pr-checkmate 3.0.4 → 3.2.0

package/dist/{index.js → cjs/index.js}

@@ -8,25 +8,25 @@ Object.defineProperty(exports, "__esModule", { value: true });
 exports.Logger = exports.hasLocalConfig = exports.getPackageConfigPath = exports.getIgnoredDirs = exports.getSourcePaths = exports.getSourcePath = exports.defineCheck = exports.skip = exports.fail = exports.warn = exports.pass = exports.REGISTRY = exports.buildContext = exports.runChecks = void 0;
 // Primary programmatic API: run checks and receive a structured report.
 // Never throws for violations, never calls process.exit — the caller decides.
-var core_1 = require("./core");
-Object.defineProperty(exports, "runChecks", { enumerable: true, get: function () { return core_1.runChecks; } });
-Object.defineProperty(exports, "buildContext", { enumerable: true, get: function () { return core_1.buildContext; } });
-Object.defineProperty(exports, "REGISTRY", { enumerable: true, get: function () { return core_1.REGISTRY; } });
+var index_js_1 = require("./core/index.js");
+Object.defineProperty(exports, "runChecks", { enumerable: true, get: function () { return index_js_1.runChecks; } });
+Object.defineProperty(exports, "buildContext", { enumerable: true, get: function () { return index_js_1.buildContext; } });
+Object.defineProperty(exports, "REGISTRY", { enumerable: true, get: function () { return index_js_1.REGISTRY; } });
 // Authoring helpers for consumers writing their own checks (plugins).
-var core_2 = require("./core");
-Object.defineProperty(exports, "pass", { enumerable: true, get: function () { return core_2.pass; } });
-Object.defineProperty(exports, "warn", { enumerable: true, get: function () { return core_2.warn; } });
-Object.defineProperty(exports, "fail", { enumerable: true, get: function () { return core_2.fail; } });
-Object.defineProperty(exports, "skip", { enumerable: true, get: function () { return core_2.skip; } });
-Object.defineProperty(exports, "defineCheck", { enumerable: true, get: function () { return core_2.defineCheck; } });
+var index_js_2 = require("./core/index.js");
+Object.defineProperty(exports, "pass", { enumerable: true, get: function () { return index_js_2.pass; } });
+Object.defineProperty(exports, "warn", { enumerable: true, get: function () { return index_js_2.warn; } });
+Object.defineProperty(exports, "fail", { enumerable: true, get: function () { return index_js_2.fail; } });
+Object.defineProperty(exports, "skip", { enumerable: true, get: function () { return index_js_2.skip; } });
+Object.defineProperty(exports, "defineCheck", { enumerable: true, get: function () { return index_js_2.defineCheck; } });
 // Config helpers for consumers embedding pr-checkmate.
-var config_1 = require("./config");
-Object.defineProperty(exports, "getSourcePath", { enumerable: true, get: function () { return config_1.getSourcePath; } });
-Object.defineProperty(exports, "getSourcePaths", { enumerable: true, get: function () { return config_1.getSourcePaths; } });
-Object.defineProperty(exports, "getIgnoredDirs", { enumerable: true, get: function () { return config_1.getIgnoredDirs; } });
-Object.defineProperty(exports, "getPackageConfigPath", { enumerable: true, get: function () { return config_1.getPackageConfigPath; } });
-Object.defineProperty(exports, "hasLocalConfig", { enumerable: true, get: function () { return config_1.hasLocalConfig; } });
+var index_js_3 = require("./config/index.js");
+Object.defineProperty(exports, "getSourcePath", { enumerable: true, get: function () { return index_js_3.getSourcePath; } });
+Object.defineProperty(exports, "getSourcePaths", { enumerable: true, get: function () { return index_js_3.getSourcePaths; } });
+Object.defineProperty(exports, "getIgnoredDirs", { enumerable: true, get: function () { return index_js_3.getIgnoredDirs; } });
+Object.defineProperty(exports, "getPackageConfigPath", { enumerable: true, get: function () { return index_js_3.getPackageConfigPath; } });
+Object.defineProperty(exports, "hasLocalConfig", { enumerable: true, get: function () { return index_js_3.hasLocalConfig; } });
 // Standalone logging utility. Consumers instantiate their own Logger so their
 // log level and buffer stay independent from pr-checkmate's internal logger.
-var logger_1 = require("./utils/logger");
-Object.defineProperty(exports, "Logger", { enumerable: true, get: function () { return logger_1.Logger; } });
+var logger_js_1 = require("./utils/logger.js");
+Object.defineProperty(exports, "Logger", { enumerable: true, get: function () { return logger_js_1.Logger; } });

package/dist/{init.js → cjs/init.js}

@@ -10,9 +10,9 @@ exports.init = init;
 const fs_1 = __importDefault(require("fs"));
 const path_1 = __importDefault(require("path"));
 const inquirer_1 = __importDefault(require("inquirer"));
-const config_1 = require("./config");
-const findings_1 = require("./core/checks/findings");
-const utils_1 = require("./utils");
+const index_js_1 = require("./config/index.js");
+const findings_js_1 = require("./core/checks/findings.js");
+const index_js_2 = require("./utils/index.js");
 const CONFIG_FILE = path_1.default.resolve(process.cwd(), 'pr-checkmate.json');
 /**
  * Points editors at the bundled JSON schema. With the generated config reduced
@@ -92,40 +92,52 @@ const ADVISORY_FLAG = '        continue-on-error: true';
  * were just asked about.
  */
 function setupWorkflow(root, mode) {
-    // Which template a repository gets is decided by whether it actually installs
-    // us. Both are correct for their own case and wrong for the other:
+    // We can't know for sure whether a repo will end up depending on the npm
+    // package by the time this workflow first runs (that's a decision the client
+    // makes after `init`, e.g. by running `npm install pr-checkmate`), so instead
+    // of guessing we scaffold both variants and let them keep the one that
+    // matches, deleting the other:
     //
-    //  - a dependency means `npx pr-checkmate` runs the copy the lockfile pins,
-    //    which is fast and reproducible;
-    //  - no dependency means `npx` resolves to the newest release and downloads it
-    //    on every job — 547 MB, about five minutes, and a major version can land
-    //    without anyone changing a line.
-    //
-    // Asking the client to notice that difference in a comment is asking them to
-    // read a file they scaffolded precisely so they would not have to.
-    const source = installsPackage(root)
-        ? 'pr-checkmate-workflow.yml'
-        : 'pr-checkmate-workflow-docker.yml';
-    const workflowSource = path_1.default.join(__dirname, 'config', source);
+    //  - the npm variant: `npx pr-checkmate` runs the copy the lockfile pins,
+    //    which is fast and reproducible, but assumes the install happens;
+    //  - the docker variant: works with no install, but `npx` (nothing to run
+    //    locally) resolves to the newest release and downloads it on every job —
+    //    547 MB, about five minutes, and a major version can land without anyone
+    //    changing a line.
+    const candidates = [
+        { source: 'pr-checkmate-workflow.yml', dest: 'pr-checkmate.yml', label: 'npm package' },
+        {
+            source: 'pr-checkmate-workflow-docker.yml',
+            dest: 'pr-checkmate-docker.yml',
+            label: 'Docker image',
+        },
+    ];
     const workflowDir = path_1.default.join(root, '.github', 'workflows');
-    const workflowDest = path_1.default.join(workflowDir, 'pr-checkmate.yml');
-    if (!fs_1.default.existsSync(workflowSource)) {
-        utils_1.logger.warn('[init]: ⚠️ Workflow template not found, skipping workflow setup');
-        return;
-    }
-    if (fs_1.default.existsSync(workflowDest)) {
-        utils_1.logger.info('[init]: ⏭️ .github/workflows/pr-checkmate.yml already exists — left untouched');
-        return;
-    }
-    if (!fs_1.default.existsSync(workflowDir)) {
-        fs_1.default.mkdirSync(workflowDir, { recursive: true });
+    const recommended = installsPackage(root) ? candidates[0] : candidates[1];
+    for (const { source, dest, label } of candidates) {
+        const workflowSource = path_1.default.join(__dirname, 'config', source);
+        const workflowDest = path_1.default.join(workflowDir, dest);
+        if (!fs_1.default.existsSync(workflowSource)) {
+            index_js_2.logger.warn(`[init]: ⚠️ Workflow template ${source} not found, skipping`);
+            continue;
+        }
+        if (fs_1.default.existsSync(workflowDest)) {
+            index_js_2.logger.info(`[init]: ⏭️ .github/workflows/${dest} already exists — left untouched`);
+            continue;
+        }
+        if (!fs_1.default.existsSync(workflowDir)) {
+            fs_1.default.mkdirSync(workflowDir, { recursive: true });
+        }
+        const template = fs_1.default.readFileSync(workflowSource, 'utf-8').replace(/__IMAGE_TAG__/g, imageTag());
+        const workflow = mode === 'advisory'
+            ? template.replace(RUN_STEP_ANCHOR, `${ADVISORY_NOTICE}\n${RUN_STEP_ANCHOR}\n${ADVISORY_FLAG}`)
+            : template;
+        fs_1.default.writeFileSync(workflowDest, workflow);
+        const recommendedNote = dest === recommended.dest ? ', recommended for this repo' : '';
+        index_js_2.logger.info(`[init]: ✅ Created .github/workflows/${dest} (${label}${recommendedNote})`);
     }
-    const template = fs_1.default.readFileSync(workflowSource, 'utf-8').replace(/__IMAGE_TAG__/g, imageTag());
-    const workflow = mode === 'advisory'
-        ? template.replace(RUN_STEP_ANCHOR, `${ADVISORY_NOTICE}\n${RUN_STEP_ANCHOR}\n${ADVISORY_FLAG}`)
-        : template;
-    fs_1.default.writeFileSync(workflowDest, workflow);
-    utils_1.logger.info(`[init]: ✅ Created .github/workflows/pr-checkmate.yml (${mode === 'strict' ? 'blocking' : 'advisory'})`);
+    index_js_2.logger.info('[init]: ℹ️ Both workflow variants were created — keep the one that fits and delete the other, ' +
+        'otherwise checks run twice on every PR.');
 }
 /**
  * Whether this repository installs pr-checkmate rather than reaching for it on
@@ -152,7 +164,7 @@ function installsPackage(root) {
  */
 function imageTag() {
     try {
-        const manifest = path_1.default.resolve(__dirname, '..', 'package.json');
+        const manifest = path_1.default.join((0, index_js_2.findOwnPackageRoot)() ?? path_1.default.resolve(__dirname, '..'), 'package.json');
         const version = JSON.parse(fs_1.default.readFileSync(manifest, 'utf-8')).version;
         return version.split('.')[0] || 'latest';
     }
@@ -185,7 +197,7 @@ function setupTsConfig(root, sourcePath) {
         exclude: ['node_modules', 'dist'],
     };
     fs_1.default.writeFileSync(tsconfigPath, JSON.stringify(newTsConfig, null, 2));
-    utils_1.logger.info('[init]: ✅ Created tsconfig.json using your sourcePath');
+    index_js_2.logger.info('[init]: ✅ Created tsconfig.json using your sourcePath');
 }
 /**
  * The file `init` writes for a new project — the client's decisions, nothing else.
@@ -255,14 +267,14 @@ const HOW_TO = [
     'Make everything advisory while adopting: "severityDefaults": { "failOn": "warn" }',
     'Skip a file or folder: "excludePaths": ["src/generated/**", "vendor/legacy.ts"]',
     'Check names are the ones printed in the report.',
-    `Every option, annotated, with its default: ${config_1.FULL_CONFIG_URL}`,
-    `Docs: ${config_1.DOCS_URL}`,
+    `Every option, annotated, with its default: ${index_js_1.FULL_CONFIG_URL}`,
+    `Docs: ${index_js_1.DOCS_URL}`,
 ].join(' ');
 function buildInitialConfig(sourcePath, languages) {
     return {
         $schema: SCHEMA_PATH,
         '// how-to': HOW_TO,
-        commands: config_1.DEFAULT_COMMANDS,
+        commands: index_js_1.DEFAULT_COMMANDS,
         '// reporting': REPORTING_HINT,
         sourcePath,
         // Which checks can stop a merge — named, but NOT written as values.
@@ -298,11 +310,11 @@ function buildInitialConfig(sourcePath, languages) {
         excludePaths: [],
         // REPLACES the default. Copied out so the list is editable in place —
         // note that ESLint does not read it; ESLint honours `eslint.ignorePatterns`.
-        ignoreDirs: [...config_1.IGNORED_DIRS],
+        ignoreDirs: [...index_js_1.IGNORED_DIRS],
         // Spelling: `words` and `ignorePaths` are both APPENDED to the bundled lists,
         // so both stay empty. What the bundled list already skips is spelled out in
         // the sibling comment rather than duplicated here.
-        '// cspell': `Already skipped by default: ${config_1.GENERATED_DOC_FILES.join(', ')}, test and mock paths, lockfiles, minified bundles, and every directory in "ignoreDirs". Anything listed below is ADDED to that.`,
+        '// cspell': `Already skipped by default: ${index_js_1.GENERATED_DOC_FILES.join(', ')}, test and mock paths, lockfiles, minified bundles, and every directory in "ignoreDirs". Anything listed below is ADDED to that.`,
         cspell: { words: [], ignorePaths: [] },
         // `max-len` is written out at its default rather than left implicit: it is
         // the rule people hit first and tune first, and a line limit is a house
@@ -318,8 +330,8 @@ function buildInitialConfig(sourcePath, languages) {
         // repeat their setup, the runner is the only consumer of what they export,
         // and a security test's whole job may be to call the dangerous function.
         // Delete an entry to have that check start reporting on tests again.
-        duplicate: { ignore: [...config_1.DUPLICATE_IGNORE_DEFAULTS] },
-        deadCode: { ignoreFiles: [...config_1.DEAD_CODE_IGNORE_DEFAULTS] },
+        duplicate: { ignore: [...index_js_1.DUPLICATE_IGNORE_DEFAULTS] },
+        deadCode: { ignoreFiles: [...index_js_1.DEAD_CODE_IGNORE_DEFAULTS] },
         // `dataflowWindow` is written out at its default for the same reason as
         // `max-len`: it is a number people will want to change, and a number nobody
         // can see is a number nobody can change. It is also the one finding in this
@@ -337,10 +349,10 @@ function buildInitialConfig(sourcePath, languages) {
             'gate and does not want the heuristic blocking should set dataflowWindow to 0.',
         ].join(' '),
         diffSecurity: {
-            dataflowWindow: findings_1.DEFAULT_DATAFLOW_WINDOW,
-            ignorePaths: [...config_1.DIFF_SECURITY_IGNORE_DEFAULTS],
+            dataflowWindow: findings_js_1.DEFAULT_DATAFLOW_WINDOW,
+            ignorePaths: [...index_js_1.DIFF_SECURITY_IGNORE_DEFAULTS],
         },
-        documentation: config_1.documentation,
+        documentation: index_js_1.documentation,
         languages,
     };
 }
@@ -348,12 +360,12 @@ function buildInitialConfig(sourcePath, languages) {
 async function createConfig(root) {
     const sourcePath = await promptSourcePath();
     const gateMode = await promptGateMode();
-    const languages = await (0, utils_1.detectLanguages)(root);
-    utils_1.logger.info(`[init]: 🔍 Detected languages: ${languages.length ? languages.join(', ') : 'none'}`);
+    const languages = await (0, index_js_2.detectLanguages)(root);
+    index_js_2.logger.info(`[init]: 🔍 Detected languages: ${languages.length ? languages.join(', ') : 'none'}`);
     const config = buildInitialConfig(sourcePath, languages);
     fs_1.default.writeFileSync(CONFIG_FILE, `${JSON.stringify(config, null, 2)}\n`);
-    utils_1.logger.info(`[init]: ✅ Created pr-checkmate.json with sourcePath: ${sourcePath}`);
-    utils_1.logger.info(`[init]: 💡 You can now customize ESLint rules, Prettier settings,
+    index_js_2.logger.info(`[init]: ✅ Created pr-checkmate.json with sourcePath: ${sourcePath}`);
+    index_js_2.logger.info(`[init]: 💡 You can now customize ESLint rules, Prettier settings,
       and cspell words in pr-checkmate.json`);
     setupWorkflow(root, gateMode);
     setupTsConfig(root, sourcePath);
@@ -366,7 +378,7 @@ async function createConfig(root) {
  * now apply when the config is loaded, so there is nothing to top up.
  */
 async function updateConfig(root) {
-    utils_1.logger.info('[init]: pr-checkmate.json already exists — updating it.');
+    index_js_2.logger.info('[init]: pr-checkmate.json already exists — updating it.');
     try {
         const raw = fs_1.default.readFileSync(CONFIG_FILE, 'utf-8');
         const json = JSON.parse(raw);
@@ -374,8 +386,8 @@ async function updateConfig(root) {
         // tuned `detect` (or `ignoreDirs`) precisely because detection was wrong
         // would otherwise get the wrong answer written back over the right one on
         // the next `init`.
-        const languages = await (0, utils_1.detectLanguages)(root, json.ignoreDirs, json.detect);
-        utils_1.logger.info(`[init]: 🔍 Detected languages: ${languages.length ? languages.join(', ') : 'none'}`);
+        const languages = await (0, index_js_2.detectLanguages)(root, json.ignoreDirs, json.detect);
+        index_js_2.logger.info(`[init]: 🔍 Detected languages: ${languages.length ? languages.join(', ') : 'none'}`);
         // The client's file is left exactly as they wrote it. Defaults are no longer
         // copied into it, because they never needed to be: they are merged in when
         // the config is loaded, so a new default reaches every repository on upgrade
@@ -394,11 +406,11 @@ async function updateConfig(root) {
             languages,
         };
         fs_1.default.writeFileSync(CONFIG_FILE, `${JSON.stringify(updated, null, 2)}\n`);
-        utils_1.logger.info('[init]: 🔧 Refreshed the detected languages in pr-checkmate.json.');
-        utils_1.logger.info(`[init]: 💡 Everything else is left as you wrote it — defaults apply on their own. Options: ${config_1.DOCS_URL}`);
+        index_js_2.logger.info('[init]: 🔧 Refreshed the detected languages in pr-checkmate.json.');
+        index_js_2.logger.info(`[init]: 💡 Everything else is left as you wrote it — defaults apply on their own. Options: ${index_js_1.DOCS_URL}`);
     }
     catch (e) {
-        utils_1.logger.error(`[init]: ❌ Failed to update pr-checkmate.json: ${e}`);
+        index_js_2.logger.error(`[init]: ❌ Failed to update pr-checkmate.json: ${e}`);
     }
 }
 /**

package/dist/{interfaces → cjs/interfaces}/index.d.ts

@@ -1,4 +1,4 @@
-import type { Language } from '../utils/detect-language';
+import type { Language } from '../utils/detect-language.js';
 export interface ConfigFile {
     source: string;
     dest: string;
@@ -428,5 +428,5 @@ export interface PRCheckMateConfig {
         allowLicenses?: string[];
     };
 }
-export type { CheckStatus, CheckResult } from '../utils/result-collector';
-export type { Language } from '../utils/detect-language';
+export type { CheckStatus, CheckResult } from '../utils/result-collector.js';
+export type { Language } from '../utils/detect-language.js';

package/dist/cjs/package.json

@@ -0,0 +1 @@
+{"type":"commonjs"}

package/dist/{scripts → cjs/scripts}/copy-configs.js

@@ -5,7 +5,7 @@ var __importDefault = (this && this.__importDefault) || function (mod) {
 Object.defineProperty(exports, "__esModule", { value: true });
 const node_fs_1 = __importDefault(require("node:fs"));
 const node_path_1 = __importDefault(require("node:path"));
-const utils_1 = require("../utils");
+const index_js_1 = require("../utils/index.js");
 const configFiles = [
     // Source is named so ESLint's auto-discovery does NOT treat it as a nested
     // config for files under src/config/ — it ships to the package root as the
@@ -16,10 +16,25 @@ const configFiles = [
     { source: 'src/config/.prettierrc', dest: '.prettierrc' },
     { source: 'src/config/cspell.json', dest: 'cspell.json' },
     { source: 'tsconfig.json', dest: 'tsconfig.json' },
-    { source: 'src/config/pr-checkmate-workflow.yml', dest: 'dist/config/pr-checkmate-workflow.yml' },
+    // `init.ts` reads these as a sibling of its own compiled location
+    // (`__dirname/config/...`), which means they must exist under both build
+    // outputs — dist/cjs and dist/esm are no longer siblings of a single
+    // shared dist/config the way the old flat dist/ layout was.
+    {
+        source: 'src/config/pr-checkmate-workflow.yml',
+        dest: 'dist/cjs/config/pr-checkmate-workflow.yml',
+    },
+    {
+        source: 'src/config/pr-checkmate-workflow.yml',
+        dest: 'dist/esm/config/pr-checkmate-workflow.yml',
+    },
+    {
+        source: 'src/config/pr-checkmate-workflow-docker.yml',
+        dest: 'dist/cjs/config/pr-checkmate-workflow-docker.yml',
+    },
     {
         source: 'src/config/pr-checkmate-workflow-docker.yml',
-        dest: 'dist/config/pr-checkmate-workflow-docker.yml',
+        dest: 'dist/esm/config/pr-checkmate-workflow-docker.yml',
     },
     { source: 'src/config/pr-checkmate.schema.json', dest: 'pr-checkmate.schema.json' },
 ];
@@ -28,12 +43,12 @@ const configFiles = [
  */
 function copyConfigs() {
     const root = node_path_1.default.resolve(__dirname, '../..');
-    utils_1.logger.log('[copyConfigs]: Copying config files to package root...\n');
+    index_js_1.logger.log('[copyConfigs]: Copying config files to package root...\n');
     configFiles.forEach(({ source, dest }) => {
         const srcPath = node_path_1.default.join(root, source);
         const destPath = node_path_1.default.join(root, dest);
         if (!node_fs_1.default.existsSync(srcPath)) {
-            utils_1.logger.warn(`[copyConfigs]: ⚠️ Source not found: ${source}`);
+            index_js_1.logger.warn(`[copyConfigs]: ⚠️ Source not found: ${source}`);
             return;
         }
         // Create destination directory if it doesn't exist
@@ -42,9 +57,9 @@ function copyConfigs() {
             node_fs_1.default.mkdirSync(destDir, { recursive: true });
         }
         node_fs_1.default.copyFileSync(srcPath, destPath);
-        utils_1.logger.log(`[copyConfigs]: ✅ Copied ${dest}`);
+        index_js_1.logger.log(`[copyConfigs]: ✅ Copied ${dest}`);
     });
-    utils_1.logger.info('\n[copyConfigs]: ✨ Configs successfully copied to root!\n');
+    index_js_1.logger.info('\n[copyConfigs]: ✨ Configs successfully copied to root!\n');
 }
 if (require.main === module) {
     copyConfigs();

package/dist/{scripts → cjs/scripts}/generate-install-manifests.js

@@ -6,7 +6,7 @@ Object.defineProperty(exports, "__esModule", { value: true });
 exports.buildManifest = buildManifest;
 const node_fs_1 = __importDefault(require("node:fs"));
 const node_path_1 = __importDefault(require("node:path"));
-const profiles_1 = require("../core/install/profiles");
+const profiles_js_1 = require("../core/install/profiles.js");
 /**
  * Find the entry npm would resolve `name` to from inside `fromPath`.
  *
@@ -107,7 +107,7 @@ function main() {
     const manifest = JSON.parse(node_fs_1.default.readFileSync(node_path_1.default.join(root, 'package.json'), 'utf-8'));
     const outDir = node_path_1.default.join(root, 'install-manifests');
     node_fs_1.default.rmSync(outDir, { recursive: true, force: true });
-    for (const profile of profiles_1.PROFILES) {
+    for (const profile of profiles_js_1.PROFILES) {
         const { pkg, lockfile } = buildManifest(lock, profile.name, profile.packages, manifest.overrides);
         const dir = node_path_1.default.join(outDir, profile.name);
         node_fs_1.default.mkdirSync(dir, { recursive: true });

package/dist/{scripts → cjs/scripts}/publish-github.js

@@ -6,7 +6,7 @@ Object.defineProperty(exports, "__esModule", { value: true });
 const child_process_1 = require("child_process");
 const fs_1 = __importDefault(require("fs"));
 const path_1 = __importDefault(require("path"));
-const utils_1 = require("../utils");
+const index_js_1 = require("../utils/index.js");
 function publishToGithub() {
     const root = process.cwd();
     const pkgPath = path_1.default.join(root, 'package.json');
@@ -29,10 +29,10 @@ function publishToGithub() {
         fs_1.default.renameSync(pkgPath, backupPath);
         fs_1.default.renameSync(tempPath, pkgPath);
         (0, child_process_1.execSync)('npm publish --registry=https://npm.pkg.github.com', { stdio: 'inherit' });
-        utils_1.logger.log('[publishToGithub]: ✅ Published to GitHub Packages');
+        index_js_1.logger.log('[publishToGithub]: ✅ Published to GitHub Packages');
     }
     catch (err) {
-        utils_1.logger.error(`[publishToGithub]: ${err}`);
+        index_js_1.logger.error(`[publishToGithub]: ${err}`);
     }
     finally {
         // The backup only exists if the first rename succeeded; restoring is
@@ -42,7 +42,7 @@ function publishToGithub() {
                 fs_1.default.renameSync(backupPath, pkgPath);
             }
             catch (err) {
-                utils_1.logger.error(`[publishToGithub]: could not restore package.json: ${err}`);
+                index_js_1.logger.error(`[publishToGithub]: could not restore package.json: ${err}`);
             }
         }
     }

package/dist/{utils → cjs/utils}/detect-language.js

@@ -7,10 +7,10 @@ exports.detectLanguageUsage = detectLanguageUsage;
 exports.detectLanguages = detectLanguages;
 const node_fs_1 = __importDefault(require("node:fs"));
 const node_path_1 = __importDefault(require("node:path"));
-const constants_1 = require("../config/constants");
-const execa_1 = require("./execa");
-const glob_1 = require("./glob");
-const logger_1 = require("./logger");
+const constants_js_1 = require("../config/constants.js");
+const execa_js_1 = require("./execa.js");
+const glob_js_1 = require("./glob.js");
+const logger_js_1 = require("./logger.js");
 /**
  * Marker files that unambiguously indicate a language's presence, independent of
  * how many source files are tracked. Presence of any marker forces detection even
@@ -98,7 +98,7 @@ function hasMarker(root, lang) {
             return node_fs_1.default.existsSync(node_path_1.default.join(root, name));
         // Glob marker (e.g. `*.csproj`): match against root-directory entries.
         try {
-            const re = (0, glob_1.globToRegExp)(name);
+            const re = (0, glob_js_1.globToRegExp)(name);
             return node_fs_1.default.readdirSync(root).some(entry => re.test(entry));
         }
         catch {
@@ -154,7 +154,7 @@ async function countTrackedFiles(root, ignoreDirs, excludePaths) {
         php: 0,
     };
     try {
-        const { stdout } = await (0, execa_1.execa)('git', ['ls-files'], { cwd: root });
+        const { stdout } = await (0, execa_js_1.execa)('git', ['ls-files'], { cwd: root });
         const files = stdout.split('\n').map(f => f.trim());
         const ignored = new Set(ignoreDirs);
         const markers = markerFilenames();
@@ -167,10 +167,10 @@ async function countTrackedFiles(root, ignoreDirs, excludePaths) {
             // languages absent from the source. Detection has to describe the repo's own
             // code, since it decides which checks run at all — the same exclusion every
             // check's file list already applies via `excludeIgnoredDirs`.
-            if ((0, glob_1.isUnderIgnoredDir)(file, ignored))
+            if ((0, glob_js_1.isUnderIgnoredDir)(file, ignored))
                 continue;
             // Generated reports and vendored bootstrap scripts are not the repo's code.
-            if ((0, glob_1.matchesAnyGlob)(file, excludePaths))
+            if ((0, glob_js_1.matchesAnyGlob)(file, excludePaths))
                 continue;
             // A manifest that happens to be source-shaped (`Package.swift`) declares a
             // language; it is not a line of it.
@@ -182,7 +182,7 @@ async function countTrackedFiles(root, ignoreDirs, excludePaths) {
         }
     }
     catch {
-        logger_1.logger.debug('[detectLanguages]: git ls-files unavailable, using marker files only');
+        logger_js_1.logger.debug('[detectLanguages]: git ls-files unavailable, using marker files only');
     }
     return counts;
 }
@@ -209,7 +209,7 @@ async function countTrackedFiles(root, ignoreDirs, excludePaths) {
  * @returns languages ordered by tracked file count (most-used first). `.h` headers
  *   are intentionally excluded from the C++ count since they are ambiguous with C.
  */
-async function detectLanguageUsage(root = process.cwd(), ignoreDirs = constants_1.IGNORED_DIRS, detect = {}) {
+async function detectLanguageUsage(root = process.cwd(), ignoreDirs = constants_js_1.IGNORED_DIRS, detect = {}) {
     const excludePaths = [...DEFAULT_DETECT_EXCLUDES, ...(detect.excludePaths ?? [])];
     const counts = await countTrackedFiles(root, ignoreDirs, excludePaths);
     // 1 by default: with the causes of the false positives fixed above, a single
@@ -228,7 +228,7 @@ async function detectLanguageUsage(root = process.cwd(), ignoreDirs = constants_
     detected.sort((a, b) => b.files - a.files);
     const countStr = Object.keys(counts).map(l => `${l}=${counts[l]}`).join(', ');
     const names = detected.map(u => u.lang).join(', ');
-    logger_1.logger.info(`[detectLanguages]: Detected ${names || 'none'} (counts: ${countStr})`);
+    logger_js_1.logger.info(`[detectLanguages]: Detected ${names || 'none'} (counts: ${countStr})`);
     return detected;
 }
 /**
@@ -236,6 +236,6 @@ async function detectLanguageUsage(root = process.cwd(), ignoreDirs = constants_
  * should run". See {@link detectLanguageUsage} when the file counts matter, as
  * they do for deciding what to download.
  */
-async function detectLanguages(root = process.cwd(), ignoreDirs = constants_1.IGNORED_DIRS, detect = {}) {
+async function detectLanguages(root = process.cwd(), ignoreDirs = constants_js_1.IGNORED_DIRS, detect = {}) {
     return (await detectLanguageUsage(root, ignoreDirs, detect)).map(u => u.lang);
 }

package/dist/{utils → cjs/utils}/git.js

@@ -1,7 +1,7 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.resolveGitRef = resolveGitRef;
-const execa_1 = require("./execa");
+const execa_js_1 = require("./execa.js");
 /**
  * Resolve a git ref to a concrete commit SHA, or `undefined` when this clone
  * cannot resolve it.
@@ -16,7 +16,7 @@ const execa_1 = require("./execa");
  * missing base means "review everything", never "review nothing".
  */
 async function resolveGitRef(cwd, ref) {
-    const { stdout } = await (0, execa_1.execa)('git', ['rev-parse', '--verify', '--quiet', `${ref}^{commit}`], {
+    const { stdout } = await (0, execa_js_1.execa)('git', ['rev-parse', '--verify', '--quiet', `${ref}^{commit}`], {
         cwd,
         reject: false,
     });

package/dist/{utils → cjs/utils}/http.js

@@ -2,7 +2,7 @@
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.request = request;
 exports.paginate = paginate;
-const logger_1 = require("./logger");
+const logger_js_1 = require("./logger.js");
 const DEFAULT_TIMEOUT_MS = 10000;
 const DEFAULT_RETRIES = 3;
 /** 5xx and 429 are worth another attempt; a 4xx will fail identically forever. */
@@ -60,7 +60,7 @@ async function request(url, init = {}, opts = {}) {
         if (attempt < attempts) {
             // Exponential backoff, capped so three attempts stay well inside a CI step.
             const waitMs = Math.min(2000, 250 * 2 ** (attempt - 1));
-            logger_1.logger.warn(`${label}retrying after ${last.error} (attempt ${attempt}/${attempts})`);
+            logger_js_1.logger.warn(`${label}retrying after ${last.error} (attempt ${attempt}/${attempts})`);
             await new Promise(resolve => setTimeout(resolve, waitMs));
         }
     }

package/dist/cjs/utils/index.d.ts

@@ -0,0 +1,15 @@
+export * from './logger.js';
+export * from './result-collector.js';
+export * from './resolve-bin.js';
+export * from './own-deps.js';
+export * from './direct-deps.js';
+export * from './detect-language.js';
+export * from './glob.js';
+export * from './update-notifier.js';
+export * from './package-version.js';
+export * from './ci.js';
+export * from './git.js';
+/**
+ *
+ */
+export declare function cleanupTempFile(filePath: string): void;

package/dist/{utils → cjs/utils}/index.js

@@ -19,18 +19,18 @@ var __importDefault = (this && this.__importDefault) || function (mod) {
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.cleanupTempFile = cleanupTempFile;
 const node_fs_1 = __importDefault(require("node:fs"));
-const logger_1 = require("./logger");
-__exportStar(require("./logger"), exports);
-__exportStar(require("./result-collector"), exports);
-__exportStar(require("./resolve-bin"), exports);
-__exportStar(require("./own-deps"), exports);
-__exportStar(require("./direct-deps"), exports);
-__exportStar(require("./detect-language"), exports);
-__exportStar(require("./glob"), exports);
-__exportStar(require("./update-notifier"), exports);
-__exportStar(require("./package-version"), exports);
-__exportStar(require("./ci"), exports);
-__exportStar(require("./git"), exports);
+const logger_js_1 = require("./logger.js");
+__exportStar(require("./logger.js"), exports);
+__exportStar(require("./result-collector.js"), exports);
+__exportStar(require("./resolve-bin.js"), exports);
+__exportStar(require("./own-deps.js"), exports);
+__exportStar(require("./direct-deps.js"), exports);
+__exportStar(require("./detect-language.js"), exports);
+__exportStar(require("./glob.js"), exports);
+__exportStar(require("./update-notifier.js"), exports);
+__exportStar(require("./package-version.js"), exports);
+__exportStar(require("./ci.js"), exports);
+__exportStar(require("./git.js"), exports);
 /**
  *
  */
@@ -41,6 +41,6 @@ function cleanupTempFile(filePath) {
         }
     }
     catch (err) {
-        logger_1.logger.warn(`[cleanupTempFile]: ⚠️ Failed cleanup: ${filePath}\n${err}`);
+        logger_js_1.logger.warn(`[cleanupTempFile]: ⚠️ Failed cleanup: ${filePath}\n${err}`);
     }
 }

package/dist/{utils → cjs/utils}/own-deps.d.ts

@@ -1,3 +1,5 @@
+/** Walk up from this module until we find pr-checkmate's own package root. */
+export declare function findOwnPackageRoot(): string | null;
 /**
  * Compute the full set of package names in pr-checkmate's own dependency
  * closure (direct + transitive runtime dependencies), plus pr-checkmate itself.

package/dist/{utils → cjs/utils}/own-deps.js

@@ -3,6 +3,7 @@ var __importDefault = (this && this.__importDefault) || function (mod) {
     return (mod && mod.__esModule) ? mod : { "default": mod };
 };
 Object.defineProperty(exports, "__esModule", { value: true });
+exports.findOwnPackageRoot = findOwnPackageRoot;
 exports.getOwnDependencyClosure = getOwnDependencyClosure;
 const node_fs_1 = __importDefault(require("node:fs"));
 const node_path_1 = __importDefault(require("node:path"));

package/dist/{utils → cjs/utils}/package-version.js

@@ -7,6 +7,7 @@ exports.packageVersion = packageVersion;
 exports.packageName = packageName;
 const node_fs_1 = __importDefault(require("node:fs"));
 const node_path_1 = __importDefault(require("node:path"));
+const own_deps_js_1 = require("./own-deps.js");
 /**
  * Our own name and version, read from the manifest that ships inside the package.
  *
@@ -23,7 +24,7 @@ const node_path_1 = __importDefault(require("node:path"));
  */
 function readManifest() {
     try {
-        const manifest = node_path_1.default.resolve(__dirname, '../..', 'package.json');
+        const manifest = node_path_1.default.join((0, own_deps_js_1.findOwnPackageRoot)() ?? node_path_1.default.resolve(__dirname, '../../..'), 'package.json');
         const parsed = JSON.parse(node_fs_1.default.readFileSync(manifest, 'utf-8'));
         return { name: parsed.name ?? 'pr-checkmate', version: parsed.version ?? '0.0.0' };
     }

package/dist/{utils → cjs/utils}/resolve-bin.js

@@ -11,6 +11,7 @@ exports.resolveTool = resolveTool;
 exports.resolvePackageBin = resolvePackageBin;
 const node_fs_1 = __importDefault(require("node:fs"));
 const node_path_1 = __importDefault(require("node:path"));
+const own_deps_js_1 = require("./own-deps.js");
 /**
  * Extra roots to search, registered once per run by the install layer.
  *
@@ -38,7 +39,7 @@ function clearToolPaths() {
 }
 /** The root of the installed pr-checkmate package — where our own tooling lives. */
 function ownPackageRoot() {
-    return node_path_1.default.resolve(__dirname, '../..');
+    return (0, own_deps_js_1.findOwnPackageRoot)() ?? node_path_1.default.resolve(__dirname, '../../..');
 }
 /**
  * Whether a package is physically present in our own dependency tree.