npm - @zxyycom/vibe-check - Versions diffs - 0.0.1 → 0.0.2 - Mend

@zxyycom/vibe-check 0.0.1 → 0.0.2

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (950) hide show

package/dist/esm/package-checks/project-files/configuration.mjs.map CHANGED Viewed

	@@ -1 +1 @@
1	- {"version":3,"file":"configuration.mjs","sourceRoot":"","sources":["../../../../src/package-checks/project-files/configuration.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,gCAAgC,EAChC,mBAAmB,EACnB,oBAAoB,~~EACrB~~,MAAM,sCAAsC,CAAC;AAE9C,MAAM,CAAC,MAAM,oBAAoB,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,YAAY,EAAE,cAAc,CAAU,CAAC,CAAC;AAsB3F;;;;;GAKG;AACH,MAAM,CAAC,MAAM,2BAA2B,GAAyB,UAAU,CAAC;IAC1E,OAAO,EAAE;QACP,cAAc;QACd,SAAS;QACT,YAAY;QACZ,YAAY;QACZ,qBAAqB;QACrB,YAAY;QACZ,aAAa;QACb,mBAAmB;QACnB,mBAAmB;QACnB,iBAAiB;QACjB,aAAa;QACb,gBAAgB;QAChB,YAAY;QACZ,iBAAiB;QACjB,kBAAkB;QAClB,oBAAoB;QACpB,cAAc;QACd,WAAW;QACX,cAAc;QACd,YAAY;KACb;IACD,OAAO,EAAE,CAAC,MAAM,CAAC;IACjB,MAAM,EAAE,YAAY;CACrB,CAAC,CAAC;AAEH,mEAAmE;AACnE,MAAM,UAAU,2BAA2B,CACzC,KAAc,EACd,QAAQ,GAAyB,2BAA2B;IAE5D,MAAM,SAAS,GAAG,oBAAoB,CAAC,KAAK,CAAC,CAAC;IAC9C,IACE,SAAS,KAAK,SAAS;QACvB,CAAC,gCAAgC,CAAC,SAAS,EAAE;YAC3C,QAAQ,EAAE,CAAC,SAAS,EAAE,SAAS,EAAE,QAAQ,CAAC;YAC1C,QAAQ,EAAE,EAAE;SACb,CAAC,EACF,CAAC;QACD,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,MAAM,OAAO,GAAG,kBAAkB,CAAC,SAAS,CAAC,OAAO,EAAE,QAAQ,CAAC,OAAO,CAAC,CAAC;IACxE,MAAM,OAAO,GAAG,kBAAkB,CAAC,SAAS,CAAC,OAAO,EAAE,QAAQ,CAAC,OAAO,CAAC,CAAC;IACxE,MAAM,MAAM,GAAG,SAAS,CAAC,MAAM,IAAI,QAAQ,CAAC,MAAM,CAAC;IACnD,IAAI,OAAO,KAAK,SAAS,IAAI,OAAO,KAAK,SAAS,IAAI,CAAC,mBAAmB,CAAC,MAAM,CAAC,EAAE,CAAC;QACnF,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC,CAAC;AACrD,CAAC;AAED,MAAM,UAAU,mCAAmC;IACjD,OAAO,4BAA4B,CAAC,2BAA2B,CAAC,CAAC;AACnE,CAAC;AAED,wDAAwD;AACxD,MAAM,UAAU,4BAA4B,CAC1C,SAA+B;IAE/B,OAAO,MAAM,CAAC,MAAM,CAAC;QACnB,OAAO,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC,CAAC;QAC9C,OAAO,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC,CAAC;QAC9C,MAAM,EAAE,SAAS,CAAC,MAAM;KACzB,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,yBAAyB,CAAC,KAAc;IACtD,MAAM,SAAS,GAAG,~~WAAW~~,CAAC,KAAK,EAAE,CAAC,SAAS,EAAE,SAAS,EAAE,QAAQ,CAAC,CAAC,CAAC;~~IACvE~~,OAAO,CACL,SAAS,KAAK,SAAS;QACvB,gBAAgB,CAAC,SAAS,CAAC,OAAO,CAAC;QACnC,gBAAgB,CAAC,SAAS,CAAC,OAAO,CAAC;QACnC,mBAAmB,CAAC,SAAS,CAAC,MAAM,CAAC,CACtC,CAAC;AACJ,CAAC;AAED,SAAS,mBAAmB,CAAC,KAAc;IACzC,OAAO,oBAAoB,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,KAAK,KAAK,CAAC,CAAC;AACjE,CAAC;AAED,SAAS,kBAAkB,CACzB,KAAc,EACd,QAA2B;IAE3B,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,QAAQ,CAAC,CAAC,CAAC;IAC7D,MAAM,KAAK,GAAG,mBAAmB,CAAC,KAAK,CAAC,CAAC;IACzC,IAAI,KAAK,KAAK,SAAS,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,QAAQ,CAAC;QAAE,OAAO,SAAS,CAAC;IACpE,OAAO,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC;AACnC,CAAC;AAED,SAAS,gBAAgB,CAAC,KAAc;IACtC,MAAM,KAAK,GAAG,mBAAmB,CAAC,KAAK,CAAC,CAAC;IACzC,OAAO,KAAK,KAAK,SAAS,IAAI,KAAK,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;AACtD,CAAC;AAED,SAAS,QAAQ,CAAC,KAAc;IAC9B,OAAO,OAAO,KAAK,KAAK,QAAQ,CAAC;AACnC,CAAC;AAED,SAAS,WAAW,CAClB,KAAc,EACd,IAAuB;IAEvB,MAAM,MAAM,GAAG,oBAAoB,CAAC,KAAK,CAAC,CAAC;IAC3C,OAAO,MAAM,KAAK,SAAS;QACzB,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,MAAM,KAAK,IAAI,CAAC,MAAM;QAC1C,IAAI,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;QAC/C,CAAC,CAAC,MAAM;QACR,CAAC,CAAC,SAAS,CAAC;AAChB,CAAC;AAED,SAAS,UAAU,CAAI,KAAQ;IAC7B,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IACxF,KAAK,MAAM,MAAM,IAAI,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC;QAAE,UAAU,CAAC,MAAM,CAAC,CAAC;IAC9D,OAAO,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAC9B,CAAC","sourcesContent":["import {\n hasRequiredAndOptionalRecordKeys,\n snapshotClosedArray,\n snapshotClosedRecord\n} from \"../../data-boundary/closed-values.ts\";\n\nexport const PROJECT_FILE_SOURCES = Object.freeze([\"filesystem\", \"git-worktree\"] as const);\n\n/** 文件选择可使用的显式候选来源。 /\nexport type ProjectFileSource = (typeof PROJECT_FILE_SOURCES)[number];\n\n/* 读取项目文件的 Check 所拥有的文件选择输入。 /\nexport interface ProjectFileSelectionOptions {\n /* 候选文件来源；省略时使用 owning Check 的来源默认值，当前随包 Check 均为 `filesystem`。 /\n readonly source?: ProjectFileSource;\n /* 相对项目根目录且使用 `/` 的 glob；省略时使用 owning Check 的 include 默认值，显式数组完整替换。 /\n readonly include?: readonly string[];\n /* 优先于 `include` 的 glob；省略时使用 owning Check 的 exclude 默认值，显式数组完整替换。 /\n readonly exclude?: readonly string[];\n}\n\n/* Check execution 消费的完整项目文件选择。 /\nexport interface ProjectFileSelection {\n readonly exclude: readonly string[];\n readonly include: readonly string[];\n readonly source: ProjectFileSource;\n}\n\n/\n Package-provided Checks 共用的通用文件选择基线。\n \n 对象与数组均不可变；需要保留默认排除并追加项目规则时，使用对象与数组 spread 建立新值。\n * 个别 Check 会从此 baseline 派生更精准的默认 include；显式组合此 value 仍表示通配全部路径。\n /\nexport const defaultProjectFileSelection: ProjectFileSelection = deepFreeze({\n exclude: [\n \"/.cache/\",\n \"/.git\",\n \"/.git/\",\n \"/.log/\",\n \"/.pytest_cache/\",\n \"/.tmp/\",\n \"/.venv/\",\n \"/.vibe-check/\",\n \"/__pycache__/\",\n \"/artifacts/\",\n \"/build/\",\n \"/coverage/\",\n \"/dist/\",\n \"/generated/\",\n \"/.generated.\",\n \"/node_modules/\",\n \"/target/\",\n \"/tmp/\",\n \"/vendor/\",\n \"/venv/\"\n ],\n include: [\"/\"],\n source: \"filesystem\"\n});\n\n/** 按 owning Check 提供的可信完整 defaults 解析并冻结一份 authoring selection。 /\nexport function resolveProjectFileSelection(\n value: unknown,\n defaults: ProjectFileSelection = defaultProjectFileSelection\n): ProjectFileSelection \| undefined {\n const selection = snapshotClosedRecord(value);\n if (\n selection === undefined \|\|\n !hasRequiredAndOptionalRecordKeys(selection, {\n optional: [\"exclude\", \"include\", \"source\"],\n required: []\n })\n ) {\n return undefined;\n }\n\n const exclude = resolveStringArray(selection.exclude, defaults.exclude);\n const include = resolveStringArray(selection.include, defaults.include);\n const source = selection.source ?? defaults.source;\n if (exclude === undefined \|\| include === undefined \|\| !isProjectFileSource(source)) {\n return undefined;\n }\n\n return Object.freeze({ exclude, include, source });\n}\n\nexport function snapshotDefaultProjectFileSelection(): ProjectFileSelection {\n return snapshotProjectFileSelection(defaultProjectFileSelection);\n}\n\n/* 为 owning Check 对可信的完整 selection 建立 detached、冻结快照。 */\nexport function snapshotProjectFileSelection(\n selection: ProjectFileSelection\n): ProjectFileSelection {\n return Object.freeze({\n exclude: Object.freeze([...selection.exclude]),\n include: Object.freeze([...selection.include]),\n source: selection.source\n });\n}\n\nexport function validProjectFileSelection(value: unknown): value is ProjectFileSelection {\n const selection = ~~exactRecord~~(value, [\"exclude\", \"include\", \"source\"]);\n return (\n selection !== undefined &&\n validStringArray(selection.exclude) &&\n validStringArray(selection.include) &&\n isProjectFileSource(selection.source)\n );\n}\n\nfunction isProjectFileSource(value: unknown): value is ProjectFileSource {\n return PROJECT_FILE_SOURCES.some((source) => source === value);\n}\n\nfunction resolveStringArray(\n value: unknown,\n fallback: readonly string[]\n): readonly string[] \| undefined {\n if (value === undefined) return Object.freeze([...fallback]);\n const items = snapshotClosedArray(value);\n if (items === undefined \|\| !items.every(isString)) return undefined;\n return Object.freeze([...items]);\n}\n\nfunction validStringArray(value: unknown): boolean {\n const items = snapshotClosedArray(value);\n return items !== undefined && items.every(isString);\n}\n\nfunction isString(value: unknown): value is string {\n return typeof value === \"string\";\n}\n\nfunction exactRecord(\n value: unknown,\n keys: readonly string[]\n): Readonly<Record<string, unknown>> \| undefined {\n const record = snapshotClosedRecord(value);\n return record !== undefined &&\n Object.keys(record).length === keys.length &&\n keys.every((key) => Object.hasOwn(record, key))\n ? record\n : undefined;\n}\n\nfunction deepFreeze<T>(value: T): T {\n if (typeof value !== \"object\" \|\| value === null \|\| Object.isFrozen(value)) return value;\n for (const nested of Object.values(value)) deepFreeze(nested);\n return Object.freeze(value);\n}\n"]}
1	+ {"version":3,"file":"configuration.mjs","sourceRoot":"","sources":["../../../../src/package-checks/project-files/configuration.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,gCAAgC,EAChC,mBAAmB,EACnB,oBAAoB,EACpB,yBAAyB,EAC1B,MAAM,sCAAsC,CAAC;AAE9C,MAAM,CAAC,MAAM,oBAAoB,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,YAAY,EAAE,cAAc,CAAU,CAAC,CAAC;AAsB3F;;;;;GAKG;AACH,MAAM,CAAC,MAAM,2BAA2B,GAAyB,UAAU,CAAC;IAC1E,OAAO,EAAE;QACP,cAAc;QACd,SAAS;QACT,YAAY;QACZ,YAAY;QACZ,qBAAqB;QACrB,YAAY;QACZ,aAAa;QACb,mBAAmB;QACnB,mBAAmB;QACnB,iBAAiB;QACjB,aAAa;QACb,gBAAgB;QAChB,YAAY;QACZ,iBAAiB;QACjB,kBAAkB;QAClB,oBAAoB;QACpB,cAAc;QACd,WAAW;QACX,cAAc;QACd,YAAY;KACb;IACD,OAAO,EAAE,CAAC,MAAM,CAAC;IACjB,MAAM,EAAE,YAAY;CACrB,CAAC,CAAC;AAEH,mEAAmE;AACnE,MAAM,UAAU,2BAA2B,CACzC,KAAc,EACd,QAAQ,GAAyB,2BAA2B;IAE5D,MAAM,SAAS,GAAG,oBAAoB,CAAC,KAAK,CAAC,CAAC;IAC9C,IACE,SAAS,KAAK,SAAS;QACvB,CAAC,gCAAgC,CAAC,SAAS,EAAE;YAC3C,QAAQ,EAAE,CAAC,SAAS,EAAE,SAAS,EAAE,QAAQ,CAAC;YAC1C,QAAQ,EAAE,EAAE;SACb,CAAC,EACF,CAAC;QACD,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,MAAM,OAAO,GAAG,kBAAkB,CAAC,SAAS,CAAC,OAAO,EAAE,QAAQ,CAAC,OAAO,CAAC,CAAC;IACxE,MAAM,OAAO,GAAG,kBAAkB,CAAC,SAAS,CAAC,OAAO,EAAE,QAAQ,CAAC,OAAO,CAAC,CAAC;IACxE,MAAM,MAAM,GAAG,SAAS,CAAC,MAAM,IAAI,QAAQ,CAAC,MAAM,CAAC;IACnD,IAAI,OAAO,KAAK,SAAS,IAAI,OAAO,KAAK,SAAS,IAAI,CAAC,mBAAmB,CAAC,MAAM,CAAC,EAAE,CAAC;QACnF,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC,CAAC;AACrD,CAAC;AAED,MAAM,UAAU,mCAAmC;IACjD,OAAO,4BAA4B,CAAC,2BAA2B,CAAC,CAAC;AACnE,CAAC;AAED,wDAAwD;AACxD,MAAM,UAAU,4BAA4B,CAC1C,SAA+B;IAE/B,OAAO,MAAM,CAAC,MAAM,CAAC;QACnB,OAAO,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC,CAAC;QAC9C,OAAO,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC,CAAC;QAC9C,MAAM,EAAE,SAAS,CAAC,MAAM;KACzB,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,yBAAyB,CAAC,KAAc;IACtD,MAAM,SAAS,GAAG,yBAAyB,CAAC,KAAK,EAAE,CAAC,SAAS,EAAE,SAAS,EAAE,QAAQ,CAAC,CAAC,CAAC;IACrF,OAAO,CACL,SAAS,KAAK,SAAS;QACvB,gBAAgB,CAAC,SAAS,CAAC,OAAO,CAAC;QACnC,gBAAgB,CAAC,SAAS,CAAC,OAAO,CAAC;QACnC,mBAAmB,CAAC,SAAS,CAAC,MAAM,CAAC,CACtC,CAAC;AACJ,CAAC;AAED,SAAS,mBAAmB,CAAC,KAAc;IACzC,OAAO,oBAAoB,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,KAAK,KAAK,CAAC,CAAC;AACjE,CAAC;AAED,SAAS,kBAAkB,CACzB,KAAc,EACd,QAA2B;IAE3B,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,QAAQ,CAAC,CAAC,CAAC;IAC7D,MAAM,KAAK,GAAG,mBAAmB,CAAC,KAAK,CAAC,CAAC;IACzC,IAAI,KAAK,KAAK,SAAS,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,QAAQ,CAAC;QAAE,OAAO,SAAS,CAAC;IACpE,OAAO,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC;AACnC,CAAC;AAED,SAAS,gBAAgB,CAAC,KAAc;IACtC,MAAM,KAAK,GAAG,mBAAmB,CAAC,KAAK,CAAC,CAAC;IACzC,OAAO,KAAK,KAAK,SAAS,IAAI,KAAK,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;AACtD,CAAC;AAED,SAAS,QAAQ,CAAC,KAAc;IAC9B,OAAO,OAAO,KAAK,KAAK,QAAQ,CAAC;AACnC,CAAC;AAED,SAAS,UAAU,CAAI,KAAQ;IAC7B,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IACxF,KAAK,MAAM,MAAM,IAAI,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC;QAAE,UAAU,CAAC,MAAM,CAAC,CAAC;IAC9D,OAAO,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAC9B,CAAC","sourcesContent":["import {\n hasRequiredAndOptionalRecordKeys,\n snapshotClosedArray,\n snapshotClosedRecord,\n snapshotExactClosedRecord\n} from \"../../data-boundary/closed-values.ts\";\n\nexport const PROJECT_FILE_SOURCES = Object.freeze([\"filesystem\", \"git-worktree\"] as const);\n\n/** 文件选择可使用的显式候选来源。 /\nexport type ProjectFileSource = (typeof PROJECT_FILE_SOURCES)[number];\n\n/* 读取项目文件的 Check 所拥有的文件选择输入。 /\nexport interface ProjectFileSelectionOptions {\n /* 候选文件来源；省略时使用 owning Check 的来源默认值，当前随包 Check 均为 `filesystem`。 /\n readonly source?: ProjectFileSource;\n /* 相对项目根目录且使用 `/` 的 glob；省略时使用 owning Check 的 include 默认值，显式数组完整替换。 /\n readonly include?: readonly string[];\n /* 优先于 `include` 的 glob；省略时使用 owning Check 的 exclude 默认值，显式数组完整替换。 /\n readonly exclude?: readonly string[];\n}\n\n/* Check execution 消费的完整项目文件选择。 /\nexport interface ProjectFileSelection {\n readonly exclude: readonly string[];\n readonly include: readonly string[];\n readonly source: ProjectFileSource;\n}\n\n/\n Package-provided Checks 共用的通用文件选择基线。\n \n 对象与数组均不可变；需要保留默认排除并追加项目规则时，使用对象与数组 spread 建立新值。\n * 个别 Check 会从此 baseline 派生更精准的默认 include；显式组合此 value 仍表示通配全部路径。\n /\nexport const defaultProjectFileSelection: ProjectFileSelection = deepFreeze({\n exclude: [\n \"/.cache/\",\n \"/.git\",\n \"/.git/\",\n \"/.log/\",\n \"/.pytest_cache/\",\n \"/.tmp/\",\n \"/.venv/\",\n \"/.vibe-check/\",\n \"/__pycache__/\",\n \"/artifacts/\",\n \"/build/\",\n \"/coverage/\",\n \"/dist/\",\n \"/generated/\",\n \"/.generated.\",\n \"/node_modules/\",\n \"/target/\",\n \"/tmp/\",\n \"/vendor/\",\n \"/venv/\"\n ],\n include: [\"/\"],\n source: \"filesystem\"\n});\n\n/** 按 owning Check 提供的可信完整 defaults 解析并冻结一份 authoring selection。 /\nexport function resolveProjectFileSelection(\n value: unknown,\n defaults: ProjectFileSelection = defaultProjectFileSelection\n): ProjectFileSelection \| undefined {\n const selection = snapshotClosedRecord(value);\n if (\n selection === undefined \|\|\n !hasRequiredAndOptionalRecordKeys(selection, {\n optional: [\"exclude\", \"include\", \"source\"],\n required: []\n })\n ) {\n return undefined;\n }\n\n const exclude = resolveStringArray(selection.exclude, defaults.exclude);\n const include = resolveStringArray(selection.include, defaults.include);\n const source = selection.source ?? defaults.source;\n if (exclude === undefined \|\| include === undefined \|\| !isProjectFileSource(source)) {\n return undefined;\n }\n\n return Object.freeze({ exclude, include, source });\n}\n\nexport function snapshotDefaultProjectFileSelection(): ProjectFileSelection {\n return snapshotProjectFileSelection(defaultProjectFileSelection);\n}\n\n/* 为 owning Check 对可信的完整 selection 建立 detached、冻结快照。 */\nexport function snapshotProjectFileSelection(\n selection: ProjectFileSelection\n): ProjectFileSelection {\n return Object.freeze({\n exclude: Object.freeze([...selection.exclude]),\n include: Object.freeze([...selection.include]),\n source: selection.source\n });\n}\n\nexport function validProjectFileSelection(value: unknown): value is ProjectFileSelection {\n const selection = snapshotExactClosedRecord(value, [\"exclude\", \"include\", \"source\"]);\n return (\n selection !== undefined &&\n validStringArray(selection.exclude) &&\n validStringArray(selection.include) &&\n isProjectFileSource(selection.source)\n );\n}\n\nfunction isProjectFileSource(value: unknown): value is ProjectFileSource {\n return PROJECT_FILE_SOURCES.some((source) => source === value);\n}\n\nfunction resolveStringArray(\n value: unknown,\n fallback: readonly string[]\n): readonly string[] \| undefined {\n if (value === undefined) return Object.freeze([...fallback]);\n const items = snapshotClosedArray(value);\n if (items === undefined \|\| !items.every(isString)) return undefined;\n return Object.freeze([...items]);\n}\n\nfunction validStringArray(value: unknown): boolean {\n const items = snapshotClosedArray(value);\n return items !== undefined && items.every(isString);\n}\n\nfunction isString(value: unknown): value is string {\n return typeof value === \"string\";\n}\n\nfunction deepFreeze<T>(value: T): T {\n if (typeof value !== \"object\" \|\| value === null \|\| Object.isFrozen(value)) return value;\n for (const nested of Object.values(value)) deepFreeze(nested);\n return Object.freeze(value);\n}\n"]}

package/dist/esm/package-checks/project-files/gitlink-revision.mjs CHANGED Viewed

@@ -1,5 +1,5 @@
 /** Reads canonical gitlink entries from a named Git tree revision. */
-import { processFailed } from "../host-environment/process/command.mjs";
+import { processFailed } from "../host-environment/process.mjs";
 import { runGit } from "../host-environment/git.mjs";
 import { toSlashPath } from "../host-environment/path.mjs";
 export function gitlinksAtRevision({ repository, revision }) {

package/dist/esm/package-checks/project-files/gitlink-revision.mjs.map CHANGED Viewed

	@@ -1 +1 @@
1	- {"version":3,"file":"gitlink-revision.mjs","sourceRoot":"","sources":["../../../../src/package-checks/project-files/gitlink-revision.ts"],"names":[],"mappings":"AAAA,sEAAsE;AAEtE,OAAO,EAAE,aAAa,EAAE,MAAM,~~wCAAwC~~,CAAC;~~AACvE~~,OAAO,EAAE,MAAM,EAAE,MAAM,4BAA4B,CAAC;AACpD,OAAO,EAAE,WAAW,EAAE,MAAM,6BAA6B,CAAC;AAO1D,MAAM,UAAU,kBAAkB,CAAC,EACjC,UAAU,EACV,QAAQ,EAIR;IACA,MAAM,MAAM,GAAG,MAAM,CAAC;QACpB,IAAI,EAAE,CAAC,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,QAAQ,CAAC;QACvC,GAAG,EAAE,UAAU;KAChB,CAAC,CAAC;IACH,IAAI,aAAa,CAAC,MAAM,CAAC,EAAE,CAAC;QAC1B,MAAM,MAAM,GACV,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE;YACpB,MAAM,CAAC,KAAK,EAAE,OAAO;YACrB,CAAC,MAAM,CAAC,MAAM,KAAK,IAAI,CAAC,CAAC,CAAC,eAAe,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,UAAU,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC;QACxF,MAAM,IAAI,KAAK,CAAC,iCAAiC,QAAQ,OAAO,UAAU,KAAK,MAAM,EAAE,CAAC,CAAC;IAC3F,CAAC;IAED,MAAM,QAAQ,GAAc,EAAE,CAAC;IAC/B,KAAK,MAAM,KAAK,IAAI,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;QAC9C,IAAI,CAAC,KAAK;YAAE,SAAS;QACrB,MAAM,OAAO,GAAG,iBAAiB,CAAC,EAAE,KAAK,EAAE,UAAU,EAAE,QAAQ,EAAE,CAAC,CAAC;QACnE,IAAI,OAAO,KAAK,IAAI;YAAE,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IAC/C,CAAC;IACD,OAAO,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;AACjC,CAAC;AAED,SAAS,iBAAiB,CAAC,EACzB,KAAK,EACL,UAAU,EACV,QAAQ,EAKR;IACA,MAAM,MAAM,GAAG,iBAAiB,CAAC,KAAK,CAAC,CAAC;IACxC,IAAI,MAAM,KAAK,SAAS;QAAE,MAAM,iBAAiB,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC;IACxE,MAAM,CAAC,IAAI,EAAE,IAAI,EAAE,GAAG,CAAC,GAAG,MAAM,CAAC,QAAQ,CAAC;IAC1C,IAAI,CAAC,oBAAoB,CAAC,IAAI,EAAE,IAAI,EAAE,GAAG,CAAC;QAAE,MAAM,iBAAiB,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC;IAC1F,IAAI,IAAI,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC;IACnC,IAAI,IAAI,KAAK,QAAQ,EAAE,CAAC;QACtB,MAAM,IAAI,KAAK,CAAC,6BAA6B,QAAQ,OAAO,UAAU,EAAE,CAAC,CAAC;IAC5E,CAAC;IACD,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,WAAW,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC;AAChE,CAAC;AAED,SAAS,iBAAiB,CAAC,KAAa;IACtC,MAAM,SAAS,GAAG,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;IACtC,IAAI,SAAS,GAAG,CAAC;QAAE,OAAO,SAAS,CAAC;IACpC,MAAM,QAAQ,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IACzD,MAAM,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC,SAAS,GAAG,CAAC,CAAC,CAAC;IACxC,OAAO,QAAQ,CAAC,MAAM,KAAK,CAAC,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;AACnF,CAAC;AAED,SAAS,oBAAoB,CAC3B,IAAwB,EACxB,IAAwB,EACxB,GAAuB;IAEvB,OAAO,IAAI,KAAK,SAAS,IAAI,IAAI,KAAK,SAAS,IAAI,GAAG,KAAK,SAAS,IAAI,iBAAiB,CAAC,GAAG,CAAC,CAAC;AACjG,CAAC;AAED,SAAS,iBAAiB,CAAC,QAAgB,EAAE,UAAkB;IAC7D,OAAO,IAAI,KAAK,CAAC,8BAA8B,QAAQ,OAAO,UAAU,EAAE,CAAC,CAAC;AAC9E,CAAC;AAED,SAAS,iBAAiB,CAAC,KAAa;IACtC,OAAO,kCAAkC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;AACxD,CAAC","sourcesContent":["/** Reads canonical gitlink entries from a named Git tree revision. */\n\nimport { processFailed } from \"../host-environment/process~~/command~~.ts\";\nimport { runGit } from \"../host-environment/git.ts\";\nimport { toSlashPath } from \"../host-environment/path.ts\";\n\nexport type Gitlink = Readonly<{\n readonly path: string;\n readonly sha: string;\n}>;\n\nexport function gitlinksAtRevision({\n repository,\n revision\n}: Readonly<{\n readonly repository: string;\n readonly revision: string;\n}>): readonly Gitlink[] {\n const result = runGit({\n args: [\"ls-tree\", \"-r\", \"-z\", revision],\n cwd: repository\n });\n if (processFailed(result)) {\n const detail =\n result.stderr.trim() \|\|\n result.error?.message \|\|\n (result.signal === null ? `exit status ${result.status}` : `signal ${result.signal}`);\n throw new Error(`could not inspect gitlinks at ${revision} in ${repository}: ${detail}`);\n }\n\n const gitlinks: Gitlink[] = [];\n for (const entry of result.stdout.split(\"\\0\")) {\n if (!entry) continue;\n const gitlink = parseGitlinkEntry({ entry, repository, revision });\n if (gitlink !== null) gitlinks.push(gitlink);\n }\n return Object.freeze(gitlinks);\n}\n\nfunction parseGitlinkEntry({\n entry,\n repository,\n revision\n}: Readonly<{\n readonly entry: string;\n readonly repository: string;\n readonly revision: string;\n}>): Gitlink \| null {\n const parsed = gitTreeEntryParts(entry);\n if (parsed === undefined) throw invalidTreeOutput(revision, repository);\n const [mode, type, sha] = parsed.metadata;\n if (!validGitTreeMetadata(mode, type, sha)) throw invalidTreeOutput(revision, repository);\n if (mode !== \"160000\") return null;\n if (type !== \"commit\") {\n throw new Error(`invalid gitlink output at ${revision} in ${repository}`);\n }\n return Object.freeze({ path: toSlashPath(parsed.path), sha });\n}\n\nfunction gitTreeEntryParts(entry: string): { metadata: string[]; path: string } \| undefined {\n const separator = entry.indexOf(\"\\t\");\n if (separator < 0) return undefined;\n const metadata = entry.slice(0, separator).split(/\\s+/u);\n const path = entry.slice(separator + 1);\n return metadata.length === 3 && path.length > 0 ? { metadata, path } : undefined;\n}\n\nfunction validGitTreeMetadata(\n mode: string \| undefined,\n type: string \| undefined,\n sha: string \| undefined\n): sha is string {\n return mode !== undefined && type !== undefined && sha !== undefined && isFullGitObjectId(sha);\n}\n\nfunction invalidTreeOutput(revision: string, repository: string): Error {\n return new Error(`invalid git tree output at ${revision} in ${repository}`);\n}\n\nfunction isFullGitObjectId(value: string): boolean {\n return /^(?:[0-9a-f]{40}\|[0-9a-f]{64})$/u.test(value);\n}\n"]}
1	+ {"version":3,"file":"gitlink-revision.mjs","sourceRoot":"","sources":["../../../../src/package-checks/project-files/gitlink-revision.ts"],"names":[],"mappings":"AAAA,sEAAsE;AAEtE,OAAO,EAAE,aAAa,EAAE,MAAM,gCAAgC,CAAC;AAC/D,OAAO,EAAE,MAAM,EAAE,MAAM,4BAA4B,CAAC;AACpD,OAAO,EAAE,WAAW,EAAE,MAAM,6BAA6B,CAAC;AAO1D,MAAM,UAAU,kBAAkB,CAAC,EACjC,UAAU,EACV,QAAQ,EAIR;IACA,MAAM,MAAM,GAAG,MAAM,CAAC;QACpB,IAAI,EAAE,CAAC,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,QAAQ,CAAC;QACvC,GAAG,EAAE,UAAU;KAChB,CAAC,CAAC;IACH,IAAI,aAAa,CAAC,MAAM,CAAC,EAAE,CAAC;QAC1B,MAAM,MAAM,GACV,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE;YACpB,MAAM,CAAC,KAAK,EAAE,OAAO;YACrB,CAAC,MAAM,CAAC,MAAM,KAAK,IAAI,CAAC,CAAC,CAAC,eAAe,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,UAAU,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC;QACxF,MAAM,IAAI,KAAK,CAAC,iCAAiC,QAAQ,OAAO,UAAU,KAAK,MAAM,EAAE,CAAC,CAAC;IAC3F,CAAC;IAED,MAAM,QAAQ,GAAc,EAAE,CAAC;IAC/B,KAAK,MAAM,KAAK,IAAI,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;QAC9C,IAAI,CAAC,KAAK;YAAE,SAAS;QACrB,MAAM,OAAO,GAAG,iBAAiB,CAAC,EAAE,KAAK,EAAE,UAAU,EAAE,QAAQ,EAAE,CAAC,CAAC;QACnE,IAAI,OAAO,KAAK,IAAI;YAAE,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IAC/C,CAAC;IACD,OAAO,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;AACjC,CAAC;AAED,SAAS,iBAAiB,CAAC,EACzB,KAAK,EACL,UAAU,EACV,QAAQ,EAKR;IACA,MAAM,MAAM,GAAG,iBAAiB,CAAC,KAAK,CAAC,CAAC;IACxC,IAAI,MAAM,KAAK,SAAS;QAAE,MAAM,iBAAiB,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC;IACxE,MAAM,CAAC,IAAI,EAAE,IAAI,EAAE,GAAG,CAAC,GAAG,MAAM,CAAC,QAAQ,CAAC;IAC1C,IAAI,CAAC,oBAAoB,CAAC,IAAI,EAAE,IAAI,EAAE,GAAG,CAAC;QAAE,MAAM,iBAAiB,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC;IAC1F,IAAI,IAAI,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC;IACnC,IAAI,IAAI,KAAK,QAAQ,EAAE,CAAC;QACtB,MAAM,IAAI,KAAK,CAAC,6BAA6B,QAAQ,OAAO,UAAU,EAAE,CAAC,CAAC;IAC5E,CAAC;IACD,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,WAAW,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC;AAChE,CAAC;AAED,SAAS,iBAAiB,CAAC,KAAa;IACtC,MAAM,SAAS,GAAG,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;IACtC,IAAI,SAAS,GAAG,CAAC;QAAE,OAAO,SAAS,CAAC;IACpC,MAAM,QAAQ,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IACzD,MAAM,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC,SAAS,GAAG,CAAC,CAAC,CAAC;IACxC,OAAO,QAAQ,CAAC,MAAM,KAAK,CAAC,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;AACnF,CAAC;AAED,SAAS,oBAAoB,CAC3B,IAAwB,EACxB,IAAwB,EACxB,GAAuB;IAEvB,OAAO,IAAI,KAAK,SAAS,IAAI,IAAI,KAAK,SAAS,IAAI,GAAG,KAAK,SAAS,IAAI,iBAAiB,CAAC,GAAG,CAAC,CAAC;AACjG,CAAC;AAED,SAAS,iBAAiB,CAAC,QAAgB,EAAE,UAAkB;IAC7D,OAAO,IAAI,KAAK,CAAC,8BAA8B,QAAQ,OAAO,UAAU,EAAE,CAAC,CAAC;AAC9E,CAAC;AAED,SAAS,iBAAiB,CAAC,KAAa;IACtC,OAAO,kCAAkC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;AACxD,CAAC","sourcesContent":["/** Reads canonical gitlink entries from a named Git tree revision. */\n\nimport { processFailed } from \"../host-environment/process.ts\";\nimport { runGit } from \"../host-environment/git.ts\";\nimport { toSlashPath } from \"../host-environment/path.ts\";\n\nexport type Gitlink = Readonly<{\n readonly path: string;\n readonly sha: string;\n}>;\n\nexport function gitlinksAtRevision({\n repository,\n revision\n}: Readonly<{\n readonly repository: string;\n readonly revision: string;\n}>): readonly Gitlink[] {\n const result = runGit({\n args: [\"ls-tree\", \"-r\", \"-z\", revision],\n cwd: repository\n });\n if (processFailed(result)) {\n const detail =\n result.stderr.trim() \|\|\n result.error?.message \|\|\n (result.signal === null ? `exit status ${result.status}` : `signal ${result.signal}`);\n throw new Error(`could not inspect gitlinks at ${revision} in ${repository}: ${detail}`);\n }\n\n const gitlinks: Gitlink[] = [];\n for (const entry of result.stdout.split(\"\\0\")) {\n if (!entry) continue;\n const gitlink = parseGitlinkEntry({ entry, repository, revision });\n if (gitlink !== null) gitlinks.push(gitlink);\n }\n return Object.freeze(gitlinks);\n}\n\nfunction parseGitlinkEntry({\n entry,\n repository,\n revision\n}: Readonly<{\n readonly entry: string;\n readonly repository: string;\n readonly revision: string;\n}>): Gitlink \| null {\n const parsed = gitTreeEntryParts(entry);\n if (parsed === undefined) throw invalidTreeOutput(revision, repository);\n const [mode, type, sha] = parsed.metadata;\n if (!validGitTreeMetadata(mode, type, sha)) throw invalidTreeOutput(revision, repository);\n if (mode !== \"160000\") return null;\n if (type !== \"commit\") {\n throw new Error(`invalid gitlink output at ${revision} in ${repository}`);\n }\n return Object.freeze({ path: toSlashPath(parsed.path), sha });\n}\n\nfunction gitTreeEntryParts(entry: string): { metadata: string[]; path: string } \| undefined {\n const separator = entry.indexOf(\"\\t\");\n if (separator < 0) return undefined;\n const metadata = entry.slice(0, separator).split(/\\s+/u);\n const path = entry.slice(separator + 1);\n return metadata.length === 3 && path.length > 0 ? { metadata, path } : undefined;\n}\n\nfunction validGitTreeMetadata(\n mode: string \| undefined,\n type: string \| undefined,\n sha: string \| undefined\n): sha is string {\n return mode !== undefined && type !== undefined && sha !== undefined && isFullGitObjectId(sha);\n}\n\nfunction invalidTreeOutput(revision: string, repository: string): Error {\n return new Error(`invalid git tree output at ${revision} in ${repository}`);\n}\n\nfunction isFullGitObjectId(value: string): boolean {\n return /^(?:[0-9a-f]{40}\|[0-9a-f]{64})$/u.test(value);\n}\n"]}

package/dist/esm/package-checks/project-files/gitlink-worktree.mjs CHANGED Viewed

@@ -2,7 +2,7 @@
 import { realpathSync, statSync } from "node:fs";
 import { resolve } from "node:path";
 import { errorMessage } from "../host-environment/error-message.mjs";
-import { processFailed } from "../host-environment/process/command.mjs";
+import { processFailed } from "../host-environment/process.mjs";
 import { runGit } from "../host-environment/git.mjs";
 export function canonicalRepositoryPath(repository) {
     return realpathSync(resolve(repository));

package/dist/esm/package-checks/project-files/gitlink-worktree.mjs.map CHANGED Viewed

	@@ -1 +1 @@
1	- {"version":3,"file":"gitlink-worktree.mjs","sourceRoot":"","sources":["../../../../src/package-checks/project-files/gitlink-worktree.ts"],"names":[],"mappings":"AAAA,2DAA2D;AAE3D,OAAO,EAAE,YAAY,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AACjD,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAEpC,OAAO,EAAE,YAAY,EAAE,MAAM,sCAAsC,CAAC;AACpE,OAAO,EAAE,aAAa,EAAE,MAAM,~~wCAAwC~~,CAAC;~~AACvE~~,OAAO,EAAE,MAAM,EAAE,MAAM,4BAA4B,CAAC;AAQpD,MAAM,UAAU,uBAAuB,CAAC,UAAkB;IACxD,OAAO,YAAY,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,CAAC;AAC3C,CAAC;AAED,MAAM,UAAU,sBAAsB,CAAC,EACrC,WAAW,EACX,UAAU,EAIV;IACA,MAAM,mBAAmB,GAAG,OAAO,CAAC,UAAU,EAAE,WAAW,CAAC,CAAC;IAC7D,IAAI,4BAAoC,CAAC;IACzC,IAAI,CAAC;QACH,IAAI,CAAC,QAAQ,CAAC,mBAAmB,CAAC,CAAC,WAAW,EAAE;YAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC;QAC7E,4BAA4B,GAAG,uBAAuB,CAAC,mBAAmB,CAAC,CAAC;IAC9E,CAAC;IAAC,OAAO,KAAc,EAAE,CAAC;QACxB,OAAO,WAAW,CAAC,KAAK,CAAC;YACvB,CAAC,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE;YACrB,CAAC,CAAC,iBAAiB,CAAC,wCAAwC,WAAW,EAAE,EAAE,KAAK,CAAC,CAAC;IACtF,CAAC;IAED,MAAM,cAAc,GAAG,MAAM,CAAC;QAC5B,IAAI,EAAE,CAAC,WAAW,EAAE,iBAAiB,CAAC;QACtC,GAAG,EAAE,4BAA4B;KAClC,CAAC,CAAC;IACH,IAAI,aAAa,CAAC,cAAc,CAAC,EAAE,CAAC;QAClC,MAAM,qBAAqB,GACzB,cAAc,CAAC,KAAK,EAAE,OAAO;YAC7B,cAAc,CAAC,MAAM,CAAC,IAAI,EAAE;YAC5B,QAAQ,cAAc,CAAC,MAAM,EAAE,CAAC;QAClC,OAAO;YACL,IAAI,EAAE,mBAAmB;YACzB,KAAK,EAAE,mEAAmE,WAAW,KAAK,qBAAqB,EAAE;SAClH,CAAC;IACJ,CAAC;IAED,MAAM,QAAQ,GAAG,cAAc,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;IAC9C,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,OAAO;YACL,IAAI,EAAE,mBAAmB;YACzB,KAAK,EAAE,2EAA2E,WAAW,EAAE;SAChG,CAAC;IACJ,CAAC;IAED,IAAI,CAAC;QACH,OAAO,uBAAuB,CAAC,OAAO,CAAC,4BAA4B,EAAE,QAAQ,CAAC,CAAC;YAC7E,4BAA4B;YAC5B,CAAC,CAAC,EAAE,IAAI,EAAE,aAAa,EAAE,UAAU,EAAE,4BAA4B,EAAE;YACnE,CAAC,CAAC,EAAE,IAAI,EAAE,iBAAiB,EAAE,CAAC;IAClC,CAAC;IAAC,OAAO,KAAc,EAAE,CAAC;QACxB,OAAO,iBAAiB,CAAC,iDAAiD,WAAW,EAAE,EAAE,KAAK,CAAC,CAAC;IAClG,CAAC;AACH,CAAC;AAED,MAAM,UAAU,mCAAmC,CAAC,EAClD,WAAW,EACX,UAAU,EACV,mBAAmB,EAKnB;IACA,MAAM,UAAU,GAAG,sBAAsB,CAAC,EAAE,WAAW,EAAE,UAAU,EAAE,CAAC,CAAC;IACvE,IAAI,UAAU,CAAC,IAAI,KAAK,mBAAmB,EAAE,CAAC;QAC5C,MAAM,IAAI,KAAK,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC;IACpC,CAAC;IACD,OAAO,UAAU,CAAC,IAAI,KAAK,aAAa,IAAI,CAAC,mBAAmB,CAAC,GAAG,CAAC,UAAU,CAAC,UAAU,CAAC;QACzF,CAAC,CAAC,UAAU,CAAC,UAAU;QACvB,CAAC,CAAC,IAAI,CAAC;AACX,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,EAC9B,UAAU,EACV,mBAAmB,EAInB;IACA,OAAO,IAAI,GAAG,CAAC,CAAC,GAAG,mBAAmB,EAAE,UAAU,CAAC,CAAC,CAAC;AACvD,CAAC;AAED,SAAS,WAAW,CAAC,KAAc;IACjC,MAAM,IAAI,GAAG,KAAK,YAAY,KAAK,IAAI,MAAM,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;IAChF,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,KAAK,SAAS,CAAC;AACjD,CAAC;AAED,SAAS,iBAAiB,CAAC,OAAe,EAAE,KAAc;IACxD,OAAO,EAAE,IAAI,EAAE,mBAAmB,EAAE,KAAK,EAAE,GAAG,OAAO,KAAK,YAAY,CAAC,KAAK,CAAC,EAAE,EAAE,CAAC;AACpF,CAAC","sourcesContent":["/** Canonical Git worktree checks for gitlink traversal. */\n\nimport { realpathSync, statSync } from \"node:fs\";\nimport { resolve } from \"node:path\";\n\nimport { errorMessage } from \"../host-environment/error-message.ts\";\nimport { processFailed } from \"../host-environment/process~~/command~~.ts\";\nimport { runGit } from \"../host-environment/git.ts\";\n\nexport type GitlinkWorktreeInspection =\n \| { readonly kind: \"initialized\"; readonly repository: string }\n \| { readonly kind: \"inspection-failed\"; readonly error: string }\n \| { readonly kind: \"missing\" }\n \| { readonly kind: \"not-independent\" };\n\nexport function canonicalRepositoryPath(repository: string): string {\n return realpathSync(resolve(repository));\n}\n\nexport function inspectGitlinkWorktree({\n gitlinkPath,\n repository\n}: Readonly<{\n readonly gitlinkPath: string;\n readonly repository: string;\n}>): GitlinkWorktreeInspection {\n const submoduleRepository = resolve(repository, gitlinkPath);\n let canonicalSubmoduleRepository: string;\n try {\n if (!statSync(submoduleRepository).isDirectory()) return { kind: \"missing\" };\n canonicalSubmoduleRepository = canonicalRepositoryPath(submoduleRepository);\n } catch (error: unknown) {\n return missingPath(error)\n ? { kind: \"missing\" }\n : inspectionFailure(`could not inspect submodule worktree ${gitlinkPath}`, error);\n }\n\n const topLevelResult = runGit({\n args: [\"rev-parse\", \"--show-toplevel\"],\n cwd: canonicalSubmoduleRepository\n });\n if (processFailed(topLevelResult)) {\n const topLevelFailureDetail =\n topLevelResult.error?.message \|\|\n topLevelResult.stderr.trim() \|\|\n `exit ${topLevelResult.status}`;\n return {\n kind: \"inspection-failed\",\n error: `git rev-parse --show-toplevel failed while inspecting submodule ${gitlinkPath}: ${topLevelFailureDetail}`\n };\n }\n\n const topLevel = topLevelResult.stdout.trim();\n if (!topLevel) {\n return {\n kind: \"inspection-failed\",\n error: `git rev-parse --show-toplevel returned no repository path for submodule ${gitlinkPath}`\n };\n }\n\n try {\n return canonicalRepositoryPath(resolve(canonicalSubmoduleRepository, topLevel)) ===\n canonicalSubmoduleRepository\n ? { kind: \"initialized\", repository: canonicalSubmoduleRepository }\n : { kind: \"not-independent\" };\n } catch (error: unknown) {\n return inspectionFailure(`could not resolve Git top-level for submodule ${gitlinkPath}`, error);\n }\n}\n\nexport function resolveDescendableGitlinkRepository({\n gitlinkPath,\n repository,\n visitedRepositories\n}: Readonly<{\n readonly gitlinkPath: string;\n readonly repository: string;\n readonly visitedRepositories: ReadonlySet<string>;\n}>): string \| null {\n const inspection = inspectGitlinkWorktree({ gitlinkPath, repository });\n if (inspection.kind === \"inspection-failed\") {\n throw new Error(inspection.error);\n }\n return inspection.kind === \"initialized\" && !visitedRepositories.has(inspection.repository)\n ? inspection.repository\n : null;\n}\n\nexport function visitRepository({\n repository,\n visitedRepositories\n}: Readonly<{\n readonly repository: string;\n readonly visitedRepositories: ReadonlySet<string>;\n}>): ReadonlySet<string> {\n return new Set([...visitedRepositories, repository]);\n}\n\nfunction missingPath(error: unknown): boolean {\n const code = error instanceof Error && \"code\" in error ? error.code : undefined;\n return code === \"ENOENT\" \|\| code === \"ENOTDIR\";\n}\n\nfunction inspectionFailure(message: string, error: unknown): GitlinkWorktreeInspection {\n return { kind: \"inspection-failed\", error: `${message}: ${errorMessage(error)}` };\n}\n"]}
1	+ {"version":3,"file":"gitlink-worktree.mjs","sourceRoot":"","sources":["../../../../src/package-checks/project-files/gitlink-worktree.ts"],"names":[],"mappings":"AAAA,2DAA2D;AAE3D,OAAO,EAAE,YAAY,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AACjD,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAEpC,OAAO,EAAE,YAAY,EAAE,MAAM,sCAAsC,CAAC;AACpE,OAAO,EAAE,aAAa,EAAE,MAAM,gCAAgC,CAAC;AAC/D,OAAO,EAAE,MAAM,EAAE,MAAM,4BAA4B,CAAC;AAQpD,MAAM,UAAU,uBAAuB,CAAC,UAAkB;IACxD,OAAO,YAAY,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,CAAC;AAC3C,CAAC;AAED,MAAM,UAAU,sBAAsB,CAAC,EACrC,WAAW,EACX,UAAU,EAIV;IACA,MAAM,mBAAmB,GAAG,OAAO,CAAC,UAAU,EAAE,WAAW,CAAC,CAAC;IAC7D,IAAI,4BAAoC,CAAC;IACzC,IAAI,CAAC;QACH,IAAI,CAAC,QAAQ,CAAC,mBAAmB,CAAC,CAAC,WAAW,EAAE;YAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC;QAC7E,4BAA4B,GAAG,uBAAuB,CAAC,mBAAmB,CAAC,CAAC;IAC9E,CAAC;IAAC,OAAO,KAAc,EAAE,CAAC;QACxB,OAAO,WAAW,CAAC,KAAK,CAAC;YACvB,CAAC,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE;YACrB,CAAC,CAAC,iBAAiB,CAAC,wCAAwC,WAAW,EAAE,EAAE,KAAK,CAAC,CAAC;IACtF,CAAC;IAED,MAAM,cAAc,GAAG,MAAM,CAAC;QAC5B,IAAI,EAAE,CAAC,WAAW,EAAE,iBAAiB,CAAC;QACtC,GAAG,EAAE,4BAA4B;KAClC,CAAC,CAAC;IACH,IAAI,aAAa,CAAC,cAAc,CAAC,EAAE,CAAC;QAClC,MAAM,qBAAqB,GACzB,cAAc,CAAC,KAAK,EAAE,OAAO;YAC7B,cAAc,CAAC,MAAM,CAAC,IAAI,EAAE;YAC5B,QAAQ,cAAc,CAAC,MAAM,EAAE,CAAC;QAClC,OAAO;YACL,IAAI,EAAE,mBAAmB;YACzB,KAAK,EAAE,mEAAmE,WAAW,KAAK,qBAAqB,EAAE;SAClH,CAAC;IACJ,CAAC;IAED,MAAM,QAAQ,GAAG,cAAc,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;IAC9C,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,OAAO;YACL,IAAI,EAAE,mBAAmB;YACzB,KAAK,EAAE,2EAA2E,WAAW,EAAE;SAChG,CAAC;IACJ,CAAC;IAED,IAAI,CAAC;QACH,OAAO,uBAAuB,CAAC,OAAO,CAAC,4BAA4B,EAAE,QAAQ,CAAC,CAAC;YAC7E,4BAA4B;YAC5B,CAAC,CAAC,EAAE,IAAI,EAAE,aAAa,EAAE,UAAU,EAAE,4BAA4B,EAAE;YACnE,CAAC,CAAC,EAAE,IAAI,EAAE,iBAAiB,EAAE,CAAC;IAClC,CAAC;IAAC,OAAO,KAAc,EAAE,CAAC;QACxB,OAAO,iBAAiB,CAAC,iDAAiD,WAAW,EAAE,EAAE,KAAK,CAAC,CAAC;IAClG,CAAC;AACH,CAAC;AAED,MAAM,UAAU,mCAAmC,CAAC,EAClD,WAAW,EACX,UAAU,EACV,mBAAmB,EAKnB;IACA,MAAM,UAAU,GAAG,sBAAsB,CAAC,EAAE,WAAW,EAAE,UAAU,EAAE,CAAC,CAAC;IACvE,IAAI,UAAU,CAAC,IAAI,KAAK,mBAAmB,EAAE,CAAC;QAC5C,MAAM,IAAI,KAAK,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC;IACpC,CAAC;IACD,OAAO,UAAU,CAAC,IAAI,KAAK,aAAa,IAAI,CAAC,mBAAmB,CAAC,GAAG,CAAC,UAAU,CAAC,UAAU,CAAC;QACzF,CAAC,CAAC,UAAU,CAAC,UAAU;QACvB,CAAC,CAAC,IAAI,CAAC;AACX,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,EAC9B,UAAU,EACV,mBAAmB,EAInB;IACA,OAAO,IAAI,GAAG,CAAC,CAAC,GAAG,mBAAmB,EAAE,UAAU,CAAC,CAAC,CAAC;AACvD,CAAC;AAED,SAAS,WAAW,CAAC,KAAc;IACjC,MAAM,IAAI,GAAG,KAAK,YAAY,KAAK,IAAI,MAAM,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;IAChF,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,KAAK,SAAS,CAAC;AACjD,CAAC;AAED,SAAS,iBAAiB,CAAC,OAAe,EAAE,KAAc;IACxD,OAAO,EAAE,IAAI,EAAE,mBAAmB,EAAE,KAAK,EAAE,GAAG,OAAO,KAAK,YAAY,CAAC,KAAK,CAAC,EAAE,EAAE,CAAC;AACpF,CAAC","sourcesContent":["/** Canonical Git worktree checks for gitlink traversal. */\n\nimport { realpathSync, statSync } from \"node:fs\";\nimport { resolve } from \"node:path\";\n\nimport { errorMessage } from \"../host-environment/error-message.ts\";\nimport { processFailed } from \"../host-environment/process.ts\";\nimport { runGit } from \"../host-environment/git.ts\";\n\nexport type GitlinkWorktreeInspection =\n \| { readonly kind: \"initialized\"; readonly repository: string }\n \| { readonly kind: \"inspection-failed\"; readonly error: string }\n \| { readonly kind: \"missing\" }\n \| { readonly kind: \"not-independent\" };\n\nexport function canonicalRepositoryPath(repository: string): string {\n return realpathSync(resolve(repository));\n}\n\nexport function inspectGitlinkWorktree({\n gitlinkPath,\n repository\n}: Readonly<{\n readonly gitlinkPath: string;\n readonly repository: string;\n}>): GitlinkWorktreeInspection {\n const submoduleRepository = resolve(repository, gitlinkPath);\n let canonicalSubmoduleRepository: string;\n try {\n if (!statSync(submoduleRepository).isDirectory()) return { kind: \"missing\" };\n canonicalSubmoduleRepository = canonicalRepositoryPath(submoduleRepository);\n } catch (error: unknown) {\n return missingPath(error)\n ? { kind: \"missing\" }\n : inspectionFailure(`could not inspect submodule worktree ${gitlinkPath}`, error);\n }\n\n const topLevelResult = runGit({\n args: [\"rev-parse\", \"--show-toplevel\"],\n cwd: canonicalSubmoduleRepository\n });\n if (processFailed(topLevelResult)) {\n const topLevelFailureDetail =\n topLevelResult.error?.message \|\|\n topLevelResult.stderr.trim() \|\|\n `exit ${topLevelResult.status}`;\n return {\n kind: \"inspection-failed\",\n error: `git rev-parse --show-toplevel failed while inspecting submodule ${gitlinkPath}: ${topLevelFailureDetail}`\n };\n }\n\n const topLevel = topLevelResult.stdout.trim();\n if (!topLevel) {\n return {\n kind: \"inspection-failed\",\n error: `git rev-parse --show-toplevel returned no repository path for submodule ${gitlinkPath}`\n };\n }\n\n try {\n return canonicalRepositoryPath(resolve(canonicalSubmoduleRepository, topLevel)) ===\n canonicalSubmoduleRepository\n ? { kind: \"initialized\", repository: canonicalSubmoduleRepository }\n : { kind: \"not-independent\" };\n } catch (error: unknown) {\n return inspectionFailure(`could not resolve Git top-level for submodule ${gitlinkPath}`, error);\n }\n}\n\nexport function resolveDescendableGitlinkRepository({\n gitlinkPath,\n repository,\n visitedRepositories\n}: Readonly<{\n readonly gitlinkPath: string;\n readonly repository: string;\n readonly visitedRepositories: ReadonlySet<string>;\n}>): string \| null {\n const inspection = inspectGitlinkWorktree({ gitlinkPath, repository });\n if (inspection.kind === \"inspection-failed\") {\n throw new Error(inspection.error);\n }\n return inspection.kind === \"initialized\" && !visitedRepositories.has(inspection.repository)\n ? inspection.repository\n : null;\n}\n\nexport function visitRepository({\n repository,\n visitedRepositories\n}: Readonly<{\n readonly repository: string;\n readonly visitedRepositories: ReadonlySet<string>;\n}>): ReadonlySet<string> {\n return new Set([...visitedRepositories, repository]);\n}\n\nfunction missingPath(error: unknown): boolean {\n const code = error instanceof Error && \"code\" in error ? error.code : undefined;\n return code === \"ENOENT\" \|\| code === \"ENOTDIR\";\n}\n\nfunction inspectionFailure(message: string, error: unknown): GitlinkWorktreeInspection {\n return { kind: \"inspection-failed\", error: `${message}: ${errorMessage(error)}` };\n}\n"]}

package/dist/esm/package-checks/project-files/public-collection.mjs ADDED Viewed

@@ -0,0 +1,56 @@
+/** Public validation and immutable snapshot boundary for one project-file selection. */
+import { resolve } from "node:path";
+import { snapshotClosedArray, snapshotExactClosedRecord } from "../../data-boundary/closed-values.mjs";
+import { collectProjectFiles as collectTrustedProjectFiles } from "./collection.mjs";
+import { PROJECT_FILE_SOURCES } from "./configuration.mjs";
+/**
+ * 按一份完整的显式 selection 同步收集 project-root-relative slash paths。
+ *
+ * 成功结果是冻结的稳定去重排序快照，空数组表示没有匹配路径。非法参数同步抛出
+ * `TypeError`；选定 filesystem 或 Git source 的收集失败继续抛出普通 `Error`，不会回退来源。
+ */
+export function collectProjectFiles(authoredOptions) {
+    const options = parseOptions(authoredOptions);
+    return Object.freeze([...collectTrustedProjectFiles(options.projectRoot, options.selection)]);
+}
+function parseOptions(value) {
+    const options = snapshotExactClosedRecord(value, ["projectRoot", "selection"]);
+    if (options === undefined) {
+        throw new TypeError("collectProjectFiles requires an options record with exactly projectRoot and selection");
+    }
+    const projectRoot = parseProjectRoot(options.projectRoot);
+    if (projectRoot === undefined) {
+        throw new TypeError("collectProjectFiles projectRoot must be a non-empty string without U+0000");
+    }
+    const selection = parseSelection(options.selection);
+    if (selection === undefined) {
+        throw new TypeError("collectProjectFiles selection must be a complete record with source, include, and exclude");
+    }
+    return Object.freeze({ projectRoot, selection });
+}
+function parseProjectRoot(value) {
+    return typeof value === "string" && value.length > 0 && !value.includes("\0")
+        ? resolve(value)
+        : undefined;
+}
+function parseSelection(value) {
+    const selection = snapshotExactClosedRecord(value, ["source", "include", "exclude"]);
+    if (selection === undefined)
+        return undefined;
+    const include = snapshotStringArray(selection.include);
+    const exclude = snapshotStringArray(selection.exclude);
+    if (include === undefined || exclude === undefined || !isProjectFileSource(selection.source)) {
+        return undefined;
+    }
+    return Object.freeze({ exclude, include, source: selection.source });
+}
+function snapshotStringArray(value) {
+    const items = snapshotClosedArray(value);
+    return items !== undefined && items.every((item) => typeof item === "string")
+        ? Object.freeze([...items])
+        : undefined;
+}
+function isProjectFileSource(value) {
+    return PROJECT_FILE_SOURCES.some((source) => source === value);
+}
+//# sourceMappingURL=public-collection.mjs.map

package/dist/esm/package-checks/project-files/public-collection.mjs.map ADDED Viewed

@@ -0,0 +1 @@

+ {"version":3,"file":"public-collection.mjs","sourceRoot":"","sources":["../../../../src/package-checks/project-files/public-collection.ts"],"names":[],"mappings":"AAAA,wFAAwF;AAExF,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAEpC,OAAO,EACL,mBAAmB,EACnB,yBAAyB,EAC1B,MAAM,sCAAsC,CAAC;AAC9C,OAAO,EAAE,mBAAmB,IAAI,0BAA0B,EAAE,MAAM,iBAAiB,CAAC;AACpF,OAAO,EAAE,oBAAoB,EAAE,MAAM,oBAAoB,CAAC;AAgB1D;;;;;GAKG;AACH,MAAM,UAAU,mBAAmB,CACjC,eAA2C;IAE3C,MAAM,OAAO,GAAG,YAAY,CAAC,eAAe,CAAC,CAAC;IAC9C,OAAO,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,0BAA0B,CAAC,OAAO,CAAC,WAAW,EAAE,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;AAChG,CAAC;AAED,SAAS,YAAY,CAAC,KAAc;IAClC,MAAM,OAAO,GAAG,yBAAyB,CAAC,KAAK,EAAE,CAAC,aAAa,EAAE,WAAW,CAAC,CAAC,CAAC;IAC/E,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;QAC1B,MAAM,IAAI,SAAS,CACjB,uFAAuF,CACxF,CAAC;IACJ,CAAC;IAED,MAAM,WAAW,GAAG,gBAAgB,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;IAC1D,IAAI,WAAW,KAAK,SAAS,EAAE,CAAC;QAC9B,MAAM,IAAI,SAAS,CACjB,2EAA2E,CAC5E,CAAC;IACJ,CAAC;IAED,MAAM,SAAS,GAAG,cAAc,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;IACpD,IAAI,SAAS,KAAK,SAAS,EAAE,CAAC;QAC5B,MAAM,IAAI,SAAS,CACjB,2FAA2F,CAC5F,CAAC;IACJ,CAAC;IAED,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,WAAW,EAAE,SAAS,EAAE,CAAC,CAAC;AACnD,CAAC;AAED,SAAS,gBAAgB,CAAC,KAAc;IACtC,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC;QAC3E,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC;QAChB,CAAC,CAAC,SAAS,CAAC;AAChB,CAAC;AAED,SAAS,cAAc,CAAC,KAAc;IACpC,MAAM,SAAS,GAAG,yBAAyB,CAAC,KAAK,EAAE,CAAC,QAAQ,EAAE,SAAS,EAAE,SAAS,CAAC,CAAC,CAAC;IACrF,IAAI,SAAS,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IAE9C,MAAM,OAAO,GAAG,mBAAmB,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;IACvD,MAAM,OAAO,GAAG,mBAAmB,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;IACvD,IAAI,OAAO,KAAK,SAAS,IAAI,OAAO,KAAK,SAAS,IAAI,CAAC,mBAAmB,CAAC,SAAS,CAAC,MAAM,CAAC,EAAE,CAAC;QAC7F,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,SAAS,CAAC,MAAM,EAAE,CAAC,CAAC;AACvE,CAAC;AAED,SAAS,mBAAmB,CAAC,KAAc;IACzC,MAAM,KAAK,GAAG,mBAAmB,CAAC,KAAK,CAAC,CAAC;IACzC,OAAO,KAAK,KAAK,SAAS,IAAI,KAAK,CAAC,KAAK,CAAC,CAAC,IAAI,EAAkB,EAAE,CAAC,OAAO,IAAI,KAAK,QAAQ,CAAC;QAC3F,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,KAAK,CAAC,CAAC;QAC3B,CAAC,CAAC,SAAS,CAAC;AAChB,CAAC;AAED,SAAS,mBAAmB,CAAC,KAAc;IACzC,OAAO,oBAAoB,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,KAAK,KAAK,CAAC,CAAC;AACjE,CAAC","sourcesContent":["/** Public validation and immutable snapshot boundary for one project-file selection. */\n\nimport { resolve } from \"node:path\";\n\nimport {\n snapshotClosedArray,\n snapshotExactClosedRecord\n} from \"../../data-boundary/closed-values.ts\";\nimport { collectProjectFiles as collectTrustedProjectFiles } from \"./collection.ts\";\nimport { PROJECT_FILE_SOURCES } from \"./configuration.ts\";\nimport type { ProjectFileSelection, ProjectFileSource } from \"./configuration.ts\";\n\n/** 调用方请求一次项目文件收集时必须完整提供的 root 与 selection。 */\nexport interface CollectProjectFilesOptions {\n /** 显式 project root；relative path 相对当前工作目录解析，不能为空或含 U+0000。 */\n readonly projectRoot: string;\n /** 完整的显式 selection；本工具不推断任何 Check 默认值。 */\n readonly selection: ProjectFileSelection;\n}\n\ntype ResolvedCollectProjectFilesOptions = Readonly<{\n readonly projectRoot: string;\n readonly selection: ProjectFileSelection;\n}>;\n\n/**\n * 按一份完整的显式 selection 同步收集 project-root-relative slash paths。\n *\n * 成功结果是冻结的稳定去重排序快照，空数组表示没有匹配路径。非法参数同步抛出\n * `TypeError`；选定 filesystem 或 Git source 的收集失败继续抛出普通 `Error`，不会回退来源。\n */\nexport function collectProjectFiles(\n authoredOptions: CollectProjectFilesOptions\n): readonly string[] {\n const options = parseOptions(authoredOptions);\n return Object.freeze([...collectTrustedProjectFiles(options.projectRoot, options.selection)]);\n}\n\nfunction parseOptions(value: unknown): ResolvedCollectProjectFilesOptions {\n const options = snapshotExactClosedRecord(value, [\"projectRoot\", \"selection\"]);\n if (options === undefined) {\n throw new TypeError(\n \"collectProjectFiles requires an options record with exactly projectRoot and selection\"\n );\n }\n\n const projectRoot = parseProjectRoot(options.projectRoot);\n if (projectRoot === undefined) {\n throw new TypeError(\n \"collectProjectFiles projectRoot must be a non-empty string without U+0000\"\n );\n }\n\n const selection = parseSelection(options.selection);\n if (selection === undefined) {\n throw new TypeError(\n \"collectProjectFiles selection must be a complete record with source, include, and exclude\"\n );\n }\n\n return Object.freeze({ projectRoot, selection });\n}\n\nfunction parseProjectRoot(value: unknown): string | undefined {\n return typeof value === \"string\" && value.length > 0 && !value.includes(\"\\0\")\n ? resolve(value)\n : undefined;\n}\n\nfunction parseSelection(value: unknown): ProjectFileSelection | undefined {\n const selection = snapshotExactClosedRecord(value, [\"source\", \"include\", \"exclude\"]);\n if (selection === undefined) return undefined;\n\n const include = snapshotStringArray(selection.include);\n const exclude = snapshotStringArray(selection.exclude);\n if (include === undefined || exclude === undefined || !isProjectFileSource(selection.source)) {\n return undefined;\n }\n\n return Object.freeze({ exclude, include, source: selection.source });\n}\n\nfunction snapshotStringArray(value: unknown): readonly string[] | undefined {\n const items = snapshotClosedArray(value);\n return items !== undefined && items.every((item): item is string => typeof item === \"string\")\n ? Object.freeze([...items])\n : undefined;\n}\n\nfunction isProjectFileSource(value: unknown): value is ProjectFileSource {\n return PROJECT_FILE_SOURCES.some((source) => source === value);\n}\n"]}

package/dist/esm/package-checks/project-files/revision-worktree-files.mjs CHANGED Viewed

@@ -1,5 +1,5 @@
 /** Enumerates files from initialized, non-cyclic submodule working trees. */
-import { processFailed } from "../host-environment/process/command.mjs";
+import { processFailed } from "../host-environment/process.mjs";
 import { runGit, splitNulDelimitedGitFileList } from "../host-environment/git.mjs";
 import { canonicalRepositoryPath, resolveDescendableGitlinkRepository, visitRepository } from "./gitlink-worktree.mjs";
 import { gitlinksAtRevision } from "./gitlink-revision.mjs";

package/dist/esm/package-checks/project-files/revision-worktree-files.mjs.map CHANGED Viewed

	@@ -1 +1 @@
1	- {"version":3,"file":"revision-worktree-files.mjs","sourceRoot":"","sources":["../../../../src/package-checks/project-files/revision-worktree-files.ts"],"names":[],"mappings":"AAAA,6EAA6E;AAE7E,OAAO,EAAE,aAAa,EAAE,MAAM,~~wCAAwC~~,CAAC;~~AACvE~~,OAAO,EAAE,MAAM,EAAE,4BAA4B,EAAE,MAAM,4BAA4B,CAAC;AAClF,OAAO,EACL,uBAAuB,EACvB,mCAAmC,EACnC,eAAe,EAChB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EAAE,kBAAkB,EAAE,MAAM,uBAAuB,CAAC;AAC3D,OAAO,EACL,SAAS,EACT,iBAAiB,EACjB,eAAe,EACf,iBAAiB,EAClB,MAAM,qBAAqB,CAAC;AAE7B,MAAM,UAAU,6BAA6B,CAAC,EAC5C,UAAU,EACV,cAAc,EAId;IACA,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,MAAM,mBAAmB,GAAG,IAAI,GAAG,CAAC,CAAC,uBAAuB,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;IAC3E,MAAM,QAAQ,GAAG,gBAAgB,CAAC,UAAU,CAAC,CAAC;IAC9C,IAAI,QAAQ,KAAK,IAAI;QAAE,OAAO,KAAK,CAAC;IAEpC,KAAK,MAAM,OAAO,IAAI,kBAAkB,CAAC,EAAE,UAAU,EAAE,QAAQ,EAAE,CAAC,EAAE,CAAC;QACnE,MAAM,mBAAmB,GAAG,mCAAmC,CAAC;YAC9D,WAAW,EAAE,OAAO,CAAC,IAAI;YACzB,UAAU;YACV,mBAAmB;SACpB,CAAC,CAAC;QACH,IAAI,CAAC,mBAAmB;YAAE,SAAS;QACnC,KAAK,CAAC,IAAI,CACR,GAAG,oBAAoB,CAAC;YACtB,MAAM,EAAE,OAAO,CAAC,IAAI;YACpB,UAAU,EAAE,mBAAmB;YAC/B,cAAc;YACd,mBAAmB,EAAE,eAAe,CAAC;gBACnC,UAAU,EAAE,mBAAmB;gBAC/B,mBAAmB;aACpB,CAAC;SACH,CAAC,CACH,CAAC;IACJ,CAAC;IACD,OAAO,iBAAiB,CAAC,KAAK,CAAC,CAAC;AAClC,CAAC;AAED,SAAS,oBAAoB,CAAC,EAC5B,MAAM,EACN,UAAU,EACV,cAAc,EACd,mBAAmB,EAMnB;IACA,MAAM,MAAM,GAAG,MAAM,CAAC;QACpB,IAAI,EAAE,CAAC,UAAU,EAAE,IAAI,EAAE,UAAU,EAAE,UAAU,EAAE,oBAAoB,EAAE,IAAI,CAAC;QAC5E,GAAG,EAAE,UAAU;KAChB,CAAC,CAAC;IACH,IAAI,aAAa,CAAC,MAAM,CAAC,EAAE,CAAC;QAC1B,MAAM,MAAM,GACV,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE;YACpB,MAAM,CAAC,KAAK,EAAE,OAAO;YACrB,CAAC,MAAM,CAAC,MAAM,KAAK,IAAI,CAAC,CAAC,CAAC,eAAe,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,UAAU,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC;QACxF,MAAM,IAAI,KAAK,CAAC,6CAA6C,UAAU,KAAK,MAAM,EAAE,CAAC,CAAC;IACxF,CAAC;IAED,MAAM,KAAK,GAAG,eAAe,CAAC;QAC5B,KAAK,EAAE,4BAA4B,CAAC,MAAM,CAAC,MAAM,CAAC;QAClD,MAAM;QACN,cAAc;KACf,CAAC,CAAC;IACH,MAAM,QAAQ,GAAG,gBAAgB,CAAC,UAAU,CAAC,CAAC;IAC9C,IAAI,QAAQ,KAAK,IAAI;QAAE,OAAO,iBAAiB,CAAC,KAAK,CAAC,CAAC;IACvD,KAAK,CAAC,IAAI,CACR,GAAG,0BAA0B,CAAC;QAC5B,MAAM;QACN,UAAU;QACV,QAAQ;QACR,cAAc;QACd,mBAAmB;KACpB,CAAC,CACH,CAAC;IACF,OAAO,iBAAiB,CAAC,KAAK,CAAC,CAAC;AAClC,CAAC;AAED,SAAS,0BAA0B,CAAC,EAClC,MAAM,EACN,UAAU,EACV,QAAQ,EACR,cAAc,EACd,mBAAmB,EAOnB;IACA,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,KAAK,MAAM,OAAO,IAAI,kBAAkB,CAAC,EAAE,UAAU,EAAE,QAAQ,EAAE,CAAC,EAAE,CAAC;QACnE,MAAM,mBAAmB,GAAG,mCAAmC,CAAC;YAC9D,WAAW,EAAE,OAAO,CAAC,IAAI;YACzB,UAAU;YACV,mBAAmB;SACpB,CAAC,CAAC;QACH,IAAI,CAAC,mBAAmB;YAAE,SAAS;QACnC,KAAK,CAAC,IAAI,CACR,GAAG,oBAAoB,CAAC;YACtB,MAAM,EAAE,SAAS,CAAC,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,MAAM,EAAE,CAAC;YACjD,UAAU,EAAE,mBAAmB;YAC/B,cAAc;YACd,mBAAmB,EAAE,eAAe,CAAC;gBACnC,UAAU,EAAE,mBAAmB;gBAC/B,mBAAmB;aACpB,CAAC;SACH,CAAC,CACH,CAAC;IACJ,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,gBAAgB,CAAC,UAAkB;IAC1C,MAAM,MAAM,GAAG,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,WAAW,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,CAAC,EAAE,GAAG,EAAE,UAAU,EAAE,CAAC,CAAC;IAC/F,IAAI,CAAC,aAAa,CAAC,MAAM,CAAC,EAAE,CAAC;QAC3B,MAAM,QAAQ,GAAG,iBAAiB,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QAClD,IAAI,QAAQ,KAAK,IAAI;YAAE,OAAO,QAAQ,CAAC;QACvC,MAAM,IAAI,KAAK,CAAC,4DAA4D,UAAU,EAAE,CAAC,CAAC;IAC5F,CAAC;IACD,MAAM,gBAAgB,GACpB,MAAM,CAAC,KAAK,KAAK,SAAS;QAC1B,MAAM,CAAC,MAAM,KAAK,IAAI;QACtB,MAAM,CAAC,MAAM,KAAK,CAAC;QACnB,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,KAAK,EAAE,CAAC;IAC9B,IAAI,gBAAgB;QAAE,OAAO,IAAI,CAAC;IAClC,MAAM,MAAM,GACV,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE;QACpB,MAAM,CAAC,KAAK,EAAE,OAAO;QACrB,CAAC,MAAM,CAAC,MAAM,KAAK,IAAI,CAAC,CAAC,CAAC,eAAe,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,UAAU,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC;IACxF,MAAM,IAAI,KAAK,CAAC,8CAA8C,UAAU,KAAK,MAAM,EAAE,CAAC,CAAC;AACzF,CAAC","sourcesContent":["/** Enumerates files from initialized, non-cyclic submodule working trees. */\n\nimport { processFailed } from \"../host-environment/process~~/command~~.ts\";\nimport { runGit, splitNulDelimitedGitFileList } from \"../host-environment/git.ts\";\nimport {\n canonicalRepositoryPath,\n resolveDescendableGitlinkRepository,\n visitRepository\n} from \"./gitlink-worktree.ts\";\nimport { gitlinksAtRevision } from \"./gitlink-revision.ts\";\nimport {\n joinSlash,\n nonEmptyGitOutput,\n prefixAndFilter,\n uniqueSortedPaths\n} from \"./revision-paths.ts\";\n\nexport function collectSubmoduleWorktreeFiles({\n repository,\n scanInputPaths\n}: Readonly<{\n readonly repository: string;\n readonly scanInputPaths: readonly string[];\n}>): string[] {\n const files: string[] = [];\n const visitedRepositories = new Set([canonicalRepositoryPath(repository)]);\n const revision = worktreeRevision(repository);\n if (revision === null) return files;\n\n for (const gitlink of gitlinksAtRevision({ repository, revision })) {\n const submoduleRepository = resolveDescendableGitlinkRepository({\n gitlinkPath: gitlink.path,\n repository,\n visitedRepositories\n });\n if (!submoduleRepository) continue;\n files.push(\n ...collectWorktreeFiles({\n prefix: gitlink.path,\n repository: submoduleRepository,\n scanInputPaths,\n visitedRepositories: visitRepository({\n repository: submoduleRepository,\n visitedRepositories\n })\n })\n );\n }\n return uniqueSortedPaths(files);\n}\n\nfunction collectWorktreeFiles({\n prefix,\n repository,\n scanInputPaths,\n visitedRepositories\n}: Readonly<{\n readonly prefix: string;\n readonly repository: string;\n readonly scanInputPaths: readonly string[];\n readonly visitedRepositories: ReadonlySet<string>;\n}>): string[] {\n const result = runGit({\n args: [\"ls-files\", \"-z\", \"--cached\", \"--others\", \"--exclude-standard\", \"--\"],\n cwd: repository\n });\n if (processFailed(result)) {\n const detail =\n result.stderr.trim() \|\|\n result.error?.message \|\|\n (result.signal === null ? `exit status ${result.status}` : `signal ${result.signal}`);\n throw new Error(`could not enumerate git-worktree files in ${repository}: ${detail}`);\n }\n\n const files = prefixAndFilter({\n files: splitNulDelimitedGitFileList(result.stdout),\n prefix,\n scanInputPaths\n });\n const revision = worktreeRevision(repository);\n if (revision === null) return uniqueSortedPaths(files);\n files.push(\n ...collectNestedWorktreeFiles({\n prefix,\n repository,\n revision,\n scanInputPaths,\n visitedRepositories\n })\n );\n return uniqueSortedPaths(files);\n}\n\nfunction collectNestedWorktreeFiles({\n prefix,\n repository,\n revision,\n scanInputPaths,\n visitedRepositories\n}: Readonly<{\n readonly prefix: string;\n readonly repository: string;\n readonly revision: string;\n readonly scanInputPaths: readonly string[];\n readonly visitedRepositories: ReadonlySet<string>;\n}>): string[] {\n const files: string[] = [];\n for (const gitlink of gitlinksAtRevision({ repository, revision })) {\n const submoduleRepository = resolveDescendableGitlinkRepository({\n gitlinkPath: gitlink.path,\n repository,\n visitedRepositories\n });\n if (!submoduleRepository) continue;\n files.push(\n ...collectWorktreeFiles({\n prefix: joinSlash({ path: gitlink.path, prefix }),\n repository: submoduleRepository,\n scanInputPaths,\n visitedRepositories: visitRepository({\n repository: submoduleRepository,\n visitedRepositories\n })\n })\n );\n }\n return files;\n}\n\nfunction worktreeRevision(repository: string): string \| null {\n const result = runGit({ args: [\"rev-parse\", \"--verify\", \"--quiet\", \"HEAD\"], cwd: repository });\n if (!processFailed(result)) {\n const revision = nonEmptyGitOutput(result.stdout);\n if (revision !== null) return revision;\n throw new Error(`git-worktree revision inspection returned no revision in ${repository}`);\n }\n const headDoesNotExist =\n result.error === undefined &&\n result.signal === null &&\n result.status === 1 &&\n result.stderr.trim() === \"\";\n if (headDoesNotExist) return null;\n const detail =\n result.stderr.trim() \|\|\n result.error?.message \|\|\n (result.signal === null ? `exit status ${result.status}` : `signal ${result.signal}`);\n throw new Error(`could not inspect git-worktree revision in ${repository}: ${detail}`);\n}\n"]}
1	+ {"version":3,"file":"revision-worktree-files.mjs","sourceRoot":"","sources":["../../../../src/package-checks/project-files/revision-worktree-files.ts"],"names":[],"mappings":"AAAA,6EAA6E;AAE7E,OAAO,EAAE,aAAa,EAAE,MAAM,gCAAgC,CAAC;AAC/D,OAAO,EAAE,MAAM,EAAE,4BAA4B,EAAE,MAAM,4BAA4B,CAAC;AAClF,OAAO,EACL,uBAAuB,EACvB,mCAAmC,EACnC,eAAe,EAChB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EAAE,kBAAkB,EAAE,MAAM,uBAAuB,CAAC;AAC3D,OAAO,EACL,SAAS,EACT,iBAAiB,EACjB,eAAe,EACf,iBAAiB,EAClB,MAAM,qBAAqB,CAAC;AAE7B,MAAM,UAAU,6BAA6B,CAAC,EAC5C,UAAU,EACV,cAAc,EAId;IACA,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,MAAM,mBAAmB,GAAG,IAAI,GAAG,CAAC,CAAC,uBAAuB,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;IAC3E,MAAM,QAAQ,GAAG,gBAAgB,CAAC,UAAU,CAAC,CAAC;IAC9C,IAAI,QAAQ,KAAK,IAAI;QAAE,OAAO,KAAK,CAAC;IAEpC,KAAK,MAAM,OAAO,IAAI,kBAAkB,CAAC,EAAE,UAAU,EAAE,QAAQ,EAAE,CAAC,EAAE,CAAC;QACnE,MAAM,mBAAmB,GAAG,mCAAmC,CAAC;YAC9D,WAAW,EAAE,OAAO,CAAC,IAAI;YACzB,UAAU;YACV,mBAAmB;SACpB,CAAC,CAAC;QACH,IAAI,CAAC,mBAAmB;YAAE,SAAS;QACnC,KAAK,CAAC,IAAI,CACR,GAAG,oBAAoB,CAAC;YACtB,MAAM,EAAE,OAAO,CAAC,IAAI;YACpB,UAAU,EAAE,mBAAmB;YAC/B,cAAc;YACd,mBAAmB,EAAE,eAAe,CAAC;gBACnC,UAAU,EAAE,mBAAmB;gBAC/B,mBAAmB;aACpB,CAAC;SACH,CAAC,CACH,CAAC;IACJ,CAAC;IACD,OAAO,iBAAiB,CAAC,KAAK,CAAC,CAAC;AAClC,CAAC;AAED,SAAS,oBAAoB,CAAC,EAC5B,MAAM,EACN,UAAU,EACV,cAAc,EACd,mBAAmB,EAMnB;IACA,MAAM,MAAM,GAAG,MAAM,CAAC;QACpB,IAAI,EAAE,CAAC,UAAU,EAAE,IAAI,EAAE,UAAU,EAAE,UAAU,EAAE,oBAAoB,EAAE,IAAI,CAAC;QAC5E,GAAG,EAAE,UAAU;KAChB,CAAC,CAAC;IACH,IAAI,aAAa,CAAC,MAAM,CAAC,EAAE,CAAC;QAC1B,MAAM,MAAM,GACV,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE;YACpB,MAAM,CAAC,KAAK,EAAE,OAAO;YACrB,CAAC,MAAM,CAAC,MAAM,KAAK,IAAI,CAAC,CAAC,CAAC,eAAe,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,UAAU,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC;QACxF,MAAM,IAAI,KAAK,CAAC,6CAA6C,UAAU,KAAK,MAAM,EAAE,CAAC,CAAC;IACxF,CAAC;IAED,MAAM,KAAK,GAAG,eAAe,CAAC;QAC5B,KAAK,EAAE,4BAA4B,CAAC,MAAM,CAAC,MAAM,CAAC;QAClD,MAAM;QACN,cAAc;KACf,CAAC,CAAC;IACH,MAAM,QAAQ,GAAG,gBAAgB,CAAC,UAAU,CAAC,CAAC;IAC9C,IAAI,QAAQ,KAAK,IAAI;QAAE,OAAO,iBAAiB,CAAC,KAAK,CAAC,CAAC;IACvD,KAAK,CAAC,IAAI,CACR,GAAG,0BAA0B,CAAC;QAC5B,MAAM;QACN,UAAU;QACV,QAAQ;QACR,cAAc;QACd,mBAAmB;KACpB,CAAC,CACH,CAAC;IACF,OAAO,iBAAiB,CAAC,KAAK,CAAC,CAAC;AAClC,CAAC;AAED,SAAS,0BAA0B,CAAC,EAClC,MAAM,EACN,UAAU,EACV,QAAQ,EACR,cAAc,EACd,mBAAmB,EAOnB;IACA,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,KAAK,MAAM,OAAO,IAAI,kBAAkB,CAAC,EAAE,UAAU,EAAE,QAAQ,EAAE,CAAC,EAAE,CAAC;QACnE,MAAM,mBAAmB,GAAG,mCAAmC,CAAC;YAC9D,WAAW,EAAE,OAAO,CAAC,IAAI;YACzB,UAAU;YACV,mBAAmB;SACpB,CAAC,CAAC;QACH,IAAI,CAAC,mBAAmB;YAAE,SAAS;QACnC,KAAK,CAAC,IAAI,CACR,GAAG,oBAAoB,CAAC;YACtB,MAAM,EAAE,SAAS,CAAC,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,MAAM,EAAE,CAAC;YACjD,UAAU,EAAE,mBAAmB;YAC/B,cAAc;YACd,mBAAmB,EAAE,eAAe,CAAC;gBACnC,UAAU,EAAE,mBAAmB;gBAC/B,mBAAmB;aACpB,CAAC;SACH,CAAC,CACH,CAAC;IACJ,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,gBAAgB,CAAC,UAAkB;IAC1C,MAAM,MAAM,GAAG,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,WAAW,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,CAAC,EAAE,GAAG,EAAE,UAAU,EAAE,CAAC,CAAC;IAC/F,IAAI,CAAC,aAAa,CAAC,MAAM,CAAC,EAAE,CAAC;QAC3B,MAAM,QAAQ,GAAG,iBAAiB,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QAClD,IAAI,QAAQ,KAAK,IAAI;YAAE,OAAO,QAAQ,CAAC;QACvC,MAAM,IAAI,KAAK,CAAC,4DAA4D,UAAU,EAAE,CAAC,CAAC;IAC5F,CAAC;IACD,MAAM,gBAAgB,GACpB,MAAM,CAAC,KAAK,KAAK,SAAS;QAC1B,MAAM,CAAC,MAAM,KAAK,IAAI;QACtB,MAAM,CAAC,MAAM,KAAK,CAAC;QACnB,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,KAAK,EAAE,CAAC;IAC9B,IAAI,gBAAgB;QAAE,OAAO,IAAI,CAAC;IAClC,MAAM,MAAM,GACV,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE;QACpB,MAAM,CAAC,KAAK,EAAE,OAAO;QACrB,CAAC,MAAM,CAAC,MAAM,KAAK,IAAI,CAAC,CAAC,CAAC,eAAe,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,UAAU,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC;IACxF,MAAM,IAAI,KAAK,CAAC,8CAA8C,UAAU,KAAK,MAAM,EAAE,CAAC,CAAC;AACzF,CAAC","sourcesContent":["/** Enumerates files from initialized, non-cyclic submodule working trees. */\n\nimport { processFailed } from \"../host-environment/process.ts\";\nimport { runGit, splitNulDelimitedGitFileList } from \"../host-environment/git.ts\";\nimport {\n canonicalRepositoryPath,\n resolveDescendableGitlinkRepository,\n visitRepository\n} from \"./gitlink-worktree.ts\";\nimport { gitlinksAtRevision } from \"./gitlink-revision.ts\";\nimport {\n joinSlash,\n nonEmptyGitOutput,\n prefixAndFilter,\n uniqueSortedPaths\n} from \"./revision-paths.ts\";\n\nexport function collectSubmoduleWorktreeFiles({\n repository,\n scanInputPaths\n}: Readonly<{\n readonly repository: string;\n readonly scanInputPaths: readonly string[];\n}>): string[] {\n const files: string[] = [];\n const visitedRepositories = new Set([canonicalRepositoryPath(repository)]);\n const revision = worktreeRevision(repository);\n if (revision === null) return files;\n\n for (const gitlink of gitlinksAtRevision({ repository, revision })) {\n const submoduleRepository = resolveDescendableGitlinkRepository({\n gitlinkPath: gitlink.path,\n repository,\n visitedRepositories\n });\n if (!submoduleRepository) continue;\n files.push(\n ...collectWorktreeFiles({\n prefix: gitlink.path,\n repository: submoduleRepository,\n scanInputPaths,\n visitedRepositories: visitRepository({\n repository: submoduleRepository,\n visitedRepositories\n })\n })\n );\n }\n return uniqueSortedPaths(files);\n}\n\nfunction collectWorktreeFiles({\n prefix,\n repository,\n scanInputPaths,\n visitedRepositories\n}: Readonly<{\n readonly prefix: string;\n readonly repository: string;\n readonly scanInputPaths: readonly string[];\n readonly visitedRepositories: ReadonlySet<string>;\n}>): string[] {\n const result = runGit({\n args: [\"ls-files\", \"-z\", \"--cached\", \"--others\", \"--exclude-standard\", \"--\"],\n cwd: repository\n });\n if (processFailed(result)) {\n const detail =\n result.stderr.trim() \|\|\n result.error?.message \|\|\n (result.signal === null ? `exit status ${result.status}` : `signal ${result.signal}`);\n throw new Error(`could not enumerate git-worktree files in ${repository}: ${detail}`);\n }\n\n const files = prefixAndFilter({\n files: splitNulDelimitedGitFileList(result.stdout),\n prefix,\n scanInputPaths\n });\n const revision = worktreeRevision(repository);\n if (revision === null) return uniqueSortedPaths(files);\n files.push(\n ...collectNestedWorktreeFiles({\n prefix,\n repository,\n revision,\n scanInputPaths,\n visitedRepositories\n })\n );\n return uniqueSortedPaths(files);\n}\n\nfunction collectNestedWorktreeFiles({\n prefix,\n repository,\n revision,\n scanInputPaths,\n visitedRepositories\n}: Readonly<{\n readonly prefix: string;\n readonly repository: string;\n readonly revision: string;\n readonly scanInputPaths: readonly string[];\n readonly visitedRepositories: ReadonlySet<string>;\n}>): string[] {\n const files: string[] = [];\n for (const gitlink of gitlinksAtRevision({ repository, revision })) {\n const submoduleRepository = resolveDescendableGitlinkRepository({\n gitlinkPath: gitlink.path,\n repository,\n visitedRepositories\n });\n if (!submoduleRepository) continue;\n files.push(\n ...collectWorktreeFiles({\n prefix: joinSlash({ path: gitlink.path, prefix }),\n repository: submoduleRepository,\n scanInputPaths,\n visitedRepositories: visitRepository({\n repository: submoduleRepository,\n visitedRepositories\n })\n })\n );\n }\n return files;\n}\n\nfunction worktreeRevision(repository: string): string \| null {\n const result = runGit({ args: [\"rev-parse\", \"--verify\", \"--quiet\", \"HEAD\"], cwd: repository });\n if (!processFailed(result)) {\n const revision = nonEmptyGitOutput(result.stdout);\n if (revision !== null) return revision;\n throw new Error(`git-worktree revision inspection returned no revision in ${repository}`);\n }\n const headDoesNotExist =\n result.error === undefined &&\n result.signal === null &&\n result.status === 1 &&\n result.stderr.trim() === \"\";\n if (headDoesNotExist) return null;\n const detail =\n result.stderr.trim() \|\|\n result.error?.message \|\|\n (result.signal === null ? `exit status ${result.status}` : `signal ${result.signal}`);\n throw new Error(`could not inspect git-worktree revision in ${repository}: ${detail}`);\n}\n"]}

package/dist/esm/package-checks/secret-detection/classification.mjs ADDED Viewed

@@ -0,0 +1,15 @@
+const UTF8_DECODER = new TextDecoder("utf-8", { fatal: true });
+/** Classifies already-read bytes without retaining or publishing their content on non-text branches. */
+export function classifySecretDetectionBytes(bytes, maximumFileBytes) {
+    if (bytes.byteLength > maximumFileBytes)
+        return Object.freeze({ kind: "coverage-gap", reason: "file-byte-limit" });
+    if (bytes.includes(0))
+        return Object.freeze({ kind: "coverage-gap", reason: "contains-nul" });
+    try {
+        return Object.freeze({ content: UTF8_DECODER.decode(bytes), kind: "text" });
+    }
+    catch {
+        return Object.freeze({ kind: "coverage-gap", reason: "invalid-utf8" });
+    }
+}
+//# sourceMappingURL=classification.mjs.map

package/dist/esm/package-checks/secret-detection/classification.mjs.map ADDED Viewed

@@ -0,0 +1 @@

+ {"version":3,"file":"classification.mjs","sourceRoot":"","sources":["../../../../src/package-checks/secret-detection/classification.ts"],"names":[],"mappings":"AAcA,MAAM,YAAY,GAAG,IAAI,WAAW,CAAC,OAAO,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;AAE/D,wGAAwG;AACxG,MAAM,UAAU,4BAA4B,CAC1C,KAAiB,EACjB,gBAAwB;IAExB,IAAI,KAAK,CAAC,UAAU,GAAG,gBAAgB;QACrC,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,cAAc,EAAE,MAAM,EAAE,iBAAiB,EAAE,CAAC,CAAC;IAC5E,IAAI,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC;QAAE,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,cAAc,EAAE,MAAM,EAAE,cAAc,EAAE,CAAC,CAAC;IAC9F,IAAI,CAAC;QACH,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,YAAY,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC;IAC9E,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,cAAc,EAAE,MAAM,EAAE,cAAc,EAAE,CAAC,CAAC;IACzE,CAAC;AACH,CAAC","sourcesContent":["/** A bounded, non-secret classification result for one explicitly selected file. */\nexport type SecretDetectionInputClassification = Readonly<\n | { readonly kind: \"coverage-gap\"; readonly reason: SecretDetectionCoverageGapReason }\n | { readonly content: string; readonly kind: \"text\" }\n>;\n\n/** Deterministic reasons why an explicitly selected file did not receive detector coverage. */\nexport type SecretDetectionCoverageGapReason =\n | \"contains-nul\"\n | \"file-count-limit\"\n | \"file-byte-limit\"\n | \"invalid-utf8\"\n | \"total-byte-limit\";\n\nconst UTF8_DECODER = new TextDecoder(\"utf-8\", { fatal: true });\n\n/** Classifies already-read bytes without retaining or publishing their content on non-text branches. */\nexport function classifySecretDetectionBytes(\n bytes: Uint8Array,\n maximumFileBytes: number\n): SecretDetectionInputClassification {\n if (bytes.byteLength > maximumFileBytes)\n return Object.freeze({ kind: \"coverage-gap\", reason: \"file-byte-limit\" });\n if (bytes.includes(0)) return Object.freeze({ kind: \"coverage-gap\", reason: \"contains-nul\" });\n try {\n return Object.freeze({ content: UTF8_DECODER.decode(bytes), kind: \"text\" });\n } catch {\n return Object.freeze({ kind: \"coverage-gap\", reason: \"invalid-utf8\" });\n }\n}\n"]}

package/dist/esm/package-checks/secret-detection/default-check.mjs ADDED Viewed

@@ -0,0 +1,39 @@
+import { defineCheck } from "../../check/check.mjs";
+import { executeSecretDetection, SECRET_DETECTION_CHECK_DEFINITION } from "./execution.mjs";
+import { parseSecretDetectionData } from "./final-data.mjs";
+import { resolveSecretDetectionOptions } from "./options-resolution.mjs";
+import { validSecretDetectionOptions } from "./options-validation.mjs";
+/**
+ * 构造只检查其必填、显式 `files` policy 所选择输入的 high-confidence secret Check。
+ *
+ * @param options - 必须声明完整 `files`；limits 和 finding waivers 使用本 Check 的固定安全策略。
+ * @returns 固定 `secret-detection` identity、完整冻结 options、final-data parser 与 execution。
+ * @throws {TypeError} files 缺失、策略不完整或输入含未知字段时抛出。
+ */
+export function secretDetection(options) {
+    const resolvedOptions = resolveSecretDetectionOptions(options);
+    if (resolvedOptions === undefined) {
+        throw new TypeError("secretDetection options must declare the documented closed explicit file policy");
+    }
+    return defineCheck({
+        ...SECRET_DETECTION_CHECK_DEFINITION,
+        execution: executeSecretDetection,
+        parseData: parseSecretDetectionData,
+        preflight: (preparedOptions) => validSecretDetectionOptions(preparedOptions)
+            ? { status: "success", preparedOptions }
+            : {
+                status: "failure",
+                action: "block",
+                reason: { code: "invalid-options" },
+                messages: [
+                    {
+                        code: "invalid-options",
+                        level: "error",
+                        message: "secretDetection options are invalid; recreate the Check with secretDetection({ files }) or restore its complete resolved options."
+                    }
+                ]
+            },
+        options: resolvedOptions
+    });
+}
+//# sourceMappingURL=default-check.mjs.map

package/dist/esm/package-checks/secret-detection/default-check.mjs.map ADDED Viewed

@@ -0,0 +1 @@

+ {"version":3,"file":"default-check.mjs","sourceRoot":"","sources":["../../../../src/package-checks/secret-detection/default-check.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAA8B,MAAM,sBAAsB,CAAC;AAC/E,OAAO,EAAE,sBAAsB,EAAE,iCAAiC,EAAE,MAAM,gBAAgB,CAAC;AAC3F,OAAO,EAAE,wBAAwB,EAAE,MAAM,iBAAiB,CAAC;AAE3D,OAAO,EAAE,6BAA6B,EAAE,MAAM,yBAAyB,CAAC;AACxE,OAAO,EAAE,2BAA2B,EAAE,MAAM,yBAAyB,CAAC;AAEtE;;;;;;GAMG;AACH,MAAM,UAAU,eAAe,CAC7B,OAA+B;IAM/B,MAAM,eAAe,GAAG,6BAA6B,CAAC,OAAO,CAAC,CAAC;IAC/D,IAAI,eAAe,KAAK,SAAS,EAAE,CAAC;QAClC,MAAM,IAAI,SAAS,CACjB,iFAAiF,CAClF,CAAC;IACJ,CAAC;IACD,OAAO,WAAW,CAAC;QACjB,GAAG,iCAAiC;QACpC,SAAS,EAAE,sBAAsB;QACjC,SAAS,EAAE,wBAAwB;QACnC,SAAS,EAAE,CAAC,eAAe,EAAE,EAAE,CAC7B,2BAA2B,CAAC,eAAe,CAAC;YAC1C,CAAC,CAAC,EAAE,MAAM,EAAE,SAAS,EAAE,eAAe,EAAE;YACxC,CAAC,CAAC;gBACE,MAAM,EAAE,SAAS;gBACjB,MAAM,EAAE,OAAO;gBACf,MAAM,EAAE,EAAE,IAAI,EAAE,iBAAiB,EAAE;gBACnC,QAAQ,EAAE;oBACR;wBACE,IAAI,EAAE,iBAAiB;wBACvB,KAAK,EAAE,OAAO;wBACd,OAAO,EACL,mIAAmI;qBACtI;iBACF;aACF;QACP,OAAO,EAAE,eAAe;KACzB,CAAC,CAAC;AACL,CAAC","sourcesContent":["import { defineCheck, type TypedCheckWithOptions } from \"../../check/check.ts\";\nimport { executeSecretDetection, SECRET_DETECTION_CHECK_DEFINITION } from \"./execution.ts\";\nimport { parseSecretDetectionData } from \"./final-data.ts\";\nimport type { ResolvedSecretDetectionOptions, SecretDetectionOptions } from \"./options.ts\";\nimport { resolveSecretDetectionOptions } from \"./options-resolution.ts\";\nimport { validSecretDetectionOptions } from \"./options-validation.ts\";\n\n/**\n * 构造只检查其必填、显式 `files` policy 所选择输入的 high-confidence secret Check。\n *\n * @param options - 必须声明完整 `files`；limits 和 finding waivers 使用本 Check 的固定安全策略。\n * @returns 固定 `secret-detection` identity、完整冻结 options、final-data parser 与 execution。\n * @throws {TypeError} files 缺失、策略不完整或输入含未知字段时抛出。\n */\nexport function secretDetection(\n options: SecretDetectionOptions\n): TypedCheckWithOptions<\n \"secret-detection\",\n ResolvedSecretDetectionOptions,\n typeof parseSecretDetectionData\n> {\n const resolvedOptions = resolveSecretDetectionOptions(options);\n if (resolvedOptions === undefined) {\n throw new TypeError(\n \"secretDetection options must declare the documented closed explicit file policy\"\n );\n }\n return defineCheck({\n ...SECRET_DETECTION_CHECK_DEFINITION,\n execution: executeSecretDetection,\n parseData: parseSecretDetectionData,\n preflight: (preparedOptions) =>\n validSecretDetectionOptions(preparedOptions)\n ? { status: \"success\", preparedOptions }\n : {\n status: \"failure\",\n action: \"block\",\n reason: { code: \"invalid-options\" },\n messages: [\n {\n code: \"invalid-options\",\n level: \"error\",\n message:\n \"secretDetection options are invalid; recreate the Check with secretDetection({ files }) or restore its complete resolved options.\"\n }\n ]\n },\n options: resolvedOptions\n });\n}\n"]}

package/dist/esm/package-checks/secret-detection/execution.mjs ADDED Viewed

@@ -0,0 +1,172 @@
+import { appendCheckMessages } from "../../check/finding-presentation.mjs";
+import { reconcileFindingWaivers } from "../../finding-waivers/reconciliation.mjs";
+import { reportFindingWaiverAudits } from "../code-quality-findings/finding-waiver-evidence.mjs";
+import { collectProjectFiles } from "../project-files/collection.mjs";
+import { prepareSecretDetectionInputs } from "./input-preparation.mjs";
+import { secretCoverageGapRecordId, secretDetectionWaiverAuditRecord, secretFindingIdentity, secretFindingRecordId } from "./records.mjs";
+import { detectSecretlintIssues } from "./secretlint/adapter.mjs";
+import { validSecretDetectionOptions } from "./options-validation.mjs";
+export const SECRET_DETECTION_CHECK_DEFINITION = {
+    checkId: "secret-detection",
+    displayName: "Secret detection"
+};
+/** Executes the fixed in-process detector only for this Check's exact explicit input selection. */
+export async function executeSecretDetection(context) {
+    if (!validSecretDetectionOptions(context.options))
+        return unavailable("invalid-options");
+    if (context.signal.aborted)
+        return unavailable("execution-cancelled");
+    let selectedPaths;
+    try {
+        selectedPaths = collectProjectFiles(context.project.root, context.options.files);
+    }
+    catch {
+        return unavailable("scan-input-unavailable");
+    }
+    if (context.signal.aborted)
+        return unavailable("execution-cancelled");
+    if (selectedPaths.length === 0)
+        return settleSecretDetectionFindings(context, selectedPaths.length, [], []);
+    const prepared = prepareSecretDetectionInputs(context, selectedPaths);
+    if (prepared.kind === "unavailable")
+        return unavailable("source-unavailable");
+    if (prepared.kind === "cancelled")
+        return unavailable("execution-cancelled");
+    const detected = await detectApprovedInputs(context, prepared.inputs);
+    if (detected.kind === "unavailable")
+        return unavailable(detected.code);
+    return settleSecretDetectionFindings(context, selectedPaths.length, detected.issues, prepared.coverageGaps);
+}
+async function detectApprovedInputs(context, inputs) {
+    const issues = [];
+    for (const input of inputs) {
+        if (context.signal.aborted)
+            return Object.freeze({ code: "execution-cancelled", kind: "unavailable" });
+        const detected = await detectSecretlintIssues(input.content, input.path);
+        if (context.signal.aborted)
+            return Object.freeze({ code: "execution-cancelled", kind: "unavailable" });
+        if (detected.kind === "unavailable") {
+            return Object.freeze({ code: "detector-unavailable", kind: "unavailable" });
+        }
+        if (detected.kind === "protocol-failed") {
+            return Object.freeze({ code: "detector-protocol-failed", kind: "unavailable" });
+        }
+        issues.push(...detected.issues);
+    }
+    return Object.freeze({ issues: Object.freeze(issues), kind: "complete" });
+}
+export function settleSecretDetectionFindings(context, selectedFileCount, issues, coverageGaps) {
+    const reconciliation = reconcileFindingWaivers({
+        findings: issues,
+        identify: secretFindingIdentity,
+        waivers: context.options.findingWaivers
+    });
+    const waivedFindingCount = reconciliation.findings.filter((finding) => finding.disposition === "waived").length;
+    for (const finding of reconciliation.findings) {
+        const identity = secretFindingIdentity(finding.finding);
+        const data = Object.freeze({
+            blocking: finding.disposition !== "waived",
+            kind: "secret-finding",
+            location: finding.finding.location,
+            ordinal: identity.ordinal,
+            path: identity.path,
+            ruleId: identity.ruleId,
+            structuralClass: identity.structuralClass,
+            ...(finding.disposition === "waived"
+                ? { waiver: Object.freeze({ reason: finding.waiver.reason }) }
+                : {})
+        });
+        context.records.report({ id: secretFindingRecordId(identity) }, data);
+    }
+    for (const coverageGap of coverageGaps) {
+        const data = Object.freeze({
+            blocking: true,
+            kind: "coverage-gap",
+            path: coverageGap.path,
+            reason: coverageGap.reason
+        });
+        context.records.report({ id: secretCoverageGapRecordId(coverageGap.path) }, data);
+    }
+    reportFindingWaiverAudits(context, reconciliation, secretDetectionWaiverAuditRecord);
+    const data = Object.freeze({
+        coverageGapCount: coverageGaps.length,
+        findingCount: issues.length,
+        scannedFileCount: selectedFileCount - coverageGaps.length,
+        selectedFileCount,
+        waivedFindingCount
+    });
+    if (selectedFileCount === 0) {
+        return appendCheckMessages(Object.freeze({ status: "not-applicable", reason: { code: "no-eligible-input" } }), waiverMessages(reconciliation.waiverAudits));
+    }
+    const actionableFindingCount = issues.length - waivedFindingCount;
+    const result = Object.freeze({
+        data,
+        status: coverageGaps.length > 0 || actionableFindingCount > 0 ? "failed" : "passed"
+    });
+    return appendCheckMessages(appendCheckMessages(result, findingMessages(actionableFindingCount, coverageGaps.length)), waiverMessages(reconciliation.waiverAudits));
+}
+function findingMessages(actionableFindingCount, coverageGapCount) {
+    const messages = [];
+    if (actionableFindingCount > 0) {
+        messages.push(Object.freeze({
+            code: "secret-findings",
+            level: "error",
+            message: `${actionableFindingCount} high-confidence secret finding(s) require attention; inspect this Check's safe Records, remove the material, or author an exact finding waiver.`
+        }));
+    }
+    if (coverageGapCount > 0) {
+        messages.push(Object.freeze({
+            code: "incomplete-coverage",
+            level: "error",
+            message: `${coverageGapCount} selected input(s) could not receive bounded secret detection coverage; narrow files or increase this Check's explicit resource limits.`
+        }));
+    }
+    return Object.freeze(messages);
+}
+function waiverMessages(audits) {
+    const messages = [];
+    for (const audit of audits) {
+        if (audit.status === "applied") {
+            messages.push(Object.freeze({
+                code: "finding-waived",
+                level: "info",
+                message: `A secret finding was waived: ${audit.waiver.reason}`
+            }));
+            continue;
+        }
+        messages.push(Object.freeze({
+            code: audit.status === "unused" ? "unused-finding-waiver" : "overmatched-finding-waiver",
+            level: "warning",
+            message: audit.status === "unused"
+                ? `A configured secret finding waiver matched no finding; remove or update it. Reason: ${audit.waiver.reason}`
+                : `A configured secret finding waiver matched ${audit.matchCount} findings and was not applied; narrow it. Reason: ${audit.waiver.reason}`
+        }));
+    }
+    return Object.freeze(messages);
+}
+function unavailable(code) {
+    return Object.freeze({
+        messages: Object.freeze([
+            Object.freeze({ code, level: "error", message: unavailableMessage(code) })
+        ]),
+        reason: { code },
+        status: "unavailable"
+    });
+}
+function unavailableMessage(code) {
+    switch (code) {
+        case "invalid-options":
+            return "secretDetection options are invalid; recreate the Check with its documented explicit files policy.";
+        case "scan-input-unavailable":
+            return "Secret detection could not collect its configured project files; check the project root, permissions, and selected file source.";
+        case "source-unavailable":
+            return "A selected secret detection input could not be read safely; check that it still exists, is readable, and was not replaced during the Run.";
+        case "detector-unavailable":
+            return "The private secret detector did not complete; retry after restoring the package runtime without treating this Run as clean.";
+        case "detector-protocol-failed":
+            return "The private secret detector returned an unsupported result shape; update the package dependency only with a reviewed adapter change.";
+        case "execution-cancelled":
+            return "Secret detection was cancelled before it could form a complete result; inspect the caller's cancellation reason and retry if appropriate.";
+    }
+}
+//# sourceMappingURL=execution.mjs.map

package/dist/esm/package-checks/secret-detection/execution.mjs.map ADDED Viewed

@@ -0,0 +1 @@

+ {"version":3,"file":"execution.mjs","sourceRoot":"","sources":["../../../../src/package-checks/secret-detection/execution.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,mBAAmB,EAAE,MAAM,qCAAqC,CAAC;AAC1E,OAAO,EAAE,uBAAuB,EAAE,MAAM,yCAAyC,CAAC;AAClF,OAAO,EAAE,yBAAyB,EAAE,MAAM,qDAAqD,CAAC;AAChG,OAAO,EAAE,mBAAmB,EAAE,MAAM,gCAAgC,CAAC;AAErE,OAAO,EACL,4BAA4B,EAG7B,MAAM,wBAAwB,CAAC;AAEhC,OAAO,EACL,yBAAyB,EACzB,gCAAgC,EAChC,qBAAqB,EACrB,qBAAqB,EAGtB,MAAM,cAAc,CAAC;AACtB,OAAO,EAAE,sBAAsB,EAA6B,MAAM,yBAAyB,CAAC;AAC5F,OAAO,EAAE,2BAA2B,EAAE,MAAM,yBAAyB,CAAC;AAEtE,MAAM,CAAC,MAAM,iCAAiC,GAAG;IAC/C,OAAO,EAAE,kBAAkB;IAC3B,WAAW,EAAE,kBAAkB;CACvB,CAAC;AAWX,mGAAmG;AACnG,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAC1C,OAA8D;IAE9D,IAAI,CAAC,2BAA2B,CAAC,OAAO,CAAC,OAAO,CAAC;QAAE,OAAO,WAAW,CAAC,iBAAiB,CAAC,CAAC;IACzF,IAAI,OAAO,CAAC,MAAM,CAAC,OAAO;QAAE,OAAO,WAAW,CAAC,qBAAqB,CAAC,CAAC;IAEtE,IAAI,aAAgC,CAAC;IACrC,IAAI,CAAC;QACH,aAAa,GAAG,mBAAmB,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;IACnF,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,WAAW,CAAC,wBAAwB,CAAC,CAAC;IAC/C,CAAC;IACD,IAAI,OAAO,CAAC,MAAM,CAAC,OAAO;QAAE,OAAO,WAAW,CAAC,qBAAqB,CAAC,CAAC;IACtE,IAAI,aAAa,CAAC,MAAM,KAAK,CAAC;QAC5B,OAAO,6BAA6B,CAAC,OAAO,EAAE,aAAa,CAAC,MAAM,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC;IAE9E,MAAM,QAAQ,GAAG,4BAA4B,CAAC,OAAO,EAAE,aAAa,CAAC,CAAC;IACtE,IAAI,QAAQ,CAAC,IAAI,KAAK,aAAa;QAAE,OAAO,WAAW,CAAC,oBAAoB,CAAC,CAAC;IAC9E,IAAI,QAAQ,CAAC,IAAI,KAAK,WAAW;QAAE,OAAO,WAAW,CAAC,qBAAqB,CAAC,CAAC;IAE7E,MAAM,QAAQ,GAAG,MAAM,oBAAoB,CAAC,OAAO,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC;IACtE,IAAI,QAAQ,CAAC,IAAI,KAAK,aAAa;QAAE,OAAO,WAAW,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;IACvE,OAAO,6BAA6B,CAClC,OAAO,EACP,aAAa,CAAC,MAAM,EACpB,QAAQ,CAAC,MAAM,EACf,QAAQ,CAAC,YAAY,CACtB,CAAC;AACJ,CAAC;AAOD,KAAK,UAAU,oBAAoB,CACjC,OAA8D,EAC9D,MAAoC;IAEpC,MAAM,MAAM,GAA2B,EAAE,CAAC;IAC1C,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC3B,IAAI,OAAO,CAAC,MAAM,CAAC,OAAO;YACxB,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,qBAAqB,EAAE,IAAI,EAAE,aAAa,EAAE,CAAC,CAAC;QAC7E,MAAM,QAAQ,GAAG,MAAM,sBAAsB,CAAC,KAAK,CAAC,OAAO,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;QACzE,IAAI,OAAO,CAAC,MAAM,CAAC,OAAO;YACxB,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,qBAAqB,EAAE,IAAI,EAAE,aAAa,EAAE,CAAC,CAAC;QAC7E,IAAI,QAAQ,CAAC,IAAI,KAAK,aAAa,EAAE,CAAC;YACpC,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,sBAAsB,EAAE,IAAI,EAAE,aAAa,EAAE,CAAC,CAAC;QAC9E,CAAC;QACD,IAAI,QAAQ,CAAC,IAAI,KAAK,iBAAiB,EAAE,CAAC;YACxC,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,0BAA0B,EAAE,IAAI,EAAE,aAAa,EAAE,CAAC,CAAC;QAClF,CAAC;QACD,MAAM,CAAC,IAAI,CAAC,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC;IAClC,CAAC;IACD,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC,CAAC;AAC5E,CAAC;AAED,MAAM,UAAU,6BAA6B,CAC3C,OAA8D,EAC9D,iBAAyB,EACzB,MAAuC,EACvC,YAA0C;IAE1C,MAAM,cAAc,GAAG,uBAAuB,CAAC;QAC7C,QAAQ,EAAE,MAAM;QAChB,QAAQ,EAAE,qBAAqB;QAC/B,OAAO,EAAE,OAAO,CAAC,OAAO,CAAC,cAAc;KACxC,CAAC,CAAC;IACH,MAAM,kBAAkB,GAAG,cAAc,CAAC,QAAQ,CAAC,MAAM,CACvD,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,WAAW,KAAK,QAAQ,CAC9C,CAAC,MAAM,CAAC;IACT,KAAK,MAAM,OAAO,IAAI,cAAc,CAAC,QAAQ,EAAE,CAAC;QAC9C,MAAM,QAAQ,GAAG,qBAAqB,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;QACxD,MAAM,IAAI,GAAqC,MAAM,CAAC,MAAM,CAAC;YAC3D,QAAQ,EAAE,OAAO,CAAC,WAAW,KAAK,QAAQ;YAC1C,IAAI,EAAE,gBAAgB;YACtB,QAAQ,EAAE,OAAO,CAAC,OAAO,CAAC,QAAQ;YAClC,OAAO,EAAE,QAAQ,CAAC,OAAO;YACzB,IAAI,EAAE,QAAQ,CAAC,IAAI;YACnB,MAAM,EAAE,QAAQ,CAAC,MAAM;YACvB,eAAe,EAAE,QAAQ,CAAC,eAAe;YACzC,GAAG,CAAC,OAAO,CAAC,WAAW,KAAK,QAAQ;gBAClC,CAAC,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,EAAE;gBAC9D,CAAC,CAAC,EAAE,CAAC;SACR,CAAC,CAAC;QACH,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,EAAE,EAAE,qBAAqB,CAAC,QAAQ,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC;IACxE,CAAC;IACD,KAAK,MAAM,WAAW,IAAI,YAAY,EAAE,CAAC;QACvC,MAAM,IAAI,GAAyC,MAAM,CAAC,MAAM,CAAC;YAC/D,QAAQ,EAAE,IAAI;YACd,IAAI,EAAE,cAAc;YACpB,IAAI,EAAE,WAAW,CAAC,IAAI;YACtB,MAAM,EAAE,WAAW,CAAC,MAAM;SAC3B,CAAC,CAAC;QACH,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,EAAE,EAAE,yBAAyB,CAAC,WAAW,CAAC,IAAI,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC;IACpF,CAAC;IACD,yBAAyB,CAAC,OAAO,EAAE,cAAc,EAAE,gCAAgC,CAAC,CAAC;IAErF,MAAM,IAAI,GAAG,MAAM,CAAC,MAAM,CAAC;QACzB,gBAAgB,EAAE,YAAY,CAAC,MAAM;QACrC,YAAY,EAAE,MAAM,CAAC,MAAM;QAC3B,gBAAgB,EAAE,iBAAiB,GAAG,YAAY,CAAC,MAAM;QACzD,iBAAiB;QACjB,kBAAkB;KACnB,CAAC,CAAC;IACH,IAAI,iBAAiB,KAAK,CAAC,EAAE,CAAC;QAC5B,OAAO,mBAAmB,CACxB,MAAM,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,gBAAgB,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,mBAAmB,EAAE,EAAE,CAAC,EAClF,cAAc,CAAC,cAAc,CAAC,YAAY,CAAC,CAC5C,CAAC;IACJ,CAAC;IACD,MAAM,sBAAsB,GAAG,MAAM,CAAC,MAAM,GAAG,kBAAkB,CAAC;IAClE,MAAM,MAAM,GAA0C,MAAM,CAAC,MAAM,CAAC;QAClE,IAAI;QACJ,MAAM,EAAE,YAAY,CAAC,MAAM,GAAG,CAAC,IAAI,sBAAsB,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,QAAQ;KACpF,CAAC,CAAC;IACH,OAAO,mBAAmB,CACxB,mBAAmB,CAAC,MAAM,EAAE,eAAe,CAAC,sBAAsB,EAAE,YAAY,CAAC,MAAM,CAAC,CAAC,EACzF,cAAc,CAAC,cAAc,CAAC,YAAY,CAAC,CAC5C,CAAC;AACJ,CAAC;AAED,SAAS,eAAe,CACtB,sBAA8B,EAC9B,gBAAwB;IAExB,MAAM,QAAQ,GAAmB,EAAE,CAAC;IACpC,IAAI,sBAAsB,GAAG,CAAC,EAAE,CAAC;QAC/B,QAAQ,CAAC,IAAI,CACX,MAAM,CAAC,MAAM,CAAC;YACZ,IAAI,EAAE,iBAAiB;YACvB,KAAK,EAAE,OAAO;YACd,OAAO,EAAE,GAAG,sBAAsB,kJAAkJ;SACrL,CAAC,CACH,CAAC;IACJ,CAAC;IACD,IAAI,gBAAgB,GAAG,CAAC,EAAE,CAAC;QACzB,QAAQ,CAAC,IAAI,CACX,MAAM,CAAC,MAAM,CAAC;YACZ,IAAI,EAAE,qBAAqB;YAC3B,KAAK,EAAE,OAAO;YACd,OAAO,EAAE,GAAG,gBAAgB,yIAAyI;SACtK,CAAC,CACH,CAAC;IACJ,CAAC;IACD,OAAO,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;AACjC,CAAC;AAED,SAAS,cAAc,CACrB,MAII;IAEJ,MAAM,QAAQ,GAAmB,EAAE,CAAC;IACpC,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC3B,IAAI,KAAK,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;YAC/B,QAAQ,CAAC,IAAI,CACX,MAAM,CAAC,MAAM,CAAC;gBACZ,IAAI,EAAE,gBAAgB;gBACtB,KAAK,EAAE,MAAM;gBACb,OAAO,EAAE,gCAAgC,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE;aAC/D,CAAC,CACH,CAAC;YACF,SAAS;QACX,CAAC;QACD,QAAQ,CAAC,IAAI,CACX,MAAM,CAAC,MAAM,CAAC;YACZ,IAAI,EAAE,KAAK,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,uBAAuB,CAAC,CAAC,CAAC,4BAA4B;YACxF,KAAK,EAAE,SAAS;YAChB,OAAO,EACL,KAAK,CAAC,MAAM,KAAK,QAAQ;gBACvB,CAAC,CAAC,uFAAuF,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE;gBAC9G,CAAC,CAAC,8CAA8C,KAAK,CAAC,UAAU,qDAAqD,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE;SAC/I,CAAC,CACH,CAAC;IACJ,CAAC;IACD,OAAO,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;AACjC,CAAC;AAED,SAAS,WAAW,CAClB,IAA0C;IAE1C,OAAO,MAAM,CAAC,MAAM,CAAC;QACnB,QAAQ,EAAE,MAAM,CAAC,MAAM,CAAC;YACtB,MAAM,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,OAAgB,EAAE,OAAO,EAAE,kBAAkB,CAAC,IAAI,CAAC,EAAE,CAAC;SACpF,CAAC;QACF,MAAM,EAAE,EAAE,IAAI,EAAE;QAChB,MAAM,EAAE,aAAa;KACtB,CAAC,CAAC;AACL,CAAC;AAED,SAAS,kBAAkB,CAAC,IAA0C;IACpE,QAAQ,IAAI,EAAE,CAAC;QACb,KAAK,iBAAiB;YACpB,OAAO,oGAAoG,CAAC;QAC9G,KAAK,wBAAwB;YAC3B,OAAO,iIAAiI,CAAC;QAC3I,KAAK,oBAAoB;YACvB,OAAO,2IAA2I,CAAC;QACrJ,KAAK,sBAAsB;YACzB,OAAO,6HAA6H,CAAC;QACvI,KAAK,0BAA0B;YAC7B,OAAO,sIAAsI,CAAC;QAChJ,KAAK,qBAAqB;YACxB,OAAO,2IAA2I,CAAC;IACvJ,CAAC;AACH,CAAC","sourcesContent":["import type { CheckExecutionContext, CheckMessage, CheckResult } from \"../../check/check.ts\";\nimport { appendCheckMessages } from \"../../check/finding-presentation.ts\";\nimport { reconcileFindingWaivers } from \"../../finding-waivers/reconciliation.ts\";\nimport { reportFindingWaiverAudits } from \"../code-quality-findings/finding-waiver-evidence.ts\";\nimport { collectProjectFiles } from \"../project-files/collection.ts\";\nimport type { SecretDetectionFinalData } from \"./final-data.ts\";\nimport {\n prepareSecretDetectionInputs,\n type ApprovedTextInput,\n type SecretCoverageGap\n} from \"./input-preparation.ts\";\nimport type { ResolvedSecretDetectionOptions } from \"./options.ts\";\nimport {\n secretCoverageGapRecordId,\n secretDetectionWaiverAuditRecord,\n secretFindingIdentity,\n secretFindingRecordId,\n type SecretDetectionCoverageGapRecordData,\n type SecretDetectionFindingRecordData\n} from \"./records.ts\";\nimport { detectSecretlintIssues, type SecretDetectionIssue } from \"./secretlint/adapter.ts\";\nimport { validSecretDetectionOptions } from \"./options-validation.ts\";\n\nexport const SECRET_DETECTION_CHECK_DEFINITION = {\n checkId: \"secret-detection\",\n displayName: \"Secret detection\"\n} as const;\n\n/** `secretDetection` 的 whole-Check unavailable reason；不携带 detector 或 file-system 原始详情。 */\nexport type SecretDetectionUnavailableReasonCode =\n | \"detector-protocol-failed\"\n | \"detector-unavailable\"\n | \"execution-cancelled\"\n | \"invalid-options\"\n | \"scan-input-unavailable\"\n | \"source-unavailable\";\n\n/** Executes the fixed in-process detector only for this Check's exact explicit input selection. */\nexport async function executeSecretDetection(\n context: CheckExecutionContext<ResolvedSecretDetectionOptions>\n): Promise<CheckResult<SecretDetectionFinalData>> {\n if (!validSecretDetectionOptions(context.options)) return unavailable(\"invalid-options\");\n if (context.signal.aborted) return unavailable(\"execution-cancelled\");\n\n let selectedPaths: readonly string[];\n try {\n selectedPaths = collectProjectFiles(context.project.root, context.options.files);\n } catch {\n return unavailable(\"scan-input-unavailable\");\n }\n if (context.signal.aborted) return unavailable(\"execution-cancelled\");\n if (selectedPaths.length === 0)\n return settleSecretDetectionFindings(context, selectedPaths.length, [], []);\n\n const prepared = prepareSecretDetectionInputs(context, selectedPaths);\n if (prepared.kind === \"unavailable\") return unavailable(\"source-unavailable\");\n if (prepared.kind === \"cancelled\") return unavailable(\"execution-cancelled\");\n\n const detected = await detectApprovedInputs(context, prepared.inputs);\n if (detected.kind === \"unavailable\") return unavailable(detected.code);\n return settleSecretDetectionFindings(\n context,\n selectedPaths.length,\n detected.issues,\n prepared.coverageGaps\n );\n}\n\ntype DetectedIssues = Readonly<\n | { readonly code: SecretDetectionUnavailableReasonCode; readonly kind: \"unavailable\" }\n | { readonly issues: readonly SecretDetectionIssue[]; readonly kind: \"complete\" }\n>;\n\nasync function detectApprovedInputs(\n context: CheckExecutionContext<ResolvedSecretDetectionOptions>,\n inputs: readonly ApprovedTextInput[]\n): Promise<DetectedIssues> {\n const issues: SecretDetectionIssue[] = [];\n for (const input of inputs) {\n if (context.signal.aborted)\n return Object.freeze({ code: \"execution-cancelled\", kind: \"unavailable\" });\n const detected = await detectSecretlintIssues(input.content, input.path);\n if (context.signal.aborted)\n return Object.freeze({ code: \"execution-cancelled\", kind: \"unavailable\" });\n if (detected.kind === \"unavailable\") {\n return Object.freeze({ code: \"detector-unavailable\", kind: \"unavailable\" });\n }\n if (detected.kind === \"protocol-failed\") {\n return Object.freeze({ code: \"detector-protocol-failed\", kind: \"unavailable\" });\n }\n issues.push(...detected.issues);\n }\n return Object.freeze({ issues: Object.freeze(issues), kind: \"complete\" });\n}\n\nexport function settleSecretDetectionFindings(\n context: CheckExecutionContext<ResolvedSecretDetectionOptions>,\n selectedFileCount: number,\n issues: readonly SecretDetectionIssue[],\n coverageGaps: readonly SecretCoverageGap[]\n): CheckResult<SecretDetectionFinalData> {\n const reconciliation = reconcileFindingWaivers({\n findings: issues,\n identify: secretFindingIdentity,\n waivers: context.options.findingWaivers\n });\n const waivedFindingCount = reconciliation.findings.filter(\n (finding) => finding.disposition === \"waived\"\n ).length;\n for (const finding of reconciliation.findings) {\n const identity = secretFindingIdentity(finding.finding);\n const data: SecretDetectionFindingRecordData = Object.freeze({\n blocking: finding.disposition !== \"waived\",\n kind: \"secret-finding\",\n location: finding.finding.location,\n ordinal: identity.ordinal,\n path: identity.path,\n ruleId: identity.ruleId,\n structuralClass: identity.structuralClass,\n ...(finding.disposition === \"waived\"\n ? { waiver: Object.freeze({ reason: finding.waiver.reason }) }\n : {})\n });\n context.records.report({ id: secretFindingRecordId(identity) }, data);\n }\n for (const coverageGap of coverageGaps) {\n const data: SecretDetectionCoverageGapRecordData = Object.freeze({\n blocking: true,\n kind: \"coverage-gap\",\n path: coverageGap.path,\n reason: coverageGap.reason\n });\n context.records.report({ id: secretCoverageGapRecordId(coverageGap.path) }, data);\n }\n reportFindingWaiverAudits(context, reconciliation, secretDetectionWaiverAuditRecord);\n\n const data = Object.freeze({\n coverageGapCount: coverageGaps.length,\n findingCount: issues.length,\n scannedFileCount: selectedFileCount - coverageGaps.length,\n selectedFileCount,\n waivedFindingCount\n });\n if (selectedFileCount === 0) {\n return appendCheckMessages(\n Object.freeze({ status: \"not-applicable\", reason: { code: \"no-eligible-input\" } }),\n waiverMessages(reconciliation.waiverAudits)\n );\n }\n const actionableFindingCount = issues.length - waivedFindingCount;\n const result: CheckResult<SecretDetectionFinalData> = Object.freeze({\n data,\n status: coverageGaps.length > 0 || actionableFindingCount > 0 ? \"failed\" : \"passed\"\n });\n return appendCheckMessages(\n appendCheckMessages(result, findingMessages(actionableFindingCount, coverageGaps.length)),\n waiverMessages(reconciliation.waiverAudits)\n );\n}\n\nfunction findingMessages(\n actionableFindingCount: number,\n coverageGapCount: number\n): readonly CheckMessage[] {\n const messages: CheckMessage[] = [];\n if (actionableFindingCount > 0) {\n messages.push(\n Object.freeze({\n code: \"secret-findings\",\n level: \"error\",\n message: `${actionableFindingCount} high-confidence secret finding(s) require attention; inspect this Check's safe Records, remove the material, or author an exact finding waiver.`\n })\n );\n }\n if (coverageGapCount > 0) {\n messages.push(\n Object.freeze({\n code: \"incomplete-coverage\",\n level: \"error\",\n message: `${coverageGapCount} selected input(s) could not receive bounded secret detection coverage; narrow files or increase this Check's explicit resource limits.`\n })\n );\n }\n return Object.freeze(messages);\n}\n\nfunction waiverMessages(\n audits: readonly Readonly<{\n readonly matchCount: number;\n readonly status: \"applied\" | \"overmatched\" | \"unused\";\n readonly waiver: Readonly<{ readonly reason: string }>;\n }>[]\n): readonly CheckMessage[] {\n const messages: CheckMessage[] = [];\n for (const audit of audits) {\n if (audit.status === \"applied\") {\n messages.push(\n Object.freeze({\n code: \"finding-waived\",\n level: \"info\",\n message: `A secret finding was waived: ${audit.waiver.reason}`\n })\n );\n continue;\n }\n messages.push(\n Object.freeze({\n code: audit.status === \"unused\" ? \"unused-finding-waiver\" : \"overmatched-finding-waiver\",\n level: \"warning\",\n message:\n audit.status === \"unused\"\n ? `A configured secret finding waiver matched no finding; remove or update it. Reason: ${audit.waiver.reason}`\n : `A configured secret finding waiver matched ${audit.matchCount} findings and was not applied; narrow it. Reason: ${audit.waiver.reason}`\n })\n );\n }\n return Object.freeze(messages);\n}\n\nfunction unavailable(\n code: SecretDetectionUnavailableReasonCode\n): CheckResult<SecretDetectionFinalData> {\n return Object.freeze({\n messages: Object.freeze([\n Object.freeze({ code, level: \"error\" as const, message: unavailableMessage(code) })\n ]),\n reason: { code },\n status: \"unavailable\"\n });\n}\n\nfunction unavailableMessage(code: SecretDetectionUnavailableReasonCode): string {\n switch (code) {\n case \"invalid-options\":\n return \"secretDetection options are invalid; recreate the Check with its documented explicit files policy.\";\n case \"scan-input-unavailable\":\n return \"Secret detection could not collect its configured project files; check the project root, permissions, and selected file source.\";\n case \"source-unavailable\":\n return \"A selected secret detection input could not be read safely; check that it still exists, is readable, and was not replaced during the Run.\";\n case \"detector-unavailable\":\n return \"The private secret detector did not complete; retry after restoring the package runtime without treating this Run as clean.\";\n case \"detector-protocol-failed\":\n return \"The private secret detector returned an unsupported result shape; update the package dependency only with a reviewed adapter change.\";\n case \"execution-cancelled\":\n return \"Secret detection was cancelled before it could form a complete result; inspect the caller's cancellation reason and retry if appropriate.\";\n }\n}\n"]}

package/dist/esm/package-checks/secret-detection/final-data.mjs ADDED Viewed

@@ -0,0 +1,33 @@
+import { exactFinalDataRecord, invalidFinalData, nonNegativeSafeInteger } from "../final-data-parsing.mjs";
+/** 验证并脱离一份 `secretDetection` canonical final-data object。 */
+export function parseSecretDetectionData(data) {
+    const value = exactFinalDataRecord(data, [
+        "coverageGapCount",
+        "findingCount",
+        "scannedFileCount",
+        "selectedFileCount",
+        "waivedFindingCount"
+    ], "secretDetection");
+    const coverageGapCount = nonNegativeSafeInteger(value.coverageGapCount);
+    const findingCount = nonNegativeSafeInteger(value.findingCount);
+    const scannedFileCount = nonNegativeSafeInteger(value.scannedFileCount);
+    const selectedFileCount = nonNegativeSafeInteger(value.selectedFileCount);
+    const waivedFindingCount = nonNegativeSafeInteger(value.waivedFindingCount);
+    if (coverageGapCount === undefined ||
+        findingCount === undefined ||
+        scannedFileCount === undefined ||
+        selectedFileCount === undefined ||
+        waivedFindingCount === undefined ||
+        scannedFileCount + coverageGapCount !== selectedFileCount ||
+        waivedFindingCount > findingCount) {
+        throw invalidFinalData("secretDetection");
+    }
+    return Object.freeze({
+        coverageGapCount,
+        findingCount,
+        scannedFileCount,
+        selectedFileCount,
+        waivedFindingCount
+    });
+}
+//# sourceMappingURL=final-data.mjs.map

package/dist/esm/package-checks/secret-detection/final-data.mjs.map ADDED Viewed

@@ -0,0 +1 @@

+ {"version":3,"file":"final-data.mjs","sourceRoot":"","sources":["../../../../src/package-checks/secret-detection/final-data.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,oBAAoB,EACpB,gBAAgB,EAChB,sBAAsB,EACvB,MAAM,0BAA0B,CAAC;AAgBlC,6DAA6D;AAC7D,MAAM,UAAU,wBAAwB,CAAC,IAAa;IACpD,MAAM,KAAK,GAAG,oBAAoB,CAChC,IAAI,EACJ;QACE,kBAAkB;QAClB,cAAc;QACd,kBAAkB;QAClB,mBAAmB;QACnB,oBAAoB;KACrB,EACD,iBAAiB,CAClB,CAAC;IACF,MAAM,gBAAgB,GAAG,sBAAsB,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC;IACxE,MAAM,YAAY,GAAG,sBAAsB,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC;IAChE,MAAM,gBAAgB,GAAG,sBAAsB,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC;IACxE,MAAM,iBAAiB,GAAG,sBAAsB,CAAC,KAAK,CAAC,iBAAiB,CAAC,CAAC;IAC1E,MAAM,kBAAkB,GAAG,sBAAsB,CAAC,KAAK,CAAC,kBAAkB,CAAC,CAAC;IAC5E,IACE,gBAAgB,KAAK,SAAS;QAC9B,YAAY,KAAK,SAAS;QAC1B,gBAAgB,KAAK,SAAS;QAC9B,iBAAiB,KAAK,SAAS;QAC/B,kBAAkB,KAAK,SAAS;QAChC,gBAAgB,GAAG,gBAAgB,KAAK,iBAAiB;QACzD,kBAAkB,GAAG,YAAY,EACjC,CAAC;QACD,MAAM,gBAAgB,CAAC,iBAAiB,CAAC,CAAC;IAC5C,CAAC;IACD,OAAO,MAAM,CAAC,MAAM,CAAC;QACnB,gBAAgB;QAChB,YAAY;QACZ,gBAAgB;QAChB,iBAAiB;QACjB,kBAAkB;KACnB,CAAC,CAAC;AACL,CAAC","sourcesContent":["import {\n exactFinalDataRecord,\n invalidFinalData,\n nonNegativeSafeInteger\n} from \"../final-data-parsing.ts\";\n\n/** `secretDetection` 正常完成时发布的安全计数。 */\nexport interface SecretDetectionFinalData {\n /** 已选择但未获得 bounded detector coverage 的文件数。 */\n readonly coverageGapCount: number;\n /** 所有安全投影后的 detector finding 数，包括已 waived 的 finding。 */\n readonly findingCount: number;\n /** 已获得 bounded text detector coverage 的文件数。 */\n readonly scannedFileCount: number;\n /** files policy 的 exact selection 数，恒等于 scannedFileCount 与 coverageGapCount 之和。 */\n readonly selectedFileCount: number;\n /** 安全 identity 被唯一 waiver 匹配的 finding 数。 */\n readonly waivedFindingCount: number;\n}\n\n/** 验证并脱离一份 `secretDetection` canonical final-data object。 */\nexport function parseSecretDetectionData(data: unknown): SecretDetectionFinalData {\n const value = exactFinalDataRecord(\n data,\n [\n \"coverageGapCount\",\n \"findingCount\",\n \"scannedFileCount\",\n \"selectedFileCount\",\n \"waivedFindingCount\"\n ],\n \"secretDetection\"\n );\n const coverageGapCount = nonNegativeSafeInteger(value.coverageGapCount);\n const findingCount = nonNegativeSafeInteger(value.findingCount);\n const scannedFileCount = nonNegativeSafeInteger(value.scannedFileCount);\n const selectedFileCount = nonNegativeSafeInteger(value.selectedFileCount);\n const waivedFindingCount = nonNegativeSafeInteger(value.waivedFindingCount);\n if (\n coverageGapCount === undefined ||\n findingCount === undefined ||\n scannedFileCount === undefined ||\n selectedFileCount === undefined ||\n waivedFindingCount === undefined ||\n scannedFileCount + coverageGapCount !== selectedFileCount ||\n waivedFindingCount > findingCount\n ) {\n throw invalidFinalData(\"secretDetection\");\n }\n return Object.freeze({\n coverageGapCount,\n findingCount,\n scannedFileCount,\n selectedFileCount,\n waivedFindingCount\n });\n}\n"]}

package/dist/esm/package-checks/secret-detection/finding-waiver-identity.mjs ADDED Viewed

@@ -0,0 +1,30 @@
+import { snapshotExactClosedRecord } from "../../data-boundary/closed-values.mjs";
+import { isPositiveSafeInteger } from "../../data-boundary/value-shapes.mjs";
+import { isNormalizedProjectRelativePath } from "../host-environment/path.mjs";
+const PRIVATE_KEY_RULE_ID = "@secretlint/secretlint-rule-privatekey";
+const TEXT_DOCUMENT_STRUCTURAL_CLASS = "text-document";
+/** 解析只含安全路径、规则、结构标记和 occurrence ordinal 的 waiver identity。 */
+export function resolveSecretDetectionFindingIdentity(value) {
+    const identity = snapshotExactClosedRecord(value, [
+        "ordinal",
+        "path",
+        "ruleId",
+        "structuralClass"
+    ]);
+    if (identity === undefined ||
+        !isPositiveSafeInteger(identity.ordinal) ||
+        !isNormalizedProjectRelativePath(identity.path) ||
+        identity.ruleId !== PRIVATE_KEY_RULE_ID ||
+        identity.structuralClass !== TEXT_DOCUMENT_STRUCTURAL_CLASS) {
+        return undefined;
+    }
+    return Object.freeze({
+        ordinal: identity.ordinal,
+        path: identity.path,
+        ruleId: PRIVATE_KEY_RULE_ID,
+        structuralClass: TEXT_DOCUMENT_STRUCTURAL_CLASS
+    });
+}
+export const secretDetectionPrivateKeyRuleId = PRIVATE_KEY_RULE_ID;
+export const secretDetectionTextDocumentStructuralClass = TEXT_DOCUMENT_STRUCTURAL_CLASS;
+//# sourceMappingURL=finding-waiver-identity.mjs.map