@clossys/launcher 0.3.1 → 0.5.0

package/dist/root-entries.js

@@ -0,0 +1,80 @@
+// Whether adding paths would break a repository's Controller root
+// vocabulary (issue #1178). A consumer repository may declare a Controller
+// repository profile whose schema version 3 `rootEntries` is a closed list of
+// its direct children; Controller's repository-profile check then fails on a
+// direct child the list does not declare, or declares as prohibited. The
+// shapes read here are Controller's (its README, "Profile schema v3" and
+// "Pure exact-root evaluation"); this package has no runtime dependency on
+// Controller, so this module reads only `schemaVersion` and `rootEntries`,
+// with the same rules, and judges nothing else in the profile. It performs no
+// I/O.
+import { compareCodeUnits, isSafeRelativePath } from "./change-set-contract.js";
+const CLASSIFICATIONS = new Set(["canonical", "extension", "exception", "compatibility-alias", "legacy-artifact"]);
+const DISPOSITIONS = new Set(["required", "allowed", "prohibited"]);
+const ENTRY_KEYS = new Set(["name", "classification", "disposition"]);
+const UNKNOWN = { verdict: "indeterminate", reason: "root-vocabulary-unknown" };
+/** Controller refuses a profile collection of more entries than this. */
+const MAX_ROOT_ENTRIES = 10_000;
+function isPlainRecord(value) {
+    if (typeof value !== "object" || value === null || Array.isArray(value))
+        return false;
+    const prototype = Object.getPrototypeOf(value);
+    return prototype === null || prototype === Object.prototype;
+}
+/** Controller's rule for one direct-child name: 1 to 255 characters, trimmed, not . or .., no / or \, no control character. */
+export function isRootEntryName(value) {
+    return typeof value === "string" && value.length > 0 && value.length <= 255 && value === value.trim() && value !== "." && value !== ".." && !/[\\/\u0000-\u001f\u007f]/u.test(value);
+}
+/**
+ * Judges the root names `paths` introduce -- each path's first segment --
+ * against a parsed repository profile. A profile of schema version 1 or 2,
+ * or of version 3 with an empty `rootEntries`, has no root vocabulary
+ * Controller checks, so nothing is refused. A version 3 profile with entries
+ * refuses a name it does not declare, or declares as prohibited. Anything
+ * that is not a profile Controller could read this way -- not an object,
+ * another schema version, a `rootEntries` on version 1 or 2, more than
+ * 10,000 entries, or a malformed or repeated entry -- is indeterminate,
+ * never read as permissive. It judges the root vocabulary only: a profile
+ * whose other fields Controller refuses fails Controller's check whatever
+ * this returns. Throws
+ * when a path is not a safe relative path, which is a caller defect.
+ */
+export function wouldViolateRootEntries(profile, paths) {
+    paths.forEach((path, index) => {
+        if (!isSafeRelativePath(path))
+            throw new TypeError(`paths[${index}] is not a safe relative path`);
+    });
+    if (!isPlainRecord(profile))
+        return UNKNOWN;
+    const version = profile.schemaVersion;
+    const hasRoots = Object.hasOwn(profile, "rootEntries");
+    if (version === 1 || version === 2)
+        return hasRoots ? UNKNOWN : { verdict: "satisfied", vocabulary: "none" };
+    if (version !== 3 || !hasRoots)
+        return UNKNOWN;
+    const entries = profile.rootEntries;
+    if (!Array.isArray(entries) || entries.length > MAX_ROOT_ENTRIES || Object.keys(entries).length !== entries.length)
+        return UNKNOWN;
+    const dispositions = new Map();
+    for (const entry of entries) {
+        if (!isPlainRecord(entry) || !Object.keys(entry).every((key) => ENTRY_KEYS.has(key)))
+            return UNKNOWN;
+        const { name, classification, disposition } = entry;
+        if (!isRootEntryName(name) || dispositions.has(name))
+            return UNKNOWN;
+        if (typeof classification !== "string" || !CLASSIFICATIONS.has(classification))
+            return UNKNOWN;
+        if (typeof disposition !== "string" || !DISPOSITIONS.has(disposition))
+            return UNKNOWN;
+        dispositions.set(name, disposition);
+    }
+    if (dispositions.size === 0)
+        return { verdict: "satisfied", vocabulary: "none" };
+    const roots = [...new Set(paths.map((path) => path.split("/")[0]))].sort(compareCodeUnits);
+    const undeclared = roots.filter((root) => !dispositions.has(root));
+    const prohibited = roots.filter((root) => dispositions.get(root) === "prohibited");
+    if (undeclared.length === 0 && prohibited.length === 0)
+        return { verdict: "satisfied", vocabulary: "checked" };
+    return { verdict: "violated", undeclared, prohibited };
+}
+//# sourceMappingURL=root-entries.js.map

package/dist/root-entries.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"root-entries.js","sourceRoot":"","sources":["../src/root-entries.ts"],"names":[],"mappings":"AAAA,kEAAkE;AAClE,2EAA2E;AAC3E,8EAA8E;AAC9E,6EAA6E;AAC7E,yEAAyE;AACzE,yEAAyE;AACzE,2EAA2E;AAC3E,2EAA2E;AAC3E,8EAA8E;AAC9E,OAAO;AAEP,OAAO,EAAE,gBAAgB,EAAE,kBAAkB,EAAE,MAAM,0BAA0B,CAAC;AAWhF,MAAM,eAAe,GAAG,IAAI,GAAG,CAAC,CAAC,WAAW,EAAE,WAAW,EAAE,WAAW,EAAE,qBAAqB,EAAE,iBAAiB,CAAC,CAAC,CAAC;AACnH,MAAM,YAAY,GAAG,IAAI,GAAG,CAAC,CAAC,UAAU,EAAE,SAAS,EAAE,YAAY,CAAC,CAAC,CAAC;AACpE,MAAM,UAAU,GAAG,IAAI,GAAG,CAAC,CAAC,MAAM,EAAE,gBAAgB,EAAE,aAAa,CAAC,CAAC,CAAC;AACtE,MAAM,OAAO,GAAuB,EAAE,OAAO,EAAE,eAAe,EAAE,MAAM,EAAE,yBAAyB,EAAE,CAAC;AACpG,yEAAyE;AACzE,MAAM,gBAAgB,GAAG,MAAM,CAAC;AAEhC,SAAS,aAAa,CAAC,KAAc;IACnC,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IACtF,MAAM,SAAS,GAAG,MAAM,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC;IAC/C,OAAO,SAAS,KAAK,IAAI,IAAI,SAAS,KAAK,MAAM,CAAC,SAAS,CAAC;AAC9D,CAAC;AAED,+HAA+H;AAC/H,MAAM,UAAU,eAAe,CAAC,KAAc;IAC5C,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,IAAI,KAAK,CAAC,MAAM,IAAI,GAAG,IAAI,KAAK,KAAK,KAAK,CAAC,IAAI,EAAE,IAAI,KAAK,KAAK,GAAG,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,2BAA2B,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;AACvL,CAAC;AAED;;;;;;;;;;;;;GAaG;AACH,MAAM,UAAU,uBAAuB,CAAC,OAAgB,EAAE,KAAwB;IAChF,KAAK,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE;QAC5B,IAAI,CAAC,kBAAkB,CAAC,IAAI,CAAC;YAAE,MAAM,IAAI,SAAS,CAAC,SAAS,KAAK,+BAA+B,CAAC,CAAC;IACpG,CAAC,CAAC,CAAC;IACH,IAAI,CAAC,aAAa,CAAC,OAAO,CAAC;QAAE,OAAO,OAAO,CAAC;IAC5C,MAAM,OAAO,GAAG,OAAO,CAAC,aAAa,CAAC;IACtC,MAAM,QAAQ,GAAG,MAAM,CAAC,MAAM,CAAC,OAAO,EAAE,aAAa,CAAC,CAAC;IACvD,IAAI,OAAO,KAAK,CAAC,IAAI,OAAO,KAAK,CAAC;QAAE,OAAO,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,WAAW,EAAE,UAAU,EAAE,MAAM,EAAE,CAAC;IAC7G,IAAI,OAAO,KAAK,CAAC,IAAI,CAAC,QAAQ;QAAE,OAAO,OAAO,CAAC;IAC/C,MAAM,OAAO,GAAG,OAAO,CAAC,WAAW,CAAC;IACpC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,OAAO,CAAC,MAAM,GAAG,gBAAgB,IAAI,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,MAAM,KAAK,OAAO,CAAC,MAAM;QAAE,OAAO,OAAO,CAAC;IACnI,MAAM,YAAY,GAAG,IAAI,GAAG,EAAkB,CAAC;IAC/C,KAAK,MAAM,KAAK,IAAI,OAAoB,EAAE,CAAC;QACzC,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;YAAE,OAAO,OAAO,CAAC;QACrG,MAAM,EAAE,IAAI,EAAE,cAAc,EAAE,WAAW,EAAE,GAAG,KAAK,CAAC;QACpD,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,IAAI,YAAY,CAAC,GAAG,CAAC,IAAI,CAAC;YAAE,OAAO,OAAO,CAAC;QACrE,IAAI,OAAO,cAAc,KAAK,QAAQ,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,cAAc,CAAC;YAAE,OAAO,OAAO,CAAC;QAC/F,IAAI,OAAO,WAAW,KAAK,QAAQ,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,WAAW,CAAC;YAAE,OAAO,OAAO,CAAC;QACtF,YAAY,CAAC,GAAG,CAAC,IAAI,EAAE,WAAW,CAAC,CAAC;IACtC,CAAC;IACD,IAAI,YAAY,CAAC,IAAI,KAAK,CAAC;QAAE,OAAO,EAAE,OAAO,EAAE,WAAW,EAAE,UAAU,EAAE,MAAM,EAAE,CAAC;IACjF,MAAM,KAAK,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC;IAC5F,MAAM,UAAU,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,YAAY,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC;IACnE,MAAM,UAAU,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,YAAY,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,YAAY,CAAC,CAAC;IACnF,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,OAAO,EAAE,WAAW,EAAE,UAAU,EAAE,SAAS,EAAE,CAAC;IAC/G,OAAO,EAAE,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,CAAC;AACzD,CAAC"}

package/dist/setup-template-scripts.d.ts

@@ -0,0 +1,36 @@
+/**
+ * Pure renderers for the setup template acts' script and workflow files.
+ *
+ * Each renderer returns exact file bytes; path scope optionally takes the
+ * supported authoring agent provenance. With no input it preserves legacy
+ * bytes. Rendering is pure, so
+ * the text is a pure function of this module alone: no clock, no randomness,
+ * no filesystem, no environment. Everything that reads a clock or a
+ * repository does so inside the emitted script, when a workflow runs it, and
+ * never here.
+ *
+ * Files rendered here:
+ * - `.github/scripts/clossys-collect-adoption-snapshot.mjs`
+ * - `.github/workflows/clossys-adoption-evidence.yml`
+ * - `.github/workflows/clossys-path-scope.yml`
+ *
+ * The path-scope script is standalone, so it runs the same under a test as it
+ * does inside the workflow that embeds it.
+ */
+/**
+ * The path patterns an apply pull request may own, in the change-set
+ * contract's order. The path-scope script embeds this list.
+ */
+export declare const OWNED_PATH_PATTERNS: readonly string[];
+/** The bytes of `.github/scripts/clossys-collect-adoption-snapshot.mjs`. */
+export declare function renderSnapshotCollector(): string;
+/** The bytes of `.github/workflows/clossys-adoption-evidence.yml`. */
+export declare function renderAdoptionEvidenceWorkflow(): string;
+/**
+ * The standalone path-scope script (its text ends in one LF). The
+ * path-scope workflow embeds it; a test runs it with `node` directly.
+ */
+export declare function renderPathScopeScript(agentProvenance?: "codex" | "claude" | "cursor" | undefined): string;
+/** The bytes of `.github/workflows/clossys-path-scope.yml`: the script embedded in a quoted heredoc. */
+export declare function renderPathScopeWorkflow(agentProvenance?: "codex" | "claude" | "cursor" | undefined): string;
+//# sourceMappingURL=setup-template-scripts.d.ts.map

package/dist/setup-template-scripts.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"setup-template-scripts.d.ts","sourceRoot":"","sources":["../src/setup-template-scripts.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAEH;;;GAGG;AACH,eAAO,MAAM,mBAAmB,EAAE,SAAS,MAAM,EAkBhD,CAAC;AAoOF,4EAA4E;AAC5E,wBAAgB,uBAAuB,IAAI,MAAM,CAEhD;AAiED,sEAAsE;AACtE,wBAAgB,8BAA8B,IAAI,MAAM,CAEvD;AAoKD;;;GAGG;AACH,wBAAgB,qBAAqB,CAAC,eAAe,GAAE,OAAO,GAAG,QAAQ,GAAG,QAAQ,GAAG,SAAqB,GAAG,MAAM,CAQpH;AAuDD,wGAAwG;AACxG,wBAAgB,uBAAuB,CAAC,eAAe,GAAE,OAAO,GAAG,QAAQ,GAAG,QAAQ,GAAG,SAAqB,GAAG,MAAM,CAMtH"}