@codefast/cli 0.12.0 → 0.13.0

package/dist/audit/assertions/prepare.d.ts

@@ -0,0 +1,16 @@
+import type { AuditCommandPrelude } from "#audit/prepare";
+import type { AppError } from "#core/errors";
+import type { Filesystem } from "#core/filesystem/filesystem";
+import type { Result } from "#core/result";
+/**
+ * Loads config and resolves the scan target for `audit assertions`.
+ *
+ * @remarks Defaults to the repo root, tests included: a double assertion in a test silences the
+ * compiler on the code the test is meant to hold to its types.
+ *
+ * @since 0.13.0
+ */
+export declare function prepareAssertionAudit(fs: Filesystem, args: {
+    readonly currentWorkingDirectory: string;
+    readonly rawTarget: string | undefined;
+}): Promise<Result<AuditCommandPrelude, AppError>>;

package/dist/audit/assertions/prepare.js

@@ -0,0 +1,12 @@
+import { prepareRepoRootAudit } from "#audit/prepare";
+/**
+ * Loads config and resolves the scan target for `audit assertions`.
+ *
+ * @remarks Defaults to the repo root, tests included: a double assertion in a test silences the
+ * compiler on the code the test is meant to hold to its types.
+ *
+ * @since 0.13.0
+ */
+export async function prepareAssertionAudit(fs, args) {
+    return prepareRepoRootAudit(fs, args, (config) => config.audit?.assertions?.allowlist ?? []);
+}

package/dist/audit/assertions/run.d.ts

@@ -0,0 +1,14 @@
+import type { AssertionAuditResult } from "#audit/domain/types";
+import { AppError } from "#core/errors";
+import type { Filesystem } from "#core/filesystem/filesystem";
+import type { Result } from "#core/result";
+/**
+ * Scans a target path for double assertions through `unknown` or `any`, tests included.
+ *
+ * @since 0.13.0
+ */
+export declare function runAssertionAudit(fs: Filesystem, args: {
+    readonly rootDir: string;
+    readonly targetPath: string;
+    readonly allowlist: ReadonlyArray<string>;
+}): Result<AssertionAuditResult, AppError>;

package/dist/audit/assertions/run.js

@@ -0,0 +1,40 @@
+import path from "node:path";
+import { auditDoubleAssertionSource } from "#audit/assertions/domain/double-assertion";
+import { AppError, messageFrom } from "#core/errors";
+import { err, ok } from "#core/result";
+import { walkTsxFiles } from "#core/workspace/typescript-walk";
+/**
+ * Scans a target path for double assertions through `unknown` or `any`, tests included.
+ *
+ * @since 0.13.0
+ */
+export function runAssertionAudit(fs, args) {
+    try {
+        const allowlist = new Set(args.allowlist);
+        const { rootDir, targetPath } = args;
+        const filesToScan = fs.statSync(targetPath).isFile() ? [targetPath] : walkTsxFiles(targetPath, fs);
+        const files = [];
+        let violationCount = 0;
+        let allowlistedCount = 0;
+        for (const absolutePath of filesToScan) {
+            const relativePath = path.relative(rootDir, absolutePath).split(path.sep).join("/");
+            const content = fs.readFileSync(absolutePath, "utf8");
+            const remaining = auditDoubleAssertionSource(absolutePath, content).filter(({ raw }) => {
+                const isAllowed = allowlist.has(raw) || allowlist.has(`${relativePath}:${raw}`);
+                if (isAllowed) {
+                    allowlistedCount++;
+                }
+                return !isAllowed;
+            });
+            if (remaining.length === 0) {
+                continue;
+            }
+            violationCount += remaining.length;
+            files.push({ relativePath, violations: remaining });
+        }
+        return ok({ files, violationCount, allowlistedCount, scannedFileCount: filesToScan.length });
+    }
+    catch (caughtError) {
+        return err(new AppError("INFRA_FAILURE", messageFrom(caughtError), caughtError));
+    }
+}

package/dist/audit/command.js

@@ -1,9 +1,19 @@
 import { Command } from "commander";
+import { exitCodeForAssertionAuditResult, formatAssertionAuditJsonOutput } from "#audit/assertions/cli-result";
+import { assertionAuditRunRequestSchema } from "#audit/assertions/cli-schema";
+import { presentAssertionAuditResult } from "#audit/assertions/output";
+import { prepareAssertionAudit } from "#audit/assertions/prepare";
+import { runAssertionAudit } from "#audit/assertions/run";
 import { exitCodeForCommentAuditResult, formatCommentAuditJsonOutput } from "#audit/comments/cli-result";
 import { commentAuditRunRequestSchema } from "#audit/comments/cli-schema";
 import { presentCommentAuditResult } from "#audit/comments/output";
 import { prepareCommentAudit } from "#audit/comments/prepare";
 import { runCommentAudit } from "#audit/comments/run";
+import { exitCodeForConstantAuditResult, formatConstantAuditJsonOutput } from "#audit/constants/cli-result";
+import { constantAuditRunRequestSchema } from "#audit/constants/cli-schema";
+import { presentConstantAuditResult } from "#audit/constants/output";
+import { prepareConstantAudit } from "#audit/constants/prepare";
+import { runConstantAudit } from "#audit/constants/run";
 import { exitCodeForDisplayNameAuditResult, formatDisplayNameAuditJsonOutput } from "#audit/display-names/cli-result";
 import { displayNameAuditRunRequestSchema } from "#audit/display-names/cli-schema";
 import { presentDisplayNameAuditResult } from "#audit/display-names/output";
@@ -79,6 +89,22 @@ const importsCheck = {
     formatJson: formatImportsAuditJsonOutput,
     exitCode: exitCodeForImportsAuditResult,
 };
+const assertionsCheck = {
+    name: "assertions",
+    description: "Report double type assertions through unknown or any (x as unknown as T), tests included",
+    targetHelp: "Directory or file to scan (default: the repo root)",
+    schema: assertionAuditRunRequestSchema,
+    prepare: prepareAssertionAudit,
+    buildRequest: baseAuditRequest,
+    run: (fs, request) => runAssertionAudit(fs, {
+        rootDir: request.rootDir,
+        targetPath: request.targetPath,
+        allowlist: request.allowlist ?? [],
+    }),
+    present: presentAssertionAuditResult,
+    formatJson: formatAssertionAuditJsonOutput,
+    exitCode: exitCodeForAssertionAuditResult,
+};
 const displayNamesCheck = {
     name: "display-names",
     description: "Report token(), tag() and module display names that break the <namespace>:<Name> convention",
@@ -95,6 +121,22 @@ const displayNamesCheck = {
     formatJson: formatDisplayNameAuditJsonOutput,
     exitCode: exitCodeForDisplayNameAuditResult,
 };
+const constantsCheck = {
+    name: "constants",
+    description: "Report numeric constants whose comment names none of the three kinds a number may be",
+    targetHelp: "Directory or file to scan (default: audit.constants.target from config)",
+    schema: constantAuditRunRequestSchema,
+    prepare: prepareConstantAudit,
+    buildRequest: baseAuditRequest,
+    run: (fs, request) => runConstantAudit(fs, {
+        rootDir: request.rootDir,
+        targetPath: request.targetPath,
+        allowlist: request.allowlist ?? [],
+    }),
+    present: presentConstantAuditResult,
+    formatJson: formatConstantAuditJsonOutput,
+    exitCode: exitCodeForConstantAuditResult,
+};
 const commentsCheck = {
     name: "comments",
     description: "Report section dividers that are not in the repo's one allowed form",
@@ -117,7 +159,7 @@ const commentsCheck = {
 };
 const publishCheck = {
     name: "publish",
-    description: "Report what breaks a consumer's install: #/ imports and exports/imports targets not shipped",
+    description: "Report what breaks a consumer's install: #/ imports, unshipped exports/imports targets, and stylesheet @source paths reaching nothing shipped",
     targetHelp: "Directory or file to scan (default: the repo root)",
     schema: publishAuditRunRequestSchema,
     prepare: preparePublishAudit,
@@ -156,7 +198,9 @@ export function createAuditCommand() {
     registerPipelineSubcommand(cmd, nodeFilesystem, auditCheckToPipeline(rtlCheck));
     registerPipelineSubcommand(cmd, nodeFilesystem, auditCheckToPipeline(linksCheck));
     registerPipelineSubcommand(cmd, nodeFilesystem, auditCheckToPipeline(importsCheck));
+    registerPipelineSubcommand(cmd, nodeFilesystem, auditCheckToPipeline(assertionsCheck));
     registerPipelineSubcommand(cmd, nodeFilesystem, auditCheckToPipeline(displayNamesCheck));
+    registerPipelineSubcommand(cmd, nodeFilesystem, auditCheckToPipeline(constantsCheck));
     registerPipelineSubcommand(cmd, nodeFilesystem, auditCheckToPipeline(commentsCheck));
     registerPipelineSubcommand(cmd, nodeFilesystem, auditCheckToPipeline(publishCheck));
     return cmd;

package/dist/audit/constants/cli-result.d.ts

@@ -0,0 +1,13 @@
+import type { ConstantAuditResult } from "#audit/domain/types";
+/**
+ * Exit `1` when any non-allowlisted numeric constant is unlabelled.
+ *
+ * @since 0.11.0
+ */
+export declare function exitCodeForConstantAuditResult(result: ConstantAuditResult): number;
+/**
+ * Machine-readable numeric-constant summary for `--json`.
+ *
+ * @since 0.11.0
+ */
+export declare function formatConstantAuditJsonOutput(result: ConstantAuditResult, rootDir: string): string;

package/dist/audit/constants/cli-result.js

@@ -0,0 +1,22 @@
+import { CLI_EXIT_GENERAL_ERROR, CLI_EXIT_SUCCESS } from "#core/exit-codes";
+/**
+ * Exit `1` when any non-allowlisted numeric constant is unlabelled.
+ *
+ * @since 0.11.0
+ */
+export function exitCodeForConstantAuditResult(result) {
+    return result.violationCount > 0 ? CLI_EXIT_GENERAL_ERROR : CLI_EXIT_SUCCESS;
+}
+/**
+ * Machine-readable numeric-constant summary for `--json`.
+ *
+ * @since 0.11.0
+ */
+export function formatConstantAuditJsonOutput(result, rootDir) {
+    return JSON.stringify({
+        schemaVersion: 1,
+        ok: result.violationCount === 0,
+        cwd: rootDir,
+        result,
+    });
+}

package/dist/audit/constants/cli-schema.d.ts

@@ -0,0 +1,18 @@
+import * as z from "zod";
+/**
+ * Resolved request for a single numeric-constant audit run.
+ *
+ * @since 0.11.0
+ */
+export type ConstantAuditRunRequest = {
+    readonly rootDir: string;
+    readonly targetPath: string;
+    readonly allowlist?: ReadonlyArray<string> | undefined;
+    readonly json: boolean;
+};
+/**
+ * Zod schema for {@link ConstantAuditRunRequest}.
+ *
+ * @since 0.11.0
+ */
+export declare const constantAuditRunRequestSchema: z.ZodType<ConstantAuditRunRequest>;

package/dist/audit/constants/cli-schema.js

@@ -0,0 +1,12 @@
+import * as z from "zod";
+/**
+ * Zod schema for {@link ConstantAuditRunRequest}.
+ *
+ * @since 0.11.0
+ */
+export const constantAuditRunRequestSchema = z.object({
+    rootDir: z.string().min(1),
+    targetPath: z.string().min(1),
+    allowlist: z.array(z.string()).optional(),
+    json: z.boolean(),
+});

package/dist/audit/constants/domain/constants.d.ts

@@ -0,0 +1,8 @@
+/** The numeric-constant convention: a `const NAME = <number>` in a source tree names the kind of number it is. */
+import type { ConstantViolation } from "#audit/domain/types";
+/**
+ * Scans one TypeScript source for numeric constants whose comment names none of the three kinds.
+ *
+ * @since 0.11.0
+ */
+export declare function auditNumericConstants(sourceText: string): Array<ConstantViolation>;

package/dist/audit/constants/domain/constants.js

@@ -0,0 +1,66 @@
+/**
+ * The three kinds a numeric constant may be, each named by one phrase in the comment above it.
+ *
+ * @remarks A width of the machine, a value the contract fixes, or a figure derived from the data a
+ * bind hands in. A count that merely looks reasonable is none of them, and the audit says so.
+ */
+const KIND_PHRASES = [
+    "a constant of the machine",
+    "a value the contract fixes",
+    "derived from bind-time data",
+];
+/** An upper-case `const` bound to a numeric literal, with an optional type annotation. */
+const NUMERIC_CONST = /^\s*(?:export\s+)?const\s+([A-Z][A-Z0-9_]*)\s*(?::[^=]+)?=\s*(-?\d[\d_]*(?:\.\d+)?)(?![\w.])/;
+/** Values that stand for absence or identity, never for a tuned size: any distinct value would do. */
+const SENTINEL_VALUES = new Set(["0", "1", "-1"]);
+/**
+ * Scans one TypeScript source for numeric constants whose comment names none of the three kinds.
+ *
+ * @since 0.11.0
+ */
+export function auditNumericConstants(sourceText) {
+    const lines = sourceText.split("\n");
+    const violations = [];
+    for (let index = 0; index < lines.length; index += 1) {
+        const match = NUMERIC_CONST.exec(lines[index]);
+        if (match === null || SENTINEL_VALUES.has(match[2])) {
+            continue;
+        }
+        const comment = commentAbove(lines, index);
+        if (KIND_PHRASES.some((phrase) => comment.includes(phrase))) {
+            continue;
+        }
+        violations.push({
+            line: index + 1,
+            raw: `${match[1]} = ${match[2]}`,
+            reason: `no kind named above it — say which it is: ${KIND_PHRASES.join(" · ")}`,
+        });
+    }
+    return violations;
+}
+/** The doc block or run of `//` lines directly above a line, as one text; empty when there is none. */
+function commentAbove(lines, index) {
+    let cursor = index - 1;
+    const gathered = [];
+    while (cursor >= 0) {
+        const line = lines[cursor].trim();
+        if (line.startsWith("//")) {
+            gathered.unshift(line);
+            cursor -= 1;
+            continue;
+        }
+        if (line.endsWith("*/")) {
+            // Walk back to the opening of the block, collecting it whole.
+            while (cursor >= 0) {
+                gathered.unshift(lines[cursor].trim());
+                if (lines[cursor].trim().startsWith("/*")) {
+                    break;
+                }
+                cursor -= 1;
+            }
+            break;
+        }
+        break;
+    }
+    return gathered.join(" ");
+}

package/dist/audit/constants/output.d.ts

@@ -0,0 +1,7 @@
+import type { ConstantAuditResult } from "#audit/domain/types";
+/**
+ * Human-readable numeric-constant report.
+ *
+ * @since 0.11.0
+ */
+export declare function presentConstantAuditResult(result: ConstantAuditResult): void;

package/dist/audit/constants/output.js

@@ -0,0 +1,21 @@
+import { logger } from "#core/logger";
+/**
+ * Human-readable numeric-constant report.
+ *
+ * @since 0.11.0
+ */
+export function presentConstantAuditResult(result) {
+    for (const file of result.files) {
+        logger.out(`\n${file.relativePath}`);
+        for (const { line, raw, reason } of file.violations) {
+            logger.out(`  ${line}: ${raw} → ${reason}`);
+        }
+    }
+    const allowlistSuffix = result.allowlistedCount > 0 ? ` (${result.allowlistedCount} allowlisted)` : "";
+    if (result.violationCount > 0) {
+        logger.out(`\n✖ ${result.violationCount} numeric constant(s) with no kind named${allowlistSuffix}`);
+    }
+    else {
+        logger.out(`✓ Every numeric constant names its kind across ${result.scannedFileCount} source file(s)${allowlistSuffix}`);
+    }
+}

package/dist/audit/constants/prepare.d.ts

@@ -0,0 +1,16 @@
+import type { AuditCommandPrelude } from "#audit/prepare";
+import { AppError } from "#core/errors";
+import type { Filesystem } from "#core/filesystem/filesystem";
+import type { Result } from "#core/result";
+/**
+ * Loads config and resolves the scan target for `audit constants`.
+ *
+ * @remarks The target is the library tree the convention holds over, from `audit.constants.target`
+ * unless the command names one.
+ *
+ * @since 0.11.0
+ */
+export declare function prepareConstantAudit(fs: Filesystem, args: {
+    readonly currentWorkingDirectory: string;
+    readonly rawTarget: string | undefined;
+}): Promise<Result<AuditCommandPrelude, AppError>>;

package/dist/audit/constants/prepare.js

@@ -0,0 +1,37 @@
+import { resolveRepoRelativePath } from "#audit/prepare";
+import { loadCodefastConfig } from "#core/config";
+import { AppError, messageFrom } from "#core/errors";
+import { err, ok } from "#core/result";
+import { resolveProjectRoot } from "#core/workspace/resolver";
+/**
+ * Loads config and resolves the scan target for `audit constants`.
+ *
+ * @remarks The target is the library tree the convention holds over, from `audit.constants.target`
+ * unless the command names one.
+ *
+ * @since 0.11.0
+ */
+export async function prepareConstantAudit(fs, args) {
+    let rootDir;
+    try {
+        rootDir = fs.canonicalPathSync(resolveProjectRoot(args.currentWorkingDirectory, fs).rootDir);
+    }
+    catch (caughtError) {
+        return err(new AppError("INFRA_FAILURE", messageFrom(caughtError), caughtError));
+    }
+    const loadedOutcome = await loadCodefastConfig(rootDir, fs);
+    if (!loadedOutcome.ok) {
+        return loadedOutcome;
+    }
+    const { config } = loadedOutcome.value;
+    const constantsConfig = config.audit?.constants ?? {};
+    const resolvedTargetInput = args.rawTarget ?? constantsConfig.target;
+    if (resolvedTargetInput === undefined) {
+        return err(new AppError("VALIDATION_ERROR", "audit constants needs a target: pass one, or set audit.constants.target in codefast.config"));
+    }
+    const targetPath = resolveRepoRelativePath(args.rawTarget !== undefined ? args.currentWorkingDirectory : rootDir, resolvedTargetInput);
+    if (!fs.existsSync(targetPath)) {
+        return err(new AppError("NOT_FOUND", `Not found: ${targetPath}`));
+    }
+    return ok({ rootDir, targetPath: fs.canonicalPathSync(targetPath), allowlist: constantsConfig.allowlist ?? [] });
+}

package/dist/audit/constants/run.d.ts

@@ -0,0 +1,14 @@
+import type { ConstantAuditResult } from "#audit/domain/types";
+import { AppError } from "#core/errors";
+import type { Filesystem } from "#core/filesystem/filesystem";
+import type { Result } from "#core/result";
+/**
+ * Scans a target path's library sources for numeric constants that name none of the three kinds.
+ *
+ * @since 0.11.0
+ */
+export declare function runConstantAudit(fs: Filesystem, args: {
+    readonly rootDir: string;
+    readonly targetPath: string;
+    readonly allowlist: ReadonlyArray<string>;
+}): Result<ConstantAuditResult, AppError>;

package/dist/audit/constants/run.js

@@ -0,0 +1,64 @@
+import path from "node:path";
+import { auditNumericConstants } from "#audit/constants/domain/constants";
+import { AppError, messageFrom } from "#core/errors";
+import { err, ok } from "#core/result";
+import { walkTsxFiles } from "#core/workspace/typescript-walk";
+/**
+ * Trees the convention does not reach: a test fixes a value to observe it, a benchmark sizes a
+ * workload, and an app or example is a consumer, not the library.
+ */
+const SKIPPED_SEGMENTS = new Set([
+    "tests",
+    "benchmarks",
+    "apps",
+    "examples",
+    "node_modules",
+    "dist",
+]);
+/**
+ * Scans a target path's library sources for numeric constants that name none of the three kinds.
+ *
+ * @since 0.11.0
+ */
+export function runConstantAudit(fs, args) {
+    try {
+        const allowlist = new Set(args.allowlist);
+        const { rootDir, targetPath } = args;
+        const filesToScan = collectScanPaths(fs, rootDir, targetPath);
+        const files = [];
+        let violationCount = 0;
+        let allowlistedCount = 0;
+        for (const absolutePath of filesToScan) {
+            const relativePath = toPosixPath(path.relative(rootDir, absolutePath));
+            const content = fs.readFileSync(absolutePath, "utf8");
+            const remaining = auditNumericConstants(content).filter(({ raw }) => {
+                const name = raw.split(" ")[0];
+                const isAllowed = allowlist.has(name) || allowlist.has(`${relativePath}:${name}`);
+                if (isAllowed) {
+                    allowlistedCount++;
+                }
+                return !isAllowed;
+            });
+            if (remaining.length === 0) {
+                continue;
+            }
+            violationCount += remaining.length;
+            files.push({ relativePath, violations: remaining });
+        }
+        return ok({ files, violationCount, allowlistedCount, scannedFileCount: filesToScan.length });
+    }
+    catch (error) {
+        return err(new AppError("INFRA_FAILURE", messageFrom(error), error));
+    }
+}
+/** The `.ts` files under a `src` directory of a library package, below the target. */
+function collectScanPaths(fs, rootDir, targetPath) {
+    const candidates = fs.statSync(targetPath).isDirectory() ? walkTsxFiles(targetPath, fs) : [targetPath];
+    return candidates.filter((absolutePath) => {
+        const segments = toPosixPath(path.relative(rootDir, absolutePath)).split("/");
+        return segments.includes("src") && !segments.some((segment) => SKIPPED_SEGMENTS.has(segment));
+    });
+}
+function toPosixPath(filePath) {
+    return filePath.split(path.sep).join("/");
+}

package/dist/audit/display-names/domain/display-names.js

@@ -1,3 +1,4 @@
+import { lineOfOffset } from "#core/source-position";
 /** The owner: a kebab-case package, app or feature slug, or a scoped package name. */
 const NAMESPACE = /^(?:@[a-z0-9-]+\/)?[a-z0-9]+(?:-[a-z0-9]+)*$/;
 /** A token or module stands for a type or a unit of composition. */
@@ -59,13 +60,4 @@ function reasonFor(kind, name) {
     return PASCAL_CASE.test(local)
         ? null
         : `${label} '${local}' in '${name}' is not PascalCase — a ${kind} stands for a ${kind === "token" ? "type" : "unit of composition"}`;
-}
-function lineOfOffset(sourceText, offset) {
-    let line = 1;
-    for (let index = 0; index < offset; index++) {
-        if (sourceText.charCodeAt(index) === 10) {
-            line++;
-        }
-    }
-    return line;
 }

package/dist/audit/domain/types.d.ts

@@ -73,6 +73,37 @@ export type ImportsAuditResult = {
     readonly allowlistedCount: number;
     readonly scannedFileCount: number;
 };
+/**
+ * A double assertion through `unknown` or `any`, or a directive that keeps one without cause.
+ *
+ * @since 0.13.0
+ */
+export type AssertionViolation = {
+    readonly line: number;
+    /** The assertion or the directive as written, up to its first line break. */
+    readonly raw: string;
+    readonly reason: string;
+};
+/**
+ * The type-assertion violations found in one file.
+ *
+ * @since 0.13.0
+ */
+export type AssertionFileViolations = {
+    readonly relativePath: string;
+    readonly violations: Array<AssertionViolation>;
+};
+/**
+ * Outcome of one `audit assertions` run.
+ *
+ * @since 0.13.0
+ */
+export type AssertionAuditResult = {
+    readonly files: Array<AssertionFileViolations>;
+    readonly violationCount: number;
+    readonly allowlistedCount: number;
+    readonly scannedFileCount: number;
+};
 /**
  * A `token()`, `tag()` or module display name that breaks the display-name convention.
  *
@@ -104,6 +135,37 @@ export type DisplayNameAuditResult = {
     readonly allowlistedCount: number;
     readonly scannedFileCount: number;
 };
+/**
+ * A numeric constant whose comment names none of the three kinds.
+ *
+ * @since 0.11.0
+ */
+export type ConstantViolation = {
+    readonly line: number;
+    /** The declaration's name and value, as `NAME = 32`. */
+    readonly raw: string;
+    readonly reason: string;
+};
+/**
+ * The numeric-constant violations found in one file.
+ *
+ * @since 0.11.0
+ */
+export type ConstantFileViolations = {
+    readonly relativePath: string;
+    readonly violations: Array<ConstantViolation>;
+};
+/**
+ * Outcome of one `audit constants` run.
+ *
+ * @since 0.11.0
+ */
+export type ConstantAuditResult = {
+    readonly files: Array<ConstantFileViolations>;
+    readonly violationCount: number;
+    readonly allowlistedCount: number;
+    readonly scannedFileCount: number;
+};
 /**
  * A broken link or anchor found by the link audit.
  *
@@ -200,6 +262,28 @@ export type UnshippedTargetViolation = {
     readonly subpath: string;
     readonly target: string;
 };
+/**
+ * A path a stylesheet registers with Tailwind's `@source`, as written.
+ *
+ * @since 0.13.0
+ */
+export type StylesheetSource = {
+    readonly line: number;
+    readonly pattern: string;
+};
+/**
+ * A shipped stylesheet whose `@source` paths reach no file its package's tarball ships.
+ *
+ * @since 0.13.0
+ */
+export type UnreachableStylesheetViolation = {
+    readonly packageName: string;
+    /** Repo-relative path of the stylesheet. */
+    readonly stylesheet: string;
+    readonly sources: Array<StylesheetSource>;
+    /** The `files` entries missing on disk, which is how an unbuilt `dist` shows up. */
+    readonly missingFilesEntries: Array<string>;
+};
 /**
  * Outcome of one `audit publish` run.
  *
@@ -208,6 +292,7 @@ export type UnshippedTargetViolation = {
 export type PublishAuditResult = {
     readonly legacyImportFiles: Array<LegacySubpathFile>;
     readonly unshipped: Array<UnshippedTargetViolation>;
+    readonly unreachableStylesheets: Array<UnreachableStylesheetViolation>;
     readonly legacyImportCount: number;
     readonly scannedFileCount: number;
     readonly packageCount: number;

package/dist/audit/imports/domain/import-policy.js

@@ -1,4 +1,6 @@
 import { parseSync } from "oxc-parser";
+import { isOxcNode, programStatements } from "#core/oxc-node";
+import { firstLineOf, lineOfOffset } from "#core/source-position";
 /**
  * The import policies enforced across the monorepo: React members by name (never a namespace,
  * default, or implicit `React.*` UMD global), and Zod as a namespace repo-wide — the house form,
@@ -20,9 +22,6 @@ export const defaultImportPolicyRules = [
             "locale set into any bundle that reaches it)",
     },
 ];
-function isOxcNode(value) {
-    return typeof value === "object" && value !== null && typeof value.type === "string";
-}
 function isIdentifierNamed(node, name) {
     return isOxcNode(node) && node.type === "Identifier" && node.name === name;
 }
@@ -41,7 +40,7 @@ function importedName(specifier) {
  */
 export function auditImportPolicySource(filePath, sourceText, rules) {
     const { program } = parseSync(filePath, sourceText);
-    const statements = program.body;
+    const statements = programStatements(program);
     const violations = [];
     const boundUmdNames = new Set();
     for (const rule of rules) {
@@ -89,7 +88,7 @@ export function auditImportPolicySource(filePath, sourceText, rules) {
         }
     }
     for (const rule of rules) {
-        if (rule.umdGlobal !== undefined && !boundUmdNames.has(rule.umdGlobal)) {
+        if (rule.umdGlobal !== undefined && !boundUmdNames.has(rule.umdGlobal) && isOxcNode(program)) {
             collectUmdGlobalReferences(program, sourceText, rule, violations);
         }
     }
@@ -124,17 +123,4 @@ function collectUmdGlobalReferences(node, sourceText, rule, violations) {
             collectUmdGlobalReferences(value, sourceText, rule, violations);
         }
     }
-}
-function lineOfOffset(sourceText, offset) {
-    let line = 1;
-    for (let index = 0; index < offset; index++) {
-        if (sourceText.charCodeAt(index) === 10) {
-            line++;
-        }
-    }
-    return line;
-}
-function firstLineOf(text) {
-    const newlineIndex = text.indexOf("\n");
-    return newlineIndex === -1 ? text : text.slice(0, newlineIndex);
 }