@cplieger/deadset-ts 8.0.0-dev.5 → 8.0.0-dev.7

package/dist/src/suppress.js

@@ -6,15 +6,10 @@
  * withholds a finding its code would have produced there, dormant when the configuration
  * withholds every such finding anyway, and stale otherwise.
  */
+import { KIND_ROWS, SYMBOL_SUBJECTS, } from "./contract/contract.generated.js";
 import { ConfigError } from "./config.js";
 import { positionKey } from "./position.js";
 import { isRef } from "./ref.js";
-/** The code a suppression that carries no reason is reported under. */
-export const SUPPRESSION_WITHOUT_REASON = "DS1701";
-/** The code an ignore entry or a baseline row that names no path is reported under. */
-export const UNSCOPED_ENTRY = "DS1702";
-/** The code a suppression that withholds nothing is reported under. */
-export const STALE_SUPPRESSION = "DS1703";
 /**
  * A directive, an entry or a document the grammar refuses before any finding exists: an
  * instruction the analysis cannot carry out. It is a malformed input, so the command line
@@ -71,73 +66,59 @@ export function isSymbolRef(value) {
 export function blankReason(reason) {
     return reason === undefined || /^[ \t\r\n]*$/u.test(reason);
 }
+/** The subject of the kind each live code names. */
+const SUBJECT_OF_CODE = new Map(KIND_ROWS.map((row) => [row.code, row.subject]));
+/** The subject a finding about one symbol kind is about. */
+function subjectOf(kind) {
+    return Object.hasOwn(SYMBOL_SUBJECTS, kind)
+        ? SYMBOL_SUBJECTS[kind]
+        : undefined;
+}
+/** Whether a subject is a row of a document rather than a declaration of the program. */
+function rowOf(subject) {
+    return subject === "file" || subject === "dependency" || subject === "record";
+}
 /**
- * The subject kinds that are a dependency row, each with the code that reports one. An
- * ignore entry or a baseline row naming the row's reference and file withholds its finding
- * and marks nothing, and an inline directive never binds one.
- */
-const DEPENDENCY_SUBJECTS = new Map([
-    ["dependency", ["DS1601"]],
-    ["module-directive", ["DS1605"]],
-]);
-/**
- * The subject kinds that are a row of a document rather than a declaration of the program,
- * each with the codes that report one. Apart from a dependency row, nothing withholds a
- * finding about one.
+ * Whether a finding's subject is a row of a document rather than a declaration. Apart
+ * from a dependency row, nothing withholds a finding about one.
  */
-const ROW_SUBJECTS = new Map([
-    ["file", ["DS1501", "DS1502"]],
-    ...DEPENDENCY_SUBJECTS,
-    ["root", ["DS1704"]],
-    ["configured-declaration", ["DS1706"]],
-    ["suppression", ["DS1701", "DS1702", "DS1703"]],
-    ["edge", ["DS1705"]],
-]);
-/** Whether a finding's subject is a row of a document rather than a declaration. */
 export function isRowSubject(kind) {
-    return ROW_SUBJECTS.has(kind);
+    return rowOf(subjectOf(kind));
 }
 /** Whether a code reports a row of a document. */
 export function isRowCode(code) {
-    return [...ROW_SUBJECTS.values()].some((codes) => codes.includes(code));
+    return rowOf(SUBJECT_OF_CODE.get(code));
 }
-/** Whether a finding's subject is a dependency row. */
+/**
+ * Whether a finding's subject is a dependency row. An ignore entry or a baseline row
+ * naming the row's reference and file withholds its finding and marks nothing, and an
+ * inline directive never binds one.
+ */
 export function isDependencySubject(kind) {
-    return DEPENDENCY_SUBJECTS.has(kind);
+    return subjectOf(kind) === "dependency";
 }
 /** Whether a code reports a dependency row, which only an ignore entry or a baseline row names. */
 export function isDependencyCode(code) {
-    return [...DEPENDENCY_SUBJECTS.values()].some((codes) => codes.includes(code));
+    return SUBJECT_OF_CODE.get(code) === "dependency";
 }
 /** Whether a code reports a row of a document that no record of any mechanism can name. */
 export function isUnsuppressibleCode(code) {
     return isRowCode(code) && !isDependencyCode(code);
 }
 /**
- * The subject kinds that are a part of a declaration rather than a declaration: a part
+ * Whether a finding's subject is a part of the declaration its reference names: a part
  * has no reference of its own, so a finding about one names the declaration that holds
  * it, and the part is decided inside that declaration whatever uses it.
  */
-const PART_SUBJECTS = new Set([
-    "parameter",
-    "receiver",
-    "result",
-    "statement",
-    "case",
-    "store",
-]);
-/** Whether a finding's subject is a part of the declaration its reference names. */
 export function isPartSubject(kind) {
-    return PART_SUBJECTS.has(kind);
+    return subjectOf(kind) === "part";
 }
-/** The prefix of the codes of the part kinds, the intra-function range. */
-const PART_KIND_PREFIX = "DS18";
 /**
  * Whether a code is a part kind, whose record withholds its finding and marks nothing:
  * the record says the part is wanted, not that the declaration holding it is.
  */
 export function isPartKind(code) {
-    return code.startsWith(PART_KIND_PREFIX);
+    return SUBJECT_OF_CODE.get(code) === "part";
 }
 /** One finding's identity: its code and the position of the thing it names. */
 function claimKey(finding) {
@@ -155,12 +136,12 @@ export function pairs(record, finding) {
     if (record.code !== finding.code) {
         return false;
     }
-    if (DEPENDENCY_SUBJECTS.has(finding.symbol.kind)) {
+    if (isDependencySubject(finding.symbol.kind)) {
         return (record.mechanism !== "inline" &&
             record.symbol === finding.symbol.ref &&
             record.path === finding.position.path);
     }
-    if (ROW_SUBJECTS.has(finding.symbol.kind)) {
+    if (isRowSubject(finding.symbol.kind)) {
         return false;
     }
     if (record.bound !== "" && record.bound === positionKey(finding.position)) {

package/dist/src/symbol-keys.js

@@ -5,16 +5,14 @@
  * No name node resolves to such a member: the key's name resolves to the constant. An
  * iteration reads the member its well-known iteration symbol keys.
  */
-import { isComputedPropertyName, isForOfStatement, isIdentifier, isNoSubstitutionTemplateLiteral, isNumericLiteral, isParenthesizedExpression, isPropertyAccessExpression, isSpreadElement, isStringLiteral, } from "@typescript/native/ast";
+import { isComputedPropertyName, isForOfStatement, isIdentifier, isNoSubstitutionTemplateLiteral, isNumericLiteral, isPropertyAccessExpression, isSpreadElement, isStringLiteral, } from "@typescript/native/ast";
+import { parenthesesRemoved } from "./unwrap.js";
 import { nodeKey } from "./inventory.js";
 import { renderPosition } from "./position.js";
 import { isAnswered } from "./query.js";
 /** The identifier an element access's argument names its key by, where it is a name. */
 export function keyNameOf(argument) {
-    let at = argument;
-    while (isParenthesizedExpression(at)) {
-        at = at.expression;
-    }
+    const at = parenthesesRemoved(argument);
     if (isIdentifier(at)) {
         return at;
     }

package/dist/src/template-field.js

@@ -16,6 +16,8 @@ import { ConfigError } from "./config.js";
 import { memberNames } from "./member-names.js";
 import { extensionOf, isAbsolutePath, joinPath, normalizePath, relativePath } from "./paths.js";
 import { isComponentFile } from "./position.js";
+import { bytewise } from "./text/compare.js";
+import { filesBelow } from "./fs/tree.js";
 /** The kinds of declaration an action can name. */
 const READ_BY_A_TEMPLATE = new Set([
     "method",
@@ -30,13 +32,6 @@ const READ_BY_A_TEMPLATE = new Set([
 const READ_BY_MARKUP = new Set([...READ_BY_A_TEMPLATE, "enum-member"]);
 /** One identifier, as the grammar of the analyzed language spells one. */
 const IDENTIFIER = /[\p{ID_Start}$_][\p{ID_Continue}$\u200C\u200D]*/uy;
-/** Two strings ordered bytewise. */
-function compare(a, b) {
-    if (a === b) {
-        return 0;
-    }
-    return a < b ? -1 : 1;
-}
 /**
  * Every template under the configured directories, read once for the run, in path
  * order and each file once. A directory is named relative to the target root, and
@@ -48,13 +43,8 @@ function compare(a, b) {
 export function readTemplates(host, targetRoot, analysis) {
     const files = new Map();
     const read = (dir) => {
-        const entries = [...host.readDirectory(joinPath(targetRoot, dir))].sort((a, b) => compare(a.name, b.name));
-        for (const entry of entries) {
-            const path = joinPath(dir, entry.name);
-            if (entry.directory) {
-                read(path);
-                continue;
-            }
+        for (const below of filesBelow(host, joinPath(targetRoot, dir), () => true)) {
+            const path = joinPath(dir, below);
             const absolute = joinPath(targetRoot, path);
             if (!files.has(path) && host.kindOf(absolute) === "file") {
                 files.set(path, host.readFile(absolute));
@@ -75,7 +65,7 @@ export function readTemplates(host, targetRoot, analysis) {
         delimiters: analysis.templateDelimiters,
         files: [...files]
             .map(([path, text]) => ({ path, text }))
-            .sort((a, b) => compare(a.path, b.path)),
+            .sort((a, b) => bytewise(a.path, b.path)),
     };
 }
 /** The end of the quoted string that opens at `from`, past its closing quote. */

package/dist/src/test-globals.js

@@ -7,9 +7,11 @@
  * written for the runner, as one that imports it is.
  */
 import { isAsExpression, isBinaryExpression, isCallExpression, isExportAssignment, isExpressionStatement, isIdentifier, isObjectLiteralExpression, isParenthesizedExpression, isPropertyAccessExpression, isPropertyAssignment, isSatisfiesExpression, SyntaxKind, } from "@typescript/native/ast";
-import { dirnamePath, joinPath } from "./paths.js";
+import { ancestors, dirnamePath, joinPath } from "./paths.js";
 import { UNANSWERED } from "./query.js";
 import { writtenPath } from "./workspace-programs.js";
+import { filesIn } from "./fs/tree.js";
+import { holdsManifest, INSTALLED_PACKAGES } from "./fs/manifest.js";
 /** The test runner whose configuration injects the globals, and the `types` entry declaring them. */
 export const GLOBALS_RUNNER = "vitest";
 const GLOBALS_TYPES = "vitest/globals";
@@ -93,17 +95,7 @@ function setsGlobals(file) {
 }
 /** Whether the runner's configuration in one manifest's directory injects the globals. */
 function injectsGlobals(host, parse, dir) {
-    let names;
-    try {
-        names = host
-            .readDirectory(dir)
-            .filter((entry) => !entry.directory && RUNNER_CONFIG.test(entry.name))
-            .map((entry) => entry.name);
-    }
-    catch {
-        return false;
-    }
-    return names.some((name) => {
+    return filesIn(host, dir, (name) => RUNNER_CONFIG.test(name)).some((name) => {
         const path = joinPath(dir, name);
         try {
             return setsGlobals(parse(path, host.readFile(path)));
@@ -115,25 +107,11 @@ function injectsGlobals(host, parse, dir) {
 }
 /** Whether a file declaring the globals is installed where the configuration resolves packages from. */
 function globalsInstalled(host, configFile) {
-    for (let dir = dirnamePath(configFile);; dir = dirnamePath(dir)) {
-        if (host.kindOf(joinPath(dir, "node_modules", GLOBALS_RUNNER, "globals.d.ts")) === "file") {
-            return true;
-        }
-        if (dirnamePath(dir) === dir) {
-            return false;
-        }
-    }
+    return ancestors(dirnamePath(configFile)).some((dir) => host.kindOf(joinPath(dir, INSTALLED_PACKAGES, GLOBALS_RUNNER, "globals.d.ts")) === "file");
 }
 /** The directory of the manifest nearest one configuration file, at or above its own. */
 function manifestDir(host, configFile) {
-    for (let dir = dirnamePath(configFile);; dir = dirnamePath(dir)) {
-        if (host.kindOf(joinPath(dir, "package.json")) === "file") {
-            return dir;
-        }
-        if (dirnamePath(dir) === dir) {
-            return undefined;
-        }
-    }
+    return ancestors(dirnamePath(configFile)).find((dir) => holdsManifest(host, dir));
 }
 function typesOf(value) {
     return Array.isArray(value) && value.every((one) => typeof one === "string") ? value : undefined;

package/dist/src/test-joins.js

@@ -6,14 +6,16 @@
  * file another package's, which its own test runner compiles.
  */
 import { sourcePaths } from "./file-facts.js";
-import { dirnamePath, joinPath, relativePath } from "./paths.js";
+import { ancestors, dirnamePath, joinPath } from "./paths.js";
 import { writtenPath } from "./workspace-programs.js";
+import { bytewise } from "./text/compare.js";
+import { holdsManifest } from "./fs/manifest.js";
 const PREFERRED = "/tsconfig.json";
 /** The configurations of one directory in the order a file joins them: `tsconfig.json` first. */
 function byPreference(a, b) {
     const first = a.endsWith(PREFERRED) ? 0 : 1;
     const second = b.endsWith(PREFERRED) ? 0 : 1;
-    return first - second || (a < b ? -1 : a > b ? 1 : 0);
+    return first - second || bytewise(a, b);
 }
 /**
  * Per configuration of `configFiles`, the absolute paths of the test files that join it:
@@ -43,15 +45,13 @@ export function joinedTestFiles(engine, host, root, configFiles, patterns) {
         if (listed.has(file) || !patterns.some((pattern) => pattern.test(path))) {
             continue;
         }
-        for (let dir = dirnamePath(file);; dir = dirnamePath(dir)) {
+        for (const dir of ancestors(dirnamePath(file), root)) {
             const [nearest] = byDir.get(dir) ?? [];
             if (nearest !== undefined) {
                 joins.set(nearest, [...(joins.get(nearest) ?? []), file]);
                 break;
             }
-            if (host.kindOf(joinPath(dir, "package.json")) === "file" ||
-                dir === root ||
-                relativePath(root, dir) === undefined) {
+            if (holdsManifest(host, dir)) {
                 break;
             }
         }

package/dist/src/text/compare.js

@@ -0,0 +1,26 @@
+/**
+ * Two strings in the order of their UTF-8 bytes, the order every set of a run is read in.
+ * That is code point order, which UTF-16 code unit order (`<` on strings) breaks above
+ * U+FFFF: a surrogate unit is below U+E000 while the code point it encodes is above U+FFFF.
+ */
+export function bytewise(a, b) {
+    if (a === b) {
+        return 0;
+    }
+    const length = Math.min(a.length, b.length);
+    for (let at = 0; at < length; at += 1) {
+        const x = a.charCodeAt(at);
+        const y = b.charCodeAt(at);
+        if (x !== y) {
+            return ranked(x) < ranked(y) ? -1 : 1;
+        }
+    }
+    return a.length < b.length ? -1 : 1;
+}
+/** One UTF-16 unit moved so that a surrogate ranks above every unit of U+E000 to U+FFFF. */
+function ranked(unit) {
+    if (unit >= 0xe000) {
+        return unit - 0x800;
+    }
+    return unit >= 0xd800 ? unit + 0x2000 : unit;
+}

package/dist/src/text/glob.js

@@ -0,0 +1,194 @@
+/**
+ * Glob patterns over paths in two forms. The configured form (the configuration, convention
+ * rows, bundler entries, workspace member patterns) has `*` and `?` within a segment, `**`
+ * across segments and brace lists. A `.gitignore` line has git's form: bracket expressions
+ * and backslash escapes, no brace lists (https://git-scm.com/docs/gitignore#_pattern_format).
+ * A configured root is not a glob: it names a symbol reference, and is read where it is used.
+ */
+/**
+ * One character of a pattern as the expression syntax reads it literally. The set escaped
+ * is closed: under the unicode flag an escape of any other character is refused outright.
+ */
+function quoted(character) {
+    return /[.*+?^${}()|[\]\\/]/u.test(character) ? `\\${character}` : character;
+}
+/**
+ * The ASCII ranges each POSIX class a bracket expression may name holds, as git's own
+ * character table reads them, each range written as its first and last character.
+ */
+const CLASSES = new Map([
+    ["alnum", "09AZaz"],
+    ["alpha", "AZaz"],
+    ["blank", "\t\t  "],
+    ["cntrl", "\0\x1f\x7f\x7f"],
+    ["digit", "09"],
+    ["graph", "!~"],
+    ["lower", "az"],
+    ["print", " ~"],
+    ["punct", "!/:@[`{~"],
+    ["space", "\t\n\r\r  "],
+    ["upper", "AZ"],
+    ["xdigit", "09AFaf"],
+]);
+/** What a pattern git cannot read matches: nothing, as git aborts the whole match. */
+const NOTHING = "(?!)";
+/** One code point as a member of an expression class. */
+function member(point) {
+    return `\\u{${point.toString(16)}}`;
+}
+/**
+ * The class a bracket expression opening at `open` denotes, and the index past its `]`,
+ * read as git's wildmatch reads it: a leading `!` or `^` negates it, a `]` first is a
+ * member, `\` escapes one character, `x-y` is a range (one whose `y` is below `x` holds
+ * `x` alone) and `[:name:]` a POSIX class. An unclosed bracket or an unknown class name
+ * matches nothing. Neither form matches the solidus.
+ */
+function bracket(pattern, open) {
+    let at = open + 1;
+    const negated = pattern[at] === "!" || pattern[at] === "^";
+    if (negated) {
+        at += 1;
+    }
+    const next = () => {
+        const point = pattern.codePointAt(at);
+        at += point !== undefined && point > 0xffff ? 2 : 1;
+        return point;
+    };
+    let members = "";
+    let low;
+    for (let first = true;; first = false) {
+        let point = next();
+        if (point === undefined) {
+            return { source: NOTHING, end: pattern.length };
+        }
+        if (point === 0x5d && !first) {
+            return { source: negated ? `[^/${members}]` : `(?!/)[${members}]`, end: at };
+        }
+        if (point === 0x2d && low !== undefined && at < pattern.length && pattern[at] !== "]") {
+            let high = next();
+            if (high === 0x5c) {
+                high = next();
+            }
+            if (high === undefined) {
+                return { source: NOTHING, end: pattern.length };
+            }
+            members += high >= low ? `${member(low)}-${member(high)}` : "";
+            low = undefined;
+            continue;
+        }
+        if (point === 0x5b && pattern[at] === ":") {
+            const close = pattern.indexOf("]", at + 1);
+            if (close < 0) {
+                return { source: NOTHING, end: pattern.length };
+            }
+            if (close > at + 1 && pattern[close - 1] === ":") {
+                const ranges = CLASSES.get(pattern.slice(at + 1, close - 1));
+                if (ranges === undefined) {
+                    return { source: NOTHING, end: pattern.length };
+                }
+                for (let one = 0; one < ranges.length; one += 2) {
+                    members += `${member(ranges.charCodeAt(one))}-${member(ranges.charCodeAt(one + 1))}`;
+                }
+                low = undefined;
+                at = close + 1;
+                continue;
+            }
+        }
+        if (point === 0x5c) {
+            point = next();
+            if (point === undefined) {
+                return { source: NOTHING, end: pattern.length };
+            }
+        }
+        members += member(point);
+        low = point;
+    }
+}
+/** The expression source of one pattern with no brace list. */
+function source(pattern, form) {
+    let text = "";
+    let at = 0;
+    while (at < pattern.length) {
+        if (pattern.startsWith("**/", at)) {
+            text += "(?:[^/]*/)*";
+            at += 3;
+            continue;
+        }
+        if (pattern.startsWith("**", at)) {
+            text += ".*";
+            at += 2;
+            continue;
+        }
+        const character = pattern[at] ?? "";
+        if (form === "gitignore" && character === "[") {
+            const read = bracket(pattern, at);
+            text += read.source;
+            at = read.end;
+            continue;
+        }
+        if (form === "gitignore" && character === "\\" && at + 1 < pattern.length) {
+            text += quoted(pattern[at + 1] ?? "");
+            at += 2;
+            continue;
+        }
+        at += 1;
+        text += character === "*" ? "[^/]*" : character === "?" ? "[^/]" : quoted(character);
+    }
+    return text;
+}
+/** A pattern with every brace list expanded into its alternatives; a lone `{` stands for itself. */
+export function braceExpanded(pattern) {
+    const open = pattern.indexOf("{");
+    const close = open < 0 ? -1 : pattern.indexOf("}", open);
+    if (close < 0) {
+        return [pattern];
+    }
+    const before = pattern.slice(0, open);
+    const after = pattern.slice(close + 1);
+    return pattern
+        .slice(open + 1, close)
+        .split(",")
+        .flatMap((member) => braceExpanded(before + member + after));
+}
+/** The expression one whole-path pattern of the configured form denotes. */
+export function globExpression(pattern) {
+    const alternatives = braceExpanded(pattern).map((one) => source(one, "configured"));
+    return new RegExp(`^(?:${alternatives.join("|")})$`, "u");
+}
+/** The expression one `.gitignore` pattern denotes over a path below its file's directory. */
+export function gitignoreExpression(pattern) {
+    return new RegExp(`^${source(pattern, "gitignore")}$`, "u");
+}
+const SEGMENTS = new Map();
+/**
+ * Whether one directory name matches one segment of a workspace's member pattern, its brace
+ * lists already expanded. Neither `*` nor `?` matches a leading dot, as npm's workspaces read
+ * them: https://docs.npmjs.com/cli/using-npm/workspaces
+ */
+export function segmentMatches(segment, name) {
+    if (name.startsWith(".") && !segment.startsWith(".")) {
+        return false;
+    }
+    let expression = SEGMENTS.get(segment);
+    if (expression === undefined) {
+        expression = globExpression(segment);
+        SEGMENTS.set(segment, expression);
+    }
+    return expression.test(name);
+}
+/**
+ * Whether one path's segments match a member pattern's, `**` standing for any run of segments
+ * that starts with no dot.
+ */
+export function pathMatches(pattern, path) {
+    const [head, ...rest] = pattern;
+    if (head === undefined) {
+        return path.length === 0;
+    }
+    if (head === "**") {
+        return (pathMatches(rest, path) ||
+            (path.length > 0 && !(path[0] ?? "").startsWith(".") && pathMatches(pattern, path.slice(1))));
+    }
+    const [name, ...below] = path;
+    return name !== undefined && segmentMatches(head, name) && pathMatches(rest, below);
+}

package/dist/src/text/shell.js

@@ -0,0 +1,159 @@
+/**
+ * Shell command lines read as text, never run: the commands a line runs, the tokens the
+ * Contract splits a command into, and the words POSIX token recognition reads.
+ */
+/**
+ * The shell's list and pipeline operators, each of which ends one command. An `&` beside a
+ * redirection's `<` or `>` (`2>&1`, and bash's `&>log`) is part of the redirection.
+ */
+const COMMAND_OPERATORS = /&&|\|\||;|\||(?<![<>])&(?!>)/u;
+/** Where a command splits into tokens: white space and the operators the Contract names. */
+const TOKEN_SEPARATORS = /\s+|&&|\|\||;|\|/u;
+/** A text written inside one pair of quotes. */
+const QUOTED = /^(["'])(.*)\1$/su;
+/** The commands one line runs, the text between two of the shell's list and pipeline operators. */
+export function commandsOf(line) {
+    return line.split(COMMAND_OPERATORS);
+}
+/** One text with one pair of enclosing quotes removed. */
+export function unquoted(text) {
+    return text.replace(QUOTED, "$2");
+}
+/**
+ * Every token one script's command line holds, each with one pair of enclosing quotes
+ * removed. A token holding a wildcard is a pattern rather than a path, and names no
+ * entry point.
+ */
+export function scriptTokens(command) {
+    return command
+        .split(TOKEN_SEPARATORS)
+        .map(unquoted)
+        .filter((token) => token !== "" && !token.includes("*"));
+}
+/** One shell line up to its comment: a `#` that starts a word outside quotes. */
+export function withoutComment(line) {
+    let quote = "";
+    for (let at = 0; at < line.length; at += 1) {
+        const char = line[at];
+        if (quote !== "") {
+            if (char === quote) {
+                quote = "";
+            }
+            else if (char === "\\" && quote === '"') {
+                at += 1;
+            }
+        }
+        else if (char === "'" || char === '"') {
+            quote = char;
+        }
+        else if (char === "\\") {
+            at += 1;
+        }
+        else if (char === "#" && (at === 0 || /\s/u.test(line[at - 1] ?? ""))) {
+            return line.slice(0, at);
+        }
+    }
+    return line;
+}
+/** The characters that end a word outside quotes and separate nothing: blanks. */
+// Stryker disable next-line Regex: its \v to \V mutant is no valid escape under the u flag, so the whole module fails to parse
+const BLANK = /[ \t\r\f\v]/u;
+/** The characters that end a word outside quotes and begin an operator: newline included. */
+const OPERATOR = /[\n;&|()<>]/u;
+/** The characters a backslash escapes inside double quotes; before any other it stands for itself. */
+const DOUBLE_QUOTE_ESCAPES = new Set(["$", "`", '"', "\\"]);
+/**
+ * The words of one command line, as POSIX token recognition reads quotes, backslashes,
+ * line continuations, comments and operators. A word an expansion may change (an unquoted
+ * `$`, backquote, glob character or leading `~`, or a `$` or backquote in double quotes)
+ * is computed, and so is the rest of a line whose quote is never closed. A computed word
+ * and each operator are undefined, so a flag's file is never read across them.
+ */
+export function shellWords(command) {
+    const words = [];
+    let word;
+    let computed = false;
+    const end = () => {
+        if (word !== undefined) {
+            words.push(computed ? undefined : word);
+        }
+        word = undefined;
+        computed = false;
+    };
+    for (let at = 0; at < command.length; at += 1) {
+        const char = command.charAt(at);
+        if (char === "\\" && command.charAt(at + 1) === "\n") {
+            at += 1;
+        }
+        else if (BLANK.test(char)) {
+            end();
+        }
+        else if (OPERATOR.test(char)) {
+            end();
+            words.push(undefined);
+        }
+        else if (char === "#" && word === undefined) {
+            const newline = command.indexOf("\n", at);
+            at = newline < 0 ? command.length : newline - 1;
+        }
+        else if (char === "\\") {
+            at += 1;
+            word = (word ?? "") + command.charAt(at);
+        }
+        else if (char === "'" || char === '"') {
+            const close = closingQuote(command, at);
+            if (close < 0) {
+                word ??= "";
+                computed = true;
+                break;
+            }
+            const quoted = char === "'"
+                ? { text: command.slice(at + 1, close), computed: false }
+                : doubleQuoted(command.slice(at + 1, close));
+            word = (word ?? "") + quoted.text;
+            computed ||= quoted.computed;
+            at = close;
+        }
+        else {
+            computed ||= /[$`*?[]/u.test(char) || (char === "~" && word === undefined);
+            word = (word ?? "") + char;
+        }
+    }
+    end();
+    return words;
+}
+/** The text between one pair of double quotes, unescaped, and whether an expansion may change it. */
+function doubleQuoted(inner) {
+    let text = "";
+    let computed = false;
+    for (let at = 0; at < inner.length; at += 1) {
+        const char = inner.charAt(at);
+        const next = inner.charAt(at + 1);
+        if (char === "\\" && next === "\n") {
+            at += 1;
+        }
+        else if (char === "\\" && DOUBLE_QUOTE_ESCAPES.has(next)) {
+            text += next;
+            at += 1;
+        }
+        else {
+            computed ||= char === "$" || char === "`";
+            text += char;
+        }
+    }
+    return { text, computed };
+}
+/** The index of the quote that closes the one at `open`, or -1 where none does. */
+function closingQuote(command, open) {
+    const quote = command.charAt(open);
+    for (let at = open + 1; at < command.length; at += 1) {
+        const char = command.charAt(at);
+        if (char === quote) {
+            return at;
+        }
+        if (quote === '"' && char === "\\") {
+            at += 1;
+        }
+    }
+    return -1;
+}