pr-checkmate 3.0.4 → 3.1.0

package/dist/{cli.js → cjs/cli.js}

@@ -1,11 +1,11 @@
 #!/usr/bin/env node
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-const core_1 = require("./core");
-const commands_1 = require("./core/commands");
-const doctor_1 = require("./core/install/doctor");
-const init_1 = require("./init");
-const utils_1 = require("./utils");
+const commands_js_1 = require("./core/commands.js");
+const index_js_1 = require("./core/index.js");
+const doctor_js_1 = require("./core/install/doctor.js");
+const init_js_1 = require("./init.js");
+const index_js_2 = require("./utils/index.js");
 const argv = process.argv.slice(2);
 /**
  * Flags are separated from positional arguments so they compose with every command
@@ -21,13 +21,13 @@ const cmd = args[0];
  * diff and print a green summary.
  */
 function rejectUnknownFlags() {
-    const unknown = flags.filter(flag => !commands_1.FLAGS[flag]);
+    const unknown = flags.filter(flag => !commands_js_1.FLAGS[flag]);
     if (unknown.length === 0)
         return;
-    const known = Object.entries(commands_1.FLAGS)
+    const known = Object.entries(commands_js_1.FLAGS)
         .map(([flag, help]) => `${flag} (${help})`)
         .join(', ');
-    utils_1.logger.error(`[cli]: Unknown flag(s) "${unknown.join('", "')}". Available: ${known}`);
+    index_js_2.logger.error(`[cli]: Unknown flag(s) "${unknown.join('", "')}". Available: ${known}`);
     process.exit(1);
 }
 /**
@@ -38,22 +38,22 @@ function rejectUnknownFlags() {
  */
 function rejectConflictingScope() {
     if (cmd === 'precommit' && flags.includes('--full')) {
-        utils_1.logger.error('[cli]: "precommit --full" is contradictory — precommit reviews the staged changes. Run "pr-checkmate all --full" for a whole-repo review.');
+        index_js_2.logger.error('[cli]: "precommit --full" is contradictory — precommit reviews the staged changes. Run "pr-checkmate all --full" for a whole-repo review.');
         process.exit(1);
     }
     if (cmd === 'init' && flags.length > 0) {
-        utils_1.logger.error(`[cli]: "init" takes no flags, got: ${flags.join(', ')}.`);
+        index_js_2.logger.error(`[cli]: "init" takes no flags, got: ${flags.join(', ')}.`);
         process.exit(1);
     }
     // `--all` belongs to `install` alone. Accepting it elsewhere would look like a
     // scope flag and quietly do nothing, which is the failure mode
     // `rejectUnknownFlags` exists to prevent.
     if (flags.includes('--all') && cmd !== 'install') {
-        utils_1.logger.error('[cli]: "--all" applies only to "install". Did you mean "--full"?');
+        index_js_2.logger.error('[cli]: "--all" applies only to "install". Did you mean "--full"?');
         process.exit(1);
     }
-    if (flags.includes('--full') && commands_1.TOOLING_COMMANDS.includes(cmd ?? '')) {
-        utils_1.logger.error(`[cli]: "${cmd}" manages tooling and reviews nothing, so "--full" has no meaning.`);
+    if (flags.includes('--full') && commands_js_1.TOOLING_COMMANDS.includes(cmd ?? '')) {
+        index_js_2.logger.error(`[cli]: "${cmd}" manages tooling and reviews nothing, so "--full" has no meaning.`);
         process.exit(1);
     }
 }
@@ -68,9 +68,9 @@ const full = flags.includes('--full');
  * added to the list but not to the branch.
  */
 function rejectExtraArgs() {
-    if (!cmd || !commands_1.STANDALONE_COMMANDS.includes(cmd) || args.length <= 1)
+    if (!cmd || !commands_js_1.STANDALONE_COMMANDS.includes(cmd) || args.length <= 1)
         return;
-    utils_1.logger.error(`[cli]: "${cmd}" takes no other arguments, got: ${args.slice(1).join(', ')}. Run them as a separate command.`);
+    index_js_2.logger.error(`[cli]: "${cmd}" takes no other arguments, got: ${args.slice(1).join(', ')}. Run them as a separate command.`);
     process.exit(1);
 }
 void (async () => {
@@ -79,25 +79,25 @@ void (async () => {
         rejectConflictingScope();
         rejectExtraArgs();
         if (cmd === 'init') {
-            await (0, init_1.init)();
+            await (0, init_js_1.init)();
             process.exit(0);
         }
         // Tooling management. These run no checks — they prepare, inspect or clean
         // up what the checks need, so they never touch the diff or the reporter.
         if (cmd === 'install') {
-            const results = await (0, doctor_1.installProfiles)(process.cwd(), flags.includes('--all'));
+            const results = await (0, doctor_js_1.installProfiles)(process.cwd(), flags.includes('--all'));
             const failed = results.filter(r => r.status === 'failed');
             for (const result of failed) {
-                utils_1.logger.error(`[install]: ❌ ${result.profiles.join(', ') || 'tooling'}: ${result.reason}`);
+                index_js_2.logger.error(`[install]: ❌ ${result.profiles.join(', ') || 'tooling'}: ${result.reason}`);
             }
             process.exit(failed.length > 0 ? 1 : 0);
         }
         if (cmd === 'doctor') {
-            await (0, doctor_1.runDoctor)();
+            await (0, doctor_js_1.runDoctor)();
             process.exit(0);
         }
         if (cmd === 'cache-prune') {
-            (0, doctor_1.pruneCache)();
+            (0, doctor_js_1.pruneCache)();
             process.exit(0);
         }
         // Full run: auto-detect the CI platform (GitHub/GitLab/Bitbucket), post the
@@ -105,35 +105,35 @@ void (async () => {
         if (!cmd || cmd === 'all') {
             // Fetch the update notice concurrently (best-effort, never blocks/affects
             // the exit code), but print it LAST — after the summary — so it's noticeable.
-            const noticePromise = (0, utils_1.getUpdateNotice)();
-            const report = await (0, core_1.runChecks)({ reporter: 'auto', write: true, full });
+            const noticePromise = (0, index_js_2.getUpdateNotice)();
+            const report = await (0, index_js_1.runChecks)({ reporter: 'auto', write: true, full });
             const notice = await noticePromise.catch(() => null);
             if (notice) {
-                utils_1.logger.info('');
-                notice.forEach(line => utils_1.logger.info(line));
+                index_js_2.logger.info('');
+                notice.forEach(line => index_js_2.logger.info(line));
             }
             process.exit(report.ok ? 0 : 1);
         }
         // Local pre-commit: check the staged changes (index vs HEAD), print to
         // stdout, never modify files. Exits non-zero on failure to block the commit.
         if (cmd === 'precommit') {
-            const report = await (0, core_1.runChecks)({ staged: true, reporter: 'stdout', write: false });
+            const report = await (0, index_js_1.runChecks)({ staged: true, reporter: 'stdout', write: false });
             process.exit(report.ok ? 0 : 1);
         }
         // Every remaining argument is a check name, so `pr-checkmate lint spellcheck`
         // runs both in one pass. Unknown names abort the whole run — a typo must never
         // shrink the requested check set silently.
-        const unknown = args.filter(arg => !commands_1.COMMAND_TO_CHECK[arg]);
+        const unknown = args.filter(arg => !commands_js_1.COMMAND_TO_CHECK[arg]);
         if (unknown.length > 0) {
-            utils_1.logger.error(`[cli]: Unknown command(s) "${unknown.join('", "')}". Available: ${commands_1.STANDALONE_COMMANDS.join(', ')}, ${Object.keys(commands_1.COMMAND_TO_CHECK).join(', ')}`);
+            index_js_2.logger.error(`[cli]: Unknown command(s) "${unknown.join('", "')}". Available: ${commands_js_1.STANDALONE_COMMANDS.join(', ')}, ${Object.keys(commands_js_1.COMMAND_TO_CHECK).join(', ')}`);
             process.exit(1);
         }
-        const checkNames = [...new Set(args.map(arg => commands_1.COMMAND_TO_CHECK[arg]))];
-        const report = await (0, core_1.runChecks)({ only: checkNames, reporter: 'stdout', write: true, full });
+        const checkNames = [...new Set(args.map(arg => commands_js_1.COMMAND_TO_CHECK[arg]))];
+        const report = await (0, index_js_1.runChecks)({ only: checkNames, reporter: 'stdout', write: true, full });
         process.exit(report.ok ? 0 : 1);
     }
     catch (err) {
-        utils_1.logger.error(`❌ CLI failed: ${err}`);
+        index_js_2.logger.error(`❌ CLI failed: ${err}`);
         process.exit(1);
     }
 })();

package/dist/{config → cjs/config}/index.d.ts

@@ -1,5 +1,5 @@
-export * from './constants';
-export { loadProjectConfig } from '../config/loader';
+export * from './constants.js';
+export { loadProjectConfig } from '../config/loader.js';
 /**
  * The configured source path(s), normalised to a list.
  *

package/dist/{config → cjs/config}/index.js

@@ -25,10 +25,11 @@ exports.getPackageConfigPath = getPackageConfigPath;
 exports.hasLocalConfig = hasLocalConfig;
 const node_fs_1 = __importDefault(require("node:fs"));
 const node_path_1 = __importDefault(require("node:path"));
-const loader_1 = require("../config/loader");
-__exportStar(require("./constants"), exports);
-var loader_2 = require("../config/loader");
-Object.defineProperty(exports, "loadProjectConfig", { enumerable: true, get: function () { return loader_2.loadProjectConfig; } });
+const loader_js_1 = require("../config/loader.js");
+const own_deps_js_1 = require("../utils/own-deps.js");
+__exportStar(require("./constants.js"), exports);
+var loader_js_2 = require("../config/loader.js");
+Object.defineProperty(exports, "loadProjectConfig", { enumerable: true, get: function () { return loader_js_2.loadProjectConfig; } });
 /**
  * The configured source path(s), normalised to a list.
  *
@@ -49,7 +50,7 @@ Object.defineProperty(exports, "loadProjectConfig", { enumerable: true, get: fun
  * defaults. One reader is now the only reader.
  */
 function getSourcePaths(cwd = process.cwd()) {
-    const { sourcePath } = (0, loader_1.loadProjectConfig)(cwd);
+    const { sourcePath } = (0, loader_js_1.loadProjectConfig)(cwd);
     const paths = (Array.isArray(sourcePath) ? sourcePath : [sourcePath]).filter((p) => typeof p === 'string' && p.trim().length > 0);
     return paths.length > 0 ? paths : ['.'];
 }
@@ -65,13 +66,13 @@ function getSourcePath(cwd) {
  * (client `ignoreDirs` in pr-checkmate.json, or the curated default).
  */
 function getIgnoredDirs(cwd) {
-    return (0, loader_1.loadProjectConfig)(cwd).ignoreDirs ?? [];
+    return (0, loader_js_1.loadProjectConfig)(cwd).ignoreDirs ?? [];
 }
 /**
  * Get path to package config files
  */
 function getPackageConfigPath(fileName) {
-    const packageRoot = node_path_1.default.resolve(__dirname, '../..');
+    const packageRoot = (0, own_deps_js_1.findOwnPackageRoot)() ?? node_path_1.default.resolve(__dirname, '../../..');
     return node_path_1.default.join(packageRoot, fileName);
 }
 /**

package/dist/{config → cjs/config}/loader.d.ts

@@ -1,4 +1,4 @@
-import { PRCheckMateConfig } from '../interfaces';
+import { PRCheckMateConfig } from '../interfaces/index.js';
 /**
  * Load project configuration from pr-checkmate.json
  * Falls back to defaults if not found

package/dist/{config → cjs/config}/loader.js

@@ -6,8 +6,8 @@ Object.defineProperty(exports, "__esModule", { value: true });
 exports.loadProjectConfig = loadProjectConfig;
 const node_fs_1 = __importDefault(require("node:fs"));
 const node_path_1 = __importDefault(require("node:path"));
-const utils_1 = require("../utils");
-const constants_1 = require("./constants");
+const index_js_1 = require("../utils/index.js");
+const constants_js_1 = require("./constants.js");
 /**
  * Load project configuration from pr-checkmate.json
  * Falls back to defaults if not found
@@ -21,7 +21,7 @@ function loadProjectConfig(cwd = process.cwd()) {
             return mergeWithDefaults(config);
         }
         catch (err) {
-            utils_1.logger.warn(`[loadProjectConfig]: ⚠️ Failed to parse pr-checkmate.json: ${err}`);
+            index_js_1.logger.warn(`[loadProjectConfig]: ⚠️ Failed to parse pr-checkmate.json: ${err}`);
         }
     }
     return getDefaultConfig();
@@ -103,7 +103,7 @@ function mergeWithDefaults(userConfig) {
 function getDefaultConfig() {
     return {
         sourcePath: '.',
-        ignoreDirs: [...constants_1.IGNORED_DIRS],
+        ignoreDirs: [...constants_js_1.IGNORED_DIRS],
         lint: {
             rules: {
                 'no-console': 'warn',
@@ -163,12 +163,12 @@ function getDefaultConfig() {
             enabled: true,
             minLines: 5,
             minTokens: 50,
-            ignore: constants_1.DUPLICATE_IGNORE_DEFAULTS,
-            formats: constants_1.DUPLICATE_CODE_FORMATS,
+            ignore: constants_js_1.DUPLICATE_IGNORE_DEFAULTS,
+            formats: constants_js_1.DUPLICATE_CODE_FORMATS,
         },
         dependency: { enabled: true, ignore: [] },
         outdatedDeps: { enabled: true, ignore: [] },
-        deadCode: { enabled: true, ignoreFiles: constants_1.DEAD_CODE_IGNORE_DEFAULTS },
+        deadCode: { enabled: true, ignoreFiles: constants_js_1.DEAD_CODE_IGNORE_DEFAULTS },
         commitlint: {
             enabled: true,
             types: [
@@ -190,7 +190,7 @@ function getDefaultConfig() {
             ignores: ['^Release\\b', '^chore\\(release\\):'],
         },
         licenseCheck: {
-            allowPackages: [...constants_1.DEFAULT_ALLOW_PACKAGES],
+            allowPackages: [...constants_js_1.DEFAULT_ALLOW_PACKAGES],
             allowLicenses: [],
         },
     };

package/dist/{core → cjs/core}/checks/dependencies/banned-imports.d.ts

@@ -1,2 +1,2 @@
-import { Check } from '../../types';
+import { Check } from '../../types.js';
 export declare const bannedImportsCheck: Check;

package/dist/{core → cjs/core}/checks/dependencies/banned-imports.js

@@ -1,9 +1,9 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.bannedImportsCheck = void 0;
-const utils_1 = require("../../../utils");
-const types_1 = require("../../types");
-const findings_1 = require("../findings");
+const index_js_1 = require("../../../utils/index.js");
+const types_js_1 = require("../../types.js");
+const findings_js_1 = require("../findings.js");
 const PREFIX = 'Banned Imports';
 const escapeRe = (s) => s.replace(/[.*+?^${}()|[\]\\]/g, '\\$&');
 /**
@@ -35,11 +35,11 @@ exports.bannedImportsCheck = {
     async run(ctx) {
         const bans = compileBans(ctx);
         if (bans.length === 0)
-            return (0, types_1.pass)('no banned imports configured');
+            return (0, types_js_1.pass)('no banned imports configured');
         try {
             const errors = {};
             const warnings = {};
-            const reviewed = await (0, findings_1.reviewLines)(ctx, ['*'], stdout => {
+            const reviewed = await (0, findings_js_1.reviewLines)(ctx, ['*'], stdout => {
                 var _a;
                 for (const raw of stdout.split('\n')) {
                     if (!raw.startsWith('+') || raw.startsWith('+++'))
@@ -55,19 +55,19 @@ exports.bannedImportsCheck = {
             });
             // An unreadable file list is not "no banned imports" (ticket 072).
             if (!reviewed)
-                return (0, types_1.skip)('git unavailable');
+                return (0, types_js_1.skip)('git unavailable');
             // A ban configured as "error" blocks the run, regardless of phase — that
             // is the default `failOn`, and the client can still relax it per repo.
-            return (0, findings_1.reportSeverityBuckets)(errors, warnings, {
+            return (0, findings_js_1.reportSeverityBuckets)(errors, warnings, {
                 prefix: PREFIX,
                 errorSummary: n => `${n} banned (error)`,
                 warningSummary: n => `${n} banned (warn)`,
-                ...(0, findings_1.clientFindingOptions)(ctx),
+                ...(0, findings_js_1.clientFindingOptions)(ctx),
             });
         }
         catch (err) {
-            utils_1.logger.warn(`[Banned Imports]: ⚠️ Could not analyze diff\n${err}`);
-            return (0, types_1.skip)('diff unavailable');
+            index_js_1.logger.warn(`[Banned Imports]: ⚠️ Could not analyze diff\n${err}`);
+            return (0, types_js_1.skip)('diff unavailable');
         }
     },
 };

package/dist/{core → cjs/core}/checks/dependencies/circular-deps.d.ts

@@ -1,2 +1,2 @@
-import { Check } from '../../types';
+import { Check } from '../../types.js';
 export declare const circularDepsCheck: Check;

package/dist/{core → cjs/core}/checks/dependencies/circular-deps.js

@@ -6,13 +6,13 @@ Object.defineProperty(exports, "__esModule", { value: true });
 exports.circularDepsCheck = void 0;
 const node_fs_1 = __importDefault(require("node:fs"));
 const node_path_1 = __importDefault(require("node:path"));
-const config_1 = require("../../../config");
-const utils_1 = require("../../../utils");
-const execa_1 = require("../../../utils/execa");
-const reuse_1 = require("../../install/reuse");
-const targets_1 = require("../../targets");
-const types_1 = require("../../types");
-const findings_1 = require("../findings");
+const index_js_1 = require("../../../config/index.js");
+const execa_js_1 = require("../../../utils/execa.js");
+const index_js_2 = require("../../../utils/index.js");
+const reuse_js_1 = require("../../install/reuse.js");
+const targets_js_1 = require("../../targets.js");
+const types_js_1 = require("../../types.js");
+const findings_js_1 = require("../findings.js");
 /**
  * Cap for the analysis. dpdm builds the whole module graph, which on a large repo
  * is the slowest part of a run — an uncapped analysis looks like a hung commit.
@@ -40,9 +40,9 @@ const SOURCE_GLOBS = ['*.ts', '*.tsx', '*.js', '*.jsx'];
 function resolveDpdm(ctx) {
     // No configuration of its own — dpdm reads the module graph — so the version
     // check is the right question here and `clientOwnsConfig` stays off.
-    for (const options of [{ paths: (0, reuse_1.clientToolPaths)('dpdm', ctx) }, undefined]) {
+    for (const options of [{ paths: (0, reuse_js_1.clientToolPaths)('dpdm', ctx) }, undefined]) {
         try {
-            return (0, utils_1.resolvePackageBin)('dpdm', 'lib/bin/dpdm.js', options);
+            return (0, index_js_2.resolvePackageBin)('dpdm', 'lib/bin/dpdm.js', options);
         }
         catch {
             // Try the next location; both failing is a skip, handled by the caller.
@@ -61,7 +61,7 @@ function toFileArgs(files, sourcePaths) {
         return files;
     const roots = sourcePaths.length > 0 ? sourcePaths : ['.'];
     const globs = roots.flatMap(root => SOURCE_GLOBS.map(ext => `${root.replace(/\/+$/, '')}/**/${ext}`));
-    utils_1.logger.info(`[Circular Deps]: ${files.length} files exceed the argument limit — analyzing via globs (${globs.join(', ')})`);
+    index_js_2.logger.info(`[Circular Deps]: ${files.length} files exceed the argument limit — analyzing via globs (${globs.join(', ')})`);
     return globs;
 }
 /** Read dpdm's report file; null when it is absent or unparseable. */
@@ -83,26 +83,26 @@ exports.circularDepsCheck = {
         return ctx.languages.includes('typescript') || ctx.languages.includes('javascript');
     },
     async run(ctx) {
-        const allFiles = await (0, targets_1.listTrackedFiles)(ctx, SOURCE_GLOBS, (0, config_1.getSourcePaths)(ctx.cwd));
+        const allFiles = await (0, targets_js_1.listTrackedFiles)(ctx, SOURCE_GLOBS, (0, index_js_1.getSourcePaths)(ctx.cwd));
         // A cycle detector needs the WHOLE graph, so an unreadable file list is the
         // one case where passing would be worst: half a graph produces confident
         // nonsense, and no graph reported as `pass` says the repository is acyclic
         // when nobody looked (ticket 072).
         if (allFiles === null)
-            return (0, types_1.skip)('git unavailable');
+            return (0, types_js_1.skip)('git unavailable');
         if (allFiles.length === 0)
-            return (0, types_1.pass)();
+            return (0, types_js_1.pass)();
         // Files the client exempted (generated code, vendored bundles) are dropped
         // before analysis — and again from the cycles below, since the graph can reach
         // an ignored file by following imports from one that is analyzed.
         const ignore = ctx.config.circularDeps?.ignore ?? [];
-        const files = ignore.length > 0 ? allFiles.filter(f => !(0, utils_1.matchesAnyGlob)(f, ignore)) : allFiles;
+        const files = ignore.length > 0 ? allFiles.filter(f => !(0, index_js_2.matchesAnyGlob)(f, ignore)) : allFiles;
         if (files.length === 0)
-            return (0, types_1.skip)('all files ignored');
+            return (0, types_js_1.skip)('all files ignored');
         const dpdmBin = resolveDpdm(ctx);
         if (!dpdmBin) {
-            utils_1.logger.warn('[Circular Deps]: ⚠️ dpdm could not be resolved — skipping');
-            return (0, types_1.skip)('dpdm unavailable');
+            index_js_2.logger.warn('[Circular Deps]: ⚠️ dpdm could not be resolved — skipping');
+            return (0, types_js_1.skip)('dpdm unavailable');
         }
         const timeout = ctx.config.circularDeps?.timeoutMs ?? DEFAULT_TIMEOUT_MS;
         const reportPath = node_path_1.default.join(ctx.cwd, '.dpdm.temp.json');
@@ -114,7 +114,7 @@ exports.circularDepsCheck = {
             // including one built solely out of a cycle. `--exit-code circular:1` gives
             // the same answer independently: dpdm otherwise exits 0 even when it finds
             // cycles, so the exit code alone cannot tell a clean repo from a broken run.
-            const result = await (0, execa_1.execa)(process.execPath, [
+            const result = await (0, execa_js_1.execa)(process.execPath, [
                 dpdmBin,
                 '--no-warning',
                 '--no-tree',
@@ -123,11 +123,11 @@ exports.circularDepsCheck = {
                 'circular:1',
                 '-o',
                 reportPath,
-                ...toFileArgs(files, (0, config_1.getSourcePaths)(ctx.cwd)),
+                ...toFileArgs(files, (0, index_js_1.getSourcePaths)(ctx.cwd)),
             ], { cwd: ctx.cwd, reject: false, timeout });
             if (result.timedOut) {
-                utils_1.logger.warn(`[Circular Deps]: ⚠️ dpdm timed out after ${timeout}ms — skipping`);
-                return (0, types_1.skip)('dpdm timed out');
+                index_js_2.logger.warn(`[Circular Deps]: ⚠️ dpdm timed out after ${timeout}ms — skipping`);
+                return (0, types_js_1.skip)('dpdm timed out');
             }
             const report = readReport(reportPath);
             // No report means dpdm never got far enough to write one (a tsconfig it
@@ -136,18 +136,18 @@ exports.circularDepsCheck = {
             // blocks a PR that may have no cycle at all.
             if (!report) {
                 const output = [result.stdout, result.stderr].filter(Boolean).join('\n').trim();
-                utils_1.logger.warn(`[Circular Deps]: ⚠️ dpdm wrote no report (exit ${result.exitCode ?? 'killed'})${output ? `:\n${output}` : ''}`);
-                return (0, types_1.skip)(`dpdm failed to run (exit ${result.exitCode ?? 'killed'})`);
+                index_js_2.logger.warn(`[Circular Deps]: ⚠️ dpdm wrote no report (exit ${result.exitCode ?? 'killed'})${output ? `:\n${output}` : ''}`);
+                return (0, types_js_1.skip)(`dpdm failed to run (exit ${result.exitCode ?? 'killed'})`);
             }
-            const cycles = (report.circulars ?? []).filter(cycle => ignore.length === 0 || !cycle.some(file => (0, utils_1.matchesAnyGlob)(file, ignore)));
+            const cycles = (report.circulars ?? []).filter(cycle => ignore.length === 0 || !cycle.some(file => (0, index_js_2.matchesAnyGlob)(file, ignore)));
             if (cycles.length === 0)
-                return (0, types_1.pass)();
+                return (0, types_js_1.pass)();
             // Advisory by default. This check reported nothing for its whole existence
             // (see the note above), so switching it on turns every long-standing cycle
             // in every client repo into a finding at once — barrel files alone account
             // for most of them. Warning first lets a repo see its cycles before they
             // gate anything; promote with `circularDeps.severity: "error"`.
-            const sev = (0, findings_1.severityEmitter)(ctx.config.circularDeps?.severity, 'warn');
+            const sev = (0, findings_js_1.severityEmitter)(ctx.config.circularDeps?.severity, 'warn');
             sev.log(`[Circular Deps]: ${sev.icon} ${cycles.length} circular dependency(ies):`);
             cycles.slice(0, 10).forEach((cycle, i) => sev.log(`  ${i + 1}) ${cycle.join(' -> ')}`));
             if (cycles.length > 10)
@@ -155,7 +155,7 @@ exports.circularDepsCheck = {
             return sev.emit(`${cycles.length} circular dependency(ies) found`);
         }
         finally {
-            (0, utils_1.cleanupTempFile)(reportPath);
+            (0, index_js_2.cleanupTempFile)(reportPath);
         }
     },
 };

package/dist/{core → cjs/core}/checks/dependencies/dependency-check.d.ts

@@ -1,4 +1,4 @@
-import { Check } from '../../types';
+import { Check } from '../../types.js';
 /** One entry of knip's JSON reporter — a file plus the issues found for it. */
 interface KnipIssue {
     file: string;

package/dist/{core → cjs/core}/checks/dependencies/dependency-check.js

@@ -8,10 +8,10 @@ exports.toKnipIgnorePattern = toKnipIgnorePattern;
 exports.parseKnipReport = parseKnipReport;
 const node_fs_1 = __importDefault(require("node:fs"));
 const node_path_1 = __importDefault(require("node:path"));
-const config_1 = require("../../../config");
-const utils_1 = require("../../../utils");
-const execa_1 = require("../../../utils/execa");
-const types_1 = require("../../types");
+const index_js_1 = require("../../../config/index.js");
+const execa_js_1 = require("../../../utils/execa.js");
+const index_js_2 = require("../../../utils/index.js");
+const types_js_1 = require("../../types.js");
 /**
  * Config files knip discovers on its own. When a client ships one, it is the source
  * of truth and pr-checkmate passes no config of its own — the same rule spellcheck
@@ -106,27 +106,27 @@ exports.dependencyCheck = {
     applies(ctx) {
         if (ctx.config.dependency?.enabled === false)
             return false;
-        return (0, types_1.isNpmProject)(ctx);
+        return (0, types_js_1.isNpmProject)(ctx);
     },
     async run(ctx) {
         // Resolve the bundled knip binary and run it via the current node — never
         // shell out to `npx`, which fails (exit 127) when knip isn't on the path.
         let knipBin;
         try {
-            knipBin = (0, utils_1.resolvePackageBin)('knip', 'bin/knip.js');
+            knipBin = (0, index_js_2.resolvePackageBin)('knip', 'bin/knip.js');
         }
         catch {
-            return (0, types_1.skip)('knip unavailable');
+            return (0, types_js_1.skip)('knip unavailable');
         }
         // Dependency names to skip, configured in pr-checkmate.json. knip takes these
         // from a config file only, so they go into a temp one — but a client's own knip
         // config wins outright, exactly as it does for cspell.
         const ignore = ctx.config.dependency?.ignore ?? [];
-        const clientOwnsConfig = (0, config_1.hasLocalConfig)(KNIP_CONFIG_FILES, ctx.cwd) || hasPackageJsonConfig(ctx.cwd);
+        const clientOwnsConfig = (0, index_js_1.hasLocalConfig)(KNIP_CONFIG_FILES, ctx.cwd) || hasPackageJsonConfig(ctx.cwd);
         let tempConfigPath = null;
         if (ignore.length > 0 && clientOwnsConfig) {
             // Say so out loud: a silently ignored `ignore` list looks like a broken check.
-            utils_1.logger.info(`[Dependencies]: ℹ️ this repo has its own knip config, so dependency.ignore (${ignore.join(', ')}) is not applied — add those names to knip's ignoreDependencies instead.`);
+            index_js_2.logger.info(`[Dependencies]: ℹ️ this repo has its own knip config, so dependency.ignore (${ignore.join(', ')}) is not applied — add those names to knip's ignoreDependencies instead.`);
         }
         if (ignore.length > 0 && !clientOwnsConfig) {
             tempConfigPath = node_path_1.default.join(ctx.cwd, '.knip.temp.json');
@@ -151,7 +151,7 @@ exports.dependencyCheck = {
         try {
             // reject:false — knip can still exit non-zero (e.g. config hints) while
             // writing a perfectly good report to stdout.
-            const { stdout } = await (0, execa_1.execa)(process.execPath, args, {
+            const { stdout } = await (0, execa_js_1.execa)(process.execPath, args, {
                 cwd: ctx.cwd,
                 reject: false,
             });
@@ -160,23 +160,23 @@ exports.dependencyCheck = {
             // fail the client's PR. Never fail here: a check that blocks a PR because a
             // tool misbehaved reports our problem as the client's.
             if (!result)
-                return (0, types_1.skip)('knip produced no report');
+                return (0, types_js_1.skip)('knip produced no report');
             const issues = result.issues ?? [];
             const unused = collectNames(issues, 'dependencies');
             const missing = collectNames(issues, 'unlisted');
             if (missing.length > 0) {
-                missing.forEach(dep => utils_1.logger.error(`[Dependencies]: ❌ missing ${dep} (used in: ${filesUsing(issues, dep).join(', ')})`));
-                return (0, types_1.fail)(`missing: ${missing.join(', ')}`);
+                missing.forEach(dep => index_js_2.logger.error(`[Dependencies]: ❌ missing ${dep} (used in: ${filesUsing(issues, dep).join(', ')})`));
+                return (0, types_js_1.fail)(`missing: ${missing.join(', ')}`);
             }
             if (unused.length > 0) {
-                unused.forEach(dep => utils_1.logger.warn(`[Dependencies]: ⚠️ unused ${dep}`));
-                return (0, types_1.warn)(`${unused.length} unused dependency(ies)`);
+                unused.forEach(dep => index_js_2.logger.warn(`[Dependencies]: ⚠️ unused ${dep}`));
+                return (0, types_js_1.warn)(`${unused.length} unused dependency(ies)`);
             }
-            return (0, types_1.pass)();
+            return (0, types_js_1.pass)();
         }
         finally {
             if (tempConfigPath)
-                (0, utils_1.cleanupTempFile)(tempConfigPath);
+                (0, index_js_2.cleanupTempFile)(tempConfigPath);
         }
     },
 };

package/dist/{core → cjs/core}/checks/dependencies/grype-scan.d.ts

@@ -1,4 +1,4 @@
-import { Check } from '../../types';
+import { Check } from '../../types.js';
 /**
  * Dependency vulnerability scan via Anchore's `grype`. Non-blocking and ON by
  * default — runs unless `grypeScan.enabled` is explicitly `false`. grype is a