@ankhorage/devtools 1.18.4 → 1.19.0

package/README.md

@@ -3,7 +3,7 @@
 
 # @ankhorage/devtools
 
-![license: MIT](././paradox/badges/license.svg) ![npm: v1.18.4](././paradox/badges/npm.svg) ![runtime: bun](././paradox/badges/runtime.svg) ![typescript: strict](././paradox/badges/typescript.svg) ![eslint: checked](././paradox/badges/eslint.svg) ![prettier: checked](././paradox/badges/prettier.svg) ![build: checked](././paradox/badges/build.svg) ![tests: checked](././paradox/badges/tests.svg) ![docs: paradox](././paradox/badges/docs.svg)
+![license: MIT](././paradox/badges/license.svg) ![npm: v1.19.0](././paradox/badges/npm.svg) ![runtime: bun](././paradox/badges/runtime.svg) ![typescript: strict](././paradox/badges/typescript.svg) ![eslint: checked](././paradox/badges/eslint.svg) ![prettier: checked](././paradox/badges/prettier.svg) ![build: checked](././paradox/badges/build.svg) ![tests: checked](././paradox/badges/tests.svg) ![docs: paradox](././paradox/badges/docs.svg)
 
 Shared tooling, repository automation, runtime policies, and agent standards for Ankhorage TypeScript projects
 

package/dist/policy/resolvePkgvizAuditPolicyAsync.d.ts

@@ -0,0 +1,8 @@
+/*** Resolve the centrally pinned PKGViz CI audit for repositories with analyzable source. */
+export declare function resolvePkgvizAuditPolicyAsync(targetDirectory: string): Promise<PkgvizAuditPolicy | undefined>;
+interface PkgvizAuditPolicy {
+    readonly artifactName: string;
+    readonly artifactPath: string;
+    readonly command: string;
+}
+export {};

package/dist/policy/resolvePkgvizAuditPolicyAsync.js

@@ -0,0 +1,27 @@
+import { stat } from 'node:fs/promises';
+import { join } from 'node:path';
+/*** Resolve the centrally pinned PKGViz CI audit for repositories with analyzable source. */
+export async function resolvePkgvizAuditPolicyAsync(targetDirectory) {
+    if (!(await hasSourceDirectoryAsync(targetDirectory)))
+        return undefined;
+    return {
+        artifactName: 'pkgviz-audit',
+        artifactPath: 'pkgviz-audit.json',
+        command: 'bunx pkgviz@0.8.1 --out pkgviz-audit.json --rule cyclic-dependencies=block',
+    };
+}
+/*** Detect whether the managed repository has a source tree that PKGViz can inspect. */
+async function hasSourceDirectoryAsync(targetDirectory) {
+    try {
+        return (await stat(join(targetDirectory, 'src'))).isDirectory();
+    }
+    catch (error) {
+        if (isNodeError(error) && error.code === 'ENOENT')
+            return false;
+        throw error;
+    }
+}
+/*** Narrow filesystem failures to Node errors with stable error codes. */
+function isNodeError(error) {
+    return error instanceof Error && 'code' in error;
+}

package/dist/tools/workflows/files/ci.yml

@@ -99,3 +99,5 @@ jobs:
           else
             echo "No changeset:status script found; skipping."
           fi
+
+      # __ANKH_PKGVIZ_AUDIT_STEPS__

package/dist/tools/workflows/index.js

@@ -3,6 +3,7 @@ import { join } from 'node:path';
 import { resolveApmReleaseCommandAsync } from '../../features/apm-release-validation/adapters/outbound/resolveApmReleaseCommandAsync.js';
 import { resolveStructureReleaseCommandAsync } from '../../features/structure-descriptor-generation/adapters/outbound/resolveStructureReleaseCommandAsync.js';
 import { bunRuntimePolicy, nodeRuntimePolicy } from '../../policy/bunRuntimePolicy.js';
+import { resolvePkgvizAuditPolicyAsync } from '../../policy/resolvePkgvizAuditPolicyAsync.js';
 import { readCurrentDoctorVersion } from './readCurrentDoctorVersion.js';
 import { renderRenovateWorkflowAsync } from './renderRenovateWorkflowAsync.js';
 import { renderWorkflowAsync } from './renderWorkflowAsync.js';
@@ -40,6 +41,7 @@ function createWorkflowDefinition(relativePath, sourcePath) {
             bunVersion: bunRuntimePolicy.version,
             doctorVersion: readCurrentDoctorVersion(),
             nodeVersion: nodeRuntimePolicy.setupVersion,
+            pkgvizAudit: await resolvePkgvizAuditPolicyAsync(targetDirectory),
         }),
     };
 }

package/dist/tools/workflows/renderWorkflowAsync.d.ts

@@ -3,6 +3,11 @@ export interface WorkflowPolicy {
     readonly doctorVersion: string;
     readonly nodeVersion: string;
     readonly apmReleaseCommand?: string;
+    readonly pkgvizAudit?: {
+        readonly artifactName: string;
+        readonly artifactPath: string;
+        readonly command: string;
+    };
     readonly structureReleaseCommand?: string;
 }
 /*** Renders one workflow template with the canonical runtime, Doctor, and Changesets policy. */

package/dist/tools/workflows/renderWorkflowAsync.js

@@ -5,6 +5,7 @@ export async function renderWorkflowAsync(sourceUrl, policy) {
     const template = await readFile(sourceUrl, 'utf8');
     return template
         .replaceAll(BUN_VERSION_TOKEN, policy.bunVersion)
+        .replaceAll(PKGVIZ_AUDIT_STEPS_TOKEN, renderPkgvizAuditSteps(policy))
         .replaceAll(CHANGESETS_PUBLISH_COMMAND_TOKEN, changesetsPolicy.workflowCommands.publish)
         .replaceAll(CHANGESETS_STATUS_COMMAND_TOKEN, changesetsPolicy.workflowCommands.status)
         .replaceAll(CHANGESETS_VERSION_COMMAND_TOKEN, changesetsPolicy.workflowCommands.version)
@@ -19,3 +20,19 @@ const CHANGESETS_STATUS_COMMAND_TOKEN = '__ANKH_CHANGESETS_STATUS_COMMAND__';
 const CHANGESETS_VERSION_COMMAND_TOKEN = '__ANKH_CHANGESETS_VERSION_COMMAND__';
 const DOCTOR_VERSION_TOKEN = '__ANKH_DOCTOR_VERSION__';
 const NODE_VERSION_TOKEN = '__ANKH_NODE_VERSION__';
+/*** Render the centrally managed PKGViz audit steps only for applicable repositories. */
+function renderPkgvizAuditSteps(policy) {
+    if (policy.pkgvizAudit === undefined)
+        return '';
+    return `      - name: Enforce PKGViz cyclic-dependencies rule
+        run: ${policy.pkgvizAudit.command}
+
+      - name: Upload PKGViz audit
+        if: always() && hashFiles('${policy.pkgvizAudit.artifactPath}') != ''
+        uses: actions/upload-artifact@v4
+        with:
+          name: ${policy.pkgvizAudit.artifactName}
+          path: ${policy.pkgvizAudit.artifactPath}
+`;
+}
+const PKGVIZ_AUDIT_STEPS_TOKEN = '      # __ANKH_PKGVIZ_AUDIT_STEPS__';

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@ankhorage/devtools",
-  "version": "1.18.4",
+  "version": "1.19.0",
   "description": "Shared tooling, repository automation, runtime policies, and agent standards for Ankhorage TypeScript projects",
   "license": "MIT",
   "homepage": "https://github.com/ankhorage/devtools#readme",