@stll/oxlint-config 1.7.0 → 1.9.0

package/README.md

@@ -75,10 +75,12 @@ Shared-pin Dependabot ignores must contain only `dependency-name` and
 `version-update:semver-minor`, and `version-update:semver-patch`. This ignores
 version updates while preserving security update pull requests.
 
-Set `packageManager` to `bun@` followed by the policy's `bun` value, and pin
-`bun-types` to that same value. Dependency pins can live in default or named
-catalogs, including Bun's `workspaces` catalogs. Bun image tags, version
-files, and mise/asdf entries also inherit the policy pin.
+The policy's `bun` value is the minimum Bun. Set `packageManager` to `bun@`
+followed by one exact release at or above it, and pin `bun-types` to that same
+release. Dependency pins can live in default or named catalogs, including
+Bun's `workspaces` catalogs. Bun image tags, version files, and mise/asdf
+entries also inherit the repository's pin, so a repository can take a newer
+Bun without a policy release.
 
 Configure `oven-sh/setup-bun` with a tracked manifest as its version source:
 
@@ -686,7 +688,7 @@ including `engines`, are rejected. Real npm and pnpm pack tests compare the
 modeled contract with each tarball manifest.
 
 Build adapters use the installed configuration loaders and bind their behavior to
-tsdown 0.22.9, Vite 8.1.5, or @nuxt/module-builder 1.0.3 (unbuild 3.6.1 and
+tsdown 0.23.1, Vite 8.3.4, or @nuxt/module-builder 1.0.3 (unbuild 3.6.1 and
 mkdist 2.4.1). They record final transform targets, including separate Nuxt module
 and runtime entries. No syntax lowering records `esnext`.
 Only exact single build invocations (`tsdown`, `vite build`, or
@@ -715,8 +717,8 @@ export default {
 };
 ```
 
-This adapter requires consumer-installed `vite-plugin-dts` 5.0.3 and its
-`unplugin-dts` 1.0.3 implementation. Its dependency scope must provide TypeScript
+This adapter requires consumer-installed `vite-plugin-dts` 5.1.2 and its
+`unplugin-dts` 1.1.2 implementation. Its dependency scope must provide TypeScript
 6.0.3 as `typescript` or the plugin's `@typescript/typescript6` fallback.
 Unsupported versions fail explicitly.
 The resolver proves a direct helper import and call in a literal plugin array;

package/dist/cloud-setup-cli.cjs

@@ -2,6 +2,7 @@
 Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
 const require_generated_file = require("./generated-file.cjs");
 const require_toolchain_inputs = require("./toolchain-inputs.cjs");
+const require_toolchain_bun = require("./toolchain-bun.cjs");
 const require_toolchain_guard = require("./toolchain-guard.cjs");
 const require_toolchain_schema = require("./toolchain-schema.cjs");
 let node_fs_promises = require("node:fs/promises");
@@ -56,7 +57,11 @@ const main = async () => {
 	if (cloud === void 0) throw new Error("requires an explicit cloud declaration");
 	const nodeVersion = files[".node-version"];
 	if (nodeVersion === void 0) throw new Error("requires tracked root .node-version");
-	const policy = require_toolchain_schema.parseToolchainPolicy(JSON.parse(await (0, node_fs_promises.readFile)(new URL("../toolchain.json", require("url").pathToFileURL(__filename).href), "utf8")));
+	const sharedPolicy = require_toolchain_schema.parseToolchainPolicy(JSON.parse(await (0, node_fs_promises.readFile)(new URL("../toolchain.json", require("url").pathToFileURL(__filename).href), "utf8")));
+	const policy = {
+		...sharedPolicy,
+		bun: require_toolchain_bun.repositoryBun(sharedPolicy.bun, files["package.json"])
+	};
 	const script = require_toolchain_inputs.generateCloudSetup({
 		policy,
 		cloud,

package/dist/cloud-setup-cli.cjs.map

@@ -1 +1 @@
-{"version":3,"file":"cloud-setup-cli.cjs","names":["checkGeneratedOutput","open","constants","cloudClaudeSettingsPath","cloudSessionStartFix","realpath","readToolchainInputs","join","cloudSetupPath","generationDiagnostics","parseToolchainConfiguration","parseToolchainPolicy","readFile","generateCloudSetup","mergeCloudClaudeSettings","writeGeneratedFile"],"sources":["../src/cloud-setup-cli.ts"],"sourcesContent":["#!/usr/bin/env node\nimport { constants } from \"node:fs\";\nimport { open, readFile, realpath } from \"node:fs/promises\";\nimport { join } from \"node:path\";\n\nimport { cloudSetupPath, generateCloudSetup } from \"./cloud-setup\";\nimport {\n  cloudClaudeSettingsPath,\n  cloudSessionStartFix,\n  mergeCloudClaudeSettings,\n} from \"./cloud-setup-claude\";\nimport {\n  checkGeneratedOutput,\n  generationDiagnostics,\n  writeGeneratedFile,\n} from \"./generated-file\";\nimport {\n  parseToolchainConfiguration,\n  readToolchainInputs,\n} from \"./toolchain-guard\";\nimport { parseToolchainPolicy } from \"./toolchain-schema\";\n\nconst usage =\n  \"Usage: stll-cloud-setup (run from repository root)\\n       stll-cloud-setup --help\";\nconst readClaudeSettings = async (destination: string) => {\n  try {\n    if ((await checkGeneratedOutput(destination)) === undefined)\n      return undefined;\n    const input = await open(\n      destination,\n      constants.O_RDONLY | constants.O_NOFOLLOW,\n    );\n    try {\n      const opened = await input.stat();\n      if (!opened.isFile() || opened.nlink !== 1)\n        throw new Error(\n          \"settings must be a single-link regular repository file\",\n        );\n      return { text: await input.readFile(\"utf8\"), mode: opened.mode & 0o777 };\n    } finally {\n      await input.close();\n    }\n  } catch (error) {\n    throw new Error(\n      `cannot safely merge ${cloudClaudeSettingsPath}: ${error instanceof Error ? error.message : String(error)}; ${cloudSessionStartFix}`,\n    );\n  }\n};\n\nconst main = async () => {\n  const args = process.argv.slice(2);\n  if (args.length === 1 && args.at(0) === \"--help\") {\n    process.stdout.write(`${usage}\\n`);\n    return;\n  }\n  if (args.length !== 0) throw new Error(usage);\n  const root = await realpath(process.cwd());\n  const { files, diagnostics } = readToolchainInputs(root);\n  const destination = join(root, cloudSetupPath);\n  const settingsDestination = join(root, cloudClaudeSettingsPath);\n  // Validate settings separately to retain actionable merge diagnostics.\n  const settings = await readClaudeSettings(settingsDestination);\n  const remainingDiagnostics = await generationDiagnostics({\n    diagnostics,\n    outputs: [\n      { relative: cloudSetupPath, destination },\n      { relative: cloudClaudeSettingsPath, destination: settingsDestination },\n    ],\n  });\n  if (remainingDiagnostics.length > 0)\n    throw new Error(\n      remainingDiagnostics\n        .map(\n          ({ path, message }) =>\n            `${path}: ${message}${path === cloudClaudeSettingsPath ? `; ${cloudSessionStartFix}` : \"\"}`,\n        )\n        .join(\"\\n\"),\n    );\n  const text = files[\"stll-toolchain.json\"];\n  if (text === undefined)\n    throw new Error(\"requires tracked stll-toolchain.json\");\n  const { cloud, rustExceptions } = parseToolchainConfiguration(\n    JSON.parse(text),\n  );\n  if (cloud === undefined)\n    throw new Error(\"requires an explicit cloud declaration\");\n  const nodeVersion = files[\".node-version\"];\n  if (nodeVersion === undefined)\n    throw new Error(\"requires tracked root .node-version\");\n  const policy = parseToolchainPolicy(\n    JSON.parse(\n      await readFile(new URL(\"../toolchain.json\", import.meta.url), \"utf8\"),\n    ),\n  );\n  const script = generateCloudSetup({\n    policy,\n    cloud,\n    nodeVersion: nodeVersion.trim(),\n    files,\n    rustExceptions,\n  });\n  const mergedSettings = mergeCloudClaudeSettings(settings?.text);\n  await writeGeneratedFile({ destination, text: script, mode: 0o755 });\n  if (mergedSettings !== settings?.text)\n    await writeGeneratedFile({\n      destination: settingsDestination,\n      text: mergedSettings,\n      mode: settings?.mode ?? 0o644,\n    });\n  process.stdout.write(\n    `Generated ${cloudSetupPath} and ${cloudClaudeSettingsPath}\\n`,\n  );\n};\n\nmain().catch((error: unknown) => {\n  process.stderr.write(\n    `cloud-setup: ${error instanceof Error ? error.message : String(error)}\\n`,\n  );\n  process.exitCode = 1;\n});\n"],"mappings":";;;;;;;;;;AAsBA,MAAM,QACJ;AACF,MAAM,qBAAqB,OAAO,gBAAwB;CACxD,IAAI;EACF,IAAK,MAAMA,uBAAAA,qBAAqB,WAAW,MAAO,KAAA,GAChD,OAAO,KAAA;EACT,MAAM,QAAQ,OAAA,GAAMC,iBAAAA,KAAAA,CAClB,aACAC,QAAAA,UAAU,WAAWA,QAAAA,UAAU,UACjC;EACA,IAAI;GACF,MAAM,SAAS,MAAM,MAAM,KAAK;GAChC,IAAI,CAAC,OAAO,OAAO,KAAK,OAAO,UAAU,GACvC,MAAM,IAAI,MACR,wDACF;GACF,OAAO;IAAE,MAAM,MAAM,MAAM,SAAS,MAAM;IAAG,MAAM,OAAO,OAAO;GAAM;EACzE,UAAU;GACR,MAAM,MAAM,MAAM;EACpB;CACF,SAAS,OAAO;EACd,MAAM,IAAI,MACR,uBAAuBC,yBAAAA,wBAAwB,IAAI,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK,EAAE,IAAIC,yBAAAA,sBAChH;CACF;AACF;AAEA,MAAM,OAAO,YAAY;CACvB,MAAM,OAAO,QAAQ,KAAK,MAAM,CAAC;CACjC,IAAI,KAAK,WAAW,KAAK,KAAK,GAAG,CAAC,MAAM,UAAU;EAChD,QAAQ,OAAO,MAAM,GAAG,MAAM,GAAG;EACjC;CACF;CACA,IAAI,KAAK,WAAW,GAAG,MAAM,IAAI,MAAM,KAAK;CAC5C,MAAM,OAAO,OAAA,GAAMC,iBAAAA,SAAAA,CAAS,QAAQ,IAAI,CAAC;CACzC,MAAM,EAAE,OAAO,gBAAgBC,wBAAAA,oBAAoB,IAAI;CACvD,MAAM,eAAA,GAAcC,UAAAA,KAAAA,CAAK,MAAMC,yBAAAA,cAAc;CAC7C,MAAM,uBAAA,GAAsBD,UAAAA,KAAAA,CAAK,MAAMJ,yBAAAA,uBAAuB;CAE9D,MAAM,WAAW,MAAM,mBAAmB,mBAAmB;CAC7D,MAAM,uBAAuB,MAAMM,uBAAAA,sBAAsB;EACvD;EACA,SAAS,CACP;GAAE,UAAUD,yBAAAA;GAAgB;EAAY,GACxC;GAAE,UAAUL,yBAAAA;GAAyB,aAAa;EAAoB,CACxE;CACF,CAAC;CACD,IAAI,qBAAqB,SAAS,GAChC,MAAM,IAAI,MACR,qBACG,KACE,EAAE,MAAM,cACP,GAAG,KAAK,IAAI,UAAU,SAAA,0BAAmC,KAAKC,yBAAAA,yBAAyB,IAC3F,CAAC,CACA,KAAK,IAAI,CACd;CACF,MAAM,OAAO,MAAM;CACnB,IAAI,SAAS,KAAA,GACX,MAAM,IAAI,MAAM,sCAAsC;CACxD,MAAM,EAAE,OAAO,mBAAmBM,wBAAAA,4BAChC,KAAK,MAAM,IAAI,CACjB;CACA,IAAI,UAAU,KAAA,GACZ,MAAM,IAAI,MAAM,wCAAwC;CAC1D,MAAM,cAAc,MAAM;CAC1B,IAAI,gBAAgB,KAAA,GAClB,MAAM,IAAI,MAAM,qCAAqC;CACvD,MAAM,SAASC,yBAAAA,qBACb,KAAK,MACH,OAAA,GAAMC,iBAAAA,SAAAA,CAAS,IAAI,IAAI,qBAAA,QAAA,KAAA,CAAA,CAAA,cAAA,UAAA,CAAA,CAAA,IAAoC,GAAG,MAAM,CACtE,CACF;CACA,MAAM,SAASC,yBAAAA,mBAAmB;EAChC;EACA;EACA,aAAa,YAAY,KAAK;EAC9B;EACA;CACF,CAAC;CACD,MAAM,iBAAiBC,yBAAAA,yBAAyB,UAAU,IAAI;CAC9D,MAAMC,uBAAAA,mBAAmB;EAAE;EAAa,MAAM;EAAQ,MAAM;CAAM,CAAC;CACnE,IAAI,mBAAmB,UAAU,MAC/B,MAAMA,uBAAAA,mBAAmB;EACvB,aAAa;EACb,MAAM;EACN,MAAM,UAAU,QAAQ;CAC1B,CAAC;CACH,QAAQ,OAAO,MACb,aAAaP,yBAAAA,eAAe,OAAOL,yBAAAA,wBAAwB,GAC7D;AACF;AAEA,KAAK,CAAC,CAAC,OAAO,UAAmB;CAC/B,QAAQ,OAAO,MACb,gBAAgB,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK,EAAE,GACzE;CACA,QAAQ,WAAW;AACrB,CAAC"}
+{"version":3,"file":"cloud-setup-cli.cjs","names":["checkGeneratedOutput","open","constants","cloudClaudeSettingsPath","cloudSessionStartFix","realpath","readToolchainInputs","join","cloudSetupPath","generationDiagnostics","parseToolchainConfiguration","parseToolchainPolicy","readFile","repositoryBun","generateCloudSetup","mergeCloudClaudeSettings","writeGeneratedFile"],"sources":["../src/cloud-setup-cli.ts"],"sourcesContent":["#!/usr/bin/env node\nimport { constants } from \"node:fs\";\nimport { open, readFile, realpath } from \"node:fs/promises\";\nimport { join } from \"node:path\";\n\nimport { cloudSetupPath, generateCloudSetup } from \"./cloud-setup\";\nimport {\n  cloudClaudeSettingsPath,\n  cloudSessionStartFix,\n  mergeCloudClaudeSettings,\n} from \"./cloud-setup-claude\";\nimport {\n  checkGeneratedOutput,\n  generationDiagnostics,\n  writeGeneratedFile,\n} from \"./generated-file\";\nimport { repositoryBun } from \"./toolchain-bun\";\nimport {\n  parseToolchainConfiguration,\n  readToolchainInputs,\n} from \"./toolchain-guard\";\nimport { parseToolchainPolicy } from \"./toolchain-schema\";\n\nconst usage =\n  \"Usage: stll-cloud-setup (run from repository root)\\n       stll-cloud-setup --help\";\nconst readClaudeSettings = async (destination: string) => {\n  try {\n    if ((await checkGeneratedOutput(destination)) === undefined)\n      return undefined;\n    const input = await open(\n      destination,\n      constants.O_RDONLY | constants.O_NOFOLLOW,\n    );\n    try {\n      const opened = await input.stat();\n      if (!opened.isFile() || opened.nlink !== 1)\n        throw new Error(\n          \"settings must be a single-link regular repository file\",\n        );\n      return { text: await input.readFile(\"utf8\"), mode: opened.mode & 0o777 };\n    } finally {\n      await input.close();\n    }\n  } catch (error) {\n    throw new Error(\n      `cannot safely merge ${cloudClaudeSettingsPath}: ${error instanceof Error ? error.message : String(error)}; ${cloudSessionStartFix}`,\n    );\n  }\n};\n\nconst main = async () => {\n  const args = process.argv.slice(2);\n  if (args.length === 1 && args.at(0) === \"--help\") {\n    process.stdout.write(`${usage}\\n`);\n    return;\n  }\n  if (args.length !== 0) throw new Error(usage);\n  const root = await realpath(process.cwd());\n  const { files, diagnostics } = readToolchainInputs(root);\n  const destination = join(root, cloudSetupPath);\n  const settingsDestination = join(root, cloudClaudeSettingsPath);\n  // Validate settings separately to retain actionable merge diagnostics.\n  const settings = await readClaudeSettings(settingsDestination);\n  const remainingDiagnostics = await generationDiagnostics({\n    diagnostics,\n    outputs: [\n      { relative: cloudSetupPath, destination },\n      { relative: cloudClaudeSettingsPath, destination: settingsDestination },\n    ],\n  });\n  if (remainingDiagnostics.length > 0)\n    throw new Error(\n      remainingDiagnostics\n        .map(\n          ({ path, message }) =>\n            `${path}: ${message}${path === cloudClaudeSettingsPath ? `; ${cloudSessionStartFix}` : \"\"}`,\n        )\n        .join(\"\\n\"),\n    );\n  const text = files[\"stll-toolchain.json\"];\n  if (text === undefined)\n    throw new Error(\"requires tracked stll-toolchain.json\");\n  const { cloud, rustExceptions } = parseToolchainConfiguration(\n    JSON.parse(text),\n  );\n  if (cloud === undefined)\n    throw new Error(\"requires an explicit cloud declaration\");\n  const nodeVersion = files[\".node-version\"];\n  if (nodeVersion === undefined)\n    throw new Error(\"requires tracked root .node-version\");\n  const sharedPolicy = parseToolchainPolicy(\n    JSON.parse(\n      await readFile(new URL(\"../toolchain.json\", import.meta.url), \"utf8\"),\n    ),\n  );\n  const policy = {\n    ...sharedPolicy,\n    bun: repositoryBun(sharedPolicy.bun, files[\"package.json\"]),\n  };\n  const script = generateCloudSetup({\n    policy,\n    cloud,\n    nodeVersion: nodeVersion.trim(),\n    files,\n    rustExceptions,\n  });\n  const mergedSettings = mergeCloudClaudeSettings(settings?.text);\n  await writeGeneratedFile({ destination, text: script, mode: 0o755 });\n  if (mergedSettings !== settings?.text)\n    await writeGeneratedFile({\n      destination: settingsDestination,\n      text: mergedSettings,\n      mode: settings?.mode ?? 0o644,\n    });\n  process.stdout.write(\n    `Generated ${cloudSetupPath} and ${cloudClaudeSettingsPath}\\n`,\n  );\n};\n\nmain().catch((error: unknown) => {\n  process.stderr.write(\n    `cloud-setup: ${error instanceof Error ? error.message : String(error)}\\n`,\n  );\n  process.exitCode = 1;\n});\n"],"mappings":";;;;;;;;;;;AAuBA,MAAM,QACJ;AACF,MAAM,qBAAqB,OAAO,gBAAwB;CACxD,IAAI;EACF,IAAK,MAAMA,uBAAAA,qBAAqB,WAAW,MAAO,KAAA,GAChD,OAAO,KAAA;EACT,MAAM,QAAQ,OAAA,GAAMC,iBAAAA,KAAAA,CAClB,aACAC,QAAAA,UAAU,WAAWA,QAAAA,UAAU,UACjC;EACA,IAAI;GACF,MAAM,SAAS,MAAM,MAAM,KAAK;GAChC,IAAI,CAAC,OAAO,OAAO,KAAK,OAAO,UAAU,GACvC,MAAM,IAAI,MACR,wDACF;GACF,OAAO;IAAE,MAAM,MAAM,MAAM,SAAS,MAAM;IAAG,MAAM,OAAO,OAAO;GAAM;EACzE,UAAU;GACR,MAAM,MAAM,MAAM;EACpB;CACF,SAAS,OAAO;EACd,MAAM,IAAI,MACR,uBAAuBC,yBAAAA,wBAAwB,IAAI,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK,EAAE,IAAIC,yBAAAA,sBAChH;CACF;AACF;AAEA,MAAM,OAAO,YAAY;CACvB,MAAM,OAAO,QAAQ,KAAK,MAAM,CAAC;CACjC,IAAI,KAAK,WAAW,KAAK,KAAK,GAAG,CAAC,MAAM,UAAU;EAChD,QAAQ,OAAO,MAAM,GAAG,MAAM,GAAG;EACjC;CACF;CACA,IAAI,KAAK,WAAW,GAAG,MAAM,IAAI,MAAM,KAAK;CAC5C,MAAM,OAAO,OAAA,GAAMC,iBAAAA,SAAAA,CAAS,QAAQ,IAAI,CAAC;CACzC,MAAM,EAAE,OAAO,gBAAgBC,wBAAAA,oBAAoB,IAAI;CACvD,MAAM,eAAA,GAAcC,UAAAA,KAAAA,CAAK,MAAMC,yBAAAA,cAAc;CAC7C,MAAM,uBAAA,GAAsBD,UAAAA,KAAAA,CAAK,MAAMJ,yBAAAA,uBAAuB;CAE9D,MAAM,WAAW,MAAM,mBAAmB,mBAAmB;CAC7D,MAAM,uBAAuB,MAAMM,uBAAAA,sBAAsB;EACvD;EACA,SAAS,CACP;GAAE,UAAUD,yBAAAA;GAAgB;EAAY,GACxC;GAAE,UAAUL,yBAAAA;GAAyB,aAAa;EAAoB,CACxE;CACF,CAAC;CACD,IAAI,qBAAqB,SAAS,GAChC,MAAM,IAAI,MACR,qBACG,KACE,EAAE,MAAM,cACP,GAAG,KAAK,IAAI,UAAU,SAAA,0BAAmC,KAAKC,yBAAAA,yBAAyB,IAC3F,CAAC,CACA,KAAK,IAAI,CACd;CACF,MAAM,OAAO,MAAM;CACnB,IAAI,SAAS,KAAA,GACX,MAAM,IAAI,MAAM,sCAAsC;CACxD,MAAM,EAAE,OAAO,mBAAmBM,wBAAAA,4BAChC,KAAK,MAAM,IAAI,CACjB;CACA,IAAI,UAAU,KAAA,GACZ,MAAM,IAAI,MAAM,wCAAwC;CAC1D,MAAM,cAAc,MAAM;CAC1B,IAAI,gBAAgB,KAAA,GAClB,MAAM,IAAI,MAAM,qCAAqC;CACvD,MAAM,eAAeC,yBAAAA,qBACnB,KAAK,MACH,OAAA,GAAMC,iBAAAA,SAAAA,CAAS,IAAI,IAAI,qBAAA,QAAA,KAAA,CAAA,CAAA,cAAA,UAAA,CAAA,CAAA,IAAoC,GAAG,MAAM,CACtE,CACF;CACA,MAAM,SAAS;EACb,GAAG;EACH,KAAKC,sBAAAA,cAAc,aAAa,KAAK,MAAM,eAAe;CAC5D;CACA,MAAM,SAASC,yBAAAA,mBAAmB;EAChC;EACA;EACA,aAAa,YAAY,KAAK;EAC9B;EACA;CACF,CAAC;CACD,MAAM,iBAAiBC,yBAAAA,yBAAyB,UAAU,IAAI;CAC9D,MAAMC,uBAAAA,mBAAmB;EAAE;EAAa,MAAM;EAAQ,MAAM;CAAM,CAAC;CACnE,IAAI,mBAAmB,UAAU,MAC/B,MAAMA,uBAAAA,mBAAmB;EACvB,aAAa;EACb,MAAM;EACN,MAAM,UAAU,QAAQ;CAC1B,CAAC;CACH,QAAQ,OAAO,MACb,aAAaR,yBAAAA,eAAe,OAAOL,yBAAAA,wBAAwB,GAC7D;AACF;AAEA,KAAK,CAAC,CAAC,OAAO,UAAmB;CAC/B,QAAQ,OAAO,MACb,gBAAgB,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK,EAAE,GACzE;CACA,QAAQ,WAAW;AACrB,CAAC"}

package/dist/cloud-setup-cli.mjs

@@ -1,6 +1,7 @@
 #!/usr/bin/env node
 import { n as generationDiagnostics, r as writeGeneratedFile, t as checkGeneratedOutput } from "./generated-file.mjs";
 import { C as cloudSetupPath, S as mergeCloudClaudeSettings, v as cloudClaudeSettingsPath, w as generateCloudSetup, y as cloudSessionStartFix } from "./toolchain-inputs.mjs";
+import { t as repositoryBun } from "./toolchain-bun.mjs";
 import { n as parseToolchainConfiguration, r as readToolchainInputs } from "./toolchain-guard.mjs";
 import { t as parseToolchainPolicy } from "./toolchain-schema.mjs";
 import { open, readFile, realpath } from "node:fs/promises";
@@ -55,7 +56,11 @@ const main = async () => {
 	if (cloud === void 0) throw new Error("requires an explicit cloud declaration");
 	const nodeVersion = files[".node-version"];
 	if (nodeVersion === void 0) throw new Error("requires tracked root .node-version");
-	const policy = parseToolchainPolicy(JSON.parse(await readFile(new URL("../toolchain.json", import.meta.url), "utf8")));
+	const sharedPolicy = parseToolchainPolicy(JSON.parse(await readFile(new URL("../toolchain.json", import.meta.url), "utf8")));
+	const policy = {
+		...sharedPolicy,
+		bun: repositoryBun(sharedPolicy.bun, files["package.json"])
+	};
 	const script = generateCloudSetup({
 		policy,
 		cloud,

package/dist/cloud-setup-cli.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"cloud-setup-cli.mjs","names":[],"sources":["../src/cloud-setup-cli.ts"],"sourcesContent":["#!/usr/bin/env node\nimport { constants } from \"node:fs\";\nimport { open, readFile, realpath } from \"node:fs/promises\";\nimport { join } from \"node:path\";\n\nimport { cloudSetupPath, generateCloudSetup } from \"./cloud-setup\";\nimport {\n  cloudClaudeSettingsPath,\n  cloudSessionStartFix,\n  mergeCloudClaudeSettings,\n} from \"./cloud-setup-claude\";\nimport {\n  checkGeneratedOutput,\n  generationDiagnostics,\n  writeGeneratedFile,\n} from \"./generated-file\";\nimport {\n  parseToolchainConfiguration,\n  readToolchainInputs,\n} from \"./toolchain-guard\";\nimport { parseToolchainPolicy } from \"./toolchain-schema\";\n\nconst usage =\n  \"Usage: stll-cloud-setup (run from repository root)\\n       stll-cloud-setup --help\";\nconst readClaudeSettings = async (destination: string) => {\n  try {\n    if ((await checkGeneratedOutput(destination)) === undefined)\n      return undefined;\n    const input = await open(\n      destination,\n      constants.O_RDONLY | constants.O_NOFOLLOW,\n    );\n    try {\n      const opened = await input.stat();\n      if (!opened.isFile() || opened.nlink !== 1)\n        throw new Error(\n          \"settings must be a single-link regular repository file\",\n        );\n      return { text: await input.readFile(\"utf8\"), mode: opened.mode & 0o777 };\n    } finally {\n      await input.close();\n    }\n  } catch (error) {\n    throw new Error(\n      `cannot safely merge ${cloudClaudeSettingsPath}: ${error instanceof Error ? error.message : String(error)}; ${cloudSessionStartFix}`,\n    );\n  }\n};\n\nconst main = async () => {\n  const args = process.argv.slice(2);\n  if (args.length === 1 && args.at(0) === \"--help\") {\n    process.stdout.write(`${usage}\\n`);\n    return;\n  }\n  if (args.length !== 0) throw new Error(usage);\n  const root = await realpath(process.cwd());\n  const { files, diagnostics } = readToolchainInputs(root);\n  const destination = join(root, cloudSetupPath);\n  const settingsDestination = join(root, cloudClaudeSettingsPath);\n  // Validate settings separately to retain actionable merge diagnostics.\n  const settings = await readClaudeSettings(settingsDestination);\n  const remainingDiagnostics = await generationDiagnostics({\n    diagnostics,\n    outputs: [\n      { relative: cloudSetupPath, destination },\n      { relative: cloudClaudeSettingsPath, destination: settingsDestination },\n    ],\n  });\n  if (remainingDiagnostics.length > 0)\n    throw new Error(\n      remainingDiagnostics\n        .map(\n          ({ path, message }) =>\n            `${path}: ${message}${path === cloudClaudeSettingsPath ? `; ${cloudSessionStartFix}` : \"\"}`,\n        )\n        .join(\"\\n\"),\n    );\n  const text = files[\"stll-toolchain.json\"];\n  if (text === undefined)\n    throw new Error(\"requires tracked stll-toolchain.json\");\n  const { cloud, rustExceptions } = parseToolchainConfiguration(\n    JSON.parse(text),\n  );\n  if (cloud === undefined)\n    throw new Error(\"requires an explicit cloud declaration\");\n  const nodeVersion = files[\".node-version\"];\n  if (nodeVersion === undefined)\n    throw new Error(\"requires tracked root .node-version\");\n  const policy = parseToolchainPolicy(\n    JSON.parse(\n      await readFile(new URL(\"../toolchain.json\", import.meta.url), \"utf8\"),\n    ),\n  );\n  const script = generateCloudSetup({\n    policy,\n    cloud,\n    nodeVersion: nodeVersion.trim(),\n    files,\n    rustExceptions,\n  });\n  const mergedSettings = mergeCloudClaudeSettings(settings?.text);\n  await writeGeneratedFile({ destination, text: script, mode: 0o755 });\n  if (mergedSettings !== settings?.text)\n    await writeGeneratedFile({\n      destination: settingsDestination,\n      text: mergedSettings,\n      mode: settings?.mode ?? 0o644,\n    });\n  process.stdout.write(\n    `Generated ${cloudSetupPath} and ${cloudClaudeSettingsPath}\\n`,\n  );\n};\n\nmain().catch((error: unknown) => {\n  process.stderr.write(\n    `cloud-setup: ${error instanceof Error ? error.message : String(error)}\\n`,\n  );\n  process.exitCode = 1;\n});\n"],"mappings":";;;;;;;;;AAsBA,MAAM,QACJ;AACF,MAAM,qBAAqB,OAAO,gBAAwB;CACxD,IAAI;EACF,IAAK,MAAM,qBAAqB,WAAW,MAAO,KAAA,GAChD,OAAO,KAAA;EACT,MAAM,QAAQ,MAAM,KAClB,aACA,UAAU,WAAW,UAAU,UACjC;EACA,IAAI;GACF,MAAM,SAAS,MAAM,MAAM,KAAK;GAChC,IAAI,CAAC,OAAO,OAAO,KAAK,OAAO,UAAU,GACvC,MAAM,IAAI,MACR,wDACF;GACF,OAAO;IAAE,MAAM,MAAM,MAAM,SAAS,MAAM;IAAG,MAAM,OAAO,OAAO;GAAM;EACzE,UAAU;GACR,MAAM,MAAM,MAAM;EACpB;CACF,SAAS,OAAO;EACd,MAAM,IAAI,MACR,uBAAuB,wBAAwB,IAAI,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK,EAAE,IAAI,sBAChH;CACF;AACF;AAEA,MAAM,OAAO,YAAY;CACvB,MAAM,OAAO,QAAQ,KAAK,MAAM,CAAC;CACjC,IAAI,KAAK,WAAW,KAAK,KAAK,GAAG,CAAC,MAAM,UAAU;EAChD,QAAQ,OAAO,MAAM,GAAG,MAAM,GAAG;EACjC;CACF;CACA,IAAI,KAAK,WAAW,GAAG,MAAM,IAAI,MAAM,KAAK;CAC5C,MAAM,OAAO,MAAM,SAAS,QAAQ,IAAI,CAAC;CACzC,MAAM,EAAE,OAAO,gBAAgB,oBAAoB,IAAI;CACvD,MAAM,cAAc,KAAK,MAAM,cAAc;CAC7C,MAAM,sBAAsB,KAAK,MAAM,uBAAuB;CAE9D,MAAM,WAAW,MAAM,mBAAmB,mBAAmB;CAC7D,MAAM,uBAAuB,MAAM,sBAAsB;EACvD;EACA,SAAS,CACP;GAAE,UAAU;GAAgB;EAAY,GACxC;GAAE,UAAU;GAAyB,aAAa;EAAoB,CACxE;CACF,CAAC;CACD,IAAI,qBAAqB,SAAS,GAChC,MAAM,IAAI,MACR,qBACG,KACE,EAAE,MAAM,cACP,GAAG,KAAK,IAAI,UAAU,SAAA,0BAAmC,KAAK,yBAAyB,IAC3F,CAAC,CACA,KAAK,IAAI,CACd;CACF,MAAM,OAAO,MAAM;CACnB,IAAI,SAAS,KAAA,GACX,MAAM,IAAI,MAAM,sCAAsC;CACxD,MAAM,EAAE,OAAO,mBAAmB,4BAChC,KAAK,MAAM,IAAI,CACjB;CACA,IAAI,UAAU,KAAA,GACZ,MAAM,IAAI,MAAM,wCAAwC;CAC1D,MAAM,cAAc,MAAM;CAC1B,IAAI,gBAAgB,KAAA,GAClB,MAAM,IAAI,MAAM,qCAAqC;CACvD,MAAM,SAAS,qBACb,KAAK,MACH,MAAM,SAAS,IAAI,IAAI,qBAAqB,YAAY,GAAG,GAAG,MAAM,CACtE,CACF;CACA,MAAM,SAAS,mBAAmB;EAChC;EACA;EACA,aAAa,YAAY,KAAK;EAC9B;EACA;CACF,CAAC;CACD,MAAM,iBAAiB,yBAAyB,UAAU,IAAI;CAC9D,MAAM,mBAAmB;EAAE;EAAa,MAAM;EAAQ,MAAM;CAAM,CAAC;CACnE,IAAI,mBAAmB,UAAU,MAC/B,MAAM,mBAAmB;EACvB,aAAa;EACb,MAAM;EACN,MAAM,UAAU,QAAQ;CAC1B,CAAC;CACH,QAAQ,OAAO,MACb,aAAa,eAAe,OAAO,wBAAwB,GAC7D;AACF;AAEA,KAAK,CAAC,CAAC,OAAO,UAAmB;CAC/B,QAAQ,OAAO,MACb,gBAAgB,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK,EAAE,GACzE;CACA,QAAQ,WAAW;AACrB,CAAC"}
+{"version":3,"file":"cloud-setup-cli.mjs","names":[],"sources":["../src/cloud-setup-cli.ts"],"sourcesContent":["#!/usr/bin/env node\nimport { constants } from \"node:fs\";\nimport { open, readFile, realpath } from \"node:fs/promises\";\nimport { join } from \"node:path\";\n\nimport { cloudSetupPath, generateCloudSetup } from \"./cloud-setup\";\nimport {\n  cloudClaudeSettingsPath,\n  cloudSessionStartFix,\n  mergeCloudClaudeSettings,\n} from \"./cloud-setup-claude\";\nimport {\n  checkGeneratedOutput,\n  generationDiagnostics,\n  writeGeneratedFile,\n} from \"./generated-file\";\nimport { repositoryBun } from \"./toolchain-bun\";\nimport {\n  parseToolchainConfiguration,\n  readToolchainInputs,\n} from \"./toolchain-guard\";\nimport { parseToolchainPolicy } from \"./toolchain-schema\";\n\nconst usage =\n  \"Usage: stll-cloud-setup (run from repository root)\\n       stll-cloud-setup --help\";\nconst readClaudeSettings = async (destination: string) => {\n  try {\n    if ((await checkGeneratedOutput(destination)) === undefined)\n      return undefined;\n    const input = await open(\n      destination,\n      constants.O_RDONLY | constants.O_NOFOLLOW,\n    );\n    try {\n      const opened = await input.stat();\n      if (!opened.isFile() || opened.nlink !== 1)\n        throw new Error(\n          \"settings must be a single-link regular repository file\",\n        );\n      return { text: await input.readFile(\"utf8\"), mode: opened.mode & 0o777 };\n    } finally {\n      await input.close();\n    }\n  } catch (error) {\n    throw new Error(\n      `cannot safely merge ${cloudClaudeSettingsPath}: ${error instanceof Error ? error.message : String(error)}; ${cloudSessionStartFix}`,\n    );\n  }\n};\n\nconst main = async () => {\n  const args = process.argv.slice(2);\n  if (args.length === 1 && args.at(0) === \"--help\") {\n    process.stdout.write(`${usage}\\n`);\n    return;\n  }\n  if (args.length !== 0) throw new Error(usage);\n  const root = await realpath(process.cwd());\n  const { files, diagnostics } = readToolchainInputs(root);\n  const destination = join(root, cloudSetupPath);\n  const settingsDestination = join(root, cloudClaudeSettingsPath);\n  // Validate settings separately to retain actionable merge diagnostics.\n  const settings = await readClaudeSettings(settingsDestination);\n  const remainingDiagnostics = await generationDiagnostics({\n    diagnostics,\n    outputs: [\n      { relative: cloudSetupPath, destination },\n      { relative: cloudClaudeSettingsPath, destination: settingsDestination },\n    ],\n  });\n  if (remainingDiagnostics.length > 0)\n    throw new Error(\n      remainingDiagnostics\n        .map(\n          ({ path, message }) =>\n            `${path}: ${message}${path === cloudClaudeSettingsPath ? `; ${cloudSessionStartFix}` : \"\"}`,\n        )\n        .join(\"\\n\"),\n    );\n  const text = files[\"stll-toolchain.json\"];\n  if (text === undefined)\n    throw new Error(\"requires tracked stll-toolchain.json\");\n  const { cloud, rustExceptions } = parseToolchainConfiguration(\n    JSON.parse(text),\n  );\n  if (cloud === undefined)\n    throw new Error(\"requires an explicit cloud declaration\");\n  const nodeVersion = files[\".node-version\"];\n  if (nodeVersion === undefined)\n    throw new Error(\"requires tracked root .node-version\");\n  const sharedPolicy = parseToolchainPolicy(\n    JSON.parse(\n      await readFile(new URL(\"../toolchain.json\", import.meta.url), \"utf8\"),\n    ),\n  );\n  const policy = {\n    ...sharedPolicy,\n    bun: repositoryBun(sharedPolicy.bun, files[\"package.json\"]),\n  };\n  const script = generateCloudSetup({\n    policy,\n    cloud,\n    nodeVersion: nodeVersion.trim(),\n    files,\n    rustExceptions,\n  });\n  const mergedSettings = mergeCloudClaudeSettings(settings?.text);\n  await writeGeneratedFile({ destination, text: script, mode: 0o755 });\n  if (mergedSettings !== settings?.text)\n    await writeGeneratedFile({\n      destination: settingsDestination,\n      text: mergedSettings,\n      mode: settings?.mode ?? 0o644,\n    });\n  process.stdout.write(\n    `Generated ${cloudSetupPath} and ${cloudClaudeSettingsPath}\\n`,\n  );\n};\n\nmain().catch((error: unknown) => {\n  process.stderr.write(\n    `cloud-setup: ${error instanceof Error ? error.message : String(error)}\\n`,\n  );\n  process.exitCode = 1;\n});\n"],"mappings":";;;;;;;;;;AAuBA,MAAM,QACJ;AACF,MAAM,qBAAqB,OAAO,gBAAwB;CACxD,IAAI;EACF,IAAK,MAAM,qBAAqB,WAAW,MAAO,KAAA,GAChD,OAAO,KAAA;EACT,MAAM,QAAQ,MAAM,KAClB,aACA,UAAU,WAAW,UAAU,UACjC;EACA,IAAI;GACF,MAAM,SAAS,MAAM,MAAM,KAAK;GAChC,IAAI,CAAC,OAAO,OAAO,KAAK,OAAO,UAAU,GACvC,MAAM,IAAI,MACR,wDACF;GACF,OAAO;IAAE,MAAM,MAAM,MAAM,SAAS,MAAM;IAAG,MAAM,OAAO,OAAO;GAAM;EACzE,UAAU;GACR,MAAM,MAAM,MAAM;EACpB;CACF,SAAS,OAAO;EACd,MAAM,IAAI,MACR,uBAAuB,wBAAwB,IAAI,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK,EAAE,IAAI,sBAChH;CACF;AACF;AAEA,MAAM,OAAO,YAAY;CACvB,MAAM,OAAO,QAAQ,KAAK,MAAM,CAAC;CACjC,IAAI,KAAK,WAAW,KAAK,KAAK,GAAG,CAAC,MAAM,UAAU;EAChD,QAAQ,OAAO,MAAM,GAAG,MAAM,GAAG;EACjC;CACF;CACA,IAAI,KAAK,WAAW,GAAG,MAAM,IAAI,MAAM,KAAK;CAC5C,MAAM,OAAO,MAAM,SAAS,QAAQ,IAAI,CAAC;CACzC,MAAM,EAAE,OAAO,gBAAgB,oBAAoB,IAAI;CACvD,MAAM,cAAc,KAAK,MAAM,cAAc;CAC7C,MAAM,sBAAsB,KAAK,MAAM,uBAAuB;CAE9D,MAAM,WAAW,MAAM,mBAAmB,mBAAmB;CAC7D,MAAM,uBAAuB,MAAM,sBAAsB;EACvD;EACA,SAAS,CACP;GAAE,UAAU;GAAgB;EAAY,GACxC;GAAE,UAAU;GAAyB,aAAa;EAAoB,CACxE;CACF,CAAC;CACD,IAAI,qBAAqB,SAAS,GAChC,MAAM,IAAI,MACR,qBACG,KACE,EAAE,MAAM,cACP,GAAG,KAAK,IAAI,UAAU,SAAA,0BAAmC,KAAK,yBAAyB,IAC3F,CAAC,CACA,KAAK,IAAI,CACd;CACF,MAAM,OAAO,MAAM;CACnB,IAAI,SAAS,KAAA,GACX,MAAM,IAAI,MAAM,sCAAsC;CACxD,MAAM,EAAE,OAAO,mBAAmB,4BAChC,KAAK,MAAM,IAAI,CACjB;CACA,IAAI,UAAU,KAAA,GACZ,MAAM,IAAI,MAAM,wCAAwC;CAC1D,MAAM,cAAc,MAAM;CAC1B,IAAI,gBAAgB,KAAA,GAClB,MAAM,IAAI,MAAM,qCAAqC;CACvD,MAAM,eAAe,qBACnB,KAAK,MACH,MAAM,SAAS,IAAI,IAAI,qBAAqB,YAAY,GAAG,GAAG,MAAM,CACtE,CACF;CACA,MAAM,SAAS;EACb,GAAG;EACH,KAAK,cAAc,aAAa,KAAK,MAAM,eAAe;CAC5D;CACA,MAAM,SAAS,mBAAmB;EAChC;EACA;EACA,aAAa,YAAY,KAAK;EAC9B;EACA;CACF,CAAC;CACD,MAAM,iBAAiB,yBAAyB,UAAU,IAAI;CAC9D,MAAM,mBAAmB;EAAE;EAAa,MAAM;EAAQ,MAAM;CAAM,CAAC;CACnE,IAAI,mBAAmB,UAAU,MAC/B,MAAM,mBAAmB;EACvB,aAAa;EACb,MAAM;EACN,MAAM,UAAU,QAAQ;CAC1B,CAAC;CACH,QAAQ,OAAO,MACb,aAAa,eAAe,OAAO,wBAAwB,GAC7D;AACF;AAEA,KAAK,CAAC,CAAC,OAAO,UAAmB;CAC/B,QAAQ,OAAO,MACb,gBAAgB,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK,EAAE,GACzE;CACA,QAAQ,WAAW;AACrB,CAAC"}

package/dist/dependabot.d.cts

@@ -1,5 +1,5 @@
 //#region src/toolchain-dependabot.d.ts
-declare const supportedDependabotEcosystems: readonly ["bazel", "bun", "bundler", "cargo", "composer", "conda", "deno", "devcontainers", "docker", "docker-compose", "dotnet-sdk", "elm", "gitsubmodule", "github-actions", "gomod", "gradle", "helm", "julia", "maven", "mix", "nix", "npm", "nuget", "opentofu", "pip", "pre-commit", "pub", "rust-toolchain", "sbt", "swift", "terraform", "uv", "vcpkg"];
+export declare const supportedDependabotEcosystems: readonly ["bazel", "bun", "bundler", "cargo", "composer", "conda", "deno", "devcontainers", "docker", "docker-compose", "dotnet-sdk", "elm", "gitsubmodule", "github-actions", "gomod", "gradle", "helm", "julia", "maven", "mix", "nix", "npm", "nuget", "opentofu", "pip", "pre-commit", "pub", "rust-toolchain", "sbt", "swift", "terraform", "uv", "vcpkg"];
 type DependabotEcosystem = (typeof supportedDependabotEcosystems)[number];
 type DependabotPolicy = {
   schedule: {
@@ -11,6 +11,9 @@ type DependabotPolicy = {
   cooldown: {
     defaultDays: number;
   };
+  actionGroups: Record<string, {
+    patterns: readonly string[];
+  }>;
   groups: Record<string, {
     patterns: readonly string[];
     updateTypes: readonly string[];
@@ -19,7 +22,7 @@ type DependabotPolicy = {
   ignoredActions: readonly string[];
   ignoredImages: readonly string[];
 };
-declare const dependabotIgnoreUpdateTypes: readonly ["version-update:semver-major", "version-update:semver-minor", "version-update:semver-patch"];
+export declare const dependabotIgnoreUpdateTypes: readonly ["version-update:semver-major", "version-update:semver-minor", "version-update:semver-patch"];
 type DependabotIgnoreUpdateType = (typeof dependabotIgnoreUpdateTypes)[number];
 /** A reviewed repository decision to skip some version updates of one dependency. */
 type DependabotIgnoreDeclaration = {
@@ -31,7 +34,7 @@ type DependabotIgnoreDeclaration = {
   readonly reason: string;
 };
 /** Parse `dependabotIgnores` from stll-toolchain.json; malformed decisions fail closed. */
-declare const parseDependabotIgnores: (input: unknown) => DependabotIgnoreDeclaration[];
+export declare const parseDependabotIgnores: (input: unknown) => DependabotIgnoreDeclaration[];
 type CheckDependabotOptions = {
   files: Record<string, string>;
   policy: DependabotPolicy;
@@ -39,7 +42,7 @@ type CheckDependabotOptions = {
   ignores?: readonly DependabotIgnoreDeclaration[] | undefined;
 };
 /** Repository declarations own coverage only; shared policy owns every update option. */
-declare const parseDependabotInput: (input: unknown) => {
+export declare const parseDependabotInput: (input: unknown) => {
   ecosystem: "bazel" | "bun" | "bundler" | "cargo" | "composer" | "conda" | "deno" | "devcontainers" | "docker" | "docker-compose" | "dotnet-sdk" | "elm" | "github-actions" | "gitsubmodule" | "gomod" | "gradle" | "helm" | "julia" | "maven" | "mix" | "nix" | "npm" | "nuget" | "opentofu" | "pip" | "pre-commit" | "pub" | "rust-toolchain" | "sbt" | "swift" | "terraform" | "uv" | "vcpkg";
   directories: string[];
 }[];
@@ -47,7 +50,7 @@ type GenerateDependabotOptions = CheckDependabotOptions & {
   updates?: ReturnType<typeof parseDependabotInput> | undefined;
 };
 /** Generate canonical YAML from the same ecosystem enumeration used by the guard. */
-declare const generateDependabotConfig: ({ files, policy, updates: declarations, ignores }: GenerateDependabotOptions) => string;
+export declare const generateDependabotConfig: ({ files, policy, updates: declarations, ignores }: GenerateDependabotOptions) => string;
 //#endregion
 //#region src/toolchain-formatter.d.ts
 type FormatterStyle = Readonly<Record<string, unknown>>;
@@ -60,7 +63,7 @@ type FormatterPolicy = {
 //#endregion
 //#region src/toolchain-schema.d.ts
 /** Reject unsupported or incomplete installed policies before inspecting a consumer. */
-declare const parseToolchainPolicy: (input: unknown) => {
+export declare const parseToolchainPolicy: (input: unknown) => {
   bun: string;
   formatter: FormatterPolicy;
   typescript: string;
@@ -129,6 +132,9 @@ declare const parseToolchainPolicy: (input: unknown) => {
     cooldown: {
       defaultDays: number;
     };
+    actionGroups: Record<string, {
+      patterns: string[];
+    }>;
     groups: Record<string, {
       patterns: string[];
       updateTypes: string[];
@@ -139,5 +145,5 @@ declare const parseToolchainPolicy: (input: unknown) => {
   };
 };
 //#endregion
-export { type DependabotEcosystem, type DependabotIgnoreDeclaration, type DependabotIgnoreUpdateType, dependabotIgnoreUpdateTypes, generateDependabotConfig, parseDependabotIgnores, parseDependabotInput, parseToolchainPolicy, supportedDependabotEcosystems };
+export type { DependabotEcosystem, DependabotIgnoreDeclaration, DependabotIgnoreUpdateType };
 //# sourceMappingURL=dependabot.d.cts.map

package/dist/dependabot.d.mts

@@ -1,5 +1,5 @@
 //#region src/toolchain-dependabot.d.ts
-declare const supportedDependabotEcosystems: readonly ["bazel", "bun", "bundler", "cargo", "composer", "conda", "deno", "devcontainers", "docker", "docker-compose", "dotnet-sdk", "elm", "gitsubmodule", "github-actions", "gomod", "gradle", "helm", "julia", "maven", "mix", "nix", "npm", "nuget", "opentofu", "pip", "pre-commit", "pub", "rust-toolchain", "sbt", "swift", "terraform", "uv", "vcpkg"];
+export declare const supportedDependabotEcosystems: readonly ["bazel", "bun", "bundler", "cargo", "composer", "conda", "deno", "devcontainers", "docker", "docker-compose", "dotnet-sdk", "elm", "gitsubmodule", "github-actions", "gomod", "gradle", "helm", "julia", "maven", "mix", "nix", "npm", "nuget", "opentofu", "pip", "pre-commit", "pub", "rust-toolchain", "sbt", "swift", "terraform", "uv", "vcpkg"];
 type DependabotEcosystem = (typeof supportedDependabotEcosystems)[number];
 type DependabotPolicy = {
   schedule: {
@@ -11,6 +11,9 @@ type DependabotPolicy = {
   cooldown: {
     defaultDays: number;
   };
+  actionGroups: Record<string, {
+    patterns: readonly string[];
+  }>;
   groups: Record<string, {
     patterns: readonly string[];
     updateTypes: readonly string[];
@@ -19,7 +22,7 @@ type DependabotPolicy = {
   ignoredActions: readonly string[];
   ignoredImages: readonly string[];
 };
-declare const dependabotIgnoreUpdateTypes: readonly ["version-update:semver-major", "version-update:semver-minor", "version-update:semver-patch"];
+export declare const dependabotIgnoreUpdateTypes: readonly ["version-update:semver-major", "version-update:semver-minor", "version-update:semver-patch"];
 type DependabotIgnoreUpdateType = (typeof dependabotIgnoreUpdateTypes)[number];
 /** A reviewed repository decision to skip some version updates of one dependency. */
 type DependabotIgnoreDeclaration = {
@@ -31,7 +34,7 @@ type DependabotIgnoreDeclaration = {
   readonly reason: string;
 };
 /** Parse `dependabotIgnores` from stll-toolchain.json; malformed decisions fail closed. */
-declare const parseDependabotIgnores: (input: unknown) => DependabotIgnoreDeclaration[];
+export declare const parseDependabotIgnores: (input: unknown) => DependabotIgnoreDeclaration[];
 type CheckDependabotOptions = {
   files: Record<string, string>;
   policy: DependabotPolicy;
@@ -39,7 +42,7 @@ type CheckDependabotOptions = {
   ignores?: readonly DependabotIgnoreDeclaration[] | undefined;
 };
 /** Repository declarations own coverage only; shared policy owns every update option. */
-declare const parseDependabotInput: (input: unknown) => {
+export declare const parseDependabotInput: (input: unknown) => {
   ecosystem: "bazel" | "bun" | "bundler" | "cargo" | "composer" | "conda" | "deno" | "devcontainers" | "docker" | "docker-compose" | "dotnet-sdk" | "elm" | "github-actions" | "gitsubmodule" | "gomod" | "gradle" | "helm" | "julia" | "maven" | "mix" | "nix" | "npm" | "nuget" | "opentofu" | "pip" | "pre-commit" | "pub" | "rust-toolchain" | "sbt" | "swift" | "terraform" | "uv" | "vcpkg";
   directories: string[];
 }[];
@@ -47,7 +50,7 @@ type GenerateDependabotOptions = CheckDependabotOptions & {
   updates?: ReturnType<typeof parseDependabotInput> | undefined;
 };
 /** Generate canonical YAML from the same ecosystem enumeration used by the guard. */
-declare const generateDependabotConfig: ({ files, policy, updates: declarations, ignores }: GenerateDependabotOptions) => string;
+export declare const generateDependabotConfig: ({ files, policy, updates: declarations, ignores }: GenerateDependabotOptions) => string;
 //#endregion
 //#region src/toolchain-formatter.d.ts
 type FormatterStyle = Readonly<Record<string, unknown>>;
@@ -60,7 +63,7 @@ type FormatterPolicy = {
 //#endregion
 //#region src/toolchain-schema.d.ts
 /** Reject unsupported or incomplete installed policies before inspecting a consumer. */
-declare const parseToolchainPolicy: (input: unknown) => {
+export declare const parseToolchainPolicy: (input: unknown) => {
   bun: string;
   formatter: FormatterPolicy;
   typescript: string;
@@ -129,6 +132,9 @@ declare const parseToolchainPolicy: (input: unknown) => {
     cooldown: {
       defaultDays: number;
     };
+    actionGroups: Record<string, {
+      patterns: string[];
+    }>;
     groups: Record<string, {
       patterns: string[];
       updateTypes: string[];
@@ -139,5 +145,5 @@ declare const parseToolchainPolicy: (input: unknown) => {
   };
 };
 //#endregion
-export { type DependabotEcosystem, type DependabotIgnoreDeclaration, type DependabotIgnoreUpdateType, dependabotIgnoreUpdateTypes, generateDependabotConfig, parseDependabotIgnores, parseDependabotInput, parseToolchainPolicy, supportedDependabotEcosystems };
+export type { DependabotEcosystem, DependabotIgnoreDeclaration, DependabotIgnoreUpdateType };
 //# sourceMappingURL=dependabot.d.mts.map

package/dist/engine-support.d.cts

@@ -1,21 +1,20 @@
 //#region src/engine-support.d.ts
-type EnginePackage = {
+export type EnginePackage = {
   name: string;
   node?: string;
   changesetsManaged: boolean;
 };
-type EngineSupportInput = {
+export type EngineSupportInput = {
   base: ReadonlyMap<string, EnginePackage>;
   head: ReadonlyMap<string, EnginePackage>;
   majorReleases: ReadonlySet<string>;
 };
-type EngineSupportFailure = {
+export type EngineSupportFailure = {
   packageName: string;
   baseRange: string;
   headRange: string;
 };
 /** Returns engine-support changes that require a pending major release. */
-declare const checkEngineSupport: ({ base, head, majorReleases }: EngineSupportInput) => EngineSupportFailure[];
+export declare const checkEngineSupport: ({ base, head, majorReleases }: EngineSupportInput) => EngineSupportFailure[];
 //#endregion
-export { EnginePackage, EngineSupportFailure, EngineSupportInput, checkEngineSupport };
 //# sourceMappingURL=engine-support.d.cts.map

package/dist/engine-support.d.mts

@@ -1,21 +1,20 @@
 //#region src/engine-support.d.ts
-type EnginePackage = {
+export type EnginePackage = {
   name: string;
   node?: string;
   changesetsManaged: boolean;
 };
-type EngineSupportInput = {
+export type EngineSupportInput = {
   base: ReadonlyMap<string, EnginePackage>;
   head: ReadonlyMap<string, EnginePackage>;
   majorReleases: ReadonlySet<string>;
 };
-type EngineSupportFailure = {
+export type EngineSupportFailure = {
   packageName: string;
   baseRange: string;
   headRange: string;
 };
 /** Returns engine-support changes that require a pending major release. */
-declare const checkEngineSupport: ({ base, head, majorReleases }: EngineSupportInput) => EngineSupportFailure[];
+export declare const checkEngineSupport: ({ base, head, majorReleases }: EngineSupportInput) => EngineSupportFailure[];
 //#endregion
-export { EnginePackage, EngineSupportFailure, EngineSupportInput, checkEngineSupport };
 //# sourceMappingURL=engine-support.d.mts.map

package/dist/index.d.cts

@@ -4,7 +4,7 @@ type Rules = NonNullable<OxlintConfig["rules"]>;
 type JsPlugins = NonNullable<OxlintConfig["jsPlugins"]>;
 type Options = NonNullable<OxlintConfig["options"]>;
 type Plugins = NonNullable<OxlintConfig["plugins"]>;
-type LibraryOptions = {
+export type LibraryOptions = {
   jsPlugins?: JsPlugins;
   ignorePatterns?: string[];
   options?: Options;
@@ -15,11 +15,11 @@ type LibraryOptions = {
     files: [string, ...string[]];
   };
 };
-declare const stellaLowercasePluginSpecifier = "@stll/oxlint-config/plugin";
-declare const noRawColorsPluginSpecifier = "@stll/oxlint-config/no-raw-colors";
-declare const libraryIgnorePatterns: string[];
-declare const libraryPlugins: ("eslint" | "import" | "oxc" | "promise" | "typescript" | "unicorn")[];
-declare const reactCompilerRules: {
+export declare const stellaLowercasePluginSpecifier = "@stll/oxlint-config/plugin";
+export declare const noRawColorsPluginSpecifier = "@stll/oxlint-config/no-raw-colors";
+export declare const libraryIgnorePatterns: string[];
+export declare const libraryPlugins: ("eslint" | "import" | "oxc" | "promise" | "typescript" | "unicorn")[];
+export declare const reactCompilerRules: {
   "react/capitalized-calls": "error";
   "react/error-boundaries": "error";
   "react/exhaustive-effect-dependencies": "error";
@@ -43,7 +43,7 @@ declare const reactCompilerRules: {
   "react/use-memo": "error";
   "react/void-use-memo": "error";
 };
-declare const libraryRules: {
+export declare const libraryRules: {
   "no-console": "off";
   "no-shadow": "error";
   "require-await": "error";
@@ -132,7 +132,7 @@ declare const libraryRules: {
   "func-names": "off";
   "default-case": "off";
 };
-declare const reactRules: {
+export declare const reactRules: {
   "react/capitalized-calls": "error";
   "react/error-boundaries": "error";
   "react/exhaustive-effect-dependencies": "error";
@@ -175,7 +175,7 @@ declare const reactRules: {
   "react/no-will-update-set-state": "off";
   "react/void-dom-elements-no-children": "off";
 };
-declare const libraryOverrides: {
+export declare const libraryOverrides: {
   files: string[];
   rules: {
     "no-console": "off";
@@ -183,8 +183,8 @@ declare const libraryOverrides: {
     "no-non-null-assertion": "off";
   };
 }[];
-declare const library: (options?: LibraryOptions) => OxlintConfig;
+export declare const library: (options?: LibraryOptions) => OxlintConfig;
 declare const _default: OxlintConfig;
 //#endregion
-export { LibraryOptions, _default as default, library, libraryIgnorePatterns, libraryOverrides, libraryPlugins, libraryRules, noRawColorsPluginSpecifier, reactCompilerRules, reactRules, stellaLowercasePluginSpecifier };
+export { _default as default };
 //# sourceMappingURL=index.d.cts.map

package/dist/index.d.mts

@@ -4,7 +4,7 @@ type Rules = NonNullable<OxlintConfig["rules"]>;
 type JsPlugins = NonNullable<OxlintConfig["jsPlugins"]>;
 type Options = NonNullable<OxlintConfig["options"]>;
 type Plugins = NonNullable<OxlintConfig["plugins"]>;
-type LibraryOptions = {
+export type LibraryOptions = {
   jsPlugins?: JsPlugins;
   ignorePatterns?: string[];
   options?: Options;
@@ -15,11 +15,11 @@ type LibraryOptions = {
     files: [string, ...string[]];
   };
 };
-declare const stellaLowercasePluginSpecifier = "@stll/oxlint-config/plugin";
-declare const noRawColorsPluginSpecifier = "@stll/oxlint-config/no-raw-colors";
-declare const libraryIgnorePatterns: string[];
-declare const libraryPlugins: ("eslint" | "import" | "oxc" | "promise" | "typescript" | "unicorn")[];
-declare const reactCompilerRules: {
+export declare const stellaLowercasePluginSpecifier = "@stll/oxlint-config/plugin";
+export declare const noRawColorsPluginSpecifier = "@stll/oxlint-config/no-raw-colors";
+export declare const libraryIgnorePatterns: string[];
+export declare const libraryPlugins: ("eslint" | "import" | "oxc" | "promise" | "typescript" | "unicorn")[];
+export declare const reactCompilerRules: {
   "react/capitalized-calls": "error";
   "react/error-boundaries": "error";
   "react/exhaustive-effect-dependencies": "error";
@@ -43,7 +43,7 @@ declare const reactCompilerRules: {
   "react/use-memo": "error";
   "react/void-use-memo": "error";
 };
-declare const libraryRules: {
+export declare const libraryRules: {
   "no-console": "off";
   "no-shadow": "error";
   "require-await": "error";
@@ -132,7 +132,7 @@ declare const libraryRules: {
   "func-names": "off";
   "default-case": "off";
 };
-declare const reactRules: {
+export declare const reactRules: {
   "react/capitalized-calls": "error";
   "react/error-boundaries": "error";
   "react/exhaustive-effect-dependencies": "error";
@@ -175,7 +175,7 @@ declare const reactRules: {
   "react/no-will-update-set-state": "off";
   "react/void-dom-elements-no-children": "off";
 };
-declare const libraryOverrides: {
+export declare const libraryOverrides: {
   files: string[];
   rules: {
     "no-console": "off";
@@ -183,8 +183,8 @@ declare const libraryOverrides: {
     "no-non-null-assertion": "off";
   };
 }[];
-declare const library: (options?: LibraryOptions) => OxlintConfig;
+export declare const library: (options?: LibraryOptions) => OxlintConfig;
 declare const _default: OxlintConfig;
 //#endregion
-export { LibraryOptions, _default as default, library, libraryIgnorePatterns, libraryOverrides, libraryPlugins, libraryRules, noRawColorsPluginSpecifier, reactCompilerRules, reactRules, stellaLowercasePluginSpecifier };
+export { _default as default };
 //# sourceMappingURL=index.d.mts.map

package/dist/publish-build-target-nuxt-helper.d.cts

@@ -1,10 +1,9 @@
 //#region src/publish-build-target-nuxt-helper.d.ts
 /** Configure both module and runtime JavaScript without replacing Nuxt entries. */
-declare const nuxtModuleTarget: (target: string | string[]) => (context: unknown) => void;
+export declare const nuxtModuleTarget: (target: string | string[]) => (context: unknown) => void;
 /** Read immutable target data across ESM and CommonJS without executing the callback. */
-declare const nuxtModuleTargetTargets: (value: unknown) => string[] | undefined;
+export declare const nuxtModuleTargetTargets: (value: unknown) => string[] | undefined;
 /** Recognize the same declared target data across ESM and CommonJS modules. */
-declare const isNuxtModuleTargetHook: (value: unknown) => boolean;
+export declare const isNuxtModuleTargetHook: (value: unknown) => boolean;
 //#endregion
-export { isNuxtModuleTargetHook, nuxtModuleTarget, nuxtModuleTargetTargets };
 //# sourceMappingURL=publish-build-target-nuxt-helper.d.cts.map

package/dist/publish-build-target-nuxt-helper.d.mts

@@ -1,10 +1,9 @@
 //#region src/publish-build-target-nuxt-helper.d.ts
 /** Configure both module and runtime JavaScript without replacing Nuxt entries. */
-declare const nuxtModuleTarget: (target: string | string[]) => (context: unknown) => void;
+export declare const nuxtModuleTarget: (target: string | string[]) => (context: unknown) => void;
 /** Read immutable target data across ESM and CommonJS without executing the callback. */
-declare const nuxtModuleTargetTargets: (value: unknown) => string[] | undefined;
+export declare const nuxtModuleTargetTargets: (value: unknown) => string[] | undefined;
 /** Recognize the same declared target data across ESM and CommonJS modules. */
-declare const isNuxtModuleTargetHook: (value: unknown) => boolean;
+export declare const isNuxtModuleTargetHook: (value: unknown) => boolean;
 //#endregion
-export { isNuxtModuleTargetHook, nuxtModuleTarget, nuxtModuleTargetTargets };
 //# sourceMappingURL=publish-build-target-nuxt-helper.d.mts.map

package/dist/publish-build-target-vite-dts-helper.d.cts

@@ -18,7 +18,7 @@ type DeclarationOnlyDtsOptions = {
   directory: string;
 } & ReviewedViteDtsOptions;
 /** The actual build uses this closed factory and its guarded declaration hooks. */
-declare const declarationOnlyDts: ({ directory, ...options }: DeclarationOnlyDtsOptions) => Plugin;
+export declare const declarationOnlyDts: ({ directory, ...options }: DeclarationOnlyDtsOptions) => Plugin;
 //#endregion
-export { declarationOnlyDts };
+export {};
 //# sourceMappingURL=publish-build-target-vite-dts-helper.d.cts.map

package/dist/publish-build-target-vite-dts-helper.d.mts

@@ -18,7 +18,7 @@ type DeclarationOnlyDtsOptions = {
   directory: string;
 } & ReviewedViteDtsOptions;
 /** The actual build uses this closed factory and its guarded declaration hooks. */
-declare const declarationOnlyDts: ({ directory, ...options }: DeclarationOnlyDtsOptions) => Plugin;
+export declare const declarationOnlyDts: ({ directory, ...options }: DeclarationOnlyDtsOptions) => Plugin;
 //#endregion
-export { declarationOnlyDts };
+export {};
 //# sourceMappingURL=publish-build-target-vite-dts-helper.d.mts.map