@udondan/avanti 0.24.0 → 0.26.0

package/dist/config.d.ts

@@ -1,8 +1,20 @@
 import { AvantiConfig, Via } from './types';
 export declare const SELF_KEY = "$self";
 export declare function isRemoteConfigSpec(s: string): boolean;
+export declare function deriveConfigBase(configPath: string): string;
+export declare function resolveRelativeSrc(src: string, configBase: string): string;
 export declare function normalizeConfigKey(spec: string): string;
 export declare function resolveConfigPath(explicit?: string): string;
+export declare function parseGitHubSpec(spec: string): {
+    repo: string;
+    file: string;
+    ref: string | undefined;
+};
+export declare function parseGitLabSpec(spec: string): {
+    project: string;
+    file: string;
+    ref: string | undefined;
+};
 export declare function parseConfigContent(content: string): AvantiConfig;
 export declare function loadConfig(configPath: string, via?: Via | Via[]): Promise<AvantiConfig>;
 export declare function parseVia(value: unknown, loc: string): Via | Via[] | undefined;

package/dist/config.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"config.d.ts","sourceRoot":"","sources":["../src/config.ts"],"names":[],"mappings":"AAIA,OAAO,EACL,YAAY,EA4BZ,GAAG,EACJ,MAAM,SAAS,CAAC;AAQjB,eAAO,MAAM,QAAQ,UAAU,CAAC;AAShC,wBAAgB,kBAAkB,CAAC,CAAC,EAAE,MAAM,GAAG,OAAO,CAQrD;AAED,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAcvD;AAED,wBAAgB,iBAAiB,CAAC,QAAQ,CAAC,EAAE,MAAM,GAAG,MAAM,CAgB3D;AAsGD,wBAAgB,kBAAkB,CAAC,OAAO,EAAE,MAAM,GAAG,YAAY,CA+NhE;AAED,wBAAsB,UAAU,CAC9B,UAAU,EAAE,MAAM,EAClB,GAAG,CAAC,EAAE,GAAG,GAAG,GAAG,EAAE,GAChB,OAAO,CAAC,YAAY,CAAC,CAQvB;AAqJD,wBAAgB,QAAQ,CAAC,KAAK,EAAE,OAAO,EAAE,GAAG,EAAE,MAAM,GAAG,GAAG,GAAG,GAAG,EAAE,GAAG,SAAS,CAgC7E"}
+{"version":3,"file":"config.d.ts","sourceRoot":"","sources":["../src/config.ts"],"names":[],"mappings":"AAIA,OAAO,EACL,YAAY,EAiCZ,GAAG,EACJ,MAAM,SAAS,CAAC;AASjB,eAAO,MAAM,QAAQ,UAAU,CAAC;AAiBhC,wBAAgB,kBAAkB,CAAC,CAAC,EAAE,MAAM,GAAG,OAAO,CAQrD;AAED,wBAAgB,gBAAgB,CAAC,UAAU,EAAE,MAAM,GAAG,MAAM,CAkC3D;AAED,wBAAgB,kBAAkB,CAAC,GAAG,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG,MAAM,CAkC1E;AA6CD,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAcvD;AAED,wBAAgB,iBAAiB,CAAC,QAAQ,CAAC,EAAE,MAAM,GAAG,MAAM,CAgB3D;AAGD,wBAAgB,eAAe,CAAC,IAAI,EAAE,MAAM,GAAG;IAC7C,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,GAAG,EAAE,MAAM,GAAG,SAAS,CAAC;CACzB,CAmBA;AAGD,wBAAgB,eAAe,CAAC,IAAI,EAAE,MAAM,GAAG;IAC7C,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,EAAE,MAAM,CAAC;IACb,GAAG,EAAE,MAAM,GAAG,SAAS,CAAC;CACzB,CAmBA;AAkDD,wBAAgB,kBAAkB,CAAC,OAAO,EAAE,MAAM,GAAG,YAAY,CAkdhE;AAED,wBAAsB,UAAU,CAC9B,UAAU,EAAE,MAAM,EAClB,GAAG,CAAC,EAAE,GAAG,GAAG,GAAG,EAAE,GAChB,OAAO,CAAC,YAAY,CAAC,CAQvB;AA8JD,wBAAgB,QAAQ,CAAC,KAAK,EAAE,OAAO,EAAE,GAAG,EAAE,MAAM,GAAG,GAAG,GAAG,GAAG,EAAE,GAAG,SAAS,CAgC7E"}

package/dist/config.js

@@ -35,8 +35,12 @@ var __importStar = (this && this.__importStar) || (function () {
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.SELF_KEY = void 0;
 exports.isRemoteConfigSpec = isRemoteConfigSpec;
+exports.deriveConfigBase = deriveConfigBase;
+exports.resolveRelativeSrc = resolveRelativeSrc;
 exports.normalizeConfigKey = normalizeConfigKey;
 exports.resolveConfigPath = resolveConfigPath;
+exports.parseGitHubSpec = parseGitHubSpec;
+exports.parseGitLabSpec = parseGitLabSpec;
 exports.parseConfigContent = parseConfigContent;
 exports.loadConfig = loadConfig;
 exports.parseVia = parseVia;
@@ -51,6 +55,7 @@ const http_1 = require("./sources/http");
 const github_1 = require("./sources/github");
 const gitlab_1 = require("./sources/gitlab");
 const git_1 = require("./sources/git");
+const local_1 = require("./sources/local");
 exports.SELF_KEY = '$self';
 const CONFIG_CANDIDATES = [
     '.avanti.yml',
@@ -58,6 +63,14 @@ const CONFIG_CANDIDATES = [
     'avanti.yml',
     'avanti.yaml',
 ];
+function isLocalFileSrc(src) {
+    if (typeof src === 'string') {
+        return !(0, local_1.isNonLocalSrcString)(src);
+    }
+    if (!('path' in src))
+        return false;
+    return !(0, local_1.isNonLocalSrcString)(src.path);
+}
 function isRemoteConfigSpec(s) {
     return (s.startsWith('http://') ||
         s.startsWith('https://') ||
@@ -65,6 +78,104 @@ function isRemoteConfigSpec(s) {
         s.startsWith('github:') ||
         s.startsWith('gitlab:'));
 }
+function deriveConfigBase(configPath) {
+    if (configPath.startsWith('http://') || configPath.startsWith('https://')) {
+        const url = new URL(configPath);
+        const lastSlash = url.pathname.lastIndexOf('/');
+        url.pathname = lastSlash >= 0 ? url.pathname.slice(0, lastSlash + 1) : '/';
+        return url.toString();
+    }
+    if (configPath.startsWith('github:')) {
+        const { repo, file, ref } = parseGitHubSpec(configPath);
+        const normalizedFile = file.replace(/\\/g, '/');
+        const dir = normalizedFile.includes('/')
+            ? normalizedFile.slice(0, normalizedFile.lastIndexOf('/'))
+            : '';
+        const refSuffix = ref !== undefined ? `@${ref}` : '';
+        return `github:${repo}:${dir}${refSuffix}`;
+    }
+    if (configPath.startsWith('gitlab:')) {
+        const { project, file, ref } = parseGitLabSpec(configPath);
+        const normalizedFile = file.replace(/\\/g, '/');
+        const dir = normalizedFile.includes('/')
+            ? normalizedFile.slice(0, normalizedFile.lastIndexOf('/'))
+            : '';
+        const refSuffix = ref !== undefined ? `@${ref}` : '';
+        return `gitlab:${project}:${dir}${refSuffix}`;
+    }
+    if ((0, git_1.isGitRemoteUrl)(configPath)) {
+        const { repo, file, ref } = (0, git_1.parseGitRemoteSpec)(configPath);
+        const normalizedFile = file.replace(/\\/g, '/');
+        const dir = path.posix.dirname(normalizedFile);
+        const dirPart = dir === '.' ? '' : dir;
+        const refSuffix = ref !== undefined ? `@${ref}` : '';
+        return `${repo}//${dirPart}${refSuffix}`;
+    }
+    return path.dirname(configPath);
+}
+function resolveRelativeSrc(src, configBase) {
+    if (src.startsWith('/') ||
+        path.isAbsolute(src) ||
+        src.startsWith('~/') ||
+        (0, local_1.isNonLocalSrcString)(src)) {
+        return src;
+    }
+    if (configBase.startsWith('http://') || configBase.startsWith('https://')) {
+        const normalizedSrc = src.replace(/\\/g, '/');
+        const resolvedUrl = new URL(normalizedSrc, configBase);
+        const baseUrl = new URL(configBase);
+        if (baseUrl.search) {
+            const baseParams = new URLSearchParams(baseUrl.search);
+            const resolvedParams = new URLSearchParams(resolvedUrl.search);
+            const overriddenKeys = new Set(resolvedParams.keys());
+            for (const [key, val] of baseParams.entries()) {
+                if (!overriddenKeys.has(key))
+                    resolvedParams.append(key, val);
+            }
+            resolvedUrl.search = resolvedParams.toString();
+        }
+        return resolvedUrl.href;
+    }
+    if (configBase.startsWith('github:')) {
+        return resolveRelativeGitHostSpec(src, configBase, 'github');
+    }
+    if (configBase.startsWith('gitlab:')) {
+        return resolveRelativeGitHostSpec(src, configBase, 'gitlab');
+    }
+    if ((0, git_1.isGitRemoteUrl)(configBase)) {
+        return resolveRelativeGitRemoteSpec(src, configBase);
+    }
+    return path.resolve(configBase, src);
+}
+function resolveGitRelativePath(rest, src, configBase) {
+    const atIdx = rest.lastIndexOf('@');
+    const dir = atIdx === -1 ? rest : rest.slice(0, atIdx);
+    const ref = atIdx === -1 ? undefined : rest.slice(atIdx + 1);
+    const normalizedSrc = src.replace(/\\/g, '/');
+    const file = path.posix.join(dir, normalizedSrc);
+    if (file.startsWith('../') || file === '..') {
+        throw new Error(`Relative source path '${src}' escapes the repository root for config base '${configBase}'`);
+    }
+    const refSuffix = ref !== undefined ? `@${ref}` : '';
+    return { file, refSuffix };
+}
+function resolveRelativeGitHostSpec(src, configBase, scheme) {
+    const prefix = `${scheme}:`;
+    const body = configBase.slice(prefix.length);
+    const colonIdx = body.indexOf(':');
+    const id = colonIdx >= 0 ? body.slice(0, colonIdx) : body;
+    const rest = colonIdx >= 0 ? body.slice(colonIdx + 1) : '';
+    const { file, refSuffix } = resolveGitRelativePath(rest, src, configBase);
+    return `${prefix}${id}:${file}${refSuffix}`;
+}
+function resolveRelativeGitRemoteSpec(src, configBase) {
+    const schemeEnd = configBase.indexOf('://') + 3;
+    const separatorIdx = configBase.indexOf('//', schemeEnd);
+    const repo = separatorIdx >= 0 ? configBase.slice(0, separatorIdx) : configBase;
+    const rest = separatorIdx >= 0 ? configBase.slice(separatorIdx + 2) : '';
+    const { file, refSuffix } = resolveGitRelativePath(rest, src, configBase);
+    return `${repo}//${file}${refSuffix}`;
+}
 function normalizeConfigKey(spec) {
     if (spec.startsWith('github:') || spec.startsWith('gitlab:')) {
         const atIdx = spec.lastIndexOf('@');
@@ -260,16 +371,76 @@ function parseConfigContent(content) {
         }
         if (typeof e['backup'] === 'string')
             fileEntry.backup = e['backup'];
-        if (typeof e['post'] === 'string')
-            fileEntry.post = e['post'];
+        if (e['post'] !== undefined) {
+            throw new Error(`files["${target}"].post: removed — use on.write instead`);
+        }
+        if (e['on'] !== undefined) {
+            if (typeof e['on'] !== 'object' ||
+                e['on'] === null ||
+                Array.isArray(e['on']) ||
+                (Object.getPrototypeOf(e['on']) !== Object.prototype &&
+                    Object.getPrototypeOf(e['on']) !== null)) {
+                throw new Error(`files["${target}"].on: must be a mapping`);
+            }
+            const validKeys = new Set([
+                'write',
+                'beforeWrite',
+                'beforeCreate',
+                'beforeUpdate',
+                'create',
+                'update',
+            ]);
+            const onObj = e['on'];
+            const onHooks = Object.create(null);
+            for (const key of Object.keys(onObj)) {
+                if (!validKeys.has(key)) {
+                    throw new Error(`files["${target}"].on: unknown key "${key}"`);
+                }
+                if (typeof onObj[key] !== 'string') {
+                    throw new Error(`files["${target}"].on.${key}: must be a string`);
+                }
+                onHooks[key] = onObj[key];
+            }
+            fileEntry.on = onHooks;
+        }
         if (typeof e['writeInPlace'] === 'boolean')
             fileEntry.writeInPlace = e['writeInPlace'];
+        if (typeof e['followSymlink'] === 'boolean')
+            fileEntry.followSymlink = e['followSymlink'];
+        if (e['symlink'] !== undefined) {
+            if (e['symlink'] !== true &&
+                e['symlink'] !== 'absolute' &&
+                e['symlink'] !== 'relative') {
+                throw new Error(`files["${target}"].symlink: must be true, "absolute", or "relative"`);
+            }
+            fileEntry.symlink = e['symlink'];
+        }
+        if (e['sudo'] !== undefined) {
+            if (e['sudo'] === true) {
+                fileEntry.sudo = true;
+            }
+            else if (typeof e['sudo'] === 'string' && e['sudo'].trim()) {
+                if (e['sudo'].trim().startsWith('-')) {
+                    throw new Error(`files["${target}"].sudo: username must not start with '-'`);
+                }
+                fileEntry.sudo = e['sudo'].trim();
+            }
+            else if (e['sudo'] !== false) {
+                throw new Error(`files["${target}"].sudo: must be true or a non-empty username string`);
+            }
+        }
         if (e['strategy'] !== undefined) {
             if (e['strategy'] !== 'replace' && e['strategy'] !== 'insert') {
                 throw new Error(`files["${target}"].strategy: must be "replace" or "insert"`);
             }
             fileEntry.strategy = e['strategy'];
         }
+        if (fileEntry.strategy === 'insert' && fileEntry.sudo) {
+            throw new Error(`files["${target}"]: strategy "insert" cannot be combined with sudo — ` +
+                `insert mode reads the existing file without privilege escalation, ` +
+                `which silently treats an unreadable privileged file as absent. ` +
+                `Use a non-insert strategy, or manage the file without sudo.`);
+        }
         if (e['replace'] !== undefined) {
             if (!Array.isArray(e['replace'])) {
                 throw new Error(`files["${target}"]: "replace" must be an array`);
@@ -303,6 +474,15 @@ function parseConfigContent(content) {
                 fileEntry.toml = parseTomlMergeOptions(rawToml, `files["${target}"]`);
             }
         }
+        if (e['ini'] !== undefined) {
+            const rawIni = e['ini'];
+            if (rawIni === true || rawIni === false) {
+                fileEntry.ini = rawIni;
+            }
+            else {
+                fileEntry.ini = parseIniMergeOptions(rawIni, `files["${target}"]`);
+            }
+        }
         if (e['template'] !== undefined) {
             const rawTemplate = e['template'];
             if (rawTemplate === true) {
@@ -316,6 +496,106 @@ function parseConfigContent(content) {
                 fileEntry.template = rawTemplate;
             }
         }
+        if (e['extract'] !== undefined) {
+            if (fileEntry.symlink) {
+                throw new Error(`files["${target}"].symlink: cannot be combined with extract:`);
+            }
+            if (Array.isArray(src)) {
+                throw new Error(`files["${target}"].extract: cannot be used with a list of sources`);
+            }
+            if (!target.endsWith('/') && !target.endsWith(path.sep)) {
+                throw new Error(`files["${target}"].extract: target must be a directory (end with "/") — archive extraction writes multiple files`);
+            }
+            const rawExtract = e['extract'];
+            if (rawExtract === true) {
+                fileEntry.extract = true;
+            }
+            else if (Array.isArray(rawExtract)) {
+                if (rawExtract.length === 0) {
+                    throw new Error(`files["${target}"].extract: must not be an empty array`);
+                }
+                fileEntry.extract = rawExtract.map((pat, i) => {
+                    if (typeof pat !== 'string' || !pat) {
+                        throw new Error(`files["${target}"].extract[${i}]: must be a non-empty string`);
+                    }
+                    if (pat.length > 2 && pat.startsWith('/') && pat.endsWith('/')) {
+                        try {
+                            new RegExp(pat.slice(1, -1));
+                        }
+                        catch (err) {
+                            throw new Error(`files["${target}"].extract[${i}]: invalid regex`, { cause: err });
+                        }
+                    }
+                    return pat;
+                });
+            }
+            else {
+                throw new Error(`files["${target}"].extract: must be true or a non-empty array of patterns`);
+            }
+        }
+        if (fileEntry.symlink) {
+            if (target === exports.SELF_KEY) {
+                throw new Error(`files["${exports.SELF_KEY}"].symlink: $self cannot be a symlink entry`);
+            }
+            if (target.endsWith('/') || target.endsWith(path.sep)) {
+                throw new Error(`files["${target}"].symlink: target must be a single file path, not a directory pattern (remove the trailing slash)`);
+            }
+            if (Array.isArray(fileEntry.src)) {
+                throw new Error(`files["${target}"].symlink: cannot be combined with a list of sources`);
+            }
+            if (!isLocalFileSrc(fileEntry.src)) {
+                throw new Error(`files["${target}"].symlink: src must be a local path — ` +
+                    `http, exec, github, gitlab, and other remote sources are not supported`);
+            }
+            if (typeof fileEntry.src !== 'string' && 'path' in fileEntry.src) {
+                const localSrc = fileEntry.src;
+                if (localSrc.sha) {
+                    throw new Error(`files["${target}"].symlink: cannot be combined with src.sha`);
+                }
+                if (localSrc.filter) {
+                    throw new Error(`files["${target}"].symlink: cannot be combined with src.filter`);
+                }
+                if (localSrc.if) {
+                    throw new Error(`files["${target}"].symlink: cannot be combined with src.if`);
+                }
+                if (localSrc.ifAny) {
+                    throw new Error(`files["${target}"].symlink: cannot be combined with src.ifAny`);
+                }
+            }
+            if (fileEntry.replace) {
+                throw new Error(`files["${target}"].symlink: cannot be combined with replace:`);
+            }
+            if (fileEntry.template) {
+                throw new Error(`files["${target}"].symlink: cannot be combined with template:`);
+            }
+            if (fileEntry.json) {
+                throw new Error(`files["${target}"].symlink: cannot be combined with json:`);
+            }
+            if (fileEntry.yaml) {
+                throw new Error(`files["${target}"].symlink: cannot be combined with yaml:`);
+            }
+            if (fileEntry.toml) {
+                throw new Error(`files["${target}"].symlink: cannot be combined with toml:`);
+            }
+            if (fileEntry.ini) {
+                throw new Error(`files["${target}"].symlink: cannot be combined with ini:`);
+            }
+            if (fileEntry.on?.write) {
+                throw new Error(`files["${target}"].symlink: cannot be combined with on.write:`);
+            }
+            if (fileEntry.writeInPlace) {
+                throw new Error(`files["${target}"].symlink: cannot be combined with writeInPlace:`);
+            }
+            if (fileEntry.strategy) {
+                throw new Error(`files["${target}"].symlink: cannot be combined with strategy:`);
+            }
+            if (fileEntry.followSymlink) {
+                throw new Error(`files["${target}"].symlink: cannot be combined with followSymlink:`);
+            }
+            if (fileEntry.mode) {
+                throw new Error(`files["${target}"].symlink: cannot be combined with mode — symlinks do not have independent permission bits on POSIX`);
+            }
+        }
         let expandedTargets;
         try {
             expandedTargets = (0, paths_1.expandBraces)(target);
@@ -336,6 +616,11 @@ function parseConfigContent(content) {
                 const suffix = parts.length > 0 ? ` (${parts.join('; ')})` : '';
                 throw new Error(`files["${expandedTarget}"]: duplicate target${suffix}`);
             }
+            if (fileEntry.symlink &&
+                expandedTarget !== target &&
+                (expandedTarget.endsWith('/') || expandedTarget.endsWith(path.sep))) {
+                throw new Error(`files["${expandedTarget}"] (expanded from "${target}").symlink: target must be a single file path, not a directory pattern (remove the trailing slash)`);
+            }
             files[expandedTarget] = { ...fileEntry, target: expandedTarget };
             if (expandedTarget !== target) {
                 fileOrigins[expandedTarget] = target;
@@ -460,6 +745,15 @@ function parseVariableEntry(obj, varName) {
             entry.toml = parseTomlMergeOptions(rawToml, loc);
         }
     }
+    if (obj['ini'] !== undefined) {
+        const rawIni = obj['ini'];
+        if (rawIni === true || rawIni === false) {
+            entry.ini = rawIni;
+        }
+        else {
+            entry.ini = parseIniMergeOptions(rawIni, loc);
+        }
+    }
     if (obj['template'] !== undefined) {
         const rawTemplate = obj['template'];
         if (rawTemplate === true) {
@@ -519,7 +813,13 @@ function parseVia(value, loc) {
     }
     throw new Error(`${loc}.via: must be a string or array`);
 }
-const VALID_OS_PLATFORMS = ['linux', 'mac', 'windows'];
+const VALID_OS_PLATFORMS = [
+    'linux',
+    'mac',
+    'windows',
+    'darwin',
+    'win32',
+];
 function parseCondition(raw, loc) {
     if (!raw || typeof raw !== 'object' || Array.isArray(raw)) {
         throw new Error(`${loc}: must be an object`);
@@ -600,6 +900,30 @@ function parseConditionField(obj, loc) {
     }
     return result;
 }
+function parseFilter(obj, loc) {
+    if (obj['filter'] === undefined)
+        return undefined;
+    if (!Array.isArray(obj['filter'])) {
+        throw new Error(`${loc}.filter: must be an array`);
+    }
+    if (obj['filter'].length === 0) {
+        throw new Error(`${loc}.filter: must not be an empty array`);
+    }
+    return obj['filter'].map((entry, i) => {
+        if (typeof entry !== 'string' || !entry) {
+            throw new Error(`${loc}.filter[${i}]: must be a non-empty string`);
+        }
+        if (entry.length > 2 && entry.startsWith('/') && entry.endsWith('/')) {
+            try {
+                new RegExp(entry.slice(1, -1));
+            }
+            catch (err) {
+                throw new Error(`${loc}.filter[${i}]: invalid regex: ${err instanceof Error ? err.message : String(err)}`, { cause: err });
+            }
+        }
+        return entry;
+    });
+}
 function parseSingleSrc(raw, loc) {
     // Plain string → http/https URL or local path
     if (typeof raw === 'string') {
@@ -620,6 +944,9 @@ function parseSingleSrc(raw, loc) {
             }
             result.optional = obj['optional'];
         }
+        const pathFilter = parseFilter(obj, loc);
+        if (pathFilter !== undefined)
+            result.filter = pathFilter;
         const pathSha = parseSha(obj['sha'], loc);
         if (pathSha !== undefined)
             result.sha = pathSha;
@@ -735,6 +1062,7 @@ function parseSingleSrc(raw, loc) {
             throw new Error(`${loc}.gitlab.host: must be a non-empty string`);
         }
         const gitlabConds = parseConditionField(obj, loc);
+        const gitlabFilter = parseFilter(obj, loc);
         if (hasRelease) {
             return {
                 gitlab: {
@@ -744,6 +1072,7 @@ function parseSingleSrc(raw, loc) {
                     host: typeof g['host'] === 'string' ? g['host'] : undefined,
                     via: parseVia(g['via'], `${loc}.gitlab`),
                 },
+                ...(gitlabFilter !== undefined ? { filter: gitlabFilter } : {}),
                 ...gitlabConds,
             };
         }
@@ -756,6 +1085,7 @@ function parseSingleSrc(raw, loc) {
                 host: typeof g['host'] === 'string' ? g['host'] : undefined,
                 via: parseVia(g['via'], `${loc}.gitlab`),
             },
+            ...(gitlabFilter !== undefined ? { filter: gitlabFilter } : {}),
             ...gitlabConds,
         };
     }
@@ -799,6 +1129,7 @@ function parseSingleSrc(raw, loc) {
             throw new Error(`${loc}.github.host: must be a non-empty string`);
         }
         const githubConds = parseConditionField(obj, loc);
+        const githubFilter = parseFilter(obj, loc);
         if (hasRelease) {
             return {
                 github: {
@@ -808,6 +1139,7 @@ function parseSingleSrc(raw, loc) {
                     host: typeof g['host'] === 'string' ? g['host'] : undefined,
                     via: parseVia(g['via'], `${loc}.github`),
                 },
+                ...(githubFilter !== undefined ? { filter: githubFilter } : {}),
                 ...githubConds,
             };
         }
@@ -820,6 +1152,7 @@ function parseSingleSrc(raw, loc) {
                 host: typeof g['host'] === 'string' ? g['host'] : undefined,
                 via: parseVia(g['via'], `${loc}.github`),
             },
+            ...(githubFilter !== undefined ? { filter: githubFilter } : {}),
             ...githubConds,
         };
     }
@@ -843,6 +1176,7 @@ function parseSingleSrc(raw, loc) {
             throw new Error(`${loc}.bitbucket.host: must be a non-empty string`);
         }
         const bitbucketConds = parseConditionField(obj, loc);
+        const bitbucketFilter = parseFilter(obj, loc);
         return {
             bitbucket: {
                 workspace: b['workspace'],
@@ -852,6 +1186,7 @@ function parseSingleSrc(raw, loc) {
                 sha: parseSha(b['sha'], `${loc}.bitbucket`),
                 host: typeof b['host'] === 'string' ? b['host'] : undefined,
             },
+            ...(bitbucketFilter !== undefined ? { filter: bitbucketFilter } : {}),
             ...bitbucketConds,
         };
     }
@@ -868,6 +1203,7 @@ function parseSingleSrc(raw, loc) {
             throw new Error(`${loc}.git.file: required string`);
         }
         const gitConds = parseConditionField(obj, loc);
+        const gitFilter = parseFilter(obj, loc);
         return {
             git: {
                 repo: gt['repo'],
@@ -875,6 +1211,7 @@ function parseSingleSrc(raw, loc) {
                 ref: typeof gt['ref'] === 'string' ? gt['ref'] : undefined,
                 sha: parseSha(gt['sha'], `${loc}.git`),
             },
+            ...(gitFilter !== undefined ? { filter: gitFilter } : {}),
             ...gitConds,
         };
     }
@@ -883,6 +1220,9 @@ function parseSingleSrc(raw, loc) {
             throw new Error(`${loc}.aws_s3: must be a non-empty string (s3:// URI)`);
         }
         const result = { aws_s3: obj['aws_s3'] };
+        const s3Filter = parseFilter(obj, loc);
+        if (s3Filter !== undefined)
+            result.filter = s3Filter;
         const s3Sha = parseSha(obj['sha'], loc);
         if (s3Sha !== undefined)
             result.sha = s3Sha;
@@ -1030,6 +1370,9 @@ function parseYamlMergeOptions(raw, loc) {
 function parseTomlMergeOptions(raw, loc) {
     return parseMergeOptions(raw, loc, 'toml', ['abort', 'first_wins', 'last_wins'], ['replace', 'concat', 'dedupe'], ['replace', 'merge']);
 }
+function parseIniMergeOptions(raw, loc) {
+    return parseMergeOptions(raw, loc, 'ini', ['abort', 'first_wins', 'last_wins'], ['replace', 'concat', 'dedupe'], ['replace', 'merge']);
+}
 function parseReplaceRule(r, target, j) {
     if (!r || typeof r !== 'object' || Array.isArray(r)) {
         throw new Error(`files["${target}"].replace[${j}]: must be an object`);