@svp-labs/talos 0.0.0 → 0.1.1

package/dist/engine/local.js

@@ -0,0 +1,90 @@
+import { createHash } from 'node:crypto';
+import { readFile, writeFile } from 'node:fs/promises';
+import { join } from 'node:path';
+import { prepare } from './prepare.js';
+import { runChecks } from './run.js';
+import { CONFIG_FILE, loadConfig } from '../config/load.js';
+import { engineErrors, parseRunResult } from '../core/result.js';
+import { parseDiff } from '../repo/changes.js';
+import { repoFacts } from '../repo/facts.js';
+import { git, inWorktree, showFile, trackedFiles, workingFiles, worktreeDir, } from '../repo/git.js';
+import { createTalosDir, talosPath } from '../repo/talos-dir.js';
+/** The configuration with every component's root as a mutation path. */
+function mutatingAll(config) {
+    return { ...config, mutation: [...new Set(config.components.map((c) => c.root))] };
+}
+/** Prepares a checkout and runs the checks there: one `talos run`. */
+export async function runAt(engine, at) {
+    const loaded = await loadConfig(at.root, at.config);
+    const config = at.mutateAll === true ? mutatingAll(loaded) : loaded;
+    const repo = git(engine.exec, at.root);
+    const files = at.workingTree === true ? await workingFiles(repo) : await trackedFiles(repo);
+    const facts = repoFacts(files, config.exclude);
+    const plan = {
+        root: at.root,
+        sha: at.sha,
+        tiers: at.tiers,
+        os: at.os,
+        side: at.side,
+        config,
+        facts,
+        ...(at.changes ? { changes: at.changes } : {}),
+        ...(at.only ? { only: at.only } : {}),
+        ...(at.config !== undefined && loaded === at.config ? { borrowed: true } : {}),
+    };
+    const prepared = await prepare(engine, plan);
+    try {
+        return await runChecks(engine, { ...plan, failedInstalls: prepared.failedInstalls });
+    }
+    finally {
+        await prepared.release();
+    }
+}
+export async function changesBetween(repo, from, to) {
+    const args = [
+        'diff',
+        '--no-color',
+        '--no-ext-diff',
+        '-U0',
+        '-M',
+        from,
+        ...(to === undefined ? [] : [to]),
+    ];
+    return parseDiff(await repo.run(args));
+}
+function digest(text) {
+    return createHash('sha256').update(text).digest('hex').slice(0, 12);
+}
+/**
+ * What a run's result depends on beyond its commit, tiers, OS and engine: the checks `--only`
+ * names, the change it is judged with (mutation and the lockfile checks judge what it touches),
+ * and the day, since the vendors' feeds move.
+ */
+function circumstances(at) {
+    const changes = at.changes === undefined ? null : [...at.changes.files.values()];
+    const day = new Date().toISOString().slice(0, 10);
+    return digest(JSON.stringify({ only: at.only ?? null, changes, day }));
+}
+/**
+ * A commit's results don't change under the same circumstances; local runs keep them under
+ * `.talos/cache`, unless an engine error spoilt them. A commit judged by the head's `talos.yml` is
+ * kept under that file's digest too.
+ */
+export async function cachedRun(engine, repo, at) {
+    const own = (await showFile(repo, at.sha, CONFIG_FILE)) !== undefined;
+    const borrowed = own || at.config === undefined ? '' : `-${digest(JSON.stringify(at.config))}`;
+    const which = `${at.os}-${at.build ?? engine.version}${borrowed}`;
+    const name = `${at.sha}-${at.tiers.join('+')}-${which}-${circumstances(at)}.json`;
+    try {
+        return parseRunResult(await readFile(talosPath(repo.root, 'cache', name), 'utf8'));
+    }
+    catch {
+        const directory = await worktreeDir(repo, at.sha);
+        const result = await inWorktree(repo, { sha: at.sha, directory }, () => runAt(engine, { ...at, root: directory }));
+        if (engineErrors(result).length === 0) {
+            await writeFile(join(await createTalosDir(repo.root, 'cache'), name), JSON.stringify(result));
+        }
+        return result;
+    }
+}
+//# sourceMappingURL=local.js.map

package/dist/engine/local.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"local.js","sourceRoot":"","sources":["../../src/engine/local.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AACvD,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,OAAO,EAAE,MAAM,cAAc,CAAC;AACvC,OAAO,EAAe,SAAS,EAAa,MAAM,UAAU,CAAC;AAC7D,OAAO,EAAE,WAAW,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC;AAG5D,OAAO,EAAE,YAAY,EAAE,cAAc,EAAkB,MAAM,mBAAmB,CAAC;AACjF,OAAO,EAAkB,SAAS,EAAE,MAAM,oBAAoB,CAAC;AAC/D,OAAO,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAC7C,OAAO,EAEL,GAAG,EACH,UAAU,EACV,QAAQ,EACR,YAAY,EACZ,YAAY,EACZ,WAAW,GACZ,MAAM,gBAAgB,CAAC;AACxB,OAAO,EAAE,cAAc,EAAE,SAAS,EAAE,MAAM,sBAAsB,CAAC;AAkBjE,wEAAwE;AACxE,SAAS,WAAW,CAAC,MAAmB;IACtC,OAAO,EAAE,GAAG,MAAM,EAAE,QAAQ,EAAE,CAAC,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;AACrF,CAAC;AAED,sEAAsE;AACtE,MAAM,CAAC,KAAK,UAAU,KAAK,CAAC,MAAc,EAAE,EAAM;IAChD,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,MAAM,CAAC,CAAC;IACpD,MAAM,MAAM,GAAG,EAAE,CAAC,SAAS,KAAK,IAAI,CAAC,CAAC,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC;IACpE,MAAM,IAAI,GAAG,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC;IACvC,MAAM,KAAK,GAAG,EAAE,CAAC,WAAW,KAAK,IAAI,CAAC,CAAC,CAAC,MAAM,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,MAAM,YAAY,CAAC,IAAI,CAAC,CAAC;IAC5F,MAAM,KAAK,GAAG,SAAS,CAAC,KAAK,EAAE,MAAM,CAAC,OAAO,CAAC,CAAC;IAC/C,MAAM,IAAI,GAAG;QACX,IAAI,EAAE,EAAE,CAAC,IAAI;QACb,GAAG,EAAE,EAAE,CAAC,GAAG;QACX,KAAK,EAAE,EAAE,CAAC,KAAK;QACf,EAAE,EAAE,EAAE,CAAC,EAAE;QACT,IAAI,EAAE,EAAE,CAAC,IAAI;QACb,MAAM;QACN,KAAK;QACL,GAAG,CAAC,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,EAAE,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC9C,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,EAAE,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACrC,GAAG,CAAC,EAAE,CAAC,MAAM,KAAK,SAAS,IAAI,MAAM,KAAK,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC/E,CAAC;IACF,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;IAC7C,IAAI,CAAC;QACH,OAAO,MAAM,SAAS,CAAC,MAAM,EAAE,EAAE,GAAG,IAAI,EAAE,cAAc,EAAE,QAAQ,CAAC,cAAc,EAAE,CAAC,CAAC;IACvF,CAAC;YAAS,CAAC;QACT,MAAM,QAAQ,CAAC,OAAO,EAAE,CAAC;IAC3B,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,IAAS,EAAE,IAAY,EAAE,EAAW;IACvE,MAAM,IAAI,GAAG;QACX,MAAM;QACN,YAAY;QACZ,eAAe;QACf,KAAK;QACL,IAAI;QACJ,IAAI;QACJ,GAAG,CAAC,EAAE,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;KAClC,CAAC;IACF,OAAO,SAAS,CAAC,MAAM,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC;AACzC,CAAC;AAED,SAAS,MAAM,CAAC,IAAY;IAC1B,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;AACtE,CAAC;AAOD;;;;GAIG;AACH,SAAS,aAAa,CAAC,EAAY;IACjC,MAAM,OAAO,GAAG,EAAE,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC;IACjF,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IAClD,OAAO,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,EAAE,CAAC,IAAI,IAAI,IAAI,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC;AACzE,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,SAAS,CAAC,MAAc,EAAE,IAAS,EAAE,EAAY;IACrE,MAAM,GAAG,GAAG,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,EAAE,CAAC,GAAG,EAAE,WAAW,CAAC,CAAC,KAAK,SAAS,CAAC;IACtE,MAAM,QAAQ,GAAG,GAAG,IAAI,EAAE,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC;IAC/F,MAAM,KAAK,GAAG,GAAG,EAAE,CAAC,EAAE,IAAI,EAAE,CAAC,KAAK,IAAI,MAAM,CAAC,OAAO,GAAG,QAAQ,EAAE,CAAC;IAClE,MAAM,IAAI,GAAG,GAAG,EAAE,CAAC,GAAG,IAAI,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,KAAK,IAAI,aAAa,CAAC,EAAE,CAAC,OAAO,CAAC;IAClF,IAAI,CAAC;QACH,OAAO,cAAc,CAAC,MAAM,QAAQ,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC;IACrF,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,SAAS,GAAG,MAAM,WAAW,CAAC,IAAI,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC;QAClD,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,IAAI,EAAE,EAAE,GAAG,EAAE,EAAE,CAAC,GAAG,EAAE,SAAS,EAAE,EAAE,GAAG,EAAE,CACrE,KAAK,CAAC,MAAM,EAAE,EAAE,GAAG,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,CAC1C,CAAC;QACF,IAAI,YAAY,CAAC,MAAM,CAAC,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACtC,MAAM,SAAS,CAAC,IAAI,CAAC,MAAM,cAAc,CAAC,IAAI,CAAC,IAAI,EAAE,OAAO,CAAC,EAAE,IAAI,CAAC,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC;QAChG,CAAC;QACD,OAAO,MAAM,CAAC;IAChB,CAAC;AACH,CAAC"}

package/dist/engine/plan.js

@@ -0,0 +1,165 @@
+import { posix } from 'node:path';
+import { z } from 'zod';
+import { compareVersions } from '../checks/runtime/versions.js';
+import { CONFIG_FILE, ConfigError, parseConfig } from '../config/load.js';
+import { mergeBase, revList, revParse, showFile } from '../repo/git.js';
+/** The oldest PHP the PHP toolchain installs on: a run that needs PHP never gets an older one. */
+const PHP_FLOOR = '8.4';
+const pullRequestEvent = z.object({
+    pull_request: z.object({
+        draft: z.boolean().default(false),
+        base: z.object({ sha: z.string() }),
+        head: z.object({ sha: z.string(), ref: z.string() }),
+        user: z.object({ login: z.string() }).nullish(),
+    }),
+});
+const mergeGroupEvent = z.object({
+    merge_group: z.object({ base_sha: z.string(), head_sha: z.string(), head_ref: z.string() }),
+});
+/** A constraint Composer can read; any other value (`false` hides the platform PHP) asks none. */
+const constraint = z.string().optional().catch(undefined);
+/** The PHP a `composer.json` asks for: `config.platform.php`, else `require.php`. */
+const composerPhp = z.object({
+    config: z.object({ platform: z.object({ php: constraint }).optional() }).optional(),
+    require: z.object({ php: constraint }).optional(),
+});
+/** The first minor a version constraint names: `8.5` of `^8.5`, `8.4` of `~8.4.1 || ^8.5`. */
+function firstMinor(range) {
+    for (const release of range.split(/[^\d.]+/)) {
+        const [major, minor] = release.split('.');
+        if (major && minor)
+            return `${major}.${minor}`;
+    }
+    return undefined;
+}
+/** The minor of PHP a `composer.json` asks for, or nothing. */
+function minorAsked(text) {
+    let json;
+    try {
+        json = JSON.parse(text);
+    }
+    catch {
+        return undefined;
+    }
+    const asked = composerPhp.safeParse(json).data;
+    return firstMinor(asked?.config?.platform?.php ?? asked?.require?.php ?? '');
+}
+/**
+ * The components `talos.yml` declares at a commit, each PHP one with the minor its
+ * `composer.json` there asks for. A commit with no `talos.yml`, such as the base of the PR that
+ * adopts Talos, takes the head's, as its run does; one whose `talos.yml` can't be read declares
+ * none, so its run sets nothing up and reports the file itself.
+ */
+async function componentsAt(repo, sha, head) {
+    const text = (await showFile(repo, sha, CONFIG_FILE)) ?? (await showFile(repo, head, CONFIG_FILE));
+    if (text === undefined)
+        return [];
+    let config;
+    try {
+        config = parseConfig(text);
+    }
+    catch (error) {
+        if (error instanceof ConfigError)
+            return [];
+        throw error;
+    }
+    return Promise.all(config.components.map(async ({ lang, root, os }) => {
+        if (lang !== 'php')
+            return { lang, os };
+        const composer = await showFile(repo, sha, posix.join(root, 'composer.json'));
+        const php = composer === undefined ? undefined : minorAsked(composer);
+        return php === undefined ? { lang, os } : { lang, os, php };
+    }));
+}
+function needsOn(components, os) {
+    const here = components.filter((c) => c.os.includes(os));
+    const langs = [...new Set(here.map((c) => c.lang))];
+    if (!langs.includes('php'))
+        return { langs, php: '' };
+    const php = here.reduce((newest, { php: asked }) => asked !== undefined && compareVersions(asked, newest) > 0 ? asked : newest, PHP_FLOOR);
+    return { langs, php };
+}
+function osesOf(config) {
+    const all = new Set(['linux']);
+    for (const component of config.components)
+        for (const os of component.os)
+            all.add(os);
+    return [...all];
+}
+async function runsFor(repo, range, oses) {
+    const { mode, base, head, commits } = range;
+    const both = ['commit', 'head'];
+    const middle = mode === 'draft' ? [] : commits.filter((sha) => sha !== head);
+    const judged = [
+        { sha: base, tiers: both },
+        ...middle.map((sha) => ({ sha, tiers: ['commit'] })),
+        { sha: head, tiers: both },
+    ];
+    const declared = await Promise.all(judged.map(async (run) => ({ ...run, components: await componentsAt(repo, run.sha, head) })));
+    return oses.flatMap((os) => declared.map(({ components, ...run }) => ({ ...run, os, ...needsOn(components, os) })));
+}
+/** Plans the gate's runs from the event GitHub delivered (`GITHUB_EVENT_PATH`). */
+export async function planFromEvent(eventName, payload, repo, config) {
+    let mode;
+    let tipOfBase;
+    let head;
+    let branch;
+    let author;
+    if (eventName === 'merge_group') {
+        const event = mergeGroupEvent.parse(payload).merge_group;
+        mode = 'merge-group';
+        tipOfBase = event.base_sha;
+        head = event.head_sha;
+    }
+    else if (eventName === 'pull_request' || eventName === 'pull_request_target') {
+        const event = pullRequestEvent.parse(payload).pull_request;
+        mode = event.draft ? 'draft' : 'ready';
+        tipOfBase = event.base.sha;
+        head = event.head.sha;
+        branch = event.head.ref;
+        author = event.user?.login;
+    }
+    else {
+        throw new Error(`the gate runs on pull_request and merge_group, not ${eventName}`);
+    }
+    const plan = await planRange(repo, config, {
+        mode,
+        tipOfBase,
+        head,
+        ...(branch ? { branch } : {}),
+    });
+    return author === undefined ? plan : { ...plan, author };
+}
+/**
+ * Plans the runs between the base and a head: on every OS `config` declares, each judged commit
+ * with what its own `talos.yml` says the run needs, since base and head may differ.
+ */
+export async function planRange(repo, config, range) {
+    const head = await revParse(repo, range.head);
+    const base = await mergeBase(repo, range.tipOfBase, head);
+    const commits = range.mode === 'draft' ? [] : await revList(repo, base, head);
+    return {
+        mode: range.mode,
+        base,
+        head,
+        commits,
+        ...(range.branch ? { branch: range.branch } : {}),
+        runs: await runsFor(repo, { mode: range.mode, base, head, commits }, osesOf(config)),
+    };
+}
+export const gatePlanSchema = z.object({
+    mode: z.enum(['draft', 'ready', 'merge-group']),
+    base: z.string(),
+    head: z.string(),
+    commits: z.array(z.string()),
+    branch: z.string().optional(),
+    author: z.string().optional(),
+    runs: z.array(z.object({
+        sha: z.string(),
+        tiers: z.array(z.enum(['commit', 'head'])),
+        os: z.enum(['linux', 'windows', 'macos']),
+        langs: z.array(z.enum(['ts', 'py', 'php', 'lua', 'rust'])),
+        php: z.string(),
+    })),
+});
+//# sourceMappingURL=plan.js.map

package/dist/engine/plan.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"plan.js","sourceRoot":"","sources":["../../src/engine/plan.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,MAAM,WAAW,CAAC;AAClC,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,eAAe,EAAE,MAAM,+BAA+B,CAAC;AAChE,OAAO,EAAE,WAAW,EAAE,WAAW,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAG1E,OAAO,EAAY,SAAS,EAAE,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,gBAAgB,CAAC;AASlF,kGAAkG;AAClG,MAAM,SAAS,GAAG,KAAK,CAAC;AAyBxB,MAAM,gBAAgB,GAAG,CAAC,CAAC,MAAM,CAAC;IAChC,YAAY,EAAE,CAAC,CAAC,MAAM,CAAC;QACrB,KAAK,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC;QACjC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC;QACnC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC;QACpD,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,OAAO,EAAE;KAChD,CAAC;CACH,CAAC,CAAC;AAEH,MAAM,eAAe,GAAG,CAAC,CAAC,MAAM,CAAC;IAC/B,WAAW,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC;CAC5F,CAAC,CAAC;AAEH,kGAAkG;AAClG,MAAM,UAAU,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;AAE1D,qFAAqF;AACrF,MAAM,WAAW,GAAG,CAAC,CAAC,MAAM,CAAC;IAC3B,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,GAAG,EAAE,UAAU,EAAE,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,QAAQ,EAAE;IACnF,OAAO,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,GAAG,EAAE,UAAU,EAAE,CAAC,CAAC,QAAQ,EAAE;CAClD,CAAC,CAAC;AAIH,8FAA8F;AAC9F,SAAS,UAAU,CAAC,KAAa;IAC/B,KAAK,MAAM,OAAO,IAAI,KAAK,CAAC,KAAK,CAAC,SAAS,CAAC,EAAE,CAAC;QAC7C,MAAM,CAAC,KAAK,EAAE,KAAK,CAAC,GAAG,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAC1C,IAAI,KAAK,IAAI,KAAK;YAAE,OAAO,GAAG,KAAK,IAAI,KAAK,EAAE,CAAC;IACjD,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,+DAA+D;AAC/D,SAAS,UAAU,CAAC,IAAY;IAC9B,IAAI,IAAa,CAAC;IAClB,IAAI,CAAC;QACH,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAC1B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,MAAM,KAAK,GAAG,WAAW,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC;IAC/C,OAAO,UAAU,CAAC,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,GAAG,IAAI,KAAK,EAAE,OAAO,EAAE,GAAG,IAAI,EAAE,CAAC,CAAC;AAC/E,CAAC;AAED;;;;;GAKG;AACH,KAAK,UAAU,YAAY,CAAC,IAAS,EAAE,GAAW,EAAE,IAAY;IAC9D,MAAM,IAAI,GACR,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,GAAG,EAAE,WAAW,CAAC,CAAC,IAAI,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,IAAI,EAAE,WAAW,CAAC,CAAC,CAAC;IACxF,IAAI,IAAI,KAAK,SAAS;QAAE,OAAO,EAAE,CAAC;IAClC,IAAI,MAAmB,CAAC;IACxB,IAAI,CAAC;QACH,MAAM,GAAG,WAAW,CAAC,IAAI,CAAC,CAAC;IAC7B,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,KAAK,YAAY,WAAW;YAAE,OAAO,EAAE,CAAC;QAC5C,MAAM,KAAK,CAAC;IACd,CAAC;IACD,OAAO,OAAO,CAAC,GAAG,CAChB,MAAM,CAAC,UAAU,CAAC,GAAG,CAAC,KAAK,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,EAAE,EAAsB,EAAE;QACrE,IAAI,IAAI,KAAK,KAAK;YAAE,OAAO,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC;QACxC,MAAM,QAAQ,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,GAAG,EAAE,KAAK,CAAC,IAAI,CAAC,IAAI,EAAE,eAAe,CAAC,CAAC,CAAC;QAC9E,MAAM,GAAG,GAAG,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC;QACtE,OAAO,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,EAAE,EAAE,GAAG,EAAE,CAAC;IAC9D,CAAC,CAAC,CACH,CAAC;AACJ,CAAC;AAED,SAAS,OAAO,CAAC,UAAgC,EAAE,EAAM;IACvD,MAAM,IAAI,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC;IACzD,MAAM,KAAK,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACpD,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC;QAAE,OAAO,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE,EAAE,CAAC;IACtD,MAAM,GAAG,GAAG,IAAI,CAAC,MAAM,CACrB,CAAC,MAAM,EAAE,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE,EAAE,CACzB,KAAK,KAAK,SAAS,IAAI,eAAe,CAAC,KAAK,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAC5E,SAAS,CACV,CAAC;IACF,OAAO,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC;AACxB,CAAC;AAED,SAAS,MAAM,CAAC,MAAmB;IACjC,MAAM,GAAG,GAAG,IAAI,GAAG,CAAK,CAAC,OAAO,CAAC,CAAC,CAAC;IACnC,KAAK,MAAM,SAAS,IAAI,MAAM,CAAC,UAAU;QAAE,KAAK,MAAM,EAAE,IAAI,SAAS,CAAC,EAAE;YAAE,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IACtF,OAAO,CAAC,GAAG,GAAG,CAAC,CAAC;AAClB,CAAC;AAED,KAAK,UAAU,OAAO,CACpB,IAAS,EACT,KAA6E,EAC7E,IAAmB;IAEnB,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,KAAK,CAAC;IAC5C,MAAM,IAAI,GAAW,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;IACxC,MAAM,MAAM,GAAG,IAAI,KAAK,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,KAAK,IAAI,CAAC,CAAC;IAC7E,MAAM,MAAM,GAAG;QACb,EAAE,GAAG,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE;QAC1B,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,EAAE,KAAK,EAAE,CAAC,QAAQ,CAAW,EAAE,CAAC,CAAC;QAC9D,EAAE,GAAG,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE;KAC3B,CAAC;IACF,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,GAAG,CAChC,MAAM,CAAC,GAAG,CAAC,KAAK,EAAE,GAAG,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,GAAG,EAAE,UAAU,EAAE,MAAM,YAAY,CAAC,IAAI,EAAE,GAAG,CAAC,GAAG,EAAE,IAAI,CAAC,EAAE,CAAC,CAAC,CAC7F,CAAC;IACF,OAAO,IAAI,CAAC,OAAO,CAAC,CAAC,EAAE,EAAE,EAAE,CACzB,QAAQ,CAAC,GAAG,CAAC,CAAC,EAAE,UAAU,EAAE,GAAG,GAAG,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,GAAG,EAAE,EAAE,EAAE,GAAG,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC,EAAE,CAAC,CAAC,CACvF,CAAC;AACJ,CAAC;AAED,mFAAmF;AACnF,MAAM,CAAC,KAAK,UAAU,aAAa,CACjC,SAAiB,EACjB,OAAgB,EAChB,IAAS,EACT,MAAmB;IAEnB,IAAI,IAAU,CAAC;IACf,IAAI,SAAiB,CAAC;IACtB,IAAI,IAAY,CAAC;IACjB,IAAI,MAA0B,CAAC;IAC/B,IAAI,MAA0B,CAAC;IAC/B,IAAI,SAAS,KAAK,aAAa,EAAE,CAAC;QAChC,MAAM,KAAK,GAAG,eAAe,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,WAAW,CAAC;QACzD,IAAI,GAAG,aAAa,CAAC;QACrB,SAAS,GAAG,KAAK,CAAC,QAAQ,CAAC;QAC3B,IAAI,GAAG,KAAK,CAAC,QAAQ,CAAC;IACxB,CAAC;SAAM,IAAI,SAAS,KAAK,cAAc,IAAI,SAAS,KAAK,qBAAqB,EAAE,CAAC;QAC/E,MAAM,KAAK,GAAG,gBAAgB,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,YAAY,CAAC;QAC3D,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC;QACvC,SAAS,GAAG,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC;QAC3B,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC;QACtB,MAAM,GAAG,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC;QACxB,MAAM,GAAG,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC;IAC7B,CAAC;SAAM,CAAC;QACN,MAAM,IAAI,KAAK,CAAC,sDAAsD,SAAS,EAAE,CAAC,CAAC;IACrF,CAAC;IACD,MAAM,IAAI,GAAG,MAAM,SAAS,CAAC,IAAI,EAAE,MAAM,EAAE;QACzC,IAAI;QACJ,SAAS;QACT,IAAI;QACJ,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC9B,CAAC,CAAC;IACH,OAAO,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,GAAG,IAAI,EAAE,MAAM,EAAE,CAAC;AAC3D,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,SAAS,CAC7B,IAAS,EACT,MAAmB,EACnB,KAAuE;IAEvE,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;IAC9C,MAAM,IAAI,GAAG,MAAM,SAAS,CAAC,IAAI,EAAE,KAAK,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;IAC1D,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,KAAK,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,OAAO,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;IAC9E,OAAO;QACL,IAAI,EAAE,KAAK,CAAC,IAAI;QAChB,IAAI;QACJ,IAAI;QACJ,OAAO;QACP,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACjD,IAAI,EAAE,MAAM,OAAO,CAAC,IAAI,EAAE,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC;KACrF,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,MAAM,cAAc,GAAG,CAAC,CAAC,MAAM,CAAC;IACrC,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,OAAO,EAAE,aAAa,CAAC,CAAC;IAC/C,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;IAChB,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;IAChB,OAAO,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;IAC5B,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC7B,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC7B,IAAI,EAAE,CAAC,CAAC,KAAK,CACX,CAAC,CAAC,MAAM,CAAC;QACP,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE;QACf,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC,CAAC;QAC1C,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,SAAS,EAAE,OAAO,CAAC,CAAC;QACzC,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC;QAC1D,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE;KAChB,CAAC,CACH;CACF,CAAC,CAAC"}

package/dist/engine/prepare.js

@@ -0,0 +1,140 @@
+import { mkdir, writeFile } from 'node:fs/promises';
+import { connect } from 'node:net';
+import { dirname, join } from 'node:path';
+import { installKey } from './run.js';
+import { execOk } from '../exec/exec.js';
+function componentPath(component, path) {
+    return component === undefined || component.root === '.' ? path : `${component.root}/${path}`;
+}
+/** Every generated file that applies to the repository or one of its components. */
+export function generatedTargets(packs, ctx) {
+    return packs.flatMap((pack) => (pack.generated ?? []).flatMap((file) => {
+        if (file.scope === 'repo')
+            return file.applies(ctx) ? [{ file }] : [];
+        return ctx.config.components
+            .filter((c) => (file.langs ?? []).includes(c.lang))
+            .filter((component) => file.applies({ ...ctx, component }))
+            .map((component) => ({ file, component }));
+    }));
+}
+export function targetPath(target) {
+    return componentPath(target.component, target.file.path);
+}
+/** The gate never trusts the repository's copy of a base config: it writes its own. */
+async function writeGenerated(engine, plan) {
+    const ctx = { facts: plan.facts, config: plan.config, side: plan.side, tiers: plan.tiers };
+    for (const target of generatedTargets(engine.packs, ctx)) {
+        const path = join(plan.root, targetPath(target));
+        const content = target.file.render({
+            config: plan.config,
+            facts: plan.facts,
+            version: engine.version,
+            ...(target.component ? { component: target.component } : {}),
+        });
+        await mkdir(dirname(path), { recursive: true });
+        await writeFile(path, content);
+    }
+}
+/** Installs every component; one that fails is an engine error for its own checks only. */
+async function installComponents(engine, plan) {
+    const failed = new Map();
+    for (const component of plan.config.components.filter((c) => c.os.includes(plan.os))) {
+        const pack = engine.packs.find((p) => p.lang === component.lang);
+        try {
+            await pack?.install?.({
+                root: plan.root,
+                component,
+                config: plan.config,
+                exec: engine.exec,
+                tools: engine.tools,
+                log: engine.log,
+                os: plan.os,
+            });
+        }
+        catch (error) {
+            const reason = error instanceof Error ? error.message : String(error);
+            failed.set(installKey(component), `installing ${component.lang} at ${component.root}: ${reason}`);
+        }
+    }
+    return failed;
+}
+async function portOpen(port) {
+    return new Promise((resolve) => {
+        const socket = connect({ host: '127.0.0.1', port });
+        socket.once('connect', () => {
+            socket.destroy();
+            resolve(true);
+        });
+        socket.once('error', () => {
+            resolve(false);
+        });
+    });
+}
+async function waitForPort(port, timeoutMs) {
+    const deadline = Date.now() + timeoutMs;
+    while (Date.now() < deadline) {
+        if (await portOpen(port))
+            return;
+        await new Promise((resolve) => setTimeout(resolve, 500));
+    }
+    throw new Error(`a declared service did not open port ${port} within ${timeoutMs / 1000} s`);
+}
+async function exposedPorts(engine, image, root) {
+    await execOk(engine.exec, 'docker', ['pull', '--quiet', image], { cwd: root });
+    const out = await execOk(engine.exec, 'docker', ['image', 'inspect', '--format', '{{json .Config.ExposedPorts}}', image], { cwd: root });
+    const ports = JSON.parse(out.trim() || 'null');
+    return Object.keys(ports ?? {})
+        .map((key) => Number.parseInt(key, 10))
+        .filter((p) => p > 0);
+}
+/** Starts the services `talos.yml` declares, pinned by digest; Linux only. */
+async function startServices(engine, plan) {
+    const env = {};
+    const ids = [];
+    const services = Object.entries(plan.config.services);
+    if (services.length > 0 && plan.os !== 'linux') {
+        engine.log.warn(`services run on Linux only; ${plan.os} runs without them`);
+        return { env, ids };
+    }
+    for (const [name, service] of services) {
+        const ports = service.ports.length > 0
+            ? service.ports
+            : await exposedPorts(engine, service.image, plan.root);
+        const args = ['run', '-d', '--rm', ...ports.flatMap((p) => ['-p', `127.0.0.1:${p}:${p}`])];
+        for (const [key, value] of Object.entries(service.env))
+            args.push('-e', `${key}=${value}`);
+        const id = (await execOk(engine.exec, 'docker', [...args, service.image], { cwd: plan.root })).trim();
+        ids.push(id);
+        const upper = name.toUpperCase().replaceAll('-', '_');
+        env[`TALOS_SERVICE_${upper}_HOST`] = '127.0.0.1';
+        if (ports[0] !== undefined)
+            env[`TALOS_SERVICE_${upper}_PORT`] = String(ports[0]);
+        for (const port of ports)
+            await waitForPort(port, 120_000);
+    }
+    return { env, ids };
+}
+async function runSetupScript(engine, plan, env) {
+    if (plan.config.setup === undefined)
+        return;
+    const script = join(plan.root, plan.config.setup);
+    const shell = plan.os === 'windows' ? 'bash.exe' : 'bash';
+    await execOk(engine.exec, shell, [script], { cwd: plan.root, env, timeoutMs: 60 * 60 * 1000 });
+}
+/** Everything before the checks: generated configs, services, dependencies, the setup script. */
+export async function prepare(engine, plan) {
+    await writeGenerated(engine, plan);
+    const { env, ids } = await startServices(engine, plan);
+    Object.assign(process.env, env);
+    const failedInstalls = await installComponents(engine, plan);
+    await runSetupScript(engine, plan, env);
+    return {
+        env,
+        failedInstalls,
+        release: async () => {
+            for (const id of ids)
+                await engine.exec('docker', ['rm', '-f', id], { cwd: plan.root });
+        },
+    };
+}
+//# sourceMappingURL=prepare.js.map

package/dist/engine/prepare.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"prepare.js","sourceRoot":"","sources":["../../src/engine/prepare.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AACpD,OAAO,EAAE,OAAO,EAAE,MAAM,UAAU,CAAC;AACnC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAC1C,OAAO,EAAe,UAAU,EAAgB,MAAM,UAAU,CAAC;AAGjE,OAAO,EAAE,MAAM,EAAE,MAAM,iBAAiB,CAAC;AAUzC,SAAS,aAAa,CAAC,SAAgC,EAAE,IAAY;IACnE,OAAO,SAAS,KAAK,SAAS,IAAI,SAAS,CAAC,IAAI,KAAK,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,SAAS,CAAC,IAAI,IAAI,IAAI,EAAE,CAAC;AAChG,CAAC;AAID,oFAAoF;AACpF,MAAM,UAAU,gBAAgB,CAAC,KAAsB,EAAE,GAAiB;IACxE,OAAO,KAAK,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,EAAE,CAC5B,CAAC,IAAI,CAAC,SAAS,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,EAAY,EAAE;QAChD,IAAI,IAAI,CAAC,KAAK,KAAK,MAAM;YAAE,OAAO,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QACtE,OAAO,GAAG,CAAC,MAAM,CAAC,UAAU;aACzB,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;aAClD,MAAM,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,GAAG,GAAG,EAAE,SAAS,EAAE,CAAC,CAAC;aAC1D,GAAG,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC;IAC/C,CAAC,CAAC,CACH,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,UAAU,CAAC,MAAc;IACvC,OAAO,aAAa,CAAC,MAAM,CAAC,SAAS,EAAE,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC3D,CAAC;AAED,uFAAuF;AACvF,KAAK,UAAU,cAAc,CAAC,MAAc,EAAE,IAAa;IACzD,MAAM,GAAG,GAAG,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,CAAC;IAC3F,KAAK,MAAM,MAAM,IAAI,gBAAgB,CAAC,MAAM,CAAC,KAAK,EAAE,GAAG,CAAC,EAAE,CAAC;QACzD,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC;QACjD,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC;YACjC,MAAM,EAAE,IAAI,CAAC,MAAM;YACnB,KAAK,EAAE,IAAI,CAAC,KAAK;YACjB,OAAO,EAAE,MAAM,CAAC,OAAO;YACvB,GAAG,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,MAAM,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAC7D,CAAC,CAAC;QACH,MAAM,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAChD,MAAM,SAAS,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;IACjC,CAAC;AACH,CAAC;AAED,2FAA2F;AAC3F,KAAK,UAAU,iBAAiB,CAAC,MAAc,EAAE,IAAa;IAC5D,MAAM,MAAM,GAAG,IAAI,GAAG,EAAkB,CAAC;IACzC,KAAK,MAAM,SAAS,IAAI,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC;QACrF,MAAM,IAAI,GAAG,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,SAAS,CAAC,IAAI,CAAC,CAAC;QACjE,IAAI,CAAC;YACH,MAAM,IAAI,EAAE,OAAO,EAAE,CAAC;gBACpB,IAAI,EAAE,IAAI,CAAC,IAAI;gBACf,SAAS;gBACT,MAAM,EAAE,IAAI,CAAC,MAAM;gBACnB,IAAI,EAAE,MAAM,CAAC,IAAI;gBACjB,KAAK,EAAE,MAAM,CAAC,KAAK;gBACnB,GAAG,EAAE,MAAM,CAAC,GAAG;gBACf,EAAE,EAAE,IAAI,CAAC,EAAE;aACZ,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,MAAM,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YACtE,MAAM,CAAC,GAAG,CACR,UAAU,CAAC,SAAS,CAAC,EACrB,cAAc,SAAS,CAAC,IAAI,OAAO,SAAS,CAAC,IAAI,KAAK,MAAM,EAAE,CAC/D,CAAC;QACJ,CAAC;IACH,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,KAAK,UAAU,QAAQ,CAAC,IAAY;IAClC,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;QAC7B,MAAM,MAAM,GAAG,OAAO,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC,CAAC;QACpD,MAAM,CAAC,IAAI,CAAC,SAAS,EAAE,GAAG,EAAE;YAC1B,MAAM,CAAC,OAAO,EAAE,CAAC;YACjB,OAAO,CAAC,IAAI,CAAC,CAAC;QAChB,CAAC,CAAC,CAAC;QACH,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,EAAE;YACxB,OAAO,CAAC,KAAK,CAAC,CAAC;QACjB,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC;AAED,KAAK,UAAU,WAAW,CAAC,IAAY,EAAE,SAAiB;IACxD,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,CAAC;IACxC,OAAO,IAAI,CAAC,GAAG,EAAE,GAAG,QAAQ,EAAE,CAAC;QAC7B,IAAI,MAAM,QAAQ,CAAC,IAAI,CAAC;YAAE,OAAO;QACjC,MAAM,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC,CAAC;IAC3D,CAAC;IACD,MAAM,IAAI,KAAK,CAAC,wCAAwC,IAAI,WAAW,SAAS,GAAG,IAAI,IAAI,CAAC,CAAC;AAC/F,CAAC;AAED,KAAK,UAAU,YAAY,CAAC,MAAc,EAAE,KAAa,EAAE,IAAY;IACrE,MAAM,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,QAAQ,EAAE,CAAC,MAAM,EAAE,SAAS,EAAE,KAAK,CAAC,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC,CAAC;IAC/E,MAAM,GAAG,GAAG,MAAM,MAAM,CACtB,MAAM,CAAC,IAAI,EACX,QAAQ,EACR,CAAC,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,+BAA+B,EAAE,KAAK,CAAC,EACxE,EAAE,GAAG,EAAE,IAAI,EAAE,CACd,CAAC;IACF,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,EAAE,IAAI,MAAM,CAAmC,CAAC;IACjF,OAAO,MAAM,CAAC,IAAI,CAAC,KAAK,IAAI,EAAE,CAAC;SAC5B,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;SACtC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;AAC1B,CAAC;AAED,8EAA8E;AAC9E,KAAK,UAAU,aAAa,CAC1B,MAAc,EACd,IAAa;IAEb,MAAM,GAAG,GAA2B,EAAE,CAAC;IACvC,MAAM,GAAG,GAAa,EAAE,CAAC;IACzB,MAAM,QAAQ,GAAG,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;IACtD,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,IAAI,IAAI,CAAC,EAAE,KAAK,OAAO,EAAE,CAAC;QAC/C,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,+BAA+B,IAAI,CAAC,EAAE,oBAAoB,CAAC,CAAC;QAC5E,OAAO,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC;IACtB,CAAC;IACD,KAAK,MAAM,CAAC,IAAI,EAAE,OAAO,CAAC,IAAI,QAAQ,EAAE,CAAC;QACvC,MAAM,KAAK,GACT,OAAO,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC;YACtB,CAAC,CAAC,OAAO,CAAC,KAAK;YACf,CAAC,CAAC,MAAM,YAAY,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC;QAC3D,MAAM,IAAI,GAAG,CAAC,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,aAAa,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;QAC3F,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC;YAAE,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,GAAG,GAAG,IAAI,KAAK,EAAE,CAAC,CAAC;QAC3F,MAAM,EAAE,GAAG,CACT,MAAM,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,QAAQ,EAAE,CAAC,GAAG,IAAI,EAAE,OAAO,CAAC,KAAK,CAAC,EAAE,EAAE,GAAG,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC,CAClF,CAAC,IAAI,EAAE,CAAC;QACT,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACb,MAAM,KAAK,GAAG,IAAI,CAAC,WAAW,EAAE,CAAC,UAAU,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;QACtD,GAAG,CAAC,iBAAiB,KAAK,OAAO,CAAC,GAAG,WAAW,CAAC;QACjD,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,SAAS;YAAE,GAAG,CAAC,iBAAiB,KAAK,OAAO,CAAC,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;QAClF,KAAK,MAAM,IAAI,IAAI,KAAK;YAAE,MAAM,WAAW,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;IAC7D,CAAC;IACD,OAAO,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC;AACtB,CAAC;AAED,KAAK,UAAU,cAAc,CAC3B,MAAc,EACd,IAAa,EACb,GAA2B;IAE3B,IAAI,IAAI,CAAC,MAAM,CAAC,KAAK,KAAK,SAAS;QAAE,OAAO;IAC5C,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAClD,MAAM,KAAK,GAAG,IAAI,CAAC,EAAE,KAAK,SAAS,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,MAAM,CAAC;IAC1D,MAAM,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,KAAK,EAAE,CAAC,MAAM,CAAC,EAAE,EAAE,GAAG,EAAE,IAAI,CAAC,IAAI,EAAE,GAAG,EAAE,SAAS,EAAE,EAAE,GAAG,EAAE,GAAG,IAAI,EAAE,CAAC,CAAC;AACjG,CAAC;AAED,iGAAiG;AACjG,MAAM,CAAC,KAAK,UAAU,OAAO,CAAC,MAAc,EAAE,IAAa;IACzD,MAAM,cAAc,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;IACnC,MAAM,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,MAAM,aAAa,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;IACvD,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;IAChC,MAAM,cAAc,GAAG,MAAM,iBAAiB,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;IAC7D,MAAM,cAAc,CAAC,MAAM,EAAE,IAAI,EAAE,GAAG,CAAC,CAAC;IACxC,OAAO;QACL,GAAG;QACH,cAAc;QACd,OAAO,EAAE,KAAK,IAAI,EAAE;YAClB,KAAK,MAAM,EAAE,IAAI,GAAG;gBAAE,MAAM,MAAM,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,EAAE,CAAC,EAAE,EAAE,GAAG,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;QAC1F,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/engine/report.js

@@ -0,0 +1,71 @@
+import { statusOf } from './verdict.js';
+function where(finding) {
+    const location = finding.location;
+    if (location === undefined)
+        return '';
+    return `${location.file}:${location.line}`;
+}
+function short(sha) {
+    return sha.slice(0, 12);
+}
+/** The plain-text report a person reads in a terminal. */
+export function textReport(verdict) {
+    const lines = [];
+    for (const fault of verdict.faults) {
+        lines.push(`ENGINE ERROR ${fault.check} at ${short(fault.sha)} (${fault.os}): ${fault.reason ?? ''}`);
+    }
+    for (const finding of verdict.blocking) {
+        const why = finding.why === 'new' ? '' : ` (${finding.why})`;
+        lines.push(`${short(finding.sha)} ${where(finding)} ${finding.rule}${why}: ${finding.message}`.trim());
+    }
+    const existing = verdict.findings.length - verdict.blocking.length;
+    lines.push(`${verdict.blocking.length} blocking finding(s), ${existing} existing or informational, ` +
+        `${verdict.faults.length} engine error(s)`);
+    return `${lines.join('\n')}\n`;
+}
+function escapeData(text) {
+    return text.replaceAll('%', '%25').replaceAll('\r', '%0D').replaceAll('\n', '%0A');
+}
+function escapeProperty(text) {
+    return escapeData(text).replaceAll(':', '%3A').replaceAll(',', '%2C');
+}
+/** GitHub workflow commands: one annotation per blocking finding, up to GitHub's display limit. */
+export function annotations(verdict, limit = 50) {
+    return verdict.blocking
+        .slice(0, limit)
+        .map((finding) => {
+        const location = finding.location;
+        const props = [
+            ...(location ? [`file=${escapeProperty(location.file)}`, `line=${location.line}`] : []),
+            ...(location?.endLine === undefined ? [] : [`endLine=${location.endLine}`]),
+            `title=${escapeProperty(finding.rule)}`,
+        ];
+        return `::error ${props.join(',')}::${escapeData(finding.message)}\n`;
+    })
+        .join('');
+}
+function cell(text) {
+    return text.replaceAll('|', '\\|').replaceAll('\n', ' ');
+}
+/** The Markdown job summary. */
+export function markdownSummary(verdict) {
+    const head = statusOf(verdict);
+    const rows = verdict.blocking.map((f) => `| ${short(f.sha)} | ${cell(where(f))} | ${cell(f.rule)} | ${f.why} | ${cell(f.message)} |`);
+    const faults = verdict.faults.map((f) => `- **${f.check}** at ${short(f.sha)} (${f.os}): ${cell(f.reason ?? '')}`);
+    return [
+        `## Talos: ${head}`,
+        '',
+        ...(faults.length > 0 ? ['### Engine errors', '', ...faults, ''] : []),
+        ...(rows.length > 0
+            ? [
+                '| commit | where | rule | why | message |',
+                '| --- | --- | --- | --- | --- |',
+                ...rows,
+                '',
+            ]
+            : []),
+        `${verdict.blocking.length} blocking, ${verdict.findings.length - verdict.blocking.length} existing or informational.`,
+        '',
+    ].join('\n');
+}
+//# sourceMappingURL=report.js.map

package/dist/engine/report.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"report.js","sourceRoot":"","sources":["../../src/engine/report.ts"],"names":[],"mappings":"AAAA,OAAO,EAAgB,QAAQ,EAAgB,MAAM,cAAc,CAAC;AAEpE,SAAS,KAAK,CAAC,OAAgB;IAC7B,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAC;IAClC,IAAI,QAAQ,KAAK,SAAS;QAAE,OAAO,EAAE,CAAC;IACtC,OAAO,GAAG,QAAQ,CAAC,IAAI,IAAI,QAAQ,CAAC,IAAI,EAAE,CAAC;AAC7C,CAAC;AAED,SAAS,KAAK,CAAC,GAAW;IACxB,OAAO,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;AAC1B,CAAC;AAED,0DAA0D;AAC1D,MAAM,UAAU,UAAU,CAAC,OAAgB;IACzC,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,KAAK,MAAM,KAAK,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;QACnC,KAAK,CAAC,IAAI,CACR,gBAAgB,KAAK,CAAC,KAAK,OAAO,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,KAAK,CAAC,EAAE,MAAM,KAAK,CAAC,MAAM,IAAI,EAAE,EAAE,CAC1F,CAAC;IACJ,CAAC;IACD,KAAK,MAAM,OAAO,IAAI,OAAO,CAAC,QAAQ,EAAE,CAAC;QACvC,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,KAAK,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,KAAK,OAAO,CAAC,GAAG,GAAG,CAAC;QAC7D,KAAK,CAAC,IAAI,CACR,GAAG,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,OAAO,CAAC,IAAI,GAAG,GAAG,KAAK,OAAO,CAAC,OAAO,EAAE,CAAC,IAAI,EAAE,CAC3F,CAAC;IACJ,CAAC;IACD,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAC,MAAM,GAAG,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC;IACnE,KAAK,CAAC,IAAI,CACR,GAAG,OAAO,CAAC,QAAQ,CAAC,MAAM,yBAAyB,QAAQ,8BAA8B;QACvF,GAAG,OAAO,CAAC,MAAM,CAAC,MAAM,kBAAkB,CAC7C,CAAC;IACF,OAAO,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC;AACjC,CAAC;AAED,SAAS,UAAU,CAAC,IAAY;IAC9B,OAAO,IAAI,CAAC,UAAU,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC,UAAU,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC,UAAU,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;AACrF,CAAC;AAED,SAAS,cAAc,CAAC,IAAY;IAClC,OAAO,UAAU,CAAC,IAAI,CAAC,CAAC,UAAU,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC,UAAU,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;AACxE,CAAC;AAED,mGAAmG;AACnG,MAAM,UAAU,WAAW,CAAC,OAAgB,EAAE,KAAK,GAAG,EAAE;IACtD,OAAO,OAAO,CAAC,QAAQ;SACpB,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC;SACf,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE;QACf,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAC;QAClC,MAAM,KAAK,GAAG;YACZ,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,QAAQ,cAAc,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,EAAE,QAAQ,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;YACvF,GAAG,CAAC,QAAQ,EAAE,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,WAAW,QAAQ,CAAC,OAAO,EAAE,CAAC,CAAC;YAC3E,SAAS,cAAc,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE;SACxC,CAAC;QACF,OAAO,WAAW,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,UAAU,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC;IACxE,CAAC,CAAC;SACD,IAAI,CAAC,EAAE,CAAC,CAAC;AACd,CAAC;AAED,SAAS,IAAI,CAAC,IAAY;IACxB,OAAO,IAAI,CAAC,UAAU,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC,UAAU,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;AAC3D,CAAC;AAED,gCAAgC;AAChC,MAAM,UAAU,eAAe,CAAC,OAAgB;IAC9C,MAAM,IAAI,GAAG,QAAQ,CAAC,OAAO,CAAC,CAAC;IAC/B,MAAM,IAAI,GAAG,OAAO,CAAC,QAAQ,CAAC,GAAG,CAC/B,CAAC,CAAC,EAAE,EAAE,CACJ,KAAK,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,GAAG,MAAM,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAC9F,CAAC;IACF,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,GAAG,CAC/B,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,CAAC,KAAK,SAAS,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,MAAM,IAAI,CAAC,CAAC,CAAC,MAAM,IAAI,EAAE,CAAC,EAAE,CAChF,CAAC;IACF,OAAO;QACL,aAAa,IAAI,EAAE;QACnB,EAAE;QACF,GAAG,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,mBAAmB,EAAE,EAAE,EAAE,GAAG,MAAM,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QACtE,GAAG,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC;YACjB,CAAC,CAAC;gBACE,2CAA2C;gBAC3C,iCAAiC;gBACjC,GAAG,IAAI;gBACP,EAAE;aACH;YACH,CAAC,CAAC,EAAE,CAAC;QACP,GAAG,OAAO,CAAC,QAAQ,CAAC,MAAM,cAAc,OAAO,CAAC,QAAQ,CAAC,MAAM,GAAG,OAAO,CAAC,QAAQ,CAAC,MAAM,6BAA6B;QACtH,EAAE;KACH,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACf,CAAC"}

package/dist/engine/run.js

@@ -0,0 +1,142 @@
+import { mkdtemp, readFile, rm } from 'node:fs/promises';
+import { tmpdir } from 'node:os';
+import { isAbsolute, join, relative, sep } from 'node:path';
+import { fingerprint, identity } from '../core/fingerprint.js';
+import { inPool } from '../core/pool.js';
+/** Repository-wide checks run once, on Linux; a component's checks on each OS it declares. */
+function tasksFor(packs, plan) {
+    const wanted = (check) => plan.tiers.includes(check.tier) && (plan.only === undefined || plan.only.includes(check.id));
+    return packs.flatMap((pack) => pack.checks.filter(wanted).flatMap((check) => {
+        if (check.scope === 'repo')
+            return plan.os === 'linux' ? [{ check }] : [];
+        return plan.config.components
+            .filter((c) => (check.langs ?? []).includes(c.lang) && c.os.includes(plan.os))
+            .map((component) => ({ check, component }));
+    }));
+}
+function toPosix(path) {
+    return path.split(sep).join('/');
+}
+/** Checks report repository-relative paths; an absolute one under the checkout is made relative. */
+function repoPath(root, file) {
+    return toPosix(isAbsolute(file) ? relative(root, file) : file.replace(/^\.\//, ''));
+}
+function memoizer() {
+    const cache = new Map();
+    return async (key, compute) => {
+        const known = cache.get(key);
+        if (known !== undefined)
+            return known;
+        const started = compute();
+        cache.set(key, started);
+        return started;
+    };
+}
+function linesReader(root) {
+    const cache = new Map();
+    return async (file) => {
+        let lines = cache.get(file);
+        if (lines === undefined) {
+            lines = readFile(join(root, file), 'utf8').then((text) => text.split(/\r?\n/), () => undefined);
+            cache.set(file, lines);
+        }
+        return lines;
+    };
+}
+async function report(finding, check, root, lines) {
+    const location = finding.location === undefined
+        ? undefined
+        : { ...finding.location, file: repoPath(root, finding.location.file) };
+    const text = location === undefined ? undefined : await lines(location.file);
+    const located = location === undefined ? finding : { ...finding, location };
+    return {
+        ...located,
+        check,
+        policy: finding.policy ?? 'standard',
+        fingerprint: fingerprint(finding.rule, identity(located, text)),
+    };
+}
+/** Why a task doesn't run: its component failed to install, or the check doesn't apply. */
+/** The key a component's install is known by: a root may hold one component per language. */
+export function installKey(component) {
+    return `${component.lang}@${component.root}`;
+}
+function heldBack(plan, task, applyContext) {
+    const failed = task.component === undefined ? undefined : plan.failedInstalls?.get(installKey(task.component));
+    if (failed !== undefined) {
+        return plan.borrowed === true
+            ? { status: 'skipped', reason: `the component predates talos.yml here: ${failed}` }
+            : { status: 'error', reason: failed };
+    }
+    const applicability = task.check.applies(applyContext);
+    return applicability.applies ? undefined : { status: 'skipped', reason: applicability.reason };
+}
+async function runTask(shared, task) {
+    const { engine, plan } = shared;
+    const started = performance.now();
+    const base = {
+        check: task.check.id,
+        tier: task.check.tier,
+        ...(task.component ? { component: task.component.root } : {}),
+    };
+    const applyContext = {
+        facts: plan.facts,
+        config: plan.config,
+        side: plan.side,
+        tiers: plan.tiers,
+        ...(task.component ? { component: task.component } : {}),
+        ...(plan.changes ? { changes: plan.changes } : {}),
+    };
+    const held = heldBack(plan, task, applyContext);
+    if (held !== undefined)
+        return { ...base, ...held, durationMs: 0, findings: [] };
+    const scratch = await mkdtemp(join(shared.scratchRoot, `${task.check.id.replaceAll('/', '-')}-`));
+    const ctx = {
+        ...applyContext,
+        root: plan.root,
+        sha: plan.sha,
+        exec: engine.exec,
+        tools: engine.tools,
+        scratch,
+        log: engine.log,
+        os: plan.os,
+        memo: shared.memo,
+    };
+    try {
+        const raw = await task.check.run(ctx);
+        const findings = await Promise.all(raw.map((f) => report(f, task.check.id, plan.root, shared.lines)));
+        const durationMs = Math.round(performance.now() - started);
+        return { ...base, status: findings.length > 0 ? 'findings' : 'passed', durationMs, findings };
+    }
+    catch (error) {
+        const durationMs = Math.round(performance.now() - started);
+        const reason = error instanceof Error ? error.message : String(error);
+        return { ...base, status: 'error', reason, durationMs, findings: [] };
+    }
+}
+/** Runs every applicable check of the plan's tiers at one checkout; never throws for a check. */
+export async function runChecks(engine, plan) {
+    const scratchRoot = await mkdtemp(join(tmpdir(), `talos-${plan.sha.slice(0, 8)}-`));
+    const shared = {
+        engine,
+        plan,
+        memo: memoizer(),
+        lines: linesReader(plan.root),
+        scratchRoot,
+    };
+    try {
+        const tasks = tasksFor(engine.packs, plan);
+        engine.log.debug(`${tasks.length} checks at ${plan.sha.slice(0, 12)} (${plan.tiers.join(', ')})`);
+        const outcomes = await inPool(tasks, plan.concurrency ?? 2, async (task) => {
+            const outcome = await runTask(shared, task);
+            const at = outcome.component === undefined ? '' : `@${outcome.component}`;
+            engine.log.debug(`${outcome.check}${at}: ${outcome.status}`);
+            return outcome;
+        });
+        return { talos: engine.version, sha: plan.sha, tiers: [...plan.tiers], os: plan.os, outcomes };
+    }
+    finally {
+        await rm(scratchRoot, { recursive: true, force: true });
+    }
+}
+//# sourceMappingURL=run.js.map