@stll/oxlint-config 1.4.0 → 1.5.1

package/dist/quarantine-policy2.mjs

@@ -0,0 +1,352 @@
+import { t as parseJsonc } from "./jsonc.mjs";
+import { parse } from "smol-toml";
+//#region src/quarantine-policy-core.ts
+const REQUIRED_RELEASE_AGE_SECONDS = 432e3;
+const NPM_REGISTRY = "https://registry.npmjs.org";
+const EXACT_UTC_TIMESTAMP = /^\d{4}-\d{2}-\d{2}T\d{2}:\d{2}:\d{2}\.\d{3}Z$/u;
+const HOUR_MS = 36e5;
+const EXACT_PACKAGE = /^(?:@[a-z0-9][a-z0-9._-]*\/)?[a-z0-9][a-z0-9._-]*$/u;
+const REGISTRY_VERSION = /^\d+\.\d+\.\d+(?:-[0-9A-Za-z.-]+)?(?:\+[0-9A-Za-z.-]+)?$/u;
+const isRecord = (value) => typeof value === "object" && value !== null && !Array.isArray(value);
+const fail = (message) => {
+	throw new Error(message);
+};
+const ownPackage = (name) => name.startsWith("@stll/");
+const exactPackage = (name) => name.length <= 214 && EXACT_PACKAGE.test(name);
+const isFirstPartyPackageName = (name) => exactPackage(name) && ownPackage(name);
+const exactTimestamp = (value) => {
+	const timestamp = Date.parse(value);
+	return EXACT_UTC_TIMESTAMP.test(value) && !Number.isNaN(timestamp) && new Date(timestamp).toISOString() === value;
+};
+const readParsedExcludes = (bunfig, parseToml) => {
+	const parsed = parseToml(bunfig);
+	if (!isRecord(parsed) || !isRecord(parsed["install"])) return fail("bunfig.toml must contain an [install] table");
+	const install = parsed["install"];
+	if ("registry" in install && install["registry"] !== "https://registry.npmjs.org" || "scopes" in install && (!isRecord(install["scopes"]) || Object.keys(install["scopes"]).length > 0)) fail("bunfig.toml quarantine policy requires the canonical npm registry");
+	if (install["minimumReleaseAge"] !== 432e3) fail(`bunfig.toml must set minimumReleaseAge = ${REQUIRED_RELEASE_AGE_SECONDS}`);
+	if (!Array.isArray(install["minimumReleaseAgeExcludes"])) return fail("bunfig.toml must declare minimumReleaseAgeExcludes as an array");
+	const names = [];
+	for (const value of install["minimumReleaseAgeExcludes"]) {
+		if (typeof value !== "string" || !exactPackage(value)) return fail("bunfig.toml minimumReleaseAgeExcludes must contain only exact npm package names");
+		names.push(value);
+	}
+	if (new Set(names).size !== names.length) fail("bunfig.toml minimumReleaseAgeExcludes must not contain duplicates");
+	return names;
+};
+const tokensOf = (text) => {
+	const tokens = [];
+	let index = 0;
+	while (index < text.length) {
+		const start = index;
+		const character = text.charAt(index++);
+		if (character === "\n") {
+			tokens.push({
+				type: "newline",
+				start,
+				end: index,
+				text: character
+			});
+			continue;
+		}
+		if (/\s/u.test(character)) continue;
+		let type;
+		if (character === "#") {
+			type = "comment";
+			while (index < text.length && text.charAt(index) !== "\n") index++;
+		} else if (character === "\"" || character === "'") {
+			type = "string";
+			const triple = text.slice(start, start + 3) === character.repeat(3);
+			if (triple) index = start + 3;
+			while (index < text.length) {
+				const current = text.charAt(index++);
+				if (character === "\"" && current === "\\") {
+					index++;
+					continue;
+				}
+				if (current !== character) continue;
+				if (!triple) break;
+				if (text.slice(index - 1, index + 2) !== character.repeat(3)) continue;
+				index += 2;
+				while (text.charAt(index) === character) index++;
+				break;
+			}
+		} else if ("[]=.,{}".includes(character)) type = "punctuation";
+		else {
+			type = "atom";
+			while (index < text.length && !/[\s#[\]=.,{}"']/u.test(text.charAt(index))) index++;
+		}
+		tokens.push({
+			type,
+			start,
+			end: index,
+			text: type === "comment" ? text.slice(start, index).replace(/\r$/u, "") : text.slice(start, index)
+		});
+	}
+	return tokens;
+};
+const stringValue = (token, parseToml) => {
+	const parsed = parseToml(`value = ${token.text}`);
+	if (!isRecord(parsed) || typeof parsed["value"] !== "string") return fail("bunfig.toml has an unsupported quarantine string");
+	return parsed["value"];
+};
+const keyParts = (tokens, parseToml) => tokens.filter(({ text }) => text !== ".").map((token) => token.type === "string" ? stringValue(token, parseToml) : token.text);
+const readSourceArray = (bunfig, parseToml) => {
+	const names = readParsedExcludes(bunfig, parseToml);
+	let table = [];
+	let statement = [];
+	let depth = 0;
+	let found;
+	const visitStatement = () => {
+		const meaningful = statement.filter(({ type }) => type !== "comment" && type !== "newline");
+		if (meaningful.at(0)?.text === "[") {
+			if (meaningful.at(-1)?.text === "]") table = keyParts(meaningful.slice(1, -1), parseToml);
+			return;
+		}
+		const equals = meaningful.findIndex(({ text }) => text === "=");
+		if (equals < 0) return;
+		const key = [...table, ...keyParts(meaningful.slice(0, equals), parseToml)];
+		if (key.join(".") !== "install.minimumReleaseAgeExcludes" || key.length !== 2) return;
+		const open = meaningful.at(equals + 1);
+		const close = meaningful.at(-1);
+		if (open === void 0 || close === void 0 || open.text !== "[" || close.text !== "]" || found !== void 0) fail("bunfig.toml must declare a single install minimumReleaseAgeExcludes array");
+		const values = meaningful.slice(equals + 2, -1);
+		if (values.some(({ type, text }) => type !== "string" && text !== ",")) fail("bunfig.toml quarantine array must contain package strings");
+		const strings = values.filter(({ type }) => type === "string");
+		const comments = statement.filter(({ type }) => type === "comment");
+		const entries = strings.map((token, index) => {
+			const next = strings.at(index + 1)?.start ?? Number.POSITIVE_INFINITY;
+			const comment = comments.find((candidate) => candidate.start >= token.end && candidate.start < next && !bunfig.slice(token.end, candidate.start).includes("\n"));
+			const following = values.find((candidate) => candidate.start >= token.end);
+			return {
+				name: stringValue(token, parseToml),
+				token,
+				comment,
+				comma: following?.text === "," ? following : void 0
+			};
+		});
+		if (entries.length !== names.length || entries.some(({ name }, index) => name !== names.at(index))) fail("bunfig.toml quarantine source does not match its parsed install array");
+		found = {
+			open,
+			close,
+			entries,
+			comments
+		};
+	};
+	for (const token of tokensOf(bunfig)) {
+		if (token.type === "newline" && depth === 0) {
+			visitStatement();
+			statement = [];
+			continue;
+		}
+		statement.push(token);
+		if (token.type !== "punctuation") continue;
+		if (token.text === "[" || token.text === "{") depth++;
+		if (token.text === "]" || token.text === "}") depth--;
+	}
+	visitStatement();
+	if (found === void 0) return fail("bunfig.toml must declare an explicit [install] minimumReleaseAgeExcludes array");
+	return found;
+};
+const annotationOf = ({ comment }) => {
+	if (comment === void 0) return { type: "none" };
+	const match = /^#\s*quarantine-(expires|excluded-since):\s*(\S+)\s*$/u.exec(comment.text);
+	const marker = match?.at(1);
+	const timestamp = match?.at(2);
+	if ((marker === "expires" || marker === "excluded-since") && timestamp !== void 0) return {
+		type: marker,
+		timestamp
+	};
+	return { type: "invalid" };
+};
+const readRegistryFirstPartyPackages = (lockfile) => {
+	if (lockfile === void 0) return /* @__PURE__ */ new Set();
+	const parsed = parseJsonc(lockfile);
+	if (!isRecord(parsed) || !isRecord(parsed["packages"])) return fail("bun.lock must contain a packages mapping");
+	const names = /* @__PURE__ */ new Set();
+	for (const value of Object.values(parsed["packages"])) {
+		if (!Array.isArray(value)) continue;
+		const identity = value.at(0);
+		if (typeof identity !== "string") continue;
+		const separator = identity.lastIndexOf("@");
+		const name = identity.slice(0, separator);
+		if (exactPackage(name) && ownPackage(name) && REGISTRY_VERSION.test(identity.slice(separator + 1))) names.add(name);
+	}
+	return names;
+};
+const ownNames = (names) => {
+	const result = new Set(names);
+	for (const name of result) if (!exactPackage(name) || !ownPackage(name)) fail(`Expected an exact first-party npm package name: ${name}`);
+	return result;
+};
+const validNow = (now) => {
+	if (!Number.isFinite(now.getTime())) return fail("Quarantine policy requires a valid current date");
+	return now.getTime();
+};
+const checkQuarantinePolicy = ({ bunfig, lockfile, parseToml, npmrcPresent = false, now = /* @__PURE__ */ new Date(), firstPartyPackages }) => {
+	const errors = [];
+	const warnings = [];
+	try {
+		const nowMs = validNow(now);
+		const { entries } = readSourceArray(bunfig, parseToml);
+		if (npmrcPresent) errors.push("bunfig.toml quarantine policy does not allow a repository .npmrc");
+		for (const entry of entries) {
+			const annotation = annotationOf(entry);
+			if (ownPackage(entry.name) && annotation.type === "none") continue;
+			if (annotation.type === "none" || annotation.type === "invalid") {
+				errors.push(`bunfig.toml has an unannotated or malformed quarantine exclude: ${entry.name}`);
+				continue;
+			}
+			if (!exactTimestamp(annotation.timestamp)) {
+				errors.push(`bunfig.toml quarantine exclude "${entry.name}" has an invalid UTC timestamp: ${annotation.timestamp}`);
+				continue;
+			}
+			const timestampMs = Date.parse(annotation.timestamp);
+			if (ownPackage(entry.name)) {
+				if (annotation.type !== "excluded-since") errors.push(`bunfig.toml first-party quarantine exclude "${entry.name}" must be permanent (quarantine-excluded-since: or no timestamp)`);
+				else if (timestampMs > nowMs) errors.push(`bunfig.toml first-party quarantine exclude "${entry.name}" has a future exclusion date`);
+				continue;
+			}
+			if (annotation.type !== "expires") {
+				errors.push(`bunfig.toml third-party quarantine exclude "${entry.name}" must use quarantine-expires:`);
+				continue;
+			}
+			if (nowMs >= timestampMs + 24 * HOUR_MS) errors.push(`bunfig.toml temporary quarantine exclude "${entry.name}" expired at ${annotation.timestamp} and is still present`);
+			else if (nowMs >= timestampMs) warnings.push(`bunfig.toml temporary quarantine exclude "${entry.name}" expired at ${annotation.timestamp}; its removal PR should be merged`);
+			else if (nowMs >= timestampMs - 48 * HOUR_MS) warnings.push(`bunfig.toml temporary quarantine exclude "${entry.name}" expires at ${annotation.timestamp}; prepare its removal PR`);
+		}
+		const required = readRegistryFirstPartyPackages(lockfile);
+		if (firstPartyPackages !== void 0) for (const name of ownNames(firstPartyPackages)) required.add(name);
+		const declared = new Set(entries.map(({ name }) => name));
+		const missing = [...required].filter((name) => !declared.has(name)).sort();
+		if (missing.length > 0) errors.push(`bunfig.toml is missing registry-backed first-party quarantine excludes: ${missing.join(", ")}`);
+	} catch (error) {
+		errors.push(error instanceof Error ? error.message : String(error));
+	}
+	return {
+		errors,
+		warnings
+	};
+};
+const pruneExpiredExcludes = ({ bunfig, parseToml, now = /* @__PURE__ */ new Date() }) => {
+	const nowMs = validNow(now);
+	const { entries, close } = readSourceArray(bunfig, parseToml);
+	const removals = [];
+	const pruned = [];
+	for (const entry of entries) {
+		if (ownPackage(entry.name)) continue;
+		const annotation = annotationOf(entry);
+		if (annotation.type !== "expires" || !exactTimestamp(annotation.timestamp)) return fail(`bunfig.toml third-party quarantine exclude "${entry.name}" must have an exact UTC quarantine-expires: annotation`);
+		if (nowMs < Date.parse(annotation.timestamp)) continue;
+		const lineStart = bunfig.lastIndexOf("\n", entry.token.start - 1) + 1;
+		const nextNewline = bunfig.indexOf("\n", entry.token.end);
+		const lineEnd = nextNewline < 0 ? bunfig.length : nextNewline;
+		const commentInside = entry.comment !== void 0 && entry.comment.start < close.start;
+		const end = commentInside ? entry.comment?.end ?? entry.token.end : entry.comma?.end ?? entry.token.end;
+		if (bunfig.slice(lineStart, entry.token.start).trim() === "" && bunfig.slice(end, lineEnd).trim() === "") removals.push({
+			start: lineStart,
+			end: nextNewline < 0 ? lineEnd : lineEnd + 1
+		});
+		else removals.push({
+			start: entry.token.start,
+			end
+		});
+		if (entry.comment !== void 0 && !commentInside) removals.push({
+			start: entry.comment.start,
+			end: entry.comment.end
+		});
+		pruned.push(entry.name);
+	}
+	let result = bunfig;
+	for (const removal of removals.toReversed()) result = result.slice(0, removal.start) + result.slice(removal.end);
+	readSourceArray(result, parseToml);
+	return {
+		bunfig: result,
+		pruned
+	};
+};
+const synchronizeFirstPartyExcludes = ({ bunfig, firstPartyPackages, parseToml, now = /* @__PURE__ */ new Date() }) => {
+	validNow(now);
+	const required = ownNames(firstPartyPackages);
+	const { open, close, entries, comments } = readSourceArray(bunfig, parseToml);
+	const attachedComments = new Set(entries.flatMap(({ comment }) => comment === void 0 ? [] : [comment]));
+	const lines = comments.filter((comment) => !attachedComments.has(comment)).map(({ text }) => `  ${text}`);
+	const seen = /* @__PURE__ */ new Set();
+	for (const entry of entries) {
+		if (!ownPackage(entry.name)) {
+			const annotation = annotationOf(entry);
+			if (annotation.type !== "expires" || !exactTimestamp(annotation.timestamp)) return fail(`bunfig.toml third-party quarantine exclude "${entry.name}" must have an exact UTC quarantine-expires: annotation`);
+			lines.push(`  ${entry.token.text},${entry.comment === void 0 ? "" : ` ${entry.comment.text}`}`);
+			continue;
+		}
+		if (!required.has(entry.name)) continue;
+		seen.add(entry.name);
+		const annotation = annotationOf(entry);
+		const timestamp = annotation.type === "excluded-since" && exactTimestamp(annotation.timestamp) ? annotation.timestamp : now.toISOString();
+		lines.push(`  ${JSON.stringify(entry.name)}, # quarantine-excluded-since: ${timestamp}`);
+	}
+	for (const name of [...required].filter((requiredPackage) => !seen.has(requiredPackage)).sort()) lines.push(`  ${JSON.stringify(name)}, # quarantine-excluded-since: ${now.toISOString()}`);
+	const newline = bunfig.includes("\r\n") ? "\r\n" : "\n";
+	const trailingComment = entries.at(-1)?.comment;
+	const end = trailingComment !== void 0 && trailingComment.start > close.end ? trailingComment.end : close.end;
+	const result = bunfig.slice(0, open.start) + `[${newline}${lines.join(newline)}${lines.length === 0 ? "" : newline}]` + bunfig.slice(end);
+	readSourceArray(result, parseToml);
+	return result;
+};
+//#endregion
+//#region src/quarantine-policy.ts
+const record = (value) => typeof value === "object" && value !== null && !Array.isArray(value);
+/** Derive exact registry identities before install, including catalog references. */
+const declaredFirstPartyPackages = (files) => {
+	const names = /* @__PURE__ */ new Set();
+	for (const [file, text] of Object.entries(files)) {
+		if (!/(?:^|\/)package\.json$/.test(file)) continue;
+		const manifest = JSON.parse(text);
+		if (!record(manifest)) throw new Error(`${file} must contain an object`);
+		for (const field of [
+			"dependencies",
+			"devDependencies",
+			"optionalDependencies",
+			"peerDependencies"
+		]) {
+			const dependencies = manifest[field];
+			if (!record(dependencies)) continue;
+			for (const [name, specifier] of Object.entries(dependencies)) {
+				if (typeof specifier !== "string") continue;
+				if (/^(?:workspace:|file:|link:|git(?:\+|:)|https?:|github:|\.\.?\/|\/)/.test(specifier)) continue;
+				if (specifier.startsWith("npm:")) {
+					const alias = /^npm:(@[^/]+\/[^@]+|[^@]+)@/.exec(specifier)?.at(1);
+					if (alias !== void 0 && isFirstPartyPackageName(alias)) names.add(alias);
+					continue;
+				}
+				if (isFirstPartyPackageName(name)) names.add(name);
+			}
+		}
+	}
+	return names;
+};
+const checkRepositoryQuarantine = ({ files, now, npmrcPresent }) => checkQuarantinePolicy({
+	bunfig: files["bunfig.toml"] ?? "",
+	lockfile: files["bun.lock"],
+	firstPartyPackages: declaredFirstPartyPackages(files),
+	parseToml: parse,
+	...now === void 0 ? {} : { now },
+	...npmrcPresent === void 0 ? {} : { npmrcPresent }
+});
+const synchronizeRepositoryQuarantine = ({ files, now }) => {
+	const firstPartyPackages = /* @__PURE__ */ new Set([...declaredFirstPartyPackages(files), ...readRegistryFirstPartyPackages(files["bun.lock"])]);
+	return synchronizeFirstPartyExcludes({
+		bunfig: files["bunfig.toml"] ?? `[install]\nminimumReleaseAge = 432000\nminimumReleaseAgeExcludes = []\n`,
+		firstPartyPackages,
+		parseToml: parse,
+		...now === void 0 ? {} : { now }
+	});
+};
+const pruneRepositoryQuarantine = ({ files, now }) => pruneExpiredExcludes({
+	bunfig: files["bunfig.toml"] ?? "",
+	parseToml: parse,
+	...now === void 0 ? {} : { now }
+});
+//#endregion
+export { EXACT_UTC_TIMESTAMP as a, exactTimestamp as c, synchronizeRepositoryQuarantine as i, declaredFirstPartyPackages as n, NPM_REGISTRY as o, pruneRepositoryQuarantine as r, REQUIRED_RELEASE_AGE_SECONDS as s, checkRepositoryQuarantine as t };
+
+//# sourceMappingURL=quarantine-policy2.mjs.map

package/dist/quarantine-policy2.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"quarantine-policy2.mjs","names":[],"sources":["../src/quarantine-policy-core.ts","../src/quarantine-policy.ts"],"sourcesContent":["import { parseJsonc } from \"./jsonc\";\n\nexport const REQUIRED_RELEASE_AGE_SECONDS = 5 * 24 * 60 * 60;\nexport const NPM_REGISTRY = \"https://registry.npmjs.org\";\nexport const EXACT_UTC_TIMESTAMP =\n  /^\\d{4}-\\d{2}-\\d{2}T\\d{2}:\\d{2}:\\d{2}\\.\\d{3}Z$/u;\nconst HOUR_MS = 60 * 60 * 1000;\nconst EXACT_PACKAGE = /^(?:@[a-z0-9][a-z0-9._-]*\\/)?[a-z0-9][a-z0-9._-]*$/u;\nconst REGISTRY_VERSION =\n  /^\\d+\\.\\d+\\.\\d+(?:-[0-9A-Za-z.-]+)?(?:\\+[0-9A-Za-z.-]+)?$/u;\n\ntype ParseToml = (text: string) => unknown;\ntype FirstPartyPackages = ReadonlySet<string> | readonly string[];\nconst isRecord = (value: unknown): value is Record<string, unknown> =>\n  typeof value === \"object\" && value !== null && !Array.isArray(value);\nconst fail: (message: string) => never = (message) => {\n  throw new Error(message);\n};\nconst ownPackage = (name: string) => name.startsWith(\"@stll/\");\nconst exactPackage = (name: string) =>\n  name.length <= 214 && EXACT_PACKAGE.test(name);\nexport const isFirstPartyPackageName = (name: string): boolean =>\n  exactPackage(name) && ownPackage(name);\n\nexport const exactTimestamp = (value: string): boolean => {\n  const timestamp = Date.parse(value);\n  return (\n    EXACT_UTC_TIMESTAMP.test(value) &&\n    !Number.isNaN(timestamp) &&\n    new Date(timestamp).toISOString() === value\n  );\n};\n\nexport const readParsedExcludes = (\n  bunfig: string,\n  parseToml: ParseToml,\n): string[] => {\n  const parsed = parseToml(bunfig);\n  if (!isRecord(parsed) || !isRecord(parsed[\"install\"]))\n    return fail(\"bunfig.toml must contain an [install] table\");\n  const install = parsed[\"install\"];\n  if (\n    (\"registry\" in install && install[\"registry\"] !== NPM_REGISTRY) ||\n    (\"scopes\" in install &&\n      (!isRecord(install[\"scopes\"]) ||\n        Object.keys(install[\"scopes\"]).length > 0))\n  )\n    fail(\"bunfig.toml quarantine policy requires the canonical npm registry\");\n  if (install[\"minimumReleaseAge\"] !== REQUIRED_RELEASE_AGE_SECONDS)\n    fail(\n      `bunfig.toml must set minimumReleaseAge = ${REQUIRED_RELEASE_AGE_SECONDS}`,\n    );\n  if (!Array.isArray(install[\"minimumReleaseAgeExcludes\"]))\n    return fail(\n      \"bunfig.toml must declare minimumReleaseAgeExcludes as an array\",\n    );\n  const names: string[] = [];\n  for (const value of install[\"minimumReleaseAgeExcludes\"]) {\n    if (typeof value !== \"string\" || !exactPackage(value))\n      return fail(\n        \"bunfig.toml minimumReleaseAgeExcludes must contain only exact npm package names\",\n      );\n    names.push(value);\n  }\n  if (new Set(names).size !== names.length)\n    fail(\"bunfig.toml minimumReleaseAgeExcludes must not contain duplicates\");\n  return names;\n};\n\ntype Token = {\n  type: \"string\" | \"atom\" | \"punctuation\" | \"comment\" | \"newline\";\n  start: number;\n  end: number;\n  text: string;\n};\n// Tokenize before locating declarations: text in comments, multiline strings and\n// unrelated tables cannot masquerade as the install policy's source array.\nconst tokensOf = (text: string): Token[] => {\n  const tokens: Token[] = [];\n  let index = 0;\n  while (index < text.length) {\n    const start = index;\n    const character = text.charAt(index++);\n    if (character === \"\\n\") {\n      tokens.push({ type: \"newline\", start, end: index, text: character });\n      continue;\n    }\n    if (/\\s/u.test(character)) continue;\n    let type: Token[\"type\"];\n    if (character === \"#\") {\n      type = \"comment\";\n      while (index < text.length && text.charAt(index) !== \"\\n\") index++;\n    } else if (character === '\"' || character === \"'\") {\n      type = \"string\";\n      const triple = text.slice(start, start + 3) === character.repeat(3);\n      if (triple) index = start + 3;\n      while (index < text.length) {\n        const current = text.charAt(index++);\n        if (character === '\"' && current === \"\\\\\") {\n          index++;\n          continue;\n        }\n        if (current !== character) continue;\n        if (!triple) break;\n        if (text.slice(index - 1, index + 2) !== character.repeat(3)) continue;\n        index += 2;\n        while (text.charAt(index) === character) index++;\n        break;\n      }\n    } else if (\"[]=.,{}\".includes(character)) type = \"punctuation\";\n    else {\n      type = \"atom\";\n      while (\n        index < text.length &&\n        !/[\\s#[\\]=.,{}\"']/u.test(text.charAt(index))\n      )\n        index++;\n    }\n    tokens.push({\n      type,\n      start,\n      end: index,\n      text:\n        type === \"comment\"\n          ? text.slice(start, index).replace(/\\r$/u, \"\")\n          : text.slice(start, index),\n    });\n  }\n  return tokens;\n};\n\nconst stringValue = (token: Token, parseToml: ParseToml): string => {\n  const parsed = parseToml(`value = ${token.text}`);\n  if (!isRecord(parsed) || typeof parsed[\"value\"] !== \"string\")\n    return fail(\"bunfig.toml has an unsupported quarantine string\");\n  return parsed[\"value\"];\n};\nconst keyParts = (tokens: readonly Token[], parseToml: ParseToml): string[] =>\n  tokens\n    .filter(({ text }) => text !== \".\")\n    .map((token) =>\n      token.type === \"string\" ? stringValue(token, parseToml) : token.text,\n    );\n\ntype Entry = {\n  name: string;\n  token: Token;\n  comment: Token | undefined;\n  comma: Token | undefined;\n};\ntype SourceArray = {\n  open: Token;\n  close: Token;\n  entries: Entry[];\n  comments: Token[];\n};\nconst readSourceArray = (bunfig: string, parseToml: ParseToml): SourceArray => {\n  const names = readParsedExcludes(bunfig, parseToml);\n  let table: string[] = [];\n  let statement: Token[] = [];\n  let depth = 0;\n  let found: SourceArray | undefined;\n  const visitStatement = () => {\n    const meaningful = statement.filter(\n      ({ type }) => type !== \"comment\" && type !== \"newline\",\n    );\n    const first = meaningful.at(0);\n    if (first?.text === \"[\") {\n      const end = meaningful.at(-1);\n      if (end?.text === \"]\")\n        table = keyParts(meaningful.slice(1, -1), parseToml);\n      return;\n    }\n    const equals = meaningful.findIndex(({ text }) => text === \"=\");\n    if (equals < 0) return;\n    const key = [...table, ...keyParts(meaningful.slice(0, equals), parseToml)];\n    if (\n      key.join(\".\") !== \"install.minimumReleaseAgeExcludes\" ||\n      key.length !== 2\n    )\n      return;\n    const open = meaningful.at(equals + 1);\n    const close = meaningful.at(-1);\n    if (\n      open === undefined ||\n      close === undefined ||\n      open.text !== \"[\" ||\n      close.text !== \"]\" ||\n      found !== undefined\n    )\n      fail(\n        \"bunfig.toml must declare a single install minimumReleaseAgeExcludes array\",\n      );\n    const values = meaningful.slice(equals + 2, -1);\n    if (values.some(({ type, text }) => type !== \"string\" && text !== \",\"))\n      fail(\"bunfig.toml quarantine array must contain package strings\");\n    const strings = values.filter(({ type }) => type === \"string\");\n    const comments = statement.filter(({ type }) => type === \"comment\");\n    const entries = strings.map((token, index) => {\n      const next = strings.at(index + 1)?.start ?? Number.POSITIVE_INFINITY;\n      const comment = comments.find(\n        (candidate) =>\n          candidate.start >= token.end &&\n          candidate.start < next &&\n          !bunfig.slice(token.end, candidate.start).includes(\"\\n\"),\n      );\n      const following = values.find(\n        (candidate) => candidate.start >= token.end,\n      );\n      return {\n        name: stringValue(token, parseToml),\n        token,\n        comment,\n        comma: following?.text === \",\" ? following : undefined,\n      };\n    });\n    if (\n      entries.length !== names.length ||\n      entries.some(({ name }, index) => name !== names.at(index))\n    )\n      fail(\n        \"bunfig.toml quarantine source does not match its parsed install array\",\n      );\n    found = { open, close, entries, comments };\n  };\n  for (const token of tokensOf(bunfig)) {\n    if (token.type === \"newline\" && depth === 0) {\n      visitStatement();\n      statement = [];\n      continue;\n    }\n    statement.push(token);\n    if (token.type !== \"punctuation\") continue;\n    if (token.text === \"[\" || token.text === \"{\") depth++;\n    if (token.text === \"]\" || token.text === \"}\") depth--;\n  }\n  visitStatement();\n  if (found === undefined)\n    return fail(\n      \"bunfig.toml must declare an explicit [install] minimumReleaseAgeExcludes array\",\n    );\n  return found;\n};\n\ntype Annotation =\n  | { type: \"none\" }\n  | { type: \"invalid\" }\n  | { type: \"expires\" | \"excluded-since\"; timestamp: string };\nconst annotationOf = ({ comment }: Entry): Annotation => {\n  if (comment === undefined) return { type: \"none\" };\n  const match = /^#\\s*quarantine-(expires|excluded-since):\\s*(\\S+)\\s*$/u.exec(\n    comment.text,\n  );\n  const marker = match?.at(1);\n  const timestamp = match?.at(2);\n  if (\n    (marker === \"expires\" || marker === \"excluded-since\") &&\n    timestamp !== undefined\n  )\n    return { type: marker, timestamp };\n  return { type: \"invalid\" };\n};\n\nexport const readRegistryFirstPartyPackages = (\n  lockfile: string | undefined,\n): Set<string> => {\n  if (lockfile === undefined) return new Set();\n  const parsed = parseJsonc(lockfile);\n  if (!isRecord(parsed) || !isRecord(parsed[\"packages\"]))\n    return fail(\"bun.lock must contain a packages mapping\");\n  const names = new Set<string>();\n  for (const value of Object.values(parsed[\"packages\"])) {\n    if (!Array.isArray(value)) continue;\n    const identity: unknown = value.at(0);\n    if (typeof identity !== \"string\") continue;\n    const separator = identity.lastIndexOf(\"@\");\n    const name = identity.slice(0, separator);\n    if (\n      exactPackage(name) &&\n      ownPackage(name) &&\n      REGISTRY_VERSION.test(identity.slice(separator + 1))\n    )\n      names.add(name);\n  }\n  return names;\n};\n\nconst ownNames = (names: FirstPartyPackages): Set<string> => {\n  const result = new Set(names);\n  for (const name of result)\n    if (!exactPackage(name) || !ownPackage(name))\n      fail(`Expected an exact first-party npm package name: ${name}`);\n  return result;\n};\nconst validNow = (now: Date): number => {\n  if (!Number.isFinite(now.getTime()))\n    return fail(\"Quarantine policy requires a valid current date\");\n  return now.getTime();\n};\nexport type CheckResult = { errors: string[]; warnings: string[] };\ntype CheckOptions = {\n  bunfig: string;\n  lockfile: string | undefined;\n  parseToml: ParseToml;\n  npmrcPresent?: boolean;\n  now?: Date;\n  firstPartyPackages?: FirstPartyPackages;\n};\nexport const checkQuarantinePolicy = ({\n  bunfig,\n  lockfile,\n  parseToml,\n  npmrcPresent = false,\n  now = new Date(),\n  firstPartyPackages,\n}: CheckOptions): CheckResult => {\n  const errors: string[] = [];\n  const warnings: string[] = [];\n  try {\n    const nowMs = validNow(now);\n    const { entries } = readSourceArray(bunfig, parseToml);\n    if (npmrcPresent)\n      errors.push(\n        \"bunfig.toml quarantine policy does not allow a repository .npmrc\",\n      );\n    for (const entry of entries) {\n      const annotation = annotationOf(entry);\n      if (ownPackage(entry.name) && annotation.type === \"none\") continue;\n      if (annotation.type === \"none\" || annotation.type === \"invalid\") {\n        errors.push(\n          `bunfig.toml has an unannotated or malformed quarantine exclude: ${entry.name}`,\n        );\n        continue;\n      }\n      if (!exactTimestamp(annotation.timestamp)) {\n        errors.push(\n          `bunfig.toml quarantine exclude \"${entry.name}\" has an invalid UTC timestamp: ${annotation.timestamp}`,\n        );\n        continue;\n      }\n      const timestampMs = Date.parse(annotation.timestamp);\n      if (ownPackage(entry.name)) {\n        if (annotation.type !== \"excluded-since\")\n          errors.push(\n            `bunfig.toml first-party quarantine exclude \"${entry.name}\" must be permanent (quarantine-excluded-since: or no timestamp)`,\n          );\n        else if (timestampMs > nowMs)\n          errors.push(\n            `bunfig.toml first-party quarantine exclude \"${entry.name}\" has a future exclusion date`,\n          );\n        continue;\n      }\n      if (annotation.type !== \"expires\") {\n        errors.push(\n          `bunfig.toml third-party quarantine exclude \"${entry.name}\" must use quarantine-expires:`,\n        );\n        continue;\n      }\n      if (nowMs >= timestampMs + 24 * HOUR_MS)\n        errors.push(\n          `bunfig.toml temporary quarantine exclude \"${entry.name}\" expired at ${annotation.timestamp} and is still present`,\n        );\n      else if (nowMs >= timestampMs)\n        warnings.push(\n          `bunfig.toml temporary quarantine exclude \"${entry.name}\" expired at ${annotation.timestamp}; its removal PR should be merged`,\n        );\n      else if (nowMs >= timestampMs - 48 * HOUR_MS)\n        warnings.push(\n          `bunfig.toml temporary quarantine exclude \"${entry.name}\" expires at ${annotation.timestamp}; prepare its removal PR`,\n        );\n    }\n    const required = readRegistryFirstPartyPackages(lockfile);\n    if (firstPartyPackages !== undefined) {\n      for (const name of ownNames(firstPartyPackages)) required.add(name);\n    }\n    const declared = new Set(entries.map(({ name }) => name));\n    const missing = [...required].filter((name) => !declared.has(name)).sort();\n    if (missing.length > 0)\n      errors.push(\n        `bunfig.toml is missing registry-backed first-party quarantine excludes: ${missing.join(\", \")}`,\n      );\n  } catch (error) {\n    errors.push(error instanceof Error ? error.message : String(error));\n  }\n  return { errors, warnings };\n};\n\ntype PruneOptions = { bunfig: string; parseToml: ParseToml; now?: Date };\nexport const pruneExpiredExcludes = ({\n  bunfig,\n  parseToml,\n  now = new Date(),\n}: PruneOptions): { bunfig: string; pruned: string[] } => {\n  const nowMs = validNow(now);\n  const { entries, close } = readSourceArray(bunfig, parseToml);\n  const removals: { start: number; end: number }[] = [];\n  const pruned: string[] = [];\n  for (const entry of entries) {\n    if (ownPackage(entry.name)) continue;\n    const annotation = annotationOf(entry);\n    if (annotation.type !== \"expires\" || !exactTimestamp(annotation.timestamp))\n      return fail(\n        `bunfig.toml third-party quarantine exclude \"${entry.name}\" must have an exact UTC quarantine-expires: annotation`,\n      );\n    if (nowMs < Date.parse(annotation.timestamp)) continue;\n    const lineStart = bunfig.lastIndexOf(\"\\n\", entry.token.start - 1) + 1;\n    const nextNewline = bunfig.indexOf(\"\\n\", entry.token.end);\n    const lineEnd = nextNewline < 0 ? bunfig.length : nextNewline;\n    const commentInside =\n      entry.comment !== undefined && entry.comment.start < close.start;\n    const end = commentInside\n      ? (entry.comment?.end ?? entry.token.end)\n      : (entry.comma?.end ?? entry.token.end);\n    if (\n      bunfig.slice(lineStart, entry.token.start).trim() === \"\" &&\n      bunfig.slice(end, lineEnd).trim() === \"\"\n    )\n      removals.push({\n        start: lineStart,\n        end: nextNewline < 0 ? lineEnd : lineEnd + 1,\n      });\n    else removals.push({ start: entry.token.start, end });\n    if (entry.comment !== undefined && !commentInside)\n      removals.push({ start: entry.comment.start, end: entry.comment.end });\n    pruned.push(entry.name);\n  }\n  let result = bunfig;\n  for (const removal of removals.toReversed())\n    result = result.slice(0, removal.start) + result.slice(removal.end);\n  // Never return edited TOML without confirming the resulting source is valid.\n  readSourceArray(result, parseToml);\n  return { bunfig: result, pruned };\n};\n\ntype SynchronizeOptions = {\n  bunfig: string;\n  firstPartyPackages: FirstPartyPackages;\n  parseToml: ParseToml;\n  now?: Date;\n};\nexport const synchronizeFirstPartyExcludes = ({\n  bunfig,\n  firstPartyPackages,\n  parseToml,\n  now = new Date(),\n}: SynchronizeOptions): string => {\n  validNow(now);\n  const required = ownNames(firstPartyPackages);\n  const { open, close, entries, comments } = readSourceArray(bunfig, parseToml);\n  const attachedComments = new Set(\n    entries.flatMap(({ comment }) => (comment === undefined ? [] : [comment])),\n  );\n  const lines = comments\n    .filter((comment) => !attachedComments.has(comment))\n    .map(({ text }) => `  ${text}`);\n  const seen = new Set<string>();\n  for (const entry of entries) {\n    if (!ownPackage(entry.name)) {\n      const annotation = annotationOf(entry);\n      if (\n        annotation.type !== \"expires\" ||\n        !exactTimestamp(annotation.timestamp)\n      )\n        return fail(\n          `bunfig.toml third-party quarantine exclude \"${entry.name}\" must have an exact UTC quarantine-expires: annotation`,\n        );\n      lines.push(\n        `  ${entry.token.text},${entry.comment === undefined ? \"\" : ` ${entry.comment.text}`}`,\n      );\n      continue;\n    }\n    if (!required.has(entry.name)) continue;\n    seen.add(entry.name);\n    const annotation = annotationOf(entry);\n    const timestamp =\n      annotation.type === \"excluded-since\" &&\n      exactTimestamp(annotation.timestamp)\n        ? annotation.timestamp\n        : now.toISOString();\n    lines.push(\n      `  ${JSON.stringify(entry.name)}, # quarantine-excluded-since: ${timestamp}`,\n    );\n  }\n  for (const name of [...required]\n    .filter((requiredPackage) => !seen.has(requiredPackage))\n    .sort())\n    lines.push(\n      `  ${JSON.stringify(name)}, # quarantine-excluded-since: ${now.toISOString()}`,\n    );\n  const newline = bunfig.includes(\"\\r\\n\") ? \"\\r\\n\" : \"\\n\";\n  const trailingComment = entries.at(-1)?.comment;\n  const end =\n    trailingComment !== undefined && trailingComment.start > close.end\n      ? trailingComment.end\n      : close.end;\n  const result =\n    bunfig.slice(0, open.start) +\n    `[${newline}${lines.join(newline)}${lines.length === 0 ? \"\" : newline}]` +\n    bunfig.slice(end);\n  readSourceArray(result, parseToml);\n  return result;\n};\n","import { parse } from \"smol-toml\";\n\nimport {\n  REQUIRED_RELEASE_AGE_SECONDS,\n  checkQuarantinePolicy,\n  isFirstPartyPackageName,\n  pruneExpiredExcludes,\n  readRegistryFirstPartyPackages,\n  synchronizeFirstPartyExcludes,\n} from \"./quarantine-policy-core\";\n\nexport {\n  EXACT_UTC_TIMESTAMP,\n  NPM_REGISTRY,\n  REQUIRED_RELEASE_AGE_SECONDS,\n  exactTimestamp,\n} from \"./quarantine-policy-core\";\n\nconst record = (value: unknown): value is Record<string, unknown> =>\n  typeof value === \"object\" && value !== null && !Array.isArray(value);\n\n/** Derive exact registry identities before install, including catalog references. */\nexport const declaredFirstPartyPackages = (files: Record<string, string>) => {\n  const names = new Set<string>();\n  for (const [file, text] of Object.entries(files)) {\n    if (!/(?:^|\\/)package\\.json$/.test(file)) continue;\n    const manifest: unknown = JSON.parse(text);\n    if (!record(manifest)) throw new Error(`${file} must contain an object`);\n    for (const field of [\n      \"dependencies\",\n      \"devDependencies\",\n      \"optionalDependencies\",\n      \"peerDependencies\",\n    ]) {\n      const dependencies = manifest[field];\n      if (!record(dependencies)) continue;\n      for (const [name, specifier] of Object.entries(dependencies)) {\n        if (typeof specifier !== \"string\") continue;\n        if (\n          /^(?:workspace:|file:|link:|git(?:\\+|:)|https?:|github:|\\.\\.?\\/|\\/)/.test(\n            specifier,\n          )\n        )\n          continue;\n        if (specifier.startsWith(\"npm:\")) {\n          const alias = /^npm:(@[^/]+\\/[^@]+|[^@]+)@/.exec(specifier)?.at(1);\n          if (alias !== undefined && isFirstPartyPackageName(alias))\n            names.add(alias);\n          continue;\n        }\n        if (isFirstPartyPackageName(name)) names.add(name);\n      }\n    }\n  }\n  return names;\n};\n\ntype RepositoryQuarantineOptions = {\n  files: Record<string, string>;\n  now?: Date | undefined;\n  npmrcPresent?: boolean | undefined;\n};\n\nexport const checkRepositoryQuarantine = ({\n  files,\n  now,\n  npmrcPresent,\n}: RepositoryQuarantineOptions) =>\n  checkQuarantinePolicy({\n    bunfig: files[\"bunfig.toml\"] ?? \"\",\n    lockfile: files[\"bun.lock\"],\n    firstPartyPackages: declaredFirstPartyPackages(files),\n    parseToml: parse,\n    ...(now === undefined ? {} : { now }),\n    ...(npmrcPresent === undefined ? {} : { npmrcPresent }),\n  });\n\nexport const synchronizeRepositoryQuarantine = ({\n  files,\n  now,\n}: RepositoryQuarantineOptions) => {\n  const firstPartyPackages = new Set([\n    ...declaredFirstPartyPackages(files),\n    ...readRegistryFirstPartyPackages(files[\"bun.lock\"]),\n  ]);\n  return synchronizeFirstPartyExcludes({\n    bunfig:\n      files[\"bunfig.toml\"] ??\n      `[install]\\nminimumReleaseAge = ${REQUIRED_RELEASE_AGE_SECONDS}\\nminimumReleaseAgeExcludes = []\\n`,\n    firstPartyPackages,\n    parseToml: parse,\n    ...(now === undefined ? {} : { now }),\n  });\n};\n\nexport const pruneRepositoryQuarantine = ({\n  files,\n  now,\n}: RepositoryQuarantineOptions) =>\n  pruneExpiredExcludes({\n    bunfig: files[\"bunfig.toml\"] ?? \"\",\n    parseToml: parse,\n    ...(now === undefined ? {} : { now }),\n  });\n"],"mappings":";;;AAEA,MAAa,+BAA+B;AAC5C,MAAa,eAAe;AAC5B,MAAa,sBACX;AACF,MAAM,UAAU;AAChB,MAAM,gBAAgB;AACtB,MAAM,mBACJ;AAIF,MAAM,YAAY,UAChB,OAAO,UAAU,YAAY,UAAU,QAAQ,CAAC,MAAM,QAAQ,KAAK;AACrE,MAAM,QAAoC,YAAY;CACpD,MAAM,IAAI,MAAM,OAAO;AACzB;AACA,MAAM,cAAc,SAAiB,KAAK,WAAW,QAAQ;AAC7D,MAAM,gBAAgB,SACpB,KAAK,UAAU,OAAO,cAAc,KAAK,IAAI;AAC/C,MAAa,2BAA2B,SACtC,aAAa,IAAI,KAAK,WAAW,IAAI;AAEvC,MAAa,kBAAkB,UAA2B;CACxD,MAAM,YAAY,KAAK,MAAM,KAAK;CAClC,OACE,oBAAoB,KAAK,KAAK,KAC9B,CAAC,OAAO,MAAM,SAAS,KACvB,IAAI,KAAK,SAAS,CAAC,CAAC,YAAY,MAAM;AAE1C;AAEA,MAAa,sBACX,QACA,cACa;CACb,MAAM,SAAS,UAAU,MAAM;CAC/B,IAAI,CAAC,SAAS,MAAM,KAAK,CAAC,SAAS,OAAO,UAAU,GAClD,OAAO,KAAK,6CAA6C;CAC3D,MAAM,UAAU,OAAO;CACvB,IACG,cAAc,WAAW,QAAQ,gBAAA,gCACjC,YAAY,YACV,CAAC,SAAS,QAAQ,SAAS,KAC1B,OAAO,KAAK,QAAQ,SAAS,CAAC,CAAC,SAAS,IAE5C,KAAK,mEAAmE;CAC1E,IAAI,QAAQ,yBAAA,OACV,KACE,4CAA4C,8BAC9C;CACF,IAAI,CAAC,MAAM,QAAQ,QAAQ,4BAA4B,GACrD,OAAO,KACL,gEACF;CACF,MAAM,QAAkB,CAAC;CACzB,KAAK,MAAM,SAAS,QAAQ,8BAA8B;EACxD,IAAI,OAAO,UAAU,YAAY,CAAC,aAAa,KAAK,GAClD,OAAO,KACL,iFACF;EACF,MAAM,KAAK,KAAK;CAClB;CACA,IAAI,IAAI,IAAI,KAAK,CAAC,CAAC,SAAS,MAAM,QAChC,KAAK,mEAAmE;CAC1E,OAAO;AACT;AAUA,MAAM,YAAY,SAA0B;CAC1C,MAAM,SAAkB,CAAC;CACzB,IAAI,QAAQ;CACZ,OAAO,QAAQ,KAAK,QAAQ;EAC1B,MAAM,QAAQ;EACd,MAAM,YAAY,KAAK,OAAO,OAAO;EACrC,IAAI,cAAc,MAAM;GACtB,OAAO,KAAK;IAAE,MAAM;IAAW;IAAO,KAAK;IAAO,MAAM;GAAU,CAAC;GACnE;EACF;EACA,IAAI,MAAM,KAAK,SAAS,GAAG;EAC3B,IAAI;EACJ,IAAI,cAAc,KAAK;GACrB,OAAO;GACP,OAAO,QAAQ,KAAK,UAAU,KAAK,OAAO,KAAK,MAAM,MAAM;EAC7D,OAAO,IAAI,cAAc,QAAO,cAAc,KAAK;GACjD,OAAO;GACP,MAAM,SAAS,KAAK,MAAM,OAAO,QAAQ,CAAC,MAAM,UAAU,OAAO,CAAC;GAClE,IAAI,QAAQ,QAAQ,QAAQ;GAC5B,OAAO,QAAQ,KAAK,QAAQ;IAC1B,MAAM,UAAU,KAAK,OAAO,OAAO;IACnC,IAAI,cAAc,QAAO,YAAY,MAAM;KACzC;KACA;IACF;IACA,IAAI,YAAY,WAAW;IAC3B,IAAI,CAAC,QAAQ;IACb,IAAI,KAAK,MAAM,QAAQ,GAAG,QAAQ,CAAC,MAAM,UAAU,OAAO,CAAC,GAAG;IAC9D,SAAS;IACT,OAAO,KAAK,OAAO,KAAK,MAAM,WAAW;IACzC;GACF;EACF,OAAO,IAAI,UAAU,SAAS,SAAS,GAAG,OAAO;OAC5C;GACH,OAAO;GACP,OACE,QAAQ,KAAK,UACb,CAAC,mBAAmB,KAAK,KAAK,OAAO,KAAK,CAAC,GAE3C;EACJ;EACA,OAAO,KAAK;GACV;GACA;GACA,KAAK;GACL,MACE,SAAS,YACL,KAAK,MAAM,OAAO,KAAK,CAAC,CAAC,QAAQ,QAAQ,EAAE,IAC3C,KAAK,MAAM,OAAO,KAAK;EAC/B,CAAC;CACH;CACA,OAAO;AACT;AAEA,MAAM,eAAe,OAAc,cAAiC;CAClE,MAAM,SAAS,UAAU,WAAW,MAAM,MAAM;CAChD,IAAI,CAAC,SAAS,MAAM,KAAK,OAAO,OAAO,aAAa,UAClD,OAAO,KAAK,kDAAkD;CAChE,OAAO,OAAO;AAChB;AACA,MAAM,YAAY,QAA0B,cAC1C,OACG,QAAQ,EAAE,WAAW,SAAS,GAAG,CAAC,CAClC,KAAK,UACJ,MAAM,SAAS,WAAW,YAAY,OAAO,SAAS,IAAI,MAAM,IAClE;AAcJ,MAAM,mBAAmB,QAAgB,cAAsC;CAC7E,MAAM,QAAQ,mBAAmB,QAAQ,SAAS;CAClD,IAAI,QAAkB,CAAC;CACvB,IAAI,YAAqB,CAAC;CAC1B,IAAI,QAAQ;CACZ,IAAI;CACJ,MAAM,uBAAuB;EAC3B,MAAM,aAAa,UAAU,QAC1B,EAAE,WAAW,SAAS,aAAa,SAAS,SAC/C;EAEA,IADc,WAAW,GAAG,CACpB,CAAC,EAAE,SAAS,KAAK;GAEvB,IADY,WAAW,GAAG,EACpB,CAAC,EAAE,SAAS,KAChB,QAAQ,SAAS,WAAW,MAAM,GAAG,EAAE,GAAG,SAAS;GACrD;EACF;EACA,MAAM,SAAS,WAAW,WAAW,EAAE,WAAW,SAAS,GAAG;EAC9D,IAAI,SAAS,GAAG;EAChB,MAAM,MAAM,CAAC,GAAG,OAAO,GAAG,SAAS,WAAW,MAAM,GAAG,MAAM,GAAG,SAAS,CAAC;EAC1E,IACE,IAAI,KAAK,GAAG,MAAM,uCAClB,IAAI,WAAW,GAEf;EACF,MAAM,OAAO,WAAW,GAAG,SAAS,CAAC;EACrC,MAAM,QAAQ,WAAW,GAAG,EAAE;EAC9B,IACE,SAAS,KAAA,KACT,UAAU,KAAA,KACV,KAAK,SAAS,OACd,MAAM,SAAS,OACf,UAAU,KAAA,GAEV,KACE,2EACF;EACF,MAAM,SAAS,WAAW,MAAM,SAAS,GAAG,EAAE;EAC9C,IAAI,OAAO,MAAM,EAAE,MAAM,WAAW,SAAS,YAAY,SAAS,GAAG,GACnE,KAAK,2DAA2D;EAClE,MAAM,UAAU,OAAO,QAAQ,EAAE,WAAW,SAAS,QAAQ;EAC7D,MAAM,WAAW,UAAU,QAAQ,EAAE,WAAW,SAAS,SAAS;EAClE,MAAM,UAAU,QAAQ,KAAK,OAAO,UAAU;GAC5C,MAAM,OAAO,QAAQ,GAAG,QAAQ,CAAC,CAAC,EAAE,SAAS,OAAO;GACpD,MAAM,UAAU,SAAS,MACtB,cACC,UAAU,SAAS,MAAM,OACzB,UAAU,QAAQ,QAClB,CAAC,OAAO,MAAM,MAAM,KAAK,UAAU,KAAK,CAAC,CAAC,SAAS,IAAI,CAC3D;GACA,MAAM,YAAY,OAAO,MACtB,cAAc,UAAU,SAAS,MAAM,GAC1C;GACA,OAAO;IACL,MAAM,YAAY,OAAO,SAAS;IAClC;IACA;IACA,OAAO,WAAW,SAAS,MAAM,YAAY,KAAA;GAC/C;EACF,CAAC;EACD,IACE,QAAQ,WAAW,MAAM,UACzB,QAAQ,MAAM,EAAE,QAAQ,UAAU,SAAS,MAAM,GAAG,KAAK,CAAC,GAE1D,KACE,uEACF;EACF,QAAQ;GAAE;GAAM;GAAO;GAAS;EAAS;CAC3C;CACA,KAAK,MAAM,SAAS,SAAS,MAAM,GAAG;EACpC,IAAI,MAAM,SAAS,aAAa,UAAU,GAAG;GAC3C,eAAe;GACf,YAAY,CAAC;GACb;EACF;EACA,UAAU,KAAK,KAAK;EACpB,IAAI,MAAM,SAAS,eAAe;EAClC,IAAI,MAAM,SAAS,OAAO,MAAM,SAAS,KAAK;EAC9C,IAAI,MAAM,SAAS,OAAO,MAAM,SAAS,KAAK;CAChD;CACA,eAAe;CACf,IAAI,UAAU,KAAA,GACZ,OAAO,KACL,gFACF;CACF,OAAO;AACT;AAMA,MAAM,gBAAgB,EAAE,cAAiC;CACvD,IAAI,YAAY,KAAA,GAAW,OAAO,EAAE,MAAM,OAAO;CACjD,MAAM,QAAQ,yDAAyD,KACrE,QAAQ,IACV;CACA,MAAM,SAAS,OAAO,GAAG,CAAC;CAC1B,MAAM,YAAY,OAAO,GAAG,CAAC;CAC7B,KACG,WAAW,aAAa,WAAW,qBACpC,cAAc,KAAA,GAEd,OAAO;EAAE,MAAM;EAAQ;CAAU;CACnC,OAAO,EAAE,MAAM,UAAU;AAC3B;AAEA,MAAa,kCACX,aACgB;CAChB,IAAI,aAAa,KAAA,GAAW,uBAAO,IAAI,IAAI;CAC3C,MAAM,SAAS,WAAW,QAAQ;CAClC,IAAI,CAAC,SAAS,MAAM,KAAK,CAAC,SAAS,OAAO,WAAW,GACnD,OAAO,KAAK,0CAA0C;CACxD,MAAM,wBAAQ,IAAI,IAAY;CAC9B,KAAK,MAAM,SAAS,OAAO,OAAO,OAAO,WAAW,GAAG;EACrD,IAAI,CAAC,MAAM,QAAQ,KAAK,GAAG;EAC3B,MAAM,WAAoB,MAAM,GAAG,CAAC;EACpC,IAAI,OAAO,aAAa,UAAU;EAClC,MAAM,YAAY,SAAS,YAAY,GAAG;EAC1C,MAAM,OAAO,SAAS,MAAM,GAAG,SAAS;EACxC,IACE,aAAa,IAAI,KACjB,WAAW,IAAI,KACf,iBAAiB,KAAK,SAAS,MAAM,YAAY,CAAC,CAAC,GAEnD,MAAM,IAAI,IAAI;CAClB;CACA,OAAO;AACT;AAEA,MAAM,YAAY,UAA2C;CAC3D,MAAM,SAAS,IAAI,IAAI,KAAK;CAC5B,KAAK,MAAM,QAAQ,QACjB,IAAI,CAAC,aAAa,IAAI,KAAK,CAAC,WAAW,IAAI,GACzC,KAAK,mDAAmD,MAAM;CAClE,OAAO;AACT;AACA,MAAM,YAAY,QAAsB;CACtC,IAAI,CAAC,OAAO,SAAS,IAAI,QAAQ,CAAC,GAChC,OAAO,KAAK,iDAAiD;CAC/D,OAAO,IAAI,QAAQ;AACrB;AAUA,MAAa,yBAAyB,EACpC,QACA,UACA,WACA,eAAe,OACf,sBAAM,IAAI,KAAK,GACf,yBAC+B;CAC/B,MAAM,SAAmB,CAAC;CAC1B,MAAM,WAAqB,CAAC;CAC5B,IAAI;EACF,MAAM,QAAQ,SAAS,GAAG;EAC1B,MAAM,EAAE,YAAY,gBAAgB,QAAQ,SAAS;EACrD,IAAI,cACF,OAAO,KACL,kEACF;EACF,KAAK,MAAM,SAAS,SAAS;GAC3B,MAAM,aAAa,aAAa,KAAK;GACrC,IAAI,WAAW,MAAM,IAAI,KAAK,WAAW,SAAS,QAAQ;GAC1D,IAAI,WAAW,SAAS,UAAU,WAAW,SAAS,WAAW;IAC/D,OAAO,KACL,mEAAmE,MAAM,MAC3E;IACA;GACF;GACA,IAAI,CAAC,eAAe,WAAW,SAAS,GAAG;IACzC,OAAO,KACL,mCAAmC,MAAM,KAAK,kCAAkC,WAAW,WAC7F;IACA;GACF;GACA,MAAM,cAAc,KAAK,MAAM,WAAW,SAAS;GACnD,IAAI,WAAW,MAAM,IAAI,GAAG;IAC1B,IAAI,WAAW,SAAS,kBACtB,OAAO,KACL,+CAA+C,MAAM,KAAK,iEAC5D;SACG,IAAI,cAAc,OACrB,OAAO,KACL,+CAA+C,MAAM,KAAK,8BAC5D;IACF;GACF;GACA,IAAI,WAAW,SAAS,WAAW;IACjC,OAAO,KACL,+CAA+C,MAAM,KAAK,+BAC5D;IACA;GACF;GACA,IAAI,SAAS,cAAc,KAAK,SAC9B,OAAO,KACL,6CAA6C,MAAM,KAAK,eAAe,WAAW,UAAU,sBAC9F;QACG,IAAI,SAAS,aAChB,SAAS,KACP,6CAA6C,MAAM,KAAK,eAAe,WAAW,UAAU,kCAC9F;QACG,IAAI,SAAS,cAAc,KAAK,SACnC,SAAS,KACP,6CAA6C,MAAM,KAAK,eAAe,WAAW,UAAU,yBAC9F;EACJ;EACA,MAAM,WAAW,+BAA+B,QAAQ;EACxD,IAAI,uBAAuB,KAAA,GACzB,KAAK,MAAM,QAAQ,SAAS,kBAAkB,GAAG,SAAS,IAAI,IAAI;EAEpE,MAAM,WAAW,IAAI,IAAI,QAAQ,KAAK,EAAE,WAAW,IAAI,CAAC;EACxD,MAAM,UAAU,CAAC,GAAG,QAAQ,CAAC,CAAC,QAAQ,SAAS,CAAC,SAAS,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK;EACzE,IAAI,QAAQ,SAAS,GACnB,OAAO,KACL,2EAA2E,QAAQ,KAAK,IAAI,GAC9F;CACJ,SAAS,OAAO;EACd,OAAO,KAAK,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK,CAAC;CACpE;CACA,OAAO;EAAE;EAAQ;CAAS;AAC5B;AAGA,MAAa,wBAAwB,EACnC,QACA,WACA,sBAAM,IAAI,KAAK,QACyC;CACxD,MAAM,QAAQ,SAAS,GAAG;CAC1B,MAAM,EAAE,SAAS,UAAU,gBAAgB,QAAQ,SAAS;CAC5D,MAAM,WAA6C,CAAC;CACpD,MAAM,SAAmB,CAAC;CAC1B,KAAK,MAAM,SAAS,SAAS;EAC3B,IAAI,WAAW,MAAM,IAAI,GAAG;EAC5B,MAAM,aAAa,aAAa,KAAK;EACrC,IAAI,WAAW,SAAS,aAAa,CAAC,eAAe,WAAW,SAAS,GACvE,OAAO,KACL,+CAA+C,MAAM,KAAK,wDAC5D;EACF,IAAI,QAAQ,KAAK,MAAM,WAAW,SAAS,GAAG;EAC9C,MAAM,YAAY,OAAO,YAAY,MAAM,MAAM,MAAM,QAAQ,CAAC,IAAI;EACpE,MAAM,cAAc,OAAO,QAAQ,MAAM,MAAM,MAAM,GAAG;EACxD,MAAM,UAAU,cAAc,IAAI,OAAO,SAAS;EAClD,MAAM,gBACJ,MAAM,YAAY,KAAA,KAAa,MAAM,QAAQ,QAAQ,MAAM;EAC7D,MAAM,MAAM,gBACP,MAAM,SAAS,OAAO,MAAM,MAAM,MAClC,MAAM,OAAO,OAAO,MAAM,MAAM;EACrC,IACE,OAAO,MAAM,WAAW,MAAM,MAAM,KAAK,CAAC,CAAC,KAAK,MAAM,MACtD,OAAO,MAAM,KAAK,OAAO,CAAC,CAAC,KAAK,MAAM,IAEtC,SAAS,KAAK;GACZ,OAAO;GACP,KAAK,cAAc,IAAI,UAAU,UAAU;EAC7C,CAAC;OACE,SAAS,KAAK;GAAE,OAAO,MAAM,MAAM;GAAO;EAAI,CAAC;EACpD,IAAI,MAAM,YAAY,KAAA,KAAa,CAAC,eAClC,SAAS,KAAK;GAAE,OAAO,MAAM,QAAQ;GAAO,KAAK,MAAM,QAAQ;EAAI,CAAC;EACtE,OAAO,KAAK,MAAM,IAAI;CACxB;CACA,IAAI,SAAS;CACb,KAAK,MAAM,WAAW,SAAS,WAAW,GACxC,SAAS,OAAO,MAAM,GAAG,QAAQ,KAAK,IAAI,OAAO,MAAM,QAAQ,GAAG;CAEpE,gBAAgB,QAAQ,SAAS;CACjC,OAAO;EAAE,QAAQ;EAAQ;CAAO;AAClC;AAQA,MAAa,iCAAiC,EAC5C,QACA,oBACA,WACA,sBAAM,IAAI,KAAK,QACiB;CAChC,SAAS,GAAG;CACZ,MAAM,WAAW,SAAS,kBAAkB;CAC5C,MAAM,EAAE,MAAM,OAAO,SAAS,aAAa,gBAAgB,QAAQ,SAAS;CAC5E,MAAM,mBAAmB,IAAI,IAC3B,QAAQ,SAAS,EAAE,cAAe,YAAY,KAAA,IAAY,CAAC,IAAI,CAAC,OAAO,CAAE,CAC3E;CACA,MAAM,QAAQ,SACX,QAAQ,YAAY,CAAC,iBAAiB,IAAI,OAAO,CAAC,CAAC,CACnD,KAAK,EAAE,WAAW,KAAK,MAAM;CAChC,MAAM,uBAAO,IAAI,IAAY;CAC7B,KAAK,MAAM,SAAS,SAAS;EAC3B,IAAI,CAAC,WAAW,MAAM,IAAI,GAAG;GAC3B,MAAM,aAAa,aAAa,KAAK;GACrC,IACE,WAAW,SAAS,aACpB,CAAC,eAAe,WAAW,SAAS,GAEpC,OAAO,KACL,+CAA+C,MAAM,KAAK,wDAC5D;GACF,MAAM,KACJ,KAAK,MAAM,MAAM,KAAK,GAAG,MAAM,YAAY,KAAA,IAAY,KAAK,IAAI,MAAM,QAAQ,QAChF;GACA;EACF;EACA,IAAI,CAAC,SAAS,IAAI,MAAM,IAAI,GAAG;EAC/B,KAAK,IAAI,MAAM,IAAI;EACnB,MAAM,aAAa,aAAa,KAAK;EACrC,MAAM,YACJ,WAAW,SAAS,oBACpB,eAAe,WAAW,SAAS,IAC/B,WAAW,YACX,IAAI,YAAY;EACtB,MAAM,KACJ,KAAK,KAAK,UAAU,MAAM,IAAI,EAAE,iCAAiC,WACnE;CACF;CACA,KAAK,MAAM,QAAQ,CAAC,GAAG,QAAQ,CAAC,CAC7B,QAAQ,oBAAoB,CAAC,KAAK,IAAI,eAAe,CAAC,CAAC,CACvD,KAAK,GACN,MAAM,KACJ,KAAK,KAAK,UAAU,IAAI,EAAE,iCAAiC,IAAI,YAAY,GAC7E;CACF,MAAM,UAAU,OAAO,SAAS,MAAM,IAAI,SAAS;CACnD,MAAM,kBAAkB,QAAQ,GAAG,EAAE,CAAC,EAAE;CACxC,MAAM,MACJ,oBAAoB,KAAA,KAAa,gBAAgB,QAAQ,MAAM,MAC3D,gBAAgB,MAChB,MAAM;CACZ,MAAM,SACJ,OAAO,MAAM,GAAG,KAAK,KAAK,IAC1B,IAAI,UAAU,MAAM,KAAK,OAAO,IAAI,MAAM,WAAW,IAAI,KAAK,QAAQ,KACtE,OAAO,MAAM,GAAG;CAClB,gBAAgB,QAAQ,SAAS;CACjC,OAAO;AACT;;;ACneA,MAAM,UAAU,UACd,OAAO,UAAU,YAAY,UAAU,QAAQ,CAAC,MAAM,QAAQ,KAAK;;AAGrE,MAAa,8BAA8B,UAAkC;CAC3E,MAAM,wBAAQ,IAAI,IAAY;CAC9B,KAAK,MAAM,CAAC,MAAM,SAAS,OAAO,QAAQ,KAAK,GAAG;EAChD,IAAI,CAAC,yBAAyB,KAAK,IAAI,GAAG;EAC1C,MAAM,WAAoB,KAAK,MAAM,IAAI;EACzC,IAAI,CAAC,OAAO,QAAQ,GAAG,MAAM,IAAI,MAAM,GAAG,KAAK,wBAAwB;EACvE,KAAK,MAAM,SAAS;GAClB;GACA;GACA;GACA;EACF,GAAG;GACD,MAAM,eAAe,SAAS;GAC9B,IAAI,CAAC,OAAO,YAAY,GAAG;GAC3B,KAAK,MAAM,CAAC,MAAM,cAAc,OAAO,QAAQ,YAAY,GAAG;IAC5D,IAAI,OAAO,cAAc,UAAU;IACnC,IACE,qEAAqE,KACnE,SACF,GAEA;IACF,IAAI,UAAU,WAAW,MAAM,GAAG;KAChC,MAAM,QAAQ,8BAA8B,KAAK,SAAS,CAAC,EAAE,GAAG,CAAC;KACjE,IAAI,UAAU,KAAA,KAAa,wBAAwB,KAAK,GACtD,MAAM,IAAI,KAAK;KACjB;IACF;IACA,IAAI,wBAAwB,IAAI,GAAG,MAAM,IAAI,IAAI;GACnD;EACF;CACF;CACA,OAAO;AACT;AAQA,MAAa,6BAA6B,EACxC,OACA,KACA,mBAEA,sBAAsB;CACpB,QAAQ,MAAM,kBAAkB;CAChC,UAAU,MAAM;CAChB,oBAAoB,2BAA2B,KAAK;CACpD,WAAW;CACX,GAAI,QAAQ,KAAA,IAAY,CAAC,IAAI,EAAE,IAAI;CACnC,GAAI,iBAAiB,KAAA,IAAY,CAAC,IAAI,EAAE,aAAa;AACvD,CAAC;AAEH,MAAa,mCAAmC,EAC9C,OACA,UACiC;CACjC,MAAM,qCAAqB,IAAI,IAAI,CACjC,GAAG,2BAA2B,KAAK,GACnC,GAAG,+BAA+B,MAAM,WAAW,CACrD,CAAC;CACD,OAAO,8BAA8B;EACnC,QACE,MAAM,kBACN;EACF;EACA,WAAW;EACX,GAAI,QAAQ,KAAA,IAAY,CAAC,IAAI,EAAE,IAAI;CACrC,CAAC;AACH;AAEA,MAAa,6BAA6B,EACxC,OACA,UAEA,qBAAqB;CACnB,QAAQ,MAAM,kBAAkB;CAChC,WAAW;CACX,GAAI,QAAQ,KAAA,IAAY,CAAC,IAAI,EAAE,IAAI;AACrC,CAAC"}

package/dist/toolchain-changed.cjs

@@ -1,11 +1,12 @@
 const require_rolldown_runtime = require("./rolldown-runtime.cjs");
+const require_jsonc = require("./jsonc.cjs");
 const require_toolchain_inputs = require("./toolchain-inputs.cjs");
 const require_compiler_packages = require("./compiler-packages.cjs");
-let node_child_process = require("node:child_process");
 let node_path = require("node:path");
 node_path = require_rolldown_runtime.__toESM(node_path, 1);
-let semver = require("semver");
 let smol_toml = require("smol-toml");
+let node_child_process = require("node:child_process");
+let semver = require("semver");
 let node_util = require("node:util");
 let yaml = require("yaml");
 //#region src/toolchain-changed-locks.ts
@@ -58,62 +59,6 @@ const changedCompilerPatches = ({ value, stringsArePaths, compilerNames }) => {
 	}
 	return patches;
 };
-/** JSONC permits comments and trailing commas, never alterations inside strings. */
-const parseChangedJson = (text) => {
-	let clean = "";
-	let quote = false;
-	for (let index = 0; index < text.length; index++) {
-		const char = text[index];
-		if (quote) {
-			clean += char;
-			if (char === "\\") {
-				index++;
-				clean += text[index] ?? "";
-			} else if (char === "\"") quote = false;
-			continue;
-		}
-		if (char === "\"") {
-			quote = true;
-			clean += char;
-			continue;
-		}
-		if (char === "/" && text[index + 1] === "/") {
-			while (index < text.length && text[index] !== "\n") index++;
-			clean += "\n";
-			continue;
-		}
-		if (char === "/" && text[index + 1] === "*") {
-			index += 2;
-			while (index < text.length && !(text[index] === "*" && text[index + 1] === "/")) index++;
-			if (index >= text.length) throw new Error("Unterminated JSONC comment");
-			index++;
-			clean += " ";
-			continue;
-		}
-		clean += char;
-	}
-	let result = "";
-	quote = false;
-	for (let index = 0; index < clean.length; index++) {
-		const char = clean[index];
-		if (quote) {
-			result += char;
-			if (char === "\\") {
-				index++;
-				result += clean[index] ?? "";
-			} else if (char === "\"") quote = false;
-			continue;
-		}
-		if (char === "\"") quote = true;
-		if (char === ",") {
-			let next = index + 1;
-			while (/\s/.test(clean[next] ?? "") && next < clean.length) next++;
-			if (clean[next] === "}" || clean[next] === "]") continue;
-		}
-		result += char;
-	}
-	return JSON.parse(result);
-};
 const changedYarnSelectors = (location) => location.replace(/"/g, "").split(/,\s*/).map((selector) => selector.trim());
 const packageDescriptor = (descriptor) => {
 	const match = /^(@[^/]+\/[^@]+|[^@]+)@(.+)$/.exec(descriptor.replace(/^\//, ""));
@@ -287,7 +232,7 @@ const parseChangedLock = ({ file, text }) => {
 	const resolutions = [];
 	const importers = {};
 	if (file.endsWith("bun.lock")) {
-		const parsed = parseChangedJson(text);
+		const parsed = require_jsonc.parseJsonc(text);
 		if (!changedRecord(parsed) || !BUN_TEXT_LOCKFILE_VERSIONS.has(Number(parsed["lockfileVersion"])) || !changedRecord(parsed["packages"]) || !changedRecord(parsed["workspaces"])) throw new Error("Unsupported Bun lockfile shape");
 		for (const [directory, workspace] of Object.entries(parsed["workspaces"])) importers[directory || "."] = importerDependencies(workspace);
 		for (const [location, value] of Object.entries(parsed["packages"])) {
@@ -385,7 +330,7 @@ const parseChangedLock = ({ file, text }) => {
 			}
 		}
 	} else {
-		const parsed = parseChangedJson(text);
+		const parsed = require_jsonc.parseJsonc(text);
 		if (!changedRecord(parsed) || ![
 			1,
 			2,
@@ -711,7 +656,7 @@ const compilerInstallationNames = (snapshot) => {
 	for (const file of snapshot.entries.keys()) {
 		const basename = node_path.default.posix.basename(file);
 		if (basename === "package.json") {
-			const manifest = parseChangedJson(snapshotText({
+			const manifest = require_jsonc.parseJsonc(snapshotText({
 				snapshot,
 				file
 			}));
@@ -771,7 +716,7 @@ const effectiveCatalogSpecifier = ({ snapshot, file, dependency, specifier }) =>
 			const document = (0, yaml.parseDocument)(text);
 			if (document.errors.length > 0) throw new Error(`Invalid catalog YAML: ${owner}`);
 			value = document.toJS({ maxAliasCount: 100 });
-		} else value = parseChangedJson(text);
+		} else value = require_jsonc.parseJsonc(text);
 		if (!changedRecord(value)) continue;
 		const sources = [value];
 		if (changedRecord(value["workspaces"])) sources.push(value["workspaces"]);
@@ -808,7 +753,7 @@ const compilerPatches = (snapshot) => {
 			const document = (0, yaml.parseDocument)(text);
 			if (document.errors.length > 0) throw new Error(`Invalid compiler patch YAML: ${file}`);
 			value = document.toJS({ maxAliasCount: 100 });
-		} else value = parseChangedJson(text);
+		} else value = require_jsonc.parseJsonc(text);
 		const sources = [value];
 		if (name === "package.json" && changedRecord(value)) sources.push(value["pnpm"]);
 		for (const source of sources) for (const patch of changedCompilerPatches({
@@ -1000,7 +945,7 @@ const setupRuntimeFileVersion = ({ snapshot, file, runtime }) => {
 		file
 	}).trim();
 	if (runtime === "bun" && file.endsWith(".json")) {
-		const manifest = parseChangedJson(text);
+		const manifest = require_jsonc.parseJsonc(text);
 		const manager = changedRecord(manifest) ? manifest["packageManager"] : void 0;
 		if (typeof manager !== "string" || !manager.startsWith("bun@")) throw new Error("Bun selector manifest lacks an exact Bun packageManager");
 		return stableVersion(manager.slice(4));
@@ -1196,7 +1141,7 @@ const parseSnapshot = (snapshot) => {
 		if (compilerPatchPackageFile(file, compilerNames)) tools.typescript.add(`patch-package:${file}:${text}`);
 		for (const tool of selectedFiles.get(file) ?? []) tools[tool].add(`selector-file:${file}:${text}`);
 		if (name === "package.json") {
-			const manifest = parseChangedJson(text);
+			const manifest = require_jsonc.parseJsonc(text);
 			if (!changedRecord(manifest)) throw new Error(`Invalid tracked manifest: ${file}`);
 			if (typeof manifest["name"] === "string" && changedPackageTool(manifest["name"]) === "typescript") throw new Error(`Tracked compiler source has no immutable artifact identity: ${file}`);
 			manifests.set(file, manifest);
@@ -1232,7 +1177,7 @@ const parseSnapshot = (snapshot) => {
 		else if (otherRuntimeFiles.has(name)) tools.shared.add(`${file}:${text}`);
 		else if (name === ".node-version" || name === ".nvmrc") tools.node.add(`${file}:${stableVersion(text)}`);
 		else if (name === "toolchain.json") {
-			const policy = parseChangedJson(text);
+			const policy = require_jsonc.parseJsonc(text);
 			if (!changedRecord(policy)) throw new Error("Invalid shared toolchain policy");
 			tools.shared.add(`${file}:${stableJson(policy)}`);
 			if (typeof policy["bun"] === "string") addBun(policy["bun"]);