pr-checkmate 1.21.6 → 1.21.8

package/.eslintrc.js

@@ -21,7 +21,7 @@ function loadUserConfig() {
   if (fs.existsSync(configPath)) {
     try {
       const config = JSON.parse(fs.readFileSync(configPath, 'utf-8'));
-      console.log(`[ESLint]: ✅ Loaded config from: ${configPath}`);
+      console.error(`[ESLint]: ✅ Loaded config from: ${configPath}`);
       return config;
     } catch (err) {
       console.warn(`[ESLint]: ⚠️  Failed to parse ${configPath}:`, err.message);

package/cspell.json

@@ -2,11 +2,11 @@
   "version": "0.2",
   "language": "en,ru,uk,he,fr,es",
   "import": [
-    "./node_modules/@cspell/dict-ru_ru/cspell-ext.json",
-    "./node_modules/@cspell/dict-uk-ua/cspell-ext.json",
-    "./node_modules/@cspell/dict-he/cspell-ext.json",
-    "./node_modules/@cspell/dict-fr-fr/cspell-ext.json",
-    "./node_modules/@cspell/dict-es-es/cspell-ext.json"
+    "@cspell/dict-ru_ru/cspell-ext.json",
+    "@cspell/dict-uk-ua/cspell-ext.json",
+    "@cspell/dict-he/cspell-ext.json",
+    "@cspell/dict-fr-fr/cspell-ext.json",
+    "@cspell/dict-es-es/cspell-ext.json"
   ],
   "words": [
     "ACMR",

package/dist/config/loader.js

@@ -59,6 +59,16 @@ function mergeWithDefaults(userConfig) {
         prBody: { ...defaults.prBody, ...userConfig.prBody },
         duplicate: { ...defaults.duplicate, ...userConfig.duplicate },
         commitlint: { ...defaults.commitlint, ...userConfig.commitlint },
+        licenseCheck: {
+            allowPackages: [
+                ...(defaults.licenseCheck?.allowPackages || []),
+                ...(userConfig.licenseCheck?.allowPackages || []),
+            ],
+            allowLicenses: [
+                ...(defaults.licenseCheck?.allowLicenses || []),
+                ...(userConfig.licenseCheck?.allowLicenses || []),
+            ],
+        },
     };
 }
 /**

package/dist/scripts/commitlint.js

@@ -39,6 +39,10 @@ const DEFAULT_TYPES = [
 ];
 function buildTempConfig(types) {
     const config = {
+        // Resolve the config package to its real entry point via Node module
+        // resolution. It works regardless of npm hoisting in the client project and
+        // regardless of the package's internal layout (e.g. lib/index.js vs index.js)
+        // or exports map — unlike hardcoding a subpath.
         extends: [require.resolve('@commitlint/config-conventional')],
         rules: {
             'type-enum': [2, 'always', types],
@@ -74,7 +78,7 @@ async function runCommitlint() {
         return;
     }
     utils_1.logger.info('[runCommitlint]: 📝 Running commitlint...');
-    const commitlintBin = require.resolve('@commitlint/cli/cli.js');
+    const commitlintBin = (0, utils_1.resolvePackageBin)('@commitlint/cli', 'cli.js');
     const hasLocal = (0, config_1.hasLocalConfig)(LOCAL_CONFIG_FILES);
     let tempConfigFile = null;
     const { from, to } = await getCommitRange();

package/dist/scripts/copy-configs.js

@@ -11,7 +11,6 @@ const configFiles = [
     { source: 'src/config/eslint.config.mjs', dest: 'eslint.config.mjs' },
     { source: 'src/config/.eslintrc.js', dest: '.eslintrc.js' },
     { source: 'src/config/.prettierrc', dest: '.prettierrc' },
-    { source: 'src/config/.eslintignore', dest: '.eslintignore' },
     { source: 'src/config/cspell.json', dest: 'cspell.json' },
     { source: 'tsconfig.json', dest: 'tsconfig.json' },
     { source: 'src/config/pr-checkmate-workflow.yml', dest: 'dist/config/pr-checkmate-workflow.yml' },

package/dist/scripts/dependency-check.js

@@ -30,9 +30,14 @@ async function runDependencyCheck() {
             throw err;
         }
     }
+    // Tools loaded by depcheck (e.g. eslint configs) may print to stdout ahead of
+    // the JSON, so slice from the first "{" to the last "}" before parsing.
+    const start = stdout.indexOf('{');
+    const end = stdout.lastIndexOf('}');
+    const json = start !== -1 && end !== -1 ? stdout.slice(start, end + 1) : stdout;
     let result;
     try {
-        result = JSON.parse(stdout);
+        result = JSON.parse(json);
     }
     catch {
         utils_1.logger.error('[runDependencyCheck]: ❌ Failed to parse depcheck output');

package/dist/scripts/duplicate-check.js

@@ -32,7 +32,7 @@ async function runDuplicateCheck() {
     // Fall back to src/ or project root when not in delta mode
     const srcPath = node_path_1.default.join(projectRoot, 'src');
     const targetPaths = changedFiles ?? (node_fs_1.default.existsSync(srcPath) ? [srcPath] : [projectRoot]);
-    const jscpdBin = require.resolve('jscpd/bin/jscpd');
+    const jscpdBin = (0, utils_1.resolvePackageBin)('jscpd', 'bin/jscpd');
     try {
         const result = await (0, execa_1.execa)(process.execPath, [
             jscpdBin,

package/dist/scripts/license-check.js

@@ -6,11 +6,23 @@ Object.defineProperty(exports, "__esModule", { value: true });
 exports.runLicenseCheck = runLicenseCheck;
 const execa_1 = require("execa");
 const utils_1 = require("../utils");
+const loader_1 = require("../config/loader");
 const node_path_1 = __importDefault(require("node:path"));
 const node_fs_1 = __importDefault(require("node:fs"));
 const FORBIDDEN_LICENSES = ['GPL-2.0', 'GPL-3.0', 'AGPL-3.0', 'LGPL-2.0', 'LGPL-2.1', 'LGPL-3.0'];
+/**
+ * Strip the trailing "@version" from a license-checker key to get the bare
+ * package name. Handles scoped packages, e.g. "@cspell/dict-ru_ru@2.3.2" → "@cspell/dict-ru_ru".
+ */
+function bareName(pkgKey) {
+    const at = pkgKey.lastIndexOf('@');
+    return at > 0 ? pkgKey.slice(0, at) : pkgKey;
+}
 async function runLicenseCheck() {
     utils_1.logger.info('[runLicenseCheck]: Checking dependency licenses...');
+    const cfg = (0, loader_1.loadProjectConfig)();
+    const allowPackages = new Set(cfg.licenseCheck?.allowPackages ?? []);
+    const allowLicenses = cfg.licenseCheck?.allowLicenses ?? [];
     if (!node_fs_1.default.existsSync(node_path_1.default.join(process.cwd(), 'package.json'))) {
         utils_1.logger.warn('[runLicenseCheck]: ⚠️ No package.json found, skipping');
         return;
@@ -22,8 +34,12 @@ async function runLicenseCheck() {
         const licenses = JSON.parse(stdout);
         const violations = [];
         for (const [pkg, info] of Object.entries(licenses)) {
+            if (allowPackages.has(bareName(pkg)))
+                continue;
             const raw = info.licenses ?? '';
             const license = Array.isArray(raw) ? raw.join(' OR ') : raw;
+            if (allowLicenses.some(a => license.includes(a)))
+                continue;
             if (FORBIDDEN_LICENSES.some(f => license.includes(f))) {
                 violations.push(`  ${pkg}: ${license}`);
             }

package/dist/scripts/lint.js

@@ -9,12 +9,9 @@ const utils_1 = require("../utils");
 const delta_1 = require("../utils/delta");
 const execa_1 = require("execa");
 const node_path_1 = __importDefault(require("node:path"));
-/**
- * Detect ESLint major version to choose appropriate config format
- */
-const eslintBin = require.resolve('eslint/bin/eslint.js');
 async function getESLintMajorVersion() {
     try {
+        const eslintBin = (0, utils_1.resolvePackageBin)('eslint', 'bin/eslint.js');
         const { stdout } = await (0, execa_1.execa)(process.execPath, [eslintBin, '--version']);
         const match = stdout.match(/v?(\d+)\./);
         return match ? parseInt(match[1], 10) : 8;
@@ -25,6 +22,7 @@ async function getESLintMajorVersion() {
 }
 async function runLint() {
     utils_1.logger.info('[runLint]: 🔍 Running ESLint...');
+    const eslintBin = (0, utils_1.resolvePackageBin)('eslint', 'bin/eslint.js');
     const projectRoot = process.cwd();
     const sourcePath = (0, config_1.getSourcePath)();
     const sourceFullPath = node_path_1.default.join(projectRoot, sourcePath);

package/dist/scripts/markdown-lint.js

@@ -90,7 +90,7 @@ async function runMarkdownLint() {
     const extraIgnores = (userConfig.ignores ?? []).flatMap(p => ['--ignore', p]);
     const gitignorePath = node_path_1.default.join(root, '.gitignore');
     const ignorePath = node_fs_1.default.existsSync(gitignorePath) ? ['--ignore-path', gitignorePath] : [];
-    const markdownlintBin = require.resolve('markdownlint-cli/markdownlint.js');
+    const markdownlintBin = (0, utils_1.resolvePackageBin)('markdownlint-cli', 'markdownlint.js');
     const args = [
         '--fix',
         ...targets,

package/dist/scripts/prettier-autoformat.js

@@ -87,7 +87,7 @@ async function runPrettier() {
     ]);
     let args;
     let tempConfig = null;
-    const prettierBin = require.resolve('prettier/bin/prettier.cjs');
+    const prettierBin = (0, utils_1.resolvePackageBin)('prettier', 'bin/prettier.cjs');
     if (hasLocal) {
         utils_1.logger.info(`[runPrettier]: Using local Prettier config (checking: ${sourcePath})`);
         args = ['--write', ...targets, '--ignore-path', ignorePath];

package/dist/scripts/security.js

@@ -68,7 +68,7 @@ async function runSecurityScan() {
             ...(headSha && { HEAD_SHA: headSha }),
             ...(baseSha && { BASE_SHA: baseSha }),
         };
-        const gitleaksBin = require.resolve('gitleaks-secret-scanner-fixed/bin/cli.js');
+        const gitleaksBin = (0, utils_1.resolvePackageBin)('gitleaks-secret-scanner-fixed', 'bin/cli.js');
         const hasClientConfig = (0, config_1.hasLocalConfig)([
             '.gitleaks.toml',
             'gitleaks.toml',

package/dist/scripts/spellcheck.js

@@ -35,8 +35,22 @@ function createTempCspellConfig() {
     const packageConfigDir = node_path_1.default.dirname(packageConfigPath);
     const defaultConfig = JSON.parse(node_fs_1.default.readFileSync(packageConfigPath, 'utf-8'));
     const userConfig = loadUserCspellConfig();
-    // Resolve relative import paths to absolute so they work from any client cwd
-    const resolvedImports = (defaultConfig.import ?? []).map(p => p.startsWith('.') ? node_path_1.default.resolve(packageConfigDir, p) : p);
+    // Resolve import paths to absolute so they work from any client cwd.
+    // Relative paths are resolved against the package config dir; bare package
+    // specifiers (e.g. "@cspell/dict-ru_ru/cspell-ext.json") are resolved via Node
+    // module resolution so they work regardless of npm hoisting in the client
+    // project (dicts may live in the root node_modules, not nested under us).
+    const resolvedImports = (defaultConfig.import ?? []).map(p => {
+        if (p.startsWith('.')) {
+            return node_path_1.default.resolve(packageConfigDir, p);
+        }
+        try {
+            return require.resolve(p);
+        }
+        catch {
+            return p;
+        }
+    });
     // Merge configurations
     const mergedConfig = {
         ...defaultConfig,
@@ -85,7 +99,7 @@ async function runSpellcheck() {
     const hasLocal = (0, config_1.hasLocalConfig)(['cspell.json', '.cspell.json', 'cspell.config.json']);
     let args;
     let tempConfigPath = null;
-    const cspellBin = require.resolve('cspell/bin.mjs');
+    const cspellBin = (0, utils_1.resolvePackageBin)('cspell', 'bin.mjs');
     if (hasLocal) {
         utils_1.logger.info(`📋 Using local cspell config (checking: ${sourcePath})`);
         args = [...patterns, '--no-progress'];

package/dist/scripts/typecheck.js

@@ -21,7 +21,7 @@ async function runTypecheck() {
         utils_1.logger.info('[runTypecheck]: No tsconfig.json found, skipping');
         return;
     }
-    const tscBin = require.resolve('typescript/bin/tsc');
+    const tscBin = (0, utils_1.resolvePackageBin)('typescript', 'bin/tsc');
     const result = await (0, execa_1.execa)(process.execPath, [tscBin, '--noEmit'], { reject: false });
     if (result.exitCode !== 0) {
         const output = [result.stdout, result.stderr].filter(Boolean).join('\n');

package/dist/utils/index.js

@@ -23,6 +23,7 @@ const logger_1 = require("./logger");
 __exportStar(require("./logger"), exports);
 __exportStar(require("./delta"), exports);
 __exportStar(require("./result-collector"), exports);
+__exportStar(require("./resolve-bin"), exports);
 function cleanupTempFile(filePath) {
     try {
         if (node_fs_1.default.existsSync(filePath)) {

package/dist/utils/resolve-bin.js

@@ -0,0 +1,46 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.resolvePackageBin = resolvePackageBin;
+const node_path_1 = __importDefault(require("node:path"));
+const node_fs_1 = __importDefault(require("node:fs"));
+/**
+ * Resolves a binary path for a bundled package, bypassing exports map restrictions.
+ *
+ * Strategy (tries each in order):
+ * 1. Direct subpath — fast path for packages that explicitly export their bin
+ * 2. Via package.json — for packages that export ./package.json but not the bin subpath (e.g. eslint)
+ * 3. Walk up from main entry — for packages that export neither (e.g. cspell)
+ */
+function resolvePackageBin(pkgName, binRelPath) {
+    // 1. Direct subpath
+    try {
+        return require.resolve(`${pkgName}/${binRelPath}`);
+    }
+    catch { }
+    // 2. Via package.json
+    try {
+        const pkgJsonPath = require.resolve(`${pkgName}/package.json`);
+        return node_path_1.default.join(node_path_1.default.dirname(pkgJsonPath), binRelPath);
+    }
+    catch { }
+    // 3. Walk up from main entry to find package root by matching package name
+    const main = require.resolve(pkgName);
+    let dir = node_path_1.default.dirname(main);
+    while (dir !== node_path_1.default.dirname(dir)) {
+        const pkgJsonPath = node_path_1.default.join(dir, 'package.json');
+        if (node_fs_1.default.existsSync(pkgJsonPath)) {
+            try {
+                const pkg = JSON.parse(node_fs_1.default.readFileSync(pkgJsonPath, 'utf-8'));
+                if (pkg.name === pkgName) {
+                    return node_path_1.default.join(dir, binRelPath);
+                }
+            }
+            catch { }
+        }
+        dir = node_path_1.default.dirname(dir);
+    }
+    throw new Error(`Cannot resolve binary "${binRelPath}" for package "${pkgName}"`);
+}

package/eslint.config.mjs

@@ -76,13 +76,13 @@ function loadUserConfig() {
   if (fs.existsSync(configPath)) {
     try {
       const config = JSON.parse(fs.readFileSync(configPath, 'utf-8'));
-      console.log(`[loadUserConfig]: ✅ Loaded user config from: ${configPath}`);
+      console.error(`[loadUserConfig]: ✅ Loaded user config from: ${configPath}`);
       return config;
     } catch (err) {
       console.warn(`[loadUserConfig]: ⚠️ Failed to parse ${configPath}:`, err.message);
     }
   } else {
-    console.log(`[loadUserConfig]: ℹ️ No pr-checkmate.json found, using defaults`);
+    console.error(`[loadUserConfig]: ℹ️ No pr-checkmate.json found, using defaults`);
   }
   
   return { sourcePath: 'src', eslint: {} };
@@ -110,13 +110,13 @@ const customRulesCount = Object.keys(userConfig.eslint?.rules || {}).length;
 const customIgnoresCount = (userConfig.eslint?.ignorePatterns || []).length;
 
 if (customRulesCount > 0) {
-  console.log(`🔧 Applied ${customRulesCount} custom ESLint rules`);
+  console.error(`🔧 Applied ${customRulesCount} custom ESLint rules`);
 }
 if (customIgnoresCount > 0) {
-  console.log(`🚫 Applied ${customIgnoresCount} custom ignore patterns`);
+  console.error(`🚫 Applied ${customIgnoresCount} custom ignore patterns`);
 }
 
-console.log(`📋 ESLint checking: ${SRC}/**/*.{ts,tsx,js,jsx}`);
+console.error(`📋 ESLint checking: ${SRC}/**/*.{ts,tsx,js,jsx}`);
 
 export default [
   // Global ignores must be in a separate config object

package/package.json

@@ -1,6 +1,6 @@
 {
     "name": "pr-checkmate",
-    "version": "1.21.6",
+    "version": "1.21.8",
     "description": "Automated PR quality checks: linting, formatting, dependency analysis, and spellcheck",
     "keywords": [
         "github-actions",
@@ -23,7 +23,6 @@
         "eslint.config.mjs",
         ".eslintrc.js",
         ".prettierrc",
-        ".eslintignore",
         "cspell.json",
         "src/config/pr-checkmate-workflow.yml",
         ".markdownlint.json",
@@ -67,10 +66,10 @@
         "@cspell/dict-he": "^4.0.2",
         "@cspell/dict-ru_ru": "^2.2.1",
         "@cspell/dict-uk-ua": "^4.0.0",
+        "@types/node": "^25.9.4",
         "@typescript-eslint/eslint-plugin": "^8.47.0",
         "@typescript-eslint/parser": "^8.47.0",
         "cspell": "^9.3.2",
-        "dotenv": "^17.2.3",
         "eslint": "^9.26.0",
         "eslint-config-prettier": "^9.1.2",
         "eslint-plugin-import": "^2.29.0",

package/src/config/.eslintrc.js

@@ -21,7 +21,7 @@ function loadUserConfig() {
   if (fs.existsSync(configPath)) {
     try {
       const config = JSON.parse(fs.readFileSync(configPath, 'utf-8'));
-      console.log(`[ESLint]: ✅ Loaded config from: ${configPath}`);
+      console.error(`[ESLint]: ✅ Loaded config from: ${configPath}`);
       return config;
     } catch (err) {
       console.warn(`[ESLint]: ⚠️  Failed to parse ${configPath}:`, err.message);

package/src/config/cspell.json

@@ -2,11 +2,11 @@
   "version": "0.2",
   "language": "en,ru,uk,he,fr,es",
   "import": [
-    "./node_modules/@cspell/dict-ru_ru/cspell-ext.json",
-    "./node_modules/@cspell/dict-uk-ua/cspell-ext.json",
-    "./node_modules/@cspell/dict-he/cspell-ext.json",
-    "./node_modules/@cspell/dict-fr-fr/cspell-ext.json",
-    "./node_modules/@cspell/dict-es-es/cspell-ext.json"
+    "@cspell/dict-ru_ru/cspell-ext.json",
+    "@cspell/dict-uk-ua/cspell-ext.json",
+    "@cspell/dict-he/cspell-ext.json",
+    "@cspell/dict-fr-fr/cspell-ext.json",
+    "@cspell/dict-es-es/cspell-ext.json"
   ],
   "words": [
     "ACMR",

package/src/config/eslint.config.mjs

@@ -76,13 +76,13 @@ function loadUserConfig() {
   if (fs.existsSync(configPath)) {
     try {
       const config = JSON.parse(fs.readFileSync(configPath, 'utf-8'));
-      console.log(`[loadUserConfig]: ✅ Loaded user config from: ${configPath}`);
+      console.error(`[loadUserConfig]: ✅ Loaded user config from: ${configPath}`);
       return config;
     } catch (err) {
       console.warn(`[loadUserConfig]: ⚠️ Failed to parse ${configPath}:`, err.message);
     }
   } else {
-    console.log(`[loadUserConfig]: ℹ️ No pr-checkmate.json found, using defaults`);
+    console.error(`[loadUserConfig]: ℹ️ No pr-checkmate.json found, using defaults`);
   }
   
   return { sourcePath: 'src', eslint: {} };
@@ -110,13 +110,13 @@ const customRulesCount = Object.keys(userConfig.eslint?.rules || {}).length;
 const customIgnoresCount = (userConfig.eslint?.ignorePatterns || []).length;
 
 if (customRulesCount > 0) {
-  console.log(`🔧 Applied ${customRulesCount} custom ESLint rules`);
+  console.error(`🔧 Applied ${customRulesCount} custom ESLint rules`);
 }
 if (customIgnoresCount > 0) {
-  console.log(`🚫 Applied ${customIgnoresCount} custom ignore patterns`);
+  console.error(`🚫 Applied ${customIgnoresCount} custom ignore patterns`);
 }
 
-console.log(`📋 ESLint checking: ${SRC}/**/*.{ts,tsx,js,jsx}`);
+console.error(`📋 ESLint checking: ${SRC}/**/*.{ts,tsx,js,jsx}`);
 
 export default [
   // Global ignores must be in a separate config object

package/.eslintignore

@@ -1,72 +0,0 @@
-# Dependencies
-node_modules/
-
-# Build outputs
-dist/
-build/
-out/
-.next/
-.nuxt/
-
-# Test reports & artifacts
-allure-report/
-allure-results/
-reports/
-report/
-test-reports/
-test-report/
-test-output/
-test-results/
-results/
-result/
-coverage/
-.coverage/
-htmlcov/
-
-# Jest
-jest-html-reporters-*/
-jest-stare/
-jest.config.js
-
-# Cypress
-cypress/reports/
-cypress/videos/
-cypress/screenshots/
-
-# Playwright
-playwright-report/
-test-results/
-
-# WebdriverIO
-.wdio/
-wdio-logs/
-
-# Mocha/Mochawesome
-mochawesome-report/
-mochawesome-reports/
-
-# Maven/JUnit
-target/
-
-# Logs
-logs/
-*.log
-npm-debug.log*
-yarn-debug.log*
-
-# Python
-__pycache__/
-.pytest_cache/
-.venv/
-venv/
-
-# Git
-.git/
-
-# Config files
-*.config.js
-*.config.ts
-jest.config.*
-wdio.config.*
-playwright.config.*
-cypress.config.*

package/src/config/.eslintignore

@@ -1,72 +0,0 @@
-# Dependencies
-node_modules/
-
-# Build outputs
-dist/
-build/
-out/
-.next/
-.nuxt/
-
-# Test reports & artifacts
-allure-report/
-allure-results/
-reports/
-report/
-test-reports/
-test-report/
-test-output/
-test-results/
-results/
-result/
-coverage/
-.coverage/
-htmlcov/
-
-# Jest
-jest-html-reporters-*/
-jest-stare/
-jest.config.js
-
-# Cypress
-cypress/reports/
-cypress/videos/
-cypress/screenshots/
-
-# Playwright
-playwright-report/
-test-results/
-
-# WebdriverIO
-.wdio/
-wdio-logs/
-
-# Mocha/Mochawesome
-mochawesome-report/
-mochawesome-reports/
-
-# Maven/JUnit
-target/
-
-# Logs
-logs/
-*.log
-npm-debug.log*
-yarn-debug.log*
-
-# Python
-__pycache__/
-.pytest_cache/
-.venv/
-venv/
-
-# Git
-.git/
-
-# Config files
-*.config.js
-*.config.ts
-jest.config.*
-wdio.config.*
-playwright.config.*
-cypress.config.*