diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml index 4f4a41e..73c095a 100644 --- a/.github/workflows/ci.yml +++ b/.github/workflows/ci.yml @@ -6,6 +6,33 @@ on: pull_request: jobs: + dependency-audit: + runs-on: ubuntu-latest + steps: + - uses: actions/checkout@v4 + + - name: Scan dependency lockfiles + uses: google/osv-scanner-action/osv-scanner-action@9a498708959aeaef5ef730655706c5a1df1edbc2 + with: + scan-args: |- + scan source + --recursive + ./ + + gitleaks: + runs-on: ubuntu-latest + steps: + - uses: actions/checkout@v4 + with: + fetch-depth: 0 + + - name: Scan Git history for secrets + run: | + docker run --rm \ + -v "$PWD:/repo" \ + ghcr.io/gitleaks/gitleaks:v8.30.1 \ + git --redact --no-banner /repo + test: runs-on: ubuntu-latest steps: @@ -23,6 +50,8 @@ jobs: - run: bun run typecheck + - run: bun run lint + - name: Install desktop test dependencies run: | sudo apt-get update diff --git a/.gitleaksignore b/.gitleaksignore new file mode 100644 index 0000000..c2ace1f --- /dev/null +++ b/.gitleaksignore @@ -0,0 +1,7 @@ +# Synthetic secret fixtures retained in Git history; tracked in pickforge/picklab#60. +de467fbd14d00d4afa4946f610d05d724a6fa777:packages/browser/test/evidence-integration.test.ts:jwt:27 +d3e4353d8fbd470deaaab30c61c7fdb0c5b14727:packages/browser/test/evidence-integration.test.ts:jwt:27 +596c7c21cd5472c99db0f516988b5483354e2fe7:packages/core/test/redact.test.ts:jwt:258 +596c7c21cd5472c99db0f516988b5483354e2fe7:packages/core/test/evidence-sanitize.test.ts:jwt:12 +d00b06b3e14aaf1a29a7fc7d9e271619f2d6c41a:packages/cli/test/telemetry.test.ts:github-pat:83 +8bc348cfb7cc88f9e276a7102c063642609f2d18:packages/cli/test/telemetry.test.ts:github-pat:83 diff --git a/bun.lock b/bun.lock index 52d4a46..e0b04bc 100644 --- a/bun.lock +++ b/bun.lock @@ -7,8 +7,10 @@ "devDependencies": { "@types/node": "^24.0.0", "@vitest/coverage-v8": "3.2.6", + "eslint": "10.7.0", "tsup": "^8.5.0", "typescript": "^5.9.0", + "typescript-eslint": "8.65.0", "vitest": "3.2.6", }, }, @@ -82,6 +84,11 @@ }, }, }, + "overrides": { + "body-parser": "2.3.0", + "fast-uri": "3.1.4", + "hono": "4.12.27", + }, "packages": { "@ampproject/remapping": ["@ampproject/remapping@2.3.0", "", { "dependencies": { "@jridgewell/gen-mapping": "^0.3.5", "@jridgewell/trace-mapping": "^0.3.24" } }, "sha512-30iZtAPgz+LTIYoeivqYo853f02jBYSd5uGnGpkFV0M3xOt9aN73erkgYAmZU43x4VfqcnLxW9Kpg3R5LC4YYw=="], @@ -153,8 +160,32 @@ "@esbuild/win32-x64": ["@esbuild/win32-x64@0.27.7", "", { "os": "win32", "cpu": "x64" }, "sha512-56hiAJPhwQ1R4i+21FVF7V8kSD5zZTdHcVuRFMW0hn753vVfQN8xlx4uOPT4xoGH0Z/oVATuR82AiqSTDIpaHg=="], + "@eslint-community/eslint-utils": ["@eslint-community/eslint-utils@4.10.1", "", { "dependencies": { "eslint-visitor-keys": "^3.4.3" }, "peerDependencies": { "eslint": "^6.0.0 || ^7.0.0 || >=8.0.0" } }, "sha512-cuadcxVFE8sDK6iWJbs8Sn0av2Nrh2QSGQhVlBW9AaAHqHwjWsZHT8LJ4hFGPh7ASBV2deFdM7H/DPjulmh8rg=="], + + "@eslint-community/regexpp": ["@eslint-community/regexpp@4.12.2", "", {}, "sha512-EriSTlt5OC9/7SXkRSCAhfSxxoSUgBm33OH+IkwbdpgoqsSsUg7y3uh+IICI/Qg4BBWr3U2i39RpmycbxMq4ew=="], + + "@eslint/config-array": ["@eslint/config-array@0.23.5", "", { "dependencies": { "@eslint/object-schema": "^3.0.5", "debug": "^4.3.1", "minimatch": "^10.2.4" } }, "sha512-Y3kKLvC1dvTOT+oGlqNQ1XLqK6D1HU2YXPc52NmAlJZbMMWDzGYXMiPRJ8TYD39muD/OTjlZmNJ4ib7dvSrMBA=="], + + "@eslint/config-helpers": ["@eslint/config-helpers@0.6.0", "", { "dependencies": { "@eslint/core": "^1.2.1" } }, "sha512-ii6Bw9jJ2zi2cWA2Z+9/QZ/+3DX6kwaV5Q986D/CdP3Lap3w/pgQZ373FV7byY/i7L4IRH/G43I5dz1ClsCbpA=="], + + "@eslint/core": ["@eslint/core@1.2.1", "", { "dependencies": { "@types/json-schema": "^7.0.15" } }, "sha512-MwcE1P+AZ4C6DWlpin/OmOA54mmIZ/+xZuJiQd4SyB29oAJjN30UW9wkKNptW2ctp4cEsvhlLY/CsQ1uoHDloQ=="], + + "@eslint/object-schema": ["@eslint/object-schema@3.0.5", "", {}, "sha512-vqTaUEgxzm+YDSdElad6PiRoX4t8VGDjCtt05zn4nU810UIx/uNEV7/lZJ6KwFThKZOzOxzXy48da+No7HZaMw=="], + + "@eslint/plugin-kit": ["@eslint/plugin-kit@0.7.2", "", { "dependencies": { "@eslint/core": "^1.2.1", "levn": "^0.4.1" } }, "sha512-+CNAzxglkrpNf/kKywqQfk74QjtceuOE7Qm+AF8miRvPF/wmmK5+OJOgVh3AVTT3RP2mH3+FOaxlE5v72owk0A=="], + "@hono/node-server": ["@hono/node-server@1.19.14", "", { "peerDependencies": { "hono": "^4" } }, "sha512-GwtvgtXxnWsucXvbQXkRgqksiH2Qed37H9xHZocE5sA3N8O8O8/8FA3uclQXxXVzc9XBZuEOMK7+r02FmSpHtw=="], + "@humanfs/core": ["@humanfs/core@0.19.2", "", { "dependencies": { "@humanfs/types": "^0.15.0" } }, "sha512-UhXNm+CFMWcbChXywFwkmhqjs3PRCmcSa/hfBgLIb7oQ5HNb1wS0icWsGtSAUNgefHeI+eBrA8I1fxmbHsGdvA=="], + + "@humanfs/node": ["@humanfs/node@0.16.8", "", { "dependencies": { "@humanfs/core": "^0.19.2", "@humanfs/types": "^0.15.0", "@humanwhocodes/retry": "^0.4.0" } }, "sha512-gE1eQNZ3R++kTzFUpdGlpmy8kDZD/MLyHqDwqjkVQI0JMdI1D51sy1H958PNXYkM2rAac7e5/CnIKZrHtPh3BQ=="], + + "@humanfs/types": ["@humanfs/types@0.15.0", "", {}, "sha512-ZZ1w0aoQkwuUuC7Yf+7sdeaNfqQiiLcSRbfI08oAxqLtpXQr9AIVX7Ay7HLDuiLYAaFPu8oBYNq/QIi9URHJ3Q=="], + + "@humanwhocodes/module-importer": ["@humanwhocodes/module-importer@1.0.1", "", {}, "sha512-bxveV4V8v5Yb4ncFTT3rPSgZBOpCkjfK0y4oVVVJwIuDVBRMDXrPyXRL988i5ap9m9bnyEEjWfm5WkBmtffLfA=="], + + "@humanwhocodes/retry": ["@humanwhocodes/retry@0.4.3", "", {}, "sha512-bV0Tgo9K4hfPCek+aMAn81RppFKv2ySDQeMoSZuvTASywNTnVJCArCZE2FWqpvIatKu7VMRLWlR1EazvVhDyhQ=="], + "@isaacs/cliui": ["@isaacs/cliui@8.0.2", "", { "dependencies": { "string-width": "^5.1.2", "string-width-cjs": "npm:string-width@^4.2.0", "strip-ansi": "^7.0.1", "strip-ansi-cjs": "npm:strip-ansi@^6.0.1", "wrap-ansi": "^8.1.0", "wrap-ansi-cjs": "npm:wrap-ansi@^7.0.0" } }, "sha512-O8jcjabXaleOG9DQ0+ARXWZBTfnP4WNAqzuiJK7ll44AmxGKv/J2M4TPjxjY3znBCfvBXFzucm1twdyFybFqEA=="], "@istanbuljs/schema": ["@istanbuljs/schema@0.1.6", "", {}, "sha512-+Sg6GCR/wy1oSmQDFq4LQDAhm3ETKnorxN+y5nbLULOR3P0c14f2Wurzj3/xqPXtasLFfHd5iRFQ7AJt4KH2cw=="], @@ -267,10 +298,34 @@ "@types/deep-eql": ["@types/deep-eql@4.0.2", "", {}, "sha512-c9h9dVVMigMPc4bwTvC5dxqtqJZwQPePsWjPlpSOnojbor6pGqdk541lfA7AqFQr5pB1BRdq0juY9db81BwyFw=="], + "@types/esrecurse": ["@types/esrecurse@4.3.1", "", {}, "sha512-xJBAbDifo5hpffDBuHl0Y8ywswbiAp/Wi7Y/GtAgSlZyIABppyurxVueOPE8LUQOxdlgi6Zqce7uoEpqNTeiUw=="], + "@types/estree": ["@types/estree@1.0.9", "", {}, "sha512-GhdPgy1el4/ImP05X05Uw4cw2/M93BCUmnEvWZNStlCzEKME4Fkk+YpoA5OiHNQmoS7Cafb8Xa3Pya8m1Qrzeg=="], + "@types/json-schema": ["@types/json-schema@7.0.15", "", {}, "sha512-5+fP8P8MFNC+AyZCDxrB2pkZFPGzqQWUzpSeuuVLvm8VMcorNYavBqoFcxK8bQz4Qsbn4oUEEem4wDLfcysGHA=="], + "@types/node": ["@types/node@24.13.1", "", { "dependencies": { "undici-types": "~7.18.0" } }, "sha512-RSpUJGmvsJ1ZeBehQZFhIdpsz+bIpES0nIQXko4Ybq+N+kX6XvOq3Jo+iJ82FWLdblFq85AsMikd3m35jgezYg=="], + "@typescript-eslint/eslint-plugin": ["@typescript-eslint/eslint-plugin@8.65.0", "", { "dependencies": { "@eslint-community/regexpp": "^4.12.2", "@typescript-eslint/scope-manager": "8.65.0", "@typescript-eslint/type-utils": "8.65.0", "@typescript-eslint/utils": "8.65.0", "@typescript-eslint/visitor-keys": "8.65.0", "ignore": "^7.0.5", "natural-compare": "^1.4.0", "ts-api-utils": "^2.5.0" }, "peerDependencies": { "@typescript-eslint/parser": "^8.65.0", "eslint": "^8.57.0 || ^9.0.0 || ^10.0.0", "typescript": ">=4.8.4 <6.1.0" } }, "sha512-IEgob78X12rHpUmtcwFsXhZdVGJtwTVP8FiCLZkR6GlYVrl2PcuB+KhCE5BlVC/eQpQnu8WXRtkHZuPar+gCRA=="], + + "@typescript-eslint/parser": ["@typescript-eslint/parser@8.65.0", "", { "dependencies": { "@typescript-eslint/scope-manager": "8.65.0", "@typescript-eslint/types": "8.65.0", "@typescript-eslint/typescript-estree": "8.65.0", "@typescript-eslint/visitor-keys": "8.65.0", "debug": "^4.4.3" }, "peerDependencies": { "eslint": "^8.57.0 || ^9.0.0 || ^10.0.0", "typescript": ">=4.8.4 <6.1.0" } }, "sha512-CZ4nMxWwgu1HEEFNkeaCptra9QCtkmKdgf3sWh1rl1trIhmxLilgTV4cwcbQ4wemnT4sWQN8CaKOmdYx+g2gMA=="], + + "@typescript-eslint/project-service": ["@typescript-eslint/project-service@8.65.0", "", { "dependencies": { "@typescript-eslint/tsconfig-utils": "^8.65.0", "@typescript-eslint/types": "^8.65.0", "debug": "^4.4.3" }, "peerDependencies": { "typescript": ">=4.8.4 <6.1.0" } }, "sha512-SxnPhbTsGahizDgbu7oqFH/xVtzIqMd/s+WtnSxNxJZJpLbdT5IPdzg8EZxO3+PoKahXmwJLeNQOpKJb3/bi7Q=="], + + "@typescript-eslint/scope-manager": ["@typescript-eslint/scope-manager@8.65.0", "", { "dependencies": { "@typescript-eslint/types": "8.65.0", "@typescript-eslint/visitor-keys": "8.65.0" } }, "sha512-Esbl8OSYiVxBokYgWPf7VVWg/BE798wXhimnn9ML9Pt5qoDf8bfQlgjlKXR/k98+AcNzlLKYrpCcrcuZ9DZLgg=="], + + "@typescript-eslint/tsconfig-utils": ["@typescript-eslint/tsconfig-utils@8.65.0", "", { "peerDependencies": { "typescript": ">=4.8.4 <6.1.0" } }, "sha512-j6GzGqCiRdA7Qhur2VVmKZAkBLfnHFQfx4TaJGL9RMveZqCo48jSHHO0DTgizEnGhtWnqmbtCUSrqSkdiY/0Hg=="], + + "@typescript-eslint/type-utils": ["@typescript-eslint/type-utils@8.65.0", "", { "dependencies": { "@typescript-eslint/types": "8.65.0", "@typescript-eslint/typescript-estree": "8.65.0", "@typescript-eslint/utils": "8.65.0", "debug": "^4.4.3", "ts-api-utils": "^2.5.0" }, "peerDependencies": { "eslint": "^8.57.0 || ^9.0.0 || ^10.0.0", "typescript": ">=4.8.4 <6.1.0" } }, "sha512-YjaZ7PRI5qY7ax2L3PbvX0rRyGtipAReCWs0mhhDBHjH/vl0g0BonaGXrKdKpMbIIsMIwDgbk/xzkBTyAltS5g=="], + + "@typescript-eslint/types": ["@typescript-eslint/types@8.65.0", "", {}, "sha512-JSSwWNy+H0E/01jJEM+hrX6N0OFDzFzeIhHFSAS01tlVaevpG8cFyYRPhS5yjGOvBUx3sqQHVMjCL1CAZZMxBg=="], + + "@typescript-eslint/typescript-estree": ["@typescript-eslint/typescript-estree@8.65.0", "", { "dependencies": { "@typescript-eslint/project-service": "8.65.0", "@typescript-eslint/tsconfig-utils": "8.65.0", "@typescript-eslint/types": "8.65.0", "@typescript-eslint/visitor-keys": "8.65.0", "debug": "^4.4.3", "minimatch": "^10.2.2", "semver": "^7.7.3", "tinyglobby": "^0.2.15", "ts-api-utils": "^2.5.0" }, "peerDependencies": { "typescript": ">=4.8.4 <6.1.0" } }, "sha512-JboAE2swaYt4tb1fHhHTABE2K+OLy09XfcTbhnk4Pw96f9dd2e9iYsJ28gBggHlo5z5x1rkyWvcPoTuNTd4oGg=="], + + "@typescript-eslint/utils": ["@typescript-eslint/utils@8.65.0", "", { "dependencies": { "@eslint-community/eslint-utils": "^4.9.1", "@typescript-eslint/scope-manager": "8.65.0", "@typescript-eslint/types": "8.65.0", "@typescript-eslint/typescript-estree": "8.65.0" }, "peerDependencies": { "eslint": "^8.57.0 || ^9.0.0 || ^10.0.0", "typescript": ">=4.8.4 <6.1.0" } }, "sha512-gXiwIHsYreboxeJucHKPvgwl7dXt50mF8s1/c00cP/WoVTyWKFdtfhRWwZiXYFU5H2O8vVoSLNrexFZjYS/SGA=="], + + "@typescript-eslint/visitor-keys": ["@typescript-eslint/visitor-keys@8.65.0", "", { "dependencies": { "@typescript-eslint/types": "8.65.0", "eslint-visitor-keys": "^5.0.0" } }, "sha512-8C71BQkGjiMmXtop7pHVJu1l2NNShFdkCyD6a2ezzs5vU/L3LRtb69EtcteFwz0mYMPzIgOw0n6OV4VBUWZd7A=="], + "@vitest/coverage-v8": ["@vitest/coverage-v8@3.2.6", "", { "dependencies": { "@ampproject/remapping": "^2.3.0", "@bcoe/v8-coverage": "^1.0.2", "ast-v8-to-istanbul": "^0.3.3", "debug": "^4.4.1", "istanbul-lib-coverage": "^3.2.2", "istanbul-lib-report": "^3.0.1", "istanbul-lib-source-maps": "^5.0.6", "istanbul-reports": "^3.1.7", "magic-string": "^0.30.17", "magicast": "^0.3.5", "std-env": "^3.9.0", "test-exclude": "^7.0.1", "tinyrainbow": "^2.0.0" }, "peerDependencies": { "@vitest/browser": "3.2.6", "vitest": "3.2.6" }, "optionalPeers": ["@vitest/browser"] }, "sha512-LsAdmUapA0qSN306d8+zOyawM0hFm2m2Hg9IwVNIKBm+qJV8cijiq2c+gxKZcB1HCfIWAy+0qEZDCUQA58A1cw=="], "@vitest/expect": ["@vitest/expect@3.2.6", "", { "dependencies": { "@types/chai": "^5.2.2", "@vitest/spy": "3.2.6", "@vitest/utils": "3.2.6", "chai": "^5.2.0", "tinyrainbow": "^2.0.0" } }, "sha512-1+7q9BtaKzEmO+fmNT3kYvoNn5Y71XWAx2Q5HRim4tTVRQVRv4uJFAQ5FbK0OPUeNP/WmVCpxYxoJdvuHVjzBQ=="], @@ -291,7 +346,9 @@ "acorn": ["acorn@8.16.0", "", { "bin": { "acorn": "bin/acorn" } }, "sha512-UVJyE9MttOsBQIDKw1skb9nAwQuR5wuGD3+82K6JgJlm/Y+KI92oNsMNGZCYdDsVtRHSak0pcV5Dno5+4jh9sw=="], - "ajv": ["ajv@8.20.0", "", { "dependencies": { "fast-deep-equal": "^3.1.3", "fast-uri": "^3.0.1", "json-schema-traverse": "^1.0.0", "require-from-string": "^2.0.2" } }, "sha512-Thbli+OlOj+iMPYFBVBfJ3OmCAnaSyNn4M1vz9T6Gka5Jt9ba/HIR56joy65tY6kx/FCF5VXNB819Y7/GUrBGA=="], + "acorn-jsx": ["acorn-jsx@5.3.2", "", { "peerDependencies": { "acorn": "^6.0.0 || ^7.0.0 || ^8.0.0" } }, "sha512-rq9s+JNhf0IChjtDXxllJ7g41oZk5SlXtp0LHwyA5cejwn7vKmKp4pPri6YEePv2PU65sAsegbXtIinmDFDXgQ=="], + + "ajv": ["ajv@6.15.0", "", { "dependencies": { "fast-deep-equal": "^3.1.1", "fast-json-stable-stringify": "^2.0.0", "json-schema-traverse": "^0.4.1", "uri-js": "^4.2.2" } }, "sha512-fgFx7Hfoq60ytK2c7DhnF8jIvzYgOMxfugjLOSMHjLIPgenqa7S7oaagATUq99mV6IYvN2tRmC0wnTYX6iPbMw=="], "ajv-formats": ["ajv-formats@3.0.1", "", { "dependencies": { "ajv": "^8.0.0" } }, "sha512-8iUql50EUR+uUcdRQ3HDqa6EVyo3docL8g5WJ3FNcWmu62IbkGUue/pEyLBW8VGKKucTPgqeks4fIU1DA4yowQ=="], @@ -309,9 +366,9 @@ "balanced-match": ["balanced-match@4.0.4", "", {}, "sha512-BLrgEcRTwX2o6gGxGOCNyMvGSp35YofuYzw9h1IMTRmKqttAZZVU67bdb9Pr2vUHA8+j3i2tJfjO6C6+4myGTA=="], - "body-parser": ["body-parser@2.2.2", "", { "dependencies": { "bytes": "^3.1.2", "content-type": "^1.0.5", "debug": "^4.4.3", "http-errors": "^2.0.0", "iconv-lite": "^0.7.0", "on-finished": "^2.4.1", "qs": "^6.14.1", "raw-body": "^3.0.1", "type-is": "^2.0.1" } }, "sha512-oP5VkATKlNwcgvxi0vM0p/D3n2C3EReYVX+DNYs5TjZFn/oQt2j+4sVJtSMr18pdRr8wjTcBl6LoV+FUwzPmNA=="], + "body-parser": ["body-parser@2.3.0", "", { "dependencies": { "bytes": "^3.1.2", "content-type": "^2.0.0", "debug": "^4.4.3", "http-errors": "^2.0.1", "iconv-lite": "^0.7.2", "on-finished": "^2.4.1", "qs": "^6.15.2", "raw-body": "^3.0.2", "type-is": "^2.1.0" } }, "sha512-2cGmJupaNgg+QUwVLAucDuWuoMZ6EX9iHDRswZ5lsNYEmwPaRknMPCLZz07yTzVq/83p4o/wzbDZbBrTvGGTIw=="], - "brace-expansion": ["brace-expansion@5.0.7", "", { "dependencies": { "balanced-match": "^4.0.2" } }, "sha512-7oFy703dxfY3/NLxC1fh2SUCQ0H9rmAY+5EpDVfXjUTTs+HEwR2nYaqLv+GWcTsumwxPfiz6CzCNkwXwBUwqCA=="], + "brace-expansion": ["brace-expansion@5.0.8", "", { "dependencies": { "balanced-match": "^4.0.2" } }, "sha512-JZyDyq3D4AUifKTPOB7DELf6XsB3WdPuNxCtob1vFXPsSXhdAiHBWJ/tJ8HAc9aH84BK+5JFZLNkJKx3G9kzQg=="], "bundle-require": ["bundle-require@5.1.0", "", { "dependencies": { "load-tsconfig": "^0.2.3" }, "peerDependencies": { "esbuild": ">=0.18" } }, "sha512-3WrrOuZiyaaZPWiEt4G3+IffISVC9HYlWueJEBWED4ZH4aIAC2PnkdnuRrR94M+w6yGWn4AglWtJtBI8YqvgoA=="], @@ -359,6 +416,8 @@ "deep-eql": ["deep-eql@5.0.2", "", {}, "sha512-h5k/5U50IJJFpzfL6nO9jaaumfjO/f2NjK/oYB2Djzm4p9L+3T9qWpZqZ2hAbLPuuYq9wrU08WQyBTL5GbPk5Q=="], + "deep-is": ["deep-is@0.1.4", "", {}, "sha512-oIPzksmTg4/MriiaYGO+okXDT7ztn/w3Eptv/+gSIdMdKsJo0u4CfYNFJPy+4SKMuCqGw2wxnA+URMg3t8a/bQ=="], + "depd": ["depd@2.0.0", "", {}, "sha512-g7nH6P6dyDioJogAAGprGpCtVImJhpPk/roCzdb3fIh61/s/nPsfR6onyMwkCAR/OlC3yBC0lESvUoQEAssIrw=="], "dunder-proto": ["dunder-proto@1.0.1", "", { "dependencies": { "call-bind-apply-helpers": "^1.0.1", "es-errors": "^1.3.0", "gopd": "^1.2.0" } }, "sha512-KIN/nDJBQRcXw0MLVhZE9iQHmG68qAVIBg9CqmUYjmQIhgij9U5MFvrqkUL5FbtyyzZuOeOt0zdeRe4UY7ct+A=="], @@ -383,12 +442,26 @@ "escape-html": ["escape-html@1.0.3", "", {}, "sha512-NiSupZ4OeuGwr68lGIeym/ksIZMJodUGOSCZ/FSnTxcrekbvqrgdUxlJOMpijaKZVjAJrWrGs/6Jy8OMuyj9ow=="], + "escape-string-regexp": ["escape-string-regexp@4.0.0", "", {}, "sha512-TtpcNJ3XAzx3Gq8sWRzJaVajRs0uVxA2YAkdb1jm2YkPz4G6egUFAyA3n5vtEIZefPk5Wa4UXbKuS5fKkJWdgA=="], + + "eslint": ["eslint@10.7.0", "", { "dependencies": { "@eslint-community/eslint-utils": "^4.8.0", "@eslint-community/regexpp": "^4.12.2", "@eslint/config-array": "^0.23.5", "@eslint/config-helpers": "^0.6.0", "@eslint/core": "^1.2.1", "@eslint/plugin-kit": "^0.7.2", "@humanfs/node": "^0.16.6", "@humanwhocodes/module-importer": "^1.0.1", "@humanwhocodes/retry": "^0.4.2", "@types/estree": "^1.0.6", "ajv": "^6.14.0", "cross-spawn": "^7.0.6", "debug": "^4.3.2", "escape-string-regexp": "^4.0.0", "eslint-scope": "^9.1.2", "eslint-visitor-keys": "^5.0.1", "espree": "^11.2.0", "esquery": "^1.7.0", "esutils": "^2.0.2", "fast-deep-equal": "^3.1.3", "file-entry-cache": "^8.0.0", "find-up": "^5.0.0", "glob-parent": "^6.0.2", "ignore": "^5.2.0", "imurmurhash": "^0.1.4", "is-glob": "^4.0.0", "json-stable-stringify-without-jsonify": "^1.0.1", "minimatch": "^10.2.4", "natural-compare": "^1.4.0", "optionator": "^0.9.3" }, "peerDependencies": { "jiti": "*" }, "optionalPeers": ["jiti"], "bin": { "eslint": "bin/eslint.js" } }, "sha512-GVTD7s1vdIl6UYvAfriOPeY1Df8LIZjfofLvHwde+erDHGGuHyuM6xoxRxmHiebhYuD2p1vN4wWh0XzPARSGDQ=="], + + "eslint-scope": ["eslint-scope@9.1.2", "", { "dependencies": { "@types/esrecurse": "^4.3.1", "@types/estree": "^1.0.8", "esrecurse": "^4.3.0", "estraverse": "^5.2.0" } }, "sha512-xS90H51cKw0jltxmvmHy2Iai1LIqrfbw57b79w/J7MfvDfkIkFZ+kj6zC3BjtUwh150HsSSdxXZcsuv72miDFQ=="], + + "eslint-visitor-keys": ["eslint-visitor-keys@5.0.1", "", {}, "sha512-tD40eHxA35h0PEIZNeIjkHoDR4YjjJp34biM0mDvplBe//mB+IHCqHDGV7pxF+7MklTvighcCPPZC7ynWyjdTA=="], + + "espree": ["espree@11.2.0", "", { "dependencies": { "acorn": "^8.16.0", "acorn-jsx": "^5.3.2", "eslint-visitor-keys": "^5.0.1" } }, "sha512-7p3DrVEIopW1B1avAGLuCSh1jubc01H2JHc8B4qqGblmg5gI9yumBgACjWo4JlIc04ufug4xJ3SQI8HkS/Rgzw=="], + "esquery": ["esquery@1.7.0", "", { "dependencies": { "estraverse": "^5.1.0" } }, "sha512-Ap6G0WQwcU/LHsvLwON1fAQX9Zp0A2Y6Y/cJBl9r/JbW90Zyg4/zbG6zzKa2OTALELarYHmKu0GhpM5EO+7T0g=="], + "esrecurse": ["esrecurse@4.3.0", "", { "dependencies": { "estraverse": "^5.2.0" } }, "sha512-KmfKL3b6G+RXvP8N1vr3Tq1kL/oCFgn2NYXEtqP8/L3pKapUA4G8cFVaoF3SU323CD4XypR/ffioHmkti6/Tag=="], + "estraverse": ["estraverse@5.3.0", "", {}, "sha512-MMdARuVEQziNTeJD8DgMqmhwR11BRQ/cBP+pLtYdSTnf3MIO8fFeiINEbX36ZdNlfU/7A9f3gUw49B3oQsvwBA=="], "estree-walker": ["estree-walker@3.0.3", "", { "dependencies": { "@types/estree": "^1.0.0" } }, "sha512-7RUKfXgSMMkzt6ZuXmqapOurLGPPfgj6l9uRZ7lRGolvk0y2yocc35LdcxKC5PQZdn2DMqioAQ2NoWcrTKmm6g=="], + "esutils": ["esutils@2.0.3", "", {}, "sha512-kVscqXk4OCp68SZ0dkgEKVi6/8ij300KBWTJq32P/dYeWTSwK41WyTxalN1eRmA5Z9UU/LX9D7FWSmV9SAYx6g=="], + "etag": ["etag@1.8.1", "", {}, "sha512-aIL5Fx7mawVa300al2BnEE4iNvo1qETxLrPI/o05L7z6go7fCw1J6EQmbK4FmJ2AS7kgVF/KEZWufBfdClMcPg=="], "eventsource": ["eventsource@3.0.7", "", { "dependencies": { "eventsource-parser": "^3.0.1" } }, "sha512-CRT1WTyuQoD771GW56XEZFQ/ZoSfWid1alKGDYMmkt2yl8UXrVR4pspqWNEcqKvVIzg6PAltWjxcSSPrboA4iA=="], @@ -403,14 +476,26 @@ "fast-deep-equal": ["fast-deep-equal@3.1.3", "", {}, "sha512-f3qQ9oQy9j2AhBe/H9VC91wLmKBCCU/gDOnKNAYG5hswO7BLKj09Hc5HYNz9cGI++xlpDCIgDaitVs03ATR84Q=="], - "fast-uri": ["fast-uri@3.1.2", "", {}, "sha512-rVjf7ArG3LTk+FS6Yw81V1DLuZl1bRbNrev6Tmd/9RaroeeRRJhAt7jg/6YFxbvAQXUCavSoZhPPj6oOx+5KjQ=="], + "fast-json-stable-stringify": ["fast-json-stable-stringify@2.1.0", "", {}, "sha512-lhd/wF+Lk98HZoTCtlVraHtfh5XYijIjalXck7saUtuanSDyLMxnHhSXEDJqHxD7msR8D0uCmqlkwjCV8xvwHw=="], + + "fast-levenshtein": ["fast-levenshtein@2.0.6", "", {}, "sha512-DCXu6Ifhqcks7TZKY3Hxp3y6qphY5SJZmrWMDrKcERSOXWQdMhU9Ig/PYrzyw/ul9jOIyh0N4M0tbC5hodg8dw=="], + + "fast-uri": ["fast-uri@3.1.4", "", {}, "sha512-8JnbkQ4juDyvYs4mgFGQqg4yCYtFDtUtmp2QIQq11ZZe5CFQ5wcqm1rqDgAh/QdMySuBnPzMUiJUNZG5N/AiQw=="], "fdir": ["fdir@6.5.0", "", { "peerDependencies": { "picomatch": "^3 || ^4" }, "optionalPeers": ["picomatch"] }, "sha512-tIbYtZbucOs0BRGqPJkshJUYdL+SDH7dVM8gjy+ERp3WAUjLEFJE+02kanyHtwjWOnwrKYBiwAmM0p4kLJAnXg=="], + "file-entry-cache": ["file-entry-cache@8.0.0", "", { "dependencies": { "flat-cache": "^4.0.0" } }, "sha512-XXTUwCvisa5oacNGRP9SfNtYBNAMi+RPwBFmblZEF7N7swHYQS6/Zfk7SRwx4D5j3CH211YNRco1DEMNVfZCnQ=="], + "finalhandler": ["finalhandler@2.1.1", "", { "dependencies": { "debug": "^4.4.0", "encodeurl": "^2.0.0", "escape-html": "^1.0.3", "on-finished": "^2.4.1", "parseurl": "^1.3.3", "statuses": "^2.0.1" } }, "sha512-S8KoZgRZN+a5rNwqTxlZZePjT/4cnm0ROV70LedRHZ0p8u9fRID0hJUZQpkKLzro8LfmC8sx23bY6tVNxv8pQA=="], + "find-up": ["find-up@5.0.0", "", { "dependencies": { "locate-path": "^6.0.0", "path-exists": "^4.0.0" } }, "sha512-78/PXT1wlLLDgTzDs7sjq9hzz0vXD+zn+7wypEe4fXQxCmdmqfGsEPQxmiCSQI3ajFV91bVSsvNtrJRiW6nGng=="], + "fix-dts-default-cjs-exports": ["fix-dts-default-cjs-exports@1.0.1", "", { "dependencies": { "magic-string": "^0.30.17", "mlly": "^1.7.4", "rollup": "^4.34.8" } }, "sha512-pVIECanWFC61Hzl2+oOCtoJ3F17kglZC/6N94eRWycFgBH35hHx0Li604ZIzhseh97mf2p0cv7vVrOZGoqhlEg=="], + "flat-cache": ["flat-cache@4.0.1", "", { "dependencies": { "flatted": "^3.2.9", "keyv": "^4.5.4" } }, "sha512-f7ccFPK3SXFHpx15UIGyRJ/FJQctuKZ0zVuN3frBo4HnK3cay9VEW0R6yPYFHC0AgqhukPzKjq22t5DmAyqGyw=="], + + "flatted": ["flatted@3.4.3", "", {}, "sha512-/zipXxyO6rGvuNGDiULY9MvEGSkb2gaG4GGH4ygMi0ZZzyMHdUZBmntJmx5x1G2VuPytCwGN4xsJP6cw+sK+vQ=="], + "foreground-child": ["foreground-child@3.3.1", "", { "dependencies": { "cross-spawn": "^7.0.6", "signal-exit": "^4.0.1" } }, "sha512-gIXjKqtFuWEgzFRJA9WCQeSJLZDjgJUOMCMzxtvFq/37KojM1BFGufqsCy0r4qSQmYLsZYMeyRqzIWOMup03sw=="], "forwarded": ["forwarded@0.2.0", "", {}, "sha512-buRG0fpBtRHSTCOASe6hD258tEubFoRLb4ZNA6NxMVHNw2gOcwHo9wyablzMzOA5z9xA9L1KNjk/Nt6MT9aYow=="], @@ -427,6 +512,8 @@ "glob": ["glob@10.5.0", "", { "dependencies": { "foreground-child": "^3.1.0", "jackspeak": "^3.1.2", "minimatch": "^9.0.4", "minipass": "^7.1.2", "package-json-from-dist": "^1.0.0", "path-scurry": "^1.11.1" }, "bin": { "glob": "dist/esm/bin.mjs" } }, "sha512-DfXN8DfhJ7NH3Oe7cFmu3NCu1wKbkReJ8TorzSAFbSKrlNaQSKfIzqYqVY8zlbs2NLBbWpRiU52GX2PbaBVNkg=="], + "glob-parent": ["glob-parent@6.0.2", "", { "dependencies": { "is-glob": "^4.0.3" } }, "sha512-XxwI8EOhVQgWp6iDL+3b0r86f4d6AX6zSU55HfB4ydCEuXLXc5FcYeOu+nnGftS4TEju/11rt4KJPTMgbfmv4A=="], + "gopd": ["gopd@1.2.0", "", {}, "sha512-ZUKRh6/kUFoAiTAtTYPZJ3hw9wNxx+BIBOijnlG9PnrJsCcSjs1wyyD6vJpaYtgnzDrKYRSqf3OO6Rfa93xsRg=="], "has-flag": ["has-flag@4.0.0", "", {}, "sha512-EykJT/Q1KjTWctppgIAgfSO0tKVuZUjhgMr17kqTumMl6Afv3EISleU7qZUzoXDFTAHTDC4NOoG/ZxU3EvlMPQ=="], @@ -435,7 +522,7 @@ "hasown": ["hasown@2.0.4", "", { "dependencies": { "function-bind": "^1.1.2" } }, "sha512-T2UbfbBEF32wiepXIsMlTW9+dDYC6wMh/t/vYA4tuOMKqWz/n3vr1NFSxQiyP+zk2mXsoMA/i/7qV6LKut1t1A=="], - "hono": ["hono@4.12.25", "", {}, "sha512-2NFaIyNVgJmBs/ecmtGzlmluTFs5cHEWGTdu0t1HBwYzoGXOL5nUQBRMXsXWla5i4KkG//QMzVP88m1+I3fdAQ=="], + "hono": ["hono@4.12.27", "", {}, "sha512-1yrb/+w6HWQJrUCLkJ2IF5jNIPvvFkblV5RNOYl6bV+OA6p9GLcMpHFFGTosSvHvcAUibuUukRqhlYI4z32C7Q=="], "html-escaper": ["html-escaper@2.0.2", "", {}, "sha512-H2iMtd0I4Mt5eYiapRdIDjp+XzelXQ0tFE4JS7YFwFevXXMmOp9myNrUvCg0D6ws8iqkRPBfKHgbwig1SmlLfg=="], @@ -443,16 +530,24 @@ "iconv-lite": ["iconv-lite@0.7.2", "", { "dependencies": { "safer-buffer": ">= 2.1.2 < 3.0.0" } }, "sha512-im9DjEDQ55s9fL4EYzOAv0yMqmMBSZp6G0VvFyTMPKWxiSBHUj9NW/qqLmXUwXrrM7AvqSlTCfvqRb0cM8yYqw=="], + "ignore": ["ignore@5.3.2", "", {}, "sha512-hsBTNUqQTDwkWtcdYI2i06Y/nUBEsNEDJKjWdigLvegy8kDuJAS8uRlpkkcQpyEXL0Z/pjDy5HBmMjRCJ2gq+g=="], + "import-in-the-middle": ["import-in-the-middle@3.3.1", "", { "dependencies": { "cjs-module-lexer": "^2.2.0", "es-module-lexer": "^2.2.0", "module-details-from-path": "^1.0.4" } }, "sha512-0rymlHSFLwZ0ixx8DaQkoIyZojJPY2a0K2nEYslhKJ6jIYO/m0IcCb7iQsFPmS7WmKwISZiIrv5Icstrw/CmqA=="], + "imurmurhash": ["imurmurhash@0.1.4", "", {}, "sha512-JmXMZ6wuvDmLiHEml9ykzqO6lwFbof0GG4IkcGaENdCRDDmMVnny7s5HsIgHCbaq0w2MyPhDqkhTUgS2LU2PHA=="], + "inherits": ["inherits@2.0.4", "", {}, "sha512-k/vGaX4/Yla3WzyMCvTQOXYeIHvqOKtnqBduzTHpzpQZzAskKMhZ2K+EnBiSM9zGSoIFeMpXKxa4dYeZIQqewQ=="], "ip-address": ["ip-address@10.2.0", "", {}, "sha512-/+S6j4E9AHvW9SWMSEY9Xfy66O5PWvVEJ08O0y5JGyEKQpojb0K0GKpz/v5HJ/G0vi3D2sjGK78119oXZeE0qA=="], "ipaddr.js": ["ipaddr.js@1.9.1", "", {}, "sha512-0KI/607xoxSToH7GjN1FfSbLoU0+btTicjsQSWQlh/hZykN8KpmMf7uYwPW3R+akZ6R/w18ZlXSHBYXiYUPO3g=="], + "is-extglob": ["is-extglob@2.1.1", "", {}, "sha512-SbKbANkN603Vi4jEZv49LeVJMn4yGwsbzZworEoyEiutsN3nJYdbO36zfhGJ6QEDpOZIFkDtnq5JRxmvl3jsoQ=="], + "is-fullwidth-code-point": ["is-fullwidth-code-point@3.0.0", "", {}, "sha512-zymm5+u+sCsSWyD9qNaejV3DFvhCKclKdizYaJUuHA83RLjb7nSuGnddCHGv0hk+KY7BMAlsWeK4Ueg6EV6XQg=="], + "is-glob": ["is-glob@4.0.3", "", { "dependencies": { "is-extglob": "^2.1.1" } }, "sha512-xelSayHH36ZgE7ZWhli7pW34hNbNl8Ojv5KVmkJD4hBdD3th8Tfk9vYasLM+mXWOZhFkgZfxhLSnrwRr4elSSg=="], + "is-promise": ["is-promise@4.0.0", "", {}, "sha512-hvpoI6korhJMnej285dSg6nu1+e6uxs7zG3BYAm5byqDsgJNWwxzM6z6iZiAgQR4TJ30JmBTOwqZUw3WlyH3AQ=="], "isexe": ["isexe@2.0.0", "", {}, "sha512-RHxMLp9lnKHGHRng9QFhRCMbYAcVpn69smSGcq3f36xjgVVWThj4qqLbTLlq7Ssj8B+fIQ1EuCEGI2lKsyQeIw=="], @@ -473,16 +568,26 @@ "js-tokens": ["js-tokens@10.0.0", "", {}, "sha512-lM/UBzQmfJRo9ABXbPWemivdCW8V2G8FHaHdypQaIy523snUjog0W71ayWXTjiR+ixeMyVHN2XcpnTd/liPg/Q=="], - "json-schema-traverse": ["json-schema-traverse@1.0.0", "", {}, "sha512-NM8/P9n3XjXhIZn1lLhkFaACTOURQXjWhV4BA/RnOv8xvgqtqpAX9IO4mRQxSx1Rlo4tqzeqb0sOlruaOy3dug=="], + "json-buffer": ["json-buffer@3.0.1", "", {}, "sha512-4bV5BfR2mqfQTJm+V5tPPdf+ZpuhiIvTuAB5g8kcrXOZpTT/QwwVRWBywX1ozr6lEuPdbHxwaJlm9G6mI2sfSQ=="], + + "json-schema-traverse": ["json-schema-traverse@0.4.1", "", {}, "sha512-xbbCH5dCYU5T8LcEhhuh7HJ88HXuW3qsI3Y0zOZFKfZEHcpWiHU/Jxzk629Brsab/mMiHQti9wMP+845RPe3Vg=="], "json-schema-typed": ["json-schema-typed@8.0.2", "", {}, "sha512-fQhoXdcvc3V28x7C7BMs4P5+kNlgUURe2jmUT1T//oBRMDrqy1QPelJimwZGo7Hg9VPV3EQV5Bnq4hbFy2vetA=="], + "json-stable-stringify-without-jsonify": ["json-stable-stringify-without-jsonify@1.0.1", "", {}, "sha512-Bdboy+l7tA3OGW6FjyFHWkP5LuByj1Tk33Ljyq0axyzdk9//JSi2u3fP1QSmd1KNwq6VOKYGlAu87CisVir6Pw=="], + + "keyv": ["keyv@4.5.4", "", { "dependencies": { "json-buffer": "3.0.1" } }, "sha512-oxVHkHR/EJf2CNXnWxRLW6mg7JyCCUcG0DtEGmL2ctUo1PNTin1PUil+r/+4r5MpVgC/fn1kjsx7mjSujKqIpw=="], + + "levn": ["levn@0.4.1", "", { "dependencies": { "prelude-ls": "^1.2.1", "type-check": "~0.4.0" } }, "sha512-+bT2uH4E5LGE7h/n3evcS/sQlJXCpIp6ym8OWJ5eV6+67Dsql/LaaT7qJBAt2rzfoa/5QBGBhxDix1dMt2kQKQ=="], + "lilconfig": ["lilconfig@3.1.3", "", {}, "sha512-/vlFKAoH5Cgt3Ie+JLhRbwOsCQePABiU3tJ1egGvyQ+33R/vcwM2Zl2QR/LzjsBeItPt3oSVXapn+m4nQDvpzw=="], "lines-and-columns": ["lines-and-columns@1.2.4", "", {}, "sha512-7ylylesZQ/PV29jhEDl3Ufjo6ZX7gCqJr5F7PKrqc93v7fzSymt1BpwEU8nAUXs8qzzvqhbjhK5QZg6Mt/HkBg=="], "load-tsconfig": ["load-tsconfig@0.2.5", "", {}, "sha512-IXO6OCs9yg8tMKzfPZ1YmheJbZCiEsnBdcB03l0OcfK9prKnJb96siuHCr5Fl37/yo9DnKU+TLpxzTUspw9shg=="], + "locate-path": ["locate-path@6.0.0", "", { "dependencies": { "p-locate": "^5.0.0" } }, "sha512-iPZK6eYjbxRu3uB4/WZ3EsEIMJFMqAoopl3R+zuq0UjcAm/MO6KCweDgPfP3elTztoKP3KtnVHxTn2NHBSDVUw=="], + "loupe": ["loupe@3.2.1", "", {}, "sha512-CdzqowRJCeLU72bHvWqwRBBlLcMEtIvGrlvef74kMnV2AolS9Y8xUv1I0U/MNAWMhBlKIoyuEgoJ0t/bbwHbLQ=="], "lru-cache": ["lru-cache@10.4.3", "", {}, "sha512-JNAzZcXrCt42VGLuYz0zfAzDfAvJWW6AfYlDBQyDV5DClI2m5sAmK+OIO7s59XfsRsWHp02jAJrRadPRGTt6SQ=="], @@ -519,6 +624,8 @@ "nanoid": ["nanoid@3.3.12", "", { "bin": { "nanoid": "bin/nanoid.cjs" } }, "sha512-ZB9RH/39qpq5Vu6Y+NmUaFhQR6pp+M2Xt76XBnEwDaGcVAqhlvxrl3B2bKS5D3NH3QR76v3aSrKaF/Kiy7lEtQ=="], + "natural-compare": ["natural-compare@1.4.0", "", {}, "sha512-OWND8ei3VtNC9h7V60qff3SVobHr996CTwgxubgyQYEpg290h9J0buyECNNJexkFm5sOajh5G116RYA1c8ZMSw=="], + "negotiator": ["negotiator@1.0.0", "", {}, "sha512-8Ofs/AUQh8MaEcrlq5xOX0CQ9ypTF5dl78mjlMNfOK08fzpgTHQRQPBxcPlEtIw0yRpws+Zo/3r+5WRby7u3Gg=="], "object-assign": ["object-assign@4.1.1", "", {}, "sha512-rJgTQnkUnH1sFw8yT6VSU3zD3sWmu6sZhIseY8VX+GRu3P6F7Fu+JNDoXfklElbLJSnc3FUQHVe4cU5hj+BcUg=="], @@ -529,10 +636,18 @@ "once": ["once@1.4.0", "", { "dependencies": { "wrappy": "1" } }, "sha512-lNaJgI+2Q5URQBkccEKHTQOPaXdUxnZZElQTZY0MFUAuaEqe1E+Nyvgdz/aIyNi6Z9MzO5dv1H8n58/GELp3+w=="], + "optionator": ["optionator@0.9.4", "", { "dependencies": { "deep-is": "^0.1.3", "fast-levenshtein": "^2.0.6", "levn": "^0.4.1", "prelude-ls": "^1.2.1", "type-check": "^0.4.0", "word-wrap": "^1.2.5" } }, "sha512-6IpQ7mKUxRcZNLIObR0hz7lxsapSSIYNZJwXPGeF0mTVqGKFIXj1DQcMoT22S3ROcLyY/rz0PWaWZ9ayWmad9g=="], + + "p-limit": ["p-limit@3.1.0", "", { "dependencies": { "yocto-queue": "^0.1.0" } }, "sha512-TYOanM3wGwNGsZN2cVTYPArw454xnXj5qmWF1bEoAc4+cU/ol7GVh7odevjp1FNHduHc3KZMcFduxU5Xc6uJRQ=="], + + "p-locate": ["p-locate@5.0.0", "", { "dependencies": { "p-limit": "^3.0.2" } }, "sha512-LaNjtRWUBY++zB5nE/NwcaoMylSPk+S+ZHNB1TzdbMJMny6dynpAGt7X/tl/QYq3TIeE6nxHppbo2LGymrG5Pw=="], + "package-json-from-dist": ["package-json-from-dist@1.0.1", "", {}, "sha512-UEZIS3/by4OC8vL3P2dTXRETpebLI2NiI5vIrjaD/5UtrkFX/tNbwjTSRAGC/+7CAo2pIcBaRgWmcBBHcsaCIw=="], "parseurl": ["parseurl@1.3.3", "", {}, "sha512-CiyeOxFT/JZyN5m0z9PfXw4SCBJ6Sygz1Dpl0wqjlhDEGGBP1GnsUVEL0p63hoG1fcj3fHynXi9NYO4nWOL+qQ=="], + "path-exists": ["path-exists@4.0.0", "", {}, "sha512-ak9Qy5Q7jYb2Wwcey5Fpvg2KoAc/ZIhLSLOSBmRmygPsGwkVVt0fZa0qrtMz+m6tJTAHfZQ8FnmB4MG4LWy7/w=="], + "path-key": ["path-key@3.1.1", "", {}, "sha512-ojmeN0qd+y0jszEtoY48r0Peq5dwMEkIlCOu6Q5f41lfkswXuKtYrhgoTpLnyIcHm24Uhqx+5Tqm2InSwLhE6Q=="], "path-scurry": ["path-scurry@1.11.1", "", { "dependencies": { "lru-cache": "^10.2.0", "minipass": "^5.0.0 || ^6.0.2 || ^7.0.0" } }, "sha512-Xa4Nw17FS9ApQFJ9umLiJS4orGjm7ZzwUrwamcGQuHSzDyth9boKDaycYdDcZDuqYATXw4HFXgaqWTctW/v1HA=="], @@ -557,8 +672,12 @@ "postcss-load-config": ["postcss-load-config@6.0.1", "", { "dependencies": { "lilconfig": "^3.1.1" }, "peerDependencies": { "jiti": ">=1.21.0", "postcss": ">=8.0.9", "tsx": "^4.8.1", "yaml": "^2.4.2" }, "optionalPeers": ["jiti", "postcss", "tsx", "yaml"] }, "sha512-oPtTM4oerL+UXmx+93ytZVN82RrlY/wPUV8IeDxFrzIjXOLF1pN+EmKPLbubvKHT2HC20xXsCAH2Z+CKV6Oz/g=="], + "prelude-ls": ["prelude-ls@1.2.1", "", {}, "sha512-vkcDPrRZo1QZLbn5RLGPpg/WmIQ65qoWWhcGKf/b5eplkkarX0m9z8ppCat4mlOqUsWpyNuYgO3VRyrYHSzX5g=="], + "proxy-addr": ["proxy-addr@2.0.7", "", { "dependencies": { "forwarded": "0.2.0", "ipaddr.js": "1.9.1" } }, "sha512-llQsMLSUDUPT44jdrU/O37qlnifitDP+ZwrmmZcoSKyLKvtZxpyV0n2/bD/N4tBAAZ/gJEdZU7KMraoK1+XYAg=="], + "punycode": ["punycode@2.3.1", "", {}, "sha512-vYt7UD1U9Wg6138shLtLOvdAu+8DsC/ilFtEVHcH+wydcSpNE20AfSOduf6MkRFahL5FY7X1oU7nKVZFtfq8Fg=="], + "qs": ["qs@6.15.2", "", { "dependencies": { "side-channel": "^1.1.0" } }, "sha512-Rzq0KEyX/w/tEybncDgdkZrJgVUsUMk3xjh3t5bv3S1HTAtg+uOYt72+ZfwiQwKdysThkTBdL/rTi6HDmX9Ddw=="], "range-parser": ["range-parser@1.2.1", "", {}, "sha512-Hrgsx+orqoygnmhFbKaHE6c296J+HTAQXoxEF6gNupROmmGJRoyzfG3ccAveqCBrwr/2yxQ5BVd/GTl5agOwSg=="], @@ -651,20 +770,28 @@ "tree-kill": ["tree-kill@1.2.2", "", { "bin": { "tree-kill": "cli.js" } }, "sha512-L0Orpi8qGpRG//Nd+H90vFB+3iHnue1zSSGmNOOCh1GLJ7rUKVwV2HvijphGQS2UmhUZewS9VgvxYIdgr+fG1A=="], + "ts-api-utils": ["ts-api-utils@2.5.0", "", { "peerDependencies": { "typescript": ">=4.8.4" } }, "sha512-OJ/ibxhPlqrMM0UiNHJ/0CKQkoKF243/AEmplt3qpRgkW8VG7IfOS41h7V8TjITqdByHzrjcS/2si+y4lIh8NA=="], + "ts-interface-checker": ["ts-interface-checker@0.1.13", "", {}, "sha512-Y/arvbn+rrz3JCKl9C4kVNfTfSm2/mEp5FSz5EsZSANGPSlQrpRI5M4PKF+mJnE52jOO90PnPSc3Ur3bTQw0gA=="], "tsup": ["tsup@8.5.1", "", { "dependencies": { "bundle-require": "^5.1.0", "cac": "^6.7.14", "chokidar": "^4.0.3", "consola": "^3.4.0", "debug": "^4.4.0", "esbuild": "^0.27.0", "fix-dts-default-cjs-exports": "^1.0.0", "joycon": "^3.1.1", "picocolors": "^1.1.1", "postcss-load-config": "^6.0.1", "resolve-from": "^5.0.0", "rollup": "^4.34.8", "source-map": "^0.7.6", "sucrase": "^3.35.0", "tinyexec": "^0.3.2", "tinyglobby": "^0.2.11", "tree-kill": "^1.2.2" }, "peerDependencies": { "@microsoft/api-extractor": "^7.36.0", "@swc/core": "^1", "postcss": "^8.4.12", "typescript": ">=4.5.0" }, "optionalPeers": ["@microsoft/api-extractor", "@swc/core", "postcss", "typescript"], "bin": { "tsup": "dist/cli-default.js", "tsup-node": "dist/cli-node.js" } }, "sha512-xtgkqwdhpKWr3tKPmCkvYmS9xnQK3m3XgxZHwSUjvfTjp7YfXe5tT3GgWi0F2N+ZSMsOeWeZFh7ZZFg5iPhing=="], + "type-check": ["type-check@0.4.0", "", { "dependencies": { "prelude-ls": "^1.2.1" } }, "sha512-XleUoc9uwGXqjWwXaUTZAmzMcFZ5858QA2vvx1Ur5xIcixXIP+8LnFDgRplU30us6teqdlskFfu+ae4K79Ooew=="], + "type-is": ["type-is@2.1.0", "", { "dependencies": { "content-type": "^2.0.0", "media-typer": "^1.1.0", "mime-types": "^3.0.0" } }, "sha512-faYHw0anBbc/kWF3zFTEnxSFOAGUX9GFbOBthvDdLsIlEoWOFOtS0zgCiQYwIskL9iGXZL3kAXD8OoZ4GmMATA=="], "typescript": ["typescript@5.9.3", "", { "bin": { "tsc": "bin/tsc", "tsserver": "bin/tsserver" } }, "sha512-jl1vZzPDinLr9eUt3J/t7V6FgNEw9QjvBPdysz9KfQDD41fQrC2Y4vKQdiaUpFT4bXlb1RHhLpp8wtm6M5TgSw=="], + "typescript-eslint": ["typescript-eslint@8.65.0", "", { "dependencies": { "@typescript-eslint/eslint-plugin": "8.65.0", "@typescript-eslint/parser": "8.65.0", "@typescript-eslint/typescript-estree": "8.65.0", "@typescript-eslint/utils": "8.65.0" }, "peerDependencies": { "eslint": "^8.57.0 || ^9.0.0 || ^10.0.0", "typescript": ">=4.8.4 <6.1.0" } }, "sha512-/ggrHAwyjENDusvyxbuqxAC2dTnZg/Z8F+fgQtYIz+L6n/9HfSlEZcFGV/NsMNa6CkGk0xUjUAFwC0vHOflvIA=="], + "ufo": ["ufo@1.6.4", "", {}, "sha512-JFNbkD1Svwe0KvGi8GOeLcP4kAWQ609twvCdcHxq1oSL8svv39ZuSvajcD8B+5D0eL4+s1Is2D/O6KN3qcTeRA=="], "undici-types": ["undici-types@7.18.2", "", {}, "sha512-AsuCzffGHJybSaRrmr5eHr81mwJU3kjw6M+uprWvCXiNeN9SOGwQ3Jn8jb8m3Z6izVgknn1R0FTCEAP2QrLY/w=="], "unpipe": ["unpipe@1.0.0", "", {}, "sha512-pjy2bYhSsufwWlKwPc+l3cN7+wuJlK6uz0YdJEOlQDbl6jo/YlPi4mb8agUkVC8BF7V8NuzeyPNqRksA3hztKQ=="], + "uri-js": ["uri-js@4.4.1", "", { "dependencies": { "punycode": "^2.1.0" } }, "sha512-7rKUyy33Q1yc98pQ1DAmLtwX109F7TIfWlW1Ydo8Wl1ii1SeHieeh0HHfPeL2fMXK6z0s8ecKs9frCuLJvndBg=="], + "vary": ["vary@1.1.2", "", {}, "sha512-BNGbWLfd0eUPabhkXUVm0j8uuvREyTh5ovRa/dyow/BqAbZJyC+5fU+IzQOzmAKzYqYRAISoRhdQr3eIZ/PXqg=="], "vite": ["vite@7.3.5", "", { "dependencies": { "esbuild": "^0.27.0", "fdir": "^6.5.0", "picomatch": "^4.0.3", "postcss": "^8.5.6", "rollup": "^4.43.0", "tinyglobby": "^0.2.15" }, "optionalDependencies": { "fsevents": "~2.3.3" }, "peerDependencies": { "@types/node": "^20.19.0 || >=22.12.0", "jiti": ">=1.21.0", "less": "^4.0.0", "lightningcss": "^1.21.0", "sass": "^1.70.0", "sass-embedded": "^1.70.0", "stylus": ">=0.54.8", "sugarss": "^5.0.0", "terser": "^5.16.0", "tsx": "^4.8.1", "yaml": "^2.4.2" }, "optionalPeers": ["@types/node", "jiti", "less", "lightningcss", "sass", "sass-embedded", "stylus", "sugarss", "terser", "tsx", "yaml"], "bin": { "vite": "bin/vite.js" } }, "sha512-KuOaNhcnGFN2zIPGA7wRmzF+lJA1sea7rHq17aiJ++9lzY1WWG6Jpwqwe1KNbRVPIqHmr8GLYx7jbrQcN/7/ww=="], @@ -677,12 +804,16 @@ "why-is-node-running": ["why-is-node-running@2.3.0", "", { "dependencies": { "siginfo": "^2.0.0", "stackback": "0.0.2" }, "bin": { "why-is-node-running": "cli.js" } }, "sha512-hUrmaWBdVDcxvYqnyh09zunKzROWjbZTiNy8dBEjkS7ehEDQibXJ7XvlmtbwuTclUiIyN+CyXQD4Vmko8fNm8w=="], + "word-wrap": ["word-wrap@1.2.5", "", {}, "sha512-BN22B5eaMMI9UMtjrGd5g5eCYPpCPDUy0FJXbYsaT5zYxjFOckS53SQDE3pWkVoWpHXVb3BrYcEN4Twa55B5cA=="], + "wrap-ansi": ["wrap-ansi@8.1.0", "", { "dependencies": { "ansi-styles": "^6.1.0", "string-width": "^5.0.1", "strip-ansi": "^7.0.1" } }, "sha512-si7QWI6zUMq56bESFvagtmzMdGOtoxfR+Sez11Mobfc7tm+VkUckk9bW2UeffTGVUbOksxmSw0AA2gs8g71NCQ=="], "wrap-ansi-cjs": ["wrap-ansi@7.0.0", "", { "dependencies": { "ansi-styles": "^4.0.0", "string-width": "^4.1.0", "strip-ansi": "^6.0.0" } }, "sha512-YVGIj2kamLSTxw6NsZjoBxfSwsn0ycdesmc4p+Q21c5zPuZ1pl+NfxVdxPtdHvmNVOQ6XSYG4AUtyt/Fi7D16Q=="], "wrappy": ["wrappy@1.0.2", "", {}, "sha512-l4Sp/DRseor9wL6EvV2+TuQn63dMkPjZ/sp9XkghTEbV9KlPS1xUsZ3u7/IQO4wxtcFB4bgpQPRcR3QCvezPcQ=="], + "yocto-queue": ["yocto-queue@0.1.0", "", {}, "sha512-rVksvsnNCdJ/ohGc6xgPwyN8eheCxsiLM8mxuE/t/mOVqJewPuO1miLpTHQiRgTKCLexL4MeAFVagts7HmNZ2Q=="], + "zod": ["zod@4.4.3", "", {}, "sha512-ytENFjIJFl2UwYglde2jchW2Hwm4GJFLDiSXWdTrJQBIN9Fcyp7n4DhxJEiWNAJMV1/BqWfW/kkg71UDcHJyTQ=="], "zod-to-json-schema": ["zod-to-json-schema@3.25.2", "", { "peerDependencies": { "zod": "^3.25.28 || ^4" } }, "sha512-O/PgfnpT1xKSDeQYSCfRI5Gy3hPf91mKVDuYLUHZJMiDFptvP41MSnWofm8dnCm0256ZNfZIM7DSzuSMAFnjHA=="], @@ -691,6 +822,16 @@ "@apm-js-collab/code-transformer-bundler-plugins/es-module-lexer": ["es-module-lexer@2.3.0", "", {}, "sha512-KLdwQm2NvGLDkQDCGvmiQrhkd0JbMzXthwQAUgWjQuQdBLFa3eiBP5arXZyA+f8x+x7OXgud6bq2rxjGtHV2tw=="], + "@eslint-community/eslint-utils/eslint-visitor-keys": ["eslint-visitor-keys@3.4.3", "", {}, "sha512-wpc+LXeiyiisxPlEkUzU6svyS1frIO3Mgxj1fdy7Pm8Ygzguax2N3Fa/D/ag1WqbOprdI+uY6wMUl8/a2G+iag=="], + + "@modelcontextprotocol/sdk/ajv": ["ajv@8.20.0", "", { "dependencies": { "fast-deep-equal": "^3.1.3", "fast-uri": "^3.0.1", "json-schema-traverse": "^1.0.0", "require-from-string": "^2.0.2" } }, "sha512-Thbli+OlOj+iMPYFBVBfJ3OmCAnaSyNn4M1vz9T6Gka5Jt9ba/HIR56joy65tY6kx/FCF5VXNB819Y7/GUrBGA=="], + + "@typescript-eslint/eslint-plugin/ignore": ["ignore@7.0.6", "", {}, "sha512-BAg6QkE8W+TuQLrrw0Ugr7HegXduRuuj8/ti2kSOc+jz1dmx8/WNcjr6XGnq5YpDWxFwwaavqD0+jIUOKelTsw=="], + + "ajv-formats/ajv": ["ajv@8.20.0", "", { "dependencies": { "fast-deep-equal": "^3.1.3", "fast-uri": "^3.0.1", "json-schema-traverse": "^1.0.0", "require-from-string": "^2.0.2" } }, "sha512-Thbli+OlOj+iMPYFBVBfJ3OmCAnaSyNn4M1vz9T6Gka5Jt9ba/HIR56joy65tY6kx/FCF5VXNB819Y7/GUrBGA=="], + + "body-parser/content-type": ["content-type@2.0.0", "", {}, "sha512-j/O/d7GcZCyNl7/hwZAb606rzqkyvaDctLmckbxLzHvFBzTJHuGEdodATcP3yIRoDrLHkIATJuvzbFlp/ki2cQ=="], + "glob/minimatch": ["minimatch@9.0.9", "", { "dependencies": { "brace-expansion": "^2.0.2" } }, "sha512-OBwBN9AL4dqmETlpS2zasx+vTeWclWzkblfZk7KTA5j3jeOONz/tRCnZomUyvNg83wL5Zv9Ss6HMJXAgL8R2Yg=="], "import-in-the-middle/es-module-lexer": ["es-module-lexer@2.3.0", "", {}, "sha512-KLdwQm2NvGLDkQDCGvmiQrhkd0JbMzXthwQAUgWjQuQdBLFa3eiBP5arXZyA+f8x+x7OXgud6bq2rxjGtHV2tw=="], @@ -713,7 +854,11 @@ "wrap-ansi-cjs/strip-ansi": ["strip-ansi@6.0.1", "", { "dependencies": { "ansi-regex": "^5.0.1" } }, "sha512-Y38VPSHcqkFrCpFnQ9vuSXmquuv5oXOKpGeT6aGrr3o3Gc9AlVa6JBfUSOCnbxGGZF+/0ooI7KrPuUSztUdU5A=="], - "glob/minimatch/brace-expansion": ["brace-expansion@2.1.1", "", { "dependencies": { "balanced-match": "^1.0.0" } }, "sha512-WR1cURNjuvBLMZBMbqM0UoE+WAfdUcEV1ccD8PVBVOI+Z3ND4+SZbN8RsfT2bMuG1qwz5RFvPukSZm5fF2D5eA=="], + "@modelcontextprotocol/sdk/ajv/json-schema-traverse": ["json-schema-traverse@1.0.0", "", {}, "sha512-NM8/P9n3XjXhIZn1lLhkFaACTOURQXjWhV4BA/RnOv8xvgqtqpAX9IO4mRQxSx1Rlo4tqzeqb0sOlruaOy3dug=="], + + "ajv-formats/ajv/json-schema-traverse": ["json-schema-traverse@1.0.0", "", {}, "sha512-NM8/P9n3XjXhIZn1lLhkFaACTOURQXjWhV4BA/RnOv8xvgqtqpAX9IO4mRQxSx1Rlo4tqzeqb0sOlruaOy3dug=="], + + "glob/minimatch/brace-expansion": ["brace-expansion@2.1.2", "", { "dependencies": { "balanced-match": "^1.0.0" } }, "sha512-w5JZcKgdhDOgOwm8H+KgbosopHMuGcl6qbulwjtz3SM7I7P3yW1eAjzMPLrIE+NQ9vjgANKHWeMHnrT0OXW1oA=="], "string-width-cjs/strip-ansi/ansi-regex": ["ansi-regex@5.0.1", "", {}, "sha512-quJQXlTSUGL2LH9SUXo8VwsY4soanhgo6LNSm84E1LBcE8s3O0wpdiRzyR9z/ZZJMlMWv37qOOb9pdJlMUEKFQ=="], diff --git a/docs/releases/UNRELEASED.md b/docs/releases/UNRELEASED.md index 93bfb85..0a66f17 100644 --- a/docs/releases/UNRELEASED.md +++ b/docs/releases/UNRELEASED.md @@ -76,6 +76,10 @@ release description, then reset it after the release is published. ## Internal/release changes +- Added blocking TypeScript complexity caps, ratcheted Vitest coverage floors, + Git-history secret scanning, dependency vulnerability scanning, and required + branch-protection checks for the complete CI gate baseline. Legacy complexity + and scanner exceptions remain explicitly tracked in pickforge/picklab#60. - Added a single storage resolver (`resolveRunStorage`) covering home, project-local, and custom modes with stable per-project id derivation (sha256 of the canonical project path); routed run creation, the run @@ -178,6 +182,11 @@ release description, then reset it after the release is published. - `bun install --frozen-lockfile` - `bun run typecheck` +- `bun run lint` +- `bun run test:coverage` in a local Linux container (1,129 passed, 5 skipped; + 82.47% lines and 86.13% branches) +- `gitleaks git --redact --no-banner .` +- `osv-scanner scan source --recursive .` - Focused run catalog, run, evidence, CLI artifact, and MCP resource/tool suites. - New `storage.test.ts` (project id derivation, all three storage modes, env overrides) and `run-catalog.test.ts`'s "openRunCatalog storage modes" suite @@ -264,10 +273,6 @@ release description, then reset it after the release is published. ### Not tested yet -- `bun run test:coverage` on a machine where the full suite runs clean (this - dev sandbox can't produce a coverage summary because the pre-existing - Darwin-only failures above stop the process before the v8 coverage - provider flushes it — reproduced identically on unmodified `main`). - Platform smoke checks outside Linux. - Real `sudo -A -v` graphical-prompt smoke on a live Linux desktop (approve and cancel) — the automated suite covers this with a stand-in `sudo`/ diff --git a/eslint.config.mjs b/eslint.config.mjs new file mode 100644 index 0000000..60b90ea --- /dev/null +++ b/eslint.config.mjs @@ -0,0 +1,31 @@ +import tseslint from "typescript-eslint"; + +export default [ + { + ignores: ["coverage/**", "packages/*/dist/**"], + }, + { + files: ["**/*.ts"], + languageOptions: { + parser: tseslint.parser, + }, + rules: { + complexity: ["error", 15], + "max-depth": ["error", 4], + "max-lines-per-function": [ + "error", + { + max: 100, + skipBlankLines: true, + skipComments: true, + }, + ], + }, + }, + { + files: ["**/*.test.ts", "test/**/*.ts"], + rules: { + "max-lines-per-function": "off", + }, + }, +]; diff --git a/osv-scanner.toml b/osv-scanner.toml new file mode 100644 index 0000000..657dd41 --- /dev/null +++ b/osv-scanner.toml @@ -0,0 +1,7 @@ +[[IgnoredVulns]] +id = "GHSA-frvp-7c67-39w9" +reason = "Below the high/critical gate; the fixed @hono/node-server release requires an upstream major-version update. Tracked in pickforge/picklab#60." + +[[IgnoredVulns]] +id = "GHSA-g7r4-m6w7-qqqr" +reason = "Below the high/critical gate; the fixed esbuild release is outside current direct dependency ranges. Tracked in pickforge/picklab#60." diff --git a/package.json b/package.json index e2c223b..77db203 100644 --- a/package.json +++ b/package.json @@ -8,8 +8,14 @@ "engines": { "node": "^20.19.0 || ^22.12.0 || >=23.0.0" }, + "overrides": { + "body-parser": "2.3.0", + "fast-uri": "3.1.4", + "hono": "4.12.27" + }, "scripts": { "build": "node scripts/build.mjs", + "lint": "eslint .", "test": "vitest run", "test:coverage": "vitest run --coverage", "test:live:android": "PICKLAB_LIVE_ANDROID=1 vitest run packages/android/test/integration.test.ts", @@ -18,8 +24,10 @@ "devDependencies": { "@types/node": "^24.0.0", "@vitest/coverage-v8": "3.2.6", + "eslint": "10.7.0", "tsup": "^8.5.0", "typescript": "^5.9.0", + "typescript-eslint": "8.65.0", "vitest": "3.2.6" } } diff --git a/packages/android/src/emulator.ts b/packages/android/src/emulator.ts index 6573cdc..f79f7f7 100644 --- a/packages/android/src/emulator.ts +++ b/packages/android/src/emulator.ts @@ -126,6 +126,7 @@ export function pickConsolePort(usedSerials: readonly string[]): number { ); } +// eslint-disable-next-line complexity -- Legacy gate debt: pickforge/picklab#60 export async function waitForBoot(opts: WaitForBootOptions): Promise { assertSerial(opts.serial); const timeoutMs = opts.timeoutMs ?? DEFAULT_BOOT_TIMEOUT_MS; @@ -373,6 +374,7 @@ export async function stopEmulator( return stopped; } +// eslint-disable-next-line complexity -- Legacy gate debt: pickforge/picklab#60 async function stopEmulatorProcess( opts: StopEmulatorOptions, ): Promise { diff --git a/packages/browser/src/devtools-evidence.ts b/packages/browser/src/devtools-evidence.ts index 976f63c..af29e7e 100644 --- a/packages/browser/src/devtools-evidence.ts +++ b/packages/browser/src/devtools-evidence.ts @@ -204,6 +204,7 @@ function structuredContent(message: JsonRpcMessage): Record | u : undefined; } +// eslint-disable-next-line complexity -- Legacy gate debt: pickforge/picklab#60 function diagnosticActions( message: JsonRpcMessage, sessionId: string, @@ -396,6 +397,7 @@ async function captureInlinePng( return path.join("screenshots", filename); } +// eslint-disable-next-line max-lines-per-function -- Legacy gate debt: pickforge/picklab#60 export async function createDevtoolsEvidenceRecorder( opts: CreateDevtoolsEvidenceRecorderOptions, ): Promise { @@ -452,6 +454,7 @@ export async function createDevtoolsEvidenceRecorder( report(error); } }, + // eslint-disable-next-line complexity -- Legacy gate debt: pickforge/picklab#60 afterResponse: async (message) => { try { const id = requestId(message); diff --git a/packages/browser/src/devtools-mcp.ts b/packages/browser/src/devtools-mcp.ts index 7f3afbd..27196fd 100644 --- a/packages/browser/src/devtools-mcp.ts +++ b/packages/browser/src/devtools-mcp.ts @@ -401,6 +401,7 @@ async function stopChild( return exit; } +// eslint-disable-next-line max-lines-per-function, complexity -- Legacy gate debt: pickforge/picklab#60 export async function runDevtoolsMcpRelay( opts: RunDevtoolsMcpRelayOptions, ): Promise { diff --git a/packages/browser/src/ndjson.ts b/packages/browser/src/ndjson.ts index 21134b3..f594e79 100644 --- a/packages/browser/src/ndjson.ts +++ b/packages/browser/src/ndjson.ts @@ -50,6 +50,7 @@ function isJsonRpcId(value: unknown): value is JsonRpcId { ); } +// eslint-disable-next-line complexity -- Legacy gate debt: pickforge/picklab#60 export function assertJsonRpcMessage(value: unknown): asserts value is JsonRpcMessage { if (!isObject(value) || value.jsonrpc !== "2.0") { throw new Error('expected a JSON-RPC 2.0 object with jsonrpc: "2.0"'); @@ -333,6 +334,7 @@ export interface PumpJsonRpcNdjsonOptions { const runWriteImmediately: JsonRpcWriteSerializer = (write) => write(); +// eslint-disable-next-line complexity -- Legacy gate debt: pickforge/picklab#60 export async function pumpJsonRpcNdjson( source: Readable, destination: Writable, diff --git a/packages/browser/src/session.ts b/packages/browser/src/session.ts index 88fcbb9..fab9adf 100644 --- a/packages/browser/src/session.ts +++ b/packages/browser/src/session.ts @@ -289,6 +289,7 @@ async function stopOwnedBrowserDaemon( * If cleanup cannot be confirmed, the error record retains every known * identity and is marked for a later reaper retry. */ +// eslint-disable-next-line max-lines-per-function, complexity -- Legacy gate debt: pickforge/picklab#60 export async function createBrowserSession( opts: CreateBrowserSessionOptions, ): Promise { @@ -576,6 +577,7 @@ export async function getBrowserSessionStatus( * into one error * and leave the record in `error` state for inspection. */ +// eslint-disable-next-line max-lines-per-function -- Legacy gate debt: pickforge/picklab#60 export async function teardownBrowserSession( id: string, registryEnv: EnvLike, @@ -589,6 +591,7 @@ export async function teardownBrowserSession( throw new Error(`Session ${id} is not a browser session`); } + // eslint-disable-next-line max-lines-per-function, complexity -- Legacy gate debt: pickforge/picklab#60 await withSessionVncLock(id, registryEnv, async () => { const record = await getSession(id, registryEnv); if (record === undefined) { diff --git a/packages/browser/test/session.test.ts b/packages/browser/test/session.test.ts index b71e3a8..d955b03 100644 --- a/packages/browser/test/session.test.ts +++ b/packages/browser/test/session.test.ts @@ -809,6 +809,7 @@ describe.skipIf(!hasXvfb)("partial-failure cleanup (fake binaries)", () => { expect(await getSession(id, registryEnv)).toBeUndefined(); }, TEST_TIMEOUT_MS); + // eslint-disable-next-line complexity -- Legacy gate debt: pickforge/picklab#60 it("preserves retry state or completes cleanup across the supervisor reap race", async () => { const sessionsPath = path.join(home, "sessions"); fs.mkdirSync(sessionsPath, { recursive: true }); diff --git a/packages/cli/src/commands/android.ts b/packages/cli/src/commands/android.ts index 5a2a022..90445e6 100644 --- a/packages/cli/src/commands/android.ts +++ b/packages/cli/src/commands/android.ts @@ -237,6 +237,7 @@ export async function runAndroidLogcat( }); } +// eslint-disable-next-line complexity -- Legacy gate debt: pickforge/picklab#60 export async function runAndroidAdb( args: string[], opts: AndroidTargetOptions, diff --git a/packages/cli/src/commands/init.ts b/packages/cli/src/commands/init.ts index ab152ef..194c4ed 100644 --- a/packages/cli/src/commands/init.ts +++ b/packages/cli/src/commands/init.ts @@ -127,6 +127,7 @@ function planLabUserProvisioning( }); } +// eslint-disable-next-line max-lines-per-function, complexity -- Legacy gate debt: pickforge/picklab#60 export async function runInit( opts: InitCliOptions, env: EnvLike = process.env, diff --git a/packages/cli/src/commands/session.ts b/packages/cli/src/commands/session.ts index 15d168b..1f622c6 100644 --- a/packages/cli/src/commands/session.ts +++ b/packages/cli/src/commands/session.ts @@ -139,6 +139,7 @@ function describeCreated(summary: LocalSessionSummary): string { export async function runSessionCreate( opts: SessionCreateOptions, ): Promise { + // eslint-disable-next-line complexity -- Legacy gate debt: pickforge/picklab#60 return runReported(opts, async () => { const projectDir = resolveProjectDir(opts); const config = await loadConfig(projectDir); diff --git a/packages/cli/src/program.ts b/packages/cli/src/program.ts index 367cebe..57891b9 100644 --- a/packages/cli/src/program.ts +++ b/packages/cli/src/program.ts @@ -92,6 +92,7 @@ function withAndroidTarget(command: Command): Command { ); } +// eslint-disable-next-line max-lines-per-function -- Legacy gate debt: pickforge/picklab#60 export function buildProgram(): Command { const program = new Command() .name("picklab") diff --git a/packages/cli/src/provision/checks.ts b/packages/cli/src/provision/checks.ts index 3aa6e32..203298b 100644 --- a/packages/cli/src/provision/checks.ts +++ b/packages/cli/src/provision/checks.ts @@ -71,6 +71,7 @@ function pathCheck( return { id, title, status: missingStatus, detail: "not found", hint }; } +// eslint-disable-next-line max-lines-per-function -- Legacy gate debt: pickforge/picklab#60 export function evaluateChecks(s: DetectionSnapshot): DoctorCheck[] { const checks: DoctorCheck[] = []; diff --git a/packages/cli/src/provision/detect.ts b/packages/cli/src/provision/detect.ts index 5afd88b..572bfa8 100644 --- a/packages/cli/src/provision/detect.ts +++ b/packages/cli/src/provision/detect.ts @@ -102,6 +102,7 @@ export async function labUserExists( } } +// eslint-disable-next-line complexity -- Legacy gate debt: pickforge/picklab#60 export async function collectSnapshot( opts: CollectSnapshotOptions = {}, ): Promise { diff --git a/packages/cli/src/provision/executor.ts b/packages/cli/src/provision/executor.ts index 382d6f9..a7baa6d 100644 --- a/packages/cli/src/provision/executor.ts +++ b/packages/cli/src/provision/executor.ts @@ -388,6 +388,7 @@ function prepareSections( }); } +// eslint-disable-next-line max-lines-per-function, complexity -- Legacy gate debt: pickforge/picklab#60 export async function executeProvisioning( sections: readonly ProvisioningSection[], opts: ExecuteProvisioningOptions = {}, @@ -457,6 +458,7 @@ export async function executeProvisioning( skipped.push(decision.reason); } else { addError(decision.reason, decision.kind); + // eslint-disable-next-line max-depth -- Legacy gate debt: pickforge/picklab#60 if (section.consent.retainPlanOnDenied === true) { selected.push(...entry.steps); } diff --git a/packages/core/src/evidence-sanitize.ts b/packages/core/src/evidence-sanitize.ts index 1c32740..ffac5cd 100644 --- a/packages/core/src/evidence-sanitize.ts +++ b/packages/core/src/evidence-sanitize.ts @@ -205,6 +205,7 @@ export interface SanitizedNetworkFailure { * timing, and a sanitized error summary. Headers, bodies, and query strings * have no field here and can never be persisted through this shape. */ +// eslint-disable-next-line complexity -- Legacy gate debt: pickforge/picklab#60 export function sanitizeNetworkFailure(input: { method?: string; url?: string; diff --git a/packages/core/src/evidence.ts b/packages/core/src/evidence.ts index 76a56d9..ea77b6c 100644 --- a/packages/core/src/evidence.ts +++ b/packages/core/src/evidence.ts @@ -615,6 +615,7 @@ async function withJournalLock( * just-created run is finalized (`failed`) and the claim released, so no * permanent running orphan is ever left behind. */ +// eslint-disable-next-line max-lines-per-function, complexity -- Legacy gate debt: pickforge/picklab#60 export async function beginEvidenceRun( projectDir: string, sessionId: string, @@ -655,7 +656,9 @@ export async function beginEvidenceRun( // between the wx create and its identity stamp). const owner = resolution.claim; if (owner !== undefined) { + // eslint-disable-next-line max-depth -- Legacy gate debt: pickforge/picklab#60 if (identityIsAlive(owner.ownerPid, owner.ownerStartTicks)) { + // eslint-disable-next-line max-depth -- Legacy gate debt: pickforge/picklab#60 if (Date.now() >= deadline) break; await delay(claimBackoff(attempt)); continue; @@ -813,6 +816,7 @@ export async function beginEvidenceRun( * The pointer is compare-cleared only after the manifest is durable, so a * concurrently replaced pointer is never removed. */ +// eslint-disable-next-line complexity -- Legacy gate debt: pickforge/picklab#60 export async function finalizeActiveEvidenceRun( projectDir: string, sessionId: string, @@ -1445,6 +1449,7 @@ async function commitTruncationSentinel( * * Returns true only for the process that actually appended the marker. */ +// eslint-disable-next-line complexity -- Legacy gate debt: pickforge/picklab#60 async function writeTruncationMarkerOnce( runDir: string, handle: fs.promises.FileHandle, @@ -1475,6 +1480,7 @@ async function writeTruncationMarkerOnce( const ownedByCaller = state.claim.ownerPid === ownerPid && state.claim.ownerStartTicks === ownerStartTicks; + // eslint-disable-next-line max-depth -- Legacy gate debt: pickforge/picklab#60 if (ownedByCaller && (await journalHasTruncationMarker(runDir))) { await commitTruncationSentinel(sentinelPath, ownerPid, ownerStartTicks); } @@ -1683,6 +1689,7 @@ async function collectActiveRunIds(parent: string): Promise> { * `finalizeActiveEvidenceRun` calls this automatically after every * finalization. */ +// eslint-disable-next-line complexity -- Legacy gate debt: pickforge/picklab#60 export async function pruneFinalizedEvidenceRuns( projectDir: string, opts: PruneEvidenceOptions = {}, diff --git a/packages/core/src/proc.ts b/packages/core/src/proc.ts index 7f5cd88..4c2c21c 100644 --- a/packages/core/src/proc.ts +++ b/packages/core/src/proc.ts @@ -67,11 +67,13 @@ export function runCommand( args: readonly string[], opts?: RunCommandOptions, ): Promise; +// eslint-disable-next-line max-lines-per-function -- Legacy gate debt: pickforge/picklab#60 export function runCommand( cmd: string, args: readonly string[], opts: RunCommandOptions = {}, ): Promise { + // eslint-disable-next-line max-lines-per-function -- Legacy gate debt: pickforge/picklab#60 return new Promise((resolve, reject) => { const maxBytes = opts.maxOutputBytes ?? DEFAULT_MAX_OUTPUT_BYTES; const killGraceMs = opts.killGraceMs ?? DEFAULT_KILL_GRACE_MS; @@ -491,6 +493,7 @@ function signalGroup(pid: number, signal: NodeJS.Signals): void { * The leader must have been spawned as a process-group leader (e.g. `spawn` * with `detached: true`), so its PID doubles as the group id. */ +// eslint-disable-next-line complexity -- Legacy gate debt: pickforge/picklab#60 export async function stopProcessGroupVerified( identity: ProcessIdentity, opts: { timeoutMs?: number } = {}, diff --git a/packages/core/src/redact.ts b/packages/core/src/redact.ts index f6380ea..4fac899 100644 --- a/packages/core/src/redact.ts +++ b/packages/core/src/redact.ts @@ -150,6 +150,7 @@ function isEmbeddingBoundary(text: string, index: number): boolean { * XML/JSON embedding: a quote that does not open a value ends the header so * the surrounding document's delimiters survive. */ +// eslint-disable-next-line complexity -- Legacy gate debt: pickforge/picklab#60 function redactCookiePairs( text: string, start: number, diff --git a/packages/core/src/run-catalog.ts b/packages/core/src/run-catalog.ts index 25f66b7..071eb49 100644 --- a/packages/core/src/run-catalog.ts +++ b/packages/core/src/run-catalog.ts @@ -134,6 +134,7 @@ async function rootAndRunStillMatch( } } +// eslint-disable-next-line max-lines-per-function, complexity -- Legacy gate debt: pickforge/picklab#60 async function readVerifiedRootFile( root: RunCatalogRoot, dirName: string, diff --git a/packages/core/src/session.ts b/packages/core/src/session.ts index b3c5714..42a933d 100644 --- a/packages/core/src/session.ts +++ b/packages/core/src/session.ts @@ -207,6 +207,7 @@ export function isDisplaySocketAlive(display: string): boolean { } +// eslint-disable-next-line complexity -- Legacy gate debt: pickforge/picklab#60 export function isSessionProcessAlive(record: SessionRecord): boolean { if (record.type === "desktop") { const desktop = record.desktop; diff --git a/packages/core/src/storage.ts b/packages/core/src/storage.ts index fc041ab..ebe5c71 100644 --- a/packages/core/src/storage.ts +++ b/packages/core/src/storage.ts @@ -135,6 +135,7 @@ function isSameOrDescendant(ancestor: string, descendant: string): boolean { * This is the single resolver every run-creation and artifact-lookup path * (core, CLI, MCP) goes through, so they always agree on where runs live. */ +// eslint-disable-next-line complexity -- Legacy gate debt: pickforge/picklab#60 export async function resolveRunStorage( projectDir: string, env: EnvLike = process.env, diff --git a/packages/core/src/takeover.ts b/packages/core/src/takeover.ts index 1003f9e..ab36741 100644 --- a/packages/core/src/takeover.ts +++ b/packages/core/src/takeover.ts @@ -333,6 +333,7 @@ export interface AcquireHumanLeaseOptions { * lease this call just created is released and `HumanLeaseDrainTimeoutError` * is thrown — "timeout aborts cleanly." */ +// eslint-disable-next-line complexity -- Legacy gate debt: pickforge/picklab#60 export async function acquireHumanLease( sessionId: string, env: EnvLike = process.env, diff --git a/packages/core/src/target.ts b/packages/core/src/target.ts index 6707f44..7836e81 100644 --- a/packages/core/src/target.ts +++ b/packages/core/src/target.ts @@ -148,6 +148,7 @@ export interface ResolveScreenshotTargetOptions { env?: EnvLike; } +// eslint-disable-next-line complexity -- Legacy gate debt: pickforge/picklab#60 export async function resolveScreenshotTarget( opts: ResolveScreenshotTargetOptions, ): Promise { diff --git a/packages/desktop-linux/src/display.ts b/packages/desktop-linux/src/display.ts index 702d363..d7bc2a0 100644 --- a/packages/desktop-linux/src/display.ts +++ b/packages/desktop-linux/src/display.ts @@ -318,6 +318,7 @@ async function failedAttempt( }; } +// eslint-disable-next-line max-lines-per-function, complexity -- Legacy gate debt: pickforge/picklab#60 async function attemptStartXvfb( display: string, opts: StartXvfbOptions, @@ -389,6 +390,7 @@ async function attemptStartXvfb( return failedAttempt("lost-race", partial, daemon, timeoutMs); } if (alive && (lockPid === null || lockPid === daemon.pid)) { + // eslint-disable-next-line max-depth -- Legacy gate debt: pickforge/picklab#60 if (isAborted(opts.signal)) { return failedAttempt("aborted", partial, daemon, timeoutMs); } diff --git a/packages/desktop-linux/src/session.ts b/packages/desktop-linux/src/session.ts index 63291f2..a1c24e9 100644 --- a/packages/desktop-linux/src/session.ts +++ b/packages/desktop-linux/src/session.ts @@ -79,6 +79,7 @@ export function desktopSessionLogDir( return path.join(sessionsDir(registryEnv), id); } +// eslint-disable-next-line max-lines-per-function, complexity -- Legacy gate debt: pickforge/picklab#60 export async function createDesktopSession( opts: CreateDesktopSessionOptions, ): Promise { @@ -350,6 +351,7 @@ async function acquireSessionVncLock( } catch (error) { const code = errorCode(error); if (code === "ENOENT") { + // eslint-disable-next-line max-depth -- Legacy gate debt: pickforge/picklab#60 if ((await getSession(id, registryEnv)) === undefined) { throw new Error(`Session not found: ${id}`); } @@ -494,6 +496,7 @@ export async function ensureSessionVnc( if ((await getSession(id, registryEnv)) === undefined) { throw new Error(`Session not found: ${id}`); } + // eslint-disable-next-line complexity -- Legacy gate debt: pickforge/picklab#60 return withSessionVncLock(id, registryEnv, async () => { let record = await getSession(id, registryEnv); if (record === undefined) { diff --git a/packages/mcp-server/src/evidence.ts b/packages/mcp-server/src/evidence.ts index ef30599..62dd5ab 100644 --- a/packages/mcp-server/src/evidence.ts +++ b/packages/mcp-server/src/evidence.ts @@ -124,6 +124,7 @@ function sanitizedTarget( return Object.keys(sanitized).length === 0 ? undefined : sanitized; } +// eslint-disable-next-line complexity -- Legacy gate debt: pickforge/picklab#60 export async function withMcpEvidence( ctx: ServerContext, options: McpEvidenceOptions, diff --git a/packages/mcp-server/src/prompts.ts b/packages/mcp-server/src/prompts.ts index f4def08..112e58b 100644 --- a/packages/mcp-server/src/prompts.ts +++ b/packages/mcp-server/src/prompts.ts @@ -17,6 +17,7 @@ const HUMAN_BLOCKER_GUIDELINE = "for the answer. Never guess credentials and never abandon the session; " + "report what you need."; +// eslint-disable-next-line max-lines-per-function -- Legacy gate debt: pickforge/picklab#60 export function registerPrompts(server: McpServer): void { server.registerPrompt( "test-flutter-desktop-visually", diff --git a/packages/mcp-server/src/resources.ts b/packages/mcp-server/src/resources.ts index 5dbaf02..f9a0ed1 100644 --- a/packages/mcp-server/src/resources.ts +++ b/packages/mcp-server/src/resources.ts @@ -208,6 +208,7 @@ async function listRunFiles( return entries; } +// eslint-disable-next-line max-lines-per-function -- Legacy gate debt: pickforge/picklab#60 export function registerResources(server: McpServer, ctx: ServerContext): void { server.registerResource( "runs", diff --git a/packages/mcp-server/src/tools/android.ts b/packages/mcp-server/src/tools/android.ts index 8b3fdfd..5630311 100644 --- a/packages/mcp-server/src/tools/android.ts +++ b/packages/mcp-server/src/tools/android.ts @@ -74,6 +74,7 @@ function targetData(target: AndroidTarget): Record { return data; } +// eslint-disable-next-line max-lines-per-function -- Legacy gate debt: pickforge/picklab#60 export function registerAndroidTools( server: McpServer, ctx: ServerContext, diff --git a/packages/mcp-server/src/tools/desktop.ts b/packages/mcp-server/src/tools/desktop.ts index 3c3aa07..8a4f042 100644 --- a/packages/mcp-server/src/tools/desktop.ts +++ b/packages/mcp-server/src/tools/desktop.ts @@ -59,6 +59,7 @@ async function resolveDesktop( return { id: record.id, display: requireDisplay(record) }; } +// eslint-disable-next-line max-lines-per-function -- Legacy gate debt: pickforge/picklab#60 export function registerDesktopTools( server: McpServer, ctx: ServerContext, diff --git a/packages/mcp-server/src/tools/session.ts b/packages/mcp-server/src/tools/session.ts index 43f6dfc..5204473 100644 --- a/packages/mcp-server/src/tools/session.ts +++ b/packages/mcp-server/src/tools/session.ts @@ -205,6 +205,7 @@ export async function sessionStatusEntry( return entry; } +// eslint-disable-next-line max-lines-per-function -- Legacy gate debt: pickforge/picklab#60 export function registerSessionTools( server: McpServer, ctx: ServerContext, diff --git a/vitest.config.ts b/vitest.config.ts index 39da978..bba87ae 100644 --- a/vitest.config.ts +++ b/vitest.config.ts @@ -35,9 +35,9 @@ export default defineConfig({ include: ["packages/*/src/**/*.ts"], exclude: ["packages/*/test/**/*.test.ts"], thresholds: { - branches: 85, + branches: 86, functions: 79, - lines: 73, + lines: 82, statements: 73, }, },