no-mistakes 0.103.0 → 0.105.0

package/index-ci-infra.d.ts

@@ -113,3 +113,6 @@ export function generatePostgresCatalog(
 export function analyzeTypeScriptModules(
   options: WithInvocationOptions<TypeScriptModulesOptions>,
 ): Promise<WithInvocationResult<TypeScriptModulesReport>>;
+
+/** Read-only report of the machine-wide invocation lock; never waits and takes no lock. */
+export function lockStatus(): Promise<import("./invocation-types").LockStatus>;

package/index.js

@@ -4,6 +4,7 @@ const { resolveNativePackage } = require("./scripts/native-package");
 const addonPath = process.env.NO_MISTAKES_TEST_NAPI_ADDON_PATH || resolveNativePackage().addonPath;
 const native = require(addonPath);
 const planning = require("./planning");
+const { decorateInvocationError } = require("./invocation-errors");
 const { writePlanningImpactArtifacts: writeArtifacts } = require("./planning-impact-artifacts");
 const { createPlanningArtifactLock } = require("./planning-impact-artifacts-lock");
 const { createWorkflowTopologyIndex } = require("./workflow-topology-index");
@@ -11,7 +12,11 @@ const path = require("node:path");
 
 async function callJson(fn, options) {
   const input = Buffer.from(JSON.stringify(options || {}));
-  return JSON.parse(await fn(input));
+  try {
+    return JSON.parse(await fn(input));
+  } catch (error) {
+    throw decorateInvocationError(error);
+  }
 }
 
 function createJsonApis(descriptors) {
@@ -50,6 +55,7 @@ const jsonApis = createJsonApis({
   infraOutputs: "infraOutputsJson",
   infraResourceRefs: "infraResourceRefsJson",
   infraTestFor: "infraTestForJson",
+  lockStatus: "lockStatusJson",
   lockfileDiff: "lockfileDiffJson",
   validateMermaidMarkdown: "validateMermaidMarkdownJson",
   playwrightCheck: "playwrightCheckJson",
@@ -127,6 +133,7 @@ module.exports.writePlanningImpactArtifacts = writePlanningImpactArtifacts;
 module.exports.callSites = jsonApis.callSites;
 module.exports.check = jsonApis.check;
 module.exports.resolveConfig = jsonApis.resolveConfig;
+module.exports.lockStatus = jsonApis.lockStatus;
 module.exports.ciEnv = jsonApis.ciEnv;
 module.exports.ciImpact = jsonApis.ciImpact;
 module.exports.ciTopology = ciTopology;

package/index.mjs

@@ -31,6 +31,7 @@ export const {
   infraOutputs,
   infraResourceRefs,
   infraTestFor,
+  lockStatus,
   lockfileDiff,
   playwrightCheck,
   playwrightEdges,

package/invocation-errors.js

@@ -0,0 +1,23 @@
+"use strict";
+
+const ERROR_JSON_MARKER = "\nno-mistakes-error-json: ";
+
+// Lock and deadline failures carry a machine-readable report after a marker line.
+// Expose it as `error.code` ("NO_MISTAKES_LOCK_BUSY", "NO_MISTAKES_LOCK_TIMEOUT",
+// "NO_MISTAKES_DEADLINE") and `error.details` without changing the message text.
+function decorateInvocationError(error) {
+  const message = error && typeof error.message === "string" ? error.message : "";
+  const at = message.indexOf(ERROR_JSON_MARKER);
+  if (at < 0) return error;
+  try {
+    const details = JSON.parse(message.slice(at + ERROR_JSON_MARKER.length));
+    error.message = message.slice(0, at);
+    error.code = `NO_MISTAKES_${String(details.kind).toUpperCase()}`;
+    error.details = details;
+  } catch {
+    // Keep the native error as-is when the report cannot be parsed.
+  }
+  return error;
+}
+
+module.exports = { decorateInvocationError };

package/invocation-types.d.ts

@@ -81,3 +81,48 @@ export interface DiagnosticsProgressSnapshot {
 export function diagnosticsSnapshot(options: {
   id: string;
 }): Promise<DiagnosticsProgressSnapshot | null>;
+
+/** Who holds the machine-wide invocation lock, as recorded by the holder. */
+export interface LockHolder {
+  pid: number;
+  /** Working directory of the holder; a pid alone is ambiguous across sandboxes. */
+  cwd: string | null;
+  /** Executable basename for new records; legacy records may contain arguments. Empty for pid-only records. */
+  command: string;
+  /** Unix epoch milliseconds when the holder acquired the lock; 0 when unknown. */
+  startedAtMs: number;
+  /** Whole seconds the lock has been held; null when the start time is unknown. */
+  ageSeconds: number | null;
+}
+
+/** Result of `lockStatus()` / `no-mistakes lock status --format json`. */
+export interface LockStatus {
+  state: "held" | "free";
+  lockFile: string;
+  /** Present only while the lock is held. */
+  holder: LockHolder | null;
+}
+
+/** Stable `kind` values for invocation failures. */
+export type InvocationErrorKind = "lock_busy" | "lock_timeout" | "deadline";
+
+/**
+ * The `error` object written to stdout under `--format json`, also exposed as
+ * `error.details` on rejected Node API calls. CLI exit codes: `lock_busy` and
+ * `lock_timeout` exit 75 (EX_TEMPFAIL); `deadline` exits 124.
+ */
+export interface InvocationErrorDetails {
+  kind: InvocationErrorKind;
+  /** Phase that was running, for example `invocation.lock` or `check.prepare`. */
+  phase: string | null;
+  message: string;
+  exitCode: 75 | 124;
+  /** Present for lock failures when the holder record could be read. */
+  holder?: LockHolder;
+}
+
+/** Rejection from a Node API call that failed on the invocation lock or deadline. */
+export interface InvocationError extends Error {
+  code: "NO_MISTAKES_LOCK_BUSY" | "NO_MISTAKES_LOCK_TIMEOUT" | "NO_MISTAKES_DEADLINE";
+  details: InvocationErrorDetails;
+}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "no-mistakes",
-  "version": "0.103.0",
+  "version": "0.105.0",
   "description": "Deterministic impact maps, test plans, Playwright coverage, and repository checks for coding agents",
   "license": "MIT",
   "repository": {
@@ -16,6 +16,7 @@
     "*.d.ts",
     "index.js",
     "index.mjs",
+    "invocation-errors.js",
     "planning-impact-artifacts.js",
     "planning-impact-artifacts-errors.js",
     "planning-impact-artifacts-files.js",
@@ -65,9 +66,9 @@
     }
   },
   "optionalDependencies": {
-    "no-mistakes-darwin-arm64": "0.103.0",
-    "no-mistakes-linux-arm64-gnu": "0.103.0",
-    "no-mistakes-linux-x64-gnu": "0.103.0",
-    "no-mistakes-win32-x64-msvc": "0.103.0"
+    "no-mistakes-darwin-arm64": "0.105.0",
+    "no-mistakes-linux-arm64-gnu": "0.105.0",
+    "no-mistakes-linux-x64-gnu": "0.105.0",
+    "no-mistakes-win32-x64-msvc": "0.105.0"
   }
 }

package/postgres-test-state-mutation-types.d.ts

@@ -1,4 +1,4 @@
-import type { Unanalyzable } from "./traversal-types";
+import type { Effort, Unanalyzable } from "./traversal-types";
 
 /** Configuration for the `postgres-no-test-state-mutation` check rule. */
 export interface PostgresNoTestStateMutationOptions {
@@ -11,6 +11,8 @@ export interface PostgresNoTestStateMutationOptions {
   executorFactoryNames?: string[];
   executorTypeNames?: string[];
   trustedSqlTags?: { module: string; name: string }[];
+  /** `low` checks direct SQL syntax and one local const; `max` is the default. */
+  effort?: Effort;
   unanalyzable?: Unanalyzable;
   /** Legacy spelling; `fail` is accepted as `report`. */
   unanalyzableSql?: "fail" | "ignore" | "advise";

package/test-no-live-repository-scan-types.d.ts

@@ -0,0 +1,42 @@
+/** Root selectors shared with `forbidden-calls`; Playwright roots are not accepted. */
+export type TestNoLiveRepositoryScanRoot =
+  | { vitest: true | string | string[] }
+  | { glob: string | string[] }
+  | { file: string }
+  | { module: string }
+  | { function: { file: string; symbol: string } };
+
+/** An import whose call enumerates a directory tree, in addition to the built-in set. */
+export interface TestNoLiveRepositoryScanEnumerator {
+  /** Module specifier; a `node:` prefix is ignored. */
+  module: string;
+  /** Export name; omit to match every export of `module`. */
+  export?: string;
+}
+
+/** A shipped asset tree that production code reads at runtime. */
+export interface TestNoLiveRepositoryScanRuntimeAsset {
+  /** Repository-relative directory, for example `assets/migrations`. No `..`, no leading `/`. */
+  root: string;
+  /** Why the tree is shipped input rather than a source or policy tree. Required. */
+  reason: string;
+}
+
+/** Options for `test-no-live-repository-scan`. */
+export interface TestNoLiveRepositoryScanOptions {
+  /** Traversal roots. Default: every Vitest project. */
+  roots?: TestNoLiveRepositoryScanRoot[];
+  /** Glob or globs removed from the root set. */
+  excludeRoots?: string | string[];
+  /** Path segments marking bounded fixture input; replaces `["fixtures", "__fixtures__"]`. */
+  fixtureDirs?: string[];
+  /** Extra enumerating imports. */
+  enumerators?: TestNoLiveRepositoryScanEnumerator[];
+  /** How unresolved scan roots are reported; default: `"advise"`. They are never omitted. */
+  unresolvedRoot?: "advise" | "report";
+  /**
+   * Shipped asset roots. A literal read at or under one is listed as an advisory with
+   * target `runtime asset` instead of failing; other trees are still reported.
+   */
+  runtimeAssets?: TestNoLiveRepositoryScanRuntimeAsset[];
+}

package/types.d.ts

@@ -29,3 +29,4 @@ export type * from "./coverage-assertion-owner-types";
 export type * from "./lint-suppression-types";
 
 export type * from "./production-exports-test-only-types";
+export type * from "./test-no-live-repository-scan-types";