vouchington-tooling 0.34.0 → 0.36.0

package/dist/gha-post-review/claude-token.mjs

@@ -1,4 +1,4 @@
-import { ReviewPayloadError as PostReviewError } from '../gha-review-payload/index.mjs';
+import { ReviewPayloadError as PostReviewError } from "../gha-review-payload/index.mjs";
 export const CLAUDE_OIDC_AUDIENCE = 'claude-code-github-action';
 export const CLAUDE_APP_TOKEN_EXCHANGE_URL = 'https://api.anthropic.com/api/github/github-app-token-exchange';
 // Anthropic rejects the exchange unless custom permissions include contents

package/dist/gha-post-review/cli.mjs

@@ -1,5 +1,5 @@
 import { fileURLToPath } from 'node:url';
-import { writePostedOutput, postReviewFromEnv } from './github.mjs';
+import { writePostedOutput, postReviewFromEnv } from "./github.mjs";
 export async function runPostReviewCli(env = process.env) {
     try {
         const result = await postReviewFromEnv(env);

package/dist/gha-post-review/github.mjs

@@ -1,12 +1,12 @@
 import { execFileSync } from 'node:child_process';
 import { appendFileSync } from 'node:fs';
-import { ReviewPayloadError } from '../gha-review-payload/index.mjs';
-import { readRegularReviewPayload } from '../gha-review-payload/index.mjs';
-import { createActionsClaudeTokenIo, withClaudeAppToken } from './claude-token.mjs';
-import { runPostReview } from './post.mjs';
-import { createGhPostReviewIo } from './pull-io.mjs';
-import { requireEnv, resolveReviewPostToken } from './token.mjs';
-export { createGhPostReviewIo, postWithGh } from './pull-io.mjs';
+import { ReviewPayloadError } from "../gha-review-payload/index.mjs";
+import { readRegularReviewPayload } from "../gha-review-payload/index.mjs";
+import { createActionsClaudeTokenIo, withClaudeAppToken } from "./claude-token.mjs";
+import { runPostReview } from "./post.mjs";
+import { createGhPostReviewIo } from "./pull-io.mjs";
+import { requireEnv, resolveReviewPostToken } from "./token.mjs";
+export { createGhPostReviewIo, postWithGh } from "./pull-io.mjs";
 export function createGhExec(exec = execFileSync) {
     return (args, options) => exec('gh', [...args], {
         encoding: 'utf8',

package/dist/gha-post-review/index.mjs

@@ -1,8 +1,8 @@
-export { MAX_COMMENTS, MAX_PAYLOAD_BYTES, PostReviewError, runPostReview } from './post.mjs';
-export { requireEnv, resolveReviewPostToken } from './token.mjs';
+export { MAX_COMMENTS, MAX_PAYLOAD_BYTES, PostReviewError, runPostReview } from "./post.mjs";
+export { requireEnv, resolveReviewPostToken } from "./token.mjs";
 /** @deprecated Import Claude helpers from vouchington-tooling/gha-claude-post-review. */
-export { CLAUDE_APP_TOKEN_EXCHANGE_URL, CLAUDE_OIDC_AUDIENCE, CLAUDE_POSTER_PERMISSIONS, GITHUB_INSTALLATION_TOKEN_URL, createActionsClaudeTokenIo, mintClaudeAppToken, oidcTokenRequest, revokeClaudeAppToken, withClaudeAppToken, } from './claude-token.mjs';
-export { createGhExec, createGhPostReviewIo, postReviewWithTokenFromEnv, postWithGh, writePostedOutput, } from './github.mjs';
+export { CLAUDE_APP_TOKEN_EXCHANGE_URL, CLAUDE_OIDC_AUDIENCE, CLAUDE_POSTER_PERMISSIONS, GITHUB_INSTALLATION_TOKEN_URL, createActionsClaudeTokenIo, mintClaudeAppToken, oidcTokenRequest, revokeClaudeAppToken, withClaudeAppToken, } from "./claude-token.mjs";
+export { createGhExec, createGhPostReviewIo, postReviewWithTokenFromEnv, postWithGh, writePostedOutput, } from "./github.mjs";
 /** @deprecated Select an explicit posting adapter. */
-export { postClaudeReviewFromEnv, postReviewFromEnv } from './github.mjs';
-export { runPostReviewCli } from './cli.mjs';
+export { postClaudeReviewFromEnv, postReviewFromEnv } from "./github.mjs";
+export { runPostReviewCli } from "./cli.mjs";

package/dist/gha-post-review/post.mjs

@@ -1,11 +1,11 @@
-import { ReviewPayloadError, indexReviewFiles, parseReviewPayload, remapReviewComments, } from '../gha-review-payload/index.mjs';
+import { ReviewPayloadError, indexReviewFiles, parseReviewPayload, remapReviewComments, } from "../gha-review-payload/index.mjs";
 export { 
 // oxlint-disable-next-line no-mistakes/ts-no-export-renaming -- preserve the package's established public compatibility name
 MAX_REVIEW_COMMENTS as MAX_COMMENTS, 
 // oxlint-disable-next-line no-mistakes/ts-no-export-renaming -- preserve the package's established public compatibility name
 MAX_REVIEW_PAYLOAD_BYTES as MAX_PAYLOAD_BYTES, 
 // oxlint-disable-next-line no-mistakes/ts-no-export-renaming -- preserve the package's established public compatibility name
-ReviewPayloadError as PostReviewError, } from '../gha-review-payload/index.mjs';
+ReviewPayloadError as PostReviewError, } from "../gha-review-payload/index.mjs";
 /**
  * Posts a validated review, optionally prefixing the body with a provider attribution line.
  * The attribution is cosmetic (final posted text only); it never affects staged payload bytes.

package/dist/gha-post-review/pull-io.mjs

@@ -1,5 +1,5 @@
 import { rmSync } from 'node:fs';
-import { parseReviewFilesJson, ReviewPayloadError } from '../gha-review-payload/index.mjs';
+import { parseReviewFilesJson, ReviewPayloadError } from "../gha-review-payload/index.mjs";
 export function postWithGh(repository, prNumber, payload, token, exec) {
     try {
         exec(['api', '--method', 'POST', `repos/${repository}/pulls/${prNumber}/reviews`, '--input', '-'], {

package/dist/gha-post-review/token.mjs

@@ -1,4 +1,4 @@
-import { ReviewPayloadError } from '../gha-review-payload/index.mjs';
+import { ReviewPayloadError } from "../gha-review-payload/index.mjs";
 /** @deprecated Select an explicit posting adapter instead of the legacy token-source router. */
 export function resolveReviewPostToken(env = process.env) {
     const source = env.CODE_REVIEW_TOKEN_SOURCE || 'claude-app';

package/dist/gha-pr-checkpoint/index.mjs

@@ -1,3 +1,3 @@
-export * from './codec.mjs';
-export { selectResumeCheckpoint } from './resume.mjs';
-export { updateExactCheckpoint } from './update.mjs';
+export * from "./codec.mjs";
+export { selectResumeCheckpoint } from "./resume.mjs";
+export { updateExactCheckpoint } from "./update.mjs";

package/dist/gha-pr-checkpoint/resume.mjs

@@ -1,4 +1,4 @@
-import { isTrustedCheckpointComment, sortedCheckpointCandidates, } from './codec.mjs';
+import { isTrustedCheckpointComment, sortedCheckpointCandidates, } from "./codec.mjs";
 export function selectResumeCheckpoint(comments, context, options = {}) {
     const candidates = sortedCheckpointCandidates(comments, options);
     for (const { comment, checkpoint } of candidates) {

package/dist/gha-pr-checkpoint/update.mjs

@@ -1,4 +1,4 @@
-import { isTrustedCheckpointComment, parseCheckpoint, renderCheckpoint, } from './codec.mjs';
+import { isTrustedCheckpointComment, parseCheckpoint, renderCheckpoint, } from "./codec.mjs";
 export function updateExactCheckpoint(comment, context, status, session, options = {}) {
     const checkpoint = parseCheckpoint(comment.body ?? '', options);
     if (!checkpoint ||

package/dist/gha-review-payload/cli.mjs

@@ -1,6 +1,6 @@
 import { fileURLToPath } from 'node:url';
-import { ReviewPayloadError } from './payload.mjs';
-import { stageReviewPayload, writeStagedOutput } from './file.mjs';
+import { ReviewPayloadError } from "./payload.mjs";
+import { stageReviewPayload, writeStagedOutput } from "./file.mjs";
 export function runStageReviewPayloadCli(args) {
     try {
         const [requirement, source, destination] = args;

package/dist/gha-review-payload/file.mjs

@@ -1,6 +1,6 @@
 import { appendFileSync, chmodSync, closeSync, constants, fstatSync, mkdirSync, openSync, readFileSync, rmSync, writeFileSync, } from 'node:fs';
 import { basename, join } from 'node:path';
-import { MAX_REVIEW_PAYLOAD_BYTES, ReviewPayloadError } from './payload.mjs';
+import { MAX_REVIEW_PAYLOAD_BYTES, ReviewPayloadError } from "./payload.mjs";
 /** Reads a bounded regular file through an O_NOFOLLOW descriptor. */
 export function readRegularReviewPayload(source, requirement) {
     let descriptor;

package/dist/gha-review-payload/index.mjs

@@ -1,4 +1,4 @@
-export { MAX_REVIEW_COMMENTS, MAX_REVIEW_PAYLOAD_BYTES, ReviewPayloadError, parseReviewPayload, reviewCommentSubject, } from './payload.mjs';
-export { indexReviewFiles, parsePatchCommentable, parseReviewFilesJson } from './diff.mjs';
-export { nearestReviewLine, remapReviewComments, rewriteSnappedSuggestion, snapReviewNote, } from './remap.mjs';
-export { readRegularReviewPayload, stageReviewPayload, writeStagedOutput } from './file.mjs';
+export { MAX_REVIEW_COMMENTS, MAX_REVIEW_PAYLOAD_BYTES, ReviewPayloadError, parseReviewPayload, reviewCommentSubject, } from "./payload.mjs";
+export { indexReviewFiles, parsePatchCommentable, parseReviewFilesJson } from "./diff.mjs";
+export { nearestReviewLine, remapReviewComments, rewriteSnappedSuggestion, snapReviewNote, } from "./remap.mjs";
+export { readRegularReviewPayload, stageReviewPayload, writeStagedOutput } from "./file.mjs";

package/dist/gha-review-payload/remap.mjs

@@ -1,4 +1,4 @@
-import { ReviewPayloadError } from './payload.mjs';
+import { ReviewPayloadError } from "./payload.mjs";
 export function snapReviewNote(path, line) {
     return `_Regarding \`${path}:${line}\` (not in the diff hunk; posted on the nearest commentable line)._`;
 }

package/dist/gha-runtime-audit/audit.mjs

@@ -1,7 +1,7 @@
-import { parseArray, parseObject, parseRun, parseSample, parseWorkflow, } from './model.mjs';
-import { buildFamilyResults } from './family.mjs';
-import { buildRuntimeResults, violationOrder } from './results.mjs';
-import { isRunInScope, isSelectedWorkflow, matchingWorkflowFilter, resolveRuntimeAuditOptions, } from './scope.mjs';
+import { parseArray, parseObject, parseRun, parseSample, parseWorkflow, } from "./model.mjs";
+import { buildFamilyResults } from "./family.mjs";
+import { buildRuntimeResults, violationOrder } from "./results.mjs";
+import { isRunInScope, isSelectedWorkflow, matchingWorkflowFilter, resolveRuntimeAuditOptions, } from "./scope.mjs";
 async function discoverWorkflows(execute, options) {
     const selected = [];
     for (let page = 1;; page += 1) {

package/dist/gha-runtime-audit/index.mjs

@@ -1,3 +1,3 @@
-export { auditCiJobRuntime } from './audit.mjs';
-export { violationOrder } from './results.mjs';
-export { parseWorkflowNameMatch } from './scope.mjs';
+export { auditCiJobRuntime } from "./audit.mjs";
+export { violationOrder } from "./results.mjs";
+export { parseWorkflowNameMatch } from "./scope.mjs";

package/dist/gha-workspace-policy/docker-options.mjs

@@ -1,4 +1,4 @@
-import { shellTokens } from './shell-tokens.mjs';
+import { shellTokens } from "./shell-tokens.mjs";
 const DOCKER_GLOBAL_FLAG_OPTIONS = new Set(['--debug', '-D', '--help', '--tls', '--tlsverify']);
 const DOCKER_GLOBAL_VALUE_OPTIONS = new Set([
     '--config',

package/dist/gha-workspace-policy/docker-workspace-user.mjs

@@ -1,5 +1,5 @@
-import { dockerOptions } from './docker-options.mjs';
-import { visitRunSteps } from './shared.mjs';
+import { dockerOptions } from "./docker-options.mjs";
+import { visitRunSteps } from "./shared.mjs";
 const WORKSPACE_RE = /(?:\$\{?GITHUB_WORKSPACE\}?|\$\{\{\s*github\.workspace\s*\}\})/iu;
 export function checkDockerWorkspaceUserDocument(file, document, kind, errors) {
     visitRunSteps(document, kind === 'action', (scope, index, step) => {

package/dist/gha-workspace-policy/index.mjs

@@ -1,6 +1,6 @@
-import { checkDockerWorkspaceUserDocument } from './docker-workspace-user.mjs';
-import { ghaFileKind, loadWorkflowDocument } from './shared.mjs';
-import { checkNoSparseCheckoutDocument } from './sparse-checkout.mjs';
+import { checkDockerWorkspaceUserDocument } from "./docker-workspace-user.mjs";
+import { ghaFileKind, loadWorkflowDocument } from "./shared.mjs";
+import { checkNoSparseCheckoutDocument } from "./sparse-checkout.mjs";
 export async function checkGhaWorkspacePolicy(ctx, options = {}) {
     const errors = [];
     if (!ctx.isInsideGitRepo)

package/dist/gha-workspace-policy/shell-tokens.mjs

@@ -1,4 +1,4 @@
-import { consumeCommandSubstitution, consumeGithubExpression, consumeQuotedCharacter, } from './shell-token-modes.mjs';
+import { consumeCommandSubstitution, consumeGithubExpression, consumeQuotedCharacter, } from "./shell-token-modes.mjs";
 export function shellTokens(input) {
     const scan = {
         githubExpression: false,

package/dist/gha-workspace-policy/sparse-checkout.mjs

@@ -1,4 +1,4 @@
-import { visitRunSteps } from './shared.mjs';
+import { visitRunSteps } from "./shared.mjs";
 const SPARSE_CHECKOUT_KEYS = ['sparse-checkout', 'sparse-checkout-cone-mode'];
 const SPARSE_CHECKOUT_COMMANDS = [
     /\bgit\b[^\n;&|]*\bsparse-checkout\s+(?:init|set|add|reapply)\b/iu,

package/dist/github-projects/index.mjs

@@ -1,2 +1,2 @@
-export { auditProjectCompletion, formatProjectAdvisories, formatProjectAdvisoryReport, groupClosedIssuesByProject, } from './project-audit.mjs';
-export { buildIssueProjectItemsArgs, buildProjectItemsArgs, DEFAULT_PROJECT_COMPLETION_REMAINDER, fetchIssueProjectMemberships, findProjectCompletionSiblings, isProjectScopeError, } from './project-query.mjs';
+export { auditProjectCompletion, formatProjectAdvisories, formatProjectAdvisoryReport, groupClosedIssuesByProject, } from "./project-audit.mjs";
+export { buildIssueProjectItemsArgs, buildProjectItemsArgs, DEFAULT_PROJECT_COMPLETION_REMAINDER, fetchIssueProjectMemberships, findProjectCompletionSiblings, isProjectScopeError, } from "./project-query.mjs";

package/dist/github-projects/project-audit.mjs

@@ -1,4 +1,4 @@
-import { DEFAULT_PROJECT_COMPLETION_REMAINDER, fetchIssueProjectMemberships, findProjectCompletionSiblings, } from './project-query.mjs';
+import { DEFAULT_PROJECT_COMPLETION_REMAINDER, fetchIssueProjectMemberships, findProjectCompletionSiblings, } from "./project-query.mjs";
 function splitOwnerRepo(repo) {
     const [owner, name] = repo.split('/');
     if (owner === undefined || name === undefined) {

package/dist/index.mjs

@@ -1,57 +1,57 @@
 /* eslint-disable max-lines -- package entry point enumerates the supported public API. */
-export { linkSkill, readSkillManifest } from './skill-discovery/index.mjs';
-export { HARNESS_IDS, inspectHarnessEnvironment, selectHarnessSession, } from './agent-harness-identity/index.mjs';
-export { codexChildren, codexIdentity, computeTranscriptFacts, formatTranscriptFacts, formatUnavailable, resolveTranscriptFile, runRetrospectiveTranscript, } from './retrospective-transcript/index.mjs';
-export { runRetrospectiveFacts } from './retrospective-facts/index.mjs';
-export { appendJournal, assertSessionId, cleanupSnapshotPartitions, partitionSnapshot, probeBlackboard, readJournal, resolveBlackboardConnection, } from './agent-blackboard/index.mjs';
-export { buildSessionFrictionReport, classifyFrictionObservation, FRICTION_LOG_MAX_EVENTS, isConformingCiFailureBlock, normalizeCommandPrefix, readFrictionLog, recordFriction, } from './session-friction/index.mjs';
-export { EphemeralListenerAttemptsExhaustedError, isRunnerReservedPort, listenOnRunnerUnreservedEphemeralPort, loadRunnerPortPolicy, runnerPortPolicy, validateRunnerPortPolicy, } from './runner-port-policy/index.mjs';
-export { extractAlterTableAddColumnLocations, extractCreateIndexMetadata, extractCreateTableMetadata, extractDefaultFunction, extractDropIndexMetadata, extractFuncCallArgColumnNames, extractMigrationConstraintMetadata, initSqlAst, lineOfUtf8ByteOffset, MissingSqlAstParserError, parseSql, } from './sql-ast/index.mjs';
-export { dollarQuoteEnd, lineOf, maskSqlQuotedText, readDollarQuoteDelimiter, readStringLiteral, splitSqlStatements, sqlFragments, stripSqlComments, } from './sql-scanner/index.mjs';
-export { auditCiJobRuntime, parseWorkflowNameMatch } from './gha-runtime-audit/index.mjs';
-export { checkGhaWorkspacePolicy } from './gha-workspace-policy/index.mjs';
-export { requireUpToDate } from './require-up-to-date/index.mjs';
-export { gitleaksDirectoryScanArguments, runGitleaksDirectoryScan, } from './gitleaks-directory-scan/index.mjs';
-export { astGrepExamplesArguments, compareAstGrepCompanions, runAstGrepExamples, } from './ast-grep-examples/index.mjs';
-export { astGrepPackPaths, astGrepPackPathsFrom } from './ast-grep-pack/index.mjs';
-export { createVitestBlobManifest, createVitestReportAttempt, inspectVitestBlobBundle, parseVitestBlobManifest, parseVitestReportAttempt, readVitestReportAttempts, serializeVitestBlobManifest, serializeVitestReportAttempt, VITEST_BLOB_MANIFEST_FILENAME, VITEST_BLOB_MANIFEST_VERSION, VITEST_REPORT_ATTEMPT_PREFIX, VITEST_REPORT_ATTEMPT_VERSION, vitestBlobBundlePaths, writeVitestBlobManifest, writeVitestReportAttempt, } from './vitest-blob-manifest/index.mjs';
-export { prepareVitestReports } from './vitest-blob-manifest/reports.mjs';
-export { findWorkspaceLinkMismatches, formatReleaseAgeFailure, INSTALL_TERMINATION_FAILED, isReleaseAgeViolation, parseInstallOptions, parseReleaseAgeViolations, runInstallLifecycle, } from './pnpm-install/index.mjs';
-export { flattenReleaseAgeSelectors, packageNameFromPnpmLockKey, pnpmLockPackageKeyMatchesSelector, validateReleaseAgeExemptionGroups, validateReleaseAgePolicy, } from './pnpm-install/index.mjs';
-export { buildContextFromTrackedFiles, buildSharedContext, clearFakeGitEnv, gitEnv, installFakeGit, runNamedChecks, setFakeGitTrackedFiles, } from './shared-context/index.mjs';
-export { decodeSelectedFiles, encodeSelectedFiles, formatMultilineOutput, SELECTED_FILES_ENV_MAX_BYTES, selectedFilesExceedEnvBudget, writeSelectedFilesOutput, } from './gha-selected-files/index.mjs';
-export { createArtifactClassifier, parseArtifactPatternsJson, planRunDeletions, runCleanup, sweepCleanup, } from './gha-artifacts-cleanup/index.mjs';
-export { validateOptionalHttpOrigin } from './http-origin/index.mjs';
-export { boundPendingLine, DEFAULT_MAX_PENDING_LINE_LENGTH, DEFAULT_TRUNCATED_LINE_MARKER, splitCompleteLines, } from './process-line-buffer/index.mjs';
-export { isProcessGroupAlive, ProcessGroupDrainTimeoutError, runBrowserSession, waitForProcessGroupExit, } from './browser-session-runner/index.mjs';
-export { buildSchemaSnapshot, detectRenamedIndexes, generateSchemaSnapshot, indexShapeKey, readSchemaCatalog, renderSchemaMarkdown, stableStringify, writeSchemaSnapshot, } from './pg-schema-snapshot/index.mjs';
-export { buildOpenApiDocument, hashContractSchema, nodeToOpenApi, writeOpenApi, } from './openapi-document/index.mjs';
-export { buildVirtualProgramMatrix, extractContractSchema, extractResponseContracts, validateResponseContract, virtualProgramBuildCountForTest, } from './contract-schema/index.mjs';
-export { buildFixtureSchemaLock, responseSchemaFor, validateFixtureContracts, writeGeneratedFiles, } from './api-fixtures/index.mjs';
-export { decide, deriveRetryAttempt } from './transient-retry/index.mjs';
-export { escapeSpreadsheetFormula, parseCsvRows, streamCsvRows, stripCsvBom } from './csv/index.mjs';
-export { MissingResponseBodyError, readResponseBody, readResponseBodyAsBuffer, ResponseBodyTooLargeError, } from './http-body/index.mjs';
-export { parseAstGrepRuleArgs, runAstGrepRule } from './ast-grep-rule/index.mjs';
-export { indexReviewFiles, MAX_REVIEW_COMMENTS, MAX_REVIEW_PAYLOAD_BYTES, nearestReviewLine, parsePatchCommentable, parseReviewFilesJson, parseReviewPayload, readRegularReviewPayload, remapReviewComments, ReviewPayloadError, reviewCommentSubject, rewriteSnappedSuggestion, snapReviewNote, stageReviewPayload, writeStagedOutput, } from './gha-review-payload/index.mjs';
-export { PostReviewError, requireEnv, runPostReview, runPostReviewCli, postReviewWithTokenFromEnv, } from './gha-post-review/index.mjs';
+export { linkSkill, readSkillManifest } from "./skill-discovery/index.mjs";
+export { HARNESS_IDS, inspectHarnessEnvironment, selectHarnessSession, } from "./agent-harness-identity/index.mjs";
+export { codexChildren, codexIdentity, computeTranscriptFacts, formatTranscriptFacts, formatUnavailable, resolveTranscriptFile, runRetrospectiveTranscript, } from "./retrospective-transcript/index.mjs";
+export { runRetrospectiveFacts } from "./retrospective-facts/index.mjs";
+export { appendJournal, assertSessionId, cleanupSnapshotPartitions, partitionSnapshot, probeBlackboard, readJournal, resolveBlackboardConnection, } from "./agent-blackboard/index.mjs";
+export { buildSessionFrictionReport, classifyFrictionObservation, FRICTION_LOG_MAX_EVENTS, isConformingCiFailureBlock, normalizeCommandPrefix, readFrictionLog, recordFriction, } from "./session-friction/index.mjs";
+export { EphemeralListenerAttemptsExhaustedError, isRunnerReservedPort, listenOnRunnerUnreservedEphemeralPort, loadRunnerPortPolicy, runnerPortPolicy, validateRunnerPortPolicy, } from "./runner-port-policy/index.mjs";
+export { extractAlterTableAddColumnLocations, extractCreateIndexMetadata, extractCreateTableMetadata, extractDefaultFunction, extractDropIndexMetadata, extractFuncCallArgColumnNames, extractMigrationConstraintMetadata, initSqlAst, lineOfUtf8ByteOffset, MissingSqlAstParserError, parseSql, } from "./sql-ast/index.mjs";
+export { dollarQuoteEnd, lineOf, maskSqlQuotedText, readDollarQuoteDelimiter, readStringLiteral, splitSqlStatements, sqlFragments, stripSqlComments, } from "./sql-scanner/index.mjs";
+export { auditCiJobRuntime, parseWorkflowNameMatch } from "./gha-runtime-audit/index.mjs";
+export { checkGhaWorkspacePolicy } from "./gha-workspace-policy/index.mjs";
+export { requireUpToDate } from "./require-up-to-date/index.mjs";
+export { gitleaksDirectoryScanArguments, runGitleaksDirectoryScan, } from "./gitleaks-directory-scan/index.mjs";
+export { astGrepExamplesArguments, compareAstGrepCompanions, runAstGrepExamples, } from "./ast-grep-examples/index.mjs";
+export { astGrepPackPaths, astGrepPackPathsFrom } from "./ast-grep-pack/index.mjs";
+export { createVitestBlobManifest, createVitestReportAttempt, inspectVitestBlobBundle, parseVitestBlobManifest, parseVitestReportAttempt, readVitestReportAttempts, serializeVitestBlobManifest, serializeVitestReportAttempt, VITEST_BLOB_MANIFEST_FILENAME, VITEST_BLOB_MANIFEST_VERSION, VITEST_REPORT_ATTEMPT_PREFIX, VITEST_REPORT_ATTEMPT_VERSION, vitestBlobBundlePaths, writeVitestBlobManifest, writeVitestReportAttempt, } from "./vitest-blob-manifest/index.mjs";
+export { prepareVitestReports } from "./vitest-blob-manifest/reports.mjs";
+export { findWorkspaceLinkMismatches, formatReleaseAgeFailure, INSTALL_TERMINATION_FAILED, isReleaseAgeViolation, parseInstallOptions, parseReleaseAgeViolations, runInstallLifecycle, } from "./pnpm-install/index.mjs";
+export { flattenReleaseAgeSelectors, packageNameFromPnpmLockKey, pnpmLockPackageKeyMatchesSelector, validateReleaseAgeExemptionGroups, validateReleaseAgePolicy, } from "./pnpm-install/index.mjs";
+export { buildContextFromTrackedFiles, buildSharedContext, clearFakeGitEnv, gitEnv, installFakeGit, runNamedChecks, setFakeGitTrackedFiles, } from "./shared-context/index.mjs";
+export { decodeSelectedFiles, encodeSelectedFiles, formatMultilineOutput, SELECTED_FILES_ENV_MAX_BYTES, selectedFilesExceedEnvBudget, writeSelectedFilesOutput, } from "./gha-selected-files/index.mjs";
+export { createArtifactClassifier, parseArtifactPatternsJson, planRunDeletions, runCleanup, sweepCleanup, } from "./gha-artifacts-cleanup/index.mjs";
+export { validateOptionalHttpOrigin } from "./http-origin/index.mjs";
+export { boundPendingLine, DEFAULT_MAX_PENDING_LINE_LENGTH, DEFAULT_TRUNCATED_LINE_MARKER, splitCompleteLines, } from "./process-line-buffer/index.mjs";
+export { isProcessGroupAlive, ProcessGroupDrainTimeoutError, runBrowserSession, waitForProcessGroupExit, } from "./browser-session-runner/index.mjs";
+export { buildSchemaSnapshot, detectRenamedIndexes, generateSchemaSnapshot, indexShapeKey, readSchemaCatalog, renderSchemaMarkdown, stableStringify, writeSchemaSnapshot, } from "./pg-schema-snapshot/index.mjs";
+export { buildOpenApiDocument, hashContractSchema, nodeToOpenApi, writeOpenApi, } from "./openapi-document/index.mjs";
+export { buildVirtualProgramMatrix, extractContractSchema, extractResponseContracts, validateResponseContract, virtualProgramBuildCountForTest, } from "./contract-schema/index.mjs";
+export { buildFixtureSchemaLock, responseSchemaFor, validateFixtureContracts, writeGeneratedFiles, } from "./api-fixtures/index.mjs";
+export { decide, deriveRetryAttempt } from "./transient-retry/index.mjs";
+export { escapeSpreadsheetFormula, parseCsvRows, streamCsvRows, stripCsvBom } from "./csv/index.mjs";
+export { MissingResponseBodyError, readResponseBody, readResponseBodyAsBuffer, ResponseBodyTooLargeError, } from "./http-body/index.mjs";
+export { parseAstGrepRuleArgs, runAstGrepRule } from "./ast-grep-rule/index.mjs";
+export { indexReviewFiles, MAX_REVIEW_COMMENTS, MAX_REVIEW_PAYLOAD_BYTES, nearestReviewLine, parsePatchCommentable, parseReviewFilesJson, parseReviewPayload, readRegularReviewPayload, remapReviewComments, ReviewPayloadError, reviewCommentSubject, rewriteSnappedSuggestion, snapReviewNote, stageReviewPayload, writeStagedOutput, } from "./gha-review-payload/index.mjs";
+export { PostReviewError, requireEnv, runPostReview, runPostReviewCli, postReviewWithTokenFromEnv, } from "./gha-post-review/index.mjs";
 /** @deprecated Import Claude helpers from vouchington-tooling/gha-claude-post-review. */
-export { CLAUDE_OIDC_AUDIENCE, createActionsClaudeTokenIo, mintClaudeAppToken, resolveReviewPostToken, revokeClaudeAppToken, withClaudeAppToken, } from './gha-post-review/index.mjs';
-export { nextPageCursorFromLinkHeader, nextPageUrlFromLinkHeader, validatePaginationRequestUrl, } from './http-link-pagination/index.mjs';
-export { cmdDownloadCoverage, cmdDownloadVitestBlobs, cmdUpload, mintPresignedControl, transportObjectKeys, } from './coverage-transport/index.mjs';
-export { EPOCH_PRUNED_AT, normalizeDeployedLayer, pruneDeployedRuntimeDeps, restoreDeployedWorkspacePackages, } from './pnpm-deploy/index.mjs';
-export { parseDockerfilePrewarmStages, parseDockerfileRuntimeImages, } from './dockerfile-parse/index.mjs';
-export { buildSccArgs, checkSccComplexity, parseSccComplexityBaseline, parseSccComplexityViolations, SCC_COMPLEXITY_BASELINE_VERSION, SCC_COMPLEXITY_LIMIT, } from './scc-complexity/index.mjs';
-export { assertWorkflowCommandDrift, parseCiLocalArgs, runCiLocal } from './ci-local/index.mjs';
-export { GitHubRateLimitError, isRateLimited, isRetryableCancellationError, MAX_RATE_LIMIT_WAIT_MS, rateLimitDelay, reserveRateLimitDelay, } from './gha-rate-limit/index.mjs';
-export { CHECKPOINT_MARKER, isTrustedCheckpointComment, parseCheckpoint, renderCheckpoint, sortedCheckpointCandidates, validateCheckpoint, } from './gha-pr-checkpoint/index.mjs';
-export { checkWorkspaceGatesPolicy } from './workspace-gates/index.mjs';
-export { collectPnpmLicenseReport, evaluatePackageLicenseExpression, evaluatePnpmLicenseReport, parsePnpmLicenseReport, } from './dependency-license-policy/index.mjs';
-export { validateNugetUpdate } from './nuget-central-version/index.mjs';
-export { normalizeSwiftSource } from './swift-semantic-equal/index.mjs';
-export { isSwiftCodeOffset, parseUniqueSwiftBinaryTargetChecksum, } from './swift-source-offset/index.mjs';
-export { validateResolvedPinDelta } from './swift-resolved-pin-delta/index.mjs';
-export { DEFAULT_MAX_DIAGNOSTIC_REPORTS, DEFAULT_MAX_FORMATTED_DIAGNOSTIC_REPORTS, formatDiagnosticReportSummaries, HARD_MAX_DIAGNOSTIC_REPORTS, readDiagnosticReportSummaries, summarizeDiagnosticReport, } from './vitest-diagnostics/index.mjs';
-export { createCommandRunner, runGh, runGit } from './gh-cli/index.mjs';
-export { DiffCommandError, processDiffCommand } from './gh-cli/index.mjs';
-export { GITHUB_BODY_MAX_CHARACTERS, validateGitHubBodyLength } from './gh-cli/index.mjs';
-export { assertHeadPushed, buildGhPrCreateArgs, createPullRequest, DetachedHeadError, HeadNotPushedError, HeadOutOfDateError, resolveHeadBranch, } from './gh-cli/index.mjs';
+export { CLAUDE_OIDC_AUDIENCE, createActionsClaudeTokenIo, mintClaudeAppToken, resolveReviewPostToken, revokeClaudeAppToken, withClaudeAppToken, } from "./gha-post-review/index.mjs";
+export { nextPageCursorFromLinkHeader, nextPageUrlFromLinkHeader, validatePaginationRequestUrl, } from "./http-link-pagination/index.mjs";
+export { cmdDownloadCoverage, cmdDownloadVitestBlobs, cmdUpload, mintPresignedControl, transportObjectKeys, } from "./coverage-transport/index.mjs";
+export { EPOCH_PRUNED_AT, normalizeDeployedLayer, pruneDeployedRuntimeDeps, restoreDeployedWorkspacePackages, } from "./pnpm-deploy/index.mjs";
+export { parseDockerfilePrewarmStages, parseDockerfileRuntimeImages, } from "./dockerfile-parse/index.mjs";
+export { buildSccArgs, checkSccComplexity, parseSccComplexityBaseline, parseSccComplexityViolations, SCC_COMPLEXITY_BASELINE_VERSION, SCC_COMPLEXITY_LIMIT, } from "./scc-complexity/index.mjs";
+export { assertWorkflowCommandDrift, parseCiLocalArgs, runCiLocal } from "./ci-local/index.mjs";
+export { GitHubRateLimitError, isRateLimited, isRetryableCancellationError, MAX_RATE_LIMIT_WAIT_MS, rateLimitDelay, reserveRateLimitDelay, } from "./gha-rate-limit/index.mjs";
+export { CHECKPOINT_MARKER, isTrustedCheckpointComment, parseCheckpoint, renderCheckpoint, sortedCheckpointCandidates, validateCheckpoint, } from "./gha-pr-checkpoint/index.mjs";
+export { checkWorkspaceGatesPolicy } from "./workspace-gates/index.mjs";
+export { collectPnpmLicenseReport, evaluatePackageLicenseExpression, evaluatePnpmLicenseReport, parsePnpmLicenseReport, } from "./dependency-license-policy/index.mjs";
+export { validateNugetUpdate } from "./nuget-central-version/index.mjs";
+export { normalizeSwiftSource } from "./swift-semantic-equal/index.mjs";
+export { isSwiftCodeOffset, parseUniqueSwiftBinaryTargetChecksum, } from "./swift-source-offset/index.mjs";
+export { validateResolvedPinDelta } from "./swift-resolved-pin-delta/index.mjs";
+export { DEFAULT_MAX_DIAGNOSTIC_REPORTS, DEFAULT_MAX_FORMATTED_DIAGNOSTIC_REPORTS, formatDiagnosticReportSummaries, HARD_MAX_DIAGNOSTIC_REPORTS, readDiagnosticReportSummaries, summarizeDiagnosticReport, } from "./vitest-diagnostics/index.mjs";
+export { createCommandRunner, runGh, runGit } from "./gh-cli/index.mjs";
+export { DiffCommandError, processDiffCommand } from "./gh-cli/index.mjs";
+export { GITHUB_BODY_MAX_CHARACTERS, validateGitHubBodyLength } from "./gh-cli/index.mjs";
+export { assertHeadPushed, buildGhPrCreateArgs, createPullRequest, DetachedHeadError, HeadNotPushedError, HeadOutOfDateError, resolveHeadBranch, } from "./gh-cli/index.mjs";

package/dist/markdown/content-facts.mjs

@@ -1,4 +1,4 @@
-import { parseGfmMarkdown, walkMarkdown } from './ast.mjs';
+import { parseGfmMarkdown, walkMarkdown } from "./ast.mjs";
 /**
  * Returns source spans for fenced/indented code, inline code, and raw HTML. Offsets are JavaScript
  * string offsets; positions retain the parser's 1-indexed line and column coordinates.

package/dist/markdown/document-sections.mjs

@@ -1,5 +1,5 @@
-import { parseGfmMarkdown } from './ast.mjs';
-import { DetailsScope } from './details-scope.mjs';
+import { parseGfmMarkdown } from "./ast.mjs";
+import { DetailsScope } from "./details-scope.mjs";
 /** Parses visible root H2 sections while retaining exact source ranges and disclosure scope. */
 export function parseMarkdownSections(markdown) {
     const sections = [];

package/dist/markdown/html-blocks.mjs

@@ -1,4 +1,4 @@
-import { parseGfmMarkdown } from './ast.mjs';
+import { parseGfmMarkdown } from "./ast.mjs";
 const BLOCK_CONTAINERS = new Set(['root', 'blockquote', 'list', 'listItem', 'footnoteDefinition']);
 const TYPE1 = /^ {0,3}<(script|style|pre|textarea)(?:[\s>]|$)/i;
 const TYPE6_NAMES = 'address|article|aside|base|basefont|blockquote|body|caption|center|col|colgroup|dd|details|' +

package/dist/markdown/index.mjs

@@ -1,10 +1,10 @@
-export { findMarkdownNode, findMarkdownNodes, parseGfmMarkdown, walkMarkdown } from './ast.mjs';
-export { markdownHtmlBlocks, markdownHtmlFacts } from './html-blocks.mjs';
-export { markdownLiteralSpans } from './content-facts.mjs';
-export { extractLooseMarkdownTableRows } from './loose-pipe-rows.mjs';
-export { parseMarkdownSections } from './document-sections.mjs';
-export { validateMarkdownSections } from './validate-sections.mjs';
-export { markdownSectionBetweenHeadings } from './sections.mjs';
-export { extractMarkdownTables, parseMarkdownTables } from './tables.mjs';
-export { markdownNodeText } from './text.mjs';
-export { hasUncheckedMarkdownTask } from './tasks.mjs';
+export { findMarkdownNode, findMarkdownNodes, parseGfmMarkdown, walkMarkdown } from "./ast.mjs";
+export { markdownHtmlBlocks, markdownHtmlFacts } from "./html-blocks.mjs";
+export { markdownLiteralSpans } from "./content-facts.mjs";
+export { extractLooseMarkdownTableRows } from "./loose-pipe-rows.mjs";
+export { parseMarkdownSections } from "./document-sections.mjs";
+export { validateMarkdownSections } from "./validate-sections.mjs";
+export { markdownSectionBetweenHeadings } from "./sections.mjs";
+export { extractMarkdownTables, parseMarkdownTables } from "./tables.mjs";
+export { markdownNodeText } from "./text.mjs";
+export { hasUncheckedMarkdownTask } from "./tasks.mjs";

package/dist/markdown/sections.mjs

@@ -1,5 +1,5 @@
-import { parseGfmMarkdown } from './ast.mjs';
-import { markdownNodeText } from './text.mjs';
+import { parseGfmMarkdown } from "./ast.mjs";
+import { markdownNodeText } from "./text.mjs";
 export function markdownSectionBetweenHeadings(markdown, start, end, options = {}) {
     const children = parseGfmMarkdown(markdown).children;
     const startIndex = children.findIndex((node) => isNamedHeading(node, start));

package/dist/markdown/tables.mjs

@@ -1,5 +1,5 @@
-import { findMarkdownNodes, parseGfmMarkdown } from './ast.mjs';
-import { markdownNodeText } from './text.mjs';
+import { findMarkdownNodes, parseGfmMarkdown } from "./ast.mjs";
+import { markdownNodeText } from "./text.mjs";
 export function extractMarkdownTables(root) {
     return findMarkdownNodes(root, (node) => node.type === 'table').map((table) => {
         const result = {

package/dist/markdown/tasks.mjs

@@ -1,4 +1,4 @@
-import { parseGfmMarkdown, walkMarkdown } from './ast.mjs';
+import { parseGfmMarkdown, walkMarkdown } from "./ast.mjs";
 /** True when the GFM parse contains at least one unchecked task-list item. */
 export function hasUncheckedMarkdownTask(markdown) {
     let unchecked = false;

package/dist/mcp-server/context.mjs

@@ -1,6 +1,6 @@
 import { join } from 'node:path';
-import { assertSessionId } from '../agent-blackboard/session-id.mjs';
-import { requiredNullableString, requiredString } from './args.mjs';
+import { assertSessionId } from "../agent-blackboard/session-id.mjs";
+import { requiredNullableString, requiredString } from "./args.mjs";
 /**
  * The consumer convention for the interactive outbox. It is derived, never accepted from the
  * caller, so a credentialed, unsandboxed server cannot be pointed at an arbitrary directory.

package/dist/mcp-server/dispatch.mjs

@@ -1,11 +1,11 @@
-import { FeedbackDeliveryError } from '../agent-blackboard/index.mjs';
-import { optionalString, rejectUnknown, requireObject } from './args.mjs';
-import { readSessionId } from './context.mjs';
-import { journalAppend, journalEntries } from './handlers-journal.mjs';
-import { outboxFlush, outboxStatus } from './handlers-outbox.mjs';
-import { sessionArchive, sessionEnsure, snapshotExport } from './handlers-session.mjs';
-import { TOOLS } from './tools.mjs';
-import { resolveWorktree } from './worktree.mjs';
+import { FeedbackDeliveryError } from "../agent-blackboard/index.mjs";
+import { optionalString, rejectUnknown, requireObject } from "./args.mjs";
+import { readSessionId } from "./context.mjs";
+import { journalAppend, journalEntries } from "./handlers-journal.mjs";
+import { outboxFlush, outboxStatus } from "./handlers-outbox.mjs";
+import { sessionArchive, sessionEnsure, snapshotExport } from "./handlers-session.mjs";
+import { TOOLS } from "./tools.mjs";
+import { resolveWorktree } from "./worktree.mjs";
 const HANDLERS = {
     journal_append: journalAppend,
     journal_entries: journalEntries,

package/dist/mcp-server/git-fixture.test-helpers.mjs

@@ -2,7 +2,7 @@ import { execFileSync } from 'node:child_process';
 import { mkdirSync, mkdtempSync, realpathSync, rmSync, symlinkSync } from 'node:fs';
 import { tmpdir } from 'node:os';
 import { join } from 'node:path';
-import { gitEnv } from '../shared-context/index.mjs';
+import { gitEnv } from "../shared-context/index.mjs";
 const IDENTITY = ['-c', 'user.name=Test', '-c', 'user.email=test@example.test'];
 /** Two real repositories under the OS tmpdir: one with a linked worktree, one unrelated. */
 export function createRepoFixture() {

package/dist/mcp-server/handlers-journal.mjs

@@ -1,7 +1,7 @@
-import { appendJournalMarkdown, readJournal, } from '../agent-blackboard/index.mjs';
-import { optionalRecord, optionalString, requiredChoice, requiredString, requiredStringArray, rejectUnknown, } from './args.mjs';
-import { outboxDirectory, readIdentity } from './context.mjs';
-import { outboxCounts } from './handlers-outbox.mjs';
+import { appendJournalMarkdown, readJournal, } from "../agent-blackboard/index.mjs";
+import { optionalRecord, optionalString, requiredChoice, requiredString, requiredStringArray, rejectUnknown, } from "./args.mjs";
+import { outboxDirectory, readIdentity } from "./context.mjs";
+import { outboxCounts } from "./handlers-outbox.mjs";
 const MODES = ['interactive', 'autonomous'];
 const OUTCOMES = [
     'in-progress',

package/dist/mcp-server/handlers-outbox.mjs

@@ -1,5 +1,5 @@
-import { flushFeedbackOutbox, feedbackOutboxCounts } from '../agent-blackboard/index.mjs';
-import { outboxDirectory } from './context.mjs';
+import { flushFeedbackOutbox, feedbackOutboxCounts } from "../agent-blackboard/index.mjs";
+import { outboxDirectory } from "./context.mjs";
 /**
  * The outbox belongs to the worktree, not to one session, so two counts are reported. `pendingCount`
  * is the caller's session only; `worktreePendingCount` is every session's records.

package/dist/mcp-server/handlers-session.mjs

@@ -1,6 +1,6 @@
-import { archiveBlackboardSession, ensureBlackboardSession, exportSnapshot, } from '../agent-blackboard/index.mjs';
-import { optionalRecord, optionalString, requiredNullableString } from './args.mjs';
-import { readIdentity } from './context.mjs';
+import { archiveBlackboardSession, ensureBlackboardSession, exportSnapshot, } from "../agent-blackboard/index.mjs";
+import { optionalRecord, optionalString, requiredNullableString } from "./args.mjs";
+import { readIdentity } from "./context.mjs";
 function readSelection(args) {
     const data = optionalRecord(args, 'data');
     const arrays = optionalRecord(args, 'dataArrayContains');

package/dist/mcp-server/harness.test-helpers.mjs

@@ -1,9 +1,9 @@
 import { join } from 'node:path';
 import { afterEach, beforeEach, vi } from 'vitest';
-import { callTool } from './dispatch.mjs';
-import { BLACKBOARD_ENV, fakeBlackboard, } from './fake-blackboard.test-helpers.mjs';
-import { createRepoFixture } from './git-fixture.test-helpers.mjs';
-import { runIsolatedGit } from './worktree.mjs';
+import { callTool } from "./dispatch.mjs";
+import { BLACKBOARD_ENV, fakeBlackboard, } from "./fake-blackboard.test-helpers.mjs";
+import { createRepoFixture } from "./git-fixture.test-helpers.mjs";
+import { runIsolatedGit } from "./worktree.mjs";
 /** A fresh pair of real repositories for every test. */
 export function useRepoFixture() {
     let fixture;

package/dist/mcp-server/main.mjs

@@ -1,4 +1,4 @@
-import { runMcpCommand } from '../cli/commands/mcp.mjs';
+import { runMcpCommand } from "../cli/commands/mcp.mjs";
 /**
  * Entry of `bin/vouchington-mcp.mjs`: starts the server without parsing CLI arguments and records
  * the exit code. The open stdin keeps the process alive after a successful start.

package/dist/mcp-server/run.mjs

@@ -1,6 +1,6 @@
-import { assertBlackboardInstalled, loadMcpSdk } from './sdk.mjs';
-import { createMcpServer } from './server.mjs';
-import { launchWorktreeRoot, runIsolatedGit } from './worktree.mjs';
+import { assertBlackboardInstalled, loadMcpSdk } from "./sdk.mjs";
+import { createMcpServer } from "./server.mjs";
+import { launchWorktreeRoot, runIsolatedGit } from "./worktree.mjs";
 /**
  * Starts the server and resolves once it is connected. Nothing on this path may write to stdout:
  * stdout is the protocol channel, so diagnostics go to stderr.

package/dist/mcp-server/sdk.mjs

@@ -9,7 +9,7 @@ var __rewriteRelativeImportExtension = (this && this.__rewriteRelativeImportExte
 import { createRequire } from 'node:module';
 import { dirname, sep } from 'node:path';
 import { fileURLToPath } from 'node:url';
-import { isMissingModuleError } from '../agent-blackboard/client.mjs';
+import { isMissingModuleError } from "../agent-blackboard/client.mjs";
 const SDK_PACKAGE = '@modelcontextprotocol/sdk';
 /**
  * The directory the server was installed into: the parent of the outermost `node_modules` above

package/dist/mcp-server/server.mjs

@@ -1,5 +1,5 @@
-import { callTool } from './dispatch.mjs';
-import { TOOLS } from './tools.mjs';
+import { callTool } from "./dispatch.mjs";
+import { TOOLS } from "./tools.mjs";
 export const SERVER_NAME = 'vouchington-tooling';
 const INSTRUCTIONS = 'Journals agent-blackboard feedback for a vouchington consumer. Every tool takes an explicit ' +
     'sessionId and an optional worktree (the absolute path of a git worktree top level; it ' +

package/dist/mcp-server/worktree.mjs

@@ -2,8 +2,8 @@ import { execFile } from 'node:child_process';
 import { realpath } from 'node:fs/promises';
 import { isAbsolute } from 'node:path';
 import { promisify } from 'node:util';
-import { createCommandRunner } from '../gh-cli/exec.mjs';
-import { gitEnv } from '../shared-context/index.mjs';
+import { createCommandRunner } from "../gh-cli/exec.mjs";
+import { gitEnv } from "../shared-context/index.mjs";
 const execFileAsync = promisify(execFile);
 /**
  * The environment for git: no inherited `GIT_*` variables, so `GIT_DIR` cannot redirect the check,

package/dist/nuget-central-version/cli.mjs

@@ -1,5 +1,5 @@
 import { readFileSync, writeFileSync } from 'node:fs';
-import { validateNugetUpdate } from './index.mjs';
+import { validateNugetUpdate } from "./index.mjs";
 export function runNugetCentralVersionCli(args) {
     const [trustedPath, candidatePath, metadataPath, outputPath] = args;
     if (!trustedPath || !candidatePath || !metadataPath || !outputPath || args.length !== 4) {