arkgate 4.8.22 → 4.8.24

package/dist/eslint/index.d.ts

@@ -1,32 +1,4 @@
-import { A as ArkConfig } from '../configTypes-CTELo87-.js';
-
-type RuleContext$1 = {
-    report(descriptor: Record<string, unknown>): void;
-    filename?: string;
-    physicalFilename?: string;
-    getFilename?: () => string;
-    options?: unknown[];
-};
-type AstNode$1 = {
-    type?: string;
-    name?: string;
-    value?: unknown;
-    source?: AstNode$1;
-    callee?: AstNode$1;
-    object?: AstNode$1;
-    property?: AstNode$1;
-    arguments?: AstNode$1[];
-    importKind?: string;
-    exportKind?: string;
-    specifiers?: AstNode$1[];
-    loc?: {
-        start?: {
-            line?: number;
-            column?: number;
-        };
-    };
-    computed?: boolean;
-};
+import { A as ArkConfig } from '../configTypes-BJbaeoj4.js';
 
 /**
  * Pure layer-glob matching for ark.config.json.
@@ -48,7 +20,8 @@ type LayerConfig = {
  * - `path` (default, also the absent value): every literal and every star
  *   binding. `lib/features` plus two stars → `lib/features/projects/rfi`.
  *   Byte-identical to the ids baselines and `allowedCrossSlice` already use.
- * - `stars`: last literal segment plus the star bindings.
+ * - `stars`: last literal segment plus every star binding (a star before the
+ *   last literal is kept too: `modules` / `*` / `api` / `*` → `orders/api/v1`).
  *   `lib/features` plus two stars, and `lib/repositories/features` plus two
  *   stars, both → `features/projects/rfi`.
  *   Prefix stripping stays inside `bindAnchoredSlice`. Bare names are unchanged.
@@ -83,15 +56,16 @@ type EdgeRule = {
      * also when the key is absent) the slice id includes the literal prefix
      * plus the directories the stars bind (`lib/features/projects/rfi`), so
      * parallel trees get different ids. With `"stars"` it is the last literal
-     * plus the star bindings, so the same feature has one id across parallel
+     * plus every star binding, so the same feature has one id across parallel
      * trees.
      * When omitted, inferred from the layer's glob patterns (segment before a wildcard).
      */
     sliceFolders?: string[];
     /**
      * How a starred `sliceFolders` prefix is named. Absent and `"path"` keep
-     * today's ids. `"stars"` is the last literal plus the star bindings, so the
-     * same feature has one id across parallel trees.
+     * today's ids. `"stars"` is the last literal plus every star binding, in
+     * path order (`modules` / `*` / `api` / `*` binds `orders/api/v1`), so the same feature
+     * has one id across parallel trees.
      */
     sliceIdentity?: SliceIdentity;
     /**
@@ -118,17 +92,81 @@ type EdgeRule = {
      * (`features/auth`) or by bare slice name (`auth`), case-insensitively — a bare
      * name matches that name under *any* slice folder, so write the full id in a repo
      * with several slice parents. Everything not declared still denies.
+     * `*` is a literal character on this list, not a wildcard.
      */
     allowedCrossSlice?: CrossSliceEdge[];
     /**
-     * When `"deny"`, a declared shared root may not import a slice. Default
-     * (absent) keeps that hop allowed. Slice → shared stays allowed either way.
-     * `allowedCrossSlice` does not excuse this hop.
+     * `"deny"`: a shared root may not import a slice. `"deny-cross-parent"` leaves
+     * that hop allowed; a whole-graph pass then reports a slice that reaches
+     * another universe only through shared. Absent keeps the hop allowed.
+     * `allowedCrossSlice` does not excuse `"deny"`. The object form
+     * `{ mode: "deny-cross-parent", stopAt }` names composition roots the walk
+     * never starts at or passes through. Read it through
+     * {@link sharedImportsSliceMode} / {@link sharedImportsSliceStopAt}.
+     */
+    sharedImportsSlice?: SharedImportsSliceSetting;
+    /**
+     * Optional inner wall under this rule's universe wall. Absent: the universe
+     * wall is the whole decision and check output stays byte-identical.
+     * Present: a universe cross-slice deny is `CROSS_PARENT_SLICE`. An edge the
+     * universe wall allows may still deny on the child wall.
      */
-    sharedImportsSlice?: 'deny';
+    childSlices?: ChildSlices;
     /** Optional override message for scanners / write-gate. */
     message?: string;
 };
+/**
+ * Inner slice wall. `sliceFolders` names children under the universe.
+ * A side with no child id (a flat file, or a `commonFolders` directory) is
+ * universe common. `siblings` is `deny`, `advisory`, or `{ default, enforce }`.
+ * Cross-parent has no knob. `parentMayImportChild` defaults to false.
+ * `allowedCrossSlice` here may use a whole-segment `*`. It clears only a
+ * sibling crossing, and only after the universe wall has allowed the edge.
+ */
+/** A folder outside the slice trees, borrowed onto a child id until it moves. */
+type SliceAlias = {
+    /** Source path glob. Only files the slice folders do not already classify. */
+    from: string;
+    /** Child slice id: the universe id plus one child segment. */
+    to: string;
+};
+type ChildSlices = {
+    sliceFolders: string[];
+    sliceIdentity?: SliceIdentity;
+    commonFolders?: string[];
+    siblings?: ChildSliceSiblings;
+    parentMayImportChild?: boolean;
+    /** Text for inner-wall findings (sibling, common → child). Absent: ArkGate default, never the rule message. */
+    message?: string;
+    /** Directed child allowances. `*` matches one whole segment. Never a universe excuse. */
+    allowedCrossSlice?: CrossSliceEdge[];
+    /** Unclassified files governed as this child. Debt, not a destination. */
+    sliceAliases?: SliceAlias[];
+};
+/** How the child wall treats a sibling crossing. Absent means `deny`. */
+type ChildSliceSiblingsMode = 'deny' | 'advisory';
+/**
+ * Per-subtree sibling enforcement. `default` is everyone not listed.
+ * `enforce` names child slice ids or subtree paths. The list never loosens deny.
+ */
+type ChildSliceSiblingsEnforce = {
+    default: ChildSliceSiblingsMode;
+    enforce?: string[];
+    /**
+     * Anti-growth for advisory crossings against a baseline. Absent: on only when
+     * the baseline already records an advisory crossing of this rule. `true`:
+     * always when a baseline is in use. `false`: measure only.
+     */
+    ratchet?: boolean;
+};
+type ChildSliceSiblings = ChildSliceSiblingsMode | ChildSliceSiblingsEnforce;
+/** `sharedImportsSlice` string modes. */
+type SharedImportsSliceMode = 'deny' | 'deny-cross-parent';
+/** String mode, or the object form that carries composition-root stops. */
+type SharedImportsSliceSetting = SharedImportsSliceMode | {
+    mode: 'deny-cross-parent';
+    stopAt: string[];
+};
 /** A directed slice-to-slice edge the repo declares on purpose (peerIsolation). */
 type CrossSliceEdge = {
     /** Importing slice id (`features/checkout`) or bare slice name (`checkout`). */
@@ -158,37 +196,11 @@ declare function patternSpecificity(pattern: string, relPath?: string): number;
 declare function layerForRelativePath(relPath: string, layers: LayerConfig[] | undefined): string | undefined;
 declare function isEdgeDenied(rules: EdgeRule[] | undefined, from: string, to: string, options?: EdgeCheckOptions): boolean;
 
-type RuleContext = {
-    report(descriptor: Record<string, unknown>): void;
-    /** ESLint 9+ / 10: preferred path on the context object. */
-    filename?: string;
-    /** ESLint 8-style physical path when linting with processors / virtual files. */
-    physicalFilename?: string;
-    /** ESLint ≤8 API — still present on some hosts; removed in ESLint 10. */
-    getFilename?: () => string;
-    /** ESLint 9+ source/scope API. */
-    sourceCode?: SourceCode;
-    /** ESLint ≤8 source/scope API. */
-    getSourceCode?: () => SourceCode;
-    options?: unknown[];
-};
-type ScopeVariable = {
-    defs?: unknown[];
-};
-type ScopeReference = {
-    identifier?: AstNode;
-    resolved?: ScopeVariable | null;
-    isValueReference?: boolean;
-};
-type Scope = {
-    set?: Map<string, ScopeVariable>;
-    references?: ScopeReference[];
-    upper?: Scope | null;
-};
-type SourceCode = {
-    getScope?: (node: AstNode) => Scope;
-};
-type RuleListener = Record<string, (node: AstNode) => void>;
+/**
+ * Shared ESLint adapter plumbing: context shapes, filename / source helpers, and the
+ * adapter-diagnostic report path. Channel routing lives in reportChannels.ts.
+ */
+
 type AstNode = {
     type?: string;
     name?: string;
@@ -207,14 +219,62 @@ type AstNode = {
     specifiers?: AstNode[];
     parent?: AstNode;
     init?: AstNode;
+    id?: AstNode;
+    left?: AstNode;
+    argument?: AstNode;
+    expression?: AstNode;
+    quasis?: Array<{
+        value?: {
+            cooked?: string | null;
+        };
+    }>;
+    expressions?: unknown[];
     computed?: boolean;
+    optional?: boolean;
     loc?: {
         start?: {
             line?: number;
             column?: number;
         };
+        end?: {
+            line?: number;
+            column?: number;
+        };
     };
 };
+type ScopeVariable = {
+    defs?: unknown[];
+};
+type ScopeReference = {
+    identifier?: AstNode;
+    resolved?: ScopeVariable | null;
+    isValueReference?: boolean;
+};
+type Scope = {
+    set?: Map<string, ScopeVariable>;
+    references?: ScopeReference[];
+    upper?: Scope | null;
+};
+type SourceCode = {
+    getScope?: (node: AstNode) => Scope;
+    getText?: () => string;
+    text?: string;
+};
+type RuleContext = {
+    report(descriptor: Record<string, unknown>): void;
+    /** ESLint 9+ / 10: preferred path on the context object. */
+    filename?: string;
+    /** ESLint 8-style physical path when linting with processors / virtual files. */
+    physicalFilename?: string;
+    /** ESLint ≤8 API — still present on some hosts; removed in ESLint 10. */
+    getFilename?: () => string;
+    /** ESLint 9+ source/scope API. */
+    sourceCode?: SourceCode;
+    /** ESLint ≤8 source/scope API. */
+    getSourceCode?: () => SourceCode;
+    options?: unknown[];
+};
+type RuleListener = Record<string, (node: AstNode) => void>;
 type ArkRule = {
     meta: {
         type: 'problem';
@@ -226,112 +286,72 @@ type ArkRule = {
     };
     create(context: RuleContext): RuleListener;
 };
-type ArkEslintPlugin = {
-    rules: Record<string, ArkRule>;
-    configs?: Record<string, unknown>;
-};
+
+/** Nearest `ark.config.json` at or above the linted file (memoized per directory). */
 declare function findConfigPath(startFile: string): string | null;
+/**
+ * Parse the root config (public helper; throws ArkConfigValidationError on invalid config).
+ * Rules use `loadArkContract`, which never throws.
+ */
 declare function loadArkConfig(configPath: string): ArkConfig | null;
 /**
- * Read tsconfig paths/baseUrl for ESLint alias parity (P0-C).
- * JSONC-tolerant strip of // and /* comments; supports simple extends of a relative JSON.
- * Does not claim full TypeScript resolution (project refs, complex multi-target, wildcards beyond trailing *).
+ * Fingerprint of the Ark contract that applies under `startDir` (default: cwd). ESLint
+ * hashes `settings`, so a recommended config carrying this value invalidates `--cache`
+ * results when ark.config.json or a referenced ArkRules file changes.
  */
-declare function readTsconfigPathAliases(startDir: string): {
+declare function contractFingerprint(startDir?: string): string | null;
+
+type TsconfigAlias = {
+    /** Pattern text before `*` (whole pattern when it has no `*`). */
+    from: string;
+    /** First target with the trailing `*` removed (legacy shape). */
+    to: string;
+    /** Text after `*` in the pattern ('' for trailing-star patterns). */
+    suffix: string;
+    wildcard: boolean;
+    /** All substitution targets, in declaration order. */
+    targets: string[];
+};
+type TsconfigAliasSet = {
     baseUrl: string;
-    aliases: Array<{
-        from: string;
-        to: string;
-    }>;
+    aliases: TsconfigAlias[];
 };
+/**
+ * Read tsconfig paths/baseUrl for ESLint alias parity (P0-C) from the nearest tsconfig.json
+ * at or above `startDir`.
+ */
+declare function readTsconfigPathAliases(startDir: string): TsconfigAliasSet;
 /** Resolve relative import specifier to an absolute path candidate (TS-oriented). */
 declare function resolveRelativeImport(fromFile: string, specifier: string): string | null;
 /**
  * Resolve relative or tsconfig path-alias import to an on-disk file.
- * Bare packages (no matching alias) return null — CI/TS remain source of truth there.
+ * The tsconfig is the one nearest to `fromFile` (same as the CLI). `projectRoot` is only a
+ * fallback start directory when `fromFile` is empty. Bare packages return null.
  */
 declare function resolveImportSpecifier(fromFile: string, specifier: string, projectRoot?: string | null): string | null;
-/**
- * Config-driven layer import boundary (primary editor gate).
- * Replaces path-token domain/infra heuristics when ark.config.json is present.
- * Rule id kept as `no-domain-infra-imports` for recommended-config / upgrade stability.
- */
+
+type ArkEslintPlugin = {
+    meta: {
+        name: string;
+        version: string;
+    };
+    rules: Record<string, ArkRule>;
+    configs?: Record<string, unknown>;
+};
 declare const noDomainInfraImports: ArkRule;
 declare const noRawEventPublish: ArkRule;
 declare const requirePublishSource: ArkRule;
 declare const noForbiddenGlobals: ArkRule;
 declare const noDeniedCapabilities: ArkRule;
-declare const noArkRunKernelInDomain: {
-    meta: {
-        type: "problem";
-        docs: {
-            description: string;
-        };
-        messages: Record<string, string>;
-        schema: unknown[];
-    };
-    create(context: RuleContext$1): {
-        [x: string]: (node: AstNode$1) => void;
-    };
-};
-declare const noArkRunDirectNew: {
-    meta: {
-        type: "problem";
-        docs: {
-            description: string;
-        };
-        messages: Record<string, string>;
-        schema: unknown[];
-    };
-    create(context: RuleContext$1): {
-        [x: string]: (node: AstNode$1) => void;
-    };
-};
-declare const noArkRunTransportBypass: {
-    meta: {
-        type: "problem";
-        docs: {
-            description: string;
-        };
-        messages: Record<string, string>;
-        schema: unknown[];
-    };
-    create(context: RuleContext$1): {
-        [x: string]: (node: AstNode$1) => void;
-    };
-};
-
-declare const noArkOrderKernelInDomain: {
-    meta: {
-        type: "problem";
-        docs: {
-            description: "ARKORDER_KERNEL_IN_DOMAIN" | "ARKORDER_GENERIC_UPDATE";
-        };
-        messages: {
-            denied: string;
-        };
-        schema: never[];
-    };
-    create(context: RuleContext$1): {
-        [x: string]: (node: AstNode$1) => void;
-    };
-};
-declare const noArkOrderGenericUpdate: {
-    meta: {
-        type: "problem";
-        docs: {
-            description: "ARKORDER_KERNEL_IN_DOMAIN" | "ARKORDER_GENERIC_UPDATE";
-        };
-        messages: {
-            denied: string;
-        };
-        schema: never[];
-    };
-    create(context: RuleContext$1): {
-        [x: string]: (node: AstNode$1) => void;
-    };
-};
-
+declare const noArkRunKernelInDomain: ArkRule;
+declare const noArkRunDirectNew: ArkRule;
+declare const noArkRunTransportBypass: ArkRule;
+declare const noArkOrderKernelInDomain: ArkRule;
+declare const noArkOrderGenericUpdate: ArkRule;
+declare const arkRulesStructureRule: ArkRule;
+declare const architectureAdvisory: ArkRule;
+declare const rules: Record<string, ArkRule>;
 declare const plugin: ArkEslintPlugin;
+declare const configs: Record<string, unknown>;
 
-export { plugin as default, findConfigPath, globToRegExp, isEdgeDenied, layerForRelativePath, loadArkConfig, noArkOrderGenericUpdate, noArkOrderKernelInDomain, noArkRunDirectNew, noArkRunKernelInDomain, noArkRunTransportBypass, noDeniedCapabilities, noDomainInfraImports, noForbiddenGlobals, noRawEventPublish, patternSpecificity, plugin, readTsconfigPathAliases, requirePublishSource, resolveImportSpecifier, resolveRelativeImport };
+export { architectureAdvisory, arkRulesStructureRule, configs, contractFingerprint, plugin as default, findConfigPath, globToRegExp, isEdgeDenied, layerForRelativePath, loadArkConfig, noArkOrderGenericUpdate, noArkOrderKernelInDomain, noArkRunDirectNew, noArkRunKernelInDomain, noArkRunTransportBypass, noDeniedCapabilities, noDomainInfraImports, noForbiddenGlobals, noRawEventPublish, patternSpecificity, plugin, readTsconfigPathAliases, requirePublishSource, resolveImportSpecifier, resolveRelativeImport, rules };