@agent-teams/engineering-foundation 0.5.0 → 0.6.0

package/dist/capabilities/repository-security-baseline/application/policies/repository-security-diagnostic.js

@@ -0,0 +1,14 @@
+export function repositorySecurityDiagnostic(input) {
+    return {
+        ruleId: input.rule.id,
+        severity: input.severity ?? input.rule.severity,
+        subject: input.subject,
+        message: input.message,
+        location: { path: input.path },
+        relatedLocations: [],
+        evidence: input.evidence ?? [],
+        remediation: input.rule.remediation,
+        requiresArchitectureReview: input.rule.requiresArchitectureReview
+    };
+}
+//# sourceMappingURL=repository-security-diagnostic.js.map

package/dist/capabilities/repository-security-baseline/application/policies/repository-security-diagnostic.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"repository-security-diagnostic.js","sourceRoot":"","sources":["../../../../../src/capabilities/repository-security-baseline/application/policies/repository-security-diagnostic.ts"],"names":[],"mappings":"AAGA,MAAM,UAAU,4BAA4B,CAAC,KAO5C;IACC,OAAO;QACL,MAAM,EAAE,KAAK,CAAC,IAAI,CAAC,EAAE;QACrB,QAAQ,EAAE,KAAK,CAAC,QAAQ,IAAI,KAAK,CAAC,IAAI,CAAC,QAAQ;QAC/C,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,QAAQ,EAAE,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE;QAC9B,gBAAgB,EAAE,EAAE;QACpB,QAAQ,EAAE,KAAK,CAAC,QAAQ,IAAI,EAAE;QAC9B,WAAW,EAAE,KAAK,CAAC,IAAI,CAAC,WAAW;QACnC,0BAA0B,EAAE,KAAK,CAAC,IAAI,CAAC,0BAA0B;KAClE,CAAC;AACJ,CAAC"}

package/dist/capabilities/repository-security-baseline/application/rules.d.ts

@@ -9,7 +9,12 @@ export interface RepositorySecurityRuleMetadata {
 }
 export declare const REPOSITORY_SECURITY_RULES: Readonly<{
     actionNotPinned: RepositorySecurityRuleMetadata;
+    actionNotAllowlisted: RepositorySecurityRuleMetadata;
+    actionAllowlistScopeMismatch: RepositorySecurityRuleMetadata;
     dependencyReviewMissing: RepositorySecurityRuleMetadata;
+    dependencyReviewOrdering: RepositorySecurityRuleMetadata;
+    containerNotAllowlisted: RepositorySecurityRuleMetadata;
+    containerNotPinned: RepositorySecurityRuleMetadata;
     dangerousTrigger: RepositorySecurityRuleMetadata;
     eventInterpolationInRun: RepositorySecurityRuleMetadata;
     packageFilesUnsafe: RepositorySecurityRuleMetadata;
@@ -18,6 +23,16 @@ export declare const REPOSITORY_SECURITY_RULES: Readonly<{
     sbomMissing: RepositorySecurityRuleMetadata;
     privilegedJobMismatch: RepositorySecurityRuleMetadata;
     stalePrivilegedJob: RepositorySecurityRuleMetadata;
+    staleAllowedUse: RepositorySecurityRuleMetadata;
+    staleAllowedContainerImage: RepositorySecurityRuleMetadata;
+    toolEvidenceFailed: RepositorySecurityRuleMetadata;
+    toolEvidenceJobMissing: RepositorySecurityRuleMetadata;
+    toolEvidenceInvocationMissing: RepositorySecurityRuleMetadata;
+    toolEvidenceMissing: RepositorySecurityRuleMetadata;
+    toolEvidenceResultDigestMismatch: RepositorySecurityRuleMetadata;
+    toolEvidenceRolloutMismatch: RepositorySecurityRuleMetadata;
+    toolEvidenceStale: RepositorySecurityRuleMetadata;
+    toolEvidenceVersionMismatch: RepositorySecurityRuleMetadata;
 }>;
 export declare const REPOSITORY_SECURITY_RULES_BY_ID: ReadonlyMap<string, RepositorySecurityRuleMetadata>;
 //# sourceMappingURL=rules.d.ts.map

package/dist/capabilities/repository-security-baseline/application/rules.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"rules.d.ts","sourceRoot":"","sources":["../../../../src/capabilities/repository-security-baseline/application/rules.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,4BAA4B,CAAC;AAErE,MAAM,WAAW,8BAA8B;IAC7C,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,QAAQ,EAAE,kBAAkB,CAAC;IACtC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,0BAA0B,EAAE,OAAO,CAAC;CAC9C;AAiBD,eAAO,MAAM,yBAAyB;;;;;;;;;;;EAmDpC,CAAC;AAEH,eAAO,MAAM,+BAA+B,EAAE,WAAW,CACvD,MAAM,EACN,8BAA8B,CAG/B,CAAC"}
+{"version":3,"file":"rules.d.ts","sourceRoot":"","sources":["../../../../src/capabilities/repository-security-baseline/application/rules.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,4BAA4B,CAAC;AAErE,MAAM,WAAW,8BAA8B;IAC7C,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,QAAQ,EAAE,kBAAkB,CAAC;IACtC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,0BAA0B,EAAE,OAAO,CAAC;CAC9C;AAiBD,eAAO,MAAM,yBAAyB;;;;;;;;;;;;;;;;;;;;;;;;;;EA8HpC,CAAC;AAEH,eAAO,MAAM,+BAA+B,EAAE,WAAW,CACvD,MAAM,EACN,8BAA8B,CAG/B,CAAC"}

package/dist/capabilities/repository-security-baseline/application/rules.js

@@ -10,7 +10,12 @@ function rule(suffix, rationale, remediation) {
 }
 export const REPOSITORY_SECURITY_RULES = Object.freeze({
     actionNotPinned: rule("action-not-pinned", "Mutable action references can change without repository review.", "Pin external actions to a full 40-character commit SHA."),
+    actionNotAllowlisted: rule("action-not-allowlisted", "A pinned reference is not necessarily a trusted reference.", "Add the exact immutable external use to allowedUses after reviewing its owner, revision, and purpose."),
+    actionAllowlistScopeMismatch: rule("action-allowlist-scope-mismatch", "A direct repository dependency is declared only as a transitive dependency of another use.", "Move the reference to allowedUses or remove the direct repository invocation."),
     dependencyReviewMissing: rule("dependency-review-missing", "Dependency changes need a pull-request vulnerability gate.", "Run the pinned actions/dependency-review-action from the declared workflow."),
+    dependencyReviewOrdering: rule("dependency-review-ordering", "A pull-request workflow can execute a run step, local action, or reusable workflow before Dependency Review completes.", "Make each pull-request job with a run step, local action, or reusable workflow depend on the declared Dependency Review job, or run the governed review step first in that same job."),
+    containerNotAllowlisted: rule("container-not-allowlisted", "A pinned container image is not automatically an approved supply-chain dependency.", "Add the exact immutable container image to allowedContainerImages after reviewing its owner, digest, and purpose."),
+    containerNotPinned: rule("container-not-pinned", "Mutable job and service container references can change without repository review.", "Pin every job and service container image to an immutable sha256 digest."),
     dangerousTrigger: rule("dangerous-trigger", "pull_request_target executes privileged base-branch code around untrusted pull-request data.", "Use pull_request or introduce a separately reviewed privileged workflow design."),
     eventInterpolationInRun: rule("event-interpolation-in-run", "Direct event-data interpolation into a shell command enables command injection.", "Pass event data through a quoted environment variable instead of interpolating it in run."),
     packageFilesUnsafe: rule("package-files-unsafe", "A broad npm files declaration can publish source, tests, local state, or credentials.", "Use a narrow explicit files allowlist without root, parent, recursive, source, test, or secret paths."),
@@ -18,7 +23,17 @@ export const REPOSITORY_SECURITY_RULES = Object.freeze({
     permissionsInvalid: rule("permissions-invalid", "Workflow token permissions must default to an explicit read-only map.", "Declare root permissions as an object containing only read or none values."),
     sbomMissing: rule("sbom-missing", "The dependency inventory must be reproducibly exported for each reviewed revision.", "Run a pinned anchore/sbom-action from the declared SBOM workflow."),
     privilegedJobMismatch: rule("privileged-job-mismatch", "Write-capable jobs need an exact reviewed permission declaration.", "Declare the job in privilegedJobs with the exact permission map, or remove write access."),
-    stalePrivilegedJob: rule("stale-privileged-job", "A stale privilege declaration can hide workflow ownership drift.", "Remove the declaration or restore the exact governed workflow job.")
+    stalePrivilegedJob: rule("stale-privileged-job", "A stale privilege declaration can hide workflow ownership drift.", "Remove the declaration or restore the exact governed workflow job."),
+    staleAllowedUse: rule("stale-allowed-use", "An unused trust declaration can conceal action ownership drift.", "Remove the unused allowedUses entry or restore the reviewed workflow reference."),
+    staleAllowedContainerImage: rule("stale-allowed-container-image", "An unused container trust declaration can conceal supply-chain ownership drift.", "Remove the declaration or restore the exact reviewed job or service container image."),
+    toolEvidenceFailed: rule("tool-evidence-failed", "A required external security tool reported a failed result.", "Fix the tool findings and publish fresh evidence with a passed outcome."),
+    toolEvidenceJobMissing: rule("tool-evidence-job-missing", "The declared external security tool gate has no matching workflow job.", "Declare an existing workflow path and job ID that runs the external tool gate."),
+    toolEvidenceInvocationMissing: rule("tool-evidence-invocation-missing", "The declared external tool job does not invoke its reviewed immutable runner.", "Declare the exact pinned invocation in the tool policy and use it from the governed job."),
+    toolEvidenceMissing: rule("tool-evidence-missing", "Required external security evidence is unavailable.", "Run the declared tool and publish its evidence envelope and opaque result artifact."),
+    toolEvidenceResultDigestMismatch: rule("tool-evidence-result-digest-mismatch", "The result artifact no longer matches the reviewed evidence envelope.", "Regenerate the evidence envelope and result artifact together from one tool execution."),
+    toolEvidenceRolloutMismatch: rule("tool-evidence-rollout-mismatch", "The declared external tool job does not enforce the configured blocking or advisory rollout.", "Use an unconditional blocking job, or an unconditional continue-on-error advisory job, as declared."),
+    toolEvidenceStale: rule("tool-evidence-stale", "Tool evidence does not describe the current workflow or tool configuration input.", "Rerun the declared tool against the current inputs and publish fresh evidence."),
+    toolEvidenceVersionMismatch: rule("tool-evidence-version-mismatch", "Tool evidence was produced by a version different from the declared pinned version.", "Run the declared exact tool version and publish fresh evidence.")
 });
 export const REPOSITORY_SECURITY_RULES_BY_ID = new Map(Object.values(REPOSITORY_SECURITY_RULES).map((metadata) => [metadata.id, metadata]));
 //# sourceMappingURL=rules.js.map

package/dist/capabilities/repository-security-baseline/application/rules.js.map

@@ -1 +1 @@
-{"version":3,"file":"rules.js","sourceRoot":"","sources":["../../../../src/capabilities/repository-security-baseline/application/rules.ts"],"names":[],"mappings":"AAWA,SAAS,IAAI,CACX,MAAc,EACd,SAAiB,EACjB,WAAmB;IAEnB,OAAO,MAAM,CAAC,MAAM,CAAC;QACnB,EAAE,EAAE,gCAAgC,MAAM,EAAE;QAC5C,QAAQ,EAAE,OAAO;QACjB,SAAS;QACT,WAAW;QACX,aAAa,EAAE,+CAA+C;QAC9D,0BAA0B,EAAE,KAAK;KAClC,CAAC,CAAC;AACL,CAAC;AAED,MAAM,CAAC,MAAM,yBAAyB,GAAG,MAAM,CAAC,MAAM,CAAC;IACrD,eAAe,EAAE,IAAI,CACnB,mBAAmB,EACnB,iEAAiE,EACjE,yDAAyD,CAC1D;IACD,uBAAuB,EAAE,IAAI,CAC3B,2BAA2B,EAC3B,4DAA4D,EAC5D,6EAA6E,CAC9E;IACD,gBAAgB,EAAE,IAAI,CACpB,mBAAmB,EACnB,8FAA8F,EAC9F,iFAAiF,CAClF;IACD,uBAAuB,EAAE,IAAI,CAC3B,4BAA4B,EAC5B,iFAAiF,EACjF,2FAA2F,CAC5F;IACD,kBAAkB,EAAE,IAAI,CACtB,sBAAsB,EACtB,uFAAuF,EACvF,uGAAuG,CACxG;IACD,wBAAwB,EAAE,IAAI,CAC5B,4BAA4B,EAC5B,sDAAsD,EACtD,2EAA2E,CAC5E;IACD,kBAAkB,EAAE,IAAI,CACtB,qBAAqB,EACrB,uEAAuE,EACvE,4EAA4E,CAC7E;IACD,WAAW,EAAE,IAAI,CACf,cAAc,EACd,oFAAoF,EACpF,mEAAmE,CACpE;IACD,qBAAqB,EAAE,IAAI,CACzB,yBAAyB,EACzB,mEAAmE,EACnE,0FAA0F,CAC3F;IACD,kBAAkB,EAAE,IAAI,CACtB,sBAAsB,EACtB,kEAAkE,EAClE,oEAAoE,CACrE;CACF,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,+BAA+B,GAGxC,IAAI,GAAG,CACT,MAAM,CAAC,MAAM,CAAC,yBAAyB,CAAC,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,QAAQ,CAAC,EAAE,EAAE,QAAQ,CAAC,CAAC,CACpF,CAAC"}
+{"version":3,"file":"rules.js","sourceRoot":"","sources":["../../../../src/capabilities/repository-security-baseline/application/rules.ts"],"names":[],"mappings":"AAWA,SAAS,IAAI,CACX,MAAc,EACd,SAAiB,EACjB,WAAmB;IAEnB,OAAO,MAAM,CAAC,MAAM,CAAC;QACnB,EAAE,EAAE,gCAAgC,MAAM,EAAE;QAC5C,QAAQ,EAAE,OAAO;QACjB,SAAS;QACT,WAAW;QACX,aAAa,EAAE,+CAA+C;QAC9D,0BAA0B,EAAE,KAAK;KAClC,CAAC,CAAC;AACL,CAAC;AAED,MAAM,CAAC,MAAM,yBAAyB,GAAG,MAAM,CAAC,MAAM,CAAC;IACrD,eAAe,EAAE,IAAI,CACnB,mBAAmB,EACnB,iEAAiE,EACjE,yDAAyD,CAC1D;IACD,oBAAoB,EAAE,IAAI,CACxB,wBAAwB,EACxB,4DAA4D,EAC5D,uGAAuG,CACxG;IACD,4BAA4B,EAAE,IAAI,CAChC,iCAAiC,EACjC,4FAA4F,EAC5F,+EAA+E,CAChF;IACD,uBAAuB,EAAE,IAAI,CAC3B,2BAA2B,EAC3B,4DAA4D,EAC5D,6EAA6E,CAC9E;IACD,wBAAwB,EAAE,IAAI,CAC5B,4BAA4B,EAC5B,wHAAwH,EACxH,sLAAsL,CACvL;IACD,uBAAuB,EAAE,IAAI,CAC3B,2BAA2B,EAC3B,oFAAoF,EACpF,mHAAmH,CACpH;IACD,kBAAkB,EAAE,IAAI,CACtB,sBAAsB,EACtB,oFAAoF,EACpF,0EAA0E,CAC3E;IACD,gBAAgB,EAAE,IAAI,CACpB,mBAAmB,EACnB,8FAA8F,EAC9F,iFAAiF,CAClF;IACD,uBAAuB,EAAE,IAAI,CAC3B,4BAA4B,EAC5B,iFAAiF,EACjF,2FAA2F,CAC5F;IACD,kBAAkB,EAAE,IAAI,CACtB,sBAAsB,EACtB,uFAAuF,EACvF,uGAAuG,CACxG;IACD,wBAAwB,EAAE,IAAI,CAC5B,4BAA4B,EAC5B,sDAAsD,EACtD,2EAA2E,CAC5E;IACD,kBAAkB,EAAE,IAAI,CACtB,qBAAqB,EACrB,uEAAuE,EACvE,4EAA4E,CAC7E;IACD,WAAW,EAAE,IAAI,CACf,cAAc,EACd,oFAAoF,EACpF,mEAAmE,CACpE;IACD,qBAAqB,EAAE,IAAI,CACzB,yBAAyB,EACzB,mEAAmE,EACnE,0FAA0F,CAC3F;IACD,kBAAkB,EAAE,IAAI,CACtB,sBAAsB,EACtB,kEAAkE,EAClE,oEAAoE,CACrE;IACD,eAAe,EAAE,IAAI,CACnB,mBAAmB,EACnB,iEAAiE,EACjE,iFAAiF,CAClF;IACD,0BAA0B,EAAE,IAAI,CAC9B,+BAA+B,EAC/B,iFAAiF,EACjF,sFAAsF,CACvF;IACD,kBAAkB,EAAE,IAAI,CACtB,sBAAsB,EACtB,6DAA6D,EAC7D,yEAAyE,CAC1E;IACD,sBAAsB,EAAE,IAAI,CAC1B,2BAA2B,EAC3B,wEAAwE,EACxE,gFAAgF,CACjF;IACD,6BAA6B,EAAE,IAAI,CACjC,kCAAkC,EAClC,+EAA+E,EAC/E,0FAA0F,CAC3F;IACD,mBAAmB,EAAE,IAAI,CACvB,uBAAuB,EACvB,qDAAqD,EACrD,qFAAqF,CACtF;IACD,gCAAgC,EAAE,IAAI,CACpC,sCAAsC,EACtC,uEAAuE,EACvE,wFAAwF,CACzF;IACD,2BAA2B,EAAE,IAAI,CAC/B,gCAAgC,EAChC,8FAA8F,EAC9F,qGAAqG,CACtG;IACD,iBAAiB,EAAE,IAAI,CACrB,qBAAqB,EACrB,mFAAmF,EACnF,gFAAgF,CACjF;IACD,2BAA2B,EAAE,IAAI,CAC/B,gCAAgC,EAChC,qFAAqF,EACrF,iEAAiE,CAClE;CACF,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,+BAA+B,GAGxC,IAAI,GAAG,CACT,MAAM,CAAC,MAAM,CAAC,yBAAyB,CAAC,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,QAAQ,CAAC,EAAE,EAAE,QAAQ,CAAC,CAAC,CACpF,CAAC"}

package/dist/capabilities/repository-security-baseline/contract/config.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"config.d.ts","sourceRoot":"","sources":["../../../../src/capabilities/repository-security-baseline/contract/config.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAEV,wBAAwB,EAEzB,MAAM,6CAA6C,CAAC;AAErD,eAAO,MAAM,aAAa,EAAG,8BAAuC,CAAC;AACrE,eAAO,MAAM,gCAAgC,EAAG,CAAU,CAAC;AAoD3D,wBAAsB,oBAAoB,CACxC,YAAY,EAAE,MAAM,EACpB,UAAU,EAAE,MAAM,EAClB,MAAM,CAAC,EAAE,WAAW,GACnB,OAAO,CAAC,wBAAwB,CAAC,CA4CnC"}
+{"version":3,"file":"config.d.ts","sourceRoot":"","sources":["../../../../src/capabilities/repository-security-baseline/contract/config.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAIV,wBAAwB,EAMzB,MAAM,6CAA6C,CAAC;AAQrD,eAAO,MAAM,aAAa,EAAG,8BAAuC,CAAC;AACrE,eAAO,MAAM,gCAAgC,EAAG,CAAU,CAAC;AAkM3D,wBAAsB,oBAAoB,CACxC,YAAY,EAAE,MAAM,EACpB,UAAU,EAAE,MAAM,EAClB,MAAM,CAAC,EAAE,WAAW,GACnB,OAAO,CAAC,wBAAwB,CAAC,CAuDnC"}

package/dist/capabilities/repository-security-baseline/contract/config.js

@@ -1,6 +1,7 @@
 import { CapabilityInputError } from "../../../capability-runtime.js";
 import { assertSchema } from "../../../schema-catalog.js";
 import { assertRepositoryRelativePath, loadStrictYamlFile } from "../../../strict-yaml.js";
+import { configuredRepositorySecurityTools, flattenAllowedWorkflowUses, isPinnedContainerImage, isPinnedExternalWorkflowUse } from "../application/model/repository-security.js";
 export const CAPABILITY_ID = "repository.security-baseline";
 export const CAPABILITY_CONFIG_SCHEMA_VERSION = 1;
 function inputError(message) {
@@ -28,6 +29,125 @@ function path(value, field) {
     assertRepositoryRelativePath(result, "repository-security-config");
     return result;
 }
+function rollout(value, field) {
+    if (value !== "advisory" && value !== "blocking") {
+        inputError(`${field} must be advisory or blocking.`);
+    }
+    return value;
+}
+function version(value, field) {
+    const result = string(value, field);
+    if (!/^v?[0-9]+\.[0-9]+\.[0-9]+(?:-[0-9A-Za-z.-]+)?(?:\+[0-9A-Za-z.-]+)?$/u.test(result)) {
+        inputError(`${field} must be an exact semantic version.`);
+    }
+    return result;
+}
+function pinnedExternalUse(value, field) {
+    const result = string(value, field);
+    if (!isPinnedExternalWorkflowUse(result)) {
+        inputError(`${field} must be an immutable external action, reusable workflow, or container digest.`);
+    }
+    return result;
+}
+function mapToolEvidencePolicy(value, tool) {
+    const field = `toolEvidence.${tool}`;
+    const input = record(value, field);
+    return Object.freeze({
+        configPath: path(input["configPath"], `${field}.configPath`),
+        evidencePath: path(input["evidencePath"], `${field}.evidencePath`),
+        invocationUse: pinnedExternalUse(input["invocationUse"], `${field}.invocationUse`),
+        jobId: string(input["jobId"], `${field}.jobId`),
+        resultPath: path(input["resultPath"], `${field}.resultPath`),
+        rollout: rollout(input["rollout"], `${field}.rollout`),
+        version: version(input["version"], `${field}.version`),
+        workflowPath: path(input["workflowPath"], `${field}.workflowPath`)
+    });
+}
+function mapToolEvidencePolicies(value) {
+    const input = record(value, "toolEvidence");
+    const actionlint = mapToolEvidencePolicy(input["actionlint"], "actionlint");
+    const zizmor = mapToolEvidencePolicy(input["zizmor"], "zizmor");
+    const codeql = input["codeql"] === undefined ? undefined : mapToolEvidencePolicy(input["codeql"], "codeql");
+    const policies = [actionlint, zizmor, ...(codeql === undefined ? [] : [codeql])];
+    const artifactPaths = policies.flatMap(({ evidencePath, resultPath }) => [
+        evidencePath,
+        resultPath
+    ]);
+    if (new Set(artifactPaths).size !== artifactPaths.length) {
+        inputError("Each security tool must declare independent evidence and result paths.");
+    }
+    const jobKeys = policies.map(({ jobId, workflowPath }) => `${workflowPath}:${jobId}`);
+    if (new Set(jobKeys).size !== jobKeys.length) {
+        inputError("Each security tool must declare an independent workflow job.");
+    }
+    return Object.freeze({
+        actionlint,
+        zizmor,
+        ...(codeql === undefined ? {} : { codeql })
+    });
+}
+function mapAllowedUse(value, field, depth) {
+    if (depth > 10) {
+        inputError(`${field} exceeds the supported transitive allowlist depth.`);
+    }
+    const input = record(value, field);
+    const use = pinnedExternalUse(input["uses"], `${field}.uses`);
+    const transitiveInput = input["transitiveUses"];
+    if (!Array.isArray(transitiveInput)) {
+        inputError(`${field}.transitiveUses must be an array.`);
+    }
+    return Object.freeze({
+        uses: use,
+        transitiveUses: Object.freeze(transitiveInput.map((entry, index) => mapAllowedUse(entry, `${field}.transitiveUses[${index}]`, depth + 1)))
+    });
+}
+function mapAllowedUses(value) {
+    if (!Array.isArray(value)) {
+        inputError("allowedUses must be an array.");
+    }
+    const entries = value.map((entry, index) => mapAllowedUse(entry, `allowedUses[${index}]`, 1));
+    const flattened = flattenAllowedWorkflowUses(entries).map(({ uses }) => uses);
+    if (new Set(flattened).size !== flattened.length) {
+        inputError("allowedUses and transitiveUses entries must be globally unique.");
+    }
+    return Object.freeze(entries);
+}
+function mapAllowedContainerImages(value) {
+    if (!Array.isArray(value)) {
+        inputError("allowedContainerImages must be an array.");
+    }
+    const images = value.map((entry, index) => {
+        const field = `allowedContainerImages[${index}]`;
+        const image = string(entry, field);
+        if (!isPinnedContainerImage(image)) {
+            inputError(`${field} must be an immutable container image digest.`);
+        }
+        return image;
+    });
+    if (new Set(images).size !== images.length) {
+        inputError("allowedContainerImages entries must be unique.");
+    }
+    return Object.freeze(images);
+}
+function mapDependencyReview(value) {
+    const input = record(value, "dependencyReview");
+    const baseRef = string(input["baseRef"], "dependencyReview.baseRef");
+    const headRef = string(input["headRef"], "dependencyReview.headRef");
+    if (baseRef.trim().length === 0 || headRef.trim().length === 0 || baseRef === headRef) {
+        inputError("dependencyReview baseRef and headRef must be distinct non-empty expressions.");
+    }
+    const failOnSeverity = string(input["failOnSeverity"], "dependencyReview.failOnSeverity");
+    if (failOnSeverity !== "low" && failOnSeverity !== "moderate") {
+        inputError("dependencyReview.failOnSeverity must be low or moderate.");
+    }
+    return Object.freeze({
+        baseRef,
+        failOnSeverity,
+        headRef,
+        jobId: string(input["jobId"], "dependencyReview.jobId"),
+        workflowPath: path(input["workflowPath"], "dependencyReview.workflowPath")
+    });
+}
 function mapPrivilegedJob(value, index) {
     const field = `privilegedJobs[${index}]`;
     const input = record(value, field);
@@ -53,9 +173,9 @@ export async function loadCapabilityConfig(consumerRoot, configPath, signal) {
     await assertSchema("repository-security-baseline/v1", input, "repository-security-config");
     const root = record(input, "repository security config");
     const workflowDirectory = path(root["workflowDirectory"], "workflowDirectory");
-    const dependencyReviewWorkflow = path(root["dependencyReviewWorkflow"], "dependencyReviewWorkflow");
+    const dependencyReview = mapDependencyReview(root["dependencyReview"]);
     const sbomWorkflow = path(root["sbomWorkflow"], "sbomWorkflow");
-    for (const governedWorkflow of [dependencyReviewWorkflow, sbomWorkflow]) {
+    for (const governedWorkflow of [dependencyReview.workflowPath, sbomWorkflow]) {
         if (!governedWorkflow.startsWith(`${workflowDirectory}/`)) {
             inputError(`${governedWorkflow} must be inside workflowDirectory.`);
         }
@@ -75,12 +195,25 @@ export async function loadCapabilityConfig(consumerRoot, configPath, signal) {
             inputError(`Privileged workflow must be inside ${workflowDirectory}: ${privileged.workflowPath}.`);
         }
     }
+    const allowedUses = mapAllowedUses(root["allowedUses"]);
+    const allowedContainerImages = mapAllowedContainerImages(root["allowedContainerImages"]);
+    const toolEvidence = root["toolEvidence"] === undefined
+        ? undefined
+        : mapToolEvidencePolicies(root["toolEvidence"]);
+    for (const tool of configuredRepositorySecurityTools(toolEvidence)) {
+        if (!tool.policy.workflowPath.startsWith(`${workflowDirectory}/`)) {
+            inputError(`${tool.policy.workflowPath} must be inside workflowDirectory.`);
+        }
+    }
     return Object.freeze({
+        allowedContainerImages,
+        allowedUses,
         workflowDirectory,
-        dependencyReviewWorkflow,
+        dependencyReview,
         sbomWorkflow,
         privilegedJobs: Object.freeze(privilegedJobs),
-        publishablePackageManifests: Object.freeze(manifestsInput.map((value, index) => path(value, `publishablePackageManifests[${index}]`)))
+        publishablePackageManifests: Object.freeze(manifestsInput.map((value, index) => path(value, `publishablePackageManifests[${index}]`))),
+        ...(toolEvidence === undefined ? {} : { toolEvidence })
     });
 }
 //# sourceMappingURL=config.js.map

package/dist/capabilities/repository-security-baseline/contract/config.js.map

@@ -1 +1 @@
-{"version":3,"file":"config.js","sourceRoot":"","sources":["../../../../src/capabilities/repository-security-baseline/contract/config.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,oBAAoB,EAAE,MAAM,gCAAgC,CAAC;AACtE,OAAO,EAAE,YAAY,EAAE,MAAM,4BAA4B,CAAC;AAC1D,OAAO,EAAE,4BAA4B,EAAE,kBAAkB,EAAE,MAAM,yBAAyB,CAAC;AAO3F,MAAM,CAAC,MAAM,aAAa,GAAG,8BAAuC,CAAC;AACrE,MAAM,CAAC,MAAM,gCAAgC,GAAG,CAAU,CAAC;AAE3D,SAAS,UAAU,CAAC,OAAe;IACjC,MAAM,IAAI,oBAAoB,CAAC;QAC7B,IAAI,EAAE,oCAAoC;QAC1C,OAAO;QACP,KAAK,EAAE,4BAA4B;QACnC,SAAS,EAAE,KAAK;KACjB,CAAC,CAAC;AACL,CAAC;AAED,SAAS,MAAM,CAAC,KAAc,EAAE,KAAa;IAC3C,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACxE,UAAU,CAAC,GAAG,KAAK,qBAAqB,CAAC,CAAC;IAC5C,CAAC;IACD,OAAO,KAAgC,CAAC;AAC1C,CAAC;AAED,SAAS,MAAM,CAAC,KAAc,EAAE,KAAa;IAC3C,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC9B,UAAU,CAAC,GAAG,KAAK,oBAAoB,CAAC,CAAC;IAC3C,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,IAAI,CAAC,KAAc,EAAE,KAAa;IACzC,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;IACpC,4BAA4B,CAAC,MAAM,EAAE,4BAA4B,CAAC,CAAC;IACnE,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAS,gBAAgB,CAAC,KAAc,EAAE,KAAa;IACrD,MAAM,KAAK,GAAG,kBAAkB,KAAK,GAAG,CAAC;IACzC,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;IACnC,MAAM,eAAe,GAAG,MAAM,CAAC,KAAK,CAAC,aAAa,CAAC,EAAE,GAAG,KAAK,cAAc,CAAC,CAAC;IAC7E,MAAM,WAAW,GAAuC,EAAE,CAAC;IAC3D,KAAK,MAAM,CAAC,IAAI,EAAE,UAAU,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,eAAe,CAAC,EAAE,CAAC;QACjE,IAAI,UAAU,KAAK,MAAM,IAAI,UAAU,KAAK,MAAM,IAAI,UAAU,KAAK,OAAO,EAAE,CAAC;YAC7E,UAAU,CAAC,GAAG,KAAK,gBAAgB,IAAI,cAAc,CAAC,CAAC;QACzD,CAAC;QACD,WAAW,CAAC,IAAI,CAAC,GAAG,UAAU,CAAC;IACjC,CAAC;IACD,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;QAClD,UAAU,CAAC,GAAG,KAAK,6CAA6C,CAAC,CAAC;IACpE,CAAC;IACD,OAAO,MAAM,CAAC,MAAM,CAAC;QACnB,YAAY,EAAE,IAAI,CAAC,KAAK,CAAC,cAAc,CAAC,EAAE,GAAG,KAAK,eAAe,CAAC;QAClE,KAAK,EAAE,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,GAAG,KAAK,QAAQ,CAAC;QAC/C,WAAW,EAAE,MAAM,CAAC,MAAM,CAAC,WAAW,CAAC;KACxC,CAAC,CAAC;AACL,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,oBAAoB,CACxC,YAAoB,EACpB,UAAkB,EAClB,MAAoB;IAEpB,MAAM,KAAK,GAAG,MAAM,kBAAkB,CACpC,YAAY,EACZ,UAAU,EACV,4BAA4B,EAC5B,MAAM,CACP,CAAC;IACF,MAAM,YAAY,CAAC,iCAAiC,EAAE,KAAK,EAAE,4BAA4B,CAAC,CAAC;IAC3F,MAAM,IAAI,GAAG,MAAM,CAAC,KAAK,EAAE,4BAA4B,CAAC,CAAC;IACzD,MAAM,iBAAiB,GAAG,IAAI,CAAC,IAAI,CAAC,mBAAmB,CAAC,EAAE,mBAAmB,CAAC,CAAC;IAC/E,MAAM,wBAAwB,GAAG,IAAI,CACnC,IAAI,CAAC,0BAA0B,CAAC,EAChC,0BAA0B,CAC3B,CAAC;IACF,MAAM,YAAY,GAAG,IAAI,CAAC,IAAI,CAAC,cAAc,CAAC,EAAE,cAAc,CAAC,CAAC;IAChE,KAAK,MAAM,gBAAgB,IAAI,CAAC,wBAAwB,EAAE,YAAY,CAAC,EAAE,CAAC;QACxE,IAAI,CAAC,gBAAgB,CAAC,UAAU,CAAC,GAAG,iBAAiB,GAAG,CAAC,EAAE,CAAC;YAC1D,UAAU,CAAC,GAAG,gBAAgB,oCAAoC,CAAC,CAAC;QACtE,CAAC;IACH,CAAC;IACD,MAAM,eAAe,GAAG,IAAI,CAAC,gBAAgB,CAAC,CAAC;IAC/C,MAAM,cAAc,GAAG,IAAI,CAAC,6BAA6B,CAAC,CAAC;IAC3D,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,eAAe,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,cAAc,CAAC,EAAE,CAAC;QACtE,UAAU,CAAC,gEAAgE,CAAC,CAAC;IAC/E,CAAC;IACD,MAAM,cAAc,GAAG,eAAe,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC;IAC7D,MAAM,cAAc,GAAG,cAAc,CAAC,GAAG,CAAC,CAAC,EAAE,YAAY,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC,GAAG,YAAY,IAAI,KAAK,EAAE,CAAC,CAAC;IACnG,IAAI,IAAI,GAAG,CAAC,cAAc,CAAC,CAAC,IAAI,KAAK,cAAc,CAAC,MAAM,EAAE,CAAC;QAC3D,UAAU,CAAC,sDAAsD,CAAC,CAAC;IACrE,CAAC;IACD,KAAK,MAAM,UAAU,IAAI,cAAc,EAAE,CAAC;QACxC,IAAI,CAAC,UAAU,CAAC,YAAY,CAAC,UAAU,CAAC,GAAG,iBAAiB,GAAG,CAAC,EAAE,CAAC;YACjE,UAAU,CAAC,sCAAsC,iBAAiB,KAAK,UAAU,CAAC,YAAY,GAAG,CAAC,CAAC;QACrG,CAAC;IACH,CAAC;IACD,OAAO,MAAM,CAAC,MAAM,CAAC;QACnB,iBAAiB;QACjB,wBAAwB;QACxB,YAAY;QACZ,cAAc,EAAE,MAAM,CAAC,MAAM,CAAC,cAAc,CAAC;QAC7C,2BAA2B,EAAE,MAAM,CAAC,MAAM,CACxC,cAAc,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,KAAK,EAAE,+BAA+B,KAAK,GAAG,CAAC,CAAC,CAC3F;KACF,CAAC,CAAC;AACL,CAAC"}
+{"version":3,"file":"config.js","sourceRoot":"","sources":["../../../../src/capabilities/repository-security-baseline/contract/config.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,oBAAoB,EAAE,MAAM,gCAAgC,CAAC;AACtE,OAAO,EAAE,YAAY,EAAE,MAAM,4BAA4B,CAAC;AAC1D,OAAO,EAAE,4BAA4B,EAAE,kBAAkB,EAAE,MAAM,yBAAyB,CAAC;AAY3F,OAAO,EACL,iCAAiC,EACjC,0BAA0B,EAC1B,sBAAsB,EACtB,2BAA2B,EAC5B,MAAM,6CAA6C,CAAC;AAErD,MAAM,CAAC,MAAM,aAAa,GAAG,8BAAuC,CAAC;AACrE,MAAM,CAAC,MAAM,gCAAgC,GAAG,CAAU,CAAC;AAE3D,SAAS,UAAU,CAAC,OAAe;IACjC,MAAM,IAAI,oBAAoB,CAAC;QAC7B,IAAI,EAAE,oCAAoC;QAC1C,OAAO;QACP,KAAK,EAAE,4BAA4B;QACnC,SAAS,EAAE,KAAK;KACjB,CAAC,CAAC;AACL,CAAC;AAED,SAAS,MAAM,CAAC,KAAc,EAAE,KAAa;IAC3C,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACxE,UAAU,CAAC,GAAG,KAAK,qBAAqB,CAAC,CAAC;IAC5C,CAAC;IACD,OAAO,KAAgC,CAAC;AAC1C,CAAC;AAED,SAAS,MAAM,CAAC,KAAc,EAAE,KAAa;IAC3C,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC9B,UAAU,CAAC,GAAG,KAAK,oBAAoB,CAAC,CAAC;IAC3C,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,IAAI,CAAC,KAAc,EAAE,KAAa;IACzC,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;IACpC,4BAA4B,CAAC,MAAM,EAAE,4BAA4B,CAAC,CAAC;IACnE,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAS,OAAO,CAAC,KAAc,EAAE,KAAa;IAC5C,IAAI,KAAK,KAAK,UAAU,IAAI,KAAK,KAAK,UAAU,EAAE,CAAC;QACjD,UAAU,CAAC,GAAG,KAAK,gCAAgC,CAAC,CAAC;IACvD,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,OAAO,CAAC,KAAc,EAAE,KAAa;IAC5C,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;IACpC,IACE,CAAC,sEAAsE,CAAC,IAAI,CAC1E,MAAM,CACP,EACD,CAAC;QACD,UAAU,CAAC,GAAG,KAAK,qCAAqC,CAAC,CAAC;IAC5D,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAS,iBAAiB,CAAC,KAAc,EAAE,KAAa;IACtD,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;IACpC,IAAI,CAAC,2BAA2B,CAAC,MAAM,CAAC,EAAE,CAAC;QACzC,UAAU,CAAC,GAAG,KAAK,gFAAgF,CAAC,CAAC;IACvG,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAS,qBAAqB,CAC5B,KAAc,EACd,IAAsB;IAEtB,MAAM,KAAK,GAAG,gBAAgB,IAAI,EAAE,CAAC;IACrC,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;IACnC,OAAO,MAAM,CAAC,MAAM,CAAC;QACnB,UAAU,EAAE,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,EAAE,GAAG,KAAK,aAAa,CAAC;QAC5D,YAAY,EAAE,IAAI,CAAC,KAAK,CAAC,cAAc,CAAC,EAAE,GAAG,KAAK,eAAe,CAAC;QAClE,aAAa,EAAE,iBAAiB,CAAC,KAAK,CAAC,eAAe,CAAC,EAAE,GAAG,KAAK,gBAAgB,CAAC;QAClF,KAAK,EAAE,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,GAAG,KAAK,QAAQ,CAAC;QAC/C,UAAU,EAAE,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,EAAE,GAAG,KAAK,aAAa,CAAC;QAC5D,OAAO,EAAE,OAAO,CAAC,KAAK,CAAC,SAAS,CAAC,EAAE,GAAG,KAAK,UAAU,CAAC;QACtD,OAAO,EAAE,OAAO,CAAC,KAAK,CAAC,SAAS,CAAC,EAAE,GAAG,KAAK,UAAU,CAAC;QACtD,YAAY,EAAE,IAAI,CAAC,KAAK,CAAC,cAAc,CAAC,EAAE,GAAG,KAAK,eAAe,CAAC;KACnE,CAAC,CAAC;AACL,CAAC;AAED,SAAS,uBAAuB,CAAC,KAAc;IAC7C,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,EAAE,cAAc,CAAC,CAAC;IAC5C,MAAM,UAAU,GAAG,qBAAqB,CAAC,KAAK,CAAC,YAAY,CAAC,EAAE,YAAY,CAAC,CAAC;IAC5E,MAAM,MAAM,GAAG,qBAAqB,CAAC,KAAK,CAAC,QAAQ,CAAC,EAAE,QAAQ,CAAC,CAAC;IAChE,MAAM,MAAM,GAAG,KAAK,CAAC,QAAQ,CAAC,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,qBAAqB,CAAC,KAAK,CAAC,QAAQ,CAAC,EAAE,QAAQ,CAAC,CAAC;IAC5G,MAAM,QAAQ,GAAG,CAAC,UAAU,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;IACjF,MAAM,aAAa,GAAG,QAAQ,CAAC,OAAO,CAAC,CAAC,EAAE,YAAY,EAAE,UAAU,EAAE,EAAE,EAAE,CAAC;QACvE,YAAY;QACZ,UAAU;KACX,CAAC,CAAC;IACH,IAAI,IAAI,GAAG,CAAC,aAAa,CAAC,CAAC,IAAI,KAAK,aAAa,CAAC,MAAM,EAAE,CAAC;QACzD,UAAU,CAAC,wEAAwE,CAAC,CAAC;IACvF,CAAC;IACD,MAAM,OAAO,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC,EAAE,KAAK,EAAE,YAAY,EAAE,EAAE,EAAE,CAAC,GAAG,YAAY,IAAI,KAAK,EAAE,CAAC,CAAC;IACtF,IAAI,IAAI,GAAG,CAAC,OAAO,CAAC,CAAC,IAAI,KAAK,OAAO,CAAC,MAAM,EAAE,CAAC;QAC7C,UAAU,CAAC,8DAA8D,CAAC,CAAC;IAC7E,CAAC;IACD,OAAO,MAAM,CAAC,MAAM,CAAC;QACnB,UAAU;QACV,MAAM;QACN,GAAG,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC;KAC5C,CAAC,CAAC;AACL,CAAC;AAED,SAAS,aAAa,CAAC,KAAc,EAAE,KAAa,EAAE,KAAa;IACjE,IAAI,KAAK,GAAG,EAAE,EAAE,CAAC;QACf,UAAU,CAAC,GAAG,KAAK,oDAAoD,CAAC,CAAC;IAC3E,CAAC;IACD,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;IACnC,MAAM,GAAG,GAAG,iBAAiB,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,GAAG,KAAK,OAAO,CAAC,CAAC;IAC9D,MAAM,eAAe,GAAG,KAAK,CAAC,gBAAgB,CAAC,CAAC;IAChD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,eAAe,CAAC,EAAE,CAAC;QACpC,UAAU,CAAC,GAAG,KAAK,mCAAmC,CAAC,CAAC;IAC1D,CAAC;IACD,OAAO,MAAM,CAAC,MAAM,CAAC;QACnB,IAAI,EAAE,GAAG;QACT,cAAc,EAAE,MAAM,CAAC,MAAM,CAC3B,eAAe,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE,CACnC,aAAa,CAAC,KAAK,EAAE,GAAG,KAAK,mBAAmB,KAAK,GAAG,EAAE,KAAK,GAAG,CAAC,CAAC,CACrE,CACF;KACF,CAAC,CAAC;AACL,CAAC;AAED,SAAS,cAAc,CAAC,KAAc;IACpC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QAC1B,UAAU,CAAC,+BAA+B,CAAC,CAAC;IAC9C,CAAC;IACD,MAAM,OAAO,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE,CAAC,aAAa,CAAC,KAAK,EAAE,eAAe,KAAK,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC;IAC9F,MAAM,SAAS,GAAG,0BAA0B,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC;IAC9E,IAAI,IAAI,GAAG,CAAC,SAAS,CAAC,CAAC,IAAI,KAAK,SAAS,CAAC,MAAM,EAAE,CAAC;QACjD,UAAU,CAAC,iEAAiE,CAAC,CAAC;IAChF,CAAC;IACD,OAAO,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;AAChC,CAAC;AAED,SAAS,yBAAyB,CAAC,KAAc;IAC/C,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QAC1B,UAAU,CAAC,0CAA0C,CAAC,CAAC;IACzD,CAAC;IACD,MAAM,MAAM,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE;QACxC,MAAM,KAAK,GAAG,0BAA0B,KAAK,GAAG,CAAC;QACjD,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;QACnC,IAAI,CAAC,sBAAsB,CAAC,KAAK,CAAC,EAAE,CAAC;YACnC,UAAU,CAAC,GAAG,KAAK,+CAA+C,CAAC,CAAC;QACtE,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC,CAAC,CAAC;IACH,IAAI,IAAI,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,KAAK,MAAM,CAAC,MAAM,EAAE,CAAC;QAC3C,UAAU,CAAC,gDAAgD,CAAC,CAAC;IAC/D,CAAC;IACD,OAAO,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;AAC/B,CAAC;AAED,SAAS,mBAAmB,CAAC,KAAc;IACzC,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,EAAE,kBAAkB,CAAC,CAAC;IAChD,MAAM,OAAO,GAAG,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,EAAE,0BAA0B,CAAC,CAAC;IACrE,MAAM,OAAO,GAAG,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,EAAE,0BAA0B,CAAC,CAAC;IACrE,IAAI,OAAO,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC,IAAI,OAAO,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC,IAAI,OAAO,KAAK,OAAO,EAAE,CAAC;QACtF,UAAU,CAAC,8EAA8E,CAAC,CAAC;IAC7F,CAAC;IACD,MAAM,cAAc,GAAG,MAAM,CAC3B,KAAK,CAAC,gBAAgB,CAAC,EACvB,iCAAiC,CAClC,CAAC;IACF,IAAI,cAAc,KAAK,KAAK,IAAI,cAAc,KAAK,UAAU,EAAE,CAAC;QAC9D,UAAU,CAAC,0DAA0D,CAAC,CAAC;IACzE,CAAC;IACD,OAAO,MAAM,CAAC,MAAM,CAAC;QACnB,OAAO;QACP,cAAc;QACd,OAAO;QACP,KAAK,EAAE,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,wBAAwB,CAAC;QACvD,YAAY,EAAE,IAAI,CAAC,KAAK,CAAC,cAAc,CAAC,EAAE,+BAA+B,CAAC;KAC3E,CAAC,CAAC;AACL,CAAC;AAED,SAAS,gBAAgB,CAAC,KAAc,EAAE,KAAa;IACrD,MAAM,KAAK,GAAG,kBAAkB,KAAK,GAAG,CAAC;IACzC,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;IACnC,MAAM,eAAe,GAAG,MAAM,CAAC,KAAK,CAAC,aAAa,CAAC,EAAE,GAAG,KAAK,cAAc,CAAC,CAAC;IAC7E,MAAM,WAAW,GAAuC,EAAE,CAAC;IAC3D,KAAK,MAAM,CAAC,IAAI,EAAE,UAAU,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,eAAe,CAAC,EAAE,CAAC;QACjE,IAAI,UAAU,KAAK,MAAM,IAAI,UAAU,KAAK,MAAM,IAAI,UAAU,KAAK,OAAO,EAAE,CAAC;YAC7E,UAAU,CAAC,GAAG,KAAK,gBAAgB,IAAI,cAAc,CAAC,CAAC;QACzD,CAAC;QACD,WAAW,CAAC,IAAI,CAAC,GAAG,UAAU,CAAC;IACjC,CAAC;IACD,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;QAClD,UAAU,CAAC,GAAG,KAAK,6CAA6C,CAAC,CAAC;IACpE,CAAC;IACD,OAAO,MAAM,CAAC,MAAM,CAAC;QACnB,YAAY,EAAE,IAAI,CAAC,KAAK,CAAC,cAAc,CAAC,EAAE,GAAG,KAAK,eAAe,CAAC;QAClE,KAAK,EAAE,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,GAAG,KAAK,QAAQ,CAAC;QAC/C,WAAW,EAAE,MAAM,CAAC,MAAM,CAAC,WAAW,CAAC;KACxC,CAAC,CAAC;AACL,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,oBAAoB,CACxC,YAAoB,EACpB,UAAkB,EAClB,MAAoB;IAEpB,MAAM,KAAK,GAAG,MAAM,kBAAkB,CACpC,YAAY,EACZ,UAAU,EACV,4BAA4B,EAC5B,MAAM,CACP,CAAC;IACF,MAAM,YAAY,CAAC,iCAAiC,EAAE,KAAK,EAAE,4BAA4B,CAAC,CAAC;IAC3F,MAAM,IAAI,GAAG,MAAM,CAAC,KAAK,EAAE,4BAA4B,CAAC,CAAC;IACzD,MAAM,iBAAiB,GAAG,IAAI,CAAC,IAAI,CAAC,mBAAmB,CAAC,EAAE,mBAAmB,CAAC,CAAC;IAC/E,MAAM,gBAAgB,GAAG,mBAAmB,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC,CAAC;IACvE,MAAM,YAAY,GAAG,IAAI,CAAC,IAAI,CAAC,cAAc,CAAC,EAAE,cAAc,CAAC,CAAC;IAChE,KAAK,MAAM,gBAAgB,IAAI,CAAC,gBAAgB,CAAC,YAAY,EAAE,YAAY,CAAC,EAAE,CAAC;QAC7E,IAAI,CAAC,gBAAgB,CAAC,UAAU,CAAC,GAAG,iBAAiB,GAAG,CAAC,EAAE,CAAC;YAC1D,UAAU,CAAC,GAAG,gBAAgB,oCAAoC,CAAC,CAAC;QACtE,CAAC;IACH,CAAC;IACD,MAAM,eAAe,GAAG,IAAI,CAAC,gBAAgB,CAAC,CAAC;IAC/C,MAAM,cAAc,GAAG,IAAI,CAAC,6BAA6B,CAAC,CAAC;IAC3D,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,eAAe,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,cAAc,CAAC,EAAE,CAAC;QACtE,UAAU,CAAC,gEAAgE,CAAC,CAAC;IAC/E,CAAC;IACD,MAAM,cAAc,GAAG,eAAe,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC;IAC7D,MAAM,cAAc,GAAG,cAAc,CAAC,GAAG,CAAC,CAAC,EAAE,YAAY,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC,GAAG,YAAY,IAAI,KAAK,EAAE,CAAC,CAAC;IACnG,IAAI,IAAI,GAAG,CAAC,cAAc,CAAC,CAAC,IAAI,KAAK,cAAc,CAAC,MAAM,EAAE,CAAC;QAC3D,UAAU,CAAC,sDAAsD,CAAC,CAAC;IACrE,CAAC;IACD,KAAK,MAAM,UAAU,IAAI,cAAc,EAAE,CAAC;QACxC,IAAI,CAAC,UAAU,CAAC,YAAY,CAAC,UAAU,CAAC,GAAG,iBAAiB,GAAG,CAAC,EAAE,CAAC;YACjE,UAAU,CAAC,sCAAsC,iBAAiB,KAAK,UAAU,CAAC,YAAY,GAAG,CAAC,CAAC;QACrG,CAAC;IACH,CAAC;IACD,MAAM,WAAW,GAAG,cAAc,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC;IACxD,MAAM,sBAAsB,GAAG,yBAAyB,CAAC,IAAI,CAAC,wBAAwB,CAAC,CAAC,CAAC;IACzF,MAAM,YAAY,GAChB,IAAI,CAAC,cAAc,CAAC,KAAK,SAAS;QAChC,CAAC,CAAC,SAAS;QACX,CAAC,CAAC,uBAAuB,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,CAAC;IACpD,KAAK,MAAM,IAAI,IAAI,iCAAiC,CAAC,YAAY,CAAC,EAAE,CAAC;QACnE,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC,UAAU,CAAC,GAAG,iBAAiB,GAAG,CAAC,EAAE,CAAC;YAClE,UAAU,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC,YAAY,oCAAoC,CAAC,CAAC;QAC9E,CAAC;IACH,CAAC;IACD,OAAO,MAAM,CAAC,MAAM,CAAC;QACnB,sBAAsB;QACtB,WAAW;QACX,iBAAiB;QACjB,gBAAgB;QAChB,YAAY;QACZ,cAAc,EAAE,MAAM,CAAC,MAAM,CAAC,cAAc,CAAC;QAC7C,2BAA2B,EAAE,MAAM,CAAC,MAAM,CACxC,cAAc,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,KAAK,EAAE,+BAA+B,KAAK,GAAG,CAAC,CAAC,CAC3F;QACD,GAAG,CAAC,YAAY,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,CAAC;KACxD,CAAC,CAAC;AACL,CAAC"}

package/dist/capabilities/repository-security-baseline/module.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"module.d.ts","sourceRoot":"","sources":["../../../src/capabilities/repository-security-baseline/module.ts"],"names":[],"mappings":"AAAA,OAAO,EAGL,KAAK,oBAAoB,EAE1B,MAAM,6BAA6B,CAAC;AAErC,OAAO,EAAE,+BAA+B,EAAE,MAAM,wBAAwB,CAAC;AAQzE,OAAO,EAAE,+BAA+B,EAAE,CAAC;AAE3C,wBAAgB,0CAA0C,IAAI,oBAAoB,CA+CjF"}
+{"version":3,"file":"module.d.ts","sourceRoot":"","sources":["../../../src/capabilities/repository-security-baseline/module.ts"],"names":[],"mappings":"AAAA,OAAO,EAGL,KAAK,oBAAoB,EAE1B,MAAM,6BAA6B,CAAC;AAErC,OAAO,EAAE,+BAA+B,EAAE,MAAM,wBAAwB,CAAC;AAQzE,OAAO,EAAE,+BAA+B,EAAE,CAAC;AAE3C,wBAAgB,0CAA0C,IAAI,oBAAoB,CAiDjF"}

package/dist/capabilities/repository-security-baseline/module.js

@@ -12,14 +12,16 @@ export function createRepositorySecurityBaselineCapability() {
         async run(invocation) {
             try {
                 const policy = await loadCapabilityConfig(invocation.consumerRoot, invocation.configPath, invocation.signal);
+                const diagnostics = await analyzeRepositorySecurity({
+                    consumerRoot: invocation.consumerRoot,
+                    policy,
+                    ...(invocation.signal === undefined ? {} : { signal: invocation.signal })
+                }, reader);
                 return capabilityReport({
                     capabilityId: CAPABILITY_ID,
                     capabilityConfigSchemaVersion: CAPABILITY_CONFIG_SCHEMA_VERSION,
-                    diagnostics: await analyzeRepositorySecurity({
-                        consumerRoot: invocation.consumerRoot,
-                        policy,
-                        ...(invocation.signal === undefined ? {} : { signal: invocation.signal })
-                    }, reader)
+                    diagnostics,
+                    outcome: diagnostics.some(({ severity }) => severity === "error") ? "violations" : "passed"
                 });
             }
             catch (error) {

package/dist/capabilities/repository-security-baseline/module.js.map

@@ -1 +1 @@
-{"version":3,"file":"module.js","sourceRoot":"","sources":["../../../src/capabilities/repository-security-baseline/module.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,oBAAoB,EACpB,gBAAgB,EAGjB,MAAM,6BAA6B,CAAC;AACrC,OAAO,EAAE,kCAAkC,EAAE,MAAM,yEAAyE,CAAC;AAC7H,OAAO,EAAE,+BAA+B,EAAE,MAAM,wBAAwB,CAAC;AACzE,OAAO,EAAE,yBAAyB,EAAE,MAAM,wDAAwD,CAAC;AACnG,OAAO,EACL,gCAAgC,EAChC,aAAa,EACb,oBAAoB,EACrB,MAAM,sBAAsB,CAAC;AAE9B,OAAO,EAAE,+BAA+B,EAAE,CAAC;AAE3C,MAAM,UAAU,0CAA0C;IACxD,MAAM,MAAM,GAAG,IAAI,kCAAkC,EAAE,CAAC;IACxD,OAAO,MAAM,CAAC,MAAM,CAAC;QACnB,EAAE,EAAE,aAAa;QACjB,mBAAmB,EAAE,gCAAgC;QACrD,KAAK,CAAC,GAAG,CAAC,UAAgC;YACxC,IAAI,CAAC;gBACH,MAAM,MAAM,GAAG,MAAM,oBAAoB,CACvC,UAAU,CAAC,YAAY,EACvB,UAAU,CAAC,UAAU,EACrB,UAAU,CAAC,MAAM,CAClB,CAAC;gBACF,OAAO,gBAAgB,CAAC;oBACtB,YAAY,EAAE,aAAa;oBAC3B,6BAA6B,EAAE,gCAAgC;oBAC/D,WAAW,EAAE,MAAM,yBAAyB,CAC1C;wBACE,YAAY,EAAE,UAAU,CAAC,YAAY;wBACrC,MAAM;wBACN,GAAG,CAAC,UAAU,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,UAAU,CAAC,MAAM,EAAE,CAAC;qBAC1E,EACD,MAAM,CACP;iBACF,CAAC,CAAC;YACL,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,IAAI,KAAK,YAAY,oBAAoB,EAAE,CAAC;oBAC1C,OAAO,gBAAgB,CAAC;wBACtB,YAAY,EAAE,aAAa;wBAC3B,6BAA6B,EAAE,gCAAgC;wBAC/D,OAAO,EAAE,KAAK,CAAC,OAAO,CAAC,IAAI,KAAK,qBAAqB,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,eAAe;wBACrF,OAAO,EAAE,KAAK,CAAC,OAAO;qBACvB,CAAC,CAAC;gBACL,CAAC;gBACD,OAAO,gBAAgB,CAAC;oBACtB,YAAY,EAAE,aAAa;oBAC3B,6BAA6B,EAAE,gCAAgC;oBAC/D,OAAO,EAAE,QAAQ;oBACjB,OAAO,EAAE;wBACP,IAAI,EAAE,6BAA6B;wBACnC,OAAO,EAAE,2DAA2D;wBACpE,KAAK,EAAE,+BAA+B;wBACtC,SAAS,EAAE,KAAK;qBACjB;iBACF,CAAC,CAAC;YACL,CAAC;QACH,CAAC;KACF,CAAC,CAAC;AACL,CAAC"}
+{"version":3,"file":"module.js","sourceRoot":"","sources":["../../../src/capabilities/repository-security-baseline/module.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,oBAAoB,EACpB,gBAAgB,EAGjB,MAAM,6BAA6B,CAAC;AACrC,OAAO,EAAE,kCAAkC,EAAE,MAAM,yEAAyE,CAAC;AAC7H,OAAO,EAAE,+BAA+B,EAAE,MAAM,wBAAwB,CAAC;AACzE,OAAO,EAAE,yBAAyB,EAAE,MAAM,wDAAwD,CAAC;AACnG,OAAO,EACL,gCAAgC,EAChC,aAAa,EACb,oBAAoB,EACrB,MAAM,sBAAsB,CAAC;AAE9B,OAAO,EAAE,+BAA+B,EAAE,CAAC;AAE3C,MAAM,UAAU,0CAA0C;IACxD,MAAM,MAAM,GAAG,IAAI,kCAAkC,EAAE,CAAC;IACxD,OAAO,MAAM,CAAC,MAAM,CAAC;QACnB,EAAE,EAAE,aAAa;QACjB,mBAAmB,EAAE,gCAAgC;QACrD,KAAK,CAAC,GAAG,CAAC,UAAgC;YACxC,IAAI,CAAC;gBACH,MAAM,MAAM,GAAG,MAAM,oBAAoB,CACvC,UAAU,CAAC,YAAY,EACvB,UAAU,CAAC,UAAU,EACrB,UAAU,CAAC,MAAM,CAClB,CAAC;gBACF,MAAM,WAAW,GAAG,MAAM,yBAAyB,CACjD;oBACE,YAAY,EAAE,UAAU,CAAC,YAAY;oBACrC,MAAM;oBACN,GAAG,CAAC,UAAU,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,UAAU,CAAC,MAAM,EAAE,CAAC;iBAC1E,EACD,MAAM,CACP,CAAC;gBACF,OAAO,gBAAgB,CAAC;oBACtB,YAAY,EAAE,aAAa;oBAC3B,6BAA6B,EAAE,gCAAgC;oBAC/D,WAAW;oBACX,OAAO,EAAE,WAAW,CAAC,IAAI,CAAC,CAAC,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,QAAQ;iBAC5F,CAAC,CAAC;YACL,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,IAAI,KAAK,YAAY,oBAAoB,EAAE,CAAC;oBAC1C,OAAO,gBAAgB,CAAC;wBACtB,YAAY,EAAE,aAAa;wBAC3B,6BAA6B,EAAE,gCAAgC;wBAC/D,OAAO,EAAE,KAAK,CAAC,OAAO,CAAC,IAAI,KAAK,qBAAqB,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,eAAe;wBACrF,OAAO,EAAE,KAAK,CAAC,OAAO;qBACvB,CAAC,CAAC;gBACL,CAAC;gBACD,OAAO,gBAAgB,CAAC;oBACtB,YAAY,EAAE,aAAa;oBAC3B,6BAA6B,EAAE,gCAAgC;oBAC/D,OAAO,EAAE,QAAQ;oBACjB,OAAO,EAAE;wBACP,IAAI,EAAE,6BAA6B;wBACnC,OAAO,EAAE,2DAA2D;wBACpE,KAAK,EAAE,+BAA+B;wBACtC,SAAS,EAAE,KAAK;qBACjB;iBACF,CAAC,CAAC;YACL,CAAC;QACH,CAAC;KACF,CAAC,CAAC;AACL,CAAC"}

package/dist/capabilities/source-dependencies/adapters/outbound/node/node-source-dependency-resolver.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"node-source-dependency-resolver.d.ts","sourceRoot":"","sources":["../../../../../../src/capabilities/source-dependencies/adapters/outbound/node/node-source-dependency-resolver.ts"],"names":[],"mappings":"AAQA,OAAO,KAAK,EACV,wBAAwB,EACzB,MAAM,gDAAgD,CAAC;AACxD,OAAO,KAAK,EACV,4BAA4B,EAC5B,wBAAwB,EACzB,MAAM,0DAA0D,CAAC;AAmLlE,qBAAa,4BAA6B,YAAW,wBAAwB;IAC3E,OAAO,CAAC,KAAK,EAAE,4BAA4B,GAAG,wBAAwB,CAIrE;CACF"}
+{"version":3,"file":"node-source-dependency-resolver.d.ts","sourceRoot":"","sources":["../../../../../../src/capabilities/source-dependencies/adapters/outbound/node/node-source-dependency-resolver.ts"],"names":[],"mappings":"AASA,OAAO,KAAK,EACV,wBAAwB,EACzB,MAAM,gDAAgD,CAAC;AAKxD,OAAO,KAAK,EACV,4BAA4B,EAC5B,wBAAwB,EACzB,MAAM,0DAA0D,CAAC;AA6LlE,qBAAa,4BAA6B,YAAW,wBAAwB;IAC3E,OAAO,CAAC,KAAK,EAAE,4BAA4B,GAAG,wBAAwB,CAIrE;CACF"}

package/dist/capabilities/source-dependencies/adapters/outbound/node/node-source-dependency-resolver.js

@@ -1,5 +1,7 @@
 import { builtinModules } from "node:module";
 import { posix } from "node:path";
+import { compareBinaryStrings } from "../../../../../binary-string-comparator.js";
+import { normalizeRepositoryPath, pathIsInside } from "../../../application/model/repository-path.js";
 const BUILTINS = new Set(builtinModules.flatMap((name) => [
     name,
     name.startsWith("node:") ? name.slice(5) : `node:${name}`
@@ -36,7 +38,7 @@ function declarationKind(declarations, packageName) {
         : "undeclared";
 }
 function candidateLocalPaths(importerPath, specifier) {
-    const base = posix.normalize(posix.join(posix.dirname(importerPath), specifier));
+    const base = posix.normalize(posix.join(posix.dirname(normalizeRepositoryPath(importerPath)), specifier));
     const extension = posix.extname(base);
     const candidates = new Set([base]);
     if (extension === ".js") {
@@ -58,13 +60,13 @@ function candidateLocalPaths(importerPath, specifier) {
     return [...candidates];
 }
 function pathInside(path, root) {
-    return root === "." || path === root || path.startsWith(`${root}/`);
+    return pathIsInside(path, root);
 }
 function containingPackage(path, packages) {
     return packages
         .filter((workspacePackage) => pathInside(path, workspacePackage.rootPath))
         .toSorted((left, right) => right.rootPath.length - left.rootPath.length ||
-        left.name.localeCompare(right.name))[0];
+        compareBinaryStrings(left.name, right.name))[0];
 }
 function matchesExport(entry, subpath) {
     if (!entry.subpath.includes("*")) {
@@ -97,14 +99,14 @@ function resolveLocal(input) {
             reason: "relative specifiers with query strings or fragments are unsupported"
         };
     }
-    const matching = candidateLocalPaths(input.file.path, input.reference.specifier).filter((path) => input.governedFilePaths.has(path));
+    const matching = candidateLocalPaths(input.file.path, input.reference.specifier).filter((path) => input.governedFilePaths.has(normalizeRepositoryPath(path)));
     if (matching.length !== 1) {
         return {
             kind: "unresolved",
             reason: `local reference resolved to ${matching.length} governed files`
         };
     }
-    const path = matching[0];
+    const path = matching[0] === undefined ? undefined : normalizeRepositoryPath(matching[0]);
     const workspacePackage = path === undefined
         ? undefined
         : containingPackage(path, input.inventory.packages);
@@ -133,6 +135,14 @@ function resolvePackage(input) {
         return { kind: "external-package", packageName, declaration };
     }
     const subpath = specifier === packageName ? "." : `.${specifier.slice(packageName.length)}`;
+    if (target.name === input.file.workspacePackage.name) {
+        return {
+            kind: "self-workspace-package",
+            workspacePackage: target,
+            exported: subpathExported(target, subpath),
+            subpath
+        };
+    }
     return {
         kind: "workspace-package",
         workspacePackage: target,

package/dist/capabilities/source-dependencies/adapters/outbound/node/node-source-dependency-resolver.js.map

@@ -1 +1 @@
-{"version":3,"file":"node-source-dependency-resolver.js","sourceRoot":"","sources":["../../../../../../src/capabilities/source-dependencies/adapters/outbound/node/node-source-dependency-resolver.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAC7C,OAAO,EAAE,KAAK,EAAE,MAAM,WAAW,CAAC;AAelC,MAAM,QAAQ,GAAG,IAAI,GAAG,CACtB,cAAc,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC;IAC/B,IAAI;IACJ,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,IAAI,EAAE;CAC1D,CAAC,CACH,CAAC;AACF,MAAM,iBAAiB,GAAG;IACxB,MAAM;IACN,MAAM;IACN,KAAK;IACL,MAAM;IACN,MAAM;IACN,MAAM;IACN,KAAK;IACL,MAAM;CACE,CAAC;AAEX,SAAS,wBAAwB,CAAC,SAAiB;IACjD,IAAI,SAAS,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;QAC9B,MAAM,QAAQ,GAAG,SAAS,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QACtC,OAAO,QAAQ,CAAC,MAAM,IAAI,CAAC,IAAI,QAAQ,CAAC,CAAC,CAAC,KAAK,EAAE,IAAI,QAAQ,CAAC,CAAC,CAAC,KAAK,EAAE;YACrE,CAAC,CAAC,GAAG,QAAQ,CAAC,CAAC,CAAC,IAAI,QAAQ,CAAC,CAAC,CAAC,EAAE;YACjC,CAAC,CAAC,SAAS,CAAC;IAChB,CAAC;IACD,MAAM,CAAC,IAAI,CAAC,GAAG,SAAS,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IACpC,OAAO,IAAI,KAAK,SAAS,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC;AACpE,CAAC;AAED,SAAS,eAAe,CACtB,YAA8C,EAC9C,WAAmB;IAEnB,MAAM,QAAQ,GAAG,YAAY,CAAC,MAAM,CAClC,CAAC,WAAW,EAAE,EAAE,CAAC,WAAW,CAAC,cAAc,KAAK,WAAW,CAC5D,CAAC;IACF,IACE,QAAQ,CAAC,IAAI,CACX,CAAC,WAAW,EAAE,EAAE,CACd,WAAW,CAAC,OAAO,KAAK,cAAc;QACtC,WAAW,CAAC,OAAO,KAAK,sBAAsB;QAC9C,WAAW,CAAC,OAAO,KAAK,kBAAkB,CAC7C,EACD,CAAC;QACD,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,OAAO,QAAQ,CAAC,IAAI,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC,WAAW,CAAC,OAAO,KAAK,iBAAiB,CAAC;QAC9E,CAAC,CAAC,aAAa;QACf,CAAC,CAAC,YAAY,CAAC;AACnB,CAAC;AAED,SAAS,mBAAmB,CAAC,YAAoB,EAAE,SAAiB;IAClE,MAAM,IAAI,GAAG,KAAK,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,YAAY,CAAC,EAAE,SAAS,CAAC,CAAC,CAAC;IACjF,MAAM,SAAS,GAAG,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;IACtC,MAAM,UAAU,GAAG,IAAI,GAAG,CAAS,CAAC,IAAI,CAAC,CAAC,CAAC;IAC3C,IAAI,SAAS,KAAK,KAAK,EAAE,CAAC;QACxB,UAAU,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;QAC1C,UAAU,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;IAC7C,CAAC;SAAM,IAAI,SAAS,KAAK,MAAM,EAAE,CAAC;QAChC,UAAU,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;IAC7C,CAAC;SAAM,IAAI,SAAS,KAAK,MAAM,EAAE,CAAC;QAChC,UAAU,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;IAC7C,CAAC;SAAM,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAClC,KAAK,MAAM,eAAe,IAAI,iBAAiB,EAAE,CAAC;YAChD,UAAU,CAAC,GAAG,CAAC,GAAG,IAAI,GAAG,eAAe,EAAE,CAAC,CAAC;YAC5C,UAAU,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,EAAE,QAAQ,eAAe,EAAE,CAAC,CAAC,CAAC;QAC9D,CAAC;IACH,CAAC;IACD,OAAO,CAAC,GAAG,UAAU,CAAC,CAAC;AACzB,CAAC;AAED,SAAS,UAAU,CAAC,IAAY,EAAE,IAAY;IAC5C,OAAO,IAAI,KAAK,GAAG,IAAI,IAAI,KAAK,IAAI,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,IAAI,GAAG,CAAC,CAAC;AACtE,CAAC;AAED,SAAS,iBAAiB,CACxB,IAAY,EACZ,QAAqC;IAErC,OAAO,QAAQ;SACZ,MAAM,CAAC,CAAC,gBAAgB,EAAE,EAAE,CAAC,UAAU,CAAC,IAAI,EAAE,gBAAgB,CAAC,QAAQ,CAAC,CAAC;SACzE,QAAQ,CACP,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CACd,KAAK,CAAC,QAAQ,CAAC,MAAM,GAAG,IAAI,CAAC,QAAQ,CAAC,MAAM;QAC5C,IAAI,CAAC,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,IAAI,CAAC,CACtC,CAAC,CAAC,CAAC,CAAC;AACT,CAAC;AAED,SAAS,aAAa,CAAC,KAAyB,EAAE,OAAe;IAC/D,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;QACjC,OAAO,KAAK,CAAC,OAAO,KAAK,OAAO,CAAC;IACnC,CAAC;IACD,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAClD,OAAO,CACL,MAAM,KAAK,SAAS;QACpB,MAAM,KAAK,SAAS;QACpB,OAAO,CAAC,UAAU,CAAC,MAAM,CAAC;QAC1B,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC;QACxB,OAAO,CAAC,MAAM,IAAI,MAAM,CAAC,MAAM,GAAG,MAAM,CAAC,MAAM,CAChD,CAAC;AACJ,CAAC;AAED,SAAS,eAAe,CAAC,MAAwB,EAAE,OAAe;IAChE,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,QAAQ,EAAE,CAAC;QACnC,OAAO,KAAK,CAAC;IACf,CAAC;IACD,MAAM,QAAQ,GAAG,MAAM,CAAC,aAAa,CAAC,OAAO;SAC1C,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,aAAa,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;SAChD,QAAQ,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE;QACxB,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QACrD,MAAM,UAAU,GAAG,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QACvD,OAAO,UAAU,GAAG,SAAS,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC;IAC9E,CAAC,CAAC,CAAC;IACL,OAAO,QAAQ,CAAC,CAAC,CAAC,EAAE,YAAY,KAAK,WAAW,CAAC;AACnD,CAAC;AAED,SAAS,YAAY,CAAC,KAAmC;IACvD,IAAI,KAAK,CAAC,SAAS,CAAC,SAAS,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,KAAK,CAAC,SAAS,CAAC,SAAS,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;QACvF,OAAO;YACL,IAAI,EAAE,aAAa;YACnB,MAAM,EAAE,qEAAqE;SAC9E,CAAC;IACJ,CAAC;IACD,MAAM,QAAQ,GAAG,mBAAmB,CAClC,KAAK,CAAC,IAAI,CAAC,IAAI,EACf,KAAK,CAAC,SAAS,CAAC,SAAS,CAC1B,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,KAAK,CAAC,iBAAiB,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC;IACtD,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC1B,OAAO;YACL,IAAI,EAAE,YAAY;YAClB,MAAM,EAAE,+BAA+B,QAAQ,CAAC,MAAM,iBAAiB;SACxE,CAAC;IACJ,CAAC;IACD,MAAM,IAAI,GAAG,QAAQ,CAAC,CAAC,CAAC,CAAC;IACzB,MAAM,gBAAgB,GACpB,IAAI,KAAK,SAAS;QAChB,CAAC,CAAC,SAAS;QACX,CAAC,CAAC,iBAAiB,CAAC,IAAI,EAAE,KAAK,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC;IACxD,OAAO,IAAI,KAAK,SAAS,IAAI,gBAAgB,KAAK,SAAS;QACzD,CAAC,CAAC,EAAE,IAAI,EAAE,YAAY,EAAE,MAAM,EAAE,uCAAuC,EAAE;QACzE,CAAC,CAAC,EAAE,IAAI,EAAE,YAAY,EAAE,IAAI,EAAE,gBAAgB,EAAE,CAAC;AACrD,CAAC;AAED,SAAS,cAAc,CAAC,KAAmC;IACzD,MAAM,SAAS,GAAG,KAAK,CAAC,SAAS,CAAC,SAAS,CAAC;IAC5C,IAAI,QAAQ,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,CAAC;QAC5B,OAAO;YACL,IAAI,EAAE,SAAS;YACf,SAAS,EAAE,SAAS,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,QAAQ,SAAS,EAAE;SAC3E,CAAC;IACJ,CAAC;IACD,IAAI,SAAS,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,SAAS,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,SAAS,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;QACtF,OAAO,EAAE,IAAI,EAAE,aAAa,EAAE,MAAM,EAAE,sCAAsC,EAAE,CAAC;IACjF,CAAC;IACD,MAAM,WAAW,GAAG,wBAAwB,CAAC,SAAS,CAAC,CAAC;IACxD,IAAI,WAAW,KAAK,SAAS,EAAE,CAAC;QAC9B,OAAO,EAAE,IAAI,EAAE,aAAa,EAAE,MAAM,EAAE,2BAA2B,EAAE,CAAC;IACtE,CAAC;IACD,MAAM,MAAM,GAAG,KAAK,CAAC,SAAS,CAAC,QAAQ,CAAC,IAAI,CAC1C,CAAC,gBAAgB,EAAE,EAAE,CAAC,gBAAgB,CAAC,IAAI,KAAK,WAAW,CAC5D,CAAC;IACF,MAAM,WAAW,GAAG,eAAe,CACjC,KAAK,CAAC,IAAI,CAAC,gBAAgB,CAAC,YAAY,EACxC,WAAW,CACZ,CAAC;IACF,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;QACzB,OAAO,EAAE,IAAI,EAAE,kBAAkB,EAAE,WAAW,EAAE,WAAW,EAAE,CAAC;IAChE,CAAC;IACD,MAAM,OAAO,GAAG,SAAS,KAAK,WAAW,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,SAAS,CAAC,KAAK,CAAC,WAAW,CAAC,MAAM,CAAC,EAAE,CAAC;IAC5F,OAAO;QACL,IAAI,EAAE,mBAAmB;QACzB,gBAAgB,EAAE,MAAM;QACxB,WAAW;QACX,QAAQ,EAAE,eAAe,CAAC,MAAM,EAAE,OAAO,CAAC;QAC1C,OAAO;KACR,CAAC;AACJ,CAAC;AAED,MAAM,OAAO,4BAA4B;IACvC,OAAO,CAAC,KAAmC;QACzC,OAAO,KAAK,CAAC,SAAS,CAAC,SAAS,CAAC,UAAU,CAAC,GAAG,CAAC;YAC9C,CAAC,CAAC,YAAY,CAAC,KAAK,CAAC;YACrB,CAAC,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC;IAC5B,CAAC;CACF"}
+{"version":3,"file":"node-source-dependency-resolver.js","sourceRoot":"","sources":["../../../../../../src/capabilities/source-dependencies/adapters/outbound/node/node-source-dependency-resolver.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAC7C,OAAO,EAAE,KAAK,EAAE,MAAM,WAAW,CAAC;AAElC,OAAO,EAAE,oBAAoB,EAAE,MAAM,4CAA4C,CAAC;AASlF,OAAO,EACL,uBAAuB,EACvB,YAAY,EACb,MAAM,+CAA+C,CAAC;AAMvD,MAAM,QAAQ,GAAG,IAAI,GAAG,CACtB,cAAc,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC;IAC/B,IAAI;IACJ,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,IAAI,EAAE;CAC1D,CAAC,CACH,CAAC;AACF,MAAM,iBAAiB,GAAG;IACxB,MAAM;IACN,MAAM;IACN,KAAK;IACL,MAAM;IACN,MAAM;IACN,MAAM;IACN,KAAK;IACL,MAAM;CACE,CAAC;AAEX,SAAS,wBAAwB,CAAC,SAAiB;IACjD,IAAI,SAAS,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;QAC9B,MAAM,QAAQ,GAAG,SAAS,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QACtC,OAAO,QAAQ,CAAC,MAAM,IAAI,CAAC,IAAI,QAAQ,CAAC,CAAC,CAAC,KAAK,EAAE,IAAI,QAAQ,CAAC,CAAC,CAAC,KAAK,EAAE;YACrE,CAAC,CAAC,GAAG,QAAQ,CAAC,CAAC,CAAC,IAAI,QAAQ,CAAC,CAAC,CAAC,EAAE;YACjC,CAAC,CAAC,SAAS,CAAC;IAChB,CAAC;IACD,MAAM,CAAC,IAAI,CAAC,GAAG,SAAS,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IACpC,OAAO,IAAI,KAAK,SAAS,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC;AACpE,CAAC;AAED,SAAS,eAAe,CACtB,YAA8C,EAC9C,WAAmB;IAEnB,MAAM,QAAQ,GAAG,YAAY,CAAC,MAAM,CAClC,CAAC,WAAW,EAAE,EAAE,CAAC,WAAW,CAAC,cAAc,KAAK,WAAW,CAC5D,CAAC;IACF,IACE,QAAQ,CAAC,IAAI,CACX,CAAC,WAAW,EAAE,EAAE,CACd,WAAW,CAAC,OAAO,KAAK,cAAc;QACtC,WAAW,CAAC,OAAO,KAAK,sBAAsB;QAC9C,WAAW,CAAC,OAAO,KAAK,kBAAkB,CAC7C,EACD,CAAC;QACD,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,OAAO,QAAQ,CAAC,IAAI,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC,WAAW,CAAC,OAAO,KAAK,iBAAiB,CAAC;QAC9E,CAAC,CAAC,aAAa;QACf,CAAC,CAAC,YAAY,CAAC;AACnB,CAAC;AAED,SAAS,mBAAmB,CAAC,YAAoB,EAAE,SAAiB;IAClE,MAAM,IAAI,GAAG,KAAK,CAAC,SAAS,CAC1B,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,uBAAuB,CAAC,YAAY,CAAC,CAAC,EAAE,SAAS,CAAC,CAC5E,CAAC;IACF,MAAM,SAAS,GAAG,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;IACtC,MAAM,UAAU,GAAG,IAAI,GAAG,CAAS,CAAC,IAAI,CAAC,CAAC,CAAC;IAC3C,IAAI,SAAS,KAAK,KAAK,EAAE,CAAC;QACxB,UAAU,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;QAC1C,UAAU,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;IAC7C,CAAC;SAAM,IAAI,SAAS,KAAK,MAAM,EAAE,CAAC;QAChC,UAAU,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;IAC7C,CAAC;SAAM,IAAI,SAAS,KAAK,MAAM,EAAE,CAAC;QAChC,UAAU,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;IAC7C,CAAC;SAAM,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAClC,KAAK,MAAM,eAAe,IAAI,iBAAiB,EAAE,CAAC;YAChD,UAAU,CAAC,GAAG,CAAC,GAAG,IAAI,GAAG,eAAe,EAAE,CAAC,CAAC;YAC5C,UAAU,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,EAAE,QAAQ,eAAe,EAAE,CAAC,CAAC,CAAC;QAC9D,CAAC;IACH,CAAC;IACD,OAAO,CAAC,GAAG,UAAU,CAAC,CAAC;AACzB,CAAC;AAED,SAAS,UAAU,CAAC,IAAY,EAAE,IAAY;IAC5C,OAAO,YAAY,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;AAClC,CAAC;AAED,SAAS,iBAAiB,CACxB,IAAY,EACZ,QAAqC;IAErC,OAAO,QAAQ;SACZ,MAAM,CAAC,CAAC,gBAAgB,EAAE,EAAE,CAAC,UAAU,CAAC,IAAI,EAAE,gBAAgB,CAAC,QAAQ,CAAC,CAAC;SACzE,QAAQ,CACP,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CACd,KAAK,CAAC,QAAQ,CAAC,MAAM,GAAG,IAAI,CAAC,QAAQ,CAAC,MAAM;QAC5C,oBAAoB,CAAC,IAAI,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,CAAC,CAC9C,CAAC,CAAC,CAAC,CAAC;AACT,CAAC;AAED,SAAS,aAAa,CAAC,KAAyB,EAAE,OAAe;IAC/D,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;QACjC,OAAO,KAAK,CAAC,OAAO,KAAK,OAAO,CAAC;IACnC,CAAC;IACD,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAClD,OAAO,CACL,MAAM,KAAK,SAAS;QACpB,MAAM,KAAK,SAAS;QACpB,OAAO,CAAC,UAAU,CAAC,MAAM,CAAC;QAC1B,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC;QACxB,OAAO,CAAC,MAAM,IAAI,MAAM,CAAC,MAAM,GAAG,MAAM,CAAC,MAAM,CAChD,CAAC;AACJ,CAAC;AAED,SAAS,eAAe,CAAC,MAAwB,EAAE,OAAe;IAChE,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,QAAQ,EAAE,CAAC;QACnC,OAAO,KAAK,CAAC;IACf,CAAC;IACD,MAAM,QAAQ,GAAG,MAAM,CAAC,aAAa,CAAC,OAAO;SAC1C,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,aAAa,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;SAChD,QAAQ,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE;QACxB,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QACrD,MAAM,UAAU,GAAG,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QACvD,OAAO,UAAU,GAAG,SAAS,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC;IAC9E,CAAC,CAAC,CAAC;IACL,OAAO,QAAQ,CAAC,CAAC,CAAC,EAAE,YAAY,KAAK,WAAW,CAAC;AACnD,CAAC;AAED,SAAS,YAAY,CAAC,KAAmC;IACvD,IAAI,KAAK,CAAC,SAAS,CAAC,SAAS,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,KAAK,CAAC,SAAS,CAAC,SAAS,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;QACvF,OAAO;YACL,IAAI,EAAE,aAAa;YACnB,MAAM,EAAE,qEAAqE;SAC9E,CAAC;IACJ,CAAC;IACD,MAAM,QAAQ,GAAG,mBAAmB,CAClC,KAAK,CAAC,IAAI,CAAC,IAAI,EACf,KAAK,CAAC,SAAS,CAAC,SAAS,CAC1B,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,KAAK,CAAC,iBAAiB,CAAC,GAAG,CAAC,uBAAuB,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAC/E,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC1B,OAAO;YACL,IAAI,EAAE,YAAY;YAClB,MAAM,EAAE,+BAA+B,QAAQ,CAAC,MAAM,iBAAiB;SACxE,CAAC;IACJ,CAAC;IACD,MAAM,IAAI,GAAG,QAAQ,CAAC,CAAC,CAAC,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,uBAAuB,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC;IAC1F,MAAM,gBAAgB,GACpB,IAAI,KAAK,SAAS;QAChB,CAAC,CAAC,SAAS;QACX,CAAC,CAAC,iBAAiB,CAAC,IAAI,EAAE,KAAK,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC;IACxD,OAAO,IAAI,KAAK,SAAS,IAAI,gBAAgB,KAAK,SAAS;QACzD,CAAC,CAAC,EAAE,IAAI,EAAE,YAAY,EAAE,MAAM,EAAE,uCAAuC,EAAE;QACzE,CAAC,CAAC,EAAE,IAAI,EAAE,YAAY,EAAE,IAAI,EAAE,gBAAgB,EAAE,CAAC;AACrD,CAAC;AAED,SAAS,cAAc,CAAC,KAAmC;IACzD,MAAM,SAAS,GAAG,KAAK,CAAC,SAAS,CAAC,SAAS,CAAC;IAC5C,IAAI,QAAQ,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,CAAC;QAC5B,OAAO;YACL,IAAI,EAAE,SAAS;YACf,SAAS,EAAE,SAAS,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,QAAQ,SAAS,EAAE;SAC3E,CAAC;IACJ,CAAC;IACD,IAAI,SAAS,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,SAAS,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,SAAS,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;QACtF,OAAO,EAAE,IAAI,EAAE,aAAa,EAAE,MAAM,EAAE,sCAAsC,EAAE,CAAC;IACjF,CAAC;IACD,MAAM,WAAW,GAAG,wBAAwB,CAAC,SAAS,CAAC,CAAC;IACxD,IAAI,WAAW,KAAK,SAAS,EAAE,CAAC;QAC9B,OAAO,EAAE,IAAI,EAAE,aAAa,EAAE,MAAM,EAAE,2BAA2B,EAAE,CAAC;IACtE,CAAC;IACD,MAAM,MAAM,GAAG,KAAK,CAAC,SAAS,CAAC,QAAQ,CAAC,IAAI,CAC1C,CAAC,gBAAgB,EAAE,EAAE,CAAC,gBAAgB,CAAC,IAAI,KAAK,WAAW,CAC5D,CAAC;IACF,MAAM,WAAW,GAAG,eAAe,CACjC,KAAK,CAAC,IAAI,CAAC,gBAAgB,CAAC,YAAY,EACxC,WAAW,CACZ,CAAC;IACF,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;QACzB,OAAO,EAAE,IAAI,EAAE,kBAAkB,EAAE,WAAW,EAAE,WAAW,EAAE,CAAC;IAChE,CAAC;IACD,MAAM,OAAO,GAAG,SAAS,KAAK,WAAW,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,SAAS,CAAC,KAAK,CAAC,WAAW,CAAC,MAAM,CAAC,EAAE,CAAC;IAC5F,IAAI,MAAM,CAAC,IAAI,KAAK,KAAK,CAAC,IAAI,CAAC,gBAAgB,CAAC,IAAI,EAAE,CAAC;QACrD,OAAO;YACL,IAAI,EAAE,wBAAwB;YAC9B,gBAAgB,EAAE,MAAM;YACxB,QAAQ,EAAE,eAAe,CAAC,MAAM,EAAE,OAAO,CAAC;YAC1C,OAAO;SACR,CAAC;IACJ,CAAC;IACD,OAAO;QACL,IAAI,EAAE,mBAAmB;QACzB,gBAAgB,EAAE,MAAM;QACxB,WAAW;QACX,QAAQ,EAAE,eAAe,CAAC,MAAM,EAAE,OAAO,CAAC;QAC1C,OAAO;KACR,CAAC;AACJ,CAAC;AAED,MAAM,OAAO,4BAA4B;IACvC,OAAO,CAAC,KAAmC;QACzC,OAAO,KAAK,CAAC,SAAS,CAAC,SAAS,CAAC,UAAU,CAAC,GAAG,CAAC;YAC9C,CAAC,CAAC,YAAY,CAAC,KAAK,CAAC;YACrB,CAAC,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC;IAC5B,CAAC;CACF"}

package/dist/capabilities/source-dependencies/adapters/outbound/oxc/oxc-source-dependency-parser.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"oxc-source-dependency-parser.d.ts","sourceRoot":"","sources":["../../../../../../src/capabilities/source-dependencies/adapters/outbound/oxc/oxc-source-dependency-parser.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,2EAA2E,CAAC;AACpH,OAAO,KAAK,EACV,wBAAwB,EAIzB,MAAM,gDAAgD,CAAC;AACxD,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,wDAAwD,CAAC;AAkBrG,qBAAa,yBAA0B,YAAW,sBAAsB;IACtE,KAAK,CAAC,IAAI,EAAE,kBAAkB,GAAG,wBAAwB,CAoGxD;CACF"}
+{"version":3,"file":"oxc-source-dependency-parser.d.ts","sourceRoot":"","sources":["../../../../../../src/capabilities/source-dependencies/adapters/outbound/oxc/oxc-source-dependency-parser.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,2EAA2E,CAAC;AACpH,OAAO,KAAK,EACV,wBAAwB,EAIzB,MAAM,gDAAgD,CAAC;AACxD,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,wDAAwD,CAAC;AAkBrG,qBAAa,yBAA0B,YAAW,sBAAsB;IACtE,KAAK,CAAC,IAAI,EAAE,kBAAkB,GAAG,wBAAwB,CAqGxD;CACF"}

package/dist/capabilities/source-dependencies/adapters/outbound/oxc/oxc-source-dependency-parser.js

@@ -1,4 +1,5 @@
 import { parseSync, Visitor } from "oxc-parser";
+import { compareBinaryStrings } from "../../../../../binary-string-comparator.js";
 function reference(kind, literal) {
     return typeof literal.value === "string"
         ? { kind, specifier: literal.value, start: literal.start, end: literal.end }
@@ -87,9 +88,9 @@ export class OxcSourceDependencyParser {
         return {
             parseErrorCount: 0,
             references: references.toSorted((left, right) => left.start - right.start ||
-                left.kind.localeCompare(right.kind) ||
-                left.specifier.localeCompare(right.specifier)),
-            unresolved: unresolvedReferences.toSorted((left, right) => left.start - right.start || left.kind.localeCompare(right.kind))
+                compareBinaryStrings(left.kind, right.kind) ||
+                compareBinaryStrings(left.specifier, right.specifier)),
+            unresolved: unresolvedReferences.toSorted((left, right) => left.start - right.start || compareBinaryStrings(left.kind, right.kind))
         };
     }
 }

package/dist/capabilities/source-dependencies/adapters/outbound/oxc/oxc-source-dependency-parser.js.map

@@ -1 +1 @@
-{"version":3,"file":"oxc-source-dependency-parser.js","sourceRoot":"","sources":["../../../../../../src/capabilities/source-dependencies/adapters/outbound/oxc/oxc-source-dependency-parser.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,OAAO,EAAE,MAAM,YAAY,CAAC;AAWhD,SAAS,SAAS,CAChB,IAA0B,EAC1B,OAAkF;IAElF,OAAO,OAAO,OAAO,CAAC,KAAK,KAAK,QAAQ;QACtC,CAAC,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,CAAC,KAAK,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE;QAC5E,CAAC,CAAC,SAAS,CAAC;AAChB,CAAC;AAED,SAAS,UAAU,CACjB,IAAwC,EACxC,IAAsD;IAEtD,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE,CAAC;AACpD,CAAC;AAED,MAAM,OAAO,yBAAyB;IACpC,KAAK,CAAC,IAAwB;QAC5B,MAAM,MAAM,GAAG,SAAS,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,MAAM,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;QACpE,IAAI,MAAM,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC7B,OAAO;gBACL,eAAe,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM;gBACrC,UAAU,EAAE,EAAE;gBACd,UAAU,EAAE,EAAE;aACf,CAAC;QACJ,CAAC;QAED,MAAM,UAAU,GAAgC,EAAE,CAAC;QACnD,MAAM,oBAAoB,GAAiC,EAAE,CAAC;QAC9D,MAAM,YAAY,GAAG,CACnB,IAA0B,EAC1B,OAAkF,EAClF,EAAE;YACF,MAAM,SAAS,GAAG,SAAS,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;YAC3C,IAAI,SAAS,KAAK,SAAS,EAAE,CAAC;gBAC5B,UAAU,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;YAC7B,CAAC;QACH,CAAC,CAAC;QACF,MAAM,OAAO,GAAG,IAAI,OAAO,CAAC;YAC1B,cAAc,CAAC,IAAI;gBACjB,IAAI,IAAI,CAAC,MAAM,CAAC,IAAI,KAAK,YAAY,IAAI,IAAI,CAAC,MAAM,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;oBACxE,OAAO;gBACT,CAAC;gBACD,MAAM,QAAQ,GAAG,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;gBACnC,IAAI,QAAQ,EAAE,IAAI,KAAK,SAAS,IAAI,OAAO,QAAQ,CAAC,KAAK,KAAK,QAAQ,EAAE,CAAC;oBACvE,YAAY,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAC;gBACrC,CAAC;qBAAM,CAAC;oBACN,oBAAoB,CAAC,IAAI,CAAC,UAAU,CAAC,UAAU,EAAE,IAAI,CAAC,CAAC,CAAC;gBAC1D,CAAC;YACH,CAAC;YACD,oBAAoB,CAAC,IAAI;gBACvB,YAAY,CACV,IAAI,CAAC,UAAU,KAAK,MAAM,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,QAAQ,EACrD,IAAI,CAAC,MAAM,CACZ,CAAC;YACJ,CAAC;YACD,sBAAsB,CAAC,IAAI;gBACzB,IAAI,IAAI,CAAC,MAAM,KAAK,IAAI,EAAE,CAAC;oBACzB,OAAO;gBACT,CAAC;gBACD,MAAM,QAAQ,GACZ,IAAI,CAAC,UAAU,KAAK,MAAM;oBAC1B,CAAC,IAAI,CAAC,UAAU,CAAC,MAAM,GAAG,CAAC;wBACzB,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,UAAU,KAAK,MAAM,CAAC,CAAC,CAAC;gBAC3E,YAAY,CAAC,QAAQ,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,QAAQ,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;YACjE,CAAC;YACD,iBAAiB,CAAC,IAAI;gBACpB,MAAM,QAAQ,GACZ,IAAI,CAAC,UAAU,KAAK,MAAM;oBAC1B,CAAC,IAAI,CAAC,UAAU,CAAC,MAAM,GAAG,CAAC;wBACzB,IAAI,CAAC,UAAU,CAAC,KAAK,CACnB,CAAC,SAAS,EAAE,EAAE,CACZ,SAAS,CAAC,IAAI,KAAK,iBAAiB;4BACpC,SAAS,CAAC,UAAU,KAAK,MAAM,CAClC,CAAC,CAAC;gBACP,YAAY,CAAC,QAAQ,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,QAAQ,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;YACjE,CAAC;YACD,gBAAgB,CAAC,IAAI;gBACnB,IAAI,IAAI,CAAC,MAAM,CAAC,IAAI,KAAK,SAAS,IAAI,OAAO,IAAI,CAAC,MAAM,CAAC,KAAK,KAAK,QAAQ,EAAE,CAAC;oBAC5E,YAAY,CAAC,SAAS,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;gBACvC,CAAC;qBAAM,CAAC;oBACN,oBAAoB,CAAC,IAAI,CAAC,UAAU,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC,CAAC;gBACzD,CAAC;YACH,CAAC;YACD,yBAAyB,CAAC,IAAI;gBAC5B,IAAI,IAAI,CAAC,eAAe,CAAC,IAAI,KAAK,2BAA2B,EAAE,CAAC;oBAC9D,OAAO;gBACT,CAAC;gBACD,MAAM,UAAU,GAAG,IAAI,CAAC,eAAe,CAAC,UAAU,CAAC;gBACnD,IAAI,OAAO,UAAU,CAAC,KAAK,KAAK,QAAQ,EAAE,CAAC;oBACzC,YAAY,CACV,IAAI,CAAC,UAAU,KAAK,MAAM,CAAC,CAAC,CAAC,oBAAoB,CAAC,CAAC,CAAC,eAAe,EACnE,UAAU,CACX,CAAC;gBACJ,CAAC;YACH,CAAC;YACD,YAAY,CAAC,IAAI;gBACf,IAAI,OAAO,IAAI,CAAC,MAAM,CAAC,KAAK,KAAK,QAAQ,EAAE,CAAC;oBAC1C,YAAY,CAAC,YAAY,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;gBAC1C,CAAC;qBAAM,CAAC;oBACN,oBAAoB,CAAC,IAAI,CAAC,UAAU,CAAC,YAAY,EAAE,IAAI,CAAC,CAAC,CAAC;gBAC5D,CAAC;YACH,CAAC;SACF,CAAC,CAAC;QACH,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QAC9B,OAAO;YACL,eAAe,EAAE,CAAC;YAClB,UAAU,EAAE,UAAU,CAAC,QAAQ,CAC7B,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CACd,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC,KAAK;gBACxB,IAAI,CAAC,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,IAAI,CAAC;gBACnC,IAAI,CAAC,SAAS,CAAC,aAAa,CAAC,KAAK,CAAC,SAAS,CAAC,CAChD;YACD,UAAU,EAAE,oBAAoB,CAAC,QAAQ,CACvC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC,KAAK,IAAI,IAAI,CAAC,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,IAAI,CAAC,CACjF;SACF,CAAC;IACJ,CAAC;CACF"}
+{"version":3,"file":"oxc-source-dependency-parser.js","sourceRoot":"","sources":["../../../../../../src/capabilities/source-dependencies/adapters/outbound/oxc/oxc-source-dependency-parser.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,OAAO,EAAE,MAAM,YAAY,CAAC;AAEhD,OAAO,EAAE,oBAAoB,EAAE,MAAM,4CAA4C,CAAC;AAUlF,SAAS,SAAS,CAChB,IAA0B,EAC1B,OAAkF;IAElF,OAAO,OAAO,OAAO,CAAC,KAAK,KAAK,QAAQ;QACtC,CAAC,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,CAAC,KAAK,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE;QAC5E,CAAC,CAAC,SAAS,CAAC;AAChB,CAAC;AAED,SAAS,UAAU,CACjB,IAAwC,EACxC,IAAsD;IAEtD,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE,CAAC;AACpD,CAAC;AAED,MAAM,OAAO,yBAAyB;IACpC,KAAK,CAAC,IAAwB;QAC5B,MAAM,MAAM,GAAG,SAAS,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,MAAM,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;QACpE,IAAI,MAAM,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC7B,OAAO;gBACL,eAAe,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM;gBACrC,UAAU,EAAE,EAAE;gBACd,UAAU,EAAE,EAAE;aACf,CAAC;QACJ,CAAC;QAED,MAAM,UAAU,GAAgC,EAAE,CAAC;QACnD,MAAM,oBAAoB,GAAiC,EAAE,CAAC;QAC9D,MAAM,YAAY,GAAG,CACnB,IAA0B,EAC1B,OAAkF,EAClF,EAAE;YACF,MAAM,SAAS,GAAG,SAAS,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;YAC3C,IAAI,SAAS,KAAK,SAAS,EAAE,CAAC;gBAC5B,UAAU,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;YAC7B,CAAC;QACH,CAAC,CAAC;QACF,MAAM,OAAO,GAAG,IAAI,OAAO,CAAC;YAC1B,cAAc,CAAC,IAAI;gBACjB,IAAI,IAAI,CAAC,MAAM,CAAC,IAAI,KAAK,YAAY,IAAI,IAAI,CAAC,MAAM,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;oBACxE,OAAO;gBACT,CAAC;gBACD,MAAM,QAAQ,GAAG,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;gBACnC,IAAI,QAAQ,EAAE,IAAI,KAAK,SAAS,IAAI,OAAO,QAAQ,CAAC,KAAK,KAAK,QAAQ,EAAE,CAAC;oBACvE,YAAY,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAC;gBACrC,CAAC;qBAAM,CAAC;oBACN,oBAAoB,CAAC,IAAI,CAAC,UAAU,CAAC,UAAU,EAAE,IAAI,CAAC,CAAC,CAAC;gBAC1D,CAAC;YACH,CAAC;YACD,oBAAoB,CAAC,IAAI;gBACvB,YAAY,CACV,IAAI,CAAC,UAAU,KAAK,MAAM,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,QAAQ,EACrD,IAAI,CAAC,MAAM,CACZ,CAAC;YACJ,CAAC;YACD,sBAAsB,CAAC,IAAI;gBACzB,IAAI,IAAI,CAAC,MAAM,KAAK,IAAI,EAAE,CAAC;oBACzB,OAAO;gBACT,CAAC;gBACD,MAAM,QAAQ,GACZ,IAAI,CAAC,UAAU,KAAK,MAAM;oBAC1B,CAAC,IAAI,CAAC,UAAU,CAAC,MAAM,GAAG,CAAC;wBACzB,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,UAAU,KAAK,MAAM,CAAC,CAAC,CAAC;gBAC3E,YAAY,CAAC,QAAQ,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,QAAQ,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;YACjE,CAAC;YACD,iBAAiB,CAAC,IAAI;gBACpB,MAAM,QAAQ,GACZ,IAAI,CAAC,UAAU,KAAK,MAAM;oBAC1B,CAAC,IAAI,CAAC,UAAU,CAAC,MAAM,GAAG,CAAC;wBACzB,IAAI,CAAC,UAAU,CAAC,KAAK,CACnB,CAAC,SAAS,EAAE,EAAE,CACZ,SAAS,CAAC,IAAI,KAAK,iBAAiB;4BACpC,SAAS,CAAC,UAAU,KAAK,MAAM,CAClC,CAAC,CAAC;gBACP,YAAY,CAAC,QAAQ,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,QAAQ,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;YACjE,CAAC;YACD,gBAAgB,CAAC,IAAI;gBACnB,IAAI,IAAI,CAAC,MAAM,CAAC,IAAI,KAAK,SAAS,IAAI,OAAO,IAAI,CAAC,MAAM,CAAC,KAAK,KAAK,QAAQ,EAAE,CAAC;oBAC5E,YAAY,CAAC,SAAS,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;gBACvC,CAAC;qBAAM,CAAC;oBACN,oBAAoB,CAAC,IAAI,CAAC,UAAU,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC,CAAC;gBACzD,CAAC;YACH,CAAC;YACD,yBAAyB,CAAC,IAAI;gBAC5B,IAAI,IAAI,CAAC,eAAe,CAAC,IAAI,KAAK,2BAA2B,EAAE,CAAC;oBAC9D,OAAO;gBACT,CAAC;gBACD,MAAM,UAAU,GAAG,IAAI,CAAC,eAAe,CAAC,UAAU,CAAC;gBACnD,IAAI,OAAO,UAAU,CAAC,KAAK,KAAK,QAAQ,EAAE,CAAC;oBACzC,YAAY,CACV,IAAI,CAAC,UAAU,KAAK,MAAM,CAAC,CAAC,CAAC,oBAAoB,CAAC,CAAC,CAAC,eAAe,EACnE,UAAU,CACX,CAAC;gBACJ,CAAC;YACH,CAAC;YACD,YAAY,CAAC,IAAI;gBACf,IAAI,OAAO,IAAI,CAAC,MAAM,CAAC,KAAK,KAAK,QAAQ,EAAE,CAAC;oBAC1C,YAAY,CAAC,YAAY,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;gBAC1C,CAAC;qBAAM,CAAC;oBACN,oBAAoB,CAAC,IAAI,CAAC,UAAU,CAAC,YAAY,EAAE,IAAI,CAAC,CAAC,CAAC;gBAC5D,CAAC;YACH,CAAC;SACF,CAAC,CAAC;QACH,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QAC9B,OAAO;YACL,eAAe,EAAE,CAAC;YAClB,UAAU,EAAE,UAAU,CAAC,QAAQ,CAC7B,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CACd,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC,KAAK;gBACxB,oBAAoB,CAAC,IAAI,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,CAAC;gBAC3C,oBAAoB,CAAC,IAAI,CAAC,SAAS,EAAE,KAAK,CAAC,SAAS,CAAC,CACxD;YACD,UAAU,EAAE,oBAAoB,CAAC,QAAQ,CACvC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CACd,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC,KAAK,IAAI,oBAAoB,CAAC,IAAI,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,CAAC,CAC1E;SACF,CAAC;IACJ,CAAC;CACF"}

package/dist/capabilities/source-dependencies/application/model/repository-path.d.ts

@@ -0,0 +1,3 @@
+export declare function normalizeRepositoryPath(path: string): string;
+export declare function pathIsInside(path: string, root: string): boolean;
+//# sourceMappingURL=repository-path.d.ts.map

package/dist/capabilities/source-dependencies/application/model/repository-path.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"repository-path.d.ts","sourceRoot":"","sources":["../../../../../src/capabilities/source-dependencies/application/model/repository-path.ts"],"names":[],"mappings":"AAAA,wBAAgB,uBAAuB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAuB5D;AAED,wBAAgB,YAAY,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAQhE"}

package/dist/capabilities/source-dependencies/application/model/repository-path.js

@@ -0,0 +1,33 @@
+export function normalizeRepositoryPath(path) {
+    const portable = path.replaceAll("\\", "/");
+    const absolute = portable.startsWith("/");
+    const segments = [];
+    for (const segment of portable.split("/")) {
+        if (segment.length === 0 || segment === ".") {
+            continue;
+        }
+        if (segment === ".." && segments.at(-1) !== "..") {
+            if (segments.length > 0) {
+                segments.pop();
+            }
+            else if (!absolute) {
+                segments.push(segment);
+            }
+            continue;
+        }
+        segments.push(segment);
+    }
+    const normalized = segments.join("/");
+    if (absolute) {
+        return `/${normalized}`;
+    }
+    return normalized.length === 0 ? "." : normalized;
+}
+export function pathIsInside(path, root) {
+    const normalizedPath = normalizeRepositoryPath(path);
+    const normalizedRoot = normalizeRepositoryPath(root);
+    return (normalizedRoot === "." ||
+        normalizedPath === normalizedRoot ||
+        normalizedPath.startsWith(`${normalizedRoot}/`));
+}
+//# sourceMappingURL=repository-path.js.map

package/dist/capabilities/source-dependencies/application/model/repository-path.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"repository-path.js","sourceRoot":"","sources":["../../../../../src/capabilities/source-dependencies/application/model/repository-path.ts"],"names":[],"mappings":"AAAA,MAAM,UAAU,uBAAuB,CAAC,IAAY;IAClD,MAAM,QAAQ,GAAG,IAAI,CAAC,UAAU,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;IAC5C,MAAM,QAAQ,GAAG,QAAQ,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC;IAC1C,MAAM,QAAQ,GAAa,EAAE,CAAC;IAC9B,KAAK,MAAM,OAAO,IAAI,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC;QAC1C,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,IAAI,OAAO,KAAK,GAAG,EAAE,CAAC;YAC5C,SAAS;QACX,CAAC;QACD,IAAI,OAAO,KAAK,IAAI,IAAI,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;YACjD,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACxB,QAAQ,CAAC,GAAG,EAAE,CAAC;YACjB,CAAC;iBAAM,IAAI,CAAC,QAAQ,EAAE,CAAC;gBACrB,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YACzB,CAAC;YACD,SAAS;QACX,CAAC;QACD,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IACzB,CAAC;IACD,MAAM,UAAU,GAAG,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACtC,IAAI,QAAQ,EAAE,CAAC;QACb,OAAO,IAAI,UAAU,EAAE,CAAC;IAC1B,CAAC;IACD,OAAO,UAAU,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,UAAU,CAAC;AACpD,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,IAAY,EAAE,IAAY;IACrD,MAAM,cAAc,GAAG,uBAAuB,CAAC,IAAI,CAAC,CAAC;IACrD,MAAM,cAAc,GAAG,uBAAuB,CAAC,IAAI,CAAC,CAAC;IACrD,OAAO,CACL,cAAc,KAAK,GAAG;QACtB,cAAc,KAAK,cAAc;QACjC,cAAc,CAAC,UAAU,CAAC,GAAG,cAAc,GAAG,CAAC,CAChD,CAAC;AACJ,CAAC"}