@agent-teams/engineering-foundation 1.2.0 → 1.3.0

package/dist/features/quality-coverage/adapters/consumer-toolchain.js

@@ -0,0 +1,84 @@
+import { createRequire } from "node:module";
+import { realpath } from "node:fs/promises";
+import { dirname, isAbsolute, join, relative, sep } from "node:path";
+import { CapabilityInputError, assertNotCancelled } from "../api.js";
+// This is the qualified adapter version set, not a dependency installer or a range resolver.
+const SUPPORTED = { oxlint: "1.77.0", "oxlint-tsgolint": "7.0.2001", typescript: "7.0.2" };
+function reject(name, reason) {
+    throw new CapabilityInputError({ code: "QUALITY_TOOLCHAIN_INVALID", message: `${name}: ${reason}`, phase: "quality-toolchain", retryable: false });
+}
+function record(value) {
+    return typeof value === "object" && value !== null && !Array.isArray(value);
+}
+function within(root, path) {
+    const suffix = relative(root, path);
+    return suffix !== ".." && !suffix.startsWith(`..${sep}`) && !isAbsolute(suffix);
+}
+function declaration(name, dependencies) {
+    const matches = dependencies.filter(({ dependencyName }) => dependencyName === name);
+    const candidate = matches[0];
+    if (matches.length !== 1 || candidate === undefined || candidate.section !== "devDependencies" ||
+        candidate.targetPackageName !== name || candidate.normalizationProblem !== undefined ||
+        !/^\d+\.\d+\.\d+$/u.test(candidate.effectiveVersionSpecifier)) {
+        reject(name, "requires one exact consumer root development dependency.");
+    }
+    return candidate.effectiveVersionSpecifier;
+}
+async function observeInstalledPackage(root, name, version, read, options = {}) {
+    let manifestPath;
+    try {
+        manifestPath = await realpath(createRequire(options.from ?? join(root, "package.json")).resolve(`${name}/package.json`));
+    }
+    catch {
+        reject(name, "is not installed in the consumer toolchain.");
+    }
+    if (!within(join(root, "node_modules"), manifestPath)) {
+        reject(name, "resolved outside consumer node_modules.");
+    }
+    const value = JSON.parse(new TextDecoder("utf-8", { fatal: true }).decode(await read({ root, candidate: manifestPath, maxBytes: 2 * 1024 * 1024 })));
+    if (!record(value) || value["name"] !== name || value["version"] !== version) {
+        reject(name, "installed identity does not match the exact declared pin.");
+    }
+    if (options.bin === undefined) {
+        return manifestPath;
+    }
+    const binaries = value["bin"];
+    const target = typeof binaries === "string" ? binaries : record(binaries) ? binaries[options.bin] : undefined;
+    if (typeof target !== "string" || target.length === 0 || isAbsolute(target)) {
+        reject(name, "has no supported executable entrypoint.");
+    }
+    const packageRoot = dirname(manifestPath);
+    const executable = await realpath(join(packageRoot, target));
+    if (!within(packageRoot, executable)) {
+        reject(name, "executable escapes its installed package.");
+    }
+    await read({ root, candidate: executable, maxBytes: 16 * 1024 * 1024 });
+    return executable;
+}
+/** Resolution starts at the consumer, and explicitly rejects ancestor/global fallback. */
+export async function inspectConsumerToolchain(input) {
+    assertNotCancelled(input.signal);
+    const root = await realpath(input.consumerRoot);
+    for (const [name, version] of Object.entries(SUPPORTED)) {
+        if (declaration(name, input.dependencies) !== version) {
+            reject(name, `unsupported version; this adapter qualifies ${version}.`);
+        }
+    }
+    const oxlintEntrypoint = await observeInstalledPackage(root, "oxlint", SUPPORTED.oxlint, input.read, { bin: "oxlint" });
+    const compilerEntrypoint = await observeInstalledPackage(root, "typescript", SUPPORTED.typescript, input.read, { bin: "tsc" });
+    const typedWrapper = await observeInstalledPackage(root, "oxlint-tsgolint", SUPPORTED["oxlint-tsgolint"], input.read, { bin: "tsgolint" });
+    const nativeName = `@oxlint-tsgolint/${process.platform}-${process.arch}`;
+    const nativeManifest = await observeInstalledPackage(root, nativeName, SUPPORTED["oxlint-tsgolint"], input.read, { from: typedWrapper });
+    const nativeRoot = dirname(nativeManifest);
+    const typedEntrypoint = await realpath(join(nativeRoot, process.platform === "win32" ? "tsgolint.exe" : "tsgolint"));
+    if (!within(nativeRoot, typedEntrypoint)) {
+        reject(nativeName, "executable escapes its installed package.");
+    }
+    await input.read({ root, candidate: typedEntrypoint, maxBytes: 128 * 1024 * 1024 });
+    for (const dependency of input.dependencies.filter(({ dependencyName }) => dependencyName.startsWith("@types/"))) {
+        await observeInstalledPackage(root, dependency.dependencyName, declaration(dependency.dependencyName, input.dependencies), input.read);
+    }
+    assertNotCancelled(input.signal);
+    return { oxlintEntrypoint, compilerEntrypoint, typedEntrypoint };
+}
+//# sourceMappingURL=consumer-toolchain.js.map

package/dist/features/quality-coverage/adapters/consumer-toolchain.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"consumer-toolchain.js","sourceRoot":"","sources":["../../../../src/features/quality-coverage/adapters/consumer-toolchain.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAC5C,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAC5C,OAAO,EAAE,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,QAAQ,EAAE,GAAG,EAAE,MAAM,WAAW,CAAC;AACrE,OAAO,EAAE,oBAAoB,EAAE,kBAAkB,EAA6D,MAAM,WAAW,CAAC;AAEhI,6FAA6F;AAC7F,MAAM,SAAS,GAAG,EAAE,MAAM,EAAE,QAAQ,EAAE,iBAAiB,EAAE,UAAU,EAAE,UAAU,EAAE,OAAO,EAAW,CAAC;AAEpG,SAAS,MAAM,CAAC,IAAY,EAAE,MAAc;IAC1C,MAAM,IAAI,oBAAoB,CAAC,EAAE,IAAI,EAAE,2BAA2B,EAAE,OAAO,EAAE,GAAG,IAAI,KAAK,MAAM,EAAE,EAAE,KAAK,EAAE,mBAAmB,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC,CAAC;AACrJ,CAAC;AAED,SAAS,MAAM,CAAC,KAAc;IAC5B,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;AAC9E,CAAC;AAED,SAAS,MAAM,CAAC,IAAY,EAAE,IAAY;IACxC,MAAM,MAAM,GAAG,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IACpC,OAAO,MAAM,KAAK,IAAI,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,KAAK,GAAG,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;AAClF,CAAC;AAED,SAAS,WAAW,CAAC,IAAY,EAAE,YAAqD;IACtF,MAAM,OAAO,GAAG,YAAY,CAAC,MAAM,CAAC,CAAC,EAAE,cAAc,EAAE,EAAE,EAAE,CAAC,cAAc,KAAK,IAAI,CAAC,CAAC;IACrF,MAAM,SAAS,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;IAC7B,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,IAAI,SAAS,KAAK,SAAS,IAAI,SAAS,CAAC,OAAO,KAAK,iBAAiB;QAC5F,SAAS,CAAC,iBAAiB,KAAK,IAAI,IAAI,SAAS,CAAC,oBAAoB,KAAK,SAAS;QACpF,CAAC,kBAAkB,CAAC,IAAI,CAAC,SAAS,CAAC,yBAAyB,CAAC,EAAE,CAAC;QAChE,MAAM,CAAC,IAAI,EAAE,0DAA0D,CAAC,CAAC;IAC3E,CAAC;IACD,OAAO,SAAS,CAAC,yBAAyB,CAAC;AAC7C,CAAC;AAED,KAAK,UAAU,uBAAuB,CACpC,IAAY,EAAE,IAAY,EAAE,OAAe,EAAE,IAAuB,EACpE,OAAO,GAAsD,EAAE;IAE/D,IAAI,YAAoB,CAAC;IACzB,IAAI,CAAC;QACH,YAAY,GAAG,MAAM,QAAQ,CAAC,aAAa,CAAC,OAAO,CAAC,IAAI,IAAI,IAAI,CAAC,IAAI,EAAE,cAAc,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,IAAI,eAAe,CAAC,CAAC,CAAC;IAC3H,CAAC;IAAC,MAAM,CAAC;QAAC,MAAM,CAAC,IAAI,EAAE,6CAA6C,CAAC,CAAC;IAAC,CAAC;IACxE,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,cAAc,CAAC,EAAE,YAAY,CAAC,EAAE,CAAC;QAAC,MAAM,CAAC,IAAI,EAAE,yCAAyC,CAAC,CAAC;IAAC,CAAC;IACnH,MAAM,KAAK,GAAY,IAAI,CAAC,KAAK,CAAC,IAAI,WAAW,CAAC,OAAO,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,MAAM,IAAI,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,YAAY,EAAE,QAAQ,EAAE,CAAC,GAAG,IAAI,GAAG,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;IAC9J,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,KAAK,IAAI,IAAI,KAAK,CAAC,SAAS,CAAC,KAAK,OAAO,EAAE,CAAC;QAC7E,MAAM,CAAC,IAAI,EAAE,2DAA2D,CAAC,CAAC;IAC5E,CAAC;IACD,IAAI,OAAO,CAAC,GAAG,KAAK,SAAS,EAAE,CAAC;QAAC,OAAO,YAAY,CAAC;IAAC,CAAC;IACvD,MAAM,QAAQ,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC;IAC9B,MAAM,MAAM,GAAG,OAAO,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IAC9G,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,IAAI,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC;QAAC,MAAM,CAAC,IAAI,EAAE,yCAAyC,CAAC,CAAC;IAAC,CAAC;IACzI,MAAM,WAAW,GAAG,OAAO,CAAC,YAAY,CAAC,CAAC;IAC1C,MAAM,UAAU,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC,CAAC;IAC7D,IAAI,CAAC,MAAM,CAAC,WAAW,EAAE,UAAU,CAAC,EAAE,CAAC;QAAC,MAAM,CAAC,IAAI,EAAE,2CAA2C,CAAC,CAAC;IAAC,CAAC;IACpG,MAAM,IAAI,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,UAAU,EAAE,QAAQ,EAAE,EAAE,GAAG,IAAI,GAAG,IAAI,EAAE,CAAC,CAAC;IACxE,OAAO,UAAU,CAAC;AACpB,CAAC;AAED,0FAA0F;AAC1F,MAAM,CAAC,KAAK,UAAU,wBAAwB,CAAC,KAK9C;IACC,kBAAkB,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IACjC,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC;IAChD,KAAK,MAAM,CAAC,IAAI,EAAE,OAAO,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,CAAC;QACxD,IAAI,WAAW,CAAC,IAAI,EAAE,KAAK,CAAC,YAAY,CAAC,KAAK,OAAO,EAAE,CAAC;YAAC,MAAM,CAAC,IAAI,EAAE,+CAA+C,OAAO,GAAG,CAAC,CAAC;QAAC,CAAC;IACrI,CAAC;IACD,MAAM,gBAAgB,GAAG,MAAM,uBAAuB,CAAC,IAAI,EAAE,QAAQ,EAAE,SAAS,CAAC,MAAM,EAAE,KAAK,CAAC,IAAI,EAAE,EAAE,GAAG,EAAE,QAAQ,EAAE,CAAC,CAAC;IACxH,MAAM,kBAAkB,GAAG,MAAM,uBAAuB,CAAC,IAAI,EAAE,YAAY,EAAE,SAAS,CAAC,UAAU,EAAE,KAAK,CAAC,IAAI,EAAE,EAAE,GAAG,EAAE,KAAK,EAAE,CAAC,CAAC;IAC/H,MAAM,YAAY,GAAG,MAAM,uBAAuB,CAAC,IAAI,EAAE,iBAAiB,EAAE,SAAS,CAAC,iBAAiB,CAAC,EAAE,KAAK,CAAC,IAAI,EAAE,EAAE,GAAG,EAAE,UAAU,EAAE,CAAC,CAAC;IAC3I,MAAM,UAAU,GAAG,oBAAoB,OAAO,CAAC,QAAQ,IAAI,OAAO,CAAC,IAAI,EAAE,CAAC;IAC1E,MAAM,cAAc,GAAG,MAAM,uBAAuB,CAAC,IAAI,EAAE,UAAU,EAAE,SAAS,CAAC,iBAAiB,CAAC,EAAE,KAAK,CAAC,IAAI,EAAE,EAAE,IAAI,EAAE,YAAY,EAAE,CAAC,CAAC;IACzI,MAAM,UAAU,GAAG,OAAO,CAAC,cAAc,CAAC,CAAC;IAC3C,MAAM,eAAe,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,UAAU,EAAE,OAAO,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC;IACrH,IAAI,CAAC,MAAM,CAAC,UAAU,EAAE,eAAe,CAAC,EAAE,CAAC;QAAC,MAAM,CAAC,UAAU,EAAE,2CAA2C,CAAC,CAAC;IAAC,CAAC;IAC9G,MAAM,KAAK,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,eAAe,EAAE,QAAQ,EAAE,GAAG,GAAG,IAAI,GAAG,IAAI,EAAE,CAAC,CAAC;IACpF,KAAK,MAAM,UAAU,IAAI,KAAK,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC,EAAE,cAAc,EAAE,EAAE,EAAE,CAAC,cAAc,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC,EAAE,CAAC;QACjH,MAAM,uBAAuB,CAAC,IAAI,EAAE,UAAU,CAAC,cAAc,EAAE,WAAW,CAAC,UAAU,CAAC,cAAc,EAAE,KAAK,CAAC,YAAY,CAAC,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;IACzI,CAAC;IACD,kBAAkB,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IACjC,OAAO,EAAE,gBAAgB,EAAE,kBAAkB,EAAE,eAAe,EAAE,CAAC;AACnE,CAAC"}

package/dist/features/quality-coverage/adapters/oxlint-output.d.ts

@@ -0,0 +1,8 @@
+import { qualityDiagnostic } from "../api.js";
+export declare function parseOxlintSelection(stdout: string): readonly string[];
+/** The exit status and JSON envelope must agree; a tool failure is never a lint finding. */
+export declare function parseOxlintDiagnostics(stdout: string, exitCode: number): {
+    readonly files: number;
+    readonly diagnostics: readonly ReturnType<typeof qualityDiagnostic>[];
+};
+//# sourceMappingURL=oxlint-output.d.ts.map

package/dist/features/quality-coverage/adapters/oxlint-output.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"oxlint-output.d.ts","sourceRoot":"","sources":["../../../../src/features/quality-coverage/adapters/oxlint-output.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,iBAAiB,EAAE,MAAM,WAAW,CAAC;AAmB9C,wBAAgB,oBAAoB,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,MAAM,EAAE,CAKtE;AAED,4FAA4F;AAC5F,wBAAgB,sBAAsB,CAAC,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG;IACxE,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,WAAW,EAAE,SAAS,UAAU,CAAC,OAAO,iBAAiB,CAAC,EAAE,CAAC;CACvE,CAgBA"}

package/dist/features/quality-coverage/adapters/oxlint-output.js

@@ -0,0 +1,53 @@
+import { qualityDiagnostic } from "../api.js";
+function record(value) {
+    return typeof value === "object" && value !== null && !Array.isArray(value);
+}
+function malformed() {
+    throw new Error("Pinned Oxlint returned malformed execution evidence.");
+}
+function normalizeSelectedPath(value) {
+    const path = value.replaceAll("\\", "/");
+    if (path.length === 0 || path.length > 1024 || path.includes(":") || path.split("").some((character) => character < " ") ||
+        path.split("/").some((segment) => segment === "" || segment === "." || segment === "..")) {
+        malformed();
+    }
+    return path;
+}
+export function parseOxlintSelection(stdout) {
+    const lines = stdout.replace(/\r?\n$/u, "").split(/\r?\n/u);
+    const paths = lines.map(normalizeSelectedPath);
+    if (paths.length === 0 || new Set(paths).size !== paths.length) {
+        malformed();
+    }
+    return paths.toSorted();
+}
+/** The exit status and JSON envelope must agree; a tool failure is never a lint finding. */
+export function parseOxlintDiagnostics(stdout, exitCode) {
+    let value;
+    try {
+        value = JSON.parse(stdout);
+    }
+    catch {
+        malformed();
+    }
+    if (!record(value) || !Array.isArray(value["diagnostics"]) ||
+        typeof value["number_of_files"] !== "number" || !Number.isSafeInteger(value["number_of_files"]) ||
+        value["number_of_files"] < 1 || ![0, 1].includes(exitCode)) {
+        malformed();
+    }
+    const diagnostics = value["diagnostics"].map((input) => {
+        if (!record(input) || typeof input["filename"] !== "string" ||
+            typeof input["code"] !== "string" || !/^[a-z][a-z-]*\([a-z][a-z0-9-]*\)$/u.test(input["code"]) ||
+            (input["severity"] !== "error" && input["severity"] !== "warning")) {
+            malformed();
+        }
+        const path = normalizeSelectedPath(input["filename"]);
+        const diagnostic = qualityDiagnostic("lint-violation", path, `${path}:${input["code"]}`, "no lint violations", input["code"]);
+        return { ...diagnostic, evidence: [...diagnostic.evidence, { kind: "tool-rule", value: input["code"] }] };
+    });
+    if ((exitCode === 0) !== (diagnostics.length === 0)) {
+        malformed();
+    }
+    return { files: value["number_of_files"], diagnostics };
+}
+//# sourceMappingURL=oxlint-output.js.map

package/dist/features/quality-coverage/adapters/oxlint-output.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"oxlint-output.js","sourceRoot":"","sources":["../../../../src/features/quality-coverage/adapters/oxlint-output.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,iBAAiB,EAAE,MAAM,WAAW,CAAC;AAE9C,SAAS,MAAM,CAAC,KAAc;IAC5B,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;AAC9E,CAAC;AAED,SAAS,SAAS;IAChB,MAAM,IAAI,KAAK,CAAC,sDAAsD,CAAC,CAAC;AAC1E,CAAC;AAED,SAAS,qBAAqB,CAAC,KAAa;IAC1C,MAAM,IAAI,GAAG,KAAK,CAAC,UAAU,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;IACzC,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,IAAI,IAAI,CAAC,MAAM,GAAG,IAAI,IAAI,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,GAAG,GAAG,CAAC;QACtH,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,KAAK,EAAE,IAAI,OAAO,KAAK,GAAG,IAAI,OAAO,KAAK,IAAI,CAAC,EAAE,CAAC;QAC3F,SAAS,EAAE,CAAC;IACd,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,UAAU,oBAAoB,CAAC,MAAc;IACjD,MAAM,KAAK,GAAG,MAAM,CAAC,OAAO,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;IAC5D,MAAM,KAAK,GAAG,KAAK,CAAC,GAAG,CAAC,qBAAqB,CAAC,CAAC;IAC/C,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC,IAAI,KAAK,KAAK,CAAC,MAAM,EAAE,CAAC;QAAC,SAAS,EAAE,CAAC;IAAC,CAAC;IAChF,OAAO,KAAK,CAAC,QAAQ,EAAE,CAAC;AAC1B,CAAC;AAED,4FAA4F;AAC5F,MAAM,UAAU,sBAAsB,CAAC,MAAc,EAAE,QAAgB;IAIrE,IAAI,KAAc,CAAC;IACnB,IAAI,CAAC;QAAC,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IAAC,CAAC;IAAC,MAAM,CAAC;QAAC,SAAS,EAAE,CAAC;IAAC,CAAC;IAC1D,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC;QACxD,OAAO,KAAK,CAAC,iBAAiB,CAAC,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,iBAAiB,CAAC,CAAC;QAC/F,KAAK,CAAC,iBAAiB,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;QAAC,SAAS,EAAE,CAAC;IAAC,CAAC;IAC9E,MAAM,WAAW,GAAG,KAAK,CAAC,aAAa,CAAC,CAAC,GAAG,CAAC,CAAC,KAAc,EAAE,EAAE;QAC9D,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,OAAO,KAAK,CAAC,UAAU,CAAC,KAAK,QAAQ;YACzD,OAAO,KAAK,CAAC,MAAM,CAAC,KAAK,QAAQ,IAAI,CAAC,oCAAoC,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;YAC9F,CAAC,KAAK,CAAC,UAAU,CAAC,KAAK,OAAO,IAAI,KAAK,CAAC,UAAU,CAAC,KAAK,SAAS,CAAC,EAAE,CAAC;YAAC,SAAS,EAAE,CAAC;QAAC,CAAC;QACtF,MAAM,IAAI,GAAG,qBAAqB,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC;QACtD,MAAM,UAAU,GAAG,iBAAiB,CAAC,gBAAgB,EAAE,IAAI,EAAE,GAAG,IAAI,IAAI,KAAK,CAAC,MAAM,CAAC,EAAE,EAAE,oBAAoB,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC;QAC9H,OAAO,EAAE,GAAG,UAAU,EAAE,QAAQ,EAAE,CAAC,GAAG,UAAU,CAAC,QAAQ,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE,KAAK,EAAE,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,CAAC;IAC5G,CAAC,CAAC,CAAC;IACH,IAAI,CAAC,QAAQ,KAAK,CAAC,CAAC,KAAK,CAAC,WAAW,CAAC,MAAM,KAAK,CAAC,CAAC,EAAE,CAAC;QAAC,SAAS,EAAE,CAAC;IAAC,CAAC;IACrE,OAAO,EAAE,KAAK,EAAE,KAAK,CAAC,iBAAiB,CAAC,EAAE,WAAW,EAAE,CAAC;AAC1D,CAAC"}

package/dist/features/quality-coverage/adapters/oxlint-session.d.ts

@@ -0,0 +1,14 @@
+import type { QualityToolSession, ManagedProcessExecutor } from "../api.js";
+export interface OxlintSessionInput {
+    readonly consumerRoot: string;
+    readonly nodeExecutable: string;
+    readonly oxlintEntrypoint: string;
+    readonly compilerEntrypoint: string;
+    readonly configPath: string;
+    readonly sourceRoots: readonly string[];
+    readonly projects: readonly string[];
+    readonly environment?: Readonly<Record<string, string | undefined>>;
+}
+/** Entrypoints have already been bound to the pinned consumer toolchain by preparation. */
+export declare function createOxlintSession(input: OxlintSessionInput, executor: ManagedProcessExecutor): QualityToolSession;
+//# sourceMappingURL=oxlint-session.d.ts.map

package/dist/features/quality-coverage/adapters/oxlint-session.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"oxlint-session.d.ts","sourceRoot":"","sources":["../../../../src/features/quality-coverage/adapters/oxlint-session.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,kBAAkB,EAAE,sBAAsB,EAAwB,MAAM,WAAW,CAAC;AAGlG,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,gBAAgB,EAAE,MAAM,CAAC;IAClC,QAAQ,CAAC,kBAAkB,EAAE,MAAM,CAAC;IACpC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,WAAW,EAAE,SAAS,MAAM,EAAE,CAAC;IACxC,QAAQ,CAAC,QAAQ,EAAE,SAAS,MAAM,EAAE,CAAC;IACrC,QAAQ,CAAC,WAAW,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,CAAC,CAAC;CACrE;AAQD,2FAA2F;AAC3F,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,kBAAkB,EAAE,QAAQ,EAAE,sBAAsB,GAAG,kBAAkB,CAwCnH"}

package/dist/features/quality-coverage/adapters/oxlint-session.js

@@ -0,0 +1,53 @@
+import { isAbsolute, relative, sep } from "node:path";
+import { realpath } from "node:fs/promises";
+import { parseOxlintDiagnostics, parseOxlintSelection } from "./oxlint-output.js";
+function assertToolSuccess(result) {
+    if (result.exitCode !== 0 || result.signal !== null || result.stderr.trim().length !== 0) {
+        throw new Error("Quality tool prerequisite failed; no valid execution evidence was produced.");
+    }
+}
+/** Entrypoints have already been bound to the pinned consumer toolchain by preparation. */
+export function createOxlintSession(input, executor) {
+    const lintArgs = [input.oxlintEntrypoint, "--config", input.configPath,
+        "--deny-warnings", "--disable-nested-config", "--no-ignore", "--threads", "1", "--format", "json"];
+    const run = (args, signal) => executor.run({
+        command: input.nodeExecutable, args, cwd: input.consumerRoot,
+        ...(input.environment === undefined ? {} : { environment: input.environment }),
+        timeoutMs: 120_000, strictUtf8: true, ...(signal === undefined ? {} : { signal })
+    });
+    return {
+        async select(signal) {
+            const result = await run([...lintArgs, "--debug", "files", ...input.sourceRoots], signal);
+            assertToolSuccess(result);
+            return parseOxlintSelection(result.stdout);
+        },
+        async typeContext(signal) {
+            const root = await realpath(input.consumerRoot);
+            const paths = new Set();
+            for (const project of input.projects) {
+                const result = await run([input.compilerEntrypoint, "--project", project,
+                    "--noEmit", "--incremental", "false", "--composite", "false", "--listFiles", "--pretty", "false"], signal);
+                assertToolSuccess(result);
+                for (const line of result.stdout.trim().split(/\r?\n/u)) {
+                    if (!isAbsolute(line)) {
+                        throw new Error("Compiler returned malformed project evidence.");
+                    }
+                    // Compiler output and consumer cwd can name different aliases of the same root.
+                    const path = relative(root, await realpath(line)).split(sep).join("/");
+                    if (path !== ".." && !path.startsWith("../") && !isAbsolute(path) && !path.startsWith("node_modules/")) {
+                        paths.add(path);
+                    }
+                }
+            }
+            return [...paths].toSorted();
+        },
+        async lint(signal) {
+            const result = await run([...lintArgs, ...input.sourceRoots], signal);
+            if (result.signal !== null || result.stderr.trim().length !== 0) {
+                throw new Error("Oxlint did not produce valid lint evidence.");
+            }
+            return parseOxlintDiagnostics(result.stdout, result.exitCode);
+        }
+    };
+}
+//# sourceMappingURL=oxlint-session.js.map

package/dist/features/quality-coverage/adapters/oxlint-session.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"oxlint-session.js","sourceRoot":"","sources":["../../../../src/features/quality-coverage/adapters/oxlint-session.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,QAAQ,EAAE,GAAG,EAAE,MAAM,WAAW,CAAC;AACtD,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAE5C,OAAO,EAAE,sBAAsB,EAAE,oBAAoB,EAAE,MAAM,oBAAoB,CAAC;AAalF,SAAS,iBAAiB,CAAC,MAA4B;IACrD,IAAI,MAAM,CAAC,QAAQ,KAAK,CAAC,IAAI,MAAM,CAAC,MAAM,KAAK,IAAI,IAAI,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACzF,MAAM,IAAI,KAAK,CAAC,6EAA6E,CAAC,CAAC;IACjG,CAAC;AACH,CAAC;AAED,2FAA2F;AAC3F,MAAM,UAAU,mBAAmB,CAAC,KAAyB,EAAE,QAAgC;IAC7F,MAAM,QAAQ,GAAG,CAAC,KAAK,CAAC,gBAAgB,EAAE,UAAU,EAAE,KAAK,CAAC,UAAU;QACpE,iBAAiB,EAAE,yBAAyB,EAAE,aAAa,EAAE,WAAW,EAAE,GAAG,EAAE,UAAU,EAAE,MAAM,CAAC,CAAC;IACrG,MAAM,GAAG,GAAG,CAAC,IAAuB,EAAE,MAAoB,EAAE,EAAE,CAAC,QAAQ,CAAC,GAAG,CAAC;QAC1E,OAAO,EAAE,KAAK,CAAC,cAAc,EAAE,IAAI,EAAE,GAAG,EAAE,KAAK,CAAC,YAAY;QAC5D,GAAG,CAAC,KAAK,CAAC,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,KAAK,CAAC,WAAW,EAAE,CAAC;QAC9E,SAAS,EAAE,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,GAAG,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC;KAClF,CAAC,CAAC;IACH,OAAO;QACL,KAAK,CAAC,MAAM,CAAC,MAAM;YACjB,MAAM,MAAM,GAAG,MAAM,GAAG,CAAC,CAAC,GAAG,QAAQ,EAAE,SAAS,EAAE,OAAO,EAAE,GAAG,KAAK,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC,CAAC;YAC1F,iBAAiB,CAAC,MAAM,CAAC,CAAC;YAC1B,OAAO,oBAAoB,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QAC7C,CAAC;QACD,KAAK,CAAC,WAAW,CAAC,MAAM;YACtB,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC;YAChD,MAAM,KAAK,GAAG,IAAI,GAAG,EAAU,CAAC;YAChC,KAAK,MAAM,OAAO,IAAI,KAAK,CAAC,QAAQ,EAAE,CAAC;gBACrC,MAAM,MAAM,GAAG,MAAM,GAAG,CAAC,CAAC,KAAK,CAAC,kBAAkB,EAAE,WAAW,EAAE,OAAO;oBACtE,UAAU,EAAE,eAAe,EAAE,OAAO,EAAE,aAAa,EAAE,OAAO,EAAE,aAAa,EAAE,UAAU,EAAE,OAAO,CAAC,EAAE,MAAM,CAAC,CAAC;gBAC7G,iBAAiB,CAAC,MAAM,CAAC,CAAC;gBAC1B,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,QAAQ,CAAC,EAAE,CAAC;oBACxD,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;wBAAC,MAAM,IAAI,KAAK,CAAC,+CAA+C,CAAC,CAAC;oBAAC,CAAC;oBAC5F,gFAAgF;oBAChF,MAAM,IAAI,GAAG,QAAQ,CAAC,IAAI,EAAE,MAAM,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;oBACvE,IAAI,IAAI,KAAK,IAAI,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,eAAe,CAAC,EAAE,CAAC;wBACvG,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;oBAClB,CAAC;gBACH,CAAC;YACH,CAAC;YACD,OAAO,CAAC,GAAG,KAAK,CAAC,CAAC,QAAQ,EAAE,CAAC;QAC/B,CAAC;QACD,KAAK,CAAC,IAAI,CAAC,MAAM;YACf,MAAM,MAAM,GAAG,MAAM,GAAG,CAAC,CAAC,GAAG,QAAQ,EAAE,GAAG,KAAK,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC,CAAC;YACtE,IAAI,MAAM,CAAC,MAAM,KAAK,IAAI,IAAI,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBAChE,MAAM,IAAI,KAAK,CAAC,6CAA6C,CAAC,CAAC;YACjE,CAAC;YACD,OAAO,sBAAsB,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,QAAQ,CAAC,CAAC;QAChE,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/features/quality-coverage/adapters/profile-input.d.ts

@@ -0,0 +1,9 @@
+import { type QualityCoverageProfile, type QualityTopology } from "../api.js";
+export declare function invalidQualityInput(message: string): never;
+export declare function qualityRecord(value: unknown): Record<string, unknown>;
+export declare function qualityString(value: unknown): string;
+export declare function qualityStrings(value: unknown): readonly string[];
+export declare function mapQualityProfile(value: unknown): QualityCoverageProfile;
+/** Normalize qualified flat and nested FMS forms; adoption status does not filter production. */
+export declare function mapQualityTopology(value: unknown, sourcePolicyPath: string): QualityTopology;
+//# sourceMappingURL=profile-input.d.ts.map

package/dist/features/quality-coverage/adapters/profile-input.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"profile-input.d.ts","sourceRoot":"","sources":["../../../../src/features/quality-coverage/adapters/profile-input.ts"],"names":[],"mappings":"AAAA,OAAO,EAAwB,KAAK,sBAAsB,EAAE,KAAK,eAAe,EAAE,MAAM,WAAW,CAAC;AAEpG,wBAAgB,mBAAmB,CAAC,OAAO,EAAE,MAAM,GAAG,KAAK,CAE1D;AAED,wBAAgB,aAAa,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAGrE;AAED,wBAAgB,aAAa,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,CAGpD;AAED,wBAAgB,cAAc,CAAC,KAAK,EAAE,OAAO,GAAG,SAAS,MAAM,EAAE,CAGhE;AAED,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,OAAO,GAAG,sBAAsB,CAgBxE;AA+BD,iGAAiG;AACjG,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,OAAO,EAAE,gBAAgB,EAAE,MAAM,GAAG,eAAe,CAqB5F"}

package/dist/features/quality-coverage/adapters/profile-input.js

@@ -0,0 +1,110 @@
+import { CapabilityInputError } from "../api.js";
+export function invalidQualityInput(message) {
+    throw new CapabilityInputError({ code: "QUALITY_PROFILE_INVALID", message, phase: "quality-profile", retryable: false });
+}
+export function qualityRecord(value) {
+    if (typeof value !== "object" || value === null || Array.isArray(value)) {
+        invalidQualityInput("Expected a data object in the quality profile inputs.");
+    }
+    return Object.fromEntries(Object.entries(value));
+}
+export function qualityString(value) {
+    if (typeof value !== "string" || value.length === 0 || value.length > 1024) {
+        invalidQualityInput("Expected a bounded nonempty string in the quality profile inputs.");
+    }
+    return value;
+}
+export function qualityStrings(value) {
+    if (!Array.isArray(value) || value.length > 10_000) {
+        invalidQualityInput("Expected a bounded list in the quality profile inputs.");
+    }
+    return value.map(qualityString);
+}
+export function mapQualityProfile(value) {
+    const input = qualityRecord(value);
+    const scripts = qualityRecord(input["scripts"]);
+    const compilerProjects = qualityStrings(input["compilerProjects"]);
+    if (compilerProjects.length === 0 || new Set(compilerProjects).size !== compilerProjects.length) {
+        invalidQualityInput("Quality coverage requires nonempty unique compiler project paths.");
+    }
+    return {
+        sourcePolicyPath: qualityString(input["sourcePolicyPath"]),
+        suppressionPolicyPath: qualityString(input["suppressionPolicyPath"]),
+        featureProfilePath: qualityString(input["featureProfilePath"]),
+        lintConfigPath: qualityString(input["lintConfigPath"]),
+        compilerProjects,
+        ...(input["nativeChecks"] === undefined ? {} : { nativeChecks: nativeChecks(input["nativeChecks"]) }),
+        scripts: { fast: qualityString(scripts["fast"]), full: qualityString(scripts["full"]), scope: qualityString(scripts["scope"]), typed: qualityString(scripts["typed"]) }
+    };
+}
+function boundedModules(value) {
+    if (!Array.isArray(value) || value.length === 0 || value.length > 5000) {
+        invalidQualityInput("FMS profile requires a nonempty bounded module mapping.");
+    }
+    return value.map(qualityRecord);
+}
+function nestedTopology(input) {
+    const scope = qualityRecord(input["scope"]);
+    const adoption = qualityRecord(input["adoption"]);
+    const layout = qualityRecord(adoption["abstractLayout"]);
+    const modules = boundedModules(scope["productionModules"]);
+    const layouts = boundedModules(layout["modules"]);
+    for (const entry of layouts) {
+        if (!modules.some((module) => module["moduleRoot"] === entry["moduleRoot"] && module["sourceRoot"] === entry["sourceRoot"])) {
+            invalidQualityInput("An abstract layout must map an existing production module and its source root.");
+        }
+    }
+    return {
+        productionRoots: qualityStrings(scope["workspaceContainers"]),
+        applicationRoots: qualityStrings(adoption["applicationRoots"]),
+        excludedRoots: qualityStrings(adoption["excludedRoots"]),
+        modules: modules.map((module) => ({
+            root: qualityString(module["moduleRoot"]), sourceRoot: qualityString(module["sourceRoot"]),
+            testRoots: layouts.filter((entry) => entry["moduleRoot"] === module["moduleRoot"]).map((entry) => qualityString(entry["testRoot"]))
+        }))
+    };
+}
+/** Normalize qualified flat and nested FMS forms; adoption status does not filter production. */
+export function mapQualityTopology(value, sourcePolicyPath) {
+    const input = qualityRecord(value);
+    const nested = input["authority"] !== undefined;
+    const standard = qualityRecord(nested ? input["authority"] : input["standard"]);
+    if (input["schemaVersion"] !== 1 || standard["id"] !== "agent-teams.feature-module-standard" || standard["version"] !== "v1") {
+        invalidQualityInput("Quality coverage requires an FMS v1 production mapping.");
+    }
+    if (nested) {
+        return nestedTopology(input);
+    }
+    const topology = qualityRecord(input["topology"]);
+    if (topology["sourcePolicy"] !== sourcePolicyPath) {
+        invalidQualityInput("Quality coverage requires the accepted FMS source-policy mapping.");
+    }
+    return {
+        productionRoots: qualityStrings(input["productionRoots"]),
+        applicationRoots: qualityStrings(input["applicationRoots"]),
+        excludedRoots: qualityStrings(input["excludedRoots"]),
+        toolingFiles: boundedModules(input["modules"]).flatMap((module) => generatorPaths(module["generatedRoots"])),
+        modules: boundedModules(input["modules"]).map((module) => ({
+            root: qualityString(module["root"]), sourceRoot: qualityString(module["sourceRoot"]), testRoots: qualityStrings(module["testRoots"])
+        }))
+    };
+}
+function generatorPaths(value) {
+    if (value === undefined) {
+        return [];
+    }
+    if (!Array.isArray(value) || value.length > 5000) {
+        invalidQualityInput("Expected bounded generated provenance records.");
+    }
+    return value.map((entry) => qualityString(qualityRecord(entry)["generator"]));
+}
+function nativeChecks(value) {
+    if (!Array.isArray(value) || value.length > 1000) {
+        invalidQualityInput("Expected bounded native gate mappings.");
+    }
+    return value.map((entry) => {
+        const item = qualityRecord(entry);
+        return { boundaryId: qualityString(item["boundaryId"]), script: qualityString(item["script"]) };
+    });
+}
+//# sourceMappingURL=profile-input.js.map

package/dist/features/quality-coverage/adapters/profile-input.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"profile-input.js","sourceRoot":"","sources":["../../../../src/features/quality-coverage/adapters/profile-input.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,oBAAoB,EAAqD,MAAM,WAAW,CAAC;AAEpG,MAAM,UAAU,mBAAmB,CAAC,OAAe;IACjD,MAAM,IAAI,oBAAoB,CAAC,EAAE,IAAI,EAAE,yBAAyB,EAAE,OAAO,EAAE,KAAK,EAAE,iBAAiB,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC,CAAC;AAC3H,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,KAAc;IAC1C,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QAAC,mBAAmB,CAAC,uDAAuD,CAAC,CAAC;IAAC,CAAC;IAC1J,OAAO,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC;AACnD,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,KAAc;IAC1C,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,KAAK,CAAC,MAAM,GAAG,IAAI,EAAE,CAAC;QAAC,mBAAmB,CAAC,mEAAmE,CAAC,CAAC;IAAC,CAAC;IACzK,OAAO,KAAK,CAAC;AACf,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,KAAc;IAC3C,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,MAAM,GAAG,MAAM,EAAE,CAAC;QAAC,mBAAmB,CAAC,wDAAwD,CAAC,CAAC;IAAC,CAAC;IACtI,OAAO,KAAK,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC;AAClC,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,KAAc;IAC9C,MAAM,KAAK,GAAG,aAAa,CAAC,KAAK,CAAC,CAAC;IACnC,MAAM,OAAO,GAAG,aAAa,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC;IAChD,MAAM,gBAAgB,GAAG,cAAc,CAAC,KAAK,CAAC,kBAAkB,CAAC,CAAC,CAAC;IACnE,IAAI,gBAAgB,CAAC,MAAM,KAAK,CAAC,IAAI,IAAI,GAAG,CAAC,gBAAgB,CAAC,CAAC,IAAI,KAAK,gBAAgB,CAAC,MAAM,EAAE,CAAC;QAChG,mBAAmB,CAAC,mEAAmE,CAAC,CAAC;IAC3F,CAAC;IACD,OAAO;QACL,gBAAgB,EAAE,aAAa,CAAC,KAAK,CAAC,kBAAkB,CAAC,CAAC;QAC1D,qBAAqB,EAAE,aAAa,CAAC,KAAK,CAAC,uBAAuB,CAAC,CAAC;QACpE,kBAAkB,EAAE,aAAa,CAAC,KAAK,CAAC,oBAAoB,CAAC,CAAC;QAC9D,cAAc,EAAE,aAAa,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC;QACtD,gBAAgB;QAChB,GAAG,CAAC,KAAK,CAAC,cAAc,CAAC,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,YAAY,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC,EAAE,CAAC;QACrG,OAAO,EAAE,EAAE,IAAI,EAAE,aAAa,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,EAAE,IAAI,EAAE,aAAa,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,EAAE,KAAK,EAAE,aAAa,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,EAAE,KAAK,EAAE,aAAa,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,EAAE;KACxK,CAAC;AACJ,CAAC;AAED,SAAS,cAAc,CAAC,KAAc;IACpC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,KAAK,CAAC,MAAM,GAAG,IAAI,EAAE,CAAC;QACvE,mBAAmB,CAAC,yDAAyD,CAAC,CAAC;IACjF,CAAC;IACD,OAAO,KAAK,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC;AAClC,CAAC;AAED,SAAS,cAAc,CAAC,KAA8B;IACpD,MAAM,KAAK,GAAG,aAAa,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC;IAC5C,MAAM,QAAQ,GAAG,aAAa,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC;IAClD,MAAM,MAAM,GAAG,aAAa,CAAC,QAAQ,CAAC,gBAAgB,CAAC,CAAC,CAAC;IACzD,MAAM,OAAO,GAAG,cAAc,CAAC,KAAK,CAAC,mBAAmB,CAAC,CAAC,CAAC;IAC3D,MAAM,OAAO,GAAG,cAAc,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC;IAClD,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;QAC5B,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,YAAY,CAAC,KAAK,KAAK,CAAC,YAAY,CAAC,IAAI,MAAM,CAAC,YAAY,CAAC,KAAK,KAAK,CAAC,YAAY,CAAC,CAAC,EAAE,CAAC;YAC5H,mBAAmB,CAAC,gFAAgF,CAAC,CAAC;QACxG,CAAC;IACH,CAAC;IACD,OAAO;QACL,eAAe,EAAE,cAAc,CAAC,KAAK,CAAC,qBAAqB,CAAC,CAAC;QAC7D,gBAAgB,EAAE,cAAc,CAAC,QAAQ,CAAC,kBAAkB,CAAC,CAAC;QAC9D,aAAa,EAAE,cAAc,CAAC,QAAQ,CAAC,eAAe,CAAC,CAAC;QACxD,OAAO,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;YAChC,IAAI,EAAE,aAAa,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC,EAAE,UAAU,EAAE,aAAa,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC;YAC1F,SAAS,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,YAAY,CAAC,KAAK,MAAM,CAAC,YAAY,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,aAAa,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC;SACpI,CAAC,CAAC;KACJ,CAAC;AACJ,CAAC;AAED,iGAAiG;AACjG,MAAM,UAAU,kBAAkB,CAAC,KAAc,EAAE,gBAAwB;IACzE,MAAM,KAAK,GAAG,aAAa,CAAC,KAAK,CAAC,CAAC;IACnC,MAAM,MAAM,GAAG,KAAK,CAAC,WAAW,CAAC,KAAK,SAAS,CAAC;IAChD,MAAM,QAAQ,GAAG,aAAa,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC;IAChF,IAAI,KAAK,CAAC,eAAe,CAAC,KAAK,CAAC,IAAI,QAAQ,CAAC,IAAI,CAAC,KAAK,qCAAqC,IAAI,QAAQ,CAAC,SAAS,CAAC,KAAK,IAAI,EAAE,CAAC;QAC7H,mBAAmB,CAAC,yDAAyD,CAAC,CAAC;IACjF,CAAC;IACD,IAAI,MAAM,EAAE,CAAC;QAAC,OAAO,cAAc,CAAC,KAAK,CAAC,CAAC;IAAC,CAAC;IAC7C,MAAM,QAAQ,GAAG,aAAa,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC;IAClD,IAAI,QAAQ,CAAC,cAAc,CAAC,KAAK,gBAAgB,EAAE,CAAC;QAClD,mBAAmB,CAAC,mEAAmE,CAAC,CAAC;IAC3F,CAAC;IACD,OAAO;QACL,eAAe,EAAE,cAAc,CAAC,KAAK,CAAC,iBAAiB,CAAC,CAAC;QACzD,gBAAgB,EAAE,cAAc,CAAC,KAAK,CAAC,kBAAkB,CAAC,CAAC;QAC3D,aAAa,EAAE,cAAc,CAAC,KAAK,CAAC,eAAe,CAAC,CAAC;QACrD,YAAY,EAAE,cAAc,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,cAAc,CAAC,MAAM,CAAC,gBAAgB,CAAC,CAAC,CAAC;QAC5G,OAAO,EAAE,cAAc,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;YACzD,IAAI,EAAE,aAAa,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,EAAE,UAAU,EAAE,aAAa,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC,EAAE,SAAS,EAAE,cAAc,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;SACrI,CAAC,CAAC;KACJ,CAAC;AACJ,CAAC;AAED,SAAS,cAAc,CAAC,KAAc;IACpC,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;QAAC,OAAO,EAAE,CAAC;IAAC,CAAC;IACvC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,MAAM,GAAG,IAAI,EAAE,CAAC;QAAC,mBAAmB,CAAC,gDAAgD,CAAC,CAAC;IAAC,CAAC;IAC5H,OAAO,KAAK,CAAC,GAAG,CAAC,CAAC,KAAc,EAAE,EAAE,CAAC,aAAa,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC;AACzF,CAAC;AAED,SAAS,YAAY,CAAC,KAAc;IAClC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,MAAM,GAAG,IAAI,EAAE,CAAC;QAAC,mBAAmB,CAAC,wCAAwC,CAAC,CAAC;IAAC,CAAC;IACpH,OAAO,KAAK,CAAC,GAAG,CAAC,CAAC,KAAc,EAAE,EAAE;QAClC,MAAM,IAAI,GAAG,aAAa,CAAC,KAAK,CAAC,CAAC;QAClC,OAAO,EAAE,UAAU,EAAE,aAAa,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,EAAE,MAAM,EAAE,aAAa,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC;IAClG,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/features/quality-coverage/adapters/protected-config.d.ts

@@ -0,0 +1,15 @@
+import type { ProtectedSetting, RequiredProtectedSetting } from "../api.js";
+interface OverrideScope {
+    readonly files: readonly string[];
+    readonly production: readonly string[];
+    readonly tests: readonly string[];
+}
+type DataReader = (root: string, path: string) => Promise<unknown>;
+/** A bounded validation of the supported JSON form, never a general effective-config interpreter. */
+export declare function inspectProtectedConfig(root: string, lintPath: string, read: DataReader, scope: OverrideScope): Promise<{
+    readonly requiredSettings: readonly string[];
+    readonly requiredSettingObservations: readonly RequiredProtectedSetting[];
+    readonly settings: readonly ProtectedSetting[];
+}>;
+export {};
+//# sourceMappingURL=protected-config.d.ts.map

package/dist/features/quality-coverage/adapters/protected-config.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"protected-config.d.ts","sourceRoot":"","sources":["../../../../src/features/quality-coverage/adapters/protected-config.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,gBAAgB,EAAE,wBAAwB,EAAE,MAAM,WAAW,CAAC;AAG5E,UAAU,aAAa;IACrB,QAAQ,CAAC,KAAK,EAAE,SAAS,MAAM,EAAE,CAAC;IAClC,QAAQ,CAAC,UAAU,EAAE,SAAS,MAAM,EAAE,CAAC;IACvC,QAAQ,CAAC,KAAK,EAAE,SAAS,MAAM,EAAE,CAAC;CACnC;AAeD,KAAK,UAAU,GAAG,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;AA+EnE,qGAAqG;AACrG,wBAAsB,sBAAsB,CAAC,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,UAAU,EAAE,KAAK,EAAE,aAAa,GAAG,OAAO,CAAC;IAC5H,QAAQ,CAAC,gBAAgB,EAAE,SAAS,MAAM,EAAE,CAAC;IAC7C,QAAQ,CAAC,2BAA2B,EAAE,SAAS,wBAAwB,EAAE,CAAC;IAC1E,QAAQ,CAAC,QAAQ,EAAE,SAAS,gBAAgB,EAAE,CAAC;CAChD,CAAC,CAkED"}

package/dist/features/quality-coverage/adapters/protected-config.js

@@ -0,0 +1,200 @@
+import { createRequire } from "node:module";
+import { dirname, isAbsolute, join, posix, relative, sep } from "node:path";
+import { realpath } from "node:fs/promises";
+import { fileURLToPath } from "node:url";
+import { invalidQualityInput, qualityRecord, qualityStrings } from "./profile-input.js";
+function isTestOnlyOverride(override, scope) {
+    const patterns = qualityStrings(override["files"]);
+    const excluded = override["excludedFiles"] === undefined ? [] : qualityStrings(override["excludedFiles"]);
+    if (patterns.length === 0) {
+        invalidQualityInput("Overrides require nonempty file selectors.");
+    }
+    const selected = scope.files.filter((path) => patterns.some((pattern) => posix.matchesGlob(path, pattern)) &&
+        !excluded.some((pattern) => posix.matchesGlob(path, pattern)));
+    if (selected.length === 0) {
+        invalidQualityInput("Override selector classification has no observed files.");
+    }
+    if (selected.some((path) => !scope.production.includes(path) && !scope.tests.includes(path))) {
+        invalidQualityInput("Override selector includes files without production or test classification.");
+    }
+    return selected.every((path) => scope.tests.includes(path));
+}
+function requirement(path, group, name, expected, comparison = "equal") {
+    return { observationId: `${path}#${group}#${name}`, path, name, expected, comparison };
+}
+function severity(value) {
+    const input = Array.isArray(value) ? value[0] : value;
+    return input === "error" || input === "deny" || input === 2 ? "error" : String(input);
+}
+function ceiling(value) {
+    if (!Array.isArray(value)) {
+        return undefined;
+    }
+    const option = value[1];
+    if (typeof option === "number") {
+        return option;
+    }
+    if (typeof option === "object" && option !== null && "max" in option && typeof option.max === "number") {
+        return option.max;
+    }
+    return undefined;
+}
+async function protectedRules(read) {
+    const root = fileURLToPath(new URL("../../../../", import.meta.url));
+    const typed = qualityRecord(await read(root, "presets/oxlint/type-aware.json"));
+    const maintainability = qualityRecord(await read(root, "presets/oxlint/maintainability.json"));
+    return new Map(Object.entries({ ...qualityRecord(typed["rules"]), ...qualityRecord(maintainability["rules"]) })
+        .filter(([, value]) => severity(value) === "error"));
+}
+async function configPath(root, physicalRoot, from, reference) {
+    if (!reference.endsWith(".json") || isAbsolute(reference)) {
+        invalidQualityInput("V1 quality coverage accepts contained JSON Oxlint configuration only.");
+    }
+    let path;
+    try {
+        path = await realpath(createRequire(join(root, dirname(from), "package.json")).resolve(reference));
+    }
+    catch {
+        invalidQualityInput("An Oxlint extends configuration is missing or unsupported.");
+    }
+    const suffix = relative(physicalRoot, path);
+    if (suffix === ".." || suffix.startsWith(`..${sep}`) || isAbsolute(suffix)) {
+        invalidQualityInput("Oxlint configuration escapes the consumer root.");
+    }
+    return suffix.split(sep).join("/");
+}
+function requiredRuleAssignments(path, group, values, required, testOnly) {
+    const assignments = [];
+    for (const [name, expected] of required) {
+        const suffix = name.split("/").at(-1);
+        if (Object.keys(values).some((key) => key !== name && key.split("/").at(-1) === suffix)) {
+            invalidQualityInput(`Use the canonical protected rule identifier: ${name}.`);
+        }
+        if (!Object.hasOwn(values, name)) {
+            continue;
+        }
+        assignments.push(requirement(path, group, name, "error"));
+        const actual = values[name];
+        const requiredMaximum = ceiling(expected);
+        const maximum = testOnly && requiredMaximum !== undefined ? ceiling(actual) ?? requiredMaximum : requiredMaximum;
+        if (maximum !== undefined) {
+            assignments.push(requirement(path, group, `${name}:ceiling`, maximum, "ceiling"));
+        }
+        else if (Array.isArray(actual) && actual.length > 1) {
+            invalidQualityInput(`Protected rule options require separate adapter qualification: ${name}.`);
+        }
+    }
+    return assignments;
+}
+function observeRuleAssignments(assignments, values) {
+    return assignments.map((entry) => ({
+        ...entry,
+        actual: entry.comparison === "ceiling"
+            ? ceiling(values[entry.name.slice(0, -":ceiling".length)]) ?? "missing numeric ceiling"
+            : severity(values[entry.name])
+    }));
+}
+function retainStrongerCeilings(rules, required) {
+    for (const [name, expected] of required) {
+        const previous = ceiling(expected);
+        const current = ceiling(rules[name]);
+        if (previous !== undefined && current !== undefined && Number.isFinite(current) && current >= 0 && current < previous) {
+            required.set(name, rules[name]);
+        }
+    }
+}
+/** A bounded validation of the supported JSON form, never a general effective-config interpreter. */
+export async function inspectProtectedConfig(root, lintPath, read, scope) {
+    const physicalRoot = await realpath(root);
+    const required = new Map(await protectedRules(read));
+    const requiredSettings = ["typeAware", "respectEslintDisableDirectives", "reportUnusedDisableDirectives", ...[...required].flatMap(([name, value]) => ceiling(value) === undefined ? [name] : [name, `${name}:ceiling`])];
+    const seen = new Set();
+    const active = new Set();
+    const assigned = new Set();
+    const requiredSettingObservations = [];
+    const output = [];
+    function inspectAssignments(path, group, values, testOnly = false) {
+        const assignments = requiredRuleAssignments(path, group, values, required, testOnly);
+        requiredSettingObservations.push(...assignments);
+        output.push(...observeRuleAssignments(assignments, values));
+    }
+    function inspectOption(path, group, name, expected, actual) {
+        const entry = requirement(path, group, name, expected);
+        requiredSettingObservations.push(entry);
+        output.push({ ...entry, actual });
+    }
+    let typed = false;
+    let rootOptions = {};
+    async function visit(path) {
+        if (active.has(path)) {
+            invalidQualityInput("Oxlint extends contains a cycle.");
+        }
+        if (seen.has(path)) {
+            return;
+        }
+        if (seen.size >= 32) {
+            invalidQualityInput("Oxlint configuration exceeds the qualified JSON closure limit.");
+        }
+        seen.add(path);
+        active.add(path);
+        const value = qualityRecord(await read(root, path));
+        if (value["jsPlugins"] !== undefined) {
+            invalidQualityInput("Executable Oxlint plugins are outside this qualified configuration form.");
+        }
+        for (const reference of value["extends"] === undefined ? [] : qualityStrings(value["extends"])) {
+            await visit(await configPath(root, physicalRoot, path, reference));
+        }
+        const rules = value["rules"] === undefined ? {} : qualityRecord(value["rules"]);
+        for (const name of Object.keys(rules)) {
+            assigned.add(name);
+        }
+        inspectAssignments(path, "rules", rules);
+        retainStrongerCeilings(rules, required);
+        if (value["options"] !== undefined) {
+            const options = qualityRecord(value["options"]);
+            if (path === lintPath) {
+                rootOptions = options;
+            }
+            if (options["typeAware"] !== undefined) {
+                if (typed) {
+                    inspectOption(path, "options", "typeAware", "true", scalarSetting(options["typeAware"]));
+                }
+                typed = options["typeAware"] === true;
+            }
+        }
+        const overrides = value["overrides"];
+        if (overrides !== undefined) {
+            if (!Array.isArray(overrides) || overrides.length > 1000) {
+                invalidQualityInput("Oxlint overrides must be a bounded data list.");
+            }
+            for (const [index, entry] of overrides.entries()) {
+                const override = qualityRecord(entry);
+                if (Object.keys(override).some((key) => !["files", "excludedFiles", "rules"].includes(key))) {
+                    invalidQualityInput("V1 overrides support file selectors and rules only.");
+                }
+                const testOnly = isTestOnlyOverride(override, scope);
+                inspectAssignments(path, `override:${index}`, qualityRecord(override["rules"]), testOnly);
+            }
+        }
+        active.delete(path);
+    }
+    await visit(lintPath);
+    for (const [name, expected] of [["respectEslintDisableDirectives", "false"], ["reportUnusedDisableDirectives", "error"]]) {
+        const value = rootOptions[name];
+        inspectOption(lintPath, "options", name, expected, value === undefined ? "not configured" : scalarSetting(value));
+    }
+    inspectOption(lintPath, "effective", "typeAware", "true", String(typed));
+    for (const name of required.keys()) {
+        if (!assigned.has(name)) {
+            inspectOption(lintPath, "effective", name, "error", "not configured");
+        }
+    }
+    return { requiredSettings, requiredSettingObservations, settings: output };
+}
+function scalarSetting(value) {
+    if (typeof value === "string" || typeof value === "boolean" || typeof value === "number") {
+        return String(value);
+    }
+    invalidQualityInput("Protected options must have scalar values.");
+}
+//# sourceMappingURL=protected-config.js.map