@jomae/catalog 0.9.0 → 0.10.0

package/dist/rules/web-crypto.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"web-crypto.d.ts","sourceRoot":"","sources":["../../src/rules/web-crypto.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,cAAc,CAAC;AAEzC,eAAO,MAAM,SAAS,EAAE,IA+BvB,CAAC"}
+{"version":3,"file":"web-crypto.d.ts","sourceRoot":"","sources":["../../src/rules/web-crypto.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,cAAc,CAAC;AAEzC,eAAO,MAAM,SAAS,EAAE,IAmCvB,CAAC"}

package/dist/rules/web-crypto.js

@@ -27,6 +27,10 @@ export const webCrypto = {
         ],
         snippet: `const bytes = new TextEncoder().encode(text);
 const digest = await crypto.subtle.digest("SHA-256", bytes);`,
+        handRolled: [
+            "a session token, nonce or password-reset key built from Math.random(), which is not a cryptographic source and is predictable from earlier outputs",
+            "a SHA-256 or HMAC implementation pasted into the project as a single file of bit-shifting helpers",
+        ],
     },
 };
 //# sourceMappingURL=web-crypto.js.map

package/dist/rules/web-crypto.js.map

@@ -1 +1 @@
-{"version":3,"file":"web-crypto.js","sourceRoot":"","sources":["../../src/rules/web-crypto.ts"],"names":[],"mappings":"AAEA,MAAM,CAAC,MAAM,SAAS,GAAS;IAC7B,EAAE,EAAE,YAAY;IAChB,KAAK,EAAE,wBAAwB;IAC/B,QAAQ,EAAE,YAAY;IACtB,QAAQ,EAAE,CAAC,WAAW,EAAE,WAAW,EAAE,aAAa,CAAC;IACnD,UAAU,EAAE,CAAC,kBAAkB,CAAC;IAChC,MAAM,EAAE,eAAe;IACvB,KAAK,EAAE;QACL,SAAS,EACP,qbAAqb;QACvb,OAAO,EAAE;;;;;;EAMX;QACE,MAAM,EAAE,+DAA+D;KACxE;IACD,KAAK,EAAE;QACL,IAAI,EAAE,8DAA8D;QACpE,MAAM,EAAE;YACN,yJAAyJ;YACzJ,kKAAkK;YAClK,kHAAkH;YAClH,2KAA2K;YAC3K,wJAAwJ;SACzJ;QACD,OAAO,EAAE;6DACgD;KAC1D;CACF,CAAC"}
+{"version":3,"file":"web-crypto.js","sourceRoot":"","sources":["../../src/rules/web-crypto.ts"],"names":[],"mappings":"AAEA,MAAM,CAAC,MAAM,SAAS,GAAS;IAC7B,EAAE,EAAE,YAAY;IAChB,KAAK,EAAE,wBAAwB;IAC/B,QAAQ,EAAE,YAAY;IACtB,QAAQ,EAAE,CAAC,WAAW,EAAE,WAAW,EAAE,aAAa,CAAC;IACnD,UAAU,EAAE,CAAC,kBAAkB,CAAC;IAChC,MAAM,EAAE,eAAe;IACvB,KAAK,EAAE;QACL,SAAS,EACP,qbAAqb;QACvb,OAAO,EAAE;;;;;;EAMX;QACE,MAAM,EAAE,+DAA+D;KACxE;IACD,KAAK,EAAE;QACL,IAAI,EAAE,8DAA8D;QACpE,MAAM,EAAE;YACN,yJAAyJ;YACzJ,kKAAkK;YAClK,kHAAkH;YAClH,2KAA2K;YAC3K,wJAAwJ;SACzJ;QACD,OAAO,EAAE;6DACgD;QACzD,UAAU,EAAE;YACV,oJAAoJ;YACpJ,mGAAmG;SACpG;KACF;CACF,CAAC"}

package/dist/rules/web-locks.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"web-locks.d.ts","sourceRoot":"","sources":["../../src/rules/web-locks.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,cAAc,CAAC;AAEzC,eAAO,MAAM,QAAQ,EAAE,IAkCtB,CAAC"}
+{"version":3,"file":"web-locks.d.ts","sourceRoot":"","sources":["../../src/rules/web-locks.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,cAAc,CAAC;AAEzC,eAAO,MAAM,QAAQ,EAAE,IAsCtB,CAAC"}

package/dist/rules/web-locks.js

@@ -30,6 +30,10 @@ await navigator.locks.request("cache", { mode: "shared" }, async () => {
         snippet: `await navigator.locks.request("sync-outbox", async () => {
   await flushPendingWrites();
 });`,
+        handRolled: [
+            "a boolean flag guarding an async section, set before the work and cleared in a finally",
+            "a promise chained onto the previous one in a module-level variable, so calls run one at a time",
+        ],
     },
 };
 //# sourceMappingURL=web-locks.js.map

package/dist/rules/web-locks.js.map

@@ -1 +1 @@
-{"version":3,"file":"web-locks.js","sourceRoot":"","sources":["../../src/rules/web-locks.ts"],"names":[],"mappings":"AAEA,MAAM,CAAC,MAAM,QAAQ,GAAS;IAC5B,EAAE,EAAE,WAAW;IACf,KAAK,EAAE,+BAA+B;IACtC,QAAQ,EAAE,YAAY;IACtB,QAAQ,EAAE,CAAC,aAAa,EAAE,YAAY,EAAE,UAAU,EAAE,SAAS,CAAC;IAC9D,UAAU,EAAE,CAAC,WAAW,CAAC;IACzB,MAAM,EAAE,2BAA2B;IACnC,KAAK,EAAE;QACL,SAAS,EACP,4cAA4c;QAC9c,OAAO,EAAE;;;;;;;IAOT;QACA,MAAM,EAAE,gEAAgE;KACzE;IACD,KAAK,EAAE;QACL,IAAI,EAAE,2EAA2E;QACjF,MAAM,EAAE;YACN,8LAA8L;YAC9L,iSAAiS;YACjS,4JAA4J;YAC5J,4LAA4L;YAC5L,+TAA+T;YAC/T,mMAAmM;SACpM;QACD,OAAO,EAAE;;IAET;KACD;CACF,CAAC"}
+{"version":3,"file":"web-locks.js","sourceRoot":"","sources":["../../src/rules/web-locks.ts"],"names":[],"mappings":"AAEA,MAAM,CAAC,MAAM,QAAQ,GAAS;IAC5B,EAAE,EAAE,WAAW;IACf,KAAK,EAAE,+BAA+B;IACtC,QAAQ,EAAE,YAAY;IACtB,QAAQ,EAAE,CAAC,aAAa,EAAE,YAAY,EAAE,UAAU,EAAE,SAAS,CAAC;IAC9D,UAAU,EAAE,CAAC,WAAW,CAAC;IACzB,MAAM,EAAE,2BAA2B;IACnC,KAAK,EAAE;QACL,SAAS,EACP,4cAA4c;QAC9c,OAAO,EAAE;;;;;;;IAOT;QACA,MAAM,EAAE,gEAAgE;KACzE;IACD,KAAK,EAAE;QACL,IAAI,EAAE,2EAA2E;QACjF,MAAM,EAAE;YACN,8LAA8L;YAC9L,iSAAiS;YACjS,4JAA4J;YAC5J,4LAA4L;YAC5L,+TAA+T;YAC/T,mMAAmM;SACpM;QACD,OAAO,EAAE;;IAET;QACA,UAAU,EAAE;YACV,wFAAwF;YACxF,gGAAgG;SACjG;KACF;CACF,CAAC"}

package/dist/tier-diff.d.ts

@@ -0,0 +1,55 @@
+import type { BaselineStatus } from "./schema.ts";
+/**
+ * Compares two Baseline snapshots and says which rules changed tier.
+ *
+ * Pure, and deliberately takes plain maps rather than reaching for
+ * `web-features` itself: the caller holds the committed snapshot and the live
+ * package, and this only has to know how to subtract one from the other. That
+ * keeps it inside the same purity walk as the rest of the catalog and makes
+ * it testable without a network or a filesystem.
+ */
+/** The shape both the committed snapshot and web-features agree on. */
+export interface TierEntry {
+    baseline: "high" | "low" | false;
+}
+/** web-features' own shape, named so callers need no positional cast. */
+export type LiveFeatures = Readonly<Record<string, {
+    status?: {
+        baseline?: "high" | "low" | false;
+    };
+}>>;
+export type TierDirection = "promotion" | "regression" | "missing";
+interface TierChangeBase {
+    ruleId: string;
+    featureId: string;
+    from: BaselineStatus;
+}
+/**
+ * A discriminated union rather than a nullable `to`, because "gone from the
+ * live data" has no destination tier and a shared shape forces every consumer
+ * to write a null branch it can never reach. Narrowing on `direction` hands
+ * the report builder a `to` it can print without checking.
+ */
+export type TierChange = (TierChangeBase & {
+    direction: "promotion" | "regression";
+    to: BaselineStatus;
+}) | (TierChangeBase & {
+    direction: "missing";
+});
+export declare function tierOf(baseline: "high" | "low" | false | undefined): BaselineStatus;
+/**
+ * Every tier move among the features some rule actually requires.
+ *
+ * A feature present in the committed snapshot and absent from the live data
+ * is reported as `missing` rather than skipped. That is what an upstream
+ * rename looks like, and skipping it would drop the one case most likely to
+ * need a person: the rule keeps rendering a tier from a feature ID that no
+ * longer exists, and `check:freshness` only fails once the snapshot is
+ * regenerated without it.
+ */
+export declare function diffTiers(rules: readonly {
+    id: string;
+    featureIds: readonly string[];
+}[], committed: Readonly<Record<string, TierEntry>>, live: LiveFeatures): TierChange[];
+export {};
+//# sourceMappingURL=tier-diff.d.ts.map

package/dist/tier-diff.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"tier-diff.d.ts","sourceRoot":"","sources":["../src/tier-diff.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAElD;;;;;;;;GAQG;AAEH,uEAAuE;AACvE,MAAM,WAAW,SAAS;IACxB,QAAQ,EAAE,MAAM,GAAG,KAAK,GAAG,KAAK,CAAC;CAClC;AAED,yEAAyE;AACzE,MAAM,MAAM,YAAY,GAAG,QAAQ,CACjC,MAAM,CAAC,MAAM,EAAE;IAAE,MAAM,CAAC,EAAE;QAAE,QAAQ,CAAC,EAAE,MAAM,GAAG,KAAK,GAAG,KAAK,CAAA;KAAE,CAAA;CAAE,CAAC,CACnE,CAAC;AAEF,MAAM,MAAM,aAAa,GAAG,WAAW,GAAG,YAAY,GAAG,SAAS,CAAC;AAEnE,UAAU,cAAc;IACtB,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,EAAE,MAAM,CAAC;IAClB,IAAI,EAAE,cAAc,CAAC;CACtB;AAED;;;;;GAKG;AACH,MAAM,MAAM,UAAU,GAClB,CAAC,cAAc,GAAG;IAChB,SAAS,EAAE,WAAW,GAAG,YAAY,CAAC;IACtC,EAAE,EAAE,cAAc,CAAC;CACpB,CAAC,GACF,CAAC,cAAc,GAAG;IAAE,SAAS,EAAE,SAAS,CAAA;CAAE,CAAC,CAAC;AAUhD,wBAAgB,MAAM,CACpB,QAAQ,EAAE,MAAM,GAAG,KAAK,GAAG,KAAK,GAAG,SAAS,GAC3C,cAAc,CAKhB;AAED;;;;;;;;;GASG;AACH,wBAAgB,SAAS,CACvB,KAAK,EAAE,SAAS;IAAE,EAAE,EAAE,MAAM,CAAC;IAAC,UAAU,EAAE,SAAS,MAAM,EAAE,CAAA;CAAE,EAAE,EAC/D,SAAS,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC,EAC9C,IAAI,EAAE,YAAY,GACjB,UAAU,EAAE,CAMd"}

package/dist/tier-diff.js

@@ -0,0 +1,61 @@
+/** Higher is better supported, so a rise in rank is a promotion. */
+const RANK = {
+    unknown: 0,
+    limited: 1,
+    newly: 2,
+    widely: 3,
+};
+export function tierOf(baseline) {
+    if (baseline === "high")
+        return "widely";
+    if (baseline === "low")
+        return "newly";
+    if (baseline === false)
+        return "limited";
+    return "unknown";
+}
+/**
+ * Every tier move among the features some rule actually requires.
+ *
+ * A feature present in the committed snapshot and absent from the live data
+ * is reported as `missing` rather than skipped. That is what an upstream
+ * rename looks like, and skipping it would drop the one case most likely to
+ * need a person: the rule keeps rendering a tier from a feature ID that no
+ * longer exists, and `check:freshness` only fails once the snapshot is
+ * regenerated without it.
+ */
+export function diffTiers(rules, committed, live) {
+    return rules.flatMap((rule) => rule.featureIds
+        .map((featureId) => compare(rule.id, featureId, committed, live))
+        .filter((change) => change !== null));
+}
+/** One feature of one rule, or null when there is nothing to report. */
+function compare(ruleId, featureId, committed, live) {
+    // One lookup each, rather than a presence check plus a cast undoing what
+    // the check established. Neither the generated snapshot nor web-features
+    // sets a key to an explicit undefined, so the two read the same.
+    const entry = committed[featureId];
+    if (entry === undefined)
+        return null;
+    const from = tierOf(entry.baseline);
+    const liveEntry = live[featureId];
+    if (liveEntry === undefined) {
+        return { ruleId, featureId, direction: "missing", from };
+    }
+    // `?? false` to match how refresh-baseline.ts writes the snapshot. A
+    // feature web-features publishes with no status at all, masonry today,
+    // becomes `false` there and would read as `unknown` here, so the two
+    // disagreed by construction and the report opened with a regression that
+    // was never real. Read it the same way the writer does.
+    const to = tierOf(liveEntry.status?.baseline ?? false);
+    if (to === from)
+        return null;
+    return {
+        ruleId,
+        featureId,
+        direction: RANK[to] > RANK[from] ? "promotion" : "regression",
+        from,
+        to,
+    };
+}
+//# sourceMappingURL=tier-diff.js.map

package/dist/tier-diff.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"tier-diff.js","sourceRoot":"","sources":["../src/tier-diff.ts"],"names":[],"mappings":"AA2CA,oEAAoE;AACpE,MAAM,IAAI,GAAmC;IAC3C,OAAO,EAAE,CAAC;IACV,OAAO,EAAE,CAAC;IACV,KAAK,EAAE,CAAC;IACR,MAAM,EAAE,CAAC;CACV,CAAC;AAEF,MAAM,UAAU,MAAM,CACpB,QAA4C;IAE5C,IAAI,QAAQ,KAAK,MAAM;QAAE,OAAO,QAAQ,CAAC;IACzC,IAAI,QAAQ,KAAK,KAAK;QAAE,OAAO,OAAO,CAAC;IACvC,IAAI,QAAQ,KAAK,KAAK;QAAE,OAAO,SAAS,CAAC;IACzC,OAAO,SAAS,CAAC;AACnB,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,SAAS,CACvB,KAA+D,EAC/D,SAA8C,EAC9C,IAAkB;IAElB,OAAO,KAAK,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,EAAE,CAC5B,IAAI,CAAC,UAAU;SACZ,GAAG,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,SAAS,EAAE,IAAI,CAAC,CAAC;SAChE,MAAM,CAAC,CAAC,MAAM,EAAwB,EAAE,CAAC,MAAM,KAAK,IAAI,CAAC,CAC7D,CAAC;AACJ,CAAC;AAED,wEAAwE;AACxE,SAAS,OAAO,CACd,MAAc,EACd,SAAiB,EACjB,SAA8C,EAC9C,IAAkB;IAElB,yEAAyE;IACzE,yEAAyE;IACzE,iEAAiE;IACjE,MAAM,KAAK,GAAG,SAAS,CAAC,SAAS,CAAC,CAAC;IACnC,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,IAAI,CAAC;IACrC,MAAM,IAAI,GAAG,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;IAEpC,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,CAAC,CAAC;IAClC,IAAI,SAAS,KAAK,SAAS,EAAE,CAAC;QAC5B,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,SAAS,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC;IAC3D,CAAC;IAED,qEAAqE;IACrE,uEAAuE;IACvE,qEAAqE;IACrE,yEAAyE;IACzE,wDAAwD;IACxD,MAAM,EAAE,GAAG,MAAM,CAAC,SAAS,CAAC,MAAM,EAAE,QAAQ,IAAI,KAAK,CAAC,CAAC;IACvD,IAAI,EAAE,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC;IAE7B,OAAO;QACL,MAAM;QACN,SAAS;QACT,SAAS,EAAE,IAAI,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,YAAY;QAC7D,IAAI;QACJ,EAAE;KACH,CAAC;AACJ,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@jomae/catalog",
-  "version": "0.9.0",
+  "version": "0.10.0",
   "type": "module",
   "description": "The rule catalog behind youmightnotneed. Maps npm packages to the CSS, HTML, or Web API that replaces them.",
   "license": "MIT",