repopo 0.9.0 → 0.12.0

package/esm/policies/ConditionalScripts.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ConditionalScripts.js","sourceRoot":"","sources":["../../src/policies/ConditionalScripts.ts"],"names":[],"mappings":"AAAA,OAAO,QAAQ,MAAM,UAAU,CAAC;AAChC,OAAO,EAAE,OAAO,IAAI,WAAW,EAAE,MAAM,OAAO,CAAC;AAE/C,OAAO,EAAE,mBAAmB,EAAE,MAAM,0CAA0C,CAAC;AAyE/E,MAAM,WAAW,GAAG,oBAAoB,CAAC;AAOzC;;GAEG;AACH,SAAS,UAAU,CAAC,KAA6B;IAChD,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC/B,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC;IACxB,CAAC;IACD,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAChC,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACvB,MAAM,IAAI,KAAK,CACd,yEAAyE,IAAI,CAAC,MAAM,OAAO,CAC3F,CAAC;IACH,CAAC;IACD,sEAAsE;IACtE,MAAM,IAAI,GAAG,IAAI,CAAC,CAAC,CAAE,CAAC;IACtB,MAAM,YAAY,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC;IACjC,OAAO,YAAY,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC;AACvE,CAAC;AAYD,SAAS,wBAAwB,CAChC,OAA2C,EAC3C,KAA8B;IAE9B,MAAM,UAAU,GAAoB,EAAE,CAAC;IACvC,MAAM,mBAAmB,GAAkD,EAAE,CAAC;IAC9E,MAAM,WAAW,GAAG,IAAI,GAAG,EAAU,CAAC;IAEtC,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QAC1B,8CAA8C;QAC9C,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,OAAO,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC;YAC7C,SAAS;QACV,CAAC;QAED,MAAM,cAAc,GAAa,EAAE,CAAC;QACpC,KAAK,MAAM,KAAK,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;YACnC,MAAM,EAAE,IAAI,EAAE,YAAY,EAAE,GAAG,UAAU,CAAC,KAAK,CAAC,CAAC;YACjD,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,OAAO,EAAE,IAAI,CAAC,EAAE,CAAC;gBACnC,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;gBAC1B,IAAI,YAAY,KAAK,SAAS,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;oBAC1D,mBAAmB,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,YAAY,EAAE,CAAC,CAAC;oBACjD,WAAW,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;gBACvB,CAAC;YACF,CAAC;QACF,CAAC;QAED,IAAI,cAAc,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC/B,UAAU,CAAC,IAAI,CAAC;gBACf,aAAa,EAAE,IAAI,CAAC,SAAS;gBAC7B,cAAc;aACd,CAAC,CAAC;QACJ,CAAC;IACF,CAAC;IAED,OAAO,EAAE,UAAU,EAAE,mBAAmB,EAAE,CAAC;AAC5C,CAAC;AAED,SAAS,qBAAqB,CAAC,UAA2B;IACzD,OAAO,UAAU,CAAC,GAAG,CACpB,CAAC,CAAC,EAAE,EAAE,CACL,WAAW,CAAC,CAAC,aAAa,2DAA2D,CAAC,CAAC,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CACnH,CAAC;AACH,CAAC;AAED,KAAK,UAAU,iBAAiB,CAC/B,IAAiB,EACjB,IAAY,EACZ,mBAAkE,EAClE,eAAmD;IAEnD,MAAM,cAAc,GAA2B,EAAE,CAAC;IAElD,wBAAwB;IACxB,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,eAAe,CAAC,EAAE,CAAC;QAC5D,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;YACzB,cAAc,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;QAC7B,CAAC;IACF,CAAC;IAED,oCAAoC;IACpC,MAAM,YAAY,GAAa,EAAE,CAAC;IAClC,KAAK,MAAM,EAAE,IAAI,EAAE,YAAY,EAAE,IAAI,mBAAmB,EAAE,CAAC;QAC1D,cAAc,CAAC,IAAI,CAAC,GAAG,YAAY,CAAC;QACpC,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACzB,CAAC;IAED,MAAM,QAAQ,CAAC,SAAS,CACvB,IAAI,EACJ,EAAE,GAAG,IAAI,EAAE,OAAO,EAAE,cAAc,EAAE,EACpC,EAAE,MAAM,EAAE,CAAC,EAAE,CACb,CAAC;IAEF,OAAO,YAAY,CAAC;AACrB,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AACH,MAAM,CAAC,MAAM,kBAAkB,GAAG,mBAAmB,CAGnD;IACD,IAAI,EAAE,WAAW;IACjB,WAAW,EACV,kFAAkF;IACnF,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,EAAE,EAAE;QACxD,IAAI,MAAM,KAAK,SAAS,IAAI,MAAM,CAAC,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACvD,OAAO,IAAI,CAAC;QACb,CAAC;QAED,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,IAAI,EAAE,CAAC;QACnC,MAAM,UAAU,GAAG,wBAAwB,CAAC,OAAO,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC;QAEnE,IAAI,UAAU,CAAC,UAAU,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACxC,OAAO,IAAI,CAAC;QACb,CAAC;QAED,MAAM,MAAM,GAAG,qBAAqB,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC;QAC5D,MAAM,oBAAoB,GAAG,UAAU,CAAC,mBAAmB,CAAC,MAAM,GAAG,CAAC,CAAC;QAEvE,IAAI,OAAO,IAAI,oBAAoB,EAAE,CAAC;YACrC,IAAI,CAAC;gBACJ,MAAM,YAAY,GAAG,MAAM,iBAAiB,CAC3C,IAAI,EACJ,WAAW,CAAC,IAAI,EAAE,IAAI,CAAC,EACvB,UAAU,CAAC,mBAAmB,EAC9B,OAAO,CACP,CAAC;gBAEF,sDAAsD;gBACtD,MAAM,cAAc,GAAG,EAAE,GAAG,OAAO,EAAE,CAAC;gBACtC,KAAK,MAAM,IAAI,IAAI,YAAY,EAAE,CAAC;oBACjC,MAAM,KAAK,GAAG,UAAU,CAAC,mBAAmB,CAAC,IAAI,CAChD,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,IAAI,CACtB,CAAC;oBACF,IAAI,KAAK,EAAE,CAAC;wBACX,cAAc,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC,YAAY,CAAC;oBAC3C,CAAC;gBACF,CAAC;gBAED,MAAM,YAAY,GAAG,wBAAwB,CAC5C,cAAc,EACd,MAAM,CAAC,KAAK,CACZ,CAAC;gBACF,MAAM,eAAe,GAAG,qBAAqB,CAAC,YAAY,CAAC,UAAU,CAAC,CAAC;gBAEvE,OAAO;oBACN,IAAI,EAAE,WAAW;oBACjB,IAAI;oBACJ,QAAQ,EAAE,eAAe,CAAC,MAAM,KAAK,CAAC;oBACtC,aAAa,EACZ,eAAe,CAAC,MAAM,GAAG,CAAC;wBACzB,CAAC,CAAC;4BACA,kBAAkB,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,wBAAwB,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;yBAC7F;wBACF,CAAC,CAAC,CAAC,kBAAkB,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;iBACjD,CAAC;YACH,CAAC;YAAC,MAAM,CAAC;gBACR,yCAAyC;YAC1C,CAAC;QACF,CAAC;QAED,OAAO;YACN,IAAI,EAAE,WAAW;YACjB,IAAI;YACJ,WAAW,EAAE,oBAAoB;YACjC,aAAa,EAAE,MAAM;SACrB,CAAC;IACH,CAAC;CACD,CAAC,CAAC","sourcesContent":["import jsonfile from \"jsonfile\";\nimport { resolve as resolvePath } from \"pathe\";\nimport type { PackageJson } from \"type-fest\";\nimport { definePackagePolicy } from \"../policyDefiners/definePackagePolicy.js\";\n\n/**\n * A required script entry for conditional requirements. Can be either:\n * - A string (script name only, no default value)\n * - An object with a single key-value pair (script name → default value for auto-fix)\n *\n * @example\n * ```typescript\n * // Script must exist, no auto-fix available\n * \"test\"\n *\n * // Script must exist, auto-fix will add this value if missing\n * { clean: \"rimraf dist\" }\n * ```\n *\n * @alpha\n */\nexport type ConditionalScriptEntry = string | Record<string, string>;\n\n/**\n * Configuration for a conditional script requirement.\n *\n * @alpha\n */\nexport interface ConditionalScriptRule {\n\t/**\n\t * The script that triggers the requirement.\n\t * If this script exists, then `requires` must also exist.\n\t */\n\tifPresent: string;\n\n\t/**\n\t * Scripts that must be present if `ifPresent` script exists.\n\t *\n\t * @remarks\n\t * Each entry can be:\n\t * - A string: Script must exist, no auto-fix available\n\t * - An object `{ scriptName: \"default value\" }`: Script must exist, auto-fix adds the\n\t *   default value if missing\n\t *\n\t * @example\n\t * ```typescript\n\t * requires: [\"test\", { clean: \"rimraf dist\" }]\n\t * ```\n\t */\n\trequires: ConditionalScriptEntry[];\n}\n\n/**\n * Configuration for the ConditionalScripts policy.\n *\n * @alpha\n */\nexport interface ConditionalScriptsConfig {\n\t/**\n\t * Conditional script requirements. If a script is present, other scripts must also exist.\n\t *\n\t * @remarks\n\t * This is useful for enforcing that packages with a \"build\" script also have a \"clean\" script,\n\t * or packages with \"test\" also have \"test:coverage\".\n\t *\n\t * @example\n\t * ```typescript\n\t * rules: [\n\t *   { ifPresent: \"build\", requires: [{ clean: \"rimraf dist\" }] },\n\t *   { ifPresent: \"test\", requires: [\"test:coverage\"] },\n\t * ]\n\t * ```\n\t */\n\trules: ConditionalScriptRule[];\n}\n\nconst POLICY_NAME = \"ConditionalScripts\";\n\ninterface ParsedEntry {\n\tname: string;\n\tdefaultValue?: string;\n}\n\n/**\n * Extracts script name and optional default value from a ConditionalScriptEntry.\n */\nfunction parseEntry(entry: ConditionalScriptEntry): ParsedEntry {\n\tif (typeof entry === \"string\") {\n\t\treturn { name: entry };\n\t}\n\tconst keys = Object.keys(entry);\n\tif (keys.length !== 1) {\n\t\tthrow new Error(\n\t\t\t`Invalid conditional script entry: expected single key-value pair, got ${keys.length} keys`,\n\t\t);\n\t}\n\t// biome-ignore lint/style/noNonNullAssertion: we verified length is 1\n\tconst name = keys[0]!;\n\tconst defaultValue = entry[name];\n\treturn defaultValue !== undefined ? { name, defaultValue } : { name };\n}\n\ninterface RuleViolation {\n\ttriggerScript: string;\n\tmissingScripts: string[];\n}\n\ninterface ValidationResult {\n\tviolations: RuleViolation[];\n\tmissingWithDefaults: Array<{ name: string; defaultValue: string }>;\n}\n\nfunction validateConditionalRules(\n\tscripts: Record<string, string | undefined>,\n\trules: ConditionalScriptRule[],\n): ValidationResult {\n\tconst violations: RuleViolation[] = [];\n\tconst missingWithDefaults: Array<{ name: string; defaultValue: string }> = [];\n\tconst seenMissing = new Set<string>();\n\n\tfor (const rule of rules) {\n\t\t// Skip if the triggering script doesn't exist\n\t\tif (!Object.hasOwn(scripts, rule.ifPresent)) {\n\t\t\tcontinue;\n\t\t}\n\n\t\tconst missingScripts: string[] = [];\n\t\tfor (const entry of rule.requires) {\n\t\t\tconst { name, defaultValue } = parseEntry(entry);\n\t\t\tif (!Object.hasOwn(scripts, name)) {\n\t\t\t\tmissingScripts.push(name);\n\t\t\t\tif (defaultValue !== undefined && !seenMissing.has(name)) {\n\t\t\t\t\tmissingWithDefaults.push({ name, defaultValue });\n\t\t\t\t\tseenMissing.add(name);\n\t\t\t\t}\n\t\t\t}\n\t\t}\n\n\t\tif (missingScripts.length > 0) {\n\t\t\tviolations.push({\n\t\t\t\ttriggerScript: rule.ifPresent,\n\t\t\t\tmissingScripts,\n\t\t\t});\n\t\t}\n\t}\n\n\treturn { violations, missingWithDefaults };\n}\n\nfunction formatViolationErrors(violations: RuleViolation[]): string[] {\n\treturn violations.map(\n\t\t(v) =>\n\t\t\t`Script \"${v.triggerScript}\" is present, but required companion script(s) missing: ${v.missingScripts.join(\", \")}`,\n\t);\n}\n\nasync function fixMissingScripts(\n\tjson: PackageJson,\n\tfile: string,\n\tmissingWithDefaults: Array<{ name: string; defaultValue: string }>,\n\texistingScripts: Record<string, string | undefined>,\n): Promise<string[]> {\n\tconst updatedScripts: Record<string, string> = {};\n\n\t// Copy existing scripts\n\tfor (const [key, value] of Object.entries(existingScripts)) {\n\t\tif (value !== undefined) {\n\t\t\tupdatedScripts[key] = value;\n\t\t}\n\t}\n\n\t// Add missing scripts with defaults\n\tconst fixedScripts: string[] = [];\n\tfor (const { name, defaultValue } of missingWithDefaults) {\n\t\tupdatedScripts[name] = defaultValue;\n\t\tfixedScripts.push(name);\n\t}\n\n\tawait jsonfile.writeFile(\n\t\tfile,\n\t\t{ ...json, scripts: updatedScripts },\n\t\t{ spaces: 2 },\n\t);\n\n\treturn fixedScripts;\n}\n\n/**\n * A policy that validates conditional script requirements in package.json.\n *\n * @remarks\n * Use this policy when you want to enforce that the presence of one script\n * requires other scripts to also exist. For example, if \"build\" exists,\n * then \"clean\" must also exist.\n *\n * @example\n * ```typescript\n * import { policy } from \"repopo\";\n * import { ConditionalScripts } from \"repopo/policies\";\n *\n * policy(ConditionalScripts, {\n *   rules: [\n *     // If \"build\" exists, \"clean\" must also exist (with auto-fix default)\n *     { ifPresent: \"build\", requires: [{ clean: \"rimraf dist\" }] },\n *     // If \"test\" exists, \"test:coverage\" must also exist (no auto-fix)\n *     { ifPresent: \"test\", requires: [\"test:coverage\"] },\n *   ],\n * })\n * ```\n *\n * @alpha\n */\nexport const ConditionalScripts = definePackagePolicy<\n\tPackageJson,\n\tConditionalScriptsConfig | undefined\n>({\n\tname: POLICY_NAME,\n\tdescription:\n\t\t\"Validates that if certain scripts exist, other required scripts must also exist.\",\n\thandler: async (json, { file, root, resolve, config }) => {\n\t\tif (config === undefined || config.rules.length === 0) {\n\t\t\treturn true;\n\t\t}\n\n\t\tconst scripts = json.scripts ?? {};\n\t\tconst validation = validateConditionalRules(scripts, config.rules);\n\n\t\tif (validation.violations.length === 0) {\n\t\t\treturn true;\n\t\t}\n\n\t\tconst errors = formatViolationErrors(validation.violations);\n\t\tconst hasAutoFixableErrors = validation.missingWithDefaults.length > 0;\n\n\t\tif (resolve && hasAutoFixableErrors) {\n\t\t\ttry {\n\t\t\t\tconst fixedScripts = await fixMissingScripts(\n\t\t\t\t\tjson,\n\t\t\t\t\tresolvePath(root, file),\n\t\t\t\t\tvalidation.missingWithDefaults,\n\t\t\t\t\tscripts,\n\t\t\t\t);\n\n\t\t\t\t// Re-validate after fix to check for remaining errors\n\t\t\t\tconst updatedScripts = { ...scripts };\n\t\t\t\tfor (const name of fixedScripts) {\n\t\t\t\t\tconst entry = validation.missingWithDefaults.find(\n\t\t\t\t\t\t(m) => m.name === name,\n\t\t\t\t\t);\n\t\t\t\t\tif (entry) {\n\t\t\t\t\t\tupdatedScripts[name] = entry.defaultValue;\n\t\t\t\t\t}\n\t\t\t\t}\n\n\t\t\t\tconst revalidation = validateConditionalRules(\n\t\t\t\t\tupdatedScripts,\n\t\t\t\t\tconfig.rules,\n\t\t\t\t);\n\t\t\t\tconst remainingErrors = formatViolationErrors(revalidation.violations);\n\n\t\t\t\treturn {\n\t\t\t\t\tname: POLICY_NAME,\n\t\t\t\t\tfile,\n\t\t\t\t\tresolved: remainingErrors.length === 0,\n\t\t\t\t\terrorMessages:\n\t\t\t\t\t\tremainingErrors.length > 0\n\t\t\t\t\t\t\t? [\n\t\t\t\t\t\t\t\t\t`Fixed scripts: ${fixedScripts.join(\", \")}. Remaining errors:\\n${remainingErrors.join(\"\\n\")}`,\n\t\t\t\t\t\t\t\t]\n\t\t\t\t\t\t\t: [`Fixed scripts: ${fixedScripts.join(\", \")}`],\n\t\t\t\t};\n\t\t\t} catch {\n\t\t\t\t// Fall through to return regular failure\n\t\t\t}\n\t\t}\n\n\t\treturn {\n\t\t\tname: POLICY_NAME,\n\t\t\tfile,\n\t\t\tautoFixable: hasAutoFixableErrors,\n\t\t\terrorMessages: errors,\n\t\t};\n\t},\n});\n"]}

package/esm/policies/ExactScripts.d.ts

@@ -0,0 +1,51 @@
+/**
+ * Configuration for the ExactScripts policy.
+ *
+ * @alpha
+ */
+export interface ExactScriptsConfig {
+    /**
+     * Scripts that must exist AND have exact content.
+     *
+     * @remarks
+     * Unlike RequiredScripts, scripts in `exact` are validated against
+     * the specified value. If a script exists but has different content, it fails validation.
+     * Both missing and mismatched scripts are auto-fixable.
+     *
+     * @example
+     * ```typescript
+     * scripts: {
+     *   clean: "rimraf dist esm",
+     *   format: "biome format --write .",
+     * }
+     * ```
+     */
+    scripts: Record<string, string>;
+}
+/**
+ * A policy that validates scripts exist AND have exact content in package.json.
+ *
+ * @remarks
+ * Use this policy when you want to enforce exact script content, not just presence.
+ * This is useful for scripts that must be exactly the same across packages.
+ *
+ * For scripts where you only care about presence (not content), use RequiredScripts instead.
+ *
+ * @example
+ * ```typescript
+ * import { policy } from "repopo";
+ * import { ExactScripts } from "repopo/policies";
+ *
+ * policy(ExactScripts, {
+ *   scripts: {
+ *     clean: "rimraf dist esm",
+ *     format: "biome format --write .",
+ *     lint: "biome lint .",
+ *   },
+ * })
+ * ```
+ *
+ * @alpha
+ */
+export declare const ExactScripts: import("../policy.js").PolicyShape<ExactScriptsConfig | undefined>;
+//# sourceMappingURL=ExactScripts.d.ts.map

package/esm/policies/ExactScripts.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ExactScripts.d.ts","sourceRoot":"","sources":["../../src/policies/ExactScripts.ts"],"names":[],"mappings":"AAKA;;;;GAIG;AACH,MAAM,WAAW,kBAAkB;IAClC;;;;;;;;;;;;;;;OAeG;IACH,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CAChC;AAuED;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AACH,eAAO,MAAM,YAAY,oEAqDvB,CAAC"}

package/esm/policies/ExactScripts.js

@@ -0,0 +1,108 @@
+import jsonfile from "jsonfile";
+import { resolve as resolvePath } from "pathe";
+import { definePackagePolicy } from "../policyDefiners/definePackagePolicy.js";
+const POLICY_NAME = "ExactScripts";
+function validateScripts(scripts, expectedScripts) {
+    const errors = [];
+    const missingScripts = [];
+    const mismatchedScripts = [];
+    for (const [scriptName, expectedValue] of Object.entries(expectedScripts)) {
+        if (Object.hasOwn(scripts, scriptName)) {
+            const actualValue = scripts[scriptName];
+            if (actualValue !== expectedValue) {
+                mismatchedScripts.push(scriptName);
+                errors.push(`Script "${scriptName}" must be "${expectedValue}", but found "${actualValue}"`);
+            }
+        }
+        else {
+            missingScripts.push(scriptName);
+            errors.push(`Missing required script: ${scriptName}`);
+        }
+    }
+    return { errors, missingScripts, mismatchedScripts };
+}
+async function fixScripts(json, file, scriptsToFix, expectedScripts, existingScripts) {
+    const updatedScripts = {};
+    // Copy existing scripts
+    for (const [key, value] of Object.entries(existingScripts)) {
+        if (value !== undefined) {
+            updatedScripts[key] = value;
+        }
+    }
+    // Add/update scripts
+    const fixedScripts = [];
+    for (const scriptName of scriptsToFix) {
+        const expectedValue = expectedScripts[scriptName];
+        if (expectedValue !== undefined) {
+            updatedScripts[scriptName] = expectedValue;
+            fixedScripts.push(scriptName);
+        }
+    }
+    await jsonfile.writeFile(file, { ...json, scripts: updatedScripts }, { spaces: 2 });
+    return fixedScripts;
+}
+/**
+ * A policy that validates scripts exist AND have exact content in package.json.
+ *
+ * @remarks
+ * Use this policy when you want to enforce exact script content, not just presence.
+ * This is useful for scripts that must be exactly the same across packages.
+ *
+ * For scripts where you only care about presence (not content), use RequiredScripts instead.
+ *
+ * @example
+ * ```typescript
+ * import { policy } from "repopo";
+ * import { ExactScripts } from "repopo/policies";
+ *
+ * policy(ExactScripts, {
+ *   scripts: {
+ *     clean: "rimraf dist esm",
+ *     format: "biome format --write .",
+ *     lint: "biome lint .",
+ *   },
+ * })
+ * ```
+ *
+ * @alpha
+ */
+export const ExactScripts = definePackagePolicy({
+    name: POLICY_NAME,
+    description: "Validates that scripts exist and have exact content in package.json.",
+    handler: async (json, { file, root, resolve, config }) => {
+        if (config === undefined || Object.keys(config.scripts).length === 0) {
+            return true;
+        }
+        const scripts = json.scripts ?? {};
+        const validation = validateScripts(scripts, config.scripts);
+        if (validation.errors.length === 0) {
+            return true;
+        }
+        const scriptsToFix = [
+            ...validation.missingScripts,
+            ...validation.mismatchedScripts,
+        ];
+        const hasAutoFixableErrors = scriptsToFix.length > 0;
+        if (resolve && hasAutoFixableErrors) {
+            try {
+                const fixedScripts = await fixScripts(json, resolvePath(root, file), scriptsToFix, config.scripts, scripts);
+                return {
+                    name: POLICY_NAME,
+                    file,
+                    resolved: true,
+                    errorMessages: [`Fixed scripts: ${fixedScripts.join(", ")}`],
+                };
+            }
+            catch {
+                // Fall through to return regular failure
+            }
+        }
+        return {
+            name: POLICY_NAME,
+            file,
+            autoFixable: hasAutoFixableErrors,
+            errorMessages: validation.errors,
+        };
+    },
+});
+//# sourceMappingURL=ExactScripts.js.map

package/esm/policies/ExactScripts.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ExactScripts.js","sourceRoot":"","sources":["../../src/policies/ExactScripts.ts"],"names":[],"mappings":"AAAA,OAAO,QAAQ,MAAM,UAAU,CAAC;AAChC,OAAO,EAAE,OAAO,IAAI,WAAW,EAAE,MAAM,OAAO,CAAC;AAE/C,OAAO,EAAE,mBAAmB,EAAE,MAAM,0CAA0C,CAAC;AA2B/E,MAAM,WAAW,GAAG,cAAc,CAAC;AAQnC,SAAS,eAAe,CACvB,OAA2C,EAC3C,eAAuC;IAEvC,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,MAAM,cAAc,GAAa,EAAE,CAAC;IACpC,MAAM,iBAAiB,GAAa,EAAE,CAAC;IAEvC,KAAK,MAAM,CAAC,UAAU,EAAE,aAAa,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,eAAe,CAAC,EAAE,CAAC;QAC3E,IAAI,MAAM,CAAC,MAAM,CAAC,OAAO,EAAE,UAAU,CAAC,EAAE,CAAC;YACxC,MAAM,WAAW,GAAG,OAAO,CAAC,UAAU,CAAC,CAAC;YACxC,IAAI,WAAW,KAAK,aAAa,EAAE,CAAC;gBACnC,iBAAiB,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;gBACnC,MAAM,CAAC,IAAI,CACV,WAAW,UAAU,cAAc,aAAa,iBAAiB,WAAW,GAAG,CAC/E,CAAC;YACH,CAAC;QACF,CAAC;aAAM,CAAC;YACP,cAAc,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;YAChC,MAAM,CAAC,IAAI,CAAC,4BAA4B,UAAU,EAAE,CAAC,CAAC;QACvD,CAAC;IACF,CAAC;IAED,OAAO,EAAE,MAAM,EAAE,cAAc,EAAE,iBAAiB,EAAE,CAAC;AACtD,CAAC;AAED,KAAK,UAAU,UAAU,CACxB,IAAiB,EACjB,IAAY,EACZ,YAAsB,EACtB,eAAuC,EACvC,eAAmD;IAEnD,MAAM,cAAc,GAA2B,EAAE,CAAC;IAElD,wBAAwB;IACxB,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,eAAe,CAAC,EAAE,CAAC;QAC5D,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;YACzB,cAAc,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;QAC7B,CAAC;IACF,CAAC;IAED,qBAAqB;IACrB,MAAM,YAAY,GAAa,EAAE,CAAC;IAClC,KAAK,MAAM,UAAU,IAAI,YAAY,EAAE,CAAC;QACvC,MAAM,aAAa,GAAG,eAAe,CAAC,UAAU,CAAC,CAAC;QAClD,IAAI,aAAa,KAAK,SAAS,EAAE,CAAC;YACjC,cAAc,CAAC,UAAU,CAAC,GAAG,aAAa,CAAC;YAC3C,YAAY,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QAC/B,CAAC;IACF,CAAC;IAED,MAAM,QAAQ,CAAC,SAAS,CACvB,IAAI,EACJ,EAAE,GAAG,IAAI,EAAE,OAAO,EAAE,cAAc,EAAE,EACpC,EAAE,MAAM,EAAE,CAAC,EAAE,CACb,CAAC;IAEF,OAAO,YAAY,CAAC;AACrB,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AACH,MAAM,CAAC,MAAM,YAAY,GAAG,mBAAmB,CAG7C;IACD,IAAI,EAAE,WAAW;IACjB,WAAW,EACV,sEAAsE;IACvE,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,EAAE,EAAE;QACxD,IAAI,MAAM,KAAK,SAAS,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACtE,OAAO,IAAI,CAAC;QACb,CAAC;QAED,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,IAAI,EAAE,CAAC;QACnC,MAAM,UAAU,GAAG,eAAe,CAAC,OAAO,EAAE,MAAM,CAAC,OAAO,CAAC,CAAC;QAE5D,IAAI,UAAU,CAAC,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACpC,OAAO,IAAI,CAAC;QACb,CAAC;QAED,MAAM,YAAY,GAAG;YACpB,GAAG,UAAU,CAAC,cAAc;YAC5B,GAAG,UAAU,CAAC,iBAAiB;SAC/B,CAAC;QACF,MAAM,oBAAoB,GAAG,YAAY,CAAC,MAAM,GAAG,CAAC,CAAC;QAErD,IAAI,OAAO,IAAI,oBAAoB,EAAE,CAAC;YACrC,IAAI,CAAC;gBACJ,MAAM,YAAY,GAAG,MAAM,UAAU,CACpC,IAAI,EACJ,WAAW,CAAC,IAAI,EAAE,IAAI,CAAC,EACvB,YAAY,EACZ,MAAM,CAAC,OAAO,EACd,OAAO,CACP,CAAC;gBAEF,OAAO;oBACN,IAAI,EAAE,WAAW;oBACjB,IAAI;oBACJ,QAAQ,EAAE,IAAI;oBACd,aAAa,EAAE,CAAC,kBAAkB,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;iBAC5D,CAAC;YACH,CAAC;YAAC,MAAM,CAAC;gBACR,yCAAyC;YAC1C,CAAC;QACF,CAAC;QAED,OAAO;YACN,IAAI,EAAE,WAAW;YACjB,IAAI;YACJ,WAAW,EAAE,oBAAoB;YACjC,aAAa,EAAE,UAAU,CAAC,MAAM;SAChC,CAAC;IACH,CAAC;CACD,CAAC,CAAC","sourcesContent":["import jsonfile from \"jsonfile\";\nimport { resolve as resolvePath } from \"pathe\";\nimport type { PackageJson } from \"type-fest\";\nimport { definePackagePolicy } from \"../policyDefiners/definePackagePolicy.js\";\n\n/**\n * Configuration for the ExactScripts policy.\n *\n * @alpha\n */\nexport interface ExactScriptsConfig {\n\t/**\n\t * Scripts that must exist AND have exact content.\n\t *\n\t * @remarks\n\t * Unlike RequiredScripts, scripts in `exact` are validated against\n\t * the specified value. If a script exists but has different content, it fails validation.\n\t * Both missing and mismatched scripts are auto-fixable.\n\t *\n\t * @example\n\t * ```typescript\n\t * scripts: {\n\t *   clean: \"rimraf dist esm\",\n\t *   format: \"biome format --write .\",\n\t * }\n\t * ```\n\t */\n\tscripts: Record<string, string>;\n}\n\nconst POLICY_NAME = \"ExactScripts\";\n\ninterface ValidationResult {\n\terrors: string[];\n\tmissingScripts: string[];\n\tmismatchedScripts: string[];\n}\n\nfunction validateScripts(\n\tscripts: Record<string, string | undefined>,\n\texpectedScripts: Record<string, string>,\n): ValidationResult {\n\tconst errors: string[] = [];\n\tconst missingScripts: string[] = [];\n\tconst mismatchedScripts: string[] = [];\n\n\tfor (const [scriptName, expectedValue] of Object.entries(expectedScripts)) {\n\t\tif (Object.hasOwn(scripts, scriptName)) {\n\t\t\tconst actualValue = scripts[scriptName];\n\t\t\tif (actualValue !== expectedValue) {\n\t\t\t\tmismatchedScripts.push(scriptName);\n\t\t\t\terrors.push(\n\t\t\t\t\t`Script \"${scriptName}\" must be \"${expectedValue}\", but found \"${actualValue}\"`,\n\t\t\t\t);\n\t\t\t}\n\t\t} else {\n\t\t\tmissingScripts.push(scriptName);\n\t\t\terrors.push(`Missing required script: ${scriptName}`);\n\t\t}\n\t}\n\n\treturn { errors, missingScripts, mismatchedScripts };\n}\n\nasync function fixScripts(\n\tjson: PackageJson,\n\tfile: string,\n\tscriptsToFix: string[],\n\texpectedScripts: Record<string, string>,\n\texistingScripts: Record<string, string | undefined>,\n): Promise<string[]> {\n\tconst updatedScripts: Record<string, string> = {};\n\n\t// Copy existing scripts\n\tfor (const [key, value] of Object.entries(existingScripts)) {\n\t\tif (value !== undefined) {\n\t\t\tupdatedScripts[key] = value;\n\t\t}\n\t}\n\n\t// Add/update scripts\n\tconst fixedScripts: string[] = [];\n\tfor (const scriptName of scriptsToFix) {\n\t\tconst expectedValue = expectedScripts[scriptName];\n\t\tif (expectedValue !== undefined) {\n\t\t\tupdatedScripts[scriptName] = expectedValue;\n\t\t\tfixedScripts.push(scriptName);\n\t\t}\n\t}\n\n\tawait jsonfile.writeFile(\n\t\tfile,\n\t\t{ ...json, scripts: updatedScripts },\n\t\t{ spaces: 2 },\n\t);\n\n\treturn fixedScripts;\n}\n\n/**\n * A policy that validates scripts exist AND have exact content in package.json.\n *\n * @remarks\n * Use this policy when you want to enforce exact script content, not just presence.\n * This is useful for scripts that must be exactly the same across packages.\n *\n * For scripts where you only care about presence (not content), use RequiredScripts instead.\n *\n * @example\n * ```typescript\n * import { policy } from \"repopo\";\n * import { ExactScripts } from \"repopo/policies\";\n *\n * policy(ExactScripts, {\n *   scripts: {\n *     clean: \"rimraf dist esm\",\n *     format: \"biome format --write .\",\n *     lint: \"biome lint .\",\n *   },\n * })\n * ```\n *\n * @alpha\n */\nexport const ExactScripts = definePackagePolicy<\n\tPackageJson,\n\tExactScriptsConfig | undefined\n>({\n\tname: POLICY_NAME,\n\tdescription:\n\t\t\"Validates that scripts exist and have exact content in package.json.\",\n\thandler: async (json, { file, root, resolve, config }) => {\n\t\tif (config === undefined || Object.keys(config.scripts).length === 0) {\n\t\t\treturn true;\n\t\t}\n\n\t\tconst scripts = json.scripts ?? {};\n\t\tconst validation = validateScripts(scripts, config.scripts);\n\n\t\tif (validation.errors.length === 0) {\n\t\t\treturn true;\n\t\t}\n\n\t\tconst scriptsToFix = [\n\t\t\t...validation.missingScripts,\n\t\t\t...validation.mismatchedScripts,\n\t\t];\n\t\tconst hasAutoFixableErrors = scriptsToFix.length > 0;\n\n\t\tif (resolve && hasAutoFixableErrors) {\n\t\t\ttry {\n\t\t\t\tconst fixedScripts = await fixScripts(\n\t\t\t\t\tjson,\n\t\t\t\t\tresolvePath(root, file),\n\t\t\t\t\tscriptsToFix,\n\t\t\t\t\tconfig.scripts,\n\t\t\t\t\tscripts,\n\t\t\t\t);\n\n\t\t\t\treturn {\n\t\t\t\t\tname: POLICY_NAME,\n\t\t\t\t\tfile,\n\t\t\t\t\tresolved: true,\n\t\t\t\t\terrorMessages: [`Fixed scripts: ${fixedScripts.join(\", \")}`],\n\t\t\t\t};\n\t\t\t} catch {\n\t\t\t\t// Fall through to return regular failure\n\t\t\t}\n\t\t}\n\n\t\treturn {\n\t\t\tname: POLICY_NAME,\n\t\t\tfile,\n\t\t\tautoFixable: hasAutoFixableErrors,\n\t\t\terrorMessages: validation.errors,\n\t\t};\n\t},\n});\n"]}

package/esm/policies/GleamDepVersions.d.ts

@@ -0,0 +1,25 @@
+import type { PolicyShape } from "../policy.js";
+/**
+ * Configuration for the GleamDepVersions policy.
+ *
+ * @alpha
+ */
+export interface GleamDepVersionsConfig {
+    /**
+     * If true, require all dependencies to have version constraints.
+     * @defaultValue true
+     */
+    requireVersions?: boolean;
+    /**
+     * If true, warn on unbounded version ranges (e.g., ">= 1.0.0" without upper bound).
+     * @defaultValue false
+     */
+    warnUnbounded?: boolean;
+}
+/**
+ * A policy that prevents missing or overly loose version constraints in Gleam dependencies.
+ *
+ * @alpha
+ */
+export declare const GleamDepVersions: PolicyShape<GleamDepVersionsConfig>;
+//# sourceMappingURL=GleamDepVersions.d.ts.map

package/esm/policies/GleamDepVersions.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"GleamDepVersions.d.ts","sourceRoot":"","sources":["../../src/policies/GleamDepVersions.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AAMhD;;;;GAIG;AACH,MAAM,WAAW,sBAAsB;IACtC;;;OAGG;IACH,eAAe,CAAC,EAAE,OAAO,CAAC;IAE1B;;;OAGG;IACH,aAAa,CAAC,EAAE,OAAO,CAAC;CACxB;AAkDD;;;;GAIG;AACH,eAAO,MAAM,gBAAgB,EAAE,WAAW,CAAC,sBAAsB,CAsC9D,CAAC"}

package/esm/policies/GleamDepVersions.js

@@ -0,0 +1,67 @@
+import { defineGleamPolicy, } from "../policyDefiners/defineGleamPolicy.js";
+function extractVersion(dep) {
+    if (typeof dep === "string") {
+        return dep;
+    }
+    if (typeof dep === "object" && dep !== null) {
+        const record = dep;
+        if (typeof record.version === "string") {
+            return record.version;
+        }
+        // Path-only dependencies don't need version checks
+        if (typeof record.path === "string") {
+            return undefined;
+        }
+    }
+    return undefined;
+}
+function checkSection(sectionName, deps, requireVersions, warnUnbounded) {
+    const errors = [];
+    for (const [name, value] of Object.entries(deps)) {
+        const version = extractVersion(value);
+        if (requireVersions && version === undefined) {
+            // Skip path dependencies
+            if (typeof value === "object" &&
+                value !== null &&
+                typeof value.path === "string") {
+                continue;
+            }
+            errors.push(`[${sectionName}] "${name}" has no version constraint`);
+        }
+        if (warnUnbounded && version !== undefined && version.startsWith(">=")) {
+            errors.push(`[${sectionName}] "${name}" = "${version}" uses an unbounded version range`);
+        }
+    }
+    return errors;
+}
+/**
+ * A policy that prevents missing or overly loose version constraints in Gleam dependencies.
+ *
+ * @alpha
+ */
+export const GleamDepVersions = defineGleamPolicy({
+    name: "GleamDepVersions",
+    description: "Prevents missing or overly loose version constraints in gleam.toml dependencies.",
+    handler: async (toml, { config }) => {
+        const requireVersions = config?.requireVersions ?? true;
+        const warnUnbounded = config?.warnUnbounded ?? false;
+        const errors = [];
+        const sections = [
+            { name: "dependencies", data: toml.dependencies },
+            { name: "dev-dependencies", data: toml["dev-dependencies"] },
+        ];
+        for (const { name, data } of sections) {
+            if (data && typeof data === "object") {
+                errors.push(...checkSection(name, data, requireVersions, warnUnbounded));
+            }
+        }
+        if (errors.length > 0) {
+            return {
+                error: errors.join("; "),
+                manualFix: 'Add specific version constraints (e.g., ">= 1.0.0 and < 2.0.0") to all dependencies.',
+            };
+        }
+        return true;
+    },
+});
+//# sourceMappingURL=GleamDepVersions.js.map

package/esm/policies/GleamDepVersions.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"GleamDepVersions.js","sourceRoot":"","sources":["../../src/policies/GleamDepVersions.ts"],"names":[],"mappings":"AACA,OAAO,EACN,iBAAiB,GAEjB,MAAM,wCAAwC,CAAC;AAqBhD,SAAS,cAAc,CAAC,GAAY;IACnC,IAAI,OAAO,GAAG,KAAK,QAAQ,EAAE,CAAC;QAC7B,OAAO,GAAG,CAAC;IACZ,CAAC;IACD,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,GAAG,KAAK,IAAI,EAAE,CAAC;QAC7C,MAAM,MAAM,GAAG,GAA8B,CAAC;QAC9C,IAAI,OAAO,MAAM,CAAC,OAAO,KAAK,QAAQ,EAAE,CAAC;YACxC,OAAO,MAAM,CAAC,OAAO,CAAC;QACvB,CAAC;QACD,mDAAmD;QACnD,IAAI,OAAO,MAAM,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;YACrC,OAAO,SAAS,CAAC;QAClB,CAAC;IACF,CAAC;IACD,OAAO,SAAS,CAAC;AAClB,CAAC;AAED,SAAS,YAAY,CACpB,WAAmB,EACnB,IAA6B,EAC7B,eAAwB,EACxB,aAAsB;IAEtB,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;QAClD,MAAM,OAAO,GAAG,cAAc,CAAC,KAAK,CAAC,CAAC;QAEtC,IAAI,eAAe,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;YAC9C,yBAAyB;YACzB,IACC,OAAO,KAAK,KAAK,QAAQ;gBACzB,KAAK,KAAK,IAAI;gBACd,OAAQ,KAAiC,CAAC,IAAI,KAAK,QAAQ,EAC1D,CAAC;gBACF,SAAS;YACV,CAAC;YACD,MAAM,CAAC,IAAI,CAAC,IAAI,WAAW,MAAM,IAAI,6BAA6B,CAAC,CAAC;QACrE,CAAC;QAED,IAAI,aAAa,IAAI,OAAO,KAAK,SAAS,IAAI,OAAO,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;YACxE,MAAM,CAAC,IAAI,CACV,IAAI,WAAW,MAAM,IAAI,QAAQ,OAAO,mCAAmC,CAC3E,CAAC;QACH,CAAC;IACF,CAAC;IACD,OAAO,MAAM,CAAC;AACf,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,MAAM,gBAAgB,GAC5B,iBAAiB,CAAC;IACjB,IAAI,EAAE,kBAAkB;IACxB,WAAW,EACV,kFAAkF;IACnF,OAAO,EAAE,KAAK,EAAE,IAAe,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE;QAC9C,MAAM,eAAe,GAAG,MAAM,EAAE,eAAe,IAAI,IAAI,CAAC;QACxD,MAAM,aAAa,GAAG,MAAM,EAAE,aAAa,IAAI,KAAK,CAAC;QACrD,MAAM,MAAM,GAAa,EAAE,CAAC;QAE5B,MAAM,QAAQ,GAAG;YAChB,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI,EAAE,IAAI,CAAC,YAAY,EAAE;YACjD,EAAE,IAAI,EAAE,kBAAkB,EAAE,IAAI,EAAE,IAAI,CAAC,kBAAkB,CAAC,EAAE;SAC5D,CAAC;QAEF,KAAK,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,QAAQ,EAAE,CAAC;YACvC,IAAI,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE,CAAC;gBACtC,MAAM,CAAC,IAAI,CACV,GAAG,YAAY,CACd,IAAI,EACJ,IAA+B,EAC/B,eAAe,EACf,aAAa,CACb,CACD,CAAC;YACH,CAAC;QACF,CAAC;QAED,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACvB,OAAO;gBACN,KAAK,EAAE,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC;gBACxB,SAAS,EACR,sFAAsF;aACvF,CAAC;QACH,CAAC;QAED,OAAO,IAAI,CAAC;IACb,CAAC;CACD,CAAC,CAAC","sourcesContent":["import type { PolicyShape } from \"../policy.js\";\nimport {\n\tdefineGleamPolicy,\n\ttype GleamToml,\n} from \"../policyDefiners/defineGleamPolicy.js\";\n\n/**\n * Configuration for the GleamDepVersions policy.\n *\n * @alpha\n */\nexport interface GleamDepVersionsConfig {\n\t/**\n\t * If true, require all dependencies to have version constraints.\n\t * @defaultValue true\n\t */\n\trequireVersions?: boolean;\n\n\t/**\n\t * If true, warn on unbounded version ranges (e.g., \">= 1.0.0\" without upper bound).\n\t * @defaultValue false\n\t */\n\twarnUnbounded?: boolean;\n}\n\nfunction extractVersion(dep: unknown): string | undefined {\n\tif (typeof dep === \"string\") {\n\t\treturn dep;\n\t}\n\tif (typeof dep === \"object\" && dep !== null) {\n\t\tconst record = dep as Record<string, unknown>;\n\t\tif (typeof record.version === \"string\") {\n\t\t\treturn record.version;\n\t\t}\n\t\t// Path-only dependencies don't need version checks\n\t\tif (typeof record.path === \"string\") {\n\t\t\treturn undefined;\n\t\t}\n\t}\n\treturn undefined;\n}\n\nfunction checkSection(\n\tsectionName: string,\n\tdeps: Record<string, unknown>,\n\trequireVersions: boolean,\n\twarnUnbounded: boolean,\n): string[] {\n\tconst errors: string[] = [];\n\tfor (const [name, value] of Object.entries(deps)) {\n\t\tconst version = extractVersion(value);\n\n\t\tif (requireVersions && version === undefined) {\n\t\t\t// Skip path dependencies\n\t\t\tif (\n\t\t\t\ttypeof value === \"object\" &&\n\t\t\t\tvalue !== null &&\n\t\t\t\ttypeof (value as Record<string, unknown>).path === \"string\"\n\t\t\t) {\n\t\t\t\tcontinue;\n\t\t\t}\n\t\t\terrors.push(`[${sectionName}] \"${name}\" has no version constraint`);\n\t\t}\n\n\t\tif (warnUnbounded && version !== undefined && version.startsWith(\">=\")) {\n\t\t\terrors.push(\n\t\t\t\t`[${sectionName}] \"${name}\" = \"${version}\" uses an unbounded version range`,\n\t\t\t);\n\t\t}\n\t}\n\treturn errors;\n}\n\n/**\n * A policy that prevents missing or overly loose version constraints in Gleam dependencies.\n *\n * @alpha\n */\nexport const GleamDepVersions: PolicyShape<GleamDepVersionsConfig> =\n\tdefineGleamPolicy({\n\t\tname: \"GleamDepVersions\",\n\t\tdescription:\n\t\t\t\"Prevents missing or overly loose version constraints in gleam.toml dependencies.\",\n\t\thandler: async (toml: GleamToml, { config }) => {\n\t\t\tconst requireVersions = config?.requireVersions ?? true;\n\t\t\tconst warnUnbounded = config?.warnUnbounded ?? false;\n\t\t\tconst errors: string[] = [];\n\n\t\t\tconst sections = [\n\t\t\t\t{ name: \"dependencies\", data: toml.dependencies },\n\t\t\t\t{ name: \"dev-dependencies\", data: toml[\"dev-dependencies\"] },\n\t\t\t];\n\n\t\t\tfor (const { name, data } of sections) {\n\t\t\t\tif (data && typeof data === \"object\") {\n\t\t\t\t\terrors.push(\n\t\t\t\t\t\t...checkSection(\n\t\t\t\t\t\t\tname,\n\t\t\t\t\t\t\tdata as Record<string, unknown>,\n\t\t\t\t\t\t\trequireVersions,\n\t\t\t\t\t\t\twarnUnbounded,\n\t\t\t\t\t\t),\n\t\t\t\t\t);\n\t\t\t\t}\n\t\t\t}\n\n\t\t\tif (errors.length > 0) {\n\t\t\t\treturn {\n\t\t\t\t\terror: errors.join(\"; \"),\n\t\t\t\t\tmanualFix:\n\t\t\t\t\t\t'Add specific version constraints (e.g., \">= 1.0.0 and < 2.0.0\") to all dependencies.',\n\t\t\t\t};\n\t\t\t}\n\n\t\t\treturn true;\n\t\t},\n\t});\n"]}

package/esm/policies/GleamDocExists.d.ts

@@ -0,0 +1,24 @@
+import type { PolicyShape } from "../policy.js";
+/**
+ * Configuration for the GleamDocExists policy.
+ *
+ * @alpha
+ */
+export interface GleamDocExistsConfig {
+    /**
+     * Files that must exist alongside the gleam.toml.
+     * @defaultValue ["README.md"]
+     */
+    required?: string[];
+    /**
+     * Files that are recommended but not required. Missing ones produce warnings.
+     */
+    recommended?: string[];
+}
+/**
+ * A policy that validates documentation files exist for Gleam packages.
+ *
+ * @alpha
+ */
+export declare const GleamDocExists: PolicyShape<GleamDocExistsConfig>;
+//# sourceMappingURL=GleamDocExists.d.ts.map

package/esm/policies/GleamDocExists.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"GleamDocExists.d.ts","sourceRoot":"","sources":["../../src/policies/GleamDocExists.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AAMhD;;;;GAIG;AACH,MAAM,WAAW,oBAAoB;IACpC;;;OAGG;IACH,QAAQ,CAAC,EAAE,MAAM,EAAE,CAAC;IAEpB;;OAEG;IACH,WAAW,CAAC,EAAE,MAAM,EAAE,CAAC;CACvB;AAID;;;;GAIG;AACH,eAAO,MAAM,cAAc,EAAE,WAAW,CAAC,oBAAoB,CA4C1D,CAAC"}

package/esm/policies/GleamDocExists.js

@@ -0,0 +1,39 @@
+import { existsSync } from "node:fs";
+import path from "pathe";
+import { defineGleamPolicy, } from "../policyDefiners/defineGleamPolicy.js";
+const DEFAULT_REQUIRED = ["README.md"];
+/**
+ * A policy that validates documentation files exist for Gleam packages.
+ *
+ * @alpha
+ */
+export const GleamDocExists = defineGleamPolicy({
+    name: "GleamDocExists",
+    description: "Validates that documentation files (README.md, etc.) exist for Gleam packages.",
+    handler: async (toml, { file, root, config }) => {
+        // Skip if the package looks like it's not for publishing
+        if (!(toml.description || toml.licences)) {
+            return true;
+        }
+        const dir = path.dirname(path.resolve(root, file));
+        const required = config?.required ?? DEFAULT_REQUIRED;
+        const recommended = config?.recommended ?? [];
+        const errors = [];
+        const missingRequired = required.filter((f) => !existsSync(path.join(dir, f)));
+        const missingRecommended = recommended.filter((f) => !existsSync(path.join(dir, f)));
+        if (missingRequired.length > 0) {
+            errors.push(`Missing required documentation: ${missingRequired.join(", ")}`);
+        }
+        if (missingRecommended.length > 0) {
+            errors.push(`Missing recommended documentation: ${missingRecommended.join(", ")}`);
+        }
+        if (errors.length > 0) {
+            return {
+                error: errors.join("; "),
+                manualFix: "Create the missing documentation files alongside gleam.toml.",
+            };
+        }
+        return true;
+    },
+});
+//# sourceMappingURL=GleamDocExists.js.map

package/esm/policies/GleamDocExists.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"GleamDocExists.js","sourceRoot":"","sources":["../../src/policies/GleamDocExists.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AACrC,OAAO,IAAI,MAAM,OAAO,CAAC;AAEzB,OAAO,EACN,iBAAiB,GAEjB,MAAM,wCAAwC,CAAC;AAoBhD,MAAM,gBAAgB,GAAG,CAAC,WAAW,CAAC,CAAC;AAEvC;;;;GAIG;AACH,MAAM,CAAC,MAAM,cAAc,GAC1B,iBAAiB,CAAC;IACjB,IAAI,EAAE,gBAAgB;IACtB,WAAW,EACV,gFAAgF;IACjF,OAAO,EAAE,KAAK,EAAE,IAAe,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE;QAC1D,yDAAyD;QACzD,IAAI,CAAC,CAAC,IAAI,CAAC,WAAW,IAAI,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC1C,OAAO,IAAI,CAAC;QACb,CAAC;QAED,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC;QACnD,MAAM,QAAQ,GAAG,MAAM,EAAE,QAAQ,IAAI,gBAAgB,CAAC;QACtD,MAAM,WAAW,GAAG,MAAM,EAAE,WAAW,IAAI,EAAE,CAAC;QAC9C,MAAM,MAAM,GAAa,EAAE,CAAC;QAE5B,MAAM,eAAe,GAAG,QAAQ,CAAC,MAAM,CACtC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,CACrC,CAAC;QACF,MAAM,kBAAkB,GAAG,WAAW,CAAC,MAAM,CAC5C,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,CACrC,CAAC;QAEF,IAAI,eAAe,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAChC,MAAM,CAAC,IAAI,CACV,mCAAmC,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAC/D,CAAC;QACH,CAAC;QACD,IAAI,kBAAkB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACnC,MAAM,CAAC,IAAI,CACV,sCAAsC,kBAAkB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CACrE,CAAC;QACH,CAAC;QAED,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACvB,OAAO;gBACN,KAAK,EAAE,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC;gBACxB,SAAS,EACR,8DAA8D;aAC/D,CAAC;QACH,CAAC;QAED,OAAO,IAAI,CAAC;IACb,CAAC;CACD,CAAC,CAAC","sourcesContent":["import { existsSync } from \"node:fs\";\nimport path from \"pathe\";\nimport type { PolicyShape } from \"../policy.js\";\nimport {\n\tdefineGleamPolicy,\n\ttype GleamToml,\n} from \"../policyDefiners/defineGleamPolicy.js\";\n\n/**\n * Configuration for the GleamDocExists policy.\n *\n * @alpha\n */\nexport interface GleamDocExistsConfig {\n\t/**\n\t * Files that must exist alongside the gleam.toml.\n\t * @defaultValue [\"README.md\"]\n\t */\n\trequired?: string[];\n\n\t/**\n\t * Files that are recommended but not required. Missing ones produce warnings.\n\t */\n\trecommended?: string[];\n}\n\nconst DEFAULT_REQUIRED = [\"README.md\"];\n\n/**\n * A policy that validates documentation files exist for Gleam packages.\n *\n * @alpha\n */\nexport const GleamDocExists: PolicyShape<GleamDocExistsConfig> =\n\tdefineGleamPolicy({\n\t\tname: \"GleamDocExists\",\n\t\tdescription:\n\t\t\t\"Validates that documentation files (README.md, etc.) exist for Gleam packages.\",\n\t\thandler: async (toml: GleamToml, { file, root, config }) => {\n\t\t\t// Skip if the package looks like it's not for publishing\n\t\t\tif (!(toml.description || toml.licences)) {\n\t\t\t\treturn true;\n\t\t\t}\n\n\t\t\tconst dir = path.dirname(path.resolve(root, file));\n\t\t\tconst required = config?.required ?? DEFAULT_REQUIRED;\n\t\t\tconst recommended = config?.recommended ?? [];\n\t\t\tconst errors: string[] = [];\n\n\t\t\tconst missingRequired = required.filter(\n\t\t\t\t(f) => !existsSync(path.join(dir, f)),\n\t\t\t);\n\t\t\tconst missingRecommended = recommended.filter(\n\t\t\t\t(f) => !existsSync(path.join(dir, f)),\n\t\t\t);\n\n\t\t\tif (missingRequired.length > 0) {\n\t\t\t\terrors.push(\n\t\t\t\t\t`Missing required documentation: ${missingRequired.join(\", \")}`,\n\t\t\t\t);\n\t\t\t}\n\t\t\tif (missingRecommended.length > 0) {\n\t\t\t\terrors.push(\n\t\t\t\t\t`Missing recommended documentation: ${missingRecommended.join(\", \")}`,\n\t\t\t\t);\n\t\t\t}\n\n\t\t\tif (errors.length > 0) {\n\t\t\t\treturn {\n\t\t\t\t\terror: errors.join(\"; \"),\n\t\t\t\t\tmanualFix:\n\t\t\t\t\t\t\"Create the missing documentation files alongside gleam.toml.\",\n\t\t\t\t};\n\t\t\t}\n\n\t\t\treturn true;\n\t\t},\n\t});\n"]}

package/esm/policies/GleamInternalModulesConfigured.d.ts

@@ -0,0 +1,21 @@
+import type { PolicyShape } from "../policy.js";
+/**
+ * Configuration for the GleamInternalModulesConfigured policy.
+ *
+ * @alpha
+ */
+export interface GleamInternalModulesConfiguredConfig {
+    /**
+     * If true, suggest common internal_modules patterns when the field is missing.
+     * @defaultValue true
+     */
+    suggestPatterns?: boolean;
+}
+/**
+ * A policy that ensures `internal_modules` is configured in gleam.toml
+ * to hide implementation details from generated documentation.
+ *
+ * @alpha
+ */
+export declare const GleamInternalModulesConfigured: PolicyShape<GleamInternalModulesConfiguredConfig>;
+//# sourceMappingURL=GleamInternalModulesConfigured.d.ts.map

package/esm/policies/GleamInternalModulesConfigured.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"GleamInternalModulesConfigured.d.ts","sourceRoot":"","sources":["../../src/policies/GleamInternalModulesConfigured.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AAMhD;;;;GAIG;AACH,MAAM,WAAW,oCAAoC;IACpD;;;OAGG;IACH,eAAe,CAAC,EAAE,OAAO,CAAC;CAC1B;AAED;;;;;GAKG;AACH,eAAO,MAAM,8BAA8B,EAAE,WAAW,CAAC,oCAAoC,CA+B1F,CAAC"}

package/esm/policies/GleamInternalModulesConfigured.js

@@ -0,0 +1,30 @@
+import { defineGleamPolicy, } from "../policyDefiners/defineGleamPolicy.js";
+/**
+ * A policy that ensures `internal_modules` is configured in gleam.toml
+ * to hide implementation details from generated documentation.
+ *
+ * @alpha
+ */
+export const GleamInternalModulesConfigured = defineGleamPolicy({
+    name: "GleamInternalModulesConfigured",
+    description: "Ensures internal_modules is configured in gleam.toml to hide implementation details from docs.",
+    handler: async (toml, { config }) => {
+        const internalModules = toml.internal_modules;
+        if (internalModules !== undefined &&
+            Array.isArray(internalModules) &&
+            internalModules.length > 0) {
+            return true;
+        }
+        const name = toml.name;
+        const suggestPatterns = config?.suggestPatterns ?? true;
+        let manualFix = "Add an internal_modules field to gleam.toml to hide implementation details from docs.";
+        if (suggestPatterns && name) {
+            manualFix = `Add to gleam.toml:\ninternal_modules = ["${name}/internal", "${name}/internal/*"]`;
+        }
+        return {
+            error: "Missing internal_modules configuration in gleam.toml. Published packages should hide internal modules from documentation.",
+            manualFix,
+        };
+    },
+});
+//# sourceMappingURL=GleamInternalModulesConfigured.js.map

package/esm/policies/GleamInternalModulesConfigured.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"GleamInternalModulesConfigured.js","sourceRoot":"","sources":["../../src/policies/GleamInternalModulesConfigured.ts"],"names":[],"mappings":"AACA,OAAO,EACN,iBAAiB,GAEjB,MAAM,wCAAwC,CAAC;AAehD;;;;;GAKG;AACH,MAAM,CAAC,MAAM,8BAA8B,GAC1C,iBAAiB,CAAC;IACjB,IAAI,EAAE,gCAAgC;IACtC,WAAW,EACV,gGAAgG;IACjG,OAAO,EAAE,KAAK,EAAE,IAAe,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE;QAC9C,MAAM,eAAe,GAAG,IAAI,CAAC,gBAAwC,CAAC;QAEtE,IACC,eAAe,KAAK,SAAS;YAC7B,KAAK,CAAC,OAAO,CAAC,eAAe,CAAC;YAC9B,eAAe,CAAC,MAAM,GAAG,CAAC,EACzB,CAAC;YACF,OAAO,IAAI,CAAC;QACb,CAAC;QAED,MAAM,IAAI,GAAG,IAAI,CAAC,IAA0B,CAAC;QAC7C,MAAM,eAAe,GAAG,MAAM,EAAE,eAAe,IAAI,IAAI,CAAC;QAExD,IAAI,SAAS,GACZ,uFAAuF,CAAC;QACzF,IAAI,eAAe,IAAI,IAAI,EAAE,CAAC;YAC7B,SAAS,GAAG,4CAA4C,IAAI,gBAAgB,IAAI,eAAe,CAAC;QACjG,CAAC;QAED,OAAO;YACN,KAAK,EACJ,2HAA2H;YAC5H,SAAS;SACT,CAAC;IACH,CAAC;CACD,CAAC,CAAC","sourcesContent":["import type { PolicyShape } from \"../policy.js\";\nimport {\n\tdefineGleamPolicy,\n\ttype GleamToml,\n} from \"../policyDefiners/defineGleamPolicy.js\";\n\n/**\n * Configuration for the GleamInternalModulesConfigured policy.\n *\n * @alpha\n */\nexport interface GleamInternalModulesConfiguredConfig {\n\t/**\n\t * If true, suggest common internal_modules patterns when the field is missing.\n\t * @defaultValue true\n\t */\n\tsuggestPatterns?: boolean;\n}\n\n/**\n * A policy that ensures `internal_modules` is configured in gleam.toml\n * to hide implementation details from generated documentation.\n *\n * @alpha\n */\nexport const GleamInternalModulesConfigured: PolicyShape<GleamInternalModulesConfiguredConfig> =\n\tdefineGleamPolicy({\n\t\tname: \"GleamInternalModulesConfigured\",\n\t\tdescription:\n\t\t\t\"Ensures internal_modules is configured in gleam.toml to hide implementation details from docs.\",\n\t\thandler: async (toml: GleamToml, { config }) => {\n\t\t\tconst internalModules = toml.internal_modules as string[] | undefined;\n\n\t\t\tif (\n\t\t\t\tinternalModules !== undefined &&\n\t\t\t\tArray.isArray(internalModules) &&\n\t\t\t\tinternalModules.length > 0\n\t\t\t) {\n\t\t\t\treturn true;\n\t\t\t}\n\n\t\t\tconst name = toml.name as string | undefined;\n\t\t\tconst suggestPatterns = config?.suggestPatterns ?? true;\n\n\t\t\tlet manualFix =\n\t\t\t\t\"Add an internal_modules field to gleam.toml to hide implementation details from docs.\";\n\t\t\tif (suggestPatterns && name) {\n\t\t\t\tmanualFix = `Add to gleam.toml:\\ninternal_modules = [\"${name}/internal\", \"${name}/internal/*\"]`;\n\t\t\t}\n\n\t\t\treturn {\n\t\t\t\terror:\n\t\t\t\t\t\"Missing internal_modules configuration in gleam.toml. Published packages should hide internal modules from documentation.\",\n\t\t\t\tmanualFix,\n\t\t\t};\n\t\t},\n\t});\n"]}

package/esm/policies/GleamLicenceConfigured.d.ts

@@ -0,0 +1,29 @@
+import type { PolicyShape } from "../policy.js";
+/**
+ * Configuration for the GleamLicenceConfigured policy.
+ *
+ * @alpha
+ */
+export interface GleamLicenceConfiguredConfig {
+    /**
+     * Allowed SPDX licence identifiers. If set, only these are accepted.
+     */
+    allowedLicences?: string[];
+    /**
+     * If true, validate licence values against the SPDX licence list
+     * using `spdx-correct`. When enabled, typos like "MIIT" are detected
+     * and can be auto-fixed to the correct identifier ("MIT").
+     *
+     * Requires the optional peer dependency `spdx-correct` to be installed.
+     *
+     * @defaultValue false
+     */
+    validateSpdx?: boolean;
+}
+/**
+ * A policy that ensures licence metadata is properly configured in gleam.toml.
+ *
+ * @alpha
+ */
+export declare const GleamLicenceConfigured: PolicyShape<GleamLicenceConfiguredConfig>;
+//# sourceMappingURL=GleamLicenceConfigured.d.ts.map

package/esm/policies/GleamLicenceConfigured.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"GleamLicenceConfigured.d.ts","sourceRoot":"","sources":["../../src/policies/GleamLicenceConfigured.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AAOhD;;;;GAIG;AACH,MAAM,WAAW,4BAA4B;IAC5C;;OAEG;IACH,eAAe,CAAC,EAAE,MAAM,EAAE,CAAC;IAE3B;;;;;;;;OAQG;IACH,YAAY,CAAC,EAAE,OAAO,CAAC;CACvB;AAKD;;;;GAIG;AACH,eAAO,MAAM,sBAAsB,EAAE,WAAW,CAAC,4BAA4B,CAgC1E,CAAC"}

package/esm/policies/GleamLicenceConfigured.js

@@ -0,0 +1,34 @@
+import { resolve } from "pathe";
+import { defineGleamPolicy, } from "../policyDefiners/defineGleamPolicy.js";
+import { validateLicenceField } from "../policyDefiners/spdxValidator.js";
+const MANUAL_FIX = "Use valid SPDX licence identifiers (e.g., MIT, Apache-2.0, MPL-2.0).";
+/**
+ * A policy that ensures licence metadata is properly configured in gleam.toml.
+ *
+ * @alpha
+ */
+export const GleamLicenceConfigured = defineGleamPolicy({
+    name: "GleamLicenceConfigured",
+    description: "Ensures gleam.toml has valid SPDX licence identifiers configured.",
+    handler: async (toml, { file, root, resolve: shouldResolve, config }) => {
+        const licences = toml.licences;
+        if (!Array.isArray(licences) || licences.length === 0) {
+            return {
+                error: "Missing or empty licences field in gleam.toml.",
+                manualFix: 'Add licences = ["MIT"] (or appropriate SPDX identifier) to gleam.toml.',
+            };
+        }
+        const result = await validateLicenceField({
+            licences: licences,
+            ...(config?.allowedLicences !== undefined && {
+                allowedLicences: config.allowedLicences,
+            }),
+            validateSpdx: config?.validateSpdx ?? false,
+            shouldResolve,
+            filePath: resolve(root, file),
+            manualFixMessage: MANUAL_FIX,
+        });
+        return result ?? true;
+    },
+});
+//# sourceMappingURL=GleamLicenceConfigured.js.map

package/esm/policies/GleamLicenceConfigured.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"GleamLicenceConfigured.js","sourceRoot":"","sources":["../../src/policies/GleamLicenceConfigured.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,OAAO,CAAC;AAEhC,OAAO,EACN,iBAAiB,GAEjB,MAAM,wCAAwC,CAAC;AAChD,OAAO,EAAE,oBAAoB,EAAE,MAAM,oCAAoC,CAAC;AAyB1E,MAAM,UAAU,GACf,sEAAsE,CAAC;AAExE;;;;GAIG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAClC,iBAAiB,CAAC;IACjB,IAAI,EAAE,wBAAwB;IAC9B,WAAW,EACV,mEAAmE;IACpE,OAAO,EAAE,KAAK,EACb,IAAe,EACf,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,aAAa,EAAE,MAAM,EAAE,EAC7C,EAAE;QACH,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC;QAE/B,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACvD,OAAO;gBACN,KAAK,EAAE,gDAAgD;gBACvD,SAAS,EACR,wEAAwE;aACzE,CAAC;QACH,CAAC;QAED,MAAM,MAAM,GAAG,MAAM,oBAAoB,CAAC;YACzC,QAAQ,EAAE,QAAoB;YAC9B,GAAG,CAAC,MAAM,EAAE,eAAe,KAAK,SAAS,IAAI;gBAC5C,eAAe,EAAE,MAAM,CAAC,eAAe;aACvC,CAAC;YACF,YAAY,EAAE,MAAM,EAAE,YAAY,IAAI,KAAK;YAC3C,aAAa;YACb,QAAQ,EAAE,OAAO,CAAC,IAAI,EAAE,IAAI,CAAC;YAC7B,gBAAgB,EAAE,UAAU;SAC5B,CAAC,CAAC;QAEH,OAAO,MAAM,IAAI,IAAI,CAAC;IACvB,CAAC;CACD,CAAC,CAAC","sourcesContent":["import { resolve } from \"pathe\";\nimport type { PolicyShape } from \"../policy.js\";\nimport {\n\tdefineGleamPolicy,\n\ttype GleamToml,\n} from \"../policyDefiners/defineGleamPolicy.js\";\nimport { validateLicenceField } from \"../policyDefiners/spdxValidator.js\";\n\n/**\n * Configuration for the GleamLicenceConfigured policy.\n *\n * @alpha\n */\nexport interface GleamLicenceConfiguredConfig {\n\t/**\n\t * Allowed SPDX licence identifiers. If set, only these are accepted.\n\t */\n\tallowedLicences?: string[];\n\n\t/**\n\t * If true, validate licence values against the SPDX licence list\n\t * using `spdx-correct`. When enabled, typos like \"MIIT\" are detected\n\t * and can be auto-fixed to the correct identifier (\"MIT\").\n\t *\n\t * Requires the optional peer dependency `spdx-correct` to be installed.\n\t *\n\t * @defaultValue false\n\t */\n\tvalidateSpdx?: boolean;\n}\n\nconst MANUAL_FIX =\n\t\"Use valid SPDX licence identifiers (e.g., MIT, Apache-2.0, MPL-2.0).\";\n\n/**\n * A policy that ensures licence metadata is properly configured in gleam.toml.\n *\n * @alpha\n */\nexport const GleamLicenceConfigured: PolicyShape<GleamLicenceConfiguredConfig> =\n\tdefineGleamPolicy({\n\t\tname: \"GleamLicenceConfigured\",\n\t\tdescription:\n\t\t\t\"Ensures gleam.toml has valid SPDX licence identifiers configured.\",\n\t\thandler: async (\n\t\t\ttoml: GleamToml,\n\t\t\t{ file, root, resolve: shouldResolve, config },\n\t\t) => {\n\t\t\tconst licences = toml.licences;\n\n\t\t\tif (!Array.isArray(licences) || licences.length === 0) {\n\t\t\t\treturn {\n\t\t\t\t\terror: \"Missing or empty licences field in gleam.toml.\",\n\t\t\t\t\tmanualFix:\n\t\t\t\t\t\t'Add licences = [\"MIT\"] (or appropriate SPDX identifier) to gleam.toml.',\n\t\t\t\t};\n\t\t\t}\n\n\t\t\tconst result = await validateLicenceField({\n\t\t\t\tlicences: licences as string[],\n\t\t\t\t...(config?.allowedLicences !== undefined && {\n\t\t\t\t\tallowedLicences: config.allowedLicences,\n\t\t\t\t}),\n\t\t\t\tvalidateSpdx: config?.validateSpdx ?? false,\n\t\t\t\tshouldResolve,\n\t\t\t\tfilePath: resolve(root, file),\n\t\t\t\tmanualFixMessage: MANUAL_FIX,\n\t\t\t});\n\n\t\t\treturn result ?? true;\n\t\t},\n\t});\n"]}

package/esm/policies/GleamManifestCommitted.d.ts

@@ -0,0 +1,9 @@
+import type { PolicyDefinition } from "../policy.js";
+/**
+ * A policy that ensures manifest.toml is committed alongside gleam.toml
+ * for reproducible Gleam builds.
+ *
+ * @alpha
+ */
+export declare const GleamManifestCommitted: PolicyDefinition;
+//# sourceMappingURL=GleamManifestCommitted.d.ts.map

package/esm/policies/GleamManifestCommitted.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"GleamManifestCommitted.d.ts","sourceRoot":"","sources":["../../src/policies/GleamManifestCommitted.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,cAAc,CAAC;AAErD;;;;;GAKG;AACH,eAAO,MAAM,sBAAsB,EAAE,gBAoBnC,CAAC"}

package/esm/policies/GleamManifestCommitted.js

@@ -0,0 +1,26 @@
+import { existsSync } from "node:fs";
+import path from "pathe";
+import { makePolicyDefinition } from "../makePolicy.js";
+/**
+ * A policy that ensures manifest.toml is committed alongside gleam.toml
+ * for reproducible Gleam builds.
+ *
+ * @alpha
+ */
+export const GleamManifestCommitted = makePolicyDefinition({
+    name: "GleamManifestCommitted",
+    description: "Ensures manifest.toml is committed alongside gleam.toml for reproducible builds.",
+    match: /gleam\.toml$/,
+    handler: async ({ file, root }) => {
+        const dir = path.dirname(path.resolve(root, file));
+        const manifestPath = path.join(dir, "manifest.toml");
+        if (existsSync(manifestPath)) {
+            return true;
+        }
+        return {
+            error: "Missing manifest.toml. Gleam projects should commit manifest.toml for reproducible builds.",
+            manualFix: "Run `gleam build` to generate manifest.toml, then commit it to source control.",
+        };
+    },
+});
+//# sourceMappingURL=GleamManifestCommitted.js.map

package/esm/policies/GleamManifestCommitted.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"GleamManifestCommitted.js","sourceRoot":"","sources":["../../src/policies/GleamManifestCommitted.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AACrC,OAAO,IAAI,MAAM,OAAO,CAAC;AACzB,OAAO,EAAE,oBAAoB,EAAE,MAAM,kBAAkB,CAAC;AAGxD;;;;;GAKG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAAqB,oBAAoB,CAAC;IAC5E,IAAI,EAAE,wBAAwB;IAC9B,WAAW,EACV,kFAAkF;IACnF,KAAK,EAAE,cAAc;IACrB,OAAO,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,EAAE;QACjC,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC;QACnD,MAAM,YAAY,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,eAAe,CAAC,CAAC;QAErD,IAAI,UAAU,CAAC,YAAY,CAAC,EAAE,CAAC;YAC9B,OAAO,IAAI,CAAC;QACb,CAAC;QAED,OAAO;YACN,KAAK,EACJ,4FAA4F;YAC7F,SAAS,EACR,gFAAgF;SACjF,CAAC;IACH,CAAC;CACD,CAAC,CAAC","sourcesContent":["import { existsSync } from \"node:fs\";\nimport path from \"pathe\";\nimport { makePolicyDefinition } from \"../makePolicy.js\";\nimport type { PolicyDefinition } from \"../policy.js\";\n\n/**\n * A policy that ensures manifest.toml is committed alongside gleam.toml\n * for reproducible Gleam builds.\n *\n * @alpha\n */\nexport const GleamManifestCommitted: PolicyDefinition = makePolicyDefinition({\n\tname: \"GleamManifestCommitted\",\n\tdescription:\n\t\t\"Ensures manifest.toml is committed alongside gleam.toml for reproducible builds.\",\n\tmatch: /gleam\\.toml$/,\n\thandler: async ({ file, root }) => {\n\t\tconst dir = path.dirname(path.resolve(root, file));\n\t\tconst manifestPath = path.join(dir, \"manifest.toml\");\n\n\t\tif (existsSync(manifestPath)) {\n\t\t\treturn true;\n\t\t}\n\n\t\treturn {\n\t\t\terror:\n\t\t\t\t\"Missing manifest.toml. Gleam projects should commit manifest.toml for reproducible builds.\",\n\t\t\tmanualFix:\n\t\t\t\t\"Run `gleam build` to generate manifest.toml, then commit it to source control.\",\n\t\t};\n\t},\n});\n"]}

package/esm/policies/GleamMonorepoConsistency.d.ts

@@ -0,0 +1,30 @@
+import type { PolicyDefinition } from "../policy.js";
+/**
+ * Configuration for the GleamMonorepoConsistency policy.
+ *
+ * @alpha
+ */
+export interface GleamMonorepoConsistencyConfig {
+    /**
+     * Top-level fields that should be consistent across all packages.
+     * @defaultValue ["licences"]
+     */
+    syncFields?: string[];
+    /**
+     * If true, ensure the `gleam` version constraint is consistent.
+     * @defaultValue true
+     */
+    syncGleamVersion?: boolean;
+    /**
+     * Paths to gleam.toml files to compare (relative to repo root).
+     * If not specified, the policy only checks the file it matches against.
+     */
+    packages?: string[];
+}
+/**
+ * A policy that enforces consistent metadata across Gleam packages in a monorepo.
+ *
+ * @alpha
+ */
+export declare const GleamMonorepoConsistency: PolicyDefinition<GleamMonorepoConsistencyConfig>;
+//# sourceMappingURL=GleamMonorepoConsistency.d.ts.map

package/esm/policies/GleamMonorepoConsistency.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"GleamMonorepoConsistency.d.ts","sourceRoot":"","sources":["../../src/policies/GleamMonorepoConsistency.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,cAAc,CAAC;AAGrD;;;;GAIG;AACH,MAAM,WAAW,8BAA8B;IAC9C;;;OAGG;IACH,UAAU,CAAC,EAAE,MAAM,EAAE,CAAC;IAEtB;;;OAGG;IACH,gBAAgB,CAAC,EAAE,OAAO,CAAC;IAE3B;;;OAGG;IACH,QAAQ,CAAC,EAAE,MAAM,EAAE,CAAC;CACpB;AAuCD;;;;GAIG;AACH,eAAO,MAAM,wBAAwB,EAAE,gBAAgB,CAAC,8BAA8B,CA+CnF,CAAC"}