From 499aa04c6088e6dbca40d6037f334bc972220b5b Mon Sep 17 00:00:00 2001
From: Frederik Prijck <frederik.prijck@okta.com>
Date: Mon, 20 Jul 2026 15:47:26 +0200
Subject: [PATCH] chore(packages): restrict published files to build output

Add a "files" allowlist to all four @a0/* packages so npm-published
tarballs ship only what consumers need, instead of the current default
that bundles src/, tests/, and dev tooling configs.

- @a0/evals, @a0/evals-core, @a0/evals-graders: dist only
- @a0/evals-reporter: dist + src/templates (report.html.j2 and report.css
  are loaded from src/templates at runtime and are not copied into dist by
  tsc, so they must ship)

Verified by packing all four, installing them into a fresh copy of
apps/auth0-evals outside the workspace, then building, running the a0-eval
CLI, and rendering an HTML report from the installed packages.
---
 packages/evals-core/package.json     | 1 +
 packages/evals-graders/package.json  | 1 +
 packages/evals-reporter/package.json | 1 +
 packages/evals/package.json          | 1 +
 4 files changed, 4 insertions(+)

diff --git a/packages/evals-core/package.json b/packages/evals-core/package.json
index fa59e7b6..0300c6a5 100644
--- a/packages/evals-core/package.json
+++ b/packages/evals-core/package.json
@@ -4,6 +4,7 @@
   "type": "module",
   "main": "dist/index.js",
   "types": "dist/index.d.ts",
+  "files": ["dist"],
   "exports": {
     ".": {
       "import": "./dist/index.js",
diff --git a/packages/evals-graders/package.json b/packages/evals-graders/package.json
index 1329dbda..8971e28b 100644
--- a/packages/evals-graders/package.json
+++ b/packages/evals-graders/package.json
@@ -4,6 +4,7 @@
   "type": "module",
   "main": "dist/index.js",
   "types": "dist/index.d.ts",
+  "files": ["dist"],
   "exports": {
     ".": {
       "import": "./dist/index.js",
diff --git a/packages/evals-reporter/package.json b/packages/evals-reporter/package.json
index fbc2c198..aea79d81 100644
--- a/packages/evals-reporter/package.json
+++ b/packages/evals-reporter/package.json
@@ -4,6 +4,7 @@
   "type": "module",
   "main": "dist/index.js",
   "types": "dist/index.d.ts",
+  "files": ["dist", "src/templates"],
   "exports": {
     ".": {
       "import": "./dist/index.js",
diff --git a/packages/evals/package.json b/packages/evals/package.json
index 75b6d497..f983582f 100644
--- a/packages/evals/package.json
+++ b/packages/evals/package.json
@@ -7,6 +7,7 @@
   "bin": {
     "a0-eval": "./dist/cli/bin.js"
   },
+  "files": ["dist"],
   "exports": {
     ".": {
       "import": "./dist/index.js",