@ploaness/config 1.5.0 → 1.7.0

package/dist/security.d.ts

@@ -0,0 +1,8 @@
+/** Both Playwright navigation responses and request responses expose this surface. */
+export interface SecurityResponse {
+    readonly headers: () => Record<string, string>;
+    readonly url: () => string;
+}
+/** Assert the existing HTML response baseline using the response that the test actually received. */
+export declare const expectSecurityHeaders: (response: SecurityResponse) => void;
+//# sourceMappingURL=security.d.ts.map

package/dist/security.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"security.d.ts","sourceRoot":"","sources":["../src/security.ts"],"names":[],"mappings":"AAGA,sFAAsF;AACtF,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,CAAC,OAAO,EAAE,MAAM,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;IAC9C,QAAQ,CAAC,GAAG,EAAE,MAAM,MAAM,CAAA;CAC3B;AAED,qGAAqG;AACrG,eAAO,MAAM,qBAAqB,GAAI,UAAU,gBAAgB,KAAG,IAElE,CAAA"}

package/dist/security.js

@@ -0,0 +1,7 @@
+import { expect } from '@playwright/test';
+import { securityHeaderProblems } from '@ploaness/governance';
+/** Assert the existing HTML response baseline using the response that the test actually received. */
+export const expectSecurityHeaders = (response) => {
+    expect(securityHeaderProblems(response.headers()), `security headers on ${response.url()}`).toEqual([]);
+};
+//# sourceMappingURL=security.js.map

package/dist/security.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"security.js","sourceRoot":"","sources":["../src/security.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,kBAAkB,CAAA;AACzC,OAAO,EAAE,sBAAsB,EAAE,MAAM,sBAAsB,CAAA;AAQ7D,qGAAqG;AACrG,MAAM,CAAC,MAAM,qBAAqB,GAAG,CAAC,QAA0B,EAAQ,EAAE;IACxE,MAAM,CAAC,sBAAsB,CAAC,QAAQ,CAAC,OAAO,EAAE,CAAC,EAAE,uBAAuB,QAAQ,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAA;AACzG,CAAC,CAAA"}

package/dist/settle.d.ts

@@ -0,0 +1,13 @@
+import type { Page } from '@playwright/test';
+/**
+ * Wait for a page to finish rendering, before anything measures it.
+ *
+ * Call it after a navigation, and after a state change a scan is about to judge. A still document
+ * costs two animation frames; one that is animating costs however long its animations have left; a
+ * document that never stops changing costs the budget and no more, so a page nobody can settle slows
+ * the sweep rather than hanging it.
+ * @param page the page about to be scanned, left on whatever route it holds.
+ * @returns nothing. It resolves whether the page settled or the budget ran out.
+ */
+export declare const settleForScan: (page: Page) => Promise<void>;
+//# sourceMappingURL=settle.d.ts.map

package/dist/settle.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"settle.d.ts","sourceRoot":"","sources":["../src/settle.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,kBAAkB,CAAA;AA8I5C;;;;;;;;;GASG;AACH,eAAO,MAAM,aAAa,GAAU,MAAM,IAAI,KAAG,OAAO,CAAC,IAAI,CAU5D,CAAA"}

package/dist/settle.js

@@ -0,0 +1,136 @@
+// Why a scan needs a wait at all: `page.goto` resolves at the `load` event, and a React application
+// hydrates after that. axe measured in between reads a tree still being assembled - a heading whose
+// level has not resolved lands in `incomplete`, which a consuming project saw on one run in three -
+// and reads contrast against text the final font has not laid out yet.
+//
+// WHAT IT WAITS FOR, in this order: the document's font set has answered; the element count has held
+// steady across two consecutive animation frames; every animation that will ever end has ended; and
+// the count has held steady once more. Fonts first, because contrast is measured on rendered pixels
+// and a face that arrives late reflows the text being judged. The count before the animations rather
+// than after, for the reason written beside it - an animation cannot be waited for until something has
+// created it, and on a hydrating page the mount is what creates it. Two frames rather than one,
+// because React yields between hydration segments and a
+// yield that happens to straddle a frame boundary is indistinguishable from a finished render if only
+// one frame is asked. A fixed count of frames was the first draft and was wrong in the direction that
+// matters: it settles the pages that were never the problem and gives up on a heavy panel exactly
+// where the defect lives.
+//
+// WHY ANIMATIONS ARE PART OF IT. An element count cannot see an opacity. A page that fades its content
+// in changes no element while it does so, so the count was steady two frames after hydration and a
+// scan then measured a half-transparent paragraph - and axe blends a partial opacity toward the
+// background exactly as an eye does, so it reported a contrast this page never actually renders at
+// rest. That is the harmless direction. The other one is why this is a correctness fix rather than a
+// convenience: text animating TOWARDS a colour too pale to read was measured at its opening frame and
+// PASSED, so the sweep built to catch contrast defects returned green on a page whose resting state is
+// a defect. Waiting for the animations to end measures the state a reader is left looking at.
+//
+// An animation that never ends is excluded rather than waited on, and the distinction is the whole
+// reason this does not simply cost the budget. A spinner has no resting state to wait for, so awaiting
+// it would spend the ceiling below on every settle of every control of every route, in exchange for
+// nothing. `finished` never resolves for one, which is a hang the ceiling would absorb silently. The
+// test for it is `iterations`, which a spinner reports as `Infinity`; a paused or already-finished
+// animation is excluded too, because it is showing the frame a reader is looking at right now.
+//
+// A cancelled animation REJECTS `finished` rather than resolving, and that rejection is swallowed. A
+// cancellation is a state change like any other and the element-count check notices it; ending the
+// whole settle over one cancelled transition would report nothing useful about the page.
+//
+// The two callbacks below are written inline rather than named, which is not a style preference: a
+// named helper closing over nothing is one the shipped rules ask to be hoisted to the outer scope, and
+// the outer scope is the one place this function may not reach.
+//
+// WHY NOT `networkidle`. Playwright's own documentation discourages it; it throws on expiry rather
+// than resolving; and it answers a different question. A page can be network-idle and mid-hydration.
+// It is also unusable here in particular: the sweep runs against `next dev`, whose every page holds a
+// hot-reload socket open, so no page it ever visits goes idle.
+//
+// WHY THE CEILING IS A TIMER. `requestAnimationFrame` does not fire in a page the browser has
+// backgrounded, so a frame-counted ceiling is not a ceiling. A throttled background timer still fires.
+// The race is inside the page for the same reason the hit-target probe does its work in one
+// `evaluate`: a Node-side race would leave the in-page promise pending against a context the next
+// navigation destroys.
+const SETTLE_BUDGET_MS = 1000;
+// Everything this function needs is inside it. Playwright ships a page function to the browser as its
+// own source text, so a reference to anything at module scope here would be a ReferenceError in the
+// page rather than a compile error in this file - the one mistake this shape cannot be checked for.
+// It is also why the animation wait below is written inline rather than as a helper of its own.
+const settleInPage = async (budgetMs) => {
+    const quietFrames = 2;
+    // Recursive rather than a loop over a counter, because there is no mutable binding to count with:
+    // this repository bans `let` and in-place mutation in its own source as well as in a consumer's. Each
+    // step awaits a frame, so what grows is frames rather than stack - an awaited recursion returns to
+    // the microtask queue every time. The frame is awaited inline because this is its only caller.
+    const stable = async (previous, remaining) => {
+        await new Promise((resolve) => {
+            requestAnimationFrame(() => {
+                resolve();
+            });
+        });
+        const current = document.querySelectorAll('*').length;
+        if (current !== previous) {
+            await stable(current, quietFrames);
+            return;
+        }
+        if (remaining > 1) {
+            await stable(current, remaining - 1);
+        }
+    };
+    const settled = async () => {
+        // The optional call covers a document carrying no font set at all, which must skip the wait
+        // rather than fail the settle.
+        await document.fonts?.ready;
+        // The element count FIRST, and this order is the whole of it. An animation does not exist until
+        // something creates it, and on a hydrating page that something is the mount: measured before the
+        // framework has mounted, `getAnimations` answers an honest empty list, and a settle that believed
+        // it would scan the very frame the animation is about to start from. Waiting for the tree to stop
+        // changing is waiting for the mount, which is what puts the animations on the page to be found.
+        await stable(document.querySelectorAll('*').length, quietFrames);
+        await Promise.all((document.getAnimations?.() ?? [])
+            .filter((animation) => animation.playState === 'running' &&
+            animation.effect !== null &&
+            Number.isFinite(animation.effect.getComputedTiming().iterations))
+            .map(async (animation) => {
+            try {
+                await animation.finished;
+            }
+            catch {
+                // A cancelled animation rejects rather than resolving. The cancellation is a state change
+                // like any other and the count below is what notices it.
+            }
+        }));
+        // And again afterwards, because an animation that ends by revealing a panel adds elements as it
+        // finishes. This pass costs two frames on a page where nothing moved.
+        await stable(document.querySelectorAll('*').length, quietFrames);
+    };
+    const deadline = async () => {
+        await new Promise((resolve) => {
+            setTimeout(() => {
+                resolve();
+            }, budgetMs);
+        });
+    };
+    await Promise.race([settled(), deadline()]);
+};
+/**
+ * Wait for a page to finish rendering, before anything measures it.
+ *
+ * Call it after a navigation, and after a state change a scan is about to judge. A still document
+ * costs two animation frames; one that is animating costs however long its animations have left; a
+ * document that never stops changing costs the budget and no more, so a page nobody can settle slows
+ * the sweep rather than hanging it.
+ * @param page the page about to be scanned, left on whatever route it holds.
+ * @returns nothing. It resolves whether the page settled or the budget ran out.
+ */
+export const settleForScan = async (page) => {
+    try {
+        await page.evaluate(settleInPage, SETTLE_BUDGET_MS);
+    }
+    catch {
+        // A route that redirects on mount destroys the execution context while this is in flight, and a
+        // closed page cannot be asked anything. Neither is an accessibility finding, and neither should end
+        // a sweep: the scan that follows then runs on whatever the page holds, which is what every call
+        // site did before this function existed. A page that is genuinely broken still fails at `analyze`,
+        // with an axe result to read rather than a protocol error naming no route.
+    }
+};
+//# sourceMappingURL=settle.js.map

package/dist/settle.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"settle.js","sourceRoot":"","sources":["../src/settle.ts"],"names":[],"mappings":"AAGA,oGAAoG;AACpG,oGAAoG;AACpG,oGAAoG;AACpG,uEAAuE;AACvE,EAAE;AACF,qGAAqG;AACrG,oGAAoG;AACpG,oGAAoG;AACpG,qGAAqG;AACrG,uGAAuG;AACvG,gGAAgG;AAChG,wDAAwD;AACxD,sGAAsG;AACtG,sGAAsG;AACtG,kGAAkG;AAClG,0BAA0B;AAC1B,EAAE;AACF,uGAAuG;AACvG,mGAAmG;AACnG,gGAAgG;AAChG,mGAAmG;AACnG,qGAAqG;AACrG,sGAAsG;AACtG,uGAAuG;AACvG,8FAA8F;AAC9F,EAAE;AACF,mGAAmG;AACnG,uGAAuG;AACvG,oGAAoG;AACpG,qGAAqG;AACrG,mGAAmG;AACnG,+FAA+F;AAC/F,EAAE;AACF,qGAAqG;AACrG,mGAAmG;AACnG,yFAAyF;AACzF,EAAE;AACF,mGAAmG;AACnG,uGAAuG;AACvG,gEAAgE;AAChE,EAAE;AACF,mGAAmG;AACnG,qGAAqG;AACrG,sGAAsG;AACtG,+DAA+D;AAC/D,EAAE;AACF,8FAA8F;AAC9F,uGAAuG;AACvG,4FAA4F;AAC5F,kGAAkG;AAClG,uBAAuB;AACvB,MAAM,gBAAgB,GAAW,IAAI,CAAA;AAuBrC,sGAAsG;AACtG,oGAAoG;AACpG,oGAAoG;AACpG,gGAAgG;AAChG,MAAM,YAAY,GAAG,KAAK,EAAE,QAAgB,EAAiB,EAAE;IAC7D,MAAM,WAAW,GAAW,CAAC,CAAA;IAC7B,kGAAkG;IAClG,sGAAsG;IACtG,mGAAmG;IACnG,+FAA+F;IAC/F,MAAM,MAAM,GAAG,KAAK,EAAE,QAAgB,EAAE,SAAiB,EAAiB,EAAE;QAC1E,MAAM,IAAI,OAAO,CAAO,CAAC,OAAmB,EAAQ,EAAE;YACpD,qBAAqB,CAAC,GAAS,EAAE;gBAC/B,OAAO,EAAE,CAAA;YACX,CAAC,CAAC,CAAA;QACJ,CAAC,CAAC,CAAA;QACF,MAAM,OAAO,GAAW,QAAQ,CAAC,gBAAgB,CAAC,GAAG,CAAC,CAAC,MAAM,CAAA;QAC7D,IAAI,OAAO,KAAK,QAAQ,EAAE,CAAC;YACzB,MAAM,MAAM,CAAC,OAAO,EAAE,WAAW,CAAC,CAAA;YAClC,OAAM;QACR,CAAC;QACD,IAAI,SAAS,GAAG,CAAC,EAAE,CAAC;YAClB,MAAM,MAAM,CAAC,OAAO,EAAE,SAAS,GAAG,CAAC,CAAC,CAAA;QACtC,CAAC;IACH,CAAC,CAAA;IACD,MAAM,OAAO,GAAG,KAAK,IAAmB,EAAE;QACxC,4FAA4F;QAC5F,+BAA+B;QAC/B,MAAM,QAAQ,CAAC,KAAK,EAAE,KAAK,CAAA;QAC3B,gGAAgG;QAChG,iGAAiG;QACjG,kGAAkG;QAClG,kGAAkG;QAClG,gGAAgG;QAChG,MAAM,MAAM,CAAC,QAAQ,CAAC,gBAAgB,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,WAAW,CAAC,CAAA;QAChE,MAAM,OAAO,CAAC,GAAG,CACf,CAAC,QAAQ,CAAC,aAAa,EAAE,EAAE,IAAI,EAAE,CAAC;aAC/B,MAAM,CACL,CAAC,SAAwB,EAAW,EAAE,CACpC,SAAS,CAAC,SAAS,KAAK,SAAS;YACjC,SAAS,CAAC,MAAM,KAAK,IAAI;YACzB,MAAM,CAAC,QAAQ,CAAC,SAAS,CAAC,MAAM,CAAC,iBAAiB,EAAE,CAAC,UAAU,CAAC,CACnE;aACA,GAAG,CAAC,KAAK,EAAE,SAAwB,EAAiB,EAAE;YACrD,IAAI,CAAC;gBACH,MAAM,SAAS,CAAC,QAAQ,CAAA;YAC1B,CAAC;YAAC,MAAM,CAAC;gBACP,0FAA0F;gBAC1F,yDAAyD;YAC3D,CAAC;QACH,CAAC,CAAC,CACL,CAAA;QACD,gGAAgG;QAChG,sEAAsE;QACtE,MAAM,MAAM,CAAC,QAAQ,CAAC,gBAAgB,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,WAAW,CAAC,CAAA;IAClE,CAAC,CAAA;IACD,MAAM,QAAQ,GAAG,KAAK,IAAmB,EAAE;QACzC,MAAM,IAAI,OAAO,CAAO,CAAC,OAAmB,EAAQ,EAAE;YACpD,UAAU,CAAC,GAAS,EAAE;gBACpB,OAAO,EAAE,CAAA;YACX,CAAC,EAAE,QAAQ,CAAC,CAAA;QACd,CAAC,CAAC,CAAA;IACJ,CAAC,CAAA;IACD,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAA;AAC7C,CAAC,CAAA;AAED;;;;;;;;;GASG;AACH,MAAM,CAAC,MAAM,aAAa,GAAG,KAAK,EAAE,IAAU,EAAiB,EAAE;IAC/D,IAAI,CAAC;QACH,MAAM,IAAI,CAAC,QAAQ,CAAC,YAAY,EAAE,gBAAgB,CAAC,CAAA;IACrD,CAAC;IAAC,MAAM,CAAC;QACP,gGAAgG;QAChG,oGAAoG;QACpG,gGAAgG;QAChG,mGAAmG;QACnG,2EAA2E;IAC7E,CAAC;AACH,CAAC,CAAA"}

package/dist/vitest-core.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"vitest-core.d.ts","sourceRoot":"","sources":["../src/vitest-core.ts"],"names":[],"mappings":"AAUA;;;GAGG;AACH,MAAM,WAAW,qBAAqB;IACpC,QAAQ,CAAC,OAAO,EAAE;QAAE,QAAQ,CAAC,KAAK,EAAE,OAAO,CAAC;QAAC,QAAQ,CAAC,KAAK,EAAE,OAAO,CAAA;KAAE,CAAA;IACtE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;IACrB,QAAQ,CAAC,UAAU,EAAE,OAAO,CAAA;IAC5B,QAAQ,CAAC,KAAK,EAAE,OAAO,CAAA;IACvB,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAA;CAC5B;AAWD;;;;;GAKG;AACH,eAAO,MAAM,kBAAkB,EAAE,MAAW,CAAA;AAE5C;;;;;GAKG;AACH,eAAO,MAAM,kBAAkB,EAAE,MAAsB,CAAA;AASvD;;;;;;GAMG;AACH,eAAO,MAAM,gBAAgB,QAAO,MACwB,CAAA;AAE5D;;;;;;;;GAQG;AACH,eAAO,MAAM,iBAAiB,QAAO,SAAS,MAAM,EACkC,CAAA;AAEtF;;;;GAIG;AACH,eAAO,MAAM,sBAAsB,EAAE,qBAWnC,CAAA;AAEF;;;;;;GAMG;AACH,MAAM,MAAM,aAAa,GAAG,SAAS,GAAG,CAAC,gBAAgB,EAAE;IAAE,UAAU,EAAE;QAAE,OAAO,EAAE,KAAK,CAAA;KAAE,CAAA;CAAE,CAAC,CAAA;AAE9F;;;;;;;;;;;;;;GAcG;AACH,eAAO,MAAM,wBAAwB,EAAE,SAAS,aAAa,EAG5D,CAAA;AAED;;;;;;;GAOG;AACH,eAAO,MAAM,aAAa,QAAO,SAAS,aAAa,EAC4B,CAAA"}
+{"version":3,"file":"vitest-core.d.ts","sourceRoot":"","sources":["../src/vitest-core.ts"],"names":[],"mappings":"AAUA;;;GAGG;AACH,MAAM,WAAW,qBAAqB;IACpC,QAAQ,CAAC,OAAO,EAAE;QAAE,QAAQ,CAAC,KAAK,EAAE,OAAO,CAAC;QAAC,QAAQ,CAAC,KAAK,EAAE,OAAO,CAAA;KAAE,CAAA;IACtE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;IACrB,QAAQ,CAAC,UAAU,EAAE,OAAO,CAAA;IAC5B,QAAQ,CAAC,KAAK,EAAE,OAAO,CAAA;IACvB,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAA;CAC5B;AAWD;;;;;GAKG;AACH,eAAO,MAAM,kBAAkB,EAAE,MAAW,CAAA;AAE5C;;;;;GAKG;AACH,eAAO,MAAM,kBAAkB,EAAE,MAAsB,CAAA;AASvD;;;;;;GAMG;AACH,eAAO,MAAM,gBAAgB,QAAO,MAAoE,CAAA;AAExG;;;;;;;;GAQG;AACH,eAAO,MAAM,iBAAiB,QAAO,SAAS,MAAM,EACkC,CAAA;AAEtF;;;;GAIG;AACH,eAAO,MAAM,sBAAsB,EAAE,qBAWnC,CAAA;AAEF;;;;;;GAMG;AACH,MAAM,MAAM,aAAa,GAAG,SAAS,GAAG,CAAC,gBAAgB,EAAE;IAAE,UAAU,EAAE;QAAE,OAAO,EAAE,KAAK,CAAA;KAAE,CAAA;CAAE,CAAC,CAAA;AAE9F;;;;;;;;;;;;;;GAcG;AACH,eAAO,MAAM,wBAAwB,EAAE,SAAS,aAAa,EAG5D,CAAA;AAED;;;;;;;GAOG;AACH,eAAO,MAAM,aAAa,QAAO,SAAS,aAAa,EAC4B,CAAA"}

package/dist/vitest-core.js.map

@@ -1 +1 @@
-{"version":3,"file":"vitest-core.js","sourceRoot":"","sources":["../src/vitest-core.ts"],"names":[],"mappings":"AAAA,2FAA2F;AAC3F,EAAE;AACF,wGAAwG;AACxG,oGAAoG;AACpG,+CAA+C;AAC/C,OAAO,EAAE,UAAU,EAAE,MAAM,SAAS,CAAA;AACpC,OAAO,IAAI,MAAM,WAAW,CAAA;AAC5B,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAA;AACxC,OAAO,EAAE,kBAAkB,IAAI,uBAAuB,EAAE,MAAM,sBAAsB,CAAA;AAcpF;;;;;;GAMG;AACH,MAAM,kBAAkB,GAAW,KAAK,uBAAuB,EAAE,CAAA;AAEjE;;;;;GAKG;AACH,MAAM,CAAC,MAAM,kBAAkB,GAAW,EAAE,CAAA;AAE5C;;;;;GAKG;AACH,MAAM,CAAC,MAAM,kBAAkB,GAAW,aAAa,CAAA;AAEvD,yGAAyG;AACzG,wGAAwG;AACxG,qGAAqG;AACrG,uGAAuG;AACvG,kEAAkE;AAClE,MAAM,eAAe,GAAW,aAAa,CAAA;AAE7C;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,gBAAgB,GAAG,GAAW,EAAE,CAC3C,aAAa,CAAC,IAAI,GAAG,CAAC,iBAAiB,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAA;AAE5D;;;;;;;;GAQG;AACH,MAAM,CAAC,MAAM,iBAAiB,GAAG,GAAsB,EAAE,CACvD,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,kBAAkB,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,kBAAkB,CAAC,CAAC,CAAC,CAAC,EAAE,CAAA;AAEtF;;;;GAIG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAA0B,MAAM,CAAC,MAAM,CAAC;IACzE,OAAO,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;IACpD,IAAI,EAAE,eAAe;IACrB,2FAA2F;IAC3F,4FAA4F;IAC5F,UAAU,EAAE,KAAK;IACjB,2FAA2F;IAC3F,KAAK,EAAE,OAAO;IACd,kGAAkG;IAClG,iGAAiG;IACjG,UAAU,EAAE,MAAM;CACnB,CAAC,CAAA;AAWF;;;;;;;;;;;;;;GAcG;AACH,MAAM,CAAC,MAAM,wBAAwB,GAA6B;IAChE,SAAS;IACT,CAAC,gBAAgB,EAAE,EAAE,UAAU,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,CAAC;CACvD,CAAA;AAED;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,aAAa,GAAG,GAA6B,EAAE,CAC1D,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC,KAAK,MAAM,CAAC,CAAC,CAAC,wBAAwB,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAA"}
+{"version":3,"file":"vitest-core.js","sourceRoot":"","sources":["../src/vitest-core.ts"],"names":[],"mappings":"AAAA,2FAA2F;AAC3F,EAAE;AACF,wGAAwG;AACxG,oGAAoG;AACpG,+CAA+C;AAC/C,OAAO,EAAE,UAAU,EAAE,MAAM,SAAS,CAAA;AACpC,OAAO,IAAI,MAAM,WAAW,CAAA;AAC5B,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAA;AACxC,OAAO,EAAE,kBAAkB,IAAI,uBAAuB,EAAE,MAAM,sBAAsB,CAAA;AAcpF;;;;;;GAMG;AACH,MAAM,kBAAkB,GAAW,KAAK,uBAAuB,EAAE,CAAA;AAEjE;;;;;GAKG;AACH,MAAM,CAAC,MAAM,kBAAkB,GAAW,EAAE,CAAA;AAE5C;;;;;GAKG;AACH,MAAM,CAAC,MAAM,kBAAkB,GAAW,aAAa,CAAA;AAEvD,yGAAyG;AACzG,wGAAwG;AACxG,qGAAqG;AACrG,uGAAuG;AACvG,kEAAkE;AAClE,MAAM,eAAe,GAAW,aAAa,CAAA;AAE7C;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,gBAAgB,GAAG,GAAW,EAAE,CAAC,aAAa,CAAC,IAAI,GAAG,CAAC,iBAAiB,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAA;AAExG;;;;;;;;GAQG;AACH,MAAM,CAAC,MAAM,iBAAiB,GAAG,GAAsB,EAAE,CACvD,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,kBAAkB,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,kBAAkB,CAAC,CAAC,CAAC,CAAC,EAAE,CAAA;AAEtF;;;;GAIG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAA0B,MAAM,CAAC,MAAM,CAAC;IACzE,OAAO,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;IACpD,IAAI,EAAE,eAAe;IACrB,2FAA2F;IAC3F,4FAA4F;IAC5F,UAAU,EAAE,KAAK;IACjB,2FAA2F;IAC3F,KAAK,EAAE,OAAO;IACd,kGAAkG;IAClG,iGAAiG;IACjG,UAAU,EAAE,MAAM;CACnB,CAAC,CAAA;AAWF;;;;;;;;;;;;;;GAcG;AACH,MAAM,CAAC,MAAM,wBAAwB,GAA6B;IAChE,SAAS;IACT,CAAC,gBAAgB,EAAE,EAAE,UAAU,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,CAAC;CACvD,CAAA;AAED;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,aAAa,GAAG,GAA6B,EAAE,CAC1D,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC,KAAK,MAAM,CAAC,CAAC,CAAC,wBAAwB,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAA"}

package/dist/vitest-library.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"vitest-library.d.ts","sourceRoot":"","sources":["../src/vitest-library.ts"],"names":[],"mappings":"AAyCA,QAAA,MAAM,MAAM,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAmB,CAAA;AAEjE,eAAe,MAAM,CAAA"}
+{"version":3,"file":"vitest-library.d.ts","sourceRoot":"","sources":["../src/vitest-library.ts"],"names":[],"mappings":"AAoCA,QAAA,MAAM,MAAM,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAmB,CAAA;AAEjE,eAAe,MAAM,CAAA"}

package/dist/vitest-library.js

@@ -8,7 +8,7 @@
 import { COVERAGE_INCLUDE } from '@ploaness/governance';
 import { defineConfig } from 'vitest/config';
 import { projectSettings as settings } from './project-settings.js';
-import { COVERAGE_THRESHOLD, DETERMINISTIC_SEQUENCE, harnessSetupFile, projectSetupFiles, } from './vitest-core.js';
+import { COVERAGE_THRESHOLD, DETERMINISTIC_SEQUENCE, harnessSetupFile, projectSetupFiles } from './vitest-core.js';
 const declared = defineConfig({
     resolve: { tsconfigPaths: true },
     test: {

package/dist/vitest-library.js.map

@@ -1 +1 @@
-{"version":3,"file":"vitest-library.js","sourceRoot":"","sources":["../src/vitest-library.ts"],"names":[],"mappings":"AAAA,oEAAoE;AACpE,EAAE;AACF,uGAAuG;AACvG,oGAAoG;AACpG,uGAAuG;AACvG,sGAAsG;AACtG,qEAAqE;AACrE,OAAO,EAAE,gBAAgB,EAAE,MAAM,sBAAsB,CAAA;AACvD,OAAO,EAAE,YAAY,EAAE,MAAM,eAAe,CAAA;AAC5C,OAAO,EAAE,eAAe,IAAI,QAAQ,EAAE,MAAM,uBAAuB,CAAA;AACnE,OAAO,EACL,kBAAkB,EAClB,sBAAsB,EACtB,gBAAgB,EAChB,iBAAiB,GAClB,MAAM,kBAAkB,CAAA;AAEzB,MAAM,QAAQ,GAAoC,YAAY,CAAC;IAC7D,OAAO,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE;IAChC,IAAI,EAAE;QACJ,WAAW,EAAE,MAAM;QACnB,OAAO,EAAE,CAAC,8BAA8B,EAAE,4BAA4B,CAAC;QACvE,UAAU,EAAE,CAAC,gBAAgB,EAAE,EAAE,GAAG,iBAAiB,EAAE,CAAC;QACxD,QAAQ,EAAE,sBAAsB;QAChC,QAAQ,EAAE;YACR,QAAQ,EAAE,IAAI;YACd,OAAO,EAAE,CAAC,GAAG,gBAAgB,CAAC;YAC9B,OAAO,EAAE,CAAC,GAAG,QAAQ,CAAC,eAAe,CAAC;YACtC,UAAU,EAAE;gBACV,OAAO,EAAE,IAAI;gBACb,KAAK,EAAE,kBAAkB;gBACzB,QAAQ,EAAE,kBAAkB;gBAC5B,SAAS,EAAE,kBAAkB;gBAC7B,UAAU,EAAE,kBAAkB;aAC/B;SACF;KACF;CACF,CAAC,CAAA;AAEF,sGAAsG;AACtG,6FAA6F;AAC7F,MAAM,MAAM,GAAsC,EAAE,GAAG,QAAQ,EAAE,CAAA;AAEjE,eAAe,MAAM,CAAA"}
+{"version":3,"file":"vitest-library.js","sourceRoot":"","sources":["../src/vitest-library.ts"],"names":[],"mappings":"AAAA,oEAAoE;AACpE,EAAE;AACF,uGAAuG;AACvG,oGAAoG;AACpG,uGAAuG;AACvG,sGAAsG;AACtG,qEAAqE;AACrE,OAAO,EAAE,gBAAgB,EAAE,MAAM,sBAAsB,CAAA;AACvD,OAAO,EAAE,YAAY,EAAE,MAAM,eAAe,CAAA;AAC5C,OAAO,EAAE,eAAe,IAAI,QAAQ,EAAE,MAAM,uBAAuB,CAAA;AACnE,OAAO,EAAE,kBAAkB,EAAE,sBAAsB,EAAE,gBAAgB,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAA;AAElH,MAAM,QAAQ,GAAoC,YAAY,CAAC;IAC7D,OAAO,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE;IAChC,IAAI,EAAE;QACJ,WAAW,EAAE,MAAM;QACnB,OAAO,EAAE,CAAC,8BAA8B,EAAE,4BAA4B,CAAC;QACvE,UAAU,EAAE,CAAC,gBAAgB,EAAE,EAAE,GAAG,iBAAiB,EAAE,CAAC;QACxD,QAAQ,EAAE,sBAAsB;QAChC,QAAQ,EAAE;YACR,QAAQ,EAAE,IAAI;YACd,OAAO,EAAE,CAAC,GAAG,gBAAgB,CAAC;YAC9B,OAAO,EAAE,CAAC,GAAG,QAAQ,CAAC,eAAe,CAAC;YACtC,UAAU,EAAE;gBACV,OAAO,EAAE,IAAI;gBACb,KAAK,EAAE,kBAAkB;gBACzB,QAAQ,EAAE,kBAAkB;gBAC5B,SAAS,EAAE,kBAAkB;gBAC7B,UAAU,EAAE,kBAAkB;aAC/B;SACF;KACF;CACF,CAAC,CAAA;AAEF,sGAAsG;AACtG,6FAA6F;AAC7F,MAAM,MAAM,GAAsC,EAAE,GAAG,QAAQ,EAAE,CAAA;AAEjE,eAAe,MAAM,CAAA"}

package/dist/vitest-setup.js

@@ -122,12 +122,7 @@ install(dns.promises, 'lookup', toLookupAttempt);
 // this block exists to close, one constructor away. The prototypes are guarded too.
 // Named without a presence check: both constructors are declared by node's own types, so an optional
 // chain here would be a defence against a shape the runtime cannot have and the compiler already denies.
-const resolverOwners = [
-    dns,
-    dns.promises,
-    dns.Resolver.prototype,
-    dns.promises.Resolver.prototype,
-];
+const resolverOwners = [dns, dns.promises, dns.Resolver.prototype, dns.promises.Resolver.prototype];
 for (const method of RESOLVER_METHODS) {
     for (const owner of resolverOwners) {
         install(owner, method, toResolveAttempt);

package/dist/vitest-setup.js.map

@@ -1 +1 @@
-{"version":3,"file":"vitest-setup.js","sourceRoot":"","sources":["../src/vitest-setup.ts"],"names":[],"mappings":"AAAA,iGAAiG;AACjG,kDAAkD;AAClD,EAAE;AACF,sGAAsG;AACtG,iGAAiG;AACjG,uGAAuG;AACvG,wGAAwG;AACxG,oGAAoG;AACpG,mGAAmG;AACnG,kGAAkG;AAClG,+CAA+C;AAC/C,EAAE;AACF,wGAAwG;AACxG,4BAA4B;AAC5B,OAAO,GAAG,MAAM,UAAU,CAAA;AAC1B,OAAO,EAAE,UAAU,EAAE,MAAM,SAAS,CAAA;AACpC,OAAO,GAAG,MAAM,UAAU,CAAA;AAC1B,OAAO,EAAE,MAAM,SAAS,CAAA;AACxB,OAAO,EACL,oBAAoB,EACpB,iBAAiB,EACjB,SAAS,EACT,QAAQ,EACR,cAAc,EAEd,gBAAgB,EAChB,mBAAmB,GACpB,MAAM,sBAAsB,CAAA;AAU7B,sGAAsG;AACtG,wGAAwG;AACxG,sGAAsG;AACtG,MAAM,aAAa,GAAG,CAAC,KAAc,EAAwB,EAAE,CAAC,OAAO,KAAK,KAAK,UAAU,CAAA;AAE3F,oGAAoG;AACpG,+FAA+F;AAC/F,oGAAoG;AACpG,qGAAqG;AACrG,mGAAmG;AACnG,8FAA8F;AAC9F,EAAE;AACF,mGAAmG;AACnG,6EAA6E;AAC7E,KAAK,MAAM,IAAI,IAAI,mBAAmB,CAAC,UAAU,CAAC,EAAE,CAAC;IACnD,OAAO,CAAC,WAAW,CAAC,IAAI,CAAC,CAAA;AAC3B,CAAC;AAED,qGAAqG;AACrG,6FAA6F;AAC7F,MAAM,UAAU,GAAW,MAAM,CAAC,GAAG,CAAC,wBAAwB,CAAC,CAAA;AAE/D,MAAM,iBAAiB,GAAwB,cAAc,CAAC,EAAE,CAAC,iBAAiB,EAAE,CAAC,CAAA;AAErF,MAAM,MAAM,GAAG,CAAC,OAAuB,EAAQ,EAAE;IAC/C,MAAM,OAAO,GAAuB,iBAAiB,CAAC,OAAO,EAAE,iBAAiB,CAAC,CAAA;IACjF,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;QAC1B,MAAM,IAAI,KAAK,CAAC,OAAO,CAAC,CAAA;IAC1B,CAAC;AACH,CAAC,CAAA;AAED,qGAAqG;AACrG,sGAAsG;AACtG,uGAAuG;AACvG,sGAAsG;AACtG,6DAA6D;AAC7D,MAAM,KAAK,GAAG,CAAC,QAAqB,EAAE,SAAoB,EAAe,EAAE,CACzE,IAAI,KAAK,CAAC,QAAQ,EAAE;IAClB,oGAAoG;IACpG,oGAAoG;IACpG,4CAA4C;IAC5C,KAAK,EAAE,CAAC,MAAmB,EAAE,QAAiB,EAAE,aAAiC,EAAW,EAAE;QAC5F,MAAM,CAAC,SAAS,CAAC,aAAa,CAAC,CAAC,CAAA;QAChC,MAAM,MAAM,GAAY,OAAO,CAAC,KAAK,CAAC,MAAM,EAAE,QAAQ,EAAE,aAAa,CAAC,CAAA;QACtE,OAAO,MAAM,CAAA;IACf,CAAC;IACD,GAAG,EAAE,CAAC,MAAmB,EAAE,GAAoB,EAAW,EAAE,CAC1D,GAAG,KAAK,UAAU,IAAI,OAAO,CAAC,GAAG,CAAC,MAAM,EAAE,GAAG,CAAC;CACjD,CAAC,CAAA;AAEJ,qGAAqG;AACrG,yGAAyG;AACzG,MAAM,OAAO,GAAG,CAAC,KAAa,EAAE,GAAW,EAAE,SAAoB,EAAQ,EAAE;IACzE,MAAM,QAAQ,GAAY,OAAO,CAAC,GAAG,CAAC,KAAK,EAAE,GAAG,CAAC,CAAA;IACjD,IAAI,CAAC,aAAa,CAAC,QAAQ,CAAC,IAAI,OAAO,CAAC,GAAG,CAAC,QAAQ,EAAE,UAAU,CAAC,EAAE,CAAC;QAClE,OAAM;IACR,CAAC;IACD,MAAM,CAAC,cAAc,CAAC,KAAK,EAAE,GAAG,EAAE;QAChC,KAAK,EAAE,KAAK,CAAC,QAAQ,EAAE,SAAS,CAAC;QACjC,QAAQ,EAAE,KAAK;QACf,UAAU,EAAE,MAAM,CAAC,wBAAwB,CAAC,KAAK,EAAE,GAAG,CAAC,EAAE,UAAU,IAAI,IAAI;QAC3E,YAAY,EAAE,KAAK;KACpB,CAAC,CAAA;AACJ,CAAC,CAAA;AAED,MAAM,eAAe,GAAG,CAAC,aAAiC,EAAU,EAAE;IACpE,MAAM,CAAC,MAAM,CAAC,GAAuB,aAAa,CAAA;IAClD,OAAO,OAAO,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAA;AAC7D,CAAC,CAAA;AAED,MAAM,eAAe,GAAc,CAAC,aAAa,EAAE,EAAE,CAAC,CAAC;IACrD,GAAG,EAAE,QAAQ;IACb,IAAI,EAAE,eAAe,CAAC,aAAa,CAAC;IACpC,WAAW,EAAE,eAAe,CAAC,aAAa,CAAC;CAC5C,CAAC,CAAA;AAEF,MAAM,gBAAgB,GAAc,CAAC,aAAa,EAAE,EAAE,CAAC,CAAC;IACtD,GAAG,EAAE,SAAS;IACd,IAAI,EAAE,eAAe,CAAC,aAAa,CAAC;IACpC,WAAW,EAAE,eAAe,CAAC,aAAa,CAAC;CAC5C,CAAC,CAAA;AAEF,uGAAuG;AACvG,mGAAmG;AACnG,8CAA8C;AAC9C,MAAM,cAAc,GAAG,CAAC,MAAe,EAAU,EAAE;IACjD,IAAI,OAAO,MAAM,KAAK,QAAQ,EAAE,CAAC;QAC/B,OAAO,MAAM,CAAA;IACf,CAAC;IACD,IAAI,MAAM,YAAY,GAAG,EAAE,CAAC;QAC1B,OAAO,MAAM,CAAC,IAAI,CAAA;IACpB,CAAC;IACD,MAAM,QAAQ,GAAY,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,CAAA;IACtE,OAAO,OAAO,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAA;AACrD,CAAC,CAAA;AAED,MAAM,cAAc,GAAc,CAAC,aAAa,EAAE,EAAE;IAClD,MAAM,CAAC,MAAM,CAAC,GAAuB,aAAa,CAAA;IAClD,MAAM,GAAG,GAAW,cAAc,CAAC,MAAM,CAAC,CAAA;IAC1C,OAAO,EAAE,GAAG,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,CAAC,GAAG,CAAC,EAAE,WAAW,EAAE,GAAG,EAAE,CAAA;AACjE,CAAC,CAAA;AAED,wGAAwG;AACxG,uGAAuG;AACvG,kGAAkG;AAClG,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,SAAS,EAAE,SAAS,EAAE,oBAAoB,CAAC,CAAA;AAE9D,oGAAoG;AACpG,wGAAwG;AACxG,MAAM;AACN,OAAO,CAAC,GAAG,EAAE,QAAQ,EAAE,eAAe,CAAC,CAAA;AACvC,OAAO,CAAC,GAAG,CAAC,QAAQ,EAAE,QAAQ,EAAE,eAAe,CAAC,CAAA;AAEhD,sGAAsG;AACtG,mGAAmG;AACnG,EAAE;AACF,uGAAuG;AACvG,uGAAuG;AACvG,oFAAoF;AACpF,qGAAqG;AACrG,yGAAyG;AACzG,MAAM,cAAc,GAAsB;IACxC,GAAG;IACH,GAAG,CAAC,QAAQ;IACZ,GAAG,CAAC,QAAQ,CAAC,SAAS;IACtB,GAAG,CAAC,QAAQ,CAAC,QAAQ,CAAC,SAAS;CAChC,CAAA;AAED,KAAK,MAAM,MAAM,IAAI,gBAAgB,EAAE,CAAC;IACtC,KAAK,MAAM,KAAK,IAAI,cAAc,EAAE,CAAC;QACnC,OAAO,CAAC,KAAK,EAAE,MAAM,EAAE,gBAAgB,CAAC,CAAA;IAC1C,CAAC;AACH,CAAC;AAED,wGAAwG;AACxG,uGAAuG;AACvG,0EAA0E;AAC1E,mGAAmG;AACnG,uDAAuD;AACvD,MAAM,YAAY,GAAY,OAAO,CAAC,GAAG,CAAC,UAAU,EAAE,OAAO,CAAC,CAAA;AAC9D,IAAI,aAAa,CAAC,YAAY,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,YAAY,EAAE,UAAU,CAAC,EAAE,CAAC;IAC1E,MAAM,CAAC,cAAc,CAAC,UAAU,EAAE,OAAO,EAAE;QACzC,KAAK,EAAE,KAAK,CAAC,YAAY,EAAE,cAAc,CAAC;QAC1C,QAAQ,EAAE,IAAI;QACd,UAAU,EAAE,KAAK;QACjB,YAAY,EAAE,IAAI;KACnB,CAAC,CAAA;AACJ,CAAC"}
+{"version":3,"file":"vitest-setup.js","sourceRoot":"","sources":["../src/vitest-setup.ts"],"names":[],"mappings":"AAAA,iGAAiG;AACjG,kDAAkD;AAClD,EAAE;AACF,sGAAsG;AACtG,iGAAiG;AACjG,uGAAuG;AACvG,wGAAwG;AACxG,oGAAoG;AACpG,mGAAmG;AACnG,kGAAkG;AAClG,+CAA+C;AAC/C,EAAE;AACF,wGAAwG;AACxG,4BAA4B;AAC5B,OAAO,GAAG,MAAM,UAAU,CAAA;AAC1B,OAAO,EAAE,UAAU,EAAE,MAAM,SAAS,CAAA;AACpC,OAAO,GAAG,MAAM,UAAU,CAAA;AAC1B,OAAO,EAAE,MAAM,SAAS,CAAA;AACxB,OAAO,EACL,oBAAoB,EACpB,iBAAiB,EACjB,SAAS,EACT,QAAQ,EACR,cAAc,EAEd,gBAAgB,EAChB,mBAAmB,GACpB,MAAM,sBAAsB,CAAA;AAU7B,sGAAsG;AACtG,wGAAwG;AACxG,sGAAsG;AACtG,MAAM,aAAa,GAAG,CAAC,KAAc,EAAwB,EAAE,CAAC,OAAO,KAAK,KAAK,UAAU,CAAA;AAE3F,oGAAoG;AACpG,+FAA+F;AAC/F,oGAAoG;AACpG,qGAAqG;AACrG,mGAAmG;AACnG,8FAA8F;AAC9F,EAAE;AACF,mGAAmG;AACnG,6EAA6E;AAC7E,KAAK,MAAM,IAAI,IAAI,mBAAmB,CAAC,UAAU,CAAC,EAAE,CAAC;IACnD,OAAO,CAAC,WAAW,CAAC,IAAI,CAAC,CAAA;AAC3B,CAAC;AAED,qGAAqG;AACrG,6FAA6F;AAC7F,MAAM,UAAU,GAAW,MAAM,CAAC,GAAG,CAAC,wBAAwB,CAAC,CAAA;AAE/D,MAAM,iBAAiB,GAAwB,cAAc,CAAC,EAAE,CAAC,iBAAiB,EAAE,CAAC,CAAA;AAErF,MAAM,MAAM,GAAG,CAAC,OAAuB,EAAQ,EAAE;IAC/C,MAAM,OAAO,GAAuB,iBAAiB,CAAC,OAAO,EAAE,iBAAiB,CAAC,CAAA;IACjF,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;QAC1B,MAAM,IAAI,KAAK,CAAC,OAAO,CAAC,CAAA;IAC1B,CAAC;AACH,CAAC,CAAA;AAED,qGAAqG;AACrG,sGAAsG;AACtG,uGAAuG;AACvG,sGAAsG;AACtG,6DAA6D;AAC7D,MAAM,KAAK,GAAG,CAAC,QAAqB,EAAE,SAAoB,EAAe,EAAE,CACzE,IAAI,KAAK,CAAC,QAAQ,EAAE;IAClB,oGAAoG;IACpG,oGAAoG;IACpG,4CAA4C;IAC5C,KAAK,EAAE,CAAC,MAAmB,EAAE,QAAiB,EAAE,aAAiC,EAAW,EAAE;QAC5F,MAAM,CAAC,SAAS,CAAC,aAAa,CAAC,CAAC,CAAA;QAChC,MAAM,MAAM,GAAY,OAAO,CAAC,KAAK,CAAC,MAAM,EAAE,QAAQ,EAAE,aAAa,CAAC,CAAA;QACtE,OAAO,MAAM,CAAA;IACf,CAAC;IACD,GAAG,EAAE,CAAC,MAAmB,EAAE,GAAoB,EAAW,EAAE,CAAC,GAAG,KAAK,UAAU,IAAI,OAAO,CAAC,GAAG,CAAC,MAAM,EAAE,GAAG,CAAC;CAC5G,CAAC,CAAA;AAEJ,qGAAqG;AACrG,yGAAyG;AACzG,MAAM,OAAO,GAAG,CAAC,KAAa,EAAE,GAAW,EAAE,SAAoB,EAAQ,EAAE;IACzE,MAAM,QAAQ,GAAY,OAAO,CAAC,GAAG,CAAC,KAAK,EAAE,GAAG,CAAC,CAAA;IACjD,IAAI,CAAC,aAAa,CAAC,QAAQ,CAAC,IAAI,OAAO,CAAC,GAAG,CAAC,QAAQ,EAAE,UAAU,CAAC,EAAE,CAAC;QAClE,OAAM;IACR,CAAC;IACD,MAAM,CAAC,cAAc,CAAC,KAAK,EAAE,GAAG,EAAE;QAChC,KAAK,EAAE,KAAK,CAAC,QAAQ,EAAE,SAAS,CAAC;QACjC,QAAQ,EAAE,KAAK;QACf,UAAU,EAAE,MAAM,CAAC,wBAAwB,CAAC,KAAK,EAAE,GAAG,CAAC,EAAE,UAAU,IAAI,IAAI;QAC3E,YAAY,EAAE,KAAK;KACpB,CAAC,CAAA;AACJ,CAAC,CAAA;AAED,MAAM,eAAe,GAAG,CAAC,aAAiC,EAAU,EAAE;IACpE,MAAM,CAAC,MAAM,CAAC,GAAuB,aAAa,CAAA;IAClD,OAAO,OAAO,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAA;AAC7D,CAAC,CAAA;AAED,MAAM,eAAe,GAAc,CAAC,aAAa,EAAE,EAAE,CAAC,CAAC;IACrD,GAAG,EAAE,QAAQ;IACb,IAAI,EAAE,eAAe,CAAC,aAAa,CAAC;IACpC,WAAW,EAAE,eAAe,CAAC,aAAa,CAAC;CAC5C,CAAC,CAAA;AAEF,MAAM,gBAAgB,GAAc,CAAC,aAAa,EAAE,EAAE,CAAC,CAAC;IACtD,GAAG,EAAE,SAAS;IACd,IAAI,EAAE,eAAe,CAAC,aAAa,CAAC;IACpC,WAAW,EAAE,eAAe,CAAC,aAAa,CAAC;CAC5C,CAAC,CAAA;AAEF,uGAAuG;AACvG,mGAAmG;AACnG,8CAA8C;AAC9C,MAAM,cAAc,GAAG,CAAC,MAAe,EAAU,EAAE;IACjD,IAAI,OAAO,MAAM,KAAK,QAAQ,EAAE,CAAC;QAC/B,OAAO,MAAM,CAAA;IACf,CAAC;IACD,IAAI,MAAM,YAAY,GAAG,EAAE,CAAC;QAC1B,OAAO,MAAM,CAAC,IAAI,CAAA;IACpB,CAAC;IACD,MAAM,QAAQ,GAAY,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,CAAA;IACtE,OAAO,OAAO,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAA;AACrD,CAAC,CAAA;AAED,MAAM,cAAc,GAAc,CAAC,aAAa,EAAE,EAAE;IAClD,MAAM,CAAC,MAAM,CAAC,GAAuB,aAAa,CAAA;IAClD,MAAM,GAAG,GAAW,cAAc,CAAC,MAAM,CAAC,CAAA;IAC1C,OAAO,EAAE,GAAG,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,CAAC,GAAG,CAAC,EAAE,WAAW,EAAE,GAAG,EAAE,CAAA;AACjE,CAAC,CAAA;AAED,wGAAwG;AACxG,uGAAuG;AACvG,kGAAkG;AAClG,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,SAAS,EAAE,SAAS,EAAE,oBAAoB,CAAC,CAAA;AAE9D,oGAAoG;AACpG,wGAAwG;AACxG,MAAM;AACN,OAAO,CAAC,GAAG,EAAE,QAAQ,EAAE,eAAe,CAAC,CAAA;AACvC,OAAO,CAAC,GAAG,CAAC,QAAQ,EAAE,QAAQ,EAAE,eAAe,CAAC,CAAA;AAEhD,sGAAsG;AACtG,mGAAmG;AACnG,EAAE;AACF,uGAAuG;AACvG,uGAAuG;AACvG,oFAAoF;AACpF,qGAAqG;AACrG,yGAAyG;AACzG,MAAM,cAAc,GAAsB,CAAC,GAAG,EAAE,GAAG,CAAC,QAAQ,EAAE,GAAG,CAAC,QAAQ,CAAC,SAAS,EAAE,GAAG,CAAC,QAAQ,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAA;AAEtH,KAAK,MAAM,MAAM,IAAI,gBAAgB,EAAE,CAAC;IACtC,KAAK,MAAM,KAAK,IAAI,cAAc,EAAE,CAAC;QACnC,OAAO,CAAC,KAAK,EAAE,MAAM,EAAE,gBAAgB,CAAC,CAAA;IAC1C,CAAC;AACH,CAAC;AAED,wGAAwG;AACxG,uGAAuG;AACvG,0EAA0E;AAC1E,mGAAmG;AACnG,uDAAuD;AACvD,MAAM,YAAY,GAAY,OAAO,CAAC,GAAG,CAAC,UAAU,EAAE,OAAO,CAAC,CAAA;AAC9D,IAAI,aAAa,CAAC,YAAY,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,YAAY,EAAE,UAAU,CAAC,EAAE,CAAC;IAC1E,MAAM,CAAC,cAAc,CAAC,UAAU,EAAE,OAAO,EAAE;QACzC,KAAK,EAAE,KAAK,CAAC,YAAY,EAAE,cAAc,CAAC;QAC1C,QAAQ,EAAE,IAAI;QACd,UAAU,EAAE,KAAK;QACjB,YAAY,EAAE,IAAI;KACnB,CAAC,CAAA;AACJ,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@ploaness/config",
-  "version": "1.5.0",
+  "version": "1.7.0",
   "description": "Analyzer and tool configurations owned by ploaness: ESLint, Biome, TypeScript, Vitest, Stylelint, dependency-cruiser, knip.",
   "license": "MIT",
   "author": "Herman Ciechanowiec <herman@ciechanowiec.eu>",
@@ -60,6 +60,10 @@
     "./vitest-library": {
       "types": "./dist/vitest-library.d.ts",
       "default": "./dist/vitest-library.js"
+    },
+    "./security": {
+      "types": "./dist/security.d.ts",
+      "default": "./dist/security.js"
     }
   },
   "files": [
@@ -78,27 +82,28 @@
     "@axe-core/playwright": "4.13.0",
     "@eslint-community/eslint-plugin-eslint-comments": "4.8.1",
     "@eslint/js": "10.0.1",
-    "@next/eslint-plugin-next": "16.3.7",
-    "@playwright/test": "1.63.0",
-    "@ploaness/governance": "1.5.0",
+    "@next/eslint-plugin-next": "16.4.0",
+    "@playwright/test": "1.64.0",
+    "@ploaness/governance": "1.7.0",
     "@testing-library/jest-dom": "7.0.1",
     "@testing-library/react": "16.3.3",
     "@testing-library/user-event": "14.6.7",
-    "@vitejs/plugin-react": "6.1.1",
+    "@vitejs/plugin-react": "6.1.2",
     "@vitest/eslint-plugin": "1.6.27",
-    "eslint": "10.11.0",
+    "eslint": "10.12.0",
     "eslint-config-prettier": "10.1.8",
     "eslint-plugin-functional": "10.0.1",
-    "eslint-plugin-jsdoc": "65.0.0",
+    "eslint-plugin-jsdoc": "65.2.0",
+    "eslint-plugin-playwright": "2.12.1",
     "eslint-plugin-regexp": "3.3.1",
     "eslint-plugin-sonarjs": "4.2.2",
     "eslint-plugin-testing-library": "7.16.2",
-    "eslint-plugin-unicorn": "76.0.0",
+    "eslint-plugin-unicorn": "77.0.0",
     "fast-check": "4.10.2",
-    "globals": "17.12.0",
-    "jsdom": "30.1.1",
+    "globals": "17.13.0",
+    "jsdom": "30.1.2",
     "stylelint-config-standard": "40.0.0",
-    "typescript-eslint": "8.71.0",
+    "typescript-eslint": "8.71.1",
     "vitest": "5.0.3"
   },
   "engines": {
@@ -108,7 +113,7 @@
     "access": "public"
   },
   "devDependencies": {
-    "@types/node": "26.6.3",
+    "@types/node": "26.6.4",
     "typescript": "6.0.3"
   },
   "scripts": {

package/pins.json

@@ -22,7 +22,7 @@
       "requiredFor": ["payload", "application"],
       "why": "What any Next application renders with, whether or not Payload is mounted inside it. A public frontend has the same build, the same client bundle and the same React version to agree about.",
       "versions": {
-        "next": "16.3.7",
+        "next": "16.4.0",
         "react": "19.3.0",
         "react-dom": "19.3.0",
         "@types/react": "19.3.0",
@@ -34,18 +34,18 @@
       "requiredFor": ["payload", "application", "library"],
       "why": "The definitions describing the runtime every governed package compiles against. Pinned for the toolchain's reason rather than the framework's: a type package is an input to tsc, so a patch release changes what type-checks while the project stays unchanged.",
       "versions": {
-        "@types/node": "26.6.3"
+        "@types/node": "26.6.4"
       }
     },
     {
       "name": "ecosystem",
       "why": "Packages a Payload project commonly reaches for, none of which every project needs: a database driver and its types, a loader for .env, a cross-platform way to set a variable in a package script, and the bundler a project reaches for when it runs Storybook or a Vite build. ploaness owns the version of each so no two governed projects disagree about one, and forces none of them on a project that has no use for it. Being popular is not what earns a place here, or this list would become a catalogue of every library a project might like: a package belongs when its version can change what a gate decides, or when a second copy of it in one tree is a defect rather than waste. `vite` is the clearest case of the second. ploaness's own vitest and React plugin resolve a vite of their own, so a project declaring a different one installs two - and @vitejs/plugin-react declares vite as a PEER, which makes the mismatch a loading failure rather than mere duplication. ploaness cannot close that by declaring vite itself, because under the strict layout a project's own build cannot reach ploaness's copy; only the project can declare the instance its build loads, which is exactly what a pin is for.",
       "versions": {
-        "pg": "8.23.0",
+        "pg": "8.23.1",
         "@types/pg": "8.23.1",
-        "dotenv": "18.0.4",
+        "dotenv": "18.0.6",
         "cross-env": "10.1.0",
-        "vite": "8.3.1"
+        "vite": "8.3.3"
       }
     }
   ]