Group the sources into aliased modules and lint with the published plugins

tests/workflow.test.ts

@@ -1,12 +1,11 @@
 import { readdir, readFile, rm, stat } from "node:fs/promises";
 import process from "node:process";
-
 import { assert, expect, test } from "vite-plus/test";
 import { parse } from "yaml";
 
 import { makeTempDir, runCommand } from "#testing";
 
-type JsonObject = Record<string, unknown>;
+type JsonObject = NodeJS.Dict<unknown>;
 
 const isMapping = (value: unknown): value is JsonObject =>
   typeof value === "object" && value !== null && !Array.isArray(value);
@@ -90,6 +89,8 @@ test("the source protection script stages immutable action files", async () => {
       "src/prepare.ts",
       "src/run.ts",
       "src/post.ts",
+      "src/runtime/index.ts",
+      "src/agents/auth.ts",
       "package.json",
       "profiles.json",
       "prompt.md",