dsh-standards 1.0.3 → 1.1.2

package/40-checker/fixtures/bundle-patch-only/cordis.patch.yml

@@ -0,0 +1,3 @@
+- insert:
+    - id: fixture-bundle-server
+      name: './server.mjs'

package/40-checker/fixtures/bundle-patch-only/package.json

@@ -0,0 +1,12 @@
+{
+  "name": "@dsh-fixtures/bundle-patch-only",
+  "version": "1.0.0",
+  "license": "MIT",
+  "engines": { "dsh": ">=0.2.2-alpha.2 <0.3.0" },
+  "dsh": {
+    "manifestVersion": 1,
+    "bundle": { "patch": "./cordis.patch.yml" },
+    "capabilities": [],
+    "labels": []
+  }
+}

package/40-checker/fixtures/c12-command-arg/index.mjs

@@ -0,0 +1,7 @@
+import { spawnSync } from 'node:child_process'
+
+export const name = 'c12-command-arg'
+export function apply() {}
+
+// C-12.4: --add-dir is a real command-line argument here, not documentation.
+spawnSync('dsh', ['agent', '--add-dir', './docs'], { stdio: 'inherit' })

package/40-checker/fixtures/c12-command-arg/package.json

@@ -0,0 +1,10 @@
+{
+  "name": "@dsh-fixtures/c12-command-arg",
+  "version": "1.0.0",
+  "license": "MIT",
+  "type": "module",
+  "main": "./index.mjs",
+  "exports": { ".": "./index.mjs" },
+  "engines": { "dsh": ">=0.2.2-alpha.2 <0.3.0" },
+  "dsh": { "manifestVersion": 1, "kind": "plugin", "capabilities": [], "labels": [] }
+}

package/40-checker/fixtures/c12-comment/index.mjs

@@ -0,0 +1,3 @@
+export const name = 'c12-comment'
+export function apply() {}
+// danger-full-access belongs in a comment only

package/40-checker/fixtures/c12-comment/package.json

@@ -0,0 +1,10 @@
+{
+  "name": "@dsh-fixtures/c12-comment",
+  "version": "1.0.0",
+  "license": "MIT",
+  "type": "module",
+  "main": "./index.mjs",
+  "exports": { ".": "./index.mjs" },
+  "engines": { "dsh": ">=0.2.2-alpha.2 <0.3.0" },
+  "dsh": { "manifestVersion": 1, "kind": "plugin", "capabilities": [], "labels": [] }
+}

package/40-checker/fixtures/c12-compare/index.mjs

@@ -0,0 +1,3 @@
+export const name = 'c12-compare'
+export function apply() {}
+if (mode === 'danger-full-access') { /* comparison, not a grant */ }

package/40-checker/fixtures/c12-compare/package.json

@@ -0,0 +1,10 @@
+{
+  "name": "@dsh-fixtures/c12-compare",
+  "version": "1.0.0",
+  "license": "MIT",
+  "type": "module",
+  "main": "./index.mjs",
+  "exports": { ".": "./index.mjs" },
+  "engines": { "dsh": ">=0.2.2-alpha.2 <0.3.0" },
+  "dsh": { "manifestVersion": 1, "kind": "plugin", "capabilities": [], "labels": [] }
+}

package/40-checker/fixtures/c12-doc-string/index.mjs

@@ -0,0 +1,13 @@
+export const name = 'c12-doc-string'
+export function apply() {}
+
+// Documentation, not a grant: the literals below are labels and help text.
+const documentation = {
+  desc: 'danger-full-access',
+  description: '--add-dir',
+  help: 'danger-full-access',
+}
+
+console.log('danger-full-access')
+console.info('--add-dir')
+console.warn(`mode: ${'danger-full-access'}`)

package/40-checker/fixtures/c12-doc-string/package.json

@@ -0,0 +1,10 @@
+{
+  "name": "@dsh-fixtures/c12-doc-string",
+  "version": "1.0.0",
+  "license": "MIT",
+  "type": "module",
+  "main": "./index.mjs",
+  "exports": { ".": "./index.mjs" },
+  "engines": { "dsh": ">=0.2.2-alpha.2 <0.3.0" },
+  "dsh": { "manifestVersion": 1, "kind": "plugin", "capabilities": [], "labels": [] }
+}

package/40-checker/fixtures/c12-grant/index.mjs

@@ -0,0 +1,3 @@
+export const name = 'c12-grant'
+export function apply() {}
+svc.set(session, 'danger-full-access')

package/40-checker/fixtures/c12-grant/package.json

@@ -0,0 +1,10 @@
+{
+  "name": "@dsh-fixtures/c12-grant",
+  "version": "1.0.0",
+  "license": "MIT",
+  "type": "module",
+  "main": "./index.mjs",
+  "exports": { ".": "./index.mjs" },
+  "engines": { "dsh": ">=0.2.2-alpha.2 <0.3.0" },
+  "dsh": { "manifestVersion": 1, "kind": "plugin", "capabilities": [], "labels": [] }
+}

package/40-checker/fixtures/c12-string/index.mjs

@@ -0,0 +1,3 @@
+export const name = 'c12-string'
+export function apply() {}
+console.log('use danger-full-access for this case')

package/40-checker/fixtures/c12-string/package.json

@@ -0,0 +1,10 @@
+{
+  "name": "@dsh-fixtures/c12-string",
+  "version": "1.0.0",
+  "license": "MIT",
+  "type": "module",
+  "main": "./index.mjs",
+  "exports": { ".": "./index.mjs" },
+  "engines": { "dsh": ">=0.2.2-alpha.2 <0.3.0" },
+  "dsh": { "manifestVersion": 1, "kind": "plugin", "capabilities": [], "labels": [] }
+}

package/40-checker/fixtures/declaration-file/index.d.ts

@@ -0,0 +1 @@
+export declare function broken(: string

package/40-checker/fixtures/declaration-file/index.mjs

@@ -0,0 +1,9 @@
+export const name = 'fixture-declaration-file'
+export const inject = ['sessions']
+export const provide = ['declaration-file']
+
+export function apply(ctx) {
+  const sessions = ctx.sessions
+  ctx.provide('declaration-file', { hasSessions: Boolean(sessions) })
+  ctx.effect(() => () => {}, 'fixture.declaration-file.effect')
+}

package/40-checker/fixtures/declaration-file/package.json

@@ -0,0 +1,10 @@
+{
+  "name": "@dsh-fixtures/declaration-file",
+  "version": "1.0.0",
+  "license": "MIT",
+  "type": "module",
+  "main": "./index.mjs",
+  "exports": { ".": "./index.mjs" },
+  "engines": { "dsh": ">=0.2.2-alpha.2 <0.3.0" },
+  "dsh": { "manifestVersion": 1, "kind": "plugin", "capabilities": ["sessions:read"], "labels": [] }
+}

package/40-checker/fixtures/import-local-side-effect/index.mjs

@@ -0,0 +1,11 @@
+import './side-effectful.mjs'
+
+export const name = 'fixture-import-local-side-effect'
+export const inject = ['sessions']
+export const provide = ['import-local-side-effect']
+
+export function apply(ctx) {
+  const sessions = ctx.sessions
+  ctx.provide('import-local-side-effect', { hasSessions: Boolean(sessions) })
+  ctx.effect(() => () => {}, 'fixture.import-local-side-effect.effect')
+}

package/40-checker/fixtures/import-local-side-effect/package.json

@@ -0,0 +1,21 @@
+{
+  "name": "@dsh-fixtures/import-local-side-effect",
+  "version": "1.0.0",
+  "license": "MIT",
+  "type": "module",
+  "main": "./index.mjs",
+  "exports": {
+    ".": "./index.mjs"
+  },
+  "engines": {
+    "dsh": ">=0.2.2-alpha.2 <0.3.0"
+  },
+  "dsh": {
+    "manifestVersion": 1,
+    "kind": "plugin",
+    "capabilities": [
+      "sessions:read"
+    ],
+    "labels": []
+  }
+}

package/40-checker/fixtures/import-local-side-effect/side-effectful.mjs

@@ -0,0 +1,5 @@
+import { writeFileSync } from 'node:fs'
+
+// C-10.3: the entry imports this module with a relative specifier, so its
+// module-scope write executes on import of the entry.
+writeFileSync('/tmp/dsh-fixture-import-local-side-effect.txt', 'x')

package/40-checker/fixtures/import-open-readonly/index.mjs

@@ -0,0 +1,14 @@
+import { openSync } from 'node:fs'
+
+export const name = 'fixture-import-open-readonly'
+export const inject = ['sessions']
+export const provide = ['import-open-readonly']
+
+export function apply(ctx) {
+  const sessions = ctx.sessions
+  ctx.provide('import-open-readonly', { hasSessions: Boolean(sessions) })
+  ctx.effect(() => () => {}, 'fixture.import-open-readonly.effect')
+}
+
+// C-10.4 is about fs *writes*; a read-only open is a different side effect.
+openSync(new URL(import.meta.url), 'r')

package/40-checker/fixtures/import-open-readonly/package.json

@@ -0,0 +1,19 @@
+{
+  "name": "@dsh-fixtures/import-open-readonly",
+  "version": "1.0.0",
+  "license": "MIT",
+  "type": "module",
+  "main": "./index.mjs",
+  "exports": {
+    ".": "./index.mjs"
+  },
+  "engines": {
+    "dsh": ">=0.2.2-alpha.2 <0.3.0"
+  },
+  "dsh": {
+    "manifestVersion": 1,
+    "kind": "plugin",
+    "capabilities": ["sessions:read"],
+    "labels": []
+  }
+}

package/40-checker/fixtures/import-package-only/index.mjs

@@ -0,0 +1,11 @@
+import path from 'node:path'
+
+export const name = 'fixture-import-package-only'
+export const inject = ['sessions']
+export const provide = ['import-package-only']
+
+export function apply(ctx) {
+  const sessions = ctx.sessions
+  ctx.provide('import-package-only', { basename: path.basename('.'), hasSessions: Boolean(sessions) })
+  ctx.effect(() => () => {}, 'fixture.import-package-only.effect')
+}

package/40-checker/fixtures/import-package-only/package.json

@@ -0,0 +1,21 @@
+{
+  "name": "@dsh-fixtures/import-package-only",
+  "version": "1.0.0",
+  "license": "MIT",
+  "type": "module",
+  "main": "./index.mjs",
+  "exports": {
+    ".": "./index.mjs"
+  },
+  "engines": {
+    "dsh": ">=0.2.2-alpha.2 <0.3.0"
+  },
+  "dsh": {
+    "manifestVersion": 1,
+    "kind": "plugin",
+    "capabilities": [
+      "sessions:read"
+    ],
+    "labels": []
+  }
+}

package/40-checker/fixtures/import-parse-error/index.mjs

@@ -0,0 +1,5 @@
+export const name = 'fixture-import-parse-error'
+export function apply() {
+  // Deliberately invalid syntax: the AST check must report not-run, not PASS.
+}
+const broken = {

package/40-checker/fixtures/import-parse-error/package.json

@@ -0,0 +1,10 @@
+{
+  "name": "@dsh-fixtures/import-parse-error",
+  "version": "1.0.0",
+  "license": "MIT",
+  "type": "module",
+  "main": "./index.mjs",
+  "exports": { ".": "./index.mjs" },
+  "engines": { "dsh": ">=0.2.2-alpha.2 <0.3.0" },
+  "dsh": { "manifestVersion": 1, "kind": "plugin", "capabilities": [], "labels": [] }
+}

package/40-checker/fixtures/import-side-effect/index.mjs

@@ -0,0 +1,14 @@
+import { writeFileSync } from 'node:fs'
+
+export const name = 'fixture-import-side-effect'
+export const inject = ['sessions']
+export const provide = ['import-side-effect']
+
+export function apply(ctx) {
+  const sessions = ctx.sessions
+  ctx.provide('import-side-effect', { hasSessions: Boolean(sessions) })
+  ctx.effect(() => () => {}, 'fixture.import-side-effect.effect')
+}
+
+// DSC-10.4: a module-scope fs mutation, executed on import.
+writeFileSync('/tmp/dsh-fixture-import-side-effect.txt', 'x')

package/40-checker/fixtures/import-side-effect/package.json

@@ -0,0 +1,19 @@
+{
+  "name": "@dsh-fixtures/import-side-effect",
+  "version": "1.0.0",
+  "license": "MIT",
+  "type": "module",
+  "main": "./index.mjs",
+  "exports": {
+    ".": "./index.mjs"
+  },
+  "engines": {
+    "dsh": ">=0.2.2-alpha.2 <0.3.0"
+  },
+  "dsh": {
+    "manifestVersion": 1,
+    "kind": "plugin",
+    "capabilities": ["sessions:read"],
+    "labels": []
+  }
+}

package/40-checker/fixtures/import-side-effect-nonentry/index.mjs

@@ -0,0 +1,9 @@
+export const name = 'fixture-import-side-effect-nonentry'
+export const inject = ['sessions']
+export const provide = ['import-side-effect-nonentry']
+
+export function apply(ctx) {
+  const sessions = ctx.sessions
+  ctx.provide('import-side-effect-nonentry', { hasSessions: Boolean(sessions) })
+  ctx.effect(() => () => {}, 'fixture.import-side-effect-nonentry.effect')
+}

package/40-checker/fixtures/import-side-effect-nonentry/package.json

@@ -0,0 +1,19 @@
+{
+  "name": "@dsh-fixtures/import-side-effect-nonentry",
+  "version": "1.0.0",
+  "license": "MIT",
+  "type": "module",
+  "main": "./index.mjs",
+  "exports": {
+    ".": "./index.mjs"
+  },
+  "engines": {
+    "dsh": ">=0.2.2-alpha.2 <0.3.0"
+  },
+  "dsh": {
+    "manifestVersion": 1,
+    "kind": "plugin",
+    "capabilities": ["sessions:read"],
+    "labels": []
+  }
+}

package/40-checker/fixtures/import-side-effect-nonentry/selfcheck.mjs

@@ -0,0 +1,8 @@
+// Preflight helper shipped with the package, never imported by the entry module.
+// A module-scope fs mutation here is not an entry import-time side effect (C-10.3).
+import { mkdirSync } from 'node:fs'
+
+mkdirSync('/tmp/dsh-fixture-selfcheck', { recursive: true })
+
+// Same class of module-scope work, but still outside the entry module.
+globalThis.__dshFixtureSelfcheck = true

package/40-checker/fixtures/import-void-main/index.mjs

@@ -0,0 +1,16 @@
+export const name = 'fixture-import-void-main'
+export const inject = ['sessions']
+export const provide = ['import-void-main']
+
+export function apply(ctx) {
+  const sessions = ctx.sessions
+  ctx.provide('import-void-main', { hasSessions: Boolean(sessions) })
+  ctx.effect(() => () => {}, 'fixture.import-void-main.effect')
+}
+
+function main() {
+  return undefined
+}
+
+// C-10.2: an immediate module-scope call, expressed as `void main()`.
+void main()

package/40-checker/fixtures/import-void-main/package.json

@@ -0,0 +1,19 @@
+{
+  "name": "@dsh-fixtures/import-void-main",
+  "version": "1.0.0",
+  "license": "MIT",
+  "type": "module",
+  "main": "./index.mjs",
+  "exports": {
+    ".": "./index.mjs"
+  },
+  "engines": {
+    "dsh": ">=0.2.2-alpha.2 <0.3.0"
+  },
+  "dsh": {
+    "manifestVersion": 1,
+    "kind": "plugin",
+    "capabilities": ["sessions:read"],
+    "labels": []
+  }
+}

package/40-checker/fixtures/no-source/package.json

@@ -0,0 +1,19 @@
+{
+  "name": "@dsh-fixtures/no-source",
+  "version": "1.0.0",
+  "license": "MIT",
+  "type": "module",
+  "main": "./index.mjs",
+  "exports": {
+    ".": "./index.mjs"
+  },
+  "engines": {
+    "dsh": ">=0.2.2-alpha.2 <0.3.0"
+  },
+  "dsh": {
+    "manifestVersion": 1,
+    "kind": "plugin",
+    "capabilities": ["sessions:read"],
+    "labels": []
+  }
+}

package/40-checker/fixtures/parse-error-nonentry/index.mjs

@@ -0,0 +1,2 @@
+export const name = 'fixture-parse-error-nonentry'
+export function apply() {}

package/40-checker/fixtures/parse-error-nonentry/package.json

@@ -0,0 +1,10 @@
+{
+  "name": "@dsh-fixtures/parse-error-nonentry",
+  "version": "1.0.0",
+  "license": "MIT",
+  "type": "module",
+  "main": "./index.mjs",
+  "exports": { ".": "./index.mjs" },
+  "engines": { "dsh": ">=0.2.2-alpha.2 <0.3.0" },
+  "dsh": { "manifestVersion": 1, "kind": "plugin", "capabilities": [], "labels": [] }
+}

package/40-checker/fixtures/parse-error-nonentry/references/broken.js

@@ -0,0 +1 @@
+export const broken = {

package/40-checker/src/cli.mjs

@@ -273,7 +273,7 @@ export async function main(argv = process.argv.slice(2)) {
     { id: 'DSC-13', clause: 'C-13', layer: 'L0', result: 'ERROR', coverage: 'not-run', reason: 'manifest unavailable', details: [], evidence: [], method: 'M', advisory: false },
   ]
   const declarationAdjusted = declarationChecks.map(item => (item.result === 'WARN' && ['DSC-11', 'DSC-13'].includes(item.id) ? { ...item, advisory: true } : item))
-  const advisoryChecks = [checkImportTimeAdvisory(sources)]
+  const advisoryChecks = [checkImportTimeAdvisory(sources, entry?.relative)]
 
   if (options.scope === 'entry' && options.entryRuntime === 'server-entry' && kind !== 'plugin') options.treatAsPlugin = true
   let runtimeKind = kind