sneak
fed39d19cf
All checks were successful
check / check (push) Successful in 1m2s
Linting now happens in one place only: a new root Dockerfile.lint copies the repo into the digest-pinned node image already used by Dockerfile and runs eslint and prettier as build steps, so a successful build is a clean lint. script/lint is reduced to building it, which also works where the docker daemon is remote and bind mounts are impossible. No host lint path survives: the "lint" script is gone from package.json, so there is no second, unpinned way to get a lint verdict. Caching is waived for lint, because a lint build over an unchanged tree returns success in well under a second having linted nothing. LINT_EPOCH is the cache buster and it fails closed exactly as CHECK_EPOCH does: an unset ARG is the empty string, which is a perfectly stable cache key, so the guard rejects it and a bare `docker build -f Dockerfile.lint .` errors out instead of serving a green it did not earn. Both linters sit below the guard, so a fresh epoch forces them to execute while the bootstrap and dependency layers above stay cached. That makes script/lint a docker build, which nothing inside a container may call. script/check calls script/lint, so the Dockerfile image can no longer run make check: the lint stage and its COPY --from=lint ordering hack are deleted, and the remaining stage runs make test and make build under the existing CHECK_EPOCH guard. script/cibuild is now the composite gate and builds the lint image first, so a lint failure is reported before the slower suite runs. The .dockerignore exclusions are unchanged and still apply to the lint build, including the .claude/ exclusion (eslint's flat config does not ignore dot-directories, so a nested worktree in the context would be linted) and the deliberate exception that keeps .gitignore in the context for prettier. A new test asserts no per-Dockerfile ignore file shadows the root one for either image, and test/packaging/lint-docker.test.ts asserts the whole shape: the docker-only lint path, the digest pin, manifests copied before sources, the fail-closed guard with both linters below it, the absence of a lint stage or make check in Dockerfile, and the build order in script/cibuild.
50 lines
1.3 KiB
JSON
50 lines
1.3 KiB
JSON
{
|
|
"name": "quak",
|
|
"version": "0.0.0",
|
|
"description": "TypeScript client library and CLI for the Ente end-to-end encrypted photo service",
|
|
"license": "WTFPL",
|
|
"author": "@sneak <https://sneak.berlin>",
|
|
"homepage": "https://git.eeqj.de/sneak/quak",
|
|
"repository": {
|
|
"type": "git",
|
|
"url": "https://git.eeqj.de/sneak/quak.git"
|
|
},
|
|
"type": "module",
|
|
"main": "./dist/src/index.js",
|
|
"types": "./dist/src/index.d.ts",
|
|
"bin": {
|
|
"quak": "./dist/bin/quak.js"
|
|
},
|
|
"files": [
|
|
"dist/",
|
|
"README.md",
|
|
"LICENSE"
|
|
],
|
|
"scripts": {
|
|
"build": "script/build",
|
|
"quak": "node ./dist/bin/quak.js",
|
|
"test": "vitest run",
|
|
"fmt": "prettier --write .",
|
|
"fmt-check": "prettier --check ."
|
|
},
|
|
"devDependencies": {
|
|
"@eslint/js": "9.38.0",
|
|
"@types/libsodium-wrappers-sumo": "0.8.2",
|
|
"@types/node": "22.18.13",
|
|
"eslint": "9.38.0",
|
|
"prettier": "3.8.1",
|
|
"typescript": "5.9.3",
|
|
"typescript-eslint": "8.46.2",
|
|
"vitest": "2.1.9"
|
|
},
|
|
"dependencies": {
|
|
"@inquirer/prompts": "8.5.2",
|
|
"commander": "14.0.3",
|
|
"env-paths": "4.0.0",
|
|
"exif-reader": "2.0.3",
|
|
"fast-srp-hap": "2.0.4",
|
|
"jpeg-js": "0.4.4",
|
|
"libsodium-wrappers-sumo": "0.8.4"
|
|
}
|
|
}
|