@svp-labs/talos 0.0.0 → 0.1.1

package/dist/langs/php/phpstan.js

@@ -0,0 +1,128 @@
+import { mkdir, writeFile } from 'node:fs/promises';
+import { join } from 'node:path';
+import { z } from 'zod';
+import { toNeon } from './neon.js';
+import { absolute, fileExists, fromTool, phpFiles, tracks } from './paths.js';
+import { gateIncludes, PHPSTAN_PARAMETERS } from './phpstan-config.js';
+import { failed, jsonFrom, runPhp, runVendorTool, sentence, } from './run.js';
+import { scopeFor } from './scope.js';
+import { EngineError } from '../../core/check.js';
+const message = z.object({
+    message: z.string(),
+    line: z.number().int().nullable().optional(),
+    identifier: z.string().optional(),
+});
+/** PHP encodes an empty map as `[]`, which is what PHPStan prints when no file has errors. */
+const report = z.object({
+    files: z
+        .union([z.record(z.string(), z.object({ messages: z.array(message) })), z.tuple([])])
+        .default([]),
+    errors: z.array(z.string()).default([]),
+});
+export function parsePhpstanJson(json) {
+    const parsed = report.safeParse(json);
+    if (!parsed.success)
+        throw new EngineError('PHPStan printed JSON Talos cannot read');
+    const files = Array.isArray(parsed.data.files) ? {} : parsed.data.files;
+    const messages = Object.entries(files).flatMap(([file, entry]) => entry.messages.map((m) => ({
+        file,
+        line: m.line ?? 1,
+        identifier: m.identifier ?? 'error',
+        message: m.message,
+    })));
+    return { messages, general: parsed.data.errors };
+}
+const DEAD = [/^shipmonk\.dead/, /\.unused$/, /^property\.only(?:Read|Written)$/, /^deadCode\./];
+/** Which check reports an identifier: dead code, cognitive complexity (lint), or types. */
+export function bucketOf(identifier) {
+    if (DEAD.some((pattern) => pattern.test(identifier)))
+        return 'deadcode';
+    return identifier.startsWith('complexity.') ? 'lint' : 'types';
+}
+const UNMATCHED = /^Ignored error pattern .* was not matched in reported errors\.$/;
+/**
+ * Findings by check. An internal error makes PHPStan skip its whole-project rules (dead code,
+ * type coverage), so a report with one can't be trusted: an engine error.
+ */
+export function phpstanFindings(parsed, toRepo) {
+    const internal = parsed.general.filter((text) => !UNMATCHED.test(text));
+    if (internal.length > 0) {
+        throw new EngineError(`PHPStan could not analyse everything: ${internal.join(' ').slice(0, 500)}`);
+    }
+    const buckets = { types: [], lint: [], deadcode: [] };
+    for (const m of parsed.messages) {
+        buckets[bucketOf(m.identifier)].push({
+            rule: `phpstan/${m.identifier}`,
+            message: sentence(m.message),
+            location: { file: toRepo(m.file), line: m.line },
+        });
+    }
+    for (const text of parsed.general) {
+        buckets.types.push({ rule: 'phpstan/ignore.unmatched', message: sentence(text), key: text });
+    }
+    return buckets;
+}
+/** The packages phpstan/extension-installer includes on its own, which PHPStan refuses twice. */
+export async function installerPackages(ctx) {
+    const file = absolute(ctx, 'vendor/phpstan/extension-installer/src/GeneratedConfig.php');
+    if (!(await fileExists(file)))
+        return new Set();
+    const code = 'require $argv[1]; echo json_encode(array_keys(' +
+        '\\PHPStan\\ExtensionInstaller\\GeneratedConfig::EXTENSIONS));';
+    const result = await runPhp(ctx, ['-r', code, file]);
+    const names = z
+        .object({ names: z.array(z.string()) })
+        .safeParse(jsonFrom(`{"names":${result.stdout.trim() || 'null'}}`, 'the extension installer'));
+    if (result.code !== 0 || !names.success)
+        throw failed('reading the extension installer', result);
+    return new Set(names.data.names);
+}
+/** A Laravel application: one with `artisan` at its root, which Larastan's rules need. */
+export function laravelApp(ctx) {
+    return tracks(ctx, 'artisan');
+}
+/**
+ * Writes the gate's config into the scratch directory: the base's includes and parameters,
+ * then what the gate decides itself. The project's ignoreErrors and excludePaths are replaced,
+ * since a list of ignored errors is a stored baseline; inline ignores stay, as suppressions.
+ */
+export async function writeConfig(ctx, name, run) {
+    const includes = await gateIncludes(ctx, {
+        laravel: laravelApp(ctx),
+        installed: await installerPackages(ctx),
+        project: true,
+        ...(run.extra === undefined ? {} : { extra: run.extra }),
+    });
+    const abs = (path) => absolute(ctx, path);
+    const parameters = {
+        ...PHPSTAN_PARAMETERS,
+        'paths!': run.scope.paths.map(abs),
+        'excludePaths!': { analyse: [...run.scope.excluded, ...run.scope.excludedDirs].map(abs) },
+        'ignoreErrors!': [],
+        tmpDir: join(ctx.scratch, `${name}-tmp`),
+        ...run.parameters,
+    };
+    const path = join(ctx.scratch, `${name}.neon`);
+    await mkdir(ctx.scratch, { recursive: true });
+    await writeFile(path, toNeon({ includes, parameters }));
+    return path;
+}
+/** Runs `phpstan analyse` with a config and reads its JSON report. */
+export async function analyse(ctx, config) {
+    const args = ['analyse', '-c', config, '--error-format=json', '--no-progress', '--no-ansi'];
+    const result = await runVendorTool(ctx, 'phpstan', [...args, '--memory-limit=-1']);
+    if (result.code > 1 || !result.stdout.trimStart().startsWith('{')) {
+        throw failed('phpstan analyse', result);
+    }
+    return parsePhpstanJson(jsonFrom(result.stdout, 'phpstan analyse'));
+}
+/** One analysis of every checked PHP file, shared by php/types, php/lint and php/deadcode. */
+export async function phpstanRun(ctx) {
+    return ctx.memo(`php/phpstan:${ctx.component.root}`, async () => {
+        const scope = await scopeFor(ctx, phpFiles(ctx));
+        const config = await writeConfig(ctx, 'phpstan', { scope, parameters: {} });
+        const parsed = await analyse(ctx, config);
+        return phpstanFindings(parsed, (file) => fromTool(ctx, file));
+    });
+}
+//# sourceMappingURL=phpstan.js.map

package/dist/langs/php/phpstan.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"phpstan.js","sourceRoot":"","sources":["../../../src/langs/php/phpstan.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AACpD,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAgB,MAAM,EAAE,MAAM,WAAW,CAAC;AACjD,OAAO,EAAE,QAAQ,EAAE,UAAU,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,YAAY,CAAC;AAC9E,OAAO,EAAkB,YAAY,EAAE,kBAAkB,EAAE,MAAM,qBAAqB,CAAC;AACvF,OAAO,EAEL,MAAM,EACN,QAAQ,EACR,MAAM,EACN,aAAa,EACb,QAAQ,GAET,MAAM,UAAU,CAAC;AAClB,OAAO,EAAc,QAAQ,EAAE,MAAM,YAAY,CAAC;AAClD,OAAO,EAAE,WAAW,EAAE,MAAM,qBAAqB,CAAC;AAGlD,MAAM,OAAO,GAAG,CAAC,CAAC,MAAM,CAAC;IACvB,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE;IACnB,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;IAC5C,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CAClC,CAAC,CAAC;AAEH,8FAA8F;AAC9F,MAAM,MAAM,GAAG,CAAC,CAAC,MAAM,CAAC;IACtB,KAAK,EAAE,CAAC;SACL,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC;SACpF,OAAO,CAAC,EAAE,CAAC;IACd,MAAM,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;CACxC,CAAC,CAAC;AAgBH,MAAM,UAAU,gBAAgB,CAAC,IAAa;IAC5C,MAAM,MAAM,GAAG,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;IACtC,IAAI,CAAC,MAAM,CAAC,OAAO;QAAE,MAAM,IAAI,WAAW,CAAC,wCAAwC,CAAC,CAAC;IACrF,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC;IACxE,MAAM,QAAQ,GAAG,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,EAAE,KAAK,CAAC,EAAE,EAAE,CAC/D,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QACzB,IAAI;QACJ,IAAI,EAAE,CAAC,CAAC,IAAI,IAAI,CAAC;QACjB,UAAU,EAAE,CAAC,CAAC,UAAU,IAAI,OAAO;QACnC,OAAO,EAAE,CAAC,CAAC,OAAO;KACnB,CAAC,CAAC,CACJ,CAAC;IACF,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;AACnD,CAAC;AAID,MAAM,IAAI,GAAG,CAAC,iBAAiB,EAAE,WAAW,EAAE,kCAAkC,EAAE,aAAa,CAAC,CAAC;AAEjG,2FAA2F;AAC3F,MAAM,UAAU,QAAQ,CAAC,UAAkB;IACzC,IAAI,IAAI,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QAAE,OAAO,UAAU,CAAC;IACxE,OAAO,UAAU,CAAC,UAAU,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC;AACjE,CAAC;AAED,MAAM,SAAS,GAAG,iEAAiE,CAAC;AAEpF;;;GAGG;AACH,MAAM,UAAU,eAAe,CAC7B,MAAqB,EACrB,MAAgC;IAEhC,MAAM,QAAQ,GAAG,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;IACxE,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACxB,MAAM,IAAI,WAAW,CACnB,yCAAyC,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAC5E,CAAC;IACJ,CAAC;IACD,MAAM,OAAO,GAA8B,EAAE,KAAK,EAAE,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC;IACjF,KAAK,MAAM,CAAC,IAAI,MAAM,CAAC,QAAQ,EAAE,CAAC;QAChC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC;YACnC,IAAI,EAAE,WAAW,CAAC,CAAC,UAAU,EAAE;YAC/B,OAAO,EAAE,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC;YAC5B,QAAQ,EAAE,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE;SACjD,CAAC,CAAC;IACL,CAAC;IACD,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;QAClC,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,0BAA0B,EAAE,OAAO,EAAE,QAAQ,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC,CAAC;IAC/F,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,iGAAiG;AACjG,MAAM,CAAC,KAAK,UAAU,iBAAiB,CAAC,GAAgB;IACtD,MAAM,IAAI,GAAG,QAAQ,CAAC,GAAG,EAAE,4DAA4D,CAAC,CAAC;IACzF,IAAI,CAAC,CAAC,MAAM,UAAU,CAAC,IAAI,CAAC,CAAC;QAAE,OAAO,IAAI,GAAG,EAAE,CAAC;IAChD,MAAM,IAAI,GACR,gDAAgD;QAChD,+DAA+D,CAAC;IAClE,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,GAAG,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC;IACrD,MAAM,KAAK,GAAG,CAAC;SACZ,MAAM,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,EAAE,CAAC;SACtC,SAAS,CAAC,QAAQ,CAAC,YAAY,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,IAAI,MAAM,GAAG,EAAE,yBAAyB,CAAC,CAAC,CAAC;IACjG,IAAI,MAAM,CAAC,IAAI,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO;QAAE,MAAM,MAAM,CAAC,iCAAiC,EAAE,MAAM,CAAC,CAAC;IACjG,OAAO,IAAI,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;AACnC,CAAC;AAED,0FAA0F;AAC1F,MAAM,UAAU,UAAU,CAAC,GAAuC;IAChE,OAAO,MAAM,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC;AAChC,CAAC;AAQD;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,WAAW,CAAC,GAAU,EAAE,IAAY,EAAE,GAAc;IACxE,MAAM,QAAQ,GAAG,MAAM,YAAY,CAAC,GAAG,EAAE;QACvC,OAAO,EAAE,UAAU,CAAC,GAAG,CAAC;QACxB,SAAS,EAAE,MAAM,iBAAiB,CAAC,GAAG,CAAC;QACvC,OAAO,EAAE,IAAI;QACb,GAAG,CAAC,GAAG,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,GAAG,CAAC,KAAK,EAAE,CAAC;KACzD,CAAC,CAAC;IACH,MAAM,GAAG,GAAG,CAAC,IAAY,EAAU,EAAE,CAAC,QAAQ,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;IAC1D,MAAM,UAAU,GAAY;QAC1B,GAAG,kBAAkB;QACrB,QAAQ,EAAE,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC;QAClC,eAAe,EAAE,EAAE,OAAO,EAAE,CAAC,GAAG,GAAG,CAAC,KAAK,CAAC,QAAQ,EAAE,GAAG,GAAG,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE;QACzF,eAAe,EAAE,EAAE;QACnB,MAAM,EAAE,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,GAAG,IAAI,MAAM,CAAC;QACxC,GAAG,GAAG,CAAC,UAAU;KAClB,CAAC;IACF,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,GAAG,IAAI,OAAO,CAAC,CAAC;IAC/C,MAAM,KAAK,CAAC,GAAG,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC9C,MAAM,SAAS,CAAC,IAAI,EAAE,MAAM,CAAC,EAAE,QAAQ,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC;IACxD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,sEAAsE;AACtE,MAAM,CAAC,KAAK,UAAU,OAAO,CAAC,GAAU,EAAE,MAAc;IACtD,MAAM,IAAI,GAAG,CAAC,SAAS,EAAE,IAAI,EAAE,MAAM,EAAE,qBAAqB,EAAE,eAAe,EAAE,WAAW,CAAC,CAAC;IAC5F,MAAM,MAAM,GAAG,MAAM,aAAa,CAAC,GAAG,EAAE,SAAS,EAAE,CAAC,GAAG,IAAI,EAAE,mBAAmB,CAAC,CAAC,CAAC;IACnF,IAAI,MAAM,CAAC,IAAI,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,SAAS,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;QAClE,MAAM,MAAM,CAAC,iBAAiB,EAAE,MAAM,CAAC,CAAC;IAC1C,CAAC;IACD,OAAO,gBAAgB,CAAC,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,iBAAiB,CAAC,CAAC,CAAC;AACtE,CAAC;AAED,8FAA8F;AAC9F,MAAM,CAAC,KAAK,UAAU,UAAU,CAAC,GAAU;IACzC,OAAO,GAAG,CAAC,IAAI,CAAC,eAAe,GAAG,CAAC,SAAS,CAAC,IAAI,EAAE,EAAE,KAAK,IAAI,EAAE;QAC9D,MAAM,KAAK,GAAG,MAAM,QAAQ,CAAC,GAAG,EAAE,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC;QACjD,MAAM,MAAM,GAAG,MAAM,WAAW,CAAC,GAAG,EAAE,SAAS,EAAE,EAAE,KAAK,EAAE,UAAU,EAAE,EAAE,EAAE,CAAC,CAAC;QAC5E,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;QAC1C,OAAO,eAAe,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,QAAQ,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC,CAAC;IAChE,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/langs/php/pint-config.js

@@ -0,0 +1,22 @@
+import { inComponent } from './paths.js';
+export const PINT_BASE = 'pint.json';
+/**
+ * Laravel's preset, which is PER-CS 2.0 with Laravel's conventions, and strict types declared in
+ * every file. Formatting is not a project's choice, so pint.json has no extension. `note` is the
+ * generated-file note; `excludes` puts talos.yml's `exclude` in, so an editor formats what the
+ * gate checks.
+ */
+export function renderPint(note, ctx) {
+    const root = ctx?.component?.root ?? '.';
+    const excluded = (ctx?.config.exclude ?? [])
+        .map((path) => inComponent(root, path))
+        .filter((path) => path !== undefined && path !== '');
+    const config = {
+        ...(note === '' ? {} : { '//': note }),
+        preset: 'laravel',
+        rules: { declare_strict_types: true },
+        ...(excluded.length === 0 ? {} : { notPath: excluded }),
+    };
+    return `${JSON.stringify(config, null, 4)}\n`;
+}
+//# sourceMappingURL=pint-config.js.map

package/dist/langs/php/pint-config.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"pint-config.js","sourceRoot":"","sources":["../../../src/langs/php/pint-config.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AAGzC,MAAM,CAAC,MAAM,SAAS,GAAG,WAAW,CAAC;AAOrC;;;;;GAKG;AACH,MAAM,UAAU,UAAU,CAAC,IAAY,EAAE,GAAiB;IACxD,MAAM,IAAI,GAAG,GAAG,EAAE,SAAS,EAAE,IAAI,IAAI,GAAG,CAAC;IACzC,MAAM,QAAQ,GAAG,CAAC,GAAG,EAAE,MAAM,CAAC,OAAO,IAAI,EAAE,CAAC;SACzC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,WAAW,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;SACtC,MAAM,CAAC,CAAC,IAAI,EAAkB,EAAE,CAAC,IAAI,KAAK,SAAS,IAAI,IAAI,KAAK,EAAE,CAAC,CAAC;IACvE,MAAM,MAAM,GAAG;QACb,GAAG,CAAC,IAAI,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;QACtC,MAAM,EAAE,SAAS;QACjB,KAAK,EAAE,EAAE,oBAAoB,EAAE,IAAI,EAAE;QACrC,GAAG,CAAC,QAAQ,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,QAAQ,EAAE,CAAC;KACxD,CAAC;IACF,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC;AAChD,CAAC"}

package/dist/langs/php/run.js

@@ -0,0 +1,88 @@
+import { join } from 'node:path';
+import { component, componentDir, fileExists, inRepo } from './paths.js';
+import { EngineError } from '../../core/check.js';
+/** The PHP on the machine's PATH, which the gate's runner sets up. */
+const PHP = 'php';
+export function bind(ctx) {
+    return { ...ctx, component: component(ctx) };
+}
+/** Environment for tools whose output Talos parses: no colours, no prompts, no debugger. */
+const TOOL_ENV = {
+    NO_COLOR: '1',
+    COLUMNS: '200',
+    XDEBUG_MODE: 'off',
+    COMPOSER_NO_INTERACTION: '1',
+};
+/** The Composer package that installs each program Talos runs from `vendor/bin`. */
+const PACKAGES = {
+    deptrac: 'deptrac/deptrac',
+    infection: 'infection/infection',
+    pest: 'pestphp/pest',
+    phpmd: 'phpmd/phpmd',
+    phpstan: 'phpstan/phpstan',
+    pint: 'laravel/pint',
+};
+export function notInstalled(place, name) {
+    return new EngineError(`${name} is not installed in ${inRepo(place.component.root, 'vendor')}: add it to ` +
+        'require-dev at the version Talos pins and commit composer.lock');
+}
+/** A file under the component's `vendor/`, which must exist. */
+export async function vendorFile(place, path, pkg) {
+    const file = join(componentDir(place), 'vendor', ...path.split('/'));
+    if (await fileExists(file))
+        return file;
+    throw notInstalled(place, pkg);
+}
+/** A program from the component's `vendor/bin`, which Composer installs as a PHP script. */
+export async function vendorBin(place, name) {
+    return vendorFile(place, `bin/${name}`, PACKAGES[name] ?? name);
+}
+/** Runs PHP with the given arguments; PHP missing from the machine is an engine error. */
+export async function runPhp(ctx, args, options = {}) {
+    const ini = Object.entries({ memory_limit: '-1', ...options.ini }).flatMap(([key, value]) => [
+        '-d',
+        `${key}=${value}`,
+    ]);
+    try {
+        return await ctx.exec(PHP, [...ini, ...args], {
+            cwd: options.cwd ?? componentDir(ctx),
+            env: { ...TOOL_ENV, ...options.env },
+            ...(options.timeoutMs === undefined ? {} : { timeoutMs: options.timeoutMs }),
+            ...(options.input === undefined ? {} : { input: options.input }),
+        });
+    }
+    catch (error) {
+        const reason = error instanceof Error ? error.message : String(error);
+        throw new EngineError(`PHP could not run: ${reason}`);
+    }
+}
+/** Runs one of the component's own tools from `vendor/bin`. */
+export async function runVendorTool(ctx, name, args, options = {}) {
+    return runPhp(ctx, [await vendorBin(ctx, name), ...args], options);
+}
+/** A tool's message as a sentence: trimmed, with its full stop. */
+export function sentence(text) {
+    const trimmed = text.trim();
+    return /[.!?]$/.test(trimmed) ? trimmed : `${trimmed}.`;
+}
+/** The end of a tool's output, errors first, for an engine error's message. */
+export function tail(result, count = 15) {
+    const lines = [result.stderr, result.stdout].join('\n').trim().split('\n');
+    return lines.slice(Math.max(0, lines.length - count)).join('\n');
+}
+/** An engine error for a tool that exited without output Talos can read. */
+export function failed(what, result) {
+    return new EngineError([`${what} exited ${result.code}:`, tail(result)].join('\n'));
+}
+/** Text a tool printed as JSON, from its first brace on; `what` names it in the error. */
+export function jsonFrom(text, what) {
+    let value;
+    try {
+        value = JSON.parse(text.slice(Math.max(0, text.indexOf('{'))));
+    }
+    catch {
+        throw new EngineError(`${what} printed no JSON Talos can read`);
+    }
+    return value;
+}
+//# sourceMappingURL=run.js.map

package/dist/langs/php/run.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"run.js","sourceRoot":"","sources":["../../../src/langs/php/run.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,SAAS,EAAE,YAAY,EAAE,UAAU,EAAE,MAAM,EAAc,MAAM,YAAY,CAAC;AAErF,OAAO,EAAE,WAAW,EAAE,MAAM,qBAAqB,CAAC;AAGlD,sEAAsE;AACtE,MAAM,GAAG,GAAG,KAAK,CAAC;AAKlB,MAAM,UAAU,IAAI,CAAC,GAAiB;IACpC,OAAO,EAAE,GAAG,GAAG,EAAE,SAAS,EAAE,SAAS,CAAC,GAAG,CAAC,EAAE,CAAC;AAC/C,CAAC;AAID,4FAA4F;AAC5F,MAAM,QAAQ,GAAqC;IACjD,QAAQ,EAAE,GAAG;IACb,OAAO,EAAE,KAAK;IACd,WAAW,EAAE,KAAK;IAClB,uBAAuB,EAAE,GAAG;CAC7B,CAAC;AAEF,oFAAoF;AACpF,MAAM,QAAQ,GAAqC;IACjD,OAAO,EAAE,iBAAiB;IAC1B,SAAS,EAAE,qBAAqB;IAChC,IAAI,EAAE,cAAc;IACpB,KAAK,EAAE,aAAa;IACpB,OAAO,EAAE,iBAAiB;IAC1B,IAAI,EAAE,cAAc;CACrB,CAAC;AAEF,MAAM,UAAU,YAAY,CAAC,KAA+B,EAAE,IAAY;IACxE,OAAO,IAAI,WAAW,CACpB,GAAG,IAAI,wBAAwB,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,IAAI,EAAE,QAAQ,CAAC,cAAc;QACjF,gEAAgE,CACnE,CAAC;AACJ,CAAC;AAED,gEAAgE;AAChE,MAAM,CAAC,KAAK,UAAU,UAAU,CAC9B,KAAwC,EACxC,IAAY,EACZ,GAAW;IAEX,MAAM,IAAI,GAAG,IAAI,CAAC,YAAY,CAAC,KAAK,CAAC,EAAE,QAAQ,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC;IACrE,IAAI,MAAM,UAAU,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IACxC,MAAM,YAAY,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;AACjC,CAAC;AAED,4FAA4F;AAC5F,MAAM,CAAC,KAAK,UAAU,SAAS,CAC7B,KAAwC,EACxC,IAAY;IAEZ,OAAO,UAAU,CAAC,KAAK,EAAE,OAAO,IAAI,EAAE,EAAE,QAAQ,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,CAAC;AAClE,CAAC;AAYD,0FAA0F;AAC1F,MAAM,CAAC,KAAK,UAAU,MAAM,CAC1B,GAAqD,EACrD,IAAuB,EACvB,UAAsB,EAAE;IAExB,MAAM,GAAG,GAAG,MAAM,CAAC,OAAO,CAAC,EAAE,YAAY,EAAE,IAAI,EAAE,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC;QAC3F,IAAI;QACJ,GAAG,GAAG,IAAI,KAAK,EAAE;KAClB,CAAC,CAAC;IACH,IAAI,CAAC;QACH,OAAO,MAAM,GAAG,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,GAAG,GAAG,EAAE,GAAG,IAAI,CAAC,EAAE;YAC5C,GAAG,EAAE,OAAO,CAAC,GAAG,IAAI,YAAY,CAAC,GAAG,CAAC;YACrC,GAAG,EAAE,EAAE,GAAG,QAAQ,EAAE,GAAG,OAAO,CAAC,GAAG,EAAE;YACpC,GAAG,CAAC,OAAO,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,OAAO,CAAC,SAAS,EAAE,CAAC;YAC5E,GAAG,CAAC,OAAO,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,CAAC;SACjE,CAAC,CAAC;IACL,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,MAAM,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QACtE,MAAM,IAAI,WAAW,CAAC,sBAAsB,MAAM,EAAE,CAAC,CAAC;IACxD,CAAC;AACH,CAAC;AAED,+DAA+D;AAC/D,MAAM,CAAC,KAAK,UAAU,aAAa,CACjC,GAAqD,EACrD,IAAY,EACZ,IAAuB,EACvB,UAAsB,EAAE;IAExB,OAAO,MAAM,CAAC,GAAG,EAAE,CAAC,MAAM,SAAS,CAAC,GAAG,EAAE,IAAI,CAAC,EAAE,GAAG,IAAI,CAAC,EAAE,OAAO,CAAC,CAAC;AACrE,CAAC;AAED,mEAAmE;AACnE,MAAM,UAAU,QAAQ,CAAC,IAAY;IACnC,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;IAC5B,OAAO,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,OAAO,GAAG,CAAC;AAC1D,CAAC;AAED,+EAA+E;AAC/E,MAAM,UAAU,IAAI,CAAC,MAAkB,EAAE,KAAK,GAAG,EAAE;IACjD,MAAM,KAAK,GAAG,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAC3E,OAAO,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,KAAK,CAAC,MAAM,GAAG,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACnE,CAAC;AAED,4EAA4E;AAC5E,MAAM,UAAU,MAAM,CAAC,IAAY,EAAE,MAAkB;IACrD,OAAO,IAAI,WAAW,CAAC,CAAC,GAAG,IAAI,WAAW,MAAM,CAAC,IAAI,GAAG,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;AACtF,CAAC;AAED,0FAA0F;AAC1F,MAAM,UAAU,QAAQ,CAAC,IAAY,EAAE,IAAY;IACjD,IAAI,KAAc,CAAC;IACnB,IAAI,CAAC;QACH,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;IACjE,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,WAAW,CAAC,GAAG,IAAI,iCAAiC,CAAC,CAAC;IAClE,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC"}

package/dist/langs/php/runtime.js

@@ -0,0 +1,60 @@
+import { isPast } from '../../checks/runtime/assess.js';
+import { pinned } from '../../checks/runtime/declaration.js';
+import { loadFeeds } from '../../checks/runtime/feeds.js';
+import { defaultFetcher } from '../../checks/runtime/fetchers.js';
+import { compareVersions, cycleOf, inCycle, isExactRelease, newest, } from '../../checks/runtime/versions.js';
+import { EngineError } from '../../core/check.js';
+import { ExecError } from '../../exec/exec.js';
+/** Major, minor and release only: a distribution's suffix on `PHP_VERSION` is not a release. */
+const VERSION_CODE = 'echo PHP_MAJOR_VERSION, ".", PHP_MINOR_VERSION, ".", PHP_RELEASE_VERSION;';
+/** Why PHP `version` must not run the checks, judged against its runtime feed, or nothing. */
+export function staleness(version, feed, today) {
+    const name = cycleOf(version, feed.cycles.map((cycle) => cycle.name));
+    const cycle = feed.cycles.find((known) => known.name === name);
+    if (cycle === undefined)
+        return `PHP ${version} is no release endoflife.date knows`;
+    if (isPast(cycle, today)) {
+        return `PHP ${cycle.name} is past its end of life and gets no more security releases`;
+    }
+    const security = [...(feed.security ?? [])].filter((release) => inCycle(release, cycle.name));
+    const latest = newest([version, cycle.latest ?? version, ...security]) ?? version;
+    if (compareVersions(latest, version) <= 0)
+        return undefined;
+    const fixes = security.some((release) => compareVersions(release, version) > 0)
+        ? ', a security release'
+        : '';
+    return `PHP ${version} is not the newest ${cycle.name} release: ${latest} is${fixes}`;
+}
+async function runningPhp(exec, cwd) {
+    let output;
+    try {
+        const result = await exec('php', ['-r', VERSION_CODE], { cwd });
+        if (result.code !== 0)
+            throw new ExecError(result.stderr.trim().slice(0, 200));
+        output = result.stdout.trim();
+    }
+    catch (error) {
+        if (!(error instanceof ExecError))
+            throw error;
+        throw new EngineError(`php is needed on PATH: ${error.message}`);
+    }
+    if (!isExactRelease(output))
+        throw new EngineError(`php reported no release: "${output}"`);
+    return output;
+}
+function utcToday() {
+    return new Date().toISOString().slice(0, 10);
+}
+/**
+ * Refuses to run a project's code and its checks on any PHP but the newest release of its cycle,
+ * per endoflife.date and php.net's security tags.
+ */
+export async function requireNewestPhp(exec, cwd, freshness = { fetcher: defaultFetcher(), today: utcToday() }) {
+    const version = await runningPhp(exec, cwd);
+    const declaration = pinned('php', { file: 'PATH', line: 1 }, version, version);
+    const feed = (await loadFeeds([declaration], freshness.fetcher)).get('php');
+    const problem = feed === undefined ? 'no PHP feed loaded' : staleness(version, feed, freshness.today);
+    if (problem !== undefined)
+        throw new EngineError(`${problem}; update the PHP on PATH`);
+}
+//# sourceMappingURL=runtime.js.map

package/dist/langs/php/runtime.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"runtime.js","sourceRoot":"","sources":["../../../src/langs/php/runtime.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,gCAAgC,CAAC;AACxD,OAAO,EAAE,MAAM,EAAE,MAAM,qCAAqC,CAAC;AAC7D,OAAO,EAAE,SAAS,EAAoB,MAAM,+BAA+B,CAAC;AAC5E,OAAO,EAAE,cAAc,EAAgB,MAAM,kCAAkC,CAAC;AAChF,OAAO,EACL,eAAe,EACf,OAAO,EACP,OAAO,EACP,cAAc,EACd,MAAM,GACP,MAAM,kCAAkC,CAAC;AAC1C,OAAO,EAAE,WAAW,EAAE,MAAM,qBAAqB,CAAC;AAElD,OAAO,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAC;AAQ/C,gGAAgG;AAChG,MAAM,YAAY,GAAG,2EAA2E,CAAC;AAEjG,8FAA8F;AAC9F,MAAM,UAAU,SAAS,CAAC,OAAe,EAAE,IAAiB,EAAE,KAAa;IACzE,MAAM,IAAI,GAAG,OAAO,CAClB,OAAO,EACP,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CACvC,CAAC;IACF,MAAM,KAAK,GAAG,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC;IAC/D,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,OAAO,OAAO,qCAAqC,CAAC;IACpF,IAAI,MAAM,CAAC,KAAK,EAAE,KAAK,CAAC,EAAE,CAAC;QACzB,OAAO,OAAO,KAAK,CAAC,IAAI,6DAA6D,CAAC;IACxF,CAAC;IACD,MAAM,QAAQ,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,QAAQ,IAAI,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,OAAO,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC;IAC9F,MAAM,MAAM,GAAG,MAAM,CAAC,CAAC,OAAO,EAAE,KAAK,CAAC,MAAM,IAAI,OAAO,EAAE,GAAG,QAAQ,CAAC,CAAC,IAAI,OAAO,CAAC;IAClF,IAAI,eAAe,CAAC,MAAM,EAAE,OAAO,CAAC,IAAI,CAAC;QAAE,OAAO,SAAS,CAAC;IAC5D,MAAM,KAAK,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,eAAe,CAAC,OAAO,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC;QAC7E,CAAC,CAAC,sBAAsB;QACxB,CAAC,CAAC,EAAE,CAAC;IACP,OAAO,OAAO,OAAO,sBAAsB,KAAK,CAAC,IAAI,aAAa,MAAM,MAAM,KAAK,EAAE,CAAC;AACxF,CAAC;AAED,KAAK,UAAU,UAAU,CAAC,IAAU,EAAE,GAAW;IAC/C,IAAI,MAAc,CAAC;IACnB,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,KAAK,EAAE,CAAC,IAAI,EAAE,YAAY,CAAC,EAAE,EAAE,GAAG,EAAE,CAAC,CAAC;QAChE,IAAI,MAAM,CAAC,IAAI,KAAK,CAAC;YAAE,MAAM,IAAI,SAAS,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC;QAC/E,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;IAChC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,CAAC,CAAC,KAAK,YAAY,SAAS,CAAC;YAAE,MAAM,KAAK,CAAC;QAC/C,MAAM,IAAI,WAAW,CAAC,0BAA0B,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;IACnE,CAAC;IACD,IAAI,CAAC,cAAc,CAAC,MAAM,CAAC;QAAE,MAAM,IAAI,WAAW,CAAC,6BAA6B,MAAM,GAAG,CAAC,CAAC;IAC3F,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAS,QAAQ;IACf,OAAO,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;AAC/C,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,IAAU,EACV,GAAW,EACX,YAAuB,EAAE,OAAO,EAAE,cAAc,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,EAAE;IAEvE,MAAM,OAAO,GAAG,MAAM,UAAU,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;IAC5C,MAAM,WAAW,GAAG,MAAM,CAAC,KAAK,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,EAAE,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC;IAC/E,MAAM,IAAI,GAAG,CAAC,MAAM,SAAS,CAAC,CAAC,WAAW,CAAC,EAAE,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IAC5E,MAAM,OAAO,GACX,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,oBAAoB,CAAC,CAAC,CAAC,SAAS,CAAC,OAAO,EAAE,IAAI,EAAE,SAAS,CAAC,KAAK,CAAC,CAAC;IACxF,IAAI,OAAO,KAAK,SAAS;QAAE,MAAM,IAAI,WAAW,CAAC,GAAG,OAAO,0BAA0B,CAAC,CAAC;AACzF,CAAC"}

package/dist/langs/php/scope.js

@@ -0,0 +1,50 @@
+import { readdir } from 'node:fs/promises';
+import { componentDir, isCheckedPhp } from './paths.js';
+/** The top-level directories that hold the files, and the files at the root. */
+export function topLevel(files) {
+    const dirs = new Set();
+    const rootFiles = [];
+    for (const file of files) {
+        const slash = file.indexOf('/');
+        if (slash < 0)
+            rootFiles.push(file);
+        else
+            dirs.add(file.slice(0, slash));
+    }
+    return { dirs: [...dirs].sort((a, b) => a.localeCompare(b)), rootFiles };
+}
+/** Found PHP files (relative to the component) that aren't among the checked ones. */
+export function unchecked(found, checked) {
+    return found
+        .filter((file) => file.endsWith('.php') && !checked.has(file))
+        .sort((a, b) => a.localeCompare(b));
+}
+async function phpUnder(base, dir) {
+    const entries = await readdir(`${base}/${dir}`, { recursive: true });
+    return entries
+        .map((entry) => `${dir}/${entry.replaceAll('\\', '/')}`)
+        .filter((path) => path.endsWith('.php'));
+}
+/** Only root-level files are checked: every directory is left out whole. */
+async function rootOnly(base, checked) {
+    const entries = await readdir(base, { withFileTypes: true });
+    return {
+        paths: ['.'],
+        excluded: unchecked(entries.filter((e) => e.isFile()).map((e) => e.name), checked),
+        excludedDirs: entries
+            .filter((e) => e.isDirectory())
+            .map((e) => e.name)
+            .sort((a, b) => a.localeCompare(b)),
+    };
+}
+/** The scope of an analysis of `files` (component-relative, all checked PHP). */
+export async function scopeFor(place, files) {
+    const base = componentDir(place);
+    const checked = new Set(files.filter((file) => isCheckedPhp(file)));
+    const { dirs, rootFiles } = topLevel([...checked]);
+    if (dirs.length === 0)
+        return rootOnly(base, checked);
+    const found = (await Promise.all(dirs.map(async (dir) => phpUnder(base, dir)))).flat();
+    return { paths: [...dirs, ...rootFiles], excluded: unchecked(found, checked), excludedDirs: [] };
+}
+//# sourceMappingURL=scope.js.map

package/dist/langs/php/scope.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"scope.js","sourceRoot":"","sources":["../../../src/langs/php/scope.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,kBAAkB,CAAC;AAC3C,OAAO,EAAE,YAAY,EAAE,YAAY,EAAc,MAAM,YAAY,CAAC;AAepE,gFAAgF;AAChF,MAAM,UAAU,QAAQ,CAAC,KAAwB;IAC/C,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,MAAM,SAAS,GAAa,EAAE,CAAC;IAC/B,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QAChC,IAAI,KAAK,GAAG,CAAC;YAAE,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;;YAC/B,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,CAAC;IACtC,CAAC;IACD,OAAO,EAAE,IAAI,EAAE,CAAC,GAAG,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,CAAC;AAC3E,CAAC;AAED,sFAAsF;AACtF,MAAM,UAAU,SAAS,CAAC,KAAwB,EAAE,OAA4B;IAC9E,OAAO,KAAK;SACT,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;SAC7D,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,CAAC;AACxC,CAAC;AAED,KAAK,UAAU,QAAQ,CAAC,IAAY,EAAE,GAAW;IAC/C,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,GAAG,IAAI,IAAI,GAAG,EAAE,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACrE,OAAO,OAAO;SACX,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,GAAG,GAAG,IAAI,KAAK,CAAC,UAAU,CAAC,IAAI,EAAE,GAAG,CAAC,EAAE,CAAC;SACvD,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC;AAC7C,CAAC;AAED,4EAA4E;AAC5E,KAAK,UAAU,QAAQ,CAAC,IAAY,EAAE,OAA4B;IAChE,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,IAAI,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC;IAC7D,OAAO;QACL,KAAK,EAAE,CAAC,GAAG,CAAC;QACZ,QAAQ,EAAE,SAAS,CACjB,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,EACpD,OAAO,CACR;QACD,YAAY,EAAE,OAAO;aAClB,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC;aAC9B,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;aAClB,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC;KACtC,CAAC;AACJ,CAAC;AAED,iFAAiF;AACjF,MAAM,CAAC,KAAK,UAAU,QAAQ,CAC5B,KAAwC,EACxC,KAAwB;IAExB,MAAM,IAAI,GAAG,YAAY,CAAC,KAAK,CAAC,CAAC;IACjC,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACpE,MAAM,EAAE,IAAI,EAAE,SAAS,EAAE,GAAG,QAAQ,CAAC,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC;IACnD,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;IACtD,MAAM,KAAK,GAAG,CAAC,MAAM,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE,GAAG,EAAE,EAAE,CAAC,QAAQ,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IACvF,OAAO,EAAE,KAAK,EAAE,CAAC,GAAG,IAAI,EAAE,GAAG,SAAS,CAAC,EAAE,QAAQ,EAAE,SAAS,CAAC,KAAK,EAAE,OAAO,CAAC,EAAE,YAAY,EAAE,EAAE,EAAE,CAAC;AACnG,CAAC"}

package/dist/langs/php/shape.js

@@ -0,0 +1,212 @@
+import { writeFile } from 'node:fs/promises';
+import { join } from 'node:path';
+import { z } from 'zod';
+import { absolute, componentDir, fromTool, isTestPath, phpFiles } from './paths.js';
+import { failed, jsonFrom, runPhp, vendorFile } from './run.js';
+import { EngineError } from '../../core/check.js';
+const MAX_DEPTH = 3;
+const MAX_FILE_LINES = 400;
+/**
+ * Reads each file with PHP-Parser from the component's vendor (the dev tools Talos pins bring it)
+ * and prints, per file: its lines of code, the blocks nested deeper than allowed, and the span of
+ * every function and class. Only PHP-Parser's own classes are loaded, never the project's code.
+ */
+const SCRIPT = String.raw `<?php
+
+declare(strict_types=1);
+
+$input = json_decode((string) stream_get_contents(STDIN), true, 512, JSON_THROW_ON_ERROR);
+$lib = $input['vendor'] . '/nikic/php-parser/lib/';
+spl_autoload_register(static function (string $class) use ($lib): void {
+    $path = $lib . str_replace('\\', '/', $class) . '.php';
+    if (str_starts_with($class, 'PhpParser\\') && is_file($path)) {
+        require $path;
+    }
+});
+
+use PhpParser\Node;
+
+final class TalosShape extends PhpParser\NodeVisitorAbstract
+{
+    private const BLOCKS = [Node\Stmt\If_::class, Node\Stmt\For_::class, Node\Stmt\Foreach_::class,
+        Node\Stmt\While_::class, Node\Stmt\Do_::class, Node\Stmt\Switch_::class, Node\Stmt\TryCatch::class];
+    private const FUNCTIONS = [Node\Stmt\Function_::class, Node\Stmt\ClassMethod::class,
+        Node\Expr\Closure::class, Node\Expr\ArrowFunction::class];
+    private const CLASSES = [Node\Stmt\Class_::class, Node\Stmt\Trait_::class, Node\Stmt\Enum_::class,
+        Node\Stmt\Interface_::class];
+
+    private array $depths = [0];
+    public array $deep = [];
+    public array $spans = [];
+
+    public function __construct(private readonly int $maxDepth)
+    {
+    }
+
+    private static function isA(Node $node, array $classes): bool
+    {
+        foreach ($classes as $class) {
+            if ($node instanceof $class) {
+                return true;
+            }
+        }
+        return false;
+    }
+
+    private static function nests(Node $node): bool
+    {
+        $parent = $node->getAttribute('parent');
+        $elseIf = $node instanceof Node\Stmt\If_ && $parent instanceof Node\Stmt\Else_
+            && count($parent->stmts) === 1;
+        return self::isA($node, self::BLOCKS) && !$elseIf;
+    }
+
+    public function enterNode(Node $node): null
+    {
+        $span = ['line' => $node->getStartLine(), 'endLine' => $node->getEndLine()];
+        if (self::isA($node, self::CLASSES)) {
+            $this->spans[] = $span + ['kind' => 'class'];
+        } elseif (self::isA($node, self::FUNCTIONS)) {
+            $this->spans[] = $span + ['kind' => 'function'];
+            $this->depths[] = 0;
+        } elseif (self::nests($node)) {
+            $depth = array_pop($this->depths) + 1;
+            $this->depths[] = $depth;
+            if ($depth === $this->maxDepth + 1) {
+                $this->deep[] = $span;
+            }
+        }
+        return null;
+    }
+
+    public function leaveNode(Node $node): null
+    {
+        if (self::isA($node, self::FUNCTIONS)) {
+            array_pop($this->depths);
+        } elseif (self::nests($node)) {
+            $this->depths[] = array_pop($this->depths) - 1;
+        }
+        return null;
+    }
+}
+
+function codeLines(string $code): array
+{
+    $lines = [];
+    $line = 1;
+    foreach (token_get_all($code) as $token) {
+        $text = is_array($token) ? $token[1] : $token;
+        $breaks = substr_count($text, "\n");
+        $ignored = is_array($token) && in_array($token[0], [T_WHITESPACE, T_COMMENT, T_DOC_COMMENT], true);
+        if (!$ignored) {
+            $end = $breaks > 0 && str_ends_with($text, "\n") ? $line + $breaks - 1 : $line + $breaks;
+            for ($at = $line; $at <= $end; $at++) {
+                $lines[$at] = true;
+            }
+        }
+        $line += $breaks;
+    }
+    ksort($lines);
+    return array_keys($lines);
+}
+
+$parser = (new PhpParser\ParserFactory())->createForHostVersion();
+$files = [];
+foreach ($input['files'] as $file) {
+    $code = (string) file_get_contents($file);
+    try {
+        $ast = $parser->parse($code) ?? [];
+    } catch (PhpParser\Error $error) {
+        $files[] = ['file' => $file, 'error' => $error->getRawMessage()];
+        continue;
+    }
+    (new PhpParser\NodeTraverser(new PhpParser\NodeVisitor\ParentConnectingVisitor()))->traverse($ast);
+    $shape = new TalosShape($input['maxDepth']);
+    (new PhpParser\NodeTraverser($shape))->traverse($ast);
+    $lines = codeLines($code);
+    $files[] = [
+        'file' => $file,
+        'lines' => count($lines),
+        'overFrom' => $lines[$input['maxLines']] ?? null,
+        'lastLine' => substr_count($code, "\n") + (str_ends_with($code, "\n") ? 0 : 1),
+        'deep' => $shape->deep,
+        'spans' => $shape->spans,
+    ];
+}
+echo json_encode(['format' => 'talos-php-shape/1', 'files' => $files], JSON_THROW_ON_ERROR);
+`;
+const span = z.object({ line: z.number().int(), endLine: z.number().int() });
+const fileShape = z.union([
+    z.object({
+        file: z.string(),
+        lines: z.number().int(),
+        overFrom: z.number().int().nullable(),
+        lastLine: z.number().int(),
+        deep: z.array(span),
+        spans: z.array(span.extend({ kind: z.enum(['class', 'function']) })),
+    }),
+    z.object({ file: z.string(), error: z.string() }),
+]);
+const shapeReport = z.object({ format: z.literal('talos-php-shape/1'), files: z.array(fileShape) });
+export function parseShapes(json) {
+    const parsed = shapeReport.safeParse(json);
+    if (!parsed.success)
+        throw new EngineError('the PHP shape script printed an unknown shape');
+    return parsed.data.files;
+}
+/**
+ * Nesting deeper than 3 (each block nested one level too deep), and files over 400 lines of
+ * code, test files exempt from the size limit. `file` in each shape is repository-relative.
+ */
+export function shapeFindings(shapes) {
+    return shapes.flatMap((shape) => {
+        if ('error' in shape)
+            return [];
+        const deep = shape.deep.map((block) => ({
+            rule: 'talos/max-depth',
+            message: `This block is nested ${MAX_DEPTH + 1} deep; the most allowed is ${MAX_DEPTH}.`,
+            location: { file: shape.file, line: block.line, endLine: block.endLine },
+        }));
+        if (shape.overFrom === null || isTestPath(shape.file))
+            return deep;
+        const size = {
+            rule: 'talos/max-lines',
+            message: `This file has ${shape.lines} lines of code; the most allowed is ${MAX_FILE_LINES}.`,
+            location: { file: shape.file, line: shape.overFrom, endLine: shape.lastLine },
+        };
+        return [...deep, size];
+    });
+}
+/** A complexity finding widened to the function or class it is about. */
+export function widen(finding, spans) {
+    const location = finding.location;
+    if (location === undefined)
+        return finding;
+    const kind = finding.rule.endsWith('classLike') ? 'class' : 'function';
+    const found = spans.find((s) => s.kind === kind && s.line === location.line);
+    return found === undefined
+        ? finding
+        : { ...finding, location: { ...location, endLine: found.endLine } };
+}
+/** Each checked file's shape, keyed by its repository-relative path; shared within a run. */
+export async function shapes(ctx) {
+    return ctx.memo(`php/shape:${ctx.component.root}`, async () => {
+        await vendorFile(ctx, 'nikic/php-parser/lib/PhpParser/ParserFactory.php', 'nikic/php-parser');
+        const script = join(ctx.scratch, 'talos_shape.php');
+        await writeFile(script, SCRIPT);
+        const input = JSON.stringify({
+            vendor: join(componentDir(ctx), 'vendor'),
+            files: phpFiles(ctx).map((file) => absolute(ctx, file)),
+            maxDepth: MAX_DEPTH,
+            maxLines: MAX_FILE_LINES,
+        });
+        const result = await runPhp(ctx, [script], { input });
+        if (result.code !== 0)
+            throw failed('the PHP shape script', result);
+        return parseShapes(jsonFrom(result.stdout, 'the PHP shape script')).map((shape) => ({
+            ...shape,
+            file: fromTool(ctx, shape.file),
+        }));
+    });
+}
+//# sourceMappingURL=shape.js.map

package/dist/langs/php/shape.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"shape.js","sourceRoot":"","sources":["../../../src/langs/php/shape.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAC7C,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,QAAQ,EAAE,YAAY,EAAE,QAAQ,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,YAAY,CAAC;AACpF,OAAO,EAAc,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,UAAU,CAAC;AAC5E,OAAO,EAAE,WAAW,EAAE,MAAM,qBAAqB,CAAC;AAGlD,MAAM,SAAS,GAAG,CAAC,CAAC;AACpB,MAAM,cAAc,GAAG,GAAG,CAAC;AAE3B;;;;GAIG;AACH,MAAM,MAAM,GAAG,MAAM,CAAC,GAAG,CAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CA2HxB,CAAC;AAEF,MAAM,IAAI,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;AAE7E,MAAM,SAAS,GAAG,CAAC,CAAC,KAAK,CAAC;IACxB,CAAC,CAAC,MAAM,CAAC;QACP,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;QAChB,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE;QACvB,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;QACrC,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE;QAC1B,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC;QACnB,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,UAAU,CAAC,CAAC,EAAE,CAAC,CAAC;KACrE,CAAC;IACF,CAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC;CAClD,CAAC,CAAC;AAEH,MAAM,WAAW,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC,mBAAmB,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;AAKpG,MAAM,UAAU,WAAW,CAAC,IAAa;IACvC,MAAM,MAAM,GAAG,WAAW,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;IAC3C,IAAI,CAAC,MAAM,CAAC,OAAO;QAAE,MAAM,IAAI,WAAW,CAAC,+CAA+C,CAAC,CAAC;IAC5F,OAAO,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC;AAC3B,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,aAAa,CAAC,MAA4B;IACxD,OAAO,MAAM,CAAC,OAAO,CAAC,CAAC,KAAK,EAAa,EAAE;QACzC,IAAI,OAAO,IAAI,KAAK;YAAE,OAAO,EAAE,CAAC;QAChC,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,KAAK,EAAW,EAAE,CAAC,CAAC;YAC/C,IAAI,EAAE,iBAAiB;YACvB,OAAO,EAAE,wBAAwB,SAAS,GAAG,CAAC,8BAA8B,SAAS,GAAG;YACxF,QAAQ,EAAE,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE;SACzE,CAAC,CAAC,CAAC;QACJ,IAAI,KAAK,CAAC,QAAQ,KAAK,IAAI,IAAI,UAAU,CAAC,KAAK,CAAC,IAAI,CAAC;YAAE,OAAO,IAAI,CAAC;QACnE,MAAM,IAAI,GAAY;YACpB,IAAI,EAAE,iBAAiB;YACvB,OAAO,EAAE,iBAAiB,KAAK,CAAC,KAAK,uCAAuC,cAAc,GAAG;YAC7F,QAAQ,EAAE,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,IAAI,EAAE,KAAK,CAAC,QAAQ,EAAE,OAAO,EAAE,KAAK,CAAC,QAAQ,EAAE;SAC9E,CAAC;QACF,OAAO,CAAC,GAAG,IAAI,EAAE,IAAI,CAAC,CAAC;IACzB,CAAC,CAAC,CAAC;AACL,CAAC;AAED,yEAAyE;AACzE,MAAM,UAAU,KAAK,CAAC,OAAgB,EAAE,KAAsB;IAC5D,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAC;IAClC,IAAI,QAAQ,KAAK,SAAS;QAAE,OAAO,OAAO,CAAC;IAC3C,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,UAAU,CAAC;IACvE,MAAM,KAAK,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,IAAI,IAAI,CAAC,CAAC,IAAI,KAAK,QAAQ,CAAC,IAAI,CAAC,CAAC;IAC7E,OAAO,KAAK,KAAK,SAAS;QACxB,CAAC,CAAC,OAAO;QACT,CAAC,CAAC,EAAE,GAAG,OAAO,EAAE,QAAQ,EAAE,EAAE,GAAG,QAAQ,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,EAAE,CAAC;AACxE,CAAC;AAED,6FAA6F;AAC7F,MAAM,CAAC,KAAK,UAAU,MAAM,CAAC,GAAU;IACrC,OAAO,GAAG,CAAC,IAAI,CAAC,aAAa,GAAG,CAAC,SAAS,CAAC,IAAI,EAAE,EAAE,KAAK,IAAI,EAAE;QAC5D,MAAM,UAAU,CAAC,GAAG,EAAE,kDAAkD,EAAE,kBAAkB,CAAC,CAAC;QAC9F,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,iBAAiB,CAAC,CAAC;QACpD,MAAM,SAAS,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QAChC,MAAM,KAAK,GAAG,IAAI,CAAC,SAAS,CAAC;YAC3B,MAAM,EAAE,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,EAAE,QAAQ,CAAC;YACzC,KAAK,EAAE,QAAQ,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,QAAQ,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;YACvD,QAAQ,EAAE,SAAS;YACnB,QAAQ,EAAE,cAAc;SACzB,CAAC,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC;QACtD,IAAI,MAAM,CAAC,IAAI,KAAK,CAAC;YAAE,MAAM,MAAM,CAAC,sBAAsB,EAAE,MAAM,CAAC,CAAC;QACpE,OAAO,WAAW,CAAC,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,sBAAsB,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;YAClF,GAAG,KAAK;YACR,IAAI,EAAE,QAAQ,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,CAAC;SAChC,CAAC,CAAC,CAAC;IACN,CAAC,CAAC,CAAC;AACL,CAAC"}