@svp-labs/talos 0.0.0 → 0.1.0

package/dist/cli/check.js

@@ -0,0 +1,121 @@
+import { writeFile } from 'node:fs/promises';
+import { join } from 'node:path';
+import { parse } from './io.js';
+import { currentOs, tiersOf } from './run.js';
+import { loadConfig } from '../config/load.js';
+import { commitFindings, comparisonsFor, compactVerdict } from '../engine/gate.js';
+import { cachedRun, changesBetween, runAt } from '../engine/local.js';
+import { planRange } from '../engine/plan.js';
+import { textReport } from '../engine/report.js';
+import { createEngine } from '../engine/session.js';
+import { decide, exitCode } from '../engine/verdict.js';
+import { git, revParse } from '../repo/git.js';
+import { createTalosDir } from '../repo/talos-dir.js';
+import { toSarif } from '../sarif/sarif.js';
+import { ownBuild } from '../version/self.js';
+async function defaultBase(repo) {
+    for (const ref of ['origin/HEAD', 'origin/main', 'main']) {
+        try {
+            return await revParse(repo, ref);
+        }
+        catch {
+            continue;
+        }
+    }
+    throw new Error('no base to compare with: pass --base <ref>');
+}
+/**
+ * Every run judges with the change from the base to the working tree, as the gate's runs judge
+ * with the PR's range: base-side mutation and the lockfile checks read what the change touches.
+ */
+async function runAll(engine, repo, scope) {
+    const { plan, config, only, build } = scope;
+    const os = currentOs();
+    const changes = await changesBetween(repo, plan.base);
+    const results = [];
+    for (const spec of plan.runs.filter((r) => r.os === os)) {
+        const common = {
+            sha: spec.sha,
+            tiers: spec.tiers,
+            os,
+            config,
+            changes,
+            ...(only ? { only } : {}),
+        };
+        if (spec.sha === plan.head) {
+            const head = { ...common, root: repo.root, side: 'head', workingTree: true };
+            results.push(await runAt(engine, head));
+        }
+        else {
+            const side = spec.sha === plan.base ? 'base' : 'head';
+            results.push(await cachedRun(engine, repo, { ...common, side, ...(build ? { build } : {}) }));
+        }
+    }
+    return results;
+}
+/** `talos check`'s flags, read before anything runs; anything else is a usage error. */
+export function checkArgs(argv) {
+    return parse(argv, {
+        base: { type: 'string' },
+        commits: { type: 'boolean', default: false },
+        json: { type: 'boolean', default: false },
+        only: { type: 'string' },
+        tiers: { type: 'string' },
+        verbose: { type: 'boolean', default: false },
+    }).values;
+}
+/** The plan with each run cut down to `tiers`; a run left with none is dropped. */
+export function scopeToTiers(plan, tiers) {
+    const runs = plan.runs
+        .map((run) => ({ ...run, tiers: run.tiers.filter((tier) => tiers.includes(tier)) }))
+        .filter((run) => run.tiers.length > 0);
+    return { ...plan, runs };
+}
+/**
+ * `talos check`: what the gate would say, locally, before a push. The working tree is judged
+ * against the base branch; `--commits` judges every commit against its parent as a ready PR's
+ * gate does, and `--tiers commit` runs only the fast tier, as the pre-push hook does. `--json`
+ * prints the compact verdict an agent reads (`talos.verdict/1`); every finding, past the twenty it
+ * lists, is in `.talos/check/talos.sarif`.
+ */
+export const check = async (argv, io) => {
+    const values = checkArgs(argv);
+    const engine = createEngine(values.verbose);
+    const repo = git(engine.exec, io.cwd);
+    const config = await loadConfig(io.cwd);
+    const tipOfBase = values.base === undefined ? await defaultBase(repo) : await revParse(repo, values.base);
+    const planned = await planRange(repo, config, {
+        mode: values.commits ? 'ready' : 'draft',
+        tipOfBase,
+        head: 'HEAD',
+    });
+    const plan = values.tiers === undefined ? planned : scopeToTiers(planned, tiersOf(values.tiers));
+    const only = values.only?.split(',');
+    const build = io.env.TALOS_DEV === '1' ? await ownBuild() : undefined;
+    const results = await runAll(engine, repo, {
+        plan,
+        config,
+        ...(only ? { only } : {}),
+        ...(build ? { build } : {}),
+    });
+    const comparisons = (await comparisonsFor(repo, plan)).map(async (c) => c.sha === plan.head && c.against === plan.base
+        ? { ...c, changes: await changesBetween(repo, plan.base) }
+        : c);
+    const decided = decide(results, await Promise.all(comparisons), await commitFindings(repo, plan, config));
+    const reports = await createTalosDir(io.cwd, 'check');
+    await writeFile(join(reports, 'talos.sarif'), JSON.stringify(toSarif(decided.findings, engine.version)));
+    if (values.json) {
+        const compact = compactVerdict(decided, {
+            talos: engine.version,
+            mode: plan.mode,
+            base: plan.base,
+            head: plan.head,
+        });
+        io.out(`${JSON.stringify(compact, null, 2)}\n`);
+    }
+    else {
+        io.out(textReport(decided));
+    }
+    return exitCode(decided);
+};
+//# sourceMappingURL=check.js.map

package/dist/cli/check.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"check.js","sourceRoot":"","sources":["../../src/cli/check.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAC7C,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAgB,KAAK,EAAE,MAAM,SAAS,CAAC;AAC9C,OAAO,EAAE,SAAS,EAAE,OAAO,EAAE,MAAM,UAAU,CAAC;AAC9C,OAAO,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC;AAI/C,OAAO,EAAE,cAAc,EAAE,cAAc,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAC;AACnF,OAAO,EAAE,SAAS,EAAE,cAAc,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAC;AACtE,OAAO,EAAiB,SAAS,EAAE,MAAM,mBAAmB,CAAC;AAC7D,OAAO,EAAE,UAAU,EAAE,MAAM,qBAAqB,CAAC;AAEjD,OAAO,EAAE,YAAY,EAAE,MAAM,sBAAsB,CAAC;AACpD,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,sBAAsB,CAAC;AACxD,OAAO,EAAY,GAAG,EAAE,QAAQ,EAAE,MAAM,gBAAgB,CAAC;AACzD,OAAO,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AACtD,OAAO,EAAE,OAAO,EAAE,MAAM,mBAAmB,CAAC;AAC5C,OAAO,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAE9C,KAAK,UAAU,WAAW,CAAC,IAAS;IAClC,KAAK,MAAM,GAAG,IAAI,CAAC,aAAa,EAAE,aAAa,EAAE,MAAM,CAAC,EAAE,CAAC;QACzD,IAAI,CAAC;YACH,OAAO,MAAM,QAAQ,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;QACnC,CAAC;QAAC,MAAM,CAAC;YACP,SAAS;QACX,CAAC;IACH,CAAC;IACD,MAAM,IAAI,KAAK,CAAC,4CAA4C,CAAC,CAAC;AAChE,CAAC;AAUD;;;GAGG;AACH,KAAK,UAAU,MAAM,CAAC,MAAc,EAAE,IAAS,EAAE,KAAY;IAC3D,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,KAAK,CAAC;IAC5C,MAAM,EAAE,GAAG,SAAS,EAAE,CAAC;IACvB,MAAM,OAAO,GAAG,MAAM,cAAc,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC;IACtD,MAAM,OAAO,GAAgB,EAAE,CAAC;IAChC,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC;QACxD,MAAM,MAAM,GAAG;YACb,GAAG,EAAE,IAAI,CAAC,GAAG;YACb,KAAK,EAAE,IAAI,CAAC,KAAK;YACjB,EAAE;YACF,MAAM;YACN,OAAO;YACP,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAC1B,CAAC;QACF,IAAI,IAAI,CAAC,GAAG,KAAK,IAAI,CAAC,IAAI,EAAE,CAAC;YAC3B,MAAM,IAAI,GAAG,EAAE,GAAG,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,IAAI,EAAE,MAAe,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC;YACtF,OAAO,CAAC,IAAI,CAAC,MAAM,KAAK,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC,CAAC;QAC1C,CAAC;aAAM,CAAC;YACN,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,KAAK,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC;YACtD,OAAO,CAAC,IAAI,CAAC,MAAM,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,EAAE,GAAG,MAAM,EAAE,IAAI,EAAE,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC;QAChG,CAAC;IACH,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,wFAAwF;AACxF,MAAM,UAAU,SAAS,CAAC,IAAuB;IAC/C,OAAO,KAAK,CAAC,IAAI,EAAE;QACjB,IAAI,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;QACxB,OAAO,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,KAAK,EAAE;QAC5C,IAAI,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,KAAK,EAAE;QACzC,IAAI,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;QACxB,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;QACzB,OAAO,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,KAAK,EAAE;KAC7C,CAAC,CAAC,MAAM,CAAC;AACZ,CAAC;AAED,mFAAmF;AACnF,MAAM,UAAU,YAAY,CAAC,IAAc,EAAE,KAAsB;IACjE,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI;SACnB,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,GAAG,EAAE,KAAK,EAAE,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC,CAAC;SACnF,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IACzC,OAAO,EAAE,GAAG,IAAI,EAAE,IAAI,EAAE,CAAC;AAC3B,CAAC;AAED;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,KAAK,GAAY,KAAK,EAAE,IAAI,EAAE,EAAE,EAAE,EAAE;IAC/C,MAAM,MAAM,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC;IAC/B,MAAM,MAAM,GAAG,YAAY,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IAC5C,MAAM,IAAI,GAAG,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC;IACtC,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC;IACxC,MAAM,SAAS,GACb,MAAM,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,MAAM,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC;IAC1F,MAAM,OAAO,GAAG,MAAM,SAAS,CAAC,IAAI,EAAE,MAAM,EAAE;QAC5C,IAAI,EAAE,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO;QACxC,SAAS;QACT,IAAI,EAAE,MAAM;KACb,CAAC,CAAC;IACH,MAAM,IAAI,GAAG,MAAM,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,YAAY,CAAC,OAAO,EAAE,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;IACjG,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC;IACrC,MAAM,KAAK,GAAG,EAAE,CAAC,GAAG,CAAC,SAAS,KAAK,GAAG,CAAC,CAAC,CAAC,MAAM,QAAQ,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;IACtE,MAAM,OAAO,GAAG,MAAM,MAAM,CAAC,MAAM,EAAE,IAAI,EAAE;QACzC,IAAI;QACJ,MAAM;QACN,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACzB,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC5B,CAAC,CAAC;IACH,MAAM,WAAW,GAAG,CAAC,MAAM,cAAc,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,EAAE,CAAC,EAAE,EAAE,CACrE,CAAC,CAAC,GAAG,KAAK,IAAI,CAAC,IAAI,IAAI,CAAC,CAAC,OAAO,KAAK,IAAI,CAAC,IAAI;QAC5C,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,OAAO,EAAE,MAAM,cAAc,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC,EAAE;QAC1D,CAAC,CAAC,CAAC,CACN,CAAC;IACF,MAAM,OAAO,GAAG,MAAM,CACpB,OAAO,EACP,MAAM,OAAO,CAAC,GAAG,CAAC,WAAW,CAAC,EAC9B,MAAM,cAAc,CAAC,IAAI,EAAE,IAAI,EAAE,MAAM,CAAC,CACzC,CAAC;IACF,MAAM,OAAO,GAAG,MAAM,cAAc,CAAC,EAAE,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;IACtD,MAAM,SAAS,CACb,IAAI,CAAC,OAAO,EAAE,aAAa,CAAC,EAC5B,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,OAAO,CAAC,QAAQ,EAAE,MAAM,CAAC,OAAO,CAAC,CAAC,CAC1D,CAAC;IACF,IAAI,MAAM,CAAC,IAAI,EAAE,CAAC;QAChB,MAAM,OAAO,GAAG,cAAc,CAAC,OAAO,EAAE;YACtC,KAAK,EAAE,MAAM,CAAC,OAAO;YACrB,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,IAAI,EAAE,IAAI,CAAC,IAAI;SAChB,CAAC,CAAC;QACH,EAAE,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC;IAClD,CAAC;SAAM,CAAC;QACN,EAAE,CAAC,GAAG,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,CAAC;IAC9B,CAAC;IACD,OAAO,QAAQ,CAAC,OAAO,CAAC,CAAC;AAC3B,CAAC,CAAC"}

package/dist/cli/configs.js

@@ -0,0 +1,65 @@
+import { access, mkdir, readFile, writeFile } from 'node:fs/promises';
+import { dirname, join } from 'node:path';
+import { parse } from './io.js';
+import { loadConfig } from '../config/load.js';
+import { renderConfigs } from '../configs/files.js';
+import { PACKS } from '../core/registry.js';
+import { exec as realExec } from '../exec/exec.js';
+import { capped } from '../govern/output.js';
+import { repoFacts } from '../repo/facts.js';
+import { git, trackedFiles } from '../repo/git.js';
+import { ownVersion } from '../version/self.js';
+async function current(path) {
+    return readFile(path, 'utf8').catch(() => undefined);
+}
+async function present(path) {
+    return access(path).then(() => true, () => false);
+}
+async function put(path, content) {
+    await mkdir(dirname(path), { recursive: true });
+    await writeFile(path, content);
+}
+/**
+ * Writes every generated file that applies to the repository at `root` and creates each missing
+ * extension file; it never touches an extension file that exists.
+ */
+export async function writeConfigs(root, run, packs, version) {
+    const config = await loadConfig(root);
+    const facts = repoFacts(await trackedFiles(git(run, root)), config.exclude);
+    const ctx = { facts, config, side: 'alone', tiers: ['commit', 'head'] };
+    const written = [];
+    const created = [];
+    for (const file of renderConfigs(packs, ctx, version)) {
+        const path = join(root, file.path);
+        if ((await current(path)) !== file.content) {
+            await put(path, file.content);
+            written.push(file.path);
+        }
+        const extension = file.extension;
+        if (extension !== undefined && !(await present(join(root, extension.path)))) {
+            await put(join(root, extension.path), extension.content);
+            created.push(extension.path);
+        }
+    }
+    return { written, created };
+}
+function text(result) {
+    const lines = [
+        ...result.written.map((path) => `wrote   ${path}`),
+        ...result.created.map((path) => `created ${path}`),
+    ];
+    return lines.length === 0 ? 'every generated config is up to date\n' : `${lines.join('\n')}\n`;
+}
+/**
+ * `talos configs`: writes the generated tool configs as this Talos renders them, and creates the
+ * extension files a project is missing. `--json` lists the paths, capped.
+ */
+export const configs = async (argv, io) => {
+    const { values } = parse(argv, { json: { type: 'boolean', default: false } });
+    const result = await writeConfigs(io.cwd, realExec, PACKS, ownVersion());
+    io.out(values.json
+        ? `${JSON.stringify({ written: capped(result.written), created: capped(result.created) })}\n`
+        : text(result));
+    return 0;
+};
+//# sourceMappingURL=configs.js.map

package/dist/cli/configs.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"configs.js","sourceRoot":"","sources":["../../src/cli/configs.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AACtE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAC1C,OAAO,EAAgB,KAAK,EAAE,MAAM,SAAS,CAAC;AAC9C,OAAO,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC;AAC/C,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AAGpD,OAAO,EAAE,KAAK,EAAE,MAAM,qBAAqB,CAAC;AAC5C,OAAO,EAAE,IAAI,IAAI,QAAQ,EAAa,MAAM,iBAAiB,CAAC;AAC9D,OAAO,EAAE,MAAM,EAAE,MAAM,qBAAqB,CAAC;AAC7C,OAAO,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAC7C,OAAO,EAAE,GAAG,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAC;AACnD,OAAO,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AAShD,KAAK,UAAU,OAAO,CAAC,IAAY;IACjC,OAAO,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;AACvD,CAAC;AAED,KAAK,UAAU,OAAO,CAAC,IAAY;IACjC,OAAO,MAAM,CAAC,IAAI,CAAC,CAAC,IAAI,CACtB,GAAG,EAAE,CAAC,IAAI,EACV,GAAG,EAAE,CAAC,KAAK,CACZ,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,GAAG,CAAC,IAAY,EAAE,OAAe;IAC9C,MAAM,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAChD,MAAM,SAAS,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;AACjC,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,YAAY,CAChC,IAAY,EACZ,GAAS,EACT,KAAsB,EACtB,OAAe;IAEf,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,IAAI,CAAC,CAAC;IACtC,MAAM,KAAK,GAAG,SAAS,CAAC,MAAM,YAAY,CAAC,GAAG,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC,EAAE,MAAM,CAAC,OAAO,CAAC,CAAC;IAC5E,MAAM,GAAG,GAAiB,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,QAAQ,EAAE,MAAM,CAAC,EAAE,CAAC;IACtF,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,KAAK,MAAM,IAAI,IAAI,aAAa,CAAC,KAAK,EAAE,GAAG,EAAE,OAAO,CAAC,EAAE,CAAC;QACtD,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC;QACnC,IAAI,CAAC,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC,KAAK,IAAI,CAAC,OAAO,EAAE,CAAC;YAC3C,MAAM,GAAG,CAAC,IAAI,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC;YAC9B,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC1B,CAAC;QACD,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,CAAC;QACjC,IAAI,SAAS,KAAK,SAAS,IAAI,CAAC,CAAC,MAAM,OAAO,CAAC,IAAI,CAAC,IAAI,EAAE,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;YAC5E,MAAM,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE,SAAS,CAAC,IAAI,CAAC,EAAE,SAAS,CAAC,OAAO,CAAC,CAAC;YACzD,OAAO,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;QAC/B,CAAC;IACH,CAAC;IACD,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC;AAC9B,CAAC;AAED,SAAS,IAAI,CAAC,MAAe;IAC3B,MAAM,KAAK,GAAG;QACZ,GAAG,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,WAAW,IAAI,EAAE,CAAC;QAClD,GAAG,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,WAAW,IAAI,EAAE,CAAC;KACnD,CAAC;IACF,OAAO,KAAK,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,wCAAwC,CAAC,CAAC,CAAC,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC;AACjG,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,MAAM,OAAO,GAAY,KAAK,EAAE,IAAI,EAAE,EAAE,EAAE,EAAE;IACjD,MAAM,EAAE,MAAM,EAAE,GAAG,KAAK,CAAC,IAAI,EAAE,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,CAAC,CAAC;IAC9E,MAAM,MAAM,GAAG,MAAM,YAAY,CAAC,EAAE,CAAC,GAAG,EAAE,QAAQ,EAAE,KAAK,EAAE,UAAU,EAAE,CAAC,CAAC;IACzE,EAAE,CAAC,GAAG,CACJ,MAAM,CAAC,IAAI;QACT,CAAC,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,EAAE,OAAO,EAAE,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,OAAO,EAAE,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC,IAAI;QAC7F,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CACjB,CAAC;IACF,OAAO,CAAC,CAAC;AACX,CAAC,CAAC"}

package/dist/cli/debt.js

@@ -0,0 +1,75 @@
+import { access, readFile, writeFile } from 'node:fs/promises';
+import { join } from 'node:path';
+import { parse } from './io.js';
+import { currentOs } from './run.js';
+import { engineErrors, parseRunResult } from '../core/result.js';
+import { runAt } from '../engine/local.js';
+import { createEngine } from '../engine/session.js';
+import { compactDebt, debtCheckIds, debtReport, debtText } from '../jobs/debt-report.js';
+import { git, inWorktree, revParse, worktreeDir } from '../repo/git.js';
+import { createTalosDir, talosPath } from '../repo/talos-dir.js';
+/** Where the default branch is, in order: what `origin` says, then the usual name. */
+const DEFAULT_TIPS = ['refs/remotes/origin/HEAD', 'refs/remotes/origin/main', 'refs/heads/main'];
+async function tipOf(repo, ref) {
+    if (ref !== undefined)
+        return revParse(repo, ref);
+    const listed = (await repo.run(['for-each-ref', '--format=%(refname)', ...DEFAULT_TIPS])).split('\n');
+    const found = DEFAULT_TIPS.find((tip) => listed.includes(tip));
+    if (found === undefined)
+        throw new Error('no default branch found: pass --ref <ref>');
+    return revParse(repo, found);
+}
+async function exists(path) {
+    return access(path).then(() => true, () => false);
+}
+/**
+ * The checks at a commit with nothing to compare against, in a worktree of their own under
+ * `.talos/`. A run without engine errors is kept, since a commit's findings don't change.
+ */
+async function aloneAt(engine, repo, sha) {
+    const os = currentOs();
+    const name = `${sha}-debt-${os}-${engine.version}.json`;
+    const cached = talosPath(repo.root, 'cache', name);
+    if (await exists(cached))
+        return parseRunResult(await readFile(cached, 'utf8'));
+    const directory = await worktreeDir(repo, `debt-${sha}`);
+    const result = await inWorktree(repo, { sha, directory }, () => runAt(engine, {
+        root: directory,
+        sha,
+        tiers: ['commit', 'head'],
+        os,
+        side: 'alone',
+        only: debtCheckIds(engine.packs),
+    }));
+    if (engineErrors(result).length === 0) {
+        await writeFile(join(await createTalosDir(repo.root, 'cache'), name), JSON.stringify(result));
+    }
+    return result;
+}
+/** `talos debt` with an engine of the caller's choosing (tests pass one with test packs). */
+export function debtWith(makeEngine) {
+    return async (argv, io) => {
+        const { values } = parse(argv, {
+            json: { type: 'boolean', default: false },
+            out: { type: 'string' },
+            ref: { type: 'string' },
+            verbose: { type: 'boolean', default: false },
+        });
+        const engine = makeEngine(values.verbose);
+        const repo = git(engine.exec, io.cwd);
+        const sha = await tipOf(repo, values.ref);
+        const report = debtReport(await aloneAt(engine, repo, sha), { now: new Date() });
+        if (values.out !== undefined) {
+            await writeFile(values.out, `${JSON.stringify(report, null, 2)}\n`);
+        }
+        io.out(values.json ? `${JSON.stringify(compactDebt(report), null, 2)}\n` : debtText(report));
+        return report.counts.faults > 0 ? 2 : 0;
+    };
+}
+/**
+ * `talos debt`: the findings on the default branch, with nothing compared. `--json` prints the
+ * counts by rule and file (`talos.debt/1`, lists capped at 20); `--out` writes every finding.
+ * Exits 0, or 2 when a check had an engine error and the list is incomplete.
+ */
+export const debt = debtWith(createEngine);
+//# sourceMappingURL=debt.js.map

package/dist/cli/debt.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"debt.js","sourceRoot":"","sources":["../../src/cli/debt.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAC/D,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAgB,KAAK,EAAE,MAAM,SAAS,CAAC;AAC9C,OAAO,EAAE,SAAS,EAAE,MAAM,UAAU,CAAC;AACrC,OAAO,EAAE,YAAY,EAAE,cAAc,EAAkB,MAAM,mBAAmB,CAAC;AACjF,OAAO,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAC;AAE3C,OAAO,EAAE,YAAY,EAAE,MAAM,sBAAsB,CAAC;AACpD,OAAO,EAAE,WAAW,EAAE,YAAY,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,wBAAwB,CAAC;AACzF,OAAO,EAAY,GAAG,EAAE,UAAU,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,gBAAgB,CAAC;AAClF,OAAO,EAAE,cAAc,EAAE,SAAS,EAAE,MAAM,sBAAsB,CAAC;AAEjE,sFAAsF;AACtF,MAAM,YAAY,GAAG,CAAC,0BAA0B,EAAE,0BAA0B,EAAE,iBAAiB,CAAC,CAAC;AAEjG,KAAK,UAAU,KAAK,CAAC,IAAS,EAAE,GAAuB;IACrD,IAAI,GAAG,KAAK,SAAS;QAAE,OAAO,QAAQ,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;IAClD,MAAM,MAAM,GAAG,CAAC,MAAM,IAAI,CAAC,GAAG,CAAC,CAAC,cAAc,EAAE,qBAAqB,EAAE,GAAG,YAAY,CAAC,CAAC,CAAC,CAAC,KAAK,CAC7F,IAAI,CACL,CAAC;IACF,MAAM,KAAK,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC;IAC/D,IAAI,KAAK,KAAK,SAAS;QAAE,MAAM,IAAI,KAAK,CAAC,2CAA2C,CAAC,CAAC;IACtF,OAAO,QAAQ,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;AAC/B,CAAC;AAED,KAAK,UAAU,MAAM,CAAC,IAAY;IAChC,OAAO,MAAM,CAAC,IAAI,CAAC,CAAC,IAAI,CACtB,GAAG,EAAE,CAAC,IAAI,EACV,GAAG,EAAE,CAAC,KAAK,CACZ,CAAC;AACJ,CAAC;AAED;;;GAGG;AACH,KAAK,UAAU,OAAO,CAAC,MAAc,EAAE,IAAS,EAAE,GAAW;IAC3D,MAAM,EAAE,GAAG,SAAS,EAAE,CAAC;IACvB,MAAM,IAAI,GAAG,GAAG,GAAG,SAAS,EAAE,IAAI,MAAM,CAAC,OAAO,OAAO,CAAC;IACxD,MAAM,MAAM,GAAG,SAAS,CAAC,IAAI,CAAC,IAAI,EAAE,OAAO,EAAE,IAAI,CAAC,CAAC;IACnD,IAAI,MAAM,MAAM,CAAC,MAAM,CAAC;QAAE,OAAO,cAAc,CAAC,MAAM,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;IAChF,MAAM,SAAS,GAAG,MAAM,WAAW,CAAC,IAAI,EAAE,QAAQ,GAAG,EAAE,CAAC,CAAC;IACzD,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,IAAI,EAAE,EAAE,GAAG,EAAE,SAAS,EAAE,EAAE,GAAG,EAAE,CAC7D,KAAK,CAAC,MAAM,EAAE;QACZ,IAAI,EAAE,SAAS;QACf,GAAG;QACH,KAAK,EAAE,CAAC,QAAQ,EAAE,MAAM,CAAC;QACzB,EAAE;QACF,IAAI,EAAE,OAAO;QACb,IAAI,EAAE,YAAY,CAAC,MAAM,CAAC,KAAK,CAAC;KACjC,CAAC,CACH,CAAC;IACF,IAAI,YAAY,CAAC,MAAM,CAAC,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACtC,MAAM,SAAS,CAAC,IAAI,CAAC,MAAM,cAAc,CAAC,IAAI,CAAC,IAAI,EAAE,OAAO,CAAC,EAAE,IAAI,CAAC,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC;IAChG,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,6FAA6F;AAC7F,MAAM,UAAU,QAAQ,CAAC,UAAwC;IAC/D,OAAO,KAAK,EAAE,IAAI,EAAE,EAAE,EAAE,EAAE;QACxB,MAAM,EAAE,MAAM,EAAE,GAAG,KAAK,CAAC,IAAI,EAAE;YAC7B,IAAI,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,KAAK,EAAE;YACzC,GAAG,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;YACvB,GAAG,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;YACvB,OAAO,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,KAAK,EAAE;SAC7C,CAAC,CAAC;QACH,MAAM,MAAM,GAAG,UAAU,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QAC1C,MAAM,IAAI,GAAG,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC;QACtC,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,IAAI,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC;QAC1C,MAAM,MAAM,GAAG,UAAU,CAAC,MAAM,OAAO,CAAC,MAAM,EAAE,IAAI,EAAE,GAAG,CAAC,EAAE,EAAE,GAAG,EAAE,IAAI,IAAI,EAAE,EAAE,CAAC,CAAC;QACjF,IAAI,MAAM,CAAC,GAAG,KAAK,SAAS,EAAE,CAAC;YAC7B,MAAM,SAAS,CAAC,MAAM,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC;QACtE,CAAC;QACD,EAAE,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,WAAW,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC;QAC7F,OAAO,MAAM,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAC1C,CAAC,CAAC;AACJ,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,MAAM,IAAI,GAAY,QAAQ,CAAC,YAAY,CAAC,CAAC"}

package/dist/cli/doctor.js

@@ -0,0 +1,38 @@
+import { parse } from './io.js';
+import { exec } from '../exec/exec.js';
+import { doctorReport } from '../status/doctor.js';
+import { ownVersion, requiredNode } from '../version/self.js';
+const MARK = {
+    ok: 'ok  ',
+    warn: 'warn',
+    fail: 'FAIL',
+    skip: 'skip',
+};
+function line(item) {
+    return `${MARK[item.status]}  ${item.id.padEnd(16)} ${item.detail}`;
+}
+/**
+ * `talos doctor [--json]`: whether this machine and repository are set up: Node and git, the
+ * GitHub CLI and a token, `talos.yml`, the pin (found exactly once), the running against the
+ * enforced version, and each component's editor tools. Exits 1 when anything failed.
+ */
+export const doctor = async (argv, io) => {
+    const { values } = parse(argv, { json: { type: 'boolean', default: false } });
+    const items = await doctorReport({
+        cwd: io.cwd,
+        env: io.env,
+        exec,
+        node: { version: process.versions.node, range: requiredNode() },
+        running: ownVersion(),
+        loadPacks: async () => (await import('../core/registry.js')).PACKS,
+    });
+    const ok = items.every((i) => i.status !== 'fail');
+    if (values.json) {
+        io.out(`${JSON.stringify({ schema: 'talos.doctor/1', ok, items })}\n`);
+    }
+    else {
+        io.out(`${items.map(line).join('\n')}\n`);
+    }
+    return ok ? 0 : 1;
+};
+//# sourceMappingURL=doctor.js.map

package/dist/cli/doctor.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"doctor.js","sourceRoot":"","sources":["../../src/cli/doctor.ts"],"names":[],"mappings":"AAAA,OAAO,EAAgB,KAAK,EAAE,MAAM,SAAS,CAAC;AAC9C,OAAO,EAAE,IAAI,EAAE,MAAM,iBAAiB,CAAC;AACvC,OAAO,EAAmB,YAAY,EAAE,MAAM,qBAAqB,CAAC;AACpE,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAE9D,MAAM,IAAI,GAAmD;IAC3D,EAAE,EAAE,MAAM;IACV,IAAI,EAAE,MAAM;IACZ,IAAI,EAAE,MAAM;IACZ,IAAI,EAAE,MAAM;CACb,CAAC;AAEF,SAAS,IAAI,CAAC,IAAgB;IAC5B,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,IAAI,CAAC,EAAE,CAAC,MAAM,CAAC,EAAE,CAAC,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;AACtE,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,MAAM,MAAM,GAAY,KAAK,EAAE,IAAI,EAAE,EAAE,EAAE,EAAE;IAChD,MAAM,EAAE,MAAM,EAAE,GAAG,KAAK,CAAC,IAAI,EAAE,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,CAAC,CAAC;IAC9E,MAAM,KAAK,GAAG,MAAM,YAAY,CAAC;QAC/B,GAAG,EAAE,EAAE,CAAC,GAAG;QACX,GAAG,EAAE,EAAE,CAAC,GAAG;QACX,IAAI;QACJ,IAAI,EAAE,EAAE,OAAO,EAAE,OAAO,CAAC,QAAQ,CAAC,IAAI,EAAE,KAAK,EAAE,YAAY,EAAE,EAAE;QAC/D,OAAO,EAAE,UAAU,EAAE;QACrB,SAAS,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,MAAM,MAAM,CAAC,qBAAqB,CAAC,CAAC,CAAC,KAAK;KACnE,CAAC,CAAC;IACH,MAAM,EAAE,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,MAAM,CAAC,CAAC;IACnD,IAAI,MAAM,CAAC,IAAI,EAAE,CAAC;QAChB,EAAE,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,EAAE,MAAM,EAAE,gBAAgB,EAAE,EAAE,EAAE,KAAK,EAAE,CAAC,IAAI,CAAC,CAAC;IACzE,CAAC;SAAM,CAAC;QACN,EAAE,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC5C,CAAC;IACD,OAAO,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AACpB,CAAC,CAAC"}

package/dist/cli/findings.js

@@ -0,0 +1,32 @@
+import { parse, required, UsageError } from './io.js';
+import { github, tokenFromEnvironment } from '../github/api.js';
+import { downloader } from '../github/artifacts.js';
+import { identities } from '../github/identities.js';
+import { isRepoName } from '../github/remote.js';
+import { prFindings } from '../status/findings.js';
+/**
+ * `talos findings --repo owner/name --pr <n> [--json]`: the latest gate verdict for a PR's head,
+ * as the gate left it (`talos.verdict/1`), so an event can carry it without anyone reading logs.
+ * Its answer is JSON with or without `--json`. Exits 1 when the verdict is red; `green`,
+ * `engine-error` and `unknown` exit 0, since each is an answer.
+ */
+export const findings = async (argv, io) => {
+    const { values } = parse(argv, {
+        repo: { type: 'string' },
+        pr: { type: 'string' },
+        json: { type: 'boolean', default: true },
+    });
+    const repo = required(values.repo, 'repo');
+    if (!isRepoName(repo))
+        throw new UsageError(`--repo takes owner/name, not "${repo}"`);
+    const pr = Number(required(values.pr, 'pr'));
+    if (!Number.isInteger(pr) || pr < 1)
+        throw new UsageError('--pr takes a pull request number');
+    const token = await tokenFromEnvironment(io.env);
+    const gh = github(token);
+    const deps = { gh, download: downloader(token), talosRepo: identities(io.env).talosRepo };
+    const verdict = await prFindings(deps, repo, pr);
+    io.out(`${JSON.stringify(verdict)}\n`);
+    return verdict.status === 'red' ? 1 : 0;
+};
+//# sourceMappingURL=findings.js.map

package/dist/cli/findings.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"findings.js","sourceRoot":"","sources":["../../src/cli/findings.ts"],"names":[],"mappings":"AAAA,OAAO,EAAgB,KAAK,EAAE,QAAQ,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AACpE,OAAO,EAAE,MAAM,EAAE,oBAAoB,EAAE,MAAM,kBAAkB,CAAC;AAChE,OAAO,EAAE,UAAU,EAAE,MAAM,wBAAwB,CAAC;AACpD,OAAO,EAAE,UAAU,EAAE,MAAM,yBAAyB,CAAC;AACrD,OAAO,EAAE,UAAU,EAAE,MAAM,qBAAqB,CAAC;AACjD,OAAO,EAAE,UAAU,EAAE,MAAM,uBAAuB,CAAC;AAEnD;;;;;GAKG;AACH,MAAM,CAAC,MAAM,QAAQ,GAAY,KAAK,EAAE,IAAI,EAAE,EAAE,EAAE,EAAE;IAClD,MAAM,EAAE,MAAM,EAAE,GAAG,KAAK,CAAC,IAAI,EAAE;QAC7B,IAAI,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;QACxB,EAAE,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;QACtB,IAAI,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,IAAI,EAAE;KACzC,CAAC,CAAC;IACH,MAAM,IAAI,GAAG,QAAQ,CAAC,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IAC3C,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;QAAE,MAAM,IAAI,UAAU,CAAC,iCAAiC,IAAI,GAAG,CAAC,CAAC;IACtF,MAAM,EAAE,GAAG,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC,CAAC;IAC7C,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,EAAE,CAAC,IAAI,EAAE,GAAG,CAAC;QAAE,MAAM,IAAI,UAAU,CAAC,kCAAkC,CAAC,CAAC;IAC9F,MAAM,KAAK,GAAG,MAAM,oBAAoB,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC;IACjD,MAAM,EAAE,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;IACzB,MAAM,IAAI,GAAG,EAAE,EAAE,EAAE,QAAQ,EAAE,UAAU,CAAC,KAAK,CAAC,EAAE,SAAS,EAAE,UAAU,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,SAAS,EAAE,CAAC;IAC1F,MAAM,OAAO,GAAG,MAAM,UAAU,CAAC,IAAI,EAAE,IAAI,EAAE,EAAE,CAAC,CAAC;IACjD,EAAE,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;IACvC,OAAO,OAAO,CAAC,MAAM,KAAK,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AAC1C,CAAC,CAAC"}

package/dist/cli/govern.js

@@ -0,0 +1,97 @@
+import { parse, UsageError } from './io.js';
+import { exec } from '../exec/exec.js';
+import { github, tokenFromEnvironment } from '../github/api.js';
+import { identities } from '../github/identities.js';
+import { currentRepository, isRepoName } from '../github/remote.js';
+import { governJson, governRepository, loadGovernAssets, } from '../govern/govern.js';
+import { stepsText } from '../govern/output.js';
+import { GovernRefusal } from '../govern/plan.js';
+const USAGE = 'usage: talos govern [owner/name] [--agents on|off] [--channel canary|stable] ' +
+    '[--dry-run] [--json]';
+/** The flags every command of the owner's and of adoption takes. */
+export const RUN_FLAGS = {
+    'dry-run': { type: 'boolean', default: false },
+    json: { type: 'boolean', default: false },
+};
+/** `on`/`off` for a flag that may be left out. */
+export function onOff(value, flag) {
+    if (value === undefined)
+        return undefined;
+    if (value === 'on' || value === 'true')
+        return true;
+    if (value === 'off' || value === 'false')
+        return false;
+    throw new UsageError(`--${flag} takes on or off, not ${value}`);
+}
+function channelOf(value) {
+    if (value === undefined || value === 'canary' || value === 'stable')
+        return value;
+    throw new UsageError(`--channel takes canary or stable, not ${value}`);
+}
+/** The repository named on the command line, or the one the clone at `cwd` belongs to. */
+export async function targetRepository(named, io) {
+    if (named !== undefined) {
+        if (!isRepoName(named))
+            throw new UsageError(`a repository is owner/name, not ${named}`);
+        return named;
+    }
+    const found = await currentRepository(io.env, io.cwd, exec);
+    if (found === undefined)
+        throw new UsageError(`no repository here: ${USAGE}`);
+    return found;
+}
+/** Prints a report and turns it into the exit code: 1 when a step failed. */
+export function printReport(io, report, asJson) {
+    io.out(asJson ? `${JSON.stringify(report.json)}\n` : report.text);
+    return report.ok ? 0 : 1;
+}
+export function governOutput(report) {
+    const json = governJson(report);
+    const verb = report.dryRun ? 'would govern' : 'governed';
+    return {
+        json,
+        text: stepsText(`talos govern: ${verb} ${report.repo} at ${report.channel}`, report.results),
+        ok: json.ok === true,
+    };
+}
+/** `talos govern` with a GitHub client and assets of the caller's choosing (tests). */
+export function governWith(deps) {
+    return async (argv, io) => {
+        const { values, positionals } = parse(argv, {
+            agents: { type: 'string' },
+            channel: { type: 'string' },
+            ...RUN_FLAGS,
+        }, true);
+        if (positionals.length > 1)
+            throw new UsageError(USAGE);
+        const agents = onOff(values.agents, 'agents');
+        const channel = channelOf(values.channel);
+        const repo = await targetRepository(positionals[0], io);
+        const gh = github(await tokenFromEnvironment(io.env), deps);
+        try {
+            const report = await governRepository({
+                gh,
+                who: identities(io.env),
+                repo,
+                agents,
+                channel,
+                dryRun: values['dry-run'],
+                assets: await (deps.assets ?? loadGovernAssets)(),
+            });
+            return printReport(io, governOutput(report), values.json);
+        }
+        catch (error) {
+            if (!(error instanceof GovernRefusal))
+                throw error;
+            io.err(`talos govern: ${error.message}\n`);
+            return 1;
+        }
+    };
+}
+/**
+ * `talos govern`: the owner brings a repository under Talos's settings: the caller and
+ * CODEOWNERS on the default branch, the merge-queue and owner-review rulesets, merge settings,
+ * Dependabot alerts, the `talos` properties and the three Apps. Reruns change only what differs.
+ */
+export const govern = governWith({});
+//# sourceMappingURL=govern.js.map

package/dist/cli/govern.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"govern.js","sourceRoot":"","sources":["../../src/cli/govern.ts"],"names":[],"mappings":"AAAA,OAAO,EAAyB,KAAK,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AACnE,OAAO,EAAE,IAAI,EAAE,MAAM,iBAAiB,CAAC;AACvC,OAAO,EAAE,MAAM,EAAsB,oBAAoB,EAAE,MAAM,kBAAkB,CAAC;AACpF,OAAO,EAAE,UAAU,EAAE,MAAM,yBAAyB,CAAC;AACrD,OAAO,EAAE,iBAAiB,EAAE,UAAU,EAAE,MAAM,qBAAqB,CAAC;AACpE,OAAO,EAEL,UAAU,EACV,gBAAgB,EAEhB,gBAAgB,GACjB,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EAAE,SAAS,EAAE,MAAM,qBAAqB,CAAC;AAChD,OAAO,EAAE,aAAa,EAAE,MAAM,mBAAmB,CAAC;AAElD,MAAM,KAAK,GACT,+EAA+E;IAC/E,sBAAsB,CAAC;AAEzB,oEAAoE;AACpE,MAAM,CAAC,MAAM,SAAS,GAAG;IACvB,SAAS,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,KAAK,EAAE;IAC9C,IAAI,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,KAAK,EAAE;CACjC,CAAC;AAEX,kDAAkD;AAClD,MAAM,UAAU,KAAK,CAAC,KAAyB,EAAE,IAAY;IAC3D,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IAC1C,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,KAAK,MAAM;QAAE,OAAO,IAAI,CAAC;IACpD,IAAI,KAAK,KAAK,KAAK,IAAI,KAAK,KAAK,OAAO;QAAE,OAAO,KAAK,CAAC;IACvD,MAAM,IAAI,UAAU,CAAC,KAAK,IAAI,yBAAyB,KAAK,EAAE,CAAC,CAAC;AAClE,CAAC;AAED,SAAS,SAAS,CAAC,KAAyB;IAC1C,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IAClF,MAAM,IAAI,UAAU,CAAC,yCAAyC,KAAK,EAAE,CAAC,CAAC;AACzE,CAAC;AAED,0FAA0F;AAC1F,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,KAAyB,EAAE,EAAM;IACtE,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;QACxB,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC;YAAE,MAAM,IAAI,UAAU,CAAC,mCAAmC,KAAK,EAAE,CAAC,CAAC;QACzF,OAAO,KAAK,CAAC;IACf,CAAC;IACD,MAAM,KAAK,GAAG,MAAM,iBAAiB,CAAC,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;IAC5D,IAAI,KAAK,KAAK,SAAS;QAAE,MAAM,IAAI,UAAU,CAAC,uBAAuB,KAAK,EAAE,CAAC,CAAC;IAC9E,OAAO,KAAK,CAAC;AACf,CAAC;AAED,6EAA6E;AAC7E,MAAM,UAAU,WAAW,CACzB,EAAM,EACN,MAAoE,EACpE,MAAe;IAEf,EAAE,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IAClE,OAAO,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AAC3B,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,MAAoB;IAK/C,MAAM,IAAI,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC;IAChC,MAAM,IAAI,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,UAAU,CAAC;IACzD,OAAO;QACL,IAAI;QACJ,IAAI,EAAE,SAAS,CAAC,iBAAiB,IAAI,IAAI,MAAM,CAAC,IAAI,OAAO,MAAM,CAAC,OAAO,EAAE,EAAE,MAAM,CAAC,OAAO,CAAC;QAC5F,EAAE,EAAE,IAAI,CAAC,EAAE,KAAK,IAAI;KACrB,CAAC;AACJ,CAAC;AAID,uFAAuF;AACvF,MAAM,UAAU,UAAU,CAAC,IAAgB;IACzC,OAAO,KAAK,EAAE,IAAI,EAAE,EAAE,EAAE,EAAE;QACxB,MAAM,EAAE,MAAM,EAAE,WAAW,EAAE,GAAG,KAAK,CACnC,IAAI,EACJ;YACE,MAAM,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;YAC1B,OAAO,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;YAC3B,GAAG,SAAS;SACb,EACD,IAAI,CACL,CAAC;QACF,IAAI,WAAW,CAAC,MAAM,GAAG,CAAC;YAAE,MAAM,IAAI,UAAU,CAAC,KAAK,CAAC,CAAC;QACxD,MAAM,MAAM,GAAG,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;QAC9C,MAAM,OAAO,GAAG,SAAS,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QAC1C,MAAM,IAAI,GAAG,MAAM,gBAAgB,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QACxD,MAAM,EAAE,GAAG,MAAM,CAAC,MAAM,oBAAoB,CAAC,EAAE,CAAC,GAAG,CAAC,EAAE,IAAI,CAAC,CAAC;QAC5D,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,gBAAgB,CAAC;gBACpC,EAAE;gBACF,GAAG,EAAE,UAAU,CAAC,EAAE,CAAC,GAAG,CAAC;gBACvB,IAAI;gBACJ,MAAM;gBACN,OAAO;gBACP,MAAM,EAAE,MAAM,CAAC,SAAS,CAAC;gBACzB,MAAM,EAAE,MAAM,CAAC,IAAI,CAAC,MAAM,IAAI,gBAAgB,CAAC,EAAE;aAClD,CAAC,CAAC;YACH,OAAO,WAAW,CAAC,EAAE,EAAE,YAAY,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC;QAC5D,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,CAAC,KAAK,YAAY,aAAa,CAAC;gBAAE,MAAM,KAAK,CAAC;YACnD,EAAE,CAAC,GAAG,CAAC,iBAAiB,KAAK,CAAC,OAAO,IAAI,CAAC,CAAC;YAC3C,OAAO,CAAC,CAAC;QACX,CAAC;IACH,CAAC,CAAC;AACJ,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,MAAM,MAAM,GAAY,UAAU,CAAC,EAAE,CAAC,CAAC"}

package/dist/cli/io.js

@@ -0,0 +1,29 @@
+import { parseArgs } from 'node:util';
+export const processIo = {
+    cwd: process.cwd(),
+    env: process.env,
+    out: (text) => {
+        process.stdout.write(text);
+    },
+    err: (text) => {
+        process.stderr.write(text);
+    },
+};
+export class UsageError extends Error {
+    name = 'UsageError';
+}
+/** `node:util`'s parser, strict, with unknown flags reported as usage errors. */
+export function parse(argv, options, allowPositionals = false) {
+    try {
+        return parseArgs({ args: [...argv], options, allowPositionals, strict: true });
+    }
+    catch (error) {
+        throw new UsageError(error.message);
+    }
+}
+export function required(value, flag) {
+    if (value === undefined || value === '')
+        throw new UsageError(`--${flag} is required`);
+    return value;
+}
+//# sourceMappingURL=io.js.map

package/dist/cli/io.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"io.js","sourceRoot":"","sources":["../../src/cli/io.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAwB,MAAM,WAAW,CAAC;AAS5D,MAAM,CAAC,MAAM,SAAS,GAAO;IAC3B,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE;IAClB,GAAG,EAAE,OAAO,CAAC,GAAG;IAChB,GAAG,EAAE,CAAC,IAAI,EAAE,EAAE;QACZ,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAC7B,CAAC;IACD,GAAG,EAAE,CAAC,IAAI,EAAE,EAAE;QACZ,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAC7B,CAAC;CACF,CAAC;AAIF,MAAM,OAAO,UAAW,SAAQ,KAAK;IACjB,IAAI,GAAG,YAAY,CAAC;CACvC;AAID,iFAAiF;AACjF,MAAM,UAAU,KAAK,CACnB,IAAuB,EACvB,OAAU,EACV,gBAAgB,GAAG,KAAK;IAIxB,IAAI,CAAC;QACH,OAAO,SAAS,CAAC,EAAE,IAAI,EAAE,CAAC,GAAG,IAAI,CAAC,EAAE,OAAO,EAAE,gBAAgB,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;IACjF,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,IAAI,UAAU,CAAE,KAAe,CAAC,OAAO,CAAC,CAAC;IACjD,CAAC;AACH,CAAC;AAED,MAAM,UAAU,QAAQ,CAAC,KAAyB,EAAE,IAAY;IAC9D,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,EAAE;QAAE,MAAM,IAAI,UAAU,CAAC,KAAK,IAAI,cAAc,CAAC,CAAC;IACvF,OAAO,KAAK,CAAC;AACf,CAAC"}