agentic-dev/packages/core-eslint/rules/no-undeclared-consent-check.js

import { parseManifestFully } from "./_manifest-ast.js";
import { manifestPathForFeature } from "./_manifest-source.js";
import { repoRootSchema } from "./_rule-schema.js";
import { resolveRuleContext } from "./_rule-context.js";

/** @type {import("eslint").Rule.RuleModule} */
export default {
  meta: {
    type: "suggestion",
    docs: {
      description:
        'consent.isGranted("X") inside a use-case file must match a category declared in manifest.requiresConsent.',
    },
    schema: repoRootSchema,
    messages: {
      undeclared:
        '{{useCase}} calls consent.isGranted("{{category}}") but "{{category}}" is not declared in manifest.requiresConsent. Add it to the manifest or remove the call.',
      unusedDeclaration:
        "{{useCase}} manifest declares requiresConsent but no consent.isGranted() call found in this file. Add consent checks or clear the manifest declaration.",
    },
  },
  create(context) {
    const rc = resolveRuleContext(context);
    if (!rc) return {};
    const { useCaseName, featureRoot } = rc;
    const manifest = parseManifestFully(manifestPathForFeature(featureRoot));
    if (!manifest) return {};
    const requiresConsent = manifest.requiresConsent ?? [];
    if (requiresConsent.length === 0) return {};

    const declared = new Set(requiresConsent);
    let hasConsentCall = false;

    return {
      CallExpression(node) {
        if (
          node.callee.type === "MemberExpression" &&
          node.callee.object.type === "Identifier" &&
          node.callee.object.name === "consent" &&
          node.callee.property.type === "Identifier" &&
          node.callee.property.name === "isGranted" &&
          node.arguments.length > 0 &&
          node.arguments[0].type === "Literal" &&
          typeof node.arguments[0].value === "string"
        ) {
          hasConsentCall = true;
          const category = node.arguments[0].value;
          if (!declared.has(category)) {
            context.report({
              node,
              messageId: "undeclared",
              data: { category, useCase: useCaseName },
            });
          }
        }
      },
      "Program:exit"(node) {
        if (!hasConsentCall) {
          context.report({
            node,
            messageId: "unusedDeclaration",
            data: { useCase: useCaseName },
          });
        }
      },
    };
  },
};