@yawlabs/ctxlint 0.13.1 → 0.13.3
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/.pre-commit-hooks.yaml +1 -1
- package/README.md +568 -568
- package/dist/index.js +266 -135
- package/mcph-config-lint-rules.json +11 -11
- package/package.json +1 -1
|
@@ -35,7 +35,7 @@
|
|
|
35
35
|
],
|
|
36
36
|
"rules": [
|
|
37
37
|
{
|
|
38
|
-
"id": "mcph-
|
|
38
|
+
"id": "mcph-token-security/token-in-project-scope",
|
|
39
39
|
"category": "mcph-token-security",
|
|
40
40
|
"severity": "error",
|
|
41
41
|
"description": "A project-scope .mcph.json that is git-tracked contains a \"token\" field. The PAT will leak via git history.",
|
|
@@ -46,18 +46,18 @@
|
|
|
46
46
|
"stability": "stable"
|
|
47
47
|
},
|
|
48
48
|
{
|
|
49
|
-
"id": "mcph-
|
|
49
|
+
"id": "mcph-gitignore/local-file-not-gitignored",
|
|
50
50
|
"category": "mcph-gitignore",
|
|
51
51
|
"severity": "error",
|
|
52
52
|
"description": "A .mcph.local.json file exists but is not covered by .gitignore. The file exists precisely so machine-local overrides stay machine-local.",
|
|
53
53
|
"trigger": "scope === 'project-local' && !isGitignored",
|
|
54
54
|
"message": "{file} is not covered by .gitignore — machine-local overrides can leak via git",
|
|
55
|
-
"fixable":
|
|
55
|
+
"fixable": false,
|
|
56
56
|
"fixDescription": "Append \".mcph.local.json\" to .gitignore in the project root.",
|
|
57
57
|
"stability": "stable"
|
|
58
58
|
},
|
|
59
59
|
{
|
|
60
|
-
"id": "mcph-
|
|
60
|
+
"id": "mcph-token-security/invalid-token-format",
|
|
61
61
|
"category": "mcph-token-security",
|
|
62
62
|
"severity": "error",
|
|
63
63
|
"description": "The \"token\" value doesn't match the mcp.hosting PAT format (^mcp_pat_[A-Za-z0-9_-]+$).",
|
|
@@ -68,7 +68,7 @@
|
|
|
68
68
|
"stability": "stable"
|
|
69
69
|
},
|
|
70
70
|
{
|
|
71
|
-
"id": "mcph-
|
|
71
|
+
"id": "mcph-apibase/insecure-apibase",
|
|
72
72
|
"category": "mcph-apibase",
|
|
73
73
|
"severity": "warning",
|
|
74
74
|
"description": "The \"apiBase\" URL uses plaintext HTTP to a public (non-localhost, non-private) host. The MCPH_TOKEN would travel in the clear.",
|
|
@@ -79,7 +79,7 @@
|
|
|
79
79
|
"stability": "stable"
|
|
80
80
|
},
|
|
81
81
|
{
|
|
82
|
-
"id": "mcph-
|
|
82
|
+
"id": "mcph-apibase/invalid-apibase",
|
|
83
83
|
"category": "mcph-apibase",
|
|
84
84
|
"severity": "error",
|
|
85
85
|
"description": "The \"apiBase\" field is not a valid absolute URL.",
|
|
@@ -90,7 +90,7 @@
|
|
|
90
90
|
"stability": "stable"
|
|
91
91
|
},
|
|
92
92
|
{
|
|
93
|
-
"id": "mcph-
|
|
93
|
+
"id": "mcph-schema-conformance/unknown-field",
|
|
94
94
|
"category": "mcph-schema-conformance",
|
|
95
95
|
"severity": "warning",
|
|
96
96
|
"description": "A top-level field appears that is not in the mcph config schema. Usually a typo (tokens vs token, blockList vs blocked).",
|
|
@@ -101,7 +101,7 @@
|
|
|
101
101
|
"stability": "stable"
|
|
102
102
|
},
|
|
103
103
|
{
|
|
104
|
-
"id": "mcph-
|
|
104
|
+
"id": "mcph-schema-conformance/stale-version",
|
|
105
105
|
"category": "mcph-schema-conformance",
|
|
106
106
|
"severity": "info",
|
|
107
107
|
"description": "The \"version\" field is older than the current schema version.",
|
|
@@ -112,7 +112,7 @@
|
|
|
112
112
|
"stability": "stable"
|
|
113
113
|
},
|
|
114
114
|
{
|
|
115
|
-
"id": "mcph-
|
|
115
|
+
"id": "mcph-lists/allowlist-denylist-conflict",
|
|
116
116
|
"category": "mcph-lists",
|
|
117
117
|
"severity": "warning",
|
|
118
118
|
"description": "A server namespace appears in both the allow-list (\"servers\") and deny-list (\"blocked\"). Deny wins in practice, so the allow-list entry is dead weight.",
|
|
@@ -123,7 +123,7 @@
|
|
|
123
123
|
"stability": "stable"
|
|
124
124
|
},
|
|
125
125
|
{
|
|
126
|
-
"id": "mcph-
|
|
126
|
+
"id": "mcph-lists/duplicate-entries",
|
|
127
127
|
"category": "mcph-lists",
|
|
128
128
|
"severity": "info",
|
|
129
129
|
"description": "The same value appears more than once in a servers or blocked array.",
|
|
@@ -134,7 +134,7 @@
|
|
|
134
134
|
"stability": "stable"
|
|
135
135
|
},
|
|
136
136
|
{
|
|
137
|
-
"id": "mcph-
|
|
137
|
+
"id": "mcph-token-security/prefer-env-token",
|
|
138
138
|
"category": "mcph-token-security",
|
|
139
139
|
"severity": "warning",
|
|
140
140
|
"configurable": true,
|
package/package.json
CHANGED