@vibe-agent-toolkit/utils 0.2.0-rc.5 → 0.2.0-rc.7

package/README.md

@@ -28,7 +28,7 @@ The last two columns are the ones that matter when choosing. **"Resolves with ze
 | `./text` | `decodeTextContent` — the one bytes-to-text seam: BOM-announced UTF-8/UTF-16LE/UTF-16BE/UTF-32LE/UTF-32BE, BOM stripped, UTF-8 assumed otherwise; reports the encoding, whether it was a BOM fact or an assumption, and how many U+FFFD the decode substituted | **none** | — | **yes** |
 | `./zod` | `ZodTypeNames`, `getZodTypeName`, `isZodType`, `unwrapZodType`, `isZodOptional`, `isZodNullable` | **none** | — | **yes** |
 | `./glob` | `isGlob`, static base extraction, magic remainder | `path` only | — | **yes** |
-| `./fs` | `normalizePath`, `normalizedTmpdir`, `mkdirSyncReal`, `resolveFromImportMeta`, `dynamicImportPath`, `copyDirectory`, `fillSiblingNames`, `classifyFilenameCaseFrom`, `FsLookupCache`, `readTextContent`, `readTextContentSync` | `fs`, `fs/promises`, `os`, `path`, `url`, `util` | — | **yes** |
+| `./fs` | `normalizePath`, `normalizedTmpdir`, `mkdirSyncReal`, `resolveFromImportMeta`, `dynamicImportPath`, `copyDirectory`, `fillPathSpellings`, `pathSpellingFrom`, `DirectorySpellingIndex`, `spellingWalkRoot`, `fillRealpaths`, `realpathFrom`, `FsLookupCache`, `readTextContent`, `readTextContentSync` | `fs`, `fs/promises`, `os`, `path`, `url`, `util` | — | **yes** |
 | `./testing` | `getTestOutputDir`, `getTestOutputBase`, `setupAsyncTempDirSuite`, `setupSyncTempDirSuite`, `removeScratchDir`, `symlinkCapability`, `createSymlink`, `createSymlinkAsync` | `crypto`, `fs`, `fs/promises`, `os`, `path`, `url` | — | **yes** |
 | `./asset` | `resolveAssetReference` — paths and npm bare specifiers | `fs`, `module`, `os`, `path`, `url` | — | **yes** |
 | `./yaml` | `updateYamlIn`, `verifyConfinedYamlEdit` — byte-surgical YAML edits | **none** | `yaml` | no — needs `yaml` |
@@ -159,11 +159,19 @@ These return **OS-native** separators, because they resolve real filesystem iden
 - `resolveFromImportMeta()` - resolve paths relative to an `import.meta.url`
 - `dynamicImportPath()` - `import()` an absolute path (works on Windows, which rejects bare absolute paths)
 - `copyDirectory()`
-- `fillSiblingNames(filePaths, fsCache)` - pass 1 of the case-exact existence check: list the parent
-  directory of every path, de-duplicated by directory and issued concurrently. The only I/O in the pair
-- `classifyFilenameCaseFrom(table, filePath)` - pass 2: pure judgement against the table pass 1 returned,
-  reporting the entry actually on disk when only the case differs. Fill **once** over the whole set and
-  then judge each path — a fill per path reinstates the serialized `readdir` this shape removes
+- `fillPathSpellings(requests, fsCache)` - pass 1 of the case-exact existence check: walk each
+  `{ referrer, target }` from the deepest directory the two share, listing every directory on the way
+  down exactly once. The only I/O in the pair
+- `pathSpellingFrom(table, referrer, target)` - pass 2: pure judgement against the table pass 1
+  returned, reporting the path as disk spells it when the asked-for spelling differs only by case or
+  by Unicode normalization. Fill **once** over the whole set and then judge each reference — a fill
+  per reference reinstates the serialized `readdir` this shape removes.
+  ⚠️ It judges **every component**, not just the basename: judging only the last one hands each
+  directory component back to the host filesystem's own folding, so a link that resolves on
+  macOS/APFS 404s on a case-sensitive filesystem — and a basename-only correction still leaves the
+  author with a broken path
+- `DirectorySpellingIndex` / `spellingWalkRoot(referrer, target)` - the index the pair walks over, and
+  the root it walks from, for a caller that cannot enumerate its targets up front
 - `FsLookupCache` - per-run memo for `realpath`/`readdir`, sharing in-flight promises. Construct one per
   validation run and let it die with the run — never a module-level singleton, or a long-lived process
   answers from a stale directory listing.
@@ -211,6 +219,13 @@ They are nonetheless on their own [`./project`](#import-narrowly) entry rather t
 
 - `crawlDirectory()` / `crawlDirectorySync()` - gitignore-aware directory walks
 - `NEVER_CRAWL_GLOBS` / `BUILD_OUTPUT_GLOBS` - the standard exclusion sets
+- `UnreadablePolicy` - the REQUIRED `unreadable` option on every crawl (and on `gitLsFiles` /
+  `gitLsOthers` under `./git`): `{ refuse: { root, remedy } }` throws `DirectoryListingRefusedError`
+  with an adopter-facing, root-relative sentence when a directory cannot be listed;
+  `{ degrade: (refusal) => … }` keeps walking and hands the gap to you to report. There is no
+  default — a shorter list nothing can tell from a complete one is the failure this option exists
+  to prevent, so the caller states which answer is honest for its lane, and an omitted policy is
+  refused up front by name.
 
 Glob *pattern inspection* is a separate entry, `./glob`, and stays that way: `./glob` is dependency-free and reaches only `node:path`, whereas crawling reaches the filesystem, `git`, and `picomatch`.
 

package/dist/entrypoint.d.ts

@@ -0,0 +1,54 @@
+/**
+ * The one answer to "am I the script Node was asked to run?"
+ *
+ * Lives here, in the package every other one already depends on, because there
+ * has to be exactly one: the question was previously answered three different
+ * ways across this monorepo (`import.meta.main`, a raw `pathToFileURL` string
+ * compare, and this function), and two of those three answer `false` for the
+ * script they guard — which makes the process exit 0 having run nothing.
+ */
+/**
+ * Was this module invoked as the process entrypoint, rather than imported?
+ *
+ * ⛔ **Do not reach for `import.meta.main` here.** It shipped in Node 24.2 and
+ * 22.18; this repo declares a floor of `>=22.13.0`, and on a real 22.13.0 the
+ * property is `undefined`:
+ *
+ * ```
+ * $ node-v22.13.0 --input-type=module -e "console.log(import.meta.main)"  -> undefined
+ * ```
+ *
+ * That is not a cosmetic gap. Every `if (import.meta.main)` guard in the
+ * dev-tools package was silently dead on the declared floor — running
+ * `validate-repo-structure.ts` under 22.13.0 printed nothing and exited 0, so a
+ * contributor sitting exactly on the supported Node got a green pre-commit
+ * structure gate that had run no rule at all. Raising the floor to 22.18 would
+ * have hidden the defect behind the number instead of fixing it.
+ *
+ * ⛔ **Nor the raw string compare it replaced**, which was the other seven
+ * guards in this repo:
+ *
+ * ```ts
+ * import.meta.url === pathToFileURL(process.argv[1]).href   // ❌
+ * ```
+ *
+ * A `node_modules/.bin` entry is a SYMLINK to the real script, so `argv[1]` is
+ * the link and `import.meta.url` is the resolved target. The two strings differ
+ * and the guard is false — measured false through a `.bin`-style symlink on both
+ * Node 22.14.0 and 24.13.1, where this function is true.
+ *
+ * `process.argv[1]` is defined on every Node this repo supports, so the
+ * comparison below is the portable form of the same question. The realpath pass
+ * covers the case where the script is reached through a symlink on one side of
+ * the comparison but not the other.
+ *
+ * `local/no-fragile-entrypoint-guard` (shipped on this package's `./eslint`
+ * subpath) is what keeps either of the two banned spellings from coming back —
+ * the prose comments that used to stand in for it did not.
+ *
+ * @param importMetaUrl - The calling module's `import.meta.url`
+ * @param entryPath - The invoked script path; defaults to `process.argv[1]`
+ * @returns `true` only when this module is the script Node was asked to run
+ */
+export declare function isEntrypoint(importMetaUrl: string, entryPath?: string | undefined): boolean;
+//# sourceMappingURL=entrypoint.d.ts.map

package/dist/entrypoint.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"entrypoint.d.ts","sourceRoot":"","sources":["../src/entrypoint.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAOH;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA0CG;AACH,wBAAgB,YAAY,CAC1B,aAAa,EAAE,MAAM,EACrB,SAAS,GAAE,MAAM,GAAG,SAA2B,GAC9C,OAAO,CAcT"}

package/dist/entrypoint.js

@@ -0,0 +1,71 @@
+/**
+ * The one answer to "am I the script Node was asked to run?"
+ *
+ * Lives here, in the package every other one already depends on, because there
+ * has to be exactly one: the question was previously answered three different
+ * ways across this monorepo (`import.meta.main`, a raw `pathToFileURL` string
+ * compare, and this function), and two of those three answer `false` for the
+ * script they guard — which makes the process exit 0 having run nothing.
+ */
+import { fileURLToPath } from 'node:url';
+import { safePath, toForwardSlash } from './path-core.js';
+import { normalizePath } from './path-utils.js';
+/**
+ * Was this module invoked as the process entrypoint, rather than imported?
+ *
+ * ⛔ **Do not reach for `import.meta.main` here.** It shipped in Node 24.2 and
+ * 22.18; this repo declares a floor of `>=22.13.0`, and on a real 22.13.0 the
+ * property is `undefined`:
+ *
+ * ```
+ * $ node-v22.13.0 --input-type=module -e "console.log(import.meta.main)"  -> undefined
+ * ```
+ *
+ * That is not a cosmetic gap. Every `if (import.meta.main)` guard in the
+ * dev-tools package was silently dead on the declared floor — running
+ * `validate-repo-structure.ts` under 22.13.0 printed nothing and exited 0, so a
+ * contributor sitting exactly on the supported Node got a green pre-commit
+ * structure gate that had run no rule at all. Raising the floor to 22.18 would
+ * have hidden the defect behind the number instead of fixing it.
+ *
+ * ⛔ **Nor the raw string compare it replaced**, which was the other seven
+ * guards in this repo:
+ *
+ * ```ts
+ * import.meta.url === pathToFileURL(process.argv[1]).href   // ❌
+ * ```
+ *
+ * A `node_modules/.bin` entry is a SYMLINK to the real script, so `argv[1]` is
+ * the link and `import.meta.url` is the resolved target. The two strings differ
+ * and the guard is false — measured false through a `.bin`-style symlink on both
+ * Node 22.14.0 and 24.13.1, where this function is true.
+ *
+ * `process.argv[1]` is defined on every Node this repo supports, so the
+ * comparison below is the portable form of the same question. The realpath pass
+ * covers the case where the script is reached through a symlink on one side of
+ * the comparison but not the other.
+ *
+ * `local/no-fragile-entrypoint-guard` (shipped on this package's `./eslint`
+ * subpath) is what keeps either of the two banned spellings from coming back —
+ * the prose comments that used to stand in for it did not.
+ *
+ * @param importMetaUrl - The calling module's `import.meta.url`
+ * @param entryPath - The invoked script path; defaults to `process.argv[1]`
+ * @returns `true` only when this module is the script Node was asked to run
+ */
+export function isEntrypoint(importMetaUrl, entryPath = process.argv[1]) {
+    // An empty argv[1] would resolve to the cwd and could then match a module by
+    // accident; `undefined` happens under `node -e`. Neither is an entrypoint.
+    if (entryPath === undefined || entryPath === '')
+        return false;
+    const modulePath = safePath.resolve(fileURLToPath(importMetaUrl));
+    const invokedPath = safePath.resolve(entryPath);
+    if (modulePath === invokedPath)
+        return true;
+    // `normalizePath` resolves symlinks and Windows 8.3 short names, and returns
+    // the path unchanged when it cannot — which is the right answer here, since
+    // the string comparison above has already decided the two differ and an
+    // unresolvable path carries no symlink information to compare.
+    return toForwardSlash(normalizePath(modulePath)) === toForwardSlash(normalizePath(invokedPath));
+}
+//# sourceMappingURL=entrypoint.js.map

package/dist/entrypoint.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"entrypoint.js","sourceRoot":"","sources":["../src/entrypoint.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AAEzC,OAAO,EAAE,QAAQ,EAAE,cAAc,EAAE,MAAM,gBAAgB,CAAC;AAC1D,OAAO,EAAE,aAAa,EAAE,MAAM,iBAAiB,CAAC;AAEhD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA0CG;AACH,MAAM,UAAU,YAAY,CAC1B,aAAqB,EACrB,YAAgC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC;IAE/C,6EAA6E;IAC7E,2EAA2E;IAC3E,IAAI,SAAS,KAAK,SAAS,IAAI,SAAS,KAAK,EAAE;QAAE,OAAO,KAAK,CAAC;IAE9D,MAAM,UAAU,GAAG,QAAQ,CAAC,OAAO,CAAC,aAAa,CAAC,aAAa,CAAC,CAAC,CAAC;IAClE,MAAM,WAAW,GAAG,QAAQ,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;IAChD,IAAI,UAAU,KAAK,WAAW;QAAE,OAAO,IAAI,CAAC;IAE5C,6EAA6E;IAC7E,4EAA4E;IAC5E,wEAAwE;IACxE,+DAA+D;IAC/D,OAAO,cAAc,CAAC,aAAa,CAAC,UAAU,CAAC,CAAC,KAAK,cAAc,CAAC,aAAa,CAAC,WAAW,CAAC,CAAC,CAAC;AAClG,CAAC"}

package/dist/env-flag.d.ts

@@ -0,0 +1,46 @@
+/**
+ * Read an environment variable as a boolean.
+ *
+ * 🔑 **Returns `undefined` for anything it does not recognise, and never
+ * guesses.** That is the whole point: the caller — not this function — decides
+ * what an unreadable value means, because only the caller knows which way is
+ * safe. A token-fetching kill switch wants "deny"; a cache toggle wants
+ * "leave the cache on". A parser that folded the unknown case into `false`
+ * would have made that choice for both of them.
+ *
+ * 🚨 **Why this exists at all.** Three switches were each a comparison against
+ * the literal string `'0'`, so `=false` turned none of them off — measured for
+ * `VAT_LINKAUTH_ALLOW_COMMAND`, which *still spawned subprocesses*. Every
+ * spelling a human reaches for (`false`, `no`, `off`, `FALSE`, a value with a
+ * stray space) failed open. A switch whose off position is one exact string is
+ * not a switch.
+ *
+ * 📍 **Why it lives in `utils`.** It was written next to its first consumer in
+ * `resources`, on the rule that utils takes a utility when a SECOND package
+ * needs it rather than speculatively. That second package arrived:
+ * `packages/cli`'s `projectionStoreSelected()` reads the same `VAT_CACHE` the
+ * `resources` parse cache does, and two independent readings of one variable is
+ * the defect, not the fix. The three consumers today:
+ *
+ * | Caller | Variable | Reads `undefined` as | Why |
+ * |---|---|---|---|
+ * | `link-auth/resolve-token.ts` | `VAT_LINKAUTH_ALLOW_COMMAND` | **deny** | gates a capability — fail closed |
+ * | `resources/parse-cache.ts` | `VAT_CACHE` | cache stays on | gates a cache — an unreadable value must not silently change behaviour |
+ * | `cli/utils/projection-store.ts` | `VAT_CACHE` | not a veto | same variable, same reading, one implementation |
+ *
+ * Same parser, different safe sides, each chosen at its own call site. That is
+ * the contract; do not move a default in here.
+ */
+/**
+ * Parse an env value as a boolean.
+ *
+ * Case-insensitive and surrounding whitespace is trimmed, because a value that
+ * arrived through a shell, a CI YAML block, or a `.env` file routinely carries
+ * both. Everything else — including the empty string, which is what an unset
+ * shell variable expands to — returns `undefined`.
+ *
+ * @param raw - The raw env value, or `undefined` when the variable is unset
+ * @returns `true` / `false` for a recognised spelling; `undefined` otherwise
+ */
+export declare function parseEnvBoolean(raw: string | undefined): boolean | undefined;
+//# sourceMappingURL=env-flag.d.ts.map

package/dist/env-flag.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"env-flag.d.ts","sourceRoot":"","sources":["../src/env-flag.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAgCG;AAKH;;;;;;;;;;GAUG;AACH,wBAAgB,eAAe,CAAC,GAAG,EAAE,MAAM,GAAG,SAAS,GAAG,OAAO,GAAG,SAAS,CAM5E"}

package/dist/env-flag.js

@@ -0,0 +1,57 @@
+/**
+ * Read an environment variable as a boolean.
+ *
+ * 🔑 **Returns `undefined` for anything it does not recognise, and never
+ * guesses.** That is the whole point: the caller — not this function — decides
+ * what an unreadable value means, because only the caller knows which way is
+ * safe. A token-fetching kill switch wants "deny"; a cache toggle wants
+ * "leave the cache on". A parser that folded the unknown case into `false`
+ * would have made that choice for both of them.
+ *
+ * 🚨 **Why this exists at all.** Three switches were each a comparison against
+ * the literal string `'0'`, so `=false` turned none of them off — measured for
+ * `VAT_LINKAUTH_ALLOW_COMMAND`, which *still spawned subprocesses*. Every
+ * spelling a human reaches for (`false`, `no`, `off`, `FALSE`, a value with a
+ * stray space) failed open. A switch whose off position is one exact string is
+ * not a switch.
+ *
+ * 📍 **Why it lives in `utils`.** It was written next to its first consumer in
+ * `resources`, on the rule that utils takes a utility when a SECOND package
+ * needs it rather than speculatively. That second package arrived:
+ * `packages/cli`'s `projectionStoreSelected()` reads the same `VAT_CACHE` the
+ * `resources` parse cache does, and two independent readings of one variable is
+ * the defect, not the fix. The three consumers today:
+ *
+ * | Caller | Variable | Reads `undefined` as | Why |
+ * |---|---|---|---|
+ * | `link-auth/resolve-token.ts` | `VAT_LINKAUTH_ALLOW_COMMAND` | **deny** | gates a capability — fail closed |
+ * | `resources/parse-cache.ts` | `VAT_CACHE` | cache stays on | gates a cache — an unreadable value must not silently change behaviour |
+ * | `cli/utils/projection-store.ts` | `VAT_CACHE` | not a veto | same variable, same reading, one implementation |
+ *
+ * Same parser, different safe sides, each chosen at its own call site. That is
+ * the contract; do not move a default in here.
+ */
+const TRUE_SPELLINGS = new Set(['1', 'true', 'yes', 'y', 'on']);
+const FALSE_SPELLINGS = new Set(['0', 'false', 'no', 'n', 'off']);
+/**
+ * Parse an env value as a boolean.
+ *
+ * Case-insensitive and surrounding whitespace is trimmed, because a value that
+ * arrived through a shell, a CI YAML block, or a `.env` file routinely carries
+ * both. Everything else — including the empty string, which is what an unset
+ * shell variable expands to — returns `undefined`.
+ *
+ * @param raw - The raw env value, or `undefined` when the variable is unset
+ * @returns `true` / `false` for a recognised spelling; `undefined` otherwise
+ */
+export function parseEnvBoolean(raw) {
+    if (raw === undefined)
+        return undefined;
+    const normalized = raw.trim().toLowerCase();
+    if (TRUE_SPELLINGS.has(normalized))
+        return true;
+    if (FALSE_SPELLINGS.has(normalized))
+        return false;
+    return undefined;
+}
+//# sourceMappingURL=env-flag.js.map

package/dist/env-flag.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"env-flag.js","sourceRoot":"","sources":["../src/env-flag.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAgCG;AAEH,MAAM,cAAc,GAAwB,IAAI,GAAG,CAAC,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,GAAG,EAAE,IAAI,CAAC,CAAC,CAAC;AACrF,MAAM,eAAe,GAAwB,IAAI,GAAG,CAAC,CAAC,GAAG,EAAE,OAAO,EAAE,IAAI,EAAE,GAAG,EAAE,KAAK,CAAC,CAAC,CAAC;AAEvF;;;;;;;;;;GAUG;AACH,MAAM,UAAU,eAAe,CAAC,GAAuB;IACrD,IAAI,GAAG,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IACxC,MAAM,UAAU,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IAC5C,IAAI,cAAc,CAAC,GAAG,CAAC,UAAU,CAAC;QAAE,OAAO,IAAI,CAAC;IAChD,IAAI,eAAe,CAAC,GAAG,CAAC,UAAU,CAAC;QAAE,OAAO,KAAK,CAAC;IAClD,OAAO,SAAS,CAAC;AACnB,CAAC"}

package/dist/file-crawler.d.ts

@@ -1,3 +1,6 @@
+import { type UnreadablePolicy } from './listing-refusal.js';
+export type { DirectoryRefusal } from './fs-utils.js';
+export { DirectoryListingRefusedError, type RefuseListingContext, refusedListingMessage, settleRefusal, type UnreadablePolicy, } from './listing-refusal.js';
 /**
  * Options for directory crawling
  */
@@ -35,6 +38,25 @@ export interface CrawlOptions {
      * committed yet"; `respectGitignore: false` is not, and costs the whole walk.
      */
     includeUntracked?: boolean;
+    /**
+     * What to do with a directory the walk could not LIST. Required, with no
+     * default: see {@link UnreadablePolicy} for the two answers and why the
+     * caller — not the crawler — is the one who knows which is honest here.
+     *
+     * A directory that VANISHED between being enumerated and being listed
+     * (`ENOENT` / `ENOTDIR`) is not a refusal: it is no longer in the population
+     * and is skipped without a call.
+     *
+     * **Both routes settle it.** The `git ls-files` route walks the working tree
+     * whenever {@link CrawlOptions.includeUntracked} is set (`--others`), and a
+     * directory git could not open arrives here too — read off git's stderr,
+     * where it is the only trace: git exits 0 and lists fewer files. A directory
+     * the `exclude` patterns drop is not reported on either route, because the
+     * walk never lists one. The tracked-only listing (`includeUntracked: false`)
+     * opens no directory at all — the index names every member — so it has no
+     * gap to report.
+     */
+    unreadable: UnreadablePolicy;
 }
 /**
  * Directories no VAT crawl should ever walk into. THE canonical list — any lane

package/dist/file-crawler.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"file-crawler.d.ts","sourceRoot":"","sources":["../src/file-crawler.ts"],"names":[],"mappings":"AAOA;;GAEG;AACH,MAAM,WAAW,YAAY;IAC3B,oCAAoC;IACpC,OAAO,EAAE,MAAM,CAAC;IAChB,mDAAmD;IACnD,OAAO,CAAC,EAAE,MAAM,EAAE,CAAC;IACnB,gFAAgF;IAChF,OAAO,CAAC,EAAE,MAAM,EAAE,CAAC;IACnB,6CAA6C;IAC7C,cAAc,CAAC,EAAE,OAAO,CAAC;IACzB,uDAAuD;IACvD,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,0DAA0D;IAC1D,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB;;;;;;;;;;OAUG;IACH,gBAAgB,CAAC,EAAE,OAAO,CAAC;IAC3B;;;;;;;OAOG;IACH,gBAAgB,CAAC,EAAE,OAAO,CAAC;CAC5B;AAkBD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+BG;AACH,eAAO,MAAM,iBAAiB,sJAQpB,CAAC;AAEX;;;;;;;;;;GAUG;AACH,eAAO,MAAM,kBAAkB,yBAA0B,CAAC;AAI1D;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,wBAAgB,eAAe,CAC7B,OAAO,EAAE,SAAS,MAAM,EAAE,EAC1B,OAAO,EAAE,SAAS,MAAM,EAAE,GACzB,CAAC,YAAY,EAAE,MAAM,KAAK,OAAO,CAQnC;AAED;;;;;;;;;;;;;;;GAeG;AACH,wBAAsB,cAAc,CAAC,OAAO,EAAE,YAAY,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,CAE7E;AAED;;;;;;;;;;;;;;;GAeG;AACH,wBAAgB,kBAAkB,CAAC,OAAO,EAAE,YAAY,GAAG,MAAM,EAAE,CAgQlE"}
+{"version":3,"file":"file-crawler.d.ts","sourceRoot":"","sources":["../src/file-crawler.ts"],"names":[],"mappings":"AAUA,OAAO,EAA0C,KAAK,gBAAgB,EAAE,MAAM,sBAAsB,CAAC;AAGrG,YAAY,EAAE,gBAAgB,EAAE,MAAM,eAAe,CAAC;AAItD,OAAO,EACL,4BAA4B,EAC5B,KAAK,oBAAoB,EACzB,qBAAqB,EACrB,aAAa,EACb,KAAK,gBAAgB,GACtB,MAAM,sBAAsB,CAAC;AAE9B;;GAEG;AACH,MAAM,WAAW,YAAY;IAC3B,oCAAoC;IACpC,OAAO,EAAE,MAAM,CAAC;IAChB,mDAAmD;IACnD,OAAO,CAAC,EAAE,MAAM,EAAE,CAAC;IACnB,gFAAgF;IAChF,OAAO,CAAC,EAAE,MAAM,EAAE,CAAC;IACnB,6CAA6C;IAC7C,cAAc,CAAC,EAAE,OAAO,CAAC;IACzB,uDAAuD;IACvD,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,0DAA0D;IAC1D,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB;;;;;;;;;;OAUG;IACH,gBAAgB,CAAC,EAAE,OAAO,CAAC;IAC3B;;;;;;;OAOG;IACH,gBAAgB,CAAC,EAAE,OAAO,CAAC;IAC3B;;;;;;;;;;;;;;;;;OAiBG;IACH,UAAU,EAAE,gBAAgB,CAAC;CAC9B;AAkBD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+BG;AACH,eAAO,MAAM,iBAAiB,sJAQpB,CAAC;AAEX;;;;;;;;;;GAUG;AACH,eAAO,MAAM,kBAAkB,yBAA0B,CAAC;AAI1D;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,wBAAgB,eAAe,CAC7B,OAAO,EAAE,SAAS,MAAM,EAAE,EAC1B,OAAO,EAAE,SAAS,MAAM,EAAE,GACzB,CAAC,YAAY,EAAE,MAAM,KAAK,OAAO,CAQnC;AAED;;;;;;;;;;;;;;;GAeG;AACH,wBAAsB,cAAc,CAAC,OAAO,EAAE,YAAY,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,CAE7E;AAED;;;;;;;;;;;;;;;GAeG;AACH,wBAAgB,kBAAkB,CAAC,OAAO,EAAE,YAAY,GAAG,MAAM,EAAE,CAuTlE"}

package/dist/file-crawler.js

@@ -1,7 +1,13 @@
 import fs from 'node:fs';
 import picomatch from 'picomatch';
+import { directoryRefusalFor, listingFailure, } from './fs-utils.js';
 import { gitFindRoot, gitLsFiles } from './git-utils.js';
+import { requireUnreadablePolicy, settleRefusal } from './listing-refusal.js';
 import { toForwardSlash, safePath } from './path-utils.js';
+// The refusal vocabulary lives in `listing-refusal.ts` so `git-utils.ts` can
+// share it without importing this module (which imports that one). Re-exported
+// here because `./crawl` is where every caller of the walk already looks.
+export { DirectoryListingRefusedError, refusedListingMessage, settleRefusal, } from './listing-refusal.js';
 /**
  * Glob options shared by every pattern this module compiles.
  *
@@ -136,10 +142,30 @@ export async function crawlDirectory(options) {
  * });
  */
 export function crawlDirectorySync(options) {
-    const { baseDir, include = ['**/*'], exclude = DEFAULT_EXCLUDE, followSymlinks = false, absolute = true, filesOnly = true, respectGitignore = true, includeUntracked = false, } = options;
+    const { baseDir, include = ['**/*'], exclude = DEFAULT_EXCLUDE, followSymlinks = false, absolute = true, filesOnly = true, respectGitignore = true, includeUntracked = false, unreadable, } = options;
+    requireUnreadablePolicy(unreadable, 'crawlDirectory');
     const picoOptions = PICOMATCH_OPTIONS;
     // Resolve base directory to absolute path
     const resolvedBaseDir = safePath.resolve(baseDir);
+    // Compiled once, ahead of the route choice, because BOTH routes ask it: the
+    // walk before it lists a directory, the git route before it reports one git
+    // could not list. One matcher is what keeps "is this directory excluded?"
+    // answered the same way on both sides of the fork.
+    const isExcluded = exclude.length > 0 ? picomatch(exclude, picoOptions) : () => false;
+    /**
+     * Check if a path should be excluded based on patterns
+     */
+    function shouldExclude(normalizedPath) {
+        // Check explicit exclude patterns
+        return isExcluded(normalizedPath) || isExcluded(normalizedPath + '/');
+    }
+    /**
+     * A refused listing surfaces under the caller's policy — thrown, or handed
+     * over. Never a silent skip, on either route.
+     */
+    function raiseRefusal(refusal) {
+        settleRefusal(unreadable, refusal);
+    }
     // Ensure base directory exists
     // eslint-disable-next-line security/detect-non-literal-fs-filename -- baseDir is from controlled config, not user input
     if (!fs.existsSync(resolvedBaseDir)) {
@@ -161,6 +187,24 @@ export function crawlDirectorySync(options) {
             const gitFiles = gitLsFiles({
                 cwd: resolvedBaseDir,
                 includeUntracked,
+                // The SAME decision the walk makes, in the same order: a directory
+                // outside this crawl's base or dropped by `exclude` is never listed by
+                // the walk, so a refusal on it is not this crawl's gap; anything else
+                // is, and goes where the walk's would go.
+                // `degrade` from git's side only: the refusal is filtered to this
+                // crawl's territory and then settled under the CALLER's policy, which
+                // may well be `refuse`.
+                unreadable: {
+                    degrade: (refusal) => {
+                        // Strictly beneath the base: a repository is often an ancestor of
+                        // the crawl, and git names every refusal in the whole worktree.
+                        if (!toForwardSlash(refusal.directory).startsWith(`${toForwardSlash(resolvedBaseDir)}/`))
+                            return;
+                        if (shouldExclude(toForwardSlash(safePath.relative(resolvedBaseDir, refusal.directory))))
+                            return;
+                        raiseRefusal(refusal);
+                    },
+                },
             });
             if (gitFiles !== null) {
                 // ⚠️ KNOWN DIVERGENCE: this branch ignores `followSymlinks`.
@@ -199,7 +243,6 @@ export function crawlDirectorySync(options) {
     // Fall back to manual directory crawling (not in git repo or git ls-files failed)
     // Compile glob patterns using picomatch
     const isIncluded = picomatch(include, picoOptions);
-    const isExcluded = exclude.length > 0 ? picomatch(exclude, picoOptions) : () => false;
     const results = [];
     /**
      * Real paths of directories already walked, maintained ONLY when following
@@ -218,13 +261,6 @@ export function crawlDirectorySync(options) {
      * directory cannot be reached twice, so the default path pays no `realpath`.
      */
     const visitedRealDirs = new Set();
-    /**
-     * Check if a path should be excluded based on patterns
-     */
-    function shouldExclude(normalizedPath) {
-        // Check explicit exclude patterns
-        return isExcluded(normalizedPath) || isExcluded(normalizedPath + '/');
-    }
     /**
      * Add a path to results if it matches include patterns
      */
@@ -233,6 +269,27 @@ export function crawlDirectorySync(options) {
             results.push(absolute ? fullPath : relativePath);
         }
     }
+    /**
+     * What a failed `readdirSync` / `statSync` means for the walk.
+     *
+     * Absence (`ENOENT` / `ENOTDIR`) is an entry that vanished between being
+     * enumerated by its parent and being asked about itself — not in the
+     * population, nothing to report. Anything else is a refusal, and a refusal
+     * is a GAP: handed to the caller if it asked, thrown otherwise. Never a
+     * silent `return` — that is the shorter list this walk used to hand back.
+     *
+     * @param error - What the filesystem threw
+     * @param target - The directory (or link) it was asked about
+     * @returns True when the entry is simply gone and the walk should move on
+     */
+    function reportOrSkip(error, target) {
+        const listing = listingFailure(error);
+        if (listing.outcome === 'absent')
+            return true;
+        if (listing.outcome === 'unreadable')
+            raiseRefusal(directoryRefusalFor(listing, target));
+        return false;
+    }
     /**
      * Record a directory as walked, reporting whether it had already been seen.
      *
@@ -272,8 +329,10 @@ export function crawlDirectorySync(options) {
             // eslint-disable-next-line security/detect-non-literal-fs-filename -- path constructed from validated baseDir + entries
             targetStat = fs.statSync(fullPath);
         }
-        catch {
-            // Skip broken symlinks
+        catch (error) {
+            // A broken symlink is absence and is skipped; a target the OS refused to
+            // stat is a gap, and goes the same way a refused listing does.
+            reportOrSkip(error, fullPath);
             return;
         }
         if (targetStat.isDirectory()) {
@@ -312,8 +371,10 @@ export function crawlDirectorySync(options) {
             // eslint-disable-next-line security/detect-non-literal-fs-filename -- path constructed from validated baseDir, recursively walking
             entries = fs.readdirSync(currentDir, { withFileTypes: true });
         }
-        catch {
-            // Skip directories we don't have permission to read
+        catch (error) {
+            // 🚨 Not a silent skip. A directory that refused to be listed is a gap in
+            // the population this walk defines — see `reportOrSkip`.
+            reportOrSkip(error, currentDir);
             return;
         }
         // Two passes, not one: `readdirSync` order is filesystem-defined (see

package/dist/file-crawler.js.map

@@ -1 +1 @@
-{"version":3,"file":"file-crawler.js","sourceRoot":"","sources":["../src/file-crawler.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,SAAS,CAAC;AAEzB,OAAO,SAAS,MAAM,WAAW,CAAC;AAElC,OAAO,EAAE,WAAW,EAAE,UAAU,EAAE,MAAM,gBAAgB,CAAC;AACzD,OAAO,EAAE,cAAc,EAAE,QAAQ,EAAE,MAAM,iBAAiB,CAAC;AAyC3D;;;;;;;;;;;;;GAaG;AACH,MAAM,iBAAiB,GAAG,EAAE,GAAG,EAAE,IAAI,EAAW,CAAC;AAEjD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+BG;AACH,MAAM,CAAC,MAAM,iBAAiB,GAAG;IAC/B,oBAAoB,EAAO,gDAAgD;IAC3E,YAAY,EAAe,kCAAkC;IAC7D,gBAAgB,EAAW,wBAAwB;IACnD,oBAAoB,EAAO,iBAAiB;IAC5C,kBAAkB,EAAS,sDAAsD;IACjF,yBAAyB,EAAE,qCAAqC;IAChE,cAAc,EAAa,0CAA0C;CAC7D,CAAC;AAEX;;;;;;;;;;GAUG;AACH,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,YAAY,CAAU,CAAC;AAE1D,MAAM,eAAe,GAAa,CAAC,GAAG,iBAAiB,EAAE,GAAG,kBAAkB,CAAC,CAAC;AAEhF;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,MAAM,UAAU,eAAe,CAC7B,OAA0B,EAC1B,OAA0B;IAE1B,MAAM,UAAU,GAAG,SAAS,CAAC,CAAC,GAAG,OAAO,CAAC,EAAE,iBAAiB,CAAC,CAAC;IAC9D,MAAM,UAAU,GACd,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,GAAG,OAAO,CAAC,EAAE,iBAAiB,CAAC,CAAC,CAAC,CAAC,GAAY,EAAE,CAAC,KAAK,CAAC;IACzF,OAAO,CAAC,YAAoB,EAAW,EAAE;QACvC,MAAM,UAAU,GAAG,cAAc,CAAC,YAAY,CAAC,CAAC;QAChD,OAAO,UAAU,CAAC,UAAU,CAAC,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,UAAU,GAAG,CAAC,CAAC;IAC5F,CAAC,CAAC;AACJ,CAAC;AAED;;;;;;;;;;;;;;;GAeG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,OAAqB;IACxD,OAAO,kBAAkB,CAAC,OAAO,CAAC,CAAC;AACrC,CAAC;AAED;;;;;;;;;;;;;;;GAeG;AACH,MAAM,UAAU,kBAAkB,CAAC,OAAqB;IACtD,MAAM,EACJ,OAAO,EACP,OAAO,GAAG,CAAC,MAAM,CAAC,EAClB,OAAO,GAAG,eAAe,EACzB,cAAc,GAAG,KAAK,EACtB,QAAQ,GAAG,IAAI,EACf,SAAS,GAAG,IAAI,EAChB,gBAAgB,GAAG,IAAI,EACvB,gBAAgB,GAAG,KAAK,GACzB,GAAG,OAAO,CAAC;IAEZ,MAAM,WAAW,GAAG,iBAAiB,CAAC;IAEtC,0CAA0C;IAC1C,MAAM,eAAe,GAAG,QAAQ,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;IAElD,+BAA+B;IAC/B,wHAAwH;IACxH,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,eAAe,CAAC,EAAE,CAAC;QACpC,MAAM,IAAI,KAAK,CAAC,kCAAkC,eAAe,EAAE,CAAC,CAAC;IACvE,CAAC;IAED,gDAAgD;IAChD,oGAAoG;IACpG,MAAM,QAAQ,GAAG,EAAE,CAAC,QAAQ,CAAC,eAAe,CAAC,CAAC;IAC9C,IAAI,CAAC,QAAQ,CAAC,WAAW,EAAE,EAAE,CAAC;QAC5B,MAAM,IAAI,KAAK,CAAC,iCAAiC,eAAe,EAAE,CAAC,CAAC;IACtE,CAAC;IAED,4DAA4D;IAC5D,IAAI,gBAAgB,EAAE,CAAC;QACrB,MAAM,OAAO,GAAG,WAAW,CAAC,eAAe,CAAC,CAAC;QAC7C,IAAI,OAAO,EAAE,CAAC;YACZ,mDAAmD;YACnD,yEAAyE;YACzE,+DAA+D;YAC/D,MAAM,QAAQ,GAAG,UAAU,CAAC;gBAC1B,GAAG,EAAE,eAAe;gBACpB,gBAAgB;aACjB,CAAC,CAAC;YAEH,IAAI,QAAQ,KAAK,IAAI,EAAE,CAAC;gBACtB,6DAA6D;gBAC7D,EAAE;gBACF,wEAAwE;gBACxE,qEAAqE;gBACrE,uEAAuE;gBACvE,oEAAoE;gBACpE,sDAAsD;gBACtD,EAAE;gBACF,mEAAmE;gBACnE,sEAAsE;gBACtE,qEAAqE;gBACrE,mCAAmC;gBACnC,EAAE;gBACF,iDAAiD;gBACjD,oFAAoF;gBACpF,uEAAuE;gBACvE,sEAAsE;gBACtE,uEAAuE;gBACvE,kEAAkE;gBAClE,kCAAkC;gBAClC,EAAE;gBACF,sDAAsD;gBACtD,MAAM,QAAQ,GAAG,eAAe,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;gBAEnD,OAAO,QAAQ;qBACZ,MAAM,CAAC,CAAC,YAAY,EAAE,EAAE,CAAC,QAAQ,CAAC,YAAY,CAAC,CAAC;qBAChD,GAAG,CAAC,CAAC,YAAY,EAAE,EAAE;oBACpB,6CAA6C;oBAC7C,OAAO,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,eAAe,EAAE,YAAY,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC;gBACnF,CAAC,CAAC,CAAC;YACP,CAAC;YACD,wDAAwD;QAC1D,CAAC;IACH,CAAC;IAED,kFAAkF;IAClF,wCAAwC;IACxC,MAAM,UAAU,GAAG,SAAS,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC;IACnD,MAAM,UAAU,GAAG,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC,CAAC,CAAC,GAAY,EAAE,CAAC,KAAK,CAAC;IAE/F,MAAM,OAAO,GAAa,EAAE,CAAC;IAE7B;;;;;;;;;;;;;;;OAeG;IACH,MAAM,eAAe,GAAG,IAAI,GAAG,EAAU,CAAC;IAE1C;;OAEG;IACH,SAAS,aAAa,CAAC,cAAsB;QAC3C,kCAAkC;QAClC,OAAO,UAAU,CAAC,cAAc,CAAC,IAAI,UAAU,CAAC,cAAc,GAAG,GAAG,CAAC,CAAC;IACxE,CAAC;IAED;;OAEG;IACH,SAAS,YAAY,CAAC,cAAsB,EAAE,QAAgB,EAAE,YAAoB;QAClF,IAAI,UAAU,CAAC,cAAc,CAAC,EAAE,CAAC;YAC/B,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC;QACnD,CAAC;IACH,CAAC;IAED;;;;;;;;;;;OAWG;IACH,SAAS,aAAa,CAAC,GAAW;QAChC,IAAI,QAAgB,CAAC;QACrB,IAAI,CAAC;YACH,QAAQ,GAAG,EAAE,CAAC,YAAY,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QACzC,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,IAAI,CAAC;QACd,CAAC;QAED,IAAI,eAAe,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC;YAClC,OAAO,IAAI,CAAC;QACd,CAAC;QACD,eAAe,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QAC9B,OAAO,KAAK,CAAC;IACf,CAAC;IAED;;OAEG;IACH,SAAS,cAAc,CAAC,QAAgB,EAAE,cAAsB,EAAE,YAAoB;QACpF,IAAI,CAAC,cAAc,EAAE,CAAC;YACpB,OAAO;QACT,CAAC;QAED,wDAAwD;QACxD,IAAI,UAAoB,CAAC;QACzB,IAAI,CAAC;YACH,wHAAwH;YACxH,UAAU,GAAG,EAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;QACrC,CAAC;QAAC,MAAM,CAAC;YACP,uBAAuB;YACvB,OAAO;QACT,CAAC;QAED,IAAI,UAAU,CAAC,WAAW,EAAE,EAAE,CAAC;YAC7B,aAAa,CAAC,QAAQ,CAAC,CAAC;QAC1B,CAAC;aAAM,IAAI,UAAU,CAAC,MAAM,EAAE,EAAE,CAAC;YAC/B,YAAY,CAAC,cAAc,EAAE,QAAQ,EAAE,YAAY,CAAC,CAAC;QACvD,CAAC;IACH,CAAC;IAED;;OAEG;IACH,SAAS,gBAAgB,CAAC,QAAgB,EAAE,cAAsB,EAAE,YAAoB;QACtF,4BAA4B;QAC5B,aAAa,CAAC,QAAQ,CAAC,CAAC;QAExB,4CAA4C;QAC5C,IAAI,CAAC,SAAS,EAAE,CAAC;YACf,YAAY,CAAC,cAAc,EAAE,QAAQ,EAAE,YAAY,CAAC,CAAC;QACvD,CAAC;IACH,CAAC;IAED;;OAEG;IACH,SAAS,WAAW,CAAC,cAAsB,EAAE,QAAgB,EAAE,YAAoB;QACjF,YAAY,CAAC,cAAc,EAAE,QAAQ,EAAE,YAAY,CAAC,CAAC;IACvD,CAAC;IAED;;OAEG;IACH,SAAS,aAAa,CAAC,UAAkB;QACvC,IAAI,cAAc,IAAI,aAAa,CAAC,UAAU,CAAC,EAAE,CAAC;YAChD,OAAO;QACT,CAAC;QAED,IAAI,OAAoB,CAAC;QAEzB,IAAI,CAAC;YACH,mIAAmI;YACnI,OAAO,GAAG,EAAE,CAAC,WAAW,CAAC,UAAU,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC;QAChE,CAAC;QAAC,MAAM,CAAC;YACP,oDAAoD;YACpD,OAAO;QACT,CAAC;QAED,sEAAsE;QACtE,mEAAmE;QACnE,yEAAyE;QACzE,wEAAwE;QACxE,wEAAwE;QACxE,iEAAiE;QACjE,wEAAwE;QACxE,sEAAsE;QACtE,iEAAiE;QACjE,wEAAwE;QACxE,wEAAwE;QACxE,qEAAqE;QACrE,MAAM,cAAc,GAAgB,EAAE,CAAC;QAEvC,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;YAC5B,MAAM,QAAQ,GAAG,QAAQ,CAAC,IAAI,CAAC,UAAU,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;YACvD,MAAM,YAAY,GAAG,QAAQ,CAAC,QAAQ,CAAC,eAAe,EAAE,QAAQ,CAAC,CAAC;YAClE,MAAM,cAAc,GAAG,cAAc,CAAC,YAAY,CAAC,CAAC;YAEpD,sBAAsB;YACtB,IAAI,aAAa,CAAC,cAAc,CAAC,EAAE,CAAC;gBAClC,SAAS;YACX,CAAC;YAED,mEAAmE;YACnE,IAAI,KAAK,CAAC,cAAc,EAAE,EAAE,CAAC;gBAC3B,cAAc,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YAC7B,CAAC;iBAAM,IAAI,KAAK,CAAC,WAAW,EAAE,EAAE,CAAC;gBAC/B,gBAAgB,CAAC,QAAQ,EAAE,cAAc,EAAE,YAAY,CAAC,CAAC;YAC3D,CAAC;iBAAM,IAAI,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC;gBAC1B,WAAW,CAAC,cAAc,EAAE,QAAQ,EAAE,YAAY,CAAC,CAAC;YACtD,CAAC;QACH,CAAC;QAED,KAAK,MAAM,KAAK,IAAI,cAAc,EAAE,CAAC;YACnC,MAAM,QAAQ,GAAG,QAAQ,CAAC,IAAI,CAAC,UAAU,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;YACvD,MAAM,YAAY,GAAG,QAAQ,CAAC,QAAQ,CAAC,eAAe,EAAE,QAAQ,CAAC,CAAC;YAClE,MAAM,cAAc,GAAG,cAAc,CAAC,YAAY,CAAC,CAAC;YACpD,cAAc,CAAC,QAAQ,EAAE,cAAc,EAAE,YAAY,CAAC,CAAC;QACzD,CAAC;IACH,CAAC;IAED,2CAA2C;IAC3C,aAAa,CAAC,eAAe,CAAC,CAAC;IAE/B,OAAO,OAAO,CAAC;AACjB,CAAC"}
+{"version":3,"file":"file-crawler.js","sourceRoot":"","sources":["../src/file-crawler.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,SAAS,CAAC;AAEzB,OAAO,SAAS,MAAM,WAAW,CAAC;AAElC,OAAO,EAEL,mBAAmB,EACnB,cAAc,GACf,MAAM,eAAe,CAAC;AACvB,OAAO,EAAE,WAAW,EAAE,UAAU,EAAE,MAAM,gBAAgB,CAAC;AACzD,OAAO,EAAE,uBAAuB,EAAE,aAAa,EAAyB,MAAM,sBAAsB,CAAC;AACrG,OAAO,EAAE,cAAc,EAAE,QAAQ,EAAE,MAAM,iBAAiB,CAAC;AAG3D,6EAA6E;AAC7E,+EAA+E;AAC/E,0EAA0E;AAC1E,OAAO,EACL,4BAA4B,EAE5B,qBAAqB,EACrB,aAAa,GAEd,MAAM,sBAAsB,CAAC;AA4D9B;;;;;;;;;;;;;GAaG;AACH,MAAM,iBAAiB,GAAG,EAAE,GAAG,EAAE,IAAI,EAAW,CAAC;AAEjD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+BG;AACH,MAAM,CAAC,MAAM,iBAAiB,GAAG;IAC/B,oBAAoB,EAAO,gDAAgD;IAC3E,YAAY,EAAe,kCAAkC;IAC7D,gBAAgB,EAAW,wBAAwB;IACnD,oBAAoB,EAAO,iBAAiB;IAC5C,kBAAkB,EAAS,sDAAsD;IACjF,yBAAyB,EAAE,qCAAqC;IAChE,cAAc,EAAa,0CAA0C;CAC7D,CAAC;AAEX;;;;;;;;;;GAUG;AACH,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,YAAY,CAAU,CAAC;AAE1D,MAAM,eAAe,GAAa,CAAC,GAAG,iBAAiB,EAAE,GAAG,kBAAkB,CAAC,CAAC;AAEhF;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,MAAM,UAAU,eAAe,CAC7B,OAA0B,EAC1B,OAA0B;IAE1B,MAAM,UAAU,GAAG,SAAS,CAAC,CAAC,GAAG,OAAO,CAAC,EAAE,iBAAiB,CAAC,CAAC;IAC9D,MAAM,UAAU,GACd,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,GAAG,OAAO,CAAC,EAAE,iBAAiB,CAAC,CAAC,CAAC,CAAC,GAAY,EAAE,CAAC,KAAK,CAAC;IACzF,OAAO,CAAC,YAAoB,EAAW,EAAE;QACvC,MAAM,UAAU,GAAG,cAAc,CAAC,YAAY,CAAC,CAAC;QAChD,OAAO,UAAU,CAAC,UAAU,CAAC,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,UAAU,GAAG,CAAC,CAAC;IAC5F,CAAC,CAAC;AACJ,CAAC;AAED;;;;;;;;;;;;;;;GAeG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,OAAqB;IACxD,OAAO,kBAAkB,CAAC,OAAO,CAAC,CAAC;AACrC,CAAC;AAED;;;;;;;;;;;;;;;GAeG;AACH,MAAM,UAAU,kBAAkB,CAAC,OAAqB;IACtD,MAAM,EACJ,OAAO,EACP,OAAO,GAAG,CAAC,MAAM,CAAC,EAClB,OAAO,GAAG,eAAe,EACzB,cAAc,GAAG,KAAK,EACtB,QAAQ,GAAG,IAAI,EACf,SAAS,GAAG,IAAI,EAChB,gBAAgB,GAAG,IAAI,EACvB,gBAAgB,GAAG,KAAK,EACxB,UAAU,GACX,GAAG,OAAO,CAAC;IACZ,uBAAuB,CAAC,UAAU,EAAE,gBAAgB,CAAC,CAAC;IAEtD,MAAM,WAAW,GAAG,iBAAiB,CAAC;IAEtC,0CAA0C;IAC1C,MAAM,eAAe,GAAG,QAAQ,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;IAElD,4EAA4E;IAC5E,4EAA4E;IAC5E,0EAA0E;IAC1E,mDAAmD;IACnD,MAAM,UAAU,GAAG,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC,CAAC,CAAC,GAAY,EAAE,CAAC,KAAK,CAAC;IAE/F;;OAEG;IACH,SAAS,aAAa,CAAC,cAAsB;QAC3C,kCAAkC;QAClC,OAAO,UAAU,CAAC,cAAc,CAAC,IAAI,UAAU,CAAC,cAAc,GAAG,GAAG,CAAC,CAAC;IACxE,CAAC;IAED;;;OAGG;IACH,SAAS,YAAY,CAAC,OAAyB;QAC7C,aAAa,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC;IACrC,CAAC;IAED,+BAA+B;IAC/B,wHAAwH;IACxH,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,eAAe,CAAC,EAAE,CAAC;QACpC,MAAM,IAAI,KAAK,CAAC,kCAAkC,eAAe,EAAE,CAAC,CAAC;IACvE,CAAC;IAED,gDAAgD;IAChD,oGAAoG;IACpG,MAAM,QAAQ,GAAG,EAAE,CAAC,QAAQ,CAAC,eAAe,CAAC,CAAC;IAC9C,IAAI,CAAC,QAAQ,CAAC,WAAW,EAAE,EAAE,CAAC;QAC5B,MAAM,IAAI,KAAK,CAAC,iCAAiC,eAAe,EAAE,CAAC,CAAC;IACtE,CAAC;IAED,4DAA4D;IAC5D,IAAI,gBAAgB,EAAE,CAAC;QACrB,MAAM,OAAO,GAAG,WAAW,CAAC,eAAe,CAAC,CAAC;QAC7C,IAAI,OAAO,EAAE,CAAC;YACZ,mDAAmD;YACnD,yEAAyE;YACzE,+DAA+D;YAC/D,MAAM,QAAQ,GAAG,UAAU,CAAC;gBAC1B,GAAG,EAAE,eAAe;gBACpB,gBAAgB;gBAChB,mEAAmE;gBACnE,uEAAuE;gBACvE,sEAAsE;gBACtE,0CAA0C;gBAC1C,kEAAkE;gBAClE,sEAAsE;gBACtE,wBAAwB;gBACxB,UAAU,EAAE;oBACV,OAAO,EAAE,CAAC,OAAO,EAAE,EAAE;wBACnB,kEAAkE;wBAClE,gEAAgE;wBAChE,IAAI,CAAC,cAAc,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,UAAU,CAAC,GAAG,cAAc,CAAC,eAAe,CAAC,GAAG,CAAC;4BAAE,OAAO;wBACjG,IAAI,aAAa,CAAC,cAAc,CAAC,QAAQ,CAAC,QAAQ,CAAC,eAAe,EAAE,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC;4BAAE,OAAO;wBACjG,YAAY,CAAC,OAAO,CAAC,CAAC;oBACxB,CAAC;iBACF;aACF,CAAC,CAAC;YAEH,IAAI,QAAQ,KAAK,IAAI,EAAE,CAAC;gBACtB,6DAA6D;gBAC7D,EAAE;gBACF,wEAAwE;gBACxE,qEAAqE;gBACrE,uEAAuE;gBACvE,oEAAoE;gBACpE,sDAAsD;gBACtD,EAAE;gBACF,mEAAmE;gBACnE,sEAAsE;gBACtE,qEAAqE;gBACrE,mCAAmC;gBACnC,EAAE;gBACF,iDAAiD;gBACjD,oFAAoF;gBACpF,uEAAuE;gBACvE,sEAAsE;gBACtE,uEAAuE;gBACvE,kEAAkE;gBAClE,kCAAkC;gBAClC,EAAE;gBACF,sDAAsD;gBACtD,MAAM,QAAQ,GAAG,eAAe,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;gBAEnD,OAAO,QAAQ;qBACZ,MAAM,CAAC,CAAC,YAAY,EAAE,EAAE,CAAC,QAAQ,CAAC,YAAY,CAAC,CAAC;qBAChD,GAAG,CAAC,CAAC,YAAY,EAAE,EAAE;oBACpB,6CAA6C;oBAC7C,OAAO,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,eAAe,EAAE,YAAY,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC;gBACnF,CAAC,CAAC,CAAC;YACP,CAAC;YACD,wDAAwD;QAC1D,CAAC;IACH,CAAC;IAED,kFAAkF;IAClF,wCAAwC;IACxC,MAAM,UAAU,GAAG,SAAS,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC;IAEnD,MAAM,OAAO,GAAa,EAAE,CAAC;IAE7B;;;;;;;;;;;;;;;OAeG;IACH,MAAM,eAAe,GAAG,IAAI,GAAG,EAAU,CAAC;IAE1C;;OAEG;IACH,SAAS,YAAY,CAAC,cAAsB,EAAE,QAAgB,EAAE,YAAoB;QAClF,IAAI,UAAU,CAAC,cAAc,CAAC,EAAE,CAAC;YAC/B,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC;QACnD,CAAC;IACH,CAAC;IAED;;;;;;;;;;;;OAYG;IACH,SAAS,YAAY,CAAC,KAAc,EAAE,MAAc;QAClD,MAAM,OAAO,GAAG,cAAc,CAAC,KAAK,CAAC,CAAC;QACtC,IAAI,OAAO,CAAC,OAAO,KAAK,QAAQ;YAAE,OAAO,IAAI,CAAC;QAC9C,IAAI,OAAO,CAAC,OAAO,KAAK,YAAY;YAAE,YAAY,CAAC,mBAAmB,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC,CAAC;QACzF,OAAO,KAAK,CAAC;IACf,CAAC;IAED;;;;;;;;;;;OAWG;IACH,SAAS,aAAa,CAAC,GAAW;QAChC,IAAI,QAAgB,CAAC;QACrB,IAAI,CAAC;YACH,QAAQ,GAAG,EAAE,CAAC,YAAY,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QACzC,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,IAAI,CAAC;QACd,CAAC;QAED,IAAI,eAAe,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC;YAClC,OAAO,IAAI,CAAC;QACd,CAAC;QACD,eAAe,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QAC9B,OAAO,KAAK,CAAC;IACf,CAAC;IAED;;OAEG;IACH,SAAS,cAAc,CAAC,QAAgB,EAAE,cAAsB,EAAE,YAAoB;QACpF,IAAI,CAAC,cAAc,EAAE,CAAC;YACpB,OAAO;QACT,CAAC;QAED,wDAAwD;QACxD,IAAI,UAAoB,CAAC;QACzB,IAAI,CAAC;YACH,wHAAwH;YACxH,UAAU,GAAG,EAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;QACrC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,yEAAyE;YACzE,+DAA+D;YAC/D,YAAY,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC;YAC9B,OAAO;QACT,CAAC;QAED,IAAI,UAAU,CAAC,WAAW,EAAE,EAAE,CAAC;YAC7B,aAAa,CAAC,QAAQ,CAAC,CAAC;QAC1B,CAAC;aAAM,IAAI,UAAU,CAAC,MAAM,EAAE,EAAE,CAAC;YAC/B,YAAY,CAAC,cAAc,EAAE,QAAQ,EAAE,YAAY,CAAC,CAAC;QACvD,CAAC;IACH,CAAC;IAED;;OAEG;IACH,SAAS,gBAAgB,CAAC,QAAgB,EAAE,cAAsB,EAAE,YAAoB;QACtF,4BAA4B;QAC5B,aAAa,CAAC,QAAQ,CAAC,CAAC;QAExB,4CAA4C;QAC5C,IAAI,CAAC,SAAS,EAAE,CAAC;YACf,YAAY,CAAC,cAAc,EAAE,QAAQ,EAAE,YAAY,CAAC,CAAC;QACvD,CAAC;IACH,CAAC;IAED;;OAEG;IACH,SAAS,WAAW,CAAC,cAAsB,EAAE,QAAgB,EAAE,YAAoB;QACjF,YAAY,CAAC,cAAc,EAAE,QAAQ,EAAE,YAAY,CAAC,CAAC;IACvD,CAAC;IAED;;OAEG;IACH,SAAS,aAAa,CAAC,UAAkB;QACvC,IAAI,cAAc,IAAI,aAAa,CAAC,UAAU,CAAC,EAAE,CAAC;YAChD,OAAO;QACT,CAAC;QAED,IAAI,OAAoB,CAAC;QAEzB,IAAI,CAAC;YACH,mIAAmI;YACnI,OAAO,GAAG,EAAE,CAAC,WAAW,CAAC,UAAU,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC;QAChE,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,0EAA0E;YAC1E,yDAAyD;YACzD,YAAY,CAAC,KAAK,EAAE,UAAU,CAAC,CAAC;YAChC,OAAO;QACT,CAAC;QAED,sEAAsE;QACtE,mEAAmE;QACnE,yEAAyE;QACzE,wEAAwE;QACxE,wEAAwE;QACxE,iEAAiE;QACjE,wEAAwE;QACxE,sEAAsE;QACtE,iEAAiE;QACjE,wEAAwE;QACxE,wEAAwE;QACxE,qEAAqE;QACrE,MAAM,cAAc,GAAgB,EAAE,CAAC;QAEvC,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;YAC5B,MAAM,QAAQ,GAAG,QAAQ,CAAC,IAAI,CAAC,UAAU,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;YACvD,MAAM,YAAY,GAAG,QAAQ,CAAC,QAAQ,CAAC,eAAe,EAAE,QAAQ,CAAC,CAAC;YAClE,MAAM,cAAc,GAAG,cAAc,CAAC,YAAY,CAAC,CAAC;YAEpD,sBAAsB;YACtB,IAAI,aAAa,CAAC,cAAc,CAAC,EAAE,CAAC;gBAClC,SAAS;YACX,CAAC;YAED,mEAAmE;YACnE,IAAI,KAAK,CAAC,cAAc,EAAE,EAAE,CAAC;gBAC3B,cAAc,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YAC7B,CAAC;iBAAM,IAAI,KAAK,CAAC,WAAW,EAAE,EAAE,CAAC;gBAC/B,gBAAgB,CAAC,QAAQ,EAAE,cAAc,EAAE,YAAY,CAAC,CAAC;YAC3D,CAAC;iBAAM,IAAI,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC;gBAC1B,WAAW,CAAC,cAAc,EAAE,QAAQ,EAAE,YAAY,CAAC,CAAC;YACtD,CAAC;QACH,CAAC;QAED,KAAK,MAAM,KAAK,IAAI,cAAc,EAAE,CAAC;YACnC,MAAM,QAAQ,GAAG,QAAQ,CAAC,IAAI,CAAC,UAAU,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;YACvD,MAAM,YAAY,GAAG,QAAQ,CAAC,QAAQ,CAAC,eAAe,EAAE,QAAQ,CAAC,CAAC;YAClE,MAAM,cAAc,GAAG,cAAc,CAAC,YAAY,CAAC,CAAC;YACpD,cAAc,CAAC,QAAQ,EAAE,cAAc,EAAE,YAAY,CAAC,CAAC;QACzD,CAAC;IACH,CAAC;IAED,2CAA2C;IAC3C,aAAa,CAAC,eAAe,CAAC,CAAC;IAE/B,OAAO,OAAO,CAAC;AACjB,CAAC"}