@codedrifters/configulator 0.0.295 → 0.0.297

package/lib/index.js

@@ -195,6 +195,7 @@ __export(index_exports, {
   AwsDeploymentTarget: () => AwsDeploymentTarget,
   AwsTeardownWorkflow: () => AwsTeardownWorkflow,
   BUILT_IN_BUNDLES: () => BUILT_IN_BUNDLES,
+  BUNDLE_OWNERSHIP: () => BUNDLE_OWNERSHIP,
   CLAUDE_RULE_TARGET: () => CLAUDE_RULE_TARGET,
   COMPLETE_JOB_ID: () => COMPLETE_JOB_ID,
   DEFAULT_AC_THRESHOLDS: () => DEFAULT_AC_THRESHOLDS,
@@ -259,6 +260,7 @@ __export(index_exports, {
   MINIMUM_RELEASE_AGE: () => MINIMUM_RELEASE_AGE,
   MONOREPO_LAYOUT: () => MONOREPO_LAYOUT,
   MonorepoProject: () => MonorepoProject,
+  Nvmrc: () => Nvmrc,
   PROD_DEPLOY_NAME: () => PROD_DEPLOY_NAME,
   PROGRESS_FILES_FORMAT_VALUES: () => PROGRESS_FILES_FORMAT_VALUES,
   PnpmWorkspace: () => PnpmWorkspace,
@@ -338,7 +340,12 @@ __export(index_exports, {
   formatStarlightSingletonViolation: () => formatStarlightSingletonViolation,
   getLatestEligibleVersion: () => getLatestEligibleVersion,
   githubWorkflowBundle: () => githubWorkflowBundle,
+  hasAnyDocsEmittingBundle: () => hasAnyDocsEmittingBundle,
+  hasAnyDownstreamIssueKindBundle: () => hasAnyDownstreamIssueKindBundle,
   industryDiscoveryBundle: () => industryDiscoveryBundle,
+  isPhaseLabelOwnedByExcluded: () => isPhaseLabelOwnedByExcluded,
+  isScheduledTaskOwnedByExcluded: () => isScheduledTaskOwnedByExcluded,
+  isTypeLabelOwnedByExcluded: () => isTypeLabelOwnedByExcluded,
   jestBundle: () => jestBundle,
   labelsForPhase: () => labelsForPhase,
   maintenanceAuditBundle: () => maintenanceAuditBundle,
@@ -347,6 +354,8 @@ __export(index_exports, {
   parseApiRollup: () => parseApiRollup,
   peopleProfileBundle: () => peopleProfileBundle,
   persistAuditReport: () => persistAuditReport,
+  pinPnpmActionSetup: () => pinPnpmActionSetup,
+  pinSetupNodeVersion: () => pinSetupNodeVersion,
   pnpmBundle: () => pnpmBundle,
   prReviewBundle: () => prReviewBundle,
   projenBundle: () => projenBundle,
@@ -1404,8 +1413,8 @@ function resolveIssueTemplates(config) {
 function validateIssueTemplatesConfig(config) {
   return resolveIssueTemplates(config);
 }
-function renderIssueTemplatesRuleContent(it) {
-  if (!it.enabled) {
+function renderIssueTemplatesRuleContent(it, hasDownstreamBundles = true) {
+  if (!it.enabled || !hasDownstreamBundles) {
     return [
       "# Issue Templates",
       "",
@@ -11555,6 +11564,238 @@ function assertValidStateFilePath(stateFilePath) {
   }
 }
 
+// src/agent/bundles/bundle-ownership.ts
+var BUNDLE_OWNERSHIP = {
+  agenda: {
+    typeLabels: ["agenda"],
+    phaseLabelPrefixes: ["agenda:"],
+    scheduledTaskIds: ["worker-agenda"],
+    emitsDocs: true,
+    downstreamIssueKinds: true
+  },
+  "bcm-writer": {
+    typeLabels: ["bcm-document"],
+    phaseLabelPrefixes: ["bcm:"],
+    scheduledTaskIds: ["worker-bcm-writer"],
+    emitsDocs: true,
+    downstreamIssueKinds: true
+  },
+  "business-models": {
+    typeLabels: ["business-model"],
+    phaseLabelPrefixes: ["business-models:"],
+    scheduledTaskIds: ["worker-business-models"],
+    emitsDocs: true,
+    downstreamIssueKinds: true
+  },
+  "company-profile": {
+    typeLabels: ["company-profile"],
+    phaseLabelPrefixes: ["company:"],
+    scheduledTaskIds: ["worker-company-profile"],
+    emitsDocs: true,
+    downstreamIssueKinds: true
+  },
+  "customer-profile": {
+    typeLabels: ["customer-profile"],
+    phaseLabelPrefixes: ["customer:"],
+    scheduledTaskIds: ["worker-customer-profile"],
+    emitsDocs: true,
+    downstreamIssueKinds: true
+  },
+  "docs-sync": {
+    typeLabels: ["docs-sync"],
+    phaseLabelPrefixes: ["docs-sync:"],
+    scheduledTaskIds: ["worker-docs-sync"],
+    emitsDocs: true,
+    downstreamIssueKinds: true
+  },
+  "industry-discovery": {
+    typeLabels: ["industry-discovery"],
+    phaseLabelPrefixes: ["industry:"],
+    scheduledTaskIds: ["worker-industry-discovery"],
+    emitsDocs: true,
+    downstreamIssueKinds: true
+  },
+  "maintenance-audit": {
+    typeLabels: ["maintenance"],
+    phaseLabelPrefixes: ["maint:"],
+    scheduledTaskIds: ["worker-maintenance"],
+    emitsDocs: false,
+    downstreamIssueKinds: true
+  },
+  "meeting-analysis": {
+    typeLabels: ["meeting-processing"],
+    phaseLabelPrefixes: ["meeting:"],
+    scheduledTaskIds: ["worker-meeting-analysis"],
+    emitsDocs: true,
+    downstreamIssueKinds: true
+  },
+  orchestrator: {
+    // The orchestrator pipeline manager itself ships with the
+    // `worker-orchestrator` scheduled task. It owns no `type:*` label
+    // (it dispatches every type) and no phase-label prefix.
+    typeLabels: [],
+    phaseLabelPrefixes: [],
+    scheduledTaskIds: ["worker-orchestrator"],
+    emitsDocs: false,
+    downstreamIssueKinds: false
+  },
+  "people-profile": {
+    typeLabels: ["people-profile"],
+    phaseLabelPrefixes: ["people:"],
+    scheduledTaskIds: ["worker-people-profile"],
+    emitsDocs: true,
+    downstreamIssueKinds: true
+  },
+  "pr-review": {
+    typeLabels: ["pr-review"],
+    phaseLabelPrefixes: [],
+    scheduledTaskIds: ["worker-pr-review"],
+    emitsDocs: false,
+    downstreamIssueKinds: false
+  },
+  "regulatory-research": {
+    typeLabels: ["regulatory-research"],
+    phaseLabelPrefixes: ["regulatory:"],
+    scheduledTaskIds: ["worker-regulatory-research"],
+    emitsDocs: true,
+    downstreamIssueKinds: true
+  },
+  "requirements-analyst": {
+    typeLabels: ["requirement"],
+    phaseLabelPrefixes: ["req:"],
+    scheduledTaskIds: ["worker-requirements-analyst"],
+    emitsDocs: true,
+    downstreamIssueKinds: true
+  },
+  "requirements-reviewer": {
+    // Co-owns `type:requirement` with the analyst and writer; owns
+    // the `req:review` and `req:deprecate` phase labels exactly.
+    typeLabels: ["requirement"],
+    phaseLabelPrefixes: ["req:review", "req:deprecate"],
+    scheduledTaskIds: ["worker-requirements-reviewer"],
+    emitsDocs: true,
+    downstreamIssueKinds: true
+  },
+  "requirements-writer": {
+    // Co-owns `type:requirement` with the analyst and reviewer; owns
+    // the `req:write` phase label exactly.
+    typeLabels: ["requirement"],
+    phaseLabelPrefixes: ["req:write"],
+    scheduledTaskIds: ["worker-requirements-writer"],
+    emitsDocs: true,
+    downstreamIssueKinds: true
+  },
+  "research-pipeline": {
+    typeLabels: ["research"],
+    phaseLabelPrefixes: ["research:"],
+    scheduledTaskIds: ["worker-research"],
+    emitsDocs: true,
+    downstreamIssueKinds: true
+  },
+  "software-profile": {
+    typeLabels: ["software-profile"],
+    phaseLabelPrefixes: ["software:"],
+    scheduledTaskIds: ["worker-software-profile"],
+    emitsDocs: true,
+    downstreamIssueKinds: true
+  },
+  "standards-research": {
+    typeLabels: ["standards-research"],
+    phaseLabelPrefixes: ["standards:"],
+    scheduledTaskIds: ["worker-standards-research"],
+    emitsDocs: true,
+    downstreamIssueKinds: true
+  }
+};
+function isTypeLabelOwnedByExcluded(typeLabel, excludedBundles) {
+  if (excludedBundles.length === 0) {
+    return false;
+  }
+  for (const bundleName of excludedBundles) {
+    const ownership = BUNDLE_OWNERSHIP[bundleName];
+    if (!ownership) {
+      continue;
+    }
+    if (ownership.typeLabels.includes(typeLabel)) {
+      const owners = findOwnersOfTypeLabel(typeLabel);
+      const allExcluded = owners.every(
+        (owner) => excludedBundles.includes(owner)
+      );
+      if (allExcluded) {
+        return true;
+      }
+    }
+  }
+  return false;
+}
+function isPhaseLabelOwnedByExcluded(phaseLabel, excludedBundles) {
+  if (excludedBundles.length === 0) {
+    return false;
+  }
+  for (const bundleName of excludedBundles) {
+    const ownership = BUNDLE_OWNERSHIP[bundleName];
+    if (!ownership) {
+      continue;
+    }
+    for (const entry of ownership.phaseLabelPrefixes) {
+      if (entry.endsWith(":")) {
+        if (phaseLabel.startsWith(entry)) {
+          return true;
+        }
+      } else if (phaseLabel === entry) {
+        return true;
+      }
+    }
+  }
+  return false;
+}
+function isScheduledTaskOwnedByExcluded(taskId, excludedBundles) {
+  if (excludedBundles.length === 0) {
+    return false;
+  }
+  for (const bundleName of excludedBundles) {
+    const ownership = BUNDLE_OWNERSHIP[bundleName];
+    if (!ownership) {
+      continue;
+    }
+    if (ownership.scheduledTaskIds.includes(taskId)) {
+      return true;
+    }
+  }
+  return false;
+}
+function hasAnyDocsEmittingBundle(excludedBundles) {
+  for (const [bundleName, ownership] of Object.entries(BUNDLE_OWNERSHIP)) {
+    if (!ownership.emitsDocs) {
+      continue;
+    }
+    if (!excludedBundles.includes(bundleName)) {
+      return true;
+    }
+  }
+  return false;
+}
+function hasAnyDownstreamIssueKindBundle(excludedBundles) {
+  for (const [bundleName, ownership] of Object.entries(BUNDLE_OWNERSHIP)) {
+    if (!ownership.downstreamIssueKinds) {
+      continue;
+    }
+    if (!excludedBundles.includes(bundleName)) {
+      return true;
+    }
+  }
+  return false;
+}
+function findOwnersOfTypeLabel(typeLabel) {
+  const owners = [];
+  for (const [bundleName, ownership] of Object.entries(BUNDLE_OWNERSHIP)) {
+    if (ownership.typeLabels.includes(typeLabel)) {
+      owners.push(bundleName);
+    }
+  }
+  return owners;
+}
+
 // src/agent/bundles/scheduled-tasks.ts
 var SCHEDULED_TASK_MODEL_VALUES = ["opus", "sonnet", "haiku"];
 var SCHEDULED_TASK_KIND_VALUES = ["issue-worker", "pipeline"];
@@ -11819,17 +12060,23 @@ var DEFAULT_SCHEDULED_TASK_ENTRIES = [
     description: "Documentation-sync drift-detection and audit pipeline (scaffolding release \u2014 behavior carried by downstream child issues of the parent docs-sync epic)."
   }
 ];
-function resolveScheduledTasks(config) {
+function resolveScheduledTasks(config, excludeBundles = []) {
   const root = config?.root ?? DEFAULT_SCHEDULED_TASKS_ROOT;
   assertValidRoot(root);
   const merged = /* @__PURE__ */ new Map();
   for (const entry of DEFAULT_SCHEDULED_TASK_ENTRIES) {
+    if (isScheduledTaskOwnedByExcluded(entry.taskId, excludeBundles)) {
+      continue;
+    }
     merged.set(entry.taskId, entry);
   }
   if (config?.overrides) {
     for (const [taskId, override] of Object.entries(config.overrides)) {
       const existing = merged.get(taskId);
       if (!existing) {
+        if (isScheduledTaskOwnedByExcluded(taskId, excludeBundles)) {
+          continue;
+        }
         throw new Error(
           `ScheduledTasksConfig.overrides references unknown taskId ${JSON.stringify(
             taskId
@@ -11860,8 +12107,8 @@ function resolveScheduledTasks(config) {
     tasks: [...merged.values()]
   };
 }
-function validateScheduledTasksConfig(config) {
-  return resolveScheduledTasks(config);
+function validateScheduledTasksConfig(config, excludeBundles = []) {
+  return resolveScheduledTasks(config, excludeBundles);
 }
 function renderScheduledTasksSection(resolved) {
   const lines = [
@@ -12344,7 +12591,7 @@ function classifyIssueScope(body, gate, labels = []) {
     matchedLabel: effective.matchedLabel
   };
 }
-function renderScopeGateSection(gate) {
+function renderScopeGateSection(gate, excludeBundles = []) {
   const { acceptanceCriteria: ac, sources } = gate;
   const lines = [
     "## Scope gate",
@@ -12418,7 +12665,9 @@ function renderScopeGateSection(gate) {
       "   is in place."
     );
   }
-  const overrideEntries = Object.entries(gate.bundleOverrides);
+  const overrideEntries = Object.entries(gate.bundleOverrides).filter(
+    ([label]) => !isPhaseLabelOwnedByExcluded(label, excludeBundles)
+  );
   if (overrideEntries.length > 0) {
     lines.push(
       "",
@@ -12762,9 +13011,12 @@ function validateAgentTierConfig(config) {
   }
   return resolveAgentTiers(config);
 }
-function renderAgentTierSection(tiers) {
+function renderAgentTierSection(tiers, excludeBundles = []) {
+  const filtered = tiers.filter(
+    (entry) => !isTypeLabelOwnedByExcluded(entry.type, excludeBundles)
+  );
   const grouped = /* @__PURE__ */ new Map();
-  for (const entry of tiers) {
+  for (const entry of filtered) {
     const bucket = grouped.get(entry.tier) ?? [];
     bucket.push(entry);
     grouped.set(entry.tier, bucket);
@@ -14495,13 +14747,13 @@ var ORCHESTRATOR_CONVENTIONS_PREAMBLE = [
   "",
   'Practical implication for scheduled-task wiring: the `worker-orchestrator` scheduled task\'s `SKILL.md` instructs the **scheduled-task session itself** to read `.claude/agents/orchestrator.md` and execute its phase pipeline in-session, then use the `Agent` tool to delegate the picked work item to `issue-worker` (depth-1). The scheduled task does **not** call `Agent(subagent_type: "orchestrator")` \u2014 that would put the orchestrator at depth-1 and break the chain.'
 ].join("\n");
-function buildOrchestratorConventionsContent(tiers, scopeGate = resolveScopeGate(), runRatio = resolveRunRatio(), scheduledTasks = resolveScheduledTasks(), unblockDependents = resolveUnblockDependents()) {
+function buildOrchestratorConventionsContent(tiers, scopeGate = resolveScopeGate(), runRatio = resolveRunRatio(), scheduledTasks = resolveScheduledTasks(), unblockDependents = resolveUnblockDependents(), excludeBundles = []) {
   return [
     ORCHESTRATOR_CONVENTIONS_PREAMBLE,
     "",
-    renderAgentTierSection(tiers),
+    renderAgentTierSection(tiers, excludeBundles),
     "",
-    renderScopeGateSection(scopeGate),
+    renderScopeGateSection(scopeGate, excludeBundles),
     "",
     renderRunRatioSection(runRatio),
     "",
@@ -14510,11 +14762,14 @@ function buildOrchestratorConventionsContent(tiers, scopeGate = resolveScopeGate
     renderUnblockDependentsSection(unblockDependents)
   ].join("\n");
 }
-function resolveOrchestratorAssets(tierConfig, scopeGateConfig, runRatioConfig, scheduledTasksConfig, unblockDependentsConfig) {
+function resolveOrchestratorAssets(tierConfig, scopeGateConfig, runRatioConfig, scheduledTasksConfig, unblockDependentsConfig, excludeBundles = []) {
   const tiers = resolveAgentTiers(tierConfig);
   const scopeGate = resolveScopeGate(scopeGateConfig);
   const runRatio = resolveRunRatio(runRatioConfig);
-  const scheduledTasks = resolveScheduledTasks(scheduledTasksConfig);
+  const scheduledTasks = resolveScheduledTasks(
+    scheduledTasksConfig,
+    excludeBundles
+  );
   const unblockDependentsResolved = resolveUnblockDependents(
     unblockDependentsConfig
   );
@@ -14529,7 +14784,8 @@ function resolveOrchestratorAssets(tierConfig, scopeGateConfig, runRatioConfig,
       scopeGate,
       runRatio,
       scheduledTasks,
-      unblockDependentsResolved
+      unblockDependentsResolved,
+      excludeBundles
     ),
     procedure: buildCheckBlockedProcedure(tiers, scopeGate, runRatio),
     unblockDependentsProcedure: buildUnblockDependentsProcedure(
@@ -15522,6 +15778,7 @@ var PnpmWorkspace = class _PnpmWorkspace extends import_projen.Component {
     this.minimumReleaseAgeExclude = options.minimumReleaseAgeExclude ? ["@codedrifters/*", ...options.minimumReleaseAgeExclude] : ["@codedrifters/*"];
     this.onlyBuiltDependencies = options.onlyBuiltDependencies ? options.onlyBuiltDependencies : [];
     this.ignoredBuiltDependencies = options.ignoredBuiltDependencies ? options.ignoredBuiltDependencies : [];
+    this.allowBuilds = options.allowBuilds ?? {};
     this.subprojects = options.subprojects ?? [];
     this.defaultCatalog = options.defaultCatalog;
     this.namedCatalogs = options.namedCatalogs;
@@ -15545,11 +15802,35 @@ var PnpmWorkspace = class _PnpmWorkspace extends import_projen.Component {
         if (this.minimumReleaseAgeExclude.length > 0) {
           pnpmConfig.minimumReleaseAgeExclude = this.minimumReleaseAgeExclude;
         }
-        if (this.onlyBuiltDependencies.length > 0) {
-          pnpmConfig.onlyBuiltDependencies = this.onlyBuiltDependencies;
+        const mergedAllowBuilds = {};
+        for (const pkg of this.onlyBuiltDependencies) {
+          mergedAllowBuilds[pkg] = true;
         }
-        if (this.ignoredBuiltDependencies.length > 0) {
-          pnpmConfig.ignoreBuiltDependencies = this.ignoredBuiltDependencies;
+        for (const pkg of this.ignoredBuiltDependencies) {
+          mergedAllowBuilds[pkg] = false;
+        }
+        for (const [pkg, allowed] of Object.entries(this.allowBuilds)) {
+          mergedAllowBuilds[pkg] = allowed;
+        }
+        const allowList = [];
+        const denyList = [];
+        for (const [pkg, allowed] of Object.entries(mergedAllowBuilds)) {
+          if (allowed) {
+            allowList.push(pkg);
+          } else {
+            denyList.push(pkg);
+          }
+        }
+        allowList.sort();
+        denyList.sort();
+        if (allowList.length > 0) {
+          pnpmConfig.onlyBuiltDependencies = allowList;
+        }
+        if (denyList.length > 0) {
+          pnpmConfig.ignoredBuiltDependencies = denyList;
+        }
+        if (Object.keys(mergedAllowBuilds).length > 0) {
+          pnpmConfig.allowBuilds = mergedAllowBuilds;
         }
         if (this.defaultCatalog && Object.keys(this.defaultCatalog).length > 0) {
           pnpmConfig.catalog = this.defaultCatalog;
@@ -26830,11 +27111,11 @@ var VERSION = {
    * Version of `pnpm/action-setup` to use in GitHub workflows.
    * Tracks the version projen currently emits (see node_modules/projen/lib/javascript/node-project.js).
    */
-  PNPM_ACTION_SETUP_VERSION: "v5",
+  PNPM_ACTION_SETUP_VERSION: "v6.0.5",
   /**
    * Version of PNPM to use in workflows at github actions.
    */
-  PNPM_VERSION: "10.33.3",
+  PNPM_VERSION: "11.0.8",
   /**
    * Version of Projen to use.
    */
@@ -28304,7 +28585,8 @@ var AgentConfig = class _AgentConfig extends import_projen8.Component {
       this.project.gitignore.addPatterns(`/${resolvedProgressFiles.stateDir}/`);
     }
     const resolvedScheduledTasks = validateScheduledTasksConfig(
-      this.options.scheduledTasks
+      this.options.scheduledTasks,
+      this.options.excludeBundles ?? []
     );
     if (resolvedScheduledTasks.enabled) {
       for (const task of resolvedScheduledTasks.tasks) {
@@ -28512,7 +28794,8 @@ ${section}`
         }
       }
     }
-    if (this.options.tiers || this.options.scopeGate || this.options.runRatio || this.options.scheduledTasks || this.options.unblockDependents) {
+    const excludedBundleNames = this.options.excludeBundles ?? [];
+    if (this.options.tiers || this.options.scopeGate || this.options.runRatio || this.options.scheduledTasks || this.options.unblockDependents || excludedBundleNames.length > 0) {
       const orchestratorRule = ruleMap.get("orchestrator-conventions");
       if (orchestratorRule) {
         const { conventionsContent } = resolveOrchestratorAssets(
@@ -28520,7 +28803,8 @@ ${section}`
           this.options.scopeGate,
           this.options.runRatio,
           this.options.scheduledTasks,
-          this.options.unblockDependents
+          this.options.unblockDependents,
+          excludedBundleNames
         );
         if (conventionsContent !== orchestratorRule.content) {
           ruleMap.set("orchestrator-conventions", {
@@ -28653,11 +28937,13 @@ ${hook}`
     const resolvedIssueTemplatesForRules = resolveIssueTemplates(
       this.options.issueTemplates
     );
-    if (this.options.issueTemplates) {
+    const hasDownstreamBundles = hasAnyDownstreamIssueKindBundle(excludedBundleNames);
+    if (this.options.issueTemplates || !hasDownstreamBundles) {
       const issueTemplatesRule = ruleMap.get("issue-templates-convention");
       if (issueTemplatesRule) {
         const issueTemplatesContent = renderIssueTemplatesRuleContent(
-          resolvedIssueTemplatesForRules
+          resolvedIssueTemplatesForRules,
+          hasDownstreamBundles
         );
         if (issueTemplatesContent !== issueTemplatesRule.content) {
           ruleMap.set("issue-templates-convention", {
@@ -28667,7 +28953,10 @@ ${hook}`
         }
       }
     }
-    if (resolvedIssueTemplatesForRules.enabled) {
+    if (!hasAnyDocsEmittingBundle(excludedBundleNames)) {
+      ruleMap.delete("stub-index-convention");
+    }
+    if (resolvedIssueTemplatesForRules.enabled && hasDownstreamBundles) {
       for (const [ruleName, label] of ISSUE_TEMPLATES_BUNDLE_HOOKS) {
         const existing = ruleMap.get(ruleName);
         if (!existing) {
@@ -31020,7 +31309,7 @@ var JsiiFaker = class _JsiiFaker extends import_projen13.Component {
 };
 
 // src/projects/astro-project.ts
-var import_projen18 = require("projen");
+var import_projen19 = require("projen");
 var import_ts_deepmerge3 = require("ts-deepmerge");
 
 // src/projects/monorepo-layout.ts
@@ -31164,20 +31453,35 @@ function resolveAstroProjectOutdir(packageName) {
 }
 
 // src/projects/typescript-project.ts
-var import_projen17 = require("projen");
+var import_projen18 = require("projen");
 var import_javascript4 = require("projen/lib/javascript");
 var import_release = require("projen/lib/release");
 var import_ts_deepmerge2 = require("ts-deepmerge");
 
 // src/projects/monorepo-project.ts
-var import_github2 = require("projen/lib/github");
+var import_github4 = require("projen/lib/github");
 var import_javascript3 = require("projen/lib/javascript");
 var import_typescript3 = require("projen/lib/typescript");
 var import_ts_deepmerge = require("ts-deepmerge");
 
-// src/tasks/reset-task.ts
+// src/projects/nvmrc.ts
 var import_projen14 = require("projen");
-var ResetTask = class _ResetTask extends import_projen14.Component {
+var import_textfile5 = require("projen/lib/textfile");
+var Nvmrc = class extends import_projen14.Component {
+  constructor(project) {
+    super(project);
+    new import_textfile5.TextFile(project, ".nvmrc", {
+      // `lines` is joined with `\n` — adding an empty trailing entry
+      // produces a POSIX-friendly trailing newline (`24\n`).
+      lines: [VERSION.NODE_WORKFLOWS, ""],
+      readonly: true
+    });
+  }
+};
+
+// src/tasks/reset-task.ts
+var import_projen15 = require("projen");
+var ResetTask = class _ResetTask extends import_projen15.Component {
   constructor(project, options = {}) {
     super(project);
     this.project = project;
@@ -31250,12 +31554,12 @@ var ResetTask = class _ResetTask extends import_projen14.Component {
 };
 
 // src/vscode/vscode.ts
-var import_projen15 = require("projen");
-var VSCodeConfig = class extends import_projen15.Component {
+var import_projen16 = require("projen");
+var VSCodeConfig = class extends import_projen16.Component {
   constructor(project) {
     super(project);
-    const vsConfig = new import_projen15.vscode.VsCode(project);
-    const vsSettings = new import_projen15.vscode.VsCodeSettings(vsConfig);
+    const vsConfig = new import_projen16.vscode.VsCode(project);
+    const vsSettings = new import_projen16.vscode.VsCodeSettings(vsConfig);
     vsSettings.addSetting("editor.tabSize", 2);
     vsSettings.addSetting("editor.detectIndentation", false);
     vsSettings.addSetting("editor.bracketPairColorization.enabled", true);
@@ -31396,8 +31700,146 @@ function addBuildCompleteJob(buildWorkflow) {
   });
 }
 
+// src/workflows/pin-pnpm-action-setup.ts
+var import_github2 = require("projen/lib/github");
+var PNPM_ACTION_SETUP_PREFIX = "pnpm/action-setup@";
+var STEP_ARRAY_FIELDS = ["preBuildSteps", "postBuildSteps"];
+function pinPnpmActionSetup(project) {
+  const pinned = `${PNPM_ACTION_SETUP_PREFIX}${VERSION.PNPM_ACTION_SETUP_VERSION}`;
+  patchComponentStepArrays(project, pinned);
+  for (const sub of project.subprojects) {
+    patchComponentStepArrays(sub, pinned);
+  }
+  const github = import_github2.GitHub.of(project);
+  if (!github) {
+    return;
+  }
+  for (const workflow of github.workflows) {
+    for (const job of Object.values(workflow.jobs)) {
+      patchStepArray(getEagerSteps(job), pinned);
+    }
+  }
+}
+function patchComponentStepArrays(project, pinned) {
+  for (const component of project.components) {
+    for (const field of STEP_ARRAY_FIELDS) {
+      const steps = readStepArray(component, field);
+      if (steps !== void 0) {
+        patchStepArray(steps, pinned);
+      }
+    }
+  }
+}
+function readStepArray(component, field) {
+  const value = component[field];
+  return Array.isArray(value) ? value : void 0;
+}
+function getEagerSteps(job) {
+  if (typeof job !== "object" || job === null) {
+    return void 0;
+  }
+  const steps = job.steps;
+  return Array.isArray(steps) ? steps : void 0;
+}
+function patchStepArray(steps, pinned) {
+  if (!steps) {
+    return;
+  }
+  for (const step of steps) {
+    if (typeof step.uses === "string" && step.uses.startsWith(PNPM_ACTION_SETUP_PREFIX)) {
+      step.uses = pinned;
+    }
+  }
+}
+
+// src/workflows/pin-setup-node-version.ts
+var import_github3 = require("projen/lib/github");
+var SETUP_NODE_PREFIX = "actions/setup-node@";
+var STEP_ARRAY_FIELDS2 = ["preBuildSteps", "postBuildSteps"];
+var NODE_VERSION_FIELDS = ["workflowNodeVersion"];
+function pinSetupNodeVersion(project) {
+  const pinned = VERSION.NODE_WORKFLOWS;
+  patchComponentNodeVersionFields(project, pinned);
+  patchComponentStepArrays2(project, pinned);
+  for (const sub of project.subprojects) {
+    patchComponentNodeVersionFields(sub, pinned);
+    patchComponentStepArrays2(sub, pinned);
+  }
+  const github = import_github3.GitHub.of(project);
+  if (!github) {
+    return;
+  }
+  for (const workflow of github.workflows) {
+    for (const job of Object.values(workflow.jobs)) {
+      patchJobToolsNode(job, pinned);
+      patchStepArray2(getEagerSteps2(job), pinned);
+    }
+  }
+}
+function patchComponentNodeVersionFields(project, pinned) {
+  for (const component of project.components) {
+    for (const field of NODE_VERSION_FIELDS) {
+      const record = component;
+      const value = record[field];
+      if (typeof value === "string") {
+        record[field] = pinned;
+      }
+    }
+  }
+}
+function patchComponentStepArrays2(project, pinned) {
+  for (const component of project.components) {
+    for (const field of STEP_ARRAY_FIELDS2) {
+      const steps = readStepArray2(component, field);
+      if (steps !== void 0) {
+        patchStepArray2(steps, pinned);
+      }
+    }
+  }
+}
+function readStepArray2(component, field) {
+  const value = component[field];
+  return Array.isArray(value) ? value : void 0;
+}
+function getEagerSteps2(job) {
+  if (typeof job !== "object" || job === null) {
+    return void 0;
+  }
+  const steps = job.steps;
+  return Array.isArray(steps) ? steps : void 0;
+}
+function patchJobToolsNode(job, pinned) {
+  if (typeof job !== "object" || job === null) {
+    return;
+  }
+  const tools = job.tools;
+  if (typeof tools !== "object" || tools === null) {
+    return;
+  }
+  const node = tools.node;
+  if (typeof node !== "object" || node === null) {
+    return;
+  }
+  if (typeof node.version === "string") {
+    node.version = pinned;
+  }
+}
+function patchStepArray2(steps, pinned) {
+  if (!steps) {
+    return;
+  }
+  for (const step of steps) {
+    if (typeof step.uses === "string" && step.uses.startsWith(SETUP_NODE_PREFIX)) {
+      if (!step.with || typeof step.with !== "object") {
+        step.with = {};
+      }
+      step.with["node-version"] = pinned;
+    }
+  }
+}
+
 // src/workflows/sync-labels.ts
-var import_projen16 = require("projen");
+var import_projen17 = require("projen");
 var import_workflows_model4 = require("projen/lib/github/workflows-model");
 var DEFAULT_STATUS_LABELS = [
   {
@@ -31605,10 +32047,10 @@ ${offenders}`
     }
   });
 }
-var LabelsFile = class extends import_projen16.Component {
+var LabelsFile = class extends import_projen17.Component {
   constructor(project, labels) {
     super(project);
-    new import_projen16.YamlFile(project, LABELS_CONFIG_PATH, {
+    new import_projen17.YamlFile(project, LABELS_CONFIG_PATH, {
       obj: labels.map((l) => ({
         name: l.name,
         color: l.color,
@@ -31826,6 +32268,7 @@ var MonorepoProject = class extends import_typescript3.TypeScriptAppProject {
     this.configulatorRegistryConsumer = options.configulatorRegistryConsumer ?? true;
     this.layoutEnforcement = options.layoutEnforcement ?? LAYOUT_ENFORCEMENT.WARN;
     new VSCodeConfig(this);
+    new Nvmrc(this);
     new PnpmWorkspace(this, options.pnpmOptions?.pnpmWorkspaceOptions);
     if (options.turbo) {
       new TurboRepo(this, options.turboOptions);
@@ -31834,7 +32277,7 @@ var MonorepoProject = class extends import_typescript3.TypeScriptAppProject {
           name: "Build Sub Projects",
           run: `pnpm exec projen ${ROOT_CI_TASK_NAME}`
         },
-        import_github2.WorkflowSteps.uploadArtifact({
+        import_github4.WorkflowSteps.uploadArtifact({
           name: "Upload Turbo runs",
           if: "always()",
           continueOnError: true,
@@ -31944,6 +32387,8 @@ var MonorepoProject = class extends import_typescript3.TypeScriptAppProject {
    */
   preSynthesize() {
     super.preSynthesize();
+    pinPnpmActionSetup(this);
+    pinSetupNodeVersion(this);
     if (this.layoutEnforcement === LAYOUT_ENFORCEMENT.OFF) {
       return;
     }
@@ -31998,7 +32443,7 @@ var TestRunner = {
   JEST: "jest",
   VITEST: "vitest"
 };
-var TypeScriptProject = class extends import_projen17.typescript.TypeScriptProject {
+var TypeScriptProject = class extends import_projen18.typescript.TypeScriptProject {
   constructor(userOptions) {
     if (!(userOptions.parent instanceof MonorepoProject)) {
       throw new Error(
@@ -32308,10 +32753,10 @@ var AstroProject = class extends TypeScriptProject {
       adapter: options.adapter
     });
     if (options.sampleCode === true) {
-      new import_projen18.SampleFile(this, "src/pages/index.astro", {
+      new import_projen19.SampleFile(this, "src/pages/index.astro", {
         contents: DEFAULT_INDEX_ASTRO
       });
-      new import_projen18.SampleFile(this, "public/favicon.svg", {
+      new import_projen19.SampleFile(this, "public/favicon.svg", {
         contents: DEFAULT_FAVICON_SVG
       });
     }
@@ -32336,19 +32781,19 @@ var DEFAULT_FAVICON_SVG = `<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0
 `;
 
 // src/projects/aws-cdk-project.ts
-var import_projen21 = require("projen");
+var import_projen22 = require("projen");
 var import_javascript5 = require("projen/lib/javascript");
 var import_release2 = require("projen/lib/release");
 var import_ts_deepmerge4 = require("ts-deepmerge");
 
 // src/workflows/aws-deploy-workflow.ts
 var import_utils11 = __toESM(require_lib());
-var import_projen19 = require("projen");
+var import_projen20 = require("projen");
 var import_build = require("projen/lib/build");
-var import_github3 = require("projen/lib/github");
+var import_github5 = require("projen/lib/github");
 var import_workflows_model5 = require("projen/lib/github/workflows-model");
 var PROD_DEPLOY_NAME = "prod-deploy";
-var AwsDeployWorkflow = class _AwsDeployWorkflow extends import_projen19.Component {
+var AwsDeployWorkflow = class _AwsDeployWorkflow extends import_projen20.Component {
   constructor(project, options = {}) {
     super(project);
     this.project = project;
@@ -32461,7 +32906,7 @@ var AwsDeployWorkflow = class _AwsDeployWorkflow extends import_projen19.Compone
       );
     }
     this.rootProject = project.root;
-    const github = import_github3.GitHub.of(this.rootProject);
+    const github = import_github5.GitHub.of(this.rootProject);
     if (!github) {
       throw new Error(
         "AwsDeployWorkflow requires a GitHub component in the root project"
@@ -32596,7 +33041,7 @@ var AwsDeployWorkflow = class _AwsDeployWorkflow extends import_projen19.Compone
           name: "Build Sub Projects",
           run: `pnpm exec projen ${ROOT_CI_TASK_NAME}`
         },
-        import_github3.WorkflowSteps.uploadArtifact({
+        import_github5.WorkflowSteps.uploadArtifact({
           name: "Upload Turbo runs",
           if: "always()",
           continueOnError: true,
@@ -32612,8 +33057,8 @@ var AwsDeployWorkflow = class _AwsDeployWorkflow extends import_projen19.Compone
 };
 
 // src/workflows/aws-teardown-workflow.ts
-var import_projen20 = require("projen");
-var import_github4 = require("projen/lib/github");
+var import_projen21 = require("projen");
+var import_github6 = require("projen/lib/github");
 var import_workflows_model6 = require("projen/lib/github/workflows-model");
 var DEFAULT_TEARDOWN_BRANCH_PATTERNS = [
   "feat/*",
@@ -32634,7 +33079,7 @@ var resolveBranchPatterns = (explicit, targets) => {
   }
   return [...DEFAULT_TEARDOWN_BRANCH_PATTERNS];
 };
-var AwsTeardownWorkflow = class extends import_projen20.Component {
+var AwsTeardownWorkflow = class extends import_projen21.Component {
   constructor(rootProject, options) {
     super(rootProject);
     this.rootProject = rootProject;
@@ -32663,7 +33108,7 @@ var AwsTeardownWorkflow = class extends import_projen20.Component {
         "AwsTeardownWorkflow requires the root project to be a MonorepoProject"
       );
     }
-    const github = import_github4.GitHub.of(this.rootProject);
+    const github = import_github6.GitHub.of(this.rootProject);
     if (!github) {
       throw new Error(
         "AwsTeardownWorkflow requires a GitHub component in the root project"
@@ -32673,7 +33118,7 @@ var AwsTeardownWorkflow = class extends import_projen20.Component {
       deleteBranchPatterns,
       awsDestructionTargets
     );
-    const workflow = new import_github4.GithubWorkflow(github, "teardown-dev");
+    const workflow = new import_github6.GithubWorkflow(github, "teardown-dev");
     workflow.on({
       workflowDispatch: {},
       schedule: [
@@ -32816,7 +33261,7 @@ var AwsTeardownWorkflow = class extends import_projen20.Component {
 };
 
 // src/projects/aws-cdk-project.ts
-var AwsCdkProject = class extends import_projen21.awscdk.AwsCdkTypeScriptApp {
+var AwsCdkProject = class extends import_projen22.awscdk.AwsCdkTypeScriptApp {
   constructor(userOptions) {
     if (!(userOptions.parent instanceof MonorepoProject)) {
       throw new Error(
@@ -33013,7 +33458,7 @@ var AwsCdkProject = class extends import_projen21.awscdk.AwsCdkTypeScriptApp {
 };
 
 // src/projects/starlight-project.ts
-var import_projen22 = require("projen");
+var import_projen23 = require("projen");
 var STARLIGHT_ROLE = {
   DOCS: "docs",
   SITE: "site"
@@ -33055,10 +33500,10 @@ var StarlightProject = class extends AstroProject {
       turbo.compileTask.inputs.push("src/content/**");
     }
     if (userOptions.sampleContent === true) {
-      new import_projen22.SampleFile(this, "src/content/docs/index.mdx", {
+      new import_projen23.SampleFile(this, "src/content/docs/index.mdx", {
         contents: DEFAULT_INDEX_MDX
       });
-      new import_projen22.SampleFile(this, "src/content.config.ts", {
+      new import_projen23.SampleFile(this, "src/content.config.ts", {
         contents: DEFAULT_CONTENT_CONFIG_TS
       });
     }
@@ -33108,9 +33553,9 @@ export const collections = {
 
 // src/typescript/typescript-config.ts
 var import_node_path2 = require("path");
-var import_projen23 = require("projen");
+var import_projen24 = require("projen");
 var import_path2 = require("projen/lib/util/path");
-var TypeScriptConfig = class extends import_projen23.Component {
+var TypeScriptConfig = class extends import_projen24.Component {
   constructor(project) {
     super(project);
     let tsPaths = {};
@@ -33157,6 +33602,7 @@ var TypeScriptConfig = class extends import_projen23.Component {
   AwsDeploymentTarget,
   AwsTeardownWorkflow,
   BUILT_IN_BUNDLES,
+  BUNDLE_OWNERSHIP,
   CLAUDE_RULE_TARGET,
   COMPLETE_JOB_ID,
   DEFAULT_AC_THRESHOLDS,
@@ -33221,6 +33667,7 @@ var TypeScriptConfig = class extends import_projen23.Component {
   MINIMUM_RELEASE_AGE,
   MONOREPO_LAYOUT,
   MonorepoProject,
+  Nvmrc,
   PROD_DEPLOY_NAME,
   PROGRESS_FILES_FORMAT_VALUES,
   PnpmWorkspace,
@@ -33300,7 +33747,12 @@ var TypeScriptConfig = class extends import_projen23.Component {
   formatStarlightSingletonViolation,
   getLatestEligibleVersion,
   githubWorkflowBundle,
+  hasAnyDocsEmittingBundle,
+  hasAnyDownstreamIssueKindBundle,
   industryDiscoveryBundle,
+  isPhaseLabelOwnedByExcluded,
+  isScheduledTaskOwnedByExcluded,
+  isTypeLabelOwnedByExcluded,
   jestBundle,
   labelsForPhase,
   maintenanceAuditBundle,
@@ -33309,6 +33761,8 @@ var TypeScriptConfig = class extends import_projen23.Component {
   parseApiRollup,
   peopleProfileBundle,
   persistAuditReport,
+  pinPnpmActionSetup,
+  pinSetupNodeVersion,
   pnpmBundle,
   prReviewBundle,
   projenBundle,