feat: Add filterByGlob to validate file paths against sourceGlob

Explicit file lists from --stage-record-file and --check-files are now
filtered against the sourceGlob config, ensuring only matching files
are processed.

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>

Author: frankieyan

src/index.mts

@@ -43,7 +43,10 @@ async function main() {
         switch (flag) {
             case STAGE_RECORD_FILE_FLAG: {
                 const filePathParams = process.argv.slice(3)
-                const filePaths = sourceFiles.normalizeFilePaths(filePathParams)
+                const filePaths = sourceFiles.filterByGlob({
+                    filePaths: sourceFiles.normalizeFilePaths(filePathParams),
+                    globPattern: config.sourceGlob,
+                })
 
                 return await runStageRecords({
                     filePaths,
@@ -58,7 +61,10 @@ async function main() {
             }
             case CHECK_FILES_FLAG: {
                 const filePathParams = process.argv.slice(3)
-                const filePaths = sourceFiles.normalizeFilePaths(filePathParams)
+                const filePaths = sourceFiles.filterByGlob({
+                    filePaths: sourceFiles.normalizeFilePaths(filePathParams),
+                    globPattern: config.sourceGlob,
+                })
 
                 return await runCheckFiles({ filePaths, recordsFilePath: config.recordsFile })
             }

src/source-files.mts

@@ -1,6 +1,7 @@
 import { execSync } from 'node:child_process'
 import { relative } from 'node:path'
 import { glob } from 'glob'
+import { minimatch } from 'minimatch'
 
 function getAll({ globPattern }: { globPattern: string }) {
     return glob.sync(globPattern, {
@@ -63,4 +64,11 @@ function normalizeFilePaths(filePaths: string[]) {
     })
 }
 
-export { getAll, normalizeFilePaths }
+/**
+ * Filters file paths to only include those matching the glob pattern.
+ */
+function filterByGlob({ filePaths, globPattern }: { filePaths: string[]; globPattern: string }) {
+    return filePaths.filter((filePath) => minimatch(filePath, globPattern))
+}
+
+export { getAll, normalizeFilePaths, filterByGlob }

src/source-files.test.mts

@@ -1,7 +1,7 @@
 import { execSync } from 'node:child_process'
 import { glob } from 'glob'
 import { afterEach, describe, expect, it, vi } from 'vitest'
-import { getAll, normalizeFilePaths } from './source-files.mjs'
+import { filterByGlob, getAll, normalizeFilePaths } from './source-files.mjs'
 
 vi.mock('node:child_process', () => ({
     execSync: vi.fn(),
@@ -123,3 +123,32 @@ describe('normalizeFilePaths', () => {
         expect(result).toEqual(['src/App.tsx', 'src/local.ts'])
     })
 })
+
+describe('filterByGlob', () => {
+    it('filters paths matching the glob pattern', () => {
+        const result = filterByGlob({
+            filePaths: ['src/App.tsx', 'src/utils.ts', 'package.json', 'README.md'],
+            globPattern: 'src/**/*.{ts,tsx}',
+        })
+
+        expect(result).toEqual(['src/App.tsx', 'src/utils.ts'])
+    })
+
+    it('returns empty array when no paths match', () => {
+        const result = filterByGlob({
+            filePaths: ['package.json', 'README.md'],
+            globPattern: 'src/**/*.{ts,tsx}',
+        })
+
+        expect(result).toEqual([])
+    })
+
+    it('returns all paths when all match', () => {
+        const result = filterByGlob({
+            filePaths: ['src/a.ts', 'src/b.tsx'],
+            globPattern: 'src/**/*.{ts,tsx}',
+        })
+
+        expect(result).toEqual(['src/a.ts', 'src/b.tsx'])
+    })
+})