@standards-kit/conform 0.1.3 → 0.2.0

package/dist/cli.js

@@ -11,7 +11,12 @@ import {
   getProjectRoot,
   loadConfig,
   loadConfigAsync
-} from "./chunk-PZ2NVKI7.js";
+} from "./chunk-YGDEM6K5.js";
+import {
+  AWS_DEFAULTS,
+  GITHUB_API,
+  TIMEOUTS
+} from "./chunk-RHM53NLG.js";
 
 // src/cli.ts
 import * as fs22 from "fs";
@@ -351,7 +356,7 @@ var CoverageRunRunner = class extends BaseToolRunner {
     const result = await execa(testCommand.cmd, testCommand.args, {
       cwd: projectRoot,
       reject: false,
-      timeout: 10 * 60 * 1e3,
+      timeout: TIMEOUTS.codeToolExtended,
       env: { ...process.env, CI: "true" }
     });
     return { exitCode: result.exitCode, stderr: result.stderr, stdout: result.stdout };
@@ -852,7 +857,7 @@ var ESLintRunner = class extends BaseToolRunner {
       const result = await execa2("npx", ["eslint", ...args], {
         cwd: projectRoot,
         reject: false,
-        timeout: 5 * 60 * 1e3
+        timeout: TIMEOUTS.codeTool
       });
       const violations = this.parseOutput(result.stdout, projectRoot);
       if (violations === null && result.exitCode !== 0 && result.stderr) {
@@ -936,7 +941,7 @@ var ESLintRunner = class extends BaseToolRunner {
       const result = await execa2("npx", ["eslint", "--print-config", sampleFile], {
         cwd: projectRoot,
         reject: false,
-        timeout: 30 * 1e3
+        timeout: TIMEOUTS.quick
       });
       if (result.exitCode !== 0) {
         return { error: `Failed to read ESLint config: ${result.stderr || "Unknown error"}` };
@@ -1260,7 +1265,7 @@ var GitleaksRunner = class extends BaseToolRunner {
       const result = await execa3("gitleaks", args, {
         cwd: projectRoot,
         reject: false,
-        timeout: 5 * 60 * 1e3
+        timeout: TIMEOUTS.codeTool
       });
       return this.processResult(result, elapsed);
     } catch (error) {
@@ -1340,7 +1345,7 @@ var GitleaksRunner = class extends BaseToolRunner {
       await execa3("gitleaks", ["version"], {
         cwd: projectRoot,
         reject: true,
-        timeout: 10 * 1e3
+        timeout: TIMEOUTS.versionCheck
       });
       return this.pass(Date.now() - startTime);
     } catch (error) {
@@ -1377,7 +1382,7 @@ var KnipRunner = class extends BaseToolRunner {
       const result = await execa4("npx", ["knip", "--reporter", "json"], {
         cwd: projectRoot,
         reject: false,
-        timeout: 5 * 60 * 1e3
+        timeout: TIMEOUTS.codeTool
       });
       const output = result.stdout || result.stderr;
       const violations = this.parseOutput(output, projectRoot);
@@ -1839,13 +1844,13 @@ var PipAuditRunner = class extends BaseToolRunner {
       return await execa5("uvx", args, {
         cwd: projectRoot,
         reject: false,
-        timeout: 5 * 60 * 1e3
+        timeout: TIMEOUTS.codeTool
       });
     } catch {
       return await execa5("pip-audit", args.slice(1), {
         cwd: projectRoot,
         reject: false,
-        timeout: 5 * 60 * 1e3
+        timeout: TIMEOUTS.codeTool
       });
     }
   }
@@ -1962,7 +1967,7 @@ var PnpmAuditRunner = class extends BaseToolRunner {
       const result = await execa6("pnpm", args, {
         cwd: projectRoot,
         reject: false,
-        timeout: 5 * 60 * 1e3
+        timeout: TIMEOUTS.codeTool
       });
       return this.processAuditResult(result, elapsed);
     } catch (error) {
@@ -2140,7 +2145,7 @@ var RuffRunner = class extends BaseToolRunner {
       const result = await execa7("ruff", this.buildCliArgs(), {
         cwd: projectRoot,
         reject: false,
-        timeout: 5 * 60 * 1e3
+        timeout: TIMEOUTS.codeTool
       });
       if (this.isBinaryNotFound(result)) {
         return this.skipNotInstalled(Date.now() - startTime);
@@ -2306,7 +2311,7 @@ var TscRunner = class extends BaseToolRunner {
     return execa8("npx", ["tsc", "--noEmit"], {
       cwd: projectRoot,
       reject: false,
-      timeout: 5 * 60 * 1e3
+      timeout: TIMEOUTS.codeTool
     });
   }
   processRunResult(result, projectRoot, elapsed) {
@@ -2537,7 +2542,7 @@ var TyRunner = class extends BaseToolRunner {
       const result = await execa9("uvx", ["ty", "check", "--output-format", "concise", "."], {
         cwd: projectRoot,
         reject: false,
-        timeout: 5 * 60 * 1e3
+        timeout: TIMEOUTS.codeTool
       });
       return this.handleExitCode(result, projectRoot, elapsed);
     } catch (error) {
@@ -2686,7 +2691,7 @@ var VultureRunner = class _VultureRunner extends BaseToolRunner {
       const result = await execa10("vulture", [".", "--exclude", excludePatterns], {
         cwd: projectRoot,
         reject: false,
-        timeout: 5 * 60 * 1e3
+        timeout: TIMEOUTS.codeTool
       });
       if (this.isBinaryNotFound(result)) {
         return this.skipNotInstalled(Date.now() - startTime);
@@ -3759,7 +3764,7 @@ var BackupsRunner = class extends BaseProcessToolRunner {
   }
   getS3Client() {
     return this.s3Client ?? new S3Client({
-      region: this.config.region ?? process.env.AWS_REGION ?? "us-east-1"
+      region: this.config.region ?? process.env.AWS_REGION ?? AWS_DEFAULTS.globalRegion
     });
   }
   createExistsViolation() {
@@ -5727,7 +5732,7 @@ var PrRunner = class extends BaseProcessToolRunner {
   /** Fetch a single page of PR files from GitHub API */
   async fetchPrFilesPage(repo, prNumber, page, token) {
     const response = await fetch(
-      `https://api.github.com/repos/${repo}/pulls/${prNumber}/files?per_page=100&page=${page}`,
+      `${GITHUB_API.baseUrl}/repos/${repo}/pulls/${prNumber}/files?per_page=${GITHUB_API.perPage}&page=${page}`,
       {
         headers: {
           Authorization: `Bearer ${token}`,
@@ -6820,24 +6825,30 @@ function createRegistry(registryPath, projectTypes, dryRun) {
 // src/projects/tier-loader.ts
 import * as fs21 from "fs";
 import * as path19 from "path";
-import * as yaml3 from "js-yaml";
+import TOML from "@iarna/toml";
 var DEFAULT_TIER = "internal";
 var VALID_TIERS = ["production", "internal", "prototype"];
 function loadProjectTier(projectDir) {
-  const metadataPath = path19.join(projectDir, "repo-metadata.yaml");
-  if (!fs21.existsSync(metadataPath)) {
+  const tomlPath = path19.join(projectDir, "standards.toml");
+  if (!fs21.existsSync(tomlPath)) {
     return { tier: void 0, source: null };
   }
   try {
-    const content = fs21.readFileSync(metadataPath, "utf-8");
-    const metadata = yaml3.load(content);
-    if (!metadata?.tier) {
+    const content = fs21.readFileSync(tomlPath, "utf-8");
+    const parsed = TOML.parse(content);
+    if (!parsed.metadata?.tier) {
       return { tier: DEFAULT_TIER, source: "default" };
     }
-    if (!VALID_TIERS.includes(metadata.tier)) {
+    if (!VALID_TIERS.includes(parsed.metadata.tier)) {
       return { tier: DEFAULT_TIER, source: "default" };
     }
-    return { tier: metadata.tier, source: "repo-metadata.yaml" };
+    return {
+      tier: parsed.metadata.tier,
+      source: "standards.toml",
+      project: parsed.metadata.project,
+      organisation: parsed.metadata.organisation,
+      status: parsed.metadata.status
+    };
   } catch {
     return { tier: void 0, source: null };
   }
@@ -7135,7 +7146,7 @@ validateCommand.command("config").description("Validate standards.toml configura
   new Option("-f, --format <format>", "Output format").choices(["text", "json"]).default("text")
 ).action(async (options) => {
   try {
-    const { loadConfigWithOverrides } = await import("./core-KB2W6SE2.js");
+    const { loadConfigWithOverrides } = await import("./core-QRFGIQ42.js");
     const { configPath, overrides } = await loadConfigWithOverrides(options.config);
     outputValidateResult(configPath, overrides, options);
     process.exit(ExitCode.SUCCESS);
@@ -7228,7 +7239,7 @@ validateCommand.command("tier").description("Validate tier-ruleset alignment (re
   new Option("-f, --format <format>", "Output format").choices(["text", "json"]).default("text")
 ).action(async (options) => {
   try {
-    const { validateTierRuleset, formatTierResultText, formatTierResultJson } = await import("./validate-DKEJICCK.js");
+    const { validateTierRuleset, formatTierResultText, formatTierResultJson } = await import("./validate-J5E336GX.js");
     const result = validateTierRuleset({ config: options.config });
     const output = options.format === "json" ? formatTierResultJson(result) : formatTierResultText(result);
     process.stdout.write(`${output}
@@ -7255,7 +7266,7 @@ validateCommand.command("guidelines <path>").description("Validate guideline mar
   new Option("-f, --format <format>", "Output format").choices(["text", "json"]).default("text")
 ).action(async (dirPath, options) => {
   try {
-    const { runValidateGuidelines } = await import("./validate-DKEJICCK.js");
+    const { runValidateGuidelines } = await import("./validate-J5E336GX.js");
     await runValidateGuidelines(dirPath, options);
   } catch (error) {
     handleError(error);
@@ -7274,7 +7285,7 @@ schemaCommand.command("config").description("Output JSON schema for standards.to
 `);
 });
 schemaCommand.command("guidelines").description("Output JSON schema for guideline frontmatter").action(async () => {
-  const { frontmatterSchema } = await import("./standards-RXK5G4IG.js");
+  const { frontmatterSchema } = await import("./standards-XAZKTKYJ.js");
   const jsonSchema = zodToJsonSchema(frontmatterSchema, {
     name: "GuidelineFrontmatter",
     $refStrategy: "none"
@@ -7303,14 +7314,14 @@ processCommand.command("audit").description("Verify workflow configs exist").opt
 processCommand.command("diff").description("Show repository setting differences (current vs. config)").option("-c, --config <path>", "Path to standards.toml config file").addOption(
   new Option("-f, --format <format>", "Output format").choices(["text", "json"]).default("text")
 ).action(async (options) => {
-  const { runDiff } = await import("./sync-XV6XBLVZ.js");
+  const { runDiff } = await import("./sync-P3UZECLW.js");
   await runDiff({ config: options.config, format: options.format });
 });
 processCommand.command("sync").description("Synchronize repository settings to match config").option("-c, --config <path>", "Path to standards.toml config file").option("--apply", "Actually apply changes (required for safety)").option("--validate-actors", "Validate bypass actor IDs against GitHub API before applying").addOption(
   new Option("-f, --format <format>", "Output format").choices(["text", "json"]).default("text")
 ).action(
   async (options) => {
-    const { runSync } = await import("./sync-XV6XBLVZ.js");
+    const { runSync } = await import("./sync-P3UZECLW.js");
     await runSync({
       config: options.config,
       format: options.format,
@@ -7322,13 +7333,13 @@ processCommand.command("sync").description("Synchronize repository settings to m
 processCommand.command("diff-tags").description("Show tag protection differences (current vs. config)").option("-c, --config <path>", "Path to standards.toml config file").addOption(
   new Option("-f, --format <format>", "Output format").choices(["text", "json"]).default("text")
 ).action(async (options) => {
-  const { runTagDiff } = await import("./sync-XV6XBLVZ.js");
+  const { runTagDiff } = await import("./sync-P3UZECLW.js");
   await runTagDiff({ config: options.config, format: options.format });
 });
 processCommand.command("sync-tags").description("Synchronize tag protection ruleset to match config").option("-c, --config <path>", "Path to standards.toml config file").option("--apply", "Actually apply changes (required for safety)").addOption(
   new Option("-f, --format <format>", "Output format").choices(["text", "json"]).default("text")
 ).action(async (options) => {
-  const { runTagSync } = await import("./sync-XV6XBLVZ.js");
+  const { runTagSync } = await import("./sync-P3UZECLW.js");
   await runTagSync({
     config: options.config,
     format: options.format,
@@ -7359,7 +7370,7 @@ processCommand.command("scan").description("Scan remote repository settings via
 ).option("-c, --config <path>", "Path to standards.toml config file").addOption(
   new Option("-f, --format <format>", "Output format").choices(["text", "json"]).default("text")
 ).action(async (options) => {
-  const { runScan } = await import("./scan-IKEHLZXV.js");
+  const { runScan } = await import("./scan-RHQWHASY.js");
   await runScan({
     repo: options.repo,
     config: options.config,
@@ -7399,7 +7410,7 @@ var infraCommand = configureExitOverride(
 infraCommand.command("scan").description("Verify AWS resources declared in manifest exist").option("-c, --config <path>", "Path to standards.toml config file").option("-m, --manifest <path>", "Path to manifest file (overrides config)").option("-a, --account <name>", "Filter to specific account (by alias or account key like 'aws:123')").addOption(
   new Option("-f, --format <format>", "Output format").choices(["text", "json"]).default("text")
 ).action(async (options) => {
-  const { runInfraScan } = await import("./infra-ZQRXX7AW.js");
+  const { runInfraScan } = await import("./infra-TO54IUSC.js");
   await runInfraScan({
     configPath: options.config,
     manifestPath: options.manifest,
@@ -7409,7 +7420,7 @@ infraCommand.command("scan").description("Verify AWS resources declared in manif
 });
 infraCommand.command("generate").description("Generate infra-manifest.json from Pulumi stack export").option("-i, --input <path>", "Input file (reads from stdin if not provided)").option("-o, --output <path>", "Output file path (default: infra-manifest.json)").option("-p, --project <name>", "Project name (extracted from stack if not provided)").option("-a, --account <alias>", "Account alias (e.g., 'prod-aws')").option("--account-id <id>", "Explicit account ID (e.g., 'aws:111111111111')").option("--merge", "Merge into existing manifest instead of overwriting").option("--stdout", "Output to stdout instead of file").action(
   async (options) => {
-    const { runInfraGenerate } = await import("./infra-ZQRXX7AW.js");
+    const { runInfraGenerate } = await import("./infra-TO54IUSC.js");
     await runInfraGenerate(options);
   }
 );
@@ -7422,7 +7433,7 @@ program.command("audit").description("Verify all configs exist (code + process)"
 ).action((options) => runAudit(options));
 program.command("mcp").description("Start MCP server for coding standards (for Claude Desktop integration)").action(async () => {
   try {
-    const { startServer } = await import("./mcp-WXYRFNEV.js");
+    const { startServer } = await import("./mcp-73FZXT3P.js");
     await startServer();
   } catch (error) {
     handleError(error);