skuba 10.2.0-config-20250421023131 → 11.0.0-feat-npmrc-to-workspace-20250511013825

package/template/base/_pnpm-workspace.yaml

@@ -0,0 +1,10 @@
+# managed by skuba
+packageManagerStrictVersion: true
+publicHoistPattern:
+  - '@types*'
+  - '*eslint*'
+  - '*prettier*'
+  - esbuild
+  - jest
+  - tsconfig-seek
+  # end managed by skuba

package/template/express-rest-api/.buildkite/pipeline.yml

@@ -3,24 +3,16 @@ agents:
 
 configs:
   plugins:
-    - &aws-sm
-      seek-oss/aws-sm#v2.3.3:
-        env:
-          NPM_READ_TOKEN: arn:aws:secretsmanager:ap-southeast-2:987872074697:secret:npm/npm-read-token
-
     - &docker-ecr-cache
       seek-oss/docker-ecr-cache#v2.2.1: &docker-ecr-cache-defaults
         cache-on:
-          - .npmrc
           - package.json#.packageManager
           - pnpm-lock.yaml
+          - pnpm-workspace.yaml
         dockerfile: Dockerfile.dev-deps
-        secrets: id=npm,src=/tmp/.npmrc
-
-    - &private-npm
-      seek-oss/private-npm#v1.3.0:
-        env: NPM_READ_TOKEN
-        output-path: /tmp/
+        secrets:
+          - id=npm,src=/var/lib/buildkite-agent/.npmrc
+          - NPM_TOKEN
 
   base-steps:
     - &deploy
@@ -34,10 +26,10 @@ configs:
 steps:
   - label: 🧖‍♀️ Warm Prod
     command: ':'
+    env:
+      GET_NPM_TOKEN: please
     key: warm-prod
     plugins:
-      - *aws-sm
-      - *private-npm
       - seek-oss/docker-ecr-cache#v2.2.1:
           <<: *docker-ecr-cache-defaults
           skip-pull-from-cache: true
@@ -53,9 +45,8 @@ steps:
     depends_on: warm-prod
     env:
       GET_GITHUB_TOKEN: please
+      GET_NPM_TOKEN: please
     plugins:
-      - *aws-sm
-      - *private-npm
       - *docker-ecr-cache
       - docker-compose#v5.7.0:
           run: app
@@ -66,9 +57,9 @@ steps:
 
   - label: 📦 Build & Package
     depends_on: warm-prod
+    env:
+      GET_NPM_TOKEN: please
     plugins:
-      - *aws-sm
-      - *private-npm
       - *docker-ecr-cache
       - seek-jobs/gantry#v4.0.0:
           command: build

package/template/express-rest-api/Dockerfile.dev-deps

@@ -1,4 +1,4 @@
-# syntax=docker/dockerfile:1.14
+# syntax=docker/dockerfile:1.15
 
 FROM public.ecr.aws/docker/library/node:22-alpine AS dev-deps
 
@@ -10,8 +10,9 @@ RUN --mount=type=bind,source=package.json,target=package.json \
 
 WORKDIR /workdir
 
-RUN --mount=type=bind,source=.npmrc,target=.npmrc \
-    --mount=type=bind,source=package.json,target=package.json \
+RUN --mount=type=bind,source=package.json,target=package.json \
     --mount=type=bind,source=pnpm-lock.yaml,target=pnpm-lock.yaml \
+    --mount=type=bind,source=pnpm-workspace.yaml,target=pnpm-workspace.yaml \
     --mount=type=secret,id=npm,dst=/root/.npmrc,required=true \
+    --mount=type=secret,id=NPM_TOKEN,env=NPM_TOKEN,required=true \
     pnpm fetch

package/template/express-rest-api/package.json

@@ -28,7 +28,7 @@
     "skuba": "*",
     "supertest": "^7.0.0"
   },
-  "packageManager": "pnpm@10.7.1",
+  "packageManager": "pnpm@10.10.0",
   "engines": {
     "node": ">=22"
   }

package/template/greeter/.buildkite/pipeline.yml

@@ -5,23 +5,15 @@ agents:
 
 configs:
   plugins:
-    - &aws-sm
-      seek-oss/aws-sm#v2.3.3:
-        env:
-          NPM_READ_TOKEN: arn:aws:secretsmanager:ap-southeast-2:987872074697:secret:npm/npm-read-token
-
     - &docker-ecr-cache
       seek-oss/docker-ecr-cache#v2.2.1:
         cache-on:
-          - .npmrc
           - package.json#.packageManager
           - pnpm-lock.yaml
-        secrets: id=npm,src=/tmp/.npmrc
-
-    - &private-npm
-      seek-oss/private-npm#v1.3.0:
-        env: NPM_READ_TOKEN
-        output-path: /tmp/
+          - pnpm-workspace.yaml
+        secrets:
+          - id=npm,src=/var/lib/buildkite-agent/.npmrc
+          - NPM_TOKEN
 
 steps:
   - label: 🧪 Test & Lint
@@ -34,9 +26,8 @@ steps:
       - pnpm lint
     env:
       GET_GITHUB_TOKEN: please
+      GET_NPM_TOKEN: please
     plugins:
-      - *aws-sm
-      - *private-npm
       - *docker-ecr-cache
       - docker-compose#v5.7.0:
           run: app

package/template/greeter/Dockerfile

@@ -1,4 +1,4 @@
-# syntax=docker/dockerfile:1.14
+# syntax=docker/dockerfile:1.15
 
 FROM public.ecr.aws/docker/library/node:22-alpine AS dev-deps
 
@@ -10,8 +10,9 @@ RUN --mount=type=bind,source=package.json,target=package.json \
 
 WORKDIR /workdir
 
-RUN --mount=type=bind,source=.npmrc,target=.npmrc \
-    --mount=type=bind,source=package.json,target=package.json \
+RUN --mount=type=bind,source=package.json,target=package.json \
     --mount=type=bind,source=pnpm-lock.yaml,target=pnpm-lock.yaml \
+    --mount=type=bind,source=pnpm-workspace.yaml,target=pnpm-workspace.yaml \
     --mount=type=secret,id=npm,dst=/root/.npmrc,required=true \
+    --mount=type=secret,id=NPM_TOKEN,env=NPM_TOKEN,required=true \
     pnpm fetch

package/template/greeter/package.json

@@ -17,9 +17,9 @@
   },
   "devDependencies": {
     "@types/node": "^22.13.10",
-    "skuba": "10.2.0-config-20250421023131"
+    "skuba": "11.0.0-feat-npmrc-to-workspace-20250511013825"
   },
-  "packageManager": "pnpm@10.7.1",
+  "packageManager": "pnpm@10.10.0",
   "engines": {
     "node": ">=22"
   }

package/template/koa-rest-api/.buildkite/pipeline.yml

@@ -3,24 +3,16 @@ agents:
 
 configs:
   plugins:
-    - &aws-sm
-      seek-oss/aws-sm#v2.3.3:
-        env:
-          NPM_READ_TOKEN: arn:aws:secretsmanager:ap-southeast-2:987872074697:secret:npm/npm-read-token
-
     - &docker-ecr-cache
       seek-oss/docker-ecr-cache#v2.2.1: &docker-ecr-cache-defaults
         cache-on:
-          - .npmrc
           - package.json#.packageManager
           - pnpm-lock.yaml
+          - pnpm-workspace.yaml
         dockerfile: Dockerfile.dev-deps
-        secrets: id=npm,src=/tmp/.npmrc
-
-    - &private-npm
-      seek-oss/private-npm#v1.3.0:
-        env: NPM_READ_TOKEN
-        output-path: /tmp/
+        secrets:
+          - id=npm,src=/var/lib/buildkite-agent/.npmrc
+          - NPM_TOKEN
 
   base-steps:
     - &deploy
@@ -34,10 +26,10 @@ configs:
 steps:
   - label: 🧖‍♀️ Warm Prod
     command: ':'
+    env:
+      GET_NPM_TOKEN: please
     key: warm-prod
     plugins:
-      - *aws-sm
-      - *private-npm
       - seek-oss/docker-ecr-cache#v2.2.1:
           <<: *docker-ecr-cache-defaults
           skip-pull-from-cache: true
@@ -53,9 +45,8 @@ steps:
     depends_on: warm-prod
     env:
       GET_GITHUB_TOKEN: please
+      GET_NPM_TOKEN: please
     plugins:
-      - *aws-sm
-      - *private-npm
       - *docker-ecr-cache
       - docker-compose#v5.7.0:
           run: app
@@ -66,9 +57,9 @@ steps:
 
   - label: 📦 Build & Package
     depends_on: warm-prod
+    env:
+      GET_NPM_TOKEN: please
     plugins:
-      - *aws-sm
-      - *private-npm
       - *docker-ecr-cache
       - seek-jobs/gantry#v4.0.0:
           command: build

package/template/koa-rest-api/Dockerfile.dev-deps

@@ -1,4 +1,4 @@
-# syntax=docker/dockerfile:1.14
+# syntax=docker/dockerfile:1.15
 
 FROM public.ecr.aws/docker/library/node:22-alpine AS dev-deps
 
@@ -10,8 +10,9 @@ RUN --mount=type=bind,source=package.json,target=package.json \
 
 WORKDIR /workdir
 
-RUN --mount=type=bind,source=.npmrc,target=.npmrc \
-    --mount=type=bind,source=package.json,target=package.json \
+RUN --mount=type=bind,source=package.json,target=package.json \
     --mount=type=bind,source=pnpm-lock.yaml,target=pnpm-lock.yaml \
+    --mount=type=bind,source=pnpm-workspace.yaml,target=pnpm-workspace.yaml \
     --mount=type=secret,id=npm,dst=/root/.npmrc,required=true \
+    --mount=type=secret,id=NPM_TOKEN,env=NPM_TOKEN,required=true \
     pnpm fetch

package/template/koa-rest-api/package.json

@@ -44,7 +44,7 @@
     "skuba": "*",
     "supertest": "^7.0.0"
   },
-  "packageManager": "pnpm@10.7.1",
+  "packageManager": "pnpm@10.10.0",
   "engines": {
     "node": ">=22"
   }

package/template/lambda-sqs-worker-cdk/.buildkite/pipeline.yml

@@ -3,23 +3,15 @@ agents:
 
 configs:
   plugins:
-    - &aws-sm
-      seek-oss/aws-sm#v2.3.3:
-        env:
-          NPM_READ_TOKEN: arn:aws:secretsmanager:ap-southeast-2:987872074697:secret:npm/npm-read-token
-
     - &docker-ecr-cache
       seek-oss/docker-ecr-cache#v2.2.1: &docker-ecr-cache-defaults
         cache-on:
-          - .npmrc
           - package.json#.packageManager
           - pnpm-lock.yaml
-        secrets: id=npm,src=/tmp/.npmrc
-
-    - &private-npm
-      seek-oss/private-npm#v1.3.0:
-        env: NPM_READ_TOKEN
-        output-path: /tmp/
+          - pnpm-workspace.yaml
+        secrets:
+          - id=npm,src=/var/lib/buildkite-agent/.npmrc
+          - NPM_TOKEN
 
   base-steps:
     - &deploy
@@ -30,8 +22,6 @@ configs:
         - pnpm run deploy
       concurrency: 1
       plugins:
-        - *aws-sm
-        - *private-npm
         - *docker-ecr-cache
         - docker-compose#v5.7.0:
             dependencies: false
@@ -59,9 +49,8 @@ steps:
       - pnpm lint
     env:
       GET_GITHUB_TOKEN: please
+      GET_NPM_TOKEN: please
     plugins:
-      - *aws-sm
-      - *private-npm
       - *docker-ecr-cache
       - docker-compose#v5.7.0:
           run: app
@@ -73,11 +62,11 @@ steps:
   - agents:
       queue: <%- devBuildkiteQueueName %>
     branches: '!renovate-*'
+    env:
+      GET_NPM_TOKEN: please
     label: 🧖‍♀️ Warm Dev
     command: ':'
     plugins:
-      - *aws-sm
-      - *private-npm
       - seek-oss/docker-ecr-cache#v2.2.1:
           <<: *docker-ecr-cache-defaults
           skip-pull-from-cache: true
@@ -92,6 +81,7 @@ steps:
       queue: <%- devBuildkiteQueueName %>
     env:
       ENVIRONMENT: dev
+      GET_NPM_TOKEN: please
     label: 🤞 Deploy Dev
     concurrency_group: '<%- repoName %>/deploy/dev'
     key: deploy-dev
@@ -99,6 +89,7 @@ steps:
   - <<: *deploy
     env:
       ENVIRONMENT: prod
+      GET_NPM_TOKEN: please
     label: 🚀 Deploy Prod
     branches: ${BUILDKITE_PIPELINE_DEFAULT_BRANCH}
     concurrency_group: '<%- repoName %>/deploy/prod'

package/template/lambda-sqs-worker-cdk/Dockerfile

@@ -1,4 +1,4 @@
-# syntax=docker/dockerfile:1.14
+# syntax=docker/dockerfile:1.15
 
 FROM public.ecr.aws/docker/library/node:22-alpine AS dev-deps
 
@@ -13,8 +13,9 @@ RUN --mount=type=bind,source=package.json,target=package.json \
 
 WORKDIR /workdir
 
-RUN --mount=type=bind,source=.npmrc,target=.npmrc \
-    --mount=type=bind,source=package.json,target=package.json \
+RUN --mount=type=bind,source=package.json,target=package.json \
     --mount=type=bind,source=pnpm-lock.yaml,target=pnpm-lock.yaml \
+    --mount=type=bind,source=pnpm-workspace.yaml,target=pnpm-workspace.yaml \
     --mount=type=secret,id=npm,dst=/root/.npmrc,required=true \
+    --mount=type=secret,id=NPM_TOKEN,env=NPM_TOKEN,required=true \
     pnpm fetch

package/template/lambda-sqs-worker-cdk/infra/appStack.ts

@@ -1,3 +1,4 @@
+import { containsSkipDirective } from '@seek/aws-codedeploy-hooks';
 import { LambdaDeployment } from '@seek/aws-codedeploy-infra';
 import {
   Duration,
@@ -103,6 +104,12 @@ export class AppStack extends Stack {
         // https://nodejs.org/api/cli.html#cli_node_options_options
         NODE_OPTIONS: '--enable-source-maps',
         DESTINATION_SNS_TOPIC_ARN: destinationTopic.topicArn,
+
+        ...(containsSkipDirective(process.env.BUILDKITE_MESSAGE, 'smoke')
+          ? {
+              SKIP_SMOKE: 'true',
+            }
+          : {}),
       },
       // https://github.com/aws/aws-cdk/issues/28237
       // This forces the lambda to be updated on every deployment

package/template/lambda-sqs-worker-cdk/package.json

@@ -17,6 +17,7 @@
     "@aws-sdk/client-codedeploy": "^3.363.0",
     "@aws-sdk/client-lambda": "^3.363.0",
     "@aws-sdk/client-sns": "^3.363.0",
+    "@seek/aws-codedeploy-hooks": "^1.2.0",
     "@seek/logger": "^9.0.0",
     "datadog-lambda-js": "^10.0.0",
     "dd-trace": "^5.0.0",
@@ -36,9 +37,9 @@
     "constructs": "^10.0.17",
     "datadog-cdk-constructs-v2": "^2.0.0",
     "pino-pretty": "^13.0.0",
-    "skuba": "10.2.0-config-20250421023131"
+    "skuba": "11.0.0-feat-npmrc-to-workspace-20250511013825"
   },
-  "packageManager": "pnpm@10.7.1",
+  "packageManager": "pnpm@10.10.0",
   "engines": {
     "node": ">=22"
   }

package/template/lambda-sqs-worker-cdk/src/app.ts

@@ -1,5 +1,6 @@
 import 'skuba-dive/register';
 
+import { isLambdaHook } from '@seek/aws-codedeploy-hooks';
 import type { SQSEvent } from 'aws-lambda';
 
 import { createHandler } from 'src/framework/handler';
@@ -17,10 +18,16 @@ const smokeTest = async () => {
   await Promise.all([scoringService.smokeTest(), sendPipelineEvent({}, true)]);
 };
 
-export const handler = createHandler<SQSEvent>(async (event) => {
+export const handler = createHandler<SQSEvent>(async (event, ctx) => {
   // Treat an empty object as our smoke test event.
-  if (!Object.keys(event).length) {
-    logger.debug('Received smoke test request');
+  if (!Object.entries(event).length) {
+    if (process.env.SKIP_SMOKE && isLambdaHook(event, ctx)) {
+      // Expedite deployment even if dependencies are unhealthy.
+      return;
+    }
+
+    // Run dependency checks otherwise.
+    logger.debug('Smoke test event received');
     return smokeTest();
   }
 

package/template/lambda-sqs-worker-cdk/src/framework/handler.ts

@@ -1,12 +1,9 @@
+import type { Context as LambdaContext } from 'aws-lambda';
 import { datadog } from 'datadog-lambda-js';
 
 import { config } from 'src/config';
 import { logger, loggerContext } from 'src/framework/logging';
 
-interface LambdaContext {
-  awsRequestId: string;
-}
-
 type Handler<Event, Output> = (
   event: Event,
   ctx: LambdaContext,
@@ -24,12 +21,12 @@ const withDatadog = <Event, Output = unknown>(
   config.metrics ? (datadog(fn) as Handler<Event, Output>) : fn;
 
 export const createHandler = <Event, Output = unknown>(
-  fn: (event: Event) => Promise<Output>,
+  fn: (event: Event, ctx: LambdaContext) => Promise<Output>,
 ) =>
-  withDatadog<Event>((event, { awsRequestId }) =>
-    loggerContext.run({ awsRequestId }, async () => {
+  withDatadog<Event>((event, ctx) =>
+    loggerContext.run({ awsRequestId: ctx.awsRequestId }, async () => {
       try {
-        const output = await fn(event);
+        const output = await fn(event, ctx);
 
         logger.debug('Function succeeded');
 

package/template/oss-npm-package/_package.json

@@ -38,9 +38,9 @@
     "commitizen": "^4.2.4",
     "skuba": "*"
   },
-  "packageManager": "pnpm@8.9.0",
+  "packageManager": "pnpm@10.7.0",
   "engines": {
-    "node": ">=18.12"
+    "node": ">=20.9.0"
   },
   "publishConfig": {
     "provenance": true

package/template/private-npm-package/_package.json

@@ -38,7 +38,7 @@
     "commitizen": "^4.2.4",
     "skuba": "*"
   },
-  "packageManager": "pnpm@8.15.1",
+  "packageManager": "pnpm@10.7.0",
   "engines": {
     "node": ">=22"
   }

package/lib/cli/lint/internalLints/upgrade/patches/7.3.1/moveNpmrcOutOfIgnoreManagedSection.d.ts

@@ -1,2 +0,0 @@
-import type { PatchReturnType } from '../..';
-export declare const tryMoveNpmrcOutOfIgnoreManagedSection: (type: ".gitignore" | ".dockerignore") => ({ mode, dir }: import("../..").PatchConfig) => Promise<PatchReturnType>;

package/lib/cli/lint/internalLints/upgrade/patches/7.3.1/moveNpmrcOutOfIgnoreManagedSection.js

@@ -1,95 +0,0 @@
-"use strict";
-var __create = Object.create;
-var __defProp = Object.defineProperty;
-var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
-var __getOwnPropNames = Object.getOwnPropertyNames;
-var __getProtoOf = Object.getPrototypeOf;
-var __hasOwnProp = Object.prototype.hasOwnProperty;
-var __export = (target, all) => {
-  for (var name in all)
-    __defProp(target, name, { get: all[name], enumerable: true });
-};
-var __copyProps = (to, from, except, desc) => {
-  if (from && typeof from === "object" || typeof from === "function") {
-    for (let key of __getOwnPropNames(from))
-      if (!__hasOwnProp.call(to, key) && key !== except)
-        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
-  }
-  return to;
-};
-var __toESM = (mod, isNodeMode, target) => (target = mod != null ? __create(__getProtoOf(mod)) : {}, __copyProps(
-  // If the importer is in node compatibility mode or this is not an ESM
-  // file that has been converted to a CommonJS file using a Babel-
-  // compatible transform (i.e. "__esModule" has not been set), then set
-  // "default" to the CommonJS "module.exports" for node compatibility.
-  isNodeMode || !mod || !mod.__esModule ? __defProp(target, "default", { value: mod, enumerable: true }) : target,
-  mod
-));
-var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
-var moveNpmrcOutOfIgnoreManagedSection_exports = {};
-__export(moveNpmrcOutOfIgnoreManagedSection_exports, {
-  tryMoveNpmrcOutOfIgnoreManagedSection: () => tryMoveNpmrcOutOfIgnoreManagedSection
-});
-module.exports = __toCommonJS(moveNpmrcOutOfIgnoreManagedSection_exports);
-var import_path = __toESM(require("path"));
-var import_util = require("util");
-var import_fs_extra = __toESM(require("fs-extra"));
-var import_logging = require("../../../../../../utils/logging");
-var import_npmrc = require("../../../../../../utils/npmrc");
-var import_project = require("../../../../../configure/analysis/project");
-const NPMRC_IGNORE_SECTION = `
-
-# Ignore .npmrc. This is no longer managed by skuba as pnpm projects use a managed .npmrc.
-# IMPORTANT: if migrating to pnpm, remove this line and add an .npmrc IN THE SAME COMMIT.
-# You can use \`skuba format\` to generate the file or otherwise commit an empty file.
-# Doing so will conflict with a local .npmrc and make it more difficult to unintentionally commit auth secrets.
-.npmrc
-`;
-const moveNpmrcOutOfIgnoreManagedSection = async (mode, dir, fileName) => {
-  const readFile = (0, import_project.createDestinationFileReader)(dir);
-  const ignoreFile = await readFile(fileName);
-  if (!ignoreFile) {
-    return { result: "skip", reason: `no ${fileName} file found` };
-  }
-  let isIgnored;
-  let currentlyInManagedSection = false;
-  for (const line of ignoreFile.split("\n")) {
-    if (line.trim() === "# managed by skuba") {
-      currentlyInManagedSection = true;
-    } else if (line.trim() === "# end managed by skuba") {
-      currentlyInManagedSection = false;
-    }
-    if (line.trim() === ".npmrc" || line.trim() === "/.npmrc") {
-      isIgnored = { inManaged: currentlyInManagedSection };
-    }
-    if (line.trim() === "!.npmrc" || line.trim() === "!/.npmrc") {
-      isIgnored = void 0;
-    }
-  }
-  if (isIgnored && !isIgnored.inManaged) {
-    return { result: "skip", reason: "already ignored in unmanaged section" };
-  }
-  if (!isIgnored) {
-    return { result: "skip", reason: "not ignored" };
-  }
-  if (mode === "lint") {
-    return { result: "apply" };
-  }
-  const newIgnoreFile = ignoreFile.split("\n").filter((line) => !import_npmrc.NPMRC_LINES.includes(line.trim())).join("\n").trim() + NPMRC_IGNORE_SECTION;
-  await import_fs_extra.default.promises.writeFile(import_path.default.join(dir, fileName), newIgnoreFile);
-  return { result: "apply" };
-};
-const tryMoveNpmrcOutOfIgnoreManagedSection = (type) => async ({ mode, dir = process.cwd() }) => {
-  try {
-    return await moveNpmrcOutOfIgnoreManagedSection(mode, dir, type);
-  } catch (err) {
-    import_logging.log.warn(`Failed to move .npmrc out of ${type} managed sections.`);
-    import_logging.log.subtle((0, import_util.inspect)(err));
-    return { result: "skip", reason: "due to an error" };
-  }
-};
-// Annotate the CommonJS export names for ESM import in node:
-0 && (module.exports = {
-  tryMoveNpmrcOutOfIgnoreManagedSection
-});
-//# sourceMappingURL=moveNpmrcOutOfIgnoreManagedSection.js.map

package/lib/cli/lint/internalLints/upgrade/patches/7.3.1/moveNpmrcOutOfIgnoreManagedSection.js.map

@@ -1,7 +0,0 @@
-{
-  "version": 3,
-  "sources": ["../../../../../../../src/cli/lint/internalLints/upgrade/patches/7.3.1/moveNpmrcOutOfIgnoreManagedSection.ts"],
-  "sourcesContent": ["import path from 'path';\nimport { inspect } from 'util';\n\nimport fs from 'fs-extra';\n\nimport type { PatchFunction, PatchReturnType } from '../..';\nimport { log } from '../../../../../../utils/logging';\nimport { NPMRC_LINES } from '../../../../../../utils/npmrc';\nimport { createDestinationFileReader } from '../../../../../configure/analysis/project';\n\nconst NPMRC_IGNORE_SECTION = `\n\n# Ignore .npmrc. This is no longer managed by skuba as pnpm projects use a managed .npmrc.\n# IMPORTANT: if migrating to pnpm, remove this line and add an .npmrc IN THE SAME COMMIT.\n# You can use \\`skuba format\\` to generate the file or otherwise commit an empty file.\n# Doing so will conflict with a local .npmrc and make it more difficult to unintentionally commit auth secrets.\n.npmrc\n`;\n\nconst moveNpmrcOutOfIgnoreManagedSection = async (\n  mode: 'format' | 'lint',\n  dir: string,\n  fileName: '.gitignore' | '.dockerignore',\n): Promise<PatchReturnType> => {\n  const readFile = createDestinationFileReader(dir);\n\n  const ignoreFile = await readFile(fileName);\n\n  if (!ignoreFile) {\n    return { result: 'skip', reason: `no ${fileName} file found` };\n  }\n\n  let isIgnored: { inManaged: boolean } | undefined;\n  let currentlyInManagedSection = false;\n\n  for (const line of ignoreFile.split('\\n')) {\n    if (line.trim() === '# managed by skuba') {\n      currentlyInManagedSection = true;\n    } else if (line.trim() === '# end managed by skuba') {\n      currentlyInManagedSection = false;\n    }\n\n    if (line.trim() === '.npmrc' || line.trim() === '/.npmrc') {\n      isIgnored = { inManaged: currentlyInManagedSection };\n    }\n\n    if (line.trim() === '!.npmrc' || line.trim() === '!/.npmrc') {\n      isIgnored = undefined;\n    }\n  }\n\n  if (isIgnored && !isIgnored.inManaged) {\n    return { result: 'skip', reason: 'already ignored in unmanaged section' };\n  }\n\n  if (!isIgnored) {\n    return { result: 'skip', reason: 'not ignored' };\n  }\n\n  if (mode === 'lint') {\n    return { result: 'apply' };\n  }\n\n  const newIgnoreFile =\n    ignoreFile\n      .split('\\n')\n      .filter((line) => !NPMRC_LINES.includes(line.trim()))\n      .join('\\n')\n      .trim() + NPMRC_IGNORE_SECTION;\n\n  await fs.promises.writeFile(path.join(dir, fileName), newIgnoreFile);\n\n  return { result: 'apply' };\n};\n\nexport const tryMoveNpmrcOutOfIgnoreManagedSection = (\n  type: '.gitignore' | '.dockerignore',\n) =>\n  (async ({ mode, dir = process.cwd() }) => {\n    try {\n      return await moveNpmrcOutOfIgnoreManagedSection(mode, dir, type);\n    } catch (err) {\n      log.warn(`Failed to move .npmrc out of ${type} managed sections.`);\n      log.subtle(inspect(err));\n      return { result: 'skip', reason: 'due to an error' };\n    }\n  }) satisfies PatchFunction;\n"],
-  "mappings": ";;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,kBAAiB;AACjB,kBAAwB;AAExB,sBAAe;AAGf,qBAAoB;AACpB,mBAA4B;AAC5B,qBAA4C;AAE5C,MAAM,uBAAuB;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAS7B,MAAM,qCAAqC,OACzC,MACA,KACA,aAC6B;AAC7B,QAAM,eAAW,4CAA4B,GAAG;AAEhD,QAAM,aAAa,MAAM,SAAS,QAAQ;AAE1C,MAAI,CAAC,YAAY;AACf,WAAO,EAAE,QAAQ,QAAQ,QAAQ,MAAM,QAAQ,cAAc;AAAA,EAC/D;AAEA,MAAI;AACJ,MAAI,4BAA4B;AAEhC,aAAW,QAAQ,WAAW,MAAM,IAAI,GAAG;AACzC,QAAI,KAAK,KAAK,MAAM,sBAAsB;AACxC,kCAA4B;AAAA,IAC9B,WAAW,KAAK,KAAK,MAAM,0BAA0B;AACnD,kCAA4B;AAAA,IAC9B;AAEA,QAAI,KAAK,KAAK,MAAM,YAAY,KAAK,KAAK,MAAM,WAAW;AACzD,kBAAY,EAAE,WAAW,0BAA0B;AAAA,IACrD;AAEA,QAAI,KAAK,KAAK,MAAM,aAAa,KAAK,KAAK,MAAM,YAAY;AAC3D,kBAAY;AAAA,IACd;AAAA,EACF;AAEA,MAAI,aAAa,CAAC,UAAU,WAAW;AACrC,WAAO,EAAE,QAAQ,QAAQ,QAAQ,uCAAuC;AAAA,EAC1E;AAEA,MAAI,CAAC,WAAW;AACd,WAAO,EAAE,QAAQ,QAAQ,QAAQ,cAAc;AAAA,EACjD;AAEA,MAAI,SAAS,QAAQ;AACnB,WAAO,EAAE,QAAQ,QAAQ;AAAA,EAC3B;AAEA,QAAM,gBACJ,WACG,MAAM,IAAI,EACV,OAAO,CAAC,SAAS,CAAC,yBAAY,SAAS,KAAK,KAAK,CAAC,CAAC,EACnD,KAAK,IAAI,EACT,KAAK,IAAI;AAEd,QAAM,gBAAAA,QAAG,SAAS,UAAU,YAAAC,QAAK,KAAK,KAAK,QAAQ,GAAG,aAAa;AAEnE,SAAO,EAAE,QAAQ,QAAQ;AAC3B;AAEO,MAAM,wCAAwC,CACnD,SAEC,OAAO,EAAE,MAAM,MAAM,QAAQ,IAAI,EAAE,MAAM;AACxC,MAAI;AACF,WAAO,MAAM,mCAAmC,MAAM,KAAK,IAAI;AAAA,EACjE,SAAS,KAAK;AACZ,uBAAI,KAAK,gCAAgC,IAAI,oBAAoB;AACjE,uBAAI,WAAO,qBAAQ,GAAG,CAAC;AACvB,WAAO,EAAE,QAAQ,QAAQ,QAAQ,kBAAkB;AAAA,EACrD;AACF;",
-  "names": ["fs", "path"]
-}

package/lib/config/load.d.ts

@@ -1,2 +0,0 @@
-import { type SkubaConfig } from './types';
-export declare const loadSkubaConfig: (cwd?: string) => Promise<SkubaConfig>;