@ankhorage/devtools 1.6.0 → 1.7.0

package/README.md

@@ -101,7 +101,7 @@ The synchronized package scripts are:
     "lint:fix": "ankhorage-eslint . --fix --max-warnings=0",
     "format": "ankhorage-prettier --write .",
     "format:check": "ankhorage-prettier --check .",
-    "knip": "ankhorage-knip"
+    "knip:check": "ankhorage-knip"
   }
 }
 ```
@@ -154,7 +154,7 @@ Synchronization is deterministic and idempotent:
 - missing managed artifacts are created
 - outdated centrally owned artifacts are updated
 - the managed Bun runtime version is applied consistently to package metadata and workflows
-- package changes are followed by `bun install`, keeping installed dependencies and `bun.lock` synchronized
+- package changes are followed by `bun install` after all managed files have been written, keeping installed dependencies and `bun.lock` synchronized without invalidating the running sync
 - current artifacts are left untouched
 - unrelated files and package fields are preserved
 - repeated sync produces only `unchanged` results
@@ -232,7 +232,7 @@ Use `eslint.local.config.mjs` for narrow repository-specific flat-config overrid
 
 ## Prettier
 
-`ankh devtools prettier sync` owns `.prettierrc.js` and emits the correct ESM or CommonJS delegate based on the repository's `package.json` module type.
+`ankh devtools prettier sync` owns `.prettierrc.js`, emits the correct ESM or CommonJS wrapper based on the repository's `package.json` module type, and creates `prettier.local.config.js` once for narrow repository-specific options.
 
 The consumer delegates formatting policy to:
 
@@ -240,6 +240,8 @@ The consumer delegates formatting policy to:
 @ankhorage/devtools/prettier
 ```
 
+The wrapper merges shared and local `overrides` in that order. On first synchronization, an existing non-canonical `.prettierrc.js` is preserved as `prettier.local.config.js`; former shared-only Devtools delegates become an empty local config. Later synchronization never overwrites the local file.
+
 ## Knip
 
 `ankh devtools knip sync` bootstraps `knip.config.ts` with:
@@ -289,10 +291,13 @@ When this managed package contract changes, synchronization runs `bun install`.
 
 ```text
 .github/workflows/ci.yml
+.github/workflows/renovate.yml
 .github/workflows/release.yml
 ```
 
-Both workflows render their `bun-version` from the same managed Bun runtime policy used for `package.json`. The CI workflow installs that Bun version with the frozen lockfile, builds before repository-provider validation, runs `bunx @ankhorage/ankh doctor validate .`, and conditionally runs lint, formatting, Knip, tests, typecheck, and Changesets checks.
+CI and Release render their `bun-version` from the same managed Bun runtime policy used for `package.json`. The CI workflow installs that Bun version with the frozen lockfile, builds before repository-provider validation, runs `bunx @ankhorage/ankh doctor validate .`, and conditionally runs lint, formatting, Knip, tests, typecheck, and Changesets checks.
+
+The Renovate workflow accepts only same-repository branches created by `renovate[bot]`. It calls the SHA-pinned `ankhorage/renovate` workflow to add a release Changeset for runtime Ankhorage dependency updates or an empty Changeset for dev-only updates, then dispatches CI for that bot-authored commit. It never checks out or executes pull-request code in the privileged `pull_request_target` context.
 
 ## Managed VS Code configuration
 

package/dist/cli/runRepositoryCommand.js

@@ -52,20 +52,22 @@ async function runStatus(scope, targetDirectory, devtoolsVersion, context) {
 }
 async function runSync(scope, targetDirectory, devtoolsVersion, dryRun, context) {
     const results = [];
+    let packageDependenciesChanged = false;
     if (scope === 'all' || scope === 'package') {
         const packageResult = await syncPackageManifest(targetDirectory, devtoolsVersion, { dryRun });
         results.push(packageResult);
-        if (packageResult.action !== 'unchanged') {
-            if (dryRun) {
-                results.push(planBunDependencySync(targetDirectory));
-            }
-            else {
-                const syncDependencies = context.syncDependencies ?? syncBunDependencies;
-                results.push(await syncDependencies(targetDirectory));
-            }
-        }
+        packageDependenciesChanged = packageResult.action !== 'unchanged';
     }
     results.push(...(await syncManagedFiles(targetDirectory, getManagedFiles(scope), { dryRun })));
+    if (packageDependenciesChanged) {
+        if (dryRun) {
+            results.push(planBunDependencySync(targetDirectory));
+        }
+        else {
+            const syncDependencies = context.syncDependencies ?? syncBunDependencies;
+            results.push(await syncDependencies(targetDirectory));
+        }
+    }
     writeSyncOutput(results, context);
     return { exitCode: 0 };
 }

package/dist/tools/package/index.js

@@ -5,7 +5,7 @@
  * as a development dependency for normal consumers, while `@ankhorage/ankh` keeps devtools as a
  * runtime dependency because the CLI loads it as a bundled core provider. Individually installed
  * toolchain packages that devtools now owns are removed, and the canonical `lint`, `lint:fix`,
- * `format`, `format:check`, and `knip` scripts are written.
+ * `format`, `format:check`, and `knip:check` scripts are written.
  * Unrelated manifest fields, scripts, dependencies, and metadata are preserved.
  *
  * The Bun runtime policy is shared by every repository, including devtools itself. Devtools skips
@@ -30,7 +30,7 @@ const STANDARD_SCRIPTS = {
     'lint:fix': 'ankhorage-eslint . --fix --max-warnings=0',
     format: 'ankhorage-prettier --write .',
     'format:check': 'ankhorage-prettier --check .',
-    knip: 'ankhorage-knip',
+    'knip:check': 'ankhorage-knip',
 };
 const DEVTOOLS_OWNED_DEV_DEPENDENCIES = [
     '@eslint/js',
@@ -82,7 +82,9 @@ export function applyManagedPackageContract(manifest, devtoolsVersion) {
     if (manifest.name === DEVTOOLS_PACKAGE_NAME) {
         return applyBunRuntimePolicy(manifest);
     }
-    const scripts = { ...toRecord(manifest.scripts), ...STANDARD_SCRIPTS };
+    const scripts = { ...toRecord(manifest.scripts) };
+    delete scripts.knip;
+    Object.assign(scripts, STANDARD_SCRIPTS);
     const devDependencies = removeOwnedDependencies(toRecord(manifest.devDependencies));
     const dependencies = toRecord(manifest.dependencies);
     applyDevtoolsDependencyPlacement(manifest, dependencies, devDependencies, devtoolsVersion);
@@ -175,7 +177,8 @@ function normalizedDependencies(manifest, dependencies) {
         : { dependencies };
 }
 function hasStandardScripts(scripts) {
-    return Object.entries(STANDARD_SCRIPTS).every(([name, command]) => scripts[name] === command);
+    return (scripts.knip === undefined &&
+        Object.entries(STANDARD_SCRIPTS).every(([name, command]) => scripts[name] === command));
 }
 function serializePackageManifest(manifest) {
     return `${JSON.stringify(manifest, null, 2)}\n`;

package/dist/tools/prettier/managed.d.ts

@@ -1,6 +1,11 @@
 export declare const prettierManagedFiles: readonly [{
+    readonly relativePath: "prettier.local.config.js";
+    readonly render: typeof renderInitialLocalConfig;
+    readonly mode: "create-only";
+}, {
     readonly relativePath: ".prettierrc.js";
     readonly render: typeof renderPrettierConfig;
 }];
 declare function renderPrettierConfig(targetDirectory: string): Promise<string>;
+declare function renderInitialLocalConfig(targetDirectory: string): Promise<string>;
 export {};

package/dist/tools/prettier/managed.js

@@ -1,10 +1,37 @@
 import { readFile } from 'node:fs/promises';
 import { resolve } from 'node:path';
-const ESM_CONFIG = `export { default } from '@ankhorage/devtools/prettier';
+const ESM_CONFIG = `import sharedConfig from '@ankhorage/devtools/prettier';
+import localConfig from './prettier.local.config.js';
+
+export default {
+  ...sharedConfig,
+  ...localConfig,
+  overrides: [...(sharedConfig.overrides ?? []), ...(localConfig.overrides ?? [])],
+};
 `;
-const COMMONJS_CONFIG = `module.exports = require('@ankhorage/devtools/prettier');
+const COMMONJS_CONFIG = `const sharedConfig = require('@ankhorage/devtools/prettier');
+const localConfig = require('./prettier.local.config.js');
+
+module.exports = {
+  ...sharedConfig,
+  ...localConfig,
+  overrides: [...(sharedConfig.overrides ?? []), ...(localConfig.overrides ?? [])],
+};
+`;
+const EMPTY_ESM_LOCAL_CONFIG = `export default {};
+`;
+const EMPTY_COMMONJS_LOCAL_CONFIG = `module.exports = {};
+`;
+const LEGACY_ESM_CONFIG = `export { default } from '@ankhorage/devtools/prettier';
+`;
+const LEGACY_COMMONJS_CONFIG = `module.exports = require('@ankhorage/devtools/prettier');
 `;
 export const prettierManagedFiles = [
+    {
+        relativePath: 'prettier.local.config.js',
+        render: renderInitialLocalConfig,
+        mode: 'create-only',
+    },
     {
         relativePath: '.prettierrc.js',
         render: renderPrettierConfig,
@@ -13,6 +40,19 @@ export const prettierManagedFiles = [
 async function renderPrettierConfig(targetDirectory) {
     return (await readPackageType(targetDirectory)) === 'module' ? ESM_CONFIG : COMMONJS_CONFIG;
 }
+async function renderInitialLocalConfig(targetDirectory) {
+    const isModule = (await readPackageType(targetDirectory)) === 'module';
+    try {
+        const existingConfig = await readFile(resolve(targetDirectory, '.prettierrc.js'), 'utf8');
+        if (!isSharedOnlyConfig(existingConfig))
+            return existingConfig;
+    }
+    catch (error) {
+        if (!isNodeError(error) || error.code !== 'ENOENT')
+            throw error;
+    }
+    return isModule ? EMPTY_ESM_LOCAL_CONFIG : EMPTY_COMMONJS_LOCAL_CONFIG;
+}
 async function readPackageType(targetDirectory) {
     try {
         const contents = await readFile(resolve(targetDirectory, 'package.json'), 'utf8');
@@ -29,6 +69,9 @@ async function readPackageType(targetDirectory) {
 function isRecord(value) {
     return typeof value === 'object' && value !== null && !Array.isArray(value);
 }
+function isSharedOnlyConfig(value) {
+    return [ESM_CONFIG, COMMONJS_CONFIG, LEGACY_ESM_CONFIG, LEGACY_COMMONJS_CONFIG].includes(value);
+}
 function isNodeError(error) {
     return error instanceof Error && 'code' in error;
 }

package/dist/tools/workflows/files/ci.yml

@@ -5,6 +5,7 @@ on:
   push:
     branches:
       - main
+  workflow_dispatch:
 
 permissions:
   contents: read
@@ -61,10 +62,10 @@ jobs:
 
       - name: Run Knip
         run: |
-          if node -e "const p=require('./package.json'); process.exit(p.scripts?.knip ? 0 : 1)"; then
-            bun run knip
+          if node -e "const p=require('./package.json'); process.exit(p.scripts?.['knip:check'] ? 0 : 1)"; then
+            bun run knip:check
           else
-            echo "No knip script found; skipping."
+            echo "No knip:check script found; skipping."
           fi
 
       - name: Run tests

package/dist/tools/workflows/files/renovate.yml

@@ -0,0 +1,21 @@
+name: Renovate
+
+on:
+  pull_request_target:
+    types:
+      - opened
+      - reopened
+      - synchronize
+
+permissions:
+  actions: write
+  contents: write
+  pull-requests: read
+
+jobs:
+  changeset:
+    if: >-
+      github.actor == 'renovate[bot]' &&
+      github.event.pull_request.head.repo.full_name == github.repository &&
+      startsWith(github.event.pull_request.head.ref, 'renovate/')
+    uses: ankhorage/renovate/.github/workflows/changeset.yml@b7305e8f17f9b07238f6b827bbc9f866fd498a0f

package/dist/tools/workflows/index.d.ts

@@ -1,2 +1,2 @@
 import type { ManagedFileDefinition } from '../shared/managedFiles.js';
-export declare const workflowManagedFiles: readonly [ManagedFileDefinition, ManagedFileDefinition];
+export declare const workflowManagedFiles: readonly [ManagedFileDefinition, ManagedFileDefinition, ManagedFileDefinition];

package/dist/tools/workflows/index.js

@@ -5,6 +5,7 @@ const NODE_VERSION_TOKEN = '__ANKH_NODE_VERSION__';
 export const workflowManagedFiles = [
     createWorkflowDefinition('.github/workflows/ci.yml', './files/ci.yml'),
     createWorkflowDefinition('.github/workflows/release.yml', './files/release.yml'),
+    createWorkflowDefinition('.github/workflows/renovate.yml', './files/renovate.yml'),
 ];
 function createWorkflowDefinition(relativePath, sourcePath) {
     const sourceUrl = new URL(sourcePath, import.meta.url);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@ankhorage/devtools",
-  "version": "1.6.0",
+  "version": "1.7.0",
   "description": "Shared development tools and repository standards for Ankhorage",
   "license": "MIT",
   "homepage": "https://github.com/ankhorage/devtools#readme",