@ankhorage/devtools 1.21.3 → 2.0.1

package/dist/owner/synchronizeRenovateOwnerAsync.js

@@ -1,19 +1,19 @@
 import { spawn } from 'node:child_process';
 import { mkdir, readFile, writeFile } from 'node:fs/promises';
 import { dirname, resolve } from 'node:path';
+import { REPOSITORY_POLICY } from '@ankhorage/policy/repository';
 import { resolveApmReleaseCommandAsync } from '../features/apm-release-validation/adapters/outbound/resolveApmReleaseCommandAsync.js';
 import { resolveStructureReleaseCommandAsync } from '../features/structure-descriptor-generation/adapters/outbound/resolveStructureReleaseCommandAsync.js';
 import { applyBunRuntimePolicy } from '../policy/applyBunRuntimePolicy.js';
-import { nodeRuntimePolicy } from '../policy/bunRuntimePolicy.js';
+import { DEVTOOLS_BUN_RUNTIME_POLICY } from '../policy/bunRuntimePolicy.js';
 import { renderBunPolicyDocumentation } from '../policy/renderBunPolicyDocumentation.js';
 import { readCurrentDoctorVersion } from '../tools/workflows/readCurrentDoctorVersion.js';
 import { renderRenovateWorkflowAsync } from '../tools/workflows/renderRenovateWorkflowAsync.js';
 import { renderWorkflowAsync, } from '../tools/workflows/renderWorkflowAsync.js';
-/*** Synchronize or validate Renovate-owned Devtools policy artifacts. */
+/*** Synchronize or validate Renovate-owned Devtools artifacts from Devtools-owned policy. */
 export async function synchronizeRenovateOwnerAsync(operation, targetDirectory, options = {}) {
     const target = resolve(targetDirectory);
-    const policy = await readTargetBunPolicyAsync(target);
-    const definitions = await createManagedDefinitionsAsync(target, policy);
+    const definitions = await createManagedDefinitionsAsync(target);
     await assertDevtoolsTargetAsync(target);
     if (operation === 'sync') {
         await syncDefinitionsAsync(target, definitions);
@@ -34,18 +34,18 @@ async function assertDevtoolsTargetAsync(targetDirectory) {
         throw new Error('The Renovate owner sync target must be @ankhorage/devtools.');
     }
 }
-/*** Build the canonical owner-managed artifact definitions for the target repository. */
-async function createManagedDefinitionsAsync(targetDirectory, policy) {
+/*** Build the owner-managed artifact definitions from released central policy. */
+async function createManagedDefinitionsAsync(targetDirectory) {
     const manifest = JSON.parse(await readFile(resolve(targetDirectory, 'package.json'), 'utf8'));
     if (!isRecord(manifest)) {
         throw new Error('Devtools package.json must contain a JSON object.');
     }
     const readme = await readFile(resolve(targetDirectory, 'README.md'), 'utf8');
-    const workflowPolicy = await createWorkflowPolicyAsync(targetDirectory, policy);
+    const workflowPolicy = await createWorkflowPolicyAsync(targetDirectory);
     return [
         {
             relativePath: 'package.json',
-            contents: serializePackageManifest(applyBunRuntimePolicy(manifest, policy)),
+            contents: serializePackageManifest(applyBunRuntimePolicy(manifest)),
         },
         {
             relativePath: '.github/workflows/ci.yml',
@@ -61,18 +61,18 @@ async function createManagedDefinitionsAsync(targetDirectory, policy) {
         },
         {
             relativePath: 'README.md',
-            contents: renderBunPolicyDocumentation(readme, policy),
+            contents: renderBunPolicyDocumentation(readme),
         },
     ];
 }
 /*** Build the self-hosted workflow policy used by Devtools owner synchronization. */
-async function createWorkflowPolicyAsync(targetDirectory, policy) {
+async function createWorkflowPolicyAsync(targetDirectory) {
     return {
         apmReleaseCommand: await resolveApmReleaseCommandAsync(targetDirectory),
         structureReleaseCommand: await resolveStructureReleaseCommandAsync(targetDirectory),
-        bunVersion: policy.version,
+        bunVersion: DEVTOOLS_BUN_RUNTIME_POLICY.version,
         doctorVersion: readCurrentDoctorVersion(),
-        nodeVersion: nodeRuntimePolicy.setupVersion,
+        nodeVersion: REPOSITORY_POLICY.runtime.node.setupVersion,
     };
 }
 /*** Return owner-managed artifact paths whose current bytes differ from policy output. */
@@ -95,25 +95,6 @@ function isNodeError(error) {
 function isRecord(value) {
     return typeof value === 'object' && value !== null && !Array.isArray(value);
 }
-/*** Read the target repository's canonical Bun policy literals. */
-async function readTargetBunPolicyAsync(targetDirectory) {
-    const contents = await readFile(resolve(targetDirectory, 'src/policy/bunRuntimePolicy.ts'), 'utf8');
-    const matches = [...contents.matchAll(BUN_VERSION_PATTERN)];
-    const version = matches.length === 1 ? matches[0]?.[1] : undefined;
-    if (version === undefined) {
-        throw new Error('Expected exactly one canonical BUN_VERSION literal in the target policy.');
-    }
-    const typesMatches = [...contents.matchAll(BUN_TYPES_VERSION_PATTERN)];
-    const typesVersion = typesMatches.length === 1 ? typesMatches[0]?.[1] : undefined;
-    if (typesVersion === undefined) {
-        throw new Error('Expected exactly one canonical BUN_TYPES_VERSION literal in the target policy.');
-    }
-    return {
-        packageManager: `bun@${version}`,
-        typesRange: `^${typesVersion}`,
-        version,
-    };
-}
 /*** Synchronize or validate the target Bun lockfile through Bun itself. */
 async function runBunLockfileAsync(operation, targetDirectory) {
     const args = [
@@ -155,5 +136,3 @@ async function syncDefinitionsAsync(targetDirectory, definitions) {
         await writeFile(targetPath, contents, 'utf8');
     }
 }
-const BUN_VERSION_PATTERN = /const BUN_VERSION = '(\d+\.\d+\.\d+(?:-[0-9A-Za-z.-]+)?)';/gu;
-const BUN_TYPES_VERSION_PATTERN = /const BUN_TYPES_VERSION = '(\d+\.\d+\.\d+(?:-[0-9A-Za-z.-]+)?)';/gu;

package/dist/policy/applyBunRuntimePolicy.d.ts

@@ -1,4 +1,2 @@
-export declare function applyBunRuntimePolicy(manifest: Record<string, unknown>, policy: {
-    readonly packageManager: string;
-    readonly typesRange: string;
-}): Record<string, unknown>;
+/*** Apply the Devtools-owned Bun runtime policy to one package manifest. */
+export declare function applyBunRuntimePolicy(manifest: Record<string, unknown>): Record<string, unknown>;

package/dist/policy/applyBunRuntimePolicy.js

@@ -1,9 +1,11 @@
-export function applyBunRuntimePolicy(manifest, policy) {
+import { DEVTOOLS_BUN_RUNTIME_POLICY } from './bunRuntimePolicy.js';
+/*** Apply the Devtools-owned Bun runtime policy to one package manifest. */
+export function applyBunRuntimePolicy(manifest) {
     const devDependencies = toRecord(manifest.devDependencies);
-    devDependencies['@types/bun'] = policy.typesRange;
+    devDependencies['@types/bun'] = DEVTOOLS_BUN_RUNTIME_POLICY.typesRange;
     return {
         ...manifest,
-        packageManager: policy.packageManager,
+        packageManager: DEVTOOLS_BUN_RUNTIME_POLICY.packageManager,
         devDependencies,
     };
 }

package/dist/policy/bunRuntimePolicy.d.ts

@@ -1,17 +1,5 @@
-export declare const bunRuntimePolicy: {
+export declare const DEVTOOLS_BUN_RUNTIME_POLICY: {
     readonly packageManager: "bun@1.4.2";
-    readonly typesRange: "^1.4.1";
+    readonly typesRange: "^1.4.2";
     readonly version: "1.4.2";
 };
-/**
- * Canonical Node LTS baseline for Node-based Ankhorage tooling and CI execution.
- *
- * Bun remains the repository package manager/primary command runtime where configured;
- * this policy makes Node-based tooling deterministic instead of inheriting the ambient
- * Node version from a CI runner image.
- */
-export declare const nodeRuntimePolicy: {
-    readonly engineRange: "24.x";
-    readonly major: 24;
-    readonly setupVersion: "24";
-};

package/dist/policy/bunRuntimePolicy.js

@@ -1,25 +1,5 @@
-/**
- * Canonical runtime/tooling policies for Ankhorage repositories.
- *
- * Import these from `@ankhorage/devtools/policy` when another package needs to inspect
- * the managed Bun or Node baseline without defining an independent version authority.
- */
-const BUN_VERSION = '1.4.2';
-const BUN_TYPES_VERSION = '1.4.1';
-export const bunRuntimePolicy = {
-    packageManager: `bun@${BUN_VERSION}`,
-    typesRange: `^${BUN_TYPES_VERSION}`,
-    version: BUN_VERSION,
-};
-/**
- * Canonical Node LTS baseline for Node-based Ankhorage tooling and CI execution.
- *
- * Bun remains the repository package manager/primary command runtime where configured;
- * this policy makes Node-based tooling deterministic instead of inheriting the ambient
- * Node version from a CI runner image.
- */
-export const nodeRuntimePolicy = {
-    engineRange: '24.x',
-    major: 24,
-    setupVersion: '24',
+export const DEVTOOLS_BUN_RUNTIME_POLICY = {
+    packageManager: 'bun@1.4.2',
+    typesRange: '^1.4.2',
+    version: '1.4.2',
 };

package/dist/policy/renderBunPolicyDocumentation.d.ts

@@ -1,3 +1,2 @@
-import type { BunPolicy } from '../types/bunPolicy.js';
 /*** Render the managed Bun policy section while preserving the surrounding guide. */
-export declare function renderBunPolicyDocumentation(readme: string, policy: BunPolicy): string;
+export declare function renderBunPolicyDocumentation(readme: string): string;

package/dist/policy/renderBunPolicyDocumentation.js

@@ -1,5 +1,6 @@
+import { DEVTOOLS_BUN_RUNTIME_POLICY } from './bunRuntimePolicy.js';
 /*** Render the managed Bun policy section while preserving the surrounding guide. */
-export function renderBunPolicyDocumentation(readme, policy) {
+export function renderBunPolicyDocumentation(readme) {
     const startIndex = readme.indexOf(README_POLICY_START);
     const endIndex = readme.indexOf(README_POLICY_END);
     if (startIndex === -1 || endIndex === -1 || endIndex < startIndex) {
@@ -9,15 +10,15 @@ export function renderBunPolicyDocumentation(readme, policy) {
         readme.includes(README_POLICY_END, endIndex + README_POLICY_END.length)) {
         throw new Error('README.md must contain exactly one Devtools Bun policy marker pair.');
     }
-    const replacement = `${README_POLICY_START}\n\n${renderReadmePolicy(policy)}\n\n${README_POLICY_END}`;
+    const replacement = `${README_POLICY_START}\n\n${renderReadmePolicy()}\n\n${README_POLICY_END}`;
     return `${readme.slice(0, startIndex)}${replacement}${readme.slice(endIndex + README_POLICY_END.length)}`;
 }
 /*** Format canonical runtime and type-package versions for the guide. */
-function renderReadmePolicy(policy) {
+function renderReadmePolicy() {
     return `\`\`\`text
-Bun runtime       ${policy.version}
-packageManager    ${policy.packageManager}
-@types/bun        ${policy.typesRange}
+Bun runtime       ${DEVTOOLS_BUN_RUNTIME_POLICY.version}
+packageManager    ${DEVTOOLS_BUN_RUNTIME_POLICY.packageManager}
+@types/bun        ${DEVTOOLS_BUN_RUNTIME_POLICY.typesRange}
 \`\`\``;
 }
 const README_POLICY_END = '<!-- devtools-bun-policy:end -->';

package/dist/policy/resolvePkgvizAuditPolicyAsync.d.ts

@@ -1,4 +1,4 @@
-/*** Resolve the centrally pinned PKGViz CI audit for repositories with analyzable source. */
+/*** Resolve the central PKGViz CI audit for repositories with analyzable source. */
 export declare function resolvePkgvizAuditPolicyAsync(targetDirectory: string): Promise<PkgvizAuditPolicy | undefined>;
 interface PkgvizAuditPolicy {
     readonly artifactName: string;

package/dist/policy/resolvePkgvizAuditPolicyAsync.js

@@ -1,14 +1,12 @@
 import { stat } from 'node:fs/promises';
 import { join } from 'node:path';
-/*** Resolve the centrally pinned PKGViz CI audit for repositories with analyzable source. */
+import { REPOSITORY_POLICY } from '@ankhorage/policy/repository';
+/*** Resolve the central PKGViz CI audit for repositories with analyzable source. */
 export async function resolvePkgvizAuditPolicyAsync(targetDirectory) {
     if (!(await hasSourceDirectoryAsync(targetDirectory)))
         return undefined;
-    return {
-        artifactName: 'pkgviz-audit',
-        artifactPath: 'pkgviz-audit.json',
-        command: 'bunx pkgviz@0.8.1 --out pkgviz-audit.json --rule cyclic-dependencies=block',
-    };
+    const { artifactName, artifactPath, command } = REPOSITORY_POLICY.pkgvizAudit;
+    return { artifactName, artifactPath, command };
 }
 /*** Detect whether the managed repository has a source tree that PKGViz can inspect. */
 async function hasSourceDirectoryAsync(targetDirectory) {

package/dist/tools/agents/index.js

@@ -127,6 +127,10 @@ bun run changeset
 bun run format
 \`\`\`
 
+For repositories that use Changesets, run \`bun run changeset\` only for release-impacting work.
+No Changeset means no release is requested. Never add an empty Changeset to satisfy CI; remove it
+for a no-release pull request, or add explicit release intent before validation.
+
 `;
 }
 /*** Render the repository rule for executable Agent Skill scripts. */

package/dist/tools/package/index.js

@@ -7,8 +7,9 @@
  * `lint:fix`, `format`, `format:check`, and `knip:check` scripts are written.
  * Unrelated manifest fields, scripts, dependencies, and metadata are preserved.
  *
- * The Bun runtime policy is shared by every repository, including devtools itself. Devtools skips
- * only its consumer dependency/script normalization so it never attempts to install itself.
+ * The Bun runtime synchronization contract is Devtools-owned for every repository, including
+ * Devtools itself. Devtools skips only its consumer dependency/script normalization so it never
+ * attempts to install itself.
  *
  * Status compares only the fields owned by this contract, so unrelated repository customization
  * does not count as drift. `--dry-run` reports whether `package.json` would be created or updated
@@ -19,9 +20,9 @@
 import { existsSync, readFileSync } from 'node:fs';
 import { readFile, writeFile } from 'node:fs/promises';
 import { resolve } from 'node:path';
+import { REPOSITORY_POLICY } from '@ankhorage/policy/repository';
 import { applyBunRuntimePolicy } from '../../policy/applyBunRuntimePolicy.js';
-import { bunRuntimePolicy } from '../../policy/bunRuntimePolicy.js';
-import { changesetsPolicy } from '../../policy/changesetsPolicy.js';
+import { DEVTOOLS_BUN_RUNTIME_POLICY } from '../../policy/bunRuntimePolicy.js';
 const PACKAGE_PATH = 'package.json';
 const DEVTOOLS_PACKAGE_NAME = '@ankhorage/devtools';
 const BUN_TYPES_PACKAGE_NAME = '@types/bun';
@@ -85,26 +86,26 @@ export async function syncPackageManifest(targetDirectory, devtoolsVersion, opti
 /*** Apply the Devtools-owned package scripts, dependencies, and Bun runtime policy. */
 export function applyManagedPackageContract(manifest, devtoolsVersion, changesetsConfigExists = false) {
     if (manifest.name === DEVTOOLS_PACKAGE_NAME) {
-        return applyBunRuntimePolicy(manifest, bunRuntimePolicy);
+        return applyBunRuntimePolicy(manifest);
     }
     const scripts = { ...toRecord(manifest.scripts) };
     const changesetsEnabled = isChangesetsEnabled(scripts, changesetsConfigExists);
     delete scripts.knip;
     Object.assign(scripts, STANDARD_SCRIPTS);
     if (changesetsEnabled) {
-        Object.assign(scripts, changesetsPolicy.packageScripts);
+        Object.assign(scripts, REPOSITORY_POLICY.changesets.packageScripts);
     }
     const devDependencies = removeOwnedDependencies(toRecord(manifest.devDependencies));
     const dependencies = toRecord(manifest.dependencies);
-    delete dependencies[changesetsPolicy.packageName];
-    delete devDependencies[changesetsPolicy.packageName];
+    delete dependencies[REPOSITORY_POLICY.changesets.packageName];
+    delete devDependencies[REPOSITORY_POLICY.changesets.packageName];
     applyDevtoolsDependencyPlacement(dependencies, devDependencies, devtoolsVersion);
     return applyBunRuntimePolicy({
         ...manifest,
         ...normalizedDependencies(manifest, dependencies),
         scripts,
         devDependencies,
-    }, bunRuntimePolicy);
+    });
 }
 /*** Check whether the Devtools-owned package manifest fields match current policy. */
 export function isManagedPackageContractCurrent(manifest, devtoolsVersion, changesetsConfigExists = false) {
@@ -120,8 +121,8 @@ export function isManagedPackageContractCurrent(manifest, devtoolsVersion, chang
     const changesetsEnabled = isChangesetsEnabled(scripts, changesetsConfigExists);
     return (hasStandardScripts(scripts) &&
         DEVTOOLS_OWNED_DEV_DEPENDENCIES.every((name) => devDependencies[name] === undefined) &&
-        dependencies[changesetsPolicy.packageName] === undefined &&
-        devDependencies[changesetsPolicy.packageName] === undefined &&
+        dependencies[REPOSITORY_POLICY.changesets.packageName] === undefined &&
+        devDependencies[REPOSITORY_POLICY.changesets.packageName] === undefined &&
         hasCurrentChangesetsScripts(scripts, changesetsEnabled) &&
         hasCurrentDevtoolsDependencyPlacement(dependencies, devDependencies, devtoolsVersion));
 }
@@ -154,8 +155,8 @@ async function readPackageManifest(targetDirectory) {
 /*** Check the Bun package manager and Bun type dependency contract. */
 function hasCurrentBunRuntimePolicy(manifest) {
     const devDependencies = toRecord(manifest.devDependencies);
-    return (manifest.packageManager === bunRuntimePolicy.packageManager &&
-        devDependencies[BUN_TYPES_PACKAGE_NAME] === bunRuntimePolicy.typesRange);
+    return (manifest.packageManager === DEVTOOLS_BUN_RUNTIME_POLICY.packageManager &&
+        devDependencies[BUN_TYPES_PACKAGE_NAME] === DEVTOOLS_BUN_RUNTIME_POLICY.typesRange);
 }
 /*** Place Devtools in development dependencies for every consuming repository. */
 function applyDevtoolsDependencyPlacement(dependencies, devDependencies, devtoolsVersion) {
@@ -188,12 +189,12 @@ function hasStandardScripts(scripts) {
 /*** Check Changesets scripts when the repository participates in Changesets. */
 function hasCurrentChangesetsScripts(scripts, changesetsEnabled) {
     return (!changesetsEnabled ||
-        Object.entries(changesetsPolicy.packageScripts).every(([name, command]) => scripts[name] === command));
+        Object.entries(REPOSITORY_POLICY.changesets.packageScripts).every(([name, command]) => scripts[name] === command));
 }
 /*** Determine whether the repository participates in Changesets synchronization. */
 function isChangesetsEnabled(scripts, changesetsConfigExists) {
     return (changesetsConfigExists ||
-        Object.keys(changesetsPolicy.packageScripts).some((scriptName) => scripts[scriptName] !== undefined));
+        Object.keys(REPOSITORY_POLICY.changesets.packageScripts).some((scriptName) => scripts[scriptName] !== undefined));
 }
 /*** Serialize a package manifest using the repository formatting contract. */
 function serializePackageManifest(manifest) {

package/dist/tools/skills/assets/ankhorage-coding-rules/SKILL.md

@@ -52,16 +52,22 @@ exceptions or replaced by generic preferences from this skill.
 - Use ordinary inline comments when they explain non-obvious intent, invariants, constraints, or the
   reason behind a decision. Do not narrate self-explanatory code or duplicate what names and types
   already express.
-- Paradox documentation metadata belongs only inside `/*** ... */` comments. Use only supported
-  Paradox tags: `@readme`, `@config`, `@example`, and `@usage`. Do not use JSDoc-only tags such as
-  `@param` or `@returns` as Paradox metadata.
+- Paradox documentation metadata belongs only inside `/*** ... */` comments. The canonical tag
+  vocabulary is owned by `@ankhorage/policy`: `@readme`, `@usage`, `@config`, `@title`,
+  `@see`, and `@security`. Unsupported tag-shaped lines are invalid; `@example` does not exist.
+  Do not use JSDoc-only tags such as `@param` or `@returns` as Paradox metadata.
+- Paradox comments contain documentation prose and metadata only. Fenced or indented code blocks are
+  invalid; source examples come from real code. Inline code spans remain valid prose.
 - Add a supported Paradox tag only when it changes or usefully enriches generated documentation;
   plain function descriptions do not need tags.
 - README usage documentation must come from a real repository-root `examples/<example>/...` source
-  file. Put `@usage` in that example file's leading `/*** ... */` comment so Paradox promotes the
-  runnable example into the README Usage section. Do not create dedicated `readme-usage`,
-  `usage-readme`, `readmeUsage`, or equivalent source modules whose only purpose is feeding README
-  usage text.
+  file. A package that opts into `@usage` must have exactly one example combining `@usage`,
+  `@readme`, and `@title`; additional `@usage` examples remain full-doc-only. Do not create
+  dedicated `readme-usage`, `usage-readme`, `readmeUsage`, or equivalent source modules whose
+  only purpose is feeding README usage text.
+- Configuration documentation is optional until a package opts in. Once it does, the canonical schema
+  is `src/types/config.ts` with exactly one root type/interface carrying `@config`, `@readme`,
+  and `@title`.
 - Update documentation sources in the pull request, including repository-owned manual documentation
   outside the configured generated output. Never hand-edit generated README or Paradox artifacts.
 - Generated documentation is release-owned. Ordinary feature pull requests must not regenerate or

package/dist/tools/workflows/files/ci.yml

@@ -107,10 +107,30 @@ jobs:
       - name: Check changesets
         if: github.event_name == 'pull_request'
         run: |
+          base_sha='${{ github.event.pull_request.base.sha }}'
+          head_sha='${{ github.event.pull_request.head.sha }}'
+          export ANKH_PR_CHANGESET_FILES
+          ANKH_PR_CHANGESET_FILES="$(git diff --name-only --diff-filter=AMCR "$base_sha" "$head_sha" -- .changeset)"
+          if [ -z "$ANKH_PR_CHANGESET_FILES" ]; then
+            echo "No pull-request-owned Changeset files; no release requested."
+            exit 0
+          fi
+          node -e '
+            const { readFileSync } = require("node:fs");
+            const files = process.env.ANKH_PR_CHANGESET_FILES.split("\n").filter(Boolean);
+            const empty = files.filter((file) => {
+              if (!/^\.changeset\/[^/]+\.md$/u.test(file) || file === ".changeset/README.md") return false;
+              const match = /^---\r?\n([\s\S]*?)\r?\n---(?:\r?\n|$)/u.exec(readFileSync(file, "utf8"));
+              return match?.[1].trim() === "";
+            });
+            if (empty.length > 0) {
+              throw new Error("Empty Changesets are not supported. Remove " + empty.join(", ") + " for a no-release PR, or add release intent.");
+            }
+          '
           if node -e "const p=require('./package.json'); process.exit(p.scripts?.['changeset:status'] ? 0 : 1)"; then
             __ANKH_CHANGESETS_STATUS_COMMAND__
           else
-            echo "No changeset:status script found; skipping."
+            echo "No changeset:status script found; skipping validation."
           fi
 
       # __ANKH_PKGVIZ_AUDIT_STEPS__

package/dist/tools/workflows/files/renovate.yml

@@ -25,7 +25,7 @@ jobs:
       (github.event.pull_request.user.login == 'renovate[bot]' || github.event.pull_request.user.login == 'ankhorage-renovate-sync[bot]') &&
       github.event.pull_request.head.repo.full_name == github.repository &&
       startsWith(github.event.pull_request.head.ref, 'renovate/')
-    uses: ankhorage/renovate/.github/workflows/changeset.yml@db48610ed5bc6a1191798b123ce86419571d7bc6
+    uses: ankhorage/renovate/.github/workflows/changeset.yml@60f0b8c853ecc2c3601d947e8c9414c8a89bd481
     with:
       renovate_sync_client_id: ${{ vars.ANKHORAGE_RENOVATE_SYNC_CLIENT_ID }}
     secrets:

package/dist/tools/workflows/index.js

@@ -1,8 +1,9 @@
 import { access } from 'node:fs/promises';
 import { join } from 'node:path';
+import { REPOSITORY_POLICY } from '@ankhorage/policy/repository';
 import { resolveApmReleaseCommandAsync } from '../../features/apm-release-validation/adapters/outbound/resolveApmReleaseCommandAsync.js';
 import { resolveStructureReleaseCommandAsync } from '../../features/structure-descriptor-generation/adapters/outbound/resolveStructureReleaseCommandAsync.js';
-import { bunRuntimePolicy, nodeRuntimePolicy } from '../../policy/bunRuntimePolicy.js';
+import { DEVTOOLS_BUN_RUNTIME_POLICY } from '../../policy/bunRuntimePolicy.js';
 import { resolvePkgvizAuditPolicyAsync } from '../../policy/resolvePkgvizAuditPolicyAsync.js';
 import { readCurrentDoctorVersion } from './readCurrentDoctorVersion.js';
 import { renderRenovateConfigAsync } from './renderRenovateConfigAsync.js';
@@ -38,9 +39,9 @@ function createWorkflowDefinition(relativePath, sourcePath) {
         render: async (targetDirectory) => await renderWorkflowAsync(sourceUrl, {
             apmReleaseCommand: await resolveApmReleaseCommandAsync(targetDirectory),
             structureReleaseCommand: await resolveStructureReleaseCommandAsync(targetDirectory),
-            bunVersion: bunRuntimePolicy.version,
+            bunVersion: DEVTOOLS_BUN_RUNTIME_POLICY.version,
             doctorVersion: readCurrentDoctorVersion(),
-            nodeVersion: nodeRuntimePolicy.setupVersion,
+            nodeVersion: REPOSITORY_POLICY.runtime.node.setupVersion,
             pkgvizAudit: await resolvePkgvizAuditPolicyAsync(targetDirectory),
         }),
     };
@@ -53,9 +54,9 @@ function createRenovateWorkflowDefinition() {
         render: async (targetDirectory) => await renderRenovateWorkflowAsync(sourceUrl, targetDirectory, {
             apmReleaseCommand: await resolveApmReleaseCommandAsync(targetDirectory),
             structureReleaseCommand: await resolveStructureReleaseCommandAsync(targetDirectory),
-            bunVersion: bunRuntimePolicy.version,
+            bunVersion: DEVTOOLS_BUN_RUNTIME_POLICY.version,
             doctorVersion: readCurrentDoctorVersion(),
-            nodeVersion: nodeRuntimePolicy.setupVersion,
+            nodeVersion: REPOSITORY_POLICY.runtime.node.setupVersion,
         }),
     };
 }

package/dist/tools/workflows/renderRenovateConfigAsync.d.ts

@@ -1,2 +1,2 @@
-/*** Render Renovate config while preserving repository-owned rules and removing obsolete Paradox metadata. */
+/*** Render the current Renovate config while preserving supported repository-owned rules. */
 export declare function renderRenovateConfigAsync(targetDirectory: string): Promise<string>;

package/dist/tools/workflows/renderRenovateConfigAsync.js

@@ -1,8 +1,7 @@
 import { readFile } from 'node:fs/promises';
 import { join } from 'node:path';
 const TEMPLATE_URL = new URL('./files/renovate.json5', import.meta.url);
-const LEGACY_HEADER_PATTERN = /^\/\*\*\*([\s\S]*?)\*\/\n/u;
-/*** Render Renovate config while preserving repository-owned rules and removing obsolete Paradox metadata. */
+/*** Render the current Renovate config while preserving supported repository-owned rules. */
 export async function renderRenovateConfigAsync(targetDirectory) {
     const targetPath = join(targetDirectory, 'renovate.json5');
     let current;
@@ -15,21 +14,5 @@ export async function renderRenovateConfigAsync(targetDirectory) {
         }
         throw error;
     }
-    return migrateLegacyRenovateHeader(current);
-}
-/*** Convert the historical managed Paradox header to an ordinary comment without changing config data. */
-function migrateLegacyRenovateHeader(contents) {
-    const match = LEGACY_HEADER_PATTERN.exec(contents);
-    if (match === null)
-        return contents;
-    const [header, body = ''] = match;
-    if (!body.includes('Repository configuration'))
-        return contents;
-    if (!body.includes('@usage') && !body.includes('@readme'))
-        return contents;
-    const migratedBody = body
-        .split('\n')
-        .filter((line) => !/^\s*\*\s+@(usage|readme)\s*$/u.test(line))
-        .join('\n');
-    return `/**${migratedBody}*/\n${contents.slice(header.length)}`;
+    return current;
 }

package/dist/tools/workflows/renderWorkflowAsync.js

@@ -1,14 +1,14 @@
 import { readFile } from 'node:fs/promises';
-import { changesetsPolicy } from '../../policy/changesetsPolicy.js';
+import { REPOSITORY_POLICY } from '@ankhorage/policy/repository';
 /*** Renders one workflow template with the canonical runtime, Doctor, and Changesets policy. */
 export async function renderWorkflowAsync(sourceUrl, policy) {
     const template = await readFile(sourceUrl, 'utf8');
     const rendered = template
         .replaceAll(BUN_VERSION_TOKEN, policy.bunVersion)
         .replaceAll(PKGVIZ_AUDIT_STEPS_TOKEN, renderPkgvizAuditSteps(policy))
-        .replaceAll(CHANGESETS_PUBLISH_COMMAND_TOKEN, changesetsPolicy.workflowCommands.publish)
-        .replaceAll(CHANGESETS_STATUS_COMMAND_TOKEN, changesetsPolicy.workflowCommands.status)
-        .replaceAll(CHANGESETS_VERSION_COMMAND_TOKEN, changesetsPolicy.workflowCommands.version)
+        .replaceAll(CHANGESETS_PUBLISH_COMMAND_TOKEN, REPOSITORY_POLICY.changesets.workflowCommands.publish)
+        .replaceAll(CHANGESETS_STATUS_COMMAND_TOKEN, REPOSITORY_POLICY.changesets.workflowCommands.status)
+        .replaceAll(CHANGESETS_VERSION_COMMAND_TOKEN, REPOSITORY_POLICY.changesets.workflowCommands.version)
         .replaceAll(DOCTOR_VERSION_TOKEN, policy.doctorVersion)
         .replaceAll('__ANKH_APM_RELEASE_COMMAND__', policy.apmReleaseCommand ?? './node_modules/.bin/ankhorage-apm-release')
         .replaceAll('__ANKH_STRUCTURE_RELEASE_COMMAND__', policy.structureReleaseCommand ?? './node_modules/.bin/ankhorage-structure')

package/examples/package/eslint.config.mjs

@@ -4,8 +4,15 @@ import { fileURLToPath } from 'node:url';
 
 const __dirname = path.dirname(fileURLToPath(import.meta.url));
 
+/***
+ * Configure ESLint for a standalone TypeScript package with the Devtools shared policy.
+ *
+ * @usage
+ * @readme
+ * @title Standalone package ESLint configuration
+ */
 export default createConfig({
   tsconfigRootDir: __dirname,
-  project: ['./tsconfig.eslint.json'],
+  project: ['./tsconfig.json'],
   files: ['src/**/*.{ts,tsx}'],
 });

package/examples/package/package.json

@@ -0,0 +1,13 @@
+{
+  "name": "@ankhorage/devtools-eslint-example",
+  "private": true,
+  "type": "module",
+  "devDependencies": {
+    "@ankhorage/devtools": "^2.0.0",
+    "typescript": "~6.0.3"
+  },
+  "scripts": {
+    "lint": "ankhorage-eslint . --max-warnings=0"
+  },
+  "packageManager": "bun@1.4.2"
+}

package/examples/package/src/index.ts

@@ -0,0 +1 @@
+export const exampleMessage = 'Standalone Devtools ESLint configuration.';

package/examples/package/tsconfig.json

@@ -0,0 +1,9 @@
+{
+  "compilerOptions": {
+    "module": "NodeNext",
+    "moduleResolution": "NodeNext",
+    "strict": true,
+    "target": "ES2024"
+  },
+  "include": ["src/**/*.ts"]
+}

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@ankhorage/devtools",
-  "version": "1.21.3",
-  "description": "Shared tooling, repository automation, runtime policies, and agent standards for Ankhorage TypeScript projects",
+  "version": "2.0.1",
+  "description": "Shared tooling, repository automation, and agent standards for Ankhorage TypeScript projects",
   "license": "MIT",
   "homepage": "https://github.com/ankhorage/devtools#readme",
   "bugs": {
@@ -82,10 +82,6 @@
       "types": "./dist/tools/knip/index.d.ts",
       "import": "./dist/tools/knip/index.js"
     },
-    "./policy": {
-      "types": "./dist/policy/bunRuntimePolicy.d.ts",
-      "import": "./dist/policy/bunRuntimePolicy.js"
-    },
     "./prettier": {
       "import": "./dist/tools/prettier/index.cjs",
       "require": "./dist/tools/prettier/index.cjs",
@@ -145,16 +141,17 @@
     "knip": "^6.38.0",
     "prettier": "^3.9.9",
     "typescript-eslint": "^8.70.1",
-    "@ankhorage/contracts": "^22.8.1",
-    "typescript": "~6.0.3"
+    "@ankhorage/contracts": "^22.8.2",
+    "typescript": "~6.0.3",
+    "@ankhorage/policy": "^0.5.2"
   },
   "devDependencies": {
-    "@ankhorage/paradox": "^0.1.26",
+    "@ankhorage/paradox": "^0.2.6",
     "@ankhorage/ankh": "^0.10.4",
-    "@ankhorage/doctor": "0.11.0",
+    "@ankhorage/doctor": "0.11.8",
     "@techstark/opencv-js": "^5.0.0-release.1",
-    "@types/bun": "^1.4.1",
-    "@types/node": "^26.6.2",
+    "@types/bun": "^1.4.2",
+    "@types/node": "^26.6.3",
     "sharp": "^0.35.4"
   },
   "packageManager": "bun@1.4.2"

package/dist/policy/changesetsPolicy.d.ts

@@ -1,19 +0,0 @@
-export declare const changesetsPolicy: {
-    readonly packageName: "@changesets/cli";
-    readonly binaryName: "ankhorage-changeset";
-    readonly packageScripts: {
-        readonly changeset: "ankhorage-changeset";
-        readonly 'changeset:status': "ankhorage-changeset status --since=origin/main";
-        readonly 'version-packages': "ankhorage-changeset version";
-    };
-    readonly ownerPackageScripts: {
-        readonly changeset: "bun src/cli/bin/changeset.ts";
-        readonly 'changeset:status': "bun src/cli/bin/changeset.ts status --since=origin/main";
-        readonly 'version-packages': "bun src/cli/bin/changeset.ts version";
-    };
-    readonly workflowCommands: {
-        readonly status: "bun run changeset:status";
-        readonly version: "bun run version-packages";
-        readonly publish: "bun run changeset -- publish";
-    };
-};