@stll/oxlint-config 2.1.3 → 3.1.0

package/README.md

@@ -1040,7 +1040,7 @@ Cargo/rustup commands in scripts, and Rust Docker/service images. An omitted
 `dtolnay/rust-toolchain` version selects a floating action default and fails.
 Cargo manifest `rust-version` remains an MSRV floor at or below the shared pin.
 
-Only `rustExceptions` in the consumer's root `stll-toolchain.json` can authorize
+`rustExceptions` in the consumer's root `stll-toolchain.json` can authorize
 another exact stable release. Each record contains exactly `pin`, `reason`,
 `tracking` (a GitHub issue URL) and `expires` (a `YYYY-MM-DD` date).
 Channels and `rust-version` rule opt-outs fail validation. A record expires on
@@ -1048,6 +1048,15 @@ its date and then follows the same expiry scope as quarantine excludes (see
 [Quarantine preset and expiry checks](#quarantine-preset-and-expiry-checks)).
 See the [root policy guide](../../README.md) for a complete declaration.
 
+Historical offline install probes can instead declare `rustInstallFixtures` with
+an exact tracked shell `path`, stable or dated-nightly `pin`, `reason` (including
+the removal condition), GitHub issue/pull-request `tracking` URL, and `expires`.
+Only `rustup toolchain install` without `--default` in that file is covered;
+compiler execution, environment selectors, workflows and Docker remain checked.
+Unused declarations fail, and expiry follows the same scope as Rust exceptions.
+The fixture owns its isolated Rust home and offline setup; this declaration is
+not a sandbox or a general permission to execute historical compilers.
+
 `stll-toolchain-check` requires tracked JavaScript and TypeScript files selected by type-aware lint to belong to declared TypeScript projects. See the [Node scripts project recipe](https://github.com/stella/tooling/blob/main/README.md) for scripts outside the library project. The check inventories Oxlint-selected files and expands compiler configurations; it does not run lint or type checking.
 
 The project-ownership guard models declared package-manager scripts, including

package/dist/toolchain-check-cli.cjs

@@ -18,7 +18,7 @@ try {
 		policy,
 		expiryScope: require_quarantine_policy.resolveExpiryScope(process.cwd()),
 		onWarning: ({ path, line, rule, message }) => process.stderr.write(`${path}:${line}: [${rule}] warning: ${message}\n`),
-		onDelegated: ({ path, line, tool, selector, ref }) => process.stdout.write(`${path}:${line}: [runtime-delegated] setup-${tool} ${selector} delegates its version to checkout ref ${ref}\n`)
+		onDelegated: ({ path, line, tool, selector, ref }) => process.stdout.write(tool === "action" ? `${path}:${line}: [runtime-delegated] local action ${selector} delegates source validation to checkout ref ${ref}\n` : `${path}:${line}: [runtime-delegated] setup-${tool} ${selector} delegates its version to checkout ref ${ref}\n`)
 	});
 	for (const diagnostic of diagnostics) process.stderr.write(`${diagnostic.path}:${diagnostic.line}: [${diagnostic.rule}] ${diagnostic.message}\n`);
 	if (diagnostics.length > 0) process.exitCode = 1;

package/dist/toolchain-check-cli.cjs.map

@@ -1 +1 @@
-{"version":3,"file":"toolchain-check-cli.cjs","names":["parseToolchainPolicy","readFileSync","checkToolchain","resolveExpiryScope"],"sources":["../src/toolchain-check-cli.ts"],"sourcesContent":["#!/usr/bin/env node\nimport { readFileSync } from \"node:fs\";\n\nimport { resolveExpiryScope } from \"./dated-entry-scope\";\nimport { checkToolchain } from \"./toolchain-guard\";\nimport { parseToolchainPolicy } from \"./toolchain-schema\";\n\ntry {\n  const args = process.argv.slice(2);\n  if (args.length === 1 && args[0] === \"--help\") {\n    process.stdout.write(\n      \"Usage: stll-toolchain-check (opt-outs: tracked stll-toolchain.json)\\n\",\n    );\n    process.exit(0);\n  }\n  if (args.length !== 0) throw new Error(`unexpected argument: ${args.at(0)}`);\n  const policy = parseToolchainPolicy(\n    JSON.parse(\n      readFileSync(new URL(\"../toolchain.json\", import.meta.url), \"utf8\"),\n    ),\n  );\n  const diagnostics = checkToolchain({\n    root: process.cwd(),\n    policy,\n    expiryScope: resolveExpiryScope(process.cwd()),\n    onWarning: ({ path, line, rule, message }) =>\n      process.stderr.write(`${path}:${line}: [${rule}] warning: ${message}\\n`),\n    onDelegated: ({ path, line, tool, selector, ref }) =>\n      process.stdout.write(\n        `${path}:${line}: [runtime-delegated] setup-${tool} ${selector} delegates its version to checkout ref ${ref}\\n`,\n      ),\n  });\n  for (const diagnostic of diagnostics)\n    process.stderr.write(\n      `${diagnostic.path}:${diagnostic.line}: [${diagnostic.rule}] ${diagnostic.message}\\n`,\n    );\n  if (diagnostics.length > 0) process.exitCode = 1;\n} catch (error) {\n  process.stderr.write(\n    `toolchain-check:1: ${error instanceof Error ? error.message : String(error)}\\n`,\n  );\n  process.exitCode = 1;\n}\n"],"mappings":";;;;;;;AAOA,IAAI;CACF,MAAM,OAAO,QAAQ,KAAK,MAAM,CAAC;CACjC,IAAI,KAAK,WAAW,KAAK,KAAK,OAAO,UAAU;EAC7C,QAAQ,OAAO,MACb,uEACF;EACA,QAAQ,KAAK,CAAC;CAChB;CACA,IAAI,KAAK,WAAW,GAAG,MAAM,IAAI,MAAM,wBAAwB,KAAK,GAAG,CAAC,GAAG;CAC3E,MAAM,SAASA,yBAAAA,qBACb,KAAK,OAAA,GACHC,QAAAA,aAAAA,CAAa,IAAI,IAAI,qBAAA,QAAA,KAAA,CAAA,CAAA,cAAA,UAAA,CAAA,CAAA,IAAoC,GAAG,MAAM,CACpE,CACF;CACA,MAAM,cAAcC,wBAAAA,eAAe;EACjC,MAAM,QAAQ,IAAI;EAClB;EACA,aAAaC,0BAAAA,mBAAmB,QAAQ,IAAI,CAAC;EAC7C,YAAY,EAAE,MAAM,MAAM,MAAM,cAC9B,QAAQ,OAAO,MAAM,GAAG,KAAK,GAAG,KAAK,KAAK,KAAK,aAAa,QAAQ,GAAG;EACzE,cAAc,EAAE,MAAM,MAAM,MAAM,UAAU,UAC1C,QAAQ,OAAO,MACb,GAAG,KAAK,GAAG,KAAK,8BAA8B,KAAK,GAAG,SAAS,yCAAyC,IAAI,GAC9G;CACJ,CAAC;CACD,KAAK,MAAM,cAAc,aACvB,QAAQ,OAAO,MACb,GAAG,WAAW,KAAK,GAAG,WAAW,KAAK,KAAK,WAAW,KAAK,IAAI,WAAW,QAAQ,GACpF;CACF,IAAI,YAAY,SAAS,GAAG,QAAQ,WAAW;AACjD,SAAS,OAAO;CACd,QAAQ,OAAO,MACb,sBAAsB,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK,EAAE,GAC/E;CACA,QAAQ,WAAW;AACrB"}
+{"version":3,"file":"toolchain-check-cli.cjs","names":["parseToolchainPolicy","readFileSync","checkToolchain","resolveExpiryScope"],"sources":["../src/toolchain-check-cli.ts"],"sourcesContent":["#!/usr/bin/env node\nimport { readFileSync } from \"node:fs\";\n\nimport { resolveExpiryScope } from \"./dated-entry-scope\";\nimport { checkToolchain } from \"./toolchain-guard\";\nimport { parseToolchainPolicy } from \"./toolchain-schema\";\n\ntry {\n  const args = process.argv.slice(2);\n  if (args.length === 1 && args[0] === \"--help\") {\n    process.stdout.write(\n      \"Usage: stll-toolchain-check (opt-outs: tracked stll-toolchain.json)\\n\",\n    );\n    process.exit(0);\n  }\n  if (args.length !== 0) throw new Error(`unexpected argument: ${args.at(0)}`);\n  const policy = parseToolchainPolicy(\n    JSON.parse(\n      readFileSync(new URL(\"../toolchain.json\", import.meta.url), \"utf8\"),\n    ),\n  );\n  const diagnostics = checkToolchain({\n    root: process.cwd(),\n    policy,\n    expiryScope: resolveExpiryScope(process.cwd()),\n    onWarning: ({ path, line, rule, message }) =>\n      process.stderr.write(`${path}:${line}: [${rule}] warning: ${message}\\n`),\n    onDelegated: ({ path, line, tool, selector, ref }) =>\n      process.stdout.write(\n        tool === \"action\"\n          ? `${path}:${line}: [runtime-delegated] local action ${selector} delegates source validation to checkout ref ${ref}\\n`\n          : `${path}:${line}: [runtime-delegated] setup-${tool} ${selector} delegates its version to checkout ref ${ref}\\n`,\n      ),\n  });\n  for (const diagnostic of diagnostics)\n    process.stderr.write(\n      `${diagnostic.path}:${diagnostic.line}: [${diagnostic.rule}] ${diagnostic.message}\\n`,\n    );\n  if (diagnostics.length > 0) process.exitCode = 1;\n} catch (error) {\n  process.stderr.write(\n    `toolchain-check:1: ${error instanceof Error ? error.message : String(error)}\\n`,\n  );\n  process.exitCode = 1;\n}\n"],"mappings":";;;;;;;AAOA,IAAI;CACF,MAAM,OAAO,QAAQ,KAAK,MAAM,CAAC;CACjC,IAAI,KAAK,WAAW,KAAK,KAAK,OAAO,UAAU;EAC7C,QAAQ,OAAO,MACb,uEACF;EACA,QAAQ,KAAK,CAAC;CAChB;CACA,IAAI,KAAK,WAAW,GAAG,MAAM,IAAI,MAAM,wBAAwB,KAAK,GAAG,CAAC,GAAG;CAC3E,MAAM,SAASA,yBAAAA,qBACb,KAAK,OAAA,GACHC,QAAAA,aAAAA,CAAa,IAAI,IAAI,qBAAA,QAAA,KAAA,CAAA,CAAA,cAAA,UAAA,CAAA,CAAA,IAAoC,GAAG,MAAM,CACpE,CACF;CACA,MAAM,cAAcC,wBAAAA,eAAe;EACjC,MAAM,QAAQ,IAAI;EAClB;EACA,aAAaC,0BAAAA,mBAAmB,QAAQ,IAAI,CAAC;EAC7C,YAAY,EAAE,MAAM,MAAM,MAAM,cAC9B,QAAQ,OAAO,MAAM,GAAG,KAAK,GAAG,KAAK,KAAK,KAAK,aAAa,QAAQ,GAAG;EACzE,cAAc,EAAE,MAAM,MAAM,MAAM,UAAU,UAC1C,QAAQ,OAAO,MACb,SAAS,WACL,GAAG,KAAK,GAAG,KAAK,qCAAqC,SAAS,+CAA+C,IAAI,MACjH,GAAG,KAAK,GAAG,KAAK,8BAA8B,KAAK,GAAG,SAAS,yCAAyC,IAAI,GAClH;CACJ,CAAC;CACD,KAAK,MAAM,cAAc,aACvB,QAAQ,OAAO,MACb,GAAG,WAAW,KAAK,GAAG,WAAW,KAAK,KAAK,WAAW,KAAK,IAAI,WAAW,QAAQ,GACpF;CACF,IAAI,YAAY,SAAS,GAAG,QAAQ,WAAW;AACjD,SAAS,OAAO;CACd,QAAQ,OAAO,MACb,sBAAsB,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK,EAAE,GAC/E;CACA,QAAQ,WAAW;AACrB"}

package/dist/toolchain-check-cli.mjs

@@ -17,7 +17,7 @@ try {
 		policy,
 		expiryScope: resolveExpiryScope(process.cwd()),
 		onWarning: ({ path, line, rule, message }) => process.stderr.write(`${path}:${line}: [${rule}] warning: ${message}\n`),
-		onDelegated: ({ path, line, tool, selector, ref }) => process.stdout.write(`${path}:${line}: [runtime-delegated] setup-${tool} ${selector} delegates its version to checkout ref ${ref}\n`)
+		onDelegated: ({ path, line, tool, selector, ref }) => process.stdout.write(tool === "action" ? `${path}:${line}: [runtime-delegated] local action ${selector} delegates source validation to checkout ref ${ref}\n` : `${path}:${line}: [runtime-delegated] setup-${tool} ${selector} delegates its version to checkout ref ${ref}\n`)
 	});
 	for (const diagnostic of diagnostics) process.stderr.write(`${diagnostic.path}:${diagnostic.line}: [${diagnostic.rule}] ${diagnostic.message}\n`);
 	if (diagnostics.length > 0) process.exitCode = 1;

package/dist/toolchain-check-cli.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"toolchain-check-cli.mjs","names":[],"sources":["../src/toolchain-check-cli.ts"],"sourcesContent":["#!/usr/bin/env node\nimport { readFileSync } from \"node:fs\";\n\nimport { resolveExpiryScope } from \"./dated-entry-scope\";\nimport { checkToolchain } from \"./toolchain-guard\";\nimport { parseToolchainPolicy } from \"./toolchain-schema\";\n\ntry {\n  const args = process.argv.slice(2);\n  if (args.length === 1 && args[0] === \"--help\") {\n    process.stdout.write(\n      \"Usage: stll-toolchain-check (opt-outs: tracked stll-toolchain.json)\\n\",\n    );\n    process.exit(0);\n  }\n  if (args.length !== 0) throw new Error(`unexpected argument: ${args.at(0)}`);\n  const policy = parseToolchainPolicy(\n    JSON.parse(\n      readFileSync(new URL(\"../toolchain.json\", import.meta.url), \"utf8\"),\n    ),\n  );\n  const diagnostics = checkToolchain({\n    root: process.cwd(),\n    policy,\n    expiryScope: resolveExpiryScope(process.cwd()),\n    onWarning: ({ path, line, rule, message }) =>\n      process.stderr.write(`${path}:${line}: [${rule}] warning: ${message}\\n`),\n    onDelegated: ({ path, line, tool, selector, ref }) =>\n      process.stdout.write(\n        `${path}:${line}: [runtime-delegated] setup-${tool} ${selector} delegates its version to checkout ref ${ref}\\n`,\n      ),\n  });\n  for (const diagnostic of diagnostics)\n    process.stderr.write(\n      `${diagnostic.path}:${diagnostic.line}: [${diagnostic.rule}] ${diagnostic.message}\\n`,\n    );\n  if (diagnostics.length > 0) process.exitCode = 1;\n} catch (error) {\n  process.stderr.write(\n    `toolchain-check:1: ${error instanceof Error ? error.message : String(error)}\\n`,\n  );\n  process.exitCode = 1;\n}\n"],"mappings":";;;;;;AAOA,IAAI;CACF,MAAM,OAAO,QAAQ,KAAK,MAAM,CAAC;CACjC,IAAI,KAAK,WAAW,KAAK,KAAK,OAAO,UAAU;EAC7C,QAAQ,OAAO,MACb,uEACF;EACA,QAAQ,KAAK,CAAC;CAChB;CACA,IAAI,KAAK,WAAW,GAAG,MAAM,IAAI,MAAM,wBAAwB,KAAK,GAAG,CAAC,GAAG;CAC3E,MAAM,SAAS,qBACb,KAAK,MACH,aAAa,IAAI,IAAI,qBAAqB,YAAY,GAAG,GAAG,MAAM,CACpE,CACF;CACA,MAAM,cAAc,eAAe;EACjC,MAAM,QAAQ,IAAI;EAClB;EACA,aAAa,mBAAmB,QAAQ,IAAI,CAAC;EAC7C,YAAY,EAAE,MAAM,MAAM,MAAM,cAC9B,QAAQ,OAAO,MAAM,GAAG,KAAK,GAAG,KAAK,KAAK,KAAK,aAAa,QAAQ,GAAG;EACzE,cAAc,EAAE,MAAM,MAAM,MAAM,UAAU,UAC1C,QAAQ,OAAO,MACb,GAAG,KAAK,GAAG,KAAK,8BAA8B,KAAK,GAAG,SAAS,yCAAyC,IAAI,GAC9G;CACJ,CAAC;CACD,KAAK,MAAM,cAAc,aACvB,QAAQ,OAAO,MACb,GAAG,WAAW,KAAK,GAAG,WAAW,KAAK,KAAK,WAAW,KAAK,IAAI,WAAW,QAAQ,GACpF;CACF,IAAI,YAAY,SAAS,GAAG,QAAQ,WAAW;AACjD,SAAS,OAAO;CACd,QAAQ,OAAO,MACb,sBAAsB,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK,EAAE,GAC/E;CACA,QAAQ,WAAW;AACrB"}
+{"version":3,"file":"toolchain-check-cli.mjs","names":[],"sources":["../src/toolchain-check-cli.ts"],"sourcesContent":["#!/usr/bin/env node\nimport { readFileSync } from \"node:fs\";\n\nimport { resolveExpiryScope } from \"./dated-entry-scope\";\nimport { checkToolchain } from \"./toolchain-guard\";\nimport { parseToolchainPolicy } from \"./toolchain-schema\";\n\ntry {\n  const args = process.argv.slice(2);\n  if (args.length === 1 && args[0] === \"--help\") {\n    process.stdout.write(\n      \"Usage: stll-toolchain-check (opt-outs: tracked stll-toolchain.json)\\n\",\n    );\n    process.exit(0);\n  }\n  if (args.length !== 0) throw new Error(`unexpected argument: ${args.at(0)}`);\n  const policy = parseToolchainPolicy(\n    JSON.parse(\n      readFileSync(new URL(\"../toolchain.json\", import.meta.url), \"utf8\"),\n    ),\n  );\n  const diagnostics = checkToolchain({\n    root: process.cwd(),\n    policy,\n    expiryScope: resolveExpiryScope(process.cwd()),\n    onWarning: ({ path, line, rule, message }) =>\n      process.stderr.write(`${path}:${line}: [${rule}] warning: ${message}\\n`),\n    onDelegated: ({ path, line, tool, selector, ref }) =>\n      process.stdout.write(\n        tool === \"action\"\n          ? `${path}:${line}: [runtime-delegated] local action ${selector} delegates source validation to checkout ref ${ref}\\n`\n          : `${path}:${line}: [runtime-delegated] setup-${tool} ${selector} delegates its version to checkout ref ${ref}\\n`,\n      ),\n  });\n  for (const diagnostic of diagnostics)\n    process.stderr.write(\n      `${diagnostic.path}:${diagnostic.line}: [${diagnostic.rule}] ${diagnostic.message}\\n`,\n    );\n  if (diagnostics.length > 0) process.exitCode = 1;\n} catch (error) {\n  process.stderr.write(\n    `toolchain-check:1: ${error instanceof Error ? error.message : String(error)}\\n`,\n  );\n  process.exitCode = 1;\n}\n"],"mappings":";;;;;;AAOA,IAAI;CACF,MAAM,OAAO,QAAQ,KAAK,MAAM,CAAC;CACjC,IAAI,KAAK,WAAW,KAAK,KAAK,OAAO,UAAU;EAC7C,QAAQ,OAAO,MACb,uEACF;EACA,QAAQ,KAAK,CAAC;CAChB;CACA,IAAI,KAAK,WAAW,GAAG,MAAM,IAAI,MAAM,wBAAwB,KAAK,GAAG,CAAC,GAAG;CAC3E,MAAM,SAAS,qBACb,KAAK,MACH,aAAa,IAAI,IAAI,qBAAqB,YAAY,GAAG,GAAG,MAAM,CACpE,CACF;CACA,MAAM,cAAc,eAAe;EACjC,MAAM,QAAQ,IAAI;EAClB;EACA,aAAa,mBAAmB,QAAQ,IAAI,CAAC;EAC7C,YAAY,EAAE,MAAM,MAAM,MAAM,cAC9B,QAAQ,OAAO,MAAM,GAAG,KAAK,GAAG,KAAK,KAAK,KAAK,aAAa,QAAQ,GAAG;EACzE,cAAc,EAAE,MAAM,MAAM,MAAM,UAAU,UAC1C,QAAQ,OAAO,MACb,SAAS,WACL,GAAG,KAAK,GAAG,KAAK,qCAAqC,SAAS,+CAA+C,IAAI,MACjH,GAAG,KAAK,GAAG,KAAK,8BAA8B,KAAK,GAAG,SAAS,yCAAyC,IAAI,GAClH;CACJ,CAAC;CACD,KAAK,MAAM,cAAc,aACvB,QAAQ,OAAO,MACb,GAAG,WAAW,KAAK,GAAG,WAAW,KAAK,KAAK,WAAW,KAAK,IAAI,WAAW,QAAQ,GACpF;CACF,IAAI,YAAY,SAAS,GAAG,QAAQ,WAAW;AACjD,SAAS,OAAO;CACd,QAAQ,OAAO,MACb,sBAAsB,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK,EAAE,GAC/E;CACA,QAAQ,WAAW;AACrB"}