@bleedingdev/modern-js-create 3.2.0-ultramodern.29 → 3.2.0-ultramodern.30

package/package.json

@@ -21,7 +21,7 @@
   "engines": {
     "node": ">=20"
   },
-  "version": "3.2.0-ultramodern.29",
+  "version": "3.2.0-ultramodern.30",
   "types": "./dist/types/index.d.ts",
   "main": "./dist/index.js",
   "bin": {
@@ -39,9 +39,9 @@
   "devDependencies": {
     "@rslib/core": "0.21.5",
     "@types/node": "^25.9.1",
-    "@typescript/native-preview": "7.0.0-dev.20260526.1",
+    "@typescript/native-preview": "7.0.0-dev.20260527.2",
     "tsx": "^4.22.3",
-    "@modern-js/i18n-utils": "npm:@bleedingdev/modern-js-i18n-utils@3.2.0-ultramodern.29"
+    "@modern-js/i18n-utils": "npm:@bleedingdev/modern-js-i18n-utils@3.2.0-ultramodern.30"
   },
   "publishConfig": {
     "registry": "https://registry.npmjs.org/",
@@ -54,6 +54,6 @@
     "start": "node ./dist/index.js"
   },
   "ultramodern": {
-    "frameworkVersion": "3.2.0-ultramodern.29"
+    "frameworkVersion": "3.2.0-ultramodern.30"
   }
 }

package/template/.github/workflows/ultramodern-gates.yml.handlebars

@@ -29,27 +29,26 @@ jobs:
           egress-policy: audit
 
       - name: Checkout
-        uses: actions/checkout@93cb6efe18208431cddfb8368fd83d5badbf9bfd # v5
+        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
         with:
           fetch-depth: 1
           persist-credentials: false
 
-      - name: Setup pnpm
-        uses: pnpm/action-setup@0e279bb959325dab635dd2c09392533439d90093 # v6.0.8
-
       - name: Setup Node.js
-        uses: actions/setup-node@a0853c24544627f65ddf259abe73b1d18a591444 # v5
+        uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6.4.0
         with:
           node-version: 24
-          cache: pnpm
+
+      - name: Setup mise
+        uses: jdx/mise-action@5ac50f778e26fac95da98d50503682459e86d566 # v3.2.0
 
       - name: Install Dependencies
-        run: pnpm install --frozen-lockfile
+        run: mise exec -- pnpm install --frozen-lockfile
 
       - name: Validate Ultramodern Contract
-        run: pnpm run ultramodern:check
+        run: mise exec -- pnpm run ultramodern:check
 
       - name: Build
         env:
           MODERN_PUBLIC_SITE_URL: http://localhost:8080
-        run: pnpm run build
+        run: mise exec -- pnpm run build

package/template/.mise.toml.handlebars

@@ -0,0 +1,2 @@
+[tools]
+pnpm = "{{pnpmVersion}}"

package/template/AGENTS.md

@@ -8,7 +8,7 @@ This project is generated for Codex-first UltraModern.js work.
 - `pnpm format` runs oxfmt.
 - `pnpm typecheck` runs effect-tsgo as the TypeScript checker.
 - `pnpm i18n:check` rejects hardcoded user-visible JSX text.
-- `pnpm ultramodern:check` verifies the generated contract.
+- `mise exec -- pnpm ultramodern:check` verifies the generated contract.
 
 ## Internationalization
 

package/template/README.md

@@ -5,7 +5,8 @@
 Install the dependencies:
 
 ```bash
-pnpm install
+mise install
+mise exec -- pnpm install
 ```
 
 ## Get Started
@@ -13,19 +14,19 @@ pnpm install
 Start the dev server:
 
 ```bash
-pnpm dev
+mise exec -- pnpm dev
 ```
 
 Build the app for production:
 
 ```bash
-pnpm build
+mise exec -- pnpm build
 ```
 
 Validate the generated Ultramodern preset contract locally:
 
 ```bash
-pnpm run ultramodern:check
+mise exec -- pnpm run ultramodern:check
 ```
 
 The generated preset defaults are opt-out. Disable specific contracts via env vars:
@@ -37,12 +38,12 @@ MODERN_BASELINE_ENABLE_TELEMETRY_EXPORTERS=false
 ```
 
 The generated starter also includes `.github/workflows/ultramodern-gates.yml`
-and `.github/renovate.json`. The workflow runs `pnpm run ultramodern:check` and
-`pnpm run build` on every push and pull request with read-only permissions,
-commit-pinned actions, frozen installs, and StepSecurity audit-mode runner
-hardening. Renovate is configured for dependency dashboard review, one-day
-release age, grouped updates, action digest pinning, and manual approval for
-major upgrades.
+and `.github/renovate.json`. The workflow runs
+`mise exec -- pnpm run ultramodern:check` and `mise exec -- pnpm run build` on
+every push and pull request with read-only permissions, commit-pinned actions,
+frozen installs, and StepSecurity audit-mode runner hardening. Renovate is
+configured for dependency dashboard review, one-day release age, grouped
+updates, action digest pinning, and manual approval for major upgrades.
 
 ## Micro Vertical Workspaces
 
@@ -51,10 +52,10 @@ the UltraModern add flow. It derives paths, package names, ports, Module
 Federation names, topology entries, overlays, ownership, and root dev scripts:
 
 ```bash
-npx @modern-js/create catalog --microvertical remote
-npx @modern-js/create design-system --microvertical horizontal-remote
-npx @modern-js/create catalog-api --microvertical service
-npx @modern-js/create catalog-contracts --microvertical shared
+mise exec -- pnpm dlx @modern-js/create catalog --microvertical remote
+mise exec -- pnpm dlx @modern-js/create design-system --microvertical horizontal-remote
+mise exec -- pnpm dlx @modern-js/create catalog-api --microvertical service
+mise exec -- pnpm dlx @modern-js/create catalog-contracts --microvertical shared
 ```
 
 The canonical topology is documented in
@@ -76,7 +77,7 @@ Verticals.
 Preview the production build locally:
 
 ```bash
-pnpm serve
+mise exec -- pnpm serve
 ```
 
 For more information, see the

package/template/package.json.handlebars

@@ -3,7 +3,7 @@
   "version": "0.1.0",
   "private": true,
   "type": "module",
-  "packageManager": "pnpm@11.4.0",
+  "packageManager": "pnpm@{{pnpmVersion}}",
   "scripts": {
     "reset": "npx rimraf node_modules ./**/node_modules",
     "dev": "modern dev",
@@ -48,7 +48,7 @@
     "@types/node": "^20",
     "@types/react": "^19.1.8",
     "@types/react-dom": "^19.1.6",
-    "@typescript/native-preview": "7.0.0-dev.20260526.1",
+    "@typescript/native-preview": "7.0.0-dev.20260527.2",
     "happy-dom": "^20.9.0",
 {{#unless isSubproject}}
     "lint-staged": "~17.0.5",
@@ -71,6 +71,6 @@
   }{{/unless}},
   "engines": {
     "node": ">=20",
-    "pnpm": ">=11.4.0 <11.5.0"
+    "pnpm": ">={{pnpmVersion}} <11.5.0"
   }
 }

package/template/scripts/validate-ultramodern.mjs.handlebars

@@ -25,6 +25,19 @@ const readPnpmConfig = (key) => {
 };
 const isSubproject = {{isSubproject}};
 const enableTailwind = {{enableTailwind}};
+const expectedPnpmVersion = '{{pnpmVersion}}';
+const activePnpmVersion = execFileSync('pnpm', ['--version'], {
+  cwd: process.cwd(),
+  encoding: 'utf-8',
+  stdio: ['ignore', 'pipe', 'pipe'],
+}).trim();
+
+if (activePnpmVersion !== expectedPnpmVersion) {
+  console.error(
+    `Generated app requires pnpm ${expectedPnpmVersion}; active pnpm is ${activePnpmVersion}. Run mise install, then rerun through mise exec -- pnpm ...`,
+  );
+  process.exit(1);
+}
 
 if (!fs.existsSync(configPath)) {
   console.error('modern.config.ts not found');
@@ -98,6 +111,7 @@ const requiredPaths = [
   'config/public/locales/cs/translation.json',
   'src/modern-app-env.d.ts',
   'src/routes/index.css',
+  'src/routes/layout.tsx',
   'src/routes/[lang]/page.tsx',
   'tests/ultramodern.contract.test.ts',
 ];
@@ -115,27 +129,7 @@ if (fs.existsSync(path.resolve(process.cwd(), 'src/routes/page.tsx'))) {
   process.exit(1);
 }
 
-const routeCss = fs.readFileSync(path.resolve(process.cwd(), 'src/routes/index.css'), 'utf-8');
-if (enableTailwind) {
-  if (!routeCss.includes("@import 'tailwindcss';")) {
-    console.error('src/routes/index.css must import Tailwind CSS by default');
-    process.exit(1);
-  }
-  const postcssConfig = fs.readFileSync(path.resolve(process.cwd(), 'postcss.config.mjs'), 'utf-8');
-  if (!postcssConfig.includes("'@tailwindcss/postcss'")) {
-    console.error('postcss.config.mjs must configure @tailwindcss/postcss');
-    process.exit(1);
-  }
-  const tailwindConfig = fs.readFileSync(path.resolve(process.cwd(), 'tailwind.config.ts'), 'utf-8');
-  if (!tailwindConfig.includes("content: ['./src/**/*.{js,ts,jsx,tsx}']")) {
-    console.error('tailwind.config.ts must scan generated source files');
-    process.exit(1);
-  }
-} else {
-  if (routeCss.includes("@import 'tailwindcss';")) {
-    console.error('src/routes/index.css must omit Tailwind CSS when disabled');
-    process.exit(1);
-  }
+if (!enableTailwind) {
   if (
     fs.existsSync(path.resolve(process.cwd(), 'postcss.config.mjs')) ||
     fs.existsSync(path.resolve(process.cwd(), 'tailwind.config.ts'))
@@ -157,7 +151,10 @@ for (const requiredSnippet of [
   'permissions:\n  contents: read',
   'pull_request:',
   'persist-credentials: false',
-  'pnpm install --frozen-lockfile',
+  'jdx/mise-action',
+  'mise exec -- pnpm install --frozen-lockfile',
+  'mise exec -- pnpm run ultramodern:check',
+  'mise exec -- pnpm run build',
   'MODERN_PUBLIC_SITE_URL: http://localhost:8080',
   'timeout-minutes:',
   'egress-policy: audit',
@@ -192,33 +189,6 @@ if (
 }
 {{/unless}}
 
-const pageContent = fs.readFileSync(
-  path.resolve(process.cwd(), 'src/routes/[lang]/page.tsx'),
-  'utf-8',
-);
-for (const token of [
-  'rel="canonical"',
-  'rel="alternate"',
-  'hrefLang="x-default"',
-  'localizedPath(',
-  '<a',
-{{#if isTanstackRouter}}
-  "@modern-js/plugin-tanstack/runtime",
-{{/if}}
-]) {
-  if (!pageContent.includes(token)) {
-    console.error(`Localized route is missing ${token}`);
-    process.exit(1);
-  }
-}
-{{#if isTanstackRouter}}
-const deprecatedTanstackRuntime = '@modern-js/runtime/' + 'tanstack-router';
-if (pageContent.includes(deprecatedTanstackRuntime)) {
-  console.error('Localized route must import TanStack runtime from @modern-js/plugin-tanstack/runtime');
-  process.exit(1);
-}
-{{/if}}
-
 if (templateManifest.schemaVersion !== 1) {
   manifestErrors.push('schemaVersion');
 }
@@ -318,13 +288,19 @@ if (packageJson.private !== true) {
   process.exit(1);
 }
 
-if (packageJson.packageManager !== 'pnpm@11.4.0') {
-  console.error('Generated app package must pin pnpm@11.4.0');
+const miseConfig = fs.readFileSync(path.resolve(process.cwd(), '.mise.toml'), 'utf-8');
+if (!miseConfig.includes(`pnpm = "${expectedPnpmVersion}"`)) {
+  console.error(`Generated app must pin pnpm ${expectedPnpmVersion} in .mise.toml`);
+  process.exit(1);
+}
+
+if (packageJson.packageManager !== `pnpm@${expectedPnpmVersion}`) {
+  console.error(`Generated app package must pin pnpm@${expectedPnpmVersion}`);
   process.exit(1);
 }
 
-if (packageJson.engines?.pnpm !== '>=11.4.0 <11.5.0') {
-  console.error('Generated app package must require pnpm >=11.4.0 <11.5.0');
+if (packageJson.engines?.pnpm !== `>=${expectedPnpmVersion} <11.5.0`) {
+  console.error(`Generated app package must require pnpm >=${expectedPnpmVersion} <11.5.0`);
   process.exit(1);
 }
 

package/template/src/routes/[lang]/page.tsx.handlebars

@@ -6,7 +6,6 @@ import { Effect } from '@modern-js/plugin-bff/effect-client';
 import { useEffect, useState } from 'react';
 {{/if}}
 import { useTranslation } from 'react-i18next';
-import '../index.css';
 
 const fallbackLanguage = 'en';
 const supportedLanguages = ['en', 'cs'] as const;
@@ -128,7 +127,7 @@ const Index = () => {
           <code className="code">modern.config.ts</code>
           {/* i18n-ignore technical token */}
           {t('home.description.afterConfig')}
-          <code className="code">pnpm run ultramodern:check</code>
+          <code className="code">mise exec -- pnpm run ultramodern:check</code>
           {/* i18n-ignore technical token */}
           {t('home.description.end')}
         </p>

package/template/src/routes/layout.tsx.handlebars

@@ -1,4 +1,5 @@
 import { Outlet } from '{{routerRuntimeImport}}';
+import './index.css';
 
 export default function Layout() {
   return (

package/template/tests/ultramodern.contract.test.ts.handlebars

@@ -14,32 +14,15 @@ describe('generated UltraModern contract', () => {
       true,
     );
     expect(fs.existsSync(path.join(root, 'src/routes/page.tsx'))).toBe(false);
-
-    const page = readText('src/routes/[lang]/page.tsx');
-    expect(page).toContain('rel="canonical"');
-    expect(page).toContain('rel="alternate"');
-    expect(page).toContain('hrefLang="x-default"');
-    expect(page).toContain('localizedPath(');
+    expect(fs.existsSync(path.join(root, 'src/routes/layout.tsx'))).toBe(true);
 {{#if enableTailwind}}
-    expect(readText('src/routes/index.css')).toContain(
-      "@import 'tailwindcss';",
-    );
-    expect(readText('postcss.config.mjs')).toContain('@tailwindcss/postcss');
-    expect(readText('tailwind.config.ts')).toContain(
-      "content: ['./src/**/*.{js,ts,jsx,tsx}']",
-    );
+    expect(fs.existsSync(path.join(root, 'postcss.config.mjs'))).toBe(true);
+    expect(fs.existsSync(path.join(root, 'tailwind.config.ts'))).toBe(true);
 {{/if}}
 {{#unless enableTailwind}}
-    expect(readText('src/routes/index.css')).not.toContain(
-      "@import 'tailwindcss';",
-    );
     expect(fs.existsSync(path.join(root, 'postcss.config.mjs'))).toBe(false);
     expect(fs.existsSync(path.join(root, 'tailwind.config.ts'))).toBe(false);
 {{/unless}}
-
-    const config = readText('rstest.config.mts');
-    expect(config).toContain("withModernConfig()");
-    expect(config).toContain("testEnvironment: 'happy-dom'");
   });
 
   test('retains package-source metadata for generated Modern.js packages', () => {

package/template-workspace/.github/workflows/ultramodern-workspace-gates.yml.handlebars

@@ -29,27 +29,26 @@ jobs:
           egress-policy: audit
 
       - name: Checkout
-        uses: actions/checkout@93cb6efe18208431cddfb8368fd83d5badbf9bfd # v5
+        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
         with:
           fetch-depth: 1
           persist-credentials: false
 
-      - name: Setup pnpm
-        uses: pnpm/action-setup@0e279bb959325dab635dd2c09392533439d90093 # v6.0.8
-
       - name: Setup Node.js
-        uses: actions/setup-node@a0853c24544627f65ddf259abe73b1d18a591444 # v5
+        uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6.4.0
         with:
           node-version: 24
-          cache: pnpm
+
+      - name: Setup mise
+        uses: jdx/mise-action@5ac50f778e26fac95da98d50503682459e86d566 # v3.2.0
 
       - name: Install Dependencies
-        run: pnpm install --frozen-lockfile
+        run: mise exec -- pnpm install --frozen-lockfile
 
       - name: Validate Ultramodern Workspace Contract
-        run: pnpm run ultramodern:check
+        run: mise exec -- pnpm run ultramodern:check
 
       - name: Build Workspace Apps
         env:
           MODERN_PUBLIC_SITE_URL: http://localhost:8080
-        run: pnpm build
+        run: mise exec -- pnpm build

package/template-workspace/.mise.toml.handlebars

@@ -0,0 +1,2 @@
+[tools]
+pnpm = "{{pnpmVersion}}"

package/template-workspace/AGENTS.md

@@ -26,7 +26,7 @@ Use these skills when the task touches the matching subsystem:
 - `rstest-best-practices`: Rstest configuration, test writing, mocking, snapshots, coverage, and CI test behavior.
 - `mf`: Module Federation docs, Modern.js integration, DTS/type checks, shared dependency checks, runtime errors, and observability troubleshooting.
 
-The public `module-federation/agent-skills` repository is installed during `pnpm install` and `pnpm skills:install`. `pnpm skills:check` fails when the required public `mf` skill is missing.
+The public `module-federation/agent-skills` repository is installed during `mise exec -- pnpm install` and `mise exec -- pnpm skills:install`. `mise exec -- pnpm skills:check` fails when the required public `mf` skill is missing.
 
 ## Private Skills
 
@@ -40,7 +40,7 @@ The installer copies only the allowlisted private skills from `.agents/skills-lo
 
 ## Agent Reference Repositories
 
-The workspace installs read-only source references under `repos/` by default during `pnpm install` using `git subtree add --squash`. These repositories are reference material for coding agents, not application source:
+The workspace installs read-only source references under `repos/` by default during `mise exec -- pnpm install` using `git subtree add --squash`. These repositories are reference material for coding agents, not application source:
 
 - `repos/effect` from `Effect-TS/effect`.
 - `repos/ultramodern.js` from `BleedingDev/ultramodern.js`.

package/template-workspace/README.md.handlebars

@@ -25,13 +25,15 @@ packages.
 Run the scaffold validator before adding business code:
 
 ```bash
-pnpm ultramodern:check
+mise install
+mise exec -- pnpm ultramodern:check
 ```
 
-By default, `pnpm install` also prepares read-only agent reference repositories
+By default, `mise exec -- pnpm install` also prepares read-only agent reference repositories
 under `repos/` for Effect and UltraModern.js source lookup using squashed git
-subtrees. Disable this setup with `ULTRAMODERN_SKIP_AGENT_REPOS=1 pnpm install`,
-or rerun it explicitly with `pnpm agents:refs:install`.
+subtrees. Disable this setup with
+`ULTRAMODERN_SKIP_AGENT_REPOS=1 mise exec -- pnpm install`, or rerun it
+explicitly with `mise exec -- pnpm agents:refs:install`.
 
 The topology and ownership metadata are generated under `topology/`. The
 workspace also ships `.github/workflows/ultramodern-workspace-gates.yml` and

package/template-workspace/scripts/validate-ultramodern-workspace.mjs.handlebars

@@ -8,6 +8,7 @@ const tanstackVersion = '1.170.8';
 const tailwindEnabled = '{{tailwindEnabled}}' === 'true';
 const tailwindVersion = '^4.3.0';
 const tailwindPostcssVersion = '^4.3.0';
+const expectedPnpmVersion = '{{pnpmVersion}}';
 const rstackAgentSkillsCommit = '61c948b42512e223bad44b83af4080eba48b2677';
 const moduleFederationAgentSkillsCommit = '07bb5b6c43ad457609e00c081b72d4c42508ec76';
 const modernPackages = [
@@ -52,6 +53,11 @@ const designSystemRemotePath = 'apps/remotes/remote-design-system';
 
 const readText = (relativePath) => fs.readFileSync(path.join(root, relativePath), 'utf-8');
 const readJson = (relativePath) => JSON.parse(readText(relativePath));
+const activePnpmVersion = execFileSync('pnpm', ['--version'], {
+  cwd: root,
+  encoding: 'utf-8',
+  stdio: ['ignore', 'pipe', 'pipe'],
+}).trim();
 const readPnpmConfig = (key) => {
   const env = { ...process.env };
   for (const envKey of Object.keys(env)) {
@@ -79,6 +85,11 @@ const assertNotExists = (relativePath) => {
   assert(!fs.existsSync(path.join(root, relativePath)), `Unexpected ${relativePath}`);
 };
 
+assert(
+  activePnpmVersion === expectedPnpmVersion,
+  `Generated workspace requires pnpm ${expectedPnpmVersion}; active pnpm is ${activePnpmVersion}. Run mise install, then rerun through mise exec -- pnpm ...`,
+);
+
 const requiredPaths = [
   'AGENTS.md',
   '.gitignore',
@@ -119,6 +130,7 @@ const requiredPaths = [
   'apps/shell-super-app/locales/en/translation.json',
   'apps/shell-super-app/locales/cs/translation.json',
   'apps/shell-super-app/src/routes/index.css',
+  'apps/shell-super-app/src/routes/layout.tsx',
   'apps/shell-super-app/src/routes/[lang]/page.tsx',
   'apps/remotes/remote-commerce/package.json',
   'apps/remotes/remote-commerce/modern.config.ts',
@@ -131,6 +143,7 @@ const requiredPaths = [
   'apps/remotes/remote-commerce/locales/en/translation.json',
   'apps/remotes/remote-commerce/locales/cs/translation.json',
   'apps/remotes/remote-commerce/src/routes/index.css',
+  'apps/remotes/remote-commerce/src/routes/layout.tsx',
   'apps/remotes/remote-commerce/src/routes/[lang]/page.tsx',
   'apps/remotes/remote-identity/package.json',
   'apps/remotes/remote-identity/modern.config.ts',
@@ -143,6 +156,7 @@ const requiredPaths = [
   'apps/remotes/remote-identity/locales/en/translation.json',
   'apps/remotes/remote-identity/locales/cs/translation.json',
   'apps/remotes/remote-identity/src/routes/index.css',
+  'apps/remotes/remote-identity/src/routes/layout.tsx',
   'apps/remotes/remote-identity/src/routes/[lang]/page.tsx',
   'apps/remotes/remote-design-system/package.json',
   'apps/remotes/remote-design-system/modern.config.ts',
@@ -152,6 +166,7 @@ const requiredPaths = [
   'apps/remotes/remote-design-system/locales/en/translation.json',
   'apps/remotes/remote-design-system/locales/cs/translation.json',
   'apps/remotes/remote-design-system/src/routes/index.css',
+  'apps/remotes/remote-design-system/src/routes/layout.tsx',
   'apps/remotes/remote-design-system/src/routes/[lang]/page.tsx',
   'packages/shared-contracts/src/index.ts',
   'packages/shared-design-tokens/src/index.ts',
@@ -211,10 +226,18 @@ const expectedModernDependency = (packageName) => {
 
 assert(rootPackage.private === true, 'Root package must be private');
 assert(rootPackage.modernjs?.preset === 'presetUltramodern', 'Root must declare presetUltramodern');
-assert(rootPackage.packageManager === 'pnpm@11.4.0', 'Root must pin pnpm 11.4.0');
+const miseConfig = readText('.mise.toml');
+assert(
+  miseConfig.includes(`pnpm = "${expectedPnpmVersion}"`),
+  `Root must pin pnpm ${expectedPnpmVersion} in .mise.toml`,
+);
+assert(
+  rootPackage.packageManager === `pnpm@${expectedPnpmVersion}`,
+  `Root must pin pnpm ${expectedPnpmVersion}`,
+);
 assert(
-  rootPackage.engines?.pnpm === '>=11.4.0 <11.5.0',
-  'Root must require pnpm >=11.4.0 <11.5.0',
+  rootPackage.engines?.pnpm === `>=${expectedPnpmVersion} <11.5.0`,
+  `Root must require pnpm >=${expectedPnpmVersion} <11.5.0`,
 );
 assert(
   JSON.stringify(readPnpmConfig('packages')) ===
@@ -278,8 +301,10 @@ for (const requiredSnippet of [
   'permissions:\n  contents: read',
   'pull_request:',
   'persist-credentials: false',
-  'pnpm install --frozen-lockfile',
-  'pnpm build',
+  'jdx/mise-action',
+  'mise exec -- pnpm install --frozen-lockfile',
+  'mise exec -- pnpm run ultramodern:check',
+  'mise exec -- pnpm build',
   'MODERN_PUBLIC_SITE_URL: http://localhost:8080',
   'timeout-minutes:',
   'egress-policy: audit',
@@ -554,7 +579,7 @@ for (const packagePath of appPackagePaths) {
     `${packagePath} must include TypeScript 6 only as the stable JS TypeScript package for Module Federation DTS generation`,
   );
   assert(
-    packageJson.devDependencies?.['@typescript/native-preview'] === '7.0.0-dev.20260526.1',
+    packageJson.devDependencies?.['@typescript/native-preview'] === '7.0.0-dev.20260527.2',
     `${packagePath} must include TypeScript 7 native preview for mandatory native typechecking`,
   );
   assert(
@@ -666,27 +691,11 @@ for (const appDirectory of [
   'apps/remotes/remote-identity',
   'apps/remotes/remote-design-system',
 ]) {
-  const css = readText(`${appDirectory}/src/routes/index.css`);
   if (tailwindEnabled) {
-    assert(
-      css.includes("@import 'tailwindcss';"),
-      `${appDirectory} must import Tailwind CSS by default`,
-    );
-    const postcssConfig = readText(`${appDirectory}/postcss.config.mjs`);
-    assert(
-      postcssConfig.includes("'@tailwindcss/postcss'"),
-      `${appDirectory} must configure the Tailwind CSS PostCSS plugin`,
-    );
-    const tailwindConfig = readText(`${appDirectory}/tailwind.config.ts`);
-    assert(
-      tailwindConfig.includes("content: ['./src/**/*.{js,jsx,ts,tsx}']"),
-      `${appDirectory} must scan app source files for Tailwind CSS classes`,
-    );
-  } else {
-    assert(
-      !css.includes("@import 'tailwindcss';"),
-      `${appDirectory} must omit Tailwind CSS import when Tailwind is disabled`,
-    );
+    assertExists(`${appDirectory}/postcss.config.mjs`);
+    assertExists(`${appDirectory}/tailwind.config.ts`);
+  }
+  if (!tailwindEnabled) {
     assert(
       !fs.existsSync(path.join(root, appDirectory, 'postcss.config.mjs')),
       `${appDirectory} must not write PostCSS config when Tailwind is disabled`,
@@ -744,20 +753,6 @@ for (const configPath of [
   );
 }
 
-for (const routePath of [
-  'apps/shell-super-app/src/routes/[lang]/page.tsx',
-  'apps/remotes/remote-commerce/src/routes/[lang]/page.tsx',
-  'apps/remotes/remote-identity/src/routes/[lang]/page.tsx',
-  'apps/remotes/remote-design-system/src/routes/[lang]/page.tsx',
-]) {
-  const route = readText(routePath);
-  assert(route.includes('rel="canonical"'), `${routePath} must emit canonical metadata`);
-  assert(route.includes('rel="alternate"'), `${routePath} must emit alternate locale metadata`);
-  assert(route.includes('hrefLang="x-default"'), `${routePath} must emit x-default metadata`);
-  assert(route.includes('localizedPath('), `${routePath} must build localized URLs`);
-  assert(route.includes("import '../index.css';"), `${routePath} must import route CSS`);
-}
-
 const shellMf = readText('apps/shell-super-app/module-federation.config.ts');
 assert(shellMf.includes("name: 'shellSuperApp'"), 'Shell MF config must name the shell');
 assert(
@@ -797,9 +792,8 @@ assert(
 );
 assert(
   generatedContract.packageManager?.manager === 'pnpm' &&
-    generatedContract.packageManager?.version === '11.4.0' &&
-    generatedContract.packageManager?.toolchain === 'mise' &&
-    generatedContract.packageManager?.corepack === false,
+    generatedContract.packageManager?.version === expectedPnpmVersion &&
+    generatedContract.packageManager?.toolchain === 'mise',
   'Generated contract must declare the pnpm 11/mise toolchain policy',
 );
 
@@ -935,7 +929,7 @@ assert(
   'Template manifest must list every private agent skill allowlist entry',
 );
 assert(
-  manifest.validation?.expectedCommands?.includes('pnpm run ultramodern:check'),
+  manifest.validation?.expectedCommands?.includes('mise exec -- pnpm run ultramodern:check'),
   'Template manifest must document the validation command',
 );
 assert(

package/template/.mise.toml

@@ -1,2 +0,0 @@
-[tools]
-pnpm = "11.4.0"

package/template-workspace/.mise.toml

@@ -1,2 +0,0 @@
-[tools]
-pnpm = "11.4.0"