pr-checkmate 3.0.4 → 3.1.0

package/dist/{core → cjs/core}/targets.js

@@ -10,11 +10,11 @@ exports.resolveTargets = resolveTargets;
 exports.listTrackedFiles = listTrackedFiles;
 const node_fs_1 = __importDefault(require("node:fs"));
 const node_path_1 = __importDefault(require("node:path"));
-const config_1 = require("../config");
-const loader_1 = require("../config/loader");
-const utils_1 = require("../utils");
-const execa_1 = require("../utils/execa");
-const types_1 = require("./types");
+const index_js_1 = require("../config/index.js");
+const loader_js_1 = require("../config/loader.js");
+const execa_js_1 = require("../utils/execa.js");
+const index_js_2 = require("../utils/index.js");
+const types_js_1 = require("./types.js");
 /**
  * Drop files that live under any excluded directory (client `ignoreDirs` or the
  * curated default), matched on any path segment so nesting depth doesn't matter.
@@ -44,21 +44,21 @@ const types_1 = require("./types");
 function excludeClientPaths(files, cwd) {
     let patterns = [];
     try {
-        patterns = (0, loader_1.loadProjectConfig)(cwd).excludePaths ?? [];
+        patterns = (0, loader_js_1.loadProjectConfig)(cwd).excludePaths ?? [];
     }
     catch {
         // A config that cannot be read is the loader's problem to report, not a
         // reason to scan nothing.
     }
-    return patterns.length > 0 ? files.filter(f => !(0, utils_1.matchesAnyGlob)(f, patterns)) : files;
+    return patterns.length > 0 ? files.filter(f => !(0, index_js_2.matchesAnyGlob)(f, patterns)) : files;
 }
 function excludeIgnoredDirs(files, cwd, keepDirs = []) {
-    const ignored = new Set((0, config_1.getIgnoredDirs)(cwd));
+    const ignored = new Set((0, index_js_1.getIgnoredDirs)(cwd));
     for (const dir of keepDirs)
         ignored.delete(dir);
     if (ignored.size === 0)
         return files;
-    return files.filter(f => !(0, utils_1.isUnderIgnoredDir)(f, ignored));
+    return files.filter(f => !(0, index_js_2.isUnderIgnoredDir)(f, ignored));
 }
 /**
  * Lists the files a language check should operate on, matched by pathspec `globs`
@@ -99,9 +99,9 @@ async function resolveTargetFiles(ctx, globs, opts = {}) {
             //
             // A pathspec that matches nothing still exits 0, so the ordinary empty
             // result cannot be swallowed here.
-            const result = await (0, execa_1.execa)('git', args, { cwd: ctx.cwd, reject: false });
+            const result = await (0, execa_js_1.execa)('git', args, { cwd: ctx.cwd, reject: false });
             if (result.exitCode !== 0) {
-                utils_1.logger.warn(`[targets]: ⚠️ git could not list files (exit ${result.exitCode})`);
+                index_js_2.logger.warn(`[targets]: ⚠️ git could not list files (exit ${result.exitCode})`);
                 return null;
             }
             stdout = result.stdout;
@@ -123,13 +123,13 @@ async function resolveTargetFiles(ctx, globs, opts = {}) {
         // hide a real difference, so it moves to `debug` instead of disappearing.
         const line = `[targets]: ${ctx.baseSha ? '📂 Delta' : 'Full scan'}: ${files.length} file(s) for ${globs.join(', ')}`;
         if (fromCache)
-            utils_1.logger.debug(`${line} (cached)`);
+            index_js_2.logger.debug(`${line} (cached)`);
         else
-            utils_1.logger.info(line);
+            index_js_2.logger.info(line);
         return files;
     }
     catch (err) {
-        utils_1.logger.warn(`[targets]: ⚠️ Could not list files\n${err}`);
+        index_js_2.logger.warn(`[targets]: ⚠️ Could not list files\n${err}`);
         return null;
     }
 }
@@ -168,16 +168,16 @@ async function resolveTargets(ctx, globs, opts) {
     // Read once, and only when something will use it. A whole-tree walk is always
     // scoped — that is what `listTrackedFiles` promises its callers — while a delta
     // walk is scoped only on request.
-    const sourcePaths = opts.wholeTree || opts.scoped ? (0, config_1.getSourcePaths)(ctx.cwd) : [];
+    const sourcePaths = opts.wholeTree || opts.scoped ? (0, index_js_1.getSourcePaths)(ctx.cwd) : [];
     const files = opts.wholeTree
         ? await listTrackedFiles(ctx, globs, sourcePaths, listOpts)
         : await resolveTargetFiles(ctx, globs, listOpts);
     if (files === null)
-        return (0, types_1.skip)('git unavailable');
+        return (0, types_js_1.skip)('git unavailable');
     const scoped = opts.wholeTree ? files : scopeToSourcePaths(files, sourcePaths);
     if (scoped.length > 0)
         return scoped;
-    return 'pass' in opts.onEmpty ? (0, types_1.pass)(opts.onEmpty.pass) : (0, types_1.skip)(opts.onEmpty.skip);
+    return 'pass' in opts.onEmpty ? (0, types_js_1.pass)(opts.onEmpty.pass) : (0, types_js_1.skip)(opts.onEmpty.skip);
 }
 /**
  * List ALL tracked files matching `globs` (never delta), scoped to
@@ -205,9 +205,9 @@ async function resolveTargets(ctx, globs, opts) {
  */
 async function listTrackedFiles(ctx, globs, sourcePaths, opts = {}) {
     try {
-        const result = await (0, execa_1.execa)('git', ['ls-files', ...globs], { cwd: ctx.cwd, reject: false });
+        const result = await (0, execa_js_1.execa)('git', ['ls-files', ...globs], { cwd: ctx.cwd, reject: false });
         if (result.exitCode !== 0) {
-            utils_1.logger.warn(`[targets]: ⚠️ git could not list tracked files (exit ${result.exitCode})`);
+            index_js_2.logger.warn(`[targets]: ⚠️ git could not list tracked files (exit ${result.exitCode})`);
             return null;
         }
         const files = excludeClientPaths(excludeIgnoredDirs(result.stdout
@@ -217,7 +217,7 @@ async function listTrackedFiles(ctx, globs, sourcePaths, opts = {}) {
         return scopeToSourcePaths(files, sourcePaths);
     }
     catch (err) {
-        utils_1.logger.warn(`[targets]: ⚠️ Could not list tracked files\n${err}`);
+        index_js_2.logger.warn(`[targets]: ⚠️ Could not list tracked files\n${err}`);
         return null;
     }
 }

package/dist/{core → cjs/core}/types.d.ts

@@ -1,6 +1,6 @@
-import type { PRCheckMateConfig, ReporterConfig } from '../interfaces';
-import type { Language, LanguageUsage } from '../utils/detect-language';
-import type { CheckResult, CheckStatus } from '../utils/result-collector';
+import type { PRCheckMateConfig, ReporterConfig } from '../interfaces/index.js';
+import type { Language, LanguageUsage } from '../utils/detect-language.js';
+import type { CheckResult, CheckStatus } from '../utils/result-collector.js';
 export type { CheckResult, CheckStatus, Language, LanguageUsage };
 /**
  * Execution phases, run strictly in order. Within a phase checks run in parallel.

package/dist/cjs/index.d.ts

@@ -0,0 +1,12 @@
+/**
+ * PR CheckMate — automated PR quality checks.
+ *
+ * @module pr-checkmate
+ */
+export { runChecks, buildContext, REGISTRY } from './core/index.js';
+export { pass, warn, fail, skip, defineCheck } from './core/index.js';
+export type { Check, CheckContext, CheckOutcome, CheckReport, CheckResult, CheckStatus, Language, Phase, ReporterFn, ReporterKind, RunOptions, } from './core/index.js';
+export { getSourcePath, getSourcePaths, getIgnoredDirs, getPackageConfigPath, hasLocalConfig, } from './config/index.js';
+export type { PRCheckMateConfig } from './interfaces/index.js';
+export { Logger } from './utils/logger.js';
+export type { LogLevel } from './utils/logger.js';

package/dist/{index.js → cjs/index.js}

@@ -8,25 +8,25 @@ Object.defineProperty(exports, "__esModule", { value: true });
 exports.Logger = exports.hasLocalConfig = exports.getPackageConfigPath = exports.getIgnoredDirs = exports.getSourcePaths = exports.getSourcePath = exports.defineCheck = exports.skip = exports.fail = exports.warn = exports.pass = exports.REGISTRY = exports.buildContext = exports.runChecks = void 0;
 // Primary programmatic API: run checks and receive a structured report.
 // Never throws for violations, never calls process.exit — the caller decides.
-var core_1 = require("./core");
-Object.defineProperty(exports, "runChecks", { enumerable: true, get: function () { return core_1.runChecks; } });
-Object.defineProperty(exports, "buildContext", { enumerable: true, get: function () { return core_1.buildContext; } });
-Object.defineProperty(exports, "REGISTRY", { enumerable: true, get: function () { return core_1.REGISTRY; } });
+var index_js_1 = require("./core/index.js");
+Object.defineProperty(exports, "runChecks", { enumerable: true, get: function () { return index_js_1.runChecks; } });
+Object.defineProperty(exports, "buildContext", { enumerable: true, get: function () { return index_js_1.buildContext; } });
+Object.defineProperty(exports, "REGISTRY", { enumerable: true, get: function () { return index_js_1.REGISTRY; } });
 // Authoring helpers for consumers writing their own checks (plugins).
-var core_2 = require("./core");
-Object.defineProperty(exports, "pass", { enumerable: true, get: function () { return core_2.pass; } });
-Object.defineProperty(exports, "warn", { enumerable: true, get: function () { return core_2.warn; } });
-Object.defineProperty(exports, "fail", { enumerable: true, get: function () { return core_2.fail; } });
-Object.defineProperty(exports, "skip", { enumerable: true, get: function () { return core_2.skip; } });
-Object.defineProperty(exports, "defineCheck", { enumerable: true, get: function () { return core_2.defineCheck; } });
+var index_js_2 = require("./core/index.js");
+Object.defineProperty(exports, "pass", { enumerable: true, get: function () { return index_js_2.pass; } });
+Object.defineProperty(exports, "warn", { enumerable: true, get: function () { return index_js_2.warn; } });
+Object.defineProperty(exports, "fail", { enumerable: true, get: function () { return index_js_2.fail; } });
+Object.defineProperty(exports, "skip", { enumerable: true, get: function () { return index_js_2.skip; } });
+Object.defineProperty(exports, "defineCheck", { enumerable: true, get: function () { return index_js_2.defineCheck; } });
 // Config helpers for consumers embedding pr-checkmate.
-var config_1 = require("./config");
-Object.defineProperty(exports, "getSourcePath", { enumerable: true, get: function () { return config_1.getSourcePath; } });
-Object.defineProperty(exports, "getSourcePaths", { enumerable: true, get: function () { return config_1.getSourcePaths; } });
-Object.defineProperty(exports, "getIgnoredDirs", { enumerable: true, get: function () { return config_1.getIgnoredDirs; } });
-Object.defineProperty(exports, "getPackageConfigPath", { enumerable: true, get: function () { return config_1.getPackageConfigPath; } });
-Object.defineProperty(exports, "hasLocalConfig", { enumerable: true, get: function () { return config_1.hasLocalConfig; } });
+var index_js_3 = require("./config/index.js");
+Object.defineProperty(exports, "getSourcePath", { enumerable: true, get: function () { return index_js_3.getSourcePath; } });
+Object.defineProperty(exports, "getSourcePaths", { enumerable: true, get: function () { return index_js_3.getSourcePaths; } });
+Object.defineProperty(exports, "getIgnoredDirs", { enumerable: true, get: function () { return index_js_3.getIgnoredDirs; } });
+Object.defineProperty(exports, "getPackageConfigPath", { enumerable: true, get: function () { return index_js_3.getPackageConfigPath; } });
+Object.defineProperty(exports, "hasLocalConfig", { enumerable: true, get: function () { return index_js_3.hasLocalConfig; } });
 // Standalone logging utility. Consumers instantiate their own Logger so their
 // log level and buffer stay independent from pr-checkmate's internal logger.
-var logger_1 = require("./utils/logger");
-Object.defineProperty(exports, "Logger", { enumerable: true, get: function () { return logger_1.Logger; } });
+var logger_js_1 = require("./utils/logger.js");
+Object.defineProperty(exports, "Logger", { enumerable: true, get: function () { return logger_js_1.Logger; } });

package/dist/{init.js → cjs/init.js}

@@ -10,9 +10,9 @@ exports.init = init;
 const fs_1 = __importDefault(require("fs"));
 const path_1 = __importDefault(require("path"));
 const inquirer_1 = __importDefault(require("inquirer"));
-const config_1 = require("./config");
-const findings_1 = require("./core/checks/findings");
-const utils_1 = require("./utils");
+const index_js_1 = require("./config/index.js");
+const findings_js_1 = require("./core/checks/findings.js");
+const index_js_2 = require("./utils/index.js");
 const CONFIG_FILE = path_1.default.resolve(process.cwd(), 'pr-checkmate.json');
 /**
  * Points editors at the bundled JSON schema. With the generated config reduced
@@ -92,40 +92,52 @@ const ADVISORY_FLAG = '        continue-on-error: true';
  * were just asked about.
  */
 function setupWorkflow(root, mode) {
-    // Which template a repository gets is decided by whether it actually installs
-    // us. Both are correct for their own case and wrong for the other:
+    // We can't know for sure whether a repo will end up depending on the npm
+    // package by the time this workflow first runs (that's a decision the client
+    // makes after `init`, e.g. by running `npm install pr-checkmate`), so instead
+    // of guessing we scaffold both variants and let them keep the one that
+    // matches, deleting the other:
     //
-    //  - a dependency means `npx pr-checkmate` runs the copy the lockfile pins,
-    //    which is fast and reproducible;
-    //  - no dependency means `npx` resolves to the newest release and downloads it
-    //    on every job — 547 MB, about five minutes, and a major version can land
-    //    without anyone changing a line.
-    //
-    // Asking the client to notice that difference in a comment is asking them to
-    // read a file they scaffolded precisely so they would not have to.
-    const source = installsPackage(root)
-        ? 'pr-checkmate-workflow.yml'
-        : 'pr-checkmate-workflow-docker.yml';
-    const workflowSource = path_1.default.join(__dirname, 'config', source);
+    //  - the npm variant: `npx pr-checkmate` runs the copy the lockfile pins,
+    //    which is fast and reproducible, but assumes the install happens;
+    //  - the docker variant: works with no install, but `npx` (nothing to run
+    //    locally) resolves to the newest release and downloads it on every job —
+    //    547 MB, about five minutes, and a major version can land without anyone
+    //    changing a line.
+    const candidates = [
+        { source: 'pr-checkmate-workflow.yml', dest: 'pr-checkmate.yml', label: 'npm package' },
+        {
+            source: 'pr-checkmate-workflow-docker.yml',
+            dest: 'pr-checkmate-docker.yml',
+            label: 'Docker image',
+        },
+    ];
     const workflowDir = path_1.default.join(root, '.github', 'workflows');
-    const workflowDest = path_1.default.join(workflowDir, 'pr-checkmate.yml');
-    if (!fs_1.default.existsSync(workflowSource)) {
-        utils_1.logger.warn('[init]: ⚠️ Workflow template not found, skipping workflow setup');
-        return;
-    }
-    if (fs_1.default.existsSync(workflowDest)) {
-        utils_1.logger.info('[init]: ⏭️ .github/workflows/pr-checkmate.yml already exists — left untouched');
-        return;
-    }
-    if (!fs_1.default.existsSync(workflowDir)) {
-        fs_1.default.mkdirSync(workflowDir, { recursive: true });
+    const recommended = installsPackage(root) ? candidates[0] : candidates[1];
+    for (const { source, dest, label } of candidates) {
+        const workflowSource = path_1.default.join(__dirname, 'config', source);
+        const workflowDest = path_1.default.join(workflowDir, dest);
+        if (!fs_1.default.existsSync(workflowSource)) {
+            index_js_2.logger.warn(`[init]: ⚠️ Workflow template ${source} not found, skipping`);
+            continue;
+        }
+        if (fs_1.default.existsSync(workflowDest)) {
+            index_js_2.logger.info(`[init]: ⏭️ .github/workflows/${dest} already exists — left untouched`);
+            continue;
+        }
+        if (!fs_1.default.existsSync(workflowDir)) {
+            fs_1.default.mkdirSync(workflowDir, { recursive: true });
+        }
+        const template = fs_1.default.readFileSync(workflowSource, 'utf-8').replace(/__IMAGE_TAG__/g, imageTag());
+        const workflow = mode === 'advisory'
+            ? template.replace(RUN_STEP_ANCHOR, `${ADVISORY_NOTICE}\n${RUN_STEP_ANCHOR}\n${ADVISORY_FLAG}`)
+            : template;
+        fs_1.default.writeFileSync(workflowDest, workflow);
+        const recommendedNote = dest === recommended.dest ? ', recommended for this repo' : '';
+        index_js_2.logger.info(`[init]: ✅ Created .github/workflows/${dest} (${label}${recommendedNote})`);
     }
-    const template = fs_1.default.readFileSync(workflowSource, 'utf-8').replace(/__IMAGE_TAG__/g, imageTag());
-    const workflow = mode === 'advisory'
-        ? template.replace(RUN_STEP_ANCHOR, `${ADVISORY_NOTICE}\n${RUN_STEP_ANCHOR}\n${ADVISORY_FLAG}`)
-        : template;
-    fs_1.default.writeFileSync(workflowDest, workflow);
-    utils_1.logger.info(`[init]: ✅ Created .github/workflows/pr-checkmate.yml (${mode === 'strict' ? 'blocking' : 'advisory'})`);
+    index_js_2.logger.info('[init]: ℹ️ Both workflow variants were created — keep the one that fits and delete the other, ' +
+        'otherwise checks run twice on every PR.');
 }
 /**
  * Whether this repository installs pr-checkmate rather than reaching for it on
@@ -152,7 +164,7 @@ function installsPackage(root) {
  */
 function imageTag() {
     try {
-        const manifest = path_1.default.resolve(__dirname, '..', 'package.json');
+        const manifest = path_1.default.join((0, index_js_2.findOwnPackageRoot)() ?? path_1.default.resolve(__dirname, '..'), 'package.json');
         const version = JSON.parse(fs_1.default.readFileSync(manifest, 'utf-8')).version;
         return version.split('.')[0] || 'latest';
     }
@@ -185,7 +197,7 @@ function setupTsConfig(root, sourcePath) {
         exclude: ['node_modules', 'dist'],
     };
     fs_1.default.writeFileSync(tsconfigPath, JSON.stringify(newTsConfig, null, 2));
-    utils_1.logger.info('[init]: ✅ Created tsconfig.json using your sourcePath');
+    index_js_2.logger.info('[init]: ✅ Created tsconfig.json using your sourcePath');
 }
 /**
  * The file `init` writes for a new project — the client's decisions, nothing else.
@@ -255,14 +267,14 @@ const HOW_TO = [
     'Make everything advisory while adopting: "severityDefaults": { "failOn": "warn" }',
     'Skip a file or folder: "excludePaths": ["src/generated/**", "vendor/legacy.ts"]',
     'Check names are the ones printed in the report.',
-    `Every option, annotated, with its default: ${config_1.FULL_CONFIG_URL}`,
-    `Docs: ${config_1.DOCS_URL}`,
+    `Every option, annotated, with its default: ${index_js_1.FULL_CONFIG_URL}`,
+    `Docs: ${index_js_1.DOCS_URL}`,
 ].join(' ');
 function buildInitialConfig(sourcePath, languages) {
     return {
         $schema: SCHEMA_PATH,
         '// how-to': HOW_TO,
-        commands: config_1.DEFAULT_COMMANDS,
+        commands: index_js_1.DEFAULT_COMMANDS,
         '// reporting': REPORTING_HINT,
         sourcePath,
         // Which checks can stop a merge — named, but NOT written as values.
@@ -298,11 +310,11 @@ function buildInitialConfig(sourcePath, languages) {
         excludePaths: [],
         // REPLACES the default. Copied out so the list is editable in place —
         // note that ESLint does not read it; ESLint honours `eslint.ignorePatterns`.
-        ignoreDirs: [...config_1.IGNORED_DIRS],
+        ignoreDirs: [...index_js_1.IGNORED_DIRS],
         // Spelling: `words` and `ignorePaths` are both APPENDED to the bundled lists,
         // so both stay empty. What the bundled list already skips is spelled out in
         // the sibling comment rather than duplicated here.
-        '// cspell': `Already skipped by default: ${config_1.GENERATED_DOC_FILES.join(', ')}, test and mock paths, lockfiles, minified bundles, and every directory in "ignoreDirs". Anything listed below is ADDED to that.`,
+        '// cspell': `Already skipped by default: ${index_js_1.GENERATED_DOC_FILES.join(', ')}, test and mock paths, lockfiles, minified bundles, and every directory in "ignoreDirs". Anything listed below is ADDED to that.`,
         cspell: { words: [], ignorePaths: [] },
         // `max-len` is written out at its default rather than left implicit: it is
         // the rule people hit first and tune first, and a line limit is a house
@@ -318,8 +330,8 @@ function buildInitialConfig(sourcePath, languages) {
         // repeat their setup, the runner is the only consumer of what they export,
         // and a security test's whole job may be to call the dangerous function.
         // Delete an entry to have that check start reporting on tests again.
-        duplicate: { ignore: [...config_1.DUPLICATE_IGNORE_DEFAULTS] },
-        deadCode: { ignoreFiles: [...config_1.DEAD_CODE_IGNORE_DEFAULTS] },
+        duplicate: { ignore: [...index_js_1.DUPLICATE_IGNORE_DEFAULTS] },
+        deadCode: { ignoreFiles: [...index_js_1.DEAD_CODE_IGNORE_DEFAULTS] },
         // `dataflowWindow` is written out at its default for the same reason as
         // `max-len`: it is a number people will want to change, and a number nobody
         // can see is a number nobody can change. It is also the one finding in this
@@ -337,10 +349,10 @@ function buildInitialConfig(sourcePath, languages) {
             'gate and does not want the heuristic blocking should set dataflowWindow to 0.',
         ].join(' '),
         diffSecurity: {
-            dataflowWindow: findings_1.DEFAULT_DATAFLOW_WINDOW,
-            ignorePaths: [...config_1.DIFF_SECURITY_IGNORE_DEFAULTS],
+            dataflowWindow: findings_js_1.DEFAULT_DATAFLOW_WINDOW,
+            ignorePaths: [...index_js_1.DIFF_SECURITY_IGNORE_DEFAULTS],
         },
-        documentation: config_1.documentation,
+        documentation: index_js_1.documentation,
         languages,
     };
 }
@@ -348,12 +360,12 @@ function buildInitialConfig(sourcePath, languages) {
 async function createConfig(root) {
     const sourcePath = await promptSourcePath();
     const gateMode = await promptGateMode();
-    const languages = await (0, utils_1.detectLanguages)(root);
-    utils_1.logger.info(`[init]: 🔍 Detected languages: ${languages.length ? languages.join(', ') : 'none'}`);
+    const languages = await (0, index_js_2.detectLanguages)(root);
+    index_js_2.logger.info(`[init]: 🔍 Detected languages: ${languages.length ? languages.join(', ') : 'none'}`);
     const config = buildInitialConfig(sourcePath, languages);
     fs_1.default.writeFileSync(CONFIG_FILE, `${JSON.stringify(config, null, 2)}\n`);
-    utils_1.logger.info(`[init]: ✅ Created pr-checkmate.json with sourcePath: ${sourcePath}`);
-    utils_1.logger.info(`[init]: 💡 You can now customize ESLint rules, Prettier settings,
+    index_js_2.logger.info(`[init]: ✅ Created pr-checkmate.json with sourcePath: ${sourcePath}`);
+    index_js_2.logger.info(`[init]: 💡 You can now customize ESLint rules, Prettier settings,
       and cspell words in pr-checkmate.json`);
     setupWorkflow(root, gateMode);
     setupTsConfig(root, sourcePath);
@@ -366,7 +378,7 @@ async function createConfig(root) {
  * now apply when the config is loaded, so there is nothing to top up.
  */
 async function updateConfig(root) {
-    utils_1.logger.info('[init]: pr-checkmate.json already exists — updating it.');
+    index_js_2.logger.info('[init]: pr-checkmate.json already exists — updating it.');
     try {
         const raw = fs_1.default.readFileSync(CONFIG_FILE, 'utf-8');
         const json = JSON.parse(raw);
@@ -374,8 +386,8 @@ async function updateConfig(root) {
         // tuned `detect` (or `ignoreDirs`) precisely because detection was wrong
         // would otherwise get the wrong answer written back over the right one on
         // the next `init`.
-        const languages = await (0, utils_1.detectLanguages)(root, json.ignoreDirs, json.detect);
-        utils_1.logger.info(`[init]: 🔍 Detected languages: ${languages.length ? languages.join(', ') : 'none'}`);
+        const languages = await (0, index_js_2.detectLanguages)(root, json.ignoreDirs, json.detect);
+        index_js_2.logger.info(`[init]: 🔍 Detected languages: ${languages.length ? languages.join(', ') : 'none'}`);
         // The client's file is left exactly as they wrote it. Defaults are no longer
         // copied into it, because they never needed to be: they are merged in when
         // the config is loaded, so a new default reaches every repository on upgrade
@@ -394,11 +406,11 @@ async function updateConfig(root) {
             languages,
         };
         fs_1.default.writeFileSync(CONFIG_FILE, `${JSON.stringify(updated, null, 2)}\n`);
-        utils_1.logger.info('[init]: 🔧 Refreshed the detected languages in pr-checkmate.json.');
-        utils_1.logger.info(`[init]: 💡 Everything else is left as you wrote it — defaults apply on their own. Options: ${config_1.DOCS_URL}`);
+        index_js_2.logger.info('[init]: 🔧 Refreshed the detected languages in pr-checkmate.json.');
+        index_js_2.logger.info(`[init]: 💡 Everything else is left as you wrote it — defaults apply on their own. Options: ${index_js_1.DOCS_URL}`);
     }
     catch (e) {
-        utils_1.logger.error(`[init]: ❌ Failed to update pr-checkmate.json: ${e}`);
+        index_js_2.logger.error(`[init]: ❌ Failed to update pr-checkmate.json: ${e}`);
     }
 }
 /**

package/dist/{interfaces → cjs/interfaces}/index.d.ts

@@ -1,4 +1,4 @@
-import type { Language } from '../utils/detect-language';
+import type { Language } from '../utils/detect-language.js';
 export interface ConfigFile {
     source: string;
     dest: string;
@@ -428,5 +428,5 @@ export interface PRCheckMateConfig {
         allowLicenses?: string[];
     };
 }
-export type { CheckStatus, CheckResult } from '../utils/result-collector';
-export type { Language } from '../utils/detect-language';
+export type { CheckStatus, CheckResult } from '../utils/result-collector.js';
+export type { Language } from '../utils/detect-language.js';

package/dist/cjs/package.json

@@ -0,0 +1 @@
+{"type":"commonjs"}

package/dist/{scripts → cjs/scripts}/copy-configs.js

@@ -5,7 +5,7 @@ var __importDefault = (this && this.__importDefault) || function (mod) {
 Object.defineProperty(exports, "__esModule", { value: true });
 const node_fs_1 = __importDefault(require("node:fs"));
 const node_path_1 = __importDefault(require("node:path"));
-const utils_1 = require("../utils");
+const index_js_1 = require("../utils/index.js");
 const configFiles = [
     // Source is named so ESLint's auto-discovery does NOT treat it as a nested
     // config for files under src/config/ — it ships to the package root as the
@@ -16,10 +16,25 @@ const configFiles = [
     { source: 'src/config/.prettierrc', dest: '.prettierrc' },
     { source: 'src/config/cspell.json', dest: 'cspell.json' },
     { source: 'tsconfig.json', dest: 'tsconfig.json' },
-    { source: 'src/config/pr-checkmate-workflow.yml', dest: 'dist/config/pr-checkmate-workflow.yml' },
+    // `init.ts` reads these as a sibling of its own compiled location
+    // (`__dirname/config/...`), which means they must exist under both build
+    // outputs — dist/cjs and dist/esm are no longer siblings of a single
+    // shared dist/config the way the old flat dist/ layout was.
+    {
+        source: 'src/config/pr-checkmate-workflow.yml',
+        dest: 'dist/cjs/config/pr-checkmate-workflow.yml',
+    },
+    {
+        source: 'src/config/pr-checkmate-workflow.yml',
+        dest: 'dist/esm/config/pr-checkmate-workflow.yml',
+    },
+    {
+        source: 'src/config/pr-checkmate-workflow-docker.yml',
+        dest: 'dist/cjs/config/pr-checkmate-workflow-docker.yml',
+    },
     {
         source: 'src/config/pr-checkmate-workflow-docker.yml',
-        dest: 'dist/config/pr-checkmate-workflow-docker.yml',
+        dest: 'dist/esm/config/pr-checkmate-workflow-docker.yml',
     },
     { source: 'src/config/pr-checkmate.schema.json', dest: 'pr-checkmate.schema.json' },
 ];
@@ -28,12 +43,12 @@ const configFiles = [
  */
 function copyConfigs() {
     const root = node_path_1.default.resolve(__dirname, '../..');
-    utils_1.logger.log('[copyConfigs]: Copying config files to package root...\n');
+    index_js_1.logger.log('[copyConfigs]: Copying config files to package root...\n');
     configFiles.forEach(({ source, dest }) => {
         const srcPath = node_path_1.default.join(root, source);
         const destPath = node_path_1.default.join(root, dest);
         if (!node_fs_1.default.existsSync(srcPath)) {
-            utils_1.logger.warn(`[copyConfigs]: ⚠️ Source not found: ${source}`);
+            index_js_1.logger.warn(`[copyConfigs]: ⚠️ Source not found: ${source}`);
             return;
         }
         // Create destination directory if it doesn't exist
@@ -42,9 +57,9 @@ function copyConfigs() {
             node_fs_1.default.mkdirSync(destDir, { recursive: true });
         }
         node_fs_1.default.copyFileSync(srcPath, destPath);
-        utils_1.logger.log(`[copyConfigs]: ✅ Copied ${dest}`);
+        index_js_1.logger.log(`[copyConfigs]: ✅ Copied ${dest}`);
     });
-    utils_1.logger.info('\n[copyConfigs]: ✨ Configs successfully copied to root!\n');
+    index_js_1.logger.info('\n[copyConfigs]: ✨ Configs successfully copied to root!\n');
 }
 if (require.main === module) {
     copyConfigs();

package/dist/{scripts → cjs/scripts}/generate-install-manifests.js

@@ -6,7 +6,7 @@ Object.defineProperty(exports, "__esModule", { value: true });
 exports.buildManifest = buildManifest;
 const node_fs_1 = __importDefault(require("node:fs"));
 const node_path_1 = __importDefault(require("node:path"));
-const profiles_1 = require("../core/install/profiles");
+const profiles_js_1 = require("../core/install/profiles.js");
 /**
  * Find the entry npm would resolve `name` to from inside `fromPath`.
  *
@@ -107,7 +107,7 @@ function main() {
     const manifest = JSON.parse(node_fs_1.default.readFileSync(node_path_1.default.join(root, 'package.json'), 'utf-8'));
     const outDir = node_path_1.default.join(root, 'install-manifests');
     node_fs_1.default.rmSync(outDir, { recursive: true, force: true });
-    for (const profile of profiles_1.PROFILES) {
+    for (const profile of profiles_js_1.PROFILES) {
         const { pkg, lockfile } = buildManifest(lock, profile.name, profile.packages, manifest.overrides);
         const dir = node_path_1.default.join(outDir, profile.name);
         node_fs_1.default.mkdirSync(dir, { recursive: true });

package/dist/{scripts → cjs/scripts}/publish-github.js

@@ -6,7 +6,7 @@ Object.defineProperty(exports, "__esModule", { value: true });
 const child_process_1 = require("child_process");
 const fs_1 = __importDefault(require("fs"));
 const path_1 = __importDefault(require("path"));
-const utils_1 = require("../utils");
+const index_js_1 = require("../utils/index.js");
 function publishToGithub() {
     const root = process.cwd();
     const pkgPath = path_1.default.join(root, 'package.json');
@@ -29,10 +29,10 @@ function publishToGithub() {
         fs_1.default.renameSync(pkgPath, backupPath);
         fs_1.default.renameSync(tempPath, pkgPath);
         (0, child_process_1.execSync)('npm publish --registry=https://npm.pkg.github.com', { stdio: 'inherit' });
-        utils_1.logger.log('[publishToGithub]: ✅ Published to GitHub Packages');
+        index_js_1.logger.log('[publishToGithub]: ✅ Published to GitHub Packages');
     }
     catch (err) {
-        utils_1.logger.error(`[publishToGithub]: ${err}`);
+        index_js_1.logger.error(`[publishToGithub]: ${err}`);
     }
     finally {
         // The backup only exists if the first rename succeeded; restoring is
@@ -42,7 +42,7 @@ function publishToGithub() {
                 fs_1.default.renameSync(backupPath, pkgPath);
             }
             catch (err) {
-                utils_1.logger.error(`[publishToGithub]: could not restore package.json: ${err}`);
+                index_js_1.logger.error(`[publishToGithub]: could not restore package.json: ${err}`);
             }
         }
     }

package/dist/{utils → cjs/utils}/detect-language.js

@@ -7,10 +7,10 @@ exports.detectLanguageUsage = detectLanguageUsage;
 exports.detectLanguages = detectLanguages;
 const node_fs_1 = __importDefault(require("node:fs"));
 const node_path_1 = __importDefault(require("node:path"));
-const constants_1 = require("../config/constants");
-const execa_1 = require("./execa");
-const glob_1 = require("./glob");
-const logger_1 = require("./logger");
+const constants_js_1 = require("../config/constants.js");
+const execa_js_1 = require("./execa.js");
+const glob_js_1 = require("./glob.js");
+const logger_js_1 = require("./logger.js");
 /**
  * Marker files that unambiguously indicate a language's presence, independent of
  * how many source files are tracked. Presence of any marker forces detection even
@@ -98,7 +98,7 @@ function hasMarker(root, lang) {
             return node_fs_1.default.existsSync(node_path_1.default.join(root, name));
         // Glob marker (e.g. `*.csproj`): match against root-directory entries.
         try {
-            const re = (0, glob_1.globToRegExp)(name);
+            const re = (0, glob_js_1.globToRegExp)(name);
             return node_fs_1.default.readdirSync(root).some(entry => re.test(entry));
         }
         catch {
@@ -154,7 +154,7 @@ async function countTrackedFiles(root, ignoreDirs, excludePaths) {
         php: 0,
     };
     try {
-        const { stdout } = await (0, execa_1.execa)('git', ['ls-files'], { cwd: root });
+        const { stdout } = await (0, execa_js_1.execa)('git', ['ls-files'], { cwd: root });
         const files = stdout.split('\n').map(f => f.trim());
         const ignored = new Set(ignoreDirs);
         const markers = markerFilenames();
@@ -167,10 +167,10 @@ async function countTrackedFiles(root, ignoreDirs, excludePaths) {
             // languages absent from the source. Detection has to describe the repo's own
             // code, since it decides which checks run at all — the same exclusion every
             // check's file list already applies via `excludeIgnoredDirs`.
-            if ((0, glob_1.isUnderIgnoredDir)(file, ignored))
+            if ((0, glob_js_1.isUnderIgnoredDir)(file, ignored))
                 continue;
             // Generated reports and vendored bootstrap scripts are not the repo's code.
-            if ((0, glob_1.matchesAnyGlob)(file, excludePaths))
+            if ((0, glob_js_1.matchesAnyGlob)(file, excludePaths))
                 continue;
             // A manifest that happens to be source-shaped (`Package.swift`) declares a
             // language; it is not a line of it.
@@ -182,7 +182,7 @@ async function countTrackedFiles(root, ignoreDirs, excludePaths) {
         }
     }
     catch {
-        logger_1.logger.debug('[detectLanguages]: git ls-files unavailable, using marker files only');
+        logger_js_1.logger.debug('[detectLanguages]: git ls-files unavailable, using marker files only');
     }
     return counts;
 }
@@ -209,7 +209,7 @@ async function countTrackedFiles(root, ignoreDirs, excludePaths) {
  * @returns languages ordered by tracked file count (most-used first). `.h` headers
  *   are intentionally excluded from the C++ count since they are ambiguous with C.
  */
-async function detectLanguageUsage(root = process.cwd(), ignoreDirs = constants_1.IGNORED_DIRS, detect = {}) {
+async function detectLanguageUsage(root = process.cwd(), ignoreDirs = constants_js_1.IGNORED_DIRS, detect = {}) {
     const excludePaths = [...DEFAULT_DETECT_EXCLUDES, ...(detect.excludePaths ?? [])];
     const counts = await countTrackedFiles(root, ignoreDirs, excludePaths);
     // 1 by default: with the causes of the false positives fixed above, a single
@@ -228,7 +228,7 @@ async function detectLanguageUsage(root = process.cwd(), ignoreDirs = constants_
     detected.sort((a, b) => b.files - a.files);
     const countStr = Object.keys(counts).map(l => `${l}=${counts[l]}`).join(', ');
     const names = detected.map(u => u.lang).join(', ');
-    logger_1.logger.info(`[detectLanguages]: Detected ${names || 'none'} (counts: ${countStr})`);
+    logger_js_1.logger.info(`[detectLanguages]: Detected ${names || 'none'} (counts: ${countStr})`);
     return detected;
 }
 /**
@@ -236,6 +236,6 @@ async function detectLanguageUsage(root = process.cwd(), ignoreDirs = constants_
  * should run". See {@link detectLanguageUsage} when the file counts matter, as
  * they do for deciding what to download.
  */
-async function detectLanguages(root = process.cwd(), ignoreDirs = constants_1.IGNORED_DIRS, detect = {}) {
+async function detectLanguages(root = process.cwd(), ignoreDirs = constants_js_1.IGNORED_DIRS, detect = {}) {
     return (await detectLanguageUsage(root, ignoreDirs, detect)).map(u => u.lang);
 }