@codacy/verity-cli 0.34.5-experimental.7268b07 → 0.34.5-experimental.eb39cc6

package/bin/verity.js

@@ -16946,7 +16946,9 @@ var TOP_KEYS = /* @__PURE__ */ new Set([
   "tool_configuration",
   "created_by",
   "version",
-  "verityignore"
+  "verityignore",
+  "extends",
+  "overrides"
 ]);
 var KNOWLEDGE_SPEC_KEYS = /* @__PURE__ */ new Set([
   "project_name",
@@ -16973,6 +16975,12 @@ var PATTERN_KEYS = /* @__PURE__ */ new Set([
 ]);
 var DIMENSION_KEYS = /* @__PURE__ */ new Set(["id", "description", "signals"]);
 var SEVERITIES = /* @__PURE__ */ new Set(["critical", "high", "medium", "med", "low"]);
+var PACK_REF = /^[a-z0-9][a-z0-9-]{0,39}\/[a-z0-9][a-z0-9-]{0,39}(@[A-Za-z0-9._-]{1,40})?$/;
+var MAX_EXTENDS = 32;
+var MAX_OVERRIDES = 500;
+var MAX_OVERRIDE_LIST = 50;
+var OVERRIDE_ID = /^[A-Za-z0-9][A-Za-z0-9_.:-]{0,119}$/;
+var OVERRIDE_TOKEN = /^[A-Za-z0-9_.\/*?{}[\],@!:+=-]{1,300}$/;
 var isPlainObject = (v) => typeof v === "object" && v !== null && !Array.isArray(v);
 var PRINTABLE = /^[^\u0000-\u001f\u007f]+$/;
 var CONTROL_EXCEPT_WHITESPACE = /[\u0000-\u0008\u000b\u000c\u000e-\u001f\u007f]/;
@@ -17001,6 +17009,51 @@ function checkValues(v, path, depth) {
   }
   return { ok: true };
 }
+function checkPackSettings(content) {
+  if ("extends" in content) {
+    const list2 = content.extends;
+    if (!Array.isArray(list2)) return fail("extends must be an array");
+    if (list2.length > MAX_EXTENDS) return fail(`extends has more than ${MAX_EXTENDS} entries`);
+    const seen = /* @__PURE__ */ new Set();
+    for (const [i2, ref] of list2.entries()) {
+      if (typeof ref !== "string" || !PACK_REF.test(ref)) {
+        return fail(`extends[${i2}] must be a pack reference such as verity/core or verity/core@2026.11`);
+      }
+      if (seen.has(ref)) return fail(`extends[${i2}] repeats ${ref}`);
+      seen.add(ref);
+    }
+  }
+  if ("overrides" in content) {
+    const overrides = content.overrides;
+    if (!isPlainObject(overrides)) return fail("overrides must be an object");
+    const entries = Object.entries(overrides);
+    if (entries.length > MAX_OVERRIDES) return fail(`overrides has more than ${MAX_OVERRIDES} entries`);
+    for (const [id, value] of entries) {
+      if (!OVERRIDE_ID.test(id)) return fail("overrides has a key that is not a pattern id (letters, digits, - _ . :)");
+      const at = `overrides.${id}`;
+      if (value === "off") continue;
+      if (!isPlainObject(value)) return fail(`${at} must be off or an object of settings`);
+      for (const [name2, v] of Object.entries(value)) {
+        if (!OVERRIDE_ID.test(name2)) return fail(`${at} has a setting name that is not a slug (letters, digits, - _ . :)`);
+        const where2 = `${at}.${name2}`;
+        if (Array.isArray(v)) {
+          if (v.length > MAX_OVERRIDE_LIST) return fail(`${where2} has more than ${MAX_OVERRIDE_LIST} entries`);
+          if (!v.every((x) => typeof x === "string" && OVERRIDE_TOKEN.test(x))) {
+            return fail(`${where2} must hold settings, not prose: ids, severities or globs without spaces`);
+          }
+        } else if (typeof v === "string") {
+          if (!OVERRIDE_TOKEN.test(v)) return fail(`${where2} must be a setting, not prose: an id, a severity or a glob without spaces`);
+        } else if (typeof v !== "boolean" && !(typeof v === "number" && Number.isFinite(v))) {
+          return fail(`${where2} must be text, a number, true or false, or a list of text`);
+        }
+      }
+      if ("severity" in value && !SEVERITIES.has(String(value.severity))) {
+        return fail(`${at}.severity must be one of critical, high, medium, low`);
+      }
+    }
+  }
+  return { ok: true };
+}
 function unknownKey(obj, allowed, where2) {
   const extra = Object.keys(obj).find((k) => !allowed.has(k));
   return extra === void 0 ? null : fail(`${where2}.${extra} is not a known field`);
@@ -17027,10 +17080,10 @@ function checkEntries(list2, section, allowed, withSeverity) {
 function validateStandardContent(content, opts = {}) {
   const requireAll = opts.requireAll ?? true;
   if (!isPlainObject(content)) return fail("content is required and must be an object");
-  const size = new TextEncoder().encode(JSON.stringify(content)).length;
-  if (size > MAX_STANDARD_BYTES) return fail(`content is ${size} bytes; the limit is ${MAX_STANDARD_BYTES}`);
   const values = checkValues(content, "", 0);
   if (!values.ok) return values;
+  const size = new TextEncoder().encode(JSON.stringify(content)).length;
+  if (size > MAX_STANDARD_BYTES) return fail(`content is ${size} bytes; the limit is ${MAX_STANDARD_BYTES}`);
   const missing = ["knowledge_spec", "quality_dimensions", "security_patterns", "process_constraints"].filter((k) => !(k in content));
   if (requireAll && missing.length > 0) return fail(`content is missing required keys: ${missing.join(", ")}`);
   const extraTop = unknownKey(content, TOP_KEYS, "content");
@@ -17059,6 +17112,8 @@ function validateStandardContent(content, opts = {}) {
     const custom = checkEntries(content.custom_patterns, "custom_patterns", PATTERN_KEYS, true);
     if (!custom.ok) return custom;
   }
+  const pack = checkPackSettings(content);
+  if (!pack.ok) return pack;
   for (const key of ["created_by", "version"]) {
     if (key in content && content[key] !== null && typeof content[key] !== "string") return fail(`${key} must be a string`);
   }
@@ -28395,7 +28450,7 @@ function channelSilence(input) {
 // src/lib/cli-version.ts
 function cliVersion() {
   try {
-    return true ? "0.34.5-experimental.7268b07" : "dev";
+    return true ? "0.34.5-experimental.eb39cc6" : "dev";
   } catch {
     return "dev";
   }
@@ -42663,7 +42718,7 @@ async function recordAnswers(ui, momentIds, telemetry) {
     await writeSetupState({
       moments: momentIds,
       ...telemetry ? { telemetry } : {},
-      init: { completed_at: (/* @__PURE__ */ new Date()).toISOString(), cli_version: true ? "0.34.5-experimental.7268b07" : "dev" }
+      init: { completed_at: (/* @__PURE__ */ new Date()).toISOString(), cli_version: true ? "0.34.5-experimental.eb39cc6" : "dev" }
     });
   } catch (err2) {
     ui.rail.line(`Could not record the setup answers: ${terminalText(err2.message, 200)}`, "warn");
@@ -44640,10 +44695,10 @@ function registerLeanCommand(program2) {
 }
 
 // src/cli.ts
-program.name("verity").description("CLI for Verity quality gate service").version("0.34.5-experimental.7268b07").option("--token <token>", "Override authentication token").option("--service-url <url>", "Override service URL").option("--verbose", "Log HTTP requests/responses to stderr").hook("preAction", async (_thisCommand, actionCommand) => {
+program.name("verity").description("CLI for Verity quality gate service").version("0.34.5-experimental.eb39cc6").option("--token <token>", "Override authentication token").option("--service-url <url>", "Override service URL").option("--verbose", "Log HTTP requests/responses to stderr").hook("preAction", async (_thisCommand, actionCommand) => {
   const isTelemetryHelper = actionCommand.name() === "headers" && actionCommand.parent?.name() === "telemetry";
   if (!isTelemetryHelper) {
-    installStderrLog(actionCommand.name(), process.argv.slice(2), "0.34.5-experimental.7268b07");
+    installStderrLog(actionCommand.name(), process.argv.slice(2), "0.34.5-experimental.eb39cc6");
   }
   setUserNamedServiceUrl(program.opts().serviceUrl);
   try {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@codacy/verity-cli",
-  "version": "0.34.5-experimental.7268b07",
+  "version": "0.34.5-experimental.eb39cc6",
   "description": "CLI for Verity quality gate service",
   "license": "SEE LICENSE IN LICENSE",
   "homepage": "https://verity.md",