@rtorcato/repo-tooling 3.38.0 → 3.38.1

package/dist/base/checks.js

@@ -720,7 +720,9 @@ export async function checkPrePushHook(dir, p) {
 }
 export async function checkReadmeBadges(dir, audience, 
 /** `fix` target that rebuilds the badge block, or null when the language has none. */
-fixTarget) {
+fixTarget, 
+/** The repo's own package name — only its badges can 404; others' resolve fine (#634). */
+name) {
     const check = 'README badges';
     const hint = fixTarget
         ? `Run \`npx @rtorcato/repo-tooling fix ${fixTarget}\` to add CI/npm/coverage/license badges`
@@ -729,7 +731,7 @@ fixTarget) {
     const readme = (await fs.pathExists(readmePath)) ? await fs.readFile(readmePath, 'utf8') : '';
     if (audience === 'private') {
         // Only a problem if a private/app repo carries badges that would 404.
-        if (readme && hasPublicOnlyBadges(readme)) {
+        if (readme && hasPublicOnlyBadges(readme, name)) {
             return {
                 check,
                 status: 'drift',

package/dist/cli/commands/doctor.js

@@ -244,7 +244,7 @@ async function runBaseChecks(dir, lock, opts) {
     if (lock?.rules?.mcp?.recommended?.length) {
         results.push(await checkRecommendedMcp(dir, lock.rules.mcp.recommended));
     }
-    results.push(await checkReadmeBadges(dir, opts.badges.audience, opts.badges.fixTarget));
+    results.push(await checkReadmeBadges(dir, opts.badges.audience, opts.badges.fixTarget, opts.badges.name));
     results.push(await checkCoverageUpload(dir));
     return results;
 }
@@ -407,7 +407,11 @@ export async function runDoctor(dir, skillsDir) {
     }
     results.push(...(await runBaseChecks(targetDir, lock, {
         hooks: jsGitHooksProfile(pkg),
-        badges: { audience: jsBadgeAudience(pkg), fixTarget: 'badges' },
+        badges: {
+            audience: jsBadgeAudience(pkg),
+            fixTarget: 'badges',
+            name: typeof pkg?.name === 'string' ? pkg.name : undefined,
+        },
         // Same `scripts` gating the fixer applies, or the workflow doctor
         // compares against would reference steps the fixer never writes (#364).
         presetWorkflow: renderGitHubWorkflow(githubJobs(inferProjectConfig(pkg), { scripts: scriptsOf(pkg) })),

package/dist/cli/commands/fix.js

@@ -489,7 +489,8 @@ export async function fixCommand(target, options = {}) {
         // A fixer that refuses (e.g. dependabot, when the existing config carries
         // repo-local `ignore:` rules the template can't reproduce) is a skip, not a
         // crash — the remaining findings still deserve their fixers. The reason goes
-        // to stderr so it survives `--json`.
+        // to stderr so it survives `--json`. An unexpected error is skipped the same
+        // way (#636): rethrowing it killed the walk mid-run with no JSON on stdout.
         let outcome;
         try {
             outcome = await applyFixer(fixer, result, targetDir, pkg, lock, dryRun, silent, {
@@ -499,12 +500,15 @@ export async function fixCommand(target, options = {}) {
             });
         }
         catch (err) {
-            if (!(err instanceof FixerAbort))
-                throw err;
             actions.push(recordFor(fixer.target, result.check, result.status, 'skipped', [], conflict));
-            console.error(chalk.red(`    refused — ${err.message}`));
-            if (err.hint)
-                console.error(chalk.gray(`    ${err.hint}`));
+            if (err instanceof FixerAbort) {
+                console.error(chalk.red(`    refused — ${err.message}`));
+                if (err.hint)
+                    console.error(chalk.gray(`    ${err.hint}`));
+            }
+            else {
+                console.error(chalk.red(`    failed — ${err instanceof Error ? err.message : String(err)}`));
+            }
             skippedCount++;
             continue;
         }

package/dist/cli/generators/badges.js

@@ -56,9 +56,29 @@ export function buildBadgeBlock(inputs) {
     const row = buildBadgeRow(inputs);
     return row ? `${BADGE_START}\n${row}\n${BADGE_END}` : '';
 }
-/** True when the text carries npm/bundlephobia/codecov badges (which 404 on private/unpublished). */
-export function hasPublicOnlyBadges(text) {
-    return /img\.shields\.io\/npm\/|bundlephobia|codecov\.io/.test(text);
+/**
+ * True when the text carries npm/bundlephobia/codecov badges (which 404 on
+ * private/unpublished). Given `name`, npm/bundlephobia badges count only when
+ * they point at that package — a README may advertise *other* packages (#634).
+ */
+export function hasPublicOnlyBadges(text, name) {
+    if (/codecov\.io/.test(text))
+        return true;
+    if (!name)
+        return /img\.shields\.io\/npm\/|bundlephobia/.test(text);
+    const refs = text.matchAll(/(?:img\.shields\.io\/npm\/[\w-]+|bundlephobia\/[\w-]+|bundlephobia\.com\/package)\/([^\s)"'?#]+)/g);
+    for (const [, raw = ''] of refs) {
+        let ref = raw;
+        try {
+            ref = decodeURIComponent(raw);
+        }
+        catch {
+            // Malformed escape — compare the raw text.
+        }
+        if (ref === name || ref.startsWith(`${name}/`))
+            return true;
+    }
+    return false;
 }
 /**
  * Insert or refresh the badge block in a README. Replaces an existing delimited

package/dist/cli/utils/detect-language.js

@@ -5,6 +5,10 @@ import fs from 'fs-extra';
  * wins. One language per repo root; multi-language monorepos stay out of scope
  * (#139, reaffirmed in #317 — the audit is root-only, but says so via
  * `detectNestedLanguages`). A dir with no marker → 'unknown' (base checks only).
+ *
+ * One exception to the order: `Package.swift` beats a `package.json` that ships
+ * no JS (no `main`/`exports`/`bin`) — a Swift package whose root `package.json`
+ * only drives its docs site is a Swift repo (#633).
  */
 const MARKERS = [
     ['js', ['package.json']],
@@ -12,7 +16,14 @@ const MARKERS = [
     ['perl', ['cpanfile', 'Makefile.PL', 'dist.ini']],
     ['python', ['pyproject.toml', 'setup.py']],
 ];
+/** True when `package.json` declares a JS entry point — the repo ships JS, not just tooling. */
+async function shipsJs(dir) {
+    const pkg = await fs.readJson(path.join(dir, 'package.json')).catch(() => null);
+    return Boolean(pkg && (pkg.main || pkg.exports || pkg.bin));
+}
 export async function detectLanguage(dir) {
+    if ((await fs.pathExists(path.join(dir, 'Package.swift'))) && !(await shipsJs(dir)))
+        return 'swift';
     for (const [language, candidates] of MARKERS) {
         for (const candidate of candidates) {
             if (await fs.pathExists(path.join(dir, candidate)))

package/dist/languages/js/checks.js

@@ -1147,7 +1147,10 @@ export async function checkExportsBuildable(dir, pkg, exec) {
 }
 /** Who this package's README badges are for — feeds the base badge check (#309). */
 export function jsBadgeAudience(pkg) {
-    if (!pkg || pkg.private === true)
+    // No package.json: nothing here is published, so no npm badge can be ours (#634).
+    if (!pkg)
+        return 'not-applicable';
+    if (pkg.private === true)
         return 'private';
     return isPublishableLibrary(pkg) ? 'public' : 'not-applicable';
 }

package/dist/languages/js/fixers.js

@@ -304,6 +304,11 @@ export const FIXERS = [
         canFixDrift: true,
         async run({ targetDir, pkg }) {
             const pkgPath = path.join(targetDir, 'package.json');
+            // Refuse before writing any hook: lint-staged lives in package.json, so a
+            // repo without a readable one cannot be wired (#636).
+            if (!pkg) {
+                throw new FixerAbort('no-package-json', 'no readable package.json — husky needs one for lint-staged', 'add a package.json, then re-run');
+            }
             const existingLintStaged = pkg?.['lint-staged'] ?? {};
             await generateHuskyConfig(inferProjectConfig(pkg), targetDir);
             const updated = (await fs.readJson(pkgPath));

package/package.json

@@ -1,6 +1,6 @@
 {
 	"name": "@rtorcato/repo-tooling",
-	"version": "3.38.0",
+	"version": "3.38.1",
 	"description": "One CLI to scaffold, audit and fix your repo's whole toolchain — linting, tests, commits, releases & CI.",
 	"type": "module",
 	"keywords": [