@ankhorage/renovate 0.1.1

package/CHANGELOG.md

@@ -0,0 +1,26 @@
+# @ankhorage/renovate
+
+## 0.1.1
+
+### Patch Changes
+
+- 8f1fd6a: Restrict automated dependency updates to packages in the `@ankhorage` scope.
+- c9ee948: Publish separate Renovate policies for normal consumers and the Devtools owner repository, and
+  automatically synchronize consumer Renovate branches with their exact selected Ankh and Devtools
+  releases through the least-privileged reusable workflow, using the workflow's exact canonical Ankh
+  CLI pin when a Devtools-only consumer does not declare the CLI itself.
+
+## 0.1.0
+
+### Minor Changes
+
+- b7305e8: Add safe automatic Changeset creation and green-CI automerge for Ankhorage dependency updates.
+- f4526fd: Establish the standalone Renovate policy package and canonical Ankhorage preset.
+
+### Patch Changes
+
+- 38e46ee: Bump Ankhorage dependency ranges so every package release can propagate to downstream repositories.
+
+## 0.0.0
+
+Initial package foundation.

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 Ankhorage
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -0,0 +1,54 @@
+<!-- markdownlint-disable MD013 MD033 -->
+<!-- This file is generated by Paradox. Do not edit manually. -->
+
+# @ankhorage/renovate
+
+![license: MIT](./paradox/badges/license.svg) ![npm: v0.1.1](./paradox/badges/npm.svg) ![runtime: bun](./paradox/badges/runtime.svg) ![typescript: strict](./paradox/badges/typescript.svg) ![eslint: checked](./paradox/badges/eslint.svg) ![prettier: checked](./paradox/badges/prettier.svg) ![build: checked](./paradox/badges/build.svg) ![tests: checked](./paradox/badges/tests.svg) ![docs: paradox](./paradox/badges/docs.svg)
+
+Ankhorage dependency update policy and automation powered by Renovate.
+
+## Usage
+
+Extend the repository-hosted preset from each Ankhorage repository that Renovate manages.
+
+### Devtools owner repository configuration
+
+Loads the owner-specific policy that enables and groups the root Bun, ESLint, Knip, Prettier,
+TypeScript, and validation/publishing dependencies maintained by @ankhorage/devtools. Major
+upgrades remain reviewable. Do not use this profile in normal consumer repositories.
+
+Source: `examples/devtools-renovate.json5`
+
+```
+{
+  $schema: 'https://docs.renovatebot.com/renovate-schema.json',
+  extends: ['github>ankhorage/renovate:devtools-owner'],
+}
+```
+
+### Repository configuration
+
+Loads the normal consumer policy from its default branch. The policy keeps Devtools-owned
+packages and canonical workflows out of independent Renovate updates, and groups compatible
+@ankhorage/ankh and @ankhorage/devtools releases for the trusted automatic synchronization
+workflow. The workflow runs the exact lock-selected Devtools provider with either the consumer's
+lock-selected Ankh CLI or its own exact canonical CLI pin, requires byte stability, and commits
+the complete managed result without a manual repository sync.
+
+Source: `examples/renovate.json5`
+
+```
+{
+  $schema: 'https://docs.renovatebot.com/renovate-schema.json',
+  extends: ['github>ankhorage/renovate'],
+}
+```
+
+## Generated documentation
+
+- [Interactive documentation app](./paradox/index.html)
+- [Public API reference](./paradox/exports.md)
+- [Component registry](./paradox/components.md)
+- [Architecture overview](./paradox/diagrams/architecture-overview.mmd)
+- [Module relationships](./paradox/diagrams/module-relationships.mmd)
+- [Export graph](./paradox/diagrams/export-graph.mmd)

package/default.json

@@ -0,0 +1,53 @@
+{
+  "$schema": "https://docs.renovatebot.com/renovate-schema.json",
+  "description": ["Canonical dependency update policy for Ankhorage consumer repositories."],
+  "extends": ["config:recommended", ":dependencyDashboard"],
+  "gitIgnoredAuthors": ["41898282+github-actions[bot]@users.noreply.github.com"],
+  "labels": ["dependencies"],
+  "packageRules": [
+    {
+      "description": "Disable dependency updates unless a later Ankhorage rule explicitly enables them.",
+      "matchPackageNames": ["*"],
+      "enabled": false
+    },
+    {
+      "description": "Group Ankhorage package updates and propagate every release downstream.",
+      "matchDatasources": ["npm"],
+      "matchPackageNames": ["@ankhorage/**"],
+      "enabled": true,
+      "groupName": "Ankhorage packages",
+      "rangeStrategy": "bump",
+      "automerge": true,
+      "automergeType": "pr",
+      "platformAutomerge": false
+    },
+    {
+      "description": "Update the canonical Ankh CLI and Devtools provider as one toolchain.",
+      "matchDatasources": ["npm"],
+      "matchPackageNames": ["@ankhorage/ankh", "@ankhorage/devtools"],
+      "enabled": true,
+      "groupName": "Ankhorage CLI and Devtools toolchain",
+      "rangeStrategy": "bump",
+      "automerge": true,
+      "automergeType": "pr",
+      "platformAutomerge": false
+    },
+    {
+      "description": "Require review for major CLI and Devtools toolchain upgrades.",
+      "matchDatasources": ["npm"],
+      "matchPackageNames": ["@ankhorage/ankh", "@ankhorage/devtools"],
+      "matchUpdateTypes": ["major"],
+      "automerge": false
+    },
+    {
+      "description": "Keep canonical Devtools workflows under deterministic Devtools sync ownership.",
+      "matchManagers": ["github-actions"],
+      "matchFileNames": [
+        ".github/workflows/ci.yml",
+        ".github/workflows/renovate.yml",
+        ".github/workflows/release.yml"
+      ],
+      "enabled": false
+    }
+  ]
+}

package/devtools-owner.json

@@ -0,0 +1,25 @@
+{
+  "$schema": "https://docs.renovatebot.com/renovate-schema.json",
+  "description": ["Devtools-owner dependency update policy for ankhorage/devtools."],
+  "extends": ["./default"],
+  "packageRules": [
+    {
+      "description": "Group dependencies owned and validated by the Devtools repository.",
+      "matchManagers": ["bun"],
+      "matchFileNames": ["package.json"],
+      "enabled": true,
+      "groupName": "Devtools-owned toolchain",
+      "rangeStrategy": "bump",
+      "automerge": true,
+      "automergeType": "pr",
+      "platformAutomerge": false
+    },
+    {
+      "description": "Require review for major Devtools-owned toolchain upgrades.",
+      "matchManagers": ["bun"],
+      "matchFileNames": ["package.json"],
+      "matchUpdateTypes": ["major"],
+      "automerge": false
+    }
+  ]
+}

package/dist/changeset-workflow.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=changeset-workflow.test.d.ts.map

package/dist/changeset-workflow.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"changeset-workflow.test.d.ts","sourceRoot":"","sources":["../src/changeset-workflow.test.ts"],"names":[],"mappings":""}

package/dist/changeset-workflow.test.js

@@ -0,0 +1,135 @@
+import { readFileSync } from 'node:fs';
+import { describe, expect, test } from 'bun:test';
+const workflow = readFileSync(new URL('../.github/workflows/changeset.yml', import.meta.url), 'utf8');
+const [prepareJob, commitJob = ''] = workflow.split('\n  commit:');
+const surfaceManifest = {
+    name: '@ankhorage/surface',
+    packageManager: 'bun@1.3.14',
+    devDependencies: {
+        '@ankhorage/devtools': '^1.7.0',
+    },
+};
+const surfaceLock = `
+  workspaces: {
+    "": {
+      devDependencies: {
+        "@ankhorage/devtools": "^1.7.0",
+      },
+    },
+  },
+  packages: {
+    "@ankhorage/devtools": ["@ankhorage/devtools@1.7.0", "", {}],
+  },
+`;
+describe('trusted Renovate integration', () => {
+    test('accepts only same-repository Renovate branches', () => {
+        expect(workflow).toContain("context.actor !== 'renovate[bot]'");
+        expect(workflow).toContain("pull.head.ref.startsWith('renovate/')");
+        expect(workflow).toContain("pull.head.repo?.full_name !== owner + '/' + repo");
+        expect(workflow).toContain('artifact.headSha !== pull.head.sha');
+    });
+    test('isolates untrusted branch preparation from write credentials', () => {
+        expect(prepareJob).toContain('contents: read');
+        expect(prepareJob).toContain('persist-credentials: false');
+        expect(prepareJob).toContain('actions/checkout@11d5960a326750d5838078e36cf38b85af677262');
+        expect(commitJob).toContain('contents: write');
+        expect(commitJob).not.toContain('actions/checkout');
+        expect(commitJob).not.toContain('\n        run: |');
+    });
+    test('uses the exact lock-selected provider without package scripts', () => {
+        expect(workflow).toContain("resolveVersion('@ankhorage/devtools')");
+        expect(workflow).toContain('"@ankhorage/ankh": process.env.ANKH_VERSION');
+        expect(workflow).toContain('"@ankhorage/devtools": process.env.DEVTOOLS_VERSION');
+        expect(workflow).toContain('package.json and bun.lock must select the same exact root');
+        expect(workflow).toContain('--ignore-scripts --lockfile-only');
+        expect(workflow).toContain('--registry=https://registry.npmjs.org');
+        expect(workflow).not.toContain('@latest');
+    });
+    test('supports the real Surface shape with a canonical exact CLI fallback', () => {
+        expect(resolveFixtureVersion(surfaceManifest, surfaceLock, '@ankhorage/ankh', '0.4.0')).toBe('0.4.0');
+        expect(resolveFixtureVersion(surfaceManifest, surfaceLock, '@ankhorage/devtools')).toBe('1.7.0');
+        expect(workflow).toContain("CANONICAL_ANKH_VERSION: '0.4.0'");
+        expect(workflow).toContain('if (declarations.length === 0 && fallbackVersion)');
+        expect(workflow).toContain("resolveVersion('@ankhorage/ankh', process.env.CANONICAL_ANKH_VERSION)");
+    });
+    test('requires a byte-stable second sync and current status', () => {
+        const syncCommand = '"$RUNNER_TEMP/toolchain/node_modules/.bin/ankh" devtools sync .';
+        expect(workflow.split(syncCommand)).toHaveLength(3);
+        expect(workflow).toContain('test "$first_hash" = "$second_hash"');
+        expect(workflow).toContain('"$RUNNER_TEMP/toolchain/node_modules/.bin/ankh" devtools status .');
+    });
+});
+function resolveFixtureVersion(manifest, lock, name, fallbackVersion) {
+    const sections = [
+        manifest.dependencies,
+        manifest.devDependencies,
+        manifest.optionalDependencies,
+        manifest.peerDependencies,
+    ];
+    const declarations = sections
+        .map((section) => Object.entries(section ?? {}).find(([candidate]) => candidate === name)?.[1])
+        .filter((value) => typeof value === 'string');
+    if (declarations.length === 0 && fallbackVersion) {
+        if (!/^\d+\.\d+\.\d+(?:-[0-9A-Za-z.-]+)?$/.test(fallbackVersion)) {
+            throw new Error('The fixture fallback must be an exact version.');
+        }
+        return fallbackVersion;
+    }
+    const escaped = name.replace(/[.*+?^$()|[\]\\]/g, '\\$&');
+    const match = new RegExp('^    "' + escaped + '": \\["' + escaped + '@([^"]+)"', 'm').exec(lock);
+    const declaration = declarations.length === 1 ? declarations.at(0) : undefined;
+    const declared = typeof declaration === 'string'
+        ? /^[~^]?(\d+\.\d+\.\d+(?:-[0-9A-Za-z.-]+)?)$/.exec(declaration)
+        : null;
+    const selectedVersion = match?.at(1);
+    const declaredVersion = declared?.at(1);
+    if (typeof selectedVersion !== 'string' || declaredVersion !== selectedVersion) {
+        throw new Error('The fixture does not select one exact root ' + name + ' version.');
+    }
+    return selectedVersion;
+}
+describe('trusted Renovate write boundary', () => {
+    test('limits derived writes to the Devtools-managed inventory', () => {
+        for (const path of [
+            '.github/workflows/ci.yml',
+            '.github/workflows/release.yml',
+            '.github/workflows/renovate.yml',
+            '.prettierrc.js',
+            '.vscode/extensions.json',
+            '.vscode/settings.json',
+            'bun.lock',
+            'eslint.config.mjs',
+            'eslint.local.config.mjs',
+            'knip.config.ts',
+            'package.json',
+            'prettier.local.config.js',
+        ]) {
+            expect(workflow).toContain("'" + path + "'");
+        }
+        expect(workflow).not.toContain("'.github/workflows/studio-acceptance.yml'");
+        expect(workflow).toContain('Devtools sync changed an unexpected path:');
+        expect(workflow).toContain('Devtools sync created an unexpected path:');
+    });
+    test('commits through the Git API and revalidates the exact commit', () => {
+        expect(workflow).toContain('github.rest.git.createBlob');
+        expect(workflow).toContain('github.rest.git.getCommit');
+        expect(workflow).toContain('github.rest.git.createTree');
+        expect(workflow).toContain('github.rest.git.createCommit');
+        expect(workflow).toContain('github.rest.git.updateRef');
+        expect(workflow).toContain("workflow_id: 'ci.yml'");
+        expect(workflow).toContain('if (currentContent !== content)');
+    });
+    test('creates release metadata for Devtools-owned dependency updates', () => {
+        expect(workflow).toContain("const isDevtoolsOwner = owner + '/' + repo === 'ankhorage/devtools';");
+        expect(workflow).toContain('Update Devtools-owned dependencies:');
+        expect(workflow).toContain("changed.push({ name: 'bun', section: 'packageManager' })");
+    });
+    test('pins every third-party action by immutable commit', () => {
+        const uses = [...workflow.matchAll(/^\s*uses: ([^\s#]+)/gm)].map((match) => match[1]);
+        expect(uses.length).toBeGreaterThan(0);
+        for (const action of uses) {
+            expect(action).toMatch(/@[0-9a-f]{40}$/);
+        }
+    });
+});
+//# sourceMappingURL=changeset-workflow.test.js.map

package/dist/changeset-workflow.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"changeset-workflow.test.js","sourceRoot":"","sources":["../src/changeset-workflow.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AAEvC,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,UAAU,CAAC;AAElD,MAAM,QAAQ,GAAG,YAAY,CAC3B,IAAI,GAAG,CAAC,oCAAoC,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,EAC9D,MAAM,CACP,CAAC;AACF,MAAM,CAAC,UAAU,EAAE,SAAS,GAAG,EAAE,CAAC,GAAG,QAAQ,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC;AACnE,MAAM,eAAe,GAAoB;IACvC,IAAI,EAAE,oBAAoB;IAC1B,cAAc,EAAE,YAAY;IAC5B,eAAe,EAAE;QACf,qBAAqB,EAAE,QAAQ;KAChC;CACF,CAAC;AACF,MAAM,WAAW,GAAG;;;;;;;;;;;CAWnB,CAAC;AAWF,QAAQ,CAAC,8BAA8B,EAAE,GAAG,EAAE;IAC5C,IAAI,CAAC,gDAAgD,EAAE,GAAG,EAAE;QAC1D,MAAM,CAAC,QAAQ,CAAC,CAAC,SAAS,CAAC,mCAAmC,CAAC,CAAC;QAChE,MAAM,CAAC,QAAQ,CAAC,CAAC,SAAS,CAAC,uCAAuC,CAAC,CAAC;QACpE,MAAM,CAAC,QAAQ,CAAC,CAAC,SAAS,CAAC,kDAAkD,CAAC,CAAC;QAC/E,MAAM,CAAC,QAAQ,CAAC,CAAC,SAAS,CAAC,oCAAoC,CAAC,CAAC;IACnE,CAAC,CAAC,CAAC;IAEH,IAAI,CAAC,8DAA8D,EAAE,GAAG,EAAE;QACxE,MAAM,CAAC,UAAU,CAAC,CAAC,SAAS,CAAC,gBAAgB,CAAC,CAAC;QAC/C,MAAM,CAAC,UAAU,CAAC,CAAC,SAAS,CAAC,4BAA4B,CAAC,CAAC;QAC3D,MAAM,CAAC,UAAU,CAAC,CAAC,SAAS,CAAC,2DAA2D,CAAC,CAAC;QAC1F,MAAM,CAAC,SAAS,CAAC,CAAC,SAAS,CAAC,iBAAiB,CAAC,CAAC;QAC/C,MAAM,CAAC,SAAS,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,kBAAkB,CAAC,CAAC;QACpD,MAAM,CAAC,SAAS,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,kBAAkB,CAAC,CAAC;IACtD,CAAC,CAAC,CAAC;IAEH,IAAI,CAAC,+DAA+D,EAAE,GAAG,EAAE;QACzE,MAAM,CAAC,QAAQ,CAAC,CAAC,SAAS,CAAC,uCAAuC,CAAC,CAAC;QACpE,MAAM,CAAC,QAAQ,CAAC,CAAC,SAAS,CAAC,6CAA6C,CAAC,CAAC;QAC1E,MAAM,CAAC,QAAQ,CAAC,CAAC,SAAS,CAAC,qDAAqD,CAAC,CAAC;QAClF,MAAM,CAAC,QAAQ,CAAC,CAAC,SAAS,CAAC,2DAA2D,CAAC,CAAC;QACxF,MAAM,CAAC,QAAQ,CAAC,CAAC,SAAS,CAAC,kCAAkC,CAAC,CAAC;QAC/D,MAAM,CAAC,QAAQ,CAAC,CAAC,SAAS,CAAC,uCAAuC,CAAC,CAAC;QACpE,MAAM,CAAC,QAAQ,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC;IAC5C,CAAC,CAAC,CAAC;IAEH,IAAI,CAAC,qEAAqE,EAAE,GAAG,EAAE;QAC/E,MAAM,CAAC,qBAAqB,CAAC,eAAe,EAAE,WAAW,EAAE,iBAAiB,EAAE,OAAO,CAAC,CAAC,CAAC,IAAI,CAC1F,OAAO,CACR,CAAC;QACF,MAAM,CAAC,qBAAqB,CAAC,eAAe,EAAE,WAAW,EAAE,qBAAqB,CAAC,CAAC,CAAC,IAAI,CACrF,OAAO,CACR,CAAC;QACF,MAAM,CAAC,QAAQ,CAAC,CAAC,SAAS,CAAC,iCAAiC,CAAC,CAAC;QAC9D,MAAM,CAAC,QAAQ,CAAC,CAAC,SAAS,CAAC,mDAAmD,CAAC,CAAC;QAChF,MAAM,CAAC,QAAQ,CAAC,CAAC,SAAS,CACxB,uEAAuE,CACxE,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,IAAI,CAAC,uDAAuD,EAAE,GAAG,EAAE;QACjE,MAAM,WAAW,GAAG,iEAAiE,CAAC;QACtF,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;QACpD,MAAM,CAAC,QAAQ,CAAC,CAAC,SAAS,CAAC,qCAAqC,CAAC,CAAC;QAClE,MAAM,CAAC,QAAQ,CAAC,CAAC,SAAS,CAAC,mEAAmE,CAAC,CAAC;IAClG,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,SAAS,qBAAqB,CAC5B,QAAyB,EACzB,IAAY,EACZ,IAAY,EACZ,eAAwB;IAExB,MAAM,QAAQ,GAAG;QACf,QAAQ,CAAC,YAAY;QACrB,QAAQ,CAAC,eAAe;QACxB,QAAQ,CAAC,oBAAoB;QAC7B,QAAQ,CAAC,gBAAgB;KAC1B,CAAC;IACF,MAAM,YAAY,GAAG,QAAQ;SAC1B,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,EAAE,EAAE,CAAC,SAAS,KAAK,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;SAC9F,MAAM,CAAC,CAAC,KAAK,EAAmB,EAAE,CAAC,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC;IACjE,IAAI,YAAY,CAAC,MAAM,KAAK,CAAC,IAAI,eAAe,EAAE,CAAC;QACjD,IAAI,CAAC,qCAAqC,CAAC,IAAI,CAAC,eAAe,CAAC,EAAE,CAAC;YACjE,MAAM,IAAI,KAAK,CAAC,gDAAgD,CAAC,CAAC;QACpE,CAAC;QACD,OAAO,eAAe,CAAC;IACzB,CAAC;IAED,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,mBAAmB,EAAE,MAAM,CAAC,CAAC;IAC1D,MAAM,KAAK,GAAG,IAAI,MAAM,CAAC,QAAQ,GAAG,OAAO,GAAG,SAAS,GAAG,OAAO,GAAG,WAAW,EAAE,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACjG,MAAM,WAAW,GAAG,YAAY,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IAC/E,MAAM,QAAQ,GACZ,OAAO,WAAW,KAAK,QAAQ;QAC7B,CAAC,CAAC,4CAA4C,CAAC,IAAI,CAAC,WAAW,CAAC;QAChE,CAAC,CAAC,IAAI,CAAC;IACX,MAAM,eAAe,GAAG,KAAK,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC;IACrC,MAAM,eAAe,GAAG,QAAQ,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC;IACxC,IAAI,OAAO,eAAe,KAAK,QAAQ,IAAI,eAAe,KAAK,eAAe,EAAE,CAAC;QAC/E,MAAM,IAAI,KAAK,CAAC,6CAA6C,GAAG,IAAI,GAAG,WAAW,CAAC,CAAC;IACtF,CAAC;IACD,OAAO,eAAe,CAAC;AACzB,CAAC;AAED,QAAQ,CAAC,iCAAiC,EAAE,GAAG,EAAE;IAC/C,IAAI,CAAC,yDAAyD,EAAE,GAAG,EAAE;QACnE,KAAK,MAAM,IAAI,IAAI;YACjB,0BAA0B;YAC1B,+BAA+B;YAC/B,gCAAgC;YAChC,gBAAgB;YAChB,yBAAyB;YACzB,uBAAuB;YACvB,UAAU;YACV,mBAAmB;YACnB,yBAAyB;YACzB,gBAAgB;YAChB,cAAc;YACd,0BAA0B;SAC3B,EAAE,CAAC;YACF,MAAM,CAAC,QAAQ,CAAC,CAAC,SAAS,CAAC,GAAG,GAAG,IAAI,GAAG,GAAG,CAAC,CAAC;QAC/C,CAAC;QACD,MAAM,CAAC,QAAQ,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,2CAA2C,CAAC,CAAC;QAC5E,MAAM,CAAC,QAAQ,CAAC,CAAC,SAAS,CAAC,2CAA2C,CAAC,CAAC;QACxE,MAAM,CAAC,QAAQ,CAAC,CAAC,SAAS,CAAC,2CAA2C,CAAC,CAAC;IAC1E,CAAC,CAAC,CAAC;IAEH,IAAI,CAAC,8DAA8D,EAAE,GAAG,EAAE;QACxE,MAAM,CAAC,QAAQ,CAAC,CAAC,SAAS,CAAC,4BAA4B,CAAC,CAAC;QACzD,MAAM,CAAC,QAAQ,CAAC,CAAC,SAAS,CAAC,2BAA2B,CAAC,CAAC;QACxD,MAAM,CAAC,QAAQ,CAAC,CAAC,SAAS,CAAC,4BAA4B,CAAC,CAAC;QACzD,MAAM,CAAC,QAAQ,CAAC,CAAC,SAAS,CAAC,8BAA8B,CAAC,CAAC;QAC3D,MAAM,CAAC,QAAQ,CAAC,CAAC,SAAS,CAAC,2BAA2B,CAAC,CAAC;QACxD,MAAM,CAAC,QAAQ,CAAC,CAAC,SAAS,CAAC,uBAAuB,CAAC,CAAC;QACpD,MAAM,CAAC,QAAQ,CAAC,CAAC,SAAS,CAAC,iCAAiC,CAAC,CAAC;IAChE,CAAC,CAAC,CAAC;IAEH,IAAI,CAAC,gEAAgE,EAAE,GAAG,EAAE;QAC1E,MAAM,CAAC,QAAQ,CAAC,CAAC,SAAS,CACxB,sEAAsE,CACvE,CAAC;QACF,MAAM,CAAC,QAAQ,CAAC,CAAC,SAAS,CAAC,qCAAqC,CAAC,CAAC;QAClE,MAAM,CAAC,QAAQ,CAAC,CAAC,SAAS,CAAC,0DAA0D,CAAC,CAAC;IACzF,CAAC,CAAC,CAAC;IAEH,IAAI,CAAC,mDAAmD,EAAE,GAAG,EAAE;QAC7D,MAAM,IAAI,GAAG,CAAC,GAAG,QAAQ,CAAC,QAAQ,CAAC,uBAAuB,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;QACtF,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC;QACvC,KAAK,MAAM,MAAM,IAAI,IAAI,EAAE,CAAC;YAC1B,MAAM,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,gBAAgB,CAAC,CAAC;QAC3C,CAAC;IACH,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/default.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=default.test.d.ts.map

package/dist/default.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"default.test.d.ts","sourceRoot":"","sources":["../src/default.test.ts"],"names":[],"mappings":""}

package/dist/default.test.js

@@ -0,0 +1,139 @@
+import { readFileSync } from 'node:fs';
+import { describe, expect, test } from 'bun:test';
+const consumerPreset = readPreset('../default.json');
+const devtoolsOwnerPreset = readPreset('../devtools-owner.json');
+describe('consumer preset', () => {
+    test('publishes the canonical default-deny policy at the repository root', () => {
+        expect(consumerPreset).toMatchObject({
+            description: ['Canonical dependency update policy for Ankhorage consumer repositories.'],
+            extends: ['config:recommended', ':dependencyDashboard'],
+            gitIgnoredAuthors: ['41898282+github-actions[bot]@users.noreply.github.com'],
+            labels: ['dependencies'],
+        });
+        expect(consumerPreset.packageRules[0]).toMatchObject({
+            enabled: false,
+            matchPackageNames: ['*'],
+        });
+    });
+    test('keeps ordinary Ankhorage packages eligible', () => {
+        expect(resolveRules(consumerPreset.packageRules, dependency('@ankhorage/contracts'))).toMatchObject({
+            automerge: true,
+            enabled: true,
+            groupName: 'Ankhorage packages',
+            rangeStrategy: 'bump',
+        });
+    });
+    test('groups the compatible CLI and provider pair', () => {
+        for (const packageName of ['@ankhorage/ankh', '@ankhorage/devtools']) {
+            expect(resolveRules(consumerPreset.packageRules, dependency(packageName))).toMatchObject({
+                automerge: true,
+                automergeType: 'pr',
+                enabled: true,
+                groupName: 'Ankhorage CLI and Devtools toolchain',
+                platformAutomerge: false,
+                rangeStrategy: 'bump',
+            });
+        }
+    });
+});
+describe('consumer toolchain safeguards', () => {
+    test('requires review for major CLI and provider upgrades', () => {
+        expect(resolveRules(consumerPreset.packageRules, dependency('@ankhorage/devtools', { updateType: 'major' }))).toMatchObject({
+            automerge: false,
+            enabled: true,
+            groupName: 'Ankhorage CLI and Devtools toolchain',
+        });
+    });
+    test('does not independently update consumer-owned Devtools packages', () => {
+        expect(resolveRules(consumerPreset.packageRules, dependency('eslint'))).toEqual({
+            enabled: false,
+        });
+        expect(resolveRules(consumerPreset.packageRules, dependency('@types/bun'))).toEqual({
+            enabled: false,
+        });
+    });
+    test('names only the canonical workflow inventory as Devtools-owned', () => {
+        const canonicalRule = consumerPreset.packageRules.find((rule) => rule.description.includes('canonical Devtools workflows'));
+        expect(canonicalRule).toMatchObject({
+            enabled: false,
+            matchFileNames: [
+                '.github/workflows/ci.yml',
+                '.github/workflows/renovate.yml',
+                '.github/workflows/release.yml',
+            ],
+            matchManagers: ['github-actions'],
+        });
+        expect(canonicalRule?.matchFileNames).not.toContain('.github/workflows/studio-acceptance.yml');
+    });
+});
+describe('Devtools-owner preset', () => {
+    const effectiveRules = [...consumerPreset.packageRules, ...devtoolsOwnerPreset.packageRules];
+    test('composes with the consumer default-deny boundary', () => {
+        expect(devtoolsOwnerPreset.extends).toEqual(['./default']);
+    });
+    test('enables and groups the complete root Bun package toolchain', () => {
+        for (const packageName of ['bun', '@types/bun', 'eslint', 'knip', 'prettier', 'typescript']) {
+            expect(resolveRules(effectiveRules, dependency(packageName))).toMatchObject({
+                automerge: true,
+                automergeType: 'pr',
+                enabled: true,
+                groupName: 'Devtools-owned toolchain',
+                platformAutomerge: false,
+                rangeStrategy: 'bump',
+            });
+        }
+    });
+    test('requires review for major owner toolchain upgrades', () => {
+        expect(resolveRules(effectiveRules, dependency('typescript', { updateType: 'major' }))).toMatchObject({
+            automerge: false,
+            enabled: true,
+            groupName: 'Devtools-owned toolchain',
+        });
+    });
+    test('does not broaden owner permissions beyond the root package manifest', () => {
+        expect(resolveRules(effectiveRules, dependency('eslint', { fileName: 'examples/package.json' }))).toEqual({ enabled: false });
+    });
+});
+function dependency(packageName, overrides = {}) {
+    return {
+        datasource: 'npm',
+        fileName: 'package.json',
+        manager: 'bun',
+        packageName,
+        updateType: 'minor',
+        ...overrides,
+    };
+}
+function matchesRule(rule, candidate) {
+    return (matches(rule.matchDatasources, candidate.datasource) &&
+        matches(rule.matchFileNames, candidate.fileName) &&
+        matches(rule.matchManagers, candidate.manager) &&
+        matches(rule.matchPackageNames, candidate.packageName) &&
+        matches(rule.matchUpdateTypes, candidate.updateType));
+}
+function matches(patterns, value) {
+    if (patterns === undefined)
+        return true;
+    return patterns.some((pattern) => pattern === '*' ||
+        pattern === value ||
+        (pattern.endsWith('/**') && value.startsWith(pattern.slice(0, -2))));
+}
+function readPreset(relativePath) {
+    return JSON.parse(readFileSync(new URL(relativePath, import.meta.url), 'utf8'));
+}
+function resolveRules(rules, candidate) {
+    return rules
+        .filter((rule) => matchesRule(rule, candidate))
+        .reduce((resolved, rule) => ({
+        ...resolved,
+        ...(rule.automerge === undefined ? {} : { automerge: rule.automerge }),
+        ...(rule.automergeType === undefined ? {} : { automergeType: rule.automergeType }),
+        ...(rule.enabled === undefined ? {} : { enabled: rule.enabled }),
+        ...(rule.groupName === undefined ? {} : { groupName: rule.groupName }),
+        ...(rule.platformAutomerge === undefined
+            ? {}
+            : { platformAutomerge: rule.platformAutomerge }),
+        ...(rule.rangeStrategy === undefined ? {} : { rangeStrategy: rule.rangeStrategy }),
+    }), {});
+}
+//# sourceMappingURL=default.test.js.map

package/dist/default.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"default.test.js","sourceRoot":"","sources":["../src/default.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AAEvC,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,UAAU,CAAC;AAiClD,MAAM,cAAc,GAAG,UAAU,CAAC,iBAAiB,CAAC,CAAC;AACrD,MAAM,mBAAmB,GAAG,UAAU,CAAC,wBAAwB,CAAC,CAAC;AAEjE,QAAQ,CAAC,iBAAiB,EAAE,GAAG,EAAE;IAC/B,IAAI,CAAC,oEAAoE,EAAE,GAAG,EAAE;QAC9E,MAAM,CAAC,cAAc,CAAC,CAAC,aAAa,CAAC;YACnC,WAAW,EAAE,CAAC,yEAAyE,CAAC;YACxF,OAAO,EAAE,CAAC,oBAAoB,EAAE,sBAAsB,CAAC;YACvD,iBAAiB,EAAE,CAAC,uDAAuD,CAAC;YAC5E,MAAM,EAAE,CAAC,cAAc,CAAC;SACzB,CAAC,CAAC;QACH,MAAM,CAAC,cAAc,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC;YACnD,OAAO,EAAE,KAAK;YACd,iBAAiB,EAAE,CAAC,GAAG,CAAC;SACzB,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,IAAI,CAAC,4CAA4C,EAAE,GAAG,EAAE;QACtD,MAAM,CACJ,YAAY,CAAC,cAAc,CAAC,YAAY,EAAE,UAAU,CAAC,sBAAsB,CAAC,CAAC,CAC9E,CAAC,aAAa,CAAC;YACd,SAAS,EAAE,IAAI;YACf,OAAO,EAAE,IAAI;YACb,SAAS,EAAE,oBAAoB;YAC/B,aAAa,EAAE,MAAM;SACtB,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,IAAI,CAAC,6CAA6C,EAAE,GAAG,EAAE;QACvD,KAAK,MAAM,WAAW,IAAI,CAAC,iBAAiB,EAAE,qBAAqB,CAAC,EAAE,CAAC;YACrE,MAAM,CAAC,YAAY,CAAC,cAAc,CAAC,YAAY,EAAE,UAAU,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC;gBACvF,SAAS,EAAE,IAAI;gBACf,aAAa,EAAE,IAAI;gBACnB,OAAO,EAAE,IAAI;gBACb,SAAS,EAAE,sCAAsC;gBACjD,iBAAiB,EAAE,KAAK;gBACxB,aAAa,EAAE,MAAM;aACtB,CAAC,CAAC;QACL,CAAC;IACH,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,+BAA+B,EAAE,GAAG,EAAE;IAC7C,IAAI,CAAC,qDAAqD,EAAE,GAAG,EAAE;QAC/D,MAAM,CACJ,YAAY,CACV,cAAc,CAAC,YAAY,EAC3B,UAAU,CAAC,qBAAqB,EAAE,EAAE,UAAU,EAAE,OAAO,EAAE,CAAC,CAC3D,CACF,CAAC,aAAa,CAAC;YACd,SAAS,EAAE,KAAK;YAChB,OAAO,EAAE,IAAI;YACb,SAAS,EAAE,sCAAsC;SAClD,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,IAAI,CAAC,gEAAgE,EAAE,GAAG,EAAE;QAC1E,MAAM,CAAC,YAAY,CAAC,cAAc,CAAC,YAAY,EAAE,UAAU,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC;YAC9E,OAAO,EAAE,KAAK;SACf,CAAC,CAAC;QACH,MAAM,CAAC,YAAY,CAAC,cAAc,CAAC,YAAY,EAAE,UAAU,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC;YAClF,OAAO,EAAE,KAAK;SACf,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,IAAI,CAAC,+DAA+D,EAAE,GAAG,EAAE;QACzE,MAAM,aAAa,GAAG,cAAc,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAC9D,IAAI,CAAC,WAAW,CAAC,QAAQ,CAAC,8BAA8B,CAAC,CAC1D,CAAC;QACF,MAAM,CAAC,aAAa,CAAC,CAAC,aAAa,CAAC;YAClC,OAAO,EAAE,KAAK;YACd,cAAc,EAAE;gBACd,0BAA0B;gBAC1B,gCAAgC;gBAChC,+BAA+B;aAChC;YACD,aAAa,EAAE,CAAC,gBAAgB,CAAC;SAClC,CAAC,CAAC;QACH,MAAM,CAAC,aAAa,EAAE,cAAc,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,yCAAyC,CAAC,CAAC;IACjG,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,uBAAuB,EAAE,GAAG,EAAE;IACrC,MAAM,cAAc,GAAG,CAAC,GAAG,cAAc,CAAC,YAAY,EAAE,GAAG,mBAAmB,CAAC,YAAY,CAAC,CAAC;IAE7F,IAAI,CAAC,kDAAkD,EAAE,GAAG,EAAE;QAC5D,MAAM,CAAC,mBAAmB,CAAC,OAAO,CAAC,CAAC,OAAO,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC;IAC7D,CAAC,CAAC,CAAC;IAEH,IAAI,CAAC,4DAA4D,EAAE,GAAG,EAAE;QACtE,KAAK,MAAM,WAAW,IAAI,CAAC,KAAK,EAAE,YAAY,EAAE,QAAQ,EAAE,MAAM,EAAE,UAAU,EAAE,YAAY,CAAC,EAAE,CAAC;YAC5F,MAAM,CAAC,YAAY,CAAC,cAAc,EAAE,UAAU,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC;gBAC1E,SAAS,EAAE,IAAI;gBACf,aAAa,EAAE,IAAI;gBACnB,OAAO,EAAE,IAAI;gBACb,SAAS,EAAE,0BAA0B;gBACrC,iBAAiB,EAAE,KAAK;gBACxB,aAAa,EAAE,MAAM;aACtB,CAAC,CAAC;QACL,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,IAAI,CAAC,oDAAoD,EAAE,GAAG,EAAE;QAC9D,MAAM,CACJ,YAAY,CAAC,cAAc,EAAE,UAAU,CAAC,YAAY,EAAE,EAAE,UAAU,EAAE,OAAO,EAAE,CAAC,CAAC,CAChF,CAAC,aAAa,CAAC;YACd,SAAS,EAAE,KAAK;YAChB,OAAO,EAAE,IAAI;YACb,SAAS,EAAE,0BAA0B;SACtC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,IAAI,CAAC,qEAAqE,EAAE,GAAG,EAAE;QAC/E,MAAM,CACJ,YAAY,CAAC,cAAc,EAAE,UAAU,CAAC,QAAQ,EAAE,EAAE,QAAQ,EAAE,uBAAuB,EAAE,CAAC,CAAC,CAC1F,CAAC,OAAO,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC;IAChC,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,SAAS,UAAU,CAAC,WAAmB,EAAE,YAAiC,EAAE;IAC1E,OAAO;QACL,UAAU,EAAE,KAAK;QACjB,QAAQ,EAAE,cAAc;QACxB,OAAO,EAAE,KAAK;QACd,WAAW;QACX,UAAU,EAAE,OAAO;QACnB,GAAG,SAAS;KACb,CAAC;AACJ,CAAC;AAED,SAAS,WAAW,CAAC,IAAiB,EAAE,SAAqB;IAC3D,OAAO,CACL,OAAO,CAAC,IAAI,CAAC,gBAAgB,EAAE,SAAS,CAAC,UAAU,CAAC;QACpD,OAAO,CAAC,IAAI,CAAC,cAAc,EAAE,SAAS,CAAC,QAAQ,CAAC;QAChD,OAAO,CAAC,IAAI,CAAC,aAAa,EAAE,SAAS,CAAC,OAAO,CAAC;QAC9C,OAAO,CAAC,IAAI,CAAC,iBAAiB,EAAE,SAAS,CAAC,WAAW,CAAC;QACtD,OAAO,CAAC,IAAI,CAAC,gBAAgB,EAAE,SAAS,CAAC,UAAU,CAAC,CACrD,CAAC;AACJ,CAAC;AAED,SAAS,OAAO,CAAC,QAAuC,EAAE,KAAa;IACrE,IAAI,QAAQ,KAAK,SAAS;QAAE,OAAO,IAAI,CAAC;IACxC,OAAO,QAAQ,CAAC,IAAI,CAClB,CAAC,OAAO,EAAE,EAAE,CACV,OAAO,KAAK,GAAG;QACf,OAAO,KAAK,KAAK;QACjB,CAAC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,UAAU,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CACtE,CAAC;AACJ,CAAC;AAED,SAAS,UAAU,CAAC,YAAoB;IACtC,OAAO,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,GAAG,CAAC,YAAY,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC,CAAW,CAAC;AAC5F,CAAC;AAED,SAAS,YAAY,CAAC,KAA6B,EAAE,SAAqB;IACxE,OAAO,KAAK;SACT,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,WAAW,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;SAC9C,MAAM,CACL,CAAC,QAAQ,EAAE,IAAI,EAAE,EAAE,CAAC,CAAC;QACnB,GAAG,QAAQ;QACX,GAAG,CAAC,IAAI,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,CAAC;QACtE,GAAG,CAAC,IAAI,CAAC,aAAa,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,IAAI,CAAC,aAAa,EAAE,CAAC;QAClF,GAAG,CAAC,IAAI,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,CAAC;QAChE,GAAG,CAAC,IAAI,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,CAAC;QACtE,GAAG,CAAC,IAAI,CAAC,iBAAiB,KAAK,SAAS;YACtC,CAAC,CAAC,EAAE;YACJ,CAAC,CAAC,EAAE,iBAAiB,EAAE,IAAI,CAAC,iBAAiB,EAAE,CAAC;QAClD,GAAG,CAAC,IAAI,CAAC,aAAa,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,IAAI,CAAC,aAAa,EAAE,CAAC;KACnF,CAAC,EACF,EAAE,CACH,CAAC;AACN,CAAC"}

package/dist/index.d.ts

@@ -0,0 +1,8 @@
+/**
+ * Canonical Renovate policy and future automation provider for Ankhorage repositories.
+ *
+ * The shared preset is published as `default.json` and consumed from GitHub. The TypeScript
+ * public API is intentionally reserved for the future `ankh renovate` provider.
+ */
+export {};
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AACH,OAAO,EAAE,CAAC"}

package/dist/index.js

@@ -0,0 +1,8 @@
+/**
+ * Canonical Renovate policy and future automation provider for Ankhorage repositories.
+ *
+ * The shared preset is published as `default.json` and consumed from GitHub. The TypeScript
+ * public API is intentionally reserved for the future `ankh renovate` provider.
+ */
+export {};
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AACH,OAAO,EAAE,CAAC"}

package/dist/index.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=index.test.d.ts.map

package/dist/index.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.test.d.ts","sourceRoot":"","sources":["../src/index.test.ts"],"names":[],"mappings":""}

package/dist/index.test.js

@@ -0,0 +1,6 @@
+import { expect, test } from 'bun:test';
+import * as packageApi from './index.js';
+test('keeps the bootstrap TypeScript API intentionally empty', () => {
+    expect(Object.keys(packageApi)).toEqual([]);
+});
+//# sourceMappingURL=index.test.js.map

package/dist/index.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.test.js","sourceRoot":"","sources":["../src/index.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,UAAU,CAAC;AAExC,OAAO,KAAK,UAAU,MAAM,YAAY,CAAC;AAEzC,IAAI,CAAC,wDAAwD,EAAE,GAAG,EAAE;IAClE,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;AAC9C,CAAC,CAAC,CAAC"}

package/examples/devtools-renovate.json5

@@ -0,0 +1,14 @@
+/***
+ * Devtools owner repository configuration
+ *
+ * Loads the owner-specific policy that enables and groups the root Bun, ESLint, Knip, Prettier,
+ * TypeScript, and validation/publishing dependencies maintained by @ankhorage/devtools. Major
+ * upgrades remain reviewable. Do not use this profile in normal consumer repositories.
+ *
+ * @usage
+ * @readme
+ */
+{
+  $schema: 'https://docs.renovatebot.com/renovate-schema.json',
+  extends: ['github>ankhorage/renovate:devtools-owner'],
+}

package/examples/renovate.json5

@@ -0,0 +1,17 @@
+/***
+ * Repository configuration
+ *
+ * Loads the normal consumer policy from its default branch. The policy keeps Devtools-owned
+ * packages and canonical workflows out of independent Renovate updates, and groups compatible
+ * @ankhorage/ankh and @ankhorage/devtools releases for the trusted automatic synchronization
+ * workflow. The workflow runs the exact lock-selected Devtools provider with either the consumer's
+ * lock-selected Ankh CLI or its own exact canonical CLI pin, requires byte stability, and commits
+ * the complete managed result without a manual repository sync.
+ *
+ * @usage
+ * @readme
+ */
+{
+  $schema: 'https://docs.renovatebot.com/renovate-schema.json',
+  extends: ['github>ankhorage/renovate'],
+}