@stll/oxlint-config 1.8.0 → 1.9.0

package/README.md

@@ -75,10 +75,12 @@ Shared-pin Dependabot ignores must contain only `dependency-name` and
 `version-update:semver-minor`, and `version-update:semver-patch`. This ignores
 version updates while preserving security update pull requests.
 
-Set `packageManager` to `bun@` followed by the policy's `bun` value, and pin
-`bun-types` to that same value. Dependency pins can live in default or named
-catalogs, including Bun's `workspaces` catalogs. Bun image tags, version
-files, and mise/asdf entries also inherit the policy pin.
+The policy's `bun` value is the minimum Bun. Set `packageManager` to `bun@`
+followed by one exact release at or above it, and pin `bun-types` to that same
+release. Dependency pins can live in default or named catalogs, including
+Bun's `workspaces` catalogs. Bun image tags, version files, and mise/asdf
+entries also inherit the repository's pin, so a repository can take a newer
+Bun without a policy release.
 
 Configure `oven-sh/setup-bun` with a tracked manifest as its version source:
 

package/dist/cloud-setup-cli.cjs

@@ -2,6 +2,7 @@
 Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
 const require_generated_file = require("./generated-file.cjs");
 const require_toolchain_inputs = require("./toolchain-inputs.cjs");
+const require_toolchain_bun = require("./toolchain-bun.cjs");
 const require_toolchain_guard = require("./toolchain-guard.cjs");
 const require_toolchain_schema = require("./toolchain-schema.cjs");
 let node_fs_promises = require("node:fs/promises");
@@ -56,7 +57,11 @@ const main = async () => {
 	if (cloud === void 0) throw new Error("requires an explicit cloud declaration");
 	const nodeVersion = files[".node-version"];
 	if (nodeVersion === void 0) throw new Error("requires tracked root .node-version");
-	const policy = require_toolchain_schema.parseToolchainPolicy(JSON.parse(await (0, node_fs_promises.readFile)(new URL("../toolchain.json", require("url").pathToFileURL(__filename).href), "utf8")));
+	const sharedPolicy = require_toolchain_schema.parseToolchainPolicy(JSON.parse(await (0, node_fs_promises.readFile)(new URL("../toolchain.json", require("url").pathToFileURL(__filename).href), "utf8")));
+	const policy = {
+		...sharedPolicy,
+		bun: require_toolchain_bun.repositoryBun(sharedPolicy.bun, files["package.json"])
+	};
 	const script = require_toolchain_inputs.generateCloudSetup({
 		policy,
 		cloud,

package/dist/cloud-setup-cli.cjs.map

@@ -1 +1 @@
-{"version":3,"file":"cloud-setup-cli.cjs","names":["checkGeneratedOutput","open","constants","cloudClaudeSettingsPath","cloudSessionStartFix","realpath","readToolchainInputs","join","cloudSetupPath","generationDiagnostics","parseToolchainConfiguration","parseToolchainPolicy","readFile","generateCloudSetup","mergeCloudClaudeSettings","writeGeneratedFile"],"sources":["../src/cloud-setup-cli.ts"],"sourcesContent":["#!/usr/bin/env node\nimport { constants } from \"node:fs\";\nimport { open, readFile, realpath } from \"node:fs/promises\";\nimport { join } from \"node:path\";\n\nimport { cloudSetupPath, generateCloudSetup } from \"./cloud-setup\";\nimport {\n  cloudClaudeSettingsPath,\n  cloudSessionStartFix,\n  mergeCloudClaudeSettings,\n} from \"./cloud-setup-claude\";\nimport {\n  checkGeneratedOutput,\n  generationDiagnostics,\n  writeGeneratedFile,\n} from \"./generated-file\";\nimport {\n  parseToolchainConfiguration,\n  readToolchainInputs,\n} from \"./toolchain-guard\";\nimport { parseToolchainPolicy } from \"./toolchain-schema\";\n\nconst usage =\n  \"Usage: stll-cloud-setup (run from repository root)\\n       stll-cloud-setup --help\";\nconst readClaudeSettings = async (destination: string) => {\n  try {\n    if ((await checkGeneratedOutput(destination)) === undefined)\n      return undefined;\n    const input = await open(\n      destination,\n      constants.O_RDONLY | constants.O_NOFOLLOW,\n    );\n    try {\n      const opened = await input.stat();\n      if (!opened.isFile() || opened.nlink !== 1)\n        throw new Error(\n          \"settings must be a single-link regular repository file\",\n        );\n      return { text: await input.readFile(\"utf8\"), mode: opened.mode & 0o777 };\n    } finally {\n      await input.close();\n    }\n  } catch (error) {\n    throw new Error(\n      `cannot safely merge ${cloudClaudeSettingsPath}: ${error instanceof Error ? error.message : String(error)}; ${cloudSessionStartFix}`,\n    );\n  }\n};\n\nconst main = async () => {\n  const args = process.argv.slice(2);\n  if (args.length === 1 && args.at(0) === \"--help\") {\n    process.stdout.write(`${usage}\\n`);\n    return;\n  }\n  if (args.length !== 0) throw new Error(usage);\n  const root = await realpath(process.cwd());\n  const { files, diagnostics } = readToolchainInputs(root);\n  const destination = join(root, cloudSetupPath);\n  const settingsDestination = join(root, cloudClaudeSettingsPath);\n  // Validate settings separately to retain actionable merge diagnostics.\n  const settings = await readClaudeSettings(settingsDestination);\n  const remainingDiagnostics = await generationDiagnostics({\n    diagnostics,\n    outputs: [\n      { relative: cloudSetupPath, destination },\n      { relative: cloudClaudeSettingsPath, destination: settingsDestination },\n    ],\n  });\n  if (remainingDiagnostics.length > 0)\n    throw new Error(\n      remainingDiagnostics\n        .map(\n          ({ path, message }) =>\n            `${path}: ${message}${path === cloudClaudeSettingsPath ? `; ${cloudSessionStartFix}` : \"\"}`,\n        )\n        .join(\"\\n\"),\n    );\n  const text = files[\"stll-toolchain.json\"];\n  if (text === undefined)\n    throw new Error(\"requires tracked stll-toolchain.json\");\n  const { cloud, rustExceptions } = parseToolchainConfiguration(\n    JSON.parse(text),\n  );\n  if (cloud === undefined)\n    throw new Error(\"requires an explicit cloud declaration\");\n  const nodeVersion = files[\".node-version\"];\n  if (nodeVersion === undefined)\n    throw new Error(\"requires tracked root .node-version\");\n  const policy = parseToolchainPolicy(\n    JSON.parse(\n      await readFile(new URL(\"../toolchain.json\", import.meta.url), \"utf8\"),\n    ),\n  );\n  const script = generateCloudSetup({\n    policy,\n    cloud,\n    nodeVersion: nodeVersion.trim(),\n    files,\n    rustExceptions,\n  });\n  const mergedSettings = mergeCloudClaudeSettings(settings?.text);\n  await writeGeneratedFile({ destination, text: script, mode: 0o755 });\n  if (mergedSettings !== settings?.text)\n    await writeGeneratedFile({\n      destination: settingsDestination,\n      text: mergedSettings,\n      mode: settings?.mode ?? 0o644,\n    });\n  process.stdout.write(\n    `Generated ${cloudSetupPath} and ${cloudClaudeSettingsPath}\\n`,\n  );\n};\n\nmain().catch((error: unknown) => {\n  process.stderr.write(\n    `cloud-setup: ${error instanceof Error ? error.message : String(error)}\\n`,\n  );\n  process.exitCode = 1;\n});\n"],"mappings":";;;;;;;;;;AAsBA,MAAM,QACJ;AACF,MAAM,qBAAqB,OAAO,gBAAwB;CACxD,IAAI;EACF,IAAK,MAAMA,uBAAAA,qBAAqB,WAAW,MAAO,KAAA,GAChD,OAAO,KAAA;EACT,MAAM,QAAQ,OAAA,GAAMC,iBAAAA,KAAAA,CAClB,aACAC,QAAAA,UAAU,WAAWA,QAAAA,UAAU,UACjC;EACA,IAAI;GACF,MAAM,SAAS,MAAM,MAAM,KAAK;GAChC,IAAI,CAAC,OAAO,OAAO,KAAK,OAAO,UAAU,GACvC,MAAM,IAAI,MACR,wDACF;GACF,OAAO;IAAE,MAAM,MAAM,MAAM,SAAS,MAAM;IAAG,MAAM,OAAO,OAAO;GAAM;EACzE,UAAU;GACR,MAAM,MAAM,MAAM;EACpB;CACF,SAAS,OAAO;EACd,MAAM,IAAI,MACR,uBAAuBC,yBAAAA,wBAAwB,IAAI,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK,EAAE,IAAIC,yBAAAA,sBAChH;CACF;AACF;AAEA,MAAM,OAAO,YAAY;CACvB,MAAM,OAAO,QAAQ,KAAK,MAAM,CAAC;CACjC,IAAI,KAAK,WAAW,KAAK,KAAK,GAAG,CAAC,MAAM,UAAU;EAChD,QAAQ,OAAO,MAAM,GAAG,MAAM,GAAG;EACjC;CACF;CACA,IAAI,KAAK,WAAW,GAAG,MAAM,IAAI,MAAM,KAAK;CAC5C,MAAM,OAAO,OAAA,GAAMC,iBAAAA,SAAAA,CAAS,QAAQ,IAAI,CAAC;CACzC,MAAM,EAAE,OAAO,gBAAgBC,wBAAAA,oBAAoB,IAAI;CACvD,MAAM,eAAA,GAAcC,UAAAA,KAAAA,CAAK,MAAMC,yBAAAA,cAAc;CAC7C,MAAM,uBAAA,GAAsBD,UAAAA,KAAAA,CAAK,MAAMJ,yBAAAA,uBAAuB;CAE9D,MAAM,WAAW,MAAM,mBAAmB,mBAAmB;CAC7D,MAAM,uBAAuB,MAAMM,uBAAAA,sBAAsB;EACvD;EACA,SAAS,CACP;GAAE,UAAUD,yBAAAA;GAAgB;EAAY,GACxC;GAAE,UAAUL,yBAAAA;GAAyB,aAAa;EAAoB,CACxE;CACF,CAAC;CACD,IAAI,qBAAqB,SAAS,GAChC,MAAM,IAAI,MACR,qBACG,KACE,EAAE,MAAM,cACP,GAAG,KAAK,IAAI,UAAU,SAAA,0BAAmC,KAAKC,yBAAAA,yBAAyB,IAC3F,CAAC,CACA,KAAK,IAAI,CACd;CACF,MAAM,OAAO,MAAM;CACnB,IAAI,SAAS,KAAA,GACX,MAAM,IAAI,MAAM,sCAAsC;CACxD,MAAM,EAAE,OAAO,mBAAmBM,wBAAAA,4BAChC,KAAK,MAAM,IAAI,CACjB;CACA,IAAI,UAAU,KAAA,GACZ,MAAM,IAAI,MAAM,wCAAwC;CAC1D,MAAM,cAAc,MAAM;CAC1B,IAAI,gBAAgB,KAAA,GAClB,MAAM,IAAI,MAAM,qCAAqC;CACvD,MAAM,SAASC,yBAAAA,qBACb,KAAK,MACH,OAAA,GAAMC,iBAAAA,SAAAA,CAAS,IAAI,IAAI,qBAAA,QAAA,KAAA,CAAA,CAAA,cAAA,UAAA,CAAA,CAAA,IAAoC,GAAG,MAAM,CACtE,CACF;CACA,MAAM,SAASC,yBAAAA,mBAAmB;EAChC;EACA;EACA,aAAa,YAAY,KAAK;EAC9B;EACA;CACF,CAAC;CACD,MAAM,iBAAiBC,yBAAAA,yBAAyB,UAAU,IAAI;CAC9D,MAAMC,uBAAAA,mBAAmB;EAAE;EAAa,MAAM;EAAQ,MAAM;CAAM,CAAC;CACnE,IAAI,mBAAmB,UAAU,MAC/B,MAAMA,uBAAAA,mBAAmB;EACvB,aAAa;EACb,MAAM;EACN,MAAM,UAAU,QAAQ;CAC1B,CAAC;CACH,QAAQ,OAAO,MACb,aAAaP,yBAAAA,eAAe,OAAOL,yBAAAA,wBAAwB,GAC7D;AACF;AAEA,KAAK,CAAC,CAAC,OAAO,UAAmB;CAC/B,QAAQ,OAAO,MACb,gBAAgB,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK,EAAE,GACzE;CACA,QAAQ,WAAW;AACrB,CAAC"}
+{"version":3,"file":"cloud-setup-cli.cjs","names":["checkGeneratedOutput","open","constants","cloudClaudeSettingsPath","cloudSessionStartFix","realpath","readToolchainInputs","join","cloudSetupPath","generationDiagnostics","parseToolchainConfiguration","parseToolchainPolicy","readFile","repositoryBun","generateCloudSetup","mergeCloudClaudeSettings","writeGeneratedFile"],"sources":["../src/cloud-setup-cli.ts"],"sourcesContent":["#!/usr/bin/env node\nimport { constants } from \"node:fs\";\nimport { open, readFile, realpath } from \"node:fs/promises\";\nimport { join } from \"node:path\";\n\nimport { cloudSetupPath, generateCloudSetup } from \"./cloud-setup\";\nimport {\n  cloudClaudeSettingsPath,\n  cloudSessionStartFix,\n  mergeCloudClaudeSettings,\n} from \"./cloud-setup-claude\";\nimport {\n  checkGeneratedOutput,\n  generationDiagnostics,\n  writeGeneratedFile,\n} from \"./generated-file\";\nimport { repositoryBun } from \"./toolchain-bun\";\nimport {\n  parseToolchainConfiguration,\n  readToolchainInputs,\n} from \"./toolchain-guard\";\nimport { parseToolchainPolicy } from \"./toolchain-schema\";\n\nconst usage =\n  \"Usage: stll-cloud-setup (run from repository root)\\n       stll-cloud-setup --help\";\nconst readClaudeSettings = async (destination: string) => {\n  try {\n    if ((await checkGeneratedOutput(destination)) === undefined)\n      return undefined;\n    const input = await open(\n      destination,\n      constants.O_RDONLY | constants.O_NOFOLLOW,\n    );\n    try {\n      const opened = await input.stat();\n      if (!opened.isFile() || opened.nlink !== 1)\n        throw new Error(\n          \"settings must be a single-link regular repository file\",\n        );\n      return { text: await input.readFile(\"utf8\"), mode: opened.mode & 0o777 };\n    } finally {\n      await input.close();\n    }\n  } catch (error) {\n    throw new Error(\n      `cannot safely merge ${cloudClaudeSettingsPath}: ${error instanceof Error ? error.message : String(error)}; ${cloudSessionStartFix}`,\n    );\n  }\n};\n\nconst main = async () => {\n  const args = process.argv.slice(2);\n  if (args.length === 1 && args.at(0) === \"--help\") {\n    process.stdout.write(`${usage}\\n`);\n    return;\n  }\n  if (args.length !== 0) throw new Error(usage);\n  const root = await realpath(process.cwd());\n  const { files, diagnostics } = readToolchainInputs(root);\n  const destination = join(root, cloudSetupPath);\n  const settingsDestination = join(root, cloudClaudeSettingsPath);\n  // Validate settings separately to retain actionable merge diagnostics.\n  const settings = await readClaudeSettings(settingsDestination);\n  const remainingDiagnostics = await generationDiagnostics({\n    diagnostics,\n    outputs: [\n      { relative: cloudSetupPath, destination },\n      { relative: cloudClaudeSettingsPath, destination: settingsDestination },\n    ],\n  });\n  if (remainingDiagnostics.length > 0)\n    throw new Error(\n      remainingDiagnostics\n        .map(\n          ({ path, message }) =>\n            `${path}: ${message}${path === cloudClaudeSettingsPath ? `; ${cloudSessionStartFix}` : \"\"}`,\n        )\n        .join(\"\\n\"),\n    );\n  const text = files[\"stll-toolchain.json\"];\n  if (text === undefined)\n    throw new Error(\"requires tracked stll-toolchain.json\");\n  const { cloud, rustExceptions } = parseToolchainConfiguration(\n    JSON.parse(text),\n  );\n  if (cloud === undefined)\n    throw new Error(\"requires an explicit cloud declaration\");\n  const nodeVersion = files[\".node-version\"];\n  if (nodeVersion === undefined)\n    throw new Error(\"requires tracked root .node-version\");\n  const sharedPolicy = parseToolchainPolicy(\n    JSON.parse(\n      await readFile(new URL(\"../toolchain.json\", import.meta.url), \"utf8\"),\n    ),\n  );\n  const policy = {\n    ...sharedPolicy,\n    bun: repositoryBun(sharedPolicy.bun, files[\"package.json\"]),\n  };\n  const script = generateCloudSetup({\n    policy,\n    cloud,\n    nodeVersion: nodeVersion.trim(),\n    files,\n    rustExceptions,\n  });\n  const mergedSettings = mergeCloudClaudeSettings(settings?.text);\n  await writeGeneratedFile({ destination, text: script, mode: 0o755 });\n  if (mergedSettings !== settings?.text)\n    await writeGeneratedFile({\n      destination: settingsDestination,\n      text: mergedSettings,\n      mode: settings?.mode ?? 0o644,\n    });\n  process.stdout.write(\n    `Generated ${cloudSetupPath} and ${cloudClaudeSettingsPath}\\n`,\n  );\n};\n\nmain().catch((error: unknown) => {\n  process.stderr.write(\n    `cloud-setup: ${error instanceof Error ? error.message : String(error)}\\n`,\n  );\n  process.exitCode = 1;\n});\n"],"mappings":";;;;;;;;;;;AAuBA,MAAM,QACJ;AACF,MAAM,qBAAqB,OAAO,gBAAwB;CACxD,IAAI;EACF,IAAK,MAAMA,uBAAAA,qBAAqB,WAAW,MAAO,KAAA,GAChD,OAAO,KAAA;EACT,MAAM,QAAQ,OAAA,GAAMC,iBAAAA,KAAAA,CAClB,aACAC,QAAAA,UAAU,WAAWA,QAAAA,UAAU,UACjC;EACA,IAAI;GACF,MAAM,SAAS,MAAM,MAAM,KAAK;GAChC,IAAI,CAAC,OAAO,OAAO,KAAK,OAAO,UAAU,GACvC,MAAM,IAAI,MACR,wDACF;GACF,OAAO;IAAE,MAAM,MAAM,MAAM,SAAS,MAAM;IAAG,MAAM,OAAO,OAAO;GAAM;EACzE,UAAU;GACR,MAAM,MAAM,MAAM;EACpB;CACF,SAAS,OAAO;EACd,MAAM,IAAI,MACR,uBAAuBC,yBAAAA,wBAAwB,IAAI,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK,EAAE,IAAIC,yBAAAA,sBAChH;CACF;AACF;AAEA,MAAM,OAAO,YAAY;CACvB,MAAM,OAAO,QAAQ,KAAK,MAAM,CAAC;CACjC,IAAI,KAAK,WAAW,KAAK,KAAK,GAAG,CAAC,MAAM,UAAU;EAChD,QAAQ,OAAO,MAAM,GAAG,MAAM,GAAG;EACjC;CACF;CACA,IAAI,KAAK,WAAW,GAAG,MAAM,IAAI,MAAM,KAAK;CAC5C,MAAM,OAAO,OAAA,GAAMC,iBAAAA,SAAAA,CAAS,QAAQ,IAAI,CAAC;CACzC,MAAM,EAAE,OAAO,gBAAgBC,wBAAAA,oBAAoB,IAAI;CACvD,MAAM,eAAA,GAAcC,UAAAA,KAAAA,CAAK,MAAMC,yBAAAA,cAAc;CAC7C,MAAM,uBAAA,GAAsBD,UAAAA,KAAAA,CAAK,MAAMJ,yBAAAA,uBAAuB;CAE9D,MAAM,WAAW,MAAM,mBAAmB,mBAAmB;CAC7D,MAAM,uBAAuB,MAAMM,uBAAAA,sBAAsB;EACvD;EACA,SAAS,CACP;GAAE,UAAUD,yBAAAA;GAAgB;EAAY,GACxC;GAAE,UAAUL,yBAAAA;GAAyB,aAAa;EAAoB,CACxE;CACF,CAAC;CACD,IAAI,qBAAqB,SAAS,GAChC,MAAM,IAAI,MACR,qBACG,KACE,EAAE,MAAM,cACP,GAAG,KAAK,IAAI,UAAU,SAAA,0BAAmC,KAAKC,yBAAAA,yBAAyB,IAC3F,CAAC,CACA,KAAK,IAAI,CACd;CACF,MAAM,OAAO,MAAM;CACnB,IAAI,SAAS,KAAA,GACX,MAAM,IAAI,MAAM,sCAAsC;CACxD,MAAM,EAAE,OAAO,mBAAmBM,wBAAAA,4BAChC,KAAK,MAAM,IAAI,CACjB;CACA,IAAI,UAAU,KAAA,GACZ,MAAM,IAAI,MAAM,wCAAwC;CAC1D,MAAM,cAAc,MAAM;CAC1B,IAAI,gBAAgB,KAAA,GAClB,MAAM,IAAI,MAAM,qCAAqC;CACvD,MAAM,eAAeC,yBAAAA,qBACnB,KAAK,MACH,OAAA,GAAMC,iBAAAA,SAAAA,CAAS,IAAI,IAAI,qBAAA,QAAA,KAAA,CAAA,CAAA,cAAA,UAAA,CAAA,CAAA,IAAoC,GAAG,MAAM,CACtE,CACF;CACA,MAAM,SAAS;EACb,GAAG;EACH,KAAKC,sBAAAA,cAAc,aAAa,KAAK,MAAM,eAAe;CAC5D;CACA,MAAM,SAASC,yBAAAA,mBAAmB;EAChC;EACA;EACA,aAAa,YAAY,KAAK;EAC9B;EACA;CACF,CAAC;CACD,MAAM,iBAAiBC,yBAAAA,yBAAyB,UAAU,IAAI;CAC9D,MAAMC,uBAAAA,mBAAmB;EAAE;EAAa,MAAM;EAAQ,MAAM;CAAM,CAAC;CACnE,IAAI,mBAAmB,UAAU,MAC/B,MAAMA,uBAAAA,mBAAmB;EACvB,aAAa;EACb,MAAM;EACN,MAAM,UAAU,QAAQ;CAC1B,CAAC;CACH,QAAQ,OAAO,MACb,aAAaR,yBAAAA,eAAe,OAAOL,yBAAAA,wBAAwB,GAC7D;AACF;AAEA,KAAK,CAAC,CAAC,OAAO,UAAmB;CAC/B,QAAQ,OAAO,MACb,gBAAgB,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK,EAAE,GACzE;CACA,QAAQ,WAAW;AACrB,CAAC"}

package/dist/cloud-setup-cli.mjs

@@ -1,6 +1,7 @@
 #!/usr/bin/env node
 import { n as generationDiagnostics, r as writeGeneratedFile, t as checkGeneratedOutput } from "./generated-file.mjs";
 import { C as cloudSetupPath, S as mergeCloudClaudeSettings, v as cloudClaudeSettingsPath, w as generateCloudSetup, y as cloudSessionStartFix } from "./toolchain-inputs.mjs";
+import { t as repositoryBun } from "./toolchain-bun.mjs";
 import { n as parseToolchainConfiguration, r as readToolchainInputs } from "./toolchain-guard.mjs";
 import { t as parseToolchainPolicy } from "./toolchain-schema.mjs";
 import { open, readFile, realpath } from "node:fs/promises";
@@ -55,7 +56,11 @@ const main = async () => {
 	if (cloud === void 0) throw new Error("requires an explicit cloud declaration");
 	const nodeVersion = files[".node-version"];
 	if (nodeVersion === void 0) throw new Error("requires tracked root .node-version");
-	const policy = parseToolchainPolicy(JSON.parse(await readFile(new URL("../toolchain.json", import.meta.url), "utf8")));
+	const sharedPolicy = parseToolchainPolicy(JSON.parse(await readFile(new URL("../toolchain.json", import.meta.url), "utf8")));
+	const policy = {
+		...sharedPolicy,
+		bun: repositoryBun(sharedPolicy.bun, files["package.json"])
+	};
 	const script = generateCloudSetup({
 		policy,
 		cloud,

package/dist/cloud-setup-cli.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"cloud-setup-cli.mjs","names":[],"sources":["../src/cloud-setup-cli.ts"],"sourcesContent":["#!/usr/bin/env node\nimport { constants } from \"node:fs\";\nimport { open, readFile, realpath } from \"node:fs/promises\";\nimport { join } from \"node:path\";\n\nimport { cloudSetupPath, generateCloudSetup } from \"./cloud-setup\";\nimport {\n  cloudClaudeSettingsPath,\n  cloudSessionStartFix,\n  mergeCloudClaudeSettings,\n} from \"./cloud-setup-claude\";\nimport {\n  checkGeneratedOutput,\n  generationDiagnostics,\n  writeGeneratedFile,\n} from \"./generated-file\";\nimport {\n  parseToolchainConfiguration,\n  readToolchainInputs,\n} from \"./toolchain-guard\";\nimport { parseToolchainPolicy } from \"./toolchain-schema\";\n\nconst usage =\n  \"Usage: stll-cloud-setup (run from repository root)\\n       stll-cloud-setup --help\";\nconst readClaudeSettings = async (destination: string) => {\n  try {\n    if ((await checkGeneratedOutput(destination)) === undefined)\n      return undefined;\n    const input = await open(\n      destination,\n      constants.O_RDONLY | constants.O_NOFOLLOW,\n    );\n    try {\n      const opened = await input.stat();\n      if (!opened.isFile() || opened.nlink !== 1)\n        throw new Error(\n          \"settings must be a single-link regular repository file\",\n        );\n      return { text: await input.readFile(\"utf8\"), mode: opened.mode & 0o777 };\n    } finally {\n      await input.close();\n    }\n  } catch (error) {\n    throw new Error(\n      `cannot safely merge ${cloudClaudeSettingsPath}: ${error instanceof Error ? error.message : String(error)}; ${cloudSessionStartFix}`,\n    );\n  }\n};\n\nconst main = async () => {\n  const args = process.argv.slice(2);\n  if (args.length === 1 && args.at(0) === \"--help\") {\n    process.stdout.write(`${usage}\\n`);\n    return;\n  }\n  if (args.length !== 0) throw new Error(usage);\n  const root = await realpath(process.cwd());\n  const { files, diagnostics } = readToolchainInputs(root);\n  const destination = join(root, cloudSetupPath);\n  const settingsDestination = join(root, cloudClaudeSettingsPath);\n  // Validate settings separately to retain actionable merge diagnostics.\n  const settings = await readClaudeSettings(settingsDestination);\n  const remainingDiagnostics = await generationDiagnostics({\n    diagnostics,\n    outputs: [\n      { relative: cloudSetupPath, destination },\n      { relative: cloudClaudeSettingsPath, destination: settingsDestination },\n    ],\n  });\n  if (remainingDiagnostics.length > 0)\n    throw new Error(\n      remainingDiagnostics\n        .map(\n          ({ path, message }) =>\n            `${path}: ${message}${path === cloudClaudeSettingsPath ? `; ${cloudSessionStartFix}` : \"\"}`,\n        )\n        .join(\"\\n\"),\n    );\n  const text = files[\"stll-toolchain.json\"];\n  if (text === undefined)\n    throw new Error(\"requires tracked stll-toolchain.json\");\n  const { cloud, rustExceptions } = parseToolchainConfiguration(\n    JSON.parse(text),\n  );\n  if (cloud === undefined)\n    throw new Error(\"requires an explicit cloud declaration\");\n  const nodeVersion = files[\".node-version\"];\n  if (nodeVersion === undefined)\n    throw new Error(\"requires tracked root .node-version\");\n  const policy = parseToolchainPolicy(\n    JSON.parse(\n      await readFile(new URL(\"../toolchain.json\", import.meta.url), \"utf8\"),\n    ),\n  );\n  const script = generateCloudSetup({\n    policy,\n    cloud,\n    nodeVersion: nodeVersion.trim(),\n    files,\n    rustExceptions,\n  });\n  const mergedSettings = mergeCloudClaudeSettings(settings?.text);\n  await writeGeneratedFile({ destination, text: script, mode: 0o755 });\n  if (mergedSettings !== settings?.text)\n    await writeGeneratedFile({\n      destination: settingsDestination,\n      text: mergedSettings,\n      mode: settings?.mode ?? 0o644,\n    });\n  process.stdout.write(\n    `Generated ${cloudSetupPath} and ${cloudClaudeSettingsPath}\\n`,\n  );\n};\n\nmain().catch((error: unknown) => {\n  process.stderr.write(\n    `cloud-setup: ${error instanceof Error ? error.message : String(error)}\\n`,\n  );\n  process.exitCode = 1;\n});\n"],"mappings":";;;;;;;;;AAsBA,MAAM,QACJ;AACF,MAAM,qBAAqB,OAAO,gBAAwB;CACxD,IAAI;EACF,IAAK,MAAM,qBAAqB,WAAW,MAAO,KAAA,GAChD,OAAO,KAAA;EACT,MAAM,QAAQ,MAAM,KAClB,aACA,UAAU,WAAW,UAAU,UACjC;EACA,IAAI;GACF,MAAM,SAAS,MAAM,MAAM,KAAK;GAChC,IAAI,CAAC,OAAO,OAAO,KAAK,OAAO,UAAU,GACvC,MAAM,IAAI,MACR,wDACF;GACF,OAAO;IAAE,MAAM,MAAM,MAAM,SAAS,MAAM;IAAG,MAAM,OAAO,OAAO;GAAM;EACzE,UAAU;GACR,MAAM,MAAM,MAAM;EACpB;CACF,SAAS,OAAO;EACd,MAAM,IAAI,MACR,uBAAuB,wBAAwB,IAAI,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK,EAAE,IAAI,sBAChH;CACF;AACF;AAEA,MAAM,OAAO,YAAY;CACvB,MAAM,OAAO,QAAQ,KAAK,MAAM,CAAC;CACjC,IAAI,KAAK,WAAW,KAAK,KAAK,GAAG,CAAC,MAAM,UAAU;EAChD,QAAQ,OAAO,MAAM,GAAG,MAAM,GAAG;EACjC;CACF;CACA,IAAI,KAAK,WAAW,GAAG,MAAM,IAAI,MAAM,KAAK;CAC5C,MAAM,OAAO,MAAM,SAAS,QAAQ,IAAI,CAAC;CACzC,MAAM,EAAE,OAAO,gBAAgB,oBAAoB,IAAI;CACvD,MAAM,cAAc,KAAK,MAAM,cAAc;CAC7C,MAAM,sBAAsB,KAAK,MAAM,uBAAuB;CAE9D,MAAM,WAAW,MAAM,mBAAmB,mBAAmB;CAC7D,MAAM,uBAAuB,MAAM,sBAAsB;EACvD;EACA,SAAS,CACP;GAAE,UAAU;GAAgB;EAAY,GACxC;GAAE,UAAU;GAAyB,aAAa;EAAoB,CACxE;CACF,CAAC;CACD,IAAI,qBAAqB,SAAS,GAChC,MAAM,IAAI,MACR,qBACG,KACE,EAAE,MAAM,cACP,GAAG,KAAK,IAAI,UAAU,SAAA,0BAAmC,KAAK,yBAAyB,IAC3F,CAAC,CACA,KAAK,IAAI,CACd;CACF,MAAM,OAAO,MAAM;CACnB,IAAI,SAAS,KAAA,GACX,MAAM,IAAI,MAAM,sCAAsC;CACxD,MAAM,EAAE,OAAO,mBAAmB,4BAChC,KAAK,MAAM,IAAI,CACjB;CACA,IAAI,UAAU,KAAA,GACZ,MAAM,IAAI,MAAM,wCAAwC;CAC1D,MAAM,cAAc,MAAM;CAC1B,IAAI,gBAAgB,KAAA,GAClB,MAAM,IAAI,MAAM,qCAAqC;CACvD,MAAM,SAAS,qBACb,KAAK,MACH,MAAM,SAAS,IAAI,IAAI,qBAAqB,YAAY,GAAG,GAAG,MAAM,CACtE,CACF;CACA,MAAM,SAAS,mBAAmB;EAChC;EACA;EACA,aAAa,YAAY,KAAK;EAC9B;EACA;CACF,CAAC;CACD,MAAM,iBAAiB,yBAAyB,UAAU,IAAI;CAC9D,MAAM,mBAAmB;EAAE;EAAa,MAAM;EAAQ,MAAM;CAAM,CAAC;CACnE,IAAI,mBAAmB,UAAU,MAC/B,MAAM,mBAAmB;EACvB,aAAa;EACb,MAAM;EACN,MAAM,UAAU,QAAQ;CAC1B,CAAC;CACH,QAAQ,OAAO,MACb,aAAa,eAAe,OAAO,wBAAwB,GAC7D;AACF;AAEA,KAAK,CAAC,CAAC,OAAO,UAAmB;CAC/B,QAAQ,OAAO,MACb,gBAAgB,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK,EAAE,GACzE;CACA,QAAQ,WAAW;AACrB,CAAC"}
+{"version":3,"file":"cloud-setup-cli.mjs","names":[],"sources":["../src/cloud-setup-cli.ts"],"sourcesContent":["#!/usr/bin/env node\nimport { constants } from \"node:fs\";\nimport { open, readFile, realpath } from \"node:fs/promises\";\nimport { join } from \"node:path\";\n\nimport { cloudSetupPath, generateCloudSetup } from \"./cloud-setup\";\nimport {\n  cloudClaudeSettingsPath,\n  cloudSessionStartFix,\n  mergeCloudClaudeSettings,\n} from \"./cloud-setup-claude\";\nimport {\n  checkGeneratedOutput,\n  generationDiagnostics,\n  writeGeneratedFile,\n} from \"./generated-file\";\nimport { repositoryBun } from \"./toolchain-bun\";\nimport {\n  parseToolchainConfiguration,\n  readToolchainInputs,\n} from \"./toolchain-guard\";\nimport { parseToolchainPolicy } from \"./toolchain-schema\";\n\nconst usage =\n  \"Usage: stll-cloud-setup (run from repository root)\\n       stll-cloud-setup --help\";\nconst readClaudeSettings = async (destination: string) => {\n  try {\n    if ((await checkGeneratedOutput(destination)) === undefined)\n      return undefined;\n    const input = await open(\n      destination,\n      constants.O_RDONLY | constants.O_NOFOLLOW,\n    );\n    try {\n      const opened = await input.stat();\n      if (!opened.isFile() || opened.nlink !== 1)\n        throw new Error(\n          \"settings must be a single-link regular repository file\",\n        );\n      return { text: await input.readFile(\"utf8\"), mode: opened.mode & 0o777 };\n    } finally {\n      await input.close();\n    }\n  } catch (error) {\n    throw new Error(\n      `cannot safely merge ${cloudClaudeSettingsPath}: ${error instanceof Error ? error.message : String(error)}; ${cloudSessionStartFix}`,\n    );\n  }\n};\n\nconst main = async () => {\n  const args = process.argv.slice(2);\n  if (args.length === 1 && args.at(0) === \"--help\") {\n    process.stdout.write(`${usage}\\n`);\n    return;\n  }\n  if (args.length !== 0) throw new Error(usage);\n  const root = await realpath(process.cwd());\n  const { files, diagnostics } = readToolchainInputs(root);\n  const destination = join(root, cloudSetupPath);\n  const settingsDestination = join(root, cloudClaudeSettingsPath);\n  // Validate settings separately to retain actionable merge diagnostics.\n  const settings = await readClaudeSettings(settingsDestination);\n  const remainingDiagnostics = await generationDiagnostics({\n    diagnostics,\n    outputs: [\n      { relative: cloudSetupPath, destination },\n      { relative: cloudClaudeSettingsPath, destination: settingsDestination },\n    ],\n  });\n  if (remainingDiagnostics.length > 0)\n    throw new Error(\n      remainingDiagnostics\n        .map(\n          ({ path, message }) =>\n            `${path}: ${message}${path === cloudClaudeSettingsPath ? `; ${cloudSessionStartFix}` : \"\"}`,\n        )\n        .join(\"\\n\"),\n    );\n  const text = files[\"stll-toolchain.json\"];\n  if (text === undefined)\n    throw new Error(\"requires tracked stll-toolchain.json\");\n  const { cloud, rustExceptions } = parseToolchainConfiguration(\n    JSON.parse(text),\n  );\n  if (cloud === undefined)\n    throw new Error(\"requires an explicit cloud declaration\");\n  const nodeVersion = files[\".node-version\"];\n  if (nodeVersion === undefined)\n    throw new Error(\"requires tracked root .node-version\");\n  const sharedPolicy = parseToolchainPolicy(\n    JSON.parse(\n      await readFile(new URL(\"../toolchain.json\", import.meta.url), \"utf8\"),\n    ),\n  );\n  const policy = {\n    ...sharedPolicy,\n    bun: repositoryBun(sharedPolicy.bun, files[\"package.json\"]),\n  };\n  const script = generateCloudSetup({\n    policy,\n    cloud,\n    nodeVersion: nodeVersion.trim(),\n    files,\n    rustExceptions,\n  });\n  const mergedSettings = mergeCloudClaudeSettings(settings?.text);\n  await writeGeneratedFile({ destination, text: script, mode: 0o755 });\n  if (mergedSettings !== settings?.text)\n    await writeGeneratedFile({\n      destination: settingsDestination,\n      text: mergedSettings,\n      mode: settings?.mode ?? 0o644,\n    });\n  process.stdout.write(\n    `Generated ${cloudSetupPath} and ${cloudClaudeSettingsPath}\\n`,\n  );\n};\n\nmain().catch((error: unknown) => {\n  process.stderr.write(\n    `cloud-setup: ${error instanceof Error ? error.message : String(error)}\\n`,\n  );\n  process.exitCode = 1;\n});\n"],"mappings":";;;;;;;;;;AAuBA,MAAM,QACJ;AACF,MAAM,qBAAqB,OAAO,gBAAwB;CACxD,IAAI;EACF,IAAK,MAAM,qBAAqB,WAAW,MAAO,KAAA,GAChD,OAAO,KAAA;EACT,MAAM,QAAQ,MAAM,KAClB,aACA,UAAU,WAAW,UAAU,UACjC;EACA,IAAI;GACF,MAAM,SAAS,MAAM,MAAM,KAAK;GAChC,IAAI,CAAC,OAAO,OAAO,KAAK,OAAO,UAAU,GACvC,MAAM,IAAI,MACR,wDACF;GACF,OAAO;IAAE,MAAM,MAAM,MAAM,SAAS,MAAM;IAAG,MAAM,OAAO,OAAO;GAAM;EACzE,UAAU;GACR,MAAM,MAAM,MAAM;EACpB;CACF,SAAS,OAAO;EACd,MAAM,IAAI,MACR,uBAAuB,wBAAwB,IAAI,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK,EAAE,IAAI,sBAChH;CACF;AACF;AAEA,MAAM,OAAO,YAAY;CACvB,MAAM,OAAO,QAAQ,KAAK,MAAM,CAAC;CACjC,IAAI,KAAK,WAAW,KAAK,KAAK,GAAG,CAAC,MAAM,UAAU;EAChD,QAAQ,OAAO,MAAM,GAAG,MAAM,GAAG;EACjC;CACF;CACA,IAAI,KAAK,WAAW,GAAG,MAAM,IAAI,MAAM,KAAK;CAC5C,MAAM,OAAO,MAAM,SAAS,QAAQ,IAAI,CAAC;CACzC,MAAM,EAAE,OAAO,gBAAgB,oBAAoB,IAAI;CACvD,MAAM,cAAc,KAAK,MAAM,cAAc;CAC7C,MAAM,sBAAsB,KAAK,MAAM,uBAAuB;CAE9D,MAAM,WAAW,MAAM,mBAAmB,mBAAmB;CAC7D,MAAM,uBAAuB,MAAM,sBAAsB;EACvD;EACA,SAAS,CACP;GAAE,UAAU;GAAgB;EAAY,GACxC;GAAE,UAAU;GAAyB,aAAa;EAAoB,CACxE;CACF,CAAC;CACD,IAAI,qBAAqB,SAAS,GAChC,MAAM,IAAI,MACR,qBACG,KACE,EAAE,MAAM,cACP,GAAG,KAAK,IAAI,UAAU,SAAA,0BAAmC,KAAK,yBAAyB,IAC3F,CAAC,CACA,KAAK,IAAI,CACd;CACF,MAAM,OAAO,MAAM;CACnB,IAAI,SAAS,KAAA,GACX,MAAM,IAAI,MAAM,sCAAsC;CACxD,MAAM,EAAE,OAAO,mBAAmB,4BAChC,KAAK,MAAM,IAAI,CACjB;CACA,IAAI,UAAU,KAAA,GACZ,MAAM,IAAI,MAAM,wCAAwC;CAC1D,MAAM,cAAc,MAAM;CAC1B,IAAI,gBAAgB,KAAA,GAClB,MAAM,IAAI,MAAM,qCAAqC;CACvD,MAAM,eAAe,qBACnB,KAAK,MACH,MAAM,SAAS,IAAI,IAAI,qBAAqB,YAAY,GAAG,GAAG,MAAM,CACtE,CACF;CACA,MAAM,SAAS;EACb,GAAG;EACH,KAAK,cAAc,aAAa,KAAK,MAAM,eAAe;CAC5D;CACA,MAAM,SAAS,mBAAmB;EAChC;EACA;EACA,aAAa,YAAY,KAAK;EAC9B;EACA;CACF,CAAC;CACD,MAAM,iBAAiB,yBAAyB,UAAU,IAAI;CAC9D,MAAM,mBAAmB;EAAE;EAAa,MAAM;EAAQ,MAAM;CAAM,CAAC;CACnE,IAAI,mBAAmB,UAAU,MAC/B,MAAM,mBAAmB;EACvB,aAAa;EACb,MAAM;EACN,MAAM,UAAU,QAAQ;CAC1B,CAAC;CACH,QAAQ,OAAO,MACb,aAAa,eAAe,OAAO,wBAAwB,GAC7D;AACF;AAEA,KAAK,CAAC,CAAC,OAAO,UAAmB;CAC/B,QAAQ,OAAO,MACb,gBAAgB,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK,EAAE,GACzE;CACA,QAAQ,WAAW;AACrB,CAAC"}

package/dist/toolchain-bun.cjs

@@ -0,0 +1,34 @@
+let semver = require("semver");
+//#region src/toolchain-bun.ts
+const STABLE_RELEASE = /^\d+\.\d+\.\d+$/u;
+/**
+* The shared policy names the minimum Bun. A repository pins one exact
+* release at or above it in its root packageManager, and every other Bun
+* reference in the repository must equal that release.
+*/
+const repositoryBun = (floor, manifest) => {
+	let packageManager;
+	try {
+		const parsed = JSON.parse(manifest ?? "");
+		if (typeof parsed === "object" && parsed !== null) packageManager = Reflect.get(parsed, "packageManager");
+	} catch {}
+	const version = typeof packageManager === "string" ? /^bun@(.+)$/.exec(packageManager)?.[1] : void 0;
+	return version !== void 0 && STABLE_RELEASE.test(version) && (0, semver.valid)(version) === version && (0, semver.gte)(version, floor) ? version : floor;
+};
+/** A selected runtime satisfies the policy when it is an exact release at or above the floor. */
+const satisfiesBunFloor = (version, floor) => STABLE_RELEASE.test(version) && (0, semver.valid)(version) === version && (0, semver.gte)(version, floor);
+//#endregion
+Object.defineProperty(exports, "repositoryBun", {
+	enumerable: true,
+	get: function() {
+		return repositoryBun;
+	}
+});
+Object.defineProperty(exports, "satisfiesBunFloor", {
+	enumerable: true,
+	get: function() {
+		return satisfiesBunFloor;
+	}
+});
+
+//# sourceMappingURL=toolchain-bun.cjs.map

package/dist/toolchain-bun.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"toolchain-bun.cjs","names":["valid","gte"],"sources":["../src/toolchain-bun.ts"],"sourcesContent":["import { gte, valid } from \"semver\";\n\n// Stable releases only: a prerelease never satisfies the shared minimum.\nconst STABLE_RELEASE = /^\\d+\\.\\d+\\.\\d+$/u;\n\n/**\n * The shared policy names the minimum Bun. A repository pins one exact\n * release at or above it in its root packageManager, and every other Bun\n * reference in the repository must equal that release.\n */\nexport const repositoryBun = (floor: string, manifest: string | undefined) => {\n  let packageManager: unknown;\n  try {\n    const parsed: unknown = JSON.parse(manifest ?? \"\");\n    if (typeof parsed === \"object\" && parsed !== null)\n      packageManager = Reflect.get(parsed, \"packageManager\");\n  } catch {\n    // Manifest diagnostics report a malformed root package.json.\n  }\n  const version =\n    typeof packageManager === \"string\"\n      ? /^bun@(.+)$/.exec(packageManager)?.[1]\n      : undefined;\n  return version !== undefined &&\n    STABLE_RELEASE.test(version) &&\n    valid(version) === version &&\n    gte(version, floor)\n    ? version\n    : floor;\n};\n\n/** A selected runtime satisfies the policy when it is an exact release at or above the floor. */\nexport const satisfiesBunFloor = (version: string, floor: string) =>\n  STABLE_RELEASE.test(version) &&\n  valid(version) === version &&\n  gte(version, floor);\n"],"mappings":";;AAGA,MAAM,iBAAiB;;;;;;AAOvB,MAAa,iBAAiB,OAAe,aAAiC;CAC5E,IAAI;CACJ,IAAI;EACF,MAAM,SAAkB,KAAK,MAAM,YAAY,EAAE;EACjD,IAAI,OAAO,WAAW,YAAY,WAAW,MAC3C,iBAAiB,QAAQ,IAAI,QAAQ,gBAAgB;CACzD,QAAQ,CAER;CACA,MAAM,UACJ,OAAO,mBAAmB,WACtB,aAAa,KAAK,cAAc,CAAC,GAAG,KACpC,KAAA;CACN,OAAO,YAAY,KAAA,KACjB,eAAe,KAAK,OAAO,MAAA,GAC3BA,OAAAA,MAAAA,CAAM,OAAO,MAAM,YAAA,GACnBC,OAAAA,IAAAA,CAAI,SAAS,KAAK,IAChB,UACA;AACN;;AAGA,MAAa,qBAAqB,SAAiB,UACjD,eAAe,KAAK,OAAO,MAAA,GAC3BD,OAAAA,MAAAA,CAAM,OAAO,MAAM,YAAA,GACnBC,OAAAA,IAAAA,CAAI,SAAS,KAAK"}

package/dist/toolchain-bun.mjs

@@ -0,0 +1,23 @@
+import { gte, valid } from "semver";
+//#region src/toolchain-bun.ts
+const STABLE_RELEASE = /^\d+\.\d+\.\d+$/u;
+/**
+* The shared policy names the minimum Bun. A repository pins one exact
+* release at or above it in its root packageManager, and every other Bun
+* reference in the repository must equal that release.
+*/
+const repositoryBun = (floor, manifest) => {
+	let packageManager;
+	try {
+		const parsed = JSON.parse(manifest ?? "");
+		if (typeof parsed === "object" && parsed !== null) packageManager = Reflect.get(parsed, "packageManager");
+	} catch {}
+	const version = typeof packageManager === "string" ? /^bun@(.+)$/.exec(packageManager)?.[1] : void 0;
+	return version !== void 0 && STABLE_RELEASE.test(version) && valid(version) === version && gte(version, floor) ? version : floor;
+};
+/** A selected runtime satisfies the policy when it is an exact release at or above the floor. */
+const satisfiesBunFloor = (version, floor) => STABLE_RELEASE.test(version) && valid(version) === version && gte(version, floor);
+//#endregion
+export { satisfiesBunFloor as n, repositoryBun as t };
+
+//# sourceMappingURL=toolchain-bun.mjs.map

package/dist/toolchain-bun.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"toolchain-bun.mjs","names":[],"sources":["../src/toolchain-bun.ts"],"sourcesContent":["import { gte, valid } from \"semver\";\n\n// Stable releases only: a prerelease never satisfies the shared minimum.\nconst STABLE_RELEASE = /^\\d+\\.\\d+\\.\\d+$/u;\n\n/**\n * The shared policy names the minimum Bun. A repository pins one exact\n * release at or above it in its root packageManager, and every other Bun\n * reference in the repository must equal that release.\n */\nexport const repositoryBun = (floor: string, manifest: string | undefined) => {\n  let packageManager: unknown;\n  try {\n    const parsed: unknown = JSON.parse(manifest ?? \"\");\n    if (typeof parsed === \"object\" && parsed !== null)\n      packageManager = Reflect.get(parsed, \"packageManager\");\n  } catch {\n    // Manifest diagnostics report a malformed root package.json.\n  }\n  const version =\n    typeof packageManager === \"string\"\n      ? /^bun@(.+)$/.exec(packageManager)?.[1]\n      : undefined;\n  return version !== undefined &&\n    STABLE_RELEASE.test(version) &&\n    valid(version) === version &&\n    gte(version, floor)\n    ? version\n    : floor;\n};\n\n/** A selected runtime satisfies the policy when it is an exact release at or above the floor. */\nexport const satisfiesBunFloor = (version: string, floor: string) =>\n  STABLE_RELEASE.test(version) &&\n  valid(version) === version &&\n  gte(version, floor);\n"],"mappings":";;AAGA,MAAM,iBAAiB;;;;;;AAOvB,MAAa,iBAAiB,OAAe,aAAiC;CAC5E,IAAI;CACJ,IAAI;EACF,MAAM,SAAkB,KAAK,MAAM,YAAY,EAAE;EACjD,IAAI,OAAO,WAAW,YAAY,WAAW,MAC3C,iBAAiB,QAAQ,IAAI,QAAQ,gBAAgB;CACzD,QAAQ,CAER;CACA,MAAM,UACJ,OAAO,mBAAmB,WACtB,aAAa,KAAK,cAAc,CAAC,GAAG,KACpC,KAAA;CACN,OAAO,YAAY,KAAA,KACjB,eAAe,KAAK,OAAO,KAC3B,MAAM,OAAO,MAAM,WACnB,IAAI,SAAS,KAAK,IAChB,UACA;AACN;;AAGA,MAAa,qBAAqB,SAAiB,UACjD,eAAe,KAAK,OAAO,KAC3B,MAAM,OAAO,MAAM,WACnB,IAAI,SAAS,KAAK"}

package/dist/toolchain-guard.cjs

@@ -2,6 +2,7 @@ const require_rolldown_runtime = require("./rolldown-runtime.cjs");
 const require_quarantine_policy = require("./quarantine-policy2.cjs");
 const require_toolchain_inputs = require("./toolchain-inputs.cjs");
 const require_git_tracked_output = require("./git-tracked-output.cjs");
+const require_toolchain_bun = require("./toolchain-bun.cjs");
 const require_consumer_node_support = require("./consumer-node-support.cjs");
 const require_toolchain_dependabot = require("./toolchain-dependabot.cjs");
 const require_toolchain_schema = require("./toolchain-schema.cjs");
@@ -17,7 +18,7 @@ picomatch = require_rolldown_runtime.__toESM(picomatch, 1);
 let node_module = require("node:module");
 //#endregion
 //#region src/toolchain-consumer-checks.ts
-const consumerRunnerVersion = "1.8.0";
+const consumerRunnerVersion = "1.9.0";
 const consumerCheckWorkflow = "stella/.github/.github/workflows/package-consumer-compat.yml";
 const record$10 = (value) => typeof value === "object" && value !== null && !Array.isArray(value);
 const repositoryDirectory = (value) => typeof value === "string" && value !== "" && !value.includes("\\") && !value.includes("${{") && !value.split("").some((character) => {
@@ -1131,7 +1132,7 @@ const checkPackageFiles = ({ files, policy }) => {
 			rule: "bun-pins",
 			key: "packageManager",
 			value: manager,
-			message: `packageManager Bun version must be ${policy.bun}, found ${JSON.stringify(manager)}`
+			message: `packageManager Bun version must be ${policy.bun} (one exact release at or above the shared minimum, the same in every manifest), found ${JSON.stringify(manager)}`
 		});
 		const checkEntries = (entries, location) => {
 			if (!record$7(entries)) return;
@@ -3974,8 +3975,12 @@ const readToolchainInputs = (root, { bunLock = "presence" } = {}) => {
 		diagnostics
 	};
 };
-const checkToolchain = ({ root, policy, onDelegated, onWarning, now }) => {
+const checkToolchain = ({ root, policy: sharedPolicy, onDelegated, onWarning, now }) => {
 	const { files, trackedFiles, diagnostics } = readToolchainInputs(root, { bunLock: "content" });
+	const policy = {
+		...sharedPolicy,
+		bun: require_toolchain_bun.repositoryBun(sharedPolicy.bun, files["package.json"])
+	};
 	let repository;
 	try {
 		const origin = (0, node_child_process.execFileSync)("git", [