@codedrifters/configulator 0.0.295 → 0.0.297

package/lib/index.d.ts

@@ -3477,6 +3477,111 @@ declare function buildBaseBundle(paths?: ResolvedAgentPaths): AgentRuleBundle;
  */
 declare const baseBundle: AgentRuleBundle;
 
+/**
+ * Hand-maintained registry mapping every bundle name to the cross-bundle
+ * surface it owns: GitHub `type:*` labels, phase-label prefixes,
+ * scheduled-task IDs, whether it emits Starlight docs, and whether it
+ * declares any downstream issue kinds (i.e. files `gh issue create`
+ * recipes via the issue-templates convention).
+ *
+ * The registry is consulted by renderers in other bundles whenever
+ * `AgentConfigOptions.excludeBundles` is non-empty so cross-bundle
+ * references to an excluded bundle's agents, type labels, phase labels,
+ * or scheduled tasks disappear from the generated output.
+ *
+ * The map is **hand-maintained** rather than derived from each bundle's
+ * runtime shape. The defining surfaces (the funnel-tier table in
+ * `tiers.ts`, the per-phase scope-gate overrides in `scope-gate.ts`, and
+ * the scheduled-tasks registry in `scheduled-tasks.ts`) live as flat
+ * data tables that already get walked by their renderers — declaring the
+ * ownership map alongside them keeps the relationship explicit and
+ * readable without forcing every bundle to grow an "ownership"
+ * descriptor.
+ *
+ * Bundles that ship no cross-bundle surface (e.g. `slack`, `typescript`,
+ * `pnpm`, `vitest`, `jest`, `aws-cdk`, `projen`, `turborepo`,
+ * `upstream-configulator-docs`) deliberately do not appear here —
+ * excluding them is already a no-op since they own nothing other
+ * bundles reference.
+ */
+interface BundleOwnership {
+    /**
+     * GitHub `type:*` label values (without the `type:` prefix) the
+     * bundle owns. The funnel-tier table in `tiers.ts` and any rendered
+     * tables that group agents by `type:*` label consult this list.
+     */
+    readonly typeLabels: ReadonlyArray<string>;
+    /**
+     * Phase-label prefixes (with trailing colon, e.g. `"company:"`) the
+     * bundle owns. Used by the scope-gate per-phase override table and
+     * any other renderer that groups by phase label. An entry without a
+     * trailing colon (e.g. `"req:write"`) is treated as an exact
+     * phase-label match instead of a prefix.
+     */
+    readonly phaseLabelPrefixes: ReadonlyArray<string>;
+    /**
+     * `taskId` values from `DEFAULT_SCHEDULED_TASK_ENTRIES` that target
+     * this bundle's sub-agent. The scheduled-tasks registry filter in
+     * `agent-config.ts` consults this list when pruning default entries
+     * for an excluded bundle.
+     */
+    readonly scheduledTaskIds: ReadonlyArray<string>;
+    /**
+     * Whether this bundle emits Starlight content roots — i.e. whether
+     * any of its workflows write files under `docs/src/content/docs/`
+     * (or the configured docs root). Drives the auto-suppression of the
+     * `section-index-pages` rule when no docs-emitting bundle is active.
+     */
+    readonly emitsDocs: boolean;
+    /**
+     * Whether this bundle dispatches downstream issues (i.e. its
+     * workflows file `gh issue create` recipes). Drives the
+     * auto-suppression of the `issue-templates-convention` rule when no
+     * such bundle is active.
+     */
+    readonly downstreamIssueKinds: boolean;
+}
+/**
+ * Canonical ownership map. Only bundles that own at least one
+ * cross-bundle surface appear here.
+ */
+declare const BUNDLE_OWNERSHIP: Readonly<Record<string, BundleOwnership>>;
+/**
+ * Return `true` when `typeLabel` (without the leading `type:` prefix)
+ * is owned by any bundle in `excludedBundles`. Used by tier-table and
+ * scheduled-task renderers to drop rows whose owning bundle has been
+ * excluded.
+ */
+declare function isTypeLabelOwnedByExcluded(typeLabel: string, excludedBundles: ReadonlyArray<string>): boolean;
+/**
+ * Return `true` when `phaseLabel` is owned by any bundle in
+ * `excludedBundles`. Matches against both prefix entries (with
+ * trailing colon, e.g. `"company:"`) and exact-match entries (without
+ * trailing colon, e.g. `"req:write"`). Used by the scope-gate
+ * per-phase-override table renderer.
+ */
+declare function isPhaseLabelOwnedByExcluded(phaseLabel: string, excludedBundles: ReadonlyArray<string>): boolean;
+/**
+ * Return `true` when the scheduled-task `taskId` is owned by any
+ * bundle in `excludedBundles`. Used by the scheduled-tasks registry
+ * filter to drop default entries pointing at an excluded bundle.
+ */
+declare function isScheduledTaskOwnedByExcluded(taskId: string, excludedBundles: ReadonlyArray<string>): boolean;
+/**
+ * Return `true` when at least one docs-emitting bundle is **not**
+ * excluded. Used by the `section-index-pages` rule auto-suppression
+ * gate — when this returns `false`, the rule is dropped from the
+ * rendered rule map entirely.
+ */
+declare function hasAnyDocsEmittingBundle(excludedBundles: ReadonlyArray<string>): boolean;
+/**
+ * Return `true` when at least one downstream-issue-kind bundle is
+ * **not** excluded. Used by the `issue-templates-convention`
+ * auto-suppression gate — when this returns `false`, the rule body
+ * renders the disabled-stub variant.
+ */
+declare function hasAnyDownstreamIssueKindBundle(excludedBundles: ReadonlyArray<string>): boolean;
+
 /**
  * Build the bcm-writer bundle with the supplied resolved paths.
  *
@@ -4026,7 +4131,7 @@ interface ResolvedScheduledTasks {
  * duplicate taskIds in a single supplied list) throw a descriptive
  * `Error` — callers should not need to guard against it at runtime.
  */
-declare function resolveScheduledTasks(config?: ScheduledTasksConfig): ResolvedScheduledTasks;
+declare function resolveScheduledTasks(config?: ScheduledTasksConfig, excludeBundles?: ReadonlyArray<string>): ResolvedScheduledTasks;
 /**
  * Synth-time validation hook. Throws a descriptive `Error` when the
  * supplied `ScheduledTasksConfig` is malformed. Called by
@@ -4045,7 +4150,7 @@ declare function resolveScheduledTasks(config?: ScheduledTasksConfig): ResolvedS
  *   plain string.
  * - Duplicate `taskId` values within the supplied `tasks` list.
  */
-declare function validateScheduledTasksConfig(config?: ScheduledTasksConfig): ResolvedScheduledTasks;
+declare function validateScheduledTasksConfig(config?: ScheduledTasksConfig, excludeBundles?: ReadonlyArray<string>): ResolvedScheduledTasks;
 /**
  * Render the markdown subsection appended to the
  * `orchestrator-conventions` rule. Always returns a non-empty string —
@@ -4284,8 +4389,13 @@ declare function classifyIssueScope(body: string, gate: ResolvedScopeGate, label
  * `orchestrator-conventions` rule. Always returns a non-empty string
  * so the orchestrator rule documents the scope gate even when the
  * consumer relies on the defaults.
+ *
+ * When `excludeBundles` is non-empty, per-phase override rows whose
+ * phase label is owned by an excluded bundle are dropped from the
+ * **Per-phase-label thresholds** sub-table. The sub-section as a
+ * whole is hidden when no rows survive.
  */
-declare function renderScopeGateSection(gate: ResolvedScopeGate): string;
+declare function renderScopeGateSection(gate: ResolvedScopeGate, excludeBundles?: ReadonlyArray<string>): string;
 /**
  * Render a shell-script snippet embedded in `check-blocked.sh`. The
  * snippet declares a `scope_of()` function that reads an issue body
@@ -4402,8 +4512,15 @@ declare function validateAgentTierConfig(config?: AgentTierConfig): ReadonlyArra
  * `orchestrator-conventions` rule. Always returns a non-empty string
  * because the default tier list is non-empty — the orchestrator
  * always documents its sort order.
+ *
+ * When `excludeBundles` is non-empty, rows whose `type:*` label is
+ * owned by an excluded bundle are dropped before rendering. Tiers
+ * that end up with no surviving rows render an empty `_(none
+ * registered)_` cell for consistency with the existing render — the
+ * tier itself stays in the table so the dispatch ordering is still
+ * documented end-to-end.
  */
-declare function renderAgentTierSection(tiers: ReadonlyArray<ResolvedAgentTier>): string;
+declare function renderAgentTierSection(tiers: ReadonlyArray<ResolvedAgentTier>, excludeBundles?: ReadonlyArray<string>): string;
 /**
  * Render a shell-script snippet that the `check-blocked.sh` procedure
  * uses to look up a tier for a given `type:*` label. Emitted as a
@@ -4545,7 +4662,7 @@ declare function buildUnblockDependentsProcedure(unblockDependents?: ResolvedUnb
  * Every optional parameter defaults to the bundle's built-in default
  * when the caller omits it.
  */
-declare function buildOrchestratorConventionsContent(tiers: ReadonlyArray<ResolvedAgentTier>, scopeGate?: ResolvedScopeGate, runRatio?: ResolvedRunRatio, scheduledTasks?: ResolvedScheduledTasks, unblockDependents?: ResolvedUnblockDependents): string;
+declare function buildOrchestratorConventionsContent(tiers: ReadonlyArray<ResolvedAgentTier>, scopeGate?: ResolvedScopeGate, runRatio?: ResolvedRunRatio, scheduledTasks?: ResolvedScheduledTasks, unblockDependents?: ResolvedUnblockDependents, excludeBundles?: ReadonlyArray<string>): string;
 /**
  * Resolve the orchestrator-conventions rule content and the
  * check-blocked.sh procedure content for a given (possibly absent)
@@ -4557,7 +4674,7 @@ declare function buildOrchestratorConventionsContent(tiers: ReadonlyArray<Resolv
  * can splice them into their rule map and procedure map in a single
  * pass.
  */
-declare function resolveOrchestratorAssets(tierConfig?: AgentTierConfig, scopeGateConfig?: ScopeGateConfig, runRatioConfig?: RunRatioConfig, scheduledTasksConfig?: ScheduledTasksConfig, unblockDependentsConfig?: UnblockDependentsConfig): {
+declare function resolveOrchestratorAssets(tierConfig?: AgentTierConfig, scopeGateConfig?: ScopeGateConfig, runRatioConfig?: RunRatioConfig, scheduledTasksConfig?: ScheduledTasksConfig, unblockDependentsConfig?: UnblockDependentsConfig, excludeBundles?: ReadonlyArray<string>): {
     readonly tiers: ReadonlyArray<ResolvedAgentTier>;
     readonly scopeGate: ResolvedScopeGate;
     readonly runRatio: ResolvedRunRatio;
@@ -4745,7 +4862,7 @@ declare function validateIssueTemplatesConfig(config?: IssueTemplatesConfig): Re
  *
  * When the convention is disabled, the rule renders a short stub.
  */
-declare function renderIssueTemplatesRuleContent(it: ResolvedIssueTemplates): string;
+declare function renderIssueTemplatesRuleContent(it: ResolvedIssueTemplates, hasDownstreamBundles?: boolean): string;
 /**
  * Render the short issue-templates hook section injected into a
  * phased-agent bundle's workflow rule. The section cites the full
@@ -7766,11 +7883,11 @@ declare const VERSION: {
      * Version of `pnpm/action-setup` to use in GitHub workflows.
      * Tracks the version projen currently emits (see node_modules/projen/lib/javascript/node-project.js).
      */
-    readonly PNPM_ACTION_SETUP_VERSION: "v5";
+    readonly PNPM_ACTION_SETUP_VERSION: "v6.0.5";
     /**
      * Version of PNPM to use in workflows at github actions.
      */
-    readonly PNPM_VERSION: "10.33.3";
+    readonly PNPM_VERSION: "11.0.8";
     /**
      * Version of Projen to use.
      */
@@ -7925,6 +8042,33 @@ interface PnpmWorkspaceOptions {
      * See: https://pnpm.io/settings#minimumreleaseageexclude
      */
     readonly minimumReleaseAgeExclude?: Array<string>;
+    /**
+     * A map of package names to booleans controlling whether each package may
+     * execute "preinstall", "install", and/or "postinstall" scripts during
+     * installation. Set a package's value to `true` to allow lifecycle scripts;
+     * set it to `false` to silently block them without a warning.
+     *
+     * pnpm 11 replaced the legacy `onlyBuiltDependencies` (allow-list) and
+     * `ignoredBuiltDependencies` (deny-list) settings with this single
+     * `allowBuilds` map. Configulator translates the deprecated input fields
+     * automatically: entries from `onlyBuiltDependencies` map to `true` and
+     * entries from `ignoredBuiltDependencies` map to `false`. When a key
+     * appears in both `allowBuilds` and one of the deprecated fields, the
+     * explicit `allowBuilds` value wins.
+     *
+     * For cross-version compatibility, configulator emits BOTH the new
+     * `allowBuilds` map AND the legacy `onlyBuiltDependencies` /
+     * `ignoredBuiltDependencies` arrays in the generated YAML so consumers
+     * on either pnpm 10 or pnpm 11 see correct lifecycle-script behavior
+     * without changing their input.
+     *
+     * See: https://pnpm.io/settings#allowbuilds
+     *
+     * @default none (empty object)
+     */
+    readonly allowBuilds?: {
+        [packageName: string]: boolean;
+    };
     /**
      * A list of package names that are allowed to execute "preinstall",
      * "install", and/or "postinstall" scripts during installation. Only the
@@ -7938,6 +8082,12 @@ interface PnpmWorkspaceOptions {
      *
      * See: https://pnpm.io/settings#onlybuiltdependencies
      *
+     * @deprecated Deprecated in pnpm 11; configulator emits both legacy and
+     *             new keys for cross-version compatibility — pnpm 10 honors
+     *             the legacy keys, pnpm 11 honors `allowBuilds`. Prefer
+     *             `allowBuilds` as the input field going forward; entries
+     *             supplied here translate to `allowBuilds[<package>] = true`.
+     *
      * @default none (empty array)
      */
     readonly onlyBuiltDependencies?: Array<string>;
@@ -7951,6 +8101,12 @@ interface PnpmWorkspaceOptions {
      *
      * https://pnpm.io/settings#ignoredbuiltdependencies
      *
+     * @deprecated Deprecated in pnpm 11; configulator emits both legacy and
+     *             new keys for cross-version compatibility — pnpm 10 honors
+     *             the legacy keys, pnpm 11 honors `allowBuilds`. Prefer
+     *             `allowBuilds` as the input field going forward; entries
+     *             supplied here translate to `allowBuilds[<package>] = false`.
+     *
      * @default none (empty array)
      */
     readonly ignoredBuiltDependencies?: Array<string>;
@@ -8061,6 +8217,21 @@ declare class PnpmWorkspace extends Component {
      * See: https://pnpm.io/settings#minimumreleaseageexclude
      */
     minimumReleaseAgeExclude: Array<string>;
+    /**
+     * A map of package names to booleans controlling whether each package may
+     * execute lifecycle scripts during install. `true` allows the scripts;
+     * `false` silently blocks them.
+     *
+     * pnpm 11+ replaced `onlyBuiltDependencies` and `ignoredBuiltDependencies`
+     * with this single map. Configulator translates the deprecated input
+     * fields into `allowBuilds` automatically and emits both legacy and new
+     * keys in the generated YAML for pnpm 10/11 cross-version compatibility.
+     *
+     * See: https://pnpm.io/settings#allowbuilds
+     */
+    allowBuilds: {
+        [packageName: string]: boolean;
+    };
     /**
      * A list of package names that are allowed to execute "preinstall",
      * "install", and/or "postinstall" scripts during installation. Only the
@@ -8073,6 +8244,12 @@ declare class PnpmWorkspace extends Component {
      * versions of the package may run lifecycle scripts:
      *
      * See: https://pnpm.io/settings#onlybuiltdependencies
+     *
+     * @deprecated Deprecated in pnpm 11; configulator emits both legacy and
+     *             new keys for cross-version compatibility — pnpm 10 honors
+     *             the legacy keys, pnpm 11 honors `allowBuilds`. Prefer
+     *             `allowBuilds` as the input field going forward; entries
+     *             supplied here translate to `allowBuilds[<package>] = true`.
      */
     onlyBuiltDependencies: Array<string>;
     /**
@@ -8084,6 +8261,12 @@ declare class PnpmWorkspace extends Component {
      * lifecycle scripts are not needed.
      *
      * https://pnpm.io/settings#ignoredbuiltdependencies
+     *
+     * @deprecated Deprecated in pnpm 11; configulator emits both legacy and
+     *             new keys for cross-version compatibility — pnpm 10 honors
+     *             the legacy keys, pnpm 11 honors `allowBuilds`. Prefer
+     *             `allowBuilds` as the input field going forward; entries
+     *             supplied here translate to `allowBuilds[<package>] = false`.
      */
     ignoredBuiltDependencies: Array<string>;
     /**
@@ -9350,6 +9533,25 @@ declare class AwsCdkProject extends awscdk.AwsCdkTypeScriptApp {
     addDeploymentTarget(options: AwsDeploymentTargetOptions): AwsDeploymentTarget;
 }
 
+/**
+ * Emits a `.nvmrc` file at the project root containing the Node.js
+ * version pinned in {@link VERSION.NODE_WORKFLOWS}.
+ *
+ * The file gives `nvm`, `fnm`, `volta`, and IDE plugins a single
+ * source of truth for the Node version local development should use,
+ * matching the version every CI workflow installs via
+ * `actions/setup-node`. Without it, devs on hosts whose default Node
+ * is older than the floor required by tooling (Astro 6, Starlight,
+ * pnpm 11) silently break after a regen.
+ *
+ * Projen has no built-in `.nvmrc` knob — the closest input is
+ * `workflowNodeVersion`, which only drives CI. This component closes
+ * the local-dev gap.
+ */
+declare class Nvmrc extends Component {
+    constructor(project: Project);
+}
+
 /**
  * Provides structured project metadata consumed by AgentConfig, skills,
  * and other configulator features at synthesis time.
@@ -9611,5 +9813,81 @@ declare const COMPLETE_JOB_ID = "complete";
  */
 declare function addBuildCompleteJob(buildWorkflow: BuildWorkflow): void;
 
-export { AGENT_MODEL, AGENT_PLATFORM, AGENT_RULE_SCOPE, AGENT_TIER_ROLES, AGENT_TIER_VALUES, AUDIT_CATEGORY_ORDER, AgentConfig, ApiExtractor, AstroConfig, AstroOutput, AstroProject, AuditCategory, AuditMode, AuditSeverity, AwsCdkProject, AwsDeployWorkflow, AwsDeploymentConfig, AwsDeploymentTarget, AwsTeardownWorkflow, BUILT_IN_BUNDLES, CLAUDE_RULE_TARGET, COMPLETE_JOB_ID, DEFAULT_AC_THRESHOLDS, DEFAULT_AGENT_PATHS, DEFAULT_AGENT_TIERS, DEFAULT_API_EXTRACTOR_CONFIG_FILE, DEFAULT_API_EXTRACTOR_ENTRY_POINT, DEFAULT_API_EXTRACTOR_REPORT_FILENAME, DEFAULT_API_EXTRACTOR_REPORT_FOLDER, DEFAULT_AUDIT_REPORT_DIR, DEFAULT_BUNDLE_OVERRIDES, DEFAULT_DECOMPOSITION_TEMPLATE, DEFAULT_DISPATCH_MODEL, DEFAULT_DISPATCH_TO_HOUSEKEEPING_RATIO, DEFAULT_HOUSEKEEPING_MODEL, DEFAULT_ISSUE_PRIORITY, DEFAULT_ISSUE_STATUS, DEFAULT_ISSUE_TEMPLATES_BUNDLE_PATH_PATTERNS, DEFAULT_ISSUE_TEMPLATES_EMIT_CHECKER, DEFAULT_ISSUE_TEMPLATES_EMIT_STARTER, DEFAULT_ISSUE_TEMPLATES_ENABLED, DEFAULT_ISSUE_TEMPLATES_PATH, DEFAULT_ISSUE_TEMPLATES_REQUIRE_REFERENCE, DEFAULT_OFF_PEAK_CRON_EXAMPLE, DEFAULT_PARTIAL_UNBLOCK_COMMENT_TEMPLATE, DEFAULT_PRIORITY_LABELS, DEFAULT_PRODUCT_CONTEXT_PATH, DEFAULT_PROGRESS_FILES_ENABLED, DEFAULT_PROGRESS_FILES_FILENAME_PATTERN, DEFAULT_PROGRESS_FILES_FORMAT, DEFAULT_PROGRESS_FILES_STALE_AFTER_HOURS, DEFAULT_PROGRESS_FILES_STATE_DIR, DEFAULT_REQUIRE_PRODUCT_CONTEXT, DEFAULT_RESOLVED_ISSUE_DEFAULTS, DEFAULT_SAMPLE_COMPILER_OPTIONS, DEFAULT_SCHEDULED_TASKS_ROOT, DEFAULT_SCHEDULED_TASK_ENTRIES, DEFAULT_SHARED_EDITING_CONFLICT_STRATEGY, DEFAULT_SHARED_EDITING_EMIT_HELPER, DEFAULT_SHARED_EDITING_ENABLED, DEFAULT_SHARED_EDITING_VERIFY_COMMIT, DEFAULT_SHARED_INDEX_PATHS, DEFAULT_SKILL_EVALS_EMIT_RUNNER, DEFAULT_SKILL_EVALS_ENABLED, DEFAULT_SKILL_EVALS_SKILLS_ROOT, DEFAULT_SOURCES_THRESHOLDS, DEFAULT_STATE_FILE_PATH, DEFAULT_STATUS_LABELS, DEFAULT_TEARDOWN_BRANCH_PATTERNS, DEFAULT_TYPE_LABELS, DEFAULT_UNBLOCK_COMMENT_TEMPLATE, DEFAULT_UNBLOCK_DEPENDENTS_ENABLED, DEFAULT_UPSTREAM_CONFIGULATOR_ENABLED, DOCS_SYNC_AUDIT_SCHEMA_VERSION, JsiiFaker, LAYOUT_ENFORCEMENT, LAYOUT_ROOT_BY_PROJECT_TYPE, MAX_LABEL_DESCRIPTION_LENGTH, MCP_TRANSPORT, MERGE_METHODS, MIMIMUM_RELEASE_AGE, MINIMUM_RELEASE_AGE, MONOREPO_LAYOUT, MonorepoProject, PROD_DEPLOY_NAME, PROGRESS_FILES_FORMAT_VALUES, PnpmWorkspace, ProjectMetadata, REQUIREMENTS_WRITER_PATHS, ROOT_CI_TASK_NAME, ROOT_TURBO_TASK_NAME, ResetTask, SCHEDULED_TASK_MODEL_VALUES, SCOPE_CLASS_VALUES, SHARED_EDITING_CONFLICT_STRATEGY_VALUES, STARLIGHT_ROLE, SampleLang, StarlightProject, TestRunner, TsDocCoverageKind, TurboRepo, TurboRepoTask, TypeScriptConfig, TypeScriptProject, UNKNOWN_TYPE_FALLBACK_TIER, VALID_PRIORITY_VALUES, VALID_STATUS_VALUES, VERSION, VERSION_KEYS_SKIP, VERSION_NPM_PACKAGES, VSCodeConfig, Vitest, addApproveMergeUpgradeWorkflow, addBuildCompleteJob, addSyncLabelsWorkflow, agendaBundle, analyzeTsDocCoverage, auditReportJsonSchema, awsCdkBundle, baseBundle, bcmWriterBundle, buildBaseBundle, buildBcmWriterBundle, buildBuiltInBundles, buildBusinessModelsBundle, buildCheckBlockedProcedure, buildCompanyProfileBundle, buildCustomerProfileBundle, buildDocsSyncBundle, buildIndustryDiscoveryBundle, buildMaintenanceAuditBundle, buildOrchestratorConventionsContent, buildPeopleProfileBundle, buildRegulatoryResearchBundle, buildReport, buildRequirementsAnalystBundle, buildRequirementsReviewerBundle, buildRequirementsWriterBundle, buildResearchPipelineBundle, buildSoftwareProfileBundle, buildStandardsResearchBundle, buildUnblockDependentsProcedure, businessModelsBundle, checkDocSamplesProcedure, checkLinksProcedure, classifyIssueScope, classifyRun, companyProfileBundle, compileFencedSamples, createApiDiffCheck, createReferenceMismatchCheck, createTsdocCoverageCheck, customerProfileBundle, diffApiRollups, docsSyncBundle, emptyCategoryBuckets, extractApiProcedure, extractDocReferences, extractFencedSamples, formatLayoutViolation, formatStarlightSingletonViolation, getLatestEligibleVersion, githubWorkflowBundle, industryDiscoveryBundle, jestBundle, labelsForPhase, maintenanceAuditBundle, meetingAnalysisBundle, orchestratorBundle, parseApiRollup, peopleProfileBundle, persistAuditReport, pnpmBundle, prReviewBundle, projenBundle, referenceRecordToFinding, regulatoryResearchBundle, renderAgentTierCaseStatement, renderAgentTierSection, renderCheckDocSamplesProcedure, renderCheckLinksProcedure, renderCustomDocSectionBlock, renderCustomDocSections, renderExtractApiProcedure, renderFocusSection, renderIssueTemplatesBundleHook, renderIssueTemplatesCheckerScript, renderIssueTemplatesRuleContent, renderIssueTemplatesStarterPage, renderMeetingTypesSection, renderPriorityRulesSection, renderProgressFileName, renderProgressFilePath, renderProgressFilesBundleHook, renderProgressFilesRuleContent, renderRunRatioSection, renderRunRatioShellHelpers, renderScheduledTaskSkillFile, renderScheduledTasksSection, renderScopeGateSection, renderScopeGateShellHelpers, renderSharedEditingBundleHook, renderSharedEditingHelperScript, renderSharedEditingRuleContent, renderSkillEvalsBundleHook, renderSkillEvalsRuleContent, renderSkillEvalsRunnerScript, renderSourceTierExamples, renderStubIndexConventionRuleContent, renderUnblockDependentsScript, renderUnblockDependentsSection, requirementsAnalystBundle, requirementsReviewerBundle, requirementsWriterBundle, researchPipelineBundle, resolveAgentPaths, resolveAgentTiers, resolveAstroProjectOutdir, resolveAwsCdkProjectOutdir, resolveIssueDefaults, resolveIssueTemplates, resolveModelAlias, resolveOrchestratorAssets, resolveOutdirFromPackageName, resolveOverrideForLabels, resolveProgressFiles, resolveRunRatio, resolveScheduledTasks, resolveScopeGate, resolveSharedEditing, resolveSkillEvals, resolveTemplateVariables, resolveTypeScriptProjectOutdir, resolveUnblockDependents, runScan, slackBundle, softwareProfileBundle, standardsResearchBundle, tsdocRecordToFindings, turborepoBundle, typescriptBundle, upstreamConfigulatorDocsBundle, validateAgentTierConfig, validateIssueDefaultsConfig, validateIssueTemplatesConfig, validateMonorepoLayout, validateProgressFilesConfig, validateRunRatioConfig, validateScheduledTasksConfig, validateScopeGateConfig, validateSharedEditingConfig, validateSkillEvalsConfig, validateStarlightSingleton, validateUnblockDependentsConfig, vitestBundle };
-export type { AgentConfigOptions, AgentExpansionRules, AgentFeaturesConfig, AgentModel, AgentPathsConfig, AgentPlatform, AgentPlatformOverrides, AgentProcedure, AgentRule, AgentRuleBundle, AgentRuleScope, AgentSkill, AgentSubAgent, AgentSubAgentPlatformOverrides, AgentTier, AgentTierConfig, AgentTierEntry, AnalyzeTsDocCoverageOptions, ApiDiffCheckOptions, ApiDiffFinding, ApiDiffResult, ApiExtractorOptions, ApiExtractorReportOptions, ApiSurfaceEntry, ApproveMergeUpgradeOptions, AstroConfigOptions, AstroIntegrationSpec, AstroProjectOptions, AuditCheckRunner, AuditCheckRunnerContext, AuditFinding, AuditFindingBase, AuditLocation, AuditReport, AwsAccount, AwsCdkProjectOptions, AwsDeploymentTargetOptions, AwsLocalDeploymentConfig, AwsOrganization, AwsRegion, AwsTeardownWorkflowOptions, CiDeploymentConfig, ClassTypeOptions, ClaudeAutoModeConfig, ClaudeHookAction, ClaudeHookEntry, ClaudeHooksConfig, ClaudePermissionsConfig, ClaudeRuleTarget, ClaudeSandboxConfig, ClaudeSettingsConfig, CompileFencedSamplesOptions, CopilotHandoff, CursorHookAction, CursorHooksConfig, CursorSettingsConfig, CustomDocSection, DeployWorkflowOptions, DeploymentMetadata, DocReferenceRecord, EffectiveScopeThresholds, ExtractDocReferencesOptions, ExtractFencedSamplesOptions, FencedSampleRecord, FocusArea, FocusAreaMatch, FocusConfig, GitBranch, GitHubBoardMetadata, GitHubProjectMetadata, GitHubSprintMetadata, IDependencyResolver, IssueDefaultsConfig, IssueDefaultsOverride, IssueDefaultsPriority, IssueDefaultsStatus, IssueTemplatesConfig, LabelDefinition, LayoutEnforcement, LayoutViolation, LinkFailureFinding, McpServerConfig, McpTransport, MeetingArea, MeetingScope, MeetingType, MeetingTypeKind, MeetingsConfig, MergeMethod, MonorepoLayoutRoot, MonorepoProjectOptions, OrganizationMetadata, PnpmWorkspaceOptions, PriorityRule, ProgressFilesConfig, ProjectMetadataOptions, ReferenceMismatchCheckOptions, ReferenceMismatchFinding, RemoteCacheOptions, RepositoryMetadata, ResetTaskOptions, ResolvedAgentPaths, ResolvedAgentTier, ResolvedIssueDefaults, ResolvedIssueDefaultsEntry, ResolvedIssueTemplates, ResolvedProgressFiles, ResolvedProjectMetadata, ResolvedRunRatio, ResolvedScheduledTask, ResolvedScheduledTasks, ResolvedScopeGate, ResolvedScopeGateBundleOverride, ResolvedSharedEditing, ResolvedSkillEvals, ResolvedUnblockDependents, RunRatioConfig, RunScanOptions, RunScanResult, SampleCompilationFailure, SampleFailureFinding, ScheduledTaskEntry, ScheduledTaskModel, ScheduledTaskOverride, ScheduledTasksConfig, ScopeClass, ScopeGateBundleOverride, ScopeGateConfig, ScopeGateThresholds, SharedEditingConfig, SkillEvalsConfig, SlackMetadata, SourceTierExamples, StarlightEditLink, StarlightLogo, StarlightProjectOptions, StarlightRole, StarlightSidebarItem, StarlightSingletonViolation, StarlightSocialLink, SyncLabelsOptions, TemplateResolveResult, TsDocCoverageRecord, TsdocCoverageCheckOptions, TsdocCoverageFinding, TurboRepoOptions, TurboRepoTaskOptions, TypeScriptProjectOptions, UnblockDependentsConfig, UpstreamConfigulatorConfig, VersionKey, VitestConfigOptions, VitestOptions };
+/**
+ * Rewrites every `pnpm/action-setup@vX` step `uses` field reachable from
+ * a project's GitHub component (and its sub-projects) to the version
+ * pinned in {@link VERSION.PNPM_ACTION_SETUP_VERSION}.
+ *
+ * Projen's NodeProject and JsiiProject both hardcode a `pnpm/action-setup`
+ * pin in their generated build / release / upgrade workflows. When that
+ * pin lags behind the version required by the pnpm release we run in CI
+ * (e.g. v5 cannot install pnpm 11), the action installs the wrong pnpm
+ * version and CI breaks. This helper post-patches every workflow owned
+ * by `project.github` so the pin tracks our centralised constant.
+ *
+ * Two passes run in sequence:
+ *
+ * 1. **Eager step arrays.** Walks every {@link Component} on the
+ *    project (and on its sub-projects) for the well-known fields
+ *    enumerated in {@link STEP_ARRAY_FIELDS}. Projen's BuildWorkflow
+ *    and Release components hold their pnpm-setup steps in these
+ *    arrays before the workflow's lazy step closures resolve them.
+ * 2. **Direct workflow jobs.** Walks every job step on every
+ *    `GithubWorkflow` for jobs whose steps are eagerly populated
+ *    (e.g. the upgrade workflow). Steps held inside lazy closures
+ *    are skipped — those are reached via pass 1.
+ *
+ * @param project The project whose GitHub workflows should be patched.
+ */
+declare function pinPnpmActionSetup(project: Project): void;
+
+/**
+ * Rewrites every Node-version source reachable from a project's
+ * GitHub component (and its sub-projects) to the version pinned in
+ * {@link VERSION.NODE_WORKFLOWS}.
+ *
+ * Projen hardcodes `node-version: "lts/*"` in its release workflow
+ * generator (via {@code Publisher.workflowNodeVersion}); configulator-
+ * owned workflows already pass through {@link VERSION.NODE_WORKFLOWS}.
+ * Without this patch, the two sources disagree (release workflows
+ * install whatever Node lts/* resolves to; build / upgrade workflows
+ * install Node 24). This helper post-patches every Node-version
+ * source so a single source of truth — the centralised
+ * {@link VERSION.NODE_WORKFLOWS} constant — drives every workflow
+ * this repo and its consumers generate.
+ *
+ * Three passes run in sequence:
+ *
+ * 1. **Component Node-version fields.** Walks every {@link Component}
+ *    on the project (and on its sub-projects) and rewrites the
+ *    well-known fields enumerated in {@link NODE_VERSION_FIELDS} —
+ *    notably {@code Publisher.workflowNodeVersion}, which projen
+ *    renders into {@code tools.node.version} on the publish job
+ *    (and ultimately into the synthesized
+ *    `actions/setup-node` step).
+ * 2. **Component step arrays.** Walks every {@link Component} on the
+ *    project (and on its sub-projects) for the well-known step-array
+ *    fields enumerated in {@link STEP_ARRAY_FIELDS}. Projen's
+ *    BuildWorkflow and Release components hold their pre/post-build
+ *    steps in these arrays before the workflow's lazy step closures
+ *    resolve them.
+ * 3. **Direct workflow jobs.** Walks every job on every
+ *    `GithubWorkflow`. For each job:
+ *    - If `tools.node.version` is set (the lazy `setupTools` path
+ *      that synthesises the setup-node step at render time),
+ *      rewrite it.
+ *    - If `steps` is already an array (i.e. not a lazy closure),
+ *      patch any `actions/setup-node` step in place.
+ *
+ * The step-level patch only mutates `with["node-version"]`. Other
+ * fields on `with` (`cache`, `cache-dependency-path`,
+ * `registry-url`, `package-manager-cache`, etc.) are preserved
+ * untouched. The step's `uses` field is also left alone — this
+ * helper pins the input, not the action version pin.
+ *
+ * @param project The project whose GitHub workflows should be patched.
+ */
+declare function pinSetupNodeVersion(project: Project): void;
+
+export { AGENT_MODEL, AGENT_PLATFORM, AGENT_RULE_SCOPE, AGENT_TIER_ROLES, AGENT_TIER_VALUES, AUDIT_CATEGORY_ORDER, AgentConfig, ApiExtractor, AstroConfig, AstroOutput, AstroProject, AuditCategory, AuditMode, AuditSeverity, AwsCdkProject, AwsDeployWorkflow, AwsDeploymentConfig, AwsDeploymentTarget, AwsTeardownWorkflow, BUILT_IN_BUNDLES, BUNDLE_OWNERSHIP, CLAUDE_RULE_TARGET, COMPLETE_JOB_ID, DEFAULT_AC_THRESHOLDS, DEFAULT_AGENT_PATHS, DEFAULT_AGENT_TIERS, DEFAULT_API_EXTRACTOR_CONFIG_FILE, DEFAULT_API_EXTRACTOR_ENTRY_POINT, DEFAULT_API_EXTRACTOR_REPORT_FILENAME, DEFAULT_API_EXTRACTOR_REPORT_FOLDER, DEFAULT_AUDIT_REPORT_DIR, DEFAULT_BUNDLE_OVERRIDES, DEFAULT_DECOMPOSITION_TEMPLATE, DEFAULT_DISPATCH_MODEL, DEFAULT_DISPATCH_TO_HOUSEKEEPING_RATIO, DEFAULT_HOUSEKEEPING_MODEL, DEFAULT_ISSUE_PRIORITY, DEFAULT_ISSUE_STATUS, DEFAULT_ISSUE_TEMPLATES_BUNDLE_PATH_PATTERNS, DEFAULT_ISSUE_TEMPLATES_EMIT_CHECKER, DEFAULT_ISSUE_TEMPLATES_EMIT_STARTER, DEFAULT_ISSUE_TEMPLATES_ENABLED, DEFAULT_ISSUE_TEMPLATES_PATH, DEFAULT_ISSUE_TEMPLATES_REQUIRE_REFERENCE, DEFAULT_OFF_PEAK_CRON_EXAMPLE, DEFAULT_PARTIAL_UNBLOCK_COMMENT_TEMPLATE, DEFAULT_PRIORITY_LABELS, DEFAULT_PRODUCT_CONTEXT_PATH, DEFAULT_PROGRESS_FILES_ENABLED, DEFAULT_PROGRESS_FILES_FILENAME_PATTERN, DEFAULT_PROGRESS_FILES_FORMAT, DEFAULT_PROGRESS_FILES_STALE_AFTER_HOURS, DEFAULT_PROGRESS_FILES_STATE_DIR, DEFAULT_REQUIRE_PRODUCT_CONTEXT, DEFAULT_RESOLVED_ISSUE_DEFAULTS, DEFAULT_SAMPLE_COMPILER_OPTIONS, DEFAULT_SCHEDULED_TASKS_ROOT, DEFAULT_SCHEDULED_TASK_ENTRIES, DEFAULT_SHARED_EDITING_CONFLICT_STRATEGY, DEFAULT_SHARED_EDITING_EMIT_HELPER, DEFAULT_SHARED_EDITING_ENABLED, DEFAULT_SHARED_EDITING_VERIFY_COMMIT, DEFAULT_SHARED_INDEX_PATHS, DEFAULT_SKILL_EVALS_EMIT_RUNNER, DEFAULT_SKILL_EVALS_ENABLED, DEFAULT_SKILL_EVALS_SKILLS_ROOT, DEFAULT_SOURCES_THRESHOLDS, DEFAULT_STATE_FILE_PATH, DEFAULT_STATUS_LABELS, DEFAULT_TEARDOWN_BRANCH_PATTERNS, DEFAULT_TYPE_LABELS, DEFAULT_UNBLOCK_COMMENT_TEMPLATE, DEFAULT_UNBLOCK_DEPENDENTS_ENABLED, DEFAULT_UPSTREAM_CONFIGULATOR_ENABLED, DOCS_SYNC_AUDIT_SCHEMA_VERSION, JsiiFaker, LAYOUT_ENFORCEMENT, LAYOUT_ROOT_BY_PROJECT_TYPE, MAX_LABEL_DESCRIPTION_LENGTH, MCP_TRANSPORT, MERGE_METHODS, MIMIMUM_RELEASE_AGE, MINIMUM_RELEASE_AGE, MONOREPO_LAYOUT, MonorepoProject, Nvmrc, PROD_DEPLOY_NAME, PROGRESS_FILES_FORMAT_VALUES, PnpmWorkspace, ProjectMetadata, REQUIREMENTS_WRITER_PATHS, ROOT_CI_TASK_NAME, ROOT_TURBO_TASK_NAME, ResetTask, SCHEDULED_TASK_MODEL_VALUES, SCOPE_CLASS_VALUES, SHARED_EDITING_CONFLICT_STRATEGY_VALUES, STARLIGHT_ROLE, SampleLang, StarlightProject, TestRunner, TsDocCoverageKind, TurboRepo, TurboRepoTask, TypeScriptConfig, TypeScriptProject, UNKNOWN_TYPE_FALLBACK_TIER, VALID_PRIORITY_VALUES, VALID_STATUS_VALUES, VERSION, VERSION_KEYS_SKIP, VERSION_NPM_PACKAGES, VSCodeConfig, Vitest, addApproveMergeUpgradeWorkflow, addBuildCompleteJob, addSyncLabelsWorkflow, agendaBundle, analyzeTsDocCoverage, auditReportJsonSchema, awsCdkBundle, baseBundle, bcmWriterBundle, buildBaseBundle, buildBcmWriterBundle, buildBuiltInBundles, buildBusinessModelsBundle, buildCheckBlockedProcedure, buildCompanyProfileBundle, buildCustomerProfileBundle, buildDocsSyncBundle, buildIndustryDiscoveryBundle, buildMaintenanceAuditBundle, buildOrchestratorConventionsContent, buildPeopleProfileBundle, buildRegulatoryResearchBundle, buildReport, buildRequirementsAnalystBundle, buildRequirementsReviewerBundle, buildRequirementsWriterBundle, buildResearchPipelineBundle, buildSoftwareProfileBundle, buildStandardsResearchBundle, buildUnblockDependentsProcedure, businessModelsBundle, checkDocSamplesProcedure, checkLinksProcedure, classifyIssueScope, classifyRun, companyProfileBundle, compileFencedSamples, createApiDiffCheck, createReferenceMismatchCheck, createTsdocCoverageCheck, customerProfileBundle, diffApiRollups, docsSyncBundle, emptyCategoryBuckets, extractApiProcedure, extractDocReferences, extractFencedSamples, formatLayoutViolation, formatStarlightSingletonViolation, getLatestEligibleVersion, githubWorkflowBundle, hasAnyDocsEmittingBundle, hasAnyDownstreamIssueKindBundle, industryDiscoveryBundle, isPhaseLabelOwnedByExcluded, isScheduledTaskOwnedByExcluded, isTypeLabelOwnedByExcluded, jestBundle, labelsForPhase, maintenanceAuditBundle, meetingAnalysisBundle, orchestratorBundle, parseApiRollup, peopleProfileBundle, persistAuditReport, pinPnpmActionSetup, pinSetupNodeVersion, pnpmBundle, prReviewBundle, projenBundle, referenceRecordToFinding, regulatoryResearchBundle, renderAgentTierCaseStatement, renderAgentTierSection, renderCheckDocSamplesProcedure, renderCheckLinksProcedure, renderCustomDocSectionBlock, renderCustomDocSections, renderExtractApiProcedure, renderFocusSection, renderIssueTemplatesBundleHook, renderIssueTemplatesCheckerScript, renderIssueTemplatesRuleContent, renderIssueTemplatesStarterPage, renderMeetingTypesSection, renderPriorityRulesSection, renderProgressFileName, renderProgressFilePath, renderProgressFilesBundleHook, renderProgressFilesRuleContent, renderRunRatioSection, renderRunRatioShellHelpers, renderScheduledTaskSkillFile, renderScheduledTasksSection, renderScopeGateSection, renderScopeGateShellHelpers, renderSharedEditingBundleHook, renderSharedEditingHelperScript, renderSharedEditingRuleContent, renderSkillEvalsBundleHook, renderSkillEvalsRuleContent, renderSkillEvalsRunnerScript, renderSourceTierExamples, renderStubIndexConventionRuleContent, renderUnblockDependentsScript, renderUnblockDependentsSection, requirementsAnalystBundle, requirementsReviewerBundle, requirementsWriterBundle, researchPipelineBundle, resolveAgentPaths, resolveAgentTiers, resolveAstroProjectOutdir, resolveAwsCdkProjectOutdir, resolveIssueDefaults, resolveIssueTemplates, resolveModelAlias, resolveOrchestratorAssets, resolveOutdirFromPackageName, resolveOverrideForLabels, resolveProgressFiles, resolveRunRatio, resolveScheduledTasks, resolveScopeGate, resolveSharedEditing, resolveSkillEvals, resolveTemplateVariables, resolveTypeScriptProjectOutdir, resolveUnblockDependents, runScan, slackBundle, softwareProfileBundle, standardsResearchBundle, tsdocRecordToFindings, turborepoBundle, typescriptBundle, upstreamConfigulatorDocsBundle, validateAgentTierConfig, validateIssueDefaultsConfig, validateIssueTemplatesConfig, validateMonorepoLayout, validateProgressFilesConfig, validateRunRatioConfig, validateScheduledTasksConfig, validateScopeGateConfig, validateSharedEditingConfig, validateSkillEvalsConfig, validateStarlightSingleton, validateUnblockDependentsConfig, vitestBundle };
+export type { AgentConfigOptions, AgentExpansionRules, AgentFeaturesConfig, AgentModel, AgentPathsConfig, AgentPlatform, AgentPlatformOverrides, AgentProcedure, AgentRule, AgentRuleBundle, AgentRuleScope, AgentSkill, AgentSubAgent, AgentSubAgentPlatformOverrides, AgentTier, AgentTierConfig, AgentTierEntry, AnalyzeTsDocCoverageOptions, ApiDiffCheckOptions, ApiDiffFinding, ApiDiffResult, ApiExtractorOptions, ApiExtractorReportOptions, ApiSurfaceEntry, ApproveMergeUpgradeOptions, AstroConfigOptions, AstroIntegrationSpec, AstroProjectOptions, AuditCheckRunner, AuditCheckRunnerContext, AuditFinding, AuditFindingBase, AuditLocation, AuditReport, AwsAccount, AwsCdkProjectOptions, AwsDeploymentTargetOptions, AwsLocalDeploymentConfig, AwsOrganization, AwsRegion, AwsTeardownWorkflowOptions, BundleOwnership, CiDeploymentConfig, ClassTypeOptions, ClaudeAutoModeConfig, ClaudeHookAction, ClaudeHookEntry, ClaudeHooksConfig, ClaudePermissionsConfig, ClaudeRuleTarget, ClaudeSandboxConfig, ClaudeSettingsConfig, CompileFencedSamplesOptions, CopilotHandoff, CursorHookAction, CursorHooksConfig, CursorSettingsConfig, CustomDocSection, DeployWorkflowOptions, DeploymentMetadata, DocReferenceRecord, EffectiveScopeThresholds, ExtractDocReferencesOptions, ExtractFencedSamplesOptions, FencedSampleRecord, FocusArea, FocusAreaMatch, FocusConfig, GitBranch, GitHubBoardMetadata, GitHubProjectMetadata, GitHubSprintMetadata, IDependencyResolver, IssueDefaultsConfig, IssueDefaultsOverride, IssueDefaultsPriority, IssueDefaultsStatus, IssueTemplatesConfig, LabelDefinition, LayoutEnforcement, LayoutViolation, LinkFailureFinding, McpServerConfig, McpTransport, MeetingArea, MeetingScope, MeetingType, MeetingTypeKind, MeetingsConfig, MergeMethod, MonorepoLayoutRoot, MonorepoProjectOptions, OrganizationMetadata, PnpmWorkspaceOptions, PriorityRule, ProgressFilesConfig, ProjectMetadataOptions, ReferenceMismatchCheckOptions, ReferenceMismatchFinding, RemoteCacheOptions, RepositoryMetadata, ResetTaskOptions, ResolvedAgentPaths, ResolvedAgentTier, ResolvedIssueDefaults, ResolvedIssueDefaultsEntry, ResolvedIssueTemplates, ResolvedProgressFiles, ResolvedProjectMetadata, ResolvedRunRatio, ResolvedScheduledTask, ResolvedScheduledTasks, ResolvedScopeGate, ResolvedScopeGateBundleOverride, ResolvedSharedEditing, ResolvedSkillEvals, ResolvedUnblockDependents, RunRatioConfig, RunScanOptions, RunScanResult, SampleCompilationFailure, SampleFailureFinding, ScheduledTaskEntry, ScheduledTaskModel, ScheduledTaskOverride, ScheduledTasksConfig, ScopeClass, ScopeGateBundleOverride, ScopeGateConfig, ScopeGateThresholds, SharedEditingConfig, SkillEvalsConfig, SlackMetadata, SourceTierExamples, StarlightEditLink, StarlightLogo, StarlightProjectOptions, StarlightRole, StarlightSidebarItem, StarlightSingletonViolation, StarlightSocialLink, SyncLabelsOptions, TemplateResolveResult, TsDocCoverageRecord, TsdocCoverageCheckOptions, TsdocCoverageFinding, TurboRepoOptions, TurboRepoTaskOptions, TypeScriptProjectOptions, UnblockDependentsConfig, UpstreamConfigulatorConfig, VersionKey, VitestConfigOptions, VitestOptions };