@domainlang/cli 0.5.2 → 0.6.0

package/out/services/git-url-resolver.js

@@ -0,0 +1,408 @@
+/**
+ * Git Repository Resolver Service (CLI-only)
+ *
+ * Resolves git-based package imports to local cached repositories.
+ * Supports simplified GitHub syntax (owner/repo@version) and full URLs.
+ *
+ * Design: Repository-level imports (not individual files)
+ * - Imports load entire package
+ * - Package entry point defined in model.yaml
+ * - Version pinning at repository level
+ *
+ * This module contains network operations (git clone, git ls-remote) and
+ * should ONLY be used in CLI contexts, never in the LSP.
+ */
+import path from 'node:path';
+import fs from 'node:fs/promises';
+import { exec } from 'node:child_process';
+import { promisify } from 'node:util';
+import YAML from 'yaml';
+const execAsync = promisify(exec);
+/**
+ * Parses import URLs into structured git import information.
+ *
+ * Supported formats:
+ * - owner/repo@version (GitHub assumed)
+ * - owner/repo (GitHub, defaults to main)
+ * - https://github.com/owner/repo@version
+ * - https://gitlab.com/owner/repo@version
+ * - https://git.example.com/owner/repo@version
+ */
+export class GitUrlParser {
+    /**
+     * Determines if an import string is a git repository import.
+     */
+    static isGitUrl(importStr) {
+        // GitHub shorthand: owner/repo or owner/repo@version
+        if (/^[a-zA-Z0-9-]+\/[a-zA-Z0-9-_.]+(@[^/]+)?$/.test(importStr)) {
+            return true;
+        }
+        // Full URLs
+        return (importStr.startsWith('https://github.com/') ||
+            importStr.startsWith('https://gitlab.com/') ||
+            importStr.startsWith('https://bitbucket.org/') ||
+            importStr.startsWith('https://git.') ||
+            importStr.startsWith('git://'));
+    }
+    /**
+     * Parses a git import URL into structured components.
+     *
+     * @param importStr - The import URL string
+     * @returns Parsed git import information
+     * @throws Error if URL format is invalid
+     */
+    static parse(importStr) {
+        // Handle GitHub shorthand (owner/repo or owner/repo@version)
+        if (this.isGitHubShorthand(importStr)) {
+            return this.parseGitHubShorthand(importStr);
+        }
+        // Handle full URLs
+        if (importStr.startsWith('https://') || importStr.startsWith('git://')) {
+            return this.parseFullUrl(importStr);
+        }
+        throw new Error(`Invalid git import URL: '${importStr}'.\n` +
+            `Hint: Use 'owner/repo' or 'owner/repo@version' format (e.g., 'domainlang/core@v1.0.0').`);
+    }
+    /**
+     * Checks if string is GitHub shorthand format.
+     */
+    static isGitHubShorthand(importStr) {
+        return /^[a-zA-Z0-9-]+\/[a-zA-Z0-9-_.]+(@[^/]+)?$/.test(importStr);
+    }
+    /**
+     * Parses GitHub shorthand (owner/repo or owner/repo@version).
+     */
+    static parseGitHubShorthand(importStr) {
+        const match = importStr.match(/^([a-zA-Z0-9-]+)\/([a-zA-Z0-9-_.]+)(?:@([^/]+))?$/);
+        if (!match) {
+            throw new Error(`Invalid GitHub shorthand format: '${importStr}'.\n` +
+                `Hint: Use 'owner/repo' or 'owner/repo@version' format.`);
+        }
+        const [, owner, repo, version] = match;
+        const resolvedVersion = version || 'main';
+        return {
+            original: importStr,
+            platform: 'github',
+            owner,
+            repo,
+            version: resolvedVersion,
+            repoUrl: `https://github.com/${owner}/${repo}`,
+            entryPoint: 'index.dlang', // Default, will be resolved from model.yaml
+        };
+    }
+    /**
+     * Parses full git URLs (https://...).
+     *
+     * Supported:
+     * - https://github.com/owner/repo@version
+     * - https://gitlab.com/owner/repo@version
+     * - https://git.example.com/owner/repo@version
+     */
+    static parseFullUrl(importStr) {
+        // GitHub
+        const ghMatch = importStr.match(/^https:\/\/github\.com\/([^/]+)\/([^/@]+)(?:@([^/]+))?$/);
+        if (ghMatch) {
+            const [, owner, repo, version] = ghMatch;
+            return {
+                original: importStr,
+                platform: 'github',
+                owner,
+                repo,
+                version: version || 'main',
+                repoUrl: `https://github.com/${owner}/${repo}`,
+                entryPoint: 'index.dlang',
+            };
+        }
+        // GitLab
+        const glMatch = importStr.match(/^https:\/\/gitlab\.com\/([^/]+)\/([^/@]+)(?:@([^/]+))?$/);
+        if (glMatch) {
+            const [, owner, repo, version] = glMatch;
+            return {
+                original: importStr,
+                platform: 'gitlab',
+                owner,
+                repo,
+                version: version || 'main',
+                repoUrl: `https://gitlab.com/${owner}/${repo}`,
+                entryPoint: 'index.dlang',
+            };
+        }
+        // Bitbucket
+        const bbMatch = importStr.match(/^https:\/\/bitbucket\.org\/([^/]+)\/([^/@]+)(?:@([^/]+))?$/);
+        if (bbMatch) {
+            const [, owner, repo, version] = bbMatch;
+            return {
+                original: importStr,
+                platform: 'bitbucket',
+                owner,
+                repo,
+                version: version || 'main',
+                repoUrl: `https://bitbucket.org/${owner}/${repo}`,
+                entryPoint: 'index.dlang',
+            };
+        }
+        // Generic git URL
+        const genericMatch = importStr.match(/^(?:https|git):\/\/([^/]+)\/([^/]+)\/([^/@]+)(?:@([^/]+))?$/);
+        if (genericMatch) {
+            const [, host, owner, repo, version] = genericMatch;
+            return {
+                original: importStr,
+                platform: 'generic',
+                owner,
+                repo,
+                version: version || 'main',
+                repoUrl: `https://${host}/${owner}/${repo}`,
+                entryPoint: 'index.dlang',
+            };
+        }
+        throw new Error(`Unsupported git URL format: '${importStr}'.\n` +
+            `Supported formats:\n` +
+            `  • owner/repo (GitHub shorthand)\n` +
+            `  • owner/repo@version\n` +
+            `  • https://github.com/owner/repo\n` +
+            `  • https://gitlab.com/owner/repo`);
+    }
+}
+/**
+ * Resolves git repository imports to local entry point files.
+ *
+ * Implements a content-addressable cache:
+ * - Cache location: .dlang/packages/ (project-local, per PRS-010)
+ * - Cache key: {owner}/{repo}/{commit-hash}
+ * - Downloads entire repository on first use
+ * - Reads model.yaml to find entry point
+ * - Returns path to entry point file
+ */
+export class GitUrlResolver {
+    /**
+     * Creates a GitUrlResolver with a project-local cache directory.
+     *
+     * @param cacheDir - The cache directory path. Per PRS-010, this should be
+     *                   the project's `.dlang/packages/` directory for isolation
+     *                   and reproducibility (like node_modules).
+     */
+    constructor(cacheDir) {
+        this.cacheDir = cacheDir;
+    }
+    /**
+     * Sets the lock file for dependency resolution.
+     *
+     * When a lock file is set, all package imports will use
+     * the locked commit hashes instead of resolving versions.
+     * This ensures reproducible builds and handles transitive dependencies.
+     *
+     * @param lockFile - The parsed lock file from the workspace root
+     */
+    setLockFile(lockFile) {
+        this.lockFile = lockFile;
+    }
+    /**
+     * Resolves a git import URL to the package's entry point file path.
+     *
+     * Process:
+     * 1. Parse git URL
+     * 2. Check lock file for pinned version (transitive dependency support)
+     * 3. Resolve version to commit hash (if not locked)
+     * 4. Check cache
+     * 5. Download repository if not cached
+     * 6. Read model.yaml to find entry point
+     * 7. Return path to entry point file
+     *
+     * @param importUrl - The git import URL
+     * @returns Path to the package's entry point file
+     */
+    async resolve(importUrl) {
+        const gitInfo = GitUrlParser.parse(importUrl);
+        // Check lock file for pinned version (handles transitive dependencies)
+        let commitHash;
+        const packageKey = `${gitInfo.owner}/${gitInfo.repo}`;
+        if (this.lockFile?.dependencies[packageKey]) {
+            // Use locked commit hash (reproducible build)
+            commitHash = this.lockFile.dependencies[packageKey].commit;
+        }
+        else {
+            // No lock file entry - resolve version via network
+            commitHash = await this.resolveCommit(gitInfo);
+        }
+        // Check cache
+        const cachedPath = this.getCachePath(gitInfo, commitHash);
+        if (!(await this.existsInCache(cachedPath))) {
+            // Download repository
+            await this.downloadRepo(gitInfo, commitHash, cachedPath);
+        }
+        // Read package metadata to get entry point
+        const entryPoint = await this.getEntryPoint(cachedPath);
+        const entryFile = path.join(cachedPath, entryPoint);
+        // Verify entry point exists
+        if (!(await this.existsInCache(entryFile))) {
+            throw new Error(`Entry point '${entryPoint}' not found in package '${gitInfo.owner}/${gitInfo.repo}@${gitInfo.version}'.\n` +
+                `Hint: Ensure the package has an entry point file (default: index.dlang).`);
+        }
+        return entryFile;
+    }
+    /**
+     * Reads model.yaml to get the package entry point.
+     * Falls back to index.dlang if no model.yaml found.
+     */
+    async getEntryPoint(repoPath) {
+        const yamlPath = path.join(repoPath, 'model.yaml');
+        try {
+            const yamlContent = await fs.readFile(yamlPath, 'utf-8');
+            const metadata = this.parseYaml(yamlContent);
+            return metadata.entry ?? 'index.dlang';
+        }
+        catch {
+            // No model.yaml or parse error, use default
+            return 'index.dlang';
+        }
+    }
+    /**
+     * Parses model.yaml content to extract entry point.
+     *
+     * Expected structure:
+     * model:
+     *   entry: index.dlang
+     */
+    parseYaml(content) {
+        const parsed = YAML.parse(content);
+        return {
+            entry: parsed.model?.entry,
+            name: parsed.model?.name,
+            version: parsed.model?.version,
+        };
+    }
+    /**
+     * Resolves a version (tag/branch) to a commit hash using git ls-remote.
+     */
+    async resolveCommit(gitInfo) {
+        try {
+            // Try to resolve as tag or branch
+            const { stdout } = await execAsync(`git ls-remote ${gitInfo.repoUrl} ${gitInfo.version}`);
+            if (stdout.trim()) {
+                const commitHash = stdout.split('\t')[0];
+                return commitHash;
+            }
+            // If not found, assume it's already a commit hash
+            if (/^[0-9a-f]{7,40}$/i.test(gitInfo.version)) {
+                return gitInfo.version;
+            }
+            throw new Error(`Could not resolve version '${gitInfo.version}' for ${gitInfo.repoUrl}.\n` +
+                `Hint: Check that the version (tag, branch, or commit) exists in the repository.`);
+        }
+        catch (error) {
+            throw new Error(`Failed to resolve git version '${gitInfo.version}' for ${gitInfo.repoUrl}.\n` +
+                `Error: ${error}\n` +
+                `Hint: Verify the repository URL is correct and accessible.`);
+        }
+    }
+    /**
+     * Gets the local cache path for a git repository.
+     *
+     * Format: .dlang/packages/{owner}/{repo}/{version}/
+     *
+     * Per PRS-010: Project-local cache structure mirrors the Design Considerations
+     * section showing `.dlang/packages/{owner}/{repo}/{version}/` layout.
+     */
+    getCachePath(gitInfo, commitHash) {
+        return path.join(this.cacheDir, gitInfo.owner, gitInfo.repo, commitHash);
+    }
+    /**
+     * Checks if a file or directory exists in the cache.
+     */
+    async existsInCache(filePath) {
+        try {
+            await fs.access(filePath);
+            return true;
+        }
+        catch {
+            return false;
+        }
+    }
+    /**
+     * Downloads a git repository to the cache.
+     *
+     * Uses shallow clone for efficiency (only downloads the specific commit).
+     */
+    async downloadRepo(gitInfo, commitHash, cachePath) {
+        const targetDir = path.resolve(cachePath);
+        const parentDir = path.dirname(targetDir);
+        await fs.mkdir(parentDir, { recursive: true });
+        try {
+            await execAsync(`git clone ${gitInfo.repoUrl}.git "${targetDir}" --no-checkout`);
+            await execAsync(`git -C "${targetDir}" fetch --depth 1 origin ${commitHash}`);
+            await execAsync(`git -C "${targetDir}" checkout --force --detach ${commitHash}`);
+            await fs.rm(path.join(targetDir, '.git'), { recursive: true, force: true });
+        }
+        catch (error) {
+            await fs.rm(targetDir, { recursive: true, force: true });
+            const message = error instanceof Error ? error.message : String(error);
+            throw new Error(`Failed to download package '${gitInfo.owner}/${gitInfo.repo}@${gitInfo.version}'.\n` +
+                `Error: ${message}\n` +
+                `Hint: Check your network connection and verify the repository URL is correct.`);
+        }
+    }
+    /**
+     * Clears the entire cache.
+     */
+    async clearCache() {
+        await fs.rm(this.cacheDir, { recursive: true, force: true });
+    }
+    /**
+     * Gets cache statistics (size, number of cached repos, etc.).
+     *
+     * Cache structure: .dlang/packages/{owner}/{repo}/{version}/
+     */
+    async getCacheStats() {
+        let totalSize = 0;
+        let repoCount = 0;
+        try {
+            const owners = await fs.readdir(this.cacheDir);
+            for (const owner of owners) {
+                const ownerPath = path.join(this.cacheDir, owner);
+                const ownerStat = await fs.stat(ownerPath);
+                if (!ownerStat.isDirectory())
+                    continue;
+                const repos = await fs.readdir(ownerPath);
+                for (const repo of repos) {
+                    const repoPath = path.join(ownerPath, repo);
+                    const repoStat = await fs.stat(repoPath);
+                    if (!repoStat.isDirectory())
+                        continue;
+                    const versions = await fs.readdir(repoPath);
+                    repoCount += versions.length;
+                    for (const version of versions) {
+                        const versionPath = path.join(repoPath, version);
+                        totalSize += await this.getDirectorySize(versionPath);
+                    }
+                }
+            }
+        }
+        catch {
+            // Cache directory doesn't exist yet
+        }
+        return {
+            totalSize,
+            repoCount,
+            cacheDir: this.cacheDir,
+        };
+    }
+    /**
+     * Gets the total size of a directory in bytes.
+     */
+    async getDirectorySize(dirPath) {
+        let size = 0;
+        const entries = await fs.readdir(dirPath, { withFileTypes: true });
+        for (const entry of entries) {
+            const entryPath = path.join(dirPath, entry.name);
+            if (entry.isDirectory()) {
+                size += await this.getDirectorySize(entryPath);
+            }
+            else {
+                const stats = await fs.stat(entryPath);
+                size += stats.size;
+            }
+        }
+        return size;
+    }
+}
+//# sourceMappingURL=git-url-resolver.js.map

package/out/services/git-url-resolver.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"git-url-resolver.js","sourceRoot":"","sources":["../../src/services/git-url-resolver.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,MAAM,kBAAkB,CAAC;AAClC,OAAO,EAAE,IAAI,EAAE,MAAM,oBAAoB,CAAC;AAC1C,OAAO,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AACtC,OAAO,IAAI,MAAM,MAAM,CAAC;AAGxB,MAAM,SAAS,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC;AAElC;;;;;;;;;GASG;AACH,MAAM,OAAO,YAAY;IACrB;;OAEG;IACH,MAAM,CAAC,QAAQ,CAAC,SAAiB;QAC7B,qDAAqD;QACrD,IAAI,2CAA2C,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC;YAC9D,OAAO,IAAI,CAAC;QAChB,CAAC;QAED,YAAY;QACZ,OAAO,CACH,SAAS,CAAC,UAAU,CAAC,qBAAqB,CAAC;YAC3C,SAAS,CAAC,UAAU,CAAC,qBAAqB,CAAC;YAC3C,SAAS,CAAC,UAAU,CAAC,wBAAwB,CAAC;YAC9C,SAAS,CAAC,UAAU,CAAC,cAAc,CAAC;YACpC,SAAS,CAAC,UAAU,CAAC,QAAQ,CAAC,CACjC,CAAC;IACN,CAAC;IAED;;;;;;OAMG;IACH,MAAM,CAAC,KAAK,CAAC,SAAiB;QAC1B,6DAA6D;QAC7D,IAAI,IAAI,CAAC,iBAAiB,CAAC,SAAS,CAAC,EAAE,CAAC;YACpC,OAAO,IAAI,CAAC,oBAAoB,CAAC,SAAS,CAAC,CAAC;QAChD,CAAC;QAED,mBAAmB;QACnB,IAAI,SAAS,CAAC,UAAU,CAAC,UAAU,CAAC,IAAI,SAAS,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;YACrE,OAAO,IAAI,CAAC,YAAY,CAAC,SAAS,CAAC,CAAC;QACxC,CAAC;QAED,MAAM,IAAI,KAAK,CACX,4BAA4B,SAAS,MAAM;YAC3C,yFAAyF,CAC5F,CAAC;IACN,CAAC;IAED;;OAEG;IACK,MAAM,CAAC,iBAAiB,CAAC,SAAiB;QAC9C,OAAO,2CAA2C,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IACvE,CAAC;IAED;;OAEG;IACK,MAAM,CAAC,oBAAoB,CAAC,SAAiB;QACjD,MAAM,KAAK,GAAG,SAAS,CAAC,KAAK,CAAC,mDAAmD,CAAC,CAAC;QACnF,IAAI,CAAC,KAAK,EAAE,CAAC;YACT,MAAM,IAAI,KAAK,CACX,qCAAqC,SAAS,MAAM;gBACpD,wDAAwD,CAC3D,CAAC;QACN,CAAC;QAED,MAAM,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,OAAO,CAAC,GAAG,KAAK,CAAC;QACvC,MAAM,eAAe,GAAG,OAAO,IAAI,MAAM,CAAC;QAE1C,OAAO;YACH,QAAQ,EAAE,SAAS;YACnB,QAAQ,EAAE,QAAQ;YAClB,KAAK;YACL,IAAI;YACJ,OAAO,EAAE,eAAe;YACxB,OAAO,EAAE,sBAAsB,KAAK,IAAI,IAAI,EAAE;YAC9C,UAAU,EAAE,aAAa,EAAE,4CAA4C;SAC1E,CAAC;IACN,CAAC;IAED;;;;;;;OAOG;IACK,MAAM,CAAC,YAAY,CAAC,SAAiB;QACzC,SAAS;QACT,MAAM,OAAO,GAAG,SAAS,CAAC,KAAK,CAC3B,yDAAyD,CAC5D,CAAC;QACF,IAAI,OAAO,EAAE,CAAC;YACV,MAAM,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,OAAO,CAAC,GAAG,OAAO,CAAC;YACzC,OAAO;gBACH,QAAQ,EAAE,SAAS;gBACnB,QAAQ,EAAE,QAAQ;gBAClB,KAAK;gBACL,IAAI;gBACJ,OAAO,EAAE,OAAO,IAAI,MAAM;gBAC1B,OAAO,EAAE,sBAAsB,KAAK,IAAI,IAAI,EAAE;gBAC9C,UAAU,EAAE,aAAa;aAC5B,CAAC;QACN,CAAC;QAED,SAAS;QACT,MAAM,OAAO,GAAG,SAAS,CAAC,KAAK,CAC3B,yDAAyD,CAC5D,CAAC;QACF,IAAI,OAAO,EAAE,CAAC;YACV,MAAM,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,OAAO,CAAC,GAAG,OAAO,CAAC;YACzC,OAAO;gBACH,QAAQ,EAAE,SAAS;gBACnB,QAAQ,EAAE,QAAQ;gBAClB,KAAK;gBACL,IAAI;gBACJ,OAAO,EAAE,OAAO,IAAI,MAAM;gBAC1B,OAAO,EAAE,sBAAsB,KAAK,IAAI,IAAI,EAAE;gBAC9C,UAAU,EAAE,aAAa;aAC5B,CAAC;QACN,CAAC;QAED,YAAY;QACZ,MAAM,OAAO,GAAG,SAAS,CAAC,KAAK,CAC3B,4DAA4D,CAC/D,CAAC;QACF,IAAI,OAAO,EAAE,CAAC;YACV,MAAM,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,OAAO,CAAC,GAAG,OAAO,CAAC;YACzC,OAAO;gBACH,QAAQ,EAAE,SAAS;gBACnB,QAAQ,EAAE,WAAW;gBACrB,KAAK;gBACL,IAAI;gBACJ,OAAO,EAAE,OAAO,IAAI,MAAM;gBAC1B,OAAO,EAAE,yBAAyB,KAAK,IAAI,IAAI,EAAE;gBACjD,UAAU,EAAE,aAAa;aAC5B,CAAC;QACN,CAAC;QAED,kBAAkB;QAClB,MAAM,YAAY,GAAG,SAAS,CAAC,KAAK,CAChC,6DAA6D,CAChE,CAAC;QACF,IAAI,YAAY,EAAE,CAAC;YACf,MAAM,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,OAAO,CAAC,GAAG,YAAY,CAAC;YACpD,OAAO;gBACH,QAAQ,EAAE,SAAS;gBACnB,QAAQ,EAAE,SAAS;gBACnB,KAAK;gBACL,IAAI;gBACJ,OAAO,EAAE,OAAO,IAAI,MAAM;gBAC1B,OAAO,EAAE,WAAW,IAAI,IAAI,KAAK,IAAI,IAAI,EAAE;gBAC3C,UAAU,EAAE,aAAa;aAC5B,CAAC;QACN,CAAC;QAED,MAAM,IAAI,KAAK,CACX,gCAAgC,SAAS,MAAM;YAC/C,sBAAsB;YACtB,qCAAqC;YACrC,0BAA0B;YAC1B,qCAAqC;YACrC,mCAAmC,CACtC,CAAC;IACN,CAAC;CACJ;AAED;;;;;;;;;GASG;AACH,MAAM,OAAO,cAAc;IAIvB;;;;;;OAMG;IACH,YAAY,QAAgB;QACxB,IAAI,CAAC,QAAQ,GAAG,QAAQ,CAAC;IAC7B,CAAC;IAED;;;;;;;;OAQG;IACH,WAAW,CAAC,QAA8B;QACtC,IAAI,CAAC,QAAQ,GAAG,QAAQ,CAAC;IAC7B,CAAC;IAED;;;;;;;;;;;;;;OAcG;IACH,KAAK,CAAC,OAAO,CAAC,SAAiB;QAC3B,MAAM,OAAO,GAAG,YAAY,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;QAE9C,uEAAuE;QACvE,IAAI,UAAkB,CAAC;QACvB,MAAM,UAAU,GAAG,GAAG,OAAO,CAAC,KAAK,IAAI,OAAO,CAAC,IAAI,EAAE,CAAC;QAEtD,IAAI,IAAI,CAAC,QAAQ,EAAE,YAAY,CAAC,UAAU,CAAC,EAAE,CAAC;YAC1C,8CAA8C;YAC9C,UAAU,GAAG,IAAI,CAAC,QAAQ,CAAC,YAAY,CAAC,UAAU,CAAC,CAAC,MAAM,CAAC;QAC/D,CAAC;aAAM,CAAC;YACJ,mDAAmD;YACnD,UAAU,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,OAAO,CAAC,CAAC;QACnD,CAAC;QAED,cAAc;QACd,MAAM,UAAU,GAAG,IAAI,CAAC,YAAY,CAAC,OAAO,EAAE,UAAU,CAAC,CAAC;QAE1D,IAAI,CAAC,CAAC,MAAM,IAAI,CAAC,aAAa,CAAC,UAAU,CAAC,CAAC,EAAE,CAAC;YAC1C,sBAAsB;YACtB,MAAM,IAAI,CAAC,YAAY,CAAC,OAAO,EAAE,UAAU,EAAE,UAAU,CAAC,CAAC;QAC7D,CAAC;QAED,2CAA2C;QAC3C,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,UAAU,CAAC,CAAC;QACxD,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,UAAU,CAAC,CAAC;QAEpD,4BAA4B;QAC5B,IAAI,CAAC,CAAC,MAAM,IAAI,CAAC,aAAa,CAAC,SAAS,CAAC,CAAC,EAAE,CAAC;YACzC,MAAM,IAAI,KAAK,CACX,gBAAgB,UAAU,2BAA2B,OAAO,CAAC,KAAK,IAAI,OAAO,CAAC,IAAI,IAAI,OAAO,CAAC,OAAO,MAAM;gBAC3G,0EAA0E,CAC7E,CAAC;QACN,CAAC;QAED,OAAO,SAAS,CAAC;IACrB,CAAC;IAED;;;OAGG;IACK,KAAK,CAAC,aAAa,CAAC,QAAgB;QACxC,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,YAAY,CAAC,CAAC;QAEnD,IAAI,CAAC;YACD,MAAM,WAAW,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;YACzD,MAAM,QAAQ,GAAG,IAAI,CAAC,SAAS,CAAC,WAAW,CAAC,CAAC;YAC7C,OAAO,QAAQ,CAAC,KAAK,IAAI,aAAa,CAAC;QAC3C,CAAC;QAAC,MAAM,CAAC;YACL,4CAA4C;YAC5C,OAAO,aAAa,CAAC;QACzB,CAAC;IACL,CAAC;IAED;;;;;;OAMG;IACK,SAAS,CAAC,OAAe;QAC7B,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAMhC,CAAC;QAEF,OAAO;YACH,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,KAAK;YAC1B,IAAI,EAAE,MAAM,CAAC,KAAK,EAAE,IAAI;YACxB,OAAO,EAAE,MAAM,CAAC,KAAK,EAAE,OAAO;SACjC,CAAC;IACN,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,aAAa,CAAC,OAAsB;QACtC,IAAI,CAAC;YACD,kCAAkC;YAClC,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,SAAS,CAC9B,iBAAiB,OAAO,CAAC,OAAO,IAAI,OAAO,CAAC,OAAO,EAAE,CACxD,CAAC;YAEF,IAAI,MAAM,CAAC,IAAI,EAAE,EAAE,CAAC;gBAChB,MAAM,UAAU,GAAG,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;gBACzC,OAAO,UAAU,CAAC;YACtB,CAAC;YAED,kDAAkD;YAClD,IAAI,mBAAmB,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;gBAC5C,OAAO,OAAO,CAAC,OAAO,CAAC;YAC3B,CAAC;YAED,MAAM,IAAI,KAAK,CACX,8BAA8B,OAAO,CAAC,OAAO,SAAS,OAAO,CAAC,OAAO,KAAK;gBAC1E,iFAAiF,CACpF,CAAC;QACN,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACb,MAAM,IAAI,KAAK,CACX,kCAAkC,OAAO,CAAC,OAAO,SAAS,OAAO,CAAC,OAAO,KAAK;gBAC9E,UAAU,KAAK,IAAI;gBACnB,4DAA4D,CAC/D,CAAC;QACN,CAAC;IACL,CAAC;IAED;;;;;;;OAOG;IACH,YAAY,CAAC,OAAsB,EAAE,UAAkB;QACnD,OAAO,IAAI,CAAC,IAAI,CACZ,IAAI,CAAC,QAAQ,EACb,OAAO,CAAC,KAAK,EACb,OAAO,CAAC,IAAI,EACZ,UAAU,CACb,CAAC;IACN,CAAC;IAED;;OAEG;IACK,KAAK,CAAC,aAAa,CAAC,QAAgB;QACxC,IAAI,CAAC;YACD,MAAM,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;YAC1B,OAAO,IAAI,CAAC;QAChB,CAAC;QAAC,MAAM,CAAC;YACL,OAAO,KAAK,CAAC;QACjB,CAAC;IACL,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,YAAY,CACd,OAAsB,EACtB,UAAkB,EAClB,SAAiB;QAEjB,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;QAC1C,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;QAC1C,MAAM,EAAE,CAAC,KAAK,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAE/C,IAAI,CAAC;YACD,MAAM,SAAS,CACX,aAAa,OAAO,CAAC,OAAO,SAAS,SAAS,iBAAiB,CAClE,CAAC;YAEF,MAAM,SAAS,CACX,WAAW,SAAS,4BAA4B,UAAU,EAAE,CAC/D,CAAC;YAEF,MAAM,SAAS,CACX,WAAW,SAAS,+BAA+B,UAAU,EAAE,CAClE,CAAC;YAEF,MAAM,EAAE,CAAC,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,MAAM,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QAChF,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACb,MAAM,EAAE,CAAC,EAAE,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;YACzD,MAAM,OAAO,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YACvE,MAAM,IAAI,KAAK,CACX,+BAA+B,OAAO,CAAC,KAAK,IAAI,OAAO,CAAC,IAAI,IAAI,OAAO,CAAC,OAAO,MAAM;gBACrF,UAAU,OAAO,IAAI;gBACrB,+EAA+E,CAClF,CAAC;QACN,CAAC;IACL,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,UAAU;QACZ,MAAM,EAAE,CAAC,EAAE,CAAC,IAAI,CAAC,QAAQ,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IACjE,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,aAAa;QAKf,IAAI,SAAS,GAAG,CAAC,CAAC;QAClB,IAAI,SAAS,GAAG,CAAC,CAAC;QAElB,IAAI,CAAC;YACD,MAAM,MAAM,GAAG,MAAM,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;YAC/C,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;gBACzB,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;gBAClD,MAAM,SAAS,GAAG,MAAM,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;gBAC3C,IAAI,CAAC,SAAS,CAAC,WAAW,EAAE;oBAAE,SAAS;gBAEvC,MAAM,KAAK,GAAG,MAAM,EAAE,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;gBAC1C,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;oBACvB,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;oBAC5C,MAAM,QAAQ,GAAG,MAAM,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;oBACzC,IAAI,CAAC,QAAQ,CAAC,WAAW,EAAE;wBAAE,SAAS;oBAEtC,MAAM,QAAQ,GAAG,MAAM,EAAE,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;oBAC5C,SAAS,IAAI,QAAQ,CAAC,MAAM,CAAC;oBAE7B,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;wBAC7B,MAAM,WAAW,GAAG,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;wBACjD,SAAS,IAAI,MAAM,IAAI,CAAC,gBAAgB,CAAC,WAAW,CAAC,CAAC;oBAC1D,CAAC;gBACL,CAAC;YACL,CAAC;QACL,CAAC;QAAC,MAAM,CAAC;YACL,oCAAoC;QACxC,CAAC;QAED,OAAO;YACH,SAAS;YACT,SAAS;YACT,QAAQ,EAAE,IAAI,CAAC,QAAQ;SAC1B,CAAC;IACN,CAAC;IAED;;OAEG;IACK,KAAK,CAAC,gBAAgB,CAAC,OAAe;QAC1C,IAAI,IAAI,GAAG,CAAC,CAAC;QACb,MAAM,OAAO,GAAG,MAAM,EAAE,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC;QAEnE,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;YAC1B,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;YACjD,IAAI,KAAK,CAAC,WAAW,EAAE,EAAE,CAAC;gBACtB,IAAI,IAAI,MAAM,IAAI,CAAC,gBAAgB,CAAC,SAAS,CAAC,CAAC;YACnD,CAAC;iBAAM,CAAC;gBACJ,MAAM,KAAK,GAAG,MAAM,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;gBACvC,IAAI,IAAI,KAAK,CAAC,IAAI,CAAC;YACvB,CAAC;QACL,CAAC;QAED,OAAO,IAAI,CAAC;IAChB,CAAC;CACJ"}

package/out/services/governance-validator.d.ts

@@ -0,0 +1,56 @@
+/**
+ * Governance and Compliance Validation Service (CLI-only)
+ *
+ * Enforces organizational policies and best practices:
+ * - Allowed/blocked dependency sources
+ * - Version policy enforcement (no pre-release in production)
+ * - Team ownership validation
+ * - License compliance
+ * - Audit trail generation
+ *
+ * Governance policies are defined in the `governance` section of model.yaml:
+ *
+ * ```yaml
+ * governance:
+ *   allowedSources:
+ *     - github.com/acme
+ *   requireStableVersions: true
+ *   requireTeamOwnership: true
+ * ```
+ */
+import type { LockFile, GovernancePolicy, GovernanceMetadata, GovernanceViolation } from './types.js';
+/**
+ * Validates dependencies against organizational governance policies.
+ */
+export declare class GovernanceValidator {
+    private readonly policy;
+    constructor(policy: GovernancePolicy);
+    /**
+     * Validates a lock file against governance policies.
+     */
+    validate(lockFile: LockFile, workspaceRoot: string): Promise<GovernanceViolation[]>;
+    /**
+     * Checks if package source is allowed by policy.
+     */
+    private validateAllowedSources;
+    /**
+     * Checks if package is explicitly blocked by policy.
+     */
+    private validateBlockedPackages;
+    /**
+     * Checks if package version meets stability requirements.
+     */
+    private validateVersionStability;
+    /**
+     * Loads governance metadata from model.yaml.
+     */
+    loadGovernanceMetadata(workspaceRoot: string): Promise<GovernanceMetadata>;
+    /**
+     * Generates an audit report for compliance tracking.
+     */
+    generateAuditReport(lockFile: LockFile, workspaceRoot: string): Promise<string>;
+}
+/**
+ * Loads governance policy from model.yaml governance section.
+ */
+export declare function loadGovernancePolicy(workspaceRoot: string): Promise<GovernancePolicy>;

package/out/services/governance-validator.js

@@ -0,0 +1,171 @@
+/**
+ * Governance and Compliance Validation Service (CLI-only)
+ *
+ * Enforces organizational policies and best practices:
+ * - Allowed/blocked dependency sources
+ * - Version policy enforcement (no pre-release in production)
+ * - Team ownership validation
+ * - License compliance
+ * - Audit trail generation
+ *
+ * Governance policies are defined in the `governance` section of model.yaml:
+ *
+ * ```yaml
+ * governance:
+ *   allowedSources:
+ *     - github.com/acme
+ *   requireStableVersions: true
+ *   requireTeamOwnership: true
+ * ```
+ */
+import path from 'node:path';
+import fs from 'node:fs/promises';
+import YAML from 'yaml';
+import { isPreRelease } from './semver.js';
+/**
+ * Validates dependencies against organizational governance policies.
+ */
+export class GovernanceValidator {
+    constructor(policy) {
+        this.policy = policy;
+    }
+    /**
+     * Validates a lock file against governance policies.
+     */
+    async validate(lockFile, workspaceRoot) {
+        const violations = [];
+        // Validate each dependency
+        for (const [packageKey, locked] of Object.entries(lockFile.dependencies)) {
+            violations.push(...this.validateAllowedSources(packageKey, locked), ...this.validateBlockedPackages(packageKey), ...this.validateVersionStability(packageKey, locked));
+        }
+        // Validate workspace metadata
+        if (this.policy.requireTeamOwnership) {
+            const metadata = await this.loadGovernanceMetadata(workspaceRoot);
+            if (!metadata.team || !metadata.contact) {
+                violations.push({
+                    type: 'missing-metadata',
+                    packageKey: 'workspace',
+                    message: 'Missing required team ownership metadata in model.yaml',
+                    severity: 'warning',
+                });
+            }
+        }
+        return violations;
+    }
+    /**
+     * Checks if package source is allowed by policy.
+     */
+    validateAllowedSources(packageKey, locked) {
+        if (!this.policy.allowedSources || this.policy.allowedSources.length === 0) {
+            return [];
+        }
+        const isAllowed = this.policy.allowedSources.some(pattern => locked.resolved.includes(pattern) || packageKey.startsWith(pattern));
+        if (!isAllowed) {
+            return [{
+                    type: 'blocked-source',
+                    packageKey,
+                    message: `Package from unauthorized source: ${locked.resolved}`,
+                    severity: 'error',
+                }];
+        }
+        return [];
+    }
+    /**
+     * Checks if package is explicitly blocked by policy.
+     */
+    validateBlockedPackages(packageKey) {
+        if (!this.policy.blockedPackages) {
+            return [];
+        }
+        const isBlocked = this.policy.blockedPackages.some(pattern => packageKey.includes(pattern));
+        if (isBlocked) {
+            return [{
+                    type: 'blocked-source',
+                    packageKey,
+                    message: `Package is blocked by governance policy`,
+                    severity: 'error',
+                }];
+        }
+        return [];
+    }
+    /**
+     * Checks if package version meets stability requirements.
+     */
+    validateVersionStability(packageKey, locked) {
+        if (!this.policy.requireStableVersions) {
+            return [];
+        }
+        if (isPreRelease(locked.ref)) {
+            return [{
+                    type: 'unstable-version',
+                    packageKey,
+                    message: `Pre-release ref not allowed: ${locked.ref}`,
+                    severity: 'error',
+                }];
+        }
+        return [];
+    }
+    /**
+     * Loads governance metadata from model.yaml.
+     */
+    async loadGovernanceMetadata(workspaceRoot) {
+        const manifestPath = path.join(workspaceRoot, 'model.yaml');
+        try {
+            const content = await fs.readFile(manifestPath, 'utf-8');
+            const manifest = YAML.parse(content);
+            return manifest.metadata ?? {};
+        }
+        catch {
+            return {};
+        }
+    }
+    /**
+     * Generates an audit report for compliance tracking.
+     */
+    async generateAuditReport(lockFile, workspaceRoot) {
+        const metadata = await this.loadGovernanceMetadata(workspaceRoot);
+        const violations = await this.validate(lockFile, workspaceRoot);
+        // Build header section
+        const headerLines = [
+            '=== Dependency Audit Report ===',
+            '',
+            `Workspace: ${workspaceRoot}`,
+            `Team: ${metadata.team ?? 'N/A'}`,
+            `Contact: ${metadata.contact ?? 'N/A'}`,
+            `Domain: ${metadata.domain ?? 'N/A'}`,
+            '',
+            'Dependencies:',
+        ];
+        // Build dependencies section
+        const depLines = [];
+        for (const [packageKey, locked] of Object.entries(lockFile.dependencies)) {
+            depLines.push(`  - ${packageKey}@${locked.ref}`, `    Source: ${locked.resolved}`, `    Commit: ${locked.commit}`);
+        }
+        // Build violations section
+        const violationLines = violations.length > 0
+            ? [
+                '',
+                'Violations:',
+                ...violations.map(v => `  [${v.severity.toUpperCase()}] ${v.packageKey}: ${v.message}`)
+            ]
+            : ['', '\u2713 No policy violations detected'];
+        return [...headerLines, ...depLines, ...violationLines].join('\n');
+    }
+}
+/**
+ * Loads governance policy from model.yaml governance section.
+ */
+export async function loadGovernancePolicy(workspaceRoot) {
+    const manifestPath = path.join(workspaceRoot, 'model.yaml');
+    try {
+        const content = await fs.readFile(manifestPath, 'utf-8');
+        const manifest = YAML.parse(content);
+        // Return governance section or empty policy if not defined
+        return manifest.governance ?? {};
+    }
+    catch {
+        // No manifest or parse error = permissive defaults
+        return {};
+    }
+}
+//# sourceMappingURL=governance-validator.js.map

package/out/services/governance-validator.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"governance-validator.js","sourceRoot":"","sources":["../../src/services/governance-validator.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAGH,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,MAAM,kBAAkB,CAAC;AAClC,OAAO,IAAI,MAAM,MAAM,CAAC;AACxB,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAS3C;;GAEG;AACH,MAAM,OAAO,mBAAmB;IAC5B,YAA6B,MAAwB;QAAxB,WAAM,GAAN,MAAM,CAAkB;IAAG,CAAC;IAEzD;;OAEG;IACH,KAAK,CAAC,QAAQ,CAAC,QAAkB,EAAE,aAAqB;QACpD,MAAM,UAAU,GAA0B,EAAE,CAAC;QAE7C,2BAA2B;QAC3B,KAAK,MAAM,CAAC,UAAU,EAAE,MAAM,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAC,EAAE,CAAC;YACvE,UAAU,CAAC,IAAI,CACX,GAAG,IAAI,CAAC,sBAAsB,CAAC,UAAU,EAAE,MAAM,CAAC,EAClD,GAAG,IAAI,CAAC,uBAAuB,CAAC,UAAU,CAAC,EAC3C,GAAG,IAAI,CAAC,wBAAwB,CAAC,UAAU,EAAE,MAAM,CAAC,CACvD,CAAC;QACN,CAAC;QAED,8BAA8B;QAC9B,IAAI,IAAI,CAAC,MAAM,CAAC,oBAAoB,EAAE,CAAC;YACnC,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,sBAAsB,CAAC,aAAa,CAAC,CAAC;YAClE,IAAI,CAAC,QAAQ,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,OAAO,EAAE,CAAC;gBACtC,UAAU,CAAC,IAAI,CAAC;oBACZ,IAAI,EAAE,kBAAkB;oBACxB,UAAU,EAAE,WAAW;oBACvB,OAAO,EAAE,wDAAwD;oBACjE,QAAQ,EAAE,SAAS;iBACtB,CAAC,CAAC;YACP,CAAC;QACL,CAAC;QAED,OAAO,UAAU,CAAC;IACtB,CAAC;IAED;;OAEG;IACK,sBAAsB,CAC1B,UAAkB,EAClB,MAAwB;QAExB,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,cAAc,IAAI,IAAI,CAAC,MAAM,CAAC,cAAc,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACzE,OAAO,EAAE,CAAC;QACd,CAAC;QAED,MAAM,SAAS,GAAG,IAAI,CAAC,MAAM,CAAC,cAAc,CAAC,IAAI,CAC7C,OAAO,CAAC,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,UAAU,CAAC,UAAU,CAAC,OAAO,CAAC,CACjF,CAAC;QAEF,IAAI,CAAC,SAAS,EAAE,CAAC;YACb,OAAO,CAAC;oBACJ,IAAI,EAAE,gBAAgB;oBACtB,UAAU;oBACV,OAAO,EAAE,qCAAqC,MAAM,CAAC,QAAQ,EAAE;oBAC/D,QAAQ,EAAE,OAAO;iBACpB,CAAC,CAAC;QACP,CAAC;QAED,OAAO,EAAE,CAAC;IACd,CAAC;IAED;;OAEG;IACK,uBAAuB,CAAC,UAAkB;QAC9C,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,eAAe,EAAE,CAAC;YAC/B,OAAO,EAAE,CAAC;QACd,CAAC;QAED,MAAM,SAAS,GAAG,IAAI,CAAC,MAAM,CAAC,eAAe,CAAC,IAAI,CAC9C,OAAO,CAAC,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,OAAO,CAAC,CAC1C,CAAC;QAEF,IAAI,SAAS,EAAE,CAAC;YACZ,OAAO,CAAC;oBACJ,IAAI,EAAE,gBAAgB;oBACtB,UAAU;oBACV,OAAO,EAAE,yCAAyC;oBAClD,QAAQ,EAAE,OAAO;iBACpB,CAAC,CAAC;QACP,CAAC;QAED,OAAO,EAAE,CAAC;IACd,CAAC;IAED;;OAEG;IACK,wBAAwB,CAC5B,UAAkB,EAClB,MAAqC;QAErC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,qBAAqB,EAAE,CAAC;YACrC,OAAO,EAAE,CAAC;QACd,CAAC;QAED,IAAI,YAAY,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC;YAC3B,OAAO,CAAC;oBACJ,IAAI,EAAE,kBAAkB;oBACxB,UAAU;oBACV,OAAO,EAAE,gCAAgC,MAAM,CAAC,GAAG,EAAE;oBACrD,QAAQ,EAAE,OAAO;iBACpB,CAAC,CAAC;QACP,CAAC;QAED,OAAO,EAAE,CAAC;IACd,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,sBAAsB,CAAC,aAAqB;QAC9C,MAAM,YAAY,GAAG,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,YAAY,CAAC,CAAC;QAE5D,IAAI,CAAC;YACD,MAAM,OAAO,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,YAAY,EAAE,OAAO,CAAC,CAAC;YACzD,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAElC,CAAC;YAEF,OAAO,QAAQ,CAAC,QAAQ,IAAI,EAAE,CAAC;QACnC,CAAC;QAAC,MAAM,CAAC;YACL,OAAO,EAAE,CAAC;QACd,CAAC;IACL,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,mBAAmB,CAAC,QAAkB,EAAE,aAAqB;QAC/D,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,sBAAsB,CAAC,aAAa,CAAC,CAAC;QAClE,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,QAAQ,EAAE,aAAa,CAAC,CAAC;QAEhE,uBAAuB;QACvB,MAAM,WAAW,GAAG;YAChB,iCAAiC;YACjC,EAAE;YACF,cAAc,aAAa,EAAE;YAC7B,SAAS,QAAQ,CAAC,IAAI,IAAI,KAAK,EAAE;YACjC,YAAY,QAAQ,CAAC,OAAO,IAAI,KAAK,EAAE;YACvC,WAAW,QAAQ,CAAC,MAAM,IAAI,KAAK,EAAE;YACrC,EAAE;YACF,eAAe;SAClB,CAAC;QAEF,6BAA6B;QAC7B,MAAM,QAAQ,GAAa,EAAE,CAAC;QAC9B,KAAK,MAAM,CAAC,UAAU,EAAE,MAAM,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAC,EAAE,CAAC;YACvE,QAAQ,CAAC,IAAI,CACT,OAAO,UAAU,IAAI,MAAM,CAAC,GAAG,EAAE,EACjC,eAAe,MAAM,CAAC,QAAQ,EAAE,EAChC,eAAe,MAAM,CAAC,MAAM,EAAE,CACjC,CAAC;QACN,CAAC;QAED,2BAA2B;QAC3B,MAAM,cAAc,GAAG,UAAU,CAAC,MAAM,GAAG,CAAC;YACxC,CAAC,CAAC;gBACE,EAAE;gBACF,aAAa;gBACb,GAAG,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAClB,MAAM,CAAC,CAAC,QAAQ,CAAC,WAAW,EAAE,KAAK,CAAC,CAAC,UAAU,KAAK,CAAC,CAAC,OAAO,EAAE,CAClE;aACJ;YACD,CAAC,CAAC,CAAC,EAAE,EAAE,sCAAsC,CAAC,CAAC;QAEnD,OAAO,CAAC,GAAG,WAAW,EAAE,GAAG,QAAQ,EAAE,GAAG,cAAc,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACvE,CAAC;CACJ;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,oBAAoB,CAAC,aAAqB;IAC5D,MAAM,YAAY,GAAG,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,YAAY,CAAC,CAAC;IAE5D,IAAI,CAAC;QACD,MAAM,OAAO,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,YAAY,EAAE,OAAO,CAAC,CAAC;QACzD,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAElC,CAAC;QAEF,2DAA2D;QAC3D,OAAO,QAAQ,CAAC,UAAU,IAAI,EAAE,CAAC;IACrC,CAAC;IAAC,MAAM,CAAC;QACL,mDAAmD;QACnD,OAAO,EAAE,CAAC;IACd,CAAC;AACL,CAAC"}

package/out/services/index.d.ts

@@ -0,0 +1,12 @@
+/**
+ * CLI Services Index
+ *
+ * Exports all CLI-only services for package management.
+ * These services contain network operations and should never be used in LSP.
+ */
+export * from './types.js';
+export * from './semver.js';
+export * from './git-url-resolver.js';
+export * from './dependency-resolver.js';
+export * from './dependency-analyzer.js';
+export * from './governance-validator.js';