archprint 0.8.2 → 0.9.0

package/CHANGELOG.md

@@ -1,5 +1,26 @@
 # archprint
 
+## 0.9.0
+
+### Minor Changes
+
+- Add `archprint check`, which reports only the violations a change introduces, compared with a base branch or commit, for the rules your team adopted with `init` or `generate`. It works in any CI. On GitHub, `--format github` shows each finding inline on the pull request, with its evidence, plus a step summary that also counts the violations the change fixed. It warns by default; `--fail-on new` fails the job so you can make it a required status check. `--format json` and exit codes (`0` ok, `1` new violations, `2` the CI setup is wrong) cover other CI systems.
+
+  `init` and `generate` now also write `.archprint/rules.json`, the exact definition of each adopted mechanical rule, which `check` uses so it never re-infers a rule. If you set up archprint with 0.8.x or earlier, run `archprint generate` once; until then `check` reports that it did not run.
+
+### Patch Changes
+
+- The same repository now gives the same output on every machine. archprint reads files in name order instead of the order the filesystem returns them, which differs between macOS and Linux, so an example exception or a generated fixture no longer changes between a laptop and CI.
+- `generate --expand` now writes each forbidden-import rule's files from that rule. Before, the database rule (AP-001) got the UI rule's ESLint message, rule card text and fixtures, so its failing fixture imported a UI component that AP-001 never flags. Each rule's message now states the rule, its card lists what it forbids, and its failing fixture imports something the rule really reports: one of the repo's own exceptions when there is one, otherwise the database wrapper or component folder archprint found.
+- The local MCP server now says plainly when it is given a repository URL instead of a directory, and points to `archprint mcp --http` for scanning a public repository by URL. Before, it reported a missing `tsconfig.json` under a path built from the URL. It also reads a `file://` URL as the local directory it names, and ignores spaces around a path.
+- Plainer wording. The database and UI rules (AP-001, AP-002) now say "request handler" instead of "request-entry" or "server-entry" file, in scan output, ESLint messages, rule cards and fix guidance. `scan` prints each of these rules as a sentence followed by "N of M files it applies to follow it".
+
+## 0.8.3
+
+### Patch Changes
+
+- The MCP server is ready for MCP directories. Each tool now has a human-readable title and is marked read-only and non-destructive, so clients can show it as safe to run (the remote `--http` tools are also marked as reaching the internet). The package declares its MCP Registry name, and every release publishes to the official MCP Registry automatically. `archprint scan` now labels each rule group the same way `init` and `recommend` do: dependency hygiene and dependency declaration read "review before enforcing", and circular dependencies read "report only". The README lists example prompts to ask your agent.
+
 ## 0.8.2
 
 ### Patch Changes

package/README.md

@@ -5,11 +5,12 @@
 [![npm downloads](https://img.shields.io/npm/dm/archprint.svg)](https://www.npmjs.com/package/archprint)
 [![license](https://img.shields.io/npm/l/archprint.svg)](./LICENSE)
 [![docs](https://img.shields.io/badge/docs-live-blue)](https://tommkruix.github.io/archprint/)
+[![Glama MCP server score](https://glama.ai/mcp/servers/Tommkruix/archprint/badges/score.svg)](https://glama.ai/mcp/servers/Tommkruix/archprint)
 
 **Mine the architecture rules your repo already enforces, with the evidence attached.**
 
 **[Try it in your browser](https://stackblitz.com/github/Tommkruix/archprint-demo)**, nothing to install ·
-[Quick start](#quick-start) · [Use with AI agents](#use-it-with-ai-coding-agents) · [Docs](https://tommkruix.github.io/archprint/)
+[Quick start](#quick-start) · [Use in CI](#use-in-ci) · [Use with AI agents](#use-it-with-ai-coding-agents) · [Docs](https://tommkruix.github.io/archprint/)
 
 ## What it does, in plain words
 
@@ -27,6 +28,8 @@ instead of handing you a rulebook from somewhere else.
 
 - **For developers and tech leads:** inferred, evidence-backed lint rules for ESLint and dependency-cruiser,
   generated with `init`, connected with `wire`, and removed with `eject`.
+- **For reviewers:** `archprint check` flags only the rule breaks a pull request introduces, inline on GitHub,
+  never the existing backlog.
 - **For teams using AI coding agents:** Claude Code, Cursor and other agents can ask Archprint for the project's
   rules, with the evidence, before they write code.
 - **For anyone evaluating a codebase:** a quick, honest picture of how a project is actually structured.
@@ -114,17 +117,27 @@ also accept the root and cover every app, while `init` and `generate` work on on
 # 1. See the rules your code already follows, with the evidence. Changes nothing.
 npx archprint scan .
 
-# 2. Set up enforcement for the rules your code already follows cleanly,
+# 2. Ask why one rule is trusted (use a rule label from the scan)
+npx archprint explain AP-001 .
+
+# 3. Set up enforcement for the rules your code already follows cleanly,
 #    and record what to review or adopt next in .archprint/config.json
 npx archprint init .
 
-# 3. Connect the generated rules to your ESLint / dependency-cruiser config (one managed line)
+# 4. Connect the generated rules to your ESLint / dependency-cruiser config (one managed line)
 npx archprint wire
 
-# Then run your linter as usual. To undo everything, exactly:
+# 5. Run your linter as usual. Your code passes today; a new import that breaks a rule fails.
+npx eslint .
+
+# To undo everything, exactly:
 npx archprint eject
 ```
 
+**See it catch something.** After step 4, break a rule on purpose: for example, make a route file import your
+database client directly, then run your linter. That is the whole loop the
+[demo](https://stackblitz.com/github/Tommkruix/archprint-demo) walks through in the browser.
+
 To keep it in the project instead of using `npx`: `npm install --save-dev archprint`.
 
 More commands for a deliberate, step-by-step setup:
@@ -253,6 +266,9 @@ a tool you do not have. `--emit <eslint|dependency-cruiser|all>` forces the form
   mechanical boundaries (public-API deep-import, test-isolation); the review-held ones (layer, role-layering,
   feature-slice, app-isolation, entry-purity, dependency-internals, phantom deps) are added only with
   `--include-structural`, after you review them.
+- **`.archprint/rules.json`**: the exact definition of each mechanical rule you adopted, with the evidence
+  recorded at adoption and the resolution mode it was generated in. `archprint check` reads it, so a check never
+  re-infers a rule.
 - **`.archprint/config.json`**: what is enforced, followed but only reported, held for review, and worth
   adopting, plus the list of managed outputs `eject` removes.
 - **A managed section in your `README.md`** summarizing what is enforced now, followed but only reported, held for
@@ -272,6 +288,45 @@ exactly. `generate --check` runs the generated ESLint rules against your repo an
 can confirm before wiring. Upgrading from 0.5.x? `archprint migrate` moves an older `archprint-rules/` setup to
 this layout and rewires your configs in place.
 
+## Use in CI
+
+`archprint check` reports only the violations a change **introduces**, compared with a base branch, for the rules
+your team adopted with `init` or `generate`. The existing backlog never shows up, and every finding carries its
+evidence. It works in any CI, and on GitHub it shows each finding inline on the pull request.
+
+```yaml
+# .github/workflows/archprint.yml
+name: archprint
+on: pull_request
+permissions:
+  contents: read
+jobs:
+  check:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v5
+        with:
+          ref: ${{ github.event.pull_request.head.sha }}
+          fetch-depth: 0
+      - uses: actions/setup-node@v5
+        with:
+          node-version: 22
+      - run: npm ci
+      - run: npx archprint check --base ${{ github.event.pull_request.base.sha }} --format github
+```
+
+- **Warning by default.** Add `--fail-on new` to fail the job on a new violation, then mark the job a required
+  status check in your branch protection so a pull request that adds one can't merge.
+- **Only adopted rules.** `check` reads `.archprint/rules.json`, written by `init` and `generate`, and checks only
+  the mechanical rules recorded there, never structural ones. Rules adopted in the same pull request are listed
+  but never counted against it.
+- **Upgrading from 0.8.x or earlier:** run `archprint generate` once to write `rules.json`. Until you do, `check`
+  posts a notice that it did not run and exits 0.
+- **Other CI systems:** `--format json` gives version-keyed output, and the exit code is the contract: `0` ok, `1`
+  new violations with `--fail-on new`, `2` the CI setup is wrong (for example a shallow clone without the base
+  commit). Check out the full history (`fetch-depth: 0` or your CI's equivalent).
+- **Safe on pull requests from forks.** It needs only read access, uses no secrets, and never runs your code.
+
 ## MCP setup
 
 `archprint mcp` runs Archprint as an [MCP](https://modelcontextprotocol.io) server over stdio, so an agent can ask
@@ -288,6 +343,13 @@ scan (for example `AP-002` or `env-access`). Point Claude Desktop, Claude Code,
 }
 ```
 
+**Things to ask your agent.** You do not name the tools; the agent picks them:
+
+- "What architecture rules does this repo already follow?"
+- "Which file breaks the env-access rule, and how should I fix it?"
+- "I am adding a new API route. What rules should it follow in this codebase?"
+- "Which rules should we enforce now, and which are worth adopting?"
+
 **Your code stays on your machine.** This default is a local server: it reads your local checkout, so it is the
 one to use for private code, and your source never leaves your machine, whichever git host you use.
 
@@ -310,6 +372,15 @@ comes from nvm or Homebrew. A full path to `npx` alone is not enough, because `n
 
 Starting the editor from a terminal also works, because it then inherits your shell's `PATH`.
 
+**One-line installs.** In Claude Code:
+
+```bash
+claude mcp add archprint -- npx -y archprint mcp
+```
+
+In Cursor, put the JSON above in `.cursor/mcp.json` in your project (or `~/.cursor/mcp.json` for every project),
+then enable **archprint** under **Settings > MCP**.
+
 **Scanning a public repo by URL.** `archprint mcp --http` runs a remote server instead. It clones the repo shallow
 to a temp dir, runs the same read-only analysis, returns the result, and deletes the clone (only public
 `github.com`, `gitlab.com`, and `bitbucket.org` URLs; nothing is written or kept). The tools then take a `repo` URL
@@ -362,6 +433,9 @@ reachability) and knip (dead code); rather than compete, it writes the rules it
   `--only <family>` and `--rules <ids>` narrow the output, `--check` runs the generated rules against your repo,
   `--readme` adds the README section, `--expand` also writes the per-family files, cards, fixtures and graph, and
   `--rule <id>` emits one reviewed rule. Also `--include-structural`, `--no-graph`, `--out <dir>`, `--fast`.
+- **`archprint check [path]`**: reports the violations of your adopted rules that a change introduces, compared
+  with `--base <branch or commit>`. Warning only unless `--fail-on new`. `--format text|json|github`,
+  `--out <dir>`. See [Use in CI](#use-in-ci).
 - **`archprint wire`**: references the generated rules from the enforcement tools your repo uses (flat eslint
   config, `.dependency-cruiser.json`) through a managed, reversible reference. `--out <dir>`, `--dry-run`.
 - **`archprint eject`**: removes Archprint's generated files, its config, the managed README section, and any
@@ -372,8 +446,9 @@ reachability) and knip (dead code); rather than compete, it writes the rules it
   `scan`, `recommend`, and `explain` tools. Serves over stdio by default; `--http` runs a remote server that scans
   a public repo by URL.
 
-`scan --json` and `recommend --json` emit stable, version-keyed JSON for scripting. Exit codes are the contract:
-`0` on success, `1` on error.
+`scan --json`, `recommend --json` and `check --format json` emit stable, version-keyed JSON for scripting. Exit
+codes are the contract: `0` on success, `1` on error (for `check`: new violations with `--fail-on new`), `2` for a
+`check` that could not run because of the CI setup.
 
 ## Example on a real repo
 
@@ -385,7 +460,8 @@ Workspace aliases: 18 resolved
 
 GENERATED RULES
   AP-002  no-ui-layer-in-server-entry      confidence 97%
-          Evidence: 216/217 role files conform (99.5% observed)
+          A request handler must not import UI components.
+          Evidence: 216 of 217 files it applies to follow it (99.5%)
           Exceptions: 1
 
 LAYER BOUNDARIES (review before enforcing)
@@ -419,10 +495,11 @@ were inferred from.
 - **Validated at scale:** `scan` and `recommend` ran over a corpus of 92,861 public TypeScript repositories (61,690
   apps) with zero crashes; 91 repos (0.1%) could not be fetched or timed out. The full `init`/`wire`/`eject`
   round-trip ran clean on a 2,000-repo stratified sample.
-- **Production-ready today:** `scan` and `recommend`, and auto-enforcement of the mechanical families, with a
-  self-consistency check at generate time, an `init` scaffolder for fresh repos, and framework coverage across
-  React, Angular, Vue, and Svelte. The engine (twenty detectors, the confidence gate, and emitters for a
-  self-contained ESLint file, dependency-cruiser, ts-arch, and the layer graph) is in place and tested.
+- **Production-ready today:** `scan` and `recommend`, `check` for pull requests, and auto-enforcement of the
+  mechanical families, with a self-consistency check at generate time, an `init` scaffolder for fresh repos, and
+  framework coverage across React, Angular, Vue, and Svelte. The engine (twenty detectors, the confidence gate, and
+  emitters for a self-contained ESLint file, dependency-cruiser, ts-arch, and the layer graph) is in place and
+  tested.
 - **Still ahead:** hardening the structural families toward auto-enforcement (a real per-file role-confidence
   measure, layer cohesion, role-classifier ordering).
 - **Versioning is still 0.x,** so the CLI surface and rule format can refine between minor versions. That is a

package/dist/cli/adopted-rules.d.ts

@@ -0,0 +1,49 @@
+import type { Role } from '../scanner/role-classifier.js';
+import type { ScannedPattern, ScanResult } from './scan.js';
+export declare const RULES_FILE = "rules.json";
+export declare const RULES_FORMAT = 1;
+export type ResolutionMode = 'deep' | 'fast';
+export interface AdoptionEvidence {
+    conforming: number;
+    total: number;
+    floor: number;
+}
+interface RuleBase {
+    id: string;
+    statement: string;
+    mode: ResolutionMode;
+    evidence: AdoptionEvidence;
+}
+export interface ForbiddenImportRule extends RuleBase {
+    family: 'forbidden-imports';
+    roles: Role[];
+    forbidden: {
+        source: string;
+        flags: string;
+    }[];
+}
+export interface PublicApiRule extends RuleBase {
+    family: 'public-api';
+    dir: string;
+}
+export interface SingleFamilyRule extends RuleBase {
+    family: 'test-isolation' | 'console-isolation' | 'import-style';
+}
+export type AdoptedRule = ForbiddenImportRule | PublicApiRule | SingleFamilyRule;
+export interface AdoptedRules {
+    format: typeof RULES_FORMAT;
+    archprintVersion: string;
+    rules: AdoptedRule[];
+}
+export declare function forbiddenImportRule(pattern: ScannedPattern, mode: ResolutionMode): AdoptedRule;
+export declare function testIsolationRule(scan: ScanResult): AdoptedRule;
+export declare function consoleIsolationRule(scan: ScanResult): AdoptedRule;
+export declare function importStyleRule(scan: ScanResult): AdoptedRule;
+export declare function publicApiRules(scan: ScanResult): AdoptedRule[];
+export declare function writeAdoptedRules(outDir: string, rules: readonly AdoptedRule[], archprintVersion: string): string;
+export declare class InvalidRulesError extends Error {
+}
+export declare function readAdoptedRules(outDir: string): AdoptedRules | null;
+export declare function ruleDefinitionKey(rule: AdoptedRule): string;
+export {};
+//# sourceMappingURL=adopted-rules.d.ts.map

package/dist/cli/adopted-rules.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"adopted-rules.d.ts","sourceRoot":"","sources":["../../src/cli/adopted-rules.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,+BAA+B,CAAC;AAG1D,OAAO,KAAK,EAAE,cAAc,EAAE,UAAU,EAAE,MAAM,WAAW,CAAC;AAE5D,eAAO,MAAM,UAAU,eAAe,CAAC;AACvC,eAAO,MAAM,YAAY,IAAI,CAAC;AAE9B,MAAM,MAAM,cAAc,GAAG,MAAM,GAAG,MAAM,CAAC;AAE7C,MAAM,WAAW,gBAAgB;IAC/B,UAAU,EAAE,MAAM,CAAC;IACnB,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,EAAE,MAAM,CAAC;CACf;AAED,UAAU,QAAQ;IAChB,EAAE,EAAE,MAAM,CAAC;IACX,SAAS,EAAE,MAAM,CAAC;IAClB,IAAI,EAAE,cAAc,CAAC;IACrB,QAAQ,EAAE,gBAAgB,CAAC;CAC5B;AAED,MAAM,WAAW,mBAAoB,SAAQ,QAAQ;IACnD,MAAM,EAAE,mBAAmB,CAAC;IAC5B,KAAK,EAAE,IAAI,EAAE,CAAC;IACd,SAAS,EAAE;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,EAAE,CAAC;CAChD;AAED,MAAM,WAAW,aAAc,SAAQ,QAAQ;IAC7C,MAAM,EAAE,YAAY,CAAC;IACrB,GAAG,EAAE,MAAM,CAAC;CACb;AAED,MAAM,WAAW,gBAAiB,SAAQ,QAAQ;IAChD,MAAM,EAAE,gBAAgB,GAAG,mBAAmB,GAAG,cAAc,CAAC;CACjE;AAED,MAAM,MAAM,WAAW,GAAG,mBAAmB,GAAG,aAAa,GAAG,gBAAgB,CAAC;AAEjF,MAAM,WAAW,YAAY;IAC3B,MAAM,EAAE,OAAO,YAAY,CAAC;IAC5B,gBAAgB,EAAE,MAAM,CAAC;IACzB,KAAK,EAAE,WAAW,EAAE,CAAC;CACtB;AAQD,wBAAgB,mBAAmB,CAAC,OAAO,EAAE,cAAc,EAAE,IAAI,EAAE,cAAc,GAAG,WAAW,CAW9F;AAED,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,UAAU,GAAG,WAAW,CAS/D;AAED,wBAAgB,oBAAoB,CAAC,IAAI,EAAE,UAAU,GAAG,WAAW,CASlE;AAED,wBAAgB,eAAe,CAAC,IAAI,EAAE,UAAU,GAAG,WAAW,CAS7D;AAED,wBAAgB,cAAc,CAAC,IAAI,EAAE,UAAU,GAAG,WAAW,EAAE,CAW9D;AAED,wBAAgB,iBAAiB,CAC/B,MAAM,EAAE,MAAM,EACd,KAAK,EAAE,SAAS,WAAW,EAAE,EAC7B,gBAAgB,EAAE,MAAM,GACvB,MAAM,CAOR;AAED,qBAAa,iBAAkB,SAAQ,KAAK;CAAG;AAyD/C,wBAAgB,gBAAgB,CAAC,MAAM,EAAE,MAAM,GAAG,YAAY,GAAG,IAAI,CAmBpE;AAED,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,WAAW,GAAG,MAAM,CAc3D"}

package/dist/cli/adopted-rules.js

@@ -0,0 +1,159 @@
+import { existsSync, mkdirSync, readFileSync, writeFileSync } from 'node:fs';
+import * as path from 'node:path';
+import { publicApiRuleName } from '../generator/public-api-emitters.js';
+import { FAMILY_STATEMENTS } from './rule-statements.js';
+export const RULES_FILE = 'rules.json';
+export const RULES_FORMAT = 1;
+const evidenceOf = (gate, total, violating) => ({
+    conforming: total - violating,
+    total,
+    floor: gate.conditions.confidence.value,
+});
+export function forbiddenImportRule(pattern, mode) {
+    const { config, result } = pattern;
+    return {
+        id: config.id,
+        family: 'forbidden-imports',
+        statement: config.description,
+        mode,
+        roles: [...config.roles],
+        forbidden: config.forbidden.map((marker) => ({ source: marker.source, flags: marker.flags })),
+        evidence: evidenceOf(result.gate, result.stats.roleFileCount, result.stats.violatingFileCount),
+    };
+}
+export function testIsolationRule(scan) {
+    const analysis = scan.testIsolation;
+    return {
+        id: 'test-isolation',
+        family: 'test-isolation',
+        statement: FAMILY_STATEMENTS['test-isolation'],
+        mode: 'fast',
+        evidence: evidenceOf(analysis.gate, analysis.productionFileCount, analysis.offenderCount),
+    };
+}
+export function consoleIsolationRule(scan) {
+    const analysis = scan.consoleIsolation;
+    return {
+        id: 'console-isolation',
+        family: 'console-isolation',
+        statement: FAMILY_STATEMENTS['console-isolation'],
+        mode: 'fast',
+        evidence: evidenceOf(analysis.gate, analysis.libraryFileCount, analysis.offenderCount),
+    };
+}
+export function importStyleRule(scan) {
+    const analysis = scan.deepRelative;
+    return {
+        id: 'import-style',
+        family: 'import-style',
+        statement: FAMILY_STATEMENTS['import-style'],
+        mode: 'fast',
+        evidence: evidenceOf(analysis.gate, analysis.relativeImporterCount, analysis.offenderCount),
+    };
+}
+export function publicApiRules(scan) {
+    return scan.publicApi.groups
+        .filter((group) => group.gate.status === 'AUTO')
+        .map((group) => ({
+        id: publicApiRuleName(group.dir),
+        family: 'public-api',
+        dir: group.dir,
+        statement: `import ${group.dir} through its public entry (barrel), not its internal files`,
+        mode: 'fast',
+        evidence: evidenceOf(group.gate, group.consumerCount, group.deepImporterCount),
+    }));
+}
+export function writeAdoptedRules(outDir, rules, archprintVersion) {
+    mkdirSync(outDir, { recursive: true });
+    const file = path.join(outDir, RULES_FILE);
+    const sorted = [...rules].sort((a, b) => a.id.localeCompare(b.id));
+    const content = { format: RULES_FORMAT, archprintVersion, rules: sorted };
+    writeFileSync(file, `${JSON.stringify(content, null, 2)}\n`);
+    return file;
+}
+export class InvalidRulesError extends Error {
+}
+const FAMILIES = new Set([
+    'forbidden-imports',
+    'public-api',
+    'test-isolation',
+    'console-isolation',
+    'import-style',
+]);
+const MAX_PATTERN_LENGTH = 200;
+const PATTERN_FLAGS = /^[imsu]*$/;
+function validateRule(rule, file) {
+    const invalid = (reason) => {
+        throw new InvalidRulesError(`${file}: ${reason}. Re-run archprint generate.`);
+    };
+    if (typeof rule !== 'object' || rule === null)
+        return invalid('a rule is not an object');
+    const candidate = rule;
+    if (typeof candidate.id !== 'string' || !FAMILIES.has(String(candidate.family))) {
+        return invalid('a rule has no valid id or family');
+    }
+    if (candidate.mode !== 'deep' && candidate.mode !== 'fast') {
+        return invalid(`rule ${candidate.id} has no valid resolution mode`);
+    }
+    if (candidate.family === 'forbidden-imports') {
+        const markers = candidate.forbidden;
+        if (!Array.isArray(markers) || !Array.isArray(candidate.roles)) {
+            return invalid(`rule ${candidate.id} has no roles or forbidden markers`);
+        }
+        for (const marker of markers) {
+            const { source, flags } = marker ?? {};
+            if (typeof source !== 'string' || source.length > MAX_PATTERN_LENGTH) {
+                return invalid(`rule ${candidate.id} has a missing or oversized pattern`);
+            }
+            if (typeof flags !== 'string' || !PATTERN_FLAGS.test(flags)) {
+                return invalid(`rule ${candidate.id} has unsupported pattern flags`);
+            }
+            try {
+                new RegExp(source, flags);
+            }
+            catch {
+                return invalid(`rule ${candidate.id} has an invalid pattern`);
+            }
+        }
+    }
+    if (candidate.family === 'public-api' && typeof candidate.dir !== 'string') {
+        return invalid(`rule ${candidate.id} has no directory`);
+    }
+    return rule;
+}
+export function readAdoptedRules(outDir) {
+    const file = path.join(outDir, RULES_FILE);
+    if (!existsSync(file))
+        return null;
+    let parsed;
+    try {
+        parsed = JSON.parse(readFileSync(file, 'utf8'));
+    }
+    catch {
+        throw new InvalidRulesError(`${file} is not valid JSON. Re-run archprint generate.`);
+    }
+    if (parsed.format !== RULES_FORMAT || !Array.isArray(parsed.rules)) {
+        throw new InvalidRulesError(`${file} was written by a different archprint version. Re-run archprint generate.`);
+    }
+    return {
+        format: RULES_FORMAT,
+        archprintVersion: String(parsed.archprintVersion),
+        rules: parsed.rules.map((rule) => validateRule(rule, file)),
+    };
+}
+export function ruleDefinitionKey(rule) {
+    const common = [rule.family, rule.id, rule.mode];
+    switch (rule.family) {
+        case 'forbidden-imports':
+            return JSON.stringify([
+                ...common,
+                [...rule.roles].sort(),
+                rule.forbidden.map((marker) => `${marker.source}/${marker.flags}`).sort(),
+            ]);
+        case 'public-api':
+            return JSON.stringify([...common, rule.dir]);
+        default:
+            return JSON.stringify(common);
+    }
+}
+//# sourceMappingURL=adopted-rules.js.map

package/dist/cli/adopted-rules.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"adopted-rules.js","sourceRoot":"","sources":["../../src/cli/adopted-rules.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AAC7E,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAGlC,OAAO,EAAE,iBAAiB,EAAE,MAAM,qCAAqC,CAAC;AACxE,OAAO,EAAE,iBAAiB,EAAE,MAAM,sBAAsB,CAAC;AAGzD,MAAM,CAAC,MAAM,UAAU,GAAG,YAAY,CAAC;AACvC,MAAM,CAAC,MAAM,YAAY,GAAG,CAAC,CAAC;AAwC9B,MAAM,UAAU,GAAG,CAAC,IAAgB,EAAE,KAAa,EAAE,SAAiB,EAAoB,EAAE,CAAC,CAAC;IAC5F,UAAU,EAAE,KAAK,GAAG,SAAS;IAC7B,KAAK;IACL,KAAK,EAAE,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,KAAK;CACxC,CAAC,CAAC;AAEH,MAAM,UAAU,mBAAmB,CAAC,OAAuB,EAAE,IAAoB;IAC/E,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC;IACnC,OAAO;QACL,EAAE,EAAE,MAAM,CAAC,EAAE;QACb,MAAM,EAAE,mBAAmB;QAC3B,SAAS,EAAE,MAAM,CAAC,WAAW;QAC7B,IAAI;QACJ,KAAK,EAAE,CAAC,GAAG,MAAM,CAAC,KAAK,CAAC;QACxB,SAAS,EAAE,MAAM,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC;QAC7F,QAAQ,EAAE,UAAU,CAAC,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,KAAK,CAAC,aAAa,EAAE,MAAM,CAAC,KAAK,CAAC,kBAAkB,CAAC;KAC/F,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,IAAgB;IAChD,MAAM,QAAQ,GAAG,IAAI,CAAC,aAAa,CAAC;IACpC,OAAO;QACL,EAAE,EAAE,gBAAgB;QACpB,MAAM,EAAE,gBAAgB;QACxB,SAAS,EAAE,iBAAiB,CAAC,gBAAgB,CAAC;QAC9C,IAAI,EAAE,MAAM;QACZ,QAAQ,EAAE,UAAU,CAAC,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC,mBAAmB,EAAE,QAAQ,CAAC,aAAa,CAAC;KAC1F,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,oBAAoB,CAAC,IAAgB;IACnD,MAAM,QAAQ,GAAG,IAAI,CAAC,gBAAgB,CAAC;IACvC,OAAO;QACL,EAAE,EAAE,mBAAmB;QACvB,MAAM,EAAE,mBAAmB;QAC3B,SAAS,EAAE,iBAAiB,CAAC,mBAAmB,CAAC;QACjD,IAAI,EAAE,MAAM;QACZ,QAAQ,EAAE,UAAU,CAAC,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC,gBAAgB,EAAE,QAAQ,CAAC,aAAa,CAAC;KACvF,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,IAAgB;IAC9C,MAAM,QAAQ,GAAG,IAAI,CAAC,YAAY,CAAC;IACnC,OAAO;QACL,EAAE,EAAE,cAAc;QAClB,MAAM,EAAE,cAAc;QACtB,SAAS,EAAE,iBAAiB,CAAC,cAAc,CAAC;QAC5C,IAAI,EAAE,MAAM;QACZ,QAAQ,EAAE,UAAU,CAAC,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC,qBAAqB,EAAE,QAAQ,CAAC,aAAa,CAAC;KAC5F,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,IAAgB;IAC7C,OAAO,IAAI,CAAC,SAAS,CAAC,MAAM;SACzB,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,KAAK,MAAM,CAAC;SAC/C,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;QACf,EAAE,EAAE,iBAAiB,CAAC,KAAK,CAAC,GAAG,CAAC;QAChC,MAAM,EAAE,YAAY;QACpB,GAAG,EAAE,KAAK,CAAC,GAAG;QACd,SAAS,EAAE,UAAU,KAAK,CAAC,GAAG,4DAA4D;QAC1F,IAAI,EAAE,MAAM;QACZ,QAAQ,EAAE,UAAU,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,aAAa,EAAE,KAAK,CAAC,iBAAiB,CAAC;KAC/E,CAAC,CAAC,CAAC;AACR,CAAC;AAED,MAAM,UAAU,iBAAiB,CAC/B,MAAc,EACd,KAA6B,EAC7B,gBAAwB;IAExB,SAAS,CAAC,MAAM,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACvC,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;IAC3C,MAAM,MAAM,GAAG,CAAC,GAAG,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,aAAa,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;IACnE,MAAM,OAAO,GAAiB,EAAE,MAAM,EAAE,YAAY,EAAE,gBAAgB,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC;IACxF,aAAa,CAAC,IAAI,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC;IAC7D,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,OAAO,iBAAkB,SAAQ,KAAK;CAAG;AAE/C,MAAM,QAAQ,GAAwB,IAAI,GAAG,CAAC;IAC5C,mBAAmB;IACnB,YAAY;IACZ,gBAAgB;IAChB,mBAAmB;IACnB,cAAc;CACf,CAAC,CAAC;AACH,MAAM,kBAAkB,GAAG,GAAG,CAAC;AAC/B,MAAM,aAAa,GAAG,WAAW,CAAC;AAElC,SAAS,YAAY,CAAC,IAAa,EAAE,IAAY;IAC/C,MAAM,OAAO,GAAG,CAAC,MAAc,EAAS,EAAE;QACxC,MAAM,IAAI,iBAAiB,CAAC,GAAG,IAAI,KAAK,MAAM,8BAA8B,CAAC,CAAC;IAChF,CAAC,CAAC;IACF,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,KAAK,IAAI;QAAE,OAAO,OAAO,CAAC,yBAAyB,CAAC,CAAC;IACzF,MAAM,SAAS,GAAG,IAOjB,CAAC;IACF,IAAI,OAAO,SAAS,CAAC,EAAE,KAAK,QAAQ,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC;QAChF,OAAO,OAAO,CAAC,kCAAkC,CAAC,CAAC;IACrD,CAAC;IACD,IAAI,SAAS,CAAC,IAAI,KAAK,MAAM,IAAI,SAAS,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;QAC3D,OAAO,OAAO,CAAC,QAAQ,SAAS,CAAC,EAAE,+BAA+B,CAAC,CAAC;IACtE,CAAC;IACD,IAAI,SAAS,CAAC,MAAM,KAAK,mBAAmB,EAAE,CAAC;QAC7C,MAAM,OAAO,GAAG,SAAS,CAAC,SAAS,CAAC;QACpC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,CAAC;YAC/D,OAAO,OAAO,CAAC,QAAQ,SAAS,CAAC,EAAE,oCAAoC,CAAC,CAAC;QAC3E,CAAC;QACD,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;YAC7B,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,GAAG,MAAM,IAAI,EAAE,CAAC;YACvC,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,CAAC,MAAM,GAAG,kBAAkB,EAAE,CAAC;gBACrE,OAAO,OAAO,CAAC,QAAQ,SAAS,CAAC,EAAE,qCAAqC,CAAC,CAAC;YAC5E,CAAC;YACD,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;gBAC5D,OAAO,OAAO,CAAC,QAAQ,SAAS,CAAC,EAAE,gCAAgC,CAAC,CAAC;YACvE,CAAC;YACD,IAAI,CAAC;gBACH,IAAI,MAAM,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;YAC5B,CAAC;YAAC,MAAM,CAAC;gBACP,OAAO,OAAO,CAAC,QAAQ,SAAS,CAAC,EAAE,yBAAyB,CAAC,CAAC;YAChE,CAAC;QACH,CAAC;IACH,CAAC;IACD,IAAI,SAAS,CAAC,MAAM,KAAK,YAAY,IAAI,OAAO,SAAS,CAAC,GAAG,KAAK,QAAQ,EAAE,CAAC;QAC3E,OAAO,OAAO,CAAC,QAAQ,SAAS,CAAC,EAAE,mBAAmB,CAAC,CAAC;IAC1D,CAAC;IACD,OAAO,IAAmB,CAAC;AAC7B,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,MAAc;IAC7C,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;IAC3C,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IACnC,IAAI,MAA6B,CAAC;IAClC,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAA0B,CAAC;IAC3E,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,iBAAiB,CAAC,GAAG,IAAI,gDAAgD,CAAC,CAAC;IACvF,CAAC;IACD,IAAI,MAAM,CAAC,MAAM,KAAK,YAAY,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;QACnE,MAAM,IAAI,iBAAiB,CACzB,GAAG,IAAI,2EAA2E,CACnF,CAAC;IACJ,CAAC;IACD,OAAO;QACL,MAAM,EAAE,YAAY;QACpB,gBAAgB,EAAE,MAAM,CAAC,MAAM,CAAC,gBAAgB,CAAC;QACjD,KAAK,EAAE,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,YAAY,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;KAC5D,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,IAAiB;IACjD,MAAM,MAAM,GAAG,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,EAAE,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC;IACjD,QAAQ,IAAI,CAAC,MAAM,EAAE,CAAC;QACpB,KAAK,mBAAmB;YACtB,OAAO,IAAI,CAAC,SAAS,CAAC;gBACpB,GAAG,MAAM;gBACT,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE;gBACtB,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,GAAG,MAAM,CAAC,MAAM,IAAI,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC,IAAI,EAAE;aAC1E,CAAC,CAAC;QACL,KAAK,YAAY;YACf,OAAO,IAAI,CAAC,SAAS,CAAC,CAAC,GAAG,MAAM,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;QAC/C;YACE,OAAO,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;IAClC,CAAC;AACH,CAAC"}

package/dist/cli/check-diff.d.ts

@@ -0,0 +1,19 @@
+import { type AdoptedRule } from './adopted-rules.js';
+import type { Finding } from './check-evaluate.js';
+export type RuleChange = 'new' | 'changed';
+export interface RulePartition {
+    comparable: AdoptedRule[];
+    adoptedInChange: {
+        rule: AdoptedRule;
+        change: RuleChange;
+    }[];
+    removedInChange: AdoptedRule[];
+}
+export declare function partitionRules(head: readonly AdoptedRule[], base: readonly AdoptedRule[] | null): RulePartition;
+export declare function renameFinding(finding: Finding, renames: ReadonlyMap<string, string>): Finding;
+export interface FindingDiff {
+    introduced: Finding[];
+    fixed: Finding[];
+}
+export declare function diffFindings(base: readonly Finding[], head: readonly Finding[], renames: ReadonlyMap<string, string>): FindingDiff;
+//# sourceMappingURL=check-diff.d.ts.map

package/dist/cli/check-diff.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"check-diff.d.ts","sourceRoot":"","sources":["../../src/cli/check-diff.ts"],"names":[],"mappings":"AAAA,OAAO,EAAqB,KAAK,WAAW,EAAE,MAAM,oBAAoB,CAAC;AACzE,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,qBAAqB,CAAC;AAEnD,MAAM,MAAM,UAAU,GAAG,KAAK,GAAG,SAAS,CAAC;AAE3C,MAAM,WAAW,aAAa;IAC5B,UAAU,EAAE,WAAW,EAAE,CAAC;IAC1B,eAAe,EAAE;QAAE,IAAI,EAAE,WAAW,CAAC;QAAC,MAAM,EAAE,UAAU,CAAA;KAAE,EAAE,CAAC;IAC7D,eAAe,EAAE,WAAW,EAAE,CAAC;CAChC;AAED,wBAAgB,cAAc,CAC5B,IAAI,EAAE,SAAS,WAAW,EAAE,EAC5B,IAAI,EAAE,SAAS,WAAW,EAAE,GAAG,IAAI,GAClC,aAAa,CAgBf;AAKD,wBAAgB,aAAa,CAAC,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,WAAW,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,OAAO,CAS7F;AAED,MAAM,WAAW,WAAW;IAC1B,UAAU,EAAE,OAAO,EAAE,CAAC;IACtB,KAAK,EAAE,OAAO,EAAE,CAAC;CAClB;AAED,wBAAgB,YAAY,CAC1B,IAAI,EAAE,SAAS,OAAO,EAAE,EACxB,IAAI,EAAE,SAAS,OAAO,EAAE,EACxB,OAAO,EAAE,WAAW,CAAC,MAAM,EAAE,MAAM,CAAC,GACnC,WAAW,CASb"}

package/dist/cli/check-diff.js

@@ -0,0 +1,41 @@
+import { ruleDefinitionKey } from './adopted-rules.js';
+export function partitionRules(head, base) {
+    const baseById = new Map((base ?? []).map((rule) => [rule.id, rule]));
+    const headIds = new Set(head.map((rule) => rule.id));
+    const partition = {
+        comparable: [],
+        adoptedInChange: [],
+        removedInChange: (base ?? []).filter((rule) => !headIds.has(rule.id)),
+    };
+    for (const rule of head) {
+        const prior = baseById.get(rule.id);
+        if (prior === undefined)
+            partition.adoptedInChange.push({ rule, change: 'new' });
+        else if (ruleDefinitionKey(prior) !== ruleDefinitionKey(rule))
+            partition.adoptedInChange.push({ rule, change: 'changed' });
+        else
+            partition.comparable.push(rule);
+    }
+    return partition;
+}
+const identity = (finding) => [finding.ruleId, finding.file, finding.subject].join('\u0000');
+export function renameFinding(finding, renames) {
+    return {
+        ...finding,
+        file: renames.get(finding.file) ?? finding.file,
+        subject: finding.kind === 'target'
+            ? (renames.get(finding.subject) ?? finding.subject)
+            : finding.subject,
+    };
+}
+export function diffFindings(base, head, renames) {
+    const renamedBase = base.map((finding) => renameFinding(finding, renames));
+    const baseKeys = new Set(renamedBase.map(identity));
+    const headKeys = new Set(head.map(identity));
+    const byIdentity = (a, b) => identity(a).localeCompare(identity(b));
+    return {
+        introduced: head.filter((finding) => !baseKeys.has(identity(finding))).sort(byIdentity),
+        fixed: renamedBase.filter((finding) => !headKeys.has(identity(finding))).sort(byIdentity),
+    };
+}
+//# sourceMappingURL=check-diff.js.map

package/dist/cli/check-diff.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"check-diff.js","sourceRoot":"","sources":["../../src/cli/check-diff.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,iBAAiB,EAAoB,MAAM,oBAAoB,CAAC;AAWzE,MAAM,UAAU,cAAc,CAC5B,IAA4B,EAC5B,IAAmC;IAEnC,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC;IACtE,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC;IACrD,MAAM,SAAS,GAAkB;QAC/B,UAAU,EAAE,EAAE;QACd,eAAe,EAAE,EAAE;QACnB,eAAe,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;KACtE,CAAC;IACF,KAAK,MAAM,IAAI,IAAI,IAAI,EAAE,CAAC;QACxB,MAAM,KAAK,GAAG,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACpC,IAAI,KAAK,KAAK,SAAS;YAAE,SAAS,CAAC,eAAe,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC;aAC5E,IAAI,iBAAiB,CAAC,KAAK,CAAC,KAAK,iBAAiB,CAAC,IAAI,CAAC;YAC3D,SAAS,CAAC,eAAe,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC,CAAC;;YACzD,SAAS,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACvC,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,MAAM,QAAQ,GAAG,CAAC,OAAgB,EAAU,EAAE,CAC5C,CAAC,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;AAEjE,MAAM,UAAU,aAAa,CAAC,OAAgB,EAAE,OAAoC;IAClF,OAAO;QACL,GAAG,OAAO;QACV,IAAI,EAAE,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,OAAO,CAAC,IAAI;QAC/C,OAAO,EACL,OAAO,CAAC,IAAI,KAAK,QAAQ;YACvB,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,OAAO,CAAC,OAAO,CAAC;YACnD,CAAC,CAAC,OAAO,CAAC,OAAO;KACtB,CAAC;AACJ,CAAC;AAOD,MAAM,UAAU,YAAY,CAC1B,IAAwB,EACxB,IAAwB,EACxB,OAAoC;IAEpC,MAAM,WAAW,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,aAAa,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC;IAC3E,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,WAAW,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC;IACpD,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC;IAC7C,MAAM,UAAU,GAAG,CAAC,CAAU,EAAE,CAAU,EAAU,EAAE,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC;IAC9F,OAAO;QACL,UAAU,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC;QACvF,KAAK,EAAE,WAAW,CAAC,MAAM,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC;KAC1F,CAAC;AACJ,CAAC"}

package/dist/cli/check-evaluate.d.ts

@@ -0,0 +1,10 @@
+import type { AdoptedRule } from './adopted-rules.js';
+export type SubjectKind = 'specifier' | 'target' | 'file';
+export interface Finding {
+    ruleId: string;
+    file: string;
+    subject: string;
+    kind: SubjectKind;
+}
+export declare function evaluateRules(appDir: string, rules: readonly AdoptedRule[]): Finding[];
+//# sourceMappingURL=check-evaluate.d.ts.map

package/dist/cli/check-evaluate.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"check-evaluate.d.ts","sourceRoot":"","sources":["../../src/cli/check-evaluate.ts"],"names":[],"mappings":"AAKA,OAAO,KAAK,EAAE,WAAW,EAAuC,MAAM,oBAAoB,CAAC;AAE3F,MAAM,MAAM,WAAW,GAAG,WAAW,GAAG,QAAQ,GAAG,MAAM,CAAC;AAE1D,MAAM,WAAW,OAAO;IACtB,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,EAAE,WAAW,CAAC;CACnB;AAiCD,wBAAgB,aAAa,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,SAAS,WAAW,EAAE,GAAG,OAAO,EAAE,CAkDtF"}

package/dist/cli/check-evaluate.js

@@ -0,0 +1,83 @@
+import { detectConsoleIsolation } from '../detector/console-isolation-detector.js';
+import { detectDeepRelativeImports } from '../detector/deep-relative-detector.js';
+import { detectForbiddenImports } from '../detector/pattern-detector.js';
+import { detectPublicApiBoundaries } from '../detector/public-api-detector.js';
+import { detectTestIsolation } from '../detector/test-isolation-detector.js';
+const toPatternConfig = (rule) => ({
+    id: rule.id,
+    name: rule.id,
+    description: rule.statement,
+    roles: rule.roles,
+    forbidden: rule.forbidden.map((marker) => new RegExp(marker.source, marker.flags)),
+});
+function forbiddenImportFindings(appDir, rules) {
+    const findings = [];
+    const modes = ['deep', 'fast'];
+    for (const mode of modes) {
+        const group = rules.filter((rule) => rule.mode === mode);
+        if (group.length === 0)
+            continue;
+        const results = detectForbiddenImports(appDir, group.map(toPatternConfig), {
+            resolve: mode === 'deep',
+        });
+        results.forEach((result, index) => {
+            for (const violation of result.violations) {
+                findings.push({
+                    ruleId: group[index].id,
+                    file: violation.file,
+                    subject: violation.specifier,
+                    kind: 'specifier',
+                });
+            }
+        });
+    }
+    return findings;
+}
+export function evaluateRules(appDir, rules) {
+    const findings = forbiddenImportFindings(appDir, rules.filter((rule) => rule.family === 'forbidden-imports'));
+    const byFamily = (family) => rules.filter((rule) => rule.family === family);
+    for (const rule of byFamily('test-isolation')) {
+        for (const violation of detectTestIsolation(appDir).violations) {
+            findings.push({
+                ruleId: rule.id,
+                file: violation.file,
+                subject: violation.target,
+                kind: 'target',
+            });
+        }
+    }
+    for (const rule of byFamily('console-isolation')) {
+        for (const violation of detectConsoleIsolation(appDir).violations) {
+            findings.push({ ruleId: rule.id, file: violation.file, subject: '', kind: 'file' });
+        }
+    }
+    for (const rule of byFamily('import-style')) {
+        for (const violation of detectDeepRelativeImports(appDir).violations) {
+            findings.push({
+                ruleId: rule.id,
+                file: violation.file,
+                subject: violation.specifier,
+                kind: 'specifier',
+            });
+        }
+    }
+    const publicApi = byFamily('public-api');
+    if (publicApi.length > 0) {
+        const groups = detectPublicApiBoundaries(appDir).groups;
+        for (const rule of publicApi) {
+            if (rule.family !== 'public-api')
+                continue;
+            const group = groups.find((candidate) => candidate.dir === rule.dir);
+            for (const violation of group?.violations ?? []) {
+                findings.push({
+                    ruleId: rule.id,
+                    file: violation.file,
+                    subject: violation.target,
+                    kind: 'target',
+                });
+            }
+        }
+    }
+    return findings;
+}
+//# sourceMappingURL=check-evaluate.js.map

package/dist/cli/check-evaluate.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"check-evaluate.js","sourceRoot":"","sources":["../../src/cli/check-evaluate.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,sBAAsB,EAAE,MAAM,2CAA2C,CAAC;AACnF,OAAO,EAAE,yBAAyB,EAAE,MAAM,uCAAuC,CAAC;AAClF,OAAO,EAAE,sBAAsB,EAAsB,MAAM,iCAAiC,CAAC;AAC7F,OAAO,EAAE,yBAAyB,EAAE,MAAM,oCAAoC,CAAC;AAC/E,OAAO,EAAE,mBAAmB,EAAE,MAAM,wCAAwC,CAAC;AAY7E,MAAM,eAAe,GAAG,CAAC,IAAyB,EAAiB,EAAE,CAAC,CAAC;IACrE,EAAE,EAAE,IAAI,CAAC,EAAE;IACX,IAAI,EAAE,IAAI,CAAC,EAAE;IACb,WAAW,EAAE,IAAI,CAAC,SAAS;IAC3B,KAAK,EAAE,IAAI,CAAC,KAAK;IACjB,SAAS,EAAE,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,IAAI,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC;CACnF,CAAC,CAAC;AAEH,SAAS,uBAAuB,CAAC,MAAc,EAAE,KAAqC;IACpF,MAAM,QAAQ,GAAc,EAAE,CAAC;IAC/B,MAAM,KAAK,GAAqB,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACjD,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,MAAM,KAAK,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC;QACzD,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;YAAE,SAAS;QACjC,MAAM,OAAO,GAAG,sBAAsB,CAAC,MAAM,EAAE,KAAK,CAAC,GAAG,CAAC,eAAe,CAAC,EAAE;YACzE,OAAO,EAAE,IAAI,KAAK,MAAM;SACzB,CAAC,CAAC;QACH,OAAO,CAAC,OAAO,CAAC,CAAC,MAAM,EAAE,KAAK,EAAE,EAAE;YAChC,KAAK,MAAM,SAAS,IAAI,MAAM,CAAC,UAAU,EAAE,CAAC;gBAC1C,QAAQ,CAAC,IAAI,CAAC;oBACZ,MAAM,EAAE,KAAK,CAAC,KAAK,CAAE,CAAC,EAAE;oBACxB,IAAI,EAAE,SAAS,CAAC,IAAI;oBACpB,OAAO,EAAE,SAAS,CAAC,SAAS;oBAC5B,IAAI,EAAE,WAAW;iBAClB,CAAC,CAAC;YACL,CAAC;QACH,CAAC,CAAC,CAAC;IACL,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,MAAc,EAAE,KAA6B;IACzE,MAAM,QAAQ,GAAG,uBAAuB,CACtC,MAAM,EACN,KAAK,CAAC,MAAM,CAAC,CAAC,IAAI,EAA+B,EAAE,CAAC,IAAI,CAAC,MAAM,KAAK,mBAAmB,CAAC,CACzF,CAAC;IACF,MAAM,QAAQ,GAAG,CAAC,MAA6B,EAAiB,EAAE,CAChE,KAAK,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,KAAK,MAAM,CAAC,CAAC;IAEjD,KAAK,MAAM,IAAI,IAAI,QAAQ,CAAC,gBAAgB,CAAC,EAAE,CAAC;QAC9C,KAAK,MAAM,SAAS,IAAI,mBAAmB,CAAC,MAAM,CAAC,CAAC,UAAU,EAAE,CAAC;YAC/D,QAAQ,CAAC,IAAI,CAAC;gBACZ,MAAM,EAAE,IAAI,CAAC,EAAE;gBACf,IAAI,EAAE,SAAS,CAAC,IAAI;gBACpB,OAAO,EAAE,SAAS,CAAC,MAAM;gBACzB,IAAI,EAAE,QAAQ;aACf,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IACD,KAAK,MAAM,IAAI,IAAI,QAAQ,CAAC,mBAAmB,CAAC,EAAE,CAAC;QACjD,KAAK,MAAM,SAAS,IAAI,sBAAsB,CAAC,MAAM,CAAC,CAAC,UAAU,EAAE,CAAC;YAClE,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,EAAE,IAAI,EAAE,SAAS,CAAC,IAAI,EAAE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC;QACtF,CAAC;IACH,CAAC;IACD,KAAK,MAAM,IAAI,IAAI,QAAQ,CAAC,cAAc,CAAC,EAAE,CAAC;QAC5C,KAAK,MAAM,SAAS,IAAI,yBAAyB,CAAC,MAAM,CAAC,CAAC,UAAU,EAAE,CAAC;YACrE,QAAQ,CAAC,IAAI,CAAC;gBACZ,MAAM,EAAE,IAAI,CAAC,EAAE;gBACf,IAAI,EAAE,SAAS,CAAC,IAAI;gBACpB,OAAO,EAAE,SAAS,CAAC,SAAS;gBAC5B,IAAI,EAAE,WAAW;aAClB,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IACD,MAAM,SAAS,GAAG,QAAQ,CAAC,YAAY,CAAC,CAAC;IACzC,IAAI,SAAS,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACzB,MAAM,MAAM,GAAG,yBAAyB,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC;QACxD,KAAK,MAAM,IAAI,IAAI,SAAS,EAAE,CAAC;YAC7B,IAAI,IAAI,CAAC,MAAM,KAAK,YAAY;gBAAE,SAAS;YAC3C,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,GAAG,KAAK,IAAI,CAAC,GAAG,CAAC,CAAC;YACrE,KAAK,MAAM,SAAS,IAAI,KAAK,EAAE,UAAU,IAAI,EAAE,EAAE,CAAC;gBAChD,QAAQ,CAAC,IAAI,CAAC;oBACZ,MAAM,EAAE,IAAI,CAAC,EAAE;oBACf,IAAI,EAAE,SAAS,CAAC,IAAI;oBACpB,OAAO,EAAE,SAAS,CAAC,MAAM;oBACzB,IAAI,EAAE,QAAQ;iBACf,CAAC,CAAC;YACL,CAAC;QACH,CAAC;IACH,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC"}

package/dist/cli/check-git.d.ts

@@ -0,0 +1,12 @@
+export declare class CheckSetupError extends Error {
+}
+export declare const repoRoot: (cwd: string) => string;
+export declare function defaultBase(root: string): string;
+export declare function mergeBase(root: string, base: string): string;
+export declare function renamedPaths(root: string, commit: string): Map<string, string>;
+export interface BaseTree {
+    root: string;
+    dispose: () => void;
+}
+export declare function checkoutBase(root: string, commit: string, appRelative: string): BaseTree;
+//# sourceMappingURL=check-git.d.ts.map

package/dist/cli/check-git.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"check-git.d.ts","sourceRoot":"","sources":["../../src/cli/check-git.ts"],"names":[],"mappings":"AAMA,qBAAa,eAAgB,SAAQ,KAAK;CAAG;AAgB7C,eAAO,MAAM,QAAQ,GAAI,KAAK,MAAM,KAAG,MAA2D,CAAC;AAEnG,wBAAgB,WAAW,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAQhD;AAED,wBAAgB,SAAS,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,MAAM,CAQ5D;AAED,wBAAgB,YAAY,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,CAc9E;AAED,MAAM,WAAW,QAAQ;IACvB,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,IAAI,CAAC;CACrB;AAgBD,wBAAgB,YAAY,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,GAAG,QAAQ,CAoBxF"}