@ploaness/governance 1.9.0 → 1.11.0

package/dist/yaml-blocks.js

@@ -1,99 +1,99 @@
-// The small reader for the top-level blocks pnpm reads out of a workspace file.
-//
-// It is not a YAML parser and must not become one. pnpm honours these keys only at the top level of
-// `pnpm-workspace.yaml`, so what has to be recognised is exactly "an unindented key, and the indented
-// lines beneath it" - a shape a regex reads correctly and a parser would only read more expensively.
-//
-// It lives here rather than in `install-policy.ts`, which wrote it first, because `workspace-policy.ts`
-// needs the same three predicates to read the `packages:` block. Two crude readers in one package would
-// not stay equal, and the one that drifted would be the one deciding which directories are governed.
-const isTopLevelKey = (line, key) => new RegExp(String.raw `^${key}\s*:`).test(line);
-const isIndented = (line) => /^\s+\S/.test(line);
-/**
- * Whether an install config declares a top-level key at all.
- *
- * Separate from reading the block because a key can be meaningful while its body is empty:
- * `onlyBuiltDependencies: []` permits no dependency to run a script, which is an answer rather than
- * an omission.
- * @param file the contents of a YAML file, or an empty string when it is absent.
- * @param key the top-level key to look for.
- * @returns true when the key appears unindented.
- */
-export const declaresTopLevelKey = (file, key) => file.split('\n').some((line) => isTopLevelKey(line, key));
-/**
- * The lines of one top-level block, which run until the next unindented line.
- * @param file the contents of a YAML file, or an empty string when it is absent.
- * @param key the top-level key whose body to read.
- * @returns the block's lines, or an empty array when the key is absent.
- */
-export const topLevelBlockLines = (file, key) => {
-    const lines = file.split('\n');
-    const start = lines.findIndex((line) => isTopLevelKey(line, key));
-    if (start === -1) {
-        return [];
+// Decode workspace configuration without coupling policy to filesystem reads or YAML presentation.
+import { parseDocument, stringify } from 'yaml';
+import { isArray, isRecord } from './json-shapes.js';
+const WORKSPACE_FILE = 'pnpm-workspace.yaml';
+const MAX_ALIAS_COUNT = 100;
+const PLAIN_MAPPING_PROTOTYPE = Object.getPrototypeOf({});
+const invalidValue = (key, expected) => new TypeError(`${WORKSPACE_FILE} ${key}: must be ${expected}; correct the workspace configuration`);
+const isMapping = (value) => {
+    if (!isRecord(value)) {
+        return false;
     }
-    const rest = lines.slice(start + 1);
-    const end = rest.findIndex((line) => line.trim().length > 0 && !isIndented(line));
-    return end === -1 ? rest : rest.slice(0, end);
+    const prototype = Object.getPrototypeOf(value);
+    return prototype === PLAIN_MAPPING_PROTOTYPE || prototype === null;
 };
-/**
- * Strip one layer of matching or unmatched surrounding quotes.
- * @param value the raw scalar.
- * @returns the value without its surrounding quote characters.
- */
-export const withoutQuotes = (value) => value.replaceAll(/^['"]|['"]$/g, '');
-// A whole-line comment is not content. Trailing text after a `#` is stripped only where it cannot be
-// part of a value: a path glob carries no `#`, but an override specifier does - `git+ssh://host/repo#tag`
-// is a legal pin, and cutting at the `#` would silently rewrite which commit the rule judges.
-const contentLines = (lines) => lines
-    .map((line) => line.trim())
-    .filter((line) => line.length > 0 && !line.startsWith('#'));
-const withoutTrailingComment = (line) => {
-    const hash = line.indexOf('#');
-    return hash === -1 ? line : line.slice(0, hash).trim();
+/** Read a workspace mapping, rejecting malformed evidence rather than treating it as absent. */
+export const readWorkspaceDocument = (file) => {
+    try {
+        const document = parseDocument(file);
+        if (document.errors.length > 0 || document.warnings.length > 0) {
+            throw new TypeError([...document.errors, ...document.warnings].map((error) => error.message).join('; '));
+        }
+        const value = document.toJS({ maxAliasCount: MAX_ALIAS_COUNT });
+        if (document.contents === null) {
+            return {};
+        }
+        if (!isMapping(value)) {
+            throw invalidValue('document', 'a mapping');
+        }
+        return value;
+    }
+    catch (error) {
+        const reason = error instanceof Error ? error.message : String(error);
+        throw new TypeError(`${WORKSPACE_FILE}: ${reason}; correct the YAML before verification`, { cause: error });
+    }
 };
-/**
- * The value of a top-level `key: value` scalar, such as `minimumReleaseAgeStrict: true`.
- *
- * Read from the line itself rather than from the block beneath it, which a scalar does not have. A
- * trailing comment is stripped, because a boolean carries no `#` of its own.
- * @param file the contents of a YAML file, or an empty string when it is absent.
- * @param key the top-level key whose scalar to read.
- * @returns the unquoted value, or undefined when the key is absent or carries no inline value.
- */
+/** Whether a workspace mapping declares a key, including an explicitly empty sequence. */
+export const declaresTopLevelKey = (file, key) => Object.hasOwn(readWorkspaceDocument(file), key);
+/** Canonical YAML lines for a declared value, independent of its original indentation or flow style. */
+export const topLevelBlockLines = (file, key) => {
+    const value = readWorkspaceDocument(file)[key];
+    return value === undefined ? [] : stringify(value).trimEnd().split('\n');
+};
+/** Strip surrounding quote characters from a non-YAML token, such as a container image reference. */
+export const withoutQuotes = (value) => value.replaceAll(/^['"]|['"]$/g, '');
+/** Read a scalar without changing the existing string-valued policy interface. */
 export const topLevelScalar = (file, key) => {
-    const line = file.split('\n').find((candidate) => isTopLevelKey(candidate, key));
-    if (line === undefined) {
+    const value = readWorkspaceDocument(file)[key];
+    if (value === undefined) {
         return undefined;
     }
-    const inline = line.slice(line.indexOf(':') + 1).trim();
-    const value = withoutQuotes(withoutTrailingComment(inline));
-    return value.length > 0 ? value : undefined;
+    if (typeof value !== 'string' && typeof value !== 'boolean' && typeof value !== 'number') {
+        throw invalidValue(key, 'a scalar');
+    }
+    return String(value);
+};
+/** Read every sequence entry; an invalid entry cannot silently disappear from policy. */
+export const topLevelListItems = (file, key) => {
+    const value = readWorkspaceDocument(file)[key];
+    if (value === undefined) {
+        return [];
+    }
+    if (!(isArray(value) && value.every((entry) => typeof entry === 'string'))) {
+        throw invalidValue(key, 'a sequence of strings');
+    }
+    return value;
+};
+// Package extensions carry nested dependency mappings. Preserve that value without flattening its
+// children into independent override entries; scalar specifiers remain exactly what pnpm reads.
+const plainValue = (_key, value) => {
+    if (isRecord(value) && !isArray(value) && !isMapping(value)) {
+        throw invalidValue('override', 'a plain mapping or sequence');
+    }
+    return value;
+};
+const entryValue = (value) => {
+    try {
+        return typeof value === 'string' ? value : JSON.stringify(value, plainValue);
+    }
+    catch (error) {
+        throw new TypeError(`${WORKSPACE_FILE}: override values must be plain, acyclic values; correct the YAML`, {
+            cause: error,
+        });
+    }
+};
+/** Read one override entry per mapping key, preserving structured values and complete specifiers. */
+export const topLevelMappingEntries = (file, key) => {
+    const value = readWorkspaceDocument(file)[key];
+    if (value === undefined) {
+        return [];
+    }
+    if (!isMapping(value)) {
+        throw invalidValue(key, 'a mapping');
+    }
+    return Object.entries(value).map(([name, specifier]) => [
+        name,
+        entryValue(specifier),
+    ]);
 };
-/**
- * The items of a top-level YAML sequence, such as the `packages:` block of a workspace file.
- * @param file the contents of a YAML file, or an empty string when it is absent.
- * @param key the top-level key whose sequence to read.
- * @returns one unquoted entry per `- item` line, in declaration order.
- */
-export const topLevelListItems = (file, key) => contentLines(topLevelBlockLines(file, key))
-    .filter((line) => line.startsWith('-'))
-    .map((line) => withoutQuotes(withoutTrailingComment(line.slice(1).trim())))
-    .filter((entry) => entry.length > 0);
-/**
- * The `key: value` entries of a top-level YAML mapping, such as an `overrides:` block.
- *
- * Split at the FIRST colon, not the last: a value carries colons of its own - `npm:preact@10`,
- * `link:../fork`, `git+ssh://...` - and splitting at the last one read `react: npm:preact@10` as a
- * package called "react: npm", so every alias form walked straight through the rule meant to catch it.
- * @param file the contents of a YAML file, or an empty string when it is absent.
- * @param key the top-level key whose mapping to read.
- * @returns one `[name, value]` pair per entry, both unquoted.
- */
-export const topLevelMappingEntries = (file, key) => contentLines(topLevelBlockLines(file, key)).flatMap((line) => {
-    const separator = line.indexOf(':');
-    return separator === -1
-        ? []
-        : [[withoutQuotes(line.slice(0, separator).trim()), withoutQuotes(line.slice(separator + 1).trim())]];
-});
 //# sourceMappingURL=yaml-blocks.js.map

package/dist/yaml-blocks.js.map

@@ -1 +1 @@
-{"version":3,"file":"yaml-blocks.js","sourceRoot":"","sources":["../src/yaml-blocks.ts"],"names":[],"mappings":"AAAA,gFAAgF;AAChF,EAAE;AACF,oGAAoG;AACpG,sGAAsG;AACtG,qGAAqG;AACrG,EAAE;AACF,wGAAwG;AACxG,wGAAwG;AACxG,qGAAqG;AAErG,MAAM,aAAa,GAAG,CAAC,IAAY,EAAE,GAAW,EAAW,EAAE,CAAC,IAAI,MAAM,CAAC,MAAM,CAAC,GAAG,CAAA,IAAI,GAAG,MAAM,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;AAE5G,MAAM,UAAU,GAAG,CAAC,IAAY,EAAW,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;AAEjE;;;;;;;;;GASG;AACH,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC,IAAY,EAAE,GAAW,EAAW,EAAE,CACxE,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,IAAY,EAAW,EAAE,CAAC,aAAa,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,CAAA;AAE5E;;;;;GAKG;AACH,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,IAAY,EAAE,GAAW,EAAqB,EAAE;IACjF,MAAM,KAAK,GAAsB,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAA;IACjD,MAAM,KAAK,GAAW,KAAK,CAAC,SAAS,CAAC,CAAC,IAAY,EAAW,EAAE,CAAC,aAAa,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,CAAA;IAC1F,IAAI,KAAK,KAAK,CAAC,CAAC,EAAE,CAAC;QACjB,OAAO,EAAE,CAAA;IACX,CAAC;IACD,MAAM,IAAI,GAAsB,KAAK,CAAC,KAAK,CAAC,KAAK,GAAG,CAAC,CAAC,CAAA;IACtD,MAAM,GAAG,GAAW,IAAI,CAAC,SAAS,CAAC,CAAC,IAAY,EAAW,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAA;IAC1G,OAAO,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAA;AAC/C,CAAC,CAAA;AAED;;;;GAIG;AACH,MAAM,CAAC,MAAM,aAAa,GAAG,CAAC,KAAa,EAAU,EAAE,CAAC,KAAK,CAAC,UAAU,CAAC,cAAc,EAAE,EAAE,CAAC,CAAA;AAE5F,qGAAqG;AACrG,0GAA0G;AAC1G,8FAA8F;AAC9F,MAAM,YAAY,GAAG,CAAC,KAAwB,EAAqB,EAAE,CACnE,KAAK;KACF,GAAG,CAAC,CAAC,IAAY,EAAU,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;KAC1C,MAAM,CAAC,CAAC,IAAY,EAAW,EAAE,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAA;AAEhF,MAAM,sBAAsB,GAAG,CAAC,IAAY,EAAU,EAAE;IACtD,MAAM,IAAI,GAAW,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAA;IACtC,OAAO,IAAI,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,IAAI,EAAE,CAAA;AACxD,CAAC,CAAA;AAED;;;;;;;;GAQG;AACH,MAAM,CAAC,MAAM,cAAc,GAAG,CAAC,IAAY,EAAE,GAAW,EAAsB,EAAE;IAC9E,MAAM,IAAI,GAAuB,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,SAAiB,EAAW,EAAE,CAAC,aAAa,CAAC,SAAS,EAAE,GAAG,CAAC,CAAC,CAAA;IACrH,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;QACvB,OAAO,SAAS,CAAA;IAClB,CAAC;IACD,MAAM,MAAM,GAAW,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,CAAA;IAC/D,MAAM,KAAK,GAAW,aAAa,CAAC,sBAAsB,CAAC,MAAM,CAAC,CAAC,CAAA;IACnE,OAAO,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAA;AAC7C,CAAC,CAAA;AAED;;;;;GAKG;AACH,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC,IAAY,EAAE,GAAW,EAAqB,EAAE,CAChF,YAAY,CAAC,kBAAkB,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;KACxC,MAAM,CAAC,CAAC,IAAY,EAAW,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC;KACvD,GAAG,CAAC,CAAC,IAAY,EAAU,EAAE,CAAC,aAAa,CAAC,sBAAsB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;KAC1F,MAAM,CAAC,CAAC,KAAa,EAAW,EAAE,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAA;AAEzD;;;;;;;;;GASG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAAG,CAAC,IAAY,EAAE,GAAW,EAA0C,EAAE,CAC1G,YAAY,CAAC,kBAAkB,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,IAAY,EAA0C,EAAE;IAC3G,MAAM,SAAS,GAAW,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAA;IAC3C,OAAO,SAAS,KAAK,CAAC,CAAC;QACrB,CAAC,CAAC,EAAE;QACJ,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC,IAAI,EAAE,CAAC,EAAE,aAAa,CAAC,IAAI,CAAC,KAAK,CAAC,SAAS,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAA;AACzG,CAAC,CAAC,CAAA"}
+{"version":3,"file":"yaml-blocks.js","sourceRoot":"","sources":["../src/yaml-blocks.ts"],"names":[],"mappings":"AAAA,mGAAmG;AACnG,OAAO,EAAE,aAAa,EAAE,SAAS,EAAE,MAAM,MAAM,CAAA;AAC/C,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAA;AAEpD,MAAM,cAAc,GAAW,qBAAqB,CAAA;AACpD,MAAM,eAAe,GAAW,GAAG,CAAA;AACnC,MAAM,uBAAuB,GAAY,MAAM,CAAC,cAAc,CAAC,EAAE,CAAC,CAAA;AAElE,MAAM,YAAY,GAAG,CAAC,GAAW,EAAE,QAAgB,EAAa,EAAE,CAChE,IAAI,SAAS,CAAC,GAAG,cAAc,IAAI,GAAG,aAAa,QAAQ,uCAAuC,CAAC,CAAA;AAErG,MAAM,SAAS,GAAG,CAAC,KAAc,EAAoC,EAAE;IACrE,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;QACrB,OAAO,KAAK,CAAA;IACd,CAAC;IACD,MAAM,SAAS,GAAY,MAAM,CAAC,cAAc,CAAC,KAAK,CAAC,CAAA;IACvD,OAAO,SAAS,KAAK,uBAAuB,IAAI,SAAS,KAAK,IAAI,CAAA;AACpE,CAAC,CAAA;AAED,gGAAgG;AAChG,MAAM,CAAC,MAAM,qBAAqB,GAAG,CAAC,IAAY,EAAqC,EAAE;IACvF,IAAI,CAAC;QACH,MAAM,QAAQ,GAAqC,aAAa,CAAC,IAAI,CAAC,CAAA;QACtE,IAAI,QAAQ,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,IAAI,QAAQ,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC/D,MAAM,IAAI,SAAS,CAAC,CAAC,GAAG,QAAQ,CAAC,MAAM,EAAE,GAAG,QAAQ,CAAC,QAAQ,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,EAAU,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAA;QAClH,CAAC;QACD,MAAM,KAAK,GAAY,QAAQ,CAAC,IAAI,CAAC,EAAE,aAAa,EAAE,eAAe,EAAE,CAAC,CAAA;QACxE,IAAI,QAAQ,CAAC,QAAQ,KAAK,IAAI,EAAE,CAAC;YAC/B,OAAO,EAAE,CAAA;QACX,CAAC;QACD,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,CAAC;YACtB,MAAM,YAAY,CAAC,UAAU,EAAE,WAAW,CAAC,CAAA;QAC7C,CAAC;QACD,OAAO,KAAK,CAAA;IACd,CAAC;IAAC,OAAO,KAAc,EAAE,CAAC;QACxB,MAAM,MAAM,GAAW,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;QAC7E,MAAM,IAAI,SAAS,CAAC,GAAG,cAAc,KAAK,MAAM,wCAAwC,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAA;IAC7G,CAAC;AACH,CAAC,CAAA;AAED,0FAA0F;AAC1F,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC,IAAY,EAAE,GAAW,EAAW,EAAE,CACxE,MAAM,CAAC,MAAM,CAAC,qBAAqB,CAAC,IAAI,CAAC,EAAE,GAAG,CAAC,CAAA;AAEjD,wGAAwG;AACxG,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,IAAY,EAAE,GAAW,EAAqB,EAAE;IACjF,MAAM,KAAK,GAAY,qBAAqB,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAA;IACvD,OAAO,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,OAAO,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAA;AAC1E,CAAC,CAAA;AAED,qGAAqG;AACrG,MAAM,CAAC,MAAM,aAAa,GAAG,CAAC,KAAa,EAAU,EAAE,CAAC,KAAK,CAAC,UAAU,CAAC,cAAc,EAAE,EAAE,CAAC,CAAA;AAE5F,kFAAkF;AAClF,MAAM,CAAC,MAAM,cAAc,GAAG,CAAC,IAAY,EAAE,GAAW,EAAsB,EAAE;IAC9E,MAAM,KAAK,GAAY,qBAAqB,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAA;IACvD,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;QACxB,OAAO,SAAS,CAAA;IAClB,CAAC;IACD,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,OAAO,KAAK,KAAK,SAAS,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QACzF,MAAM,YAAY,CAAC,GAAG,EAAE,UAAU,CAAC,CAAA;IACrC,CAAC;IACD,OAAO,MAAM,CAAC,KAAK,CAAC,CAAA;AACtB,CAAC,CAAA;AAED,yFAAyF;AACzF,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC,IAAY,EAAE,GAAW,EAAqB,EAAE;IAChF,MAAM,KAAK,GAAY,qBAAqB,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAA;IACvD,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;QACxB,OAAO,EAAE,CAAA;IACX,CAAC;IACD,IAAI,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,KAAK,CAAC,CAAC,KAAc,EAAmB,EAAE,CAAC,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,EAAE,CAAC;QACrG,MAAM,YAAY,CAAC,GAAG,EAAE,uBAAuB,CAAC,CAAA;IAClD,CAAC;IACD,OAAO,KAAK,CAAA;AACd,CAAC,CAAA;AAED,kGAAkG;AAClG,gGAAgG;AAChG,MAAM,UAAU,GAAG,CAAC,IAAY,EAAE,KAAc,EAAW,EAAE;IAC3D,IAAI,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,CAAC;QAC5D,MAAM,YAAY,CAAC,UAAU,EAAE,6BAA6B,CAAC,CAAA;IAC/D,CAAC;IACD,OAAO,KAAK,CAAA;AACd,CAAC,CAAA;AAED,MAAM,UAAU,GAAG,CAAC,KAAc,EAAU,EAAE;IAC5C,IAAI,CAAC;QACH,OAAO,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,UAAU,CAAC,CAAA;IAC9E,CAAC;IAAC,OAAO,KAAc,EAAE,CAAC;QACxB,MAAM,IAAI,SAAS,CAAC,GAAG,cAAc,mEAAmE,EAAE;YACxG,KAAK,EAAE,KAAK;SACb,CAAC,CAAA;IACJ,CAAC;AACH,CAAC,CAAA;AAED,qGAAqG;AACrG,MAAM,CAAC,MAAM,sBAAsB,GAAG,CAAC,IAAY,EAAE,GAAW,EAA0C,EAAE;IAC1G,MAAM,KAAK,GAAY,qBAAqB,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAA;IACvD,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;QACxB,OAAO,EAAE,CAAA;IACX,CAAC;IACD,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,CAAC;QACtB,MAAM,YAAY,CAAC,GAAG,EAAE,WAAW,CAAC,CAAA;IACtC,CAAC;IACD,OAAO,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,SAAS,CAA6B,EAA6B,EAAE,CAAC;QAC7G,IAAI;QACJ,UAAU,CAAC,SAAS,CAAC;KACtB,CAAC,CAAA;AACJ,CAAC,CAAA"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@ploaness/governance",
-  "version": "1.9.0",
+  "version": "1.11.0",
   "description": "Pure, unit-tested governance rules for ploaness. No filesystem, process, or network access.",
   "license": "MIT",
   "author": "Herman Ciechanowiec <herman@ciechanowiec.eu>",
@@ -31,8 +31,13 @@
   "publishConfig": {
     "access": "public"
   },
+  "dependencies": {
+    "micromatch": "4.0.8",
+    "yaml": "2.9.1"
+  },
   "devDependencies": {
-    "@types/node": "26.6.4",
+    "@types/micromatch": "4.0.10",
+    "@types/node": "26.6.5",
     "typescript": "6.0.3"
   },
   "scripts": {