@geoql/doctor-core 1.5.0 → 1.6.0

package/dist/index.d.ts

@@ -66,7 +66,8 @@ declare function scoreDiagnostics(diagnostics: Diagnostic[], config?: ScoreConfi
 //#endregion
 //#region src/types/project-info.d.ts
 type Framework = 'vue' | 'nuxt' | 'unknown';
-type Capability = string;
+declare const CAPABILITIES: readonly ["vue:3", "vue:3.4", "vue:3.5", "vue:vapor", "nuxt:4", "nuxt:4.4", "nuxt4", "nuxt-config", "app-dir", "server-dir", "pages-dir", "wrangler", "auto-imports:vue", "components:auto", "pinia", "vue-router", "typescript", "typescript:6", "monorepo:pnpm", "monorepo:yarn", "monorepo:npm", "cf-pages:enabled", "nitro:node-server"];
+type Capability = (typeof CAPABILITIES)[number];
 type MonorepoKind = 'pnpm' | 'yarn' | 'npm' | 'turbo' | null;
 interface ProjectInfo {
   readonly framework: Framework;
@@ -464,10 +465,12 @@ interface DirectiveSet {
 declare function parseDirectives(text: string): DirectiveSet;
 //#endregion
 //#region src/git-scope.d.ts
-type GitScopeMode = 'diff' | 'staged';
+type GitScopeMode = 'diff' | 'staged' | 'changed-from';
 interface GitScopeOptions {
   rootDir: string;
   mode: GitScopeMode;
+  ref?: string;
+  includeUntracked?: boolean;
 }
 declare function listChangedFiles(options: GitScopeOptions): Promise<string[]>;
 //#endregion

package/dist/index.js

@@ -1582,7 +1582,8 @@ const VUE_DEFAULT_RULES = {
 	"vue-doctor/security/no-inner-html": "error",
 	"vue-doctor/security/no-eval-like": "error",
 	"vue-doctor/security/no-auth-token-in-web-storage": "warn",
-	"vue-doctor/security/no-secrets-in-source": "warn"
+	"vue-doctor/security/no-secrets-in-source": "warn",
+	"vue-doctor/security/markdown-it-unsanitized-html": "warn"
 };
 const NUXT_PLUGIN_RULES = {
 	"nuxt-doctor/ai-slop/no-process-client-server": "error",
@@ -1644,7 +1645,8 @@ const VUE_OXLINT_RULE_IDS = /* @__PURE__ */ new Set([
 	"vue-doctor/security/no-inner-html",
 	"vue-doctor/security/no-eval-like",
 	"vue-doctor/security/no-auth-token-in-web-storage",
-	"vue-doctor/security/no-secrets-in-source"
+	"vue-doctor/security/no-secrets-in-source",
+	"vue-doctor/security/markdown-it-unsanitized-html"
 ]);
 const NUXT_OXLINT_RULE_IDS = new Set(Object.keys(NUXT_PLUGIN_RULES));
 function oxlintRuleAllowlist(framework) {
@@ -2614,6 +2616,13 @@ const RULE_REGISTRY = [
 		source: "doctor",
 		recommended: true
 	},
+	{
+		id: "vue-doctor/security/markdown-it-unsanitized-html",
+		severity: "warn",
+		category: "security",
+		source: "doctor",
+		recommended: true
+	},
 	{
 		id: "vue-doctor/security/no-target-blank-without-rel",
 		severity: "warn",
@@ -4958,34 +4967,68 @@ const SOURCE_EXTENSIONS = [
 function isSourceFile(path) {
 	return SOURCE_EXTENSIONS.some((ext) => path.endsWith(ext));
 }
+var GitRefError = class extends Error {
+	ref;
+	constructor(ref) {
+		super(`Cannot resolve git ref "${ref}" for --changed-files-from`);
+		this.ref = ref;
+		this.name = "GitRefError";
+	}
+};
 async function gitLines(rootDir, args) {
 	const { stdout } = await execFileAsync("git", args, { cwd: rootDir });
 	return stdout.split("\n").map((line) => line.trim()).filter((line) => line.length > 0);
 }
-async function listChangedFiles(options) {
-	const { rootDir, mode } = options;
-	let relPaths;
-	if (mode === "staged") relPaths = await gitLines(rootDir, [
-		"diff",
-		"--name-only",
-		"--cached",
-		"--relative",
-		"--diff-filter=ACMR"
+async function untrackedLines(rootDir) {
+	return gitLines(rootDir, [
+		"ls-files",
+		"--others",
+		"--exclude-standard"
 	]);
-	else {
-		const tracked = await gitLines(rootDir, [
+}
+async function resolveRef(rootDir, ref) {
+	try {
+		await execFileAsync("git", [
+			"rev-parse",
+			"--verify",
+			`${ref}^{commit}`
+		], { cwd: rootDir });
+	} catch {
+		throw new GitRefError(ref);
+	}
+}
+async function listChangedFiles(options) {
+	const { rootDir, mode, ref, includeUntracked } = options;
+	const relPaths = [];
+	if (mode === "staged") {
+		relPaths.push(...await gitLines(rootDir, [
+			"diff",
+			"--name-only",
+			"--cached",
+			"--relative",
+			"--diff-filter=ACMR"
+		]));
+		if (includeUntracked) relPaths.push(...await untrackedLines(rootDir));
+	} else if (mode === "changed-from") {
+		const base = ref ?? "HEAD";
+		await resolveRef(rootDir, base);
+		relPaths.push(...await gitLines(rootDir, [
+			"diff",
+			"--name-only",
+			base,
+			"--relative",
+			"--diff-filter=ACMR"
+		]));
+		if (includeUntracked) relPaths.push(...await untrackedLines(rootDir));
+	} else {
+		relPaths.push(...await gitLines(rootDir, [
 			"diff",
 			"--name-only",
 			"HEAD",
 			"--relative",
 			"--diff-filter=ACMR"
-		]);
-		const untracked = await gitLines(rootDir, [
-			"ls-files",
-			"--others",
-			"--exclude-standard"
-		]);
-		relPaths = [...tracked, ...untracked];
+		]));
+		relPaths.push(...await untrackedLines(rootDir));
 	}
 	const absolute = relPaths.filter(isSourceFile).map((rel) => resolve(rootDir, rel));
 	return [...new Set(absolute)].sort();