@stll/oxlint-config 1.0.2 → 1.2.0

package/dist/toolchain-check-cli.cjs.map

@@ -1 +1 @@
-{"version":3,"file":"toolchain-check-cli.cjs","names":["parseToolchainPolicy","checkToolchain"],"sources":["../src/toolchain-check-cli.ts"],"sourcesContent":["#!/usr/bin/env node\nimport { readFileSync } from \"node:fs\";\n\nimport { checkToolchain } from \"./toolchain-guard\";\nimport { parseToolchainPolicy } from \"./toolchain-schema\";\n\ntry {\n  const args = process.argv.slice(2);\n  if (args.length === 1 && args[0] === \"--help\") {\n    process.stdout.write(\n      \"Usage: stll-toolchain-check (opt-outs: tracked stll-toolchain.json)\\n\",\n    );\n    process.exit(0);\n  }\n  if (args.length !== 0) throw new Error(`unexpected argument: ${args.at(0)}`);\n  const policy = parseToolchainPolicy(\n    JSON.parse(\n      readFileSync(new URL(\"../toolchain.json\", import.meta.url), \"utf8\"),\n    ),\n  );\n  const diagnostics = checkToolchain({\n    root: process.cwd(),\n    policy,\n    onDelegated: ({ path, line, tool, selector, ref }) =>\n      process.stdout.write(\n        `${path}:${line}: [runtime-delegated] setup-${tool} ${selector} delegates its version to checkout ref ${ref}\\n`,\n      ),\n  });\n  for (const diagnostic of diagnostics)\n    process.stderr.write(\n      `${diagnostic.path}:${diagnostic.line}: [${diagnostic.rule}] ${diagnostic.message}\\n`,\n    );\n  if (diagnostics.length > 0) process.exitCode = 1;\n} catch (error) {\n  process.stderr.write(\n    `toolchain-check:1: ${error instanceof Error ? error.message : String(error)}\\n`,\n  );\n  process.exitCode = 1;\n}\n"],"mappings":";;;;;;AAMA,IAAI;CACF,MAAM,OAAO,QAAQ,KAAK,MAAM,CAAC;CACjC,IAAI,KAAK,WAAW,KAAK,KAAK,OAAO,UAAU;EAC7C,QAAQ,OAAO,MACb,uEACF;EACA,QAAQ,KAAK,CAAC;CAChB;CACA,IAAI,KAAK,WAAW,GAAG,MAAM,IAAI,MAAM,wBAAwB,KAAK,GAAG,CAAC,GAAG;CAC3E,MAAM,SAASA,yBAAAA,qBACb,KAAK,OAAA,GAAA,QAAA,aAAA,CACU,IAAI,IAAI,qBAAA,QAAA,KAAA,CAAA,CAAA,cAAA,UAAA,CAAA,CAAA,IAAoC,GAAG,MAAM,CACpE,CACF;CACA,MAAM,cAAcC,wBAAAA,eAAe;EACjC,MAAM,QAAQ,IAAI;EAClB;EACA,cAAc,EAAE,MAAM,MAAM,MAAM,UAAU,UAC1C,QAAQ,OAAO,MACb,GAAG,KAAK,GAAG,KAAK,8BAA8B,KAAK,GAAG,SAAS,yCAAyC,IAAI,GAC9G;CACJ,CAAC;CACD,KAAK,MAAM,cAAc,aACvB,QAAQ,OAAO,MACb,GAAG,WAAW,KAAK,GAAG,WAAW,KAAK,KAAK,WAAW,KAAK,IAAI,WAAW,QAAQ,GACpF;CACF,IAAI,YAAY,SAAS,GAAG,QAAQ,WAAW;AACjD,SAAS,OAAO;CACd,QAAQ,OAAO,MACb,sBAAsB,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK,EAAE,GAC/E;CACA,QAAQ,WAAW;AACrB"}
+{"version":3,"file":"toolchain-check-cli.cjs","names":["parseToolchainPolicy","readFileSync","checkToolchain"],"sources":["../src/toolchain-check-cli.ts"],"sourcesContent":["#!/usr/bin/env node\nimport { readFileSync } from \"node:fs\";\n\nimport { checkToolchain } from \"./toolchain-guard\";\nimport { parseToolchainPolicy } from \"./toolchain-schema\";\n\ntry {\n  const args = process.argv.slice(2);\n  if (args.length === 1 && args[0] === \"--help\") {\n    process.stdout.write(\n      \"Usage: stll-toolchain-check (opt-outs: tracked stll-toolchain.json)\\n\",\n    );\n    process.exit(0);\n  }\n  if (args.length !== 0) throw new Error(`unexpected argument: ${args.at(0)}`);\n  const policy = parseToolchainPolicy(\n    JSON.parse(\n      readFileSync(new URL(\"../toolchain.json\", import.meta.url), \"utf8\"),\n    ),\n  );\n  const diagnostics = checkToolchain({\n    root: process.cwd(),\n    policy,\n    onDelegated: ({ path, line, tool, selector, ref }) =>\n      process.stdout.write(\n        `${path}:${line}: [runtime-delegated] setup-${tool} ${selector} delegates its version to checkout ref ${ref}\\n`,\n      ),\n  });\n  for (const diagnostic of diagnostics)\n    process.stderr.write(\n      `${diagnostic.path}:${diagnostic.line}: [${diagnostic.rule}] ${diagnostic.message}\\n`,\n    );\n  if (diagnostics.length > 0) process.exitCode = 1;\n} catch (error) {\n  process.stderr.write(\n    `toolchain-check:1: ${error instanceof Error ? error.message : String(error)}\\n`,\n  );\n  process.exitCode = 1;\n}\n"],"mappings":";;;;;;AAMA,IAAI;CACF,MAAM,OAAO,QAAQ,KAAK,MAAM,CAAC;CACjC,IAAI,KAAK,WAAW,KAAK,KAAK,OAAO,UAAU;EAC7C,QAAQ,OAAO,MACb,uEACF;EACA,QAAQ,KAAK,CAAC;CAChB;CACA,IAAI,KAAK,WAAW,GAAG,MAAM,IAAI,MAAM,wBAAwB,KAAK,GAAG,CAAC,GAAG;CAC3E,MAAM,SAASA,yBAAAA,qBACb,KAAK,OAAA,GACHC,QAAAA,aAAAA,CAAa,IAAI,IAAI,qBAAA,QAAA,KAAA,CAAA,CAAA,cAAA,UAAA,CAAA,CAAA,IAAoC,GAAG,MAAM,CACpE,CACF;CACA,MAAM,cAAcC,wBAAAA,eAAe;EACjC,MAAM,QAAQ,IAAI;EAClB;EACA,cAAc,EAAE,MAAM,MAAM,MAAM,UAAU,UAC1C,QAAQ,OAAO,MACb,GAAG,KAAK,GAAG,KAAK,8BAA8B,KAAK,GAAG,SAAS,yCAAyC,IAAI,GAC9G;CACJ,CAAC;CACD,KAAK,MAAM,cAAc,aACvB,QAAQ,OAAO,MACb,GAAG,WAAW,KAAK,GAAG,WAAW,KAAK,KAAK,WAAW,KAAK,IAAI,WAAW,QAAQ,GACpF;CACF,IAAI,YAAY,SAAS,GAAG,QAAQ,WAAW;AACjD,SAAS,OAAO;CACd,QAAQ,OAAO,MACb,sBAAsB,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK,EAAE,GAC/E;CACA,QAAQ,WAAW;AACrB"}

package/dist/toolchain-check-cli.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"toolchain-check-cli.mjs","names":[],"sources":["../src/toolchain-check-cli.ts"],"sourcesContent":["#!/usr/bin/env node\nimport { readFileSync } from \"node:fs\";\n\nimport { checkToolchain } from \"./toolchain-guard\";\nimport { parseToolchainPolicy } from \"./toolchain-schema\";\n\ntry {\n  const args = process.argv.slice(2);\n  if (args.length === 1 && args[0] === \"--help\") {\n    process.stdout.write(\n      \"Usage: stll-toolchain-check (opt-outs: tracked stll-toolchain.json)\\n\",\n    );\n    process.exit(0);\n  }\n  if (args.length !== 0) throw new Error(`unexpected argument: ${args.at(0)}`);\n  const policy = parseToolchainPolicy(\n    JSON.parse(\n      readFileSync(new URL(\"../toolchain.json\", import.meta.url), \"utf8\"),\n    ),\n  );\n  const diagnostics = checkToolchain({\n    root: process.cwd(),\n    policy,\n    onDelegated: ({ path, line, tool, selector, ref }) =>\n      process.stdout.write(\n        `${path}:${line}: [runtime-delegated] setup-${tool} ${selector} delegates its version to checkout ref ${ref}\\n`,\n      ),\n  });\n  for (const diagnostic of diagnostics)\n    process.stderr.write(\n      `${diagnostic.path}:${diagnostic.line}: [${diagnostic.rule}] ${diagnostic.message}\\n`,\n    );\n  if (diagnostics.length > 0) process.exitCode = 1;\n} catch (error) {\n  process.stderr.write(\n    `toolchain-check:1: ${error instanceof Error ? error.message : String(error)}\\n`,\n  );\n  process.exitCode = 1;\n}\n"],"mappings":";;;;;AAMA,IAAI;CACF,MAAM,OAAO,QAAQ,KAAK,MAAM,CAAC;CACjC,IAAI,KAAK,WAAW,KAAK,KAAK,OAAO,UAAU;EAC7C,QAAQ,OAAO,MACb,uEACF;EACA,QAAQ,KAAK,CAAC;CAChB;CACA,IAAI,KAAK,WAAW,GAAG,MAAM,IAAI,MAAM,wBAAwB,KAAK,GAAG,CAAC,GAAG;CAC3E,MAAM,SAAS,qBACb,KAAK,MACH,aAAa,IAAI,IAAI,qBAAqB,OAAO,KAAK,GAAG,GAAG,MAAM,CACpE,CACF;CACA,MAAM,cAAc,eAAe;EACjC,MAAM,QAAQ,IAAI;EAClB;EACA,cAAc,EAAE,MAAM,MAAM,MAAM,UAAU,UAC1C,QAAQ,OAAO,MACb,GAAG,KAAK,GAAG,KAAK,8BAA8B,KAAK,GAAG,SAAS,yCAAyC,IAAI,GAC9G;CACJ,CAAC;CACD,KAAK,MAAM,cAAc,aACvB,QAAQ,OAAO,MACb,GAAG,WAAW,KAAK,GAAG,WAAW,KAAK,KAAK,WAAW,KAAK,IAAI,WAAW,QAAQ,GACpF;CACF,IAAI,YAAY,SAAS,GAAG,QAAQ,WAAW;AACjD,SAAS,OAAO;CACd,QAAQ,OAAO,MACb,sBAAsB,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK,EAAE,GAC/E;CACA,QAAQ,WAAW;AACrB"}
+{"version":3,"file":"toolchain-check-cli.mjs","names":[],"sources":["../src/toolchain-check-cli.ts"],"sourcesContent":["#!/usr/bin/env node\nimport { readFileSync } from \"node:fs\";\n\nimport { checkToolchain } from \"./toolchain-guard\";\nimport { parseToolchainPolicy } from \"./toolchain-schema\";\n\ntry {\n  const args = process.argv.slice(2);\n  if (args.length === 1 && args[0] === \"--help\") {\n    process.stdout.write(\n      \"Usage: stll-toolchain-check (opt-outs: tracked stll-toolchain.json)\\n\",\n    );\n    process.exit(0);\n  }\n  if (args.length !== 0) throw new Error(`unexpected argument: ${args.at(0)}`);\n  const policy = parseToolchainPolicy(\n    JSON.parse(\n      readFileSync(new URL(\"../toolchain.json\", import.meta.url), \"utf8\"),\n    ),\n  );\n  const diagnostics = checkToolchain({\n    root: process.cwd(),\n    policy,\n    onDelegated: ({ path, line, tool, selector, ref }) =>\n      process.stdout.write(\n        `${path}:${line}: [runtime-delegated] setup-${tool} ${selector} delegates its version to checkout ref ${ref}\\n`,\n      ),\n  });\n  for (const diagnostic of diagnostics)\n    process.stderr.write(\n      `${diagnostic.path}:${diagnostic.line}: [${diagnostic.rule}] ${diagnostic.message}\\n`,\n    );\n  if (diagnostics.length > 0) process.exitCode = 1;\n} catch (error) {\n  process.stderr.write(\n    `toolchain-check:1: ${error instanceof Error ? error.message : String(error)}\\n`,\n  );\n  process.exitCode = 1;\n}\n"],"mappings":";;;;;AAMA,IAAI;CACF,MAAM,OAAO,QAAQ,KAAK,MAAM,CAAC;CACjC,IAAI,KAAK,WAAW,KAAK,KAAK,OAAO,UAAU;EAC7C,QAAQ,OAAO,MACb,uEACF;EACA,QAAQ,KAAK,CAAC;CAChB;CACA,IAAI,KAAK,WAAW,GAAG,MAAM,IAAI,MAAM,wBAAwB,KAAK,GAAG,CAAC,GAAG;CAC3E,MAAM,SAAS,qBACb,KAAK,MACH,aAAa,IAAI,IAAI,qBAAqB,YAAY,GAAG,GAAG,MAAM,CACpE,CACF;CACA,MAAM,cAAc,eAAe;EACjC,MAAM,QAAQ,IAAI;EAClB;EACA,cAAc,EAAE,MAAM,MAAM,MAAM,UAAU,UAC1C,QAAQ,OAAO,MACb,GAAG,KAAK,GAAG,KAAK,8BAA8B,KAAK,GAAG,SAAS,yCAAyC,IAAI,GAC9G;CACJ,CAAC;CACD,KAAK,MAAM,cAAc,aACvB,QAAQ,OAAO,MACb,GAAG,WAAW,KAAK,GAAG,WAAW,KAAK,KAAK,WAAW,KAAK,IAAI,WAAW,QAAQ,GACpF;CACF,IAAI,YAAY,SAAS,GAAG,QAAQ,WAAW;AACjD,SAAS,OAAO;CACd,QAAQ,OAAO,MACb,sBAAsB,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK,EAAE,GAC/E;CACA,QAAQ,WAAW;AACrB"}

package/dist/toolchain-guard.cjs

@@ -7,13 +7,13 @@ let node_child_process = require("node:child_process");
 let node_path = require("node:path");
 node_path = require_rolldown_runtime.__toESM(node_path, 1);
 let semver = require("semver");
+let smol_toml = require("smol-toml");
 let yaml = require("yaml");
 let picomatch = require("picomatch");
 picomatch = require_rolldown_runtime.__toESM(picomatch, 1);
-let smol_toml = require("smol-toml");
 //#endregion
 //#region src/toolchain-consumer-checks.ts
-const consumerRunnerVersion = "1.0.2";
+const consumerRunnerVersion = "1.2.0";
 const consumerCheckWorkflow = "stella/.github/.github/workflows/package-consumer-compat.yml";
 const record$7 = (value) => typeof value === "object" && value !== null && !Array.isArray(value);
 const repositoryDirectory = (value) => typeof value === "string" && value !== "" && !value.includes("\\") && !value.includes("${{") && !value.split("").some((character) => {
@@ -195,7 +195,8 @@ const checkConsumerChecks = ({ declarations, files, policy }) => {
 				const fixtureManifest = node_path.default.posix.join(declaration.fixturePath, "consumer-compat.json");
 				const fixtureSource = files[fixtureManifest];
 				if (fixtureSource === void 0) throw new Error(`consumerChecks fixture configuration must be tracked: ${fixtureManifest}`);
-				const fixtures = require_toolchain_schema.parseConsumerFixtures(JSON.parse(fixtureSource));
+				const fixtureConfiguration = JSON.parse(fixtureSource);
+				const fixtures = require_toolchain_schema.parseConsumerFixtures(fixtureConfiguration);
 				require_toolchain_schema.assertConsumerFixtureSelection({
 					selected: declaration.packages,
 					fixtures
@@ -1108,14 +1109,15 @@ const shellCommandSegments = (command, grouping = "boundaries") => {
 	for (const source of sources) {
 		const firstSegment = segments.length;
 		segments.push([]);
-		for (const { kind, value: word } of shellArgumentTokens(shellTokens(source))) if (kind === "boundary") if ([
-			"(",
-			")",
-			"{",
-			"}"
-		].includes(word) && grouping === "tokens") segments.at(-1)?.push(word);
-		else segments.push([]);
-		else segments.at(-1)?.push(word);
+		for (const { kind, value: word } of shellArgumentTokens(shellTokens(source))) if (kind === "boundary") {
+			if ([
+				"(",
+				")",
+				"{",
+				"}"
+			].includes(word) && grouping === "tokens") segments.at(-1)?.push(word);
+			else segments.push([]);
+		} else segments.at(-1)?.push(word);
 		for (const words of segments.slice(firstSegment)) {
 			const body = shellCommandBody(words);
 			if (body === void 0) continue;
@@ -1609,7 +1611,8 @@ const checkPackageFiles = ({ files, policy }) => {
 						if (resolved === specifier) return false;
 						if (qualifier === void 0 || (0, semver.validRange)(qualifier) === null) return true;
 						if (typeof specifier !== "string") return false;
-						const release = (0, semver.valid)(specifier.startsWith("npm:") ? specifier.slice(specifier.lastIndexOf("@") + 1) : specifier);
+						const versionSpecifier = specifier.startsWith("npm:") ? specifier.slice(specifier.lastIndexOf("@") + 1) : specifier;
+						const release = (0, semver.valid)(versionSpecifier);
 						return release !== null && (0, semver.satisfies)(release, qualifier);
 					}) && typeof resolved === "string" && tsSpecifiers.get(name)?.has(resolved)) add({
 						file,
@@ -1873,7 +1876,9 @@ const checkRustReferences = (options) => {
 				const version = tag === void 0 ? void 0 : rustImageVersion(tag);
 				select(version, "Rust service image", lineOf(value));
 			} else if (Array.isArray(value)) value.forEach(images);
-			else if (record$2(value)) Object.values(value).forEach(images);
+			else if (record$2(value)) {
+				for (const [key, entry] of Object.entries(value)) if (key !== "name") images(entry);
+			}
 		};
 		try {
 			images(JSON.parse(text));
@@ -2204,28 +2209,30 @@ const checkRuntimeFile = ({ file, text, policy, trackedFiles, readFile, reposito
 			if (record$1(defaults) && defaults["rust-version"] !== void 0) rustFloor(defaults["rust-version"]);
 			const pkg = parsed["package"];
 			const version = record$1(pkg) ? pkg["rust-version"] : void 0;
-			if (version !== void 0) if (!record$1(version)) rustFloor(version);
-			else {
-				let inherited;
-				if (version["workspace"] === true && record$1(pkg)) {
-					const explicit = pkg["workspace"];
-					let directory = node_path.default.posix.dirname(file);
-					const explicitPath = typeof explicit === "string" && !explicit.includes("\\") && !explicit.includes(":") && !explicit.includes("${{") && !node_path.default.posix.isAbsolute(explicit) ? node_path.default.posix.normalize(node_path.default.posix.join(directory, explicit)) : void 0;
-					if (explicit === void 0 || explicitPath !== void 0 && explicitPath !== ".." && !explicitPath.startsWith("../")) {
-						if (explicitPath !== void 0) directory = explicitPath;
-						while (true) {
-							const table = readManifest(node_path.default.posix.join(directory, "Cargo.toml"))?.["workspace"];
-							if (record$1(table)) {
-								const fields = table["package"];
-								inherited = record$1(fields) ? fields["rust-version"] : void 0;
-								break;
+			if (version !== void 0) {
+				if (!record$1(version)) rustFloor(version);
+				else {
+					let inherited;
+					if (version["workspace"] === true && record$1(pkg)) {
+						const explicit = pkg["workspace"];
+						let directory = node_path.default.posix.dirname(file);
+						const explicitPath = typeof explicit === "string" && !explicit.includes("\\") && !explicit.includes(":") && !explicit.includes("${{") && !node_path.default.posix.isAbsolute(explicit) ? node_path.default.posix.normalize(node_path.default.posix.join(directory, explicit)) : void 0;
+						if (explicit === void 0 || explicitPath !== void 0 && explicitPath !== ".." && !explicitPath.startsWith("../")) {
+							if (explicitPath !== void 0) directory = explicitPath;
+							while (true) {
+								const table = readManifest(node_path.default.posix.join(directory, "Cargo.toml"))?.["workspace"];
+								if (record$1(table)) {
+									const fields = table["package"];
+									inherited = record$1(fields) ? fields["rust-version"] : void 0;
+									break;
+								}
+								if (explicit !== void 0 || directory === ".") break;
+								directory = node_path.default.posix.dirname(directory);
 							}
-							if (explicit !== void 0 || directory === ".") break;
-							directory = node_path.default.posix.dirname(directory);
 						}
 					}
+					rustFloor(inherited);
 				}
-				rustFloor(inherited);
 			}
 		}
 	}
@@ -2846,9 +2853,10 @@ const checkRuntimeFile = ({ file, text, policy, trackedFiles, readFile, reposito
 		for (let index = start + 3; index < value.length; index++) {
 			const character = value.at(index);
 			if (quote !== void 0) {
-				if (character === quote) if (quote === "'" && value.at(index + 1) === "'") index++;
-				else quote = void 0;
-				else if (quote === "\"" && character === "\\") index++;
+				if (character === quote) {
+					if (quote === "'" && value.at(index + 1) === "'") index++;
+					else quote = void 0;
+				} else if (quote === "\"" && character === "\\") index++;
 				continue;
 			}
 			if (character === "'" || character === "\"") quote = character;
@@ -3342,26 +3350,42 @@ const checkToolchain = ({ root, policy, onDelegated }) => {
 		line: 1,
 		message: "cloud setup script requires an explicit cloud declaration in stll-toolchain.json"
 	});
-	if (cloud !== void 0) try {
-		const nodeVersion = files[".node-version"];
-		if (nodeVersion === void 0) throw new Error("cloud setup requires a tracked root .node-version with an exact stable release");
-		if (script !== require_toolchain_inputs.generateCloudSetup({
-			policy,
-			cloud,
-			nodeVersion: nodeVersion.trim()
-		})) diagnostics.push({
+	if (cloud !== void 0) {
+		if (!require_toolchain_inputs.hasCloudSessionStartHook(files[".claude/settings.json"])) diagnostics.push({
 			rule: "cloud-setup-drift",
-			path: require_toolchain_inputs.cloudSetupPath,
+			path: require_toolchain_inputs.cloudClaudeSettingsPath,
 			line: 1,
-			message: "cloud setup script is missing or differs from shared policy; run stll-cloud-setup"
+			message: `tracked Claude cloud SessionStart hook is missing, disabled or differs from shared policy; run stll-cloud-setup; if automatic merge is unsafe, ${require_toolchain_inputs.cloudSessionStartFix}`
 		});
-	} catch (error) {
-		diagnostics.push({
+		if (!require_toolchain_inputs.hasCloudAttribution(files[".claude/settings.json"])) diagnostics.push({
 			rule: "cloud-setup-drift",
-			path: require_toolchain_inputs.cloudSetupPath,
+			path: require_toolchain_inputs.cloudClaudeSettingsPath,
 			line: 1,
-			message: error instanceof Error ? error.message : String(error)
+			message: `tracked Claude attribution is missing or differs from shared policy; run stll-cloud-setup; if automatic merge is unsafe, ${require_toolchain_inputs.cloudAttributionFix}`
 		});
+		try {
+			const nodeVersion = files[".node-version"];
+			if (nodeVersion === void 0) throw new Error("cloud setup requires a tracked root .node-version with an exact stable release");
+			if (script !== require_toolchain_inputs.generateCloudSetup({
+				policy,
+				cloud,
+				nodeVersion: nodeVersion.trim(),
+				files,
+				rustExceptions: configuration.rustExceptions
+			})) diagnostics.push({
+				rule: "cloud-setup-drift",
+				path: require_toolchain_inputs.cloudSetupPath,
+				line: 1,
+				message: "cloud setup script is missing or differs from shared policy; run stll-cloud-setup"
+			});
+		} catch (error) {
+			diagnostics.push({
+				rule: "cloud-setup-drift",
+				path: require_toolchain_inputs.cloudSetupPath,
+				line: 1,
+				message: error instanceof Error ? error.message : String(error)
+			});
+		}
 	}
 	const exercisedFloors = /* @__PURE__ */ new Set();
 	const mismatchedFloors = /* @__PURE__ */ new Set();