nanos-lint 2.8.0 → 2.8.2

package/dist/{cli-r8LDolDk.d.ts → cli-dxsaVVVq.d.ts}

@@ -907,13 +907,17 @@ interface ParseOptionsResult {
 }
 //#endregion
 //#region src/cli.d.ts
+/** Accumulates repeatable --ignore pattern arguments, splitting by comma and newline. */
 declare function collectIgnorePatterns(val: string, prev?: string[]): string[];
 interface CreateProgramOptions {
   setExitCode?: (code: number) => void;
 }
+/** Constructs and configures the top-level Commander program and its CLI subcommands. */
 declare function createProgram(options?: CreateProgramOptions): Command;
+/** Parses command-line arguments and executes the requested CLI action. */
 declare function runCLI(args?: string[]): Promise<number>;
+/** Determines whether the current module is being directly executed as an application entrypoint. */
 declare function isDirectExecution(importMetaUrl?: string, argv1?: string | undefined): boolean;
 //#endregion
 export { runCLI as a, isDirectExecution as i, collectIgnorePatterns as n, createProgram as r, CreateProgramOptions as t };
-//# sourceMappingURL=cli-r8LDolDk.d.ts.map
+//# sourceMappingURL=cli-dxsaVVVq.d.ts.map

package/dist/{cli-r8LDolDk.d.ts.map → cli-dxsaVVVq.d.ts.map}

@@ -1 +1 @@
-{"version":3,"file":"cli-r8LDolDk.d.ts","names":[],"sources":["../node_modules/commander/typings/index.d.ts","../src/cli.ts"],"x_google_ignoreList":[0],"mappings":";;;;;;;;;;KAWK,aAAa,aAAa,oCAC3B,eACC,WAAW;cAEH,uBAAuB;EAClC;EACA;EACA;EACA;;;;;;;EAQA,YAAY,kBAAkB,cAAc;;UAY7B;;;EAGf;;EAEA;;cAGW;EACX;EACA;EACA;EACA;EACA;EACA,YAAY,GAAG,eAAe,UAAU,MAAM;EAC9C;;;;;;EAOA,YAAY,aAAa;;;;EAKzB;;;;EAKA,QAAQ,gBAAgB;;;;EAKxB,UAAU,GAAG,KAAK,eAAe,UAAU,MAAM;;;;EAKjD,QAAQ;;;;EAKR;;;;EAKA;;cAGW;EACX;EACA;EAEA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA,YAAY,GAAG,eAAe,UAAU,MAAM;EAC9C;EACA;EACA;EAEA,YAAY,eAAe;;;;EAK3B,QAAQ,gBAAgB;;;;;;;;;;;EAYxB,OAAO;;;;;;;;;;;EAYP,UAAU;;;;;;;;;;;EAYV,QAAQ,cAAc;;;;;;;EAQtB,IAAI;;;;EAKJ,UAAU,GAAG,KAAK,eAAe,UAAU,MAAM;;;;EAKjD,oBAAoB;;;;EAKpB,SAAS;;;;EAKT,QAAQ;;;;EAKR;;;;;EAMA;;;;EAKA,UAAU;;;;;;EAOV;;cAGW;;EAEX;EACA;EACA;EACA;EACA;EAEA;;;;;;;EAQA,eAAe;IACb;IACA;IACA;;;EAIF,eAAe,KAAK;;EAEpB,sBAAsB,KAAK;;EAE3B,WAAW,QAAQ;;EAEnB,kBAAkB,QAAQ;;EAE1B,aAAa,UAAU;;EAEvB,oBAAoB,UAAU;;EAG9B,aAAa,KAAK;;EAElB,mBAAmB,KAAK;;EAGxB,gBAAgB,KAAK,UAAU;;EAE/B,eAAe,KAAK,UAAU;;EAE9B,qBAAqB,KAAK,UAAU;;EAEpC,iBAAiB,KAAK,UAAU;;EAGhC,4BAA4B,KAAK,SAAS,QAAQ;;EAElD,wBAAwB,KAAK,SAAS,QAAQ;;EAE9C,8BAA8B,KAAK,SAAS,QAAQ;;EAEpD,0BAA0B,KAAK,SAAS,QAAQ;;EAGhD,aAAa;;EAGb,WAAW;;EAGX,WAAW;;EAEX,iBAAiB;EAEjB,wBAAwB;EACxB,uBAAuB;EACvB,2BAA2B;EAC3B,yBAAyB;;EAEzB,qBAAqB;EAErB,gBAAgB;EAChB,oBAAoB;EACpB,kBAAkB;;EAGlB,gBAAgB;;EAEhB,oBAAoB;;EAEpB,kBAAkB;;EAGlB,SAAS,KAAK,SAAS,QAAQ;;;;;EAM/B,QAAQ,aAAa;;EAGrB,aAAa;;;;;;;;EASb,WACE,cACA,mBACA,qBACA,QAAQ;;;;EAMV,eAAe,iBAAiB,iBAAiB,QAAQ;;;;EAKzD,WAAW,UAAU,UAAU,QAC7B,eAAe,KACf,cAAc,KACd,WAAW,MAAM,eAChB,YAAY;;EAGf,WAAW,KAAK,SAAS,QAAQ;;KAEvB,oBAAoB,QAAQ;UAEvB;EACf;;UAEe;;EAEf;;UAEe;;EAEf;EACA,SAAS;;UAEM;EACf,UAAU;EACV,UAAU;EACV,aAAa,aAAa,QAAQ;EAElC;EACA;EAEA;EACA;EACA,YAAY;;KAGF;KACA;;KAEA,oBACR;KAGQ,eAAe;cAEd;EACX;EACA;WACS,mBAAmB;WACnB,kBAAkB;WAClB,8BAA8B;EACvC,QAAQ;EAER,YAAY;;;;;;;;;EAUZ,QAAQ,aAAa,gBAAgB;;;;EAIrC;;;;;;;;;;;;;;;;;;;;;EAsBA,QACE,qBACA,OAAO,iBACN;;;;;;;;;;;;;;;;;;;EAmBH,QACE,qBACA,qBACA,OAAO;;;;;;;EAST,cAAc,gBAAgB;;;;;;;;EAS9B,WAAW,KAAK,SAAS,OAAO;;;;;;;EAQhC,eAAe,cAAc,uBAAuB;;;;;;;;;;;;;;;EAgBpD,SAAS,GACP,eACA,qBACA,WAAW,eAAe,UAAU,MAAM,GAC1C,eAAe;EAEjB,SAAS,cAAc,sBAAsB;;;;;;EAO7C,YAAY,KAAK;;;;;;;;;;;;;EAcjB,UAAU;;;;;;;;;;;;EAaV,YAAY,qBAAqB;EACjC,YAAY;;;;EAKZ,eAAe,KAAK;;EAEpB,eAAe,qBAAqB;;EAEpC,eAAe;;;;EAKf,KACE,OAAO,WACP,WACE,aAAa,SACb,eAAe,mBACL;;;;EAMd,aAAa,YAAY,KAAK;;;;EAK9B,MAAM,iBAAiB,eAAe;;;;;EAMtC,cAAc;;;;;EAMd,cAAc,eAAe;;EAE7B,iBAAiB;;;;;;;;;;;;;;;;;EAkBjB,gBAAgB,eAAe;;EAE/B,mBAAmB;;;;;;EAOnB,sBAAsB,eAAe;;;;EAKrC,mBAAmB;;;;EAKnB,yBAAyB;;;;;;;;;;;;;;;;EAiBzB,OAAO,KAAK,eAAe,uBAAuB;;;;;;;;;;;;;;;;;;;;;EAsBlD,OACE,eACA,sBACA;EAEF,OAAO,GACL,eACA,qBACA,WAAW,eAAe,UAAU,MAAM,GAC1C,eAAe;;EAGjB,OACE,eACA,qBACA,QAAQ,QACR;;;;;;;EASF,eACE,eACA,sBACA;EAEF,eAAe,GACb,eACA,qBACA,WAAW,eAAe,UAAU,MAAM,GAC1C,eAAe;;EAGjB,eACE,eACA,qBACA,QAAQ,QACR;;;;;;;EAUF,aAAa,eAAe,uBAAuB;;;;;;EAOnD,UAAU,QAAQ;;;;;;;EAQlB,yBAAyB,UAAU,wBAAwB;EAC3D,yBAAyB,UAAU,cACjC,iCACQ;EACV,yBAAyB;;;;EAKzB,eAAe;;;;EAKf,eAAe,aAAa;;;;EAK5B,yBACE,aACA,gBACA,QAAQ;;;;EAMV,qBAAqB,cAAc;;;;EAKnC,gCAAgC,cAAc;;;;;;;;;;;;;EAc9C,4BAA4B;;;;;;EAO5B,mBAAmB;;;;;;EAOnB,qBAAqB;;;;;;;;;EAUrB,wBAAwB;;;;;;;;;;EAWxB,mBAAmB;;;;;;;;;;;;;;;;;;;;;;EAuBnB,MAAM,0BAA0B,eAAe;;;;;;;;;;;;;;;;;;;;EAqB/C,WACE,0BACA,eAAe,eACd;;;;;;;EAQH;;;;;;;EAQA;;;;;;;;;;;;;EAcA,aAAa,iBAAiB;;;;EAK9B,KAAK,UAAU,iBAAiB;;;;EAKhC,gBAAgB,UAAU,iBAAiB;;;;;;EAQ3C,YAAY;;EAEZ,YAAY,aAAa,iBAAiB;;;;EAI1C;;;;;;EAQA,QAAQ;;;;EAIR;;;;;;;;EASA,MAAM;;;;EAIN;;;;;;;;EASA,QAAQ;;;;EAIR;;;;;;EAOA,MAAM;;;;EAIN;;;;;;EAOA,KAAK;;;;EAIL;;;;;;;;;;;;;;EAeA,iBAAiB;;;;;;;;;;;;;EAcjB,cAAc;;;;EAId;;;;;;EAOA,UAAU;;;;EAIV;;;;;;;;;;;;;EAcA,cAAc;;;;EAId;;;;;;;;;;;;;EAcA,aAAa;;;;EAIb;;;;;;;EAQA,WAAW,UAAU;;EAErB,WAAW,KAAK;;;;EAKhB,gBAAgB,UAAU;;;;;;EAO1B,WAAW,0BAA0B;;;;;EAMrC,cAAc,QAAQ;;;;;;EAOtB,KAAK,UAAU;;EAEf,KAAK,KAAK;;;;;;;EAQV,YAAY,UAAU,qBAAqB;EAC3C,YACE,UAAU,qBACV,OAAO,SAAS;;;;EAMlB,GAAG,wBAAwB,cAAc;;UAG1B;EACf;EACA;;EAEA;;UAEe,iCAAiC;EAChD;;UAGe;EACf;EACA;;;;iBC/iCc,sBAAsB,aAAa;UAqBlC;EACf,eAAe;;iBAGD,cAAc,UAAU,uBAAuB;iBAoRzC,OAAO,kBAAyC;iBA0DtD,kBACd,wBACA"}
+{"version":3,"file":"cli-dxsaVVVq.d.ts","names":[],"sources":["../node_modules/commander/typings/index.d.ts","../src/cli.ts"],"x_google_ignoreList":[0],"mappings":";;;;;;;;;;KAWK,aAAa,aAAa,oCAC3B,eACC,WAAW;cAEH,uBAAuB;EAClC;EACA;EACA;EACA;;;;;;;EAQA,YAAY,kBAAkB,cAAc;;UAY7B;;;EAGf;;EAEA;;cAGW;EACX;EACA;EACA;EACA;EACA;EACA,YAAY,GAAG,eAAe,UAAU,MAAM;EAC9C;;;;;;EAOA,YAAY,aAAa;;;;EAKzB;;;;EAKA,QAAQ,gBAAgB;;;;EAKxB,UAAU,GAAG,KAAK,eAAe,UAAU,MAAM;;;;EAKjD,QAAQ;;;;EAKR;;;;EAKA;;cAGW;EACX;EACA;EAEA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA,YAAY,GAAG,eAAe,UAAU,MAAM;EAC9C;EACA;EACA;EAEA,YAAY,eAAe;;;;EAK3B,QAAQ,gBAAgB;;;;;;;;;;;EAYxB,OAAO;;;;;;;;;;;EAYP,UAAU;;;;;;;;;;;EAYV,QAAQ,cAAc;;;;;;;EAQtB,IAAI;;;;EAKJ,UAAU,GAAG,KAAK,eAAe,UAAU,MAAM;;;;EAKjD,oBAAoB;;;;EAKpB,SAAS;;;;EAKT,QAAQ;;;;EAKR;;;;;EAMA;;;;EAKA,UAAU;;;;;;EAOV;;cAGW;;EAEX;EACA;EACA;EACA;EACA;EAEA;;;;;;;EAQA,eAAe;IACb;IACA;IACA;;;EAIF,eAAe,KAAK;;EAEpB,sBAAsB,KAAK;;EAE3B,WAAW,QAAQ;;EAEnB,kBAAkB,QAAQ;;EAE1B,aAAa,UAAU;;EAEvB,oBAAoB,UAAU;;EAG9B,aAAa,KAAK;;EAElB,mBAAmB,KAAK;;EAGxB,gBAAgB,KAAK,UAAU;;EAE/B,eAAe,KAAK,UAAU;;EAE9B,qBAAqB,KAAK,UAAU;;EAEpC,iBAAiB,KAAK,UAAU;;EAGhC,4BAA4B,KAAK,SAAS,QAAQ;;EAElD,wBAAwB,KAAK,SAAS,QAAQ;;EAE9C,8BAA8B,KAAK,SAAS,QAAQ;;EAEpD,0BAA0B,KAAK,SAAS,QAAQ;;EAGhD,aAAa;;EAGb,WAAW;;EAGX,WAAW;;EAEX,iBAAiB;EAEjB,wBAAwB;EACxB,uBAAuB;EACvB,2BAA2B;EAC3B,yBAAyB;;EAEzB,qBAAqB;EAErB,gBAAgB;EAChB,oBAAoB;EACpB,kBAAkB;;EAGlB,gBAAgB;;EAEhB,oBAAoB;;EAEpB,kBAAkB;;EAGlB,SAAS,KAAK,SAAS,QAAQ;;;;;EAM/B,QAAQ,aAAa;;EAGrB,aAAa;;;;;;;;EASb,WACE,cACA,mBACA,qBACA,QAAQ;;;;EAMV,eAAe,iBAAiB,iBAAiB,QAAQ;;;;EAKzD,WAAW,UAAU,UAAU,QAC7B,eAAe,KACf,cAAc,KACd,WAAW,MAAM,eAChB,YAAY;;EAGf,WAAW,KAAK,SAAS,QAAQ;;KAEvB,oBAAoB,QAAQ;UAEvB;EACf;;UAEe;;EAEf;;UAEe;;EAEf;EACA,SAAS;;UAEM;EACf,UAAU;EACV,UAAU;EACV,aAAa,aAAa,QAAQ;EAElC;EACA;EAEA;EACA;EACA,YAAY;;KAGF;KACA;;KAEA,oBACR;KAGQ,eAAe;cAEd;EACX;EACA;WACS,mBAAmB;WACnB,kBAAkB;WAClB,8BAA8B;EACvC,QAAQ;EAER,YAAY;;;;;;;;;EAUZ,QAAQ,aAAa,gBAAgB;;;;EAIrC;;;;;;;;;;;;;;;;;;;;;EAsBA,QACE,qBACA,OAAO,iBACN;;;;;;;;;;;;;;;;;;;EAmBH,QACE,qBACA,qBACA,OAAO;;;;;;;EAST,cAAc,gBAAgB;;;;;;;;EAS9B,WAAW,KAAK,SAAS,OAAO;;;;;;;EAQhC,eAAe,cAAc,uBAAuB;;;;;;;;;;;;;;;EAgBpD,SAAS,GACP,eACA,qBACA,WAAW,eAAe,UAAU,MAAM,GAC1C,eAAe;EAEjB,SAAS,cAAc,sBAAsB;;;;;;EAO7C,YAAY,KAAK;;;;;;;;;;;;;EAcjB,UAAU;;;;;;;;;;;;EAaV,YAAY,qBAAqB;EACjC,YAAY;;;;EAKZ,eAAe,KAAK;;EAEpB,eAAe,qBAAqB;;EAEpC,eAAe;;;;EAKf,KACE,OAAO,WACP,WACE,aAAa,SACb,eAAe,mBACL;;;;EAMd,aAAa,YAAY,KAAK;;;;EAK9B,MAAM,iBAAiB,eAAe;;;;;EAMtC,cAAc;;;;;EAMd,cAAc,eAAe;;EAE7B,iBAAiB;;;;;;;;;;;;;;;;;EAkBjB,gBAAgB,eAAe;;EAE/B,mBAAmB;;;;;;EAOnB,sBAAsB,eAAe;;;;EAKrC,mBAAmB;;;;EAKnB,yBAAyB;;;;;;;;;;;;;;;;EAiBzB,OAAO,KAAK,eAAe,uBAAuB;;;;;;;;;;;;;;;;;;;;;EAsBlD,OACE,eACA,sBACA;EAEF,OAAO,GACL,eACA,qBACA,WAAW,eAAe,UAAU,MAAM,GAC1C,eAAe;;EAGjB,OACE,eACA,qBACA,QAAQ,QACR;;;;;;;EASF,eACE,eACA,sBACA;EAEF,eAAe,GACb,eACA,qBACA,WAAW,eAAe,UAAU,MAAM,GAC1C,eAAe;;EAGjB,eACE,eACA,qBACA,QAAQ,QACR;;;;;;;EAUF,aAAa,eAAe,uBAAuB;;;;;;EAOnD,UAAU,QAAQ;;;;;;;EAQlB,yBAAyB,UAAU,wBAAwB;EAC3D,yBAAyB,UAAU,cACjC,iCACQ;EACV,yBAAyB;;;;EAKzB,eAAe;;;;EAKf,eAAe,aAAa;;;;EAK5B,yBACE,aACA,gBACA,QAAQ;;;;EAMV,qBAAqB,cAAc;;;;EAKnC,gCAAgC,cAAc;;;;;;;;;;;;;EAc9C,4BAA4B;;;;;;EAO5B,mBAAmB;;;;;;EAOnB,qBAAqB;;;;;;;;;EAUrB,wBAAwB;;;;;;;;;;EAWxB,mBAAmB;;;;;;;;;;;;;;;;;;;;;;EAuBnB,MAAM,0BAA0B,eAAe;;;;;;;;;;;;;;;;;;;;EAqB/C,WACE,0BACA,eAAe,eACd;;;;;;;EAQH;;;;;;;EAQA;;;;;;;;;;;;;EAcA,aAAa,iBAAiB;;;;EAK9B,KAAK,UAAU,iBAAiB;;;;EAKhC,gBAAgB,UAAU,iBAAiB;;;;;;EAQ3C,YAAY;;EAEZ,YAAY,aAAa,iBAAiB;;;;EAI1C;;;;;;EAQA,QAAQ;;;;EAIR;;;;;;;;EASA,MAAM;;;;EAIN;;;;;;;;EASA,QAAQ;;;;EAIR;;;;;;EAOA,MAAM;;;;EAIN;;;;;;EAOA,KAAK;;;;EAIL;;;;;;;;;;;;;;EAeA,iBAAiB;;;;;;;;;;;;;EAcjB,cAAc;;;;EAId;;;;;;EAOA,UAAU;;;;EAIV;;;;;;;;;;;;;EAcA,cAAc;;;;EAId;;;;;;;;;;;;;EAcA,aAAa;;;;EAIb;;;;;;;EAQA,WAAW,UAAU;;EAErB,WAAW,KAAK;;;;EAKhB,gBAAgB,UAAU;;;;;;EAO1B,WAAW,0BAA0B;;;;;EAMrC,cAAc,QAAQ;;;;;;EAOtB,KAAK,UAAU;;EAEf,KAAK,KAAK;;;;;;;EAQV,YAAY,UAAU,qBAAqB;EAC3C,YACE,UAAU,qBACV,OAAO,SAAS;;;;EAMlB,GAAG,wBAAwB,cAAc;;UAG1B;EACf;EACA;;EAEA;;UAEe,iCAAiC;EAChD;;UAGe;EACf;EACA;;;;;iBC7iCc,sBAAsB,aAAa;UAqBlC;EACf,eAAe;;;iBAID,cAAc,UAAU,uBAAuB;;iBA6RzC,OAAO,kBAAyC;;iBA2DtD,kBACd,wBACA"}

package/dist/cli.d.ts

@@ -1,2 +1,2 @@
-import { a as runCLI, i as isDirectExecution, n as collectIgnorePatterns, r as createProgram, t as CreateProgramOptions } from "./cli-r8LDolDk.js";
+import { a as runCLI, i as isDirectExecution, n as collectIgnorePatterns, r as createProgram, t as CreateProgramOptions } from "./cli-dxsaVVVq.js";
 export { CreateProgramOptions, collectIgnorePatterns, createProgram, isDirectExecution, runCLI };

package/dist/cli.js

@@ -1,2 +1,2 @@
-import { i as runCLI, n as createProgram, r as isDirectExecution, t as collectIgnorePatterns } from "./cli-DGez8MSI.js";
+import { i as runCLI, n as createProgram, r as isDirectExecution, t as collectIgnorePatterns } from "./cli-BTHx4yp_.js";
 export { collectIgnorePatterns, createProgram, isDirectExecution, runCLI };

package/dist/index.d.ts

@@ -1,4 +1,4 @@
-import { a as runCLI, i as isDirectExecution, n as collectIgnorePatterns, r as createProgram, t as CreateProgramOptions } from "./cli-r8LDolDk.js";
+import { a as runCLI, i as isDirectExecution, n as collectIgnorePatterns, r as createProgram, t as CreateProgramOptions } from "./cli-dxsaVVVq.js";
 //#region src/types.d.ts
 export type DiagnosticSeverity = "Error" | "Warning" | "Information" | "Hint";
 export type DiagnosticSeverityLevel = 1 | 2 | 3 | 4;
@@ -79,18 +79,22 @@ export declare function fileUriToPath(uri: string): string;
  * Finds the package root directory across both development (src/) and production (dist/) environments.
  */
 export declare function getPackageRoot(): string;
+/** Resolves the default annotations path from environment variable, bundled file, or user cache. */
 export declare function getDefaultAnnotationsPath(): string;
 /**
  * @deprecated Use getDefaultAnnotationsPath() instead.
  * Returns the directory containing the resolved annotations.lua file.
  */
 export declare function getDefinitionsDir(): string;
+/** Resolves the absolute path to the default .luarc.json template shipped with the package. */
 export declare function getDefaultTemplatePath(): string;
 /**
  * Strips single-line and multi-line comments from JSONC text using jsonc-parser.
  */
 export declare function stripJsonComments(text: string): string;
+/** Parses JSONC text with support for comments and trailing commas. */
 export declare function parseJsonc<T = unknown>(text: string): T;
+/** Reads and parses a .luarc.json configuration file from disk. */
 export declare function loadConfigFile(filePath: string): LuaRCConfig;
 /**
  * Removes trailing `/` characters from a path-like string.
@@ -147,17 +151,8 @@ export declare function initWorkspace(workspacePath: string, options?: InitWorks
 export declare const FALLBACK_LUALS_VERSION = "3.19.1";
 export declare const DEFAULT_LUALS_VERSION = "latest";
 /**
- * Validates a LuaLS version/tag and rebuilds it from the allow-list above.
- *
- * Version strings originate from untrusted sources: the GitHub releases API
- * response and user supplied `--luals-version` arguments. They are interpolated
- * into cache directory paths, download URLs, and the path of the binary that is
- * eventually executed, so they must be constrained to a single safe path
- * segment. Rebuilding the value character by character guarantees the returned
- * string only ever contains allow-listed characters (CodeQL: js/command-line-injection).
- *
- * @returns the normalized version (a single leading `v` is dropped), or `null`
- *          when the input cannot be used as a version tag.
+ * Validates and normalizes a LuaLS version string to prevent path traversal or injection.
+ * Drops a single leading 'v' and returns null on invalid characters.
  */
 export declare function sanitizeLuaLSVersion(raw: string): string | null;
 /**
@@ -184,9 +179,11 @@ export interface PlatformInfo {
   assetName: string;
   binaryRelativePath: string;
 }
+/** Resolves platform-specific binary naming and relative paths for the host operating system. */
 export declare function getPlatformInfo(version?: string): PlatformInfo;
 //#endregion
 //#region src/luals/cache.d.ts
+/** Returns the base directory in the system cache where LuaLS versions and metadata are stored. */
 export declare function getBaseLuaLSCacheDir(): string;
 /**
  * Cache directory of a LuaLS version. `baseCacheDir` defaults to the system
@@ -207,8 +204,11 @@ export interface LuaLSMetadata {
  * Calculates the ISO 8601 week string for a given date in the format 'YYYY-Www' (e.g. '2026-W39').
  */
 export declare function getIsoWeek(d?: Date): string;
+/** Returns the path to the LuaLS metadata.json file within the specified cache directory. */
 export declare function getLuaLSMetadataPath(baseCacheDir?: string): string;
+/** Reads and parses the LuaLS metadata.json file, purging corrupted or invalid files automatically. */
 export declare function readLuaLSMetadata(baseCacheDir?: string): LuaLSMetadata | null;
+/** Writes metadata.json containing the latest checked version and timestamp. */
 export declare function writeLuaLSMetadata(metadata: LuaLSMetadata, baseCacheDir?: string): void;
 /**
  * Lists all candidate LuaLS version directories under baseCacheDir without running
@@ -233,27 +233,98 @@ export declare function findExistingLuaLSDir(version: string, baseCacheDir?: str
 //#endregion
 //#region src/luals/validation.d.ts
 /**
- * Verifies that a LuaLS binary exists, has non-trivial size, and is executable.
+ * Escapes single quotes for safe PowerShell single-quoted string interpolation.
+ */
+export declare function escapePowerShellSingleQuote(str: string): string;
+/**
+ * Maximum total decompressed size of a LuaLS release archive (500 MB).
+ * Protects against zip bombs and maliciously inflated archives (#31).
+ */
+export declare const MAX_DECOMPRESSED_SIZE_BYTES: number;
+/**
+ * Maximum number of members allowed in a LuaLS release archive (10,000).
+ * Protects against inode exhaustion and archive recursion attacks (#31).
+ */
+export declare const MAX_ARCHIVE_MEMBER_COUNT = 10000;
+/** Parses the file size column from a 'tar -tvf' listing output line. */
+export declare function parseTarTvSize(line: string): number;
+/** Locates the platform tar executable path, checking System32 on Windows. */
+export declare function getTarBinary(): string;
+/** Pre-inspects a ZIP archive's central directory to enforce extraction safety constraints (#31). */
+export declare function inspectZipMembers(archivePath: string): {
+  memberCount: number;
+  totalDeclaredSize: number;
+};
+/** Detects whether an archive file starts with ZIP magic bytes. */
+export declare function isZipArchive(archivePath: string): boolean;
+/** Detects whether an archive file starts with GZIP magic bytes. */
+export declare function isGzipArchive(archivePath: string): boolean;
+/** Pre-inspects archive members using tar listing or zip directory parsing to enforce extraction safety constraints (#31). */
+export declare function validateArchiveMembers(archivePath: string): Promise<{
+  memberCount: number;
+  totalDeclaredSize: number;
+}>;
+/**
+ * Minimum plausible size of a downloaded LuaLS executable. Release assets are
+ * several megabytes, so anything smaller is a truncated download or a stray
+ * file. This floor only applies to binaries nanos-lint fetched itself: a
+ * user-supplied `LUALS_BIN` may legitimately be a small wrapper script.
+ */
+export declare const MIN_DOWNLOADED_BINARY_SIZE_BYTES = 100000;
+/**
+ * Verifies that a downloaded or cached LuaLS binary exists, has non-trivial
+ * size, and is executable.
  */
 export declare function isBinaryValid(binaryPath: string): boolean;
+/**
+ * Verifies that an explicitly configured binary is a regular file that runs and
+ * reports a LuaLS version, without the downloaded-archive size heuristic so
+ * wrapper scripts (`LUALS_BIN=/usr/local/bin/lua-language-server`) keep working.
+ */
+export declare function isBinaryRunnable(binaryPath: string): boolean;
+/**
+ * Validates an explicitly configured LuaLS binary (`LUALS_BIN` environment
+ * variable or `--luals-bin` CLI option) and returns its path.
+ *
+ * Both are documented escape hatches, so a typo, a stale path, a directory or an
+ * unrelated executable must fail with an actionable error instead of a
+ * confusing low-level failure deep inside the check run (#26). Executables are
+ * accepted as-is when `--version` reports a version, including the thin wrapper
+ * scripts that Homebrew/mason-style installations put on `PATH`: the size floor
+ * used for downloaded archives would reject those.
+ *
+ * @param binaryPath Path exactly as the user supplied it.
+ * @param source Name of the setting being validated (`LUALS_BIN` / `--luals-bin`).
+ */
+export declare function assertValidLuaLSBinary(binaryPath: string, source: string): string;
 //#endregion
 //#region src/luals/download.d.ts
+export declare const DOWNLOAD_TIMEOUT_MS = 120000;
+export declare const MAX_ARCHIVE_SIZE_BYTES: number;
+export declare const ALLOWED_DOWNLOAD_DOMAINS: readonly string[];
 /**
- * Escapes single quotes for safe PowerShell single-quoted string interpolation.
+ * Validates that a download URL uses HTTPS and targets an allowlisted host.
  */
-export declare function escapePowerShellSingleQuote(str: string): string;
+export declare function isAllowedDownloadUrl(urlString: string): boolean;
+/**
+ * Calculates the SHA-256 hash of a file on disk in bounded memory.
+ */
+export declare function computeFileSha256(filePath: string): string;
+/**
+ * Enforces a maximum byte count on an asynchronous download stream.
+ */
+export declare function limitDownloadStream(source: AsyncIterable<Uint8Array | Buffer>): AsyncGenerator<Uint8Array | Buffer, void, unknown>;
 export interface DownloadOptions {
   quiet?: boolean;
   reuseExisting?: boolean;
   /** Base directory searched for an installed copy when reusing. Defaults to the system cache. */
   cacheDir?: string;
 }
+/** Downloads, verifies, and extracts the LuaLS release archive for the current platform. */
 export declare function downloadAndExtractLuaLS(version?: string, targetDir?: string, options?: DownloadOptions): Promise<string>;
 //#endregion
 //#region src/luals/files.d.ts
-/**
- * Counts candidate Lua files within targetPath, taking ignoreDir and files.exclude into account.
- */
+/** Counts candidate Lua files within targetPath, taking workspace ignoreDir and files.exclude into account (#27). */
 export declare function countCheckedFiles(targetPath: string, configPath?: string): number;
 //#endregion
 //#region src/luals/runner.d.ts
@@ -264,7 +335,9 @@ export interface ResolveLuaLSOptions {
   /** Set to `false` to always fetch the archive instead of reusing an installed copy. */
   reuseExisting?: boolean;
 }
+/** Resolves the executable path of a LuaLS binary from env, bundle, cache, or network download. */
 export declare function resolveLuaLSBinary(version?: string, options?: ResolveLuaLSOptions): Promise<string>;
+/** Executes the LuaLS diagnostics check on the target path using merged configurations. */
 export declare function runLuaLSCheck(targetPath: string, configPath: string, options: CheckOptions): Promise<CheckResult>;
 //#endregion
 //#region src/reporter.d.ts
@@ -273,6 +346,7 @@ export declare function runLuaLSCheck(targetPath: string, configPath: string, op
  * and TTY detection.
  */
 export declare function shouldEnableColor(): boolean;
+/** Returns ANSI color escape code helpers or empty strings when colors are disabled. */
 export declare function getColors(useColor?: boolean): {
   reset: string;
   bold: string;
@@ -285,11 +359,17 @@ export declare function getColors(useColor?: boolean): {
   cyan: string;
   gray: string;
 };
+/** Formats a numeric diagnostic severity level into a colored badge. */
 export declare function formatSeverityBadge(severity: number, useColor?: boolean): string;
+/** Formats a noun with its count and pluralizes if necessary. */
 export declare function pluralize(count: number, singular: string, plural?: string): string;
+/** Formats the summary text detailing diagnostic counts and affected files. */
 export declare function formatProblemSummary(totalProblems: number, errors: number, warnings: number, files: number): string;
+/** Formats check results into pretty human-readable terminal output. */
 export declare function formatPretty(result: CheckResult, cwd?: string, useColor?: boolean): string;
+/** Formats check diagnostics into GitHub Actions workflow annotation commands. */
 export declare function formatGitHubAnnotations(result: CheckResult, cwd?: string): string;
+/** Formats check results according to the chosen format (pretty, json, github). */
 export declare function formatReport(result: CheckResult, format?: "pretty" | "json" | "github", cwd?: string, useColor?: boolean): string;
 //#endregion
 //#region node_modules/env-paths/index.d.ts
@@ -367,11 +447,7 @@ export declare function getDirectorySize(targetPath: string): number;
  */
 export declare function formatBytes(bytes: number): string;
 //#endregion
-//#region src/annotations.d.ts
-export declare const DOCGEN_REPO = "nanos-world/vscode-extension";
-export declare const DOCGEN_BRANCH = "docgen-output";
-export declare const RAW_ANNOTATIONS_URL = "https://raw.githubusercontent.com/nanos-world/vscode-extension/refs/heads/docgen-output/annotations.lua";
-export declare const GITHUB_COMMITS_API = "https://api.github.com/repos/nanos-world/vscode-extension/commits/docgen-output";
+//#region src/annotations-metadata.d.ts
 export interface AnnotationsDate {
   year: number;
   month: number;
@@ -384,32 +460,44 @@ export interface AnnotationsMetadata {
 }
 export declare const ANNOTATIONS_FILENAME = "annotations.lua";
 export declare const METADATA_FILENAME = "metadata.json";
+export declare const MIN_ANNOTATIONS_SIZE_BYTES = 1000;
+export declare const MAX_ANNOTATIONS_SIZE_BYTES: number;
+export declare const MAX_COMMIT_JSON_SIZE_BYTES: number;
+/** Returns current date string formatted as YYYY-MM-DD alongside a date components object. */
 export declare function getTodayDateString(d?: Date): {
   dateStr: string;
   dateObj: AnnotationsDate;
 };
+/** Returns the system cache directory used for nanos world annotations. */
 export declare function getAnnotationsCacheDir(): string;
+/** Returns the full path to the cached annotations.lua file. */
 export declare function getCachedAnnotationsFilePath(): string;
+/** Returns the full path to the annotations metadata.json file. */
 export declare function getAnnotationsMetadataFilePath(): string;
+/** Reads and parses annotations metadata.json, purging corrupt files automatically. */
 export declare function readAnnotationsMetadata(cacheDir?: string): AnnotationsMetadata | null;
-/**
- * Verifies that an annotations file exists, is a regular file, is of non-trivial size (>= 1000 bytes),
- * and begins with valid Lua comments or nanos world definitions.
- */
+/** Verifies that an annotations file exists, is non-trivial in size, and contains valid header. */
 export declare function isAnnotationsValid(filePath: string): boolean;
-export declare function fetchLatestCommitId(): Promise<string | null>;
-export declare function fetchRawAnnotationsContent(): Promise<string>;
-/**
- * Updates the metadata lastChecked date atomically without modifying annotations.lua.
- */
+/** Updates metadata lastChecked date atomically without modifying annotations.lua. */
 export declare function updateLastCheckedDate(commitId: string, cacheDir?: string): AnnotationsMetadata;
-/**
- * Downloads annotations.lua, writes it and the new metadata in a chained atomic transaction.
- * If any step fails, the previous cache state is reverted.
- */
+//#endregion
+//#region src/annotations-download.d.ts
+export declare const DOCGEN_REPO = "nanos-world/vscode-extension";
+export declare const DOCGEN_BRANCH = "docgen-output";
+export declare const RAW_ANNOTATIONS_URL = "https://raw.githubusercontent.com/nanos-world/vscode-extension/refs/heads/docgen-output/annotations.lua";
+export declare const GITHUB_COMMITS_API = "https://api.github.com/repos/nanos-world/vscode-extension/commits/docgen-output";
+/** Fetches the latest commit SHA for the annotations branch from the GitHub API. */
+export declare function fetchLatestCommitId(): Promise<string | null>;
+/** Returns raw annotations URL, pinned to commit SHA if provided and valid. */
+export declare function getRawAnnotationsUrl(commitSha?: string): string;
+/** Downloads raw annotations.lua content from GitHub raw content endpoints. */
+export declare function fetchRawAnnotationsContent(commitSha?: string): Promise<string>;
+/** Downloads annotations.lua and writes metadata in a chained atomic transaction with rollback. */
 export declare function downloadAndCacheAnnotations(commitId: string, cacheDir?: string, options?: {
   quiet?: boolean;
 }): Promise<string>;
+//#endregion
+//#region src/annotations.d.ts
 export interface ResolveAnnotationsOptions {
   customPath?: string;
   cacheDir?: string;
@@ -430,19 +518,28 @@ export type LogLevel = "silent" | "error" | "warn" | "info" | "debug";
 export declare const LOG_LEVELS: ReadonlyArray<LogLevel>;
 export declare const LOG_LEVEL_PRIORITY: Record<LogLevel, number>;
 export declare const DEFAULT_LOG_LEVEL: LogLevel;
+/** Validates whether a string corresponds to a recognized log level. */
 export declare function isValidLogLevel(level: string): level is LogLevel;
+/** Parses a string into a valid LogLevel, defaulting to 'warn'. */
 export declare function parseLogLevel(raw?: string | null): LogLevel;
 export declare class Logger {
   private level;
   constructor(initialLevel?: LogLevel);
+  /** Sets the active minimum logging level. */
   setLevel(level: LogLevel): void;
+  /** Returns the current active log level. */
   getLevel(): LogLevel;
+  /** Checks if a message at the specified level should be emitted. */
   isEnabledFor(level: LogLevel): boolean;
   /** Whether command results should be written; only `silent` disables them. */
   isOutputEnabled(): boolean;
+  /** Logs an error-level message to stderr. */
   error(...args: unknown[]): void;
+  /** Logs a warning-level message to stderr. */
   warn(...args: unknown[]): void;
+  /** Logs an informational message to stdout. */
   info(...args: unknown[]): void;
+  /** Logs a debug-level diagnostic message to stdout. */
   debug(...args: unknown[]): void;
 }
 export declare const logger: Logger;
@@ -498,7 +595,9 @@ export interface CacheStatusReport {
   luals: LuaLSCacheStatus;
   annotations: AnnotationsCacheStatus;
 }
+/** Collects detailed status and disk usage information for LuaLS and annotations caches. */
 export declare function getCacheStatus(baseCacheDir?: string): CacheStatusReport;
+/** Formats a cache status report into human-readable terminal output. */
 export declare function formatCacheStatusPretty(report: CacheStatusReport): string;
 //#endregion
 export { CreateProgramOptions, collectIgnorePatterns, createProgram, isDirectExecution, runCLI };

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","names":[],"sources":["../src/types.ts","../src/config.ts","../src/luals/version.ts","../src/luals/platform.ts","../src/luals/cache.ts","../src/luals/validation.ts","../src/luals/download.ts","../src/luals/files.ts","../src/luals/runner.ts","../src/reporter.ts","../node_modules/env-paths/index.d.ts","../src/paths.ts","../src/annotations.ts","../src/logger.ts","../src/errors.ts","../src/cache-status.ts"],"x_google_ignoreList":[10],"mappings":";;YAGY;YACA;iBAEK;EACf;IACE;IACA;;EAEF;IACE;IACA;;;iBAIa;EACf,OAAO;EACP,UAAU;EACV;EACA;EACA;;YAGU,mBAAmB,eAAe;iBAE7B;EACf;EACA,aAAa;EACb;EACA;EACA;EACA;EACA;EACA;EACA;;iBAGe;EACf;EACA;EACA;EACA;EACA;EACA;EACA,aAAa;;iBAGE;EACf;EACA;IACE;IACA;IACA,UAAU;KACT;;EAEH;IACE;IACA;IACA;KACC;;EAEH;IACE;KACC;;EAEH;IACE;IACA;IACA;IACA,WAAW;IACX,mBAAmB;KAClB;;GAEF;;;;;;wBAOa,cAAc;;;;;;wBCnEd;wBAWA;;;;;wBAmBA;wBAIA;;;;wBAQA,kBAAkB;wBAKlB,WAAW,aAAa,eAAe;wBAavC,eAAe,mBAAmB;;;;;;;;;wBAgClC,qBAAqB;iBAQpB;EACf;;;;;;;;qBASW,8BAA8B;;;;;;;;;;;wBA2E3B,aACd,MAAM,aACN,WAAU,aACV,0BACA,UAAU,qBACT;iBAgJc;EACf;EACA;;;;;;wBAOc,uBACd,uBACA,2BACA,UAAU;EACP;EAAoB;;iBA6ER;EACf;EACA;;;;;wBAMc,cAAc,uBAAuB,UAAU;;;qBC5blD;qBACA;;;;;;;;;;;;;;wBA0BG,qBAAqB;;;;;wBAmCf,qCAAqC;;;;;wBAiCrC,6BAA6B;;;;;;wBAU7B,oBAAoB,mBAAmB;;;iBCxG5C;EACf;EACA;EACA;EACA;;wBAGc,gBAAgB,mBAA2C;;;wBCD3D;;;;;wBAQA,YACd,kBACA;;;;wBAQc,kBAAkB;qBAQrB;iBAEI;EACf;EACA;EACA;;;;;wBAMc,WAAW,IAAG;wBASd,qBAAqB;wBAIrB,kBAAkB,wBAAgD;wBAgClE,mBACd,UAAU,eACV;;;;;wBAec,2BAA2B;;;;;wBA2B3B,wBAAwB;;;;;wBAwCxB,8BACd,qBACA;;;;;wBAsCc,qBACd,iBACA;;;;;;wBCnNc,cAAc;;;;;;wBCWd,4BAA4B;iBAI3B;EACf;EACA;;EAEA;;wBAGoB,wBACpB,kBACA,oBACA,UAAU,kBACT;;;;;;wBCzBa,kBAAkB,oBAAoB;;;iBCiCrC;EACf;;EAEA;;EAEA;;wBAGoB,mBACpB,kBACA,UAAU,sBACT;wBAmQmB,cACpB,oBACA,oBACA,SAAS,eACR,QAAQ;;;;;;;wBC1SK;wBAUA,UAAU;;;;;;;;;;;;wBA6BV,oBACd,kBACA;wBAgBc,UAAU,eAAe,kBAAkB;wBAI3C,qBACd,uBACA,gBACA,kBACA;wBAqBc,aACd,QAAQ,aACR,cACA;wBAmFc,wBAAwB,QAAQ,aAAa;wBAsC7C,aACd,QAAQ,aACR,uCACA,cACA;;;KC5NU;;;;;;;;;;WAUF;;;;;;;;;;WAWA;;;;;;;;;;WAWA;;;;;;;;;;WAWA;;;;;;;;;;WAWA;;;;;;;;qBCzDG,aAAA;;;;;wBAMG,WAAW;;;;;wBAYX,iBAAiB;;;;wBAqCjB,YAAY;;;qBCvDf;qBACA;qBACA;qBAEA;iBAGI;EACf;EACA;EACA;;iBAGe;EACf;EACA;EACA,MAAM;;qBAGK;qBACA;wBAEG,mBAAmB,IAAG;EAAsB;EAAiB,SAAS;;wBAWtE;wBAIA;wBAIA;wBAIA,wBAAwB,oBAA8C;;;;;wBAiCtE,mBAAmB;wBAuBb,uBAAuB;wBAsBvB,8BAA8B;;;;wBA0CpC,sBACd,kBACA,oBACC;;;;;wBAgCmB,4BACpB,kBACA,mBACA;EAAY;IACX;iBAiHc;EACf;EACA;EACA;;;;;;;;;;wBAWoB,mBAAmB,UAAS,4BAAiC;;;YCnVvE;qBAEC,YAAY,cAAc;qBAQ1B,oBAAoB,OAAO;qBAQ3B,mBAAmB;wBAEhB,gBAAgB,gBAAgB,SAAS;wBAIzC,cAAc,sBAAsB;qBAMvC;UACH;EAEI,YAAA,eAAe;EAYpB,SAAS,OAAO;EAMhB,YAAY;EAIZ,aAAa,OAAO;;EAKpB;EAIA,SAAS;EAMT,QAAQ;EAMR,QAAQ;EAMR,SAAS;;qBAOL,QAAM;;;qBCzFN,uBAAuB;WAKhB;WACA;WALO;EAGvB,YAAA,iBACgB,cACA,6BAChB;IAAY;;;qBAMH,oBAAoB;WACN;;qBAGd,mBAAmB;WACL;;qBAGd,yBAAyB;WACX;;qBAGd,mBAAmB;WACL;;;;iBCXV;EACf;EACA;EACA;EACA;EACA;;iBAGe;EACf;EACA;EACA;EACA,UAAU;;iBAGK;EACf;EACA;EACA;EACA;EACA;EACA;;iBAGe;EACf;EACA;EACA;EACA,OAAO;EACP,aAAa;;wBAGC,eAAe,wBAA2C;wBAyE1D,wBAAwB,QAAQ"}
+{"version":3,"file":"index.d.ts","names":[],"sources":["../src/types.ts","../src/config.ts","../src/luals/version.ts","../src/luals/platform.ts","../src/luals/cache.ts","../src/luals/validation.ts","../src/luals/download.ts","../src/luals/files.ts","../src/luals/runner.ts","../src/reporter.ts","../node_modules/env-paths/index.d.ts","../src/paths.ts","../src/annotations-metadata.ts","../src/annotations-download.ts","../src/annotations.ts","../src/logger.ts","../src/errors.ts","../src/cache-status.ts"],"x_google_ignoreList":[10],"mappings":";;YAGY;YACA;iBAEK;EACf;IACE;IACA;;EAEF;IACE;IACA;;;iBAIa;EACf,OAAO;EACP,UAAU;EACV;EACA;EACA;;YAGU,mBAAmB,eAAe;iBAE7B;EACf;EACA,aAAa;EACb;EACA;EACA;EACA;EACA;EACA;EACA;;iBAGe;EACf;EACA;EACA;EACA;EACA;EACA;EACA,aAAa;;iBAGE;EACf;EACA;IACE;IACA;IACA,UAAU;KACT;;EAEH;IACE;IACA;IACA;KACC;;EAEH;IACE;KACC;;EAEH;IACE;IACA;IACA;IACA,WAAW;IACX,mBAAmB;KAClB;;GAEF;;;;;;wBAOa,cAAc;;;;;;wBCnEd;;wBAYA;;;;;wBAmBA;;wBAKA;;;;wBAQA,kBAAkB;;wBAMlB,WAAW,aAAa,eAAe;;wBAcvC,eAAe,mBAAmB;;;;;;;;;wBAgClC,qBAAqB;iBAQpB;EACf;;;;;;;;qBASW,8BAA8B;;;;;;;;;;;wBA2E3B,aACd,MAAM,aACN,WAAU,aACV,0BACA,UAAU,qBACT;iBAoJc;EACf;EACA;;;;;;wBAOc,uBACd,uBACA,2BACA,UAAU;EACP;EAAoB;;iBA8ER;EACf;EACA;;;;;wBAMc,cAAc,uBAAuB,UAAU;;;qBCrclD;qBACA;;;;;wBAaG,qBAAqB;;;;;wBAkCf,qCAAqC;;;;;wBAkCrC,6BAA6B;;;;;;wBAU7B,oBAAoB,mBAAmB;;;iBC3F5C;EACf;EACA;EACA;EACA;;;wBAIc,gBAAgB,mBAA2C;;;;wBCD3D;;;;;wBAQA,YACd,kBACA;;;;wBAQc,kBAAkB;qBAQrB;iBAEI;EACf;EACA;EACA;;;;;wBAMc,WAAW,IAAG;;wBAUd,qBAAqB;;wBAKrB,kBACd,wBACC;;wBAyCa,mBACd,UAAU,eACV;;;;;wBAiBc,2BACd;;;;;wBA8Bc,wBAAwB;;;;;wBA4CxB,8BACd,qBACA;;;;;wBAwCc,qBACd,iBACA;;;;;;wBCxOc,4BAA4B;;;;;qBAQ/B;;;;;qBAMA;;wBAGG,eAAe;;wBAwDf;;wBAWA,kBAAkB;EAChC;EACA;;;wBAgGc,aAAa;;wBAoBb,cAAc;;wBAaR,uBACpB,sBACC;EAAU;EAAqB;;;;;;;;qBA2DrB;;;;;wBA2BG,cAAc;;;;;;wBAuBd,iBAAiB;;;;;;;;;;;;;;;wBA4BjB,uBAAuB,oBAAoB;;;qBC/U9C;qBACA;qBAEA;;;;wBAKG,qBAAqB;;;;wBAqBrB,kBAAkB;;;;wBAuBX,oBACrB,QAAQ,cAAc,aAAa,UAClC,eAAe,aAAa;iBAed;EACf;EACA;;EAEA;;;wBAIoB,wBACpB,kBACA,oBACA,UAAU,kBACT;;;;wBCaa,kBAAkB,oBAAoB;;;iBClFrC;EACf;;EAEA;;EAEA;;;wBAIoB,mBACpB,kBACA,UAAU,sBACT;;wBA2RmB,cACpB,oBACA,oBACA,SAAS,eACR,QAAQ;;;;;;;wBCrUK;;wBAWA,UAAU;;;;;;;;;;;;;wBA8BV,oBACd,kBACA;;wBAiBc,UACd,eACA,kBACA;;wBAMc,qBACd,uBACA,gBACA,kBACA;;wBAsBc,aACd,QAAQ,aACR,cACA;;wBAgFc,wBAAwB,QAAQ,aAAa;;wBAqC7C,aACd,QAAQ,aACR,uCACA,cACA;;;KCjOU;;;;;;;;;;WAUF;;;;;;;;;;WAWA;;;;;;;;;;WAWA;;;;;;;;;;WAWA;;;;;;;;;;WAWA;;;;;;;;qBCzDG,aAAA;;;;;wBAMG,WAAW;;;;;wBAYX,iBAAiB;;;;wBAqCjB,YAAY;;;iBCzDX;EACf;EACA;EACA;;iBAGe;EACf;EACA;EACA,MAAM;;qBAGK;qBACA;qBACA;qBACA;qBACA;;wBAGG,mBAAmB,IAAG;EACpC;EACA,SAAS;;;wBAUK;;wBAKA;;wBAKA;;wBAKA,wBACd,oBACC;;wBA+Ba,mBAAmB;;wBA2BnB,sBACd,kBACA,oBACC;;;qBCjGU;qBACA;qBACA;qBAEA;;wBAyDS,uBAAuB;;wBA2C7B,qBAAqB;;wBAQf,2BAA2B,qBAAqB;;wBAsDhD,4BACpB,kBACA,mBACA;EAAY;IACX;;;iBC1Kc;EACf;EACA;EACA;;;;;;;;;;wBA6EoB,mBAAmB,UAAS,4BAAiC;;;YClGvE;qBAEC,YAAY,cAAc;qBAQ1B,oBAAoB,OAAO;qBAQ3B,mBAAmB;;wBAGhB,gBAAgB,gBAAgB,SAAS;;wBAKzC,cAAc,sBAAsB;qBAMvC;UACH;EAEI,YAAA,eAAe;;EAYpB,SAAS,OAAO;;EAOhB,YAAY;;EAKZ,aAAa,OAAO;;EAKpB;;EAKA,SAAS;;EAOT,QAAQ;;EAOR,QAAQ;;EAOR,SAAS;;qBAOL,QAAM;;;qBCjGN,uBAAuB;WAKhB;WACA;WALO;EAGvB,YAAA,iBACgB,cACA,6BAChB;IAAY;;;qBAMH,oBAAoB;WACN;;qBAGd,mBAAmB;WACL;;qBAGd,yBAAyB;WACX;;qBAGd,mBAAmB;WACL;;;;iBClBV;EACf;EACA;EACA;EACA;EACA;;iBAGe;EACf;EACA;EACA;EACA,UAAU;;iBAGK;EACf;EACA;EACA;EACA;EACA;EACA;;iBAGe;EACf;EACA;EACA;EACA,OAAO;EACP,aAAa;;;wBAIC,eAAe,wBAA2C;;wBA0E1D,wBAAwB,QAAQ"}

package/dist/index.js

@@ -1,2 +1,2 @@
-import { $ as fetchLatestLuaLSVersionFromGitHub, A as pluralize, At as logger, B as getBaseLuaLSCacheDir, C as updateLastCheckedDate, Ct as systemPaths, D as formatReport, Dt as LOG_LEVEL_PRIORITY, E as formatProblemSummary, Et as LOG_LEVELS, F as downloadAndExtractLuaLS, G as listCachedLuaLSVersionDirs, H as getIsoWeek, I as escapePowerShellSingleQuote, J as writeLuaLSMetadata, K as listCachedLuaLSVersions, L as LUALS_METADATA_FILENAME, M as resolveLuaLSBinary, N as runLuaLSCheck, O as formatSeverityBadge, Ot as Logger, P as countCheckedFiles, Q as FALLBACK_LUALS_VERSION, R as cleanupOldCachedLuaLSVersions, S as resolveAnnotations, St as getDirectorySize, T as formatPretty, Tt as DEFAULT_LOG_LEVEL, U as getLegacyCacheDir, V as getCacheDir, W as getLuaLSMetadataPath, X as getPlatformInfo, Y as isBinaryValid, Z as DEFAULT_LUALS_VERSION, _ as getAnnotationsMetadataFilePath, _t as ConfigError, a as formatCacheStatusPretty, at as getDefaultTemplatePath, b as isAnnotationsValid, bt as cleanCache, c as DOCGEN_BRANCH, ct as initWorkspace, d as METADATA_FILENAME, dt as parseJsonc, et as resolveLatestLuaLSVersion, f as RAW_ANNOTATIONS_URL, ft as resolveWorkspaceConfig, g as getAnnotationsCacheDir, gt as CacheError, h as fetchRawAnnotationsContent, ht as AnnotationsError, i as runCLI, it as getDefaultAnnotationsPath, j as shouldEnableColor, jt as parseLogLevel, k as getColors, kt as isValidLogLevel, l as DOCGEN_REPO, lt as loadConfigFile, m as fetchLatestCommitId, mt as stripTrailingSlashes, n as createProgram, nt as sanitizeLuaLSVersion, o as getCacheStatus, ot as getDefinitionsDir, p as downloadAndCacheAnnotations, pt as stripJsonComments, q as readLuaLSMetadata, r as isDirectExecution, rt as VALID_LUALS_DIAGNOSTIC_CODES, s as ANNOTATIONS_FILENAME, st as getPackageRoot, t as collectIgnorePatterns, tt as resolveLuaLSVersion, u as GITHUB_COMMITS_API, ut as mergeConfigs, v as getCachedAnnotationsFilePath, vt as LuaLSError, w as formatGitHubAnnotations, wt as fileUriToPath, x as readAnnotationsMetadata, xt as formatBytes, y as getTodayDateString, yt as NanosLintError, z as findExistingLuaLSDir } from "./cli-DGez8MSI.js";
-export { ANNOTATIONS_FILENAME, AnnotationsError, CacheError, ConfigError, DEFAULT_LOG_LEVEL, DEFAULT_LUALS_VERSION, DOCGEN_BRANCH, DOCGEN_REPO, FALLBACK_LUALS_VERSION, GITHUB_COMMITS_API, LOG_LEVELS, LOG_LEVEL_PRIORITY, LUALS_METADATA_FILENAME, Logger, LuaLSError, METADATA_FILENAME, NanosLintError, RAW_ANNOTATIONS_URL, VALID_LUALS_DIAGNOSTIC_CODES, cleanCache, cleanupOldCachedLuaLSVersions, collectIgnorePatterns, countCheckedFiles, createProgram, downloadAndCacheAnnotations, downloadAndExtractLuaLS, escapePowerShellSingleQuote, fetchLatestCommitId, fetchLatestLuaLSVersionFromGitHub, fetchRawAnnotationsContent, fileUriToPath, findExistingLuaLSDir, formatBytes, formatCacheStatusPretty, formatGitHubAnnotations, formatPretty, formatProblemSummary, formatReport, formatSeverityBadge, getAnnotationsCacheDir, getAnnotationsMetadataFilePath, getBaseLuaLSCacheDir, getCacheDir, getCacheStatus, getCachedAnnotationsFilePath, getColors, getDefaultAnnotationsPath, getDefaultTemplatePath, getDefinitionsDir, getDirectorySize, getIsoWeek, getLegacyCacheDir, getLuaLSMetadataPath, getPackageRoot, getPlatformInfo, getTodayDateString, initWorkspace, isAnnotationsValid, isBinaryValid, isDirectExecution, isValidLogLevel, listCachedLuaLSVersionDirs, listCachedLuaLSVersions, loadConfigFile, logger, mergeConfigs, parseJsonc, parseLogLevel, pluralize, readAnnotationsMetadata, readLuaLSMetadata, resolveAnnotations, resolveLatestLuaLSVersion, resolveLuaLSBinary, resolveLuaLSVersion, resolveWorkspaceConfig, runCLI, runLuaLSCheck, sanitizeLuaLSVersion, shouldEnableColor, stripJsonComments, stripTrailingSlashes, systemPaths, updateLastCheckedDate, writeLuaLSMetadata };
+import { $ as getLuaLSMetadataPath, A as formatProblemSummary, At as loadConfigFile, B as DOWNLOAD_TIMEOUT_MS, Bt as NanosLintError, C as getCachedAnnotationsFilePath, Ct as sanitizeLuaLSVersion, D as updateLastCheckedDate, Dt as getDefinitionsDir, E as readAnnotationsMetadata, Et as getDefaultTemplatePath, F as shouldEnableColor, Ft as stripTrailingSlashes, G as limitDownloadStream, Gt as fileUriToPath, H as computeFileSha256, Ht as formatBytes, I as resolveLuaLSBinary, It as AnnotationsError, J as findExistingLuaLSDir, Jt as LOG_LEVEL_PRIORITY, K as LUALS_METADATA_FILENAME, Kt as DEFAULT_LOG_LEVEL, L as runLuaLSCheck, Lt as CacheError, M as formatSeverityBadge, Mt as parseJsonc, N as getColors, Nt as resolveWorkspaceConfig, O as formatGitHubAnnotations, Ot as getPackageRoot, P as pluralize, Pt as stripJsonComments, Q as getLegacyCacheDir, Qt as parseLogLevel, R as countCheckedFiles, Rt as ConfigError, S as getAnnotationsMetadataFilePath, St as resolveLuaLSVersion, T as isAnnotationsValid, Tt as getDefaultAnnotationsPath, U as downloadAndExtractLuaLS, Ut as getDirectorySize, V as MAX_ARCHIVE_SIZE_BYTES, Vt as cleanCache, W as isAllowedDownloadUrl, Wt as systemPaths, X as getCacheDir, Xt as isValidLogLevel, Y as getBaseLuaLSCacheDir, Yt as Logger, Z as getIsoWeek, Zt as logger, _ as MAX_ANNOTATIONS_SIZE_BYTES, _t as getPlatformInfo, a as formatCacheStatusPretty, at as MAX_DECOMPRESSED_SIZE_BYTES, b as MIN_ANNOTATIONS_SIZE_BYTES, bt as fetchLatestLuaLSVersionFromGitHub, c as DOCGEN_BRANCH, ct as escapePowerShellSingleQuote, d as RAW_ANNOTATIONS_URL, dt as isBinaryRunnable, et as listCachedLuaLSVersionDirs, f as downloadAndCacheAnnotations, ft as isBinaryValid, g as ANNOTATIONS_FILENAME, gt as validateArchiveMembers, h as getRawAnnotationsUrl, ht as parseTarTvSize, i as runCLI, it as MAX_ARCHIVE_MEMBER_COUNT, j as formatReport, jt as mergeConfigs, k as formatPretty, kt as initWorkspace, l as DOCGEN_REPO, lt as getTarBinary, m as fetchRawAnnotationsContent, mt as isZipArchive, n as createProgram, nt as readLuaLSMetadata, o as getCacheStatus, ot as MIN_DOWNLOADED_BINARY_SIZE_BYTES, p as fetchLatestCommitId, pt as isGzipArchive, q as cleanupOldCachedLuaLSVersions, qt as LOG_LEVELS, r as isDirectExecution, rt as writeLuaLSMetadata, s as resolveAnnotations, st as assertValidLuaLSBinary, t as collectIgnorePatterns, tt as listCachedLuaLSVersions, u as GITHUB_COMMITS_API, ut as inspectZipMembers, v as MAX_COMMIT_JSON_SIZE_BYTES, vt as DEFAULT_LUALS_VERSION, w as getTodayDateString, wt as VALID_LUALS_DIAGNOSTIC_CODES, x as getAnnotationsCacheDir, xt as resolveLatestLuaLSVersion, y as METADATA_FILENAME, yt as FALLBACK_LUALS_VERSION, z as ALLOWED_DOWNLOAD_DOMAINS, zt as LuaLSError } from "./cli-BTHx4yp_.js";
+export { ALLOWED_DOWNLOAD_DOMAINS, ANNOTATIONS_FILENAME, AnnotationsError, CacheError, ConfigError, DEFAULT_LOG_LEVEL, DEFAULT_LUALS_VERSION, DOCGEN_BRANCH, DOCGEN_REPO, DOWNLOAD_TIMEOUT_MS, FALLBACK_LUALS_VERSION, GITHUB_COMMITS_API, LOG_LEVELS, LOG_LEVEL_PRIORITY, LUALS_METADATA_FILENAME, Logger, LuaLSError, MAX_ANNOTATIONS_SIZE_BYTES, MAX_ARCHIVE_MEMBER_COUNT, MAX_ARCHIVE_SIZE_BYTES, MAX_COMMIT_JSON_SIZE_BYTES, MAX_DECOMPRESSED_SIZE_BYTES, METADATA_FILENAME, MIN_ANNOTATIONS_SIZE_BYTES, MIN_DOWNLOADED_BINARY_SIZE_BYTES, NanosLintError, RAW_ANNOTATIONS_URL, VALID_LUALS_DIAGNOSTIC_CODES, assertValidLuaLSBinary, cleanCache, cleanupOldCachedLuaLSVersions, collectIgnorePatterns, computeFileSha256, countCheckedFiles, createProgram, downloadAndCacheAnnotations, downloadAndExtractLuaLS, escapePowerShellSingleQuote, fetchLatestCommitId, fetchLatestLuaLSVersionFromGitHub, fetchRawAnnotationsContent, fileUriToPath, findExistingLuaLSDir, formatBytes, formatCacheStatusPretty, formatGitHubAnnotations, formatPretty, formatProblemSummary, formatReport, formatSeverityBadge, getAnnotationsCacheDir, getAnnotationsMetadataFilePath, getBaseLuaLSCacheDir, getCacheDir, getCacheStatus, getCachedAnnotationsFilePath, getColors, getDefaultAnnotationsPath, getDefaultTemplatePath, getDefinitionsDir, getDirectorySize, getIsoWeek, getLegacyCacheDir, getLuaLSMetadataPath, getPackageRoot, getPlatformInfo, getRawAnnotationsUrl, getTarBinary, getTodayDateString, initWorkspace, inspectZipMembers, isAllowedDownloadUrl, isAnnotationsValid, isBinaryRunnable, isBinaryValid, isDirectExecution, isGzipArchive, isValidLogLevel, isZipArchive, limitDownloadStream, listCachedLuaLSVersionDirs, listCachedLuaLSVersions, loadConfigFile, logger, mergeConfigs, parseJsonc, parseLogLevel, parseTarTvSize, pluralize, readAnnotationsMetadata, readLuaLSMetadata, resolveAnnotations, resolveLatestLuaLSVersion, resolveLuaLSBinary, resolveLuaLSVersion, resolveWorkspaceConfig, runCLI, runLuaLSCheck, sanitizeLuaLSVersion, shouldEnableColor, stripJsonComments, stripTrailingSlashes, systemPaths, updateLastCheckedDate, validateArchiveMembers, writeLuaLSMetadata };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "nanos-lint",
-  "version": "2.8.0",
+  "version": "2.8.2",
   "description": "Linter and type-checker for nanos world Lua scripts powered by LuaLS",
   "keywords": [
     "nanos-world",
@@ -38,11 +38,18 @@
   "scripts": {
     "build": "tsdown",
     "typecheck": "tsc --noEmit",
-    "lint": "eslint \"src/**/*.ts\" \"tests/**/*.ts\" --max-warnings=0",
-    "lint:fix": "eslint \"src/**/*.ts\" \"tests/**/*.ts\" --fix --max-warnings=0",
+    "format:check": "prettier --check .",
+    "format:fix": "prettier --write .",
+    "lint": "eslint \"src/**/*.ts\" \"tests/**/*.ts\" \"scripts/**/*.ts\" --max-warnings=0",
+    "lint:fix": "eslint \"src/**/*.ts\" \"tests/**/*.ts\" \"scripts/**/*.ts\" --fix --max-warnings=0",
+    "lint:deps": "depcruise --config .dependency-cruiser.cjs src tests",
+    "lint:comments": "tsx scripts/lint-comments.ts",
+    "lint:docstrings": "tsx scripts/lint-docstrings.ts",
     "test": "vitest run",
     "test:watch": "vitest",
     "test:coverage": "vitest run --coverage",
+    "gates": "npm run format:check && npm run lint && npm run lint:deps && npm run lint:comments && npm run lint:docstrings && npm run typecheck && npm run build && npm run test:coverage",
+    "check:all": "npm run gates",
     "prepare": "node -e \"try { require('node:child_process').execSync('git config core.hooksPath .githooks'); } catch {}\""
   },
   "devDependencies": {
@@ -52,9 +59,13 @@
     "@typescript-eslint/parser": "^8.70.1",
     "@vitest/coverage-v8": "^5.0.1",
     "commander": "^15.0.0",
+    "dependency-cruiser": "^18.4.0",
     "env-paths": "^4.0.0",
     "eslint": "^10.11.0",
+    "eslint-config-prettier": "^10.1.8",
+    "glob": "^13.0.6",
     "jsonc-parser": "^3.3.1",
+    "prettier": "^3.9.9",
     "tsdown": "^0.23.0",
     "tsx": "^4.23.15",
     "typescript": "^6.0.3",

package/templates/.luarc.json

@@ -2,12 +2,7 @@
   "$schema": "https://raw.githubusercontent.com/LuaLS/vscode-lua/master/setting/schema.json",
   "runtime": {
     "version": "Lua 5.4",
-    "path": [
-      "?.lua",
-      "Shared/?.lua",
-      "Client/?.lua",
-      "Server/?.lua"
-    ],
+    "path": ["?.lua", "Shared/?.lua", "Client/?.lua", "Server/?.lua"],
     "special": {
       "Package.Require": "require"
     }
@@ -30,9 +25,7 @@
     "library": []
   },
   "files": {
-    "exclude": [
-      ".nanos-lint/**"
-    ]
+    "exclude": [".nanos-lint/**"]
   },
   "diagnostics": {
     "enable": true,