@codacy/tools-jackson 0.3.0 → 0.5.0

package/dist/index.js

@@ -38,20 +38,27 @@ var import_tooling = require("@codacy/tooling");
 // src/adapter.ts
 var import_promises = __toESM(require("fs/promises"));
 var import_path = __toESM(require("path"));
-var TOOL_ID = "jackson";
-var PATTERN_PARSE_ERROR = `${TOOL_ID}_parse-error`;
-var PATTERN_DUPLICATE_KEYS = `${TOOL_ID}_duplicate-keys`;
-var adapter = {
-  id: TOOL_ID,
+
+// src/metadata.ts
+var descriptor = {
+  id: "jackson",
   displayName: "Jackson Linter",
   preferredVersion: "1.0.0",
-  compatibleVersions: ">=1.0.0",
-  website: "https://github.com/FasterXML/jackson-core",
   languages: ["JSON"],
   filePatterns: ["**/*.json"],
   supportedOS: ["linux", "darwin", "win32"],
   supportedArch: ["x64", "arm64"],
-  supportedRunners: ["local", "container"],
+  supportedRunners: ["local", "container"]
+};
+
+// src/adapter.ts
+var TOOL_ID = "jackson";
+var PATTERN_PARSE_ERROR = `${TOOL_ID}_parse-error`;
+var PATTERN_DUPLICATE_KEYS = `${TOOL_ID}_duplicate-keys`;
+var adapter = {
+  ...descriptor,
+  compatibleVersions: ">=1.0.0",
+  website: "https://github.com/FasterXML/jackson-core",
   prerequisites: [],
   /**
    * Always available — this adapter uses only Node's built-in JSON.parse.
@@ -104,32 +111,49 @@ var adapter = {
     const startedAt = /* @__PURE__ */ new Date();
     const issues = [];
     const errors = [];
-    if (codacyConfig.patterns.length === 0) {
-      ctx.logger.info("Skipping analysis: no patterns enabled", { toolId: TOOL_ID });
-      const completedAt2 = /* @__PURE__ */ new Date();
-      return {
-        metadata: {
-          startedAt: startedAt.toISOString(),
-          completedAt: completedAt2.toISOString(),
-          durationMs: completedAt2.getTime() - startedAt.getTime()
-        },
-        issues,
-        errors,
-        summary: {
-          toolId: TOOL_ID,
-          status: "success",
-          issueCount: 0,
-          errorCount: 0,
-          durationMs: completedAt2.getTime() - startedAt.getTime(),
-          filesAnalyzed: ctx.targetFiles.length
-        }
-      };
-    }
     const enabledPatterns = new Set(codacyConfig.patterns.map((p) => p.patternId));
     const checkParseError = enabledPatterns.has(PATTERN_PARSE_ERROR);
     const checkDuplicateKeys = enabledPatterns.has(PATTERN_DUPLICATE_KEYS);
+    let rootReal;
+    try {
+      rootReal = await import_promises.default.realpath(ctx.repositoryRoot);
+    } catch (err) {
+      errors.push({
+        toolId: TOOL_ID,
+        phase: "toolInvoke",
+        kind: "FileReadError",
+        message: `Cannot resolve repository root: ${err instanceof Error ? err.message : String(err)}`,
+        level: "error"
+      });
+      return buildResult(startedAt, /* @__PURE__ */ new Date(), issues, errors, ctx.targetFiles.length);
+    }
     for (const relPath of ctx.targetFiles) {
       const absPath = import_path.default.resolve(ctx.repositoryRoot, relPath);
+      const relToRoot = import_path.default.relative(ctx.repositoryRoot, absPath);
+      if (relToRoot === ".." || relToRoot.startsWith(`..${import_path.default.sep}`) || import_path.default.isAbsolute(relToRoot)) {
+        errors.push({
+          toolId: TOOL_ID,
+          phase: "toolInvoke",
+          kind: "FileReadError",
+          message: `Refusing path outside repository root: ${relPath}`,
+          level: "warning",
+          filePath: relPath
+        });
+        continue;
+      }
+      const fileReal = await import_promises.default.realpath(absPath).catch(() => null);
+      const realRelative = fileReal ? import_path.default.relative(rootReal, fileReal) : null;
+      if (realRelative !== null && (realRelative === ".." || realRelative.startsWith(`..${import_path.default.sep}`) || import_path.default.isAbsolute(realRelative))) {
+        errors.push({
+          toolId: TOOL_ID,
+          phase: "toolInvoke",
+          kind: "FileReadError",
+          message: `Refusing path outside repository root: ${relPath}`,
+          level: "warning",
+          filePath: relPath
+        });
+        continue;
+      }
       let content;
       try {
         content = await import_promises.default.readFile(absPath, "utf-8");
@@ -144,14 +168,15 @@ var adapter = {
         });
         continue;
       }
-      let parseFailed = false;
-      if (checkParseError) {
+      const strippedContent = stripJsonComments(content);
+      let syntaxValid = true;
+      if (checkParseError || checkDuplicateKeys) {
         try {
-          JSON.parse(content);
+          JSON.parse(strippedContent);
         } catch (err) {
-          if (err instanceof SyntaxError) {
-            parseFailed = true;
-            const { line, column } = extractPosition(err.message, content);
+          syntaxValid = false;
+          if (checkParseError && err instanceof SyntaxError) {
+            const { line, column } = extractPosition(err.message, strippedContent);
             const lines = content.split("\n");
             const lineContent = lines[line - 1] ?? "";
             issues.push({
@@ -168,8 +193,8 @@ var adapter = {
           }
         }
       }
-      if (checkDuplicateKeys && !parseFailed) {
-        const duplicates = findDuplicateKeys(content);
+      if (checkDuplicateKeys && syntaxValid) {
+        const duplicates = findDuplicateKeys(strippedContent);
         const lines = content.split("\n");
         for (const dup of duplicates) {
           const lineContent = lines[dup.line - 1] ?? "";
@@ -213,6 +238,59 @@ var adapter = {
     };
   }
 };
+function stripJsonComments(source) {
+  const len = source.length;
+  const result = new Array(len);
+  let i = 0;
+  while (i < len) {
+    const ch = source[i];
+    if (ch === '"') {
+      result[i] = ch;
+      i++;
+      while (i < len) {
+        const sc = source[i];
+        result[i] = sc;
+        i++;
+        if (sc === "\\" && i < len) {
+          result[i] = source[i];
+          i++;
+        } else if (sc === '"') {
+          break;
+        }
+      }
+      continue;
+    }
+    if (ch === "/" && i + 1 < len && source[i + 1] === "*") {
+      result[i] = " ";
+      result[i + 1] = " ";
+      i += 2;
+      while (i < len) {
+        if (source[i] === "*" && i + 1 < len && source[i + 1] === "/") {
+          result[i] = " ";
+          result[i + 1] = " ";
+          i += 2;
+          break;
+        }
+        result[i] = source[i] === "\n" ? "\n" : " ";
+        i++;
+      }
+      continue;
+    }
+    if (ch === "/" && i + 1 < len && source[i + 1] === "/") {
+      result[i] = " ";
+      result[i + 1] = " ";
+      i += 2;
+      while (i < len && source[i] !== "\n") {
+        result[i] = " ";
+        i++;
+      }
+      continue;
+    }
+    result[i] = ch;
+    i++;
+  }
+  return result.join("");
+}
 function extractPosition(message, source) {
   const posMatch = message.match(/position (\d+)/);
   if (posMatch) {

package/dist/metadata.d.ts

@@ -0,0 +1,13 @@
+import { AdapterDescriptor } from '@codacy/tooling';
+
+/**
+ * Lightweight adapter descriptor for lazy loading.
+ *
+ * This module contains only plain-data metadata fields and has zero heavy
+ * imports (no patterns.json, no runtime utilities). The CLI imports this
+ * at startup for adapter registration without loading the full adapter module.
+ */
+
+declare const descriptor: AdapterDescriptor;
+
+export { descriptor };

package/dist/metadata.js

@@ -0,0 +1,39 @@
+"use strict";
+var __defProp = Object.defineProperty;
+var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
+var __getOwnPropNames = Object.getOwnPropertyNames;
+var __hasOwnProp = Object.prototype.hasOwnProperty;
+var __export = (target, all) => {
+  for (var name in all)
+    __defProp(target, name, { get: all[name], enumerable: true });
+};
+var __copyProps = (to, from, except, desc) => {
+  if (from && typeof from === "object" || typeof from === "function") {
+    for (let key of __getOwnPropNames(from))
+      if (!__hasOwnProp.call(to, key) && key !== except)
+        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
+  }
+  return to;
+};
+var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
+
+// src/metadata.ts
+var metadata_exports = {};
+__export(metadata_exports, {
+  descriptor: () => descriptor
+});
+module.exports = __toCommonJS(metadata_exports);
+var descriptor = {
+  id: "jackson",
+  displayName: "Jackson Linter",
+  preferredVersion: "1.0.0",
+  languages: ["JSON"],
+  filePatterns: ["**/*.json"],
+  supportedOS: ["linux", "darwin", "win32"],
+  supportedArch: ["x64", "arm64"],
+  supportedRunners: ["local", "container"]
+};
+// Annotate the CommonJS export names for ESM import in node:
+0 && (module.exports = {
+  descriptor
+});

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@codacy/tools-jackson",
-  "version": "0.3.0",
+  "version": "0.5.0",
   "description": "Jackson Linter adapter — pure TypeScript JSON syntax validator",
   "main": "dist/index.js",
   "types": "dist/index.d.ts",
@@ -8,7 +8,7 @@
     "dist"
   ],
   "dependencies": {
-    "@codacy/tooling": "0.3.0"
+    "@codacy/tooling": "0.5.0"
   },
   "license": "MIT",
   "author": "Codacy <support@codacy.com> (https://www.codacy.com)",
@@ -21,8 +21,18 @@
   "engines": {
     "node": ">=20.0.0"
   },
+  "exports": {
+    ".": {
+      "types": "./dist/index.d.ts",
+      "default": "./dist/index.js"
+    },
+    "./metadata": {
+      "types": "./dist/metadata.d.ts",
+      "default": "./dist/metadata.js"
+    }
+  },
   "scripts": {
-    "build": "tsup src/index.ts --format cjs --dts --clean",
+    "build": "tsup src/index.ts src/metadata.ts --format cjs --dts --clean",
     "test": "vitest run",
     "lint": "eslint src/",
     "clean": "rm -rf dist",