@ploaness/governance 1.1.0 → 1.3.0

package/dist/editorconfig-policy.js

@@ -1,15 +1,5 @@
-// Conformance to the committed `.editorconfig`, plus the standard's line cap.
-//
-// The `.editorconfig` is a pinned managed file, so every project holds the same one - and until now
-// nothing checked a single file against it. The formatter covers only the globs it owns, which leaves
-// Markdown, YAML, shell scripts, and Dockerfiles free to carry a CRLF, a tab, a trailing space, or a
-// missing final newline.
-//
-// The expectations are read from the `.editorconfig` itself rather than restated here, so editing the
-// pinned file moves the gate with it and the gate cannot contradict the file it checks against. The one
-// value that does NOT come from there is the line cap: `max_line_length` is an editor hint that tells a
-// ruler where to sit, while the standard's 120 characters is a cap that binds as an error. A project's
-// formatter may aim shorter, and frequently does.
+// Judge committed formatting and the authored-code line cap independently of filesystem access.
+import { CODE_EXTENSIONS, hasExtension, matchesGlob } from './file-roles.js';
 /** The standard's line cap. Not configurable: a cap is never raised. */
 export const MAX_LINE_LENGTH = 120;
 const FIRST_LINE = 1;
@@ -80,6 +70,23 @@ const lineViolations = (content, rules, isLineLengthEnforced) => {
         });
     });
 };
+/**
+ * Decide whether the standard's line cap binds for one file.
+ * @param filePath the repo-relative path.
+ * @param generatedArtefacts the globs the project declares generated.
+ * @returns true for an authored code file; false for prose and for generated output.
+ */
+// A cap is a rule about how a person writes code, so it reaches code roles only - and only where a
+// person wrote it. A generator emits what it emits: Payload renders each migration statement as one SQL
+// string, and no formatter setting and no edit shortens it, because the file is frozen once applied.
+// Holding a project to a cap it cannot satisfy would teach it to exclude the path from this gate
+// altogether, which would cost the encoding and whitespace rules too - and those a generated file does
+// satisfy, because the project runs its own formatter over the output.
+// Matched as globs, not through `isGovernedCode`: `generatedArtefacts` is declared as globs and reaches
+// ESLint's ignore list as globs, and `src/migrations/**` is not merely a different pattern under regex
+// rules - `new RegExp` rejects it outright, so the gate would have thrown rather than reported.
+export const isLineCapEnforced = (filePath, generatedArtefacts) => hasExtension(filePath, CODE_EXTENSIONS) &&
+    !generatedArtefacts.some((pattern) => matchesGlob(pattern, filePath));
 /**
  * Check one file against the committed configuration.
  * @param content the file's decoded content.

package/dist/editorconfig-policy.js.map

@@ -1 +1 @@
-{"version":3,"file":"editorconfig-policy.js","sourceRoot":"","sources":["../src/editorconfig-policy.ts"],"names":[],"mappings":"AAAA,8EAA8E;AAC9E,EAAE;AACF,oGAAoG;AACpG,sGAAsG;AACtG,qGAAqG;AACrG,yBAAyB;AACzB,EAAE;AACF,sGAAsG;AACtG,wGAAwG;AACxG,wGAAwG;AACxG,uGAAuG;AACvG,kDAAkD;AAElD,wEAAwE;AACxE,MAAM,CAAC,MAAM,eAAe,GAAW,GAAG,CAAA;AAgB1C,MAAM,UAAU,GAAW,CAAC,CAAA;AAC5B,qGAAqG;AACrG,sGAAsG;AACtG,0FAA0F;AAC1F,MAAM,eAAe,GAAW,OAAO,CAAA;AACvC,MAAM,GAAG,GAAW,MAAM,CAAC,aAAa,CAAC,eAAe,CAAC,CAAA;AAEzD;;;;GAIG;AACH,qGAAqG;AACrG,sEAAsE;AACtE,MAAM,eAAe,GAAG,CAAC,IAAY,EAAqB,EAAE;IAC1D,MAAM,KAAK,GAAsB,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,GAAW,EAAU,EAAE,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,CAAA;IAC1F,MAAM,KAAK,GAAW,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAA;IAC1C,IAAI,KAAK,KAAK,CAAC,CAAC,EAAE,CAAC;QACjB,OAAO,EAAE,CAAA;IACX,CAAC;IACD,MAAM,IAAI,GAAsB,KAAK,CAAC,KAAK,CAAC,KAAK,GAAG,CAAC,CAAC,CAAA;IACtD,MAAM,GAAG,GAAW,IAAI,CAAC,SAAS,CAAC,CAAC,IAAY,EAAW,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAA;IACnF,OAAO,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAA;AAC/C,CAAC,CAAA;AAED,MAAM,UAAU,GAAG,CAAC,IAAY,EAAW,EAAE,CAC3C,IAAI,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAA;AAEzF,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC,IAAY,EAAqB,EAAE;IACnE,MAAM,UAAU,GAA2B,MAAM,CAAC,WAAW,CAC3D,eAAe,CAAC,IAAI,CAAC;SAClB,MAAM,CAAC,CAAC,IAAY,EAAW,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;SACnD,GAAG,CAAC,CAAC,IAAY,EAA6B,EAAE;QAC/C,MAAM,SAAS,GAAW,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAA;QAC3C,OAAO;YACL,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE;YAC7C,IAAI;iBACD,KAAK,CAAC,SAAS,GAAG,CAAC,CAAC;iBACpB,IAAI,EAAE;iBACN,WAAW,EAAE;SACjB,CAAA;IACH,CAAC,CAAC,CACL,CAAA;IACD,OAAO;QACL,SAAS,EAAE,UAAU,CAAC,aAAa,CAAC;QACpC,kBAAkB,EAAE,UAAU,CAAC,sBAAsB,CAAC,KAAK,MAAM;QACjE,sBAAsB,EAAE,UAAU,CAAC,0BAA0B,CAAC,KAAK,MAAM;QACzE,WAAW,EAAE,UAAU,CAAC,cAAc,CAAC;KACxC,CAAA;AACH,CAAC,CAAA;AAMD,MAAM,SAAS,GAAG,CAChB,KAAwB,EACxB,oBAA6B,EACR,EAAE,CAAC;IACxB,CAAC,KAAa,EAAE,GAAW,EAAsB,EAAE,CACjD,KAAK,CAAC,SAAS,KAAK,IAAI,IAAI,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC;QAC5C,CAAC,CAAC,oCAAoC;QACtC,CAAC,CAAC,SAAS;IACf,CAAC,IAAY,EAAsB,EAAE,CACnC,KAAK,CAAC,sBAAsB,IAAI,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,SAAS;IACzF,CAAC,IAAY,EAAsB,EAAE,CACnC,KAAK,CAAC,WAAW,KAAK,OAAO,IAAI,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;QACpD,CAAC,CAAC,wCAAwC;QAC1C,CAAC,CAAC,SAAS;IACf,CAAC,IAAY,EAAsB,EAAE,CACnC,oBAAoB,IAAI,IAAI,CAAC,MAAM,GAAG,eAAe;QACnD,CAAC,CAAC,WAAW,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,2BAA2B,MAAM,CAAC,eAAe,CAAC,EAAE;QACpF,CAAC,CAAC,SAAS;CAChB,CAAA;AAED,MAAM,cAAc,GAAG,CACrB,OAAe,EACf,KAAwB,EACxB,oBAA6B,EACK,EAAE;IACpC,MAAM,MAAM,GAAwB,SAAS,CAAC,KAAK,EAAE,oBAAoB,CAAC,CAAA;IAC1E,OAAO,OAAO;SACX,KAAK,CAAC,IAAI,CAAC;SACX,OAAO,CAAC,CAAC,GAAW,EAAE,KAAa,EAAoC,EAAE;QACxE,MAAM,IAAI,GAAW,GAAG,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAA;QAC3C,OAAO,MAAM,CAAC,OAAO,CAAC,CAAC,KAAe,EAAoC,EAAE;YAC1E,MAAM,MAAM,GAAuB,KAAK,CAAC,IAAI,EAAE,GAAG,CAAC,CAAA;YACnD,OAAO,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,KAAK,GAAG,CAAC,EAAE,MAAM,EAAE,CAAC,CAAA;QAClE,CAAC,CAAC,CAAA;IACJ,CAAC,CAAC,CAAA;AACN,CAAC,CAAA;AAED;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,0BAA0B,GAAG,CACxC,OAAe,EACf,KAAwB,EACxB,oBAA6B,EACK,EAAE;IACpC,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACzB,OAAO,EAAE,CAAA;IACX,CAAC;IACD,MAAM,aAAa,GAAqC,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC;QAC7E,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,MAAM,EAAE,mCAAmC,EAAE,CAAC;QACrE,CAAC,CAAC,EAAE,CAAA;IACN,MAAM,YAAY,GAChB,KAAK,CAAC,kBAAkB,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC;QACjD,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,MAAM,EAAE,kBAAkB,EAAE,CAAC;QACpE,CAAC,CAAC,EAAE,CAAA;IACR,OAAO;QACL,GAAG,aAAa;QAChB,GAAG,cAAc,CAAC,OAAO,EAAE,KAAK,EAAE,oBAAoB,CAAC;QACvD,GAAG,YAAY;KAChB,CAAA;AACH,CAAC,CAAA"}
+{"version":3,"file":"editorconfig-policy.js","sourceRoot":"","sources":["../src/editorconfig-policy.ts"],"names":[],"mappings":"AAAA,gGAAgG;AAEhG,OAAO,EAAE,eAAe,EAAE,YAAY,EAAE,WAAW,EAAE,MAAM,iBAAiB,CAAA;AAE5E,wEAAwE;AACxE,MAAM,CAAC,MAAM,eAAe,GAAW,GAAG,CAAA;AAgB1C,MAAM,UAAU,GAAW,CAAC,CAAA;AAC5B,qGAAqG;AACrG,sGAAsG;AACtG,0FAA0F;AAC1F,MAAM,eAAe,GAAW,OAAO,CAAA;AACvC,MAAM,GAAG,GAAW,MAAM,CAAC,aAAa,CAAC,eAAe,CAAC,CAAA;AAEzD;;;;GAIG;AACH,qGAAqG;AACrG,sEAAsE;AACtE,MAAM,eAAe,GAAG,CAAC,IAAY,EAAqB,EAAE;IAC1D,MAAM,KAAK,GAAsB,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,GAAW,EAAU,EAAE,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,CAAA;IAC1F,MAAM,KAAK,GAAW,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAA;IAC1C,IAAI,KAAK,KAAK,CAAC,CAAC,EAAE,CAAC;QACjB,OAAO,EAAE,CAAA;IACX,CAAC;IACD,MAAM,IAAI,GAAsB,KAAK,CAAC,KAAK,CAAC,KAAK,GAAG,CAAC,CAAC,CAAA;IACtD,MAAM,GAAG,GAAW,IAAI,CAAC,SAAS,CAAC,CAAC,IAAY,EAAW,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAA;IACnF,OAAO,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAA;AAC/C,CAAC,CAAA;AAED,MAAM,UAAU,GAAG,CAAC,IAAY,EAAW,EAAE,CAC3C,IAAI,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAA;AAEzF,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC,IAAY,EAAqB,EAAE;IACnE,MAAM,UAAU,GAA2B,MAAM,CAAC,WAAW,CAC3D,eAAe,CAAC,IAAI,CAAC;SAClB,MAAM,CAAC,CAAC,IAAY,EAAW,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;SACnD,GAAG,CAAC,CAAC,IAAY,EAA6B,EAAE;QAC/C,MAAM,SAAS,GAAW,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAA;QAC3C,OAAO;YACL,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE;YAC7C,IAAI;iBACD,KAAK,CAAC,SAAS,GAAG,CAAC,CAAC;iBACpB,IAAI,EAAE;iBACN,WAAW,EAAE;SACjB,CAAA;IACH,CAAC,CAAC,CACL,CAAA;IACD,OAAO;QACL,SAAS,EAAE,UAAU,CAAC,aAAa,CAAC;QACpC,kBAAkB,EAAE,UAAU,CAAC,sBAAsB,CAAC,KAAK,MAAM;QACjE,sBAAsB,EAAE,UAAU,CAAC,0BAA0B,CAAC,KAAK,MAAM;QACzE,WAAW,EAAE,UAAU,CAAC,cAAc,CAAC;KACxC,CAAA;AACH,CAAC,CAAA;AAMD,MAAM,SAAS,GAAG,CAChB,KAAwB,EACxB,oBAA6B,EACR,EAAE,CAAC;IACxB,CAAC,KAAa,EAAE,GAAW,EAAsB,EAAE,CACjD,KAAK,CAAC,SAAS,KAAK,IAAI,IAAI,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC;QAC5C,CAAC,CAAC,oCAAoC;QACtC,CAAC,CAAC,SAAS;IACf,CAAC,IAAY,EAAsB,EAAE,CACnC,KAAK,CAAC,sBAAsB,IAAI,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,SAAS;IACzF,CAAC,IAAY,EAAsB,EAAE,CACnC,KAAK,CAAC,WAAW,KAAK,OAAO,IAAI,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;QACpD,CAAC,CAAC,wCAAwC;QAC1C,CAAC,CAAC,SAAS;IACf,CAAC,IAAY,EAAsB,EAAE,CACnC,oBAAoB,IAAI,IAAI,CAAC,MAAM,GAAG,eAAe;QACnD,CAAC,CAAC,WAAW,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,2BAA2B,MAAM,CAAC,eAAe,CAAC,EAAE;QACpF,CAAC,CAAC,SAAS;CAChB,CAAA;AAED,MAAM,cAAc,GAAG,CACrB,OAAe,EACf,KAAwB,EACxB,oBAA6B,EACK,EAAE;IACpC,MAAM,MAAM,GAAwB,SAAS,CAAC,KAAK,EAAE,oBAAoB,CAAC,CAAA;IAC1E,OAAO,OAAO;SACX,KAAK,CAAC,IAAI,CAAC;SACX,OAAO,CAAC,CAAC,GAAW,EAAE,KAAa,EAAoC,EAAE;QACxE,MAAM,IAAI,GAAW,GAAG,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAA;QAC3C,OAAO,MAAM,CAAC,OAAO,CAAC,CAAC,KAAe,EAAoC,EAAE;YAC1E,MAAM,MAAM,GAAuB,KAAK,CAAC,IAAI,EAAE,GAAG,CAAC,CAAA;YACnD,OAAO,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,KAAK,GAAG,CAAC,EAAE,MAAM,EAAE,CAAC,CAAA;QAClE,CAAC,CAAC,CAAA;IACJ,CAAC,CAAC,CAAA;AACN,CAAC,CAAA;AAED;;;;;GAKG;AACH,mGAAmG;AACnG,wGAAwG;AACxG,qGAAqG;AACrG,iGAAiG;AACjG,uGAAuG;AACvG,uEAAuE;AACvE,wGAAwG;AACxG,uGAAuG;AACvG,gGAAgG;AAChG,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAC/B,QAAgB,EAChB,kBAAqC,EAC5B,EAAE,CACX,YAAY,CAAC,QAAQ,EAAE,eAAe,CAAC;IACvC,CAAC,kBAAkB,CAAC,IAAI,CAAC,CAAC,OAAe,EAAW,EAAE,CAAC,WAAW,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC,CAAA;AAExF;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,0BAA0B,GAAG,CACxC,OAAe,EACf,KAAwB,EACxB,oBAA6B,EACK,EAAE;IACpC,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACzB,OAAO,EAAE,CAAA;IACX,CAAC;IACD,MAAM,aAAa,GAAqC,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC;QAC7E,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,MAAM,EAAE,mCAAmC,EAAE,CAAC;QACrE,CAAC,CAAC,EAAE,CAAA;IACN,MAAM,YAAY,GAChB,KAAK,CAAC,kBAAkB,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC;QACjD,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,MAAM,EAAE,kBAAkB,EAAE,CAAC;QACpE,CAAC,CAAC,EAAE,CAAA;IACR,OAAO;QACL,GAAG,aAAa;QAChB,GAAG,cAAc,CAAC,OAAO,EAAE,KAAK,EAAE,oBAAoB,CAAC;QACvD,GAAG,YAAY;KAChB,CAAA;AACH,CAAC,CAAA"}

package/dist/environment-coherence.d.ts

@@ -1,5 +1,5 @@
 /** Where a variable was declared, for a message that names the two places rather than one. */
-export type EnvironmentOrigin = 'application' | 'compose';
+export type EnvironmentOrigin = 'application' | 'compose' | 'dockerfile';
 /** An environment variable declared in one place and absent from another it has to reach. */
 export interface EnvironmentViolation {
     readonly name: string;
@@ -11,6 +11,18 @@ export interface WorkflowFile {
     readonly file: string;
     readonly content: string;
 }
+/** A Dockerfile, as the rule needs it: what to call it in a finding, and what it declares. */
+export interface DockerfileSource {
+    readonly file: string;
+    readonly content: string;
+}
+/** One member's image build: the files whose reads it inlines, and the Dockerfiles that build it. */
+export interface ImageBuild {
+    /** Contents of the validated module and the framework configuration, where the member has them. */
+    readonly sources: readonly string[];
+    /** Every Dockerfile that builds this member. Empty when the member ships no image. */
+    readonly dockerfiles: readonly DockerfileSource[];
+}
 /** Inputs for {@link findEnvironmentViolations}, already read so the core stays pure. */
 export interface EnvironmentInputs {
     /** The contents of every validated environment module the repository holds, one per member. */
@@ -21,6 +33,8 @@ export interface EnvironmentInputs {
     readonly composeSources: readonly string[];
     /** Every workflow the repository ships. Only the verifying ones are judged. */
     readonly workflows: readonly WorkflowFile[];
+    /** One entry per member: what its build inlines, and the images that must declare it. */
+    readonly builds: readonly ImageBuild[];
 }
 /**
  * The module a Payload project reads `process.env` in, which is the only module ploaness exempts from
@@ -43,6 +57,15 @@ export declare const ENVIRONMENT_READ_EXEMPTIONS: readonly string[];
  * `.env.sample` has documented its variables just as well as one using `.env.example`.
  */
 export declare const ENVIRONMENT_EXAMPLE_FILES: readonly string[];
+/**
+ * The framework configuration a member may hold at its own root.
+ *
+ * It is evaluated during the image build, so a variable it reads is one the build has to be given - and
+ * it sits outside `sourceRoots`, which is why the `process.env` ban never reached it and why this rule
+ * has to. Every spelling present is read, unlike the example files above, because a project ships one
+ * and reading all of them cannot produce two answers that disagree.
+ */
+export declare const BUILD_CONFIGURATION_FILES: readonly string[];
 /**
  * The variables an application reads out of its validated environment module.
  * @param source the contents of that module.
@@ -61,6 +84,22 @@ export declare const documentedEnvironmentNames: (example: string) => readonly s
  * @returns each name once, sorted.
  */
 export declare const interpolatedEnvironmentNames: (compose: string) => readonly string[];
+/**
+ * The variables a file's reads inline into the image at build time.
+ * @param source the contents of a validated environment module or a framework configuration.
+ * @returns each name once, sorted.
+ */
+export declare const inlinedEnvironmentNames: (source: string) => readonly string[];
+/**
+ * The build arguments a Dockerfile declares, in every stage and under either spelling.
+ *
+ * Every stage, because `ARG` scope is per stage and which stage runs the build is not a fact this text
+ * can establish. Reading the file as one namespace can only ACCEPT a declaration that sits in the wrong
+ * stage; resolving stages by guessing which `RUN` is the build would REJECT correct files.
+ * @param dockerfile the Dockerfile body.
+ * @returns each name once, sorted.
+ */
+export declare const declaredBuildArguments: (dockerfile: string) => readonly string[];
 /**
  * The variables a workflow supplies, by any means and at any nesting depth.
  * @param workflow the contents of the workflow file.
@@ -73,15 +112,30 @@ export declare const workflowSuppliedNames: (workflow: string) => readonly strin
  * @returns true when the workflow invokes verification or a single gate.
  */
 export declare const isVerifyingWorkflow: (workflow: string) => boolean;
+/**
+ * The Dockerfiles that build one member: those inside its own directory, and - for the member at the
+ * repository root - those no other member owns.
+ * @param memberPath the member's repo-relative path, `.` at the repository root.
+ * @param everyMemberPath every governed member's path.
+ * @param dockerfiles every Dockerfile the repository tracks.
+ * @returns the Dockerfiles that build this member, in the order given.
+ */
+export declare const dockerfilesBuilding: (memberPath: string, everyMemberPath: readonly string[], dockerfiles: readonly DockerfileSource[]) => readonly DockerfileSource[];
 /**
  * Every environment variable declared in one place and absent from another it has to reach.
  *
- * Three containments, each one-directional. What the application reads must be documented. What a
+ * Four containments, each one-directional. What the application reads must be documented. What a
  * compose file interpolates must be documented, because `docker compose config` reads the example file
- * a developer copied. And what a compose file interpolates must be supplied by every workflow that
- * verifies, because a workflow has no copied file to interpolate from.
+ * a developer copied. What a compose file interpolates must be supplied by every workflow that
+ * verifies, because a workflow has no copied file to interpolate from. And what a build inlines must be
+ * declared as an `ARG`, because docker discards a `--build-arg` the Dockerfile never named and warns
+ * rather than failing - so the value is absent from the image and nothing says so.
+ *
+ * The inlined names feed the Dockerfile containment ALONE. Joining them to the example-file rule would
+ * report a member that documents its public variables in its own example file rather than the
+ * repository's, which is where they belong and where this reader does not look.
  * @param inputs the files, already read.
- * @returns the violations, sorted by name within each rule. An empty array means the four places agree.
+ * @returns the violations, sorted by name within each rule. An empty array means the five places agree.
  */
 export declare const findEnvironmentViolations: (inputs: EnvironmentInputs) => readonly EnvironmentViolation[];
 //# sourceMappingURL=environment-coherence.d.ts.map

package/dist/environment-coherence.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"environment-coherence.d.ts","sourceRoot":"","sources":["../src/environment-coherence.ts"],"names":[],"mappings":"AAwBA,8FAA8F;AAC9F,MAAM,MAAM,iBAAiB,GAAG,aAAa,GAAG,SAAS,CAAA;AAEzD,6FAA6F;AAC7F,MAAM,WAAW,oBAAoB;IACnC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;IACrB,QAAQ,CAAC,MAAM,EAAE,iBAAiB,CAAA;IAClC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;CACxB;AAED,wFAAwF;AACxF,MAAM,WAAW,YAAY;IAC3B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;IACrB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;CACzB;AAED,yFAAyF;AACzF,MAAM,WAAW,iBAAiB;IAChC,+FAA+F;IAC/F,QAAQ,CAAC,kBAAkB,EAAE,SAAS,MAAM,EAAE,CAAA;IAC9C,qFAAqF;IACrF,QAAQ,CAAC,OAAO,EAAE,MAAM,GAAG,SAAS,CAAA;IACpC,0CAA0C;IAC1C,QAAQ,CAAC,cAAc,EAAE,SAAS,MAAM,EAAE,CAAA;IAC1C,+EAA+E;IAC/E,QAAQ,CAAC,SAAS,EAAE,SAAS,YAAY,EAAE,CAAA;CAC5C;AAED;;;GAGG;AACH,eAAO,MAAM,4BAA4B,EAAE,MAAiC,CAAA;AAE5E;;;;;;;GAOG;AACH,eAAO,MAAM,2BAA2B,EAAE,SAAS,MAAM,EAGxD,CAAA;AAED;;;;;GAKG;AACH,eAAO,MAAM,yBAAyB,EAAE,SAAS,MAAM,EAItD,CAAA;AA4CD;;;;GAIG;AACH,eAAO,MAAM,oBAAoB,GAAI,QAAQ,MAAM,KAAG,SAAS,MAAM,EAChB,CAAA;AAErD;;;;GAIG;AACH,eAAO,MAAM,0BAA0B,GAAI,SAAS,MAAM,KAAG,SAAS,MAAM,EAClB,CAAA;AAE1D;;;;GAIG;AACH,eAAO,MAAM,4BAA4B,GAAI,SAAS,MAAM,KAAG,SAAS,MAAM,EACjB,CAAA;AAE7D;;;;GAIG;AACH,eAAO,MAAM,qBAAqB,GAAI,UAAU,MAAM,KAAG,SAAS,MAAM,EAIpE,CAAA;AAEJ;;;;GAIG;AACH,eAAO,MAAM,mBAAmB,GAAI,UAAU,MAAM,KAAG,OAC4B,CAAA;AA+BnF;;;;;;;;;GASG;AACH,eAAO,MAAM,yBAAyB,GACpC,QAAQ,iBAAiB,KACxB,SAAS,oBAAoB,EAkC/B,CAAA"}
+{"version":3,"file":"environment-coherence.d.ts","sourceRoot":"","sources":["../src/environment-coherence.ts"],"names":[],"mappings":"AAIA,8FAA8F;AAC9F,MAAM,MAAM,iBAAiB,GAAG,aAAa,GAAG,SAAS,GAAG,YAAY,CAAA;AAExE,6FAA6F;AAC7F,MAAM,WAAW,oBAAoB;IACnC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;IACrB,QAAQ,CAAC,MAAM,EAAE,iBAAiB,CAAA;IAClC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;CACxB;AAED,wFAAwF;AACxF,MAAM,WAAW,YAAY;IAC3B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;IACrB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;CACzB;AAED,8FAA8F;AAC9F,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;IACrB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;CACzB;AAED,qGAAqG;AACrG,MAAM,WAAW,UAAU;IACzB,mGAAmG;IACnG,QAAQ,CAAC,OAAO,EAAE,SAAS,MAAM,EAAE,CAAA;IACnC,sFAAsF;IACtF,QAAQ,CAAC,WAAW,EAAE,SAAS,gBAAgB,EAAE,CAAA;CAClD;AAED,yFAAyF;AACzF,MAAM,WAAW,iBAAiB;IAChC,+FAA+F;IAC/F,QAAQ,CAAC,kBAAkB,EAAE,SAAS,MAAM,EAAE,CAAA;IAC9C,qFAAqF;IACrF,QAAQ,CAAC,OAAO,EAAE,MAAM,GAAG,SAAS,CAAA;IACpC,0CAA0C;IAC1C,QAAQ,CAAC,cAAc,EAAE,SAAS,MAAM,EAAE,CAAA;IAC1C,+EAA+E;IAC/E,QAAQ,CAAC,SAAS,EAAE,SAAS,YAAY,EAAE,CAAA;IAC3C,yFAAyF;IACzF,QAAQ,CAAC,MAAM,EAAE,SAAS,UAAU,EAAE,CAAA;CACvC;AAED;;;GAGG;AACH,eAAO,MAAM,4BAA4B,EAAE,MAAiC,CAAA;AAE5E;;;;;;;GAOG;AACH,eAAO,MAAM,2BAA2B,EAAE,SAAS,MAAM,EAGxD,CAAA;AAED;;;;;GAKG;AACH,eAAO,MAAM,yBAAyB,EAAE,SAAS,MAAM,EAItD,CAAA;AAED;;;;;;;GAOG;AACH,eAAO,MAAM,yBAAyB,EAAE,SAAS,MAAM,EAItD,CAAA;AAgED;;;;GAIG;AACH,eAAO,MAAM,oBAAoB,GAAI,QAAQ,MAAM,KAAG,SAAS,MAAM,EAChB,CAAA;AAErD;;;;GAIG;AACH,eAAO,MAAM,0BAA0B,GAAI,SAAS,MAAM,KAAG,SAAS,MAAM,EAClB,CAAA;AAE1D;;;;GAIG;AACH,eAAO,MAAM,4BAA4B,GAAI,SAAS,MAAM,KAAG,SAAS,MAAM,EACjB,CAAA;AAE7D;;;;GAIG;AACH,eAAO,MAAM,uBAAuB,GAAI,QAAQ,MAAM,KAAG,SAAS,MAAM,EAIpE,CAAA;AAQJ;;;;;;;;GAQG;AACH,eAAO,MAAM,sBAAsB,GAAI,YAAY,MAAM,KAAG,SAAS,MAAM,EAMxE,CAAA;AAEH;;;;GAIG;AACH,eAAO,MAAM,qBAAqB,GAAI,UAAU,MAAM,KAAG,SAAS,MAAM,EAIpE,CAAA;AAEJ;;;;GAIG;AACH,eAAO,MAAM,mBAAmB,GAAI,UAAU,MAAM,KAAG,OAC4B,CAAA;AAcnF;;;;;;;GAOG;AACH,eAAO,MAAM,mBAAmB,GAC9B,YAAY,MAAM,EAClB,iBAAiB,SAAS,MAAM,EAAE,EAClC,aAAa,SAAS,gBAAgB,EAAE,KACvC,SAAS,gBAAgB,EAIzB,CAAA;AA6DH;;;;;;;;;;;;;;;GAeG;AACH,eAAO,MAAM,yBAAyB,GACpC,QAAQ,iBAAiB,KACxB,SAAS,oBAAoB,EAqC/B,CAAA"}

package/dist/environment-coherence.js

@@ -1,26 +1,6 @@
-// Environment-coherence policy: the pure logic that finds an environment variable declared in one place
-// and missing from another it must also reach. The `environment` gate in
-// packages/cli/src/checks/environment.ts reads the files.
-//
-// A variable lands in more than one place by nature, and nothing links those places. The application
-// reads it, `.env.example` documents it for a clone, a compose file interpolates it, and a workflow
-// exports it into the job. Miss one and the failure is somewhere other than where the omission is: a
-// clone boots on a default it never chose, or `docker compose config` fails on CI alone, several steps
-// from the commit that added the name. This is the sibling of document-references.ts and
-// config-references.ts, applied to environment variables instead of scripts, docs, or config paths.
-//
-// EVERY RULE IS ONE-DIRECTIONAL, which is what makes the gate false-positive-free. What is read, or
-// interpolated, must be documented; what is documented need not be read. `.env.example` legitimately
-// carries an optional variable no code path requires - a key for a manual script, a value only a
-// developer regenerating an asset ever sets - and demanding the reverse containment would report those
-// as rot.
-//
-// It is NOT a YAML parser and must not become one, for the reason yaml-blocks.ts states. The workflow
-// half asks only whether a name appears in the file at all, not whether it appears in the block that
-// would put it in the job's environment. That is deliberate: adjudicating YAML scoping would need a
-// parser, and the mistake this gate exists to catch is forgetting the variable altogether rather than
-// declaring it one nesting level from where it was needed. Over-accepting costs a missed finding;
-// guessing at scope would cost a wrong one.
+// Require environment reads, example declarations, compose interpolation, verifying workflows, and the
+// build arguments an image declares to agree.
+import { logicalLines } from './container-images.js';
 /**
  * The module a Payload project reads `process.env` in, which is the only module ploaness exempts from
  * the ban and therefore the only one this rule can read a variable name out of.
@@ -49,6 +29,19 @@ export const ENVIRONMENT_EXAMPLE_FILES = [
     '.env.sample',
     '.env.template',
 ];
+/**
+ * The framework configuration a member may hold at its own root.
+ *
+ * It is evaluated during the image build, so a variable it reads is one the build has to be given - and
+ * it sits outside `sourceRoots`, which is why the `process.env` ban never reached it and why this rule
+ * has to. Every spelling present is read, unlike the example files above, because a project ships one
+ * and reading all of them cannot produce two answers that disagree.
+ */
+export const BUILD_CONFIGURATION_FILES = [
+    'next.config.ts',
+    'next.config.mjs',
+    'next.config.js',
+];
 // BRACKET ACCESS ONLY, and that is the rule rather than a shortcut. `process.env` is an index
 // signature, so a variable this project invented can only be read with brackets; a variable node or the
 // framework DECLARES - `NODE_ENV` above all - is a known property and is read with a dot. The two forms
@@ -63,6 +56,23 @@ const EXAMPLE_ASSIGNMENT = /^[ \t]*(?:export[ \t]+)?(?<name>[A-Za-z_]\w*)[ \t]*=
 // gate's business. The braced form alone is read: `$NAME` is legal in compose and rare in practice, and
 // telling it apart from a `$$` escape or a shell fragment inside a `command:` is guesswork.
 const COMPOSE_INTERPOLATION = /\$\{(?<name>[A-Z_]\w*)\}/gi;
+// BOTH ACCESS FORMS, and the PREFIX is what makes that sound rather than a relaxation of the rule
+// above. `NEXT_PUBLIC_` is reserved by the framework for values the project invents; no runtime declares
+// one, so a dotted read of a prefixed name cannot be naming an ambient variable the way
+// `process.env.NODE_ENV` does. It is also the ONLY form the bundler substitutes, because the
+// substitution is textual - so the dotted read is not merely admissible here, it is the read that makes
+// the value a build input at all. A name read through a plain record parameter is not matched: nothing
+// is inlined there, and the value arrives from whoever built the record.
+const INLINED_DOTTED_READ = /process\.env\.(?<name>NEXT_PUBLIC_\w+)/g;
+const INLINED_BRACKETED_READ = /process\.env\[\s*(?<quote>['"])(?<name>NEXT_PUBLIC_\w+)\k<quote>\s*\]/g;
+// A build-argument DECLARATION, with or without a default. The compose analogue above puts
+// `${NAME:-5432}` out of scope because a default SUPPLIES the value and the claim was that something
+// must supply it. This containment runs the other way - the Dockerfile is the side that must DECLARE -
+// and `ARG NAME=x` declares NAME just as `ARG NAME` does: `--build-arg NAME=...` is honoured either way
+// and the read resolves. What this rule is about is a name the file never mentions.
+const ARG_DECLARATION = /^[ \t]*ARG[ \t]+(?<names>\S.*)$/i;
+const ARGUMENT_SEPARATOR = /[ \t]+/;
+const DEFAULT_SEPARATOR = '=';
 // A name a workflow supplies: a mapping key in SCREAMING_SNAKE, or a reference to a secret, a variable,
 // or the job environment. The key form is matched at any indentation, for the reason the header states.
 const WORKFLOW_KEY = /^[ \t]*(?<name>[A-Z_][A-Z0-9_]*)[ \t]*:/gm;
@@ -95,6 +105,32 @@ export const documentedEnvironmentNames = (example) => uniqueSorted(namesMatchin
  * @returns each name once, sorted.
  */
 export const interpolatedEnvironmentNames = (compose) => uniqueSorted(namesMatching(compose, COMPOSE_INTERPOLATION));
+/**
+ * The variables a file's reads inline into the image at build time.
+ * @param source the contents of a validated environment module or a framework configuration.
+ * @returns each name once, sorted.
+ */
+export const inlinedEnvironmentNames = (source) => uniqueSorted([
+    ...namesMatching(source, INLINED_DOTTED_READ),
+    ...namesMatching(source, INLINED_BRACKETED_READ),
+]);
+const argumentNamesIn = (declaration) => declaration
+    .split(ARGUMENT_SEPARATOR)
+    .map((token) => token.split(DEFAULT_SEPARATOR)[0] ?? '')
+    .filter((name) => name.length > 0);
+/**
+ * The build arguments a Dockerfile declares, in every stage and under either spelling.
+ *
+ * Every stage, because `ARG` scope is per stage and which stage runs the build is not a fact this text
+ * can establish. Reading the file as one namespace can only ACCEPT a declaration that sits in the wrong
+ * stage; resolving stages by guessing which `RUN` is the build would REJECT correct files.
+ * @param dockerfile the Dockerfile body.
+ * @returns each name once, sorted.
+ */
+export const declaredBuildArguments = (dockerfile) => uniqueSorted(logicalLines(dockerfile).flatMap((line) => {
+    const names = ARG_DECLARATION.exec(line)?.groups?.['names'];
+    return names === undefined ? [] : argumentNamesIn(names);
+}));
 /**
  * The variables a workflow supplies, by any means and at any nesting depth.
  * @param workflow the contents of the workflow file.
@@ -110,6 +146,22 @@ export const workflowSuppliedNames = (workflow) => uniqueSorted([
  * @returns true when the workflow invokes verification or a single gate.
  */
 export const isVerifyingWorkflow = (workflow) => VERIFYING_COMMANDS.some((command) => workflow.includes(command));
+const ROOT_MEMBER = '.';
+// The member a path belongs to: the deepest one whose directory contains it, the same rule a working
+// directory is resolved by, so a nested member keeps its own image instead of inheriting its parent's.
+const ownerOf = (file, everyMemberPath) => [...everyMemberPath]
+    .filter((candidate) => candidate !== ROOT_MEMBER && file.startsWith(`${candidate}/`))
+    .toSorted((left, right) => right.length - left.length)
+    .at(0) ?? ROOT_MEMBER;
+/**
+ * The Dockerfiles that build one member: those inside its own directory, and - for the member at the
+ * repository root - those no other member owns.
+ * @param memberPath the member's repo-relative path, `.` at the repository root.
+ * @param everyMemberPath every governed member's path.
+ * @param dockerfiles every Dockerfile the repository tracks.
+ * @returns the Dockerfiles that build this member, in the order given.
+ */
+export const dockerfilesBuilding = (memberPath, everyMemberPath, dockerfiles) => dockerfiles.filter((dockerfile) => ownerOf(dockerfile.file, everyMemberPath) === memberPath);
 const undocumented = (names, documented, origin, reason) => names
     .filter((name) => !documented.has(name))
     .map((name) => ({ name, origin, reason }));
@@ -126,15 +178,42 @@ const missingFromWorkflow = (names, workflow) => {
         ].join(' '),
     }));
 };
+const missingBuildArguments = (build) => {
+    // A member that ships no image owes no build argument. One-directional, like every rule above.
+    if (build.dockerfiles.length === 0) {
+        return [];
+    }
+    const declared = new Set(build.dockerfiles.flatMap((dockerfile) => declaredBuildArguments(dockerfile.content)));
+    const files = build.dockerfiles
+        .map((dockerfile) => dockerfile.file)
+        .join(', ');
+    return uniqueSorted(build.sources.flatMap((source) => inlinedEnvironmentNames(source)))
+        .filter((name) => !declared.has(name))
+        .map((name) => ({
+        name,
+        origin: 'dockerfile',
+        reason: [
+            `inlined into the image at build time but declared by no ARG in ${files},`,
+            'so docker discards the --build-arg that supplies it and warns rather than failing:',
+            `add "ARG ${name}" to the stage that runs the build`,
+        ].join(' '),
+    }));
+};
 /**
  * Every environment variable declared in one place and absent from another it has to reach.
  *
- * Three containments, each one-directional. What the application reads must be documented. What a
+ * Four containments, each one-directional. What the application reads must be documented. What a
  * compose file interpolates must be documented, because `docker compose config` reads the example file
- * a developer copied. And what a compose file interpolates must be supplied by every workflow that
- * verifies, because a workflow has no copied file to interpolate from.
+ * a developer copied. What a compose file interpolates must be supplied by every workflow that
+ * verifies, because a workflow has no copied file to interpolate from. And what a build inlines must be
+ * declared as an `ARG`, because docker discards a `--build-arg` the Dockerfile never named and warns
+ * rather than failing - so the value is absent from the image and nothing says so.
+ *
+ * The inlined names feed the Dockerfile containment ALONE. Joining them to the example-file rule would
+ * report a member that documents its public variables in its own example file rather than the
+ * repository's, which is where they belong and where this reader does not look.
  * @param inputs the files, already read.
- * @returns the violations, sorted by name within each rule. An empty array means the four places agree.
+ * @returns the violations, sorted by name within each rule. An empty array means the five places agree.
  */
 export const findEnvironmentViolations = (inputs) => {
     const documented = new Set(inputs.example === undefined ? [] : documentedEnvironmentNames(inputs.example));
@@ -145,6 +224,7 @@ export const findEnvironmentViolations = (inputs) => {
         ...undocumented(read, documented, 'application', 'read by the validated environment module but documented in no example file'),
         ...undocumented(interpolated, documented, 'compose', 'interpolated by a compose file but documented in no example file'),
         ...verifying.flatMap((workflow) => missingFromWorkflow(interpolated, workflow)),
+        ...inputs.builds.flatMap((build) => missingBuildArguments(build)),
     ];
 };
 //# sourceMappingURL=environment-coherence.js.map

package/dist/environment-coherence.js.map

@@ -1 +1 @@
-{"version":3,"file":"environment-coherence.js","sourceRoot":"","sources":["../src/environment-coherence.ts"],"names":[],"mappings":"AAAA,wGAAwG;AACxG,yEAAyE;AACzE,0DAA0D;AAC1D,EAAE;AACF,qGAAqG;AACrG,oGAAoG;AACpG,qGAAqG;AACrG,uGAAuG;AACvG,yFAAyF;AACzF,oGAAoG;AACpG,EAAE;AACF,oGAAoG;AACpG,qGAAqG;AACrG,iGAAiG;AACjG,uGAAuG;AACvG,UAAU;AACV,EAAE;AACF,sGAAsG;AACtG,qGAAqG;AACrG,oGAAoG;AACpG,sGAAsG;AACtG,kGAAkG;AAClG,4CAA4C;AA8B5C;;;GAGG;AACH,MAAM,CAAC,MAAM,4BAA4B,GAAW,wBAAwB,CAAA;AAE5E;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,2BAA2B,GAAsB;IAC5D,4BAA4B;IAC5B,cAAc;CACf,CAAA;AAED;;;;;GAKG;AACH,MAAM,CAAC,MAAM,yBAAyB,GAAsB;IAC1D,cAAc;IACd,aAAa;IACb,eAAe;CAChB,CAAA;AAED,8FAA8F;AAC9F,wGAAwG;AACxG,wGAAwG;AACxG,iGAAiG;AACjG,yEAAyE;AACzE,MAAM,cAAc,GAAW,qEAAqE,CAAA;AAEpG,sGAAsG;AACtG,0DAA0D;AAC1D,MAAM,kBAAkB,GAAW,wDAAwD,CAAA;AAE3F,uGAAuG;AACvG,mGAAmG;AACnG,wGAAwG;AACxG,4FAA4F;AAC5F,MAAM,qBAAqB,GAAW,4BAA4B,CAAA;AAElE,wGAAwG;AACxG,wGAAwG;AACxG,MAAM,YAAY,GAAW,2CAA2C,CAAA;AACxE,MAAM,0BAA0B,GAC9B,4DAA4D,CAAA;AAE9D,gGAAgG;AAChG,wGAAwG;AACxG,6FAA6F;AAC7F,MAAM,kBAAkB,GAAsB,CAAC,iBAAiB,EAAE,eAAe,EAAE,YAAY,CAAC,CAAA;AAEhG,8FAA8F;AAC9F,qGAAqG;AACrG,qGAAqG;AACrG,sEAAsE;AACtE,MAAM,aAAa,GAAG,CAAC,MAAc,EAAE,OAAe,EAAqB,EAAE,CAC3E,CAAC,GAAG,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,KAAsB,EAAU,EAAE,CACnE,MAAM,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,MAAM,CAAC,CAAC,CAC/B,CAAA;AAEH,MAAM,YAAY,GAAG,CAAC,KAAwB,EAAqB,EAAE,CACnE,CAAC,GAAG,IAAI,GAAG,CAAS,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAY,EAAE,KAAa,EAAU,EAAE,CACvE,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,CAC1B,CAAA;AAEH;;;;GAIG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC,MAAc,EAAqB,EAAE,CACxE,YAAY,CAAC,aAAa,CAAC,MAAM,EAAE,cAAc,CAAC,CAAC,CAAA;AAErD;;;;GAIG;AACH,MAAM,CAAC,MAAM,0BAA0B,GAAG,CAAC,OAAe,EAAqB,EAAE,CAC/E,YAAY,CAAC,aAAa,CAAC,OAAO,EAAE,kBAAkB,CAAC,CAAC,CAAA;AAE1D;;;;GAIG;AACH,MAAM,CAAC,MAAM,4BAA4B,GAAG,CAAC,OAAe,EAAqB,EAAE,CACjF,YAAY,CAAC,aAAa,CAAC,OAAO,EAAE,qBAAqB,CAAC,CAAC,CAAA;AAE7D;;;;GAIG;AACH,MAAM,CAAC,MAAM,qBAAqB,GAAG,CAAC,QAAgB,EAAqB,EAAE,CAC3E,YAAY,CAAC;IACX,GAAG,aAAa,CAAC,QAAQ,EAAE,YAAY,CAAC;IACxC,GAAG,aAAa,CAAC,QAAQ,EAAE,0BAA0B,CAAC;CACvD,CAAC,CAAA;AAEJ;;;;GAIG;AACH,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC,QAAgB,EAAW,EAAE,CAC/D,kBAAkB,CAAC,IAAI,CAAC,CAAC,OAAe,EAAW,EAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAA;AAEnF,MAAM,YAAY,GAAG,CACnB,KAAwB,EACxB,UAA+B,EAC/B,MAAyB,EACzB,MAAc,EACmB,EAAE,CACnC,KAAK;KACF,MAAM,CAAC,CAAC,IAAY,EAAW,EAAE,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;KACxD,GAAG,CAAC,CAAC,IAAY,EAAwB,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC,CAAA;AAE5E,MAAM,mBAAmB,GAAG,CAC1B,KAAwB,EACxB,QAAsB,EACW,EAAE;IACnC,MAAM,QAAQ,GAAwB,IAAI,GAAG,CAAC,qBAAqB,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAA;IACtF,OAAO,KAAK;SACT,MAAM,CAAC,CAAC,IAAY,EAAW,EAAE,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;SACtD,GAAG,CACF,CAAC,IAAY,EAAwB,EAAE,CAAC,CAAC;QACvC,IAAI;QACJ,MAAM,EAAE,SAAS;QACjB,MAAM,EAAE;YACN,oDAAoD;YACpD,GAAG,QAAQ,CAAC,IAAI,uCAAuC;SACxD,CAAC,IAAI,CAAC,GAAG,CAAC;KACZ,CAAC,CACH,CAAA;AACL,CAAC,CAAA;AAED;;;;;;;;;GASG;AACH,MAAM,CAAC,MAAM,yBAAyB,GAAG,CACvC,MAAyB,EACQ,EAAE;IACnC,MAAM,UAAU,GAAwB,IAAI,GAAG,CAC7C,MAAM,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,0BAA0B,CAAC,MAAM,CAAC,OAAO,CAAC,CAC/E,CAAA;IACD,MAAM,IAAI,GAAsB,YAAY,CAC1C,MAAM,CAAC,kBAAkB,CAAC,OAAO,CAAC,CAAC,MAAc,EAAqB,EAAE,CACtE,oBAAoB,CAAC,MAAM,CAAC,CAC7B,CACF,CAAA;IACD,MAAM,YAAY,GAAsB,YAAY,CAClD,MAAM,CAAC,cAAc,CAAC,OAAO,CAAC,CAAC,MAAc,EAAqB,EAAE,CAClE,4BAA4B,CAAC,MAAM,CAAC,CACrC,CACF,CAAA;IACD,MAAM,SAAS,GAA4B,MAAM,CAAC,SAAS,CAAC,MAAM,CAChE,CAAC,QAAsB,EAAW,EAAE,CAAC,mBAAmB,CAAC,QAAQ,CAAC,OAAO,CAAC,CAC3E,CAAA;IACD,OAAO;QACL,GAAG,YAAY,CACb,IAAI,EACJ,UAAU,EACV,aAAa,EACb,4EAA4E,CAC7E;QACD,GAAG,YAAY,CACb,YAAY,EACZ,UAAU,EACV,SAAS,EACT,kEAAkE,CACnE;QACD,GAAG,SAAS,CAAC,OAAO,CAAC,CAAC,QAAsB,EAAmC,EAAE,CAC/E,mBAAmB,CAAC,YAAY,EAAE,QAAQ,CAAC,CAC5C;KACF,CAAA;AACH,CAAC,CAAA"}
+{"version":3,"file":"environment-coherence.js","sourceRoot":"","sources":["../src/environment-coherence.ts"],"names":[],"mappings":"AAAA,uGAAuG;AACvG,8CAA8C;AAC9C,OAAO,EAAE,YAAY,EAAE,MAAM,uBAAuB,CAAA;AA8CpD;;;GAGG;AACH,MAAM,CAAC,MAAM,4BAA4B,GAAW,wBAAwB,CAAA;AAE5E;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,2BAA2B,GAAsB;IAC5D,4BAA4B;IAC5B,cAAc;CACf,CAAA;AAED;;;;;GAKG;AACH,MAAM,CAAC,MAAM,yBAAyB,GAAsB;IAC1D,cAAc;IACd,aAAa;IACb,eAAe;CAChB,CAAA;AAED;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,yBAAyB,GAAsB;IAC1D,gBAAgB;IAChB,iBAAiB;IACjB,gBAAgB;CACjB,CAAA;AAED,8FAA8F;AAC9F,wGAAwG;AACxG,wGAAwG;AACxG,iGAAiG;AACjG,yEAAyE;AACzE,MAAM,cAAc,GAAW,qEAAqE,CAAA;AAEpG,sGAAsG;AACtG,0DAA0D;AAC1D,MAAM,kBAAkB,GAAW,wDAAwD,CAAA;AAE3F,uGAAuG;AACvG,mGAAmG;AACnG,wGAAwG;AACxG,4FAA4F;AAC5F,MAAM,qBAAqB,GAAW,4BAA4B,CAAA;AAElE,kGAAkG;AAClG,yGAAyG;AACzG,wFAAwF;AACxF,6FAA6F;AAC7F,wGAAwG;AACxG,uGAAuG;AACvG,yEAAyE;AACzE,MAAM,mBAAmB,GAAW,yCAAyC,CAAA;AAC7E,MAAM,sBAAsB,GAC1B,wEAAwE,CAAA;AAE1E,2FAA2F;AAC3F,qGAAqG;AACrG,uGAAuG;AACvG,wGAAwG;AACxG,oFAAoF;AACpF,MAAM,eAAe,GAAW,kCAAkC,CAAA;AAClE,MAAM,kBAAkB,GAAW,QAAQ,CAAA;AAC3C,MAAM,iBAAiB,GAAW,GAAG,CAAA;AAErC,wGAAwG;AACxG,wGAAwG;AACxG,MAAM,YAAY,GAAW,2CAA2C,CAAA;AACxE,MAAM,0BAA0B,GAC9B,4DAA4D,CAAA;AAE9D,gGAAgG;AAChG,wGAAwG;AACxG,6FAA6F;AAC7F,MAAM,kBAAkB,GAAsB,CAAC,iBAAiB,EAAE,eAAe,EAAE,YAAY,CAAC,CAAA;AAEhG,8FAA8F;AAC9F,qGAAqG;AACrG,qGAAqG;AACrG,sEAAsE;AACtE,MAAM,aAAa,GAAG,CAAC,MAAc,EAAE,OAAe,EAAqB,EAAE,CAC3E,CAAC,GAAG,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,KAAsB,EAAU,EAAE,CACnE,MAAM,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,MAAM,CAAC,CAAC,CAC/B,CAAA;AAEH,MAAM,YAAY,GAAG,CAAC,KAAwB,EAAqB,EAAE,CACnE,CAAC,GAAG,IAAI,GAAG,CAAS,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAY,EAAE,KAAa,EAAU,EAAE,CACvE,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,CAC1B,CAAA;AAEH;;;;GAIG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC,MAAc,EAAqB,EAAE,CACxE,YAAY,CAAC,aAAa,CAAC,MAAM,EAAE,cAAc,CAAC,CAAC,CAAA;AAErD;;;;GAIG;AACH,MAAM,CAAC,MAAM,0BAA0B,GAAG,CAAC,OAAe,EAAqB,EAAE,CAC/E,YAAY,CAAC,aAAa,CAAC,OAAO,EAAE,kBAAkB,CAAC,CAAC,CAAA;AAE1D;;;;GAIG;AACH,MAAM,CAAC,MAAM,4BAA4B,GAAG,CAAC,OAAe,EAAqB,EAAE,CACjF,YAAY,CAAC,aAAa,CAAC,OAAO,EAAE,qBAAqB,CAAC,CAAC,CAAA;AAE7D;;;;GAIG;AACH,MAAM,CAAC,MAAM,uBAAuB,GAAG,CAAC,MAAc,EAAqB,EAAE,CAC3E,YAAY,CAAC;IACX,GAAG,aAAa,CAAC,MAAM,EAAE,mBAAmB,CAAC;IAC7C,GAAG,aAAa,CAAC,MAAM,EAAE,sBAAsB,CAAC;CACjD,CAAC,CAAA;AAEJ,MAAM,eAAe,GAAG,CAAC,WAAmB,EAAqB,EAAE,CACjE,WAAW;KACR,KAAK,CAAC,kBAAkB,CAAC;KACzB,GAAG,CAAC,CAAC,KAAa,EAAU,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,iBAAiB,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;KACvE,MAAM,CAAC,CAAC,IAAY,EAAW,EAAE,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAA;AAEvD;;;;;;;;GAQG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAAG,CAAC,UAAkB,EAAqB,EAAE,CAC9E,YAAY,CACV,YAAY,CAAC,UAAU,CAAC,CAAC,OAAO,CAAC,CAAC,IAAY,EAAqB,EAAE;IACnE,MAAM,KAAK,GAAuB,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC,OAAO,CAAC,CAAA;IAC/E,OAAO,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,eAAe,CAAC,KAAK,CAAC,CAAA;AAC1D,CAAC,CAAC,CACH,CAAA;AAEH;;;;GAIG;AACH,MAAM,CAAC,MAAM,qBAAqB,GAAG,CAAC,QAAgB,EAAqB,EAAE,CAC3E,YAAY,CAAC;IACX,GAAG,aAAa,CAAC,QAAQ,EAAE,YAAY,CAAC;IACxC,GAAG,aAAa,CAAC,QAAQ,EAAE,0BAA0B,CAAC;CACvD,CAAC,CAAA;AAEJ;;;;GAIG;AACH,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC,QAAgB,EAAW,EAAE,CAC/D,kBAAkB,CAAC,IAAI,CAAC,CAAC,OAAe,EAAW,EAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAA;AAEnF,MAAM,WAAW,GAAW,GAAG,CAAA;AAE/B,qGAAqG;AACrG,uGAAuG;AACvG,MAAM,OAAO,GAAG,CAAC,IAAY,EAAE,eAAkC,EAAU,EAAE,CAC3E,CAAC,GAAG,eAAe,CAAC;KACjB,MAAM,CACL,CAAC,SAAiB,EAAW,EAAE,CAAC,SAAS,KAAK,WAAW,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,SAAS,GAAG,CAAC,CAC9F;KACA,QAAQ,CAAC,CAAC,IAAY,EAAE,KAAa,EAAU,EAAE,CAAC,KAAK,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC;KAC7E,EAAE,CAAC,CAAC,CAAC,IAAI,WAAW,CAAA;AAEzB;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,mBAAmB,GAAG,CACjC,UAAkB,EAClB,eAAkC,EAClC,WAAwC,EACX,EAAE,CAC/B,WAAW,CAAC,MAAM,CAChB,CAAC,UAA4B,EAAW,EAAE,CACxC,OAAO,CAAC,UAAU,CAAC,IAAI,EAAE,eAAe,CAAC,KAAK,UAAU,CAC3D,CAAA;AAEH,MAAM,YAAY,GAAG,CACnB,KAAwB,EACxB,UAA+B,EAC/B,MAAyB,EACzB,MAAc,EACmB,EAAE,CACnC,KAAK;KACF,MAAM,CAAC,CAAC,IAAY,EAAW,EAAE,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;KACxD,GAAG,CAAC,CAAC,IAAY,EAAwB,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC,CAAA;AAE5E,MAAM,mBAAmB,GAAG,CAC1B,KAAwB,EACxB,QAAsB,EACW,EAAE;IACnC,MAAM,QAAQ,GAAwB,IAAI,GAAG,CAAC,qBAAqB,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAA;IACtF,OAAO,KAAK;SACT,MAAM,CAAC,CAAC,IAAY,EAAW,EAAE,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;SACtD,GAAG,CACF,CAAC,IAAY,EAAwB,EAAE,CAAC,CAAC;QACvC,IAAI;QACJ,MAAM,EAAE,SAAS;QACjB,MAAM,EAAE;YACN,oDAAoD;YACpD,GAAG,QAAQ,CAAC,IAAI,uCAAuC;SACxD,CAAC,IAAI,CAAC,GAAG,CAAC;KACZ,CAAC,CACH,CAAA;AACL,CAAC,CAAA;AAED,MAAM,qBAAqB,GAAG,CAAC,KAAiB,EAAmC,EAAE;IACnF,+FAA+F;IAC/F,IAAI,KAAK,CAAC,WAAW,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACnC,OAAO,EAAE,CAAA;IACX,CAAC;IACD,MAAM,QAAQ,GAAwB,IAAI,GAAG,CAC3C,KAAK,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC,UAA4B,EAAqB,EAAE,CAC5E,sBAAsB,CAAC,UAAU,CAAC,OAAO,CAAC,CAC3C,CACF,CAAA;IACD,MAAM,KAAK,GAAW,KAAK,CAAC,WAAW;SACpC,GAAG,CAAC,CAAC,UAA4B,EAAU,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC;SAC9D,IAAI,CAAC,IAAI,CAAC,CAAA;IACb,OAAO,YAAY,CACjB,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,MAAc,EAAqB,EAAE,CAAC,uBAAuB,CAAC,MAAM,CAAC,CAAC,CAC9F;SACE,MAAM,CAAC,CAAC,IAAY,EAAW,EAAE,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;SACtD,GAAG,CACF,CAAC,IAAY,EAAwB,EAAE,CAAC,CAAC;QACvC,IAAI;QACJ,MAAM,EAAE,YAAY;QACpB,MAAM,EAAE;YACN,kEAAkE,KAAK,GAAG;YAC1E,oFAAoF;YACpF,YAAY,IAAI,oCAAoC;SACrD,CAAC,IAAI,CAAC,GAAG,CAAC;KACZ,CAAC,CACH,CAAA;AACL,CAAC,CAAA;AAED;;;;;;;;;;;;;;;GAeG;AACH,MAAM,CAAC,MAAM,yBAAyB,GAAG,CACvC,MAAyB,EACQ,EAAE;IACnC,MAAM,UAAU,GAAwB,IAAI,GAAG,CAC7C,MAAM,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,0BAA0B,CAAC,MAAM,CAAC,OAAO,CAAC,CAC/E,CAAA;IACD,MAAM,IAAI,GAAsB,YAAY,CAC1C,MAAM,CAAC,kBAAkB,CAAC,OAAO,CAAC,CAAC,MAAc,EAAqB,EAAE,CACtE,oBAAoB,CAAC,MAAM,CAAC,CAC7B,CACF,CAAA;IACD,MAAM,YAAY,GAAsB,YAAY,CAClD,MAAM,CAAC,cAAc,CAAC,OAAO,CAAC,CAAC,MAAc,EAAqB,EAAE,CAClE,4BAA4B,CAAC,MAAM,CAAC,CACrC,CACF,CAAA;IACD,MAAM,SAAS,GAA4B,MAAM,CAAC,SAAS,CAAC,MAAM,CAChE,CAAC,QAAsB,EAAW,EAAE,CAAC,mBAAmB,CAAC,QAAQ,CAAC,OAAO,CAAC,CAC3E,CAAA;IACD,OAAO;QACL,GAAG,YAAY,CACb,IAAI,EACJ,UAAU,EACV,aAAa,EACb,4EAA4E,CAC7E;QACD,GAAG,YAAY,CACb,YAAY,EACZ,UAAU,EACV,SAAS,EACT,kEAAkE,CACnE;QACD,GAAG,SAAS,CAAC,OAAO,CAAC,CAAC,QAAsB,EAAmC,EAAE,CAC/E,mBAAmB,CAAC,YAAY,EAAE,QAAQ,CAAC,CAC5C;QACD,GAAG,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,KAAiB,EAAmC,EAAE,CAC9E,qBAAqB,CAAC,KAAK,CAAC,CAC7B;KACF,CAAA;AACH,CAAC,CAAA"}

package/dist/environment-files.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"environment-files.d.ts","sourceRoot":"","sources":["../src/environment-files.ts"],"names":[],"mappings":"AAoBA;;;;GAIG;AACH,eAAO,MAAM,qBAAqB,EAAE,SAAS,MAAM,EAA2B,CAAA;AAE9E;;;;GAIG;AACH,eAAO,MAAM,mBAAmB,GAC9B,gBAAgB,CAAC,YAAY,EAAE,MAAM,KAAK,OAAO,KAChD,SAAS,MAAM,EAC6D,CAAA;AAE/E;;;;;;;;;GASG;AACH,eAAO,MAAM,MAAM,GAAI,WAAW,MAAM,KAAG,MAAM,GAAG,SASnD,CAAA;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,eAAO,MAAM,uBAAuB,GAClC,SAAS,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,CAAC,EACrD,aAAa,SAAS,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,CAAC,EAAE,KACnE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAe/B,CAAA"}
+{"version":3,"file":"environment-files.d.ts","sourceRoot":"","sources":["../src/environment-files.ts"],"names":[],"mappings":"AAEA;;;;GAIG;AACH,eAAO,MAAM,qBAAqB,EAAE,SAAS,MAAM,EAA2B,CAAA;AAE9E;;;;GAIG;AACH,eAAO,MAAM,mBAAmB,GAC9B,gBAAgB,CAAC,YAAY,EAAE,MAAM,KAAK,OAAO,KAChD,SAAS,MAAM,EAC6D,CAAA;AAE/E;;;;;;;;;GASG;AACH,eAAO,MAAM,MAAM,GAAI,WAAW,MAAM,KAAG,MAAM,GAAG,SASnD,CAAA;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,eAAO,MAAM,uBAAuB,GAClC,SAAS,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,CAAC,EACrD,aAAa,SAAS,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,CAAC,EAAE,KACnE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAe/B,CAAA"}

package/dist/environment-files.js

@@ -1,22 +1,4 @@
-// The environment files a run of the project reads into its own process.
-//
-// A Payload config validates `process.env` at module scope, so anything that boots the project boots
-// its configuration first. Next reads these files itself, which is why the application under test never
-// had a problem - but a test runner does not, and the runner ploaness ships a Playwright config for
-// boots the project in its OWN process: an end-to-end helper that seeds a user through `getPayload`
-// evaluates `payload.config.ts` at spec-collection time, before a browser or a server is involved.
-//
-// The project used to load them from its own `playwright.config.ts`. The wiring gate now requires that
-// file to be a bare re-export, which removes the only seam it had, so the harness that took the seam
-// away owes the load. Vitest is the other half of the same shape and keeps its own answer: a project
-// writes `vitest.setup.ts` and ploaness loads it, which is a seam the project still owns.
-//
-// The order is the part that carries meaning, and it is stated here rather than at the call site so
-// that it is measured: `packages/config` is an analyzer configuration that no coverage floor reads,
-// while everything in this package is unit-tested. Nothing loaded later may replace a value already
-// set, so the file that must win is read first, and a variable the real environment already carries -
-// a CI secret, a `DATABASE_URL` exported by a service container - outranks every file, because it was
-// there before any of them was read.
+// Declare environment file precedence shared by analysis, tests, and application startup.
 /**
  * The environment files a run reads, highest precedence first. `.env.local` leads because it is the
  * personal, untracked override of `.env`; the managed `.gitignore` ignores both, which is what makes

package/dist/environment-files.js.map

@@ -1 +1 @@
-{"version":3,"file":"environment-files.js","sourceRoot":"","sources":["../src/environment-files.ts"],"names":[],"mappings":"AAAA,yEAAyE;AACzE,EAAE;AACF,qGAAqG;AACrG,wGAAwG;AACxG,oGAAoG;AACpG,oGAAoG;AACpG,mGAAmG;AACnG,EAAE;AACF,uGAAuG;AACvG,qGAAqG;AACrG,qGAAqG;AACrG,0FAA0F;AAC1F,EAAE;AACF,oGAAoG;AACpG,oGAAoG;AACpG,oGAAoG;AACpG,sGAAsG;AACtG,sGAAsG;AACtG,qCAAqC;AAErC;;;;GAIG;AACH,MAAM,CAAC,MAAM,qBAAqB,GAAsB,CAAC,YAAY,EAAE,MAAM,CAAC,CAAA;AAE9E;;;;GAIG;AACH,MAAM,CAAC,MAAM,mBAAmB,GAAG,CACjC,cAAiD,EAC9B,EAAE,CACrB,qBAAqB,CAAC,MAAM,CAAC,CAAC,IAAY,EAAW,EAAE,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC,CAAA;AAE/E;;;;;;;;;GASG;AACH,MAAM,CAAC,MAAM,MAAM,GAAG,CAAC,SAAiB,EAAsB,EAAE;IAC9D,IAAI,CAAC;QACH,MAAM,IAAI,GAAW,IAAI,GAAG,CAAC,SAAS,CAAC,CAAC,IAAI,CAAA;QAC5C,OAAO,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAA;IAC3C,CAAC;IAAC,MAAM,CAAC;QACP,+FAA+F;QAC/F,kFAAkF;QAClF,OAAO,SAAS,CAAA;IAClB,CAAC;AACH,CAAC,CAAA;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,CAAC,MAAM,uBAAuB,GAAG,CACrC,OAAqD,EACrD,WAAoE,EAClC,EAAE,CACpC,MAAM,CAAC,WAAW,CAChB,WAAW;KACR,OAAO,CACN,CACE,IAAkD,EACT,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CACnE;KACA,MAAM,CACL,CAAC,KAA4C,EAA6B,EAAE,CAC1E,KAAK,CAAC,CAAC,CAAC,KAAK,SAAS,IAAI,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,SAAS,CAC5D;IACD,kGAAkG;IAClG,mEAAmE;KAClE,UAAU,EAAE,CAChB,CAAA"}
+{"version":3,"file":"environment-files.js","sourceRoot":"","sources":["../src/environment-files.ts"],"names":[],"mappings":"AAAA,0FAA0F;AAE1F;;;;GAIG;AACH,MAAM,CAAC,MAAM,qBAAqB,GAAsB,CAAC,YAAY,EAAE,MAAM,CAAC,CAAA;AAE9E;;;;GAIG;AACH,MAAM,CAAC,MAAM,mBAAmB,GAAG,CACjC,cAAiD,EAC9B,EAAE,CACrB,qBAAqB,CAAC,MAAM,CAAC,CAAC,IAAY,EAAW,EAAE,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC,CAAA;AAE/E;;;;;;;;;GASG;AACH,MAAM,CAAC,MAAM,MAAM,GAAG,CAAC,SAAiB,EAAsB,EAAE;IAC9D,IAAI,CAAC;QACH,MAAM,IAAI,GAAW,IAAI,GAAG,CAAC,SAAS,CAAC,CAAC,IAAI,CAAA;QAC5C,OAAO,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAA;IAC3C,CAAC;IAAC,MAAM,CAAC;QACP,+FAA+F;QAC/F,kFAAkF;QAClF,OAAO,SAAS,CAAA;IAClB,CAAC;AACH,CAAC,CAAA;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,CAAC,MAAM,uBAAuB,GAAG,CACrC,OAAqD,EACrD,WAAoE,EAClC,EAAE,CACpC,MAAM,CAAC,WAAW,CAChB,WAAW;KACR,OAAO,CACN,CACE,IAAkD,EACT,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CACnE;KACA,MAAM,CACL,CAAC,KAA4C,EAA6B,EAAE,CAC1E,KAAK,CAAC,CAAC,CAAC,KAAK,SAAS,IAAI,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,SAAS,CAC5D;IACD,kGAAkG;IAClG,mEAAmE;KAClE,UAAU,EAAE,CAChB,CAAA"}

package/dist/file-roles.d.ts

@@ -15,13 +15,18 @@ export declare const isBinary: (bytes: Uint8Array) => boolean;
  * @returns true when the path ends with one of them.
  */
 export declare const hasExtension: (filePath: string, extensions: readonly string[]) => boolean;
+/** A role regex evaluated either at the repository root or inside its declaring member. */
+export type RolePattern = string | {
+    readonly memberPath: string;
+    readonly pattern: string;
+};
 /**
  * Decide whether a path is excluded by a declared role pattern.
  * @param filePath the repo-relative path.
  * @param patterns the declared exclusion patterns.
  * @returns true when any pattern matches.
  */
-export declare const matchesRole: (filePath: string, patterns: readonly string[]) => boolean;
+export declare const matchesRole: (filePath: string, patterns: readonly RolePattern[]) => boolean;
 /**
  * Whether a repo-relative path matches a glob pattern of the kind the coverage settings carry.
  * @param pattern the glob, such as `src/app/**` or `src/**\/*.tsx`.
@@ -35,5 +40,5 @@ export declare const matchesGlob: (pattern: string, filePath: string) => boolean
  * @param excluded the declared generated-role patterns.
  * @returns true when the file is code and no declared role excludes it.
  */
-export declare const isGovernedCode: (filePath: string, excluded: readonly string[]) => boolean;
+export declare const isGovernedCode: (filePath: string, excluded: readonly RolePattern[]) => boolean;
 //# sourceMappingURL=file-roles.d.ts.map

package/dist/file-roles.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"file-roles.d.ts","sourceRoot":"","sources":["../src/file-roles.ts"],"names":[],"mappings":"AAYA,sGAAsG;AACtG,eAAO,MAAM,eAAe,EAAE,SAAS,MAAM,EAU5C,CAAA;AAED,kGAAkG;AAClG,eAAO,MAAM,gBAAgB,EAAE,SAAS,MAAM,EAA6B,CAAA;AAE3E;;;;GAIG;AACH,eAAO,MAAM,QAAQ,GAAI,OAAO,UAAU,KAAG,OACM,CAAA;AAEnD;;;;;GAKG;AACH,eAAO,MAAM,YAAY,GAAI,UAAU,MAAM,EAAE,YAAY,SAAS,MAAM,EAAE,KAAG,OACA,CAAA;AAE/E;;;;;GAKG;AACH,eAAO,MAAM,WAAW,GAAI,UAAU,MAAM,EAAE,UAAU,SAAS,MAAM,EAAE,KAAG,OACK,CAAA;AA2BjF;;;;;GAKG;AACH,eAAO,MAAM,WAAW,GAAI,SAAS,MAAM,EAAE,UAAU,MAAM,KAAG,OAG9C,CAAA;AAElB;;;;;GAKG;AACH,eAAO,MAAM,cAAc,GAAI,UAAU,MAAM,EAAE,UAAU,SAAS,MAAM,EAAE,KAAG,OACF,CAAA"}
+{"version":3,"file":"file-roles.d.ts","sourceRoot":"","sources":["../src/file-roles.ts"],"names":[],"mappings":"AAKA,sGAAsG;AACtG,eAAO,MAAM,eAAe,EAAE,SAAS,MAAM,EAW5C,CAAA;AAED,kGAAkG;AAClG,eAAO,MAAM,gBAAgB,EAAE,SAAS,MAAM,EAA6B,CAAA;AAE3E;;;;GAIG;AACH,eAAO,MAAM,QAAQ,GAAI,OAAO,UAAU,KAAG,OACM,CAAA;AAEnD;;;;;GAKG;AACH,eAAO,MAAM,YAAY,GAAI,UAAU,MAAM,EAAE,YAAY,SAAS,MAAM,EAAE,KAAG,OACA,CAAA;AAE/E,2FAA2F;AAC3F,MAAM,MAAM,WAAW,GAAG,MAAM,GAAG;IAAE,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;CAAE,CAAA;AAY5F;;;;;GAKG;AACH,eAAO,MAAM,WAAW,GAAI,UAAU,MAAM,EAAE,UAAU,SAAS,WAAW,EAAE,KAAG,OACI,CAAA;AA2BrF;;;;;GAKG;AACH,eAAO,MAAM,WAAW,GAAI,SAAS,MAAM,EAAE,UAAU,MAAM,KAAG,OAG9C,CAAA;AAElB;;;;;GAKG;AACH,eAAO,MAAM,cAAc,GAAI,UAAU,MAAM,EAAE,UAAU,SAAS,WAAW,EAAE,KAAG,OACP,CAAA"}

package/dist/file-roles.js

@@ -1,17 +1,11 @@
-// File roles: the categories a repository can determine from a file itself and uses to include or
-// exclude it from a check.
-//
-// The typography ban used to carry its own allowlist of ten extensions, which is the wrong shape for a
-// rule that reaches "every tracked file the repository does not exclude by role": a `.css`, a `.adoc`,
-// a shell script, or a Dockerfile went unscanned, and every new text format arrived unscanned until
-// someone remembered to extend the list. A role predicate is default-safe in the opposite direction -
-// a new format is covered by construction, and exclusion is the thing that must be stated.
+// Identify source, generated, binary, and prose roles so exclusions follow file meaning rather than tool defaults.
 /** How much of a file is inspected before deciding it is text. Enough to reach any real header. */
 const BINARY_PROBE_BYTES = 8192;
 /** Extensions the Code Rules apply to, used where a rule is about code rather than about any text. */
 export const CODE_EXTENSIONS = [
     '.ts',
     '.tsx',
+    '.jsx',
     '.mts',
     '.cts',
     '.js',
@@ -35,13 +29,20 @@ export const isBinary = (bytes) => bytes.subarray(0, BINARY_PROBE_BYTES).include
  * @returns true when the path ends with one of them.
  */
 export const hasExtension = (filePath, extensions) => extensions.some((extension) => filePath.endsWith(extension));
+const matchesPattern = (filePath, pattern) => {
+    if (typeof pattern === 'string') {
+        return new RegExp(pattern).test(filePath);
+    }
+    const prefix = `${pattern.memberPath}/`;
+    return (filePath.startsWith(prefix) && new RegExp(pattern.pattern).test(filePath.slice(prefix.length)));
+};
 /**
  * Decide whether a path is excluded by a declared role pattern.
  * @param filePath the repo-relative path.
  * @param patterns the declared exclusion patterns.
  * @returns true when any pattern matches.
  */
-export const matchesRole = (filePath, patterns) => patterns.some((pattern) => new RegExp(pattern).test(filePath));
+export const matchesRole = (filePath, patterns) => patterns.some((pattern) => matchesPattern(filePath, pattern));
 // The glob dialect the coverage settings are written in, which is not the regex dialect `matchesRole`
 // reads. `**/` crosses directory boundaries and `*` does not, which is the whole distinction between
 // `src/**/*.tsx` and `src/*.tsx`; collapsing the two would silently widen every pattern that uses one.

package/dist/file-roles.js.map

@@ -1 +1 @@
-{"version":3,"file":"file-roles.js","sourceRoot":"","sources":["../src/file-roles.ts"],"names":[],"mappings":"AAAA,kGAAkG;AAClG,2BAA2B;AAC3B,EAAE;AACF,uGAAuG;AACvG,uGAAuG;AACvG,oGAAoG;AACpG,sGAAsG;AACtG,2FAA2F;AAE3F,mGAAmG;AACnG,MAAM,kBAAkB,GAAW,IAAI,CAAA;AAEvC,sGAAsG;AACtG,MAAM,CAAC,MAAM,eAAe,GAAsB;IAChD,KAAK;IACL,MAAM;IACN,MAAM;IACN,MAAM;IACN,KAAK;IACL,MAAM;IACN,MAAM;IACN,MAAM;IACN,OAAO;CACR,CAAA;AAED,kGAAkG;AAClG,MAAM,CAAC,MAAM,gBAAgB,GAAsB,CAAC,KAAK,EAAE,OAAO,EAAE,MAAM,CAAC,CAAA;AAE3E;;;;GAIG;AACH,MAAM,CAAC,MAAM,QAAQ,GAAG,CAAC,KAAiB,EAAW,EAAE,CACrD,KAAK,CAAC,QAAQ,CAAC,CAAC,EAAE,kBAAkB,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAA;AAEnD;;;;;GAKG;AACH,MAAM,CAAC,MAAM,YAAY,GAAG,CAAC,QAAgB,EAAE,UAA6B,EAAW,EAAE,CACvF,UAAU,CAAC,IAAI,CAAC,CAAC,SAAiB,EAAW,EAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,CAAA;AAE/E;;;;;GAKG;AACH,MAAM,CAAC,MAAM,WAAW,GAAG,CAAC,QAAgB,EAAE,QAA2B,EAAW,EAAE,CACpF,QAAQ,CAAC,IAAI,CAAC,CAAC,OAAe,EAAW,EAAE,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAA;AAEjF,sGAAsG;AACtG,qGAAqG;AACrG,uGAAuG;AACvG,MAAM,UAAU,GAAW,iCAAiC,CAAA;AAE5D,MAAM,YAAY,GAAG,CAAC,KAAa,EAAU,EAAE;IAC7C,QAAQ,KAAK,EAAE,CAAC;QACd,KAAK,KAAK,CAAC,CAAC,CAAC;YACX,OAAO,aAAa,CAAA;QACtB,CAAC;QACD,KAAK,IAAI,CAAC,CAAC,CAAC;YACV,OAAO,IAAI,CAAA;QACb,CAAC;QACD,KAAK,GAAG,CAAC,CAAC,CAAC;YACT,OAAO,OAAO,CAAA;QAChB,CAAC;QACD,KAAK,GAAG,CAAC,CAAC,CAAC;YACT,OAAO,MAAM,CAAA;QACf,CAAC;QACD,OAAO,CAAC,CAAC,CAAC;YACR,OAAO,KAAK,KAAK,EAAE,CAAA;QACrB,CAAC;IACH,CAAC;AACH,CAAC,CAAA;AAED;;;;;GAKG;AACH,MAAM,CAAC,MAAM,WAAW,GAAG,CAAC,OAAe,EAAE,QAAgB,EAAW,EAAE,CACxE,IAAI,MAAM,CACR,IAAI,OAAO,CAAC,UAAU,CAAC,UAAU,EAAE,CAAC,KAAa,EAAU,EAAE,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC,GAAG,CACtF,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAA;AAElB;;;;;GAKG;AACH,MAAM,CAAC,MAAM,cAAc,GAAG,CAAC,QAAgB,EAAE,QAA2B,EAAW,EAAE,CACvF,YAAY,CAAC,QAAQ,EAAE,eAAe,CAAC,IAAI,CAAC,WAAW,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAA"}
+{"version":3,"file":"file-roles.js","sourceRoot":"","sources":["../src/file-roles.ts"],"names":[],"mappings":"AAAA,mHAAmH;AAEnH,mGAAmG;AACnG,MAAM,kBAAkB,GAAW,IAAI,CAAA;AAEvC,sGAAsG;AACtG,MAAM,CAAC,MAAM,eAAe,GAAsB;IAChD,KAAK;IACL,MAAM;IACN,MAAM;IACN,MAAM;IACN,MAAM;IACN,KAAK;IACL,MAAM;IACN,MAAM;IACN,MAAM;IACN,OAAO;CACR,CAAA;AAED,kGAAkG;AAClG,MAAM,CAAC,MAAM,gBAAgB,GAAsB,CAAC,KAAK,EAAE,OAAO,EAAE,MAAM,CAAC,CAAA;AAE3E;;;;GAIG;AACH,MAAM,CAAC,MAAM,QAAQ,GAAG,CAAC,KAAiB,EAAW,EAAE,CACrD,KAAK,CAAC,QAAQ,CAAC,CAAC,EAAE,kBAAkB,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAA;AAEnD;;;;;GAKG;AACH,MAAM,CAAC,MAAM,YAAY,GAAG,CAAC,QAAgB,EAAE,UAA6B,EAAW,EAAE,CACvF,UAAU,CAAC,IAAI,CAAC,CAAC,SAAiB,EAAW,EAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,CAAA;AAK/E,MAAM,cAAc,GAAG,CAAC,QAAgB,EAAE,OAAoB,EAAW,EAAE;IACzE,IAAI,OAAO,OAAO,KAAK,QAAQ,EAAE,CAAC;QAChC,OAAO,IAAI,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAA;IAC3C,CAAC;IACD,MAAM,MAAM,GAAW,GAAG,OAAO,CAAC,UAAU,GAAG,CAAA;IAC/C,OAAO,CACL,QAAQ,CAAC,UAAU,CAAC,MAAM,CAAC,IAAI,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAC/F,CAAA;AACH,CAAC,CAAA;AAED;;;;;GAKG;AACH,MAAM,CAAC,MAAM,WAAW,GAAG,CAAC,QAAgB,EAAE,QAAgC,EAAW,EAAE,CACzF,QAAQ,CAAC,IAAI,CAAC,CAAC,OAAoB,EAAW,EAAE,CAAC,cAAc,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC,CAAA;AAErF,sGAAsG;AACtG,qGAAqG;AACrG,uGAAuG;AACvG,MAAM,UAAU,GAAW,iCAAiC,CAAA;AAE5D,MAAM,YAAY,GAAG,CAAC,KAAa,EAAU,EAAE;IAC7C,QAAQ,KAAK,EAAE,CAAC;QACd,KAAK,KAAK,CAAC,CAAC,CAAC;YACX,OAAO,aAAa,CAAA;QACtB,CAAC;QACD,KAAK,IAAI,CAAC,CAAC,CAAC;YACV,OAAO,IAAI,CAAA;QACb,CAAC;QACD,KAAK,GAAG,CAAC,CAAC,CAAC;YACT,OAAO,OAAO,CAAA;QAChB,CAAC;QACD,KAAK,GAAG,CAAC,CAAC,CAAC;YACT,OAAO,MAAM,CAAA;QACf,CAAC;QACD,OAAO,CAAC,CAAC,CAAC;YACR,OAAO,KAAK,KAAK,EAAE,CAAA;QACrB,CAAC;IACH,CAAC;AACH,CAAC,CAAA;AAED;;;;;GAKG;AACH,MAAM,CAAC,MAAM,WAAW,GAAG,CAAC,OAAe,EAAE,QAAgB,EAAW,EAAE,CACxE,IAAI,MAAM,CACR,IAAI,OAAO,CAAC,UAAU,CAAC,UAAU,EAAE,CAAC,KAAa,EAAU,EAAE,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC,GAAG,CACtF,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAA;AAElB;;;;;GAKG;AACH,MAAM,CAAC,MAAM,cAAc,GAAG,CAAC,QAAgB,EAAE,QAAgC,EAAW,EAAE,CAC5F,YAAY,CAAC,QAAQ,EAAE,eAAe,CAAC,IAAI,CAAC,WAAW,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAA"}

package/dist/freshness-repair.d.ts

@@ -0,0 +1,82 @@
+import type { DeclaredCoordinate, FreshnessFinding, ManifestSource } from './dependency-freshness.js';
+/**
+ * Who can act on a freshness finding.
+ *
+ * - `project`: declared by this repository at a version it chooses. Change the declaration.
+ * - `pin`: declared by this repository at a version ploaness decides. The wiring gate holds the
+ *   declaration to the pin, so the repair is a ploaness release that carries the newer one.
+ * - `inherited`: declared in a manifest this repository inherits from ploaness. The same repair, with
+ *   no line in the project to edit at all.
+ */
+export type FreshnessRepair = 'project' | 'pin' | 'inherited';
+/** The order the groups print in: what the reader can act on first. */
+export declare const REPAIR_ORDER: readonly FreshnessRepair[];
+/** What the report needs to know about whose version a name is. */
+export interface FreshnessOwnership {
+    /** Every name whose exact version ploaness pins for a project that declares it. */
+    readonly pinnedByHarness: ReadonlySet<string>;
+    /**
+     * True when the repository under judgement is ploaness itself. Its pins are a file it tracks, so a
+     * pinned coordinate there is the project's to change like any other.
+     */
+    readonly isHarnessItself: boolean;
+}
+/** One group of the report: the findings that share a repair, under the line that states it. */
+export interface FreshnessSection {
+    readonly repair: FreshnessRepair;
+    /** The action for every finding beneath it, stated once. */
+    readonly heading: string;
+    readonly findings: readonly FreshnessFinding[];
+}
+/**
+ * Whether this repository is ploaness: it tracks the manifest of the package called `ploaness`.
+ *
+ * Decided from what the tree contains rather than from a flag, for the reason a member's kind is
+ * derived from what it declares: nothing can describe itself into a weaker reading. Read from the
+ * project's own manifests only, because in a consumer the same name arrives as an INHERITED manifest,
+ * and that is exactly the case this must answer `false` for.
+ * @param manifests every manifest the gate read, the project's own and the inherited ones.
+ * @returns true when a manifest the project tracks is ploaness's own.
+ */
+export declare const isHarnessRepository: (manifests: readonly ManifestSource[]) => boolean;
+/**
+ * Whether ploaness decides the version a project declares a name at.
+ *
+ * Three rules, each one the wiring gate already enforces and each derived from it rather than restated:
+ * a pinned name must match the pin, a `@payloadcms/*` package must match the pinned `payload`, and a
+ * `@ploaness/*` package must match the declared `ploaness`. `ploaness` itself is the one exception,
+ * and it proves the third rule: the release is the single version a project is entitled to choose,
+ * and upgrading it is the repair every line in the two harness groups names.
+ * @param name the declared name.
+ * @param pinnedByHarness every name ploaness pins.
+ * @returns true when the project may not change the version on its own.
+ */
+export declare const isVersionDecidedByHarness: (name: string, pinnedByHarness: ReadonlySet<string>) => boolean;
+/**
+ * Whose repair one coordinate is.
+ * @param coordinate the declared coordinate, with the manifest that declares it.
+ * @param ownership whose version each name is.
+ * @returns the group the finding belongs in.
+ */
+export declare const repairOf: (coordinate: DeclaredCoordinate, ownership: FreshnessOwnership) => FreshnessRepair;
+/**
+ * Whether a finding is the harness release itself, in the project's own manifest.
+ *
+ * It is the one line in the project group whose repair is every harness line's repair, so the report
+ * says so on it.
+ * @param finding the finding to classify.
+ * @returns true for `ploaness` declared by the project.
+ */
+export declare const isHarnessRelease: (finding: DeclaredCoordinate) => boolean;
+/**
+ * Sort the report's findings into the three repair groups, in the order they print.
+ *
+ * Every group is returned, empty or not, so the caller decides what an empty one prints as; the
+ * order within a group is the order the findings arrived in, which is manifest order, so the same tree
+ * yields the same report.
+ * @param findings every finding the report will print.
+ * @param ownership whose version each name is.
+ * @returns the three groups, each under its heading.
+ */
+export declare const sectionFreshnessReport: (findings: readonly FreshnessFinding[], ownership: FreshnessOwnership) => readonly FreshnessSection[];
+//# sourceMappingURL=freshness-repair.d.ts.map

package/dist/freshness-repair.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"freshness-repair.d.ts","sourceRoot":"","sources":["../src/freshness-repair.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EACV,kBAAkB,EAClB,gBAAgB,EAChB,cAAc,EACf,MAAM,2BAA2B,CAAA;AAKlC;;;;;;;;GAQG;AACH,MAAM,MAAM,eAAe,GAAG,SAAS,GAAG,KAAK,GAAG,WAAW,CAAA;AAE7D,uEAAuE;AACvE,eAAO,MAAM,YAAY,EAAE,SAAS,eAAe,EAAoC,CAAA;AAEvF,mEAAmE;AACnE,MAAM,WAAW,kBAAkB;IACjC,mFAAmF;IACnF,QAAQ,CAAC,eAAe,EAAE,WAAW,CAAC,MAAM,CAAC,CAAA;IAC7C;;;OAGG;IACH,QAAQ,CAAC,eAAe,EAAE,OAAO,CAAA;CAClC;AAED,gGAAgG;AAChG,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,CAAC,MAAM,EAAE,eAAe,CAAA;IAChC,4DAA4D;IAC5D,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;IACxB,QAAQ,CAAC,QAAQ,EAAE,SAAS,gBAAgB,EAAE,CAAA;CAC/C;AAED;;;;;;;;;GASG;AACH,eAAO,MAAM,mBAAmB,GAAI,WAAW,SAAS,cAAc,EAAE,KAAG,OAIxE,CAAA;AAEH;;;;;;;;;;;GAWG;AACH,eAAO,MAAM,yBAAyB,GACpC,MAAM,MAAM,EACZ,iBAAiB,WAAW,CAAC,MAAM,CAAC,KACnC,OAEoF,CAAA;AAEvF;;;;;GAKG;AACH,eAAO,MAAM,QAAQ,GACnB,YAAY,kBAAkB,EAC9B,WAAW,kBAAkB,KAC5B,eAQF,CAAA;AAED;;;;;;;GAOG;AACH,eAAO,MAAM,gBAAgB,GAAI,SAAS,kBAAkB,KAAG,OACL,CAAA;AAwB1D;;;;;;;;;GASG;AACH,eAAO,MAAM,sBAAsB,GACjC,UAAU,SAAS,gBAAgB,EAAE,EACrC,WAAW,kBAAkB,KAC5B,SAAS,gBAAgB,EAa3B,CAAA"}