@savvy-web/silk-effects 9.2.0 → 9.2.2

package/changesets/schemas/dependency-table.js

@@ -95,7 +95,7 @@ const DependencyTableTypeSchema = Schema.Literals([
 *
 * @public
 */
-const VERSION_RE = /^(\u2014|[~^]?\d+\.\d+\.\d+(?:[-+.][\w.+-]+)?|(?:catalog|workspace|npm|jsr|file|link|portal):[^\s|]+)$/;
+const VERSION_RE = /^(\u2014|[~^]?\d+\.\d+\.\d+(?:[-+.][\w.+-]+)?|(?:catalog|workspace|npm|jsr|file|link|portal):[^\s|]+)$/u;
 /**
 * Version string or em dash (U+2014) sentinel for added/removed entries.
 *

package/changesets/schemas/git.js

@@ -40,7 +40,7 @@ import { Schema } from "effect";
 *
 * @public
 */
-const CommitHashSchema = Schema.String.check(Schema.isPattern(/^[a-f0-9]{7,}$/, { message: "Commit hash must be 7 or more lowercase hexadecimal characters (0-9, a-f). Example: \"a1b2c3d\" or a full 40-character SHA like \"a1b2c3d4e5f6a1b2c3d4e5f6a1b2c3d4e5f6a1b2\". Uppercase letters are not allowed" }));
+const CommitHashSchema = Schema.String.check(Schema.isPattern(/^[a-f0-9]{7,}$/u, { message: "Commit hash must be 7 or more lowercase hexadecimal characters (0-9, a-f). Example: \"a1b2c3d\" or a full 40-character SHA like \"a1b2c3d4e5f6a1b2c3d4e5f6a1b2c3d4e5f6a1b2\". Uppercase letters are not allowed" }));
 /**
 * Semantic version bump type.
 *

package/changesets/schemas/github.js

@@ -52,7 +52,7 @@ function isValidUrl(value) {
 *
 * @public
 */
-const UsernameSchema = Schema.String.check(Schema.isPattern(/^[a-zA-Z0-9]([a-zA-Z0-9-]*[a-zA-Z0-9])?$/, { message: "Invalid GitHub username format. Usernames must contain only alphanumeric characters and hyphens, and cannot start or end with a hyphen. Example: \"octocat\" or \"my-user-123\"" }));
+const UsernameSchema = Schema.String.check(Schema.isPattern(/^[a-zA-Z0-9]([a-zA-Z0-9-]*[a-zA-Z0-9])?$/u, { message: "Invalid GitHub username format. Usernames must contain only alphanumeric characters and hyphens, and cannot start or end with a hyphen. Example: \"octocat\" or \"my-user-123\"" }));
 /**
 * Schema for a GitHub issue or PR number (positive integer).
 *

package/changesets/schemas/options.js

@@ -23,7 +23,7 @@ import { Effect, Schema } from "effect";
 *
 */
 /** Regex for `owner/repo` format, shared between schema and validation. */
-const REPO_PATTERN = /^[a-zA-Z0-9._-]+\/[a-zA-Z0-9._-]+$/;
+const REPO_PATTERN = /^[a-zA-Z0-9._-]+\/[a-zA-Z0-9._-]+$/u;
 /**
 * Schema for a GitHub repository in `owner/repo` format.
 *

package/changesets/schemas/version-files.js

@@ -54,7 +54,7 @@ import { Schema } from "effect";
 *
 * @public
 */
-const JsonPathSchema = Schema.String.check(Schema.isPattern(/^\$\.[^.]/, { message: "JSONPath must start with \"$.\" followed by a property (e.g., \"$.version\", \"$.metadata.version\")" }));
+const JsonPathSchema = Schema.String.check(Schema.isPattern(/^\$\.[^.]/u, { message: "JSONPath must start with \"$.\" followed by a property (e.g., \"$.version\", \"$.metadata.version\")" }));
 /**
 * Schema for a single version file configuration entry — **new shape**.
 *

package/changesets/utils/dependency-table.js

@@ -98,15 +98,19 @@ function parseDependencyTable(table) {
 	return result;
 }
 /**
-* Create a table cell with a text node.
+* Create a table cell with a text node that emits literally.
 *
 * @remarks
-* The cell holds a plain text node; the canonical stringifier escapes any
-* character that could open a markdown construct (`~0.2.1` is written as
-* `\~0.2.1`, `some_pkg` as `some\_pkg`, `|` as `\|`). Parsing consumes the
-* escapes, so cell VALUES round-trip byte-identically through
-* parse-and-reserialize — the escaping is a raw-byte spelling, never a
-* value change, and it cannot compound across cycles.
+* The cell holds a text node carrying `escapeStyle: "literal"`, so the
+* canonical stringifier writes the value verbatim instead of escaping
+* characters that could open a markdown construct (`~0.2.1` stays `~0.2.1`,
+* `some_pkg` stays `some_pkg`) — the caller vouches the dependency name and
+* version-range values in a dependency table are already safe markdown
+* source. Escaping that defends the table's own structure still applies
+* (a cell's `|` is still written `\|`), so a value containing a pipe cannot
+* break out of its cell. Parsing consumes any escapes present in the
+* source (old or new spelling), so cell VALUES round-trip byte-identically
+* through parse-and-reserialize regardless of which spelling produced them.
 *
 * @param text - The cell text content
 * @returns An MDAST `TableCell` node
@@ -118,7 +122,8 @@ function makeCell(text) {
 		type: "tableCell",
 		children: [{
 			type: "text",
-			value: text
+			value: text,
+			escapeStyle: "literal"
 		}]
 	};
 }

package/commitlint/hook/diagnostics/open-issues.js

@@ -1,6 +1,6 @@
 import { readCache, writeCache } from "./cache.js";
 import { Effect } from "effect";
-import { ChildProcess, ChildProcessSpawner } from "effect/unstable/process";
+import { ChildProcess, ChildProcessSpawner } from "effect/process";
 
 //#region src/commitlint/hook/diagnostics/open-issues.ts
 /**
@@ -9,7 +9,7 @@ import { ChildProcess, ChildProcessSpawner } from "effect/unstable/process";
 * @remarks
 * The `gh` invocations are not git, so they stay hand-rolled — the spawn
 * mechanism moved from promisified `node:child_process.execFile` onto
-* `effect/unstable/process` `ChildProcess`. Any failure (gh missing, not
+* `effect/process` `ChildProcess`. Any failure (gh missing, not
 * logged in, no repo, malformed JSON) degrades to `null`, preserving the
 * never-fails contract of the v3 implementation.
 *

package/commitlint/hook/diagnostics/signing.js

@@ -1,7 +1,7 @@
 import { Effect, Option } from "effect";
 import { Git } from "@effected/git";
 import { stat } from "node:fs/promises";
-import { ChildProcess, ChildProcessSpawner } from "effect/unstable/process";
+import { ChildProcess, ChildProcessSpawner } from "effect/process";
 
 //#region src/commitlint/hook/diagnostics/signing.ts
 /**
@@ -11,7 +11,7 @@ import { ChildProcess, ChildProcessSpawner } from "effect/unstable/process";
 * The `git config` reads run through `@effected/git`'s `configGet`
 * (Option-shaped: an unset key is `Option.none`). The `gpg` /
 * `gpg-connect-agent` probes are not git, so they stay hand-rolled on
-* `effect/unstable/process` `ChildProcess`; every probe degrades to its v3
+* `effect/process` `ChildProcess`; every probe degrades to its v3
 * fallback value (`keyResolves: false`, `agentResponsive: false`) on any
 * failure, and the diagnostic as a whole degrades to
 * {@link FALLBACK_DIAGNOSTIC}, preserving the never-fails contract.

package/index.d.ts

@@ -1,7 +1,7 @@
 import { AnalyzedWorkspace, BiomeSyncError, BiomeSyncError as BiomeSyncError$1, BiomeSyncOptions, BiomeSyncResult, BiomeSyncResult as BiomeSyncResult$1, ChangesetConfigError, ChangesetConfigError as ChangesetConfigError$1, ChangesetConfigFile, ChangesetConfigFile as ChangesetConfigFile$1, ConfigDiscoveryOptions, ConfigLocation, ConfigLocation as ConfigLocation$1, ConfigNotFoundError, ConfigSource, LIFECYCLE_SCRIPTS_CONFIG_KEY, PrBody, PublishTargetBindingError, PublishTargetBindingError as PublishTargetBindingError$1, SavvyBaseSection, SavvyHooksSection, SavvyInstallHook, SavvyInstallSection, SavvyOkfSection, SavvyToolchainSection, SilkChangesetConfigFile, SilkChangesetConfigFile as SilkChangesetConfigFile$1, SilkPublishConfig, WorkspaceAnalysis, WorkspaceAnalysis as WorkspaceAnalysis$1, WorkspaceAnalysisError, WorkspaceAnalysisError as WorkspaceAnalysisError$1, publishesBuiltLinkDirectory, savvyBasePreamble, savvyHooksHygiene, savvyInstallBlock, savvyInstallDeps, savvyOkfBlock, savvyOkfSync, savvyToolSection, savvyToolchainCheck } from "@savvy-web/silk-core";
 import { Context, Effect, FileSystem, Layer, Path, Schema } from "effect";
 import { Plugin } from "unified";
-import { ChildProcessSpawner } from "effect/unstable/process";
+import { ChildProcessSpawner } from "effect/process";
 import { PackageManagerDetector, PublishTarget, PublishabilityDetector, WorkspaceDiscovery, WorkspaceDiscoveryFailure, WorkspacePackage, WorkspaceSnapshotAtFailure, WorkspaceSnapshotWorktreeFailure, WorkspaceSnapshots, WorkspaceStateSnapshot, WorkspacesOptions } from "@effected/workspaces";
 import { Git } from "@effected/git";
 import { GlobExpansionError } from "@effected/walker";

package/package.json

@@ -1,6 +1,6 @@
 {
 	"name": "@savvy-web/silk-effects",
-	"version": "9.2.0",
+	"version": "9.2.2",
 	"private": false,
 	"description": "Shared Effect library for Silk Suite conventions",
 	"homepage": "https://github.com/savvy-web/systems/tree/main/packages/silk-effects",
@@ -37,16 +37,16 @@
 		"@changesets/get-release-plan": "^5.0.2",
 		"@changesets/pre": "^3.0.0",
 		"@changesets/read": "^1.0.1",
-		"@effected/github-references": "^0.5.0",
-		"@effected/glob": "^0.8.0",
-		"@effected/jsonc": "^0.13.0",
-		"@effected/markdown": "^0.12.1",
-		"@effected/package-json": "^0.18.0",
-		"@effected/toml": "^0.9.0",
-		"@effected/walker": "^0.12.0",
-		"@effected/yaml": "^0.17.0",
+		"@effected/github-references": "^0.6.0",
+		"@effected/glob": "^0.9.0",
+		"@effected/jsonc": "^0.14.0",
+		"@effected/markdown": "^0.14.0",
+		"@effected/package-json": "^0.19.1",
+		"@effected/toml": "^0.10.0",
+		"@effected/walker": "^0.13.0",
+		"@effected/yaml": "^0.18.0",
 		"@manypkg/get-packages": "^3.1.0",
-		"@savvy-web/silk-core": "0.4.7",
+		"@savvy-web/silk-core": "0.4.8",
 		"mdast-util-heading-range": "^4.0.0",
 		"mdast-util-to-string": "^4.0.0",
 		"remark-gfm": "^4.0.1",
@@ -58,10 +58,10 @@
 		"unist-util-visit": "^5.1.0"
 	},
 	"peerDependencies": {
-		"@effected/commands": "^0.9.0",
-		"@effected/git": "^0.17.0",
-		"@effected/templates": "^0.8.0",
-		"@effected/workspaces": "^0.28.0",
-		"effect": "4.0.0-rc.117"
+		"@effected/commands": "^0.10.0",
+		"@effected/git": "^0.18.0",
+		"@effected/templates": "^0.9.0",
+		"@effected/workspaces": "^0.30.0",
+		"effect": "4.0.0-rc.118"
 	}
 }

package/repos/schemas/manifest.js

@@ -7,7 +7,7 @@ import { Schema } from "effect";
 * (`.repos/<name>`) without escaping the `.repos/` directory.
 * @public
 */
-const RepoName = Schema.String.check(Schema.isPattern(/^(?!\.{1,2}$)[A-Za-z0-9][A-Za-z0-9._-]*$/)).annotate({ identifier: "RepoName" });
+const RepoName = Schema.String.check(Schema.isPattern(/^(?!\.{1,2}$)[A-Za-z0-9][A-Za-z0-9._-]*$/u)).annotate({ identifier: "RepoName" });
 /**
 * An agent-appended note: a discovered answer stamped with the pin it was written against.
 * @public

package/turbo/services/TurboInspector.js

@@ -3,7 +3,7 @@ import { DryRunParseError, NotATurboRepoError, TurboExecError, TurboNotInstalled
 import { TurboDryRun } from "../schemas/DryRun.js";
 import { Context, Effect, FileSystem, Layer, Schema } from "effect";
 import { Git } from "@effected/git";
-import { ChildProcess, ChildProcessSpawner } from "effect/unstable/process";
+import { ChildProcess, ChildProcessSpawner } from "effect/process";
 import { Run, Tool, ToolDiscovery } from "@effected/commands";
 
 //#region src/turbo/services/TurboInspector.ts