vouchington-tooling 0.34.0 → 0.36.0

package/dist/sql-ast/index.mjs

@@ -1,8 +1,8 @@
-export { extractAlterTableAddColumnLocations } from './add-column.mjs';
-export { extractMigrationConstraintMetadata } from './constraint.mjs';
-export { extractCreateTableMetadata } from './create-table.mjs';
-export { extractDefaultFunction, extractFuncCallArgColumnNames } from './default-function.mjs';
-export { extractDropIndexMetadata } from './drop-index.mjs';
-export { extractCreateIndexMetadata } from './index-metadata.mjs';
-export { lineOfUtf8ByteOffset } from './line-of-offset.mjs';
-export { initSqlAst, MissingSqlAstParserError, parseSql } from './parser.mjs';
+export { extractAlterTableAddColumnLocations } from "./add-column.mjs";
+export { extractMigrationConstraintMetadata } from "./constraint.mjs";
+export { extractCreateTableMetadata } from "./create-table.mjs";
+export { extractDefaultFunction, extractFuncCallArgColumnNames } from "./default-function.mjs";
+export { extractDropIndexMetadata } from "./drop-index.mjs";
+export { extractCreateIndexMetadata } from "./index-metadata.mjs";
+export { lineOfUtf8ByteOffset } from "./line-of-offset.mjs";
+export { initSqlAst, MissingSqlAstParserError, parseSql } from "./parser.mjs";

package/dist/sql-scanner/comments.mjs

@@ -1,4 +1,4 @@
-import { readDollarQuoteDelimiter, stringLiteralQuoteStart } from './literals.mjs';
+import { readDollarQuoteDelimiter, stringLiteralQuoteStart } from "./literals.mjs";
 function maskNonNewlines(value) {
     return value.replace(/[^\n]/g, ' ');
 }

package/dist/sql-scanner/index.mjs

@@ -1,6 +1,6 @@
-import { readDollarQuoteDelimiter, stringLiteralQuoteStart } from './literals.mjs';
-export { dollarQuoteEnd, maskSqlQuotedText, readDollarQuoteDelimiter, readStringLiteral, sqlFragments, } from './literals.mjs';
-export { stripSqlComments } from './comments.mjs';
+import { readDollarQuoteDelimiter, stringLiteralQuoteStart } from "./literals.mjs";
+export { dollarQuoteEnd, maskSqlQuotedText, readDollarQuoteDelimiter, readStringLiteral, sqlFragments, } from "./literals.mjs";
+export { stripSqlComments } from "./comments.mjs";
 export function lineOf(content, index) {
     return content.slice(0, index).split('\n').length;
 }

package/dist/sql-scanner/literals.mjs

@@ -1,4 +1,4 @@
-import { decodeSqlStringBody, singleQuoteEnd } from './quote-decode.mjs';
+import { decodeSqlStringBody, singleQuoteEnd } from "./quote-decode.mjs";
 export function readDollarQuoteDelimiter(content, index) {
     if (content[index] !== '$')
         return null;

package/dist/swift-semantic-equal/cli.mjs

@@ -1,5 +1,5 @@
 import { execFileSync } from 'node:child_process';
-import { normalizeSwiftSource } from './normalize.mjs';
+import { normalizeSwiftSource } from "./normalize.mjs";
 export function runSwiftSemanticEqualCli(args, gitShow = execFileSync) {
     const [base, head, file] = args;
     if (!base || !head || !file || args.length !== 3 || !file.endsWith('.swift')) {

package/dist/swift-semantic-equal/index.mjs

@@ -1 +1 @@
-export { normalizeSwiftSource } from './normalize.mjs';
+export { normalizeSwiftSource } from "./normalize.mjs";

package/dist/transient-retry/index.mjs

@@ -1,2 +1,2 @@
-export { deriveRetryAttempt } from './attempts.mjs';
-export { decide } from './decision-evaluator.mjs';
+export { deriveRetryAttempt } from "./attempts.mjs";
+export { decide } from "./decision-evaluator.mjs";

package/dist/vitest-blob-manifest/cli.mjs

@@ -1,8 +1,8 @@
 #!/usr/bin/env node
 import { execFileSync } from 'node:child_process';
 import { fileURLToPath } from 'node:url';
-import { writeVitestBlobManifest } from './index.mjs';
-import { parseGitHubRunAttempt } from './run-attempt.mjs';
+import { writeVitestBlobManifest } from "./index.mjs";
+import { parseGitHubRunAttempt } from "./run-attempt.mjs";
 function failRepository() {
     throw new Error('GITHUB_REPOSITORY is required');
 }

package/dist/vitest-blob-manifest/index.mjs

@@ -1,10 +1,10 @@
 import { createHash, randomUUID } from 'node:crypto';
 import { lstatSync, readFileSync, readdirSync, renameSync, unlinkSync, writeFileSync, } from 'node:fs';
 import { basename, join } from 'node:path';
-import { VITEST_SUITE_PATTERN } from './constants.mjs';
-import { VitestBlobBundleError } from './bundle-error.mjs';
-export * from './report-attempt.mjs';
-export { VITEST_SUITE_PATTERN } from './constants.mjs';
+import { VITEST_SUITE_PATTERN } from "./constants.mjs";
+import { VitestBlobBundleError } from "./bundle-error.mjs";
+export * from "./report-attempt.mjs";
+export { VITEST_SUITE_PATTERN } from "./constants.mjs";
 export const VITEST_BLOB_MANIFEST_FILENAME = 'vitest-blob-manifest.json';
 export const VITEST_BLOB_MANIFEST_VERSION = 'vitest-blob-manifest:v1';
 function isRecord(value) {

package/dist/vitest-blob-manifest/report-attempt-cli.mjs

@@ -1,5 +1,5 @@
-import { readVitestReportAttempts, writeVitestReportAttempt, } from './report-attempt.mjs';
-import { parseGitHubRunAttempt } from './run-attempt.mjs';
+import { readVitestReportAttempts, writeVitestReportAttempt, } from "./report-attempt.mjs";
+import { parseGitHubRunAttempt } from "./run-attempt.mjs";
 function required(env, name) {
     const value = env[name];
     if (!value)

package/dist/vitest-blob-manifest/report-attempt.mjs

@@ -1,7 +1,7 @@
 import { randomUUID } from 'node:crypto';
 import { existsSync, lstatSync, mkdirSync, readFileSync, readdirSync, renameSync, unlinkSync, writeFileSync, } from 'node:fs';
 import { basename, join } from 'node:path';
-import { VITEST_SUITE_PATTERN } from './constants.mjs';
+import { VITEST_SUITE_PATTERN } from "./constants.mjs";
 export const VITEST_REPORT_ATTEMPT_VERSION = 'vitest-report-attempt:v1';
 export const VITEST_REPORT_ATTEMPT_PREFIX = 'vitest-report-attempt-';
 function isRecord(value) {

package/dist/vitest-blob-manifest/reports-cli.mjs

@@ -1,6 +1,6 @@
-import { VITEST_SUITE_PATTERN } from './constants.mjs';
-import { prepareVitestReports } from './reports.mjs';
-import { parseGitHubRunAttempt } from './run-attempt.mjs';
+import { VITEST_SUITE_PATTERN } from "./constants.mjs";
+import { prepareVitestReports } from "./reports.mjs";
+import { parseGitHubRunAttempt } from "./run-attempt.mjs";
 function required(env, name) {
     const value = env[name];
     if (!value)

package/dist/vitest-blob-manifest/reports-source.mjs

@@ -1,7 +1,7 @@
 import { lstatSync, readdirSync } from 'node:fs';
 import { join } from 'node:path';
-import { inspectVitestBlobBundle, VITEST_BLOB_MANIFEST_FILENAME, VITEST_SUITE_PATTERN, } from './index.mjs';
-import { VitestBlobBundleError } from './bundle-error.mjs';
+import { inspectVitestBlobBundle, VITEST_BLOB_MANIFEST_FILENAME, VITEST_SUITE_PATTERN, } from "./index.mjs";
+import { VitestBlobBundleError } from "./bundle-error.mjs";
 class SourceFailure extends Error {
     reason;
     constructor(reason) {

package/dist/vitest-blob-manifest/reports.mjs

@@ -1,8 +1,8 @@
 import { randomUUID } from 'node:crypto';
 import { existsSync, lstatSync, mkdirSync, mkdtempSync, renameSync, rmSync, writeFileSync, } from 'node:fs';
 import { basename, dirname, join } from 'node:path';
-import { VITEST_SUITE_PATTERN } from './index.mjs';
-import { inspectVitestReportSource, } from './reports-source.mjs';
+import { VITEST_SUITE_PATTERN } from "./index.mjs";
+import { inspectVitestReportSource, } from "./reports-source.mjs";
 function validateOptions(options) {
     if (!/^[A-Za-z0-9_.-]+\/[A-Za-z0-9_.-]+$/.test(options.repository))
         throw new Error('Invalid Vitest repository');

package/dist/vitest-diagnostics/index.mjs

@@ -1,15 +1,15 @@
 import { join, posix, win32 } from 'node:path';
-export { registerForkExitSentinel, setCurrentForkExitModule, setCurrentForkExitProject, } from './vitest-fork-exit-sentinel.mjs';
-export { clearForkExitRecords, formatForkExitSentinelSection, readForkExitRecords, summarizeForkExitRecords, } from './vitest-fork-exit-records.mjs';
-export { createVitestWorkerExitDiagnosticsReporter, formatWorkerExitDiagnostics, isWorkerExitError, } from './vitest-worker-exit-diagnostics-reporter.mjs';
-export { createForkLeakDetector, formatForkLeakDiagnostics, waitForResourceCloseCallbacks, } from './vitest-fork-leak-detection.mjs';
-import { isDiagnosticReportDirectoryCurrent, readDiagnosticReportDirectory } from './directory.mjs';
-import { readBoundedRegularFile } from './read-file.mjs';
-export { MAX_DIAGNOSTIC_REPORT_BYTES } from './read-file.mjs';
+export { registerForkExitSentinel, setCurrentForkExitModule, setCurrentForkExitProject, } from "./vitest-fork-exit-sentinel.mjs";
+export { clearForkExitRecords, formatForkExitSentinelSection, readForkExitRecords, summarizeForkExitRecords, } from "./vitest-fork-exit-records.mjs";
+export { createVitestWorkerExitDiagnosticsReporter, formatWorkerExitDiagnostics, isWorkerExitError, } from "./vitest-worker-exit-diagnostics-reporter.mjs";
+export { createForkLeakDetector, formatForkLeakDiagnostics, waitForResourceCloseCallbacks, } from "./vitest-fork-leak-detection.mjs";
+import { isDiagnosticReportDirectoryCurrent, readDiagnosticReportDirectory } from "./directory.mjs";
+import { readBoundedRegularFile } from "./read-file.mjs";
+export { MAX_DIAGNOSTIC_REPORT_BYTES } from "./read-file.mjs";
 export const DEFAULT_MAX_DIAGNOSTIC_REPORTS = 100;
 export const DEFAULT_MAX_FORMATTED_DIAGNOSTIC_REPORTS = 20;
 export const HARD_MAX_DIAGNOSTIC_REPORTS = 100;
-export { HARD_MAX_DIAGNOSTIC_DIRECTORY_ENTRIES } from './directory.mjs';
+export { HARD_MAX_DIAGNOSTIC_DIRECTORY_ENTRIES } from "./directory.mjs";
 const TEXT_LIMIT = 200;
 const PATH_LIMIT = 240;
 function objectValue(value) {

package/dist/vitest-diagnostics/vitest-fork-exit-records.mjs

@@ -2,7 +2,7 @@
 // identifies a death before the sentinel handler ran. Synchronous writes avoid async pipe loss.
 import { closeSync, constants, lstatSync, mkdirSync, openSync, readdirSync, readFileSync, unlinkSync, writeSync, } from 'node:fs';
 import { join } from 'node:path';
-import { sanitizeInlineErrorMessage } from './vitest-fork-exit-error-detail.mjs';
+import { sanitizeInlineErrorMessage } from "./vitest-fork-exit-error-detail.mjs";
 const recordFileFds = new Map();
 function recordFileDescriptor(directory) {
     const cached = recordFileFds.get(directory);

package/dist/vitest-diagnostics/vitest-fork-exit-sentinel.mjs

@@ -10,8 +10,8 @@
 import { writeSync } from 'node:fs';
 import { constants as osConstants } from 'node:os';
 import { getHeapStatistics } from 'node:v8';
-import { MAX_RECORDED_ERROR_STACK_CHARS, sanitizeInlineErrorMessage, toErrorDetail, } from './vitest-fork-exit-error-detail.mjs';
-import { writeForkExitRecord } from './vitest-fork-exit-records.mjs';
+import { MAX_RECORDED_ERROR_STACK_CHARS, sanitizeInlineErrorMessage, toErrorDetail, } from "./vitest-fork-exit-error-detail.mjs";
+import { writeForkExitRecord } from "./vitest-fork-exit-records.mjs";
 const SENTINEL_REGISTERED = Symbol.for('vouchington-tooling.vitest-fork-exit-sentinel.registered');
 let currentModule = null;
 // isolate: false lets one fork run files from multiple projects. Track the current project per test.

package/dist/vitest-diagnostics/vitest-fork-leak-detection.mjs

@@ -1,8 +1,8 @@
 // Fork-side growth-delta leak detector for Vitest's reused forks pool.
 // It spans setup-file resets with one episode per type and stable candidate plateau.
 // Episodes combine new high-water marks with rolling samples for transient-high recovery.
-export { formatForkLeakDiagnostics } from './vitest-fork-leak-diagnostics.mjs';
-import { createForkLeakEpisode, findForkLeakEpisodeEvidence, recordForkLeakEpisode, setForkLeakCandidate, takeConfirmedForkLeakCandidate, } from './vitest-fork-leak-episode.mjs';
+export { formatForkLeakDiagnostics } from "./vitest-fork-leak-diagnostics.mjs";
+import { createForkLeakEpisode, findForkLeakEpisodeEvidence, recordForkLeakEpisode, setForkLeakCandidate, takeConfirmedForkLeakCandidate, } from "./vitest-fork-leak-episode.mjs";
 const realSetTimeout = globalThis.setTimeout;
 const PERSISTENT_HANDLE_TYPES = new Set([
     'TCPSocketWrap',

package/dist/vitest-diagnostics/vitest-worker-exit-diagnostics-reporter.mjs

@@ -1,6 +1,6 @@
 import { EOL } from 'node:os';
-import { clearForkExitRecords, formatForkExitSentinelSection, readForkExitRecords, summarizeForkExitRecords, } from './vitest-fork-exit-records.mjs';
-import { collectStringValues, serializeDiagnosticsError, } from './vitest-worker-exit-diagnostics-errors.mjs';
+import { clearForkExitRecords, formatForkExitSentinelSection, readForkExitRecords, summarizeForkExitRecords, } from "./vitest-fork-exit-records.mjs";
+import { collectStringValues, serializeDiagnosticsError, } from "./vitest-worker-exit-diagnostics-errors.mjs";
 const MAX_RECENT_MODULE_EVENTS = 8;
 const MAX_RECENT_STDERR_LINES = 12;
 const MAX_UNHANDLED_ERRORS = 2;

package/dist/workflow-policy/condition-entailment.mjs

@@ -1,4 +1,4 @@
-import { splitTopLevel, hasTopLevelMixedOperators } from './condition-split.mjs';
+import { splitTopLevel, hasTopLevelMixedOperators } from "./condition-split.mjs";
 /**
  * Conservative GitHub Actions `if:` condition comparison.
  * Deliberately conservative: a condition shape this can't reason about is treated as NOT entailed

package/dist/workflow-policy/index.d.mts

@@ -1,7 +1,5 @@
-export { evaluateGraphPolicy } from './graph.mts';
-export { evaluateLockPolicy, type ConcurrencyPolicy } from './concurrency.mts';
 export { conditionEntails } from './condition-entailment.mts';
 export { unprovisionedSecretsWithoutReadinessStep } from './secret-readiness.mts';
 export { callerCalleePermissionMismatches, type CallerCalleePermissionPolicy, } from './permission-mismatches.mts';
 export { missingTopLevelPermissionPaths, parsePermissions, parseWorkflow, requiredWorkflowPermissions, type Workflow, } from './permissions.mts';
-export type { WorkflowTopology, WorkflowTopologyIndex, WorkflowTopologyPolicy, WorkflowNode, WorkflowJobNode, WorkflowStep, } from './types.mts';
+export type { WorkflowTopology, WorkflowTopologyIndex, WorkflowNode, WorkflowJobNode, WorkflowStep, } from './types.mts';

package/dist/workflow-policy/index.mjs

@@ -1,6 +1,4 @@
-export { evaluateGraphPolicy } from './graph.mjs';
-export { evaluateLockPolicy } from './concurrency.mjs';
-export { conditionEntails } from './condition-entailment.mjs';
-export { unprovisionedSecretsWithoutReadinessStep } from './secret-readiness.mjs';
-export { callerCalleePermissionMismatches, } from './permission-mismatches.mjs';
-export { missingTopLevelPermissionPaths, parsePermissions, parseWorkflow, requiredWorkflowPermissions, } from './permissions.mjs';
+export { conditionEntails } from "./condition-entailment.mjs";
+export { unprovisionedSecretsWithoutReadinessStep } from "./secret-readiness.mjs";
+export { callerCalleePermissionMismatches, } from "./permission-mismatches.mjs";
+export { missingTopLevelPermissionPaths, parsePermissions, parseWorkflow, requiredWorkflowPermissions, } from "./permissions.mjs";

package/dist/workflow-policy/permission-inheritance.mjs

@@ -1,4 +1,4 @@
-import { isPlainRecord, isValidDeclaration, isValidPermissionMap, mergePermissionMaps, permissionMap, PERMISSION_LEVEL_RANK, } from './permission-declarations.mjs';
+import { isPlainRecord, isValidDeclaration, isValidPermissionMap, mergePermissionMaps, permissionMap, PERMISSION_LEVEL_RANK, } from "./permission-declarations.mjs";
 function sortedEntries(value) {
     return [...value].toSorted(([left], [right]) => left.localeCompare(right));
 }

package/dist/workflow-policy/permission-mismatches.mjs

@@ -1,5 +1,5 @@
-import { parsePermissions, permissionsToMap, requiredWorkflowPermissions, } from './permissions.mjs';
-import { inheritanceAwarePermissionMismatches } from './permission-inheritance.mjs';
+import { parsePermissions, permissionsToMap, requiredWorkflowPermissions, } from "./permissions.mjs";
+import { inheritanceAwarePermissionMismatches } from "./permission-inheritance.mjs";
 function formatPermissions(value) {
     if (value === null)
         return 'none';

package/dist/workflow-policy/secret-readiness.mjs

@@ -1,5 +1,5 @@
-import { conditionEntails } from './condition-entailment.mjs';
-import { stripShellComments } from './shell-comments.mjs';
+import { conditionEntails } from "./condition-entailment.mjs";
+import { stripShellComments } from "./shell-comments.mjs";
 function referencingWorkflowsByName(topology) {
     const byName = new Map();
     const paths = new Map(topology.workflows.map((workflow) => [workflow.id, workflow.path]));

package/dist/workflow-policy/types.d.mts

@@ -9,7 +9,7 @@ export interface WorkflowStep {
     run?: string;
     secretReferences?: readonly string[];
 }
-export interface WorkflowConcurrency {
+interface WorkflowConcurrency {
     effective: {
         group: string;
         cancelInProgress: boolean | string;
@@ -61,30 +61,4 @@ export interface WorkflowTopologyIndex {
         match?: string;
     }[];
 }
-export type EdgeRule = readonly [from: string, to: string];
-export type StepSelector = {
-    id?: string;
-    uses?: string;
-    name?: string;
-};
-export type WorkflowTopologyPolicy = {
-    jobInventory: Readonly<Record<string, readonly string[]>>;
-    requiredJobs: readonly string[];
-    forbiddenJobs: readonly string[];
-    requiredDirectEdges: readonly EdgeRule[];
-    forbiddenDirectEdges: readonly EdgeRule[];
-    requiredTransitiveEdges: readonly EdgeRule[];
-    forbiddenTransitiveEdges: readonly EdgeRule[];
-    requiredArtifactEdges: readonly {
-        from: string;
-        to: string;
-        name: string;
-        match?: string;
-    }[];
-    exactFanIns: Readonly<Record<string, readonly string[]>>;
-    exactCallerJobs: Readonly<Record<string, readonly string[]>>;
-    stepOrders: readonly {
-        jobId: string;
-        steps: readonly StepSelector[];
-    }[];
-};
+export {};

package/dist/workspace-gates/first-party-graph.mjs

@@ -1,7 +1,7 @@
 import { readFile } from 'node:fs/promises';
 import { join } from 'node:path';
-import { packageNameFromPnpmLockKey, pnpmLockPackageKeyMatchesSelector, } from '../pnpm-install/index.mjs';
-import { loadYaml } from './yaml-loader.mjs';
+import { packageNameFromPnpmLockKey, pnpmLockPackageKeyMatchesSelector, } from "../pnpm-install/index.mjs";
+import { loadYaml } from "./yaml-loader.mjs";
 const PACKAGE_DEPENDENCY_FIELDS = [
     'dependencies',
     'devDependencies',

package/dist/workspace-gates/index.mjs

@@ -1 +1 @@
-export { checkWorkspaceGatesPolicy } from './policy.mjs';
+export { checkWorkspaceGatesPolicy } from "./policy.mjs";

package/dist/workspace-gates/manifest-version-assertions.mjs

@@ -1,7 +1,7 @@
 import { readFileSync } from 'node:fs';
 import { join } from 'node:path';
-import { findExpectations } from './manifest-version-parser.mjs';
-import { buildDependencyMatchers, SEMVER_LITERAL } from './manifest-version-patterns.mjs';
+import { findExpectations } from "./manifest-version-parser.mjs";
+import { buildDependencyMatchers, SEMVER_LITERAL } from "./manifest-version-patterns.mjs";
 const TEST_SOURCE_FILE = /(?:^|\/)[^/]+\.(?:test|spec)\.[cm]?[jt]sx?$/u;
 const PACKAGE_JSON_FILE = /(?:^|\/)package\.json$/u;
 const TEST_OR_FIXTURE_DIRECTORY = /(?:^|\/)(?:test|tests|__tests__|fixture|fixtures|__fixtures__)(?:\/|$)/u;

package/dist/workspace-gates/manifest-version-parser.mjs

@@ -1,4 +1,4 @@
-import { skipLiteralOrComment } from './manifest-version-skips.mjs';
+import { skipLiteralOrComment } from "./manifest-version-skips.mjs";
 const EXPECTATION_MATCHER = /^\s*(?:\.|\?\.)\s*(?:not\s*\.\s*)?to(?:Be|Equal|StrictEqual|MatchObject|Contain|ContainEqual|HaveProperty)\s*\(/u;
 function closingParenthesis(source, open) {
     let depth = 1;

package/dist/workspace-gates/options.mjs

@@ -1,4 +1,4 @@
-import { flattenReleaseAgeSelectors, } from '../pnpm-install/index.mjs';
+import { flattenReleaseAgeSelectors, } from "../pnpm-install/index.mjs";
 export function resolveWorkspaceGatesOptions(options) {
     return {
         firstPartyNames: options.firstPartyNames,

package/dist/workspace-gates/policy.mjs

@@ -1,10 +1,10 @@
-import { validateReleaseAgeExemptionGroups } from '../pnpm-install/index.mjs';
-import { checkDependabotCrosslist } from './dependabot.mjs';
-import { checkExcludeRegistry } from './exclude-registry.mjs';
-import { checkManifestDependencyVersionAssertions } from './manifest-version-assertions.mjs';
-import { checkActiveFirstPartyGraph, checkTemporaryReleaseAgeSelectorsInLockfile, } from './first-party-graph.mjs';
-import { resolveWorkspaceGatesOptions, shouldValidateTemporaryGroups, } from './options.mjs';
-import { loadYaml } from './yaml-loader.mjs';
+import { validateReleaseAgeExemptionGroups } from "../pnpm-install/index.mjs";
+import { checkDependabotCrosslist } from "./dependabot.mjs";
+import { checkExcludeRegistry } from "./exclude-registry.mjs";
+import { checkManifestDependencyVersionAssertions } from "./manifest-version-assertions.mjs";
+import { checkActiveFirstPartyGraph, checkTemporaryReleaseAgeSelectorsInLockfile, } from "./first-party-graph.mjs";
+import { resolveWorkspaceGatesOptions, shouldValidateTemporaryGroups, } from "./options.mjs";
+import { loadYaml } from "./yaml-loader.mjs";
 export async function checkWorkspaceGatesPolicy(ctx, options) {
     const errors = [];
     const resolved = resolveWorkspaceGatesOptions(options);

package/dist/workspace-gates/test-helpers.d.mts

@@ -1,7 +1,7 @@
 import type { SharedContext } from '../shared-context/index.mts';
 import type { WorkspaceGatesOptions } from './options.mts';
-export declare const FIRST_PARTY_NAMES: readonly ['acme-lib', '@acme/core'];
-export declare const SCOPED_PREFIXES: readonly ['@acme/'];
+export declare const FIRST_PARTY_NAMES: readonly ["acme-lib", "@acme/core"];
+export declare const SCOPED_PREFIXES: readonly ["@acme/"];
 export declare const TEMPORARY_SELECTOR = "demo-temporary-package@9.9.9";
 export declare function defaultOptions(overrides?: Partial<WorkspaceGatesOptions>): WorkspaceGatesOptions;
 export declare function stubCtx(repoRoot: string, trackedFiles: readonly string[]): SharedContext;

package/docs/workflow-and-compiler.md

@@ -1,33 +1,24 @@
 # Workflow and compiler primitives
 
-`workflow-policy` evaluates parsed GitHub Actions topology against policy supplied by the
-consumer. It has no workflow inventory or secret names of its own. Supply a topology and an index
-with the structural methods described by `WorkflowTopologyIndex`; a parser may expose additional
-fields. `evaluateGraphPolicy` checks inventory, job and edge presence, artifact flow, fan-in,
-reusable callers, and step order. `evaluateLockPolicy` takes the consumer's unlocked reasons and
-concurrency intent separately. Its scope classifier recognizes GitHub expression references and
-reports unsupported contexts.
-
-Inventory compares workflow `jobIds` against each corresponding job's `key`; job IDs may use any
-format. Fan-in and caller comparisons ignore ordering of index results.
+`workflow-policy` checks parsed GitHub Actions topology against data supplied by the consumer. It
+has no workflow inventory or secret names of its own. Supply a topology shaped like
+`WorkflowTopology`; a parser may expose additional fields. Topology, job-graph and concurrency
+policy lives in the `no-mistakes` `workflow-topology-policy` rule, not here. This breaking minor removed `evaluateGraphPolicy`, `evaluateLockPolicy`,
+`ConcurrencyPolicy` and `WorkflowTopologyPolicy`; migrate to that rule.
 
 ```ts
 import {
   conditionEntails,
-  evaluateGraphPolicy,
-  evaluateLockPolicy,
   callerCalleePermissionMismatches,
   parseWorkflow,
   unprovisionedSecretsWithoutReadinessStep,
 } from 'vouchington-tooling/workflow-policy'
 
-const diagnostics = evaluateGraphPolicy(topology, index, policy)
-diagnostics.push(...evaluateLockPolicy(topology, unlockedReasons, concurrencyIntent))
-diagnostics.push(
+const diagnostics = [
   ...unprovisionedSecretsWithoutReadinessStep(topology, {
     RELEASE_KEY: { provisioned: false },
   }),
-)
+]
 const documents = Object.fromEntries(
   Object.entries(workflowSources).map(([path, yaml]) => [path, parseWorkflow(yaml)]),
 )

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "vouchington-tooling",
-  "version": "0.34.0",
+  "version": "0.36.0",
   "description": "Vouchington CLI and extractable tooling libraries.",
   "homepage": "https://github.com/vouchington/vouchington-tooling/tree/main/packages/vouchington-tooling#readme",
   "bugs": {
@@ -181,11 +181,6 @@
       "import": "./dist/api-fixtures/index.mjs",
       "default": "./dist/api-fixtures/index.mjs"
     },
-    "./api-contract-discovery": {
-      "types": "./dist/api-contract-discovery/index.d.mts",
-      "import": "./dist/api-contract-discovery/index.mjs",
-      "default": "./dist/api-contract-discovery/index.mjs"
-    },
     "./transient-retry": {
       "types": "./dist/transient-retry/index.d.mts",
       "import": "./dist/transient-retry/index.mjs",
@@ -364,6 +359,7 @@
   "dependencies": {
     "@types/mdast": "4.0.4",
     "@types/unist": "3.0.3",
+    "@typescript-eslint/parser": "^8.71.1",
     "csv-parse": "7.0.3",
     "csv-stringify": "6.9.0",
     "dockerfile-ast": "0.7.1",
@@ -371,6 +367,7 @@
     "remark": "15.0.1",
     "remark-gfm": "4.0.1",
     "spdx-expression-parse": "5.0.0",
+    "typescript": "npm:@typescript/typescript6@^6.0.2",
     "yaml": "2.9.1"
   },
   "devDependencies": {

package/dist/api-contract-discovery/header-contract-parser.d.mts

@@ -1,3 +0,0 @@
-import ts from '../contract-schema/typescript-api.mts';
-import type { HeaderContract } from './header-contract-types.mts';
-export declare function parseHeaderContract(sourceFile: ts.SourceFile, node: ts.ObjectLiteralExpression): HeaderContract;

package/dist/api-contract-discovery/header-contract-parser.mjs

@@ -1,93 +0,0 @@
-import ts from '../contract-schema/typescript-api.mjs';
-import { contractError } from './response-contract-registration.mjs';
-export function parseHeaderContract(sourceFile, node) {
-    const request = propertyObject(sourceFile, node, 'request');
-    const responses = propertyObject(sourceFile, node, 'responses');
-    return {
-        requestHeaders: request ? parseHeaders(sourceFile, request) : {},
-        responseHeaders: responses ? parseResponses(sourceFile, responses) : {},
-    };
-}
-function parseResponses(sourceFile, node) {
-    const result = {};
-    for (const property of node.properties) {
-        if (!ts.isPropertyAssignment(property) ||
-            !ts.isNumericLiteral(property.name) ||
-            !ts.isObjectLiteralExpression(property.initializer))
-            throw contractError(sourceFile, property, 'apiHeaders response status must be a numeric object property');
-        const status = Number(property.name.text);
-        const errors = property.initializer.properties.find((item) => ts.isPropertyAssignment(item) && item.name.getText(sourceFile) === 'errors');
-        const headers = propertyObject(sourceFile, property.initializer, 'headers');
-        const description = stringProperty(property.initializer, 'description');
-        result[status] = {
-            ...(description ? { description } : {}),
-            ...(errors ? { errors: parseErrors(sourceFile, property.initializer) } : {}),
-            headers: headers ? parseHeaders(sourceFile, headers) : {},
-        };
-    }
-    return result;
-}
-function parseErrors(sourceFile, node) {
-    const property = findProperty(node, 'errors', sourceFile);
-    if (!property || !ts.isArrayLiteralExpression(property.initializer))
-        throw contractError(sourceFile, node, 'apiHeaders errors must be an array');
-    return property.initializer.elements.map((element) => {
-        if (!ts.isObjectLiteralExpression(element))
-            throw contractError(sourceFile, element, 'apiHeaders errors entries must be objects');
-        return {
-            code: requiredString(sourceFile, element, 'code'),
-            message: requiredString(sourceFile, element, 'message'),
-        };
-    });
-}
-function parseHeaders(sourceFile, node) {
-    const result = Object.create(null);
-    for (const property of node.properties) {
-        if (!ts.isPropertyAssignment(property) ||
-            !ts.isStringLiteral(property.name) ||
-            !ts.isObjectLiteralExpression(property.initializer))
-            throw contractError(sourceFile, property, 'apiHeaders header must be a string-keyed object property');
-        const description = stringProperty(property.initializer, 'description');
-        const format = stringProperty(property.initializer, 'format');
-        result[property.name.text] = {
-            type: requiredString(sourceFile, property.initializer, 'type'),
-            required: booleanProperty(property.initializer, 'required') ?? false,
-            ...(format ? { format: format } : {}),
-            ...(description ? { description } : {}),
-        };
-    }
-    return result;
-}
-function propertyObject(sourceFile, node, name) {
-    const property = findProperty(node, name, sourceFile);
-    if (!property)
-        return undefined;
-    if (!ts.isObjectLiteralExpression(property.initializer))
-        throw contractError(sourceFile, property, `apiHeaders ${name} must be an object`);
-    return property.initializer;
-}
-function stringProperty(node, name) {
-    const property = findProperty(node, name);
-    return property && ts.isStringLiteral(property.initializer)
-        ? property.initializer.text
-        : undefined;
-}
-function requiredString(sourceFile, node, name) {
-    const value = stringProperty(node, name);
-    if (!value)
-        throw contractError(sourceFile, node, `apiHeaders requires string ${name}`);
-    return value;
-}
-function booleanProperty(node, name) {
-    const property = findProperty(node, name);
-    if (!property)
-        return undefined;
-    if (property.initializer.kind === ts.SyntaxKind.TrueKeyword)
-        return true;
-    if (property.initializer.kind === ts.SyntaxKind.FalseKeyword)
-        return false;
-    return undefined;
-}
-function findProperty(node, name, sourceFile) {
-    return node.properties.find((item) => ts.isPropertyAssignment(item) && item.name.getText(sourceFile) === name);
-}

package/dist/api-contract-discovery/header-contract-registry.d.mts

@@ -1,3 +0,0 @@
-import ts from '../contract-schema/typescript-api.mts';
-import type { HeaderContractRegistry } from './header-contract-types.mts';
-export declare function discoverApiHeaderContracts(program: ts.Program, sourceFiles: readonly ts.SourceFile[], knownResponseRoutes: ReadonlySet<string>): HeaderContractRegistry;

package/dist/api-contract-discovery/header-contract-registry.mjs

@@ -1,40 +0,0 @@
-import ts from '../contract-schema/typescript-api.mjs';
-import { registerPlatformCompilerLibraries } from './protocol-platform-callbacks.mjs';
-import { contractError } from './response-contract-registration.mjs';
-import { parseHeaderContract } from './header-contract-parser.mjs';
-import { collectHandlerBindings, enclosingRouteBinding, visit, } from './response-contract-route-analysis.mjs';
-export function discoverApiHeaderContracts(program, sourceFiles, knownResponseRoutes) {
-    registerPlatformCompilerLibraries(program);
-    const checker = program.getTypeChecker();
-    const bindings = collectHandlerBindings(sourceFiles, checker);
-    const contracts = new Map();
-    const knownOperations = new Set([...knownResponseRoutes].map((key) => key.split('#')[0]));
-    for (const sourceFile of sourceFiles) {
-        visit(sourceFile, (node) => {
-            if (!ts.isCallExpression(node) || !isMarker(node.expression))
-                return;
-            const [keyNode, contractNode] = node.arguments;
-            if (!keyNode ||
-                !ts.isStringLiteral(keyNode) ||
-                !contractNode ||
-                !ts.isObjectLiteralExpression(contractNode)) {
-                throw contractError(sourceFile, node, 'apiHeaders requires a literal operation key and object contract');
-            }
-            const binding = enclosingRouteBinding(node, checker, bindings);
-            if (!binding)
-                throw contractError(sourceFile, node, 'apiHeaders must be inside an app.route handler');
-            const key = `${binding.method}:${binding.routeTemplate}`;
-            if (keyNode.text !== key)
-                throw contractError(sourceFile, keyNode, `Header operation key "${keyNode.text}" does not match enclosing route ${key}`);
-            if (!knownOperations.has(key))
-                throw contractError(sourceFile, keyNode, `apiHeaders references unknown response route ${key}`);
-            if (contracts.has(key))
-                throw contractError(sourceFile, keyNode, `Duplicate apiHeaders marker for ${key}`);
-            contracts.set(key, parseHeaderContract(sourceFile, contractNode));
-        });
-    }
-    return Object.fromEntries([...contracts.entries()].toSorted(([a], [b]) => a.localeCompare(b)));
-}
-function isMarker(expression) {
-    return ts.isIdentifier(expression) && expression.text === 'apiHeaders';
-}