exceptions.json

{
  "schemaVersion": 1,
  "exceptions": [
    {
      "kind": "outer-host-adapter",
      "path": "packages/agentos/runtime/resilience-hard-gate-main.ts",
      "rule": "no-runtime-execution",
      "match": "BunRuntime.runMain",
      "maximumOccurrences": 1,
      "reason": "The resilience hard-gate executable needs one reviewed Bun process entry around an otherwise fully typed, scoped Effect program.",
      "ownerIssue": 84,
      "test": "packages/agentos/src/resilience/tests/execution.effect.test.ts",
      "removalCondition": "Retain only while the resilience proof is exposed as a standalone Bun executable and keep every proof operation inside Effect.",
      "expiresOn": null
    },
    {
      "kind": "outer-host-adapter",
      "path": "website/apps/docs/scripts/script-runtime.ts",
      "rule": "no-runtime-execution",
      "match": "BunRuntime.runMain",
      "maximumOccurrences": 1,
      "reason": "All website maintenance executables share one Bun entry around typed Effect programs and Bun platform services.",
      "ownerIssue": 99,
      "test": "website/apps/docs/scripts/script-runtime.effect.test.ts",
      "removalCondition": "Retain only while website maintenance is exposed through standalone Bun scripts.",
      "expiresOn": null
    },
    {
      "kind": "outer-host-adapter",
      "path": "packages/agentos/src/pi-host-adapter.ts",
      "rule": "no-runtime-execution",
      "match": "Effect.runPromise",
      "maximumOccurrences": 1,
      "reason": "Pi extension, command, event, tool, and provider callback ABIs require Promises, so this domain-free adapter is the sole one-way boundary from AgentOS Effect programs into host-owned callbacks.",
      "ownerIssue": 103,
      "test": "packages/agentos/tests/pi-host-adapter.effect.test.ts",
      "removalCondition": "Remove when every Pi and provider callback ABI used by AgentOS accepts Effect programs directly.",
      "expiresOn": null
    },
    {
      "kind": "outer-host-adapter",
      "path": "services/openfga/tests/live-model-conformance-main.ts",
      "rule": "no-runtime-execution",
      "match": "BunRuntime.runMain",
      "maximumOccurrences": 1,
      "reason": "The disposable OpenFGA live-model conformance executable enters one Effect runtime around typed configuration, authorization I/O, assertions, redacted failures, and schema-encoded output.",
      "ownerIssue": 102,
      "test": "services/openfga/tests/postgres-upgrade-conformance.ts",
      "removalCondition": "Retain only while live-model conformance is invoked as a standalone subprocess by the upgrade harness.",
      "expiresOn": null
    },
    {
      "kind": "outer-host-adapter",
      "path": "services/openfga/tests/postgres-upgrade-conformance-main.ts",
      "rule": "no-runtime-execution",
      "match": "BunRuntime.runMain",
      "maximumOccurrences": 1,
      "reason": "The disposable PostgreSQL upgrade/restore conformance executable enters one scoped Effect runtime around Docker children, typed files, health checks, cleanup, redacted failures, and schema-encoded output.",
      "ownerIssue": 102,
      "test": "services/openfga/tests/postgres-upgrade-conformance.ts",
      "removalCondition": "Retain only while PostgreSQL upgrade and restore conformance is a standalone executable.",
      "expiresOn": null
    },
    {
      "kind": "outer-host-adapter",
      "path": "tooling/testing/bun-http.ts",
      "rule": "no-runtime-execution",
      "match": "Effect.runPromise",
      "maximumOccurrences": 1,
      "reason": "Bun's HTTP test-server ABI requires Promise-returning fetch handlers, so one domain-free adapter runs Effect request programs and scopes server shutdown.",
      "ownerIssue": 102,
      "test": "tooling/testing/tests/bun-http.effect.test.ts",
      "removalCondition": "Remove when Bun test servers accept Effect request programs directly.",
      "expiresOn": null
    },
    {
      "kind": "outer-host-adapter",
      "path": "website/apps/docs/lib/effect/browser-runtime.ts",
      "rule": "no-runtime-execution",
      "match": "Effect.runSync",
      "maximumOccurrences": 1,
      "reason": "React event callbacks require immediate state updates before returning control, so one domain-free adapter runs infallible synchronous browser Effects.",
      "ownerIssue": 99,
      "test": "website/apps/docs/lib/effect/browser-runtime.effect.test.ts",
      "removalCondition": "Remove when React event callbacks accept Effect values directly.",
      "expiresOn": null
    },
    {
      "kind": "outer-host-adapter",
      "path": "website/apps/docs/lib/effect/browser-runtime.ts",
      "rule": "no-runtime-execution",
      "match": "Effect.runPromise",
      "maximumOccurrences": 1,
      "reason": "Next.js dynamic modules and React Suspense require Promises, so one domain-free browser adapter enters Effect after module failures are typed.",
      "ownerIssue": 99,
      "test": "website/apps/docs/lib/effect/browser-runtime.effect.test.ts",
      "removalCondition": "Remove when browser framework module callbacks accept Effect values directly.",
      "expiresOn": null
    },
    {
      "kind": "outer-host-adapter",
      "path": "benchmarks/profiles/agentos/pi-session-adapter.ts",
      "rule": "no-runtime-execution",
      "match": "BunRuntime.runMain",
      "maximumOccurrences": 1,
      "reason": "The Pi session projection executable enters one Effect runtime around typed parsing, bounded redaction, hashing, filesystem input, and standard output.",
      "ownerIssue": 97,
      "test": "benchmarks/tests/pi-session-adapter.effect.test.ts",
      "removalCondition": "Retain only while the Pi session projector remains a standalone benchmark adapter.",
      "expiresOn": null
    },
    {
      "kind": "outer-host-adapter",
      "path": "benchmarks/run.ts",
      "rule": "no-runtime-execution",
      "match": "BunRuntime.runMain",
      "maximumOccurrences": 1,
      "reason": "The benchmark runner CLI enters one Effect runtime around typed plan decoding, immutable freeze, collection, and evidence publication.",
      "ownerIssue": 97,
      "test": "benchmarks/tests/runner.effect.test.ts",
      "removalCondition": "Retain only while portable benchmark execution remains a standalone CLI.",
      "expiresOn": null
    },
    {
      "kind": "outer-host-adapter",
      "path": "benchmarks/validate.ts",
      "rule": "no-runtime-execution",
      "match": "BunRuntime.runMain",
      "maximumOccurrences": 1,
      "reason": "The benchmark contract CLI enters one Effect runtime around typed filesystem input, schema decoding, semantic validation, and standard output.",
      "ownerIssue": 97,
      "test": "benchmarks/tests/contracts.effect.test.ts",
      "removalCondition": "Retain only while contract validation remains a standalone CLI.",
      "expiresOn": null
    },
    {
      "kind": "outer-host-adapter",
      "path": "packages/agentos/build.ts",
      "rule": "no-runtime-execution",
      "match": "BunRuntime.runMain",
      "maximumOccurrences": 1,
      "reason": "The AgentOS package build executable enters one scoped Effect runtime around cleanup and TypeScript compilation.",
      "ownerIssue": 97,
      "test": "packages/agentos/tests/build.effect.test.ts",
      "removalCondition": "Retain only while the package build remains a standalone executable.",
      "expiresOn": null
    },
    {
      "kind": "outer-host-adapter",
      "path": "services/openfga/scripts/generate-model.ts",
      "rule": "no-runtime-execution",
      "match": "BunRuntime.runMain",
      "maximumOccurrences": 1,
      "reason": "The OpenFGA model generator enters one Effect runtime around artifact checking and publication.",
      "ownerIssue": 97,
      "test": "services/openfga/tests/model-generation.effect.test.ts",
      "removalCondition": "Retain only while model generation remains a standalone executable.",
      "expiresOn": null
    },
    {
      "kind": "outer-host-adapter",
      "path": "clis/github-app-token/github-app-token.ts",
      "rule": "no-runtime-execution",
      "match": "BunRuntime.runMain",
      "maximumOccurrences": 1,
      "reason": "The GitHub App token CLI enters one Effect runtime around typed config, RSA signer service, HTTP, scope schemas, private filesystem publication, and standard I/O.",
      "ownerIssue": 97,
      "test": "clis/github-app-token/tests/github-app-token.effect.test.ts",
      "removalCondition": "Retain only while GitHub App token minting remains a standalone CLI.",
      "expiresOn": null
    },
    {
      "kind": "outer-host-adapter",
      "path": "clis/pg-listen/pg-listen.ts",
      "rule": "no-runtime-execution",
      "match": "BunRuntime.runMain",
      "maximumOccurrences": 1,
      "reason": "The PostgreSQL notification CLI enters one scoped Effect runtime around typed config, pgpass resolution, the native client Layer, LISTEN event streaming, schema encoding, and standard I/O.",
      "ownerIssue": 97,
      "test": "clis/pg-listen/tests/pg-listen.effect.test.ts",
      "removalCondition": "Retain only while PostgreSQL notification waiting remains a standalone CLI.",
      "expiresOn": null
    },
    {
      "kind": "outer-host-adapter",
      "path": "release/kubernetes/render.ts",
      "rule": "no-runtime-execution",
      "match": "BunRuntime.runMain",
      "maximumOccurrences": 1,
      "reason": "The Kubernetes release renderer enters one scoped Effect runtime around typed arguments, temporary overlays, kubectl children, YAML schemas, manifest validation, atomic filesystem publication, and standard I/O.",
      "ownerIssue": 97,
      "test": "release/kubernetes/tests/release.effect.test.ts",
      "removalCondition": "Retain only while Kubernetes release rendering remains a standalone CLI.",
      "expiresOn": null
    },
    {
      "kind": "outer-host-adapter",
      "path": "website/apps/docs/lib/effect/server-runtime.ts",
      "rule": "no-runtime-execution",
      "match": "Effect.runPromise",
      "maximumOccurrences": 1,
      "reason": "Next.js route and page callback ABIs require a Promise, so one domain-free adapter enters an Effect runtime for server and Cloudflare programs.",
      "ownerIssue": 99,
      "test": "website/apps/docs/lib/effect/server-runtime.effect.test.ts",
      "removalCondition": "Remove when Next.js accepts Effect values directly from route, page, and metadata callbacks.",
      "expiresOn": null
    },
    {
      "kind": "outer-host-adapter",
      "path": "website/apps/docs/lib/effect/server-runtime.ts",
      "rule": "no-runtime-execution",
      "match": "Effect.runSync",
      "maximumOccurrences": 1,
      "reason": "Next.js and Fumadocs configuration modules require synchronous exported values, so one domain-free adapter enters Effect after all typed failures are handled.",
      "ownerIssue": 99,
      "test": "website/apps/docs/lib/effect/server-runtime.effect.test.ts",
      "removalCondition": "Remove when every framework configuration callback accepts Effect values asynchronously.",
      "expiresOn": null
    },
    {
      "kind": "outer-host-adapter",
      "path": "database/drizzle.config.ts",
      "rule": "no-runtime-execution",
      "match": "Effect.runSync",
      "maximumOccurrences": 1,
      "reason": "Drizzle Kit requires a synchronous imported value, so this framework adapter enters Effect Config once; the Effect CLI wrapper resolves pgpass before launching Drizzle.",
      "ownerIssue": 97,
      "test": "database/tests/database-credentials.effect.test.ts",
      "removalCondition": "Remove when Drizzle Kit accepts an Effect-native configuration loader; keep credential behavior in runtime/drizzle-config.ts and runtime/drizzle.ts.",
      "expiresOn": null
    },
    {
      "kind": "outer-host-adapter",
      "path": "database/runtime/drizzle.ts",
      "rule": "no-runtime-execution",
      "match": "BunRuntime.runMain",
      "maximumOccurrences": 1,
      "reason": "The Drizzle CLI adapter enters one scoped Effect runtime around typed configuration, pgpass resolution, and child-process execution.",
      "ownerIssue": 97,
      "test": "database/tests/runtime.effect.test.ts",
      "removalCondition": "Retain only while Drizzle Kit is invoked as a standalone command.",
      "expiresOn": null
    },
    {
      "kind": "outer-host-adapter",
      "path": "database/runtime/prepare.ts",
      "rule": "no-runtime-execution",
      "match": "BunRuntime.runMain",
      "maximumOccurrences": 1,
      "reason": "The migration-workspace executable enters one Effect runtime around typed configuration, hashing, filesystem publication, dependency installation, and standard output.",
      "ownerIssue": 97,
      "test": "database/tests/runtime.effect.test.ts",
      "removalCondition": "Retain only while database workspace preparation remains a standalone executable.",
      "expiresOn": null
    },
    {
      "kind": "outer-host-adapter",
      "path": "tooling/effect-migration/check.ts",
      "rule": "no-runtime-execution",
      "match": "BunRuntime.runMain",
      "maximumOccurrences": 1,
      "reason": "The executable policy checker needs one reviewed Bun process entry boundary.",
      "ownerIssue": 103,
      "test": "tooling/effect-migration/tests/check.test.ts",
      "removalCondition": "Retain only while the policy checker is a standalone Bun executable.",
      "expiresOn": null
    },
    {
      "kind": "outer-host-adapter",
      "path": "services/openfga/src/bootstrap.ts",
      "rule": "no-runtime-execution",
      "match": "BunRuntime.runMain",
      "maximumOccurrences": 1,
      "reason": "The OpenFGA bootstrap executable needs one reviewed Bun process entry boundary around its fully typed Effect program.",
      "ownerIssue": 103,
      "test": "services/openfga/tests/release.effect.test.ts",
      "removalCondition": "Retain only while OpenFGA bootstrap remains a standalone Bun Job entrypoint.",
      "expiresOn": null
    },
    {
      "kind": "outer-host-adapter",
      "path": "services/openfga/src/readiness.ts",
      "rule": "no-runtime-execution",
      "match": "BunRuntime.runMain",
      "maximumOccurrences": 1,
      "reason": "The OpenFGA readiness executable needs one reviewed Bun process entry boundary around its scoped Effect server lifecycle.",
      "ownerIssue": 103,
      "test": "services/openfga/tests/readiness.effect.test.ts",
      "removalCondition": "Retain only while OpenFGA readiness remains a standalone Bun sidecar entrypoint.",
      "expiresOn": null
    },
    {
      "kind": "outer-host-adapter",
      "path": "packages/agentos/runtime/github-workload-auth-main.ts",
      "rule": "no-runtime-execution",
      "match": "BunRuntime.runMain",
      "maximumOccurrences": 1,
      "reason": "The GitHub workload helper executable needs one reviewed Bun process entry boundary around its fully typed Effect program.",
      "ownerIssue": 103,
      "test": "packages/agentos/runtime/tests/github-workload-auth.effect.test.ts",
      "removalCondition": "Retain only while the native GitHub helper remains a standalone Bun executable.",
      "expiresOn": null
    },
    {
      "kind": "outer-host-adapter",
      "path": "packages/agentos/runtime/github-provider-main.ts",
      "rule": "no-runtime-execution",
      "match": "BunRuntime.runMain",
      "maximumOccurrences": 1,
      "reason": "The GitHub provider reconciler executable needs one reviewed Bun process entry boundary around its fully typed Effect program.",
      "ownerIssue": 103,
      "test": "packages/agentos/runtime/tests/github-provider.effect.test.ts",
      "removalCondition": "Retain only while the provider-home reconciler remains a standalone Bun executable.",
      "expiresOn": null
    },
    {
      "kind": "outer-host-adapter",
      "path": "packages/agentos/runtime/capacity-preflight-main.ts",
      "rule": "no-runtime-execution",
      "match": "BunRuntime.runMain",
      "maximumOccurrences": 1,
      "reason": "The capacity classifier executable needs one reviewed Bun process entry boundary around its typed stdin and schema program.",
      "ownerIssue": 104,
      "test": "packages/agentos/runtime/tests/capacity-preflight.effect.test.ts",
      "removalCondition": "Retain only while capacity preflight remains a standalone Bun executable.",
      "expiresOn": null
    },
    {
      "kind": "outer-host-adapter",
      "path": "packages/agentos/runtime/codex-token.ts",
      "rule": "no-runtime-execution",
      "match": "BunRuntime.runMain",
      "maximumOccurrences": 1,
      "reason": "The Codex projected-token helper needs one reviewed Bun process entry boundary around its bounded Effect filesystem and Stdio program.",
      "ownerIssue": 104,
      "test": "packages/agentos/runtime/tests/codex-token.effect.test.ts",
      "removalCondition": "Retain only while Codex command-refreshed authentication invokes a standalone credential helper.",
      "expiresOn": null
    },
    {
      "kind": "outer-host-adapter",
      "path": "packages/agentos/runtime/create-image-seed.ts",
      "rule": "no-runtime-execution",
      "match": "BunRuntime.runMain",
      "maximumOccurrences": 1,
      "reason": "The image-seed executable needs one reviewed Bun process entry boundary around its typed Effect filesystem, subprocess, and Stdio program.",
      "ownerIssue": 104,
      "test": "packages/agentos/runtime/tests/image-seed.effect.test.ts",
      "removalCondition": "Retain only while image construction invokes image seeding as a standalone executable.",
      "expiresOn": null
    },
    {
      "kind": "outer-host-adapter",
      "path": "packages/agentos/runtime/health.ts",
      "rule": "no-runtime-execution",
      "match": "BunRuntime.runMain",
      "maximumOccurrences": 1,
      "reason": "The semantic health executable needs one reviewed Bun process entry boundary around its scoped Effect runtime.",
      "ownerIssue": 104,
      "test": "packages/agentos/runtime/tests/health.effect.test.ts",
      "removalCondition": "Retain only while semantic health remains a standalone Bun probe executable.",
      "expiresOn": null
    },
    {
      "kind": "outer-host-adapter",
      "path": "packages/agentos/runtime/readiness-state-main.ts",
      "rule": "no-runtime-execution",
      "match": "BunRuntime.runMain",
      "maximumOccurrences": 1,
      "reason": "The crewmate confirmation executable needs one reviewed Bun process entry boundary around its typed Effect program.",
      "ownerIssue": 104,
      "test": "packages/agentos/runtime/tests/crewmate-readiness.effect.test.ts",
      "removalCondition": "Retain only while readiness confirmation remains a standalone Bun executable.",
      "expiresOn": null
    },
    {
      "kind": "outer-host-adapter",
      "path": "packages/agentos/runtime/prepare-home.ts",
      "rule": "no-runtime-execution",
      "match": "BunRuntime.runMain",
      "maximumOccurrences": 1,
      "reason": "The retained-home preparation executable needs one reviewed Bun process boundary around its typed Effect configuration, filesystem, provider, and subprocess program.",
      "ownerIssue": 104,
      "test": "packages/agentos/runtime/tests/prepare-home.effect.test.ts",
      "removalCondition": "Retain only while Kubernetes invokes Mate home preparation as a standalone init-container executable.",
      "expiresOn": null
    },
    {
      "kind": "outer-host-adapter",
      "path": "packages/agentos/runtime/run-mate.ts",
      "rule": "no-runtime-execution",
      "match": "BunRuntime.runMain",
      "maximumOccurrences": 1,
      "reason": "The persistent Mate executable needs one reviewed Bun process boundary around its scoped Effect Herdr and Pi lifecycle program.",
      "ownerIssue": 104,
      "test": "packages/agentos/runtime/tests/runtime.effect.test.ts",
      "removalCondition": "Retain only while Kubernetes invokes the persistent Mate lifecycle as a standalone executable.",
      "expiresOn": null
    },
    {
      "kind": "outer-host-adapter",
      "path": "packages/agentos/runtime/tests/fixtures/fake-herdr.effect.ts",
      "rule": "no-runtime-execution",
      "match": "BunRuntime.runMain",
      "maximumOccurrences": 1,
      "reason": "The fake Herdr executable needs one reviewed Bun process entry boundary around its typed Effect configuration, filesystem, subprocess, and lifecycle program.",
      "ownerIssue": 102,
      "test": "packages/agentos/runtime/tests/runtime.effect.test.ts",
      "removalCondition": "Retain only while Mate runtime conformance requires a real Herdr subprocess ABI.",
      "expiresOn": null
    },
    {
      "kind": "outer-host-adapter",
      "path": "services/github-broker/src/main.ts",
      "rule": "no-runtime-execution",
      "match": "BunRuntime.runMain",
      "maximumOccurrences": 1,
      "reason": "The GitHub broker executable needs one reviewed Bun process entry boundary around its scoped Effect server program.",
      "ownerIssue": 103,
      "test": "services/github-broker/tests/broker.effect.test.ts",
      "removalCondition": "Retain only while the GitHub broker remains a standalone Bun service entrypoint.",
      "expiresOn": null
    },
    {
      "kind": "outer-host-adapter",
      "path": "services/ai-gateway/src/main.ts",
      "rule": "no-runtime-execution",
      "match": "BunRuntime.runMain",
      "maximumOccurrences": 1,
      "reason": "The AI Gateway executable needs one reviewed Bun process entry boundary around its fully typed, scoped Effect Platform application.",
      "ownerIssue": 105,
      "test": "services/ai-gateway/tests/main.effect.test.ts",
      "removalCondition": "Retain only while the AI Gateway remains a standalone Bun service and keep all domain behavior inside Effect.",
      "expiresOn": null
    },
    {
      "kind": "outer-host-adapter",
      "path": "services/ai-gateway/src/workload-client-proxy-main.ts",
      "rule": "no-runtime-execution",
      "match": "BunRuntime.runMain",
      "maximumOccurrences": 1,
      "reason": "The workload client proxy executable needs one reviewed Bun process entry boundary around its fully typed, scoped Effect Platform application.",
      "ownerIssue": 105,
      "test": "services/ai-gateway/tests/workload-client-proxy.effect.test.ts",
      "removalCondition": "Retain only while the loopback workload client proxy remains a standalone Bun sidecar entrypoint and keep all request behavior inside Effect.",
      "expiresOn": null
    },
    {
      "kind": "outer-host-adapter",
      "path": "services/egress-authz/src/main.ts",
      "rule": "no-runtime-execution",
      "match": "BunRuntime.runMain",
      "maximumOccurrences": 1,
      "reason": "The egress authorization service needs one reviewed Bun process entry boundary around its fully typed Effect Platform application.",
      "ownerIssue": 96,
      "test": "services/egress-authz/tests/main.effect.test.ts",
      "removalCondition": "Retain only while the egress authorizer remains a standalone Bun service entrypoint.",
      "expiresOn": null
    },
    {
      "kind": "outer-host-adapter",
      "path": "services/a2a/src/main.ts",
      "rule": "no-runtime-execution",
      "match": "BunRuntime.runMain",
      "maximumOccurrences": 1,
      "reason": "The PostgreSQL-first A2A service needs one reviewed Bun process entry boundary around its fully typed, scoped Effect Platform application.",
      "ownerIssue": 125,
      "test": "services/a2a/tests/main.effect.test.ts",
      "removalCondition": "Retain only while the A2A adapter remains a standalone Bun service and keep all domain behavior inside Effect.",
      "expiresOn": null
    },
    {
      "kind": "outer-host-adapter",
      "path": "services/agentgateway/src/readiness-main.ts",
      "rule": "no-runtime-execution",
      "match": "BunRuntime.runMain",
      "maximumOccurrences": 1,
      "reason": "The AgentGateway semantic readiness executable needs one reviewed Bun process entry around its typed, bounded Effect HTTP probe and server program.",
      "ownerIssue": 96,
      "test": "services/agentgateway/tests/readiness.effect.test.ts",
      "removalCondition": "Retain only while Kubernetes runs semantic AgentGateway readiness as a standalone sidecar service and keep all probe behavior inside Effect.",
      "expiresOn": null
    }
  ]
}