@cejel/cejel 0.6.10 → 0.6.11

package/dist/{chunk-YHJ7ICL4.js → chunk-4YOIR3E6.js}

@@ -5042,7 +5042,9 @@ function collectB3CiDisciplineEvidence(repoPath, repoFiles, mono, useV27FalseAss
       uncreditedCiWorkflows(repoPath, workflows, inventory),
       publishingDetails,
       checkedPublishingDetails,
-      checkReading(repoPath, inventory)
+      // Eighth pass (#659): v17's test-file list, the one A1 counts, read only when a runner is
+      // given a positional word (testPathReader reads it once).
+      checkReading(repoPath, inventory, () => findConcreteTestFiles(repoPath, repoFiles, WITAN_RUBRIC_VERSION_V17))
     );
   }) : /* @__PURE__ */ new Map();
   const uncreditedRootWorkflows = useV27FalseAssuranceClosure && mono ? withContentReadSignals(
@@ -6174,14 +6176,16 @@ function firstCheckLineByJob(contents, isGuardLine, reading, jobs, items, notCre
   const first = /* @__PURE__ */ new Map();
   const runSteps = githubActionsRunSteps(contents, isGuardLine);
   const environment = checkPathEnvironmentProblems(contents, jobs, items, runSteps);
+  const uvSyncedJobs = /* @__PURE__ */ new Set();
   for (const step of runSteps) {
+    const uvProjectSynced = uvSyncedJobs.has(step.job);
+    const stepCommands = joinShellContinuationLines(step.lines.map(({ text }) => text)).flatMap((text) => shellCommands(text));
+    if (stepCommands.some(runsProjectUvSync)) uvSyncedJobs.add(step.job);
     if (step.conditional || step.job === -1 || !step.ownKey) continue;
-    const commands = joinShellContinuationLines(step.lines.map(({ text }) => text)).flatMap(
-      (text) => shellCommands(text).map((words) => ({ words }))
-    );
+    const commands = stepCommands.map((words) => ({ words }));
     if (stepShellIsConditional(step, commands)) continue;
     const changesDirectory = commands.some(({ words }) => ["cd", "pushd"].includes(commandHead(words).word));
-    const stepReading = changesDirectory ? { ...reading, ...ROOT_FILES_UNREAD } : reading;
+    const stepReading = { ...changesDirectory ? { ...reading, ...ROOT_FILES_UNREAD } : reading, uvProjectSynced };
     const isCheck = (words) => isCheckCommand(words, stepReading);
     for (const { words } of commands) {
       const reason = unrecognisedCheckReason(words, stepReading) ?? checkLineReason(words, stepReading) ?? buildLineReason(words, stepReading) ?? seventhPassReason(words, stepReading);
@@ -6305,18 +6309,27 @@ var ROOT_FILES_UNREAD = {
   // Seventh pass (#641, item D): an install, and any npm, pnpm, yarn or bun command, reads the
   // manifest and configuration of the directory it runs in, which the root readings do not describe.
   installRunsNoProjectScript: false,
-  packageManagerConfigPlain: false
+  packageManagerConfigPlain: false,
+  // Eighth pass (#660): uv reads the pyproject.toml at or above the directory it runs in.
+  uvProject: "unread"
 };
 var UNREAD_CHECK_READING = {
   ...ROOT_FILES_UNREAD,
   pathMayExist: () => true,
-  pythonModuleMayExist: () => true
+  pythonModuleMayExist: () => true,
+  testPath: () => "unread",
+  uvProjectSynced: false
 };
-function checkReading(root, inventory) {
+function checkReading(root, inventory, testFiles) {
   const tsconfig = rootTsconfigReading(root, inventory);
   const pythonModuleMayExist = pythonModuleReader(inventory);
+  const testPath = testPathReader(testFiles);
+  const uvProject = uvProjectReading(root, inventory);
   const tscAdmitted = Object.assign((words) => tscRunWritesNothingRead(words, tsconfig, inventory), {
-    moduleMayExist: (name) => pythonModuleMayExist(name, true)
+    moduleMayExist: (name) => pythonModuleMayExist(name, true),
+    // Eighth pass (#659, #660): a script or recipe runs from the root.
+    testPath: (word, kind) => testPath(word, kind, true),
+    uvRunBuildsProject: uvProject !== "no-build"
   });
   const testScript = rootTestScriptReading(root, inventory, tscAdmitted);
   const build = rootBuildScriptReading(root, inventory, tscAdmitted);
@@ -6337,7 +6350,10 @@ function checkReading(root, inventory) {
     pathMayExist: (name, fromRoot) => fromRoot ? inventory.entriesLower.has(name.toLowerCase()) : inventory.pathPartsLower.has(name.toLowerCase()),
     installRunsNoProjectScript: rootInstallRunsNoProjectScript(root, inventory),
     packageManagerConfigPlain: packageManagerConfigIsPlain(root, inventory),
-    pythonModuleMayExist
+    pythonModuleMayExist,
+    testPath,
+    uvProject,
+    uvProjectSynced: false
   };
 }
 var PYTHON_MODULE_FILE_PATTERN = /\.(?:py|pyc|pyw|so|pyd)$/;
@@ -7150,7 +7166,7 @@ function commandsAreAndChain(text) {
   const list = shellCommandList(text);
   return list.length > 0 && list.every(({ words, after }) => !commandIsBackgrounded(words) && (after.length === 0 || after.length === 1 && after[0] === "&&"));
 }
-function peelCommandLaunchers(input) {
+function peelCommandLaunchers(input, admission) {
   const head = commandHead(input);
   if (head.inverted || commandIsBackgrounded(input)) return null;
   let words = [head.word, ...input.slice(head.argsFrom)];
@@ -7166,6 +7182,7 @@ function peelCommandLaunchers(input) {
     if (first === "env" || first === "cross-env" || first === "npx" || first === "pnpx" || first === "bunx") next = 1;
     else if (first === "pnpm" && second === "exec" || first === "bundle" && second === "exec") next = 2;
     else if (SCRIPT_ALIAS_TOOLS.has(first) && second === "run") return null;
+    else if (first === "uv" && second === "run" && admission.uvRunBuildsProject) return null;
     else if (CHECK_COMMAND_RUN_LAUNCHERS.has(first) && second === "run") next = 2;
     else if (first === "coverage" && second === "run") {
       words = ["python", ...words.slice(2)];
@@ -7189,9 +7206,9 @@ function scriptCommandKind(words, tscAdmitted) {
   const python = (first === "python" || first === "python3") && second === "-m";
   if (python && tscAdmitted.moduleMayExist(third)) return "other";
   if (KNOWN_TEST_RUNNER_WORDS.has(first) || KNOWN_TEST_RUNNER_SUBCOMMANDS.get(first)?.includes(second)) {
-    return checkFormAdmits(words) === true ? "runner" : "other";
+    return checkFormAdmits(words, tscAdmitted.testPath) === true ? "runner" : "other";
   }
-  if (python && KNOWN_TEST_RUNNER_MODULES.has(third)) return checkFormAdmits(words.slice(2)) === true ? "runner" : "other";
+  if (python && KNOWN_TEST_RUNNER_MODULES.has(third)) return checkFormAdmits(words.slice(2), tscAdmitted.testPath) === true ? "runner" : "other";
   if (first === "tsc") return tscAdmitted(words) ? "check" : "other";
   if (PRE_RUNNER_CHECK_WORDS.has(first) || python && PRE_RUNNER_CHECK_WORDS.has(third)) return "check";
   return "other";
@@ -7208,7 +7225,7 @@ function packageScriptRun(words, scripts) {
   if (words.length === 2 && tool === "yarn" && Object.hasOwn(scripts, first)) return first;
   return void 0;
 }
-function packageScriptCommands(scripts, name) {
+function packageScriptCommands(scripts, name, admission) {
   const commands = [];
   const visit = (script, depth, stack) => {
     if (depth > SCRIPT_EXPANSION_MAX_DEPTH || stack.has(script) || !Object.hasOwn(scripts, script)) return false;
@@ -7218,7 +7235,7 @@ function packageScriptCommands(scripts, name) {
       const body = scripts[part];
       if (typeof body !== "string" || !commandsAreAndChain(body)) return false;
       for (const words of shellCommands(body)) {
-        const peeled = peelCommandLaunchers(words);
+        const peeled = peelCommandLaunchers(words, admission);
         const run = peeled === null ? void 0 : packageScriptRun(peeled, scripts);
         if (run !== void 0) {
           if (!visit(run, depth + 1, inner)) return false;
@@ -7240,7 +7257,7 @@ function rootPackageScripts(root, inventory) {
 function rootTestScriptReading(root, inventory, tscAdmitted) {
   const scripts = rootPackageScripts(root, inventory);
   if (scripts === void 0 || typeof scripts.test !== "string") return "unread";
-  const commands = packageScriptCommands(scripts, "test");
+  const commands = packageScriptCommands(scripts, "test", tscAdmitted);
   const kinds = (commands ?? []).map((words) => words === null ? "other" : scriptCommandKind(words, tscAdmitted));
   return commands !== void 0 && kindsRunKnownRunner(kinds) ? "runner" : "unrecognised";
 }
@@ -7331,7 +7348,7 @@ function makeTargetCommandKinds(rules, target, mayBeUpToDate, tscAdmitted) {
       if (ignored || !commandsAreAndChain(text)) kinds.push("other");
       else {
         for (const words of shellCommands(text)) {
-          const peeled = peelCommandLaunchers(words);
+          const peeled = peelCommandLaunchers(words, tscAdmitted);
           kinds.push(peeled === null ? "other" : scriptCommandKind(peeled, tscAdmitted));
         }
       }
@@ -7365,7 +7382,7 @@ function rootMakeTargetReadings(root, inventory, tscAdmitted) {
 function rootBuildScriptReading(root, inventory, tscAdmitted) {
   const scripts = rootPackageScripts(root, inventory);
   if (scripts === void 0 || !inventory.scanned.has("tsconfig.json")) return "other";
-  const commands = packageScriptCommands(scripts, "build");
+  const commands = packageScriptCommands(scripts, "build", tscAdmitted);
   const runsOnlyTsc = commands !== void 0 && commands.length > 0 && commands.every((words) => words !== null && words[0] === "tsc" && !words.includes("--if-present"));
   if (!runsOnlyTsc) return "other";
   return commands.every((words) => words !== null && tscAdmitted(words)) ? "admitted" : "output-unread";
@@ -7439,6 +7456,7 @@ function isCheckCommand(input, reading, assignmentsRead = true, pathsRead = true
   if (read === void 0) return false;
   if (read.packageManager && !reading.packageManagerConfigPlain) return false;
   if (assignmentsRead && read.assignments.some((key) => !isInertEnvironmentKey(key))) return false;
+  if (read.uv !== void 0 && uvRunProblem(read.uv, reading) !== void 0) return false;
   let own = read.words;
   if (read.alias !== void 0) {
     const alias = reading.scriptAlias(read.alias, read.words);
@@ -7458,7 +7476,7 @@ function isCheckCommand(input, reading, assignmentsRead = true, pathsRead = true
   if (NPM_FAMILY_TEST_SCRIPT_PATTERN.test(text)) {
     if (!reading.testScriptRuns) return false;
     if (packageTestArgumentsProblem(words, reading) !== void 0) return false;
-  } else if (checkFormAdmits(words) !== true) {
+  } else if (checkFormAdmits(words, stepTestPath(reading)) !== true) {
     return false;
   }
   return verificationCommandPatterns().some((pattern) => {
@@ -7531,9 +7549,86 @@ function checkCommandWords(input) {
   } else if (CHECK_COMMAND_RUN_LAUNCHERS.has(launcher) && words[start + 1] === "run") {
     start += 2;
     if (SCRIPT_ALIAS_TOOLS.has(launcher)) return { words: words.slice(start), packageManager, assignments, alias: launcher };
+    if (launcher === "uv") {
+      let noProject = false;
+      let noSync = false;
+      let unread;
+      for (; start < words.length; start += 1) {
+        const word = words[start] ?? "";
+        const option = word.split("=")[0] ?? word;
+        if (word === "--no-project") noProject = true;
+        else if (word === "--no-sync") noSync = true;
+        else if (UV_RUN_PROJECT_OPTIONS.has(option)) {
+          unread = option;
+          if (!word.includes("=")) start += 1;
+        } else break;
+      }
+      return { words: words.slice(start), packageManager, assignments, uv: { noProject, noSync, ...unread === void 0 ? {} : { unread } } };
+    }
   }
   return { words: words.slice(start), packageManager, assignments };
 }
+var UV_RUN_PROJECT_OPTIONS = /* @__PURE__ */ new Set(["--package", "--project", "--directory"]);
+var UV_PROJECT_ADMITTED_KEYS = /* @__PURE__ */ new Set(["package", "dev-dependencies", "required-version", "index"]);
+function readUvProject(text) {
+  let buildSystem = false;
+  let packaged;
+  const lines = text.split(/\r?\n/);
+  let table = [];
+  const uvKeyUnread = (path) => path[0] === "tool" && (path.length === 1 || path[1] === "uv" && (path.length === 2 || !UV_PROJECT_ADMITTED_KEYS.has(path[2] ?? "")));
+  for (let index = 0; index < lines.length; index += 1) {
+    const trimmed = (lines[index] ?? "").trim();
+    if (trimmed === "" || trimmed.startsWith("#")) continue;
+    const header = /^\[\[?([^\]]*)\]\]?/.exec(trimmed);
+    if (header) {
+      if ((header[1] ?? "").includes("\\")) return "unread";
+      table = tomlKeyPath(header[1] ?? "");
+      if (table[0] === "build-system") buildSystem = true;
+      if (table[0] === "tool" && table[1] === "uv" && table.length > 2 && !UV_PROJECT_ADMITTED_KEYS.has(table[2] ?? "")) return "unread";
+      continue;
+    }
+    const equals = tomlKeyEnd(trimmed);
+    if (equals === -1) continue;
+    const scanner = new TomlValueScanner();
+    scanner.feed(trimmed.slice(equals + 1));
+    while (!scanner.complete() && index + 1 < lines.length) {
+      index += 1;
+      scanner.feed(`
+${lines[index] ?? ""}`);
+    }
+    if (trimmed.slice(0, equals).includes("\\")) return "unread";
+    const path = [...table, ...tomlKeyPath(trimmed.slice(0, equals))];
+    if (path[0] === "build-system") buildSystem = true;
+    if (uvKeyUnread(path)) return "unread";
+    if (path[0] === "tool" && path[1] === "uv" && path[2] === "package") {
+      const code = scanner.code().trim();
+      if (path.length !== 3 || code !== "true" && code !== "false") return "unread";
+      packaged = code === "true";
+    }
+  }
+  if (packaged === false) return "no-build";
+  return packaged === true || buildSystem ? "builds" : "no-build";
+}
+function uvProjectReading(root, inventory) {
+  if (inventory.hasUvConfiguration || !inventory.scanned.has("pyproject.toml")) return "unread";
+  const text = readRepoText(join2(root, "pyproject.toml"), "utf8");
+  return text === void 0 ? "unread" : readUvProject(text);
+}
+function uvRunProblem(uv, reading) {
+  if (uv.unread !== void 0) return UV_RUN_UNREAD_REASON;
+  if (uv.noProject) return void 0;
+  if (reading.uvProject === "unread") return UV_RUN_UNREAD_REASON;
+  if (reading.uvProject === "no-build") return void 0;
+  if (!uv.noSync) return UV_INSTALLS_PROJECT_REASON;
+  return reading.uvProjectSynced ? UV_SYNCED_PROJECT_REASON : void 0;
+}
+function runsProjectUvSync(input) {
+  const head = commandHead(input);
+  const words = [head.word, ...input.slice(head.argsFrom)];
+  let start = 0;
+  while (start < words.length && SHELL_ASSIGNMENT_PATTERN.test(words[start] ?? "")) start += 1;
+  return words[start] === "uv" && words[start + 1] === "sync" && !words.includes("--no-install-project");
+}
 var NPM_TEST_KEPT_WORDS = /* @__PURE__ */ new Set(["--silent", "-s"]);
 var PACKAGE_SELECTING_FLAGS = /* @__PURE__ */ new Set([
   "--prefix",
@@ -7569,7 +7664,12 @@ function packageTestArgumentsProblem(words, reading) {
   if (last === void 0) return UNREAD_TEST_ARGUMENT_REASON;
   const runner = [...last, ...passed];
   const python = (runner[0] === "python" || runner[0] === "python3") && runner[1] === "-m";
-  return checkFormAdmits(python ? runner.slice(2) : runner) === true ? void 0 : RUNNER_ARGUMENT_REASON;
+  const admitted = checkFormAdmits(python ? runner.slice(2) : runner, stepTestPath(reading));
+  if (typeof admitted === "object") return positionalReason(admitted);
+  return admitted === true ? void 0 : RUNNER_ARGUMENT_REASON;
+}
+function stepTestPath(reading) {
+  return (word, kind) => reading.testPath(word, kind, reading.pipNamesFromRoot);
 }
 function checkLineReason(input, reading) {
   if (commandIsBackgrounded(input)) return void 0;
@@ -7627,6 +7727,10 @@ function seventhPassReason(input, reading) {
   if (read === void 0 || read.packageManager && !reading.packageManagerConfigPlain) return void 0;
   if (read.assignments.some((key) => !isInertEnvironmentKey(key))) return void 0;
   let words = read.words;
+  if (read.uv !== void 0) {
+    const problem = uvRunProblem(read.uv, reading);
+    if (problem !== void 0) return words.length > 0 && !isPathCommandWord(words[0] ?? "") && namesCheckAtStart(words) ? problem : void 0;
+  }
   if (read.alias !== void 0) {
     const alias = reading.scriptAlias(read.alias, words);
     if (alias.kind === "script") return alias.reading === "runner" ? void 0 : SCRIPT_ALIAS_SCRIPT_REASON(read.alias, alias.name);
@@ -7648,7 +7752,9 @@ function seventhPassReason(input, reading) {
   const first = (words[0] ?? "").toLowerCase();
   if (first === "make" || LINT_OR_FORMAT_COMMANDS.has(first) || NPM_FAMILY_TEST_SCRIPT_PATTERN.test(words.join(" "))) return void 0;
   if (words.some((word) => REPORT_ONLY_FLAGS.has(word))) return void 0;
-  return checkFormAdmits(words) === false ? RUNNER_ARGUMENT_REASON : void 0;
+  const admitted = checkFormAdmits(words, stepTestPath(reading));
+  if (typeof admitted === "object") return positionalReason(admitted);
+  return admitted === false ? RUNNER_ARGUMENT_REASON : void 0;
 }
 var JUST_RECIPE_HEADER_PATTERN = /^@?([A-Za-z_][A-Za-z0-9_-]*)[ \t]*:(?!=)(.*)$/;
 var JUST_NAME_PATTERN = /^[A-Za-z_][A-Za-z0-9_-]*$/;
@@ -7711,7 +7817,7 @@ function rootJustRecipeReader(root, inventory, tscAdmitted) {
         }
         if (ignored || !commandsAreAndChain(text)) kinds.push("other");
         else for (const words of shellCommands(text)) {
-          const peeled = peelCommandLaunchers(words);
+          const peeled = peelCommandLaunchers(words, tscAdmitted);
           kinds.push(peeled === null ? "other" : scriptCommandKind(peeled, tscAdmitted));
         }
         if (kinds.length > SCRIPT_EXPANSION_MAX_COMMANDS) return false;
@@ -7777,7 +7883,7 @@ function rootToxReading(root, inventory, tscAdmitted) {
     for (const line of commands.split("\n").map((entry) => entry.trim()).filter((entry) => entry !== "")) {
       if (line.startsWith("-") || line.startsWith("!") || /[|&;<>$`()]/.test(line)) kinds.push("other");
       else {
-        const peeled = peelCommandLaunchers(shellWords(line));
+        const peeled = peelCommandLaunchers(shellWords(line), tscAdmitted);
         kinds.push(peeled === null ? "other" : scriptCommandKind(peeled, tscAdmitted));
       }
       if (kinds.length > SCRIPT_EXPANSION_MAX_COMMANDS) return false;
@@ -7802,7 +7908,11 @@ var SCRIPT_ALIAS_TOOLS = /* @__PURE__ */ new Set(["pdm", "hatch", "pipenv"]);
 var PDM_RUN_HOOKS = ["pre_run", "post_run", "pre_script", "post_script", "_"];
 var HATCH_UNREAD_SETTING_PATTERN = /env-vars|pre-install-commands|post-install-commands/;
 var HATCH_ENV_ADMITTED_OPTIONS = /* @__PURE__ */ new Set(["skip-install", "description", "dependencies", "extra-dependencies"]);
-var HATCH_INSTALLS_PROJECT_REASON = "the check runs hatch run in an environment that does not set skip-install, so hatch first installs the project, running its build code";
+var PROJECT_INSTALL_REASON = (runs, tool) => `the check runs ${runs}, so ${tool} first installs the project, running its build code`;
+var HATCH_INSTALLS_PROJECT_REASON = PROJECT_INSTALL_REASON("hatch run in an environment that does not set skip-install", "hatch");
+var UV_INSTALLS_PROJECT_REASON = PROJECT_INSTALL_REASON("uv run in a project uv builds", "uv");
+var UV_SYNCED_PROJECT_REASON = PROJECT_INSTALL_REASON("uv run --no-sync after a uv sync of a project uv builds", "uv");
+var UV_RUN_UNREAD_REASON = CONFIGURATION_UNREAD_REASON("uv run");
 function readHatchSkipInstall(fileSet, readText, isIndexName) {
   const skip = /* @__PURE__ */ new Map();
   for (const [file, prefix] of [["hatch.toml", []], ["pyproject.toml", ["tool", "hatch"]]]) {
@@ -7895,7 +8005,7 @@ function scriptAliasBodyKinds(text, shell, tscAdmitted) {
   if (shell ? !commandsAreAndChain(text) : /[|&;<>$`(){}\\\r\n]/.test(text)) return ["other"];
   const commands = shell ? shellCommands(text) : [shellWords(text)];
   return commands.map((words) => {
-    const peeled = peelCommandLaunchers(words);
+    const peeled = peelCommandLaunchers(words, tscAdmitted);
     return peeled === null ? "other" : scriptCommandKind(peeled, tscAdmitted);
   });
 }
@@ -8048,13 +8158,200 @@ var CHECK_FORMS = new Map([
   ["pyright", [checkForm([], ["--warnings"], ["-p", "--project", "--pythonversion"])]],
   ...["ava", "uvu", "tap", "tape", "jasmine", "qunit", "lab", "ts-mocha"].map((runner) => [runner, [PLAIN_RUNNER_FORM]])
 ]);
-function checkFormAdmits(words) {
+var POSITIONAL_READINGS = /* @__PURE__ */ new Map([
+  ["pytest", "path"],
+  ["mocha", "path"],
+  ["node", "path"],
+  ["tsx", "path"],
+  ["deno", "path"],
+  ["rspec", "path"],
+  ["phpunit", "path"],
+  ["dotnet", "path"],
+  ["ava", "path"],
+  ["tap", "path"],
+  ["tape", "path"],
+  ["jasmine", "path"],
+  ["qunit", "path"],
+  ["lab", "path"],
+  ["ts-mocha", "path"],
+  ["go", "go"],
+  ["unittest", "module"],
+  ["uvu", "uvu"]
+]);
+var UNRESOLVED_PATH_WORD_PATTERN = /[$`'"{}\\[\]]|^~/;
+var GLOB_WORD_PATTERN = /[*?]/;
+var TEST_PATH_GLOB_BUDGET = 2e6;
+function repositoryRelativePath(word) {
+  if (word.startsWith("/")) return null;
+  const parts = [];
+  for (const part of word.split("/")) {
+    if (part === "" || part === ".") continue;
+    if (part === "..") {
+      if (parts.length === 0) return null;
+      parts.pop();
+    } else parts.push(part);
+  }
+  return parts.join("/");
+}
+function globMatchesPath(glob, path, budget) {
+  const part = (pattern, text) => {
+    budget.steps -= (pattern.length + 1) * (text.length + 1);
+    if (budget.steps < 0) return void 0;
+    let p = 0;
+    let t = 0;
+    let star = -1;
+    let mark = 0;
+    while (t < text.length) {
+      if (p < pattern.length && (pattern[p] === "?" || pattern[p] === text[t])) {
+        p += 1;
+        t += 1;
+      } else if (p < pattern.length && pattern[p] === "*") {
+        star = p;
+        mark = t;
+        p += 1;
+      } else if (star !== -1) {
+        p = star + 1;
+        mark += 1;
+        t = mark;
+      } else return false;
+    }
+    while (p < pattern.length && pattern[p] === "*") p += 1;
+    return p === pattern.length;
+  };
+  let reachable = new Array(path.length + 1).fill(false);
+  reachable[0] = true;
+  for (const pattern of glob) {
+    budget.steps -= path.length + 1;
+    if (budget.steps < 0) return void 0;
+    const next = new Array(path.length + 1).fill(false);
+    for (let at = 0; at <= path.length; at += 1) {
+      if (!reachable[at]) continue;
+      if (pattern === "**") {
+        for (let end = at; end <= path.length; end += 1) next[end] = true;
+        break;
+      }
+      if (at === path.length) continue;
+      const matched = part(pattern, path[at] ?? "");
+      if (matched === void 0) return void 0;
+      if (matched) next[at + 1] = true;
+    }
+    reachable = next;
+  }
+  return reachable[path.length] === true;
+}
+function testPathReader(testFiles) {
+  let read;
+  const budget = { steps: TEST_PATH_GLOB_BUDGET };
+  const inventory = () => {
+    if (read !== void 0) return read;
+    const trie = { directories: /* @__PURE__ */ new Map(), files: /* @__PURE__ */ new Set(), goPackages: /* @__PURE__ */ new Set(), goTrees: /* @__PURE__ */ new Set(), parts: testFiles().map((file) => file.split("/")) };
+    for (const file of trie.parts) {
+      const goTest = (file[file.length - 1] ?? "").endsWith("_test.go");
+      let skipped = false;
+      let node = 0;
+      if (goTest) trie.goTrees.add(node);
+      for (let at = 0; at < file.length - 1; at += 1) {
+        const name = file[at] ?? "";
+        const key = `${node}/${name}`;
+        let next = trie.directories.get(key);
+        if (next === void 0) {
+          next = trie.directories.size + 1;
+          trie.directories.set(key, next);
+        }
+        node = next;
+        skipped ||= name === "testdata" || name.startsWith(".") || name.startsWith("_");
+        if (goTest && !skipped) trie.goTrees.add(node);
+      }
+      trie.files.add(`${node}/${file[file.length - 1] ?? ""}`);
+      if (goTest && !skipped) trie.goPackages.add(node);
+    }
+    read = trie;
+    return read;
+  };
+  const child = (node, name) => inventory().directories.get(`${node}/${name}`);
+  const hasFile = (node, name) => inventory().files.has(`${node}/${name}`);
+  const directoryAt = (parts) => {
+    let node = 0;
+    for (const name of parts) {
+      node = child(node, name);
+      if (node === void 0) return void 0;
+    }
+    return node;
+  };
+  const listed = (path) => {
+    const parts = path === "" ? [] : path.split("/");
+    if (parts.length === 0) return inventory().parts.length > 0;
+    if (directoryAt(parts) !== void 0) return true;
+    const parent = directoryAt(parts.slice(0, -1));
+    return parent !== void 0 && hasFile(parent, parts[parts.length - 1] ?? "");
+  };
+  const pathReading = (word) => {
+    if (GLOB_WORD_PATTERN.test(word)) {
+      const glob = repositoryRelativePath(word);
+      if (glob === null) return "no-test";
+      const pattern = glob.split("/");
+      for (const file of inventory().parts) {
+        const matched = globMatchesPath(pattern, file, budget);
+        if (matched === void 0) return "unread";
+        if (matched) return "test";
+      }
+      return "no-test";
+    }
+    const path = repositoryRelativePath(word);
+    return path !== null && listed(path) ? "test" : "no-test";
+  };
+  return (word, kind, fromRoot) => {
+    if (!fromRoot || word === "" || UNRESOLVED_PATH_WORD_PATTERN.test(word)) return "unread";
+    if (kind === "go") {
+      if (GLOB_WORD_PATTERN.test(word)) return "unread";
+      const tree = word === "..." || word.endsWith("/...");
+      const directory = tree ? word.slice(0, -3) : word;
+      if (!(directory === "" || directory === "." || directory.startsWith("./") || directory.startsWith("../") || directory === "..")) return "unread";
+      if (directory.includes("...")) return "unread";
+      const path = repositoryRelativePath(directory);
+      if (path === null) return "no-test";
+      const node = directoryAt(path === "" ? [] : path.split("/"));
+      return node !== void 0 && (tree ? inventory().goTrees : inventory().goPackages).has(node) ? "test" : "no-test";
+    }
+    if (kind === "module" && !word.includes("/") && !word.endsWith(".py")) {
+      const parts = word.split(".");
+      if (parts.some((name) => name === "")) return "unread";
+      let node = 0;
+      for (const name of parts) {
+        if (hasFile(node, `${name}.py`)) return "test";
+        node = child(node, name);
+        if (node === void 0) return "no-test";
+      }
+      return "test";
+    }
+    return pathReading(word);
+  };
+}
+var NAMEABLE_POSITIONAL_WORD_PATTERN = /^[A-Za-z0-9_./:*?@+=,-]{1,80}$/;
+var POSITIONAL_NO_TEST_REASON = (word) => NAMEABLE_POSITIONAL_WORD_PATTERN.test(word) ? `the check points at \`${word}\`, where Cejel finds no test file` : "the check points at a path where Cejel finds no test file";
+function positionalProblem(runner, positionals, testPath) {
+  const kind = POSITIONAL_READINGS.get(runner);
+  if (kind === void 0) return void 0;
+  for (const [at, positional] of positionals.entries()) {
+    if (kind === "module" && at === 0 && positional === "discover") {
+      if (positionals.length > 1) return { word: positional, unread: true };
+      continue;
+    }
+    if (kind === "uvu" && at > 0) return { word: positional, unread: true };
+    const word = runner === "pytest" && positional.includes("::") ? positional.slice(0, positional.indexOf("::")) : positional;
+    const reading = testPath(word, kind === "uvu" ? "path" : kind);
+    if (reading !== "test") return { word: positional, unread: reading === "unread" };
+  }
+  return void 0;
+}
+function checkFormAdmits(words, testPath) {
   const forms = CHECK_FORMS.get(words[0] ?? "");
   if (forms === void 0) return void 0;
   const form = forms.find(({ sub }) => sub.every((word, at) => words[1 + at] === word));
   if (form === void 0) return false;
   const args = words.slice(1 + form.sub.length);
   let positionals = 0;
+  const paths = [];
   for (let index = 0; index < args.length; index += 1) {
     const arg = args[index] ?? "";
     if (arg === "--") return form.afterSeparator !== void 0 && args.slice(index + 1).every((word) => form.afterSeparator?.has(word));
@@ -8078,17 +8375,22 @@ function checkFormAdmits(words) {
     if (form.firstPositional !== void 0 && positionals === 0) {
       if (!form.firstPositional.has(arg)) return false;
     } else if (!form.positional) return false;
+    else paths.push(arg);
     positionals += 1;
   }
-  return true;
+  if (testPath === void 0 || paths.length === 0) return true;
+  return positionalProblem(words[0] ?? "", paths, testPath) ?? true;
 }
 var RUNNER_ARGUMENT_REASON = "the check carries a flag or argument that Cejel does not know to keep it failing when a test fails";
+function positionalReason(problem) {
+  return problem.unread ? UNREAD_TEST_ARGUMENT_REASON : POSITIONAL_NO_TEST_REASON(problem.word);
+}
 function rootTestScriptLastRunner(root, inventory, tscAdmitted) {
   const scripts = rootPackageScripts(root, inventory);
   const body = scripts?.test;
   if (scripts === void 0 || typeof body !== "string" || !commandsAreAndChain(body)) return void 0;
   const commands = shellCommands(body);
-  const peeled = peelCommandLaunchers(commands[commands.length - 1] ?? []);
+  const peeled = peelCommandLaunchers(commands[commands.length - 1] ?? [], tscAdmitted);
   if (peeled === null || packageScriptRun(peeled, scripts) !== void 0) return void 0;
   return scriptCommandKind(peeled, tscAdmitted) === "runner" ? peeled : void 0;
 }
@@ -9974,6 +10276,7 @@ var PYTEST_CONFIG_FILE_NAMES = ["pytest.toml", ".pytest.toml", "pytest.ini", ".p
 var PYTEST_EXECUTABLE_PATTERN = /^(?:pytest|py\.test)(?:\.exe)?$/;
 var PYTEST_ADDOPTS_ASSIGNMENT = "PYTEST_ADDOPTS=";
 var PYTEST_ADDOPTS_LINE_PATTERN = /^[ \t]*(?:-[ \t]*)?(?:export[ \t]+)?PYTEST_ADDOPTS[ \t]*(?::|[:?+]?=)(.*)$/;
+var PYTEST_ADDOPTS_KEY_PATTERN = /^[ \t]*PYTEST_ADDOPTS(?:[ \t]*:|[ \t]+[:?+]?=)/;
 var CI_SCRIPT_KEY_PATTERN = /^([ \t]*)(?:-[ \t]*)?(?:script|before_script|after_script|bash|pwsh|powershell|sh|command)[ \t]*:[ \t]*(.*)$/;
 var A1_NOTE_PATH_MAX_LENGTH = 120;
 function a1NotePath(path) {
@@ -10522,10 +10825,11 @@ function resolvePytestRun(invocation, repo) {
   const commandAt = (tokens) => (token, label) => () => file === "" ? void 0 : { path: file, line: repo.lineOf(file, [token, ...tokens], anchor), label };
   const groups = [];
   if (invocation.addopts && invocation.addopts.length > 0) {
+    const elsewhere = invocation.addoptsAt;
     groups.push({
       words: invocation.addopts,
-      where: `in PYTEST_ADDOPTS in ${a1NotePath(invocation.source ?? "")}`,
-      at: (_token, label) => () => file === "" ? void 0 : { path: file, line: repo.lineOf(file, ["PYTEST_ADDOPTS"], invocation.addoptsAnchor ?? anchor), label }
+      where: `in PYTEST_ADDOPTS in ${a1NotePath(elsewhere?.source ?? invocation.source ?? "")}`,
+      at: (_token, label) => () => elsewhere !== void 0 ? { path: elsewhere.file, line: repo.lineOf(elsewhere.file, ["PYTEST_ADDOPTS"], elsewhere.line), label } : file === "" ? void 0 : { path: file, line: repo.lineOf(file, ["PYTEST_ADDOPTS"], invocation.addoptsAnchor ?? anchor), label }
     });
   }
   if (invocation.args.length > 0) groups.push({ words: invocation.args, where: commandWhere, at: commandAt(["pytest", "py.test"]) });
@@ -11036,7 +11340,7 @@ function stripShellHeredocBodies(text) {
   }
   return kept.join("\n");
 }
-function readShellCommands(text, directory, addopts, visit, unknownDirectory) {
+function readShellCommands(text, directory, addopts, visit, unknownDirectory, mentions) {
   let current = directory;
   let why = directory === null ? unknownDirectory : void 0;
   let exported = addopts;
@@ -11048,9 +11352,13 @@ function readShellCommands(text, directory, addopts, visit, unknownDirectory) {
     if (start >= all.length) continue;
     all[start] = (all[start] ?? "").replace(/^[({]+/, "").replace(/^[@+-]+(?=[A-Za-z./{$])/, "");
     let local = exported;
+    let leading = 0;
     while (start < all.length && /^[A-Za-z_]\w*=/.test(all[start] ?? "")) {
       const assignment = all[start] ?? "";
-      if (assignment.startsWith(PYTEST_ADDOPTS_ASSIGNMENT)) local = shellWords(assignment.slice(PYTEST_ADDOPTS_ASSIGNMENT.length));
+      if (assignment.startsWith(PYTEST_ADDOPTS_ASSIGNMENT)) {
+        local = shellWords(assignment.slice(PYTEST_ADDOPTS_ASSIGNMENT.length));
+        leading += 1;
+      }
       start += 1;
     }
     const words = start === 0 ? all : all.slice(start);
@@ -11061,10 +11369,17 @@ function readShellCommands(text, directory, addopts, visit, unknownDirectory) {
     const name = words[0] ?? "";
     if (name === "export") {
       for (const word of words.slice(1)) {
-        if (word.startsWith(PYTEST_ADDOPTS_ASSIGNMENT)) exported = shellWords(word.slice(PYTEST_ADDOPTS_ASSIGNMENT.length));
+        if (word.startsWith(PYTEST_ADDOPTS_ASSIGNMENT)) {
+          exported = shellWords(word.slice(PYTEST_ADDOPTS_ASSIGNMENT.length));
+          if (mentions !== void 0) mentions.read += 1;
+        }
       }
       continue;
     }
+    if (mentions !== void 0 && (leading > 0 || name === "env")) {
+      const make = makeCommandOf(words);
+      if (make !== void 0) mentions.read += leading + make.addoptsAssignments;
+    }
     if (name === "cd" || name === "pushd") {
       const target = words[1];
       const before = current;
@@ -11370,6 +11685,13 @@ function readGithubRunSteps(text) {
     return /* @__PURE__ */ new Map();
   };
   const scalarAt = (index) => index === void 0 ? void 0 : yamlPlainScalar(lines[index]?.value ?? "");
+  const writtenAt = (index) => {
+    const value = lines[index]?.value ?? "";
+    const scalar = yamlPlainScalar(value);
+    const quote = value[0];
+    const close = quote === '"' || quote === "'" ? value.lastIndexOf(quote) : -1;
+    return close > 0 && value.slice(1, close) === scalar ? value.slice(0, close + 1) : scalar;
+  };
   const isFalse = (value) => value !== void 0 && /^(?:false|\$\{\{\s*false\s*\}\})$/.test(value);
   const defaultDirectory = (keys) => scalarAt(childKeys(childKeys(keys.get("defaults")).get("run")).get("working-directory"));
   const addoptsLineIn = (keys) => childKeys(keys.get("env")).get("PYTEST_ADDOPTS");
@@ -11429,13 +11751,17 @@ function readGithubRunSteps(text) {
     } else {
       command = yamlPlainScalar(line.value);
     }
+    const expression = addoptsValue !== void 0 && addoptsValue.includes("${{");
+    const stepAddoptsLine = addoptsLineIn(stepKeys);
     steps.push({
       command,
       directory,
       line: index,
+      addoptsKeyLines: [root.addoptsLine, job.addoptsLine, stepAddoptsLine].filter((at) => at !== void 0),
       ...directory === null && directoryValue !== void 0 ? { unknownDirectory: `working-directory: ${directoryValue}` } : {},
-      ...addoptsValue === void 0 || addoptsValue.includes("${{") ? {} : { addopts: shellWords(addoptsValue) },
-      ...addoptsValue === void 0 || addoptsValue.includes("${{") || addoptsLine === void 0 ? {} : { addoptsLine }
+      ...addoptsValue === void 0 || expression ? {} : { addopts: shellWords(addoptsValue) },
+      ...addoptsValue === void 0 || addoptsLine === void 0 ? {} : { addoptsLine },
+      ...expression ? { addoptsNotKnown: `PYTEST_ADDOPTS: ${addoptsLine === void 0 ? addoptsValue : writtenAt(addoptsLine)}` } : {}
     });
   }
   return steps;
@@ -11452,8 +11778,30 @@ function readPytestInvocations(repoFiles, readText) {
   let hatchScripts;
   let hatchExpansionsLeft = HATCH_EXPANSION_BUDGET;
   const environmentTexts = [];
-  const visitor = (source, file, anchor, depth = 0, envAddopts) => (words, directory, addopts, unknownDirectory) => {
+  let addoptsMentionNotRead = false;
+  const noteAddoptsMentions = (text, read) => {
+    if (wordCount(text, "PYTEST_ADDOPTS") !== read) addoptsMentionNotRead = true;
+  };
+  const makeEnvironments = [];
+  let readingCi = true;
+  const visitor = (source, file, anchor, depth = 0, envAddopts, envNotKnown, addoptsAt) => (words, directory, addopts, unknownDirectory) => {
     for (const target of recipeTargetsNamed(words)) namedTargets.add(target);
+    const makeRun = readingCi ? makeCommandOf(words) : void 0;
+    if (makeRun !== void 0) {
+      const inForce2 = makeRun.addopts ?? addopts;
+      const notKnown = envNotKnown?.reason ?? (inForce2?.some((word) => /[$`]/.test(word)) ? `PYTEST_ADDOPTS=${inForce2.join(" ")}` : void 0);
+      if (inForce2 !== void 0 || notKnown !== void 0) {
+        let runIn2 = makeRun.namesFile ? null : directory;
+        for (const step of makeRun.directories) runIn2 = runIn2 === null ? null : resolveCommandPath(runIn2, step);
+        makeEnvironments.push({
+          directory: runIn2,
+          targets: makeRun.targets,
+          overrides: makeRun.overrides,
+          ...notKnown !== void 0 ? { notKnown } : inForce2 !== void 0 ? { addopts: inForce2 } : {},
+          at: { source, file, line: envAddopts !== void 0 && inForce2 === envAddopts.words ? envAddopts.line : anchor }
+        });
+      }
+    }
     for (const name of makeAssignmentsNamed(words)) makeOverrides.add(name);
     for (const environment of toxEnvironmentsNamed(words)) namedToxEnvironments.add(environment);
     const posargs = toxPosargsOf(words);
@@ -11488,7 +11836,7 @@ function readPytestInvocations(repoFiles, readText) {
           const substituted = substituteHatchArguments(command, hatch.args);
           const first = substituted.trim().split(/\s+/)[0] ?? "";
           const inner = hatchScripts.get(hatch.environment)?.has(first) ? `hatch run ${hatch.environment}:${substituted.trim()}` : substituted;
-          readShellCommands(inner, directory === null ? null : repoDirectory(script.file), addopts, visitor(a1NotePath(script.file), script.file, script.line, depth + 1), unknownDirectory);
+          readShellCommands(inner, directory === null ? null : repoDirectory(script.file), addopts, visitor(a1NotePath(script.file), script.file, script.line, depth + 1, void 0, envNotKnown), unknownDirectory);
         }
         return;
       }
@@ -11508,7 +11856,12 @@ function readPytestInvocations(repoFiles, readText) {
       return;
     }
     const inForce = found.addopts ?? addopts;
+    if (inForce === void 0 && envNotKnown !== void 0) {
+      invocations.push({ source: envNotKnown.source, file: envNotKnown.file, anchor: envNotKnown.line, directory: "", args: [], text: textOf(), unread: envNotKnown.reason });
+      return;
+    }
     const addoptsAnchor = inForce !== void 0 && envAddopts !== void 0 && inForce === envAddopts.words ? envAddopts.line : void 0;
+    const elsewhere = inForce !== void 0 && addoptsAt !== void 0 && inForce === addoptsAt.words ? addoptsAt : void 0;
     invocations.push({
       source,
       file,
@@ -11517,7 +11870,8 @@ function readPytestInvocations(repoFiles, readText) {
       directory: runIn,
       args: found.args,
       ...inForce === void 0 ? {} : { addopts: inForce },
-      ...addoptsAnchor === void 0 ? {} : { addoptsAnchor }
+      ...addoptsAnchor === void 0 ? {} : { addoptsAnchor },
+      ...elsewhere === void 0 ? {} : { addoptsAt: { source: elsewhere.source, file: elsewhere.file, line: elsewhere.line } }
     });
   };
   const usable = repoFiles.filter((file) => !GENERATED_OR_VENDOR_PATH_PATTERN.test(file));
@@ -11528,10 +11882,24 @@ function readPytestInvocations(repoFiles, readText) {
     const remote = readGithubRemoteSteps(text);
     const writesAddopts = text.includes("GITHUB_ENV") && text.includes("PYTEST_ADDOPTS") ? "PYTEST_ADDOPTS written to $GITHUB_ENV" : void 0;
     const unreadWhy = writesAddopts ?? remote.checkoutPath;
+    const keyLines = /* @__PURE__ */ new Set();
+    const shellMentions = writesAddopts === void 0 && text.includes("PYTEST_ADDOPTS") ? { read: 0 } : void 0;
     for (const step of readGithubRunSteps(text)) {
+      for (const at of step.addoptsKeyLines) keyLines.add(at);
       const envAddopts = step.addopts !== void 0 && step.addoptsLine !== void 0 ? { words: step.addopts, line: step.addoptsLine } : void 0;
-      if (unreadWhy !== void 0) readShellCommands(step.command, null, step.addopts, visitor(source, file, step.line, 0, envAddopts), unreadWhy);
-      else readShellCommands(step.command, step.directory, step.addopts, visitor(source, file, step.line, 0, envAddopts), step.unknownDirectory);
+      const notKnownReason = writesAddopts ?? step.addoptsNotKnown;
+      const envNotKnown = notKnownReason === void 0 ? void 0 : { reason: notKnownReason, source, file, line: writesAddopts === void 0 && step.addoptsLine !== void 0 ? step.addoptsLine : step.line };
+      if (unreadWhy !== void 0) readShellCommands(step.command, null, step.addopts, visitor(source, file, step.line, 0, envAddopts, envNotKnown), unreadWhy, shellMentions);
+      else readShellCommands(step.command, step.directory, step.addopts, visitor(source, file, step.line, 0, envAddopts, envNotKnown), step.unknownDirectory, shellMentions);
+    }
+    if (text.includes("PYTEST_ADDOPTS")) {
+      let read = keyLines.size + (shellMentions?.read ?? 0);
+      if (writesAddopts !== void 0) {
+        text.split(/\r?\n/).forEach((line, index) => {
+          if (!keyLines.has(index) && line.includes("GITHUB_ENV")) read += wordCount(line, "PYTEST_ADDOPTS");
+        });
+      }
+      noteAddoptsMentions(text, read);
     }
     for (const step of remote.pytestInputs) {
       invocations.push({ source, file, anchor: step.line, directory: "", args: [], text: step.uses, unread: step.uses });
@@ -11566,8 +11934,13 @@ function readPytestInvocations(repoFiles, readText) {
     environmentTexts.push(text);
     const jenkinsDir = file === "Jenkinsfile" ? jenkinsDirCall(text) : void 0;
     const addopts = readCiAddopts(text);
+    const shellMentions = text.includes("PYTEST_ADDOPTS") ? { read: 0 } : void 0;
     for (const command of ciShellTexts(text)) {
-      readShellCommands(command, jenkinsDir === void 0 ? "" : null, addopts, visitor(source, file, 0), jenkinsDir);
+      readShellCommands(command, jenkinsDir === void 0 ? "" : null, addopts, visitor(source, file, 0), jenkinsDir, shellMentions);
+    }
+    if (shellMentions !== void 0) {
+      const keyLine = text.split(/\r?\n/).find((line) => PYTEST_ADDOPTS_LINE_PATTERN.test(line));
+      noteAddoptsMentions(text, shellMentions.read + (keyLine !== void 0 && PYTEST_ADDOPTS_KEY_PATTERN.test(keyLine) ? 1 : 0));
     }
   }
   const noxAt = invocations.length;
@@ -11622,18 +11995,22 @@ function readPytestInvocations(repoFiles, readText) {
     }
     return noxRuns;
   };
+  readingCi = false;
+  const environments = distinctMakeEnvironments(makeEnvironments);
   for (const file of usable.filter(isRecipeFile)) {
     const text = readText(file);
     if (text === void 0) continue;
     const just = /[Jj]ustfile$/.test(file);
     const targets = just ? readJustRecipes(text) : readRecipeTargets(text);
     const headers = just ? new Map([...readJustRecipes(text)].map(([name, recipe]) => [name, recipe.line])) : makeTargetLines(text);
-    const setByEnvironment = (name) => environmentTexts.some((ciText) => containsWord(ciText, name));
+    const setByEnvironment = (name) => name === "PYTEST_ADDOPTS" ? addoptsMentionNotRead : environmentTexts.some((ciText) => containsWord(ciText, name));
     const justVariables = just ? readJustVariables(text) : void 0;
     const make = just ? void 0 : readMakeVariables(text, setByEnvironment);
     const budget = { left: MAKE_EXPANSION_BUDGET };
-    const isUnknown = (name) => make?.unknown.has(name) === true || makeOverrides.has(name);
-    const expand = (command) => justVariables !== void 0 ? { text: expandJustVariables(command, justVariables), unknown: false } : expandMakeVariables(command, make?.values ?? /* @__PURE__ */ new Map(), isUnknown, budget);
+    const unknownIn = (variables) => (name) => variables?.unknown.has(name) === true || makeOverrides.has(name);
+    const isUnknown = unknownIn(make);
+    const expandWith = (variables) => (command) => justVariables !== void 0 ? { text: expandJustVariables(command, justVariables), unknown: false } : expandMakeVariables(command, variables?.values ?? /* @__PURE__ */ new Map(), unknownIn(variables), budget);
+    const expand = expandWith(make);
     let addoptsUnknown = false;
     let addoptsText;
     if (justVariables !== void 0) {
@@ -11655,30 +12032,63 @@ function readPytestInvocations(repoFiles, readText) {
     }
     const addopts = addoptsText === void 0 ? void 0 : shellWords(shellWords(addoptsText.trim()).join(" "));
     const unknownRunsPytest = (command, expanded) => command.toLowerCase().includes("pytest") || expanded.toLowerCase().includes("pytest") || makeReferencesIn(expanded).some((name) => make?.pytestNames.has(name) === true);
-    const reached = /* @__PURE__ */ new Set();
-    const queue = [[...targets.keys()][0], "test", "tests", "check", ...namedTargets].filter(
-      (name) => name !== void 0 && targets.has(name)
-    );
-    while (queue.length > 0) {
-      const name = queue.shift() ?? "";
-      if (reached.has(name)) continue;
-      reached.add(name);
-      const target = targets.get(name);
-      if (!target) continue;
-      queue.push(...target.dependencies.filter((dependency) => targets.has(dependency)));
-      const commands = joinRecipeContinuations(target.commands);
-      for (const command of commands) {
-        const expanded = expand(command);
-        if (expanded.unknown && unknownRunsPytest(command, expanded.text)) {
-          invocations.push({ source: a1NotePath(file), file, anchor: headers.get(name) ?? 0, directory: "", args: [], text: command, unread: command });
-          continue;
+    const firstTarget = [...targets.keys()][0];
+    const readRecipes = (names, variables, inForceAddopts, notKnown, addoptsAt) => {
+      const expandHere = variables === make ? expand : expandWith(variables);
+      const reached = /* @__PURE__ */ new Set();
+      const queue = names.filter((name) => name !== void 0 && targets.has(name));
+      while (queue.length > 0) {
+        const name = queue.shift() ?? "";
+        if (reached.has(name)) continue;
+        reached.add(name);
+        const target = targets.get(name);
+        if (!target) continue;
+        queue.push(...target.dependencies.filter((dependency) => targets.has(dependency)));
+        const commands = joinRecipeContinuations(target.commands);
+        for (const command of commands) {
+          const expanded = expandHere(command);
+          if (expanded.unknown && unknownRunsPytest(command, expanded.text)) {
+            invocations.push({ source: a1NotePath(file), file, anchor: headers.get(name) ?? 0, directory: "", args: [], text: command, unread: command });
+            continue;
+          }
+          readShellCommands(expanded.text, repoDirectory(file), inForceAddopts, (words, directory, inForce, why) => {
+            queue.push(...recipeTargetsNamed(words).filter((named) => targets.has(named)));
+            const visit = visitor(a1NotePath(file), file, headers.get(name) ?? 0, 0, void 0, void 0, addoptsAt);
+            if (notKnown !== void 0) visit(words, null, inForce, notKnown);
+            else visit(words, directory, inForce, why);
+          });
         }
-        readShellCommands(expanded.text, repoDirectory(file), addopts, (words, directory, inForce, why) => {
-          queue.push(...recipeTargetsNamed(words).filter((named) => targets.has(named)));
-          if (addoptsUnknown) visitor(a1NotePath(file), file, headers.get(name) ?? 0)(words, null, inForce, "PYTEST_ADDOPTS");
-          else visitor(a1NotePath(file), file, headers.get(name) ?? 0)(words, directory, inForce, why);
-        });
       }
+    };
+    readRecipes([firstTarget, "test", "tests", "check", ...namedTargets], make, addopts, addoptsUnknown ? "PYTEST_ADDOPTS" : void 0);
+    if (make === void 0 || addoptsUnknown) continue;
+    const here = repoDirectory(file);
+    const baseKey = addopts?.join("\0");
+    for (const environment of environments) {
+      if (environment.directory !== null && environment.directory !== here) continue;
+      const names = environment.targets.map((target) => target === "" ? firstTarget : target);
+      if (environment.notKnown !== void 0) {
+        readRecipes(names, make, void 0, environment.notKnown);
+        continue;
+      }
+      const words = environment.addopts ?? [];
+      const local = readMakeVariables(text, setByEnvironment, { name: "PYTEST_ADDOPTS", value: words.join(" "), overrides: environment.overrides });
+      if (local.unknown.has("PYTEST_ADDOPTS")) {
+        readRecipes(names, local, void 0, "PYTEST_ADDOPTS");
+        continue;
+      }
+      if (local.fromEnvironment) {
+        readRecipes(names, local, words, void 0, { words, ...environment.at });
+        continue;
+      }
+      const expanded = expandWith(local)(local.values.get("PYTEST_ADDOPTS") ?? "");
+      if (expanded.unknown) {
+        readRecipes(names, local, void 0, "PYTEST_ADDOPTS");
+        continue;
+      }
+      const inForce = shellWords(shellWords(expanded.text.trim()).join(" "));
+      if (inForce.join("\0") === baseKey) continue;
+      readRecipes(names, local, inForce, void 0);
     }
   }
   const toxenv = readToxenvValues(environmentTexts);
@@ -11822,6 +12232,95 @@ function makeAssignmentsNamed(words) {
     return equals > 0 && /^[A-Za-z_][\w.-]*$/.test(word.slice(0, equals)) ? [word.slice(0, equals)] : [];
   });
 }
+var MAKE_LONG_OPTIONS_WITH_VALUE = /* @__PURE__ */ new Set([
+  "--directory",
+  "--file",
+  "--makefile",
+  "--include-dir",
+  "--old-file",
+  "--assume-old",
+  "--new-file",
+  "--assume-new",
+  "--what-if",
+  "--jobs",
+  "--load-average",
+  "--max-load",
+  "--output-sync",
+  "--debug"
+]);
+function makeCommandOf(words) {
+  let index = 0;
+  let addopts;
+  let addoptsAssignments = 0;
+  if (words[0] === "env") {
+    index = 1;
+    while ((words[index] ?? "").startsWith("-") || /^[A-Za-z_]\w*=/.test(words[index] ?? "")) {
+      const assignment = words[index] ?? "";
+      if (assignment.startsWith(PYTEST_ADDOPTS_ASSIGNMENT)) {
+        addopts = shellWords(assignment.slice(PYTEST_ADDOPTS_ASSIGNMENT.length));
+        addoptsAssignments += 1;
+      }
+      index += 1;
+    }
+  }
+  const head = words[index] ?? "";
+  const name = basename(head);
+  if (name !== "make" && name !== "gmake" && !/^\$[({]MAKE[)}]$/.test(head)) return void 0;
+  const directories = [];
+  const targets = [];
+  let overrides = false;
+  let namesFile = false;
+  for (index += 1; index < words.length; index += 1) {
+    const word = words[index] ?? "";
+    if (word.startsWith("--")) {
+      const equals = word.indexOf("=");
+      const option = equals === -1 ? word : word.slice(0, equals);
+      const value = equals === -1 ? MAKE_LONG_OPTIONS_WITH_VALUE.has(option) ? words[index += 1] : void 0 : word.slice(equals + 1);
+      if (option === "--environment-overrides") overrides = true;
+      else if (option === "--directory" && value !== void 0) directories.push(value);
+      else if (option === "--file" || option === "--makefile") namesFile = true;
+      continue;
+    }
+    if (word.startsWith("-") && word.length > 1) {
+      for (let at = 1; at < word.length; at += 1) {
+        const flag = word[at] ?? "";
+        if (flag === "e") overrides = true;
+        else if ("CfIoW".includes(flag)) {
+          const value = at + 1 < word.length ? word.slice(at + 1) : words[index += 1];
+          if (flag === "C" && value !== void 0) directories.push(value);
+          if (flag === "f") namesFile = true;
+          break;
+        } else if (flag === "j" || flag === "l") {
+          if (at + 1 === word.length && /^\d+(?:\.\d+)?$/.test(words[index + 1] ?? "")) index += 1;
+          break;
+        }
+      }
+      continue;
+    }
+    if (!word.includes("=")) targets.push(word);
+  }
+  return { directories, targets, overrides, namesFile, addoptsAssignments, ...addopts === void 0 ? {} : { addopts } };
+}
+var MAKE_ENVIRONMENTS_READ = 16;
+function distinctMakeEnvironments(environments) {
+  const byKey = /* @__PURE__ */ new Map();
+  let rest;
+  for (const environment of environments) {
+    const key = [environment.directory ?? "
", environment.notKnown ?? "", ...environment.addopts ?? [], String(environment.overrides)].join("\0");
+    let entry = byKey.get(key);
+    if (entry === void 0 && byKey.size < MAKE_ENVIRONMENTS_READ) {
+      entry = { environment, targets: /* @__PURE__ */ new Set() };
+      byKey.set(key, entry);
+    }
+    if (entry === void 0) {
+      rest ??= { environment: { directory: null, targets: [], overrides: false, notKnown: "PYTEST_ADDOPTS", at: environment.at }, targets: /* @__PURE__ */ new Set() };
+      entry = rest;
+    }
+    if (environment.targets.length === 0) entry.targets.add("");
+    for (const target of environment.targets) entry.targets.add(target);
+  }
+  return [...byKey.values(), ...rest === void 0 ? [] : [rest]].map(({ environment, targets }) => ({ ...environment, targets: [...targets] }));
+}
 function asToxCommand(words) {
   return asPythonToolCommand(words, "tox");
 }
@@ -11860,12 +12359,14 @@ function makeTargetLines(text) {
   return lines;
 }
 var MAKE_EXPANSION_BUDGET = 4096;
-function readMakeVariables(text, setByEnvironment = () => false) {
+function readMakeVariables(text, setByEnvironment = () => false, environment) {
   const values = /* @__PURE__ */ new Map();
   const simple = /* @__PURE__ */ new Set();
   const unknown = /* @__PURE__ */ new Set();
   const pytestNames = /* @__PURE__ */ new Set();
   const budget = { left: MAKE_EXPANSION_BUDGET };
+  let fromEnvironment = environment !== void 0;
+  if (environment !== void 0) values.set(environment.name, environment.value);
   const forget = (name) => {
     unknown.add(name);
     values.delete(name);
@@ -11908,10 +12409,13 @@ function readMakeVariables(text, setByEnvironment = () => false) {
     const value = (match[3] ?? "").trim();
     if (value.toLowerCase().includes("pytest")) pytestNames.add(name);
     if (unknown.has(name)) continue;
+    const fromTheEnvironment = environment !== void 0 && name === environment.name;
+    if (fromTheEnvironment && environment.overrides && !/^override[ \t]/.test(line)) continue;
     if (conditional > 0 || operator === "!=" || operator === ":::=" || operator === "?=" && setByEnvironment(name)) {
       forget(name);
       continue;
     }
+    if (fromTheEnvironment && operator !== "?=") fromEnvironment = false;
     if (operator === "?=") {
       if (!values.has(name)) {
         values.set(name, value);
@@ -11935,7 +12439,7 @@ function readMakeVariables(text, setByEnvironment = () => false) {
       simple.delete(name);
     }
   }
-  return { values, unknown, pytestNames };
+  return { values, unknown, pytestNames, fromEnvironment };
 }
 function expandMakeVariables(command, values, isUnknown, budget, depth = 0) {
   if (!command.includes("$")) return { text: command, unknown: false };
@@ -11986,6 +12490,15 @@ function containsWord(text, name) {
   }
   return false;
 }
+function wordCount(text, name) {
+  if (name === "") return 0;
+  const word = (code) => code >= 48 && code <= 57 || code >= 65 && code <= 90 || code >= 97 && code <= 122 || code === 95;
+  let count = 0;
+  for (let at = text.indexOf(name); at !== -1; at = text.indexOf(name, at + 1)) {
+    if ((at === 0 || !word(text.charCodeAt(at - 1))) && (at + name.length >= text.length || !word(text.charCodeAt(at + name.length)))) count += 1;
+  }
+  return count;
+}
 function makeReferencesIn(text) {
   const names = [];
   for (let at = text.indexOf("$"); at !== -1; at = text.indexOf("$", at + 1)) {
@@ -12372,6 +12885,7 @@ function isGovernedPytestFile(skip, file) {
 var PYTEST_DEFAULT_NORECURSE_SEGMENT_PATTERN = /^(?:.*\.egg|\..*|_darcs|build|CVS|dist|node_modules|venv|\{arch\})$/;
 var PYTEST_COLLECT_IGNORE_PATTERN = /\b(?:collect_ignore|collect_ignore_glob|pytest_ignore_collect)\b/;
 var PYTEST_COLLECTION_HOOK_PATTERN = /^def[ \t]+pytest_collection_modifyitems[ \t]*\(/;
+var PYTEST_CLASS_COLLECTION_HOOK_PATTERN = /^[ \t]+(?:async[ \t]+)?def[ \t]+pytest_collection_modifyitems[ \t]*\(/;
 var PYTEST_COLLECTION_HOOK_NAME = "pytest_collection_modifyitems";
 var PYTEST_COLLECTION_HOOK_NAME_PATTERN = /\bpytest_collection_modifyitems\b/;
 var PYTEST_HOOK_CONDITIONAL_PATTERN = /^(?:if|elif|else|while|try|except|finally|with|match|case|return|break|continue|yield)\b|\bskipif\b|\bif\b/;
@@ -13904,11 +14418,39 @@ function findPytestRunWideSkips(repoPath, repoFiles) {
     const source = pythonSourceLines(text);
     if (source.masked.some((code) => PYTEST_COLLECT_IGNORE_PATTERN.test(code))) ignoresCollection = true;
     let last = -1;
+    let blocked = false;
+    const classHooks = [];
+    const blocks = [];
+    const openHooks = [];
     for (const { first, last: final } of pythonLogicalLines(source)) {
-      if (PYTEST_COLLECTION_HOOK_PATTERN.test(source.masked[first] ?? "")) {
-        last = first;
+      const indent = pythonLineIndent(source, first);
+      const opening = source.masked[first] ?? "";
+      if (indent !== -1) {
+        while (blocks.length > 0 && (blocks[blocks.length - 1]?.indent ?? 0) >= indent) {
+          if (blocks.pop()?.hook === true) openHooks.pop();
+        }
+        const enclosing = blocks[blocks.length - 1]?.className;
+        if (indent > 0 && enclosing !== void 0 && PYTEST_CLASS_COLLECTION_HOOK_PATTERN.test(opening)) {
+          classHooks.push({ line: first, className: enclosing, touches: false });
+          openHooks.push(classHooks.length - 1);
+          blocks.push({ indent, hook: true });
+        } else {
+          let logical = "";
+          for (let line = first; line <= final; line += 1) logical += `${source.masked[line] ?? ""}
+`;
+          const open = openHooks[openHooks.length - 1];
+          if (open !== void 0 && /\bitems\b/.test(logical)) classHooks[open].touches = true;
+          if (logical.trimEnd().endsWith(":")) {
+            const className = /^[ \t]*class[ \t]+([A-Za-z_]\w*)/.exec(opening)?.[1];
+            blocks.push({ indent, hook: false, ...className === void 0 ? {} : { className } });
+          }
+        }
+      }
+      if (PYTEST_COLLECTION_HOOK_PATTERN.test(opening)) {
+        if (!blocked) last = first;
         continue;
       }
+      if (blocked) continue;
       let named = false;
       let code = "";
       for (let line = first; line <= final && !named; line += 1) {
@@ -13923,13 +14465,25 @@ function findPytestRunWideSkips(repoPath, repoFiles) {
       }
       if (named) {
         last = -1;
-        break;
+        blocked = true;
       }
     }
+    const scope = dirname2(file);
+    for (const hook of classHooks) {
+      if (!hook.touches) continue;
+      const reason = `${hook.className}.${PYTEST_COLLECTION_HOOK_NAME}`;
+      found.push({
+        path: file,
+        line: hook.line + 1,
+        scope: scope === "." ? "" : scope,
+        kind: "unread",
+        unread: reason,
+        withheld: `${A1_HOOK_NOT_READ}\`${reason}\` in ${a1NotePath(file)}`
+      });
+    }
     if (last === -1) continue;
     const reading = readPytestCollectionHook(source, last, builtinsNamedIn);
     if (reading === void 0) continue;
-    const scope = dirname2(file);
     const where = { path: file, line: last + 1, scope: scope === "." ? "" : scope };
     if (reading.kind === "not read") {
       const because = reading.builtins === void 0 ? "" : ` calls a builtin, ${reading.builtins}`;
@@ -23731,7 +24285,7 @@ function buildWitanCliSummary(report) {
 // src/scan.ts
 function runCejelScan(options) {
   const identity = deriveProductIdentity(options.repoPath, options.productName);
-  const generatedAt = (/* @__PURE__ */ new Date()).toISOString();
+  const generatedAt = options.generatedAt ?? (/* @__PURE__ */ new Date()).toISOString();
   const report = scoreRepoWithPublicCejel({
     productSlug: identity.productSlug,
     productDisplayName: options.productDisplayName ?? identity.productDisplayName,
@@ -23782,6 +24336,7 @@ export {
   formatVerdictCapSentence,
   buildVerdictExplanation,
   buildRelyingPartySummary,
+  METRIC_DERIVED_FINDING_PATTERN,
   buildPlainSummary,
   renderWitanHtmlReport,
   renderWitanBadgeEndpoint,