@stll/oxlint-config 1.4.0 → 1.5.1

package/dist/jsonc.mjs

@@ -0,0 +1,61 @@
+//#region src/jsonc.ts
+/** JSONC permits comments and trailing commas, never alterations inside strings. */
+const parseJsonc = (text) => {
+	let clean = "";
+	let quote = false;
+	for (let index = 0; index < text.length; index++) {
+		const char = text[index];
+		if (quote) {
+			clean += char;
+			if (char === "\\") {
+				index++;
+				clean += text[index] ?? "";
+			} else if (char === "\"") quote = false;
+			continue;
+		}
+		if (char === "\"") {
+			quote = true;
+			clean += char;
+			continue;
+		}
+		if (char === "/" && text[index + 1] === "/") {
+			while (index < text.length && text[index] !== "\n") index++;
+			clean += "\n";
+			continue;
+		}
+		if (char === "/" && text[index + 1] === "*") {
+			index += 2;
+			while (index < text.length && !(text[index] === "*" && text[index + 1] === "/")) index++;
+			if (index >= text.length) throw new Error("Unterminated JSONC comment");
+			index++;
+			clean += " ";
+			continue;
+		}
+		clean += char;
+	}
+	let result = "";
+	quote = false;
+	for (let index = 0; index < clean.length; index++) {
+		const char = clean[index];
+		if (quote) {
+			result += char;
+			if (char === "\\") {
+				index++;
+				result += clean[index] ?? "";
+			} else if (char === "\"") quote = false;
+			continue;
+		}
+		if (char === "\"") quote = true;
+		if (char === ",") {
+			let next = index + 1;
+			while (/\s/.test(clean[next] ?? "") && next < clean.length) next++;
+			if (clean[next] === "}" || clean[next] === "]") continue;
+		}
+		result += char;
+	}
+	return JSON.parse(result);
+};
+//#endregion
+export { parseJsonc as t };
+
+//# sourceMappingURL=jsonc.mjs.map

package/dist/jsonc.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"jsonc.mjs","names":[],"sources":["../src/jsonc.ts"],"sourcesContent":["/** JSONC permits comments and trailing commas, never alterations inside strings. */\nexport const parseJsonc = (text: string): unknown => {\n  let clean = \"\";\n  let quote = false;\n  for (let index = 0; index < text.length; index++) {\n    const char = text[index];\n    if (quote) {\n      clean += char;\n      if (char === \"\\\\\") {\n        index++;\n        clean += text[index] ?? \"\";\n      } else if (char === '\"') quote = false;\n      continue;\n    }\n    if (char === '\"') {\n      quote = true;\n      clean += char;\n      continue;\n    }\n    if (char === \"/\" && text[index + 1] === \"/\") {\n      while (index < text.length && text[index] !== \"\\n\") index++;\n      clean += \"\\n\";\n      continue;\n    }\n    if (char === \"/\" && text[index + 1] === \"*\") {\n      index += 2;\n      while (\n        index < text.length &&\n        !(text[index] === \"*\" && text[index + 1] === \"/\")\n      )\n        index++;\n      if (index >= text.length) throw new Error(\"Unterminated JSONC comment\");\n      index++;\n      clean += \" \";\n      continue;\n    }\n    clean += char;\n  }\n  let result = \"\";\n  quote = false;\n  for (let index = 0; index < clean.length; index++) {\n    const char = clean[index];\n    if (quote) {\n      result += char;\n      if (char === \"\\\\\") {\n        index++;\n        result += clean[index] ?? \"\";\n      } else if (char === '\"') quote = false;\n      continue;\n    }\n    if (char === '\"') quote = true;\n    if (char === \",\") {\n      let next = index + 1;\n      while (/\\s/.test(clean[next] ?? \"\") && next < clean.length) next++;\n      if (clean[next] === \"}\" || clean[next] === \"]\") continue;\n    }\n    result += char;\n  }\n  return JSON.parse(result);\n};\n"],"mappings":";;AACA,MAAa,cAAc,SAA0B;CACnD,IAAI,QAAQ;CACZ,IAAI,QAAQ;CACZ,KAAK,IAAI,QAAQ,GAAG,QAAQ,KAAK,QAAQ,SAAS;EAChD,MAAM,OAAO,KAAK;EAClB,IAAI,OAAO;GACT,SAAS;GACT,IAAI,SAAS,MAAM;IACjB;IACA,SAAS,KAAK,UAAU;GAC1B,OAAO,IAAI,SAAS,MAAK,QAAQ;GACjC;EACF;EACA,IAAI,SAAS,MAAK;GAChB,QAAQ;GACR,SAAS;GACT;EACF;EACA,IAAI,SAAS,OAAO,KAAK,QAAQ,OAAO,KAAK;GAC3C,OAAO,QAAQ,KAAK,UAAU,KAAK,WAAW,MAAM;GACpD,SAAS;GACT;EACF;EACA,IAAI,SAAS,OAAO,KAAK,QAAQ,OAAO,KAAK;GAC3C,SAAS;GACT,OACE,QAAQ,KAAK,UACb,EAAE,KAAK,WAAW,OAAO,KAAK,QAAQ,OAAO,MAE7C;GACF,IAAI,SAAS,KAAK,QAAQ,MAAM,IAAI,MAAM,4BAA4B;GACtE;GACA,SAAS;GACT;EACF;EACA,SAAS;CACX;CACA,IAAI,SAAS;CACb,QAAQ;CACR,KAAK,IAAI,QAAQ,GAAG,QAAQ,MAAM,QAAQ,SAAS;EACjD,MAAM,OAAO,MAAM;EACnB,IAAI,OAAO;GACT,UAAU;GACV,IAAI,SAAS,MAAM;IACjB;IACA,UAAU,MAAM,UAAU;GAC5B,OAAO,IAAI,SAAS,MAAK,QAAQ;GACjC;EACF;EACA,IAAI,SAAS,MAAK,QAAQ;EAC1B,IAAI,SAAS,KAAK;GAChB,IAAI,OAAO,QAAQ;GACnB,OAAO,KAAK,KAAK,MAAM,SAAS,EAAE,KAAK,OAAO,MAAM,QAAQ;GAC5D,IAAI,MAAM,UAAU,OAAO,MAAM,UAAU,KAAK;EAClD;EACA,UAAU;CACZ;CACA,OAAO,KAAK,MAAM,MAAM;AAC1B"}

package/dist/publish-artifact-syntax.cjs

@@ -1,16 +1,16 @@
 const require_rolldown_runtime = require("./rolldown-runtime.cjs");
 const require_toolchain_inputs = require("./toolchain-inputs.cjs");
 const require_consumer_node_support = require("./consumer-node-support.cjs");
-let node_child_process = require("node:child_process");
+let node_fs_promises = require("node:fs/promises");
 let node_path = require("node:path");
 node_path = require_rolldown_runtime.__toESM(node_path, 1);
+let node_child_process = require("node:child_process");
 let semver = require("semver");
 let node_util = require("node:util");
 let yaml = require("yaml");
 let node_os = require("node:os");
 let node_module = require("node:module");
 node_module = require_rolldown_runtime.__toESM(node_module, 1);
-let node_fs_promises = require("node:fs/promises");
 let acorn = require("acorn");
 let node_url = require("node:url");
 let node_events = require("node:events");

package/dist/publish-artifact-syntax.mjs

@@ -1,13 +1,13 @@
 import { n as githubAutomationFileKind } from "./toolchain-inputs.mjs";
 import { n as consumerNodeSupportMatches } from "./consumer-node-support.mjs";
 import Module from "node:module";
-import { execFile, spawn } from "node:child_process";
+import { mkdir, mkdtemp, realpath, rm, writeFile } from "node:fs/promises";
 import path from "node:path";
+import { execFile, spawn } from "node:child_process";
 import { lte, parse, satisfies } from "semver";
 import { isDeepStrictEqual, promisify } from "node:util";
 import { parseDocument } from "yaml";
 import { tmpdir } from "node:os";
-import { mkdir, mkdtemp, realpath, rm, writeFile } from "node:fs/promises";
 import { parse as parse$2 } from "acorn";
 import { fileURLToPath } from "node:url";
 import { once } from "node:events";

package/dist/publish-build-target-vite-dts-helper2.cjs

@@ -1,8 +1,8 @@
 const require_rolldown_runtime = require("./rolldown-runtime.cjs");
 const require_compiler_packages = require("./compiler-packages.cjs");
-let node_fs = require("node:fs");
 let node_path = require("node:path");
 node_path = require_rolldown_runtime.__toESM(node_path, 1);
+let node_fs = require("node:fs");
 let node_crypto = require("node:crypto");
 let node_module = require("node:module");
 //#region src/publish-build-target-vite-dts.ts

package/dist/publish-build-target-vite-dts-helper2.mjs

@@ -1,7 +1,7 @@
 import { t as compilerPackages } from "./compiler-packages.mjs";
 import { createRequire } from "node:module";
-import { lstatSync, readFileSync, readdirSync, realpathSync } from "node:fs";
 import path from "node:path";
+import { lstatSync, readFileSync, readdirSync, realpathSync } from "node:fs";
 import { createHash } from "node:crypto";
 //#region src/publish-build-target-vite-dts.ts
 const reviewedViteDtsVersions = {

package/dist/publish-contract-cli.cjs

@@ -7,10 +7,10 @@ const require_consumer_node_support = require("./consumer-node-support.cjs");
 const require_toolchain_schema = require("./toolchain-schema.cjs");
 const require_publish_artifact_syntax = require("./publish-artifact-syntax.cjs");
 const require_publish_build_target_vite_dts_helper = require("./publish-build-target-vite-dts-helper2.cjs");
-let node_fs = require("node:fs");
-let node_child_process = require("node:child_process");
 let node_path = require("node:path");
 node_path = require_rolldown_runtime.__toESM(node_path, 1);
+let node_fs = require("node:fs");
+let node_child_process = require("node:child_process");
 let node_os = require("node:os");
 let node_module = require("node:module");
 let acorn = require("acorn");

package/dist/publish-contract-cli.mjs

@@ -6,9 +6,9 @@ import { t as parseToolchainPolicy } from "./toolchain-schema.mjs";
 import { a as resolveManifestContract, n as readPackedSyntaxFiles, r as checkPublishContract, s as resolveConsumerReleasePack } from "./publish-artifact-syntax.mjs";
 import { n as reviewedViteDtsOptions, t as declarationOnlyDts } from "./publish-build-target-vite-dts-helper2.mjs";
 import { createRequire } from "node:module";
+import path from "node:path";
 import { existsSync, mkdtempSync, readFileSync, realpathSync, rmSync, writeFileSync } from "node:fs";
 import { execFileSync, spawnSync } from "node:child_process";
-import path from "node:path";
 import { tmpdir } from "node:os";
 import { parse } from "acorn";
 import { pathToFileURL } from "node:url";

package/dist/quarantine-cli.cjs

@@ -0,0 +1,66 @@
+#!/usr/bin/env node
+Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
+const require_generated_file = require("./generated-file.cjs");
+const require_quarantine_policy = require("./quarantine-policy2.cjs");
+const require_toolchain_guard = require("./toolchain-guard.cjs");
+let node_fs_promises = require("node:fs/promises");
+let node_path = require("node:path");
+//#region src/quarantine-cli.ts
+const usage = "Usage: stll-quarantine [--check | --sync | --prune]\nRun from the repository root; --check is the default.";
+const main = async () => {
+	const args = process.argv.slice(2);
+	if (args.length === 1 && args.at(0) === "--help") {
+		process.stdout.write(`${usage}\n`);
+		return;
+	}
+	const mode = args.at(0) ?? "--check";
+	if (args.length > 1 || ![
+		"--check",
+		"--sync",
+		"--prune"
+	].includes(mode)) throw new Error(usage);
+	const root = await (0, node_fs_promises.realpath)(process.cwd());
+	const { files, trackedFiles, diagnostics } = require_toolchain_guard.readToolchainInputs(root, { bunLock: "content" });
+	const destination = (0, node_path.join)(root, "bunfig.toml");
+	for (const file of ["bunfig.toml", "bun.lock"]) {
+		const source = (0, node_path.join)(root, file);
+		if (await require_generated_file.checkGeneratedOutput(source) !== void 0) files[file] = await (0, node_fs_promises.readFile)(source, "utf8");
+	}
+	const remaining = await require_generated_file.generationDiagnostics({
+		diagnostics,
+		outputs: [{
+			relative: "bunfig.toml",
+			destination
+		}]
+	});
+	if (remaining.length > 0) throw new Error(remaining.map(({ path, message }) => `${path}: ${message}`).join("\n"));
+	if (mode === "--check") {
+		const npmrc = await (0, node_fs_promises.lstat)((0, node_path.join)(root, ".npmrc")).catch((error) => {
+			if (error instanceof Error && "code" in error && error.code === "ENOENT") return void 0;
+			throw error;
+		});
+		const result = require_quarantine_policy.checkRepositoryQuarantine({
+			files,
+			npmrcPresent: npmrc !== void 0 || trackedFiles.has(".npmrc")
+		});
+		for (const warning of result.warnings) process.stderr.write(`warning: ${warning}\n`);
+		if (result.errors.length > 0) throw new Error(result.errors.join("\n"));
+		process.stdout.write("Verified bunfig.toml quarantine policy\n");
+		return;
+	}
+	const text = mode === "--sync" ? require_quarantine_policy.synchronizeRepositoryQuarantine({ files }) : require_quarantine_policy.pruneRepositoryQuarantine({ files }).bunfig;
+	const stat = await require_generated_file.checkGeneratedOutput(destination);
+	if (text !== files["bunfig.toml"]) await require_generated_file.writeGeneratedFile({
+		destination,
+		text,
+		mode: stat === void 0 ? 420 : stat.mode & 511
+	});
+	process.stdout.write(`${mode === "--sync" ? "Synchronized" : "Pruned"} bunfig.toml quarantine policy\n`);
+};
+main().catch((error) => {
+	process.stderr.write(`quarantine: ${error instanceof Error ? error.message : String(error)}\n`);
+	process.exitCode = 1;
+});
+//#endregion
+
+//# sourceMappingURL=quarantine-cli.cjs.map

package/dist/quarantine-cli.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"quarantine-cli.cjs","names":["realpath","readToolchainInputs","join","checkGeneratedOutput","readFile","generationDiagnostics","lstat","checkRepositoryQuarantine","synchronizeRepositoryQuarantine","pruneRepositoryQuarantine","writeGeneratedFile"],"sources":["../src/quarantine-cli.ts"],"sourcesContent":["#!/usr/bin/env node\nimport { lstat, readFile, realpath } from \"node:fs/promises\";\nimport { join } from \"node:path\";\n\nimport {\n  checkGeneratedOutput,\n  generationDiagnostics,\n  writeGeneratedFile,\n} from \"./generated-file\";\nimport {\n  checkRepositoryQuarantine,\n  pruneRepositoryQuarantine,\n  synchronizeRepositoryQuarantine,\n} from \"./quarantine-policy\";\nimport { readToolchainInputs } from \"./toolchain-guard\";\n\nconst usage =\n  \"Usage: stll-quarantine [--check | --sync | --prune]\\nRun from the repository root; --check is the default.\";\nconst main = async () => {\n  const args = process.argv.slice(2);\n  if (args.length === 1 && args.at(0) === \"--help\") {\n    process.stdout.write(`${usage}\\n`);\n    return;\n  }\n  const mode = args.at(0) ?? \"--check\";\n  if (args.length > 1 || ![\"--check\", \"--sync\", \"--prune\"].includes(mode))\n    throw new Error(usage);\n  const root = await realpath(process.cwd());\n  const { files, trackedFiles, diagnostics } = readToolchainInputs(root, {\n    bunLock: \"content\",\n  });\n  const destination = join(root, \"bunfig.toml\");\n  // These root inputs may be new outputs not yet staged in Git.\n  for (const file of [\"bunfig.toml\", \"bun.lock\"]) {\n    const source = join(root, file);\n    if ((await checkGeneratedOutput(source)) !== undefined)\n      files[file] = await readFile(source, \"utf8\");\n  }\n  const remaining = await generationDiagnostics({\n    diagnostics,\n    outputs: [{ relative: \"bunfig.toml\", destination }],\n  });\n  if (remaining.length > 0)\n    throw new Error(\n      remaining.map(({ path, message }) => `${path}: ${message}`).join(\"\\n\"),\n    );\n  if (mode === \"--check\") {\n    const npmrc = await lstat(join(root, \".npmrc\")).catch((error: unknown) => {\n      if (error instanceof Error && \"code\" in error && error.code === \"ENOENT\")\n        return undefined;\n      throw error;\n    });\n    const result = checkRepositoryQuarantine({\n      files,\n      npmrcPresent: npmrc !== undefined || trackedFiles.has(\".npmrc\"),\n    });\n    for (const warning of result.warnings)\n      process.stderr.write(`warning: ${warning}\\n`);\n    if (result.errors.length > 0) throw new Error(result.errors.join(\"\\n\"));\n    process.stdout.write(\"Verified bunfig.toml quarantine policy\\n\");\n    return;\n  }\n  const text =\n    mode === \"--sync\"\n      ? synchronizeRepositoryQuarantine({ files })\n      : pruneRepositoryQuarantine({ files }).bunfig;\n  const stat = await checkGeneratedOutput(destination);\n  if (text !== files[\"bunfig.toml\"])\n    await writeGeneratedFile({\n      destination,\n      text,\n      mode: stat === undefined ? 0o644 : stat.mode & 0o777,\n    });\n  process.stdout.write(\n    `${mode === \"--sync\" ? \"Synchronized\" : \"Pruned\"} bunfig.toml quarantine policy\\n`,\n  );\n};\nmain().catch((error: unknown) => {\n  process.stderr.write(\n    `quarantine: ${error instanceof Error ? error.message : String(error)}\\n`,\n  );\n  process.exitCode = 1;\n});\n"],"mappings":";;;;;;;;AAgBA,MAAM,QACJ;AACF,MAAM,OAAO,YAAY;CACvB,MAAM,OAAO,QAAQ,KAAK,MAAM,CAAC;CACjC,IAAI,KAAK,WAAW,KAAK,KAAK,GAAG,CAAC,MAAM,UAAU;EAChD,QAAQ,OAAO,MAAM,GAAG,MAAM,GAAG;EACjC;CACF;CACA,MAAM,OAAO,KAAK,GAAG,CAAC,KAAK;CAC3B,IAAI,KAAK,SAAS,KAAK,CAAC;EAAC;EAAW;EAAU;CAAS,CAAC,CAAC,SAAS,IAAI,GACpE,MAAM,IAAI,MAAM,KAAK;CACvB,MAAM,OAAO,OAAA,GAAMA,iBAAAA,SAAAA,CAAS,QAAQ,IAAI,CAAC;CACzC,MAAM,EAAE,OAAO,cAAc,gBAAgBC,wBAAAA,oBAAoB,MAAM,EACrE,SAAS,UACX,CAAC;CACD,MAAM,eAAA,GAAcC,UAAAA,KAAAA,CAAK,MAAM,aAAa;CAE5C,KAAK,MAAM,QAAQ,CAAC,eAAe,UAAU,GAAG;EAC9C,MAAM,UAAA,GAASA,UAAAA,KAAAA,CAAK,MAAM,IAAI;EAC9B,IAAK,MAAMC,uBAAAA,qBAAqB,MAAM,MAAO,KAAA,GAC3C,MAAM,QAAQ,OAAA,GAAMC,iBAAAA,SAAAA,CAAS,QAAQ,MAAM;CAC/C;CACA,MAAM,YAAY,MAAMC,uBAAAA,sBAAsB;EAC5C;EACA,SAAS,CAAC;GAAE,UAAU;GAAe;EAAY,CAAC;CACpD,CAAC;CACD,IAAI,UAAU,SAAS,GACrB,MAAM,IAAI,MACR,UAAU,KAAK,EAAE,MAAM,cAAc,GAAG,KAAK,IAAI,SAAS,CAAC,CAAC,KAAK,IAAI,CACvE;CACF,IAAI,SAAS,WAAW;EACtB,MAAM,QAAQ,OAAA,GAAMC,iBAAAA,MAAAA,EAAAA,GAAMJ,UAAAA,KAAAA,CAAK,MAAM,QAAQ,CAAC,CAAC,CAAC,OAAO,UAAmB;GACxE,IAAI,iBAAiB,SAAS,UAAU,SAAS,MAAM,SAAS,UAC9D,OAAO,KAAA;GACT,MAAM;EACR,CAAC;EACD,MAAM,SAASK,0BAAAA,0BAA0B;GACvC;GACA,cAAc,UAAU,KAAA,KAAa,aAAa,IAAI,QAAQ;EAChE,CAAC;EACD,KAAK,MAAM,WAAW,OAAO,UAC3B,QAAQ,OAAO,MAAM,YAAY,QAAQ,GAAG;EAC9C,IAAI,OAAO,OAAO,SAAS,GAAG,MAAM,IAAI,MAAM,OAAO,OAAO,KAAK,IAAI,CAAC;EACtE,QAAQ,OAAO,MAAM,0CAA0C;EAC/D;CACF;CACA,MAAM,OACJ,SAAS,WACLC,0BAAAA,gCAAgC,EAAE,MAAM,CAAC,IACzCC,0BAAAA,0BAA0B,EAAE,MAAM,CAAC,CAAC,CAAC;CAC3C,MAAM,OAAO,MAAMN,uBAAAA,qBAAqB,WAAW;CACnD,IAAI,SAAS,MAAM,gBACjB,MAAMO,uBAAAA,mBAAmB;EACvB;EACA;EACA,MAAM,SAAS,KAAA,IAAY,MAAQ,KAAK,OAAO;CACjD,CAAC;CACH,QAAQ,OAAO,MACb,GAAG,SAAS,WAAW,iBAAiB,SAAS,iCACnD;AACF;AACA,KAAK,CAAC,CAAC,OAAO,UAAmB;CAC/B,QAAQ,OAAO,MACb,eAAe,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK,EAAE,GACxE;CACA,QAAQ,WAAW;AACrB,CAAC"}

package/dist/quarantine-cli.d.cts

@@ -0,0 +1 @@
+export {}

package/dist/quarantine-cli.d.mts

@@ -0,0 +1 @@
+export {}

package/dist/quarantine-cli.mjs

@@ -0,0 +1,66 @@
+#!/usr/bin/env node
+import { n as generationDiagnostics, r as writeGeneratedFile, t as checkGeneratedOutput } from "./generated-file.mjs";
+import { i as synchronizeRepositoryQuarantine, r as pruneRepositoryQuarantine, t as checkRepositoryQuarantine } from "./quarantine-policy2.mjs";
+import { r as readToolchainInputs } from "./toolchain-guard.mjs";
+import { lstat, readFile, realpath } from "node:fs/promises";
+import { join } from "node:path";
+//#region src/quarantine-cli.ts
+const usage = "Usage: stll-quarantine [--check | --sync | --prune]\nRun from the repository root; --check is the default.";
+const main = async () => {
+	const args = process.argv.slice(2);
+	if (args.length === 1 && args.at(0) === "--help") {
+		process.stdout.write(`${usage}\n`);
+		return;
+	}
+	const mode = args.at(0) ?? "--check";
+	if (args.length > 1 || ![
+		"--check",
+		"--sync",
+		"--prune"
+	].includes(mode)) throw new Error(usage);
+	const root = await realpath(process.cwd());
+	const { files, trackedFiles, diagnostics } = readToolchainInputs(root, { bunLock: "content" });
+	const destination = join(root, "bunfig.toml");
+	for (const file of ["bunfig.toml", "bun.lock"]) {
+		const source = join(root, file);
+		if (await checkGeneratedOutput(source) !== void 0) files[file] = await readFile(source, "utf8");
+	}
+	const remaining = await generationDiagnostics({
+		diagnostics,
+		outputs: [{
+			relative: "bunfig.toml",
+			destination
+		}]
+	});
+	if (remaining.length > 0) throw new Error(remaining.map(({ path, message }) => `${path}: ${message}`).join("\n"));
+	if (mode === "--check") {
+		const npmrc = await lstat(join(root, ".npmrc")).catch((error) => {
+			if (error instanceof Error && "code" in error && error.code === "ENOENT") return void 0;
+			throw error;
+		});
+		const result = checkRepositoryQuarantine({
+			files,
+			npmrcPresent: npmrc !== void 0 || trackedFiles.has(".npmrc")
+		});
+		for (const warning of result.warnings) process.stderr.write(`warning: ${warning}\n`);
+		if (result.errors.length > 0) throw new Error(result.errors.join("\n"));
+		process.stdout.write("Verified bunfig.toml quarantine policy\n");
+		return;
+	}
+	const text = mode === "--sync" ? synchronizeRepositoryQuarantine({ files }) : pruneRepositoryQuarantine({ files }).bunfig;
+	const stat = await checkGeneratedOutput(destination);
+	if (text !== files["bunfig.toml"]) await writeGeneratedFile({
+		destination,
+		text,
+		mode: stat === void 0 ? 420 : stat.mode & 511
+	});
+	process.stdout.write(`${mode === "--sync" ? "Synchronized" : "Pruned"} bunfig.toml quarantine policy\n`);
+};
+main().catch((error) => {
+	process.stderr.write(`quarantine: ${error instanceof Error ? error.message : String(error)}\n`);
+	process.exitCode = 1;
+});
+//#endregion
+export {};
+
+//# sourceMappingURL=quarantine-cli.mjs.map

package/dist/quarantine-cli.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"quarantine-cli.mjs","names":[],"sources":["../src/quarantine-cli.ts"],"sourcesContent":["#!/usr/bin/env node\nimport { lstat, readFile, realpath } from \"node:fs/promises\";\nimport { join } from \"node:path\";\n\nimport {\n  checkGeneratedOutput,\n  generationDiagnostics,\n  writeGeneratedFile,\n} from \"./generated-file\";\nimport {\n  checkRepositoryQuarantine,\n  pruneRepositoryQuarantine,\n  synchronizeRepositoryQuarantine,\n} from \"./quarantine-policy\";\nimport { readToolchainInputs } from \"./toolchain-guard\";\n\nconst usage =\n  \"Usage: stll-quarantine [--check | --sync | --prune]\\nRun from the repository root; --check is the default.\";\nconst main = async () => {\n  const args = process.argv.slice(2);\n  if (args.length === 1 && args.at(0) === \"--help\") {\n    process.stdout.write(`${usage}\\n`);\n    return;\n  }\n  const mode = args.at(0) ?? \"--check\";\n  if (args.length > 1 || ![\"--check\", \"--sync\", \"--prune\"].includes(mode))\n    throw new Error(usage);\n  const root = await realpath(process.cwd());\n  const { files, trackedFiles, diagnostics } = readToolchainInputs(root, {\n    bunLock: \"content\",\n  });\n  const destination = join(root, \"bunfig.toml\");\n  // These root inputs may be new outputs not yet staged in Git.\n  for (const file of [\"bunfig.toml\", \"bun.lock\"]) {\n    const source = join(root, file);\n    if ((await checkGeneratedOutput(source)) !== undefined)\n      files[file] = await readFile(source, \"utf8\");\n  }\n  const remaining = await generationDiagnostics({\n    diagnostics,\n    outputs: [{ relative: \"bunfig.toml\", destination }],\n  });\n  if (remaining.length > 0)\n    throw new Error(\n      remaining.map(({ path, message }) => `${path}: ${message}`).join(\"\\n\"),\n    );\n  if (mode === \"--check\") {\n    const npmrc = await lstat(join(root, \".npmrc\")).catch((error: unknown) => {\n      if (error instanceof Error && \"code\" in error && error.code === \"ENOENT\")\n        return undefined;\n      throw error;\n    });\n    const result = checkRepositoryQuarantine({\n      files,\n      npmrcPresent: npmrc !== undefined || trackedFiles.has(\".npmrc\"),\n    });\n    for (const warning of result.warnings)\n      process.stderr.write(`warning: ${warning}\\n`);\n    if (result.errors.length > 0) throw new Error(result.errors.join(\"\\n\"));\n    process.stdout.write(\"Verified bunfig.toml quarantine policy\\n\");\n    return;\n  }\n  const text =\n    mode === \"--sync\"\n      ? synchronizeRepositoryQuarantine({ files })\n      : pruneRepositoryQuarantine({ files }).bunfig;\n  const stat = await checkGeneratedOutput(destination);\n  if (text !== files[\"bunfig.toml\"])\n    await writeGeneratedFile({\n      destination,\n      text,\n      mode: stat === undefined ? 0o644 : stat.mode & 0o777,\n    });\n  process.stdout.write(\n    `${mode === \"--sync\" ? \"Synchronized\" : \"Pruned\"} bunfig.toml quarantine policy\\n`,\n  );\n};\nmain().catch((error: unknown) => {\n  process.stderr.write(\n    `quarantine: ${error instanceof Error ? error.message : String(error)}\\n`,\n  );\n  process.exitCode = 1;\n});\n"],"mappings":";;;;;;;AAgBA,MAAM,QACJ;AACF,MAAM,OAAO,YAAY;CACvB,MAAM,OAAO,QAAQ,KAAK,MAAM,CAAC;CACjC,IAAI,KAAK,WAAW,KAAK,KAAK,GAAG,CAAC,MAAM,UAAU;EAChD,QAAQ,OAAO,MAAM,GAAG,MAAM,GAAG;EACjC;CACF;CACA,MAAM,OAAO,KAAK,GAAG,CAAC,KAAK;CAC3B,IAAI,KAAK,SAAS,KAAK,CAAC;EAAC;EAAW;EAAU;CAAS,CAAC,CAAC,SAAS,IAAI,GACpE,MAAM,IAAI,MAAM,KAAK;CACvB,MAAM,OAAO,MAAM,SAAS,QAAQ,IAAI,CAAC;CACzC,MAAM,EAAE,OAAO,cAAc,gBAAgB,oBAAoB,MAAM,EACrE,SAAS,UACX,CAAC;CACD,MAAM,cAAc,KAAK,MAAM,aAAa;CAE5C,KAAK,MAAM,QAAQ,CAAC,eAAe,UAAU,GAAG;EAC9C,MAAM,SAAS,KAAK,MAAM,IAAI;EAC9B,IAAK,MAAM,qBAAqB,MAAM,MAAO,KAAA,GAC3C,MAAM,QAAQ,MAAM,SAAS,QAAQ,MAAM;CAC/C;CACA,MAAM,YAAY,MAAM,sBAAsB;EAC5C;EACA,SAAS,CAAC;GAAE,UAAU;GAAe;EAAY,CAAC;CACpD,CAAC;CACD,IAAI,UAAU,SAAS,GACrB,MAAM,IAAI,MACR,UAAU,KAAK,EAAE,MAAM,cAAc,GAAG,KAAK,IAAI,SAAS,CAAC,CAAC,KAAK,IAAI,CACvE;CACF,IAAI,SAAS,WAAW;EACtB,MAAM,QAAQ,MAAM,MAAM,KAAK,MAAM,QAAQ,CAAC,CAAC,CAAC,OAAO,UAAmB;GACxE,IAAI,iBAAiB,SAAS,UAAU,SAAS,MAAM,SAAS,UAC9D,OAAO,KAAA;GACT,MAAM;EACR,CAAC;EACD,MAAM,SAAS,0BAA0B;GACvC;GACA,cAAc,UAAU,KAAA,KAAa,aAAa,IAAI,QAAQ;EAChE,CAAC;EACD,KAAK,MAAM,WAAW,OAAO,UAC3B,QAAQ,OAAO,MAAM,YAAY,QAAQ,GAAG;EAC9C,IAAI,OAAO,OAAO,SAAS,GAAG,MAAM,IAAI,MAAM,OAAO,OAAO,KAAK,IAAI,CAAC;EACtE,QAAQ,OAAO,MAAM,0CAA0C;EAC/D;CACF;CACA,MAAM,OACJ,SAAS,WACL,gCAAgC,EAAE,MAAM,CAAC,IACzC,0BAA0B,EAAE,MAAM,CAAC,CAAC,CAAC;CAC3C,MAAM,OAAO,MAAM,qBAAqB,WAAW;CACnD,IAAI,SAAS,MAAM,gBACjB,MAAM,mBAAmB;EACvB;EACA;EACA,MAAM,SAAS,KAAA,IAAY,MAAQ,KAAK,OAAO;CACjD,CAAC;CACH,QAAQ,OAAO,MACb,GAAG,SAAS,WAAW,iBAAiB,SAAS,iCACnD;AACF;AACA,KAAK,CAAC,CAAC,OAAO,UAAmB;CAC/B,QAAQ,OAAO,MACb,eAAe,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK,EAAE,GACxE;CACA,QAAQ,WAAW;AACrB,CAAC"}

package/dist/quarantine-policy.cjs

@@ -0,0 +1,10 @@
+Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
+const require_quarantine_policy = require("./quarantine-policy2.cjs");
+exports.EXACT_UTC_TIMESTAMP = require_quarantine_policy.EXACT_UTC_TIMESTAMP;
+exports.NPM_REGISTRY = require_quarantine_policy.NPM_REGISTRY;
+exports.REQUIRED_RELEASE_AGE_SECONDS = require_quarantine_policy.REQUIRED_RELEASE_AGE_SECONDS;
+exports.checkRepositoryQuarantine = require_quarantine_policy.checkRepositoryQuarantine;
+exports.declaredFirstPartyPackages = require_quarantine_policy.declaredFirstPartyPackages;
+exports.exactTimestamp = require_quarantine_policy.exactTimestamp;
+exports.pruneRepositoryQuarantine = require_quarantine_policy.pruneRepositoryQuarantine;
+exports.synchronizeRepositoryQuarantine = require_quarantine_policy.synchronizeRepositoryQuarantine;

package/dist/quarantine-policy.d.cts

@@ -0,0 +1,27 @@
+//#region src/quarantine-policy-core.d.ts
+declare const REQUIRED_RELEASE_AGE_SECONDS: number;
+declare const NPM_REGISTRY = "https://registry.npmjs.org";
+declare const EXACT_UTC_TIMESTAMP: RegExp;
+declare const exactTimestamp: (value: string) => boolean;
+type CheckResult = {
+  errors: string[];
+  warnings: string[];
+};
+//#endregion
+//#region src/quarantine-policy.d.ts
+/** Derive exact registry identities before install, including catalog references. */
+declare const declaredFirstPartyPackages: (files: Record<string, string>) => Set<string>;
+type RepositoryQuarantineOptions = {
+  files: Record<string, string>;
+  now?: Date | undefined;
+  npmrcPresent?: boolean | undefined;
+};
+declare const checkRepositoryQuarantine: ({ files, now, npmrcPresent }: RepositoryQuarantineOptions) => CheckResult;
+declare const synchronizeRepositoryQuarantine: ({ files, now }: RepositoryQuarantineOptions) => string;
+declare const pruneRepositoryQuarantine: ({ files, now }: RepositoryQuarantineOptions) => {
+  bunfig: string;
+  pruned: string[];
+};
+//#endregion
+export { EXACT_UTC_TIMESTAMP, NPM_REGISTRY, REQUIRED_RELEASE_AGE_SECONDS, checkRepositoryQuarantine, declaredFirstPartyPackages, exactTimestamp, pruneRepositoryQuarantine, synchronizeRepositoryQuarantine };
+//# sourceMappingURL=quarantine-policy.d.cts.map

package/dist/quarantine-policy.d.mts

@@ -0,0 +1,27 @@
+//#region src/quarantine-policy-core.d.ts
+declare const REQUIRED_RELEASE_AGE_SECONDS: number;
+declare const NPM_REGISTRY = "https://registry.npmjs.org";
+declare const EXACT_UTC_TIMESTAMP: RegExp;
+declare const exactTimestamp: (value: string) => boolean;
+type CheckResult = {
+  errors: string[];
+  warnings: string[];
+};
+//#endregion
+//#region src/quarantine-policy.d.ts
+/** Derive exact registry identities before install, including catalog references. */
+declare const declaredFirstPartyPackages: (files: Record<string, string>) => Set<string>;
+type RepositoryQuarantineOptions = {
+  files: Record<string, string>;
+  now?: Date | undefined;
+  npmrcPresent?: boolean | undefined;
+};
+declare const checkRepositoryQuarantine: ({ files, now, npmrcPresent }: RepositoryQuarantineOptions) => CheckResult;
+declare const synchronizeRepositoryQuarantine: ({ files, now }: RepositoryQuarantineOptions) => string;
+declare const pruneRepositoryQuarantine: ({ files, now }: RepositoryQuarantineOptions) => {
+  bunfig: string;
+  pruned: string[];
+};
+//#endregion
+export { EXACT_UTC_TIMESTAMP, NPM_REGISTRY, REQUIRED_RELEASE_AGE_SECONDS, checkRepositoryQuarantine, declaredFirstPartyPackages, exactTimestamp, pruneRepositoryQuarantine, synchronizeRepositoryQuarantine };
+//# sourceMappingURL=quarantine-policy.d.mts.map

package/dist/quarantine-policy.mjs

@@ -0,0 +1 @@
+export { a as EXACT_UTC_TIMESTAMP, o as NPM_REGISTRY, s as REQUIRED_RELEASE_AGE_SECONDS, t as checkRepositoryQuarantine, n as declaredFirstPartyPackages, c as exactTimestamp, r as pruneRepositoryQuarantine, i as synchronizeRepositoryQuarantine } from "./quarantine-policy2.mjs";