@savvy-web/silk 3.0.5 → 3.1.0

package/changesets-markdownlint.d.cts

@@ -4225,7 +4225,7 @@ declare class UnsatisfiableConstraintError extends UnsatisfiableConstraintError_
   get message(): string;
 }
 //#endregion
-//#region ../../node_modules/.pnpm/@effected+npm@0.2.3_@effected+semver@0.2.0_effect@4.0.0-beta.99__effect@4.0.0-beta.99/node_modules/@effected/npm/index.d.ts
+//#region ../../node_modules/.pnpm/@effected+npm@0.3.0_@effected+semver@0.2.0_effect@4.0.0-beta.99__effect@4.0.0-beta.99/node_modules/@effected/npm/index.d.ts
 //#region src/CatalogAssemblyError.d.ts
 declare const CatalogAssemblyError_base: Schema.Class<CatalogAssemblyError, Schema.TaggedStruct<"CatalogAssemblyError", {
   /**
@@ -4497,6 +4497,135 @@ declare class InvalidIntegrityHashError extends InvalidIntegrityHashError_base {
  */
 type IntegrityHashBrand = string & Brand.Brand<"IntegrityHash">;
 //#endregion
+//#region src/ReleaseAgeGate.d.ts
+/**
+ * A source's partial contribution to a {@link ReleaseAgeGate}: the effective
+ * gate is assembled from more than one place (inline `pnpm-workspace.yaml`
+ * keys, replayed `updateConfig` hooks, `pnpm config get` output), and each
+ * source may set the age, the exclude list, both, or neither. Absent fields
+ * contribute nothing to the combination.
+ *
+ * Deliberately permissive: unlike {@link ReleaseAgeGate} it does not constrain
+ * `ageMinutes` to be non-negative, because the raw values arrive from arbitrary
+ * config sources and {@link ReleaseAgeGate.combine} is the single authority
+ * that clamps them.
+ *
+ * @public
+ */
+declare const PartialReleaseAgeGate: Schema.Struct<{
+  /** Minutes a release must age; absent means this source sets no age. */
+  readonly ageMinutes: Schema.optionalKey<Schema.Number>;
+  /** Exempt package-name patterns; absent means this source adds no exemptions. */
+  readonly exclude: Schema.optionalKey<Schema.$Array<Schema.String>>;
+}>;
+/**
+ * One source's partial contribution to a release-age gate. All fields optional.
+ *
+ * @public
+ */
+type PartialReleaseAgeGate = typeof PartialReleaseAgeGate.Type;
+declare const ReleaseAgeGate_base: Schema.Class<ReleaseAgeGate, Schema.Struct<{
+  /** Minutes a published version must age before it is eligible (non-negative, finite). */
+  readonly ageMinutes: Schema.Number;
+  /** Package-name patterns exempt from the gate (exact names or `*`-globs). */
+  readonly exclude: Schema.$Array<Schema.String>;
+}>, {}>;
+/**
+ * pnpm's publish-time release-age gate: the number of minutes a published
+ * version must age before it is eligible, and the set of package-name patterns
+ * exempt from the gate. Mirrors pnpm's `minimumReleaseAge` /
+ * `minimumReleaseAgeExclude` config so a resolver can drop too-young candidate
+ * versions before picking, avoiding `ERR_PNPM_NO_MATURE_MATCHING_VERSION`.
+ *
+ * `ageMinutes` is constrained non-negative and finite; a `ReleaseAgeGate` with
+ * `ageMinutes <= 0` is an inert gate that filters nothing. Assemble a gate from
+ * multiple config sources with {@link ReleaseAgeGate.combine}, and apply it to
+ * a package's candidate versions with {@link ReleaseAgeGate.filterVersions}.
+ *
+ * @example
+ * ```ts
+ * import { ReleaseAgeGate } from "@effected/npm";
+ *
+ * const gate = ReleaseAgeGate.combine(
+ *   { ageMinutes: 1440 },
+ *   { exclude: ["@my-scope/*"] },
+ * );
+ * // gate.ageMinutes === 1440, gate.exclude === ["@my-scope/*"]
+ *
+ * const eligible = gate.filterVersions(
+ *   ["1.0.0", "1.0.1"],
+ *   { "1.0.0": "2020-01-01T00:00:00Z", "1.0.1": "2026-07-21T00:00:00Z" },
+ *   "prettier",
+ *   Date.now(),
+ * );
+ * ```
+ *
+ * @public
+ */
+declare class ReleaseAgeGate extends ReleaseAgeGate_base {
+  /**
+   * Combine partial contributions from multiple sources into one effective
+   * gate: **strictest age wins** (the maximum of the contributed ages,
+   * clamped to be non-negative) and the exclude sets **union** (deduplicated,
+   * insertion order preserved). A contribution's absent field adds nothing; a
+   * negative or non-finite contributed age is ignored by the clamp. With no
+   * contributions (or only empty ones) the result is the inert zero gate
+   * (`ageMinutes: 0`, `exclude: []`).
+   *
+   * `combine` is total — it never throws on a fractional, negative, or
+   * non-finite contribution — which is why {@link (PartialReleaseAgeGate:variable)}
+   * does not constrain its `ageMinutes` and this method owns the clamp.
+   *
+   * @param contributions - the partial gates to merge, one per source.
+   */
+  static combine(...contributions: readonly PartialReleaseAgeGate[]): ReleaseAgeGate;
+  /**
+   * Whether a package name matches any of `patterns`, using pnpm's
+   * `@pnpm/matcher` semantics: an exact-name match, or a `*`-glob where `*`
+   * matches any run of characters **including `/`** — so a bare `*` matches a
+   * scoped name like `@scope/pkg`, and `@scope/*` matches every package in a
+   * scope.
+   *
+   * @remarks
+   * This is deliberately **NOT** `@effected/glob`'s minimatch dialect, in
+   * which `*` refuses to cross `/` (there `*` matches `pkg` but not
+   * `@scope/pkg`, and you would need `**`). pnpm treats the package name as a
+   * flat string, so this matcher does too. Do not "fix" this to route through
+   * `@effected/glob`: it would silently change which packages a gate exempts
+   * and diverge from pnpm's own behavior.
+   *
+   * @param name - the package name to test.
+   * @param patterns - the exclude patterns (exact names or `*`-globs).
+   */
+  static matchesExclude(name: string, patterns: readonly string[]): boolean;
+  /**
+   * Whether this gate exempts the given package name from the release-age
+   * check — `ReleaseAgeGate.matchesExclude(name, this.exclude)`.
+   *
+   * @param name - the package name to test.
+   */
+  isExcluded(name: string): boolean;
+  /**
+   * Filter a package's candidate versions to those old enough to pass the
+   * gate, given each version's publish timestamp and a caller-supplied `now`.
+   *
+   * A version is kept when it has a parseable publish timestamp at or before
+   * the cutoff (`now - ageMinutes * 60000`). A version with a **missing or
+   * unparseable** timestamp in `times` is **dropped** — matching pnpm's strict
+   * posture: a version whose age cannot be established is treated as too young.
+   * The clock is the caller's; this method reads no wall clock.
+   *
+   * Returns all versions unchanged (a no-op) when the gate is inert
+   * (`ageMinutes <= 0`) or the package name is excluded.
+   *
+   * @param versions - the candidate version strings.
+   * @param times - a map from version string to its ISO-8601 publish date.
+   * @param name - the package name (checked against the gate's `exclude` list).
+   * @param now - the current time in epoch milliseconds (the caller's clock).
+   */
+  filterVersions(versions: readonly string[], times: Readonly<Record<string, string>>, name: string, now: number): readonly string[];
+}
+//#endregion
 //#region ../../node_modules/.pnpm/@effected+glob@0.2.0_effect@4.0.0-beta.99/node_modules/@effected/glob/index.d.ts
 //#region src/GlobPattern.d.ts
 declare const GlobPatternError_base: Schema.Class<GlobPatternError, Schema.TaggedStruct<"GlobPatternError", {
@@ -4662,7 +4791,7 @@ declare class GlobPattern extends GlobPattern_base {
   static readonly FromString: Schema.Codec<GlobPattern, string>;
 }
 //#endregion
-//#region ../../node_modules/.pnpm/@effected+lockfiles@0.1.8_@effected+jsonc@0.5.0_effect@4.0.0-beta.99__@effected+npm@0.2_d9e647ebf030778b1166690cbf4c6aa9/node_modules/@effected/lockfiles/index.d.ts
+//#region ../../node_modules/.pnpm/@effected+lockfiles@0.1.9_@effected+jsonc@0.5.0_effect@4.0.0-beta.99__@effected+npm@0.3_d470055e7ca4b6a23d413cae592e2835/node_modules/@effected/lockfiles/index.d.ts
 //#region src/BunExtension.d.ts
 declare const BunExtension_base: Schema.Class<BunExtension, Schema.Struct<{
   readonly _tag: Schema.tag<"bun">;
@@ -5082,7 +5211,7 @@ declare class LockfileIntegrity extends LockfileIntegrity_base {
   static compare(lockfile: Lockfile, manifests: ReadonlyArray<WorkspaceManifest>): LockfileIntegrity;
 }
 //#endregion
-//#region ../../node_modules/.pnpm/@effected+package-json@0.4.1_effect@4.0.0-beta.99/node_modules/@effected/package-json/index.d.ts
+//#region ../../node_modules/.pnpm/@effected+package-json@0.4.2_effect@4.0.0-beta.99/node_modules/@effected/package-json/index.d.ts
 //#region src/Dependency.d.ts
 declare const Dependency_base: Schema.Class<Dependency, Schema.Struct<{
   /** The package name. */
@@ -5530,7 +5659,7 @@ declare class Package extends Package_base {
   toJsonString(options?: PackageFormatOptions): string;
 }
 //#endregion
-//#region ../../node_modules/.pnpm/@effected+workspaces@0.5.2_@effected+jsonc@0.5.0_effect@4.0.0-beta.99__effect@4.0.0-beta.99/node_modules/@effected/workspaces/index.d.ts
+//#region ../../node_modules/.pnpm/@effected+workspaces@0.6.0_@effected+jsonc@0.5.0_effect@4.0.0-beta.99__effect@4.0.0-beta.99/node_modules/@effected/workspaces/index.d.ts
 //#region src/WorkspacePackage.d.ts
 declare const PublishConfig_base: Schema.Class<PublishConfig, Schema.Struct<{
   /** Scoped-package visibility. Its presence overrides `private`. */
@@ -6195,22 +6324,56 @@ declare class WorkspaceDiscovery extends WorkspaceDiscovery_base {
 }
 //#endregion
 //#region src/ConfigDependencyHooks.d.ts
+/**
+ * The result of replaying a workspace's `configDependencies` hooks: the catalogs
+ * the hooks yield, and the release-age gate contribution they leave on the
+ * config (pnpm's `minimumReleaseAge` / `minimumReleaseAgeExclude`).
+ *
+ * @remarks
+ * `releaseAge` is a `PartialReleaseAgeGate` — the age, the exclude list,
+ * both, or neither, depending on what the replayed hooks set. It is deliberately
+ * a *partial* contribution: a consumer folds it into an effective gate with
+ * `ReleaseAgeGate.combine` alongside inline `pnpm-workspace.yaml` values. Hooks
+ * that set no release-age keys contribute an empty gate (`{}`).
+ *
+ * @public
+ */
+interface HookInjection {
+  /** The catalogs the replayed hooks yield, as `catalog name → dependency → range`. */
+  readonly catalogs: Readonly<Record<string, Readonly<Record<string, string>>>>;
+  /** The release-age gate contribution the replayed hooks leave on the config. */
+  readonly releaseAge: PartialReleaseAgeGate;
+}
 /**
  * The {@link ConfigDependencyHooks} service shape.
  *
  * @remarks
  * `inject` is given the workspace root, the manifest's `configDependencies`
  * (name → version+integrity), and the inline-catalog seed as a plain
- * `catalog name → dependency name → range` record, and produces the catalogs the
- * replayed hooks yield. The default (no-op) implementation returns the seed
- * unchanged and loads nothing.
+ * `catalog name → dependency name → range` record, and produces a
+ * {@link HookInjection}: the catalogs the replayed hooks yield **and** the
+ * release-age gate contribution they leave on the config. The default (no-op)
+ * implementation returns the seed catalogs unchanged, contributes an empty
+ * release-age gate, and loads nothing.
  *
  * @public
  */
 interface ConfigDependencyHooksShape {
   /**
    * Replay each config dependency's `updateConfig` hook over `seed`, in
-   * declaration order, and return the resulting catalogs.
+   * declaration order, and return both the resulting catalogs and the
+   * release-age gate contribution the hooks leave behind.
+   *
+   * @remarks
+   * The hooks are replayed once over a single threaded config object, exactly
+   * as pnpm does — so catalogs and the release-age keys
+   * (`minimumReleaseAge` / `minimumReleaseAgeExclude`) are both read off that
+   * one final object, and the config-dependency code executes only once. When
+   * two hooks both set a release-age key the **later hook wins** (it rewrites
+   * the threaded value); a hook that returns a malformed value for a key leaves
+   * the prior threaded value in place (tolerant threading, matching the catalog
+   * slice). A hook failing to load or replay fails typed with a
+   * `hooks`-source `CatalogAssemblyError`, never a silent skip.
    *
    * @param root - The workspace root; config dependencies resolve under
    *   `<root>/node_modules/.pnpm-config/<name>`.
@@ -6218,7 +6381,7 @@ interface ConfigDependencyHooksShape {
    *   version+integrity) declared in `pnpm-workspace.yaml`.
    * @param seed - The inline catalogs, as `catalog name → dependency → range`.
    */
-  readonly inject: (root: string, configDependencies: Readonly<Record<string, string>>, seed: Readonly<Record<string, Readonly<Record<string, string>>>>) => Effect.Effect<Readonly<Record<string, Readonly<Record<string, string>>>>, CatalogAssemblyError>;
+  readonly inject: (root: string, configDependencies: Readonly<Record<string, string>>, seed: Readonly<Record<string, Readonly<Record<string, string>>>>) => Effect.Effect<HookInjection, CatalogAssemblyError>;
 }
 declare const ConfigDependencyHooks_base: Context.ServiceClass<ConfigDependencyHooks, "@effected/workspaces/ConfigDependencyHooks", ConfigDependencyHooksShape>;
 /**
@@ -6702,6 +6865,20 @@ interface WorkspaceCatalogsShape {
   readonly set: () => Effect.Effect<CatalogSet, CatalogAssemblyFailure>;
   /** Resolve one `catalog:` specifier; `Option.none()` when it names nothing. */
   readonly resolveSpecifier: (dependency: string, specifier: string) => Effect.Effect<Option.Option<string>, CatalogAssemblyFailure>;
+  /**
+   * The effective pnpm release-age gate for the workspace, combined
+   * strictest-wins from the inline `pnpm-workspace.yaml` keys
+   * (`minimumReleaseAge` / `minimumReleaseAgeExclude`) and the replayed
+   * config-dependency hooks. Assembled from the same single read and hook
+   * replay as `set`, and memoized with it.
+   *
+   * @remarks
+   * Under the default layer (no-op hooks) only inline values contribute; under
+   * {@link WorkspaceCatalogs.layerWithConfigDependencies} the replayed hooks
+   * contribute too. A workspace with no pnpm-workspace.yaml (a bun/npm
+   * workspace) has no release-age keys, so the gate is the inert zero gate.
+   */
+  readonly releaseAgeGate: () => Effect.Effect<ReleaseAgeGate, CatalogAssemblyFailure>;
 }
 /**
  * Options for the {@link WorkspaceCatalogs} layer.

package/changesets-markdownlint.d.ts

@@ -4225,7 +4225,7 @@ declare class UnsatisfiableConstraintError extends UnsatisfiableConstraintError_
   get message(): string;
 }
 //#endregion
-//#region ../../node_modules/.pnpm/@effected+npm@0.2.3_@effected+semver@0.2.0_effect@4.0.0-beta.99__effect@4.0.0-beta.99/node_modules/@effected/npm/index.d.ts
+//#region ../../node_modules/.pnpm/@effected+npm@0.3.0_@effected+semver@0.2.0_effect@4.0.0-beta.99__effect@4.0.0-beta.99/node_modules/@effected/npm/index.d.ts
 //#region src/CatalogAssemblyError.d.ts
 declare const CatalogAssemblyError_base: Schema.Class<CatalogAssemblyError, Schema.TaggedStruct<"CatalogAssemblyError", {
   /**
@@ -4497,6 +4497,135 @@ declare class InvalidIntegrityHashError extends InvalidIntegrityHashError_base {
  */
 type IntegrityHashBrand = string & Brand.Brand<"IntegrityHash">;
 //#endregion
+//#region src/ReleaseAgeGate.d.ts
+/**
+ * A source's partial contribution to a {@link ReleaseAgeGate}: the effective
+ * gate is assembled from more than one place (inline `pnpm-workspace.yaml`
+ * keys, replayed `updateConfig` hooks, `pnpm config get` output), and each
+ * source may set the age, the exclude list, both, or neither. Absent fields
+ * contribute nothing to the combination.
+ *
+ * Deliberately permissive: unlike {@link ReleaseAgeGate} it does not constrain
+ * `ageMinutes` to be non-negative, because the raw values arrive from arbitrary
+ * config sources and {@link ReleaseAgeGate.combine} is the single authority
+ * that clamps them.
+ *
+ * @public
+ */
+declare const PartialReleaseAgeGate: Schema.Struct<{
+  /** Minutes a release must age; absent means this source sets no age. */
+  readonly ageMinutes: Schema.optionalKey<Schema.Number>;
+  /** Exempt package-name patterns; absent means this source adds no exemptions. */
+  readonly exclude: Schema.optionalKey<Schema.$Array<Schema.String>>;
+}>;
+/**
+ * One source's partial contribution to a release-age gate. All fields optional.
+ *
+ * @public
+ */
+type PartialReleaseAgeGate = typeof PartialReleaseAgeGate.Type;
+declare const ReleaseAgeGate_base: Schema.Class<ReleaseAgeGate, Schema.Struct<{
+  /** Minutes a published version must age before it is eligible (non-negative, finite). */
+  readonly ageMinutes: Schema.Number;
+  /** Package-name patterns exempt from the gate (exact names or `*`-globs). */
+  readonly exclude: Schema.$Array<Schema.String>;
+}>, {}>;
+/**
+ * pnpm's publish-time release-age gate: the number of minutes a published
+ * version must age before it is eligible, and the set of package-name patterns
+ * exempt from the gate. Mirrors pnpm's `minimumReleaseAge` /
+ * `minimumReleaseAgeExclude` config so a resolver can drop too-young candidate
+ * versions before picking, avoiding `ERR_PNPM_NO_MATURE_MATCHING_VERSION`.
+ *
+ * `ageMinutes` is constrained non-negative and finite; a `ReleaseAgeGate` with
+ * `ageMinutes <= 0` is an inert gate that filters nothing. Assemble a gate from
+ * multiple config sources with {@link ReleaseAgeGate.combine}, and apply it to
+ * a package's candidate versions with {@link ReleaseAgeGate.filterVersions}.
+ *
+ * @example
+ * ```ts
+ * import { ReleaseAgeGate } from "@effected/npm";
+ *
+ * const gate = ReleaseAgeGate.combine(
+ *   { ageMinutes: 1440 },
+ *   { exclude: ["@my-scope/*"] },
+ * );
+ * // gate.ageMinutes === 1440, gate.exclude === ["@my-scope/*"]
+ *
+ * const eligible = gate.filterVersions(
+ *   ["1.0.0", "1.0.1"],
+ *   { "1.0.0": "2020-01-01T00:00:00Z", "1.0.1": "2026-07-21T00:00:00Z" },
+ *   "prettier",
+ *   Date.now(),
+ * );
+ * ```
+ *
+ * @public
+ */
+declare class ReleaseAgeGate extends ReleaseAgeGate_base {
+  /**
+   * Combine partial contributions from multiple sources into one effective
+   * gate: **strictest age wins** (the maximum of the contributed ages,
+   * clamped to be non-negative) and the exclude sets **union** (deduplicated,
+   * insertion order preserved). A contribution's absent field adds nothing; a
+   * negative or non-finite contributed age is ignored by the clamp. With no
+   * contributions (or only empty ones) the result is the inert zero gate
+   * (`ageMinutes: 0`, `exclude: []`).
+   *
+   * `combine` is total — it never throws on a fractional, negative, or
+   * non-finite contribution — which is why {@link (PartialReleaseAgeGate:variable)}
+   * does not constrain its `ageMinutes` and this method owns the clamp.
+   *
+   * @param contributions - the partial gates to merge, one per source.
+   */
+  static combine(...contributions: readonly PartialReleaseAgeGate[]): ReleaseAgeGate;
+  /**
+   * Whether a package name matches any of `patterns`, using pnpm's
+   * `@pnpm/matcher` semantics: an exact-name match, or a `*`-glob where `*`
+   * matches any run of characters **including `/`** — so a bare `*` matches a
+   * scoped name like `@scope/pkg`, and `@scope/*` matches every package in a
+   * scope.
+   *
+   * @remarks
+   * This is deliberately **NOT** `@effected/glob`'s minimatch dialect, in
+   * which `*` refuses to cross `/` (there `*` matches `pkg` but not
+   * `@scope/pkg`, and you would need `**`). pnpm treats the package name as a
+   * flat string, so this matcher does too. Do not "fix" this to route through
+   * `@effected/glob`: it would silently change which packages a gate exempts
+   * and diverge from pnpm's own behavior.
+   *
+   * @param name - the package name to test.
+   * @param patterns - the exclude patterns (exact names or `*`-globs).
+   */
+  static matchesExclude(name: string, patterns: readonly string[]): boolean;
+  /**
+   * Whether this gate exempts the given package name from the release-age
+   * check — `ReleaseAgeGate.matchesExclude(name, this.exclude)`.
+   *
+   * @param name - the package name to test.
+   */
+  isExcluded(name: string): boolean;
+  /**
+   * Filter a package's candidate versions to those old enough to pass the
+   * gate, given each version's publish timestamp and a caller-supplied `now`.
+   *
+   * A version is kept when it has a parseable publish timestamp at or before
+   * the cutoff (`now - ageMinutes * 60000`). A version with a **missing or
+   * unparseable** timestamp in `times` is **dropped** — matching pnpm's strict
+   * posture: a version whose age cannot be established is treated as too young.
+   * The clock is the caller's; this method reads no wall clock.
+   *
+   * Returns all versions unchanged (a no-op) when the gate is inert
+   * (`ageMinutes <= 0`) or the package name is excluded.
+   *
+   * @param versions - the candidate version strings.
+   * @param times - a map from version string to its ISO-8601 publish date.
+   * @param name - the package name (checked against the gate's `exclude` list).
+   * @param now - the current time in epoch milliseconds (the caller's clock).
+   */
+  filterVersions(versions: readonly string[], times: Readonly<Record<string, string>>, name: string, now: number): readonly string[];
+}
+//#endregion
 //#region ../../node_modules/.pnpm/@effected+glob@0.2.0_effect@4.0.0-beta.99/node_modules/@effected/glob/index.d.ts
 //#region src/GlobPattern.d.ts
 declare const GlobPatternError_base: Schema.Class<GlobPatternError, Schema.TaggedStruct<"GlobPatternError", {
@@ -4662,7 +4791,7 @@ declare class GlobPattern extends GlobPattern_base {
   static readonly FromString: Schema.Codec<GlobPattern, string>;
 }
 //#endregion
-//#region ../../node_modules/.pnpm/@effected+lockfiles@0.1.8_@effected+jsonc@0.5.0_effect@4.0.0-beta.99__@effected+npm@0.2_d9e647ebf030778b1166690cbf4c6aa9/node_modules/@effected/lockfiles/index.d.ts
+//#region ../../node_modules/.pnpm/@effected+lockfiles@0.1.9_@effected+jsonc@0.5.0_effect@4.0.0-beta.99__@effected+npm@0.3_d470055e7ca4b6a23d413cae592e2835/node_modules/@effected/lockfiles/index.d.ts
 //#region src/BunExtension.d.ts
 declare const BunExtension_base: Schema.Class<BunExtension, Schema.Struct<{
   readonly _tag: Schema.tag<"bun">;
@@ -5082,7 +5211,7 @@ declare class LockfileIntegrity extends LockfileIntegrity_base {
   static compare(lockfile: Lockfile, manifests: ReadonlyArray<WorkspaceManifest>): LockfileIntegrity;
 }
 //#endregion
-//#region ../../node_modules/.pnpm/@effected+package-json@0.4.1_effect@4.0.0-beta.99/node_modules/@effected/package-json/index.d.ts
+//#region ../../node_modules/.pnpm/@effected+package-json@0.4.2_effect@4.0.0-beta.99/node_modules/@effected/package-json/index.d.ts
 //#region src/Dependency.d.ts
 declare const Dependency_base: Schema.Class<Dependency, Schema.Struct<{
   /** The package name. */
@@ -5530,7 +5659,7 @@ declare class Package extends Package_base {
   toJsonString(options?: PackageFormatOptions): string;
 }
 //#endregion
-//#region ../../node_modules/.pnpm/@effected+workspaces@0.5.2_@effected+jsonc@0.5.0_effect@4.0.0-beta.99__effect@4.0.0-beta.99/node_modules/@effected/workspaces/index.d.ts
+//#region ../../node_modules/.pnpm/@effected+workspaces@0.6.0_@effected+jsonc@0.5.0_effect@4.0.0-beta.99__effect@4.0.0-beta.99/node_modules/@effected/workspaces/index.d.ts
 //#region src/WorkspacePackage.d.ts
 declare const PublishConfig_base: Schema.Class<PublishConfig, Schema.Struct<{
   /** Scoped-package visibility. Its presence overrides `private`. */
@@ -6195,22 +6324,56 @@ declare class WorkspaceDiscovery extends WorkspaceDiscovery_base {
 }
 //#endregion
 //#region src/ConfigDependencyHooks.d.ts
+/**
+ * The result of replaying a workspace's `configDependencies` hooks: the catalogs
+ * the hooks yield, and the release-age gate contribution they leave on the
+ * config (pnpm's `minimumReleaseAge` / `minimumReleaseAgeExclude`).
+ *
+ * @remarks
+ * `releaseAge` is a `PartialReleaseAgeGate` — the age, the exclude list,
+ * both, or neither, depending on what the replayed hooks set. It is deliberately
+ * a *partial* contribution: a consumer folds it into an effective gate with
+ * `ReleaseAgeGate.combine` alongside inline `pnpm-workspace.yaml` values. Hooks
+ * that set no release-age keys contribute an empty gate (`{}`).
+ *
+ * @public
+ */
+interface HookInjection {
+  /** The catalogs the replayed hooks yield, as `catalog name → dependency → range`. */
+  readonly catalogs: Readonly<Record<string, Readonly<Record<string, string>>>>;
+  /** The release-age gate contribution the replayed hooks leave on the config. */
+  readonly releaseAge: PartialReleaseAgeGate;
+}
 /**
  * The {@link ConfigDependencyHooks} service shape.
  *
  * @remarks
  * `inject` is given the workspace root, the manifest's `configDependencies`
  * (name → version+integrity), and the inline-catalog seed as a plain
- * `catalog name → dependency name → range` record, and produces the catalogs the
- * replayed hooks yield. The default (no-op) implementation returns the seed
- * unchanged and loads nothing.
+ * `catalog name → dependency name → range` record, and produces a
+ * {@link HookInjection}: the catalogs the replayed hooks yield **and** the
+ * release-age gate contribution they leave on the config. The default (no-op)
+ * implementation returns the seed catalogs unchanged, contributes an empty
+ * release-age gate, and loads nothing.
  *
  * @public
  */
 interface ConfigDependencyHooksShape {
   /**
    * Replay each config dependency's `updateConfig` hook over `seed`, in
-   * declaration order, and return the resulting catalogs.
+   * declaration order, and return both the resulting catalogs and the
+   * release-age gate contribution the hooks leave behind.
+   *
+   * @remarks
+   * The hooks are replayed once over a single threaded config object, exactly
+   * as pnpm does — so catalogs and the release-age keys
+   * (`minimumReleaseAge` / `minimumReleaseAgeExclude`) are both read off that
+   * one final object, and the config-dependency code executes only once. When
+   * two hooks both set a release-age key the **later hook wins** (it rewrites
+   * the threaded value); a hook that returns a malformed value for a key leaves
+   * the prior threaded value in place (tolerant threading, matching the catalog
+   * slice). A hook failing to load or replay fails typed with a
+   * `hooks`-source `CatalogAssemblyError`, never a silent skip.
    *
    * @param root - The workspace root; config dependencies resolve under
    *   `<root>/node_modules/.pnpm-config/<name>`.
@@ -6218,7 +6381,7 @@ interface ConfigDependencyHooksShape {
    *   version+integrity) declared in `pnpm-workspace.yaml`.
    * @param seed - The inline catalogs, as `catalog name → dependency → range`.
    */
-  readonly inject: (root: string, configDependencies: Readonly<Record<string, string>>, seed: Readonly<Record<string, Readonly<Record<string, string>>>>) => Effect.Effect<Readonly<Record<string, Readonly<Record<string, string>>>>, CatalogAssemblyError>;
+  readonly inject: (root: string, configDependencies: Readonly<Record<string, string>>, seed: Readonly<Record<string, Readonly<Record<string, string>>>>) => Effect.Effect<HookInjection, CatalogAssemblyError>;
 }
 declare const ConfigDependencyHooks_base: Context.ServiceClass<ConfigDependencyHooks, "@effected/workspaces/ConfigDependencyHooks", ConfigDependencyHooksShape>;
 /**
@@ -6702,6 +6865,20 @@ interface WorkspaceCatalogsShape {
   readonly set: () => Effect.Effect<CatalogSet, CatalogAssemblyFailure>;
   /** Resolve one `catalog:` specifier; `Option.none()` when it names nothing. */
   readonly resolveSpecifier: (dependency: string, specifier: string) => Effect.Effect<Option.Option<string>, CatalogAssemblyFailure>;
+  /**
+   * The effective pnpm release-age gate for the workspace, combined
+   * strictest-wins from the inline `pnpm-workspace.yaml` keys
+   * (`minimumReleaseAge` / `minimumReleaseAgeExclude`) and the replayed
+   * config-dependency hooks. Assembled from the same single read and hook
+   * replay as `set`, and memoized with it.
+   *
+   * @remarks
+   * Under the default layer (no-op hooks) only inline values contribute; under
+   * {@link WorkspaceCatalogs.layerWithConfigDependencies} the replayed hooks
+   * contribute too. A workspace with no pnpm-workspace.yaml (a bun/npm
+   * workspace) has no release-age keys, so the gate is the inert zero gate.
+   */
+  readonly releaseAgeGate: () => Effect.Effect<ReleaseAgeGate, CatalogAssemblyFailure>;
 }
 /**
  * Options for the {@link WorkspaceCatalogs} layer.