code-auditor-mcp 3.4.18 → 3.6.0

package/dist/analyzers/ruleRegistry.js

@@ -11,7 +11,6 @@ export const RULE_REGISTRY = {
         analyzer: 'solid',
         field: 'rule',
         input: ['files'],
-        gating: true,
         resolvable: true,
         message: 'Class "{name}" has {methods} methods, exceeding the maximum of {max}. Consider splitting responsibilities.',
         docs: 'solid/class-size',
@@ -32,7 +31,6 @@ export const RULE_REGISTRY = {
         analyzer: 'solid',
         field: 'rule',
         input: ['files'],
-        gating: false,
         resolvable: false,
         message: 'Method "{name}" has cyclomatic complexity {complexity}, exceeding the maximum of {max}.',
         docs: 'solid/method-complexity',
@@ -50,7 +48,6 @@ export const RULE_REGISTRY = {
         analyzer: 'solid',
         field: 'rule',
         input: ['files'],
-        gating: false,
         resolvable: false,
         message: 'Class "{name}" violates the Open/Closed Principle.',
         docs: 'solid/open-closed',
@@ -68,7 +65,6 @@ export const RULE_REGISTRY = {
         analyzer: 'solid',
         field: 'rule',
         input: ['files'],
-        gating: true,
         resolvable: true,
         message: 'Function "{name}" has {count} {metric}, exceeding the maximum of {max}. Break it down.',
         docs: 'solid/single-responsibility',
@@ -89,9 +85,8 @@ export const RULE_REGISTRY = {
         analyzer: 'solid',
         field: 'rule',
         input: ['files'],
-        gating: false,
         resolvable: false,
-        message: 'Interface "{name}" violates the Interface Segregation Principle.',
+        message: 'Interface "{name}" has many members.',
         docs: 'solid/interface-segregation',
         thresholds: [],
         samples: {
@@ -107,17 +102,16 @@ export const RULE_REGISTRY = {
         analyzer: 'solid',
         field: 'rule',
         input: ['files'],
-        gating: false,
         resolvable: false,
-        message: 'Class "{name}" violates the Liskov Substitution Principle.',
+        message: 'Method "{name}" overrides a parent method and throws where the parent does not.',
         docs: 'solid/liskov-substitution',
         thresholds: [],
         samples: {
             valid: [
-                { code: 'class Bird {\n  fly() { return "flying"; }\n}', nearMiss: true },
+                { code: 'class Bird {\n  fly() { return "flying"; }\n}\nclass Sparrow extends Bird {\n  fly() { return "flying"; }\n}', nearMiss: true },
             ],
             invalid: [
-                { code: 'class Ostrich extends Bird {\n  fly() { throw new Error("cannot fly"); }\n}' },
+                { code: 'class Bird {\n  fly() { return "flying"; }\n}\nclass Ostrich extends Bird {\n  fly() { throw new Error("cannot fly"); }\n}' },
             ],
         },
     },
@@ -125,7 +119,6 @@ export const RULE_REGISTRY = {
         analyzer: 'solid',
         field: 'rule',
         input: ['files'],
-        gating: false,
         resolvable: false,
         message: 'Module "{name}" violates the Dependency Inversion Principle.',
         docs: 'solid/dependency-inversion',
@@ -144,7 +137,6 @@ export const RULE_REGISTRY = {
         analyzer: 'dry',
         field: 'rule',
         input: ['files'],
-        gating: true,
         resolvable: true,
         message: 'Duplicate code block detected ({lines} lines). First occurrence at {file}:{line}.',
         docs: 'dry/duplicate',
@@ -166,7 +158,6 @@ export const RULE_REGISTRY = {
         field: 'rule',
         configGate: 'checkStructuralSimilarity',
         input: ['files'],
-        gating: false,
         resolvable: false,
         message: 'Structurally similar code block detected ({similarity}% similar to {file}:{line}).',
         docs: 'dry/structural-similarity',
@@ -185,7 +176,6 @@ export const RULE_REGISTRY = {
         field: 'rule',
         configGate: 'checkStrings',
         input: ['files'],
-        gating: false,
         resolvable: false,
         message: 'String literal "{text}" is duplicated {count} times.',
         docs: 'duplicate-string-literal',
@@ -204,7 +194,6 @@ export const RULE_REGISTRY = {
         field: 'rule',
         configGate: 'checkImports',
         input: ['files'],
-        gating: false,
         resolvable: false,
         message: 'Duplicate import of "{module}".',
         docs: 'duplicate-import',
@@ -223,7 +212,6 @@ export const RULE_REGISTRY = {
         analyzer: 'data-access',
         field: 'rule',
         input: ['files'],
-        gating: true,
         resolvable: true,
         message: 'Potential SQL injection risk in {method}. Use parameterized queries.',
         docs: 'sql-injection-risk',
@@ -244,7 +232,6 @@ export const RULE_REGISTRY = {
         analyzer: 'data-access',
         field: 'rule',
         input: ['schema'],
-        gating: false,
         resolvable: false,
         message: 'Query on {tables} is missing an organization/tenant filter.',
         docs: 'missing-org-filter',
@@ -262,9 +249,8 @@ export const RULE_REGISTRY = {
         analyzer: 'data-access',
         field: 'rule',
         input: ['files'],
-        gating: false,
         resolvable: false,
-        message: 'Complex query with {tables} tables may have performance issues.',
+        message: 'Query references {tables} tables.',
         docs: 'complex-query',
         thresholds: ['performanceThresholds.joinedTableCount'],
         samples: {
@@ -280,9 +266,8 @@ export const RULE_REGISTRY = {
         analyzer: 'data-access',
         field: 'rule',
         input: ['files'],
-        gating: false,
         resolvable: false,
-        message: 'Unfiltered query on {tables} may cause performance issues.',
+        message: 'Query on {tables} has no filter.',
         docs: 'unfiltered-query',
         thresholds: [],
         samples: {
@@ -298,7 +283,6 @@ export const RULE_REGISTRY = {
         analyzer: 'data-access',
         field: 'rule',
         input: ['files'],
-        gating: false,
         resolvable: false,
         message: 'Hardcoded database connection string detected.',
         docs: 'hardcoded-connection',
@@ -316,7 +300,6 @@ export const RULE_REGISTRY = {
         analyzer: 'data-access',
         field: 'rule',
         input: ['files'],
-        gating: false,
         resolvable: false,
         message: 'Database query inside a loop detected in {method}.',
         docs: 'loop-query',
@@ -335,14 +318,13 @@ export const RULE_REGISTRY = {
         analyzer: 'documentation',
         field: 'rule',
         input: ['files'],
-        gating: false,
         resolvable: false,
-        message: 'File is missing a documentation header comment.',
+        message: 'File is missing a leading documentation comment.',
         docs: 'file-documentation',
         thresholds: ['minDescriptionLength'],
         samples: {
             valid: [
-                { code: '/** Core utilities for this module. */\nexport const a = 1;', nearMiss: true },
+                { code: '/** @fileoverview Core utilities for this module. */\nexport const a = 1;', nearMiss: true },
             ],
             invalid: [
                 { code: 'export const a = 1;' },
@@ -353,9 +335,8 @@ export const RULE_REGISTRY = {
         analyzer: 'documentation',
         field: 'rule',
         input: ['files'],
-        gating: false,
         resolvable: false,
-        message: 'Function "{name}" is missing a JSDoc comment.',
+        message: 'Function "{name}" is missing a doc comment.',
         docs: 'function-documentation',
         thresholds: ['minDescriptionLength'],
         samples: {
@@ -371,7 +352,6 @@ export const RULE_REGISTRY = {
         analyzer: 'documentation',
         field: 'rule',
         input: ['files'],
-        gating: false,
         resolvable: false,
         message: 'Parameter "{name}" in function "{func}" is missing a @param tag.',
         docs: 'parameter-documentation',
@@ -389,7 +369,6 @@ export const RULE_REGISTRY = {
         analyzer: 'documentation',
         field: 'rule',
         input: ['files'],
-        gating: false,
         resolvable: false,
         message: 'Function "{name}" is missing a @returns tag.',
         docs: 'return-documentation',
@@ -407,9 +386,8 @@ export const RULE_REGISTRY = {
         analyzer: 'documentation',
         field: 'rule',
         input: ['files'],
-        gating: false,
         resolvable: false,
-        message: 'Class "{name}" is missing a JSDoc comment.',
+        message: 'Class "{name}" is missing a doc comment.',
         docs: 'class-documentation',
         thresholds: ['minDescriptionLength', 'docsMinLines'],
         samples: {
@@ -425,9 +403,8 @@ export const RULE_REGISTRY = {
         analyzer: 'documentation',
         field: 'rule',
         input: ['files'],
-        gating: false,
         resolvable: false,
-        message: 'Method "{name}" is missing a JSDoc comment.',
+        message: 'Method "{name}" is missing a doc comment.',
         docs: 'method-documentation',
         thresholds: ['minDescriptionLength'],
         samples: {
@@ -445,7 +422,6 @@ export const RULE_REGISTRY = {
         analyzer: 'schema',
         field: 'rule',
         input: ['schema-json'],
-        gating: false,
         resolvable: false,
         message: 'Invalid JSON: {error}.',
         docs: 'invalid-json',
@@ -463,7 +439,6 @@ export const RULE_REGISTRY = {
         analyzer: 'schema',
         field: 'rule',
         input: ['schema-json'],
-        gating: false,
         resolvable: false,
         message: 'Missing JSON schema declaration.',
         docs: 'missing-schema-declaration',
@@ -481,7 +456,6 @@ export const RULE_REGISTRY = {
         analyzer: 'schema',
         field: 'rule',
         input: ['schema-json'],
-        gating: false,
         resolvable: false,
         message: 'Undefined required field "{field}".',
         docs: 'undefined-required-field',
@@ -499,7 +473,6 @@ export const RULE_REGISTRY = {
         analyzer: 'schema',
         field: 'rule',
         input: ['schema-json'],
-        gating: false,
         resolvable: false,
         message: 'Invalid type for field "{field}".',
         docs: 'invalid-type',
@@ -517,7 +490,6 @@ export const RULE_REGISTRY = {
         analyzer: 'schema',
         field: 'rule',
         input: ['schema-json'],
-        gating: false,
         resolvable: false,
         message: 'Invalid range for field "{field}".',
         docs: 'invalid-range',
@@ -535,7 +507,6 @@ export const RULE_REGISTRY = {
         analyzer: 'schema',
         field: 'rule',
         input: ['schema-json'],
-        gating: false,
         resolvable: false,
         message: 'Error processing schema file: {error}.',
         docs: 'file-error',
@@ -553,7 +524,6 @@ export const RULE_REGISTRY = {
         analyzer: 'schema',
         field: 'rule',
         input: ['schema-json'],
-        gating: false,
         resolvable: false,
         message: 'Type mismatch for field "{field}".',
         docs: 'type-mismatch',
@@ -571,7 +541,6 @@ export const RULE_REGISTRY = {
         analyzer: 'schema',
         field: 'rule',
         input: ['schema-json'],
-        gating: false,
         resolvable: false,
         message: 'String value too short for field "{field}".',
         docs: 'string-too-short',
@@ -589,7 +558,6 @@ export const RULE_REGISTRY = {
         analyzer: 'schema',
         field: 'rule',
         input: ['schema-json'],
-        gating: false,
         resolvable: false,
         message: 'String value too long for field "{field}".',
         docs: 'string-too-long',
@@ -607,7 +575,6 @@ export const RULE_REGISTRY = {
         analyzer: 'schema',
         field: 'rule',
         input: ['schema-json'],
-        gating: false,
         resolvable: false,
         message: 'Value does not match pattern for field "{field}".',
         docs: 'pattern-mismatch',
@@ -625,7 +592,6 @@ export const RULE_REGISTRY = {
         analyzer: 'schema',
         field: 'rule',
         input: ['schema-json'],
-        gating: false,
         resolvable: false,
         message: 'Invalid format for field "{field}".',
         docs: 'invalid-format',
@@ -643,7 +609,6 @@ export const RULE_REGISTRY = {
         analyzer: 'schema',
         field: 'rule',
         input: ['schema-json'],
-        gating: false,
         resolvable: false,
         message: 'Value below minimum for field "{field}".',
         docs: 'below-minimum',
@@ -661,7 +626,6 @@ export const RULE_REGISTRY = {
         analyzer: 'schema',
         field: 'rule',
         input: ['schema-json'],
-        gating: false,
         resolvable: false,
         message: 'Value above maximum for field "{field}".',
         docs: 'above-maximum',
@@ -679,7 +643,6 @@ export const RULE_REGISTRY = {
         analyzer: 'schema',
         field: 'rule',
         input: ['schema-json'],
-        gating: false,
         resolvable: false,
         message: 'Too few items for field "{field}".',
         docs: 'too-few-items',
@@ -697,7 +660,6 @@ export const RULE_REGISTRY = {
         analyzer: 'schema',
         field: 'rule',
         input: ['schema-json'],
-        gating: false,
         resolvable: false,
         message: 'Too many items for field "{field}".',
         docs: 'too-many-items',
@@ -715,7 +677,6 @@ export const RULE_REGISTRY = {
         analyzer: 'schema',
         field: 'rule',
         input: ['schema-json'],
-        gating: false,
         resolvable: false,
         message: 'Missing required field "{field}".',
         docs: 'missing-required-field',
@@ -733,7 +694,6 @@ export const RULE_REGISTRY = {
         analyzer: 'schema',
         field: 'rule',
         input: ['schema-json'],
-        gating: false,
         resolvable: false,
         message: 'Unexpected property "{property}".',
         docs: 'unexpected-property',
@@ -751,7 +711,6 @@ export const RULE_REGISTRY = {
         analyzer: 'schema',
         field: 'rule',
         input: ['schema-json'],
-        gating: false,
         resolvable: false,
         message: 'Value does not match any enum value for field "{field}".',
         docs: 'enum-mismatch',
@@ -770,7 +729,6 @@ export const RULE_REGISTRY = {
         analyzer: 'schema',
         field: 'rule',
         input: ['schema-code'],
-        gating: false,
         resolvable: false,
         message: 'Potential SQL injection via string interpolation in {method}.',
         docs: 'sql-injection',
@@ -791,7 +749,6 @@ export const RULE_REGISTRY = {
         field: 'rule',
         configGate: 'checkNamingConventions',
         input: ['schema-code'],
-        gating: false,
         resolvable: false,
         message: 'Table name "{table}" should use snake_case convention.',
         docs: 'table-naming-convention',
@@ -810,7 +767,6 @@ export const RULE_REGISTRY = {
         analyzer: 'schema',
         field: 'rule',
         input: ['schema-code'],
-        gating: true,
         resolvable: true,
         message: 'Reference to unknown table "{table}" ({type}). Did you mean: {suggestions}?',
         docs: 'unknown-table',
@@ -832,7 +788,6 @@ export const RULE_REGISTRY = {
         analyzer: 'react',
         field: 'rule',
         input: ['files'],
-        gating: false,
         resolvable: false,
         message: 'React hook "{name}" does not follow the "use*" naming convention.',
         docs: 'hooks-naming',
@@ -850,7 +805,6 @@ export const RULE_REGISTRY = {
         analyzer: 'react',
         field: 'rule',
         input: ['files'],
-        gating: false,
         resolvable: false,
         message: 'React component "{name}" has complexity {complexity}, exceeding the maximum.',
         docs: 'complexity',
@@ -869,7 +823,6 @@ export const RULE_REGISTRY = {
         field: 'rule',
         configGate: 'requirePropTypes',
         input: ['files'],
-        gating: false,
         resolvable: false,
         message: 'React component "{name}" is missing prop-types.',
         docs: 'missing-props',
@@ -887,7 +840,6 @@ export const RULE_REGISTRY = {
         analyzer: 'react',
         field: 'rule',
         input: ['files'],
-        gating: false,
         resolvable: false,
         message: 'React component tree is missing an error boundary.',
         docs: 'no-error-boundary',
@@ -906,7 +858,6 @@ export const RULE_REGISTRY = {
         field: 'rule',
         configGate: 'requireMemoization',
         input: ['files'],
-        gating: false,
         resolvable: false,
         message: 'React component "{name}" is missing memoization.',
         docs: 'performance',
@@ -924,7 +875,6 @@ export const RULE_REGISTRY = {
         analyzer: 'react',
         field: 'rule',
         input: ['files'],
-        gating: false,
         resolvable: false,
         message: 'Accessibility issue in component "{name}": {issue}.',
         docs: 'accessibility',
@@ -942,7 +892,6 @@ export const RULE_REGISTRY = {
         analyzer: 'react',
         field: 'rule',
         input: ['files'],
-        gating: true,
         resolvable: true,
         message: 'raw `<{element}>` — this project uses `<{wrapper}>` ({file}).',
         docs: 'raw-element',
@@ -965,7 +914,6 @@ export const RULE_REGISTRY = {
         analyzer: 'invariants',
         field: 'rule',
         input: ['files'],
-        gating: false,
         resolvable: false,
         message: 'Invalid invariant config: {error}.',
         docs: 'config-error',
@@ -983,7 +931,6 @@ export const RULE_REGISTRY = {
         analyzer: 'invariants',
         field: 'rule',
         input: ['files'],
-        gating: false,
         resolvable: false,
         message: 'Invariant rule engine error: {error}.',
         docs: 'engine-error',
@@ -1001,7 +948,7 @@ export const RULE_REGISTRY = {
     'field-mismatch': {
         analyzer: 'schema-validator',
         field: 'rule',
-        gating: false,
+        input: ['cross-language-entities'],
         resolvable: false,
         message: 'Field mismatch: {detail}.',
         docs: 'field-mismatch',
@@ -1018,9 +965,9 @@ export const RULE_REGISTRY = {
     'schema-field-mismatch': {
         analyzer: 'schema-validator',
         field: 'rule',
-        gating: false,
+        input: ['cross-language-entities'],
         resolvable: false,
-        message: 'Schema field mismatch: {detail}.',
+        message: 'Schema field type-name strings differ: {detail}.',
         docs: 'schema-field-mismatch',
         thresholds: [],
         samples: {
@@ -1035,7 +982,7 @@ export const RULE_REGISTRY = {
     'missing-field': {
         analyzer: 'schema-validator',
         field: 'rule',
-        gating: false,
+        input: ['cross-language-entities'],
         resolvable: false,
         message: 'Missing field: {field}.',
         docs: 'missing-field',
@@ -1052,7 +999,7 @@ export const RULE_REGISTRY = {
     'extra-field': {
         analyzer: 'schema-validator',
         field: 'rule',
-        gating: false,
+        input: ['cross-language-entities'],
         resolvable: false,
         message: 'Extra field: {field}.',
         docs: 'extra-field',
@@ -1069,7 +1016,7 @@ export const RULE_REGISTRY = {
     'constraint-mismatch': {
         analyzer: 'schema-validator',
         field: 'rule',
-        gating: false,
+        input: ['cross-language-entities'],
         resolvable: false,
         message: 'Constraint mismatch: {detail}.',
         docs: 'constraint-mismatch',
@@ -1086,7 +1033,7 @@ export const RULE_REGISTRY = {
     'version-mismatch': {
         analyzer: 'schema-validator',
         field: 'rule',
-        gating: false,
+        input: ['cross-language-entities'],
         resolvable: false,
         message: 'Version mismatch: {detail}.',
         docs: 'version-mismatch',
@@ -1104,7 +1051,7 @@ export const RULE_REGISTRY = {
     'api-type-mismatch': {
         analyzer: 'api-contract',
         field: 'rule',
-        gating: false,
+        input: ['cross-language-entities'],
         resolvable: false,
         message: 'API type mismatch: {detail}.',
         docs: 'api-type-mismatch',
@@ -1121,7 +1068,7 @@ export const RULE_REGISTRY = {
     'missing-endpoint': {
         analyzer: 'api-contract',
         field: 'rule',
-        gating: false,
+        input: ['cross-language-entities'],
         resolvable: false,
         message: 'Missing API endpoint: {endpoint}.',
         docs: 'missing-endpoint',
@@ -1138,7 +1085,7 @@ export const RULE_REGISTRY = {
     'api-extra-field': {
         analyzer: 'api-contract',
         field: 'rule',
-        gating: false,
+        input: ['cross-language-entities'],
         resolvable: false,
         message: 'Extra field in API response: {field}.',
         docs: 'api-extra-field',
@@ -1155,7 +1102,7 @@ export const RULE_REGISTRY = {
     'api-missing-field': {
         analyzer: 'api-contract',
         field: 'rule',
-        gating: false,
+        input: ['cross-language-entities'],
         resolvable: false,
         message: 'Missing field in API response: {field}.',
         docs: 'api-missing-field',
@@ -1172,7 +1119,7 @@ export const RULE_REGISTRY = {
     'method-mismatch': {
         analyzer: 'api-contract',
         field: 'rule',
-        gating: false,
+        input: ['cross-language-entities'],
         resolvable: false,
         message: 'HTTP method mismatch: {detail}.',
         docs: 'method-mismatch',
@@ -1189,7 +1136,7 @@ export const RULE_REGISTRY = {
     'auth-mismatch': {
         analyzer: 'api-contract',
         field: 'rule',
-        gating: false,
+        input: ['cross-language-entities'],
         resolvable: false,
         message: 'Authentication mismatch: {detail}.',
         docs: 'auth-mismatch',
@@ -1207,7 +1154,7 @@ export const RULE_REGISTRY = {
     'circular-dependency': {
         analyzer: 'dependency-graph',
         field: 'type',
-        gating: false,
+        input: ['cross-language-entities'],
         resolvable: false,
         message: 'Circular dependency detected: {cycle}.',
         docs: 'circular-dependency',
@@ -1224,7 +1171,7 @@ export const RULE_REGISTRY = {
     'break-cycles': {
         analyzer: 'dependency-graph',
         field: 'type',
-        gating: false,
+        input: ['cross-language-entities'],
         resolvable: false,
         message: 'Break dependency cycle: {cycle}.',
         docs: 'break-cycles',
@@ -1241,7 +1188,7 @@ export const RULE_REGISTRY = {
     'tight-coupling': {
         analyzer: 'dependency-graph',
         field: 'type',
-        gating: false,
+        input: ['cross-language-entities'],
         resolvable: false,
         message: 'Tight coupling detected between {a} and {b}.',
         docs: 'tight-coupling',
@@ -1258,7 +1205,7 @@ export const RULE_REGISTRY = {
     'reduce-coupling': {
         analyzer: 'dependency-graph',
         field: 'type',
-        gating: false,
+        input: ['cross-language-entities'],
         resolvable: false,
         message: 'Reduce coupling between {a} and {b}.',
         docs: 'reduce-coupling',
@@ -1275,7 +1222,7 @@ export const RULE_REGISTRY = {
     'hub-nodes': {
         analyzer: 'dependency-graph',
         field: 'type',
-        gating: false,
+        input: ['cross-language-entities'],
         resolvable: false,
         message: 'Hub node "{node}" has {count} dependencies.',
         docs: 'hub-nodes',
@@ -1292,7 +1239,7 @@ export const RULE_REGISTRY = {
     'split-responsibilities': {
         analyzer: 'dependency-graph',
         field: 'type',
-        gating: false,
+        input: ['cross-language-entities'],
         resolvable: false,
         message: 'Split responsibilities of node "{node}".',
         docs: 'split-responsibilities',
@@ -1309,7 +1256,7 @@ export const RULE_REGISTRY = {
     'orphaned-nodes': {
         analyzer: 'dependency-graph',
         field: 'type',
-        gating: false,
+        input: ['cross-language-entities'],
         resolvable: false,
         message: 'Orphaned node "{node}" has no connections.',
         docs: 'orphaned-nodes',
@@ -1326,7 +1273,7 @@ export const RULE_REGISTRY = {
     'review-orphans': {
         analyzer: 'dependency-graph',
         field: 'type',
-        gating: false,
+        input: ['cross-language-entities'],
         resolvable: false,
         message: 'Review orphaned nodes: {nodes}.',
         docs: 'review-orphans',
@@ -1345,7 +1292,6 @@ export const RULE_REGISTRY = {
         analyzer: 'styles',
         field: 'rule',
         input: ['styles-css'],
-        gating: false,
         resolvable: false,
         message: 'Color value "{value}" drifts from the dominant token.',
         docs: 'styles/value-drift',
@@ -1363,7 +1309,6 @@ export const RULE_REGISTRY = {
         analyzer: 'styles',
         field: 'rule',
         input: ['styles-css'],
-        gating: false,
         resolvable: false,
         message: 'Value "{value}" is off the project\'s design scale.',
         docs: 'styles/off-scale',
@@ -1381,7 +1326,6 @@ export const RULE_REGISTRY = {
         analyzer: 'styles',
         field: 'rule',
         input: ['styles-css'],
-        gating: true,
         resolvable: true,
         message: 'Undefined CSS class: "{class}" has no matching definition.',
         docs: 'styles/undefined-class',
@@ -1402,7 +1346,6 @@ export const RULE_REGISTRY = {
         analyzer: 'styles',
         field: 'rule',
         input: ['styles-css'],
-        gating: false,
         resolvable: false,
         message: 'Undefined-class detection skipped: {reason}.',
         docs: 'styles/undefined-class-disabled',
@@ -1420,7 +1363,6 @@ export const RULE_REGISTRY = {
         analyzer: 'styles',
         field: 'rule',
         input: ['styles-css'],
-        gating: false,
         resolvable: false,
         message: 'Token bypass: raw value "{value}" used instead of a design token.',
         docs: 'styles/token-bypass',
@@ -1438,7 +1380,6 @@ export const RULE_REGISTRY = {
         analyzer: 'styles',
         field: 'rule',
         input: ['styles-css'],
-        gating: false,
         resolvable: false,
         message: 'Styling mechanism fragmented across {count} mechanisms.',
         docs: 'styles/mechanism-fragmentation',
@@ -1456,7 +1397,6 @@ export const RULE_REGISTRY = {
         analyzer: 'styles',
         field: 'rule',
         input: ['styles-css'],
-        gating: false,
         resolvable: false,
         message: 'Mixing styling mechanisms in one file.',
         docs: 'styles/mechanism-mixing',
@@ -1474,7 +1414,6 @@ export const RULE_REGISTRY = {
         analyzer: 'styles',
         field: 'rule',
         input: ['styles-css'],
-        gating: false,
         resolvable: false,
         message: 'Declaration set similar to another block ({similarity}%).',
         docs: 'styles/declaration-set-similarity',
@@ -1492,7 +1431,6 @@ export const RULE_REGISTRY = {
         analyzer: 'styles',
         field: 'rule',
         input: ['styles-css'],
-        gating: false,
         resolvable: false,
         message: 'Z-index sprawl: {count} distinct z-index values.',
         docs: 'styles/z-index-sprawl',
@@ -1510,7 +1448,6 @@ export const RULE_REGISTRY = {
         analyzer: 'styles',
         field: 'rule',
         input: ['styles-css'],
-        gating: false,
         resolvable: false,
         message: 'Z-index value "{value}" appears only once.',
         docs: 'styles/z-index-singleton',
@@ -1529,7 +1466,6 @@ export const RULE_REGISTRY = {
         analyzer: 'conventions',
         field: 'rule',
         input: ['function-index'],
-        gating: true,
         resolvable: true,
         message: '{pct}% of `{antecedent}` callers also call `{consequent}`.',
         docs: 'conventions/usage-pair',
@@ -1550,7 +1486,6 @@ export const RULE_REGISTRY = {
         analyzer: 'conventions',
         field: 'rule',
         input: ['function-index'],
-        gating: false,
         resolvable: false,
         message: 'Import form mismatch: use {form} for "{source}".',
         docs: 'conventions/import-form',
@@ -1568,7 +1503,6 @@ export const RULE_REGISTRY = {
         analyzer: 'conventions',
         field: 'rule',
         input: ['function-index'],
-        gating: false,
         resolvable: false,
         message: 'Error-handling convention mismatch: {detail}.',
         docs: 'conventions/error-handling',
@@ -1586,7 +1520,6 @@ export const RULE_REGISTRY = {
         analyzer: 'conventions',
         field: 'rule',
         input: ['function-index'],
-        gating: false,
         resolvable: false,
         message: 'Export shape mismatch: {detail}.',
         docs: 'conventions/export-shape',
@@ -1604,7 +1537,6 @@ export const RULE_REGISTRY = {
         analyzer: 'conventions',
         field: 'rule',
         input: ['function-index'],
-        gating: false,
         resolvable: false,
         message: 'Naming convention mismatch: {detail}.',
         docs: 'conventions/naming',
@@ -1623,7 +1555,6 @@ export const RULE_REGISTRY = {
         analyzer: 'cross-domain',
         field: 'rule',
         input: ['schema_usage', 'functions'],
-        gating: false,
         resolvable: false,
         message: 'Table "{table}" is written but never read.',
         docs: 'cross-domain/written-never-read',
@@ -1641,7 +1572,6 @@ export const RULE_REGISTRY = {
         analyzer: 'cross-domain',
         field: 'rule',
         input: ['schema_usage', 'functions'],
-        gating: false,
         resolvable: false,
         message: 'Table "{table}" is read but never written.',
         docs: 'cross-domain/read-never-written',
@@ -1659,7 +1589,6 @@ export const RULE_REGISTRY = {
         analyzer: 'cross-domain',
         field: 'rule',
         input: ['schema_usage', 'functions'],
-        gating: false,
         resolvable: false,
         message: 'Transaction boundary spans {count} tables.',
         docs: 'cross-domain/transaction-boundary',
@@ -1677,7 +1606,6 @@ export const RULE_REGISTRY = {
         analyzer: 'cross-domain',
         field: 'rule',
         input: ['schema_usage', 'functions'],
-        gating: false,
         resolvable: false,
         message: 'Validation bypass: {detail}.',
         docs: 'cross-domain/validation-bypass',
@@ -1695,7 +1623,6 @@ export const RULE_REGISTRY = {
         analyzer: 'cross-domain',
         field: 'rule',
         input: ['schema_usage', 'functions'],
-        gating: false,
         resolvable: false,
         message: 'Uncovered risk: {detail}.',
         docs: 'cross-domain/uncovered-risk',
@@ -1710,17 +1637,48 @@ export const RULE_REGISTRY = {
         },
     },
 };
+/**
+ * Canonical set of every analyzer ID that emits at least one rule in
+ * {@link RULE_REGISTRY}, derived from the registry itself. An analyzer "exists"
+ * iff it emits a rule, so this is the single source of truth for analyzer
+ * identity.
+ *
+ * Every other analyzer list — the audit-runner registry, config validation,
+ * default-enabled analyzers, the detached runner, and the MCP default set —
+ * must derive from this rather than re-type names. Adding an analyzer is then a
+ * registry edit plus an enable decision, never a hunt across hand-maintained
+ * arrays that drift out of sync (the historical failure: four lists at 13, 10,
+ * 10, and 7).
+ */
+export const ALL_ANALYZERS = [
+    ...new Set(Object.values(RULE_REGISTRY).map((e) => e.analyzer)),
+].sort();
+/**
+ * The reduced analyzer set the MCP `audit.run` surface enables by default —
+ * a deliberate subset of {@link ALL_ANALYZERS} (the MCP path favors a lighter,
+ * latency-sensitive audit). The full CLI `audit` default is {@link ALL_ANALYZERS}.
+ * Referenced here so mcp.ts and mcp-tools-shared.ts don't each re-type the list.
+ */
+export const MCP_DEFAULT_ANALYZERS = [
+    'solid',
+    'dry',
+    'documentation',
+    'react',
+    'data-access',
+];
 /**
  * Resolve a violation to its canonical {@link RuleRegistryEntry}, if any.
  *
  * The registry records which field on the Violation carries the rule ID
  * (`field` — `rule` for almost every analyzer, `type` for dependency-graph).
  * This helper reads that field off the violation and matches it against the
- * registry key, so gate decisions (Spec 36 R4/R6) never hard-code a field.
+ * registry key, so the gate's resolution-gap detection (Spec 45 R1) never
+ * hard-codes a field.
  *
  * Invariant violations (user-defined rule IDs) have no registry entry and
- * return `undefined` — they are always "new" and never gating (their gate
- * decision is made by the invariant rule engine, not this map).
+ * return `undefined`. They still gate (Spec 45 R1) — the gate blocks on every
+ * finding at a blocking severity; the registry only determines whether a
+ * missing resolution is a recorded gap.
  */
 export function getViolationRuleEntry(v) {
     if (!v.analyzer)