@stll/oxlint-config 1.3.0 → 1.4.0

package/dist/dependabot.d.cts

@@ -0,0 +1,108 @@
+//#region src/toolchain-dependabot.d.ts
+type DependabotPolicy = {
+  schedule: {
+    interval: string;
+    day: string;
+    time: string;
+    timezone: string;
+  };
+  cooldown: {
+    defaultDays: number;
+  };
+  groups: Record<string, {
+    patterns: readonly string[];
+    updateTypes: readonly string[];
+  }>;
+  ignoredPackages: readonly string[];
+  ignoredActions: readonly string[];
+  ignoredImages: readonly string[];
+};
+type CheckDependabotOptions = {
+  files: Record<string, string>;
+  policy: DependabotPolicy;
+};
+/** Generate canonical YAML from the same ecosystem enumeration used by the guard. */
+declare const generateDependabotConfig: ({ files, policy }: CheckDependabotOptions) => string;
+//#endregion
+//#region src/toolchain-schema.d.ts
+/** Reject unsupported or incomplete installed policies before inspecting a consumer. */
+declare const parseToolchainPolicy: (input: unknown) => {
+  bun: string;
+  typescript: string;
+  node: string;
+  postgres: string;
+  valkey: string;
+  valkeyArtifacts: {
+    amd64: {
+      server: {
+        url: string;
+        sha256: string;
+      };
+      tools: {
+        url: string;
+        sha256: string;
+      };
+    };
+    arm64: {
+      server: {
+        url: string;
+        sha256: string;
+      };
+      tools: {
+        url: string;
+        sha256: string;
+      };
+    };
+  };
+  consumerNode: string;
+  consumerNpm: string;
+  consumerPnpm: string;
+  consumerTypescript: string;
+  python: string;
+  rust: string;
+  packages: Record<string, string>;
+  actions: Record<string, {
+    sha: string;
+    version: string;
+  }>;
+  typescriptInstallLayouts: ({
+    readonly type: "direct";
+    readonly compilerPackage: "typescript";
+    readonly compilerSpecifier: string;
+    readonly typecheckCommand: string;
+    readonly compatibilityPackage?: never;
+    readonly compatibilitySpecifier?: never;
+  } | {
+    readonly type: "split-compatibility";
+    readonly compilerPackage: string;
+    readonly compilerSpecifier: string;
+    readonly compatibilityPackage: string;
+    readonly compatibilitySpecifier: string;
+    readonly typecheckCommand: string;
+  })[];
+  typescript6Compatibility: {
+    version: string;
+    packageAlias: string;
+  };
+  dependabot: {
+    schedule: {
+      interval: string;
+      day: string;
+      time: string;
+      timezone: string;
+    };
+    cooldown: {
+      defaultDays: number;
+    };
+    groups: Record<string, {
+      patterns: string[];
+      updateTypes: string[];
+    }>;
+    ignoredPackages: string[];
+    ignoredActions: string[];
+    ignoredImages: string[];
+  };
+};
+//#endregion
+export { generateDependabotConfig, parseToolchainPolicy };
+//# sourceMappingURL=dependabot.d.cts.map

package/dist/dependabot.d.mts

@@ -0,0 +1,108 @@
+//#region src/toolchain-dependabot.d.ts
+type DependabotPolicy = {
+  schedule: {
+    interval: string;
+    day: string;
+    time: string;
+    timezone: string;
+  };
+  cooldown: {
+    defaultDays: number;
+  };
+  groups: Record<string, {
+    patterns: readonly string[];
+    updateTypes: readonly string[];
+  }>;
+  ignoredPackages: readonly string[];
+  ignoredActions: readonly string[];
+  ignoredImages: readonly string[];
+};
+type CheckDependabotOptions = {
+  files: Record<string, string>;
+  policy: DependabotPolicy;
+};
+/** Generate canonical YAML from the same ecosystem enumeration used by the guard. */
+declare const generateDependabotConfig: ({ files, policy }: CheckDependabotOptions) => string;
+//#endregion
+//#region src/toolchain-schema.d.ts
+/** Reject unsupported or incomplete installed policies before inspecting a consumer. */
+declare const parseToolchainPolicy: (input: unknown) => {
+  bun: string;
+  typescript: string;
+  node: string;
+  postgres: string;
+  valkey: string;
+  valkeyArtifacts: {
+    amd64: {
+      server: {
+        url: string;
+        sha256: string;
+      };
+      tools: {
+        url: string;
+        sha256: string;
+      };
+    };
+    arm64: {
+      server: {
+        url: string;
+        sha256: string;
+      };
+      tools: {
+        url: string;
+        sha256: string;
+      };
+    };
+  };
+  consumerNode: string;
+  consumerNpm: string;
+  consumerPnpm: string;
+  consumerTypescript: string;
+  python: string;
+  rust: string;
+  packages: Record<string, string>;
+  actions: Record<string, {
+    sha: string;
+    version: string;
+  }>;
+  typescriptInstallLayouts: ({
+    readonly type: "direct";
+    readonly compilerPackage: "typescript";
+    readonly compilerSpecifier: string;
+    readonly typecheckCommand: string;
+    readonly compatibilityPackage?: never;
+    readonly compatibilitySpecifier?: never;
+  } | {
+    readonly type: "split-compatibility";
+    readonly compilerPackage: string;
+    readonly compilerSpecifier: string;
+    readonly compatibilityPackage: string;
+    readonly compatibilitySpecifier: string;
+    readonly typecheckCommand: string;
+  })[];
+  typescript6Compatibility: {
+    version: string;
+    packageAlias: string;
+  };
+  dependabot: {
+    schedule: {
+      interval: string;
+      day: string;
+      time: string;
+      timezone: string;
+    };
+    cooldown: {
+      defaultDays: number;
+    };
+    groups: Record<string, {
+      patterns: string[];
+      updateTypes: string[];
+    }>;
+    ignoredPackages: string[];
+    ignoredActions: string[];
+    ignoredImages: string[];
+  };
+};
+//#endregion
+export { generateDependabotConfig, parseToolchainPolicy };
+//# sourceMappingURL=dependabot.d.mts.map

package/dist/dependabot.mjs

@@ -0,0 +1,3 @@
+import { r as generateDependabotConfig } from "./toolchain-dependabot.mjs";
+import { t as parseToolchainPolicy } from "./toolchain-schema.mjs";
+export { generateDependabotConfig, parseToolchainPolicy };

package/dist/generated-file.cjs

@@ -0,0 +1,61 @@
+let node_fs = require("node:fs");
+let node_path = require("node:path");
+let node_fs_promises = require("node:fs/promises");
+//#region src/generated-file.ts
+const optionalStat = async (path) => {
+	try {
+		return await (0, node_fs_promises.lstat)(path);
+	} catch (error) {
+		if (error instanceof Error && "code" in error && error.code === "ENOENT") return void 0;
+		throw error;
+	}
+};
+const checkGeneratedOutput = async (destination) => {
+	const parent = (0, node_path.dirname)(destination);
+	const parentStat = await optionalStat(parent);
+	if (parentStat !== void 0 && (parentStat.isSymbolicLink() || !parentStat.isDirectory())) throw new Error("generated output parent must be a real repository directory");
+	const destinationStat = await optionalStat(destination);
+	if (destinationStat !== void 0 && (destinationStat.isSymbolicLink() || !destinationStat.isFile() || destinationStat.nlink !== 1)) throw new Error("generated output destination must be a single-link regular repository file");
+	return destinationStat;
+};
+/** Only absent owned outputs may be recovered while reading tracked inputs. */
+const generationDiagnostics = async ({ diagnostics, outputs }) => {
+	const missing = /* @__PURE__ */ new Set();
+	for (const { relative, destination } of outputs) if (await checkGeneratedOutput(destination) === void 0) missing.add(relative);
+	return diagnostics.filter(({ path }) => !missing.has(path));
+};
+const writeGeneratedFile = async ({ destination, text, mode }) => {
+	await checkGeneratedOutput(destination);
+	await (0, node_fs_promises.mkdir)((0, node_path.dirname)(destination), { recursive: true });
+	const output = await (0, node_fs_promises.open)(destination, node_fs.constants.O_WRONLY | node_fs.constants.O_CREAT | node_fs.constants.O_NOFOLLOW, mode);
+	try {
+		const opened = await output.stat();
+		if (!opened.isFile() || opened.nlink !== 1) throw new Error("generated output destination must be a single-link regular repository file");
+		await output.truncate(0);
+		await output.writeFile(text, "utf8");
+		await output.chmod(mode);
+	} finally {
+		await output.close();
+	}
+};
+//#endregion
+Object.defineProperty(exports, "checkGeneratedOutput", {
+	enumerable: true,
+	get: function() {
+		return checkGeneratedOutput;
+	}
+});
+Object.defineProperty(exports, "generationDiagnostics", {
+	enumerable: true,
+	get: function() {
+		return generationDiagnostics;
+	}
+});
+Object.defineProperty(exports, "writeGeneratedFile", {
+	enumerable: true,
+	get: function() {
+		return writeGeneratedFile;
+	}
+});
+
+//# sourceMappingURL=generated-file.cjs.map

package/dist/generated-file.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"generated-file.cjs","names":["lstat","dirname","mkdir","open","constants"],"sources":["../src/generated-file.ts"],"sourcesContent":["import { constants } from \"node:fs\";\nimport { lstat, mkdir, open } from \"node:fs/promises\";\nimport { dirname } from \"node:path\";\n\nconst optionalStat = async (path: string) => {\n  try {\n    return await lstat(path);\n  } catch (error) {\n    if (error instanceof Error && \"code\" in error && error.code === \"ENOENT\")\n      return undefined;\n    throw error;\n  }\n};\n\nexport const checkGeneratedOutput = async (destination: string) => {\n  const parent = dirname(destination);\n  const parentStat = await optionalStat(parent);\n  if (\n    parentStat !== undefined &&\n    (parentStat.isSymbolicLink() || !parentStat.isDirectory())\n  )\n    throw new Error(\n      \"generated output parent must be a real repository directory\",\n    );\n  const destinationStat = await optionalStat(destination);\n  if (\n    destinationStat !== undefined &&\n    (destinationStat.isSymbolicLink() ||\n      !destinationStat.isFile() ||\n      destinationStat.nlink !== 1)\n  )\n    throw new Error(\n      \"generated output destination must be a single-link regular repository file\",\n    );\n  return destinationStat;\n};\n\ntype GenerationDiagnosticsOptions = {\n  diagnostics: readonly { path: string; message: string }[];\n  outputs: readonly { relative: string; destination: string }[];\n};\n\n/** Only absent owned outputs may be recovered while reading tracked inputs. */\nexport const generationDiagnostics = async ({\n  diagnostics,\n  outputs,\n}: GenerationDiagnosticsOptions) => {\n  const missing = new Set<string>();\n  for (const { relative, destination } of outputs) {\n    if ((await checkGeneratedOutput(destination)) === undefined)\n      missing.add(relative);\n  }\n  return diagnostics.filter(({ path }) => !missing.has(path));\n};\n\ntype GeneratedFileOptions = {\n  destination: string;\n  text: string;\n  mode: number;\n};\n\nexport const writeGeneratedFile = async ({\n  destination,\n  text,\n  mode,\n}: GeneratedFileOptions) => {\n  await checkGeneratedOutput(destination);\n  await mkdir(dirname(destination), { recursive: true });\n  const output = await open(\n    destination,\n    constants.O_WRONLY | constants.O_CREAT | constants.O_NOFOLLOW,\n    mode,\n  );\n  try {\n    const opened = await output.stat();\n    if (!opened.isFile() || opened.nlink !== 1)\n      throw new Error(\n        \"generated output destination must be a single-link regular repository file\",\n      );\n    await output.truncate(0);\n    await output.writeFile(text, \"utf8\");\n    await output.chmod(mode);\n  } finally {\n    await output.close();\n  }\n};\n"],"mappings":";;;;AAIA,MAAM,eAAe,OAAO,SAAiB;CAC3C,IAAI;EACF,OAAO,OAAA,GAAMA,iBAAAA,MAAAA,CAAM,IAAI;CACzB,SAAS,OAAO;EACd,IAAI,iBAAiB,SAAS,UAAU,SAAS,MAAM,SAAS,UAC9D,OAAO,KAAA;EACT,MAAM;CACR;AACF;AAEA,MAAa,uBAAuB,OAAO,gBAAwB;CACjE,MAAM,UAAA,GAASC,UAAAA,QAAAA,CAAQ,WAAW;CAClC,MAAM,aAAa,MAAM,aAAa,MAAM;CAC5C,IACE,eAAe,KAAA,MACd,WAAW,eAAe,KAAK,CAAC,WAAW,YAAY,IAExD,MAAM,IAAI,MACR,6DACF;CACF,MAAM,kBAAkB,MAAM,aAAa,WAAW;CACtD,IACE,oBAAoB,KAAA,MACnB,gBAAgB,eAAe,KAC9B,CAAC,gBAAgB,OAAO,KACxB,gBAAgB,UAAU,IAE5B,MAAM,IAAI,MACR,4EACF;CACF,OAAO;AACT;;AAQA,MAAa,wBAAwB,OAAO,EAC1C,aACA,cACkC;CAClC,MAAM,0BAAU,IAAI,IAAY;CAChC,KAAK,MAAM,EAAE,UAAU,iBAAiB,SACtC,IAAK,MAAM,qBAAqB,WAAW,MAAO,KAAA,GAChD,QAAQ,IAAI,QAAQ;CAExB,OAAO,YAAY,QAAQ,EAAE,WAAW,CAAC,QAAQ,IAAI,IAAI,CAAC;AAC5D;AAQA,MAAa,qBAAqB,OAAO,EACvC,aACA,MACA,WAC0B;CAC1B,MAAM,qBAAqB,WAAW;CACtC,OAAA,GAAMC,iBAAAA,MAAAA,EAAAA,GAAMD,UAAAA,QAAAA,CAAQ,WAAW,GAAG,EAAE,WAAW,KAAK,CAAC;CACrD,MAAM,SAAS,OAAA,GAAME,iBAAAA,KAAAA,CACnB,aACAC,QAAAA,UAAU,WAAWA,QAAAA,UAAU,UAAUA,QAAAA,UAAU,YACnD,IACF;CACA,IAAI;EACF,MAAM,SAAS,MAAM,OAAO,KAAK;EACjC,IAAI,CAAC,OAAO,OAAO,KAAK,OAAO,UAAU,GACvC,MAAM,IAAI,MACR,4EACF;EACF,MAAM,OAAO,SAAS,CAAC;EACvB,MAAM,OAAO,UAAU,MAAM,MAAM;EACnC,MAAM,OAAO,MAAM,IAAI;CACzB,UAAU;EACR,MAAM,OAAO,MAAM;CACrB;AACF"}

package/dist/generated-file.mjs

@@ -0,0 +1,44 @@
+import { constants } from "node:fs";
+import { dirname } from "node:path";
+import { lstat, mkdir, open } from "node:fs/promises";
+//#region src/generated-file.ts
+const optionalStat = async (path) => {
+	try {
+		return await lstat(path);
+	} catch (error) {
+		if (error instanceof Error && "code" in error && error.code === "ENOENT") return void 0;
+		throw error;
+	}
+};
+const checkGeneratedOutput = async (destination) => {
+	const parent = dirname(destination);
+	const parentStat = await optionalStat(parent);
+	if (parentStat !== void 0 && (parentStat.isSymbolicLink() || !parentStat.isDirectory())) throw new Error("generated output parent must be a real repository directory");
+	const destinationStat = await optionalStat(destination);
+	if (destinationStat !== void 0 && (destinationStat.isSymbolicLink() || !destinationStat.isFile() || destinationStat.nlink !== 1)) throw new Error("generated output destination must be a single-link regular repository file");
+	return destinationStat;
+};
+/** Only absent owned outputs may be recovered while reading tracked inputs. */
+const generationDiagnostics = async ({ diagnostics, outputs }) => {
+	const missing = /* @__PURE__ */ new Set();
+	for (const { relative, destination } of outputs) if (await checkGeneratedOutput(destination) === void 0) missing.add(relative);
+	return diagnostics.filter(({ path }) => !missing.has(path));
+};
+const writeGeneratedFile = async ({ destination, text, mode }) => {
+	await checkGeneratedOutput(destination);
+	await mkdir(dirname(destination), { recursive: true });
+	const output = await open(destination, constants.O_WRONLY | constants.O_CREAT | constants.O_NOFOLLOW, mode);
+	try {
+		const opened = await output.stat();
+		if (!opened.isFile() || opened.nlink !== 1) throw new Error("generated output destination must be a single-link regular repository file");
+		await output.truncate(0);
+		await output.writeFile(text, "utf8");
+		await output.chmod(mode);
+	} finally {
+		await output.close();
+	}
+};
+//#endregion
+export { generationDiagnostics as n, writeGeneratedFile as r, checkGeneratedOutput as t };
+
+//# sourceMappingURL=generated-file.mjs.map

package/dist/generated-file.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"generated-file.mjs","names":[],"sources":["../src/generated-file.ts"],"sourcesContent":["import { constants } from \"node:fs\";\nimport { lstat, mkdir, open } from \"node:fs/promises\";\nimport { dirname } from \"node:path\";\n\nconst optionalStat = async (path: string) => {\n  try {\n    return await lstat(path);\n  } catch (error) {\n    if (error instanceof Error && \"code\" in error && error.code === \"ENOENT\")\n      return undefined;\n    throw error;\n  }\n};\n\nexport const checkGeneratedOutput = async (destination: string) => {\n  const parent = dirname(destination);\n  const parentStat = await optionalStat(parent);\n  if (\n    parentStat !== undefined &&\n    (parentStat.isSymbolicLink() || !parentStat.isDirectory())\n  )\n    throw new Error(\n      \"generated output parent must be a real repository directory\",\n    );\n  const destinationStat = await optionalStat(destination);\n  if (\n    destinationStat !== undefined &&\n    (destinationStat.isSymbolicLink() ||\n      !destinationStat.isFile() ||\n      destinationStat.nlink !== 1)\n  )\n    throw new Error(\n      \"generated output destination must be a single-link regular repository file\",\n    );\n  return destinationStat;\n};\n\ntype GenerationDiagnosticsOptions = {\n  diagnostics: readonly { path: string; message: string }[];\n  outputs: readonly { relative: string; destination: string }[];\n};\n\n/** Only absent owned outputs may be recovered while reading tracked inputs. */\nexport const generationDiagnostics = async ({\n  diagnostics,\n  outputs,\n}: GenerationDiagnosticsOptions) => {\n  const missing = new Set<string>();\n  for (const { relative, destination } of outputs) {\n    if ((await checkGeneratedOutput(destination)) === undefined)\n      missing.add(relative);\n  }\n  return diagnostics.filter(({ path }) => !missing.has(path));\n};\n\ntype GeneratedFileOptions = {\n  destination: string;\n  text: string;\n  mode: number;\n};\n\nexport const writeGeneratedFile = async ({\n  destination,\n  text,\n  mode,\n}: GeneratedFileOptions) => {\n  await checkGeneratedOutput(destination);\n  await mkdir(dirname(destination), { recursive: true });\n  const output = await open(\n    destination,\n    constants.O_WRONLY | constants.O_CREAT | constants.O_NOFOLLOW,\n    mode,\n  );\n  try {\n    const opened = await output.stat();\n    if (!opened.isFile() || opened.nlink !== 1)\n      throw new Error(\n        \"generated output destination must be a single-link regular repository file\",\n      );\n    await output.truncate(0);\n    await output.writeFile(text, \"utf8\");\n    await output.chmod(mode);\n  } finally {\n    await output.close();\n  }\n};\n"],"mappings":";;;;AAIA,MAAM,eAAe,OAAO,SAAiB;CAC3C,IAAI;EACF,OAAO,MAAM,MAAM,IAAI;CACzB,SAAS,OAAO;EACd,IAAI,iBAAiB,SAAS,UAAU,SAAS,MAAM,SAAS,UAC9D,OAAO,KAAA;EACT,MAAM;CACR;AACF;AAEA,MAAa,uBAAuB,OAAO,gBAAwB;CACjE,MAAM,SAAS,QAAQ,WAAW;CAClC,MAAM,aAAa,MAAM,aAAa,MAAM;CAC5C,IACE,eAAe,KAAA,MACd,WAAW,eAAe,KAAK,CAAC,WAAW,YAAY,IAExD,MAAM,IAAI,MACR,6DACF;CACF,MAAM,kBAAkB,MAAM,aAAa,WAAW;CACtD,IACE,oBAAoB,KAAA,MACnB,gBAAgB,eAAe,KAC9B,CAAC,gBAAgB,OAAO,KACxB,gBAAgB,UAAU,IAE5B,MAAM,IAAI,MACR,4EACF;CACF,OAAO;AACT;;AAQA,MAAa,wBAAwB,OAAO,EAC1C,aACA,cACkC;CAClC,MAAM,0BAAU,IAAI,IAAY;CAChC,KAAK,MAAM,EAAE,UAAU,iBAAiB,SACtC,IAAK,MAAM,qBAAqB,WAAW,MAAO,KAAA,GAChD,QAAQ,IAAI,QAAQ;CAExB,OAAO,YAAY,QAAQ,EAAE,WAAW,CAAC,QAAQ,IAAI,IAAI,CAAC;AAC5D;AAQA,MAAa,qBAAqB,OAAO,EACvC,aACA,MACA,WAC0B;CAC1B,MAAM,qBAAqB,WAAW;CACtC,MAAM,MAAM,QAAQ,WAAW,GAAG,EAAE,WAAW,KAAK,CAAC;CACrD,MAAM,SAAS,MAAM,KACnB,aACA,UAAU,WAAW,UAAU,UAAU,UAAU,YACnD,IACF;CACA,IAAI;EACF,MAAM,SAAS,MAAM,OAAO,KAAK;EACjC,IAAI,CAAC,OAAO,OAAO,KAAK,OAAO,UAAU,GACvC,MAAM,IAAI,MACR,4EACF;EACF,MAAM,OAAO,SAAS,CAAC;EACvB,MAAM,OAAO,UAAU,MAAM,MAAM;EACnC,MAAM,OAAO,MAAM,IAAI;CACzB,UAAU;EACR,MAAM,OAAO,MAAM;CACrB;AACF"}