module_boundary_manifest.json

{
  "target_dependency_guards": [
    {
      "id": "execschemascannerdependencyguard",
      "target": "Exec",
      "forbidden_dependency_prefixes": ["SchemaScanner"],
      "allowed_dependencies": ["SchemaScannerCore"],
      "remediation": "Keep Exec dependent only on the SchemaScannerCore contract; compose concrete schema scanner layers and the builtin factory above Exec."
    }
  ],
  "modules": [
    {
      "id": "base",
      "doc_label": "Base",
      "summary": "Lowest-level BE primitives. Keep it free of higher-level StarRocks module dependencies.",
      "owned_targets": ["Base"],
      "owned_roots": ["be/src/base"],
      "allowed_include_prefixes": ["base/", "gutil/", "gen_cpp/"],
      "allowed_target_deps": ["Gutil"],
      "allowed_test_targets": ["base_test"],
      "allowed_test_link_deps": ["Base", "Gutil", "StarRocksGen"],
      "remediation": "Move shared helpers into Base/Gutil or introduce a lower-level interface instead of pulling in higher-level BE modules."
    },
    {
      "id": "gutil",
      "doc_label": "Gutil",
      "summary": "Standalone utility substrate. Do not couple it to BE modules.",
      "owned_targets": ["Gutil"],
      "owned_roots": ["be/src/gutil"],
      "allowed_include_prefixes": ["gutil/"],
      "allowed_target_deps": ["Common", "Base", "Gutil"],
      "allowed_test_targets": [],
      "allowed_test_link_deps": [],
      "remediation": "Keep Gutil independent; move BE-specific logic out instead of importing BE modules."
    },
    {
      "id": "common",
      "doc_label": "Common",
      "summary": "Core shared infrastructure above Base/Gutil and generated code only. Higher-level BE modules must not leak back into it.",
      "owned_targets": ["Common"],
      "owned_roots": ["be/src/common"],
      "allowed_include_prefixes": ["common/", "base/", "gutil/", "gen_cpp/"],
      "allowed_target_deps": ["Base", "Gutil", "StarRocksGen"],
      "allowed_test_targets": ["common_test"],
      "allowed_test_link_deps": ["Common", "Base", "Gutil", "StarRocksGen"],
      "remediation": "Move the dependency upward or add a lower-level abstraction; Common may only depend on Base, Gutil, and generated code."
    },
    {
      "id": "cache",
      "doc_label": "Cache",
      "summary": "Cache implementation module for DataCache facade, cache engines, scan read-buffer/cache stream wrappers, monitors, metrics, utilities, StarCache integration, and peer-cache RPC reads without service/bootstrap or ExecEnv singleton coupling.",
      "owned_targets": ["Cache"],
      "owned_roots": ["be/src/cache"],
      "allowed_include_prefixes": [
        "cache/",
        "common/brpc/",
        "runtime/current_thread.h",
        "runtime/mem_tracker.h",
        "fs/",
        "io/",
        "common/",
        "base/",
        "gutil/",
        "gen_cpp/"
      ],
      "forbidden_include_prefixes": [
        "runtime/",
        "storage/",
        "service/",
        "platform/http/",
        "agent/",
        "exec/",
        "connector/",
        "util/"
      ],
      "forbidden_includes": [
        "exec/exec_env.h"
      ],
      "allowed_target_deps": ["Runtime", "FileSystem", "IO", "Common", "Base", "Gutil", "StarRocksGen"],
      "allowed_test_targets": ["cache_test"],
      "allowed_test_link_deps": [
        "Cache",
        "Runtime",
        "FileSystem",
        "IO",
        "Common",
        "Base",
        "Gutil",
        "StarRocksGen"
      ],
      "remediation": "Keep Cache self-contained within cache engines, scan read-buffer/cache stream wrappers, monitors, metrics, utilities, and injected peer-cache BRPC stubs; keep service startup, storage code, HTTP/admin code, and ExecEnv singleton access outside cache."
    },
    {
      "id": "httpservice",
      "doc_label": "HttpService",
      "summary": "BE HTTP pages, admin actions, load actions, download helpers, and web handlers.",
      "owned_targets": ["HttpService"],
      "owned_roots": ["be/src/http"],
      "allowed_include_prefixes": [
        "http/",
        "cache/",
        "compute_env/",
        "data_workflows/",
        "exec/",
        "exec_primitive/",
        "exprs/",
        "fs/",
        "io/",
        "orchestration/",
        "platform/",
        "runtime/",
        "storage/",
        "storage_primitive/",
        "common/",
        "base/",
        "gutil/",
        "gen_cpp/"
      ],
      "forbidden_include_prefixes": ["service/", "service_be/", "agent/", "connector/"],
      "forbidden_includes": [],
      "allowed_target_deps": ["Storage", "DataWorkflows", "Orchestration", "Runtime", "ComputeEnv", "Exec", "ExecRuntime", "Expr", "ExprDict", "ExprTableFunction", "ExprUtility", "FileSystem", "IO", "Platform", "StoragePrimitive", "Cache", "Common", "Base", "Gutil", "StarRocksGen"],
      "allowed_test_targets": [],
      "allowed_test_link_deps": [],
      "remediation": "Keep BE HTTP pages, actions, download helpers, and web handlers in HttpService; keep reusable lower-level helpers in their owning modules such as Platform and Runtime."
    },
    {
      "id": "io",
      "doc_label": "IO",
      "summary": "Minimal IO foundation used by FS and upper layers.",
      "owned_targets": ["IO"],
      "owned_roots": ["be/src/io"],
      "allowed_include_prefixes": ["io/", "common/", "base/", "gutil/", "gen_cpp/"],
      "forbidden_include_prefixes": [],
      "allowed_target_deps": ["Common", "Base", "Gutil"],
      "allowed_test_targets": ["io_test"],
      "allowed_test_link_deps": ["IO", "Common", "Base", "Gutil", "StarRocksGen"],
      "remediation": "Keep IO free of higher FS/runtime/storage/exec/service code; move the dependency upward or add a lower-level interface."
    },
    {
      "id": "filesystem",
      "doc_label": "FileSystem",
      "summary": "Filesystem module on top of IO, including core abstractions and non-JNI filesystem providers.",
      "owned_targets": ["FileSystem"],
      "owned_globs": [
        "be/src/fs/**"
      ],
      "allowed_include_prefixes": ["fs/", "io/", "common/", "base/", "gutil/", "gen_cpp/"],
      "forbidden_include_prefixes": ["fs_ext/"],
      "forbidden_includes": ["fs/key_cache.h"],
      "allowed_target_deps": ["IO", "Common", "Base", "Gutil"],
      "allowed_test_targets": ["fs_test"],
      "allowed_test_link_deps": ["FileSystem", "IO", "Common", "Base", "Gutil", "StarRocksGen"],
      "remediation": "Keep FileSystem limited to IO plus filesystem code that does not require runtime/JNI integration; move runtime-backed filesystem providers to fs_ext."
    },
    {
      "id": "hdfsfilesystem",
      "doc_label": "HdfsFileSystem",
      "summary": "HDFS filesystem extension above FileSystem for libhdfs/JNI runtime integration.",
      "owned_targets": ["HdfsFileSystem"],
      "owned_roots": ["be/src/fs_ext/hdfs"],
      "allowed_include_prefixes": ["fs_ext/hdfs/", "fs/", "io/", "runtime/", "common/", "base/", "gutil/", "gen_cpp/"],
      "forbidden_include_prefixes": ["agent/", "cache/", "connector/", "data_workflows/", "exec/", "formats/", "http/", "module/", "platform/", "service/", "storage/", "tools/", "types/"],
      "allowed_target_deps": ["FileSystem", "Runtime", "IO", "Common", "Base", "Gutil", "StarRocksGen"],
      "allowed_test_targets": ["hdfs_filesystem_test"],
      "allowed_test_link_deps": ["HdfsFileSystem", "FileSystem", "Runtime", "IO", "Common", "Base", "Gutil", "StarRocksGen"],
      "remediation": "Keep HDFS-specific libhdfs/JNI integration in fs_ext; shared filesystem contracts belong in FileSystem."
    },
    {
      "id": "platform",
      "doc_label": "Platform",
      "summary": "Shared BE platform utilities above IO/FS/Common and below Runtime/Exec/Storage/Service, including reusable HTTP client/server primitives.",
      "owned_targets": ["Platform"],
      "owned_roots": ["be/src/platform"],
      "allowed_include_prefixes": ["platform/", "fs/", "io/", "types/", "common/", "base/", "gutil/", "gen_cpp/"],
      "allowed_target_deps": ["FileSystem", "IO", "Types", "Common", "Base", "Gutil", "StarRocksGen"],
      "allowed_test_targets": ["platform_test"],
      "allowed_test_link_deps": ["Platform"],
      "remediation": "Keep Platform limited to reusable host, filesystem-adjacent, download, temp-file, environment, retry, HTTP primitive, and platform-level helpers; move runtime, exec, storage, and service integration upward."
    },
    {
      "id": "typecore",
      "doc_label": "Types",
      "summary": "Core type system without runtime/storage/exec coupling.",
      "owned_targets": ["Types"],
      "owned_globs": ["be/src/types/**"],
      "allowed_include_prefixes": ["types/", "common/", "base/", "gutil/", "gen_cpp/"],
      "allowed_target_deps": ["Common", "Base", "Gutil"],
      "allowed_test_targets": ["types_test"],
      "allowed_test_link_deps": ["Types", "Common", "Base", "Gutil", "StarRocksGen"],
      "remediation": "Keep Types independent of runtime/util/storage/exec layers; move integration code into higher layers."
    },
    {
      "id": "columncore",
      "doc_label": "ColumnCore",
      "summary": "Core column representations that must stay independent of ChunkCore and higher layers.",
      "owned_targets": ["ColumnCore"],
      "owned_globs": ["be/src/column/**"],
      "excluded_globs": [
        "be/src/column/chunk.*",
        "be/src/column/chunk_factory.*",
        "be/src/column/chunk_schema_helper.*",
        "be/src/column/chunk_extra_data.*",
        "be/src/column/chunk_slice.*",
        "be/src/column/column_access_path.*",
        "be/src/column/datum_tuple.*",
        "be/src/column/field.*",
        "be/src/column/schema.*",
        "be/src/column/sorting/**",
        "be/src/column/segmented_chunk.*"
      ],
      "allowed_include_prefixes": ["column/", "types/", "common/", "base/", "gutil/", "gen_cpp/"],
      "allowed_target_deps": ["Types", "Common", "Base", "Gutil", "StarRocksGen"],
      "allowed_test_targets": ["column_test"],
      "allowed_test_link_deps": ["ColumnCore", "Types", "Common", "Base", "Gutil", "StarRocksGen"],
      "remediation": "Keep ColumnCore free of ChunkCore/Runtime/Exec/Storage coupling; move integration code upward or introduce an interface."
    },
    {
      "id": "chunkcore",
      "doc_label": "ChunkCore",
      "summary": "Core chunk, schema, field, and chunk-adjacent helpers on top of ColumnCore.",
      "owned_targets": ["ChunkCore"],
      "allowed_include_prefixes": ["column/", "types/", "common/", "base/", "gutil/", "gen_cpp/"],
      "allowed_target_deps": ["ColumnCore", "Types", "Common", "Base", "Gutil", "StarRocksGen"],
      "allowed_test_targets": ["chunk_test"],
      "allowed_test_link_deps": ["ChunkCore", "ColumnCore", "Types", "Common", "Base", "Gutil", "StarRocksGen"],
      "remediation": "Keep ChunkCore limited to chunk/schema helpers and free of Runtime/Exec/Storage-specific serialization coupling."
    },
    {
      "id": "columnsortcore",
      "doc_label": "ColumnSortCore",
      "summary": "Reusable column and chunk sorting primitives above ChunkCore without runtime, exec, storage, or expression coupling.",
      "owned_targets": ["ColumnSortCore"],
      "owned_globs": ["be/src/column/sorting/**"],
      "allowed_include_prefixes": ["column/", "types/", "common/", "base/", "gutil/", "gen_cpp/"],
      "allowed_target_deps": ["ChunkCore", "ColumnCore", "Types", "Common", "Base", "Gutil", "StarRocksGen"],
      "allowed_test_targets": ["column_sort_core_test"],
      "allowed_test_link_deps": ["ColumnSortCore", "ChunkCore", "ColumnCore", "Types", "Common", "Base", "Gutil", "StarRocksGen"],
      "remediation": "Keep ColumnSortCore limited to reusable sorting and permutation primitives; move runtime merge/cursor orchestration to ComputeEnv or higher layers."
    },
    {
      "id": "runtime",
      "doc_label": "Runtime",
      "summary": "Core runtime building blocks and process-scoped runtime environment resources without Exec/Storage/Service coupling.",
      "owned_targets": ["Runtime"],
      "additional_owned_globs": [
        "be/src/runtime/arena_allocator.h",
        "be/src/runtime/bucket_aware_partition.h",
        "be/src/runtime/closure_guard.h",
        "be/src/runtime/current_thread.h",
        "be/src/runtime/descriptor_helper.h",
        "be/src/runtime/descriptors.h",
        "be/src/runtime/descriptors_ext.h",
        "be/src/runtime/descriptors_fwd.h",
        "be/src/runtime/exception.h",
        "be/src/runtime/exec_env_fwd.h",
        "be/src/runtime/heartbeat_flags.h",
        "be/src/runtime/mem_pool.h",
        "be/src/runtime/mem_tracker.h",
        "be/src/runtime/mem_tracker_fwd.h",
        "be/src/runtime/merge_commit_trace.h",
        "be/src/runtime/multi_precision.h",
        "be/src/runtime/process_memory_metrics.h",
        "be/src/runtime/query_context_lifetime.h",
        "be/src/runtime/raw_container_checked.h",
        "be/src/runtime/rest_monitor_iface.h",
        "be/src/runtime/runtime_fwd.h",
        "be/src/runtime/runtime_filter.h",
        "be/src/runtime/runtime_filter_cache.h",
        "be/src/runtime/runtime_filter_factory.h",
        "be/src/runtime/runtime_filter_layout.h",
        "be/src/runtime/runtime_filter_query_lifecycle.h",
        "be/src/runtime/runtime_in_filter.h",
        "be/src/runtime/runtime_metrics.h",
        "be/src/runtime/runtime_state.h",
        "be/src/runtime/runtime_state_fwd.h",
        "be/src/runtime/service_contexts.h",
        "be/src/runtime/time_guard.*",
        "be/src/runtime/memory/*.h"
      ],
      "allowed_include_prefixes": ["runtime/", "platform/", "column/", "types/", "common/", "base/", "gutil/", "gen_cpp/"],
      "forbidden_include_prefixes": [
        "exec/",
        "storage/",
        "service/",
        "connector/"
      ],
      "forbidden_includes": [
        "runtime/arrow_result_writer.h",
        "runtime/broker_mgr.h",
        "runtime/buffer_control_block.h",
        "runtime/customized_result_writer.h",
        "runtime/data_stream_mgr.h",
        "runtime/data_stream_recvr.h",
        "runtime/data_stream_sender.h",
        "exec/exec_env.h",
        "runtime/export_sink.h",
        "runtime/external_scan_context_mgr.h",
        "runtime/file_result_writer.h",
        "runtime/http_result_writer.h",
        "runtime/hive_table_sink.h",
        "runtime/iceberg_table_sink.h",
        "runtime/lake_tablets_channel.h",
        "runtime/load_channel.h",
        "runtime/load_channel_mgr.h",
        "runtime/local_pass_through_buffer.h",
        "exec/lookup_stream_mgr.h",
        "runtime/message_body_sink.h",
        "runtime/metadata_result_writer.h",
        "runtime/mysql_result_writer.h",
        "runtime/mysql_table_sink.h",
        "runtime/mysql_table_writer.h",
        "runtime/result_buffer_mgr.h",
        "runtime/result_queue_mgr.h",
        "runtime/result_sink.h",
        "runtime/schema_table_sink.h",
        "runtime/table_function_table_sink.h",
        "runtime/tablets_channel.h",
        "runtime/variable_result_writer.h"
      ],
      "allowed_target_deps": ["Platform", "ChunkCore", "ColumnCore", "Types", "Common", "Base", "Gutil", "StarRocksGen"],
      "allowed_test_targets": ["runtime_test"],
      "allowed_test_link_deps": ["Runtime", "Platform", "ChunkCore", "ColumnCore", "Types", "Common", "Base", "Gutil", "StarRocksGen"],
      "remediation": "Keep Runtime restricted to core runtime infrastructure and process-scoped runtime environment resources; move execution, service, storage, stream-load, and connector integration into higher modules."
    },
    {
      "id": "format",
      "doc_label": "Format",
      "summary": "Format module for core format primitives and concrete CSV, JSON, Avro, ORC, and Parquet implementations.",
      "owned_targets": ["Formats", "FormatParquet", "FormatOrc", "FormatAvro", "FormatJson", "FormatCsv", "FormatCore"],
      "owned_roots": ["be/src/formats"],
      "excluded_globs": ["be/src/formats/orc/apache-orc/**"],
      "allowed_include_prefixes": [
        "formats/",
        "cache/",
        "compute_env/",
        "exec_primitive/runtime_filter/",
        "exprs/",
        "runtime/",
        "fs/",
        "io/",
        "storage_primitive/",
        "column/",
        "types/",
        "common/",
        "base/",
        "gutil/",
        "gen_cpp/"
      ],
      "allowed_target_deps": [
        "ComputeEnv",
        "StoragePrimitive",
        "ExecPrimitive",
        "Expr",
        "Runtime",
        "FileSystem",
        "IO",
        "Cache",
        "ChunkCore",
        "ColumnCore",
        "Types",
        "Common",
        "Base",
        "Gutil",
        "StarRocksGen",
        "orc"
      ],
      "allowed_test_targets": ["format_test"],
      "allowed_test_link_deps": [
        "Formats",
        "Expr",
        "Runtime",
        "FileSystem",
        "ChunkCore",
        "ColumnCore",
        "Types",
        "Common",
        "Base",
        "Gutil",
        "StarRocksGen"
      ],
      "remediation": "Keep format code inside the Format module; move connector orchestration and higher execution policy upward."
    },
    {
      "id": "storageprimitive",
      "doc_label": "StoragePrimitive",
      "summary": "Shared storage-access primitives, predicate contracts, predicate trees, iterator/merge/aggregation helpers, and value/schema types used by Storage, Exec, Connector, Format, and ComputeEnv without concrete Storage engine, tablet, rowset, lake, service, or full Exec coupling.",
      "owned_targets": ["StoragePrimitive"],
      "owned_roots": ["be/src/storage_primitive"],
      "allowed_include_prefixes": [
        "storage_primitive/",
        "exec_primitive/",
        "exprs/",
        "runtime/",
        "column/",
        "types/",
        "common/",
        "base/",
        "gutil/",
        "gen_cpp/"
      ],
      "forbidden_include_prefixes": ["storage/", "exec/", "service/", "connector/", "http/", "cache/", "util/"],
      "forbidden_includes": ["exec/exec_env.h"],
      "allowed_target_deps": ["ExecPrimitive", "Expr", "Runtime", "ColumnSortCore", "ChunkCore", "ColumnCore", "Types", "Common", "Base", "Gutil", "StarRocksGen"],
      "allowed_test_targets": ["storage_primitive_test"],
      "allowed_test_link_deps": ["StoragePrimitive", "ExecPrimitive", "Expr", "Runtime", "ColumnSortCore", "ChunkCore", "ColumnCore", "Types", "Common", "Base", "Gutil", "StarRocksGen"],
      "remediation": "Keep StoragePrimitive limited to reusable storage-access contracts, predicate contracts, predicate trees, iterator/merge/aggregation helpers, and value/schema types; move concrete storage engine, tablet, rowset, lake, service, concrete connector, and full Exec integration upward."
    },
    {
      "id": "storagebase",
      "doc_label": "StorageBase",
      "summary": "Base storage algorithms above StoragePrimitive and ComputeEnv without concrete Storage engine, tablet, rowset, lake, service, or full Exec coupling.",
      "owned_targets": ["StorageBase"],
      "owned_roots": ["be/src/storage/base"],
      "allowed_include_prefixes": [
        "storage/base/",
        "storage_primitive/",
        "column/",
        "types/",
        "common/",
        "base/",
        "gutil/",
        "gen_cpp/"
      ],
      "forbidden_include_prefixes": ["storage/", "compute_env/", "exec/", "service/", "connector/", "cache/", "http/", "agent/"],
      "forbidden_includes": ["exec/exec_env.h"],
      "allowed_target_deps": ["ComputeEnv", "StoragePrimitive", "Runtime", "ColumnSortCore", "ChunkCore", "ColumnCore", "Types", "Common", "Base", "Gutil", "StarRocksGen"],
      "allowed_test_targets": ["storage_base_test"],
      "allowed_test_link_deps": ["StorageBase", "ComputeEnv", "StoragePrimitive", "FileSystem", "IO", "Runtime", "ChunkCore", "ColumnCore", "Types", "Common", "Base", "Gutil", "StarRocksGen"],
      "remediation": "Keep StorageBase limited to reusable storage algorithms and helpers that may depend on ComputeEnv; move concrete storage engine, tablet, rowset, lake, service, connector, cache, and full Exec integration upward."
    },
    {
      "id": "storage",
      "doc_label": "Storage",
      "summary": "Concrete storage engine: tablet/rowset/segment management, compaction, persistent index, lake (cloud-native) tablets, binlog, inverted/vector indexes, and sstable, depending only on ComputeEnv's dependency closure plus StorageBase/StoragePrimitive and Platform HTTP helpers for replication transport, without Exec/Service/Connector/Agent reach-up or ExecEnv singleton coupling.",
      "owned_targets": ["Storage"],
      "owned_roots": ["be/src/storage"],
      "excluded_globs": ["be/src/storage/base/**"],
      "allowed_include_prefixes": [
        "storage/",
        "compute_env/",
        "cache/",
        "exec_primitive/",
        "storage_primitive/",
        "exprs/",
        "runtime/",
        "platform/",
        "fs/",
        "io/",
        "column/",
        "types/",
        "common/",
        "base/",
        "gutil/",
        "gen_cpp/"
      ],
      "forbidden_include_prefixes": ["service/", "connector/", "agent/"],
      "forbidden_includes": ["exec/exec_env.h"],
      "allowed_target_deps": ["StorageBase", "StoragePrimitive", "ExecPrimitive", "ComputeEnv", "Cache", "Expr", "Runtime", "Platform", "FileSystem", "IO", "ColumnSortCore", "ChunkCore", "ColumnCore", "Types", "Common", "Base", "Gutil", "StarRocksGen"],
      "allowed_test_targets": [],
      "allowed_test_link_deps": [],
      "remediation": "Keep Storage limited to the concrete storage engine over ComputeEnv's dependency closure plus StorageBase/StoragePrimitive and Platform HTTP helpers; move Exec, Service, Connector, Agent, and DataWorkflows orchestration upward and route ExecEnv access through injected dependencies."
    },
    {
      "id": "computeenv",
      "doc_label": "ComputeEnv",
      "summary": "Shared compute-side BE environment boundary for process-scoped compute resources, StarOS/Starlet worker runtime, load-path management, query-scoped scan coordination helpers, query-cache primitives, WorkGroup scheduling/executor resources, StarCache coordination, and pipeline controls below full Exec/Storage and above Runtime.",
      "owned_targets": ["ComputeEnv"],
      "owned_roots": ["be/src/compute_env"],
      "allowed_include_prefixes": [
        "compute_env/",
        "cache/",
        "exec_primitive/",
        "storage_primitive/",
        "exprs/",
        "runtime/",
        "platform/",
        "fs/",
        "io/",
        "column/",
        "types/",
        "common/",
        "base/",
        "gutil/",
        "gen_cpp/"
      ],
      "forbidden_include_prefixes": ["exec/", "storage/", "service/", "connector/", "agent/"],
      "forbidden_includes": ["exec/exec_env.h"],
      "allowed_target_deps": ["Cache", "StoragePrimitive", "ExecPrimitive", "Expr", "Runtime", "Platform", "FileSystem", "IO", "ColumnSortCore", "ChunkCore", "ColumnCore", "Types", "Common", "Base", "Gutil", "StarRocksGen"],
      "allowed_test_targets": ["compute_env_test", "compute_env_sorting_test"],
      "allowed_test_link_deps": ["ComputeEnv", "Expr", "Runtime", "FileSystem", "IO", "ChunkCore", "ColumnCore", "Types", "Common", "Base", "Gutil", "StarRocksGen"],
      "remediation": "Keep ComputeEnv limited to process-scoped compute resources, StarOS/Starlet worker runtime, load-path management without ExecEnv or concrete storage engine coupling, query-scoped scan coordination helpers without concrete scan/storage policy, query-cache primitives without concrete storage policy, WorkGroup scheduling/executor resources, shared compute-side service contracts, stable execution primitives, reusable compute-side sorting algorithms, StarCache coordination, and spill infrastructure; move concrete Exec, Storage, Service, Connector, and Agent integration upward."
    },
    {
      "id": "agentserver",
      "doc_label": "AgentServer",
      "summary": "FE-agent task orchestration, heartbeat handling, agent metrics, and agent worker helpers below Service.",
      "owned_targets": ["AgentServer"],
      "owned_roots": ["be/src/agent"],
      "allowed_include_prefixes": [
        "agent/",
        "data_workflows/",
        "cache/",
        "compute_env/workgroup/",
        "exec/pipeline/query_context.h",
        "exec/runtime/query_context_manager.h",
        "fs/",
        "io/",
        "runtime/",
        "storage/",
        "storage_primitive/",
        "platform/",
        "common/",
        "base/",
        "gutil/",
        "gen_cpp/"
      ],
      "forbidden_include_prefixes": [
        "service/",
        "platform/http/",
        "connector/",
        "formats/",
        "script/",
        "tools/"
      ],
      "allowed_target_deps": [
        "Runtime",
        "DataWorkflows",
        "Storage",
        "Cache",
        "ComputeEnv",
        "Exec",
        "ExecRuntime",
        "StoragePrimitive",
        "Platform",
        "FileSystem",
        "IO",
        "Common",
        "Base",
        "Gutil",
        "StarRocksGen"
      ],
      "remediation": "Keep AgentServer as FE-agent task and heartbeat orchestration below Service; move service/bootstrap integration upward."
    },
    {
      "id": "dataworkflows",
      "doc_label": "DataWorkflows",
      "summary": "Data-plane workflow orchestration above concrete Storage and Exec for load, delete, schema-change, and tablet-write workflows without service/bootstrap ownership.",
      "owned_targets": ["DataWorkflows"],
      "owned_roots": ["be/src/data_workflows"],
      "allowed_include_prefixes": [
        "data_workflows/",
        "connector/file/",
        "storage/",
        "storage_primitive/",
        "exec/",
        "exec_primitive/",
        "runtime/",
        "compute_env/",
        "platform/",
        "fs/",
        "io/",
        "column/",
        "types/",
        "common/",
        "base/",
        "gutil/",
        "gen_cpp/"
      ],
      "forbidden_include_prefixes": [
        "agent/",
        "service/",
        "connector/",
        "http/",
        "script/",
        "tools/"
      ],
      "allowed_target_deps": [
        "Storage",
        "Exec",
        "ConnectorFile",
        "Runtime",
        "StorageBase",
        "StoragePrimitive",
        "ExecRuntime",
        "ExecPrimitive",
        "ComputeEnv",
        "Runtime",
        "Runtime",
        "Platform",
        "FileSystem",
        "IO",
        "ChunkCore",
        "ColumnCore",
        "Types",
        "Common",
        "Base",
        "Gutil",
        "StarRocksGen"
      ],
      "allowed_test_targets": ["data_workflows_test"],
      "allowed_test_link_deps": [
        "DataWorkflows",
        "SchemaScannerBuiltin",
        "Storage",
        "Exec",
        "ConnectorFile",
        "Runtime",
        "StorageBase",
        "StoragePrimitive",
        "ExecRuntime",
        "ExecPrimitive",
        "ComputeEnv",
        "Runtime",
        "Runtime",
        "Platform",
        "FileSystem",
        "IO",
        "ChunkCore",
        "ColumnCore",
        "Types",
        "Common",
        "Base",
        "Gutil",
        "StarRocksGen"
      ],
      "remediation": "Keep DataWorkflows limited to data-plane orchestration over concrete Storage and Exec; move service/bootstrap, agent scheduling, connector registration, and lower reusable primitives to their owning layers."
    },
    {
      "id": "expr",
      "doc_label": "Expr",
      "summary": "Core expression infrastructure, UDF runtime helpers, builtin aggregate registry, and aggregate-state combinator helpers that depend only on Platform, Geo, Runtime, and lower layers.",
      "owned_targets": ["Expr"],
      "allowed_include_prefixes": ["exprs/", "platform/", "geo/", "runtime/", "column/", "types/", "common/", "base/", "gutil/", "gen_cpp/"],
      "allowed_target_deps": ["Platform", "Geo", "Runtime", "ColumnSortCore", "ChunkCore", "ColumnCore", "Types", "Common", "Base", "Gutil", "StarRocksGen"],
      "allowed_test_targets": ["expr_test", "expr_java_test"],
      "allowed_test_link_deps": ["Expr", "Platform", "Geo", "Runtime", "ColumnSortCore", "ChunkCore", "ColumnCore", "Types", "Common", "Base", "Gutil", "StarRocksGen"],
      "remediation": "Keep Expr limited to core expression infrastructure, UDF runtime helpers, builtin scalar helpers, builtin aggregate registry and aggregate-state combinator helpers, and dependencies no higher than Platform, Geo, Runtime, and lower layers."
    },
    {
      "id": "exprdict",
      "doc_label": "ExprDict",
      "summary": "Dictionary expression extensions and dict expression factory registration above Expr, ComputeEnv, and Storage integration.",
      "agents_path": "be/src/exprs_ext/dict/AGENTS.md",
      "owned_targets": ["ExprDict"],
      "allowed_include_prefixes": [
        "exprs_ext/dict/",
        "exprs/",
        "compute_env/",
        "storage/",
        "storage_primitive/",
        "exec/exec_env.h",
        "platform/",
        "runtime/",
        "column/",
        "types/",
        "common/",
        "base/",
        "gutil/",
        "gen_cpp/"
      ],
      "forbidden_include_prefixes": ["service/", "http/", "agent/", "connector/"],
      "allowed_target_deps": ["Expr", "ComputeEnv", "Storage", "StoragePrimitive", "Exec", "Platform", "Runtime", "ColumnSortCore", "ChunkCore", "ColumnCore", "Types", "Common", "Base", "Gutil", "StarRocksGen"],
      "remediation": "Keep dictionary-specific expression implementations in ExprDict; shared expression contracts belong in Expr, and broader query execution orchestration belongs above the extension."
    },
    {
      "id": "exprtablefunction",
      "doc_label": "ExprTableFunction",
      "summary": "Table-function expression extensions that need concrete storage integration.",
      "agents_path": "be/src/exprs_ext/table_function/AGENTS.md",
      "owned_targets": ["ExprTableFunction"],
      "allowed_include_prefixes": [
        "exprs_ext/table_function/",
        "exprs/",
        "storage/",
        "runtime/",
        "column/",
        "types/",
        "common/",
        "base/",
        "gutil/",
        "gen_cpp/"
      ],
      "forbidden_include_prefixes": ["service/", "http/", "agent/", "connector/"],
      "allowed_target_deps": ["Expr", "Storage", "Runtime", "ChunkCore", "ColumnCore", "Types", "Common", "Base", "Gutil", "StarRocksGen"],
      "remediation": "Keep table-function extensions in ExprTableFunction; reusable table-function contracts belong in Expr."
    },
    {
      "id": "exprutility",
      "doc_label": "ExprUtility",
      "summary": "Utility expression functions that need runtime, execution-runtime, platform, or storage-primitive integration.",
      "agents_path": "be/src/exprs_ext/utility/AGENTS.md",
      "owned_targets": ["ExprUtility"],
      "allowed_include_prefixes": [
        "exprs_ext/utility/",
        "exprs/",
        "exec/pipeline/fragment_context.h",
        "storage_primitive/",
        "platform/",
        "runtime/",
        "column/",
        "types/",
        "common/",
        "base/",
        "gutil/",
        "gen_cpp/"
      ],
      "forbidden_include_prefixes": ["service/", "http/", "agent/", "connector/", "storage/"],
      "allowed_target_deps": ["Expr", "ExecRuntime", "StoragePrimitive", "Platform", "Runtime", "ChunkCore", "ColumnCore", "Types", "Common", "Base", "Gutil", "StarRocksGen"],
      "remediation": "Keep utility expression functions in ExprUtility; move lower reusable helpers into their owning modules instead of expanding Expr."
    },
    {
      "id": "execprimitive",
      "doc_label": "ExecPrimitive",
      "summary": "Primitive execution contracts, DataSink base contract, runtime-filter infrastructure, generic morsel queues, and stable pipeline operator/factory primitives without broader Exec runtime, scheduler, storage, service, or connector coupling.",
      "owned_targets": ["ExecPrimitive"],
      "owned_roots": ["be/src/exec_primitive"],
      "allowed_include_prefixes": [
        "exec_primitive/",
        "exprs/",
        "runtime/",
        "column/",
        "types/",
        "common/",
        "base/",
        "gutil/",
        "gen_cpp/"
      ],
      "forbidden_include_prefixes": ["exec/", "compute_env/workgroup/", "storage/", "service/", "http/", "connector/", "cache/", "util/"],
      "forbidden_includes": [
        "exec/pipeline/fragment_context.h",
        "exec/runtime/pipeline.h",
        "exec/runtime/pipeline_driver.h",
        "exec/pipeline/pipeline_driver_executor.h",
        "exec/pipeline/query_context.h",
        "exec/pipeline/scan/morsel.h",
        "exec/exec_env.h"
      ],
      "allowed_target_deps": ["Expr", "Runtime", "ChunkCore", "ColumnCore", "Types", "Common", "Base", "Gutil", "StarRocksGen"],
      "allowed_test_targets": ["exec_primitive_test"],
      "allowed_test_link_deps": ["ExecPrimitive", "Expr", "Runtime", "ChunkCore", "ColumnCore", "Types", "Common", "Base", "Gutil", "StarRocksGen"],
      "remediation": "Keep ExecPrimitive limited to execution contracts, the DataSink base contract, runtime filters, generic morsel queues, and stable operator/factory primitives; move runtime, scheduler, concrete operators, concrete sinks, storage, service, and connector integration upward."
    },
    {
      "id": "execruntime",
      "doc_label": "ExecRuntime",
      "summary": "Operator-tree execution framework for query and fragment contexts, driver lifecycle, execution groups, and scheduling-adjacent behavior above ComputeEnv and ExecPrimitive without concrete operators, storage, service, connector, cache, or broad Exec coupling.",
      "owned_targets": ["ExecRuntime"],
      "owned_roots": ["be/src/exec/runtime"],
      "additional_owned_globs": [
        "be/src/exec/pipeline/fragment_context.h",
        "be/src/exec/pipeline/query_context.h"
      ],
      "allowed_include_prefixes": [
        "compute_env/",
        "exec/runtime/",
        "exec_primitive/",
        "exec/pipeline/operator_with_dependency.h",
        "storage_primitive/",
        "exprs/",
        "runtime/",
        "platform/",
        "fs/",
        "io/",
        "column/",
        "types/",
        "common/",
        "base/",
        "gutil/",
        "gen_cpp/"
      ],
      "forbidden_include_prefixes": ["exec/", "storage/", "service/", "connector/", "cache/", "http/", "agent/", "util/"],
      "forbidden_includes": [
        "exec/pipeline/pipeline_driver_executor.h",
        "exec/pipeline/pipeline_driver_queue.h",
        "exec/pipeline/pipeline_driver_poller.h",
        "exec/pipeline/scan/morsel.h",
        "exec/exec_env.h"
      ],
      "allowed_target_deps": ["ComputeEnv", "ExecPrimitive", "StoragePrimitive", "Expr", "Runtime", "Platform", "FileSystem", "IO", "ColumnSortCore", "ChunkCore", "ColumnCore", "Types", "Common", "Base", "Gutil", "StarRocksGen"],
      "allowed_test_targets": ["exec_runtime_test"],
      "allowed_test_link_deps": ["ExecRuntime", "ComputeEnv", "ExecPrimitive", "StoragePrimitive", "Expr", "Runtime", "Platform", "FileSystem", "IO", "ChunkCore", "ColumnCore", "Types", "Common", "Base", "Gutil", "StarRocksGen"],
      "remediation": "Keep ExecRuntime limited to the operator-tree execution framework and runtime behavior that can be expressed through ComputeEnv and ExecPrimitive contracts; move concrete operators, storage, service, connector, cache, HTTP, and broad Exec integration upward."
    },
    {
      "id": "connectorprimitive",
      "doc_label": "ConnectorPrimitive",
      "summary": "Connector contracts, DataSource, DataSourceProvider default mechanics, and generic connector sink memory management interfaces without concrete connectors, sinks, registry composition, storage, service, or full Exec coupling.",
      "owned_targets": ["ConnectorPrimitive"],
      "owned_roots": ["be/src/connector_primitive"],
      "allowed_include_prefixes": [
        "connector_primitive/",
        "exec_primitive/",
        "exprs/",
        "runtime/",
        "column/",
        "types/",
        "common/",
        "base/",
        "gutil/",
        "gen_cpp/"
      ],
      "forbidden_include_prefixes": ["connector/", "exec/", "storage/", "service/", "http/", "cache/", "util/"],
      "forbidden_includes": [
        "connector/common/partitioned_connector_chunk_sink.h",
        "connector/connector_registry.h",
        "exec/exec_env.h"
      ],
      "allowed_target_deps": ["ExecPrimitive", "Expr", "Runtime", "ChunkCore", "ColumnCore", "Types", "Common", "Base", "Gutil", "StarRocksGen"],
      "allowed_test_targets": ["connector_primitive_test"],
      "allowed_test_link_deps": ["ConnectorPrimitive", "ExecPrimitive", "Expr", "Runtime", "ChunkCore", "ColumnCore", "Types", "Common", "Base", "Gutil", "StarRocksGen"],
      "remediation": "Keep ConnectorPrimitive limited to connector contracts, default scan-range-to-morsel mechanics, and generic sink memory policies expressed through lower-level interfaces; move concrete connectors, reusable sink/file-writer helpers, registry wiring, storage, service, and full Exec integration upward."
    },
    {
      "id": "connectorcommon",
      "doc_label": "ConnectorCommon",
      "summary": "Reusable connector sink/file-writer helpers above connector contracts, including sink commit/profile types and shared writer-side utilities, without concrete connector registry composition, service, HTTP, or full Exec coupling.",
      "owned_targets": ["ConnectorCommon"],
      "owned_roots": ["be/src/connector/common"],
      "allowed_include_prefixes": [
        "connector/common/",
        "connector_primitive/",
        "compute_env/",
        "cache/",
        "storage_primitive/",
        "exec_primitive/",
        "exprs/",
        "runtime/",
        "platform/",
        "formats/",
        "fs/",
        "io/",
        "column/",
        "types/",
        "common/",
        "base/",
        "gutil/",
        "gen_cpp/"
      ],
      "forbidden_include_prefixes": ["connector/", "exec/", "storage/", "service/", "http/", "agent/", "util/"],
      "forbidden_includes": [
        "connector/connector_registry.h",
        "exec/exec_env.h"
      ],
      "allowed_target_deps": ["ComputeEnv", "ConnectorPrimitive", "Cache", "StoragePrimitive", "ExecPrimitive", "Expr", "Runtime", "Platform", "FormatCore", "FileSystem", "IO", "ColumnSortCore", "ChunkCore", "ColumnCore", "Types", "Common", "Base", "Gutil", "StarRocksGen"],
      "allowed_test_targets": ["connector_common_test"],
      "allowed_test_link_deps": ["ConnectorCommon", "ComputeEnv", "ConnectorPrimitive", "Cache", "StoragePrimitive", "ExecPrimitive", "Expr", "Runtime", "Platform", "FormatCore", "FileSystem", "IO", "ColumnSortCore", "ChunkCore", "ColumnCore", "Types", "Common", "Base", "Gutil", "StarRocksGen"],
      "remediation": "Keep ConnectorCommon limited to reusable connector sink/file-writer helpers expressed through connector contracts and compute/runtime lower layers; move concrete connectors, registry wiring, service, HTTP, storage-engine-specific behavior, and full Exec integration upward."
    },
    {
      "id": "connectorhive",
      "doc_label": "ConnectorHive",
      "summary": "Concrete Hive-compatible connector read/write implementation, including HDFS scanner formats and JNI-backed lake readers, without registry composition or full Exec coupling.",
      "agents_path": "be/src/connector/hive/AGENTS.md",
      "owned_targets": ["ConnectorHive"],
      "owned_roots": ["be/src/connector/hive"],
      "allowed_include_prefixes": [
        "connector/hive/",
        "connector/common/",
        "connector_primitive/",
        "compute_env/",
        "cache/",
        "storage_primitive/",
        "exec_primitive/",
        "formats/",
        "exprs/",
        "runtime/",
        "platform/",
        "fs/",
        "io/",
        "column/",
        "types/",
        "common/",
        "base/",
        "gutil/",
        "gen_cpp/"
      ],
      "forbidden_include_prefixes": ["connector/", "exec/", "storage/", "service/", "http/", "agent/", "script/", "tools/", "util/"],
      "forbidden_includes": [
        "connector/connector_registry.h",
        "exec/exec_env.h"
      ],
      "allowed_target_deps": ["ConnectorCommon", "ConnectorPrimitive", "ComputeEnv", "Cache", "StoragePrimitive", "ExecPrimitive", "Expr", "Runtime", "Platform", "Formats", "FormatCore", "FormatCsv", "FormatJson", "FormatAvro", "FormatOrc", "FormatParquet", "FileSystem", "IO", "ColumnSortCore", "ChunkCore", "ColumnCore", "Types", "Common", "Base", "Gutil", "StarRocksGen"],
      "allowed_test_targets": ["connector_hive_test"],
      "allowed_test_link_deps": ["ConnectorHive", "ConnectorCommon", "ConnectorPrimitive", "ComputeEnv", "Cache", "StoragePrimitive", "ExecPrimitive", "Expr", "Runtime", "Platform", "Formats", "FormatCore", "FormatCsv", "FormatJson", "FormatAvro", "FormatOrc", "FormatParquet", "FileSystem", "IO", "ColumnSortCore", "ChunkCore", "ColumnCore", "Types", "Common", "Base", "Gutil", "StarRocksGen"],
      "remediation": "Keep ConnectorHive limited to Hive-compatible connector scans and sinks over lower connector, compute, runtime, format, and filesystem modules; keep registration in ModuleBootstrap and avoid full Exec or concrete Storage dependencies."
    },
    {
      "id": "connectoriceberg",
      "doc_label": "ConnectorIceberg",
      "summary": "Concrete Iceberg connector write implementation, including data, position-delete, and row-delta sinks, without registry composition or full Exec and Storage coupling.",
      "agents_path": "be/src/connector/iceberg/AGENTS.md",
      "owned_targets": ["ConnectorIceberg"],
      "owned_roots": ["be/src/connector/iceberg"],
      "allowed_include_prefixes": [
        "connector/iceberg/",
        "connector/common/",
        "connector_primitive/",
        "formats/",
        "exprs/",
        "runtime/",
        "fs/",
        "column/",
        "types/",
        "common/",
        "base/",
        "gutil/",
        "gen_cpp/"
      ],
      "forbidden_include_prefixes": ["connector/", "exec/", "storage/", "service/", "http/", "agent/", "script/", "tools/", "util/"],
      "forbidden_includes": [
        "connector/connector_registry.h",
        "exec/exec_env.h"
      ],
      "allowed_target_deps": ["ConnectorCommon", "ConnectorPrimitive", "Expr", "Runtime", "FormatCore", "FormatParquet", "FileSystem", "ColumnSortCore", "ChunkCore", "ColumnCore", "Types", "Common", "Base", "Gutil", "StarRocksGen"],
      "allowed_test_targets": ["connector_iceberg_test"],
      "allowed_test_link_deps": ["ConnectorIceberg", "ConnectorCommon", "ConnectorPrimitive", "Expr", "Runtime", "FormatCore", "FormatParquet", "FileSystem", "ColumnSortCore", "ChunkCore", "ColumnCore", "Types", "Common", "Base", "Gutil", "StarRocksGen"],
      "remediation": "Keep ConnectorIceberg limited to Iceberg connector sinks and format-specific helpers over lower connector, runtime, format, and filesystem modules; keep registration in ModuleBootstrap and orchestration in Exec."
    },
    {
      "id": "connectorfile",
      "doc_label": "ConnectorFile",
      "summary": "Concrete file connector read/write implementation, including file scanner formats, file scan metrics, and connector-native file chunk sink, without registry composition or full Exec coupling.",
      "agents_path": "be/src/connector/file/AGENTS.md",
      "owned_targets": ["ConnectorFile"],
      "owned_roots": ["be/src/connector/file"],
      "allowed_include_prefixes": [
        "connector/file/",
        "connector/common/",
        "connector_primitive/",
        "compute_env/",
        "formats/",
        "exprs/",
        "runtime/",
        "platform/",
        "fs/",
        "io/",
        "column/",
        "types/",
        "common/",
        "base/",
        "gutil/",
        "gen_cpp/"
      ],
      "forbidden_include_prefixes": ["connector/", "exec/", "storage/", "service/", "http/", "agent/", "script/", "tools/", "util/"],
      "forbidden_includes": [
        "connector/connector_registry.h",
        "exec/exec_env.h"
      ],
      "allowed_target_deps": ["ConnectorCommon", "ConnectorPrimitive", "ComputeEnv", "Cache", "Expr", "Runtime", "Platform", "FormatCore", "FormatCsv", "FormatJson", "FormatAvro", "FormatOrc", "FormatParquet", "FileSystem", "IO", "ColumnSortCore", "ChunkCore", "ColumnCore", "Types", "Common", "Base", "Gutil", "StarRocksGen"],
      "allowed_test_targets": ["connector_file_test"],
      "allowed_test_link_deps": ["ConnectorFile", "ConnectorCommon", "ConnectorPrimitive", "ComputeEnv", "Cache", "Expr", "Runtime", "Platform", "FormatCore", "FormatCsv", "FormatJson", "FormatAvro", "FormatOrc", "FormatParquet", "FileSystem", "IO", "ColumnSortCore", "ChunkCore", "ColumnCore", "Types", "Common", "Base", "Gutil", "StarRocksGen"],
      "remediation": "Keep ConnectorFile limited to concrete file connector scanner and connector-native sink behavior over connector contracts, compute/runtime helpers, formats, and FS/IO; move registry wiring and pipeline/export orchestration upward."
    },
    {
      "id": "connectorlake",
      "doc_label": "ConnectorLake",
      "summary": "Concrete shared-data lake connector and lake late-materialization context above Storage, without registry composition, service, or full Exec coupling.",
      "agents_path": "be/src/connector/lake/AGENTS.md",
      "owned_targets": ["ConnectorLake"],
      "owned_roots": ["be/src/connector/lake"],
      "allowed_include_prefixes": [
        "connector/lake/",
        "connector_primitive/",
        "storage/",
        "storage_primitive/",
        "compute_env/",
        "exec_primitive/",
        "exprs/",
        "runtime/",
        "platform/",
        "fs/",
        "io/",
        "column/",
        "types/",
        "common/",
        "base/",
        "gutil/",
        "gen_cpp/"
      ],
      "forbidden_include_prefixes": ["connector/", "exec/", "service/", "http/", "agent/", "script/", "tools/", "formats/", "cache/", "util/"],
      "forbidden_includes": [
        "connector/connector_registry.h",
        "exec/exec_env.h"
      ],
      "allowed_target_deps": ["ConnectorPrimitive", "Storage", "ComputeEnv", "StoragePrimitive", "ExecPrimitive", "Expr", "Runtime", "Platform", "FileSystem", "IO", "ChunkCore", "ColumnCore", "Types", "Common", "Base", "Gutil", "StarRocksGen"],
      "allowed_test_targets": ["connector_lake_test"],
      "allowed_test_link_deps": ["ConnectorLake", "ConnectorPrimitive", "Storage", "ComputeEnv", "StoragePrimitive", "ExecPrimitive", "Expr", "Runtime", "Platform", "FileSystem", "IO", "ChunkCore", "ColumnCore", "Types", "Common", "Base", "Gutil", "StarRocksGen"],
      "remediation": "Keep ConnectorLake limited to shared-data lake scans and lake late-materialization state over Storage and lower compute/runtime contracts; keep registration in ModuleBootstrap and avoid registry, service, or full Exec coupling."
    },
    {
      "id": "connectorbenchmark",
      "doc_label": "ConnectorBenchmark",
      "summary": "Benchgen-backed benchmark connector implementation above connector contracts without registry composition, storage, service, or full Exec coupling.",
      "agents_path": "be/src/connector/benchmark/AGENTS.md",
      "owned_targets": ["ConnectorBenchmark"],
      "allowed_include_prefixes": [
        "connector/benchmark/",
        "connector_primitive/",
        "exprs/",
        "runtime/",
        "column/",
        "types/",
        "common/",
        "base/",
        "gutil/",
        "gen_cpp/"
      ],
      "forbidden_include_prefixes": ["exec/", "storage/", "service/", "http/", "cache/", "util/"],
      "forbidden_includes": [
        "connector/connector_registry.h",
        "exec/exec_env.h"
      ],
      "allowed_target_deps": ["ConnectorPrimitive", "Expr", "Runtime", "ChunkCore", "ColumnCore", "Types", "Common", "Base", "Gutil", "StarRocksGen"],
      "remediation": "Keep ConnectorBenchmark limited to the benchgen connector implementation; move registration into ModuleBootstrap and avoid pulling Connector, storage, service, or full Exec code into the connector library."
    },
    {
      "id": "connectorcachestats",
      "doc_label": "ConnectorCacheStats",
      "summary": "Cache-stats connector implementation above connector contracts with storage access, without registry composition, service, cache, or full Exec coupling.",
      "agents_path": "be/src/connector/cache_stats/AGENTS.md",
      "owned_targets": ["ConnectorCacheStats"],
      "allowed_include_prefixes": [
        "connector/cache_stats/",
        "connector_primitive/",
        "storage/",
        "exprs/",
        "runtime/",
        "column/",
        "types/",
        "common/",
        "base/",
        "gutil/",
        "gen_cpp/"
      ],
      "forbidden_include_prefixes": ["exec/", "service/", "http/", "cache/", "util/"],
      "forbidden_includes": [
        "connector/connector_registry.h",
        "exec/exec_env.h"
      ],
      "allowed_target_deps": ["ConnectorPrimitive", "Storage", "Expr", "Runtime", "ChunkCore", "ColumnCore", "Types", "Common", "Base", "Gutil", "StarRocksGen"],
      "allowed_test_targets": ["connector_cache_stats_test"],
      "allowed_test_link_deps": ["ConnectorCacheStats", "ConnectorPrimitive", "Storage", "Expr", "Runtime", "ChunkCore", "ColumnCore", "Types", "Common", "Base", "Gutil", "StarRocksGen"],
      "remediation": "Keep ConnectorCacheStats limited to the cache-stats connector and scanner implementation over Storage; move registration into ModuleBootstrap and avoid pulling Connector, service, cache, or full Exec code into the connector library."
    },
    {
      "id": "connectorjdbc",
      "doc_label": "ConnectorJDBC",
      "summary": "JDBC connector implementation, scanner, driver manager, and type checker above connector contracts without registry composition, storage, service, or full Exec coupling.",
      "agents_path": "be/src/connector/jdbc/AGENTS.md",
      "owned_targets": ["ConnectorJDBC"],
      "allowed_include_prefixes": [
        "connector/jdbc/",
        "connector_primitive/",
        "platform/",
        "fs/",
        "exprs/",
        "runtime/",
        "column/",
        "types/",
        "common/",
        "base/",
        "gutil/",
        "gen_cpp/"
      ],
      "forbidden_include_prefixes": ["exec/", "storage/", "service/", "http/", "cache/", "util/"],
      "forbidden_includes": [
        "connector/connector_registry.h",
        "exec/exec_env.h"
      ],
      "allowed_target_deps": ["ConnectorPrimitive", "Platform", "FileSystem", "Expr", "Runtime", "ChunkCore", "ColumnCore", "Types", "Common", "Base", "Gutil", "StarRocksGen"],
      "allowed_test_targets": ["connector_jdbc_test"],
      "allowed_test_link_deps": ["ConnectorJDBC", "ConnectorPrimitive", "Platform", "FileSystem", "Expr", "Runtime", "ChunkCore", "ColumnCore", "Types", "Common", "Base", "Gutil", "StarRocksGen"],
      "remediation": "Keep ConnectorJDBC limited to JDBC read-side scan, driver management, and type checking; move registration into ModuleBootstrap and avoid pulling Connector, storage, service, or full Exec code into the connector library."
    },
    {
      "id": "connectorelasticsearch",
      "doc_label": "ConnectorElasticsearch",
      "summary": "Elasticsearch connector implementation above connector contracts without registry composition, storage, service, or full Exec coupling.",
      "agents_path": "be/src/connector/elasticsearch/AGENTS.md",
      "owned_targets": ["ConnectorElasticsearch"],
      "allowed_include_prefixes": [
        "connector/elasticsearch/",
        "connector_primitive/",
        "platform/",
        "exprs/",
        "runtime/",
        "column/",
        "types/",
        "common/",
        "base/",
        "gutil/",
        "gen_cpp/"
      ],
      "forbidden_include_prefixes": ["exec/", "storage/", "service/", "cache/", "util/"],
      "forbidden_includes": [
        "connector/connector_registry.h",
        "exec/exec_env.h"
      ],
      "allowed_target_deps": ["ConnectorPrimitive", "Platform", "Expr", "Runtime", "ChunkCore", "ColumnCore", "Types", "Common", "Base", "Gutil", "StarRocksGen"],
      "allowed_test_targets": ["connector_elasticsearch_test"],
      "allowed_test_link_deps": ["ConnectorElasticsearch", "ConnectorPrimitive", "Platform", "Expr", "Runtime", "ChunkCore", "ColumnCore", "Types", "Common", "Base", "Gutil", "StarRocksGen"],
      "remediation": "Keep ConnectorElasticsearch limited to Elasticsearch read-side scan, predicate pushdown, scroll query, and parser logic; move registration into ModuleBootstrap and avoid pulling Connector, storage, service, or full Exec code into the connector library."
    },
    {
      "id": "connectormysql",
      "doc_label": "ConnectorMySQL",
      "summary": "MySQL connector implementation above connector contracts without registry composition, storage, service, or full Exec coupling.",
      "agents_path": "be/src/connector/mysql/AGENTS.md",
      "owned_targets": ["ConnectorMySQL"],
      "allowed_include_prefixes": [
        "connector/mysql/",
        "connector_primitive/",
        "exprs/",
        "runtime/",
        "column/",
        "types/",
        "common/",
        "base/",
        "gutil/",
        "gen_cpp/"
      ],
      "forbidden_include_prefixes": ["exec/", "storage/", "service/", "http/", "cache/", "util/"],
      "forbidden_includes": [
        "connector/connector_registry.h",
        "exec/exec_env.h"
      ],
      "allowed_target_deps": ["ConnectorPrimitive", "Expr", "Runtime", "ChunkCore", "ColumnCore", "Types", "Common", "Base", "Gutil", "StarRocksGen"],
      "allowed_test_targets": ["connector_mysql_test"],
      "allowed_test_link_deps": ["ConnectorMySQL", "ConnectorPrimitive", "Expr", "Runtime", "ChunkCore", "ColumnCore", "Types", "Common", "Base", "Gutil", "StarRocksGen"],
      "remediation": "Keep ConnectorMySQL limited to MySQL read-side scan and scanner logic; move registration into ModuleBootstrap and avoid pulling Connector, storage, service, or full Exec code into the connector library."
    },
    {
      "id": "modulebootstrap",
      "doc_label": "ModuleBootstrap",
      "summary": "Default BE module bootstrap composition for built-in module registration, including filesystem provider registry installation and connector registration.",
      "owned_targets": ["ModuleBootstrap"],
      "owned_roots": ["be/src/module"],
      "allowed_include_prefixes": [
        "module/",
        "connector/benchmark/",
        "connector/cache_stats/",
        "connector/file/",
        "connector/hive/",
        "connector/iceberg/",
        "connector/lake/",
        "connector/jdbc/",
        "connector/elasticsearch/",
        "connector/mysql/",
        "connector_primitive/",
        "connector/connector_registry.h",
        "fs/",
        "fs_ext/hdfs/",
        "compute_env/staros/starlet_filesystem.h",
        "common/",
        "base/",
        "gutil/",
        "gen_cpp/"
      ],
      "forbidden_include_prefixes": ["agent/", "cache/", "connector/", "data_workflows/", "exec/", "http/", "runtime/", "script/", "service/", "storage/", "util/"],
      "allowed_target_deps": ["FileSystem", "HdfsFileSystem", "ComputeEnv", "Connector", "ConnectorFile", "ConnectorHive", "ConnectorIceberg", "ConnectorLake", "ConnectorBenchmark", "ConnectorCacheStats", "ConnectorJDBC", "ConnectorElasticsearch", "ConnectorMySQL", "ConnectorPrimitive", "Common", "Base", "Gutil", "StarRocksGen"],
      "allowed_test_targets": ["module_bootstrap_test"],
      "allowed_test_link_deps": ["ModuleBootstrap"],
      "remediation": "Keep ModuleBootstrap as top-level default module composition; module implementations should expose registration hooks here instead of depending on service startup directly."
    },
    {
      "id": "schemascannercore",
      "doc_label": "SchemaScannerCore",
      "summary": "Schema scanner contract, factory interface, shared mechanics, and column filling without concrete scanner, storage, cache, service, pipeline, or ExecEnv coupling.",
      "owned_targets": ["SchemaScannerCore"],
      "additional_owned_globs": ["be/src/exec/schema_scanner/schema_column_filler.h"],
      "allowed_include_prefixes": [
        "exec/schema_scanner.h",
        "exec/schema_scanner_factory.h",
        "exec/schema_scanner/schema_column_filler.h",
        "exprs/",
        "runtime/",
        "column/",
        "types/",
        "common/",
        "base/",
        "gutil/",
        "gen_cpp/"
      ],
      "forbidden_include_prefixes": ["exec/schema_scanner/", "exec/pipeline/", "storage/", "http/", "service/", "cache/", "platform/"],
      "forbidden_includes": [
        "exec/exec_env.h",
        "exec_primitive/exec_node.h",
        "exec_primitive/data_sink.h"
      ],
      "allowed_target_deps": ["Expr", "Runtime", "ChunkCore", "ColumnCore", "Types", "Common", "Base", "Gutil", "StarRocksGen"],
      "allowed_test_targets": ["schema_scanner_core_test"],
      "allowed_test_link_deps": ["SchemaScannerCore", "Expr", "Runtime", "ChunkCore", "ColumnCore", "Types", "Common", "Base", "Gutil", "StarRocksGen"],
      "remediation": "Keep SchemaScannerCore limited to the scanner contract and dependency-neutral shared mechanics; move concrete scanners and composition into higher schema scanner layers."
    },
    {
      "id": "schemascannerlocal",
      "doc_label": "SchemaScannerLocal",
      "summary": "Static and BE-local process schema scanners without SchemaHelper, platform clients, storage, cache, service, pipeline, or ExecEnv coupling.",
      "owned_targets": ["SchemaScannerLocal"],
      "allowed_include_prefixes": [
        "exec/schema_scanner.h",
        "exec/schema_scanner/schema_column_filler.h",
        "runtime/",
        "column/",
        "types/",
        "common/",
        "base/",
        "gutil/",
        "gen_cpp/"
      ],
      "forbidden_include_prefixes": ["platform/", "storage/", "cache/", "http/", "service/", "exec/pipeline/"],
      "forbidden_includes": [
        "exec/schema_scanner/schema_helper.h",
        "exec/exec_env.h",
        "exec_primitive/exec_node.h",
        "exec_primitive/data_sink.h"
      ],
      "allowed_target_deps": ["SchemaScannerCore", "Runtime", "ChunkCore", "ColumnCore", "Types", "Common", "Base", "Gutil", "StarRocksGen"],
      "allowed_test_targets": ["schema_scanner_local_test"],
      "allowed_test_link_deps": ["SchemaScannerLocal", "SchemaScannerCore", "Runtime", "ChunkCore", "ColumnCore", "Types", "Common", "Base", "Gutil", "StarRocksGen"],
      "remediation": "Keep SchemaScannerLocal restricted to static and BE-local process data; move FE client, storage, cache, and composition behavior into their dedicated scanner layers."
    },
    {
      "id": "schemascannerfrontend",
      "doc_label": "SchemaScannerFrontend",
      "summary": "Frontend-backed schema scanners and SchemaHelper above Platform and the local/core scanner layers, without storage, cache, service, pipeline, or ExecEnv coupling.",
      "owned_targets": ["SchemaScannerFrontend"],
      "allowed_include_prefixes": [
        "exec/schema_scanner.h",
        "exec/schema_scanner/schema_column_filler.h",
        "platform/",
        "exprs/",
        "runtime/",
        "column/",
        "types/",
        "common/",
        "base/",
        "gutil/",
        "gen_cpp/"
      ],
      "forbidden_include_prefixes": ["storage/", "cache/", "http/", "service/", "exec/pipeline/"],
      "forbidden_includes": [
        "exec/exec_env.h",
        "exec_primitive/exec_node.h",
        "exec_primitive/data_sink.h"
      ],
      "allowed_target_deps": ["SchemaScannerCore", "SchemaScannerLocal", "Platform", "Expr", "Runtime", "ChunkCore", "ColumnCore", "Types", "Common", "Base", "Gutil", "StarRocksGen"],
      "allowed_test_targets": ["schema_scanner_frontend_test"],
      "allowed_test_link_deps": ["SchemaScannerFrontend", "SchemaScannerLocal", "SchemaScannerCore", "Platform", "Expr", "Runtime", "ChunkCore", "ColumnCore", "Types", "Common", "Base", "Gutil", "StarRocksGen"],
      "remediation": "Keep SchemaScannerFrontend limited to FE RPC/HTTP-backed schema data over Platform and the local/core scanner layers; move storage and cache access into their dedicated layers."
    },
    {
      "id": "schemascannerstorage",
      "doc_label": "SchemaScannerStorage",
      "summary": "Storage-backed schema scanners above concrete Storage and the frontend/local/core scanner layers, without cache, service, pipeline, or ExecEnv coupling.",
      "owned_targets": ["SchemaScannerStorage"],
      "allowed_include_prefixes": [
        "exec/schema_scanner.h",
        "exec/schema_scanner/schema_column_filler.h",
        "storage/",
        "storage_primitive/",
        "runtime/",
        "column/",
        "types/",
        "common/",
        "base/",
        "gutil/",
        "gen_cpp/"
      ],
      "forbidden_include_prefixes": ["cache/", "platform/", "http/", "service/", "exec/pipeline/"],
      "forbidden_includes": [
        "exec/exec_env.h",
        "exec_primitive/exec_node.h",
        "exec_primitive/data_sink.h"
      ],
      "allowed_target_deps": ["SchemaScannerCore", "SchemaScannerFrontend", "SchemaScannerLocal", "Storage", "StoragePrimitive", "Runtime", "ChunkCore", "ColumnCore", "Types", "Common", "Base", "Gutil", "StarRocksGen"],
      "allowed_test_targets": ["schema_scanner_storage_test"],
      "allowed_test_link_deps": ["SchemaScannerStorage", "SchemaScannerFrontend", "SchemaScannerLocal", "SchemaScannerCore", "Storage", "StoragePrimitive", "Runtime", "ChunkCore", "ColumnCore", "Types", "Common", "Base", "Gutil", "StarRocksGen"],
      "remediation": "Keep SchemaScannerStorage limited to tablet, transaction, compaction, and write-log schema data; route FE access through SchemaScannerFrontend and keep cache/composition behavior elsewhere."
    },
    {
      "id": "schemascannercache",
      "doc_label": "SchemaScannerCache",
      "summary": "Data-cache schema scanner above Cache and SchemaScannerCore without storage, platform, service, pipeline, or ExecEnv coupling.",
      "owned_targets": ["SchemaScannerCache"],
      "allowed_include_prefixes": [
        "exec/schema_scanner.h",
        "cache/",
        "runtime/",
        "column/",
        "types/",
        "common/",
        "base/",
        "gutil/",
        "gen_cpp/"
      ],
      "forbidden_include_prefixes": ["storage/", "platform/", "http/", "service/", "exec/pipeline/"],
      "forbidden_includes": [
        "exec/exec_env.h",
        "exec_primitive/exec_node.h",
        "exec_primitive/data_sink.h"
      ],
      "allowed_target_deps": ["SchemaScannerCore", "Cache", "Runtime", "ChunkCore", "ColumnCore", "Types", "Common", "Base", "Gutil", "StarRocksGen"],
      "allowed_test_targets": ["schema_scanner_cache_test"],
      "allowed_test_link_deps": ["SchemaScannerCache", "SchemaScannerCore", "Cache", "Runtime", "ChunkCore", "ColumnCore", "Types", "Common", "Base", "Gutil", "StarRocksGen"],
      "remediation": "Keep SchemaScannerCache limited to data-cache schema data over Cache and SchemaScannerCore; keep storage, FE client, and composition behavior in their dedicated layers."
    },
    {
      "id": "schemascannerbuiltin",
      "doc_label": "SchemaScannerBuiltin",
      "summary": "Top-level builtin schema scanner factory composition over the core, local, frontend, storage, and cache scanner layers without depending on Exec.",
      "owned_targets": ["SchemaScannerBuiltin"],
      "allowed_include_prefixes": ["exec/builtin_schema_scanner_factory.h", "exec/schema_scanner.h", "exec/schema_scanner_factory.h", "exec/schema_scanner/", "gen_cpp/"],
      "forbidden_include_prefixes": ["exec/pipeline/", "storage/", "cache/", "platform/", "http/", "service/"],
      "forbidden_includes": ["exec/exec_env.h"],
      "allowed_target_deps": ["SchemaScannerCore", "SchemaScannerLocal", "SchemaScannerFrontend", "SchemaScannerStorage", "SchemaScannerCache"],
      "allowed_test_targets": ["schema_scanner_builtin_test"],
      "allowed_test_link_deps": ["SchemaScannerBuiltin", "SchemaScannerStorage", "SchemaScannerCache", "SchemaScannerFrontend", "SchemaScannerLocal", "SchemaScannerCore", "Storage", "StoragePrimitive", "Cache", "Platform", "Expr", "Runtime", "ChunkCore", "ColumnCore", "Types", "Common", "Base", "Gutil", "StarRocksGen"],
      "remediation": "Keep builtin scanner selection as composition over the explicit scanner strata; do not add an Exec dependency or bypass the owning scanner layer."
    },
    {
      "id": "execjoincore",
      "doc_label": "ExecJoinCore",
      "summary": "Reusable exec join hash table algorithms without join nodes, pipeline, storage, service, or util coupling.",
      "owned_targets": ["ExecJoinCore"],
      "owned_globs": [
        "be/src/exec/join/**"
      ],
      "allowed_include_prefixes": ["exec/join/", "exprs/", "runtime/", "column/", "types/", "common/", "base/", "gutil/", "gen_cpp/"],
      "forbidden_include_prefixes": ["exec/", "exec/pipeline/", "compute_env/spill/", "compute_env/workgroup/", "runtime/routine_load/", "storage/", "service/", "http/", "cache/", "connector/", "util/"],
      "forbidden_includes": [
        "exec/cross_join_node.h",
        "exec_primitive/data_sink.h",
        "exec_primitive/exec_node.h",
        "exec/hash_join_components.h",
        "exec/hash_join_node.h",
        "exec/hash_joiner.h",
        "exec/exec_env.h"
      ],
      "allowed_target_deps": ["ComputeEnv", "Expr", "Runtime", "ColumnSortCore", "ChunkCore", "ColumnCore", "Types", "Common", "Base", "Gutil", "StarRocksGen"],
      "allowed_test_targets": ["exec_join_core_test"],
      "allowed_test_link_deps": ["ExecJoinCore", "ComputeEnv", "Expr", "Runtime", "ChunkCore", "ColumnCore", "Types", "Common", "Base", "Gutil", "StarRocksGen"],
      "remediation": "Keep ExecJoinCore limited to reusable join hash table algorithms; leave join nodes, pipeline operators, storage/service integration, and util diagnostics in higher modules."
    },
    {
      "id": "orchestration",
      "doc_label": "Orchestration",
      "summary": "Orchestration layer below Service for query, fragment, and ingestion lifecycle entrypoints over concrete runtime and execution modules.",
      "owned_targets": ["Orchestration"],
      "owned_roots": ["be/src/orchestration"],
      "allowed_include_prefixes": [
        "orchestration/",
        "data_workflows/",
        "connector_primitive/",
        "column/",
        "exec/",
        "exec_primitive/",
        "runtime/",
        "compute_env/",
        "platform/",
        "common/",
        "base/",
        "gutil/",
        "gen_cpp/",
        "types/"
      ],
      "forbidden_include_prefixes": ["service/", "http/", "agent/"],
      "allowed_target_deps": ["DataWorkflows", "Runtime", "Exec", "ExecRuntime", "ExecPrimitive", "ComputeEnv", "ConnectorPrimitive", "Platform", "ColumnCore", "Runtime", "Common", "Base", "Gutil", "StarRocksGen", "Types"],
      "allowed_test_targets": ["orchestration_test"],
      "allowed_test_link_deps": ["Orchestration"],
      "remediation": "Keep Orchestration below Service; move transport-specific RPC handling to Service and lower reusable execution/runtime or ingestion primitives to their owning modules."
    },
    {
      "id": "script",
      "doc_label": "Script",
      "summary": "Diagnostic script execution and command dispatch layer below Service, HttpService, Tools, and AgentServer, and above the remaining reusable BE modules.",
      "owned_targets": ["Script"],
      "owned_roots": ["be/src/script"],
      "allowed_include_prefixes": [
        "script/",
        "base/",
        "cache/",
        "column/",
        "common/",
        "connector/",
        "compute_env/",
        "data_workflows/",
        "exec/",
        "exec_primitive/",
        "exprs/",
        "formats/",
        "fs/",
        "gen_cpp/",
        "geo/",
        "gutil/",
        "io/",
        "orchestration/",
        "platform/",
        "runtime/",
        "storage/",
        "storage_primitive/",
        "types/"
      ],
      "forbidden_include_prefixes": [
        "service/",
        "agent/",
        "tools/",
        "http/"
      ],
      "allowed_target_deps": [
        "Base",
        "Gutil",
        "Common",
        "Cache",
        "IO",
        "FileSystem",
        "Platform",
        "Types",
        "ColumnCore",
        "ChunkCore",
        "ColumnSortCore",
        "Runtime",
        "Runtime",
        "Runtime",
        "Formats",
        "StoragePrimitive",
        "StorageBase",
        "Storage",
        "ComputeEnv",
        "DataWorkflows",
        "Expr",
        "ExprDict", "ExprTableFunction", "ExprUtility",
        "ExecPrimitive",
        "ExecRuntime",
        "ExecJoinCore",
        "Exec",
        "ConnectorPrimitive",
        "Connector",
        "ConnectorBenchmark",
        "ConnectorCacheStats",
        "ConnectorElasticsearch",
        "ConnectorMySQL",
        "Orchestration",
        "Geo",
        "StarRocksGen"
      ],
      "allowed_test_targets": ["script_test"],
      "allowed_test_link_deps": ["Script"],
      "remediation": "Keep Script below Service, HttpService, Tools, and AgentServer; lower reusable behavior can live in lower BE modules that Script is allowed to depend on."
    },
    {
      "id": "service",
      "doc_label": "Service",
      "summary": "Shared service-layer target above Script, runtime, cache, compute, and AgentServer without owning ServiceBE bootstrap code.",
      "owned_targets": ["Service"],
      "allowed_include_prefixes": [
        "service/",
        "script/",
        "agent/",
        "base/",
        "cache/",
        "column/",
        "common/",
        "connector/",
        "compute_env/",
        "exec/",
        "exec_primitive/",
        "exprs/",
        "formats/",
        "fs/",
        "gen_cpp/",
        "gutil/",
        "http/",
        "io/",
        "platform/",
        "orchestration/",
        "runtime/",
        "storage/",
        "storage_primitive/",
        "types/"
      ],
      "forbidden_include_prefixes": ["service/service_be/", "service_be/"],
      "allowed_target_deps": [
        "Script",
        "Runtime",
        "Orchestration",
        "Runtime",
        "Runtime",
        "Cache",
        "AgentServer",
        "ComputeEnv",
        "ExecRuntime",
        "ExecPrimitive",
        "Platform",
        "Storage",
        "StoragePrimitive",
        "StorageBase",
        "FileSystem",
        "IO",
        "HttpService",
        "Common",
        "Base",
        "Gutil",
        "StarRocksGen",
        "Connector",
        "ConnectorFile",
        "ConnectorPrimitive",
        "Exec",
        "Formats",
        "ChunkCore",
        "ColumnCore",
        "Types"
      ],
      "remediation": "Keep shared Service below ServiceBE and depend on checked module targets such as AgentServer instead of ad hoc lower-layer reach-through."
    }
  ]
}