@hublo/sentinel 1.2.0-alpha.34 → 1.2.0-alpha.35

package/dist/index.js

@@ -7,7 +7,7 @@ import {
   registerAdapters,
   resolve,
   setDefaultRunner
-} from "./chunk-XZLF7FBK.js";
+} from "./chunk-GQID2U34.js";
 export {
   BaseAdapter,
   all,

package/dist/roles/build/nest/toolchain.d.ts

@@ -1,8 +1,9 @@
 import { UserConfig, Plugin } from 'vite';
 export { Plugin, PluginOption, UserConfig, UserConfigExport, defineConfig, loadEnv, mergeConfig } from 'vite';
+export { A as Alias, D as DecoratorMetadataOptions, d as decoratorMetadata, t as tsconfigAliases } from '../../../tsconfig-aliases-Ce6axdJ4.js';
 
 /** A transformer as the target declares it, passed through to the config unchanged. */
-interface TransformerDeclaration$1 {
+interface TransformerDeclaration {
     name: string;
     options?: Record<string, unknown>;
 }
@@ -41,7 +42,7 @@ interface NestServiceOptions {
      * without it succeeds and silently costs them most of their published contract (measured on
      * `institution`: 385 insertions, 1378 deletions in the committed OpenAPI document).
      */
-    transformers?: readonly TransformerDeclaration$1[];
+    transformers?: readonly TransformerDeclaration[];
     /**
      * Files copied into the output beside the bundle, in the shape `@nx/webpack` declared them.
      *
@@ -60,27 +61,6 @@ interface NestServiceOptions {
 }
 declare const nestService: (options: NestServiceOptions) => UserConfig;
 
-/** A TypeScript transformer a service runs at build time, as its build target declares it. */
-interface TransformerDeclaration {
-    /** The package to load it from, e.g. `@nestjs/swagger/plugin`. */
-    name: string;
-    /** Passed to the transformer's own factory, unread here. */
-    options?: Record<string, unknown>;
-}
-interface DecoratorMetadataOptions {
-    /** The module being built. Its tsconfig is the one whose emit must be preserved. */
-    root: string;
-    /**
-     * An explicit tsconfig, when the service does not use either conventional name.
-     *
-     * Relative paths resolve against `root`.
-     */
-    tsconfig?: string;
-    /** The transformers this service declared, translated from its webpack target. */
-    transformers?: readonly TransformerDeclaration[];
-}
-declare const decoratorMetadata: (options: DecoratorMetadataOptions) => Plugin;
-
 interface NodeManifestOptions {
     /** The nx project name, which is how the graph is keyed. */
     project: string;
@@ -115,16 +95,4 @@ interface NodeManifestOptions {
  */
 declare const nodeManifest: (options: NodeManifestOptions) => Plugin;
 
-interface Alias {
-    find: RegExp;
-    replacement: string;
-}
-/**
- * Read the mappings from the workspace's base tsconfig.
- *
- * Longest pattern first, because Vite takes the first alias that matches and the mappings
- * overlap by design: `@front/theme/node` must not be swallowed by `@front/theme`.
- */
-declare const tsconfigAliases: (workspaceRoot: string, file?: string) => Alias[];
-
-export { type Alias, type DecoratorMetadataOptions, type NestServiceOptions, type NodeManifestOptions, decoratorMetadata, nestService, nodeManifest, tsconfigAliases };
+export { type NestServiceOptions, type NodeManifestOptions, nestService, nodeManifest };

package/dist/roles/build/nest/toolchain.js

@@ -1,5 +1,10 @@
+import {
+  decoratorMetadata,
+  tsconfigAliases
+} from "../../../chunk-3TDUIKVQ.js";
+
 // src/roles/build/nest/nest-service.ts
-import { join as join4 } from "path";
+import { join as join3 } from "path";
 import { mergeConfig } from "vite";
 
 // src/roles/build/nest/copy-assets.ts
@@ -76,161 +81,8 @@ var copyAssets = (options) => ({
   }
 });
 
-// src/roles/build/nest/decorator-metadata.ts
-import { existsSync as existsSync2 } from "fs";
-import { createRequire } from "module";
-import path from "path";
-var TYPESCRIPT_SOURCE = /\.ts$/;
-var TSCONFIG_CANDIDATES = ["tsconfig.app.json", "tsconfig.json"];
-function loadCompiler(root) {
-  const require2 = createRequire(path.join(root, "noop.js"));
-  let compiler;
-  try {
-    compiler = require2("typescript");
-  } catch {
-    throw new Error(
-      `sentinel build(nest): no \`typescript\` resolvable from ${root}. The build emits decorator metadata with the module's own compiler, so one has to be installed there.`
-    );
-  }
-  if (typeof compiler.createProgram !== "function") {
-    throw new Error(
-      `sentinel build(nest): the typescript resolved from ${root} (${compiler.version ?? "unknown"}) has no createProgram API. TypeScript 7 is the native port and exposes none; the emit API lives under @typescript/typescript6. Point this module's \`typescript\` at a compiler with an emit API, which is the one its \`typecheck\` target already uses.`
-    );
-  }
-  return compiler;
-}
-function resolveTsconfig(options) {
-  if (options.tsconfig) {
-    const explicit = path.resolve(options.root, options.tsconfig);
-    if (!existsSync2(explicit)) {
-      throw new Error(`sentinel build(nest): tsconfig not found at ${explicit}`);
-    }
-    return explicit;
-  }
-  for (const candidate of TSCONFIG_CANDIDATES) {
-    const found = path.join(options.root, candidate);
-    if (existsSync2(found)) return found;
-  }
-  throw new Error(
-    `sentinel build(nest): no ${TSCONFIG_CANDIDATES.join(" or ")} in ${options.root}. Pass \`tsconfig\` if this service keeps it elsewhere.`
-  );
-}
-function readConfig(ts, options) {
-  const configPath = resolveTsconfig(options);
-  const parsed = ts.getParsedCommandLineOfConfigFile(configPath, {}, {
-    ...ts.sys,
-    onUnRecoverableConfigFileDiagnostic: (diagnostic) => {
-      throw new Error(
-        `sentinel build(nest): could not read ${configPath}: ` + ts.flattenDiagnosticMessageText(diagnostic.messageText, " ")
-      );
-    }
-  });
-  return {
-    fileNames: parsed?.fileNames ?? [],
-    compilerOptions: {
-      ...parsed?.options,
-      // ESM out, so Rollup sees imports and exports rather than an opaque `require` it cannot
-      // follow. The service still SHIPS as CJS: that conversion is the bundler's, further down.
-      module: ts.ModuleKind.ESNext,
-      // Vite consumes the map; the tsconfig's own answer is about a different pipeline.
-      sourceMap: true,
-      inlineSourceMap: false,
-      inlineSources: false,
-      // Types are another target's job, and emitting them here would write into the source tree.
-      declaration: false,
-      declarationMap: false,
-      emitDeclarationOnly: false,
-      noEmit: false,
-      // `composite` projects refuse to emit without a `tsBuildInfoFile`, and there is no
-      // incremental build here to inform.
-      composite: false,
-      incremental: false
-    }
-  };
-}
-function loadTransformers(root, program, declared) {
-  const require2 = createRequire(path.join(root, "noop.js"));
-  return declared.map(({ name, options }) => {
-    let loaded;
-    try {
-      loaded = require2(name);
-    } catch (error) {
-      throw new Error(
-        `sentinel build(nest): the build target declares the transformer \`${name}\`, which cannot be loaded from ${root}: ${error instanceof Error ? error.message : String(error)}`,
-        { cause: error }
-      );
-    }
-    if (typeof loaded.before !== "function") {
-      throw new Error(
-        `sentinel build(nest): \`${name}\` exports no \`before\` factory, so it cannot run as a TypeScript transformer. Building without it would drop whatever it contributes.`
-      );
-    }
-    const factory = loaded.before;
-    return factory(options, program);
-  });
-}
-var decoratorMetadata = (options) => {
-  const typeAware = (options.transformers ?? []).length > 0;
-  let ts;
-  let program;
-  let compilerOptions;
-  let before = [];
-  const withoutTypes = [];
-  return {
-    name: "sentinel:decorator-metadata",
-    // Before Vite's own transform, so esbuild never sees the decorators it cannot handle, and so
-    // the source this plugin reads from the Program is still the source on disk.
-    enforce: "pre",
-    buildStart() {
-      ts = loadCompiler(options.root);
-      const config = readConfig(ts, options);
-      compilerOptions = config.compilerOptions;
-      if (!typeAware) return;
-      program = ts.createProgram(config.fileNames, config.compilerOptions);
-      before = loadTransformers(options.root, program, options.transformers ?? []);
-    },
-    transform(code, id) {
-      if (!TYPESCRIPT_SOURCE.test(id) || id.includes("node_modules")) return null;
-      if (ts === void 0 || compilerOptions === void 0) {
-        throw new Error(
-          `sentinel build(nest): the compiler was never prepared, so ${id} would be emitted with defaults rather than this module's tsconfig.`
-        );
-      }
-      const sourceFile = program?.getSourceFile(id);
-      if (program === void 0 || sourceFile === void 0 || sourceFile.text !== code) {
-        if (typeAware) withoutTypes.push(id);
-        const output = ts.transpileModule(code, { fileName: id, compilerOptions });
-        return { code: output.outputText, map: output.sourceMapText ?? null };
-      }
-      let emitted;
-      let map;
-      program.emit(
-        sourceFile,
-        (fileName, text) => {
-          if (fileName.endsWith(".map")) map = text;
-          else emitted = text;
-        },
-        void 0,
-        false,
-        { before }
-      );
-      if (emitted === void 0) {
-        throw new Error(`sentinel build(nest): TypeScript emitted nothing for ${id}.`);
-      }
-      return { code: emitted, map: map ?? null };
-    },
-    closeBundle() {
-      if (withoutTypes.length === 0) return;
-      const shown = withoutTypes.slice(0, 5).map((file) => path.relative(options.root, file));
-      this.warn(
-        `sentinel build(nest): ${withoutTypes.length} file(s) were emitted without type information, so their decorator metadata may differ from what ts-loader produced (${shown.join(", ")}${withoutTypes.length > shown.length ? ", \u2026" : ""}). They are outside this module's tsconfig, or another plugin rewrote them first.`
-      );
-    }
-  };
-};
-
 // src/roles/build/nest/node-manifest.ts
-import { existsSync as existsSync3, writeFileSync } from "fs";
+import { existsSync as existsSync2, writeFileSync } from "fs";
 import { isBuiltin } from "module";
 import { join as join2 } from "path";
 var DEFAULT_PROVIDED_BY_IMAGE = ["@prisma"];
@@ -260,7 +112,7 @@ var nodeManifest = (options) => {
     },
     async closeBundle() {
       const entry = options.entry ?? "main.js";
-      if (!existsSync3(join2(options.outDir, entry))) return;
+      if (!existsSync2(join2(options.outDir, entry))) return;
       const { createProjectGraphAsync } = await import("nx/src/devkit-exports.js");
       const { createPackageJson, createLockFile, getLockFileName } = await import("@nx/js");
       const graph = await createProjectGraphAsync({ exitOnError: false });
@@ -294,30 +146,10 @@ var assertManifestCovers = (required, manifest, options) => {
   );
 };
 
-// src/roles/build/nest/tsconfig-aliases.ts
-import { readFileSync } from "fs";
-import { join as join3 } from "path";
-var stripLineComments = (json) => json.replace(/^\s*\/\/.*$/gm, "");
-var toAlias = (workspaceRoot, pattern, target) => {
-  const escaped = pattern.replace(/[.*+?^${}()|[\]\\]/g, "\\$&").replace(/\\\*/g, "(.*)");
-  return {
-    find: new RegExp(`^${escaped}$`),
-    replacement: join3(workspaceRoot, target.replace(/\*/g, "$1"))
-  };
-};
-var tsconfigAliases = (workspaceRoot, file = "tsconfig.base.json") => {
-  const raw = readFileSync(join3(workspaceRoot, file), "utf8");
-  const { compilerOptions } = JSON.parse(stripLineComments(raw));
-  return Object.entries(compilerOptions?.paths ?? {}).flatMap(([pattern, targets]) => {
-    const [target] = targets;
-    return target === void 0 ? [] : [toAlias(workspaceRoot, pattern, target)];
-  }).sort((a, b) => b.find.source.length - a.find.source.length);
-};
-
 // src/roles/build/nest/nest-service.ts
 var baseConfig = (options) => {
-  const outDir = join4(options.workspaceRoot, options.outDir ?? `dist/${options.project}`);
-  const entry = join4(options.root, options.entry ?? "src/main.ts");
+  const outDir = join3(options.workspaceRoot, options.outDir ?? `dist/${options.project}`);
+  const entry = join3(options.root, options.entry ?? "src/main.ts");
   return {
     plugins: [
       decoratorMetadata({

package/dist/roles/test/nest/toolchain.d.ts

@@ -0,0 +1,17 @@
+import { ViteUserConfig } from 'vitest/config';
+export { ConfigEnv, TestUserConfig, ViteUserConfig, defineConfig, mergeConfig } from 'vitest/config';
+export { loadEnv } from 'vite';
+export { A as Alias, D as DecoratorMetadataOptions, d as decoratorMetadata, t as tsconfigAliases } from '../../../tsconfig-aliases-Ce6axdJ4.js';
+
+interface NestTestOptions {
+    /** The module's own directory: where its specs live and what its config is relative to. */
+    root: string;
+    /** The workspace root, which is where `tsconfig.base.json` and its path aliases are. */
+    workspaceRoot: string;
+    /** Merged over the base. For what a module genuinely needs to differ on, nothing else. */
+    overrides?: ViteUserConfig;
+}
+/** The config, with the module's own overrides merged over it. */
+declare function nestTestConfig(options: NestTestOptions): ViteUserConfig;
+
+export { type NestTestOptions, nestTestConfig };

package/dist/roles/test/nest/toolchain.js

@@ -0,0 +1,103 @@
+import {
+  decoratorMetadata,
+  tsconfigAliases
+} from "../../../chunk-3TDUIKVQ.js";
+
+// src/roles/test/nest/toolchain.ts
+import { defineConfig, mergeConfig } from "vitest/config";
+import { loadEnv } from "vite";
+
+// src/roles/test/nest/nest-test-config.ts
+import { existsSync } from "fs";
+import { dirname, join } from "path";
+function axiosAlias(root) {
+  const manifest = join(root, "node_modules", "axios", "package.json");
+  return existsSync(manifest) ? [{ find: /^axios$/, replacement: dirname(manifest) }] : [];
+}
+function baseConfig(options) {
+  const { root, workspaceRoot } = options;
+  return {
+    /*
+     * Nest reads constructor parameter types from `emitDecoratorMetadata`, and esbuild does not
+     * emit it. Without this plugin every injected dependency arrives `undefined`, which surfaces
+     * far from its cause. It is the BUILD role's plugin, imported rather than reimplemented: it
+     * already carries the two compile modes copied from nx, and a second copy here would be a
+     * second thing to keep in step.
+     */
+    plugins: [decoratorMetadata({ root })],
+    resolve: {
+      alias: [
+        ...axiosAlias(root),
+        /*
+         * `jest-mock-extended` loads `@jest/globals`, which refuses to run outside jest. 2491
+         * files import it, 104 of them under `libs/` as SHARED helpers, so migrating those helpers
+         * breaks every module still on jest and leaving them breaks every module moved to Vitest.
+         * Old and new therefore do not cohabit on shared helpers, which would have killed the
+         * per-module plan.
+         *
+         * This one line removes the constraint: an unmigrated helper resolves to the Vitest fork
+         * inside an adopted module and keeps resolving to the jest one everywhere else.
+         * `vitest-mock-extended@5.1.1` is a fork of the same package and exports the same names.
+         *
+         * Measured on `mission`: failing suites went from 159 to 10.
+         */
+        { find: /^jest-mock-extended$/, replacement: "vitest-mock-extended" },
+        ...tsconfigAliases(workspaceRoot)
+      ]
+    },
+    test: {
+      globals: true,
+      environment: "node",
+      root,
+      /*
+       * Both extensions, because jest ran both. `**\/*.spec.ts` alone read green while missing
+       * three `.test.ts` files and 23 tests, with nothing saying so: a counter does not compare to
+       * itself, it compares to the reference.
+       */
+      include: ["**/*.spec.ts", "**/*.test.ts"],
+      /*
+       * Kept, and it is not a performance knob. Nest registers metadata as an import SIDE EFFECT:
+       * a decorator writes into a catalog when its module loads. Sharing a module registry across
+       * files lets one suite see what another registered, and the failure appears in whichever
+       * file happens to run second.
+       */
+      isolate: true
+    }
+  };
+}
+function asAliasArray(alias) {
+  if (alias === void 0) return [];
+  if (Array.isArray(alias)) return alias;
+  return Object.entries(alias).map(([find, replacement]) => ({
+    find,
+    replacement
+  }));
+}
+function nestTestConfig(options) {
+  const base = baseConfig(options);
+  if (options.overrides === void 0) return base;
+  return {
+    ...base,
+    ...options.overrides,
+    plugins: [...base.plugins ?? [], ...options.overrides.plugins ?? []],
+    resolve: {
+      ...base.resolve,
+      ...options.overrides.resolve,
+      // The module's own aliases come AFTER sentinel's, so a module that needs to win can.
+      alias: [
+        ...asAliasArray(base.resolve?.alias),
+        ...asAliasArray(options.overrides.resolve?.alias)
+      ]
+    },
+    test: { ...base.test, ...options.overrides.test }
+  };
+}
+export {
+  decoratorMetadata,
+  defineConfig,
+  loadEnv,
+  mergeConfig,
+  nestTestConfig,
+  tsconfigAliases
+};
+//# sourceMappingURL=toolchain.js.map

package/dist/roles/test/setup/nest.d.ts

@@ -0,0 +1,15 @@
+import * as msw_node from 'msw/node';
+
+/**
+ * No default handlers, deliberately.
+ *
+ * The repo's own server had `defaultHandlers = []` too, so nothing is lost. A handler here would
+ * be a Hublo endpoint inside a package meant to be usable by anyone, which is the line between
+ * what sentinel owns (the config) and what an app owns (what it mocks).
+ *
+ * A suite adds its own with `server.use(...)`, which is how all 600 files that touch this already
+ * work.
+ */
+declare const server: msw_node.SetupServer;
+
+export { server };

package/dist/roles/test/setup/nest.js

@@ -0,0 +1,50 @@
+// src/roles/test/setup/nest.ts
+import { afterAll, afterEach, beforeAll } from "vitest";
+
+// src/roles/test/setup/msw.ts
+import { setupServer } from "msw/node";
+var server = setupServer();
+function installMswLifecycle(hooks) {
+  hooks.beforeAll(() => server.listen({ onUnhandledRequest: "error" }));
+  hooks.afterAll(() => server.close());
+}
+
+// src/roles/test/setup/workspace.ts
+function isMissingModule(error) {
+  return error?.code === "ERR_MODULE_NOT_FOUND";
+}
+async function optional(specifier, use) {
+  try {
+    use(await import(
+      /* @vite-ignore */
+      specifier
+    ));
+  } catch (error) {
+    if (!isMissingModule(error)) throw error;
+  }
+}
+async function loadEnvironment() {
+  await optional("dotenv-flow", (module) => {
+    const flow = module;
+    const config = flow.config ?? flow.default?.config;
+    config?.({ silent: true, purge_dotenv: true });
+  });
+}
+async function pinLuxonZone() {
+  await optional("luxon", (module) => {
+    const settings = module.Settings;
+    if (settings) settings.defaultZone = "utc";
+  });
+}
+async function installWorkspaceSetup() {
+  await loadEnvironment();
+  await pinLuxonZone();
+}
+
+// src/roles/test/setup/nest.ts
+installMswLifecycle({ beforeAll, afterEach, afterAll });
+await installWorkspaceSetup();
+export {
+  server
+};
+//# sourceMappingURL=nest.js.map

package/dist/tsconfig-aliases-Ce6axdJ4.d.ts

@@ -0,0 +1,36 @@
+import { Plugin } from 'vite';
+
+/** A TypeScript transformer a service runs at build time, as its build target declares it. */
+interface TransformerDeclaration {
+    /** The package to load it from, e.g. `@nestjs/swagger/plugin`. */
+    name: string;
+    /** Passed to the transformer's own factory, unread here. */
+    options?: Record<string, unknown>;
+}
+interface DecoratorMetadataOptions {
+    /** The module being built. Its tsconfig is the one whose emit must be preserved. */
+    root: string;
+    /**
+     * An explicit tsconfig, when the service does not use either conventional name.
+     *
+     * Relative paths resolve against `root`.
+     */
+    tsconfig?: string;
+    /** The transformers this service declared, translated from its webpack target. */
+    transformers?: readonly TransformerDeclaration[];
+}
+declare const decoratorMetadata: (options: DecoratorMetadataOptions) => Plugin;
+
+interface Alias {
+    find: RegExp;
+    replacement: string;
+}
+/**
+ * Read the mappings from the workspace's base tsconfig.
+ *
+ * Longest pattern first, because Vite takes the first alias that matches and the mappings
+ * overlap by design: `@front/theme/node` must not be swallowed by `@front/theme`.
+ */
+declare const tsconfigAliases: (workspaceRoot: string, file?: string) => Alias[];
+
+export { type Alias as A, type DecoratorMetadataOptions as D, decoratorMetadata as d, tsconfigAliases as t };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@hublo/sentinel",
-  "version": "1.2.0-alpha.34",
+  "version": "1.2.0-alpha.35",
   "description": "One CLI that guards code health across Hublo repos: shared lint/typescript/build/test presets, static & dynamic analysis, and architecture checks.",
   "type": "module",
   "license": "MIT",
@@ -49,6 +49,14 @@
     "./test/react": {
       "types": "./dist/roles/test/react/toolchain.d.ts",
       "import": "./dist/roles/test/react/toolchain.js"
+    },
+    "./test/nest": {
+      "types": "./dist/roles/test/nest/toolchain.d.ts",
+      "import": "./dist/roles/test/nest/toolchain.js"
+    },
+    "./test/setup/nest": {
+      "types": "./dist/roles/test/setup/nest.d.ts",
+      "import": "./dist/roles/test/setup/nest.js"
     }
   },
   "files": [
@@ -62,6 +70,7 @@
     "@nx/eslint-plugin": "23.0.1",
     "@tailwindcss/vite": "4.1.18",
     "@vitejs/plugin-react": "6.0.1",
+    "@vitest/coverage-v8": "4.1.4",
     "commander": "^13.0.0",
     "eslint-plugin-jest-dom": "5.5.0",
     "eslint-plugin-no-barrel-files": "1.2.1",
@@ -69,6 +78,7 @@
     "eslint-plugin-storybook": "10.3.5",
     "eslint-plugin-styled-components-a11y": "2.2.0",
     "jsonc-parser": "^3.3.1",
+    "msw": "1.3.3",
     "nitro": "3.0.260415-beta",
     "oxc-parser": "0.147.0",
     "oxfmt": "0.63.0",