docs(buck2): record blocked NativeLink RE probe

.buckconfig

@@ -0,0 +1,35 @@
+[cells]
+  effect_utils = .
+  capabilities = .buck2/capabilities
+  prelude = prelude
+
+[cell_aliases]
+  config = prelude
+  ovr_config = prelude
+  fbsource = prelude
+  toolchains = effect_utils
+
+[external_cells]
+  prelude = bundled
+
+[parser]
+  target_platform_detector_spec = target:effect_utils//...->effect_utils//buck2/platforms:host_platform
+
+[build]
+  execution_platforms = effect_utils//buck2/platforms:host_execution_platform
+
+[buck2]
+  file_watcher = notify
+  default_allow_cache_upload = true
+  digest_algorithms = SHA256
+
+[buck2_re_client]
+  action_cache_address = grpc://dev3:41045
+  cas_address = grpc://dev3:41045
+  engine_address = grpc://dev3:41045
+  http_headers = authorization: Basic $BUCK2_REMOTE_CACHE_BASIC_AUTH
+  instance_name = effect-utils
+  tls = false
+
+[project]
+  ignore = **/__pycache__,**/dist,**/node_modules,**/node_modules/**,**/target,**/target/**,.buck2/capabilities.candidate.*,.devenv,.git,buck-out,node_modules,packages/.editor-view,target,tmp

.github/workflows/ci.yml.genie.ts

@@ -9,7 +9,6 @@ import {
   prepareCiScriptsStep,
   prepareEffectUtilsCompositionStep,
   notifyAlignmentJob,
-  evictCachedPnpmDepsStep,
   pnpmBuilderContractStep,
   preparePinnedDevenvStep,
   installNixStep,
@@ -29,14 +28,12 @@ import {
   namespaceRunner,
   nixClosureMeasurementSteps,
   sourceShapeMeasurementStep,
-  validateColdPnpmDepsStep,
   nixDiagnosticsArtifactStep,
   workflowReportCommentBodyStep,
   workflowReportCollectorStep,
   workflowReportPublisherStep,
   deployPreviewWorkflowReportPathOutputName,
   netlifyDeployStep,
-  nixCacheSetupStep,
   validateNixStoreStep,
   withCiSourceRoot,
   defaultRefPolicyCheckJob,
@@ -66,10 +63,6 @@ const baseSteps = [
   prepareCiScriptsStep,
   preparePinnedDevenvStep,
   validateNixStoreStep,
-  evictCachedPnpmDepsStep({
-    flakeRef: '.#oxlint-npm',
-    name: 'Evict cached pnpm deps for oxlint-npm',
-  }),
   /**
    * Temporary debug switch for #272 to validate failure-path diagnostics without waiting for a real flake.
    * Remove once #201/#272 are root-caused and diagnostics instrumentation is removed.
@@ -152,7 +145,7 @@ const liveNetlifyCiToolsE2EStep = {
     [
       'netlify_pkg="$(nix build --no-link --print-out-paths .#netlify-cli)"',
       'export CI_TOOLS_LIVE_NETLIFY_BIN="$netlify_pkg/bin/netlify"',
-      'DEVENV_TASK_PASSTHROUGH=1 DEVENV_TUI=false "${DEVENV_BIN:?DEVENV_BIN not set}" tasks run pnpm:install',
+      'DEVENV_TASK_PASSTHROUGH=1 DEVENV_TUI=false "${DEVENV_BIN:?DEVENV_BIN not set}" tasks run buck2:editor:publish',
       'DEVENV_TUI=false "${DEVENV_BIN:?DEVENV_BIN not set}" shell --no-reload -- bun test packages/@overeng/ci-tools/src/deploy-netlify.live.e2e.test.ts',
     ].join('\n'),
   ),
@@ -214,7 +207,7 @@ const liveVercelCiToolsE2EStep = {
     [
       'vercel_pkg="$(nix build --no-link --print-out-paths .#vercel-cli)"',
       'export CI_TOOLS_LIVE_VERCEL_BIN="$vercel_pkg/bin/vercel"',
-      'DEVENV_TASK_PASSTHROUGH=1 DEVENV_TUI=false "${DEVENV_BIN:?DEVENV_BIN not set}" tasks run pnpm:install',
+      'DEVENV_TASK_PASSTHROUGH=1 DEVENV_TUI=false "${DEVENV_BIN:?DEVENV_BIN not set}" tasks run buck2:editor:publish',
       'DEVENV_TUI=false "${DEVENV_BIN:?DEVENV_BIN not set}" shell --no-reload -- bun test packages/@overeng/ci-tools/src/deploy-vercel.live.e2e.test.ts',
     ].join('\n'),
   ),
@@ -438,16 +431,12 @@ const nativeDepPolicyAuditStep = {
 
 // Core product jobs keyed by the shared Genie CI source of truth.
 const jobs: Record<CoreCIJobName, ReturnType<typeof job> | ReturnType<typeof multiPlatformJob>> = {
-  // Typecheck authority is split after the Buck cutover, so this lane gates on both halves:
-  //   - `buck2:check` owns typecheck and dist for every package carrying Buck `authority`.
-  //   - `ts:check:strict` owns only the residual root TypeScript solution (the projects with
-  //     no Buck authority). It consumes Buck-owned declarations through the dist overlays that
-  //     `buck2:typescript:materialize-dist` publishes, so it is ordered after the materializer.
+  // Buck is the single TypeScript check and declaration authority.
   typecheck: job({
     step: {
-      name: 'Type check (Buck authority + residual root solution)',
+      name: 'Type check (Buck)',
       env: githubTokenEnv(),
-      run: runDevenvTasksBefore('buck2:check', 'ts:check:strict'),
+      run: runDevenvTasksBefore('buck2:check'),
     },
     extraSteps: [verifyOtelShellEntryStep],
   }),
@@ -520,9 +509,9 @@ const jobs: Record<CoreCIJobName, ReturnType<typeof job> | ReturnType<typeof mul
     // and the genie policy source, both present here without node_modules.
     extraSteps: [nativeDepPolicyAuditStep],
   }),
-  // After the cutover `mk-pnpm-cli` has no in-repo CLI consumer left: it is exercised only by
-  // its own contract suite here and, through `mk-pnpm-deps.nix`, by the oxc-config plugin FOD.
-  // That makes this lane the sole remaining guard on the shared pnpm deps helper.
+  // `mk-pnpm-cli` and `mk-pnpm-deps` remain reusable public helpers, so their
+  // own contract suite keeps this lane even though no repository JavaScript
+  // product consumes them.
   'pnpm-regression': job({
     step: {
       name: 'pnpm regression suite',
@@ -705,7 +694,8 @@ const extraJobs: Record<string, any> = {
             '"${DEVENV_BIN:?DEVENV_BIN not set}" shell -- bun test \\',
             '  genie/buck2/typescript-package-projection.unit.test.ts \\',
             '  genie/buck2/javascript-candidates.unit.test.ts \\',
-            '  packages/@overeng/buck2-tools/src/package-command-runner.unit.test.ts',
+            '  packages/@overeng/buck2-tools/src/package-command-runner.unit.test.ts \\',
+            '  packages/@overeng/buck2-tools/src/javascript-runner.unit.test.ts',
           ].join('\n'),
         ),
       },
@@ -729,7 +719,7 @@ const extraJobs: Record<string, any> = {
           [
             'set -euo pipefail',
             "tracked_editor=$(git ls-files -- '**/.editor-view/**' '.editor-view/**')",
-            `tracked_product=$(git ls-files -- 'nix/buck2-products/**' | grep -Ev '^nix/buck2-products/(default\\.nix|manifest\\.json|publish\\.sh)$' || true)`,
+            `tracked_product=$(git ls-files -- 'nix/buck2-products/**' | grep -Ev '^nix/buck2-products/(default\\.nix|manifest\\.json|publish\\.sh|targets\\.json|targets\\.json\\.genie\\.ts)$' || true)`,
             'if [ -n "$tracked_editor$tracked_product" ]; then',
             '  printf \'Tracked inert payload bytes are forbidden:\\n%s\\n%s\\n\' "$tracked_editor" "$tracked_product" >&2',
             '  exit 1',
@@ -747,10 +737,10 @@ const extraJobs: Record<string, any> = {
             '  cd "${EFFECT_UTILS_WORKSPACE_ROOT:?EFFECT_UTILS_WORKSPACE_ROOT not set}"',
             '  buck="$PWD/.megarepo/bin/buck2"',
             '  "$buck" query effect_utils//packages/@overeng/ci-tools:ci-tools-candidate',
-            '  "$buck" query effect_utils//packages/@overeng/tui-core:editor_view_inputs',
+            '  "$buck" query effect_utils//:editor_view_inputs',
             '  "$buck" build \\',
             '    effect_utils//packages/@overeng/ci-tools:ci-tools-candidate \\',
-            '    effect_utils//packages/@overeng/tui-core:editor_view_inputs',
+            '    effect_utils//:editor_view_inputs',
             "'",
           ].join('\n'),
         ),
@@ -961,10 +951,10 @@ const extraJobs: Record<string, any> = {
       setupSteps: baseSteps,
       taskProbes: [
         {
-          task: 'pnpm:install',
-          label: 'pnpm install task',
+          task: 'buck2:editor:publish',
+          label: 'Editor dependency publication',
           group: 'workspace setup',
-          description: 'Runs the cached pnpm install devenv task.',
+          description: 'Publishes the complete Buck-owned editor dependency surface.',
           warmupRepetitions: 1,
           repetitions: 5,
         },

.oxlintrc.json.genie.ts

@@ -113,6 +113,12 @@ export default oxlintConfig({
       files: ['**/utils/src/node/otel.ts', '**/utils/src/node/otel-attrs.ts'],
       rules: { 'oxc/no-barrel-file': 'off' },
     },
+    // This file is the package's intentional public schema subpath. Keep the
+    // public contract explicit instead of de-barreling the consumer-facing API.
+    {
+      files: ['**/react-inspector/src/schema/mod.tsx'],
+      rules: { 'oxc/no-barrel-file': 'off' },
+    },
     // restate-effect's `./testing` harness has a benign barrel-induced cycle:
     // `testing.ts` aggregates and re-exports `RestateTestEnv`, which imports the
     // harness back from `testing.ts`. Test-infra aggregation, not a runtime