fix(ci): cache .d.rozie.ts sidecars as turbo outputs + non-vacuous WR-03 gate

Fixes the red main on 4084548 (5 framework matrices failed with TS2307 on
every .rozie import). Root cause: that push touched only examples/demos/ + a
VR spec, so every vite-demo build was a turbo CACHE HIT — buildStart never
ran, no sidecars were generated on CI's fresh checkout, and turbo's cached
outputs (dist/** only) did not include the src/ sidecars. The WR-03
--require-complete gate then passed VACUOUSLY because its missing-sidecar walk
derived its directory set from existing sidecars (zero sidecars = zero
directories = nothing missing), letting the failure surface as a wall of
TS2307s at typecheck instead.

Every prior push since Phase 22 invalidated all caches via compiler changes,
which is why this never fired before.

Fix 1 (root cause): declare src/**/*.d.rozie.ts + app/**/*.d.rozie.ts as build
task outputs so cache replay restores sidecars. Verified: delete all 43
sidecars -> FULL TURBO replay -> all 43 restored, Angular exception still 0.

Fix 2 (defense): --require-complete now walks every .rozie under
examples/consumers/ (except the ANGULAR EXCEPTION tree) independently of which
sidecars exist — a zero-sidecar build fails at WR-03 with the right message.
Verified: incident simulation (zero sidecars) now exits 1.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

Author: serpentblade

scripts/check-sidecar-staleness.mjs

@@ -234,9 +234,8 @@ function runGate(requireComplete) {
     if (!result.ok) stale.push(result.reason);
   }
 
-  // Missing-declaration gap: a `.rozie` that lives next to OTHER sidecar'd
-  // siblings (i.e. in a directory that already participates in sidecar
-  // generation) but has NO sidecar of its own.
+  // Missing-declaration gap: a `.rozie` consumer source with NO sidecar of its
+  // own.
   //
   // Default (dev / pre-push): on a fresh checkout this is expected (sidecars
   // are gitignored), and that case is handled by CI ordering (generate before
@@ -249,14 +248,22 @@ function runGate(requireComplete) {
   // per-file error in emitSidecarsForRoot) — the consumer's tsc would fall
   // back to the wildcard and type-lie, the exact failure this gate exists to
   // catch. With the flag, a missing sidecar is a HARD failure (exit 1).
-  const sidecarDirs = new Set(sidecars.map((p) => dirname(p)));
+  //
+  // The walk here MUST be independent of which sidecars exist. The previous
+  // implementation derived the directory set FROM existing sidecars
+  // (`new Set(sidecars.map(dirname))`), which passed VACUOUSLY when the build
+  // produced ZERO sidecars — exactly what happened in the 2026-06-02 incident:
+  // a turbo cache replay restored `dist/**` (the declared outputs) but not the
+  // src/ sidecars, buildStart never ran, this gate said "0 sidecar(s) OK", and
+  // the downstream tsc failed with a wall of TS2307s. Walking the consumer
+  // tree directly (every `.rozie` under examples/consumers/ except the
+  // ANGULAR-EXCEPTION tree, which must NEVER have sidecars) makes a
+  // zero-sidecar build fail HERE, loudly, with the right message.
   const missing = [];
-  for (const dir of sidecarDirs) {
-    const roziesHere = walk(dir, (n) => n.endsWith('.rozie'));
-    for (const r of roziesHere) {
-      const expected = r.replace(/\.rozie$/, '.d.rozie.ts');
-      if (!existsSync(expected)) missing.push(`${r} (expected ${expected})`);
-    }
+  const consumerRozies = walk(CONSUMERS_DIR, (n) => n.endsWith('.rozie'), [], ['angular-analogjs']);
+  for (const r of consumerRozies) {
+    const expected = r.replace(/\.rozie$/, '.d.rozie.ts');
+    if (!existsSync(expected)) missing.push(`${r} (expected ${expected})`);
   }
 
   if (stale.length > 0) {

turbo.json

@@ -3,7 +3,7 @@
   "tasks": {
     "build": {
       "dependsOn": ["^build"],
-      "outputs": ["dist/**"]
+      "outputs": ["dist/**", "src/**/*.d.rozie.ts", "app/**/*.d.rozie.ts"]
     },
     "@rozie/runtime-svelte#build": {
       "dependsOn": ["^build"],