@svp-labs/talos 0.0.0 → 0.1.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (874) hide show
  1. package/ENGINEERING.md +407 -0
  2. package/README.md +49 -0
  3. package/assets/claude/kit-block.md +58 -0
  4. package/assets/codeowners +2 -0
  5. package/assets/dependabot/update.yml +7 -0
  6. package/assets/hooks/pre-push +64 -0
  7. package/assets/issue-forms/bug.yml +44 -0
  8. package/assets/issue-forms/chore.yml +32 -0
  9. package/assets/issue-forms/config.yml +2 -0
  10. package/assets/issue-forms/dead-code.yml +32 -0
  11. package/assets/issue-forms/debt.yml +32 -0
  12. package/assets/issue-forms/epic.yml +34 -0
  13. package/assets/issue-forms/feature.yml +40 -0
  14. package/assets/issue-forms/refactor.yml +32 -0
  15. package/assets/issue-forms/spike.yml +32 -0
  16. package/assets/labels.yml +101 -0
  17. package/assets/patches/@stryker-mutator__vitest-runner@10.0.0.patch +14 -0
  18. package/assets/prompts/review.md +66 -0
  19. package/assets/pull_request_template.md +14 -0
  20. package/assets/rulesets/channel.json +28 -0
  21. package/assets/rulesets/channels-branch.json +8 -0
  22. package/assets/rulesets/merge-queue.json +34 -0
  23. package/assets/rulesets/owner-review.json +21 -0
  24. package/assets/rulesets/release-tags.json +8 -0
  25. package/assets/rulesets/self-test.json +21 -0
  26. package/assets/workflows/talos.yml +420 -0
  27. package/bootstrap/find-pin.sh +75 -0
  28. package/bootstrap/launch.ts +347 -0
  29. package/bootstrap/php.sh +55 -0
  30. package/dist/adopt/assets.js +40 -0
  31. package/dist/adopt/assets.js.map +1 -0
  32. package/dist/adopt/config.js +68 -0
  33. package/dist/adopt/config.js.map +1 -0
  34. package/dist/adopt/dependabot.js +176 -0
  35. package/dist/adopt/dependabot.js.map +1 -0
  36. package/dist/adopt/detect.js +148 -0
  37. package/dist/adopt/detect.js.map +1 -0
  38. package/dist/adopt/dev-deps.js +179 -0
  39. package/dist/adopt/dev-deps.js.map +1 -0
  40. package/dist/adopt/draft.js +43 -0
  41. package/dist/adopt/draft.js.map +1 -0
  42. package/dist/adopt/hooks.js +101 -0
  43. package/dist/adopt/hooks.js.map +1 -0
  44. package/dist/adopt/json-text.js +45 -0
  45. package/dist/adopt/json-text.js.map +1 -0
  46. package/dist/adopt/kit.js +68 -0
  47. package/dist/adopt/kit.js.map +1 -0
  48. package/dist/adopt/languages.js +127 -0
  49. package/dist/adopt/languages.js.map +1 -0
  50. package/dist/adopt/local.js +100 -0
  51. package/dist/adopt/local.js.map +1 -0
  52. package/dist/adopt/php.js +67 -0
  53. package/dist/adopt/php.js.map +1 -0
  54. package/dist/adopt/plan.js +114 -0
  55. package/dist/adopt/plan.js.map +1 -0
  56. package/dist/adopt/python.js +200 -0
  57. package/dist/adopt/python.js.map +1 -0
  58. package/dist/adopt/remote.js +110 -0
  59. package/dist/adopt/remote.js.map +1 -0
  60. package/dist/adopt/rust.js +250 -0
  61. package/dist/adopt/rust.js.map +1 -0
  62. package/dist/adopt/scaffold.js +76 -0
  63. package/dist/adopt/scaffold.js.map +1 -0
  64. package/dist/adopt/security.js +153 -0
  65. package/dist/adopt/security.js.map +1 -0
  66. package/dist/adopt/supply.js +153 -0
  67. package/dist/adopt/supply.js.map +1 -0
  68. package/dist/adopt/talos-yml.js +95 -0
  69. package/dist/adopt/talos-yml.js.map +1 -0
  70. package/dist/adopt/texts.js +121 -0
  71. package/dist/adopt/texts.js.map +1 -0
  72. package/dist/adopt/toml-text.js +180 -0
  73. package/dist/adopt/toml-text.js.map +1 -0
  74. package/dist/adopt/tool-pins.js +133 -0
  75. package/dist/adopt/tool-pins.js.map +1 -0
  76. package/dist/adopt/tsconfig.js +80 -0
  77. package/dist/adopt/tsconfig.js.map +1 -0
  78. package/dist/bin/talos.js +7 -0
  79. package/dist/bin/talos.js.map +1 -0
  80. package/dist/central/channels-file.js +82 -0
  81. package/dist/central/channels-file.js.map +1 -0
  82. package/dist/central/channels-job.js +112 -0
  83. package/dist/central/channels-job.js.map +1 -0
  84. package/dist/central/channels.js +204 -0
  85. package/dist/central/channels.js.map +1 -0
  86. package/dist/central/drift-job.js +132 -0
  87. package/dist/central/drift-job.js.map +1 -0
  88. package/dist/central/drift.js +195 -0
  89. package/dist/central/drift.js.map +1 -0
  90. package/dist/central/gate-runs.js +48 -0
  91. package/dist/central/gate-runs.js.map +1 -0
  92. package/dist/central/org-rulesets.js +129 -0
  93. package/dist/central/org-rulesets.js.map +1 -0
  94. package/dist/central/pick.js +67 -0
  95. package/dist/central/pick.js.map +1 -0
  96. package/dist/central/privacy.js +158 -0
  97. package/dist/central/privacy.js.map +1 -0
  98. package/dist/central/releases.js +130 -0
  99. package/dist/central/releases.js.map +1 -0
  100. package/dist/central/repos.js +36 -0
  101. package/dist/central/repos.js.map +1 -0
  102. package/dist/central/runtime-port.js +49 -0
  103. package/dist/central/runtime-port.js.map +1 -0
  104. package/dist/central/sweep-job.js +62 -0
  105. package/dist/central/sweep-job.js.map +1 -0
  106. package/dist/central/sweep.js +182 -0
  107. package/dist/central/sweep.js.map +1 -0
  108. package/dist/checks/common/code-files.js +59 -0
  109. package/dist/checks/common/code-files.js.map +1 -0
  110. package/dist/checks/common/custom.js +123 -0
  111. package/dist/checks/common/custom.js.map +1 -0
  112. package/dist/checks/common/duplication.js +96 -0
  113. package/dist/checks/common/duplication.js.map +1 -0
  114. package/dist/checks/common/index.js +14 -0
  115. package/dist/checks/common/index.js.map +1 -0
  116. package/dist/checks/common/jscpd-config.js +50 -0
  117. package/dist/checks/common/jscpd-config.js.map +1 -0
  118. package/dist/checks/common/jscpd-report.js +62 -0
  119. package/dist/checks/common/jscpd-report.js.map +1 -0
  120. package/dist/checks/common/suppression-rules.js +271 -0
  121. package/dist/checks/common/suppression-rules.js.map +1 -0
  122. package/dist/checks/common/suppression-scan.js +103 -0
  123. package/dist/checks/common/suppression-scan.js.map +1 -0
  124. package/dist/checks/common/suppressions.js +26 -0
  125. package/dist/checks/common/suppressions.js.map +1 -0
  126. package/dist/checks/common/texts.js +34 -0
  127. package/dist/checks/common/texts.js.map +1 -0
  128. package/dist/checks/docs/claude-md.js +71 -0
  129. package/dist/checks/docs/claude-md.js.map +1 -0
  130. package/dist/checks/docs/comments.js +31 -0
  131. package/dist/checks/docs/comments.js.map +1 -0
  132. package/dist/checks/docs/cspell.js +138 -0
  133. package/dist/checks/docs/cspell.js.map +1 -0
  134. package/dist/checks/docs/decisions.js +30 -0
  135. package/dist/checks/docs/decisions.js.map +1 -0
  136. package/dist/checks/docs/files.js +64 -0
  137. package/dist/checks/docs/files.js.map +1 -0
  138. package/dist/checks/docs/glossary.js +99 -0
  139. package/dist/checks/docs/glossary.js.map +1 -0
  140. package/dist/checks/docs/index.js +25 -0
  141. package/dist/checks/docs/index.js.map +1 -0
  142. package/dist/checks/docs/markdown.js +39 -0
  143. package/dist/checks/docs/markdown.js.map +1 -0
  144. package/dist/checks/docs/markdownlint.js +86 -0
  145. package/dist/checks/docs/markdownlint.js.map +1 -0
  146. package/dist/checks/docs/references.js +82 -0
  147. package/dist/checks/docs/references.js.map +1 -0
  148. package/dist/checks/docs/spelling.js +83 -0
  149. package/dist/checks/docs/spelling.js.map +1 -0
  150. package/dist/checks/infra/actionlint.js +95 -0
  151. package/dist/checks/infra/actionlint.js.map +1 -0
  152. package/dist/checks/infra/configs.js +52 -0
  153. package/dist/checks/infra/configs.js.map +1 -0
  154. package/dist/checks/infra/dockerfile.js +69 -0
  155. package/dist/checks/infra/dockerfile.js.map +1 -0
  156. package/dist/checks/infra/files.js +123 -0
  157. package/dist/checks/infra/files.js.map +1 -0
  158. package/dist/checks/infra/index.js +59 -0
  159. package/dist/checks/infra/index.js.map +1 -0
  160. package/dist/checks/infra/powershell.js +128 -0
  161. package/dist/checks/infra/powershell.js.map +1 -0
  162. package/dist/checks/infra/report.js +46 -0
  163. package/dist/checks/infra/report.js.map +1 -0
  164. package/dist/checks/infra/shell.js +64 -0
  165. package/dist/checks/infra/shell.js.map +1 -0
  166. package/dist/checks/infra/zizmor.js +93 -0
  167. package/dist/checks/infra/zizmor.js.map +1 -0
  168. package/dist/checks/process/commits.js +74 -0
  169. package/dist/checks/process/commits.js.map +1 -0
  170. package/dist/checks/runtime/assess.js +140 -0
  171. package/dist/checks/runtime/assess.js.map +1 -0
  172. package/dist/checks/runtime/check.js +67 -0
  173. package/dist/checks/runtime/check.js.map +1 -0
  174. package/dist/checks/runtime/declaration.js +33 -0
  175. package/dist/checks/runtime/declaration.js.map +1 -0
  176. package/dist/checks/runtime/declarations.js +38 -0
  177. package/dist/checks/runtime/declarations.js.map +1 -0
  178. package/dist/checks/runtime/dockerfile.js +228 -0
  179. package/dist/checks/runtime/dockerfile.js.map +1 -0
  180. package/dist/checks/runtime/feeds.js +120 -0
  181. package/dist/checks/runtime/feeds.js.map +1 -0
  182. package/dist/checks/runtime/fetchers.js +72 -0
  183. package/dist/checks/runtime/fetchers.js.map +1 -0
  184. package/dist/checks/runtime/index.js +7 -0
  185. package/dist/checks/runtime/index.js.map +1 -0
  186. package/dist/checks/runtime/runtimes.js +30 -0
  187. package/dist/checks/runtime/runtimes.js.map +1 -0
  188. package/dist/checks/runtime/tools-lock.js +40 -0
  189. package/dist/checks/runtime/tools-lock.js.map +1 -0
  190. package/dist/checks/runtime/version-files.js +95 -0
  191. package/dist/checks/runtime/version-files.js.map +1 -0
  192. package/dist/checks/runtime/versions.js +51 -0
  193. package/dist/checks/runtime/versions.js.map +1 -0
  194. package/dist/checks/security/dependencies.js +70 -0
  195. package/dist/checks/security/dependencies.js.map +1 -0
  196. package/dist/checks/security/gitleaks-config.js +114 -0
  197. package/dist/checks/security/gitleaks-config.js.map +1 -0
  198. package/dist/checks/security/gitleaks.js +93 -0
  199. package/dist/checks/security/gitleaks.js.map +1 -0
  200. package/dist/checks/security/index.js +12 -0
  201. package/dist/checks/security/index.js.map +1 -0
  202. package/dist/checks/security/licences.js +50 -0
  203. package/dist/checks/security/licences.js.map +1 -0
  204. package/dist/checks/security/osv-config.js +56 -0
  205. package/dist/checks/security/osv-config.js.map +1 -0
  206. package/dist/checks/security/osv.js +146 -0
  207. package/dist/checks/security/osv.js.map +1 -0
  208. package/dist/checks/security/secrets.js +35 -0
  209. package/dist/checks/security/secrets.js.map +1 -0
  210. package/dist/checks/security/semgrep.js +184 -0
  211. package/dist/checks/security/semgrep.js.map +1 -0
  212. package/dist/checks/security/strength.js +80 -0
  213. package/dist/checks/security/strength.js.map +1 -0
  214. package/dist/checks/supply/advisories.js +66 -0
  215. package/dist/checks/supply/advisories.js.map +1 -0
  216. package/dist/checks/supply/base.js +37 -0
  217. package/dist/checks/supply/base.js.map +1 -0
  218. package/dist/checks/supply/dates.js +26 -0
  219. package/dist/checks/supply/dates.js.map +1 -0
  220. package/dist/checks/supply/dependabot.js +87 -0
  221. package/dist/checks/supply/dependabot.js.map +1 -0
  222. package/dist/checks/supply/deps.js +8 -0
  223. package/dist/checks/supply/deps.js.map +1 -0
  224. package/dist/checks/supply/exotic.js +36 -0
  225. package/dist/checks/supply/exotic.js.map +1 -0
  226. package/dist/checks/supply/expired.js +72 -0
  227. package/dist/checks/supply/expired.js.map +1 -0
  228. package/dist/checks/supply/fetcher.js +52 -0
  229. package/dist/checks/supply/fetcher.js.map +1 -0
  230. package/dist/checks/supply/index.js +21 -0
  231. package/dist/checks/supply/index.js.map +1 -0
  232. package/dist/checks/supply/judged.js +55 -0
  233. package/dist/checks/supply/judged.js.map +1 -0
  234. package/dist/checks/supply/lockfiles/cargo.js +34 -0
  235. package/dist/checks/supply/lockfiles/cargo.js.map +1 -0
  236. package/dist/checks/supply/lockfiles/composer.js +41 -0
  237. package/dist/checks/supply/lockfiles/composer.js.map +1 -0
  238. package/dist/checks/supply/lockfiles/index.js +51 -0
  239. package/dist/checks/supply/lockfiles/index.js.map +1 -0
  240. package/dist/checks/supply/lockfiles/locked.js +69 -0
  241. package/dist/checks/supply/lockfiles/locked.js.map +1 -0
  242. package/dist/checks/supply/lockfiles/npm.js +68 -0
  243. package/dist/checks/supply/lockfiles/npm.js.map +1 -0
  244. package/dist/checks/supply/lockfiles/pnpm.js +47 -0
  245. package/dist/checks/supply/lockfiles/pnpm.js.map +1 -0
  246. package/dist/checks/supply/lockfiles/python.js +77 -0
  247. package/dist/checks/supply/lockfiles/python.js.map +1 -0
  248. package/dist/checks/supply/lockfiles/yarn.js +77 -0
  249. package/dist/checks/supply/lockfiles/yarn.js.map +1 -0
  250. package/dist/checks/supply/pnpm-settings.js +95 -0
  251. package/dist/checks/supply/pnpm-settings.js.map +1 -0
  252. package/dist/checks/supply/provenance.js +82 -0
  253. package/dist/checks/supply/provenance.js.map +1 -0
  254. package/dist/checks/supply/registries.js +109 -0
  255. package/dist/checks/supply/registries.js.map +1 -0
  256. package/dist/checks/supply/release-age.js +63 -0
  257. package/dist/checks/supply/release-age.js.map +1 -0
  258. package/dist/checks/supply/settings.js +129 -0
  259. package/dist/checks/supply/settings.js.map +1 -0
  260. package/dist/cli/adopt.js +269 -0
  261. package/dist/cli/adopt.js.map +1 -0
  262. package/dist/cli/central.js +201 -0
  263. package/dist/cli/central.js.map +1 -0
  264. package/dist/cli/check.js +121 -0
  265. package/dist/cli/check.js.map +1 -0
  266. package/dist/cli/configs.js +65 -0
  267. package/dist/cli/configs.js.map +1 -0
  268. package/dist/cli/debt.js +75 -0
  269. package/dist/cli/debt.js.map +1 -0
  270. package/dist/cli/doctor.js +38 -0
  271. package/dist/cli/doctor.js.map +1 -0
  272. package/dist/cli/findings.js +32 -0
  273. package/dist/cli/findings.js.map +1 -0
  274. package/dist/cli/govern.js +97 -0
  275. package/dist/cli/govern.js.map +1 -0
  276. package/dist/cli/io.js +29 -0
  277. package/dist/cli/io.js.map +1 -0
  278. package/dist/cli/job.js +173 -0
  279. package/dist/cli/job.js.map +1 -0
  280. package/dist/cli/main.js +109 -0
  281. package/dist/cli/main.js.map +1 -0
  282. package/dist/cli/new.js +72 -0
  283. package/dist/cli/new.js.map +1 -0
  284. package/dist/cli/org.js +84 -0
  285. package/dist/cli/org.js.map +1 -0
  286. package/dist/cli/plan.js +49 -0
  287. package/dist/cli/plan.js.map +1 -0
  288. package/dist/cli/run.js +78 -0
  289. package/dist/cli/run.js.map +1 -0
  290. package/dist/cli/self-test.js +127 -0
  291. package/dist/cli/self-test.js.map +1 -0
  292. package/dist/cli/shrinkwrap.js +20 -0
  293. package/dist/cli/shrinkwrap.js.map +1 -0
  294. package/dist/cli/status.js +39 -0
  295. package/dist/cli/status.js.map +1 -0
  296. package/dist/cli/ticket.js +180 -0
  297. package/dist/cli/ticket.js.map +1 -0
  298. package/dist/cli/verdict.js +57 -0
  299. package/dist/cli/verdict.js.map +1 -0
  300. package/dist/cli/version.js +29 -0
  301. package/dist/cli/version.js.map +1 -0
  302. package/dist/cli/why.js +96 -0
  303. package/dist/cli/why.js.map +1 -0
  304. package/dist/config/load.js +41 -0
  305. package/dist/config/load.js.map +1 -0
  306. package/dist/config/schema.js +75 -0
  307. package/dist/config/schema.js.map +1 -0
  308. package/dist/configs/drift.js +112 -0
  309. package/dist/configs/drift.js.map +1 -0
  310. package/dist/configs/files.js +35 -0
  311. package/dist/configs/files.js.map +1 -0
  312. package/dist/configs/header.js +31 -0
  313. package/dist/configs/header.js.map +1 -0
  314. package/dist/configs/index.js +8 -0
  315. package/dist/configs/index.js.map +1 -0
  316. package/dist/configs/json.js +26 -0
  317. package/dist/configs/json.js.map +1 -0
  318. package/dist/configs/packs.js +30 -0
  319. package/dist/configs/packs.js.map +1 -0
  320. package/dist/core/check.js +9 -0
  321. package/dist/core/check.js.map +1 -0
  322. package/dist/core/compare.js +46 -0
  323. package/dist/core/compare.js.map +1 -0
  324. package/dist/core/component.js +57 -0
  325. package/dist/core/component.js.map +1 -0
  326. package/dist/core/finding.js +2 -0
  327. package/dist/core/finding.js.map +1 -0
  328. package/dist/core/fingerprint.js +29 -0
  329. package/dist/core/fingerprint.js.map +1 -0
  330. package/dist/core/literal.js +85 -0
  331. package/dist/core/literal.js.map +1 -0
  332. package/dist/core/log.js +20 -0
  333. package/dist/core/log.js.map +1 -0
  334. package/dist/core/pack.js +2 -0
  335. package/dist/core/pack.js.map +1 -0
  336. package/dist/core/pool.js +16 -0
  337. package/dist/core/pool.js.map +1 -0
  338. package/dist/core/registry.js +28 -0
  339. package/dist/core/registry.js.map +1 -0
  340. package/dist/core/result.js +45 -0
  341. package/dist/core/result.js.map +1 -0
  342. package/dist/core/xml.js +63 -0
  343. package/dist/core/xml.js.map +1 -0
  344. package/dist/docs/claude.js +79 -0
  345. package/dist/docs/claude.js.map +1 -0
  346. package/dist/docs/comments/c-family.js +180 -0
  347. package/dist/docs/comments/c-family.js.map +1 -0
  348. package/dist/docs/comments/index.js +41 -0
  349. package/dist/docs/comments/index.js.map +1 -0
  350. package/dist/docs/comments/rules.js +174 -0
  351. package/dist/docs/comments/rules.js.map +1 -0
  352. package/dist/docs/comments/scan.js +138 -0
  353. package/dist/docs/comments/scan.js.map +1 -0
  354. package/dist/docs/comments/script.js +135 -0
  355. package/dist/docs/comments/script.js.map +1 -0
  356. package/dist/docs/decisions.js +168 -0
  357. package/dist/docs/decisions.js.map +1 -0
  358. package/dist/docs/glossary.js +81 -0
  359. package/dist/docs/glossary.js.map +1 -0
  360. package/dist/docs/links.js +119 -0
  361. package/dist/docs/links.js.map +1 -0
  362. package/dist/docs/markdown.js +176 -0
  363. package/dist/docs/markdown.js.map +1 -0
  364. package/dist/engine/gate.js +144 -0
  365. package/dist/engine/gate.js.map +1 -0
  366. package/dist/engine/local.js +90 -0
  367. package/dist/engine/local.js.map +1 -0
  368. package/dist/engine/plan.js +165 -0
  369. package/dist/engine/plan.js.map +1 -0
  370. package/dist/engine/prepare.js +140 -0
  371. package/dist/engine/prepare.js.map +1 -0
  372. package/dist/engine/report.js +71 -0
  373. package/dist/engine/report.js.map +1 -0
  374. package/dist/engine/run.js +142 -0
  375. package/dist/engine/run.js.map +1 -0
  376. package/dist/engine/session.js +10 -0
  377. package/dist/engine/session.js.map +1 -0
  378. package/dist/engine/verdict-caps.js +30 -0
  379. package/dist/engine/verdict-caps.js.map +1 -0
  380. package/dist/engine/verdict.js +49 -0
  381. package/dist/engine/verdict.js.map +1 -0
  382. package/dist/exec/exec.js +136 -0
  383. package/dist/exec/exec.js.map +1 -0
  384. package/dist/github/actions.js +62 -0
  385. package/dist/github/actions.js.map +1 -0
  386. package/dist/github/api.js +106 -0
  387. package/dist/github/api.js.map +1 -0
  388. package/dist/github/artifacts.js +203 -0
  389. package/dist/github/artifacts.js.map +1 -0
  390. package/dist/github/checks.js +86 -0
  391. package/dist/github/checks.js.map +1 -0
  392. package/dist/github/contents.js +38 -0
  393. package/dist/github/contents.js.map +1 -0
  394. package/dist/github/gate-runs.js +59 -0
  395. package/dist/github/gate-runs.js.map +1 -0
  396. package/dist/github/identities.js +29 -0
  397. package/dist/github/identities.js.map +1 -0
  398. package/dist/github/pulls.js +32 -0
  399. package/dist/github/pulls.js.map +1 -0
  400. package/dist/github/remote.js +26 -0
  401. package/dist/github/remote.js.map +1 -0
  402. package/dist/github/repos.js +64 -0
  403. package/dist/github/repos.js.map +1 -0
  404. package/dist/github/rulesets.js +44 -0
  405. package/dist/github/rulesets.js.map +1 -0
  406. package/dist/govern/commit.js +31 -0
  407. package/dist/govern/commit.js.map +1 -0
  408. package/dist/govern/compare.js +52 -0
  409. package/dist/govern/compare.js.map +1 -0
  410. package/dist/govern/create.js +97 -0
  411. package/dist/govern/create.js.map +1 -0
  412. package/dist/govern/govern.js +75 -0
  413. package/dist/govern/govern.js.map +1 -0
  414. package/dist/govern/installations.js +58 -0
  415. package/dist/govern/installations.js.map +1 -0
  416. package/dist/govern/org.js +136 -0
  417. package/dist/govern/org.js.map +1 -0
  418. package/dist/govern/output.js +32 -0
  419. package/dist/govern/output.js.map +1 -0
  420. package/dist/govern/plan.js +166 -0
  421. package/dist/govern/plan.js.map +1 -0
  422. package/dist/govern/rulesets-api.js +39 -0
  423. package/dist/govern/rulesets-api.js.map +1 -0
  424. package/dist/govern/state.js +108 -0
  425. package/dist/govern/state.js.map +1 -0
  426. package/dist/govern/steps.js +131 -0
  427. package/dist/govern/steps.js.map +1 -0
  428. package/dist/govern/templates.js +140 -0
  429. package/dist/govern/templates.js.map +1 -0
  430. package/dist/jobs/act.js +60 -0
  431. package/dist/jobs/act.js.map +1 -0
  432. package/dist/jobs/analyze.js +68 -0
  433. package/dist/jobs/analyze.js.map +1 -0
  434. package/dist/jobs/artifacts.js +35 -0
  435. package/dist/jobs/artifacts.js.map +1 -0
  436. package/dist/jobs/context.js +2 -0
  437. package/dist/jobs/context.js.map +1 -0
  438. package/dist/jobs/debt-issues.js +129 -0
  439. package/dist/jobs/debt-issues.js.map +1 -0
  440. package/dist/jobs/debt-report.js +125 -0
  441. package/dist/jobs/debt-report.js.map +1 -0
  442. package/dist/jobs/dispatch.js +103 -0
  443. package/dist/jobs/dispatch.js.map +1 -0
  444. package/dist/jobs/flaky.js +151 -0
  445. package/dist/jobs/flaky.js.map +1 -0
  446. package/dist/jobs/label-sync.js +67 -0
  447. package/dist/jobs/label-sync.js.map +1 -0
  448. package/dist/jobs/payloads.js +62 -0
  449. package/dist/jobs/payloads.js.map +1 -0
  450. package/dist/jobs/readiness-job.js +91 -0
  451. package/dist/jobs/readiness-job.js.map +1 -0
  452. package/dist/jobs/readiness.js +154 -0
  453. package/dist/jobs/readiness.js.map +1 -0
  454. package/dist/jobs/schedule.js +19 -0
  455. package/dist/jobs/schedule.js.map +1 -0
  456. package/dist/jobs/sync-chore.js +77 -0
  457. package/dist/jobs/sync-chore.js.map +1 -0
  458. package/dist/jobs/talos-issues.js +79 -0
  459. package/dist/jobs/talos-issues.js.map +1 -0
  460. package/dist/langs/lua/busted.js +124 -0
  461. package/dist/langs/lua/busted.js.map +1 -0
  462. package/dist/langs/lua/configs.js +173 -0
  463. package/dist/langs/lua/configs.js.map +1 -0
  464. package/dist/langs/lua/deadcode.js +11 -0
  465. package/dist/langs/lua/deadcode.js.map +1 -0
  466. package/dist/langs/lua/devtools.js +64 -0
  467. package/dist/langs/lua/devtools.js.map +1 -0
  468. package/dist/langs/lua/format.js +41 -0
  469. package/dist/langs/lua/format.js.map +1 -0
  470. package/dist/langs/lua/index.js +86 -0
  471. package/dist/langs/lua/index.js.map +1 -0
  472. package/dist/langs/lua/install.js +80 -0
  473. package/dist/langs/lua/install.js.map +1 -0
  474. package/dist/langs/lua/lint.js +46 -0
  475. package/dist/langs/lua/lint.js.map +1 -0
  476. package/dist/langs/lua/luacheck-config.js +151 -0
  477. package/dist/langs/lua/luacheck-config.js.map +1 -0
  478. package/dist/langs/lua/luacheck.js +102 -0
  479. package/dist/langs/lua/luacheck.js.map +1 -0
  480. package/dist/langs/lua/luals.js +66 -0
  481. package/dist/langs/lua/luals.js.map +1 -0
  482. package/dist/langs/lua/paths.js +94 -0
  483. package/dist/langs/lua/paths.js.map +1 -0
  484. package/dist/langs/lua/run.js +63 -0
  485. package/dist/langs/lua/run.js.map +1 -0
  486. package/dist/langs/lua/scripts/json.js +39 -0
  487. package/dist/langs/lua/scripts/json.js.map +1 -0
  488. package/dist/langs/lua/scripts/lcov.js +77 -0
  489. package/dist/langs/lua/scripts/lcov.js.map +1 -0
  490. package/dist/langs/lua/scripts/luacheck.js +97 -0
  491. package/dist/langs/lua/scripts/luacheck.js.map +1 -0
  492. package/dist/langs/lua/scripts/shape.js +197 -0
  493. package/dist/langs/lua/scripts/shape.js.map +1 -0
  494. package/dist/langs/lua/shape.js +142 -0
  495. package/dist/langs/lua/shape.js.map +1 -0
  496. package/dist/langs/lua/strength.js +38 -0
  497. package/dist/langs/lua/strength.js.map +1 -0
  498. package/dist/langs/lua/stylua.js +43 -0
  499. package/dist/langs/lua/stylua.js.map +1 -0
  500. package/dist/langs/lua/toolchain.js +49 -0
  501. package/dist/langs/lua/toolchain.js.map +1 -0
  502. package/dist/langs/lua/types.js +41 -0
  503. package/dist/langs/lua/types.js.map +1 -0
  504. package/dist/langs/php/analysis.js +22 -0
  505. package/dist/langs/php/analysis.js.map +1 -0
  506. package/dist/langs/php/composer.js +88 -0
  507. package/dist/langs/php/composer.js.map +1 -0
  508. package/dist/langs/php/configs.js +54 -0
  509. package/dist/langs/php/configs.js.map +1 -0
  510. package/dist/langs/php/deptrac-config.js +118 -0
  511. package/dist/langs/php/deptrac-config.js.map +1 -0
  512. package/dist/langs/php/deptrac.js +117 -0
  513. package/dist/langs/php/deptrac.js.map +1 -0
  514. package/dist/langs/php/format.js +94 -0
  515. package/dist/langs/php/format.js.map +1 -0
  516. package/dist/langs/php/index.js +81 -0
  517. package/dist/langs/php/index.js.map +1 -0
  518. package/dist/langs/php/infection.js +151 -0
  519. package/dist/langs/php/infection.js.map +1 -0
  520. package/dist/langs/php/install.js +52 -0
  521. package/dist/langs/php/install.js.map +1 -0
  522. package/dist/langs/php/neon.js +41 -0
  523. package/dist/langs/php/neon.js.map +1 -0
  524. package/dist/langs/php/paths.js +78 -0
  525. package/dist/langs/php/paths.js.map +1 -0
  526. package/dist/langs/php/pest.js +91 -0
  527. package/dist/langs/php/pest.js.map +1 -0
  528. package/dist/langs/php/phpmd-config.js +58 -0
  529. package/dist/langs/php/phpmd-config.js.map +1 -0
  530. package/dist/langs/php/phpmd.js +80 -0
  531. package/dist/langs/php/phpmd.js.map +1 -0
  532. package/dist/langs/php/phpstan-config.js +100 -0
  533. package/dist/langs/php/phpstan-config.js.map +1 -0
  534. package/dist/langs/php/phpstan.js +128 -0
  535. package/dist/langs/php/phpstan.js.map +1 -0
  536. package/dist/langs/php/pint-config.js +22 -0
  537. package/dist/langs/php/pint-config.js.map +1 -0
  538. package/dist/langs/php/run.js +88 -0
  539. package/dist/langs/php/run.js.map +1 -0
  540. package/dist/langs/php/runtime.js +60 -0
  541. package/dist/langs/php/runtime.js.map +1 -0
  542. package/dist/langs/php/scope.js +50 -0
  543. package/dist/langs/php/scope.js.map +1 -0
  544. package/dist/langs/php/shape.js +212 -0
  545. package/dist/langs/php/shape.js.map +1 -0
  546. package/dist/langs/php/strength-rules.js +114 -0
  547. package/dist/langs/php/strength-rules.js.map +1 -0
  548. package/dist/langs/php/strength.js +98 -0
  549. package/dist/langs/php/strength.js.map +1 -0
  550. package/dist/langs/php/toolchain.js +73 -0
  551. package/dist/langs/php/toolchain.js.map +1 -0
  552. package/dist/langs/php/typecov.js +84 -0
  553. package/dist/langs/php/typecov.js.map +1 -0
  554. package/dist/langs/py/arch.js +97 -0
  555. package/dist/langs/py/arch.js.map +1 -0
  556. package/dist/langs/py/complexipy.js +42 -0
  557. package/dist/langs/py/complexipy.js.map +1 -0
  558. package/dist/langs/py/configs.js +144 -0
  559. package/dist/langs/py/configs.js.map +1 -0
  560. package/dist/langs/py/deadcode.js +77 -0
  561. package/dist/langs/py/deadcode.js.map +1 -0
  562. package/dist/langs/py/environment.js +35 -0
  563. package/dist/langs/py/environment.js.map +1 -0
  564. package/dist/langs/py/format.js +32 -0
  565. package/dist/langs/py/format.js.map +1 -0
  566. package/dist/langs/py/importlinter.js +147 -0
  567. package/dist/langs/py/importlinter.js.map +1 -0
  568. package/dist/langs/py/index.js +73 -0
  569. package/dist/langs/py/index.js.map +1 -0
  570. package/dist/langs/py/install.js +49 -0
  571. package/dist/langs/py/install.js.map +1 -0
  572. package/dist/langs/py/lint.js +98 -0
  573. package/dist/langs/py/lint.js.map +1 -0
  574. package/dist/langs/py/lock.js +66 -0
  575. package/dist/langs/py/lock.js.map +1 -0
  576. package/dist/langs/py/mutation.js +164 -0
  577. package/dist/langs/py/mutation.js.map +1 -0
  578. package/dist/langs/py/mutmut-report.js +81 -0
  579. package/dist/langs/py/mutmut-report.js.map +1 -0
  580. package/dist/langs/py/mutmut-settings.js +168 -0
  581. package/dist/langs/py/mutmut-settings.js.map +1 -0
  582. package/dist/langs/py/paths.js +57 -0
  583. package/dist/langs/py/paths.js.map +1 -0
  584. package/dist/langs/py/pyright-config.js +123 -0
  585. package/dist/langs/py/pyright-config.js.map +1 -0
  586. package/dist/langs/py/pytest.js +96 -0
  587. package/dist/langs/py/pytest.js.map +1 -0
  588. package/dist/langs/py/ruff-settings.js +166 -0
  589. package/dist/langs/py/ruff-settings.js.map +1 -0
  590. package/dist/langs/py/ruff.js +44 -0
  591. package/dist/langs/py/ruff.js.map +1 -0
  592. package/dist/langs/py/run.js +44 -0
  593. package/dist/langs/py/run.js.map +1 -0
  594. package/dist/langs/py/sizes.js +65 -0
  595. package/dist/langs/py/sizes.js.map +1 -0
  596. package/dist/langs/py/spans.js +76 -0
  597. package/dist/langs/py/spans.js.map +1 -0
  598. package/dist/langs/py/strength.js +101 -0
  599. package/dist/langs/py/strength.js.map +1 -0
  600. package/dist/langs/py/toolchain.js +34 -0
  601. package/dist/langs/py/toolchain.js.map +1 -0
  602. package/dist/langs/py/types.js +66 -0
  603. package/dist/langs/py/types.js.map +1 -0
  604. package/dist/langs/rust/cargo-config.js +91 -0
  605. package/dist/langs/rust/cargo-config.js.map +1 -0
  606. package/dist/langs/rust/cargo-test.js +50 -0
  607. package/dist/langs/rust/cargo-test.js.map +1 -0
  608. package/dist/langs/rust/compile.js +99 -0
  609. package/dist/langs/rust/compile.js.map +1 -0
  610. package/dist/langs/rust/configs.js +60 -0
  611. package/dist/langs/rust/configs.js.map +1 -0
  612. package/dist/langs/rust/deadcode.js +47 -0
  613. package/dist/langs/rust/deadcode.js.map +1 -0
  614. package/dist/langs/rust/diagnostics.js +103 -0
  615. package/dist/langs/rust/diagnostics.js.map +1 -0
  616. package/dist/langs/rust/doctests.js +49 -0
  617. package/dist/langs/rust/doctests.js.map +1 -0
  618. package/dist/langs/rust/format.js +97 -0
  619. package/dist/langs/rust/format.js.map +1 -0
  620. package/dist/langs/rust/index.js +49 -0
  621. package/dist/langs/rust/index.js.map +1 -0
  622. package/dist/langs/rust/install.js +56 -0
  623. package/dist/langs/rust/install.js.map +1 -0
  624. package/dist/langs/rust/junit.js +49 -0
  625. package/dist/langs/rust/junit.js.map +1 -0
  626. package/dist/langs/rust/lcov.js +53 -0
  627. package/dist/langs/rust/lcov.js.map +1 -0
  628. package/dist/langs/rust/lint.js +47 -0
  629. package/dist/langs/rust/lint.js.map +1 -0
  630. package/dist/langs/rust/lints.js +61 -0
  631. package/dist/langs/rust/lints.js.map +1 -0
  632. package/dist/langs/rust/machete.js +53 -0
  633. package/dist/langs/rust/machete.js.map +1 -0
  634. package/dist/langs/rust/metadata.js +78 -0
  635. package/dist/langs/rust/metadata.js.map +1 -0
  636. package/dist/langs/rust/mutants.js +73 -0
  637. package/dist/langs/rust/mutants.js.map +1 -0
  638. package/dist/langs/rust/nextest.js +164 -0
  639. package/dist/langs/rust/nextest.js.map +1 -0
  640. package/dist/langs/rust/paths.js +60 -0
  641. package/dist/langs/rust/paths.js.map +1 -0
  642. package/dist/langs/rust/run.js +37 -0
  643. package/dist/langs/rust/run.js.map +1 -0
  644. package/dist/langs/rust/scan.js +173 -0
  645. package/dist/langs/rust/scan.js.map +1 -0
  646. package/dist/langs/rust/shapes.js +80 -0
  647. package/dist/langs/rust/shapes.js.map +1 -0
  648. package/dist/langs/rust/strength-rules.js +109 -0
  649. package/dist/langs/rust/strength-rules.js.map +1 -0
  650. package/dist/langs/rust/strength.js +114 -0
  651. package/dist/langs/rust/strength.js.map +1 -0
  652. package/dist/langs/rust/structure.js +222 -0
  653. package/dist/langs/rust/structure.js.map +1 -0
  654. package/dist/langs/rust/testfiles.js +62 -0
  655. package/dist/langs/rust/testfiles.js.map +1 -0
  656. package/dist/langs/rust/toolchain.js +91 -0
  657. package/dist/langs/rust/toolchain.js.map +1 -0
  658. package/dist/langs/rust/types.js +9 -0
  659. package/dist/langs/rust/types.js.map +1 -0
  660. package/dist/langs/ts/checks/arch.js +129 -0
  661. package/dist/langs/ts/checks/arch.js.map +1 -0
  662. package/dist/langs/ts/checks/deadcode.js +125 -0
  663. package/dist/langs/ts/checks/deadcode.js.map +1 -0
  664. package/dist/langs/ts/checks/e2e.js +174 -0
  665. package/dist/langs/ts/checks/e2e.js.map +1 -0
  666. package/dist/langs/ts/checks/format.js +107 -0
  667. package/dist/langs/ts/checks/format.js.map +1 -0
  668. package/dist/langs/ts/checks/javascript.js +30 -0
  669. package/dist/langs/ts/checks/javascript.js.map +1 -0
  670. package/dist/langs/ts/checks/lint.js +133 -0
  671. package/dist/langs/ts/checks/lint.js.map +1 -0
  672. package/dist/langs/ts/checks/size.js +79 -0
  673. package/dist/langs/ts/checks/size.js.map +1 -0
  674. package/dist/langs/ts/checks/strength.js +168 -0
  675. package/dist/langs/ts/checks/strength.js.map +1 -0
  676. package/dist/langs/ts/checks/toolchain.js +54 -0
  677. package/dist/langs/ts/checks/toolchain.js.map +1 -0
  678. package/dist/langs/ts/checks/typecov.js +121 -0
  679. package/dist/langs/ts/checks/typecov.js.map +1 -0
  680. package/dist/langs/ts/checks/types.js +71 -0
  681. package/dist/langs/ts/checks/types.js.map +1 -0
  682. package/dist/langs/ts/compare.js +110 -0
  683. package/dist/langs/ts/compare.js.map +1 -0
  684. package/dist/langs/ts/configs/depcruise.js +97 -0
  685. package/dist/langs/ts/configs/depcruise.js.map +1 -0
  686. package/dist/langs/ts/configs/eslint.js +209 -0
  687. package/dist/langs/ts/configs/eslint.js.map +1 -0
  688. package/dist/langs/ts/configs/index.js +59 -0
  689. package/dist/langs/ts/configs/index.js.map +1 -0
  690. package/dist/langs/ts/configs/knip.js +43 -0
  691. package/dist/langs/ts/configs/knip.js.map +1 -0
  692. package/dist/langs/ts/configs/prettier.js +37 -0
  693. package/dist/langs/ts/configs/prettier.js.map +1 -0
  694. package/dist/langs/ts/configs/shared.js +19 -0
  695. package/dist/langs/ts/configs/shared.js.map +1 -0
  696. package/dist/langs/ts/configs/stryker.js +117 -0
  697. package/dist/langs/ts/configs/stryker.js.map +1 -0
  698. package/dist/langs/ts/configs/tsconfig.js +64 -0
  699. package/dist/langs/ts/configs/tsconfig.js.map +1 -0
  700. package/dist/langs/ts/configs/vitest.js +62 -0
  701. package/dist/langs/ts/configs/vitest.js.map +1 -0
  702. package/dist/langs/ts/devtools.js +29 -0
  703. package/dist/langs/ts/devtools.js.map +1 -0
  704. package/dist/langs/ts/files.js +73 -0
  705. package/dist/langs/ts/files.js.map +1 -0
  706. package/dist/langs/ts/generated.js +29 -0
  707. package/dist/langs/ts/generated.js.map +1 -0
  708. package/dist/langs/ts/index.js +45 -0
  709. package/dist/langs/ts/index.js.map +1 -0
  710. package/dist/langs/ts/install.js +48 -0
  711. package/dist/langs/ts/install.js.map +1 -0
  712. package/dist/langs/ts/node.js +139 -0
  713. package/dist/langs/ts/node.js.map +1 -0
  714. package/dist/langs/ts/runners/stryker.js +56 -0
  715. package/dist/langs/ts/runners/stryker.js.map +1 -0
  716. package/dist/langs/ts/runners/vitest.js +79 -0
  717. package/dist/langs/ts/runners/vitest.js.map +1 -0
  718. package/dist/langs/ts/shadows.js +90 -0
  719. package/dist/langs/ts/shadows.js.map +1 -0
  720. package/dist/langs/ts/spans.js +57 -0
  721. package/dist/langs/ts/spans.js.map +1 -0
  722. package/dist/quality/coverage.js +162 -0
  723. package/dist/quality/coverage.js.map +1 -0
  724. package/dist/quality/index.js +4 -0
  725. package/dist/quality/index.js.map +1 -0
  726. package/dist/quality/junit.js +166 -0
  727. package/dist/quality/junit.js.map +1 -0
  728. package/dist/quality/lines.js +58 -0
  729. package/dist/quality/lines.js.map +1 -0
  730. package/dist/quality/luacov.js +345 -0
  731. package/dist/quality/luacov.js.map +1 -0
  732. package/dist/quality/mutants.js +202 -0
  733. package/dist/quality/mutants.js.map +1 -0
  734. package/dist/quality/mutation.js +121 -0
  735. package/dist/quality/mutation.js.map +1 -0
  736. package/dist/quality/paths.js +36 -0
  737. package/dist/quality/paths.js.map +1 -0
  738. package/dist/quality/protocol.js +2 -0
  739. package/dist/quality/protocol.js.map +1 -0
  740. package/dist/quality/reports.js +79 -0
  741. package/dist/quality/reports.js.map +1 -0
  742. package/dist/quality/suite.js +64 -0
  743. package/dist/quality/suite.js.map +1 -0
  744. package/dist/quality/tests.js +63 -0
  745. package/dist/quality/tests.js.map +1 -0
  746. package/dist/quality/text.js +32 -0
  747. package/dist/quality/text.js.map +1 -0
  748. package/dist/quality/typecov.js +16 -0
  749. package/dist/quality/typecov.js.map +1 -0
  750. package/dist/quality/verdicts.js +96 -0
  751. package/dist/quality/verdicts.js.map +1 -0
  752. package/dist/quality/xml.js +42 -0
  753. package/dist/quality/xml.js.map +1 -0
  754. package/dist/repo/changes.js +108 -0
  755. package/dist/repo/changes.js.map +1 -0
  756. package/dist/repo/facts.js +38 -0
  757. package/dist/repo/facts.js.map +1 -0
  758. package/dist/repo/git.js +79 -0
  759. package/dist/repo/git.js.map +1 -0
  760. package/dist/repo/talos-dir.js +36 -0
  761. package/dist/repo/talos-dir.js.map +1 -0
  762. package/dist/review/approval.js +73 -0
  763. package/dist/review/approval.js.map +1 -0
  764. package/dist/review/assemble.js +80 -0
  765. package/dist/review/assemble.js.map +1 -0
  766. package/dist/review/codeowners.js +28 -0
  767. package/dist/review/codeowners.js.map +1 -0
  768. package/dist/review/conditions.js +114 -0
  769. package/dist/review/conditions.js.map +1 -0
  770. package/dist/review/github.js +206 -0
  771. package/dist/review/github.js.map +1 -0
  772. package/dist/review/guard.js +119 -0
  773. package/dist/review/guard.js.map +1 -0
  774. package/dist/review/header.js +61 -0
  775. package/dist/review/header.js.map +1 -0
  776. package/dist/review/integrity.js +148 -0
  777. package/dist/review/integrity.js.map +1 -0
  778. package/dist/review/job.js +213 -0
  779. package/dist/review/job.js.map +1 -0
  780. package/dist/review/model.js +178 -0
  781. package/dist/review/model.js.map +1 -0
  782. package/dist/review/prompt.js +125 -0
  783. package/dist/review/prompt.js.map +1 -0
  784. package/dist/review/report.js +73 -0
  785. package/dist/review/report.js.map +1 -0
  786. package/dist/review/reviewer.js +205 -0
  787. package/dist/review/reviewer.js.map +1 -0
  788. package/dist/review/rules.js +54 -0
  789. package/dist/review/rules.js.map +1 -0
  790. package/dist/review/scope.js +39 -0
  791. package/dist/review/scope.js.map +1 -0
  792. package/dist/review/testfiles.js +53 -0
  793. package/dist/review/testfiles.js.map +1 -0
  794. package/dist/review/types.js +6 -0
  795. package/dist/review/types.js.map +1 -0
  796. package/dist/sarif/sarif.js +63 -0
  797. package/dist/sarif/sarif.js.map +1 -0
  798. package/dist/status/build.js +154 -0
  799. package/dist/status/build.js.map +1 -0
  800. package/dist/status/collect.js +132 -0
  801. package/dist/status/collect.js.map +1 -0
  802. package/dist/status/doctor.js +191 -0
  803. package/dist/status/doctor.js.map +1 -0
  804. package/dist/status/findings.js +161 -0
  805. package/dist/status/findings.js.map +1 -0
  806. package/dist/status/history.js +113 -0
  807. package/dist/status/history.js.map +1 -0
  808. package/dist/status/markers.js +65 -0
  809. package/dist/status/markers.js.map +1 -0
  810. package/dist/status/query.js +148 -0
  811. package/dist/status/query.js.map +1 -0
  812. package/dist/status/resolve.js +92 -0
  813. package/dist/status/resolve.js.map +1 -0
  814. package/dist/status/schema.js +110 -0
  815. package/dist/status/schema.js.map +1 -0
  816. package/dist/status/text.js +57 -0
  817. package/dist/status/text.js.map +1 -0
  818. package/dist/ticket/claim.js +147 -0
  819. package/dist/ticket/claim.js.map +1 -0
  820. package/dist/ticket/github.js +94 -0
  821. package/dist/ticket/github.js.map +1 -0
  822. package/dist/ticket/labels.js +64 -0
  823. package/dist/ticket/labels.js.map +1 -0
  824. package/dist/ticket/payload.js +37 -0
  825. package/dist/ticket/payload.js.map +1 -0
  826. package/dist/ticket/queue.js +51 -0
  827. package/dist/ticket/queue.js.map +1 -0
  828. package/dist/ticket/schemas.js +106 -0
  829. package/dist/ticket/schemas.js.map +1 -0
  830. package/dist/ticket/sections.js +66 -0
  831. package/dist/ticket/sections.js.map +1 -0
  832. package/dist/ticket/stale.js +108 -0
  833. package/dist/ticket/stale.js.map +1 -0
  834. package/dist/ticket/status.js +96 -0
  835. package/dist/ticket/status.js.map +1 -0
  836. package/dist/ticket/trust.js +29 -0
  837. package/dist/ticket/trust.js.map +1 -0
  838. package/dist/tools/fetch.js +117 -0
  839. package/dist/tools/fetch.js.map +1 -0
  840. package/dist/tools/lock.js +100 -0
  841. package/dist/tools/lock.js.map +1 -0
  842. package/dist/tools/lockfile.js +81 -0
  843. package/dist/tools/lockfile.js.map +1 -0
  844. package/dist/tools/pypi.js +44 -0
  845. package/dist/tools/pypi.js.map +1 -0
  846. package/dist/tools/store.js +62 -0
  847. package/dist/tools/store.js.map +1 -0
  848. package/dist/tools/tools.js +2 -0
  849. package/dist/tools/tools.js.map +1 -0
  850. package/dist/version/cache.js +18 -0
  851. package/dist/version/cache.js.map +1 -0
  852. package/dist/version/enforced.js +54 -0
  853. package/dist/version/enforced.js.map +1 -0
  854. package/dist/version/errors.js +8 -0
  855. package/dist/version/errors.js.map +1 -0
  856. package/dist/version/install.js +149 -0
  857. package/dist/version/install.js.map +1 -0
  858. package/dist/version/launch.js +104 -0
  859. package/dist/version/launch.js.map +1 -0
  860. package/dist/version/pin.js +121 -0
  861. package/dist/version/pin.js.map +1 -0
  862. package/dist/version/provenance.js +118 -0
  863. package/dist/version/provenance.js.map +1 -0
  864. package/dist/version/release.js +44 -0
  865. package/dist/version/release.js.map +1 -0
  866. package/dist/version/self.js +55 -0
  867. package/dist/version/self.js.map +1 -0
  868. package/dist/version/shrinkwrap.js +207 -0
  869. package/dist/version/shrinkwrap.js.map +1 -0
  870. package/npm-shrinkwrap.json +2140 -0
  871. package/package.json +81 -8
  872. package/tools/semgrep.in +1 -0
  873. package/tools/semgrep.txt +1150 -0
  874. package/tools.lock +429 -0
@@ -0,0 +1,52 @@
1
+ import { join } from 'node:path';
2
+ import { componentDir, fileExists, inRepo } from './paths.js';
3
+ import { requireNewestPhp } from './runtime.js';
4
+ import { EngineError } from '../../core/check.js';
5
+ import { ExecError } from '../../exec/exec.js';
6
+ const HOUR = 60 * 60 * 1000;
7
+ const COMPOSER_INSTALL = [
8
+ 'install',
9
+ '--no-interaction',
10
+ '--no-progress',
11
+ '--prefer-dist',
12
+ '--no-ansi',
13
+ ];
14
+ /**
15
+ * Composer runs plugins and scripts as root only when this is set. The gate runs the project's
16
+ * code anyway (its tests), and Pest and Infection need their plugins, so a root container gets
17
+ * what an ordinary runner gets.
18
+ */
19
+ const ENV = {
20
+ COMPOSER_ALLOW_SUPERUSER: '1',
21
+ COMPOSER_NO_INTERACTION: '1',
22
+ NO_COLOR: '1',
23
+ };
24
+ function detail(result) {
25
+ return `${result.stderr}\n${result.stdout}`.trim().split('\n').slice(-15).join('\n');
26
+ }
27
+ /**
28
+ * Installs a component's dependencies into `vendor/` with Composer, only ever from composer.lock,
29
+ * dev dependencies included, since the checks run the dev tools; never on a PHP that isn't the
30
+ * newest release of its cycle.
31
+ */
32
+ export async function install(ctx) {
33
+ const dir = componentDir(ctx);
34
+ const where = inRepo(ctx.component.root, '.');
35
+ if (!(await fileExists(join(dir, 'composer.lock')))) {
36
+ throw new EngineError(`${where} has no composer.lock: Talos installs PHP dependencies only from a lockfile`);
37
+ }
38
+ await requireNewestPhp(ctx.exec, dir);
39
+ let result;
40
+ try {
41
+ result = await ctx.exec('composer', COMPOSER_INSTALL, { cwd: dir, env: ENV, timeoutMs: HOUR });
42
+ }
43
+ catch (error) {
44
+ if (!(error instanceof ExecError))
45
+ throw error;
46
+ throw new EngineError(`composer is needed to install ${where}: ${error.message}`);
47
+ }
48
+ if (result.code !== 0) {
49
+ throw new EngineError(`composer install failed in ${where}:\n${detail(result)}`);
50
+ }
51
+ }
52
+ //# sourceMappingURL=install.js.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"install.js","sourceRoot":"","sources":["../../../src/langs/php/install.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,YAAY,EAAE,UAAU,EAAE,MAAM,EAAE,MAAM,YAAY,CAAC;AAC9D,OAAO,EAAE,gBAAgB,EAAE,MAAM,cAAc,CAAC;AAChD,OAAO,EAAE,WAAW,EAAE,MAAM,qBAAqB,CAAC;AAElD,OAAO,EAAE,SAAS,EAAmB,MAAM,oBAAoB,CAAC;AAEhE,MAAM,IAAI,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;AAE5B,MAAM,gBAAgB,GAAG;IACvB,SAAS;IACT,kBAAkB;IAClB,eAAe;IACf,eAAe;IACf,WAAW;CACZ,CAAC;AAEF;;;;GAIG;AACH,MAAM,GAAG,GAAqC;IAC5C,wBAAwB,EAAE,GAAG;IAC7B,uBAAuB,EAAE,GAAG;IAC5B,QAAQ,EAAE,GAAG;CACd,CAAC;AAEF,SAAS,MAAM,CAAC,MAAkB;IAChC,OAAO,GAAG,MAAM,CAAC,MAAM,KAAK,MAAM,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACvF,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,OAAO,CAAC,GAAmB;IAC/C,MAAM,GAAG,GAAG,YAAY,CAAC,GAAG,CAAC,CAAC;IAC9B,MAAM,KAAK,GAAG,MAAM,CAAC,GAAG,CAAC,SAAS,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;IAC9C,IAAI,CAAC,CAAC,MAAM,UAAU,CAAC,IAAI,CAAC,GAAG,EAAE,eAAe,CAAC,CAAC,CAAC,EAAE,CAAC;QACpD,MAAM,IAAI,WAAW,CACnB,GAAG,KAAK,6EAA6E,CACtF,CAAC;IACJ,CAAC;IACD,MAAM,gBAAgB,CAAC,GAAG,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;IACtC,IAAI,MAAkB,CAAC;IACvB,IAAI,CAAC;QACH,MAAM,GAAG,MAAM,GAAG,CAAC,IAAI,CAAC,UAAU,EAAE,gBAAgB,EAAE,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACjG,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,CAAC,CAAC,KAAK,YAAY,SAAS,CAAC;YAAE,MAAM,KAAK,CAAC;QAC/C,MAAM,IAAI,WAAW,CAAC,iCAAiC,KAAK,KAAK,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;IACpF,CAAC;IACD,IAAI,MAAM,CAAC,IAAI,KAAK,CAAC,EAAE,CAAC;QACtB,MAAM,IAAI,WAAW,CAAC,8BAA8B,KAAK,MAAM,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;IACnF,CAAC;AACH,CAAC"}
@@ -0,0 +1,41 @@
1
+ const INDENT = ' ';
2
+ /** NEON reads JSON's double-quoted strings, escapes included, so every string is quoted. */
3
+ function scalar(value) {
4
+ if (typeof value === 'string')
5
+ return JSON.stringify(value);
6
+ return value === null ? 'null' : String(value);
7
+ }
8
+ function key(name) {
9
+ return /^[A-Za-z_][\w.-]*!?$/.test(name) ? name : JSON.stringify(name);
10
+ }
11
+ function isList(value) {
12
+ return Array.isArray(value);
13
+ }
14
+ function isScalar(value) {
15
+ return value === null || typeof value !== 'object';
16
+ }
17
+ /** The value written on its key's own line, or undefined when it needs a block of its own. */
18
+ function inline(value) {
19
+ if (isScalar(value))
20
+ return scalar(value);
21
+ if (isList(value))
22
+ return value.length === 0 ? '[]' : undefined;
23
+ return Object.keys(value).length === 0 ? '{}' : undefined;
24
+ }
25
+ function entry(head, value, depth) {
26
+ const short = inline(value);
27
+ if (short !== undefined)
28
+ return [`${head} ${short}`];
29
+ return isScalar(value) ? [] : [head, ...lines(value, depth + 1)];
30
+ }
31
+ function lines(value, depth) {
32
+ const pad = INDENT.repeat(depth);
33
+ if (isList(value))
34
+ return value.flatMap((item) => entry(`${pad}-`, item, depth));
35
+ return Object.entries(value).flatMap(([name, item]) => entry(`${pad}${key(name)}:`, item, depth));
36
+ }
37
+ /** A mapping written as block-style NEON, four spaces per level. */
38
+ export function toNeon(value) {
39
+ return `${lines(value, 0).join('\n')}\n`;
40
+ }
41
+ //# sourceMappingURL=neon.js.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"neon.js","sourceRoot":"","sources":["../../../src/langs/php/neon.ts"],"names":[],"mappings":"AAMA,MAAM,MAAM,GAAG,MAAM,CAAC;AAEtB,4FAA4F;AAC5F,SAAS,MAAM,CAAC,KAAiB;IAC/B,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;IAC5D,OAAO,KAAK,KAAK,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AACjD,CAAC;AAED,SAAS,GAAG,CAAC,IAAY;IACvB,OAAO,sBAAsB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;AACzE,CAAC;AAED,SAAS,MAAM,CAAC,KAAgB;IAC9B,OAAO,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;AAC9B,CAAC;AAED,SAAS,QAAQ,CAAC,KAAgB;IAChC,OAAO,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,CAAC;AACrD,CAAC;AAED,8FAA8F;AAC9F,SAAS,MAAM,CAAC,KAAgB;IAC9B,IAAI,QAAQ,CAAC,KAAK,CAAC;QAAE,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC;IAC1C,IAAI,MAAM,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;IAChE,OAAO,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;AAC5D,CAAC;AAED,SAAS,KAAK,CAAC,IAAY,EAAE,KAAgB,EAAE,KAAa;IAC1D,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;IAC5B,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,CAAC,GAAG,IAAI,IAAI,KAAK,EAAE,CAAC,CAAC;IACrD,OAAO,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,GAAG,KAAK,CAAC,KAAK,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC;AACnE,CAAC;AAED,SAAS,KAAK,CAAC,KAAyB,EAAE,KAAa;IACrD,MAAM,GAAG,GAAG,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IACjC,IAAI,MAAM,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,KAAK,CAAC,GAAG,GAAG,GAAG,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC,CAAC;IACjF,OAAO,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,EAAE,IAAI,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,GAAG,GAAG,GAAG,GAAG,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC,CAAC;AACpG,CAAC;AAED,oEAAoE;AACpE,MAAM,UAAU,MAAM,CAAC,KAAc;IACnC,OAAO,GAAG,KAAK,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC;AAC3C,CAAC"}
@@ -0,0 +1,78 @@
1
+ import { access } from 'node:fs/promises';
2
+ import { isAbsolute, join, posix, relative, resolve } from 'node:path';
3
+ import { EngineError } from '../../core/check.js';
4
+ import { underRoot } from '../../repo/facts.js';
5
+ /** The component a check runs for, which the engine sets for every component check. */
6
+ export function component(ctx) {
7
+ const found = ctx.component;
8
+ if (found !== undefined)
9
+ return found;
10
+ throw new EngineError('a PHP check ran with no component');
11
+ }
12
+ /** The component's directory, absolute. */
13
+ export function componentDir(place) {
14
+ return resolve(place.root, place.component.root);
15
+ }
16
+ /** A component's root as `talos.yml` may write it, normalised: no trailing slash, `.` for none. */
17
+ function rootOf(root) {
18
+ const normal = posix.normalize(`${root}/`);
19
+ return normal === './' || normal === '/' ? '.' : normal.slice(0, -1);
20
+ }
21
+ /** A repository-relative path made relative to the component's root, or undefined outside it. */
22
+ export function inComponent(root, path) {
23
+ const base = rootOf(root);
24
+ if (base === '.')
25
+ return path;
26
+ return path.startsWith(`${base}/`) ? path.slice(base.length + 1) : undefined;
27
+ }
28
+ /** A component-relative path made repository-relative. */
29
+ export function inRepo(root, path) {
30
+ return posix.join(rootOf(root), path);
31
+ }
32
+ /** A path a tool printed (absolute, or relative to the component) made repository-relative. */
33
+ export function fromTool(place, file) {
34
+ const repo = isAbsolute(file) ? relative(place.root, file) : file;
35
+ const posixPath = repo.replaceAll('\\', '/');
36
+ return isAbsolute(file) ? posixPath : inRepo(place.component.root, posixPath);
37
+ }
38
+ /** A component-relative path made absolute. */
39
+ export function absolute(place, path) {
40
+ return join(componentDir(place), ...path.split('/'));
41
+ }
42
+ /** PHP that Talos checks: no Blade template (Blade is not PHP) and nothing Composer installed. */
43
+ export function isCheckedPhp(path) {
44
+ return path.endsWith('.php') && !path.endsWith('.blade.php') && !path.startsWith('vendor/');
45
+ }
46
+ /** The component's tracked PHP sources, relative to its root. */
47
+ export function phpFiles(ctx) {
48
+ const root = component(ctx).root;
49
+ return underRoot(ctx.facts.matching('**/*.php'), root)
50
+ .map((file) => inComponent(root, file))
51
+ .filter((file) => file !== undefined && isCheckedPhp(file));
52
+ }
53
+ const TEST_DIRS = new Set(['tests', 'test']);
54
+ /** Test code as PHPUnit and Pest lay it out: a tests directory, or a file named `*Test.php`. */
55
+ export function isTestPath(path) {
56
+ const parts = path.split('/');
57
+ if (parts.slice(0, -1).some((part) => TEST_DIRS.has(part)))
58
+ return true;
59
+ return (parts.at(-1) ?? '').endsWith('Test.php');
60
+ }
61
+ /** The component's shipped PHP, relative to its root: everything that isn't test code. */
62
+ export function shippedFiles(ctx) {
63
+ return phpFiles(ctx).filter((file) => !isTestPath(file));
64
+ }
65
+ /** Whether the component tracks a file at this component-relative path. */
66
+ export function tracks(ctx, path) {
67
+ return ctx.facts.files.includes(inRepo(component(ctx).root, path));
68
+ }
69
+ export async function fileExists(path) {
70
+ try {
71
+ await access(path);
72
+ return true;
73
+ }
74
+ catch {
75
+ return false;
76
+ }
77
+ }
78
+ //# sourceMappingURL=paths.js.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"paths.js","sourceRoot":"","sources":["../../../src/langs/php/paths.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,kBAAkB,CAAC;AAC1C,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,KAAK,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACvE,OAAO,EAAqC,WAAW,EAAW,MAAM,qBAAqB,CAAC;AAC9F,OAAO,EAAE,SAAS,EAAE,MAAM,qBAAqB,CAAC;AAShD,uFAAuF;AACvF,MAAM,UAAU,SAAS,CAAC,GAAuC;IAC/D,MAAM,KAAK,GAAG,GAAG,CAAC,SAAS,CAAC;IAC5B,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,KAAK,CAAC;IACtC,MAAM,IAAI,WAAW,CAAC,mCAAmC,CAAC,CAAC;AAC7D,CAAC;AAED,2CAA2C;AAC3C,MAAM,UAAU,YAAY,CAAC,KAAwC;IACnE,OAAO,OAAO,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;AACnD,CAAC;AAED,mGAAmG;AACnG,SAAS,MAAM,CAAC,IAAY;IAC1B,MAAM,MAAM,GAAG,KAAK,CAAC,SAAS,CAAC,GAAG,IAAI,GAAG,CAAC,CAAC;IAC3C,OAAO,MAAM,KAAK,IAAI,IAAI,MAAM,KAAK,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;AACvE,CAAC;AAED,iGAAiG;AACjG,MAAM,UAAU,WAAW,CAAC,IAAY,EAAE,IAAY;IACpD,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC;IAC1B,IAAI,IAAI,KAAK,GAAG;QAAE,OAAO,IAAI,CAAC;IAC9B,OAAO,IAAI,CAAC,UAAU,CAAC,GAAG,IAAI,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;AAC/E,CAAC;AAED,0DAA0D;AAC1D,MAAM,UAAU,MAAM,CAAC,IAAY,EAAE,IAAY;IAC/C,OAAO,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,CAAC,CAAC;AACxC,CAAC;AAED,+FAA+F;AAC/F,MAAM,UAAU,QAAQ,CAAC,KAAwC,EAAE,IAAY;IAC7E,MAAM,IAAI,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IAClE,MAAM,SAAS,GAAG,IAAI,CAAC,UAAU,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;IAC7C,OAAO,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;AAChF,CAAC;AAED,+CAA+C;AAC/C,MAAM,UAAU,QAAQ,CAAC,KAAwC,EAAE,IAAY;IAC7E,OAAO,IAAI,CAAC,YAAY,CAAC,KAAK,CAAC,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC;AACvD,CAAC;AAED,kGAAkG;AAClG,MAAM,UAAU,YAAY,CAAC,IAAY;IACvC,OAAO,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC;AAC9F,CAAC;AAED,iEAAiE;AACjE,MAAM,UAAU,QAAQ,CAAC,GAA8C;IACrE,MAAM,IAAI,GAAG,SAAS,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;IACjC,OAAO,SAAS,CAAC,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,UAAU,CAAC,EAAE,IAAI,CAAC;SACnD,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,WAAW,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;SACtC,MAAM,CAAC,CAAC,IAAI,EAAkB,EAAE,CAAC,IAAI,KAAK,SAAS,IAAI,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC;AAChF,CAAC;AAED,MAAM,SAAS,GAAG,IAAI,GAAG,CAAC,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC,CAAC;AAE7C,gGAAgG;AAChG,MAAM,UAAU,UAAU,CAAC,IAAY;IACrC,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC9B,IAAI,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAAE,OAAO,IAAI,CAAC;IACxE,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC;AACnD,CAAC;AAED,0FAA0F;AAC1F,MAAM,UAAU,YAAY,CAAC,GAA8C;IACzE,OAAO,QAAQ,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC;AAC3D,CAAC;AAED,2EAA2E;AAC3E,MAAM,UAAU,MAAM,CAAC,GAA8C,EAAE,IAAY;IACjF,OAAO,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC;AACrE,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,UAAU,CAAC,IAAY;IAC3C,IAAI,CAAC;QACH,MAAM,MAAM,CAAC,IAAI,CAAC,CAAC;QACnB,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC"}
@@ -0,0 +1,91 @@
1
+ import { mkdtemp, readFile, writeFile } from 'node:fs/promises';
2
+ import { join } from 'node:path';
3
+ import { componentDir, fileExists, inComponent, phpFiles, shippedFiles } from './paths.js';
4
+ import { bind, runVendorTool, tail } from './run.js';
5
+ import { topLevel } from './scope.js';
6
+ import { EngineError } from '../../core/check.js';
7
+ /**
8
+ * Pest's JUnit names each test's `file` as `path::test name`; the protocol wants the path alone,
9
+ * as PHPUnit writes it.
10
+ */
11
+ export function normalizeJunit(xml) {
12
+ return xml.replaceAll(/ file="([^"]*)"/g, (_match, file) => {
13
+ const [path = file] = file.split('::');
14
+ return ` file="${path}"`;
15
+ });
16
+ }
17
+ /** Whether a component-relative path is one of `full` (component-relative) or under it. */
18
+ function under(path, full) {
19
+ return full.some((entry) => {
20
+ let end = entry.length;
21
+ while (end > 0 && entry[end - 1] === '/')
22
+ end -= 1;
23
+ const dir = entry.slice(0, end);
24
+ return path === dir || path.startsWith(`${dir}/`);
25
+ });
26
+ }
27
+ /**
28
+ * The test files a request names, relative to the component: the rerun's files, or for the
29
+ * per-commit suite every `*Test.php` outside `tests.full`. Undefined means the whole suite as
30
+ * phpunit.xml declares it; an empty list means nothing to run.
31
+ */
32
+ export function testPaths(ctx, request) {
33
+ const root = ctx.component.root;
34
+ const local = (paths) => paths
35
+ .map((path) => inComponent(root, path))
36
+ .filter((path) => path !== undefined);
37
+ if (request.files !== undefined)
38
+ return local(request.files);
39
+ const full = local(ctx.config.tests.full);
40
+ if (request.suite === 'all' || full.length === 0)
41
+ return undefined;
42
+ return phpFiles(ctx).filter((file) => file.endsWith('Test.php') && !under(file, full));
43
+ }
44
+ /**
45
+ * Coverage of shipped code only: each top-level directory holding shipped PHP is a coverage
46
+ * filter, whatever phpunit.xml's `<source>` says (config-strength reports its exclusions).
47
+ */
48
+ export function coverageArgs(ctx, clover) {
49
+ const { dirs } = topLevel(shippedFiles(ctx));
50
+ return ['--coverage-clover', clover, ...dirs.flatMap((dir) => ['--coverage-filter', dir])];
51
+ }
52
+ async function run(ctx, request) {
53
+ const bound = bind(ctx);
54
+ const paths = testPaths(bound, request);
55
+ if (paths?.length === 0)
56
+ return { exitCode: 0, output: '', junit: [] };
57
+ const dir = await mkdtemp(join(ctx.scratch, 'pest-'));
58
+ const junit = join(dir, 'junit.xml');
59
+ const clover = join(dir, 'clover.xml');
60
+ const base = componentDir(bound);
61
+ const args = ['--colors=never', '--do-not-cache-result', '--log-junit', junit];
62
+ const result = await runVendorTool(bound, 'pest', [
63
+ ...args,
64
+ ...(request.coverage ? coverageArgs(bound, clover) : ['--no-coverage']),
65
+ ...(paths ?? []),
66
+ ], {
67
+ env: { XDEBUG_MODE: request.coverage ? 'coverage' : 'off' },
68
+ ini: request.coverage
69
+ ? { 'pcov.enabled': '1', 'pcov.directory': base }
70
+ : { 'pcov.enabled': '0' },
71
+ });
72
+ if (!(await fileExists(junit))) {
73
+ throw new EngineError(`pest wrote no JUnit report (exit ${result.code}):\n${tail(result)}`);
74
+ }
75
+ await writeFile(junit, normalizeJunit(await readFile(junit, 'utf8')));
76
+ const output = `${result.stdout}\n${result.stderr}`;
77
+ if (!request.coverage)
78
+ return { exitCode: result.code, output, junit: [{ path: junit, base }] };
79
+ if (!(await fileExists(clover))) {
80
+ throw new EngineError('pest wrote no coverage report: the PHP running it needs pcov or Xdebug');
81
+ }
82
+ return {
83
+ exitCode: result.code,
84
+ output,
85
+ junit: [{ path: junit, base }],
86
+ coverage: { path: clover, base, format: 'clover' },
87
+ };
88
+ }
89
+ /** Pest, which runs PHPUnit tests too, for the shared tests and coverage checks. */
90
+ export const pestRunner = { run };
91
+ //# sourceMappingURL=pest.js.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"pest.js","sourceRoot":"","sources":["../../../src/langs/php/pest.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAChE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,YAAY,EAAE,UAAU,EAAE,WAAW,EAAE,QAAQ,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AAC3F,OAAO,EAAE,IAAI,EAAc,aAAa,EAAE,IAAI,EAAE,MAAM,UAAU,CAAC;AACjE,OAAO,EAAE,QAAQ,EAAE,MAAM,YAAY,CAAC;AAEtC,OAAO,EAAE,WAAW,EAAE,MAAM,qBAAqB,CAAC;AAGlD;;;GAGG;AACH,MAAM,UAAU,cAAc,CAAC,GAAW;IACxC,OAAO,GAAG,CAAC,UAAU,CAAC,kBAAkB,EAAE,CAAC,MAAM,EAAE,IAAY,EAAE,EAAE;QACjE,MAAM,CAAC,IAAI,GAAG,IAAI,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QACvC,OAAO,UAAU,IAAI,GAAG,CAAC;IAC3B,CAAC,CAAC,CAAC;AACL,CAAC;AAED,2FAA2F;AAC3F,SAAS,KAAK,CAAC,IAAY,EAAE,IAAuB;IAClD,OAAO,IAAI,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE;QACzB,IAAI,GAAG,GAAG,KAAK,CAAC,MAAM,CAAC;QACvB,OAAO,GAAG,GAAG,CAAC,IAAI,KAAK,CAAC,GAAG,GAAG,CAAC,CAAC,KAAK,GAAG;YAAE,GAAG,IAAI,CAAC,CAAC;QACnD,MAAM,GAAG,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;QAChC,OAAO,IAAI,KAAK,GAAG,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,GAAG,GAAG,CAAC,CAAC;IACpD,CAAC,CAAC,CAAC;AACL,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,SAAS,CACvB,GAAkD,EAClD,OAAoB;IAEpB,MAAM,IAAI,GAAG,GAAG,CAAC,SAAS,CAAC,IAAI,CAAC;IAChC,MAAM,KAAK,GAAG,CAAC,KAAwB,EAAY,EAAE,CACnD,KAAK;SACF,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,WAAW,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;SACtC,MAAM,CAAC,CAAC,IAAI,EAAkB,EAAE,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC;IAC1D,IAAI,OAAO,CAAC,KAAK,KAAK,SAAS;QAAE,OAAO,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;IAC7D,MAAM,IAAI,GAAG,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAC1C,IAAI,OAAO,CAAC,KAAK,KAAK,KAAK,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,SAAS,CAAC;IACnE,OAAO,QAAQ,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC;AACzF,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,YAAY,CAAC,GAAuC,EAAE,MAAc;IAClF,MAAM,EAAE,IAAI,EAAE,GAAG,QAAQ,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,CAAC;IAC7C,OAAO,CAAC,mBAAmB,EAAE,MAAM,EAAE,GAAG,IAAI,CAAC,OAAO,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,mBAAmB,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC;AAC7F,CAAC;AAED,KAAK,UAAU,GAAG,CAAC,GAAiB,EAAE,OAAoB;IACxD,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC;IACxB,MAAM,KAAK,GAAG,SAAS,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;IACxC,IAAI,KAAK,EAAE,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,QAAQ,EAAE,CAAC,EAAE,MAAM,EAAE,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC;IACvE,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC;IACtD,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,EAAE,WAAW,CAAC,CAAC;IACrC,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,EAAE,YAAY,CAAC,CAAC;IACvC,MAAM,IAAI,GAAG,YAAY,CAAC,KAAK,CAAC,CAAC;IACjC,MAAM,IAAI,GAAG,CAAC,gBAAgB,EAAE,uBAAuB,EAAE,aAAa,EAAE,KAAK,CAAC,CAAC;IAC/E,MAAM,MAAM,GAAG,MAAM,aAAa,CAChC,KAAK,EACL,MAAM,EACN;QACE,GAAG,IAAI;QACP,GAAG,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,YAAY,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC;QACvE,GAAG,CAAC,KAAK,IAAI,EAAE,CAAC;KACjB,EACD;QACE,GAAG,EAAE,EAAE,WAAW,EAAE,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,KAAK,EAAE;QAC3D,GAAG,EAAE,OAAO,CAAC,QAAQ;YACnB,CAAC,CAAC,EAAE,cAAc,EAAE,GAAG,EAAE,gBAAgB,EAAE,IAAI,EAAE;YACjD,CAAC,CAAC,EAAE,cAAc,EAAE,GAAG,EAAE;KAC5B,CACF,CAAC;IACF,IAAI,CAAC,CAAC,MAAM,UAAU,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC;QAC/B,MAAM,IAAI,WAAW,CAAC,oCAAoC,MAAM,CAAC,IAAI,OAAO,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;IAC9F,CAAC;IACD,MAAM,SAAS,CAAC,KAAK,EAAE,cAAc,CAAC,MAAM,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC;IACtE,MAAM,MAAM,GAAG,GAAG,MAAM,CAAC,MAAM,KAAK,MAAM,CAAC,MAAM,EAAE,CAAC;IACpD,IAAI,CAAC,OAAO,CAAC,QAAQ;QAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC;IAChG,IAAI,CAAC,CAAC,MAAM,UAAU,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC;QAChC,MAAM,IAAI,WAAW,CAAC,wEAAwE,CAAC,CAAC;IAClG,CAAC;IACD,OAAO;QACL,QAAQ,EAAE,MAAM,CAAC,IAAI;QACrB,MAAM;QACN,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;QAC9B,QAAQ,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE;KACnD,CAAC;AACJ,CAAC;AAED,oFAAoF;AACpF,MAAM,CAAC,MAAM,UAAU,GAAe,EAAE,GAAG,EAAE,CAAC"}
@@ -0,0 +1,58 @@
1
+ import { escapeXml } from '../../core/xml.js';
2
+ export const PHPMD_BASE = 'phpmd.xml';
3
+ export const PHPMD_PROJECT = 'phpmd.project.xml';
4
+ /** Rules the base sets its own limits on, excluded from their rule set's blanket reference. */
5
+ const LIMITS = [
6
+ { rule: 'CyclomaticComplexity', properties: { maximum: '12' } },
7
+ { rule: 'ExcessiveParameterList', properties: { maximum: '4' } },
8
+ { rule: 'ExcessiveMethodLength', properties: { maximum: '60', 'ignore-whitespace': 'true' } },
9
+ { rule: 'ExcessiveClassLength', properties: { maximum: '400', 'ignore-whitespace': 'true' } },
10
+ ];
11
+ function limit(entry) {
12
+ const properties = Object.entries(entry.properties).map(([name, value]) => ` <property name="${name}" value="${value}"/>`);
13
+ return [
14
+ ` <rule ref="rulesets/codesize.xml/${entry.rule}">`,
15
+ ' <properties>',
16
+ ...properties,
17
+ ' </properties>',
18
+ ' </rule>',
19
+ ];
20
+ }
21
+ /**
22
+ * The PHPMD ruleset: cleancode, codesize, design, naming and unusedcode in full, codesize's
23
+ * limits set to the standard ones, then the project's extension. PHPMD 3's limits are maxima:
24
+ * it reports a value above `maximum`. `note` is the generated-file note, empty for the gate's copy.
25
+ */
26
+ export function renderPhpmd(note, project) {
27
+ const head = note === '' ? [] : [`<!-- ${note} -->`];
28
+ return [
29
+ ...head,
30
+ '<ruleset name="Talos">',
31
+ ' <description>Five PHPMD rule sets in full, at the standard limits.</description>',
32
+ ' <!-- StaticAccess forbids every static call, enum cases and named constructors too. -->',
33
+ ' <rule ref="rulesets/cleancode.xml">',
34
+ ' <exclude name="StaticAccess"/>',
35
+ ' </rule>',
36
+ ' <rule ref="rulesets/codesize.xml">',
37
+ ...LIMITS.map((entry) => ` <exclude name="${entry.rule}"/>`),
38
+ ' </rule>',
39
+ ...LIMITS.flatMap((entry) => limit(entry)),
40
+ ' <rule ref="rulesets/design.xml"/>',
41
+ ' <rule ref="rulesets/naming.xml"/>',
42
+ ' <rule ref="rulesets/unusedcode.xml"/>',
43
+ ...(project === undefined ? [] : [` <rule ref="${escapeXml(project)}"/>`]),
44
+ '</ruleset>',
45
+ '',
46
+ ].join('\n');
47
+ }
48
+ /** The extension `talos adopt` writes once: a ruleset of the project's own, empty to start. */
49
+ export function initialPhpmdProject() {
50
+ return [
51
+ `<!-- This project's additions to ${PHPMD_BASE}, which may only tighten it. -->`,
52
+ '<ruleset name="Project">',
53
+ ' <description>Rules this project adds to the Talos base.</description>',
54
+ '</ruleset>',
55
+ '',
56
+ ].join('\n');
57
+ }
58
+ //# sourceMappingURL=phpmd-config.js.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"phpmd-config.js","sourceRoot":"","sources":["../../../src/langs/php/phpmd-config.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,mBAAmB,CAAC;AAE9C,MAAM,CAAC,MAAM,UAAU,GAAG,WAAW,CAAC;AACtC,MAAM,CAAC,MAAM,aAAa,GAAG,mBAAmB,CAAC;AAEjD,+FAA+F;AAC/F,MAAM,MAAM,GAA8E;IACxF,EAAE,IAAI,EAAE,sBAAsB,EAAE,UAAU,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE;IAC/D,EAAE,IAAI,EAAE,wBAAwB,EAAE,UAAU,EAAE,EAAE,OAAO,EAAE,GAAG,EAAE,EAAE;IAChE,EAAE,IAAI,EAAE,uBAAuB,EAAE,UAAU,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,mBAAmB,EAAE,MAAM,EAAE,EAAE;IAC7F,EAAE,IAAI,EAAE,sBAAsB,EAAE,UAAU,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,mBAAmB,EAAE,MAAM,EAAE,EAAE;CAC9F,CAAC;AAEF,SAAS,KAAK,CAAC,KAA8B;IAC3C,MAAM,UAAU,GAAG,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,GAAG,CACrD,CAAC,CAAC,IAAI,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,+BAA+B,IAAI,YAAY,KAAK,KAAK,CAC7E,CAAC;IACF,OAAO;QACL,wCAAwC,KAAK,CAAC,IAAI,IAAI;QACtD,sBAAsB;QACtB,GAAG,UAAU;QACb,uBAAuB;QACvB,aAAa;KACd,CAAC;AACJ,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,WAAW,CAAC,IAAY,EAAE,OAA2B;IACnE,MAAM,IAAI,GAAG,IAAI,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,QAAQ,IAAI,MAAM,CAAC,CAAC;IACrD,OAAO;QACL,GAAG,IAAI;QACP,wBAAwB;QACxB,sFAAsF;QACtF,6FAA6F;QAC7F,yCAAyC;QACzC,wCAAwC;QACxC,aAAa;QACb,wCAAwC;QACxC,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,0BAA0B,KAAK,CAAC,IAAI,KAAK,CAAC;QACnE,aAAa;QACb,GAAG,MAAM,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QAC1C,uCAAuC;QACvC,uCAAuC;QACvC,2CAA2C;QAC3C,GAAG,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,kBAAkB,SAAS,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;QAC7E,YAAY;QACZ,EAAE;KACH,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACf,CAAC;AAED,+FAA+F;AAC/F,MAAM,UAAU,mBAAmB;IACjC,OAAO;QACL,oCAAoC,UAAU,kCAAkC;QAChF,0BAA0B;QAC1B,2EAA2E;QAC3E,YAAY;QACZ,EAAE;KACH,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACf,CAAC"}
@@ -0,0 +1,80 @@
1
+ import { writeFile } from 'node:fs/promises';
2
+ import { join } from 'node:path';
3
+ import { z } from 'zod';
4
+ import { absolute, fileExists, fromTool, isTestPath, phpFiles } from './paths.js';
5
+ import { PHPMD_PROJECT, renderPhpmd } from './phpmd-config.js';
6
+ import { failed, jsonFrom, runVendorTool, sentence } from './run.js';
7
+ import { EngineError } from '../../core/check.js';
8
+ const violation = z.object({
9
+ beginLine: z.number().int(),
10
+ endLine: z.number().int(),
11
+ description: z.string(),
12
+ rule: z.string(),
13
+ });
14
+ const report = z.object({
15
+ files: z.array(z.object({ file: z.string(), violations: z.array(violation) })).default([]),
16
+ errors: z.array(z.object({ fileName: z.string(), message: z.string() })).default([]),
17
+ });
18
+ /** The size limits test code is exempt from, as in every other language. */
19
+ const SIZE_RULES = new Set([
20
+ 'ExcessiveMethodLength',
21
+ 'ExcessiveClassLength',
22
+ 'NcssMethodCount',
23
+ 'NcssTypeCount',
24
+ 'NcssConstructorCount',
25
+ ]);
26
+ /**
27
+ * PHPMD's JSON report as findings. A file PHPMD can't parse is a finding of its own, so a file
28
+ * in syntax its parser doesn't know yet is never left out of linting in silence. `toRepo` makes
29
+ * PHPMD's absolute paths repository-relative; test files keep no size findings.
30
+ */
31
+ export function parsePhpmdJson(json, toRepo) {
32
+ const parsed = report.safeParse(json);
33
+ if (!parsed.success)
34
+ throw new EngineError('PHPMD printed JSON Talos cannot read');
35
+ const violations = parsed.data.files.flatMap(({ file, violations: found }) => {
36
+ const path = toRepo(file);
37
+ return found
38
+ .filter((v) => !(SIZE_RULES.has(v.rule) && isTestPath(path)))
39
+ .map((v) => ({
40
+ rule: `phpmd/${v.rule}`,
41
+ message: sentence(v.description),
42
+ location: { file: path, line: v.beginLine, endLine: Math.max(v.beginLine, v.endLine) },
43
+ }));
44
+ });
45
+ const errors = parsed.data.errors.map((e) => ({
46
+ rule: 'phpmd/parse-error',
47
+ message: sentence(`PHPMD could not read this file: ${e.message.replace(/ in file: .*$/, '')}`),
48
+ location: { file: toRepo(e.fileName), line: 1 },
49
+ }));
50
+ return dedupe([...violations, ...errors]);
51
+ }
52
+ /** The base and an extension can hold the same rule; one violation is one finding. */
53
+ function dedupe(findings) {
54
+ const seen = new Set();
55
+ return findings.filter((f) => {
56
+ const id = JSON.stringify([f.rule, f.message, f.location]);
57
+ if (seen.has(id))
58
+ return false;
59
+ seen.add(id);
60
+ return true;
61
+ });
62
+ }
63
+ /**
64
+ * PHPMD over every checked file with the base ruleset as Talos renders it, which references the
65
+ * project's extension by absolute path when there is one.
66
+ */
67
+ export async function phpmd(ctx) {
68
+ const files = phpFiles(ctx);
69
+ const project = absolute(ctx, PHPMD_PROJECT);
70
+ const ruleset = join(ctx.scratch, 'phpmd.xml');
71
+ await writeFile(ruleset, renderPhpmd('', (await fileExists(project)) ? project : undefined));
72
+ const list = join(ctx.scratch, 'phpmd-files.txt');
73
+ await writeFile(list, `${files.map((file) => absolute(ctx, file)).join('\n')}\n`);
74
+ const args = ['analyze', '--format=json', `--ruleset=${ruleset}`, `--input-file=${list}`];
75
+ const result = await runVendorTool(ctx, 'phpmd', [...args, '--no-progress', '--no-ansi']);
76
+ if (!result.stdout.trimStart().startsWith('{'))
77
+ throw failed('phpmd analyze', result);
78
+ return parsePhpmdJson(jsonFrom(result.stdout, 'phpmd'), (file) => fromTool(ctx, file));
79
+ }
80
+ //# sourceMappingURL=phpmd.js.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"phpmd.js","sourceRoot":"","sources":["../../../src/langs/php/phpmd.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAC7C,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,QAAQ,EAAE,UAAU,EAAE,QAAQ,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,YAAY,CAAC;AAClF,OAAO,EAAE,aAAa,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAC/D,OAAO,EAAc,MAAM,EAAE,QAAQ,EAAE,aAAa,EAAE,QAAQ,EAAE,MAAM,UAAU,CAAC;AACjF,OAAO,EAAE,WAAW,EAAE,MAAM,qBAAqB,CAAC;AAGlD,MAAM,SAAS,GAAG,CAAC,CAAC,MAAM,CAAC;IACzB,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE;IAC3B,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE;IACzB,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE;IACvB,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;CACjB,CAAC,CAAC;AAEH,MAAM,MAAM,GAAG,CAAC,CAAC,MAAM,CAAC;IACtB,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,UAAU,EAAE,CAAC,CAAC,KAAK,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;IAC1F,MAAM,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;CACrF,CAAC,CAAC;AAEH,4EAA4E;AAC5E,MAAM,UAAU,GAAG,IAAI,GAAG,CAAC;IACzB,uBAAuB;IACvB,sBAAsB;IACtB,iBAAiB;IACjB,eAAe;IACf,sBAAsB;CACvB,CAAC,CAAC;AAEH;;;;GAIG;AACH,MAAM,UAAU,cAAc,CAAC,IAAa,EAAE,MAAgC;IAC5E,MAAM,MAAM,GAAG,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;IACtC,IAAI,CAAC,MAAM,CAAC,OAAO;QAAE,MAAM,IAAI,WAAW,CAAC,sCAAsC,CAAC,CAAC;IACnF,MAAM,UAAU,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,KAAK,EAAE,EAAE,EAAE;QAC3E,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC;QAC1B,OAAO,KAAK;aACT,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC;aAC5D,GAAG,CAAC,CAAC,CAAC,EAAW,EAAE,CAAC,CAAC;YACpB,IAAI,EAAE,SAAS,CAAC,CAAC,IAAI,EAAE;YACvB,OAAO,EAAE,QAAQ,CAAC,CAAC,CAAC,WAAW,CAAC;YAChC,QAAQ,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,SAAS,EAAE,OAAO,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS,EAAE,CAAC,CAAC,OAAO,CAAC,EAAE;SACvF,CAAC,CAAC,CAAC;IACR,CAAC,CAAC,CAAC;IACH,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAW,EAAE,CAAC,CAAC;QACrD,IAAI,EAAE,mBAAmB;QACzB,OAAO,EAAE,QAAQ,CAAC,mCAAmC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,eAAe,EAAE,EAAE,CAAC,EAAE,CAAC;QAC9F,QAAQ,EAAE,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE;KAChD,CAAC,CAAC,CAAC;IACJ,OAAO,MAAM,CAAC,CAAC,GAAG,UAAU,EAAE,GAAG,MAAM,CAAC,CAAC,CAAC;AAC5C,CAAC;AAED,sFAAsF;AACtF,SAAS,MAAM,CAAC,QAA4B;IAC1C,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,OAAO,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE;QAC3B,MAAM,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC;QAC3D,IAAI,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;YAAE,OAAO,KAAK,CAAC;QAC/B,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QACb,OAAO,IAAI,CAAC;IACd,CAAC,CAAC,CAAC;AACL,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,KAAK,CAAC,GAAU;IACpC,MAAM,KAAK,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC;IAC5B,MAAM,OAAO,GAAG,QAAQ,CAAC,GAAG,EAAE,aAAa,CAAC,CAAC;IAC7C,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC;IAC/C,MAAM,SAAS,CAAC,OAAO,EAAE,WAAW,CAAC,EAAE,EAAE,CAAC,MAAM,UAAU,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC;IAC7F,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,iBAAiB,CAAC,CAAC;IAClD,MAAM,SAAS,CAAC,IAAI,EAAE,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,QAAQ,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAClF,MAAM,IAAI,GAAG,CAAC,SAAS,EAAE,eAAe,EAAE,aAAa,OAAO,EAAE,EAAE,gBAAgB,IAAI,EAAE,CAAC,CAAC;IAC1F,MAAM,MAAM,GAAG,MAAM,aAAa,CAAC,GAAG,EAAE,OAAO,EAAE,CAAC,GAAG,IAAI,EAAE,eAAe,EAAE,WAAW,CAAC,CAAC,CAAC;IAC1F,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,SAAS,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC;QAAE,MAAM,MAAM,CAAC,eAAe,EAAE,MAAM,CAAC,CAAC;IACtF,OAAO,cAAc,CAAC,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,QAAQ,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC,CAAC;AACzF,CAAC"}
@@ -0,0 +1,100 @@
1
+ import { join } from 'node:path';
2
+ import { toNeon } from './neon.js';
3
+ import { componentDir, fileExists } from './paths.js';
4
+ import { notInstalled } from './run.js';
5
+ import { generatedHeader } from '../../configs/header.js';
6
+ export const PHPSTAN_BASE = 'phpstan.neon';
7
+ export const PHPSTAN_PROJECT = 'phpstan.project.neon';
8
+ /** The extensions every PHP component's analysis includes, in this order. */
9
+ const EXTENSIONS = [
10
+ { pkg: 'phpstan/phpstan-strict-rules', file: 'phpstan/phpstan-strict-rules/rules.neon' },
11
+ {
12
+ pkg: 'tomasvotruba/cognitive-complexity',
13
+ file: 'tomasvotruba/cognitive-complexity/config/extension.neon',
14
+ },
15
+ { pkg: 'shipmonk/dead-code-detector', file: 'shipmonk/dead-code-detector/rules.neon' },
16
+ { pkg: 'pestphp/pest-plugin-phpstan', file: 'pestphp/pest-plugin-phpstan/extension.neon' },
17
+ ];
18
+ /** Laravel's rules, for a component that is a Laravel application. */
19
+ const LARASTAN = {
20
+ pkg: 'larastan/larastan',
21
+ file: 'larastan/larastan/extension.neon',
22
+ };
23
+ export const TYPE_COVERAGE = {
24
+ pkg: 'tomasvotruba/type-coverage',
25
+ file: 'tomasvotruba/type-coverage/config/extension.neon',
26
+ };
27
+ /**
28
+ * Level max, every stricter-analysis switch PHPStan has turned the strict way, strict-rules in
29
+ * full, and the limits. Checked exceptions stay off: TypeScript, which sets the bar, has none.
30
+ */
31
+ export const PHPSTAN_PARAMETERS = {
32
+ level: 'max',
33
+ checkBenevolentUnionTypes: true,
34
+ checkDynamicProperties: true,
35
+ checkExplicitMixedMissingReturn: true,
36
+ checkFunctionNameCase: true,
37
+ checkImplicitMixed: true,
38
+ checkInternalClassCaseSensitivity: true,
39
+ checkMissingCallableSignature: true,
40
+ checkMissingOverrideMethodAttribute: true,
41
+ checkStrictPrintfPlaceholderTypes: true,
42
+ checkTooWideParameterOutInProtectedAndPublicMethods: true,
43
+ checkTooWideReturnTypesInProtectedAndPublicMethods: true,
44
+ checkTooWideThrowTypesInProtectedAndPublicMethods: true,
45
+ checkUninitializedProperties: true,
46
+ inferPrivatePropertyTypeFromConstructor: false,
47
+ polluteScopeWithAlwaysIterableForeach: false,
48
+ polluteScopeWithBlock: false,
49
+ polluteScopeWithLoopInitialAssignments: false,
50
+ rememberPossiblyImpureFunctionValues: false,
51
+ reportAlwaysTrueInLastCondition: true,
52
+ reportAnyTypeWideningInVarTag: true,
53
+ reportIgnoresWithoutComments: true,
54
+ reportMaybesInMethodSignatures: true,
55
+ reportMaybesInPropertyPhpDocTypes: true,
56
+ reportNonIntStringArrayKey: true,
57
+ reportPossiblyNonexistentConstantArrayOffset: true,
58
+ reportPossiblyNonexistentGeneralArrayOffset: true,
59
+ reportStaticMethodSignatures: true,
60
+ reportUnmatchedIgnoredErrors: true,
61
+ reportWrongPhpDocTypeInVarTag: true,
62
+ treatPhpDocTypesAsCertain: true,
63
+ strictRules: { allRules: true },
64
+ cognitive_complexity: { function: 15 },
65
+ shipmonkDeadCode: { reportTransitivelyDeadMethodAsSeparateError: true },
66
+ };
67
+ /** The extensions a component's analysis includes: Larastan only in a Laravel application. */
68
+ export function extensionsFor(laravel) {
69
+ return laravel ? [...EXTENSIONS, LARASTAN] : [...EXTENSIONS];
70
+ }
71
+ /** The committed base: vendor paths relative to it, and the project's extension last. */
72
+ export function renderPhpstanBase(version, laravel) {
73
+ const includes = [
74
+ ...extensionsFor(laravel).map((extension) => `vendor/${extension.file}`),
75
+ PHPSTAN_PROJECT,
76
+ ];
77
+ return (generatedHeader('#', version, PHPSTAN_PROJECT) +
78
+ toNeon({ includes, parameters: PHPSTAN_PARAMETERS }));
79
+ }
80
+ /**
81
+ * The base as the gate runs it, from a scratch directory: absolute includes, each extension
82
+ * checked to be installed, and the project's file only when it exists.
83
+ */
84
+ export async function gateIncludes(place, options) {
85
+ const dir = componentDir(place);
86
+ const extensions = [...extensionsFor(options.laravel), ...(options.extra ?? [])];
87
+ const includes = [];
88
+ for (const extension of extensions) {
89
+ const file = join(dir, 'vendor', ...extension.file.split('/'));
90
+ if (!(await fileExists(file)))
91
+ throw notInstalled(place, extension.pkg);
92
+ if (!options.installed.has(extension.pkg))
93
+ includes.push(file);
94
+ }
95
+ const project = join(dir, PHPSTAN_PROJECT);
96
+ if (options.project && (await fileExists(project)))
97
+ includes.push(project);
98
+ return includes;
99
+ }
100
+ //# sourceMappingURL=phpstan-config.js.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"phpstan-config.js","sourceRoot":"","sources":["../../../src/langs/php/phpstan-config.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAgB,MAAM,EAAE,MAAM,WAAW,CAAC;AACjD,OAAO,EAAE,YAAY,EAAE,UAAU,EAAc,MAAM,YAAY,CAAC;AAClE,OAAO,EAAE,YAAY,EAAE,MAAM,UAAU,CAAC;AACxC,OAAO,EAAE,eAAe,EAAE,MAAM,yBAAyB,CAAC;AAE1D,MAAM,CAAC,MAAM,YAAY,GAAG,cAAc,CAAC;AAC3C,MAAM,CAAC,MAAM,eAAe,GAAG,sBAAsB,CAAC;AAKtD,6EAA6E;AAC7E,MAAM,UAAU,GAAyB;IACvC,EAAE,GAAG,EAAE,8BAA8B,EAAE,IAAI,EAAE,yCAAyC,EAAE;IACxF;QACE,GAAG,EAAE,mCAAmC;QACxC,IAAI,EAAE,yDAAyD;KAChE;IACD,EAAE,GAAG,EAAE,6BAA6B,EAAE,IAAI,EAAE,wCAAwC,EAAE;IACtF,EAAE,GAAG,EAAE,6BAA6B,EAAE,IAAI,EAAE,4CAA4C,EAAE;CAC3F,CAAC;AAEF,sEAAsE;AACtE,MAAM,QAAQ,GAAc;IAC1B,GAAG,EAAE,mBAAmB;IACxB,IAAI,EAAE,kCAAkC;CACzC,CAAC;AAEF,MAAM,CAAC,MAAM,aAAa,GAAc;IACtC,GAAG,EAAE,4BAA4B;IACjC,IAAI,EAAE,kDAAkD;CACzD,CAAC;AAEF;;;GAGG;AACH,MAAM,CAAC,MAAM,kBAAkB,GAAY;IACzC,KAAK,EAAE,KAAK;IACZ,yBAAyB,EAAE,IAAI;IAC/B,sBAAsB,EAAE,IAAI;IAC5B,+BAA+B,EAAE,IAAI;IACrC,qBAAqB,EAAE,IAAI;IAC3B,kBAAkB,EAAE,IAAI;IACxB,iCAAiC,EAAE,IAAI;IACvC,6BAA6B,EAAE,IAAI;IACnC,mCAAmC,EAAE,IAAI;IACzC,iCAAiC,EAAE,IAAI;IACvC,mDAAmD,EAAE,IAAI;IACzD,kDAAkD,EAAE,IAAI;IACxD,iDAAiD,EAAE,IAAI;IACvD,4BAA4B,EAAE,IAAI;IAClC,uCAAuC,EAAE,KAAK;IAC9C,qCAAqC,EAAE,KAAK;IAC5C,qBAAqB,EAAE,KAAK;IAC5B,sCAAsC,EAAE,KAAK;IAC7C,oCAAoC,EAAE,KAAK;IAC3C,+BAA+B,EAAE,IAAI;IACrC,6BAA6B,EAAE,IAAI;IACnC,4BAA4B,EAAE,IAAI;IAClC,8BAA8B,EAAE,IAAI;IACpC,iCAAiC,EAAE,IAAI;IACvC,0BAA0B,EAAE,IAAI;IAChC,4CAA4C,EAAE,IAAI;IAClD,2CAA2C,EAAE,IAAI;IACjD,4BAA4B,EAAE,IAAI;IAClC,4BAA4B,EAAE,IAAI;IAClC,6BAA6B,EAAE,IAAI;IACnC,yBAAyB,EAAE,IAAI;IAC/B,WAAW,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE;IAC/B,oBAAoB,EAAE,EAAE,QAAQ,EAAE,EAAE,EAAE;IACtC,gBAAgB,EAAE,EAAE,2CAA2C,EAAE,IAAI,EAAE;CACxE,CAAC;AAEF,8FAA8F;AAC9F,MAAM,UAAU,aAAa,CAAC,OAAgB;IAC5C,OAAO,OAAO,CAAC,CAAC,CAAC,CAAC,GAAG,UAAU,EAAE,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,UAAU,CAAC,CAAC;AAC/D,CAAC;AAED,yFAAyF;AACzF,MAAM,UAAU,iBAAiB,CAAC,OAAe,EAAE,OAAgB;IACjE,MAAM,QAAQ,GAAG;QACf,GAAG,aAAa,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,UAAU,SAAS,CAAC,IAAI,EAAE,CAAC;QACxE,eAAe;KAChB,CAAC;IACF,OAAO,CACL,eAAe,CAAC,GAAG,EAAE,OAAO,EAAE,eAAe,CAAC;QAC9C,MAAM,CAAC,EAAE,QAAQ,EAAE,UAAU,EAAE,kBAAkB,EAAE,CAAC,CACrD,CAAC;AACJ,CAAC;AAYD;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,YAAY,CAChC,KAAwC,EACxC,OAAoB;IAEpB,MAAM,GAAG,GAAG,YAAY,CAAC,KAAK,CAAC,CAAC;IAChC,MAAM,UAAU,GAAG,CAAC,GAAG,aAAa,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,GAAG,CAAC,OAAO,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,CAAC;IACjF,MAAM,QAAQ,GAAa,EAAE,CAAC;IAC9B,KAAK,MAAM,SAAS,IAAI,UAAU,EAAE,CAAC;QACnC,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,EAAE,QAAQ,EAAE,GAAG,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC;QAC/D,IAAI,CAAC,CAAC,MAAM,UAAU,CAAC,IAAI,CAAC,CAAC;YAAE,MAAM,YAAY,CAAC,KAAK,EAAE,SAAS,CAAC,GAAG,CAAC,CAAC;QACxE,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC;YAAE,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACjE,CAAC;IACD,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,EAAE,eAAe,CAAC,CAAC;IAC3C,IAAI,OAAO,CAAC,OAAO,IAAI,CAAC,MAAM,UAAU,CAAC,OAAO,CAAC,CAAC;QAAE,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IAC3E,OAAO,QAAQ,CAAC;AAClB,CAAC"}