@hublo/sentinel 1.1.3 → 1.1.5

package/dist/bin/sentinel.js

@@ -16,7 +16,7 @@ import {
   registerAdapters,
   resolve,
   resolveBin
-} from "../chunk-TLNA2U3B.js";
+} from "../chunk-RLVLDC5H.js";
 
 // bin/sentinel.ts
 import { program } from "commander";

package/dist/{chunk-TLNA2U3B.js → chunk-RLVLDC5H.js}

@@ -140,12 +140,106 @@ var PRESET_NAMES = ["react", "nest", "svelte", "node", "tools"];
 
 // src/roles/format/adapters/oxfmt/oxfmt.adapter.ts
 import { spawnSync } from "child_process";
-import { existsSync as existsSync10, readFileSync as readFileSync8 } from "fs";
-import { join as join11 } from "path";
+import { existsSync as existsSync10, readFileSync as readFileSync9 } from "fs";
+import { join as join12 } from "path";
+
+// src/core/config/existing-command.ts
+import { readFileSync as readFileSync3 } from "fs";
+import { join as join3 } from "path";
+
+// src/shared/jsonc.ts
+import { parse, printParseErrorCode } from "jsonc-parser";
+function parseJsonc(text, source = "config") {
+  const errors = [];
+  const value = parse(text, errors, { allowTrailingComma: true });
+  if (errors.length > 0) {
+    const details = errors.map((error) => printParseErrorCode(error.error)).join(", ");
+    throw new Error(`${source}: malformed JSONC (${details}).`);
+  }
+  return value;
+}
+
+// src/core/config/manifest.ts
+import { existsSync as existsSync2, readFileSync as readFileSync2 } from "fs";
+import { basename, join as join2 } from "path";
+function moduleScripts(cwd) {
+  try {
+    const pkg = JSON.parse(readFileSync2(join2(cwd, "package.json"), "utf8"));
+    return pkg.scripts ?? {};
+  } catch {
+    return {};
+  }
+}
+function moduleName(cwd) {
+  try {
+    const pkg = JSON.parse(readFileSync2(join2(cwd, "package.json"), "utf8"));
+    return pkg.name;
+  } catch {
+    return void 0;
+  }
+}
+function isSelfAdoption(cwd) {
+  return moduleName(cwd) === readOwnPackage().name;
+}
+function selfCommand(cwd, flags) {
+  const own = readOwnPackage();
+  if (!isSelfAdoption(cwd) || !own.bin) return void 0;
+  return `node ${own.bin.replace(/^\.\//, "")} ${flags}`;
+}
+function manifestOperation(cwd, scripts) {
+  const own = readOwnPackage();
+  const value = {
+    scripts,
+    devDependencies: { [own.name]: isSelfAdoption(cwd) ? "link:." : own.version }
+  };
+  if (existsSync2(join2(cwd, "package.json"))) {
+    return { kind: "merge-json", path: "package.json", value };
+  }
+  return {
+    kind: "merge-json",
+    path: "package.json",
+    value: { name: readNxProjectName(cwd) ?? basename(cwd), private: true, ...value }
+  };
+}
+
+// src/core/config/existing-command.ts
+function nxTargetCommand(cwd, target) {
+  let project;
+  try {
+    project = parseJsonc(
+      readFileSync3(join3(cwd, "project.json"), "utf8"),
+      "project.json"
+    );
+  } catch {
+    return void 0;
+  }
+  const entry = project.targets?.[target];
+  if (!entry || entry.executor !== "nx:run-commands") return void 0;
+  const { command, commands, cwd: targetCwd } = entry.options ?? {};
+  const ranInModule = typeof targetCwd === "string" && targetCwd.trim() !== "";
+  if (typeof command === "string" && command.trim() !== "") {
+    return { command: command.trim(), ranInModule };
+  }
+  if (Array.isArray(commands)) {
+    const parts = commands.filter((c) => typeof c === "string" && c.trim() !== "");
+    if (parts.length > 0) return { command: parts.map((c) => c.trim()).join(" && "), ranInModule };
+  }
+  return void 0;
+}
+function rootedForScript(command) {
+  return command.replace(/(^|&&\s*)pnpm exec /g, "$1pnpm --workspace-root exec ");
+}
+function existingCommand(cwd, target) {
+  const script = moduleScripts(cwd)[target];
+  if (script !== void 0 && script.trim() !== "") return script;
+  const fromTarget = nxTargetCommand(cwd, target);
+  if (fromTarget === void 0) return void 0;
+  return fromTarget.ranInModule ? fromTarget.command : rootedForScript(fromTarget.command);
+}
 
 // src/core/config/has-source.ts
 import { readdirSync } from "fs";
-import { extname, join as join2 } from "path";
+import { extname, join as join4 } from "path";
 var SKIP_DIRECTORIES = /* @__PURE__ */ new Set([
   "node_modules",
   "dist",
@@ -196,7 +290,7 @@ function hasSourceFiles(cwd, extensions) {
     }
     for (const entry of entries) {
       if (entry.isDirectory()) {
-        if (!SKIP_DIRECTORIES.has(entry.name)) queue.push(join2(dir, entry.name));
+        if (!SKIP_DIRECTORIES.has(entry.name)) queue.push(join4(dir, entry.name));
         continue;
       }
       if (wanted.has(extname(entry.name))) return true;
@@ -205,58 +299,15 @@ function hasSourceFiles(cwd, extensions) {
   return false;
 }
 
-// src/core/config/manifest.ts
-import { existsSync as existsSync2, readFileSync as readFileSync2 } from "fs";
-import { basename, join as join3 } from "path";
-function moduleScripts(cwd) {
-  try {
-    const pkg = JSON.parse(readFileSync2(join3(cwd, "package.json"), "utf8"));
-    return pkg.scripts ?? {};
-  } catch {
-    return {};
-  }
-}
-function moduleName(cwd) {
-  try {
-    const pkg = JSON.parse(readFileSync2(join3(cwd, "package.json"), "utf8"));
-    return pkg.name;
-  } catch {
-    return void 0;
-  }
-}
-function isSelfAdoption(cwd) {
-  return moduleName(cwd) === readOwnPackage().name;
-}
-function selfCommand(cwd, flags) {
-  const own = readOwnPackage();
-  if (!isSelfAdoption(cwd) || !own.bin) return void 0;
-  return `node ${own.bin.replace(/^\.\//, "")} ${flags}`;
-}
-function manifestOperation(cwd, scripts) {
-  const own = readOwnPackage();
-  const value = {
-    scripts,
-    devDependencies: { [own.name]: isSelfAdoption(cwd) ? "link:." : own.version }
-  };
-  if (existsSync2(join3(cwd, "package.json"))) {
-    return { kind: "merge-json", path: "package.json", value };
-  }
-  return {
-    kind: "merge-json",
-    path: "package.json",
-    value: { name: readNxProjectName(cwd) ?? basename(cwd), private: true, ...value }
-  };
-}
-
 // src/core/config/nx-target.ts
 import { existsSync as existsSync3 } from "fs";
-import { join as join4 } from "path";
+import { join as join5 } from "path";
 function nxTargetOperations(options) {
   const { cwd, targets } = options;
   const names = Object.keys(targets);
   if (names.length === 0) return [];
   const operations = [];
-  if (existsSync3(join4(cwd, "project.json"))) {
+  if (existsSync3(join5(cwd, "project.json"))) {
     operations.push({
       kind: "remove-json-keys",
       path: "project.json",
@@ -294,8 +345,8 @@ var WORKSPACE_ROOT_MARKER = "nx.json";
 var DEFAULT_MAX_DIAGNOSTICS = 100;
 
 // src/core/workspace-prep.ts
-import { existsSync as existsSync5, readFileSync as readFileSync3, writeFileSync } from "fs";
-import { dirname as dirname2, join as join5, relative } from "path";
+import { existsSync as existsSync5, readFileSync as readFileSync4, writeFileSync } from "fs";
+import { dirname as dirname2, join as join6, relative } from "path";
 var OVERRIDE_KEY = "i18next>typescript";
 var NATIVE_TS_ALIAS = "@typescript/native";
 var WORKSPACE_YAML = "pnpm-workspace.yaml";
@@ -304,7 +355,7 @@ var LIST_ITEM = /^(\s*)-\s+(.*?)\s*$/;
 function findWorkspaceRoot(startDir) {
   let dir = startDir;
   for (; ; ) {
-    if (existsSync5(join5(dir, WORKSPACE_ROOT_MARKER))) return dir;
+    if (existsSync5(join6(dir, WORKSPACE_ROOT_MARKER))) return dir;
     const parent = dirname2(dir);
     if (parent === dir) return void 0;
     dir = parent;
@@ -317,9 +368,9 @@ function declaredNativeTs(pkg) {
   return version || void 0;
 }
 function ensureI18nextSingleton(root, dryRun) {
-  const pkgPath = join5(root, "package.json");
+  const pkgPath = join6(root, "package.json");
   if (!existsSync5(pkgPath)) return void 0;
-  const pkg = JSON.parse(readFileSync3(pkgPath, "utf8"));
+  const pkg = JSON.parse(readFileSync4(pkgPath, "utf8"));
   const want = declaredNativeTs(pkg);
   if (!want) return void 0;
   const have = pkg.pnpm?.overrides?.[OVERRIDE_KEY];
@@ -332,10 +383,10 @@ function ensureI18nextSingleton(root, dryRun) {
   return `pinned ${OVERRIDE_KEY} to ${want} in package.json (i18next singleton)`;
 }
 function ensureReleaseAgeAllowList(root, dryRun) {
-  const yamlPath = join5(root, WORKSPACE_YAML);
+  const yamlPath = join6(root, WORKSPACE_YAML);
   if (!existsSync5(yamlPath)) return void 0;
   const own = readOwnPackage().name;
-  const lines = readFileSync3(yamlPath, "utf8").split("\n");
+  const lines = readFileSync4(yamlPath, "utf8").split("\n");
   const keyIdx = lines.findIndex((line) => line.replace(/\s+$/, "") === `${RELEASE_AGE_KEY}:`);
   if (keyIdx === -1) return void 0;
   let lastItemIdx = keyIdx;
@@ -370,11 +421,11 @@ var ROOT_PRETTIER_CONFIGS = [
 function ensureFormatterExclusion(root, moduleDir, dryRun) {
   const rel = relative(root, moduleDir).replaceAll("\\", "/");
   if (rel === "" || rel.startsWith("..")) return void 0;
-  const ignorePath = join5(root, PRETTIER_IGNORE);
-  const hasPrettier = existsSync5(ignorePath) || ROOT_PRETTIER_CONFIGS.some((name) => existsSync5(join5(root, name)));
+  const ignorePath = join6(root, PRETTIER_IGNORE);
+  const hasPrettier = existsSync5(ignorePath) || ROOT_PRETTIER_CONFIGS.some((name) => existsSync5(join6(root, name)));
   if (!hasPrettier) return void 0;
   const pattern = `/${rel}/`;
-  const existing = existsSync5(ignorePath) ? readFileSync3(ignorePath, "utf8") : "";
+  const existing = existsSync5(ignorePath) ? readFileSync4(ignorePath, "utf8") : "";
   const lines = existing.split("\n");
   if (lines.some((line) => line.trim().replace(/\/$/, "") === pattern.replace(/\/$/, ""))) {
     return void 0;
@@ -411,12 +462,12 @@ function ensureWorkspacePrep(opts) {
 // src/shared/resolve-bin.ts
 import { existsSync as existsSync6 } from "fs";
 import { createRequire } from "module";
-import { delimiter, dirname as dirname3, join as join6 } from "path";
+import { delimiter, dirname as dirname3, join as join7 } from "path";
 var require2 = createRequire(import.meta.url);
 function resolveBin(fromDir, name) {
   let dir = fromDir;
   for (; ; ) {
-    const candidate = join6(dir, "node_modules", ".bin", name);
+    const candidate = join7(dir, "node_modules", ".bin", name);
     if (existsSync6(candidate)) return candidate;
     const parent = dirname3(dir);
     if (parent === dir) return void 0;
@@ -429,7 +480,7 @@ function binFromOwnInstall(packageName, binName) {
     const bin = require2(manifest).bin;
     const relative3 = typeof bin === "string" ? bin : bin?.[binName];
     if (!relative3) return void 0;
-    const executable = join6(dirname3(manifest), relative3);
+    const executable = join7(dirname3(manifest), relative3);
     return existsSync6(executable) ? executable : void 0;
   } catch {
     return void 0;
@@ -556,8 +607,8 @@ function writesWhenRewritten(name, command) {
 var CHECK_SCRIPT_NAMES = /* @__PURE__ */ new Set(["lint", "format", "check", "test", "typecheck", "verify"]);
 
 // src/roles/format/inherited-ignores.ts
-import { existsSync as existsSync7, readFileSync as readFileSync4 } from "fs";
-import { join as join7 } from "path";
+import { existsSync as existsSync7, readFileSync as readFileSync5 } from "fs";
+import { join as join8 } from "path";
 var ROOT_IGNORE_FILE = ".prettierignore";
 function isPattern(line) {
   const trimmed = line.trim();
@@ -572,11 +623,11 @@ function toModulePattern(pattern) {
 }
 function inheritedIgnorePatterns(workspaceRoot) {
   if (!workspaceRoot) return [];
-  const path = join7(workspaceRoot, ROOT_IGNORE_FILE);
+  const path = join8(workspaceRoot, ROOT_IGNORE_FILE);
   if (!existsSync7(path)) return [];
   let contents;
   try {
-    contents = readFileSync4(path, "utf8");
+    contents = readFileSync5(path, "utf8");
   } catch {
     return [];
   }
@@ -663,25 +714,13 @@ function formatPresetFor(preset) {
 }
 
 // src/roles/format/prettier-config.ts
-import { existsSync as existsSync8, readFileSync as readFileSync6 } from "fs";
-import { join as join9 } from "path";
-
-// src/shared/jsonc.ts
-import { parse, printParseErrorCode } from "jsonc-parser";
-function parseJsonc(text, source = "config") {
-  const errors = [];
-  const value = parse(text, errors, { allowTrailingComma: true });
-  if (errors.length > 0) {
-    const details = errors.map((error) => printParseErrorCode(error.error)).join(", ");
-    throw new Error(`${source}: malformed JSONC (${details}).`);
-  }
-  return value;
-}
+import { existsSync as existsSync8, readFileSync as readFileSync7 } from "fs";
+import { join as join10 } from "path";
 
 // src/roles/format/resolve-oxfmt.ts
-import { readFileSync as readFileSync5 } from "fs";
+import { readFileSync as readFileSync6 } from "fs";
 import { createRequire as createRequire2 } from "module";
-import { dirname as dirname4, join as join8 } from "path";
+import { dirname as dirname4, join as join9 } from "path";
 function resolveOxfmt(cwd) {
   return resolveBin(cwd, "oxfmt") ?? binFromOwnInstall("oxfmt", "oxfmt");
 }
@@ -710,8 +749,8 @@ function configSchema() {
 function readConfigSchema() {
   try {
     const manifest = createRequire2(import.meta.url).resolve("oxfmt/package.json");
-    const schemaPath = join8(dirname4(manifest), "configuration_schema.json");
-    return JSON.parse(readFileSync5(schemaPath, "utf8"));
+    const schemaPath = join9(dirname4(manifest), "configuration_schema.json");
+    return JSON.parse(readFileSync6(schemaPath, "utf8"));
   } catch {
     return void 0;
   }
@@ -742,14 +781,14 @@ function toOxfmtOverrides(value) {
   return { overrides, unresolved };
 }
 function readPrettierSettings(cwd) {
-  const file = PRETTIER_CONFIG_FILES.find((name) => existsSync8(join9(cwd, name)));
+  const file = PRETTIER_CONFIG_FILES.find((name) => existsSync8(join10(cwd, name)));
   if (!file) return { options: {}, unresolved: [] };
   if (/\.(js|cjs|mjs)$/.test(file)) {
     return { options: {}, file, unresolved: [`${file} is JavaScript, so it was not executed`] };
   }
   let parsed;
   try {
-    parsed = parseJsonc(readFileSync6(join9(cwd, file), "utf8"), file);
+    parsed = parseJsonc(readFileSync7(join10(cwd, file), "utf8"), file);
   } catch {
     return { options: {}, file, unresolved: [`${file} could not be parsed`] };
   }
@@ -779,8 +818,8 @@ function readPrettierSettings(cwd) {
 }
 
 // src/roles/format/read-adoption.ts
-import { existsSync as existsSync9, readFileSync as readFileSync7 } from "fs";
-import { join as join10 } from "path";
+import { existsSync as existsSync9, readFileSync as readFileSync8 } from "fs";
+import { join as join11 } from "path";
 var NOT_ADOPTED = (configFile, unreadable = null) => ({
   configFile,
   preset: null,
@@ -796,11 +835,11 @@ function sameValue(a, b) {
   return JSON.stringify(a) === JSON.stringify(b);
 }
 function readFormatAdoption(cwd) {
-  const path = join10(cwd, FORMAT_CONFIG_FILE);
+  const path = join11(cwd, FORMAT_CONFIG_FILE);
   if (!existsSync9(path)) return NOT_ADOPTED(null);
   let parsed;
   try {
-    parsed = parseJsonc(readFileSync7(path, "utf8"), FORMAT_CONFIG_FILE);
+    parsed = parseJsonc(readFileSync8(path, "utf8"), FORMAT_CONFIG_FILE);
   } catch (error) {
     const reason = error instanceof Error ? error.message : String(error);
     return NOT_ADOPTED(FORMAT_CONFIG_FILE, `${FORMAT_CONFIG_FILE} could not be parsed (${reason})`);
@@ -907,7 +946,7 @@ var OxfmtAdapter = class extends BaseAdapter {
       manifestOperation(context.cwd, this.formatScripts(context.cwd))
     ];
     const prettierConfigs = PRETTIER_CONFIG_FILES.filter(
-      (name) => existsSync10(join11(context.cwd, name))
+      (name) => existsSync10(join12(context.cwd, name))
     );
     for (const name of prettierConfigs) operations.push({ kind: "delete", path: name });
     const removableDeps = this.modulePrettierDependencies(context.cwd);
@@ -1143,7 +1182,7 @@ var OxfmtAdapter = class extends BaseAdapter {
   modulePrettierDependencies(cwd) {
     const isPrettierPackage = (name) => name === "prettier" || name.startsWith("prettier-plugin-") || name.startsWith("@prettier/");
     try {
-      const manifest = JSON.parse(readFileSync8(join11(cwd, "package.json"), "utf8"));
+      const manifest = JSON.parse(readFileSync9(join12(cwd, "package.json"), "utf8"));
       return Object.keys(manifest.devDependencies ?? {}).filter(isPrettierPackage).map((name) => ["devDependencies", name]);
     } catch {
       return [];
@@ -1166,7 +1205,9 @@ var OxfmtAdapter = class extends BaseAdapter {
     const ownCommand = selfCommand(cwd, "--run --format");
     const compose = (existing, keepFix) => composeFormatScript(existing, { keepFix, command: ownCommand });
     const rewritten = {
-      [FORMAT_SCRIPT_NAME]: compose(scripts[FORMAT_SCRIPT_NAME], false),
+      // `existingCommand` for the role's own script: the command can live in an
+      // `nx:run-commands` target that adoption deletes, taking anything else it ran with it.
+      [FORMAT_SCRIPT_NAME]: compose(existingCommand(cwd, FORMAT_SCRIPT_NAME), false),
       [`${FORMAT_SCRIPT_NAME}:fix`]: compose(scripts[`${FORMAT_SCRIPT_NAME}:fix`], true)
     };
     for (const [name, command] of Object.entries(scripts)) {
@@ -1223,8 +1264,8 @@ function registerFormat() {
 
 // src/roles/lint/adapters/oxlint/oxlint.adapter.ts
 import { spawnSync as spawnSync2 } from "child_process";
-import { existsSync as existsSync16, readFileSync as readFileSync14, rmSync, writeFileSync as writeFileSync2 } from "fs";
-import { join as join18 } from "path";
+import { existsSync as existsSync16, readFileSync as readFileSync15, rmSync, writeFileSync as writeFileSync2 } from "fs";
+import { join as join19 } from "path";
 
 // src/core/config/deferred-rules.ts
 function deferredRuleNames(rules) {
@@ -3120,8 +3161,8 @@ function errorCountsByConfigRule(stdout) {
 }
 
 // src/core/config/read-adoption.ts
-import { existsSync as existsSync12, readFileSync as readFileSync10 } from "fs";
-import { join as join13 } from "path";
+import { existsSync as existsSync12, readFileSync as readFileSync11 } from "fs";
+import { join as join14 } from "path";
 
 // src/core/config/owned-keys.ts
 function presetOwnedKeys(config, permitted, presetSets) {
@@ -3136,12 +3177,12 @@ function localOnlyKeys(config, permitted, presetSets) {
 }
 
 // src/core/config/resolve-config-target.ts
-import { existsSync as existsSync11, readFileSync as readFileSync9 } from "fs";
-import { join as join12 } from "path";
+import { existsSync as existsSync11, readFileSync as readFileSync10 } from "fs";
+import { join as join13 } from "path";
 function readExtends(absolutePath) {
   let parsed;
   try {
-    parsed = parseJsonc(readFileSync9(absolutePath, "utf8"), absolutePath);
+    parsed = parseJsonc(readFileSync10(absolutePath, "utf8"), absolutePath);
   } catch {
     return [];
   }
@@ -3155,7 +3196,7 @@ function resolveConfigTarget(moduleDir, { candidates, markers, fallback }) {
   let existing;
   let existingExtendsSomething = false;
   for (const candidate of candidates) {
-    const absolutePath = join12(moduleDir, candidate);
+    const absolutePath = join13(moduleDir, candidate);
     if (!existsSync11(absolutePath)) continue;
     const chain = readExtends(absolutePath);
     if (existing === void 0) {
@@ -3189,12 +3230,12 @@ var NOT_ADOPTED2 = (configFile, unreadable = null) => ({
 });
 function readAdoption(cwd, options) {
   const target = resolveConfigTarget(cwd, options);
-  if (target.reason === "none" || !existsSync12(join13(cwd, target.path))) {
+  if (target.reason === "none" || !existsSync12(join14(cwd, target.path))) {
     return NOT_ADOPTED2(target.reason === "none" ? null : target.path);
   }
   let parsed;
   try {
-    parsed = parseJsonc(readFileSync10(join13(cwd, target.path), "utf8"), target.path);
+    parsed = parseJsonc(readFileSync11(join14(cwd, target.path), "utf8"), target.path);
   } catch (error) {
     const reason = error instanceof Error ? error.message : String(error);
     return NOT_ADOPTED2(target.path, `${target.path} could not be parsed (${reason})`);
@@ -3230,7 +3271,7 @@ function readLintAdoption(cwd) {
 // src/roles/lint/resolve-oxlint.ts
 import { existsSync as existsSync13 } from "fs";
 import { createRequire as createRequire3 } from "module";
-import { delimiter as delimiter2, dirname as dirname5, join as join14 } from "path";
+import { delimiter as delimiter2, dirname as dirname5, join as join15 } from "path";
 import { fileURLToPath as fileURLToPath2 } from "url";
 var PACKAGE_OF = {
   oxlint: "oxlint",
@@ -3255,14 +3296,14 @@ function tsgolintShim(cwd) {
   for (const owner of ["oxlint-tsgolint", "oxlint"]) {
     try {
       const packageDir = dirname5(require3.resolve(`${owner}/package.json`));
-      candidates.push(join14(packageDir, "node_modules", ".bin", "tsgolint"));
-      candidates.push(join14(packageDir, "..", ".bin", "tsgolint"));
+      candidates.push(join15(packageDir, "node_modules", ".bin", "tsgolint"));
+      candidates.push(join15(packageDir, "..", ".bin", "tsgolint"));
     } catch {
     }
   }
   try {
     const ownRoot = dirname5(require3.resolve("@hublo/sentinel/package.json"));
-    candidates.push(join14(ownRoot, "node_modules", ".bin", "tsgolint"));
+    candidates.push(join15(ownRoot, "node_modules", ".bin", "tsgolint"));
   } catch {
     candidates.push(resolveBin(dirname5(fileURLToPath2(import.meta.url)), "tsgolint") ?? "");
   }
@@ -3273,12 +3314,12 @@ function oxlintSearchPath(cwd) {
 }
 
 // src/roles/lint/adapters/oxlint/plan.ts
-import { existsSync as existsSync15, readFileSync as readFileSync13 } from "fs";
-import { join as join17 } from "path";
+import { existsSync as existsSync15, readFileSync as readFileSync14 } from "fs";
+import { join as join18 } from "path";
 
 // src/roles/lint/eslint-ignores.ts
-import { existsSync as existsSync14, readFileSync as readFileSync11 } from "fs";
-import { join as join15 } from "path";
+import { existsSync as existsSync14, readFileSync as readFileSync12 } from "fs";
+import { join as join16 } from "path";
 var IGNORE_BLOCKS = [/\bignores\s*:\s*\[([^\]]*)\]/g, /\bglobalIgnores\s*\(\s*\[([^\]]*)\]/g];
 var STRING_LITERAL = /['"`]([^'"`]+)['"`]/g;
 var OPAQUE_SOURCE = /\b(includeIgnoreFile)\s*\([^)]*\)/g;
@@ -3291,11 +3332,11 @@ function readRootEslintIgnores(root) {
   return { patterns: patterns.filter((pattern) => pattern.startsWith("**/")), unresolved };
 }
 function readEslintIgnores(cwd) {
-  const config = ESLINT_CONFIG_FILES.map((name) => join15(cwd, name)).find((path) => existsSync14(path));
+  const config = ESLINT_CONFIG_FILES.map((name) => join16(cwd, name)).find((path) => existsSync14(path));
   if (!config) return { patterns: [], unresolved: [] };
   let source;
   try {
-    source = readFileSync11(config, "utf8");
+    source = readFileSync12(config, "utf8");
   } catch {
     return { patterns: [], unresolved: [] };
   }
@@ -3349,8 +3390,8 @@ function lintPresetFor(preset) {
 }
 
 // src/roles/lint/rename-suppressions.ts
-import { readdirSync as readdirSync2, readFileSync as readFileSync12, statSync } from "fs";
-import { join as join16, relative as relative2 } from "path";
+import { readdirSync as readdirSync2, readFileSync as readFileSync13, statSync } from "fs";
+import { join as join17, relative as relative2 } from "path";
 var SOURCE_EXTENSIONS = [
   ".ts",
   ".tsx",
@@ -3397,7 +3438,7 @@ function* sourceFiles(dir) {
     return;
   }
   for (const entry of entries) {
-    const full = join16(dir, entry);
+    const full = join17(dir, entry);
     let isDirectory;
     try {
       isDirectory = statSync(full).isDirectory();
@@ -3417,7 +3458,7 @@ function findSuppressionRenames(cwd, renames) {
   for (const file of sourceFiles(cwd)) {
     let content;
     try {
-      content = readFileSync12(file, "utf8");
+      content = readFileSync13(file, "utf8");
     } catch {
       continue;
     }
@@ -3535,7 +3576,7 @@ function plan(context) {
       keys: removableDeps
     });
   }
-  const eslintConfigs = ESLINT_CONFIG_FILES.filter((name) => existsSync15(join17(context.cwd, name)));
+  const eslintConfigs = ESLINT_CONFIG_FILES.filter((name) => existsSync15(join18(context.cwd, name)));
   for (const name of eslintConfigs) operations.push({ kind: "delete", path: name });
   operations.push(
     ...nxTargetOperations({
@@ -3611,7 +3652,10 @@ function plan(context) {
 function lintScripts(cwd) {
   const scripts = moduleScripts(cwd);
   const rewritten = {
-    [LINT_SCRIPT_NAME]: composeLintScript(scripts[LINT_SCRIPT_NAME], {
+    // `existingCommand`, not `scripts[...]`: the command can live in an `nx:run-commands`
+    // target instead of a script, and adoption deletes that target. Composing against only
+    // the script threw away whatever else the target ran.
+    [LINT_SCRIPT_NAME]: composeLintScript(existingCommand(cwd, LINT_SCRIPT_NAME), {
       command: selfCommand(cwd, "--run --lint")
     })
   };
@@ -3630,7 +3674,7 @@ function lintScripts(cwd) {
 function committedIgnorePatterns(cwd) {
   try {
     const parsed = parseJsonc(
-      readFileSync13(join17(cwd, LINT_CONFIG_FILE), "utf8"),
+      readFileSync14(join18(cwd, LINT_CONFIG_FILE), "utf8"),
       LINT_CONFIG_FILE
     );
     return Array.isArray(parsed.ignorePatterns) ? parsed.ignorePatterns.filter((entry) => typeof entry === "string") : [];
@@ -3642,7 +3686,7 @@ function moduleEslintDependencies(cwd) {
   const isEslintPackage = (name) => name === "eslint" || name === "@types/eslint" || name === "typescript-eslint" || name.startsWith("@typescript-eslint/") || name.startsWith("eslint-plugin-") || name.startsWith("eslint-config-") || name.startsWith("@eslint/");
   let manifest;
   try {
-    manifest = JSON.parse(readFileSync13(join17(cwd, "package.json"), "utf8"));
+    manifest = JSON.parse(readFileSync14(join18(cwd, "package.json"), "utf8"));
   } catch {
     return [];
   }
@@ -3761,20 +3805,20 @@ var OxlintAdapter = class extends BaseAdapter {
    * build the developer can see, rather than a silent half-adoption they cannot.
    */
   writeModuleBaseline(ctx, oxlint, env) {
-    const configPath = join18(ctx.cwd, LINT_CONFIG_FILE);
-    const baselinePath = join18(ctx.cwd, LINT_BASELINE_FILE);
+    const configPath = join19(ctx.cwd, LINT_CONFIG_FILE);
+    const baselinePath = join19(ctx.cwd, LINT_BASELINE_FILE);
     if (!existsSync16(configPath)) return;
     let config;
     try {
       config = parseJsonc(
-        readFileSync14(configPath, "utf8"),
+        readFileSync15(configPath, "utf8"),
         LINT_CONFIG_FILE
       );
     } catch {
       return;
     }
     const current = Array.isArray(config.extends) ? config.extends : [];
-    const measurePath = join18(ctx.cwd, LINT_MEASURE_FILE);
+    const measurePath = join19(ctx.cwd, LINT_MEASURE_FILE);
     let measured;
     try {
       writeFileSync2(
@@ -3822,7 +3866,7 @@ var OxlintAdapter = class extends BaseAdapter {
     }
   }
   async run(ctx) {
-    if (!existsSync16(join18(ctx.cwd, LINT_CONFIG_FILE))) {
+    if (!existsSync16(join19(ctx.cwd, LINT_CONFIG_FILE))) {
       process.stderr.write(
         `sentinel lint(oxlint): no ${LINT_CONFIG_FILE} in this module; run \`sentinel --init --lint\` to adopt.
 `
@@ -3910,20 +3954,52 @@ var OxlintAdapter = class extends BaseAdapter {
     };
   }
   /** How many rules the extended preset enforces, read from the preset on disk. */
+  /**
+   * How many rules this module actually enforces.
+   *
+   * Counted from the PRESET it extends, not from its own file: the stub is one line by
+   * design, so counting there would always answer zero and read as "this module lints
+   * nothing".
+   *
+   * Two things this got wrong, both worth stating because both produced the same dangerous
+   * output — a module reporting `rules=0` while `conformant=true`, which the migration page
+   * counts as adopted and checking an empty set:
+   *
+   *  - it used `JSON.parse`. The chain is JSONC: the per-module baseline carries a comment
+   *    per held rule explaining why. One comment anywhere in the chain threw, the catch
+   *    returned 0, and host-admin reported 188 rules as 0 the moment it gained a baseline.
+   *  - one unreadable entry zeroed the WHOLE count. An entry that cannot be read is a gap in
+   *    the count, not proof the module enforces nothing, and the difference matters most
+   *    exactly when something is broken.
+   *
+   * Counted as a SET of rule names, so the baseline re-stating a preset rule at `warn` is
+   * the same rule, not a second one.
+   */
   presetRuleCount(cwd) {
     const target = this.unresolvedPreset(cwd);
     if (target) return 0;
-    let total = 0;
+    let stub;
     try {
-      const stub = JSON.parse(readFileSync14(join18(cwd, LINT_CONFIG_FILE), "utf8"));
-      for (const entry of stub.extends ?? []) {
-        const preset = JSON.parse(readFileSync14(join18(cwd, entry), "utf8"));
-        total += Object.keys(preset.rules ?? {}).length;
-      }
+      stub = parseJsonc(
+        readFileSync15(join19(cwd, LINT_CONFIG_FILE), "utf8"),
+        LINT_CONFIG_FILE
+      );
     } catch {
       return 0;
     }
-    return total;
+    const names = /* @__PURE__ */ new Set();
+    for (const entry of stub.extends ?? []) {
+      try {
+        const preset = parseJsonc(
+          readFileSync15(join19(cwd, entry), "utf8"),
+          entry
+        );
+        for (const rule of Object.keys(preset.rules ?? {})) names.add(rule);
+      } catch {
+        continue;
+      }
+    }
+    return names.size;
   }
   /** Lint health for `--report`. Deepened in a later step; today it is the run outcome. */
   async report(ctx) {
@@ -3984,12 +4060,15 @@ var OxlintAdapter = class extends BaseAdapter {
   unresolvedPreset(cwd) {
     let parsed;
     try {
-      parsed = JSON.parse(readFileSync14(join18(cwd, LINT_CONFIG_FILE), "utf8"));
+      parsed = parseJsonc(
+        readFileSync15(join19(cwd, LINT_CONFIG_FILE), "utf8"),
+        LINT_CONFIG_FILE
+      );
     } catch {
       return void 0;
     }
     const targets = Array.isArray(parsed.extends) ? parsed.extends.filter((entry) => typeof entry === "string") : typeof parsed.extends === "string" ? [parsed.extends] : [];
-    return targets.find((target) => !existsSync16(join18(cwd, target)));
+    return targets.find((target) => !existsSync16(join19(cwd, target)));
   }
   /** Announce what is not enforced, so reduced coverage is never silent. */
   announceDisabled(preset) {
@@ -4021,9 +4100,9 @@ function registerLint() {
 
 // src/roles/typescript/adapters/tsc/tsc.adapter.ts
 import { spawnSync as spawnSync3 } from "child_process";
-import { existsSync as existsSync17, readFileSync as readFileSync16 } from "fs";
+import { existsSync as existsSync17, readFileSync as readFileSync17 } from "fs";
 import { createRequire as createRequire4 } from "module";
-import { join as join20 } from "path";
+import { join as join21 } from "path";
 
 // src/roles/typescript/presets/base.json
 var base_default3 = {
@@ -4204,8 +4283,8 @@ function readTsconfigAdoption(cwd) {
 }
 
 // src/roles/typescript/adapters/tsc/plan.ts
-import { readFileSync as readFileSync15 } from "fs";
-import { join as join19 } from "path";
+import { readFileSync as readFileSync16 } from "fs";
+import { join as join20 } from "path";
 
 // src/roles/typescript/typecheck-script.ts
 var SENTINEL_TYPECHECK_COMMAND = "sentinel --run --typescript";
@@ -4230,7 +4309,10 @@ var INSTALL_NOTE = "run `pnpm install` to fetch @hublo/sentinel (added to the mo
 var TYPECHECK_TARGET = { cache: true, inputs: ["default", "{projectRoot}/tsconfig.json"] };
 function typecheckScripts(cwd) {
   return {
-    [TYPECHECK_SCRIPT_NAME]: composeTypecheckScript(moduleScripts(cwd)[TYPECHECK_SCRIPT_NAME])
+    // Reads the nx target too, not only the npm script: five modules in this repo keep a
+    // real prerequisite (the brand-token generator) in an `nx:run-commands` typecheck
+    // target, and adoption used to delete it along with the target.
+    [TYPECHECK_SCRIPT_NAME]: composeTypecheckScript(existingCommand(cwd, TYPECHECK_SCRIPT_NAME))
   };
 }
 function composeExtends(current, preset) {
@@ -4290,7 +4372,7 @@ function planAdoption(context) {
     };
   }
   const existing = parseJsonc(
-    readFileSync15(join19(context.cwd, target.path), "utf8"),
+    readFileSync16(join20(context.cwd, target.path), "utf8"),
     target.path
   );
   const extendsChain = composeExtends(existing.extends, preset);
@@ -4428,7 +4510,7 @@ var TscAdapter = class _TscAdapter extends BaseAdapter {
     let chain;
     try {
       const parsed = parseJsonc(
-        readFileSync16(join20(cwd, target.path), "utf8"),
+        readFileSync17(join21(cwd, target.path), "utf8"),
         target.path
       );
       chain = parsed.extends;
@@ -4441,7 +4523,7 @@ var TscAdapter = class _TscAdapter extends BaseAdapter {
     );
     if (preset === void 0) return void 0;
     try {
-      createRequire4(join20(cwd, "noop.js")).resolve(preset);
+      createRequire4(join21(cwd, "noop.js")).resolve(preset);
       return void 0;
     } catch {
       return preset;
@@ -4537,7 +4619,7 @@ var TscAdapter = class _TscAdapter extends BaseAdapter {
   referencedProjects(cwd, config) {
     try {
       const parsed = parseJsonc(
-        readFileSync16(join20(cwd, config), "utf8"),
+        readFileSync17(join21(cwd, config), "utf8"),
         config
       );
       const referenced = (parsed.references ?? []).map((reference) => reference.path).filter((path) => typeof path === "string" && path.length > 0);
@@ -4553,7 +4635,7 @@ var TscAdapter = class _TscAdapter extends BaseAdapter {
    * check.
    */
   typecheckTarget(cwd) {
-    if (existsSync17(join20(cwd, "tsconfig.json"))) return "tsconfig.json";
+    if (existsSync17(join21(cwd, "tsconfig.json"))) return "tsconfig.json";
     const target = resolveTsconfigTarget(cwd);
     return target.reason === "none" ? null : target.path;
   }
@@ -4756,7 +4838,7 @@ function replaceLines(current, replacements) {
 }
 
 // src/core/apply-plan.ts
-import { existsSync as existsSync18, readFileSync as readFileSync17, renameSync, rmSync as rmSync2, writeFileSync as writeFileSync3 } from "fs";
+import { existsSync as existsSync18, readFileSync as readFileSync18, renameSync, rmSync as rmSync2, writeFileSync as writeFileSync3 } from "fs";
 import { resolve as resolve3, sep } from "path";
 import { applyEdits, findNodeAtLocation, modify, parseTree } from "jsonc-parser";
 
@@ -4775,7 +4857,7 @@ function resolveWithinRoot(cwd, relativePath) {
   return absolutePath;
 }
 function readIfExists(absolutePath) {
-  return existsSync18(absolutePath) ? readFileSync17(absolutePath, "utf8") : void 0;
+  return existsSync18(absolutePath) ? readFileSync18(absolutePath, "utf8") : void 0;
 }
 function* leaves(value, prefix = []) {
   for (const [key, keyValue] of Object.entries(value)) {
@@ -4893,8 +4975,8 @@ function applyPlan(cwd, plan2) {
 }
 
 // src/core/config/preset-evidence.ts
-import { existsSync as existsSync19, readdirSync as readdirSync3, readFileSync as readFileSync18 } from "fs";
-import { join as join21 } from "path";
+import { existsSync as existsSync19, readdirSync as readdirSync3, readFileSync as readFileSync19 } from "fs";
+import { join as join22 } from "path";
 var PATH_SIGNALS = [
   {
     preset: "nest",
@@ -4908,11 +4990,11 @@ var DEPENDENCY_SIGNALS = [
   { preset: "nest", pattern: /^@nestjs\// }
 ];
 function dependencyNames(cwd) {
-  const path = join21(cwd, "package.json");
+  const path = join22(cwd, "package.json");
   if (!existsSync19(path)) return [];
   try {
     const manifest = parseJsonc(
-      readFileSync18(path, "utf8"),
+      readFileSync19(path, "utf8"),
       path
     );
     return [
@@ -4935,7 +5017,7 @@ function declaresJsx(cwd) {
   for (const name of entries) {
     try {
       const config = parseJsonc(
-        readFileSync18(join21(cwd, name), "utf8"),
+        readFileSync19(join22(cwd, name), "utf8"),
         name
       );
       if (config.compilerOptions?.jsx !== void 0) return true;
@@ -5095,4 +5177,4 @@ export {
   detectFramework,
   dispatch
 };
-//# sourceMappingURL=chunk-TLNA2U3B.js.map
+//# sourceMappingURL=chunk-RLVLDC5H.js.map

package/dist/index.js

@@ -7,7 +7,7 @@ import {
   registerAdapters,
   resolve,
   setDefaultRunner
-} from "./chunk-TLNA2U3B.js";
+} from "./chunk-RLVLDC5H.js";
 export {
   BaseAdapter,
   all,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@hublo/sentinel",
-  "version": "1.1.3",
+  "version": "1.1.5",
   "description": "One CLI that guards code health across Hublo repos: shared lint/typescript/build/test presets, static & dynamic analysis, and architecture checks.",
   "type": "module",
   "license": "MIT",