@abloh/repository 1.0.2-staging.34846809255 → 1.0.2-staging.34856316728

package/dist/index.d.ts

@@ -1527,9 +1527,9 @@ type PackageManagerName = "npm" | "pnpm" | "yarn" | "bun";
 declare const CI_RECIPE_REFUSALS: {
     readonly browser: "browser-driven suites are not supported in the sealed run - keep them in your own CI";
     readonly noWorkflows: "no .github/workflows directory";
-    readonly noPullRequestWorkflow: "no workflow runs on pull_request, so your CI declares no build Abloh can read";
-    readonly noTestJob: "no pull-request job runs a test command Abloh recognizes";
-    readonly noTestJobAnywhere: "no job in your CI runs a test command Abloh recognizes";
+    readonly noPullRequestWorkflow: "no workflow runs on pull_request, so your CI declares no build abloh can read";
+    readonly noTestJob: "no pull-request job runs a test command abloh recognizes";
+    readonly noTestJobAnywhere: "no job in your CI runs a test command abloh recognizes";
 };
 /**
  * Is this refusal worth a customer's attention, or is it just "there was nothing here to read"?

package/dist/index.js

@@ -559,12 +559,12 @@ function readAptStep(command) {
     if (APT_SEGMENT_UPDATE.test(segment)) continue;
     const install = APT_SEGMENT_INSTALL.exec(segment);
     if (install === null) {
-      return { ok: false, why: `an apt step also runs something Abloh cannot read: ${clip(command)}` };
+      return { ok: false, why: `an apt step also runs something abloh cannot read: ${clip(command)}` };
     }
     for (const token of `${install[1]} ${install[2]}`.split(/\s+/u).filter((value) => value !== "")) {
       if (token.startsWith("-")) {
         if (!APT_FLAGS.has(token)) {
-          return { ok: false, why: `an apt step carries the option ${token}, which Abloh will not pass through: ${clip(command)}` };
+          return { ok: false, why: `an apt step carries the option ${token}, which abloh will not pass through: ${clip(command)}` };
         }
         continue;
       }
@@ -990,7 +990,7 @@ function readStep(step, manifest, reader) {
       if (step.uses.startsWith("./")) return { kind: "refuse", why: `unresolved local action ${step.uses}` };
       for (const key of ["command", "run", "script", "args"]) {
         if (typeof step.with?.[key] === "string") {
-          return { kind: "refuse", why: `the action ${id} is handed a ${key} Abloh cannot read` };
+          return { kind: "refuse", why: `the action ${id} is handed a ${key} abloh cannot read` };
         }
       }
       return { kind: "ignore" };
@@ -1068,7 +1068,7 @@ function readStep(step, manifest, reader) {
     }
     if (TEST_BINARIES.has(name)) return { kind: "test", command };
     if (BUILD_BINARIES.has(name)) {
-      return /\b(build|compile|dist|bundle)\b/u.test(tail) || tail.trim() === "" ? { kind: "build", command, env } : { kind: "refuse", why: `a build tool runs a target Abloh cannot classify: ${clip(command)}` };
+      return /\b(build|compile|dist|bundle)\b/u.test(tail) || tail.trim() === "" ? { kind: "build", command, env } : { kind: "refuse", why: `a build tool runs a task abloh cannot classify: ${clip(command)}` };
     }
     if (name === "exec" || name === "dlx" || name === "npx") {
       if (declaredToolRun(command, manifest)) return { kind: "build", command, env };
@@ -1079,7 +1079,7 @@ function readStep(step, manifest, reader) {
   }
   if (invokesRunnerDirectly(command)) return { kind: "test", command };
   if (declaredToolRun(command, manifest)) return { kind: "build", command, env };
-  return { kind: "refuse", why: `a step runs a command Abloh does not recognize: ${clip(command)}` };
+  return { kind: "refuse", why: `a step runs a command abloh does not recognize: ${clip(command)}` };
 }
 function declaredToolRun(command, manifest) {
   const plan = planCommand(command);
@@ -1104,7 +1104,7 @@ function classifyRepoDefinedBuild(command, reader) {
   }
   for (const token of tokens.slice(interpreted ? 2 : 1)) {
     if (!LITERAL_ARGV_TOKEN.test(token)) {
-      return { ok: false, why: `a repository build command carries an argument Abloh will not pass through: ${clip(command)}` };
+      return { ok: false, why: `a repository build command carries an argument abloh will not pass through: ${clip(command)}` };
     }
   }
   if (interpreted) {
@@ -1120,7 +1120,7 @@ function classifyRepoDefinedBuild(command, reader) {
   }
   const target = tokens.slice(1).find((token) => !token.startsWith("-"));
   if (target === void 0) {
-    return { ok: false, why: `a repository build command names no target Abloh can classify: ${clip(command)}` };
+    return { ok: false, why: `a repository build command names no task abloh can classify: ${clip(command)}` };
   }
   if (!BUILD_NAMES.test(target)) return null;
   return { ok: true };
@@ -1335,9 +1335,9 @@ function narrowedByPathFilter(trigger) {
   return trigger.pathsIgnore.some((entry) => !nothingToMeasurePathFilter(entry));
 }
 var NO_WORKFLOWS = "no .github/workflows directory";
-var NO_PR_WORKFLOW = "no workflow runs on pull_request, so your CI declares no build Abloh can read";
-var NO_TEST_JOB = "no pull-request job runs a test command Abloh recognizes";
-var NO_TEST_JOB_ANYWHERE = "no job in your CI runs a test command Abloh recognizes";
+var NO_PR_WORKFLOW = "no workflow runs on pull_request, so your CI declares no build abloh can read";
+var NO_TEST_JOB = "no pull-request job runs a test command abloh recognizes";
+var NO_TEST_JOB_ANYWHERE = "no job in your CI runs a test command abloh recognizes";
 var BROWSER_REFUSAL = "browser-driven suites are not supported in the sealed run - keep them in your own CI";
 function toolchainRefusal(toolchains) {
   return `your CI test job needs ${[...new Set(toolchains)].join(" and ")}, which the Node proof image does not carry`;
@@ -1480,7 +1480,7 @@ function githubCandidates(reader, manifest, bounds = [], calls = []) {
   });
   const scope = workflowScope(reader, (found) => {
     bounds.push(
-      `your .github/workflows directory holds ${found} workflow files and Abloh reads the first ${MAX_WORKFLOW_FILES} in name order, so the rest were not read. Anything derived below comes from the files that were.`
+      `your .github/workflows directory holds ${found} workflow files and abloh reads the first ${MAX_WORKFLOW_FILES} in name order, so the rest were not read. Anything derived below comes from the files that were.`
     );
   });
   if (scope === null) return none(NO_WORKFLOWS);
@@ -1507,18 +1507,18 @@ function unreadableWorkflowCall(uses, documents) {
   const called = uses.trim();
   if (called === "") return null;
   if (!called.startsWith(IN_REPO_WORKFLOW)) {
-    return `calls the reusable workflow \`${called}\`, which lives in another repository, so Abloh could not read the steps it runs`;
+    return `calls the reusable workflow \`${called}\`, which lives in another repository, so abloh could not read the steps it runs`;
   }
   const target = called.slice(IN_REPO_WORKFLOW.length).split("@")[0];
   if (documents.has(target)) return null;
-  return `calls \`${called}\`, and Abloh found no such workflow file in this repository to read`;
+  return `calls \`${called}\`, and abloh found no such workflow file in this repository to read`;
 }
 function noteUnreadableCalls(entries, bounds) {
   if (entries.length === 0) return;
   const calls = entries.map((entry) => `\`${entry.job}\` ${entry.reason}`);
   const named = calls.slice(0, MAX_NAMED_CALLS);
   const rest = calls.length - named.length;
-  const line = `${named.join("; ")}${rest > 0 ? `, and ${rest} further job${rest === 1 ? "" : "s"} like them` : ""}. If one of those runs the suite you want measured, Abloh did not read it, and nothing derived below comes from it.`;
+  const line = `${named.join("; ")}${rest > 0 ? `, and ${rest} further job${rest === 1 ? "" : "s"} like them` : ""}. If one of those runs the suite you want measured, abloh did not read it, and nothing derived below comes from it.`;
   if (!bounds.includes(line)) bounds.push(line);
 }
 function jobsInScope(reader, manifest, documents, reachable, noTestJob = NO_TEST_JOB, bounds = [], calls = []) {
@@ -1591,7 +1591,7 @@ function assemble(input) {
   const fallbackTrigger = input.fallbackTriggers.get(chosen.file);
   if (fallbackTrigger !== void 0) {
     notices.push(
-      `no pull_request workflow in this repository declares a suite, so Abloh read ${chosen.file}::${chosen.jobId}, which runs on ${fallbackTrigger}. Everything derived from your CI below comes from that job.`
+      `no pull_request workflow in this repository declares a suite, so abloh read ${chosen.file}::${chosen.jobId}, which runs on ${fallbackTrigger}. Everything derived from your CI below comes from that job.`
     );
   }
   const reading = readBrowserLane(repoDir);
@@ -1611,16 +1611,16 @@ function assemble(input) {
     const read = laneReading.evidence.map((entry) => `${entry.file} (${entry.fact})`).join(", ");
     if (laneReading.measurable) {
       notices.push(
-        `your ${laneReading.kind} suite drives a real browser, and Abloh measures it: ${read}. Abloh wrote environment.browser: chromium, which puts a browser in the proof image and puts the run on the browser seal - still --network none, so the suite reaches 127.0.0.1 and nothing else.` + (install === null ? " Add `npx playwright install chromium` to your setup script: Abloh found no step in your CI that places a browser, and the sealed run has no network to fetch one." : installIsLiteral ? ` Your own \`${clip(install)}\` was kept as a setup step, so the browser your lockfile pins is the one measured.` : ` Copy your own \`${clip(install)}\` into your setup script - Abloh could not write it as one command, and without it the run has no browser your lockfile pinned.`)
+        `your ${laneReading.kind} suite drives a real browser, and abloh measures it: ${read}. abloh wrote environment.browser: chromium, which puts a browser in the proof image and puts the run on the browser seal - still --network none, so the suite reaches 127.0.0.1 and nothing else.` + (install === null ? " Add `npx playwright install chromium` to your setup script: abloh found no step in your CI that places a browser, and the sealed run has no network to fetch one." : installIsLiteral ? ` Your own \`${clip(install)}\` was kept as a setup step, so the browser your lockfile pins is the one measured.` : ` Copy your own \`${clip(install)}\` into your setup script - abloh could not write it as one command, and without it the run has no browser your lockfile pinned.`)
       );
     } else {
       notices.push(
-        `your CI job ${chosen.file}::${chosen.jobId} runs a ${laneReading.kind} browser lane and abloh does not measure this browser lane yet (${read}). ${BROWSER_REFUSAL}. Nothing was derived from that step; the rest of the job was read normally.`
+        `your CI job ${chosen.file}::${chosen.jobId} runs a ${laneReading.kind} browser lane and abloh does not measure this browser lane yet (${read}). ${BROWSER_REFUSAL}. Nothing was derived from that step. The rest of the job was read normally.`
       );
     }
   } else if (chosen.browser !== null && chosen.browserBy === "evidence") {
     notices.push(
-      `your CI job ${chosen.file}::${chosen.jobId} also runs a browser lane (${clip(chosen.browser)}), which Abloh does not measure - ${BROWSER_REFUSAL}. Nothing was derived from that step; the rest of the job was read normally.`
+      `your CI job ${chosen.file}::${chosen.jobId} also runs a browser lane (${clip(chosen.browser)}), which abloh does not measure - ${BROWSER_REFUSAL}. Nothing was derived from that step. The rest of the job was read normally.`
     );
   } else if (chosen.browser !== null) {
   }
@@ -1670,17 +1670,17 @@ function assemble(input) {
     const producers = producerJobs(chosen, byFile.get(chosen.file));
     if (producers.length === 0) {
       notices.push(
-        `your CI test job downloads a build produced by another job and Abloh could not find which one; declare the build under environment.setupCommands if the suite needs it`
+        `your CI test job downloads a build produced by another job and abloh could not find which one. Declare the build under environment.setupCommands if the suite needs it`
       );
     } else if (producers.length > 1) {
       notices.push(
-        `your CI test job downloads a build produced by more than one job (${producers.map((producer) => producer.jobId).join(", ")}); declare the build under environment.setupCommands if the suite needs it`
+        `your CI test job downloads a build produced by more than one job (${producers.map((producer) => producer.jobId).join(", ")}). Declare the build under environment.setupCommands if the suite needs it`
       );
     } else {
       const producer = producers[0];
       if (preparationBuilds(producer).length === 0) {
         notices.push(
-          `your CI builds in ${producer.file}::${producer.jobId} and Abloh could not read that job's build step; declare it under environment.setupCommands if the suite needs it`
+          `your CI builds in ${producer.file}::${producer.jobId} and abloh could not read that job's build step. Declare it under environment.setupCommands if the suite needs it`
         );
       }
       for (const build of preparationBuilds(producer)) {
@@ -1692,19 +1692,19 @@ function assemble(input) {
   const afterSuite = chosen.steps.filter((step) => step.kind === "build" && step.afterTests);
   if (afterSuite.length > 0) {
     notices.push(
-      `your CI job ${chosen.file}::${chosen.jobId} builds after it has run its suite (${afterSuite.map((step) => step.command).join("; ")}), so Abloh read that as a check on the build rather than as preparation and did not run it first - declare it under environment.setupCommands if your suite needs it`
+      `your CI job ${chosen.file}::${chosen.jobId} builds after it has run its suite (${afterSuite.map((step) => step.command).join("; ")}), so abloh read that as a check on the build rather than as preparation and did not run it first - declare it under environment.setupCommands if your suite needs it`
     );
   }
   if (drafted.length > MAX_SETUP_COMMANDS) {
     return empty(
-      `your CI runs ${drafted.length} build steps and a recipe takes at most ${MAX_SETUP_COMMANDS}; declare the ones the suite needs under environment.setupCommands`,
+      `your CI runs ${drafted.length} build steps and a recipe takes at most ${MAX_SETUP_COMMANDS}. Declare the ones the suite needs under environment.setupCommands`,
       notices
     );
   }
   const scoped = drafted.filter((entry) => /--workspace[= ]|--filter[= ]|yarn workspace /u.test(entry.command));
   if (scoped.length > 0) {
     notices.push(
-      `the build Abloh read is scoped to one workspace package (${scoped[0].command}); your CI keeps one job per package, so check it covers what your testCommand measures`
+      `the build abloh read is scoped to one workspace package (${scoped[0].command}). Your CI keeps one job per package, so check it covers what your testCommand measures`
     );
   }
   const jobRef = `${chosen.file}::${chosen.jobId}`;
@@ -1731,14 +1731,14 @@ function assemble(input) {
   systemPackages.sort((left, right) => left.name.localeCompare(right.name));
   if (systemPackages.length > MAX_SYSTEM_PACKAGES) {
     notices.push(
-      `your CI installs ${systemPackages.length} OS packages and environment.systemPackages takes at most ${MAX_SYSTEM_PACKAGES}; pin environment.runtimeImage to an image that already carries them instead`
+      `your CI installs ${systemPackages.length} OS packages and environment.systemPackages takes at most ${MAX_SYSTEM_PACKAGES}. Pin environment.runtimeImage to an image that already carries them instead`
     );
     systemPackages.length = 0;
   }
   const derivedTest = chosen.testChoice.command !== null && !schemaWouldRefuse(chosen.testChoice.command, "test") ? { command: chosen.testChoice.command, source: jobRef } : null;
   if (derivedTest === null && chosen.testChoice.command === null) {
     notices.push(
-      `Abloh could not tell which command your CI job ${jobRef} treats as the suite - ${chosen.testChoice.why}; declare environment.testCommand if the derived one is wrong`
+      `abloh could not tell which command your CI job ${jobRef} treats as the suite - ${chosen.testChoice.why}. Declare environment.testCommand if the derived one is wrong`
     );
   }
   const environmentValues = /* @__PURE__ */ new Map();
@@ -1795,7 +1795,7 @@ function assemble(input) {
   const namePreparationGaps = (unresolved, command) => {
     if (unresolved.length === 0) return;
     notices.push(
-      `your CI sets ${unresolved.join(", ")} for ${command} and computes the value in the workflow runner, so Abloh wrote none - add the line to your setup script if that command needs it`
+      `your CI sets ${unresolved.join(", ")} for ${command} and computes the value in the workflow runner, so abloh wrote none - add the line to your setup script if that command needs it`
     );
   };
   const installSteps = [chosen, ...inlinedProducers].flatMap((candidate) => candidate.steps.filter((step) => step.kind === "install"));
@@ -1818,13 +1818,13 @@ function assemble(input) {
   const computed = bySkipClass("computed");
   if (computed.length > 0) {
     notices.push(
-      `your CI sets ${listed(computed)}; Abloh cannot evaluate a workflow expression, so a sealed run gets no value for those. Write the literal your suite needs under environment.environmentValues - one \`NAME: value\` line each - or, where the value is a secret rather than a setting, name it under environment.requiredVariables and supply it at run time`
+      `your CI sets ${listed(computed)}. abloh cannot evaluate a workflow expression, so a sealed run gets no value for those. Write the literal your suite needs under environment.environmentValues - one \`NAME: value\` line each - or, where the value is a secret rather than a setting, name it under environment.requiredVariables and supply it at run time`
     );
   }
   const unwritable = bySkipClass("unwritable");
   if (unwritable.length > 0) {
     notices.push(
-      `your CI sets ${listed(unwritable)}; Abloh wrote no value for those - declare what the suite needs under environment.environmentValues or environment.requiredVariables`
+      `your CI sets ${listed(unwritable)}. abloh wrote no value for those - declare what the suite needs under environment.environmentValues or environment.requiredVariables`
     );
   }
   const services = [...chosen.services];
@@ -2547,7 +2547,7 @@ function readJob(reader, manifest, file, jobId, job, workflowEnv, bounds = []) {
   let suiteClosed = false;
   for (const step of expandSteps(reader, job.steps, 0, () => {
     bounds.push(
-      `the job ${file}::${jobId} declares more than ${MAX_STEPS_PER_JOB} steps and Abloh reads the first ${MAX_STEPS_PER_JOB}, so any step after that was not read.`
+      `the job ${file}::${jobId} declares more than ${MAX_STEPS_PER_JOB} steps and abloh reads the first ${MAX_STEPS_PER_JOB}, so any step after that was not read.`
     );
   })) {
     const stepEnvironment = layerEnvironment([
@@ -2934,16 +2934,16 @@ function classifyNxTestTarget(projectJson, directory) {
   if (target === void 0) {
     return {
       state: "unmeasurable",
-      reason: `the Nx project at ${directory} declares no test target`,
-      remedy: `give ${directory} a test target in its project.json, or a "test" script in its package.json`
+      reason: `the Nx project at ${directory} declares no \`targets.test\` entry`,
+      remedy: `give ${directory} a \`targets.test\` entry in its project.json, or a "test" script in its package.json`
     };
   }
   const executor = typeof target.executor === "string" ? target.executor : typeof target.builder === "string" ? target.builder : null;
   if (executor === null) {
     return {
       state: "unmeasurable",
-      reason: `the Nx project at ${directory} declares a test target with no executor`,
-      remedy: `name an executor on ${directory}'s test target, or give the package a "test" script`
+      reason: `the Nx project at ${directory} declares a \`targets.test\` entry with no executor`,
+      remedy: `name an executor on ${directory}'s \`targets.test\` entry, or give the package a "test" script`
     };
   }
   const rootConfig = ROOT_CONFIG_EXECUTORS.get(executor);
@@ -2953,7 +2953,7 @@ function classifyNxTestTarget(projectJson, directory) {
       return {
         state: "unmeasurable",
         reason: `the Nx project at ${directory} runs ${rootConfig.runner} through ${executor} but names no ${rootConfig.configOption}, so there is no config to run it against from the workspace root`,
-        remedy: `state ${rootConfig.configOption} on ${directory}'s test target, or give the package a "test" script`
+        remedy: `state ${rootConfig.configOption} on ${directory}'s \`targets.test\` entry, or give the package a "test" script`
       };
     }
     const configFile = normalizeWorkspacePath(declaredConfig);
@@ -2986,23 +2986,23 @@ function classifyNxTestTarget(projectJson, directory) {
   if (commands !== void 0 && commands.length !== 1) {
     return {
       state: "unmeasurable",
-      reason: `the Nx project at ${directory} runs ${commands.length} commands for its test target, which is not one suite`,
-      remedy: `split ${directory}'s test target so one command runs one suite, or give the package a "test" script`
+      reason: `the Nx project at ${directory} runs ${commands.length} commands for its \`targets.test\` entry, which is not one suite`,
+      remedy: `split ${directory}'s \`targets.test\` entry so one command runs one suite, or give the package a "test" script`
     };
   }
   const only = single ?? (typeof commands?.[0] === "string" ? commands[0] : void 0);
   if (only === void 0) {
     return {
       state: "unmeasurable",
-      reason: `the Nx project at ${directory} declares a run-commands test target with no literal command`,
-      remedy: `state one literal command on ${directory}'s test target, or give the package a "test" script`
+      reason: `the Nx project at ${directory} declares a run-commands \`targets.test\` entry with no literal command`,
+      remedy: `state one literal command on ${directory}'s \`targets.test\` entry, or give the package a "test" script`
     };
   }
   if (/[;&|<>`\n]|\$\(/u.test(only)) {
     return {
       state: "unmeasurable",
-      reason: `the Nx project at ${directory} composes shell commands in its test target rather than running one suite`,
-      remedy: `reduce ${directory}'s test target to one runner invocation, or give the package a "test" script`
+      reason: `the Nx project at ${directory} composes shell commands in its \`targets.test\` entry rather than running one suite`,
+      remedy: `reduce ${directory}'s \`targets.test\` entry to one runner invocation, or give the package a "test" script`
     };
   }
   const cwd = typeof options["cwd"] === "string" ? options["cwd"] : null;
@@ -3010,7 +3010,7 @@ function classifyNxTestTarget(projectJson, directory) {
     return {
       state: "unmeasurable",
       reason: `the Nx project at ${directory} runs its test command from ` + (cwd === null ? "the workspace root" : `${cwd}`) + ", and this run measures a package in its own directory",
-      remedy: `set cwd to "{projectRoot}" on ${directory}'s test target, or give the package a "test" script`
+      remedy: `set cwd to "{projectRoot}" on ${directory}'s \`targets.test\` entry, or give the package a "test" script`
     };
   }
   const runner = commandRunner(only);
@@ -3018,7 +3018,7 @@ function classifyNxTestTarget(projectJson, directory) {
     return {
       state: "unmeasurable",
       reason: `the Nx project at ${directory} names no single supported test runner in its test command`,
-      remedy: `run one of ${[...SCRIPT_NAMED_RUNNERS2].sort().join(", ")} or node --test from ${directory}'s test target`
+      remedy: `run one of ${[...SCRIPT_NAMED_RUNNERS2].sort().join(", ")} or node --test from ${directory}'s \`targets.test\` entry`
     };
   }
   return { state: "runner", runner, command: only };
@@ -3424,7 +3424,7 @@ function expandOnDisk(ctx, repoDir, relative7, segments, out, refusals) {
       expandOnDisk(ctx, repoDir, prefix, rest, out, refusals);
       if (depth >= MAX_DOUBLE_STAR_DISK_DEPTH) {
         refusals?.push(
-          `a \`**\` in this workspace's package globs is walked ${MAX_DOUBLE_STAR_DISK_DEPTH} directories deep, so anything below ${prefix.join("/") || "the repository root"} was not reached`
+          `a \`**\` in this workspace's package globs is read ${MAX_DOUBLE_STAR_DISK_DEPTH} directories deep, so anything below ${prefix.join("/") || "the repository root"} was not reached`
         );
         return;
       }
@@ -3480,7 +3480,7 @@ function enumerateWorkspacePackages(repoDir, ctx = diskRepoAccess(repoDir)) {
   const lists = parsePatternLists(patterns);
   if ("unsupported" in lists) {
     refusals.push(
-      `this workspace declares a package glob Abloh has no rule for (${lists.unsupported}), so its packages could not be enumerated`
+      `this workspace declares a package glob abloh has no rule for (${lists.unsupported}), so its packages could not be enumerated`
     );
     return done([]);
   }
@@ -3489,7 +3489,7 @@ function enumerateWorkspacePackages(repoDir, ctx = diskRepoAccess(repoDir)) {
   const matched = [...out].filter((dir) => !lists.negatives.some((pattern) => matchesPattern(dir.split("/"), pattern))).sort();
   if (matched.length > MAX_ENUMERATED_PACKAGES) {
     refusals.push(
-      `this workspace declares ${matched.length} packages and Abloh enumerates the first ${MAX_ENUMERATED_PACKAGES} in path order, so the rest were not considered`
+      `this workspace declares ${matched.length} packages and abloh enumerates the first ${MAX_ENUMERATED_PACKAGES} in path order, so the rest were not considered`
     );
   }
   return done(matched.slice(0, MAX_ENUMERATED_PACKAGES));
@@ -3555,26 +3555,26 @@ function selectUndeclaredNestedOwner(input) {
   };
   if (outsideSource.length > 0) {
     return skipped(
-      `changed source spans ${owners.join(", ")} and the repository root (${shown(outsideSource)}) \u2014 ${rootBehavior}`
+      `changed source spans ${owners.join(", ")} and the repository root (${shown(outsideSource)}) - ${rootBehavior}`
     );
   }
   if (owners.length > 1) {
-    return skipped(`changed source spans undeclared nested packages: ${owners.join(", ")} \u2014 ${rootBehavior}`);
+    return skipped(`changed source spans undeclared nested packages: ${owners.join(", ")} - ${rootBehavior}`);
   }
   const candidate = owners[0];
-  const named = (why, remedy) => skipped(`${candidate} owns every changed source file but ${why} \u2014 ${rootBehavior}. ${remedy}`);
+  const named = (why, remedy) => skipped(`${candidate} owns every changed source file but ${why} - ${rootBehavior}. ${remedy}`);
   const segments = candidate.split("/");
   for (let depth = 0; depth <= segments.length; depth += 1) {
     const path = depth === 0 ? "package.json" : `${segments.slice(0, depth).join("/")}/package.json`;
     const trusted = parseManifest(blobText(repoDir, trustedRev, path), path);
     const measured = parseManifest(measuredText(path), path);
     if (trusted === void 0 || measured === void 0) {
-      return named(`${path} is unreadable`, `make ${path} valid JSON on both sides of the range.`);
+      return named(`${path} is unreadable`, `make ${path} valid JSON on both sides of the change.`);
     }
     if (testRelevantManifest(trusted) !== testRelevantManifest(measured)) {
       return named(
-        `${path} changes its scripts or dependencies in the measured range`,
-        `land the manifest change separately from the code change, or declare the target with --subdir ${candidate}.`
+        `${path} changes its scripts or dependencies in the change measured`,
+        `land the manifest change separately from the code change, or name the package with --subdir ${candidate}.`
       );
     }
   }
@@ -3588,10 +3588,10 @@ function selectUndeclaredNestedOwner(input) {
   if (runner === null || !DIRECT_RUNNERS.has(runner)) {
     return classified.aggregatorTaskRefusal != null ? named(
       classified.aggregatorTaskRefusal,
-      `give ${candidate} a "test" script naming the one suite this run should measure, or declare the target with --subdir ${candidate}.`
+      `give ${candidate} a "test" script naming the one suite this run should measure, or name the package with --subdir ${candidate}.`
     ) : named(
       "it declares no direct supported test runner of its own",
-      `give ${candidate} a "test" script that runs one of ${[...DIRECT_RUNNERS].sort().join(", ")} directly, or declare the target with --subdir ${candidate}.`
+      `give ${candidate} a "test" script that runs one of ${[...DIRECT_RUNNERS].sort().join(", ")} directly, or name the package with --subdir ${candidate}.`
     );
   }
   const dependencies = { ...manifest.dependencies, ...manifest.devDependencies };
@@ -3636,7 +3636,7 @@ function selectAutoTarget(input) {
   const rootManifest = parseManifest(rootManifestText);
   if (rootManifest === void 0) return skipped("root package.json is unreadable at the merge base");
   const rootDeclaresRunner = rootManifest !== null && classifyWithAliasHop(rootManifest, aliasHopFamily(rootManifest)).runner !== null;
-  const rootRunnerSkip = "repository root already declares a direct test runner \u2014 measuring the root as usual";
+  const rootRunnerSkip = "repository root already declares a direct test runner - measuring the root as usual";
   const pnpmWorkspaceText = blobText(repoDir, trustedRev, "pnpm-workspace.yaml");
   let patterns;
   let definitionPath;
@@ -3708,7 +3708,7 @@ function selectAutoTarget(input) {
   }
   for (const path of /* @__PURE__ */ new Set([definitionPath, "package.json"])) {
     const trusted = blobText(repoDir, trustedRev, path);
-    if (trusted !== measuredText(path)) return skipped(`${path} changed in the measured range`);
+    if (trusted !== measuredText(path)) return skipped(`${path} changed in the change measured`);
   }
   const entries = changedEntries(repoDir, base, head, uncommitted, trustedRev);
   const filesByDir = /* @__PURE__ */ new Map();
@@ -3747,14 +3747,14 @@ function selectAutoTarget(input) {
     for (let depth = 1; depth <= segments.length; depth += 1) {
       const path = `${segments.slice(0, depth).join("/")}/package.json`;
       if (blobText(repoDir, trustedRev, path) !== measuredText(path)) {
-        return { ok: false, reason: `package manifest changed in the measured range: ${path}`, environmental: false };
+        return { ok: false, reason: `package manifest changed in the change measured: ${path}`, environmental: false };
       }
     }
     const nxProject = nxProjects.get(candidate);
     if (nxProject !== void 0) {
       const path = `${candidate}/project.json`;
       if (blobText(repoDir, trustedRev, path) !== measuredText(path)) {
-        return { ok: false, reason: `Nx project definition changed in the measured range: ${path}`, environmental: false };
+        return { ok: false, reason: `Nx project definition changed in the change measured: ${path}`, environmental: false };
       }
     }
     const manifest = parseManifest(blobText(repoDir, trustedRev, `${candidate}/package.json`), `${candidate}/package.json`);
@@ -3768,13 +3768,13 @@ function selectAutoTarget(input) {
       const path = nxTest.configFile;
       const trustedConfig = blobText(repoDir, trustedRev, path);
       if (trustedConfig !== measuredText(path)) {
-        return { ok: false, reason: `workspace-root suite config changed in the measured range: ${path}`, environmental: false };
+        return { ok: false, reason: `workspace-root suite config changed in the change measured: ${path}`, environmental: false };
       }
       if (trustedConfig === null) {
         return {
           ok: false,
           reason: `the Nx project at ${candidate} names a test config that is not in the tree: ${path}`,
-          remedy: `add ${path}, or point ${candidate}'s test target at a config file that exists`,
+          remedy: `add ${path}, or point ${candidate}'s \`targets.test\` entry at a config file that exists`,
           environmental: true
         };
       }
@@ -3835,7 +3835,7 @@ function selectAutoTarget(input) {
       if (entryFiles.length > 0 && !entryFiles.some((entry) => existsSync(join7(repoDir, depDir, entry)))) {
         return {
           ok: false,
-          reason: `workspace dependency ${name} is unbuilt (missing ${entryFiles[0]}) \u2014 build workspace packages before measurement`,
+          reason: `workspace dependency ${name} is unbuilt (missing ${entryFiles[0]}) - build workspace packages before measurement`,
           remedy: `build ${name} before abloh runs, so ${entryFiles[0]} exists on disk`,
           environmental: true
         };
@@ -3863,7 +3863,7 @@ function selectAutoTarget(input) {
   for (const a of targetDirs) {
     for (const b of targetDirs) {
       if (a !== b && b.startsWith(`${a}/`)) {
-        return skipped(`workspace targets nest (${a} contains ${b}); nested-package diffs keep root behavior`);
+        return skipped(`workspace packages nest (${a} contains ${b}), so a diff inside the nested one keeps root behavior`);
       }
     }
   }
@@ -3883,7 +3883,7 @@ function selectAutoTarget(input) {
         });
         continue;
       }
-      return skipped(`multi-package selection refused \u2014 ${verdict.reason}`);
+      return skipped(`multi-package selection refused - ${verdict.reason}`);
     }
     runners.set(dir, verdict.runner);
   }
@@ -5062,7 +5062,7 @@ function suiteFanoutPlan(probe, manager) {
   const aggregated = probe.aggregator === null ? null : { tool: probe.aggregator, tasks: [...probe.aggregatorTasks] };
   if (aggregated !== null) {
     return {
-      coverageExclusion: `this package's test script delegates to ${aggregated.tool}, which runs ${aggregatorTaskPhrase(aggregated)} rather than one suite, so no single coverage report describes it; abloh measures such a repository per package instead`
+      coverageExclusion: `this package's test script delegates to ${aggregated.tool}, which runs ${aggregatorTaskPhrase(aggregated)} rather than one suite, so no single coverage report describes it. abloh measures such a repository per package instead`
     };
   }
   const resolved = wrapperFanout(probe, manager) ?? concurrentlyFanout(probe, manager) ?? chainFanout(probe, manager);
@@ -5256,7 +5256,7 @@ function classicPerTestRunner(runner) {
   return runner !== "command" && classicPerTestRefusal(runner) === null;
 }
 function classicPerTestRefusal(runner) {
-  return runner === "deno" ? "deno's mutation runs the whole suite per mutant (Stryker ships no deno runner), so the classic per-test layer has no per-test report to read; the sealed v2 engine drives deno one test at a time and is where a proposed test for this repository comes from" : null;
+  return runner === "deno" ? "deno's mutation runs the whole suite per mutant (Stryker ships no deno runner), so the classic per-test layer has no per-test report to read. The sealed v2 engine drives deno one test at a time and is where a proposed test for this repository comes from" : null;
 }
 function declaresWorkspace(ctx, repoDir) {
   for (const name of ["pnpm-workspace.yaml", "pnpm-workspace.yml", "nx.json", "lerna.json"]) {
@@ -5323,7 +5323,7 @@ function detectTarget(repoDir, subdir, resolution = {}, ctx = diskRepoAccess(rep
   if (subdir && explicit === null) {
     throw new TargetNotFoundError(
       "configured-directory-has-no-package",
-      `the configured target directory ${JSON.stringify(subdir)} has no package.json, so there is no package there to measure; point --subdir (or abloh.yml target.directory) at the directory holding the package's package.json, or remove it to measure the repository root`,
+      `the configured \`target.directory\` ${JSON.stringify(subdir)} has no package.json, so there is no package there to measure. point --subdir (or abloh.yml target.directory) at the directory holding the package's package.json, or remove it to measure the repository root`,
       "point --subdir (or abloh.yml target.directory) at the directory holding the package's package.json, or remove it to measure the repository root"
     );
   }
@@ -5334,7 +5334,7 @@ function detectTarget(repoDir, subdir, resolution = {}, ctx = diskRepoAccess(rep
   if (!probe) {
     throw new TargetNotFoundError(
       "no-testable-package",
-      `no package.json with a test runner or test script found under ${repoDir}` + (subdir ? ` or in the configured target directory ${JSON.stringify(subdir)}` : "") + candidateSentence(repoDir),
+      `no package.json with a test runner or test script found under ${repoDir}` + (subdir ? ` or in the configured \`target.directory\` ${JSON.stringify(subdir)}` : "") + candidateSentence(repoDir),
       candidateRemedy(repoDir)
     );
   }
@@ -5348,7 +5348,7 @@ function detectTarget(repoDir, subdir, resolution = {}, ctx = diskRepoAccess(rep
   if (probe.declaredCommand === null && probe.testScript === null && direct !== null && probe.dir === repoDir && declaresWorkspace(ctx, repoDir)) {
     throw new TargetNotFoundError(
       "workspace-root-declares-no-test-script",
-      `${repoDir} is a workspace root that declares no test script, so there is no suite here to measure and Abloh will not guess one from an installed runner: point --subdir (or abloh.yml target.directory) at the package you want measured, or declare environment.testCommand if one command runs the suite from the root` + candidateSentence(repoDir),
+      `${repoDir} is a workspace root that declares no test script, so there is no suite here to measure and abloh will not guess one from an installed runner: point --subdir (or abloh.yml target.directory) at the package you want measured, or declare environment.testCommand if one command runs the suite from the root` + candidateSentence(repoDir),
       "point --subdir (or abloh.yml target.directory) at the package you want measured, or declare environment.testCommand if one command runs the suite from the root" + candidateSentence(repoDir)
     );
   }
@@ -5770,7 +5770,7 @@ function renderEnvironmentBlock(input) {
         `      image: ${yamlScalar(service.image, quote)}`
       );
       if (service.env.length > 0) {
-        lines.push("      env: # your workflow's own values; the suite connects with these");
+        lines.push("      env: # your workflow's own values, and the suite connects with these");
         for (const entry of service.env) lines.push(`        ${entry.name}: ${yamlScalar(entry.value, quote)}`);
       }
       if (service.healthCommand !== null) {
@@ -5789,7 +5789,7 @@ function renderEnvironmentBlock(input) {
     for (const path of input.identityFiles) lines.push(`    - ${yamlScalar(path, quote)}`);
   }
   if (input.requiredVariables.length > 0) {
-    lines.push("  requiredVariables: # names only; values come from your environment and are masked in every log");
+    lines.push("  requiredVariables: # names only. Values come from your environment and are masked in every log");
     for (const variable of input.requiredVariables) {
       lines.push(...commentLines(variable.evidence, "    "), `    - ${yamlScalar(variable.name, quote)}`);
     }
@@ -5799,7 +5799,7 @@ function renderEnvironmentBlock(input) {
       const shape = matchesCredentialShape2(variable.value);
       if (shape !== null) throw initRefusal("credential-in-environment-value", credentialShapeRefusal(variable.name, shape));
     }
-    lines.push("  environmentValues: # literal values your CI sets; a secret goes in requiredVariables, by name");
+    lines.push("  environmentValues: # literal values your CI sets. A secret goes in requiredVariables, by name");
     for (const variable of input.environmentValues) {
       lines.push(
         ...commentLines(variable.evidence, "    "),
@@ -5808,13 +5808,13 @@ function renderEnvironmentBlock(input) {
     }
   }
   if (input.generatedFiles.length > 0) {
-    lines.push("  generatedFiles: # written by your tooling during a run; an undeclared change aborts it");
+    lines.push("  generatedFiles: # written by your tooling during a run. An undeclared change aborts it");
     for (const generated of input.generatedFiles) {
       lines.push(...commentLines(generated.evidence, "    "), `    - ${yamlScalar(generated.path, quote)}`);
     }
   }
   if (input.rewrittenFiles.length > 0) {
-    lines.push("  rewrittenFiles: # committed files your own install rewrites; measured as your install left them");
+    lines.push("  rewrittenFiles: # committed files your own install rewrites, measured as your install left them");
     for (const rewritten of input.rewrittenFiles) {
       lines.push(...commentLines(rewritten.evidence, "    "), `    - ${yamlScalar(rewritten.path, quote)}`);
     }
@@ -6078,7 +6078,7 @@ var SETUP_QUESTION_DESCRIPTORS = {
   "environment.installCommand": {
     key: "environment.installCommand",
     ask: "How does this repository install its dependencies?",
-    why: "Abloh read your CI without running it, so it saw the command your workflow declares and not what your install actually writes. On the borrow road your own job installs and Abloh measures inside it, so this is only needed when Abloh builds for itself.",
+    why: "abloh read your CI without running it, so it saw the command your workflow declares and not what your install actually writes. On the borrow road your own job installs and abloh measures inside it, so this is only needed when abloh builds for itself.",
     candidates: [],
     required: false,
     unreadable: true,
@@ -6093,7 +6093,7 @@ var SETUP_QUESTION_DESCRIPTORS = {
   "environment.setupCommands": {
     key: "environment.setupCommands",
     ask: "What does this repository build between installing and testing?",
-    why: "Abloh read the build steps out of the job it rides. A step it could not read is one the proof container never runs, and a suite that needs it then fails inside abloh rather than in your CI.",
+    why: "abloh read the build steps out of the job it rides. A step it could not read is one the proof container never runs, and a suite that needs it then fails inside abloh rather than in your CI.",
     candidates: [],
     required: true,
     /* ONE STEP PER ` && `, WHICH IS THE ONE KEY THAT IS NOT COMMA-SEPARATED and the CLI's prompt says
@@ -6115,8 +6115,8 @@ var SETUP_QUESTION_DESCRIPTORS = {
   },
   "environment.runtimeImage": {
     key: "environment.runtimeImage",
-    ask: "Which image should Abloh build its proof container from?",
-    why: "Abloh pins one by pulling it and reading its digest, which needs a machine. Left unanswered, a run uses the reviewed default for the Node your repository declares.",
+    ask: "Which image should abloh build its proof container from?",
+    why: "abloh pins one by pulling it and reading its digest, which needs a machine. Left unanswered, a run uses the reviewed default for the Node your repository declares.",
     candidates: [],
     required: false,
     unreadable: true,
@@ -6169,7 +6169,7 @@ var SETUP_QUESTION_DESCRIPTORS = {
     /* THE VALUES THE CONTRACT ACCEPTS, not a prose label: the card writes the chosen candidate into
        `abloh.yml`, so a candidate that read well and parsed badly would be a form that writes an
        invalid file. What each one MEANS is the ask above it. */
-    why: "quarantine sets them aside and measures the rest. strict measures nothing until they pass.",
+    why: "`quarantine` sets them aside and measures the rest. `strict` measures nothing until they pass.",
     candidates: ["quarantine", "strict"],
     required: true,
     shape: { kind: "scalar" },
@@ -6181,7 +6181,7 @@ var SETUP_QUESTION_DESCRIPTORS = {
   "environment.testCommand": {
     key: "environment.testCommand",
     ask: "Which command runs your tests?",
-    why: "Abloh read your CI without running it, and the command it found did not run a suite it could observe.",
+    why: "abloh read your CI without running it, and the command it found did not run a suite it could observe.",
     candidates: [],
     required: true,
     shape: { kind: "scalar" },
@@ -6201,7 +6201,7 @@ var SETUP_QUESTION_DESCRIPTORS = {
   "environment.rebuildCommand": {
     key: "environment.rebuildCommand",
     ask: "Which command builds the output your tests import?",
-    why: "Your tests read compiled output rather than the source abloh plants in, so without the build every planted bug is reported as missed. Abloh cannot resolve which of your build scripts writes it from your files alone.",
+    why: "Your tests read compiled output rather than the source abloh plants in, so without the build every planted bug is reported as missed. abloh cannot resolve which of your build scripts writes it from your files alone.",
     candidates: [],
     required: true,
     shape: { kind: "scalar" },
@@ -6305,7 +6305,7 @@ var SETUP_QUESTION_DESCRIPTORS = {
   "environment.identityFiles": {
     key: "environment.identityFiles",
     ask: "Which files should a change to reinstall rather than reuse the container?",
-    why: "Abloh reuses a prepared container between runs unless one of these moved.",
+    why: "abloh reuses a prepared container between runs unless one of these moved.",
     candidates: [],
     required: true,
     shape: { kind: "list" },
@@ -6354,7 +6354,7 @@ var SETUP_QUESTION_DESCRIPTORS = {
   "environment.services": {
     key: "environment.services",
     ask: "Which backing services does your suite need, and where is each one ready?",
-    why: "A proof runs in the same network namespace as its services, so your suite reaches them on localhost exactly as in your CI. Abloh pins the image by digest because a mutable tag cannot be part of what a run binds, and each service needs something to wait on before the suite starts.",
+    why: "A proof runs in the same network namespace as its services, so your suite reaches them on localhost exactly as in your CI. abloh pins the image by digest because a mutable tag cannot be part of what a run records, and each service needs something to wait on before the suite starts.",
     candidates: [],
     required: true,
     shape: { kind: "services" },
@@ -6389,7 +6389,7 @@ var SETUP_QUESTION_DESCRIPTORS = {
   "environment.runner": {
     key: "environment.runner",
     ask: "Which test runner does this repository use?",
-    why: "Abloh reads it from your own command, and a declaration outranks that reading.",
+    why: "abloh reads it from your own command, and a declaration outranks that reading.",
     candidates: [],
     required: false,
     shape: { kind: "scalar" },
@@ -6760,7 +6760,7 @@ function testStepLabel(step) {
 }
 var MAX_LABELLED_NAME_LENGTH = 60;
 function unreadableConditionLine(step) {
-  return `test step ${testStepLabel(step)} runs on a condition Abloh cannot read from the file`;
+  return `test step ${testStepLabel(step)} runs on a condition abloh cannot read from the file`;
 }
 function setupStepAnchor(job, leg) {
   const steps = job.testSteps;
@@ -7150,14 +7150,14 @@ function unaskableFanOut(job, defaultBranch) {
   if (excluded !== null) return excluded;
   const ridable2 = ridableMatrixCombinations(job);
   if (ridable2 !== null && ridable2.length === 0 && (job.matrixCombinations ?? []).length > 0) {
-    return "every leg its matrix runs is on a runner Abloh cannot work on, so no leg of it could carry the step";
+    return "every leg its matrix runs is on a runner abloh cannot work on, so no leg of it could carry the step";
   }
   const legs = ridableLegs(job);
   const dead = job.matrixDimensions.find(
     (dimension) => (job.matrixLegs?.[dimension] ?? []).length > 0 && (legs[dimension] ?? []).length === 0
   );
   if (dead === void 0) return null;
-  return `every value its \`${dead}\` matrix lists is a runner Abloh cannot work on, so no leg of it could carry the step`;
+  return `every value its \`${dead}\` matrix lists is a runner abloh cannot work on, so no leg of it could carry the step`;
 }
 function declarationRefusal(job, defaultBranch) {
   if (!job.installs) {
@@ -7605,21 +7605,21 @@ function isAblohAttestationJob(job) {
 function attestationJobLines(input) {
   const inner = `${input.keyIndent}${input.unit}`;
   const source = input.stepIn === null ? [
-    `${input.jobIndent}# it takes the report the Abloh step above left on this run and files it.`
+    `${input.jobIndent}# it takes the report the abloh step above left on this run and files it.`
   ] : [
-    `${input.jobIndent}# it takes the report the Abloh step in ${input.stepIn} left on this`,
+    `${input.jobIndent}# it takes the report the abloh step in ${input.stepIn} left on this`,
     `${input.jobIndent}# run and files it. That step is there and this job is here because GitHub caps a`,
     `${input.jobIndent}# called workflow's jobs at the permissions its caller grants, and this file is the`,
     `${input.jobIndent}# caller.`
   ];
   return [
-    `${input.jobIndent}# Abloh's publish job. It runs no code of yours, builds nothing and measures nothing:`,
+    `${input.jobIndent}# abloh's publish job. It runs no code of yours, builds nothing and measures nothing:`,
     ...source,
     `${input.jobIndent}#`,
     `${input.jobIndent}# It is a separate job because GitHub grants ${IDENTITY_SCOPE}: ${IDENTITY_VALUE} to a whole JOB and`,
     `${input.jobIndent}# not to one step: putting it on the job that measures would hand the same identity to`,
-    `${input.jobIndent}# every step that runs there, Abloh's and everybody else's. Here it reaches Abloh's`,
-    `${input.jobIndent}# step and nothing else. It authorizes one thing, filing this report with Abloh, and`,
+    `${input.jobIndent}# every step that runs there, abloh's and everybody else's. Here it reaches abloh's`,
+    `${input.jobIndent}# step and nothing else. It authorizes one thing, filing this report with abloh, and`,
     `${input.jobIndent}# carries no write access to your repository. Declaring the block below takes no`,
     `${input.jobIndent}# grant away from anything, because this job is new and had none.`,
     `${input.jobIndent}${ATTESTATION_JOB_ID}:`,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@abloh/repository",
-  "version": "1.0.2-staging.34846809255",
+  "version": "1.0.2-staging.34856316728",
   "description": "Reads a repository and decides what abloh may measure in it: the CI recipe, the target, the package manager, the workspace packages, the job abloh's step rides and the measurement plan. Shared by the CLI, which reads a checkout, and by the control plane, which reads the same repository over GitHub's contents API. \"name\" will publish under the @abloh scope.",
   "type": "module",
   "license": "SEE LICENSE IN LICENSE",
@@ -23,8 +23,8 @@
   "dependencies": {
     "semver": "7.8.5",
     "yaml": "^2.6.1",
-    "@abloh/core": "1.0.2-staging.34846809255",
-    "@abloh/measure": "1.0.2-staging.34846809255"
+    "@abloh/core": "1.0.2-staging.34856316728",
+    "@abloh/measure": "1.0.2-staging.34856316728"
   },
   "devDependencies": {
     "@types/semver": "7.7.1",