@standards-kit/conform 0.3.1 → 0.4.0

package/dist/code/tools/base.d.ts

@@ -9,11 +9,13 @@ export declare abstract class BaseToolRunner implements IToolRunner {
     abstract readonly toolId: string;
     abstract readonly configFiles: string[];
     /**
-     * Check if any of the config files exist
+     * Check if any of the config files exist in projectRoot or parent directories.
+     * Most tools (ESLint, TSC, etc.) walk up directories to find configs.
      */
     protected hasConfig(projectRoot: string): boolean;
     /**
-     * Find which config file exists (if any)
+     * Find which config file exists, searching projectRoot and parent directories.
+     * Returns the path relative to the directory where it was found, or null.
      */
     protected findConfig(projectRoot: string): string | null;
     /**

package/dist/constants.d.ts

@@ -58,12 +58,3 @@ export declare const CONCURRENCY: {
     /** Default concurrency for infrastructure resource checks */
     readonly infraScan: 10;
 };
-/**
- * Default threshold values
- */
-export declare const DEFAULTS: {
-    /** Default backup max age in hours */
-    readonly backupMaxAgeHours: 24;
-    /** Default code coverage minimum threshold */
-    readonly coverageMinThreshold: 80;
-};

package/dist/core/index.d.ts

@@ -4,4 +4,3 @@ export type { Config } from "./schema.js";
 export { configSchema, defaultConfig, DEFAULT_FORBIDDEN_FILES_IGNORE } from "./schema.js";
 export { CONFIG_FILE_NAME, ConfigError, findConfigFile, loadConfig, loadConfigAsync, loadConfigWithOverrides, getProjectRoot, } from "./loader.js";
 export type { ConfigOverride } from "./loader.js";
-export { parseRegistryUrl, fetchRegistry, loadRuleset, mergeConfigs, resolveExtends, } from "./registry.js";

package/dist/core/schema.d.ts

@@ -154,6 +154,7 @@ export declare const configSchema: z.ZodObject<{
             require_hooks: z.ZodOptional<z.ZodArray<z.ZodString>>;
             commands: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodArray<z.ZodString>>>;
             protected_branches: z.ZodOptional<z.ZodArray<z.ZodString>>;
+            templates: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
         }, z.core.$strict>>;
         ci: z.ZodOptional<z.ZodObject<{
             enabled: z.ZodDefault<z.ZodOptional<z.ZodBoolean>>;

package/dist/{core-LFX2BFLG.js → core-HQ7WZCSW.js}

@@ -3,25 +3,20 @@ import {
   DomainResultBuilder,
   ExitCode,
   ViolationBuilder
-} from "./chunk-DXIYZR62.js";
+} from "./chunk-G5AS4QBP.js";
 import {
   CONFIG_FILE_NAME,
   ConfigError,
   DEFAULT_FORBIDDEN_FILES_IGNORE,
   configSchema,
   defaultConfig,
-  fetchRegistry,
   findConfigFile,
   getProjectRoot,
   loadConfig,
   loadConfigAsync,
-  loadConfigWithOverrides,
-  loadRuleset,
-  mergeConfigs,
-  parseRegistryUrl,
-  resolveExtends
-} from "./chunk-FJZMUGYW.js";
-import "./chunk-RHM53NLG.js";
+  loadConfigWithOverrides
+} from "./chunk-ZKFWS3GU.js";
+import "./chunk-RR4OEIAZ.js";
 export {
   CONFIG_FILE_NAME,
   CheckResultBuilder,
@@ -32,15 +27,10 @@ export {
   ViolationBuilder,
   configSchema,
   defaultConfig,
-  fetchRegistry,
   findConfigFile,
   getProjectRoot,
   loadConfig,
   loadConfigAsync,
-  loadConfigWithOverrides,
-  loadRuleset,
-  mergeConfigs,
-  parseRegistryUrl,
-  resolveExtends
+  loadConfigWithOverrides
 };
-//# sourceMappingURL=core-LFX2BFLG.js.map
+//# sourceMappingURL=core-HQ7WZCSW.js.map

package/dist/{generate-D4MFMOHP.js → generate-4EY6VETG.js}

@@ -10,8 +10,8 @@ import {
   parseStackExportMultiAccount,
   readExistingManifest,
   writeManifest
-} from "./chunk-J5S6GRGW.js";
-import "./chunk-M7G73Q6P.js";
+} from "./chunk-XZERDHOH.js";
+import "./chunk-T2PWT2B5.js";
 export {
   DEFAULT_MANIFEST_NAME,
   generateManifestFromFile,
@@ -25,4 +25,4 @@ export {
   readExistingManifest,
   writeManifest
 };
-//# sourceMappingURL=generate-D4MFMOHP.js.map
+//# sourceMappingURL=generate-4EY6VETG.js.map

package/dist/{iam-YXMHK2MV.js → iam-363WGRLI.js}

@@ -1,6 +1,6 @@
 import {
   AWS_DEFAULTS
-} from "./chunk-RHM53NLG.js";
+} from "./chunk-RR4OEIAZ.js";
 
 // src/infra/checkers/iam.ts
 import { GetPolicyCommand, GetRoleCommand, IAMClient } from "@aws-sdk/client-iam";
@@ -97,4 +97,4 @@ async function checkPolicy(policyArn) {
 export {
   IAMChecker
 };
-//# sourceMappingURL=iam-YXMHK2MV.js.map
+//# sourceMappingURL=iam-363WGRLI.js.map

package/dist/index.d.ts

@@ -5,7 +5,7 @@ export type { CheckResult, DomainResult, DomainStatus, ExitCodeType, FullResult,
 export { CheckResultBuilder, DomainResultBuilder, ExitCode, ViolationBuilder, } from "./core/index.js";
 export { type Config, ConfigError, configSchema, defaultConfig, findConfigFile, getProjectRoot, loadConfig, } from "./core/index.js";
 export { auditCodeConfig, BaseToolRunner, ESLintRunner, KnipRunner, NamingRunner, RuffRunner, runCodeChecks, TscRunner, TyRunner, VultureRunner, } from "./code/index.js";
-export { auditProcessConfig, BaseProcessToolRunner, HooksRunner, runProcessChecks, } from "./process/index.js";
+export { auditProcessConfig, HooksRunner, runProcessChecks, } from "./process/index.js";
 export { type RemoteRepoInfo, type ScanOptions, scanRepository, type ScanResult, validateProcess, type ValidateProcessOptions, type ValidateProcessResult, } from "./process/scan/index.js";
 export { formatJson, formatOutput, formatText, type OutputFormat } from "./output/index.js";
 export { type DependenciesOptions, type DependenciesResult, getDependencies, } from "./dependencies/index.js";

package/dist/index.js

@@ -10,13 +10,13 @@ import {
   parseStackExportMultiAccount,
   readExistingManifest,
   writeManifest
-} from "./chunk-J5S6GRGW.js";
+} from "./chunk-XZERDHOH.js";
 import {
   CheckResultBuilder,
   DomainResultBuilder,
   ExitCode,
   ViolationBuilder
-} from "./chunk-DXIYZR62.js";
+} from "./chunk-G5AS4QBP.js";
 import {
   ConfigError,
   DEFAULT_FORBIDDEN_FILES_IGNORE,
@@ -26,7 +26,7 @@ import {
   getProjectRoot,
   loadConfig,
   loadConfigAsync
-} from "./chunk-FJZMUGYW.js";
+} from "./chunk-ZKFWS3GU.js";
 import {
   AccountIdSchema,
   AccountKeySchema,
@@ -70,7 +70,7 @@ import {
   validateManifest,
   validateMultiAccountManifest,
   validateStackExport
-} from "./chunk-M7G73Q6P.js";
+} from "./chunk-T2PWT2B5.js";
 import {
   AWS_DEFAULTS,
   CACHE,
@@ -78,26 +78,34 @@ import {
   GITHUB_API,
   STANDARDS_REPO,
   TIMEOUTS
-} from "./chunk-RHM53NLG.js";
+} from "./chunk-RR4OEIAZ.js";
 
 // src/code/tools/base.ts
 import * as fs from "fs";
 import * as path from "path";
 var BaseToolRunner = class {
   /**
-   * Check if any of the config files exist
+   * Check if any of the config files exist in projectRoot or parent directories.
+   * Most tools (ESLint, TSC, etc.) walk up directories to find configs.
    */
   hasConfig(projectRoot) {
-    return this.configFiles.some((config) => fs.existsSync(path.join(projectRoot, config)));
+    return this.findConfig(projectRoot) !== null;
   }
   /**
-   * Find which config file exists (if any)
+   * Find which config file exists, searching projectRoot and parent directories.
+   * Returns the path relative to the directory where it was found, or null.
    */
   findConfig(projectRoot) {
-    for (const config of this.configFiles) {
-      if (fs.existsSync(path.join(projectRoot, config))) {
-        return config;
+    let dir = path.resolve(projectRoot);
+    const root = path.parse(dir).root;
+    while (true) {
+      for (const config of this.configFiles) {
+        if (fs.existsSync(path.join(dir, config))) {
+          return dir === path.resolve(projectRoot) ? config : path.join(dir, config);
+        }
       }
+      if (dir === root) break;
+      dir = path.dirname(dir);
     }
     return null;
   }
@@ -5169,6 +5177,28 @@ var HooksRunner = class extends BaseProcessToolRunner {
       (pattern) => this.fileContains(projectRoot, hookPath, pattern)
     );
   }
+  /** Check that hook files match expected template content */
+  checkHookTemplates(projectRoot) {
+    const templates = this.config.templates ?? {};
+    const violations = [];
+    for (const [hook, expectedContent] of Object.entries(templates)) {
+      const hookPath = `.husky/${hook}`;
+      const actual = this.readFile(projectRoot, hookPath);
+      if (actual === null) {
+        continue;
+      }
+      if (actual.trim() !== expectedContent.trim()) {
+        violations.push({
+          rule: `${this.rule}.${hook}.template`,
+          tool: this.toolId,
+          file: hookPath,
+          message: `Hook '${hook}' does not match expected template`,
+          severity: "error"
+        });
+      }
+    }
+    return violations;
+  }
   /** Check that pre-push hook prevents direct pushes to protected branches */
   checkProtectedBranches(projectRoot) {
     const protectedBranches = this.config.protected_branches ?? [];
@@ -5210,6 +5240,7 @@ var HooksRunner = class extends BaseProcessToolRunner {
     const violations = [
       ...this.checkRequiredHooks(projectRoot),
       ...this.checkHookCommands(projectRoot),
+      ...this.checkHookTemplates(projectRoot),
       ...this.checkProtectedBranches(projectRoot)
     ];
     return this.fromViolations(violations, elapsed());
@@ -5921,7 +5952,8 @@ function createHooksRunner(config) {
       require_husky: hooksConfig.require_husky,
       require_hooks: hooksConfig.require_hooks,
       commands: hooksConfig.commands,
-      protected_branches: hooksConfig.protected_branches
+      protected_branches: hooksConfig.protected_branches,
+      templates: hooksConfig.templates
     });
   }
   return runner;
@@ -6663,7 +6695,7 @@ async function scanRepository(repo, config) {
   return aggregateResults(repoInfo, [rulesetsResult, filesResult]);
 }
 async function validateProcess(options) {
-  const { loadConfigAsync: loadConfigAsync2 } = await import("./core-LFX2BFLG.js");
+  const { loadConfigAsync: loadConfigAsync2 } = await import("./core-HQ7WZCSW.js");
   const { config } = await loadConfigAsync2(options.config);
   const result = await scanRepository(options.repo, config);
   const fs22 = await import("fs");
@@ -7636,12 +7668,12 @@ function isSupportedService(service) {
   return SUPPORTED_SERVICES.includes(service);
 }
 var checkerFactories = {
-  s3: async () => (await import("./s3-53UELUWT.js")).S3Checker,
+  s3: async () => (await import("./s3-MFBDXYQ5.js")).S3Checker,
   lambda: async () => (await import("./lambda-YTJOCYV5.js")).LambdaChecker,
   dynamodb: async () => (await import("./dynamodb-HQH3IMAI.js")).DynamoDBChecker,
   sqs: async () => (await import("./sqs-MHBW6UFC.js")).SQSChecker,
   sns: async () => (await import("./sns-RV64OMK2.js")).SNSChecker,
-  iam: async () => (await import("./iam-YXMHK2MV.js")).IAMChecker,
+  iam: async () => (await import("./iam-363WGRLI.js")).IAMChecker,
   secretsmanager: async () => (await import("./secretsmanager-FJKTPIXI.js")).SecretsManagerChecker,
   logs: async () => (await import("./cloudwatch-3LTDYG6G.js")).CloudWatchLogsChecker,
   ecs: async () => (await import("./ecs-UHKCH5A7.js")).ECSChecker,
@@ -7862,7 +7894,6 @@ export {
   AccountIdSchema,
   AccountKeySchema,
   ArnSchema,
-  BaseProcessToolRunner,
   BaseToolRunner,
   CheckResultBuilder,
   CloudProviderSchema,