@vibe-validate/config 0.18.4 → 0.19.0-rc.10

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (22) hide show
  1. package/config.schema.json +26 -0
  2. package/dist/constants.js +1 -0
  3. package/dist/constants.js.map +1 -0
  4. package/dist/git-helpers.js +1 -0
  5. package/dist/git-helpers.js.map +1 -0
  6. package/dist/index.d.ts +1 -1
  7. package/dist/index.d.ts.map +1 -1
  8. package/dist/index.js +2 -1
  9. package/dist/index.js.map +1 -0
  10. package/dist/loader.js +1 -0
  11. package/dist/loader.js.map +1 -0
  12. package/dist/schema-export.js +1 -0
  13. package/dist/schema-export.js.map +1 -0
  14. package/dist/schema-utils.js +1 -0
  15. package/dist/schema-utils.js.map +1 -0
  16. package/dist/schema.d.ts +174 -8
  17. package/dist/schema.d.ts.map +1 -1
  18. package/dist/schema.js +41 -0
  19. package/dist/schema.js.map +1 -0
  20. package/dist/scripts/generate-schema.js +1 -0
  21. package/dist/scripts/generate-schema.js.map +1 -0
  22. package/package.json +3 -4
package/config.schema.json CHANGED
@@ -150,6 +150,32 @@
150
150
  "disableWorkflowCheck": {
151
151
  "type": "boolean",
152
152
  "default": false
153
+ },
154
+ "dependencyLockCheck": {
155
+ "type": "object",
156
+ "properties": {
157
+ "runOn": {
158
+ "type": "string",
159
+ "enum": [
160
+ "validate",
161
+ "pre-commit",
162
+ "disabled"
163
+ ]
164
+ },
165
+ "packageManager": {
166
+ "type": "string",
167
+ "enum": [
168
+ "npm",
169
+ "pnpm",
170
+ "yarn",
171
+ "bun"
172
+ ]
173
+ },
174
+ "command": {
175
+ "type": "string"
176
+ }
177
+ },
178
+ "additionalProperties": false
153
179
  }
154
180
  },
155
181
  "additionalProperties": false
package/dist/constants.js CHANGED
@@ -36,3 +36,4 @@ export const GIT_DEFAULTS = {
36
36
  */
37
37
  WARN_IF_BEHIND: true,
38
38
  };
39
+ //# sourceMappingURL=constants.js.map
package/dist/constants.js.map ADDED
@@ -0,0 +1 @@
1
+ {"version":3,"file":"constants.js","sourceRoot":"","sources":["../src/constants.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH;;;;;;;;;GASG;AACH,MAAM,CAAC,MAAM,YAAY,GAAG;IAC1B;;;OAGG;IACH,WAAW,EAAE,MAAe;IAE5B;;;OAGG;IACH,aAAa,EAAE,QAAiB;IAEhC;;OAEG;IACH,SAAS,EAAE,KAAc;IAEzB;;OAEG;IACH,cAAc,EAAE,IAAa;CACrB,CAAC"}
package/dist/git-helpers.js CHANGED
@@ -69,3 +69,4 @@ export function getMainBranch(config) {
69
69
  export function getRemoteOrigin(config) {
70
70
  return config?.remoteOrigin ?? GIT_DEFAULTS.REMOTE_ORIGIN;
71
71
  }
72
+ //# sourceMappingURL=git-helpers.js.map
package/dist/git-helpers.js.map ADDED
@@ -0,0 +1 @@
1
+ {"version":3,"file":"git-helpers.js","sourceRoot":"","sources":["../src/git-helpers.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAC;AAG9C;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,MAAM,UAAU,eAAe,CAAC,MAA2B;IACzD,MAAM,UAAU,GAAG,MAAM,EAAE,UAAU,IAAI,YAAY,CAAC,WAAW,CAAC;IAClE,MAAM,YAAY,GAAG,MAAM,EAAE,YAAY,IAAI,YAAY,CAAC,aAAa,CAAC;IACxE,OAAO,GAAG,YAAY,IAAI,UAAU,EAAE,CAAC;AACzC,CAAC;AAED;;;;;;;;;;;;;;GAcG;AACH,MAAM,UAAU,aAAa,CAAC,MAA2B;IACvD,OAAO,MAAM,EAAE,UAAU,IAAI,YAAY,CAAC,WAAW,CAAC;AACxD,CAAC;AAED;;;;;;;;;;;;;;GAcG;AACH,MAAM,UAAU,eAAe,CAAC,MAA2B;IACzD,OAAO,MAAM,EAAE,YAAY,IAAI,YAAY,CAAC,aAAa,CAAC;AAC5D,CAAC"}
package/dist/index.d.ts CHANGED
@@ -21,7 +21,7 @@
21
21
  * command: tsc --noEmit
22
22
  * ```
23
23
  */
24
- export { type ValidationStep, type ValidationPhase, type ValidationConfig, type GitConfig, type CIConfig, type HooksConfig, type SecretScanningConfig, type ExtractorTrustLevel, type ExtractorCategoryConfig, type ExternalExtractorConfig, type ExtractorsConfig, type VibeValidateConfig, ValidationStepSchema, ValidationPhaseSchema, ValidationConfigSchema, GitConfigSchema, CIConfigSchema, HooksConfigSchema, SecretScanningSchema, ExtractorTrustLevelSchema, ExtractorCategoryConfigSchema, ExternalExtractorConfigSchema, ExtractorsConfigSchema, VibeValidateConfigSchema, validateConfig, safeValidateConfig, } from './schema.js';
24
+ export { type ValidationStep, type ValidationPhase, type ValidationConfig, type GitConfig, type CIConfig, type DependencyLockCheckConfig, type HooksConfig, type SecretScanningConfig, type ExtractorTrustLevel, type ExtractorCategoryConfig, type ExternalExtractorConfig, type ExtractorsConfig, type VibeValidateConfig, ValidationStepSchema, ValidationPhaseSchema, ValidationConfigSchema, GitConfigSchema, CIConfigSchema, DependencyLockCheckSchema, HooksConfigSchema, SecretScanningSchema, ExtractorTrustLevelSchema, ExtractorCategoryConfigSchema, ExternalExtractorConfigSchema, ExtractorsConfigSchema, VibeValidateConfigSchema, validateConfig, safeValidateConfig, } from './schema.js';
25
25
  export { CONFIG_FILE_NAME, loadConfigFromFile, findAndLoadConfig, } from './loader.js';
26
26
  export { GIT_DEFAULTS } from './constants.js';
27
27
  export { getRemoteBranch, getMainBranch, getRemoteOrigin } from './git-helpers.js';
package/dist/index.d.ts.map CHANGED
@@ -1 +1 @@
1
- {"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;GAsBG;AAGH,OAAO,EACL,KAAK,cAAc,EACnB,KAAK,eAAe,EACpB,KAAK,gBAAgB,EACrB,KAAK,SAAS,EACd,KAAK,QAAQ,EACb,KAAK,WAAW,EAChB,KAAK,oBAAoB,EACzB,KAAK,mBAAmB,EACxB,KAAK,uBAAuB,EAC5B,KAAK,uBAAuB,EAC5B,KAAK,gBAAgB,EACrB,KAAK,kBAAkB,EACvB,oBAAoB,EACpB,qBAAqB,EACrB,sBAAsB,EACtB,eAAe,EACf,cAAc,EACd,iBAAiB,EACjB,oBAAoB,EACpB,yBAAyB,EACzB,6BAA6B,EAC7B,6BAA6B,EAC7B,sBAAsB,EACtB,wBAAwB,EACxB,cAAc,EACd,kBAAkB,GACnB,MAAM,aAAa,CAAC;AAGrB,OAAO,EACL,gBAAgB,EAChB,kBAAkB,EAClB,iBAAiB,GAClB,MAAM,aAAa,CAAC;AAGrB,OAAO,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAC;AAC9C,OAAO,EAAE,eAAe,EAAE,aAAa,EAAE,eAAe,EAAE,MAAM,kBAAkB,CAAC;AAGnF,OAAO,EAAE,mBAAmB,EAAE,qBAAqB,EAAE,MAAM,mBAAmB,CAAC"}
1
+ {"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;GAsBG;AAGH,OAAO,EACL,KAAK,cAAc,EACnB,KAAK,eAAe,EACpB,KAAK,gBAAgB,EACrB,KAAK,SAAS,EACd,KAAK,QAAQ,EACb,KAAK,yBAAyB,EAC9B,KAAK,WAAW,EAChB,KAAK,oBAAoB,EACzB,KAAK,mBAAmB,EACxB,KAAK,uBAAuB,EAC5B,KAAK,uBAAuB,EAC5B,KAAK,gBAAgB,EACrB,KAAK,kBAAkB,EACvB,oBAAoB,EACpB,qBAAqB,EACrB,sBAAsB,EACtB,eAAe,EACf,cAAc,EACd,yBAAyB,EACzB,iBAAiB,EACjB,oBAAoB,EACpB,yBAAyB,EACzB,6BAA6B,EAC7B,6BAA6B,EAC7B,sBAAsB,EACtB,wBAAwB,EACxB,cAAc,EACd,kBAAkB,GACnB,MAAM,aAAa,CAAC;AAGrB,OAAO,EACL,gBAAgB,EAChB,kBAAkB,EAClB,iBAAiB,GAClB,MAAM,aAAa,CAAC;AAGrB,OAAO,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAC;AAC9C,OAAO,EAAE,eAAe,EAAE,aAAa,EAAE,eAAe,EAAE,MAAM,kBAAkB,CAAC;AAGnF,OAAO,EAAE,mBAAmB,EAAE,qBAAqB,EAAE,MAAM,mBAAmB,CAAC"}
package/dist/index.js CHANGED
@@ -22,7 +22,7 @@
22
22
  * ```
23
23
  */
24
24
  // Core schema types and validation
25
- export { ValidationStepSchema, ValidationPhaseSchema, ValidationConfigSchema, GitConfigSchema, CIConfigSchema, HooksConfigSchema, SecretScanningSchema, ExtractorTrustLevelSchema, ExtractorCategoryConfigSchema, ExternalExtractorConfigSchema, ExtractorsConfigSchema, VibeValidateConfigSchema, validateConfig, safeValidateConfig, } from './schema.js';
25
+ export { ValidationStepSchema, ValidationPhaseSchema, ValidationConfigSchema, GitConfigSchema, CIConfigSchema, DependencyLockCheckSchema, HooksConfigSchema, SecretScanningSchema, ExtractorTrustLevelSchema, ExtractorCategoryConfigSchema, ExternalExtractorConfigSchema, ExtractorsConfigSchema, VibeValidateConfigSchema, validateConfig, safeValidateConfig, } from './schema.js';
26
26
  // Config loading
27
27
  export { CONFIG_FILE_NAME, loadConfigFromFile, findAndLoadConfig, } from './loader.js';
28
28
  // Git configuration constants and helpers
@@ -30,3 +30,4 @@ export { GIT_DEFAULTS } from './constants.js';
30
30
  export { getRemoteBranch, getMainBranch, getRemoteOrigin } from './git-helpers.js';
31
31
  // Shared schema utilities (foundational - no dependencies)
32
32
  export { createSafeValidator, createStrictValidator } from './schema-utils.js';
33
+ //# sourceMappingURL=index.js.map
package/dist/index.js.map ADDED
@@ -0,0 +1 @@
1
+ {"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;GAsBG;AAEH,mCAAmC;AACnC,OAAO,EAcL,oBAAoB,EACpB,qBAAqB,EACrB,sBAAsB,EACtB,eAAe,EACf,cAAc,EACd,yBAAyB,EACzB,iBAAiB,EACjB,oBAAoB,EACpB,yBAAyB,EACzB,6BAA6B,EAC7B,6BAA6B,EAC7B,sBAAsB,EACtB,wBAAwB,EACxB,cAAc,EACd,kBAAkB,GACnB,MAAM,aAAa,CAAC;AAErB,iBAAiB;AACjB,OAAO,EACL,gBAAgB,EAChB,kBAAkB,EAClB,iBAAiB,GAClB,MAAM,aAAa,CAAC;AAErB,0CAA0C;AAC1C,OAAO,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAC;AAC9C,OAAO,EAAE,eAAe,EAAE,aAAa,EAAE,eAAe,EAAE,MAAM,kBAAkB,CAAC;AAEnF,2DAA2D;AAC3D,OAAO,EAAE,mBAAmB,EAAE,qBAAqB,EAAE,MAAM,mBAAmB,CAAC"}
package/dist/loader.js CHANGED
@@ -68,3 +68,4 @@ async function resolveConfig(raw, _basePath) {
68
68
  // Validate configuration
69
69
  return validateConfig(raw);
70
70
  }
71
+ //# sourceMappingURL=loader.js.map
package/dist/loader.js.map ADDED
@@ -0,0 +1 @@
1
+ {"version":3,"file":"loader.js","sourceRoot":"","sources":["../src/loader.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACvC,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAE7C,OAAO,EAAE,KAAK,IAAI,SAAS,EAAE,MAAM,MAAM,CAAC;AAE1C,OAAO,EAAE,cAAc,EAA2B,MAAM,aAAa,CAAC;AAEtE;;;;GAIG;AACH,MAAM,CAAC,MAAM,gBAAgB,GAAG,2BAA2B,CAAC;AAE5D;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACtC,UAAkB;IAElB,MAAM,YAAY,GAAG,OAAO,CAAC,UAAU,CAAC,CAAC;IAEzC,4BAA4B;IAC5B,IAAI,CAAC,YAAY,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;QACpC,MAAM,IAAI,KAAK,CACb,mCAAmC,YAAY,IAAI;YACnD,mCAAmC;YACnC,sCAAsC,CACvC,CAAC;IACJ,CAAC;IAGD,MAAM,OAAO,GAAG,YAAY,CAAC,YAAY,EAAE,OAAO,CAAC,CAAC;IACpD,MAAM,GAAG,GAAG,SAAS,CAAC,OAAO,CAAC,CAAC;IAE/B,iEAAiE;IACjE,IAAI,GAAG,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,SAAS,IAAI,GAAG,EAAE,CAAC;QACvD,OAAQ,GAA+B,CAAC,SAAS,CAAC,CAAC;IACrD,CAAC;IAED,OAAO,MAAM,aAAa,CAAC,GAAG,EAAE,OAAO,CAAC,YAAY,CAAC,CAAC,CAAC;AACzD,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,MAAc,OAAO,CAAC,GAAG,EAAE;IAE3B,MAAM,UAAU,GAAG,OAAO,CAAC,GAAG,EAAE,gBAAgB,CAAC,CAAC;IAElD,IAAI,CAAC;QACH,OAAO,MAAM,kBAAkB,CAAC,UAAU,CAAC,CAAC;IAC9C,CAAC;IAAC,MAAM,CAAC;QACP,iEAAiE;QACjE,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC;AAED;;;;;;GAMG;AACH,KAAK,UAAU,aAAa,CAC1B,GAAY,EACZ,SAAiB;IAEjB,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,GAAG,KAAK,IAAI,EAAE,CAAC;QAC5C,MAAM,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAC;IACrD,CAAC;IAED,yBAAyB;IACzB,OAAO,cAAc,CAAC,GAAG,CAAC,CAAC;AAC7B,CAAC"}
package/dist/schema-export.js CHANGED
@@ -29,3 +29,4 @@ export function generateJsonSchema() {
29
29
  * Pre-generated JSON Schema (exported for bundling in npm package)
30
30
  */
31
31
  export const vibeValidateJsonSchema = generateJsonSchema();
32
+ //# sourceMappingURL=schema-export.js.map
package/dist/schema-export.js.map ADDED
@@ -0,0 +1 @@
1
+ {"version":3,"file":"schema-export.js","sourceRoot":"","sources":["../src/schema-export.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAC;AAErD,OAAO,EAAE,wBAAwB,EAAE,MAAM,aAAa,CAAC;AAEvD;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,kBAAkB;IAChC,OAAO,eAAe,CAAC,wBAAwB,EAAE;QAC/C,IAAI,EAAE,oBAAoB;QAC1B,YAAY,EAAE,MAAM,EAAE,uCAAuC;QAC7D,MAAM,EAAE,aAAa;KACtB,CAAC,CAAC;AACL,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAAG,kBAAkB,EAAE,CAAC"}
package/dist/schema-utils.js CHANGED
@@ -64,3 +64,4 @@ export function createStrictValidator(schema) {
64
64
  return schema.parse(data);
65
65
  };
66
66
  }
67
+ //# sourceMappingURL=schema-utils.js.map
package/dist/schema-utils.js.map ADDED
@@ -0,0 +1 @@
1
+ {"version":3,"file":"schema-utils.js","sourceRoot":"","sources":["../src/schema-utils.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAIH;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,MAAM,UAAU,mBAAmB,CAAsB,MAAS;IAChE,OAAO,SAAS,YAAY,CAAC,IAAa;QAGxC,MAAM,MAAM,GAAG,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;QAEtC,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;YACnB,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,CAAC;QAC9C,CAAC;QAED,wCAAwC;QACxC,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE;YAC3C,MAAM,IAAI,GAAG,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YAChC,OAAO,IAAI,CAAC,CAAC,CAAC,GAAG,IAAI,KAAK,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC;QACxD,CAAC,CAAC,CAAC;QAEH,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC;IACpC,CAAC,CAAC;AACJ,CAAC;AAED;;;;;;;;;;;;;;;;;;GAkBG;AACH,MAAM,UAAU,qBAAqB,CAAsB,MAAS;IAClE,OAAO,SAAS,QAAQ,CAAC,IAAa;QACpC,OAAO,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAC5B,CAAC,CAAC;AACJ,CAAC"}
package/dist/schema.d.ts CHANGED
@@ -259,6 +259,48 @@ export declare const GitConfigSchema: z.ZodObject<{
259
259
  warnIfBehind?: boolean | undefined;
260
260
  }>;
261
261
  export type GitConfig = z.infer<typeof GitConfigSchema>;
262
+ /**
263
+ * Dependency Lock Check Configuration Schema
264
+ *
265
+ * Controls when and how lock file verification runs to prevent cache poisoning.
266
+ */
267
+ export declare const DependencyLockCheckSchema: z.ZodObject<{
268
+ /**
269
+ * When to run lock file verification (default: validate)
270
+ * - 'validate': Run during validation workflow
271
+ * - 'pre-commit': Run during pre-commit hook
272
+ * - 'disabled': Skip lock file verification
273
+ */
274
+ runOn: z.ZodOptional<z.ZodEnum<["validate", "pre-commit", "disabled"]>>;
275
+ /**
276
+ * Package manager to verify lock file for (default: auto-detect from ci.packageManager)
277
+ * Auto-detection priority:
278
+ * 1. ci.packageManager field
279
+ * 2. package.json packageManager field
280
+ * 3. Lock file detection (bun.lockb, yarn.lock, package-lock.json, pnpm-lock.yaml)
281
+ *
282
+ * Explicit configuration overrides auto-detection.
283
+ */
284
+ packageManager: z.ZodOptional<z.ZodEnum<["npm", "pnpm", "yarn", "bun"]>>;
285
+ /**
286
+ * Custom command to verify lock file (optional)
287
+ * If not specified, uses package manager's built-in check:
288
+ * - npm: npm ci --dry-run
289
+ * - pnpm: pnpm install --frozen-lockfile
290
+ * - yarn: yarn install --frozen-lockfile
291
+ * - bun: bun install --frozen-lockfile
292
+ */
293
+ command: z.ZodOptional<z.ZodString>;
294
+ }, "strict", z.ZodTypeAny, {
295
+ command?: string | undefined;
296
+ runOn?: "validate" | "pre-commit" | "disabled" | undefined;
297
+ packageManager?: "npm" | "pnpm" | "yarn" | "bun" | undefined;
298
+ }, {
299
+ command?: string | undefined;
300
+ runOn?: "validate" | "pre-commit" | "disabled" | undefined;
301
+ packageManager?: "npm" | "pnpm" | "yarn" | "bun" | undefined;
302
+ }>;
303
+ export type DependencyLockCheckConfig = z.infer<typeof DependencyLockCheckSchema>;
262
304
  /**
263
305
  * CI/CD Configuration Schema
264
306
  */
@@ -292,20 +334,72 @@ export declare const CIConfigSchema: z.ZodObject<{
292
334
  * When enabled, `vibe-validate doctor` will skip workflow sync validation.
293
335
  */
294
336
  disableWorkflowCheck: z.ZodDefault<z.ZodOptional<z.ZodBoolean>>;
337
+ /**
338
+ * Dependency lock file verification configuration (optional)
339
+ *
340
+ * Prevents cache poisoning by verifying lock files are in sync with package.json
341
+ * before validation runs. Recommended for all Node.js projects.
342
+ */
343
+ dependencyLockCheck: z.ZodOptional<z.ZodObject<{
344
+ /**
345
+ * When to run lock file verification (default: validate)
346
+ * - 'validate': Run during validation workflow
347
+ * - 'pre-commit': Run during pre-commit hook
348
+ * - 'disabled': Skip lock file verification
349
+ */
350
+ runOn: z.ZodOptional<z.ZodEnum<["validate", "pre-commit", "disabled"]>>;
351
+ /**
352
+ * Package manager to verify lock file for (default: auto-detect from ci.packageManager)
353
+ * Auto-detection priority:
354
+ * 1. ci.packageManager field
355
+ * 2. package.json packageManager field
356
+ * 3. Lock file detection (bun.lockb, yarn.lock, package-lock.json, pnpm-lock.yaml)
357
+ *
358
+ * Explicit configuration overrides auto-detection.
359
+ */
360
+ packageManager: z.ZodOptional<z.ZodEnum<["npm", "pnpm", "yarn", "bun"]>>;
361
+ /**
362
+ * Custom command to verify lock file (optional)
363
+ * If not specified, uses package manager's built-in check:
364
+ * - npm: npm ci --dry-run
365
+ * - pnpm: pnpm install --frozen-lockfile
366
+ * - yarn: yarn install --frozen-lockfile
367
+ * - bun: bun install --frozen-lockfile
368
+ */
369
+ command: z.ZodOptional<z.ZodString>;
370
+ }, "strict", z.ZodTypeAny, {
371
+ command?: string | undefined;
372
+ runOn?: "validate" | "pre-commit" | "disabled" | undefined;
373
+ packageManager?: "npm" | "pnpm" | "yarn" | "bun" | undefined;
374
+ }, {
375
+ command?: string | undefined;
376
+ runOn?: "validate" | "pre-commit" | "disabled" | undefined;
377
+ packageManager?: "npm" | "pnpm" | "yarn" | "bun" | undefined;
378
+ }>>;
295
379
  }, "strict", z.ZodTypeAny, {
296
380
  disableWorkflowCheck: boolean;
297
381
  failFast?: boolean | undefined;
382
+ packageManager?: "npm" | "pnpm" | "yarn" | "bun" | undefined;
298
383
  nodeVersions?: string[] | undefined;
299
384
  os?: string[] | undefined;
300
- packageManager?: "npm" | "pnpm" | "yarn" | "bun" | undefined;
301
385
  coverage?: boolean | undefined;
386
+ dependencyLockCheck?: {
387
+ command?: string | undefined;
388
+ runOn?: "validate" | "pre-commit" | "disabled" | undefined;
389
+ packageManager?: "npm" | "pnpm" | "yarn" | "bun" | undefined;
390
+ } | undefined;
302
391
  }, {
303
392
  failFast?: boolean | undefined;
393
+ packageManager?: "npm" | "pnpm" | "yarn" | "bun" | undefined;
304
394
  nodeVersions?: string[] | undefined;
305
395
  os?: string[] | undefined;
306
- packageManager?: "npm" | "pnpm" | "yarn" | "bun" | undefined;
307
396
  coverage?: boolean | undefined;
308
397
  disableWorkflowCheck?: boolean | undefined;
398
+ dependencyLockCheck?: {
399
+ command?: string | undefined;
400
+ runOn?: "validate" | "pre-commit" | "disabled" | undefined;
401
+ packageManager?: "npm" | "pnpm" | "yarn" | "bun" | undefined;
402
+ } | undefined;
309
403
  }>;
310
404
  export type CIConfig = z.infer<typeof CIConfigSchema>;
311
405
  /**
@@ -728,20 +822,72 @@ export declare const VibeValidateConfigSchema: z.ZodObject<{
728
822
  * When enabled, `vibe-validate doctor` will skip workflow sync validation.
729
823
  */
730
824
  disableWorkflowCheck: z.ZodDefault<z.ZodOptional<z.ZodBoolean>>;
825
+ /**
826
+ * Dependency lock file verification configuration (optional)
827
+ *
828
+ * Prevents cache poisoning by verifying lock files are in sync with package.json
829
+ * before validation runs. Recommended for all Node.js projects.
830
+ */
831
+ dependencyLockCheck: z.ZodOptional<z.ZodObject<{
832
+ /**
833
+ * When to run lock file verification (default: validate)
834
+ * - 'validate': Run during validation workflow
835
+ * - 'pre-commit': Run during pre-commit hook
836
+ * - 'disabled': Skip lock file verification
837
+ */
838
+ runOn: z.ZodOptional<z.ZodEnum<["validate", "pre-commit", "disabled"]>>;
839
+ /**
840
+ * Package manager to verify lock file for (default: auto-detect from ci.packageManager)
841
+ * Auto-detection priority:
842
+ * 1. ci.packageManager field
843
+ * 2. package.json packageManager field
844
+ * 3. Lock file detection (bun.lockb, yarn.lock, package-lock.json, pnpm-lock.yaml)
845
+ *
846
+ * Explicit configuration overrides auto-detection.
847
+ */
848
+ packageManager: z.ZodOptional<z.ZodEnum<["npm", "pnpm", "yarn", "bun"]>>;
849
+ /**
850
+ * Custom command to verify lock file (optional)
851
+ * If not specified, uses package manager's built-in check:
852
+ * - npm: npm ci --dry-run
853
+ * - pnpm: pnpm install --frozen-lockfile
854
+ * - yarn: yarn install --frozen-lockfile
855
+ * - bun: bun install --frozen-lockfile
856
+ */
857
+ command: z.ZodOptional<z.ZodString>;
858
+ }, "strict", z.ZodTypeAny, {
859
+ command?: string | undefined;
860
+ runOn?: "validate" | "pre-commit" | "disabled" | undefined;
861
+ packageManager?: "npm" | "pnpm" | "yarn" | "bun" | undefined;
862
+ }, {
863
+ command?: string | undefined;
864
+ runOn?: "validate" | "pre-commit" | "disabled" | undefined;
865
+ packageManager?: "npm" | "pnpm" | "yarn" | "bun" | undefined;
866
+ }>>;
731
867
  }, "strict", z.ZodTypeAny, {
732
868
  disableWorkflowCheck: boolean;
733
869
  failFast?: boolean | undefined;
870
+ packageManager?: "npm" | "pnpm" | "yarn" | "bun" | undefined;
734
871
  nodeVersions?: string[] | undefined;
735
872
  os?: string[] | undefined;
736
- packageManager?: "npm" | "pnpm" | "yarn" | "bun" | undefined;
737
873
  coverage?: boolean | undefined;
874
+ dependencyLockCheck?: {
875
+ command?: string | undefined;
876
+ runOn?: "validate" | "pre-commit" | "disabled" | undefined;
877
+ packageManager?: "npm" | "pnpm" | "yarn" | "bun" | undefined;
878
+ } | undefined;
738
879
  }, {
739
880
  failFast?: boolean | undefined;
881
+ packageManager?: "npm" | "pnpm" | "yarn" | "bun" | undefined;
740
882
  nodeVersions?: string[] | undefined;
741
883
  os?: string[] | undefined;
742
- packageManager?: "npm" | "pnpm" | "yarn" | "bun" | undefined;
743
884
  coverage?: boolean | undefined;
744
885
  disableWorkflowCheck?: boolean | undefined;
886
+ dependencyLockCheck?: {
887
+ command?: string | undefined;
888
+ runOn?: "validate" | "pre-commit" | "disabled" | undefined;
889
+ packageManager?: "npm" | "pnpm" | "yarn" | "bun" | undefined;
890
+ } | undefined;
745
891
  }>>;
746
892
  /** Hooks configuration (pre-commit, etc.) */
747
893
  hooks: z.ZodDefault<z.ZodOptional<z.ZodObject<{
@@ -987,10 +1133,15 @@ export declare const VibeValidateConfigSchema: z.ZodObject<{
987
1133
  ci?: {
988
1134
  disableWorkflowCheck: boolean;
989
1135
  failFast?: boolean | undefined;
1136
+ packageManager?: "npm" | "pnpm" | "yarn" | "bun" | undefined;
990
1137
  nodeVersions?: string[] | undefined;
991
1138
  os?: string[] | undefined;
992
- packageManager?: "npm" | "pnpm" | "yarn" | "bun" | undefined;
993
1139
  coverage?: boolean | undefined;
1140
+ dependencyLockCheck?: {
1141
+ command?: string | undefined;
1142
+ runOn?: "validate" | "pre-commit" | "disabled" | undefined;
1143
+ packageManager?: "npm" | "pnpm" | "yarn" | "bun" | undefined;
1144
+ } | undefined;
994
1145
  } | undefined;
995
1146
  }, {
996
1147
  validation: {
@@ -1019,11 +1170,16 @@ export declare const VibeValidateConfigSchema: z.ZodObject<{
1019
1170
  } | undefined;
1020
1171
  ci?: {
1021
1172
  failFast?: boolean | undefined;
1173
+ packageManager?: "npm" | "pnpm" | "yarn" | "bun" | undefined;
1022
1174
  nodeVersions?: string[] | undefined;
1023
1175
  os?: string[] | undefined;
1024
- packageManager?: "npm" | "pnpm" | "yarn" | "bun" | undefined;
1025
1176
  coverage?: boolean | undefined;
1026
1177
  disableWorkflowCheck?: boolean | undefined;
1178
+ dependencyLockCheck?: {
1179
+ command?: string | undefined;
1180
+ runOn?: "validate" | "pre-commit" | "disabled" | undefined;
1181
+ packageManager?: "npm" | "pnpm" | "yarn" | "bun" | undefined;
1182
+ } | undefined;
1027
1183
  } | undefined;
1028
1184
  hooks?: {
1029
1185
  preCommit?: {
@@ -1122,10 +1278,15 @@ export declare const validateConfig: (data: unknown) => {
1122
1278
  ci?: {
1123
1279
  disableWorkflowCheck: boolean;
1124
1280
  failFast?: boolean | undefined;
1281
+ packageManager?: "npm" | "pnpm" | "yarn" | "bun" | undefined;
1125
1282
  nodeVersions?: string[] | undefined;
1126
1283
  os?: string[] | undefined;
1127
- packageManager?: "npm" | "pnpm" | "yarn" | "bun" | undefined;
1128
1284
  coverage?: boolean | undefined;
1285
+ dependencyLockCheck?: {
1286
+ command?: string | undefined;
1287
+ runOn?: "validate" | "pre-commit" | "disabled" | undefined;
1288
+ packageManager?: "npm" | "pnpm" | "yarn" | "bun" | undefined;
1289
+ } | undefined;
1129
1290
  } | undefined;
1130
1291
  };
1131
1292
  /**
@@ -1194,10 +1355,15 @@ export declare const safeValidateConfig: (data: unknown) => {
1194
1355
  ci?: {
1195
1356
  disableWorkflowCheck: boolean;
1196
1357
  failFast?: boolean | undefined;
1358
+ packageManager?: "npm" | "pnpm" | "yarn" | "bun" | undefined;
1197
1359
  nodeVersions?: string[] | undefined;
1198
1360
  os?: string[] | undefined;
1199
- packageManager?: "npm" | "pnpm" | "yarn" | "bun" | undefined;
1200
1361
  coverage?: boolean | undefined;
1362
+ dependencyLockCheck?: {
1363
+ command?: string | undefined;
1364
+ runOn?: "validate" | "pre-commit" | "disabled" | undefined;
1365
+ packageManager?: "npm" | "pnpm" | "yarn" | "bun" | undefined;
1366
+ } | undefined;
1201
1367
  } | undefined;
1202
1368
  };
1203
1369
  } | {
package/dist/schema.d.ts.map CHANGED
@@ -1 +1 @@
1
- {"version":3,"file":"schema.d.ts","sourceRoot":"","sources":["../src/schema.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAKxB;;;;GAIG;AACH,eAAO,MAAM,oBAAoB;IAC/B,kEAAkE;;IAGlE,qDAAqD;;IAGrD,uEAAuE;;IAGvE,+EAA+E;;IAG/E,qDAAqD;;IAGrD,oDAAoD;;IAGpD,0FAA0F;;;;;;;;;;;;;;;;;;EAEjF,CAAC;AAEZ,MAAM,MAAM,cAAc,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,oBAAoB,CAAC,CAAC;AAElE;;;;;GAKG;AACH,eAAO,MAAM,qBAAqB;IAChC,wDAAwD;;IAGxD,iDAAiD;;IAGjD,qCAAqC;;QArCrC,kEAAkE;;QAGlE,qDAAqD;;QAGrD,uEAAuE;;QAGvE,+EAA+E;;QAG/E,qDAAqD;;QAGrD,oDAAoD;;QAGpD,0FAA0F;;;;;;;;;;;;;;;;;;;IAsB1F,qFAAqF;;IAGrF,gEAAgE;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAEvD,CAAC;AAGZ,MAAM,MAAM,eAAe,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,qBAAqB,CAAC,CAAC;AAEpE;;GAEG;AACH,eAAO,MAAM,sBAAsB;IACjC,mCAAmC;;QAvBnC,wDAAwD;;QAGxD,iDAAiD;;QAGjD,qCAAqC;;YArCrC,kEAAkE;;YAGlE,qDAAqD;;YAGrD,uEAAuE;;YAGvE,+EAA+E;;YAG/E,qDAAqD;;YAGrD,oDAAoD;;YAGpD,0FAA0F;;;;;;;;;;;;;;;;;;;QAsB1F,qFAAqF;;QAGrF,gEAAgE;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;IAchE,uFAAuF;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAE9E,CAAC;AAGZ,MAAM,MAAM,gBAAgB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,sBAAsB,CAAC,CAAC;AAEtE;;GAEG;AACH,eAAO,MAAM,eAAe;IAC1B,uCAAuC;;IAGvC,oCAAoC;;IAGpC,6CAA6C;;IAG7C,sDAAsD;;;;;;;;;;;;EAE7C,CAAC;AAEZ,MAAM,MAAM,SAAS,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,eAAe,CAAC,CAAC;AAExD;;GAEG;AACH,eAAO,MAAM,cAAc;IACzB,6DAA6D;;IAG7D,mEAAmE;;IAGnE;;;;;;;;;OASG;;IAGH,oDAAoD;;IAGpD,iDAAiD;;IAGjD;;;;;;;;OAQG;;;;;;;;;;;;;;;;EAEM,CAAC;AAEZ,MAAM,MAAM,QAAQ,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,cAAc,CAAC,CAAC;AAEtD;;GAEG;AACH,eAAO,MAAM,oBAAoB;IAC/B,2DAA2D;;IAG3D;;;;;;;;;;OAUG;;;;;;;;EAEM,CAAC;AAEZ,MAAM,MAAM,oBAAoB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,oBAAoB,CAAC,CAAC;AAOxE;;GAEG;AACH,eAAO,MAAM,iBAAiB;IAC5B,oCAAoC;;QAElC,sDAAsD;;QAGtD,0EAA0E;;QAG1E,+CAA+C;;YApCjD,2DAA2D;;YAG3D;;;;;;;;;;eAUG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EA6BM,CAAC;AAEZ,MAAM,MAAM,WAAW,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,iBAAiB,CAAC,CAAC;AAE5D;;;;GAIG;AACH,eAAO,MAAM,mBAAmB;IAC9B,uEAAuE;;IAGvE;;;;OAIG;;IAGH;;;;OAIG;;;;;;;;;;EAEM,CAAC;AAEZ,MAAM,MAAM,aAAa,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,mBAAmB,CAAC,CAAC;AAEhE;;;;;;GAMG;AACH,eAAO,MAAM,yBAAyB,gCAA8B,CAAC;AAErE,MAAM,MAAM,mBAAmB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,yBAAyB,CAAC,CAAC;AAE5E;;;;GAIG;AACH,eAAO,MAAM,6BAA6B;IACxC,+EAA+E;;IAG/E,uDAAuD;;;;;;;;EAE9C,CAAC;AAEZ,MAAM,MAAM,uBAAuB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,6BAA6B,CAAC,CAAC;AAEpF;;;;GAIG;AACH,eAAO,MAAM,6BAA6B;IACxC,qEAAqE;;IAGrE,uCAAuC;;;;;;;;EAE9B,CAAC;AAEZ,MAAM,MAAM,uBAAuB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,6BAA6B,CAAC,CAAC;AAEpF;;;;GAIG;AACH,eAAO,MAAM,sBAAsB;IACjC;;;OAGG;;QAjCH,+EAA+E;;QAG/E,uDAAuD;;;;;;;;;IAoCvD;;;OAGG;;QA1CH,+EAA+E;;QAG/E,uDAAuD;;;;;;;;;IA6CvD;;;OAGG;;QApCH,qEAAqE;;QAGrE,uCAAuC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAmC9B,CAAC;AAEZ,MAAM,MAAM,gBAAgB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,sBAAsB,CAAC,CAAC;AAEtE;;;;GAIG;AACH,eAAO,MAAM,wBAAwB;IACnC,+BAA+B;;QAnO/B,mCAAmC;;YAvBnC,wDAAwD;;YAGxD,iDAAiD;;YAGjD,qCAAqC;;gBArCrC,kEAAkE;;gBAGlE,qDAAqD;;gBAGrD,uEAAuE;;gBAGvE,+EAA+E;;gBAG/E,qDAAqD;;gBAGrD,oDAAoD;;gBAGpD,0FAA0F;;;;;;;;;;;;;;;;;;;YAsB1F,qFAAqF;;YAGrF,gEAAgE;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;QAchE,uFAAuF;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;IAmOvF,oCAAoC;;QAxNpC,uCAAuC;;QAGvC,oCAAoC;;QAGpC,6CAA6C;;QAG7C,sDAAsD;;;;;;;;;;;;;IAuNtD,mEAAmE;;QA7MnE,6DAA6D;;QAG7D,mEAAmE;;QAGnE;;;;;;;;;WASG;;QAGH,oDAAoD;;QAGpD,iDAAiD;;QAGjD;;;;;;;;WAQG;;;;;;;;;;;;;;;;;IAgLH,6CAA6C;;QA1I7C,oCAAoC;;YAElC,sDAAsD;;YAGtD,0EAA0E;;YAG1E,+CAA+C;;gBApCjD,2DAA2D;;gBAG3D;;;;;;;;;;mBAUG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;IAiKH,kDAAkD;;QA1HlD,uEAAuE;;QAGvE;;;;WAIG;;QAGH;;;;WAIG;;;;;;;;;;;IAkHH;;;;;;;;;OASG;;QAtEH;;;WAGG;;YAjCH,+EAA+E;;YAG/E,uDAAuD;;;;;;;;;QAoCvD;;;WAGG;;YA1CH,+EAA+E;;YAG/E,uDAAuD;;;;;;;;;QA6CvD;;;WAGG;;YApCH,qEAAqE;;YAGrE,uCAAuC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;IAyFvC;;;;;;;;OAQG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAEM,CAAC;AAGZ,MAAM,MAAM,kBAAkB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,wBAAwB,CAAC,CAAC;AAE1E;;;;;;GAMG;AACH,eAAO,MAAM,cAAc;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAAkD,CAAC;AAE9E;;;;;GAKG;AACH,eAAO,MAAM,kBAAkB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAAgD,CAAC"}
1
+ {"version":3,"file":"schema.d.ts","sourceRoot":"","sources":["../src/schema.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAKxB;;;;GAIG;AACH,eAAO,MAAM,oBAAoB;IAC/B,kEAAkE;;IAGlE,qDAAqD;;IAGrD,uEAAuE;;IAGvE,+EAA+E;;IAG/E,qDAAqD;;IAGrD,oDAAoD;;IAGpD,0FAA0F;;;;;;;;;;;;;;;;;;EAEjF,CAAC;AAEZ,MAAM,MAAM,cAAc,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,oBAAoB,CAAC,CAAC;AAElE;;;;;GAKG;AACH,eAAO,MAAM,qBAAqB;IAChC,wDAAwD;;IAGxD,iDAAiD;;IAGjD,qCAAqC;;QArCrC,kEAAkE;;QAGlE,qDAAqD;;QAGrD,uEAAuE;;QAGvE,+EAA+E;;QAG/E,qDAAqD;;QAGrD,oDAAoD;;QAGpD,0FAA0F;;;;;;;;;;;;;;;;;;;IAsB1F,qFAAqF;;IAGrF,gEAAgE;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAEvD,CAAC;AAGZ,MAAM,MAAM,eAAe,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,qBAAqB,CAAC,CAAC;AAEpE;;GAEG;AACH,eAAO,MAAM,sBAAsB;IACjC,mCAAmC;;QAvBnC,wDAAwD;;QAGxD,iDAAiD;;QAGjD,qCAAqC;;YArCrC,kEAAkE;;YAGlE,qDAAqD;;YAGrD,uEAAuE;;YAGvE,+EAA+E;;YAG/E,qDAAqD;;YAGrD,oDAAoD;;YAGpD,0FAA0F;;;;;;;;;;;;;;;;;;;QAsB1F,qFAAqF;;QAGrF,gEAAgE;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;IAchE,uFAAuF;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAE9E,CAAC;AAGZ,MAAM,MAAM,gBAAgB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,sBAAsB,CAAC,CAAC;AAEtE;;GAEG;AACH,eAAO,MAAM,eAAe;IAC1B,uCAAuC;;IAGvC,oCAAoC;;IAGpC,6CAA6C;;IAG7C,sDAAsD;;;;;;;;;;;;EAE7C,CAAC;AAEZ,MAAM,MAAM,SAAS,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,eAAe,CAAC,CAAC;AAExD;;;;GAIG;AACH,eAAO,MAAM,yBAAyB;IACpC;;;;;OAKG;;IAGH;;;;;;;;OAQG;;IAGH;;;;;;;OAOG;;;;;;;;;;EAEM,CAAC;AAEZ,MAAM,MAAM,yBAAyB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,yBAAyB,CAAC,CAAC;AAElF;;GAEG;AACH,eAAO,MAAM,cAAc;IACzB,6DAA6D;;IAG7D,mEAAmE;;IAGnE;;;;;;;;;OASG;;IAGH,oDAAoD;;IAGpD,iDAAiD;;IAGjD;;;;;;;;OAQG;;IAGH;;;;;OAKG;;QA5EH;;;;;WAKG;;QAGH;;;;;;;;WAQG;;QAGH;;;;;;;WAOG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAoDM,CAAC;AAEZ,MAAM,MAAM,QAAQ,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,cAAc,CAAC,CAAC;AAEtD;;GAEG;AACH,eAAO,MAAM,oBAAoB;IAC/B,2DAA2D;;IAG3D;;;;;;;;;;OAUG;;;;;;;;EAEM,CAAC;AAEZ,MAAM,MAAM,oBAAoB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,oBAAoB,CAAC,CAAC;AAOxE;;GAEG;AACH,eAAO,MAAM,iBAAiB;IAC5B,oCAAoC;;QAElC,sDAAsD;;QAGtD,0EAA0E;;QAG1E,+CAA+C;;YApCjD,2DAA2D;;YAG3D;;;;;;;;;;eAUG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EA6BM,CAAC;AAEZ,MAAM,MAAM,WAAW,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,iBAAiB,CAAC,CAAC;AAE5D;;;;GAIG;AACH,eAAO,MAAM,mBAAmB;IAC9B,uEAAuE;;IAGvE;;;;OAIG;;IAGH;;;;OAIG;;;;;;;;;;EAEM,CAAC;AAEZ,MAAM,MAAM,aAAa,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,mBAAmB,CAAC,CAAC;AAEhE;;;;;;GAMG;AACH,eAAO,MAAM,yBAAyB,gCAA8B,CAAC;AAErE,MAAM,MAAM,mBAAmB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,yBAAyB,CAAC,CAAC;AAE5E;;;;GAIG;AACH,eAAO,MAAM,6BAA6B;IACxC,+EAA+E;;IAG/E,uDAAuD;;;;;;;;EAE9C,CAAC;AAEZ,MAAM,MAAM,uBAAuB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,6BAA6B,CAAC,CAAC;AAEpF;;;;GAIG;AACH,eAAO,MAAM,6BAA6B;IACxC,qEAAqE;;IAGrE,uCAAuC;;;;;;;;EAE9B,CAAC;AAEZ,MAAM,MAAM,uBAAuB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,6BAA6B,CAAC,CAAC;AAEpF;;;;GAIG;AACH,eAAO,MAAM,sBAAsB;IACjC;;;OAGG;;QAjCH,+EAA+E;;QAG/E,uDAAuD;;;;;;;;;IAoCvD;;;OAGG;;QA1CH,+EAA+E;;QAG/E,uDAAuD;;;;;;;;;IA6CvD;;;OAGG;;QApCH,qEAAqE;;QAGrE,uCAAuC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAmC9B,CAAC;AAEZ,MAAM,MAAM,gBAAgB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,sBAAsB,CAAC,CAAC;AAEtE;;;;GAIG;AACH,eAAO,MAAM,wBAAwB;IACnC,+BAA+B;;QAjR/B,mCAAmC;;YAvBnC,wDAAwD;;YAGxD,iDAAiD;;YAGjD,qCAAqC;;gBArCrC,kEAAkE;;gBAGlE,qDAAqD;;gBAGrD,uEAAuE;;gBAGvE,+EAA+E;;gBAG/E,qDAAqD;;gBAGrD,oDAAoD;;gBAGpD,0FAA0F;;;;;;;;;;;;;;;;;;;YAsB1F,qFAAqF;;YAGrF,gEAAgE;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;QAchE,uFAAuF;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;IAiRvF,oCAAoC;;QAtQpC,uCAAuC;;QAGvC,oCAAoC;;QAGpC,6CAA6C;;QAG7C,sDAAsD;;;;;;;;;;;;;IAqQtD,mEAAmE;;QArNnE,6DAA6D;;QAG7D,mEAAmE;;QAGnE;;;;;;;;;WASG;;QAGH,oDAAoD;;QAGpD,iDAAiD;;QAGjD;;;;;;;;WAQG;;QAGH;;;;;WAKG;;YA5EH;;;;;eAKG;;YAGH;;;;;;;;eAQG;;YAGH;;;;;;;eAOG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;IAkOH,6CAA6C;;QA1I7C,oCAAoC;;YAElC,sDAAsD;;YAGtD,0EAA0E;;YAG1E,+CAA+C;;gBApCjD,2DAA2D;;gBAG3D;;;;;;;;;;mBAUG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;IAiKH,kDAAkD;;QA1HlD,uEAAuE;;QAGvE;;;;WAIG;;QAGH;;;;WAIG;;;;;;;;;;;IAkHH;;;;;;;;;OASG;;QAtEH;;;WAGG;;YAjCH,+EAA+E;;YAG/E,uDAAuD;;;;;;;;;QAoCvD;;;WAGG;;YA1CH,+EAA+E;;YAG/E,uDAAuD;;;;;;;;;QA6CvD;;;WAGG;;YApCH,qEAAqE;;YAGrE,uCAAuC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;IAyFvC;;;;;;;;OAQG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAEM,CAAC;AAGZ,MAAM,MAAM,kBAAkB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,wBAAwB,CAAC,CAAC;AAE1E;;;;;;GAMG;AACH,eAAO,MAAM,cAAc;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAAkD,CAAC;AAE9E;;;;;GAKG;AACH,eAAO,MAAM,kBAAkB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAAgD,CAAC"}
package/dist/schema.js CHANGED
@@ -68,6 +68,39 @@ export const GitConfigSchema = z.object({
68
68
  /** Warn if branch is behind remote (default: true) */
69
69
  warnIfBehind: z.boolean().default(GIT_DEFAULTS.WARN_IF_BEHIND),
70
70
  }).strict();
71
+ /**
72
+ * Dependency Lock Check Configuration Schema
73
+ *
74
+ * Controls when and how lock file verification runs to prevent cache poisoning.
75
+ */
76
+ export const DependencyLockCheckSchema = z.object({
77
+ /**
78
+ * When to run lock file verification (default: validate)
79
+ * - 'validate': Run during validation workflow
80
+ * - 'pre-commit': Run during pre-commit hook
81
+ * - 'disabled': Skip lock file verification
82
+ */
83
+ runOn: z.enum(['validate', 'pre-commit', 'disabled']).optional(),
84
+ /**
85
+ * Package manager to verify lock file for (default: auto-detect from ci.packageManager)
86
+ * Auto-detection priority:
87
+ * 1. ci.packageManager field
88
+ * 2. package.json packageManager field
89
+ * 3. Lock file detection (bun.lockb, yarn.lock, package-lock.json, pnpm-lock.yaml)
90
+ *
91
+ * Explicit configuration overrides auto-detection.
92
+ */
93
+ packageManager: z.enum(['npm', 'pnpm', 'yarn', 'bun']).optional(),
94
+ /**
95
+ * Custom command to verify lock file (optional)
96
+ * If not specified, uses package manager's built-in check:
97
+ * - npm: npm ci --dry-run
98
+ * - pnpm: pnpm install --frozen-lockfile
99
+ * - yarn: yarn install --frozen-lockfile
100
+ * - bun: bun install --frozen-lockfile
101
+ */
102
+ command: z.string().optional(),
103
+ }).strict();
71
104
  /**
72
105
  * CI/CD Configuration Schema
73
106
  */
@@ -101,6 +134,13 @@ export const CIConfigSchema = z.object({
101
134
  * When enabled, `vibe-validate doctor` will skip workflow sync validation.
102
135
  */
103
136
  disableWorkflowCheck: z.boolean().optional().default(false),
137
+ /**
138
+ * Dependency lock file verification configuration (optional)
139
+ *
140
+ * Prevents cache poisoning by verifying lock files are in sync with package.json
141
+ * before validation runs. Recommended for all Node.js projects.
142
+ */
143
+ dependencyLockCheck: DependencyLockCheckSchema.optional(),
104
144
  }).strict();
105
145
  /**
106
146
  * Secret Scanning Configuration Schema
@@ -291,3 +331,4 @@ export const validateConfig = createStrictValidator(VibeValidateConfigSchema);
291
331
  * @returns Validation result with success/error information
292
332
  */
293
333
  export const safeValidateConfig = createSafeValidator(VibeValidateConfigSchema);
334
+ //# sourceMappingURL=schema.js.map
package/dist/schema.js.map ADDED
@@ -0,0 +1 @@
1
+ {"version":3,"file":"schema.js","sourceRoot":"","sources":["../src/schema.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAC;AAC9C,OAAO,EAAE,mBAAmB,EAAE,qBAAqB,EAAE,MAAM,mBAAmB,CAAC;AAE/E;;;;GAIG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC3C,kEAAkE;IAClE,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,EAAE,2BAA2B,CAAC;IAEpD,qDAAqD;IACrD,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,EAAE,yBAAyB,CAAC;IAErD,uEAAuE;IACvE,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAElC,+EAA+E;IAC/E,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;IAEzC,qDAAqD;IACrD,eAAe,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;IAEvC,oDAAoD;IACpD,GAAG,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;IAEhD,0FAA0F;IAC1F,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CAC3B,CAAC,CAAC,MAAM,EAAE,CAAC;AAIZ;;;;;GAKG;AACH,MAAM,CAAC,MAAM,qBAAqB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC5C,wDAAwD;IACxD,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,EAAE,4BAA4B,CAAC;IAErD,iDAAiD;IACjD,QAAQ,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC;IAE/C,qCAAqC;IACrC,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,oBAAoB,CAAC,CAAC,GAAG,CAAC,CAAC,EAAE,mCAAmC,CAAC;IAEhF,qFAAqF;IACrF,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC;IAEzD,gEAAgE;IAChE,QAAQ,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC;CAC/C,CAAC,CAAC,MAAM,EAAE,CAAC;AAKZ;;GAEG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC7C,mCAAmC;IACnC,MAAM,EAAE,CAAC,CAAC,KAAK,CAAC,qBAAqB,CAAC,CAAC,GAAG,CAAC,CAAC,EAAE,6BAA6B,CAAC;IAE5E,uFAAuF;IACvF,QAAQ,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC;CAC/C,CAAC,CAAC,MAAM,EAAE,CAAC;AAKZ;;GAEG;AACH,MAAM,CAAC,MAAM,eAAe,GAAG,CAAC,CAAC,MAAM,CAAC;IACtC,uCAAuC;IACvC,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,OAAO,CAAC,YAAY,CAAC,WAAW,CAAC;IAExD,oCAAoC;IACpC,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,OAAO,CAAC,YAAY,CAAC,aAAa,CAAC;IAE5D,6CAA6C;IAC7C,QAAQ,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,YAAY,CAAC,SAAS,CAAC;IAErD,sDAAsD;IACtD,YAAY,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,YAAY,CAAC,cAAc,CAAC;CAC/D,CAAC,CAAC,MAAM,EAAE,CAAC;AAIZ;;;;GAIG;AACH,MAAM,CAAC,MAAM,yBAAyB,GAAG,CAAC,CAAC,MAAM,CAAC;IAChD;;;;;OAKG;IACH,KAAK,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,UAAU,EAAE,YAAY,EAAE,UAAU,CAAC,CAAC,CAAC,QAAQ,EAAE;IAEhE;;;;;;;;OAQG;IACH,cAAc,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,CAAC,CAAC,CAAC,QAAQ,EAAE;IAEjE;;;;;;;OAOG;IACH,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CAC/B,CAAC,CAAC,MAAM,EAAE,CAAC;AAIZ;;GAEG;AACH,MAAM,CAAC,MAAM,cAAc,GAAG,CAAC,CAAC,MAAM,CAAC;IACrC,6DAA6D;IAC7D,YAAY,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;IAE5C,mEAAmE;IACnE,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;IAElC;;;;;;;;;OASG;IACH,cAAc,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,CAAC,CAAC,CAAC,QAAQ,EAAE;IAEjE,oDAAoD;IACpD,QAAQ,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;IAEhC,iDAAiD;IACjD,QAAQ,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;IAEhC;;;;;;;;OAQG;IACH,oBAAoB,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC;IAE3D;;;;;OAKG;IACH,mBAAmB,EAAE,yBAAyB,CAAC,QAAQ,EAAE;CAC1D,CAAC,CAAC,MAAM,EAAE,CAAC;AAIZ;;GAEG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC3C,2DAA2D;IAC3D,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC;IAElC;;;;;;;;;;OAUG;IACH,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,EAAE,6BAA6B,CAAC,CAAC,QAAQ,EAAE;CACzE,CAAC,CAAC,MAAM,EAAE,CAAC;AAIZ;;GAEG;AACH,MAAM,0BAA0B,GAAG,8BAA8B,CAAC;AAElE;;GAEG;AACH,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC,CAAC,MAAM,CAAC;IACxC,oCAAoC;IACpC,SAAS,EAAE,CAAC,CAAC,MAAM,CAAC;QAClB,sDAAsD;QACtD,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC;QAElC,0EAA0E;QAC1E,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,OAAO,CAAC,0BAA0B,CAAC;QAEvD,+CAA+C;QAC/C,cAAc,EAAE,oBAAoB,CAAC,QAAQ,EAAE;KAChD,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC;QAC7B,OAAO,EAAE,IAAI;QACb,OAAO,EAAE,0BAA0B;KACpC,CAAC;CACH,CAAC,CAAC,MAAM,EAAE,CAAC;AAIZ;;;;GAIG;AACH,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC1C,uEAAuE;IACvE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC;IAElC;;;;OAIG;IACH,gBAAgB,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,WAAW,EAAE,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,WAAW,CAAC;IAEvE;;;;OAIG;IACH,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CACjC,CAAC,CAAC,MAAM,EAAE,CAAC;AAIZ;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,yBAAyB,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC,CAAC;AAIrE;;;;GAIG;AACH,MAAM,CAAC,MAAM,6BAA6B,GAAG,CAAC,CAAC,MAAM,CAAC;IACpD,+EAA+E;IAC/E,KAAK,EAAE,yBAAyB,CAAC,QAAQ,EAAE;IAE3C,uDAAuD;IACvD,OAAO,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC;CACpD,CAAC,CAAC,MAAM,EAAE,CAAC;AAIZ;;;;GAIG;AACH,MAAM,CAAC,MAAM,6BAA6B,GAAG,CAAC,CAAC,MAAM,CAAC;IACpD,qEAAqE;IACrE,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,EAAE,8BAA8B,CAAC;IAE1D,uCAAuC;IACvC,KAAK,EAAE,yBAAyB,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,SAAS,CAAC;CAC/D,CAAC,CAAC,MAAM,EAAE,CAAC;AAIZ;;;;GAIG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC7C;;;OAGG;IACH,QAAQ,EAAE,6BAA6B,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC;QACzD,KAAK,EAAE,MAAM;QACb,OAAO,EAAE,EAAE;KACZ,CAAC;IAEF;;;OAGG;IACH,YAAY,EAAE,6BAA6B,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC;QAC7D,KAAK,EAAE,SAAS;QAChB,OAAO,EAAE,EAAE;KACZ,CAAC;IAEF;;;OAGG;IACH,QAAQ,EAAE,CAAC,CAAC,KAAK,CAAC,6BAA6B,CAAC,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC;CACxE,CAAC,CAAC,MAAM,EAAE,CAAC;AAIZ;;;;GAIG;AACH,MAAM,CAAC,MAAM,wBAAwB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC/C,+BAA+B;IAC/B,UAAU,EAAE,sBAAsB;IAElC,oCAAoC;IACpC,GAAG,EAAE,eAAe,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC;QACtC,UAAU,EAAE,YAAY,CAAC,WAAW;QACpC,YAAY,EAAE,YAAY,CAAC,aAAa;QACxC,QAAQ,EAAE,YAAY,CAAC,SAAS;QAChC,YAAY,EAAE,YAAY,CAAC,cAAc;KAC1C,CAAC;IAEF,mEAAmE;IACnE,EAAE,EAAE,cAAc,CAAC,QAAQ,EAAE;IAE7B,6CAA6C;IAC7C,KAAK,EAAE,iBAAiB,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC;QAC1C,SAAS,EAAE;YACT,OAAO,EAAE,IAAI;YACb,OAAO,EAAE,8BAA8B;SACxC;KACF,CAAC;IAEF,kDAAkD;IAClD,OAAO,EAAE,mBAAmB,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC;QAC9C,OAAO,EAAE,IAAI;QACb,gBAAgB,EAAE,WAAW;KAC9B,CAAC;IAEF;;;;;;;;;OASG;IACH,UAAU,EAAE,sBAAsB,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC;QACpD,QAAQ,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,EAAE,EAAE;QACxC,YAAY,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE,OAAO,EAAE,EAAE,EAAE;QAC/C,QAAQ,EAAE,EAAE;KACb,CAAC;IAEF;;;;;;;;OAQG;IACH,iBAAiB,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC;CACzD,CAAC,CAAC,MAAM,EAAE,CAAC;AAKZ;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,cAAc,GAAG,qBAAqB,CAAC,wBAAwB,CAAC,CAAC;AAE9E;;;;;GAKG;AACH,MAAM,CAAC,MAAM,kBAAkB,GAAG,mBAAmB,CAAC,wBAAwB,CAAC,CAAC"}
package/dist/scripts/generate-schema.js CHANGED
@@ -16,3 +16,4 @@ const schemaPath = join(packageRoot, 'config.schema.json');
16
16
  // Generate and write schema file
17
17
  writeFileSync(schemaPath, JSON.stringify(vibeValidateJsonSchema, null, 2), 'utf-8');
18
18
  console.log('✓ Generated config.schema.json');
19
+ //# sourceMappingURL=generate-schema.js.map
package/dist/scripts/generate-schema.js.map ADDED
@@ -0,0 +1 @@
1
+ {"version":3,"file":"generate-schema.js","sourceRoot":"","sources":["../../src/scripts/generate-schema.ts"],"names":[],"mappings":";AACA;;;;;GAKG;AAEH,OAAO,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AACxC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAC1C,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AAEzC,OAAO,EAAE,sBAAsB,EAAE,MAAM,qBAAqB,CAAC;AAE7D,MAAM,UAAU,GAAG,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AAClD,MAAM,SAAS,GAAG,OAAO,CAAC,UAAU,CAAC,CAAC;AACtC,MAAM,WAAW,GAAG,IAAI,CAAC,SAAS,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;AAChD,MAAM,UAAU,GAAG,IAAI,CAAC,WAAW,EAAE,oBAAoB,CAAC,CAAC;AAE3D,iCAAiC;AACjC,aAAa,CACX,UAAU,EACV,IAAI,CAAC,SAAS,CAAC,sBAAsB,EAAE,IAAI,EAAE,CAAC,CAAC,EAC/C,OAAO,CACR,CAAC;AAEF,OAAO,CAAC,GAAG,CAAC,gCAAgC,CAAC,CAAC"}
package/package.json CHANGED
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "@vibe-validate/config",
3
- "version": "0.18.4",
3
+ "version": "0.19.0-rc.10",
4
4
  "description": "Configuration system for vibe-validate with TypeScript-first design and config templates",
5
5
  "type": "module",
6
6
  "main": "./dist/index.js",
@@ -37,7 +37,7 @@
37
37
  "yaml": "^2.8.2",
38
38
  "zod": "^3.25.76",
39
39
  "zod-to-json-schema": "^3.25.0",
40
- "@vibe-validate/utils": "0.18.4"
40
+ "@vibe-validate/utils": "0.19.0-rc.10"
41
41
  },
42
42
  "engines": {
43
43
  "node": ">=20.0.0"
@@ -46,7 +46,6 @@
46
46
  "access": "public"
47
47
  },
48
48
  "scripts": {
49
- "build": "tsc && node --import tsx ./src/scripts/generate-schema.ts",
50
- "clean": "rm -rf dist config.schema.json"
49
+ "build": "tsc && node --import tsx ./src/scripts/generate-schema.ts"
51
50
  }
52
51
  }