archcheck 0.2.0

package/dist/probes/graph.js

@@ -0,0 +1,181 @@
+/**
+ * The graph probe. Runs layer rules against the module graph and returns raw findings.
+ *
+ * What rule this enforces: findings carry EVIDENCE, not prose. The probe never writes a sentence —
+ * the contract type's `explain()` does. That keeps one vocabulary for "what was observed" and one
+ * for "what a person should read", and it is what lets two probes observe the same violation and
+ * deduplicate cleanly (plan 06, plan 07).
+ *
+ * Diff scoping is edge-level: given a changed set, evaluate edges whose `from` is in it. An edge
+ * INTO a changed file is not a new violation — the importer did not change.
+ */
+import { asEncapsulationParams, resolveEncapsulation } from '../contracts/encapsulation.js';
+import { buildLayerTable, resolveEdge } from '../contracts/layers.js';
+import { fileMatches } from '../graph/match.js';
+import { repoRelative } from '../util/paths.js';
+export const GRAPH_REPORT_PATH = '.archcheck/graph.json';
+export function toGraphReport(graph, root) {
+    const facts = {};
+    for (const file of graph.files) {
+        const fileFacts = graph.factsFor(file);
+        facts[repoRelative(root, file)] = {
+            implementsPorts: fileFacts?.implementsPorts ?? [],
+            exports: fileFacts?.exports ?? [],
+        };
+    }
+    return {
+        schemaVersion: 1,
+        root,
+        files: graph.files.map((file) => repoRelative(root, file)).sort(),
+        edges: graph.edges
+            .map(({ node: _node, ...edge }) => ({
+            ...edge,
+            from: repoRelative(root, edge.from),
+            to: edge.external ? edge.to : repoRelative(root, edge.to),
+        }))
+            .sort((a, b) => `${a.from}${a.line}${a.specifier}`.localeCompare(`${b.from}${b.line}${b.specifier}`)),
+        facts,
+    };
+}
+/** A ModuleGraph restored from a report. Absolute paths again, so evaluation is identical. */
+export function fromGraphReport(report, root) {
+    const absolute = (path) => `${root}/${path}`;
+    const facts = new Map();
+    for (const [relative, entry] of Object.entries(report.facts)) {
+        facts.set(absolute(relative), {
+            file: absolute(relative),
+            edges: [],
+            implementsPorts: entry.implementsPorts,
+            exports: entry.exports,
+        });
+    }
+    const edges = report.edges.map((edge) => ({
+        ...edge,
+        from: absolute(edge.from),
+        to: edge.external ? edge.to : absolute(edge.to),
+    }));
+    for (const edge of edges) {
+        const entry = facts.get(edge.from);
+        if (entry)
+            entry.edges.push(edge);
+    }
+    return {
+        files: report.files.map(absolute),
+        edges,
+        factsFor: (file) => facts.get(file),
+        // A graph restored from a report has no parsed sources; nothing that needs an AST may use it.
+        sourceFileFor: () => undefined,
+        walkedCount: 0,
+    };
+}
+function layerOf(layers, file, root, graph) {
+    // First match wins, so manifest order is how a reader resolves an overlap — a narrow layer
+    // declared above a broad one reads the way it behaves.
+    return layers.find((layer) => fileMatches(layer.match, file, root, graph.factsFor(file)));
+}
+function evaluate(graph, ctx) {
+    const table = buildLayerTable(ctx.rules);
+    const barrelRules = ctx.rules.filter((rule) => rule.kind === 'encapsulation' && rule.severity !== 'off');
+    if (table.layers.length === 0 && barrelRules.length === 0)
+        return [];
+    const changed = ctx.changed === undefined ? undefined : new Set(ctx.changed);
+    const inScope = (file) => changed === undefined || changed.has(repoRelative(ctx.root, file));
+    const findings = [];
+    const layerCache = new Map();
+    const layerFor = (file) => {
+        if (!layerCache.has(file))
+            layerCache.set(file, layerOf(table.layers, file, ctx.root, graph));
+        return layerCache.get(file);
+    };
+    for (const edge of graph.edges) {
+        if (!inScope(edge.from))
+            continue;
+        // The barrel ban is edge-level too, and independent of layers: a deep import is a deep
+        // import whether or not the two files happen to sit in the same layer.
+        if (!edge.external) {
+            const fromRelative = repoRelative(ctx.root, edge.from);
+            const toRelative = repoRelative(ctx.root, edge.to);
+            for (const rule of barrelRules) {
+                const verdict = resolveEncapsulation(asEncapsulationParams(rule), fromRelative, toRelative);
+                if (verdict.allowed)
+                    continue;
+                findings.push({
+                    ruleId: rule.id,
+                    file: fromRelative,
+                    line: edge.line,
+                    col: edge.col,
+                    evidence: {
+                        from: fromRelative,
+                        to: toRelative,
+                        module: verdict.module,
+                        deepPath: verdict.deepPath,
+                        specifier: edge.specifier,
+                    },
+                    identity: '',
+                });
+            }
+        }
+        const from = layerFor(edge.from);
+        const to = edge.external ? undefined : layerFor(edge.to);
+        const verdict = resolveEdge(table, from, to?.name, edge);
+        if (verdict.allowed)
+            continue;
+        findings.push({
+            ruleId: verdict.ruleId,
+            file: repoRelative(ctx.root, edge.from),
+            line: edge.line,
+            col: edge.col,
+            evidence: {
+                from: repoRelative(ctx.root, edge.from),
+                to: repoRelative(ctx.root, edge.to),
+                fromLayer: verdict.fromLayer,
+                toLayer: verdict.toLayer,
+                specifier: edge.specifier,
+            },
+            identity: '',
+        });
+    }
+    // Case 5 of the resolution order: a file nobody declared. Reported once per file, against the
+    // one layers rule that owns the unlayered report.
+    const owner = table.unlayeredOwner;
+    if (owner !== undefined) {
+        for (const file of graph.files) {
+            if (!inScope(file))
+                continue;
+            if (layerFor(file) !== undefined)
+                continue;
+            const relative = repoRelative(ctx.root, file);
+            findings.push({
+                ruleId: owner,
+                file: relative,
+                evidence: { unlayered: true, file: relative },
+                identity: '',
+            });
+        }
+    }
+    return findings;
+}
+export function createGraphProbe() {
+    return {
+        name: 'graph',
+        // `forbidden` is NOT here, although the graph is where it would live. This probe evaluates
+        // `layers` and `encapsulation` and nothing else, and a probe that claims a kind it ignores
+        // turns a declared rule into a silent pass: the run reports no skip, says "nothing to fix",
+        // and counts the rule as checked. `handles` is a promise, so it has to be true.
+        handles: ['layers', 'encapsulation'],
+        async run(ctx) {
+            const graph = ctx.graph();
+            if (!graph.ok)
+                return { skipped: true, reason: graph.error.join('; ') };
+            return evaluate(graph.value, ctx);
+        },
+        ingest(report, ctx) {
+            const parsed = report;
+            if (parsed?.schemaVersion !== 1 || !Array.isArray(parsed.edges)) {
+                throw new Error(`${GRAPH_REPORT_PATH} is not a graph report of schemaVersion 1`);
+            }
+            return evaluate(fromGraphReport(parsed, ctx.root), ctx);
+        },
+    };
+}
+//# sourceMappingURL=graph.js.map

package/dist/probes/graph.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"graph.js","sourceRoot":"","sources":["../../src/probes/graph.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AACH,OAAO,EAAE,qBAAqB,EAAE,oBAAoB,EAAE,MAAM,+BAA+B,CAAC;AAC5F,OAAO,EAAE,eAAe,EAAc,WAAW,EAAE,MAAM,wBAAwB,CAAC;AAClF,OAAO,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAGhD,OAAO,EAAE,YAAY,EAAE,MAAM,kBAAkB,CAAC;AAGhD,MAAM,CAAC,MAAM,iBAAiB,GAAG,uBAAuB,CAAC;AAWzD,MAAM,UAAU,aAAa,CAAC,KAAkB,EAAE,IAAY;IAC5D,MAAM,KAAK,GAAyB,EAAE,CAAC;IACvC,KAAK,MAAM,IAAI,IAAI,KAAK,CAAC,KAAK,EAAE,CAAC;QAC/B,MAAM,SAAS,GAAG,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;QACvC,KAAK,CAAC,YAAY,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,GAAG;YAChC,eAAe,EAAE,SAAS,EAAE,eAAe,IAAI,EAAE;YACjD,OAAO,EAAE,SAAS,EAAE,OAAO,IAAI,EAAE;SAClC,CAAC;IACJ,CAAC;IACD,OAAO;QACL,aAAa,EAAE,CAAC;QAChB,IAAI;QACJ,KAAK,EAAE,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,YAAY,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC,IAAI,EAAE;QACjE,KAAK,EAAE,KAAK,CAAC,KAAK;aACf,GAAG,CAAC,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,IAAI,EAAE,EAAE,EAAE,CAAC,CAAC;YAClC,GAAG,IAAI;YACP,IAAI,EAAE,YAAY,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC;YACnC,EAAE,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,YAAY,CAAC,IAAI,EAAE,IAAI,CAAC,EAAE,CAAC;SAC1D,CAAC,CAAC;aACF,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CACb,GAAG,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,SAAS,EAAE,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,SAAS,EAAE,CAAC,CACrF;QACH,KAAK;KACN,CAAC;AACJ,CAAC;AAED,8FAA8F;AAC9F,MAAM,UAAU,eAAe,CAAC,MAAmB,EAAE,IAAY;IAC/D,MAAM,QAAQ,GAAG,CAAC,IAAY,EAAE,EAAE,CAAC,GAAG,IAAI,IAAI,IAAI,EAAE,CAAC;IACrD,MAAM,KAAK,GAAG,IAAI,GAAG,EAAqB,CAAC;IAC3C,KAAK,MAAM,CAAC,QAAQ,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;QAC7D,KAAK,CAAC,GAAG,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE;YAC5B,IAAI,EAAE,QAAQ,CAAC,QAAQ,CAAC;YACxB,KAAK,EAAE,EAAE;YACT,eAAe,EAAE,KAAK,CAAC,eAAe;YACtC,OAAO,EAAE,KAAK,CAAC,OAAO;SACvB,CAAC,CAAC;IACL,CAAC;IACD,MAAM,KAAK,GAAW,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;QAChD,GAAG,IAAI;QACP,IAAI,EAAE,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC;QACzB,EAAE,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;KAChD,CAAC,CAAC,CAAC;IACJ,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,MAAM,KAAK,GAAG,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACnC,IAAI,KAAK;YAAE,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACpC,CAAC;IACD,OAAO;QACL,KAAK,EAAE,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,QAAQ,CAAC;QACjC,KAAK;QACL,QAAQ,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC;QACnC,8FAA8F;QAC9F,aAAa,EAAE,GAAG,EAAE,CAAC,SAAS;QAC9B,WAAW,EAAE,CAAC;KACf,CAAC;AACJ,CAAC;AAED,SAAS,OAAO,CACd,MAAwB,EACxB,IAAY,EACZ,IAAY,EACZ,KAAkB;IAElB,2FAA2F;IAC3F,uDAAuD;IACvD,OAAO,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,WAAW,CAAC,KAAK,CAAC,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAC5F,CAAC;AAED,SAAS,QAAQ,CAAC,KAAkB,EAAE,GAAW;IAC/C,MAAM,KAAK,GAAG,eAAe,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IACzC,MAAM,WAAW,GAAG,GAAG,CAAC,KAAK,CAAC,MAAM,CAClC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,KAAK,eAAe,IAAI,IAAI,CAAC,QAAQ,KAAK,KAAK,CACnE,CAAC;IACF,IAAI,KAAK,CAAC,MAAM,CAAC,MAAM,KAAK,CAAC,IAAI,WAAW,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,CAAC;IAErE,MAAM,OAAO,GAAG,GAAG,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;IAC7E,MAAM,OAAO,GAAG,CAAC,IAAY,EAAE,EAAE,CAC/B,OAAO,KAAK,SAAS,IAAI,OAAO,CAAC,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC;IAErE,MAAM,QAAQ,GAAiB,EAAE,CAAC;IAClC,MAAM,UAAU,GAAG,IAAI,GAAG,EAA6B,CAAC;IACxD,MAAM,QAAQ,GAAG,CAAC,IAAY,EAAqB,EAAE;QACnD,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC;YAAE,UAAU,CAAC,GAAG,CAAC,IAAI,EAAE,OAAO,CAAC,KAAK,CAAC,MAAM,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC,CAAC;QAC9F,OAAO,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IAC9B,CAAC,CAAC;IAEF,KAAK,MAAM,IAAI,IAAI,KAAK,CAAC,KAAK,EAAE,CAAC;QAC/B,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC;YAAE,SAAS;QAElC,uFAAuF;QACvF,uEAAuE;QACvE,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC;YACnB,MAAM,YAAY,GAAG,YAAY,CAAC,GAAG,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC;YACvD,MAAM,UAAU,GAAG,YAAY,CAAC,GAAG,CAAC,IAAI,EAAE,IAAI,CAAC,EAAE,CAAC,CAAC;YACnD,KAAK,MAAM,IAAI,IAAI,WAAW,EAAE,CAAC;gBAC/B,MAAM,OAAO,GAAG,oBAAoB,CAAC,qBAAqB,CAAC,IAAI,CAAC,EAAE,YAAY,EAAE,UAAU,CAAC,CAAC;gBAC5F,IAAI,OAAO,CAAC,OAAO;oBAAE,SAAS;gBAC9B,QAAQ,CAAC,IAAI,CAAC;oBACZ,MAAM,EAAE,IAAI,CAAC,EAAE;oBACf,IAAI,EAAE,YAAY;oBAClB,IAAI,EAAE,IAAI,CAAC,IAAI;oBACf,GAAG,EAAE,IAAI,CAAC,GAAG;oBACb,QAAQ,EAAE;wBACR,IAAI,EAAE,YAAY;wBAClB,EAAE,EAAE,UAAU;wBACd,MAAM,EAAE,OAAO,CAAC,MAAM;wBACtB,QAAQ,EAAE,OAAO,CAAC,QAAQ;wBAC1B,SAAS,EAAE,IAAI,CAAC,SAAS;qBAC1B;oBACD,QAAQ,EAAE,EAAE;iBACb,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QAED,MAAM,IAAI,GAAG,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACjC,MAAM,EAAE,GAAG,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACzD,MAAM,OAAO,GAAG,WAAW,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;QACzD,IAAI,OAAO,CAAC,OAAO;YAAE,SAAS;QAC9B,QAAQ,CAAC,IAAI,CAAC;YACZ,MAAM,EAAE,OAAO,CAAC,MAAM;YACtB,IAAI,EAAE,YAAY,CAAC,GAAG,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC;YACvC,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,GAAG,EAAE,IAAI,CAAC,GAAG;YACb,QAAQ,EAAE;gBACR,IAAI,EAAE,YAAY,CAAC,GAAG,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC;gBACvC,EAAE,EAAE,YAAY,CAAC,GAAG,CAAC,IAAI,EAAE,IAAI,CAAC,EAAE,CAAC;gBACnC,SAAS,EAAE,OAAO,CAAC,SAAS;gBAC5B,OAAO,EAAE,OAAO,CAAC,OAAO;gBACxB,SAAS,EAAE,IAAI,CAAC,SAAS;aAC1B;YACD,QAAQ,EAAE,EAAE;SACb,CAAC,CAAC;IACL,CAAC;IAED,8FAA8F;IAC9F,kDAAkD;IAClD,MAAM,KAAK,GAAG,KAAK,CAAC,cAAc,CAAC;IACnC,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;QACxB,KAAK,MAAM,IAAI,IAAI,KAAK,CAAC,KAAK,EAAE,CAAC;YAC/B,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC;gBAAE,SAAS;YAC7B,IAAI,QAAQ,CAAC,IAAI,CAAC,KAAK,SAAS;gBAAE,SAAS;YAC3C,MAAM,QAAQ,GAAG,YAAY,CAAC,GAAG,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;YAC9C,QAAQ,CAAC,IAAI,CAAC;gBACZ,MAAM,EAAE,KAAK;gBACb,IAAI,EAAE,QAAQ;gBACd,QAAQ,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,QAAQ,EAAE;gBAC7C,QAAQ,EAAE,EAAE;aACb,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,MAAM,UAAU,gBAAgB;IAC9B,OAAO;QACL,IAAI,EAAE,OAAO;QACb,2FAA2F;QAC3F,2FAA2F;QAC3F,4FAA4F;QAC5F,gFAAgF;QAChF,OAAO,EAAE,CAAC,QAAQ,EAAE,eAAe,CAAC;QAEpC,KAAK,CAAC,GAAG,CAAC,GAAW;YACnB,MAAM,KAAK,GAAG,GAAG,CAAC,KAAK,EAAE,CAAC;YAC1B,IAAI,CAAC,KAAK,CAAC,EAAE;gBAAE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;YACxE,OAAO,QAAQ,CAAC,KAAK,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;QACpC,CAAC;QAED,MAAM,CAAC,MAAe,EAAE,GAAW;YACjC,MAAM,MAAM,GAAG,MAAqB,CAAC;YACrC,IAAI,MAAM,EAAE,aAAa,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;gBAChE,MAAM,IAAI,KAAK,CAAC,GAAG,iBAAiB,2CAA2C,CAAC,CAAC;YACnF,CAAC;YACD,OAAO,QAAQ,CAAC,eAAe,CAAC,MAAM,EAAE,GAAG,CAAC,IAAI,CAAC,EAAE,GAAG,CAAC,CAAC;QAC1D,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/probes/index.d.ts

@@ -0,0 +1,5 @@
+export { createGraphProbe, fromGraphReport, GRAPH_REPORT_PATH, type GraphReport, toGraphReport, } from './graph.js';
+export { createLintProbe, type ExternalLintReport, LINT_REPORT_PATH, } from './lint.js';
+export { createStructureProbe } from './structure.js';
+export { isSkip, type Probe, type RunCtx, type Skip } from './types.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/probes/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/probes/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,gBAAgB,EAChB,eAAe,EACf,iBAAiB,EACjB,KAAK,WAAW,EAChB,aAAa,GACd,MAAM,YAAY,CAAC;AACpB,OAAO,EACL,eAAe,EACf,KAAK,kBAAkB,EACvB,gBAAgB,GACjB,MAAM,WAAW,CAAC;AACnB,OAAO,EAAE,oBAAoB,EAAE,MAAM,gBAAgB,CAAC;AACtD,OAAO,EAAE,MAAM,EAAE,KAAK,KAAK,EAAE,KAAK,MAAM,EAAE,KAAK,IAAI,EAAE,MAAM,YAAY,CAAC"}

package/dist/probes/index.js

@@ -0,0 +1,5 @@
+export { createGraphProbe, fromGraphReport, GRAPH_REPORT_PATH, toGraphReport, } from './graph.js';
+export { createLintProbe, LINT_REPORT_PATH, } from './lint.js';
+export { createStructureProbe } from './structure.js';
+export { isSkip } from './types.js';
+//# sourceMappingURL=index.js.map

package/dist/probes/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/probes/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,gBAAgB,EAChB,eAAe,EACf,iBAAiB,EAEjB,aAAa,GACd,MAAM,YAAY,CAAC;AACpB,OAAO,EACL,eAAe,EAEf,gBAAgB,GACjB,MAAM,WAAW,CAAC;AACnB,OAAO,EAAE,oBAAoB,EAAE,MAAM,gBAAgB,CAAC;AACtD,OAAO,EAAE,MAAM,EAAsC,MAAM,YAAY,CAAC"}

package/dist/probes/lint.d.ts

@@ -0,0 +1,17 @@
+import type { Probe } from './types.js';
+export declare const LINT_REPORT_PATH = ".archcheck/lint.json";
+/** The shape an external linter's report is adapted into before it reaches us. */
+export type ExternalLintReport = {
+    schemaVersion: 1;
+    findings: {
+        ruleId: string;
+        /** Repo-relative POSIX. */
+        file: string;
+        line?: number;
+        col?: number;
+        /** Whatever the linter saw. Passed through into evidence. */
+        evidence?: Record<string, unknown>;
+    }[];
+};
+export declare function createLintProbe(): Probe;
+//# sourceMappingURL=lint.d.ts.map

package/dist/probes/lint.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"lint.d.ts","sourceRoot":"","sources":["../../src/probes/lint.ts"],"names":[],"mappings":"AAqBA,OAAO,KAAK,EAAE,KAAK,EAAgB,MAAM,YAAY,CAAC;AAEtD,eAAO,MAAM,gBAAgB,yBAAyB,CAAC;AAEvD,kFAAkF;AAClF,MAAM,MAAM,kBAAkB,GAAG;IAC/B,aAAa,EAAE,CAAC,CAAC;IACjB,QAAQ,EAAE;QACR,MAAM,EAAE,MAAM,CAAC;QACf,2BAA2B;QAC3B,IAAI,EAAE,MAAM,CAAC;QACb,IAAI,CAAC,EAAE,MAAM,CAAC;QACd,GAAG,CAAC,EAAE,MAAM,CAAC;QACb,6DAA6D;QAC7D,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;KACpC,EAAE,CAAC;CACL,CAAC;AAoFF,wBAAgB,eAAe,IAAI,KAAK,CA8BvC"}

package/dist/probes/lint.js

@@ -0,0 +1,121 @@
+/**
+ * The lint probe. Evaluates `naming` and `banned-syntax` over our own program.
+ *
+ * Why evaluate in process at all, given we also emit lint config (plan 13)? Two reasons. The editor
+ * path uses the emitted config, but CI must not need the consumer's linter installed to run
+ * archcheck; and our findings carry evidence — the symbol, the module, the snippet — that a linter's
+ * report cannot express, and that the identity hash needs.
+ *
+ * What a caller must know: `run()` needs a real program, because `banned-syntax` reads the AST.
+ * `ingest()` is the other half — an external linter's report, mapped back by rule id, for the CI
+ * lane that already ran one.
+ */
+import { asBannedSyntaxParams, bannedSyntaxApplies, findBannedOccurrences, } from '../contracts/banned-syntax.js';
+import { asNamingParams, nameIsWellFormed, namingApplies } from '../contracts/naming.js';
+import { repoRelative } from '../util/paths.js';
+export const LINT_REPORT_PATH = '.archcheck/lint.json';
+function baseNameOf(relativePath) {
+    return relativePath.slice(relativePath.lastIndexOf('/') + 1);
+}
+function evaluate(ctx, graph) {
+    const namingRules = ctx.rules.filter((rule) => rule.kind === 'naming' && rule.severity !== 'off');
+    const syntaxRules = ctx.rules.filter((rule) => rule.kind === 'banned-syntax' && rule.severity !== 'off');
+    if (namingRules.length === 0 && syntaxRules.length === 0)
+        return [];
+    const changed = ctx.changed === undefined ? undefined : new Set(ctx.changed);
+    const findings = [];
+    const computedByFile = new Map();
+    for (const edge of graph.edges) {
+        if (edge.dynamic !== 'computed')
+            continue;
+        const list = computedByFile.get(edge.from);
+        if (list)
+            list.push(edge);
+        else
+            computedByFile.set(edge.from, [edge]);
+    }
+    for (const file of graph.files) {
+        const relative = repoRelative(ctx.root, file);
+        if (changed !== undefined && !changed.has(relative))
+            continue;
+        for (const rule of namingRules) {
+            const params = asNamingParams(rule);
+            if (!namingApplies(params, relative))
+                continue;
+            const target = params.target ?? 'exports';
+            if (target === 'files' || target === 'both') {
+                const name = baseNameOf(relative);
+                if (!nameIsWellFormed(params, name)) {
+                    findings.push({
+                        ruleId: rule.id,
+                        file: relative,
+                        evidence: { file: relative, name, namedThing: 'file' },
+                        identity: '',
+                    });
+                }
+            }
+            if (target === 'exports' || target === 'both') {
+                for (const name of graph.factsFor(file)?.exports ?? []) {
+                    if (nameIsWellFormed(params, name))
+                        continue;
+                    findings.push({
+                        ruleId: rule.id,
+                        file: relative,
+                        evidence: { file: relative, name, namedThing: 'export' },
+                        identity: '',
+                    });
+                }
+            }
+        }
+        for (const rule of syntaxRules) {
+            const params = asBannedSyntaxParams(rule);
+            if (!bannedSyntaxApplies(params, relative))
+                continue;
+            const occurrences = findBannedOccurrences(params, graph.sourceFileFor(file), computedByFile.get(file) ?? []);
+            for (const occurrence of occurrences) {
+                findings.push({
+                    ruleId: rule.id,
+                    file: relative,
+                    line: occurrence.line,
+                    col: occurrence.col,
+                    // The snippet, not the line number, is what makes two occurrences distinguishable —
+                    // and it is stable when the file moves down the page.
+                    evidence: { file: relative, construct: params.selector, snippet: occurrence.snippet },
+                    identity: '',
+                });
+            }
+        }
+    }
+    return findings;
+}
+export function createLintProbe() {
+    return {
+        name: 'lint',
+        handles: ['naming', 'banned-syntax'],
+        async run(ctx) {
+            const graph = ctx.graph();
+            if (!graph.ok)
+                return { skipped: true, reason: graph.error.join('; ') };
+            return evaluate(ctx, graph.value);
+        },
+        /** Map an external linter's report back by rule id. Anything we do not know is an error. */
+        ingest(report, ctx) {
+            const parsed = report;
+            if (parsed?.schemaVersion !== 1 || !Array.isArray(parsed.findings)) {
+                throw new Error(`${LINT_REPORT_PATH} is not a lint report of schemaVersion 1`);
+            }
+            const known = new Set(ctx.rules.map((rule) => rule.id));
+            return parsed.findings
+                .filter((finding) => known.has(finding.ruleId))
+                .map((finding) => ({
+                ruleId: finding.ruleId,
+                file: finding.file,
+                ...(finding.line === undefined ? {} : { line: finding.line }),
+                ...(finding.col === undefined ? {} : { col: finding.col }),
+                evidence: { file: finding.file, ...(finding.evidence ?? {}) },
+                identity: '',
+            }));
+        },
+    };
+}
+//# sourceMappingURL=lint.js.map

package/dist/probes/lint.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"lint.js","sourceRoot":"","sources":["../../src/probes/lint.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AACH,OAAO,EACL,oBAAoB,EACpB,mBAAmB,EACnB,qBAAqB,GACtB,MAAM,+BAA+B,CAAC;AACvC,OAAO,EAAE,cAAc,EAAE,gBAAgB,EAAE,aAAa,EAAE,MAAM,wBAAwB,CAAC;AAGzF,OAAO,EAAE,YAAY,EAAE,MAAM,kBAAkB,CAAC;AAGhD,MAAM,CAAC,MAAM,gBAAgB,GAAG,sBAAsB,CAAC;AAgBvD,SAAS,UAAU,CAAC,YAAoB;IACtC,OAAO,YAAY,CAAC,KAAK,CAAC,YAAY,CAAC,WAAW,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC;AAC/D,CAAC;AAED,SAAS,QAAQ,CAAC,GAAW,EAAE,KAAkB;IAC/C,MAAM,WAAW,GAAG,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,KAAK,QAAQ,IAAI,IAAI,CAAC,QAAQ,KAAK,KAAK,CAAC,CAAC;IAClG,MAAM,WAAW,GAAG,GAAG,CAAC,KAAK,CAAC,MAAM,CAClC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,KAAK,eAAe,IAAI,IAAI,CAAC,QAAQ,KAAK,KAAK,CACnE,CAAC;IACF,IAAI,WAAW,CAAC,MAAM,KAAK,CAAC,IAAI,WAAW,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,CAAC;IAEpE,MAAM,OAAO,GAAG,GAAG,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;IAC7E,MAAM,QAAQ,GAAiB,EAAE,CAAC;IAElC,MAAM,cAAc,GAAG,IAAI,GAAG,EAAkB,CAAC;IACjD,KAAK,MAAM,IAAI,IAAI,KAAK,CAAC,KAAK,EAAE,CAAC;QAC/B,IAAI,IAAI,CAAC,OAAO,KAAK,UAAU;YAAE,SAAS;QAC1C,MAAM,IAAI,GAAG,cAAc,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC3C,IAAI,IAAI;YAAE,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;;YACrB,cAAc,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC;IAC7C,CAAC;IAED,KAAK,MAAM,IAAI,IAAI,KAAK,CAAC,KAAK,EAAE,CAAC;QAC/B,MAAM,QAAQ,GAAG,YAAY,CAAC,GAAG,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;QAC9C,IAAI,OAAO,KAAK,SAAS,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC;YAAE,SAAS;QAE9D,KAAK,MAAM,IAAI,IAAI,WAAW,EAAE,CAAC;YAC/B,MAAM,MAAM,GAAG,cAAc,CAAC,IAAI,CAAC,CAAC;YACpC,IAAI,CAAC,aAAa,CAAC,MAAM,EAAE,QAAQ,CAAC;gBAAE,SAAS;YAC/C,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,IAAI,SAAS,CAAC;YAE1C,IAAI,MAAM,KAAK,OAAO,IAAI,MAAM,KAAK,MAAM,EAAE,CAAC;gBAC5C,MAAM,IAAI,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC;gBAClC,IAAI,CAAC,gBAAgB,CAAC,MAAM,EAAE,IAAI,CAAC,EAAE,CAAC;oBACpC,QAAQ,CAAC,IAAI,CAAC;wBACZ,MAAM,EAAE,IAAI,CAAC,EAAE;wBACf,IAAI,EAAE,QAAQ;wBACd,QAAQ,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,UAAU,EAAE,MAAM,EAAE;wBACtD,QAAQ,EAAE,EAAE;qBACb,CAAC,CAAC;gBACL,CAAC;YACH,CAAC;YAED,IAAI,MAAM,KAAK,SAAS,IAAI,MAAM,KAAK,MAAM,EAAE,CAAC;gBAC9C,KAAK,MAAM,IAAI,IAAI,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,OAAO,IAAI,EAAE,EAAE,CAAC;oBACvD,IAAI,gBAAgB,CAAC,MAAM,EAAE,IAAI,CAAC;wBAAE,SAAS;oBAC7C,QAAQ,CAAC,IAAI,CAAC;wBACZ,MAAM,EAAE,IAAI,CAAC,EAAE;wBACf,IAAI,EAAE,QAAQ;wBACd,QAAQ,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,UAAU,EAAE,QAAQ,EAAE;wBACxD,QAAQ,EAAE,EAAE;qBACb,CAAC,CAAC;gBACL,CAAC;YACH,CAAC;QACH,CAAC;QAED,KAAK,MAAM,IAAI,IAAI,WAAW,EAAE,CAAC;YAC/B,MAAM,MAAM,GAAG,oBAAoB,CAAC,IAAI,CAAC,CAAC;YAC1C,IAAI,CAAC,mBAAmB,CAAC,MAAM,EAAE,QAAQ,CAAC;gBAAE,SAAS;YACrD,MAAM,WAAW,GAAG,qBAAqB,CACvC,MAAM,EACN,KAAK,CAAC,aAAa,CAAC,IAAI,CAAC,EACzB,cAAc,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE,CAC/B,CAAC;YACF,KAAK,MAAM,UAAU,IAAI,WAAW,EAAE,CAAC;gBACrC,QAAQ,CAAC,IAAI,CAAC;oBACZ,MAAM,EAAE,IAAI,CAAC,EAAE;oBACf,IAAI,EAAE,QAAQ;oBACd,IAAI,EAAE,UAAU,CAAC,IAAI;oBACrB,GAAG,EAAE,UAAU,CAAC,GAAG;oBACnB,oFAAoF;oBACpF,sDAAsD;oBACtD,QAAQ,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,CAAC,QAAQ,EAAE,OAAO,EAAE,UAAU,CAAC,OAAO,EAAE;oBACrF,QAAQ,EAAE,EAAE;iBACb,CAAC,CAAC;YACL,CAAC;QACH,CAAC;IACH,CAAC;IAED,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,MAAM,UAAU,eAAe;IAC7B,OAAO;QACL,IAAI,EAAE,MAAM;QACZ,OAAO,EAAE,CAAC,QAAQ,EAAE,eAAe,CAAC;QAEpC,KAAK,CAAC,GAAG,CAAC,GAAW;YACnB,MAAM,KAAK,GAAG,GAAG,CAAC,KAAK,EAAE,CAAC;YAC1B,IAAI,CAAC,KAAK,CAAC,EAAE;gBAAE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;YACxE,OAAO,QAAQ,CAAC,GAAG,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC;QACpC,CAAC;QAED,4FAA4F;QAC5F,MAAM,CAAC,MAAe,EAAE,GAAW;YACjC,MAAM,MAAM,GAAG,MAA4B,CAAC;YAC5C,IAAI,MAAM,EAAE,aAAa,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC;gBACnE,MAAM,IAAI,KAAK,CAAC,GAAG,gBAAgB,0CAA0C,CAAC,CAAC;YACjF,CAAC;YACD,MAAM,KAAK,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAU,EAAE,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC;YAC9D,OAAO,MAAM,CAAC,QAAQ;iBACnB,MAAM,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;iBAC9C,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;gBACjB,MAAM,EAAE,OAAO,CAAC,MAAM;gBACtB,IAAI,EAAE,OAAO,CAAC,IAAI;gBAClB,GAAG,CAAC,OAAO,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,CAAC;gBAC7D,GAAG,CAAC,OAAO,CAAC,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,CAAC;gBAC1D,QAAQ,EAAE,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,OAAO,CAAC,QAAQ,IAAI,EAAE,CAAC,EAAE;gBAC7D,QAAQ,EAAE,EAAE;aACb,CAAC,CAAC,CAAC;QACR,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/probes/model/anthropic.d.ts

@@ -0,0 +1,47 @@
+/**
+ * The one shipped LlmProvider, on the Anthropic SDK.
+ *
+ * The SDK is an OPTIONAL peer dependency: a consumer with no judgement rules installs nothing, and
+ * one who has them but has not installed it gets a clean skip with the install command in the
+ * reason. That is why the import is dynamic and why this file never appears in a code path that a
+ * key-less run reaches.
+ *
+ * Prompt layout, and the reason for the order (LLD §9.3):
+ *
+ *   [ system: judge instructions      ]  stable
+ *   [ all judgement rules + examples  ]  stable  ← cache breakpoint
+ *   [ the one file under review       ]  volatile
+ *
+ * Every judgement rule's statement and examples are identical across every file, so they cache
+ * once and are re-read at a fraction of the price. Batching by file makes it 40 calls for 40
+ * changed files rather than 600.
+ */
+import { type Result } from '../../result.js';
+import { type JudgeResponse, type LlmProvider } from './provider.js';
+/** As much of the SDK's reply as this file reads. */
+type JudgeMessage = {
+    content: {
+        type: string;
+        text?: string;
+    }[];
+    usage?: Record<string, number>;
+    stop_reason?: string;
+};
+/**
+ * Did the judge ANSWER at all? A refusal, or a reply this file cannot read, is a NON-ANSWER, and a
+ * non-answer is an error — never `ok({ verdicts: [] })`, which the caller cannot tell from
+ * "answered: no violations". The probe's `!response.ok` branch in index.ts is what makes a
+ * non-answer count as unjudged and keeps it out of the verdict cache, so one transient refusal
+ * cannot become a permanent "clean" for that file. Both halves are pinned by model.test.ts:
+ * 'a non-answer is not a clean bill of health' and 'a non-answer is not cached'.
+ *
+ * A non-answer reports no cost, because there is no verdict to attribute it to. What bounds a
+ * refusing or failing endpoint is the call cap: index.ts charges every ISSUED call to the budget.
+ */
+export declare function readJudgeAnswer(message: JudgeMessage): Result<JudgeResponse>;
+export declare function createAnthropicProvider(options: {
+    apiKey: string;
+    model: string;
+}): LlmProvider;
+export {};
+//# sourceMappingURL=anthropic.d.ts.map

package/dist/probes/model/anthropic.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"anthropic.d.ts","sourceRoot":"","sources":["../../../src/probes/model/anthropic.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AACH,OAAO,EAAW,KAAK,MAAM,EAAE,MAAM,iBAAiB,CAAC;AACvD,OAAO,EAGL,KAAK,aAAa,EAClB,KAAK,WAAW,EAGjB,MAAM,eAAe,CAAC;AAEvB,qDAAqD;AACrD,KAAK,YAAY,GAAG;IAClB,OAAO,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,IAAI,CAAC,EAAE,MAAM,CAAA;KAAE,EAAE,CAAC;IAC3C,KAAK,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC/B,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB,CAAC;AAQF;;;;;;;;;;GAUG;AACH,wBAAgB,eAAe,CAAC,OAAO,EAAE,YAAY,GAAG,MAAM,CAAC,aAAa,CAAC,CA2B5E;AAgBD,wBAAgB,uBAAuB,CAAC,OAAO,EAAE;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,GAAG,WAAW,CA+B/F"}

package/dist/probes/model/anthropic.js

@@ -0,0 +1,100 @@
+/**
+ * The one shipped LlmProvider, on the Anthropic SDK.
+ *
+ * The SDK is an OPTIONAL peer dependency: a consumer with no judgement rules installs nothing, and
+ * one who has them but has not installed it gets a clean skip with the install command in the
+ * reason. That is why the import is dynamic and why this file never appears in a code path that a
+ * key-less run reaches.
+ *
+ * Prompt layout, and the reason for the order (LLD §9.3):
+ *
+ *   [ system: judge instructions      ]  stable
+ *   [ all judgement rules + examples  ]  stable  ← cache breakpoint
+ *   [ the one file under review       ]  volatile
+ *
+ * Every judgement rule's statement and examples are identical across every file, so they cache
+ * once and are re-read at a fraction of the price. Batching by file makes it 40 calls for 40
+ * changed files rather than 600.
+ */
+import { err, ok } from '../../result.js';
+import { estimateCostUsd, parseVerdicts, VERDICT_SCHEMA, } from './provider.js';
+/**
+ * Did the judge ANSWER at all? A refusal, or a reply this file cannot read, is a NON-ANSWER, and a
+ * non-answer is an error — never `ok({ verdicts: [] })`, which the caller cannot tell from
+ * "answered: no violations". The probe's `!response.ok` branch in index.ts is what makes a
+ * non-answer count as unjudged and keeps it out of the verdict cache, so one transient refusal
+ * cannot become a permanent "clean" for that file. Both halves are pinned by model.test.ts:
+ * 'a non-answer is not a clean bill of health' and 'a non-answer is not cached'.
+ *
+ * A non-answer reports no cost, because there is no verdict to attribute it to. What bounds a
+ * refusing or failing endpoint is the call cap: index.ts charges every ISSUED call to the budget.
+ */
+export function readJudgeAnswer(message) {
+    if (message.stop_reason === 'refusal') {
+        return err(['the judge refused to answer — the file was not judged']);
+    }
+    const text = message.content.find((block) => block.type === 'text')?.text ?? '';
+    let parsed;
+    try {
+        parsed = JSON.parse(text);
+    }
+    catch {
+        return err(["the judge's answer was not JSON — the file was not judged"]);
+    }
+    const answered = parsed?.verdicts;
+    if (!Array.isArray(answered)) {
+        return err(["the judge's answer did not match the verdict schema — the file was not judged"]);
+    }
+    // Schema-invalid output is DISCARDED, never salvaged by guessing: a judge that half-parses is a
+    // judge that invents findings. But an answer where nothing at all survived is a non-answer, not
+    // a clean file.
+    const verdicts = parseVerdicts(parsed);
+    if (answered.length > 0 && verdicts.length === 0) {
+        return err(["no verdict in the judge's answer was usable — the file was not judged"]);
+    }
+    return ok({ verdicts, costUsd: estimateCostUsd(message.usage ?? {}) });
+}
+async function loadClient(apiKey) {
+    try {
+        const module = (await import('@anthropic-ai/sdk'));
+        return ok(new module.default({ apiKey }));
+    }
+    catch {
+        return err([
+            '@anthropic-ai/sdk is not installed — it is an optional peer dependency',
+            '  → install it to turn the judgement tier on: npm install -D @anthropic-ai/sdk',
+        ]);
+    }
+}
+export function createAnthropicProvider(options) {
+    return {
+        name: 'anthropic',
+        async judge(request) {
+            const client = await loadClient(options.apiKey);
+            if (!client.ok)
+                return client;
+            try {
+                const response = await client.value.messages.create({
+                    model: request.model,
+                    max_tokens: 4096,
+                    thinking: { type: 'adaptive' },
+                    output_config: {
+                        effort: 'high',
+                        format: { type: 'json_schema', schema: VERDICT_SCHEMA },
+                    },
+                    system: [
+                        { type: 'text', text: request.instructions },
+                        // The breakpoint: everything above here is identical for every file in the run.
+                        { type: 'text', text: request.rulesBlock, cache_control: { type: 'ephemeral' } },
+                    ],
+                    messages: [{ role: 'user', content: request.fileBlock }],
+                });
+                return readJudgeAnswer(response);
+            }
+            catch (error) {
+                return err([`the judge could not be reached: ${error.message}`]);
+            }
+        },
+    };
+}
+//# sourceMappingURL=anthropic.js.map

package/dist/probes/model/anthropic.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"anthropic.js","sourceRoot":"","sources":["../../../src/probes/model/anthropic.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AACH,OAAO,EAAE,GAAG,EAAE,EAAE,EAAe,MAAM,iBAAiB,CAAC;AACvD,OAAO,EACL,eAAe,EAIf,aAAa,EACb,cAAc,GACf,MAAM,eAAe,CAAC;AAevB;;;;;;;;;;GAUG;AACH,MAAM,UAAU,eAAe,CAAC,OAAqB;IACnD,IAAI,OAAO,CAAC,WAAW,KAAK,SAAS,EAAE,CAAC;QACtC,OAAO,GAAG,CAAC,CAAC,uDAAuD,CAAC,CAAC,CAAC;IACxE,CAAC;IAED,MAAM,IAAI,GAAG,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,KAAK,MAAM,CAAC,EAAE,IAAI,IAAI,EAAE,CAAC;IAChF,IAAI,MAAe,CAAC;IACpB,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAC5B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,GAAG,CAAC,CAAC,2DAA2D,CAAC,CAAC,CAAC;IAC5E,CAAC;IAED,MAAM,QAAQ,GAAI,MAAiC,EAAE,QAAQ,CAAC;IAC9D,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC7B,OAAO,GAAG,CAAC,CAAC,+EAA+E,CAAC,CAAC,CAAC;IAChG,CAAC;IAED,gGAAgG;IAChG,gGAAgG;IAChG,gBAAgB;IAChB,MAAM,QAAQ,GAAG,aAAa,CAAC,MAAM,CAAC,CAAC;IACvC,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACjD,OAAO,GAAG,CAAC,CAAC,uEAAuE,CAAC,CAAC,CAAC;IACxF,CAAC;IAED,OAAO,EAAE,CAAC,EAAE,QAAQ,EAAE,OAAO,EAAE,eAAe,CAAC,OAAO,CAAC,KAAK,IAAI,EAAE,CAAC,EAAE,CAAC,CAAC;AACzE,CAAC;AAED,KAAK,UAAU,UAAU,CAAC,MAAc;IACtC,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,CAAC,MAAM,MAAM,CAAC,mBAAmB,CAAC,CAEhD,CAAC;QACF,OAAO,EAAE,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC;IAC5C,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,GAAG,CAAC;YACT,wEAAwE;YACxE,gFAAgF;SACjF,CAAC,CAAC;IACL,CAAC;AACH,CAAC;AAED,MAAM,UAAU,uBAAuB,CAAC,OAA0C;IAChF,OAAO;QACL,IAAI,EAAE,WAAW;QAEjB,KAAK,CAAC,KAAK,CAAC,OAAqB;YAC/B,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;YAChD,IAAI,CAAC,MAAM,CAAC,EAAE;gBAAE,OAAO,MAAM,CAAC;YAE9B,IAAI,CAAC;gBACH,MAAM,QAAQ,GAAG,MAAM,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC;oBAClD,KAAK,EAAE,OAAO,CAAC,KAAK;oBACpB,UAAU,EAAE,IAAI;oBAChB,QAAQ,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE;oBAC9B,aAAa,EAAE;wBACb,MAAM,EAAE,MAAM;wBACd,MAAM,EAAE,EAAE,IAAI,EAAE,aAAa,EAAE,MAAM,EAAE,cAAc,EAAE;qBACxD;oBACD,MAAM,EAAE;wBACN,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,CAAC,YAAY,EAAE;wBAC5C,gFAAgF;wBAChF,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,CAAC,UAAU,EAAE,aAAa,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE,EAAE;qBACjF;oBACD,QAAQ,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,CAAC,SAAS,EAAE,CAAC;iBACzD,CAAC,CAAC;gBAEH,OAAO,eAAe,CAAC,QAAQ,CAAC,CAAC;YACnC,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,OAAO,GAAG,CAAC,CAAC,mCAAoC,KAAe,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;YAC9E,CAAC;QACH,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/probes/model/budget.d.ts

@@ -0,0 +1,22 @@
+/**
+ * The per-run spend ceiling, checked BEFORE each request.
+ *
+ * What rule this enforces: the probe refuses rather than overspending, and it reports how many
+ * rules went unjudged. A budget checked after the fact is not a budget (LLD §1.7).
+ */
+export type Budget = {
+    maxUsd: number;
+    maxCalls: number;
+};
+export declare const DEFAULT_BUDGET: Budget;
+export type BudgetState = {
+    /** May another call be made? */
+    canSpend(): boolean;
+    /** Why not, for the skip reason. */
+    exhaustedReason(): string | undefined;
+    record(costUsd: number): void;
+    readonly spentUsd: number;
+    readonly calls: number;
+};
+export declare function createBudget(budget?: Budget): BudgetState;
+//# sourceMappingURL=budget.d.ts.map

package/dist/probes/model/budget.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"budget.d.ts","sourceRoot":"","sources":["../../../src/probes/model/budget.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AACH,MAAM,MAAM,MAAM,GAAG;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAA;CAAE,CAAC;AAE1D,eAAO,MAAM,cAAc,EAAE,MAAsC,CAAC;AAEpE,MAAM,MAAM,WAAW,GAAG;IACxB,gCAAgC;IAChC,QAAQ,IAAI,OAAO,CAAC;IACpB,oCAAoC;IACpC,eAAe,IAAI,MAAM,GAAG,SAAS,CAAC;IACtC,MAAM,CAAC,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;CACxB,CAAC;AAEF,wBAAgB,YAAY,CAAC,MAAM,GAAE,MAAuB,GAAG,WAAW,CAuBzE"}

package/dist/probes/model/budget.js

@@ -0,0 +1,27 @@
+export const DEFAULT_BUDGET = { maxUsd: 0.5, maxCalls: 60 };
+export function createBudget(budget = DEFAULT_BUDGET) {
+    let spentUsd = 0;
+    let calls = 0;
+    return {
+        canSpend: () => calls < budget.maxCalls && spentUsd < budget.maxUsd,
+        exhaustedReason: () => {
+            if (calls >= budget.maxCalls)
+                return `call budget spent (${calls}/${budget.maxCalls} calls)`;
+            if (spentUsd >= budget.maxUsd) {
+                return `spend budget spent ($${spentUsd.toFixed(4)}/$${budget.maxUsd.toFixed(2)})`;
+            }
+            return undefined;
+        },
+        record(costUsd) {
+            spentUsd += costUsd;
+            calls += 1;
+        },
+        get spentUsd() {
+            return spentUsd;
+        },
+        get calls() {
+            return calls;
+        },
+    };
+}
+//# sourceMappingURL=budget.js.map

package/dist/probes/model/budget.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"budget.js","sourceRoot":"","sources":["../../../src/probes/model/budget.ts"],"names":[],"mappings":"AAQA,MAAM,CAAC,MAAM,cAAc,GAAW,EAAE,MAAM,EAAE,GAAG,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC;AAYpE,MAAM,UAAU,YAAY,CAAC,SAAiB,cAAc;IAC1D,IAAI,QAAQ,GAAG,CAAC,CAAC;IACjB,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,OAAO;QACL,QAAQ,EAAE,GAAG,EAAE,CAAC,KAAK,GAAG,MAAM,CAAC,QAAQ,IAAI,QAAQ,GAAG,MAAM,CAAC,MAAM;QACnE,eAAe,EAAE,GAAG,EAAE;YACpB,IAAI,KAAK,IAAI,MAAM,CAAC,QAAQ;gBAAE,OAAO,sBAAsB,KAAK,IAAI,MAAM,CAAC,QAAQ,SAAS,CAAC;YAC7F,IAAI,QAAQ,IAAI,MAAM,CAAC,MAAM,EAAE,CAAC;gBAC9B,OAAO,wBAAwB,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC;YACrF,CAAC;YACD,OAAO,SAAS,CAAC;QACnB,CAAC;QACD,MAAM,CAAC,OAAe;YACpB,QAAQ,IAAI,OAAO,CAAC;YACpB,KAAK,IAAI,CAAC,CAAC;QACb,CAAC;QACD,IAAI,QAAQ;YACV,OAAO,QAAQ,CAAC;QAClB,CAAC;QACD,IAAI,KAAK;YACP,OAAO,KAAK,CAAC;QACf,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/probes/model/cache.d.ts

@@ -0,0 +1,13 @@
+import type { JudgeVerdict } from './provider.js';
+export declare const MODEL_CACHE_PATH = ".archcheck/cache/judgement.json";
+export type VerdictCache = {
+    get(key: string): JudgeVerdict[] | undefined;
+    set(key: string, verdicts: JudgeVerdict[]): void;
+    flush(): void;
+    readonly hits: number;
+};
+export declare function cacheKey(ruleSetHash: string, path: string, fileContent: string): string;
+export declare function hashRuleSet(parts: readonly string[]): string;
+export declare function createNullVerdictCache(): VerdictCache;
+export declare function createVerdictCache(root: string): VerdictCache;
+//# sourceMappingURL=cache.d.ts.map

package/dist/probes/model/cache.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cache.d.ts","sourceRoot":"","sources":["../../../src/probes/model/cache.ts"],"names":[],"mappings":"AAcA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,eAAe,CAAC;AAElD,eAAO,MAAM,gBAAgB,oCAAoC,CAAC;AAIlE,MAAM,MAAM,YAAY,GAAG;IACzB,GAAG,CAAC,GAAG,EAAE,MAAM,GAAG,YAAY,EAAE,GAAG,SAAS,CAAC;IAC7C,GAAG,CAAC,GAAG,EAAE,MAAM,EAAE,QAAQ,EAAE,YAAY,EAAE,GAAG,IAAI,CAAC;IACjD,KAAK,IAAI,IAAI,CAAC;IACd,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;CACvB,CAAC;AAEF,wBAAgB,QAAQ,CAAC,WAAW,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,GAAG,MAAM,CAKvF;AAED,wBAAgB,WAAW,CAAC,KAAK,EAAE,SAAS,MAAM,EAAE,GAAG,MAAM,CAK5D;AAED,wBAAgB,sBAAsB,IAAI,YAAY,CAErD;AAED,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,MAAM,GAAG,YAAY,CAuC7D"}