archcheck 0.2.0

package/dist/contracts/banned-syntax.js

@@ -0,0 +1,201 @@
+/**
+ * The `banned-syntax` kind. Constructs that are wrong wherever they appear in a given scope.
+ *
+ * What rule this enforces, and why the selector is a CLOSED SET rather than a selector language:
+ * the six rule families this kind exists for are
+ *   no clock in a pure rule, no computed dynamic import, no console outside an entry point,
+ *   no inline suppression comment, no branching on a literal name, no empty catch.
+ * Each is one named construct. A CSS-ish selector string would have to be parsed, would be
+ * half-implemented for years, and would let a manifest declare a selector that silently matches
+ * nothing — which looks exactly like compliance. A closed enum cannot do that: an unknown
+ * construct fails validation and exits 2.
+ *
+ * The inline-suppression ban is self-referential and deliberate. Exceptions live in the manifest
+ * with an owner and an expiry (plan 15); making the inline escape hatch itself a violation is what
+ * stops the manifest being bypassed.
+ *
+ * What a caller must know: these are evaluated over OUR OWN AST. We already hold the program from
+ * the graph reader, so a second parse would be waste. `remedy.autofix` stays false.
+ */
+import ts from 'typescript';
+import { err, ok } from '../result.js';
+import { matchesAny } from '../util/glob.js';
+/** The closed set. Adding one is a deliberate change with a fixture, not a config value. */
+export const BANNED_CONSTRUCTS = [
+    'member-access',
+    'new-expression',
+    'computed-dynamic-import',
+    'suppression-comment',
+    'string-literal-comparison',
+    'empty-catch',
+];
+/** Constructs that name what they ban, and are meaningless without it. */
+const NEEDS_TARGET = new Set(['member-access', 'new-expression']);
+export function asBannedSyntaxParams(rule) {
+    return rule.params;
+}
+export function bannedSyntaxApplies(params, relativePath) {
+    const globs = typeof params.appliesTo === 'string' ? [params.appliesTo] : params.appliesTo;
+    return matchesAny(globs, relativePath);
+}
+function positionOf(source, node) {
+    const { line, character } = source.getLineAndCharacterOfPosition(node.getStart(source));
+    return { line: line + 1, col: character + 1 };
+}
+/** `console` matches `console.log`; `Date.now` matches only `Date.now`. */
+function dottedMatches(target, text) {
+    return text === target || text.startsWith(`${target}.`);
+}
+const SUPPRESSION = /(eslint-disable|biome-ignore|@ts-ignore|@ts-expect-error|archcheck-ignore)/;
+function scanAst(params, source, found) {
+    const record = (node, snippet) => {
+        found.push({ ...positionOf(source, node), snippet });
+    };
+    const visit = (node) => {
+        switch (params.selector) {
+            case 'member-access':
+                if (ts.isPropertyAccessExpression(node) &&
+                    dottedMatches(params.target ?? '', node.getText(source))) {
+                    record(node, node.getText(source));
+                }
+                else if (ts.isIdentifier(node) &&
+                    node.text === params.target &&
+                    !ts.isPropertyAccessExpression(node.parent)) {
+                    record(node, node.text);
+                }
+                break;
+            case 'new-expression':
+                if (ts.isNewExpression(node) && node.expression.getText(source) === params.target) {
+                    record(node, `new ${params.target}()`);
+                }
+                break;
+            case 'string-literal-comparison':
+                if (ts.isBinaryExpression(node) &&
+                    (node.operatorToken.kind === ts.SyntaxKind.EqualsEqualsEqualsToken ||
+                        node.operatorToken.kind === ts.SyntaxKind.ExclamationEqualsEqualsToken) &&
+                    (ts.isStringLiteralLike(node.left) || ts.isStringLiteralLike(node.right))) {
+                    record(node, node.getText(source).slice(0, 60));
+                }
+                break;
+            case 'empty-catch':
+                // A block holding only a comment is an EXPLAINED silence, which the rule allows. Counting
+                // statements alone flags it, and found two false positives in archcheck's own source the
+                // first time it checked itself.
+                if (ts.isCatchClause(node) &&
+                    node.block.statements.length === 0 &&
+                    node.block.getText(source).replace(/[{}\s]/g, '').length === 0) {
+                    record(node, 'catch {}');
+                }
+                break;
+            case 'computed-dynamic-import':
+            case 'suppression-comment':
+                // Handled outside the AST walk: one from the graph, one from the comment scanner.
+                break;
+        }
+        ts.forEachChild(node, visit);
+    };
+    ts.forEachChild(source, visit);
+}
+/**
+ * Comment trivia only, via the compiler's own scanner.
+ *
+ * Reading raw lines instead looks equivalent and is not: it matches the words wherever they appear,
+ * including inside the very pattern above. That false positive is how this function was found — by
+ * archcheck flagging this file on its first self-host run.
+ */
+function scanComments(source, found) {
+    const text = source.getFullText();
+    const scanner = ts.createScanner(ts.ScriptTarget.Latest, false, ts.LanguageVariant.Standard, text);
+    for (let token = scanner.scan(); token !== ts.SyntaxKind.EndOfFileToken; token = scanner.scan()) {
+        if (token !== ts.SyntaxKind.SingleLineCommentTrivia &&
+            token !== ts.SyntaxKind.MultiLineCommentTrivia) {
+            continue;
+        }
+        const comment = scanner.getTokenText();
+        if (!SUPPRESSION.test(comment))
+            continue;
+        const { line, character } = source.getLineAndCharacterOfPosition(scanner.getTokenStart());
+        found.push({ line: line + 1, col: character + 1, snippet: comment.trim().slice(0, 60) });
+    }
+}
+/**
+ * Occurrences of the banned construct in one file.
+ *
+ * `computedImports` comes from the graph reader, which already detects a computed dynamic import —
+ * re-detecting it here would be a second implementation of the one thing that is hard to get right.
+ */
+export function findBannedOccurrences(params, source, computedImports) {
+    const found = [];
+    if (params.selector === 'computed-dynamic-import') {
+        for (const edge of computedImports) {
+            found.push({ line: edge.line, col: edge.col, snippet: `import(${edge.specifier})` });
+        }
+        return found;
+    }
+    if (source === undefined)
+        return found;
+    if (params.selector === 'suppression-comment') {
+        scanComments(source, found);
+        return found;
+    }
+    scanAst(params, source, found);
+    return found;
+}
+function validateParams(rule, _ctx) {
+    const params = rule.params;
+    const errors = [];
+    const appliesTo = params.appliesTo;
+    const globs = typeof appliesTo === 'string' ? [appliesTo] : appliesTo;
+    if (!Array.isArray(globs) || globs.length === 0 || !globs.every((g) => typeof g === 'string')) {
+        errors.push('params.appliesTo is required — a path glob, or a list of them');
+    }
+    const selector = params.selector;
+    if (!BANNED_CONSTRUCTS.includes(selector)) {
+        errors.push(`params.selector must be one of ${BANNED_CONSTRUCTS.join(', ')} ` +
+            `(got ${JSON.stringify(params.selector)}) — the set is closed so a rule cannot silently match nothing`);
+    }
+    else if (NEEDS_TARGET.has(selector) &&
+        (typeof params.target !== 'string' || params.target.length === 0)) {
+        errors.push(`params.target is required for selector '${selector}' — name what is banned`);
+    }
+    else if (!NEEDS_TARGET.has(selector) && params.target !== undefined) {
+        errors.push(`params.target means nothing for selector '${selector}' — remove it`);
+    }
+    return errors.length > 0 ? err(errors) : ok(undefined);
+}
+function emitFragments(rule, _ctx) {
+    const params = asBannedSyntaxParams(rule);
+    return [
+        {
+            target: 'lint',
+            ruleId: rule.id,
+            content: {
+                files: typeof params.appliesTo === 'string' ? [params.appliesTo] : params.appliesTo,
+                forbid: params.selector,
+                ...(params.target === undefined ? {} : { target: params.target }),
+                message: `${rule.statement} — ${rule.remedy.summary}`,
+                autofix: false,
+            },
+        },
+    ];
+}
+function explainFinding(finding, rule, _ctx) {
+    const evidence = finding.evidence;
+    return [
+        rule.statement,
+        `  ${finding.file}${finding.line === undefined ? '' : `:${finding.line}`}`,
+        `  found: ${String(evidence.snippet)}`,
+        `  → ${rule.remedy.summary}`,
+    ].join('\n');
+}
+function refineFinding(_finding, rule) {
+    return { remedy: { ...rule.remedy, autofix: false } };
+}
+export const bannedSyntaxContract = {
+    kind: 'banned-syntax',
+    validate: validateParams,
+    emit: emitFragments,
+    explain: explainFinding,
+    refine: refineFinding,
+};
+//# sourceMappingURL=banned-syntax.js.map

package/dist/contracts/banned-syntax.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"banned-syntax.js","sourceRoot":"","sources":["../../src/contracts/banned-syntax.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AACH,OAAO,EAAE,MAAM,YAAY,CAAC;AAE5B,OAAO,EAAE,GAAG,EAAE,EAAE,EAAe,MAAM,cAAc,CAAC;AAEpD,OAAO,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAC;AAG7C,4FAA4F;AAC5F,MAAM,CAAC,MAAM,iBAAiB,GAAG;IAC/B,eAAe;IACf,gBAAgB;IAChB,yBAAyB;IACzB,qBAAqB;IACrB,2BAA2B;IAC3B,aAAa;CACL,CAAC;AAIX,0EAA0E;AAC1E,MAAM,YAAY,GAAG,IAAI,GAAG,CAAkB,CAAC,eAAe,EAAE,gBAAgB,CAAC,CAAC,CAAC;AASnF,MAAM,UAAU,oBAAoB,CAAC,IAAU;IAC7C,OAAO,IAAI,CAAC,MAAuC,CAAC;AACtD,CAAC;AAED,MAAM,UAAU,mBAAmB,CAAC,MAA0B,EAAE,YAAoB;IAClF,MAAM,KAAK,GAAG,OAAO,MAAM,CAAC,SAAS,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC;IAC3F,OAAO,UAAU,CAAC,KAAK,EAAE,YAAY,CAAC,CAAC;AACzC,CAAC;AAID,SAAS,UAAU,CAAC,MAAqB,EAAE,IAAa;IACtD,MAAM,EAAE,IAAI,EAAE,SAAS,EAAE,GAAG,MAAM,CAAC,6BAA6B,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC;IACxF,OAAO,EAAE,IAAI,EAAE,IAAI,GAAG,CAAC,EAAE,GAAG,EAAE,SAAS,GAAG,CAAC,EAAE,CAAC;AAChD,CAAC;AAED,2EAA2E;AAC3E,SAAS,aAAa,CAAC,MAAc,EAAE,IAAY;IACjD,OAAO,IAAI,KAAK,MAAM,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,MAAM,GAAG,CAAC,CAAC;AAC1D,CAAC;AAED,MAAM,WAAW,GAAG,4EAA4E,CAAC;AAEjG,SAAS,OAAO,CACd,MAA0B,EAC1B,MAAqB,EACrB,KAAyB;IAEzB,MAAM,MAAM,GAAG,CAAC,IAAa,EAAE,OAAe,EAAE,EAAE;QAChD,KAAK,CAAC,IAAI,CAAC,EAAE,GAAG,UAAU,CAAC,MAAM,EAAE,IAAI,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC;IACvD,CAAC,CAAC;IAEF,MAAM,KAAK,GAAG,CAAC,IAAa,EAAQ,EAAE;QACpC,QAAQ,MAAM,CAAC,QAAQ,EAAE,CAAC;YACxB,KAAK,eAAe;gBAClB,IACE,EAAE,CAAC,0BAA0B,CAAC,IAAI,CAAC;oBACnC,aAAa,CAAC,MAAM,CAAC,MAAM,IAAI,EAAE,EAAE,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,EACxD,CAAC;oBACD,MAAM,CAAC,IAAI,EAAE,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC;gBACrC,CAAC;qBAAM,IACL,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC;oBACrB,IAAI,CAAC,IAAI,KAAK,MAAM,CAAC,MAAM;oBAC3B,CAAC,EAAE,CAAC,0BAA0B,CAAC,IAAI,CAAC,MAAM,CAAC,EAC3C,CAAC;oBACD,MAAM,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC;gBAC1B,CAAC;gBACD,MAAM;YACR,KAAK,gBAAgB;gBACnB,IAAI,EAAE,CAAC,eAAe,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,MAAM,CAAC,MAAM,EAAE,CAAC;oBAClF,MAAM,CAAC,IAAI,EAAE,OAAO,MAAM,CAAC,MAAM,IAAI,CAAC,CAAC;gBACzC,CAAC;gBACD,MAAM;YACR,KAAK,2BAA2B;gBAC9B,IACE,EAAE,CAAC,kBAAkB,CAAC,IAAI,CAAC;oBAC3B,CAAC,IAAI,CAAC,aAAa,CAAC,IAAI,KAAK,EAAE,CAAC,UAAU,CAAC,uBAAuB;wBAChE,IAAI,CAAC,aAAa,CAAC,IAAI,KAAK,EAAE,CAAC,UAAU,CAAC,4BAA4B,CAAC;oBACzE,CAAC,EAAE,CAAC,mBAAmB,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,mBAAmB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EACzE,CAAC;oBACD,MAAM,CAAC,IAAI,EAAE,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC;gBAClD,CAAC;gBACD,MAAM;YACR,KAAK,aAAa;gBAChB,0FAA0F;gBAC1F,yFAAyF;gBACzF,gCAAgC;gBAChC,IACE,EAAE,CAAC,aAAa,CAAC,IAAI,CAAC;oBACtB,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,MAAM,KAAK,CAAC;oBAClC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC,MAAM,KAAK,CAAC,EAC9D,CAAC;oBACD,MAAM,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;gBAC3B,CAAC;gBACD,MAAM;YACR,KAAK,yBAAyB,CAAC;YAC/B,KAAK,qBAAqB;gBACxB,kFAAkF;gBAClF,MAAM;QACV,CAAC;QACD,EAAE,CAAC,YAAY,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;IAC/B,CAAC,CAAC;IAEF,EAAE,CAAC,YAAY,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;AACjC,CAAC;AAED;;;;;;GAMG;AACH,SAAS,YAAY,CAAC,MAAqB,EAAE,KAAyB;IACpE,MAAM,IAAI,GAAG,MAAM,CAAC,WAAW,EAAE,CAAC;IAClC,MAAM,OAAO,GAAG,EAAE,CAAC,aAAa,CAC9B,EAAE,CAAC,YAAY,CAAC,MAAM,EACtB,KAAK,EACL,EAAE,CAAC,eAAe,CAAC,QAAQ,EAC3B,IAAI,CACL,CAAC;IACF,KAAK,IAAI,KAAK,GAAG,OAAO,CAAC,IAAI,EAAE,EAAE,KAAK,KAAK,EAAE,CAAC,UAAU,CAAC,cAAc,EAAE,KAAK,GAAG,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC;QAChG,IACE,KAAK,KAAK,EAAE,CAAC,UAAU,CAAC,uBAAuB;YAC/C,KAAK,KAAK,EAAE,CAAC,UAAU,CAAC,sBAAsB,EAC9C,CAAC;YACD,SAAS;QACX,CAAC;QACD,MAAM,OAAO,GAAG,OAAO,CAAC,YAAY,EAAE,CAAC;QACvC,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,OAAO,CAAC;YAAE,SAAS;QACzC,MAAM,EAAE,IAAI,EAAE,SAAS,EAAE,GAAG,MAAM,CAAC,6BAA6B,CAAC,OAAO,CAAC,aAAa,EAAE,CAAC,CAAC;QAC1F,KAAK,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,IAAI,GAAG,CAAC,EAAE,GAAG,EAAE,SAAS,GAAG,CAAC,EAAE,OAAO,EAAE,OAAO,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC,CAAC;IAC3F,CAAC;AACH,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,qBAAqB,CACnC,MAA0B,EAC1B,MAAiC,EACjC,eAAgC;IAEhC,MAAM,KAAK,GAAuB,EAAE,CAAC;IACrC,IAAI,MAAM,CAAC,QAAQ,KAAK,yBAAyB,EAAE,CAAC;QAClD,KAAK,MAAM,IAAI,IAAI,eAAe,EAAE,CAAC;YACnC,KAAK,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE,OAAO,EAAE,UAAU,IAAI,CAAC,SAAS,GAAG,EAAE,CAAC,CAAC;QACvF,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IACD,IAAI,MAAM,KAAK,SAAS;QAAE,OAAO,KAAK,CAAC;IACvC,IAAI,MAAM,CAAC,QAAQ,KAAK,qBAAqB,EAAE,CAAC;QAC9C,YAAY,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;QAC5B,OAAO,KAAK,CAAC;IACf,CAAC;IACD,OAAO,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,CAAC,CAAC;IAC/B,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,cAAc,CAAC,IAAU,EAAE,IAAiB;IACnD,MAAM,MAAM,GAAG,IAAI,CAAC,MAAiC,CAAC;IACtD,MAAM,MAAM,GAAa,EAAE,CAAC;IAE5B,MAAM,SAAS,GAAG,MAAM,CAAC,SAAS,CAAC;IACnC,MAAM,KAAK,GAAG,OAAO,SAAS,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IACtE,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC,EAAE,CAAC;QAC9F,MAAM,CAAC,IAAI,CAAC,+DAA+D,CAAC,CAAC;IAC/E,CAAC;IAED,MAAM,QAAQ,GAAG,MAAM,CAAC,QAA2B,CAAC;IACpD,IAAI,CAAC,iBAAiB,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC1C,MAAM,CAAC,IAAI,CACT,kCAAkC,iBAAiB,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG;YAC/D,QAAQ,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,QAAQ,CAAC,+DAA+D,CACzG,CAAC;IACJ,CAAC;SAAM,IACL,YAAY,CAAC,GAAG,CAAC,QAAQ,CAAC;QAC1B,CAAC,OAAO,MAAM,CAAC,MAAM,KAAK,QAAQ,IAAI,MAAM,CAAC,MAAM,CAAC,MAAM,KAAK,CAAC,CAAC,EACjE,CAAC;QACD,MAAM,CAAC,IAAI,CAAC,2CAA2C,QAAQ,yBAAyB,CAAC,CAAC;IAC5F,CAAC;SAAM,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,MAAM,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;QACtE,MAAM,CAAC,IAAI,CAAC,6CAA6C,QAAQ,eAAe,CAAC,CAAC;IACpF,CAAC;IAED,OAAO,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,SAAS,CAAC,CAAC;AACzD,CAAC;AAED,SAAS,aAAa,CAAC,IAAU,EAAE,IAAa;IAC9C,MAAM,MAAM,GAAG,oBAAoB,CAAC,IAAI,CAAC,CAAC;IAC1C,OAAO;QACL;YACE,MAAM,EAAE,MAAM;YACd,MAAM,EAAE,IAAI,CAAC,EAAE;YACf,OAAO,EAAE;gBACP,KAAK,EAAE,OAAO,MAAM,CAAC,SAAS,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,SAAS;gBACnF,MAAM,EAAE,MAAM,CAAC,QAAQ;gBACvB,GAAG,CAAC,MAAM,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC;gBACjE,OAAO,EAAE,GAAG,IAAI,CAAC,SAAS,MAAM,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE;gBACrD,OAAO,EAAE,KAAK;aACf;SACF;KACF,CAAC;AACJ,CAAC;AAED,SAAS,cAAc,CAAC,OAAmB,EAAE,IAAU,EAAE,IAAgB;IACvE,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAmC,CAAC;IAC7D,OAAO;QACL,IAAI,CAAC,SAAS;QACd,KAAK,OAAO,CAAC,IAAI,GAAG,OAAO,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,OAAO,CAAC,IAAI,EAAE,EAAE;QAC1E,YAAY,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE;QACtC,OAAO,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE;KAC7B,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACf,CAAC;AAED,SAAS,aAAa,CAAC,QAAoB,EAAE,IAAU;IACrD,OAAO,EAAE,MAAM,EAAE,EAAE,GAAG,IAAI,CAAC,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,CAAC;AACxD,CAAC;AAED,MAAM,CAAC,MAAM,oBAAoB,GAAiB;IAChD,IAAI,EAAE,eAAe;IACrB,QAAQ,EAAE,cAAc;IACxB,IAAI,EAAE,aAAa;IACnB,OAAO,EAAE,cAAc;IACvB,MAAM,EAAE,aAAa;CACtB,CAAC"}

package/dist/contracts/declared-field.d.ts

@@ -0,0 +1,39 @@
+/**
+ * The `declared-field` kind — rules about what must be DECLARED at a call site.
+ *
+ * What this covers: "every endpoint declares a permission and an operation id". A global middleware
+ * chain knows who the caller is; only the endpoint knows what is being asked, so the declaration
+ * has to be at the call site — and a call site that forgot it is invisible to every other kind.
+ *
+ * This is AST work, not filesystem work. It means finding the call expression and reading its
+ * arguments, which needs the program the graph reader already built.
+ *
+ * What a caller must know: the check is that the field is PRESENT (and, optionally, one of a set
+ * of allowed values). Whether the value is the right permission for that endpoint is a judgement
+ * rule, not this one.
+ */
+import ts from 'typescript';
+import type { Rule } from '../types.js';
+import type { ContractType } from './types.js';
+export type DeclaredFieldParams = {
+    appliesTo: string | string[];
+    /** The callee, e.g. `registerRoute` or `router.get`. */
+    on: string;
+    /** The property that must appear in one of the call's object-literal arguments. */
+    field: string;
+    /** When given, the value must also be one of these string literals. */
+    allowed?: string[];
+};
+export declare function asDeclaredFieldParams(rule: Rule): DeclaredFieldParams;
+export declare function declaredFieldApplies(params: DeclaredFieldParams, relativePath: string): boolean;
+export type MissingDeclaration = {
+    line: number;
+    col: number;
+    call: string;
+    /** 'absent' when the field is missing entirely; 'not-allowed' when its value is out of range. */
+    problem: 'absent' | 'not-allowed';
+    found?: string;
+};
+export declare function findMissingDeclarations(params: DeclaredFieldParams, source: ts.SourceFile | undefined): MissingDeclaration[];
+export declare const declaredFieldContract: ContractType;
+//# sourceMappingURL=declared-field.d.ts.map

package/dist/contracts/declared-field.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"declared-field.d.ts","sourceRoot":"","sources":["../../src/contracts/declared-field.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AACH,OAAO,EAAE,MAAM,YAAY,CAAC;AAE5B,OAAO,KAAK,EAAwB,IAAI,EAAE,MAAM,aAAa,CAAC;AAE9D,OAAO,KAAK,EAAE,YAAY,EAAgD,MAAM,YAAY,CAAC;AAE7F,MAAM,MAAM,mBAAmB,GAAG;IAChC,SAAS,EAAE,MAAM,GAAG,MAAM,EAAE,CAAC;IAC7B,wDAAwD;IACxD,EAAE,EAAE,MAAM,CAAC;IACX,mFAAmF;IACnF,KAAK,EAAE,MAAM,CAAC;IACd,uEAAuE;IACvE,OAAO,CAAC,EAAE,MAAM,EAAE,CAAC;CACpB,CAAC;AAEF,wBAAgB,qBAAqB,CAAC,IAAI,EAAE,IAAI,GAAG,mBAAmB,CAErE;AAED,wBAAgB,oBAAoB,CAAC,MAAM,EAAE,mBAAmB,EAAE,YAAY,EAAE,MAAM,GAAG,OAAO,CAG/F;AAED,MAAM,MAAM,kBAAkB,GAAG;IAC/B,IAAI,EAAE,MAAM,CAAC;IACb,GAAG,EAAE,MAAM,CAAC;IACZ,IAAI,EAAE,MAAM,CAAC;IACb,iGAAiG;IACjG,OAAO,EAAE,QAAQ,GAAG,aAAa,CAAC;IAClC,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB,CAAC;AAgBF,wBAAgB,uBAAuB,CACrC,MAAM,EAAE,mBAAmB,EAC3B,MAAM,EAAE,EAAE,CAAC,UAAU,GAAG,SAAS,GAChC,kBAAkB,EAAE,CAmCtB;AAsED,eAAO,MAAM,qBAAqB,EAAE,YAMnC,CAAC"}

package/dist/contracts/declared-field.js

@@ -0,0 +1,142 @@
+/**
+ * The `declared-field` kind — rules about what must be DECLARED at a call site.
+ *
+ * What this covers: "every endpoint declares a permission and an operation id". A global middleware
+ * chain knows who the caller is; only the endpoint knows what is being asked, so the declaration
+ * has to be at the call site — and a call site that forgot it is invisible to every other kind.
+ *
+ * This is AST work, not filesystem work. It means finding the call expression and reading its
+ * arguments, which needs the program the graph reader already built.
+ *
+ * What a caller must know: the check is that the field is PRESENT (and, optionally, one of a set
+ * of allowed values). Whether the value is the right permission for that endpoint is a judgement
+ * rule, not this one.
+ */
+import ts from 'typescript';
+import { err, ok } from '../result.js';
+import { matchesAny } from '../util/glob.js';
+export function asDeclaredFieldParams(rule) {
+    return rule.params;
+}
+export function declaredFieldApplies(params, relativePath) {
+    const globs = typeof params.appliesTo === 'string' ? [params.appliesTo] : params.appliesTo;
+    return matchesAny(globs, relativePath);
+}
+function propertyNamed(object, field) {
+    return object.properties.find((property) => {
+        const name = property.name;
+        if (!name)
+            return false;
+        if (ts.isIdentifier(name) || ts.isStringLiteralLike(name))
+            return name.text === field;
+        return false;
+    });
+}
+function literalValueOf(property) {
+    if (!ts.isPropertyAssignment(property))
+        return undefined;
+    return ts.isStringLiteralLike(property.initializer) ? property.initializer.text : undefined;
+}
+export function findMissingDeclarations(params, source) {
+    if (source === undefined)
+        return [];
+    const found = [];
+    const visit = (node) => {
+        if (ts.isCallExpression(node) && node.expression.getText(source) === params.on) {
+            const objects = node.arguments.filter(ts.isObjectLiteralExpression);
+            const property = objects
+                .map((object) => propertyNamed(object, params.field))
+                .find((match) => match !== undefined);
+            const { line, character } = source.getLineAndCharacterOfPosition(node.getStart(source));
+            const call = `${params.on}(…)`;
+            if (property === undefined) {
+                found.push({ line: line + 1, col: character + 1, call, problem: 'absent' });
+            }
+            else if (params.allowed && params.allowed.length > 0) {
+                const value = literalValueOf(property);
+                // A non-literal value is accepted: it may be a constant, and guessing would produce a
+                // false positive on correct code — which is worse than missing one.
+                if (value !== undefined && !params.allowed.includes(value)) {
+                    found.push({
+                        line: line + 1,
+                        col: character + 1,
+                        call,
+                        problem: 'not-allowed',
+                        found: value,
+                    });
+                }
+            }
+        }
+        ts.forEachChild(node, visit);
+    };
+    ts.forEachChild(source, visit);
+    return found;
+}
+function validateParams(rule, _ctx) {
+    const params = rule.params;
+    const errors = [];
+    const appliesTo = params.appliesTo;
+    const globs = typeof appliesTo === 'string' ? [appliesTo] : appliesTo;
+    if (!Array.isArray(globs) || globs.length === 0 || !globs.every((g) => typeof g === 'string')) {
+        errors.push('params.appliesTo is required — a path glob, or a list of them');
+    }
+    if (typeof params.on !== 'string' || params.on.length === 0) {
+        errors.push("params.on is required — the call being checked, e.g. 'registerRoute'");
+    }
+    if (typeof params.field !== 'string' || params.field.length === 0) {
+        errors.push("params.field is required — the property that must be declared, e.g. 'permission'");
+    }
+    if (params.allowed !== undefined) {
+        if (!Array.isArray(params.allowed) || !params.allowed.every((v) => typeof v === 'string')) {
+            errors.push('params.allowed must be a list of strings when given');
+        }
+    }
+    return errors.length > 0 ? err(errors) : ok(undefined);
+}
+function emitFragments(rule, _ctx) {
+    const params = asDeclaredFieldParams(rule);
+    return [
+        {
+            target: 'test',
+            ruleId: rule.id,
+            content: {
+                files: typeof params.appliesTo === 'string' ? [params.appliesTo] : params.appliesTo,
+                on: params.on,
+                field: params.field,
+                ...(params.allowed === undefined ? {} : { allowed: params.allowed }),
+                message: `${rule.statement} — ${rule.remedy.summary}`,
+            },
+        },
+    ];
+}
+function explainFinding(finding, rule, _ctx) {
+    const evidence = finding.evidence;
+    const params = asDeclaredFieldParams(rule);
+    const detail = evidence.problem === 'absent'
+        ? `declares no '${params.field}'`
+        : `declares '${params.field}' as '${String(evidence.found)}', which is not allowed`;
+    return [
+        `${String(evidence.call)} ${detail}`,
+        `  ${finding.file}${finding.line === undefined ? '' : `:${finding.line}`}`,
+        ...(params.allowed ? [`  allowed: ${params.allowed.join(', ')}`] : []),
+        `  → ${rule.remedy.summary}`,
+    ].join('\n');
+}
+function refineFinding(finding, rule) {
+    const evidence = finding.evidence;
+    const params = asDeclaredFieldParams(rule);
+    return {
+        statement: evidence.problem === 'absent'
+            ? `${String(evidence.call)} must declare '${params.field}'`
+            : `'${String(evidence.found)}' is not an allowed '${params.field}'`,
+        remedy: { ...rule.remedy, ...(params.allowed ? { allowed: params.allowed } : {}) },
+    };
+}
+export const declaredFieldContract = {
+    kind: 'declared-field',
+    validate: validateParams,
+    emit: emitFragments,
+    explain: explainFinding,
+    refine: refineFinding,
+};
+//# sourceMappingURL=declared-field.js.map

package/dist/contracts/declared-field.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"declared-field.js","sourceRoot":"","sources":["../../src/contracts/declared-field.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AACH,OAAO,EAAE,MAAM,YAAY,CAAC;AAC5B,OAAO,EAAE,GAAG,EAAE,EAAE,EAAe,MAAM,cAAc,CAAC;AAEpD,OAAO,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAC;AAa7C,MAAM,UAAU,qBAAqB,CAAC,IAAU;IAC9C,OAAO,IAAI,CAAC,MAAwC,CAAC;AACvD,CAAC;AAED,MAAM,UAAU,oBAAoB,CAAC,MAA2B,EAAE,YAAoB;IACpF,MAAM,KAAK,GAAG,OAAO,MAAM,CAAC,SAAS,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC;IAC3F,OAAO,UAAU,CAAC,KAAK,EAAE,YAAY,CAAC,CAAC;AACzC,CAAC;AAWD,SAAS,aAAa,CAAC,MAAkC,EAAE,KAAa;IACtE,OAAO,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,EAAE;QACzC,MAAM,IAAI,GAAG,QAAQ,CAAC,IAAI,CAAC;QAC3B,IAAI,CAAC,IAAI;YAAE,OAAO,KAAK,CAAC;QACxB,IAAI,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,mBAAmB,CAAC,IAAI,CAAC;YAAE,OAAO,IAAI,CAAC,IAAI,KAAK,KAAK,CAAC;QACtF,OAAO,KAAK,CAAC;IACf,CAAC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,cAAc,CAAC,QAAqC;IAC3D,IAAI,CAAC,EAAE,CAAC,oBAAoB,CAAC,QAAQ,CAAC;QAAE,OAAO,SAAS,CAAC;IACzD,OAAO,EAAE,CAAC,mBAAmB,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;AAC9F,CAAC;AAED,MAAM,UAAU,uBAAuB,CACrC,MAA2B,EAC3B,MAAiC;IAEjC,IAAI,MAAM,KAAK,SAAS;QAAE,OAAO,EAAE,CAAC;IACpC,MAAM,KAAK,GAAyB,EAAE,CAAC;IAEvC,MAAM,KAAK,GAAG,CAAC,IAAa,EAAQ,EAAE;QACpC,IAAI,EAAE,CAAC,gBAAgB,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,MAAM,CAAC,EAAE,EAAE,CAAC;YAC/E,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,EAAE,CAAC,yBAAyB,CAAC,CAAC;YACpE,MAAM,QAAQ,GAAG,OAAO;iBACrB,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,aAAa,CAAC,MAAM,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC;iBACpD,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC;YACxC,MAAM,EAAE,IAAI,EAAE,SAAS,EAAE,GAAG,MAAM,CAAC,6BAA6B,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC;YACxF,MAAM,IAAI,GAAG,GAAG,MAAM,CAAC,EAAE,KAAK,CAAC;YAE/B,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;gBAC3B,KAAK,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,IAAI,GAAG,CAAC,EAAE,GAAG,EAAE,SAAS,GAAG,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,QAAQ,EAAE,CAAC,CAAC;YAC9E,CAAC;iBAAM,IAAI,MAAM,CAAC,OAAO,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACvD,MAAM,KAAK,GAAG,cAAc,CAAC,QAAQ,CAAC,CAAC;gBACvC,sFAAsF;gBACtF,oEAAoE;gBACpE,IAAI,KAAK,KAAK,SAAS,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;oBAC3D,KAAK,CAAC,IAAI,CAAC;wBACT,IAAI,EAAE,IAAI,GAAG,CAAC;wBACd,GAAG,EAAE,SAAS,GAAG,CAAC;wBAClB,IAAI;wBACJ,OAAO,EAAE,aAAa;wBACtB,KAAK,EAAE,KAAK;qBACb,CAAC,CAAC;gBACL,CAAC;YACH,CAAC;QACH,CAAC;QACD,EAAE,CAAC,YAAY,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;IAC/B,CAAC,CAAC;IAEF,EAAE,CAAC,YAAY,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;IAC/B,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,cAAc,CAAC,IAAU,EAAE,IAAiB;IACnD,MAAM,MAAM,GAAG,IAAI,CAAC,MAAiC,CAAC;IACtD,MAAM,MAAM,GAAa,EAAE,CAAC;IAE5B,MAAM,SAAS,GAAG,MAAM,CAAC,SAAS,CAAC;IACnC,MAAM,KAAK,GAAG,OAAO,SAAS,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IACtE,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC,EAAE,CAAC;QAC9F,MAAM,CAAC,IAAI,CAAC,+DAA+D,CAAC,CAAC;IAC/E,CAAC;IACD,IAAI,OAAO,MAAM,CAAC,EAAE,KAAK,QAAQ,IAAI,MAAM,CAAC,EAAE,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC5D,MAAM,CAAC,IAAI,CAAC,sEAAsE,CAAC,CAAC;IACtF,CAAC;IACD,IAAI,OAAO,MAAM,CAAC,KAAK,KAAK,QAAQ,IAAI,MAAM,CAAC,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAClE,MAAM,CAAC,IAAI,CAAC,kFAAkF,CAAC,CAAC;IAClG,CAAC;IACD,IAAI,MAAM,CAAC,OAAO,KAAK,SAAS,EAAE,CAAC;QACjC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC,EAAE,CAAC;YAC1F,MAAM,CAAC,IAAI,CAAC,qDAAqD,CAAC,CAAC;QACrE,CAAC;IACH,CAAC;IAED,OAAO,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,SAAS,CAAC,CAAC;AACzD,CAAC;AAED,SAAS,aAAa,CAAC,IAAU,EAAE,IAAa;IAC9C,MAAM,MAAM,GAAG,qBAAqB,CAAC,IAAI,CAAC,CAAC;IAC3C,OAAO;QACL;YACE,MAAM,EAAE,MAAM;YACd,MAAM,EAAE,IAAI,CAAC,EAAE;YACf,OAAO,EAAE;gBACP,KAAK,EAAE,OAAO,MAAM,CAAC,SAAS,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,SAAS;gBACnF,EAAE,EAAE,MAAM,CAAC,EAAE;gBACb,KAAK,EAAE,MAAM,CAAC,KAAK;gBACnB,GAAG,CAAC,MAAM,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,CAAC;gBACpE,OAAO,EAAE,GAAG,IAAI,CAAC,SAAS,MAAM,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE;aACtD;SACF;KACF,CAAC;AACJ,CAAC;AAED,SAAS,cAAc,CAAC,OAAmB,EAAE,IAAU,EAAE,IAAgB;IACvE,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAmC,CAAC;IAC7D,MAAM,MAAM,GAAG,qBAAqB,CAAC,IAAI,CAAC,CAAC;IAC3C,MAAM,MAAM,GACV,QAAQ,CAAC,OAAO,KAAK,QAAQ;QAC3B,CAAC,CAAC,gBAAgB,MAAM,CAAC,KAAK,GAAG;QACjC,CAAC,CAAC,aAAa,MAAM,CAAC,KAAK,SAAS,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,yBAAyB,CAAC;IACxF,OAAO;QACL,GAAG,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,MAAM,EAAE;QACpC,KAAK,OAAO,CAAC,IAAI,GAAG,OAAO,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,OAAO,CAAC,IAAI,EAAE,EAAE;QAC1E,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,cAAc,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QACtE,OAAO,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE;KAC7B,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACf,CAAC;AAED,SAAS,aAAa,CAAC,OAAmB,EAAE,IAAU;IACpD,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAmC,CAAC;IAC7D,MAAM,MAAM,GAAG,qBAAqB,CAAC,IAAI,CAAC,CAAC;IAC3C,OAAO;QACL,SAAS,EACP,QAAQ,CAAC,OAAO,KAAK,QAAQ;YAC3B,CAAC,CAAC,GAAG,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,kBAAkB,MAAM,CAAC,KAAK,GAAG;YAC3D,CAAC,CAAC,IAAI,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,wBAAwB,MAAM,CAAC,KAAK,GAAG;QACvE,MAAM,EAAE,EAAE,GAAG,IAAI,CAAC,MAAM,EAAE,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE;KACnF,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,MAAM,qBAAqB,GAAiB;IACjD,IAAI,EAAE,gBAAgB;IACtB,QAAQ,EAAE,cAAc;IACxB,IAAI,EAAE,aAAa;IACnB,OAAO,EAAE,cAAc;IACvB,MAAM,EAAE,aAAa;CACtB,CAAC"}

package/dist/contracts/encapsulation.d.ts

@@ -0,0 +1,28 @@
+import type { Rule } from '../types.js';
+import type { ContractType } from './types.js';
+export type EncapsulationParams = {
+    /** A glob matching module ROOT directories, e.g. `modules/*`. */
+    module: string;
+    /** Paths relative to a module root that may be imported from outside, e.g. `index.ts`. */
+    publicSurface: string | string[];
+};
+export declare function asEncapsulationParams(rule: Rule): EncapsulationParams;
+export declare function publicSurfacesOf(rule: Rule): string[];
+/**
+ * The module a repo-relative path belongs to, or undefined. Walks the path's ancestors and returns
+ * the first that the module glob matches — so `modules/*` claims `modules/ledger` for every file
+ * beneath it.
+ */
+export declare function moduleOf(moduleGlob: string, relativePath: string): string | undefined;
+export type EncapsulationVerdict = {
+    allowed: true;
+} | {
+    allowed: false;
+    module: string;
+    surfaces: string[];
+    deepPath: string;
+};
+/** The whole decision, pure and path-only, so every case is testable without a fixture repo. */
+export declare function resolveEncapsulation(params: EncapsulationParams, fromRelative: string, toRelative: string): EncapsulationVerdict;
+export declare const encapsulationContract: ContractType;
+//# sourceMappingURL=encapsulation.d.ts.map

package/dist/contracts/encapsulation.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"encapsulation.d.ts","sourceRoot":"","sources":["../../src/contracts/encapsulation.ts"],"names":[],"mappings":"AAkBA,OAAO,KAAK,EAAwB,IAAI,EAAE,MAAM,aAAa,CAAC;AAE9D,OAAO,KAAK,EAAE,YAAY,EAAgD,MAAM,YAAY,CAAC;AAE7F,MAAM,MAAM,mBAAmB,GAAG;IAChC,iEAAiE;IACjE,MAAM,EAAE,MAAM,CAAC;IACf,0FAA0F;IAC1F,aAAa,EAAE,MAAM,GAAG,MAAM,EAAE,CAAC;CAClC,CAAC;AAEF,wBAAgB,qBAAqB,CAAC,IAAI,EAAE,IAAI,GAAG,mBAAmB,CAErE;AAQD,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,IAAI,GAAG,MAAM,EAAE,CAErD;AAED;;;;GAIG;AACH,wBAAgB,QAAQ,CAAC,UAAU,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAOrF;AAED,MAAM,MAAM,oBAAoB,GAC5B;IAAE,OAAO,EAAE,IAAI,CAAA;CAAE,GACjB;IAAE,OAAO,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,EAAE,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAA;CAAE,CAAC;AAE7E,gGAAgG;AAChG,wBAAgB,oBAAoB,CAClC,MAAM,EAAE,mBAAmB,EAC3B,YAAY,EAAE,MAAM,EACpB,UAAU,EAAE,MAAM,GACjB,oBAAoB,CAatB;AA2ED,eAAO,MAAM,qBAAqB,EAAE,YAMnC,CAAC"}

package/dist/contracts/encapsulation.js

@@ -0,0 +1,130 @@
+/**
+ * The `encapsulation` kind — the module barrel, and the deep-import ban generated from it.
+ *
+ * What rule this enforces: another module imports `modules/ledger`, never
+ * `modules/ledger/services/write`. This is the rule most often broken by accident, and the one
+ * where the generated exports map moves it from DETECTED to IMPOSSIBLE.
+ *
+ * Two sinks, one rule — the case that forced `emit()` to return an array (LLD §1.2):
+ *   1. graph   — catches deep imports inside the repo, where module resolution does not apply
+ *   2. exports — makes the deep path unresolvable for anything outside the package
+ * The second costs nothing extra once the first exists, and it is the promotion from a rule people
+ * break to a path that does not exist.
+ *
+ * What a caller must know: only edges that CROSS a module boundary are checked.
+ * `modules/ledger/services/write.ts` importing `modules/ledger/domain/supersede.ts` is a normal
+ * internal import, not a barrel violation.
+ */
+import { err, ok } from '../result.js';
+import { matches } from '../util/glob.js';
+export function asEncapsulationParams(rule) {
+    return rule.params;
+}
+const asParams = asEncapsulationParams;
+function surfacesOf(params) {
+    return typeof params.publicSurface === 'string' ? [params.publicSurface] : params.publicSurface;
+}
+export function publicSurfacesOf(rule) {
+    return surfacesOf(asParams(rule));
+}
+/**
+ * The module a repo-relative path belongs to, or undefined. Walks the path's ancestors and returns
+ * the first that the module glob matches — so `modules/*` claims `modules/ledger` for every file
+ * beneath it.
+ */
+export function moduleOf(moduleGlob, relativePath) {
+    const segments = relativePath.split('/');
+    for (let depth = segments.length - 1; depth > 0; depth -= 1) {
+        const candidate = segments.slice(0, depth).join('/');
+        if (matches(moduleGlob, candidate))
+            return candidate;
+    }
+    return undefined;
+}
+/** The whole decision, pure and path-only, so every case is testable without a fixture repo. */
+export function resolveEncapsulation(params, fromRelative, toRelative) {
+    const target = moduleOf(params.module, toRelative);
+    if (target === undefined)
+        return { allowed: true };
+    if (moduleOf(params.module, fromRelative) === target)
+        return { allowed: true };
+    const inside = toRelative.slice(target.length + 1);
+    const surfaces = surfacesOf(params);
+    // `index.ts` in the manifest must accept `index.ts`, and a resolver that landed on the file
+    // itself rather than the directory. Both are the barrel.
+    if (surfaces.some((surface) => inside === surface || inside === surface.replace(/\.tsx?$/, ''))) {
+        return { allowed: true };
+    }
+    return { allowed: false, module: target, surfaces, deepPath: inside };
+}
+function validateParams(rule, _ctx) {
+    const params = rule.params;
+    const errors = [];
+    if (typeof params.module !== 'string' || params.module.length === 0) {
+        errors.push("params.module is required — a glob matching module roots, e.g. 'modules/*'");
+    }
+    const surface = params.publicSurface;
+    const list = typeof surface === 'string' ? [surface] : surface;
+    if (!Array.isArray(list) ||
+        list.length === 0 ||
+        !list.every((s) => typeof s === 'string' && s.length > 0)) {
+        errors.push("params.publicSurface is required — a path inside a module, e.g. 'index.ts'");
+    }
+    else {
+        for (const entry of list) {
+            if (entry.startsWith('/') || entry.startsWith('.')) {
+                errors.push(`params.publicSurface '${entry}' must be relative to the module root`);
+            }
+        }
+    }
+    return errors.length > 0 ? err(errors) : ok(undefined);
+}
+function emitFragments(rule, _ctx) {
+    const params = asParams(rule);
+    const surfaces = surfacesOf(params);
+    return [
+        {
+            target: 'graph',
+            ruleId: rule.id,
+            content: { module: params.module, publicSurface: surfaces, statement: rule.statement },
+        },
+        {
+            // The exports map: the deep path stops resolving at all for anything outside the package.
+            // We emit it; the consumer commits it into their own package.json.
+            target: 'exports',
+            ruleId: rule.id,
+            content: {
+                module: params.module,
+                exports: Object.fromEntries(surfaces.map((surface) => [
+                    surface === 'index.ts' ? '.' : `./${surface.replace(/\.tsx?$/, '')}`,
+                    `./${surface.replace(/\.tsx?$/, '.js')}`,
+                ])),
+            },
+        },
+    ];
+}
+function explainFinding(finding, rule, _ctx) {
+    const evidence = finding.evidence;
+    const surfaces = publicSurfacesOf(rule).join(', ');
+    return [
+        `${String(evidence.module)} is reached through its public surface only`,
+        `  ${finding.file} → ${String(evidence.to)}`,
+        `  public surface: ${surfaces}`,
+        `  → ${rule.remedy.summary}`,
+    ].join('\n');
+}
+function refineFinding(finding, rule) {
+    const evidence = finding.evidence;
+    return {
+        statement: `${String(evidence.module)} may only be imported through ${publicSurfacesOf(rule).join(' or ')}`,
+        remedy: { ...rule.remedy, allowed: publicSurfacesOf(rule) },
+    };
+}
+export const encapsulationContract = {
+    kind: 'encapsulation',
+    validate: validateParams,
+    emit: emitFragments,
+    explain: explainFinding,
+    refine: refineFinding,
+};
+//# sourceMappingURL=encapsulation.js.map

package/dist/contracts/encapsulation.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"encapsulation.js","sourceRoot":"","sources":["../../src/contracts/encapsulation.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AACH,OAAO,EAAE,GAAG,EAAE,EAAE,EAAe,MAAM,cAAc,CAAC;AAEpD,OAAO,EAAE,OAAO,EAAE,MAAM,iBAAiB,CAAC;AAU1C,MAAM,UAAU,qBAAqB,CAAC,IAAU;IAC9C,OAAO,IAAI,CAAC,MAAwC,CAAC;AACvD,CAAC;AAED,MAAM,QAAQ,GAAG,qBAAqB,CAAC;AAEvC,SAAS,UAAU,CAAC,MAA2B;IAC7C,OAAO,OAAO,MAAM,CAAC,aAAa,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,aAAa,CAAC;AAClG,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,IAAU;IACzC,OAAO,UAAU,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC;AACpC,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,QAAQ,CAAC,UAAkB,EAAE,YAAoB;IAC/D,MAAM,QAAQ,GAAG,YAAY,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IACzC,KAAK,IAAI,KAAK,GAAG,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,KAAK,GAAG,CAAC,EAAE,KAAK,IAAI,CAAC,EAAE,CAAC;QAC5D,MAAM,SAAS,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACrD,IAAI,OAAO,CAAC,UAAU,EAAE,SAAS,CAAC;YAAE,OAAO,SAAS,CAAC;IACvD,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAMD,gGAAgG;AAChG,MAAM,UAAU,oBAAoB,CAClC,MAA2B,EAC3B,YAAoB,EACpB,UAAkB;IAElB,MAAM,MAAM,GAAG,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;IACnD,IAAI,MAAM,KAAK,SAAS;QAAE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;IACnD,IAAI,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,YAAY,CAAC,KAAK,MAAM;QAAE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;IAE/E,MAAM,MAAM,GAAG,UAAU,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IACnD,MAAM,QAAQ,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC;IACpC,4FAA4F;IAC5F,yDAAyD;IACzD,IAAI,QAAQ,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,MAAM,KAAK,OAAO,IAAI,MAAM,KAAK,OAAO,CAAC,OAAO,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC,EAAE,CAAC;QAChG,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;IAC3B,CAAC;IACD,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC;AACxE,CAAC;AAED,SAAS,cAAc,CAAC,IAAU,EAAE,IAAiB;IACnD,MAAM,MAAM,GAAG,IAAI,CAAC,MAAiC,CAAC;IACtD,MAAM,MAAM,GAAa,EAAE,CAAC;IAE5B,IAAI,OAAO,MAAM,CAAC,MAAM,KAAK,QAAQ,IAAI,MAAM,CAAC,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACpE,MAAM,CAAC,IAAI,CAAC,4EAA4E,CAAC,CAAC;IAC5F,CAAC;IAED,MAAM,OAAO,GAAG,MAAM,CAAC,aAAa,CAAC;IACrC,MAAM,IAAI,GAAG,OAAO,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC;IAC/D,IACE,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC;QACpB,IAAI,CAAC,MAAM,KAAK,CAAC;QACjB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,EACzD,CAAC;QACD,MAAM,CAAC,IAAI,CAAC,4EAA4E,CAAC,CAAC;IAC5F,CAAC;SAAM,CAAC;QACN,KAAK,MAAM,KAAK,IAAI,IAAI,EAAE,CAAC;YACzB,IAAI,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;gBACnD,MAAM,CAAC,IAAI,CAAC,yBAAyB,KAAK,uCAAuC,CAAC,CAAC;YACrF,CAAC;QACH,CAAC;IACH,CAAC;IAED,OAAO,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,SAAS,CAAC,CAAC;AACzD,CAAC;AAED,SAAS,aAAa,CAAC,IAAU,EAAE,IAAa;IAC9C,MAAM,MAAM,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC;IAC9B,MAAM,QAAQ,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC;IACpC,OAAO;QACL;YACE,MAAM,EAAE,OAAO;YACf,MAAM,EAAE,IAAI,CAAC,EAAE;YACf,OAAO,EAAE,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,aAAa,EAAE,QAAQ,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE;SACvF;QACD;YACE,0FAA0F;YAC1F,mEAAmE;YACnE,MAAM,EAAE,SAAS;YACjB,MAAM,EAAE,IAAI,CAAC,EAAE;YACf,OAAO,EAAE;gBACP,MAAM,EAAE,MAAM,CAAC,MAAM;gBACrB,OAAO,EAAE,MAAM,CAAC,WAAW,CACzB,QAAQ,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC;oBACxB,OAAO,KAAK,UAAU,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,OAAO,CAAC,OAAO,CAAC,SAAS,EAAE,EAAE,CAAC,EAAE;oBACpE,KAAK,OAAO,CAAC,OAAO,CAAC,SAAS,EAAE,KAAK,CAAC,EAAE;iBACzC,CAAC,CACH;aACF;SACF;KACF,CAAC;AACJ,CAAC;AAED,SAAS,cAAc,CAAC,OAAmB,EAAE,IAAU,EAAE,IAAgB;IACvE,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAmC,CAAC;IAC7D,MAAM,QAAQ,GAAG,gBAAgB,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACnD,OAAO;QACL,GAAG,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,6CAA6C;QACvE,KAAK,OAAO,CAAC,IAAI,MAAM,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC,EAAE;QAC5C,qBAAqB,QAAQ,EAAE;QAC/B,OAAO,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE;KAC7B,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACf,CAAC;AAED,SAAS,aAAa,CAAC,OAAmB,EAAE,IAAU;IACpD,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAmC,CAAC;IAC7D,OAAO;QACL,SAAS,EAAE,GAAG,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,iCAAiC,gBAAgB,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE;QAC3G,MAAM,EAAE,EAAE,GAAG,IAAI,CAAC,MAAM,EAAE,OAAO,EAAE,gBAAgB,CAAC,IAAI,CAAC,EAAE;KAC5D,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,MAAM,qBAAqB,GAAiB;IACjD,IAAI,EAAE,eAAe;IACrB,QAAQ,EAAE,cAAc;IACxB,IAAI,EAAE,aAAa;IACnB,OAAO,EAAE,cAAc;IACvB,MAAM,EAAE,aAAa;CACtB,CAAC"}

package/dist/contracts/index.d.ts

@@ -0,0 +1,10 @@
+export { asBannedSyntaxParams, BANNED_CONSTRUCTS, type BannedConstruct, type BannedOccurrence, type BannedSyntaxParams, bannedSyntaxApplies, bannedSyntaxContract, findBannedOccurrences, } from './banned-syntax.js';
+export { asDeclaredFieldParams, type DeclaredFieldParams, declaredFieldApplies, declaredFieldContract, findMissingDeclarations, type MissingDeclaration, } from './declared-field.js';
+export { asEncapsulationParams, type EncapsulationParams, type EncapsulationVerdict, encapsulationContract, moduleOf, publicSurfacesOf, resolveEncapsulation, } from './encapsulation.js';
+export { asJudgementParams, effectiveConfidence, type JudgementParams, judgementApplies, judgementContract, } from './judgement.js';
+export { asLayersParams, buildLayerTable, type EdgeVerdict, type Layer, type LayersParams, type LayerTable, layersContract, resolveEdge, } from './layers.js';
+export { asNamingParams, describeExpectation, type NamingParams, type NamingTarget, nameIsWellFormed, namingApplies, namingContract, } from './naming.js';
+export { contractFor, implementedKinds, validateParamsByKind, warningsFor } from './registry.js';
+export { asRequiredFileParams, isRuleSelector, type RequiredFileParams, type RequiredSubject, requiredFileContract, subjectsFor, } from './required-file.js';
+export type { ContractType, EmitCtx, ExplainCtx, Refinement, ValidateCtx } from './types.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/contracts/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/contracts/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,oBAAoB,EACpB,iBAAiB,EACjB,KAAK,eAAe,EACpB,KAAK,gBAAgB,EACrB,KAAK,kBAAkB,EACvB,mBAAmB,EACnB,oBAAoB,EACpB,qBAAqB,GACtB,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EACL,qBAAqB,EACrB,KAAK,mBAAmB,EACxB,oBAAoB,EACpB,qBAAqB,EACrB,uBAAuB,EACvB,KAAK,kBAAkB,GACxB,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EACL,qBAAqB,EACrB,KAAK,mBAAmB,EACxB,KAAK,oBAAoB,EACzB,qBAAqB,EACrB,QAAQ,EACR,gBAAgB,EAChB,oBAAoB,GACrB,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EACL,iBAAiB,EACjB,mBAAmB,EACnB,KAAK,eAAe,EACpB,gBAAgB,EAChB,iBAAiB,GAClB,MAAM,gBAAgB,CAAC;AACxB,OAAO,EACL,cAAc,EACd,eAAe,EACf,KAAK,WAAW,EAChB,KAAK,KAAK,EACV,KAAK,YAAY,EACjB,KAAK,UAAU,EACf,cAAc,EACd,WAAW,GACZ,MAAM,aAAa,CAAC;AACrB,OAAO,EACL,cAAc,EACd,mBAAmB,EACnB,KAAK,YAAY,EACjB,KAAK,YAAY,EACjB,gBAAgB,EAChB,aAAa,EACb,cAAc,GACf,MAAM,aAAa,CAAC;AACrB,OAAO,EAAE,WAAW,EAAE,gBAAgB,EAAE,oBAAoB,EAAE,WAAW,EAAE,MAAM,eAAe,CAAC;AACjG,OAAO,EACL,oBAAoB,EACpB,cAAc,EACd,KAAK,kBAAkB,EACvB,KAAK,eAAe,EACpB,oBAAoB,EACpB,WAAW,GACZ,MAAM,oBAAoB,CAAC;AAC5B,YAAY,EAAE,YAAY,EAAE,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC"}

package/dist/contracts/index.js

@@ -0,0 +1,9 @@
+export { asBannedSyntaxParams, BANNED_CONSTRUCTS, bannedSyntaxApplies, bannedSyntaxContract, findBannedOccurrences, } from './banned-syntax.js';
+export { asDeclaredFieldParams, declaredFieldApplies, declaredFieldContract, findMissingDeclarations, } from './declared-field.js';
+export { asEncapsulationParams, encapsulationContract, moduleOf, publicSurfacesOf, resolveEncapsulation, } from './encapsulation.js';
+export { asJudgementParams, effectiveConfidence, judgementApplies, judgementContract, } from './judgement.js';
+export { asLayersParams, buildLayerTable, layersContract, resolveEdge, } from './layers.js';
+export { asNamingParams, describeExpectation, nameIsWellFormed, namingApplies, namingContract, } from './naming.js';
+export { contractFor, implementedKinds, validateParamsByKind, warningsFor } from './registry.js';
+export { asRequiredFileParams, isRuleSelector, requiredFileContract, subjectsFor, } from './required-file.js';
+//# sourceMappingURL=index.js.map

package/dist/contracts/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/contracts/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,oBAAoB,EACpB,iBAAiB,EAIjB,mBAAmB,EACnB,oBAAoB,EACpB,qBAAqB,GACtB,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EACL,qBAAqB,EAErB,oBAAoB,EACpB,qBAAqB,EACrB,uBAAuB,GAExB,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EACL,qBAAqB,EAGrB,qBAAqB,EACrB,QAAQ,EACR,gBAAgB,EAChB,oBAAoB,GACrB,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EACL,iBAAiB,EACjB,mBAAmB,EAEnB,gBAAgB,EAChB,iBAAiB,GAClB,MAAM,gBAAgB,CAAC;AACxB,OAAO,EACL,cAAc,EACd,eAAe,EAKf,cAAc,EACd,WAAW,GACZ,MAAM,aAAa,CAAC;AACrB,OAAO,EACL,cAAc,EACd,mBAAmB,EAGnB,gBAAgB,EAChB,aAAa,EACb,cAAc,GACf,MAAM,aAAa,CAAC;AACrB,OAAO,EAAE,WAAW,EAAE,gBAAgB,EAAE,oBAAoB,EAAE,WAAW,EAAE,MAAM,eAAe,CAAC;AACjG,OAAO,EACL,oBAAoB,EACpB,cAAc,EAGd,oBAAoB,EACpB,WAAW,GACZ,MAAM,oBAAoB,CAAC"}

package/dist/contracts/judgement.d.ts

@@ -0,0 +1,21 @@
+import type { Rule } from '../types.js';
+import type { ContractType } from './types.js';
+export type JudgementParams = {
+    /** One sentence, in plain English, that a reader and a model both understand. */
+    statement: string;
+    appliesTo: string | string[];
+    examples: {
+        /** Code that must NOT be flagged. At least one. */
+        pass: string[];
+        /** Code that MUST be flagged. At least one. */
+        fail: string[];
+    };
+    /** What the model must quote back to justify a verdict, e.g. 'the offending statement'. */
+    cite: string;
+};
+export declare function asJudgementParams(rule: Rule): JudgementParams;
+export declare function judgementApplies(params: JudgementParams, relativePath: string): boolean;
+/** `confidence` is not the manifest's to decide for this kind. */
+export declare function effectiveConfidence(): 'model';
+export declare const judgementContract: ContractType;
+//# sourceMappingURL=judgement.d.ts.map