@component-compass/plugin-core 0.1.23 → 0.1.28

package/dist/v2/schema.js

@@ -0,0 +1,188 @@
+import { z } from "zod";
+import { componentKey } from "./component-key.js";
+import { SCHEMA_VERSION } from "./schema-version.js";
+/** A non-null, non-array object. */
+export function isPlainObject(value) {
+    return typeof value === "object" && value !== null && !Array.isArray(value);
+}
+/** A nested shape typed here in TypeScript, checked as a plain object only. */
+const plainObject = () => z.custom((value) => isPlainObject(value));
+const nonEmptyString = z.string().min(1);
+const finiteNumber = z.number().finite();
+/** A string `Date.parse` accepts. */
+const timestamp = z.string().refine((value) => !Number.isNaN(Date.parse(value)));
+/** Adds a cross-field issue at `path`, relative to the refined value. */
+function fail(ctx, path) {
+    ctx.addIssue({ code: z.ZodIssueCode.custom, path });
+}
+/**
+ * An open list keyed by `kind`: a known kind is checked against its variant, and any other non-empty kind passes
+ * with its other fields kept, unchecked.
+ */
+function openKinds(...variants) {
+    const known = z.discriminatedUnion("kind", variants);
+    const other = z
+        .object({ kind: nonEmptyString })
+        .passthrough()
+        .superRefine((value, ctx) => {
+        // A known kind gets here only when its variant failed: its variant's issues, at their fields, reject it.
+        if (!known.optionsMap.has(value.kind))
+            return;
+        for (const issue of known.safeParse(value).error?.issues ?? [])
+            ctx.addIssue(issue);
+    });
+    return z.union([known, other]);
+}
+/** An open list of plain values: any non-empty string passes, including one this version doesn't know. */
+const openValue = nonEmptyString;
+/**
+ * Whether an open-list value has the known `kind`, narrowing it to that variant. The narrowing holds for a value
+ * `validateArtifact` accepted, which checks a known kind's fields, and for one the scanner built as `Known<T>`.
+ */
+export function isKind(value, kind) {
+    return value.kind === kind;
+}
+/** The fields naming a repository declaration, in both an identity and an attribution target. */
+const repositoryDeclarationFields = { repoId: nonEmptyString, filePath: nonEmptyString, exportName: nonEmptyString };
+const identitySchema = z.discriminatedUnion("kind", [
+    z.object({ kind: z.literal("package-export"), packageName: nonEmptyString, publicEntry: z.string(), exportName: nonEmptyString }),
+    z.object({ kind: z.literal("repository-declaration"), ...repositoryDeclarationFields }),
+    z.object({ kind: z.literal("tag"), tagName: nonEmptyString }),
+]);
+const frameworkSchema = z.enum(["react", "vue"]);
+const creditSchema = openKinds(z.object({ kind: z.literal("render") }), z.object({ kind: z.literal("argument"), callee: z.string(), index: finiteNumber }));
+const sourceLocSchema = z.object({ file: z.string(), line: finiteNumber, column: finiteNumber });
+const traceStepSchema = openKinds(z.object({ kind: z.literal("import"), specifier: z.string(), name: z.string() }), z.object({ kind: z.literal("tag"), written: z.string() }), z.object({ kind: z.literal("hoc"), callee: z.string() }), z.object({ kind: z.literal("lazy"), callee: z.string() }), z.object({ kind: z.literal("dynamic-map"), mapName: z.string(), mapLoc: sourceLocSchema }), z.object({ kind: z.literal("helper-call"), callee: z.string(), calleeFile: z.string() }), z.object({ kind: z.literal("prop-forward"), bindingName: z.string(), constructionSite: sourceLocSchema }));
+const unresolvedReasonSchema = openKinds(z.object({ kind: z.literal("package-not-installed"), packageName: nonEmptyString }), z.object({ kind: z.literal("module-not-found") }), z.object({ kind: z.literal("unbound-name"), name: nonEmptyString }), z.object({ kind: z.literal("chain-bailed"), code: openValue }));
+const resolutionSchema = z.discriminatedUnion("status", [
+    z.object({ status: z.literal("resolved"), componentId: z.string() }),
+    z.object({
+        status: z.literal("unresolved"),
+        reason: unresolvedReasonSchema,
+        /** Never present on an unresolved occurrence. */
+        componentId: z.never().optional(),
+    }),
+]);
+const occurrenceSchema = z.object({
+    occurrenceId: nonEmptyString,
+    resolution: resolutionSchema,
+    filePath: z.string(),
+    line: finiteNumber,
+    column: finiteNumber,
+    credit: creditSchema,
+    trace: z.array(traceStepSchema),
+    props: z.record(z.string(), plainObject()),
+    events: z.array(z.string()).optional(),
+    ownerComponentId: z.string().optional(),
+    depth: finiteNumber.optional(),
+});
+const attributionTargetSchema = z.discriminatedUnion("kind", [
+    z.object({ kind: z.literal("package"), packageName: nonEmptyString }),
+    z.object({ kind: z.literal("repository"), ...repositoryDeclarationFields }),
+]);
+const evidenceRecordSchema = z.object({
+    source: z.enum(["registration", "global-declaration", "cem"]),
+    strength: openValue,
+    /** Repository-relative file, or a package coordinate. Never an absolute path. */
+    locator: z.union([
+        z.object({ filePath: z.string(), line: finiteNumber }),
+        z.object({ packageName: z.string(), version: z.string().nullable() }),
+    ]),
+    target: attributionTargetSchema.optional(),
+    disposition: openValue,
+});
+const tagAttributionSchema = z.discriminatedUnion("status", [
+    z.object({
+        status: z.literal("resolved"),
+        target: attributionTargetSchema,
+        confidence: openValue,
+        evidence: z.array(evidenceRecordSchema),
+    }),
+    z.object({ status: z.literal("unknown"), reason: openValue, evidence: z.array(evidenceRecordSchema) }),
+    z.object({
+        status: z.literal("conflict"),
+        strongestClass: openValue,
+        candidates: z.array(attributionTargetSchema),
+        evidence: z.array(evidenceRecordSchema),
+    }),
+]);
+const propDistributionSchema = z.object({
+    values: z.array(plainObject()),
+    dynamic: finiteNumber,
+    omitted: finiteNumber,
+    other: finiteNumber.optional(),
+    truncated: finiteNumber.optional(),
+});
+const componentSchema = z
+    .object({
+    id: z.string(),
+    identity: identitySchema,
+    /** Package exports and repository declarations only; absent on tags. */
+    framework: frameworkSchema.optional(),
+    /** Tag identities only; computed from this scan's evidence. */
+    attribution: tagAttributionSchema.optional(),
+    stats: z.object({ occurrenceCount: finiteNumber, fileCount: finiteNumber }),
+    usage: z.enum(["direct", "root", "none"]),
+    props: z.record(z.string(), propDistributionSchema),
+    events: z.record(z.string(), z.object({ boundCount: finiteNumber })).optional(),
+    composition: plainObject(),
+    /** Repository declarations only. */
+    declared: plainObject().optional(),
+    /** Repository declarations only: declaration position in `identity.filePath`. */
+    definition: z.object({ line: finiteNumber, column: finiteNumber }).optional(),
+    /** Repository declarations only: owning workspace package name. */
+    owningPackage: z.string().optional(),
+    version: z.string().nullable(),
+    createdAt: timestamp.nullable().optional(),
+    updatedAt: timestamp.nullable().optional(),
+})
+    .superRefine((component, ctx) => {
+    const onTag = component.identity.kind === "tag";
+    if (component.id !== componentKey(component.identity))
+        fail(ctx, ["id"]);
+    if (component.attribution !== undefined && !onTag)
+        fail(ctx, ["attribution"]);
+    if (onTag ? component.framework !== undefined : component.framework === undefined)
+        fail(ctx, ["framework"]);
+});
+const scanMetaSchema = z.object({
+    schemaVersion: z.literal(SCHEMA_VERSION),
+    scannerVersion: z.string(),
+    scanId: nonEmptyString,
+    scannedAt: timestamp,
+    repo: z.object({
+        id: nonEmptyString,
+        gitRemote: z.string().nullable(),
+        commit: nonEmptyString,
+        /** The committer date of `commit`. */
+        committedAt: timestamp,
+        initialCommit: z.string().nullable(),
+        branch: z.string().nullable(),
+    }),
+});
+/** The whole artefact: component ids and occurrence ids are unique, and a resolved occurrence names a listed component. */
+export const artifactSchema = z
+    .object({
+    meta: scanMetaSchema,
+    components: z.array(componentSchema),
+    occurrences: z.array(occurrenceSchema),
+    diagnostics: z.array(plainObject()),
+})
+    .superRefine((artifact, ctx) => {
+    const componentIds = new Set();
+    for (const [index, component] of artifact.components.entries()) {
+        if (componentIds.has(component.id))
+            fail(ctx, ["components", index, "id"]);
+        componentIds.add(component.id);
+    }
+    const occurrenceIds = new Set();
+    for (const [index, { occurrenceId, resolution }] of artifact.occurrences.entries()) {
+        if (occurrenceIds.has(occurrenceId))
+            fail(ctx, ["occurrences", index, "occurrenceId"]);
+        occurrenceIds.add(occurrenceId);
+        if (resolution.status === "resolved" && !componentIds.has(resolution.componentId)) {
+            fail(ctx, ["occurrences", index, "resolution", "componentId"]);
+        }
+    }
+});
+//# sourceMappingURL=schema.js.map

package/dist/v2/schema.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"schema.js","sourceRoot":"","sources":["../../src/v2/schema.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAC;AAErD,oCAAoC;AACpC,MAAM,UAAU,aAAa,CAAC,KAAc;IAC1C,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;AAC9E,CAAC;AAED,+EAA+E;AAC/E,MAAM,WAAW,GAAG,GAAM,EAAE,CAAC,CAAC,CAAC,MAAM,CAAI,CAAC,KAAK,EAAE,EAAE,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC,CAAC;AAE1E,MAAM,cAAc,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;AACzC,MAAM,YAAY,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,MAAM,EAAE,CAAC;AACzC,qCAAqC;AACrC,MAAM,SAAS,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;AAEjF,yEAAyE;AACzE,SAAS,IAAI,CAAC,GAAoB,EAAE,IAAyB;IAC3D,GAAG,CAAC,QAAQ,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,YAAY,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;AACtD,CAAC;AAKD;;;GAGG;AACH,SAAS,SAAS,CAEhB,GAAG,QAAkB;IACrB,MAAM,KAAK,GAAG,CAAC,CAAC,kBAAkB,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;IACrD,MAAM,KAAK,GAAG,CAAC;SACZ,MAAM,CAAC,EAAE,IAAI,EAAE,cAAc,EAAE,CAAC;SAChC,WAAW,EAAE;SACb,WAAW,CAAC,CAAC,KAAK,EAAE,GAAG,EAAE,EAAE;QAC1B,yGAAyG;QACzG,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC;YAAE,OAAO;QAC9C,KAAK,MAAM,KAAK,IAAI,KAAK,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,MAAM,IAAI,EAAE;YAAE,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;IACtF,CAAC,CAAC,CAAC;IACL,OAAO,CAAC,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC,CAAC;AACjC,CAAC;AAED,0GAA0G;AAC1G,MAAM,SAAS,GAAG,cAAc,CAAC;AAQjC;;;GAGG;AACH,MAAM,UAAU,MAAM,CACpB,KAAQ,EACR,IAAO;IAEP,OAAO,KAAK,CAAC,IAAI,KAAK,IAAI,CAAC;AAC7B,CAAC;AAED,iGAAiG;AACjG,MAAM,2BAA2B,GAAG,EAAE,MAAM,EAAE,cAAc,EAAE,QAAQ,EAAE,cAAc,EAAE,UAAU,EAAE,cAAc,EAAE,CAAC;AAErH,MAAM,cAAc,GAAG,CAAC,CAAC,kBAAkB,CAAC,MAAM,EAAE;IAClD,CAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,gBAAgB,CAAC,EAAE,WAAW,EAAE,cAAc,EAAE,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,UAAU,EAAE,cAAc,EAAE,CAAC;IACjI,CAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,wBAAwB,CAAC,EAAE,GAAG,2BAA2B,EAAE,CAAC;IACvF,CAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,OAAO,EAAE,cAAc,EAAE,CAAC;CAC9D,CAAC,CAAC;AAGH,MAAM,eAAe,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC,CAAC;AAGjD,MAAM,YAAY,GAAG,SAAS,CAC5B,CAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC,EACvC,CAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,KAAK,EAAE,YAAY,EAAE,CAAC,CACnF,CAAC;AAGF,MAAM,eAAe,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,IAAI,EAAE,YAAY,EAAE,MAAM,EAAE,YAAY,EAAE,CAAC,CAAC;AAGjG,MAAM,eAAe,GAAG,SAAS,CAC/B,CAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,EAChF,CAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,EACzD,CAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,EACxD,CAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,EACzD,CAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,aAAa,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,MAAM,EAAE,eAAe,EAAE,CAAC,EAC1F,CAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,aAAa,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,EACxF,CAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,cAAc,CAAC,EAAE,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,gBAAgB,EAAE,eAAe,EAAE,CAAC,CAC1G,CAAC;AAMF,MAAM,sBAAsB,GAAG,SAAS,CACtC,CAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,uBAAuB,CAAC,EAAE,WAAW,EAAE,cAAc,EAAE,CAAC,EACnF,CAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,kBAAkB,CAAC,EAAE,CAAC,EACjD,CAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,cAAc,CAAC,EAAE,IAAI,EAAE,cAAc,EAAE,CAAC,EACnE,CAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,cAAc,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,CAC/D,CAAC;AAGF,MAAM,gBAAgB,GAAG,CAAC,CAAC,kBAAkB,CAAC,QAAQ,EAAE;IACtD,CAAC,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC;IACpE,CAAC,CAAC,MAAM,CAAC;QACP,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC,YAAY,CAAC;QAC/B,MAAM,EAAE,sBAAsB;QAC9B,iDAAiD;QACjD,WAAW,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC,QAAQ,EAAE;KAClC,CAAC;CACH,CAAC,CAAC;AAaH,MAAM,gBAAgB,GAAG,CAAC,CAAC,MAAM,CAAC;IAChC,YAAY,EAAE,cAAc;IAC5B,UAAU,EAAE,gBAAgB;IAC5B,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE;IACpB,IAAI,EAAE,YAAY;IAClB,MAAM,EAAE,YAAY;IACpB,MAAM,EAAE,YAAY;IACpB,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,eAAe,CAAC;IAC/B,KAAK,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,WAAW,EAAkB,CAAC;IAC1D,MAAM,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;IACtC,gBAAgB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACvC,KAAK,EAAE,YAAY,CAAC,QAAQ,EAAE;CAC/B,CAAC,CAAC;AAIH,MAAM,uBAAuB,GAAG,CAAC,CAAC,kBAAkB,CAAC,MAAM,EAAE;IAC3D,CAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,WAAW,EAAE,cAAc,EAAE,CAAC;IACrE,CAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,YAAY,CAAC,EAAE,GAAG,2BAA2B,EAAE,CAAC;CAC5E,CAAC,CAAC;AAGH,MAAM,oBAAoB,GAAG,CAAC,CAAC,MAAM,CAAC;IACpC,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,cAAc,EAAE,oBAAoB,EAAE,KAAK,CAAC,CAAC;IAC7D,QAAQ,EAAE,SAAS;IACnB,iFAAiF;IACjF,OAAO,EAAE,CAAC,CAAC,KAAK,CAAC;QACf,CAAC,CAAC,MAAM,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,IAAI,EAAE,YAAY,EAAE,CAAC;QACtD,CAAC,CAAC,MAAM,CAAC,EAAE,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,EAAE,CAAC;KACtE,CAAC;IACF,MAAM,EAAE,uBAAuB,CAAC,QAAQ,EAAE;IAC1C,WAAW,EAAE,SAAS;CACvB,CAAC,CAAC;AASH,MAAM,oBAAoB,GAAG,CAAC,CAAC,kBAAkB,CAAC,QAAQ,EAAE;IAC1D,CAAC,CAAC,MAAM,CAAC;QACP,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC,UAAU,CAAC;QAC7B,MAAM,EAAE,uBAAuB;QAC/B,UAAU,EAAE,SAAS;QACrB,QAAQ,EAAE,CAAC,CAAC,KAAK,CAAC,oBAAoB,CAAC;KACxC,CAAC;IACF,CAAC,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,MAAM,EAAE,SAAS,EAAE,QAAQ,EAAE,CAAC,CAAC,KAAK,CAAC,oBAAoB,CAAC,EAAE,CAAC;IACtG,CAAC,CAAC,MAAM,CAAC;QACP,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC,UAAU,CAAC;QAC7B,cAAc,EAAE,SAAS;QACzB,UAAU,EAAE,CAAC,CAAC,KAAK,CAAC,uBAAuB,CAAC;QAC5C,QAAQ,EAAE,CAAC,CAAC,KAAK,CAAC,oBAAoB,CAAC;KACxC,CAAC;CACH,CAAC,CAAC;AAgBH,MAAM,sBAAsB,GAAG,CAAC,CAAC,MAAM,CAAC;IACtC,MAAM,EAAE,CAAC,CAAC,KAAK,CAAC,WAAW,EAAkB,CAAC;IAC9C,OAAO,EAAE,YAAY;IACrB,OAAO,EAAE,YAAY;IACrB,KAAK,EAAE,YAAY,CAAC,QAAQ,EAAE;IAC9B,SAAS,EAAE,YAAY,CAAC,QAAQ,EAAE;CACnC,CAAC,CAAC;AA0CH,MAAM,eAAe,GAAG,CAAC;KACtB,MAAM,CAAC;IACN,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE;IACd,QAAQ,EAAE,cAAc;IACxB,wEAAwE;IACxE,SAAS,EAAE,eAAe,CAAC,QAAQ,EAAE;IACrC,+DAA+D;IAC/D,WAAW,EAAE,oBAAoB,CAAC,QAAQ,EAAE;IAC5C,KAAK,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,eAAe,EAAE,YAAY,EAAE,SAAS,EAAE,YAAY,EAAE,CAAC;IAC3E,KAAK,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC;IACzC,KAAK,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,sBAAsB,CAAC;IACnD,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,UAAU,EAAE,YAAY,EAAE,CAAC,CAAC,CAAC,QAAQ,EAAE;IAC/E,WAAW,EAAE,WAAW,EAAqB;IAC7C,oCAAoC;IACpC,QAAQ,EAAE,WAAW,EAAmB,CAAC,QAAQ,EAAE;IACnD,iFAAiF;IACjF,UAAU,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,YAAY,EAAE,MAAM,EAAE,YAAY,EAAE,CAAC,CAAC,QAAQ,EAAE;IAC7E,mEAAmE;IACnE,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACpC,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC9B,SAAS,EAAE,SAAS,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;IAC1C,SAAS,EAAE,SAAS,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;CAC3C,CAAC;KACD,WAAW,CAAC,CAAC,SAAS,EAAE,GAAG,EAAE,EAAE;IAC9B,MAAM,KAAK,GAAG,SAAS,CAAC,QAAQ,CAAC,IAAI,KAAK,KAAK,CAAC;IAChD,IAAI,SAAS,CAAC,EAAE,KAAK,YAAY,CAAC,SAAS,CAAC,QAAQ,CAAC;QAAE,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC;IACzE,IAAI,SAAS,CAAC,WAAW,KAAK,SAAS,IAAI,CAAC,KAAK;QAAE,IAAI,CAAC,GAAG,EAAE,CAAC,aAAa,CAAC,CAAC,CAAC;IAC9E,IAAI,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,SAAS,KAAK,SAAS;QAAE,IAAI,CAAC,GAAG,EAAE,CAAC,WAAW,CAAC,CAAC,CAAC;AAC9G,CAAC,CAAC,CAAC;AAGL,MAAM,cAAc,GAAG,CAAC,CAAC,MAAM,CAAC;IAC9B,aAAa,EAAE,CAAC,CAAC,OAAO,CAAC,cAAc,CAAC;IACxC,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE;IAC1B,MAAM,EAAE,cAAc;IACtB,SAAS,EAAE,SAAS;IACpB,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC;QACb,EAAE,EAAE,cAAc;QAClB,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;QAChC,MAAM,EAAE,cAAc;QACtB,sCAAsC;QACtC,WAAW,EAAE,SAAS;QACtB,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;QACpC,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;KAC9B,CAAC;CACH,CAAC,CAAC;AAGH,2HAA2H;AAC3H,MAAM,CAAC,MAAM,cAAc,GAAG,CAAC;KAC5B,MAAM,CAAC;IACN,IAAI,EAAE,cAAc;IACpB,UAAU,EAAE,CAAC,CAAC,KAAK,CAAC,eAAe,CAAC;IACpC,WAAW,EAAE,CAAC,CAAC,KAAK,CAAC,gBAAgB,CAAC;IACtC,WAAW,EAAE,CAAC,CAAC,KAAK,CAAC,WAAW,EAAc,CAAC;CAChD,CAAC;KACD,WAAW,CAAC,CAAC,QAAQ,EAAE,GAAG,EAAE,EAAE;IAC7B,MAAM,YAAY,GAAG,IAAI,GAAG,EAAU,CAAC;IACvC,KAAK,MAAM,CAAC,KAAK,EAAE,SAAS,CAAC,IAAI,QAAQ,CAAC,UAAU,CAAC,OAAO,EAAE,EAAE,CAAC;QAC/D,IAAI,YAAY,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,CAAC;YAAE,IAAI,CAAC,GAAG,EAAE,CAAC,YAAY,EAAE,KAAK,EAAE,IAAI,CAAC,CAAC,CAAC;QAC3E,YAAY,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;IACjC,CAAC;IACD,MAAM,aAAa,GAAG,IAAI,GAAG,EAAU,CAAC;IACxC,KAAK,MAAM,CAAC,KAAK,EAAE,EAAE,YAAY,EAAE,UAAU,EAAE,CAAC,IAAI,QAAQ,CAAC,WAAW,CAAC,OAAO,EAAE,EAAE,CAAC;QACnF,IAAI,aAAa,CAAC,GAAG,CAAC,YAAY,CAAC;YAAE,IAAI,CAAC,GAAG,EAAE,CAAC,aAAa,EAAE,KAAK,EAAE,cAAc,CAAC,CAAC,CAAC;QACvF,aAAa,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;QAChC,IAAI,UAAU,CAAC,MAAM,KAAK,UAAU,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,UAAU,CAAC,WAAW,CAAC,EAAE,CAAC;YAClF,IAAI,CAAC,GAAG,EAAE,CAAC,aAAa,EAAE,KAAK,EAAE,YAAY,EAAE,aAAa,CAAC,CAAC,CAAC;QACjE,CAAC;IACH,CAAC;AACH,CAAC,CAAC,CAAC"}

package/dist/v2/tag-attribution.d.ts

@@ -0,0 +1,9 @@
+import type { KnownEvidenceRecord, KnownTagAttribution } from "./schema.js";
+/**
+ * A tag's attribution from every evidence record found for it: the strongest
+ * class that carries a target decides. One target there resolves the tag with
+ * that class as confidence; several are a conflict; no targeted record leaves
+ * it unknown. Every record is kept, sorted, and given its disposition against
+ * the outcome, so the result never depends on input order.
+ */
+export declare function resolveTagAttribution(evidence: readonly KnownEvidenceRecord[]): KnownTagAttribution;

package/dist/v2/tag-attribution.js

@@ -0,0 +1,70 @@
+/** Strongest class first. */
+const STRENGTHS = ["observed", "declared"];
+/** A target as JSON with its keys in a fixed order. */
+function targetKey(target) {
+    return target.kind === "package"
+        ? JSON.stringify({ kind: target.kind, packageName: target.packageName })
+        : JSON.stringify({ kind: target.kind, repoId: target.repoId, filePath: target.filePath, exportName: target.exportName });
+}
+const compareText = (a, b) => (a < b ? -1 : a > b ? 1 : 0);
+/** File locators before package coordinates; a file's lines in numeric order. */
+function compareLocators(a, b) {
+    if ("filePath" in a)
+        return "filePath" in b ? compareText(a.filePath, b.filePath) || a.line - b.line : -1;
+    if ("filePath" in b)
+        return 1;
+    return compareText(a.packageName, b.packageName) || compareText(a.version ?? "", b.version ?? "");
+}
+/** Strongest class first, then source, locator and target. */
+function compareRecords(a, b) {
+    return (STRENGTHS.indexOf(a.strength) - STRENGTHS.indexOf(b.strength) ||
+        compareText(a.source, b.source) ||
+        compareLocators(a.locator, b.locator) ||
+        compareText(a.target !== undefined ? targetKey(a.target) : "", b.target !== undefined ? targetKey(b.target) : ""));
+}
+/**
+ * A tag's attribution from every evidence record found for it: the strongest
+ * class that carries a target decides. One target there resolves the tag with
+ * that class as confidence; several are a conflict; no targeted record leaves
+ * it unknown. Every record is kept, sorted, and given its disposition against
+ * the outcome, so the result never depends on input order.
+ */
+export function resolveTagAttribution(evidence) {
+    const records = [...evidence].sort(compareRecords);
+    const strongestClass = STRENGTHS.find((s) => records.some((r) => r.strength === s && r.target !== undefined));
+    if (strongestClass === undefined) {
+        const unresolved = records.map((r) => withDisposition(r, "unresolved"));
+        return { status: "unknown", reason: records.length === 0 ? "absent" : "unresolved", evidence: unresolved };
+    }
+    const candidates = new Map();
+    for (const r of records) {
+        if (r.strength === strongestClass && r.target !== undefined)
+            candidates.set(targetKey(r.target), r.target);
+    }
+    if (candidates.size === 1) {
+        const [[resolvedKey, target]] = [...candidates];
+        return {
+            status: "resolved",
+            target,
+            confidence: strongestClass,
+            evidence: records.map((r) => withDisposition(r, r.target === undefined ? "unresolved" : targetKey(r.target) === resolvedKey ? "supports" : "contradicts")),
+        };
+    }
+    return {
+        status: "conflict",
+        strongestClass,
+        candidates: [...candidates.values()].sort((a, b) => compareText(targetKey(a), targetKey(b))),
+        evidence: records.map((r) => withDisposition(r, r.target === undefined ? "unresolved" : candidates.has(targetKey(r.target)) ? "candidate" : "contradicts")),
+    };
+}
+/** The record in schema key order, with `disposition` set. */
+function withDisposition(record, disposition) {
+    return {
+        source: record.source,
+        strength: record.strength,
+        locator: record.locator,
+        ...(record.target !== undefined ? { target: record.target } : {}),
+        disposition,
+    };
+}
+//# sourceMappingURL=tag-attribution.js.map

package/dist/v2/tag-attribution.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"tag-attribution.js","sourceRoot":"","sources":["../../src/v2/tag-attribution.ts"],"names":[],"mappings":"AAIA,6BAA6B;AAC7B,MAAM,SAAS,GAAwB,CAAC,UAAU,EAAE,UAAU,CAAC,CAAC;AAEhE,uDAAuD;AACvD,SAAS,SAAS,CAAC,MAAyB;IAC1C,OAAO,MAAM,CAAC,IAAI,KAAK,SAAS;QAC9B,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,WAAW,EAAE,MAAM,CAAC,WAAW,EAAE,CAAC;QACxE,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE,UAAU,EAAE,MAAM,CAAC,UAAU,EAAE,CAAC,CAAC;AAC7H,CAAC;AAED,MAAM,WAAW,GAAG,CAAC,CAAS,EAAE,CAAS,EAAU,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AAEnF,iFAAiF;AACjF,SAAS,eAAe,CAAC,CAA4B,EAAE,CAA4B;IACjF,IAAI,UAAU,IAAI,CAAC;QAAE,OAAO,UAAU,IAAI,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAC1G,IAAI,UAAU,IAAI,CAAC;QAAE,OAAO,CAAC,CAAC;IAC9B,OAAO,WAAW,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,WAAW,CAAC,IAAI,WAAW,CAAC,CAAC,CAAC,OAAO,IAAI,EAAE,EAAE,CAAC,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC;AACpG,CAAC;AAED,8DAA8D;AAC9D,SAAS,cAAc,CAAC,CAAsB,EAAE,CAAsB;IACpE,OAAO,CACL,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC,QAAQ,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC,QAAQ,CAAC;QAC7D,WAAW,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC;QAC/B,eAAe,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,OAAO,CAAC;QACrC,WAAW,CAAC,CAAC,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAClH,CAAC;AACJ,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,qBAAqB,CAAC,QAAwC;IAC5E,MAAM,OAAO,GAAG,CAAC,GAAG,QAAQ,CAAC,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;IACnD,MAAM,cAAc,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC;IAE9G,IAAI,cAAc,KAAK,SAAS,EAAE,CAAC;QACjC,MAAM,UAAU,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,eAAe,CAAC,CAAC,EAAE,YAAY,CAAC,CAAC,CAAC;QACxE,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,YAAY,EAAE,QAAQ,EAAE,UAAU,EAAE,CAAC;IAC7G,CAAC;IAED,MAAM,UAAU,GAAG,IAAI,GAAG,EAA6B,CAAC;IACxD,KAAK,MAAM,CAAC,IAAI,OAAO,EAAE,CAAC;QACxB,IAAI,CAAC,CAAC,QAAQ,KAAK,cAAc,IAAI,CAAC,CAAC,MAAM,KAAK,SAAS;YAAE,UAAU,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC;IAC7G,CAAC;IAED,IAAI,UAAU,CAAC,IAAI,KAAK,CAAC,EAAE,CAAC;QAC1B,MAAM,CAAC,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC,GAAG,CAAC,GAAG,UAAU,CAAkC,CAAC;QACjF,OAAO;YACL,MAAM,EAAE,UAAU;YAClB,MAAM;YACN,UAAU,EAAE,cAAc;YAC1B,QAAQ,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAC1B,eAAe,CAAC,CAAC,EAAE,CAAC,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,WAAW,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,aAAa,CAAC,CAC7H;SACF,CAAC;IACJ,CAAC;IAED,OAAO;QACL,MAAM,EAAE,UAAU;QAClB,cAAc;QACd,UAAU,EAAE,CAAC,GAAG,UAAU,CAAC,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,WAAW,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC;QAC5F,QAAQ,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAC1B,eAAe,CAAC,CAAC,EAAE,CAAC,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,aAAa,CAAC,CAC9H;KACF,CAAC;AACJ,CAAC;AAED,8DAA8D;AAC9D,SAAS,eAAe,CAAC,MAA2B,EAAE,WAA+C;IACnG,OAAO;QACL,MAAM,EAAE,MAAM,CAAC,MAAM;QACrB,QAAQ,EAAE,MAAM,CAAC,QAAQ;QACzB,OAAO,EAAE,MAAM,CAAC,OAAO;QACvB,GAAG,CAAC,MAAM,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACjE,WAAW;KACZ,CAAC;AACJ,CAAC"}

package/dist/v2/tag-vocabulary.d.ts

@@ -0,0 +1,17 @@
+/**
+ * The HTML Standard's "valid custom element name", §4.13.3 Core concepts
+ * (https://html.spec.whatwg.org/multipage/custom-elements.html#valid-custom-element-name):
+ * a valid element local name (DOM Standard,
+ * https://dom.spec.whatwg.org/#valid-element-local-name) whose first code
+ * point is an ASCII lower alpha, that contains no ASCII upper alpha, that
+ * contains U+002D (-), and that is not one of the reserved names below.
+ *
+ * With an ASCII-alpha first code point, a valid element local name is one
+ * that contains no ASCII whitespace, U+0000 NULL, U+002F (/) or U+003E (>).
+ */
+/** The hyphenated names SVG and MathML already use, which no custom element may take. */
+export declare const RESERVED_CUSTOM_ELEMENT_NAMES: ReadonlySet<string>;
+/** The written tag name, ASCII-lowercased: the name an HTML document gives the element. */
+export declare function canonicalTagName(written: string): string;
+/** True when `name` is a valid custom element name. */
+export declare function isValidCustomElementName(name: string): boolean;

package/dist/v2/tag-vocabulary.js

@@ -0,0 +1,33 @@
+/**
+ * The HTML Standard's "valid custom element name", §4.13.3 Core concepts
+ * (https://html.spec.whatwg.org/multipage/custom-elements.html#valid-custom-element-name):
+ * a valid element local name (DOM Standard,
+ * https://dom.spec.whatwg.org/#valid-element-local-name) whose first code
+ * point is an ASCII lower alpha, that contains no ASCII upper alpha, that
+ * contains U+002D (-), and that is not one of the reserved names below.
+ *
+ * With an ASCII-alpha first code point, a valid element local name is one
+ * that contains no ASCII whitespace, U+0000 NULL, U+002F (/) or U+003E (>).
+ */
+/** The hyphenated names SVG and MathML already use, which no custom element may take. */
+export const RESERVED_CUSTOM_ELEMENT_NAMES = new Set([
+    "annotation-xml",
+    "color-profile",
+    "font-face",
+    "font-face-src",
+    "font-face-uri",
+    "font-face-format",
+    "font-face-name",
+    "missing-glyph",
+]);
+/** A lower-alpha first code point, then none of ASCII whitespace, NULL, `/`, `>` or an ASCII upper alpha. */
+const LOWER_ALPHA_LOCAL_NAME = /^[a-z][^\0\t\n\f\r />A-Z]*$/;
+/** The written tag name, ASCII-lowercased: the name an HTML document gives the element. */
+export function canonicalTagName(written) {
+    return written.replace(/[A-Z]/g, (c) => c.toLowerCase());
+}
+/** True when `name` is a valid custom element name. */
+export function isValidCustomElementName(name) {
+    return LOWER_ALPHA_LOCAL_NAME.test(name) && name.includes("-") && !RESERVED_CUSTOM_ELEMENT_NAMES.has(name);
+}
+//# sourceMappingURL=tag-vocabulary.js.map

package/dist/v2/tag-vocabulary.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"tag-vocabulary.js","sourceRoot":"","sources":["../../src/v2/tag-vocabulary.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,yFAAyF;AACzF,MAAM,CAAC,MAAM,6BAA6B,GAAwB,IAAI,GAAG,CAAC;IACxE,gBAAgB;IAChB,eAAe;IACf,WAAW;IACX,eAAe;IACf,eAAe;IACf,kBAAkB;IAClB,gBAAgB;IAChB,eAAe;CAChB,CAAC,CAAC;AAEH,6GAA6G;AAC7G,MAAM,sBAAsB,GAAG,6BAA6B,CAAC;AAE7D,2FAA2F;AAC3F,MAAM,UAAU,gBAAgB,CAAC,OAAe;IAC9C,OAAO,OAAO,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC;AAC3D,CAAC;AAED,uDAAuD;AACvD,MAAM,UAAU,wBAAwB,CAAC,IAAY;IACnD,OAAO,sBAAsB,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,6BAA6B,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;AAC7G,CAAC"}

package/dist/v2/validate.d.ts

@@ -0,0 +1,18 @@
+import { type ScanArtifact } from "./schema.js";
+export type ValidationResult = {
+    ok: true;
+    artifact: ScanArtifact;
+} | {
+    ok: false;
+    reason: "unsupported_version";
+    version: number | "invalid";
+} | {
+    ok: false;
+    reason: "invalid_artifact";
+    path: string;
+};
+/**
+ * Checks a parsed artefact against the v2 contract: the schema version first, then the first failing JSON path.
+ * A valid artefact is returned as the input object itself, unknown keys included.
+ */
+export declare function validateArtifact(value: unknown): ValidationResult;

package/dist/v2/validate.js

@@ -0,0 +1,20 @@
+import { artifactSchema, isPlainObject } from "./schema.js";
+import { SCHEMA_VERSION, schemaVersionOf } from "./schema-version.js";
+/** Formats an issue path as `a.b[0].c`: an index as `[n]`, a key as `.key`, with no leading dot. */
+function formatPath(path) {
+    return path.map((segment) => (typeof segment === "number" ? `[${segment}]` : `.${segment}`)).join("").replace(/^\./, "");
+}
+/**
+ * Checks a parsed artefact against the v2 contract: the schema version first, then the first failing JSON path.
+ * A valid artefact is returned as the input object itself, unknown keys included.
+ */
+export function validateArtifact(value) {
+    const version = schemaVersionOf(isPlainObject(value) && "meta" in value ? value.meta : undefined);
+    if (version !== SCHEMA_VERSION)
+        return { ok: false, reason: "unsupported_version", version };
+    const result = artifactSchema.safeParse(value);
+    if (result.success)
+        return { ok: true, artifact: value };
+    return { ok: false, reason: "invalid_artifact", path: formatPath(result.error.issues[0]?.path ?? []) };
+}
+//# sourceMappingURL=validate.js.map

package/dist/v2/validate.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"validate.js","sourceRoot":"","sources":["../../src/v2/validate.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,aAAa,EAAqB,MAAM,aAAa,CAAC;AAC/E,OAAO,EAAE,cAAc,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAC;AAOtE,oGAAoG;AACpG,SAAS,UAAU,CAAC,IAAkC;IACpD,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,OAAO,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,OAAO,GAAG,CAAC,CAAC,CAAC,IAAI,OAAO,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;AAC3H,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,gBAAgB,CAAC,KAAc;IAC7C,MAAM,OAAO,GAAG,eAAe,CAAC,aAAa,CAAC,KAAK,CAAC,IAAI,MAAM,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;IAClG,IAAI,OAAO,KAAK,cAAc;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,qBAAqB,EAAE,OAAO,EAAE,CAAC;IAC7F,MAAM,MAAM,GAAG,cAAc,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;IAC/C,IAAI,MAAM,CAAC,OAAO;QAAE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAqB,EAAE,CAAC;IACzE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,kBAAkB,EAAE,IAAI,EAAE,UAAU,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,IAAI,IAAI,EAAE,CAAC,EAAE,CAAC;AACzG,CAAC"}

package/package.json

@@ -1,6 +1,19 @@
 {
   "name": "@component-compass/plugin-core",
-  "version": "0.1.23",
+  "version": "0.1.28",
+  "description": "Scan artifact types and component identity helpers shared by component-compass packages.",
+  "keywords": [
+    "design-system",
+    "custom-elements-manifest"
+  ],
+  "license": "MIT",
+  "homepage": "https://github.com/siggerzz/component-compass/tree/main/packages/plugin-core",
+  "bugs": "https://github.com/siggerzz/component-compass/issues",
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/siggerzz/component-compass.git",
+    "directory": "packages/plugin-core"
+  },
   "type": "module",
   "main": "./dist/index.js",
   "types": "./dist/index.d.ts",
@@ -9,13 +22,13 @@
       "types": "./dist/index.d.ts",
       "import": "./dist/index.js"
     },
-    "./logical-id": {
-      "types": "./dist/logical-id.d.ts",
-      "import": "./dist/logical-id.js"
-    },
     "./id": {
       "types": "./dist/id.d.ts",
       "import": "./dist/id.js"
+    },
+    "./v2": {
+      "types": "./dist/v2/index.d.ts",
+      "import": "./dist/v2/index.js"
     }
   },
   "files": [
@@ -30,7 +43,7 @@
   },
   "dependencies": {
     "@noble/hashes": "1.8.0",
-    "ajv": "8.20.0"
+    "zod": "3.25.76"
   },
   "devDependencies": {
     "@types/node": "24.12.2",

package/dist/builder.d.ts

@@ -1,21 +0,0 @@
-import type { ManifestComponent, ManifestFile, ManifestSource } from "./types.js";
-type BuilderOpts = {
-    source: ManifestSource;
-    package: string;
-};
-type AddInput = Extract<ManifestComponent, {
-    kind: "custom-element";
-}> | Extract<ManifestComponent, {
-    kind: "react-component";
-}> | Extract<ManifestComponent, {
-    kind: "vue-component";
-}>;
-export declare class ManifestBuilder {
-    private readonly source;
-    private readonly packageName;
-    private readonly components;
-    constructor(opts: BuilderOpts);
-    addComponent(c: AddInput): this;
-    build(): ManifestFile;
-}
-export {};

package/dist/builder.js

@@ -1,49 +0,0 @@
-import { compareComponentId } from "./id.js";
-import { validateManifest } from "./validate.js";
-const SCHEMA_VERSION = "2.0.0";
-const expectedKindFor = {
-    cem: "custom-element",
-    react: "react-component",
-    vue: "vue-component",
-};
-export class ManifestBuilder {
-    source;
-    packageName;
-    components = [];
-    constructor(opts) {
-        this.source = opts.source;
-        this.packageName = opts.package;
-    }
-    addComponent(c) {
-        const expected = expectedKindFor[this.source];
-        if (c.kind !== expected) {
-            throw new Error(`Component kind "${c.kind}" does not match builder source "${this.source}" (expected kind "${expected}")`);
-        }
-        this.components.push(c);
-        return this;
-    }
-    build() {
-        const sorted = [...this.components].sort(compareComponents);
-        const out = {
-            schemaVersion: SCHEMA_VERSION,
-            source: this.source,
-            package: this.packageName,
-            components: sorted,
-        };
-        const result = validateManifest(out);
-        if (!result.ok) {
-            throw new Error(`Built manifest fails validation:\n${result.errors.join("\n")}`);
-        }
-        return out;
-    }
-}
-function compareComponents(a, b) {
-    return compareComponentId(toId(a), toId(b));
-}
-function toId(c) {
-    if (c.kind === "custom-element") {
-        return { kind: "custom-element", tagName: c.tagName, source: c.source };
-    }
-    return { kind: c.kind, export: c.export, source: c.source };
-}
-//# sourceMappingURL=builder.js.map

package/dist/builder.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"builder.js","sourceRoot":"","sources":["../src/builder.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,kBAAkB,EAAE,MAAM,SAAS,CAAC;AAE7C,OAAO,EAAE,gBAAgB,EAAE,MAAM,eAAe,CAAC;AAEjD,MAAM,cAAc,GAAG,OAAO,CAAC;AAE/B,MAAM,eAAe,GAAsD;IACzE,GAAG,EAAE,gBAAgB;IACrB,KAAK,EAAE,iBAAiB;IACxB,GAAG,EAAE,eAAe;CACrB,CAAC;AASF,MAAM,OAAO,eAAe;IACT,MAAM,CAAiB;IACvB,WAAW,CAAS;IACpB,UAAU,GAAwB,EAAE,CAAC;IAEtD,YAAY,IAAiB;QAC3B,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC;QAC1B,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC,OAAO,CAAC;IAClC,CAAC;IAED,YAAY,CAAC,CAAW;QACtB,MAAM,QAAQ,GAAG,eAAe,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAC9C,IAAI,CAAC,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;YACxB,MAAM,IAAI,KAAK,CACb,mBAAmB,CAAC,CAAC,IAAI,oCAAoC,IAAI,CAAC,MAAM,qBAAqB,QAAQ,IAAI,CAC1G,CAAC;QACJ,CAAC;QACD,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACxB,OAAO,IAAI,CAAC;IACd,CAAC;IAED,KAAK;QACH,MAAM,MAAM,GAAG,CAAC,GAAG,IAAI,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC;QAC5D,MAAM,GAAG,GAAiB;YACxB,aAAa,EAAE,cAAc;YAC7B,MAAM,EAAE,IAAI,CAAC,MAAM;YACnB,OAAO,EAAE,IAAI,CAAC,WAAW;YACzB,UAAU,EAAE,MAAM;SACnB,CAAC;QACF,MAAM,MAAM,GAAG,gBAAgB,CAAC,GAAG,CAAC,CAAC;QACrC,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC;YACf,MAAM,IAAI,KAAK,CAAC,qCAAqC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACnF,CAAC;QACD,OAAO,GAAG,CAAC;IACb,CAAC;CACF;AAED,SAAS,iBAAiB,CAAC,CAAoB,EAAE,CAAoB;IACnE,OAAO,kBAAkB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;AAC9C,CAAC;AAED,SAAS,IAAI,CAAC,CAAoB;IAChC,IAAI,CAAC,CAAC,IAAI,KAAK,gBAAgB,EAAE,CAAC;QAChC,OAAO,EAAE,IAAI,EAAE,gBAAgB,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC;IAC1E,CAAC;IACD,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC;AAC9D,CAAC"}

package/dist/enrichment.d.ts

@@ -1,28 +0,0 @@
-import type { IndexedComponent } from "./scan-types.js";
-/**
- * Manifest source for enrichment of a resolver-discovered leaf package.
- *
- *   - "authored": leaf shipped a `custom-elements.json` or
- *                 `component-compass-manifest.json` at its package root.
- *   - null:       no enrichment available — identity stays opaque
- *                 (`components[].manifest === null` in the artifact).
- */
-export type Enrichment = {
-    source: "authored";
-    data: AuthoredLeafPayload;
-} | null;
-/**
- * Payload shape held by the lazy resolver for a successfully-loaded leaf
- * manifest. Per-leaf, not per-component — carries every component the leaf
- * declares plus the manifest source metadata.
- */
-export type AuthoredLeafPayload = {
-    /** Every component declared in the leaf's authored manifest. */
-    components: IndexedComponent[];
-    /** Absolute filesystem path of the loaded manifest file. */
-    manifestPath: string;
-    /** Authored format the manifest was loaded from. */
-    manifestKind: "cem" | "component-compass-manifest";
-    /** Leaf package's `version` field, when readable. */
-    packageVersion?: string;
-};

package/dist/enrichment.js

@@ -1,2 +0,0 @@
-export {};
-//# sourceMappingURL=enrichment.js.map

package/dist/enrichment.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"enrichment.js","sourceRoot":"","sources":["../src/enrichment.ts"],"names":[],"mappings":""}

package/dist/logical-id.d.ts

@@ -1,4 +0,0 @@
-import type { OutputIdentity } from "./output-types.js";
-export declare function logicalKeyFor(identity: OutputIdentity): string | null;
-export declare function hashLogicalKey(key: string): string;
-export declare function computeLogicalId(identity: OutputIdentity, physicalId: string): string;

package/dist/logical-id.js

@@ -1,48 +0,0 @@
-/**
- * THE logical-id seam. A logical component groups the physical
- * identities that realize it; the key is a pure function of one identity:
- *   - external custom-element              -> logical::<tagName>
- *   - external react/vue with `wraps`      -> its TARGET's tag key (same as above)
- *   - everything else                      -> null (singleton: logicalId = physical id)
- * Tag keys are deliberately modulePath-free and derivable
- * from the identity alone so every repo lands on the same id.
- * Keyed on tag name alone, not package+tag: tag names
- * are the platform's global-uniqueness contract, and package-keying split a
- * resolved custom element from its package-unresolved twin onto two logical
- * ids for the same element.
- * Do not re-derive these keys anywhere else — import from here (CLI stamps
- * at scan time; web-shared derives only for legacy stored artifacts).
- *
- * This module is ISOMORPHIC on purpose. `deriveLogicalId` (web-shared) is
- * reachable from `"use client"` components, so the seam gets bundled for the
- * browser as well as run in Node. Hashing therefore goes through
- * `@noble/hashes` (zero-dependency, no `node:crypto`); `hashLogicalKey` stays
- * byte-identical to the `createHash("sha1")` form it replaced — see the
- * byte-identity suite in tests/logical-id.test.ts. Keep this file free of
- * *unconditional* Node builtins: anything added here ships to the client.
- * (`@noble/hashes/utils` resolves `node:crypto` only under the `node` export
- * condition, via `@noble/hashes/crypto` -> `cryptoNode.js`; isomorphism rests
- * on bundlers picking the browser condition, not on the module graph being
- * literally builtin-free.)
- */
-import { sha1 } from "@noble/hashes/legacy";
-import { bytesToHex, utf8ToBytes } from "@noble/hashes/utils";
-export function logicalKeyFor(identity) {
-    if (identity.scope !== "external")
-        return null;
-    if (identity.kind === "custom-element" && identity.tagName !== undefined) {
-        return `logical::${identity.tagName}`;
-    }
-    if (identity.wraps !== undefined) {
-        return `logical::${identity.wraps.tagName}`;
-    }
-    return null;
-}
-export function hashLogicalKey(key) {
-    return bytesToHex(sha1(utf8ToBytes(key))).slice(0, 16);
-}
-export function computeLogicalId(identity, physicalId) {
-    const key = logicalKeyFor(identity);
-    return key === null ? physicalId : hashLogicalKey(key);
-}
-//# sourceMappingURL=logical-id.js.map

package/dist/logical-id.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"logical-id.js","sourceRoot":"","sources":["../src/logical-id.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AACH,OAAO,EAAE,IAAI,EAAE,MAAM,sBAAsB,CAAC;AAC5C,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,qBAAqB,CAAC;AAG9D,MAAM,UAAU,aAAa,CAAC,QAAwB;IACpD,IAAI,QAAQ,CAAC,KAAK,KAAK,UAAU;QAAE,OAAO,IAAI,CAAC;IAC/C,IAAI,QAAQ,CAAC,IAAI,KAAK,gBAAgB,IAAI,QAAQ,CAAC,OAAO,KAAK,SAAS,EAAE,CAAC;QACzE,OAAO,YAAY,QAAQ,CAAC,OAAO,EAAE,CAAC;IACxC,CAAC;IACD,IAAI,QAAQ,CAAC,KAAK,KAAK,SAAS,EAAE,CAAC;QACjC,OAAO,YAAY,QAAQ,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC;IAC9C,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,GAAW;IACxC,OAAO,UAAU,CAAC,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;AACzD,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,QAAwB,EAAE,UAAkB;IAC3E,MAAM,GAAG,GAAG,aAAa,CAAC,QAAQ,CAAC,CAAC;IACpC,OAAO,GAAG,KAAK,IAAI,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,cAAc,CAAC,GAAG,CAAC,CAAC;AACzD,CAAC"}