@codedrifters/configulator 0.0.295 → 0.0.297

package/lib/index.d.mts

@@ -3428,6 +3428,111 @@ declare function buildBaseBundle(paths?: ResolvedAgentPaths): AgentRuleBundle;
  */
 declare const baseBundle: AgentRuleBundle;
 
+/**
+ * Hand-maintained registry mapping every bundle name to the cross-bundle
+ * surface it owns: GitHub `type:*` labels, phase-label prefixes,
+ * scheduled-task IDs, whether it emits Starlight docs, and whether it
+ * declares any downstream issue kinds (i.e. files `gh issue create`
+ * recipes via the issue-templates convention).
+ *
+ * The registry is consulted by renderers in other bundles whenever
+ * `AgentConfigOptions.excludeBundles` is non-empty so cross-bundle
+ * references to an excluded bundle's agents, type labels, phase labels,
+ * or scheduled tasks disappear from the generated output.
+ *
+ * The map is **hand-maintained** rather than derived from each bundle's
+ * runtime shape. The defining surfaces (the funnel-tier table in
+ * `tiers.ts`, the per-phase scope-gate overrides in `scope-gate.ts`, and
+ * the scheduled-tasks registry in `scheduled-tasks.ts`) live as flat
+ * data tables that already get walked by their renderers — declaring the
+ * ownership map alongside them keeps the relationship explicit and
+ * readable without forcing every bundle to grow an "ownership"
+ * descriptor.
+ *
+ * Bundles that ship no cross-bundle surface (e.g. `slack`, `typescript`,
+ * `pnpm`, `vitest`, `jest`, `aws-cdk`, `projen`, `turborepo`,
+ * `upstream-configulator-docs`) deliberately do not appear here —
+ * excluding them is already a no-op since they own nothing other
+ * bundles reference.
+ */
+interface BundleOwnership {
+    /**
+     * GitHub `type:*` label values (without the `type:` prefix) the
+     * bundle owns. The funnel-tier table in `tiers.ts` and any rendered
+     * tables that group agents by `type:*` label consult this list.
+     */
+    readonly typeLabels: ReadonlyArray<string>;
+    /**
+     * Phase-label prefixes (with trailing colon, e.g. `"company:"`) the
+     * bundle owns. Used by the scope-gate per-phase override table and
+     * any other renderer that groups by phase label. An entry without a
+     * trailing colon (e.g. `"req:write"`) is treated as an exact
+     * phase-label match instead of a prefix.
+     */
+    readonly phaseLabelPrefixes: ReadonlyArray<string>;
+    /**
+     * `taskId` values from `DEFAULT_SCHEDULED_TASK_ENTRIES` that target
+     * this bundle's sub-agent. The scheduled-tasks registry filter in
+     * `agent-config.ts` consults this list when pruning default entries
+     * for an excluded bundle.
+     */
+    readonly scheduledTaskIds: ReadonlyArray<string>;
+    /**
+     * Whether this bundle emits Starlight content roots — i.e. whether
+     * any of its workflows write files under `docs/src/content/docs/`
+     * (or the configured docs root). Drives the auto-suppression of the
+     * `section-index-pages` rule when no docs-emitting bundle is active.
+     */
+    readonly emitsDocs: boolean;
+    /**
+     * Whether this bundle dispatches downstream issues (i.e. its
+     * workflows file `gh issue create` recipes). Drives the
+     * auto-suppression of the `issue-templates-convention` rule when no
+     * such bundle is active.
+     */
+    readonly downstreamIssueKinds: boolean;
+}
+/**
+ * Canonical ownership map. Only bundles that own at least one
+ * cross-bundle surface appear here.
+ */
+declare const BUNDLE_OWNERSHIP: Readonly<Record<string, BundleOwnership>>;
+/**
+ * Return `true` when `typeLabel` (without the leading `type:` prefix)
+ * is owned by any bundle in `excludedBundles`. Used by tier-table and
+ * scheduled-task renderers to drop rows whose owning bundle has been
+ * excluded.
+ */
+declare function isTypeLabelOwnedByExcluded(typeLabel: string, excludedBundles: ReadonlyArray<string>): boolean;
+/**
+ * Return `true` when `phaseLabel` is owned by any bundle in
+ * `excludedBundles`. Matches against both prefix entries (with
+ * trailing colon, e.g. `"company:"`) and exact-match entries (without
+ * trailing colon, e.g. `"req:write"`). Used by the scope-gate
+ * per-phase-override table renderer.
+ */
+declare function isPhaseLabelOwnedByExcluded(phaseLabel: string, excludedBundles: ReadonlyArray<string>): boolean;
+/**
+ * Return `true` when the scheduled-task `taskId` is owned by any
+ * bundle in `excludedBundles`. Used by the scheduled-tasks registry
+ * filter to drop default entries pointing at an excluded bundle.
+ */
+declare function isScheduledTaskOwnedByExcluded(taskId: string, excludedBundles: ReadonlyArray<string>): boolean;
+/**
+ * Return `true` when at least one docs-emitting bundle is **not**
+ * excluded. Used by the `section-index-pages` rule auto-suppression
+ * gate — when this returns `false`, the rule is dropped from the
+ * rendered rule map entirely.
+ */
+declare function hasAnyDocsEmittingBundle(excludedBundles: ReadonlyArray<string>): boolean;
+/**
+ * Return `true` when at least one downstream-issue-kind bundle is
+ * **not** excluded. Used by the `issue-templates-convention`
+ * auto-suppression gate — when this returns `false`, the rule body
+ * renders the disabled-stub variant.
+ */
+declare function hasAnyDownstreamIssueKindBundle(excludedBundles: ReadonlyArray<string>): boolean;
+
 /**
  * Build the bcm-writer bundle with the supplied resolved paths.
  *
@@ -3977,7 +4082,7 @@ interface ResolvedScheduledTasks {
  * duplicate taskIds in a single supplied list) throw a descriptive
  * `Error` — callers should not need to guard against it at runtime.
  */
-declare function resolveScheduledTasks(config?: ScheduledTasksConfig): ResolvedScheduledTasks;
+declare function resolveScheduledTasks(config?: ScheduledTasksConfig, excludeBundles?: ReadonlyArray<string>): ResolvedScheduledTasks;
 /**
  * Synth-time validation hook. Throws a descriptive `Error` when the
  * supplied `ScheduledTasksConfig` is malformed. Called by
@@ -3996,7 +4101,7 @@ declare function resolveScheduledTasks(config?: ScheduledTasksConfig): ResolvedS
  *   plain string.
  * - Duplicate `taskId` values within the supplied `tasks` list.
  */
-declare function validateScheduledTasksConfig(config?: ScheduledTasksConfig): ResolvedScheduledTasks;
+declare function validateScheduledTasksConfig(config?: ScheduledTasksConfig, excludeBundles?: ReadonlyArray<string>): ResolvedScheduledTasks;
 /**
  * Render the markdown subsection appended to the
  * `orchestrator-conventions` rule. Always returns a non-empty string —
@@ -4235,8 +4340,13 @@ declare function classifyIssueScope(body: string, gate: ResolvedScopeGate, label
  * `orchestrator-conventions` rule. Always returns a non-empty string
  * so the orchestrator rule documents the scope gate even when the
  * consumer relies on the defaults.
+ *
+ * When `excludeBundles` is non-empty, per-phase override rows whose
+ * phase label is owned by an excluded bundle are dropped from the
+ * **Per-phase-label thresholds** sub-table. The sub-section as a
+ * whole is hidden when no rows survive.
  */
-declare function renderScopeGateSection(gate: ResolvedScopeGate): string;
+declare function renderScopeGateSection(gate: ResolvedScopeGate, excludeBundles?: ReadonlyArray<string>): string;
 /**
  * Render a shell-script snippet embedded in `check-blocked.sh`. The
  * snippet declares a `scope_of()` function that reads an issue body
@@ -4353,8 +4463,15 @@ declare function validateAgentTierConfig(config?: AgentTierConfig): ReadonlyArra
  * `orchestrator-conventions` rule. Always returns a non-empty string
  * because the default tier list is non-empty — the orchestrator
  * always documents its sort order.
+ *
+ * When `excludeBundles` is non-empty, rows whose `type:*` label is
+ * owned by an excluded bundle are dropped before rendering. Tiers
+ * that end up with no surviving rows render an empty `_(none
+ * registered)_` cell for consistency with the existing render — the
+ * tier itself stays in the table so the dispatch ordering is still
+ * documented end-to-end.
  */
-declare function renderAgentTierSection(tiers: ReadonlyArray<ResolvedAgentTier>): string;
+declare function renderAgentTierSection(tiers: ReadonlyArray<ResolvedAgentTier>, excludeBundles?: ReadonlyArray<string>): string;
 /**
  * Render a shell-script snippet that the `check-blocked.sh` procedure
  * uses to look up a tier for a given `type:*` label. Emitted as a
@@ -4496,7 +4613,7 @@ declare function buildUnblockDependentsProcedure(unblockDependents?: ResolvedUnb
  * Every optional parameter defaults to the bundle's built-in default
  * when the caller omits it.
  */
-declare function buildOrchestratorConventionsContent(tiers: ReadonlyArray<ResolvedAgentTier>, scopeGate?: ResolvedScopeGate, runRatio?: ResolvedRunRatio, scheduledTasks?: ResolvedScheduledTasks, unblockDependents?: ResolvedUnblockDependents): string;
+declare function buildOrchestratorConventionsContent(tiers: ReadonlyArray<ResolvedAgentTier>, scopeGate?: ResolvedScopeGate, runRatio?: ResolvedRunRatio, scheduledTasks?: ResolvedScheduledTasks, unblockDependents?: ResolvedUnblockDependents, excludeBundles?: ReadonlyArray<string>): string;
 /**
  * Resolve the orchestrator-conventions rule content and the
  * check-blocked.sh procedure content for a given (possibly absent)
@@ -4508,7 +4625,7 @@ declare function buildOrchestratorConventionsContent(tiers: ReadonlyArray<Resolv
  * can splice them into their rule map and procedure map in a single
  * pass.
  */
-declare function resolveOrchestratorAssets(tierConfig?: AgentTierConfig, scopeGateConfig?: ScopeGateConfig, runRatioConfig?: RunRatioConfig, scheduledTasksConfig?: ScheduledTasksConfig, unblockDependentsConfig?: UnblockDependentsConfig): {
+declare function resolveOrchestratorAssets(tierConfig?: AgentTierConfig, scopeGateConfig?: ScopeGateConfig, runRatioConfig?: RunRatioConfig, scheduledTasksConfig?: ScheduledTasksConfig, unblockDependentsConfig?: UnblockDependentsConfig, excludeBundles?: ReadonlyArray<string>): {
     readonly tiers: ReadonlyArray<ResolvedAgentTier>;
     readonly scopeGate: ResolvedScopeGate;
     readonly runRatio: ResolvedRunRatio;
@@ -4696,7 +4813,7 @@ declare function validateIssueTemplatesConfig(config?: IssueTemplatesConfig): Re
  *
  * When the convention is disabled, the rule renders a short stub.
  */
-declare function renderIssueTemplatesRuleContent(it: ResolvedIssueTemplates): string;
+declare function renderIssueTemplatesRuleContent(it: ResolvedIssueTemplates, hasDownstreamBundles?: boolean): string;
 /**
  * Render the short issue-templates hook section injected into a
  * phased-agent bundle's workflow rule. The section cites the full
@@ -7717,11 +7834,11 @@ declare const VERSION: {
      * Version of `pnpm/action-setup` to use in GitHub workflows.
      * Tracks the version projen currently emits (see node_modules/projen/lib/javascript/node-project.js).
      */
-    readonly PNPM_ACTION_SETUP_VERSION: "v5";
+    readonly PNPM_ACTION_SETUP_VERSION: "v6.0.5";
     /**
      * Version of PNPM to use in workflows at github actions.
      */
-    readonly PNPM_VERSION: "10.33.3";
+    readonly PNPM_VERSION: "11.0.8";
     /**
      * Version of Projen to use.
      */
@@ -7876,6 +7993,33 @@ interface PnpmWorkspaceOptions {
      * See: https://pnpm.io/settings#minimumreleaseageexclude
      */
     readonly minimumReleaseAgeExclude?: Array<string>;
+    /**
+     * A map of package names to booleans controlling whether each package may
+     * execute "preinstall", "install", and/or "postinstall" scripts during
+     * installation. Set a package's value to `true` to allow lifecycle scripts;
+     * set it to `false` to silently block them without a warning.
+     *
+     * pnpm 11 replaced the legacy `onlyBuiltDependencies` (allow-list) and
+     * `ignoredBuiltDependencies` (deny-list) settings with this single
+     * `allowBuilds` map. Configulator translates the deprecated input fields
+     * automatically: entries from `onlyBuiltDependencies` map to `true` and
+     * entries from `ignoredBuiltDependencies` map to `false`. When a key
+     * appears in both `allowBuilds` and one of the deprecated fields, the
+     * explicit `allowBuilds` value wins.
+     *
+     * For cross-version compatibility, configulator emits BOTH the new
+     * `allowBuilds` map AND the legacy `onlyBuiltDependencies` /
+     * `ignoredBuiltDependencies` arrays in the generated YAML so consumers
+     * on either pnpm 10 or pnpm 11 see correct lifecycle-script behavior
+     * without changing their input.
+     *
+     * See: https://pnpm.io/settings#allowbuilds
+     *
+     * @default none (empty object)
+     */
+    readonly allowBuilds?: {
+        [packageName: string]: boolean;
+    };
     /**
      * A list of package names that are allowed to execute "preinstall",
      * "install", and/or "postinstall" scripts during installation. Only the
@@ -7889,6 +8033,12 @@ interface PnpmWorkspaceOptions {
      *
      * See: https://pnpm.io/settings#onlybuiltdependencies
      *
+     * @deprecated Deprecated in pnpm 11; configulator emits both legacy and
+     *             new keys for cross-version compatibility — pnpm 10 honors
+     *             the legacy keys, pnpm 11 honors `allowBuilds`. Prefer
+     *             `allowBuilds` as the input field going forward; entries
+     *             supplied here translate to `allowBuilds[<package>] = true`.
+     *
      * @default none (empty array)
      */
     readonly onlyBuiltDependencies?: Array<string>;
@@ -7902,6 +8052,12 @@ interface PnpmWorkspaceOptions {
      *
      * https://pnpm.io/settings#ignoredbuiltdependencies
      *
+     * @deprecated Deprecated in pnpm 11; configulator emits both legacy and
+     *             new keys for cross-version compatibility — pnpm 10 honors
+     *             the legacy keys, pnpm 11 honors `allowBuilds`. Prefer
+     *             `allowBuilds` as the input field going forward; entries
+     *             supplied here translate to `allowBuilds[<package>] = false`.
+     *
      * @default none (empty array)
      */
     readonly ignoredBuiltDependencies?: Array<string>;
@@ -8012,6 +8168,21 @@ declare class PnpmWorkspace extends Component {
      * See: https://pnpm.io/settings#minimumreleaseageexclude
      */
     minimumReleaseAgeExclude: Array<string>;
+    /**
+     * A map of package names to booleans controlling whether each package may
+     * execute lifecycle scripts during install. `true` allows the scripts;
+     * `false` silently blocks them.
+     *
+     * pnpm 11+ replaced `onlyBuiltDependencies` and `ignoredBuiltDependencies`
+     * with this single map. Configulator translates the deprecated input
+     * fields into `allowBuilds` automatically and emits both legacy and new
+     * keys in the generated YAML for pnpm 10/11 cross-version compatibility.
+     *
+     * See: https://pnpm.io/settings#allowbuilds
+     */
+    allowBuilds: {
+        [packageName: string]: boolean;
+    };
     /**
      * A list of package names that are allowed to execute "preinstall",
      * "install", and/or "postinstall" scripts during installation. Only the
@@ -8024,6 +8195,12 @@ declare class PnpmWorkspace extends Component {
      * versions of the package may run lifecycle scripts:
      *
      * See: https://pnpm.io/settings#onlybuiltdependencies
+     *
+     * @deprecated Deprecated in pnpm 11; configulator emits both legacy and
+     *             new keys for cross-version compatibility — pnpm 10 honors
+     *             the legacy keys, pnpm 11 honors `allowBuilds`. Prefer
+     *             `allowBuilds` as the input field going forward; entries
+     *             supplied here translate to `allowBuilds[<package>] = true`.
      */
     onlyBuiltDependencies: Array<string>;
     /**
@@ -8035,6 +8212,12 @@ declare class PnpmWorkspace extends Component {
      * lifecycle scripts are not needed.
      *
      * https://pnpm.io/settings#ignoredbuiltdependencies
+     *
+     * @deprecated Deprecated in pnpm 11; configulator emits both legacy and
+     *             new keys for cross-version compatibility — pnpm 10 honors
+     *             the legacy keys, pnpm 11 honors `allowBuilds`. Prefer
+     *             `allowBuilds` as the input field going forward; entries
+     *             supplied here translate to `allowBuilds[<package>] = false`.
      */
     ignoredBuiltDependencies: Array<string>;
     /**
@@ -9301,6 +9484,25 @@ declare class AwsCdkProject extends awscdk.AwsCdkTypeScriptApp {
     addDeploymentTarget(options: AwsDeploymentTargetOptions): AwsDeploymentTarget;
 }
 
+/**
+ * Emits a `.nvmrc` file at the project root containing the Node.js
+ * version pinned in {@link VERSION.NODE_WORKFLOWS}.
+ *
+ * The file gives `nvm`, `fnm`, `volta`, and IDE plugins a single
+ * source of truth for the Node version local development should use,
+ * matching the version every CI workflow installs via
+ * `actions/setup-node`. Without it, devs on hosts whose default Node
+ * is older than the floor required by tooling (Astro 6, Starlight,
+ * pnpm 11) silently break after a regen.
+ *
+ * Projen has no built-in `.nvmrc` knob — the closest input is
+ * `workflowNodeVersion`, which only drives CI. This component closes
+ * the local-dev gap.
+ */
+declare class Nvmrc extends Component {
+    constructor(project: Project$1);
+}
+
 /**
  * Provides structured project metadata consumed by AgentConfig, skills,
  * and other configulator features at synthesis time.
@@ -9562,4 +9764,80 @@ declare const COMPLETE_JOB_ID = "complete";
  */
 declare function addBuildCompleteJob(buildWorkflow: BuildWorkflow): void;
 
-export { AGENT_MODEL, AGENT_PLATFORM, AGENT_RULE_SCOPE, AGENT_TIER_ROLES, AGENT_TIER_VALUES, AUDIT_CATEGORY_ORDER, AgentConfig, type AgentConfigOptions, type AgentExpansionRules, type AgentFeaturesConfig, type AgentModel, type AgentPathsConfig, type AgentPlatform, type AgentPlatformOverrides, type AgentProcedure, type AgentRule, type AgentRuleBundle, type AgentRuleScope, type AgentSkill, type AgentSubAgent, type AgentSubAgentPlatformOverrides, type AgentTier, type AgentTierConfig, type AgentTierEntry, type AnalyzeTsDocCoverageOptions, type ApiDiffCheckOptions, type ApiDiffFinding, type ApiDiffResult, ApiExtractor, type ApiExtractorOptions, type ApiExtractorReportOptions, type ApiSurfaceEntry, type ApproveMergeUpgradeOptions, AstroConfig, type AstroConfigOptions, type AstroIntegrationSpec, AstroOutput, AstroProject, type AstroProjectOptions, AuditCategory, type AuditCheckRunner, type AuditCheckRunnerContext, type AuditFinding, type AuditFindingBase, type AuditLocation, AuditMode, type AuditReport, AuditSeverity, type AwsAccount, AwsCdkProject, type AwsCdkProjectOptions, AwsDeployWorkflow, AwsDeploymentConfig, AwsDeploymentTarget, type AwsDeploymentTargetOptions, type AwsLocalDeploymentConfig, type AwsOrganization, type AwsRegion, AwsTeardownWorkflow, type AwsTeardownWorkflowOptions, BUILT_IN_BUNDLES, CLAUDE_RULE_TARGET, COMPLETE_JOB_ID, type CiDeploymentConfig, type ClassTypeOptions, type ClaudeAutoModeConfig, type ClaudeHookAction, type ClaudeHookEntry, type ClaudeHooksConfig, type ClaudePermissionsConfig, type ClaudeRuleTarget, type ClaudeSandboxConfig, type ClaudeSettingsConfig, type CompileFencedSamplesOptions, type CopilotHandoff, type CursorHookAction, type CursorHooksConfig, type CursorSettingsConfig, type CustomDocSection, DEFAULT_AC_THRESHOLDS, DEFAULT_AGENT_PATHS, DEFAULT_AGENT_TIERS, DEFAULT_API_EXTRACTOR_CONFIG_FILE, DEFAULT_API_EXTRACTOR_ENTRY_POINT, DEFAULT_API_EXTRACTOR_REPORT_FILENAME, DEFAULT_API_EXTRACTOR_REPORT_FOLDER, DEFAULT_AUDIT_REPORT_DIR, DEFAULT_BUNDLE_OVERRIDES, DEFAULT_DECOMPOSITION_TEMPLATE, DEFAULT_DISPATCH_MODEL, DEFAULT_DISPATCH_TO_HOUSEKEEPING_RATIO, DEFAULT_HOUSEKEEPING_MODEL, DEFAULT_ISSUE_PRIORITY, DEFAULT_ISSUE_STATUS, DEFAULT_ISSUE_TEMPLATES_BUNDLE_PATH_PATTERNS, DEFAULT_ISSUE_TEMPLATES_EMIT_CHECKER, DEFAULT_ISSUE_TEMPLATES_EMIT_STARTER, DEFAULT_ISSUE_TEMPLATES_ENABLED, DEFAULT_ISSUE_TEMPLATES_PATH, DEFAULT_ISSUE_TEMPLATES_REQUIRE_REFERENCE, DEFAULT_OFF_PEAK_CRON_EXAMPLE, DEFAULT_PARTIAL_UNBLOCK_COMMENT_TEMPLATE, DEFAULT_PRIORITY_LABELS, DEFAULT_PRODUCT_CONTEXT_PATH, DEFAULT_PROGRESS_FILES_ENABLED, DEFAULT_PROGRESS_FILES_FILENAME_PATTERN, DEFAULT_PROGRESS_FILES_FORMAT, DEFAULT_PROGRESS_FILES_STALE_AFTER_HOURS, DEFAULT_PROGRESS_FILES_STATE_DIR, DEFAULT_REQUIRE_PRODUCT_CONTEXT, DEFAULT_RESOLVED_ISSUE_DEFAULTS, DEFAULT_SAMPLE_COMPILER_OPTIONS, DEFAULT_SCHEDULED_TASKS_ROOT, DEFAULT_SCHEDULED_TASK_ENTRIES, DEFAULT_SHARED_EDITING_CONFLICT_STRATEGY, DEFAULT_SHARED_EDITING_EMIT_HELPER, DEFAULT_SHARED_EDITING_ENABLED, DEFAULT_SHARED_EDITING_VERIFY_COMMIT, DEFAULT_SHARED_INDEX_PATHS, DEFAULT_SKILL_EVALS_EMIT_RUNNER, DEFAULT_SKILL_EVALS_ENABLED, DEFAULT_SKILL_EVALS_SKILLS_ROOT, DEFAULT_SOURCES_THRESHOLDS, DEFAULT_STATE_FILE_PATH, DEFAULT_STATUS_LABELS, DEFAULT_TEARDOWN_BRANCH_PATTERNS, DEFAULT_TYPE_LABELS, DEFAULT_UNBLOCK_COMMENT_TEMPLATE, DEFAULT_UNBLOCK_DEPENDENTS_ENABLED, DEFAULT_UPSTREAM_CONFIGULATOR_ENABLED, DOCS_SYNC_AUDIT_SCHEMA_VERSION, type DeployWorkflowOptions, type DeploymentMetadata, type DocReferenceRecord, type EffectiveScopeThresholds, type ExtractDocReferencesOptions, type ExtractFencedSamplesOptions, type FencedSampleRecord, type FocusArea, type FocusAreaMatch, type FocusConfig, type GitBranch, type GitHubBoardMetadata, type GitHubProjectMetadata, type GitHubSprintMetadata, type IDependencyResolver, type IssueDefaultsConfig, type IssueDefaultsOverride, type IssueDefaultsPriority, type IssueDefaultsStatus, type IssueTemplatesConfig, JsiiFaker, LAYOUT_ENFORCEMENT, LAYOUT_ROOT_BY_PROJECT_TYPE, type LabelDefinition, type LayoutEnforcement, type LayoutViolation, type LinkFailureFinding, MAX_LABEL_DESCRIPTION_LENGTH, MCP_TRANSPORT, MERGE_METHODS, MIMIMUM_RELEASE_AGE, MINIMUM_RELEASE_AGE, MONOREPO_LAYOUT, type McpServerConfig, type McpTransport, type MeetingArea, type MeetingScope, type MeetingType, type MeetingTypeKind, type MeetingsConfig, type MergeMethod, type MonorepoLayoutRoot, MonorepoProject, type MonorepoProjectOptions, type OrganizationMetadata, PROD_DEPLOY_NAME, PROGRESS_FILES_FORMAT_VALUES, PnpmWorkspace, type PnpmWorkspaceOptions, type PriorityRule, type ProgressFilesConfig, ProjectMetadata, type ProjectMetadataOptions, REQUIREMENTS_WRITER_PATHS, ROOT_CI_TASK_NAME, ROOT_TURBO_TASK_NAME, type ReferenceMismatchCheckOptions, type ReferenceMismatchFinding, type RemoteCacheOptions, type RepositoryMetadata, ResetTask, type ResetTaskOptions, type ResolvedAgentPaths, type ResolvedAgentTier, type ResolvedIssueDefaults, type ResolvedIssueDefaultsEntry, type ResolvedIssueTemplates, type ResolvedProgressFiles, type ResolvedProjectMetadata, type ResolvedRunRatio, type ResolvedScheduledTask, type ResolvedScheduledTasks, type ResolvedScopeGate, type ResolvedScopeGateBundleOverride, type ResolvedSharedEditing, type ResolvedSkillEvals, type ResolvedUnblockDependents, type RunRatioConfig, type RunScanOptions, type RunScanResult, SCHEDULED_TASK_MODEL_VALUES, SCOPE_CLASS_VALUES, SHARED_EDITING_CONFLICT_STRATEGY_VALUES, STARLIGHT_ROLE, type SampleCompilationFailure, type SampleFailureFinding, SampleLang, type ScheduledTaskEntry, type ScheduledTaskModel, type ScheduledTaskOverride, type ScheduledTasksConfig, type ScopeClass, type ScopeGateBundleOverride, type ScopeGateConfig, type ScopeGateThresholds, type SharedEditingConfig, type SkillEvalsConfig, type SlackMetadata, type SourceTierExamples, type StarlightEditLink, type StarlightLogo, StarlightProject, type StarlightProjectOptions, type StarlightRole, type StarlightSidebarItem, type StarlightSingletonViolation, type StarlightSocialLink, type SyncLabelsOptions, type TemplateResolveResult, TestRunner, TsDocCoverageKind, type TsDocCoverageRecord, type TsdocCoverageCheckOptions, type TsdocCoverageFinding, TurboRepo, type TurboRepoOptions, TurboRepoTask, type TurboRepoTaskOptions, TypeScriptConfig, TypeScriptProject, type TypeScriptProjectOptions, UNKNOWN_TYPE_FALLBACK_TIER, type UnblockDependentsConfig, type UpstreamConfigulatorConfig, VALID_PRIORITY_VALUES, VALID_STATUS_VALUES, VERSION, VERSION_KEYS_SKIP, VERSION_NPM_PACKAGES, VSCodeConfig, type VersionKey, Vitest, type VitestConfigOptions, type VitestOptions, addApproveMergeUpgradeWorkflow, addBuildCompleteJob, addSyncLabelsWorkflow, agendaBundle, analyzeTsDocCoverage, auditReportJsonSchema, awsCdkBundle, baseBundle, bcmWriterBundle, buildBaseBundle, buildBcmWriterBundle, buildBuiltInBundles, buildBusinessModelsBundle, buildCheckBlockedProcedure, buildCompanyProfileBundle, buildCustomerProfileBundle, buildDocsSyncBundle, buildIndustryDiscoveryBundle, buildMaintenanceAuditBundle, buildOrchestratorConventionsContent, buildPeopleProfileBundle, buildRegulatoryResearchBundle, buildReport, buildRequirementsAnalystBundle, buildRequirementsReviewerBundle, buildRequirementsWriterBundle, buildResearchPipelineBundle, buildSoftwareProfileBundle, buildStandardsResearchBundle, buildUnblockDependentsProcedure, businessModelsBundle, checkDocSamplesProcedure, checkLinksProcedure, classifyIssueScope, classifyRun, companyProfileBundle, compileFencedSamples, createApiDiffCheck, createReferenceMismatchCheck, createTsdocCoverageCheck, customerProfileBundle, diffApiRollups, docsSyncBundle, emptyCategoryBuckets, extractApiProcedure, extractDocReferences, extractFencedSamples, formatLayoutViolation, formatStarlightSingletonViolation, getLatestEligibleVersion, githubWorkflowBundle, industryDiscoveryBundle, jestBundle, labelsForPhase, maintenanceAuditBundle, meetingAnalysisBundle, orchestratorBundle, parseApiRollup, peopleProfileBundle, persistAuditReport, pnpmBundle, prReviewBundle, projenBundle, referenceRecordToFinding, regulatoryResearchBundle, renderAgentTierCaseStatement, renderAgentTierSection, renderCheckDocSamplesProcedure, renderCheckLinksProcedure, renderCustomDocSectionBlock, renderCustomDocSections, renderExtractApiProcedure, renderFocusSection, renderIssueTemplatesBundleHook, renderIssueTemplatesCheckerScript, renderIssueTemplatesRuleContent, renderIssueTemplatesStarterPage, renderMeetingTypesSection, renderPriorityRulesSection, renderProgressFileName, renderProgressFilePath, renderProgressFilesBundleHook, renderProgressFilesRuleContent, renderRunRatioSection, renderRunRatioShellHelpers, renderScheduledTaskSkillFile, renderScheduledTasksSection, renderScopeGateSection, renderScopeGateShellHelpers, renderSharedEditingBundleHook, renderSharedEditingHelperScript, renderSharedEditingRuleContent, renderSkillEvalsBundleHook, renderSkillEvalsRuleContent, renderSkillEvalsRunnerScript, renderSourceTierExamples, renderStubIndexConventionRuleContent, renderUnblockDependentsScript, renderUnblockDependentsSection, requirementsAnalystBundle, requirementsReviewerBundle, requirementsWriterBundle, researchPipelineBundle, resolveAgentPaths, resolveAgentTiers, resolveAstroProjectOutdir, resolveAwsCdkProjectOutdir, resolveIssueDefaults, resolveIssueTemplates, resolveModelAlias, resolveOrchestratorAssets, resolveOutdirFromPackageName, resolveOverrideForLabels, resolveProgressFiles, resolveRunRatio, resolveScheduledTasks, resolveScopeGate, resolveSharedEditing, resolveSkillEvals, resolveTemplateVariables, resolveTypeScriptProjectOutdir, resolveUnblockDependents, runScan, slackBundle, softwareProfileBundle, standardsResearchBundle, tsdocRecordToFindings, turborepoBundle, typescriptBundle, upstreamConfigulatorDocsBundle, validateAgentTierConfig, validateIssueDefaultsConfig, validateIssueTemplatesConfig, validateMonorepoLayout, validateProgressFilesConfig, validateRunRatioConfig, validateScheduledTasksConfig, validateScopeGateConfig, validateSharedEditingConfig, validateSkillEvalsConfig, validateStarlightSingleton, validateUnblockDependentsConfig, vitestBundle };
+/**
+ * Rewrites every `pnpm/action-setup@vX` step `uses` field reachable from
+ * a project's GitHub component (and its sub-projects) to the version
+ * pinned in {@link VERSION.PNPM_ACTION_SETUP_VERSION}.
+ *
+ * Projen's NodeProject and JsiiProject both hardcode a `pnpm/action-setup`
+ * pin in their generated build / release / upgrade workflows. When that
+ * pin lags behind the version required by the pnpm release we run in CI
+ * (e.g. v5 cannot install pnpm 11), the action installs the wrong pnpm
+ * version and CI breaks. This helper post-patches every workflow owned
+ * by `project.github` so the pin tracks our centralised constant.
+ *
+ * Two passes run in sequence:
+ *
+ * 1. **Eager step arrays.** Walks every {@link Component} on the
+ *    project (and on its sub-projects) for the well-known fields
+ *    enumerated in {@link STEP_ARRAY_FIELDS}. Projen's BuildWorkflow
+ *    and Release components hold their pnpm-setup steps in these
+ *    arrays before the workflow's lazy step closures resolve them.
+ * 2. **Direct workflow jobs.** Walks every job step on every
+ *    `GithubWorkflow` for jobs whose steps are eagerly populated
+ *    (e.g. the upgrade workflow). Steps held inside lazy closures
+ *    are skipped — those are reached via pass 1.
+ *
+ * @param project The project whose GitHub workflows should be patched.
+ */
+declare function pinPnpmActionSetup(project: Project$1): void;
+
+/**
+ * Rewrites every Node-version source reachable from a project's
+ * GitHub component (and its sub-projects) to the version pinned in
+ * {@link VERSION.NODE_WORKFLOWS}.
+ *
+ * Projen hardcodes `node-version: "lts/*"` in its release workflow
+ * generator (via {@code Publisher.workflowNodeVersion}); configulator-
+ * owned workflows already pass through {@link VERSION.NODE_WORKFLOWS}.
+ * Without this patch, the two sources disagree (release workflows
+ * install whatever Node lts/* resolves to; build / upgrade workflows
+ * install Node 24). This helper post-patches every Node-version
+ * source so a single source of truth — the centralised
+ * {@link VERSION.NODE_WORKFLOWS} constant — drives every workflow
+ * this repo and its consumers generate.
+ *
+ * Three passes run in sequence:
+ *
+ * 1. **Component Node-version fields.** Walks every {@link Component}
+ *    on the project (and on its sub-projects) and rewrites the
+ *    well-known fields enumerated in {@link NODE_VERSION_FIELDS} —
+ *    notably {@code Publisher.workflowNodeVersion}, which projen
+ *    renders into {@code tools.node.version} on the publish job
+ *    (and ultimately into the synthesized
+ *    `actions/setup-node` step).
+ * 2. **Component step arrays.** Walks every {@link Component} on the
+ *    project (and on its sub-projects) for the well-known step-array
+ *    fields enumerated in {@link STEP_ARRAY_FIELDS}. Projen's
+ *    BuildWorkflow and Release components hold their pre/post-build
+ *    steps in these arrays before the workflow's lazy step closures
+ *    resolve them.
+ * 3. **Direct workflow jobs.** Walks every job on every
+ *    `GithubWorkflow`. For each job:
+ *    - If `tools.node.version` is set (the lazy `setupTools` path
+ *      that synthesises the setup-node step at render time),
+ *      rewrite it.
+ *    - If `steps` is already an array (i.e. not a lazy closure),
+ *      patch any `actions/setup-node` step in place.
+ *
+ * The step-level patch only mutates `with["node-version"]`. Other
+ * fields on `with` (`cache`, `cache-dependency-path`,
+ * `registry-url`, `package-manager-cache`, etc.) are preserved
+ * untouched. The step's `uses` field is also left alone — this
+ * helper pins the input, not the action version pin.
+ *
+ * @param project The project whose GitHub workflows should be patched.
+ */
+declare function pinSetupNodeVersion(project: Project$1): void;
+
+export { AGENT_MODEL, AGENT_PLATFORM, AGENT_RULE_SCOPE, AGENT_TIER_ROLES, AGENT_TIER_VALUES, AUDIT_CATEGORY_ORDER, AgentConfig, type AgentConfigOptions, type AgentExpansionRules, type AgentFeaturesConfig, type AgentModel, type AgentPathsConfig, type AgentPlatform, type AgentPlatformOverrides, type AgentProcedure, type AgentRule, type AgentRuleBundle, type AgentRuleScope, type AgentSkill, type AgentSubAgent, type AgentSubAgentPlatformOverrides, type AgentTier, type AgentTierConfig, type AgentTierEntry, type AnalyzeTsDocCoverageOptions, type ApiDiffCheckOptions, type ApiDiffFinding, type ApiDiffResult, ApiExtractor, type ApiExtractorOptions, type ApiExtractorReportOptions, type ApiSurfaceEntry, type ApproveMergeUpgradeOptions, AstroConfig, type AstroConfigOptions, type AstroIntegrationSpec, AstroOutput, AstroProject, type AstroProjectOptions, AuditCategory, type AuditCheckRunner, type AuditCheckRunnerContext, type AuditFinding, type AuditFindingBase, type AuditLocation, AuditMode, type AuditReport, AuditSeverity, type AwsAccount, AwsCdkProject, type AwsCdkProjectOptions, AwsDeployWorkflow, AwsDeploymentConfig, AwsDeploymentTarget, type AwsDeploymentTargetOptions, type AwsLocalDeploymentConfig, type AwsOrganization, type AwsRegion, AwsTeardownWorkflow, type AwsTeardownWorkflowOptions, BUILT_IN_BUNDLES, BUNDLE_OWNERSHIP, type BundleOwnership, CLAUDE_RULE_TARGET, COMPLETE_JOB_ID, type CiDeploymentConfig, type ClassTypeOptions, type ClaudeAutoModeConfig, type ClaudeHookAction, type ClaudeHookEntry, type ClaudeHooksConfig, type ClaudePermissionsConfig, type ClaudeRuleTarget, type ClaudeSandboxConfig, type ClaudeSettingsConfig, type CompileFencedSamplesOptions, type CopilotHandoff, type CursorHookAction, type CursorHooksConfig, type CursorSettingsConfig, type CustomDocSection, DEFAULT_AC_THRESHOLDS, DEFAULT_AGENT_PATHS, DEFAULT_AGENT_TIERS, DEFAULT_API_EXTRACTOR_CONFIG_FILE, DEFAULT_API_EXTRACTOR_ENTRY_POINT, DEFAULT_API_EXTRACTOR_REPORT_FILENAME, DEFAULT_API_EXTRACTOR_REPORT_FOLDER, DEFAULT_AUDIT_REPORT_DIR, DEFAULT_BUNDLE_OVERRIDES, DEFAULT_DECOMPOSITION_TEMPLATE, DEFAULT_DISPATCH_MODEL, DEFAULT_DISPATCH_TO_HOUSEKEEPING_RATIO, DEFAULT_HOUSEKEEPING_MODEL, DEFAULT_ISSUE_PRIORITY, DEFAULT_ISSUE_STATUS, DEFAULT_ISSUE_TEMPLATES_BUNDLE_PATH_PATTERNS, DEFAULT_ISSUE_TEMPLATES_EMIT_CHECKER, DEFAULT_ISSUE_TEMPLATES_EMIT_STARTER, DEFAULT_ISSUE_TEMPLATES_ENABLED, DEFAULT_ISSUE_TEMPLATES_PATH, DEFAULT_ISSUE_TEMPLATES_REQUIRE_REFERENCE, DEFAULT_OFF_PEAK_CRON_EXAMPLE, DEFAULT_PARTIAL_UNBLOCK_COMMENT_TEMPLATE, DEFAULT_PRIORITY_LABELS, DEFAULT_PRODUCT_CONTEXT_PATH, DEFAULT_PROGRESS_FILES_ENABLED, DEFAULT_PROGRESS_FILES_FILENAME_PATTERN, DEFAULT_PROGRESS_FILES_FORMAT, DEFAULT_PROGRESS_FILES_STALE_AFTER_HOURS, DEFAULT_PROGRESS_FILES_STATE_DIR, DEFAULT_REQUIRE_PRODUCT_CONTEXT, DEFAULT_RESOLVED_ISSUE_DEFAULTS, DEFAULT_SAMPLE_COMPILER_OPTIONS, DEFAULT_SCHEDULED_TASKS_ROOT, DEFAULT_SCHEDULED_TASK_ENTRIES, DEFAULT_SHARED_EDITING_CONFLICT_STRATEGY, DEFAULT_SHARED_EDITING_EMIT_HELPER, DEFAULT_SHARED_EDITING_ENABLED, DEFAULT_SHARED_EDITING_VERIFY_COMMIT, DEFAULT_SHARED_INDEX_PATHS, DEFAULT_SKILL_EVALS_EMIT_RUNNER, DEFAULT_SKILL_EVALS_ENABLED, DEFAULT_SKILL_EVALS_SKILLS_ROOT, DEFAULT_SOURCES_THRESHOLDS, DEFAULT_STATE_FILE_PATH, DEFAULT_STATUS_LABELS, DEFAULT_TEARDOWN_BRANCH_PATTERNS, DEFAULT_TYPE_LABELS, DEFAULT_UNBLOCK_COMMENT_TEMPLATE, DEFAULT_UNBLOCK_DEPENDENTS_ENABLED, DEFAULT_UPSTREAM_CONFIGULATOR_ENABLED, DOCS_SYNC_AUDIT_SCHEMA_VERSION, type DeployWorkflowOptions, type DeploymentMetadata, type DocReferenceRecord, type EffectiveScopeThresholds, type ExtractDocReferencesOptions, type ExtractFencedSamplesOptions, type FencedSampleRecord, type FocusArea, type FocusAreaMatch, type FocusConfig, type GitBranch, type GitHubBoardMetadata, type GitHubProjectMetadata, type GitHubSprintMetadata, type IDependencyResolver, type IssueDefaultsConfig, type IssueDefaultsOverride, type IssueDefaultsPriority, type IssueDefaultsStatus, type IssueTemplatesConfig, JsiiFaker, LAYOUT_ENFORCEMENT, LAYOUT_ROOT_BY_PROJECT_TYPE, type LabelDefinition, type LayoutEnforcement, type LayoutViolation, type LinkFailureFinding, MAX_LABEL_DESCRIPTION_LENGTH, MCP_TRANSPORT, MERGE_METHODS, MIMIMUM_RELEASE_AGE, MINIMUM_RELEASE_AGE, MONOREPO_LAYOUT, type McpServerConfig, type McpTransport, type MeetingArea, type MeetingScope, type MeetingType, type MeetingTypeKind, type MeetingsConfig, type MergeMethod, type MonorepoLayoutRoot, MonorepoProject, type MonorepoProjectOptions, Nvmrc, type OrganizationMetadata, PROD_DEPLOY_NAME, PROGRESS_FILES_FORMAT_VALUES, PnpmWorkspace, type PnpmWorkspaceOptions, type PriorityRule, type ProgressFilesConfig, ProjectMetadata, type ProjectMetadataOptions, REQUIREMENTS_WRITER_PATHS, ROOT_CI_TASK_NAME, ROOT_TURBO_TASK_NAME, type ReferenceMismatchCheckOptions, type ReferenceMismatchFinding, type RemoteCacheOptions, type RepositoryMetadata, ResetTask, type ResetTaskOptions, type ResolvedAgentPaths, type ResolvedAgentTier, type ResolvedIssueDefaults, type ResolvedIssueDefaultsEntry, type ResolvedIssueTemplates, type ResolvedProgressFiles, type ResolvedProjectMetadata, type ResolvedRunRatio, type ResolvedScheduledTask, type ResolvedScheduledTasks, type ResolvedScopeGate, type ResolvedScopeGateBundleOverride, type ResolvedSharedEditing, type ResolvedSkillEvals, type ResolvedUnblockDependents, type RunRatioConfig, type RunScanOptions, type RunScanResult, SCHEDULED_TASK_MODEL_VALUES, SCOPE_CLASS_VALUES, SHARED_EDITING_CONFLICT_STRATEGY_VALUES, STARLIGHT_ROLE, type SampleCompilationFailure, type SampleFailureFinding, SampleLang, type ScheduledTaskEntry, type ScheduledTaskModel, type ScheduledTaskOverride, type ScheduledTasksConfig, type ScopeClass, type ScopeGateBundleOverride, type ScopeGateConfig, type ScopeGateThresholds, type SharedEditingConfig, type SkillEvalsConfig, type SlackMetadata, type SourceTierExamples, type StarlightEditLink, type StarlightLogo, StarlightProject, type StarlightProjectOptions, type StarlightRole, type StarlightSidebarItem, type StarlightSingletonViolation, type StarlightSocialLink, type SyncLabelsOptions, type TemplateResolveResult, TestRunner, TsDocCoverageKind, type TsDocCoverageRecord, type TsdocCoverageCheckOptions, type TsdocCoverageFinding, TurboRepo, type TurboRepoOptions, TurboRepoTask, type TurboRepoTaskOptions, TypeScriptConfig, TypeScriptProject, type TypeScriptProjectOptions, UNKNOWN_TYPE_FALLBACK_TIER, type UnblockDependentsConfig, type UpstreamConfigulatorConfig, VALID_PRIORITY_VALUES, VALID_STATUS_VALUES, VERSION, VERSION_KEYS_SKIP, VERSION_NPM_PACKAGES, VSCodeConfig, type VersionKey, Vitest, type VitestConfigOptions, type VitestOptions, addApproveMergeUpgradeWorkflow, addBuildCompleteJob, addSyncLabelsWorkflow, agendaBundle, analyzeTsDocCoverage, auditReportJsonSchema, awsCdkBundle, baseBundle, bcmWriterBundle, buildBaseBundle, buildBcmWriterBundle, buildBuiltInBundles, buildBusinessModelsBundle, buildCheckBlockedProcedure, buildCompanyProfileBundle, buildCustomerProfileBundle, buildDocsSyncBundle, buildIndustryDiscoveryBundle, buildMaintenanceAuditBundle, buildOrchestratorConventionsContent, buildPeopleProfileBundle, buildRegulatoryResearchBundle, buildReport, buildRequirementsAnalystBundle, buildRequirementsReviewerBundle, buildRequirementsWriterBundle, buildResearchPipelineBundle, buildSoftwareProfileBundle, buildStandardsResearchBundle, buildUnblockDependentsProcedure, businessModelsBundle, checkDocSamplesProcedure, checkLinksProcedure, classifyIssueScope, classifyRun, companyProfileBundle, compileFencedSamples, createApiDiffCheck, createReferenceMismatchCheck, createTsdocCoverageCheck, customerProfileBundle, diffApiRollups, docsSyncBundle, emptyCategoryBuckets, extractApiProcedure, extractDocReferences, extractFencedSamples, formatLayoutViolation, formatStarlightSingletonViolation, getLatestEligibleVersion, githubWorkflowBundle, hasAnyDocsEmittingBundle, hasAnyDownstreamIssueKindBundle, industryDiscoveryBundle, isPhaseLabelOwnedByExcluded, isScheduledTaskOwnedByExcluded, isTypeLabelOwnedByExcluded, jestBundle, labelsForPhase, maintenanceAuditBundle, meetingAnalysisBundle, orchestratorBundle, parseApiRollup, peopleProfileBundle, persistAuditReport, pinPnpmActionSetup, pinSetupNodeVersion, pnpmBundle, prReviewBundle, projenBundle, referenceRecordToFinding, regulatoryResearchBundle, renderAgentTierCaseStatement, renderAgentTierSection, renderCheckDocSamplesProcedure, renderCheckLinksProcedure, renderCustomDocSectionBlock, renderCustomDocSections, renderExtractApiProcedure, renderFocusSection, renderIssueTemplatesBundleHook, renderIssueTemplatesCheckerScript, renderIssueTemplatesRuleContent, renderIssueTemplatesStarterPage, renderMeetingTypesSection, renderPriorityRulesSection, renderProgressFileName, renderProgressFilePath, renderProgressFilesBundleHook, renderProgressFilesRuleContent, renderRunRatioSection, renderRunRatioShellHelpers, renderScheduledTaskSkillFile, renderScheduledTasksSection, renderScopeGateSection, renderScopeGateShellHelpers, renderSharedEditingBundleHook, renderSharedEditingHelperScript, renderSharedEditingRuleContent, renderSkillEvalsBundleHook, renderSkillEvalsRuleContent, renderSkillEvalsRunnerScript, renderSourceTierExamples, renderStubIndexConventionRuleContent, renderUnblockDependentsScript, renderUnblockDependentsSection, requirementsAnalystBundle, requirementsReviewerBundle, requirementsWriterBundle, researchPipelineBundle, resolveAgentPaths, resolveAgentTiers, resolveAstroProjectOutdir, resolveAwsCdkProjectOutdir, resolveIssueDefaults, resolveIssueTemplates, resolveModelAlias, resolveOrchestratorAssets, resolveOutdirFromPackageName, resolveOverrideForLabels, resolveProgressFiles, resolveRunRatio, resolveScheduledTasks, resolveScopeGate, resolveSharedEditing, resolveSkillEvals, resolveTemplateVariables, resolveTypeScriptProjectOutdir, resolveUnblockDependents, runScan, slackBundle, softwareProfileBundle, standardsResearchBundle, tsdocRecordToFindings, turborepoBundle, typescriptBundle, upstreamConfigulatorDocsBundle, validateAgentTierConfig, validateIssueDefaultsConfig, validateIssueTemplatesConfig, validateMonorepoLayout, validateProgressFilesConfig, validateRunRatioConfig, validateScheduledTasksConfig, validateScopeGateConfig, validateSharedEditingConfig, validateSkillEvalsConfig, validateStarlightSingleton, validateUnblockDependentsConfig, vitestBundle };