callstack__agent-device/scripts/check-bundle-owner-files.ts

import fs from 'node:fs';
import path from 'node:path';
import { COMMAND_OWNER_FILES } from '@agent-device/command-registry/owner-files';
import { getDaemonRouteOwnerFiles } from '../src/daemon/route-owner-files.ts';
import { walkFiles } from './lib/walk-files.ts';

const repoRoot = path.resolve(import.meta.dirname, '..');
const distRoot = path.join(repoRoot, 'dist', 'src');
const ownerPaths = new Set([
  ...Object.values(COMMAND_OWNER_FILES).flat(),
  ...Object.values(getDaemonRouteOwnerFiles()),
]);
const forbiddenMetadata = new Set(['ownerFiles', ...ownerPaths]);

const bundleFiles = walkFiles(distRoot).filter((file) => file.endsWith('.js'));
if (bundleFiles.length === 0) {
  throw new Error('No dist/src JavaScript files found. Run `pnpm build` first.');
}

const leaks = bundleFiles.flatMap((file) => {
  const content = fs.readFileSync(file, 'utf8');
  return [...forbiddenMetadata]
    .filter((value) => content.includes(value))
    .map((value) => ({ file: path.relative(repoRoot, file), value }));
});

if (leaks.length > 0) {
  const details = leaks.map(({ file, value }) => `- ${value} in ${file}`).join('\n');
  throw new Error(`Owner-file navigation metadata leaked into production bundles:\n${details}`);
}

process.stdout.write(
  `Verified the ownerFiles key and ${ownerPaths.size} owner-file paths are absent from ${bundleFiles.length} production bundles.\n`,
);