@pho9ubenaa/siro 0.5.0 → 0.5.1

package/CHANGELOG.md

@@ -1,5 +1,24 @@
 # Changelog
 
+## [0.5.1]
+
+### Refactoring
+
+- Reorganize runtime code around explicit domain and application ports, concrete adapters, and outer composition while preserving the public API, CLI, JSON schema, package-manager policy, and error behavior.
+- Make the source dependency graph acyclic and enforce inward dependencies with TypeScript module resolution, including type imports, re-exports, host globals, and unresolved local modules.
+- Move filesystem, path, glob, configuration loading, reporting, and clock behavior behind focused boundaries. Keep JavaScript date parsing in the adapter and inject the current time into release-age policy.
+- Centralize workspace pattern classification and Deno release-age parsing, replacing incidental regular expressions and string rewrites where direct string operations are clearer.
+
+### Maintenance
+
+- Consolidate tests around observable decisions, failures, public wiring, CLI behavior, and installed-package contracts. Remove duplicate, implementation-coupled, mock-self-verifying, and library-guarantee cases.
+- Add architecture and maintainer documentation for dependency direction, composition, ports, adapters, and behavioral contracts.
+- Invite real-world feedback through GitHub Issues and explain how GitHub Stars inform time spent on future features and maintenance.
+
+### Compatibility
+
+- This release changes internal structure and test coverage only. Existing public exports, synchronous `lint`, asynchronous `lintCommand`, CLI flags and exit codes, JSON schema 2, supported package-manager behavior, and Node.js range remain unchanged.
+
 ## [0.5.0]
 
 ### Features

package/README.md

@@ -109,6 +109,11 @@ Different layer of the supply-chain pipeline; you want both.
 Adding a rule or a package manager is a localized change — see
 [docs/contributing.md](docs/contributing.md).
 
+If siro is useful to you, a [GitHub Star](https://github.com/pHo9UBenaA/siro) would be appreciated.
+Stars help me decide how much time to devote to future features and maintenance.
+Please share feedback from real-world use and feature requests in
+[GitHub Issues](https://github.com/pHo9UBenaA/siro/issues).
+
 ## License
 
 MIT

package/dist/cli.mjs

@@ -1,5 +1,5 @@
 #!/usr/bin/env node
-import { C as SUPPORTED_NODE_RANGE, D as isNodeError, M as UsageError, O as asAbsPath, S as isSeverity, T as assertDirectory, _ as PROJECT_TYPES, b as SEVERITIES, c as DEFAULT_REPORTER_NAME, f as version, j as SiroError, l as JSON_REPORTER_NAME, m as loadConfig, n as lintCommand, s as BUILTIN_REPORTER_NAMES, t as nodeIO, v as isProjectType, w as isSupportedNodeVersion, x as isPM, y as PMS } from "./node-io-CaqobxYp.mjs";
+import { C as SUPPORTED_NODE_RANGE, D as isNodeError, M as UsageError, O as asAbsPath, S as isSupportedNodeVersion, T as assertDirectory, _ as isProjectType, a as DEFAULT_REPORTER_NAME, b as isPM, g as PROJECT_TYPES, i as BUILTIN_REPORTER_NAMES, j as SiroError, o as JSON_REPORTER_NAME, p as loadConfig, r as lintCommand, t as nodeIO, v as PMS, w as version, x as isSeverity, y as SEVERITIES } from "./node-io-BDHg4J2w.mjs";
 import path from "node:path";
 import { pathToFileURL } from "node:url";
 import { parseArgs } from "node:util";

package/dist/index.d.mts

@@ -9,7 +9,6 @@ type AbsPath = string & {
 type RelPath = string & {
   readonly [RelPathBrand]: true;
 };
-declare const asAbsPath: (value: string) => AbsPath;
 declare const asRelPath: (value: string) => RelPath;
 //#endregion
 //#region src/domain/entities/config-value.d.ts
@@ -28,17 +27,11 @@ type ConfigReadValue = unknown;
 /** Read an own key path; absent or non-mapping parents yield undefined. */
 declare const getByPath: (config: ParsedConfig, keyPath: KeyPath) => ConfigReadValue;
 //#endregion
-//#region src/domain/ports/file-system.d.ts
-/** IO boundary: swap in memfs (or any other backend) for tests. */
-interface FileSystem {
-  /** Ordinary child directory names, excluding symlinks. Required only for workspace discovery. Errors must propagate. */
-  readDirectories?: (path: AbsPath) => readonly string[];
-  /** Resolve one ordinary child using this filesystem's native name semantics, returning its enumerated name. No symlinks. Undefined for absence; other errors propagate. Without this optional port, Deno literal prefixes use exact names from readDirectories. */
-  resolveDirectory?: (parent: AbsPath, name: string) => string | undefined;
-  /** Read a regular file (including a symlink to one); undefined only for ENOENT. Other errors and non-file entries must throw. */
-  readText: (path: AbsPath) => string | undefined;
-  /** True for a regular file (including a symlink to one); false only for ENOENT. Other errors and non-file entries must throw. */
-  exists: (path: AbsPath) => boolean;
+//#region src/domain/entities/config-file-ref.d.ts
+/** A repository-relative configuration location, independent of any rule. */
+interface ConfigFileRef {
+  readonly kind: CodecKind;
+  readonly path: RelPath;
 }
 //#endregion
 //#region src/domain/entities/pms.d.ts
@@ -54,10 +47,6 @@ type Severity = (typeof SEVERITIES)[number];
 declare const isPM: (value: string) => value is PM;
 declare const isSeverity: (value: string) => value is Severity;
 //#endregion
-//#region src/domain/entities/project-type.d.ts
-declare const PROJECT_TYPES: readonly ["application", "package"];
-type ProjectType = (typeof PROJECT_TYPES)[number];
-//#endregion
 //#region src/domain/schemas/package-json.d.ts
 declare const PackageJsonSchema: vb.LooseObjectSchema<{
   readonly files: vb.OptionalSchema<vb.ArraySchema<vb.StringSchema<undefined>, undefined>, undefined>;
@@ -71,6 +60,10 @@ declare const PackageJsonSchema: vb.LooseObjectSchema<{
 }, undefined>;
 type PackageJson = vb.InferOutput<typeof PackageJsonSchema>;
 //#endregion
+//#region src/domain/entities/project-type.d.ts
+declare const PROJECT_TYPES: readonly ["application", "package"];
+type ProjectType = (typeof PROJECT_TYPES)[number];
+//#endregion
 //#region src/domain/ports/repo-context.d.ts
 /** Read-only view of a repository, passed to every rule's `check`. */
 interface RepoContext {
@@ -88,10 +81,6 @@ interface RuleContext extends RepoContext {
 }
 //#endregion
 //#region src/domain/entities/rule.d.ts
-interface ConfigFileRef {
-  readonly kind: CodecKind;
-  readonly path: RelPath;
-}
 interface SetKeyOperation {
   readonly op: 'setKey';
   readonly file: ConfigFileRef;
@@ -154,9 +143,29 @@ interface Rule<Id extends string = string> {
 }
 declare const defineRule: <const Id extends string>(rule: Rule<Id>) => Rule<Id>;
 //#endregion
+//#region src/domain/ports/file-system.d.ts
+/** IO boundary: swap in memfs (or any other backend) for tests. */
+interface FileSystem {
+  /** Ordinary child directory names, excluding symlinks. Required only for workspace discovery. Errors must propagate. */
+  readDirectories?: (path: AbsPath) => readonly string[];
+  /** Resolve one ordinary child using this filesystem's native name semantics, returning its enumerated name. No symlinks. Undefined for absence; other errors propagate. Without this optional port, Deno literal prefixes use exact names from readDirectories. */
+  resolveDirectory?: (parent: AbsPath, name: string) => string | undefined;
+  /** Read a regular file (including a symlink to one); undefined only for ENOENT. Other errors and non-file entries must throw. */
+  readText: (path: AbsPath) => string | undefined;
+  /** True for a regular file (including a symlink to one); false only for ENOENT. Other errors and non-file entries must throw. */
+  exists: (path: AbsPath) => boolean;
+}
+//#endregion
+//#region src/domain/ports/date-time.d.ts
+/** Host time and native date parsing, including the host timezone for offsetless input. */
+interface DateTime {
+  now: () => number;
+  parse: (value: string) => number;
+}
+//#endregion
 //#region src/domain/builtin-rules.d.ts
-declare const rules: readonly [Rule<"advisory-check">, Rule<"approved-git-repos">, Rule<"audit-suppression">, Rule<"block-auto-install">, Rule<"block-exotic-subdeps">, Rule<"bun-security-scanner">, Rule<"checksum-verification">, Rule<"commit-lockfile">, Rule<"dependency-overrides">, Rule<"disable-lifecycle-scripts">, Rule<"enforce-strict-ssl">, Rule<"files-field">, Rule<"frozen-lockfile">, Rule<"frozen-store">, Rule<"hardened-mode">, Rule<"minimum-release-age">, Rule<"named-registries">, Rule<"paranoid-mode">, Rule<"patched-dependencies">, Rule<"pin-exact-versions">, Rule<"provenance">, Rule<"publish-access">, Rule<"store-server">, Rule<"strict-allow-scripts">, Rule<"strict-release-age">, Rule<"strict-store-integrity">, Rule<"trust-policy">, Rule<"unsupported-settings">];
-type BuiltinRuleId = (typeof rules)[number]['id'];
+declare const createBuiltinRules: (time: DateTime) => readonly [Rule<"advisory-check">, Rule<"approved-git-repos">, Rule<"audit-suppression">, Rule<"block-auto-install">, Rule<"block-exotic-subdeps">, Rule<"bun-security-scanner">, Rule<"checksum-verification">, Rule<"commit-lockfile">, Rule<"dependency-overrides">, Rule<"disable-lifecycle-scripts">, Rule<"enforce-strict-ssl">, Rule<"files-field">, Rule<"frozen-lockfile">, Rule<"frozen-store">, Rule<"hardened-mode">, Rule<"minimum-release-age">, Rule<"named-registries">, Rule<"paranoid-mode">, Rule<"patched-dependencies">, Rule<"pin-exact-versions">, Rule<"provenance">, Rule<"publish-access">, Rule<"store-server">, Rule<"strict-allow-scripts">, Rule<"strict-release-age">, Rule<"strict-store-integrity">, Rule<"trust-policy">, Rule<"unsupported-settings">];
+type BuiltinRuleId = ReturnType<typeof createBuiltinRules>[number]['id'];
 //#endregion
 //#region src/domain/ports/io.d.ts
 /** Output sink for commands; injectable so tests can drive a string buffer. */
@@ -227,7 +236,17 @@ interface LintOptions {
   /** Explicit configuration; the library never imports files from the target repository. */
   readonly config?: SiroConfig;
 }
+//#endregion
+//#region src/application/commands/lint.d.ts
+interface LintCommandOptions extends LintOptions {
+  readonly reporter?: string | Reporter;
+  readonly severity?: Severity;
+}
+//#endregion
+//#region src/composition/lint.d.ts
+/** Public Node API: callers can replace the filesystem without assembling the application. */
 declare const lint: (options: LintOptions) => LintResult;
+declare const lintCommand: (options: LintCommandOptions, io: IO) => Promise<number>;
 //#endregion
 //#region src/adapters/config-loader.d.ts
 /** Load the first matching config; executable imports always use the real filesystem. */
@@ -256,14 +275,6 @@ declare const BUILTIN_REPORTER_NAMES: readonly BuiltinReporterName[];
 /** Literal union of every built-in reporter name. */
 type BuiltinReporterName = (typeof BUILTINS)[number]['name'];
 //#endregion
-//#region src/application/commands/lint.d.ts
-interface LintCommandOptions extends LintOptions {
-  readonly reporter?: string | Reporter;
-  readonly severity?: Severity;
-}
-/** Evaluate and report. Executable config loading belongs to the CLI adapter. */
-declare const lintCommand: (options: LintCommandOptions, io: IO) => Promise<number>;
-//#endregion
 //#region src/domain/entities/config-files.d.ts
 /** Known configuration locations and their parsers. */
 declare const CONFIG_FILES: {
@@ -350,5 +361,8 @@ declare class UsageError extends SiroError {
 //#region src/version.d.ts
 declare const version: string;
 //#endregion
+//#region src/adapters/node-paths.d.ts
+declare const asAbsPath: (value: string) => AbsPath;
+//#endregion
 export { type AbsPath, BUILTIN_REPORTER_NAMES, type BuiltinReporterName, CONFIG_FILES, type CheckStatus, ConfigError, type ConfigFileRef, type ConfigReadValue, type ConfigValue, type FileSystem, type Finding, type IO, type KeyPath, type LintCommandOptions, type LintOptions, type LintResult, type PM, PMS, PROJECT_TYPES, type ParsedConfig, type ProjectType, type RelPath, type Remediation, type RepoContext, type Reporter, type RequireConfigKeyOptions, type Rule, type RuleBinding, type RuleContext, type RuleSetting, SEVERITIES, type SetKeyOperation, type Severity, type SiroConfig, SiroError, UsageError, type VersionNote, type ViolationStatus, asAbsPath, asRelPath, defineConfig, defineRule, getByPath, githubReporter, isPM, isSeverity, jsonReporter, lint, lintCommand, loadConfig, nodeFileSystem, nodeIO, overrideBindings, prettyReporter, requireConfigKey, version };
 //# sourceMappingURL=index.d.mts.map

package/dist/index.mjs

@@ -1,4 +1,4 @@
-import { A as ConfigError, E as nodeFileSystem, M as UsageError, O as asAbsPath, S as isSeverity, _ as PROJECT_TYPES, a as requireConfigKey, b as SEVERITIES, d as jsonReporter, f as version, g as getByPath, h as defineRule, i as overrideBindings, j as SiroError, k as asRelPath, m as loadConfig, n as lintCommand, o as CONFIG_FILES, p as githubReporter, r as lint, s as BUILTIN_REPORTER_NAMES, t as nodeIO, u as prettyReporter, x as isPM, y as PMS } from "./node-io-CaqobxYp.mjs";
+import { A as ConfigError, E as nodeFileSystem, M as UsageError, O as asAbsPath, b as isPM, c as jsonReporter, d as requireConfigKey, f as CONFIG_FILES, g as PROJECT_TYPES, h as getByPath, i as BUILTIN_REPORTER_NAMES, j as SiroError, k as asRelPath, l as githubReporter, m as defineRule, n as lint, p as loadConfig, r as lintCommand, s as prettyReporter, t as nodeIO, u as overrideBindings, v as PMS, w as version, x as isSeverity, y as SEVERITIES } from "./node-io-BDHg4J2w.mjs";
 //#region src/domain/entities/siro-config.ts
 /** Identity helper for type-checked config files. */
 const defineConfig = (config) => config;