EACtC,YAAsC,EACrB,IAAqB;QAFrB,kBAAa,GAAb,aAAa,CAAQ;QAErB,SAAI,GAAJ,IAAI,CAAiB;QAEtC,IAAI,CAAC,KAAK,GAAG,CAAC,GAAG,YAAY,CAAC,MAAM,EAAE,CAAC;aAClC,MAAM,CAAC,CAAC,IAAiB,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,KAAK,EAAE,IAAI,IAAI,CAAC,IAAI,KAAK,GAAG,CAAC;aACpE,GAAG,CAAC,CAAC,IAAiB,EAAE,EAAE,CAAC,IAAI,SAAS,CAAC,IAAI,EAAE,IAAI,CAAC,OAAO,CAAC,aAAa,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;YACxF,+DAA+D;aAC9D,IAAI,CAAC,CAAC,CAAY,EAAE,CAAY,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,GAAG,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IAC3E,CAAC;IAED,0EAA0E;IAC1E,KAAK,CAAC,IAAoB,EAAE,OAAe;QACvC,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,aAAa,EAAE,OAAO,CAAC,CAAC;QACtD,IAAI,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,cAAc,CAAC;YAAE,OAAO,EAAE,CAAC;QAC5D,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QAChC,IAAI,KAAK,KAAK,IAAI;YAAE,OAAO,EAAE,CAAC;QAC9B,MAAM,OAAO,GAAG,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,aAAa,EAAE,GAAG,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACjF,MAAM,IAAI,GAAG,IAAA,2BAAW,EAAC,KAAK,CAAC,CAAC,IAAI,IAAI,MAAM,CAAC;QAC/C,MAAM,QAAQ,GAAG,GAAG,IAAI,CAAC,WAAW,IAAI,YAAY,cAAc,KAAK,CAAC,IAAI,WAAW,IAAI,GAAG,CAAC;QAC/F,MAAM,QAAQ,GAAyB,EAAE,CAAC;QAC1C,IAAI,IAAI,KAAK,YAAY,EAAE,CAAC;YACxB,QAAQ,CAAC,IAAI,CACT,IAAI,kBAAkB,CAClB,IAAI,IAAI,CAAC,IAAI,2CAA2C,QAAQ,gCAAgC;gBAC5F,4EAA4E,EAChF,SAAS,IAAI,CAAC,IAAI,uEAAuE;gBACrF,oCAAoC,KAAK,CAAC,IAAI,0CAA0C;gBACxF,gGAAgG,CACvG,CACJ,CAAC;QACN,CAAC;QACD,MAAM,SAAS,GAAG,IAAI,CAAC,MAAM,CAAC,MAAM,CAChC,OAAO,EACP,IAAI,CAAC,IAAI,CAAC,aAAa,CAAC,GAAG,CACvB,CAAC,KAAsB,EAAE,EAAE,CAAC,IAAI,iCAAkB,CAAC,KAAK,CAAC,KAAK,EAAE,KAAK,CAAC,CACzE,CACJ,CAAC;QACF,IAAI,SAAS,KAAK,SAAS,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,EAAE,SAAS,CAAC,KAAK,CAAC,QAAQ,CAAC,EAAE,CAAC;YACrF,QAAQ,CAAC,IAAI,CACT,IAAI,kBAAkB,CAClB,IAAI,IAAI,CAAC,IAAI,6BAA6B,OAAO,8BAA8B;gBAC3E,IAAI,SAAS,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,0CAA0C;gBACjF,IAAI,SAAS,CAAC,IAAI,iBAAiB,EACvC,WAAW,IAAI,CAAC,IAAI,sBAAsB,SAAS,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,wBAAwB;gBACjG,qFAAqF,CAC5F,CACJ,CAAC;QACN,CAAC;QACD,OAAO,QAAQ,CAAC;IACpB,CAAC;IAEO,YAAY,CAAC,IAAY,EAAE,QAA2B;QAC1D,OAAO,QAAQ,CAAC,IAAI,CAChB,CAAC,MAAc,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC,MAAM,IAAI,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,CAC3E,CAAC;IACN,CAAC;IAEO,OAAO,CAAC,GAAW;QACvB,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;YAC5B,IAAI,GAAG,KAAK,IAAI,CAAC,GAAG,IAAI,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC;gBAAE,OAAO,IAAI,CAAC,IAAI,CAAC;QAClF,CAAC;QACD,OAAO,IAAI,CAAC;IAChB,CAAC;CACJ;AArED,kCAqEC","sourcesContent":["/*\n The WIRE CLOSURE of a contract (#1064, D4): every named type an `@ApiPath` contract reaches must be\n * DECLARED in a `role:api-lib` project, and must end in a suffix that project's `required-type-suffix`\n * entry demands.\n \n Why it lives here and not in the dependency rule: `api-lib-dependencies` only sees project EDGES. A\n * relative-path import into another library, or a DTO library that itself reaches outside, puts a type\n * on the wire without any edge the graph rule could refuse. The extractor already follows every type a\n * contract reaches through the compiler — the same walk `api-rules-for-openapi` / `api-rules-for-mcp`\n * run, with no generate tag needed — so this is one more question asked of each type that walk found.\n \n Every api-lib rule before this one (`required-type-suffix`, `one-enum-spelling-in-api-lib`,\n * `no-utility-types-in-api-lib`, `no-inline-import-in-api-lib`) reads only source files INSIDE the api\n * library. A type declared in another package was, by construction, outside every one of them — which is\n * how `AiProvider` and the `BrowserTelemetry` trio reached the wire from a general library unchecked.\n \n A type declared OUTSIDE the workspace (a published package under node_modules) is not judged here:\n * its own package owns its schema, and the generator's fail-closed components check covers it.\n /\n\nimport as path from 'path';\nimport { DocumentedType } from '@webpieces/api-doc-model';\nimport { FirstPathMatch, PathMatchCandidate } from '@webpieces/rules-config';\nimport { loadAndValidate } from '@webpieces/rules-config';\nimport { WireSuffixEntry } from './wire-suffix-entry';\nimport { ProjectInfo } from '../project-info';\nimport { resolveRole } from '../role-resolver';\nimport { RuleGate } from '../rule-gate';\n\nconst API_LIB_ROLE = 'api-lib';\n\n/** The `required-type-suffix` entries the wire closure enforces; empty when that rule is OFF. /\nexport class WireClosureRule {\n constructor(public readonly suffixEntries: readonly WireSuffixEntry[]) {}\n\n /* Only the role check — what a unit test or a repo with `required-type-suffix` OFF gets. /\n // webpieces-disable no-function-outside-class -- static factory of this class\n static withoutSuffixes(): WireClosureRule {\n return new WireClosureRule([]);\n }\n\n /* `required-type-suffix`'s entries, unless that rule is OFF or time-boxed / branch-scoped off. /\n // webpieces-disable no-function-outside-class -- static factory of this class\n static fromConfig(workspaceRoot: string): WireClosureRule {\n if (new RuleGate().skipReason(workspaceRoot, 'required-type-suffix', true) !== null) {\n return WireClosureRule.withoutSuffixes();\n }\n const rule = loadAndValidate(workspaceRoot).resolved.rules.get('required-type-suffix');\n const entries = rule?.options['entries'];\n return new WireClosureRule(Array.isArray(entries) ? (entries as WireSuffixEntry[]) : []);\n }\n}\n\n/* ONE wire-closure finding: what is wrong with a reached type, and what to do. /\nexport class WireClosureVerdict {\n constructor(\n public readonly what: string,\n public readonly cure: string,\n ) {}\n}\n\n/* A workspace project root, absolute, for the longest-prefix owner lookup. /\nclass OwnedRoot {\n constructor(\n public readonly info: ProjectInfo,\n public readonly abs: string,\n ) {}\n}\n\n/* Judges every type a contract reaches against the api-lib role and the suffix rule. /\nexport class WireClosure {\n private readonly roots: OwnedRoot[];\n private readonly picker = new FirstPathMatch();\n\n constructor(\n private readonly workspaceRoot: string,\n projectInfos: Map<string, ProjectInfo>,\n private readonly rule: WireClosureRule,\n ) {\n this.roots = [...projectInfos.values()]\n .filter((info: ProjectInfo) => info.root !== '' && info.root !== '.')\n .map((info: ProjectInfo) => new OwnedRoot(info, path.resolve(workspaceRoot, info.root)))\n // Longest root first so a nested project wins over its parent.\n .sort((a: OwnedRoot, b: OwnedRoot) => b.abs.length - a.abs.length);\n }\n\n /* Every verdict for ONE reached type, declared in the file `absFile`. */\n judge(type: DocumentedType, absFile: string): WireClosureVerdict[] {\n const abs = path.resolve(this.workspaceRoot, absFile);\n if (abs.split(path.sep).includes('node_modules')) return [];\n const owner = this.ownerOf(abs);\n if (owner === null) return [];\n const relFile = path.relative(this.workspaceRoot, abs).split(path.sep).join('/');\n const role = resolveRole(owner).role ?? 'none';\n const declared = `${type.packageName ?? 'no package'} (project '${owner.name}', role:${role})`;\n const verdicts: WireClosureVerdict[] = [];\n if (role !== API_LIB_ROLE) {\n verdicts.push(\n new WireClosureVerdict(\n `'${type.name}' goes over the wire but is declared in ${declared}, which is not a role:api-lib ` +\n 'project — every type a contract reaches must be declared in an api library',\n `Move '${type.name}' into a role:api-lib project — as a '…Dto' string enum when it is a ` +\n `string-literal union. Retagging '${owner.name}' is not a way out unless it holds only ` +\n 'contracts and wire types (validate-api-lib-tag refuses a role:api-lib with an implementation).',\n ),\n );\n }\n const governing = this.picker.winner(\n relFile,\n this.rule.suffixEntries.map(\n (entry: WireSuffixEntry) => new PathMatchCandidate(entry.paths, entry),\n ),\n );\n if (governing !== undefined && !this.endsInSuffix(type.name, governing.entry.suffixes)) {\n verdicts.push(\n new WireClosureVerdict(\n `'${type.name}' goes over the wire from ${relFile} but does not end in one of ` +\n `[${governing.entry.suffixes.join(', ')}], which the required-type-suffix entry ` +\n `'${governing.glob}' demands of it`,\n `Rename '${type.name}' to end in one of ${governing.entry.suffixes.join(', ')} — the suffix tells a ` +\n 'reader which layer a type belongs to, and a wire type is the layer a partner reads.',\n ),\n );\n }\n return verdicts;\n }\n\n private endsInSuffix(name: string, suffixes: readonly string[]): boolean {\n return suffixes.some(\n (suffix: string) => name.length > suffix.length && name.endsWith(suffix),\n );\n }\n\n private ownerOf(abs: string): ProjectInfo \| null {\n for (const root of this.roots) {\n if (abs === root.abs \|\| abs.startsWith(root.abs + path.sep)) return root.info;\n }\n return null;\n }\n}\n"]}

package/src/lib/api-usage/wire-suffix-entry.d.ts ADDED Viewed

@@ -0,0 +1,5 @@
+/** Structural settings consumed by this contributor; the declared canonical owner validates them. */
+export declare class WireSuffixEntry {
+    paths: string[];
+    suffixes: string[];
+}

package/src/lib/api-usage/wire-suffix-entry.js ADDED Viewed

@@ -0,0 +1,10 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.WireSuffixEntry = void 0;
+/** Structural settings consumed by this contributor; the declared canonical owner validates them. */
+class WireSuffixEntry {
+    paths;
+    suffixes;
+}
+exports.WireSuffixEntry = WireSuffixEntry;
+//# sourceMappingURL=wire-suffix-entry.js.map

package/src/lib/api-usage/wire-suffix-entry.js.map ADDED Viewed

@@ -0,0 +1 @@

+ {"version":3,"file":"wire-suffix-entry.js","sourceRoot":"","sources":["../../../../../../../packages/tooling/nx-webpieces-rules/src/lib/api-usage/wire-suffix-entry.ts"],"names":[],"mappings":";;;AAAA,qGAAqG;AACrG,MAAa,eAAe;IACxB,KAAK,CAAY;IACjB,QAAQ,CAAY;CACvB;AAHD,0CAGC","sourcesContent":["/** Structural settings consumed by this contributor; the declared canonical owner validates them. */\nexport class WireSuffixEntry {\n paths!: string[];\n suffixes!: string[];\n}\n"]}

package/src/lib/rule-gate.d.ts CHANGED Viewed

@@ -9,8 +9,7 @@
  * semantics, from the same source of truth (`loadAndValidate` → webpieces.config.json).
  *
  * Semantics:
- *  - rule entry ABSENT (or no webpieces.config.json at all) → RUN. Fail-safe: an older config, or a
- *    repo that has not adopted the keys yet, behaves exactly as it did before this gate existed.
+ *  - absent policy → fail with an explicit declaration/config repair, never run on an inferred policy.
  *  - `"mode": "OFF"` → skip with a reason.
  *  - the time-box / branch escape hatches (turnOffRuleUntilEpoch / turnOffRuleWhileOnBranch) → honored
  *    when the caller passes `honorEpoch: true`. All five executors now pass true: a schedule ("do not

package/src/lib/rule-gate.js CHANGED Viewed

@@ -10,8 +10,7 @@
  * semantics, from the same source of truth (`loadAndValidate` → webpieces.config.json).
  *
  * Semantics:
- *  - rule entry ABSENT (or no webpieces.config.json at all) → RUN. Fail-safe: an older config, or a
- *    repo that has not adopted the keys yet, behaves exactly as it did before this gate existed.
+ *  - absent policy → fail with an explicit declaration/config repair, never run on an inferred policy.
  *  - `"mode": "OFF"` → skip with a reason.
  *  - the time-box / branch escape hatches (turnOffRuleUntilEpoch / turnOffRuleWhileOnBranch) → honored
  *    when the caller passes `honorEpoch: true`. All five executors now pass true: a schedule ("do not
@@ -22,6 +21,7 @@
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.RuleGate = void 0;
 const rules_config_1 = require("@webpieces/rules-config");
+const rules_config_2 = require("@webpieces/rules-config");
 class RuleGate {
     /**
      * @param workspaceRoot the Nx `context.root` — where webpieces.config.json is looked up from.
@@ -31,9 +31,8 @@ class RuleGate {
      */
     skipReason(workspaceRoot, ruleName, honorEpoch) {
         const rule = (0, rules_config_1.loadAndValidate)(workspaceRoot).resolved.rules.get(ruleName);
-        // Absent ⇒ run. Never invent a default that silently disables a check.
         if (!rule)
-            return null;
+            throw new rules_config_2.RuleFailError('policy-configuration', `Policy ${ruleName} is not explicitly configured. Declare its owning pack and repair that pack's config file before running this check.`);
         if (rule.isOff)
             return 'mode: OFF';
         if (!honorEpoch)

package/src/lib/rule-gate.js.map CHANGED Viewed

	@@ -1 +1 @@
1	- {"version":3,"file":"rule-gate.js","sourceRoot":"","sources":["../../../../../../packages/tooling/nx-webpieces-rules/src/lib/rule-gate.ts"],"names":[],"mappings":";AAAA~~;;;;;;;;;;;;;;;;;;;GAmBG~~;;;AAEH,0DAA0E;~~AAE1E~~,MAAa,QAAQ;IACjB;;;;;OAKG;IACH,UAAU,CAAC,aAAqB,EAAE,QAAgB,EAAE,UAAmB;QACnE,MAAM,IAAI,GAAG,IAAA,8BAAe,EAAC,aAAa,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QACzE,~~uEAAuE;QACvE,~~IAAI,CAAC,IAAI;~~YAAE~~,~~OAAO~~,IAAI,CAAC;~~QACvB~~,IAAI,IAAI,CAAC,KAAK;YAAE,OAAO,WAAW,CAAC;QACnC,IAAI,CAAC,UAAU;YAAE,OAAO,IAAI,CAAC;QAE7B,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,uBAAuB,CAAuB,CAAC;QAC1E,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,0BAA0B,CAA8B,CAAC;QACrF,MAAM,IAAI,GAAG,IAAA,6BAAc,EAAC,KAAK,EAAE,MAAM,CAAC,CAAC;QAC3C,OAAO,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,IAAI,sBAAsB,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IACtE,CAAC;IAED;;;OAGG;IACH,UAAU,CAAC,aAAqB,EAAE,QAAgB,EAAE,UAAmB;QACnE,MAAM,MAAM,GAAG,IAAI,CAAC,UAAU,CAAC,aAAa,EAAE,QAAQ,EAAE,UAAU,CAAC,CAAC;QACpE,IAAI,MAAM,KAAK,IAAI;YAAE,OAAO,KAAK,CAAC;QAClC,OAAO,CAAC,GAAG,~~CAAC~~,kBAAkB,QAAQ,KAAK,MAAM,2CAA2C,~~CAAC~~,CAAC;~~QAC9F~~,OAAO,IAAI,CAAC;IAChB,CAAC;CACJ;~~AA9BD~~,~~4BA8BC~~","sourcesContent":["/*\n Config gate for the Nx infrastructure validators.\n \n Every other rule in the system (eslint rules, code-rules, ai-hook rules, validate-ts-in-src) can be\n * turned off or time-boxed from webpieces.config.json. The five infrastructure executors\n * (validate-architecture-unchanged, validate-no-architecture-cycles, validate-packagejson,\n * validate-versions-locked, validate-eslint-sync) hardcoded their behavior instead, which made them\n * the only checks a consuming repo could not adopt gradually. This gate gives them the same\n * semantics, from the same source of truth (`loadAndValidate` → webpieces.config.json).\n \n Semantics:\n * - ~~rule~~ ~~entry~~ ~~ABSENT (or no webpieces.config.json at all)~~ → ~~RUN.~~ ~~Fail-safe:~~ an ~~older~~ config, ~~or a\n * repo that has not adopted the keys yet~~, ~~behaves~~ ~~exactly~~ as it ~~did~~ ~~before this gate existed~~.\n * - `\"mode\": \"OFF\"` → skip with a reason.\n * - the time-box / branch escape hatches (turnOffRuleUntilEpoch / turnOffRuleWhileOnBranch) → honored\n * when the caller passes `honorEpoch: true`. All five executors now pass true: a schedule (\"do not\n * enforce until <epoch> / off <branch>\") is coherent for any of them, baseline or not (see the\n * comment block above ValidateArchitectureUnchangedConfig in rules-config/src/rule-configs.ts). The\n * param is retained so a future caller can still opt a rule out of time-boxing.\n /\n\nimport { loadAndValidate, shouldSkipRule } from '@webpieces/rules-config';\n\nexport class RuleGate {\n /\n @param workspaceRoot the Nx `context.root` — where webpieces.config.json is looked up from.\n * @param ruleName the webpieces.config.json key, identical to the Nx target name.\n * @param honorEpoch true to honor the time-box/branch escape hatches (all five executors pass true).\n * @returns a human-readable reason when the executor must SKIP, or null when it must RUN.\n /\n skipReason(workspaceRoot: string, ruleName: string, honorEpoch: boolean): string \| null {\n const rule = loadAndValidate(workspaceRoot).resolved.rules.get(ruleName);\n // ~~Absent~~ ⇒ ~~run~~. ~~Never~~ ~~invent~~ a ~~default~~ that ~~silently~~ ~~disables~~ a check.\n ~~if (!rule~~) ~~return null~~;\n if (rule.isOff) return 'mode: OFF';\n if (!honorEpoch) return null;\n\n const epoch = rule.options['turnOffRuleUntilEpoch'] as number \| undefined;\n const branch = rule.options['turnOffRuleWhileOnBranch'] as string \| null \| undefined;\n const skip = shouldSkipRule(epoch, branch);\n return skip.skip ? (skip.reason ?? 'temporarily disabled') : null;\n }\n\n /\n Convenience wrapper: prints the standard skip line and reports whether the caller should stop.\n * Keeps the four-line preamble identical across all five executors.\n */\n isDisabled(workspaceRoot: string, ruleName: string, honorEpoch: boolean): boolean {\n const reason = this.skipReason(workspaceRoot, ruleName, honorEpoch);\n if (reason === null) return false;\n console.log(`\\n⏭️ Skipping ${ruleName} (${reason}) — configured in webpieces.config.json\\n`);\n return true;\n }\n}\n"]}
1	+ {"version":3,"file":"rule-gate.js","sourceRoot":"","sources":["../../../../../../packages/tooling/nx-webpieces-rules/src/lib/rule-gate.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;;;;GAkBG;;;AAEH,0DAA0E;AAC1E,0DAAwD;AAExD,MAAa,QAAQ;IACjB;;;;;OAKG;IACH,UAAU,CAAC,aAAqB,EAAE,QAAgB,EAAE,UAAmB;QACnE,MAAM,IAAI,GAAG,IAAA,8BAAe,EAAC,aAAa,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QACzE,IAAI,CAAC,IAAI;YACL,MAAM,IAAI,4BAAa,CACnB,sBAAsB,EACtB,UAAU,QAAQ,sHAAsH,CAC3I,CAAC;QACN,IAAI,IAAI,CAAC,KAAK;YAAE,OAAO,WAAW,CAAC;QACnC,IAAI,CAAC,UAAU;YAAE,OAAO,IAAI,CAAC;QAE7B,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,uBAAuB,CAAuB,CAAC;QAC1E,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,0BAA0B,CAA8B,CAAC;QACrF,MAAM,IAAI,GAAG,IAAA,6BAAc,EAAC,KAAK,EAAE,MAAM,CAAC,CAAC;QAC3C,OAAO,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,IAAI,sBAAsB,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IACtE,CAAC;IAED;;;OAGG;IACH,UAAU,CAAC,aAAqB,EAAE,QAAgB,EAAE,UAAmB;QACnE,MAAM,MAAM,GAAG,IAAI,CAAC,UAAU,CAAC,aAAa,EAAE,QAAQ,EAAE,UAAU,CAAC,CAAC;QACpE,IAAI,MAAM,KAAK,IAAI;YAAE,OAAO,KAAK,CAAC;QAClC,OAAO,CAAC,GAAG,CACP,kBAAkB,QAAQ,KAAK,MAAM,2CAA2C,CACnF,CAAC;QACF,OAAO,IAAI,CAAC;IAChB,CAAC;CACJ;AAnCD,4BAmCC","sourcesContent":["/*\n Config gate for the Nx infrastructure validators.\n \n Every other rule in the system (eslint rules, code-rules, ai-hook rules, validate-ts-in-src) can be\n * turned off or time-boxed from webpieces.config.json. The five infrastructure executors\n * (validate-architecture-unchanged, validate-no-architecture-cycles, validate-packagejson,\n * validate-versions-locked, validate-eslint-sync) hardcoded their behavior instead, which made them\n * the only checks a consuming repo could not adopt gradually. This gate gives them the same\n * semantics, from the same source of truth (`loadAndValidate` → webpieces.config.json).\n \n Semantics:\n * - absent policy → fail with an explicit declaration/config repair, never run on an inferred policy.\n * - `\"mode\": \"OFF\"` → skip with a reason.\n * - the time-box / branch escape hatches (turnOffRuleUntilEpoch / turnOffRuleWhileOnBranch) → honored\n * when the caller passes `honorEpoch: true`. All five executors now pass true: a schedule (\"do not\n * enforce until <epoch> / off <branch>\") is coherent for any of them, baseline or not (see the\n * comment block above ValidateArchitectureUnchangedConfig in rules-config/src/rule-configs.ts). The\n * param is retained so a future caller can still opt a rule out of time-boxing.\n /\n\nimport { loadAndValidate, shouldSkipRule } from '@webpieces/rules-config';\nimport { RuleFailError } from '@webpieces/rules-config';\n\nexport class RuleGate {\n /\n @param workspaceRoot the Nx `context.root` — where webpieces.config.json is looked up from.\n * @param ruleName the webpieces.config.json key, identical to the Nx target name.\n * @param honorEpoch true to honor the time-box/branch escape hatches (all five executors pass true).\n * @returns a human-readable reason when the executor must SKIP, or null when it must RUN.\n /\n skipReason(workspaceRoot: string, ruleName: string, honorEpoch: boolean): string \| null {\n const rule = loadAndValidate(workspaceRoot).resolved.rules.get(ruleName);\n if (!rule)\n throw new RuleFailError(\n 'policy-configuration',\n `Policy ${ruleName} is not explicitly configured. Declare its owning pack and repair that pack's config file before running this check.`,\n );\n if (rule.isOff) return 'mode: OFF';\n if (!honorEpoch) return null;\n\n const epoch = rule.options['turnOffRuleUntilEpoch'] as number \| undefined;\n const branch = rule.options['turnOffRuleWhileOnBranch'] as string \| null \| undefined;\n const skip = shouldSkipRule(epoch, branch);\n return skip.skip ? (skip.reason ?? 'temporarily disabled') : null;\n }\n\n /\n Convenience wrapper: prints the standard skip line and reports whether the caller should stop.\n * Keeps the four-line preamble identical across all five executors.\n */\n isDisabled(workspaceRoot: string, ruleName: string, honorEpoch: boolean): boolean {\n const reason = this.skipReason(workspaceRoot, ruleName, honorEpoch);\n if (reason === null) return false;\n console.log(\n `\\n⏭️ Skipping ${ruleName} (${reason}) — configured in webpieces.config.json\\n`,\n );\n return true;\n }\n}\n"]}

package/src/lib/runtime-visualizer.d.ts CHANGED Viewed

@@ -48,15 +48,15 @@ import type { RuntimeGraph } from './runtime-graph';
 export declare class RuntimeVizOptions {
     /**
      * Draw the dashed terminal nodes for contracts nothing in-repo implements. On by default;
-     * a repo whose external surface is noisy can turn them off in webpieces.config.json
-     * (runtime-architecture.showExternalNodes).
+     * a repo whose external surface is noisy can turn them off in the declared Nx owner file's
+     * direct policy-ID map (runtime-architecture.showExternalNodes).
      */
     readonly showExternalNodes: boolean;
     constructor(
     /**
      * Draw the dashed terminal nodes for contracts nothing in-repo implements. On by default;
-     * a repo whose external surface is noisy can turn them off in webpieces.config.json
-     * (runtime-architecture.showExternalNodes).
+     * a repo whose external surface is noisy can turn them off in the declared Nx owner file's
+     * direct policy-ID map (runtime-architecture.showExternalNodes).
      */
     showExternalNodes?: boolean);
 }

package/src/lib/runtime-visualizer.js CHANGED Viewed

@@ -64,8 +64,8 @@ class RuntimeVizOptions {
     constructor(
     /**
      * Draw the dashed terminal nodes for contracts nothing in-repo implements. On by default;
-     * a repo whose external surface is noisy can turn them off in webpieces.config.json
-     * (runtime-architecture.showExternalNodes).
+     * a repo whose external surface is noisy can turn them off in the declared Nx owner file's
+     * direct policy-ID map (runtime-architecture.showExternalNodes).
      */
     showExternalNodes = true) {
         this.showExternalNodes = showExternalNodes;