@savvy-web/silk-effects 1.5.2 → 2.0.0

package/changesets/api/linter.js

@@ -1,8 +1,10 @@
 import { ContentStructureRule } from "../remark/rules/content-structure.js";
+import { DependencyTableFormatRule } from "../remark/rules/dependency-table-format.js";
 import { HeadingHierarchyRule } from "../remark/rules/heading-hierarchy.js";
 import { RequiredSectionsRule } from "../remark/rules/required-sections.js";
 import { UncategorizedContentRule } from "../remark/rules/uncategorized-content.js";
 import { stripFrontmatter } from "../utils/strip-frontmatter.js";
+import remarkGfm from "remark-gfm";
 import remarkParse from "remark-parse";
 import remarkStringify from "remark-stringify";
 import { unified } from "unified";
@@ -13,7 +15,7 @@ import { join } from "node:path";
 /**
 * Class-based API wrapper for changeset linting.
 *
-* Provides a static class interface that runs all remark-lint rules
+* Provides a static class interface that runs all five remark-lint rules
 * against changeset markdown files and returns structured diagnostics.
 *
 * @internal
@@ -21,9 +23,9 @@ import { join } from "node:path";
 /**
 * Static class for linting changeset markdown files.
 *
-* Runs the four remark-lint rules (heading-hierarchy, required-sections,
-* content-structure, uncategorized-content) against changeset markdown
-* and returns structured {@link LintMessage} diagnostics.
+* Runs the five remark-lint rules (heading-hierarchy, required-sections,
+* content-structure, dependency-table-format, uncategorized-content) against
+* changeset markdown and returns structured {@link LintMessage} diagnostics.
 *
 * @remarks
 * This class implements the pre-validation layer of the three-layer
@@ -109,7 +111,7 @@ var ChangesetLinter = class ChangesetLinter {
 	*
 	* @remarks
 	* Reads the file synchronously, strips YAML frontmatter, and runs all
-	* four lint rules. The file path is preserved in each returned
+	* five lint rules. The file path is preserved in each returned
 	* {@link LintMessage} for error reporting.
 	*
 	* @param filePath - Absolute or relative path to the changeset `.md` file
@@ -123,7 +125,7 @@ var ChangesetLinter = class ChangesetLinter {
 	* Validate a markdown string directly.
 	*
 	* @remarks
-	* Strips YAML frontmatter (if present) and runs all four lint rules
+	* Strips YAML frontmatter (if present) and runs all five lint rules
 	* against the remaining content. This method is useful for validating
 	* changeset content that is already in memory, such as in test suites
 	* or editor integrations.
@@ -135,7 +137,7 @@ var ChangesetLinter = class ChangesetLinter {
 	*/
 	static validateContent(content, filePath = "<input>") {
 		const body = stripFrontmatter(content);
-		return unified().use(remarkParse).use(remarkStringify).use(HeadingHierarchyRule).use(RequiredSectionsRule).use(ContentStructureRule).use(UncategorizedContentRule).processSync(body).messages.map((msg) => ({
+		return unified().use(remarkParse).use(remarkGfm).use(remarkStringify).use(HeadingHierarchyRule).use(RequiredSectionsRule).use(ContentStructureRule).use(DependencyTableFormatRule).use(UncategorizedContentRule).processSync(body).messages.map((msg) => ({
 			file: filePath,
 			/* v8 ignore next 3 -- ruleId/line/column fallbacks; remark-lint always provides these */
 			rule: msg.ruleId ?? msg.source ?? "unknown",

package/changesets/errors.js

@@ -300,6 +300,49 @@ var GitError = class extends GitErrorBase {
 	}
 };
 /**
+* Base class for {@link ChangesetIOError}.
+*
+* @privateRemarks
+* Effect's `Data.TaggedError` creates an anonymous base class that
+* api-extractor cannot follow without an explicit export.
+*
+* @internal
+*/
+const ChangesetIOErrorBase = Data.TaggedError("ChangesetIOError");
+/**
+* Changeset file I/O failure.
+*
+* @remarks
+* Raised by {@link DepsRegen} when reading, writing, listing, or deleting
+* `.changeset/*.md` files fails. Deletion failures during
+* {@link DepsRegenShape.execute} are tolerated (stale changesets are
+* skip-and-continue, so an interrupted run stays safely re-runnable);
+* read, list, and write failures are loud.
+*
+* @example
+* ```typescript
+* import { Effect } from "effect";
+* import { ChangesetIOError } from "@savvy-web/changesets";
+*
+* declare const program: Effect.Effect<void, ChangesetIOError>;
+*
+* const handled = program.pipe(
+*   Effect.catchTag("ChangesetIOError", (err) =>
+*     Effect.logError(`changeset ${err.operation} failed at ${err.path}: ${err.reason}`)
+*   ),
+* );
+* ```
+*
+* @see {@link DepsRegen} which produces these errors during plan/execute
+*
+* @public
+*/
+var ChangesetIOError = class extends ChangesetIOErrorBase {
+	get message() {
+		return `changeset ${this.operation} failed at ${this.path}: ${this.reason}`;
+	}
+};
+/**
 * Base class for {@link ReleasePlanError}.
 *
 * @privateRemarks
@@ -325,4 +368,4 @@ var ReleasePlanError = class extends ReleasePlanErrorBase {
 };
 
 //#endregion
-export { ChangesetValidationError, ChangesetValidationErrorBase, ConfigurationError, ConfigurationErrorBase, GitError, GitErrorBase, GitHubApiError, GitHubApiErrorBase, MarkdownParseError, MarkdownParseErrorBase, ReleasePlanError, ReleasePlanErrorBase, VersionFileError, VersionFileErrorBase };
+export { ChangesetIOError, ChangesetIOErrorBase, ChangesetValidationError, ChangesetValidationErrorBase, ConfigurationError, ConfigurationErrorBase, GitError, GitErrorBase, GitHubApiError, GitHubApiErrorBase, MarkdownParseError, MarkdownParseErrorBase, ReleasePlanError, ReleasePlanErrorBase, VersionFileError, VersionFileErrorBase };

package/changesets/index.js

@@ -1,19 +1,20 @@
 import { __exportAll } from "../_virtual/_rolldown/runtime.js";
 import { Categories } from "./api/categories.js";
-import { ChangesetValidationError, ChangesetValidationErrorBase, ConfigurationError, ConfigurationErrorBase, GitError, GitErrorBase, GitHubApiError, GitHubApiErrorBase, MarkdownParseError, MarkdownParseErrorBase, ReleasePlanError, ReleasePlanErrorBase, VersionFileError, VersionFileErrorBase } from "./errors.js";
+import { ChangesetIOError, ChangesetIOErrorBase, ChangesetValidationError, ChangesetValidationErrorBase, ConfigurationError, ConfigurationErrorBase, GitError, GitErrorBase, GitHubApiError, GitHubApiErrorBase, MarkdownParseError, MarkdownParseErrorBase, ReleasePlanError, ReleasePlanErrorBase, VersionFileError, VersionFileErrorBase } from "./errors.js";
 import { JsonPathSchema, LegacyVersionFileConfigSchema, LegacyVersionFilesSchema, VersionFileConfigSchema, VersionFilesSchema } from "./schemas/version-files.js";
 import { GlobSchema, PackageScopeSchema, PackagesRecordSchema } from "./schemas/package-scope.js";
 import { ChangesetOptionsSchema, RepoSchema } from "./schemas/options.js";
 import { GitHubLive, GitHubService, GitHubServiceBase, makeGitHubTest } from "./services/github.js";
 import { MarkdownLive, MarkdownService, MarkdownServiceBase } from "./services/markdown.js";
 import { NonEmptyString, PositiveInteger } from "./schemas/primitives.js";
-import { DependencyActionSchema, DependencyTableRowSchema, DependencyTableSchema, DependencyTableTypeSchema, VersionOrEmptySchema } from "./schemas/dependency-table.js";
+import { DependencyActionSchema, DependencyTableRowSchema, DependencyTableSchema, DependencyTableTypeSchema, VERSION_RE, VersionOrEmptySchema } from "./schemas/dependency-table.js";
 import { serializeDependencyTableToMarkdown } from "./utils/dependency-table.js";
 import { GitHubInfoSchema, IssueNumberSchema, UrlOrMarkdownLinkSchema, UsernameSchema } from "./schemas/github.js";
 import changelogFunctions from "./changelog/index.js";
 import { Changelog } from "./api/changelog.js";
 import { DependencyTable } from "./api/dependency-table.js";
 import { ContentStructureRule } from "./remark/rules/content-structure.js";
+import { DependencyTableFormatRule } from "./remark/rules/dependency-table-format.js";
 import { HeadingHierarchyRule } from "./remark/rules/heading-hierarchy.js";
 import { RequiredSectionsRule } from "./remark/rules/required-sections.js";
 import { UncategorizedContentRule } from "./remark/rules/uncategorized-content.js";
@@ -28,24 +29,23 @@ import { ChangelogTransformer } from "./api/transformer.js";
 import { ClassificationReasonSchema, ClassificationSchema, ConfigInspector, ConfigInspectorBase, ConfigInspectorLive, InspectedConfigSchema, ResolvedPackageScopeSchema, ResolvedVersionFileSchema, makeConfigInspectorTest } from "./services/config-inspector.js";
 import { BranchAnalysisSchema, BranchAnalyzer, BranchAnalyzerBase, BranchAnalyzerLive, BranchFileEntrySchema, FileStatusSchema, makeBranchAnalyzerTest } from "./services/branch-analyzer.js";
 import { ChangelogService, ChangelogServiceBase } from "./services/changelog.js";
+import { computeWorkspaceDependencyDiffs } from "./utils/dep-diff.js";
+import { gitMergeBase } from "./utils/git.js";
+import { listPublishablePackageNames } from "./utils/publishability.js";
+import { DepsRegen, DepsRegenBase, DepsRegenDefault, DepsRegenLive, isPureDependencyChangeset } from "./services/deps-regen.js";
 import { VersionFiles } from "./utils/version-files.js";
 import { ReleasePlanner, ReleasePlannerBase, ReleasePlannerLive, makeReleasePlannerTest } from "./services/release-planner.js";
-import { WorkspaceSnapshotReader, WorkspaceSnapshotReaderBase, WorkspaceSnapshotReaderLive } from "./services/workspace-snapshot.js";
 import { SectionCategorySchema } from "./categories/types.js";
 import { CommitHashSchema, VersionTypeSchema } from "./schemas/git.js";
 import { ChangesetSchema, ChangesetSummarySchema, DependencyTypeSchema, DependencyUpdateSchema } from "./schemas/changeset.js";
 import { AppliedReleaseEntrySchema, AppliedReleaseSchema, BumpTypeSchema, ChangesetPreviewSchema, PendingChangesetSchema, PreviewReleaseSchema, VersionFileUpdateRecordSchema } from "./schemas/release-plan.js";
-import { computeWorkspaceDependencyDiffs } from "./utils/dep-diff.js";
-import { listPublishablePackageNames } from "./utils/publishability.js";
-import { gitMergeBase, snapshotFromWorktree } from "./utils/worktree-snapshot.js";
 import { ContentStructureRule as ContentStructureRule$1 } from "./markdownlint/rules/content-structure.js";
-import { DependencyTableFormatRule } from "./markdownlint/rules/dependency-table-format.js";
+import { DependencyTableFormatRule as DependencyTableFormatRule$1 } from "./markdownlint/rules/dependency-table-format.js";
 import { HeadingHierarchyRule as HeadingHierarchyRule$1 } from "./markdownlint/rules/heading-hierarchy.js";
 import { RequiredSectionsRule as RequiredSectionsRule$1 } from "./markdownlint/rules/required-sections.js";
 import { UncategorizedContentRule as UncategorizedContentRule$1 } from "./markdownlint/rules/uncategorized-content.js";
 import SilkChangesetsRules from "./markdownlint/index.js";
 import { AggregateDependencyTablesPlugin } from "./remark/plugins/aggregate-dependency-tables.js";
-import { DependencyTableFormatRule as DependencyTableFormatRule$1 } from "./remark/rules/dependency-table-format.js";
 import { SilkChangesetPreset, SilkChangesetTransformPreset } from "./remark/presets.js";
 
 //#region src/changesets/index.ts
@@ -64,6 +64,8 @@ var changesets_exports = /* @__PURE__ */ __exportAll({
 	ChangelogService: () => ChangelogService,
 	ChangelogServiceBase: () => ChangelogServiceBase,
 	ChangelogTransformer: () => ChangelogTransformer,
+	ChangesetIOError: () => ChangesetIOError,
+	ChangesetIOErrorBase: () => ChangesetIOErrorBase,
 	ChangesetLinter: () => ChangesetLinter,
 	ChangesetOptionsSchema: () => ChangesetOptionsSchema,
 	ChangesetPreviewSchema: () => ChangesetPreviewSchema,
@@ -84,12 +86,16 @@ var changesets_exports = /* @__PURE__ */ __exportAll({
 	DeduplicateItemsPlugin: () => DeduplicateItemsPlugin,
 	DependencyActionSchema: () => DependencyActionSchema,
 	DependencyTable: () => DependencyTable,
-	DependencyTableFormatRule: () => DependencyTableFormatRule$1,
+	DependencyTableFormatRule: () => DependencyTableFormatRule,
 	DependencyTableRowSchema: () => DependencyTableRowSchema,
 	DependencyTableSchema: () => DependencyTableSchema,
 	DependencyTableTypeSchema: () => DependencyTableTypeSchema,
 	DependencyTypeSchema: () => DependencyTypeSchema,
 	DependencyUpdateSchema: () => DependencyUpdateSchema,
+	DepsRegen: () => DepsRegen,
+	DepsRegenBase: () => DepsRegenBase,
+	DepsRegenDefault: () => DepsRegenDefault,
+	DepsRegenLive: () => DepsRegenLive,
 	FileStatusSchema: () => FileStatusSchema,
 	GitError: () => GitError,
 	GitErrorBase: () => GitErrorBase,
@@ -113,7 +119,7 @@ var changesets_exports = /* @__PURE__ */ __exportAll({
 	MarkdownService: () => MarkdownService,
 	MarkdownServiceBase: () => MarkdownServiceBase,
 	MarkdownlintContentStructureRule: () => ContentStructureRule$1,
-	MarkdownlintDependencyTableFormatRule: () => DependencyTableFormatRule,
+	MarkdownlintDependencyTableFormatRule: () => DependencyTableFormatRule$1,
 	MarkdownlintHeadingHierarchyRule: () => HeadingHierarchyRule$1,
 	MarkdownlintRequiredSectionsRule: () => RequiredSectionsRule$1,
 	MarkdownlintUncategorizedContentRule: () => UncategorizedContentRule$1,
@@ -142,6 +148,7 @@ var changesets_exports = /* @__PURE__ */ __exportAll({
 	UncategorizedContentRule: () => UncategorizedContentRule,
 	UrlOrMarkdownLinkSchema: () => UrlOrMarkdownLinkSchema,
 	UsernameSchema: () => UsernameSchema,
+	VERSION_RE: () => VERSION_RE,
 	VersionFileConfigSchema: () => VersionFileConfigSchema,
 	VersionFileError: () => VersionFileError,
 	VersionFileErrorBase: () => VersionFileErrorBase,
@@ -150,20 +157,17 @@ var changesets_exports = /* @__PURE__ */ __exportAll({
 	VersionFilesSchema: () => VersionFilesSchema,
 	VersionOrEmptySchema: () => VersionOrEmptySchema,
 	VersionTypeSchema: () => VersionTypeSchema,
-	WorkspaceSnapshotReader: () => WorkspaceSnapshotReader,
-	WorkspaceSnapshotReaderBase: () => WorkspaceSnapshotReaderBase,
-	WorkspaceSnapshotReaderLive: () => WorkspaceSnapshotReaderLive,
 	changelogFunctions: () => changelogFunctions,
 	computeWorkspaceDependencyDiffs: () => computeWorkspaceDependencyDiffs,
 	gitMergeBase: () => gitMergeBase,
+	isPureDependencyChangeset: () => isPureDependencyChangeset,
 	listPublishablePackageNames: () => listPublishablePackageNames,
 	makeBranchAnalyzerTest: () => makeBranchAnalyzerTest,
 	makeConfigInspectorTest: () => makeConfigInspectorTest,
 	makeGitHubTest: () => makeGitHubTest,
 	makeReleasePlannerTest: () => makeReleasePlannerTest,
-	serializeDependencyTableToMarkdown: () => serializeDependencyTableToMarkdown,
-	snapshotFromWorktree: () => snapshotFromWorktree
+	serializeDependencyTableToMarkdown: () => serializeDependencyTableToMarkdown
 });
 
 //#endregion
-export { AggregateDependencyTablesPlugin, AppliedReleaseEntrySchema, AppliedReleaseSchema, BranchAnalysisSchema, BranchAnalyzer, BranchAnalyzerBase, BranchAnalyzerLive, BranchFileEntrySchema, BumpTypeSchema, Categories, Changelog, ChangelogService, ChangelogServiceBase, ChangelogTransformer, ChangesetLinter, ChangesetOptionsSchema, ChangesetPreviewSchema, ChangesetSchema, ChangesetSummarySchema, ChangesetValidationError, ChangesetValidationErrorBase, ClassificationReasonSchema, ClassificationSchema, CommitHashSchema, ConfigInspector, ConfigInspectorBase, ConfigInspectorLive, ConfigurationError, ConfigurationErrorBase, ContentStructureRule, ContributorFootnotesPlugin, DeduplicateItemsPlugin, DependencyActionSchema, DependencyTable, DependencyTableFormatRule$1 as DependencyTableFormatRule, DependencyTableRowSchema, DependencyTableSchema, DependencyTableTypeSchema, DependencyTypeSchema, DependencyUpdateSchema, FileStatusSchema, GitError, GitErrorBase, GitHubApiError, GitHubApiErrorBase, GitHubInfoSchema, GitHubLive, GitHubService, GitHubServiceBase, GlobSchema, HeadingHierarchyRule, InspectedConfigSchema, IssueLinkRefsPlugin, IssueNumberSchema, JsonPathSchema, LegacyVersionFileConfigSchema, LegacyVersionFilesSchema, MarkdownLive, MarkdownParseError, MarkdownParseErrorBase, MarkdownService, MarkdownServiceBase, ContentStructureRule$1 as MarkdownlintContentStructureRule, DependencyTableFormatRule as MarkdownlintDependencyTableFormatRule, HeadingHierarchyRule$1 as MarkdownlintHeadingHierarchyRule, RequiredSectionsRule$1 as MarkdownlintRequiredSectionsRule, UncategorizedContentRule$1 as MarkdownlintUncategorizedContentRule, MergeSectionsPlugin, NonEmptyString, NormalizeFormatPlugin, PackageScopeSchema, PackagesRecordSchema, PendingChangesetSchema, PositiveInteger, PreviewReleaseSchema, ReleasePlanError, ReleasePlanErrorBase, ReleasePlanner, ReleasePlannerBase, ReleasePlannerLive, ReorderSectionsPlugin, RepoSchema, RequiredSectionsRule, ResolvedPackageScopeSchema, ResolvedVersionFileSchema, SectionCategorySchema, SilkChangesetPreset, SilkChangesetTransformPreset, SilkChangesetsRules, UncategorizedContentRule, UrlOrMarkdownLinkSchema, UsernameSchema, VersionFileConfigSchema, VersionFileError, VersionFileErrorBase, VersionFileUpdateRecordSchema, VersionFiles, VersionFilesSchema, VersionOrEmptySchema, VersionTypeSchema, WorkspaceSnapshotReader, WorkspaceSnapshotReaderBase, WorkspaceSnapshotReaderLive, changelogFunctions, changesets_exports, computeWorkspaceDependencyDiffs, gitMergeBase, listPublishablePackageNames, makeBranchAnalyzerTest, makeConfigInspectorTest, makeGitHubTest, makeReleasePlannerTest, serializeDependencyTableToMarkdown, snapshotFromWorktree };
+export { AggregateDependencyTablesPlugin, AppliedReleaseEntrySchema, AppliedReleaseSchema, BranchAnalysisSchema, BranchAnalyzer, BranchAnalyzerBase, BranchAnalyzerLive, BranchFileEntrySchema, BumpTypeSchema, Categories, Changelog, ChangelogService, ChangelogServiceBase, ChangelogTransformer, ChangesetIOError, ChangesetIOErrorBase, ChangesetLinter, ChangesetOptionsSchema, ChangesetPreviewSchema, ChangesetSchema, ChangesetSummarySchema, ChangesetValidationError, ChangesetValidationErrorBase, ClassificationReasonSchema, ClassificationSchema, CommitHashSchema, ConfigInspector, ConfigInspectorBase, ConfigInspectorLive, ConfigurationError, ConfigurationErrorBase, ContentStructureRule, ContributorFootnotesPlugin, DeduplicateItemsPlugin, DependencyActionSchema, DependencyTable, DependencyTableFormatRule, DependencyTableRowSchema, DependencyTableSchema, DependencyTableTypeSchema, DependencyTypeSchema, DependencyUpdateSchema, DepsRegen, DepsRegenBase, DepsRegenDefault, DepsRegenLive, FileStatusSchema, GitError, GitErrorBase, GitHubApiError, GitHubApiErrorBase, GitHubInfoSchema, GitHubLive, GitHubService, GitHubServiceBase, GlobSchema, HeadingHierarchyRule, InspectedConfigSchema, IssueLinkRefsPlugin, IssueNumberSchema, JsonPathSchema, LegacyVersionFileConfigSchema, LegacyVersionFilesSchema, MarkdownLive, MarkdownParseError, MarkdownParseErrorBase, MarkdownService, MarkdownServiceBase, ContentStructureRule$1 as MarkdownlintContentStructureRule, DependencyTableFormatRule$1 as MarkdownlintDependencyTableFormatRule, HeadingHierarchyRule$1 as MarkdownlintHeadingHierarchyRule, RequiredSectionsRule$1 as MarkdownlintRequiredSectionsRule, UncategorizedContentRule$1 as MarkdownlintUncategorizedContentRule, MergeSectionsPlugin, NonEmptyString, NormalizeFormatPlugin, PackageScopeSchema, PackagesRecordSchema, PendingChangesetSchema, PositiveInteger, PreviewReleaseSchema, ReleasePlanError, ReleasePlanErrorBase, ReleasePlanner, ReleasePlannerBase, ReleasePlannerLive, ReorderSectionsPlugin, RepoSchema, RequiredSectionsRule, ResolvedPackageScopeSchema, ResolvedVersionFileSchema, SectionCategorySchema, SilkChangesetPreset, SilkChangesetTransformPreset, SilkChangesetsRules, UncategorizedContentRule, UrlOrMarkdownLinkSchema, UsernameSchema, VERSION_RE, VersionFileConfigSchema, VersionFileError, VersionFileErrorBase, VersionFileUpdateRecordSchema, VersionFiles, VersionFilesSchema, VersionOrEmptySchema, VersionTypeSchema, changelogFunctions, changesets_exports, computeWorkspaceDependencyDiffs, gitMergeBase, isPureDependencyChangeset, listPublishablePackageNames, makeBranchAnalyzerTest, makeConfigInspectorTest, makeGitHubTest, makeReleasePlannerTest, serializeDependencyTableToMarkdown };

package/changesets/markdownlint/rules/dependency-table-format.js

@@ -1,3 +1,4 @@
+import { VERSION_RE } from "../../schemas/dependency-table.js";
 import { RULE_DOCS } from "../../constants.js";
 import { getHeadingLevel, getHeadingText } from "./utils.js";
 
@@ -23,7 +24,6 @@ const EXPECTED_HEADERS = [
 	"from",
 	"to"
 ];
-const VERSION_RE = /^(\u2014|[~^]?\d+\.\d+\.\d+(?:[-+.][\w.+-]*)?)$/;
 /**
 * Extract text from a `tableHeader` or `tableData` cell token.
 *

package/changesets/remark/presets.js

@@ -1,4 +1,5 @@
 import { ContentStructureRule } from "./rules/content-structure.js";
+import { DependencyTableFormatRule } from "./rules/dependency-table-format.js";
 import { HeadingHierarchyRule } from "./rules/heading-hierarchy.js";
 import { RequiredSectionsRule } from "./rules/required-sections.js";
 import { UncategorizedContentRule } from "./rules/uncategorized-content.js";
@@ -9,7 +10,6 @@ import { MergeSectionsPlugin } from "./plugins/merge-sections.js";
 import { NormalizeFormatPlugin } from "./plugins/normalize-format.js";
 import { ReorderSectionsPlugin } from "./plugins/reorder-sections.js";
 import { AggregateDependencyTablesPlugin } from "./plugins/aggregate-dependency-tables.js";
-import { DependencyTableFormatRule } from "./rules/dependency-table-format.js";
 
 //#region src/changesets/remark/presets.ts
 /**

package/changesets/schemas/dependency-table.js

@@ -68,6 +68,16 @@ const DependencyActionSchema = Schema.Literal("added", "updated", "removed");
 */
 const DependencyTableTypeSchema = Schema.Literal("dependency", "devDependency", "peerDependency", "optionalDependency", "workspace", "config");
 /**
+* The canonical accepted-value pattern for a dependency-table From/To cell:
+* the em-dash sentinel (U+2014), a bare/`~`/`^` semver, or — as a last-resort
+* fallback when a `catalog:`/`workspace:` specifier could not be resolved to a
+* concrete version — a pnpm protocol string. Non-overlapping alternatives keep
+* this free of polynomial backtracking (CodeQL).
+*
+* @public
+*/
+const VERSION_RE = /^(\u2014|[~^]?\d+\.\d+\.\d+(?:[-+.][\w.+-]+)?|(?:catalog|workspace|npm|jsr|file|link|portal):[^\s|]+)$/;
+/**
 * Version string or em dash (U+2014) sentinel for added/removed entries.
 *
 * @remarks
@@ -93,7 +103,7 @@ const DependencyTableTypeSchema = Schema.Literal("dependency", "devDependency",
 *
 * @public
 */
-const VersionOrEmptySchema = Schema.String.pipe(Schema.pattern(/^(\u2014|[~^]?\d+\.\d+\.\d+(?:[-+.][\w.+-]*)?)$/));
+const VersionOrEmptySchema = Schema.String.pipe(Schema.pattern(VERSION_RE));
 /**
 * Schema for a single dependency table row.
 *
@@ -185,4 +195,4 @@ const DependencyTableRowSchema = Schema.Struct({
 const DependencyTableSchema = Schema.Array(DependencyTableRowSchema).pipe(Schema.minItems(1));
 
 //#endregion
-export { DependencyActionSchema, DependencyTableRowSchema, DependencyTableSchema, DependencyTableTypeSchema, VersionOrEmptySchema };
+export { DependencyActionSchema, DependencyTableRowSchema, DependencyTableSchema, DependencyTableTypeSchema, VERSION_RE, VersionOrEmptySchema };