v11y-check 0.13.0 → 0.14.1

package/.readyup/kits/default.js

@@ -0,0 +1,83 @@
+/** @noformat — @generated. Do not edit. Compiled by rdy. */
+/* eslint-disable */
+export const __readyupVersion = "0.23.0";
+
+
+// .readyup/kits/default.ts
+import { existsSync } from "node:fs";
+import { join } from "node:path";
+import { defineRdyKit } from "readyup";
+import { fileExists, fileMatchesHash, hasDevDependency, hasMinDevDependencyVersion } from "readyup/check-utils";
+var AUDIT_WORKFLOW_HASH = "cdcab39d794ed7ec5ea45e8f3c887eb5d15edb63eab65e515714556933d9b03f";
+var default_default = defineRdyKit({
+  checklists: [
+    {
+      name: "v11y-check",
+      checks: [
+        // -- Setup ---------------------------------------------------------------
+        {
+          name: "v11y-check in devDependencies",
+          severity: "error",
+          check: () => hasDevDependency("v11y-check"),
+          fix: "pnpm add --save-dev v11y-check",
+          checks: [
+            {
+              get name() {
+                return `v11y-check >= ${getMinVersion()}`;
+              },
+              severity: "error",
+              check: () => hasMinDevDependencyVersion("v11y-check", getMinVersion(), {
+                exempt: (range) => range.startsWith("workspace:")
+              }),
+              get fix() {
+                return `pnpm add --save-dev v11y-check@^${getMinVersion()}`;
+              }
+            }
+          ]
+        },
+        // -- Audit-ci config migration -------------------------------------------
+        {
+          name: "audit-ci configs are under .config/audit-ci/",
+          severity: "warn",
+          skip: skipLegacyAuditCiCheck,
+          check: noLegacyAuditCiDirectory,
+          fix: "Move audit-ci configs from .audit-ci/ to .config/audit-ci/ and update references"
+        },
+        // -- Audit workflow ------------------------------------------------------
+        {
+          name: "audit.yaml workflow exists",
+          severity: "warn",
+          check: () => fileExists(".github/workflows/audit.yaml"),
+          fix: "Add .github/workflows/audit.yaml using the audit workflow template",
+          checks: [
+            {
+              name: "audit.yaml matches template",
+              severity: "warn",
+              check: () => fileMatchesHash(".github/workflows/audit.yaml", AUDIT_WORKFLOW_HASH),
+              fix: "Replace .github/workflows/audit.yaml with the current template at williamthorsen/node-monorepo-tools:.github/workflows/audit.yaml"
+            }
+          ]
+        }
+      ]
+    }
+  ]
+});
+function getMinVersion() {
+  const picked = { "version": "0.14.1" };
+  if (typeof picked.version !== "string") {
+    throw new TypeError("v11y-check/package.json: 'version' must be a string");
+  }
+  return picked.version;
+}
+function noLegacyAuditCiDirectory() {
+  return !existsSync(join(process.cwd(), ".audit-ci"));
+}
+function skipLegacyAuditCiCheck() {
+  return !existsSync(join(process.cwd(), ".audit-ci")) ? "no legacy .audit-ci/ directory" : false;
+}
+export {
+  AUDIT_WORKFLOW_HASH,
+  default_default as default,
+  noLegacyAuditCiDirectory,
+  skipLegacyAuditCiCheck
+};

package/.readyup/manifest.json

@@ -0,0 +1,16 @@
+{
+  "version": 1,
+  "kits": [
+    {
+      "checklists": [
+        "v11y-check"
+      ],
+      "name": "default",
+      "path": "kits/default.js",
+      "readyupVersion": "0.23.0",
+      "source": "kits/default.ts",
+      "sourceHash": "7bf5eedb",
+      "targetHash": "52625443"
+    }
+  ]
+}

package/README.md

@@ -2,17 +2,7 @@
 
 Wraps [audit-ci](https://github.com/IBM/audit-ci) with a richer config model, typed JSON source of truth, and a sync workflow that automates allowlist management.
 
-<!-- section:release-notes -->
-## Release notes — v0.13.0 (2026-08-03)
-
-### 🎉 Features
-
-- Publish nmr's readyup kit with a test-tier conformance check (#580)
-
-  `@williamthorsen/nmr` is now bundled with ReadyUp kits that check a repo's alignment with `nmr` requirements and recommendations.
-
-  `rdy run --from npm:@williamthorsen/nmr` checks the repo against the kits without prior configuration. Once the package is added to the ReadyUp config, `rdy run --packages` will run the `nmr` kits along with those of any other registered package. Requires `readyup` v0.23 or greater.
-<!-- /section:release-notes -->
+<!-- section:release-notes --><!-- /section:release-notes -->
 
 ## Installation
 
@@ -135,6 +125,31 @@ Other options:
 
 The scaffolded workflow triggers on pull requests to `main`/`next`, on a daily schedule, and on manual `workflow_dispatch`. Commit the file into your repository so the caller runs in CI. If the reusable workflow's caller-side requirements change (for example, the tag bumps), re-run `v11y init --force` to refresh the file.
 
+## Readiness checks
+
+v11y-check publishes a [readyup](https://www.npmjs.com/package/readyup) kit that checks a consuming repo against the release it has installed: that v11y-check is a devDependency at or above the current version, that audit-ci configs sit under `.config/audit-ci/`, and that `.github/workflows/audit.yaml` matches the template this package scaffolds. The kit ships inside the package, so it checks against the version you installed rather than whatever a repository ref happens to point at.
+
+Add `readyup` as a devDependency, then name v11y-check in its config:
+
+```ts
+// .config/readyup.config.ts
+import { defineRdyConfig } from 'readyup';
+
+export default defineRdyConfig({
+  packages: ['v11y-check'],
+});
+```
+
+```bash
+rdy run --packages              # every kit each listed package publishes
+rdy run --from npm:v11y-check   # v11y-check's kit alone, without the config entry
+rdy list --from npm:v11y-check  # what v11y-check publishes
+```
+
+`--packages` is the form that survives v11y-check publishing further kits. Every form needs `readyup` 0.23 or later, and `v11y-check` as a _direct_ devDependency: a strict pnpm layout links nothing else into the project, so a transitive copy is unreachable.
+
+The kit is no longer reachable through `rdy run --from github:williamthorsen/node-monorepo-tools`. Repos still using that form should switch to one of the invocations above.
+
 ## Migration from v0.3
 
 v0.4 introduces breaking changes to the config schema:

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "v11y-check",
-  "version": "0.13.0",
+  "version": "0.14.1",
   "private": false,
   "description": "Wrap audit-ci with a richer config model, typed JSON source of truth, and sync workflow",
   "keywords": [
@@ -33,6 +33,8 @@
     "v11y-check": "bin/v11y.js"
   },
   "files": [
+    ".readyup/kits/*.js",
+    ".readyup/manifest.json",
     "bin",
     "dist",
     "templates"
@@ -40,10 +42,16 @@
   "dependencies": {
     "audit-ci": "7.1.0",
     "zod": "4.4.3",
-    "@williamthorsen/nmr-core": "0.9.0"
+    "@williamthorsen/nmr-core": "0.9.1"
+  },
+  "devDependencies": {
+    "readyup": "0.23.0"
   },
   "engines": {
     "node": ">=24"
   },
-  "scripts": {}
+  "scripts": {
+    "build:post": "rdy compile",
+    "build:pre": "rdy verify"
+  }
 }