@thejoseki/clawform 2.3.0 → 2.3.2

package/src/lib/project-config.js

@@ -1,145 +1,145 @@
-// Consumer-config loader for Clawform. Reads <projectDir>/clawform.config.json,
-// merges it onto the built-in defaults, returns a frozen object. Pure I/O — no
-// validation of "is customer set"; callers that need it (naming.js) check at
-// the point they need a value, with a focused error message.
-//
-// Merge order (low → high):
-//   1. DEFAULT_CONFIG                       (src/lib/defaults.js)
-//   2. <projectDir>/clawform.config.json     (consumer-committed, may be missing)
-//   3. caller-supplied overrides            (CLI flags)
-//
-// Missing file       → silently skipped (a fresh consumer is a valid state).
-// Malformed JSON     → throws with the file path and the parse error.
-// Wrong shape (e.g.  → throws — we'd rather fail loud than ship Acme's defaults under
-//   legacy_prefixes:   a wrong key.
-//   "OLDNET")
-
-import { readFileSync, existsSync } from 'node:fs';
-import { join, basename } from 'node:path';
-import { DEFAULT_CONFIG } from './defaults.js';
-import {
-  CONFIG_FILENAMES,
-  isDeprecatedConfigFilename,
-  warnDeprecatedConfigFilename,
-} from './rename-compat.js';
-
-const ARRAY_KEYS = new Set(['envs', 'legacy_prefixes', 'service_shortnames_extra']);
-const OBJECT_KEYS = new Set(['accounts', 'tags_defaults']);
-const STRING_KEYS = new Set(['customer', 'region']);
-
-// First match wins, so a project mid-rename that still has both files gets the
-// new one. Silent about the old name here — the warning belongs on the read,
-// not on every existence probe.
-export function findConfigPath(projectDir) {
-  if (!projectDir) return null;
-  for (const name of CONFIG_FILENAMES) {
-    const p = join(projectDir, name);
-    if (existsSync(p)) return p;
-  }
-  return null;
-}
-
-export function readProjectConfig(projectDir) {
-  const p = findConfigPath(projectDir);
-  if (!p) return {};
-  if (isDeprecatedConfigFilename(basename(p))) warnDeprecatedConfigFilename(p);
-  let raw;
-  try {
-    raw = readFileSync(p, 'utf8');
-  } catch (err) {
-    throw new Error(`Failed to read ${p}: ${err.message}`);
-  }
-  let parsed;
-  try {
-    parsed = JSON.parse(raw);
-  } catch (err) {
-    throw new Error(`Malformed JSON in ${p}: ${err.message}`);
-  }
-  if (parsed === null || typeof parsed !== 'object' || Array.isArray(parsed)) {
-    throw new Error(`Expected JSON object in ${p}, got ${Array.isArray(parsed) ? 'array' : typeof parsed}`);
-  }
-  return validateShape(parsed, p);
-}
-
-function validateShape(cfg, sourcePath) {
-  const out = {};
-  for (const [k, v] of Object.entries(cfg)) {
-    if (k.startsWith('$')) continue;
-    if (STRING_KEYS.has(k)) {
-      if (typeof v !== 'string') throw new Error(`${sourcePath}: "${k}" must be a string`);
-      out[k] = v;
-    } else if (ARRAY_KEYS.has(k)) {
-      if (!Array.isArray(v) || !v.every((x) => typeof x === 'string')) {
-        throw new Error(`${sourcePath}: "${k}" must be an array of strings`);
-      }
-      out[k] = [...v];
-    } else if (OBJECT_KEYS.has(k)) {
-      if (v === null || typeof v !== 'object' || Array.isArray(v)) {
-        throw new Error(`${sourcePath}: "${k}" must be an object`);
-      }
-      out[k] = { ...v };
-    } else {
-      // Unknown key — keep verbatim so the consumer can add metadata, but don't
-      // act on it. This trades strictness for forward-compatibility.
-      out[k] = v;
-    }
-  }
-  return out;
-}
-
-export function loadProjectConfig({ projectDir, overrides = {} } = {}) {
-  const fromFile = readProjectConfig(projectDir);
-  const merged = mergeShallow(DEFAULT_CONFIG, fromFile, overrides);
-  return Object.freeze(merged);
-}
-
-function mergeShallow(...sources) {
-  const out = {
-    ...DEFAULT_CONFIG,
-    accounts: { ...DEFAULT_CONFIG.accounts },
-    tags_defaults: { ...DEFAULT_CONFIG.tags_defaults },
-    envs: [...DEFAULT_CONFIG.envs],
-    legacy_prefixes: [...DEFAULT_CONFIG.legacy_prefixes],
-    service_shortnames_extra: [...DEFAULT_CONFIG.service_shortnames_extra],
-  };
-  for (const src of sources) {
-    if (!src) continue;
-    for (const [k, v] of Object.entries(src)) {
-      if (OBJECT_KEYS.has(k) && v && typeof v === 'object' && !Array.isArray(v)) {
-        out[k] = { ...out[k], ...v };
-      } else if (ARRAY_KEYS.has(k) && Array.isArray(v)) {
-        out[k] = [...v];
-      } else {
-        out[k] = v;
-      }
-    }
-  }
-  return out;
-}
-
-export function resolveProjectDir(explicit) {
-  return explicit || process.env.CLAUDE_PROJECT_DIR || process.cwd();
-}
-
-// Build the LEGACY_PREFIX_RE used by the hook from a runtime list. Returns null
-// when the list is empty — the hook treats null as "no legacy-freeze gate".
-//
-// Unanchored (\b...) on purpose: the hook applies it to a whole COMMAND LINE,
-// where the stack name appears mid-string. Do NOT reuse this against a bare
-// export/stack name — `\b` treats every hyphen as a boundary, so a legacy token
-// appearing mid-name (`p-acme-…-OLDAPP-arn`) would false-positive. Use the anchored
-// builder below for whole-name checks.
-export function buildLegacyPrefixRegex(prefixes) {
-  if (!Array.isArray(prefixes) || prefixes.length === 0) return null;
-  const escaped = prefixes.map((p) => p.replace(/[.*+?^${}()|[\]\\]/g, '\\$&'));
-  return new RegExp(`\\b(${escaped.join('|')})-[A-Za-z0-9-]+`);
-}
-
-// Anchored variant for matching a WHOLE name (export name, stack name) rather
-// than a substring of a command line: the legacy prefix must be the name's
-// leading segment. `OLDNET-VPC` matches; `p-acme-pri-lmd-payroll-OLDAPP-arn` does not.
-export function buildAnchoredLegacyPrefixRegex(prefixes) {
-  if (!Array.isArray(prefixes) || prefixes.length === 0) return null;
-  const escaped = prefixes.map((p) => p.replace(/[.*+?^${}()|[\]\\]/g, '\\$&'));
-  return new RegExp(`^(${escaped.join('|')})-`);
-}
+// Consumer-config loader for Clawform. Reads <projectDir>/clawform.config.json,
+// merges it onto the built-in defaults, returns a frozen object. Pure I/O — no
+// validation of "is customer set"; callers that need it (naming.js) check at
+// the point they need a value, with a focused error message.
+//
+// Merge order (low → high):
+//   1. DEFAULT_CONFIG                       (src/lib/defaults.js)
+//   2. <projectDir>/clawform.config.json     (consumer-committed, may be missing)
+//   3. caller-supplied overrides            (CLI flags)
+//
+// Missing file       → silently skipped (a fresh consumer is a valid state).
+// Malformed JSON     → throws with the file path and the parse error.
+// Wrong shape (e.g.  → throws — we'd rather fail loud than ship Acme's defaults under
+//   legacy_prefixes:   a wrong key.
+//   "OLDNET")
+
+import { readFileSync, existsSync } from 'node:fs';
+import { join, basename } from 'node:path';
+import { DEFAULT_CONFIG } from './defaults.js';
+import {
+  CONFIG_FILENAMES,
+  isDeprecatedConfigFilename,
+  warnDeprecatedConfigFilename,
+} from './rename-compat.js';
+
+const ARRAY_KEYS = new Set(['envs', 'legacy_prefixes', 'service_shortnames_extra']);
+const OBJECT_KEYS = new Set(['accounts', 'tags_defaults']);
+const STRING_KEYS = new Set(['customer', 'region']);
+
+// First match wins, so a project mid-rename that still has both files gets the
+// new one. Silent about the old name here — the warning belongs on the read,
+// not on every existence probe.
+export function findConfigPath(projectDir) {
+  if (!projectDir) return null;
+  for (const name of CONFIG_FILENAMES) {
+    const p = join(projectDir, name);
+    if (existsSync(p)) return p;
+  }
+  return null;
+}
+
+export function readProjectConfig(projectDir) {
+  const p = findConfigPath(projectDir);
+  if (!p) return {};
+  if (isDeprecatedConfigFilename(basename(p))) warnDeprecatedConfigFilename(p);
+  let raw;
+  try {
+    raw = readFileSync(p, 'utf8');
+  } catch (err) {
+    throw new Error(`Failed to read ${p}: ${err.message}`);
+  }
+  let parsed;
+  try {
+    parsed = JSON.parse(raw);
+  } catch (err) {
+    throw new Error(`Malformed JSON in ${p}: ${err.message}`);
+  }
+  if (parsed === null || typeof parsed !== 'object' || Array.isArray(parsed)) {
+    throw new Error(`Expected JSON object in ${p}, got ${Array.isArray(parsed) ? 'array' : typeof parsed}`);
+  }
+  return validateShape(parsed, p);
+}
+
+function validateShape(cfg, sourcePath) {
+  const out = {};
+  for (const [k, v] of Object.entries(cfg)) {
+    if (k.startsWith('$')) continue;
+    if (STRING_KEYS.has(k)) {
+      if (typeof v !== 'string') throw new Error(`${sourcePath}: "${k}" must be a string`);
+      out[k] = v;
+    } else if (ARRAY_KEYS.has(k)) {
+      if (!Array.isArray(v) || !v.every((x) => typeof x === 'string')) {
+        throw new Error(`${sourcePath}: "${k}" must be an array of strings`);
+      }
+      out[k] = [...v];
+    } else if (OBJECT_KEYS.has(k)) {
+      if (v === null || typeof v !== 'object' || Array.isArray(v)) {
+        throw new Error(`${sourcePath}: "${k}" must be an object`);
+      }
+      out[k] = { ...v };
+    } else {
+      // Unknown key — keep verbatim so the consumer can add metadata, but don't
+      // act on it. This trades strictness for forward-compatibility.
+      out[k] = v;
+    }
+  }
+  return out;
+}
+
+export function loadProjectConfig({ projectDir, overrides = {} } = {}) {
+  const fromFile = readProjectConfig(projectDir);
+  const merged = mergeShallow(DEFAULT_CONFIG, fromFile, overrides);
+  return Object.freeze(merged);
+}
+
+function mergeShallow(...sources) {
+  const out = {
+    ...DEFAULT_CONFIG,
+    accounts: { ...DEFAULT_CONFIG.accounts },
+    tags_defaults: { ...DEFAULT_CONFIG.tags_defaults },
+    envs: [...DEFAULT_CONFIG.envs],
+    legacy_prefixes: [...DEFAULT_CONFIG.legacy_prefixes],
+    service_shortnames_extra: [...DEFAULT_CONFIG.service_shortnames_extra],
+  };
+  for (const src of sources) {
+    if (!src) continue;
+    for (const [k, v] of Object.entries(src)) {
+      if (OBJECT_KEYS.has(k) && v && typeof v === 'object' && !Array.isArray(v)) {
+        out[k] = { ...out[k], ...v };
+      } else if (ARRAY_KEYS.has(k) && Array.isArray(v)) {
+        out[k] = [...v];
+      } else {
+        out[k] = v;
+      }
+    }
+  }
+  return out;
+}
+
+export function resolveProjectDir(explicit) {
+  return explicit || process.env.CLAUDE_PROJECT_DIR || process.cwd();
+}
+
+// Build the LEGACY_PREFIX_RE used by the hook from a runtime list. Returns null
+// when the list is empty — the hook treats null as "no legacy-freeze gate".
+//
+// Unanchored (\b...) on purpose: the hook applies it to a whole COMMAND LINE,
+// where the stack name appears mid-string. Do NOT reuse this against a bare
+// export/stack name — `\b` treats every hyphen as a boundary, so a legacy token
+// appearing mid-name (`p-acme-…-OLDAPP-arn`) would false-positive. Use the anchored
+// builder below for whole-name checks.
+export function buildLegacyPrefixRegex(prefixes) {
+  if (!Array.isArray(prefixes) || prefixes.length === 0) return null;
+  const escaped = prefixes.map((p) => p.replace(/[.*+?^${}()|[\]\\]/g, '\\$&'));
+  return new RegExp(`\\b(${escaped.join('|')})-[A-Za-z0-9-]+`);
+}
+
+// Anchored variant for matching a WHOLE name (export name, stack name) rather
+// than a substring of a command line: the legacy prefix must be the name's
+// leading segment. `OLDNET-VPC` matches; `p-acme-pri-lmd-payroll-OLDAPP-arn` does not.
+export function buildAnchoredLegacyPrefixRegex(prefixes) {
+  if (!Array.isArray(prefixes) || prefixes.length === 0) return null;
+  const escaped = prefixes.map((p) => p.replace(/[.*+?^${}()|[\]\\]/g, '\\$&'));
+  return new RegExp(`^(${escaped.join('|')})-`);
+}