@codedrifters/configulator 0.0.295 → 0.0.297

package/lib/index.mjs

@@ -1143,8 +1143,8 @@ function resolveIssueTemplates(config) {
 function validateIssueTemplatesConfig(config) {
   return resolveIssueTemplates(config);
 }
-function renderIssueTemplatesRuleContent(it) {
-  if (!it.enabled) {
+function renderIssueTemplatesRuleContent(it, hasDownstreamBundles = true) {
+  if (!it.enabled || !hasDownstreamBundles) {
     return [
       "# Issue Templates",
       "",
@@ -11294,6 +11294,238 @@ function assertValidStateFilePath(stateFilePath) {
   }
 }
 
+// src/agent/bundles/bundle-ownership.ts
+var BUNDLE_OWNERSHIP = {
+  agenda: {
+    typeLabels: ["agenda"],
+    phaseLabelPrefixes: ["agenda:"],
+    scheduledTaskIds: ["worker-agenda"],
+    emitsDocs: true,
+    downstreamIssueKinds: true
+  },
+  "bcm-writer": {
+    typeLabels: ["bcm-document"],
+    phaseLabelPrefixes: ["bcm:"],
+    scheduledTaskIds: ["worker-bcm-writer"],
+    emitsDocs: true,
+    downstreamIssueKinds: true
+  },
+  "business-models": {
+    typeLabels: ["business-model"],
+    phaseLabelPrefixes: ["business-models:"],
+    scheduledTaskIds: ["worker-business-models"],
+    emitsDocs: true,
+    downstreamIssueKinds: true
+  },
+  "company-profile": {
+    typeLabels: ["company-profile"],
+    phaseLabelPrefixes: ["company:"],
+    scheduledTaskIds: ["worker-company-profile"],
+    emitsDocs: true,
+    downstreamIssueKinds: true
+  },
+  "customer-profile": {
+    typeLabels: ["customer-profile"],
+    phaseLabelPrefixes: ["customer:"],
+    scheduledTaskIds: ["worker-customer-profile"],
+    emitsDocs: true,
+    downstreamIssueKinds: true
+  },
+  "docs-sync": {
+    typeLabels: ["docs-sync"],
+    phaseLabelPrefixes: ["docs-sync:"],
+    scheduledTaskIds: ["worker-docs-sync"],
+    emitsDocs: true,
+    downstreamIssueKinds: true
+  },
+  "industry-discovery": {
+    typeLabels: ["industry-discovery"],
+    phaseLabelPrefixes: ["industry:"],
+    scheduledTaskIds: ["worker-industry-discovery"],
+    emitsDocs: true,
+    downstreamIssueKinds: true
+  },
+  "maintenance-audit": {
+    typeLabels: ["maintenance"],
+    phaseLabelPrefixes: ["maint:"],
+    scheduledTaskIds: ["worker-maintenance"],
+    emitsDocs: false,
+    downstreamIssueKinds: true
+  },
+  "meeting-analysis": {
+    typeLabels: ["meeting-processing"],
+    phaseLabelPrefixes: ["meeting:"],
+    scheduledTaskIds: ["worker-meeting-analysis"],
+    emitsDocs: true,
+    downstreamIssueKinds: true
+  },
+  orchestrator: {
+    // The orchestrator pipeline manager itself ships with the
+    // `worker-orchestrator` scheduled task. It owns no `type:*` label
+    // (it dispatches every type) and no phase-label prefix.
+    typeLabels: [],
+    phaseLabelPrefixes: [],
+    scheduledTaskIds: ["worker-orchestrator"],
+    emitsDocs: false,
+    downstreamIssueKinds: false
+  },
+  "people-profile": {
+    typeLabels: ["people-profile"],
+    phaseLabelPrefixes: ["people:"],
+    scheduledTaskIds: ["worker-people-profile"],
+    emitsDocs: true,
+    downstreamIssueKinds: true
+  },
+  "pr-review": {
+    typeLabels: ["pr-review"],
+    phaseLabelPrefixes: [],
+    scheduledTaskIds: ["worker-pr-review"],
+    emitsDocs: false,
+    downstreamIssueKinds: false
+  },
+  "regulatory-research": {
+    typeLabels: ["regulatory-research"],
+    phaseLabelPrefixes: ["regulatory:"],
+    scheduledTaskIds: ["worker-regulatory-research"],
+    emitsDocs: true,
+    downstreamIssueKinds: true
+  },
+  "requirements-analyst": {
+    typeLabels: ["requirement"],
+    phaseLabelPrefixes: ["req:"],
+    scheduledTaskIds: ["worker-requirements-analyst"],
+    emitsDocs: true,
+    downstreamIssueKinds: true
+  },
+  "requirements-reviewer": {
+    // Co-owns `type:requirement` with the analyst and writer; owns
+    // the `req:review` and `req:deprecate` phase labels exactly.
+    typeLabels: ["requirement"],
+    phaseLabelPrefixes: ["req:review", "req:deprecate"],
+    scheduledTaskIds: ["worker-requirements-reviewer"],
+    emitsDocs: true,
+    downstreamIssueKinds: true
+  },
+  "requirements-writer": {
+    // Co-owns `type:requirement` with the analyst and reviewer; owns
+    // the `req:write` phase label exactly.
+    typeLabels: ["requirement"],
+    phaseLabelPrefixes: ["req:write"],
+    scheduledTaskIds: ["worker-requirements-writer"],
+    emitsDocs: true,
+    downstreamIssueKinds: true
+  },
+  "research-pipeline": {
+    typeLabels: ["research"],
+    phaseLabelPrefixes: ["research:"],
+    scheduledTaskIds: ["worker-research"],
+    emitsDocs: true,
+    downstreamIssueKinds: true
+  },
+  "software-profile": {
+    typeLabels: ["software-profile"],
+    phaseLabelPrefixes: ["software:"],
+    scheduledTaskIds: ["worker-software-profile"],
+    emitsDocs: true,
+    downstreamIssueKinds: true
+  },
+  "standards-research": {
+    typeLabels: ["standards-research"],
+    phaseLabelPrefixes: ["standards:"],
+    scheduledTaskIds: ["worker-standards-research"],
+    emitsDocs: true,
+    downstreamIssueKinds: true
+  }
+};
+function isTypeLabelOwnedByExcluded(typeLabel, excludedBundles) {
+  if (excludedBundles.length === 0) {
+    return false;
+  }
+  for (const bundleName of excludedBundles) {
+    const ownership = BUNDLE_OWNERSHIP[bundleName];
+    if (!ownership) {
+      continue;
+    }
+    if (ownership.typeLabels.includes(typeLabel)) {
+      const owners = findOwnersOfTypeLabel(typeLabel);
+      const allExcluded = owners.every(
+        (owner) => excludedBundles.includes(owner)
+      );
+      if (allExcluded) {
+        return true;
+      }
+    }
+  }
+  return false;
+}
+function isPhaseLabelOwnedByExcluded(phaseLabel, excludedBundles) {
+  if (excludedBundles.length === 0) {
+    return false;
+  }
+  for (const bundleName of excludedBundles) {
+    const ownership = BUNDLE_OWNERSHIP[bundleName];
+    if (!ownership) {
+      continue;
+    }
+    for (const entry of ownership.phaseLabelPrefixes) {
+      if (entry.endsWith(":")) {
+        if (phaseLabel.startsWith(entry)) {
+          return true;
+        }
+      } else if (phaseLabel === entry) {
+        return true;
+      }
+    }
+  }
+  return false;
+}
+function isScheduledTaskOwnedByExcluded(taskId, excludedBundles) {
+  if (excludedBundles.length === 0) {
+    return false;
+  }
+  for (const bundleName of excludedBundles) {
+    const ownership = BUNDLE_OWNERSHIP[bundleName];
+    if (!ownership) {
+      continue;
+    }
+    if (ownership.scheduledTaskIds.includes(taskId)) {
+      return true;
+    }
+  }
+  return false;
+}
+function hasAnyDocsEmittingBundle(excludedBundles) {
+  for (const [bundleName, ownership] of Object.entries(BUNDLE_OWNERSHIP)) {
+    if (!ownership.emitsDocs) {
+      continue;
+    }
+    if (!excludedBundles.includes(bundleName)) {
+      return true;
+    }
+  }
+  return false;
+}
+function hasAnyDownstreamIssueKindBundle(excludedBundles) {
+  for (const [bundleName, ownership] of Object.entries(BUNDLE_OWNERSHIP)) {
+    if (!ownership.downstreamIssueKinds) {
+      continue;
+    }
+    if (!excludedBundles.includes(bundleName)) {
+      return true;
+    }
+  }
+  return false;
+}
+function findOwnersOfTypeLabel(typeLabel) {
+  const owners = [];
+  for (const [bundleName, ownership] of Object.entries(BUNDLE_OWNERSHIP)) {
+    if (ownership.typeLabels.includes(typeLabel)) {
+      owners.push(bundleName);
+    }
+  }
+  return owners;
+}
+
 // src/agent/bundles/scheduled-tasks.ts
 var SCHEDULED_TASK_MODEL_VALUES = ["opus", "sonnet", "haiku"];
 var SCHEDULED_TASK_KIND_VALUES = ["issue-worker", "pipeline"];
@@ -11558,17 +11790,23 @@ var DEFAULT_SCHEDULED_TASK_ENTRIES = [
     description: "Documentation-sync drift-detection and audit pipeline (scaffolding release \u2014 behavior carried by downstream child issues of the parent docs-sync epic)."
   }
 ];
-function resolveScheduledTasks(config) {
+function resolveScheduledTasks(config, excludeBundles = []) {
   const root = config?.root ?? DEFAULT_SCHEDULED_TASKS_ROOT;
   assertValidRoot(root);
   const merged = /* @__PURE__ */ new Map();
   for (const entry of DEFAULT_SCHEDULED_TASK_ENTRIES) {
+    if (isScheduledTaskOwnedByExcluded(entry.taskId, excludeBundles)) {
+      continue;
+    }
     merged.set(entry.taskId, entry);
   }
   if (config?.overrides) {
     for (const [taskId, override] of Object.entries(config.overrides)) {
       const existing = merged.get(taskId);
       if (!existing) {
+        if (isScheduledTaskOwnedByExcluded(taskId, excludeBundles)) {
+          continue;
+        }
         throw new Error(
           `ScheduledTasksConfig.overrides references unknown taskId ${JSON.stringify(
             taskId
@@ -11599,8 +11837,8 @@ function resolveScheduledTasks(config) {
     tasks: [...merged.values()]
   };
 }
-function validateScheduledTasksConfig(config) {
-  return resolveScheduledTasks(config);
+function validateScheduledTasksConfig(config, excludeBundles = []) {
+  return resolveScheduledTasks(config, excludeBundles);
 }
 function renderScheduledTasksSection(resolved) {
   const lines = [
@@ -12083,7 +12321,7 @@ function classifyIssueScope(body, gate, labels = []) {
     matchedLabel: effective.matchedLabel
   };
 }
-function renderScopeGateSection(gate) {
+function renderScopeGateSection(gate, excludeBundles = []) {
   const { acceptanceCriteria: ac, sources } = gate;
   const lines = [
     "## Scope gate",
@@ -12157,7 +12395,9 @@ function renderScopeGateSection(gate) {
       "   is in place."
     );
   }
-  const overrideEntries = Object.entries(gate.bundleOverrides);
+  const overrideEntries = Object.entries(gate.bundleOverrides).filter(
+    ([label]) => !isPhaseLabelOwnedByExcluded(label, excludeBundles)
+  );
   if (overrideEntries.length > 0) {
     lines.push(
       "",
@@ -12501,9 +12741,12 @@ function validateAgentTierConfig(config) {
   }
   return resolveAgentTiers(config);
 }
-function renderAgentTierSection(tiers) {
+function renderAgentTierSection(tiers, excludeBundles = []) {
+  const filtered = tiers.filter(
+    (entry) => !isTypeLabelOwnedByExcluded(entry.type, excludeBundles)
+  );
   const grouped = /* @__PURE__ */ new Map();
-  for (const entry of tiers) {
+  for (const entry of filtered) {
     const bucket = grouped.get(entry.tier) ?? [];
     bucket.push(entry);
     grouped.set(entry.tier, bucket);
@@ -14234,13 +14477,13 @@ var ORCHESTRATOR_CONVENTIONS_PREAMBLE = [
   "",
   'Practical implication for scheduled-task wiring: the `worker-orchestrator` scheduled task\'s `SKILL.md` instructs the **scheduled-task session itself** to read `.claude/agents/orchestrator.md` and execute its phase pipeline in-session, then use the `Agent` tool to delegate the picked work item to `issue-worker` (depth-1). The scheduled task does **not** call `Agent(subagent_type: "orchestrator")` \u2014 that would put the orchestrator at depth-1 and break the chain.'
 ].join("\n");
-function buildOrchestratorConventionsContent(tiers, scopeGate = resolveScopeGate(), runRatio = resolveRunRatio(), scheduledTasks = resolveScheduledTasks(), unblockDependents = resolveUnblockDependents()) {
+function buildOrchestratorConventionsContent(tiers, scopeGate = resolveScopeGate(), runRatio = resolveRunRatio(), scheduledTasks = resolveScheduledTasks(), unblockDependents = resolveUnblockDependents(), excludeBundles = []) {
   return [
     ORCHESTRATOR_CONVENTIONS_PREAMBLE,
     "",
-    renderAgentTierSection(tiers),
+    renderAgentTierSection(tiers, excludeBundles),
     "",
-    renderScopeGateSection(scopeGate),
+    renderScopeGateSection(scopeGate, excludeBundles),
     "",
     renderRunRatioSection(runRatio),
     "",
@@ -14249,11 +14492,14 @@ function buildOrchestratorConventionsContent(tiers, scopeGate = resolveScopeGate
     renderUnblockDependentsSection(unblockDependents)
   ].join("\n");
 }
-function resolveOrchestratorAssets(tierConfig, scopeGateConfig, runRatioConfig, scheduledTasksConfig, unblockDependentsConfig) {
+function resolveOrchestratorAssets(tierConfig, scopeGateConfig, runRatioConfig, scheduledTasksConfig, unblockDependentsConfig, excludeBundles = []) {
   const tiers = resolveAgentTiers(tierConfig);
   const scopeGate = resolveScopeGate(scopeGateConfig);
   const runRatio = resolveRunRatio(runRatioConfig);
-  const scheduledTasks = resolveScheduledTasks(scheduledTasksConfig);
+  const scheduledTasks = resolveScheduledTasks(
+    scheduledTasksConfig,
+    excludeBundles
+  );
   const unblockDependentsResolved = resolveUnblockDependents(
     unblockDependentsConfig
   );
@@ -14268,7 +14514,8 @@ function resolveOrchestratorAssets(tierConfig, scopeGateConfig, runRatioConfig,
       scopeGate,
       runRatio,
       scheduledTasks,
-      unblockDependentsResolved
+      unblockDependentsResolved,
+      excludeBundles
     ),
     procedure: buildCheckBlockedProcedure(tiers, scopeGate, runRatio),
     unblockDependentsProcedure: buildUnblockDependentsProcedure(
@@ -15261,6 +15508,7 @@ var PnpmWorkspace = class _PnpmWorkspace extends Component {
     this.minimumReleaseAgeExclude = options.minimumReleaseAgeExclude ? ["@codedrifters/*", ...options.minimumReleaseAgeExclude] : ["@codedrifters/*"];
     this.onlyBuiltDependencies = options.onlyBuiltDependencies ? options.onlyBuiltDependencies : [];
     this.ignoredBuiltDependencies = options.ignoredBuiltDependencies ? options.ignoredBuiltDependencies : [];
+    this.allowBuilds = options.allowBuilds ?? {};
     this.subprojects = options.subprojects ?? [];
     this.defaultCatalog = options.defaultCatalog;
     this.namedCatalogs = options.namedCatalogs;
@@ -15284,11 +15532,35 @@ var PnpmWorkspace = class _PnpmWorkspace extends Component {
         if (this.minimumReleaseAgeExclude.length > 0) {
           pnpmConfig.minimumReleaseAgeExclude = this.minimumReleaseAgeExclude;
         }
-        if (this.onlyBuiltDependencies.length > 0) {
-          pnpmConfig.onlyBuiltDependencies = this.onlyBuiltDependencies;
+        const mergedAllowBuilds = {};
+        for (const pkg of this.onlyBuiltDependencies) {
+          mergedAllowBuilds[pkg] = true;
         }
-        if (this.ignoredBuiltDependencies.length > 0) {
-          pnpmConfig.ignoreBuiltDependencies = this.ignoredBuiltDependencies;
+        for (const pkg of this.ignoredBuiltDependencies) {
+          mergedAllowBuilds[pkg] = false;
+        }
+        for (const [pkg, allowed] of Object.entries(this.allowBuilds)) {
+          mergedAllowBuilds[pkg] = allowed;
+        }
+        const allowList = [];
+        const denyList = [];
+        for (const [pkg, allowed] of Object.entries(mergedAllowBuilds)) {
+          if (allowed) {
+            allowList.push(pkg);
+          } else {
+            denyList.push(pkg);
+          }
+        }
+        allowList.sort();
+        denyList.sort();
+        if (allowList.length > 0) {
+          pnpmConfig.onlyBuiltDependencies = allowList;
+        }
+        if (denyList.length > 0) {
+          pnpmConfig.ignoredBuiltDependencies = denyList;
+        }
+        if (Object.keys(mergedAllowBuilds).length > 0) {
+          pnpmConfig.allowBuilds = mergedAllowBuilds;
         }
         if (this.defaultCatalog && Object.keys(this.defaultCatalog).length > 0) {
           pnpmConfig.catalog = this.defaultCatalog;
@@ -26569,11 +26841,11 @@ var VERSION = {
    * Version of `pnpm/action-setup` to use in GitHub workflows.
    * Tracks the version projen currently emits (see node_modules/projen/lib/javascript/node-project.js).
    */
-  PNPM_ACTION_SETUP_VERSION: "v5",
+  PNPM_ACTION_SETUP_VERSION: "v6.0.5",
   /**
    * Version of PNPM to use in workflows at github actions.
    */
-  PNPM_VERSION: "10.33.3",
+  PNPM_VERSION: "11.0.8",
   /**
    * Version of Projen to use.
    */
@@ -28043,7 +28315,8 @@ var AgentConfig = class _AgentConfig extends Component8 {
       this.project.gitignore.addPatterns(`/${resolvedProgressFiles.stateDir}/`);
     }
     const resolvedScheduledTasks = validateScheduledTasksConfig(
-      this.options.scheduledTasks
+      this.options.scheduledTasks,
+      this.options.excludeBundles ?? []
     );
     if (resolvedScheduledTasks.enabled) {
       for (const task of resolvedScheduledTasks.tasks) {
@@ -28251,7 +28524,8 @@ ${section}`
         }
       }
     }
-    if (this.options.tiers || this.options.scopeGate || this.options.runRatio || this.options.scheduledTasks || this.options.unblockDependents) {
+    const excludedBundleNames = this.options.excludeBundles ?? [];
+    if (this.options.tiers || this.options.scopeGate || this.options.runRatio || this.options.scheduledTasks || this.options.unblockDependents || excludedBundleNames.length > 0) {
       const orchestratorRule = ruleMap.get("orchestrator-conventions");
       if (orchestratorRule) {
         const { conventionsContent } = resolveOrchestratorAssets(
@@ -28259,7 +28533,8 @@ ${section}`
           this.options.scopeGate,
           this.options.runRatio,
           this.options.scheduledTasks,
-          this.options.unblockDependents
+          this.options.unblockDependents,
+          excludedBundleNames
         );
         if (conventionsContent !== orchestratorRule.content) {
           ruleMap.set("orchestrator-conventions", {
@@ -28392,11 +28667,13 @@ ${hook}`
     const resolvedIssueTemplatesForRules = resolveIssueTemplates(
       this.options.issueTemplates
     );
-    if (this.options.issueTemplates) {
+    const hasDownstreamBundles = hasAnyDownstreamIssueKindBundle(excludedBundleNames);
+    if (this.options.issueTemplates || !hasDownstreamBundles) {
       const issueTemplatesRule = ruleMap.get("issue-templates-convention");
       if (issueTemplatesRule) {
         const issueTemplatesContent = renderIssueTemplatesRuleContent(
-          resolvedIssueTemplatesForRules
+          resolvedIssueTemplatesForRules,
+          hasDownstreamBundles
         );
         if (issueTemplatesContent !== issueTemplatesRule.content) {
           ruleMap.set("issue-templates-convention", {
@@ -28406,7 +28683,10 @@ ${hook}`
         }
       }
     }
-    if (resolvedIssueTemplatesForRules.enabled) {
+    if (!hasAnyDocsEmittingBundle(excludedBundleNames)) {
+      ruleMap.delete("stub-index-convention");
+    }
+    if (resolvedIssueTemplatesForRules.enabled && hasDownstreamBundles) {
       for (const [ruleName, label] of ISSUE_TEMPLATES_BUNDLE_HOOKS) {
         const existing = ruleMap.get(ruleName);
         if (!existing) {
@@ -30923,9 +31203,24 @@ import {
 } from "projen/lib/typescript";
 import { merge } from "ts-deepmerge";
 
-// src/tasks/reset-task.ts
+// src/projects/nvmrc.ts
 import { Component as Component14 } from "projen";
-var ResetTask = class _ResetTask extends Component14 {
+import { TextFile as TextFile6 } from "projen/lib/textfile";
+var Nvmrc = class extends Component14 {
+  constructor(project) {
+    super(project);
+    new TextFile6(project, ".nvmrc", {
+      // `lines` is joined with `\n` — adding an empty trailing entry
+      // produces a POSIX-friendly trailing newline (`24\n`).
+      lines: [VERSION.NODE_WORKFLOWS, ""],
+      readonly: true
+    });
+  }
+};
+
+// src/tasks/reset-task.ts
+import { Component as Component15 } from "projen";
+var ResetTask = class _ResetTask extends Component15 {
   constructor(project, options = {}) {
     super(project);
     this.project = project;
@@ -30998,8 +31293,8 @@ var ResetTask = class _ResetTask extends Component14 {
 };
 
 // src/vscode/vscode.ts
-import { Component as Component15, vscode } from "projen";
-var VSCodeConfig = class extends Component15 {
+import { Component as Component16, vscode } from "projen";
+var VSCodeConfig = class extends Component16 {
   constructor(project) {
     super(project);
     const vsConfig = new vscode.VsCode(project);
@@ -31144,8 +31439,146 @@ function addBuildCompleteJob(buildWorkflow) {
   });
 }
 
+// src/workflows/pin-pnpm-action-setup.ts
+import { GitHub as GitHub2 } from "projen/lib/github";
+var PNPM_ACTION_SETUP_PREFIX = "pnpm/action-setup@";
+var STEP_ARRAY_FIELDS = ["preBuildSteps", "postBuildSteps"];
+function pinPnpmActionSetup(project) {
+  const pinned = `${PNPM_ACTION_SETUP_PREFIX}${VERSION.PNPM_ACTION_SETUP_VERSION}`;
+  patchComponentStepArrays(project, pinned);
+  for (const sub of project.subprojects) {
+    patchComponentStepArrays(sub, pinned);
+  }
+  const github = GitHub2.of(project);
+  if (!github) {
+    return;
+  }
+  for (const workflow of github.workflows) {
+    for (const job of Object.values(workflow.jobs)) {
+      patchStepArray(getEagerSteps(job), pinned);
+    }
+  }
+}
+function patchComponentStepArrays(project, pinned) {
+  for (const component of project.components) {
+    for (const field of STEP_ARRAY_FIELDS) {
+      const steps = readStepArray(component, field);
+      if (steps !== void 0) {
+        patchStepArray(steps, pinned);
+      }
+    }
+  }
+}
+function readStepArray(component, field) {
+  const value = component[field];
+  return Array.isArray(value) ? value : void 0;
+}
+function getEagerSteps(job) {
+  if (typeof job !== "object" || job === null) {
+    return void 0;
+  }
+  const steps = job.steps;
+  return Array.isArray(steps) ? steps : void 0;
+}
+function patchStepArray(steps, pinned) {
+  if (!steps) {
+    return;
+  }
+  for (const step of steps) {
+    if (typeof step.uses === "string" && step.uses.startsWith(PNPM_ACTION_SETUP_PREFIX)) {
+      step.uses = pinned;
+    }
+  }
+}
+
+// src/workflows/pin-setup-node-version.ts
+import { GitHub as GitHub3 } from "projen/lib/github";
+var SETUP_NODE_PREFIX = "actions/setup-node@";
+var STEP_ARRAY_FIELDS2 = ["preBuildSteps", "postBuildSteps"];
+var NODE_VERSION_FIELDS = ["workflowNodeVersion"];
+function pinSetupNodeVersion(project) {
+  const pinned = VERSION.NODE_WORKFLOWS;
+  patchComponentNodeVersionFields(project, pinned);
+  patchComponentStepArrays2(project, pinned);
+  for (const sub of project.subprojects) {
+    patchComponentNodeVersionFields(sub, pinned);
+    patchComponentStepArrays2(sub, pinned);
+  }
+  const github = GitHub3.of(project);
+  if (!github) {
+    return;
+  }
+  for (const workflow of github.workflows) {
+    for (const job of Object.values(workflow.jobs)) {
+      patchJobToolsNode(job, pinned);
+      patchStepArray2(getEagerSteps2(job), pinned);
+    }
+  }
+}
+function patchComponentNodeVersionFields(project, pinned) {
+  for (const component of project.components) {
+    for (const field of NODE_VERSION_FIELDS) {
+      const record = component;
+      const value = record[field];
+      if (typeof value === "string") {
+        record[field] = pinned;
+      }
+    }
+  }
+}
+function patchComponentStepArrays2(project, pinned) {
+  for (const component of project.components) {
+    for (const field of STEP_ARRAY_FIELDS2) {
+      const steps = readStepArray2(component, field);
+      if (steps !== void 0) {
+        patchStepArray2(steps, pinned);
+      }
+    }
+  }
+}
+function readStepArray2(component, field) {
+  const value = component[field];
+  return Array.isArray(value) ? value : void 0;
+}
+function getEagerSteps2(job) {
+  if (typeof job !== "object" || job === null) {
+    return void 0;
+  }
+  const steps = job.steps;
+  return Array.isArray(steps) ? steps : void 0;
+}
+function patchJobToolsNode(job, pinned) {
+  if (typeof job !== "object" || job === null) {
+    return;
+  }
+  const tools = job.tools;
+  if (typeof tools !== "object" || tools === null) {
+    return;
+  }
+  const node = tools.node;
+  if (typeof node !== "object" || node === null) {
+    return;
+  }
+  if (typeof node.version === "string") {
+    node.version = pinned;
+  }
+}
+function patchStepArray2(steps, pinned) {
+  if (!steps) {
+    return;
+  }
+  for (const step of steps) {
+    if (typeof step.uses === "string" && step.uses.startsWith(SETUP_NODE_PREFIX)) {
+      if (!step.with || typeof step.with !== "object") {
+        step.with = {};
+      }
+      step.with["node-version"] = pinned;
+    }
+  }
+}
+
 // src/workflows/sync-labels.ts
-import { Component as Component16, YamlFile as YamlFile2 } from "projen";
+import { Component as Component17, YamlFile as YamlFile2 } from "projen";
 import { JobPermission as JobPermission4 } from "projen/lib/github/workflows-model";
 var DEFAULT_STATUS_LABELS = [
   {
@@ -31353,7 +31786,7 @@ ${offenders}`
     }
   });
 }
-var LabelsFile = class extends Component16 {
+var LabelsFile = class extends Component17 {
   constructor(project, labels) {
     super(project);
     new YamlFile2(project, LABELS_CONFIG_PATH, {
@@ -31574,6 +32007,7 @@ var MonorepoProject = class extends TypeScriptAppProject {
     this.configulatorRegistryConsumer = options.configulatorRegistryConsumer ?? true;
     this.layoutEnforcement = options.layoutEnforcement ?? LAYOUT_ENFORCEMENT.WARN;
     new VSCodeConfig(this);
+    new Nvmrc(this);
     new PnpmWorkspace(this, options.pnpmOptions?.pnpmWorkspaceOptions);
     if (options.turbo) {
       new TurboRepo(this, options.turboOptions);
@@ -31692,6 +32126,8 @@ var MonorepoProject = class extends TypeScriptAppProject {
    */
   preSynthesize() {
     super.preSynthesize();
+    pinPnpmActionSetup(this);
+    pinSetupNodeVersion(this);
     if (this.layoutEnforcement === LAYOUT_ENFORCEMENT.OFF) {
       return;
     }
@@ -32095,12 +32531,12 @@ import { merge as merge4 } from "ts-deepmerge";
 
 // src/workflows/aws-deploy-workflow.ts
 var import_utils11 = __toESM(require_lib());
-import { Component as Component17 } from "projen";
+import { Component as Component18 } from "projen";
 import { BuildWorkflow } from "projen/lib/build";
-import { GitHub as GitHub2, WorkflowSteps as WorkflowSteps2 } from "projen/lib/github";
+import { GitHub as GitHub4, WorkflowSteps as WorkflowSteps2 } from "projen/lib/github";
 import { JobPermission as JobPermission5 } from "projen/lib/github/workflows-model";
 var PROD_DEPLOY_NAME = "prod-deploy";
-var AwsDeployWorkflow = class _AwsDeployWorkflow extends Component17 {
+var AwsDeployWorkflow = class _AwsDeployWorkflow extends Component18 {
   constructor(project, options = {}) {
     super(project);
     this.project = project;
@@ -32213,7 +32649,7 @@ var AwsDeployWorkflow = class _AwsDeployWorkflow extends Component17 {
       );
     }
     this.rootProject = project.root;
-    const github = GitHub2.of(this.rootProject);
+    const github = GitHub4.of(this.rootProject);
     if (!github) {
       throw new Error(
         "AwsDeployWorkflow requires a GitHub component in the root project"
@@ -32364,8 +32800,8 @@ var AwsDeployWorkflow = class _AwsDeployWorkflow extends Component17 {
 };
 
 // src/workflows/aws-teardown-workflow.ts
-import { Component as Component18 } from "projen";
-import { GitHub as GitHub3, GithubWorkflow } from "projen/lib/github";
+import { Component as Component19 } from "projen";
+import { GitHub as GitHub5, GithubWorkflow } from "projen/lib/github";
 import { JobPermission as JobPermission6 } from "projen/lib/github/workflows-model";
 var DEFAULT_TEARDOWN_BRANCH_PATTERNS = [
   "feat/*",
@@ -32386,7 +32822,7 @@ var resolveBranchPatterns = (explicit, targets) => {
   }
   return [...DEFAULT_TEARDOWN_BRANCH_PATTERNS];
 };
-var AwsTeardownWorkflow = class extends Component18 {
+var AwsTeardownWorkflow = class extends Component19 {
   constructor(rootProject, options) {
     super(rootProject);
     this.rootProject = rootProject;
@@ -32415,7 +32851,7 @@ var AwsTeardownWorkflow = class extends Component18 {
         "AwsTeardownWorkflow requires the root project to be a MonorepoProject"
       );
     }
-    const github = GitHub3.of(this.rootProject);
+    const github = GitHub5.of(this.rootProject);
     if (!github) {
       throw new Error(
         "AwsTeardownWorkflow requires a GitHub component in the root project"
@@ -32860,9 +33296,9 @@ export const collections = {
 
 // src/typescript/typescript-config.ts
 import { relative as relative7 } from "path";
-import { Component as Component19 } from "projen";
+import { Component as Component20 } from "projen";
 import { ensureRelativePathStartsWithDot } from "projen/lib/util/path";
-var TypeScriptConfig = class extends Component19 {
+var TypeScriptConfig = class extends Component20 {
   constructor(project) {
     super(project);
     let tsPaths = {};
@@ -32908,6 +33344,7 @@ export {
   AwsDeploymentTarget,
   AwsTeardownWorkflow,
   BUILT_IN_BUNDLES,
+  BUNDLE_OWNERSHIP,
   CLAUDE_RULE_TARGET,
   COMPLETE_JOB_ID,
   DEFAULT_AC_THRESHOLDS,
@@ -32972,6 +33409,7 @@ export {
   MINIMUM_RELEASE_AGE,
   MONOREPO_LAYOUT,
   MonorepoProject,
+  Nvmrc,
   PROD_DEPLOY_NAME,
   PROGRESS_FILES_FORMAT_VALUES,
   PnpmWorkspace,
@@ -33051,7 +33489,12 @@ export {
   formatStarlightSingletonViolation,
   getLatestEligibleVersion,
   githubWorkflowBundle,
+  hasAnyDocsEmittingBundle,
+  hasAnyDownstreamIssueKindBundle,
   industryDiscoveryBundle,
+  isPhaseLabelOwnedByExcluded,
+  isScheduledTaskOwnedByExcluded,
+  isTypeLabelOwnedByExcluded,
   jestBundle,
   labelsForPhase,
   maintenanceAuditBundle,
@@ -33060,6 +33503,8 @@ export {
   parseApiRollup,
   peopleProfileBundle,
   persistAuditReport,
+  pinPnpmActionSetup,
+  pinSetupNodeVersion,
   pnpmBundle,
   prReviewBundle,
   projenBundle,