@standards-kit/conform 0.3.2 → 0.4.0

package/dist/code/tools/base.d.ts

@@ -9,11 +9,13 @@ export declare abstract class BaseToolRunner implements IToolRunner {
     abstract readonly toolId: string;
     abstract readonly configFiles: string[];
     /**
-     * Check if any of the config files exist
+     * Check if any of the config files exist in projectRoot or parent directories.
+     * Most tools (ESLint, TSC, etc.) walk up directories to find configs.
      */
     protected hasConfig(projectRoot: string): boolean;
     /**
-     * Find which config file exists (if any)
+     * Find which config file exists, searching projectRoot and parent directories.
+     * Returns the path relative to the directory where it was found, or null.
      */
     protected findConfig(projectRoot: string): string | null;
     /**

package/dist/core/schema.d.ts

@@ -154,6 +154,7 @@ export declare const configSchema: z.ZodObject<{
             require_hooks: z.ZodOptional<z.ZodArray<z.ZodString>>;
             commands: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodArray<z.ZodString>>>;
             protected_branches: z.ZodOptional<z.ZodArray<z.ZodString>>;
+            templates: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
         }, z.core.$strict>>;
         ci: z.ZodOptional<z.ZodObject<{
             enabled: z.ZodDefault<z.ZodOptional<z.ZodBoolean>>;

package/dist/{core-SAQ5O5IL.js → core-HQ7WZCSW.js}

@@ -15,8 +15,8 @@ import {
   loadConfig,
   loadConfigAsync,
   loadConfigWithOverrides
-} from "./chunk-UU6OT5O3.js";
-import "./chunk-HMNRMNEA.js";
+} from "./chunk-ZKFWS3GU.js";
+import "./chunk-RR4OEIAZ.js";
 export {
   CONFIG_FILE_NAME,
   CheckResultBuilder,
@@ -33,4 +33,4 @@ export {
   loadConfigAsync,
   loadConfigWithOverrides
 };
-//# sourceMappingURL=core-SAQ5O5IL.js.map
+//# sourceMappingURL=core-HQ7WZCSW.js.map

package/dist/{iam-ZV3RA3JZ.js → iam-363WGRLI.js}

@@ -1,6 +1,6 @@
 import {
   AWS_DEFAULTS
-} from "./chunk-HMNRMNEA.js";
+} from "./chunk-RR4OEIAZ.js";
 
 // src/infra/checkers/iam.ts
 import { GetPolicyCommand, GetRoleCommand, IAMClient } from "@aws-sdk/client-iam";
@@ -97,4 +97,4 @@ async function checkPolicy(policyArn) {
 export {
   IAMChecker
 };
-//# sourceMappingURL=iam-ZV3RA3JZ.js.map
+//# sourceMappingURL=iam-363WGRLI.js.map

package/dist/index.js

@@ -26,7 +26,7 @@ import {
   getProjectRoot,
   loadConfig,
   loadConfigAsync
-} from "./chunk-UU6OT5O3.js";
+} from "./chunk-ZKFWS3GU.js";
 import {
   AccountIdSchema,
   AccountKeySchema,
@@ -78,26 +78,34 @@ import {
   GITHUB_API,
   STANDARDS_REPO,
   TIMEOUTS
-} from "./chunk-HMNRMNEA.js";
+} from "./chunk-RR4OEIAZ.js";
 
 // src/code/tools/base.ts
 import * as fs from "fs";
 import * as path from "path";
 var BaseToolRunner = class {
   /**
-   * Check if any of the config files exist
+   * Check if any of the config files exist in projectRoot or parent directories.
+   * Most tools (ESLint, TSC, etc.) walk up directories to find configs.
    */
   hasConfig(projectRoot) {
-    return this.configFiles.some((config) => fs.existsSync(path.join(projectRoot, config)));
+    return this.findConfig(projectRoot) !== null;
   }
   /**
-   * Find which config file exists (if any)
+   * Find which config file exists, searching projectRoot and parent directories.
+   * Returns the path relative to the directory where it was found, or null.
    */
   findConfig(projectRoot) {
-    for (const config of this.configFiles) {
-      if (fs.existsSync(path.join(projectRoot, config))) {
-        return config;
+    let dir = path.resolve(projectRoot);
+    const root = path.parse(dir).root;
+    while (true) {
+      for (const config of this.configFiles) {
+        if (fs.existsSync(path.join(dir, config))) {
+          return dir === path.resolve(projectRoot) ? config : path.join(dir, config);
+        }
       }
+      if (dir === root) break;
+      dir = path.dirname(dir);
     }
     return null;
   }
@@ -5169,6 +5177,28 @@ var HooksRunner = class extends BaseProcessToolRunner {
       (pattern) => this.fileContains(projectRoot, hookPath, pattern)
     );
   }
+  /** Check that hook files match expected template content */
+  checkHookTemplates(projectRoot) {
+    const templates = this.config.templates ?? {};
+    const violations = [];
+    for (const [hook, expectedContent] of Object.entries(templates)) {
+      const hookPath = `.husky/${hook}`;
+      const actual = this.readFile(projectRoot, hookPath);
+      if (actual === null) {
+        continue;
+      }
+      if (actual.trim() !== expectedContent.trim()) {
+        violations.push({
+          rule: `${this.rule}.${hook}.template`,
+          tool: this.toolId,
+          file: hookPath,
+          message: `Hook '${hook}' does not match expected template`,
+          severity: "error"
+        });
+      }
+    }
+    return violations;
+  }
   /** Check that pre-push hook prevents direct pushes to protected branches */
   checkProtectedBranches(projectRoot) {
     const protectedBranches = this.config.protected_branches ?? [];
@@ -5210,6 +5240,7 @@ var HooksRunner = class extends BaseProcessToolRunner {
     const violations = [
       ...this.checkRequiredHooks(projectRoot),
       ...this.checkHookCommands(projectRoot),
+      ...this.checkHookTemplates(projectRoot),
       ...this.checkProtectedBranches(projectRoot)
     ];
     return this.fromViolations(violations, elapsed());
@@ -5921,7 +5952,8 @@ function createHooksRunner(config) {
       require_husky: hooksConfig.require_husky,
       require_hooks: hooksConfig.require_hooks,
       commands: hooksConfig.commands,
-      protected_branches: hooksConfig.protected_branches
+      protected_branches: hooksConfig.protected_branches,
+      templates: hooksConfig.templates
     });
   }
   return runner;
@@ -6663,7 +6695,7 @@ async function scanRepository(repo, config) {
   return aggregateResults(repoInfo, [rulesetsResult, filesResult]);
 }
 async function validateProcess(options) {
-  const { loadConfigAsync: loadConfigAsync2 } = await import("./core-SAQ5O5IL.js");
+  const { loadConfigAsync: loadConfigAsync2 } = await import("./core-HQ7WZCSW.js");
   const { config } = await loadConfigAsync2(options.config);
   const result = await scanRepository(options.repo, config);
   const fs22 = await import("fs");
@@ -7636,12 +7668,12 @@ function isSupportedService(service) {
   return SUPPORTED_SERVICES.includes(service);
 }
 var checkerFactories = {
-  s3: async () => (await import("./s3-3DJX6X5S.js")).S3Checker,
+  s3: async () => (await import("./s3-MFBDXYQ5.js")).S3Checker,
   lambda: async () => (await import("./lambda-YTJOCYV5.js")).LambdaChecker,
   dynamodb: async () => (await import("./dynamodb-HQH3IMAI.js")).DynamoDBChecker,
   sqs: async () => (await import("./sqs-MHBW6UFC.js")).SQSChecker,
   sns: async () => (await import("./sns-RV64OMK2.js")).SNSChecker,
-  iam: async () => (await import("./iam-ZV3RA3JZ.js")).IAMChecker,
+  iam: async () => (await import("./iam-363WGRLI.js")).IAMChecker,
   secretsmanager: async () => (await import("./secretsmanager-FJKTPIXI.js")).SecretsManagerChecker,
   logs: async () => (await import("./cloudwatch-3LTDYG6G.js")).CloudWatchLogsChecker,
   ecs: async () => (await import("./ecs-UHKCH5A7.js")).ECSChecker,