@webpieces/nx-webpieces-rules 0.4.976 → 0.4.978

package/src/lib/api-usage/api-scanner.js.map

@@ -1 +1 @@
-{"version":3,"file":"api-scanner.js","sourceRoot":"","sources":["../../../../../../../packages/tooling/nx-webpieces-rules/src/lib/api-usage/api-scanner.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;;;AAigBH,8DAoBC;AAuBD,8CAiDC;AAUD,0EAgBC;AASD,0EAoBC;;AAlpBD,uDAAiC;AACjC,+CAAyB;AACzB,mDAA6B;AAC7B,0DAAgF;AAGhF,iDAA0D;AAC1D,mDAA+D;AAC/D,mDAkByB;AACzB,+DAU+B;AAC/B,uDAAoF;AACpF,mDAA0F;AAC1F,6DAAuD;AACvD,iDAAiD;AACjD,uCAamB;AAEnB,MAAM,iBAAiB,GAAG,iBAAiB,CAAC;AAC5C,MAAM,oBAAoB,GAAG,oBAAoB,CAAC;AAClD,MAAM,iBAAiB,GAAG,WAAW,CAAC;AAwDtC,qGAAqG;AACrG,MAAM,cAAc;IACC,KAAK,CAAgB;IAEtC,YAAY,aAAqB,EAAE,YAAsC;QACrE,MAAM,KAAK,GAAkB,EAAE,CAAC;QAChC,KAAK,MAAM,IAAI,IAAI,YAAY,CAAC,MAAM,EAAE,EAAE,CAAC;YACvC,IAAI,IAAI,CAAC,IAAI,KAAK,EAAE,IAAI,IAAI,CAAC,IAAI,KAAK,GAAG;gBAAE,SAAS;YACpD,KAAK,CAAC,IAAI,CAAC,IAAI,WAAW,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,OAAO,CAAC,aAAa,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACnF,CAAC;QACD,+DAA+D;QAC/D,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC,CAAc,EAAE,CAAc,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,GAAG,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IAC7F,CAAC;IAED,SAAS,CAAC,OAAe;QACrB,MAAM,UAAU,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;QACzC,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;YAC5B,IAAI,UAAU,KAAK,IAAI,CAAC,GAAG,IAAI,UAAU,CAAC,UAAU,CAAC,IAAI,CAAC,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC;gBACrE,OAAO,IAAI,CAAC,IAAI,CAAC;QACzB,CAAC;QACD,OAAO,IAAI,CAAC;IAChB,CAAC;CACJ;AAED,MAAM,WAAW;IAEO;IACA;IAFpB,YACoB,IAAY,EACZ,GAAW;QADX,SAAI,GAAJ,IAAI,CAAQ;QACZ,QAAG,GAAH,GAAG,CAAQ;IAC5B,CAAC;CACP;AAED;;;;;;GAMG;AACH,MAAM,cAAc;IAEI;IACA;IAFpB,YACoB,MAAiC,EACjC,MAAmB;QADnB,WAAM,GAAN,MAAM,CAA2B;QACjC,WAAM,GAAN,MAAM,CAAa;IACpC,CAAC;IAEJ,MAAM,CAAC,GAAW;QACd,OAAO,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC;IACxC,CAAC;CACJ;AAED;;;;;;GAMG;AACH,MAAa,qBAAqB;IAKT;IACA;IAEA;IAEA;IATJ,MAAM,GAAG,IAAI,GAAG,EAAwB,CAAC;IACzC,MAAM,GAAG,IAAI,GAAG,EAAU,CAAC;IAE5C,YACqB,aAAqB,EACrB,YAAsC;IACvD,8EAA8E;IAC7D,gBAAmC;IACpD,oFAAoF;IACnE,WAAoC;QALpC,kBAAa,GAAb,aAAa,CAAQ;QACrB,iBAAY,GAAZ,YAAY,CAA0B;QAEtC,qBAAgB,GAAhB,gBAAgB,CAAmB;QAEnC,gBAAW,GAAX,WAAW,CAAyB;IACtD,CAAC;IAEJ,KAAK;QACD,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,YAAY,CAAC,MAAM,EAAE,EAAE,CAAC;YAC5C,IAAI,IAAI,CAAC,IAAI,KAAK,EAAE,IAAI,IAAI,CAAC,IAAI,KAAK,GAAG;gBAAE,SAAS;YACpD,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC;QAC5B,CAAC;QACD,OAAO,IAAI,cAAc,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;IACxD,CAAC;IAEO,YAAY,CAAC,IAAiB;QAClC,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,aAAa,EAAE,IAAI,CAAC,IAAI,CAAC,EAAE,KAAK,CAAC,CAAC;QAC7E,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,MAAM,CAAC;YAAE,OAAO;QACnC,MAAM,QAAQ,GAAG,IAAA,6BAAc,EAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,gBAAgB,CAAC,CAAC;QAClE,KAAK,MAAM,IAAI,IAAI,IAAA,wBAAc,EAAC,MAAM,CAAC,EAAE,CAAC;YACxC,IAAI,IAAA,oBAAU,EAAC,IAAI,CAAC;gBAAE,SAAS,CAAC,oCAAoC;YACpE,MAAM,IAAI,GAAG,EAAE,CAAC,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;YAC3C,MAAM,UAAU,GAAG,EAAE,CAAC,gBAAgB,CAAC,IAAI,EAAE,IAAI,EAAE,EAAE,CAAC,YAAY,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;YACjF,IAAI,CAAC,SAAS,CAAC,UAAU,EAAE,IAAI,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;QACpD,CAAC;IACL,CAAC;IAEO,SAAS,CAAC,IAAa,EAAE,OAAe,EAAE,QAAiB;QAC/D,MAAM,IAAI,GAAG,QAAQ;YACjB,CAAC,CAAC,IAAA,6BAAmB,EAAC,IAAI,EAAE,OAAO,CAAC;YACpC,CAAC,CAAC,IAAA,8BAAoB,EAAC,IAAI,EAAE,OAAO,EAAE,IAAI,CAAC,WAAW,CAAC,CAAC;QAC5D,IAAI,IAAI,EAAE,CAAC;YACP,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;YACzB,MAAM,QAAQ,GAAG,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YAC3C,IAAI,QAAQ,KAAK,SAAS,IAAI,QAAQ,CAAC,KAAK,KAAK,OAAO;gBACpD,MAAM,IAAI,4BAAa,CACnB,+BAA+B,EAC/B,iCAAiC,IAAI,CAAC,GAAG,KAAK,QAAQ,CAAC,KAAK,IAAI,IAAI,CAAC,GAAG,QAAQ,OAAO,IAAI,IAAI,CAAC,GAAG,GAAG,EACtG,SAAS,EACT,SAAS,EACT;oBACI,IAAI,qBAAM,CACN,wHAAwH,EACxH,IAAI,CACP;iBACJ,CACJ,CAAC;YACN,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;QACpC,CAAC;QACD,EAAE,CAAC,YAAY,CAAC,IAAI,EAAE,CAAC,KAAc,EAAE,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,OAAO,EAAE,QAAQ,CAAC,CAAC,CAAC;IACxF,CAAC;CACJ;AAzDD,sDAyDC;AACD,qFAAqF;AACrF,MAAM,mBAAmB;IACJ,iBAAiB,GAAG,IAAI,GAAG,EAA+B,CAAC;IAC3D,WAAW,GAAG,IAAI,GAAG,EAA+B,CAAC;IAEtE,aAAa,CAAC,KAAa,EAAE,GAAW;QACpC,YAAY,CAAC,IAAI,CAAC,iBAAiB,EAAE,KAAK,CAAC,CAAC,GAAG,CAAC,IAAA,yBAAS,EAAC,GAAG,CAAC,EAAE,GAAG,CAAC,CAAC;IACzE,CAAC;IAED;;;OAGG;IACH,OAAO,CAAC,KAAa,EAAE,GAAW;QAC9B,YAAY,CAAC,IAAI,CAAC,WAAW,EAAE,KAAK,CAAC,CAAC,GAAG,CAAC,IAAA,yBAAS,EAAC,GAAG,CAAC,EAAE,GAAG,CAAC,CAAC;IACnE,CAAC;IAED,oFAAoF;IACpF,WAAW;QACP,MAAM,MAAM,GAAG,IAAI,GAAG,CAAS;YAC3B,GAAG,IAAI,CAAC,iBAAiB,CAAC,IAAI,EAAE;YAChC,GAAG,IAAI,CAAC,WAAW,CAAC,IAAI,EAAE;SAC7B,CAAC,CAAC;QACH,MAAM,SAAS,GAAwB,EAAE,CAAC;QAC1C,KAAK,MAAM,KAAK,IAAI,CAAC,GAAG,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC;YACrC,MAAM,cAAc,GAAG,IAAA,2BAAW,EAAC;gBAC/B,GAAG,CAAC,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;aACzD,CAAC,CAAC;YACH,MAAM,QAAQ,GAAG,IAAA,2BAAW,EAAC,CAAC,GAAG,CAAC,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;YACjF,MAAM,QAAQ,GAAgB;gBAC1B,IAAI,EAAE,IAAA,qCAAqB,EAAC,cAAc,EAAE,QAAQ,CAAC;gBACrD,UAAU,EAAE,cAAc;gBAC1B,IAAI,EAAE,QAAQ;aACjB,CAAC;YACF,SAAS,CAAC,KAAK,CAAC,GAAG,QAAQ,CAAC;QAChC,CAAC;QACD,OAAO,SAAS,CAAC;IACrB,CAAC;IAED,OAAO;QACH,OAAO,IAAI,CAAC,iBAAiB,CAAC,IAAI,KAAK,CAAC,IAAI,IAAI,CAAC,WAAW,CAAC,IAAI,KAAK,CAAC,CAAC;IAC5E,CAAC;CACJ;AAED,wHAAwH;AACxH,SAAS,YAAY,CAAC,GAAqC,EAAE,KAAa;IACtE,IAAI,KAAK,GAAG,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IAC3B,IAAI,CAAC,KAAK,EAAE,CAAC;QACT,KAAK,GAAG,IAAI,GAAG,EAAkB,CAAC;QAClC,GAAG,CAAC,GAAG,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;IAC1B,CAAC;IACD,OAAO,KAAK,CAAC;AACjB,CAAC;AAED,oFAAoF;AACpF,MAAa,eAAe;IASH;IACA;IAEA;IAEA;IAEA;IAEA;IACA;IAlBJ,OAAO,CAAiB;IACxB,kBAAkB,GAAG,IAAI,GAAG,EAA+B,CAAC;IAC5D,eAAe,GAAG,IAAI,GAAG,EAAU,CAAC;IACpC,kBAAkB,GAAwB,EAAE,CAAC;IAC7C,uBAAuB,CAA0B;IAC1D,WAAW,GAAG,IAAI,cAAc,CAAC,IAAI,GAAG,EAAwB,EAAE,IAAI,GAAG,EAAU,CAAC,CAAC;IAE7F,YACqB,aAAqB,EACrB,YAAsC;IACvD,4FAA4F;IAC3E,mBAAsC,EAAE;IACzD,mGAAmG;IAClF,gBAA+B,+BAAa,CAAC,iBAAiB,EAAE;IACjF,gGAAgG;IAC/E,cAA0B,0BAAU,CAAC,GAAG,CAAC,4BAAY,CAAC;IACvE,4FAA4F;IAC3E,UAAsB,0BAAU,CAAC,GAAG,CAAC,wBAAQ,CAAC,EAC9C,kBAAmC,8BAAe,CAAC,eAAe,EAAE;QAVpE,kBAAa,GAAb,aAAa,CAAQ;QACrB,iBAAY,GAAZ,YAAY,CAA0B;QAEtC,qBAAgB,GAAhB,gBAAgB,CAAwB;QAExC,kBAAa,GAAb,aAAa,CAAmD;QAEhE,gBAAW,GAAX,WAAW,CAA2C;QAEtD,YAAO,GAAP,OAAO,CAAuC;QAC9C,oBAAe,GAAf,eAAe,CAAqD;QAErF,IAAI,CAAC,OAAO,GAAG,IAAI,cAAc,CAAC,aAAa,EAAE,YAAY,CAAC,CAAC;QAC/D,IAAI,CAAC,uBAAuB,GAAG,IAAI,iCAAuB,CAAC,aAAa,CAAC,CAAC;IAC9E,CAAC;IAED,IAAI;QACA,2FAA2F;QAC3F,oFAAoF;QACpF,IAAI,CAAC,WAAW,GAAG,IAAI,qBAAqB,CACxC,IAAI,CAAC,aAAa,EAClB,IAAI,CAAC,YAAY,EACjB,IAAI,CAAC,gBAAgB,EACrB,IAAI,CAAC,uBAAuB,CAC/B,CAAC,KAAK,EAAE,CAAC;QACV,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,YAAY,CAAC,MAAM,EAAE,EAAE,CAAC;YAC5C,IAAI,IAAI,CAAC,IAAI,KAAK,EAAE,IAAI,IAAI,CAAC,IAAI,KAAK,GAAG;gBAAE,SAAS;YACpD,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC;QAC3B,CAAC;QACD,OAAO;YACH,kBAAkB,EAAE,IAAI,CAAC,kBAAkB;YAC3C,cAAc,EAAE,IAAI,CAAC,WAAW,CAAC,MAAM;YACvC,QAAQ,EAAE,IAAI,CAAC,WAAW,CAAC,MAAM;YACjC,eAAe,EAAE,IAAI,CAAC,eAAe;YACrC,kBAAkB,EAAE,IAAI,CAAC,kBAAkB;YAC3C,uBAAuB,EAAE,IAAI,CAAC,uBAAuB,CAAC,GAAG,EAAE;YAC3D,uBAAuB,EAAE,IAAI,CAAC,uBAAuB,CAAC,uBAAuB,EAAE;YAC/E,mBAAmB,EAAE,IAAI,CAAC,uBAAuB,CAAC,gBAAgB,EAAE;YACpE,yBAAyB,EAAE,IAAI,CAAC,uBAAuB,CAAC,yBAAyB,EAAE;YACnF,4BAA4B,EACxB,IAAI,CAAC,uBAAuB,CAAC,4BAA4B,EAAE;YAC/D,sBAAsB,EAAE,IAAI,CAAC,uBAAuB,CAAC,sBAAsB,EAAE;YAC7E,UAAU,EAAE,IAAI,+BAAa,CACzB,IAAI,CAAC,aAAa,EAClB,IAAI,CAAC,YAAY,EACjB,IAAI,CAAC,aAAa,CACrB,CAAC,GAAG,EAAE;YACP,WAAW,EAAE,IAAI,oCAAe,CAC5B,IAAI,CAAC,aAAa,EAClB,IAAI,CAAC,YAAY,EACjB,IAAI,CAAC,WAAW,EAChB,IAAI,CAAC,OAAO,EACZ,IAAI,CAAC,eAAe,CACvB,CAAC,GAAG,EAAE;SACV,CAAC;IACN,CAAC;IAEO,WAAW,CAAC,IAAiB;QACjC,MAAM,OAAO,GAAG,iBAAiB,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,aAAa,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;QAC/E,IAAI,CAAC,OAAO;YAAE,OAAO;QACrB,MAAM,OAAO,GAAG,OAAO,CAAC,cAAc,EAAE,CAAC;QACzC,MAAM,WAAW,GAAG,IAAI,mBAAmB,EAAE,CAAC;QAC9C,IAAI,qBAAqB,GAAG,KAAK,CAAC;QAElC,KAAK,MAAM,UAAU,IAAI,OAAO,CAAC,cAAc,EAAE,EAAE,CAAC;YAChD,IAAI,UAAU,CAAC,iBAAiB,IAAI,UAAU,CAAC,QAAQ,CAAC,QAAQ,CAAC,gBAAgB,CAAC;gBAC9E,SAAS;YACb,IAAI,IAAA,oBAAU,EAAC,UAAU,CAAC,QAAQ,CAAC;gBAAE,SAAS,CAAC,oCAAoC;YACnF,iFAAiF;YACjF,IAAI,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,UAAU,CAAC,QAAQ,CAAC,KAAK,IAAI,CAAC,IAAI;gBAAE,SAAS;YACxE,qBAAqB,GAAG,IAAI,CAAC;YAC7B,IAAI,CAAC,KAAK,CAAC,UAAU,EAAE,OAAO,EAAE,IAAI,CAAC,IAAI,EAAE,WAAW,CAAC,CAAC;QAC5D,CAAC;QAED,0FAA0F;QAC1F,+EAA+E;QAC/E,IAAI,qBAAqB;YAAE,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC/D,IAAI,CAAC,WAAW,CAAC,OAAO,EAAE;YACtB,IAAI,CAAC,kBAAkB,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE,WAAW,CAAC,WAAW,EAAE,CAAC,CAAC;IAC1E,CAAC;IAEO,KAAK,CACT,IAAa,EACb,OAAuB,EACvB,OAAe,EACf,GAAwB;QAExB,8FAA8F;QAC9F,IAAI,EAAE,CAAC,gBAAgB,CAAC,IAAI,CAAC;YAAE,IAAI,CAAC,UAAU,CAAC,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,GAAG,CAAC,CAAC;QAC5E,2FAA2F;QAC3F,uCAAuC;QACvC,IAAI,EAAE,CAAC,kBAAkB,CAAC,IAAI,CAAC;YAAE,IAAI,CAAC,kBAAkB,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;QACpE,EAAE,CAAC,YAAY,CAAC,IAAI,EAAE,CAAC,KAAc,EAAE,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,OAAO,EAAE,OAAO,EAAE,GAAG,CAAC,CAAC,CAAC;IACxF,CAAC;IAED;;;;;;;;;;;;;OAaG;IACK,kBAAkB,CAAC,GAAwB,EAAE,GAAwB;QACzE,MAAM,WAAW,GAAG,IAAA,8BAAoB,EAAC,GAAG,CAAC,CAAC;QAC9C,KAAK,MAAM,KAAK,IAAI,IAAA,6BAAmB,EAAC,GAAG,CAAC,EAAE,CAAC;YAC3C,MAAM,QAAQ,GAAG,IAAA,2BAAiB,EAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YAC/C,IAAI,QAAQ,KAAK,IAAI,IAAI,WAAW,CAAC,GAAG,CAAC,QAAQ,CAAC;gBAAE,SAAS;YAC7D,MAAM,IAAI,GAAG,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;YAC/C,IAAI,IAAI,KAAK,IAAI,IAAI,IAAI,CAAC,IAAI,KAAK,UAAU;gBAAE,SAAS;YACxD,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,EAAE,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC,CAAC;QACjE,CAAC;IACL,CAAC;IAEO,UAAU,CACd,IAAuB,EACvB,OAAuB,EACvB,OAAe,EACf,GAAwB;QAExB,MAAM,MAAM,GAAG,IAAA,0BAAgB,EAAC,IAAI,CAAC,CAAC;QACtC,IAAI,MAAM,KAAK,IAAI,IAAI,IAAI,CAAC,SAAS,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO;QAC3D,IAAI,MAAM,KAAK,iBAAiB,EAAE,CAAC;YAC/B,MAAM,IAAI,GAAG,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC;YACvE,IAAI,IAAI;gBAAE,GAAG,CAAC,aAAa,CAAC,IAAI,CAAC,KAAK,EAAE,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;YAC5E,OAAO;QACX,CAAC;QACD,IAAI,MAAM,KAAK,iBAAiB,IAAI,MAAM,KAAK,oBAAoB,EAAE,CAAC;YAClE,MAAM,IAAI,GAAG,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC;YACvE,IAAI,CAAC,IAAI;gBAAE,OAAO;YAClB,mFAAmF;YACnF,8EAA8E;YAC9E,MAAM,aAAa,GAAG,IAAA,yBAAe,EAAC,IAAI,CAAC,CAAC;YAC5C,MAAM,GAAG,GAAW,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC;YACvD,IAAI,aAAa,KAAK,IAAI;gBAAE,GAAG,CAAC,aAAa,GAAG,aAAa,CAAC;YAC9D,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;QACjC,CAAC;IACL,CAAC;IAED,oFAAoF;IAC5E,eAAe,CACnB,IAAmB,EACnB,OAAuB,EACvB,OAAe;QAEf,MAAM,IAAI,GAAG,IAAA,kCAAuB,EAAC,IAAI,EAAE,OAAO,CAAC,CAAC;QACpD,IAAI,CAAC,IAAI;YAAE,OAAO,IAAI,CAAC;QACvB,MAAM,UAAU,GAAG,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC;QAC9C,OAAO,UAAU,IAAI,IAAI,CAAC,sBAAsB,CAAC,IAAI,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC;IAC1E,CAAC;IAED;;;;;;OAMG;IACK,sBAAsB,CAC1B,IAAyB,EACzB,IAAmB,EACnB,OAAe;QAEf,8FAA8F;QAC9F,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,CAAC,iBAAiB,IAAI,CAAC,IAAA,yBAAe,EAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI;YAC/E,OAAO,IAAI,CAAC;QAChB,MAAM,SAAS,GAAG,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC1D,IAAI,SAAS;YAAE,OAAO,SAAS,CAAC;QAChC,0FAA0F;QAC1F,IAAI,CAAC,kBAAkB,CAAC,IAAI,CACxB,IAAI,iCAAiB,CACjB,OAAO,EACP,IAAI,CAAC,IAAI,CAAC,IAAI,EACd,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,EAC3B,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,aAAa,EAAE,CAAC,QAAQ,CAAC,CACnD,CACJ,CAAC;QACF,OAAO,IAAI,CAAC;IAChB,CAAC;IAED,0FAA0F;IAClF,gBAAgB,CAAC,IAAa;QAClC,MAAM,UAAU,GAAG,IAAI,CAAC,aAAa,EAAE,CAAC;QACxC,MAAM,QAAQ,GAAG,UAAU,CAAC,6BAA6B,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC;QAC3E,OAAO,GAAG,IAAI,CAAC,YAAY,CAAC,UAAU,CAAC,QAAQ,CAAC,IAAI,QAAQ,CAAC,IAAI,GAAG,CAAC,EAAE,CAAC;IAC5E,CAAC;IAEO,YAAY,CAAC,OAAe;QAChC,OAAO,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,aAAa,EAAE,OAAO,CAAC,CAAC;IACtD,CAAC;IAED;;;;;OAKG;IACK,eAAe,CAAC,GAAwB;QAC5C,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,GAAG,CAAC,aAAa,EAAE,CAAC,QAAQ,CAAC,CAAC;QACnE,IAAI,KAAK,KAAK,IAAI;YAAE,OAAO,IAAI,CAAC;QAChC,OAAO,IAAA,0BAAgB,EAAC,GAAG,EAAE,KAAK,CAAC,CAAC;IACxC,CAAC;CACJ;AAzND,0CAyNC;AAED;;;;;;GAMG;AACH,kHAAkH;AAClH,SAAgB,yBAAyB,CACrC,aAAqB,EACrB,KAAoB,EACpB,YAAsC,EACtC,mBAAsC,EAAE;IAExC,MAAM,MAAM,GAAG,IAAI,eAAe,CAC9B,aAAa,EACb,YAAY,EACZ,gBAAgB,EAChB,+BAAa,CAAC,UAAU,CAAC,aAAa,CAAC,EACvC,0BAAU,CAAC,UAAU,CAAC,aAAa,EAAE,4BAAY,CAAC,EAClD,0BAAU,CAAC,UAAU,CAAC,aAAa,EAAE,wBAAQ,CAAC,EAC9C,8BAAe,CAAC,UAAU,CAAC,aAAa,CAAC,CAC5C,CAAC,IAAI,EAAE,CAAC;IACT,KAAK,MAAM,WAAW,IAAI,MAAM,CAAC,kBAAkB,CAAC,IAAI,EAAE,EAAE,CAAC;QACzD,MAAM,KAAK,GAAG,KAAK,CAAC,WAAW,CAAC,CAAC;QACjC,IAAI,KAAK;YAAE,KAAK,CAAC,YAAY,GAAG,MAAM,CAAC,kBAAkB,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;IAC/E,CAAC;IACD,OAAO,MAAM,CAAC;AAClB,CAAC;AAED;;;;;;;;;;;;;;;;;;;GAmBG;AACH,uGAAuG;AACvG,SAAgB,iBAAiB,CAAC,IAAmB;IACjD,gGAAgG;IAChG,0CAA0C;IAC1C,IAAI,IAAI,CAAC,uBAAuB,CAAC,MAAM,GAAG,CAAC;QACvC,MAAM,IAAI,iDAA2B,CAAC,IAAI,CAAC,uBAAuB,CAAC,CAAC;IACxE,IAAI,IAAI,CAAC,mBAAmB,CAAC,MAAM,GAAG,CAAC;QACnC,MAAM,IAAI,6CAAuB,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAC;IAChE,IAAI,IAAI,CAAC,4BAA4B,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC/C,MAAM,IAAI,sDAAgC,CAAC,IAAI,CAAC,4BAA4B,CAAC,CAAC;IAClF,CAAC;IACD,IAAI,CAAC,IAAI,CAAC,sBAAsB,IAAI,EAAE,CAAC,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACjD,MAAM,IAAI,+CAAyB,CAAC,IAAI,CAAC,sBAAsB,CAAC,CAAC;IACrE,CAAC;IACD,kGAAkG;IAClG,gDAAgD;IAChD,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,OAAO,EAAE;QAAE,MAAM,IAAI,2CAAqB,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;IACjF,2FAA2F;IAC3F,+FAA+F;IAC/F,iGAAiG;IACjG,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC;QACtC,MAAM,IAAI,6CAAuB,CAAC,IAAI,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC;IAChE,CAAC;IACD,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,OAAO,EAAE,EAAE,CAAC;QAClC,MAAM,IAAI,yCAAmB,CAAC,IAAI,CAAC,WAAW,CAAC,GAAG,EAAE,IAAI,CAAC,WAAW,CAAC,aAAa,CAAC,CAAC;IACxF,CAAC;IACD,+FAA+F;IAC/F,gEAAgE;IAChE,IAAI,IAAI,CAAC,yBAAyB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC5C,MAAM,IAAI,mDAA6B,CAAC,IAAI,CAAC,yBAAyB,CAAC,CAAC;IAC5E,CAAC;IACD,MAAM,SAAS,GAAiB,EAAE,CAAC;IACnC,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,KAAK,MAAM,GAAG,IAAI,CAAC,GAAG,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC;QACjD,MAAM,IAAI,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAE,CAAC;QACrC,IAAI,IAAI,CAAC,OAAO,CAAC,MAAM,KAAK,CAAC;YAAE,SAAS;QACxC,IAAI,IAAI,CAAC,QAAQ,KAAK,SAAS,EAAE,CAAC;YAC9B,OAAO,CAAC,IAAI,CAAC,GAAG,GAAG,WAAW,IAAI,CAAC,KAAK,GAAG,CAAC,CAAC;YAC7C,SAAS;QACb,CAAC;QACD,MAAM,QAAQ,GAAgB;YAC1B,KAAK,EAAE,IAAI,CAAC,KAAK;YACjB,OAAO,EAAE,IAAI,CAAC,IAAI;YAClB,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,OAAO,EAAE,IAAI,CAAC,OAAO;SACxB,CAAC;QACF,SAAS,CAAC,GAAG,CAAC,GAAG,QAAQ,CAAC;IAC9B,CAAC;IACD,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC;QAAE,MAAM,IAAI,0CAAoB,CAAC,OAAO,CAAC,CAAC;IAChE,OAAO,SAAS,CAAC;AACrB,CAAC;AAED;;;;;;GAMG;AACH,oGAAoG;AACpG,SAAgB,+BAA+B,CAAC,IAAuC;IACnF,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,CAAC;IACjC,MAAM,KAAK,GAAG;QACV,OAAO,IAAI,CAAC,MAAM,2EAA2E;QAC7F,mGAAmG;KACtG,CAAC;IACF,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;QACrB,MAAM,KAAK,GAAG,GAAG,CAAC,MAAM,KAAK,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,MAAM,EAAE,CAAC;QACzE,KAAK,CAAC,IAAI,CAAC,WAAW,GAAG,CAAC,SAAS,IAAI,GAAG,CAAC,QAAQ,QAAQ,KAAK,OAAO,GAAG,CAAC,EAAE,EAAE,CAAC,CAAC;IACrF,CAAC;IACD,KAAK,CAAC,IAAI,CACN,iGAAiG,EACjG,iGAAiG,EACjG,kGAAkG,CACrG,CAAC;IACF,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC5B,CAAC;AAED;;;;;GAKG;AACH,oGAAoG;AACpG,SAAgB,+BAA+B,CAAC,SAAuB;IACnE,MAAM,aAAa,GAA4C;QAC3D,GAAG,EAAE,CAAC,KAAK,EAAE,kBAAkB,EAAE,mBAAmB,CAAC;QACrD,MAAM,EAAE,CAAC,YAAY,EAAE,MAAM,EAAE,kBAAkB,CAAC;QAClD,QAAQ,EAAE,CAAC,mBAAmB,CAAC;KAClC,CAAC;IACF,MAAM,QAAQ,GAAa,EAAE,CAAC;IAC9B,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC;QACvC,MAAM,QAAQ,GAAG,SAAS,CAAC,GAAG,CAAC,CAAC;QAChC,MAAM,OAAO,GAAG,aAAa,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;QAChD,IAAI,OAAO,KAAK,SAAS;YAAE,SAAS;QACpC,KAAK,MAAM,MAAM,IAAI,QAAQ,CAAC,OAAO,EAAE,CAAC;YACpC,IAAI,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC;gBAAE,SAAS;YAC5C,QAAQ,CAAC,IAAI,CACT,GAAG,GAAG,IAAI,MAAM,CAAC,IAAI,uBAAuB,MAAM,CAAC,UAAU,IAAI,MAAM,MAAM,MAAM,CAAC,IAAI,MAAM,MAAM,CAAC,SAAS,KAAK,MAAM,CAAC,IAAI,SAAS,GAAG,MAAM;gBAC5I,IAAI,QAAQ,CAAC,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,KAAK,wBAAwB,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CACzG,CAAC;QACN,CAAC;IACL,CAAC;IACD,OAAO,QAAQ,CAAC;AACpB,CAAC;AAED;;;;;;;;;GASG;AACH,iGAAiG;AACjG,SAAS,iBAAiB,CAAC,cAAsB;IAC7C,MAAM,UAAU,GAAG,IAAA,6BAAmB,EAAC,cAAc,CAAC,CAAC;IACvD,IAAI,CAAC,UAAU;QAAE,OAAO,mBAAmB,CAAC,cAAc,EAAE,EAAE,CAAC,CAAC;IAChE,MAAM,IAAI,GAAG,MAAM,CAAC,MAAM,CAAC,EAAE,EAAE,EAAE,CAAC,GAAG,EAAE;QACnC,mCAAmC,EAAE,GAAS,EAAE,CAAC,SAAS;KAC7D,CAA2B,CAAC;IAC7B,MAAM,MAAM,GAAG,EAAE,CAAC,gCAAgC,CAAC,UAAU,EAAE,EAAE,EAAE,IAAI,CAAC,CAAC;IACzE,IAAI,CAAC,MAAM;QAAE,OAAO,IAAI,CAAC;IACzB,IAAI,MAAM,CAAC,SAAS,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,EAAE,CAAC,aAAa,CAAC,MAAM,CAAC,SAAS,EAAE,MAAM,CAAC,OAAO,CAAC,CAAC;IAC3F,OAAO,mBAAmB,CAAC,cAAc,EAAE,MAAM,CAAC,OAAO,CAAC,CAAC;AAC/D,CAAC;AAED,wGAAwG;AACxG,SAAS,mBAAmB,CACxB,cAAsB,EACtB,OAA2B;IAE3B,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,cAAc,EAAE,KAAK,CAAC,CAAC;IAChD,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,MAAM,CAAC;QAAE,OAAO,IAAI,CAAC;IACxC,MAAM,KAAK,GAAG,IAAA,wBAAc,EAAC,MAAM,CAAC,CAAC;IACrC,OAAO,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,aAAa,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;AACtE,CAAC","sourcesContent":["/**\n * API Usage Scanner\n *\n * Derives, by scanning real source (not a declaration file), how every project\n * relates to the api-lib projects it depends on. This is the single source of\n * truth for the `apiRelations` field in architecture/dependencies.json AND for\n * the runtime microservice graph.\n *\n * Signals (all resolved through the TypeScript checker, so re-exports resolve):\n *   - IMPLEMENTS: `apiFactory.addRoutes(XxxApi, XxxController)` — the registration\n *                 that actually SERVES the contract over the wire. We deliberately\n *                 do NOT use `class Ctrl extends XxxApi`: a class can extend an API\n *                 as an in-process test double / simulator (e.g. Server2Simulator)\n *                 without ever serving it — only `addRoutes` proves a served route.\n *   - USES:       `factory.createRpcClient(XxxApi, ...)`    → rpc client\n *                 `factory.createPubSubClient(XxxApi, ...)` → pubsub (Cloud Tasks) client\n *                 The config argument (`new ClientConfig('helper-fsdb')`) names WHICH service the\n *                 client talks to and is kept as `ApiRef.targetService` — see targetServiceOf.\n * An api-lib is DETECTED, not tagged: a project exporting an `abstract class`\n * carrying `@ApiPath` owns that API. Its transport is `@PubSub` → 'pubsub', else 'rpc'.\n *\n * Contracts are indexed from SOURCE in a pre-pass (ApiSourceIndexBuilder) rather than\n * from wherever the checker resolves an import to. A consumer without a tsconfig.base\n * `paths` entry resolves `import { XxxApi } from '@scope/xxx-api'` through node_modules\n * to the package's BUILT `dist/**.d.ts` — and tsc ERASES decorators when emitting\n * declarations, so `@ApiPath` can never be read there. Keying off the resolved\n * declaration therefore dropped whole services from the graph, silently. See\n * `recoverFromDeclaration`.\n */\n\nimport * as ts from 'typescript';\nimport * as fs from 'fs';\nimport * as path from 'path';\nimport { matchesAnyGlob, RuleFailError, Option } from '@webpieces/rules-config';\nimport type { EnhancedGraph } from '../graph-sorter';\nimport { ProjectInfo } from '../project-info';\nimport { findProjectTsconfig } from '../di-graph/program';\nimport { resolveClassDeclaration } from '../di-graph/bindings';\nimport {\n    ApiClassInfo,\n    ApiContract,\n    ApiContracts,\n    ApiRef,\n    ApiRelation,\n    EmptiedApiContract,\n    EndpointKind,\n    NonLiteralDecoratorArg,\n    ProjectApiRelations,\n    UndeclaredExternalCaller,\n    UndeclaredEndpointOperation,\n    VoidResponseMismatch,\n    UnresolvedApiCall,\n    UnresolvedEndpointPath,\n    apiRefKey,\n    deriveApiRelationKind,\n    sortApiRefs,\n} from './api-relations';\nimport {\n    ApiRulesForMcpError,\n    ApiRulesForOpenApiError,\n    EmptiedApiContractError,\n    MissingBasePathError,\n    RootUnionApiTypeError,\n    UndeclaredExternalCallerError,\n    UndeclaredEndpointOperationError,\n    VoidResponseMismatchError,\n    UnresolvedEndpointPathError,\n} from './api-contract-errors';\nimport { RootUnionFindings, RootUnionRule, RootUnionScan } from './root-union-scan';\nimport { ApiDocRule, ApiDocRulesFindings, MCP_RULE, OPENAPI_RULE } from './api-doc-rules';\nimport { ApiDocRulesScan } from './api-doc-rules-scan';\nimport { WireClosureRule } from './wire-closure';\nimport {\n    DecoratorArgDiagnostics,\n    apiClassInfoFrom,\n    apiClassInfoFromNode,\n    calleeMethodName,\n    collectTsFiles,\n    constructorParamsOf,\n    externalApiInfoFrom,\n    implementedTypeNames,\n    isAbstractClass,\n    isTestFile,\n    targetServiceOf,\n    typeReferenceName,\n} from './api-ast';\n\nconst RPC_CLIENT_METHOD = 'createRpcClient';\nconst PUBSUB_CLIENT_METHOD = 'createPubSubClient';\nconst ADD_ROUTES_METHOD = 'addRoutes';\n\n/** The whole-workspace result of a scan. */\nexport interface ApiScanResult {\n    /** projectName -> { apiLibProject -> relation }; only projects with ≥1 relation appear. */\n    relationsByProject: Map<string, ProjectApiRelations>;\n    /** Every project that owns ≥1 API contract class. */\n    apiLibProjects: Set<string>;\n    /** apiClassName -> where it lives + its transport. */\n    apiIndex: Map<string, ApiClassInfo>;\n    /**\n     * Projects whose production (non-test) source was actually scanned. A project with only test\n     * files (e.g. an e2e harness), or one the compiler couldn't load, is ABSENT — callers must not\n     * conclude \"no implements/uses\" for it, because its behavior was never observed.\n     */\n    scannedProjects: Set<string>;\n    /**\n     * Call sites naming a contract we could not map back to workspace source. Non-empty means the\n     * graph is INCOMPLETE — callers must surface these rather than emit a green, wrong graph.\n     */\n    unresolvedApiCalls: UnresolvedApiCall[];\n    /**\n     * Decorator arguments that were present but could not be reduced to a string (a cross-module\n     * constant, a computed expression). Each one costs the graph a basePath, a method, or — when it\n     * takes out every method of a class — the whole contract, so they must be surfaced.\n     */\n    nonLiteralDecoratorArgs: NonLiteralDecoratorArg[];\n    /**\n     * The subset of the above that is FATAL: an `@Endpoint` path that could not be read. Every client\n     * builds its URL as `basePath + path`, so this is missing routing, not missing metadata —\n     * buildApiContracts throws on a non-empty list rather than shipping a contract without it.\n     */\n    unresolvedEndpointPaths: UnresolvedEndpointPath[];\n    /**\n     * Contract classes that declared `@Endpoint` methods and kept none — the exact shape that used to\n     * slip out through buildApiContracts' zero-method skip, taking a whole service's queues with it.\n     */\n    emptiedApiContracts: EmptiedApiContract[];\n    /**\n     * `external` endpoints that did not say WHO calls them. Fatal: the inbound box on the runtime\n     * graph exists to name that system, and with nothing to name it restates our own contract name.\n     */\n    undeclaredExternalCallers: UndeclaredExternalCaller[];\n    /** Endpoints lacking the explicit side-effect contract used for retry safety and MCP hints. */\n    undeclaredEndpointOperations: UndeclaredEndpointOperation[];\n    /** Endpoints whose response-body declaration disagrees with their kind or signature. Fatal. */\n    voidResponseMismatches: VoidResponseMismatch[];\n    /** `no-root-union-api-type`'s findings. Fatal in buildApiContracts — see root-union-scan.ts. */\n    rootUnions: RootUnionFindings;\n    /**\n     * `api-rules-for-openapi` / `api-rules-for-mcp` findings (#1011). Both ship OFF, so this is\n     * EMPTY unless a repo stated otherwise — no rule in this framework has a default (#1017).\n     */\n    apiDocRules: ApiDocRulesFindings;\n}\n\n/** Maps an absolute source-file path to the workspace project that owns it (longest-root-prefix). */\nclass ProjectLocator {\n    private readonly roots: ProjectRoot[];\n\n    constructor(workspaceRoot: string, projectInfos: Map<string, ProjectInfo>) {\n        const roots: ProjectRoot[] = [];\n        for (const info of projectInfos.values()) {\n            if (info.root === '' || info.root === '.') continue;\n            roots.push(new ProjectRoot(info.name, path.resolve(workspaceRoot, info.root)));\n        }\n        // Longest root first so a nested project wins over its parent.\n        this.roots = roots.sort((a: ProjectRoot, b: ProjectRoot) => b.abs.length - a.abs.length);\n    }\n\n    projectOf(absFile: string): string | null {\n        const normalized = path.resolve(absFile);\n        for (const root of this.roots) {\n            if (normalized === root.abs || normalized.startsWith(root.abs + path.sep))\n                return root.name;\n        }\n        return null;\n    }\n}\n\nclass ProjectRoot {\n    constructor(\n        public readonly name: string,\n        public readonly abs: string,\n    ) {}\n}\n\n/**\n * Every API contract in the workspace, keyed by class name, read from SOURCE.\n *\n * Name-keyed because a call site only ever gives us a name once its import has resolved into a\n * decorator-erased declaration. Two api-libs exporting the same class name collide (last wins) —\n * the same collision the published `apiIndex` has always had.\n */\nclass ApiSourceIndex {\n    constructor(\n        public readonly byName: Map<string, ApiClassInfo>,\n        public readonly owners: Set<string>,\n    ) {}\n\n    lookup(api: string): ApiClassInfo | null {\n        return this.byName.get(api) ?? null;\n    }\n}\n\n/**\n * Builds the ApiSourceIndex by parsing each project's own `src/**` directly.\n *\n * Deliberately parser-only (no ts.Program, no checker): we need the decorators exactly as\n * written, and a plain parse cannot be diverted to a `.d.ts` by module resolution — which is\n * the entire bug this guards against. It is also cheap enough to run over every project.\n */\nexport class ApiSourceIndexBuilder {\n    private readonly byName = new Map<string, ApiClassInfo>();\n    private readonly owners = new Set<string>();\n\n    constructor(\n        private readonly workspaceRoot: string,\n        private readonly projectInfos: Map<string, ProjectInfo>,\n        /** Globs of project roots holding vendor contracts — see ExternalApiIndex. */\n        private readonly externalApiPaths: readonly string[],\n        /** Sink for decorator arguments this parser-only pass cannot reduce to a string. */\n        private readonly diagnostics: DecoratorArgDiagnostics,\n    ) {}\n\n    build(): ApiSourceIndex {\n        for (const info of this.projectInfos.values()) {\n            if (info.root === '' || info.root === '.') continue;\n            this.indexProject(info);\n        }\n        return new ApiSourceIndex(this.byName, this.owners);\n    }\n\n    private indexProject(info: ProjectInfo): void {\n        const srcDir = path.join(path.resolve(this.workspaceRoot, info.root), 'src');\n        if (!fs.existsSync(srcDir)) return;\n        const external = matchesAnyGlob(info.root, this.externalApiPaths);\n        for (const file of collectTsFiles(srcDir)) {\n            if (isTestFile(file)) continue; // tests are not production topology\n            const text = fs.readFileSync(file, 'utf8');\n            const sourceFile = ts.createSourceFile(file, text, ts.ScriptTarget.Latest, true);\n            this.indexNode(sourceFile, info.name, external);\n        }\n    }\n\n    private indexNode(node: ts.Node, project: string, external: boolean): void {\n        const info = external\n            ? externalApiInfoFrom(node, project)\n            : apiClassInfoFromNode(node, project, this.diagnostics);\n        if (info) {\n            this.owners.add(project);\n            const previous = this.byName.get(info.api);\n            if (previous !== undefined && previous.owner !== project)\n                throw new RuleFailError(\n                    'validate-runtime-architecture',\n                    `Ambiguous saved contract name ${info.api}: ${previous.owner}#${info.api} and ${project}#${info.api}.`,\n                    undefined,\n                    undefined,\n                    [\n                        new Option(\n                            'Use distinct exported contract names in the saved contract table; source ownership must never be merged by short name.',\n                            true,\n                        ),\n                    ],\n                );\n            this.byName.set(info.api, info);\n        }\n        ts.forEachChild(node, (child: ts.Node) => this.indexNode(child, project, external));\n    }\n}\n/** Per-owner accumulator that dedupes API refs while a single project is scanned. */\nclass RelationAccumulator {\n    private readonly implementsByOwner = new Map<string, Map<string, ApiRef>>();\n    private readonly usesByOwner = new Map<string, Map<string, ApiRef>>();\n\n    addImplements(owner: string, ref: ApiRef): void {\n        ensureRefMap(this.implementsByOwner, owner).set(apiRefKey(ref), ref);\n    }\n\n    /**\n     * Keyed by api + targetService: one project legitimately binds the SAME contract against two\n     * different services (a WarmupApi client per data server), and those are two relations, not one.\n     */\n    addUses(owner: string, ref: ApiRef): void {\n        ensureRefMap(this.usesByOwner, owner).set(apiRefKey(ref), ref);\n    }\n\n    /** Build the deterministic { owner -> relation } record, owners in sorted order. */\n    toRelations(): ProjectApiRelations {\n        const owners = new Set<string>([\n            ...this.implementsByOwner.keys(),\n            ...this.usesByOwner.keys(),\n        ]);\n        const relations: ProjectApiRelations = {};\n        for (const owner of [...owners].sort()) {\n            const implementsRefs = sortApiRefs([\n                ...(this.implementsByOwner.get(owner)?.values() ?? []),\n            ]);\n            const usesRefs = sortApiRefs([...(this.usesByOwner.get(owner)?.values() ?? [])]);\n            const relation: ApiRelation = {\n                kind: deriveApiRelationKind(implementsRefs, usesRefs),\n                implements: implementsRefs,\n                uses: usesRefs,\n            };\n            relations[owner] = relation;\n        }\n        return relations;\n    }\n\n    isEmpty(): boolean {\n        return this.implementsByOwner.size === 0 && this.usesByOwner.size === 0;\n    }\n}\n\n// webpieces-disable no-function-outside-class -- tiny map helper, matching the AST-helper style of di-graph/bindings.ts\nfunction ensureRefMap(map: Map<string, Map<string, ApiRef>>, owner: string): Map<string, ApiRef> {\n    let inner = map.get(owner);\n    if (!inner) {\n        inner = new Map<string, ApiRef>();\n        map.set(owner, inner);\n    }\n    return inner;\n}\n\n/** Statically scans every project for its api-lib implements/uses relationships. */\nexport class ApiUsageScanner {\n    private readonly locator: ProjectLocator;\n    private readonly relationsByProject = new Map<string, ProjectApiRelations>();\n    private readonly scannedProjects = new Set<string>();\n    private readonly unresolvedApiCalls: UnresolvedApiCall[] = [];\n    private readonly decoratorArgDiagnostics: DecoratorArgDiagnostics;\n    private sourceIndex = new ApiSourceIndex(new Map<string, ApiClassInfo>(), new Set<string>());\n\n    constructor(\n        private readonly workspaceRoot: string,\n        private readonly projectInfos: Map<string, ProjectInfo>,\n        /** Globs of project roots whose exported `*Api` types are contracts for outside systems. */\n        private readonly externalApiPaths: readonly string[] = [],\n        /** `no-root-union-api-type`'s switches — ARMED unless scanAndAttachApiRelations read otherwise. */\n        private readonly rootUnionRule: RootUnionRule = RootUnionRule.enabledEverywhere(),\n        /** `api-rules-for-openapi`'s switches — read from the config, which MUST state them (#1017). */\n        private readonly openApiRule: ApiDocRule = ApiDocRule.off(OPENAPI_RULE),\n        /** `api-rules-for-mcp`'s switches — read from the config, which MUST state them (#1017). */\n        private readonly mcpRule: ApiDocRule = ApiDocRule.off(MCP_RULE),\n        private readonly wireClosureRule: WireClosureRule = WireClosureRule.withoutSuffixes(), // #1064 D4\n    ) {\n        this.locator = new ProjectLocator(workspaceRoot, projectInfos);\n        this.decoratorArgDiagnostics = new DecoratorArgDiagnostics(workspaceRoot);\n    }\n\n    scan(): ApiScanResult {\n        // Pre-pass: every contract, from source, BEFORE any call site is resolved — a call site in\n        // one project routinely names a contract owned by a project we have not walked yet.\n        this.sourceIndex = new ApiSourceIndexBuilder(\n            this.workspaceRoot,\n            this.projectInfos,\n            this.externalApiPaths,\n            this.decoratorArgDiagnostics,\n        ).build();\n        for (const info of this.projectInfos.values()) {\n            if (info.root === '' || info.root === '.') continue;\n            this.scanProject(info);\n        }\n        return {\n            relationsByProject: this.relationsByProject,\n            apiLibProjects: this.sourceIndex.owners,\n            apiIndex: this.sourceIndex.byName,\n            scannedProjects: this.scannedProjects,\n            unresolvedApiCalls: this.unresolvedApiCalls,\n            nonLiteralDecoratorArgs: this.decoratorArgDiagnostics.all(),\n            unresolvedEndpointPaths: this.decoratorArgDiagnostics.unresolvedEndpointPaths(),\n            emptiedApiContracts: this.decoratorArgDiagnostics.emptiedContracts(),\n            undeclaredExternalCallers: this.decoratorArgDiagnostics.undeclaredExternalCallers(),\n            undeclaredEndpointOperations:\n                this.decoratorArgDiagnostics.undeclaredEndpointOperations(),\n            voidResponseMismatches: this.decoratorArgDiagnostics.voidResponseMismatches(),\n            rootUnions: new RootUnionScan(\n                this.workspaceRoot,\n                this.projectInfos,\n                this.rootUnionRule,\n            ).run(),\n            apiDocRules: new ApiDocRulesScan(\n                this.workspaceRoot,\n                this.projectInfos,\n                this.openApiRule,\n                this.mcpRule,\n                this.wireClosureRule,\n            ).run(),\n        };\n    }\n\n    private scanProject(info: ProjectInfo): void {\n        const program = createScanProgram(path.resolve(this.workspaceRoot, info.root));\n        if (!program) return;\n        const checker = program.getTypeChecker();\n        const accumulator = new RelationAccumulator();\n        let scannedProductionFile = false;\n\n        for (const sourceFile of program.getSourceFiles()) {\n            if (sourceFile.isDeclarationFile || sourceFile.fileName.includes('/node_modules/'))\n                continue;\n            if (isTestFile(sourceFile.fileName)) continue; // tests are not production topology\n            // Only this project's OWN files — imported api-lib source is in the program too.\n            if (this.locator.projectOf(sourceFile.fileName) !== info.name) continue;\n            scannedProductionFile = true;\n            this.visit(sourceFile, checker, info.name, accumulator);\n        }\n\n        // Record coverage only when we actually saw production source — an all-test project (e2e)\n        // stays absent so the validator won't wrongly flag its api-lib deps as unused.\n        if (scannedProductionFile) this.scannedProjects.add(info.name);\n        if (!accumulator.isEmpty())\n            this.relationsByProject.set(info.name, accumulator.toRelations());\n    }\n\n    private visit(\n        node: ts.Node,\n        checker: ts.TypeChecker,\n        project: string,\n        acc: RelationAccumulator,\n    ): void {\n        // In-repo contract classes are indexed by the source pre-pass, so only calls matter for them.\n        if (ts.isCallExpression(node)) this.recordCall(node, checker, project, acc);\n        // A VENDOR contract has no client-factory call site to key off — it arrives by injection —\n        // so classes have to be inspected too.\n        if (ts.isClassDeclaration(node)) this.recordExternalUses(node, acc);\n        ts.forEachChild(node, (child: ts.Node) => this.visit(child, checker, project, acc));\n    }\n\n    /**\n     * Record a `uses` for every vendor contract this class receives by CONSTRUCTOR INJECTION —\n     * `constructor(@inject(GMAIL_TYPES.GmailApi) private readonly gmail: GmailApi)`.\n     *\n     * The parameter TYPE is the signal, not the token: a token is an opaque Symbol whose name we\n     * would have to guess at, while the type is written right there and is what the class actually\n     * calls. Matching happens by name against the external index, so an import that resolves to a\n     * built `.d.ts` works exactly as well as one resolving to source.\n     *\n     * A class that IMPLEMENTS the contract is skipped — that is the vendor adapter (`GmailClient`)\n     * or a test double (`InMemoryFirestore`, `MockTts`), which IS the seam rather than a caller of\n     * it. Counting those would draw an edge from every service embedding a fake to a vendor it never\n     * actually reaches.\n     */\n    private recordExternalUses(cls: ts.ClassDeclaration, acc: RelationAccumulator): void {\n        const implemented = implementedTypeNames(cls);\n        for (const param of constructorParamsOf(cls)) {\n            const typeName = typeReferenceName(param.type);\n            if (typeName === null || implemented.has(typeName)) continue;\n            const info = this.sourceIndex.lookup(typeName);\n            if (info === null || info.type !== 'external') continue;\n            acc.addUses(info.owner, { api: info.api, type: 'external' });\n        }\n    }\n\n    private recordCall(\n        call: ts.CallExpression,\n        checker: ts.TypeChecker,\n        project: string,\n        acc: RelationAccumulator,\n    ): void {\n        const method = calleeMethodName(call);\n        if (method === null || call.arguments.length === 0) return;\n        if (method === ADD_ROUTES_METHOD) {\n            const info = this.apiInfoFromExpr(call.arguments[0], checker, project);\n            if (info) acc.addImplements(info.owner, { api: info.api, type: info.type });\n            return;\n        }\n        if (method === RPC_CLIENT_METHOD || method === PUBSUB_CLIENT_METHOD) {\n            const info = this.apiInfoFromExpr(call.arguments[0], checker, project);\n            if (!info) return;\n            // Argument 2 names WHICH service this client talks to. Keeping it is what lets the\n            // runtime graph draw ONE edge instead of one per implementer of the contract.\n            const targetService = targetServiceOf(call);\n            const ref: ApiRef = { api: info.api, type: info.type };\n            if (targetService !== null) ref.targetService = targetService;\n            acc.addUses(info.owner, ref);\n        }\n    }\n\n    /** Resolve an expression to the API contract it names, or null if it is not one. */\n    private apiInfoFromExpr(\n        expr: ts.Expression,\n        checker: ts.TypeChecker,\n        project: string,\n    ): ApiClassInfo | null {\n        const decl = resolveClassDeclaration(expr, checker);\n        if (!decl) return null;\n        const fromSource = this.apiClassInfoFor(decl);\n        return fromSource ?? this.recoverFromDeclaration(decl, expr, project);\n    }\n\n    /**\n     * The checker landed on a BUILT declaration instead of source — the consumer has no\n     * tsconfig.base `paths` entry for the api-lib, so the import went through node_modules to\n     * `dist/**.d.ts`. tsc erases decorators when emitting declarations, so `@ApiPath` is simply\n     * not there and never will be. Recover the contract by name from the source index; the graph\n     * is then correct no matter how the consumer's tsconfig is laid out.\n     */\n    private recoverFromDeclaration(\n        decl: ts.ClassDeclaration,\n        expr: ts.Expression,\n        project: string,\n    ): ApiClassInfo | null {\n        // An abstract class is the shape of a contract; a non-abstract argument is genuinely not one.\n        if (!decl.getSourceFile().isDeclarationFile || !isAbstractClass(decl) || !decl.name)\n            return null;\n        const recovered = this.sourceIndex.lookup(decl.name.text);\n        if (recovered) return recovered;\n        // Abstract, in a .d.ts, yet no workspace source owns it — the scan is blind here. Say so.\n        this.unresolvedApiCalls.push(\n            new UnresolvedApiCall(\n                project,\n                decl.name.text,\n                this.relativeLocation(expr),\n                this.relativePath(decl.getSourceFile().fileName),\n            ),\n        );\n        return null;\n    }\n\n    /** `path/to/file.ts:LINE` for `node`, workspace-relative, for a human-readable report. */\n    private relativeLocation(node: ts.Node): string {\n        const sourceFile = node.getSourceFile();\n        const position = sourceFile.getLineAndCharacterOfPosition(node.getStart());\n        return `${this.relativePath(sourceFile.fileName)}:${position.line + 1}`;\n    }\n\n    private relativePath(absFile: string): string {\n        return path.relative(this.workspaceRoot, absFile);\n    }\n\n    /**\n     * {api, owner, type, methods} when `cls` is an `abstract class` carrying `@ApiPath` IN SOURCE,\n     * else null. Only the OWNER differs from the index pre-pass — here it comes from the file's\n     * location rather than from the project being walked — so the contract test itself is delegated\n     * to apiClassInfoFrom, keeping one definition of \"this is a contract\".\n     */\n    private apiClassInfoFor(cls: ts.ClassDeclaration): ApiClassInfo | null {\n        const owner = this.locator.projectOf(cls.getSourceFile().fileName);\n        if (owner === null) return null;\n        return apiClassInfoFrom(cls, owner);\n    }\n}\n\n/**\n * Run the scan and attach the derived `apiRelations` onto each graph entry in\n * place. Shared by `architecture:generate` (which then saves) and\n * `architecture:validate-architecture-unchanged` (which regenerates in memory\n * and must attach the SAME field, or it would see a phantom diff). Returns the\n * full scan so callers (validators, runtime graph) can reuse the api index.\n */\n// webpieces-disable no-function-outside-class -- module entry point, mirrors generateReducedGraph/collectBindings\nexport function scanAndAttachApiRelations(\n    workspaceRoot: string,\n    graph: EnhancedGraph,\n    projectInfos: Map<string, ProjectInfo>,\n    externalApiPaths: readonly string[] = [],\n): ApiScanResult {\n    const result = new ApiUsageScanner(\n        workspaceRoot,\n        projectInfos,\n        externalApiPaths,\n        RootUnionRule.fromConfig(workspaceRoot),\n        ApiDocRule.fromConfig(workspaceRoot, OPENAPI_RULE),\n        ApiDocRule.fromConfig(workspaceRoot, MCP_RULE),\n        WireClosureRule.fromConfig(workspaceRoot),\n    ).scan();\n    for (const projectName of result.relationsByProject.keys()) {\n        const entry = graph[projectName];\n        if (entry) entry.apiRelations = result.relationsByProject.get(projectName);\n    }\n    return result;\n}\n\n/**\n * The committed api contract table (one `architecture/apis/<ApiName>.json` per entry), from a\n * completed scan.\n *\n * Only contracts with ≥1 endpoint are emitted: a vendor seam has no routes, so a table entry for it\n * would be an empty shell, and its identity is already carried by the `external` refs in\n * apiRelations. Sorted by api name, methods left in declaration order, so the file is deterministic.\n *\n * THROWS on the ways an entry can be wrong-but-green, checked root cause first:\n *   1. an `@Endpoint` path the scan could not read (UnresolvedEndpointPathError) — the other half of\n *      the URL a consumer computes, and the cause of most emptied contracts;\n *   2. a class that declared endpoints and kept none (EmptiedApiContractError), which would otherwise\n *      leave silently through the zero-method skip above;\n *   3. a method without an explicit operation (UndeclaredEndpointOperationError);\n *   4. an `external` method that never said WHO calls it (UndeclaredExternalCallerError);\n *   5. a routed contract with no basePath (MissingBasePathError).\n * All are worse than an absent entry: a consumer joining `basePath + path` computes a\n * confidently wrong URL with no signal that anything is off, because every other entry is complete.\n * Each error aggregates EVERY offender, so a developer fixing five constants sees five in one run.\n */\n// webpieces-disable no-function-outside-class -- module entry point, mirrors scanAndAttachApiRelations\nexport function buildApiContracts(scan: ApiScanResult): ApiContracts {\n    // Root cause before symptom: an unreadable path is what empties a contract, so naming the paths\n    // is what the author can actually act on.\n    if (scan.unresolvedEndpointPaths.length > 0)\n        throw new UnresolvedEndpointPathError(scan.unresolvedEndpointPaths);\n    if (scan.emptiedApiContracts.length > 0)\n        throw new EmptiedApiContractError(scan.emptiedApiContracts);\n    if (scan.undeclaredEndpointOperations.length > 0) {\n        throw new UndeclaredEndpointOperationError(scan.undeclaredEndpointOperations);\n    }\n    if ((scan.voidResponseMismatches ?? []).length > 0) {\n        throw new VoidResponseMismatchError(scan.voidResponseMismatches);\n    }\n    // A shape no function-calling API will accept, read perfectly well — unlike the four above, which\n    // are contracts the scan could not READ at all.\n    if (!scan.rootUnions.isEmpty()) throw new RootUnionApiTypeError(scan.rootUnions);\n    // Contract shapes that are not PUBLISHABLE, read by the generator's own extractor (#1011).\n    // After the root union, which is the one shape no function-calling API will accept at all, and\n    // before the caller checks below, which are about the architecture graph rather than a document.\n    if (!scan.apiDocRules.openApi.isEmpty()) {\n        throw new ApiRulesForOpenApiError(scan.apiDocRules.openApi);\n    }\n    if (!scan.apiDocRules.mcp.isEmpty()) {\n        throw new ApiRulesForMcpError(scan.apiDocRules.mcp, scan.apiDocRules.mcpExclusions);\n    }\n    // After the two above: an unreadable path is what empties a contract, and a contract that lost\n    // every method has no external endpoint left to complain about.\n    if (scan.undeclaredExternalCallers.length > 0) {\n        throw new UndeclaredExternalCallerError(scan.undeclaredExternalCallers);\n    }\n    const contracts: ApiContracts = {};\n    const missing: string[] = [];\n    for (const api of [...scan.apiIndex.keys()].sort()) {\n        const info = scan.apiIndex.get(api)!;\n        if (info.methods.length === 0) continue;\n        if (info.basePath === undefined) {\n            missing.push(`${api} (owner ${info.owner})`);\n            continue;\n        }\n        const contract: ApiContract = {\n            owner: info.owner,\n            apiKind: info.type,\n            basePath: info.basePath,\n            methods: info.methods,\n        };\n        contracts[api] = contract;\n    }\n    if (missing.length > 0) throw new MissingBasePathError(missing);\n    return contracts;\n}\n\n/**\n * Loud, actionable report for decorator arguments the scan could not reduce to a string.\n *\n * Same-module constants resolve, so anything reaching here is genuinely out of reach of a\n * parser-only pass — and every one of them silently shrinks the graph. Empty string when there is\n * nothing to say, so callers can test it without special-casing.\n */\n// webpieces-disable no-function-outside-class -- pure formatter, mirrors describeUnresolvedApiCalls\nexport function describeNonLiteralDecoratorArgs(args: readonly NonLiteralDecoratorArg[]): string {\n    if (args.length === 0) return '';\n    const lines = [\n        `⚠️  ${args.length} decorator argument(s) are not string literals and could not be resolved.`,\n        `   Each one drops data from the graph: a missing basePath, a missing method, or a whole contract:`,\n    ];\n    for (const arg of args) {\n        const where = arg.method === null ? arg.api : `${arg.api}.${arg.method}`;\n        lines.push(`     • @${arg.decorator}(${arg.argument}) on ${where} at ${arg.at}`);\n    }\n    lines.push(\n        `   A constant declared in the SAME module resolves. One imported from another module does not —`,\n        `   this scan is parser-only by design (module resolution can land on a decorator-erased .d.ts).`,\n        `   Fix by inlining the string literal, or by moving the constant into the contract's own module.`,\n    );\n    return lines.join('\\n');\n}\n\n/**\n * Every contract method whose declared @Endpoint kind its api kind cannot deliver — an rpc method on\n * a @PubSub contract (nothing calls a queue synchronously), or a cloudtasks/cron method on an @Rpc\n * contract (naming a queue or schedule nothing could deliver to). Mirrors core-util's\n * ENDPOINT_KINDS_BY_API_KIND at BUILD time, where it can name the file instead of throwing at wiring.\n */\n// webpieces-disable no-function-outside-class -- pure formatter, mirrors describeUnresolvedApiCalls\nexport function describeMismatchedEndpointKinds(contracts: ApiContracts): string[] {\n    const allowedByKind: Record<string, readonly EndpointKind[]> = {\n        rpc: ['rpc', 'external-inbound', 'external-outbound'],\n        pubsub: ['cloudtasks', 'cron', 'external-inbound'],\n        external: ['external-outbound'],\n    };\n    const problems: string[] = [];\n    for (const api of Object.keys(contracts)) {\n        const contract = contracts[api];\n        const allowed = allowedByKind[contract.apiKind];\n        if (allowed === undefined) continue;\n        for (const method of contract.methods) {\n            if (allowed.includes(method.kind)) continue;\n            problems.push(\n                `${api}.${method.name} declares @Endpoint(${method.httpMethod ?? 'POST'}, '${method.path}', ${method.operation}, ${method.kind}) but ${api} is ` +\n                    `@${contract.apiKind === 'pubsub' ? 'PubSub' : 'Rpc'} — allowed kinds are ${allowed.join(' | ')}.`,\n            );\n        }\n    }\n    return problems;\n}\n\n/**\n * Build a program for scanning ONE project. Prefers the project's compile tsconfig; but when that\n * is a solution-style tsconfig (only `references`, no `files`/`include` — e.g. legacy-server), it\n * yields zero files, so we fall back to globbing the project's own `src/**` and reuse the resolved\n * compiler options (which carry tsconfig.base `paths` for cross-package @webpieces resolution).\n *\n * `paths` is a PREFERENCE, not a precondition: it lets imports resolve straight to source. Without\n * it they land on a decorator-erased `dist/**.d.ts`, which the source index recovers from — see\n * ApiUsageScanner.recoverFromDeclaration.\n */\n// webpieces-disable no-function-outside-class -- ts Program factory, mirrors di-graph/program.ts\nfunction createScanProgram(projectRootAbs: string): ts.Program | null {\n    const configPath = findProjectTsconfig(projectRootAbs);\n    if (!configPath) return buildProgramFromSrc(projectRootAbs, {});\n    const host = Object.assign({}, ts.sys, {\n        onUnRecoverableConfigFileDiagnostic: (): void => undefined,\n    }) as ts.ParseConfigFileHost;\n    const parsed = ts.getParsedCommandLineOfConfigFile(configPath, {}, host);\n    if (!parsed) return null;\n    if (parsed.fileNames.length > 0) return ts.createProgram(parsed.fileNames, parsed.options);\n    return buildProgramFromSrc(projectRootAbs, parsed.options);\n}\n\n// webpieces-disable no-function-outside-class -- ts Program factory helper, mirrors di-graph/program.ts\nfunction buildProgramFromSrc(\n    projectRootAbs: string,\n    options: ts.CompilerOptions,\n): ts.Program | null {\n    const srcDir = path.join(projectRootAbs, 'src');\n    if (!fs.existsSync(srcDir)) return null;\n    const files = collectTsFiles(srcDir);\n    return files.length > 0 ? ts.createProgram(files, options) : null;\n}\n"]}
+{"version":3,"file":"api-scanner.js","sourceRoot":"","sources":["../../../../../../../packages/tooling/nx-webpieces-rules/src/lib/api-usage/api-scanner.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;;;AAigBH,8DAoBC;AAuBD,8CAiDC;AAUD,0EAgBC;AASD,0EAoBC;;AAlpBD,uDAAiC;AACjC,+CAAyB;AACzB,mDAA6B;AAC7B,0DAAgF;AAGhF,iDAA0D;AAC1D,mDAA+D;AAC/D,mDAkByB;AACzB,+DAU+B;AAC/B,uDAAoF;AACpF,mDAA0F;AAC1F,6DAAuD;AACvD,iDAAiD;AACjD,uCAamB;AAEnB,MAAM,iBAAiB,GAAG,iBAAiB,CAAC;AAC5C,MAAM,oBAAoB,GAAG,oBAAoB,CAAC;AAClD,MAAM,iBAAiB,GAAG,WAAW,CAAC;AAwDtC,qGAAqG;AACrG,MAAM,cAAc;IACC,KAAK,CAAgB;IAEtC,YAAY,aAAqB,EAAE,YAAsC;QACrE,MAAM,KAAK,GAAkB,EAAE,CAAC;QAChC,KAAK,MAAM,IAAI,IAAI,YAAY,CAAC,MAAM,EAAE,EAAE,CAAC;YACvC,IAAI,IAAI,CAAC,IAAI,KAAK,EAAE,IAAI,IAAI,CAAC,IAAI,KAAK,GAAG;gBAAE,SAAS;YACpD,KAAK,CAAC,IAAI,CAAC,IAAI,WAAW,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,OAAO,CAAC,aAAa,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACnF,CAAC;QACD,+DAA+D;QAC/D,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC,CAAc,EAAE,CAAc,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,GAAG,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IAC7F,CAAC;IAED,SAAS,CAAC,OAAe;QACrB,MAAM,UAAU,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;QACzC,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;YAC5B,IAAI,UAAU,KAAK,IAAI,CAAC,GAAG,IAAI,UAAU,CAAC,UAAU,CAAC,IAAI,CAAC,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC;gBACrE,OAAO,IAAI,CAAC,IAAI,CAAC;QACzB,CAAC;QACD,OAAO,IAAI,CAAC;IAChB,CAAC;CACJ;AAED,MAAM,WAAW;IAEO;IACA;IAFpB,YACoB,IAAY,EACZ,GAAW;QADX,SAAI,GAAJ,IAAI,CAAQ;QACZ,QAAG,GAAH,GAAG,CAAQ;IAC5B,CAAC;CACP;AAED;;;;;;GAMG;AACH,MAAM,cAAc;IAEI;IACA;IAFpB,YACoB,MAAiC,EACjC,MAAmB;QADnB,WAAM,GAAN,MAAM,CAA2B;QACjC,WAAM,GAAN,MAAM,CAAa;IACpC,CAAC;IAEJ,MAAM,CAAC,GAAW;QACd,OAAO,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC;IACxC,CAAC;CACJ;AAED;;;;;;GAMG;AACH,MAAa,qBAAqB;IAKT;IACA;IAEA;IAEA;IATJ,MAAM,GAAG,IAAI,GAAG,EAAwB,CAAC;IACzC,MAAM,GAAG,IAAI,GAAG,EAAU,CAAC;IAE5C,YACqB,aAAqB,EACrB,YAAsC;IACvD,8EAA8E;IAC7D,gBAAmC;IACpD,oFAAoF;IACnE,WAAoC;QALpC,kBAAa,GAAb,aAAa,CAAQ;QACrB,iBAAY,GAAZ,YAAY,CAA0B;QAEtC,qBAAgB,GAAhB,gBAAgB,CAAmB;QAEnC,gBAAW,GAAX,WAAW,CAAyB;IACtD,CAAC;IAEJ,KAAK;QACD,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,YAAY,CAAC,MAAM,EAAE,EAAE,CAAC;YAC5C,IAAI,IAAI,CAAC,IAAI,KAAK,EAAE,IAAI,IAAI,CAAC,IAAI,KAAK,GAAG;gBAAE,SAAS;YACpD,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC;QAC5B,CAAC;QACD,OAAO,IAAI,cAAc,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;IACxD,CAAC;IAEO,YAAY,CAAC,IAAiB;QAClC,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,aAAa,EAAE,IAAI,CAAC,IAAI,CAAC,EAAE,KAAK,CAAC,CAAC;QAC7E,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,MAAM,CAAC;YAAE,OAAO;QACnC,MAAM,QAAQ,GAAG,IAAA,6BAAc,EAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,gBAAgB,CAAC,CAAC;QAClE,KAAK,MAAM,IAAI,IAAI,IAAA,wBAAc,EAAC,MAAM,CAAC,EAAE,CAAC;YACxC,IAAI,IAAA,oBAAU,EAAC,IAAI,CAAC;gBAAE,SAAS,CAAC,oCAAoC;YACpE,MAAM,IAAI,GAAG,EAAE,CAAC,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;YAC3C,MAAM,UAAU,GAAG,EAAE,CAAC,gBAAgB,CAAC,IAAI,EAAE,IAAI,EAAE,EAAE,CAAC,YAAY,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;YACjF,IAAI,CAAC,SAAS,CAAC,UAAU,EAAE,IAAI,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;QACpD,CAAC;IACL,CAAC;IAEO,SAAS,CAAC,IAAa,EAAE,OAAe,EAAE,QAAiB;QAC/D,MAAM,IAAI,GAAG,QAAQ;YACjB,CAAC,CAAC,IAAA,6BAAmB,EAAC,IAAI,EAAE,OAAO,CAAC;YACpC,CAAC,CAAC,IAAA,8BAAoB,EAAC,IAAI,EAAE,OAAO,EAAE,IAAI,CAAC,WAAW,CAAC,CAAC;QAC5D,IAAI,IAAI,EAAE,CAAC;YACP,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;YACzB,MAAM,QAAQ,GAAG,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YAC3C,IAAI,QAAQ,KAAK,SAAS,IAAI,QAAQ,CAAC,KAAK,KAAK,OAAO;gBACpD,MAAM,IAAI,4BAAa,CACnB,+BAA+B,EAC/B,iCAAiC,IAAI,CAAC,GAAG,KAAK,QAAQ,CAAC,KAAK,IAAI,IAAI,CAAC,GAAG,QAAQ,OAAO,IAAI,IAAI,CAAC,GAAG,GAAG,EACtG,SAAS,EACT,SAAS,EACT;oBACI,IAAI,qBAAM,CACN,wHAAwH,EACxH,IAAI,CACP;iBACJ,CACJ,CAAC;YACN,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;QACpC,CAAC;QACD,EAAE,CAAC,YAAY,CAAC,IAAI,EAAE,CAAC,KAAc,EAAE,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,OAAO,EAAE,QAAQ,CAAC,CAAC,CAAC;IACxF,CAAC;CACJ;AAzDD,sDAyDC;AACD,qFAAqF;AACrF,MAAM,mBAAmB;IACJ,iBAAiB,GAAG,IAAI,GAAG,EAA+B,CAAC;IAC3D,WAAW,GAAG,IAAI,GAAG,EAA+B,CAAC;IAEtE,aAAa,CAAC,KAAa,EAAE,GAAW;QACpC,YAAY,CAAC,IAAI,CAAC,iBAAiB,EAAE,KAAK,CAAC,CAAC,GAAG,CAAC,IAAA,yBAAS,EAAC,GAAG,CAAC,EAAE,GAAG,CAAC,CAAC;IACzE,CAAC;IAED;;;OAGG;IACH,OAAO,CAAC,KAAa,EAAE,GAAW;QAC9B,YAAY,CAAC,IAAI,CAAC,WAAW,EAAE,KAAK,CAAC,CAAC,GAAG,CAAC,IAAA,yBAAS,EAAC,GAAG,CAAC,EAAE,GAAG,CAAC,CAAC;IACnE,CAAC;IAED,oFAAoF;IACpF,WAAW;QACP,MAAM,MAAM,GAAG,IAAI,GAAG,CAAS;YAC3B,GAAG,IAAI,CAAC,iBAAiB,CAAC,IAAI,EAAE;YAChC,GAAG,IAAI,CAAC,WAAW,CAAC,IAAI,EAAE;SAC7B,CAAC,CAAC;QACH,MAAM,SAAS,GAAwB,EAAE,CAAC;QAC1C,KAAK,MAAM,KAAK,IAAI,CAAC,GAAG,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC;YACrC,MAAM,cAAc,GAAG,IAAA,2BAAW,EAAC;gBAC/B,GAAG,CAAC,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;aACzD,CAAC,CAAC;YACH,MAAM,QAAQ,GAAG,IAAA,2BAAW,EAAC,CAAC,GAAG,CAAC,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;YACjF,MAAM,QAAQ,GAAgB;gBAC1B,IAAI,EAAE,IAAA,qCAAqB,EAAC,cAAc,EAAE,QAAQ,CAAC;gBACrD,UAAU,EAAE,cAAc;gBAC1B,IAAI,EAAE,QAAQ;aACjB,CAAC;YACF,SAAS,CAAC,KAAK,CAAC,GAAG,QAAQ,CAAC;QAChC,CAAC;QACD,OAAO,SAAS,CAAC;IACrB,CAAC;IAED,OAAO;QACH,OAAO,IAAI,CAAC,iBAAiB,CAAC,IAAI,KAAK,CAAC,IAAI,IAAI,CAAC,WAAW,CAAC,IAAI,KAAK,CAAC,CAAC;IAC5E,CAAC;CACJ;AAED,wHAAwH;AACxH,SAAS,YAAY,CAAC,GAAqC,EAAE,KAAa;IACtE,IAAI,KAAK,GAAG,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IAC3B,IAAI,CAAC,KAAK,EAAE,CAAC;QACT,KAAK,GAAG,IAAI,GAAG,EAAkB,CAAC;QAClC,GAAG,CAAC,GAAG,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;IAC1B,CAAC;IACD,OAAO,KAAK,CAAC;AACjB,CAAC;AAED,oFAAoF;AACpF,MAAa,eAAe;IASH;IACA;IAEA;IAEA;IAEA;IAEA;IACA;IAlBJ,OAAO,CAAiB;IACxB,kBAAkB,GAAG,IAAI,GAAG,EAA+B,CAAC;IAC5D,eAAe,GAAG,IAAI,GAAG,EAAU,CAAC;IACpC,kBAAkB,GAAwB,EAAE,CAAC;IAC7C,uBAAuB,CAA0B;IAC1D,WAAW,GAAG,IAAI,cAAc,CAAC,IAAI,GAAG,EAAwB,EAAE,IAAI,GAAG,EAAU,CAAC,CAAC;IAE7F,YACqB,aAAqB,EACrB,YAAsC;IACvD,4FAA4F;IAC3E,mBAAsC,EAAE;IACzD,mGAAmG;IAClF,gBAA+B,+BAAa,CAAC,iBAAiB,EAAE;IACjF,gGAAgG;IAC/E,cAA0B,0BAAU,CAAC,GAAG,CAAC,4BAAY,CAAC;IACvE,4FAA4F;IAC3E,UAAsB,0BAAU,CAAC,GAAG,CAAC,wBAAQ,CAAC,EAC9C,kBAAmC,8BAAe,CAAC,eAAe,EAAE;QAVpE,kBAAa,GAAb,aAAa,CAAQ;QACrB,iBAAY,GAAZ,YAAY,CAA0B;QAEtC,qBAAgB,GAAhB,gBAAgB,CAAwB;QAExC,kBAAa,GAAb,aAAa,CAAmD;QAEhE,gBAAW,GAAX,WAAW,CAA2C;QAEtD,YAAO,GAAP,OAAO,CAAuC;QAC9C,oBAAe,GAAf,eAAe,CAAqD;QAErF,IAAI,CAAC,OAAO,GAAG,IAAI,cAAc,CAAC,aAAa,EAAE,YAAY,CAAC,CAAC;QAC/D,IAAI,CAAC,uBAAuB,GAAG,IAAI,iCAAuB,CAAC,aAAa,CAAC,CAAC;IAC9E,CAAC;IAED,IAAI;QACA,2FAA2F;QAC3F,oFAAoF;QACpF,IAAI,CAAC,WAAW,GAAG,IAAI,qBAAqB,CACxC,IAAI,CAAC,aAAa,EAClB,IAAI,CAAC,YAAY,EACjB,IAAI,CAAC,gBAAgB,EACrB,IAAI,CAAC,uBAAuB,CAC/B,CAAC,KAAK,EAAE,CAAC;QACV,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,YAAY,CAAC,MAAM,EAAE,EAAE,CAAC;YAC5C,IAAI,IAAI,CAAC,IAAI,KAAK,EAAE,IAAI,IAAI,CAAC,IAAI,KAAK,GAAG;gBAAE,SAAS;YACpD,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC;QAC3B,CAAC;QACD,OAAO;YACH,kBAAkB,EAAE,IAAI,CAAC,kBAAkB;YAC3C,cAAc,EAAE,IAAI,CAAC,WAAW,CAAC,MAAM;YACvC,QAAQ,EAAE,IAAI,CAAC,WAAW,CAAC,MAAM;YACjC,eAAe,EAAE,IAAI,CAAC,eAAe;YACrC,kBAAkB,EAAE,IAAI,CAAC,kBAAkB;YAC3C,uBAAuB,EAAE,IAAI,CAAC,uBAAuB,CAAC,GAAG,EAAE;YAC3D,uBAAuB,EAAE,IAAI,CAAC,uBAAuB,CAAC,uBAAuB,EAAE;YAC/E,mBAAmB,EAAE,IAAI,CAAC,uBAAuB,CAAC,gBAAgB,EAAE;YACpE,yBAAyB,EAAE,IAAI,CAAC,uBAAuB,CAAC,yBAAyB,EAAE;YACnF,4BAA4B,EACxB,IAAI,CAAC,uBAAuB,CAAC,4BAA4B,EAAE;YAC/D,sBAAsB,EAAE,IAAI,CAAC,uBAAuB,CAAC,sBAAsB,EAAE;YAC7E,UAAU,EAAE,IAAI,+BAAa,CACzB,IAAI,CAAC,aAAa,EAClB,IAAI,CAAC,YAAY,EACjB,IAAI,CAAC,aAAa,CACrB,CAAC,GAAG,EAAE;YACP,WAAW,EAAE,IAAI,oCAAe,CAC5B,IAAI,CAAC,aAAa,EAClB,IAAI,CAAC,YAAY,EACjB,IAAI,CAAC,WAAW,EAChB,IAAI,CAAC,OAAO,EACZ,IAAI,CAAC,eAAe,CACvB,CAAC,GAAG,EAAE;SACV,CAAC;IACN,CAAC;IAEO,WAAW,CAAC,IAAiB;QACjC,MAAM,OAAO,GAAG,iBAAiB,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,aAAa,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;QAC/E,IAAI,CAAC,OAAO;YAAE,OAAO;QACrB,MAAM,OAAO,GAAG,OAAO,CAAC,cAAc,EAAE,CAAC;QACzC,MAAM,WAAW,GAAG,IAAI,mBAAmB,EAAE,CAAC;QAC9C,IAAI,qBAAqB,GAAG,KAAK,CAAC;QAElC,KAAK,MAAM,UAAU,IAAI,OAAO,CAAC,cAAc,EAAE,EAAE,CAAC;YAChD,IAAI,UAAU,CAAC,iBAAiB,IAAI,UAAU,CAAC,QAAQ,CAAC,QAAQ,CAAC,gBAAgB,CAAC;gBAC9E,SAAS;YACb,IAAI,IAAA,oBAAU,EAAC,UAAU,CAAC,QAAQ,CAAC;gBAAE,SAAS,CAAC,oCAAoC;YACnF,iFAAiF;YACjF,IAAI,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,UAAU,CAAC,QAAQ,CAAC,KAAK,IAAI,CAAC,IAAI;gBAAE,SAAS;YACxE,qBAAqB,GAAG,IAAI,CAAC;YAC7B,IAAI,CAAC,KAAK,CAAC,UAAU,EAAE,OAAO,EAAE,IAAI,CAAC,IAAI,EAAE,WAAW,CAAC,CAAC;QAC5D,CAAC;QAED,0FAA0F;QAC1F,+EAA+E;QAC/E,IAAI,qBAAqB;YAAE,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC/D,IAAI,CAAC,WAAW,CAAC,OAAO,EAAE;YACtB,IAAI,CAAC,kBAAkB,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE,WAAW,CAAC,WAAW,EAAE,CAAC,CAAC;IAC1E,CAAC;IAEO,KAAK,CACT,IAAa,EACb,OAAuB,EACvB,OAAe,EACf,GAAwB;QAExB,8FAA8F;QAC9F,IAAI,EAAE,CAAC,gBAAgB,CAAC,IAAI,CAAC;YAAE,IAAI,CAAC,UAAU,CAAC,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,GAAG,CAAC,CAAC;QAC5E,2FAA2F;QAC3F,uCAAuC;QACvC,IAAI,EAAE,CAAC,kBAAkB,CAAC,IAAI,CAAC;YAAE,IAAI,CAAC,kBAAkB,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;QACpE,EAAE,CAAC,YAAY,CAAC,IAAI,EAAE,CAAC,KAAc,EAAE,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,OAAO,EAAE,OAAO,EAAE,GAAG,CAAC,CAAC,CAAC;IACxF,CAAC;IAED;;;;;;;;;;;;;OAaG;IACK,kBAAkB,CAAC,GAAwB,EAAE,GAAwB;QACzE,MAAM,WAAW,GAAG,IAAA,8BAAoB,EAAC,GAAG,CAAC,CAAC;QAC9C,KAAK,MAAM,KAAK,IAAI,IAAA,6BAAmB,EAAC,GAAG,CAAC,EAAE,CAAC;YAC3C,MAAM,QAAQ,GAAG,IAAA,2BAAiB,EAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YAC/C,IAAI,QAAQ,KAAK,IAAI,IAAI,WAAW,CAAC,GAAG,CAAC,QAAQ,CAAC;gBAAE,SAAS;YAC7D,MAAM,IAAI,GAAG,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;YAC/C,IAAI,IAAI,KAAK,IAAI,IAAI,IAAI,CAAC,IAAI,KAAK,UAAU;gBAAE,SAAS;YACxD,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,EAAE,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC,CAAC;QACjE,CAAC;IACL,CAAC;IAEO,UAAU,CACd,IAAuB,EACvB,OAAuB,EACvB,OAAe,EACf,GAAwB;QAExB,MAAM,MAAM,GAAG,IAAA,0BAAgB,EAAC,IAAI,CAAC,CAAC;QACtC,IAAI,MAAM,KAAK,IAAI,IAAI,IAAI,CAAC,SAAS,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO;QAC3D,IAAI,MAAM,KAAK,iBAAiB,EAAE,CAAC;YAC/B,MAAM,IAAI,GAAG,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC;YACvE,IAAI,IAAI;gBAAE,GAAG,CAAC,aAAa,CAAC,IAAI,CAAC,KAAK,EAAE,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;YAC5E,OAAO;QACX,CAAC;QACD,IAAI,MAAM,KAAK,iBAAiB,IAAI,MAAM,KAAK,oBAAoB,EAAE,CAAC;YAClE,MAAM,IAAI,GAAG,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC;YACvE,IAAI,CAAC,IAAI;gBAAE,OAAO;YAClB,mFAAmF;YACnF,8EAA8E;YAC9E,MAAM,aAAa,GAAG,IAAA,yBAAe,EAAC,IAAI,CAAC,CAAC;YAC5C,MAAM,GAAG,GAAW,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC;YACvD,IAAI,aAAa,KAAK,IAAI;gBAAE,GAAG,CAAC,aAAa,GAAG,aAAa,CAAC;YAC9D,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;QACjC,CAAC;IACL,CAAC;IAED,oFAAoF;IAC5E,eAAe,CACnB,IAAmB,EACnB,OAAuB,EACvB,OAAe;QAEf,MAAM,IAAI,GAAG,IAAA,kCAAuB,EAAC,IAAI,EAAE,OAAO,CAAC,CAAC;QACpD,IAAI,CAAC,IAAI;YAAE,OAAO,IAAI,CAAC;QACvB,MAAM,UAAU,GAAG,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC;QAC9C,OAAO,UAAU,IAAI,IAAI,CAAC,sBAAsB,CAAC,IAAI,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC;IAC1E,CAAC;IAED;;;;;;OAMG;IACK,sBAAsB,CAC1B,IAAyB,EACzB,IAAmB,EACnB,OAAe;QAEf,8FAA8F;QAC9F,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,CAAC,iBAAiB,IAAI,CAAC,IAAA,yBAAe,EAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI;YAC/E,OAAO,IAAI,CAAC;QAChB,MAAM,SAAS,GAAG,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC1D,IAAI,SAAS;YAAE,OAAO,SAAS,CAAC;QAChC,0FAA0F;QAC1F,IAAI,CAAC,kBAAkB,CAAC,IAAI,CACxB,IAAI,iCAAiB,CACjB,OAAO,EACP,IAAI,CAAC,IAAI,CAAC,IAAI,EACd,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,EAC3B,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,aAAa,EAAE,CAAC,QAAQ,CAAC,CACnD,CACJ,CAAC;QACF,OAAO,IAAI,CAAC;IAChB,CAAC;IAED,0FAA0F;IAClF,gBAAgB,CAAC,IAAa;QAClC,MAAM,UAAU,GAAG,IAAI,CAAC,aAAa,EAAE,CAAC;QACxC,MAAM,QAAQ,GAAG,UAAU,CAAC,6BAA6B,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC;QAC3E,OAAO,GAAG,IAAI,CAAC,YAAY,CAAC,UAAU,CAAC,QAAQ,CAAC,IAAI,QAAQ,CAAC,IAAI,GAAG,CAAC,EAAE,CAAC;IAC5E,CAAC;IAEO,YAAY,CAAC,OAAe;QAChC,OAAO,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,aAAa,EAAE,OAAO,CAAC,CAAC;IACtD,CAAC;IAED;;;;;OAKG;IACK,eAAe,CAAC,GAAwB;QAC5C,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,GAAG,CAAC,aAAa,EAAE,CAAC,QAAQ,CAAC,CAAC;QACnE,IAAI,KAAK,KAAK,IAAI;YAAE,OAAO,IAAI,CAAC;QAChC,OAAO,IAAA,0BAAgB,EAAC,GAAG,EAAE,KAAK,CAAC,CAAC;IACxC,CAAC;CACJ;AAzND,0CAyNC;AAED;;;;;;GAMG;AACH,kHAAkH;AAC3G,KAAK,UAAU,yBAAyB,CAC3C,aAAqB,EACrB,KAAoB,EACpB,YAAsC,EACtC,mBAAsC,EAAE;IAExC,MAAM,MAAM,GAAG,IAAI,eAAe,CAC9B,aAAa,EACb,YAAY,EACZ,gBAAgB,EAChB,+BAAa,CAAC,UAAU,CAAC,aAAa,CAAC,EACvC,MAAM,0BAAU,CAAC,UAAU,CAAC,aAAa,EAAE,4BAAY,CAAC,EACxD,MAAM,0BAAU,CAAC,UAAU,CAAC,aAAa,EAAE,wBAAQ,CAAC,EACpD,MAAM,8BAAe,CAAC,UAAU,CAAC,aAAa,CAAC,CAClD,CAAC,IAAI,EAAE,CAAC;IACT,KAAK,MAAM,WAAW,IAAI,MAAM,CAAC,kBAAkB,CAAC,IAAI,EAAE,EAAE,CAAC;QACzD,MAAM,KAAK,GAAG,KAAK,CAAC,WAAW,CAAC,CAAC;QACjC,IAAI,KAAK;YAAE,KAAK,CAAC,YAAY,GAAG,MAAM,CAAC,kBAAkB,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;IAC/E,CAAC;IACD,OAAO,MAAM,CAAC;AAClB,CAAC;AAED;;;;;;;;;;;;;;;;;;;GAmBG;AACH,uGAAuG;AACvG,SAAgB,iBAAiB,CAAC,IAAmB;IACjD,gGAAgG;IAChG,0CAA0C;IAC1C,IAAI,IAAI,CAAC,uBAAuB,CAAC,MAAM,GAAG,CAAC;QACvC,MAAM,IAAI,iDAA2B,CAAC,IAAI,CAAC,uBAAuB,CAAC,CAAC;IACxE,IAAI,IAAI,CAAC,mBAAmB,CAAC,MAAM,GAAG,CAAC;QACnC,MAAM,IAAI,6CAAuB,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAC;IAChE,IAAI,IAAI,CAAC,4BAA4B,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC/C,MAAM,IAAI,sDAAgC,CAAC,IAAI,CAAC,4BAA4B,CAAC,CAAC;IAClF,CAAC;IACD,IAAI,CAAC,IAAI,CAAC,sBAAsB,IAAI,EAAE,CAAC,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACjD,MAAM,IAAI,+CAAyB,CAAC,IAAI,CAAC,sBAAsB,CAAC,CAAC;IACrE,CAAC;IACD,kGAAkG;IAClG,gDAAgD;IAChD,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,OAAO,EAAE;QAAE,MAAM,IAAI,2CAAqB,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;IACjF,2FAA2F;IAC3F,+FAA+F;IAC/F,iGAAiG;IACjG,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC;QACtC,MAAM,IAAI,6CAAuB,CAAC,IAAI,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC;IAChE,CAAC;IACD,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,OAAO,EAAE,EAAE,CAAC;QAClC,MAAM,IAAI,yCAAmB,CAAC,IAAI,CAAC,WAAW,CAAC,GAAG,EAAE,IAAI,CAAC,WAAW,CAAC,aAAa,CAAC,CAAC;IACxF,CAAC;IACD,+FAA+F;IAC/F,gEAAgE;IAChE,IAAI,IAAI,CAAC,yBAAyB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC5C,MAAM,IAAI,mDAA6B,CAAC,IAAI,CAAC,yBAAyB,CAAC,CAAC;IAC5E,CAAC;IACD,MAAM,SAAS,GAAiB,EAAE,CAAC;IACnC,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,KAAK,MAAM,GAAG,IAAI,CAAC,GAAG,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC;QACjD,MAAM,IAAI,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAE,CAAC;QACrC,IAAI,IAAI,CAAC,OAAO,CAAC,MAAM,KAAK,CAAC;YAAE,SAAS;QACxC,IAAI,IAAI,CAAC,QAAQ,KAAK,SAAS,EAAE,CAAC;YAC9B,OAAO,CAAC,IAAI,CAAC,GAAG,GAAG,WAAW,IAAI,CAAC,KAAK,GAAG,CAAC,CAAC;YAC7C,SAAS;QACb,CAAC;QACD,MAAM,QAAQ,GAAgB;YAC1B,KAAK,EAAE,IAAI,CAAC,KAAK;YACjB,OAAO,EAAE,IAAI,CAAC,IAAI;YAClB,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,OAAO,EAAE,IAAI,CAAC,OAAO;SACxB,CAAC;QACF,SAAS,CAAC,GAAG,CAAC,GAAG,QAAQ,CAAC;IAC9B,CAAC;IACD,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC;QAAE,MAAM,IAAI,0CAAoB,CAAC,OAAO,CAAC,CAAC;IAChE,OAAO,SAAS,CAAC;AACrB,CAAC;AAED;;;;;;GAMG;AACH,oGAAoG;AACpG,SAAgB,+BAA+B,CAAC,IAAuC;IACnF,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,CAAC;IACjC,MAAM,KAAK,GAAG;QACV,OAAO,IAAI,CAAC,MAAM,2EAA2E;QAC7F,mGAAmG;KACtG,CAAC;IACF,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;QACrB,MAAM,KAAK,GAAG,GAAG,CAAC,MAAM,KAAK,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,MAAM,EAAE,CAAC;QACzE,KAAK,CAAC,IAAI,CAAC,WAAW,GAAG,CAAC,SAAS,IAAI,GAAG,CAAC,QAAQ,QAAQ,KAAK,OAAO,GAAG,CAAC,EAAE,EAAE,CAAC,CAAC;IACrF,CAAC;IACD,KAAK,CAAC,IAAI,CACN,iGAAiG,EACjG,iGAAiG,EACjG,kGAAkG,CACrG,CAAC;IACF,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC5B,CAAC;AAED;;;;;GAKG;AACH,oGAAoG;AACpG,SAAgB,+BAA+B,CAAC,SAAuB;IACnE,MAAM,aAAa,GAA4C;QAC3D,GAAG,EAAE,CAAC,KAAK,EAAE,kBAAkB,EAAE,mBAAmB,CAAC;QACrD,MAAM,EAAE,CAAC,YAAY,EAAE,MAAM,EAAE,kBAAkB,CAAC;QAClD,QAAQ,EAAE,CAAC,mBAAmB,CAAC;KAClC,CAAC;IACF,MAAM,QAAQ,GAAa,EAAE,CAAC;IAC9B,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC;QACvC,MAAM,QAAQ,GAAG,SAAS,CAAC,GAAG,CAAC,CAAC;QAChC,MAAM,OAAO,GAAG,aAAa,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;QAChD,IAAI,OAAO,KAAK,SAAS;YAAE,SAAS;QACpC,KAAK,MAAM,MAAM,IAAI,QAAQ,CAAC,OAAO,EAAE,CAAC;YACpC,IAAI,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC;gBAAE,SAAS;YAC5C,QAAQ,CAAC,IAAI,CACT,GAAG,GAAG,IAAI,MAAM,CAAC,IAAI,uBAAuB,MAAM,CAAC,UAAU,IAAI,MAAM,MAAM,MAAM,CAAC,IAAI,MAAM,MAAM,CAAC,SAAS,KAAK,MAAM,CAAC,IAAI,SAAS,GAAG,MAAM;gBAC5I,IAAI,QAAQ,CAAC,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,KAAK,wBAAwB,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CACzG,CAAC;QACN,CAAC;IACL,CAAC;IACD,OAAO,QAAQ,CAAC;AACpB,CAAC;AAED;;;;;;;;;GASG;AACH,iGAAiG;AACjG,SAAS,iBAAiB,CAAC,cAAsB;IAC7C,MAAM,UAAU,GAAG,IAAA,6BAAmB,EAAC,cAAc,CAAC,CAAC;IACvD,IAAI,CAAC,UAAU;QAAE,OAAO,mBAAmB,CAAC,cAAc,EAAE,EAAE,CAAC,CAAC;IAChE,MAAM,IAAI,GAAG,MAAM,CAAC,MAAM,CAAC,EAAE,EAAE,EAAE,CAAC,GAAG,EAAE;QACnC,mCAAmC,EAAE,GAAS,EAAE,CAAC,SAAS;KAC7D,CAA2B,CAAC;IAC7B,MAAM,MAAM,GAAG,EAAE,CAAC,gCAAgC,CAAC,UAAU,EAAE,EAAE,EAAE,IAAI,CAAC,CAAC;IACzE,IAAI,CAAC,MAAM;QAAE,OAAO,IAAI,CAAC;IACzB,IAAI,MAAM,CAAC,SAAS,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,EAAE,CAAC,aAAa,CAAC,MAAM,CAAC,SAAS,EAAE,MAAM,CAAC,OAAO,CAAC,CAAC;IAC3F,OAAO,mBAAmB,CAAC,cAAc,EAAE,MAAM,CAAC,OAAO,CAAC,CAAC;AAC/D,CAAC;AAED,wGAAwG;AACxG,SAAS,mBAAmB,CACxB,cAAsB,EACtB,OAA2B;IAE3B,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,cAAc,EAAE,KAAK,CAAC,CAAC;IAChD,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,MAAM,CAAC;QAAE,OAAO,IAAI,CAAC;IACxC,MAAM,KAAK,GAAG,IAAA,wBAAc,EAAC,MAAM,CAAC,CAAC;IACrC,OAAO,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,aAAa,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;AACtE,CAAC","sourcesContent":["/**\n * API Usage Scanner\n *\n * Derives, by scanning real source (not a declaration file), how every project\n * relates to the api-lib projects it depends on. This is the single source of\n * truth for the `apiRelations` field in architecture/dependencies.json AND for\n * the runtime microservice graph.\n *\n * Signals (all resolved through the TypeScript checker, so re-exports resolve):\n *   - IMPLEMENTS: `apiFactory.addRoutes(XxxApi, XxxController)` — the registration\n *                 that actually SERVES the contract over the wire. We deliberately\n *                 do NOT use `class Ctrl extends XxxApi`: a class can extend an API\n *                 as an in-process test double / simulator (e.g. Server2Simulator)\n *                 without ever serving it — only `addRoutes` proves a served route.\n *   - USES:       `factory.createRpcClient(XxxApi, ...)`    → rpc client\n *                 `factory.createPubSubClient(XxxApi, ...)` → pubsub (Cloud Tasks) client\n *                 The config argument (`new ClientConfig('helper-fsdb')`) names WHICH service the\n *                 client talks to and is kept as `ApiRef.targetService` — see targetServiceOf.\n * An api-lib is DETECTED, not tagged: a project exporting an `abstract class`\n * carrying `@ApiPath` owns that API. Its transport is `@PubSub` → 'pubsub', else 'rpc'.\n *\n * Contracts are indexed from SOURCE in a pre-pass (ApiSourceIndexBuilder) rather than\n * from wherever the checker resolves an import to. A consumer without a tsconfig.base\n * `paths` entry resolves `import { XxxApi } from '@scope/xxx-api'` through node_modules\n * to the package's BUILT `dist/**.d.ts` — and tsc ERASES decorators when emitting\n * declarations, so `@ApiPath` can never be read there. Keying off the resolved\n * declaration therefore dropped whole services from the graph, silently. See\n * `recoverFromDeclaration`.\n */\n\nimport * as ts from 'typescript';\nimport * as fs from 'fs';\nimport * as path from 'path';\nimport { matchesAnyGlob, RuleFailError, Option } from '@webpieces/rules-config';\nimport type { EnhancedGraph } from '../graph-sorter';\nimport { ProjectInfo } from '../project-info';\nimport { findProjectTsconfig } from '../di-graph/program';\nimport { resolveClassDeclaration } from '../di-graph/bindings';\nimport {\n    ApiClassInfo,\n    ApiContract,\n    ApiContracts,\n    ApiRef,\n    ApiRelation,\n    EmptiedApiContract,\n    EndpointKind,\n    NonLiteralDecoratorArg,\n    ProjectApiRelations,\n    UndeclaredExternalCaller,\n    UndeclaredEndpointOperation,\n    VoidResponseMismatch,\n    UnresolvedApiCall,\n    UnresolvedEndpointPath,\n    apiRefKey,\n    deriveApiRelationKind,\n    sortApiRefs,\n} from './api-relations';\nimport {\n    ApiRulesForMcpError,\n    ApiRulesForOpenApiError,\n    EmptiedApiContractError,\n    MissingBasePathError,\n    RootUnionApiTypeError,\n    UndeclaredExternalCallerError,\n    UndeclaredEndpointOperationError,\n    VoidResponseMismatchError,\n    UnresolvedEndpointPathError,\n} from './api-contract-errors';\nimport { RootUnionFindings, RootUnionRule, RootUnionScan } from './root-union-scan';\nimport { ApiDocRule, ApiDocRulesFindings, MCP_RULE, OPENAPI_RULE } from './api-doc-rules';\nimport { ApiDocRulesScan } from './api-doc-rules-scan';\nimport { WireClosureRule } from './wire-closure';\nimport {\n    DecoratorArgDiagnostics,\n    apiClassInfoFrom,\n    apiClassInfoFromNode,\n    calleeMethodName,\n    collectTsFiles,\n    constructorParamsOf,\n    externalApiInfoFrom,\n    implementedTypeNames,\n    isAbstractClass,\n    isTestFile,\n    targetServiceOf,\n    typeReferenceName,\n} from './api-ast';\n\nconst RPC_CLIENT_METHOD = 'createRpcClient';\nconst PUBSUB_CLIENT_METHOD = 'createPubSubClient';\nconst ADD_ROUTES_METHOD = 'addRoutes';\n\n/** The whole-workspace result of a scan. */\nexport interface ApiScanResult {\n    /** projectName -> { apiLibProject -> relation }; only projects with ≥1 relation appear. */\n    relationsByProject: Map<string, ProjectApiRelations>;\n    /** Every project that owns ≥1 API contract class. */\n    apiLibProjects: Set<string>;\n    /** apiClassName -> where it lives + its transport. */\n    apiIndex: Map<string, ApiClassInfo>;\n    /**\n     * Projects whose production (non-test) source was actually scanned. A project with only test\n     * files (e.g. an e2e harness), or one the compiler couldn't load, is ABSENT — callers must not\n     * conclude \"no implements/uses\" for it, because its behavior was never observed.\n     */\n    scannedProjects: Set<string>;\n    /**\n     * Call sites naming a contract we could not map back to workspace source. Non-empty means the\n     * graph is INCOMPLETE — callers must surface these rather than emit a green, wrong graph.\n     */\n    unresolvedApiCalls: UnresolvedApiCall[];\n    /**\n     * Decorator arguments that were present but could not be reduced to a string (a cross-module\n     * constant, a computed expression). Each one costs the graph a basePath, a method, or — when it\n     * takes out every method of a class — the whole contract, so they must be surfaced.\n     */\n    nonLiteralDecoratorArgs: NonLiteralDecoratorArg[];\n    /**\n     * The subset of the above that is FATAL: an `@Endpoint` path that could not be read. Every client\n     * builds its URL as `basePath + path`, so this is missing routing, not missing metadata —\n     * buildApiContracts throws on a non-empty list rather than shipping a contract without it.\n     */\n    unresolvedEndpointPaths: UnresolvedEndpointPath[];\n    /**\n     * Contract classes that declared `@Endpoint` methods and kept none — the exact shape that used to\n     * slip out through buildApiContracts' zero-method skip, taking a whole service's queues with it.\n     */\n    emptiedApiContracts: EmptiedApiContract[];\n    /**\n     * `external` endpoints that did not say WHO calls them. Fatal: the inbound box on the runtime\n     * graph exists to name that system, and with nothing to name it restates our own contract name.\n     */\n    undeclaredExternalCallers: UndeclaredExternalCaller[];\n    /** Endpoints lacking the explicit side-effect contract used for retry safety and MCP hints. */\n    undeclaredEndpointOperations: UndeclaredEndpointOperation[];\n    /** Endpoints whose response-body declaration disagrees with their kind or signature. Fatal. */\n    voidResponseMismatches: VoidResponseMismatch[];\n    /** `no-root-union-api-type`'s findings. Fatal in buildApiContracts — see root-union-scan.ts. */\n    rootUnions: RootUnionFindings;\n    /**\n     * `api-rules-for-openapi` / `api-rules-for-mcp` findings (#1011). Both ship OFF, so this is\n     * EMPTY unless a repo stated otherwise — no rule in this framework has a default (#1017).\n     */\n    apiDocRules: ApiDocRulesFindings;\n}\n\n/** Maps an absolute source-file path to the workspace project that owns it (longest-root-prefix). */\nclass ProjectLocator {\n    private readonly roots: ProjectRoot[];\n\n    constructor(workspaceRoot: string, projectInfos: Map<string, ProjectInfo>) {\n        const roots: ProjectRoot[] = [];\n        for (const info of projectInfos.values()) {\n            if (info.root === '' || info.root === '.') continue;\n            roots.push(new ProjectRoot(info.name, path.resolve(workspaceRoot, info.root)));\n        }\n        // Longest root first so a nested project wins over its parent.\n        this.roots = roots.sort((a: ProjectRoot, b: ProjectRoot) => b.abs.length - a.abs.length);\n    }\n\n    projectOf(absFile: string): string | null {\n        const normalized = path.resolve(absFile);\n        for (const root of this.roots) {\n            if (normalized === root.abs || normalized.startsWith(root.abs + path.sep))\n                return root.name;\n        }\n        return null;\n    }\n}\n\nclass ProjectRoot {\n    constructor(\n        public readonly name: string,\n        public readonly abs: string,\n    ) {}\n}\n\n/**\n * Every API contract in the workspace, keyed by class name, read from SOURCE.\n *\n * Name-keyed because a call site only ever gives us a name once its import has resolved into a\n * decorator-erased declaration. Two api-libs exporting the same class name collide (last wins) —\n * the same collision the published `apiIndex` has always had.\n */\nclass ApiSourceIndex {\n    constructor(\n        public readonly byName: Map<string, ApiClassInfo>,\n        public readonly owners: Set<string>,\n    ) {}\n\n    lookup(api: string): ApiClassInfo | null {\n        return this.byName.get(api) ?? null;\n    }\n}\n\n/**\n * Builds the ApiSourceIndex by parsing each project's own `src/**` directly.\n *\n * Deliberately parser-only (no ts.Program, no checker): we need the decorators exactly as\n * written, and a plain parse cannot be diverted to a `.d.ts` by module resolution — which is\n * the entire bug this guards against. It is also cheap enough to run over every project.\n */\nexport class ApiSourceIndexBuilder {\n    private readonly byName = new Map<string, ApiClassInfo>();\n    private readonly owners = new Set<string>();\n\n    constructor(\n        private readonly workspaceRoot: string,\n        private readonly projectInfos: Map<string, ProjectInfo>,\n        /** Globs of project roots holding vendor contracts — see ExternalApiIndex. */\n        private readonly externalApiPaths: readonly string[],\n        /** Sink for decorator arguments this parser-only pass cannot reduce to a string. */\n        private readonly diagnostics: DecoratorArgDiagnostics,\n    ) {}\n\n    build(): ApiSourceIndex {\n        for (const info of this.projectInfos.values()) {\n            if (info.root === '' || info.root === '.') continue;\n            this.indexProject(info);\n        }\n        return new ApiSourceIndex(this.byName, this.owners);\n    }\n\n    private indexProject(info: ProjectInfo): void {\n        const srcDir = path.join(path.resolve(this.workspaceRoot, info.root), 'src');\n        if (!fs.existsSync(srcDir)) return;\n        const external = matchesAnyGlob(info.root, this.externalApiPaths);\n        for (const file of collectTsFiles(srcDir)) {\n            if (isTestFile(file)) continue; // tests are not production topology\n            const text = fs.readFileSync(file, 'utf8');\n            const sourceFile = ts.createSourceFile(file, text, ts.ScriptTarget.Latest, true);\n            this.indexNode(sourceFile, info.name, external);\n        }\n    }\n\n    private indexNode(node: ts.Node, project: string, external: boolean): void {\n        const info = external\n            ? externalApiInfoFrom(node, project)\n            : apiClassInfoFromNode(node, project, this.diagnostics);\n        if (info) {\n            this.owners.add(project);\n            const previous = this.byName.get(info.api);\n            if (previous !== undefined && previous.owner !== project)\n                throw new RuleFailError(\n                    'validate-runtime-architecture',\n                    `Ambiguous saved contract name ${info.api}: ${previous.owner}#${info.api} and ${project}#${info.api}.`,\n                    undefined,\n                    undefined,\n                    [\n                        new Option(\n                            'Use distinct exported contract names in the saved contract table; source ownership must never be merged by short name.',\n                            true,\n                        ),\n                    ],\n                );\n            this.byName.set(info.api, info);\n        }\n        ts.forEachChild(node, (child: ts.Node) => this.indexNode(child, project, external));\n    }\n}\n/** Per-owner accumulator that dedupes API refs while a single project is scanned. */\nclass RelationAccumulator {\n    private readonly implementsByOwner = new Map<string, Map<string, ApiRef>>();\n    private readonly usesByOwner = new Map<string, Map<string, ApiRef>>();\n\n    addImplements(owner: string, ref: ApiRef): void {\n        ensureRefMap(this.implementsByOwner, owner).set(apiRefKey(ref), ref);\n    }\n\n    /**\n     * Keyed by api + targetService: one project legitimately binds the SAME contract against two\n     * different services (a WarmupApi client per data server), and those are two relations, not one.\n     */\n    addUses(owner: string, ref: ApiRef): void {\n        ensureRefMap(this.usesByOwner, owner).set(apiRefKey(ref), ref);\n    }\n\n    /** Build the deterministic { owner -> relation } record, owners in sorted order. */\n    toRelations(): ProjectApiRelations {\n        const owners = new Set<string>([\n            ...this.implementsByOwner.keys(),\n            ...this.usesByOwner.keys(),\n        ]);\n        const relations: ProjectApiRelations = {};\n        for (const owner of [...owners].sort()) {\n            const implementsRefs = sortApiRefs([\n                ...(this.implementsByOwner.get(owner)?.values() ?? []),\n            ]);\n            const usesRefs = sortApiRefs([...(this.usesByOwner.get(owner)?.values() ?? [])]);\n            const relation: ApiRelation = {\n                kind: deriveApiRelationKind(implementsRefs, usesRefs),\n                implements: implementsRefs,\n                uses: usesRefs,\n            };\n            relations[owner] = relation;\n        }\n        return relations;\n    }\n\n    isEmpty(): boolean {\n        return this.implementsByOwner.size === 0 && this.usesByOwner.size === 0;\n    }\n}\n\n// webpieces-disable no-function-outside-class -- tiny map helper, matching the AST-helper style of di-graph/bindings.ts\nfunction ensureRefMap(map: Map<string, Map<string, ApiRef>>, owner: string): Map<string, ApiRef> {\n    let inner = map.get(owner);\n    if (!inner) {\n        inner = new Map<string, ApiRef>();\n        map.set(owner, inner);\n    }\n    return inner;\n}\n\n/** Statically scans every project for its api-lib implements/uses relationships. */\nexport class ApiUsageScanner {\n    private readonly locator: ProjectLocator;\n    private readonly relationsByProject = new Map<string, ProjectApiRelations>();\n    private readonly scannedProjects = new Set<string>();\n    private readonly unresolvedApiCalls: UnresolvedApiCall[] = [];\n    private readonly decoratorArgDiagnostics: DecoratorArgDiagnostics;\n    private sourceIndex = new ApiSourceIndex(new Map<string, ApiClassInfo>(), new Set<string>());\n\n    constructor(\n        private readonly workspaceRoot: string,\n        private readonly projectInfos: Map<string, ProjectInfo>,\n        /** Globs of project roots whose exported `*Api` types are contracts for outside systems. */\n        private readonly externalApiPaths: readonly string[] = [],\n        /** `no-root-union-api-type`'s switches — ARMED unless scanAndAttachApiRelations read otherwise. */\n        private readonly rootUnionRule: RootUnionRule = RootUnionRule.enabledEverywhere(),\n        /** `api-rules-for-openapi`'s switches — read from the config, which MUST state them (#1017). */\n        private readonly openApiRule: ApiDocRule = ApiDocRule.off(OPENAPI_RULE),\n        /** `api-rules-for-mcp`'s switches — read from the config, which MUST state them (#1017). */\n        private readonly mcpRule: ApiDocRule = ApiDocRule.off(MCP_RULE),\n        private readonly wireClosureRule: WireClosureRule = WireClosureRule.withoutSuffixes(), // #1064 D4\n    ) {\n        this.locator = new ProjectLocator(workspaceRoot, projectInfos);\n        this.decoratorArgDiagnostics = new DecoratorArgDiagnostics(workspaceRoot);\n    }\n\n    scan(): ApiScanResult {\n        // Pre-pass: every contract, from source, BEFORE any call site is resolved — a call site in\n        // one project routinely names a contract owned by a project we have not walked yet.\n        this.sourceIndex = new ApiSourceIndexBuilder(\n            this.workspaceRoot,\n            this.projectInfos,\n            this.externalApiPaths,\n            this.decoratorArgDiagnostics,\n        ).build();\n        for (const info of this.projectInfos.values()) {\n            if (info.root === '' || info.root === '.') continue;\n            this.scanProject(info);\n        }\n        return {\n            relationsByProject: this.relationsByProject,\n            apiLibProjects: this.sourceIndex.owners,\n            apiIndex: this.sourceIndex.byName,\n            scannedProjects: this.scannedProjects,\n            unresolvedApiCalls: this.unresolvedApiCalls,\n            nonLiteralDecoratorArgs: this.decoratorArgDiagnostics.all(),\n            unresolvedEndpointPaths: this.decoratorArgDiagnostics.unresolvedEndpointPaths(),\n            emptiedApiContracts: this.decoratorArgDiagnostics.emptiedContracts(),\n            undeclaredExternalCallers: this.decoratorArgDiagnostics.undeclaredExternalCallers(),\n            undeclaredEndpointOperations:\n                this.decoratorArgDiagnostics.undeclaredEndpointOperations(),\n            voidResponseMismatches: this.decoratorArgDiagnostics.voidResponseMismatches(),\n            rootUnions: new RootUnionScan(\n                this.workspaceRoot,\n                this.projectInfos,\n                this.rootUnionRule,\n            ).run(),\n            apiDocRules: new ApiDocRulesScan(\n                this.workspaceRoot,\n                this.projectInfos,\n                this.openApiRule,\n                this.mcpRule,\n                this.wireClosureRule,\n            ).run(),\n        };\n    }\n\n    private scanProject(info: ProjectInfo): void {\n        const program = createScanProgram(path.resolve(this.workspaceRoot, info.root));\n        if (!program) return;\n        const checker = program.getTypeChecker();\n        const accumulator = new RelationAccumulator();\n        let scannedProductionFile = false;\n\n        for (const sourceFile of program.getSourceFiles()) {\n            if (sourceFile.isDeclarationFile || sourceFile.fileName.includes('/node_modules/'))\n                continue;\n            if (isTestFile(sourceFile.fileName)) continue; // tests are not production topology\n            // Only this project's OWN files — imported api-lib source is in the program too.\n            if (this.locator.projectOf(sourceFile.fileName) !== info.name) continue;\n            scannedProductionFile = true;\n            this.visit(sourceFile, checker, info.name, accumulator);\n        }\n\n        // Record coverage only when we actually saw production source — an all-test project (e2e)\n        // stays absent so the validator won't wrongly flag its api-lib deps as unused.\n        if (scannedProductionFile) this.scannedProjects.add(info.name);\n        if (!accumulator.isEmpty())\n            this.relationsByProject.set(info.name, accumulator.toRelations());\n    }\n\n    private visit(\n        node: ts.Node,\n        checker: ts.TypeChecker,\n        project: string,\n        acc: RelationAccumulator,\n    ): void {\n        // In-repo contract classes are indexed by the source pre-pass, so only calls matter for them.\n        if (ts.isCallExpression(node)) this.recordCall(node, checker, project, acc);\n        // A VENDOR contract has no client-factory call site to key off — it arrives by injection —\n        // so classes have to be inspected too.\n        if (ts.isClassDeclaration(node)) this.recordExternalUses(node, acc);\n        ts.forEachChild(node, (child: ts.Node) => this.visit(child, checker, project, acc));\n    }\n\n    /**\n     * Record a `uses` for every vendor contract this class receives by CONSTRUCTOR INJECTION —\n     * `constructor(@inject(GMAIL_TYPES.GmailApi) private readonly gmail: GmailApi)`.\n     *\n     * The parameter TYPE is the signal, not the token: a token is an opaque Symbol whose name we\n     * would have to guess at, while the type is written right there and is what the class actually\n     * calls. Matching happens by name against the external index, so an import that resolves to a\n     * built `.d.ts` works exactly as well as one resolving to source.\n     *\n     * A class that IMPLEMENTS the contract is skipped — that is the vendor adapter (`GmailClient`)\n     * or a test double (`InMemoryFirestore`, `MockTts`), which IS the seam rather than a caller of\n     * it. Counting those would draw an edge from every service embedding a fake to a vendor it never\n     * actually reaches.\n     */\n    private recordExternalUses(cls: ts.ClassDeclaration, acc: RelationAccumulator): void {\n        const implemented = implementedTypeNames(cls);\n        for (const param of constructorParamsOf(cls)) {\n            const typeName = typeReferenceName(param.type);\n            if (typeName === null || implemented.has(typeName)) continue;\n            const info = this.sourceIndex.lookup(typeName);\n            if (info === null || info.type !== 'external') continue;\n            acc.addUses(info.owner, { api: info.api, type: 'external' });\n        }\n    }\n\n    private recordCall(\n        call: ts.CallExpression,\n        checker: ts.TypeChecker,\n        project: string,\n        acc: RelationAccumulator,\n    ): void {\n        const method = calleeMethodName(call);\n        if (method === null || call.arguments.length === 0) return;\n        if (method === ADD_ROUTES_METHOD) {\n            const info = this.apiInfoFromExpr(call.arguments[0], checker, project);\n            if (info) acc.addImplements(info.owner, { api: info.api, type: info.type });\n            return;\n        }\n        if (method === RPC_CLIENT_METHOD || method === PUBSUB_CLIENT_METHOD) {\n            const info = this.apiInfoFromExpr(call.arguments[0], checker, project);\n            if (!info) return;\n            // Argument 2 names WHICH service this client talks to. Keeping it is what lets the\n            // runtime graph draw ONE edge instead of one per implementer of the contract.\n            const targetService = targetServiceOf(call);\n            const ref: ApiRef = { api: info.api, type: info.type };\n            if (targetService !== null) ref.targetService = targetService;\n            acc.addUses(info.owner, ref);\n        }\n    }\n\n    /** Resolve an expression to the API contract it names, or null if it is not one. */\n    private apiInfoFromExpr(\n        expr: ts.Expression,\n        checker: ts.TypeChecker,\n        project: string,\n    ): ApiClassInfo | null {\n        const decl = resolveClassDeclaration(expr, checker);\n        if (!decl) return null;\n        const fromSource = this.apiClassInfoFor(decl);\n        return fromSource ?? this.recoverFromDeclaration(decl, expr, project);\n    }\n\n    /**\n     * The checker landed on a BUILT declaration instead of source — the consumer has no\n     * tsconfig.base `paths` entry for the api-lib, so the import went through node_modules to\n     * `dist/**.d.ts`. tsc erases decorators when emitting declarations, so `@ApiPath` is simply\n     * not there and never will be. Recover the contract by name from the source index; the graph\n     * is then correct no matter how the consumer's tsconfig is laid out.\n     */\n    private recoverFromDeclaration(\n        decl: ts.ClassDeclaration,\n        expr: ts.Expression,\n        project: string,\n    ): ApiClassInfo | null {\n        // An abstract class is the shape of a contract; a non-abstract argument is genuinely not one.\n        if (!decl.getSourceFile().isDeclarationFile || !isAbstractClass(decl) || !decl.name)\n            return null;\n        const recovered = this.sourceIndex.lookup(decl.name.text);\n        if (recovered) return recovered;\n        // Abstract, in a .d.ts, yet no workspace source owns it — the scan is blind here. Say so.\n        this.unresolvedApiCalls.push(\n            new UnresolvedApiCall(\n                project,\n                decl.name.text,\n                this.relativeLocation(expr),\n                this.relativePath(decl.getSourceFile().fileName),\n            ),\n        );\n        return null;\n    }\n\n    /** `path/to/file.ts:LINE` for `node`, workspace-relative, for a human-readable report. */\n    private relativeLocation(node: ts.Node): string {\n        const sourceFile = node.getSourceFile();\n        const position = sourceFile.getLineAndCharacterOfPosition(node.getStart());\n        return `${this.relativePath(sourceFile.fileName)}:${position.line + 1}`;\n    }\n\n    private relativePath(absFile: string): string {\n        return path.relative(this.workspaceRoot, absFile);\n    }\n\n    /**\n     * {api, owner, type, methods} when `cls` is an `abstract class` carrying `@ApiPath` IN SOURCE,\n     * else null. Only the OWNER differs from the index pre-pass — here it comes from the file's\n     * location rather than from the project being walked — so the contract test itself is delegated\n     * to apiClassInfoFrom, keeping one definition of \"this is a contract\".\n     */\n    private apiClassInfoFor(cls: ts.ClassDeclaration): ApiClassInfo | null {\n        const owner = this.locator.projectOf(cls.getSourceFile().fileName);\n        if (owner === null) return null;\n        return apiClassInfoFrom(cls, owner);\n    }\n}\n\n/**\n * Run the scan and attach the derived `apiRelations` onto each graph entry in\n * place. Shared by `architecture:generate` (which then saves) and\n * `architecture:validate-architecture-unchanged` (which regenerates in memory\n * and must attach the SAME field, or it would see a phantom diff). Returns the\n * full scan so callers (validators, runtime graph) can reuse the api index.\n */\n// webpieces-disable no-function-outside-class -- module entry point, mirrors generateReducedGraph/collectBindings\nexport async function scanAndAttachApiRelations(\n    workspaceRoot: string,\n    graph: EnhancedGraph,\n    projectInfos: Map<string, ProjectInfo>,\n    externalApiPaths: readonly string[] = [],\n): Promise<ApiScanResult> {\n    const result = new ApiUsageScanner(\n        workspaceRoot,\n        projectInfos,\n        externalApiPaths,\n        RootUnionRule.fromConfig(workspaceRoot),\n        await ApiDocRule.fromConfig(workspaceRoot, OPENAPI_RULE),\n        await ApiDocRule.fromConfig(workspaceRoot, MCP_RULE),\n        await WireClosureRule.fromConfig(workspaceRoot),\n    ).scan();\n    for (const projectName of result.relationsByProject.keys()) {\n        const entry = graph[projectName];\n        if (entry) entry.apiRelations = result.relationsByProject.get(projectName);\n    }\n    return result;\n}\n\n/**\n * The committed api contract table (one `architecture/apis/<ApiName>.json` per entry), from a\n * completed scan.\n *\n * Only contracts with ≥1 endpoint are emitted: a vendor seam has no routes, so a table entry for it\n * would be an empty shell, and its identity is already carried by the `external` refs in\n * apiRelations. Sorted by api name, methods left in declaration order, so the file is deterministic.\n *\n * THROWS on the ways an entry can be wrong-but-green, checked root cause first:\n *   1. an `@Endpoint` path the scan could not read (UnresolvedEndpointPathError) — the other half of\n *      the URL a consumer computes, and the cause of most emptied contracts;\n *   2. a class that declared endpoints and kept none (EmptiedApiContractError), which would otherwise\n *      leave silently through the zero-method skip above;\n *   3. a method without an explicit operation (UndeclaredEndpointOperationError);\n *   4. an `external` method that never said WHO calls it (UndeclaredExternalCallerError);\n *   5. a routed contract with no basePath (MissingBasePathError).\n * All are worse than an absent entry: a consumer joining `basePath + path` computes a\n * confidently wrong URL with no signal that anything is off, because every other entry is complete.\n * Each error aggregates EVERY offender, so a developer fixing five constants sees five in one run.\n */\n// webpieces-disable no-function-outside-class -- module entry point, mirrors scanAndAttachApiRelations\nexport function buildApiContracts(scan: ApiScanResult): ApiContracts {\n    // Root cause before symptom: an unreadable path is what empties a contract, so naming the paths\n    // is what the author can actually act on.\n    if (scan.unresolvedEndpointPaths.length > 0)\n        throw new UnresolvedEndpointPathError(scan.unresolvedEndpointPaths);\n    if (scan.emptiedApiContracts.length > 0)\n        throw new EmptiedApiContractError(scan.emptiedApiContracts);\n    if (scan.undeclaredEndpointOperations.length > 0) {\n        throw new UndeclaredEndpointOperationError(scan.undeclaredEndpointOperations);\n    }\n    if ((scan.voidResponseMismatches ?? []).length > 0) {\n        throw new VoidResponseMismatchError(scan.voidResponseMismatches);\n    }\n    // A shape no function-calling API will accept, read perfectly well — unlike the four above, which\n    // are contracts the scan could not READ at all.\n    if (!scan.rootUnions.isEmpty()) throw new RootUnionApiTypeError(scan.rootUnions);\n    // Contract shapes that are not PUBLISHABLE, read by the generator's own extractor (#1011).\n    // After the root union, which is the one shape no function-calling API will accept at all, and\n    // before the caller checks below, which are about the architecture graph rather than a document.\n    if (!scan.apiDocRules.openApi.isEmpty()) {\n        throw new ApiRulesForOpenApiError(scan.apiDocRules.openApi);\n    }\n    if (!scan.apiDocRules.mcp.isEmpty()) {\n        throw new ApiRulesForMcpError(scan.apiDocRules.mcp, scan.apiDocRules.mcpExclusions);\n    }\n    // After the two above: an unreadable path is what empties a contract, and a contract that lost\n    // every method has no external endpoint left to complain about.\n    if (scan.undeclaredExternalCallers.length > 0) {\n        throw new UndeclaredExternalCallerError(scan.undeclaredExternalCallers);\n    }\n    const contracts: ApiContracts = {};\n    const missing: string[] = [];\n    for (const api of [...scan.apiIndex.keys()].sort()) {\n        const info = scan.apiIndex.get(api)!;\n        if (info.methods.length === 0) continue;\n        if (info.basePath === undefined) {\n            missing.push(`${api} (owner ${info.owner})`);\n            continue;\n        }\n        const contract: ApiContract = {\n            owner: info.owner,\n            apiKind: info.type,\n            basePath: info.basePath,\n            methods: info.methods,\n        };\n        contracts[api] = contract;\n    }\n    if (missing.length > 0) throw new MissingBasePathError(missing);\n    return contracts;\n}\n\n/**\n * Loud, actionable report for decorator arguments the scan could not reduce to a string.\n *\n * Same-module constants resolve, so anything reaching here is genuinely out of reach of a\n * parser-only pass — and every one of them silently shrinks the graph. Empty string when there is\n * nothing to say, so callers can test it without special-casing.\n */\n// webpieces-disable no-function-outside-class -- pure formatter, mirrors describeUnresolvedApiCalls\nexport function describeNonLiteralDecoratorArgs(args: readonly NonLiteralDecoratorArg[]): string {\n    if (args.length === 0) return '';\n    const lines = [\n        `⚠️  ${args.length} decorator argument(s) are not string literals and could not be resolved.`,\n        `   Each one drops data from the graph: a missing basePath, a missing method, or a whole contract:`,\n    ];\n    for (const arg of args) {\n        const where = arg.method === null ? arg.api : `${arg.api}.${arg.method}`;\n        lines.push(`     • @${arg.decorator}(${arg.argument}) on ${where} at ${arg.at}`);\n    }\n    lines.push(\n        `   A constant declared in the SAME module resolves. One imported from another module does not —`,\n        `   this scan is parser-only by design (module resolution can land on a decorator-erased .d.ts).`,\n        `   Fix by inlining the string literal, or by moving the constant into the contract's own module.`,\n    );\n    return lines.join('\\n');\n}\n\n/**\n * Every contract method whose declared @Endpoint kind its api kind cannot deliver — an rpc method on\n * a @PubSub contract (nothing calls a queue synchronously), or a cloudtasks/cron method on an @Rpc\n * contract (naming a queue or schedule nothing could deliver to). Mirrors core-util's\n * ENDPOINT_KINDS_BY_API_KIND at BUILD time, where it can name the file instead of throwing at wiring.\n */\n// webpieces-disable no-function-outside-class -- pure formatter, mirrors describeUnresolvedApiCalls\nexport function describeMismatchedEndpointKinds(contracts: ApiContracts): string[] {\n    const allowedByKind: Record<string, readonly EndpointKind[]> = {\n        rpc: ['rpc', 'external-inbound', 'external-outbound'],\n        pubsub: ['cloudtasks', 'cron', 'external-inbound'],\n        external: ['external-outbound'],\n    };\n    const problems: string[] = [];\n    for (const api of Object.keys(contracts)) {\n        const contract = contracts[api];\n        const allowed = allowedByKind[contract.apiKind];\n        if (allowed === undefined) continue;\n        for (const method of contract.methods) {\n            if (allowed.includes(method.kind)) continue;\n            problems.push(\n                `${api}.${method.name} declares @Endpoint(${method.httpMethod ?? 'POST'}, '${method.path}', ${method.operation}, ${method.kind}) but ${api} is ` +\n                    `@${contract.apiKind === 'pubsub' ? 'PubSub' : 'Rpc'} — allowed kinds are ${allowed.join(' | ')}.`,\n            );\n        }\n    }\n    return problems;\n}\n\n/**\n * Build a program for scanning ONE project. Prefers the project's compile tsconfig; but when that\n * is a solution-style tsconfig (only `references`, no `files`/`include` — e.g. legacy-server), it\n * yields zero files, so we fall back to globbing the project's own `src/**` and reuse the resolved\n * compiler options (which carry tsconfig.base `paths` for cross-package @webpieces resolution).\n *\n * `paths` is a PREFERENCE, not a precondition: it lets imports resolve straight to source. Without\n * it they land on a decorator-erased `dist/**.d.ts`, which the source index recovers from — see\n * ApiUsageScanner.recoverFromDeclaration.\n */\n// webpieces-disable no-function-outside-class -- ts Program factory, mirrors di-graph/program.ts\nfunction createScanProgram(projectRootAbs: string): ts.Program | null {\n    const configPath = findProjectTsconfig(projectRootAbs);\n    if (!configPath) return buildProgramFromSrc(projectRootAbs, {});\n    const host = Object.assign({}, ts.sys, {\n        onUnRecoverableConfigFileDiagnostic: (): void => undefined,\n    }) as ts.ParseConfigFileHost;\n    const parsed = ts.getParsedCommandLineOfConfigFile(configPath, {}, host);\n    if (!parsed) return null;\n    if (parsed.fileNames.length > 0) return ts.createProgram(parsed.fileNames, parsed.options);\n    return buildProgramFromSrc(projectRootAbs, parsed.options);\n}\n\n// webpieces-disable no-function-outside-class -- ts Program factory helper, mirrors di-graph/program.ts\nfunction buildProgramFromSrc(\n    projectRootAbs: string,\n    options: ts.CompilerOptions,\n): ts.Program | null {\n    const srcDir = path.join(projectRootAbs, 'src');\n    if (!fs.existsSync(srcDir)) return null;\n    const files = collectTsFiles(srcDir);\n    return files.length > 0 ? ts.createProgram(files, options) : null;\n}\n"]}

package/src/lib/api-usage/wire-closure.d.ts

@@ -29,7 +29,7 @@ export declare class WireClosureRule {
     /** Only the role check — what a unit test or a repo with `required-type-suffix` OFF gets. */
     static withoutSuffixes(): WireClosureRule;
     /** `required-type-suffix`'s entries, unless that rule is OFF or time-boxed / branch-scoped off. */
-    static fromConfig(workspaceRoot: string): WireClosureRule;
+    static fromConfig(workspaceRoot: string): Promise<WireClosureRule>;
 }
 /** ONE wire-closure finding: what is wrong with a reached type, and what to do. */
 export declare class WireClosureVerdict {

package/src/lib/api-usage/wire-closure.js

@@ -44,13 +44,13 @@ class WireClosureRule {
     }
     /** `required-type-suffix`'s entries, unless that rule is OFF or time-boxed / branch-scoped off. */
     // webpieces-disable no-function-outside-class -- static factory of this class
-    static fromConfig(workspaceRoot) {
+    static async fromConfig(workspaceRoot) {
         if (new rule_gate_1.RuleGate().skipReason(workspaceRoot, 'required-type-suffix', true) !== null) {
             return WireClosureRule.withoutSuffixes();
         }
         const loaded = (0, rules_config_2.loadAndValidate)(workspaceRoot);
         const rule = loaded.resolved.rules.get('required-type-suffix');
-        return new WireClosureRule(rule.options['entries'], new wire_suffix_scope_1.WireSuffixScope(workspaceRoot, rule.options['mode'], new rules_config_3.RuleFileExclusions('required-type-suffix', loaded.excludePaths.paths, rule.options['excludePaths'] ?? []), new rules_config_3.DiffScope()));
+        return new WireClosureRule(rule.options['entries'], await wire_suffix_scope_1.WireSuffixScope.create(workspaceRoot, rule.options['mode'], new rules_config_3.RuleFileExclusions('required-type-suffix', loaded.excludePaths.paths, rule.options['excludePaths'] ?? []), new rules_config_3.DiffScope()));
     }
 }
 exports.WireClosureRule = WireClosureRule;

package/src/lib/api-usage/wire-closure.js.map

@@ -1 +1 @@
-{"version":3,"file":"wire-closure.js","sourceRoot":"","sources":["../../../../../../../packages/tooling/nx-webpieces-rules/src/lib/api-usage/wire-closure.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;;;;GAkBG;;;;AAEH,mDAA6B;AAE7B,0DAA6E;AAC7E,0DAA0D;AAG1D,oDAA+C;AAC/C,4CAAwC;AACxC,0DAAwE;AAExE,2DAAsD;AAEtD,MAAM,YAAY,GAAG,SAAS,CAAC;AAE/B,iGAAiG;AACjG,MAAa,eAAe;IAEJ;IACA;IAFpB,YACoB,aAAyC,EACzC,KAAkC;QADlC,kBAAa,GAAb,aAAa,CAA4B;QACzC,UAAK,GAAL,KAAK,CAA6B;IACnD,CAAC;IAEJ,6FAA6F;IAC7F,8EAA8E;IAC9E,MAAM,CAAC,eAAe;QAClB,OAAO,IAAI,eAAe,CAAC,EAAE,EAAE,SAAS,CAAC,CAAC;IAC9C,CAAC;IAED,mGAAmG;IACnG,8EAA8E;IAC9E,MAAM,CAAC,UAAU,CAAC,aAAqB;QACnC,IAAI,IAAI,oBAAQ,EAAE,CAAC,UAAU,CAAC,aAAa,EAAE,sBAAsB,EAAE,IAAI,CAAC,KAAK,IAAI,EAAE,CAAC;YAClF,OAAO,eAAe,CAAC,eAAe,EAAE,CAAC;QAC7C,CAAC;QACD,MAAM,MAAM,GAAG,IAAA,8BAAe,EAAC,aAAa,CAAC,CAAC;QAC9C,MAAM,IAAI,GAAG,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,sBAAsB,CAAE,CAAC;QAChE,OAAO,IAAI,eAAe,CACtB,IAAI,CAAC,OAAO,CAAC,SAAS,CAAsB,EAC5C,IAAI,mCAAe,CACf,aAAa,EACb,IAAI,CAAC,OAAO,CAAC,MAAM,CAAqB,EACxC,IAAI,iCAAkB,CAClB,sBAAsB,EACtB,MAAM,CAAC,YAAY,CAAC,KAAK,EACxB,IAAI,CAAC,OAAO,CAAC,cAAc,CAA0B,IAAI,EAAE,CAC/D,EACD,IAAI,wBAAS,EAAE,CAClB,CACJ,CAAC;IACN,CAAC;CACJ;AAlCD,0CAkCC;AAED,mFAAmF;AACnF,MAAa,kBAAkB;IAEP;IACA;IAFpB,YACoB,IAAY,EACZ,IAAY;QADZ,SAAI,GAAJ,IAAI,CAAQ;QACZ,SAAI,GAAJ,IAAI,CAAQ;IAC7B,CAAC;CACP;AALD,gDAKC;AAED,+EAA+E;AAC/E,MAAM,SAAS;IAES;IACA;IAFpB,YACoB,IAAiB,EACjB,GAAW;QADX,SAAI,GAAJ,IAAI,CAAa;QACjB,QAAG,GAAH,GAAG,CAAQ;IAC5B,CAAC;CACP;AAED,yFAAyF;AACzF,MAAa,WAAW;IAKC;IAEA;IANJ,KAAK,CAAc;IACnB,MAAM,GAAG,IAAI,6BAAc,EAAE,CAAC;IAE/C,YACqB,aAAqB,EACtC,YAAsC,EACrB,IAAqB;QAFrB,kBAAa,GAAb,aAAa,CAAQ;QAErB,SAAI,GAAJ,IAAI,CAAiB;QAEtC,IAAI,CAAC,KAAK,GAAG,CAAC,GAAG,YAAY,CAAC,MAAM,EAAE,CAAC;aAClC,MAAM,CAAC,CAAC,IAAiB,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,KAAK,EAAE,IAAI,IAAI,CAAC,IAAI,KAAK,GAAG,CAAC;aACpE,GAAG,CAAC,CAAC,IAAiB,EAAE,EAAE,CAAC,IAAI,SAAS,CAAC,IAAI,EAAE,IAAI,CAAC,OAAO,CAAC,aAAa,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;YACxF,+DAA+D;aAC9D,IAAI,CAAC,CAAC,CAAY,EAAE,CAAY,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,GAAG,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IAC3E,CAAC;IAED,0EAA0E;IAC1E,KAAK,CAAC,IAAoB,EAAE,OAAe;QACvC,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,aAAa,EAAE,OAAO,CAAC,CAAC;QACtD,IAAI,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,cAAc,CAAC;YAAE,OAAO,EAAE,CAAC;QAC5D,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QAChC,IAAI,KAAK,KAAK,IAAI;YAAE,OAAO,EAAE,CAAC;QAC9B,MAAM,OAAO,GAAG,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,aAAa,EAAE,GAAG,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACjF,MAAM,IAAI,GAAG,IAAA,2BAAW,EAAC,KAAK,CAAC,CAAC,IAAI,IAAI,MAAM,CAAC;QAC/C,MAAM,QAAQ,GAAG,GAAG,IAAI,CAAC,WAAW,IAAI,YAAY,cAAc,KAAK,CAAC,IAAI,WAAW,IAAI,GAAG,CAAC;QAC/F,MAAM,QAAQ,GAAyB,EAAE,CAAC;QAC1C,IAAI,IAAI,KAAK,YAAY,EAAE,CAAC;YACxB,QAAQ,CAAC,IAAI,CACT,IAAI,kBAAkB,CAClB,IAAI,IAAI,CAAC,IAAI,2CAA2C,QAAQ,gCAAgC;gBAC5F,4EAA4E,EAChF,SAAS,IAAI,CAAC,IAAI,uEAAuE;gBACrF,oCAAoC,KAAK,CAAC,IAAI,0CAA0C;gBACxF,gGAAgG,CACvG,CACJ,CAAC;QACN,CAAC;QACD,MAAM,SAAS,GAAG,IAAI,CAAC,MAAM,CAAC,MAAM,CAChC,OAAO,EACP,IAAI,CAAC,IAAI,CAAC,aAAa,CAAC,GAAG,CACvB,CAAC,KAAsB,EAAE,EAAE,CAAC,IAAI,iCAAkB,CAAC,KAAK,CAAC,KAAK,EAAE,KAAK,CAAC,CACzE,CACJ,CAAC;QACF,IACI,SAAS,KAAK,SAAS;YACvB,CAAC,SAAS,CAAC,KAAK,CAAC,MAAM;YACvB,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,QAAQ,CACrB,IAAI,CAAC,IAAI,EACT,OAAO,EACP,KAAK,CAAC,IAAI,EACV,IAAI,CAAC,QAAQ,EACb,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAe,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CACtD,KAAK,IAAI;YACV,CAAC,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,EAAE,SAAS,CAAC,KAAK,CAAC,QAAQ,CAAC,EACzD,CAAC;YACC,QAAQ,CAAC,IAAI,CACT,IAAI,kBAAkB,CAClB,IAAI,IAAI,CAAC,IAAI,6BAA6B,OAAO,8BAA8B;gBAC3E,IAAI,SAAS,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,0CAA0C;gBACjF,IAAI,SAAS,CAAC,IAAI,iBAAiB,EACvC,WAAW,IAAI,CAAC,IAAI,sBAAsB,SAAS,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,wBAAwB;gBACjG,qFAAqF,CAC5F,CACJ,CAAC;QACN,CAAC;QACD,OAAO,QAAQ,CAAC;IACpB,CAAC;IAEO,YAAY,CAAC,IAAY,EAAE,QAA2B;QAC1D,OAAO,QAAQ,CAAC,IAAI,CAChB,CAAC,MAAc,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC,MAAM,IAAI,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,CAC3E,CAAC;IACN,CAAC;IAEO,OAAO,CAAC,GAAW;QACvB,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;YAC5B,IAAI,GAAG,KAAK,IAAI,CAAC,GAAG,IAAI,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC;gBAAE,OAAO,IAAI,CAAC,IAAI,CAAC;QAClF,CAAC;QACD,OAAO,IAAI,CAAC;IAChB,CAAC;CACJ;AAhFD,kCAgFC","sourcesContent":["/**\n * The WIRE CLOSURE of a contract (#1064, D4): every named type an `@ApiPath` contract reaches must be\n * DECLARED in a `role:api-lib` project, and must end in a suffix that project's `required-type-suffix`\n * entry demands.\n *\n * Why it lives here and not in the dependency rule: `api-lib-dependencies` only sees project EDGES. A\n * relative-path import into another library, or a DTO library that itself reaches outside, puts a type\n * on the wire without any edge the graph rule could refuse. The extractor already follows every type a\n * contract reaches through the compiler — the same walk `api-rules-for-openapi` / `api-rules-for-mcp`\n * run, with no generate tag needed — so this is one more question asked of each type that walk found.\n *\n * Every api-lib rule before this one (`required-type-suffix`, `one-enum-spelling-in-api-lib`,\n * `no-utility-types-in-api-lib`, `no-inline-import-in-api-lib`) reads only source files INSIDE the api\n * library. A type declared in another package was, by construction, outside every one of them — which is\n * how `AiProvider` and the `BrowserTelemetry` trio reached the wire from a general library unchecked.\n *\n * A type declared OUTSIDE the workspace (a published package under node_modules) is not judged here:\n * its own package owns its schema, and the generator's fail-closed components check covers it.\n */\n\nimport * as path from 'path';\nimport { DocumentedType } from '@webpieces/api-doc-model';\nimport { FirstPathMatch, PathMatchCandidate } from '@webpieces/rules-config';\nimport { loadAndValidate } from '@webpieces/rules-config';\nimport { WireSuffixEntry } from './wire-suffix-entry';\nimport { ProjectInfo } from '../project-info';\nimport { resolveRole } from '../role-resolver';\nimport { RuleGate } from '../rule-gate';\nimport { DiffScope, RuleFileExclusions } from '@webpieces/rules-config';\nimport { ModifiedCodeMode } from '@webpieces/rules-sdk';\nimport { WireSuffixScope } from './wire-suffix-scope';\n\nconst API_LIB_ROLE = 'api-lib';\n\n/** The `required-type-suffix` entries the wire closure enforces; empty when that rule is OFF. */\nexport class WireClosureRule {\n    constructor(\n        public readonly suffixEntries: readonly WireSuffixEntry[],\n        public readonly scope: WireSuffixScope | undefined,\n    ) {}\n\n    /** Only the role check — what a unit test or a repo with `required-type-suffix` OFF gets. */\n    // webpieces-disable no-function-outside-class -- static factory of this class\n    static withoutSuffixes(): WireClosureRule {\n        return new WireClosureRule([], undefined);\n    }\n\n    /** `required-type-suffix`'s entries, unless that rule is OFF or time-boxed / branch-scoped off. */\n    // webpieces-disable no-function-outside-class -- static factory of this class\n    static fromConfig(workspaceRoot: string): WireClosureRule {\n        if (new RuleGate().skipReason(workspaceRoot, 'required-type-suffix', true) !== null) {\n            return WireClosureRule.withoutSuffixes();\n        }\n        const loaded = loadAndValidate(workspaceRoot);\n        const rule = loaded.resolved.rules.get('required-type-suffix')!;\n        return new WireClosureRule(\n            rule.options['entries'] as WireSuffixEntry[],\n            new WireSuffixScope(\n                workspaceRoot,\n                rule.options['mode'] as ModifiedCodeMode,\n                new RuleFileExclusions(\n                    'required-type-suffix',\n                    loaded.excludePaths.paths,\n                    (rule.options['excludePaths'] as string[] | undefined) ?? [],\n                ),\n                new DiffScope(),\n            ),\n        );\n    }\n}\n\n/** ONE wire-closure finding: what is wrong with a reached type, and what to do. */\nexport class WireClosureVerdict {\n    constructor(\n        public readonly what: string,\n        public readonly cure: string,\n    ) {}\n}\n\n/** A workspace project root, absolute, for the longest-prefix owner lookup. */\nclass OwnedRoot {\n    constructor(\n        public readonly info: ProjectInfo,\n        public readonly abs: string,\n    ) {}\n}\n\n/** Judges every type a contract reaches against the api-lib role and the suffix rule. */\nexport class WireClosure {\n    private readonly roots: OwnedRoot[];\n    private readonly picker = new FirstPathMatch();\n\n    constructor(\n        private readonly workspaceRoot: string,\n        projectInfos: Map<string, ProjectInfo>,\n        private readonly rule: WireClosureRule,\n    ) {\n        this.roots = [...projectInfos.values()]\n            .filter((info: ProjectInfo) => info.root !== '' && info.root !== '.')\n            .map((info: ProjectInfo) => new OwnedRoot(info, path.resolve(workspaceRoot, info.root)))\n            // Longest root first so a nested project wins over its parent.\n            .sort((a: OwnedRoot, b: OwnedRoot) => b.abs.length - a.abs.length);\n    }\n\n    /** Every verdict for ONE reached type, declared in the file `absFile`. */\n    judge(type: DocumentedType, absFile: string): WireClosureVerdict[] {\n        const abs = path.resolve(this.workspaceRoot, absFile);\n        if (abs.split(path.sep).includes('node_modules')) return [];\n        const owner = this.ownerOf(abs);\n        if (owner === null) return [];\n        const relFile = path.relative(this.workspaceRoot, abs).split(path.sep).join('/');\n        const role = resolveRole(owner).role ?? 'none';\n        const declared = `${type.packageName ?? 'no package'} (project '${owner.name}', role:${role})`;\n        const verdicts: WireClosureVerdict[] = [];\n        if (role !== API_LIB_ROLE) {\n            verdicts.push(\n                new WireClosureVerdict(\n                    `'${type.name}' goes over the wire but is declared in ${declared}, which is not a role:api-lib ` +\n                        'project — every type a contract reaches must be declared in an api library',\n                    `Move '${type.name}' into a role:api-lib project — as a '…Dto' string enum when it is a ` +\n                        `string-literal union. Retagging '${owner.name}' is not a way out unless it holds only ` +\n                        'contracts and wire types (validate-api-lib-tag refuses a role:api-lib with an implementation).',\n                ),\n            );\n        }\n        const governing = this.picker.winner(\n            relFile,\n            this.rule.suffixEntries.map(\n                (entry: WireSuffixEntry) => new PathMatchCandidate(entry.paths, entry),\n            ),\n        );\n        if (\n            governing !== undefined &&\n            !governing.entry.exempt &&\n            this.rule.scope?.includes(\n                type.name,\n                relFile,\n                owner.root,\n                type.location,\n                this.roots.map((root: OwnedRoot) => root.info.root),\n            ) === true &&\n            !this.endsInSuffix(type.name, governing.entry.suffixes)\n        ) {\n            verdicts.push(\n                new WireClosureVerdict(\n                    `'${type.name}' goes over the wire from ${relFile} but does not end in one of ` +\n                        `[${governing.entry.suffixes.join(', ')}], which the required-type-suffix entry ` +\n                        `'${governing.glob}' demands of it`,\n                    `Rename '${type.name}' to end in one of ${governing.entry.suffixes.join(', ')} — the suffix tells a ` +\n                        'reader which layer a type belongs to, and a wire type is the layer a partner reads.',\n                ),\n            );\n        }\n        return verdicts;\n    }\n\n    private endsInSuffix(name: string, suffixes: readonly string[]): boolean {\n        return suffixes.some(\n            (suffix: string) => name.length > suffix.length && name.endsWith(suffix),\n        );\n    }\n\n    private ownerOf(abs: string): ProjectInfo | null {\n        for (const root of this.roots) {\n            if (abs === root.abs || abs.startsWith(root.abs + path.sep)) return root.info;\n        }\n        return null;\n    }\n}\n"]}
+{"version":3,"file":"wire-closure.js","sourceRoot":"","sources":["../../../../../../../packages/tooling/nx-webpieces-rules/src/lib/api-usage/wire-closure.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;;;;GAkBG;;;;AAEH,mDAA6B;AAE7B,0DAA6E;AAC7E,0DAA0D;AAG1D,oDAA+C;AAC/C,4CAAwC;AACxC,0DAAwE;AAExE,2DAAsD;AAEtD,MAAM,YAAY,GAAG,SAAS,CAAC;AAE/B,iGAAiG;AACjG,MAAa,eAAe;IAEJ;IACA;IAFpB,YACoB,aAAyC,EACzC,KAAkC;QADlC,kBAAa,GAAb,aAAa,CAA4B;QACzC,UAAK,GAAL,KAAK,CAA6B;IACnD,CAAC;IAEJ,6FAA6F;IAC7F,8EAA8E;IAC9E,MAAM,CAAC,eAAe;QAClB,OAAO,IAAI,eAAe,CAAC,EAAE,EAAE,SAAS,CAAC,CAAC;IAC9C,CAAC;IAED,mGAAmG;IACnG,8EAA8E;IAC9E,MAAM,CAAC,KAAK,CAAC,UAAU,CAAC,aAAqB;QACzC,IAAI,IAAI,oBAAQ,EAAE,CAAC,UAAU,CAAC,aAAa,EAAE,sBAAsB,EAAE,IAAI,CAAC,KAAK,IAAI,EAAE,CAAC;YAClF,OAAO,eAAe,CAAC,eAAe,EAAE,CAAC;QAC7C,CAAC;QACD,MAAM,MAAM,GAAG,IAAA,8BAAe,EAAC,aAAa,CAAC,CAAC;QAC9C,MAAM,IAAI,GAAG,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,sBAAsB,CAAE,CAAC;QAChE,OAAO,IAAI,eAAe,CACtB,IAAI,CAAC,OAAO,CAAC,SAAS,CAAsB,EAC5C,MAAM,mCAAe,CAAC,MAAM,CACxB,aAAa,EACb,IAAI,CAAC,OAAO,CAAC,MAAM,CAAqB,EACxC,IAAI,iCAAkB,CAClB,sBAAsB,EACtB,MAAM,CAAC,YAAY,CAAC,KAAK,EACxB,IAAI,CAAC,OAAO,CAAC,cAAc,CAA0B,IAAI,EAAE,CAC/D,EACD,IAAI,wBAAS,EAAE,CAClB,CACJ,CAAC;IACN,CAAC;CACJ;AAlCD,0CAkCC;AAED,mFAAmF;AACnF,MAAa,kBAAkB;IAEP;IACA;IAFpB,YACoB,IAAY,EACZ,IAAY;QADZ,SAAI,GAAJ,IAAI,CAAQ;QACZ,SAAI,GAAJ,IAAI,CAAQ;IAC7B,CAAC;CACP;AALD,gDAKC;AAED,+EAA+E;AAC/E,MAAM,SAAS;IAES;IACA;IAFpB,YACoB,IAAiB,EACjB,GAAW;QADX,SAAI,GAAJ,IAAI,CAAa;QACjB,QAAG,GAAH,GAAG,CAAQ;IAC5B,CAAC;CACP;AAED,yFAAyF;AACzF,MAAa,WAAW;IAKC;IAEA;IANJ,KAAK,CAAc;IACnB,MAAM,GAAG,IAAI,6BAAc,EAAE,CAAC;IAE/C,YACqB,aAAqB,EACtC,YAAsC,EACrB,IAAqB;QAFrB,kBAAa,GAAb,aAAa,CAAQ;QAErB,SAAI,GAAJ,IAAI,CAAiB;QAEtC,IAAI,CAAC,KAAK,GAAG,CAAC,GAAG,YAAY,CAAC,MAAM,EAAE,CAAC;aAClC,MAAM,CAAC,CAAC,IAAiB,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,KAAK,EAAE,IAAI,IAAI,CAAC,IAAI,KAAK,GAAG,CAAC;aACpE,GAAG,CAAC,CAAC,IAAiB,EAAE,EAAE,CAAC,IAAI,SAAS,CAAC,IAAI,EAAE,IAAI,CAAC,OAAO,CAAC,aAAa,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;YACxF,+DAA+D;aAC9D,IAAI,CAAC,CAAC,CAAY,EAAE,CAAY,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,GAAG,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IAC3E,CAAC;IAED,0EAA0E;IAC1E,KAAK,CAAC,IAAoB,EAAE,OAAe;QACvC,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,aAAa,EAAE,OAAO,CAAC,CAAC;QACtD,IAAI,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,cAAc,CAAC;YAAE,OAAO,EAAE,CAAC;QAC5D,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QAChC,IAAI,KAAK,KAAK,IAAI;YAAE,OAAO,EAAE,CAAC;QAC9B,MAAM,OAAO,GAAG,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,aAAa,EAAE,GAAG,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACjF,MAAM,IAAI,GAAG,IAAA,2BAAW,EAAC,KAAK,CAAC,CAAC,IAAI,IAAI,MAAM,CAAC;QAC/C,MAAM,QAAQ,GAAG,GAAG,IAAI,CAAC,WAAW,IAAI,YAAY,cAAc,KAAK,CAAC,IAAI,WAAW,IAAI,GAAG,CAAC;QAC/F,MAAM,QAAQ,GAAyB,EAAE,CAAC;QAC1C,IAAI,IAAI,KAAK,YAAY,EAAE,CAAC;YACxB,QAAQ,CAAC,IAAI,CACT,IAAI,kBAAkB,CAClB,IAAI,IAAI,CAAC,IAAI,2CAA2C,QAAQ,gCAAgC;gBAC5F,4EAA4E,EAChF,SAAS,IAAI,CAAC,IAAI,uEAAuE;gBACrF,oCAAoC,KAAK,CAAC,IAAI,0CAA0C;gBACxF,gGAAgG,CACvG,CACJ,CAAC;QACN,CAAC;QACD,MAAM,SAAS,GAAG,IAAI,CAAC,MAAM,CAAC,MAAM,CAChC,OAAO,EACP,IAAI,CAAC,IAAI,CAAC,aAAa,CAAC,GAAG,CACvB,CAAC,KAAsB,EAAE,EAAE,CAAC,IAAI,iCAAkB,CAAC,KAAK,CAAC,KAAK,EAAE,KAAK,CAAC,CACzE,CACJ,CAAC;QACF,IACI,SAAS,KAAK,SAAS;YACvB,CAAC,SAAS,CAAC,KAAK,CAAC,MAAM;YACvB,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,QAAQ,CACrB,IAAI,CAAC,IAAI,EACT,OAAO,EACP,KAAK,CAAC,IAAI,EACV,IAAI,CAAC,QAAQ,EACb,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAe,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CACtD,KAAK,IAAI;YACV,CAAC,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,EAAE,SAAS,CAAC,KAAK,CAAC,QAAQ,CAAC,EACzD,CAAC;YACC,QAAQ,CAAC,IAAI,CACT,IAAI,kBAAkB,CAClB,IAAI,IAAI,CAAC,IAAI,6BAA6B,OAAO,8BAA8B;gBAC3E,IAAI,SAAS,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,0CAA0C;gBACjF,IAAI,SAAS,CAAC,IAAI,iBAAiB,EACvC,WAAW,IAAI,CAAC,IAAI,sBAAsB,SAAS,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,wBAAwB;gBACjG,qFAAqF,CAC5F,CACJ,CAAC;QACN,CAAC;QACD,OAAO,QAAQ,CAAC;IACpB,CAAC;IAEO,YAAY,CAAC,IAAY,EAAE,QAA2B;QAC1D,OAAO,QAAQ,CAAC,IAAI,CAChB,CAAC,MAAc,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC,MAAM,IAAI,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,CAC3E,CAAC;IACN,CAAC;IAEO,OAAO,CAAC,GAAW;QACvB,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;YAC5B,IAAI,GAAG,KAAK,IAAI,CAAC,GAAG,IAAI,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC;gBAAE,OAAO,IAAI,CAAC,IAAI,CAAC;QAClF,CAAC;QACD,OAAO,IAAI,CAAC;IAChB,CAAC;CACJ;AAhFD,kCAgFC","sourcesContent":["/**\n * The WIRE CLOSURE of a contract (#1064, D4): every named type an `@ApiPath` contract reaches must be\n * DECLARED in a `role:api-lib` project, and must end in a suffix that project's `required-type-suffix`\n * entry demands.\n *\n * Why it lives here and not in the dependency rule: `api-lib-dependencies` only sees project EDGES. A\n * relative-path import into another library, or a DTO library that itself reaches outside, puts a type\n * on the wire without any edge the graph rule could refuse. The extractor already follows every type a\n * contract reaches through the compiler — the same walk `api-rules-for-openapi` / `api-rules-for-mcp`\n * run, with no generate tag needed — so this is one more question asked of each type that walk found.\n *\n * Every api-lib rule before this one (`required-type-suffix`, `one-enum-spelling-in-api-lib`,\n * `no-utility-types-in-api-lib`, `no-inline-import-in-api-lib`) reads only source files INSIDE the api\n * library. A type declared in another package was, by construction, outside every one of them — which is\n * how `AiProvider` and the `BrowserTelemetry` trio reached the wire from a general library unchecked.\n *\n * A type declared OUTSIDE the workspace (a published package under node_modules) is not judged here:\n * its own package owns its schema, and the generator's fail-closed components check covers it.\n */\n\nimport * as path from 'path';\nimport { DocumentedType } from '@webpieces/api-doc-model';\nimport { FirstPathMatch, PathMatchCandidate } from '@webpieces/rules-config';\nimport { loadAndValidate } from '@webpieces/rules-config';\nimport { WireSuffixEntry } from './wire-suffix-entry';\nimport { ProjectInfo } from '../project-info';\nimport { resolveRole } from '../role-resolver';\nimport { RuleGate } from '../rule-gate';\nimport { DiffScope, RuleFileExclusions } from '@webpieces/rules-config';\nimport { ModifiedCodeMode } from '@webpieces/rules-sdk';\nimport { WireSuffixScope } from './wire-suffix-scope';\n\nconst API_LIB_ROLE = 'api-lib';\n\n/** The `required-type-suffix` entries the wire closure enforces; empty when that rule is OFF. */\nexport class WireClosureRule {\n    constructor(\n        public readonly suffixEntries: readonly WireSuffixEntry[],\n        public readonly scope: WireSuffixScope | undefined,\n    ) {}\n\n    /** Only the role check — what a unit test or a repo with `required-type-suffix` OFF gets. */\n    // webpieces-disable no-function-outside-class -- static factory of this class\n    static withoutSuffixes(): WireClosureRule {\n        return new WireClosureRule([], undefined);\n    }\n\n    /** `required-type-suffix`'s entries, unless that rule is OFF or time-boxed / branch-scoped off. */\n    // webpieces-disable no-function-outside-class -- static factory of this class\n    static async fromConfig(workspaceRoot: string): Promise<WireClosureRule> {\n        if (new RuleGate().skipReason(workspaceRoot, 'required-type-suffix', true) !== null) {\n            return WireClosureRule.withoutSuffixes();\n        }\n        const loaded = loadAndValidate(workspaceRoot);\n        const rule = loaded.resolved.rules.get('required-type-suffix')!;\n        return new WireClosureRule(\n            rule.options['entries'] as WireSuffixEntry[],\n            await WireSuffixScope.create(\n                workspaceRoot,\n                rule.options['mode'] as ModifiedCodeMode,\n                new RuleFileExclusions(\n                    'required-type-suffix',\n                    loaded.excludePaths.paths,\n                    (rule.options['excludePaths'] as string[] | undefined) ?? [],\n                ),\n                new DiffScope(),\n            ),\n        );\n    }\n}\n\n/** ONE wire-closure finding: what is wrong with a reached type, and what to do. */\nexport class WireClosureVerdict {\n    constructor(\n        public readonly what: string,\n        public readonly cure: string,\n    ) {}\n}\n\n/** A workspace project root, absolute, for the longest-prefix owner lookup. */\nclass OwnedRoot {\n    constructor(\n        public readonly info: ProjectInfo,\n        public readonly abs: string,\n    ) {}\n}\n\n/** Judges every type a contract reaches against the api-lib role and the suffix rule. */\nexport class WireClosure {\n    private readonly roots: OwnedRoot[];\n    private readonly picker = new FirstPathMatch();\n\n    constructor(\n        private readonly workspaceRoot: string,\n        projectInfos: Map<string, ProjectInfo>,\n        private readonly rule: WireClosureRule,\n    ) {\n        this.roots = [...projectInfos.values()]\n            .filter((info: ProjectInfo) => info.root !== '' && info.root !== '.')\n            .map((info: ProjectInfo) => new OwnedRoot(info, path.resolve(workspaceRoot, info.root)))\n            // Longest root first so a nested project wins over its parent.\n            .sort((a: OwnedRoot, b: OwnedRoot) => b.abs.length - a.abs.length);\n    }\n\n    /** Every verdict for ONE reached type, declared in the file `absFile`. */\n    judge(type: DocumentedType, absFile: string): WireClosureVerdict[] {\n        const abs = path.resolve(this.workspaceRoot, absFile);\n        if (abs.split(path.sep).includes('node_modules')) return [];\n        const owner = this.ownerOf(abs);\n        if (owner === null) return [];\n        const relFile = path.relative(this.workspaceRoot, abs).split(path.sep).join('/');\n        const role = resolveRole(owner).role ?? 'none';\n        const declared = `${type.packageName ?? 'no package'} (project '${owner.name}', role:${role})`;\n        const verdicts: WireClosureVerdict[] = [];\n        if (role !== API_LIB_ROLE) {\n            verdicts.push(\n                new WireClosureVerdict(\n                    `'${type.name}' goes over the wire but is declared in ${declared}, which is not a role:api-lib ` +\n                        'project — every type a contract reaches must be declared in an api library',\n                    `Move '${type.name}' into a role:api-lib project — as a '…Dto' string enum when it is a ` +\n                        `string-literal union. Retagging '${owner.name}' is not a way out unless it holds only ` +\n                        'contracts and wire types (validate-api-lib-tag refuses a role:api-lib with an implementation).',\n                ),\n            );\n        }\n        const governing = this.picker.winner(\n            relFile,\n            this.rule.suffixEntries.map(\n                (entry: WireSuffixEntry) => new PathMatchCandidate(entry.paths, entry),\n            ),\n        );\n        if (\n            governing !== undefined &&\n            !governing.entry.exempt &&\n            this.rule.scope?.includes(\n                type.name,\n                relFile,\n                owner.root,\n                type.location,\n                this.roots.map((root: OwnedRoot) => root.info.root),\n            ) === true &&\n            !this.endsInSuffix(type.name, governing.entry.suffixes)\n        ) {\n            verdicts.push(\n                new WireClosureVerdict(\n                    `'${type.name}' goes over the wire from ${relFile} but does not end in one of ` +\n                        `[${governing.entry.suffixes.join(', ')}], which the required-type-suffix entry ` +\n                        `'${governing.glob}' demands of it`,\n                    `Rename '${type.name}' to end in one of ${governing.entry.suffixes.join(', ')} — the suffix tells a ` +\n                        'reader which layer a type belongs to, and a wire type is the layer a partner reads.',\n                ),\n            );\n        }\n        return verdicts;\n    }\n\n    private endsInSuffix(name: string, suffixes: readonly string[]): boolean {\n        return suffixes.some(\n            (suffix: string) => name.length > suffix.length && name.endsWith(suffix),\n        );\n    }\n\n    private ownerOf(abs: string): ProjectInfo | null {\n        for (const root of this.roots) {\n            if (abs === root.abs || abs.startsWith(root.abs + path.sep)) return root.info;\n        }\n        return null;\n    }\n}\n"]}

package/src/lib/api-usage/wire-suffix-scope.d.ts

@@ -5,12 +5,16 @@ export declare class WireSuffixScope {
     private readonly root;
     private readonly mode;
     private readonly exclusions;
-    private readonly diff;
     private readonly changed;
     private readonly lines;
-    private readonly base;
-    private readonly head;
-    constructor(root: string, mode: ModifiedCodeMode, exclusions: RuleFileExclusions, diff: DiffScope);
+    private constructor();
+    /**
+     * Reads the diff ONCE, up front: the base, the changed files, and — in NEW_AND_MODIFIED_CODE — the
+     * changed lines of every changed TypeScript source file (the only files {@link includes} can judge in
+     * that mode), because the git reads are asynchronous and {@link includes} is not.
+     */
+    static create(root: string, mode: ModifiedCodeMode, exclusions: RuleFileExclusions, diff: DiffScope): Promise<WireSuffixScope>;
+    private static isJudgedSource;
     includes(name: string, relFile: string, projectRoot: string, location: string, projectRoots: readonly string[]): boolean;
     private declarationAt;
     private fileInScope;

package/src/lib/api-usage/wire-suffix-scope.js

@@ -11,28 +11,51 @@ class WireSuffixScope {
     root;
     mode;
     exclusions;
-    diff;
     changed;
-    lines = new Map();
-    base;
-    head;
+    lines;
     constructor(root, mode, 
     // required-type-suffix's framework-owned path exclusions (#1253): the repo's top-level
     // excludePaths plus the rule's own — the same RuleFileExclusions the code-rules runtime applies.
-    exclusions, diff) {
+    exclusions, 
+    // null in RUN_EVERY_TIME: every file is in scope.
+    changed, 
+    // NEW_AND_MODIFIED_CODE only: the changed lines of every changed TypeScript source file.
+    lines) {
         this.root = root;
         this.mode = mode;
         this.exclusions = exclusions;
-        this.diff = diff;
-        const range = mode === 'RUN_EVERY_TIME' ? undefined : diff.resolveBase(root);
-        this.base = range?.base;
-        this.head = range?.head;
-        this.changed =
-            mode === 'RUN_EVERY_TIME'
-                ? null
-                : new Set(this.base === undefined
-                    ? []
-                    : diff.getChangedFiles(root, this.base, this.head, { tsOnly: false }));
+        this.changed = changed;
+        this.lines = lines;
+    }
+    /**
+     * Reads the diff ONCE, up front: the base, the changed files, and — in NEW_AND_MODIFIED_CODE — the
+     * changed lines of every changed TypeScript source file (the only files {@link includes} can judge in
+     * that mode), because the git reads are asynchronous and {@link includes} is not.
+     */
+    // webpieces-disable no-function-outside-class -- static async factory of this class
+    static async create(root, mode, exclusions, diff) {
+        const lines = new Map();
+        if (mode === 'RUN_EVERY_TIME')
+            return new WireSuffixScope(root, mode, exclusions, null, lines);
+        const range = await diff.resolveBase(root);
+        if (range.base === undefined)
+            return new WireSuffixScope(root, mode, exclusions, new Set(), lines);
+        const changed = new Set(await diff.getChangedFiles(root, range.base, range.head, { tsOnly: false }));
+        if (mode === 'NEW_AND_MODIFIED_CODE') {
+            for (const relFile of changed) {
+                if (!WireSuffixScope.isJudgedSource(relFile))
+                    continue;
+                lines.set(relFile, diff.getChangedLineNumbers(await diff.getFileDiff(root, relFile, range.base, range.head)));
+            }
+        }
+        return new WireSuffixScope(root, mode, exclusions, changed, lines);
+    }
+    // A file includes() can judge at all: TypeScript source, not a declaration file or a test.
+    // webpieces-disable no-function-outside-class -- static predicate shared by create() and includes()
+    static isJudgedSource(relFile) {
+        if (!/\.tsx?$/.test(relFile))
+            return false;
+        return !(relFile.endsWith('.d.ts') || /\.(spec|test)\.ts$/.test(relFile) || relFile.includes('__tests__/'));
     }
     includes(name, relFile, projectRoot, location, projectRoots) {
         if (this.mode === 'OFF' || this.exclusions.excludes(relFile))
@@ -87,15 +110,7 @@ class WireSuffixScope {
         });
     }
     changedLines(relFile) {
-        let lines = this.lines.get(relFile);
-        if (lines === undefined) {
-            lines =
-                this.base === undefined
-                    ? new Set()
-                    : this.diff.getChangedLineNumbers(this.diff.getFileDiff(this.root, relFile, this.base, this.head));
-            this.lines.set(relFile, lines);
-        }
-        return lines;
+        return this.lines.get(relFile) ?? new Set();
     }
 }
 exports.WireSuffixScope = WireSuffixScope;

package/src/lib/api-usage/wire-suffix-scope.js.map

@@ -1 +1 @@
-{"version":3,"file":"wire-suffix-scope.js","sourceRoot":"","sources":["../../../../../../../packages/tooling/nx-webpieces-rules/src/lib/api-usage/wire-suffix-scope.ts"],"names":[],"mappings":";;;;AAAA,+CAAyB;AACzB,mDAA6B;AAC7B,uDAAiC;AACjC,0DAAoF;AAGpF,+FAA+F;AAC/F,MAAa,eAAe;IAOH;IACA;IAGA;IACA;IAXJ,OAAO,CAAqB;IAC5B,KAAK,GAAG,IAAI,GAAG,EAAuB,CAAC;IACvC,IAAI,CAAqB;IACzB,IAAI,CAAqB;IAE1C,YACqB,IAAY,EACZ,IAAsB;IACvC,uFAAuF;IACvF,iGAAiG;IAChF,UAA8B,EAC9B,IAAe;QALf,SAAI,GAAJ,IAAI,CAAQ;QACZ,SAAI,GAAJ,IAAI,CAAkB;QAGtB,eAAU,GAAV,UAAU,CAAoB;QAC9B,SAAI,GAAJ,IAAI,CAAW;QAEhC,MAAM,KAAK,GAAG,IAAI,KAAK,gBAAgB,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC;QAC7E,IAAI,CAAC,IAAI,GAAG,KAAK,EAAE,IAAI,CAAC;QACxB,IAAI,CAAC,IAAI,GAAG,KAAK,EAAE,IAAI,CAAC;QACxB,IAAI,CAAC,OAAO;YACR,IAAI,KAAK,gBAAgB;gBACrB,CAAC,CAAC,IAAI;gBACN,CAAC,CAAC,IAAI,GAAG,CACH,IAAI,CAAC,IAAI,KAAK,SAAS;oBACnB,CAAC,CAAC,EAAE;oBACJ,CAAC,CAAC,IAAI,CAAC,eAAe,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAC5E,CAAC;IAChB,CAAC;IAED,QAAQ,CACJ,IAAY,EACZ,OAAe,EACf,WAAmB,EACnB,QAAgB,EAChB,YAA+B;QAE/B,IAAI,IAAI,CAAC,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,OAAO,CAAC;YAAE,OAAO,KAAK,CAAC;QAC3E,IACI,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC;YACzB,oBAAoB,CAAC,IAAI,CAAC,OAAO,CAAC;YAClC,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAC;YAE9B,OAAO,KAAK,CAAC;QACjB,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,OAAO,EAAE,WAAW,EAAE,YAAY,CAAC;YAAE,OAAO,KAAK,CAAC;QACxE,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;QAC9C,MAAM,IAAI,GAAG,EAAE,CAAC,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QAC3C,MAAM,MAAM,GAAG,EAAE,CAAC,gBAAgB,CAAC,IAAI,EAAE,IAAI,EAAE,EAAE,CAAC,YAAY,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;QAC7E,MAAM,YAAY,GAAG,MAAM,CAAC,aAAa,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;QAC/D,MAAM,WAAW,GAAG,IAAI,CAAC,aAAa,CAAC,MAAM,EAAE,IAAI,EAAE,YAAY,CAAC,CAAC;QACnE,IAAI,WAAW,KAAK,SAAS;YAAE,OAAO,KAAK,CAAC;QAC5C,MAAM,KAAK,GAAG,WAIe,CAAC;QAC9B,MAAM,IAAI,GAAG,MAAM,CAAC,6BAA6B,CAAC,KAAK,CAAC,IAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC;QACzF,MAAM,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QACnC,IACI,IAAA,yBAAU,EAAC,SAAS,CAAC,IAAI,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,sBAAsB,CAAC;YAC7D,IAAA,yBAAU,EAAC,SAAS,CAAC,IAAI,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,sBAAsB,CAAC;YAE7D,OAAO,KAAK,CAAC;QACjB,OAAO,IAAI,CAAC,IAAI,KAAK,uBAAuB,IAAI,IAAI,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IACzF,CAAC;IAEO,aAAa,CACjB,MAAqB,EACrB,IAAY,EACZ,IAAY;QAEZ,IAAI,KAA0C,CAAC;QAC/C,MAAM,KAAK,GAAG,CAAC,IAAa,EAAQ,EAAE;YAClC,IACI,CAAC,EAAE,CAAC,kBAAkB,CAAC,IAAI,CAAC;gBACxB,EAAE,CAAC,sBAAsB,CAAC,IAAI,CAAC;gBAC/B,EAAE,CAAC,iBAAiB,CAAC,IAAI,CAAC;gBAC1B,EAAE,CAAC,sBAAsB,CAAC,IAAI,CAAC,CAAC;gBACpC,IAAI,CAAC,IAAI,EAAE,IAAI,KAAK,IAAI;gBACxB,MAAM,CAAC,6BAA6B,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,KAAK,IAAI;gBAE7E,KAAK,GAAG,IAAI,CAAC;YACjB,IAAI,KAAK,KAAK,SAAS;gBAAE,EAAE,CAAC,YAAY,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;QAC1D,CAAC,CAAC;QACF,KAAK,CAAC,MAAM,CAAC,CAAC;QACd,OAAO,KAAK,CAAC;IACjB,CAAC;IAEO,WAAW,CACf,OAAe,EACf,WAAmB,EACnB,YAA+B;QAE/B,IAAI,IAAI,CAAC,OAAO,KAAK,IAAI;YAAE,OAAO,IAAI,CAAC;QACvC,IAAI,IAAI,CAAC,IAAI,KAAK,mBAAmB;YAAE,OAAO,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QACxE,OAAO,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,IAAY,EAAE,EAAE;YAC3C,MAAM,KAAK,GAAG,YAAY;iBACrB,MAAM,CAAC,CAAC,IAAY,EAAE,EAAE,CAAC,IAAI,KAAK,IAAI,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,IAAI,GAAG,CAAC,CAAC;iBACtE,IAAI,CAAC,CAAC,CAAS,EAAE,CAAS,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;YAC5D,OAAO,KAAK,KAAK,WAAW,CAAC;QACjC,CAAC,CAAC,CAAC;IACP,CAAC;IAEO,YAAY,CAAC,OAAe;QAChC,IAAI,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QACpC,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;YACtB,KAAK;gBACD,IAAI,CAAC,IAAI,KAAK,SAAS;oBACnB,CAAC,CAAC,IAAI,GAAG,EAAU;oBACnB,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,qBAAqB,CAC3B,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI,EAAE,OAAO,EAAE,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC,CAClE,CAAC;YACZ,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;QACnC,CAAC;QACD,OAAO,KAAK,CAAC;IACjB,CAAC;CACJ;AAjHD,0CAiHC","sourcesContent":["import * as fs from 'fs';\nimport * as path from 'path';\nimport * as ts from 'typescript';\nimport { DiffScope, hasDisable, RuleFileExclusions } from '@webpieces/rules-config';\nimport { ModifiedCodeMode } from '@webpieces/rules-sdk';\n\n/** Suffix enforcement keeps its own rollout scope, independently of the enclosing doc rule. */\nexport class WireSuffixScope {\n    private readonly changed: Set<string> | null;\n    private readonly lines = new Map<string, Set<number>>();\n    private readonly base: string | undefined;\n    private readonly head: string | undefined;\n\n    constructor(\n        private readonly root: string,\n        private readonly mode: ModifiedCodeMode,\n        // required-type-suffix's framework-owned path exclusions (#1253): the repo's top-level\n        // excludePaths plus the rule's own — the same RuleFileExclusions the code-rules runtime applies.\n        private readonly exclusions: RuleFileExclusions,\n        private readonly diff: DiffScope,\n    ) {\n        const range = mode === 'RUN_EVERY_TIME' ? undefined : diff.resolveBase(root);\n        this.base = range?.base;\n        this.head = range?.head;\n        this.changed =\n            mode === 'RUN_EVERY_TIME'\n                ? null\n                : new Set(\n                      this.base === undefined\n                          ? []\n                          : diff.getChangedFiles(root, this.base, this.head, { tsOnly: false }),\n                  );\n    }\n\n    includes(\n        name: string,\n        relFile: string,\n        projectRoot: string,\n        location: string,\n        projectRoots: readonly string[],\n    ): boolean {\n        if (this.mode === 'OFF' || this.exclusions.excludes(relFile)) return false;\n        if (\n            relFile.endsWith('.d.ts') ||\n            /\\.(spec|test)\\.ts$/.test(relFile) ||\n            relFile.includes('__tests__/')\n        )\n            return false;\n        if (!this.fileInScope(relFile, projectRoot, projectRoots)) return false;\n        const file = path.resolve(this.root, relFile);\n        const text = fs.readFileSync(file, 'utf8');\n        const source = ts.createSourceFile(file, text, ts.ScriptTarget.Latest, true);\n        const declaredLine = Number(/:(\\d+):\\d+$/.exec(location)?.[1]);\n        const declaration = this.declarationAt(source, name, declaredLine);\n        if (declaration === undefined) return false;\n        const named = declaration as\n            | ts.ClassDeclaration\n            | ts.InterfaceDeclaration\n            | ts.EnumDeclaration\n            | ts.TypeAliasDeclaration;\n        const line = source.getLineAndCharacterOfPosition(named.name!.getStart(source)).line + 1;\n        const textLines = text.split('\\n');\n        if (\n            hasDisable(textLines[line - 1] ?? '', 'required-type-suffix') ||\n            hasDisable(textLines[line - 2] ?? '', 'required-type-suffix')\n        )\n            return false;\n        return this.mode !== 'NEW_AND_MODIFIED_CODE' || this.changedLines(relFile).has(line);\n    }\n\n    private declarationAt(\n        source: ts.SourceFile,\n        name: string,\n        line: number,\n    ): ts.DeclarationStatement | undefined {\n        let found: ts.DeclarationStatement | undefined;\n        const visit = (node: ts.Node): void => {\n            if (\n                (ts.isClassDeclaration(node) ||\n                    ts.isInterfaceDeclaration(node) ||\n                    ts.isEnumDeclaration(node) ||\n                    ts.isTypeAliasDeclaration(node)) &&\n                node.name?.text === name &&\n                source.getLineAndCharacterOfPosition(node.getStart(source)).line + 1 === line\n            )\n                found = node;\n            if (found === undefined) ts.forEachChild(node, visit);\n        };\n        visit(source);\n        return found;\n    }\n\n    private fileInScope(\n        relFile: string,\n        projectRoot: string,\n        projectRoots: readonly string[],\n    ): boolean {\n        if (this.changed === null) return true;\n        if (this.mode !== 'MODIFIED_PROJECTS') return this.changed.has(relFile);\n        return [...this.changed].some((file: string) => {\n            const owner = projectRoots\n                .filter((root: string) => file === root || file.startsWith(`${root}/`))\n                .sort((a: string, b: string) => b.length - a.length)[0];\n            return owner === projectRoot;\n        });\n    }\n\n    private changedLines(relFile: string): ReadonlySet<number> {\n        let lines = this.lines.get(relFile);\n        if (lines === undefined) {\n            lines =\n                this.base === undefined\n                    ? new Set<number>()\n                    : this.diff.getChangedLineNumbers(\n                          this.diff.getFileDiff(this.root, relFile, this.base, this.head),\n                      );\n            this.lines.set(relFile, lines);\n        }\n        return lines;\n    }\n}\n"]}
+{"version":3,"file":"wire-suffix-scope.js","sourceRoot":"","sources":["../../../../../../../packages/tooling/nx-webpieces-rules/src/lib/api-usage/wire-suffix-scope.ts"],"names":[],"mappings":";;;;AAAA,+CAAyB;AACzB,mDAA6B;AAC7B,uDAAiC;AACjC,0DAAoF;AAGpF,+FAA+F;AAC/F,MAAa,eAAe;IAEH;IACA;IAGA;IAEA;IAEA;IATrB,YACqB,IAAY,EACZ,IAAsB;IACvC,uFAAuF;IACvF,iGAAiG;IAChF,UAA8B;IAC/C,kDAAkD;IACjC,OAA2B;IAC5C,yFAAyF;IACxE,KAA+B;QAR/B,SAAI,GAAJ,IAAI,CAAQ;QACZ,SAAI,GAAJ,IAAI,CAAkB;QAGtB,eAAU,GAAV,UAAU,CAAoB;QAE9B,YAAO,GAAP,OAAO,CAAoB;QAE3B,UAAK,GAAL,KAAK,CAA0B;IACjD,CAAC;IAEJ;;;;OAIG;IACH,oFAAoF;IACpF,MAAM,CAAC,KAAK,CAAC,MAAM,CACf,IAAY,EACZ,IAAsB,EACtB,UAA8B,EAC9B,IAAe;QAEf,MAAM,KAAK,GAAG,IAAI,GAAG,EAAuB,CAAC;QAC7C,IAAI,IAAI,KAAK,gBAAgB;YAAE,OAAO,IAAI,eAAe,CAAC,IAAI,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC;QAC/F,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC;QAC3C,IAAI,KAAK,CAAC,IAAI,KAAK,SAAS;YAAE,OAAO,IAAI,eAAe,CAAC,IAAI,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,GAAG,EAAU,EAAE,KAAK,CAAC,CAAC;QAC3G,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,MAAM,IAAI,CAAC,eAAe,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC;QACrG,IAAI,IAAI,KAAK,uBAAuB,EAAE,CAAC;YACnC,KAAK,MAAM,OAAO,IAAI,OAAO,EAAE,CAAC;gBAC5B,IAAI,CAAC,eAAe,CAAC,cAAc,CAAC,OAAO,CAAC;oBAAE,SAAS;gBACvD,KAAK,CAAC,GAAG,CAAC,OAAO,EAAE,IAAI,CAAC,qBAAqB,CACzC,MAAM,IAAI,CAAC,WAAW,CAAC,IAAI,EAAE,OAAO,EAAE,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YACxE,CAAC;QACL,CAAC;QACD,OAAO,IAAI,eAAe,CAAC,IAAI,EAAE,IAAI,EAAE,UAAU,EAAE,OAAO,EAAE,KAAK,CAAC,CAAC;IACvE,CAAC;IAED,2FAA2F;IAC3F,oGAAoG;IAC5F,MAAM,CAAC,cAAc,CAAC,OAAe;QACzC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC;YAAE,OAAO,KAAK,CAAC;QAC3C,OAAO,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,oBAAoB,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAC,CAAC,CAAC;IAChH,CAAC;IAED,QAAQ,CACJ,IAAY,EACZ,OAAe,EACf,WAAmB,EACnB,QAAgB,EAChB,YAA+B;QAE/B,IAAI,IAAI,CAAC,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,OAAO,CAAC;YAAE,OAAO,KAAK,CAAC;QAC3E,IACI,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC;YACzB,oBAAoB,CAAC,IAAI,CAAC,OAAO,CAAC;YAClC,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAC;YAE9B,OAAO,KAAK,CAAC;QACjB,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,OAAO,EAAE,WAAW,EAAE,YAAY,CAAC;YAAE,OAAO,KAAK,CAAC;QACxE,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;QAC9C,MAAM,IAAI,GAAG,EAAE,CAAC,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QAC3C,MAAM,MAAM,GAAG,EAAE,CAAC,gBAAgB,CAAC,IAAI,EAAE,IAAI,EAAE,EAAE,CAAC,YAAY,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;QAC7E,MAAM,YAAY,GAAG,MAAM,CAAC,aAAa,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;QAC/D,MAAM,WAAW,GAAG,IAAI,CAAC,aAAa,CAAC,MAAM,EAAE,IAAI,EAAE,YAAY,CAAC,CAAC;QACnE,IAAI,WAAW,KAAK,SAAS;YAAE,OAAO,KAAK,CAAC;QAC5C,MAAM,KAAK,GAAG,WAIe,CAAC;QAC9B,MAAM,IAAI,GAAG,MAAM,CAAC,6BAA6B,CAAC,KAAK,CAAC,IAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC;QACzF,MAAM,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QACnC,IACI,IAAA,yBAAU,EAAC,SAAS,CAAC,IAAI,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,sBAAsB,CAAC;YAC7D,IAAA,yBAAU,EAAC,SAAS,CAAC,IAAI,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,sBAAsB,CAAC;YAE7D,OAAO,KAAK,CAAC;QACjB,OAAO,IAAI,CAAC,IAAI,KAAK,uBAAuB,IAAI,IAAI,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IACzF,CAAC;IAEO,aAAa,CACjB,MAAqB,EACrB,IAAY,EACZ,IAAY;QAEZ,IAAI,KAA0C,CAAC;QAC/C,MAAM,KAAK,GAAG,CAAC,IAAa,EAAQ,EAAE;YAClC,IACI,CAAC,EAAE,CAAC,kBAAkB,CAAC,IAAI,CAAC;gBACxB,EAAE,CAAC,sBAAsB,CAAC,IAAI,CAAC;gBAC/B,EAAE,CAAC,iBAAiB,CAAC,IAAI,CAAC;gBAC1B,EAAE,CAAC,sBAAsB,CAAC,IAAI,CAAC,CAAC;gBACpC,IAAI,CAAC,IAAI,EAAE,IAAI,KAAK,IAAI;gBACxB,MAAM,CAAC,6BAA6B,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,KAAK,IAAI;gBAE7E,KAAK,GAAG,IAAI,CAAC;YACjB,IAAI,KAAK,KAAK,SAAS;gBAAE,EAAE,CAAC,YAAY,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;QAC1D,CAAC,CAAC;QACF,KAAK,CAAC,MAAM,CAAC,CAAC;QACd,OAAO,KAAK,CAAC;IACjB,CAAC;IAEO,WAAW,CACf,OAAe,EACf,WAAmB,EACnB,YAA+B;QAE/B,IAAI,IAAI,CAAC,OAAO,KAAK,IAAI;YAAE,OAAO,IAAI,CAAC;QACvC,IAAI,IAAI,CAAC,IAAI,KAAK,mBAAmB;YAAE,OAAO,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QACxE,OAAO,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,IAAY,EAAE,EAAE;YAC3C,MAAM,KAAK,GAAG,YAAY;iBACrB,MAAM,CAAC,CAAC,IAAY,EAAE,EAAE,CAAC,IAAI,KAAK,IAAI,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,IAAI,GAAG,CAAC,CAAC;iBACtE,IAAI,CAAC,CAAC,CAAS,EAAE,CAAS,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;YAC5D,OAAO,KAAK,KAAK,WAAW,CAAC;QACjC,CAAC,CAAC,CAAC;IACP,CAAC;IAEO,YAAY,CAAC,OAAe;QAChC,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,IAAI,GAAG,EAAU,CAAC;IACxD,CAAC;CACJ;AA3HD,0CA2HC","sourcesContent":["import * as fs from 'fs';\nimport * as path from 'path';\nimport * as ts from 'typescript';\nimport { DiffScope, hasDisable, RuleFileExclusions } from '@webpieces/rules-config';\nimport { ModifiedCodeMode } from '@webpieces/rules-sdk';\n\n/** Suffix enforcement keeps its own rollout scope, independently of the enclosing doc rule. */\nexport class WireSuffixScope {\n    private constructor(\n        private readonly root: string,\n        private readonly mode: ModifiedCodeMode,\n        // required-type-suffix's framework-owned path exclusions (#1253): the repo's top-level\n        // excludePaths plus the rule's own — the same RuleFileExclusions the code-rules runtime applies.\n        private readonly exclusions: RuleFileExclusions,\n        // null in RUN_EVERY_TIME: every file is in scope.\n        private readonly changed: Set<string> | null,\n        // NEW_AND_MODIFIED_CODE only: the changed lines of every changed TypeScript source file.\n        private readonly lines: Map<string, Set<number>>,\n    ) {}\n\n    /**\n     * Reads the diff ONCE, up front: the base, the changed files, and — in NEW_AND_MODIFIED_CODE — the\n     * changed lines of every changed TypeScript source file (the only files {@link includes} can judge in\n     * that mode), because the git reads are asynchronous and {@link includes} is not.\n     */\n    // webpieces-disable no-function-outside-class -- static async factory of this class\n    static async create(\n        root: string,\n        mode: ModifiedCodeMode,\n        exclusions: RuleFileExclusions,\n        diff: DiffScope,\n    ): Promise<WireSuffixScope> {\n        const lines = new Map<string, Set<number>>();\n        if (mode === 'RUN_EVERY_TIME') return new WireSuffixScope(root, mode, exclusions, null, lines);\n        const range = await diff.resolveBase(root);\n        if (range.base === undefined) return new WireSuffixScope(root, mode, exclusions, new Set<string>(), lines);\n        const changed = new Set(await diff.getChangedFiles(root, range.base, range.head, { tsOnly: false }));\n        if (mode === 'NEW_AND_MODIFIED_CODE') {\n            for (const relFile of changed) {\n                if (!WireSuffixScope.isJudgedSource(relFile)) continue;\n                lines.set(relFile, diff.getChangedLineNumbers(\n                    await diff.getFileDiff(root, relFile, range.base, range.head)));\n            }\n        }\n        return new WireSuffixScope(root, mode, exclusions, changed, lines);\n    }\n\n    // A file includes() can judge at all: TypeScript source, not a declaration file or a test.\n    // webpieces-disable no-function-outside-class -- static predicate shared by create() and includes()\n    private static isJudgedSource(relFile: string): boolean {\n        if (!/\\.tsx?$/.test(relFile)) return false;\n        return !(relFile.endsWith('.d.ts') || /\\.(spec|test)\\.ts$/.test(relFile) || relFile.includes('__tests__/'));\n    }\n\n    includes(\n        name: string,\n        relFile: string,\n        projectRoot: string,\n        location: string,\n        projectRoots: readonly string[],\n    ): boolean {\n        if (this.mode === 'OFF' || this.exclusions.excludes(relFile)) return false;\n        if (\n            relFile.endsWith('.d.ts') ||\n            /\\.(spec|test)\\.ts$/.test(relFile) ||\n            relFile.includes('__tests__/')\n        )\n            return false;\n        if (!this.fileInScope(relFile, projectRoot, projectRoots)) return false;\n        const file = path.resolve(this.root, relFile);\n        const text = fs.readFileSync(file, 'utf8');\n        const source = ts.createSourceFile(file, text, ts.ScriptTarget.Latest, true);\n        const declaredLine = Number(/:(\\d+):\\d+$/.exec(location)?.[1]);\n        const declaration = this.declarationAt(source, name, declaredLine);\n        if (declaration === undefined) return false;\n        const named = declaration as\n            | ts.ClassDeclaration\n            | ts.InterfaceDeclaration\n            | ts.EnumDeclaration\n            | ts.TypeAliasDeclaration;\n        const line = source.getLineAndCharacterOfPosition(named.name!.getStart(source)).line + 1;\n        const textLines = text.split('\\n');\n        if (\n            hasDisable(textLines[line - 1] ?? '', 'required-type-suffix') ||\n            hasDisable(textLines[line - 2] ?? '', 'required-type-suffix')\n        )\n            return false;\n        return this.mode !== 'NEW_AND_MODIFIED_CODE' || this.changedLines(relFile).has(line);\n    }\n\n    private declarationAt(\n        source: ts.SourceFile,\n        name: string,\n        line: number,\n    ): ts.DeclarationStatement | undefined {\n        let found: ts.DeclarationStatement | undefined;\n        const visit = (node: ts.Node): void => {\n            if (\n                (ts.isClassDeclaration(node) ||\n                    ts.isInterfaceDeclaration(node) ||\n                    ts.isEnumDeclaration(node) ||\n                    ts.isTypeAliasDeclaration(node)) &&\n                node.name?.text === name &&\n                source.getLineAndCharacterOfPosition(node.getStart(source)).line + 1 === line\n            )\n                found = node;\n            if (found === undefined) ts.forEachChild(node, visit);\n        };\n        visit(source);\n        return found;\n    }\n\n    private fileInScope(\n        relFile: string,\n        projectRoot: string,\n        projectRoots: readonly string[],\n    ): boolean {\n        if (this.changed === null) return true;\n        if (this.mode !== 'MODIFIED_PROJECTS') return this.changed.has(relFile);\n        return [...this.changed].some((file: string) => {\n            const owner = projectRoots\n                .filter((root: string) => file === root || file.startsWith(`${root}/`))\n                .sort((a: string, b: string) => b.length - a.length)[0];\n            return owner === projectRoot;\n        });\n    }\n\n    private changedLines(relFile: string): ReadonlySet<number> {\n        return this.lines.get(relFile) ?? new Set<number>();\n    }\n}\n"]}

package/src/lib/graph-impact.d.ts

@@ -230,7 +230,7 @@ export declare class ImpactScopeResolver {
     private readonly git;
     private readonly diffScope;
     constructor(git?: ImpactGit, diffScope?: DiffScope);
-    resolve(root: string): ImpactPlan | ImpactUnavailable;
+    resolve(root: string): Promise<ImpactPlan | ImpactUnavailable>;
     private lastCommit;
     /** detectBase may hand back a full or an abbreviated sha; compare on the shorter of the two. */
     private sameCommit;

package/src/lib/graph-impact.js

@@ -284,7 +284,7 @@ class ImpactScopeResolver {
         this.git = git;
         this.diffScope = diffScope;
     }
-    resolve(root) {
+    async resolve(root) {
         const head = this.git.sha(root, 'HEAD');
         if (head === null)
             return new ImpactUnavailable('git cannot resolve HEAD (not a git checkout, or git is unavailable)');
@@ -294,7 +294,7 @@ class ImpactScopeResolver {
         // On main the decision is the branch NAME, never merge-base: unpushed commits still mean "last commit".
         if (branch === null || branch === MAIN_BRANCH)
             return new ImpactPlan([commit], ImpactKind.COMMIT);
-        const fork = this.diffScope.detectBase(root);
+        const fork = await this.diffScope.detectBase(root);
         if (fork === null) {
             const reason = 'no fork point: neither origin/main nor main resolves';
             return new ImpactPlan([new ImpactComparison(ImpactKind.BRANCH, null, 'Changed on this branch', dirty, reason)], ImpactKind.BRANCH);
@@ -451,7 +451,7 @@ class NxImpactScanner {
         const options = new rules_config_1.ChangedFilesOptions();
         options.tsOnly = false;
         options.includeDeletions = true;
-        const files = this.diffScope.getChangedFiles(workspaceRoot, base, undefined, options);
+        const files = await this.diffScope.getChangedFiles(workspaceRoot, base, undefined, options);
         const short = base.slice(0, 7);
         const drawn = affectedSet.filter((project) => graph[project] !== undefined);
         if (drawn.length === 0)
@@ -589,7 +589,7 @@ class ImpactRefresh {
         const started = Date.now();
         // eslint-disable-next-line @webpieces/no-unmanaged-exceptions -- impact is optional; any failure becomes a reason, never a failed generation
         try {
-            const plan = this.resolver.resolve(workspaceRoot);
+            const plan = await this.resolver.resolve(workspaceRoot);
             if (plan instanceof ImpactUnavailable)
                 return this.none(architectureDir, plan.reason, started);
             const comparisons = plan.comparisons.filter((comparison) => kinds.includes(comparison.kind));