@webpieces/dev-config 0.2.94 → 0.2.97

package/architecture/executors/validate-no-any-unknown/executor.js

@@ -1,462 +0,0 @@
-"use strict";
-/**
- * Validate No Any Unknown Executor
- *
- * Validates that `any` and `unknown` TypeScript keywords are not used.
- * Uses LINE-BASED detection (not method-based) for git diff filtering.
- *
- * ============================================================================
- * VIOLATIONS (BAD) - These patterns are flagged:
- * ============================================================================
- *
- * - const x: any = ...
- * - function foo(arg: any): any { }
- * - const data = response as any;
- * - type T = any;
- * - const x: unknown = ...
- * - function foo(arg: unknown): unknown { }
- *
- * ============================================================================
- * MODES (LINE-BASED)
- * ============================================================================
- * - OFF:            Skip validation entirely
- * - MODIFIED_CODE:  Flag any/unknown on changed lines (lines in diff hunks)
- * - MODIFIED_FILES: Flag ALL any/unknown in files that were modified
- *
- * ============================================================================
- * ESCAPE HATCH
- * ============================================================================
- * Add comment above the violation:
- *   // webpieces-disable no-any-unknown -- [your justification]
- *   const x: any = ...;
- */
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.default = runExecutor;
-const tslib_1 = require("tslib");
-const child_process_1 = require("child_process");
-const fs = tslib_1.__importStar(require("fs"));
-const path = tslib_1.__importStar(require("path"));
-const ts = tslib_1.__importStar(require("typescript"));
-/**
- * Get changed TypeScript files between base and head (or working tree if head not specified).
- */
-// webpieces-disable max-lines-new-methods -- Git command handling with untracked files requires multiple code paths
-function getChangedTypeScriptFiles(workspaceRoot, base, head) {
-    try {
-        const diffTarget = head ? `${base} ${head}` : base;
-        const output = (0, child_process_1.execSync)(`git diff --name-only ${diffTarget} -- '*.ts' '*.tsx'`, {
-            cwd: workspaceRoot,
-            encoding: 'utf-8',
-        });
-        const changedFiles = output
-            .trim()
-            .split('\n')
-            .filter((f) => f && !f.includes('.spec.ts') && !f.includes('.test.ts'));
-        if (!head) {
-            try {
-                const untrackedOutput = (0, child_process_1.execSync)(`git ls-files --others --exclude-standard '*.ts' '*.tsx'`, {
-                    cwd: workspaceRoot,
-                    encoding: 'utf-8',
-                });
-                const untrackedFiles = untrackedOutput
-                    .trim()
-                    .split('\n')
-                    .filter((f) => f && !f.includes('.spec.ts') && !f.includes('.test.ts'));
-                const allFiles = new Set([...changedFiles, ...untrackedFiles]);
-                return Array.from(allFiles);
-            }
-            catch {
-                return changedFiles;
-            }
-        }
-        return changedFiles;
-    }
-    catch {
-        return [];
-    }
-}
-/**
- * Get the diff content for a specific file.
- */
-function getFileDiff(workspaceRoot, file, base, head) {
-    try {
-        const diffTarget = head ? `${base} ${head}` : base;
-        const diff = (0, child_process_1.execSync)(`git diff ${diffTarget} -- "${file}"`, {
-            cwd: workspaceRoot,
-            encoding: 'utf-8',
-        });
-        if (!diff && !head) {
-            const fullPath = path.join(workspaceRoot, file);
-            if (fs.existsSync(fullPath)) {
-                const isUntracked = (0, child_process_1.execSync)(`git ls-files --others --exclude-standard "${file}"`, {
-                    cwd: workspaceRoot,
-                    encoding: 'utf-8',
-                }).trim();
-                if (isUntracked) {
-                    const content = fs.readFileSync(fullPath, 'utf-8');
-                    const lines = content.split('\n');
-                    return lines.map((line) => `+${line}`).join('\n');
-                }
-            }
-        }
-        return diff;
-    }
-    catch {
-        return '';
-    }
-}
-/**
- * Parse diff to extract changed line numbers (additions only - lines starting with +).
- */
-function getChangedLineNumbers(diffContent) {
-    const changedLines = new Set();
-    const lines = diffContent.split('\n');
-    let currentLine = 0;
-    for (const line of lines) {
-        const hunkMatch = line.match(/^@@ -\d+(?:,\d+)? \+(\d+)(?:,\d+)? @@/);
-        if (hunkMatch) {
-            currentLine = parseInt(hunkMatch[1], 10);
-            continue;
-        }
-        if (line.startsWith('+') && !line.startsWith('+++')) {
-            changedLines.add(currentLine);
-            currentLine++;
-        }
-        else if (line.startsWith('-') && !line.startsWith('---')) {
-            // Deletions don't increment line number
-        }
-        else {
-            currentLine++;
-        }
-    }
-    return changedLines;
-}
-/**
- * Check if a line contains a webpieces-disable comment for no-any-unknown.
- */
-function hasDisableComment(lines, lineNumber) {
-    const startCheck = Math.max(0, lineNumber - 5);
-    for (let i = lineNumber - 2; i >= startCheck; i--) {
-        const line = lines[i]?.trim() ?? '';
-        if (line.startsWith('function ') || line.startsWith('class ') || line.endsWith('}')) {
-            break;
-        }
-        if (line.includes('webpieces-disable') && line.includes('no-any-unknown')) {
-            return true;
-        }
-    }
-    return false;
-}
-/**
- * Get a description of the context where the any/unknown keyword appears.
- */
-// webpieces-disable max-lines-new-methods -- Context detection requires checking many AST node types
-function getViolationContext(node, sourceFile) {
-    try {
-        let current = node;
-        while (current.parent) {
-            const parent = current.parent;
-            if (ts.isParameter(parent)) {
-                return 'parameter type';
-            }
-            if (ts.isFunctionDeclaration(parent) || ts.isMethodDeclaration(parent) || ts.isArrowFunction(parent)) {
-                if (parent.type === current) {
-                    return 'return type';
-                }
-            }
-            if (ts.isVariableDeclaration(parent)) {
-                return 'variable type';
-            }
-            if (ts.isPropertyDeclaration(parent) || ts.isPropertySignature(parent)) {
-                return 'property type';
-            }
-            if (ts.isAsExpression(parent)) {
-                return 'type assertion';
-            }
-            if (ts.isTypeAliasDeclaration(parent)) {
-                return 'type alias';
-            }
-            if (ts.isTypeReferenceNode(parent)) {
-                return 'generic argument';
-            }
-            if (ts.isArrayTypeNode(parent)) {
-                return 'array element type';
-            }
-            if (ts.isUnionTypeNode(parent) || ts.isIntersectionTypeNode(parent)) {
-                return 'union/intersection type';
-            }
-            current = parent;
-        }
-        return 'type position';
-    }
-    catch {
-        return 'type position';
-    }
-}
-/**
- * Check if a node is in a catch clause variable declaration.
- * This allows `catch (err: any)` and `catch (err: unknown)` patterns.
- */
-function isInCatchClause(node) {
-    let current = node.parent;
-    while (current) {
-        if (ts.isCatchClause(current)) {
-            // We're somewhere in a catch clause - check if we're in the variable declaration
-            const catchClause = current;
-            if (catchClause.variableDeclaration) {
-                // Walk back up from the original node to see if we're part of the variable declaration
-                let checkNode = node.parent;
-                while (checkNode && checkNode !== current) {
-                    if (checkNode === catchClause.variableDeclaration) {
-                        return true;
-                    }
-                    checkNode = checkNode.parent;
-                }
-            }
-        }
-        current = current.parent;
-    }
-    return false;
-}
-/**
- * Find all `any` and `unknown` keywords in a file using AST.
- */
-// webpieces-disable max-lines-new-methods -- AST traversal with nested visitor function for keyword detection
-function findAnyUnknownInFile(filePath, workspaceRoot) {
-    const fullPath = path.join(workspaceRoot, filePath);
-    if (!fs.existsSync(fullPath))
-        return [];
-    const content = fs.readFileSync(fullPath, 'utf-8');
-    const fileLines = content.split('\n');
-    const sourceFile = ts.createSourceFile(filePath, content, ts.ScriptTarget.Latest, true);
-    const violations = [];
-    // webpieces-disable max-lines-new-methods -- AST visitor needs to handle both any and unknown keywords with full context detection
-    function visit(node) {
-        try {
-            // Detect `any` keyword
-            if (node.kind === ts.SyntaxKind.AnyKeyword) {
-                // Skip catch clause variable types: catch (err: any) is allowed
-                if (isInCatchClause(node)) {
-                    ts.forEachChild(node, visit);
-                    return;
-                }
-                const startPos = node.getStart(sourceFile);
-                if (startPos >= 0) {
-                    const pos = sourceFile.getLineAndCharacterOfPosition(startPos);
-                    const line = pos.line + 1;
-                    const column = pos.character + 1;
-                    const context = getViolationContext(node, sourceFile);
-                    const disabled = hasDisableComment(fileLines, line);
-                    violations.push({
-                        line,
-                        column,
-                        keyword: 'any',
-                        context,
-                        hasDisableComment: disabled,
-                    });
-                }
-            }
-            // Detect `unknown` keyword
-            if (node.kind === ts.SyntaxKind.UnknownKeyword) {
-                // Skip catch clause variable types: catch (err: unknown) is allowed
-                if (isInCatchClause(node)) {
-                    ts.forEachChild(node, visit);
-                    return;
-                }
-                const startPos = node.getStart(sourceFile);
-                if (startPos >= 0) {
-                    const pos = sourceFile.getLineAndCharacterOfPosition(startPos);
-                    const line = pos.line + 1;
-                    const column = pos.character + 1;
-                    const context = getViolationContext(node, sourceFile);
-                    const disabled = hasDisableComment(fileLines, line);
-                    violations.push({
-                        line,
-                        column,
-                        keyword: 'unknown',
-                        context,
-                        hasDisableComment: disabled,
-                    });
-                }
-            }
-        }
-        catch {
-            // Skip nodes that cause errors during analysis
-        }
-        ts.forEachChild(node, visit);
-    }
-    visit(sourceFile);
-    return violations;
-}
-/**
- * MODIFIED_CODE mode: Flag violations on changed lines in diff hunks.
- * This is LINE-BASED detection.
- */
-// webpieces-disable max-lines-new-methods -- File iteration with diff parsing and line filtering
-function findViolationsForModifiedCode(workspaceRoot, changedFiles, base, head, disableAllowed) {
-    const violations = [];
-    for (const file of changedFiles) {
-        const diff = getFileDiff(workspaceRoot, file, base, head);
-        const changedLines = getChangedLineNumbers(diff);
-        if (changedLines.size === 0)
-            continue;
-        const allViolations = findAnyUnknownInFile(file, workspaceRoot);
-        for (const v of allViolations) {
-            if (disableAllowed && v.hasDisableComment)
-                continue;
-            // LINE-BASED: Only include if the violation is on a changed line
-            if (!changedLines.has(v.line))
-                continue;
-            violations.push({
-                file,
-                line: v.line,
-                column: v.column,
-                keyword: v.keyword,
-                context: v.context,
-            });
-        }
-    }
-    return violations;
-}
-/**
- * MODIFIED_FILES mode: Flag ALL violations in files that were modified.
- */
-function findViolationsForModifiedFiles(workspaceRoot, changedFiles, disableAllowed) {
-    const violations = [];
-    for (const file of changedFiles) {
-        const allViolations = findAnyUnknownInFile(file, workspaceRoot);
-        for (const v of allViolations) {
-            if (disableAllowed && v.hasDisableComment)
-                continue;
-            violations.push({
-                file,
-                line: v.line,
-                column: v.column,
-                keyword: v.keyword,
-                context: v.context,
-            });
-        }
-    }
-    return violations;
-}
-/**
- * Auto-detect the base branch by finding the merge-base with origin/main.
- */
-function detectBase(workspaceRoot) {
-    try {
-        const mergeBase = (0, child_process_1.execSync)('git merge-base HEAD origin/main', {
-            cwd: workspaceRoot,
-            encoding: 'utf-8',
-            stdio: ['pipe', 'pipe', 'pipe'],
-        }).trim();
-        if (mergeBase) {
-            return mergeBase;
-        }
-    }
-    catch {
-        try {
-            const mergeBase = (0, child_process_1.execSync)('git merge-base HEAD main', {
-                cwd: workspaceRoot,
-                encoding: 'utf-8',
-                stdio: ['pipe', 'pipe', 'pipe'],
-            }).trim();
-            if (mergeBase) {
-                return mergeBase;
-            }
-        }
-        catch {
-            // Ignore
-        }
-    }
-    return null;
-}
-/**
- * Report violations to console.
- */
-function reportViolations(violations, mode) {
-    console.error('');
-    console.error('❌ `any` and `unknown` keywords found! Use specific types instead.');
-    console.error('');
-    console.error('📚 Avoiding any/unknown improves type safety:');
-    console.error('');
-    console.error('   BAD:  const data: any = fetchData();');
-    console.error('   GOOD: const data: UserData = fetchData();');
-    console.error('');
-    console.error('   BAD:  function process(input: unknown): unknown { }');
-    console.error('   GOOD: function process(input: ValidInput): ValidOutput { }');
-    console.error('');
-    for (const v of violations) {
-        console.error(`  ❌ ${v.file}:${v.line}:${v.column}`);
-        console.error(`     \`${v.keyword}\` keyword in ${v.context}`);
-    }
-    console.error('');
-    console.error('   To fix: Replace with specific types or interfaces');
-    console.error('');
-    console.error('   Escape hatch (use sparingly):');
-    console.error('   // webpieces-disable no-any-unknown -- [your reason]');
-    console.error('');
-    console.error(`   Current mode: ${mode}`);
-    console.error('');
-}
-/**
- * Resolve mode considering ignoreModifiedUntilEpoch override.
- * When active, downgrades to OFF. When expired, logs a warning.
- */
-function resolveMode(normalMode, epoch) {
-    if (epoch === undefined || normalMode === 'OFF') {
-        return normalMode;
-    }
-    const nowSeconds = Date.now() / 1000;
-    if (nowSeconds < epoch) {
-        const expiresDate = new Date(epoch * 1000).toISOString().split('T')[0];
-        console.log(`\n⏭️  Skipping no-any-unknown validation (ignoreModifiedUntilEpoch active, expires: ${expiresDate})`);
-        console.log('');
-        return 'OFF';
-    }
-    return normalMode;
-}
-async function runExecutor(options, context) {
-    const workspaceRoot = context.root;
-    const mode = resolveMode(options.mode ?? 'OFF', options.ignoreModifiedUntilEpoch);
-    const disableAllowed = options.disableAllowed ?? true;
-    if (mode === 'OFF') {
-        console.log('\n⏭️  Skipping no-any-unknown validation (mode: OFF)');
-        console.log('');
-        return { success: true };
-    }
-    console.log('\n📏 Validating No Any/Unknown\n');
-    console.log(`   Mode: ${mode}`);
-    let base = process.env['NX_BASE'];
-    const head = process.env['NX_HEAD'];
-    if (!base) {
-        base = detectBase(workspaceRoot) ?? undefined;
-        if (!base) {
-            console.log('\n⏭️  Skipping no-any-unknown validation (could not detect base branch)');
-            console.log('');
-            return { success: true };
-        }
-    }
-    console.log(`   Base: ${base}`);
-    console.log(`   Head: ${head ?? 'working tree (includes uncommitted changes)'}`);
-    console.log('');
-    const changedFiles = getChangedTypeScriptFiles(workspaceRoot, base, head);
-    if (changedFiles.length === 0) {
-        console.log('✅ No TypeScript files changed');
-        return { success: true };
-    }
-    console.log(`📂 Checking ${changedFiles.length} changed file(s)...`);
-    let violations = [];
-    if (mode === 'MODIFIED_CODE') {
-        violations = findViolationsForModifiedCode(workspaceRoot, changedFiles, base, head, disableAllowed);
-    }
-    else if (mode === 'MODIFIED_FILES') {
-        violations = findViolationsForModifiedFiles(workspaceRoot, changedFiles, disableAllowed);
-    }
-    if (violations.length === 0) {
-        console.log('✅ No any/unknown keywords found');
-        return { success: true };
-    }
-    reportViolations(violations, mode);
-    return { success: false };
-}
-//# sourceMappingURL=executor.js.map

package/architecture/executors/validate-no-any-unknown/executor.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"executor.js","sourceRoot":"","sources":["../../../../../../../packages/tooling/dev-config/architecture/executors/validate-no-any-unknown/executor.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8BG;;AAkcH,8BA2DC;;AA1fD,iDAAyC;AACzC,+CAAyB;AACzB,mDAA6B;AAC7B,uDAAiC;AAsBjC;;GAEG;AACH,oHAAoH;AACpH,SAAS,yBAAyB,CAAC,aAAqB,EAAE,IAAY,EAAE,IAAa;IACjF,IAAI,CAAC;QACD,MAAM,UAAU,GAAG,IAAI,CAAC,CAAC,CAAC,GAAG,IAAI,IAAI,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;QACnD,MAAM,MAAM,GAAG,IAAA,wBAAQ,EAAC,wBAAwB,UAAU,oBAAoB,EAAE;YAC5E,GAAG,EAAE,aAAa;YAClB,QAAQ,EAAE,OAAO;SACpB,CAAC,CAAC;QACH,MAAM,YAAY,GAAG,MAAM;aACtB,IAAI,EAAE;aACN,KAAK,CAAC,IAAI,CAAC;aACX,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC,CAAC;QAE5E,IAAI,CAAC,IAAI,EAAE,CAAC;YACR,IAAI,CAAC;gBACD,MAAM,eAAe,GAAG,IAAA,wBAAQ,EAAC,yDAAyD,EAAE;oBACxF,GAAG,EAAE,aAAa;oBAClB,QAAQ,EAAE,OAAO;iBACpB,CAAC,CAAC;gBACH,MAAM,cAAc,GAAG,eAAe;qBACjC,IAAI,EAAE;qBACN,KAAK,CAAC,IAAI,CAAC;qBACX,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC,CAAC;gBAC5E,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,YAAY,EAAE,GAAG,cAAc,CAAC,CAAC,CAAC;gBAC/D,OAAO,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;YAChC,CAAC;YAAC,MAAM,CAAC;gBACL,OAAO,YAAY,CAAC;YACxB,CAAC;QACL,CAAC;QAED,OAAO,YAAY,CAAC;IACxB,CAAC;IAAC,MAAM,CAAC;QACL,OAAO,EAAE,CAAC;IACd,CAAC;AACL,CAAC;AAED;;GAEG;AACH,SAAS,WAAW,CAAC,aAAqB,EAAE,IAAY,EAAE,IAAY,EAAE,IAAa;IACjF,IAAI,CAAC;QACD,MAAM,UAAU,GAAG,IAAI,CAAC,CAAC,CAAC,GAAG,IAAI,IAAI,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;QACnD,MAAM,IAAI,GAAG,IAAA,wBAAQ,EAAC,YAAY,UAAU,QAAQ,IAAI,GAAG,EAAE;YACzD,GAAG,EAAE,aAAa;YAClB,QAAQ,EAAE,OAAO;SACpB,CAAC,CAAC;QAEH,IAAI,CAAC,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;YACjB,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,IAAI,CAAC,CAAC;YAChD,IAAI,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;gBAC1B,MAAM,WAAW,GAAG,IAAA,wBAAQ,EAAC,6CAA6C,IAAI,GAAG,EAAE;oBAC/E,GAAG,EAAE,aAAa;oBAClB,QAAQ,EAAE,OAAO;iBACpB,CAAC,CAAC,IAAI,EAAE,CAAC;gBAEV,IAAI,WAAW,EAAE,CAAC;oBACd,MAAM,OAAO,GAAG,EAAE,CAAC,YAAY,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;oBACnD,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;oBAClC,OAAO,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;gBACtD,CAAC;YACL,CAAC;QACL,CAAC;QAED,OAAO,IAAI,CAAC;IAChB,CAAC;IAAC,MAAM,CAAC;QACL,OAAO,EAAE,CAAC;IACd,CAAC;AACL,CAAC;AAED;;GAEG;AACH,SAAS,qBAAqB,CAAC,WAAmB;IAC9C,MAAM,YAAY,GAAG,IAAI,GAAG,EAAU,CAAC;IACvC,MAAM,KAAK,GAAG,WAAW,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IACtC,IAAI,WAAW,GAAG,CAAC,CAAC;IAEpB,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACvB,MAAM,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC,uCAAuC,CAAC,CAAC;QACtE,IAAI,SAAS,EAAE,CAAC;YACZ,WAAW,GAAG,QAAQ,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YACzC,SAAS;QACb,CAAC;QAED,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,EAAE,CAAC;YAClD,YAAY,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;YAC9B,WAAW,EAAE,CAAC;QAClB,CAAC;aAAM,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,EAAE,CAAC;YACzD,wCAAwC;QAC5C,CAAC;aAAM,CAAC;YACJ,WAAW,EAAE,CAAC;QAClB,CAAC;IACL,CAAC;IAED,OAAO,YAAY,CAAC;AACxB,CAAC;AAED;;GAEG;AACH,SAAS,iBAAiB,CAAC,KAAe,EAAE,UAAkB;IAC1D,MAAM,UAAU,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,UAAU,GAAG,CAAC,CAAC,CAAC;IAC/C,KAAK,IAAI,CAAC,GAAG,UAAU,GAAG,CAAC,EAAE,CAAC,IAAI,UAAU,EAAE,CAAC,EAAE,EAAE,CAAC;QAChD,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;QACpC,IAAI,IAAI,CAAC,UAAU,CAAC,WAAW,CAAC,IAAI,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;YAClF,MAAM;QACV,CAAC;QACD,IAAI,IAAI,CAAC,QAAQ,CAAC,mBAAmB,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,gBAAgB,CAAC,EAAE,CAAC;YACxE,OAAO,IAAI,CAAC;QAChB,CAAC;IACL,CAAC;IACD,OAAO,KAAK,CAAC;AACjB,CAAC;AAED;;GAEG;AACH,qGAAqG;AACrG,SAAS,mBAAmB,CAAC,IAAa,EAAE,UAAyB;IACjE,IAAI,CAAC;QACD,IAAI,OAAO,GAAY,IAAI,CAAC;QAC5B,OAAO,OAAO,CAAC,MAAM,EAAE,CAAC;YACpB,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;YAC9B,IAAI,EAAE,CAAC,WAAW,CAAC,MAAM,CAAC,EAAE,CAAC;gBACzB,OAAO,gBAAgB,CAAC;YAC5B,CAAC;YACD,IAAI,EAAE,CAAC,qBAAqB,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,mBAAmB,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,eAAe,CAAC,MAAM,CAAC,EAAE,CAAC;gBACnG,IAAI,MAAM,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;oBAC1B,OAAO,aAAa,CAAC;gBACzB,CAAC;YACL,CAAC;YACD,IAAI,EAAE,CAAC,qBAAqB,CAAC,MAAM,CAAC,EAAE,CAAC;gBACnC,OAAO,eAAe,CAAC;YAC3B,CAAC;YACD,IAAI,EAAE,CAAC,qBAAqB,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,mBAAmB,CAAC,MAAM,CAAC,EAAE,CAAC;gBACrE,OAAO,eAAe,CAAC;YAC3B,CAAC;YACD,IAAI,EAAE,CAAC,cAAc,CAAC,MAAM,CAAC,EAAE,CAAC;gBAC5B,OAAO,gBAAgB,CAAC;YAC5B,CAAC;YACD,IAAI,EAAE,CAAC,sBAAsB,CAAC,MAAM,CAAC,EAAE,CAAC;gBACpC,OAAO,YAAY,CAAC;YACxB,CAAC;YACD,IAAI,EAAE,CAAC,mBAAmB,CAAC,MAAM,CAAC,EAAE,CAAC;gBACjC,OAAO,kBAAkB,CAAC;YAC9B,CAAC;YACD,IAAI,EAAE,CAAC,eAAe,CAAC,MAAM,CAAC,EAAE,CAAC;gBAC7B,OAAO,oBAAoB,CAAC;YAChC,CAAC;YACD,IAAI,EAAE,CAAC,eAAe,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,sBAAsB,CAAC,MAAM,CAAC,EAAE,CAAC;gBAClE,OAAO,yBAAyB,CAAC;YACrC,CAAC;YACD,OAAO,GAAG,MAAM,CAAC;QACrB,CAAC;QACD,OAAO,eAAe,CAAC;IAC3B,CAAC;IAAC,MAAM,CAAC;QACL,OAAO,eAAe,CAAC;IAC3B,CAAC;AACL,CAAC;AAUD;;;GAGG;AACH,SAAS,eAAe,CAAC,IAAa;IAClC,IAAI,OAAO,GAAwB,IAAI,CAAC,MAAM,CAAC;IAC/C,OAAO,OAAO,EAAE,CAAC;QACb,IAAI,EAAE,CAAC,aAAa,CAAC,OAAO,CAAC,EAAE,CAAC;YAC5B,iFAAiF;YACjF,MAAM,WAAW,GAAG,OAAyB,CAAC;YAC9C,IAAI,WAAW,CAAC,mBAAmB,EAAE,CAAC;gBAClC,uFAAuF;gBACvF,IAAI,SAAS,GAAwB,IAAI,CAAC,MAAM,CAAC;gBACjD,OAAO,SAAS,IAAI,SAAS,KAAK,OAAO,EAAE,CAAC;oBACxC,IAAI,SAAS,KAAK,WAAW,CAAC,mBAAmB,EAAE,CAAC;wBAChD,OAAO,IAAI,CAAC;oBAChB,CAAC;oBACD,SAAS,GAAG,SAAS,CAAC,MAAM,CAAC;gBACjC,CAAC;YACL,CAAC;QACL,CAAC;QACD,OAAO,GAAG,OAAO,CAAC,MAAM,CAAC;IAC7B,CAAC;IACD,OAAO,KAAK,CAAC;AACjB,CAAC;AAED;;GAEG;AACH,8GAA8G;AAC9G,SAAS,oBAAoB,CAAC,QAAgB,EAAE,aAAqB;IACjE,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,QAAQ,CAAC,CAAC;IACpD,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC;QAAE,OAAO,EAAE,CAAC;IAExC,MAAM,OAAO,GAAG,EAAE,CAAC,YAAY,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;IACnD,MAAM,SAAS,GAAG,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IACtC,MAAM,UAAU,GAAG,EAAE,CAAC,gBAAgB,CAAC,QAAQ,EAAE,OAAO,EAAE,EAAE,CAAC,YAAY,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;IAExF,MAAM,UAAU,GAAqB,EAAE,CAAC;IAExC,mIAAmI;IACnI,SAAS,KAAK,CAAC,IAAa;QACxB,IAAI,CAAC;YACD,uBAAuB;YACvB,IAAI,IAAI,CAAC,IAAI,KAAK,EAAE,CAAC,UAAU,CAAC,UAAU,EAAE,CAAC;gBACzC,gEAAgE;gBAChE,IAAI,eAAe,CAAC,IAAI,CAAC,EAAE,CAAC;oBACxB,EAAE,CAAC,YAAY,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;oBAC7B,OAAO;gBACX,CAAC;gBAED,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC;gBAC3C,IAAI,QAAQ,IAAI,CAAC,EAAE,CAAC;oBAChB,MAAM,GAAG,GAAG,UAAU,CAAC,6BAA6B,CAAC,QAAQ,CAAC,CAAC;oBAC/D,MAAM,IAAI,GAAG,GAAG,CAAC,IAAI,GAAG,CAAC,CAAC;oBAC1B,MAAM,MAAM,GAAG,GAAG,CAAC,SAAS,GAAG,CAAC,CAAC;oBACjC,MAAM,OAAO,GAAG,mBAAmB,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;oBACtD,MAAM,QAAQ,GAAG,iBAAiB,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;oBAEpD,UAAU,CAAC,IAAI,CAAC;wBACZ,IAAI;wBACJ,MAAM;wBACN,OAAO,EAAE,KAAK;wBACd,OAAO;wBACP,iBAAiB,EAAE,QAAQ;qBAC9B,CAAC,CAAC;gBACP,CAAC;YACL,CAAC;YAED,2BAA2B;YAC3B,IAAI,IAAI,CAAC,IAAI,KAAK,EAAE,CAAC,UAAU,CAAC,cAAc,EAAE,CAAC;gBAC7C,oEAAoE;gBACpE,IAAI,eAAe,CAAC,IAAI,CAAC,EAAE,CAAC;oBACxB,EAAE,CAAC,YAAY,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;oBAC7B,OAAO;gBACX,CAAC;gBAED,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC;gBAC3C,IAAI,QAAQ,IAAI,CAAC,EAAE,CAAC;oBAChB,MAAM,GAAG,GAAG,UAAU,CAAC,6BAA6B,CAAC,QAAQ,CAAC,CAAC;oBAC/D,MAAM,IAAI,GAAG,GAAG,CAAC,IAAI,GAAG,CAAC,CAAC;oBAC1B,MAAM,MAAM,GAAG,GAAG,CAAC,SAAS,GAAG,CAAC,CAAC;oBACjC,MAAM,OAAO,GAAG,mBAAmB,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;oBACtD,MAAM,QAAQ,GAAG,iBAAiB,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;oBAEpD,UAAU,CAAC,IAAI,CAAC;wBACZ,IAAI;wBACJ,MAAM;wBACN,OAAO,EAAE,SAAS;wBAClB,OAAO;wBACP,iBAAiB,EAAE,QAAQ;qBAC9B,CAAC,CAAC;gBACP,CAAC;YACL,CAAC;QACL,CAAC;QAAC,MAAM,CAAC;YACL,+CAA+C;QACnD,CAAC;QAED,EAAE,CAAC,YAAY,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;IACjC,CAAC;IAED,KAAK,CAAC,UAAU,CAAC,CAAC;IAClB,OAAO,UAAU,CAAC;AACtB,CAAC;AAED;;;GAGG;AACH,iGAAiG;AACjG,SAAS,6BAA6B,CAClC,aAAqB,EACrB,YAAsB,EACtB,IAAY,EACZ,IAAwB,EACxB,cAAuB;IAEvB,MAAM,UAAU,GAA0B,EAAE,CAAC;IAE7C,KAAK,MAAM,IAAI,IAAI,YAAY,EAAE,CAAC;QAC9B,MAAM,IAAI,GAAG,WAAW,CAAC,aAAa,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;QAC1D,MAAM,YAAY,GAAG,qBAAqB,CAAC,IAAI,CAAC,CAAC;QAEjD,IAAI,YAAY,CAAC,IAAI,KAAK,CAAC;YAAE,SAAS;QAEtC,MAAM,aAAa,GAAG,oBAAoB,CAAC,IAAI,EAAE,aAAa,CAAC,CAAC;QAEhE,KAAK,MAAM,CAAC,IAAI,aAAa,EAAE,CAAC;YAC5B,IAAI,cAAc,IAAI,CAAC,CAAC,iBAAiB;gBAAE,SAAS;YACpD,iEAAiE;YACjE,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC;gBAAE,SAAS;YAExC,UAAU,CAAC,IAAI,CAAC;gBACZ,IAAI;gBACJ,IAAI,EAAE,CAAC,CAAC,IAAI;gBACZ,MAAM,EAAE,CAAC,CAAC,MAAM;gBAChB,OAAO,EAAE,CAAC,CAAC,OAAO;gBAClB,OAAO,EAAE,CAAC,CAAC,OAAO;aACrB,CAAC,CAAC;QACP,CAAC;IACL,CAAC;IAED,OAAO,UAAU,CAAC;AACtB,CAAC;AAED;;GAEG;AACH,SAAS,8BAA8B,CAAC,aAAqB,EAAE,YAAsB,EAAE,cAAuB;IAC1G,MAAM,UAAU,GAA0B,EAAE,CAAC;IAE7C,KAAK,MAAM,IAAI,IAAI,YAAY,EAAE,CAAC;QAC9B,MAAM,aAAa,GAAG,oBAAoB,CAAC,IAAI,EAAE,aAAa,CAAC,CAAC;QAEhE,KAAK,MAAM,CAAC,IAAI,aAAa,EAAE,CAAC;YAC5B,IAAI,cAAc,IAAI,CAAC,CAAC,iBAAiB;gBAAE,SAAS;YAEpD,UAAU,CAAC,IAAI,CAAC;gBACZ,IAAI;gBACJ,IAAI,EAAE,CAAC,CAAC,IAAI;gBACZ,MAAM,EAAE,CAAC,CAAC,MAAM;gBAChB,OAAO,EAAE,CAAC,CAAC,OAAO;gBAClB,OAAO,EAAE,CAAC,CAAC,OAAO;aACrB,CAAC,CAAC;QACP,CAAC;IACL,CAAC;IAED,OAAO,UAAU,CAAC;AACtB,CAAC;AAED;;GAEG;AACH,SAAS,UAAU,CAAC,aAAqB;IACrC,IAAI,CAAC;QACD,MAAM,SAAS,GAAG,IAAA,wBAAQ,EAAC,iCAAiC,EAAE;YAC1D,GAAG,EAAE,aAAa;YAClB,QAAQ,EAAE,OAAO;YACjB,KAAK,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC;SAClC,CAAC,CAAC,IAAI,EAAE,CAAC;QAEV,IAAI,SAAS,EAAE,CAAC;YACZ,OAAO,SAAS,CAAC;QACrB,CAAC;IACL,CAAC;IAAC,MAAM,CAAC;QACL,IAAI,CAAC;YACD,MAAM,SAAS,GAAG,IAAA,wBAAQ,EAAC,0BAA0B,EAAE;gBACnD,GAAG,EAAE,aAAa;gBAClB,QAAQ,EAAE,OAAO;gBACjB,KAAK,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC;aAClC,CAAC,CAAC,IAAI,EAAE,CAAC;YAEV,IAAI,SAAS,EAAE,CAAC;gBACZ,OAAO,SAAS,CAAC;YACrB,CAAC;QACL,CAAC;QAAC,MAAM,CAAC;YACL,SAAS;QACb,CAAC;IACL,CAAC;IACD,OAAO,IAAI,CAAC;AAChB,CAAC;AAED;;GAEG;AACH,SAAS,gBAAgB,CAAC,UAAiC,EAAE,IAAsB;IAC/E,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;IAClB,OAAO,CAAC,KAAK,CAAC,mEAAmE,CAAC,CAAC;IACnF,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;IAClB,OAAO,CAAC,KAAK,CAAC,+CAA+C,CAAC,CAAC;IAC/D,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;IAClB,OAAO,CAAC,KAAK,CAAC,yCAAyC,CAAC,CAAC;IACzD,OAAO,CAAC,KAAK,CAAC,8CAA8C,CAAC,CAAC;IAC9D,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;IAClB,OAAO,CAAC,KAAK,CAAC,wDAAwD,CAAC,CAAC;IACxE,OAAO,CAAC,KAAK,CAAC,+DAA+D,CAAC,CAAC;IAC/E,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;IAElB,KAAK,MAAM,CAAC,IAAI,UAAU,EAAE,CAAC;QACzB,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC;QACrD,OAAO,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,OAAO,iBAAiB,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC;IACnE,CAAC;IACD,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;IAElB,OAAO,CAAC,KAAK,CAAC,sDAAsD,CAAC,CAAC;IACtE,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;IAClB,OAAO,CAAC,KAAK,CAAC,kCAAkC,CAAC,CAAC;IAClD,OAAO,CAAC,KAAK,CAAC,yDAAyD,CAAC,CAAC;IACzE,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;IAClB,OAAO,CAAC,KAAK,CAAC,oBAAoB,IAAI,EAAE,CAAC,CAAC;IAC1C,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;AACtB,CAAC;AAED;;;GAGG;AACH,SAAS,WAAW,CAAC,UAA4B,EAAE,KAAyB;IACxE,IAAI,KAAK,KAAK,SAAS,IAAI,UAAU,KAAK,KAAK,EAAE,CAAC;QAC9C,OAAO,UAAU,CAAC;IACtB,CAAC;IACD,MAAM,UAAU,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC;IACrC,IAAI,UAAU,GAAG,KAAK,EAAE,CAAC;QACrB,MAAM,WAAW,GAAG,IAAI,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,CAAC,WAAW,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;QACvE,OAAO,CAAC,GAAG,CAAC,uFAAuF,WAAW,GAAG,CAAC,CAAC;QACnH,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAChB,OAAO,KAAK,CAAC;IACjB,CAAC;IACD,OAAO,UAAU,CAAC;AACtB,CAAC;AAEc,KAAK,UAAU,WAAW,CACrC,OAAoC,EACpC,OAAwB;IAExB,MAAM,aAAa,GAAG,OAAO,CAAC,IAAI,CAAC;IACnC,MAAM,IAAI,GAAqB,WAAW,CAAC,OAAO,CAAC,IAAI,IAAI,KAAK,EAAE,OAAO,CAAC,wBAAwB,CAAC,CAAC;IACpG,MAAM,cAAc,GAAG,OAAO,CAAC,cAAc,IAAI,IAAI,CAAC;IAEtD,IAAI,IAAI,KAAK,KAAK,EAAE,CAAC;QACjB,OAAO,CAAC,GAAG,CAAC,sDAAsD,CAAC,CAAC;QACpE,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAChB,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;IAC7B,CAAC;IAED,OAAO,CAAC,GAAG,CAAC,kCAAkC,CAAC,CAAC;IAChD,OAAO,CAAC,GAAG,CAAC,YAAY,IAAI,EAAE,CAAC,CAAC;IAEhC,IAAI,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;IAClC,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;IAEpC,IAAI,CAAC,IAAI,EAAE,CAAC;QACR,IAAI,GAAG,UAAU,CAAC,aAAa,CAAC,IAAI,SAAS,CAAC;QAE9C,IAAI,CAAC,IAAI,EAAE,CAAC;YACR,OAAO,CAAC,GAAG,CAAC,yEAAyE,CAAC,CAAC;YACvF,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YAChB,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;QAC7B,CAAC;IACL,CAAC;IAED,OAAO,CAAC,GAAG,CAAC,YAAY,IAAI,EAAE,CAAC,CAAC;IAChC,OAAO,CAAC,GAAG,CAAC,YAAY,IAAI,IAAI,6CAA6C,EAAE,CAAC,CAAC;IACjF,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAEhB,MAAM,YAAY,GAAG,yBAAyB,CAAC,aAAa,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;IAE1E,IAAI,YAAY,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC5B,OAAO,CAAC,GAAG,CAAC,+BAA+B,CAAC,CAAC;QAC7C,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;IAC7B,CAAC;IAED,OAAO,CAAC,GAAG,CAAC,eAAe,YAAY,CAAC,MAAM,qBAAqB,CAAC,CAAC;IAErE,IAAI,UAAU,GAA0B,EAAE,CAAC;IAE3C,IAAI,IAAI,KAAK,eAAe,EAAE,CAAC;QAC3B,UAAU,GAAG,6BAA6B,CAAC,aAAa,EAAE,YAAY,EAAE,IAAI,EAAE,IAAI,EAAE,cAAc,CAAC,CAAC;IACxG,CAAC;SAAM,IAAI,IAAI,KAAK,gBAAgB,EAAE,CAAC;QACnC,UAAU,GAAG,8BAA8B,CAAC,aAAa,EAAE,YAAY,EAAE,cAAc,CAAC,CAAC;IAC7F,CAAC;IAED,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC1B,OAAO,CAAC,GAAG,CAAC,iCAAiC,CAAC,CAAC;QAC/C,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;IAC7B,CAAC;IAED,gBAAgB,CAAC,UAAU,EAAE,IAAI,CAAC,CAAC;IAEnC,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;AAC9B,CAAC","sourcesContent":["/**\n * Validate No Any Unknown Executor\n *\n * Validates that `any` and `unknown` TypeScript keywords are not used.\n * Uses LINE-BASED detection (not method-based) for git diff filtering.\n *\n * ============================================================================\n * VIOLATIONS (BAD) - These patterns are flagged:\n * ============================================================================\n *\n * - const x: any = ...\n * - function foo(arg: any): any { }\n * - const data = response as any;\n * - type T = any;\n * - const x: unknown = ...\n * - function foo(arg: unknown): unknown { }\n *\n * ============================================================================\n * MODES (LINE-BASED)\n * ============================================================================\n * - OFF:            Skip validation entirely\n * - MODIFIED_CODE:  Flag any/unknown on changed lines (lines in diff hunks)\n * - MODIFIED_FILES: Flag ALL any/unknown in files that were modified\n *\n * ============================================================================\n * ESCAPE HATCH\n * ============================================================================\n * Add comment above the violation:\n *   // webpieces-disable no-any-unknown -- [your justification]\n *   const x: any = ...;\n */\n\nimport type { ExecutorContext } from '@nx/devkit';\nimport { execSync } from 'child_process';\nimport * as fs from 'fs';\nimport * as path from 'path';\nimport * as ts from 'typescript';\n\nexport type NoAnyUnknownMode = 'OFF' | 'MODIFIED_CODE' | 'MODIFIED_FILES';\n\nexport interface ValidateNoAnyUnknownOptions {\n    mode?: NoAnyUnknownMode;\n    disableAllowed?: boolean;\n    ignoreModifiedUntilEpoch?: number;\n}\n\nexport interface ExecutorResult {\n    success: boolean;\n}\n\ninterface AnyUnknownViolation {\n    file: string;\n    line: number;\n    column: number;\n    keyword: 'any' | 'unknown';\n    context: string;\n}\n\n/**\n * Get changed TypeScript files between base and head (or working tree if head not specified).\n */\n// webpieces-disable max-lines-new-methods -- Git command handling with untracked files requires multiple code paths\nfunction getChangedTypeScriptFiles(workspaceRoot: string, base: string, head?: string): string[] {\n    try {\n        const diffTarget = head ? `${base} ${head}` : base;\n        const output = execSync(`git diff --name-only ${diffTarget} -- '*.ts' '*.tsx'`, {\n            cwd: workspaceRoot,\n            encoding: 'utf-8',\n        });\n        const changedFiles = output\n            .trim()\n            .split('\\n')\n            .filter((f) => f && !f.includes('.spec.ts') && !f.includes('.test.ts'));\n\n        if (!head) {\n            try {\n                const untrackedOutput = execSync(`git ls-files --others --exclude-standard '*.ts' '*.tsx'`, {\n                    cwd: workspaceRoot,\n                    encoding: 'utf-8',\n                });\n                const untrackedFiles = untrackedOutput\n                    .trim()\n                    .split('\\n')\n                    .filter((f) => f && !f.includes('.spec.ts') && !f.includes('.test.ts'));\n                const allFiles = new Set([...changedFiles, ...untrackedFiles]);\n                return Array.from(allFiles);\n            } catch {\n                return changedFiles;\n            }\n        }\n\n        return changedFiles;\n    } catch {\n        return [];\n    }\n}\n\n/**\n * Get the diff content for a specific file.\n */\nfunction getFileDiff(workspaceRoot: string, file: string, base: string, head?: string): string {\n    try {\n        const diffTarget = head ? `${base} ${head}` : base;\n        const diff = execSync(`git diff ${diffTarget} -- \"${file}\"`, {\n            cwd: workspaceRoot,\n            encoding: 'utf-8',\n        });\n\n        if (!diff && !head) {\n            const fullPath = path.join(workspaceRoot, file);\n            if (fs.existsSync(fullPath)) {\n                const isUntracked = execSync(`git ls-files --others --exclude-standard \"${file}\"`, {\n                    cwd: workspaceRoot,\n                    encoding: 'utf-8',\n                }).trim();\n\n                if (isUntracked) {\n                    const content = fs.readFileSync(fullPath, 'utf-8');\n                    const lines = content.split('\\n');\n                    return lines.map((line) => `+${line}`).join('\\n');\n                }\n            }\n        }\n\n        return diff;\n    } catch {\n        return '';\n    }\n}\n\n/**\n * Parse diff to extract changed line numbers (additions only - lines starting with +).\n */\nfunction getChangedLineNumbers(diffContent: string): Set<number> {\n    const changedLines = new Set<number>();\n    const lines = diffContent.split('\\n');\n    let currentLine = 0;\n\n    for (const line of lines) {\n        const hunkMatch = line.match(/^@@ -\\d+(?:,\\d+)? \\+(\\d+)(?:,\\d+)? @@/);\n        if (hunkMatch) {\n            currentLine = parseInt(hunkMatch[1], 10);\n            continue;\n        }\n\n        if (line.startsWith('+') && !line.startsWith('+++')) {\n            changedLines.add(currentLine);\n            currentLine++;\n        } else if (line.startsWith('-') && !line.startsWith('---')) {\n            // Deletions don't increment line number\n        } else {\n            currentLine++;\n        }\n    }\n\n    return changedLines;\n}\n\n/**\n * Check if a line contains a webpieces-disable comment for no-any-unknown.\n */\nfunction hasDisableComment(lines: string[], lineNumber: number): boolean {\n    const startCheck = Math.max(0, lineNumber - 5);\n    for (let i = lineNumber - 2; i >= startCheck; i--) {\n        const line = lines[i]?.trim() ?? '';\n        if (line.startsWith('function ') || line.startsWith('class ') || line.endsWith('}')) {\n            break;\n        }\n        if (line.includes('webpieces-disable') && line.includes('no-any-unknown')) {\n            return true;\n        }\n    }\n    return false;\n}\n\n/**\n * Get a description of the context where the any/unknown keyword appears.\n */\n// webpieces-disable max-lines-new-methods -- Context detection requires checking many AST node types\nfunction getViolationContext(node: ts.Node, sourceFile: ts.SourceFile): string {\n    try {\n        let current: ts.Node = node;\n        while (current.parent) {\n            const parent = current.parent;\n            if (ts.isParameter(parent)) {\n                return 'parameter type';\n            }\n            if (ts.isFunctionDeclaration(parent) || ts.isMethodDeclaration(parent) || ts.isArrowFunction(parent)) {\n                if (parent.type === current) {\n                    return 'return type';\n                }\n            }\n            if (ts.isVariableDeclaration(parent)) {\n                return 'variable type';\n            }\n            if (ts.isPropertyDeclaration(parent) || ts.isPropertySignature(parent)) {\n                return 'property type';\n            }\n            if (ts.isAsExpression(parent)) {\n                return 'type assertion';\n            }\n            if (ts.isTypeAliasDeclaration(parent)) {\n                return 'type alias';\n            }\n            if (ts.isTypeReferenceNode(parent)) {\n                return 'generic argument';\n            }\n            if (ts.isArrayTypeNode(parent)) {\n                return 'array element type';\n            }\n            if (ts.isUnionTypeNode(parent) || ts.isIntersectionTypeNode(parent)) {\n                return 'union/intersection type';\n            }\n            current = parent;\n        }\n        return 'type position';\n    } catch {\n        return 'type position';\n    }\n}\n\ninterface AnyUnknownInfo {\n    line: number;\n    column: number;\n    keyword: 'any' | 'unknown';\n    context: string;\n    hasDisableComment: boolean;\n}\n\n/**\n * Check if a node is in a catch clause variable declaration.\n * This allows `catch (err: any)` and `catch (err: unknown)` patterns.\n */\nfunction isInCatchClause(node: ts.Node): boolean {\n    let current: ts.Node | undefined = node.parent;\n    while (current) {\n        if (ts.isCatchClause(current)) {\n            // We're somewhere in a catch clause - check if we're in the variable declaration\n            const catchClause = current as ts.CatchClause;\n            if (catchClause.variableDeclaration) {\n                // Walk back up from the original node to see if we're part of the variable declaration\n                let checkNode: ts.Node | undefined = node.parent;\n                while (checkNode && checkNode !== current) {\n                    if (checkNode === catchClause.variableDeclaration) {\n                        return true;\n                    }\n                    checkNode = checkNode.parent;\n                }\n            }\n        }\n        current = current.parent;\n    }\n    return false;\n}\n\n/**\n * Find all `any` and `unknown` keywords in a file using AST.\n */\n// webpieces-disable max-lines-new-methods -- AST traversal with nested visitor function for keyword detection\nfunction findAnyUnknownInFile(filePath: string, workspaceRoot: string): AnyUnknownInfo[] {\n    const fullPath = path.join(workspaceRoot, filePath);\n    if (!fs.existsSync(fullPath)) return [];\n\n    const content = fs.readFileSync(fullPath, 'utf-8');\n    const fileLines = content.split('\\n');\n    const sourceFile = ts.createSourceFile(filePath, content, ts.ScriptTarget.Latest, true);\n\n    const violations: AnyUnknownInfo[] = [];\n\n    // webpieces-disable max-lines-new-methods -- AST visitor needs to handle both any and unknown keywords with full context detection\n    function visit(node: ts.Node): void {\n        try {\n            // Detect `any` keyword\n            if (node.kind === ts.SyntaxKind.AnyKeyword) {\n                // Skip catch clause variable types: catch (err: any) is allowed\n                if (isInCatchClause(node)) {\n                    ts.forEachChild(node, visit);\n                    return;\n                }\n\n                const startPos = node.getStart(sourceFile);\n                if (startPos >= 0) {\n                    const pos = sourceFile.getLineAndCharacterOfPosition(startPos);\n                    const line = pos.line + 1;\n                    const column = pos.character + 1;\n                    const context = getViolationContext(node, sourceFile);\n                    const disabled = hasDisableComment(fileLines, line);\n\n                    violations.push({\n                        line,\n                        column,\n                        keyword: 'any',\n                        context,\n                        hasDisableComment: disabled,\n                    });\n                }\n            }\n\n            // Detect `unknown` keyword\n            if (node.kind === ts.SyntaxKind.UnknownKeyword) {\n                // Skip catch clause variable types: catch (err: unknown) is allowed\n                if (isInCatchClause(node)) {\n                    ts.forEachChild(node, visit);\n                    return;\n                }\n\n                const startPos = node.getStart(sourceFile);\n                if (startPos >= 0) {\n                    const pos = sourceFile.getLineAndCharacterOfPosition(startPos);\n                    const line = pos.line + 1;\n                    const column = pos.character + 1;\n                    const context = getViolationContext(node, sourceFile);\n                    const disabled = hasDisableComment(fileLines, line);\n\n                    violations.push({\n                        line,\n                        column,\n                        keyword: 'unknown',\n                        context,\n                        hasDisableComment: disabled,\n                    });\n                }\n            }\n        } catch {\n            // Skip nodes that cause errors during analysis\n        }\n\n        ts.forEachChild(node, visit);\n    }\n\n    visit(sourceFile);\n    return violations;\n}\n\n/**\n * MODIFIED_CODE mode: Flag violations on changed lines in diff hunks.\n * This is LINE-BASED detection.\n */\n// webpieces-disable max-lines-new-methods -- File iteration with diff parsing and line filtering\nfunction findViolationsForModifiedCode(\n    workspaceRoot: string,\n    changedFiles: string[],\n    base: string,\n    head: string | undefined,\n    disableAllowed: boolean\n): AnyUnknownViolation[] {\n    const violations: AnyUnknownViolation[] = [];\n\n    for (const file of changedFiles) {\n        const diff = getFileDiff(workspaceRoot, file, base, head);\n        const changedLines = getChangedLineNumbers(diff);\n\n        if (changedLines.size === 0) continue;\n\n        const allViolations = findAnyUnknownInFile(file, workspaceRoot);\n\n        for (const v of allViolations) {\n            if (disableAllowed && v.hasDisableComment) continue;\n            // LINE-BASED: Only include if the violation is on a changed line\n            if (!changedLines.has(v.line)) continue;\n\n            violations.push({\n                file,\n                line: v.line,\n                column: v.column,\n                keyword: v.keyword,\n                context: v.context,\n            });\n        }\n    }\n\n    return violations;\n}\n\n/**\n * MODIFIED_FILES mode: Flag ALL violations in files that were modified.\n */\nfunction findViolationsForModifiedFiles(workspaceRoot: string, changedFiles: string[], disableAllowed: boolean): AnyUnknownViolation[] {\n    const violations: AnyUnknownViolation[] = [];\n\n    for (const file of changedFiles) {\n        const allViolations = findAnyUnknownInFile(file, workspaceRoot);\n\n        for (const v of allViolations) {\n            if (disableAllowed && v.hasDisableComment) continue;\n\n            violations.push({\n                file,\n                line: v.line,\n                column: v.column,\n                keyword: v.keyword,\n                context: v.context,\n            });\n        }\n    }\n\n    return violations;\n}\n\n/**\n * Auto-detect the base branch by finding the merge-base with origin/main.\n */\nfunction detectBase(workspaceRoot: string): string | null {\n    try {\n        const mergeBase = execSync('git merge-base HEAD origin/main', {\n            cwd: workspaceRoot,\n            encoding: 'utf-8',\n            stdio: ['pipe', 'pipe', 'pipe'],\n        }).trim();\n\n        if (mergeBase) {\n            return mergeBase;\n        }\n    } catch {\n        try {\n            const mergeBase = execSync('git merge-base HEAD main', {\n                cwd: workspaceRoot,\n                encoding: 'utf-8',\n                stdio: ['pipe', 'pipe', 'pipe'],\n            }).trim();\n\n            if (mergeBase) {\n                return mergeBase;\n            }\n        } catch {\n            // Ignore\n        }\n    }\n    return null;\n}\n\n/**\n * Report violations to console.\n */\nfunction reportViolations(violations: AnyUnknownViolation[], mode: NoAnyUnknownMode): void {\n    console.error('');\n    console.error('❌ `any` and `unknown` keywords found! Use specific types instead.');\n    console.error('');\n    console.error('📚 Avoiding any/unknown improves type safety:');\n    console.error('');\n    console.error('   BAD:  const data: any = fetchData();');\n    console.error('   GOOD: const data: UserData = fetchData();');\n    console.error('');\n    console.error('   BAD:  function process(input: unknown): unknown { }');\n    console.error('   GOOD: function process(input: ValidInput): ValidOutput { }');\n    console.error('');\n\n    for (const v of violations) {\n        console.error(`  ❌ ${v.file}:${v.line}:${v.column}`);\n        console.error(`     \\`${v.keyword}\\` keyword in ${v.context}`);\n    }\n    console.error('');\n\n    console.error('   To fix: Replace with specific types or interfaces');\n    console.error('');\n    console.error('   Escape hatch (use sparingly):');\n    console.error('   // webpieces-disable no-any-unknown -- [your reason]');\n    console.error('');\n    console.error(`   Current mode: ${mode}`);\n    console.error('');\n}\n\n/**\n * Resolve mode considering ignoreModifiedUntilEpoch override.\n * When active, downgrades to OFF. When expired, logs a warning.\n */\nfunction resolveMode(normalMode: NoAnyUnknownMode, epoch: number | undefined): NoAnyUnknownMode {\n    if (epoch === undefined || normalMode === 'OFF') {\n        return normalMode;\n    }\n    const nowSeconds = Date.now() / 1000;\n    if (nowSeconds < epoch) {\n        const expiresDate = new Date(epoch * 1000).toISOString().split('T')[0];\n        console.log(`\\n⏭️  Skipping no-any-unknown validation (ignoreModifiedUntilEpoch active, expires: ${expiresDate})`);\n        console.log('');\n        return 'OFF';\n    }\n    return normalMode;\n}\n\nexport default async function runExecutor(\n    options: ValidateNoAnyUnknownOptions,\n    context: ExecutorContext\n): Promise<ExecutorResult> {\n    const workspaceRoot = context.root;\n    const mode: NoAnyUnknownMode = resolveMode(options.mode ?? 'OFF', options.ignoreModifiedUntilEpoch);\n    const disableAllowed = options.disableAllowed ?? true;\n\n    if (mode === 'OFF') {\n        console.log('\\n⏭️  Skipping no-any-unknown validation (mode: OFF)');\n        console.log('');\n        return { success: true };\n    }\n\n    console.log('\\n📏 Validating No Any/Unknown\\n');\n    console.log(`   Mode: ${mode}`);\n\n    let base = process.env['NX_BASE'];\n    const head = process.env['NX_HEAD'];\n\n    if (!base) {\n        base = detectBase(workspaceRoot) ?? undefined;\n\n        if (!base) {\n            console.log('\\n⏭️  Skipping no-any-unknown validation (could not detect base branch)');\n            console.log('');\n            return { success: true };\n        }\n    }\n\n    console.log(`   Base: ${base}`);\n    console.log(`   Head: ${head ?? 'working tree (includes uncommitted changes)'}`);\n    console.log('');\n\n    const changedFiles = getChangedTypeScriptFiles(workspaceRoot, base, head);\n\n    if (changedFiles.length === 0) {\n        console.log('✅ No TypeScript files changed');\n        return { success: true };\n    }\n\n    console.log(`📂 Checking ${changedFiles.length} changed file(s)...`);\n\n    let violations: AnyUnknownViolation[] = [];\n\n    if (mode === 'MODIFIED_CODE') {\n        violations = findViolationsForModifiedCode(workspaceRoot, changedFiles, base, head, disableAllowed);\n    } else if (mode === 'MODIFIED_FILES') {\n        violations = findViolationsForModifiedFiles(workspaceRoot, changedFiles, disableAllowed);\n    }\n\n    if (violations.length === 0) {\n        console.log('✅ No any/unknown keywords found');\n        return { success: true };\n    }\n\n    reportViolations(violations, mode);\n\n    return { success: false };\n}\n"]}