ddd-ts-kit 0.0.0-stage → 0.1.1

package/dist/check/project/resolve-import.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"resolve-import.d.ts","sourceRoot":"","sources":["../../../src/check/project/resolve-import.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,uBAAuB,CAAC;AACpD,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,2BAA2B,CAAC;AAM9D,iGAAiG;AACjG,wBAAgB,aAAa,CAAC,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,YAAY,CAoB/F"}

package/dist/check/project/resolve-import.js

@@ -0,0 +1,33 @@
+import { builtinModules } from 'node:module';
+import path from 'node:path';
+import { aliasRoots } from '../../alias/index.js';
+import { locate } from './locate.js';
+const SOURCE = /\.(?:ts|mts|cts)$/;
+const BUILTINS = new Set(builtinModules);
+/** Classifies by path alone: the imported file does not have to exist for a rule to judge it. */
+export function resolveImport(config, fromFile, specifier) {
+    if (specifier.startsWith('.')) {
+        return asFile(config, path.posix.join(path.posix.dirname(fromFile), specifier));
+    }
+    const root = aliasRoots(config).find(({ prefix }) => prefix !== '' && specifier.startsWith(prefix));
+    if (root !== undefined) {
+        return asFile(config, path.posix.join(root.directory, specifier.slice(root.prefix.length)));
+    }
+    if (specifier.startsWith('node:')) {
+        return { kind: 'builtin', name: specifier };
+    }
+    if (BUILTINS.has(packageName(specifier))) {
+        return { kind: 'builtin', name: `node:${specifier}` };
+    }
+    return { kind: 'package', name: packageName(specifier) };
+}
+function asFile(config, target) {
+    const clean = path.posix.normalize(target).replace(/\.(?:js|mjs|cjs)$/, '.ts');
+    const withExtension = SOURCE.test(clean) || path.posix.extname(clean) !== '' ? clean : `${clean}.ts`;
+    return { kind: 'file', path: withExtension, location: locate(config, withExtension) };
+}
+function packageName(specifier) {
+    const [first = '', second] = specifier.split('/');
+    return first.startsWith('@') && second !== undefined ? `${first}/${second}` : first;
+}
+//# sourceMappingURL=resolve-import.js.map

package/dist/check/project/resolve-import.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"resolve-import.js","sourceRoot":"","sources":["../../../src/check/project/resolve-import.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAC7C,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,UAAU,EAAE,MAAM,sBAAsB,CAAC;AAGlD,OAAO,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AAErC,MAAM,MAAM,GAAG,mBAAmB,CAAC;AACnC,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,cAAc,CAAC,CAAC;AAEzC,iGAAiG;AACjG,MAAM,UAAU,aAAa,CAAC,MAAc,EAAE,QAAgB,EAAE,SAAiB;IAC/E,IAAI,SAAS,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;QAC9B,OAAO,MAAM,CAAC,MAAM,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,SAAS,CAAC,CAAC,CAAC;IAClF,CAAC;IAED,MAAM,IAAI,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC,MAAM,KAAK,EAAE,IAAI,SAAS,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC;IAEpG,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;QACvB,OAAO,MAAM,CAAC,MAAM,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,SAAS,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;IAC9F,CAAC;IAED,IAAI,SAAS,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;QAClC,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC;IAC9C,CAAC;IAED,IAAI,QAAQ,CAAC,GAAG,CAAC,WAAW,CAAC,SAAS,CAAC,CAAC,EAAE,CAAC;QACzC,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,QAAQ,SAAS,EAAE,EAAE,CAAC;IACxD,CAAC;IAED,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,WAAW,CAAC,SAAS,CAAC,EAAE,CAAC;AAC3D,CAAC;AAED,SAAS,MAAM,CAAC,MAAc,EAAE,MAAc;IAC5C,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,mBAAmB,EAAE,KAAK,CAAC,CAAC;IAC/E,MAAM,aAAa,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,KAAK,KAAK,CAAC;IAErG,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,aAAa,EAAE,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,aAAa,CAAC,EAAE,CAAC;AACxF,CAAC;AAED,SAAS,WAAW,CAAC,SAAiB;IACpC,MAAM,CAAC,KAAK,GAAG,EAAE,EAAE,MAAM,CAAC,GAAG,SAAS,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAElD,OAAO,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,GAAG,KAAK,IAAI,MAAM,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC;AACtF,CAAC"}

package/dist/check/project/source-at.d.ts

@@ -0,0 +1,8 @@
+import type { Project } from '../model/project.js';
+import type { SourceFile } from '../model/source-file.js';
+/**
+ * The source at `file`: the one the project loaded, or, when only one file was loaded
+ * (`check-file`), the file an import of it points to, read from disk once.
+ */
+export declare function sourceAt(project: Project, file: string): SourceFile | undefined;
+//# sourceMappingURL=source-at.d.ts.map

package/dist/check/project/source-at.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"source-at.d.ts","sourceRoot":"","sources":["../../../src/check/project/source-at.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,qBAAqB,CAAC;AACnD,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,yBAAyB,CAAC;AAK1D;;;GAGG;AACH,wBAAgB,QAAQ,CAAC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,GAAG,UAAU,GAAG,SAAS,CAgB/E"}

package/dist/check/project/source-at.js

@@ -0,0 +1,29 @@
+import fs from 'node:fs';
+import path from 'node:path';
+import { loadSourceFile } from './load-source-file.js';
+const readFromDisk = new WeakMap();
+/**
+ * The source at `file`: the one the project loaded, or, when only one file was loaded
+ * (`check-file`), the file an import of it points to, read from disk once.
+ */
+export function sourceAt(project, file) {
+    const loaded = project.files.find((candidate) => candidate.path === file);
+    if (loaded !== undefined) {
+        return loaded;
+    }
+    const cache = readFromDisk.get(project) ?? new Map();
+    readFromDisk.set(project, cache);
+    if (!cache.has(file)) {
+        cache.set(file, readSource(project, file));
+    }
+    return cache.get(file);
+}
+function readSource(project, file) {
+    try {
+        return loadSourceFile(project.config, file, fs.readFileSync(path.join(project.root, file), 'utf8'));
+    }
+    catch {
+        return undefined;
+    }
+}
+//# sourceMappingURL=source-at.js.map

package/dist/check/project/source-at.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"source-at.js","sourceRoot":"","sources":["../../../src/check/project/source-at.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAG7B,OAAO,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AAEvD,MAAM,YAAY,GAAG,IAAI,OAAO,EAAgD,CAAC;AAEjF;;;GAGG;AACH,MAAM,UAAU,QAAQ,CAAC,OAAgB,EAAE,IAAY;IACrD,MAAM,MAAM,GAAG,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC;IAE1E,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;QACzB,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,MAAM,KAAK,GAAG,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,IAAI,GAAG,EAAkC,CAAC;IAErF,YAAY,CAAC,GAAG,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;IAEjC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;QACrB,KAAK,CAAC,GAAG,CAAC,IAAI,EAAE,UAAU,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC,CAAC;IAC7C,CAAC;IAED,OAAO,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;AACzB,CAAC;AAED,SAAS,UAAU,CAAC,OAAgB,EAAE,IAAY;IAChD,IAAI,CAAC;QACH,OAAO,cAAc,CAAC,OAAO,CAAC,MAAM,EAAE,IAAI,EAAE,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC;IACtG,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC"}

package/dist/check/project/to-posix.d.ts

@@ -0,0 +1,2 @@
+export declare function toPosix(file: string): string;
+//# sourceMappingURL=to-posix.d.ts.map

package/dist/check/project/to-posix.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"to-posix.d.ts","sourceRoot":"","sources":["../../../src/check/project/to-posix.ts"],"names":[],"mappings":"AAEA,wBAAgB,OAAO,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAE5C"}

package/dist/check/project/to-posix.js

@@ -0,0 +1,5 @@
+import path from 'node:path';
+export function toPosix(file) {
+    return file.split(path.sep).join('/');
+}
+//# sourceMappingURL=to-posix.js.map

package/dist/check/project/to-posix.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"to-posix.js","sourceRoot":"","sources":["../../../src/check/project/to-posix.ts"],"names":[],"mappings":"AAAA,OAAO,IAAI,MAAM,WAAW,CAAC;AAE7B,MAAM,UAAU,OAAO,CAAC,IAAY;IAClC,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AACxC,CAAC"}

package/dist/check/project/walk-directory.d.ts

@@ -0,0 +1,3 @@
+/** Visits every entry below `directory`, sorted by name, directories before what they hold. */
+export declare function walkDirectory(root: string, directory: string, visit: (file: string, isDirectory: boolean) => void): void;
+//# sourceMappingURL=walk-directory.d.ts.map

package/dist/check/project/walk-directory.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"walk-directory.d.ts","sourceRoot":"","sources":["../../../src/check/project/walk-directory.ts"],"names":[],"mappings":"AAKA,+FAA+F;AAC/F,wBAAgB,aAAa,CAC3B,IAAI,EAAE,MAAM,EACZ,SAAS,EAAE,MAAM,EACjB,KAAK,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,WAAW,EAAE,OAAO,KAAK,IAAI,GAClD,IAAI,CAWN"}

package/dist/check/project/walk-directory.js

@@ -0,0 +1,27 @@
+import fs from 'node:fs';
+import path from 'node:path';
+const SKIPPED_DIRECTORIES = new Set(['node_modules', 'dist', '.git']);
+/** Visits every entry below `directory`, sorted by name, directories before what they hold. */
+export function walkDirectory(root, directory, visit) {
+    for (const entry of entriesOf(root, directory)) {
+        const relative = `${directory}/${entry.name}`;
+        if (!entry.isDirectory()) {
+            visit(relative, false);
+        }
+        else if (!SKIPPED_DIRECTORIES.has(entry.name)) {
+            visit(relative, true);
+            walkDirectory(root, relative, visit);
+        }
+    }
+}
+function entriesOf(root, directory) {
+    try {
+        return fs
+            .readdirSync(path.join(root, directory), { withFileTypes: true })
+            .sort((a, b) => a.name.localeCompare(b.name));
+    }
+    catch {
+        return [];
+    }
+}
+//# sourceMappingURL=walk-directory.js.map

package/dist/check/project/walk-directory.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"walk-directory.js","sourceRoot":"","sources":["../../../src/check/project/walk-directory.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAE7B,MAAM,mBAAmB,GAAG,IAAI,GAAG,CAAC,CAAC,cAAc,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;AAEtE,+FAA+F;AAC/F,MAAM,UAAU,aAAa,CAC3B,IAAY,EACZ,SAAiB,EACjB,KAAmD;IAEnD,KAAK,MAAM,KAAK,IAAI,SAAS,CAAC,IAAI,EAAE,SAAS,CAAC,EAAE,CAAC;QAC/C,MAAM,QAAQ,GAAG,GAAG,SAAS,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC;QAE9C,IAAI,CAAC,KAAK,CAAC,WAAW,EAAE,EAAE,CAAC;YACzB,KAAK,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;QACzB,CAAC;aAAM,IAAI,CAAC,mBAAmB,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;YAChD,KAAK,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;YACtB,aAAa,CAAC,IAAI,EAAE,QAAQ,EAAE,KAAK,CAAC,CAAC;QACvC,CAAC;IACH,CAAC;AACH,CAAC;AAED,SAAS,SAAS,CAAC,IAAY,EAAE,SAAiB;IAChD,IAAI,CAAC;QACH,OAAO,EAAE;aACN,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,SAAS,CAAC,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC;aAChE,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;IAClD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC"}

package/dist/check/purity/define-purity-rule.d.ts

@@ -0,0 +1,5 @@
+import type { Rule } from '../model/rule.js';
+import type { PurityRule } from './purity-rule.js';
+/** The three purity/* rules share one mechanism: forbidden tokens and modules in domain/ and application/. */
+export declare function definePurityRule(rule: PurityRule): Rule;
+//# sourceMappingURL=define-purity-rule.d.ts.map

package/dist/check/purity/define-purity-rule.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"define-purity-rule.d.ts","sourceRoot":"","sources":["../../../src/check/purity/define-purity-rule.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,kBAAkB,CAAC;AAI7C,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAEnD,8GAA8G;AAC9G,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,UAAU,GAAG,IAAI,CAYvD"}

package/dist/check/purity/define-purity-rule.js

@@ -0,0 +1,33 @@
+import { inLayers } from '../support/in-layers.js';
+import { perFile } from '../support/per-file.js';
+/** The three purity/* rules share one mechanism: forbidden tokens and modules in domain/ and application/. */
+export function definePurityRule(rule) {
+    return {
+        id: rule.id,
+        description: rule.description,
+        scope: 'file',
+        run: (project) => perFile(project, rule.id, (file) => {
+            const layer = inLayers(file, ['domain', 'application'])?.layer;
+            return layer === undefined ? [] : [...forbiddenCode(file, rule, layer), ...forbiddenImports(file, rule, layer)];
+        }),
+    };
+}
+function forbiddenCode(file, rule, layer) {
+    return rule.code.flatMap(({ pattern, what }) => [...file.scan.code.matchAll(pattern)].map((match) => ({
+        line: file.scan.lineAt(match.index),
+        message: `${what} is used in the ${layer} layer.`,
+        fix: rule.fix,
+    })));
+}
+function forbiddenImports(file, rule, layer) {
+    return file.imports.flatMap(({ target, line }) => {
+        if (target.kind === 'file') {
+            return [];
+        }
+        const name = target.kind === 'builtin' ? (target.name.replace(/^node:/, '').split('/')[0] ?? '') : target.name;
+        return rule.modules.includes(name)
+            ? [{ line, message: `"${target.name}" is imported in the ${layer} layer.`, fix: rule.fix }]
+            : [];
+    });
+}
+//# sourceMappingURL=define-purity-rule.js.map

package/dist/check/purity/define-purity-rule.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"define-purity-rule.js","sourceRoot":"","sources":["../../../src/check/purity/define-purity-rule.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,QAAQ,EAAE,MAAM,yBAAyB,CAAC;AACnD,OAAO,EAAE,OAAO,EAAE,MAAM,wBAAwB,CAAC;AAGjD,8GAA8G;AAC9G,MAAM,UAAU,gBAAgB,CAAC,IAAgB;IAC/C,OAAO;QACL,EAAE,EAAE,IAAI,CAAC,EAAE;QACX,WAAW,EAAE,IAAI,CAAC,WAAW;QAC7B,KAAK,EAAE,MAAM;QACb,GAAG,EAAE,CAAC,OAAO,EAAE,EAAE,CACf,OAAO,CAAC,OAAO,EAAE,IAAI,CAAC,EAAE,EAAE,CAAC,IAAI,EAAE,EAAE;YACjC,MAAM,KAAK,GAAG,QAAQ,CAAC,IAAI,EAAE,CAAC,QAAQ,EAAE,aAAa,CAAC,CAAC,EAAE,KAAK,CAAC;YAE/D,OAAO,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,GAAG,aAAa,CAAC,IAAI,EAAE,IAAI,EAAE,KAAK,CAAC,EAAE,GAAG,gBAAgB,CAAC,IAAI,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC,CAAC;QAClH,CAAC,CAAC;KACL,CAAC;AACJ,CAAC;AAED,SAAS,aAAa,CAAC,IAAgB,EAAE,IAAgB,EAAE,KAAa;IACtE,OAAO,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE,EAAE,CAC7C,CAAC,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;QACpD,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC;QACnC,OAAO,EAAE,GAAG,IAAI,mBAAmB,KAAK,SAAS;QACjD,GAAG,EAAE,IAAI,CAAC,GAAG;KACd,CAAC,CAAC,CACJ,CAAC;AACJ,CAAC;AAED,SAAS,gBAAgB,CAAC,IAAgB,EAAE,IAAgB,EAAE,KAAa;IACzE,OAAO,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,EAAE,EAAE;QAC/C,IAAI,MAAM,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;YAC3B,OAAO,EAAE,CAAC;QACZ,CAAC;QAED,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC;QAE/G,OAAO,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC;YAChC,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,MAAM,CAAC,IAAI,wBAAwB,KAAK,SAAS,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE,CAAC;YAC3F,CAAC,CAAC,EAAE,CAAC;IACT,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/check/purity/purity-rule.d.ts

@@ -0,0 +1,13 @@
+/** What one purity/* rule forbids in domain/ and application/. */
+export interface PurityRule {
+    readonly id: string;
+    readonly description: string;
+    readonly code: readonly {
+        readonly pattern: RegExp;
+        readonly what: string;
+    }[];
+    /** Bare packages and Node built-ins (without the `node:` prefix) that give the same access. */
+    readonly modules: readonly string[];
+    readonly fix: string;
+}
+//# sourceMappingURL=purity-rule.d.ts.map

package/dist/check/purity/purity-rule.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"purity-rule.d.ts","sourceRoot":"","sources":["../../../src/check/purity/purity-rule.ts"],"names":[],"mappings":"AAAA,kEAAkE;AAClE,MAAM,WAAW,UAAU;IACzB,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,IAAI,EAAE,SAAS;QAAE,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;KAAE,EAAE,CAAC;IAC9E,+FAA+F;IAC/F,QAAQ,CAAC,OAAO,EAAE,SAAS,MAAM,EAAE,CAAC;IACpC,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;CACtB"}

package/dist/check/purity/purity-rule.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=purity-rule.js.map

package/dist/check/purity/purity-rule.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"purity-rule.js","sourceRoot":"","sources":["../../../src/check/purity/purity-rule.ts"],"names":[],"mappings":""}

package/dist/check/rules/aspects-outside-in.d.ts

@@ -0,0 +1,3 @@
+import type { Rule } from '../model/rule.js';
+export declare const aspectsOutsideIn: Rule;
+//# sourceMappingURL=aspects-outside-in.d.ts.map

package/dist/check/rules/aspects-outside-in.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"aspects-outside-in.d.ts","sourceRoot":"","sources":["../../../src/check/rules/aspects-outside-in.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,kBAAkB,CAAC;AAS7C,eAAO,MAAM,gBAAgB,EAAE,IAoB9B,CAAC"}

package/dist/check/rules/aspects-outside-in.js

@@ -0,0 +1,43 @@
+import { ASPECTS_PACKAGE } from '../layers/aspects-package.js';
+import { perFile } from '../support/per-file.js';
+const DECORATORS = `${ASPECTS_PACKAGE}/decorators`;
+const FIX = 'Apply the aspect at the composition root instead (`.with(...)` on the binding, or the `decorate` hook), or move the decorated class to infrastructure/ of its context or to the platform.';
+export const aspectsOutsideIn = {
+    id: 'aspects/outside-in',
+    description: 'The decorator form of an aspect is imported only by an adapter in infrastructure/ or by the platform; everywhere else an aspect is applied at the composition root.',
+    scope: 'file',
+    run(project) {
+        return perFile(project, this.id, (file) => {
+            if (!isJudged(file)) {
+                return [];
+            }
+            return file.imports
+                .filter(({ specifier }) => specifier === DECORATORS || specifier.startsWith(`${DECORATORS}/`))
+                .map(({ line }) => ({
+                line,
+                message: `"${DECORATORS}" is imported in ${placeOf(file)}: an aspect decorator belongs on an adapter class.`,
+                fix: FIX,
+            }));
+        });
+    },
+};
+/** domain/ and application/ are left to the layer rules, which refuse every entry of the package: one import, one report. */
+function isJudged({ isTest, location }) {
+    if (isTest || location.area === 'platform') {
+        return false;
+    }
+    return location.area !== 'context' || !['infrastructure', 'domain', 'application'].includes(location.layer);
+}
+function placeOf({ location, path }) {
+    if (location.area === 'shared-kernel') {
+        return 'the shared kernel';
+    }
+    if (location.area !== 'context') {
+        return path;
+    }
+    if (location.layer === 'module') {
+        return `the module file of "${location.context}"`;
+    }
+    return location.layer === 'root' ? path : `${location.layer}/`;
+}
+//# sourceMappingURL=aspects-outside-in.js.map

package/dist/check/rules/aspects-outside-in.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"aspects-outside-in.js","sourceRoot":"","sources":["../../../src/check/rules/aspects-outside-in.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAAE,MAAM,8BAA8B,CAAC;AAG/D,OAAO,EAAE,OAAO,EAAE,MAAM,wBAAwB,CAAC;AAEjD,MAAM,UAAU,GAAG,GAAG,eAAe,aAAa,CAAC;AAEnD,MAAM,GAAG,GACP,2LAA2L,CAAC;AAE9L,MAAM,CAAC,MAAM,gBAAgB,GAAS;IACpC,EAAE,EAAE,oBAAoB;IACxB,WAAW,EACT,qKAAqK;IACvK,KAAK,EAAE,MAAM;IACb,GAAG,CAAC,OAAO;QACT,OAAO,OAAO,CAAC,OAAO,EAAE,IAAI,CAAC,EAAE,EAAE,CAAC,IAAI,EAAE,EAAE;YACxC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;gBACpB,OAAO,EAAE,CAAC;YACZ,CAAC;YAED,OAAO,IAAI,CAAC,OAAO;iBAChB,MAAM,CAAC,CAAC,EAAE,SAAS,EAAE,EAAE,EAAE,CAAC,SAAS,KAAK,UAAU,IAAI,SAAS,CAAC,UAAU,CAAC,GAAG,UAAU,GAAG,CAAC,CAAC;iBAC7F,GAAG,CAAC,CAAC,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC,CAAC;gBAClB,IAAI;gBACJ,OAAO,EAAE,IAAI,UAAU,oBAAoB,OAAO,CAAC,IAAI,CAAC,oDAAoD;gBAC5G,GAAG,EAAE,GAAG;aACT,CAAC,CAAC,CAAC;QACR,CAAC,CAAC,CAAC;IACL,CAAC;CACF,CAAC;AAEF,6HAA6H;AAC7H,SAAS,QAAQ,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAc;IAChD,IAAI,MAAM,IAAI,QAAQ,CAAC,IAAI,KAAK,UAAU,EAAE,CAAC;QAC3C,OAAO,KAAK,CAAC;IACf,CAAC;IAED,OAAO,QAAQ,CAAC,IAAI,KAAK,SAAS,IAAI,CAAC,CAAC,gBAAgB,EAAE,QAAQ,EAAE,aAAa,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;AAC9G,CAAC;AAED,SAAS,OAAO,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAc;IAC7C,IAAI,QAAQ,CAAC,IAAI,KAAK,eAAe,EAAE,CAAC;QACtC,OAAO,mBAAmB,CAAC;IAC7B,CAAC;IAED,IAAI,QAAQ,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;QAChC,OAAO,IAAI,CAAC;IACd,CAAC;IAED,IAAI,QAAQ,CAAC,KAAK,KAAK,QAAQ,EAAE,CAAC;QAChC,OAAO,uBAAuB,QAAQ,CAAC,OAAO,GAAG,CAAC;IACpD,CAAC;IAED,OAAO,QAAQ,CAAC,KAAK,KAAK,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,QAAQ,CAAC,KAAK,GAAG,CAAC;AACjE,CAAC"}

package/dist/check/rules/authz-actor-explicit.d.ts

@@ -0,0 +1,3 @@
+import type { Rule } from '../model/rule.js';
+export declare const authzActorExplicit: Rule;
+//# sourceMappingURL=authz-actor-explicit.d.ts.map

package/dist/check/rules/authz-actor-explicit.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"authz-actor-explicit.d.ts","sourceRoot":"","sources":["../../../src/check/rules/authz-actor-explicit.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,kBAAkB,CAAC;AAmB7C,eAAO,MAAM,kBAAkB,EAAE,IAQhC,CAAC"}

package/dist/check/rules/authz-actor-explicit.js

@@ -0,0 +1,50 @@
+import { inLayers } from '../support/in-layers.js';
+import { perFile } from '../support/per-file.js';
+/** The ports and the classes that give the ambient execution context: named as a type or as a value, in a signature or in a dependency list. */
+const AMBIENT_NAME = /(?<![\w$])(?:ActorContext|AsyncLocalStorageActorContext|AsyncLocalStorage|ExecutionScope|AsyncLocalStorageExecutionScope|ScopedActorContext)(?![\w$])/;
+/** Kernel helpers that read the execution scope for a repository adapter: audit columns and the tenant of a statement. */
+const INFRASTRUCTURE_HELPERS = ['tenantScopeOf', 'stampCreation', 'stampUpdate'];
+/** `.current()` or `.require()` without argument on an actor context, or on something named `scope`, `scopes` or `...executionScope`. */
+const AMBIENT_READ = /(?<![\w$])(?:[\w$]*(?:[aA]ctors|[aA]ctorContext|[eE]xecutionScope)|scopes?)\s*\.\s*(?:current|require)\s*\(\s*\)/;
+const FIX = 'Take the actor from the message: make the command or query extend AuthorizedCommand or AuthorizedQuery and read `command.actor`, and pass anything else the use case needs as data of the message; audit columns, tenant scoping and correlation are read from the ExecutionScope port by infrastructure and the platform only (stampCreation, stampUpdate and tenantScopeOf belong in a repository adapter).';
+export const authzActorExplicit = {
+    id: 'authz/actor-explicit',
+    description: 'Use cases receive the actor in the command or query: domain/ and application/ never name nor read the ambient ExecutionScope or ActorContext.',
+    scope: 'file',
+    run(project) {
+        return perFile(project, this.id, ambientActor);
+    },
+};
+function ambientActor(file) {
+    const layer = inLayers(file, ['domain', 'application'])?.layer;
+    if (layer === undefined) {
+        return [];
+    }
+    const { code } = file.scan;
+    const named = AMBIENT_NAME.exec(code);
+    const read = AMBIENT_READ.exec(code);
+    const findings = importedHelpers(file).map(({ name, line }) => ({
+        line,
+        message: `${name}, a helper of infrastructure, is imported in the ${layer} layer.`,
+        fix: FIX,
+    }));
+    if (named !== null) {
+        findings.push({
+            line: file.scan.lineAt(named.index),
+            message: `${named[0]} is used in the ${layer} layer.`,
+            fix: FIX,
+        });
+    }
+    if (read !== null) {
+        findings.push({
+            line: file.scan.lineAt(read.index),
+            message: `The ambient context is read (${read[0].replace(/\s+/g, '')}) in the ${layer} layer.`,
+            fix: FIX,
+        });
+    }
+    return findings;
+}
+function importedHelpers(file) {
+    return file.imports.flatMap(({ names, line }) => names.filter((name) => INFRASTRUCTURE_HELPERS.includes(name)).map((name) => ({ name, line })));
+}
+//# sourceMappingURL=authz-actor-explicit.js.map

package/dist/check/rules/authz-actor-explicit.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"authz-actor-explicit.js","sourceRoot":"","sources":["../../../src/check/rules/authz-actor-explicit.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,QAAQ,EAAE,MAAM,yBAAyB,CAAC;AACnD,OAAO,EAAE,OAAO,EAAE,MAAM,wBAAwB,CAAC;AAEjD,gJAAgJ;AAChJ,MAAM,YAAY,GAChB,uJAAuJ,CAAC;AAE1J,0HAA0H;AAC1H,MAAM,sBAAsB,GAAG,CAAC,eAAe,EAAE,eAAe,EAAE,aAAa,CAAC,CAAC;AAEjF,yIAAyI;AACzI,MAAM,YAAY,GAChB,kHAAkH,CAAC;AAErH,MAAM,GAAG,GACP,+YAA+Y,CAAC;AAElZ,MAAM,CAAC,MAAM,kBAAkB,GAAS;IACtC,EAAE,EAAE,sBAAsB;IAC1B,WAAW,EACT,+IAA+I;IACjJ,KAAK,EAAE,MAAM;IACb,GAAG,CAAC,OAAO;QACT,OAAO,OAAO,CAAC,OAAO,EAAE,IAAI,CAAC,EAAE,EAAE,YAAY,CAAC,CAAC;IACjD,CAAC;CACF,CAAC;AAEF,SAAS,YAAY,CAAC,IAAgB;IACpC,MAAM,KAAK,GAAG,QAAQ,CAAC,IAAI,EAAE,CAAC,QAAQ,EAAE,aAAa,CAAC,CAAC,EAAE,KAAK,CAAC;IAE/D,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;QACxB,OAAO,EAAE,CAAC;IACZ,CAAC;IAED,MAAM,EAAE,IAAI,EAAE,GAAG,IAAI,CAAC,IAAI,CAAC;IAC3B,MAAM,KAAK,GAAG,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACtC,MAAM,IAAI,GAAG,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAErC,MAAM,QAAQ,GAAc,eAAe,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC,CAAC;QACzE,IAAI;QACJ,OAAO,EAAE,GAAG,IAAI,oDAAoD,KAAK,SAAS;QAClF,GAAG,EAAE,GAAG;KACT,CAAC,CAAC,CAAC;IAEJ,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;QACnB,QAAQ,CAAC,IAAI,CAAC;YACZ,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC;YACnC,OAAO,EAAE,GAAG,KAAK,CAAC,CAAC,CAAC,mBAAmB,KAAK,SAAS;YACrD,GAAG,EAAE,GAAG;SACT,CAAC,CAAC;IACL,CAAC;IAED,IAAI,IAAI,KAAK,IAAI,EAAE,CAAC;QAClB,QAAQ,CAAC,IAAI,CAAC;YACZ,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC;YAClC,OAAO,EAAE,gCAAgC,IAAI,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,YAAY,KAAK,SAAS;YAC9F,GAAG,EAAE,GAAG;SACT,CAAC,CAAC;IACL,CAAC;IAED,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,SAAS,eAAe,CAAC,IAAgB;IACvC,OAAO,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE,EAAE,CAC9C,KAAK,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,sBAAsB,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,CAC9F,CAAC;AACJ,CAAC"}

package/dist/check/rules/authz-declared.d.ts

@@ -0,0 +1,3 @@
+import type { Rule } from '../model/rule.js';
+export declare const authzDeclared: Rule;
+//# sourceMappingURL=authz-declared.d.ts.map

package/dist/check/rules/authz-declared.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"authz-declared.d.ts","sourceRoot":"","sources":["../../../src/check/rules/authz-declared.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,kBAAkB,CAAC;AA0B7C,eAAO,MAAM,aAAa,EAAE,IAqB3B,CAAC"}

package/dist/check/rules/authz-declared.js

@@ -0,0 +1,149 @@
+import { declaredRoleOf } from '../../declared/index.js';
+import { classesOf } from '../declarations/classes-of.js';
+import { inContext } from '../support/in-context.js';
+import { inLayer } from '../support/in-layer.js';
+import { isDeclaredStyle } from '../support/is-declared-style.js';
+import { pathInContext } from '../support/path-in-context.js';
+import { perFile } from '../support/per-file.js';
+import { sourceDeclaring } from '../support/source-declaring.js';
+import { exportedClass } from '../text/exported-class.js';
+import { firstArgument } from '../text/first-argument.js';
+import { statementEnd } from '../text/statement-end.js';
+const REGISTRATION = /\.\s*(command|query)\s*\(\s*([A-Z][\w$]*)\s*\)/g;
+const DECLARATION = /\.\s*(?:requires|public)\s*\(/;
+const DEFINE_ROUTE = /(?<![\w$.])defineRoute\s*(?:<[^<>()]*>)?\s*\(/g;
+const SECURITY = /(?<![\w$.])security\s*[:,}]/;
+const MAP_ENTRY = /(?<![\w$.])(?:requires|publicUseCase)\s*\(\s*([\w$]+)/g;
+const USE_CASE_FILE = /\.(command|query)\.ts$/;
+const ACCESS_DECORATORS = ['Requires', 'Public'];
+const DECORATOR_FIX = "Put @Requires(<context>Permissions['<permission>']) above the class, or @Public() when anybody may send it, both imported from @ddd-ts-kit/kernel/declarations: nothing is reachable by default.";
+const SECURITY_FIX = "Add `security: ['bearer']` (the schemes the route accepts) to the definition given to defineRoute, or `security: false` when the route is public on purpose.";
+export const authzDeclared = {
+    id: 'authz/declared',
+    description: 'Every command, query and route declares the permission it requires, or declares itself public.',
+    scope: 'file',
+    run(project) {
+        return perFile(project, this.id, (file) => [
+            ...undeclaredRegistrations(file, project),
+            ...undeclaredMessages(file, project),
+            ...routesWithoutSecurity(file),
+        ]);
+    },
+    /** Modules wired by hand list their use cases in an authorization map: every command and query has to be in it. */
+    acrossProject(project) {
+        if (project.config.stack.di === 'tsyringe' || isDeclaredStyle(project)) {
+            return [];
+        }
+        const declared = declaredUseCases(project);
+        return perFile(project, this.id, (file) => missingFromTheMap(file, declared));
+    },
+};
+function undeclaredRegistrations(file, project) {
+    if (!inContext(file.location) || file.location.layer !== 'module') {
+        return [];
+    }
+    const { code } = file.scan;
+    const registrations = [...code.matchAll(REGISTRATION)];
+    return registrations.flatMap((match, index) => {
+        const [, kind = '', name = ''] = match;
+        const next = registrations[index + 1]?.index ?? code.length;
+        if (DECLARATION.test(code.slice(match.index, Math.min(next, statementEnd(code, match.index))))) {
+            return [];
+        }
+        if (declaresItsAccess(sourceDeclaring(project, file, name), name)) {
+            return [];
+        }
+        const fix = `Chain .requires(<context>Permissions['<permission>']) or .public() between .${kind}(${name}) and .handledBy(...): nothing is reachable by default.`;
+        return [
+            {
+                line: file.scan.lineAt(match.index),
+                message: `The ${kind} ${name} is registered without saying who may send it.`,
+                fix,
+            },
+        ];
+    });
+}
+/** `@Requires(...)` or `@Public()` on the message class is the declaration, whoever registers the message. */
+function declaresItsAccess(file, name) {
+    const message = classesOf(file.scan).find((candidate) => candidate.name === name);
+    return message?.decorations.some((decoration) => ACCESS_DECORATORS.includes(decoration.name)) === true;
+}
+/** In the declared style there is no registration to read: the exported class of a command or query file says who may send it. */
+function undeclaredMessages(file, project) {
+    const role = isDeclaredStyle(project) && !file.isTest ? declaredRoleOf(pathInContext(project, file) ?? '') : undefined;
+    const message = classesOf(file.scan).find((candidate) => candidate.exported);
+    if (role === undefined || message === undefined || !['command', 'query'].includes(role.suffix)) {
+        return [];
+    }
+    if (message.decorations.some((decoration) => ACCESS_DECORATORS.includes(decoration.name))) {
+        return [];
+    }
+    return [
+        {
+            line: message.line,
+            message: `The ${role.suffix} ${message.name} declares no permission and is not declared public.`,
+            fix: DECORATOR_FIX,
+        },
+    ];
+}
+function routesWithoutSecurity(file) {
+    const here = inLayer(file, 'presentation');
+    if (here?.inside[0] !== 'http' || !/\.(?:route|controller)\.ts$/.test(file.path)) {
+        return [];
+    }
+    const { code } = file.scan;
+    return [...code.matchAll(DEFINE_ROUTE)].flatMap((match) => {
+        const definition = firstArgument(code, match.index + match[0].length).trim();
+        // A definition built elsewhere or by spreading cannot be read here.
+        if (!definition.startsWith('{') || definition.includes('...') || SECURITY.test(definition)) {
+            return [];
+        }
+        return [
+            { line: file.scan.lineAt(match.index), message: 'The route does not declare its security.', fix: SECURITY_FIX },
+        ];
+    });
+}
+/** Per context, the classes named by `requires(X, ...)` or `publicUseCase(X)` in its module file or its authorization folder. */
+function declaredUseCases(project) {
+    const declared = new Map();
+    for (const file of project.files) {
+        const { location } = file;
+        if (!inContext(location) || file.isTest) {
+            continue;
+        }
+        if (location.layer !== 'module' && !(location.layer === 'application' && location.inside[0] === 'authorization')) {
+            continue;
+        }
+        const names = declared.get(location.context) ?? new Set();
+        for (const match of file.scan.code.matchAll(MAP_ENTRY)) {
+            names.add(match[1] ?? '');
+        }
+        declared.set(location.context, names);
+    }
+    return declared;
+}
+function missingFromTheMap(file, declared) {
+    const here = inLayer(file, 'application');
+    const kind = USE_CASE_FILE.exec(file.path)?.[1];
+    if (here === undefined || kind === undefined || !isUseCaseFolder(here.inside, kind)) {
+        return [];
+    }
+    const useCase = exportedClass(file);
+    if (useCase === undefined ||
+        declared.get(here.context)?.has(useCase.name) === true ||
+        declaresItsAccess(file, useCase.name)) {
+        return [];
+    }
+    return [
+        {
+            line: useCase.line,
+            message: `The ${kind} ${useCase.name} declares no permission and is not declared public.`,
+            fix: `Add requires(${useCase.name}, <context>Permissions['<permission>']) or publicUseCase(${useCase.name}) to the authorization entries of ${here.context}.module.ts (or of a file in application/authorization/).`,
+        },
+    ];
+}
+/** `commands/<use-case>/<file>` for a command, `queries/<use-case>/<file>` for a query. */
+function isUseCaseFolder(inside, kind) {
+    return inside.length === 3 && inside[0] === (kind === 'command' ? 'commands' : 'queries');
+}
+//# sourceMappingURL=authz-declared.js.map

package/dist/check/rules/authz-declared.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"authz-declared.js","sourceRoot":"","sources":["../../../src/check/rules/authz-declared.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,MAAM,yBAAyB,CAAC;AACzD,OAAO,EAAE,SAAS,EAAE,MAAM,+BAA+B,CAAC;AAK1D,OAAO,EAAE,SAAS,EAAE,MAAM,0BAA0B,CAAC;AACrD,OAAO,EAAE,OAAO,EAAE,MAAM,wBAAwB,CAAC;AACjD,OAAO,EAAE,eAAe,EAAE,MAAM,iCAAiC,CAAC;AAClE,OAAO,EAAE,aAAa,EAAE,MAAM,+BAA+B,CAAC;AAC9D,OAAO,EAAE,OAAO,EAAE,MAAM,wBAAwB,CAAC;AACjD,OAAO,EAAE,eAAe,EAAE,MAAM,gCAAgC,CAAC;AACjE,OAAO,EAAE,aAAa,EAAE,MAAM,2BAA2B,CAAC;AAC1D,OAAO,EAAE,aAAa,EAAE,MAAM,2BAA2B,CAAC;AAC1D,OAAO,EAAE,YAAY,EAAE,MAAM,0BAA0B,CAAC;AAExD,MAAM,YAAY,GAAG,iDAAiD,CAAC;AACvE,MAAM,WAAW,GAAG,+BAA+B,CAAC;AACpD,MAAM,YAAY,GAAG,gDAAgD,CAAC;AACtE,MAAM,QAAQ,GAAG,6BAA6B,CAAC;AAC/C,MAAM,SAAS,GAAG,wDAAwD,CAAC;AAC3E,MAAM,aAAa,GAAG,wBAAwB,CAAC;AAC/C,MAAM,iBAAiB,GAAG,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAC;AAEjD,MAAM,aAAa,GACjB,kMAAkM,CAAC;AAErM,MAAM,YAAY,GAChB,8JAA8J,CAAC;AAEjK,MAAM,CAAC,MAAM,aAAa,GAAS;IACjC,EAAE,EAAE,gBAAgB;IACpB,WAAW,EAAE,gGAAgG;IAC7G,KAAK,EAAE,MAAM;IACb,GAAG,CAAC,OAAO;QACT,OAAO,OAAO,CAAC,OAAO,EAAE,IAAI,CAAC,EAAE,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC;YACzC,GAAG,uBAAuB,CAAC,IAAI,EAAE,OAAO,CAAC;YACzC,GAAG,kBAAkB,CAAC,IAAI,EAAE,OAAO,CAAC;YACpC,GAAG,qBAAqB,CAAC,IAAI,CAAC;SAC/B,CAAC,CAAC;IACL,CAAC;IACD,mHAAmH;IACnH,aAAa,CAAC,OAAO;QACnB,IAAI,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,KAAK,UAAU,IAAI,eAAe,CAAC,OAAO,CAAC,EAAE,CAAC;YACvE,OAAO,EAAE,CAAC;QACZ,CAAC;QAED,MAAM,QAAQ,GAAG,gBAAgB,CAAC,OAAO,CAAC,CAAC;QAE3C,OAAO,OAAO,CAAC,OAAO,EAAE,IAAI,CAAC,EAAE,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,iBAAiB,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC,CAAC;IAChF,CAAC;CACF,CAAC;AAEF,SAAS,uBAAuB,CAAC,IAAgB,EAAE,OAAgB;IACjE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,KAAK,KAAK,QAAQ,EAAE,CAAC;QAClE,OAAO,EAAE,CAAC;IACZ,CAAC;IAED,MAAM,EAAE,IAAI,EAAE,GAAG,IAAI,CAAC,IAAI,CAAC;IAC3B,MAAM,aAAa,GAAG,CAAC,GAAG,IAAI,CAAC,QAAQ,CAAC,YAAY,CAAC,CAAC,CAAC;IAEvD,OAAO,aAAa,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE;QAC5C,MAAM,CAAC,EAAE,IAAI,GAAG,EAAE,EAAE,IAAI,GAAG,EAAE,CAAC,GAAG,KAAK,CAAC;QACvC,MAAM,IAAI,GAAG,aAAa,CAAC,KAAK,GAAG,CAAC,CAAC,EAAE,KAAK,IAAI,IAAI,CAAC,MAAM,CAAC;QAE5D,IAAI,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,KAAK,EAAE,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,YAAY,CAAC,IAAI,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;YAC/F,OAAO,EAAE,CAAC;QACZ,CAAC;QAED,IAAI,iBAAiB,CAAC,eAAe,CAAC,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,EAAE,IAAI,CAAC,EAAE,CAAC;YAClE,OAAO,EAAE,CAAC;QACZ,CAAC;QAED,MAAM,GAAG,GAAG,+EAA+E,IAAI,IAAI,IAAI,yDAAyD,CAAC;QAEjK,OAAO;YACL;gBACE,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC;gBACnC,OAAO,EAAE,OAAO,IAAI,IAAI,IAAI,gDAAgD;gBAC5E,GAAG;aACJ;SACF,CAAC;IACJ,CAAC,CAAC,CAAC;AACL,CAAC;AAED,8GAA8G;AAC9G,SAAS,iBAAiB,CAAC,IAAgB,EAAE,IAAY;IACvD,MAAM,OAAO,GAAG,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC;IAElF,OAAO,OAAO,EAAE,WAAW,CAAC,IAAI,CAAC,CAAC,UAAU,EAAE,EAAE,CAAC,iBAAiB,CAAC,QAAQ,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,KAAK,IAAI,CAAC;AACzG,CAAC;AAED,kIAAkI;AAClI,SAAS,kBAAkB,CAAC,IAAgB,EAAE,OAAgB;IAC5D,MAAM,IAAI,GACR,eAAe,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,cAAc,CAAC,aAAa,CAAC,OAAO,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IAE5G,MAAM,OAAO,GAAG,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC;IAE7E,IAAI,IAAI,KAAK,SAAS,IAAI,OAAO,KAAK,SAAS,IAAI,CAAC,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;QAC/F,OAAO,EAAE,CAAC;IACZ,CAAC;IAED,IAAI,OAAO,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,UAAU,EAAE,EAAE,CAAC,iBAAiB,CAAC,QAAQ,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC;QAC1F,OAAO,EAAE,CAAC;IACZ,CAAC;IAED,OAAO;QACL;YACE,IAAI,EAAE,OAAO,CAAC,IAAI;YAClB,OAAO,EAAE,OAAO,IAAI,CAAC,MAAM,IAAI,OAAO,CAAC,IAAI,qDAAqD;YAChG,GAAG,EAAE,aAAa;SACnB;KACF,CAAC;AACJ,CAAC;AAED,SAAS,qBAAqB,CAAC,IAAgB;IAC7C,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,EAAE,cAAc,CAAC,CAAC;IAE3C,IAAI,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC,KAAK,MAAM,IAAI,CAAC,6BAA6B,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QACjF,OAAO,EAAE,CAAC;IACZ,CAAC;IAED,MAAM,EAAE,IAAI,EAAE,GAAG,IAAI,CAAC,IAAI,CAAC;IAE3B,OAAO,CAAC,GAAG,IAAI,CAAC,QAAQ,CAAC,YAAY,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,EAAE;QACxD,MAAM,UAAU,GAAG,aAAa,CAAC,IAAI,EAAE,KAAK,CAAC,KAAK,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC;QAE7E,oEAAoE;QACpE,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,UAAU,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,QAAQ,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE,CAAC;YAC3F,OAAO,EAAE,CAAC;QACZ,CAAC;QAED,OAAO;YACL,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,OAAO,EAAE,0CAA0C,EAAE,GAAG,EAAE,YAAY,EAAE;SAChH,CAAC;IACJ,CAAC,CAAC,CAAC;AACL,CAAC;AAED,iIAAiI;AACjI,SAAS,gBAAgB,CAAC,OAAgB;IACxC,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAuB,CAAC;IAEhD,KAAK,MAAM,IAAI,IAAI,OAAO,CAAC,KAAK,EAAE,CAAC;QACjC,MAAM,EAAE,QAAQ,EAAE,GAAG,IAAI,CAAC;QAE1B,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;YACxC,SAAS;QACX,CAAC;QAED,IAAI,QAAQ,CAAC,KAAK,KAAK,QAAQ,IAAI,CAAC,CAAC,QAAQ,CAAC,KAAK,KAAK,aAAa,IAAI,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,eAAe,CAAC,EAAE,CAAC;YACjH,SAAS;QACX,CAAC;QAED,MAAM,KAAK,GAAG,QAAQ,CAAC,GAAG,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,IAAI,GAAG,EAAU,CAAC;QAElE,KAAK,MAAM,KAAK,IAAI,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC;YACvD,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;QAC5B,CAAC;QAED,QAAQ,CAAC,GAAG,CAAC,QAAQ,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;IACxC,CAAC;IAED,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,SAAS,iBAAiB,CAAC,IAAgB,EAAE,QAAkD;IAC7F,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,EAAE,aAAa,CAAC,CAAC;IAC1C,MAAM,IAAI,GAAG,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;IAEhD,IAAI,IAAI,KAAK,SAAS,IAAI,IAAI,KAAK,SAAS,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,EAAE,CAAC;QACpF,OAAO,EAAE,CAAC;IACZ,CAAC;IAED,MAAM,OAAO,GAAG,aAAa,CAAC,IAAI,CAAC,CAAC;IAEpC,IACE,OAAO,KAAK,SAAS;QACrB,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,IAAI;QACtD,iBAAiB,CAAC,IAAI,EAAE,OAAO,CAAC,IAAI,CAAC,EACrC,CAAC;QACD,OAAO,EAAE,CAAC;IACZ,CAAC;IAED,OAAO;QACL;YACE,IAAI,EAAE,OAAO,CAAC,IAAI;YAClB,OAAO,EAAE,OAAO,IAAI,IAAI,OAAO,CAAC,IAAI,qDAAqD;YACzF,GAAG,EAAE,gBAAgB,OAAO,CAAC,IAAI,4DAA4D,OAAO,CAAC,IAAI,qCAAqC,IAAI,CAAC,OAAO,0DAA0D;SACrN;KACF,CAAC;AACJ,CAAC;AAED,2FAA2F;AAC3F,SAAS,eAAe,CAAC,MAAyB,EAAE,IAAY;IAC9D,OAAO,MAAM,CAAC,MAAM,KAAK,CAAC,IAAI,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;AAC5F,CAAC"}

package/dist/check/rules/authz-in-application.d.ts

@@ -0,0 +1,3 @@
+import type { Rule } from '../model/rule.js';
+export declare const authzInApplication: Rule;
+//# sourceMappingURL=authz-in-application.d.ts.map

package/dist/check/rules/authz-in-application.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"authz-in-application.d.ts","sourceRoot":"","sources":["../../../src/check/rules/authz-in-application.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,kBAAkB,CAAC;AA+F7C,eAAO,MAAM,kBAAkB,EAAE,IAQhC,CAAC"}