@hominis/fireforge 0.44.4 → 0.46.0

package/dist/src/types/commands/options.d.ts

@@ -3,6 +3,61 @@
  */
 import type { FirefoxProduct, ProjectLicense } from '../config.js';
 import type { PatchCategory } from './patches.js';
+/**
+ * `--dry-run`: print the planned change and exit without writing anything.
+ *
+ * Twenty-four option types spelled this field with five different doc
+ * comments for one behaviour. The contract is uniform and load-bearing — a
+ * dry run must perform every check the real run does and then write nothing —
+ * so it is stated once.
+ */
+export interface DryRunnable {
+    /** Print the planned change without writing anything. */
+    dryRun?: boolean;
+}
+/**
+ * `--yes`: answer the confirmation prompt non-interactively.
+ *
+ * Required for non-TTY runs, where there is no prompt to answer. It waives
+ * the prompt only — never a safety gate; flags that waive a refusal are
+ * spelled `--force*` and live on their own types.
+ */
+export interface Confirmable {
+    /** Skip the confirmation prompt; required for non-TTY runs. */
+    yes?: boolean;
+}
+/**
+ * `--force-unsafe`: proceed past a refusal the command would otherwise raise.
+ *
+ * Distinct from {@link Confirmable}: this waives a correctness gate (a
+ * projected-lint failure, a patchPolicy violation), not a prompt.
+ */
+export interface UnsafeOverridable {
+    /** Bypass refusals the command would otherwise raise. */
+    forceUnsafe?: boolean;
+}
+/**
+ * `--wait-lock [seconds]` for commands that take the ENGINE SESSION lock.
+ *
+ * Parsed at the CLI layer (`true` for the bare flag, meaning 60 seconds) and
+ * consumed there to bound the wait; the command implementation ignores it.
+ */
+export interface EngineLockWaitable {
+    /** Parsed `--wait-lock [seconds]` value; `true` means the 60-second default. */
+    waitLock?: number | boolean;
+}
+/**
+ * `--wait-lock [seconds]` for commands that mutate patch metadata under the
+ * PATCH DIRECTORY lock.
+ *
+ * Deliberately separate from {@link EngineLockWaitable}: the two flags share a
+ * spelling but bound different locks, and a reader needs to know which one a
+ * command contends for.
+ */
+export interface PatchLockWaitable {
+    /** Wait budget for the patch directory lock (`--wait-lock [seconds]`). */
+    waitLock?: number | boolean;
+}
 /**
  * Options for the setup command.
  */
@@ -51,7 +106,7 @@ export interface SourceSetOptions {
 /**
  * Options for the build command.
  */
-export interface BuildOptions {
+export interface BuildOptions extends EngineLockWaitable {
     /** Fast UI-only rebuild */
     ui?: boolean;
     /** Number of parallel jobs */
@@ -74,17 +129,11 @@ export interface BuildOptions {
      * multi-session checkout wants the hard stop.
      */
     refuseUnexportedDrift?: boolean;
-    /**
-     * Parsed `--wait-lock [seconds]` value (`true` for the bare flag, meaning
-     * 60). Consumed at the CLI layer to bound the engine-session-lock wait;
-     * the command implementation ignores it.
-     */
-    waitLock?: number | boolean;
 }
 /**
  * Options for the export command.
  */
-export interface ExportOptions {
+export interface ExportOptions extends EngineLockWaitable {
     /** Name/description for the patch */
     name?: string;
     /** Category classification */
@@ -130,12 +179,6 @@ export interface ExportOptions {
      * another patch, because the resulting queue fails `verify` immediately.
      */
     allowOverlap?: boolean;
-    /**
-     * Parsed `--wait-lock [seconds]` value (`true` for the bare flag, meaning
-     * 60). Consumed at the CLI layer to bound the engine-session-lock wait;
-     * the command implementation ignores it.
-     */
-    waitLock?: number | boolean;
     /**
      * Force a tier override on the new patch's `PatchMetadata.tier`. Only
      * `"branding"` is currently recognised — Commander rejects other values
@@ -158,16 +201,14 @@ export interface ExportOptions {
 /**
  * Options for the reset command.
  */
-export interface ResetOptions {
-    /** Skip confirmation prompt */
-    yes?: boolean;
+export interface ResetOptions extends Confirmable {
     /** Show what would be reset without doing it */
     dryRun?: boolean;
 }
 /**
  * Options for the discard command.
  */
-export interface DiscardOptions {
+export interface DiscardOptions extends Confirmable {
     /**
      * Restore to pristine upstream (HEAD) instead of the patch-applied
      * baseline, deleting patch-created files.
@@ -175,8 +216,6 @@ export interface DiscardOptions {
     toUpstream?: boolean;
     /** Show what would be discarded without doing it */
     dryRun?: boolean;
-    /** Skip confirmation prompt */
-    yes?: boolean;
 }
 /**
  * Options for the package command.
@@ -212,7 +251,7 @@ export interface ImportOptions {
 /**
  * Options for the re-export command.
  */
-export interface ReExportOptions {
+export interface ReExportOptions extends EngineLockWaitable {
     /** Re-export all patches */
     all?: boolean;
     /** Scan directories for new/removed files and update filesAffected */
@@ -282,12 +321,6 @@ export interface ReExportOptions {
      * which has explicit `--add` / `--remove` / `--clear` modes.
      */
     lintIgnore?: string[];
-    /**
-     * Parsed `--wait-lock [seconds]` value (`true` for the bare flag, meaning
-     * 60). Consumed at the CLI layer to bound the engine-session-lock wait;
-     * the command implementation ignores it.
-     */
-    waitLock?: number | boolean;
     /**
      * Refuse (non-zero exit, patch not written) a scan-less re-export when
      * unmanaged files exist adjacent to the patch's ownership, instead of
@@ -322,60 +355,47 @@ export interface ReExportOptions {
      * else still refuses.
      */
     expect?: string[];
+    /**
+     * Engine-relative files that are an APPROVED unmanaged exception
+     * (`--expect-unmanaged`, repeatable; requires
+     * `--refuse-adjacent-unmanaged`). The adjacency refusal is all-or-nothing
+     * without it: a project with a reviewed, deliberately unmanaged path beside
+     * a patch's ownership has to drop the flag entirely and hand-read the
+     * notice, which is a weaker belt than the one being disarmed. Approved
+     * paths are still LISTED — they are carved out of the refusal, not hidden.
+     */
+    expectUnmanaged?: string[];
 }
 /**
  * Options for the `fireforge patch tier` subcommand. Sets or clears the
  * `PatchMetadata.tier` field on a single patch without rewriting the
  * `.patch` file body — the manifest is the only thing that changes.
  */
-export interface PatchTierOptions {
-    /**
-     * Seconds to wait for the patch directory lock. This command mutates patch
-     * metadata under that lock.
-     */
-    waitLock?: number | boolean;
+export interface PatchTierOptions extends Confirmable, DryRunnable, PatchLockWaitable {
     /** Force the named tier on the patch. Only `"branding"` is recognised. */
     tier?: 'branding';
     /** Remove the `tier` override entirely, restoring auto-detection. */
     clear?: boolean;
-    /** Print the planned change without writing. */
-    dryRun?: boolean;
-    /** Skip the confirmation prompt (required for non-TTY). */
-    yes?: boolean;
 }
 /**
  * Options for the `fireforge patch lint-ignore` subcommand. Modes are
  * mutually exclusive — exactly one of `add`, `remove`, or `clear` must
  * be set per invocation.
  */
-export interface PatchLintIgnoreOptions {
-    /**
-     * Seconds to wait for the patch directory lock. This command mutates patch
-     * metadata under that lock.
-     */
-    waitLock?: number | boolean;
+export interface PatchLintIgnoreOptions extends Confirmable, DryRunnable, PatchLockWaitable {
     /** Lint check IDs to add to the patch's `lintIgnore` list (union, de-duped). */
     add?: string[];
     /** Lint check IDs to remove from the patch's `lintIgnore` list. */
     remove?: string[];
     /** Drop the `lintIgnore` field entirely. */
     clear?: boolean;
-    /** Print the planned change without writing. */
-    dryRun?: boolean;
-    /** Skip the confirmation prompt (required for non-TTY). */
-    yes?: boolean;
 }
 /**
  * Options for the `fireforge patch staged-dependency` subcommand. Modes are
  * mutually exclusive: add a declaration, remove one or more matching
  * declarations, or clear all staged dependencies from the patch.
  */
-export interface PatchStagedDependencyOptions {
-    /**
-     * Seconds to wait for the patch directory lock. This command mutates patch
-     * metadata under that lock.
-     */
-    waitLock?: number | boolean;
+export interface PatchStagedDependencyOptions extends Confirmable, DryRunnable, PatchLockWaitable {
     /** Add a staged dependency declaration. */
     add?: boolean;
     /** Remove matching staged dependency declarations. */
@@ -403,15 +423,11 @@ export interface PatchStagedDependencyOptions {
     owner?: string;
     /** Optional human-readable rationale stored with the declaration. */
     reason?: string;
-    /** Print the planned change without writing. */
-    dryRun?: boolean;
-    /** Skip the confirmation prompt (required for non-TTY). */
-    yes?: boolean;
 }
 /**
  * Options for the `patch split` command.
  */
-export interface PatchSplitOptions {
+export interface PatchSplitOptions extends Confirmable, PatchLockWaitable, UnsafeOverridable {
     /** Files to move out of the source patch (engine-relative). */
     files: string[];
     /** Name for the new patch (used in its filename slug). */
@@ -428,14 +444,8 @@ export interface PatchSplitOptions {
     after?: string;
     /** Preview without writing. */
     dryRun?: boolean;
-    /** Skip interactive confirmation (required for non-TTY). */
-    yes?: boolean;
-    /** Bypass projected-lint refusals. */
-    forceUnsafe?: boolean;
     /** Skip per-patch lint of the projected bodies. */
     skipLint?: boolean;
-    /** Wait budget for the patch directory lock (`--wait-lock [seconds]`). */
-    waitLock?: number | boolean;
 }
 /**
  * Options for the `fireforge patch move-files` subcommand. Without
@@ -444,7 +454,7 @@ export interface PatchSplitOptions {
  * With `--create --order <n>` the target patch is created at that order
  * and the files move into it as one split-style transaction.
  */
-export interface PatchMoveFilesOptions {
+export interface PatchMoveFilesOptions extends Confirmable, PatchLockWaitable, UnsafeOverridable {
     /** File paths relative to engine/ to move from the source patch to the target patch. */
     file?: string[];
     /** Create the target patch (transactional bootstrap of a split). Requires `order`. */
@@ -457,14 +467,8 @@ export interface PatchMoveFilesOptions {
     description?: string;
     /** Preview the create+move without writing. */
     dryRun?: boolean;
-    /** Skip interactive confirmation (required for non-TTY). */
-    yes?: boolean;
-    /** Bypass projected-lint refusals. */
-    forceUnsafe?: boolean;
     /** Skip per-patch lint of the projected bodies. */
     skipLint?: boolean;
-    /** Wait budget for the patch directory lock (`--wait-lock [seconds]`). */
-    waitLock?: number | boolean;
 }
 /**
  * Options for the rebase command.
@@ -536,7 +540,7 @@ export interface RunOptions {
 /**
  * Options for the test command.
  */
-export interface TestOptions {
+export interface TestOptions extends EngineLockWaitable {
     /** Run tests in headless mode */
     headless?: boolean;
     /**
@@ -601,6 +605,15 @@ export interface TestOptions {
     marionettePort?: number;
     /** Kill a recognized stale browser process holding the Marionette port, then continue. */
     killStaleMarionette?: boolean;
+    /**
+     * Terminate harness helper processes (`xpcshell` httpd, `pywebsocket`,
+     * `ssltunnel`, `moz-http2`) that survived an earlier run in this
+     * project's objdir. The census itself runs on EVERY test dispatch and is
+     * report-only; this flag opts into the kill. Survivors slow later runs
+     * without appearing in their output, so the visibility is the default and
+     * the termination is the choice.
+     */
+    reapOrphans?: boolean;
     /** Permit tests against packageable engine edits newer than the last successful build. */
     allowStaleBuild?: boolean;
     /**
@@ -641,19 +654,11 @@ export interface TestOptions {
      * checkers that consume a sample artifact after the run.
      */
     perfSamples?: string;
-    /**
-     * Parsed `--wait-lock [seconds]` value (`true` for the bare flag, meaning
-     * 60). Consumed at the CLI layer to bound the engine-session-lock wait;
-     * the command implementation ignores it.
-     */
-    waitLock?: number | boolean;
 }
 /**
  * Options for the furnace apply command.
  */
-export interface FurnaceApplyOptions {
-    /** Show what would be changed without writing */
-    dryRun?: boolean;
+export interface FurnaceApplyOptions extends DryRunnable {
     /** Proceed despite baseVersion drift (stale overrides) */
     force?: boolean;
     /** Watch component directories and re-apply on changes */
@@ -675,9 +680,7 @@ export interface FurnacePreviewOptions {
 /**
  * Options for the furnace deploy command.
  */
-export interface FurnaceDeployOptions {
-    /** Show what would be changed without writing */
-    dryRun?: boolean;
+export interface FurnaceDeployOptions extends DryRunnable {
     /** Proceed despite baseVersion drift (stale overrides) */
     force?: boolean;
     /** Skip the validation step (apply only, no accessibility/compatibility checks) */
@@ -692,9 +695,7 @@ export interface FurnaceDeployOptions {
 /**
  * Options for the furnace refresh command.
  */
-export interface FurnaceRefreshOptions {
-    /** Show what would change without modifying files */
-    dryRun?: boolean;
+export interface FurnaceRefreshOptions extends DryRunnable {
     /** Refresh all overrides in a single batch */
     all?: boolean;
     /** Conflict resolution strategy for automated use (ours = keep local, theirs = accept upstream) */
@@ -705,9 +706,7 @@ export interface FurnaceRefreshOptions {
 /**
  * Options for the furnace sync command.
  */
-export interface FurnaceSyncOptions {
-    /** Show what would change without modifying files */
-    dryRun?: boolean;
+export interface FurnaceSyncOptions extends DryRunnable {
     /** Conflict resolution strategy for three-way merge (ours = keep local, theirs = accept upstream) */
     strategy?: 'ours' | 'theirs';
     /**
@@ -734,12 +733,10 @@ export interface FurnaceOverrideOptions {
     description?: string;
 }
 /**
- * Options for the furnace remove command.
+ * Options for the furnace remove command. `--yes` is the only flag it takes,
+ * so the type is the confirmation mixin under a command-specific name.
  */
-export interface FurnaceRemoveOptions {
-    /** Skip confirmation prompt */
-    yes?: boolean;
-}
+export type FurnaceRemoveOptions = Confirmable;
 /**
  * Options for the furnace create command.
  */
@@ -846,15 +843,9 @@ export interface RegisterOptions {
 /**
  * Options for the patch delete command.
  */
-export interface PatchDeleteOptions {
-    /** Skip confirmation prompt; required for non-TTY runs. */
-    yes?: boolean;
-    /** Print what would happen without writing anything. */
-    dryRun?: boolean;
+export interface PatchDeleteOptions extends Confirmable, DryRunnable, PatchLockWaitable {
     /** Bypass the hard refusal when later patches depend on the target. */
     forceUnsafe?: boolean;
-    /** Wait budget for the patch directory lock (`--wait-lock [seconds]`). */
-    waitLock?: number | boolean;
 }
 /**
  * Options for the `fireforge patch rename` subcommand. Updates the patch's
@@ -863,7 +854,7 @@ export interface PatchDeleteOptions {
  * for the case where the body is already correct but the patch's identity
  * describes a pre-shrink scope.
  */
-export interface PatchRenameOptions {
+export interface PatchRenameOptions extends Confirmable, DryRunnable, PatchLockWaitable, UnsafeOverridable {
     /**
      * New human-readable name. Sanitised the same way `export --name`
      * sanitises into the filename slug (lowercase, non-alphanumerics
@@ -890,40 +881,22 @@ export interface PatchRenameOptions {
      * without touching the description).
      */
     description?: string;
-    /** Print the planned change without writing. */
-    dryRun?: boolean;
-    /** Skip the confirmation prompt (required for non-TTY). */
-    yes?: boolean;
-    /** Bypass force-mode patchPolicy refusals. */
-    forceUnsafe?: boolean;
-    /** Wait budget for the patch directory lock (`--wait-lock [seconds]`). */
-    waitLock?: number | boolean;
 }
 /**
  * Options for the patch reorder command.
  */
-export interface PatchReorderOptions {
+export interface PatchReorderOptions extends PatchLockWaitable {
     to?: number;
     before?: string;
     after?: string;
     yes?: boolean;
     dryRun?: boolean;
     forceUnsafe?: boolean;
-    /** Wait budget for the patch directory lock (`--wait-lock [seconds]`). */
-    waitLock?: number | boolean;
 }
 /**
  * Options for the patch compact command.
  */
-export interface PatchCompactOptions {
-    /** Skip confirmation prompt; required for non-TTY runs. */
-    yes?: boolean;
-    /** Print what would happen without writing anything. */
-    dryRun?: boolean;
-    /** Bypass force-mode patchPolicy refusals. */
-    forceUnsafe?: boolean;
-    /** Wait budget for the patch directory lock (`--wait-lock [seconds]`). */
-    waitLock?: number | boolean;
+export interface PatchCompactOptions extends Confirmable, DryRunnable, PatchLockWaitable, UnsafeOverridable {
 }
 /**
  * Options for the status command.

package/dist/src/types/commands/patches.d.ts

@@ -32,13 +32,24 @@ export interface PatchResult {
     /** Whether the patch was auto-resolved (new file vs existing file conflict) */
     autoResolved?: boolean;
     /**
-     * Pre-existing content of files the auto-resolve overwrote, keyed by
-     * engine-relative path. Kept for the RUN's duration (not just the retry):
-     * if a later patch fails and `rollbackPatches` reverse-applies this one,
-     * reversing a new-file patch DELETES the file — these snapshots are the
-     * only way to restore what was there before the auto-resolve.
+     * Pre-existing BYTES of files the auto-resolve overwrote (or, for a binary
+     * new file, removed), keyed by engine-relative path. Kept for the RUN's
+     * duration (not just the retry): if a later patch fails and
+     * `rollbackPatches` reverse-applies this one, reversing a new-file patch
+     * DELETES the file — these snapshots are the only way to restore what was
+     * there before the auto-resolve.
+     *
+     * Raw bytes rather than decoded text, because the same snapshot has to
+     * restore a binary target byte-for-byte.
+     *
+     * Typed `Uint8Array`, not `Buffer`: this interface is published, and the
+     * emitted `.d.ts` naming a Node global made a consumer without
+     * `@types/node` fail to compile against the package (`TS2591` in the
+     * pack smoke test). Every `Buffer` assigns to it — `Buffer` extends
+     * `Uint8Array` — and `fs.writeFile` accepts it, so nothing at the call
+     * sites changes.
      */
-    autoResolvedOriginals?: Map<string, string>;
+    autoResolvedOriginals?: Map<string, Uint8Array>;
 }
 /**
  * Extended patch information with metadata.

package/dist/src/types/config.d.ts

@@ -12,6 +12,13 @@ export interface FirefoxConfig {
     product: FirefoxProduct;
     /** Optional pinned SHA-256 for the resolved source archive */
     sha256?: string;
+    /**
+     * Accept a freshly downloaded archive when Mozilla's published SHA256SUMS
+     * cannot be fetched or does not list it, instead of failing closed. The
+     * download is then trusted on TLS alone (with a warning). Ignored when
+     * `sha256` is pinned. Default false.
+     */
+    allowUnverifiedDownload?: boolean;
     /**
      * Optional release-candidate build directory (e.g. "build2"). When set,
      * the source archive resolves under
@@ -124,6 +131,8 @@ export interface FireForgeConfig {
     firefox: FirefoxConfig;
     /** Build settings */
     build?: BuildConfig;
+    /** Post-build packaging audit configuration */
+    buildAudit?: BuildAuditConfig;
     /** Test command defaults */
     test?: TestConfig;
     /** Optional project-specific external toolchains checked by doctor. */
@@ -192,6 +201,31 @@ export interface TypecheckConfig {
 /**
  * Wire command configuration.
  */
+/**
+ * One deliberately-unpackaged source, declared so the post-build audit stops
+ * reporting it as a missing registration.
+ *
+ * `reason` is required and must be non-empty. A carve-out whose rationale
+ * nobody wrote down is indistinguishable from a mistake by the time someone
+ * reads it, and this is the one audit class FireForge cannot derive from the
+ * tree — the file's own header may say "never loaded", but nothing in
+ * `moz.build` or `jar.mn` records that.
+ */
+export interface BuildAuditUnpackagedDeclaration {
+    /** Engine-relative path, exact or with a `*` inside one path segment. */
+    path: string;
+    /** Why this file is never packaged. Required, non-empty. */
+    reason: string;
+}
+/** Post-build packaging audit configuration. */
+export interface BuildAuditConfig {
+    /**
+     * Sources the audit must treat as deliberately unpackaged. Admitted paths
+     * are LISTED in the audit output rather than silenced, and one that DOES
+     * resolve to a packaged artifact is reported as a stale carve-out.
+     */
+    unpackaged?: BuildAuditUnpackagedDeclaration[];
+}
 export interface WireConfig {
     /** Subscript directory relative to engine/. Default: "browser/base/content" */
     subscriptDir?: string;
@@ -226,6 +260,35 @@ export interface PatchLintCheckJsCompilerOptions {
     /** Module-resolution `paths` mapping (pattern → targets, engine-relative). */
     paths?: Record<string, string[]>;
 }
+/**
+ * Line-count thresholds for one `file-too-large` tier.
+ *
+ * Every field is optional; an omitted field keeps the built-in default.
+ * The three must stay ordered `notice <= warning <= error`, which the
+ * config validator enforces — an out-of-order triple silently disables a
+ * band rather than failing anything.
+ */
+export interface PatchLintFileSizeTier {
+    notice?: number;
+    warning?: number;
+    error?: number;
+}
+/**
+ * Overrides for the `file-too-large` thresholds, per file class.
+ *
+ * These were module constants until 0.45.0, and nothing in `fireforge.json`
+ * could move them. That is a problem specifically because the recommended
+ * gate posture is `--max-warnings 0`: under it the `warning` band is not a
+ * soft limit at all, so a project whose controllers legitimately sit a few
+ * lines over 750 has a hard failure with no dial, at exactly the moment
+ * someone is deciding whether to restructure a file.
+ */
+export interface PatchLintFileSizeThresholds {
+    /** Non-test files. Defaults: notice 500, warning 750, error 900. */
+    general?: PatchLintFileSizeTier;
+    /** Test files. Defaults: notice 1200, warning 1400, error 1600. */
+    test?: PatchLintFileSizeTier;
+}
 /**
  * Configuration for patch lint rules.
  */
@@ -272,6 +335,18 @@ export interface PatchLintConfig {
     checkJsTestShim?: string;
     /** File paths exempt from the raw-color-value check (exact or basename match) */
     rawColorAllowlist?: string[];
+    /**
+     * Per-tier overrides for the `file-too-large` line-count thresholds.
+     * Unset fields keep the built-in defaults.
+     */
+    fileSizeThresholds?: PatchLintFileSizeThresholds;
+    /**
+     * Run the project's Prettier over patch-owned `.sys.mjs` modules, from
+     * inside `engine/` so the engine's own `.prettierrc*`/`.prettierignore`
+     * decide. Default `'off'`: when off, formatting is explicitly out of
+     * scope for the per-patch tier.
+     */
+    prettier?: PatchLintSeverityGate;
     /** Enforce JSDoc on class-method exports in patch-owned .sys.mjs files. Default: 'off'. */
     jsdocClassMethods?: PatchLintSeverityGate;
     /** Require ≥1 assertion in any patch-touched browser_*.js test file (new or modified). Default: 'off'. */
@@ -311,8 +386,6 @@ export interface FireForgeState {
     brand?: string;
     /** Build mode: dev, debug, release */
     buildMode?: BuildMode;
-    /** Last successful build timestamp (ISO string) */
-    lastBuild?: string;
     /** Firefox version that was downloaded */
     downloadedVersion?: string;
     /** Initial commit hash of the engine (baseline) */

package/dist/src/types/index.d.ts

@@ -1,6 +1,5 @@
 /**
  * Re-exports all type definitions.
  */
-export type {} from './commands/index.js';
 export type { BuildConfig, FireForgeConfig, FirefoxConfig, FirefoxProduct, ProjectLicense, ProjectPaths, WireConfig, } from './config.js';
 export type { ApplyResult, ComponentType, CustomComponentConfig, DryRunAction, FurnaceConfig, FurnaceState, OverrideComponentConfig, OverrideType, StepError, ValidationIssue, } from './furnace.js';

package/dist/src/utils/assert.d.ts

@@ -6,7 +6,7 @@
  * the string only when the assertion actually fails, where a plain
  * template literal would build it on every call.
  */
-export type AssertionMessage = string | (() => string);
+type AssertionMessage = string | (() => string);
 /**
  * Asserts that an internal invariant holds.
  *
@@ -18,23 +18,10 @@ export type AssertionMessage = string | (() => string);
  * @throws {@link InternalInvariantError} when `condition` is falsy.
  */
 export declare function assert(condition: unknown, message: AssertionMessage): asserts condition;
-/**
- * Asserts that a value is neither `null` nor `undefined`, narrowing it in
- * place for the statements that follow.
- *
- * Use this in statement position, where the value is already bound to a
- * name. Use {@link expectDefined} in expression position, where it is not.
- *
- * @param value - The value that should be present
- * @param message - What was supposed to be present, and why
- * @throws {@link InternalInvariantError} when `value` is `null` or `undefined`.
- */
-export declare function assertDefined<T>(value: T, message: AssertionMessage): asserts value is NonNullable<T>;
 /**
  * Returns a value that must be present, throwing if it is not.
  *
- * The expression-position counterpart to {@link assertDefined}: it checks
- * and returns in one step, so an indexed read can be asserted inline
+ * Checks and returns in one step, so an indexed read can be asserted inline
  * (`push({ content: expectDefined(lines[k], …) })`) without first binding
  * it to a local.
  *
@@ -44,3 +31,4 @@ export declare function assertDefined<T>(value: T, message: AssertionMessage): a
  * @throws {@link InternalInvariantError} when `value` is `null` or `undefined`.
  */
 export declare function expectDefined<T>(value: T, message: AssertionMessage): NonNullable<T>;
+export {};

package/dist/src/utils/assert.js

@@ -46,27 +46,10 @@ export function assert(condition, message) {
         throw new InternalInvariantError(resolveMessage(message));
     }
 }
-/**
- * Asserts that a value is neither `null` nor `undefined`, narrowing it in
- * place for the statements that follow.
- *
- * Use this in statement position, where the value is already bound to a
- * name. Use {@link expectDefined} in expression position, where it is not.
- *
- * @param value - The value that should be present
- * @param message - What was supposed to be present, and why
- * @throws {@link InternalInvariantError} when `value` is `null` or `undefined`.
- */
-export function assertDefined(value, message) {
-    if (value === null || value === undefined) {
-        throw new InternalInvariantError(resolveMessage(message));
-    }
-}
 /**
  * Returns a value that must be present, throwing if it is not.
  *
- * The expression-position counterpart to {@link assertDefined}: it checks
- * and returns in one step, so an indexed read can be asserted inline
+ * Checks and returns in one step, so an indexed read can be asserted inline
  * (`push({ content: expectDefined(lines[k], …) })`) without first binding
  * it to a local.
  *

package/dist/src/utils/build-info.d.ts

@@ -1,5 +1,5 @@
 /** Source identity of the running build. */
-export interface BuildIdentity {
+interface BuildIdentity {
     shortCommit: string;
     dirty: boolean;
     /**