refactor(layering): fold the four cutover policies into one parametrized gate

ADR 0019 §8: the per-command cutover gates consolidate into one parametrized
runtime-command-cutover gate driven by a table of migrated commands. Adding a
migrated command adds a row; the mechanism carries one planted-red proof instead
of one per command.

Part of #1739 (wave 0)

Author: thymikee

package.json

@@ -130,7 +130,7 @@
     "check:affected:test": "node --experimental-strip-types scripts/node-test-tmpdir.ts --experimental-strip-types --test scripts/check-affected/model.test.ts scripts/check-affected/platform-packages.test.ts scripts/check-affected/run.test.ts",
     "check:coverage-changed": "node --experimental-strip-types scripts/coverage-changed/run.ts",
     "check:coverage-changed:test": "node --experimental-strip-types scripts/node-test-tmpdir.ts --experimental-strip-types --test scripts/coverage-changed/model.test.ts scripts/coverage-changed/run.test.ts",
-    "check:layering": "node --experimental-strip-types scripts/node-test-tmpdir.ts --experimental-strip-types --test scripts/layering/model.test.ts scripts/layering/zone-policy.test.ts scripts/layering/daemon-modularity.test.ts scripts/layering/package-boundaries.test.ts scripts/layering/platform-package-policy.test.ts scripts/layering/platform-package-repository.test.ts scripts/layering/platform-package-source-policy.test.ts scripts/layering/device-inventory-cutover-policy.test.ts scripts/layering/logs-runtime-cutover-policy.test.ts scripts/layering/network-runtime-cutover-policy.test.ts scripts/layering/record-runtime-cutover-policy.test.ts scripts/layering/contracts-implementation-policy.test.ts scripts/layering/facade-exports.test.ts scripts/layering/bin-alias-fast-path.test.ts && node --experimental-strip-types scripts/layering/check.ts",
+    "check:layering": "node --experimental-strip-types scripts/node-test-tmpdir.ts --experimental-strip-types --test scripts/layering/model.test.ts scripts/layering/zone-policy.test.ts scripts/layering/daemon-modularity.test.ts scripts/layering/package-boundaries.test.ts scripts/layering/platform-package-policy.test.ts scripts/layering/platform-package-repository.test.ts scripts/layering/platform-package-source-policy.test.ts scripts/layering/runtime-command-cutover-policy.test.ts scripts/layering/runtime-command-cutover-table.test.ts scripts/layering/runtime-command-cutover-extensions.test.ts scripts/layering/contracts-implementation-policy.test.ts scripts/layering/facade-exports.test.ts scripts/layering/bin-alias-fast-path.test.ts && node --experimental-strip-types scripts/layering/check.ts",
     "depgraph": "node --experimental-strip-types scripts/depgraph/build.ts",
     "depgraph:test": "node --experimental-strip-types scripts/node-test-tmpdir.ts --experimental-strip-types --test scripts/depgraph/model.test.ts scripts/depgraph/affected.test.ts",
     "check:production-exports": "fallow dead-code --config fallow-production-exports.json --production --unused-exports --fail-on-issues",

scripts/layering/check.ts

@@ -33,10 +33,10 @@
 //     owner" shape as R7's SessionState ownership, applied to bin.ts's `--help` fast path.
 //   - Over PLATFORM PACKAGE COMPOSITION: six private metadata façades meet at the exact root
 //     composition file; premature implementation loading and forbidden cross-boundary edges fail (R13).
-//   - Over the DEVICES COMMAND CUTOVER: the handler calls the neutral inventory gateway and no
-//     superseded inventory module, import, or identifier remains in production (R13).
-//   - Over COMMAND-ATOMIC RUNTIME CUTOVERS: retired logs, network, and record routes/admission cannot
-//     coexist with their operation-fact-derived descriptor and handler paths (R14-R16).
+//   - Over COMMAND-ATOMIC RUNTIME CUTOVERS: one parametrized gate reads the migrated-command
+//     table (devices R13, logs R14, network R15, record R16) and proves each command keeps
+//     exactly one platform-execution path — retired routes, admission, modules, and widened
+//     runtime access cannot coexist with its operation-fact-derived descriptor and handler.
 // Only `(root)` is unranked among src/ zones (see `UNRANKED_ZONES` in model.ts):
 // it holds entrypoints and composition roots. Extracted workspace package zones
 // are classified separately and held behind R11 instead of the src folder spine.
@@ -87,32 +87,15 @@ import {
   platformPackagePolicySummary,
 } from './platform-package-policy.ts';
 import {
-  checkDeviceInventoryCutover,
-  deviceInventoryCutoverSummary,
-} from './device-inventory-cutover-policy.ts';
+  checkRuntimeCommandCutover,
+  runtimeCommandCutoverSummary,
+} from './runtime-command-cutover-policy.ts';
 import {
   listUntrackedProductionTypeScriptFiles,
   readTrackedPlatformPackageDeclarations,
 } from './platform-package-repository.ts';
 import { policyLead, policyViolation, ZONE_POLICIES } from './zone-policy.ts';
-import {
-  logsLegacyRouteViolations,
-  logsRuntimeNarrowingViolations,
-  logsSessionStateOwnershipViolations,
-  sourceExecutedUsingDeclarationViolations,
-} from './logs-runtime-cutover-policy.ts';
 import { contractsImplementationAuthorityViolations } from './contracts-implementation-policy.ts';
-import {
-  networkLegacyRouteViolations,
-  networkRuntimeNarrowingViolations,
-  networkRuntimeRouteViolations,
-} from './network-runtime-cutover-policy.ts';
-import {
-  recordLegacyRouteViolations,
-  recordRuntimeNarrowingViolations,
-  recordRuntimeRouteViolations,
-} from './record-runtime-cutover-policy.ts';
-import { recordRuntimeDaemonMechanicsViolations } from './record-runtime-mechanics-policy.ts';
 import { recordRuntimeRegistryJoinViolations } from './record-runtime-registry-policy.ts';
 
 const repoRoot = execFileSync('git', ['rev-parse', '--show-toplevel'], {
@@ -191,16 +174,6 @@ function checkCycles(edges: readonly ResolvedImportEdge[]): LayeringViolation[]
   }));
 }
 
-function checkLogsRuntimeCutover(sources: ReadonlyMap<string, string>): LayeringViolation[] {
-  const production = [...sources].map(([file, source]) => ({ path: file, source }));
-  return [
-    ...logsLegacyRouteViolations(production),
-    ...logsRuntimeNarrowingViolations(production),
-    ...logsSessionStateOwnershipViolations(production),
-    ...sourceExecutedUsingDeclarationViolations(production),
-  ];
-}
-
 function checkContractsImplementationAuthority(
   sources: ReadonlyMap<string, string>,
 ): LayeringViolation[] {
@@ -209,32 +182,14 @@ function checkContractsImplementationAuthority(
   );
 }
 
-function checkNetworkRuntimeCutover(sources: ReadonlyMap<string, string>): LayeringViolation[] {
-  const production = [...sources].map(([file, source]) => ({ path: file, source }));
-  return [
-    ...networkLegacyRouteViolations(production),
-    ...networkRuntimeNarrowingViolations(production),
-    ...networkRuntimeRouteViolations(production),
-  ].map((violation) => {
-    const separator = violation.indexOf(': ');
-    return {
-      rule: 'R15 network-runtime-cutover',
-      file: separator < 0 ? '(network runtime)' : violation.slice(0, separator),
-      line: 1,
-      message: separator < 0 ? violation : violation.slice(separator + 2),
-    };
-  });
-}
-
-function checkRecordRuntimeCutover(sources: ReadonlyMap<string, string>): LayeringViolation[] {
+/**
+ * The record registry-join scan is a descriptor-shape check, not a cutover claim, so it
+ * stays its own module. Record's daemon-mechanics scan is the row's lifecycle proof and
+ * runs from the cutover table. Both report under R16.
+ */
+function checkRecordRuntimeRegistryJoin(sources: ReadonlyMap<string, string>): LayeringViolation[] {
   const production = [...sources].map(([file, source]) => ({ path: file, source }));
-  return [
-    ...recordLegacyRouteViolations(production),
-    ...recordRuntimeDaemonMechanicsViolations(production),
-    ...recordRuntimeNarrowingViolations(production),
-    ...recordRuntimeRegistryJoinViolations(production),
-    ...recordRuntimeRouteViolations(production),
-  ].map((violation) => {
+  return recordRuntimeRegistryJoinViolations(production).map((violation) => {
     const separator = violation.indexOf(': ');
     return {
       rule: 'R16 record-runtime-cutover',
@@ -618,7 +573,7 @@ function report(
         `inside its declared owner (R7); every zero-dep CI job resolves without ` +
         `node_modules (R8); ${typeCycleNote(typeCycle)}; ${daemonModularitySummary()}; ` +
         `${packageBoundariesSummary(repoRoot)}; ${platformPackagePolicySummary()}; ` +
-        `${deviceInventoryCutoverSummary()}; and bin.ts imports normalizeCliCommandAlias, ` +
+        `${runtimeCommandCutoverSummary()}; and bin.ts imports normalizeCliCommandAlias, ` +
         `actually passes it into buildCommandUsageText, and holds no local alias literals ` +
         `(R12).\n`,
     );
@@ -657,10 +612,9 @@ export function main(): number {
   const violations = [
     ...checkLayeringRules(edges),
     ...checkCycles(edges),
-    ...checkLogsRuntimeCutover(sources),
+    ...checkRuntimeCommandCutover(sources),
+    ...checkRecordRuntimeRegistryJoin(sources),
     ...checkContractsImplementationAuthority(sources),
-    ...checkNetworkRuntimeCutover(sources),
-    ...checkRecordRuntimeCutover(sources),
     ...checkContractsImplementationAuthority(sources),
     ...checkBackEdges(edges),
     ...checkTypeInversions(edges),
@@ -677,7 +631,6 @@ export function main(): number {
       readTrackedPlatformPackageDeclarations(repoRoot),
       { untrackedProductionFiles: listUntrackedProductionTypeScriptFiles(repoRoot) },
     ),
-    ...checkDeviceInventoryCutover(sources),
   ];
   return report(sourceFiles, violations, typeCycle);
 }

…ts/layering/record-runtime-policy-ast.ts scripts/layering/cutover-policy-ast.tsscripts/layering/record-runtime-policy-ast.ts renamed to scripts/layering/cutover-policy-ast.ts scripts/layering/record-runtime-policy-ast.ts renamed to scripts/layering/cutover-policy-ast.ts

@@ -1,4 +1,5 @@
-export type RecordRuntimeProductionSource = Readonly<{ path: string; source: string }>;
+/** A production file the cutover policies scan: repo-relative path plus its source. */
+export type ProductionSource = Readonly<{ path: string; source: string }>;
 
 export function memberName(node: Record<string, unknown>): string | undefined {
   const property = node.property as Record<string, unknown> | undefined;