@geonosis/lint-parity 2.1.0 → 2.2.0

package/dist/{chunk-D7OGKQ2C.js → chunk-JNTU55OA.js}

@@ -1,6 +1,6 @@
 // src/envelope.ts
 import { mkdirSync, readFileSync, writeFileSync } from "fs";
-import { dirname, join } from "path";
+import { dirname, join, resolve } from "path";
 import { fileURLToPath } from "url";
 var ENVELOPES_DIR = ".geonosis/envelopes";
 var envelopePath = (root, tool) => join(root, ENVELOPES_DIR, `${tool}.json`);
@@ -12,6 +12,14 @@ var UnbalancedEnvelope = class extends Error {
 };
 var isCount = (value) => Number.isSafeInteger(value) && value >= 0;
 var unbalancedMessage = (envelope, next) => `${envelope.tool}: considered ${envelope.considered} but accounts for ${envelope.read + envelope.refused.length + envelope.excused.length} \u2014 ${envelope.read} read + ${envelope.refused.length} refused + ${envelope.excused.length} excused. A run that has lost count of its own inputs cannot say what it measured, so no verdict was rendered and no envelope was written. Next: ${next}`;
+var FORBIDDEN_ROOT = "GEONOSIS_ENVELOPES_FORBIDDEN_ROOT";
+var refuseForbiddenRoot = (root) => {
+  const forbidden = process.env[FORBIDDEN_ROOT];
+  if (forbidden === void 0 || resolve(forbidden) !== resolve(root)) return;
+  throw new UnbalancedEnvelope(
+    `${root} is off limits to envelope writers in this process (${FORBIDDEN_ROOT}) \u2014 a run that writes one into a shared root races every other run reading it, and leaves a file the next one takes for real. Point this at a scratch root of its own: tooling/scratch-dir.ts.`
+  );
+};
 var writeEnvelope = ({
   envelope,
   next,
@@ -35,6 +43,7 @@ var writeEnvelope = ({
   if (envelope.considered !== envelope.read + envelope.refused.length + envelope.excused.length) {
     throw new UnbalancedEnvelope(unbalancedMessage(envelope, next));
   }
+  refuseForbiddenRoot(root);
   const at = envelopePath(root, envelope.tool);
   mkdirSync(dirname(at), { recursive: true });
   writeFileSync(at, `${JSON.stringify(envelope, void 0, 2)}
@@ -94,7 +103,7 @@ import {
   writeFileSync as writeFileSync2
 } from "fs";
 import { tmpdir } from "os";
-import { dirname as dirname2, join as join2, resolve } from "path";
+import { dirname as dirname2, join as join2, resolve as resolve2 } from "path";
 var ANSI = /\[[0-9;]*m/g;
 var SUMMARY_COUNT = /^(\d+) problems?$/m;
 var RULE_IN_LINE = /\[(?:Error|Warning)\/([^\]]+)\]$/;
@@ -103,7 +112,7 @@ var FINDING_PLACE = /^(\S[^\n]*?:\d+:\d+): .*\[(?:Error|Warning)\/([^\]\n]+)\]$/
 var resolveOxlint = (from) => {
   let dir = from;
   for (; ; ) {
-    const bin = resolve(dir, "node_modules/.bin/oxlint");
+    const bin = resolve2(dir, "node_modules/.bin/oxlint");
     if (existsSync(bin)) return bin;
     const parent = dirname2(dir);
     if (parent === dir) return "oxlint";

package/dist/index.js

@@ -16,7 +16,7 @@ import {
   resolveOxlint,
   ruleIdOf,
   rulesNamedBy
-} from "./chunk-D7OGKQ2C.js";
+} from "./chunk-JNTU55OA.js";
 export {
   MANIFEST_FILE,
   ParityError,

package/dist/parity-cli.js

@@ -9,7 +9,7 @@ import {
   parseParityArgs,
   resolveOxlint,
   writeEnvelope
-} from "./chunk-D7OGKQ2C.js";
+} from "./chunk-JNTU55OA.js";
 
 // src/parity-cli.ts
 import { mkdirSync, writeFileSync } from "fs";

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@geonosis/lint-parity",
-  "version": "2.1.0",
+  "version": "2.2.0",
   "types": "./dist/index.d.ts",
   "description": "Findings parity and rule reach over any two oxlint configs — the diff a fork is deleted on.",
   "keywords": [
@@ -44,7 +44,7 @@
     "access": "public"
   },
   "devDependencies": {
-    "@geonosis/ratchet": "2.1.0"
+    "@geonosis/ratchet": "2.2.0"
   },
   "scripts": {
     "build": "tsup",