oxlint-plugin-vize 0.441.0 → 0.443.0

package/dist/cli.mjs

@@ -1,10 +1,10 @@
-import { n as prepareWorkaroundSource, p as isStandaloneHtmlFile, u as hasVueLikeExtension } from "./workaround-r91ttnV_.mjs";
+import { m as loadBinding, n as prepareWorkaroundSource, p as isStandaloneHtmlFile, u as hasVueLikeExtension } from "./workaround-CiQUFJw0.mjs";
 import { spawn, spawnSync } from "node:child_process";
 import path from "node:path";
 import fs from "node:fs";
-import { randomUUID } from "node:crypto";
+import { createHash, randomUUID } from "node:crypto";
 import os from "node:os";
-import { pathToFileURL } from "node:url";
+import { fileURLToPath, pathToFileURL } from "node:url";
 //#region src/cli/args.ts
 const OPTION_NAMES_WITH_VALUES = new Set([
 	"-A",
@@ -216,7 +216,7 @@ function verifyOxlintCliEntrypoint(executable, entrypoint) {
 		]
 	});
 	const output = `${handshake.stdout ?? ""}${handshake.stderr ?? ""}`.trim();
-	if (handshake.error == null && handshake.status === 0 && VERSION_HANDSHAKE_PATTERN.test(output)) return;
+	if (handshake.error == null && handshake.status === 0 && VERSION_HANDSHAKE_PATTERN.test(output)) return output.match(VERSION_HANDSHAKE_PATTERN)?.[0] ?? "";
 	const detail = handshake.error == null ? `exit ${String(handshake.status)}${output === "" ? " with no output" : `: ${output.split("\n", 1)[0]}`}` : handshake.error.message;
 	throw new Error(`The oxlint entrypoint at ${entrypoint} did not answer the \`--version\` handshake (${detail}). It appears to be a non-lint wrapper shim, so its runs cannot be trusted as lint results. Install the real \`oxlint\` package where \`oxlint-vize\` can resolve it.`);
 }
@@ -801,10 +801,12 @@ function joinProjectJson(source, bridge, totals) {
 //#endregion
 //#region src/cli/project-output.ts
 function unavailableProjectTransport(original, error) {
+	const suffix = `\nScript-safe Vue transport unavailable: ${error instanceof Error ? error.message : String(error)}\n`;
 	return {
 		...original,
+		rawStderr: Buffer.concat([original.rawStderr ?? Buffer.from(original.stderr), Buffer.from(suffix)]),
 		status: Math.max(original.status ?? 1, 1),
-		stderr: original.stderr + `\nScript-safe Vue transport unavailable: ${error instanceof Error ? error.message : String(error)}\n`
+		stderr: original.stderr + suffix
 	};
 }
 function projectOutputFormat(args) {
@@ -859,6 +861,9 @@ function mergeProjectOutput(original, bridge, args) {
 		});
 	}
 	return {
+		rawStdout: format === "json" ? void 0 : Buffer.concat([original.rawStdout ?? Buffer.from(original.stdout), bridge.rawStdout ?? Buffer.from(bridge.stdout)]),
+		rawStderr: Buffer.concat([original.rawStderr ?? Buffer.from(original.stderr), bridge.rawStderr ?? Buffer.from(bridge.stderr)]),
+		phases: [original.observation, bridge.observation].filter((packet) => packet != null),
 		stdout,
 		stderr: original.stderr + bridge.stderr,
 		status: Math.max(original.status ?? 1, bridge.status ?? 1)
@@ -900,10 +905,12 @@ async function prepareScopedSelection(cwd, originalArgs, vueFiles, run, candidat
 		const original = await run(originalArgs);
 		if (vueFiles.some(isStandaloneHtmlFile)) return { result: unavailableProjectTransport(original, /* @__PURE__ */ new Error("Scoped Vue transport cannot combine standalone HTML and Vue targets.")) };
 		if (!vueFiles.some((file) => selected.includes(file))) return { result: original };
+		const suffix = "Script-safe Vue transport requires one regular JSON or TS/MTS object config; the original engine report is retained, but Vize transport is unqualified.\n";
 		return { result: {
 			...original,
 			status: Math.max(original.status ?? 1, 1),
-			stderr: original.stderr + "Script-safe Vue transport requires one regular JSON or TS/MTS object config; the original engine report is retained, but Vize transport is unqualified.\n"
+			stderr: original.stderr + suffix,
+			rawStderr: Buffer.concat([original.rawStderr ?? Buffer.from(original.stderr), Buffer.from(suffix)])
 		} };
 	}
 	const options = withoutLintTargets(originalArgs);
@@ -1006,6 +1013,391 @@ function equalFiles(expected, actual) {
 	return expected.length === actual.length && expected.every((file, index) => file === actual[index]);
 }
 //#endregion
+//#region src/cli/html-custody.ts
+const read = (file) => {
+	try {
+		const stat = fs.lstatSync(file);
+		if (!stat.isFile() || stat.isSymbolicLink()) throw new Error(`HTML custody requires a regular original: ${file}`);
+		return fs.readFileSync(file);
+	} catch (error) {
+		if (error.code === "ENOENT") return null;
+		throw error;
+	}
+};
+const digest$1 = (bytes) => createHash("sha256").update(bytes).digest("hex");
+const same = (left, right) => left == null ? right == null : right != null && left.equals(right);
+/** Snapshots prove identity, and do not perform native ignore selection. */
+function captureHtmlCustody(options, candidates) {
+	const sources = new Map([[options.rootJson, Buffer.from(options.rootBytes)]]);
+	const originals = /* @__PURE__ */ new Map();
+	const directories = /* @__PURE__ */ new Set();
+	for (const candidate of [options.cwd, ...candidates]) {
+		const stat = fs.lstatSync(candidate);
+		if (isStandaloneHtmlFile(candidate) && stat.isFile() && !stat.isSymbolicLink()) originals.set(candidate, fs.readFileSync(candidate));
+		let directory = stat.isDirectory() ? candidate : path.dirname(candidate);
+		for (;;) {
+			directories.add(directory);
+			const parent = path.dirname(directory);
+			if (parent === directory) break;
+			directory = parent;
+		}
+	}
+	for (const directory of directories) {
+		for (const name of [".gitignore", options.customIgnoreFilename]) {
+			const file = path.join(directory, name);
+			sources.set(file, read(file));
+		}
+		if (fs.existsSync(path.join(directory, ".git"))) {
+			const file = path.join(directory, ".git/info/exclude");
+			sources.set(file, read(file));
+		}
+	}
+	return {
+		sources,
+		originals
+	};
+}
+/** Keep full source/provider/ignore bytes bound before and after the one operation. */
+function assertHtmlCustody(context, completed) {
+	if (!context.custody || !context.provider || !context.options) throw new Error("original HTML custody is unavailable");
+	const { custody, provider, options } = context;
+	if (digest$1(fs.readFileSync(provider.entrypoint)) !== provider.sha256 || !Buffer.from(provider.packageBytes).equals(fs.readFileSync(provider.package))) throw new Error("actual host provider changed during HTML execution");
+	for (const [file, expected] of [...custody.sources, ...custody.originals]) if (!same(expected, read(file))) throw new Error(`original HTML input changed during real host execution: ${file}`);
+	if (!completed) return;
+	if (completed.hostProfile !== options.hostProfile || completed.cwd !== options.cwd || completed.literalTarget !== options.literalTarget || completed.rootJson !== options.rootJson || completed.format !== options.format || completed.engineConfigValidation !== "not-performed" || Object.keys(options.presentation).some((key) => completed.presentation[key] !== options.presentation[key])) throw new Error("complete HTML result lost original execution/presentation identity");
+	for (const original of completed.originals) {
+		const prior = custody.originals.get(original.path);
+		if (!prior || !prior.equals(Buffer.from(original.bytes))) throw new Error(`native HTML original lacks pre-host custody: ${original.path}`);
+	}
+	for (const source of completed.sources) if (!custody.sources.has(source.path) || !same(custody.sources.get(source.path) ?? null, source.bytes == null ? null : Buffer.from(source.bytes))) throw new Error(`native HTML authority lacks pre-host custody: ${source.path}`);
+	if (completed.executedFileCount !== completed.originals.length || completed.files.length !== completed.originals.length || !Number.isFinite(completed.elapsedSeconds) || completed.elapsedSeconds < 0) throw new Error("complete HTML execution counts are invalid");
+}
+//#endregion
+//#region src/cli/presentation-context.ts
+/** Actual piped-child inputs used by both pinned hosts' presentation selection. */
+const presentationInputs = [
+	"CI",
+	"FORCE_COLOR",
+	"NO_COLOR",
+	"GITHUB_ACTIONS",
+	"AI_AGENT",
+	"CURSOR_AGENT",
+	"CLAUDECODE",
+	"CLAUDE_CODE",
+	"REPL_ID",
+	"GEMINI_CLI",
+	"CODEX_SANDBOX",
+	"CODEX_THREAD_ID",
+	"COPILOT_CLI",
+	"OPENCODE",
+	"JUNIE_DATA",
+	"JUNIE_SHIM_PATH",
+	"PATH",
+	"EDITOR",
+	"TERM_PROGRAM"
+];
+function presentationContext() {
+	return Object.fromEntries(presentationInputs.map((key) => [key, process.env[key] ?? null]));
+}
+/** Pinned c42d639/2ae2939 agent_detection and default_output_format contracts. */
+function implicitDefault(context) {
+	const agentKeys = presentationInputs.filter((key) => ![
+		"CI",
+		"FORCE_COLOR",
+		"NO_COLOR",
+		"GITHUB_ACTIONS",
+		"PATH",
+		"EDITOR",
+		"TERM_PROGRAM"
+	].includes(key));
+	return context.GITHUB_ACTIONS !== "true" && !agentKeys.some((key) => Boolean(context[key])) && !/[.]pi[/\\]agent/u.test(context.PATH ?? "") && !(context.EDITOR ?? "").includes("devin") && !(context.TERM_PROGRAM ?? "").includes("kiro");
+}
+//#endregion
+//#region src/cli/html-operation.ts
+const digest = (bytes) => createHash("sha256").update(bytes).digest("hex");
+/** Capture original root/provider/piped-child context without executing a provider query. */
+function prepareHtmlContext(cwd, args, entrypoint, version, candidates) {
+	const context = { environment: presentationContext() };
+	try {
+		if (![
+			"1.78.0",
+			"1.81.0",
+			"1.86.0"
+		].includes(version)) throw new Error("original HTML requires a qualified Oxlint 1.78.0, 1.81.0 or 1.86.0 host");
+		const targets = getLintTargets(args);
+		if (targets.length !== 1) throw new Error("original HTML requires one literal original target");
+		const config = readScopedConfig(cwd, args);
+		if (!config || config.module || path.dirname(config.file) !== cwd) throw new Error("original HTML requires one regular JSON root in the original cwd");
+		const plugin = fileURLToPath(new URL("./index.mjs", import.meta.url));
+		const pluginRoot = import.meta.url.endsWith(".ts") ? fileURLToPath(new URL("../../dist/index.mjs", import.meta.url)) : plugin;
+		const owned = fs.realpathSync(pluginRoot);
+		if (!Array.isArray(config.value.jsPlugins) || !config.value.jsPlugins.some((specifier) => ownsPlugin(specifier, config.file, owned))) throw new Error("original HTML requires this wrapper's genuine Vize plugin in the original root");
+		const actual = fs.realpathSync(entrypoint);
+		const packageFile = path.join(path.dirname(actual), "../package.json");
+		const packageBytes = fs.readFileSync(packageFile);
+		const metadata = JSON.parse(packageBytes.toString("utf8"));
+		if (metadata.name !== "oxlint" || metadata.version !== version) throw new Error("original HTML provider package does not match the real version handshake");
+		context.provider = {
+			requestedEntrypoint: entrypoint,
+			entrypoint: actual,
+			sha256: digest(fs.readFileSync(actual)),
+			package: packageFile,
+			packageBytes: Array.from(packageBytes),
+			version
+		};
+		let format = "default";
+		let explicitFormat = false;
+		let noIgnore = false;
+		const patterns = [];
+		let customIgnoreFilename = ".eslintignore";
+		const options = withoutLintTargets(args);
+		for (let index = 0; index < options.length; index++) {
+			const arg = options[index];
+			if (arg === "--") break;
+			if ([
+				"-c",
+				"--config",
+				"--threads"
+			].includes(arg)) {
+				index++;
+				continue;
+			}
+			if (arg.startsWith("--config=") || arg.startsWith("--threads=")) continue;
+			if (arg === "-f" || arg === "--format") {
+				explicitFormat = true;
+				format = options[++index];
+				continue;
+			}
+			if (arg.startsWith("--format=")) {
+				explicitFormat = true;
+				format = arg.slice(9);
+				continue;
+			}
+			if (arg === "--ignore-pattern") {
+				patterns.push(options[++index]);
+				continue;
+			}
+			if (arg.startsWith("--ignore-pattern=")) {
+				patterns.push(arg.slice(17));
+				continue;
+			}
+			if (arg === "--ignore-path") {
+				customIgnoreFilename = options[++index];
+				continue;
+			}
+			if (arg.startsWith("--ignore-path=")) {
+				customIgnoreFilename = arg.slice(14);
+				continue;
+			}
+			if (arg === "--no-ignore") {
+				noIgnore = true;
+				continue;
+			}
+			if (arg === "--deny-warnings" || arg === "--no-error-on-unmatched-pattern" || arg === "--disable-nested-config" || arg === "--type-aware" || arg === "--type-check" || arg === "--import-plugin" || arg === "--vue-plugin") continue;
+			if (arg === "--tsconfig") {
+				index++;
+				continue;
+			}
+			if (arg.startsWith("--tsconfig=")) continue;
+			throw new Error(`original HTML cannot preserve this option's presentation/write/severity contract: ${arg}`);
+		}
+		if (path.basename(customIgnoreFilename) !== customIgnoreFilename || [".", ".."].includes(customIgnoreFilename)) throw new Error("original HTML requires one custom-ignore filename");
+		if (![
+			"default",
+			"json",
+			"unix",
+			"stylish"
+		].includes(format)) throw new Error("original HTML requires an explicit default, json, unix or stylish report");
+		if (!explicitFormat && !implicitDefault(context.environment)) throw new Error("original HTML requires an explicit supported format when the host selects agent/GitHub output");
+		const forceColor = context.environment.CI != null || context.environment.FORCE_COLOR != null && context.environment.FORCE_COLOR !== "0";
+		context.options = {
+			cwd,
+			literalTarget: targets[0],
+			rootJson: config.file,
+			rootBytes: Array.from(fs.readFileSync(config.file)),
+			hostProfile: version,
+			noIgnore,
+			cliIgnorePatterns: patterns,
+			customIgnoreFilename,
+			format,
+			presentation: {
+				cwd,
+				graphicalTheme: forceColor ? "color" : "plain",
+				links: false,
+				width: 400,
+				stylishNoColor: context.environment.NO_COLOR != null,
+				stylishRelative: true
+			}
+		};
+		context.custody = captureHtmlCustody(context.options, candidates);
+	} catch (error) {
+		context.failure = error instanceof Error ? error.message : String(error);
+	}
+	return context;
+}
+/** One genuine native operation after normal stock/Vue setup, never a carrier. */
+function executeHtml(context) {
+	if (context.failure || !context.options) throw new Error(context.failure ?? "original HTML context is unavailable");
+	const binding = loadBinding();
+	if (typeof binding.lintOxlintHtml !== "function") throw new Error("installed native binding does not expose original HTML execution");
+	assertHtmlCustody(context);
+	if (!Buffer.from(context.options.rootBytes).equals(fs.readFileSync(context.options.rootJson))) throw new Error("original root bytes changed during real host setup");
+	const outcome = binding.lintOxlintHtml(context.options);
+	context.outcome = outcome;
+	if (Boolean(outcome.completed) === Boolean(outcome.refused)) throw new Error("original HTML operation did not return an exclusive complete/refused result");
+	if (outcome.refused) throw new Error(`${outcome.refused.kind}: ${outcome.refused.details}`);
+	assertHtmlCustody(context, outcome.completed);
+	return outcome;
+}
+function ownsPlugin(specifier, configFile, owned) {
+	if (typeof specifier !== "string") return false;
+	try {
+		if (specifier.startsWith("file:")) return fs.realpathSync(fileURLToPath(specifier)) === owned;
+		if (path.isAbsolute(specifier) || specifier.startsWith("./") || specifier.startsWith("../")) return fs.realpathSync(path.resolve(path.dirname(configFile), specifier)) === owned;
+		if (specifier.split("/").length !== (specifier.startsWith("@") ? 2 : 1)) return false;
+		const ownedMetadata = fs.realpathSync(path.join(path.dirname(owned), "../package.json"));
+		let directory = path.dirname(configFile);
+		for (;;) {
+			const candidate = path.join(directory, "node_modules", specifier, "package.json");
+			if (fs.existsSync(candidate)) return fs.realpathSync(candidate) === ownedMetadata && fs.realpathSync(path.join(path.dirname(candidate), "dist/index.mjs")) === owned;
+			const parent = path.dirname(directory);
+			if (parent === directory) return false;
+			directory = parent;
+		}
+	} catch {
+		return false;
+	}
+}
+//#endregion
+//#region src/cli/html-project-output.ts
+const noFiles = "No files found to lint. Please check your paths and ignore patterns.\n";
+const stylishFooter = new RegExp(String.raw`\n(?:\u001B\[(?:31|33)m)?✖ [1-9][0-9]* problems? \([0-9]+ errors?, [0-9]+ warnings?\)(?:\u001B\[0m)?\n$`, "u");
+function completeJson(text) {
+	const report = JSON.parse(text);
+	if (typeof report !== "object" || report == null || Array.isArray(report)) throw new Error("HTML join requires an actual complete host JSON object");
+	const result = report;
+	if (!Array.isArray(result.diagnostics) || ![
+		"number_of_files",
+		"number_of_rules",
+		"threads_count",
+		"start_time"
+	].every((key) => typeof result[key] === "number" && Number.isFinite(result[key]) && result[key] >= 0)) throw new Error("HTML join requires genuine host file/rule/thread/time authority");
+	return result;
+}
+/** Genuine child packets establish host setup; no additional provider query. */
+function qualifyHtmlHost(context, original) {
+	if (context.failure || !context.options || !context.provider) throw new Error(context.failure ?? "original HTML host context is unavailable");
+	const phases = original.phases ?? (original.observation ? [original.observation] : []);
+	if (phases.length === 0) throw new Error("original HTML requires complete actual host observations");
+	for (const phase of phases) {
+		if (phase.signal || phase.error || ![0, 1].includes(phase.status ?? -1) || phase.cwd !== context.options.cwd || phase.args[0] !== context.provider.entrypoint && phase.args[0] !== context.provider.requestedEntrypoint) throw new Error("actual host phase failed before qualified HTML execution");
+		if (Buffer.from(phase.stderrBytes).length !== 0 || Object.keys(context.environment).some((key) => phase.environment[key] !== context.environment[key])) throw new Error("actual host phase lost its original presentation/setup context");
+		const rawOutput = Buffer.from(phase.stdoutBytes);
+		const output = rawOutput.toString("utf8");
+		if (!rawOutput.equals(Buffer.from(output))) throw new Error("actual host output is not lossless UTF8");
+		if (output.startsWith(noFiles)) continue;
+		const report = output;
+		if (context.options.format === "json") completeJson(report);
+		else if (context.options.format === "default" && !/Finished in [0-9]+(?:\.[0-9]+)?(?:ms|s) on [0-9]+ files? with [0-9]+ rules? using [0-9]+ threads?\.\n$/u.test(report)) throw new Error("actual default host report is incomplete");
+		else if (context.options.format === "unix" && !(phase.status === 0 && report === "") && !/\n[1-9][0-9]* problems?\n$/u.test(report)) throw new Error("actual Unix host report is incomplete");
+		else if (context.options.format === "stylish" && !(phase.status === 0 && report === "") && !stylishFooter.test(report)) throw new Error("actual Stylish host report is incomplete");
+	}
+}
+/** Recognize the pinned closed normal walker-empty packet, never a substring. */
+function eligibleEmptyHost(original, native, args) {
+	if (native.rootDecision !== "Eligible" || original.stderr !== "" || original.observation?.signal || original.observation?.error || original.status !== (args.includes("--no-error-on-unmatched-pattern") ? 0 : 1) || !original.stdout.startsWith(noFiles)) return void 0;
+	const rest = original.stdout.slice(69);
+	if (native.format === "unix" || native.format === "stylish") return rest === "" ? rest : void 0;
+	if (native.format === "default") return /^Finished in [0-9]+(?:\.[0-9]+)?(?:ms|s) on 0 files with [0-9]+ rules? using [0-9]+ threads?\.\n$/u.test(rest) ? rest : void 0;
+	try {
+		const report = completeJson(rest);
+		if (report.diagnostics.length !== 0 || report.number_of_files !== 0 || Object.keys(report).length !== 5) return void 0;
+		return joinProjectJson(rest, "{\"diagnostics\":[]}", {}) === rest ? rest : void 0;
+	} catch {
+		return;
+	}
+}
+function mergeHtmlOutput(original, native, args) {
+	if (native.executedFileCount === 0) return original;
+	if (original.observation?.signal || original.observation?.error || original.status == null) throw new Error("original host failed before a qualified HTML join");
+	const empty = eligibleEmptyHost(original, native, args);
+	if (original.stdout.startsWith(noFiles) && empty == null) throw new Error("original NoFilesFound packet is not the qualified normal walker-empty branch");
+	let stdout = empty ?? original.stdout;
+	if (native.format === "json") {
+		const report = completeJson(stdout);
+		const rows = JSON.parse(native.jsonDiagnostics);
+		if (!Array.isArray(rows)) throw new Error("native HTML did not render complete diagnostic fragments");
+		stdout = joinProjectJson(stdout, `{"diagnostics":${native.jsonDiagnostics}}`, {
+			number_of_files: Number(report.number_of_files) + native.executedFileCount,
+			start_time: Number(report.start_time) + native.elapsedSeconds
+		});
+	} else stdout += native.output;
+	const nativeFailure = native.errors > 0 || (args.includes("--deny-warnings") || native.projection.denyWarnings) && native.warnings > 0;
+	return {
+		...original,
+		stdout,
+		rawStdout: void 0,
+		status: Math.max(empty == null ? original.status : 0, nativeFailure ? 1 : 0)
+	};
+}
+function unavailableHtml(original, error) {
+	const suffix = `\nOriginal HTML unavailable: ${error instanceof Error ? error.message : String(error)}\n`;
+	return {
+		...original,
+		rawStderr: Buffer.concat([original.rawStderr ?? Buffer.from(original.stderr), Buffer.from(suffix)]),
+		status: Math.max(original.status ?? 1, 1),
+		stderr: original.stderr + suffix
+	};
+}
+//#endregion
+//#region src/cli/process.ts
+/** Retain the actual child packet, including buffered bytes on stream/spawn failure. */
+function runOxlint(executable, args, cwd) {
+	return new Promise((resolve) => {
+		const child = spawn(executable, args, {
+			cwd,
+			stdio: [
+				"ignore",
+				"pipe",
+				"pipe"
+			]
+		});
+		const stdout = [], stderr = [];
+		let error = null;
+		const failure = (reason) => {
+			error ??= reason.message;
+		};
+		child.stdout.on("data", (chunk) => stdout.push(typeof chunk === "string" ? Buffer.from(chunk) : chunk));
+		child.stderr.on("data", (chunk) => stderr.push(typeof chunk === "string" ? Buffer.from(chunk) : chunk));
+		child.stdout.on("error", failure);
+		child.stderr.on("error", failure);
+		child.on("error", failure);
+		child.on("close", (status, signal) => {
+			const stdoutBytes = Buffer.concat(stdout), stderrBytes = Buffer.concat(stderr);
+			const failureBytes = error ? Buffer.from(`\nOxlint child failure: ${error}\n`) : Buffer.alloc(0);
+			const reportedStderr = Buffer.concat([stderrBytes, failureBytes]);
+			resolve({
+				status,
+				stdout: stdoutBytes.toString("utf8"),
+				rawStdout: stdoutBytes,
+				rawStderr: reportedStderr,
+				stderr: reportedStderr.toString("utf8"),
+				observation: {
+					executable,
+					args: [...args],
+					cwd,
+					status,
+					signal,
+					error,
+					stdoutBytes,
+					stderrBytes,
+					environment: presentationContext()
+				}
+			});
+		});
+	});
+}
+//#endregion
 //#region src/cli.ts
 async function main() {
 	const cwd = process.cwd();
@@ -1014,11 +1406,20 @@ async function main() {
 	const candidates = /* @__PURE__ */ new Set();
 	const lintFiles = collectVueLikeFilesFromTargets(cwd, targets, (file) => candidates.add(file));
 	const oxlintEntrypoint = resolveOxlintCliEntrypoint(cwd);
-	verifyOxlintCliEntrypoint(process.execPath, oxlintEntrypoint);
-	const scoped = await prepareScopedSelection(cwd, forwardedArgs, lintFiles, (args) => runOxlint(process.execPath, [oxlintEntrypoint, ...args], cwd), candidates);
+	const version = verifyOxlintCliEntrypoint(process.execPath, oxlintEntrypoint);
+	const html = lintFiles.some(isStandaloneHtmlFile) ? prepareHtmlContext(cwd, forwardedArgs, oxlintEntrypoint, version, candidates) : void 0;
+	const vueFiles = html ? lintFiles.filter((file) => !isStandaloneHtmlFile(file)) : lintFiles;
+	let scoped;
+	try {
+		scoped = await prepareScopedSelection(cwd, forwardedArgs, vueFiles, (args) => runOxlint(process.execPath, [oxlintEntrypoint, ...args], cwd), candidates);
+	} catch (error) {
+		if (!html) throw error;
+		html.failure = error instanceof Error ? error.message : String(error);
+		scoped = { result: await runOxlint(process.execPath, [oxlintEntrypoint, ...forwardedArgs], cwd) };
+	}
 	const sourceResult = scoped && "result" in scoped ? scoped.result : void 0;
 	const transport = scoped && "prepared" in scoped ? scoped : void 0;
-	const prepared = sourceResult ? prepareScriptlessWorkaroundFiles(cwd, []) : transport?.prepared ?? prepareScriptlessWorkaroundFiles(cwd, lintFiles);
+	const prepared = sourceResult ? prepareScriptlessWorkaroundFiles(cwd, []) : transport?.prepared ?? prepareScriptlessWorkaroundFiles(cwd, vueFiles);
 	const args = [oxlintEntrypoint, ...transport?.args ?? [...forwardedArgs, ...prepared.appendedArgs]];
 	try {
 		let result;
@@ -1030,20 +1431,34 @@ async function main() {
 			merged = {
 				...result,
 				stdout: mappedStdout,
-				stderr: mappedStderr
+				stderr: mappedStderr,
+				rawStdout: mappedStdout === result.stdout ? result.rawStdout : void 0,
+				rawStderr: mappedStderr === result.stderr ? result.rawStderr : void 0
 			};
 			if (transport?.originalResult) merged = mergeProjectOutput(transport.originalResult, merged, forwardedArgs);
+			if (html) try {
+				qualifyHtmlHost(html, merged);
+				const outcome = executeHtml(html);
+				if (!outcome.completed) throw new Error("original HTML operation is incomplete");
+				merged = mergeHtmlOutput(merged, outcome.completed, forwardedArgs);
+			} catch (error) {
+				merged = unavailableHtml(merged, error);
+			}
 		} catch (error) {
 			if (transport?.originalResult) {
 				process.exitCode = Math.max(transport.originalResult.status ?? 1, result?.status ?? 1, 1);
-				await writeStream(process.stdout, transport.originalResult.stdout);
-				await writeStream(process.stderr, transport.originalResult.stderr + (result?.stderr ?? "") + (result?.stdout ?? ""));
+				await writeStream(process.stdout, transport.originalResult.rawStdout ?? transport.originalResult.stdout);
+				await writeStream(process.stderr, Buffer.concat([
+					transport.originalResult.rawStderr ?? Buffer.from(transport.originalResult.stderr),
+					result?.rawStderr ?? Buffer.from(result?.stderr ?? ""),
+					result?.rawStdout ?? Buffer.from(result?.stdout ?? "")
+				]));
 			}
 			throw error;
 		}
 		const { stdout, stderr } = merged;
-		if (stdout) await writeStream(process.stdout, stdout);
-		if (stderr) await writeStream(process.stderr, stderr);
+		if (stdout) await writeStream(process.stdout, merged.rawStdout ?? stdout);
+		if (stderr) await writeStream(process.stderr, merged.rawStderr ?? stderr);
 		if (merged.status === 0 && stdout === "" && stderr === "" && expectsLintReport(forwardedArgs)) {
 			await writeStream(process.stderr, `The oxlint run at ${oxlintEntrypoint} exited 0 but produced no report, although the requested format always emits one. Refusing to treat the silent run as a clean lint result.
 `);
@@ -1060,37 +1475,6 @@ main().catch((error) => {
 	process.stderr.write(`${error instanceof Error ? error.stack ?? error.message : String(error)}\n`);
 	process.exitCode = Math.max(Number(process.exitCode) || 1, 1);
 });
-function runOxlint(executable, args, cwd) {
-	return new Promise((resolve, reject) => {
-		const child = spawn(executable, args, {
-			cwd,
-			stdio: [
-				"ignore",
-				"pipe",
-				"pipe"
-			]
-		});
-		const stdoutChunks = [];
-		const stderrChunks = [];
-		child.stdout.on("data", (chunk) => {
-			stdoutChunks.push(asBuffer(chunk));
-		});
-		child.stderr.on("data", (chunk) => {
-			stderrChunks.push(asBuffer(chunk));
-		});
-		child.on("error", reject);
-		child.on("close", (status) => {
-			resolve({
-				status,
-				stderr: Buffer.concat(stderrChunks).toString("utf8"),
-				stdout: Buffer.concat(stdoutChunks).toString("utf8")
-			});
-		});
-	});
-}
-function asBuffer(chunk) {
-	return typeof chunk === "string" ? Buffer.from(chunk) : chunk;
-}
 function writeStream(stream, text) {
 	return new Promise((resolve, reject) => {
 		stream.write(text, (error) => {

package/dist/index.mjs

@@ -1,8 +1,5 @@
-import { a as validateWorkaroundAuthority, c as formatBlockLabel, d as isPatinaFile, f as isScriptLikeFile, i as resolveWorkaroundSource, l as getDiagnosticBlock, o as compareLineColumn, r as readOriginalWorkaroundSource, s as extractSfcBlocks, t as isLocationBridgeProgram } from "./workaround-r91ttnV_.mjs";
-import { createRequire } from "node:module";
+import { a as validateWorkaroundAuthority, c as formatBlockLabel, d as isPatinaFile, f as isScriptLikeFile, i as resolveWorkaroundSource, l as getDiagnosticBlock, m as loadBinding, o as compareLineColumn, r as readOriginalWorkaroundSource, s as extractSfcBlocks, t as isLocationBridgeProgram } from "./workaround-CiQUFJw0.mjs";
 import { definePlugin, defineRule } from "@oxlint/plugins";
-import { spawnSync } from "node:child_process";
-import path from "node:path";
 import fs from "node:fs";
 //#region src/plugin-option-guards.ts
 function optionField(value) {
@@ -81,96 +78,6 @@ function isHyphenationStyle(value) {
 	return value === "always" || value === "never";
 }
 //#endregion
-//#region src/native.ts
-const require = createRequire(import.meta.url);
-const FALLBACK_BINDING_PACKAGE = "@vizejs/native";
-let bindingCache = null;
-function isMusl() {
-	const report = process.report?.getReport();
-	if (typeof report === "object" && report !== null && "header" in report) return !report.header.glibcVersionRuntime;
-	const result = spawnSync("ldd", ["--version"], {
-		encoding: "utf8",
-		stdio: [
-			"ignore",
-			"pipe",
-			"pipe"
-		]
-	});
-	if (result.error) return true;
-	return `${result.stdout ?? ""}\n${result.stderr ?? ""}`.includes("musl");
-}
-function getBindingPackageName() {
-	const { arch, platform } = process;
-	switch (platform) {
-		case "darwin": switch (arch) {
-			case "arm64": return "@vizejs/native-darwin-arm64";
-			case "x64": return "@vizejs/native-darwin-x64";
-			default: throw new Error(`Unsupported architecture on macOS: ${arch}`);
-		}
-		case "linux": switch (arch) {
-			case "arm64": return isMusl() ? "@vizejs/native-linux-arm64-musl" : "@vizejs/native-linux-arm64-gnu";
-			case "x64": return isMusl() ? "@vizejs/native-linux-x64-musl" : "@vizejs/native-linux-x64-gnu";
-			default: throw new Error(`Unsupported architecture on Linux: ${arch}`);
-		}
-		case "win32": switch (arch) {
-			case "arm64": return "@vizejs/native-win32-arm64-msvc";
-			case "x64": return "@vizejs/native-win32-x64-msvc";
-			default: throw new Error(`Unsupported architecture on Windows: ${arch}`);
-		}
-		default: throw new Error(`Unsupported OS: ${platform}`);
-	}
-}
-function isPatinaBinding(binding) {
-	return typeof binding.lintPatinaSfc === "function" && typeof binding.getPatinaRules === "function";
-}
-function loadBinding() {
-	if (bindingCache) return bindingCache;
-	const attemptedPackages = getAttemptedPackages();
-	let lastError = null;
-	for (const packageName of attemptedPackages) try {
-		const binding = require(packageName);
-		if (!isPatinaBinding(binding)) throw new Error(`${packageName} does not expose the Patina Oxlint bridge.`);
-		bindingCache = binding;
-		return bindingCache;
-	} catch (error) {
-		lastError = error;
-	}
-	const message = lastError instanceof Error && lastError.message ? ` ${lastError.message}` : "";
-	throw new Error(`Failed to load the Vize native binding. Tried ${attemptedPackages.join(", ")}.${message}`);
-}
-function getAttemptedPackages() {
-	const platformBindingPackage = getBindingPackageName();
-	return shouldPreferWorkspaceBinding(resolveFallbackBindingPath()) ? [FALLBACK_BINDING_PACKAGE, platformBindingPackage] : [platformBindingPackage, FALLBACK_BINDING_PACKAGE];
-}
-function resolveFallbackBindingPath() {
-	try {
-		return require.resolve(FALLBACK_BINDING_PACKAGE);
-	} catch {
-		return null;
-	}
-}
-function shouldPreferWorkspaceBinding(resolvedPath) {
-	const override = process.env.VIZE_PREFER_WORKSPACE_BINDING;
-	if (override === "1" || override === "true") return true;
-	if (override === "0" || override === "false") return false;
-	if (resolvedPath == null) return false;
-	return resolvedPath.includes(`${path.sep}npm${path.sep}native${path.sep}`);
-}
-if (import.meta.vitest) {
-	const { describe, expect, it } = import.meta.vitest;
-	describe("shouldPreferWorkspaceBinding", () => {
-		it("detects the local workspace native package", () => {
-			expect(shouldPreferWorkspaceBinding(`${path.sep}Users${path.sep}example${path.sep}repo${path.sep}npm${path.sep}native${path.sep}index.js`)).toBe(true);
-		});
-		it("ignores published platform packages", () => {
-			expect(shouldPreferWorkspaceBinding(`${path.sep}repo${path.sep}node_modules${path.sep}.pnpm${path.sep}@vizejs+native-darwin-arm64${path.sep}node_modules${path.sep}@vizejs${path.sep}native-darwin-arm64${path.sep}index.js`)).toBe(false);
-		});
-		it("returns false when the fallback package cannot be resolved", () => {
-			expect(shouldPreferWorkspaceBinding(null)).toBe(false);
-		});
-	});
-}
-//#endregion
 //#region src/rule-selection.ts
 const selectionCache = /* @__PURE__ */ new WeakMap();
 /** A selection is a batching hint, never a second reporting/severity gate. */

package/dist/{workaround-r91ttnV_.mjs → workaround-CiQUFJw0.mjs}

@@ -1,6 +1,99 @@
+import { createRequire } from "node:module";
+import { spawnSync } from "node:child_process";
+import path from "node:path";
 import fs from "node:fs";
 import { createHash } from "node:crypto";
 import { isUtf8 } from "node:buffer";
+//#region src/native.ts
+const require = createRequire(import.meta.url);
+const FALLBACK_BINDING_PACKAGE = "@vizejs/native";
+let bindingCache = null;
+function isMusl() {
+	const report = process.report?.getReport();
+	if (typeof report === "object" && report !== null && "header" in report) return !report.header.glibcVersionRuntime;
+	const result = spawnSync("ldd", ["--version"], {
+		encoding: "utf8",
+		stdio: [
+			"ignore",
+			"pipe",
+			"pipe"
+		]
+	});
+	if (result.error) return true;
+	return `${result.stdout ?? ""}\n${result.stderr ?? ""}`.includes("musl");
+}
+function getBindingPackageName() {
+	const { arch, platform } = process;
+	switch (platform) {
+		case "darwin": switch (arch) {
+			case "arm64": return "@vizejs/native-darwin-arm64";
+			case "x64": return "@vizejs/native-darwin-x64";
+			default: throw new Error(`Unsupported architecture on macOS: ${arch}`);
+		}
+		case "linux": switch (arch) {
+			case "arm64": return isMusl() ? "@vizejs/native-linux-arm64-musl" : "@vizejs/native-linux-arm64-gnu";
+			case "x64": return isMusl() ? "@vizejs/native-linux-x64-musl" : "@vizejs/native-linux-x64-gnu";
+			default: throw new Error(`Unsupported architecture on Linux: ${arch}`);
+		}
+		case "win32": switch (arch) {
+			case "arm64": return "@vizejs/native-win32-arm64-msvc";
+			case "x64": return "@vizejs/native-win32-x64-msvc";
+			default: throw new Error(`Unsupported architecture on Windows: ${arch}`);
+		}
+		default: throw new Error(`Unsupported OS: ${platform}`);
+	}
+}
+function isPatinaBinding(binding) {
+	return typeof binding.lintPatinaSfc === "function" && typeof binding.getPatinaRules === "function";
+}
+function loadBinding() {
+	if (bindingCache) return bindingCache;
+	const attemptedPackages = getAttemptedPackages();
+	let lastError = null;
+	for (const packageName of attemptedPackages) try {
+		const binding = require(packageName);
+		if (!isPatinaBinding(binding)) throw new Error(`${packageName} does not expose the Patina Oxlint bridge.`);
+		bindingCache = binding;
+		return bindingCache;
+	} catch (error) {
+		lastError = error;
+	}
+	const message = lastError instanceof Error && lastError.message ? ` ${lastError.message}` : "";
+	throw new Error(`Failed to load the Vize native binding. Tried ${attemptedPackages.join(", ")}.${message}`);
+}
+function getAttemptedPackages() {
+	const platformBindingPackage = getBindingPackageName();
+	return shouldPreferWorkspaceBinding(resolveFallbackBindingPath()) ? [FALLBACK_BINDING_PACKAGE, platformBindingPackage] : [platformBindingPackage, FALLBACK_BINDING_PACKAGE];
+}
+function resolveFallbackBindingPath() {
+	try {
+		return require.resolve(FALLBACK_BINDING_PACKAGE);
+	} catch {
+		return null;
+	}
+}
+function shouldPreferWorkspaceBinding(resolvedPath) {
+	const override = process.env.VIZE_PREFER_WORKSPACE_BINDING;
+	if (override === "1" || override === "true") return true;
+	if (override === "0" || override === "false") return false;
+	if (resolvedPath == null) return false;
+	return resolvedPath.includes(`${path.sep}npm${path.sep}native${path.sep}`);
+}
+if (import.meta.vitest) {
+	const { describe, expect, it } = import.meta.vitest;
+	describe("shouldPreferWorkspaceBinding", () => {
+		it("detects the local workspace native package", () => {
+			expect(shouldPreferWorkspaceBinding(`${path.sep}Users${path.sep}example${path.sep}repo${path.sep}npm${path.sep}native${path.sep}index.js`)).toBe(true);
+		});
+		it("ignores published platform packages", () => {
+			expect(shouldPreferWorkspaceBinding(`${path.sep}repo${path.sep}node_modules${path.sep}.pnpm${path.sep}@vizejs+native-darwin-arm64${path.sep}node_modules${path.sep}@vizejs${path.sep}native-darwin-arm64${path.sep}index.js`)).toBe(false);
+		});
+		it("returns false when the fallback package cannot be resolved", () => {
+			expect(shouldPreferWorkspaceBinding(null)).toBe(false);
+		});
+	});
+}
+//#endregion
 //#region src/file-kinds.ts
 function isVueLikeFile(filename) {
 	return hasVueLikeExtension(filename);
@@ -291,4 +384,4 @@ if (import.meta.vitest) {
 	});
 }
 //#endregion
-export { validateWorkaroundAuthority as a, formatBlockLabel as c, isPatinaFile as d, isScriptLikeFile as f, resolveWorkaroundSource as i, getDiagnosticBlock as l, prepareWorkaroundSource as n, compareLineColumn as o, isStandaloneHtmlFile as p, readOriginalWorkaroundSource as r, extractSfcBlocks as s, isLocationBridgeProgram as t, hasVueLikeExtension as u };
+export { validateWorkaroundAuthority as a, formatBlockLabel as c, isPatinaFile as d, isScriptLikeFile as f, resolveWorkaroundSource as i, getDiagnosticBlock as l, loadBinding as m, prepareWorkaroundSource as n, compareLineColumn as o, isStandaloneHtmlFile as p, readOriginalWorkaroundSource as r, extractSfcBlocks as s, isLocationBridgeProgram as t, hasVueLikeExtension as u };

package/package.json

@@ -12,7 +12,7 @@
   "devDependencies": {
     "@tsdown/css": "0.22.14",
     "@types/node": "25.9.2",
-    "@vizejs/native": "0.441.0",
+    "@vizejs/native": "0.443.0",
     "tsdown": "0.22.14",
     "typescript": "6.0.3",
     "vite": "npm:@voidzero-dev/vite-plus-core@0.1.24",
@@ -49,14 +49,14 @@
   },
   "name": "oxlint-plugin-vize",
   "optionalDependencies": {
-    "@vizejs/native-darwin-arm64": "0.441.0",
-    "@vizejs/native-darwin-x64": "0.441.0",
-    "@vizejs/native-linux-arm64-gnu": "0.441.0",
-    "@vizejs/native-linux-arm64-musl": "0.441.0",
-    "@vizejs/native-linux-x64-gnu": "0.441.0",
-    "@vizejs/native-linux-x64-musl": "0.441.0",
-    "@vizejs/native-win32-arm64-msvc": "0.441.0",
-    "@vizejs/native-win32-x64-msvc": "0.441.0"
+    "@vizejs/native-darwin-arm64": "0.443.0",
+    "@vizejs/native-darwin-x64": "0.443.0",
+    "@vizejs/native-linux-arm64-gnu": "0.443.0",
+    "@vizejs/native-linux-arm64-musl": "0.443.0",
+    "@vizejs/native-linux-x64-gnu": "0.443.0",
+    "@vizejs/native-linux-x64-musl": "0.443.0",
+    "@vizejs/native-win32-arm64-msvc": "0.443.0",
+    "@vizejs/native-win32-x64-msvc": "0.443.0"
   },
   "publishConfig": {
     "access": "public"
@@ -68,12 +68,12 @@
   },
   "type": "module",
   "types": "./dist/index.d.mts",
-  "version": "0.441.0",
+  "version": "0.443.0",
   "scripts": {
     "build": "vp pack",
     "check": "vp check src vite.config.ts",
     "check:fix": "vp check --fix src vite.config.ts",
     "fmt": "vp fmt --write src vite.config.ts",
-    "test": "vp pack && vp test run src/file-state.test.ts src/batched-rules.test.ts src/script-safe-source.test.ts src/active-rule-collection.test.ts && node src/test.ts && node src/script-location.test.ts && node src/casing-options.test.ts && node src/template-style-fixes.test.mjs"
+    "test": "vp pack && vp test run src/file-state.test.ts src/batched-rules.test.ts src/script-safe-source.test.ts src/active-rule-collection.test.ts && node src/test.ts && node src/script-location.test.ts && node src/casing-options.test.ts && node src/template-style-fixes.test.mjs && node src/html-binding.test.mjs"
   }
 }