@usequark/quark-create-app 1.23.11 → 1.23.13

package/templates/base-project/scripts/check-loading.mjs

@@ -17,7 +17,7 @@ let failed = false;
 function isDbBacked(pagePath) {
 	const content = readFileSync(pagePath, "utf-8");
 	// Matches scoped db packages in scaffolds (@scope/db) and the monorepo
-	// package name (@techstream/quark-db).
+	// package name (@usequark/quark-db).
 	return /@[^/"'\s]+\/(?:quark-)?db["']/.test(content);
 }
 

package/templates/base-project/scripts/doctor.js

@@ -186,7 +186,7 @@ if (forgotPwContent && forgotPwContent.includes("quark-auth-layout")) {
 						"imports",
 						`Source files import "${importPattern}" but "${pkg}" is not installed`,
 						badFiles.map((f) => `  ${path.relative(ROOT, f)}`).join("\n"),
-						`Remove these imports or run: npx @techstream/quark-create-app add ${pkg}`,
+						`Remove these imports or run: npx @usequark/quark-create-app add ${pkg}`,
 					);
 				}
 			}

package/templates/base-project/skills/add-endpoint/SKILL.md

@@ -11,7 +11,7 @@ Add a REST CRUD endpoint for an existing model: list/create on the collection ro
 
 - **API routes** live in `apps/web/src/app/api/<resource>/`.
 - **Data access** goes through query helpers in `packages/db/src/queries.js` — never call `prisma.*` directly.
-- **Auth** via `requireRole` from `@/lib/auth-middleware`; **validation** via Zod `validateBody`; **CSRF** via `withCsrfProtection` from `@techstream/quark-core`.
+- **Auth** via `requireRole` from `@/lib/auth-middleware`; **validation** via Zod `validateBody`; **CSRF** via `withCsrfProtection` from `@usequark/quark-core`.
 
 ## Workflow
 

package/templates/base-project/skills/ecommerce/SKILL.md

@@ -22,9 +22,9 @@ An ecommerce system manages a product catalog, shopping cart, checkout flow, ord
 
 - **Models** live in `packages/db/prisma/schema.prisma`. Every model needs `id`, `createdAt DateTime @default(now())`, `updatedAt DateTime @updatedAt`. After changes: `pnpm db:generate && pnpm db:migrate`.
 - **Data access** goes through query helpers in `packages/db/src/queries.js` — never call `prisma.*` directly in pages/actions.
-- **Server Actions** (preferred for mutations) use `"use server"`, Zod validation, and `AppError`/`ValidationError` from `@techstream/quark-core/errors`.
+- **Server Actions** (preferred for mutations) use `"use server"`, Zod validation, and `AppError`/`ValidationError` from `@usequark/quark-core/errors`.
 - **Admin views** live under `apps/web/src/app/admin/` (see the admin-dashboard skill for product/order management).
-- **Auth** via `getCurrentSession` from `@techstream/quark-core`.
+- **Auth** via `getCurrentSession` from `@usequark/quark-core`.
 - **Payment** integration follows the payment skill for Stripe Checkout or similar processors.
 
 ## Workflow

package/templates/base-project/skills/ecommerce-cart/SKILL.md

@@ -19,8 +19,8 @@ The cart is a temporary collection of items a user intends to purchase. Key conc
 
 - **Models** live in `packages/db/prisma/schema.prisma`. Every model needs `id`, `createdAt DateTime @default(now())`, `updatedAt DateTime @updatedAt`. After changes: `pnpm db:generate && pnpm db:migrate`.
 - **Data access** goes through query helpers in `packages/db/src/queries.js` — never call `prisma.*` directly in pages/actions.
-- **Server Actions** use `"use server"`, Zod validation, and `AppError`/`ValidationError` from `@techstream/quark-core/errors`.
-- **Auth** via `getCurrentSession` from `@techstream/quark-core`.
+- **Server Actions** use `"use server"`, Zod validation, and `AppError`/`ValidationError` from `@usequark/quark-core/errors`.
+- **Auth** via `getCurrentSession` from `@usequark/quark-core`.
 
 ## Models
 
@@ -88,7 +88,7 @@ Use a Prisma transaction to prevent race conditions. Check stock availability be
 
 ```js
 import { prisma } from "@__QUARK_SCOPE__/db";
-import { AppError } from "@techstream/quark-core/errors";
+import { AppError } from "@usequark/quark-core/errors";
 
 export async function addToCart(cartId, variantId, quantity = 1) {
   return prisma.$transaction(async (tx) => {

package/templates/base-project/skills/ecommerce-catalog/SKILL.md

@@ -20,7 +20,7 @@ The catalog is the foundation of an ecommerce system. It defines what you sell,
 - **Models** live in `packages/db/prisma/schema.prisma`. Every model needs `id`, `createdAt DateTime @default(now())`, `updatedAt DateTime @updatedAt`. After changes: `pnpm db:generate && pnpm db:migrate`.
 - **Data access** goes through query helpers in `packages/db/src/queries.js` — never call `prisma.*` directly in pages/actions.
 - **API routes** live in `apps/web/src/app/api/<resource>/`. Guard with `requireRole`, validate with Zod via `validateBody`, wrap mutations in `withCsrfProtection`. Follow `apps/web/src/app/api/users/route.js` as the reference shape.
-- **Server Actions** use `"use server"`, Zod validation, and `AppError`/`ValidationError` from `@techstream/quark-core/errors`.
+- **Server Actions** use `"use server"`, Zod validation, and `AppError`/`ValidationError` from `@usequark/quark-core/errors`.
 - **Admin views** live under `apps/web/src/app/admin/products/` and `apps/web/src/app/admin/categories/`.
 
 ## Models
@@ -127,8 +127,8 @@ export async function getCategoryTree() {
 "use server";
 import { z } from "zod";
 import { prisma } from "@__QUARK_SCOPE__/db";
-import { ValidationError, AppError } from "@techstream/quark-core/errors";
-import { createLogger } from "@techstream/quark-core";
+import { ValidationError, AppError } from "@usequark/quark-core/errors";
+import { createLogger } from "@usequark/quark-core";
 
 const log = createLogger("action:product");
 

package/templates/base-project/skills/ecommerce-checkout/SKILL.md

@@ -68,8 +68,8 @@ model OrderItem {
 "use server";
 import { z } from "zod";
 import { prisma } from "@__QUARK_SCOPE__/db";
-import { AppError, ValidationError } from "@techstream/quark-core/errors";
-import { createLogger } from "@techstream/quark-core";
+import { AppError, ValidationError } from "@usequark/quark-core/errors";
+import { createLogger } from "@usequark/quark-core";
 
 const log = createLogger("action:checkout");
 

package/templates/base-project/skills/i18n/SKILL.md

@@ -34,8 +34,8 @@ A localized app must handle locale detection, routing, content translation, and
 - **Request config:** `getRequestConfig` from `next-intl/server` resolves the locale per request and loads message files.
 - **Models:** CMS models get a `locale String` field. Queries filter by locale with fallback chain.
 - **Validation** — Zod for all Server Actions and API routes. Use a locale enum for localized content submissions.
-- **Auth** via `getCurrentSession` from `@techstream/quark-core`.
-- **Locale utilities** from `@techstream/quark-core/locale`: `getDefaultLocale()`, `getSupportedLocales()`, `isLocaleSupported()`.
+- **Auth** via `getCurrentSession` from `@usequark/quark-core`.
+- **Locale utilities** from `@usequark/quark-core/locale`: `getDefaultLocale()`, `getSupportedLocales()`, `isLocaleSupported()`.
 
 ## Workflow
 
@@ -52,7 +52,7 @@ A localized app must handle locale detection, routing, content translation, and
 ```js
 // src/i18n/routing.js
 import { defineRouting } from "next-intl/routing";
-import { getDefaultLocale, getSupportedLocales } from "@techstream/quark-core/locale";
+import { getDefaultLocale, getSupportedLocales } from "@usequark/quark-core/locale";
 
 const supportedLocales = getSupportedLocales();
 
@@ -104,7 +104,7 @@ export const config = {
 "use client";
 import { useLocale, useTranslations } from "next-intl";
 import { useRouter, usePathname } from "next/navigation";
-import { getSupportedLocales } from "@techstream/quark-core/locale";
+import { getSupportedLocales } from "@usequark/quark-core/locale";
 
 export function LocaleSwitcher() {
   const locale = useLocale();
@@ -152,7 +152,7 @@ model Page {
 ## Example: locale-aware query
 
 ```js
-import { getDefaultLocale, isLocaleSupported } from "@techstream/quark-core/locale";
+import { getDefaultLocale, isLocaleSupported } from "@usequark/quark-core/locale";
 
 export async function getPageBySlug(slug, locale) {
   const validLocale = isLocaleSupported(locale) ? locale : getDefaultLocale();
@@ -185,7 +185,7 @@ export async function generateMetadata({ params }) {
 
 ```js
 import { z } from "zod";
-import { isLocaleSupported } from "@techstream/quark-core/locale";
+import { isLocaleSupported } from "@usequark/quark-core/locale";
 
 export const localizedPageSchema = z.object({
   title: z.string().min(1).max(255),

package/templates/base-project/skills/payment/SKILL.md

@@ -24,11 +24,11 @@ Key concepts:
 
 ## Framework context
 
-- **Stripe client** — `createStripeClient()` from `@techstream/quark-core/stripe`. Reads `STRIPE_SECRET_KEY` from env.
-- **Webhook route** — `apps/web/src/app/api/stripe/webhook/route.js`. Use `getStripeWebhookEvent()` from `@techstream/quark-core/stripe` to verify signatures.
+- **Stripe client** — `createStripeClient()` from `@usequark/quark-core/stripe`. Reads `STRIPE_SECRET_KEY` from env.
+- **Webhook route** — `apps/web/src/app/api/stripe/webhook/route.js`. Use `getStripeWebhookEvent()` from `@usequark/quark-core/stripe` to verify signatures.
 - **Validation** — Zod for all incoming data. Webhook event data is already validated by Stripe's SDK.
-- **Errors** — `AppError` / `ValidationError` from `@techstream/quark-core/errors` for app errors. Never throw on webhook failures — return 200 to prevent Stripe retries for unfixable errors.
-- **Logging** — `createLogger("stripe:webhook")` from `@techstream/quark-core`.
+- **Errors** — `AppError` / `ValidationError` from `@usequark/quark-core/errors` for app errors. Never throw on webhook failures — return 200 to prevent Stripe retries for unfixable errors.
+- **Logging** — `createLogger("stripe:webhook")` from `@usequark/quark-core`.
 - **Models** — add `stripeCustomerId String?` to User, `stripeSessionId String?` / `stripeSubscriptionId String?` to relevant models. Every model needs `createdAt` / `updatedAt`.
 
 ## Checkout sessions
@@ -49,7 +49,7 @@ export const checkoutSchema = z.object({
 ### One-time payment
 
 ```js
-import { createStripeClient } from "@techstream/quark-core/stripe";
+import { createStripeClient } from "@usequark/quark-core/stripe";
 
 const stripe = await createStripeClient();
 const session = await stripe.checkout.sessions.create({
@@ -82,8 +82,8 @@ const session = await stripe.checkout.sessions.create({
 ```js
 // apps/web/src/app/api/stripe/webhook/route.js
 import { NextResponse } from "next/server";
-import { getStripeWebhookEvent } from "@techstream/quark-core/stripe";
-import { createLogger } from "@techstream/quark-core";
+import { getStripeWebhookEvent } from "@usequark/quark-core/stripe";
+import { createLogger } from "@usequark/quark-core";
 import { prisma } from "@__QUARK_SCOPE__/db";
 
 const log = createLogger("stripe:webhook");
@@ -180,7 +180,7 @@ model WebhookEvent {
 ### Create or retrieve Stripe customer
 
 ```js
-import { createStripeClient } from "@techstream/quark-core/stripe";
+import { createStripeClient } from "@usequark/quark-core/stripe";
 
 export async function getOrCreateStripeCustomer(user) {
   if (user.stripeCustomerId) return user.stripeCustomerId;

package/templates/config/package.json

@@ -13,7 +13,7 @@
 		"./redis": "./src/redis.js"
 	},
 	"dependencies": {
-		"@techstream/quark-core": "^2.0.0",
+		"@usequark/quark-core": "^2.0.0",
 		"ioredis": "^6.0.0",
 		"zod": "^4.6.5"
 	}

package/templates/config/src/app-url.js

@@ -20,7 +20,7 @@
  *                      listed in ALLOWED_ORIGINS (comma-separated).
  */
 
-import { ValidationError } from "@techstream/quark-core/errors";
+import { ValidationError } from "@usequark/quark-core/errors";
 
 /**
  * Resolves the canonical application URL.

package/templates/config/src/environment.js

@@ -1,5 +1,5 @@
 /**
- * @techstream/quark-config - Environment Configuration
+ * @usequark/quark-config - Environment Configuration
  * Provides environment-specific defaults for dev, test, staging, and production.
  * Each environment defines sensible defaults that can be overridden via env vars.
  */

package/templates/config/src/load-config.js

@@ -1,10 +1,10 @@
 /**
- * @techstream/quark-config - Configuration Loader
+ * @usequark/quark-config - Configuration Loader
  * Centralised configuration management that combines environment validation,
  * environment-specific defaults, and user overrides into a single config object.
  *
  * Usage:
- *   import { loadConfig } from "@techstream/quark-config";
+ *   import { loadConfig } from "@usequark/quark-config";
  *   const config = loadConfig();          // validates env + returns typed config
  *   const config = loadConfig({ cache: { defaultTtl: 120 } }); // with overrides
  */

package/templates/config/src/redis.js

@@ -1,4 +1,4 @@
-import { resolveRedisConnection } from "@techstream/quark-core";
+import { resolveRedisConnection } from "@usequark/quark-core";
 
 let _redis = null;
 

package/templates/config/src/validate-env.js

@@ -1,5 +1,5 @@
-import { createLogger } from "@techstream/quark-core";
-import { ValidationError } from "@techstream/quark-core/errors";
+import { createLogger } from "@usequark/quark-core";
+import { ValidationError } from "@usequark/quark-core/errors";
 import { z } from "zod";
 import { syncNextAuthUrl } from "./app-url.js";
 

package/templates/jobs/README.md

@@ -41,11 +41,11 @@ Treat them as examples, not a required domain model.
 1. Add a queue or job name in `src/definitions.js`
 2. Create a handler in `apps/worker/src/handlers/`
 3. Register that handler in `apps/worker/src/handlers/index.js`
-4. Dispatch the job from the web app using `createQueue()` and `addJob()` from `@techstream/quark-core`
+4. Dispatch the job from the web app using `createQueue()` and `addJob()` from `@usequark/quark-core`
 
 ## Relationship to Quark Core
 
-`@techstream/quark-core` provides the queue infrastructure.
+`@usequark/quark-core` provides the queue infrastructure.
 
 `@yourscope/jobs` defines **your** queue names and job names.
 

package/templates/mobile/lib/errors.ts

@@ -1,5 +1,5 @@
 /**
- * Mobile equivalent of @techstream/quark-core's AppError.
+ * Mobile equivalent of @usequark/quark-core's AppError.
  *
  * React Native cannot import Node.js packages, so this module defines a
  * client-side error class whose shape mirrors AppError.toJSON() — same

package/templates/ui/src/theme-constants.js

@@ -1,5 +1,5 @@
 /**
- * Theme system constants for @techstream/quark-ui.
+ * Theme system constants for @usequark/quark-ui.
  *
  * These three values form the contract between ThemeProvider and any
  * out-of-tree component (e.g. HomeThemeToggle in apps/web) that interoperates

package/templates/worker/README.md

@@ -16,7 +16,7 @@ pnpm dev                 # Starts worker with file watching
 2. Create a handler in `apps/worker/src/handlers/<job-name>.js`:
 
 ```javascript
-import { createLogger } from "@techstream/quark-core";
+import { createLogger } from "@usequark/quark-core";
 
 const log = createLogger("job:my-task");
 
@@ -39,7 +39,7 @@ const jobHandlers = {
 ## Dispatching Jobs
 
 ```javascript
-import { createQueue, addJob } from "@techstream/quark-core";
+import { createQueue, addJob } from "@usequark/quark-core";
 import { JOB_NAMES } from "@yourscope/jobs";
 
 const queue = createQueue("default");

package/templates/worker/package.json

@@ -22,10 +22,10 @@
 	"license": "MIT",
 	"packageManager": "pnpm@10.12.1",
 	"dependencies": {
-		"@techstream/quark-config": "workspace:*",
-		"@techstream/quark-core": "^2.0.0",
-		"@techstream/quark-db": "workspace:*",
-		"@techstream/quark-jobs": "workspace:*",
+		"@usequark/quark-config": "workspace:*",
+		"@usequark/quark-core": "^2.0.0",
+		"@usequark/quark-db": "workspace:*",
+		"@usequark/quark-jobs": "workspace:*",
 		"bullmq": "^6.3.8",
 		"jose": "^6.2.12"
 	},

package/templates/worker/src/handlers/email-job-validation.js

@@ -1,4 +1,4 @@
-import { AppError, ValidationError } from "@techstream/quark-core/errors";
+import { AppError, ValidationError } from "@usequark/quark-core/errors";
 
 export function requireWelcomeEmailUserId(data) {
 	const userId = data?.userId;

package/templates/worker/src/handlers/email.js

@@ -7,9 +7,9 @@ import {
 	createEmailService,
 	passwordResetEmail,
 	welcomeEmail,
-} from "@techstream/quark-core";
-import { prisma } from "@techstream/quark-db";
-import { JOB_NAMES } from "@techstream/quark-jobs";
+} from "@usequark/quark-core";
+import { prisma } from "@usequark/quark-db";
+import { JOB_NAMES } from "@usequark/quark-jobs";
 import {
 	requireResetPasswordEmailData,
 	requireUserEmailRecord,
@@ -21,7 +21,7 @@ const emailService = createEmailService();
 /**
  * Job handler for SEND_WELCOME_EMAIL
  * @param {import("bullmq").Job} bullJob
- * @param {import("@techstream/quark-core").Logger} logger
+ * @param {import("@usequark/quark-core").Logger} logger
  */
 export async function handleSendWelcomeEmail(bullJob, logger) {
 	const userId = requireWelcomeEmailUserId(bullJob.data);
@@ -60,7 +60,7 @@ export async function handleSendWelcomeEmail(bullJob, logger) {
 /**
  * Job handler for SEND_RESET_PASSWORD_EMAIL
  * @param {import("bullmq").Job} bullJob
- * @param {import("@techstream/quark-core").Logger} logger
+ * @param {import("@usequark/quark-core").Logger} logger
  */
 export async function handleSendResetPasswordEmail(bullJob, logger) {
 	const { userId, resetUrl } = requireResetPasswordEmailData(bullJob.data);

package/templates/worker/src/handlers/files.js

@@ -3,16 +3,16 @@
  * Processes file-related background jobs (cleanup, etc.)
  */
 
-import { createStorage } from "@techstream/quark-core";
-import { file } from "@techstream/quark-db";
-import { JOB_NAMES } from "@techstream/quark-jobs";
+import { createStorage } from "@usequark/quark-core";
+import { file } from "@usequark/quark-db";
+import { JOB_NAMES } from "@usequark/quark-jobs";
 
 /**
  * Job handler for CLEANUP_ORPHANED_FILES
  * Deletes files with no owner that are older than a retention period.
  *
  * @param {import("bullmq").Job} bullJob
- * @param {import("@techstream/quark-core").Logger} logger
+ * @param {import("@usequark/quark-core").Logger} logger
  */
 export async function handleCleanupOrphanedFiles(bullJob, logger) {
 	const retentionHours = bullJob.data?.retentionHours || 24;

package/templates/worker/src/handlers/index.js

@@ -4,7 +4,7 @@
  * Each handler receives (bullJob, logger) and returns a result object.
  */
 
-import { JOB_NAMES } from "@techstream/quark-jobs";
+import { JOB_NAMES } from "@usequark/quark-jobs";
 import {
 	handleSendResetPasswordEmail,
 	handleSendWelcomeEmail,

package/templates/worker/src/handlers/push-notification.js

@@ -4,8 +4,8 @@
  * No Firebase SDK — uses HTTP APIs with service account credentials from env.
  */
 
-import { AppError, ValidationError } from "@techstream/quark-core/errors";
-import { prisma } from "@techstream/quark-db";
+import { AppError, ValidationError } from "@usequark/quark-core/errors";
+import { prisma } from "@usequark/quark-db";
 import { importPKCS8, SignJWT } from "jose";
 
 const APNS_KEY = process.env.APNS_KEY;
@@ -19,7 +19,7 @@ const GCP_SERVICE_ACCOUNT = process.env.GCP_SERVICE_ACCOUNT;
 /**
  * Job handler for SEND_PUSH_NOTIFICATION
  * @param {import("bullmq").Job} bullJob
- * @param {import("@techstream/quark-core").Logger} logger
+ * @param {import("@usequark/quark-core").Logger} logger
  */
 export async function handleSendPushNotification(bullJob, logger) {
 	const { userId, title, body: notificationBody, data } = bullJob.data;

package/templates/worker/src/index.js

@@ -11,10 +11,10 @@ import {
 	createWorker,
 	getRedisUrl,
 	updateQueueDepths,
-} from "@techstream/quark-core";
-import { AppError } from "@techstream/quark-core/errors";
-import { job, prisma } from "@techstream/quark-db";
-import { JOB_NAMES, JOB_QUEUES } from "@techstream/quark-jobs";
+} from "@usequark/quark-core";
+import { AppError } from "@usequark/quark-core/errors";
+import { job, prisma } from "@usequark/quark-db";
+import { JOB_NAMES, JOB_QUEUES } from "@usequark/quark-jobs";
 import { jobHandlers } from "./handlers/index.js";
 
 const logger = createLogger("worker");
@@ -242,7 +242,7 @@ export async function waitForDatabase(
  */
 async function preflight() {
 	// Load and validate environment variables
-	const { loadEnv } = await import("@techstream/quark-config");
+	const { loadEnv } = await import("@usequark/quark-config");
 	loadEnv("worker");
 
 	logger.info("Running preflight health checks");
@@ -362,7 +362,7 @@ async function createQueueWorker(queueName) {
  */
 async function startWorker() {
 	// Load and validate environment variables
-	const { loadEnv } = await import("@techstream/quark-config");
+	const { loadEnv } = await import("@usequark/quark-config");
 	loadEnv("worker");
 
 	logger.info("Starting Quark Worker Service");

package/templates/worker/src/lib/railway.js

@@ -3,8 +3,8 @@
  * Fetches estimated usage and deployment data from Railway's GraphQL API.
  */
 
-import { createLogger } from "@techstream/quark-core";
-import { AppError } from "@techstream/quark-core/errors";
+import { createLogger } from "@usequark/quark-core";
+import { AppError } from "@usequark/quark-core/errors";
 
 const log = createLogger("lib:railway");
 

package/templates/worker/src/lib/tokens.js

@@ -1,4 +1,4 @@
-import { createLogger } from "@techstream/quark-core";
+import { createLogger } from "@usequark/quark-core";
 
 const _logger = createLogger("worker:tokens");
 

package/src/dependabot-config.test.js

@@ -1,128 +0,0 @@
-#!/usr/bin/env node
-
-/**
- * Guard the scaffold template's dependabot config.
- *
- * The template used to group by `dependency-type` alone, which produced one
- * PR bundling patch, minor and major bumps together. That is how several
- * breaking changes reached this repo unnoticed - bullmq 6 removed
- * `queue.client` and shipped two silent production regressions inside a
- * 35-package diff.
- *
- * This checks the shipped template still separates majors, so a scaffolded
- * project does not inherit the problem.
- *
- * Run with: node --test packages/cli/src/dependabot-config.test.js
- */
-
-import assert from "node:assert/strict";
-import fs from "node:fs";
-import path from "node:path";
-import { describe, it } from "node:test";
-import { fileURLToPath } from "node:url";
-
-const __dirname = path.dirname(fileURLToPath(import.meta.url));
-const REPO_ROOT = path.resolve(__dirname, "../../..");
-
-const CONFIGS = [
-	["monorepo", ".github/dependabot.yml"],
-	[
-		"scaffold template",
-		"packages/cli/templates/base-project/.github/dependabot.yml",
-	],
-];
-
-function readConfig(relativePath) {
-	return fs.readFileSync(path.join(REPO_ROOT, relativePath), "utf8");
-}
-
-describe("dependabot config", () => {
-	for (const [label, relativePath] of CONFIGS) {
-		it(`${label} isolates major bumps into their own group`, () => {
-			const text = readConfig(relativePath);
-
-			assert.match(
-				text,
-				/production-majors:[\s\S]*?dependency-type:\s*production[\s\S]*?update-types:\s*\["major"\]/,
-				"production majors must be grouped separately so a breaking change is reviewed alone",
-			);
-			assert.match(
-				text,
-				/development-majors:[\s\S]*?dependency-type:\s*development[\s\S]*?update-types:\s*\["major"\]/,
-				"development majors must be grouped separately too",
-			);
-		});
-
-		it(`${label} does not lump every production bump into one group`, () => {
-			const text = readConfig(relativePath);
-
-			// A bare `production:` group with no update-types collects majors,
-			// minors and patches into a single reviewable-looking PR.
-			assert.doesNotMatch(
-				text,
-				/\n {6}production:\n {8}dependency-type:\s*production\n/,
-				"a catch-all production group re-creates the 35-package PR problem",
-			);
-		});
-
-		it(`${label} keeps a PR limit that can hold the extra groups`, () => {
-			const text = readConfig(relativePath);
-			const limit = Number(
-				(text.match(/open-pull-requests-limit:\s*(\d+)/) || [])[1],
-			);
-
-			assert.ok(
-				Number.isInteger(limit) && limit >= 6,
-				`open-pull-requests-limit should be at least 6 for the split groups (got ${limit})`,
-			);
-		});
-	}
-});
-
-/**
- * The auto-merge workflow is the other half of the split, and the only part
- * that actually merges anything.
- *
- * Splitting dependabot into per-severity groups changes what a human sees. It
- * does not change what merges unattended - that is gated solely by
- * `update-type == 'version-update:semver-patch'`. A dependency that ships a
- * breaking change in a *patch* passes straight through, and that is exactly how
- * bullmq 6's `queue.client` removal reached this repo. Majors already need a
- * human by virtue of not matching; this test keeps it that way.
- *
- * The monorepo runs this workflow; the template ships an equivalent one, so a
- * scaffolded project inherits the same gate.
- */
-const AUTO_MERGE_WORKFLOWS = [
-	["monorepo", ".github/workflows/dependabot-auto-merge.yml"],
-	[
-		"scaffold template",
-		"packages/cli/templates/base-project/.github/workflows/dependabot-auto-merge.yml",
-	],
-];
-
-describe("dependabot auto-merge gate", () => {
-	for (const [label, relativePath] of AUTO_MERGE_WORKFLOWS) {
-		it(`${label} gates auto-merge on the semver update type`, () => {
-			const text = readConfig(relativePath);
-
-			assert.match(
-				text,
-				/version-update:semver-patch/,
-				"the auto-merge gate must key on the semver patch update type, so minors and majors still need a human",
-			);
-		});
-
-		it(`${label} does not merge every dependabot update`, () => {
-			const text = readConfig(relativePath);
-
-			// An unconditional `gh pr merge` would auto-merge majors unattended,
-			// which is precisely how the bullmq break nearly landed.
-			assert.doesNotMatch(
-				text,
-				/if:\s*github\.actor\s*==\s*'dependabot\[bot\]'\n\s*steps:/,
-				"auto-merge must be gated on the update type, not just the actor",
-			);
-		});
-	}
-});