pm-ops 2026.9.13 → 2026.9.18

package/dist/merge-driver.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"merge-driver.d.ts","sourceRoot":"","sources":["../merge-driver.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAMH;;;;;;;GAOG;AACH,MAAM,MAAM,cAAc,GAAG,CAC3B,UAAU,EAAE,MAAM,EAClB,UAAU,EAAE,MAAM,EAAE,EACpB,OAAO,EAAE;IAAE,KAAK,EAAE,SAAS,CAAC;IAAC,GAAG,EAAE,MAAM,CAAC,UAAU,CAAC;IAAC,KAAK,EAAE,OAAO,CAAA;CAAE,KAClE,OAAO,CAAC;AAEb;;;;;;;GAOG;AACH,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,GAAG,OAAO,CASjF;AAED;;;;;;;GAOG;AACH,wBAAgB,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC,UAAU,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,GAAG,MAAM,GAAG,IAAI,CAuBjG;AAED;;;;;;GAMG;AACH,wBAAgB,qBAAqB,CACnC,WAAW,GAAE,MAAM,CAAC,UAAwB,EAC5C,QAAQ,GAAE,MAAM,CAAC,QAA2B,EAC5C,OAAO,GAAE,cAA6B,GACrC,MAAM,CAgDR"}

package/dist/merge-driver.js

@@ -0,0 +1,122 @@
+/**
+ * Canonical installer for pm's field-aware Git merge drivers.
+ *
+ * Git never clones `.git/config`, so every fleet package has to run
+ * `pm merge install` from its npm `prepare` script or concurrent agents
+ * conflict on tracker files. Twelve repositories vendored a byte-identical
+ * untyped JavaScript hook for that step. This module is the typed, tested
+ * replacement those packages import as `pm-ops/merge-driver`.
+ *
+ * Absence of `pm` is a supported production-install state and skips with a
+ * one-line notice. A present but broken CLI fails loudly so an install cannot
+ * pretend it configured merge safety when it did not. Windows PATH quoting,
+ * PATHEXT shims, and the `execFile` `.cmd` limitation are honoured through an
+ * injectable process boundary so the POSIX path is never faked.
+ *
+ * @packageDocumentation
+ */
+import { execFileSync } from "node:child_process";
+import { accessSync, constants, statSync } from "node:fs";
+import { join } from "node:path";
+/**
+ * Return whether `path` is a regular file the current platform would execute.
+ *
+ * POSIX requires the executable bit. Windows keys executability off PATHEXT,
+ * so a regular file is enough; directories, missing paths, and (on POSIX)
+ * mode-000 files are rejected without turning an ordinary absent-CLI install
+ * into a failure.
+ */
+export function isExecutableFile(path, platform) {
+    try {
+        if (!statSync(path).isFile())
+            return false;
+        if (platform === "win32")
+            return true;
+        accessSync(path, constants.X_OK);
+        return true;
+    }
+    catch {
+        return false;
+    }
+}
+/**
+ * Resolve the exact `pm` launcher on the supplied PATH, or `null` if none.
+ *
+ * Inspection never executes a candidate, so a present-but-broken CLI is not
+ * mistaken for absence. Empty POSIX components mean the current directory;
+ * Windows ignores them, may quote directories that contain spaces, and appends
+ * each PATHEXT suffix (defaulting to `.COM;.EXE;.BAT;.CMD` when unset).
+ */
+export function pmOnPath(environment, platform) {
+    const directories = (environment.PATH ?? "")
+        .split(platform === "win32" ? ";" : ":")
+        .map((entry) => platform === "win32" && entry.startsWith('"') && entry.endsWith('"')
+        ? entry.slice(1, -1)
+        : entry === "" && platform !== "win32"
+            ? "."
+            : entry)
+        .filter((entry) => entry !== "");
+    const extensions = platform === "win32"
+        ? (environment.PATHEXT ?? ".COM;.EXE;.BAT;.CMD").split(";").map((entry) => entry.trim()).filter((entry) => entry.length > 0)
+        : [""];
+    for (const directory of directories) {
+        for (const extension of extensions) {
+            const candidate = join(directory, `pm${extension}`);
+            if (isExecutableFile(candidate, platform))
+                return candidate;
+        }
+    }
+    return null;
+}
+/**
+ * Install clone-local merge drivers when `pm` is available.
+ *
+ * @returns `0` when installation ran or `pm` was absent (a one-line notice is
+ * printed on skip). A present CLI whose `pm merge install` fails returns that
+ * command's numeric status, or `1` when the failure has no status.
+ */
+export function runPrepareMergeDriver(environment = process.env, platform = process.platform, install = execFileSync) {
+    const executable = pmOnPath(environment, platform);
+    if (executable === null) {
+        console.error("pm is not on PATH; skipping merge-driver install");
+        return 0;
+    }
+    try {
+        // Node cannot execFile a Windows .cmd shim, so Windows has to go through
+        // cmd.exe. Only the constant command `pm merge install` may cross that
+        // boundary: interpolating the resolved path would let a PATH directory
+        // containing spaces split the command line, or one containing cmd
+        // metacharacters (`&`, `|`, `^`, `%`) inject into it. cmd resolves `pm`
+        // from the same PATH and PATHEXT that discovery just validated. POSIX
+        // executes the validated absolute path directly, with no shell at all.
+        //
+        // cmd.exe also searches the CURRENT directory before PATH, so a `pm.cmd`
+        // committed at the repository root (the prepare hook's cwd) would replace
+        // the validated launcher (CWE-426). NoDefaultCurrentDirectoryInExePath
+        // turns that search off for the child; any case variant already in the
+        // environment is dropped first, because Windows treats names
+        // case-insensitively and a stale `nodefaultcurrentdirectoryinexepath=`
+        // could otherwise shadow the one set here.
+        const windows = platform === "win32";
+        install(windows ? "pm" : executable, ["merge", "install"], {
+            stdio: "inherit",
+            env: windows
+                ? {
+                    ...Object.fromEntries(Object.entries(environment).filter(([name]) => name.toLowerCase() !== "nodefaultcurrentdirectoryinexepath")),
+                    NoDefaultCurrentDirectoryInExePath: "1",
+                }
+                : environment,
+            shell: windows,
+        });
+        return 0;
+    }
+    catch (error) {
+        console.error(error instanceof Error ? error.message : error);
+        if (typeof error === "object" && error !== null && "status" in error &&
+            typeof error.status === "number") {
+            return error.status;
+        }
+        return 1;
+    }
+}
+//# sourceMappingURL=merge-driver.js.map

package/dist/merge-driver.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"merge-driver.js","sourceRoot":"","sources":["../merge-driver.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAEH,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AAC1D,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAgBjC;;;;;;;GAOG;AACH,MAAM,UAAU,gBAAgB,CAAC,IAAY,EAAE,QAAyB;IACtE,IAAI,CAAC;QACH,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE;YAAE,OAAO,KAAK,CAAC;QAC3C,IAAI,QAAQ,KAAK,OAAO;YAAE,OAAO,IAAI,CAAC;QACtC,UAAU,CAAC,IAAI,EAAE,SAAS,CAAC,IAAI,CAAC,CAAC;QACjC,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,QAAQ,CAAC,WAA8B,EAAE,QAAyB;IAChF,MAAM,WAAW,GAAG,CAAC,WAAW,CAAC,IAAI,IAAI,EAAE,CAAC;SACzC,KAAK,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC;SACvC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CACb,QAAQ,KAAK,OAAO,IAAI,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC;QAClE,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;QACpB,CAAC,CAAC,KAAK,KAAK,EAAE,IAAI,QAAQ,KAAK,OAAO;YACtC,CAAC,CAAC,GAAG;YACL,CAAC,CAAC,KAAK,CACV;SACA,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,KAAK,EAAE,CAAC,CAAC;IACnC,MAAM,UAAU,GAAG,QAAQ,KAAK,OAAO;QACrC,CAAC,CAAC,CAAC,WAAW,CAAC,OAAO,IAAI,qBAAqB,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,CAC9F,KAAK,EACL,EAAE,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC;QACtB,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;IACT,KAAK,MAAM,SAAS,IAAI,WAAW,EAAE,CAAC;QACpC,KAAK,MAAM,SAAS,IAAI,UAAU,EAAE,CAAC;YACnC,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,EAAE,KAAK,SAAS,EAAE,CAAC,CAAC;YACpD,IAAI,gBAAgB,CAAC,SAAS,EAAE,QAAQ,CAAC;gBAAE,OAAO,SAAS,CAAC;QAC9D,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,qBAAqB,CACnC,WAAW,GAAsB,OAAO,CAAC,GAAG,EAC5C,QAAQ,GAAoB,OAAO,CAAC,QAAQ,EAC5C,OAAO,GAAmB,YAAY;IAEtC,MAAM,UAAU,GAAG,QAAQ,CAAC,WAAW,EAAE,QAAQ,CAAC,CAAC;IACnD,IAAI,UAAU,KAAK,IAAI,EAAE,CAAC;QACxB,OAAO,CAAC,KAAK,CAAC,kDAAkD,CAAC,CAAC;QAClE,OAAO,CAAC,CAAC;IACX,CAAC;IACD,IAAI,CAAC;QACH,yEAAyE;QACzE,uEAAuE;QACvE,uEAAuE;QACvE,kEAAkE;QAClE,wEAAwE;QACxE,sEAAsE;QACtE,uEAAuE;QACvE,EAAE;QACF,yEAAyE;QACzE,0EAA0E;QAC1E,uEAAuE;QACvE,uEAAuE;QACvE,6DAA6D;QAC7D,uEAAuE;QACvE,2CAA2C;QAC3C,MAAM,OAAO,GAAG,QAAQ,KAAK,OAAO,CAAC;QACrC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,UAAU,EAAE,CAAC,OAAO,EAAE,SAAS,CAAC,EAAE;YACzD,KAAK,EAAE,SAAS;YAChB,GAAG,EAAE,OAAO;gBACV,CAAC,CAAC;oBACA,GAAG,MAAM,CAAC,WAAW,CACnB,MAAM,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,EAAE,CAC5C,IAAI,CAAC,WAAW,EAAE,KAAK,oCAAoC,CAC5D,CACF;oBACD,kCAAkC,EAAE,GAAG;iBACxC;gBACD,CAAC,CAAC,WAAW;YACf,KAAK,EAAE,OAAO;SACf,CAAC,CAAC;QACH,OAAO,CAAC,CAAC;IACX,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,CAAC,KAAK,CAAC,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;QAC9D,IACE,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,QAAQ,IAAI,KAAK;YAChE,OAAO,KAAK,CAAC,MAAM,KAAK,QAAQ,EAChC,CAAC;YACD,OAAO,KAAK,CAAC,MAAM,CAAC;QACtB,CAAC;QACD,OAAO,CAAC,CAAC;IACX,CAAC;AACH,CAAC"}

package/manifest.json

@@ -1,6 +1,6 @@
 {
   "name": "pm-ops",
-  "version": "2026.9.13",
+  "version": "2026.9.18",
   "description": "Multi-repo fleet operations for pm-cli",
   "author": "@unbraind",
   "entry": "./dist/index.js",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "pm-ops",
-  "version": "2026.9.13",
+  "version": "2026.9.18",
   "description": "Multi-repo fleet operations for pm-cli",
   "repository": {
     "type": "git",
@@ -34,9 +34,21 @@
       "types": "./dist/attestation.d.ts",
       "default": "./dist/attestation.js"
     },
+    "./merge-driver": {
+      "types": "./dist/merge-driver.d.ts",
+      "default": "./dist/merge-driver.js"
+    },
     "./lifecycle-policy": {
       "types": "./dist/lifecycle-policy.d.ts",
       "default": "./dist/lifecycle-policy.js"
+    },
+    "./eslint": {
+      "types": "./dist/eslint.d.ts",
+      "default": "./dist/eslint.js"
+    },
+    "./duplication": {
+      "types": "./dist/duplication.d.ts",
+      "default": "./dist/duplication.js"
     }
   },
   "files": [
@@ -58,7 +70,9 @@
     "changelog:full": "pm-changelog --pm-root .agents/pm --mode replace --output CHANGELOG.md --all-release-tags --release-version-from-package --date-from-version --item-url-base https://github.com/unbraind/pm-ops/blob/main/.agents/pm --respect-item-release --pm-bin ./node_modules/.bin/pm --pm-arg=--output-budget --pm-arg=unbounded --pm-arg=--output-limit --pm-arg=unbounded",
     "changelog:check": "pm-changelog --pm-root .agents/pm --mode replace --output CHANGELOG.md --all-release-tags --release-version-from-package --date-from-version --item-url-base https://github.com/unbraind/pm-ops/blob/main/.agents/pm --respect-item-release --check --pm-bin ./node_modules/.bin/pm --pm-arg=--output-budget --pm-arg=unbounded --pm-arg=--output-limit --pm-arg=unbounded",
     "docstring": "node scripts/docstring-gate.ts",
-    "release:check": "npm run check && npm run docstring && npm run coverage && npm run audit:prod && npm run pack:dry-run && npm run changelog:check && npm run verify:release-changelog-date && npm run verify:release-publish-attestation && npm run verify:lifecycle-policy",
+    "lint": "node scripts/lint.ts",
+    "duplication": "node scripts/duplication-gate.ts",
+    "release:check": "npm run check && npm run lint && npm run duplication && npm run docstring && npm run coverage && npm run audit:prod && npm run pack:dry-run && npm run changelog:check && npm run verify:release-changelog-date && npm run verify:release-publish-attestation && npm run verify:lifecycle-policy",
     "prepublishOnly": "npm run release:check",
     "release:notes": "pm-changelog --pm-root .agents/pm --stdout --since-previous-tag --until-release-tag --release-version-from-package --date-from-version --item-url-base https://github.com/unbraind/pm-ops/blob/main/.agents/pm --respect-item-release --pm-bin ./node_modules/.bin/pm --pm-arg=--output-budget --pm-arg=unbounded --pm-arg=--output-limit --pm-arg=unbounded --github-step-summary",
     "prepare": "node scripts/prepare-merge-driver.ts",
@@ -74,13 +88,40 @@
     "typescript": "7.0.2"
   },
   "peerDependencies": {
-    "@unbrained/pm-cli": ">=2026.8.20"
+    "@babel/eslint-parser": "^8.0.5",
+    "@babel/plugin-syntax-typescript": "^8.0.3",
+    "@unbrained/pm-cli": ">=2026.8.20",
+    "eslint": "^10.10.0",
+    "fast-glob": "^3.3.3",
+    "jscpd": "^4.3.0"
+  },
+  "peerDependenciesMeta": {
+    "@babel/eslint-parser": {
+      "optional": true
+    },
+    "@babel/plugin-syntax-typescript": {
+      "optional": true
+    },
+    "eslint": {
+      "optional": true
+    },
+    "fast-glob": {
+      "optional": true
+    },
+    "jscpd": {
+      "optional": true
+    }
   },
   "devDependencies": {
+    "@babel/eslint-parser": "^8.0.5",
+    "@babel/plugin-syntax-typescript": "^8.0.3",
     "@types/node": "^26.2.0",
-    "@unbrained/pm-cli": "2026.9.10",
+    "@unbrained/pm-cli": "2026.9.17",
     "c8": "^12.0.0",
-    "pm-changelog": "2026.9.6"
+    "eslint": "^10.10.0",
+    "fast-glob": "^3.3.3",
+    "jscpd": "^4.3.0",
+    "pm-changelog": "^2026.9.16"
   },
   "keywords": [
     "pm-cli",
@@ -145,5 +186,9 @@
       "functions": 100
     },
     "ignore": []
+  },
+  "duplicationGate": {
+    "threshold": 0,
+    "minTokens": 50
   }
 }