renma 0.17.0 → 0.18.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/CHANGELOG.md +123 -1
- package/README.md +11 -1
- package/architecture.md +14 -4
- package/design.md +13 -2
- package/dist/agent-skills.d.ts +1 -1
- package/dist/agent-skills.d.ts.map +1 -1
- package/dist/agent-skills.js +28 -8
- package/dist/agent-skills.js.map +1 -1
- package/dist/catalog.d.ts +1 -1
- package/dist/catalog.d.ts.map +1 -1
- package/dist/catalog.js +120 -12
- package/dist/catalog.js.map +1 -1
- package/dist/cli-help.d.ts +9 -5
- package/dist/cli-help.d.ts.map +1 -1
- package/dist/cli-help.js +9 -0
- package/dist/cli-help.js.map +1 -1
- package/dist/cli.d.ts.map +1 -1
- package/dist/cli.js +23 -0
- package/dist/cli.js.map +1 -1
- package/dist/commands/bom.d.ts +6 -3
- package/dist/commands/bom.d.ts.map +1 -1
- package/dist/commands/bom.js +27 -7
- package/dist/commands/bom.js.map +1 -1
- package/dist/commands/catalog.d.ts +1 -1
- package/dist/commands/catalog.d.ts.map +1 -1
- package/dist/commands/catalog.js +7 -1
- package/dist/commands/catalog.js.map +1 -1
- package/dist/commands/ci-report.d.ts.map +1 -1
- package/dist/commands/ci-report.js +18 -5
- package/dist/commands/ci-report.js.map +1 -1
- package/dist/commands/diff.js +8 -2
- package/dist/commands/diff.js.map +1 -1
- package/dist/commands/graph.d.ts +6 -2
- package/dist/commands/graph.d.ts.map +1 -1
- package/dist/commands/graph.js +23 -2
- package/dist/commands/graph.js.map +1 -1
- package/dist/commands/inspect.d.ts.map +1 -1
- package/dist/commands/inspect.js +2 -0
- package/dist/commands/inspect.js.map +1 -1
- package/dist/commands/ownership.d.ts +4 -3
- package/dist/commands/ownership.d.ts.map +1 -1
- package/dist/commands/ownership.js +27 -23
- package/dist/commands/ownership.js.map +1 -1
- package/dist/commands/readiness.d.ts +2 -1
- package/dist/commands/readiness.d.ts.map +1 -1
- package/dist/commands/readiness.js +98 -30
- package/dist/commands/readiness.js.map +1 -1
- package/dist/commands/scaffold.d.ts +3 -0
- package/dist/commands/scaffold.d.ts.map +1 -1
- package/dist/commands/scaffold.js +14 -0
- package/dist/commands/scaffold.js.map +1 -1
- package/dist/commands/suggest-metadata.d.ts.map +1 -1
- package/dist/commands/suggest-metadata.js +2 -0
- package/dist/commands/suggest-metadata.js.map +1 -1
- package/dist/commands/trust-graph.d.ts.map +1 -1
- package/dist/commands/trust-graph.js +12 -0
- package/dist/commands/trust-graph.js.map +1 -1
- package/dist/config.d.ts.map +1 -1
- package/dist/config.js +10 -3
- package/dist/config.js.map +1 -1
- package/dist/diagnostic-ids.d.ts +8 -0
- package/dist/diagnostic-ids.d.ts.map +1 -1
- package/dist/diagnostic-ids.js +8 -0
- package/dist/diagnostic-ids.js.map +1 -1
- package/dist/discovery.d.ts +5 -0
- package/dist/discovery.d.ts.map +1 -1
- package/dist/discovery.js +108 -65
- package/dist/discovery.js.map +1 -1
- package/dist/markdown.d.ts.map +1 -1
- package/dist/markdown.js +15 -0
- package/dist/markdown.js.map +1 -1
- package/dist/model.d.ts +17 -1
- package/dist/model.d.ts.map +1 -1
- package/dist/model.js +4 -1
- package/dist/model.js.map +1 -1
- package/dist/quality-profile.d.ts +91 -0
- package/dist/quality-profile.d.ts.map +1 -0
- package/dist/quality-profile.js +91 -0
- package/dist/quality-profile.js.map +1 -0
- package/dist/repeated-context.d.ts.map +1 -1
- package/dist/repeated-context.js +38 -83
- package/dist/repeated-context.js.map +1 -1
- package/dist/repository-boundary.d.ts +30 -0
- package/dist/repository-boundary.d.ts.map +1 -0
- package/dist/repository-boundary.js +116 -0
- package/dist/repository-boundary.js.map +1 -0
- package/dist/repository-evidence.d.ts +2 -0
- package/dist/repository-evidence.d.ts.map +1 -1
- package/dist/repository-evidence.js +6 -4
- package/dist/repository-evidence.js.map +1 -1
- package/dist/repository-paths.d.ts +6 -2
- package/dist/repository-paths.d.ts.map +1 -1
- package/dist/repository-paths.js +75 -24
- package/dist/repository-paths.js.map +1 -1
- package/dist/rules.d.ts +2 -0
- package/dist/rules.d.ts.map +1 -1
- package/dist/rules.js +263 -176
- package/dist/rules.js.map +1 -1
- package/dist/scanner.d.ts.map +1 -1
- package/dist/scanner.js +5 -1
- package/dist/scanner.js.map +1 -1
- package/dist/security-diagnostics.d.ts.map +1 -1
- package/dist/security-diagnostics.js +95 -30
- package/dist/security-diagnostics.js.map +1 -1
- package/dist/security-diff.d.ts +5 -2
- package/dist/security-diff.d.ts.map +1 -1
- package/dist/security-diff.js +20 -4
- package/dist/security-diff.js.map +1 -1
- package/dist/security-policy-inventory.d.ts +15 -3
- package/dist/security-policy-inventory.d.ts.map +1 -1
- package/dist/security-policy-inventory.js +123 -26
- package/dist/security-policy-inventory.js.map +1 -1
- package/dist/security-policy.d.ts +7 -0
- package/dist/security-policy.d.ts.map +1 -1
- package/dist/security-policy.js +70 -7
- package/dist/security-policy.js.map +1 -1
- package/dist/security-posture.d.ts.map +1 -1
- package/dist/security-posture.js +2 -1
- package/dist/security-posture.js.map +1 -1
- package/dist/skill-migration.js +2 -0
- package/dist/skill-migration.js.map +1 -1
- package/dist/static-support.d.ts +13 -0
- package/dist/static-support.d.ts.map +1 -0
- package/dist/static-support.js +284 -0
- package/dist/static-support.js.map +1 -0
- package/dist/token-estimator.d.ts +21 -0
- package/dist/token-estimator.d.ts.map +1 -0
- package/dist/token-estimator.js +84 -0
- package/dist/token-estimator.js.map +1 -0
- package/dist/trust-graph.d.ts +3 -3
- package/dist/trust-graph.d.ts.map +1 -1
- package/dist/trust-graph.js +69 -10
- package/dist/trust-graph.js.map +1 -1
- package/dist/types.d.ts +6 -1
- package/dist/types.d.ts.map +1 -1
- package/docs/README.md +13 -7
- package/docs/advanced-skill-authoring.md +16 -9
- package/docs/agent-skills-compatibility.md +10 -2
- package/docs/authoring-guide.md +62 -4
- package/docs/diagnostics.md +44 -11
- package/docs/quality-profile.md +123 -0
- package/docs/repository-context-bom.md +67 -8
- package/docs/schemas/repository-context-bom-v2.schema.json +648 -0
- package/docs/schemas/trust-graph-v2.schema.json +301 -0
- package/docs/security-policy.md +21 -5
- package/docs/trust-graph.md +47 -0
- package/docs/user-manual.md +34 -5
- package/examples/context-repo/README.md +6 -7
- package/examples/context-repo/contexts/domain/payment/idempotency.md +7 -0
- package/examples/context-repo/contexts/testing/boundary-value-analysis.md +7 -0
- package/examples/context-repo/contexts/testing/negative-testing.md +7 -0
- package/examples/context-repo/skills/testing/spec-review/SKILL.md +5 -0
- package/package.json +3 -1
- package/plan-discovery.md +24 -15
- package/plan.md +59 -119
- package/scripts/verify-package.mjs +8 -1
|
@@ -0,0 +1,116 @@
|
|
|
1
|
+
import { lstat, opendir } from "node:fs/promises";
|
|
2
|
+
import path from "node:path";
|
|
3
|
+
/** Walk repository files without ever following a symbolic link. */
|
|
4
|
+
export async function walkRepositoryFiles(root, options) {
|
|
5
|
+
const result = {
|
|
6
|
+
files: [],
|
|
7
|
+
symlinks: [],
|
|
8
|
+
unreadable: [],
|
|
9
|
+
};
|
|
10
|
+
const absoluteRoot = path.resolve(root);
|
|
11
|
+
async function walk(relativeDirectory, depth) {
|
|
12
|
+
let directory;
|
|
13
|
+
try {
|
|
14
|
+
directory = await opendir(relativeDirectory
|
|
15
|
+
? path.join(absoluteRoot, relativeDirectory)
|
|
16
|
+
: absoluteRoot);
|
|
17
|
+
}
|
|
18
|
+
catch (error) {
|
|
19
|
+
result.unreadable.push({
|
|
20
|
+
path: relativeDirectory || ".",
|
|
21
|
+
error: error instanceof Error ? error.message : String(error),
|
|
22
|
+
});
|
|
23
|
+
return;
|
|
24
|
+
}
|
|
25
|
+
const entries = [];
|
|
26
|
+
for await (const entry of directory) {
|
|
27
|
+
entries.push({
|
|
28
|
+
name: entry.name,
|
|
29
|
+
isSymbolicLink: entry.isSymbolicLink(),
|
|
30
|
+
isDirectory: entry.isDirectory(),
|
|
31
|
+
isFile: entry.isFile(),
|
|
32
|
+
});
|
|
33
|
+
}
|
|
34
|
+
entries.sort((left, right) => left.name.localeCompare(right.name));
|
|
35
|
+
for (const entry of entries) {
|
|
36
|
+
const relativePath = relativeDirectory
|
|
37
|
+
? `${relativeDirectory}/${entry.name}`
|
|
38
|
+
: entry.name;
|
|
39
|
+
if (options.excluded(relativePath))
|
|
40
|
+
continue;
|
|
41
|
+
const entryDepth = depth + 1;
|
|
42
|
+
if (entryDepth > options.maxDepth)
|
|
43
|
+
continue;
|
|
44
|
+
if (entry.isSymbolicLink) {
|
|
45
|
+
result.symlinks.push(relativePath);
|
|
46
|
+
}
|
|
47
|
+
else if (entry.isDirectory) {
|
|
48
|
+
await walk(relativePath, entryDepth);
|
|
49
|
+
}
|
|
50
|
+
else if (entry.isFile) {
|
|
51
|
+
result.files.push(relativePath);
|
|
52
|
+
}
|
|
53
|
+
}
|
|
54
|
+
}
|
|
55
|
+
await walk("", 0);
|
|
56
|
+
return result;
|
|
57
|
+
}
|
|
58
|
+
/** Inspect every component with lstat, never following a repository symlink. */
|
|
59
|
+
export async function safeRepositoryPath(root, candidate) {
|
|
60
|
+
const normalized = normalizeCandidate(candidate);
|
|
61
|
+
if (!normalized)
|
|
62
|
+
return { state: "outside", path: candidate };
|
|
63
|
+
const absoluteRoot = path.resolve(root);
|
|
64
|
+
const absolutePath = path.resolve(absoluteRoot, normalized);
|
|
65
|
+
if (absolutePath === absoluteRoot ||
|
|
66
|
+
!absolutePath.startsWith(`${absoluteRoot}${path.sep}`)) {
|
|
67
|
+
return { state: "outside", path: normalized };
|
|
68
|
+
}
|
|
69
|
+
let current = absoluteRoot;
|
|
70
|
+
const segments = normalized.split("/");
|
|
71
|
+
for (const [index, segment] of segments.entries()) {
|
|
72
|
+
current = path.join(current, segment);
|
|
73
|
+
try {
|
|
74
|
+
const stats = await lstat(current);
|
|
75
|
+
if (stats.isSymbolicLink()) {
|
|
76
|
+
return {
|
|
77
|
+
state: "symlink",
|
|
78
|
+
path: normalized,
|
|
79
|
+
boundaryPath: segments.slice(0, index + 1).join("/"),
|
|
80
|
+
};
|
|
81
|
+
}
|
|
82
|
+
if (index === segments.length - 1) {
|
|
83
|
+
return {
|
|
84
|
+
state: "present",
|
|
85
|
+
path: normalized,
|
|
86
|
+
absolutePath,
|
|
87
|
+
stats,
|
|
88
|
+
};
|
|
89
|
+
}
|
|
90
|
+
if (!stats.isDirectory()) {
|
|
91
|
+
return { state: "absent", path: normalized };
|
|
92
|
+
}
|
|
93
|
+
}
|
|
94
|
+
catch (error) {
|
|
95
|
+
const code = error.code;
|
|
96
|
+
return {
|
|
97
|
+
state: code === "ENOENT" || code === "ENOTDIR" ? "absent" : "unreadable",
|
|
98
|
+
path: normalized,
|
|
99
|
+
};
|
|
100
|
+
}
|
|
101
|
+
}
|
|
102
|
+
return { state: "absent", path: normalized };
|
|
103
|
+
}
|
|
104
|
+
function normalizeCandidate(candidate) {
|
|
105
|
+
const posix = candidate.replaceAll("\\", "/");
|
|
106
|
+
if (path.posix.isAbsolute(posix))
|
|
107
|
+
return undefined;
|
|
108
|
+
const rawSegments = posix.split("/");
|
|
109
|
+
if (rawSegments.includes(".."))
|
|
110
|
+
return undefined;
|
|
111
|
+
const normalized = path.posix.normalize(posix).replace(/^\.\//, "");
|
|
112
|
+
if (!normalized || normalized === "." || normalized.startsWith("../"))
|
|
113
|
+
return undefined;
|
|
114
|
+
return normalized;
|
|
115
|
+
}
|
|
116
|
+
//# sourceMappingURL=repository-boundary.js.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"repository-boundary.js","sourceRoot":"","sources":["../src/repository-boundary.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,MAAM,kBAAkB,CAAC;AAClD,OAAO,IAAI,MAAM,WAAW,CAAC;AAa7B,oEAAoE;AACpE,MAAM,CAAC,KAAK,UAAU,mBAAmB,CACvC,IAAY,EACZ,OAGC;IAED,MAAM,MAAM,GAAyB;QACnC,KAAK,EAAE,EAAE;QACT,QAAQ,EAAE,EAAE;QACZ,UAAU,EAAE,EAAE;KACf,CAAC;IACF,MAAM,YAAY,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;IAExC,KAAK,UAAU,IAAI,CAAC,iBAAyB,EAAE,KAAa;QAC1D,IAAI,SAAS,CAAC;QACd,IAAI,CAAC;YACH,SAAS,GAAG,MAAM,OAAO,CACvB,iBAAiB;gBACf,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,iBAAiB,CAAC;gBAC5C,CAAC,CAAC,YAAY,CACjB,CAAC;QACJ,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC;gBACrB,IAAI,EAAE,iBAAiB,IAAI,GAAG;gBAC9B,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;aAC9D,CAAC,CAAC;YACH,OAAO;QACT,CAAC;QAED,MAAM,OAAO,GAKR,EAAE,CAAC;QACR,IAAI,KAAK,EAAE,MAAM,KAAK,IAAI,SAAS,EAAE,CAAC;YACpC,OAAO,CAAC,IAAI,CAAC;gBACX,IAAI,EAAE,KAAK,CAAC,IAAI;gBAChB,cAAc,EAAE,KAAK,CAAC,cAAc,EAAE;gBACtC,WAAW,EAAE,KAAK,CAAC,WAAW,EAAE;gBAChC,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE;aACvB,CAAC,CAAC;QACL,CAAC;QACD,OAAO,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC;QACnE,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;YAC5B,MAAM,YAAY,GAAG,iBAAiB;gBACpC,CAAC,CAAC,GAAG,iBAAiB,IAAI,KAAK,CAAC,IAAI,EAAE;gBACtC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC;YACf,IAAI,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAC;gBAAE,SAAS;YAC7C,MAAM,UAAU,GAAG,KAAK,GAAG,CAAC,CAAC;YAC7B,IAAI,UAAU,GAAG,OAAO,CAAC,QAAQ;gBAAE,SAAS;YAC5C,IAAI,KAAK,CAAC,cAAc,EAAE,CAAC;gBACzB,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;YACrC,CAAC;iBAAM,IAAI,KAAK,CAAC,WAAW,EAAE,CAAC;gBAC7B,MAAM,IAAI,CAAC,YAAY,EAAE,UAAU,CAAC,CAAC;YACvC,CAAC;iBAAM,IAAI,KAAK,CAAC,MAAM,EAAE,CAAC;gBACxB,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;YAClC,CAAC;QACH,CAAC;IACH,CAAC;IAED,MAAM,IAAI,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC;IAClB,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,gFAAgF;AAChF,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACtC,IAAY,EACZ,SAAiB;IAEjB,MAAM,UAAU,GAAG,kBAAkB,CAAC,SAAS,CAAC,CAAC;IACjD,IAAI,CAAC,UAAU;QAAE,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC;IAC9D,MAAM,YAAY,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;IACxC,MAAM,YAAY,GAAG,IAAI,CAAC,OAAO,CAAC,YAAY,EAAE,UAAU,CAAC,CAAC;IAC5D,IACE,YAAY,KAAK,YAAY;QAC7B,CAAC,YAAY,CAAC,UAAU,CAAC,GAAG,YAAY,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,EACtD,CAAC;QACD,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC;IAChD,CAAC;IAED,IAAI,OAAO,GAAG,YAAY,CAAC;IAC3B,MAAM,QAAQ,GAAG,UAAU,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IACvC,KAAK,MAAM,CAAC,KAAK,EAAE,OAAO,CAAC,IAAI,QAAQ,CAAC,OAAO,EAAE,EAAE,CAAC;QAClD,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QACtC,IAAI,CAAC;YACH,MAAM,KAAK,GAAG,MAAM,KAAK,CAAC,OAAO,CAAC,CAAC;YACnC,IAAI,KAAK,CAAC,cAAc,EAAE,EAAE,CAAC;gBAC3B,OAAO;oBACL,KAAK,EAAE,SAAS;oBAChB,IAAI,EAAE,UAAU;oBAChB,YAAY,EAAE,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC;iBACrD,CAAC;YACJ,CAAC;YACD,IAAI,KAAK,KAAK,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBAClC,OAAO;oBACL,KAAK,EAAE,SAAS;oBAChB,IAAI,EAAE,UAAU;oBAChB,YAAY;oBACZ,KAAK;iBACN,CAAC;YACJ,CAAC;YACD,IAAI,CAAC,KAAK,CAAC,WAAW,EAAE,EAAE,CAAC;gBACzB,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC;YAC/C,CAAC;QACH,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,IAAI,GAAI,KAA+B,CAAC,IAAI,CAAC;YACnD,OAAO;gBACL,KAAK,EACH,IAAI,KAAK,QAAQ,IAAI,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,YAAY;gBACnE,IAAI,EAAE,UAAU;aACjB,CAAC;QACJ,CAAC;IACH,CAAC;IACD,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC;AAC/C,CAAC;AAED,SAAS,kBAAkB,CAAC,SAAiB;IAC3C,MAAM,KAAK,GAAG,SAAS,CAAC,UAAU,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;IAC9C,IAAI,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,KAAK,CAAC;QAAE,OAAO,SAAS,CAAC;IACnD,MAAM,WAAW,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IACrC,IAAI,WAAW,CAAC,QAAQ,CAAC,IAAI,CAAC;QAAE,OAAO,SAAS,CAAC;IACjD,MAAM,UAAU,GAAG,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;IACpE,IAAI,CAAC,UAAU,IAAI,UAAU,KAAK,GAAG,IAAI,UAAU,CAAC,UAAU,CAAC,KAAK,CAAC;QACnE,OAAO,SAAS,CAAC;IACnB,OAAO,UAAU,CAAC;AACpB,CAAC"}
|
|
@@ -1,6 +1,7 @@
|
|
|
1
1
|
import { type ConfigOverrides } from "./config.js";
|
|
2
2
|
import { type ContextLensSummary } from "./context-lens.js";
|
|
3
3
|
import type { Catalog } from "./model.js";
|
|
4
|
+
import { type RepositoryPathState } from "./repository-paths.js";
|
|
4
5
|
import type { Artifact, Diagnostic, ParsedDocument, ScanConfig } from "./types.js";
|
|
5
6
|
export interface RepositoryEvidence {
|
|
6
7
|
root: string;
|
|
@@ -15,6 +16,7 @@ export interface RepositorySnapshot extends RepositoryEvidence {
|
|
|
15
16
|
artifacts: Artifact[];
|
|
16
17
|
documents: ParsedDocument[];
|
|
17
18
|
repositoryPaths: ReadonlySet<string>;
|
|
19
|
+
repositoryPathStates: ReadonlyMap<string, RepositoryPathState>;
|
|
18
20
|
discoveryDiagnostics: Diagnostic[];
|
|
19
21
|
catalogDiagnostics: Diagnostic[];
|
|
20
22
|
contextLensDiagnostics: Diagnostic[];
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"repository-evidence.d.ts","sourceRoot":"","sources":["../src/repository-evidence.ts"],"names":[],"mappings":"AAEA,OAAO,EAAc,KAAK,eAAe,EAAE,MAAM,aAAa,CAAC;AAC/D,OAAO,EAEL,KAAK,kBAAkB,EACxB,MAAM,mBAAmB,CAAC;AAG3B,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,YAAY,CAAC;
|
|
1
|
+
{"version":3,"file":"repository-evidence.d.ts","sourceRoot":"","sources":["../src/repository-evidence.ts"],"names":[],"mappings":"AAEA,OAAO,EAAc,KAAK,eAAe,EAAE,MAAM,aAAa,CAAC;AAC/D,OAAO,EAEL,KAAK,kBAAkB,EACxB,MAAM,mBAAmB,CAAC;AAG3B,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,YAAY,CAAC;AAC1C,OAAO,EAIL,KAAK,mBAAmB,EACzB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,KAAK,EACV,QAAQ,EACR,UAAU,EACV,cAAc,EACd,UAAU,EACX,MAAM,YAAY,CAAC;AAEpB,MAAM,WAAW,kBAAkB;IACjC,IAAI,EAAE,MAAM,CAAC;IACb,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,gBAAgB,EAAE,MAAM,CAAC;IACzB,OAAO,EAAE,OAAO,CAAC;IACjB,WAAW,EAAE,kBAAkB,CAAC;IAChC,WAAW,EAAE,UAAU,EAAE,CAAC;CAC3B;AAED,MAAM,WAAW,kBAAmB,SAAQ,kBAAkB;IAC5D,MAAM,EAAE,UAAU,CAAC;IACnB,SAAS,EAAE,QAAQ,EAAE,CAAC;IACtB,SAAS,EAAE,cAAc,EAAE,CAAC;IAC5B,eAAe,EAAE,WAAW,CAAC,MAAM,CAAC,CAAC;IACrC,oBAAoB,EAAE,WAAW,CAAC,MAAM,EAAE,mBAAmB,CAAC,CAAC;IAC/D,oBAAoB,EAAE,UAAU,EAAE,CAAC;IACnC,kBAAkB,EAAE,UAAU,EAAE,CAAC;IACjC,sBAAsB,EAAE,UAAU,EAAE,CAAC;CACtC;AAED,wBAAsB,yBAAyB,CAC7C,UAAU,EAAE,MAAM,EAClB,SAAS,GAAE,eAAoB,GAC9B,OAAO,CAAC,kBAAkB,CAAC,CAU7B;AAED,wBAAsB,yBAAyB,CAC7C,UAAU,EAAE,MAAM,EAClB,SAAS,GAAE,eAAoB,GAC9B,OAAO,CAAC,kBAAkB,CAAC,CA6C7B"}
|
|
@@ -4,7 +4,7 @@ import { loadConfig } from "./config.js";
|
|
|
4
4
|
import { summarizeContextLensGovernance, } from "./context-lens.js";
|
|
5
5
|
import { discoverArtifacts } from "./discovery.js";
|
|
6
6
|
import { parseDocument } from "./markdown.js";
|
|
7
|
-
import { collectRepositoryPaths } from "./repository-paths.js";
|
|
7
|
+
import { collectRepositoryPaths, collectRepositoryPathStates, repositoryPathCandidates, } from "./repository-paths.js";
|
|
8
8
|
export async function collectRepositoryEvidence(targetPath, overrides = {}) {
|
|
9
9
|
const snapshot = await collectRepositorySnapshot(targetPath, overrides);
|
|
10
10
|
return {
|
|
@@ -19,11 +19,12 @@ export async function collectRepositoryEvidence(targetPath, overrides = {}) {
|
|
|
19
19
|
export async function collectRepositorySnapshot(targetPath, overrides = {}) {
|
|
20
20
|
const root = path.resolve(targetPath);
|
|
21
21
|
const { config, configPath } = await loadConfig(root, overrides);
|
|
22
|
-
const { artifacts, diagnostics: discoveryDiagnostics } = await discoverArtifacts(root, config);
|
|
22
|
+
const { artifacts, diagnostics: discoveryDiagnostics, discoveredPaths, } = await discoverArtifacts(root, config);
|
|
23
23
|
const documents = artifacts.map(parseDocument);
|
|
24
|
-
const built = buildCatalog(documents);
|
|
24
|
+
const built = buildCatalog(documents, discoveredPaths);
|
|
25
25
|
const contextLens = summarizeContextLensGovernance(documents, built.catalog);
|
|
26
|
-
const repositoryPaths = await collectRepositoryPaths(root, artifacts, documents, built.catalog);
|
|
26
|
+
const repositoryPaths = await collectRepositoryPaths(root, artifacts, documents, built.catalog, discoveredPaths);
|
|
27
|
+
const repositoryPathStates = await collectRepositoryPathStates(root, [...repositoryPaths, ...repositoryPathCandidates(documents, built.catalog)], artifacts, config);
|
|
27
28
|
return {
|
|
28
29
|
root,
|
|
29
30
|
...(configPath ? { configPath } : {}),
|
|
@@ -31,6 +32,7 @@ export async function collectRepositorySnapshot(targetPath, overrides = {}) {
|
|
|
31
32
|
artifacts,
|
|
32
33
|
documents,
|
|
33
34
|
repositoryPaths,
|
|
35
|
+
repositoryPathStates,
|
|
34
36
|
scannedFileCount: artifacts.length,
|
|
35
37
|
catalog: built.catalog,
|
|
36
38
|
contextLens: contextLens.summary,
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"repository-evidence.js","sourceRoot":"","sources":["../src/repository-evidence.ts"],"names":[],"mappings":"AAAA,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AAC5C,OAAO,EAAE,UAAU,EAAwB,MAAM,aAAa,CAAC;AAC/D,OAAO,EACL,8BAA8B,GAE/B,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EAAE,iBAAiB,EAAE,MAAM,gBAAgB,CAAC;AACnD,OAAO,EAAE,aAAa,EAAE,MAAM,eAAe,CAAC;AAE9C,OAAO,
|
|
1
|
+
{"version":3,"file":"repository-evidence.js","sourceRoot":"","sources":["../src/repository-evidence.ts"],"names":[],"mappings":"AAAA,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AAC5C,OAAO,EAAE,UAAU,EAAwB,MAAM,aAAa,CAAC;AAC/D,OAAO,EACL,8BAA8B,GAE/B,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EAAE,iBAAiB,EAAE,MAAM,gBAAgB,CAAC;AACnD,OAAO,EAAE,aAAa,EAAE,MAAM,eAAe,CAAC;AAE9C,OAAO,EACL,sBAAsB,EACtB,2BAA2B,EAC3B,wBAAwB,GAEzB,MAAM,uBAAuB,CAAC;AA4B/B,MAAM,CAAC,KAAK,UAAU,yBAAyB,CAC7C,UAAkB,EAClB,YAA6B,EAAE;IAE/B,MAAM,QAAQ,GAAG,MAAM,yBAAyB,CAAC,UAAU,EAAE,SAAS,CAAC,CAAC;IACxE,OAAO;QACL,IAAI,EAAE,QAAQ,CAAC,IAAI;QACnB,GAAG,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,QAAQ,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACnE,gBAAgB,EAAE,QAAQ,CAAC,gBAAgB;QAC3C,OAAO,EAAE,QAAQ,CAAC,OAAO;QACzB,WAAW,EAAE,QAAQ,CAAC,WAAW;QACjC,WAAW,EAAE,QAAQ,CAAC,WAAW;KAClC,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,yBAAyB,CAC7C,UAAkB,EAClB,YAA6B,EAAE;IAE/B,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;IACtC,MAAM,EAAE,MAAM,EAAE,UAAU,EAAE,GAAG,MAAM,UAAU,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;IACjE,MAAM,EACJ,SAAS,EACT,WAAW,EAAE,oBAAoB,EACjC,eAAe,GAChB,GAAG,MAAM,iBAAiB,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IAC1C,MAAM,SAAS,GAAG,SAAS,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC;IAC/C,MAAM,KAAK,GAAG,YAAY,CAAC,SAAS,EAAE,eAAe,CAAC,CAAC;IACvD,MAAM,WAAW,GAAG,8BAA8B,CAAC,SAAS,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC;IAC7E,MAAM,eAAe,GAAG,MAAM,sBAAsB,CAClD,IAAI,EACJ,SAAS,EACT,SAAS,EACT,KAAK,CAAC,OAAO,EACb,eAAe,CAChB,CAAC;IACF,MAAM,oBAAoB,GAAG,MAAM,2BAA2B,CAC5D,IAAI,EACJ,CAAC,GAAG,eAAe,EAAE,GAAG,wBAAwB,CAAC,SAAS,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC,EAC3E,SAAS,EACT,MAAM,CACP,CAAC;IAEF,OAAO;QACL,IAAI;QACJ,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACrC,MAAM;QACN,SAAS;QACT,SAAS;QACT,eAAe;QACf,oBAAoB;QACpB,gBAAgB,EAAE,SAAS,CAAC,MAAM;QAClC,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,WAAW,EAAE,WAAW,CAAC,OAAO;QAChC,oBAAoB;QACpB,kBAAkB,EAAE,KAAK,CAAC,WAAW;QACrC,sBAAsB,EAAE,WAAW,CAAC,WAAW;QAC/C,WAAW,EAAE;YACX,GAAG,oBAAoB;YACvB,GAAG,KAAK,CAAC,WAAW;YACpB,GAAG,WAAW,CAAC,WAAW;SAC3B;KACF,CAAC;AACJ,CAAC"}
|
|
@@ -1,5 +1,6 @@
|
|
|
1
1
|
import type { Catalog } from "./model.js";
|
|
2
|
-
import type { Artifact, ParsedDocument } from "./types.js";
|
|
2
|
+
import type { Artifact, ParsedDocument, ScanConfig } from "./types.js";
|
|
3
|
+
export type RepositoryPathState = "parsed" | "excluded" | "oversize" | "deep" | "unsupported" | "symlink" | "unreadable" | "absent";
|
|
3
4
|
export type HelperScriptPathResolution = {
|
|
4
5
|
kind: "candidate";
|
|
5
6
|
path: string;
|
|
@@ -12,8 +13,11 @@ export type HelperScriptPathResolution = {
|
|
|
12
13
|
path: string;
|
|
13
14
|
};
|
|
14
15
|
/** Collect immutable repository-relative path existence evidence for rules. */
|
|
15
|
-
export declare function collectRepositoryPaths(root: string, artifacts: Artifact[], documents: ParsedDocument[], catalog: Catalog): Promise<ReadonlySet<string>>;
|
|
16
|
+
export declare function collectRepositoryPaths(root: string, artifacts: Artifact[], documents: ParsedDocument[], catalog: Catalog, discoveredPaths?: ReadonlySet<string>): Promise<ReadonlySet<string>>;
|
|
16
17
|
export declare function helperScriptPath(command: string): string | undefined;
|
|
17
18
|
/** Resolve a helper command path without escaping an unambiguous owning Skill. */
|
|
18
19
|
export declare function resolveHelperScriptPath(sourcePath: string, scriptPath: string): HelperScriptPathResolution;
|
|
20
|
+
export declare function repositoryPathCandidates(documents: ParsedDocument[], catalog: Catalog): string[];
|
|
21
|
+
/** Capture exact lstat-based states once without following symbolic links. */
|
|
22
|
+
export declare function collectRepositoryPathStates(root: string, candidates: Iterable<string>, artifacts: Artifact[], config: ScanConfig): Promise<ReadonlyMap<string, RepositoryPathState>>;
|
|
19
23
|
//# sourceMappingURL=repository-paths.d.ts.map
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"repository-paths.d.ts","sourceRoot":"","sources":["../src/repository-paths.ts"],"names":[],"mappings":"
|
|
1
|
+
{"version":3,"file":"repository-paths.d.ts","sourceRoot":"","sources":["../src/repository-paths.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,YAAY,CAAC;AAE1C,OAAO,KAAK,EAAE,QAAQ,EAAE,cAAc,EAAE,UAAU,EAAE,MAAM,YAAY,CAAC;AAGvE,MAAM,MAAM,mBAAmB,GAC3B,QAAQ,GACR,UAAU,GACV,UAAU,GACV,MAAM,GACN,aAAa,GACb,SAAS,GACT,YAAY,GACZ,QAAQ,CAAC;AAEb,MAAM,MAAM,0BAA0B,GAClC;IACE,IAAI,EAAE,WAAW,CAAC;IAClB,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,iBAAiB,GAAG,gBAAgB,CAAC;CAC9C,GACD;IAAE,IAAI,EAAE,QAAQ,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,GAChC;IAAE,IAAI,EAAE,UAAU,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,CAAC;AAEvC,+EAA+E;AAC/E,wBAAsB,sBAAsB,CAC1C,IAAI,EAAE,MAAM,EACZ,SAAS,EAAE,QAAQ,EAAE,EACrB,SAAS,EAAE,cAAc,EAAE,EAC3B,OAAO,EAAE,OAAO,EAChB,eAAe,GAAE,WAAW,CAAC,MAAM,CAAa,GAC/C,OAAO,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC,CAa9B;AAED,wBAAgB,gBAAgB,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAYpE;AAED,kFAAkF;AAClF,wBAAgB,uBAAuB,CACrC,UAAU,EAAE,MAAM,EAClB,UAAU,EAAE,MAAM,GACjB,0BAA0B,CAiC5B;AAED,wBAAgB,wBAAwB,CACtC,SAAS,EAAE,cAAc,EAAE,EAC3B,OAAO,EAAE,OAAO,GACf,MAAM,EAAE,CAYV;AA2BD,8EAA8E;AAC9E,wBAAsB,2BAA2B,CAC/C,IAAI,EAAE,MAAM,EACZ,UAAU,EAAE,QAAQ,CAAC,MAAM,CAAC,EAC5B,SAAS,EAAE,QAAQ,EAAE,EACrB,MAAM,EAAE,UAAU,GACjB,OAAO,CAAC,WAAW,CAAC,MAAM,EAAE,mBAAmB,CAAC,CAAC,CAwCnD"}
|
package/dist/repository-paths.js
CHANGED
|
@@ -1,10 +1,11 @@
|
|
|
1
|
-
import { access } from "node:fs/promises";
|
|
2
1
|
import path from "node:path";
|
|
3
|
-
import { classifyRepositorySkillPath } from "./discovery.js";
|
|
2
|
+
import { classifyRepositorySkillPath, isExcluded, logicalSkillDirectory, repositoryPathDepth, } from "./discovery.js";
|
|
3
|
+
import { staticSupportReferences } from "./static-support.js";
|
|
4
|
+
import { safeRepositoryPath } from "./repository-boundary.js";
|
|
4
5
|
/** Collect immutable repository-relative path existence evidence for rules. */
|
|
5
|
-
export async function collectRepositoryPaths(root, artifacts, documents, catalog) {
|
|
6
|
-
const paths = new Set(artifacts
|
|
7
|
-
.map(
|
|
6
|
+
export async function collectRepositoryPaths(root, artifacts, documents, catalog, discoveredPaths = new Set()) {
|
|
7
|
+
const paths = new Set([...discoveredPaths, ...artifacts.map((artifact) => artifact.path)]
|
|
8
|
+
.map(normalizeRepositoryPath)
|
|
8
9
|
.filter((candidate) => candidate !== undefined));
|
|
9
10
|
for (const candidate of repositoryPathCandidates(documents, catalog)) {
|
|
10
11
|
if (paths.has(candidate))
|
|
@@ -29,7 +30,8 @@ export function helperScriptPath(command) {
|
|
|
29
30
|
/** Resolve a helper command path without escaping an unambiguous owning Skill. */
|
|
30
31
|
export function resolveHelperScriptPath(sourcePath, scriptPath) {
|
|
31
32
|
const rawPath = scriptPath.replace(/\\/g, "/");
|
|
32
|
-
const
|
|
33
|
+
const skillDirectory = logicalSkillDirectory(sourcePath);
|
|
34
|
+
const sourceSkill = skillDirectory ? { skillDirectory } : undefined;
|
|
33
35
|
const isSkillRelative = /^(?:\.\/)?scripts\//.test(rawPath);
|
|
34
36
|
const hasTraversal = rawPath.split("/").includes("..");
|
|
35
37
|
if (isSkillRelative) {
|
|
@@ -57,9 +59,10 @@ export function resolveHelperScriptPath(sourcePath, scriptPath) {
|
|
|
57
59
|
}
|
|
58
60
|
return { kind: "candidate", path: candidate, source: "repository-root" };
|
|
59
61
|
}
|
|
60
|
-
function repositoryPathCandidates(documents, catalog) {
|
|
62
|
+
export function repositoryPathCandidates(documents, catalog) {
|
|
61
63
|
return [
|
|
62
64
|
...helperCommandPathCandidates(documents),
|
|
65
|
+
...staticSupportPathCandidates(documents),
|
|
63
66
|
...catalog.dependencies
|
|
64
67
|
.map((dependency) => dependency.to)
|
|
65
68
|
.map(normalizeRepositoryPath)
|
|
@@ -67,6 +70,70 @@ function repositoryPathCandidates(documents, catalog) {
|
|
|
67
70
|
.filter(isRepoPathLike),
|
|
68
71
|
].filter((candidate, index, candidates) => candidates.indexOf(candidate) === index);
|
|
69
72
|
}
|
|
73
|
+
function staticSupportPathCandidates(documents) {
|
|
74
|
+
return documents.flatMap((document) => {
|
|
75
|
+
const classified = classifyRepositorySkillPath(document.artifact.path);
|
|
76
|
+
if (classified?.kind !== "entrypoint" && classified?.kind !== "support") {
|
|
77
|
+
return [];
|
|
78
|
+
}
|
|
79
|
+
const localCandidates = documents
|
|
80
|
+
.filter((candidate) => {
|
|
81
|
+
const candidatePath = classifyRepositorySkillPath(candidate.artifact.path);
|
|
82
|
+
return (candidatePath?.kind === "support" &&
|
|
83
|
+
candidatePath.skillDirectory === classified.skillDirectory);
|
|
84
|
+
})
|
|
85
|
+
.map((candidate) => candidate.artifact.path);
|
|
86
|
+
return staticSupportReferences(document, classified.skillDirectory, localCandidates).map((reference) => reference.targetPath);
|
|
87
|
+
});
|
|
88
|
+
}
|
|
89
|
+
/** Capture exact lstat-based states once without following symbolic links. */
|
|
90
|
+
export async function collectRepositoryPathStates(root, candidates, artifacts, config) {
|
|
91
|
+
const parsed = new Set(artifacts.map((artifact) => artifact.path));
|
|
92
|
+
const states = new Map();
|
|
93
|
+
for (const candidate of [...new Set(candidates)].sort((a, b) => a.localeCompare(b))) {
|
|
94
|
+
const normalized = normalizeRepositoryPath(candidate);
|
|
95
|
+
if (!normalized)
|
|
96
|
+
continue;
|
|
97
|
+
try {
|
|
98
|
+
const inspected = await safeRepositoryPath(root, normalized);
|
|
99
|
+
if (inspected.state === "symlink") {
|
|
100
|
+
states.set(normalized, "symlink");
|
|
101
|
+
states.set(inspected.boundaryPath, "symlink");
|
|
102
|
+
}
|
|
103
|
+
else if (inspected.state === "outside") {
|
|
104
|
+
states.set(normalized, "absent");
|
|
105
|
+
}
|
|
106
|
+
else if (inspected.state === "absent") {
|
|
107
|
+
states.set(normalized, "absent");
|
|
108
|
+
}
|
|
109
|
+
else if (inspected.state === "unreadable") {
|
|
110
|
+
states.set(normalized, "unreadable");
|
|
111
|
+
}
|
|
112
|
+
else if (inspected.state === "present") {
|
|
113
|
+
if (isExcluded(normalized, config.exclude)) {
|
|
114
|
+
states.set(normalized, "excluded");
|
|
115
|
+
}
|
|
116
|
+
else if (repositoryPathDepth(normalized) > config.maxDepth) {
|
|
117
|
+
states.set(normalized, "deep");
|
|
118
|
+
}
|
|
119
|
+
else if (inspected.stats.isFile() &&
|
|
120
|
+
inspected.stats.size > config.maxFileSizeBytes) {
|
|
121
|
+
states.set(normalized, "oversize");
|
|
122
|
+
}
|
|
123
|
+
else if (parsed.has(normalized)) {
|
|
124
|
+
states.set(normalized, "parsed");
|
|
125
|
+
}
|
|
126
|
+
else {
|
|
127
|
+
states.set(normalized, "unsupported");
|
|
128
|
+
}
|
|
129
|
+
}
|
|
130
|
+
}
|
|
131
|
+
catch {
|
|
132
|
+
states.set(normalized, "unreadable");
|
|
133
|
+
}
|
|
134
|
+
}
|
|
135
|
+
return states;
|
|
136
|
+
}
|
|
70
137
|
function helperCommandPathCandidates(documents) {
|
|
71
138
|
return documents.flatMap((document) => document.codeFences.flatMap((fence) => fence.content
|
|
72
139
|
.split(/\r?\n/)
|
|
@@ -81,16 +148,6 @@ function helperCommandPathCandidates(documents) {
|
|
|
81
148
|
})
|
|
82
149
|
.filter((candidate) => candidate !== undefined)));
|
|
83
150
|
}
|
|
84
|
-
function owningSkillPath(sourcePath) {
|
|
85
|
-
const classified = classifyRepositorySkillPath(sourcePath);
|
|
86
|
-
if (classified?.kind === "support")
|
|
87
|
-
return classified;
|
|
88
|
-
if (classified?.kind === "entrypoint" &&
|
|
89
|
-
classified.entrypoint.kind === "canonical") {
|
|
90
|
-
return classified;
|
|
91
|
-
}
|
|
92
|
-
return undefined;
|
|
93
|
-
}
|
|
94
151
|
function isWithinSkill(candidate, skillDirectory) {
|
|
95
152
|
return (candidate === skillDirectory || candidate.startsWith(`${skillDirectory}/`));
|
|
96
153
|
}
|
|
@@ -106,13 +163,7 @@ function normalizeRepositoryPath(value) {
|
|
|
106
163
|
return normalized;
|
|
107
164
|
}
|
|
108
165
|
async function repositoryPathExists(root, relativePath) {
|
|
109
|
-
|
|
110
|
-
await access(path.join(root, relativePath));
|
|
111
|
-
return true;
|
|
112
|
-
}
|
|
113
|
-
catch {
|
|
114
|
-
return false;
|
|
115
|
-
}
|
|
166
|
+
return (await safeRepositoryPath(root, relativePath)).state === "present";
|
|
116
167
|
}
|
|
117
168
|
function isRepoPathLike(value) {
|
|
118
169
|
return /^[A-Za-z0-9_.-]+(?:\/[A-Za-z0-9_.-]+)+$/.test(value);
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"repository-paths.js","sourceRoot":"","sources":["../src/repository-paths.ts"],"names":[],"mappings":"AAAA,OAAO,
|
|
1
|
+
{"version":3,"file":"repository-paths.js","sourceRoot":"","sources":["../src/repository-paths.ts"],"names":[],"mappings":"AAAA,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EACL,2BAA2B,EAC3B,UAAU,EACV,qBAAqB,EACrB,mBAAmB,GACpB,MAAM,gBAAgB,CAAC;AAExB,OAAO,EAAE,uBAAuB,EAAE,MAAM,qBAAqB,CAAC;AAE9D,OAAO,EAAE,kBAAkB,EAAE,MAAM,0BAA0B,CAAC;AAqB9D,+EAA+E;AAC/E,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAC1C,IAAY,EACZ,SAAqB,EACrB,SAA2B,EAC3B,OAAgB,EAChB,kBAAuC,IAAI,GAAG,EAAE;IAEhD,MAAM,KAAK,GAAG,IAAI,GAAG,CACnB,CAAC,GAAG,eAAe,EAAE,GAAG,SAAS,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;SAChE,GAAG,CAAC,uBAAuB,CAAC;SAC5B,MAAM,CAAC,CAAC,SAAS,EAAuB,EAAE,CAAC,SAAS,KAAK,SAAS,CAAC,CACvE,CAAC;IAEF,KAAK,MAAM,SAAS,IAAI,wBAAwB,CAAC,SAAS,EAAE,OAAO,CAAC,EAAE,CAAC;QACrE,IAAI,KAAK,CAAC,GAAG,CAAC,SAAS,CAAC;YAAE,SAAS;QACnC,IAAI,MAAM,oBAAoB,CAAC,IAAI,EAAE,SAAS,CAAC;YAAE,KAAK,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;IACxE,CAAC;IAED,OAAO,KAAK,CAAC;AACf,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,OAAe;IAC9C,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IAC5C,MAAM,MAAM,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC;IAC3D,IAAI,CAAC,MAAM;QAAE,OAAO,SAAS,CAAC;IAE9B,MAAM,qBAAqB,GAAG,8BAA8B,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IAC1E,IAAI,CAAC,qBAAqB;QAAE,OAAO,SAAS,CAAC;IAC7C,MAAM,qBAAqB,GAAG,uCAAuC,CAAC,IAAI,CACxE,MAAM,CACP,CAAC;IACF,MAAM,qBAAqB,GAAG,mBAAmB,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IAC/D,OAAO,qBAAqB,IAAI,qBAAqB,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;AAC7E,CAAC;AAED,kFAAkF;AAClF,MAAM,UAAU,uBAAuB,CACrC,UAAkB,EAClB,UAAkB;IAElB,MAAM,OAAO,GAAG,UAAU,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;IAC/C,MAAM,cAAc,GAAG,qBAAqB,CAAC,UAAU,CAAC,CAAC;IACzD,MAAM,WAAW,GAAG,cAAc,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;IACpE,MAAM,eAAe,GAAG,qBAAqB,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IAC5D,MAAM,YAAY,GAAG,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;IAEvD,IAAI,eAAe,EAAE,CAAC;QACpB,IAAI,CAAC,WAAW;YAAE,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC;QAC7D,IAAI,YAAY;YAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC;QAC3D,MAAM,YAAY,GAAG,OAAO,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;QAClD,MAAM,SAAS,GAAG,uBAAuB,CACvC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,WAAW,CAAC,cAAc,EAAE,YAAY,CAAC,CAC1D,CAAC;QACF,IAAI,CAAC,SAAS,IAAI,CAAC,aAAa,CAAC,SAAS,EAAE,WAAW,CAAC,cAAc,CAAC,EAAE,CAAC;YACxE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC;QAC3C,CAAC;QACD,OAAO,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,EAAE,gBAAgB,EAAE,CAAC;IAC1E,CAAC;IAED,IAAI,YAAY,EAAE,CAAC;QACjB,OAAO,WAAW;YAChB,CAAC,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,OAAO,EAAE;YACnC,CAAC,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC;IAC1C,CAAC;IAED,MAAM,SAAS,GAAG,uBAAuB,CAAC,OAAO,CAAC,CAAC;IACnD,IAAI,CAAC,SAAS,EAAE,CAAC;QACf,OAAO,WAAW;YAChB,CAAC,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,OAAO,EAAE;YACnC,CAAC,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC;IAC1C,CAAC;IACD,OAAO,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,EAAE,iBAAiB,EAAE,CAAC;AAC3E,CAAC;AAED,MAAM,UAAU,wBAAwB,CACtC,SAA2B,EAC3B,OAAgB;IAEhB,OAAO;QACL,GAAG,2BAA2B,CAAC,SAAS,CAAC;QACzC,GAAG,2BAA2B,CAAC,SAAS,CAAC;QACzC,GAAG,OAAO,CAAC,YAAY;aACpB,GAAG,CAAC,CAAC,UAAU,EAAE,EAAE,CAAC,UAAU,CAAC,EAAE,CAAC;aAClC,GAAG,CAAC,uBAAuB,CAAC;aAC5B,MAAM,CAAC,CAAC,SAAS,EAAuB,EAAE,CAAC,SAAS,KAAK,SAAS,CAAC;aACnE,MAAM,CAAC,cAAc,CAAC;KAC1B,CAAC,MAAM,CACN,CAAC,SAAS,EAAE,KAAK,EAAE,UAAU,EAAE,EAAE,CAAC,UAAU,CAAC,OAAO,CAAC,SAAS,CAAC,KAAK,KAAK,CAC1E,CAAC;AACJ,CAAC;AAED,SAAS,2BAA2B,CAAC,SAA2B;IAC9D,OAAO,SAAS,CAAC,OAAO,CAAC,CAAC,QAAQ,EAAE,EAAE;QACpC,MAAM,UAAU,GAAG,2BAA2B,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;QACvE,IAAI,UAAU,EAAE,IAAI,KAAK,YAAY,IAAI,UAAU,EAAE,IAAI,KAAK,SAAS,EAAE,CAAC;YACxE,OAAO,EAAE,CAAC;QACZ,CAAC;QACD,MAAM,eAAe,GAAG,SAAS;aAC9B,MAAM,CAAC,CAAC,SAAS,EAAE,EAAE;YACpB,MAAM,aAAa,GAAG,2BAA2B,CAC/C,SAAS,CAAC,QAAQ,CAAC,IAAI,CACxB,CAAC;YACF,OAAO,CACL,aAAa,EAAE,IAAI,KAAK,SAAS;gBACjC,aAAa,CAAC,cAAc,KAAK,UAAU,CAAC,cAAc,CAC3D,CAAC;QACJ,CAAC,CAAC;aACD,GAAG,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;QAC/C,OAAO,uBAAuB,CAC5B,QAAQ,EACR,UAAU,CAAC,cAAc,EACzB,eAAe,CAChB,CAAC,GAAG,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC;IAC7C,CAAC,CAAC,CAAC;AACL,CAAC;AAED,8EAA8E;AAC9E,MAAM,CAAC,KAAK,UAAU,2BAA2B,CAC/C,IAAY,EACZ,UAA4B,EAC5B,SAAqB,EACrB,MAAkB;IAElB,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC;IACnE,MAAM,MAAM,GAAG,IAAI,GAAG,EAA+B,CAAC;IACtD,KAAK,MAAM,SAAS,IAAI,CAAC,GAAG,IAAI,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAC7D,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,CACnB,EAAE,CAAC;QACF,MAAM,UAAU,GAAG,uBAAuB,CAAC,SAAS,CAAC,CAAC;QACtD,IAAI,CAAC,UAAU;YAAE,SAAS;QAC1B,IAAI,CAAC;YACH,MAAM,SAAS,GAAG,MAAM,kBAAkB,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;YAC7D,IAAI,SAAS,CAAC,KAAK,KAAK,SAAS,EAAE,CAAC;gBAClC,MAAM,CAAC,GAAG,CAAC,UAAU,EAAE,SAAS,CAAC,CAAC;gBAClC,MAAM,CAAC,GAAG,CAAC,SAAS,CAAC,YAAY,EAAE,SAAS,CAAC,CAAC;YAChD,CAAC;iBAAM,IAAI,SAAS,CAAC,KAAK,KAAK,SAAS,EAAE,CAAC;gBACzC,MAAM,CAAC,GAAG,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAC;YACnC,CAAC;iBAAM,IAAI,SAAS,CAAC,KAAK,KAAK,QAAQ,EAAE,CAAC;gBACxC,MAAM,CAAC,GAAG,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAC;YACnC,CAAC;iBAAM,IAAI,SAAS,CAAC,KAAK,KAAK,YAAY,EAAE,CAAC;gBAC5C,MAAM,CAAC,GAAG,CAAC,UAAU,EAAE,YAAY,CAAC,CAAC;YACvC,CAAC;iBAAM,IAAI,SAAS,CAAC,KAAK,KAAK,SAAS,EAAE,CAAC;gBACzC,IAAI,UAAU,CAAC,UAAU,EAAE,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC;oBAC3C,MAAM,CAAC,GAAG,CAAC,UAAU,EAAE,UAAU,CAAC,CAAC;gBACrC,CAAC;qBAAM,IAAI,mBAAmB,CAAC,UAAU,CAAC,GAAG,MAAM,CAAC,QAAQ,EAAE,CAAC;oBAC7D,MAAM,CAAC,GAAG,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC;gBACjC,CAAC;qBAAM,IACL,SAAS,CAAC,KAAK,CAAC,MAAM,EAAE;oBACxB,SAAS,CAAC,KAAK,CAAC,IAAI,GAAG,MAAM,CAAC,gBAAgB,EAC9C,CAAC;oBACD,MAAM,CAAC,GAAG,CAAC,UAAU,EAAE,UAAU,CAAC,CAAC;gBACrC,CAAC;qBAAM,IAAI,MAAM,CAAC,GAAG,CAAC,UAAU,CAAC,EAAE,CAAC;oBAClC,MAAM,CAAC,GAAG,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAC;gBACnC,CAAC;qBAAM,CAAC;oBACN,MAAM,CAAC,GAAG,CAAC,UAAU,EAAE,aAAa,CAAC,CAAC;gBACxC,CAAC;YACH,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,CAAC,GAAG,CAAC,UAAU,EAAE,YAAY,CAAC,CAAC;QACvC,CAAC;IACH,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAS,2BAA2B,CAAC,SAA2B;IAC9D,OAAO,SAAS,CAAC,OAAO,CAAC,CAAC,QAAQ,EAAE,EAAE,CACpC,QAAQ,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,EAAE,CACpC,KAAK,CAAC,OAAO;SACV,KAAK,CAAC,OAAO,CAAC;SACd,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;SAC1B,MAAM,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,mCAAmC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;SACtE,GAAG,CAAC,gBAAgB,CAAC;SACrB,GAAG,CAAC,CAAC,SAAS,EAAE,EAAE;QACjB,IAAI,CAAC,SAAS;YAAE,OAAO,SAAS,CAAC;QACjC,MAAM,UAAU,GAAG,uBAAuB,CACxC,QAAQ,CAAC,QAAQ,CAAC,IAAI,EACtB,SAAS,CACV,CAAC;QACF,OAAO,UAAU,CAAC,IAAI,KAAK,WAAW,CAAC,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;IACvE,CAAC,CAAC;SACD,MAAM,CAAC,CAAC,SAAS,EAAuB,EAAE,CAAC,SAAS,KAAK,SAAS,CAAC,CACvE,CACF,CAAC;AACJ,CAAC;AAED,SAAS,aAAa,CAAC,SAAiB,EAAE,cAAsB;IAC9D,OAAO,CACL,SAAS,KAAK,cAAc,IAAI,SAAS,CAAC,UAAU,CAAC,GAAG,cAAc,GAAG,CAAC,CAC3E,CAAC;AACJ,CAAC;AAED,SAAS,uBAAuB,CAAC,KAAa;IAC5C,MAAM,UAAU,GAAG,KAAK,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;IAElE,IACE,CAAC,UAAU;QACX,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,UAAU,CAAC;QACjC,UAAU,KAAK,IAAI;QACnB,UAAU,CAAC,UAAU,CAAC,KAAK,CAAC;QAC5B,UAAU,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,EACpC,CAAC;QACD,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,OAAO,UAAU,CAAC;AACpB,CAAC;AAED,KAAK,UAAU,oBAAoB,CACjC,IAAY,EACZ,YAAoB;IAEpB,OAAO,CAAC,MAAM,kBAAkB,CAAC,IAAI,EAAE,YAAY,CAAC,CAAC,CAAC,KAAK,KAAK,SAAS,CAAC;AAC5E,CAAC;AAED,SAAS,cAAc,CAAC,KAAa;IACnC,OAAO,yCAAyC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;AAC/D,CAAC"}
|
package/dist/rules.d.ts
CHANGED
|
@@ -1,8 +1,10 @@
|
|
|
1
1
|
import type { Catalog } from "./model.js";
|
|
2
2
|
import type { Finding, ParsedDocument, ScanConfig, Severity } from "./types.js";
|
|
3
|
+
import type { RepositoryPathState } from "./repository-paths.js";
|
|
3
4
|
interface RuleOptions {
|
|
4
5
|
evaluationDate?: Date | string;
|
|
5
6
|
repositoryPaths?: ReadonlySet<string>;
|
|
7
|
+
repositoryPathStates?: ReadonlyMap<string, RepositoryPathState>;
|
|
6
8
|
}
|
|
7
9
|
/** Run all deterministic rules and return findings in stable source order. */
|
|
8
10
|
export declare function runRules(documents: ParsedDocument[], config: ScanConfig, catalog?: Catalog, options?: RuleOptions): Finding[];
|
package/dist/rules.d.ts.map
CHANGED
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"rules.d.ts","sourceRoot":"","sources":["../src/rules.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,OAAO,EAA4B,MAAM,YAAY,CAAC;
|
|
1
|
+
{"version":3,"file":"rules.d.ts","sourceRoot":"","sources":["../src/rules.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,OAAO,EAA4B,MAAM,YAAY,CAAC;AAsBpE,OAAO,KAAK,EAEV,OAAO,EAEP,cAAc,EACd,UAAU,EACV,QAAQ,EACT,MAAM,YAAY,CAAC;AACpB,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,uBAAuB,CAAC;AAejE,UAAU,WAAW;IACnB,cAAc,CAAC,EAAE,IAAI,GAAG,MAAM,CAAC;IAC/B,eAAe,CAAC,EAAE,WAAW,CAAC,MAAM,CAAC,CAAC;IACtC,oBAAoB,CAAC,EAAE,WAAW,CAAC,MAAM,EAAE,mBAAmB,CAAC,CAAC;CACjE;AA4ED,8EAA8E;AAC9E,wBAAgB,QAAQ,CACtB,SAAS,EAAE,cAAc,EAAE,EAC3B,MAAM,EAAE,UAAU,EAClB,OAAO,CAAC,EAAE,OAAO,EACjB,OAAO,GAAE,WAAgB,GACxB,OAAO,EAAE,CAgBX;AAwmBD,iFAAiF;AACjF,wBAAgB,aAAa,CAAC,KAAK,EAAE,QAAQ,EAAE,SAAS,EAAE,QAAQ,GAAG,OAAO,CAQ3E"}
|