projscan 4.6.0 → 4.7.0

package/dist/core/languages/pythonRequirements.js

@@ -1,38 +1,75 @@
 import fs from 'node:fs/promises';
 import path from 'node:path';
 import { splitPep508 } from './pythonPep508.js';
-const REQUIREMENTS_FILE_RE = /^requirements(-.*)?\.txt$/i;
+const REQUIREMENTS_DECLARATION_FILE_RE = /^(?:requirements(?:-.*)?|(?:dev|test|lint)-requirements)\.(?:txt|in)$/i;
+const REQUIREMENTS_LOCK_FILE_RE = /^(?:requirements(?:-.*)?|(?:dev|test|lint)-requirements)\.txt$/i;
+const DEV_REQUIREMENTS_FILE_RE = /^(?:requirements-(?:test|dev|lint)|(?:dev|test|lint)-requirements)\.(?:txt|in)$/i;
 const CONSTRAINTS_FILE_RE = /^constraints(-.*)?\.txt$/i;
 export async function readRootRequirementEvidence(rootPath, files) {
+    const context = {
+        rootPath,
+        fileSet: new Set(files.map((file) => normalizeRel(file.relativePath))),
+        seenRequirements: new Set(),
+        seenConstraints: new Set(),
+    };
     const evidence = {
         manifestFiles: [],
         declared: [],
         locked: [],
     };
-    await appendRootRequirements(evidence, rootPath, files);
-    await appendRootConstraints(evidence, rootPath, files);
+    await appendRootRequirements(evidence, context, files);
+    await appendRootConstraints(evidence, context, files);
     return evidence;
 }
-async function appendRootRequirements(evidence, rootPath, files) {
+async function appendRootRequirements(evidence, context, files) {
     for (const rel of rootRequirementFiles(files)) {
-        const content = await tryRead(path.join(rootPath, rel));
-        if (content === null)
-            continue;
-        evidence.manifestFiles.push(rel);
-        const isDev = /requirements(-test|-dev|-lint)\.txt$/i.test(rel);
-        const deps = parseRequirements(content, rel, isDev ? 'dev' : 'main');
-        evidence.declared.push(...deps);
-        evidence.locked.push(...deps.flatMap(requirementPinToLockedDep));
+        const isDev = DEV_REQUIREMENTS_FILE_RE.test(path.basename(rel));
+        await appendRequirementFile(evidence, context, rel, isDev ? 'dev' : 'main');
     }
 }
-async function appendRootConstraints(evidence, rootPath, files) {
+async function appendRootConstraints(evidence, context, files) {
     for (const rel of rootConstraintFiles(files)) {
-        const content = await tryRead(path.join(rootPath, rel));
-        if (content === null)
-            continue;
-        const deps = parseRequirements(content, rel, 'main');
+        await appendConstraintFile(evidence, context, rel);
+    }
+}
+async function appendRequirementFile(evidence, context, rel, scope) {
+    const normalized = normalizeRel(rel);
+    if (context.seenRequirements.has(normalized))
+        return;
+    context.seenRequirements.add(normalized);
+    const content = await readScannedFile(context, normalized);
+    if (content === null)
+        return;
+    pushUnique(evidence.manifestFiles, normalized);
+    const deps = parseRequirements(content, normalized, scope);
+    evidence.declared.push(...deps);
+    if (isRequirementsLockFile(normalized)) {
         evidence.locked.push(...deps.flatMap(requirementPinToLockedDep));
     }
+    for (const include of parseRequirementIncludes(content, normalized)) {
+        if (include.kind === 'requirement') {
+            await appendRequirementFile(evidence, context, include.relativePath, scope);
+        }
+        else {
+            await appendConstraintFile(evidence, context, include.relativePath);
+        }
+    }
+}
+async function appendConstraintFile(evidence, context, rel) {
+    const normalized = normalizeRel(rel);
+    if (context.seenConstraints.has(normalized))
+        return;
+    context.seenConstraints.add(normalized);
+    const content = await readScannedFile(context, normalized);
+    if (content === null)
+        return;
+    const deps = parseRequirements(content, normalized, 'main');
+    evidence.locked.push(...deps.flatMap(requirementPinToLockedDep));
+    for (const include of parseRequirementIncludes(content, normalized)) {
+        if (include.kind === 'constraint') {
+            await appendConstraintFile(evidence, context, include.relativePath);
+        }
+    }
 }
 function rootRequirementFiles(files) {
     return files.filter(isRootRequirementsFile).map((file) => file.relativePath);
@@ -41,7 +78,7 @@ function rootConstraintFiles(files) {
     return files.filter(isRootConstraintsFile).map((file) => file.relativePath);
 }
 function isRootRequirementsFile(file) {
-    return isRootFile(file) && REQUIREMENTS_FILE_RE.test(path.basename(file.relativePath));
+    return isRootFile(file) && REQUIREMENTS_DECLARATION_FILE_RE.test(path.basename(file.relativePath));
 }
 function isRootConstraintsFile(file) {
     return isRootFile(file) && CONSTRAINTS_FILE_RE.test(path.basename(file.relativePath));
@@ -49,6 +86,14 @@ function isRootConstraintsFile(file) {
 function isRootFile(file) {
     return !file.directory || file.directory === '.';
 }
+function isRequirementsLockFile(rel) {
+    return REQUIREMENTS_LOCK_FILE_RE.test(path.basename(rel));
+}
+async function readScannedFile(context, relativePath) {
+    if (!context.fileSet.has(relativePath))
+        return null;
+    return tryRead(path.join(context.rootPath, relativePath.split('/').join(path.sep)));
+}
 async function tryRead(absolutePath) {
     try {
         return await fs.readFile(absolutePath, 'utf-8');
@@ -74,6 +119,87 @@ export function parseRequirements(content, sourceFile, scope) {
     }
     return out;
 }
+function parseRequirementIncludes(content, sourceFile) {
+    const out = [];
+    for (const raw of content.split('\n')) {
+        const stripped = cleanRequirementLine(raw);
+        if (!stripped)
+            continue;
+        const parsed = requirementIncludeTarget(stripped, sourceFile);
+        if (parsed)
+            out.push(parsed);
+    }
+    return out;
+}
+function requirementIncludeTarget(line, sourceFile) {
+    const requirement = directiveTarget(line, '-r', '--requirement');
+    if (requirement) {
+        return safeRequirementInclude('requirement', sourceFile, requirement);
+    }
+    const constraint = directiveTarget(line, '-c', '--constraint');
+    if (constraint) {
+        return safeRequirementInclude('constraint', sourceFile, constraint);
+    }
+    return null;
+}
+function directiveTarget(line, shortFlag, longFlag) {
+    return (spacedDirectiveTarget(line, shortFlag) ??
+        compactShortDirectiveTarget(line, shortFlag) ??
+        spacedDirectiveTarget(line, longFlag) ??
+        equalsDirectiveTarget(line, longFlag));
+}
+function spacedDirectiveTarget(line, flag) {
+    return line.startsWith(`${flag} `) ? firstDirectiveToken(line.slice(flag.length).trim()) : null;
+}
+function compactShortDirectiveTarget(line, flag) {
+    const target = line.slice(flag.length).trim();
+    return line.startsWith(flag) && target && !target.startsWith('-')
+        ? firstDirectiveToken(target)
+        : null;
+}
+function equalsDirectiveTarget(line, flag) {
+    return line.startsWith(`${flag}=`) ? firstDirectiveToken(line.slice(flag.length + 1).trim()) : null;
+}
+function firstDirectiveToken(value) {
+    const match = /^(['"])(.*?)\1(?:\s|$)/.exec(value);
+    if (match)
+        return match[2];
+    return value.split(/\s+/)[0] || null;
+}
+function safeRequirementInclude(kind, sourceFile, target) {
+    if (!isLocalRequirementTarget(target))
+        return null;
+    const relativePath = resolveRequirementInclude(sourceFile, target);
+    return relativePath ? { kind, relativePath } : null;
+}
+function isLocalRequirementTarget(target) {
+    return Boolean(target) && !target.includes('\0') && !path.isAbsolute(target) && !isUrlLike(target);
+}
+function isUrlLike(target) {
+    return /^[a-z][a-z+.-]*:/i.test(target);
+}
+function resolveRequirementInclude(sourceFile, target) {
+    const sourceDir = path.posix.dirname(normalizeRel(sourceFile));
+    const baseDir = sourceDir === '.' ? '' : sourceDir;
+    const normalized = normalizeRel(path.posix.normalize(path.posix.join(baseDir, target)));
+    return isRepoRelativePath(normalized) ? normalized : null;
+}
+function isRepoRelativePath(relativePath) {
+    return (Boolean(relativePath) &&
+        relativePath !== '.' &&
+        relativePath !== '..' &&
+        !relativePath.startsWith('../'));
+}
+function cleanRequirementLine(raw) {
+    return raw.replace(/\s+#.*$/, '').trim();
+}
+function normalizeRel(rel) {
+    return rel.split(path.sep).join('/');
+}
+function pushUnique(arr, value) {
+    if (!arr.includes(value))
+        arr.push(value);
+}
 function exactVersionFromSpec(version) {
     return /^={2,3}\s*([^\s,;]+)/.exec(version)?.[1] ?? null;
 }

package/dist/core/languages/pythonRequirements.js.map

@@ -1 +1 @@
-{"version":3,"file":"pythonRequirements.js","sourceRoot":"","sources":["../../../src/core/languages/pythonRequirements.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,kBAAkB,CAAC;AAClC,OAAO,IAAI,MAAM,WAAW,CAAC;AAG7B,OAAO,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAEhD,MAAM,oBAAoB,GAAG,4BAA4B,CAAC;AAC1D,MAAM,mBAAmB,GAAG,2BAA2B,CAAC;AAQxD,MAAM,CAAC,KAAK,UAAU,2BAA2B,CAC/C,QAAgB,EAChB,KAAkB;IAElB,MAAM,QAAQ,GAA8B;QAC1C,aAAa,EAAE,EAAE;QACjB,QAAQ,EAAE,EAAE;QACZ,MAAM,EAAE,EAAE;KACX,CAAC;IAEF,MAAM,sBAAsB,CAAC,QAAQ,EAAE,QAAQ,EAAE,KAAK,CAAC,CAAC;IACxD,MAAM,qBAAqB,CAAC,QAAQ,EAAE,QAAQ,EAAE,KAAK,CAAC,CAAC;IAEvD,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,KAAK,UAAU,sBAAsB,CACnC,QAAmC,EACnC,QAAgB,EAChB,KAAkB;IAElB,KAAK,MAAM,GAAG,IAAI,oBAAoB,CAAC,KAAK,CAAC,EAAE,CAAC;QAC9C,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC,CAAC;QACxD,IAAI,OAAO,KAAK,IAAI;YAAE,SAAS;QAC/B,QAAQ,CAAC,aAAa,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACjC,MAAM,KAAK,GAAG,uCAAuC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAChE,MAAM,IAAI,GAAG,iBAAiB,CAAC,OAAO,EAAE,GAAG,EAAE,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;QACrE,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,CAAC;QAChC,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,yBAAyB,CAAC,CAAC,CAAC;IACnE,CAAC;AACH,CAAC;AAED,KAAK,UAAU,qBAAqB,CAClC,QAAmC,EACnC,QAAgB,EAChB,KAAkB;IAElB,KAAK,MAAM,GAAG,IAAI,mBAAmB,CAAC,KAAK,CAAC,EAAE,CAAC;QAC7C,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC,CAAC;QACxD,IAAI,OAAO,KAAK,IAAI;YAAE,SAAS;QAC/B,MAAM,IAAI,GAAG,iBAAiB,CAAC,OAAO,EAAE,GAAG,EAAE,MAAM,CAAC,CAAC;QACrD,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,yBAAyB,CAAC,CAAC,CAAC;IACnE,CAAC;AACH,CAAC;AAED,SAAS,oBAAoB,CAAC,KAAkB;IAC9C,OAAO,KAAK,CAAC,MAAM,CAAC,sBAAsB,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;AAC/E,CAAC;AAED,SAAS,mBAAmB,CAAC,KAAkB;IAC7C,OAAO,KAAK,CAAC,MAAM,CAAC,qBAAqB,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;AAC9E,CAAC;AAED,SAAS,sBAAsB,CAAC,IAAe;IAC7C,OAAO,UAAU,CAAC,IAAI,CAAC,IAAI,oBAAoB,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC;AACzF,CAAC;AAED,SAAS,qBAAqB,CAAC,IAAe;IAC5C,OAAO,UAAU,CAAC,IAAI,CAAC,IAAI,mBAAmB,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC;AACxF,CAAC;AAED,SAAS,UAAU,CAAC,IAAe;IACjC,OAAO,CAAC,IAAI,CAAC,SAAS,IAAI,IAAI,CAAC,SAAS,KAAK,GAAG,CAAC;AACnD,CAAC;AAED,KAAK,UAAU,OAAO,CAAC,YAAoB;IACzC,IAAI,CAAC;QACH,OAAO,MAAM,EAAE,CAAC,QAAQ,CAAC,YAAY,EAAE,OAAO,CAAC,CAAC;IAClD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,MAAM,UAAU,iBAAiB,CAC/B,OAAe,EACf,UAAkB,EAClB,KAAqB;IAErB,MAAM,GAAG,GAAwB,EAAE,CAAC;IACpC,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAClC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACtC,MAAM,GAAG,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;QACrB,MAAM,QAAQ,GAAG,GAAG,CAAC,OAAO,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;QACnD,IAAI,CAAC,QAAQ,IAAI,QAAQ,CAAC,UAAU,CAAC,GAAG,CAAC;YAAE,SAAS;QACpD,IAAI,QAAQ,CAAC,UAAU,CAAC,GAAG,CAAC;YAAE,SAAS,CAAC,mBAAmB;QAC3D,MAAM,EAAE,IAAI,EAAE,WAAW,EAAE,GAAG,WAAW,CAAC,QAAQ,CAAC,CAAC;QACpD,IAAI,CAAC,IAAI;YAAE,SAAS;QACpB,GAAG,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,MAAM,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC,GAAG,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC;IAC1E,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,SAAS,oBAAoB,CAAC,OAAe;IAC3C,OAAO,sBAAsB,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC;AAC3D,CAAC;AAED,SAAS,yBAAyB,CAAC,GAAsB;IACvD,MAAM,OAAO,GAAG,oBAAoB,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;IACtD,IAAI,CAAC,OAAO;QAAE,OAAO,EAAE,CAAC;IACxB,OAAO,CAAC,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC;AAC3E,CAAC"}
+{"version":3,"file":"pythonRequirements.js","sourceRoot":"","sources":["../../../src/core/languages/pythonRequirements.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,kBAAkB,CAAC;AAClC,OAAO,IAAI,MAAM,WAAW,CAAC;AAG7B,OAAO,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAEhD,MAAM,gCAAgC,GACpC,wEAAwE,CAAC;AAC3E,MAAM,yBAAyB,GAAG,iEAAiE,CAAC;AACpG,MAAM,wBAAwB,GAC5B,kFAAkF,CAAC;AACrF,MAAM,mBAAmB,GAAG,2BAA2B,CAAC;AAQxD,MAAM,CAAC,KAAK,UAAU,2BAA2B,CAC/C,QAAgB,EAChB,KAAkB;IAElB,MAAM,OAAO,GAA2B;QACtC,QAAQ;QACR,OAAO,EAAE,IAAI,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC;QACtE,gBAAgB,EAAE,IAAI,GAAG,EAAE;QAC3B,eAAe,EAAE,IAAI,GAAG,EAAE;KAC3B,CAAC;IACF,MAAM,QAAQ,GAA8B;QAC1C,aAAa,EAAE,EAAE;QACjB,QAAQ,EAAE,EAAE;QACZ,MAAM,EAAE,EAAE;KACX,CAAC;IAEF,MAAM,sBAAsB,CAAC,QAAQ,EAAE,OAAO,EAAE,KAAK,CAAC,CAAC;IACvD,MAAM,qBAAqB,CAAC,QAAQ,EAAE,OAAO,EAAE,KAAK,CAAC,CAAC;IAEtD,OAAO,QAAQ,CAAC;AAClB,CAAC;AASD,KAAK,UAAU,sBAAsB,CACnC,QAAmC,EACnC,OAA+B,EAC/B,KAAkB;IAElB,KAAK,MAAM,GAAG,IAAI,oBAAoB,CAAC,KAAK,CAAC,EAAE,CAAC;QAC9C,MAAM,KAAK,GAAG,wBAAwB,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC;QAChE,MAAM,qBAAqB,CAAC,QAAQ,EAAE,OAAO,EAAE,GAAG,EAAE,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;IAC9E,CAAC;AACH,CAAC;AAED,KAAK,UAAU,qBAAqB,CAClC,QAAmC,EACnC,OAA+B,EAC/B,KAAkB;IAElB,KAAK,MAAM,GAAG,IAAI,mBAAmB,CAAC,KAAK,CAAC,EAAE,CAAC;QAC7C,MAAM,oBAAoB,CAAC,QAAQ,EAAE,OAAO,EAAE,GAAG,CAAC,CAAC;IACrD,CAAC;AACH,CAAC;AAED,KAAK,UAAU,qBAAqB,CAClC,QAAmC,EACnC,OAA+B,EAC/B,GAAW,EACX,KAAqB;IAErB,MAAM,UAAU,GAAG,YAAY,CAAC,GAAG,CAAC,CAAC;IACrC,IAAI,OAAO,CAAC,gBAAgB,CAAC,GAAG,CAAC,UAAU,CAAC;QAAE,OAAO;IACrD,OAAO,CAAC,gBAAgB,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;IAEzC,MAAM,OAAO,GAAG,MAAM,eAAe,CAAC,OAAO,EAAE,UAAU,CAAC,CAAC;IAC3D,IAAI,OAAO,KAAK,IAAI;QAAE,OAAO;IAE7B,UAAU,CAAC,QAAQ,CAAC,aAAa,EAAE,UAAU,CAAC,CAAC;IAC/C,MAAM,IAAI,GAAG,iBAAiB,CAAC,OAAO,EAAE,UAAU,EAAE,KAAK,CAAC,CAAC;IAC3D,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,CAAC;IAChC,IAAI,sBAAsB,CAAC,UAAU,CAAC,EAAE,CAAC;QACvC,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,yBAAyB,CAAC,CAAC,CAAC;IACnE,CAAC;IAED,KAAK,MAAM,OAAO,IAAI,wBAAwB,CAAC,OAAO,EAAE,UAAU,CAAC,EAAE,CAAC;QACpE,IAAI,OAAO,CAAC,IAAI,KAAK,aAAa,EAAE,CAAC;YACnC,MAAM,qBAAqB,CAAC,QAAQ,EAAE,OAAO,EAAE,OAAO,CAAC,YAAY,EAAE,KAAK,CAAC,CAAC;QAC9E,CAAC;aAAM,CAAC;YACN,MAAM,oBAAoB,CAAC,QAAQ,EAAE,OAAO,EAAE,OAAO,CAAC,YAAY,CAAC,CAAC;QACtE,CAAC;IACH,CAAC;AACH,CAAC;AAED,KAAK,UAAU,oBAAoB,CACjC,QAAmC,EACnC,OAA+B,EAC/B,GAAW;IAEX,MAAM,UAAU,GAAG,YAAY,CAAC,GAAG,CAAC,CAAC;IACrC,IAAI,OAAO,CAAC,eAAe,CAAC,GAAG,CAAC,UAAU,CAAC;QAAE,OAAO;IACpD,OAAO,CAAC,eAAe,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;IAExC,MAAM,OAAO,GAAG,MAAM,eAAe,CAAC,OAAO,EAAE,UAAU,CAAC,CAAC;IAC3D,IAAI,OAAO,KAAK,IAAI;QAAE,OAAO;IAE7B,MAAM,IAAI,GAAG,iBAAiB,CAAC,OAAO,EAAE,UAAU,EAAE,MAAM,CAAC,CAAC;IAC5D,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,yBAAyB,CAAC,CAAC,CAAC;IAEjE,KAAK,MAAM,OAAO,IAAI,wBAAwB,CAAC,OAAO,EAAE,UAAU,CAAC,EAAE,CAAC;QACpE,IAAI,OAAO,CAAC,IAAI,KAAK,YAAY,EAAE,CAAC;YAClC,MAAM,oBAAoB,CAAC,QAAQ,EAAE,OAAO,EAAE,OAAO,CAAC,YAAY,CAAC,CAAC;QACtE,CAAC;IACH,CAAC;AACH,CAAC;AAED,SAAS,oBAAoB,CAAC,KAAkB;IAC9C,OAAO,KAAK,CAAC,MAAM,CAAC,sBAAsB,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;AAC/E,CAAC;AAED,SAAS,mBAAmB,CAAC,KAAkB;IAC7C,OAAO,KAAK,CAAC,MAAM,CAAC,qBAAqB,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;AAC9E,CAAC;AAED,SAAS,sBAAsB,CAAC,IAAe;IAC7C,OAAO,UAAU,CAAC,IAAI,CAAC,IAAI,gCAAgC,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC;AACrG,CAAC;AAED,SAAS,qBAAqB,CAAC,IAAe;IAC5C,OAAO,UAAU,CAAC,IAAI,CAAC,IAAI,mBAAmB,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC;AACxF,CAAC;AAED,SAAS,UAAU,CAAC,IAAe;IACjC,OAAO,CAAC,IAAI,CAAC,SAAS,IAAI,IAAI,CAAC,SAAS,KAAK,GAAG,CAAC;AACnD,CAAC;AAED,SAAS,sBAAsB,CAAC,GAAW;IACzC,OAAO,yBAAyB,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC;AAC5D,CAAC;AAED,KAAK,UAAU,eAAe,CAC5B,OAA+B,EAC/B,YAAoB;IAEpB,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,YAAY,CAAC;QAAE,OAAO,IAAI,CAAC;IACpD,OAAO,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,YAAY,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;AACtF,CAAC;AAED,KAAK,UAAU,OAAO,CAAC,YAAoB;IACzC,IAAI,CAAC;QACH,OAAO,MAAM,EAAE,CAAC,QAAQ,CAAC,YAAY,EAAE,OAAO,CAAC,CAAC;IAClD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,MAAM,UAAU,iBAAiB,CAC/B,OAAe,EACf,UAAkB,EAClB,KAAqB;IAErB,MAAM,GAAG,GAAwB,EAAE,CAAC;IACpC,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAClC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACtC,MAAM,GAAG,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;QACrB,MAAM,QAAQ,GAAG,GAAG,CAAC,OAAO,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;QACnD,IAAI,CAAC,QAAQ,IAAI,QAAQ,CAAC,UAAU,CAAC,GAAG,CAAC;YAAE,SAAS;QACpD,IAAI,QAAQ,CAAC,UAAU,CAAC,GAAG,CAAC;YAAE,SAAS,CAAC,mBAAmB;QAC3D,MAAM,EAAE,IAAI,EAAE,WAAW,EAAE,GAAG,WAAW,CAAC,QAAQ,CAAC,CAAC;QACpD,IAAI,CAAC,IAAI;YAAE,SAAS;QACpB,GAAG,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,MAAM,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC,GAAG,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC;IAC1E,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAOD,SAAS,wBAAwB,CAAC,OAAe,EAAE,UAAkB;IACnE,MAAM,GAAG,GAAyB,EAAE,CAAC;IACrC,KAAK,MAAM,GAAG,IAAI,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;QACtC,MAAM,QAAQ,GAAG,oBAAoB,CAAC,GAAG,CAAC,CAAC;QAC3C,IAAI,CAAC,QAAQ;YAAE,SAAS;QACxB,MAAM,MAAM,GAAG,wBAAwB,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC;QAC9D,IAAI,MAAM;YAAE,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IAC/B,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,SAAS,wBAAwB,CAAC,IAAY,EAAE,UAAkB;IAChE,MAAM,WAAW,GAAG,eAAe,CAAC,IAAI,EAAE,IAAI,EAAE,eAAe,CAAC,CAAC;IACjE,IAAI,WAAW,EAAE,CAAC;QAChB,OAAO,sBAAsB,CAAC,aAAa,EAAE,UAAU,EAAE,WAAW,CAAC,CAAC;IACxE,CAAC;IAED,MAAM,UAAU,GAAG,eAAe,CAAC,IAAI,EAAE,IAAI,EAAE,cAAc,CAAC,CAAC;IAC/D,IAAI,UAAU,EAAE,CAAC;QACf,OAAO,sBAAsB,CAAC,YAAY,EAAE,UAAU,EAAE,UAAU,CAAC,CAAC;IACtE,CAAC;IAED,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,eAAe,CAAC,IAAY,EAAE,SAAiB,EAAE,QAAgB;IACxE,OAAO,CACL,qBAAqB,CAAC,IAAI,EAAE,SAAS,CAAC;QACtC,2BAA2B,CAAC,IAAI,EAAE,SAAS,CAAC;QAC5C,qBAAqB,CAAC,IAAI,EAAE,QAAQ,CAAC;QACrC,qBAAqB,CAAC,IAAI,EAAE,QAAQ,CAAC,CACtC,CAAC;AACJ,CAAC;AAED,SAAS,qBAAqB,CAAC,IAAY,EAAE,IAAY;IACvD,OAAO,IAAI,CAAC,UAAU,CAAC,GAAG,IAAI,GAAG,CAAC,CAAC,CAAC,CAAC,mBAAmB,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;AAClG,CAAC;AAED,SAAS,2BAA2B,CAAC,IAAY,EAAE,IAAY;IAC7D,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC;IAC9C,OAAO,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,MAAM,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,GAAG,CAAC;QAC/D,CAAC,CAAC,mBAAmB,CAAC,MAAM,CAAC;QAC7B,CAAC,CAAC,IAAI,CAAC;AACX,CAAC;AAED,SAAS,qBAAqB,CAAC,IAAY,EAAE,IAAY;IACvD,OAAO,IAAI,CAAC,UAAU,CAAC,GAAG,IAAI,GAAG,CAAC,CAAC,CAAC,CAAC,mBAAmB,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;AACtG,CAAC;AAED,SAAS,mBAAmB,CAAC,KAAa;IACxC,MAAM,KAAK,GAAG,wBAAwB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACnD,IAAI,KAAK;QAAE,OAAO,KAAK,CAAC,CAAC,CAAC,CAAC;IAC3B,OAAO,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC;AACvC,CAAC;AAED,SAAS,sBAAsB,CAC7B,IAAgC,EAChC,UAAkB,EAClB,MAAc;IAEd,IAAI,CAAC,wBAAwB,CAAC,MAAM,CAAC;QAAE,OAAO,IAAI,CAAC;IACnD,MAAM,YAAY,GAAG,yBAAyB,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC;IACnE,OAAO,YAAY,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,YAAY,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;AACtD,CAAC;AAED,SAAS,wBAAwB,CAAC,MAAc;IAC9C,OAAO,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;AACrG,CAAC;AAED,SAAS,SAAS,CAAC,MAAc;IAC/B,OAAO,mBAAmB,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;AAC1C,CAAC;AAED,SAAS,yBAAyB,CAAC,UAAkB,EAAE,MAAc;IACnE,MAAM,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,YAAY,CAAC,UAAU,CAAC,CAAC,CAAC;IAC/D,MAAM,OAAO,GAAG,SAAS,KAAK,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;IACnD,MAAM,UAAU,GAAG,YAAY,CAAC,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC;IACxF,OAAO,kBAAkB,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC;AAC5D,CAAC;AAED,SAAS,kBAAkB,CAAC,YAAoB;IAC9C,OAAO,CACL,OAAO,CAAC,YAAY,CAAC;QACrB,YAAY,KAAK,GAAG;QACpB,YAAY,KAAK,IAAI;QACrB,CAAC,YAAY,CAAC,UAAU,CAAC,KAAK,CAAC,CAChC,CAAC;AACJ,CAAC;AAED,SAAS,oBAAoB,CAAC,GAAW;IACvC,OAAO,GAAG,CAAC,OAAO,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;AAC3C,CAAC;AAED,SAAS,YAAY,CAAC,GAAW;IAC/B,OAAO,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AACvC,CAAC;AAED,SAAS,UAAU,CAAC,GAAa,EAAE,KAAa;IAC9C,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC;QAAE,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;AAC5C,CAAC;AAED,SAAS,oBAAoB,CAAC,OAAe;IAC3C,OAAO,sBAAsB,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC;AAC3D,CAAC;AAED,SAAS,yBAAyB,CAAC,GAAsB;IACvD,MAAM,OAAO,GAAG,oBAAoB,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;IACtD,IAAI,CAAC,OAAO;QAAE,OAAO,EAAE,CAAC;IACxB,OAAO,CAAC,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC;AAC3E,CAAC"}

package/dist/core/pluginManifestValidation.d.ts

@@ -0,0 +1,41 @@
+export declare const PLUGIN_SCHEMA_VERSION = 1;
+export type PluginKind = 'analyzer' | 'reporter';
+export type PluginReporterCommand = 'doctor' | 'analyze' | 'ci';
+export declare const PLUGIN_REPORTER_COMMANDS: readonly ["doctor", "analyze", "ci"];
+interface PluginManifestBase {
+    schemaVersion: number;
+    name: string;
+    kind: PluginKind;
+    /** Module entry point, relative to the manifest file. */
+    module: string;
+    /** Optional human-readable summary. */
+    description?: string;
+}
+export interface PluginAnalyzerManifest extends PluginManifestBase {
+    kind: 'analyzer';
+    /** Issue category emitted by this plugin (`Issue.category`). */
+    category: string;
+}
+export interface PluginReporterManifest extends PluginManifestBase {
+    kind: 'reporter';
+    /** CLI commands this reporter can render. */
+    commands: PluginReporterCommand[];
+}
+export type PluginManifest = PluginAnalyzerManifest | PluginReporterManifest;
+export interface PluginDiagnostic {
+    code: 'invalid-manifest' | 'unsupported-schema-version' | 'invalid-name' | 'unsupported-kind' | 'invalid-module' | 'invalid-category' | 'invalid-commands' | 'invalid-description' | 'invalid-manifest-path' | 'invalid-json' | 'read-error' | 'plugins-disabled' | 'reporter-not-found' | 'reporter-unsupported-command' | 'invalid-reporter-export' | 'reporter-load-error' | 'reporter-render-error' | 'plugin-untrusted';
+    message: string;
+    field?: string;
+    hint?: string;
+}
+interface ValidationOk {
+    ok: true;
+    manifest: PluginManifest;
+}
+interface ValidationFail {
+    ok: false;
+    reason: string;
+    diagnostic: PluginDiagnostic;
+}
+export declare function validateManifest(input: unknown): ValidationOk | ValidationFail;
+export {};

package/dist/core/pluginManifestValidation.js

@@ -0,0 +1,179 @@
+import path from 'node:path';
+export const PLUGIN_SCHEMA_VERSION = 1;
+export const PLUGIN_REPORTER_COMMANDS = ['doctor', 'analyze', 'ci'];
+const BASE_MANIFEST_DIAGNOSTICS = [
+    schemaVersionDiagnostic,
+    nameDiagnostic,
+    kindDiagnostic,
+    moduleDiagnostic,
+    descriptionDiagnostic,
+];
+export function validateManifest(input) {
+    const validation = validateManifestBase(input);
+    if (!validation.ok)
+        return validation;
+    return validation.base.kind === 'analyzer'
+        ? validateAnalyzerManifest(validation.obj, validation.base)
+        : validateReporterManifest(validation.obj, validation.base);
+}
+function validateManifestBase(input) {
+    const objectValidation = validateManifestObject(input);
+    if (!objectValidation.ok)
+        return objectValidation;
+    const diagnostic = BASE_MANIFEST_DIAGNOSTICS.map((check) => check(objectValidation.obj)).find((item) => item !== null);
+    if (diagnostic)
+        return failValidation(diagnostic);
+    return {
+        ok: true,
+        obj: objectValidation.obj,
+        base: manifestBaseFromObject(objectValidation.obj),
+    };
+}
+function validateManifestObject(input) {
+    if (input && typeof input === 'object')
+        return { ok: true, obj: input };
+    return failValidation({
+        code: 'invalid-manifest',
+        message: 'manifest must be a JSON object',
+        hint: 'Use an object with schemaVersion, name, kind, module, and category fields.',
+    });
+}
+function manifestBaseFromObject(obj) {
+    return {
+        schemaVersion: PLUGIN_SCHEMA_VERSION,
+        name: obj.name,
+        kind: obj.kind,
+        module: obj.module,
+        ...(typeof obj.description === 'string' ? { description: obj.description } : {}),
+    };
+}
+function schemaVersionDiagnostic(obj) {
+    if (obj.schemaVersion === PLUGIN_SCHEMA_VERSION)
+        return null;
+    return {
+        code: 'unsupported-schema-version',
+        field: 'schemaVersion',
+        message: `unsupported schemaVersion ${String(obj.schemaVersion)}; expected ${PLUGIN_SCHEMA_VERSION}`,
+        hint: `Set "schemaVersion": ${PLUGIN_SCHEMA_VERSION}.`,
+    };
+}
+function nameDiagnostic(obj) {
+    if (typeof obj.name === 'string' && /^[a-z0-9][a-z0-9._/-]{0,64}$/i.test(obj.name))
+        return null;
+    return {
+        code: 'invalid-name',
+        field: 'name',
+        message: 'name is required and must be 1-65 chars of [a-z0-9._/-]',
+        hint: 'Use a stable 1-65 character plugin id such as "team/no-console" or "my-plugin".',
+    };
+}
+function kindDiagnostic(obj) {
+    if (obj.kind === 'analyzer' || obj.kind === 'reporter')
+        return null;
+    return {
+        code: 'unsupported-kind',
+        field: 'kind',
+        message: 'kind must be "analyzer" or "reporter"',
+        hint: 'Set "kind": "analyzer" for issue-producing plugins or "kind": "reporter" for CLI output plugins.',
+    };
+}
+function moduleDiagnostic(obj) {
+    if (typeof obj.module !== 'string' || obj.module.length === 0) {
+        return {
+            code: 'invalid-module',
+            field: 'module',
+            message: 'module is required and must be a relative path',
+            hint: 'Point to a local module inside the same plugin directory, for example "./check.mjs".',
+        };
+    }
+    if (path.isAbsolute(obj.module) || obj.module.split(/[/\\]/).some((seg) => seg === '..')) {
+        return {
+            code: 'invalid-module',
+            field: 'module',
+            message: 'module must be a relative path inside the plugin dir',
+            hint: 'Do not use absolute paths or any ".." path segment.',
+        };
+    }
+    return null;
+}
+function descriptionDiagnostic(obj) {
+    if (obj.description === undefined || typeof obj.description === 'string')
+        return null;
+    return {
+        code: 'invalid-description',
+        field: 'description',
+        message: 'description must be a string when provided',
+    };
+}
+function validateAnalyzerManifest(obj, base) {
+    if (typeof obj.category !== 'string' || obj.category.length === 0) {
+        return failValidation({
+            code: 'invalid-category',
+            field: 'category',
+            message: 'category is required for analyzer plugins',
+            hint: 'Use the fallback Issue.category for this plugin, for example "custom" or "security".',
+        });
+    }
+    return {
+        ok: true,
+        manifest: {
+            schemaVersion: base.schemaVersion,
+            name: base.name,
+            kind: 'analyzer',
+            module: base.module,
+            category: obj.category,
+            ...(base.description ? { description: base.description } : {}),
+        },
+    };
+}
+function validateReporterManifest(obj, base) {
+    const commandValidation = validateReporterCommands(obj.commands);
+    if (!commandValidation.ok)
+        return commandValidation;
+    return {
+        ok: true,
+        manifest: {
+            schemaVersion: base.schemaVersion,
+            name: base.name,
+            kind: 'reporter',
+            module: base.module,
+            commands: commandValidation.commands,
+            ...(base.description ? { description: base.description } : {}),
+        },
+    };
+}
+function validateReporterCommands(input) {
+    if (!Array.isArray(input) || input.length === 0) {
+        return failValidation({
+            code: 'invalid-commands',
+            field: 'commands',
+            message: 'commands must be a non-empty array for reporter plugins',
+            hint: 'Use one or more supported commands: doctor, analyze, ci.',
+        });
+    }
+    const seen = new Set();
+    const invalid = [];
+    for (const value of input) {
+        if (typeof value !== 'string' || !isReporterCommand(value)) {
+            invalid.push(String(value));
+            continue;
+        }
+        seen.add(value);
+    }
+    if (invalid.length > 0) {
+        return failValidation({
+            code: 'invalid-commands',
+            field: 'commands',
+            message: `unsupported reporter command(s): ${invalid.join(', ')}`,
+            hint: 'Supported reporter commands are: doctor, analyze, ci.',
+        });
+    }
+    return { ok: true, commands: [...seen] };
+}
+function isReporterCommand(value) {
+    return PLUGIN_REPORTER_COMMANDS.includes(value);
+}
+function failValidation(diagnostic) {
+    return { ok: false, reason: diagnostic.message, diagnostic };
+}
+//# sourceMappingURL=pluginManifestValidation.js.map

package/dist/core/pluginManifestValidation.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"pluginManifestValidation.js","sourceRoot":"","sources":["../../src/core/pluginManifestValidation.ts"],"names":[],"mappings":"AAAA,OAAO,IAAI,MAAM,WAAW,CAAC;AAE7B,MAAM,CAAC,MAAM,qBAAqB,GAAG,CAAC,CAAC;AAKvC,MAAM,CAAC,MAAM,wBAAwB,GAAG,CAAC,QAAQ,EAAE,SAAS,EAAE,IAAI,CAAU,CAAC;AA4E7E,MAAM,yBAAyB,GAA8B;IAC3D,uBAAuB;IACvB,cAAc;IACd,cAAc;IACd,gBAAgB;IAChB,qBAAqB;CACtB,CAAC;AAEF,MAAM,UAAU,gBAAgB,CAAC,KAAc;IAC7C,MAAM,UAAU,GAAG,oBAAoB,CAAC,KAAK,CAAC,CAAC;IAC/C,IAAI,CAAC,UAAU,CAAC,EAAE;QAAE,OAAO,UAAU,CAAC;IACtC,OAAO,UAAU,CAAC,IAAI,CAAC,IAAI,KAAK,UAAU;QACxC,CAAC,CAAC,wBAAwB,CAAC,UAAU,CAAC,GAAG,EAAE,UAAU,CAAC,IAAI,CAAC;QAC3D,CAAC,CAAC,wBAAwB,CAAC,UAAU,CAAC,GAAG,EAAE,UAAU,CAAC,IAAI,CAAC,CAAC;AAChE,CAAC;AAED,SAAS,oBAAoB,CAAC,KAAc;IAC1C,MAAM,gBAAgB,GAAG,sBAAsB,CAAC,KAAK,CAAC,CAAC;IACvD,IAAI,CAAC,gBAAgB,CAAC,EAAE;QAAE,OAAO,gBAAgB,CAAC;IAClD,MAAM,UAAU,GAAG,yBAAyB,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,gBAAgB,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAC3F,CAAC,IAAI,EAA4B,EAAE,CAAC,IAAI,KAAK,IAAI,CAClD,CAAC;IACF,IAAI,UAAU;QAAE,OAAO,cAAc,CAAC,UAAU,CAAC,CAAC;IAClD,OAAO;QACL,EAAE,EAAE,IAAI;QACR,GAAG,EAAE,gBAAgB,CAAC,GAAG;QACzB,IAAI,EAAE,sBAAsB,CAAC,gBAAgB,CAAC,GAAG,CAAC;KACnD,CAAC;AACJ,CAAC;AAED,SAAS,sBAAsB,CAAC,KAAc;IAC5C,IAAI,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,GAAG,EAAE,KAAgC,EAAE,CAAC;IACnG,OAAO,cAAc,CAAC;QACpB,IAAI,EAAE,kBAAkB;QACxB,OAAO,EAAE,gCAAgC;QACzC,IAAI,EAAE,4EAA4E;KACnF,CAAC,CAAC;AACL,CAAC;AAED,SAAS,sBAAsB,CAAC,GAA4B;IAC1D,OAAO;QACL,aAAa,EAAE,qBAAqB;QACpC,IAAI,EAAE,GAAG,CAAC,IAAc;QACxB,IAAI,EAAE,GAAG,CAAC,IAAkB;QAC5B,MAAM,EAAE,GAAG,CAAC,MAAgB;QAC5B,GAAG,CAAC,OAAO,GAAG,CAAC,WAAW,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,GAAG,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACjF,CAAC;AACJ,CAAC;AAED,SAAS,uBAAuB,CAAC,GAA4B;IAC3D,IAAI,GAAG,CAAC,aAAa,KAAK,qBAAqB;QAAE,OAAO,IAAI,CAAC;IAC7D,OAAO;QACL,IAAI,EAAE,4BAA4B;QAClC,KAAK,EAAE,eAAe;QACtB,OAAO,EAAE,6BAA6B,MAAM,CAAC,GAAG,CAAC,aAAa,CAAC,cAAc,qBAAqB,EAAE;QACpG,IAAI,EAAE,wBAAwB,qBAAqB,GAAG;KACvD,CAAC;AACJ,CAAC;AAED,SAAS,cAAc,CAAC,GAA4B;IAClD,IAAI,OAAO,GAAG,CAAC,IAAI,KAAK,QAAQ,IAAI,+BAA+B,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IAChG,OAAO;QACL,IAAI,EAAE,cAAc;QACpB,KAAK,EAAE,MAAM;QACb,OAAO,EAAE,yDAAyD;QAClE,IAAI,EAAE,iFAAiF;KACxF,CAAC;AACJ,CAAC;AAED,SAAS,cAAc,CAAC,GAA4B;IAClD,IAAI,GAAG,CAAC,IAAI,KAAK,UAAU,IAAI,GAAG,CAAC,IAAI,KAAK,UAAU;QAAE,OAAO,IAAI,CAAC;IACpE,OAAO;QACL,IAAI,EAAE,kBAAkB;QACxB,KAAK,EAAE,MAAM;QACb,OAAO,EAAE,uCAAuC;QAChD,IAAI,EAAE,kGAAkG;KACzG,CAAC;AACJ,CAAC;AAED,SAAS,gBAAgB,CAAC,GAA4B;IACpD,IAAI,OAAO,GAAG,CAAC,MAAM,KAAK,QAAQ,IAAI,GAAG,CAAC,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC9D,OAAO;YACL,IAAI,EAAE,gBAAgB;YACtB,KAAK,EAAE,QAAQ;YACf,OAAO,EAAE,gDAAgD;YACzD,IAAI,EAAE,sFAAsF;SAC7F,CAAC;IACJ,CAAC;IACD,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,KAAK,IAAI,CAAC,EAAE,CAAC;QACzF,OAAO;YACL,IAAI,EAAE,gBAAgB;YACtB,KAAK,EAAE,QAAQ;YACf,OAAO,EAAE,sDAAsD;YAC/D,IAAI,EAAE,qDAAqD;SAC5D,CAAC;IACJ,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,qBAAqB,CAAC,GAA4B;IACzD,IAAI,GAAG,CAAC,WAAW,KAAK,SAAS,IAAI,OAAO,GAAG,CAAC,WAAW,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC;IACtF,OAAO;QACL,IAAI,EAAE,qBAAqB;QAC3B,KAAK,EAAE,aAAa;QACpB,OAAO,EAAE,4CAA4C;KACtD,CAAC;AACJ,CAAC;AAED,SAAS,wBAAwB,CAC/B,GAA4B,EAC5B,IAA6B;IAE7B,IAAI,OAAO,GAAG,CAAC,QAAQ,KAAK,QAAQ,IAAI,GAAG,CAAC,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAClE,OAAO,cAAc,CAAC;YACpB,IAAI,EAAE,kBAAkB;YACxB,KAAK,EAAE,UAAU;YACjB,OAAO,EAAE,2CAA2C;YACpD,IAAI,EAAE,sFAAsF;SAC7F,CAAC,CAAC;IACL,CAAC;IACD,OAAO;QACL,EAAE,EAAE,IAAI;QACR,QAAQ,EAAE;YACR,aAAa,EAAE,IAAI,CAAC,aAAa;YACjC,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,IAAI,EAAE,UAAU;YAChB,MAAM,EAAE,IAAI,CAAC,MAAM;YACnB,QAAQ,EAAE,GAAG,CAAC,QAAQ;YACtB,GAAG,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAC/D;KACF,CAAC;AACJ,CAAC;AAED,SAAS,wBAAwB,CAC/B,GAA4B,EAC5B,IAA6B;IAE7B,MAAM,iBAAiB,GAAG,wBAAwB,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IACjE,IAAI,CAAC,iBAAiB,CAAC,EAAE;QAAE,OAAO,iBAAiB,CAAC;IAEpD,OAAO;QACL,EAAE,EAAE,IAAI;QACR,QAAQ,EAAE;YACR,aAAa,EAAE,IAAI,CAAC,aAAa;YACjC,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,IAAI,EAAE,UAAU;YAChB,MAAM,EAAE,IAAI,CAAC,MAAM;YACnB,QAAQ,EAAE,iBAAiB,CAAC,QAAQ;YACpC,GAAG,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAC/D;KACF,CAAC;AACJ,CAAC;AAED,SAAS,wBAAwB,CAC/B,KAAc;IAEd,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAChD,OAAO,cAAc,CAAC;YACpB,IAAI,EAAE,kBAAkB;YACxB,KAAK,EAAE,UAAU;YACjB,OAAO,EAAE,yDAAyD;YAClE,IAAI,EAAE,0DAA0D;SACjE,CAAC,CAAC;IACL,CAAC;IAED,MAAM,IAAI,GAAG,IAAI,GAAG,EAAyB,CAAC;IAC9C,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,KAAK,MAAM,KAAK,IAAI,KAAK,EAAE,CAAC;QAC1B,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,iBAAiB,CAAC,KAAK,CAAC,EAAE,CAAC;YAC3D,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;YAC5B,SAAS;QACX,CAAC;QACD,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IAClB,CAAC;IACD,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACvB,OAAO,cAAc,CAAC;YACpB,IAAI,EAAE,kBAAkB;YACxB,KAAK,EAAE,UAAU;YACjB,OAAO,EAAE,oCAAoC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;YACjE,IAAI,EAAE,uDAAuD;SAC9D,CAAC,CAAC;IACL,CAAC;IACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,GAAG,IAAI,CAAC,EAAE,CAAC;AAC3C,CAAC;AAED,SAAS,iBAAiB,CAAC,KAAa;IACtC,OAAQ,wBAA8C,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;AACzE,CAAC;AAED,SAAS,cAAc,CAAC,UAA4B;IAClD,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,UAAU,CAAC,OAAO,EAAE,UAAU,EAAE,CAAC;AAC/D,CAAC"}

package/dist/core/plugins.d.ts

@@ -1,5 +1,6 @@
 import type { CodeGraph } from './codeGraph.js';
 import type { FileEntry, Issue, DataflowReport, SemanticGraphReport } from '../types.js';
+import type { PluginAnalyzerManifest, PluginDiagnostic, PluginManifest, PluginReporterCommand, PluginReporterManifest } from './pluginManifestValidation.js';
 /**
  * Stable local plugin API (2.0+).
  *
@@ -15,32 +16,10 @@ import type { FileEntry, Issue, DataflowReport, SemanticGraphReport } from '../t
  * discipline as the rest of projscan.
  */
 export declare const PLUGIN_PREVIEW_FLAG = "PROJSCAN_PLUGINS_PREVIEW";
-export declare const PLUGIN_SCHEMA_VERSION = 1;
 export declare const PLUGIN_DIR = ".projscan-plugins";
 export declare const PLUGIN_MANIFEST_EXT = ".projscan-plugin.json";
-export type PluginKind = 'analyzer' | 'reporter';
-export type PluginReporterCommand = 'doctor' | 'analyze' | 'ci';
-export declare const PLUGIN_REPORTER_COMMANDS: readonly ["doctor", "analyze", "ci"];
-interface PluginManifestBase {
-    schemaVersion: number;
-    name: string;
-    kind: PluginKind;
-    /** Module entry point, relative to the manifest file. */
-    module: string;
-    /** Optional human-readable summary. */
-    description?: string;
-}
-export interface PluginAnalyzerManifest extends PluginManifestBase {
-    kind: 'analyzer';
-    /** Issue category emitted by this plugin (`Issue.category`). */
-    category: string;
-}
-export interface PluginReporterManifest extends PluginManifestBase {
-    kind: 'reporter';
-    /** CLI commands this reporter can render. */
-    commands: PluginReporterCommand[];
-}
-export type PluginManifest = PluginAnalyzerManifest | PluginReporterManifest;
+export { PLUGIN_REPORTER_COMMANDS, PLUGIN_SCHEMA_VERSION, validateManifest, } from './pluginManifestValidation.js';
+export type { PluginAnalyzerManifest, PluginDiagnostic, PluginKind, PluginManifest, PluginReporterCommand, PluginReporterManifest, } from './pluginManifestValidation.js';
 export interface PluginAnalyzerContext {
     schemaVersion: 1;
     getCodeGraph: () => Promise<CodeGraph>;
@@ -133,20 +112,3 @@ export declare function renderReporterPlugin(plugin: LoadedReporterPlugin, conte
  * collide).
  */
 export declare function runAnalyzerPlugins(plugins: LoadedPlugin[], rootPath: string, files: FileEntry[], context?: PluginAnalyzerContext): Promise<Issue[]>;
-export interface PluginDiagnostic {
-    code: 'invalid-manifest' | 'unsupported-schema-version' | 'invalid-name' | 'unsupported-kind' | 'invalid-module' | 'invalid-category' | 'invalid-commands' | 'invalid-description' | 'invalid-manifest-path' | 'invalid-json' | 'read-error' | 'plugins-disabled' | 'reporter-not-found' | 'reporter-unsupported-command' | 'invalid-reporter-export' | 'reporter-load-error' | 'reporter-render-error' | 'plugin-untrusted';
-    message: string;
-    field?: string;
-    hint?: string;
-}
-interface ValidationOk {
-    ok: true;
-    manifest: PluginManifest;
-}
-interface ValidationFail {
-    ok: false;
-    reason: string;
-    diagnostic: PluginDiagnostic;
-}
-export declare function validateManifest(input: unknown): ValidationOk | ValidationFail;
-export {};