pr-checkmate 1.21.7 → 1.21.9

package/.eslintrc.js

@@ -21,7 +21,7 @@ function loadUserConfig() {
   if (fs.existsSync(configPath)) {
     try {
       const config = JSON.parse(fs.readFileSync(configPath, 'utf-8'));
-      console.log(`[ESLint]: ✅ Loaded config from: ${configPath}`);
+      console.error(`[ESLint]: ✅ Loaded config from: ${configPath}`);
       return config;
     } catch (err) {
       console.warn(`[ESLint]: ⚠️  Failed to parse ${configPath}:`, err.message);

package/README.md

@@ -1,9 +1,9 @@
+# ♟️ PR CheckMate
+
 ![Build](https://img.shields.io/github/actions/workflow/status/Mybono/sdk_automation/publish.yml?branch=main&label=CI&color=blue)
 ![ESLint](https://img.shields.io/npm/v/eslint?color=yellow&label=ESLint)
 ![Prettier](https://img.shields.io/npm/v/prettier?color=orange&label=Prettier)
 
-# ♟️ PR CheckMate
->
 > **PR CheckMate** is an npm package for automating Pull Request checks.
 > It helps teams maintain code quality by automatically validating linting, formatting, dependencies, security, and spelling before merging to `main`.
 

package/cspell.json

@@ -2,11 +2,11 @@
   "version": "0.2",
   "language": "en,ru,uk,he,fr,es",
   "import": [
-    "./node_modules/@cspell/dict-ru_ru/cspell-ext.json",
-    "./node_modules/@cspell/dict-uk-ua/cspell-ext.json",
-    "./node_modules/@cspell/dict-he/cspell-ext.json",
-    "./node_modules/@cspell/dict-fr-fr/cspell-ext.json",
-    "./node_modules/@cspell/dict-es-es/cspell-ext.json"
+    "@cspell/dict-ru_ru/cspell-ext.json",
+    "@cspell/dict-uk-ua/cspell-ext.json",
+    "@cspell/dict-he/cspell-ext.json",
+    "@cspell/dict-fr-fr/cspell-ext.json",
+    "@cspell/dict-es-es/cspell-ext.json"
   ],
   "words": [
     "ACMR",

package/dist/config/loader.js

@@ -59,6 +59,16 @@ function mergeWithDefaults(userConfig) {
         prBody: { ...defaults.prBody, ...userConfig.prBody },
         duplicate: { ...defaults.duplicate, ...userConfig.duplicate },
         commitlint: { ...defaults.commitlint, ...userConfig.commitlint },
+        licenseCheck: {
+            allowPackages: [
+                ...(defaults.licenseCheck?.allowPackages || []),
+                ...(userConfig.licenseCheck?.allowPackages || []),
+            ],
+            allowLicenses: [
+                ...(defaults.licenseCheck?.allowLicenses || []),
+                ...(userConfig.licenseCheck?.allowLicenses || []),
+            ],
+        },
     };
 }
 /**

package/dist/scripts/commitlint.js

@@ -39,7 +39,11 @@ const DEFAULT_TYPES = [
 ];
 function buildTempConfig(types) {
     const config = {
-        extends: [(0, utils_1.resolvePackageBin)('@commitlint/config-conventional', 'index.js')],
+        // Resolve the config package to its real entry point via Node module
+        // resolution. It works regardless of npm hoisting in the client project and
+        // regardless of the package's internal layout (e.g. lib/index.js vs index.js)
+        // or exports map — unlike hardcoding a subpath.
+        extends: [require.resolve('@commitlint/config-conventional')],
         rules: {
             'type-enum': [2, 'always', types],
         },
@@ -73,7 +77,7 @@ async function runCommitlint() {
         result_collector_1.resultCollector.register('Commitlint', 'skip');
         return;
     }
-    utils_1.logger.info('[runCommitlint]: 📝 Running commitlint...');
+    utils_1.logger.info('[runCommitlint]: Running commitlint...');
     const commitlintBin = (0, utils_1.resolvePackageBin)('@commitlint/cli', 'cli.js');
     const hasLocal = (0, config_1.hasLocalConfig)(LOCAL_CONFIG_FILES);
     let tempConfigFile = null;

package/dist/scripts/copy-configs.js

@@ -11,7 +11,6 @@ const configFiles = [
     { source: 'src/config/eslint.config.mjs', dest: 'eslint.config.mjs' },
     { source: 'src/config/.eslintrc.js', dest: '.eslintrc.js' },
     { source: 'src/config/.prettierrc', dest: '.prettierrc' },
-    { source: 'src/config/.eslintignore', dest: '.eslintignore' },
     { source: 'src/config/cspell.json', dest: 'cspell.json' },
     { source: 'tsconfig.json', dest: 'tsconfig.json' },
     { source: 'src/config/pr-checkmate-workflow.yml', dest: 'dist/config/pr-checkmate-workflow.yml' },

package/dist/scripts/dependency-check.js

@@ -30,9 +30,14 @@ async function runDependencyCheck() {
             throw err;
         }
     }
+    // Tools loaded by depcheck (e.g. eslint configs) may print to stdout ahead of
+    // the JSON, so slice from the first "{" to the last "}" before parsing.
+    const start = stdout.indexOf('{');
+    const end = stdout.lastIndexOf('}');
+    const json = start !== -1 && end !== -1 ? stdout.slice(start, end + 1) : stdout;
     let result;
     try {
-        result = JSON.parse(stdout);
+        result = JSON.parse(json);
     }
     catch {
         utils_1.logger.error('[runDependencyCheck]: ❌ Failed to parse depcheck output');

package/dist/scripts/index.js

@@ -84,7 +84,7 @@ async function trackSoftCheck(name, fn) {
     }
 }
 async function runJob(jobName) {
-    utils_1.logger.info(`[runJob]: 🚀 Running job: ${jobName}`);
+    utils_1.logger.info(`[runJob]: Running job: ${jobName}`);
     try {
         switch (jobName) {
             case 'all':

package/dist/scripts/license-check.js

@@ -6,11 +6,23 @@ Object.defineProperty(exports, "__esModule", { value: true });
 exports.runLicenseCheck = runLicenseCheck;
 const execa_1 = require("execa");
 const utils_1 = require("../utils");
+const loader_1 = require("../config/loader");
 const node_path_1 = __importDefault(require("node:path"));
 const node_fs_1 = __importDefault(require("node:fs"));
 const FORBIDDEN_LICENSES = ['GPL-2.0', 'GPL-3.0', 'AGPL-3.0', 'LGPL-2.0', 'LGPL-2.1', 'LGPL-3.0'];
+/**
+ * Strip the trailing "@version" from a license-checker key to get the bare
+ * package name. Handles scoped packages, e.g. "@cspell/dict-ru_ru@2.3.2" → "@cspell/dict-ru_ru".
+ */
+function bareName(pkgKey) {
+    const at = pkgKey.lastIndexOf('@');
+    return at > 0 ? pkgKey.slice(0, at) : pkgKey;
+}
 async function runLicenseCheck() {
     utils_1.logger.info('[runLicenseCheck]: Checking dependency licenses...');
+    const cfg = (0, loader_1.loadProjectConfig)();
+    const allowPackages = new Set(cfg.licenseCheck?.allowPackages ?? []);
+    const allowLicenses = cfg.licenseCheck?.allowLicenses ?? [];
     if (!node_fs_1.default.existsSync(node_path_1.default.join(process.cwd(), 'package.json'))) {
         utils_1.logger.warn('[runLicenseCheck]: ⚠️ No package.json found, skipping');
         return;
@@ -22,8 +34,12 @@ async function runLicenseCheck() {
         const licenses = JSON.parse(stdout);
         const violations = [];
         for (const [pkg, info] of Object.entries(licenses)) {
+            if (allowPackages.has(bareName(pkg)))
+                continue;
             const raw = info.licenses ?? '';
             const license = Array.isArray(raw) ? raw.join(' OR ') : raw;
+            if (allowLicenses.some(a => license.includes(a)))
+                continue;
             if (FORBIDDEN_LICENSES.some(f => license.includes(f))) {
                 violations.push(`  ${pkg}: ${license}`);
             }

package/dist/scripts/lint.js

@@ -21,7 +21,7 @@ async function getESLintMajorVersion() {
     }
 }
 async function runLint() {
-    utils_1.logger.info('[runLint]: 🔍 Running ESLint...');
+    utils_1.logger.info('[runLint]: Running ESLint...');
     const eslintBin = (0, utils_1.resolvePackageBin)('eslint', 'bin/eslint.js');
     const projectRoot = process.cwd();
     const sourcePath = (0, config_1.getSourcePath)();

package/dist/scripts/markdown-lint.js

@@ -33,7 +33,7 @@ function buildMergedConfig(bundledConfigPath, userRules) {
     return tmpFile;
 }
 async function runMarkdownLint() {
-    utils_1.logger.info('[runMarkdownLint]: 📝 Running Markdown lint...');
+    utils_1.logger.info('[runMarkdownLint]: Running Markdown lint...');
     const root = process.cwd();
     const changedFiles = await (0, delta_1.getChangedFiles)(['.md', '.mdx']);
     let targets;

package/dist/scripts/security.js

@@ -53,7 +53,7 @@ async function getBaseSha() {
  * Run security scan for secrets
  */
 async function runSecurityScan() {
-    utils_1.logger.info('🔐 Running security scan with gitleaks-secret-scanner...');
+    utils_1.logger.info('Running security scan with gitleaks-secret-scanner...');
     try {
         const headSha = await getHeadSha();
         if (!headSha) {

package/dist/scripts/spellcheck.js

@@ -35,8 +35,22 @@ function createTempCspellConfig() {
     const packageConfigDir = node_path_1.default.dirname(packageConfigPath);
     const defaultConfig = JSON.parse(node_fs_1.default.readFileSync(packageConfigPath, 'utf-8'));
     const userConfig = loadUserCspellConfig();
-    // Resolve relative import paths to absolute so they work from any client cwd
-    const resolvedImports = (defaultConfig.import ?? []).map(p => p.startsWith('.') ? node_path_1.default.resolve(packageConfigDir, p) : p);
+    // Resolve import paths to absolute so they work from any client cwd.
+    // Relative paths are resolved against the package config dir; bare package
+    // specifiers (e.g. "@cspell/dict-ru_ru/cspell-ext.json") are resolved via Node
+    // module resolution so they work regardless of npm hoisting in the client
+    // project (dicts may live in the root node_modules, not nested under us).
+    const resolvedImports = (defaultConfig.import ?? []).map(p => {
+        if (p.startsWith('.')) {
+            return node_path_1.default.resolve(packageConfigDir, p);
+        }
+        try {
+            return require.resolve(p);
+        }
+        catch {
+            return p;
+        }
+    });
     // Merge configurations
     const mergedConfig = {
         ...defaultConfig,
@@ -87,7 +101,7 @@ async function runSpellcheck() {
     let tempConfigPath = null;
     const cspellBin = (0, utils_1.resolvePackageBin)('cspell', 'bin.mjs');
     if (hasLocal) {
-        utils_1.logger.info(`📋 Using local cspell config (checking: ${sourcePath})`);
+        utils_1.logger.info(`Using local cspell config (checking: ${sourcePath})`);
         args = [...patterns, '--no-progress'];
     }
     else {

package/dist/scripts/typecheck.js

@@ -9,6 +9,22 @@ const utils_1 = require("../utils");
 const loader_1 = require("../config/loader");
 const node_fs_1 = __importDefault(require("node:fs"));
 const node_path_1 = __importDefault(require("node:path"));
+/**
+ * Resolves the `tsc` binary, preferring the consumer project's own TypeScript so its
+ * tsconfig is compiled by the version it was written for. Falls back to the TypeScript
+ * bundled with pr-checkmate when the project has no local install.
+ */
+function resolveTsc() {
+    try {
+        const localTsc = (0, utils_1.resolvePackageBin)('typescript', 'bin/tsc', { paths: [process.cwd()] });
+        utils_1.logger.info("[runTypecheck]: Using project's local TypeScript");
+        return localTsc;
+    }
+    catch {
+        utils_1.logger.info('[runTypecheck]: No local TypeScript found, using bundled compiler');
+        return (0, utils_1.resolvePackageBin)('typescript', 'bin/tsc');
+    }
+}
 async function runTypecheck() {
     const cfg = (0, loader_1.loadProjectConfig)();
     if (cfg.typecheck?.enabled === false) {
@@ -21,7 +37,7 @@ async function runTypecheck() {
         utils_1.logger.info('[runTypecheck]: No tsconfig.json found, skipping');
         return;
     }
-    const tscBin = (0, utils_1.resolvePackageBin)('typescript', 'bin/tsc');
+    const tscBin = resolveTsc();
     const result = await (0, execa_1.execa)(process.execPath, [tscBin, '--noEmit'], { reject: false });
     if (result.exitCode !== 0) {
         const output = [result.stdout, result.stderr].filter(Boolean).join('\n');

package/dist/utils/resolve-bin.js

@@ -13,21 +13,25 @@ const node_fs_1 = __importDefault(require("node:fs"));
  * 1. Direct subpath — fast path for packages that explicitly export their bin
  * 2. Via package.json — for packages that export ./package.json but not the bin subpath (e.g. eslint)
  * 3. Walk up from main entry — for packages that export neither (e.g. cspell)
+ *
+ * @param options.paths - Directories to resolve from (passed to `require.resolve`).
+ *   Use `[process.cwd()]` to prefer the consumer project's copy of the package.
  */
-function resolvePackageBin(pkgName, binRelPath) {
+function resolvePackageBin(pkgName, binRelPath, options) {
+    const resolveOpts = options?.paths ? { paths: options.paths } : undefined;
     // 1. Direct subpath
     try {
-        return require.resolve(`${pkgName}/${binRelPath}`);
+        return require.resolve(`${pkgName}/${binRelPath}`, resolveOpts);
     }
     catch { }
     // 2. Via package.json
     try {
-        const pkgJsonPath = require.resolve(`${pkgName}/package.json`);
+        const pkgJsonPath = require.resolve(`${pkgName}/package.json`, resolveOpts);
         return node_path_1.default.join(node_path_1.default.dirname(pkgJsonPath), binRelPath);
     }
     catch { }
     // 3. Walk up from main entry to find package root by matching package name
-    const main = require.resolve(pkgName);
+    const main = require.resolve(pkgName, resolveOpts);
     let dir = node_path_1.default.dirname(main);
     while (dir !== node_path_1.default.dirname(dir)) {
         const pkgJsonPath = node_path_1.default.join(dir, 'package.json');

package/eslint.config.mjs

@@ -76,13 +76,13 @@ function loadUserConfig() {
   if (fs.existsSync(configPath)) {
     try {
       const config = JSON.parse(fs.readFileSync(configPath, 'utf-8'));
-      console.log(`[loadUserConfig]: ✅ Loaded user config from: ${configPath}`);
+      console.error(`[loadUserConfig]: ✅ Loaded user config from: ${configPath}`);
       return config;
     } catch (err) {
       console.warn(`[loadUserConfig]: ⚠️ Failed to parse ${configPath}:`, err.message);
     }
   } else {
-    console.log(`[loadUserConfig]: ℹ️ No pr-checkmate.json found, using defaults`);
+    console.error(`[loadUserConfig]: ℹ️ No pr-checkmate.json found, using defaults`);
   }
   
   return { sourcePath: 'src', eslint: {} };
@@ -110,13 +110,13 @@ const customRulesCount = Object.keys(userConfig.eslint?.rules || {}).length;
 const customIgnoresCount = (userConfig.eslint?.ignorePatterns || []).length;
 
 if (customRulesCount > 0) {
-  console.log(`🔧 Applied ${customRulesCount} custom ESLint rules`);
+  console.error(`🔧 Applied ${customRulesCount} custom ESLint rules`);
 }
 if (customIgnoresCount > 0) {
-  console.log(`🚫 Applied ${customIgnoresCount} custom ignore patterns`);
+  console.error(`🚫 Applied ${customIgnoresCount} custom ignore patterns`);
 }
 
-console.log(`📋 ESLint checking: ${SRC}/**/*.{ts,tsx,js,jsx}`);
+console.error(`📋 ESLint checking: ${SRC}/**/*.{ts,tsx,js,jsx}`);
 
 export default [
   // Global ignores must be in a separate config object

package/package.json

@@ -1,6 +1,6 @@
 {
     "name": "pr-checkmate",
-    "version": "1.21.7",
+    "version": "1.21.9",
     "description": "Automated PR quality checks: linting, formatting, dependency analysis, and spellcheck",
     "keywords": [
         "github-actions",
@@ -23,7 +23,6 @@
         "eslint.config.mjs",
         ".eslintrc.js",
         ".prettierrc",
-        ".eslintignore",
         "cspell.json",
         "src/config/pr-checkmate-workflow.yml",
         ".markdownlint.json",
@@ -67,10 +66,10 @@
         "@cspell/dict-he": "^4.0.2",
         "@cspell/dict-ru_ru": "^2.2.1",
         "@cspell/dict-uk-ua": "^4.0.0",
+        "@types/node": "^25.9.4",
         "@typescript-eslint/eslint-plugin": "^8.47.0",
         "@typescript-eslint/parser": "^8.47.0",
         "cspell": "^9.3.2",
-        "dotenv": "^17.2.3",
         "eslint": "^9.26.0",
         "eslint-config-prettier": "^9.1.2",
         "eslint-plugin-import": "^2.29.0",

package/src/config/.eslintrc.js

@@ -21,7 +21,7 @@ function loadUserConfig() {
   if (fs.existsSync(configPath)) {
     try {
       const config = JSON.parse(fs.readFileSync(configPath, 'utf-8'));
-      console.log(`[ESLint]: ✅ Loaded config from: ${configPath}`);
+      console.error(`[ESLint]: ✅ Loaded config from: ${configPath}`);
       return config;
     } catch (err) {
       console.warn(`[ESLint]: ⚠️  Failed to parse ${configPath}:`, err.message);

package/src/config/cspell.json

@@ -2,11 +2,11 @@
   "version": "0.2",
   "language": "en,ru,uk,he,fr,es",
   "import": [
-    "./node_modules/@cspell/dict-ru_ru/cspell-ext.json",
-    "./node_modules/@cspell/dict-uk-ua/cspell-ext.json",
-    "./node_modules/@cspell/dict-he/cspell-ext.json",
-    "./node_modules/@cspell/dict-fr-fr/cspell-ext.json",
-    "./node_modules/@cspell/dict-es-es/cspell-ext.json"
+    "@cspell/dict-ru_ru/cspell-ext.json",
+    "@cspell/dict-uk-ua/cspell-ext.json",
+    "@cspell/dict-he/cspell-ext.json",
+    "@cspell/dict-fr-fr/cspell-ext.json",
+    "@cspell/dict-es-es/cspell-ext.json"
   ],
   "words": [
     "ACMR",

package/src/config/eslint.config.mjs

@@ -76,13 +76,13 @@ function loadUserConfig() {
   if (fs.existsSync(configPath)) {
     try {
       const config = JSON.parse(fs.readFileSync(configPath, 'utf-8'));
-      console.log(`[loadUserConfig]: ✅ Loaded user config from: ${configPath}`);
+      console.error(`[loadUserConfig]: ✅ Loaded user config from: ${configPath}`);
       return config;
     } catch (err) {
       console.warn(`[loadUserConfig]: ⚠️ Failed to parse ${configPath}:`, err.message);
     }
   } else {
-    console.log(`[loadUserConfig]: ℹ️ No pr-checkmate.json found, using defaults`);
+    console.error(`[loadUserConfig]: ℹ️ No pr-checkmate.json found, using defaults`);
   }
   
   return { sourcePath: 'src', eslint: {} };
@@ -110,13 +110,13 @@ const customRulesCount = Object.keys(userConfig.eslint?.rules || {}).length;
 const customIgnoresCount = (userConfig.eslint?.ignorePatterns || []).length;
 
 if (customRulesCount > 0) {
-  console.log(`🔧 Applied ${customRulesCount} custom ESLint rules`);
+  console.error(`🔧 Applied ${customRulesCount} custom ESLint rules`);
 }
 if (customIgnoresCount > 0) {
-  console.log(`🚫 Applied ${customIgnoresCount} custom ignore patterns`);
+  console.error(`🚫 Applied ${customIgnoresCount} custom ignore patterns`);
 }
 
-console.log(`📋 ESLint checking: ${SRC}/**/*.{ts,tsx,js,jsx}`);
+console.error(`📋 ESLint checking: ${SRC}/**/*.{ts,tsx,js,jsx}`);
 
 export default [
   // Global ignores must be in a separate config object

package/.eslintignore

@@ -1,72 +0,0 @@
-# Dependencies
-node_modules/
-
-# Build outputs
-dist/
-build/
-out/
-.next/
-.nuxt/
-
-# Test reports & artifacts
-allure-report/
-allure-results/
-reports/
-report/
-test-reports/
-test-report/
-test-output/
-test-results/
-results/
-result/
-coverage/
-.coverage/
-htmlcov/
-
-# Jest
-jest-html-reporters-*/
-jest-stare/
-jest.config.js
-
-# Cypress
-cypress/reports/
-cypress/videos/
-cypress/screenshots/
-
-# Playwright
-playwright-report/
-test-results/
-
-# WebdriverIO
-.wdio/
-wdio-logs/
-
-# Mocha/Mochawesome
-mochawesome-report/
-mochawesome-reports/
-
-# Maven/JUnit
-target/
-
-# Logs
-logs/
-*.log
-npm-debug.log*
-yarn-debug.log*
-
-# Python
-__pycache__/
-.pytest_cache/
-.venv/
-venv/
-
-# Git
-.git/
-
-# Config files
-*.config.js
-*.config.ts
-jest.config.*
-wdio.config.*
-playwright.config.*
-cypress.config.*

package/src/config/.eslintignore

@@ -1,72 +0,0 @@
-# Dependencies
-node_modules/
-
-# Build outputs
-dist/
-build/
-out/
-.next/
-.nuxt/
-
-# Test reports & artifacts
-allure-report/
-allure-results/
-reports/
-report/
-test-reports/
-test-report/
-test-output/
-test-results/
-results/
-result/
-coverage/
-.coverage/
-htmlcov/
-
-# Jest
-jest-html-reporters-*/
-jest-stare/
-jest.config.js
-
-# Cypress
-cypress/reports/
-cypress/videos/
-cypress/screenshots/
-
-# Playwright
-playwright-report/
-test-results/
-
-# WebdriverIO
-.wdio/
-wdio-logs/
-
-# Mocha/Mochawesome
-mochawesome-report/
-mochawesome-reports/
-
-# Maven/JUnit
-target/
-
-# Logs
-logs/
-*.log
-npm-debug.log*
-yarn-debug.log*
-
-# Python
-__pycache__/
-.pytest_cache/
-.venv/
-venv/
-
-# Git
-.git/
-
-# Config files
-*.config.js
-*.config.ts
-jest.config.*
-wdio.config.*
-playwright.config.*
-cypress.config.*