@inerrata-corporation/errata 2.0.6-dev.2250 → 2.0.6-dev.2266

package/errata.mjs

@@ -16488,6 +16488,66 @@ function parseGemspec(path2, text) {
   }
   return deps;
 }
+function tomlTable(text, header) {
+  const escaped = header.replace(/[.[\]]/g, "\\$&");
+  return new RegExp(`^\\s*\\[${escaped}\\]([\\s\\S]*?)(?=^\\s*\\[|(?![\\s\\S]))`, "m").exec(text)?.[1] ?? null;
+}
+function tomlName(table) {
+  return table && /^\s*name\s*=\s*["']([^"']+)["']/m.exec(table)?.[1]?.trim() || null;
+}
+function pomSelf(text) {
+  const parentGroup = /<groupId>([^<]+)<\/groupId>/.exec(/<parent>([\s\S]*?)<\/parent>/.exec(text)?.[1] ?? "")?.[1];
+  const own = text.replace(POM_FOREIGN_BLOCKS, "");
+  const group = (/<groupId>([^<]+)<\/groupId>/.exec(own)?.[1] ?? parentGroup)?.trim();
+  const artifact = /<artifactId>([^<]+)<\/artifactId>/.exec(own)?.[1]?.trim();
+  if (!group) return [];
+  const self = [{ ecosystem: "maven", kind: "namespace", value: group }];
+  if (artifact) self.push({ ecosystem: "maven", kind: "name", value: mavenName(group, artifact) });
+  return self;
+}
+function parseManifestSelf(path2, text) {
+  const file2 = basename(path2);
+  if (file2 === "package.json") {
+    let obj;
+    try {
+      obj = JSON.parse(text);
+    } catch {
+      return [];
+    }
+    const name2 = obj && typeof obj === "object" ? obj["name"] : null;
+    if (typeof name2 !== "string" || !name2.trim()) return [];
+    const self = [{ ecosystem: "npm", kind: "name", value: name2.trim() }];
+    const scope = /^(@[^/]+)\//.exec(name2.trim())?.[1];
+    if (scope) self.push({ ecosystem: "npm", kind: "namespace", value: scope });
+    return self;
+  }
+  if (file2 === "pom.xml") return pomSelf(text);
+  if (file2 === "build.gradle" || file2 === "build.gradle.kts") {
+    const group = /^\s*group\s*(?:=\s*)?["']([^"']+)["']/m.exec(text)?.[1]?.trim();
+    return group ? [{ ecosystem: "maven", kind: "namespace", value: group }] : [];
+  }
+  if (file2 === "Cargo.toml") {
+    const name2 = tomlName(tomlTable(text, "package"));
+    return name2 ? [{ ecosystem: "cargo", kind: "name", value: name2 }] : [];
+  }
+  if (file2 === "pyproject.toml") {
+    const name2 = tomlName(tomlTable(text, "project")) ?? tomlName(tomlTable(text, "tool.poetry"));
+    return name2 ? [{ ecosystem: "pypi", kind: "name", value: name2 }] : [];
+  }
+  if (file2 === "go.mod") {
+    const module2 = /^\s*module\s+(\S+)/m.exec(text)?.[1];
+    return module2 ? [{ ecosystem: "golang", kind: "namespace", value: module2 }] : [];
+  }
+  if (file2.endsWith(".gemspec")) {
+    const name2 = /\.name\s*=\s*["']([^"']+)["']/.exec(text)?.[1]?.trim();
+    return name2 ? [{ ecosystem: "gem", kind: "name", value: name2 }] : [];
+  }
+  if (file2.endsWith(".csproj") || file2.endsWith(".fsproj")) {
+    const id = /<PackageId>([^<]+)<\/PackageId>/.exec(text)?.[1]?.trim() ?? file2.replace(/\.(cs|fs)proj$/, "");
+    return id ? [{ ecosystem: "nuget", kind: "name", value: id }] : [];
+  }
+  return [];
+}
 function parseManifest(path2, text) {
   const name2 = basename(path2);
   if (name2.endsWith(".csproj") || name2.endsWith(".fsproj")) return parseCsproj(path2, text);
@@ -16554,7 +16614,7 @@ function depsForUnit(spine, touched, readParentText) {
   for (const purl of declared.keys()) context.delete(purl);
   return { declared: [...declared.values()], context: [...context.values()] };
 }
-var ECOSYSTEM_SYSTEM, ECOSYSTEM_LANGUAGE, TOOL_KINDS, MANIFEST_PATH_RE, LOCAL_IMAGE_RE, PACKAGE_JSON_SECTIONS, GRADLE_CONFIGS;
+var ECOSYSTEM_SYSTEM, ECOSYSTEM_LANGUAGE, TOOL_KINDS, MANIFEST_PATH_RE, LOCAL_IMAGE_RE, PACKAGE_JSON_SECTIONS, GRADLE_CONFIGS, POM_FOREIGN_BLOCKS;
 var init_manifests = __esm({
   "../../packages/shared/src/manifests.ts"() {
     "use strict";
@@ -16586,6 +16646,7 @@ var init_manifests = __esm({
     LOCAL_IMAGE_RE = /^(openbane|local)[/-]|:local$/;
     PACKAGE_JSON_SECTIONS = ["dependencies", "devDependencies", "peerDependencies", "optionalDependencies"];
     GRADLE_CONFIGS = "implementation|api|compileOnly|compileOnlyApi|runtimeOnly|testImplementation|testCompileOnly|testRuntimeOnly|annotationProcessor|kapt|ksp|classpath|developmentOnly";
+    POM_FOREIGN_BLOCKS = /<(parent|dependencies|dependencyManagement|build|profiles|reporting|distributionManagement|modules)>[\s\S]*?<\/\1>/g;
   }
 });
 
@@ -16737,6 +16798,7 @@ __export(src_exports, {
   pagerankEdgeTypes: () => pagerankEdgeTypes,
   parseGemfileLock: () => parseGemfileLock,
   parseManifest: () => parseManifest,
+  parseManifestSelf: () => parseManifestSelf,
   parsePackageLockJson: () => parsePackageLockJson,
   parsePackageRef: () => parsePackageRef,
   parsePnpmLock: () => parsePnpmLock,
@@ -76063,8 +76125,42 @@ var PUBLIC_REGISTRY_POLICY = {
   npmPrivateScopes: /* @__PURE__ */ new Set(),
   goPrivatePatterns: [],
   privateGemNames: /* @__PURE__ */ new Set(),
-  selfTokens: []
+  selfTokens: [],
+  selfNames: /* @__PURE__ */ new Set(),
+  selfNamespaces: /* @__PURE__ */ new Set(),
+  selfComplete: true
 };
+function ecoKey(ecosystem, name2) {
+  return `${ecosystem.toLowerCase()}\0${name2.toLowerCase()}`;
+}
+function selfIdentityFrom(selves) {
+  const selfNames = /* @__PURE__ */ new Set();
+  const selfNamespaces = /* @__PURE__ */ new Set();
+  for (const s of selves) {
+    (s.kind === "name" ? selfNames : selfNamespaces).add(ecoKey(s.ecosystem, s.value));
+  }
+  return { selfNames, selfNamespaces };
+}
+function namespacesOf(ecosystem, name2) {
+  switch (ecosystem) {
+    case "npm": {
+      const scope = npmScopeOf(name2);
+      return scope ? [scope] : [];
+    }
+    case "maven":
+      return [name2.split(":")[0] ?? ""].filter(Boolean);
+    case "golang": {
+      const parts2 = name2.split("/");
+      return parts2.map((_, i2) => parts2.slice(0, i2 + 1).join("/"));
+    }
+    default:
+      return [];
+  }
+}
+function isWorkspaceSelf(ecosystem, name2, policy) {
+  if (policy.selfNames.has(ecoKey(ecosystem, name2))) return true;
+  return namespacesOf(ecosystem, name2).some((ns) => policy.selfNamespaces.has(ecoKey(ecosystem, ns)));
+}
 function hostOf(value) {
   try {
     return new URL(value.trim()).hostname.toLowerCase();
@@ -76327,12 +76423,15 @@ function loadRegistryPolicy(root, env2 = process.env, repoLocator) {
   )) {
     blocked.add("maven");
   }
+  const scan2 = scanManifests(root);
   return {
     blockedEcosystems: blocked,
     npmPrivateScopes: npm.privateScopes,
     goPrivatePatterns,
     privateGemNames: privateGemNamesIn(gemfiles),
-    selfTokens: selfTokensFromLocator(repoLocator)
+    selfTokens: selfTokensFromLocator(repoLocator),
+    ...selfIdentityFrom(scan2.self),
+    selfComplete: scan2.complete
   };
 }
 function npmScopeOf(name2) {
@@ -76343,6 +76442,7 @@ function npmScopeOf(name2) {
 function isPublicDep(dep, policy) {
   const ecosystem = dep.ecosystem.toLowerCase();
   if (policy.blockedEcosystems.has(ecosystem)) return false;
+  if (isWorkspaceSelf(ecosystem, dep.name, policy)) return false;
   switch (ecosystem) {
     case "npm": {
       const scope = npmScopeOf(dep.name);
@@ -76423,7 +76523,6 @@ function retrievalStackTokens(input) {
   let fromLockfile = 0;
   let fromManifest = 0;
   const lockfileKeys = /* @__PURE__ */ new Set();
-  const ecoKey = (ecosystem, name2) => `${ecosystem.toLowerCase()}\0${name2.toLowerCase()}`;
   if (packagesAllowed) {
     for (const d of input.direct ?? []) {
       lockfileKeys.add(ecoKey(d.ecosystem, d.name));
@@ -76431,7 +76530,7 @@ function retrievalStackTokens(input) {
       add({ ecosystem: d.ecosystem.toLowerCase(), name: d.name, weight: d.importers });
     }
     const counted = /* @__PURE__ */ new Map();
-    for (const d of manifestDeps) {
+    for (const d of registry2.selfComplete ? manifestDeps : []) {
       if (RUNTIME_KINDS.has(d.kind)) continue;
       const ecosystem = d.ecosystem.toLowerCase();
       if (lockfileKeys.has(ecoKey(ecosystem, d.name))) continue;
@@ -76521,7 +76620,13 @@ function manifestPaths(root) {
       stdio: ["ignore", "pipe", "ignore"]
     });
     const paths = out2.split("\0").filter((f) => f && isManifestPath(f));
-    if (paths.length > 0) return paths.slice(0, MANIFEST_SCAN_CAP);
+    if (paths.length > 0) {
+      return {
+        paths: paths.slice(0, MANIFEST_SCAN_CAP),
+        tracked: true,
+        truncated: paths.length > MANIFEST_SCAN_CAP
+      };
+    }
   } catch {
   }
   const ROOT_MANIFESTS = [
@@ -76541,14 +76646,24 @@ function manifestPaths(root) {
     "Dockerfile",
     "project.godot"
   ];
-  return ROOT_MANIFESTS.filter((f) => existsSync19(join23(root, f)));
+  return {
+    paths: ROOT_MANIFESTS.filter((f) => existsSync19(join23(root, f))),
+    tracked: false,
+    truncated: false
+  };
 }
+var WORKSPACE_MARKERS = ["pnpm-workspace.yaml", "lerna.json", "go.work", "settings.gradle", "settings.gradle.kts"];
+function rootDeclaresWorkspace(root, texts) {
+  if (WORKSPACE_MARKERS.some((f) => existsSync19(join23(root, f)))) return true;
+  return /"workspaces"\s*:/.test(texts.get("package.json") ?? "") || /<modules>/.test(texts.get("pom.xml") ?? "") || /^\s*\[workspace\]/m.test(texts.get("Cargo.toml") ?? "");
+}
+var EMPTY_SCAN = { deps: [], self: [], complete: true };
 var manifestCache = /* @__PURE__ */ new Map();
-function readManifestDependencies(root) {
-  const paths = manifestPaths(root);
+function scanManifests(root) {
+  const { paths, tracked, truncated } = manifestPaths(root);
   if (paths.length === 0) {
     manifestCache.delete(root);
-    return [];
+    return EMPTY_SCAN;
   }
   const texts = /* @__PURE__ */ new Map();
   const stamps = [];
@@ -76563,16 +76678,26 @@ function readManifestDependencies(root) {
   }
   const key = stamps.join("|");
   const hit = manifestCache.get(root);
-  if (hit && hit.key === key) return hit.deps;
-  let deps = [];
+  if (hit && hit.key === key) return hit.scan;
+  const scan2 = {
+    deps: [],
+    self: [],
+    complete: !truncated && (tracked || !rootDeclaresWorkspace(root, texts))
+  };
   try {
     const spine = buildSpine("workspace", [...texts.keys()], (p) => texts.get(p) ?? "");
-    deps = Object.values(spine.manifests).flat();
+    scan2.deps = Object.values(spine.manifests).flat();
+    for (const [path2, text] of texts) scan2.self.push(...parseManifestSelf(path2, text));
   } catch {
-    deps = [];
+    scan2.deps = [];
+    scan2.self = [];
+    scan2.complete = false;
   }
-  manifestCache.set(root, { key, deps });
-  return deps;
+  manifestCache.set(root, { key, scan: scan2 });
+  return scan2;
+}
+function readManifestDependencies(root) {
+  return scanManifests(root).deps;
 }
 
 // src/git-sensor.ts
@@ -77921,7 +78046,7 @@ function createWatchBreaker(deps) {
 }
 
 // src/engine.ts
-var DAEMON_VERSION = true ? "2.0.6-dev.2250" : "2.0.0-alpha.0";
+var DAEMON_VERSION = true ? "2.0.6-dev.2266" : "2.0.0-alpha.0";
 var IGNORED_PATH = /[\\/](?:\.git|node_modules|\.errata|\.claude|\.codex|\.cursor|\.turbo|\.next|dist|coverage|test-results|playwright-report|__pycache__)(?:[\\/]|$)/;
 var IGNORED_NOISE = /castalia\.db|eventlog\.sqlite|turn-cursors/;
 var GIT_OP_MUTE_MS = 4e3;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@inerrata-corporation/errata",
-  "version": "2.0.6-dev.2250",
+  "version": "2.0.6-dev.2266",
   "description": "errata - local-first observation engine for AI coding agents",
   "type": "module",
   "bin": {