@pho9ubenaa/siro 0.2.0 → 0.3.0

package/CHANGELOG.md

@@ -1,5 +1,24 @@
 # Changelog
 
+## [0.3.0]
+
+### Features
+
+- **Project policy selection**: `--project-type application|package`, `SiroConfig.projectType`, and `LintOptions.projectType` distinguish dependency-consuming applications from published packages. Omit the selection to infer policy per package-manager binding.
+- **Scoped custom rules**: `Rule.projectTypes` follows explicit or inferred policy for npm-family and Deno bindings.
+
+### Fixes
+
+- Programmatic `lintCommand` calls reject unsupported project type, package manager, and severity values instead of returning misleading results.
+- Malformed custom rules from config files or untyped programmatic callers are rejected before rule merging and evaluation.
+- Empty and whitespace-only package names no longer activate published-package policy.
+- Unscoped Deno rules no longer read `deno.json` solely for project-type inference.
+- The published `package.json#bin` preserves exit code 70 when a reporter or custom rule crashes, and subprocess tests now execute that declared bin directly.
+- Malformed or cyclic YAML configurations are rejected, while TOML configurations with a leading UTF-8 BOM are accepted.
+- Deno release-age validation accepts documented default forms and rejects invalid, partial, or zero ages.
+- Repeated reporter selectors and non-boolean Yarn strict SSL values are rejected as invalid input.
+- Findings without automatic remediation operations no longer report themselves as fixable.
+
 ## [0.2.0]
 
 ### Breaking Changes

package/README.md

@@ -31,7 +31,7 @@ npx @pho9ubenaa/siro lint --reporter json # machine-readable output with fix ops
 - **PM-aware severities.** When a manager's documented default already satisfies a rule (e.g.
   Yarn's `enableScripts: false`, aube's `preferFrozenLockfile: true`), the finding is demoted
   to `info` so CI noise stays proportional to real risk.
-- **Machine-readable remediation.** Every finding carries `fix` operations and `manualSteps` in the
+- **Machine-readable remediation.** Every finding carries `fix` operations or `manualSteps` in the
   JSON output — hand it to an agent skill or editor plugin that edits the files and re-runs
   `siro lint` until it exits `0`. See [JSON output](docs/json-output.md).
 - **Lint with severities.** `error` fails CI by default; `--severity warn` tightens the gate.
@@ -62,6 +62,7 @@ that backs those suffixes.
 siro <lint|check> [path] [options]
 
  --pm <npm|pnpm|yarn|bun|deno|aube> Target a specific package manager (auto-detected; required if detection finds nothing)
+ --project-type <application|package> Select application or published-package policy (default auto)
  --reporter <pretty|json|github> Output format (default pretty)
  --severity <error|warn|info> Show and fail on findings at or above this level
  --json Shortcut for --reporter json
@@ -70,7 +71,7 @@ siro <lint|check> [path] [options]
 
 `check` is an alias of `lint` (same flags, same exit codes) — provided so `siro check` reads naturally in CI scripts.
 
-Exit codes: `0` clean · `1` findings at/above threshold · `2` usage error.
+Exit codes: `0` clean · `1` findings at/above threshold · `2` usage error · `70` uncaught exception (a siro bug or a throwing reporter/custom rule).
 
 ## How is this different from `npm audit` / `osv-scanner`?
 

package/dist/cli.js

@@ -1,5 +1,4 @@
 #!/usr/bin/env node
-import { run } from './cli.mjs';
+import { runMain } from './cli.mjs';
 
-const code = await run(process.argv.slice(2));
-process.exitCode = code;
+await runMain(process.argv.slice(2));

package/dist/cli.mjs

@@ -1,5 +1,5 @@
 #!/usr/bin/env node
-import { C as isPM, E as UsageError, O as SiroError, S as SEVERITIES, k as asAbsPath, m as BUILTIN_REPORTER_NAMES, n as lintCommand, p as isNodeError, t as nodeIO, v as version, w as isSeverity, x as PMS } from "./node-io-Cb8nixgE.mjs";
+import { A as isSeverity, D as PMS, F as asAbsPath, M as UsageError, O as SEVERITIES, P as SiroError, _ as isSupportedNodeVersion, b as JSON_REPORTER_NAME, g as SUPPORTED_NODE_RANGE, h as isProjectType, k as isPM, m as PROJECT_TYPES, n as lintCommand, p as isNodeError, t as nodeIO, v as BUILTIN_REPORTER_NAMES, w as version, y as DEFAULT_REPORTER_NAME } from "./node-io-CUcMwlGH.mjs";
 import path from "node:path";
 import { pathToFileURL } from "node:url";
 import { cac } from "cac";
@@ -17,15 +17,25 @@ const isCommandName = (value) => COMMANDS.some((cmd) => cmd === value);
 //#endregion
 //#region src/cli/flags.ts
 const ARGS_OFFSET$1 = 2;
-/** Flags that consume the following argv token; pre-cac scanners skip that token. */
-const VALUE_FLAGS = new Set(Object.entries({
+const FLAGS = {
 	json: { takesValue: false },
 	pm: { takesValue: true },
+	projectType: {
+		cliName: "project-type",
+		takesValue: true
+	},
 	reporter: { takesValue: true },
 	severity: { takesValue: true }
-}).filter(([, meta]) => meta.takesValue).map(([name]) => name));
+};
+const flagCliName = (name, meta) => {
+	if (typeof meta.cliName !== "undefined") return meta.cliName;
+	return name;
+};
+/** Flags that consume the following argv token; pre-cac scanners skip that token. */
+const VALUE_FLAGS = new Set(Object.entries(FLAGS).filter(([, meta]) => meta.takesValue).flatMap(([name, meta]) => [name, flagCliName(name, meta)]));
 const LINT_FLAGS = [
 	"pm",
+	"projectType",
 	"reporter",
 	"json",
 	"severity"
@@ -84,7 +94,7 @@ const scanHelpTokens = (argv) => {
 	}
 	return {
 		asksHelp: state.asksHelp,
-		first: state.first || [].pop()
+		first: state.first || void 0
 	};
 };
 const resolveTarget = (first) => {
@@ -97,7 +107,7 @@ const resolveTarget = (first) => {
 */
 const detectHelpFlag = (argv) => {
 	const { asksHelp, first } = scanHelpTokens(argv);
-	if (!asksHelp) return [].pop();
+	if (!asksHelp) return;
 	return { target: resolveTarget(first) };
 };
 /**
@@ -121,8 +131,6 @@ const detectVersionFlag = (argv) => {
 
 //#endregion
 //#region src/cli/parsers.ts
-const FIRST_INDEX$1 = 0;
-const MIN_NODE_MAJOR = 20;
 const rejectUnknownFlags = (flags, allowed, scope) => {
 	for (const key of Object.keys(flags)) if (!allowed.has(key)) {
 		let where = "";
@@ -136,6 +144,12 @@ const parsePmFlag = (raw) => {
 	if (typeof raw !== "string" || !isPM(raw)) throw new UsageError(`Unknown package manager: ${raw} (expected one of: ${PMS.join(", ")})`);
 	return raw;
 };
+const parseProjectTypeFlag = (raw) => {
+	if (typeof raw === "undefined") return;
+	if (raw === true) throw new UsageError(`--project-type requires a value (expected ${PROJECT_TYPES.join("|")})`);
+	if (typeof raw === "string" && isProjectType(raw)) return raw;
+	throw new UsageError(`Unknown project type: ${String(raw)} (expected ${PROJECT_TYPES.join("|")})`);
+};
 const parseSeverityFlag = (raw) => {
 	if (typeof raw === "undefined") return;
 	if (raw === true) throw new UsageError(`--severity requires a value (expected ${SEVERITIES.join("|")})`);
@@ -144,26 +158,22 @@ const parseSeverityFlag = (raw) => {
 };
 const resolveReporter = (flags) => {
 	if (flags.reporter === true) throw new UsageError(`--reporter requires a value (expected one of: ${BUILTIN_REPORTER_NAMES.join(", ")}, or a reporter registered via siro.config.ts)`);
-	if (typeof flags.reporter === "string") {
-		if (flags.json === true) throw new UsageError("Use either --reporter or --json, not both.");
-		return flags.reporter;
-	}
-	if (flags.json === true) return "json";
-	return "pretty";
+	if (Array.isArray(flags.reporter) || Array.isArray(flags.json) || typeof flags.reporter === "string" && flags.json === true) throw new UsageError("Invalid reporter selection: use either --reporter or --json, and specify it only once.");
+	if (typeof flags.reporter === "string") return flags.reporter;
+	if (flags.json === true) return JSON_REPORTER_NAME;
+	return DEFAULT_REPORTER_NAME;
 };
 const ensureNodeVersion = (nodeVersion) => {
-	const major = Number(nodeVersion.replace(/^v/u, "").split(".")[FIRST_INDEX$1]);
-	if (Number.isFinite(major) && major < MIN_NODE_MAJOR) throw new UsageError(`Node ${MIN_NODE_MAJOR}+ required (you are on ${nodeVersion}). Upgrade your runtime to use siro.`);
+	if (!isSupportedNodeVersion(nodeVersion)) throw new UsageError(`Node ${SUPPORTED_NODE_RANGE} required (you are on ${nodeVersion}). Upgrade your runtime to use siro.`);
 };
 
 //#endregion
 //#region src/cli/cac-bridge.ts
-const FIRST_INDEX = 0;
 const STEP = 1;
 const ARGS_OFFSET = 2;
 const buildCli = () => {
 	const cli = cac("siro");
-	cli.option("--pm <name>", "Target a specific package manager").option("--reporter <name>", `Reporter (${BUILTIN_REPORTER_NAMES.join("|")})`).option("--json", "Shortcut for --reporter json").option("--severity <level>", `Display/fail threshold (${SEVERITIES.join("|")})`).help().version(version);
+	cli.option("--pm <name>", "Target a specific package manager").option("--project-type <type>", "Project type (application|package)").option("--reporter <name>", `Reporter (${BUILTIN_REPORTER_NAMES.join("|")})`).option("--json", "Shortcut for --reporter json").option("--severity <level>", `Display/fail threshold (${SEVERITIES.join("|")})`).help().version(version);
 	for (const name of COMMANDS) {
 		let desc = `${name} a repository`;
 		if (name === "check") desc = "Alias of lint";
@@ -172,12 +182,16 @@ const buildCli = () => {
 	return cli;
 };
 const extractPositionalCwd = (matchedCommand, args) => {
-	if (matchedCommand) return args[FIRST_INDEX];
+	if (matchedCommand) {
+		const [cwd] = args;
+		return cwd;
+	}
 	return args[STEP];
 };
 const extractCommandCandidate = (matchedCommand, args) => {
 	if (matchedCommand) return matchedCommand;
-	return args[FIRST_INDEX];
+	const [candidate] = args;
+	return candidate;
 };
 const extractExtraPositionals = (matchedCommand, args) => {
 	if (matchedCommand) return args.slice(STEP);
@@ -197,7 +211,6 @@ const parseCacOutput = (argv) => {
 		commandCandidate: extractCommandCandidate(matchedCommand, parsed.args),
 		extraPositionals: extractExtraPositionals(matchedCommand, parsed.args),
 		flags,
-		matchedCommand,
 		positionalCwd
 	};
 };
@@ -206,10 +219,12 @@ const parseCacOutput = (argv) => {
 //#region src/cli/help.ts
 const PMS_LIST = PMS.join("|");
 const REPORTERS_LIST = BUILTIN_REPORTER_NAMES.join("|");
+const PROJECT_TYPES_LIST = PROJECT_TYPES.join("|");
 const SEVERITIES_LIST = SEVERITIES.join("|");
 const FLAG_LINES = {
 	json: "  --json               Shortcut for --reporter json",
 	pm: `  --pm <name>          Target a specific package manager (${PMS_LIST})`,
+	projectType: `  --project-type <type>  Project type (${PROJECT_TYPES_LIST}; default auto)`,
 	reporter: `  --reporter <name>    Reporter (${REPORTERS_LIST}; additional reporters can be registered via siro.config.ts)`,
 	severity: `  --severity <level>   Show + fail on findings at or above this level (${SEVERITIES_LIST})`
 };
@@ -224,6 +239,7 @@ const HELP_ROOT = [
 	"",
 	"GLOBAL FLAGS",
 	FLAG_LINES.pm,
+	FLAG_LINES.projectType,
 	"  --version            Print the siro version",
 	"  --help               Show help for siro or a command",
 	"",
@@ -251,6 +267,7 @@ const HELP_LINT = [
 	"",
 	"FLAGS",
 	FLAG_LINES.pm,
+	FLAG_LINES.projectType,
 	FLAG_LINES.reporter,
 	FLAG_LINES.json,
 	FLAG_LINES.severity,
@@ -274,13 +291,12 @@ const renderHelp = (target) => {
 
 //#endregion
 //#region src/cli.ts
-const EMPTY = 0;
 const EXIT_SUCCESS = 0;
 const EXIT_USAGE = 2;
 const EXIT_CRASH = 70;
 const rejectPassthrough = (flags) => {
 	const passthrough = flags["--"];
-	if (Array.isArray(passthrough) && passthrough.length > EMPTY) throw new UsageError("siro takes no passthrough arguments after `--`.");
+	if (Array.isArray(passthrough) && passthrough.length > 0) throw new UsageError("siro takes no passthrough arguments after `--`.");
 };
 const resolveCommandCandidate = (commandCandidate) => {
 	if (typeof commandCandidate === "undefined") return { kind: "usage" };
@@ -299,7 +315,7 @@ const resolveCommandCandidate = (commandCandidate) => {
 };
 const SINGLE = 1;
 const rejectExtraPositionals = (extraPositionals) => {
-	if (extraPositionals.length > EMPTY) {
+	if (extraPositionals.length > 0) {
 		let plural = "";
 		if (extraPositionals.length > SINGLE) plural = "s";
 		throw new UsageError(`Unexpected extra argument${plural}: ${extraPositionals.join(" ")}`);
@@ -324,6 +340,7 @@ const buildLintCommand = (flags, positionalCwd, commandCandidate) => {
 		cwd: resolveCwd(positionalCwd),
 		kind: "lint",
 		pm: parsePmFlag(flags.pm),
+		projectType: parseProjectTypeFlag(flags.projectType),
 		reporter: resolveReporter(flags),
 		severity: parseSeverityFlag(flags.severity)
 	};
@@ -403,14 +420,11 @@ const onRunRejected = (error) => {
 	process.stderr.write(`${errStr}\n`);
 	process.exitCode = EXIT_CRASH;
 };
+const runMain = (argv) => run(argv).then(onRunFulfilled, onRunRejected);
 const ARGV_SKIP = 2;
 const [, invokedPath] = process.argv;
-if (invokedPath && import.meta.url === pathToFileURL(invokedPath).href) try {
-	onRunFulfilled(await run(process.argv.slice(ARGV_SKIP)));
-} catch (error) {
-	onRunRejected(error);
-}
+if (invokedPath && import.meta.url === pathToFileURL(invokedPath).href) await runMain(process.argv.slice(ARGV_SKIP));
 
 //#endregion
-export { run };
+export { run, runMain };
 //# sourceMappingURL=cli.mjs.map

package/dist/index.d.mts

@@ -47,7 +47,8 @@ interface IO {
 declare const nodeIO: IO;
 //#endregion
 //#region src/domain/entities/config-value.d.ts
-type CodecKind = 'npmrc' | 'yaml' | 'toml' | 'json';
+declare const CODEC_KINDS: readonly ["json", "npmrc", "toml", "yaml"];
+type CodecKind = (typeof CODEC_KINDS)[number];
 /** Scalar value that can be written back to a config file. */
 type ConfigValue = string | number | boolean;
 /** Scalar value as it appears when reading (codecs may produce `null`). */
@@ -106,6 +107,10 @@ declare const PackageJsonSchema: vb.LooseObjectSchema<{
 }, undefined>;
 type PackageJson = vb.InferOutput<typeof PackageJsonSchema>;
 //#endregion
+//#region src/domain/entities/project-type.d.ts
+declare const PROJECT_TYPES: readonly ["application", "package"];
+type ProjectType = (typeof PROJECT_TYPES)[number];
+//#endregion
 //#region src/domain/ports/repo-context.d.ts
 /** Read-only view of a repository, passed to every rule's `check` and `fix`. */
 interface RepoContext {
@@ -113,6 +118,7 @@ interface RepoContext {
   exists: (relPath: RelPath) => boolean;
   readText: (relPath: RelPath) => string | undefined;
   readonly packageJson: PackageJson | undefined;
+  readonly projectType?: ProjectType;
 }
 //#endregion
 //#region src/domain/entities/rule.d.ts
@@ -178,6 +184,12 @@ type FixOp = {
  * - `advisory`: `fix` only produces notes/ensureFileTracked hints.
  */
 type FixKind = 'auto' | 'advisory';
+/** Display-only package-manager version metadata. */
+interface VersionNote {
+  readonly configAvailableSince?: string;
+  readonly defaultSafeSince?: string;
+  readonly note?: string;
+}
 type SetKeyOp = Extract<FixOp, {
   op: 'setKey';
 }>;
@@ -197,6 +209,7 @@ interface AutoRuleBinding {
    * override always wins over both.
    */
   readonly severity?: Severity;
+  readonly versionNote?: VersionNote;
   check: (ctx: RepoContext, config: ParsedConfig) => CheckStatus;
   fix: (ctx: RepoContext) => readonly SetKeyOp[];
 }
@@ -207,17 +220,20 @@ interface AdvisoryRuleBinding {
   readonly docs?: string;
   /** See {@link AutoRuleBinding.severity}. */
   readonly severity?: Severity;
+  readonly versionNote?: VersionNote;
   check: (ctx: RepoContext, config: ParsedConfig) => CheckStatus;
   fix: (ctx: RepoContext) => readonly AdvisoryOp[];
 }
 type RuleBinding = AutoRuleBinding | AdvisoryRuleBinding;
 /** A package-manager-agnostic security intent, realized per PM via `bindings`. */
-interface Rule {
-  readonly id: string;
+interface Rule<Id extends string = string> {
+  readonly id: Id;
   readonly title: string;
   readonly description: string;
   readonly severity: Severity;
   readonly docs?: string;
+  /** Project types this rule applies to; omission means both types. */
+  readonly projectTypes?: readonly ProjectType[];
   /** Absence of a PM key means the rule does not apply (N/A) to that PM. */
   readonly bindings: Partial<Record<PM, RuleBinding>>;
 }
@@ -317,6 +333,8 @@ interface LintOptions {
   cwd: AbsPath;
   /** Restrict to a single PM; otherwise PMs are auto-detected. */
   pm?: PM;
+  /** Select application or published-package policy; otherwise infer it. */
+  projectType?: ProjectType;
   /** Reporter name or instance; defaults to `pretty`. */
   reporter?: string | Reporter;
   /** Extra reporters to make available by name (merged with the user config). */
@@ -431,13 +449,9 @@ declare const PM_SIGNALS: {
   };
 };
 //#endregion
-//#region src/domain/entities/rule-id.d.ts
-/**
- * Closed set of built-in rule IDs. Declared in `domain/` so SiroConfig can
- * type `rules` keys without depending on the engine.
- */
-declare const BUILTIN_RULE_IDS: readonly ["advisory-check", "approved-git-repos", "audit-suppression", "block-auto-install", "block-exotic-subdeps", "bun-security-scanner", "checksum-verification", "commit-lockfile", "dependency-overrides", "disable-lifecycle-scripts", "enforce-strict-ssl", "files-field", "frozen-lockfile", "frozen-store", "hardened-mode", "minimum-release-age", "named-registries", "paranoid-mode", "patched-dependencies", "pin-exact-versions", "provenance", "publish-access", "store-server", "strict-allow-scripts", "strict-release-age", "strict-store-integrity", "trust-policy"];
-type BuiltinRuleId = (typeof BUILTIN_RULE_IDS)[number];
+//#region src/domain/builtin-rules.d.ts
+declare const rules: readonly [Rule<"advisory-check">, Rule<"approved-git-repos">, Rule<"audit-suppression">, Rule<"block-auto-install">, Rule<"block-exotic-subdeps">, Rule<"bun-security-scanner">, Rule<"checksum-verification">, Rule<"commit-lockfile">, Rule<"dependency-overrides">, Rule<"disable-lifecycle-scripts">, Rule<"enforce-strict-ssl">, Rule<"files-field">, Rule<"frozen-lockfile">, Rule<"frozen-store">, Rule<"hardened-mode">, Rule<"minimum-release-age">, Rule<"named-registries">, Rule<"paranoid-mode">, Rule<"patched-dependencies">, Rule<"pin-exact-versions">, Rule<"provenance">, Rule<"publish-access">, Rule<"store-server">, Rule<"strict-allow-scripts">, Rule<"strict-release-age">, Rule<"strict-store-integrity">, Rule<"trust-policy">];
+type BuiltinRuleId = (typeof rules)[number]['id'];
 //#endregion
 //#region src/domain/entities/siro-config.d.ts
 /** Per-rule setting. `'off'` disables; a Severity overrides the default level. */
@@ -454,6 +468,7 @@ type RuleSetting = Severity | 'off';
  */
 interface SiroConfig {
   readonly pms?: readonly PM[];
+  readonly projectType?: ProjectType;
   readonly rules?: Readonly<Partial<Record<BuiltinRuleId | (string & Record<never, never>), RuleSetting>>>;
   readonly customRules?: readonly Rule[];
   readonly reporters?: readonly Reporter[];
@@ -470,21 +485,6 @@ interface ConfigCodec {
 type CodecFor = (kind: CodecKind) => ConfigCodec;
 //#endregion
 //#region src/domain/rules/builders/require-config-key.d.ts
-/**
- * Display-only metadata for a binding. siro itself is intentionally
- * version-agnostic (we never branch on the user's actual PM version) — these
- * fields exist so the rendered message can still tell the reader *when* a key
- * appeared and *when* the PM started shipping a safe default. They MUST NOT
- * be consulted by any code path that decides severity or applicability.
- */
-interface VersionNote {
-  /** PM version that first shipped this config key (e.g. `'pnpm 10.16.0'`). */
-  readonly configAvailableSince?: string;
-  /** PM version whose built-in default first satisfies the rule (e.g. `'pnpm 11.0.0 (1440 minutes)'`). */
-  readonly defaultSafeSince?: string;
-  /** Free-form trailing note rendered last (e.g. `'replaces auto-install-peers'`). */
-  readonly note?: string;
-}
 interface RequireConfigKeySpec {
   readonly file: ConfigFileRef;
   readonly keyPath: KeyPath;
@@ -524,12 +524,13 @@ interface RequireConfigKeySpec {
   readonly defaultSatisfiedSeverity?: Severity | 'off';
   readonly versionNote?: VersionNote;
 }
-interface RequireConfigKeyOptions {
-  readonly id: string;
+interface RequireConfigKeyOptions<Id extends string = string> {
+  readonly id: Id;
   readonly title: string;
   readonly description: string;
   readonly severity: Severity;
   readonly docs?: string;
+  readonly projectTypes?: Rule['projectTypes'];
   /** Bindings keyed by PM. PMs absent from this map are treated as N/A. */
   readonly bindings: Partial<Record<PM, RequireConfigKeySpec>>;
   /** Return false to short-circuit `check` as N/A (e.g. private packages). */
@@ -542,10 +543,12 @@ interface RequireConfigKeyOptions {
  * the hand-written bindings in via this helper rather than rebuilding from
  * scratch or mutating the source rule.
  */
-declare const overrideBindings: (rule: Rule, overrides: Partial<Rule["bindings"]>) => Rule;
-declare const renderVersionNoteMessage: (message: string, versionNote: VersionNote | undefined) => string;
+declare const overrideBindings: <Id extends string>(rule: Rule<Id>, overrides: Partial<Rule["bindings"]>) => Rule<Id>;
 /** Build a Rule from a per-PM table of {file, keyPath, value, message}. */
-declare const requireConfigKey: (options: RequireConfigKeyOptions) => Rule;
+declare const requireConfigKey: <const Id extends string>(options: RequireConfigKeyOptions<Id>) => Rule<Id>;
+//#endregion
+//#region src/domain/services/render-version-note.d.ts
+declare const renderVersionNoteMessage: (message: string, versionNote: VersionNote | undefined) => string;
 //#endregion
 //#region src/domain/services/detect-pms.d.ts
 declare const detectPMs: (ctx: RepoContext) => PM[];
@@ -565,11 +568,6 @@ declare const exitCodeForLint: (result: LintResult, threshold?: Severity) => num
  * place so individual commands never have to think about exit semantics.
  * The exit-code table lives in docs/configuration.md S"Exit codes" and
  * src/cli/help.ts (HELP_LINT) -- not restated here.
- *
- * One mapping note that belongs at this altitude: filesystem errno errors
- * are routed to 2 by SHAPE (numeric `errno`) in cli run(), so an
- * errno-bearing throw from a user extension also lands on 2 rather than the
- * 70 crash path -- same remedy (fix the environment) either way.
  */
 declare class SiroError extends Error {
   /** Recommended process exit code for this error. */
@@ -599,7 +597,7 @@ declare class UsageError extends SiroError {
 declare const wrapCodecError: <TResult>(filePath: string, fn: () => TResult) => TResult;
 //#endregion
 //#region src/version.d.ts
-declare const version = "0.2.0";
+declare const version = "0.3.0";
 //#endregion
-export { type AbsPath, type AdvisoryRuleBinding, type AutoRuleBinding, BUILTIN_REPORTER_NAMES, type BuiltinReporterName, CONFIG_FILES, type CheckStatus, type CodecFor, type ConfigCodec, ConfigError, type ConfigFileRef, type ConfigReadValue, type ConfigScalar, type ConfigValue, type FileSystem, type Finding, type FixKind, type FixOp, type IO, type KeyAssignment, type KeyPath, type LintOptions, type LintResult, type PM, PMS, type PMSignals, PM_SIGNALS, type PackageJson, type ParsedConfig, type RelPath, type RepoContext, type Reporter, type ReporterRegistry, type RequireConfigKeyOptions, type Rule, type RuleBinding, type RuleSetting, SEVERITIES, type Severity, type SiroConfig, SiroError, UsageError, type VersionNote, asAbsPath, asRelPath, createRegistry, defineConfig, detectPMs, exitCodeForLint, filterBySeverity, getByPath, githubReporter, isPM, isReporterShape, isSeverity, jsonReporter, lintCommand, nodeFileSystem, nodeIO, overrideBindings, prettyReporter, renderVersionNoteMessage, requireConfigKey, version, wrapCodecError };
+export { type AbsPath, type AdvisoryRuleBinding, type AutoRuleBinding, BUILTIN_REPORTER_NAMES, type BuiltinReporterName, CONFIG_FILES, type CheckStatus, type CodecFor, type ConfigCodec, ConfigError, type ConfigFileRef, type ConfigReadValue, type ConfigScalar, type ConfigValue, type FileSystem, type Finding, type FixKind, type FixOp, type IO, type KeyAssignment, type KeyPath, type LintOptions, type LintResult, type PM, PMS, type PMSignals, PM_SIGNALS, PROJECT_TYPES, type PackageJson, type ParsedConfig, type ProjectType, type RelPath, type RepoContext, type Reporter, type ReporterRegistry, type RequireConfigKeyOptions, type Rule, type RuleBinding, type RuleSetting, SEVERITIES, type Severity, type SiroConfig, SiroError, UsageError, type VersionNote, asAbsPath, asRelPath, createRegistry, defineConfig, detectPMs, exitCodeForLint, filterBySeverity, getByPath, githubReporter, isPM, isReporterShape, isSeverity, jsonReporter, lintCommand, nodeFileSystem, nodeIO, overrideBindings, prettyReporter, renderVersionNoteMessage, requireConfigKey, version, wrapCodecError };
 //# sourceMappingURL=index.d.mts.map

package/dist/index.mjs

@@ -1,9 +1,9 @@
-import { A as asRelPath, C as isPM, D as ConfigError, E as UsageError, O as SiroError, S as SEVERITIES, T as wrapCodecError, _ as jsonReporter, a as PM_SIGNALS, b as isReporterShape, c as requireConfigKey, d as exitCodeForLint, f as filterBySeverity, g as prettyReporter, h as createRegistry, i as nodeFileSystem, k as asAbsPath, l as CONFIG_FILES, m as BUILTIN_REPORTER_NAMES, n as lintCommand, o as overrideBindings, r as detectPMs, s as renderVersionNoteMessage, t as nodeIO, u as getByPath, v as version, w as isSeverity, x as PMS, y as githubReporter } from "./node-io-Cb8nixgE.mjs";
+import { A as isSeverity, C as jsonReporter, D as PMS, E as isReporterShape, F as asAbsPath, I as asRelPath, M as UsageError, N as ConfigError, O as SEVERITIES, P as SiroError, S as prettyReporter, T as githubReporter, a as nodeFileSystem, c as requireConfigKey, d as exitCodeForLint, f as filterBySeverity, i as detectPMs, j as wrapCodecError, k as isPM, l as CONFIG_FILES, m as PROJECT_TYPES, n as lintCommand, o as PM_SIGNALS, r as renderVersionNoteMessage, s as overrideBindings, t as nodeIO, u as getByPath, v as BUILTIN_REPORTER_NAMES, w as version, x as createRegistry } from "./node-io-CUcMwlGH.mjs";
 
 //#region src/domain/entities/siro-config.ts
 /** Identity helper for type-checked config files. */
 const defineConfig = (config) => config;
 
 //#endregion
-export { BUILTIN_REPORTER_NAMES, CONFIG_FILES, ConfigError, PMS, PM_SIGNALS, SEVERITIES, SiroError, UsageError, asAbsPath, asRelPath, createRegistry, defineConfig, detectPMs, exitCodeForLint, filterBySeverity, getByPath, githubReporter, isPM, isReporterShape, isSeverity, jsonReporter, lintCommand, nodeFileSystem, nodeIO, overrideBindings, prettyReporter, renderVersionNoteMessage, requireConfigKey, version, wrapCodecError };
+export { BUILTIN_REPORTER_NAMES, CONFIG_FILES, ConfigError, PMS, PM_SIGNALS, PROJECT_TYPES, SEVERITIES, SiroError, UsageError, asAbsPath, asRelPath, createRegistry, defineConfig, detectPMs, exitCodeForLint, filterBySeverity, getByPath, githubReporter, isPM, isReporterShape, isSeverity, jsonReporter, lintCommand, nodeFileSystem, nodeIO, overrideBindings, prettyReporter, renderVersionNoteMessage, requireConfigKey, version, wrapCodecError };
 //# sourceMappingURL=index.mjs.map