@stll/oxlint-config 1.3.0 → 1.4.0

package/dist/consumer-node-support.mjs

@@ -0,0 +1,381 @@
+import { m as workspaceContains } from "./toolchain-inputs.mjs";
+import path from "node:path";
+import { satisfies, valid, validRange } from "semver";
+import { isDeepStrictEqual } from "node:util";
+import { parseDocument } from "yaml";
+import picomatch from "picomatch";
+//#region src/consumer-catalogs.ts
+const record = (value) => typeof value === "object" && value !== null && !Array.isArray(value);
+const catalogMapping = (value, field) => {
+	if (!record(value)) throw new Error(`${field} must be a mapping`);
+	const entries = /* @__PURE__ */ new Map();
+	for (const [name, specifier] of Object.entries(value)) {
+		if (name === "" || typeof specifier !== "string" || specifier.trim() === "") throw new Error(`${field} must contain nonempty package specifiers`);
+		entries.set(name, specifier);
+	}
+	return Object.fromEntries(entries);
+};
+const catalogState = (source, file) => {
+	const result = {};
+	if (Object.hasOwn(source, "catalog")) result.catalog = catalogMapping(source["catalog"], `${file}: catalog`);
+	if (Object.hasOwn(source, "catalogs")) {
+		if (!record(source["catalogs"])) throw new Error(`${file}: catalogs must be a mapping`);
+		const named = /* @__PURE__ */ new Map();
+		for (const [name, entries] of Object.entries(source["catalogs"])) {
+			if (name === "") throw new Error(`${file}: catalog names must be nonempty`);
+			named.set(name, catalogMapping(entries, `${file}: catalogs.${name}`));
+		}
+		result.catalogs = Object.fromEntries(named);
+	}
+	return result;
+};
+const bunCatalogState = (manifest) => {
+	const sources = [manifest];
+	if (record(manifest["workspaces"])) sources.push(manifest["workspaces"]);
+	const merged = {};
+	for (const source of sources) {
+		const state = catalogState(source, "package.json");
+		for (const [field, value] of Object.entries(state)) {
+			if (Object.hasOwn(merged, field) && !isDeepStrictEqual(merged[field], value)) throw new Error(`conflicting Bun ${field} definitions in package.json`);
+			merged[field] = value;
+		}
+	}
+	return catalogState(merged, "package.json");
+};
+const pnpmWorkspaceState = (source, file) => {
+	const document = parseDocument(source, { uniqueKeys: true });
+	if (document.errors.length !== 0) throw new Error(`invalid pnpm workspace: ${file}`);
+	const workspace = document.toJS({ maxAliasCount: 100 });
+	if (!record(workspace)) throw new Error(`invalid pnpm workspace: ${file}`);
+	const packages = workspace["packages"];
+	if (packages !== void 0 && (!Array.isArray(packages) || !packages.every((entry) => typeof entry === "string"))) throw new Error(`invalid pnpm workspace packages: ${file}`);
+	return {
+		packages: packages ?? [],
+		...catalogState(workspace, file)
+	};
+};
+const resolveConsumerCatalog = ({ directory: inputDirectory, name, specifier, files }) => {
+	let directory = inputDirectory;
+	while (true) {
+		const yamlFile = path.posix.join(directory, "pnpm-workspace.yaml");
+		const yaml = files[yamlFile];
+		const manifestFile = path.posix.join(directory, "package.json");
+		const json = files[manifestFile];
+		let state;
+		let patterns = [];
+		if (yaml !== void 0) {
+			const workspace = pnpmWorkspaceState(yaml, yamlFile);
+			state = catalogState(workspace, yamlFile);
+			patterns = workspace.packages;
+		} else if (json !== void 0) {
+			const manifest = JSON.parse(json);
+			if (!record(manifest)) throw new Error(`invalid catalog owner: ${manifestFile}`);
+			const declaration = manifest["workspaces"];
+			if (directory === "." || declaration !== void 0) {
+				state = bunCatalogState(manifest);
+				const packages = record(declaration) ? declaration["packages"] : declaration;
+				if (packages !== void 0 && (!Array.isArray(packages) || !packages.every((entry) => typeof entry === "string"))) throw new Error(`invalid catalog owner packages: ${manifestFile}`);
+				patterns = packages ?? [];
+			}
+		}
+		if (state !== void 0) {
+			if (!workspaceContains({
+				directory,
+				file: path.posix.join(inputDirectory, "package.json"),
+				patterns,
+				rootMembership: "implicit"
+			})) throw new Error(`catalog dependency ${name} is outside nearest workspace owner ${directory}`);
+			const catalogName = specifier.slice(8) || "default";
+			const named = state.catalogs;
+			const namedEntries = named !== void 0 && Object.hasOwn(named, catalogName) ? named[catalogName] : void 0;
+			const entries = catalogName === "default" ? state.catalog ?? namedEntries : namedEntries;
+			const resolved = entries !== void 0 && Object.hasOwn(entries, name) ? entries[name] : void 0;
+			if (resolved === void 0) throw new Error(`unresolved catalog dependency ${name} in workspace ${directory}`);
+			return resolved;
+		}
+		if (directory === ".") break;
+		directory = path.posix.dirname(directory);
+	}
+	throw new Error(`unresolved catalog dependency ${name}: no tracked workspace owner`);
+};
+//#endregion
+//#region src/consumer-compat-config.ts
+const consumerRecord = (value) => typeof value === "object" && value !== null && !Array.isArray(value);
+const consumerRelativePath = (value, field) => {
+	if (typeof value !== "string" || value === "" || value.includes("\\") || value.includes("\0") || path.posix.isAbsolute(value) || value.split("/").some((part) => part === ".." || part === "")) throw new Error(`${field} must be a repository-relative path`);
+	return path.posix.normalize(value);
+};
+const command = (value, field) => {
+	if (!Array.isArray(value) || value.length === 0 || !value.every((part) => typeof part === "string" && part !== "" && !part.includes("\0"))) throw new Error(`${field} must be a nonempty command argument array`);
+	return value.map((part) => part);
+};
+const parseConsumerFixtures = (input) => {
+	if (!consumerRecord(input) || Object.keys(input).some((key) => key !== "packages") || !Array.isArray(input["packages"])) throw new Error("consumer fixtures must contain only a packages array");
+	const seen = /* @__PURE__ */ new Set();
+	return input["packages"].map((entry) => {
+		if (!consumerRecord(entry) || Object.keys(entry).some((key) => ![
+			"package",
+			"fixture",
+			"kind",
+			"build",
+			"smoke"
+		].includes(key))) throw new Error("invalid consumer fixture declaration");
+		const packagePath = consumerRelativePath(entry["package"], "package");
+		const fixture = consumerRelativePath(entry["fixture"], "fixture");
+		const kind = entry["kind"];
+		if (kind !== "node" && kind !== "react") throw new Error("fixture kind must be node or react");
+		if (seen.has(packagePath)) throw new Error(`duplicate consumer fixture: ${packagePath}`);
+		seen.add(packagePath);
+		return {
+			package: packagePath,
+			fixture,
+			kind,
+			build: command(entry["build"], "build"),
+			smoke: command(entry["smoke"], "smoke")
+		};
+	});
+};
+const assertConsumerFixtureSelection = ({ selected, fixtures }) => {
+	const directories = selected.map((entry) => consumerRelativePath(entry, "selected package"));
+	const declared = new Set(fixtures.map((entry) => entry.package));
+	if (new Set(directories).size !== directories.length) throw new Error("duplicate selected consumer package");
+	if (directories.length !== declared.size || directories.some((entry) => !declared.has(entry))) throw new Error("selected consumer packages must exactly match declared fixtures");
+};
+const consumerBundledDependencyFields = ["bundleDependencies", "bundledDependencies"];
+const consumerPackageNameValid = (value) => {
+	if (typeof value !== "string" || value.length === 0 || value.length > 214) return false;
+	const components = value.startsWith("@") ? value.slice(1).split("/") : [value];
+	if (value.startsWith("@") && components.length !== 2) return false;
+	if (!value.startsWith("@") && !/^[a-z0-9]/.test(value)) return false;
+	if (components.some((component) => !/^[a-z0-9._-]+$/.test(component) || component === "." || component === "..")) return false;
+	const packageName = components.at(-1);
+	return packageName !== "node_modules" && packageName !== "favicon.ico";
+};
+const assertConsumerPublishableManifest = ({ manifest, directory }) => {
+	const version = manifest["version"];
+	if (manifest["private"] !== true && (typeof version !== "string" || valid(version) === null)) throw new Error(`public consumer package requires a semver-valid version: ${directory}`);
+	if (manifest["private"] !== true && !consumerPackageNameValid(manifest["name"])) throw new Error(`public consumer package requires a valid npm name: ${directory}`);
+	for (const field of consumerBundledDependencyFields) if (Object.hasOwn(manifest, field)) throw new Error(`consumer packaging does not support ${field}: ${directory}`);
+};
+const assertConsumerFixtureKind = ({ fixture, pkg }) => {
+	const peers = pkg.manifest["peerDependencies"];
+	if (peers !== void 0 && !consumerRecord(peers)) throw new Error(`invalid published peerDependencies: ${pkg.name}`);
+	const react = consumerRecord(peers) ? peers["react"] : void 0;
+	if (react !== void 0 && (typeof react !== "string" || react.trim() === "" || validRange(react) === null)) throw new Error(`invalid published React peer: ${pkg.name}`);
+	const kind = react === void 0 ? "node" : "react";
+	if (fixture.kind !== kind) throw new Error(`${pkg.name} requires fixture kind ${kind} from its published peers`);
+};
+const consumerStagingPaths = (packages) => {
+	const paths = /* @__PURE__ */ new Map();
+	for (const [name, pkg] of packages) paths.set(name, consumerRelativePath(pkg.directory, "workspace package directory"));
+	return paths;
+};
+const consumerPackRootManifest = (packages, files) => {
+	const source = files["package.json"];
+	if (source !== void 0) {
+		const manifest = JSON.parse(source);
+		if (!consumerRecord(manifest)) throw new Error("root package manifest must be an object");
+		return manifest;
+	}
+	return [...packages.values()].find((pkg) => pkg.directory === ".")?.manifest ?? { private: true };
+};
+const consumerDependencyConfigFiles = [
+	".npmrc",
+	".pnpmfile.cjs",
+	"pnpm-workspace.yaml",
+	".yarnrc",
+	".yarnrc.yml"
+];
+const assertConsumerFixtureManifest = (manifest) => {
+	for (const field of [
+		"pnpm",
+		"overrides",
+		"resolutions",
+		"workspaces",
+		"packageManager",
+		"allowScripts"
+	]) if (manifest[field] !== void 0) throw new Error(`consumer fixture must not supply dependency-manager setting: ${field}`);
+};
+const bindConsumerManifest = ({ manifest, artifacts, typescript, react, manager }) => {
+	assertConsumerFixtureManifest(manifest);
+	const artifactBindings = Object.fromEntries([...artifacts].map(([name, file]) => [name, `file:${file}`]));
+	const owned = {
+		...artifactBindings,
+		typescript,
+		...react
+	};
+	const result = { ...manifest };
+	for (const field of [
+		"dependencies",
+		"devDependencies",
+		"optionalDependencies",
+		"peerDependencies"
+	]) {
+		const entries = manifest[field];
+		if (entries === void 0) continue;
+		if (!consumerRecord(entries)) throw new Error(`fixture ${field} must be an object`);
+		for (const specifier of Object.values(entries)) if (typeof specifier !== "string" || /^(?:workspace:|file:|link:|\.\.?\/|\/)/.test(specifier)) throw new Error("fixture dependencies must resolve from registry or generated artifact bindings");
+		result[field] = Object.fromEntries(Object.entries(entries).filter(([name]) => !Object.hasOwn(owned, name)));
+	}
+	result["dependencies"] = {
+		...consumerRecord(result["dependencies"]) ? result["dependencies"] : {},
+		...artifactBindings,
+		...react
+	};
+	result["devDependencies"] = {
+		...consumerRecord(result["devDependencies"]) ? result["devDependencies"] : {},
+		typescript
+	};
+	if (manager === "npm") {
+		result["overrides"] = owned;
+		return {
+			manager,
+			manifest: result
+		};
+	}
+	return {
+		manager,
+		manifest: result,
+		workspace: {
+			packages: ["."],
+			overrides: owned
+		}
+	};
+};
+const workspacePatterns = (manifest) => {
+	const workspace = manifest["workspaces"];
+	const patterns = consumerRecord(workspace) ? workspace["packages"] : workspace;
+	if (patterns === void 0) return [];
+	if (!Array.isArray(patterns) || !patterns.every((entry) => typeof entry === "string")) throw new Error("package workspaces must be string patterns");
+	return patterns.map((entry) => entry);
+};
+const discoverConsumerManifests = (files) => {
+	const manifests = /* @__PURE__ */ new Map();
+	const manifestSources = /* @__PURE__ */ new Map();
+	const pnpmSources = /* @__PURE__ */ new Map();
+	const pnpmWorkspaces = /* @__PURE__ */ new Map();
+	for (const [file, content] of Object.entries(files)) if (path.posix.basename(file) === "pnpm-workspace.yaml") pnpmSources.set(path.posix.dirname(file), content);
+	else if (path.posix.basename(file) === "package.json") manifestSources.set(path.posix.dirname(file), content);
+	const assertWorkspaceOwner = (directory) => {
+		if (pnpmSources.has(directory) && !manifestSources.has(directory)) throw new Error(`consumer pnpm workspace requires an adjacent tracked package.json: ${path.posix.join(directory, "pnpm-workspace.yaml")}`);
+	};
+	const candidates = /* @__PURE__ */ new Set([...manifestSources.keys(), ...pnpmSources.keys()]);
+	const manifestAt = (directory) => {
+		const cached = manifests.get(directory);
+		if (cached) return cached;
+		const source = manifestSources.get(directory);
+		if (source === void 0) return void 0;
+		const json = JSON.parse(source);
+		if (!consumerRecord(json)) throw new Error(`invalid package manifest: ${directory}/package.json`);
+		manifests.set(directory, json);
+		return json;
+	};
+	const patternsAt = (directory, manifest) => {
+		const source = pnpmSources.get(directory);
+		if (source !== void 0 && !pnpmWorkspaces.has(directory)) {
+			const file = `${directory}/pnpm-workspace.yaml`;
+			const document = parseDocument(source, { uniqueKeys: true });
+			if (document.errors.length) throw new Error(`invalid pnpm workspace: ${file}`);
+			const json = document.toJS({ maxAliasCount: 100 });
+			if (!consumerRecord(json)) throw new Error(`invalid pnpm workspace: ${file}`);
+			const patterns = json["packages"] ?? [];
+			if (!Array.isArray(patterns) || !patterns.every((entry) => typeof entry === "string")) throw new Error(`invalid pnpm workspace packages: ${file}`);
+			pnpmWorkspaces.set(directory, patterns.map((entry) => entry));
+		}
+		return pnpmWorkspaces.get(directory) ?? workspacePatterns(manifest ?? {});
+	};
+	const roots = /* @__PURE__ */ new Set(["."]);
+	for (;;) {
+		const before = roots.size;
+		for (const directory of roots) {
+			assertWorkspaceOwner(directory);
+			const patterns = patternsAt(directory, manifestAt(directory));
+			for (const candidate of candidates) {
+				const relative = path.posix.relative(directory, candidate);
+				if (relative === "" || relative.startsWith("../")) continue;
+				const positives = patterns.filter((pattern) => !pattern.startsWith("!"));
+				const negatives = patterns.filter((pattern) => pattern.startsWith("!")).map((pattern) => pattern.slice(1));
+				if (positives.some((pattern) => picomatch.isMatch(relative, pattern)) && !negatives.some((pattern) => picomatch.isMatch(relative, pattern))) roots.add(candidate);
+			}
+		}
+		if (before === roots.size) break;
+	}
+	const discovered = /* @__PURE__ */ new Map();
+	for (const directory of roots) {
+		for (let owner = directory;; owner = path.posix.dirname(owner)) {
+			assertWorkspaceOwner(owner);
+			if (owner === ".") break;
+		}
+		const manifest = manifestAt(directory);
+		if (manifest) discovered.set(directory, manifest);
+	}
+	return discovered;
+};
+const discoverConsumerPackages = (files) => {
+	const packages = /* @__PURE__ */ new Map();
+	for (const [directory, manifest] of discoverConsumerManifests(files)) {
+		const name = manifest["name"];
+		if (typeof name !== "string" || name === "") continue;
+		if (packages.has(name)) throw new Error(`duplicate workspace package: ${name}`);
+		packages.set(name, {
+			directory,
+			name,
+			manifest
+		});
+	}
+	return packages;
+};
+const consumerPublishedDependencyFields = [
+	"dependencies",
+	"optionalDependencies",
+	"peerDependencies"
+];
+const consumerPackageClosure = ({ selected, packages, files }) => {
+	const closure = /* @__PURE__ */ new Map();
+	const visit = (pkg) => {
+		if (closure.has(pkg.name)) return;
+		assertConsumerPublishableManifest(pkg);
+		closure.set(pkg.name, pkg);
+		for (const field of consumerPublishedDependencyFields) {
+			const dependencies = pkg.manifest[field];
+			if (!consumerRecord(dependencies)) continue;
+			for (const [name, specifier] of Object.entries(dependencies)) {
+				const local = packages.get(name);
+				if (typeof specifier !== "string") throw new Error(`invalid package dependency: ${pkg.name} -> ${name}`);
+				if (specifier.startsWith("catalog:") && local !== void 0) {
+					const resolved = resolveConsumerCatalog({
+						directory: pkg.directory,
+						name,
+						specifier,
+						files
+					});
+					const version = local.manifest["version"];
+					if (resolved.startsWith("workspace:") || typeof version === "string" && validRange(resolved) !== null && satisfies(version, resolved)) throw new Error(`catalog dependency ${name} resolves to workspace package ${local.name}; use workspace:`);
+				}
+				if (/^workspace:(?:@[^/@]+\/)?[^/@]+@/.test(specifier)) throw new Error(`workspace alias specifiers are not supported by consumer-compat: ${name} -> ${specifier}; use the package name as the dependency key`);
+				if (/^(?:file:|link:)/.test(specifier)) throw new Error(`published local dependencies must use workspace protocol: ${pkg.name} -> ${name}`);
+				if (local && (specifier.startsWith("workspace:") || typeof local.manifest["version"] === "string" && validRange(specifier) && satisfies(local.manifest["version"], specifier))) {
+					if (local.manifest["private"] === true) throw new Error(`published package depends on private workspace package: ${pkg.name} -> ${name}`);
+					visit(local);
+				} else if (typeof specifier === "string" && specifier.startsWith("workspace:")) throw new Error(`unresolved workspace dependency: ${pkg.name} -> ${name}`);
+			}
+		}
+	};
+	visit(selected);
+	return closure;
+};
+//#endregion
+//#region src/consumer-node-support.ts
+const consumerNodeSupportMatches = ({ range, node }) => range === void 0 || typeof range === "string" && range.trim() !== "" && validRange(range) !== null && satisfies(node, range);
+const assertConsumerNodeSupport = ({ manifest, node, label }) => {
+	const engines = manifest["engines"];
+	const record = (value) => typeof value === "object" && value !== null && !Array.isArray(value);
+	if (engines !== void 0 && !record(engines) || !consumerNodeSupportMatches({
+		range: record(engines) ? engines["node"] : void 0,
+		node
+	})) throw new Error(`${label} engines.node must support consumer Node ${node}`);
+};
+//#endregion
+export { bunCatalogState as _, assertConsumerFixtureSelection as a, consumerDependencyConfigFiles as c, consumerRecord as d, consumerRelativePath as f, parseConsumerFixtures as g, discoverConsumerPackages as h, assertConsumerFixtureManifest as i, consumerPackRootManifest as l, discoverConsumerManifests as m, consumerNodeSupportMatches as n, assertConsumerPublishableManifest as o, consumerStagingPaths as p, assertConsumerFixtureKind as r, bindConsumerManifest as s, assertConsumerNodeSupport as t, consumerPackageClosure as u, catalogState as v, pnpmWorkspaceState as y };
+
+//# sourceMappingURL=consumer-node-support.mjs.map

package/dist/consumer-node-support.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"consumer-node-support.mjs","names":[],"sources":["../src/consumer-catalogs.ts","../src/consumer-compat-config.ts","../src/consumer-node-support.ts"],"sourcesContent":["import path from \"node:path\";\nimport { isDeepStrictEqual } from \"node:util\";\nimport { parseDocument } from \"yaml\";\n\nimport { workspaceContains } from \"./toolchain-workspaces\";\n\nconst record = (value: unknown): value is Record<string, unknown> =>\n  typeof value === \"object\" && value !== null && !Array.isArray(value);\n\nconst catalogMapping = (value: unknown, field: string) => {\n  if (!record(value)) throw new Error(`${field} must be a mapping`);\n  const entries = new Map<string, string>();\n  for (const [name, specifier] of Object.entries(value)) {\n    if (name === \"\" || typeof specifier !== \"string\" || specifier.trim() === \"\")\n      throw new Error(`${field} must contain nonempty package specifiers`);\n    entries.set(name, specifier);\n  }\n  return Object.fromEntries(entries);\n};\n\nexport const catalogState = (source: Record<string, unknown>, file: string) => {\n  const result: {\n    catalog?: Record<string, string>;\n    catalogs?: Record<string, Record<string, string>>;\n  } = {};\n  if (Object.hasOwn(source, \"catalog\"))\n    result.catalog = catalogMapping(source[\"catalog\"], `${file}: catalog`);\n  if (Object.hasOwn(source, \"catalogs\")) {\n    if (!record(source[\"catalogs\"]))\n      throw new Error(`${file}: catalogs must be a mapping`);\n    const named = new Map<string, Record<string, string>>();\n    for (const [name, entries] of Object.entries(source[\"catalogs\"])) {\n      if (name === \"\")\n        throw new Error(`${file}: catalog names must be nonempty`);\n      named.set(name, catalogMapping(entries, `${file}: catalogs.${name}`));\n    }\n    result.catalogs = Object.fromEntries(named);\n  }\n  return result;\n};\n\nexport const bunCatalogState = (manifest: Record<string, unknown>) => {\n  const sources = [manifest];\n  if (record(manifest[\"workspaces\"])) sources.push(manifest[\"workspaces\"]);\n  const merged: Record<string, unknown> = {};\n  for (const source of sources) {\n    const state = catalogState(source, \"package.json\");\n    for (const [field, value] of Object.entries(state)) {\n      if (\n        Object.hasOwn(merged, field) &&\n        !isDeepStrictEqual(merged[field], value)\n      )\n        throw new Error(`conflicting Bun ${field} definitions in package.json`);\n      merged[field] = value;\n    }\n  }\n  return catalogState(merged, \"package.json\");\n};\n\nexport const pnpmWorkspaceState = (source: string, file: string) => {\n  const document = parseDocument(source, { uniqueKeys: true });\n  if (document.errors.length !== 0)\n    throw new Error(`invalid pnpm workspace: ${file}`);\n  const workspace: unknown = document.toJS({ maxAliasCount: 100 });\n  if (!record(workspace)) throw new Error(`invalid pnpm workspace: ${file}`);\n  const packages = workspace[\"packages\"];\n  if (\n    packages !== undefined &&\n    (!Array.isArray(packages) ||\n      !packages.every((entry: unknown) => typeof entry === \"string\"))\n  )\n    throw new Error(`invalid pnpm workspace packages: ${file}`);\n  return { packages: packages ?? [], ...catalogState(workspace, file) };\n};\n\ntype ResolveConsumerCatalogOptions = {\n  directory: string;\n  name: string;\n  specifier: string;\n  files: Record<string, string>;\n};\nexport const resolveConsumerCatalog = ({\n  directory: inputDirectory,\n  name,\n  specifier,\n  files,\n}: ResolveConsumerCatalogOptions) => {\n  let directory = inputDirectory;\n  while (true) {\n    const yamlFile = path.posix.join(directory, \"pnpm-workspace.yaml\");\n    const yaml = files[yamlFile];\n    const manifestFile = path.posix.join(directory, \"package.json\");\n    const json = files[manifestFile];\n    let state: ReturnType<typeof catalogState> | undefined;\n    let patterns: string[] = [];\n    if (yaml !== undefined) {\n      const workspace = pnpmWorkspaceState(yaml, yamlFile);\n      state = catalogState(workspace, yamlFile);\n      patterns = workspace.packages;\n    } else if (json !== undefined) {\n      const manifest: unknown = JSON.parse(json);\n      if (!record(manifest))\n        throw new Error(`invalid catalog owner: ${manifestFile}`);\n      const declaration = manifest[\"workspaces\"];\n      if (directory === \".\" || declaration !== undefined) {\n        state = bunCatalogState(manifest);\n        const packages = record(declaration)\n          ? declaration[\"packages\"]\n          : declaration;\n        if (\n          packages !== undefined &&\n          (!Array.isArray(packages) ||\n            !packages.every((entry: unknown) => typeof entry === \"string\"))\n        )\n          throw new Error(`invalid catalog owner packages: ${manifestFile}`);\n        patterns = packages ?? [];\n      }\n    }\n    if (state !== undefined) {\n      if (\n        !workspaceContains({\n          directory,\n          file: path.posix.join(inputDirectory, \"package.json\"),\n          patterns,\n          rootMembership: \"implicit\",\n        })\n      )\n        throw new Error(\n          `catalog dependency ${name} is outside nearest workspace owner ${directory}`,\n        );\n      const catalogName = specifier.slice(\"catalog:\".length) || \"default\";\n      const named = state.catalogs;\n      const namedEntries =\n        named !== undefined && Object.hasOwn(named, catalogName)\n          ? named[catalogName]\n          : undefined;\n      const entries =\n        catalogName === \"default\"\n          ? (state.catalog ?? namedEntries)\n          : namedEntries;\n      const resolved =\n        entries !== undefined && Object.hasOwn(entries, name)\n          ? entries[name]\n          : undefined;\n      if (resolved === undefined)\n        throw new Error(\n          `unresolved catalog dependency ${name} in workspace ${directory}`,\n        );\n      return resolved;\n    }\n    if (directory === \".\") break;\n    directory = path.posix.dirname(directory);\n  }\n  throw new Error(\n    `unresolved catalog dependency ${name}: no tracked workspace owner`,\n  );\n};\n","import path from \"node:path\";\nimport picomatch from \"picomatch\";\nimport { compare, satisfies, valid, validRange } from \"semver\";\nimport { parseDocument } from \"yaml\";\n\nimport { resolveConsumerCatalog } from \"./consumer-catalogs\";\n\nexport const consumerFixtureKinds = [\"node\", \"react\"] as const;\nexport type ConsumerFixture = {\n  package: string;\n  fixture: string;\n  kind: (typeof consumerFixtureKinds)[number];\n  build: string[];\n  smoke: string[];\n};\n\nexport const consumerRecord = (\n  value: unknown,\n): value is Record<string, unknown> =>\n  typeof value === \"object\" && value !== null && !Array.isArray(value);\n\nexport const consumerRelativePath = (value: unknown, field: string) => {\n  if (\n    typeof value !== \"string\" ||\n    value === \"\" ||\n    value.includes(\"\\\\\") ||\n    value.includes(\"\\0\") ||\n    path.posix.isAbsolute(value) ||\n    value.split(\"/\").some((part) => part === \"..\" || part === \"\")\n  )\n    throw new Error(`${field} must be a repository-relative path`);\n  return path.posix.normalize(value);\n};\n\nconst command = (value: unknown, field: string) => {\n  if (\n    !Array.isArray(value) ||\n    value.length === 0 ||\n    !value.every(\n      (part: unknown) =>\n        typeof part === \"string\" && part !== \"\" && !part.includes(\"\\0\"),\n    )\n  )\n    throw new Error(`${field} must be a nonempty command argument array`);\n  return value.map((part: string) => part);\n};\n\nexport const parseConsumerFixtures = (input: unknown): ConsumerFixture[] => {\n  if (\n    !consumerRecord(input) ||\n    Object.keys(input).some((key) => key !== \"packages\") ||\n    !Array.isArray(input[\"packages\"])\n  )\n    throw new Error(\"consumer fixtures must contain only a packages array\");\n  const seen = new Set<string>();\n  return input[\"packages\"].map((entry: unknown) => {\n    if (\n      !consumerRecord(entry) ||\n      Object.keys(entry).some(\n        (key) =>\n          ![\"package\", \"fixture\", \"kind\", \"build\", \"smoke\"].includes(key),\n      )\n    )\n      throw new Error(\"invalid consumer fixture declaration\");\n    const packagePath = consumerRelativePath(entry[\"package\"], \"package\");\n    const fixture = consumerRelativePath(entry[\"fixture\"], \"fixture\");\n    const kind = entry[\"kind\"];\n    if (kind !== \"node\" && kind !== \"react\")\n      throw new Error(\"fixture kind must be node or react\");\n    if (seen.has(packagePath))\n      throw new Error(`duplicate consumer fixture: ${packagePath}`);\n    seen.add(packagePath);\n    return {\n      package: packagePath,\n      fixture,\n      kind,\n      build: command(entry[\"build\"], \"build\"),\n      smoke: command(entry[\"smoke\"], \"smoke\"),\n    };\n  });\n};\n\ntype ConsumerFixtureSelectionOptions = {\n  selected: readonly string[];\n  fixtures: readonly ConsumerFixture[];\n};\nexport const assertConsumerFixtureSelection = ({\n  selected,\n  fixtures,\n}: ConsumerFixtureSelectionOptions) => {\n  const directories = selected.map((entry) =>\n    consumerRelativePath(entry, \"selected package\"),\n  );\n  const declared = new Set(fixtures.map((entry) => entry.package));\n  if (new Set(directories).size !== directories.length)\n    throw new Error(\"duplicate selected consumer package\");\n  if (\n    directories.length !== declared.size ||\n    directories.some((entry) => !declared.has(entry))\n  )\n    throw new Error(\n      \"selected consumer packages must exactly match declared fixtures\",\n    );\n};\n\nexport type ConsumerPackage = {\n  directory: string;\n  name: string;\n  manifest: Record<string, unknown>;\n};\n\nexport const consumerBundledDependencyFields = [\n  \"bundleDependencies\",\n  \"bundledDependencies\",\n] as const;\n\nconst consumerPackageNameValid = (value: unknown) => {\n  if (typeof value !== \"string\" || value.length === 0 || value.length > 214)\n    return false;\n  const components = value.startsWith(\"@\")\n    ? value.slice(1).split(\"/\")\n    : [value];\n  if (value.startsWith(\"@\") && components.length !== 2) return false;\n  if (!value.startsWith(\"@\") && !/^[a-z0-9]/.test(value)) return false;\n  if (\n    components.some(\n      (component) =>\n        !/^[a-z0-9._-]+$/.test(component) ||\n        component === \".\" ||\n        component === \"..\",\n    )\n  )\n    return false;\n  const packageName = components.at(-1);\n  return packageName !== \"node_modules\" && packageName !== \"favicon.ico\";\n};\n\nexport const assertConsumerPublishableManifest = ({\n  manifest,\n  directory,\n}: Pick<ConsumerPackage, \"manifest\" | \"directory\">) => {\n  const version = manifest[\"version\"];\n  if (\n    manifest[\"private\"] !== true &&\n    (typeof version !== \"string\" || valid(version) === null)\n  )\n    throw new Error(\n      `public consumer package requires a semver-valid version: ${directory}`,\n    );\n  if (\n    manifest[\"private\"] !== true &&\n    !consumerPackageNameValid(manifest[\"name\"])\n  )\n    throw new Error(\n      `public consumer package requires a valid npm name: ${directory}`,\n    );\n  for (const field of consumerBundledDependencyFields)\n    if (Object.hasOwn(manifest, field))\n      throw new Error(\n        `consumer packaging does not support ${field}: ${directory}`,\n      );\n};\n\ntype ConsumerFixtureKindOptions = {\n  fixture: ConsumerFixture;\n  pkg: ConsumerPackage;\n};\n\nexport const assertConsumerFixtureKind = ({\n  fixture,\n  pkg,\n}: ConsumerFixtureKindOptions) => {\n  const peers = pkg.manifest[\"peerDependencies\"];\n  if (peers !== undefined && !consumerRecord(peers))\n    throw new Error(`invalid published peerDependencies: ${pkg.name}`);\n  const react = consumerRecord(peers) ? peers[\"react\"] : undefined;\n  if (\n    react !== undefined &&\n    (typeof react !== \"string\" ||\n      react.trim() === \"\" ||\n      validRange(react) === null)\n  )\n    throw new Error(`invalid published React peer: ${pkg.name}`);\n  const kind = react === undefined ? \"node\" : \"react\";\n  if (fixture.kind !== kind)\n    throw new Error(\n      `${pkg.name} requires fixture kind ${kind} from its published peers`,\n    );\n};\n\nexport const consumerStagingPaths = (\n  packages: Map<string, ConsumerPackage>,\n) => {\n  const paths = new Map<string, string>();\n  for (const [name, pkg] of packages)\n    paths.set(\n      name,\n      consumerRelativePath(pkg.directory, \"workspace package directory\"),\n    );\n  return paths;\n};\n\nexport const consumerPackRootManifest = (\n  packages: Map<string, ConsumerPackage>,\n  files: Record<string, string>,\n) => {\n  const source = files[\"package.json\"];\n  if (source !== undefined) {\n    const manifest: unknown = JSON.parse(source);\n    if (!consumerRecord(manifest))\n      throw new Error(\"root package manifest must be an object\");\n    return manifest;\n  }\n  const root = [...packages.values()].find((pkg) => pkg.directory === \".\");\n  return root?.manifest ?? { private: true };\n};\n\nexport const consumerDependencyConfigFiles = [\n  \".npmrc\",\n  \".pnpmfile.cjs\",\n  \"pnpm-workspace.yaml\",\n  \".yarnrc\",\n  \".yarnrc.yml\",\n] as const;\n\nexport const assertConsumerFixtureManifest = (\n  manifest: Record<string, unknown>,\n) => {\n  for (const field of [\n    \"pnpm\",\n    \"overrides\",\n    \"resolutions\",\n    \"workspaces\",\n    \"packageManager\",\n    \"allowScripts\",\n  ])\n    if (manifest[field] !== undefined)\n      throw new Error(\n        `consumer fixture must not supply dependency-manager setting: ${field}`,\n      );\n};\n\ntype BindConsumerManifestOptions = {\n  manifest: Record<string, unknown>;\n  artifacts: Map<string, string>;\n  typescript: string;\n  react: Record<string, string>;\n  manager: \"npm\" | \"pnpm\";\n};\nexport const bindConsumerManifest = ({\n  manifest,\n  artifacts,\n  typescript,\n  react,\n  manager,\n}: BindConsumerManifestOptions) => {\n  assertConsumerFixtureManifest(manifest);\n  const artifactBindings = Object.fromEntries(\n    [...artifacts].map(([name, file]) => [name, `file:${file}`]),\n  );\n  const owned = { ...artifactBindings, typescript, ...react };\n  const result = { ...manifest };\n  for (const field of [\n    \"dependencies\",\n    \"devDependencies\",\n    \"optionalDependencies\",\n    \"peerDependencies\",\n  ]) {\n    const entries = manifest[field];\n    if (entries === undefined) continue;\n    if (!consumerRecord(entries))\n      throw new Error(`fixture ${field} must be an object`);\n    for (const specifier of Object.values(entries))\n      if (\n        typeof specifier !== \"string\" ||\n        /^(?:workspace:|file:|link:|\\.\\.?\\/|\\/)/.test(specifier)\n      )\n        throw new Error(\n          \"fixture dependencies must resolve from registry or generated artifact bindings\",\n        );\n    result[field] = Object.fromEntries(\n      Object.entries(entries).filter(([name]) => !Object.hasOwn(owned, name)),\n    );\n  }\n  result[\"dependencies\"] = {\n    ...(consumerRecord(result[\"dependencies\"]) ? result[\"dependencies\"] : {}),\n    ...artifactBindings,\n    ...react,\n  };\n  result[\"devDependencies\"] = {\n    ...(consumerRecord(result[\"devDependencies\"])\n      ? result[\"devDependencies\"]\n      : {}),\n    typescript,\n  };\n  if (manager === \"npm\") {\n    result[\"overrides\"] = owned;\n    return { manager, manifest: result };\n  }\n  return {\n    manager,\n    manifest: result,\n    workspace: { packages: [\".\"], overrides: owned },\n  };\n};\n\nconst workspacePatterns = (manifest: Record<string, unknown>) => {\n  const workspace = manifest[\"workspaces\"];\n  const patterns = consumerRecord(workspace)\n    ? workspace[\"packages\"]\n    : workspace;\n  if (patterns === undefined) return [];\n  if (\n    !Array.isArray(patterns) ||\n    !patterns.every((entry: unknown) => typeof entry === \"string\")\n  )\n    throw new Error(\"package workspaces must be string patterns\");\n  return patterns.map((entry: string) => entry);\n};\n\nexport const discoverConsumerManifests = (files: Record<string, string>) => {\n  const manifests = new Map<string, Record<string, unknown>>();\n  const manifestSources = new Map<string, string>();\n  const pnpmSources = new Map<string, string>();\n  const pnpmWorkspaces = new Map<string, string[]>();\n  for (const [file, content] of Object.entries(files)) {\n    if (path.posix.basename(file) === \"pnpm-workspace.yaml\") {\n      pnpmSources.set(path.posix.dirname(file), content);\n    } else if (path.posix.basename(file) === \"package.json\")\n      manifestSources.set(path.posix.dirname(file), content);\n  }\n  const assertWorkspaceOwner = (directory: string) => {\n    if (pnpmSources.has(directory) && !manifestSources.has(directory))\n      throw new Error(\n        `consumer pnpm workspace requires an adjacent tracked package.json: ${path.posix.join(directory, \"pnpm-workspace.yaml\")}`,\n      );\n  };\n  const candidates = new Set([\n    ...manifestSources.keys(),\n    ...pnpmSources.keys(),\n  ]);\n  const manifestAt = (directory: string) => {\n    const cached = manifests.get(directory);\n    if (cached) return cached;\n    const source = manifestSources.get(directory);\n    if (source === undefined) return undefined;\n    const json: unknown = JSON.parse(source);\n    if (!consumerRecord(json))\n      throw new Error(`invalid package manifest: ${directory}/package.json`);\n    manifests.set(directory, json);\n    return json;\n  };\n  const patternsAt = (\n    directory: string,\n    manifest: Record<string, unknown> | undefined,\n  ) => {\n    const source = pnpmSources.get(directory);\n    if (source !== undefined && !pnpmWorkspaces.has(directory)) {\n      const file = `${directory}/pnpm-workspace.yaml`;\n      const document = parseDocument(source, { uniqueKeys: true });\n      if (document.errors.length)\n        throw new Error(`invalid pnpm workspace: ${file}`);\n      const json: unknown = document.toJS({ maxAliasCount: 100 });\n      if (!consumerRecord(json))\n        throw new Error(`invalid pnpm workspace: ${file}`);\n      const patterns = json[\"packages\"] ?? [];\n      if (\n        !Array.isArray(patterns) ||\n        !patterns.every((entry: unknown) => typeof entry === \"string\")\n      )\n        throw new Error(`invalid pnpm workspace packages: ${file}`);\n      pnpmWorkspaces.set(\n        directory,\n        patterns.map((entry: string) => entry),\n      );\n    }\n    return pnpmWorkspaces.get(directory) ?? workspacePatterns(manifest ?? {});\n  };\n  const roots = new Set([\".\"]);\n  for (;;) {\n    const before = roots.size;\n    for (const directory of roots) {\n      assertWorkspaceOwner(directory);\n      const manifest = manifestAt(directory);\n      const patterns = patternsAt(directory, manifest);\n      for (const candidate of candidates) {\n        const relative = path.posix.relative(directory, candidate);\n        if (relative === \"\" || relative.startsWith(\"../\")) continue;\n        const positives = patterns.filter(\n          (pattern) => !pattern.startsWith(\"!\"),\n        );\n        const negatives = patterns\n          .filter((pattern) => pattern.startsWith(\"!\"))\n          .map((pattern) => pattern.slice(1));\n        if (\n          positives.some((pattern) => picomatch.isMatch(relative, pattern)) &&\n          !negatives.some((pattern) => picomatch.isMatch(relative, pattern))\n        )\n          roots.add(candidate);\n      }\n    }\n    if (before === roots.size) break;\n  }\n  const discovered = new Map<string, Record<string, unknown>>();\n  for (const directory of roots) {\n    for (let owner = directory; ; owner = path.posix.dirname(owner)) {\n      assertWorkspaceOwner(owner);\n      if (owner === \".\") break;\n    }\n    const manifest = manifestAt(directory);\n    if (manifest) discovered.set(directory, manifest);\n  }\n  return discovered;\n};\n\nexport const discoverConsumerPackages = (files: Record<string, string>) => {\n  const packages = new Map<string, ConsumerPackage>();\n  for (const [directory, manifest] of discoverConsumerManifests(files)) {\n    const name = manifest[\"name\"];\n    if (typeof name !== \"string\" || name === \"\") continue;\n    if (packages.has(name))\n      throw new Error(`duplicate workspace package: ${name}`);\n    packages.set(name, { directory, name, manifest });\n  }\n  return packages;\n};\n\nexport const consumerPublishedDependencyFields = [\n  \"dependencies\",\n  \"optionalDependencies\",\n  \"peerDependencies\",\n] as const;\n\ntype ConsumerPackageClosureOptions = {\n  selected: ConsumerPackage;\n  packages: Map<string, ConsumerPackage>;\n  files: Record<string, string>;\n};\nexport const consumerPackageClosure = ({\n  selected,\n  packages,\n  files,\n}: ConsumerPackageClosureOptions) => {\n  const closure = new Map<string, ConsumerPackage>();\n  const visit = (pkg: ConsumerPackage) => {\n    if (closure.has(pkg.name)) return;\n    assertConsumerPublishableManifest(pkg);\n    closure.set(pkg.name, pkg);\n    for (const field of consumerPublishedDependencyFields) {\n      const dependencies = pkg.manifest[field];\n      if (!consumerRecord(dependencies)) continue;\n      for (const [name, specifier] of Object.entries(dependencies)) {\n        const local = packages.get(name);\n        if (typeof specifier !== \"string\")\n          throw new Error(`invalid package dependency: ${pkg.name} -> ${name}`);\n        if (specifier.startsWith(\"catalog:\") && local !== undefined) {\n          const resolved = resolveConsumerCatalog({\n            directory: pkg.directory,\n            name,\n            specifier,\n            files,\n          });\n          const version = local.manifest[\"version\"];\n          if (\n            resolved.startsWith(\"workspace:\") ||\n            (typeof version === \"string\" &&\n              validRange(resolved) !== null &&\n              satisfies(version, resolved))\n          )\n            throw new Error(\n              `catalog dependency ${name} resolves to workspace package ${local.name}; use workspace:`,\n            );\n        }\n        if (/^workspace:(?:@[^/@]+\\/)?[^/@]+@/.test(specifier))\n          throw new Error(\n            `workspace alias specifiers are not supported by consumer-compat: ${name} -> ${specifier}; use the package name as the dependency key`,\n          );\n        if (/^(?:file:|link:)/.test(specifier))\n          throw new Error(\n            `published local dependencies must use workspace protocol: ${pkg.name} -> ${name}`,\n          );\n        if (\n          local &&\n          (specifier.startsWith(\"workspace:\") ||\n            (typeof local.manifest[\"version\"] === \"string\" &&\n              validRange(specifier) &&\n              satisfies(local.manifest[\"version\"], specifier)))\n        ) {\n          if (local.manifest[\"private\"] === true)\n            throw new Error(\n              `published package depends on private workspace package: ${pkg.name} -> ${name}`,\n            );\n          visit(local);\n        } else if (\n          typeof specifier === \"string\" &&\n          specifier.startsWith(\"workspace:\")\n        )\n          throw new Error(\n            `unresolved workspace dependency: ${pkg.name} -> ${name}`,\n          );\n      }\n    }\n  };\n  visit(selected);\n  return closure;\n};\n\nexport const oldestPublishedConsumerVersion = (\n  versions: readonly string[],\n  range: string,\n) => {\n  if (!validRange(range))\n    throw new Error(`invalid consumer peer range: ${range}`);\n  const candidates = versions\n    .filter((version) => satisfies(version, range))\n    .sort(compare);\n  const version = candidates.at(0);\n  if (!version)\n    throw new Error(`no published consumer version satisfies ${range}`);\n  return version;\n};\n","import { satisfies, validRange } from \"semver\";\n\ntype ConsumerNodeSupportOptions = { range: unknown; node: string };\n\nexport const consumerNodeSupportMatches = ({\n  range,\n  node,\n}: ConsumerNodeSupportOptions) =>\n  range === undefined ||\n  (typeof range === \"string\" &&\n    range.trim() !== \"\" &&\n    validRange(range) !== null &&\n    satisfies(node, range));\n\ntype AssertConsumerNodeSupportOptions = {\n  manifest: Record<string, unknown>;\n  node: string;\n  label: string;\n};\nexport const assertConsumerNodeSupport = ({\n  manifest,\n  node,\n  label,\n}: AssertConsumerNodeSupportOptions) => {\n  const engines = manifest[\"engines\"];\n  const record = (value: unknown): value is Record<string, unknown> =>\n    typeof value === \"object\" && value !== null && !Array.isArray(value);\n  if (\n    (engines !== undefined && !record(engines)) ||\n    !consumerNodeSupportMatches({\n      range: record(engines) ? engines[\"node\"] : undefined,\n      node,\n    })\n  )\n    throw new Error(`${label} engines.node must support consumer Node ${node}`);\n};\n"],"mappings":";;;;;;;AAMA,MAAM,UAAU,UACd,OAAO,UAAU,YAAY,UAAU,QAAQ,CAAC,MAAM,QAAQ,KAAK;AAErE,MAAM,kBAAkB,OAAgB,UAAkB;CACxD,IAAI,CAAC,OAAO,KAAK,GAAG,MAAM,IAAI,MAAM,GAAG,MAAM,mBAAmB;CAChE,MAAM,0BAAU,IAAI,IAAoB;CACxC,KAAK,MAAM,CAAC,MAAM,cAAc,OAAO,QAAQ,KAAK,GAAG;EACrD,IAAI,SAAS,MAAM,OAAO,cAAc,YAAY,UAAU,KAAK,MAAM,IACvE,MAAM,IAAI,MAAM,GAAG,MAAM,0CAA0C;EACrE,QAAQ,IAAI,MAAM,SAAS;CAC7B;CACA,OAAO,OAAO,YAAY,OAAO;AACnC;AAEA,MAAa,gBAAgB,QAAiC,SAAiB;CAC7E,MAAM,SAGF,CAAC;CACL,IAAI,OAAO,OAAO,QAAQ,SAAS,GACjC,OAAO,UAAU,eAAe,OAAO,YAAY,GAAG,KAAK,UAAU;CACvE,IAAI,OAAO,OAAO,QAAQ,UAAU,GAAG;EACrC,IAAI,CAAC,OAAO,OAAO,WAAW,GAC5B,MAAM,IAAI,MAAM,GAAG,KAAK,6BAA6B;EACvD,MAAM,wBAAQ,IAAI,IAAoC;EACtD,KAAK,MAAM,CAAC,MAAM,YAAY,OAAO,QAAQ,OAAO,WAAW,GAAG;GAChE,IAAI,SAAS,IACX,MAAM,IAAI,MAAM,GAAG,KAAK,iCAAiC;GAC3D,MAAM,IAAI,MAAM,eAAe,SAAS,GAAG,KAAK,aAAa,MAAM,CAAC;EACtE;EACA,OAAO,WAAW,OAAO,YAAY,KAAK;CAC5C;CACA,OAAO;AACT;AAEA,MAAa,mBAAmB,aAAsC;CACpE,MAAM,UAAU,CAAC,QAAQ;CACzB,IAAI,OAAO,SAAS,aAAa,GAAG,QAAQ,KAAK,SAAS,aAAa;CACvE,MAAM,SAAkC,CAAC;CACzC,KAAK,MAAM,UAAU,SAAS;EAC5B,MAAM,QAAQ,aAAa,QAAQ,cAAc;EACjD,KAAK,MAAM,CAAC,OAAO,UAAU,OAAO,QAAQ,KAAK,GAAG;GAClD,IACE,OAAO,OAAO,QAAQ,KAAK,KAC3B,CAAC,kBAAkB,OAAO,QAAQ,KAAK,GAEvC,MAAM,IAAI,MAAM,mBAAmB,MAAM,6BAA6B;GACxE,OAAO,SAAS;EAClB;CACF;CACA,OAAO,aAAa,QAAQ,cAAc;AAC5C;AAEA,MAAa,sBAAsB,QAAgB,SAAiB;CAClE,MAAM,WAAW,cAAc,QAAQ,EAAE,YAAY,KAAK,CAAC;CAC3D,IAAI,SAAS,OAAO,WAAW,GAC7B,MAAM,IAAI,MAAM,2BAA2B,MAAM;CACnD,MAAM,YAAqB,SAAS,KAAK,EAAE,eAAe,IAAI,CAAC;CAC/D,IAAI,CAAC,OAAO,SAAS,GAAG,MAAM,IAAI,MAAM,2BAA2B,MAAM;CACzE,MAAM,WAAW,UAAU;CAC3B,IACE,aAAa,KAAA,MACZ,CAAC,MAAM,QAAQ,QAAQ,KACtB,CAAC,SAAS,OAAO,UAAmB,OAAO,UAAU,QAAQ,IAE/D,MAAM,IAAI,MAAM,oCAAoC,MAAM;CAC5D,OAAO;EAAE,UAAU,YAAY,CAAC;EAAG,GAAG,aAAa,WAAW,IAAI;CAAE;AACtE;AAQA,MAAa,0BAA0B,EACrC,WAAW,gBACX,MACA,WACA,YACmC;CACnC,IAAI,YAAY;CAChB,OAAO,MAAM;EACX,MAAM,WAAW,KAAK,MAAM,KAAK,WAAW,qBAAqB;EACjE,MAAM,OAAO,MAAM;EACnB,MAAM,eAAe,KAAK,MAAM,KAAK,WAAW,cAAc;EAC9D,MAAM,OAAO,MAAM;EACnB,IAAI;EACJ,IAAI,WAAqB,CAAC;EAC1B,IAAI,SAAS,KAAA,GAAW;GACtB,MAAM,YAAY,mBAAmB,MAAM,QAAQ;GACnD,QAAQ,aAAa,WAAW,QAAQ;GACxC,WAAW,UAAU;EACvB,OAAO,IAAI,SAAS,KAAA,GAAW;GAC7B,MAAM,WAAoB,KAAK,MAAM,IAAI;GACzC,IAAI,CAAC,OAAO,QAAQ,GAClB,MAAM,IAAI,MAAM,0BAA0B,cAAc;GAC1D,MAAM,cAAc,SAAS;GAC7B,IAAI,cAAc,OAAO,gBAAgB,KAAA,GAAW;IAClD,QAAQ,gBAAgB,QAAQ;IAChC,MAAM,WAAW,OAAO,WAAW,IAC/B,YAAY,cACZ;IACJ,IACE,aAAa,KAAA,MACZ,CAAC,MAAM,QAAQ,QAAQ,KACtB,CAAC,SAAS,OAAO,UAAmB,OAAO,UAAU,QAAQ,IAE/D,MAAM,IAAI,MAAM,mCAAmC,cAAc;IACnE,WAAW,YAAY,CAAC;GAC1B;EACF;EACA,IAAI,UAAU,KAAA,GAAW;GACvB,IACE,CAAC,kBAAkB;IACjB;IACA,MAAM,KAAK,MAAM,KAAK,gBAAgB,cAAc;IACpD;IACA,gBAAgB;GAClB,CAAC,GAED,MAAM,IAAI,MACR,sBAAsB,KAAK,sCAAsC,WACnE;GACF,MAAM,cAAc,UAAU,MAAM,CAAiB,KAAK;GAC1D,MAAM,QAAQ,MAAM;GACpB,MAAM,eACJ,UAAU,KAAA,KAAa,OAAO,OAAO,OAAO,WAAW,IACnD,MAAM,eACN,KAAA;GACN,MAAM,UACJ,gBAAgB,YACX,MAAM,WAAW,eAClB;GACN,MAAM,WACJ,YAAY,KAAA,KAAa,OAAO,OAAO,SAAS,IAAI,IAChD,QAAQ,QACR,KAAA;GACN,IAAI,aAAa,KAAA,GACf,MAAM,IAAI,MACR,iCAAiC,KAAK,gBAAgB,WACxD;GACF,OAAO;EACT;EACA,IAAI,cAAc,KAAK;EACvB,YAAY,KAAK,MAAM,QAAQ,SAAS;CAC1C;CACA,MAAM,IAAI,MACR,iCAAiC,KAAK,6BACxC;AACF;;;AC5IA,MAAa,kBACX,UAEA,OAAO,UAAU,YAAY,UAAU,QAAQ,CAAC,MAAM,QAAQ,KAAK;AAErE,MAAa,wBAAwB,OAAgB,UAAkB;CACrE,IACE,OAAO,UAAU,YACjB,UAAU,MACV,MAAM,SAAS,IAAI,KACnB,MAAM,SAAS,IAAI,KACnB,KAAK,MAAM,WAAW,KAAK,KAC3B,MAAM,MAAM,GAAG,CAAC,CAAC,MAAM,SAAS,SAAS,QAAQ,SAAS,EAAE,GAE5D,MAAM,IAAI,MAAM,GAAG,MAAM,oCAAoC;CAC/D,OAAO,KAAK,MAAM,UAAU,KAAK;AACnC;AAEA,MAAM,WAAW,OAAgB,UAAkB;CACjD,IACE,CAAC,MAAM,QAAQ,KAAK,KACpB,MAAM,WAAW,KACjB,CAAC,MAAM,OACJ,SACC,OAAO,SAAS,YAAY,SAAS,MAAM,CAAC,KAAK,SAAS,IAAI,CAClE,GAEA,MAAM,IAAI,MAAM,GAAG,MAAM,2CAA2C;CACtE,OAAO,MAAM,KAAK,SAAiB,IAAI;AACzC;AAEA,MAAa,yBAAyB,UAAsC;CAC1E,IACE,CAAC,eAAe,KAAK,KACrB,OAAO,KAAK,KAAK,CAAC,CAAC,MAAM,QAAQ,QAAQ,UAAU,KACnD,CAAC,MAAM,QAAQ,MAAM,WAAW,GAEhC,MAAM,IAAI,MAAM,sDAAsD;CACxE,MAAM,uBAAO,IAAI,IAAY;CAC7B,OAAO,MAAM,WAAW,CAAC,KAAK,UAAmB;EAC/C,IACE,CAAC,eAAe,KAAK,KACrB,OAAO,KAAK,KAAK,CAAC,CAAC,MAChB,QACC,CAAC;GAAC;GAAW;GAAW;GAAQ;GAAS;EAAO,CAAC,CAAC,SAAS,GAAG,CAClE,GAEA,MAAM,IAAI,MAAM,sCAAsC;EACxD,MAAM,cAAc,qBAAqB,MAAM,YAAY,SAAS;EACpE,MAAM,UAAU,qBAAqB,MAAM,YAAY,SAAS;EAChE,MAAM,OAAO,MAAM;EACnB,IAAI,SAAS,UAAU,SAAS,SAC9B,MAAM,IAAI,MAAM,oCAAoC;EACtD,IAAI,KAAK,IAAI,WAAW,GACtB,MAAM,IAAI,MAAM,+BAA+B,aAAa;EAC9D,KAAK,IAAI,WAAW;EACpB,OAAO;GACL,SAAS;GACT;GACA;GACA,OAAO,QAAQ,MAAM,UAAU,OAAO;GACtC,OAAO,QAAQ,MAAM,UAAU,OAAO;EACxC;CACF,CAAC;AACH;AAMA,MAAa,kCAAkC,EAC7C,UACA,eACqC;CACrC,MAAM,cAAc,SAAS,KAAK,UAChC,qBAAqB,OAAO,kBAAkB,CAChD;CACA,MAAM,WAAW,IAAI,IAAI,SAAS,KAAK,UAAU,MAAM,OAAO,CAAC;CAC/D,IAAI,IAAI,IAAI,WAAW,CAAC,CAAC,SAAS,YAAY,QAC5C,MAAM,IAAI,MAAM,qCAAqC;CACvD,IACE,YAAY,WAAW,SAAS,QAChC,YAAY,MAAM,UAAU,CAAC,SAAS,IAAI,KAAK,CAAC,GAEhD,MAAM,IAAI,MACR,iEACF;AACJ;AAQA,MAAa,kCAAkC,CAC7C,sBACA,qBACF;AAEA,MAAM,4BAA4B,UAAmB;CACnD,IAAI,OAAO,UAAU,YAAY,MAAM,WAAW,KAAK,MAAM,SAAS,KACpE,OAAO;CACT,MAAM,aAAa,MAAM,WAAW,GAAG,IACnC,MAAM,MAAM,CAAC,CAAC,CAAC,MAAM,GAAG,IACxB,CAAC,KAAK;CACV,IAAI,MAAM,WAAW,GAAG,KAAK,WAAW,WAAW,GAAG,OAAO;CAC7D,IAAI,CAAC,MAAM,WAAW,GAAG,KAAK,CAAC,YAAY,KAAK,KAAK,GAAG,OAAO;CAC/D,IACE,WAAW,MACR,cACC,CAAC,iBAAiB,KAAK,SAAS,KAChC,cAAc,OACd,cAAc,IAClB,GAEA,OAAO;CACT,MAAM,cAAc,WAAW,GAAG,EAAE;CACpC,OAAO,gBAAgB,kBAAkB,gBAAgB;AAC3D;AAEA,MAAa,qCAAqC,EAChD,UACA,gBACqD;CACrD,MAAM,UAAU,SAAS;CACzB,IACE,SAAS,eAAe,SACvB,OAAO,YAAY,YAAY,MAAM,OAAO,MAAM,OAEnD,MAAM,IAAI,MACR,4DAA4D,WAC9D;CACF,IACE,SAAS,eAAe,QACxB,CAAC,yBAAyB,SAAS,OAAO,GAE1C,MAAM,IAAI,MACR,sDAAsD,WACxD;CACF,KAAK,MAAM,SAAS,iCAClB,IAAI,OAAO,OAAO,UAAU,KAAK,GAC/B,MAAM,IAAI,MACR,uCAAuC,MAAM,IAAI,WACnD;AACN;AAOA,MAAa,6BAA6B,EACxC,SACA,UACgC;CAChC,MAAM,QAAQ,IAAI,SAAS;CAC3B,IAAI,UAAU,KAAA,KAAa,CAAC,eAAe,KAAK,GAC9C,MAAM,IAAI,MAAM,uCAAuC,IAAI,MAAM;CACnE,MAAM,QAAQ,eAAe,KAAK,IAAI,MAAM,WAAW,KAAA;CACvD,IACE,UAAU,KAAA,MACT,OAAO,UAAU,YAChB,MAAM,KAAK,MAAM,MACjB,WAAW,KAAK,MAAM,OAExB,MAAM,IAAI,MAAM,iCAAiC,IAAI,MAAM;CAC7D,MAAM,OAAO,UAAU,KAAA,IAAY,SAAS;CAC5C,IAAI,QAAQ,SAAS,MACnB,MAAM,IAAI,MACR,GAAG,IAAI,KAAK,yBAAyB,KAAK,0BAC5C;AACJ;AAEA,MAAa,wBACX,aACG;CACH,MAAM,wBAAQ,IAAI,IAAoB;CACtC,KAAK,MAAM,CAAC,MAAM,QAAQ,UACxB,MAAM,IACJ,MACA,qBAAqB,IAAI,WAAW,6BAA6B,CACnE;CACF,OAAO;AACT;AAEA,MAAa,4BACX,UACA,UACG;CACH,MAAM,SAAS,MAAM;CACrB,IAAI,WAAW,KAAA,GAAW;EACxB,MAAM,WAAoB,KAAK,MAAM,MAAM;EAC3C,IAAI,CAAC,eAAe,QAAQ,GAC1B,MAAM,IAAI,MAAM,yCAAyC;EAC3D,OAAO;CACT;CAEA,OADa,CAAC,GAAG,SAAS,OAAO,CAAC,CAAC,CAAC,MAAM,QAAQ,IAAI,cAAc,GAC1D,CAAC,EAAE,YAAY,EAAE,SAAS,KAAK;AAC3C;AAEA,MAAa,gCAAgC;CAC3C;CACA;CACA;CACA;CACA;AACF;AAEA,MAAa,iCACX,aACG;CACH,KAAK,MAAM,SAAS;EAClB;EACA;EACA;EACA;EACA;EACA;CACF,GACE,IAAI,SAAS,WAAW,KAAA,GACtB,MAAM,IAAI,MACR,gEAAgE,OAClE;AACN;AASA,MAAa,wBAAwB,EACnC,UACA,WACA,YACA,OACA,cACiC;CACjC,8BAA8B,QAAQ;CACtC,MAAM,mBAAmB,OAAO,YAC9B,CAAC,GAAG,SAAS,CAAC,CAAC,KAAK,CAAC,MAAM,UAAU,CAAC,MAAM,QAAQ,MAAM,CAAC,CAC7D;CACA,MAAM,QAAQ;EAAE,GAAG;EAAkB;EAAY,GAAG;CAAM;CAC1D,MAAM,SAAS,EAAE,GAAG,SAAS;CAC7B,KAAK,MAAM,SAAS;EAClB;EACA;EACA;EACA;CACF,GAAG;EACD,MAAM,UAAU,SAAS;EACzB,IAAI,YAAY,KAAA,GAAW;EAC3B,IAAI,CAAC,eAAe,OAAO,GACzB,MAAM,IAAI,MAAM,WAAW,MAAM,mBAAmB;EACtD,KAAK,MAAM,aAAa,OAAO,OAAO,OAAO,GAC3C,IACE,OAAO,cAAc,YACrB,yCAAyC,KAAK,SAAS,GAEvD,MAAM,IAAI,MACR,gFACF;EACJ,OAAO,SAAS,OAAO,YACrB,OAAO,QAAQ,OAAO,CAAC,CAAC,QAAQ,CAAC,UAAU,CAAC,OAAO,OAAO,OAAO,IAAI,CAAC,CACxE;CACF;CACA,OAAO,kBAAkB;EACvB,GAAI,eAAe,OAAO,eAAe,IAAI,OAAO,kBAAkB,CAAC;EACvE,GAAG;EACH,GAAG;CACL;CACA,OAAO,qBAAqB;EAC1B,GAAI,eAAe,OAAO,kBAAkB,IACxC,OAAO,qBACP,CAAC;EACL;CACF;CACA,IAAI,YAAY,OAAO;EACrB,OAAO,eAAe;EACtB,OAAO;GAAE;GAAS,UAAU;EAAO;CACrC;CACA,OAAO;EACL;EACA,UAAU;EACV,WAAW;GAAE,UAAU,CAAC,GAAG;GAAG,WAAW;EAAM;CACjD;AACF;AAEA,MAAM,qBAAqB,aAAsC;CAC/D,MAAM,YAAY,SAAS;CAC3B,MAAM,WAAW,eAAe,SAAS,IACrC,UAAU,cACV;CACJ,IAAI,aAAa,KAAA,GAAW,OAAO,CAAC;CACpC,IACE,CAAC,MAAM,QAAQ,QAAQ,KACvB,CAAC,SAAS,OAAO,UAAmB,OAAO,UAAU,QAAQ,GAE7D,MAAM,IAAI,MAAM,4CAA4C;CAC9D,OAAO,SAAS,KAAK,UAAkB,KAAK;AAC9C;AAEA,MAAa,6BAA6B,UAAkC;CAC1E,MAAM,4BAAY,IAAI,IAAqC;CAC3D,MAAM,kCAAkB,IAAI,IAAoB;CAChD,MAAM,8BAAc,IAAI,IAAoB;CAC5C,MAAM,iCAAiB,IAAI,IAAsB;CACjD,KAAK,MAAM,CAAC,MAAM,YAAY,OAAO,QAAQ,KAAK,GAChD,IAAI,KAAK,MAAM,SAAS,IAAI,MAAM,uBAChC,YAAY,IAAI,KAAK,MAAM,QAAQ,IAAI,GAAG,OAAO;MAC5C,IAAI,KAAK,MAAM,SAAS,IAAI,MAAM,gBACvC,gBAAgB,IAAI,KAAK,MAAM,QAAQ,IAAI,GAAG,OAAO;CAEzD,MAAM,wBAAwB,cAAsB;EAClD,IAAI,YAAY,IAAI,SAAS,KAAK,CAAC,gBAAgB,IAAI,SAAS,GAC9D,MAAM,IAAI,MACR,sEAAsE,KAAK,MAAM,KAAK,WAAW,qBAAqB,GACxH;CACJ;CACA,MAAM,6BAAa,IAAI,IAAI,CACzB,GAAG,gBAAgB,KAAK,GACxB,GAAG,YAAY,KAAK,CACtB,CAAC;CACD,MAAM,cAAc,cAAsB;EACxC,MAAM,SAAS,UAAU,IAAI,SAAS;EACtC,IAAI,QAAQ,OAAO;EACnB,MAAM,SAAS,gBAAgB,IAAI,SAAS;EAC5C,IAAI,WAAW,KAAA,GAAW,OAAO,KAAA;EACjC,MAAM,OAAgB,KAAK,MAAM,MAAM;EACvC,IAAI,CAAC,eAAe,IAAI,GACtB,MAAM,IAAI,MAAM,6BAA6B,UAAU,cAAc;EACvE,UAAU,IAAI,WAAW,IAAI;EAC7B,OAAO;CACT;CACA,MAAM,cACJ,WACA,aACG;EACH,MAAM,SAAS,YAAY,IAAI,SAAS;EACxC,IAAI,WAAW,KAAA,KAAa,CAAC,eAAe,IAAI,SAAS,GAAG;GAC1D,MAAM,OAAO,GAAG,UAAU;GAC1B,MAAM,WAAW,cAAc,QAAQ,EAAE,YAAY,KAAK,CAAC;GAC3D,IAAI,SAAS,OAAO,QAClB,MAAM,IAAI,MAAM,2BAA2B,MAAM;GACnD,MAAM,OAAgB,SAAS,KAAK,EAAE,eAAe,IAAI,CAAC;GAC1D,IAAI,CAAC,eAAe,IAAI,GACtB,MAAM,IAAI,MAAM,2BAA2B,MAAM;GACnD,MAAM,WAAW,KAAK,eAAe,CAAC;GACtC,IACE,CAAC,MAAM,QAAQ,QAAQ,KACvB,CAAC,SAAS,OAAO,UAAmB,OAAO,UAAU,QAAQ,GAE7D,MAAM,IAAI,MAAM,oCAAoC,MAAM;GAC5D,eAAe,IACb,WACA,SAAS,KAAK,UAAkB,KAAK,CACvC;EACF;EACA,OAAO,eAAe,IAAI,SAAS,KAAK,kBAAkB,YAAY,CAAC,CAAC;CAC1E;CACA,MAAM,wBAAQ,IAAI,IAAI,CAAC,GAAG,CAAC;CAC3B,SAAS;EACP,MAAM,SAAS,MAAM;EACrB,KAAK,MAAM,aAAa,OAAO;GAC7B,qBAAqB,SAAS;GAE9B,MAAM,WAAW,WAAW,WADX,WAAW,SACkB,CAAC;GAC/C,KAAK,MAAM,aAAa,YAAY;IAClC,MAAM,WAAW,KAAK,MAAM,SAAS,WAAW,SAAS;IACzD,IAAI,aAAa,MAAM,SAAS,WAAW,KAAK,GAAG;IACnD,MAAM,YAAY,SAAS,QACxB,YAAY,CAAC,QAAQ,WAAW,GAAG,CACtC;IACA,MAAM,YAAY,SACf,QAAQ,YAAY,QAAQ,WAAW,GAAG,CAAC,CAAC,CAC5C,KAAK,YAAY,QAAQ,MAAM,CAAC,CAAC;IACpC,IACE,UAAU,MAAM,YAAY,UAAU,QAAQ,UAAU,OAAO,CAAC,KAChE,CAAC,UAAU,MAAM,YAAY,UAAU,QAAQ,UAAU,OAAO,CAAC,GAEjE,MAAM,IAAI,SAAS;GACvB;EACF;EACA,IAAI,WAAW,MAAM,MAAM;CAC7B;CACA,MAAM,6BAAa,IAAI,IAAqC;CAC5D,KAAK,MAAM,aAAa,OAAO;EAC7B,KAAK,IAAI,QAAQ,YAAa,QAAQ,KAAK,MAAM,QAAQ,KAAK,GAAG;GAC/D,qBAAqB,KAAK;GAC1B,IAAI,UAAU,KAAK;EACrB;EACA,MAAM,WAAW,WAAW,SAAS;EACrC,IAAI,UAAU,WAAW,IAAI,WAAW,QAAQ;CAClD;CACA,OAAO;AACT;AAEA,MAAa,4BAA4B,UAAkC;CACzE,MAAM,2BAAW,IAAI,IAA6B;CAClD,KAAK,MAAM,CAAC,WAAW,aAAa,0BAA0B,KAAK,GAAG;EACpE,MAAM,OAAO,SAAS;EACtB,IAAI,OAAO,SAAS,YAAY,SAAS,IAAI;EAC7C,IAAI,SAAS,IAAI,IAAI,GACnB,MAAM,IAAI,MAAM,gCAAgC,MAAM;EACxD,SAAS,IAAI,MAAM;GAAE;GAAW;GAAM;EAAS,CAAC;CAClD;CACA,OAAO;AACT;AAEA,MAAa,oCAAoC;CAC/C;CACA;CACA;AACF;AAOA,MAAa,0BAA0B,EACrC,UACA,UACA,YACmC;CACnC,MAAM,0BAAU,IAAI,IAA6B;CACjD,MAAM,SAAS,QAAyB;EACtC,IAAI,QAAQ,IAAI,IAAI,IAAI,GAAG;EAC3B,kCAAkC,GAAG;EACrC,QAAQ,IAAI,IAAI,MAAM,GAAG;EACzB,KAAK,MAAM,SAAS,mCAAmC;GACrD,MAAM,eAAe,IAAI,SAAS;GAClC,IAAI,CAAC,eAAe,YAAY,GAAG;GACnC,KAAK,MAAM,CAAC,MAAM,cAAc,OAAO,QAAQ,YAAY,GAAG;IAC5D,MAAM,QAAQ,SAAS,IAAI,IAAI;IAC/B,IAAI,OAAO,cAAc,UACvB,MAAM,IAAI,MAAM,+BAA+B,IAAI,KAAK,MAAM,MAAM;IACtE,IAAI,UAAU,WAAW,UAAU,KAAK,UAAU,KAAA,GAAW;KAC3D,MAAM,WAAW,uBAAuB;MACtC,WAAW,IAAI;MACf;MACA;MACA;KACF,CAAC;KACD,MAAM,UAAU,MAAM,SAAS;KAC/B,IACE,SAAS,WAAW,YAAY,KAC/B,OAAO,YAAY,YAClB,WAAW,QAAQ,MAAM,QACzB,UAAU,SAAS,QAAQ,GAE7B,MAAM,IAAI,MACR,sBAAsB,KAAK,iCAAiC,MAAM,KAAK,iBACzE;IACJ;IACA,IAAI,mCAAmC,KAAK,SAAS,GACnD,MAAM,IAAI,MACR,oEAAoE,KAAK,MAAM,UAAU,6CAC3F;IACF,IAAI,mBAAmB,KAAK,SAAS,GACnC,MAAM,IAAI,MACR,6DAA6D,IAAI,KAAK,MAAM,MAC9E;IACF,IACE,UACC,UAAU,WAAW,YAAY,KAC/B,OAAO,MAAM,SAAS,eAAe,YACpC,WAAW,SAAS,KACpB,UAAU,MAAM,SAAS,YAAY,SAAS,IAClD;KACA,IAAI,MAAM,SAAS,eAAe,MAChC,MAAM,IAAI,MACR,2DAA2D,IAAI,KAAK,MAAM,MAC5E;KACF,MAAM,KAAK;IACb,OAAO,IACL,OAAO,cAAc,YACrB,UAAU,WAAW,YAAY,GAEjC,MAAM,IAAI,MACR,oCAAoC,IAAI,KAAK,MAAM,MACrD;GACJ;EACF;CACF;CACA,MAAM,QAAQ;CACd,OAAO;AACT;;;ACrfA,MAAa,8BAA8B,EACzC,OACA,WAEA,UAAU,KAAA,KACT,OAAO,UAAU,YAChB,MAAM,KAAK,MAAM,MACjB,WAAW,KAAK,MAAM,QACtB,UAAU,MAAM,KAAK;AAOzB,MAAa,6BAA6B,EACxC,UACA,MACA,YACsC;CACtC,MAAM,UAAU,SAAS;CACzB,MAAM,UAAU,UACd,OAAO,UAAU,YAAY,UAAU,QAAQ,CAAC,MAAM,QAAQ,KAAK;CACrE,IACG,YAAY,KAAA,KAAa,CAAC,OAAO,OAAO,KACzC,CAAC,2BAA2B;EAC1B,OAAO,OAAO,OAAO,IAAI,QAAQ,UAAU,KAAA;EAC3C;CACF,CAAC,GAED,MAAM,IAAI,MAAM,GAAG,MAAM,2CAA2C,MAAM;AAC9E"}

package/dist/dependabot-cli.cjs

@@ -0,0 +1,67 @@
+#!/usr/bin/env node
+Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
+const require_toolchain_guard = require("./toolchain-guard.cjs");
+const require_toolchain_dependabot = require("./toolchain-dependabot.cjs");
+const require_toolchain_schema = require("./toolchain-schema.cjs");
+require("./dependabot.cjs");
+const require_generated_file = require("./generated-file.cjs");
+let node_path = require("node:path");
+let node_fs_promises = require("node:fs/promises");
+//#region src/dependabot-cli.ts
+const usage = "Usage: stll-dependabot (run from repository root)\n       stll-dependabot --help";
+const main = async () => {
+	const args = process.argv.slice(2);
+	if (args.length === 1 && args.at(0) === "--help") {
+		process.stdout.write(`${usage}\n`);
+		return;
+	}
+	if (args.length !== 0) throw new Error(usage);
+	const root = await (0, node_fs_promises.realpath)(process.cwd());
+	const { files, trackedFiles, diagnostics } = require_toolchain_guard.readToolchainInputs(root);
+	const policy = require_toolchain_schema.parseToolchainPolicy(JSON.parse(await (0, node_fs_promises.readFile)(new URL("../toolchain.json", require("url").pathToFileURL(__filename).href), "utf8")));
+	const yaml = (0, node_path.join)(root, ".github/dependabot.yaml");
+	const yml = (0, node_path.join)(root, ".github/dependabot.yml");
+	const yamlStat = await require_generated_file.checkGeneratedOutput(yaml);
+	const ymlStat = await require_generated_file.checkGeneratedOutput(yml);
+	const candidates = [{
+		relative: ".github/dependabot.yaml",
+		path: yaml,
+		stat: yamlStat
+	}, {
+		relative: ".github/dependabot.yml",
+		path: yml,
+		stat: ymlStat
+	}].filter(({ relative, stat }) => stat !== void 0 || trackedFiles.has(relative));
+	if (candidates.length > 1) throw new Error("keep exactly one Dependabot configuration: .yml or .yaml");
+	const selected = candidates.at(0) ?? {
+		relative: ".github/dependabot.yml",
+		path: yml,
+		stat: ymlStat
+	};
+	const remainingDiagnostics = await require_generated_file.generationDiagnostics({
+		diagnostics,
+		outputs: [{
+			relative: selected.relative,
+			destination: selected.path
+		}]
+	});
+	if (remainingDiagnostics.length !== 0) throw new Error(remainingDiagnostics.map(({ path, message }) => `${path}: ${message}`).join("\n"));
+	const destination = selected.path;
+	const mode = selected.stat?.mode;
+	await require_generated_file.writeGeneratedFile({
+		destination,
+		text: require_toolchain_dependabot.generateDependabotConfig({
+			files,
+			policy: policy.dependabot
+		}),
+		mode: mode === void 0 ? 420 : mode & 511
+	});
+	process.stdout.write(`Generated ${selected.relative}\n`);
+};
+main().catch((error) => {
+	process.stderr.write(`dependabot: ${error instanceof Error ? error.message : String(error)}\n`);
+	process.exitCode = 1;
+});
+//#endregion
+
+//# sourceMappingURL=dependabot-cli.cjs.map

package/dist/dependabot-cli.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"dependabot-cli.cjs","names":["realpath","readToolchainInputs","parseToolchainPolicy","readFile","join","checkGeneratedOutput","generationDiagnostics","writeGeneratedFile","generateDependabotConfig"],"sources":["../src/dependabot-cli.ts"],"sourcesContent":["#!/usr/bin/env node\nimport { readFile, realpath } from \"node:fs/promises\";\nimport { join } from \"node:path\";\n\nimport { generateDependabotConfig, parseToolchainPolicy } from \"./dependabot\";\nimport {\n  checkGeneratedOutput,\n  generationDiagnostics,\n  writeGeneratedFile,\n} from \"./generated-file\";\nimport { readToolchainInputs } from \"./toolchain-guard\";\n\nconst usage =\n  \"Usage: stll-dependabot (run from repository root)\\n       stll-dependabot --help\";\nconst main = async () => {\n  const args = process.argv.slice(2);\n  if (args.length === 1 && args.at(0) === \"--help\") {\n    process.stdout.write(`${usage}\\n`);\n    return;\n  }\n  if (args.length !== 0) throw new Error(usage);\n  const root = await realpath(process.cwd());\n  const { files, trackedFiles, diagnostics } = readToolchainInputs(root);\n  const policy = parseToolchainPolicy(\n    JSON.parse(\n      await readFile(new URL(\"../toolchain.json\", import.meta.url), \"utf8\"),\n    ),\n  );\n  const yaml = join(root, \".github/dependabot.yaml\");\n  const yml = join(root, \".github/dependabot.yml\");\n  const yamlStat = await checkGeneratedOutput(yaml);\n  const ymlStat = await checkGeneratedOutput(yml);\n  const candidates = [\n    { relative: \".github/dependabot.yaml\", path: yaml, stat: yamlStat },\n    { relative: \".github/dependabot.yml\", path: yml, stat: ymlStat },\n  ].filter(\n    ({ relative, stat }) => stat !== undefined || trackedFiles.has(relative),\n  );\n  if (candidates.length > 1)\n    throw new Error(\"keep exactly one Dependabot configuration: .yml or .yaml\");\n  const selected = candidates.at(0) ?? {\n    relative: \".github/dependabot.yml\",\n    path: yml,\n    stat: ymlStat,\n  };\n  const remainingDiagnostics = await generationDiagnostics({\n    diagnostics,\n    outputs: [{ relative: selected.relative, destination: selected.path }],\n  });\n  if (remainingDiagnostics.length !== 0)\n    throw new Error(\n      remainingDiagnostics\n        .map(({ path, message }) => `${path}: ${message}`)\n        .join(\"\\n\"),\n    );\n  const destination = selected.path;\n  const mode = selected.stat?.mode;\n  await writeGeneratedFile({\n    destination,\n    text: generateDependabotConfig({ files, policy: policy.dependabot }),\n    mode: mode === undefined ? 0o644 : mode & 0o777,\n  });\n  process.stdout.write(`Generated ${selected.relative}\\n`);\n};\n\nmain().catch((error: unknown) => {\n  process.stderr.write(\n    `dependabot: ${error instanceof Error ? error.message : String(error)}\\n`,\n  );\n  process.exitCode = 1;\n});\n"],"mappings":";;;;;;;;;;AAYA,MAAM,QACJ;AACF,MAAM,OAAO,YAAY;CACvB,MAAM,OAAO,QAAQ,KAAK,MAAM,CAAC;CACjC,IAAI,KAAK,WAAW,KAAK,KAAK,GAAG,CAAC,MAAM,UAAU;EAChD,QAAQ,OAAO,MAAM,GAAG,MAAM,GAAG;EACjC;CACF;CACA,IAAI,KAAK,WAAW,GAAG,MAAM,IAAI,MAAM,KAAK;CAC5C,MAAM,OAAO,OAAA,GAAMA,iBAAAA,SAAAA,CAAS,QAAQ,IAAI,CAAC;CACzC,MAAM,EAAE,OAAO,cAAc,gBAAgBC,wBAAAA,oBAAoB,IAAI;CACrE,MAAM,SAASC,yBAAAA,qBACb,KAAK,MACH,OAAA,GAAMC,iBAAAA,SAAAA,CAAS,IAAI,IAAI,qBAAA,QAAA,KAAA,CAAA,CAAA,cAAA,UAAA,CAAA,CAAA,IAAoC,GAAG,MAAM,CACtE,CACF;CACA,MAAM,QAAA,GAAOC,UAAAA,KAAAA,CAAK,MAAM,yBAAyB;CACjD,MAAM,OAAA,GAAMA,UAAAA,KAAAA,CAAK,MAAM,wBAAwB;CAC/C,MAAM,WAAW,MAAMC,uBAAAA,qBAAqB,IAAI;CAChD,MAAM,UAAU,MAAMA,uBAAAA,qBAAqB,GAAG;CAC9C,MAAM,aAAa,CACjB;EAAE,UAAU;EAA2B,MAAM;EAAM,MAAM;CAAS,GAClE;EAAE,UAAU;EAA0B,MAAM;EAAK,MAAM;CAAQ,CACjE,CAAC,CAAC,QACC,EAAE,UAAU,WAAW,SAAS,KAAA,KAAa,aAAa,IAAI,QAAQ,CACzE;CACA,IAAI,WAAW,SAAS,GACtB,MAAM,IAAI,MAAM,0DAA0D;CAC5E,MAAM,WAAW,WAAW,GAAG,CAAC,KAAK;EACnC,UAAU;EACV,MAAM;EACN,MAAM;CACR;CACA,MAAM,uBAAuB,MAAMC,uBAAAA,sBAAsB;EACvD;EACA,SAAS,CAAC;GAAE,UAAU,SAAS;GAAU,aAAa,SAAS;EAAK,CAAC;CACvE,CAAC;CACD,IAAI,qBAAqB,WAAW,GAClC,MAAM,IAAI,MACR,qBACG,KAAK,EAAE,MAAM,cAAc,GAAG,KAAK,IAAI,SAAS,CAAC,CACjD,KAAK,IAAI,CACd;CACF,MAAM,cAAc,SAAS;CAC7B,MAAM,OAAO,SAAS,MAAM;CAC5B,MAAMC,uBAAAA,mBAAmB;EACvB;EACA,MAAMC,6BAAAA,yBAAyB;GAAE;GAAO,QAAQ,OAAO;EAAW,CAAC;EACnE,MAAM,SAAS,KAAA,IAAY,MAAQ,OAAO;CAC5C,CAAC;CACD,QAAQ,OAAO,MAAM,aAAa,SAAS,SAAS,GAAG;AACzD;AAEA,KAAK,CAAC,CAAC,OAAO,UAAmB;CAC/B,QAAQ,OAAO,MACb,eAAe,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK,EAAE,GACxE;CACA,QAAQ,WAAW;AACrB,CAAC"}

package/dist/dependabot-cli.d.cts

@@ -0,0 +1 @@
+export {}

package/dist/dependabot-cli.d.mts

@@ -0,0 +1 @@
+export {}

package/dist/dependabot-cli.mjs

@@ -0,0 +1,67 @@
+#!/usr/bin/env node
+import { r as readToolchainInputs } from "./toolchain-guard.mjs";
+import { r as generateDependabotConfig } from "./toolchain-dependabot.mjs";
+import { t as parseToolchainPolicy } from "./toolchain-schema.mjs";
+import "./dependabot.mjs";
+import { n as generationDiagnostics, r as writeGeneratedFile, t as checkGeneratedOutput } from "./generated-file.mjs";
+import { join } from "node:path";
+import { readFile, realpath } from "node:fs/promises";
+//#region src/dependabot-cli.ts
+const usage = "Usage: stll-dependabot (run from repository root)\n       stll-dependabot --help";
+const main = async () => {
+	const args = process.argv.slice(2);
+	if (args.length === 1 && args.at(0) === "--help") {
+		process.stdout.write(`${usage}\n`);
+		return;
+	}
+	if (args.length !== 0) throw new Error(usage);
+	const root = await realpath(process.cwd());
+	const { files, trackedFiles, diagnostics } = readToolchainInputs(root);
+	const policy = parseToolchainPolicy(JSON.parse(await readFile(new URL("../toolchain.json", import.meta.url), "utf8")));
+	const yaml = join(root, ".github/dependabot.yaml");
+	const yml = join(root, ".github/dependabot.yml");
+	const yamlStat = await checkGeneratedOutput(yaml);
+	const ymlStat = await checkGeneratedOutput(yml);
+	const candidates = [{
+		relative: ".github/dependabot.yaml",
+		path: yaml,
+		stat: yamlStat
+	}, {
+		relative: ".github/dependabot.yml",
+		path: yml,
+		stat: ymlStat
+	}].filter(({ relative, stat }) => stat !== void 0 || trackedFiles.has(relative));
+	if (candidates.length > 1) throw new Error("keep exactly one Dependabot configuration: .yml or .yaml");
+	const selected = candidates.at(0) ?? {
+		relative: ".github/dependabot.yml",
+		path: yml,
+		stat: ymlStat
+	};
+	const remainingDiagnostics = await generationDiagnostics({
+		diagnostics,
+		outputs: [{
+			relative: selected.relative,
+			destination: selected.path
+		}]
+	});
+	if (remainingDiagnostics.length !== 0) throw new Error(remainingDiagnostics.map(({ path, message }) => `${path}: ${message}`).join("\n"));
+	const destination = selected.path;
+	const mode = selected.stat?.mode;
+	await writeGeneratedFile({
+		destination,
+		text: generateDependabotConfig({
+			files,
+			policy: policy.dependabot
+		}),
+		mode: mode === void 0 ? 420 : mode & 511
+	});
+	process.stdout.write(`Generated ${selected.relative}\n`);
+};
+main().catch((error) => {
+	process.stderr.write(`dependabot: ${error instanceof Error ? error.message : String(error)}\n`);
+	process.exitCode = 1;
+});
+//#endregion
+export {};
+
+//# sourceMappingURL=dependabot-cli.mjs.map

package/dist/dependabot-cli.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"dependabot-cli.mjs","names":[],"sources":["../src/dependabot-cli.ts"],"sourcesContent":["#!/usr/bin/env node\nimport { readFile, realpath } from \"node:fs/promises\";\nimport { join } from \"node:path\";\n\nimport { generateDependabotConfig, parseToolchainPolicy } from \"./dependabot\";\nimport {\n  checkGeneratedOutput,\n  generationDiagnostics,\n  writeGeneratedFile,\n} from \"./generated-file\";\nimport { readToolchainInputs } from \"./toolchain-guard\";\n\nconst usage =\n  \"Usage: stll-dependabot (run from repository root)\\n       stll-dependabot --help\";\nconst main = async () => {\n  const args = process.argv.slice(2);\n  if (args.length === 1 && args.at(0) === \"--help\") {\n    process.stdout.write(`${usage}\\n`);\n    return;\n  }\n  if (args.length !== 0) throw new Error(usage);\n  const root = await realpath(process.cwd());\n  const { files, trackedFiles, diagnostics } = readToolchainInputs(root);\n  const policy = parseToolchainPolicy(\n    JSON.parse(\n      await readFile(new URL(\"../toolchain.json\", import.meta.url), \"utf8\"),\n    ),\n  );\n  const yaml = join(root, \".github/dependabot.yaml\");\n  const yml = join(root, \".github/dependabot.yml\");\n  const yamlStat = await checkGeneratedOutput(yaml);\n  const ymlStat = await checkGeneratedOutput(yml);\n  const candidates = [\n    { relative: \".github/dependabot.yaml\", path: yaml, stat: yamlStat },\n    { relative: \".github/dependabot.yml\", path: yml, stat: ymlStat },\n  ].filter(\n    ({ relative, stat }) => stat !== undefined || trackedFiles.has(relative),\n  );\n  if (candidates.length > 1)\n    throw new Error(\"keep exactly one Dependabot configuration: .yml or .yaml\");\n  const selected = candidates.at(0) ?? {\n    relative: \".github/dependabot.yml\",\n    path: yml,\n    stat: ymlStat,\n  };\n  const remainingDiagnostics = await generationDiagnostics({\n    diagnostics,\n    outputs: [{ relative: selected.relative, destination: selected.path }],\n  });\n  if (remainingDiagnostics.length !== 0)\n    throw new Error(\n      remainingDiagnostics\n        .map(({ path, message }) => `${path}: ${message}`)\n        .join(\"\\n\"),\n    );\n  const destination = selected.path;\n  const mode = selected.stat?.mode;\n  await writeGeneratedFile({\n    destination,\n    text: generateDependabotConfig({ files, policy: policy.dependabot }),\n    mode: mode === undefined ? 0o644 : mode & 0o777,\n  });\n  process.stdout.write(`Generated ${selected.relative}\\n`);\n};\n\nmain().catch((error: unknown) => {\n  process.stderr.write(\n    `dependabot: ${error instanceof Error ? error.message : String(error)}\\n`,\n  );\n  process.exitCode = 1;\n});\n"],"mappings":";;;;;;;;;AAYA,MAAM,QACJ;AACF,MAAM,OAAO,YAAY;CACvB,MAAM,OAAO,QAAQ,KAAK,MAAM,CAAC;CACjC,IAAI,KAAK,WAAW,KAAK,KAAK,GAAG,CAAC,MAAM,UAAU;EAChD,QAAQ,OAAO,MAAM,GAAG,MAAM,GAAG;EACjC;CACF;CACA,IAAI,KAAK,WAAW,GAAG,MAAM,IAAI,MAAM,KAAK;CAC5C,MAAM,OAAO,MAAM,SAAS,QAAQ,IAAI,CAAC;CACzC,MAAM,EAAE,OAAO,cAAc,gBAAgB,oBAAoB,IAAI;CACrE,MAAM,SAAS,qBACb,KAAK,MACH,MAAM,SAAS,IAAI,IAAI,qBAAqB,YAAY,GAAG,GAAG,MAAM,CACtE,CACF;CACA,MAAM,OAAO,KAAK,MAAM,yBAAyB;CACjD,MAAM,MAAM,KAAK,MAAM,wBAAwB;CAC/C,MAAM,WAAW,MAAM,qBAAqB,IAAI;CAChD,MAAM,UAAU,MAAM,qBAAqB,GAAG;CAC9C,MAAM,aAAa,CACjB;EAAE,UAAU;EAA2B,MAAM;EAAM,MAAM;CAAS,GAClE;EAAE,UAAU;EAA0B,MAAM;EAAK,MAAM;CAAQ,CACjE,CAAC,CAAC,QACC,EAAE,UAAU,WAAW,SAAS,KAAA,KAAa,aAAa,IAAI,QAAQ,CACzE;CACA,IAAI,WAAW,SAAS,GACtB,MAAM,IAAI,MAAM,0DAA0D;CAC5E,MAAM,WAAW,WAAW,GAAG,CAAC,KAAK;EACnC,UAAU;EACV,MAAM;EACN,MAAM;CACR;CACA,MAAM,uBAAuB,MAAM,sBAAsB;EACvD;EACA,SAAS,CAAC;GAAE,UAAU,SAAS;GAAU,aAAa,SAAS;EAAK,CAAC;CACvE,CAAC;CACD,IAAI,qBAAqB,WAAW,GAClC,MAAM,IAAI,MACR,qBACG,KAAK,EAAE,MAAM,cAAc,GAAG,KAAK,IAAI,SAAS,CAAC,CACjD,KAAK,IAAI,CACd;CACF,MAAM,cAAc,SAAS;CAC7B,MAAM,OAAO,SAAS,MAAM;CAC5B,MAAM,mBAAmB;EACvB;EACA,MAAM,yBAAyB;GAAE;GAAO,QAAQ,OAAO;EAAW,CAAC;EACnE,MAAM,SAAS,KAAA,IAAY,MAAQ,OAAO;CAC5C,CAAC;CACD,QAAQ,OAAO,MAAM,aAAa,SAAS,SAAS,GAAG;AACzD;AAEA,KAAK,CAAC,CAAC,OAAO,UAAmB;CAC/B,QAAQ,OAAO,MACb,eAAe,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK,EAAE,GACxE;CACA,QAAQ,WAAW;AACrB,CAAC"}

package/dist/dependabot.cjs

@@ -0,0 +1,5 @@
+Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
+const require_toolchain_dependabot = require("./toolchain-dependabot.cjs");
+const require_toolchain_schema = require("./toolchain-schema.cjs");
+exports.generateDependabotConfig = require_toolchain_dependabot.generateDependabotConfig;
+exports.parseToolchainPolicy = require_toolchain_schema.parseToolchainPolicy;