joshunrau · Oct 5, 2026 · Oct 5, 2026 · Oct 5, 2026
@@ -19,9 +19,7 @@ export default config(
     typescript: { enabled: true }
   },
   {
-    ignores: [
-      /* generated files, vendored code, ... */
-    ]
+    ignores: [/* generated files, vendored code, ... */]
   }
 );
 ```

@@ -6,8 +6,8 @@ it. Read the `AGENTS.md` in a directory before editing it; this file only says w
 ## Before you add or move anything
 
 - **Workspace globs are `apps/*`, `packages/*`, `runtime/*`, `storybook`, `testing`, `vendor/**/\*`**
-(`pnpm-workspace.yaml`). A new directory under one of those is a workspace the moment it has a
-`package.json`. `cli/`, `docs/`, `blog/`and`.agents/` are not workspaces.
+  (`pnpm-workspace.yaml`). A new directory under one of those is a workspace the moment it has a
+  `package.json`. `cli/`, `docs/`, `blog/`and`.agents/` are not workspaces.
 - There are **27 first-party workspaces plus 38 under `vendor/`** — 66 entries including the root, as
   reported by `pnpm ls -r --depth -1`. The tables below cover the 27; `vendor/` is described as one
   group because every entry there follows the same shape.

@@ -197,3 +197,14 @@ tooling rearrange it. Where ordering is load-bearing, the existing code carries
 **Tests.** Keep test bodies short; each verifies one behavior. Descriptions are concise, grammatical
 sentences stating the behavioral reason, e.g. `'should key the cache on every parameter, so paging
 does not serve a stale page'`.
+
+<!-- BEGIN:turborepo-agent-rules -->
+
+# This is NOT the Turborepo you know
+
+Turborepo configuration, task behavior, and CLI commands can vary between installed versions and may differ from your training data. Resolve the `turbo` package from this file's directory or relevant workspace; in monorepos, it may not be visible from the repository root. For example, run `node -p "require.resolve('turbo/package.json')"` from a workspace that depends on `turbo`.
+
+Read `docs/README.md` inside that installed package first, then read the relevant pages from its `docs/` directory before changing Turborepo configuration or commands. Heed deprecation notices. These bundled docs match the installed package version and are available without network access.
+
+This block is written and re-added by `turbo` before repository-scoped commands when an AI agent is detected. In the Turborepo source repository, its template is defined in `crates/turborepo-cli/src/cli/agent_guidance.rs`. Removing the managed block while updates are enabled means a later qualifying invocation will add it again. Set `"agentGuidance": false` in the root `turbo.json` or `turbo.jsonc` to opt out; this does not remove an existing block. Keep the block committed with your work to avoid an uncommitted change on the next agent invocation.
+<!-- END:turborepo-agent-rules -->
@@ -6,7 +6,7 @@ ENV PNPM_HOME="/pnpm"
 ENV PATH="$PNPM_HOME:$PNPM_HOME/bin:$PATH"
 ENV NODE_OPTIONS="--max-old-space-size=8192"
 RUN corepack enable
-RUN pnpm install -g turbo@2.9.16
+RUN pnpm install -g turbo@2.11.5
 
 # PRUNE WORKSPACE
 # Note: Here we cannot use --docker, as is recommended, since the generated

@@ -15,24 +15,24 @@
     "test": "env-cmd -f ../../.env vitest"
   },
   "dependencies": {
-    "@aws-sdk/client-s3": "^3.1044.0",
-    "@aws-sdk/s3-request-presigner": "^3.1044.0",
+    "@aws-sdk/client-s3": "^3.1141.0",
+    "@aws-sdk/s3-request-presigner": "^3.1141.0",
     "@casl/ability": "^6.7.5",
     "@casl/prisma": "^1.5.1",
     "@douglasneuroinformatics/libcrypto": "catalog:",
     "@douglasneuroinformatics/libjs": "catalog:",
     "@douglasneuroinformatics/libnest": "^9.0.0",
     "@douglasneuroinformatics/libpasswd": "catalog:",
     "@douglasneuroinformatics/libstats": "catalog:",
-    "@faker-js/faker": "^9.4.0",
-    "@nestjs/axios": "^4.0.0",
-    "@nestjs/common": "^11.0.11",
-    "@nestjs/core": "^11.0.11",
-    "@nestjs/jwt": "^11.0.0",
-    "@nestjs/passport": "^11.0.5",
-    "@nestjs/platform-express": "^11.0.11",
-    "@nestjs/platform-fastify": "^11.1.11",
-    "@nestjs/throttler": "^6.5.0",
+    "@faker-js/faker": "~10.2.0",
+    "@nestjs/axios": "^12.0.1",
+    "@nestjs/common": "^11.2.6",
+    "@nestjs/core": "^11.2.6",
+    "@nestjs/jwt": "^12.0.2",
+    "@nestjs/passport": "^12.0.0",
+    "@nestjs/platform-express": "^11.2.6",
+    "@nestjs/platform-fastify": "^11.2.6",
+    "@nestjs/throttler": "^6.7.1",
     "@opendatacapture/demo": "workspace:*",
     "@opendatacapture/instrument-bundler": "workspace:*",
     "@opendatacapture/instrument-library": "workspace:*",
@@ -45,11 +45,11 @@
     "@prisma/client": "catalog:",
     "axios": "catalog:",
     "express": "^5.0.1",
-    "fastify": "^5.7.1",
+    "fastify": "^5.12.5",
     "hibp": "^15.2.1",
-    "jszip": "^3.10.1",
+    "jszip": "^3.10.2",
     "lodash-es": "workspace:lodash-es__4.x@*",
-    "mongodb": "^6.15.0",
+    "mongodb": "^7.6.0",
     "msgpackr": "catalog:",
     "neverthrow": "catalog:",
     "nodemailer": "catalog:",
@@ -61,12 +61,11 @@
     "zod": "workspace:zod__3.x@*"
   },
   "devDependencies": {
-    "@nestjs/testing": "^11.0.11",
+    "@nestjs/testing": "^11.2.6",
     "@types/express": "^5.0.0",
-    "@types/nodemailer": "catalog:",
     "@types/passport": "^1.0.17",
     "@types/passport-jwt": "^4.0.1",
-    "mongodb-memory-server": "^10.3.0",
+    "mongodb-memory-server": "^11.3.0",
     "prisma": "catalog:",
     "prisma-json-types-generator": "^3.2.2"
   },

@@ -6,7 +6,7 @@ ENV PNPM_HOME="/pnpm"
 ENV PATH="$PNPM_HOME:$PNPM_HOME/bin:$PATH"
 ENV NODE_OPTIONS="--max-old-space-size=8192"
 RUN corepack enable
-RUN pnpm install -g turbo@2.9.16
+RUN pnpm install -g turbo@2.11.5
 
 # PRUNE WORKSPACE
 # Note: Here we cannot use --docker, as is recommended, since the generated

@@ -19,7 +19,7 @@
   },
   "dependencies": {
     "@cap.js/server": "^2.0.0",
-    "@cap.js/widget": "^0.1.25",
+    "@cap.js/widget": "^0.1.58",
     "@douglasneuroinformatics/libcrypto": "catalog:",
     "@douglasneuroinformatics/libui": "catalog:",
     "@opendatacapture/react-core": "workspace:*",
@@ -28,16 +28,16 @@
     "@opendatacapture/schemas": "workspace:*",
     "@prisma/client": "catalog:",
     "axios": "catalog:",
-    "compression": "^1.7.5",
+    "compression": "^1.8.2",
     "express": "^5.2.1",
     "lodash-es": "workspace:lodash-es__4.x@*",
     "pino": "^10.3.1",
     "pino-http": "^11.0.0",
     "pino-pretty": "^13.1.3",
     "react": "workspace:react__19.x@*",
     "react-dom": "workspace:react-dom__19.x@*",
-    "sirv": "^2.0.4",
-    "sqlite3": "^5.1.7",
+    "sirv": "^3.0.2",
+    "sqlite3": "^6.0.1",
     "zod": "workspace:zod__3.x@*"
   },
   "devDependencies": {
@@ -47,7 +47,7 @@
     "@tailwindcss/vite": "catalog:",
     "@types/compression": "^1.7.5",
     "@types/express": "^5.0.6",
-    "@vitejs/plugin-react-swc": "^4.3.0",
+    "@vitejs/plugin-react-swc": "^4.3.3",
     "esbuild": "catalog:",
     "nodemon": "catalog:",
     "prisma": "catalog:",

@@ -113,7 +113,7 @@ export const Root = (props: RootProps) => {
             </div>
           </div>
         </header>
-        <main className="container flex min-h-0 max-w-3xl grow flex-col pb-16 pt-32 xl:max-w-5xl">
+        <main className="container flex min-h-0 max-w-3xl grow flex-col pt-32 pb-16 xl:max-w-5xl">
           {props.kind === 'assignment' ? <Assignment {...props} /> : <Landing />}
         </main>
       </div>

@@ -19,21 +19,21 @@
     "lodash-es": "workspace:lodash-es__4.x@*",
     "mdast-util-to-string": "^4.0.0",
     "reading-time": "^1.5.0",
-    "tailwind-merge": "^2.6.0",
+    "tailwind-merge": "^3.7.0",
     "zod": "workspace:zod__3.x@*"
   },
   "devDependencies": {
-    "@astrojs/check": "^0.9.4",
-    "@astrojs/sitemap": "^3.2.1",
+    "@astrojs/check": "^0.9.10",
+    "@astrojs/sitemap": "^3.7.4",
     "@astrojs/starlight": "^0.34.3",
-    "@astrojs/starlight-tailwind": "4.0.1",
+    "@astrojs/starlight-tailwind": "4.0.2",
     "@opendatacapture/runtime-core": "workspace:*",
     "@opendatacapture/runtime-meta": "workspace:*",
-    "@tailwindcss/typography": "^0.5.16",
+    "@tailwindcss/typography": "^0.5.20",
     "@tailwindcss/vite": "catalog:",
     "astro": "^5.15.9",
     "github-slugger": "^2.0.0",
-    "sharp": "^0.33.5",
+    "sharp": "^0.34.5",
     "tailwindcss": "catalog:",
     "type-fest": "workspace:type-fest__4.x@*",
     "typedoc": "0.27.x",

@@ -12,7 +12,7 @@ const { className } = Astro.props;
 
 <a class={cn('flex h-10 items-center no-underline [&>svg]:h-full [&>svg]:w-auto', className)} href={translatePath('/')}>
   <Logo class="fill-sky-900 dark:fill-slate-100" />
-  <span class="ml-3 whitespace-nowrap font-semibold tracking-tight text-slate-700 dark:text-slate-300">
+  <span class="ml-3 font-semibold tracking-tight whitespace-nowrap text-slate-700 dark:text-slate-300">
     {t('meta.title')}
   </span>
 </a>
@@ -34,7 +34,7 @@ const { description, id = crypto.randomUUID(), heading, subheading, screenshot,
     class="flex translate-y-10 flex-col justify-end opacity-0 transition-all duration-700 lg:justify-center"
     id={mainContentId}
   >
-    <span class="text-muted-foreground text-sm font-semibold uppercase tracking-wide">{subheading}</span>
+    <span class="text-muted-foreground text-sm font-semibold tracking-wide uppercase">{subheading}</span>
     <h3 class="mt-2 text-3xl font-extrabold">{heading}</h3>
     <p class="text-muted-foreground mt-5">
       {description}

@@ -9,7 +9,7 @@ const { t } = useTranslations(Astro.url);
 <section class="flex min-h-[calc(100vh-4rem)] gap-12 text-center lg:-mt-8 lg:text-left" id="hero-section">
   <div class="flex translate-y-10 flex-col justify-center opacity-0 transition-all duration-1000 lg:w-1/2 xl:w-7/12">
     <h1
-      class="text-pretty text-3xl font-bold tracking-tight text-slate-900 md:text-4xl xl:text-5xl dark:text-slate-100"
+      class="text-3xl font-bold tracking-tight text-pretty text-slate-900 md:text-4xl xl:text-5xl dark:text-slate-100"
     >
       {t('landing.hero.heading')}
     </h1>
@@ -18,15 +18,15 @@ const { t } = useTranslations(Astro.url);
     </p>
     <div class="mt-5 flex justify-center gap-3 lg:justify-start">
       <a
-        class="focus:outline-hidden flex items-center justify-center rounded-md bg-slate-800 px-6 py-2 font-medium text-slate-100 shadow-md hover:bg-slate-700 dark:bg-sky-700 dark:hover:bg-sky-600"
+        class="flex items-center justify-center rounded-md bg-slate-800 px-6 py-2 font-medium text-slate-100 shadow-md hover:bg-slate-700 focus:outline-hidden dark:bg-sky-700 dark:hover:bg-sky-600"
         href="https://demo.opendatacapture.org"
         rel="noreferrer"
         target="_blank"
       >
         {t('landing.hero.viewDemo')}
       </a>
       <button
-        class="focus:outline-hidden flex items-center justify-center rounded-md border bg-inherit px-6 py-2 font-medium shadow-md"
+        class="flex items-center justify-center rounded-md border bg-inherit px-6 py-2 font-medium shadow-md focus:outline-hidden"
         id="learn-more-btn"
         type="button"
       >

@@ -39,7 +39,7 @@ const { resolvedLanguage, t } = useTranslations(Astro.url);
             <blockquote class="text-muted-foreground max-w-prose text-center">{quote[resolvedLanguage]}</blockquote>
             <span class="inline-block h-1 w-10 rounded-sm bg-sky-700" />
             <div class="flex flex-col items-center">
-              <h5 class="text-foreground overflow-hidden text-ellipsis whitespace-nowrap font-semibold tracking-wide md:text-lg">
+              <h5 class="text-foreground overflow-hidden font-semibold tracking-wide text-ellipsis whitespace-nowrap md:text-lg">
                 {`${fullName}${suffix ? `, ${suffix}` : ''}`}
               </h5>
               <p class="text-muted-foreground text-center text-sm tracking-tight">{position[resolvedLanguage]}</p>

@@ -38,7 +38,7 @@ posts.sort((a, b) => {
           return (
             <li class="translate-y-6 opacity-0 transition-all duration-500 ease-in-out">
               <a
-                class="shadow-xs block h-full w-full cursor-pointer rounded-md border border-slate-300 bg-slate-50 p-5 dark:border-slate-600 dark:bg-slate-800"
+                class="block h-full w-full cursor-pointer rounded-md border border-slate-300 bg-slate-50 p-5 shadow-xs dark:border-slate-600 dark:bg-slate-800"
                 href={translatePath(`/blog/${post.slug}`)}
               >
                 <span

@@ -30,18 +30,18 @@ const { resolvedLanguage, t } = useTranslations(Astro.url);
     {
       team.map(({ data: { fullName, suffix, position, image, description } }) => (
         <li class="translate-y-6 opacity-0 transition-all duration-500 ease-in-out">
-          <div class="shadow-xs relative grid h-full gap-8 rounded-md border border-slate-300 bg-slate-50 p-5 md:grid-cols-4 md:rounded-none md:border-none md:bg-inherit md:p-0 md:shadow-none lg:grid-cols-3 dark:border-slate-600 dark:bg-slate-800 md:dark:bg-inherit">
-            <div class="absolute left-5 top-5 h-14 w-14 md:static md:flex md:h-auto md:w-auto md:items-center md:justify-center">
+          <div class="relative grid h-full gap-8 rounded-md border border-slate-300 bg-slate-50 p-5 shadow-xs md:grid-cols-4 md:rounded-none md:border-none md:bg-inherit md:p-0 md:shadow-none lg:grid-cols-3 dark:border-slate-600 dark:bg-slate-800 md:dark:bg-inherit">
+            <div class="absolute top-5 left-5 h-14 w-14 md:static md:flex md:h-auto md:w-auto md:items-center md:justify-center">
               <Headshot className="md:rounded-lg md:shadow-lg" src={image} alt={fullName} />
             </div>
             <div class="flex flex-col md:col-span-3 lg:col-span-2">
               <div class="mb-2 flex h-14 flex-col justify-between py-2.5 pl-[4.25rem] md:mb-0 md:py-1.5 md:pl-0">
-                <h5 class="font-bold leading-none tracking-tight md:text-lg">{`${fullName}${suffix ? `, ${suffix}` : ''}`}</h5>
-                <span class="text-sm font-semibold leading-none tracking-tight text-sky-700 md:text-base dark:text-sky-500 md:dark:text-sky-400">
+                <h5 class="leading-none font-bold tracking-tight md:text-lg">{`${fullName}${suffix ? `, ${suffix}` : ''}`}</h5>
+                <span class="text-sm leading-none font-semibold tracking-tight text-sky-700 md:text-base dark:text-sky-500 md:dark:text-sky-400">
                   {position[resolvedLanguage]}
                 </span>
               </div>
-              <p class="py-1.5 text-sm font-normal leading-tight text-slate-700 dark:text-slate-300">
+              <p class="py-1.5 text-sm leading-tight font-normal text-slate-700 dark:text-slate-300">
                 {description[resolvedLanguage]}
               </p>
             </div>

@@ -1,4 +1,4 @@
-@plugin "@tailwindcss/typography";
+@plugin '@tailwindcss/typography';
 @import '@douglasneuroinformatics/libui/tailwind/globals.css';
 @import './common.css';
 

@@ -13,7 +13,7 @@ Two modules do real work at import time, and both are fragile.
 - **`src/pages/IndexPage.tsx`** calls `await initialize({ wasmURL })` from `esbuild-wasm` above the
   component. esbuild-wasm throws `Cannot call "initialize" more than once` on a second call, so this
   must stay in exactly one module. `src/App.tsx` reaches it through `React.lazy`, which is what puts
-  the 11 MB `esbuild.wasm` download behind the Suspense fallback. Importing `IndexPage` eagerly, or
+  the 13 MB `esbuild.wasm` download behind the Suspense fallback. Importing `IndexPage` eagerly, or
   adding a second `initialize()`, breaks the app at boot.
 - **`src/components/Editor/setup.ts`** configures Monaco (workers, compiler options, themes, prettier
   as the formatter) inside a top-level `await loader.init()` block. `Editor.tsx` pulls it in with a

@@ -4,7 +4,7 @@ ENV PNPM_HOME="/pnpm"
 ENV PATH="$PNPM_HOME:$PNPM_HOME/bin:$PATH"
 ENV NODE_OPTIONS="--max-old-space-size=8192"
 RUN corepack enable
-RUN pnpm install -g turbo@2.9.16
+RUN pnpm install -g turbo@2.11.5
 
 # PRUNE WORKSPACE
 # Note: Here we cannot use --docker, as is recommended, since the generated

@@ -23,35 +23,35 @@
     "@opendatacapture/runtime-core": "workspace:*",
     "@opendatacapture/runtime-v1": "workspace:*",
     "@opendatacapture/schemas": "workspace:*",
-    "@radix-ui/react-context-menu": "^2.2.6",
+    "@radix-ui/react-context-menu": "^2.3.7",
     "axios": "catalog:",
     "cmdk": "^1.1.1",
     "esbuild-wasm": "catalog:",
-    "idb-keyval": "^6.2.2",
-    "immer": "^10.1.1",
-    "jszip": "^3.10.1",
+    "idb-keyval": "^6.3.0",
+    "immer": "^11.1.18",
+    "jszip": "^3.10.2",
     "jwt-decode": "^4.0.0",
     "lodash-es": "workspace:lodash-es__4.x@*",
-    "lucide-react": "^0.503.0",
-    "monaco-editor": "^0.52.2",
+    "lucide-react": "^0.577.0",
+    "monaco-editor": "^0.54.0",
     "motion": "catalog:",
     "neverthrow": "catalog:",
     "react": "workspace:react__19.x@*",
     "react-dom": "workspace:react-dom__19.x@*",
     "react-dropzone": "catalog:",
-    "react-error-boundary": "^5.0.0",
-    "react-resizable-panels": "^2.1.7",
+    "react-error-boundary": "^6.1.6",
+    "react-resizable-panels": "^3.0.6",
     "stacktrace-parser": "^0.1.11",
     "ts-pattern": "workspace:ts-pattern__5.x@*",
     "zod": "workspace:zod__3.x@*",
-    "zod-validation-error": "^3.4.0",
+    "zod-validation-error": "^5.0.0",
     "zustand": "catalog:"
   },
   "devDependencies": {
     "@opendatacapture/vite-plugin-runtime": "workspace:*",
     "@storybook/react-vite": "catalog:",
     "@tailwindcss/vite": "catalog:",
-    "@vitejs/plugin-react-swc": "^4.3.0",
+    "@vitejs/plugin-react-swc": "^4.3.3",
     "tailwindcss": "catalog:",
     "type-fest": "workspace:type-fest__4.x@*",
     "vite": "catalog:"

@@ -14,7 +14,7 @@ export const CommandInput = forwardRef<
       <SearchIcon className="mr-2 h-4 w-4 shrink-0 opacity-50" />
       <CommandPrimitive.Input
         className={cn(
-          'placeholder:text-muted-foreground outline-hidden flex h-10 w-full rounded-md bg-transparent py-3 text-sm disabled:cursor-not-allowed disabled:opacity-50',
+          'placeholder:text-muted-foreground flex h-10 w-full rounded-md bg-transparent py-3 text-sm outline-hidden disabled:cursor-not-allowed disabled:opacity-50',
           className
         )}
         ref={ref}

@@ -10,7 +10,7 @@ export const CommandItem = forwardRef<
   return (
     <CommandPrimitive.Item
       className={cn(
-        'aria-selected:bg-accent aria-selected:text-accent-foreground rounded-xs outline-hidden relative flex cursor-pointer select-none items-center px-2 py-1.5 text-sm data-[disabled=true]:pointer-events-none data-[disabled=true]:opacity-50',
+        'aria-selected:bg-accent aria-selected:text-accent-foreground relative flex cursor-pointer items-center rounded-xs px-2 py-1.5 text-sm outline-hidden select-none data-[disabled=true]:pointer-events-none data-[disabled=true]:opacity-50',
         className
       )}
       ref={ref}

@@ -9,7 +9,7 @@ export const CommandList = forwardRef<
 >(function CommandList({ className, ...props }, ref) {
   return (
     <CommandPrimitive.List
-      className={cn('max-h-[300px] overflow-y-auto overflow-x-hidden', className)}
+      className={cn('max-h-[300px] overflow-x-hidden overflow-y-auto', className)}
       ref={ref}
       {...props}
     />

@@ -12,7 +12,7 @@ export const ContextMenuCheckboxItem = forwardRef<
     <ContextMenuPrimitive.CheckboxItem
       checked={checked}
       className={cn(
-        'focus:bg-accent focus:text-accent-foreground rounded-xs outline-hidden relative flex cursor-default select-none items-center py-1.5 pl-8 pr-2 text-sm data-[disabled]:pointer-events-none data-[disabled]:opacity-50',
+        'focus:bg-accent focus:text-accent-foreground relative flex cursor-default items-center rounded-xs py-1.5 pr-2 pl-8 text-sm outline-hidden select-none data-[disabled]:pointer-events-none data-[disabled]:opacity-50',
         className
       )}
       ref={ref}