@grexx/grexxlinter 0.2.2770 → 0.2.2992

package/cli.js

@@ -15052,6 +15052,35 @@ import { createRequire } from "node:module";
 import { dirname, join, relative, resolve, sep } from "node:path";
 import { fileURLToPath } from "node:url";
 
+// src/deps.ts
+var DEPS_MANIFEST_PATH = "studio.deps.yaml";
+function defaultDepMount(name) {
+  return `vendor/${name}`;
+}
+var TRAILING_SLASHES = /\/{1,256}$/;
+function depMountsOf(manifest) {
+  const deps = manifest?.dependencies;
+  if (!Array.isArray(deps)) return [];
+  const out = [];
+  for (const entry of deps) {
+    const { name, mount } = entry ?? {};
+    if (typeof name !== "string" || name === "") continue;
+    const raw = typeof mount === "string" && mount !== "" ? mount : defaultDepMount(name);
+    const normalized = raw.replace(TRAILING_SLASHES, "");
+    if (normalized === "") continue;
+    out.push({ name, mount: normalized });
+  }
+  return out;
+}
+function depOfPath(path, mounts) {
+  let best;
+  for (const m of mounts) {
+    if (!path.startsWith(`${m.mount}/`)) continue;
+    if (best === void 0 || m.mount.length > best.mount.length) best = m;
+  }
+  return best?.name;
+}
+
 // src/coverage.ts
 function condKey(c) {
   if (!c) return null;
@@ -15342,6 +15371,14 @@ function layoutRootOf(paths) {
   if (paths.length !== 1) return void 0;
   return statSync(paths[0]).isDirectory() ? paths[0] : void 0;
 }
+function readDepMounts(root) {
+  if (root === void 0) return [];
+  try {
+    return depMountsOf((0, import_yaml.parse)(readFileSync(join(root, DEPS_MANIFEST_PATH), "utf8")));
+  } catch {
+    return [];
+  }
+}
 function repoPathOf(root, file) {
   return root === void 0 ? void 0 : relative(root, file).split(sep).join("/");
 }
@@ -15750,13 +15787,18 @@ function parseErrorResult(file, message, settings) {
     messages: [{ severity: "error", rule: "parse-error", casetype: null, path: "", field: null, message, file }]
   };
 }
+function tagDep(result, repoPath, mounts) {
+  const dep = repoPath === void 0 || mounts === void 0 ? void 0 : depOfPath(repoPath, mounts);
+  if (dep !== void 0) for (const m of result.messages) m.dep = dep;
+  return result;
+}
 function lintOneDoc(doc, file, ctx, settings, caseRefs) {
-  if (doc.errors.length > 0) return parseErrorResult(file, doc.errors[0].message, settings);
+  const repoPath = repoPathOf(ctx.root, file);
+  if (doc.errors.length > 0) return tagDep(parseErrorResult(file, doc.errors[0].message, settings), repoPath, ctx.depMounts);
   const resolved = toJSOrError(doc);
-  if (resolved.error !== void 0) return parseErrorResult(file, resolved.error, settings);
+  if (resolved.error !== void 0) return tagDep(parseErrorResult(file, resolved.error, settings), repoPath, ctx.depMounts);
   const input = { value: resolved.value, file };
   const result = lintDocument({ registry: ctx.registry, coverage: ctx.coverage, settings }, input);
-  const repoPath = repoPathOf(ctx.root, file);
   const extra = [
     ...referenceFindings(input.value, file, caseRefs, settings),
     ...repoPath === void 0 ? [] : layoutFindings(input.value, repoPath, settings).map((m) => ({ ...m, file }))
@@ -15765,7 +15807,7 @@ function lintOneDoc(doc, file, ctx, settings, caseRefs) {
     result.messages.push(...extra);
     if (result.ok && extra.some((m) => meetsThreshold(m.severity, settings.failOn))) result.ok = false;
   }
-  return result;
+  return tagDep(result, repoPath, ctx.depMounts);
 }
 function lintOneFile(file, ctx, settings, caseRefs) {
   const text = readFileSync2(file, "utf8");
@@ -15786,7 +15828,7 @@ function lintFiles(files, ctx, settings) {
 // src/cli.ts
 var PARALLEL_THRESHOLD = 200;
 var MAX_WORKERS = 8;
-var VERSION = "0.2.2770";
+var VERSION = "0.2.2992";
 function isNewer(latest, current) {
   const a = latest.split(".").map(Number);
   const b = current.split(".").map(Number);
@@ -15840,12 +15882,15 @@ var BOOL_FLAGS = /* @__PURE__ */ new Map([
   ["--errors-only", (args) => {
     args.errorsOnly = true;
   }],
+  ["--own-only", (args) => {
+    args.ownOnly = true;
+  }],
   ["--no-update-check", (args) => {
     args.noUpdateCheck = true;
   }]
 ]);
 function parseArgs(argv) {
-  const args = { paths: [], off: [], format: "text", quiet: false, errorsOnly: false, noUpdateCheck: false };
+  const args = { paths: [], off: [], format: "text", quiet: false, errorsOnly: false, ownOnly: false, noUpdateCheck: false };
   for (let i = 0; i < argv.length; i++) {
     const a = argv[i];
     const withValue = VALUE_FLAGS.get(a);
@@ -15902,7 +15947,9 @@ function printResult(r, quiet, errorsOnly) {
   if (quiet && msgs.length === 0) return;
   const rel = r.file ? relative2(process.cwd(), r.file) : "<input>";
   const casetypeTag = r.casetype ? ` (${r.casetype})` : "";
-  const head = `${rel}${casetypeTag}`;
+  const dep = msgs.find((m) => m.dep)?.dep;
+  const depTag = dep ? ` [product: ${dep}]` : "";
+  const head = `${rel}${casetypeTag}${depTag}`;
   if (msgs.length === 0) {
     if (!quiet) console.log(`${paint("ok", COLORS.info)}  ${head}`);
     return;
@@ -15913,8 +15960,18 @@ function printResult(r, quiet, errorsOnly) {
     console.log(`  ${paint(m.severity.padEnd(7), COLORS[m.severity])} ${m.rule.padEnd(16)} ${loc}  ${m.message}`);
   }
 }
+function depFindingCounts(results) {
+  const by = /* @__PURE__ */ new Map();
+  for (const r of results) {
+    for (const m of r.messages) {
+      if (m.dep) by.set(m.dep, (by.get(m.dep) ?? 0) + 1);
+    }
+  }
+  return by;
+}
 function printSummary(results, settings) {
-  const s = summarize(results.filter((r) => !r.skipped));
+  const active = results.filter((r) => !r.skipped);
+  const s = summarize(active);
   const skipped = results.filter((r) => r.skipped).length;
   const skippedNote = skipped ? `, ${skipped} skipped` : "";
   const errorsText = paint(`${s.errors} error(s)`, COLORS.error);
@@ -15923,6 +15980,11 @@ function printSummary(results, settings) {
     `
 ${s.files} file(s)${skippedNote} \u2014 ${errorsText}, ${warningsText}, ${s.infos} info(s) [fail-on: ${settings.failOn}]`
   );
+  const byDep = depFindingCounts(active);
+  if (byDep.size > 0) {
+    const total = [...byDep.values()].reduce((a, b) => a + b, 0);
+    console.log(`${total} of those are in ${byDep.size} installed marketplace product(s) \u2014 run with --own-only to drop them`);
+  }
 }
 function printText(results, settings, quiet, errorsOnly) {
   for (const r of results) printResult(r, quiet, errorsOnly);
@@ -15961,8 +16023,15 @@ function printReport(results, kind, errorsOnly) {
     console.log(`${paint(String(r.count).padStart(cw), COLORS[r.severity])}  ${r.casetype.padEnd(tw)}  ${r.severity.padEnd(8)}  ${r.message}`);
   }
 }
+function withoutDepFindings(results, settings) {
+  return results.map((r) => {
+    const messages = r.messages.filter((m) => !m.dep);
+    if (messages.length === r.messages.length) return r;
+    return { ...r, messages, ok: !messages.some((m) => meetsThreshold(m.severity, settings.failOn)) };
+  });
+}
 var WORKER_FILE = fileURLToPath2(import.meta.url);
-async function runParallel(files, settings, schemasDir, root) {
+async function runParallel(files, settings, schemasDir, root, depMounts) {
   const n = Math.min(MAX_WORKERS, availableParallelism(), files.length);
   const shards = Array.from({ length: n }, () => []);
   files.forEach((f, i) => shards[i % n].push(f));
@@ -15971,7 +16040,7 @@ async function runParallel(files, settings, schemasDir, root) {
     const parts = await Promise.all(
       shards.map(
         (shard) => new Promise((resolve2, reject) => {
-          const w = new Worker(WORKER_FILE, { workerData: { shard, settings, schemasDir, root } });
+          const w = new Worker(WORKER_FILE, { workerData: { shard, settings, schemasDir, root, depMounts } });
           w.once("message", (m) => {
             void w.terminate();
             resolve2(m);
@@ -15984,13 +16053,13 @@ async function runParallel(files, settings, schemasDir, root) {
   } catch (e) {
     if (process.env.GREXXLINT_DEBUG) console.error("[grexxlint] worker pool failed, inline fallback:", e);
     const ctx = createNodeContext({ schemasDir });
-    return lintFiles(files, { ...ctx, root }, settings);
+    return lintFiles(files, { ...ctx, root, depMounts }, settings);
   }
 }
 function runWorker() {
-  const { shard, settings, schemasDir, root } = workerData;
+  const { shard, settings, schemasDir, root, depMounts } = workerData;
   const ctx = createNodeContext({ schemasDir });
-  parentPort.postMessage(lintFiles(shard, { ...ctx, root }, settings));
+  parentPort.postMessage(lintFiles(shard, { ...ctx, root, depMounts }, settings));
 }
 async function main() {
   const args = parseArgs(process.argv.slice(2));
@@ -16004,14 +16073,16 @@ async function main() {
   const settings = normalizeSettings(partial);
   const files = discover(args.paths, settings.exclude);
   const root = layoutRootOf(args.paths);
+  const depMounts = readDepMounts(root);
   const canParallel = WORKER_FILE.endsWith(".js") && files.length > PARALLEL_THRESHOLD;
   let results;
   if (canParallel) {
-    results = await runParallel(files, settings, args.schemasDir, root);
+    results = await runParallel(files, settings, args.schemasDir, root, depMounts);
   } else {
     const ctx = createNodeContext({ schemasDir: args.schemasDir });
-    results = lintFiles(files, { ...ctx, root }, settings);
+    results = lintFiles(files, { ...ctx, root, depMounts }, settings);
   }
+  if (args.ownOnly) results = withoutDepFindings(results, settings);
   if (args.report) {
     printReport(results, args.report, args.errorsOnly);
   } else if (args.format === "json") {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@grexx/grexxlinter",
-  "version": "0.2.2770",
+  "version": "0.2.2992",
   "description": "Lint Grexx Studio casetype YAML against the studio JSON Schemas.",
   "type": "module",
   "bin": {

package/schemas/directRole.schema.json

@@ -58,6 +58,12 @@
     },
     "securityprofile": {
       "$ref": "common.schema.json#/$defs/caseIdOrFileReference"
+    },
+    "aiAgents": {
+      "items": {
+        "$ref": "common.schema.json#/$defs/caseIdOrFileReference"
+      },
+      "type": "array"
     }
   },
   "required": [
@@ -67,5 +73,5 @@
   ],
   "title": "directRole",
   "type": "object",
-  "$comment": "Conditionals generated by packages/schemas/scripts/extend.mjs from rules/directRole.json."
+  "$comment": "Hand-maintained overlay (deep-merged by scripts/extend.mjs into extended/directRole.schema.json). The direct-role form writes aiAgents, but L2's directRole schema does not declare it yet (platformRole does, identically). Declared here until L2 MR !4395 lands and l2-base/ is re-synced; then this file is redundant and should be deleted. Conditionals generated by packages/schemas/scripts/extend.mjs from rules/directRole.json."
 }

package/schemas/metadata.behavior.json

@@ -121,6 +121,17 @@
   },
   "cookieConsentEnabled": {
     "baseline": "MUST_NOT",
+    "requiredWhen": [
+      {
+        "op": "cmp",
+        "field": "type",
+        "fieldName": "Type metadata",
+        "operator": "==",
+        "value": "cookieconsent",
+        "valueIsField": false,
+        "isEmpty": false
+      }
+    ],
     "enabledWhen": [
       {
         "op": "cmp",
@@ -185,6 +196,17 @@
   },
   "cookieConsentType": {
     "baseline": "MUST_NOT",
+    "requiredWhen": [
+      {
+        "op": "cmp",
+        "field": "type",
+        "fieldName": "Type metadata",
+        "operator": "==",
+        "value": "cookieconsent",
+        "valueIsField": false,
+        "isEmpty": false
+      }
+    ],
     "enabledWhen": [
       {
         "op": "cmp",