.hexcheck.yaml RawHistoryFolder

1version: 1
2components:
3  core: { role: core, paths: [internal/core/**] }
4  ports: { role: ports, paths: [internal/ports/**] }
5  # sessionlock is the display owner's proof ledger, not core placement policy.
6  adapters: { role: adapter, paths: [internal/adapters/**, internal/logging/**, internal/sessionlock/**] }
7  # app is the composition root: it wires adapters to core, like cmd.
8  entrypoints: { role: entrypoint, paths: [cmd/**, internal/app/**] }
9  generated: { role: ignore, paths: [internal/mocks/**] }
10rules:
11  no-adapter-imports-in-core: error
12  no-infra-imports-in-usecase: error
13  no-framework-types-in-core: error
14  no-infra-types-in-ports: error
15  missing-generated-mock-for-port: error
16mocking:
17  generatedMockPaths: [internal/mocks/**]
18  generatedMockNamePatterns: ['Mock{{Interface}}', '{{Interface}}Mock']
19allow:
20  - rule: suspicious-business-logic-in-adapter
21    path: internal/adapters/wayland/seat.go
22    reason: Seat dispatch resolves live Wayland targets and enforces protected input delivery at the display owner.
23  - rule: suspicious-business-logic-in-adapter
24    path: internal/adapters/wayland/server.go
25    reason: Display command dispatch validates immutable security epochs before converting port messages to wire events.
26ruleSettings:
27  missing-generated-mock-for-port:
28    # Sealed message unions are channel data, not ports; tested by sending messages (ADR 005).
29    excludePaths: [internal/ports/client_events.go, internal/ports/client_commands.go, internal/ports/input_events.go, internal/ports/output_events.go, internal/ports/lease.go, internal/ports/session_lock_messages.go, internal/ports/session_backend.go]
30  suspicious-business-logic-in-adapter:
31    # app is the composition root; starting core and wiring channels is its job.
32    excludePaths: [internal/app/app.go]