@hublo/sentinel 1.2.0-alpha.25 → 1.2.0-alpha.27

package/dist/bin/sentinel.js

@@ -22,7 +22,7 @@ import {
   registerAdapters,
   resolve,
   resolveBin
-} from "../chunk-C4BWV6SU.js";
+} from "../chunk-LNSAUFIM.js";
 
 // bin/sentinel.ts
 import { program } from "commander";

package/dist/{chunk-C4BWV6SU.js → chunk-LNSAUFIM.js}

@@ -241,9 +241,16 @@ function workspaceRootHops(cwd, target) {
 import { existsSync as existsSync5, readFileSync as readFileSync5 } from "fs";
 import { join as join5 } from "path";
 
-// src/roles/build/adoption-drift.ts
-import { existsSync as existsSync4, readFileSync as readFileSync4 } from "fs";
-import { join as join4 } from "path";
+// src/core/config/module-type.ts
+function esmReadiness(fileName, packageType) {
+  if (/\.(mts|mjs)$/.test(fileName)) return { kind: "ready" };
+  if (packageType === "module") return { kind: "ready" };
+  const rename = fileName.replace(/\.(ts|js)$/, ".mts");
+  return {
+    kind: "blocked",
+    why: `sentinel is ESM only, and this module ${packageType === void 0 ? 'declares no `"type"`' : `declares \`"type": "${packageType}"\``}, so Node loads ${fileName} as CommonJS and the import fails. Two remedies, and adoption takes neither by itself because both reach beyond this build: add \`"type": "module"\` to this module's package.json, which changes how EVERY \`.js\` here loads, or rename the config to \`${rename}\`, which settles it in the filename where nothing can undo it.`
+  };
+}
 
 // src/core/config/manifest.ts
 import { existsSync as existsSync3, readFileSync as readFileSync3 } from "fs";
@@ -406,7 +413,9 @@ var SENTINEL_OWNED_BUILD_PACKAGES = OWNED_PACKAGES.map(
   (entry) => entry.package
 );
 
-// src/roles/build/adoption-drift.ts
+// src/roles/build/project-json.ts
+import { existsSync as existsSync4, readFileSync as readFileSync4 } from "fs";
+import { join as join4 } from "path";
 function projectTargets(cwd) {
   const path = join4(cwd, "project.json");
   if (!existsSync4(path)) return void 0;
@@ -416,6 +425,8 @@ function projectTargets(cwd) {
     return void 0;
   }
 }
+
+// src/roles/build/adoption-drift.ts
 function buildAdoptionDrift(cwd) {
   const drift = [];
   const manifest = readProjectPackageJson(cwd);
@@ -457,6 +468,12 @@ function buildAdoptionDrift(cwd) {
       `still declares a \`${BUILD_SCRIPT_NAME}\` target in project.json beside the one in package.json, so the module has two and which runs depends on the caller`
     );
   }
+  const devScript = moduleScripts(cwd)[DEV_SCRIPT_NAME];
+  if (devScript?.includes(SENTINEL_DEV_COMMAND) === true && projectTargets(cwd)?.[DEV_SCRIPT_NAME] !== void 0) {
+    drift.push(
+      `runs its \`${DEV_SCRIPT_NAME}\` script through sentinel but still declares a \`${DEV_SCRIPT_NAME}\` target in project.json, so one dev server has two declarations and editing the target stops the script from being what runs`
+    );
+  }
   return drift;
 }
 
@@ -511,7 +528,10 @@ function readBuildAdoption(cwd) {
   } catch (error) {
     return NOT_ADOPTED(configFile, error instanceof Error ? error.message : String(error));
   }
-  if (!importsPreset(source)) return NOT_ADOPTED(configFile);
+  if (!importsPreset(source)) {
+    const esm = esmReadiness(configFile, readProjectPackageJson(cwd).type);
+    return NOT_ADOPTED(configFile, esm.kind === "blocked" ? esm.why : null);
+  }
   const manifest = readProjectPackageJson(cwd);
   const declared = { ...manifest.dependencies, ...manifest.devDependencies };
   const ownDeclarations = SENTINEL_OWNED_BUILD_PACKAGES.filter((name) => name in declared).map(
@@ -591,8 +611,8 @@ function binSearchPath(cwd) {
 }
 
 // src/roles/build/plan.ts
-import { existsSync as existsSync10, readFileSync as readFileSync8 } from "fs";
-import { join as join10 } from "path";
+import { existsSync as existsSync11, readFileSync as readFileSync9 } from "fs";
+import { join as join11 } from "path";
 
 // src/core/config/existing-command.ts
 import { readFileSync as readFileSync6 } from "fs";
@@ -711,6 +731,161 @@ function keepsOtherCommands(script, sentinelCommand) {
   return script.split(SEGMENT_SEPARATOR).filter((_, index) => !isSeparatorAt(index)).some((segment) => segment.trim() !== "" && segment.trim() !== sentinelCommand);
 }
 
+// src/roles/format/read-adoption.ts
+import { existsSync as existsSync9, readFileSync as readFileSync7 } from "fs";
+import { join as join9 } from "path";
+
+// src/roles/format/config-policy.ts
+var FORMAT_CONFIG_FILE = ".oxfmtrc.json";
+var FORMAT_SCRIPT_NAME = "format";
+var PROVENANCE_KEY = "$sentinel";
+var PERMITTED_LOCAL_KEYS = [
+  "useTabs",
+  "tabWidth",
+  "printWidth",
+  "semi",
+  "singleQuote",
+  "jsxSingleQuote",
+  "trailingComma",
+  "quoteProps",
+  "bracketSpacing",
+  "bracketSameLine",
+  "arrowParens",
+  "endOfLine",
+  "objectWrap",
+  "proseWrap",
+  "experimentalOperatorPosition"
+];
+var ALWAYS_LOCAL_KEYS = ["ignorePatterns", "overrides"];
+var FORMAT_DEFAULT_IGNORES = ["**/*.toml"];
+var PRETTIER_CONFIG_FILES = [
+  ".prettierrc",
+  ".prettierrc.json",
+  ".prettierrc.json5",
+  ".prettierrc.yml",
+  ".prettierrc.yaml",
+  ".prettierrc.js",
+  ".prettierrc.cjs",
+  ".prettierrc.mjs",
+  "prettier.config.js",
+  "prettier.config.cjs",
+  "prettier.config.mjs"
+];
+function formatTargets() {
+  return {
+    [FORMAT_SCRIPT_NAME]: {
+      cache: true,
+      inputs: ["default", `{projectRoot}/${FORMAT_CONFIG_FILE}`]
+    },
+    [`${FORMAT_SCRIPT_NAME}:fix`]: { cache: false }
+  };
+}
+
+// src/roles/format/presets/base.json
+var base_default = {
+  printWidth: 80,
+  semi: false,
+  singleQuote: true,
+  trailingComma: "all",
+  sortPackageJson: false,
+  sortImports: false
+};
+
+// src/roles/format/presets/nest-imports.json
+var nest_imports_default = {
+  customGroups: [
+    {
+      groupName: "workspace",
+      elementNamePattern: ["@hublo/**", "@shared/**", "@front/**", "@network/**"]
+    }
+  ],
+  groups: ["builtin", "external", "workspace", ["parent", "index"], "sibling"],
+  newlinesBetween: true,
+  order: "asc",
+  ignoreCase: false
+};
+
+// src/roles/format/preset-data.ts
+var FORMAT_PRESETS = ["base", "svelte", "nest"];
+function hasFormatPreset(name) {
+  return FORMAT_PRESETS.includes(name);
+}
+function formatPresetName(declared) {
+  if (declared === "svelte") return "svelte";
+  if (declared === "nest") return "nest";
+  return "base";
+}
+function formatPresetFor(preset) {
+  const base = base_default;
+  const name = formatPresetName(preset);
+  if (name === "svelte") return { ...base, svelte: true };
+  if (name === "nest") return { ...base, sortImports: nest_imports_default };
+  return base;
+}
+
+// src/roles/format/read-adoption.ts
+var NOT_ADOPTED2 = (configFile, unreadable = null) => ({
+  configFile,
+  preset: null,
+  adopted: false,
+  conformant: false,
+  drift: [],
+  local: {},
+  presetVersion: null,
+  effective: {},
+  unreadable
+});
+function sameValue(a, b) {
+  return JSON.stringify(a) === JSON.stringify(b);
+}
+function readFormatAdoption(cwd) {
+  const path = join9(cwd, FORMAT_CONFIG_FILE);
+  if (!existsSync9(path)) return NOT_ADOPTED2(null);
+  let parsed;
+  try {
+    parsed = parseJsonc(readFileSync7(path, "utf8"), FORMAT_CONFIG_FILE);
+  } catch (error) {
+    const reason = error instanceof Error ? error.message : String(error);
+    return NOT_ADOPTED2(FORMAT_CONFIG_FILE, `${FORMAT_CONFIG_FILE} could not be parsed (${reason})`);
+  }
+  const provenance = parsed[PROVENANCE_KEY];
+  if (!provenance || typeof provenance.preset !== "string") return NOT_ADOPTED2(FORMAT_CONFIG_FILE);
+  if (!hasFormatPreset(provenance.preset)) {
+    return NOT_ADOPTED2(
+      FORMAT_CONFIG_FILE,
+      `${FORMAT_CONFIG_FILE} declares the format preset "${provenance.preset}", which sentinel does not ship (shipped: ${FORMAT_PRESETS.join(", ")}). Re-run \`sentinel --init --format\`.`
+    );
+  }
+  const declaredLocal = Array.isArray(provenance.local) ? provenance.local : [];
+  const preset = formatPresetFor(provenance.preset);
+  const drift = [];
+  const local = {};
+  for (const [key, expected] of Object.entries(preset)) {
+    if (declaredLocal.includes(key)) {
+      local[key] = parsed[key];
+      continue;
+    }
+    if (!(key in parsed) || !sameValue(parsed[key], expected)) drift.push(key);
+  }
+  for (const key of declaredLocal) {
+    if (!(key in preset)) local[key] = parsed[key];
+  }
+  for (const key of ALWAYS_LOCAL_KEYS) {
+    if (key in parsed) local[key] = parsed[key];
+  }
+  return {
+    configFile: FORMAT_CONFIG_FILE,
+    preset: provenance.preset,
+    adopted: true,
+    conformant: drift.length === 0,
+    drift,
+    local,
+    presetVersion: typeof provenance.version === "string" ? provenance.version : null,
+    effective: parsed,
+    unreadable: null
+  };
+}
+
 // src/roles/build/dev-script.ts
 var CHAIN = " -- ";
 var VITE_TOKEN = /(^|\s|\/)vite(\s|$)/;
@@ -731,14 +906,76 @@ function composeDevScript(existing, command) {
   return chunks.join(CHAIN);
 }
 
+// src/roles/build/dev-target.ts
+var DELEGATION_KEYS = /* @__PURE__ */ new Set(["executor", "options"]);
+var DELEGATION_OPTION_KEYS = /* @__PURE__ */ new Set(["command", "cwd"]);
+function delegatesToScript(target, scriptName) {
+  if (typeof target !== "object" || target === null || Array.isArray(target)) return false;
+  const entries = target;
+  if (!Object.keys(entries).every((key) => DELEGATION_KEYS.has(key))) return false;
+  if (entries["executor"] !== "nx:run-commands") return false;
+  const options = entries["options"];
+  if (typeof options !== "object" || options === null || Array.isArray(options)) return false;
+  const declared = options;
+  if (!Object.keys(declared).every((key) => DELEGATION_OPTION_KEYS.has(key))) return false;
+  const command = declared["command"];
+  if (typeof command !== "string") return false;
+  return new RegExp(String.raw`(^|\s)run\s+${scriptName}$`).test(command.trim());
+}
+function devScriptIsAdopted(devScript) {
+  return devScript !== void 0 && devScript.includes(SENTINEL_DEV_COMMAND);
+}
+function devTargetOperations(cwd, devScript) {
+  if (!devScriptIsAdopted(devScript)) return { operations: [] };
+  const target = projectTargets(cwd)?.[DEV_SCRIPT_NAME];
+  if (target === void 0) return { operations: [] };
+  if (!delegatesToScript(target, DEV_SCRIPT_NAME)) {
+    return {
+      operations: [],
+      note: `left the \`${DEV_SCRIPT_NAME}\` target in project.json alone: it does more than call \`pnpm run ${DEV_SCRIPT_NAME}\`, so removing it would drop behaviour this role never declared. Move what it does into the script, or keep it and accept the second home.`
+    };
+  }
+  return {
+    operations: [
+      { kind: "remove-json-keys", path: "project.json", keys: [["targets", DEV_SCRIPT_NAME]] }
+    ],
+    note: `removed the \`${DEV_SCRIPT_NAME}\` target from project.json: it only called \`pnpm run ${DEV_SCRIPT_NAME}\`, which nx infers from the script itself. host-admin has run without that target all along.`
+  };
+}
+
 // src/roles/build/nest/adopt.ts
-import { existsSync as existsSync9, readFileSync as readFileSync7 } from "fs";
-import { join as join9 } from "path";
+import { existsSync as existsSync10, readFileSync as readFileSync8 } from "fs";
+import { join as join10 } from "path";
 var NEST_CONFIG_FILE = "vite.config.mts";
+function asSource(value, depth) {
+  const pad = "  ".repeat(depth);
+  const inner = "  ".repeat(depth + 1);
+  if (Array.isArray(value)) {
+    if (value.length === 0) return "[]";
+    return `[
+${value.map((item) => `${inner}${asSource(item, depth + 1)}`).join(",\n")},
+${pad}]`;
+  }
+  if (value !== null && typeof value === "object") {
+    const entries = Object.entries(value);
+    if (entries.length === 0) return "{}";
+    return `{
+${entries.map(([key, item]) => `${inner}${asKey(key)}: ${asSource(item, depth + 1)}`).join(",\n")},
+${pad}}`;
+  }
+  if (typeof value === "string") return `'${value.replace(/\\/g, "\\\\").replace(/'/g, "\\'")}'`;
+  if (typeof value === "number" || typeof value === "boolean") return String(value);
+  throw new Error(
+    `sentinel build(nest): cannot write ${typeof value} into the generated config. The build target carries a shape this translation was not written for, and it should refuse rather than emit something nobody has read.`
+  );
+}
+function asKey(key) {
+  return /^[A-Za-z_$][A-Za-z0-9_$]*$/.test(key) ? key : `'${key}'`;
+}
 function nestConfigSource(cwd, target) {
   const hops = workspaceRootHops(cwd, target);
   const up = Array.from({ length: hops }, () => "..").join("/");
-  const carried = (name, value) => value === void 0 || value.length === 0 ? "" : `  ${name}: ${JSON.stringify(value)},
+  const carried = (name, value) => value === void 0 || value.length === 0 ? "" : `  ${name}: ${asSource(value, 1)},
 `;
   return `import path from 'node:path'
 
@@ -757,9 +994,9 @@ function nestBuildOutputs(target) {
 }
 var OUT_DIR_IN_CONFIG = /^\s*outDir:\s*'([^']+)'/m;
 function nestOutputsFromConfig(cwd) {
-  const configPath = join9(cwd, NEST_CONFIG_FILE);
-  if (!existsSync9(configPath)) return void 0;
-  const outDir = OUT_DIR_IN_CONFIG.exec(readFileSync7(configPath, "utf8"))?.[1];
+  const configPath = join10(cwd, NEST_CONFIG_FILE);
+  if (!existsSync10(configPath)) return void 0;
+  const outDir = OUT_DIR_IN_CONFIG.exec(readFileSync8(configPath, "utf8"))?.[1];
   return outDir === void 0 ? void 0 : [`{workspaceRoot}/${outDir}`];
 }
 function nestAdoptionOperations(cwd, target) {
@@ -797,11 +1034,6 @@ function describeUnmet(preset, unmet) {
 // src/core/config/rewrite-imports.ts
 import { parseSync } from "oxc-parser";
 var movedSpecifiers = (toolchain) => new Set(toolchain.owned.map((entry) => entry.specifier));
-function esmBlocker(fileName, packageType) {
-  if (/\.(mts|mjs)$/.test(fileName)) return void 0;
-  if (packageType === "module") return void 0;
-  return `sentinel is ESM only, and this module does not declare \`"type": "module"\`, so Vite would load ${fileName} as CommonJS and fail to require it. Add \`"type": "module"\` to this module's package.json, or rename the config to \`${fileName.replace(/\.(ts|js)$/, ".m$1")}\`, then run this again.`;
-}
 var defaultExportNames = (toolchain) => Object.fromEntries(
   toolchain.owned.filter((entry) => entry.default !== void 0).map((entry) => [entry.specifier, entry.default])
 );
@@ -972,8 +1204,8 @@ function plan(context) {
 function planReactApp(context, configFile) {
   const notes = [];
   const operations = [];
-  const notEsm = esmBlocker(configFile, readProjectPackageJson(context.cwd).type);
-  if (notEsm !== void 0) return { operations: [], skipped: notEsm };
+  const esm = esmReadiness(configFile, readProjectPackageJson(context.cwd).type);
+  if (esm.kind === "blocked") return { operations: [], skipped: esm.why };
   const rewrite = rewriteBuildImports(readConfigSource(context.cwd, configFile), configFile);
   if (rewrite.kind === "blocked") {
     return {
@@ -1002,7 +1234,8 @@ function planReactApp(context, configFile) {
       `${configFile} now imports ${rewrite.moved.join(", ")} from \`${BUILD_PRESET_SPECIFIER}\`. Only the import lines changed: every attribute, alias and path is untouched, so this build produces what it produced before.`
     );
   }
-  operations.push(manifestOperation(context.cwd, buildScripts(context.cwd)));
+  const scripts = buildScripts(context.cwd);
+  operations.push(manifestOperation(context.cwd, scripts));
   operations.push(
     ...nxTargetOperations({
       cwd: context.cwd,
@@ -1012,6 +1245,9 @@ function planReactApp(context, configFile) {
       })
     })
   );
+  const dev = devTargetOperations(context.cwd, scripts[DEV_SCRIPT_NAME]);
+  operations.push(...dev.operations);
+  if (dev.note !== void 0) notes.push(dev.note);
   const owned = ownedBuildDependencies(context.cwd);
   if (owned.length > 0) {
     operations.push({ kind: "remove-json-keys", path: "package.json", keys: owned });
@@ -1019,6 +1255,10 @@ function planReactApp(context, configFile) {
       `removed ${owned.map(([, name]) => name).join(", ")} from this module: sentinel owns them now, and two copies of Vite in one build give the plugins a different Vite than the one running them.`
     );
   }
+  const formatted = readFormatAdoption(context.cwd).adopted;
+  notes.push(
+    formatted ? `run \`sentinel --run --format --fix\` on this module: adoption rewrote ${configFile}, and a rewritten import can be longer than your formatter wraps at.` : `this module is formatted by the workspace, not by sentinel, so format ${configFile} with whatever owns it before committing: a rewritten import can be longer than that formatter wraps at, and the check would fail on a file nobody typed.`
+  );
   notes.push(
     `this config is code, and it runs before the build does: any environment variable it reads has to be present wherever you build, including a fresh clone, another CI job or an image. Adoption does not change what it reads, but a failure there arrives early and names this role rather than the variable.`
   );
@@ -1059,9 +1299,9 @@ function planNestService(context, webpackTarget) {
   };
 }
 function readConfigSource(cwd, configFile) {
-  if (!existsSync10(join10(cwd, configFile))) return "";
+  if (!existsSync11(join11(cwd, configFile))) return "";
   try {
-    return readFileSync8(join10(cwd, configFile), "utf8");
+    return readFileSync9(join11(cwd, configFile), "utf8");
   } catch {
     return "";
   }
@@ -1246,12 +1486,12 @@ var ViteDevAdapter = class extends ViteRoleAdapter {
 };
 
 // src/roles/build/declared-outputs.ts
-import { existsSync as existsSync12, rmSync, statSync, writeFileSync as writeFileSync2 } from "fs";
-import { join as join12 } from "path";
+import { existsSync as existsSync13, rmSync, statSync, writeFileSync as writeFileSync2 } from "fs";
+import { join as join13 } from "path";
 
 // src/core/workspace-prep.ts
-import { existsSync as existsSync11, readFileSync as readFileSync9, writeFileSync } from "fs";
-import { dirname as dirname3, join as join11, relative as relative2 } from "path";
+import { existsSync as existsSync12, readFileSync as readFileSync10, writeFileSync } from "fs";
+import { dirname as dirname3, join as join12, relative as relative2 } from "path";
 
 // src/core/settings.ts
 var WORKSPACE_ROOT_MARKER = "nx.json";
@@ -1266,7 +1506,7 @@ var LIST_ITEM = /^(\s*)-\s+(.*?)\s*$/;
 function findWorkspaceRoot(startDir) {
   let dir = startDir;
   for (; ; ) {
-    if (existsSync11(join11(dir, WORKSPACE_ROOT_MARKER))) return dir;
+    if (existsSync12(join12(dir, WORKSPACE_ROOT_MARKER))) return dir;
     const parent = dirname3(dir);
     if (parent === dir) return void 0;
     dir = parent;
@@ -1279,9 +1519,9 @@ function declaredNativeTs(pkg) {
   return version || void 0;
 }
 function ensureI18nextSingleton(root, dryRun) {
-  const pkgPath = join11(root, "package.json");
-  if (!existsSync11(pkgPath)) return void 0;
-  const pkg = JSON.parse(readFileSync9(pkgPath, "utf8"));
+  const pkgPath = join12(root, "package.json");
+  if (!existsSync12(pkgPath)) return void 0;
+  const pkg = JSON.parse(readFileSync10(pkgPath, "utf8"));
   const want = declaredNativeTs(pkg);
   if (!want) return void 0;
   const have = pkg.pnpm?.overrides?.[OVERRIDE_KEY];
@@ -1294,10 +1534,10 @@ function ensureI18nextSingleton(root, dryRun) {
   return `pinned ${OVERRIDE_KEY} to ${want} in package.json (i18next singleton)`;
 }
 function ensureReleaseAgeAllowList(root, dryRun) {
-  const yamlPath = join11(root, WORKSPACE_YAML);
-  if (!existsSync11(yamlPath)) return void 0;
+  const yamlPath = join12(root, WORKSPACE_YAML);
+  if (!existsSync12(yamlPath)) return void 0;
   const own = readOwnPackage().name;
-  const lines = readFileSync9(yamlPath, "utf8").split("\n");
+  const lines = readFileSync10(yamlPath, "utf8").split("\n");
   const keyIdx = lines.findIndex((line) => line.replace(/\s+$/, "") === `${RELEASE_AGE_KEY}:`);
   if (keyIdx === -1) return void 0;
   let lastItemIdx = keyIdx;
@@ -1332,11 +1572,11 @@ var ROOT_PRETTIER_CONFIGS = [
 function ensureFormatterExclusion(root, moduleDir, dryRun) {
   const rel = relative2(root, moduleDir).replaceAll("\\", "/");
   if (rel === "" || rel.startsWith("..")) return void 0;
-  const ignorePath = join11(root, PRETTIER_IGNORE);
-  const hasPrettier = existsSync11(ignorePath) || ROOT_PRETTIER_CONFIGS.some((name) => existsSync11(join11(root, name)));
+  const ignorePath = join12(root, PRETTIER_IGNORE);
+  const hasPrettier = existsSync12(ignorePath) || ROOT_PRETTIER_CONFIGS.some((name) => existsSync12(join12(root, name)));
   if (!hasPrettier) return void 0;
   const pattern = `/${rel}/`;
-  const existing = existsSync11(ignorePath) ? readFileSync9(ignorePath, "utf8") : "";
+  const existing = existsSync12(ignorePath) ? readFileSync10(ignorePath, "utf8") : "";
   const lines = existing.split("\n");
   if (lines.some((line) => line.trim().replace(/\/$/, "") === pattern.replace(/\/$/, ""))) {
     return void 0;
@@ -1372,10 +1612,10 @@ function ensureWorkspacePrep(opts) {
 function inspectWorkspacePrep(root) {
   const entries = [];
   let pkg = {};
-  const pkgPath = join11(root, "package.json");
-  if (existsSync11(pkgPath)) {
+  const pkgPath = join12(root, "package.json");
+  if (existsSync12(pkgPath)) {
     try {
-      pkg = JSON.parse(readFileSync9(pkgPath, "utf8"));
+      pkg = JSON.parse(readFileSync10(pkgPath, "utf8"));
     } catch {
       pkg = {};
     }
@@ -1389,9 +1629,9 @@ function inspectWorkspacePrep(root) {
     });
   }
   const own = readOwnPackage().name;
-  const yamlPath = join11(root, WORKSPACE_YAML);
-  if (existsSync11(yamlPath)) {
-    const yaml = readFileSync9(yamlPath, "utf8");
+  const yamlPath = join12(root, WORKSPACE_YAML);
+  if (existsSync12(yamlPath)) {
+    const yaml = readFileSync10(yamlPath, "utf8");
     const listed = new RegExp(`^\\s*-\\s*['"]?${own.replace("/", "\\/")}['"]?\\s*$`, "m").test(yaml);
     if (listed) {
       const gated = new RegExp(`^\\s*minimumReleaseAge\\s*:`, "m").test(yaml);
@@ -1409,15 +1649,15 @@ function declaredBuildTarget(cwd) {
   return readProjectPackageJson(cwd).nx?.targets?.[BUILD_SCRIPT_NAME];
 }
 function resolveOutputToken(token, cwd) {
-  if (token.startsWith("{projectRoot}/")) return join12(cwd, token.slice("{projectRoot}/".length));
+  if (token.startsWith("{projectRoot}/")) return join13(cwd, token.slice("{projectRoot}/".length));
   if (token.startsWith("{workspaceRoot}/")) {
     const root = findWorkspaceRoot(cwd);
-    return root === void 0 ? void 0 : join12(root, token.slice("{workspaceRoot}/".length));
+    return root === void 0 ? void 0 : join13(root, token.slice("{workspaceRoot}/".length));
   }
-  return join12(cwd, token);
+  return join13(cwd, token);
 }
 function buildStamp(cwd) {
-  const marker = join12(cwd, `.sentinel-build-stamp-${process.pid}`);
+  const marker = join13(cwd, `.sentinel-build-stamp-${process.pid}`);
   try {
     writeFileSync2(marker, "");
     const stamp = statSync(marker).mtimeMs;
@@ -1428,7 +1668,7 @@ function buildStamp(cwd) {
   }
 }
 function writtenSince(path, startedAt) {
-  if (!existsSync12(path)) return false;
+  if (!existsSync13(path)) return false;
   try {
     return statSync(path).mtimeMs >= startedAt;
   } catch {
@@ -1582,7 +1822,7 @@ import { join as join18 } from "path";
 
 // src/core/config/has-source.ts
 import { readdirSync } from "fs";
-import { extname, join as join13, relative as relative3 } from "path";
+import { extname, join as join14, relative as relative3 } from "path";
 var SKIP_DIRECTORIES = /* @__PURE__ */ new Set([
   "node_modules",
   "dist",
@@ -1633,7 +1873,7 @@ function hasSourceFiles(cwd, extensions) {
     }
     for (const entry of entries) {
       if (entry.isDirectory()) {
-        if (!SKIP_DIRECTORIES.has(entry.name)) queue.push(join13(dir, entry.name));
+        if (!SKIP_DIRECTORIES.has(entry.name)) queue.push(join14(dir, entry.name));
         continue;
       }
       if (wanted.has(extname(entry.name))) return true;
@@ -1654,7 +1894,7 @@ function listSourceFiles(cwd, extensions) {
       continue;
     }
     for (const entry of entries) {
-      const full = join13(dir, entry.name);
+      const full = join14(dir, entry.name);
       if (entry.isDirectory()) {
         if (!SKIP_DIRECTORIES.has(entry.name)) queue.push(full);
         continue;
@@ -1672,52 +1912,6 @@ function scopeFlags(paths, options = []) {
   return [TOLERATE_EMPTY_FLAG];
 }
 
-// src/roles/format/config-policy.ts
-var FORMAT_CONFIG_FILE = ".oxfmtrc.json";
-var FORMAT_SCRIPT_NAME = "format";
-var PROVENANCE_KEY = "$sentinel";
-var PERMITTED_LOCAL_KEYS = [
-  "useTabs",
-  "tabWidth",
-  "printWidth",
-  "semi",
-  "singleQuote",
-  "jsxSingleQuote",
-  "trailingComma",
-  "quoteProps",
-  "bracketSpacing",
-  "bracketSameLine",
-  "arrowParens",
-  "endOfLine",
-  "objectWrap",
-  "proseWrap",
-  "experimentalOperatorPosition"
-];
-var ALWAYS_LOCAL_KEYS = ["ignorePatterns", "overrides"];
-var FORMAT_DEFAULT_IGNORES = ["**/*.toml"];
-var PRETTIER_CONFIG_FILES = [
-  ".prettierrc",
-  ".prettierrc.json",
-  ".prettierrc.json5",
-  ".prettierrc.yml",
-  ".prettierrc.yaml",
-  ".prettierrc.js",
-  ".prettierrc.cjs",
-  ".prettierrc.mjs",
-  "prettier.config.js",
-  "prettier.config.cjs",
-  "prettier.config.mjs"
-];
-function formatTargets() {
-  return {
-    [FORMAT_SCRIPT_NAME]: {
-      cache: true,
-      inputs: ["default", `{projectRoot}/${FORMAT_CONFIG_FILE}`]
-    },
-    [`${FORMAT_SCRIPT_NAME}:fix`]: { cache: false }
-  };
-}
-
 // src/roles/format/format-script.ts
 var SENTINEL_FORMAT_COMMAND = "sentinel --run --format";
 function isPrettierSegment(segment) {
@@ -1746,8 +1940,8 @@ function writesWhenRewritten(name, command) {
 var CHECK_SCRIPT_NAMES = /* @__PURE__ */ new Set(["lint", "format", "check", "test", "typecheck", "verify"]);
 
 // src/roles/format/inherited-ignores.ts
-import { existsSync as existsSync13, readFileSync as readFileSync10 } from "fs";
-import { join as join14 } from "path";
+import { existsSync as existsSync14, readFileSync as readFileSync11 } from "fs";
+import { join as join15 } from "path";
 var ROOT_IGNORE_FILE = ".prettierignore";
 function isPattern(line) {
   const trimmed = line.trim();
@@ -1762,11 +1956,11 @@ function toModulePattern(pattern) {
 }
 function inheritedIgnorePatterns(workspaceRoot) {
   if (!workspaceRoot) return [];
-  const path = join14(workspaceRoot, ROOT_IGNORE_FILE);
-  if (!existsSync13(path)) return [];
+  const path = join15(workspaceRoot, ROOT_IGNORE_FILE);
+  if (!existsSync14(path)) return [];
   let contents;
   try {
-    contents = readFileSync10(path, "utf8");
+    contents = readFileSync11(path, "utf8");
   } catch {
     return [];
   }
@@ -1810,56 +2004,14 @@ function needsSvelteCompiler(output) {
   return /svelte\/compiler/.test(output);
 }
 
-// src/roles/format/presets/base.json
-var base_default = {
-  printWidth: 80,
-  semi: false,
-  singleQuote: true,
-  trailingComma: "all",
-  sortPackageJson: false,
-  sortImports: false
-};
-
-// src/roles/format/presets/nest-imports.json
-var nest_imports_default = {
-  customGroups: [
-    {
-      groupName: "workspace",
-      elementNamePattern: ["@hublo/**", "@shared/**", "@front/**", "@network/**"]
-    }
-  ],
-  groups: ["builtin", "external", "workspace", ["parent", "index"], "sibling"],
-  newlinesBetween: true,
-  order: "asc",
-  ignoreCase: false
-};
-
-// src/roles/format/preset-data.ts
-var FORMAT_PRESETS = ["base", "svelte", "nest"];
-function hasFormatPreset(name) {
-  return FORMAT_PRESETS.includes(name);
-}
-function formatPresetName(declared) {
-  if (declared === "svelte") return "svelte";
-  if (declared === "nest") return "nest";
-  return "base";
-}
-function formatPresetFor(preset) {
-  const base = base_default;
-  const name = formatPresetName(preset);
-  if (name === "svelte") return { ...base, svelte: true };
-  if (name === "nest") return { ...base, sortImports: nest_imports_default };
-  return base;
-}
-
 // src/roles/format/prettier-config.ts
-import { existsSync as existsSync14, readFileSync as readFileSync12 } from "fs";
-import { join as join16 } from "path";
+import { existsSync as existsSync15, readFileSync as readFileSync13 } from "fs";
+import { join as join17 } from "path";
 
 // src/roles/format/resolve-oxfmt.ts
-import { readFileSync as readFileSync11 } from "fs";
+import { readFileSync as readFileSync12 } from "fs";
 import { createRequire as createRequire2 } from "module";
-import { dirname as dirname4, join as join15 } from "path";
+import { dirname as dirname4, join as join16 } from "path";
 function resolveOxfmt(cwd) {
   return resolveBin(cwd, "oxfmt") ?? binFromOwnInstall("oxfmt", "oxfmt");
 }
@@ -1888,8 +2040,8 @@ function configSchema() {
 function readConfigSchema() {
   try {
     const manifest = createRequire2(import.meta.url).resolve("oxfmt/package.json");
-    const schemaPath = join15(dirname4(manifest), "configuration_schema.json");
-    return JSON.parse(readFileSync11(schemaPath, "utf8"));
+    const schemaPath = join16(dirname4(manifest), "configuration_schema.json");
+    return JSON.parse(readFileSync12(schemaPath, "utf8"));
   } catch {
     return void 0;
   }
@@ -1920,14 +2072,14 @@ function toOxfmtOverrides(value) {
   return { overrides, unresolved };
 }
 function readPrettierSettings(cwd) {
-  const file = PRETTIER_CONFIG_FILES.find((name) => existsSync14(join16(cwd, name)));
+  const file = PRETTIER_CONFIG_FILES.find((name) => existsSync15(join17(cwd, name)));
   if (!file) return { options: {}, unresolved: [] };
   if (/\.(js|cjs|mjs)$/.test(file)) {
     return { options: {}, file, unresolved: [`${file} is JavaScript, so it was not executed`] };
   }
   let parsed;
   try {
-    parsed = parseJsonc(readFileSync12(join16(cwd, file), "utf8"), file);
+    parsed = parseJsonc(readFileSync13(join17(cwd, file), "utf8"), file);
   } catch {
     return { options: {}, file, unresolved: [`${file} could not be parsed`] };
   }
@@ -1956,71 +2108,6 @@ function readPrettierSettings(cwd) {
   return { options, file, unresolved };
 }
 
-// src/roles/format/read-adoption.ts
-import { existsSync as existsSync15, readFileSync as readFileSync13 } from "fs";
-import { join as join17 } from "path";
-var NOT_ADOPTED2 = (configFile, unreadable = null) => ({
-  configFile,
-  preset: null,
-  adopted: false,
-  conformant: false,
-  drift: [],
-  local: {},
-  presetVersion: null,
-  effective: {},
-  unreadable
-});
-function sameValue(a, b) {
-  return JSON.stringify(a) === JSON.stringify(b);
-}
-function readFormatAdoption(cwd) {
-  const path = join17(cwd, FORMAT_CONFIG_FILE);
-  if (!existsSync15(path)) return NOT_ADOPTED2(null);
-  let parsed;
-  try {
-    parsed = parseJsonc(readFileSync13(path, "utf8"), FORMAT_CONFIG_FILE);
-  } catch (error) {
-    const reason = error instanceof Error ? error.message : String(error);
-    return NOT_ADOPTED2(FORMAT_CONFIG_FILE, `${FORMAT_CONFIG_FILE} could not be parsed (${reason})`);
-  }
-  const provenance = parsed[PROVENANCE_KEY];
-  if (!provenance || typeof provenance.preset !== "string") return NOT_ADOPTED2(FORMAT_CONFIG_FILE);
-  if (!hasFormatPreset(provenance.preset)) {
-    return NOT_ADOPTED2(
-      FORMAT_CONFIG_FILE,
-      `${FORMAT_CONFIG_FILE} declares the format preset "${provenance.preset}", which sentinel does not ship (shipped: ${FORMAT_PRESETS.join(", ")}). Re-run \`sentinel --init --format\`.`
-    );
-  }
-  const declaredLocal = Array.isArray(provenance.local) ? provenance.local : [];
-  const preset = formatPresetFor(provenance.preset);
-  const drift = [];
-  const local = {};
-  for (const [key, expected] of Object.entries(preset)) {
-    if (declaredLocal.includes(key)) {
-      local[key] = parsed[key];
-      continue;
-    }
-    if (!(key in parsed) || !sameValue(parsed[key], expected)) drift.push(key);
-  }
-  for (const key of declaredLocal) {
-    if (!(key in preset)) local[key] = parsed[key];
-  }
-  for (const key of ALWAYS_LOCAL_KEYS) {
-    if (key in parsed) local[key] = parsed[key];
-  }
-  return {
-    configFile: FORMAT_CONFIG_FILE,
-    preset: provenance.preset,
-    adopted: true,
-    conformant: drift.length === 0,
-    drift,
-    local,
-    presetVersion: typeof provenance.version === "string" ? provenance.version : null,
-    effective: parsed,
-    unreadable: null
-  };
-}
-
 // src/roles/format/unenforced.ts
 function unenforcedFormatOptions(options) {
   const gaps = [];
@@ -6600,4 +6687,4 @@ export {
   detectFramework,
   dispatch
 };
-//# sourceMappingURL=chunk-C4BWV6SU.js.map
+//# sourceMappingURL=chunk-LNSAUFIM.js.map

package/dist/index.js

@@ -7,7 +7,7 @@ import {
   registerAdapters,
   resolve,
   setDefaultRunner
-} from "./chunk-C4BWV6SU.js";
+} from "./chunk-LNSAUFIM.js";
 export {
   BaseAdapter,
   all,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@hublo/sentinel",
-  "version": "1.2.0-alpha.25",
+  "version": "1.2.0-alpha.27",
   "description": "One CLI that guards code health across Hublo repos: shared lint/typescript/build/test presets, static & dynamic analysis, and architecture checks.",
   "type": "module",
   "license": "MIT",