ras-stack 0.21.0 → 0.23.0

package/README.md

@@ -346,7 +346,13 @@ Policy files which cannot inherit can stay committed while being checked against
     }
   },
   "dependabot": true,
-  "pnpm": {}
+  "pnpm": {},
+  "adoption": {
+    "minimumRasStackVersion": "0.22.0",
+    "node": ">=24 <25",
+    "pnpm": "11.15.0",
+    "just": "1.58.0"
+  }
 }
 ```
 
@@ -355,10 +361,22 @@ Then generate or verify the effective files:
 ```sh
 pnpm exec ras-stack-policy sync
 pnpm exec ras-stack-policy check
+pnpm exec ras-stack-policy sync adoption
+pnpm exec ras-stack-policy check adoption
 ```
 
 `changesets` and `dependabot` produce deterministic complete files, with optional deep overrides. The pnpm policy changes only `minimumReleaseAge` in the existing `pnpm-workspace.yaml`, preserving local package layout, build approvals, dependency overrides, exclusions, and comments. Its default is seven days; set `"minimumReleaseAge": 0` only as an explicit repository exception. Commit both the selection and generated files so policy changes remain visible in review.
 
+Adoption synchronization updates older ras-stack package and workflow references plus the declared Node, pnpm, and Just versions. It preserves package range style, explicit workflow-version exceptions, newer ras-stack versions, application dependencies, and workflow structure. Check mode reports the exact files that would change without writing them. Shared config references remain check-only because adding them requires application-specific include paths and overrides.
+
+The same adoption policy can produce a read-only fleet report from public repository metadata. Declare each repository's supported versions and required shared config references in `ras-stack.fleet.json`, then run:
+
+```sh
+GITHUB_TOKEN="$(gh auth token)" pnpm exec ras-stack-policy fleet
+```
+
+The command reads only `package.json`, root toolchain configs, and GitHub workflow metadata. It prints Markdown, exits unsuccessfully when drift exists, and never writes to a consumer repository. Omit an expectation when a repository intentionally does not share that surface. The included scheduled workflow writes the result to the Actions summary and retains it as an artifact.
+
 ## GitHub Actions
 
 The JavaScript setup action reads the Node version from `engines.node` and the pnpm version from `packageManager` in the consuming repository:

package/dist/policy/cli.js

@@ -1,16 +1,32 @@
 #!/usr/bin/env node
-import { checkRepositoryPolicy, syncRepositoryPolicy } from './index.js';
+import { readFile } from 'node:fs/promises';
+import { resolve } from 'node:path';
+import { fleetConfig, fleetMarkdown, inspectFleet } from './fleet.js';
+import { checkRepositoryPolicy, syncAdoptionPolicy, syncRepositoryPolicy } from './index.js';
 const command = process.argv[2];
-if (command !== 'check' && command !== 'sync') {
-    console.error('usage: ras-stack-policy <check|sync>');
+if (command !== 'check' && command !== 'sync' && command !== 'fleet') {
+    console.error('usage: ras-stack-policy <check|sync|fleet> [adoption]');
     process.exitCode = 2;
 }
+else if (command === 'fleet') {
+    const path = resolve(process.argv[3] ?? 'ras-stack.fleet.json');
+    const config = fleetConfig(JSON.parse(await readFile(path, 'utf8')));
+    const results = await inspectFleet(config);
+    process.stdout.write(fleetMarkdown(results));
+    if (results.some((result) => result.drift.length > 0))
+        process.exitCode = 1;
+}
 else {
-    const changed = command === 'check' ? await checkRepositoryPolicy(process.cwd()) : await syncRepositoryPolicy(process.cwd(), 'write');
+    const adoption = process.argv[3] === 'adoption';
+    const changed = adoption
+        ? await syncAdoptionPolicy(process.cwd(), command === 'check' ? 'check' : 'write')
+        : command === 'check'
+            ? await checkRepositoryPolicy(process.cwd())
+            : await syncRepositoryPolicy(process.cwd(), 'write');
     if (command === 'check' && changed.length > 0) {
         for (const message of changed)
             console.error(message);
-        console.error('run ras-stack-policy sync and commit the result');
+        console.error(`run ras-stack-policy sync${adoption ? ' adoption' : ''} and commit the result`);
         process.exitCode = 1;
     }
     else if (command === 'sync') {

package/dist/policy/cli.js.map

@@ -1 +1 @@
-{"version":3,"file":"cli.js","sourceRoot":"","sources":["../../src/policy/cli.ts"],"names":[],"mappings":";AACA,OAAO,EAAE,qBAAqB,EAAE,oBAAoB,EAAE,MAAM,YAAY,CAAA;AAExE,MAAM,OAAO,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;AAC/B,IAAI,OAAO,KAAK,OAAO,IAAI,OAAO,KAAK,MAAM,EAAE,CAAC;IAC9C,OAAO,CAAC,KAAK,CAAC,sCAAsC,CAAC,CAAA;IACrD,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAA;AACtB,CAAC;KAAM,CAAC;IACN,MAAM,OAAO,GAAG,OAAO,KAAK,OAAO,CAAC,CAAC,CAAC,MAAM,qBAAqB,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC,MAAM,oBAAoB,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,OAAO,CAAC,CAAA;IACrI,IAAI,OAAO,KAAK,OAAO,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC9C,KAAK,MAAM,OAAO,IAAI,OAAO;YAAE,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,CAAA;QACrD,OAAO,CAAC,KAAK,CAAC,iDAAiD,CAAC,CAAA;QAChE,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAA;IACtB,CAAC;SAAM,IAAI,OAAO,KAAK,MAAM,EAAE,CAAC;QAC9B,KAAK,MAAM,IAAI,IAAI,OAAO;YAAE,OAAO,CAAC,GAAG,CAAC,WAAW,IAAI,EAAE,CAAC,CAAA;IAC5D,CAAC;AACH,CAAC","sourcesContent":["#!/usr/bin/env node\nimport { checkRepositoryPolicy, syncRepositoryPolicy } from './index.js'\n\nconst command = process.argv[2]\nif (command !== 'check' && command !== 'sync') {\n  console.error('usage: ras-stack-policy <check|sync>')\n  process.exitCode = 2\n} else {\n  const changed = command === 'check' ? await checkRepositoryPolicy(process.cwd()) : await syncRepositoryPolicy(process.cwd(), 'write')\n  if (command === 'check' && changed.length > 0) {\n    for (const message of changed) console.error(message)\n    console.error('run ras-stack-policy sync and commit the result')\n    process.exitCode = 1\n  } else if (command === 'sync') {\n    for (const path of changed) console.log(`updated ${path}`)\n  }\n}\n"]}
+{"version":3,"file":"cli.js","sourceRoot":"","sources":["../../src/policy/cli.ts"],"names":[],"mappings":";AACA,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAA;AAC3C,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAA;AACnC,OAAO,EAAE,WAAW,EAAE,aAAa,EAAE,YAAY,EAAE,MAAM,YAAY,CAAA;AACrE,OAAO,EAAE,qBAAqB,EAAE,kBAAkB,EAAE,oBAAoB,EAAE,MAAM,YAAY,CAAA;AAE5F,MAAM,OAAO,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;AAC/B,IAAI,OAAO,KAAK,OAAO,IAAI,OAAO,KAAK,MAAM,IAAI,OAAO,KAAK,OAAO,EAAE,CAAC;IACrE,OAAO,CAAC,KAAK,CAAC,uDAAuD,CAAC,CAAA;IACtE,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAA;AACtB,CAAC;KAAM,IAAI,OAAO,KAAK,OAAO,EAAE,CAAC;IAC/B,MAAM,IAAI,GAAG,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,sBAAsB,CAAC,CAAA;IAC/D,MAAM,MAAM,GAAG,WAAW,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC,CAAA;IACpE,MAAM,OAAO,GAAG,MAAM,YAAY,CAAC,MAAM,CAAC,CAAA;IAC1C,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,aAAa,CAAC,OAAO,CAAC,CAAC,CAAA;IAC5C,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC;QAAE,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAA;AAC7E,CAAC;KAAM,CAAC;IACN,MAAM,QAAQ,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,UAAU,CAAA;IAC/C,MAAM,OAAO,GAAG,QAAQ;QACtB,CAAC,CAAC,MAAM,kBAAkB,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,OAAO,KAAK,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC;QAClF,CAAC,CAAC,OAAO,KAAK,OAAO;YACnB,CAAC,CAAC,MAAM,qBAAqB,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC;YAC5C,CAAC,CAAC,MAAM,oBAAoB,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,OAAO,CAAC,CAAA;IACxD,IAAI,OAAO,KAAK,OAAO,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC9C,KAAK,MAAM,OAAO,IAAI,OAAO;YAAE,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,CAAA;QACrD,OAAO,CAAC,KAAK,CAAC,4BAA4B,QAAQ,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,wBAAwB,CAAC,CAAA;QAC9F,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAA;IACtB,CAAC;SAAM,IAAI,OAAO,KAAK,MAAM,EAAE,CAAC;QAC9B,KAAK,MAAM,IAAI,IAAI,OAAO;YAAE,OAAO,CAAC,GAAG,CAAC,WAAW,IAAI,EAAE,CAAC,CAAA;IAC5D,CAAC;AACH,CAAC","sourcesContent":["#!/usr/bin/env node\nimport { readFile } from 'node:fs/promises'\nimport { resolve } from 'node:path'\nimport { fleetConfig, fleetMarkdown, inspectFleet } from './fleet.js'\nimport { checkRepositoryPolicy, syncAdoptionPolicy, syncRepositoryPolicy } from './index.js'\n\nconst command = process.argv[2]\nif (command !== 'check' && command !== 'sync' && command !== 'fleet') {\n  console.error('usage: ras-stack-policy <check|sync|fleet> [adoption]')\n  process.exitCode = 2\n} else if (command === 'fleet') {\n  const path = resolve(process.argv[3] ?? 'ras-stack.fleet.json')\n  const config = fleetConfig(JSON.parse(await readFile(path, 'utf8')))\n  const results = await inspectFleet(config)\n  process.stdout.write(fleetMarkdown(results))\n  if (results.some((result) => result.drift.length > 0)) process.exitCode = 1\n} else {\n  const adoption = process.argv[3] === 'adoption'\n  const changed = adoption\n    ? await syncAdoptionPolicy(process.cwd(), command === 'check' ? 'check' : 'write')\n    : command === 'check'\n      ? await checkRepositoryPolicy(process.cwd())\n      : await syncRepositoryPolicy(process.cwd(), 'write')\n  if (command === 'check' && changed.length > 0) {\n    for (const message of changed) console.error(message)\n    console.error(`run ras-stack-policy sync${adoption ? ' adoption' : ''} and commit the result`)\n    process.exitCode = 1\n  } else if (command === 'sync') {\n    for (const path of changed) console.log(`updated ${path}`)\n  }\n}\n"]}

package/dist/policy/fleet.d.ts

@@ -0,0 +1,22 @@
+import type { AdoptionPolicy, AdoptionSnapshot } from './index.js';
+export type FleetRepository = {
+    repository: string;
+    ref?: string;
+    adoption: AdoptionPolicy;
+};
+export type FleetConfig = {
+    repositories: FleetRepository[];
+};
+export type FleetResult = {
+    repository: string;
+    ref: string;
+    drift: string[];
+};
+export declare function fleetConfig(source: unknown): FleetConfig;
+export declare function inspectFleet(config: FleetConfig, load?: (repository: string, ref: string) => Promise<AdoptionSnapshot>): Promise<{
+    repository: string;
+    ref: string;
+    drift: string[];
+}[]>;
+export declare function fleetMarkdown(results: FleetResult[]): string;
+export declare function loadGitHubAdoptionSnapshot(repository: string, ref: string): Promise<AdoptionSnapshot>;

package/dist/policy/fleet.js

@@ -0,0 +1,80 @@
+import { adoptionSnapshotDrift } from './index.js';
+export function fleetConfig(source) {
+    if (!source || typeof source !== 'object' || !('repositories' in source) || !Array.isArray(source.repositories)) {
+        throw new Error('fleet configuration must contain a repositories array');
+    }
+    if (source.repositories.length === 0 || source.repositories.length > 100) {
+        throw new Error('fleet configuration must contain between 1 and 100 repositories');
+    }
+    for (const entry of source.repositories) {
+        if (!entry || typeof entry !== 'object')
+            throw new Error('each fleet repository must be an object');
+        if (!('repository' in entry) || typeof entry.repository !== 'string' || !/^[a-z\d][\w.-]*\/[a-z\d][\w.-]*$/i.test(entry.repository)) {
+            throw new Error('each fleet repository must use an owner/name identifier');
+        }
+        if ('ref' in entry && entry.ref !== undefined && typeof entry.ref !== 'string') {
+            throw new Error('fleet repository ref must be a string');
+        }
+        if (!('adoption' in entry) || !entry.adoption || typeof entry.adoption !== 'object') {
+            throw new Error('each fleet repository must declare an adoption policy');
+        }
+    }
+    return source;
+}
+export async function inspectFleet(config, load = loadGitHubAdoptionSnapshot) {
+    return Promise.all(config.repositories.map(async ({ repository, ref = 'main', adoption }) => ({
+        repository,
+        ref,
+        drift: adoptionSnapshotDrift(await load(repository, ref), adoption),
+    })));
+}
+export function fleetMarkdown(results) {
+    const healthy = results.filter((result) => result.drift.length === 0).length;
+    const lines = [`# ras-stack fleet health`, '', `${healthy}/${results.length} repositories conform to their declared adoption policy.`, ''];
+    for (const result of results) {
+        lines.push(`## ${result.drift.length === 0 ? '✅' : '❌'} ${result.repository}@${result.ref}`, '');
+        if (result.drift.length === 0)
+            lines.push('No drift detected.', '');
+        else
+            for (const message of result.drift)
+                lines.push(`- ${message}`);
+        if (result.drift.length > 0)
+            lines.push('');
+    }
+    return `${lines.join('\n').trimEnd()}\n`;
+}
+export async function loadGitHubAdoptionSnapshot(repository, ref) {
+    const headers = { Accept: 'application/vnd.github+json', 'X-GitHub-Api-Version': '2022-11-28' };
+    const token = process.env.GITHUB_TOKEN;
+    if (token)
+        headers.Authorization = `Bearer ${token}`;
+    const tree = await githubJson(`https://api.github.com/repos/${repository}/git/trees/${encodeURIComponent(ref)}?recursive=1`, headers);
+    if (tree.truncated)
+        throw new Error(`${repository}@${ref}: GitHub returned a truncated tree`);
+    const selected = tree.tree.filter((entry) => entry.type === 'blob' && entry.sha && selectedMetadataPath(entry.path));
+    const sources = await Promise.all(selected.map(async (entry) => {
+        const blob = await githubJson(`https://api.github.com/repos/${repository}/git/blobs/${entry.sha}`, headers);
+        if (blob.encoding !== 'base64')
+            throw new Error(`${repository}@${ref}:${entry.path}: unsupported GitHub blob encoding`);
+        return [entry.path, Buffer.from(blob.content.replaceAll('\n', ''), 'base64').toString('utf8')];
+    }));
+    const files = new Map(sources);
+    const manifestSource = files.get('package.json');
+    if (!manifestSource)
+        throw new Error(`${repository}@${ref}: package.json was not found`);
+    return { manifest: JSON.parse(manifestSource), files };
+}
+function selectedMetadataPath(path) {
+    return (path === 'package.json' ||
+        path === 'ras-stack.policy.json' ||
+        path === 'oxlint.json' ||
+        /^tsconfig(?:\.[^.]+)*\.json$/.test(path) ||
+        /^\.github\/.*\.ya?ml$/.test(path));
+}
+async function githubJson(url, headers) {
+    const response = await fetch(url, { headers });
+    if (!response.ok)
+        throw new Error(`GitHub request failed with ${response.status}: ${url}`);
+    return (await response.json());
+}
+//# sourceMappingURL=fleet.js.map

package/dist/policy/fleet.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"fleet.js","sourceRoot":"","sources":["../../src/policy/fleet.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,qBAAqB,EAAE,MAAM,YAAY,CAAA;AAkBlD,MAAM,UAAU,WAAW,CAAC,MAAe;IACzC,IAAI,CAAC,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,CAAC,CAAC,cAAc,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,YAAY,CAAC,EAAE,CAAC;QAChH,MAAM,IAAI,KAAK,CAAC,uDAAuD,CAAC,CAAA;IAC1E,CAAC;IACD,IAAI,MAAM,CAAC,YAAY,CAAC,MAAM,KAAK,CAAC,IAAI,MAAM,CAAC,YAAY,CAAC,MAAM,GAAG,GAAG,EAAE,CAAC;QACzE,MAAM,IAAI,KAAK,CAAC,iEAAiE,CAAC,CAAA;IACpF,CAAC;IACD,KAAK,MAAM,KAAK,IAAI,MAAM,CAAC,YAAY,EAAE,CAAC;QACxC,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ;YAAE,MAAM,IAAI,KAAK,CAAC,yCAAyC,CAAC,CAAA;QACnG,IAAI,CAAC,CAAC,YAAY,IAAI,KAAK,CAAC,IAAI,OAAO,KAAK,CAAC,UAAU,KAAK,QAAQ,IAAI,CAAC,mCAAmC,CAAC,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,EAAE,CAAC;YACpI,MAAM,IAAI,KAAK,CAAC,yDAAyD,CAAC,CAAA;QAC5E,CAAC;QACD,IAAI,KAAK,IAAI,KAAK,IAAI,KAAK,CAAC,GAAG,KAAK,SAAS,IAAI,OAAO,KAAK,CAAC,GAAG,KAAK,QAAQ,EAAE,CAAC;YAC/E,MAAM,IAAI,KAAK,CAAC,uCAAuC,CAAC,CAAA;QAC1D,CAAC;QACD,IAAI,CAAC,CAAC,UAAU,IAAI,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,IAAI,OAAO,KAAK,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;YACpF,MAAM,IAAI,KAAK,CAAC,uDAAuD,CAAC,CAAA;QAC1E,CAAC;IACH,CAAC;IACD,OAAO,MAAqB,CAAA;AAC9B,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,YAAY,CAChC,MAAmB,EACnB,IAAI,GAAmE,0BAA0B;IAEjG,OAAO,OAAO,CAAC,GAAG,CAChB,MAAM,CAAC,YAAY,CAAC,GAAG,CAAC,KAAK,EAAE,EAAE,UAAU,EAAE,GAAG,GAAG,MAAM,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC,CAAC;QACzE,UAAU;QACV,GAAG;QACH,KAAK,EAAE,qBAAqB,CAAC,MAAM,IAAI,CAAC,UAAU,EAAE,GAAG,CAAC,EAAE,QAAQ,CAAC;KACpE,CAAC,CAAC,CACJ,CAAA;AACH,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,OAAsB;IAClD,MAAM,OAAO,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,MAAM,CAAA;IAC5E,MAAM,KAAK,GAAG,CAAC,0BAA0B,EAAE,EAAE,EAAE,GAAG,OAAO,IAAI,OAAO,CAAC,MAAM,0DAA0D,EAAE,EAAE,CAAC,CAAA;IAC1I,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;QAC7B,KAAK,CAAC,IAAI,CAAC,MAAM,MAAM,CAAC,KAAK,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,IAAI,MAAM,CAAC,UAAU,IAAI,MAAM,CAAC,GAAG,EAAE,EAAE,EAAE,CAAC,CAAA;QAChG,IAAI,MAAM,CAAC,KAAK,CAAC,MAAM,KAAK,CAAC;YAAE,KAAK,CAAC,IAAI,CAAC,oBAAoB,EAAE,EAAE,CAAC,CAAA;;YAC9D,KAAK,MAAM,OAAO,IAAI,MAAM,CAAC,KAAK;gBAAE,KAAK,CAAC,IAAI,CAAC,KAAK,OAAO,EAAE,CAAC,CAAA;QACnE,IAAI,MAAM,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC;YAAE,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAA;IAC7C,CAAC;IACD,OAAO,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,IAAI,CAAA;AAC1C,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,0BAA0B,CAAC,UAAkB,EAAE,GAAW;IAC9E,MAAM,OAAO,GAA2B,EAAE,MAAM,EAAE,6BAA6B,EAAE,sBAAsB,EAAE,YAAY,EAAE,CAAA;IACvH,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,YAAY,CAAA;IACtC,IAAI,KAAK;QAAE,OAAO,CAAC,aAAa,GAAG,UAAU,KAAK,EAAE,CAAA;IACpD,MAAM,IAAI,GAAG,MAAM,UAAU,CAC3B,gCAAgC,UAAU,cAAc,kBAAkB,CAAC,GAAG,CAAC,cAAc,EAC7F,OAAO,CACR,CAAA;IACD,IAAI,IAAI,CAAC,SAAS;QAAE,MAAM,IAAI,KAAK,CAAC,GAAG,UAAU,IAAI,GAAG,oCAAoC,CAAC,CAAA;IAC7F,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,KAAK,MAAM,IAAI,KAAK,CAAC,GAAG,IAAI,oBAAoB,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAA;IACpH,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,GAAG,CAC/B,QAAQ,CAAC,GAAG,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE;QAC3B,MAAM,IAAI,GAAG,MAAM,UAAU,CAAU,gCAAgC,UAAU,cAAc,KAAK,CAAC,GAAG,EAAE,EAAE,OAAO,CAAC,CAAA;QACpH,IAAI,IAAI,CAAC,QAAQ,KAAK,QAAQ;YAAE,MAAM,IAAI,KAAK,CAAC,GAAG,UAAU,IAAI,GAAG,IAAI,KAAK,CAAC,IAAI,oCAAoC,CAAC,CAAA;QACvH,OAAO,CAAC,KAAK,CAAC,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,IAAI,EAAE,EAAE,CAAC,EAAE,QAAQ,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAU,CAAA;IACzG,CAAC,CAAC,CACH,CAAA;IACD,MAAM,KAAK,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,CAAA;IAC9B,MAAM,cAAc,GAAG,KAAK,CAAC,GAAG,CAAC,cAAc,CAAC,CAAA;IAChD,IAAI,CAAC,cAAc;QAAE,MAAM,IAAI,KAAK,CAAC,GAAG,UAAU,IAAI,GAAG,8BAA8B,CAAC,CAAA;IACxF,OAAO,EAAE,QAAQ,EAAE,IAAI,CAAC,KAAK,CAAC,cAAc,CAA4B,EAAE,KAAK,EAAE,CAAA;AACnF,CAAC;AAED,SAAS,oBAAoB,CAAC,IAAY;IACxC,OAAO,CACL,IAAI,KAAK,cAAc;QACvB,IAAI,KAAK,uBAAuB;QAChC,IAAI,KAAK,aAAa;QACtB,8BAA8B,CAAC,IAAI,CAAC,IAAI,CAAC;QACzC,uBAAuB,CAAC,IAAI,CAAC,IAAI,CAAC,CACnC,CAAA;AACH,CAAC;AAED,KAAK,UAAU,UAAU,CAAI,GAAW,EAAE,OAA+B;IACvE,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE,EAAE,OAAO,EAAE,CAAC,CAAA;IAC9C,IAAI,CAAC,QAAQ,CAAC,EAAE;QAAE,MAAM,IAAI,KAAK,CAAC,8BAA8B,QAAQ,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC,CAAA;IAC1F,OAAO,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAM,CAAA;AACrC,CAAC","sourcesContent":["import type { AdoptionPolicy, AdoptionSnapshot } from './index.js'\nimport { adoptionSnapshotDrift } from './index.js'\n\nexport type FleetRepository = {\n  repository: string\n  ref?: string\n  adoption: AdoptionPolicy\n}\n\nexport type FleetConfig = {\n  repositories: FleetRepository[]\n}\n\nexport type FleetResult = {\n  repository: string\n  ref: string\n  drift: string[]\n}\n\nexport function fleetConfig(source: unknown): FleetConfig {\n  if (!source || typeof source !== 'object' || !('repositories' in source) || !Array.isArray(source.repositories)) {\n    throw new Error('fleet configuration must contain a repositories array')\n  }\n  if (source.repositories.length === 0 || source.repositories.length > 100) {\n    throw new Error('fleet configuration must contain between 1 and 100 repositories')\n  }\n  for (const entry of source.repositories) {\n    if (!entry || typeof entry !== 'object') throw new Error('each fleet repository must be an object')\n    if (!('repository' in entry) || typeof entry.repository !== 'string' || !/^[a-z\\d][\\w.-]*\\/[a-z\\d][\\w.-]*$/i.test(entry.repository)) {\n      throw new Error('each fleet repository must use an owner/name identifier')\n    }\n    if ('ref' in entry && entry.ref !== undefined && typeof entry.ref !== 'string') {\n      throw new Error('fleet repository ref must be a string')\n    }\n    if (!('adoption' in entry) || !entry.adoption || typeof entry.adoption !== 'object') {\n      throw new Error('each fleet repository must declare an adoption policy')\n    }\n  }\n  return source as FleetConfig\n}\n\nexport async function inspectFleet(\n  config: FleetConfig,\n  load: (repository: string, ref: string) => Promise<AdoptionSnapshot> = loadGitHubAdoptionSnapshot,\n) {\n  return Promise.all(\n    config.repositories.map(async ({ repository, ref = 'main', adoption }) => ({\n      repository,\n      ref,\n      drift: adoptionSnapshotDrift(await load(repository, ref), adoption),\n    })),\n  )\n}\n\nexport function fleetMarkdown(results: FleetResult[]) {\n  const healthy = results.filter((result) => result.drift.length === 0).length\n  const lines = [`# ras-stack fleet health`, '', `${healthy}/${results.length} repositories conform to their declared adoption policy.`, '']\n  for (const result of results) {\n    lines.push(`## ${result.drift.length === 0 ? '✅' : '❌'} ${result.repository}@${result.ref}`, '')\n    if (result.drift.length === 0) lines.push('No drift detected.', '')\n    else for (const message of result.drift) lines.push(`- ${message}`)\n    if (result.drift.length > 0) lines.push('')\n  }\n  return `${lines.join('\\n').trimEnd()}\\n`\n}\n\nexport async function loadGitHubAdoptionSnapshot(repository: string, ref: string): Promise<AdoptionSnapshot> {\n  const headers: Record<string, string> = { Accept: 'application/vnd.github+json', 'X-GitHub-Api-Version': '2022-11-28' }\n  const token = process.env.GITHUB_TOKEN\n  if (token) headers.Authorization = `Bearer ${token}`\n  const tree = await githubJson<GitTree>(\n    `https://api.github.com/repos/${repository}/git/trees/${encodeURIComponent(ref)}?recursive=1`,\n    headers,\n  )\n  if (tree.truncated) throw new Error(`${repository}@${ref}: GitHub returned a truncated tree`)\n  const selected = tree.tree.filter((entry) => entry.type === 'blob' && entry.sha && selectedMetadataPath(entry.path))\n  const sources = await Promise.all(\n    selected.map(async (entry) => {\n      const blob = await githubJson<GitBlob>(`https://api.github.com/repos/${repository}/git/blobs/${entry.sha}`, headers)\n      if (blob.encoding !== 'base64') throw new Error(`${repository}@${ref}:${entry.path}: unsupported GitHub blob encoding`)\n      return [entry.path, Buffer.from(blob.content.replaceAll('\\n', ''), 'base64').toString('utf8')] as const\n    }),\n  )\n  const files = new Map(sources)\n  const manifestSource = files.get('package.json')\n  if (!manifestSource) throw new Error(`${repository}@${ref}: package.json was not found`)\n  return { manifest: JSON.parse(manifestSource) as Record<string, unknown>, files }\n}\n\nfunction selectedMetadataPath(path: string) {\n  return (\n    path === 'package.json' ||\n    path === 'ras-stack.policy.json' ||\n    path === 'oxlint.json' ||\n    /^tsconfig(?:\\.[^.]+)*\\.json$/.test(path) ||\n    /^\\.github\\/.*\\.ya?ml$/.test(path)\n  )\n}\n\nasync function githubJson<T>(url: string, headers: Record<string, string>): Promise<T> {\n  const response = await fetch(url, { headers })\n  if (!response.ok) throw new Error(`GitHub request failed with ${response.status}: ${url}`)\n  return (await response.json()) as T\n}\n\ntype GitTree = { truncated: boolean; tree: { path: string; type: string; sha?: string }[] }\ntype GitBlob = { encoding: string; content: string }\n"]}

package/dist/policy/index.d.ts

@@ -1,3 +1,5 @@
+export { fleetConfig, fleetMarkdown, inspectFleet, loadGitHubAdoptionSnapshot } from './fleet.js';
+export type { FleetConfig, FleetRepository, FleetResult } from './fleet.js';
 type PolicySelection = boolean | {
     overrides?: Record<string, unknown>;
 };
@@ -11,12 +13,19 @@ export type RepositoryPolicy = {
 };
 export type AdoptionPolicy = {
     minimumRasStackVersion?: string;
+    minimumWorkflowRasStackVersion?: string;
     node?: string;
     pnpm?: string;
     just?: string;
+    requiredReferences?: string[];
+};
+export type AdoptionSnapshot = {
+    manifest: Record<string, unknown>;
+    files: Map<string, string>;
 };
 export declare function syncRepositoryPolicy(root: string, mode: 'check' | 'write'): Promise<string[]>;
 export declare function checkRepositoryPolicy(root: string): Promise<string[]>;
+export declare function syncAdoptionPolicy(root: string, mode: 'check' | 'write'): Promise<string[]>;
 export declare function adoptionDrift(root: string, policy: AdoptionPolicy): Promise<string[]>;
+export declare function adoptionSnapshotDrift(snapshot: AdoptionSnapshot, policy: AdoptionPolicy): string[];
 export declare function renderedPolicyFiles(root: string, config: RepositoryPolicy): Promise<Map<string, string>>;
-export {};

package/dist/policy/index.js

@@ -1,6 +1,7 @@
 import { mkdir, readFile, readdir, writeFile } from 'node:fs/promises';
 import { dirname, join } from 'node:path';
 import { parseDocument, stringify } from 'yaml';
+export { fleetConfig, fleetMarkdown, inspectFleet, loadGitHubAdoptionSnapshot } from './fleet.js';
 const changesetsPolicy = {
     $schema: 'https://unpkg.com/@changesets/config@3.1.2/schema.json',
     changelog: '@changesets/cli/changelog',
@@ -51,9 +52,30 @@ export async function checkRepositoryPolicy(root) {
     const config = repositoryPolicy(await readFile(join(root, 'ras-stack.policy.json'), 'utf8'));
     return [...files.map((path) => `policy drift: ${path}`), ...(config.adoption ? await adoptionDrift(root, config.adoption) : [])];
 }
+export async function syncAdoptionPolicy(root, mode) {
+    const config = repositoryPolicy(await readFile(join(root, 'ras-stack.policy.json'), 'utf8'));
+    if (!config.adoption)
+        return [];
+    const files = await renderedAdoptionFiles(root, config.adoption);
+    const changed = await Promise.all([...files].map(async ([path, expected]) => {
+        const absolute = join(root, path);
+        const actual = await readFile(absolute, 'utf8');
+        if (actual === expected)
+            return undefined;
+        if (mode === 'write')
+            await writeFile(absolute, expected);
+        return path;
+    }));
+    return changed.filter((path) => path !== undefined);
+}
 export async function adoptionDrift(root, policy) {
-    const drift = [];
     const manifest = JSON.parse(await readFile(join(root, 'package.json'), 'utf8'));
+    const files = await adoptionFiles(root);
+    return adoptionSnapshotDrift({ manifest, files }, policy);
+}
+export function adoptionSnapshotDrift(snapshot, policy) {
+    const drift = [];
+    const { manifest, files } = snapshot;
     if (policy.node && manifest.engines && plainObject(manifest.engines) && manifest.engines.node !== policy.node) {
         drift.push(`toolchain drift: package.json engines.node must be ${policy.node}`);
     }
@@ -66,13 +88,14 @@ export async function adoptionDrift(root, policy) {
             drift.push(`ras-stack drift: package.json uses ${dependency}, minimum is ${policy.minimumRasStackVersion}`);
         }
     }
-    const workflows = await textFiles(join(root, '.github'));
+    const workflows = new Map([...files].filter(([path]) => path.startsWith('.github/') && /\.ya?ml$/.test(path)));
+    const workflowMinimum = policy.minimumWorkflowRasStackVersion ?? policy.minimumRasStackVersion;
     for (const [path, source] of workflows) {
-        if (policy.minimumRasStackVersion) {
+        if (workflowMinimum) {
             for (const match of source.matchAll(/richardsolomou\/ras-stack\/[^\s'"}]+@v(\d+\.\d+\.\d+)/g)) {
                 const version = match[1];
-                if (version && compareVersions(version, policy.minimumRasStackVersion) < 0) {
-                    drift.push(`ras-stack drift: ${path} uses v${version}, minimum is v${policy.minimumRasStackVersion}`);
+                if (version && compareVersions(version, workflowMinimum) < 0) {
+                    drift.push(`ras-stack drift: ${path} uses v${version}, minimum is v${workflowMinimum}`);
                 }
             }
         }
@@ -81,7 +104,12 @@ export async function adoptionDrift(root, policy) {
         ![...workflows.values()].some((source) => source.includes(`just-version: '${policy.just}'`) || source.includes(`just-version: ${policy.just}`))) {
         drift.push(`toolchain drift: no workflow declares just-version ${policy.just}`);
     }
-    return drift;
+    for (const reference of policy.requiredReferences ?? []) {
+        if (![...files.values()].some((source) => source.includes(reference))) {
+            drift.push(`shared config drift: no configuration references ${reference}`);
+        }
+    }
+    return [...new Set(drift)];
 }
 export async function renderedPolicyFiles(root, config) {
     const files = new Map();
@@ -118,10 +146,13 @@ function repositoryPolicy(source) {
     if (adoption !== undefined && adoption !== false) {
         if (!plainObject(adoption))
             throw new Error('adoption policy must be false or an object');
-        for (const key of ['minimumRasStackVersion', 'node', 'pnpm', 'just']) {
+        for (const key of ['minimumRasStackVersion', 'minimumWorkflowRasStackVersion', 'node', 'pnpm', 'just']) {
             if (adoption[key] !== undefined && typeof adoption[key] !== 'string')
                 throw new Error(`adoption.${key} must be a string`);
         }
+        if (adoption.requiredReferences !== undefined && !stringArray(adoption.requiredReferences)) {
+            throw new Error('adoption.requiredReferences must be an array of strings');
+        }
     }
     return value;
 }
@@ -160,6 +191,61 @@ async function textFiles(directory, root = directory) {
     }
     return files;
 }
+async function adoptionFiles(root) {
+    const files = await textFiles(join(root, '.github'), root);
+    const entries = await readdir(root, { withFileTypes: true });
+    await Promise.all(entries.map(async (entry) => {
+        if (!entry.isFile() || !/^(?:ras-stack\.policy|oxlint|tsconfig(?:\.[^.]+)*)\.json$/.test(entry.name))
+            return;
+        files.set(entry.name, await readFile(join(root, entry.name), 'utf8'));
+    }));
+    return files;
+}
+async function renderedAdoptionFiles(root, policy) {
+    const files = new Map();
+    const manifestPath = join(root, 'package.json');
+    const manifestSource = await readFile(manifestPath, 'utf8');
+    const manifest = JSON.parse(manifestSource);
+    if (policy.node) {
+        const engines = plainObject(manifest.engines) ? manifest.engines : {};
+        manifest.engines = { ...engines, node: policy.node };
+    }
+    if (policy.pnpm)
+        manifest.packageManager = `pnpm@${policy.pnpm}`;
+    if (policy.minimumRasStackVersion) {
+        for (const field of ['dependencies', 'devDependencies']) {
+            const dependencies = manifest[field];
+            if (!plainObject(dependencies) || typeof dependencies['ras-stack'] !== 'string')
+                continue;
+            dependencies['ras-stack'] = versionAtLeast(dependencies['ras-stack'], policy.minimumRasStackVersion);
+        }
+    }
+    const renderedManifest = `${JSON.stringify(manifest, null, 2)}\n`;
+    if (renderedManifest !== manifestSource)
+        files.set('package.json', renderedManifest);
+    const workflowVersion = policy.minimumWorkflowRasStackVersion ?? policy.minimumRasStackVersion;
+    const workflows = await textFiles(join(root, '.github'), root);
+    for (const [path, source] of workflows) {
+        let rendered = source;
+        if (workflowVersion) {
+            rendered = rendered.replace(/(richardsolomou\/ras-stack\/[^\s'"}]+@v)(\d+\.\d+\.\d+)/g, (reference, prefix, current) => compareVersions(current, workflowVersion) < 0 ? `${prefix}${workflowVersion}` : reference);
+        }
+        if (policy.just) {
+            rendered = rendered.replace(/(just-version:\s*)(['"]?)\d+\.\d+\.\d+\2/g, `$1$2${policy.just}$2`);
+            rendered = rendered.replace(/(richardsolomou\/ras-stack\/actions\/setup-just@[^\n]+\n(?:(?!\n\s*-\s+uses:)[\s\S]){0,300}?\n\s+version:\s*)(['"]?)\d+\.\d+\.\d+\2/g, `$1$2${policy.just}$2`);
+        }
+        if (rendered !== source)
+            files.set(path, rendered);
+    }
+    return files;
+}
+function versionAtLeast(current, version) {
+    const match = /^(\s*(?:\^|~|>=|>|<=|<|=)?\s*)\d+\.\d+\.\d+(.*)$/.exec(current);
+    const currentVersion = /\d+\.\d+\.\d+/.exec(current)?.[0];
+    if (currentVersion && compareVersions(currentVersion, version) >= 0)
+        return current;
+    return match ? `${match[1]}${version}${match[2]}` : version;
+}
 function validateSelection(name, value) {
     if (value === undefined || typeof value === 'boolean')
         return;
@@ -180,4 +266,7 @@ function deepMerge(base, overrides) {
 function plainObject(value) {
     return typeof value === 'object' && value !== null && !Array.isArray(value);
 }
+function stringArray(value) {
+    return Array.isArray(value) && value.every((item) => typeof item === 'string');
+}
 //# sourceMappingURL=index.js.map

package/dist/policy/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/policy/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,OAAO,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAA;AACtE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAA;AACzC,OAAO,EAAE,aAAa,EAAE,SAAS,EAAE,MAAM,MAAM,CAAA;AAE/C,MAAM,gBAAgB,GAAG;IACvB,OAAO,EAAE,wDAAwD;IACjE,SAAS,EAAE,2BAA2B;IACtC,MAAM,EAAE,KAAK;IACb,KAAK,EAAE,EAAE;IACT,MAAM,EAAE,EAAE;IACV,MAAM,EAAE,QAAQ;IAChB,UAAU,EAAE,MAAM;IAClB,0BAA0B,EAAE,OAAO;IACnC,MAAM,EAAE,EAAE;CACX,CAAA;AAED,MAAM,gBAAgB,GAAG;IACvB,OAAO,EAAE,CAAC;IACV,OAAO,EAAE;QACP;YACE,mBAAmB,EAAE,KAAK;YAC1B,SAAS,EAAE,GAAG;YACd,QAAQ,EAAE,EAAE,QAAQ,EAAE,QAAQ,EAAE;YAChC,QAAQ,EAAE,EAAE,cAAc,EAAE,CAAC,EAAE;YAC/B,MAAM,EAAE,EAAE,yBAAyB,EAAE,EAAE,QAAQ,EAAE,CAAC,GAAG,CAAC,EAAE,EAAE;SAC3D;QACD;YACE,mBAAmB,EAAE,gBAAgB;YACrC,SAAS,EAAE,GAAG;YACd,QAAQ,EAAE,EAAE,QAAQ,EAAE,QAAQ,EAAE;YAChC,QAAQ,EAAE,EAAE,cAAc,EAAE,CAAC,EAAE;SAChC;KACF;CACF,CAAA;AAkBD,MAAM,CAAC,KAAK,UAAU,oBAAoB,CAAC,IAAY,EAAE,IAAuB;IAC9E,MAAM,MAAM,GAAG,gBAAgB,CAAC,MAAM,QAAQ,CAAC,IAAI,CAAC,IAAI,EAAE,uBAAuB,CAAC,EAAE,MAAM,CAAC,CAAC,CAAA;IAC5F,MAAM,KAAK,GAAG,MAAM,mBAAmB,CAAC,IAAI,EAAE,MAAM,CAAC,CAAA;IACrD,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,GAAG,CAChC,CAAC,GAAG,KAAK,CAAC,CAAC,GAAG,CAAC,KAAK,EAAE,CAAC,IAAI,EAAE,QAAQ,CAAC,EAAE,EAAE;QACxC,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,CAAA;QACjC,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAA;QACtE,IAAI,MAAM,KAAK,QAAQ;YAAE,OAAO,SAAS,CAAA;QACzC,IAAI,IAAI,KAAK,OAAO,EAAE,CAAC;YACrB,MAAM,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAA;YACnD,MAAM,SAAS,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAA;QACrC,CAAC;QACD,OAAO,IAAI,CAAA;IACb,CAAC,CAAC,CACH,CAAA;IACD,OAAO,QAAQ,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,KAAK,SAAS,CAAC,CAAA;AACtD,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,qBAAqB,CAAC,IAAY;IACtD,MAAM,KAAK,GAAG,MAAM,oBAAoB,CAAC,IAAI,EAAE,OAAO,CAAC,CAAA;IACvD,MAAM,MAAM,GAAG,gBAAgB,CAAC,MAAM,QAAQ,CAAC,IAAI,CAAC,IAAI,EAAE,uBAAuB,CAAC,EAAE,MAAM,CAAC,CAAC,CAAA;IAC5F,OAAO,CAAC,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,iBAAiB,IAAI,EAAE,CAAC,EAAE,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,aAAa,CAAC,IAAI,EAAE,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAA;AAClI,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,IAAY,EAAE,MAAsB;IACtE,MAAM,KAAK,GAAa,EAAE,CAAA;IAC1B,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,QAAQ,CAAC,IAAI,CAAC,IAAI,EAAE,cAAc,CAAC,EAAE,MAAM,CAAC,CAA4B,CAAA;IAC1G,IAAI,MAAM,CAAC,IAAI,IAAI,QAAQ,CAAC,OAAO,IAAI,WAAW,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,QAAQ,CAAC,OAAO,CAAC,IAAI,KAAK,MAAM,CAAC,IAAI,EAAE,CAAC;QAC9G,KAAK,CAAC,IAAI,CAAC,sDAAsD,MAAM,CAAC,IAAI,EAAE,CAAC,CAAA;IACjF,CAAC;IACD,IAAI,MAAM,CAAC,IAAI,IAAI,QAAQ,CAAC,cAAc,KAAK,QAAQ,MAAM,CAAC,IAAI,EAAE,EAAE,CAAC;QACrE,KAAK,CAAC,IAAI,CAAC,6DAA6D,MAAM,CAAC,IAAI,EAAE,CAAC,CAAA;IACxF,CAAC;IACD,IAAI,MAAM,CAAC,sBAAsB,EAAE,CAAC;QAClC,MAAM,UAAU,GAAG,iBAAiB,CAAC,QAAQ,EAAE,WAAW,CAAC,CAAA;QAC3D,IAAI,UAAU,IAAI,eAAe,CAAC,UAAU,EAAE,MAAM,CAAC,sBAAsB,CAAC,GAAG,CAAC,EAAE,CAAC;YACjF,KAAK,CAAC,IAAI,CAAC,sCAAsC,UAAU,gBAAgB,MAAM,CAAC,sBAAsB,EAAE,CAAC,CAAA;QAC7G,CAAC;IACH,CAAC;IAED,MAAM,SAAS,GAAG,MAAM,SAAS,CAAC,IAAI,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC,CAAA;IACxD,KAAK,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,IAAI,SAAS,EAAE,CAAC;QACvC,IAAI,MAAM,CAAC,sBAAsB,EAAE,CAAC;YAClC,KAAK,MAAM,KAAK,IAAI,MAAM,CAAC,QAAQ,CAAC,wDAAwD,CAAC,EAAE,CAAC;gBAC9F,MAAM,OAAO,GAAG,KAAK,CAAC,CAAC,CAAC,CAAA;gBACxB,IAAI,OAAO,IAAI,eAAe,CAAC,OAAO,EAAE,MAAM,CAAC,sBAAsB,CAAC,GAAG,CAAC,EAAE,CAAC;oBAC3E,KAAK,CAAC,IAAI,CAAC,oBAAoB,IAAI,UAAU,OAAO,iBAAiB,MAAM,CAAC,sBAAsB,EAAE,CAAC,CAAA;gBACvG,CAAC;YACH,CAAC;QACH,CAAC;IACH,CAAC;IACD,IACE,MAAM,CAAC,IAAI;QACX,CAAC,CAAC,GAAG,SAAS,CAAC,MAAM,EAAE,CAAC,CAAC,IAAI,CAC3B,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,kBAAkB,MAAM,CAAC,IAAI,GAAG,CAAC,IAAI,MAAM,CAAC,QAAQ,CAAC,iBAAiB,MAAM,CAAC,IAAI,EAAE,CAAC,CACjH,EACD,CAAC;QACD,KAAK,CAAC,IAAI,CAAC,sDAAsD,MAAM,CAAC,IAAI,EAAE,CAAC,CAAA;IACjF,CAAC;IACD,OAAO,KAAK,CAAA;AACd,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,mBAAmB,CAAC,IAAY,EAAE,MAAwB;IAC9E,MAAM,KAAK,GAAG,IAAI,GAAG,EAAkB,CAAA;IACvC,IAAI,MAAM,CAAC,UAAU,EAAE,CAAC;QACtB,KAAK,CAAC,GAAG,CAAC,wBAAwB,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,cAAc,CAAC,gBAAgB,EAAE,MAAM,CAAC,UAAU,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAA;IAC1H,CAAC;IACD,IAAI,MAAM,CAAC,UAAU,EAAE,CAAC;QACtB,KAAK,CAAC,GAAG,CAAC,wBAAwB,EAAE,SAAS,CAAC,cAAc,CAAC,gBAAgB,EAAE,MAAM,CAAC,UAAU,CAAC,EAAE,EAAE,SAAS,EAAE,CAAC,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC,CAAC,CAAA;IAC1I,CAAC;IACD,IAAI,MAAM,CAAC,IAAI,EAAE,CAAC;QAChB,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,EAAE,qBAAqB,CAAC,CAAA;QAC9C,MAAM,QAAQ,GAAG,aAAa,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC,CAAA;QAC5E,QAAQ,CAAC,GAAG,CAAC,mBAAmB,EAAE,MAAM,CAAC,IAAI,CAAC,iBAAiB,IAAI,MAAM,CAAC,CAAA;QAC1E,KAAK,CAAC,GAAG,CAAC,qBAAqB,EAAE,QAAQ,CAAC,QAAQ,CAAC,EAAE,SAAS,EAAE,CAAC,EAAE,CAAC,CAAC,CAAA;IACvE,CAAC;IACD,OAAO,KAAK,CAAA;AACd,CAAC;AAED,SAAS,gBAAgB,CAAC,MAAc;IACtC,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAY,CAAA;IAC3C,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,8CAA8C,CAAC,CAAA;IACxF,KAAK,MAAM,IAAI,IAAI,CAAC,YAAY,EAAE,YAAY,CAAU;QAAE,iBAAiB,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC,CAAA;IAC9F,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,CAAA;IACvB,IAAI,IAAI,KAAK,SAAS,IAAI,IAAI,KAAK,KAAK,EAAE,CAAC;QACzC,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,wCAAwC,CAAC,CAAA;QACjF,MAAM,GAAG,GAAG,IAAI,CAAC,iBAAiB,CAAA;QAClC,IAAI,GAAG,KAAK,SAAS,IAAI,CAAC,OAAO,GAAG,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,GAAG,GAAG,CAAC,CAAC,EAAE,CAAC;YACxF,MAAM,IAAI,KAAK,CAAC,uDAAuD,CAAC,CAAA;QAC1E,CAAC;IACH,CAAC;IACD,MAAM,QAAQ,GAAG,KAAK,CAAC,QAAQ,CAAA;IAC/B,IAAI,QAAQ,KAAK,SAAS,IAAI,QAAQ,KAAK,KAAK,EAAE,CAAC;QACjD,IAAI,CAAC,WAAW,CAAC,QAAQ,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,4CAA4C,CAAC,CAAA;QACzF,KAAK,MAAM,GAAG,IAAI,CAAC,wBAAwB,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,CAAC;YACrE,IAAI,QAAQ,CAAC,GAAG,CAAC,KAAK,SAAS,IAAI,OAAO,QAAQ,CAAC,GAAG,CAAC,KAAK,QAAQ;gBAAE,MAAM,IAAI,KAAK,CAAC,YAAY,GAAG,mBAAmB,CAAC,CAAA;QAC3H,CAAC;IACH,CAAC;IACD,OAAO,KAAK,CAAA;AACd,CAAC;AAED,SAAS,iBAAiB,CAAC,QAAiC,EAAE,IAAY;IACxE,KAAK,MAAM,KAAK,IAAI,CAAC,cAAc,EAAE,iBAAiB,CAAC,EAAE,CAAC;QACxD,MAAM,YAAY,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAA;QACpC,MAAM,KAAK,GAAG,WAAW,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS,CAAA;QACxE,IAAI,OAAO,KAAK,KAAK,QAAQ;YAAE,OAAO,eAAe,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,CAAA;IACxE,CAAC;IACD,OAAO,SAAS,CAAA;AAClB,CAAC;AAED,SAAS,eAAe,CAAC,IAAY,EAAE,KAAa;IAClD,MAAM,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAA;IACrC,MAAM,CAAC,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAA;IACtC,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,CAAC,EAAE,KAAK,IAAI,CAAC,EAAE,CAAC;QAC1C,IAAI,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC;YAAE,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAA;IACrE,CAAC;IACD,OAAO,CAAC,CAAA;AACV,CAAC;AAED,KAAK,UAAU,SAAS,CAAC,SAAiB,EAAE,IAAI,GAAG,SAAS;IAC1D,MAAM,KAAK,GAAG,IAAI,GAAG,EAAkB,CAAA;IACvC,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,SAAS,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,CAAA;IACjF,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,GAAG,CAC/B,OAAO,CAAC,GAAG,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE;QAC1B,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,EAAE,KAAK,CAAC,IAAI,CAAC,CAAA;QACxC,IAAI,KAAK,CAAC,WAAW,EAAE;YAAE,OAAO,SAAS,CAAC,IAAI,EAAE,IAAI,CAAC,CAAA;QACrD,IAAI,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC;YAAE,OAAO,IAAI,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,EAAE,MAAM,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,CAAA;QAC9G,OAAO,IAAI,GAAG,EAAkB,CAAA;IAClC,CAAC,CAAC,CACH,CAAA;IACD,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;QAC7B,KAAK,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,IAAI,MAAM;YAAE,KAAK,CAAC,GAAG,CAAC,IAAI,EAAE,MAAM,CAAC,CAAA;IAC9D,CAAC;IACD,OAAO,KAAK,CAAA;AACd,CAAC;AAED,SAAS,iBAAiB,CAAC,IAAY,EAAE,KAAc;IACrD,IAAI,KAAK,KAAK,SAAS,IAAI,OAAO,KAAK,KAAK,SAAS;QAAE,OAAM;IAC7D,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,SAAS,KAAK,SAAS,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,EAAE,CAAC;QAC5F,MAAM,IAAI,KAAK,CAAC,GAAG,IAAI,uDAAuD,CAAC,CAAA;IACjF,CAAC;AACH,CAAC;AAED,SAAS,cAAc,CAAC,IAA6B,EAAE,SAA0C;IAC/F,OAAO,SAAS,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,IAAI,EAAE,SAAS,CAAC,SAAS,IAAI,EAAE,CAAC,CAAA;AAC/E,CAAC;AAED,SAAS,SAAS,CAAC,IAA6B,EAAE,SAAkC;IAClF,OAAO,MAAM,CAAC,WAAW,CACvB,CAAC,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,GAAG,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE;QAC1E,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,CAAC,CAAA;QACtB,MAAM,KAAK,GAAG,SAAS,CAAC,GAAG,CAAC,CAAA;QAC5B,OAAO,CAAC,GAAG,EAAE,WAAW,CAAC,IAAI,CAAC,IAAI,WAAW,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,CAAA;IACrH,CAAC,CAAC,CACH,CAAA;AACH,CAAC;AAED,SAAS,WAAW,CAAC,KAAc;IACjC,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAA;AAC7E,CAAC","sourcesContent":["import { mkdir, readFile, readdir, writeFile } from 'node:fs/promises'\nimport { dirname, join } from 'node:path'\nimport { parseDocument, stringify } from 'yaml'\n\nconst changesetsPolicy = {\n  $schema: 'https://unpkg.com/@changesets/config@3.1.2/schema.json',\n  changelog: '@changesets/cli/changelog',\n  commit: false,\n  fixed: [],\n  linked: [],\n  access: 'public',\n  baseBranch: 'main',\n  updateInternalDependencies: 'patch',\n  ignore: [],\n}\n\nconst dependabotPolicy = {\n  version: 2,\n  updates: [\n    {\n      'package-ecosystem': 'npm',\n      directory: '/',\n      schedule: { interval: 'weekly' },\n      cooldown: { 'default-days': 7 },\n      groups: { 'javascript-dependencies': { patterns: ['*'] } },\n    },\n    {\n      'package-ecosystem': 'github-actions',\n      directory: '/',\n      schedule: { interval: 'weekly' },\n      cooldown: { 'default-days': 7 },\n    },\n  ],\n}\n\ntype PolicySelection = boolean | { overrides?: Record<string, unknown> }\n\nexport type RepositoryPolicy = {\n  changesets?: PolicySelection\n  dependabot?: PolicySelection\n  pnpm?: false | { minimumReleaseAge?: number }\n  adoption?: false | AdoptionPolicy\n}\n\nexport type AdoptionPolicy = {\n  minimumRasStackVersion?: string\n  node?: string\n  pnpm?: string\n  just?: string\n}\n\nexport async function syncRepositoryPolicy(root: string, mode: 'check' | 'write') {\n  const config = repositoryPolicy(await readFile(join(root, 'ras-stack.policy.json'), 'utf8'))\n  const files = await renderedPolicyFiles(root, config)\n  const compared = await Promise.all(\n    [...files].map(async ([path, expected]) => {\n      const absolute = join(root, path)\n      const actual = await readFile(absolute, 'utf8').catch(() => undefined)\n      if (actual === expected) return undefined\n      if (mode === 'write') {\n        await mkdir(dirname(absolute), { recursive: true })\n        await writeFile(absolute, expected)\n      }\n      return path\n    }),\n  )\n  return compared.filter((path) => path !== undefined)\n}\n\nexport async function checkRepositoryPolicy(root: string) {\n  const files = await syncRepositoryPolicy(root, 'check')\n  const config = repositoryPolicy(await readFile(join(root, 'ras-stack.policy.json'), 'utf8'))\n  return [...files.map((path) => `policy drift: ${path}`), ...(config.adoption ? await adoptionDrift(root, config.adoption) : [])]\n}\n\nexport async function adoptionDrift(root: string, policy: AdoptionPolicy) {\n  const drift: string[] = []\n  const manifest = JSON.parse(await readFile(join(root, 'package.json'), 'utf8')) as Record<string, unknown>\n  if (policy.node && manifest.engines && plainObject(manifest.engines) && manifest.engines.node !== policy.node) {\n    drift.push(`toolchain drift: package.json engines.node must be ${policy.node}`)\n  }\n  if (policy.pnpm && manifest.packageManager !== `pnpm@${policy.pnpm}`) {\n    drift.push(`toolchain drift: package.json packageManager must be pnpm@${policy.pnpm}`)\n  }\n  if (policy.minimumRasStackVersion) {\n    const dependency = dependencyVersion(manifest, 'ras-stack')\n    if (dependency && compareVersions(dependency, policy.minimumRasStackVersion) < 0) {\n      drift.push(`ras-stack drift: package.json uses ${dependency}, minimum is ${policy.minimumRasStackVersion}`)\n    }\n  }\n\n  const workflows = await textFiles(join(root, '.github'))\n  for (const [path, source] of workflows) {\n    if (policy.minimumRasStackVersion) {\n      for (const match of source.matchAll(/richardsolomou\\/ras-stack\\/[^\\s'\"}]+@v(\\d+\\.\\d+\\.\\d+)/g)) {\n        const version = match[1]\n        if (version && compareVersions(version, policy.minimumRasStackVersion) < 0) {\n          drift.push(`ras-stack drift: ${path} uses v${version}, minimum is v${policy.minimumRasStackVersion}`)\n        }\n      }\n    }\n  }\n  if (\n    policy.just &&\n    ![...workflows.values()].some(\n      (source) => source.includes(`just-version: '${policy.just}'`) || source.includes(`just-version: ${policy.just}`),\n    )\n  ) {\n    drift.push(`toolchain drift: no workflow declares just-version ${policy.just}`)\n  }\n  return drift\n}\n\nexport async function renderedPolicyFiles(root: string, config: RepositoryPolicy) {\n  const files = new Map<string, string>()\n  if (config.changesets) {\n    files.set('.changeset/config.json', `${JSON.stringify(selectedPolicy(changesetsPolicy, config.changesets), null, 2)}\\n`)\n  }\n  if (config.dependabot) {\n    files.set('.github/dependabot.yml', stringify(selectedPolicy(dependabotPolicy, config.dependabot), { lineWidth: 0, singleQuote: true }))\n  }\n  if (config.pnpm) {\n    const path = join(root, 'pnpm-workspace.yaml')\n    const document = parseDocument(await readFile(path, 'utf8').catch(() => ''))\n    document.set('minimumReleaseAge', config.pnpm.minimumReleaseAge ?? 10_080)\n    files.set('pnpm-workspace.yaml', document.toString({ lineWidth: 0 }))\n  }\n  return files\n}\n\nfunction repositoryPolicy(source: string): RepositoryPolicy {\n  const value = JSON.parse(source) as unknown\n  if (!plainObject(value)) throw new Error('ras-stack.policy.json must contain an object')\n  for (const name of ['changesets', 'dependabot'] as const) validateSelection(name, value[name])\n  const pnpm = value.pnpm\n  if (pnpm !== undefined && pnpm !== false) {\n    if (!plainObject(pnpm)) throw new Error('pnpm policy must be false or an object')\n    const age = pnpm.minimumReleaseAge\n    if (age !== undefined && (typeof age !== 'number' || !Number.isInteger(age) || age < 0)) {\n      throw new Error('pnpm.minimumReleaseAge must be a non-negative integer')\n    }\n  }\n  const adoption = value.adoption\n  if (adoption !== undefined && adoption !== false) {\n    if (!plainObject(adoption)) throw new Error('adoption policy must be false or an object')\n    for (const key of ['minimumRasStackVersion', 'node', 'pnpm', 'just']) {\n      if (adoption[key] !== undefined && typeof adoption[key] !== 'string') throw new Error(`adoption.${key} must be a string`)\n    }\n  }\n  return value\n}\n\nfunction dependencyVersion(manifest: Record<string, unknown>, name: string) {\n  for (const field of ['dependencies', 'devDependencies']) {\n    const dependencies = manifest[field]\n    const value = plainObject(dependencies) ? dependencies[name] : undefined\n    if (typeof value === 'string') return /\\d+\\.\\d+\\.\\d+/.exec(value)?.[0]\n  }\n  return undefined\n}\n\nfunction compareVersions(left: string, right: string) {\n  const a = left.split('.').map(Number)\n  const b = right.split('.').map(Number)\n  for (let index = 0; index < 3; index += 1) {\n    if (a[index] !== b[index]) return (a[index] ?? 0) - (b[index] ?? 0)\n  }\n  return 0\n}\n\nasync function textFiles(directory: string, root = directory): Promise<Map<string, string>> {\n  const files = new Map<string, string>()\n  const entries = await readdir(directory, { withFileTypes: true }).catch(() => [])\n  const results = await Promise.all(\n    entries.map(async (entry) => {\n      const path = join(directory, entry.name)\n      if (entry.isDirectory()) return textFiles(path, root)\n      if (/\\.ya?ml$/.test(entry.name)) return new Map([[path.slice(root.length + 1), await readFile(path, 'utf8')]])\n      return new Map<string, string>()\n    }),\n  )\n  for (const result of results) {\n    for (const [path, source] of result) files.set(path, source)\n  }\n  return files\n}\n\nfunction validateSelection(name: string, value: unknown) {\n  if (value === undefined || typeof value === 'boolean') return\n  if (!plainObject(value) || (value.overrides !== undefined && !plainObject(value.overrides))) {\n    throw new Error(`${name} policy must be a boolean or an object with overrides`)\n  }\n}\n\nfunction selectedPolicy(base: Record<string, unknown>, selection: Exclude<PolicySelection, false>) {\n  return selection === true ? base : deepMerge(base, selection.overrides ?? {})\n}\n\nfunction deepMerge(base: Record<string, unknown>, overrides: Record<string, unknown>): Record<string, unknown> {\n  return Object.fromEntries(\n    [...new Set([...Object.keys(base), ...Object.keys(overrides)])].map((key) => {\n      const left = base[key]\n      const right = overrides[key]\n      return [key, plainObject(left) && plainObject(right) ? deepMerge(left, right) : right === undefined ? left : right]\n    }),\n  )\n}\n\nfunction plainObject(value: unknown): value is Record<string, unknown> {\n  return typeof value === 'object' && value !== null && !Array.isArray(value)\n}\n"]}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/policy/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,OAAO,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAA;AACtE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAA;AACzC,OAAO,EAAE,aAAa,EAAE,SAAS,EAAE,MAAM,MAAM,CAAA;AAE/C,OAAO,EAAE,WAAW,EAAE,aAAa,EAAE,YAAY,EAAE,0BAA0B,EAAE,MAAM,YAAY,CAAA;AAGjG,MAAM,gBAAgB,GAAG;IACvB,OAAO,EAAE,wDAAwD;IACjE,SAAS,EAAE,2BAA2B;IACtC,MAAM,EAAE,KAAK;IACb,KAAK,EAAE,EAAE;IACT,MAAM,EAAE,EAAE;IACV,MAAM,EAAE,QAAQ;IAChB,UAAU,EAAE,MAAM;IAClB,0BAA0B,EAAE,OAAO;IACnC,MAAM,EAAE,EAAE;CACX,CAAA;AAED,MAAM,gBAAgB,GAAG;IACvB,OAAO,EAAE,CAAC;IACV,OAAO,EAAE;QACP;YACE,mBAAmB,EAAE,KAAK;YAC1B,SAAS,EAAE,GAAG;YACd,QAAQ,EAAE,EAAE,QAAQ,EAAE,QAAQ,EAAE;YAChC,QAAQ,EAAE,EAAE,cAAc,EAAE,CAAC,EAAE;YAC/B,MAAM,EAAE,EAAE,yBAAyB,EAAE,EAAE,QAAQ,EAAE,CAAC,GAAG,CAAC,EAAE,EAAE;SAC3D;QACD;YACE,mBAAmB,EAAE,gBAAgB;YACrC,SAAS,EAAE,GAAG;YACd,QAAQ,EAAE,EAAE,QAAQ,EAAE,QAAQ,EAAE;YAChC,QAAQ,EAAE,EAAE,cAAc,EAAE,CAAC,EAAE;SAChC;KACF;CACF,CAAA;AAyBD,MAAM,CAAC,KAAK,UAAU,oBAAoB,CAAC,IAAY,EAAE,IAAuB;IAC9E,MAAM,MAAM,GAAG,gBAAgB,CAAC,MAAM,QAAQ,CAAC,IAAI,CAAC,IAAI,EAAE,uBAAuB,CAAC,EAAE,MAAM,CAAC,CAAC,CAAA;IAC5F,MAAM,KAAK,GAAG,MAAM,mBAAmB,CAAC,IAAI,EAAE,MAAM,CAAC,CAAA;IACrD,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,GAAG,CAChC,CAAC,GAAG,KAAK,CAAC,CAAC,GAAG,CAAC,KAAK,EAAE,CAAC,IAAI,EAAE,QAAQ,CAAC,EAAE,EAAE;QACxC,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,CAAA;QACjC,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAA;QACtE,IAAI,MAAM,KAAK,QAAQ;YAAE,OAAO,SAAS,CAAA;QACzC,IAAI,IAAI,KAAK,OAAO,EAAE,CAAC;YACrB,MAAM,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAA;YACnD,MAAM,SAAS,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAA;QACrC,CAAC;QACD,OAAO,IAAI,CAAA;IACb,CAAC,CAAC,CACH,CAAA;IACD,OAAO,QAAQ,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,KAAK,SAAS,CAAC,CAAA;AACtD,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,qBAAqB,CAAC,IAAY;IACtD,MAAM,KAAK,GAAG,MAAM,oBAAoB,CAAC,IAAI,EAAE,OAAO,CAAC,CAAA;IACvD,MAAM,MAAM,GAAG,gBAAgB,CAAC,MAAM,QAAQ,CAAC,IAAI,CAAC,IAAI,EAAE,uBAAuB,CAAC,EAAE,MAAM,CAAC,CAAC,CAAA;IAC5F,OAAO,CAAC,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,iBAAiB,IAAI,EAAE,CAAC,EAAE,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,aAAa,CAAC,IAAI,EAAE,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAA;AAClI,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,kBAAkB,CAAC,IAAY,EAAE,IAAuB;IAC5E,MAAM,MAAM,GAAG,gBAAgB,CAAC,MAAM,QAAQ,CAAC,IAAI,CAAC,IAAI,EAAE,uBAAuB,CAAC,EAAE,MAAM,CAAC,CAAC,CAAA;IAC5F,IAAI,CAAC,MAAM,CAAC,QAAQ;QAAE,OAAO,EAAE,CAAA;IAC/B,MAAM,KAAK,GAAG,MAAM,qBAAqB,CAAC,IAAI,EAAE,MAAM,CAAC,QAAQ,CAAC,CAAA;IAChE,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,GAAG,CAC/B,CAAC,GAAG,KAAK,CAAC,CAAC,GAAG,CAAC,KAAK,EAAE,CAAC,IAAI,EAAE,QAAQ,CAAC,EAAE,EAAE;QACxC,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,CAAA;QACjC,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAA;QAC/C,IAAI,MAAM,KAAK,QAAQ;YAAE,OAAO,SAAS,CAAA;QACzC,IAAI,IAAI,KAAK,OAAO;YAAE,MAAM,SAAS,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAA;QACzD,OAAO,IAAI,CAAA;IACb,CAAC,CAAC,CACH,CAAA;IACD,OAAO,OAAO,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,KAAK,SAAS,CAAC,CAAA;AACrD,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,IAAY,EAAE,MAAsB;IACtE,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,QAAQ,CAAC,IAAI,CAAC,IAAI,EAAE,cAAc,CAAC,EAAE,MAAM,CAAC,CAA4B,CAAA;IAC1G,MAAM,KAAK,GAAG,MAAM,aAAa,CAAC,IAAI,CAAC,CAAA;IACvC,OAAO,qBAAqB,CAAC,EAAE,QAAQ,EAAE,KAAK,EAAE,EAAE,MAAM,CAAC,CAAA;AAC3D,CAAC;AAED,MAAM,UAAU,qBAAqB,CAAC,QAA0B,EAAE,MAAsB;IACtF,MAAM,KAAK,GAAa,EAAE,CAAA;IAC1B,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE,GAAG,QAAQ,CAAA;IACpC,IAAI,MAAM,CAAC,IAAI,IAAI,QAAQ,CAAC,OAAO,IAAI,WAAW,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,QAAQ,CAAC,OAAO,CAAC,IAAI,KAAK,MAAM,CAAC,IAAI,EAAE,CAAC;QAC9G,KAAK,CAAC,IAAI,CAAC,sDAAsD,MAAM,CAAC,IAAI,EAAE,CAAC,CAAA;IACjF,CAAC;IACD,IAAI,MAAM,CAAC,IAAI,IAAI,QAAQ,CAAC,cAAc,KAAK,QAAQ,MAAM,CAAC,IAAI,EAAE,EAAE,CAAC;QACrE,KAAK,CAAC,IAAI,CAAC,6DAA6D,MAAM,CAAC,IAAI,EAAE,CAAC,CAAA;IACxF,CAAC;IACD,IAAI,MAAM,CAAC,sBAAsB,EAAE,CAAC;QAClC,MAAM,UAAU,GAAG,iBAAiB,CAAC,QAAQ,EAAE,WAAW,CAAC,CAAA;QAC3D,IAAI,UAAU,IAAI,eAAe,CAAC,UAAU,EAAE,MAAM,CAAC,sBAAsB,CAAC,GAAG,CAAC,EAAE,CAAC;YACjF,KAAK,CAAC,IAAI,CAAC,sCAAsC,UAAU,gBAAgB,MAAM,CAAC,sBAAsB,EAAE,CAAC,CAAA;QAC7G,CAAC;IACH,CAAC;IAED,MAAM,SAAS,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,KAAK,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,IAAI,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;IAC9G,MAAM,eAAe,GAAG,MAAM,CAAC,8BAA8B,IAAI,MAAM,CAAC,sBAAsB,CAAA;IAC9F,KAAK,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,IAAI,SAAS,EAAE,CAAC;QACvC,IAAI,eAAe,EAAE,CAAC;YACpB,KAAK,MAAM,KAAK,IAAI,MAAM,CAAC,QAAQ,CAAC,wDAAwD,CAAC,EAAE,CAAC;gBAC9F,MAAM,OAAO,GAAG,KAAK,CAAC,CAAC,CAAC,CAAA;gBACxB,IAAI,OAAO,IAAI,eAAe,CAAC,OAAO,EAAE,eAAe,CAAC,GAAG,CAAC,EAAE,CAAC;oBAC7D,KAAK,CAAC,IAAI,CAAC,oBAAoB,IAAI,UAAU,OAAO,iBAAiB,eAAe,EAAE,CAAC,CAAA;gBACzF,CAAC;YACH,CAAC;QACH,CAAC;IACH,CAAC;IACD,IACE,MAAM,CAAC,IAAI;QACX,CAAC,CAAC,GAAG,SAAS,CAAC,MAAM,EAAE,CAAC,CAAC,IAAI,CAC3B,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,kBAAkB,MAAM,CAAC,IAAI,GAAG,CAAC,IAAI,MAAM,CAAC,QAAQ,CAAC,iBAAiB,MAAM,CAAC,IAAI,EAAE,CAAC,CACjH,EACD,CAAC;QACD,KAAK,CAAC,IAAI,CAAC,sDAAsD,MAAM,CAAC,IAAI,EAAE,CAAC,CAAA;IACjF,CAAC;IACD,KAAK,MAAM,SAAS,IAAI,MAAM,CAAC,kBAAkB,IAAI,EAAE,EAAE,CAAC;QACxD,IAAI,CAAC,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,EAAE,CAAC;YACtE,KAAK,CAAC,IAAI,CAAC,oDAAoD,SAAS,EAAE,CAAC,CAAA;QAC7E,CAAC;IACH,CAAC;IACD,OAAO,CAAC,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC,CAAA;AAC5B,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,mBAAmB,CAAC,IAAY,EAAE,MAAwB;IAC9E,MAAM,KAAK,GAAG,IAAI,GAAG,EAAkB,CAAA;IACvC,IAAI,MAAM,CAAC,UAAU,EAAE,CAAC;QACtB,KAAK,CAAC,GAAG,CAAC,wBAAwB,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,cAAc,CAAC,gBAAgB,EAAE,MAAM,CAAC,UAAU,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAA;IAC1H,CAAC;IACD,IAAI,MAAM,CAAC,UAAU,EAAE,CAAC;QACtB,KAAK,CAAC,GAAG,CAAC,wBAAwB,EAAE,SAAS,CAAC,cAAc,CAAC,gBAAgB,EAAE,MAAM,CAAC,UAAU,CAAC,EAAE,EAAE,SAAS,EAAE,CAAC,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC,CAAC,CAAA;IAC1I,CAAC;IACD,IAAI,MAAM,CAAC,IAAI,EAAE,CAAC;QAChB,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,EAAE,qBAAqB,CAAC,CAAA;QAC9C,MAAM,QAAQ,GAAG,aAAa,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC,CAAA;QAC5E,QAAQ,CAAC,GAAG,CAAC,mBAAmB,EAAE,MAAM,CAAC,IAAI,CAAC,iBAAiB,IAAI,MAAM,CAAC,CAAA;QAC1E,KAAK,CAAC,GAAG,CAAC,qBAAqB,EAAE,QAAQ,CAAC,QAAQ,CAAC,EAAE,SAAS,EAAE,CAAC,EAAE,CAAC,CAAC,CAAA;IACvE,CAAC;IACD,OAAO,KAAK,CAAA;AACd,CAAC;AAED,SAAS,gBAAgB,CAAC,MAAc;IACtC,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAY,CAAA;IAC3C,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,8CAA8C,CAAC,CAAA;IACxF,KAAK,MAAM,IAAI,IAAI,CAAC,YAAY,EAAE,YAAY,CAAU;QAAE,iBAAiB,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC,CAAA;IAC9F,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,CAAA;IACvB,IAAI,IAAI,KAAK,SAAS,IAAI,IAAI,KAAK,KAAK,EAAE,CAAC;QACzC,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,wCAAwC,CAAC,CAAA;QACjF,MAAM,GAAG,GAAG,IAAI,CAAC,iBAAiB,CAAA;QAClC,IAAI,GAAG,KAAK,SAAS,IAAI,CAAC,OAAO,GAAG,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,GAAG,GAAG,CAAC,CAAC,EAAE,CAAC;YACxF,MAAM,IAAI,KAAK,CAAC,uDAAuD,CAAC,CAAA;QAC1E,CAAC;IACH,CAAC;IACD,MAAM,QAAQ,GAAG,KAAK,CAAC,QAAQ,CAAA;IAC/B,IAAI,QAAQ,KAAK,SAAS,IAAI,QAAQ,KAAK,KAAK,EAAE,CAAC;QACjD,IAAI,CAAC,WAAW,CAAC,QAAQ,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,4CAA4C,CAAC,CAAA;QACzF,KAAK,MAAM,GAAG,IAAI,CAAC,wBAAwB,EAAE,gCAAgC,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,CAAC;YACvG,IAAI,QAAQ,CAAC,GAAG,CAAC,KAAK,SAAS,IAAI,OAAO,QAAQ,CAAC,GAAG,CAAC,KAAK,QAAQ;gBAAE,MAAM,IAAI,KAAK,CAAC,YAAY,GAAG,mBAAmB,CAAC,CAAA;QAC3H,CAAC;QACD,IAAI,QAAQ,CAAC,kBAAkB,KAAK,SAAS,IAAI,CAAC,WAAW,CAAC,QAAQ,CAAC,kBAAkB,CAAC,EAAE,CAAC;YAC3F,MAAM,IAAI,KAAK,CAAC,yDAAyD,CAAC,CAAA;QAC5E,CAAC;IACH,CAAC;IACD,OAAO,KAAK,CAAA;AACd,CAAC;AAED,SAAS,iBAAiB,CAAC,QAAiC,EAAE,IAAY;IACxE,KAAK,MAAM,KAAK,IAAI,CAAC,cAAc,EAAE,iBAAiB,CAAC,EAAE,CAAC;QACxD,MAAM,YAAY,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAA;QACpC,MAAM,KAAK,GAAG,WAAW,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS,CAAA;QACxE,IAAI,OAAO,KAAK,KAAK,QAAQ;YAAE,OAAO,eAAe,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,CAAA;IACxE,CAAC;IACD,OAAO,SAAS,CAAA;AAClB,CAAC;AAED,SAAS,eAAe,CAAC,IAAY,EAAE,KAAa;IAClD,MAAM,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAA;IACrC,MAAM,CAAC,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAA;IACtC,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,CAAC,EAAE,KAAK,IAAI,CAAC,EAAE,CAAC;QAC1C,IAAI,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC;YAAE,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAA;IACrE,CAAC;IACD,OAAO,CAAC,CAAA;AACV,CAAC;AAED,KAAK,UAAU,SAAS,CAAC,SAAiB,EAAE,IAAI,GAAG,SAAS;IAC1D,MAAM,KAAK,GAAG,IAAI,GAAG,EAAkB,CAAA;IACvC,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,SAAS,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,CAAA;IACjF,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,GAAG,CAC/B,OAAO,CAAC,GAAG,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE;QAC1B,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,EAAE,KAAK,CAAC,IAAI,CAAC,CAAA;QACxC,IAAI,KAAK,CAAC,WAAW,EAAE;YAAE,OAAO,SAAS,CAAC,IAAI,EAAE,IAAI,CAAC,CAAA;QACrD,IAAI,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC;YAAE,OAAO,IAAI,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,EAAE,MAAM,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,CAAA;QAC9G,OAAO,IAAI,GAAG,EAAkB,CAAA;IAClC,CAAC,CAAC,CACH,CAAA;IACD,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;QAC7B,KAAK,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,IAAI,MAAM;YAAE,KAAK,CAAC,GAAG,CAAC,IAAI,EAAE,MAAM,CAAC,CAAA;IAC9D,CAAC;IACD,OAAO,KAAK,CAAA;AACd,CAAC;AAED,KAAK,UAAU,aAAa,CAAC,IAAY;IACvC,MAAM,KAAK,GAAG,MAAM,SAAS,CAAC,IAAI,CAAC,IAAI,EAAE,SAAS,CAAC,EAAE,IAAI,CAAC,CAAA;IAC1D,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,IAAI,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAA;IAC5D,MAAM,OAAO,CAAC,GAAG,CACf,OAAO,CAAC,GAAG,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE;QAC1B,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,IAAI,CAAC,2DAA2D,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC;YAAE,OAAM;QAC5G,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,EAAE,MAAM,QAAQ,CAAC,IAAI,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC,CAAC,CAAA;IACvE,CAAC,CAAC,CACH,CAAA;IACD,OAAO,KAAK,CAAA;AACd,CAAC;AAED,KAAK,UAAU,qBAAqB,CAAC,IAAY,EAAE,MAAsB;IACvE,MAAM,KAAK,GAAG,IAAI,GAAG,EAAkB,CAAA;IACvC,MAAM,YAAY,GAAG,IAAI,CAAC,IAAI,EAAE,cAAc,CAAC,CAAA;IAC/C,MAAM,cAAc,GAAG,MAAM,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC,CAAA;IAC3D,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,cAAc,CAA4B,CAAA;IACtE,IAAI,MAAM,CAAC,IAAI,EAAE,CAAC;QAChB,MAAM,OAAO,GAAG,WAAW,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAA;QACrE,QAAQ,CAAC,OAAO,GAAG,EAAE,GAAG,OAAO,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,CAAA;IACtD,CAAC;IACD,IAAI,MAAM,CAAC,IAAI;QAAE,QAAQ,CAAC,cAAc,GAAG,QAAQ,MAAM,CAAC,IAAI,EAAE,CAAA;IAChE,IAAI,MAAM,CAAC,sBAAsB,EAAE,CAAC;QAClC,KAAK,MAAM,KAAK,IAAI,CAAC,cAAc,EAAE,iBAAiB,CAAC,EAAE,CAAC;YACxD,MAAM,YAAY,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAA;YACpC,IAAI,CAAC,WAAW,CAAC,YAAY,CAAC,IAAI,OAAO,YAAY,CAAC,WAAW,CAAC,KAAK,QAAQ;gBAAE,SAAQ;YACzF,YAAY,CAAC,WAAW,CAAC,GAAG,cAAc,CAAC,YAAY,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC,sBAAsB,CAAC,CAAA;QACtG,CAAC;IACH,CAAC;IACD,MAAM,gBAAgB,GAAG,GAAG,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CAAA;IACjE,IAAI,gBAAgB,KAAK,cAAc;QAAE,KAAK,CAAC,GAAG,CAAC,cAAc,EAAE,gBAAgB,CAAC,CAAA;IAEpF,MAAM,eAAe,GAAG,MAAM,CAAC,8BAA8B,IAAI,MAAM,CAAC,sBAAsB,CAAA;IAC9F,MAAM,SAAS,GAAG,MAAM,SAAS,CAAC,IAAI,CAAC,IAAI,EAAE,SAAS,CAAC,EAAE,IAAI,CAAC,CAAA;IAC9D,KAAK,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,IAAI,SAAS,EAAE,CAAC;QACvC,IAAI,QAAQ,GAAG,MAAM,CAAA;QACrB,IAAI,eAAe,EAAE,CAAC;YACpB,QAAQ,GAAG,QAAQ,CAAC,OAAO,CAAC,0DAA0D,EAAE,CAAC,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE,EAAE,CACrH,eAAe,CAAC,OAAO,EAAE,eAAe,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,MAAM,GAAG,eAAe,EAAE,CAAC,CAAC,CAAC,SAAS,CAC1F,CAAA;QACH,CAAC;QACD,IAAI,MAAM,CAAC,IAAI,EAAE,CAAC;YAChB,QAAQ,GAAG,QAAQ,CAAC,OAAO,CAAC,2CAA2C,EAAE,OAAO,MAAM,CAAC,IAAI,IAAI,CAAC,CAAA;YAChG,QAAQ,GAAG,QAAQ,CAAC,OAAO,CACzB,sIAAsI,EACtI,OAAO,MAAM,CAAC,IAAI,IAAI,CACvB,CAAA;QACH,CAAC;QACD,IAAI,QAAQ,KAAK,MAAM;YAAE,KAAK,CAAC,GAAG,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAA;IACpD,CAAC;IACD,OAAO,KAAK,CAAA;AACd,CAAC;AAED,SAAS,cAAc,CAAC,OAAe,EAAE,OAAe;IACtD,MAAM,KAAK,GAAG,kDAAkD,CAAC,IAAI,CAAC,OAAO,CAAC,CAAA;IAC9E,MAAM,cAAc,GAAG,eAAe,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC,CAAA;IACzD,IAAI,cAAc,IAAI,eAAe,CAAC,cAAc,EAAE,OAAO,CAAC,IAAI,CAAC;QAAE,OAAO,OAAO,CAAA;IACnF,OAAO,KAAK,CAAC,CAAC,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,GAAG,OAAO,GAAG,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,CAAA;AAC7D,CAAC;AAED,SAAS,iBAAiB,CAAC,IAAY,EAAE,KAAc;IACrD,IAAI,KAAK,KAAK,SAAS,IAAI,OAAO,KAAK,KAAK,SAAS;QAAE,OAAM;IAC7D,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,SAAS,KAAK,SAAS,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,EAAE,CAAC;QAC5F,MAAM,IAAI,KAAK,CAAC,GAAG,IAAI,uDAAuD,CAAC,CAAA;IACjF,CAAC;AACH,CAAC;AAED,SAAS,cAAc,CAAC,IAA6B,EAAE,SAA0C;IAC/F,OAAO,SAAS,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,IAAI,EAAE,SAAS,CAAC,SAAS,IAAI,EAAE,CAAC,CAAA;AAC/E,CAAC;AAED,SAAS,SAAS,CAAC,IAA6B,EAAE,SAAkC;IAClF,OAAO,MAAM,CAAC,WAAW,CACvB,CAAC,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,GAAG,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE;QAC1E,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,CAAC,CAAA;QACtB,MAAM,KAAK,GAAG,SAAS,CAAC,GAAG,CAAC,CAAA;QAC5B,OAAO,CAAC,GAAG,EAAE,WAAW,CAAC,IAAI,CAAC,IAAI,WAAW,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,CAAA;IACrH,CAAC,CAAC,CACH,CAAA;AACH,CAAC;AAED,SAAS,WAAW,CAAC,KAAc;IACjC,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAA;AAC7E,CAAC;AAED,SAAS,WAAW,CAAC,KAAc;IACjC,OAAO,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,OAAO,IAAI,KAAK,QAAQ,CAAC,CAAA;AAChF,CAAC","sourcesContent":["import { mkdir, readFile, readdir, writeFile } from 'node:fs/promises'\nimport { dirname, join } from 'node:path'\nimport { parseDocument, stringify } from 'yaml'\n\nexport { fleetConfig, fleetMarkdown, inspectFleet, loadGitHubAdoptionSnapshot } from './fleet.js'\nexport type { FleetConfig, FleetRepository, FleetResult } from './fleet.js'\n\nconst changesetsPolicy = {\n  $schema: 'https://unpkg.com/@changesets/config@3.1.2/schema.json',\n  changelog: '@changesets/cli/changelog',\n  commit: false,\n  fixed: [],\n  linked: [],\n  access: 'public',\n  baseBranch: 'main',\n  updateInternalDependencies: 'patch',\n  ignore: [],\n}\n\nconst dependabotPolicy = {\n  version: 2,\n  updates: [\n    {\n      'package-ecosystem': 'npm',\n      directory: '/',\n      schedule: { interval: 'weekly' },\n      cooldown: { 'default-days': 7 },\n      groups: { 'javascript-dependencies': { patterns: ['*'] } },\n    },\n    {\n      'package-ecosystem': 'github-actions',\n      directory: '/',\n      schedule: { interval: 'weekly' },\n      cooldown: { 'default-days': 7 },\n    },\n  ],\n}\n\ntype PolicySelection = boolean | { overrides?: Record<string, unknown> }\n\nexport type RepositoryPolicy = {\n  changesets?: PolicySelection\n  dependabot?: PolicySelection\n  pnpm?: false | { minimumReleaseAge?: number }\n  adoption?: false | AdoptionPolicy\n}\n\nexport type AdoptionPolicy = {\n  minimumRasStackVersion?: string\n  minimumWorkflowRasStackVersion?: string\n  node?: string\n  pnpm?: string\n  just?: string\n  requiredReferences?: string[]\n}\n\nexport type AdoptionSnapshot = {\n  manifest: Record<string, unknown>\n  files: Map<string, string>\n}\n\nexport async function syncRepositoryPolicy(root: string, mode: 'check' | 'write') {\n  const config = repositoryPolicy(await readFile(join(root, 'ras-stack.policy.json'), 'utf8'))\n  const files = await renderedPolicyFiles(root, config)\n  const compared = await Promise.all(\n    [...files].map(async ([path, expected]) => {\n      const absolute = join(root, path)\n      const actual = await readFile(absolute, 'utf8').catch(() => undefined)\n      if (actual === expected) return undefined\n      if (mode === 'write') {\n        await mkdir(dirname(absolute), { recursive: true })\n        await writeFile(absolute, expected)\n      }\n      return path\n    }),\n  )\n  return compared.filter((path) => path !== undefined)\n}\n\nexport async function checkRepositoryPolicy(root: string) {\n  const files = await syncRepositoryPolicy(root, 'check')\n  const config = repositoryPolicy(await readFile(join(root, 'ras-stack.policy.json'), 'utf8'))\n  return [...files.map((path) => `policy drift: ${path}`), ...(config.adoption ? await adoptionDrift(root, config.adoption) : [])]\n}\n\nexport async function syncAdoptionPolicy(root: string, mode: 'check' | 'write') {\n  const config = repositoryPolicy(await readFile(join(root, 'ras-stack.policy.json'), 'utf8'))\n  if (!config.adoption) return []\n  const files = await renderedAdoptionFiles(root, config.adoption)\n  const changed = await Promise.all(\n    [...files].map(async ([path, expected]) => {\n      const absolute = join(root, path)\n      const actual = await readFile(absolute, 'utf8')\n      if (actual === expected) return undefined\n      if (mode === 'write') await writeFile(absolute, expected)\n      return path\n    }),\n  )\n  return changed.filter((path) => path !== undefined)\n}\n\nexport async function adoptionDrift(root: string, policy: AdoptionPolicy) {\n  const manifest = JSON.parse(await readFile(join(root, 'package.json'), 'utf8')) as Record<string, unknown>\n  const files = await adoptionFiles(root)\n  return adoptionSnapshotDrift({ manifest, files }, policy)\n}\n\nexport function adoptionSnapshotDrift(snapshot: AdoptionSnapshot, policy: AdoptionPolicy) {\n  const drift: string[] = []\n  const { manifest, files } = snapshot\n  if (policy.node && manifest.engines && plainObject(manifest.engines) && manifest.engines.node !== policy.node) {\n    drift.push(`toolchain drift: package.json engines.node must be ${policy.node}`)\n  }\n  if (policy.pnpm && manifest.packageManager !== `pnpm@${policy.pnpm}`) {\n    drift.push(`toolchain drift: package.json packageManager must be pnpm@${policy.pnpm}`)\n  }\n  if (policy.minimumRasStackVersion) {\n    const dependency = dependencyVersion(manifest, 'ras-stack')\n    if (dependency && compareVersions(dependency, policy.minimumRasStackVersion) < 0) {\n      drift.push(`ras-stack drift: package.json uses ${dependency}, minimum is ${policy.minimumRasStackVersion}`)\n    }\n  }\n\n  const workflows = new Map([...files].filter(([path]) => path.startsWith('.github/') && /\\.ya?ml$/.test(path)))\n  const workflowMinimum = policy.minimumWorkflowRasStackVersion ?? policy.minimumRasStackVersion\n  for (const [path, source] of workflows) {\n    if (workflowMinimum) {\n      for (const match of source.matchAll(/richardsolomou\\/ras-stack\\/[^\\s'\"}]+@v(\\d+\\.\\d+\\.\\d+)/g)) {\n        const version = match[1]\n        if (version && compareVersions(version, workflowMinimum) < 0) {\n          drift.push(`ras-stack drift: ${path} uses v${version}, minimum is v${workflowMinimum}`)\n        }\n      }\n    }\n  }\n  if (\n    policy.just &&\n    ![...workflows.values()].some(\n      (source) => source.includes(`just-version: '${policy.just}'`) || source.includes(`just-version: ${policy.just}`),\n    )\n  ) {\n    drift.push(`toolchain drift: no workflow declares just-version ${policy.just}`)\n  }\n  for (const reference of policy.requiredReferences ?? []) {\n    if (![...files.values()].some((source) => source.includes(reference))) {\n      drift.push(`shared config drift: no configuration references ${reference}`)\n    }\n  }\n  return [...new Set(drift)]\n}\n\nexport async function renderedPolicyFiles(root: string, config: RepositoryPolicy) {\n  const files = new Map<string, string>()\n  if (config.changesets) {\n    files.set('.changeset/config.json', `${JSON.stringify(selectedPolicy(changesetsPolicy, config.changesets), null, 2)}\\n`)\n  }\n  if (config.dependabot) {\n    files.set('.github/dependabot.yml', stringify(selectedPolicy(dependabotPolicy, config.dependabot), { lineWidth: 0, singleQuote: true }))\n  }\n  if (config.pnpm) {\n    const path = join(root, 'pnpm-workspace.yaml')\n    const document = parseDocument(await readFile(path, 'utf8').catch(() => ''))\n    document.set('minimumReleaseAge', config.pnpm.minimumReleaseAge ?? 10_080)\n    files.set('pnpm-workspace.yaml', document.toString({ lineWidth: 0 }))\n  }\n  return files\n}\n\nfunction repositoryPolicy(source: string): RepositoryPolicy {\n  const value = JSON.parse(source) as unknown\n  if (!plainObject(value)) throw new Error('ras-stack.policy.json must contain an object')\n  for (const name of ['changesets', 'dependabot'] as const) validateSelection(name, value[name])\n  const pnpm = value.pnpm\n  if (pnpm !== undefined && pnpm !== false) {\n    if (!plainObject(pnpm)) throw new Error('pnpm policy must be false or an object')\n    const age = pnpm.minimumReleaseAge\n    if (age !== undefined && (typeof age !== 'number' || !Number.isInteger(age) || age < 0)) {\n      throw new Error('pnpm.minimumReleaseAge must be a non-negative integer')\n    }\n  }\n  const adoption = value.adoption\n  if (adoption !== undefined && adoption !== false) {\n    if (!plainObject(adoption)) throw new Error('adoption policy must be false or an object')\n    for (const key of ['minimumRasStackVersion', 'minimumWorkflowRasStackVersion', 'node', 'pnpm', 'just']) {\n      if (adoption[key] !== undefined && typeof adoption[key] !== 'string') throw new Error(`adoption.${key} must be a string`)\n    }\n    if (adoption.requiredReferences !== undefined && !stringArray(adoption.requiredReferences)) {\n      throw new Error('adoption.requiredReferences must be an array of strings')\n    }\n  }\n  return value\n}\n\nfunction dependencyVersion(manifest: Record<string, unknown>, name: string) {\n  for (const field of ['dependencies', 'devDependencies']) {\n    const dependencies = manifest[field]\n    const value = plainObject(dependencies) ? dependencies[name] : undefined\n    if (typeof value === 'string') return /\\d+\\.\\d+\\.\\d+/.exec(value)?.[0]\n  }\n  return undefined\n}\n\nfunction compareVersions(left: string, right: string) {\n  const a = left.split('.').map(Number)\n  const b = right.split('.').map(Number)\n  for (let index = 0; index < 3; index += 1) {\n    if (a[index] !== b[index]) return (a[index] ?? 0) - (b[index] ?? 0)\n  }\n  return 0\n}\n\nasync function textFiles(directory: string, root = directory): Promise<Map<string, string>> {\n  const files = new Map<string, string>()\n  const entries = await readdir(directory, { withFileTypes: true }).catch(() => [])\n  const results = await Promise.all(\n    entries.map(async (entry) => {\n      const path = join(directory, entry.name)\n      if (entry.isDirectory()) return textFiles(path, root)\n      if (/\\.ya?ml$/.test(entry.name)) return new Map([[path.slice(root.length + 1), await readFile(path, 'utf8')]])\n      return new Map<string, string>()\n    }),\n  )\n  for (const result of results) {\n    for (const [path, source] of result) files.set(path, source)\n  }\n  return files\n}\n\nasync function adoptionFiles(root: string) {\n  const files = await textFiles(join(root, '.github'), root)\n  const entries = await readdir(root, { withFileTypes: true })\n  await Promise.all(\n    entries.map(async (entry) => {\n      if (!entry.isFile() || !/^(?:ras-stack\\.policy|oxlint|tsconfig(?:\\.[^.]+)*)\\.json$/.test(entry.name)) return\n      files.set(entry.name, await readFile(join(root, entry.name), 'utf8'))\n    }),\n  )\n  return files\n}\n\nasync function renderedAdoptionFiles(root: string, policy: AdoptionPolicy) {\n  const files = new Map<string, string>()\n  const manifestPath = join(root, 'package.json')\n  const manifestSource = await readFile(manifestPath, 'utf8')\n  const manifest = JSON.parse(manifestSource) as Record<string, unknown>\n  if (policy.node) {\n    const engines = plainObject(manifest.engines) ? manifest.engines : {}\n    manifest.engines = { ...engines, node: policy.node }\n  }\n  if (policy.pnpm) manifest.packageManager = `pnpm@${policy.pnpm}`\n  if (policy.minimumRasStackVersion) {\n    for (const field of ['dependencies', 'devDependencies']) {\n      const dependencies = manifest[field]\n      if (!plainObject(dependencies) || typeof dependencies['ras-stack'] !== 'string') continue\n      dependencies['ras-stack'] = versionAtLeast(dependencies['ras-stack'], policy.minimumRasStackVersion)\n    }\n  }\n  const renderedManifest = `${JSON.stringify(manifest, null, 2)}\\n`\n  if (renderedManifest !== manifestSource) files.set('package.json', renderedManifest)\n\n  const workflowVersion = policy.minimumWorkflowRasStackVersion ?? policy.minimumRasStackVersion\n  const workflows = await textFiles(join(root, '.github'), root)\n  for (const [path, source] of workflows) {\n    let rendered = source\n    if (workflowVersion) {\n      rendered = rendered.replace(/(richardsolomou\\/ras-stack\\/[^\\s'\"}]+@v)(\\d+\\.\\d+\\.\\d+)/g, (reference, prefix, current) =>\n        compareVersions(current, workflowVersion) < 0 ? `${prefix}${workflowVersion}` : reference,\n      )\n    }\n    if (policy.just) {\n      rendered = rendered.replace(/(just-version:\\s*)(['\"]?)\\d+\\.\\d+\\.\\d+\\2/g, `$1$2${policy.just}$2`)\n      rendered = rendered.replace(\n        /(richardsolomou\\/ras-stack\\/actions\\/setup-just@[^\\n]+\\n(?:(?!\\n\\s*-\\s+uses:)[\\s\\S]){0,300}?\\n\\s+version:\\s*)(['\"]?)\\d+\\.\\d+\\.\\d+\\2/g,\n        `$1$2${policy.just}$2`,\n      )\n    }\n    if (rendered !== source) files.set(path, rendered)\n  }\n  return files\n}\n\nfunction versionAtLeast(current: string, version: string) {\n  const match = /^(\\s*(?:\\^|~|>=|>|<=|<|=)?\\s*)\\d+\\.\\d+\\.\\d+(.*)$/.exec(current)\n  const currentVersion = /\\d+\\.\\d+\\.\\d+/.exec(current)?.[0]\n  if (currentVersion && compareVersions(currentVersion, version) >= 0) return current\n  return match ? `${match[1]}${version}${match[2]}` : version\n}\n\nfunction validateSelection(name: string, value: unknown) {\n  if (value === undefined || typeof value === 'boolean') return\n  if (!plainObject(value) || (value.overrides !== undefined && !plainObject(value.overrides))) {\n    throw new Error(`${name} policy must be a boolean or an object with overrides`)\n  }\n}\n\nfunction selectedPolicy(base: Record<string, unknown>, selection: Exclude<PolicySelection, false>) {\n  return selection === true ? base : deepMerge(base, selection.overrides ?? {})\n}\n\nfunction deepMerge(base: Record<string, unknown>, overrides: Record<string, unknown>): Record<string, unknown> {\n  return Object.fromEntries(\n    [...new Set([...Object.keys(base), ...Object.keys(overrides)])].map((key) => {\n      const left = base[key]\n      const right = overrides[key]\n      return [key, plainObject(left) && plainObject(right) ? deepMerge(left, right) : right === undefined ? left : right]\n    }),\n  )\n}\n\nfunction plainObject(value: unknown): value is Record<string, unknown> {\n  return typeof value === 'object' && value !== null && !Array.isArray(value)\n}\n\nfunction stringArray(value: unknown): value is string[] {\n  return Array.isArray(value) && value.every((item) => typeof item === 'string')\n}\n"]}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "ras-stack",
-  "version": "0.21.0",
+  "version": "0.23.0",
   "description": "Composable full-stack primitives shared across Richard Solomou's applications.",
   "keywords": [
     "authentication",