@bleedingdev/modern-js-sandpack-react 3.2.0-ultramodern.93 → 3.2.0-ultramodern.94

package/dist/cjs/templates/mwa.js

@@ -51,10 +51,10 @@ const MWAFiles = {
     "scripts/validate-ultramodern.mjs": "import { execFileSync } from 'node:child_process';\nimport fs from 'node:fs';\nimport path from 'node:path';\n\nconst configPath = path.resolve(process.cwd(), 'modern.config.ts');\nconst templateManifestPath = path.resolve(process.cwd(), '.modernjs/mv-template-manifest.json');\nconst packageSourcePath = path.resolve(\n  process.cwd(),\n  '.modernjs/ultramodern-package-source.json',\n);\nconst readPnpmConfig = (key) => {\n  const env = Object.fromEntries(\n    Object.entries(process.env).filter(\n      ([envKey]) => !/^(?:npm|pnpm)_config_/iu.test(envKey),\n    ),\n  );\n  const output = execFileSync('pnpm', ['config', 'get', key, '--json'], {\n    cwd: process.cwd(),\n    encoding: 'utf-8',\n    env,\n    stdio: ['ignore', 'pipe', 'pipe'],\n  }).trim();\n  return output ? JSON.parse(output) : undefined;\n};\nconst enableTailwind = ;\nconst expectedPnpmVersion = '';\nconst activePnpmVersion = execFileSync('pnpm', ['--version'], {\n  cwd: process.cwd(),\n  encoding: 'utf-8',\n  stdio: ['ignore', 'pipe', 'pipe'],\n}).trim();\n\nif (activePnpmVersion !== expectedPnpmVersion) {\n  console.error(\n    `Generated app requires pnpm ${expectedPnpmVersion}; active pnpm is ${activePnpmVersion}. Run mise install, then rerun pnpm from the activated shell`,\n  );\n  process.exit(1);\n}\n\nif (!fs.existsSync(configPath)) {\n  console.error('modern.config.ts not found');\n  process.exit(1);\n}\n\nconst content = fs.readFileSync(configPath, 'utf-8');\nconst requiredTokens = [\n  'presetUltramodern(',\n  'appTools()',\n  'enableModuleFederationSSR',\n  'enableBffRequestId',\n  'enableTelemetryExporters',\n  'i18nPlugin(',\n  'localePathRedirect: true',\n  'ULTRAMODERN_SITE_URL',\n  'MODERN_PUBLIC_SITE_URL must be set for production builds',\n  'globalVars',\n];\nconst missing = requiredTokens.filter((token) => !content.includes(token));\n\nif (missing.length > 0) {\n  console.error(`Ultramodern contract check failed. Missing tokens: ${missing.join(', ')}`);\n  process.exit(1);\n}\n\nif (!fs.existsSync(templateManifestPath)) {\n  console.error('.modernjs/mv-template-manifest.json not found');\n  process.exit(1);\n}\n\nconst templateManifest = JSON.parse(fs.readFileSync(templateManifestPath, 'utf-8'));\nconst requiredDeniedPaths = [\n  '.git/**',\n  '.npmrc',\n  '.yarnrc',\n  '.env',\n  '.env.*',\n  'node_modules/**',\n  'dist/**',\n];\nconst requiredPostMaterialization = [\n  'ultramodern-contract-check',\n  'agent-skill-postinstall-allowed',\n  'github-workflow-security-enforced',\n  'package-source-retained',\n  'pnpm-11-policy-enforced',\n  'rstest-smoke-tests',\n  'template-manifest-retained',\n];\nconst requiredPaths = [\n  'AGENTS.md',\n  '.agents/skills-lock.json',\n  '.codex/hooks.json',\n  '.github/renovate.json',\n  '.github/workflows/ultramodern-gates.yml',\n  'lefthook.yml',\n  'oxlint.config.ts',\n  'oxfmt.config.ts',\n  'scripts/bootstrap-agent-skills.mjs',\n  '.mise.toml',\n  '.modernjs/ultramodern-package-source.json',\n  'pnpm-workspace.yaml',\n  'rstest.config.mts',\n  'scripts/check-i18n-strings.mjs',\n  'config/public/locales/en/translation.json',\n  'config/public/locales/cs/translation.json',\n  'src/modern-app-env.d.ts',\n  'src/routes/index.css',\n  'src/routes/layout.tsx',\n  'src/routes/[lang]/page.tsx',\n  'tests/ultramodern.contract.test.ts',\n];\nconst manifestErrors = [];\n\nfor (const requiredPath of requiredPaths) {\n  if (!fs.existsSync(path.resolve(process.cwd(), requiredPath))) {\n    console.error(`${requiredPath} not found`);\n    process.exit(1);\n  }\n}\n\nif (fs.existsSync(path.resolve(process.cwd(), 'src/routes/page.tsx'))) {\n  console.error('src/routes/page.tsx must move under src/routes/[lang]/page.tsx');\n  process.exit(1);\n}\n\nif (\n  !enableTailwind &&\n  (fs.existsSync(path.resolve(process.cwd(), 'postcss.config.mjs')) ||\n    fs.existsSync(path.resolve(process.cwd(), 'tailwind.config.ts')))\n) {\n  console.error('Tailwind config files must not be written when Tailwind is disabled');\n  process.exit(1);\n}\n\nconst workflowContent = fs.readFileSync(\n  path.resolve(process.cwd(), '.github/workflows/ultramodern-gates.yml'),\n  'utf-8',\n);\nconst renovateConfig = JSON.parse(\n  fs.readFileSync(path.resolve(process.cwd(), '.github/renovate.json'), 'utf-8'),\n);\nfor (const requiredSnippet of [\n  'permissions:\\n  contents: read',\n  'pull_request:',\n  'persist-credentials: false',\n  'jdx/mise-action',\n  'pnpm install --frozen-lockfile',\n  'pnpm run ultramodern:check',\n  'pnpm run build',\n  'MODERN_PUBLIC_SITE_URL: http://localhost:8080',\n  'timeout-minutes:',\n  'egress-policy: audit',\n]) {\n  if (!workflowContent.includes(requiredSnippet)) {\n    console.error(`Generated workflow must retain ${requiredSnippet.split('\\n')[0]}`);\n    process.exit(1);\n  }\n}\nif (workflowContent.includes('pull_request_target')) {\n  console.error('Generated workflow must not use pull_request_target');\n  process.exit(1);\n}\nfor (const match of workflowContent.matchAll(/^\\s*uses:\\s*([^@\\s]+)@([^\\s#]+)/gmu)) {\n  const [, actionName, actionRef] = match;\n  if (!/^[a-f0-9]{40}$/u.test(actionRef)) {\n    console.error(`Generated workflow must pin ${actionName}@${actionRef} to a commit SHA`);\n    process.exit(1);\n  }\n}\nif (\n  renovateConfig.dependencyDashboard !== true ||\n  renovateConfig.minimumReleaseAge !== '1 day' ||\n  !renovateConfig.extends?.includes('helpers:pinGitHubActionDigests') ||\n  !renovateConfig.packageRules?.some(\n    (rule) =>\n      rule.dependencyDashboardApproval === true && rule.matchUpdateTypes?.includes('major'),\n  )\n) {\n  console.error('Generated Renovate config must retain dashboard, release-age, action pinning, and major-approval policy');\n  process.exit(1);\n}\n\nif (templateManifest.schemaVersion !== 1) {\n  manifestErrors.push('schemaVersion');\n}\n\nif (templateManifest.source?.type !== 'builtin') {\n  manifestErrors.push('source.type');\n}\n\nif (\n  !Array.isArray(templateManifest.integrity?.checksums) ||\n  !templateManifest.integrity.checksums.some(\n    (checksum) =>\n      checksum.algorithm === 'sha256' &&\n      checksum.scope === 'source-tree' &&\n      /^[0-9a-f]{64}$/u.test(checksum.value),\n  )\n) {\n  manifestErrors.push('integrity.checksums[source-tree]');\n}\n\nfor (const deniedPath of requiredDeniedPaths) {\n  if (!templateManifest.materialization?.deniedPaths?.includes(deniedPath)) {\n    manifestErrors.push(`materialization.deniedPaths:${deniedPath}`);\n  }\n}\n\nif (templateManifest.lifecyclePolicy?.denyByDefault !== true) {\n  manifestErrors.push('lifecyclePolicy.denyByDefault');\n}\nif (\n  JSON.stringify(templateManifest.lifecyclePolicy?.allowedScripts) !==\n  JSON.stringify(['postinstall'])\n) {\n  manifestErrors.push('lifecyclePolicy.allowedScripts');\n}\n\nfor (const token of requiredPostMaterialization) {\n  if (!templateManifest.validation?.postMaterializationValidation?.includes(token)) {\n    manifestErrors.push(`validation.postMaterializationValidation:${token}`);\n  }\n}\n\nif (manifestErrors.length > 0) {\n  console.error(\n    `Ultramodern template manifest check failed. Invalid fields: ${manifestErrors.join(', ')}`,\n  );\n  process.exit(1);\n}\n\nconst packageJson = JSON.parse(\n  fs.readFileSync(path.resolve(process.cwd(), 'package.json'), 'utf-8'),\n);\nconst packageSource = JSON.parse(fs.readFileSync(packageSourcePath, 'utf-8'));\nconst unresolvedTemplateMarker = String.fromCodePoint(123, 123);\nif (JSON.stringify(packageJson).includes(unresolvedTemplateMarker)) {\n  console.error('package.json contains unresolved template markers');\n  process.exit(1);\n}\nif (JSON.stringify(packageSource).includes(unresolvedTemplateMarker)) {\n  console.error('package source metadata contains unresolved template markers');\n  process.exit(1);\n}\nconst skillsLock = JSON.parse(\n  fs.readFileSync(path.resolve(process.cwd(), '.agents/skills-lock.json'), 'utf-8'),\n);\nconst requiredScripts = {\n  format: 'oxfmt .',\n  'format:check': 'oxfmt --check .',\n  'i18n:check': 'node ./scripts/check-i18n-strings.mjs',\n  lint: 'oxlint .',\n  'lint:fix': 'oxlint . --fix',\n  postinstall: 'oxfmt . && node ./scripts/bootstrap-agent-skills.mjs',\n  'skills:check': 'node ./scripts/bootstrap-agent-skills.mjs --check',\n  'skills:install': 'node ./scripts/bootstrap-agent-skills.mjs',\n  test: 'rstest run',\n};\n\nfor (const [scriptName, scriptCommand] of Object.entries(requiredScripts)) {\n  if (packageJson.scripts?.[scriptName] !== scriptCommand) {\n    console.error(`Missing or invalid package script: ${scriptName}`);\n    process.exit(1);\n  }\n}\n\nif (\n  !packageJson.scripts?.typecheck?.includes('effect-tsgo') ||\n  !packageJson.scripts.typecheck.includes('get-exe-path')\n) {\n  console.error('typecheck must use effect-tsgo as the TypeScript checker');\n  process.exit(1);\n}\n\nif (!packageJson.scripts?.['ultramodern:check']?.includes('pnpm test')) {\n  console.error('ultramodern:check must run the generated Rstest suite');\n  process.exit(1);\n}\n\nif (packageJson.private !== true) {\n  console.error('Generated app package must be private by default');\n  process.exit(1);\n}\n\nconst miseConfig = fs.readFileSync(path.resolve(process.cwd(), '.mise.toml'), 'utf-8');\nif (!miseConfig.includes(`pnpm = \"${expectedPnpmVersion}\"`)) {\n  console.error(`Generated app must pin pnpm ${expectedPnpmVersion} in .mise.toml`);\n  process.exit(1);\n}\n\nif (packageJson.packageManager !== `pnpm@${expectedPnpmVersion}`) {\n  console.error(`Generated app package must pin pnpm@${expectedPnpmVersion}`);\n  process.exit(1);\n}\n\nif (packageJson.engines?.pnpm !== `>=${expectedPnpmVersion} <11.6.0`) {\n  console.error(`Generated app package must require pnpm >=${expectedPnpmVersion} <11.6.0`);\n  process.exit(1);\n}\n\nif (packageJson.pnpm !== undefined) {\n  console.error('Generated app must keep pnpm policy in pnpm-workspace.yaml, not package.json');\n  process.exit(1);\n}\n\nif (readPnpmConfig('minimumReleaseAge') !== 1440) {\n  console.error('pnpm minimumReleaseAge must be 1440');\n  process.exit(1);\n}\nif (readPnpmConfig('minimumReleaseAgeStrict') !== true) {\n  console.error('pnpm minimumReleaseAgeStrict must be true');\n  process.exit(1);\n}\nif (readPnpmConfig('minimumReleaseAgeIgnoreMissingTime') !== false) {\n  console.error('pnpm minimumReleaseAgeIgnoreMissingTime must be false');\n  process.exit(1);\n}\nif (\n  JSON.stringify(readPnpmConfig('minimumReleaseAgeExclude')) !==\n  JSON.stringify(['@bleedingdev/modern-js-*'])\n) {\n  console.error('pnpm minimumReleaseAgeExclude must allow just-published BleedingDev Modern cohorts only');\n  process.exit(1);\n}\nif (readPnpmConfig('trustPolicy') !== 'no-downgrade') {\n  console.error('pnpm trustPolicy must be no-downgrade');\n  process.exit(1);\n}\nfor (const [key, expected] of [\n  ['trustPolicyIgnoreAfter', 1440],\n  ['blockExoticSubdeps', true],\n  ['engineStrict', true],\n  ['pmOnFail', 'error'],\n  ['verifyDepsBeforeRun', 'error'],\n  ['strictDepBuilds', true],\n]) {\n  if (readPnpmConfig(key) !== expected) {\n    console.error(`pnpm ${key} must be ${String(expected)}`);\n    process.exit(1);\n  }\n}\nif (\n  JSON.stringify(readPnpmConfig('allowBuilds')) !==\n  JSON.stringify({\n    '@swc/core': true,\n    'core-js': true,\n    esbuild: true,\n    lefthook: true,\n    'msgpackr-extract': true,\n    sharp: true,\n    workerd: true,\n  })\n) {\n  console.error('pnpm allowBuilds must approve only the generated app build dependencies');\n  process.exit(1);\n}\nif (\n  JSON.stringify(readPnpmConfig('onlyBuiltDependencies')) !==\n  JSON.stringify(['@swc/core', 'core-js', 'esbuild', 'lefthook', 'msgpackr-extract', 'sharp', 'workerd'])\n) {\n  console.error('pnpm onlyBuiltDependencies must approve only the generated app build dependencies');\n  process.exit(1);\n}\n\nif (packageJson.modernjs?.preset !== 'presetUltramodern') {\n  console.error('package.json must declare presetUltramodern metadata');\n  process.exit(1);\n}\n\nif (\n  packageJson.modernjs?.packageSource?.config !== './.modernjs/ultramodern-package-source.json'\n) {\n  console.error('package.json must retain package source metadata location');\n  process.exit(1);\n}\n\nif (packageSource.schemaVersion !== 1) {\n  console.error('Package source metadata must use schemaVersion 1');\n  process.exit(1);\n}\n\nif (packageSource.preset !== 'presetUltramodern') {\n  console.error('Package source metadata must declare presetUltramodern');\n  process.exit(1);\n}\n\nif (packageSource.strategy !== 'workspace' && packageSource.strategy !== 'install') {\n  console.error('Package source strategy must be workspace or install');\n  process.exit(1);\n}\n\nconst expectedModernPackages = [\n  '@modern-js/runtime',\n  '@modern-js/app-tools',\n  '@modern-js/tsconfig',\n  '@modern-js/plugin-i18n',\n  '@modern-js/plugin-tanstack',\n  '@modern-js/plugin-bff',\n  '@modern-js/adapter-rstest',\n];\n\nfor (const packageName of expectedModernPackages) {\n  if (!packageSource.modernPackages?.packages?.includes(packageName)) {\n    console.error(`Package source metadata must include ${packageName}`);\n    process.exit(1);\n  }\n}\n\nconst expectedModernSpecifier = packageSource.modernPackages?.specifier;\nif (typeof expectedModernSpecifier !== 'string' || expectedModernSpecifier.length === 0) {\n  console.error('Package source metadata must provide a Modern package specifier');\n  process.exit(1);\n}\nif (\n  packageSource.strategy === 'install' &&\n  expectedModernSpecifier !== templateManifest.template?.version\n) {\n  console.error(\n    `Package source Modern specifier ${expectedModernSpecifier} must match template version ${templateManifest.template?.version}`,\n  );\n  process.exit(1);\n}\n\nconst expectedModernDependency = (packageName) => {\n  const alias = packageSource.modernPackages?.aliases?.[packageName];\n  return typeof alias === 'string'\n    ? `npm:${alias}@${expectedModernSpecifier}`\n    : expectedModernSpecifier;\n};\n\nfor (const packageName of [\n  '@modern-js/runtime',\n  '@modern-js/plugin-i18n',\n  '@modern-js/plugin-tanstack',\n]) {\n  if (\n    packageJson.dependencies?.[packageName] &&\n    packageJson.dependencies[packageName] !== expectedModernDependency(packageName)\n  ) {\n    console.error(`Dependency ${packageName} must match package source metadata`);\n    process.exit(1);\n  }\n}\n\nfor (const packageName of [\n  '@modern-js/app-tools',\n  '@modern-js/adapter-rstest',\n  '@modern-js/tsconfig',\n  '@modern-js/plugin-bff',\n]) {\n  if (\n    packageJson.devDependencies?.[packageName] &&\n    packageJson.devDependencies[packageName] !== expectedModernDependency(packageName)\n  ) {\n    console.error(`Dev dependency ${packageName} must match package source metadata`);\n    process.exit(1);\n  }\n}\n\nfor (const dependency of ['@modern-js/plugin-i18n', 'i18next', 'react-i18next']) {\n  if (!packageJson.dependencies?.[dependency]) {\n    console.error(`Missing dependency: ${dependency}`);\n    process.exit(1);\n  }\n}\n\nfor (const dependency of [\n  '@effect/tsgo',\n  '@modern-js/adapter-rstest',\n  '@rstest/core',\n  '@typescript/native-preview',\n  'happy-dom',\n  'lefthook',\n  'oxlint',\n  'oxfmt',\n  'ultracite',\n]) {\n  if (!packageJson.devDependencies?.[dependency]) {\n    console.error(`Missing devDependency: ${dependency}`);\n    process.exit(1);\n  }\n}\n\nif (\n  packageJson.devDependencies?.tailwindcss ||\n  packageJson.devDependencies?.['@tailwindcss/postcss'] ||\n  packageJson.devDependencies?.postcss\n) {\n  console.error('Tailwind CSS dependencies must be absent when Tailwind is disabled');\n  process.exit(1);\n}\n\nconst privateSource = skillsLock.sources?.find(\n  (source) => source.repository === 'https://github.com/TechsioCZ/skills',\n);\nconst privateSkills = new Set(privateSource?.baseline?.map((skill) => skill.name));\nfor (const skillName of ['plan-graph', 'dag', 'subagent-graph', 'helm', 'debugger-mode']) {\n  if (!privateSkills.has(skillName)) {\n    console.error(`Missing private skill allowlist entry: ${skillName}`);\n    process.exit(1);\n  }\n}\n\nconsole.log('Ultramodern contract check passed.');\n",
     "tests/tsconfig.json": "{\n  \"extends\": \"../tsconfig.json\",\n  \"compilerOptions\": {\n    \"types\": [\"@rstest/core/globals\"]\n  },\n  \"include\": [\"./\"]\n}\n",
     "tests/ultramodern.contract.test.ts": "import fs from 'node:fs';\nimport path from 'node:path';\nimport { describe, expect, test } from '@rstest/core';\n\nconst root = process.cwd();\nconst readText = (relativePath: string) =>\n  fs.readFileSync(path.join(root, relativePath), 'utf-8');\nconst readJson = <T>(relativePath: string): T =>\n  JSON.parse(readText(relativePath)) as T;\n\ndescribe('generated UltraModern contract', () => {\n  test('keeps localized route metadata and Rstest wiring', () => {\n    expect(fs.existsSync(path.join(root, 'src/routes/[lang]/page.tsx'))).toBe(\n      true,\n    );\n    expect(fs.existsSync(path.join(root, 'src/routes/page.tsx'))).toBe(false);\n    expect(fs.existsSync(path.join(root, 'src/routes/layout.tsx'))).toBe(true);\n    expect(fs.existsSync(path.join(root, 'postcss.config.mjs'))).toBe(false);\n    expect(fs.existsSync(path.join(root, 'tailwind.config.ts'))).toBe(false);\n  });\n\n  test('retains package-source metadata for generated Modern.js packages', () => {\n    const packageJson = readJson<{\n      dependencies?: Record<string, string>;\n      devDependencies?: Record<string, string>;\n      modernjs?: {\n        packageSource?: {\n          config?: string;\n        };\n        preset?: string;\n      };\n    }>('package.json');\n    const packageSource = readJson<{\n      modernPackages?: {\n        packages?: string[];\n        specifier?: string;\n      };\n      strategy?: string;\n    }>('.modernjs/ultramodern-package-source.json');\n\n    expect(packageJson.modernjs?.preset).toBe('presetUltramodern');\n    expect(packageJson.modernjs?.packageSource?.config).toBe(\n      './.modernjs/ultramodern-package-source.json',\n    );\n    expect(packageSource.strategy).toMatch(/^(workspace|install)$/u);\n    expect(packageSource.modernPackages?.packages).toContain(\n      '@modern-js/runtime',\n    );\n    expect(packageSource.modernPackages?.packages).toContain(\n      '@modern-js/app-tools',\n    );\n    expect(packageSource.modernPackages?.packages).toContain(\n      '@modern-js/adapter-rstest',\n    );\n    expect(packageSource.modernPackages?.specifier).toBeTruthy();\n    expect(\n      packageJson.devDependencies?.['@modern-js/adapter-rstest'],\n    ).toBeTruthy();\n    expect(packageJson.devDependencies?.tailwindcss).toBeUndefined();\n    expect(\n      packageJson.devDependencies?.['@tailwindcss/postcss'],\n    ).toBeUndefined();\n  });\n});\n",
-    "api/effect/index.ts": "\n",
-    "api/lambda/hello.ts": "",
     ".github/renovate.json": "{\n  \"$schema\": \"https://docs.renovatebot.com/renovate-schema.json\",\n  \"extends\": [\n    \"config:recommended\",\n    \"helpers:pinGitHubActionDigests\"\n  ],\n  \"dependencyDashboard\": true,\n  \"minimumReleaseAge\": \"1 day\",\n  \"prConcurrentLimit\": 5,\n  \"prHourlyLimit\": 2,\n  \"rangeStrategy\": \"bump\",\n  \"schedule\": [\n    \"before 5am on monday\"\n  ],\n  \"timezone\": \"Etc/UTC\",\n  \"packageRules\": [\n    {\n      \"matchManagers\": [\n        \"github-actions\"\n      ],\n      \"groupName\": \"github-actions\",\n      \"labels\": [\n        \"dependencies\",\n        \"github-actions\",\n        \"security\"\n      ]\n    },\n    {\n      \"matchManagers\": [\n        \"npm\"\n      ],\n      \"matchUpdateTypes\": [\n        \"patch\",\n        \"minor\"\n      ],\n      \"groupName\": \"npm minor and patch updates\",\n      \"labels\": [\n        \"dependencies\",\n        \"npm\"\n      ]\n    },\n    {\n      \"matchUpdateTypes\": [\n        \"major\"\n      ],\n      \"dependencyDashboardApproval\": true,\n      \"labels\": [\n        \"dependencies\",\n        \"major\"\n      ]\n    }\n  ]\n}\n",
     ".github/workflows/ultramodern-gates.yml": "name: Ultramodern Gates\n\non:\n  push:\n  pull_request:\n\npermissions:\n  contents: read\n\ndefaults:\n  run:\n    shell: bash\n\nenv:\n  FORCE_JAVASCRIPT_ACTIONS_TO_NODE24: true\n\nconcurrency:\n  group: ultramodern-gates-$-$\n  cancel-in-progress: true\n\njobs:\n  ultramodern-gates:\n    runs-on: ubuntu-latest\n    timeout-minutes: 20\n    steps:\n      - name: Harden Runner\n        uses: step-security/harden-runner@ab7a9404c0f3da075243ca237b5fac12c98deaa5 # v2\n        with:\n          egress-policy: audit\n\n      - name: Checkout\n        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2\n        with:\n          fetch-depth: 1\n          persist-credentials: false\n\n      - name: Setup Node.js\n        uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6.4.0\n        with:\n          node-version: 24\n\n      - name: Setup mise\n        uses: jdx/mise-action@5ac50f778e26fac95da98d50503682459e86d566 # v3.2.0\n\n      - name: Install Dependencies\n        run: mise exec -- pnpm install --frozen-lockfile\n\n      - name: Validate Ultramodern Contract\n        run: mise exec -- pnpm run ultramodern:check\n\n      - name: Build\n        env:\n          MODERN_PUBLIC_SITE_URL: http://localhost:8080\n        run: mise exec -- pnpm run build\n",
+    "api/effect/index.ts": "\n",
+    "api/lambda/hello.ts": "",
     "shared/effect/api.ts": "\n",
     "src/modern-app-env.d.ts": "/// <reference types='@modern-js/app-tools/types' />\n\ndeclare const ULTRAMODERN_SITE_URL: string;\n",
     "src/modern.runtime.ts": "import { defineRuntimeConfig } from '@modern-js/runtime';\nimport { createInstance } from 'i18next';\n\nconst i18nInstance = createInstance();\n\nexport default defineRuntimeConfig({\n  i18n: {\n    i18nInstance,\n    initOptions: {\n      defaultNS: 'translation',\n      fallbackLng: 'en',\n      interpolation: {\n        escapeValue: false,\n      },\n      ns: ['translation'],\n      supportedLngs: ['en', 'cs'],\n    },\n  },\n});\n",

package/dist/esm/templates/mwa.mjs

@@ -23,10 +23,10 @@ const MWAFiles = {
     "scripts/validate-ultramodern.mjs": "import { execFileSync } from 'node:child_process';\nimport fs from 'node:fs';\nimport path from 'node:path';\n\nconst configPath = path.resolve(process.cwd(), 'modern.config.ts');\nconst templateManifestPath = path.resolve(process.cwd(), '.modernjs/mv-template-manifest.json');\nconst packageSourcePath = path.resolve(\n  process.cwd(),\n  '.modernjs/ultramodern-package-source.json',\n);\nconst readPnpmConfig = (key) => {\n  const env = Object.fromEntries(\n    Object.entries(process.env).filter(\n      ([envKey]) => !/^(?:npm|pnpm)_config_/iu.test(envKey),\n    ),\n  );\n  const output = execFileSync('pnpm', ['config', 'get', key, '--json'], {\n    cwd: process.cwd(),\n    encoding: 'utf-8',\n    env,\n    stdio: ['ignore', 'pipe', 'pipe'],\n  }).trim();\n  return output ? JSON.parse(output) : undefined;\n};\nconst enableTailwind = ;\nconst expectedPnpmVersion = '';\nconst activePnpmVersion = execFileSync('pnpm', ['--version'], {\n  cwd: process.cwd(),\n  encoding: 'utf-8',\n  stdio: ['ignore', 'pipe', 'pipe'],\n}).trim();\n\nif (activePnpmVersion !== expectedPnpmVersion) {\n  console.error(\n    `Generated app requires pnpm ${expectedPnpmVersion}; active pnpm is ${activePnpmVersion}. Run mise install, then rerun pnpm from the activated shell`,\n  );\n  process.exit(1);\n}\n\nif (!fs.existsSync(configPath)) {\n  console.error('modern.config.ts not found');\n  process.exit(1);\n}\n\nconst content = fs.readFileSync(configPath, 'utf-8');\nconst requiredTokens = [\n  'presetUltramodern(',\n  'appTools()',\n  'enableModuleFederationSSR',\n  'enableBffRequestId',\n  'enableTelemetryExporters',\n  'i18nPlugin(',\n  'localePathRedirect: true',\n  'ULTRAMODERN_SITE_URL',\n  'MODERN_PUBLIC_SITE_URL must be set for production builds',\n  'globalVars',\n];\nconst missing = requiredTokens.filter((token) => !content.includes(token));\n\nif (missing.length > 0) {\n  console.error(`Ultramodern contract check failed. Missing tokens: ${missing.join(', ')}`);\n  process.exit(1);\n}\n\nif (!fs.existsSync(templateManifestPath)) {\n  console.error('.modernjs/mv-template-manifest.json not found');\n  process.exit(1);\n}\n\nconst templateManifest = JSON.parse(fs.readFileSync(templateManifestPath, 'utf-8'));\nconst requiredDeniedPaths = [\n  '.git/**',\n  '.npmrc',\n  '.yarnrc',\n  '.env',\n  '.env.*',\n  'node_modules/**',\n  'dist/**',\n];\nconst requiredPostMaterialization = [\n  'ultramodern-contract-check',\n  'agent-skill-postinstall-allowed',\n  'github-workflow-security-enforced',\n  'package-source-retained',\n  'pnpm-11-policy-enforced',\n  'rstest-smoke-tests',\n  'template-manifest-retained',\n];\nconst requiredPaths = [\n  'AGENTS.md',\n  '.agents/skills-lock.json',\n  '.codex/hooks.json',\n  '.github/renovate.json',\n  '.github/workflows/ultramodern-gates.yml',\n  'lefthook.yml',\n  'oxlint.config.ts',\n  'oxfmt.config.ts',\n  'scripts/bootstrap-agent-skills.mjs',\n  '.mise.toml',\n  '.modernjs/ultramodern-package-source.json',\n  'pnpm-workspace.yaml',\n  'rstest.config.mts',\n  'scripts/check-i18n-strings.mjs',\n  'config/public/locales/en/translation.json',\n  'config/public/locales/cs/translation.json',\n  'src/modern-app-env.d.ts',\n  'src/routes/index.css',\n  'src/routes/layout.tsx',\n  'src/routes/[lang]/page.tsx',\n  'tests/ultramodern.contract.test.ts',\n];\nconst manifestErrors = [];\n\nfor (const requiredPath of requiredPaths) {\n  if (!fs.existsSync(path.resolve(process.cwd(), requiredPath))) {\n    console.error(`${requiredPath} not found`);\n    process.exit(1);\n  }\n}\n\nif (fs.existsSync(path.resolve(process.cwd(), 'src/routes/page.tsx'))) {\n  console.error('src/routes/page.tsx must move under src/routes/[lang]/page.tsx');\n  process.exit(1);\n}\n\nif (\n  !enableTailwind &&\n  (fs.existsSync(path.resolve(process.cwd(), 'postcss.config.mjs')) ||\n    fs.existsSync(path.resolve(process.cwd(), 'tailwind.config.ts')))\n) {\n  console.error('Tailwind config files must not be written when Tailwind is disabled');\n  process.exit(1);\n}\n\nconst workflowContent = fs.readFileSync(\n  path.resolve(process.cwd(), '.github/workflows/ultramodern-gates.yml'),\n  'utf-8',\n);\nconst renovateConfig = JSON.parse(\n  fs.readFileSync(path.resolve(process.cwd(), '.github/renovate.json'), 'utf-8'),\n);\nfor (const requiredSnippet of [\n  'permissions:\\n  contents: read',\n  'pull_request:',\n  'persist-credentials: false',\n  'jdx/mise-action',\n  'pnpm install --frozen-lockfile',\n  'pnpm run ultramodern:check',\n  'pnpm run build',\n  'MODERN_PUBLIC_SITE_URL: http://localhost:8080',\n  'timeout-minutes:',\n  'egress-policy: audit',\n]) {\n  if (!workflowContent.includes(requiredSnippet)) {\n    console.error(`Generated workflow must retain ${requiredSnippet.split('\\n')[0]}`);\n    process.exit(1);\n  }\n}\nif (workflowContent.includes('pull_request_target')) {\n  console.error('Generated workflow must not use pull_request_target');\n  process.exit(1);\n}\nfor (const match of workflowContent.matchAll(/^\\s*uses:\\s*([^@\\s]+)@([^\\s#]+)/gmu)) {\n  const [, actionName, actionRef] = match;\n  if (!/^[a-f0-9]{40}$/u.test(actionRef)) {\n    console.error(`Generated workflow must pin ${actionName}@${actionRef} to a commit SHA`);\n    process.exit(1);\n  }\n}\nif (\n  renovateConfig.dependencyDashboard !== true ||\n  renovateConfig.minimumReleaseAge !== '1 day' ||\n  !renovateConfig.extends?.includes('helpers:pinGitHubActionDigests') ||\n  !renovateConfig.packageRules?.some(\n    (rule) =>\n      rule.dependencyDashboardApproval === true && rule.matchUpdateTypes?.includes('major'),\n  )\n) {\n  console.error('Generated Renovate config must retain dashboard, release-age, action pinning, and major-approval policy');\n  process.exit(1);\n}\n\nif (templateManifest.schemaVersion !== 1) {\n  manifestErrors.push('schemaVersion');\n}\n\nif (templateManifest.source?.type !== 'builtin') {\n  manifestErrors.push('source.type');\n}\n\nif (\n  !Array.isArray(templateManifest.integrity?.checksums) ||\n  !templateManifest.integrity.checksums.some(\n    (checksum) =>\n      checksum.algorithm === 'sha256' &&\n      checksum.scope === 'source-tree' &&\n      /^[0-9a-f]{64}$/u.test(checksum.value),\n  )\n) {\n  manifestErrors.push('integrity.checksums[source-tree]');\n}\n\nfor (const deniedPath of requiredDeniedPaths) {\n  if (!templateManifest.materialization?.deniedPaths?.includes(deniedPath)) {\n    manifestErrors.push(`materialization.deniedPaths:${deniedPath}`);\n  }\n}\n\nif (templateManifest.lifecyclePolicy?.denyByDefault !== true) {\n  manifestErrors.push('lifecyclePolicy.denyByDefault');\n}\nif (\n  JSON.stringify(templateManifest.lifecyclePolicy?.allowedScripts) !==\n  JSON.stringify(['postinstall'])\n) {\n  manifestErrors.push('lifecyclePolicy.allowedScripts');\n}\n\nfor (const token of requiredPostMaterialization) {\n  if (!templateManifest.validation?.postMaterializationValidation?.includes(token)) {\n    manifestErrors.push(`validation.postMaterializationValidation:${token}`);\n  }\n}\n\nif (manifestErrors.length > 0) {\n  console.error(\n    `Ultramodern template manifest check failed. Invalid fields: ${manifestErrors.join(', ')}`,\n  );\n  process.exit(1);\n}\n\nconst packageJson = JSON.parse(\n  fs.readFileSync(path.resolve(process.cwd(), 'package.json'), 'utf-8'),\n);\nconst packageSource = JSON.parse(fs.readFileSync(packageSourcePath, 'utf-8'));\nconst unresolvedTemplateMarker = String.fromCodePoint(123, 123);\nif (JSON.stringify(packageJson).includes(unresolvedTemplateMarker)) {\n  console.error('package.json contains unresolved template markers');\n  process.exit(1);\n}\nif (JSON.stringify(packageSource).includes(unresolvedTemplateMarker)) {\n  console.error('package source metadata contains unresolved template markers');\n  process.exit(1);\n}\nconst skillsLock = JSON.parse(\n  fs.readFileSync(path.resolve(process.cwd(), '.agents/skills-lock.json'), 'utf-8'),\n);\nconst requiredScripts = {\n  format: 'oxfmt .',\n  'format:check': 'oxfmt --check .',\n  'i18n:check': 'node ./scripts/check-i18n-strings.mjs',\n  lint: 'oxlint .',\n  'lint:fix': 'oxlint . --fix',\n  postinstall: 'oxfmt . && node ./scripts/bootstrap-agent-skills.mjs',\n  'skills:check': 'node ./scripts/bootstrap-agent-skills.mjs --check',\n  'skills:install': 'node ./scripts/bootstrap-agent-skills.mjs',\n  test: 'rstest run',\n};\n\nfor (const [scriptName, scriptCommand] of Object.entries(requiredScripts)) {\n  if (packageJson.scripts?.[scriptName] !== scriptCommand) {\n    console.error(`Missing or invalid package script: ${scriptName}`);\n    process.exit(1);\n  }\n}\n\nif (\n  !packageJson.scripts?.typecheck?.includes('effect-tsgo') ||\n  !packageJson.scripts.typecheck.includes('get-exe-path')\n) {\n  console.error('typecheck must use effect-tsgo as the TypeScript checker');\n  process.exit(1);\n}\n\nif (!packageJson.scripts?.['ultramodern:check']?.includes('pnpm test')) {\n  console.error('ultramodern:check must run the generated Rstest suite');\n  process.exit(1);\n}\n\nif (packageJson.private !== true) {\n  console.error('Generated app package must be private by default');\n  process.exit(1);\n}\n\nconst miseConfig = fs.readFileSync(path.resolve(process.cwd(), '.mise.toml'), 'utf-8');\nif (!miseConfig.includes(`pnpm = \"${expectedPnpmVersion}\"`)) {\n  console.error(`Generated app must pin pnpm ${expectedPnpmVersion} in .mise.toml`);\n  process.exit(1);\n}\n\nif (packageJson.packageManager !== `pnpm@${expectedPnpmVersion}`) {\n  console.error(`Generated app package must pin pnpm@${expectedPnpmVersion}`);\n  process.exit(1);\n}\n\nif (packageJson.engines?.pnpm !== `>=${expectedPnpmVersion} <11.6.0`) {\n  console.error(`Generated app package must require pnpm >=${expectedPnpmVersion} <11.6.0`);\n  process.exit(1);\n}\n\nif (packageJson.pnpm !== undefined) {\n  console.error('Generated app must keep pnpm policy in pnpm-workspace.yaml, not package.json');\n  process.exit(1);\n}\n\nif (readPnpmConfig('minimumReleaseAge') !== 1440) {\n  console.error('pnpm minimumReleaseAge must be 1440');\n  process.exit(1);\n}\nif (readPnpmConfig('minimumReleaseAgeStrict') !== true) {\n  console.error('pnpm minimumReleaseAgeStrict must be true');\n  process.exit(1);\n}\nif (readPnpmConfig('minimumReleaseAgeIgnoreMissingTime') !== false) {\n  console.error('pnpm minimumReleaseAgeIgnoreMissingTime must be false');\n  process.exit(1);\n}\nif (\n  JSON.stringify(readPnpmConfig('minimumReleaseAgeExclude')) !==\n  JSON.stringify(['@bleedingdev/modern-js-*'])\n) {\n  console.error('pnpm minimumReleaseAgeExclude must allow just-published BleedingDev Modern cohorts only');\n  process.exit(1);\n}\nif (readPnpmConfig('trustPolicy') !== 'no-downgrade') {\n  console.error('pnpm trustPolicy must be no-downgrade');\n  process.exit(1);\n}\nfor (const [key, expected] of [\n  ['trustPolicyIgnoreAfter', 1440],\n  ['blockExoticSubdeps', true],\n  ['engineStrict', true],\n  ['pmOnFail', 'error'],\n  ['verifyDepsBeforeRun', 'error'],\n  ['strictDepBuilds', true],\n]) {\n  if (readPnpmConfig(key) !== expected) {\n    console.error(`pnpm ${key} must be ${String(expected)}`);\n    process.exit(1);\n  }\n}\nif (\n  JSON.stringify(readPnpmConfig('allowBuilds')) !==\n  JSON.stringify({\n    '@swc/core': true,\n    'core-js': true,\n    esbuild: true,\n    lefthook: true,\n    'msgpackr-extract': true,\n    sharp: true,\n    workerd: true,\n  })\n) {\n  console.error('pnpm allowBuilds must approve only the generated app build dependencies');\n  process.exit(1);\n}\nif (\n  JSON.stringify(readPnpmConfig('onlyBuiltDependencies')) !==\n  JSON.stringify(['@swc/core', 'core-js', 'esbuild', 'lefthook', 'msgpackr-extract', 'sharp', 'workerd'])\n) {\n  console.error('pnpm onlyBuiltDependencies must approve only the generated app build dependencies');\n  process.exit(1);\n}\n\nif (packageJson.modernjs?.preset !== 'presetUltramodern') {\n  console.error('package.json must declare presetUltramodern metadata');\n  process.exit(1);\n}\n\nif (\n  packageJson.modernjs?.packageSource?.config !== './.modernjs/ultramodern-package-source.json'\n) {\n  console.error('package.json must retain package source metadata location');\n  process.exit(1);\n}\n\nif (packageSource.schemaVersion !== 1) {\n  console.error('Package source metadata must use schemaVersion 1');\n  process.exit(1);\n}\n\nif (packageSource.preset !== 'presetUltramodern') {\n  console.error('Package source metadata must declare presetUltramodern');\n  process.exit(1);\n}\n\nif (packageSource.strategy !== 'workspace' && packageSource.strategy !== 'install') {\n  console.error('Package source strategy must be workspace or install');\n  process.exit(1);\n}\n\nconst expectedModernPackages = [\n  '@modern-js/runtime',\n  '@modern-js/app-tools',\n  '@modern-js/tsconfig',\n  '@modern-js/plugin-i18n',\n  '@modern-js/plugin-tanstack',\n  '@modern-js/plugin-bff',\n  '@modern-js/adapter-rstest',\n];\n\nfor (const packageName of expectedModernPackages) {\n  if (!packageSource.modernPackages?.packages?.includes(packageName)) {\n    console.error(`Package source metadata must include ${packageName}`);\n    process.exit(1);\n  }\n}\n\nconst expectedModernSpecifier = packageSource.modernPackages?.specifier;\nif (typeof expectedModernSpecifier !== 'string' || expectedModernSpecifier.length === 0) {\n  console.error('Package source metadata must provide a Modern package specifier');\n  process.exit(1);\n}\nif (\n  packageSource.strategy === 'install' &&\n  expectedModernSpecifier !== templateManifest.template?.version\n) {\n  console.error(\n    `Package source Modern specifier ${expectedModernSpecifier} must match template version ${templateManifest.template?.version}`,\n  );\n  process.exit(1);\n}\n\nconst expectedModernDependency = (packageName) => {\n  const alias = packageSource.modernPackages?.aliases?.[packageName];\n  return typeof alias === 'string'\n    ? `npm:${alias}@${expectedModernSpecifier}`\n    : expectedModernSpecifier;\n};\n\nfor (const packageName of [\n  '@modern-js/runtime',\n  '@modern-js/plugin-i18n',\n  '@modern-js/plugin-tanstack',\n]) {\n  if (\n    packageJson.dependencies?.[packageName] &&\n    packageJson.dependencies[packageName] !== expectedModernDependency(packageName)\n  ) {\n    console.error(`Dependency ${packageName} must match package source metadata`);\n    process.exit(1);\n  }\n}\n\nfor (const packageName of [\n  '@modern-js/app-tools',\n  '@modern-js/adapter-rstest',\n  '@modern-js/tsconfig',\n  '@modern-js/plugin-bff',\n]) {\n  if (\n    packageJson.devDependencies?.[packageName] &&\n    packageJson.devDependencies[packageName] !== expectedModernDependency(packageName)\n  ) {\n    console.error(`Dev dependency ${packageName} must match package source metadata`);\n    process.exit(1);\n  }\n}\n\nfor (const dependency of ['@modern-js/plugin-i18n', 'i18next', 'react-i18next']) {\n  if (!packageJson.dependencies?.[dependency]) {\n    console.error(`Missing dependency: ${dependency}`);\n    process.exit(1);\n  }\n}\n\nfor (const dependency of [\n  '@effect/tsgo',\n  '@modern-js/adapter-rstest',\n  '@rstest/core',\n  '@typescript/native-preview',\n  'happy-dom',\n  'lefthook',\n  'oxlint',\n  'oxfmt',\n  'ultracite',\n]) {\n  if (!packageJson.devDependencies?.[dependency]) {\n    console.error(`Missing devDependency: ${dependency}`);\n    process.exit(1);\n  }\n}\n\nif (\n  packageJson.devDependencies?.tailwindcss ||\n  packageJson.devDependencies?.['@tailwindcss/postcss'] ||\n  packageJson.devDependencies?.postcss\n) {\n  console.error('Tailwind CSS dependencies must be absent when Tailwind is disabled');\n  process.exit(1);\n}\n\nconst privateSource = skillsLock.sources?.find(\n  (source) => source.repository === 'https://github.com/TechsioCZ/skills',\n);\nconst privateSkills = new Set(privateSource?.baseline?.map((skill) => skill.name));\nfor (const skillName of ['plan-graph', 'dag', 'subagent-graph', 'helm', 'debugger-mode']) {\n  if (!privateSkills.has(skillName)) {\n    console.error(`Missing private skill allowlist entry: ${skillName}`);\n    process.exit(1);\n  }\n}\n\nconsole.log('Ultramodern contract check passed.');\n",
     "tests/tsconfig.json": "{\n  \"extends\": \"../tsconfig.json\",\n  \"compilerOptions\": {\n    \"types\": [\"@rstest/core/globals\"]\n  },\n  \"include\": [\"./\"]\n}\n",
     "tests/ultramodern.contract.test.ts": "import fs from 'node:fs';\nimport path from 'node:path';\nimport { describe, expect, test } from '@rstest/core';\n\nconst root = process.cwd();\nconst readText = (relativePath: string) =>\n  fs.readFileSync(path.join(root, relativePath), 'utf-8');\nconst readJson = <T>(relativePath: string): T =>\n  JSON.parse(readText(relativePath)) as T;\n\ndescribe('generated UltraModern contract', () => {\n  test('keeps localized route metadata and Rstest wiring', () => {\n    expect(fs.existsSync(path.join(root, 'src/routes/[lang]/page.tsx'))).toBe(\n      true,\n    );\n    expect(fs.existsSync(path.join(root, 'src/routes/page.tsx'))).toBe(false);\n    expect(fs.existsSync(path.join(root, 'src/routes/layout.tsx'))).toBe(true);\n    expect(fs.existsSync(path.join(root, 'postcss.config.mjs'))).toBe(false);\n    expect(fs.existsSync(path.join(root, 'tailwind.config.ts'))).toBe(false);\n  });\n\n  test('retains package-source metadata for generated Modern.js packages', () => {\n    const packageJson = readJson<{\n      dependencies?: Record<string, string>;\n      devDependencies?: Record<string, string>;\n      modernjs?: {\n        packageSource?: {\n          config?: string;\n        };\n        preset?: string;\n      };\n    }>('package.json');\n    const packageSource = readJson<{\n      modernPackages?: {\n        packages?: string[];\n        specifier?: string;\n      };\n      strategy?: string;\n    }>('.modernjs/ultramodern-package-source.json');\n\n    expect(packageJson.modernjs?.preset).toBe('presetUltramodern');\n    expect(packageJson.modernjs?.packageSource?.config).toBe(\n      './.modernjs/ultramodern-package-source.json',\n    );\n    expect(packageSource.strategy).toMatch(/^(workspace|install)$/u);\n    expect(packageSource.modernPackages?.packages).toContain(\n      '@modern-js/runtime',\n    );\n    expect(packageSource.modernPackages?.packages).toContain(\n      '@modern-js/app-tools',\n    );\n    expect(packageSource.modernPackages?.packages).toContain(\n      '@modern-js/adapter-rstest',\n    );\n    expect(packageSource.modernPackages?.specifier).toBeTruthy();\n    expect(\n      packageJson.devDependencies?.['@modern-js/adapter-rstest'],\n    ).toBeTruthy();\n    expect(packageJson.devDependencies?.tailwindcss).toBeUndefined();\n    expect(\n      packageJson.devDependencies?.['@tailwindcss/postcss'],\n    ).toBeUndefined();\n  });\n});\n",
-    "api/effect/index.ts": "\n",
-    "api/lambda/hello.ts": "",
     ".github/renovate.json": "{\n  \"$schema\": \"https://docs.renovatebot.com/renovate-schema.json\",\n  \"extends\": [\n    \"config:recommended\",\n    \"helpers:pinGitHubActionDigests\"\n  ],\n  \"dependencyDashboard\": true,\n  \"minimumReleaseAge\": \"1 day\",\n  \"prConcurrentLimit\": 5,\n  \"prHourlyLimit\": 2,\n  \"rangeStrategy\": \"bump\",\n  \"schedule\": [\n    \"before 5am on monday\"\n  ],\n  \"timezone\": \"Etc/UTC\",\n  \"packageRules\": [\n    {\n      \"matchManagers\": [\n        \"github-actions\"\n      ],\n      \"groupName\": \"github-actions\",\n      \"labels\": [\n        \"dependencies\",\n        \"github-actions\",\n        \"security\"\n      ]\n    },\n    {\n      \"matchManagers\": [\n        \"npm\"\n      ],\n      \"matchUpdateTypes\": [\n        \"patch\",\n        \"minor\"\n      ],\n      \"groupName\": \"npm minor and patch updates\",\n      \"labels\": [\n        \"dependencies\",\n        \"npm\"\n      ]\n    },\n    {\n      \"matchUpdateTypes\": [\n        \"major\"\n      ],\n      \"dependencyDashboardApproval\": true,\n      \"labels\": [\n        \"dependencies\",\n        \"major\"\n      ]\n    }\n  ]\n}\n",
     ".github/workflows/ultramodern-gates.yml": "name: Ultramodern Gates\n\non:\n  push:\n  pull_request:\n\npermissions:\n  contents: read\n\ndefaults:\n  run:\n    shell: bash\n\nenv:\n  FORCE_JAVASCRIPT_ACTIONS_TO_NODE24: true\n\nconcurrency:\n  group: ultramodern-gates-$-$\n  cancel-in-progress: true\n\njobs:\n  ultramodern-gates:\n    runs-on: ubuntu-latest\n    timeout-minutes: 20\n    steps:\n      - name: Harden Runner\n        uses: step-security/harden-runner@ab7a9404c0f3da075243ca237b5fac12c98deaa5 # v2\n        with:\n          egress-policy: audit\n\n      - name: Checkout\n        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2\n        with:\n          fetch-depth: 1\n          persist-credentials: false\n\n      - name: Setup Node.js\n        uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6.4.0\n        with:\n          node-version: 24\n\n      - name: Setup mise\n        uses: jdx/mise-action@5ac50f778e26fac95da98d50503682459e86d566 # v3.2.0\n\n      - name: Install Dependencies\n        run: mise exec -- pnpm install --frozen-lockfile\n\n      - name: Validate Ultramodern Contract\n        run: mise exec -- pnpm run ultramodern:check\n\n      - name: Build\n        env:\n          MODERN_PUBLIC_SITE_URL: http://localhost:8080\n        run: mise exec -- pnpm run build\n",
+    "api/effect/index.ts": "\n",
+    "api/lambda/hello.ts": "",
     "shared/effect/api.ts": "\n",
     "src/modern-app-env.d.ts": "/// <reference types='@modern-js/app-tools/types' />\n\ndeclare const ULTRAMODERN_SITE_URL: string;\n",
     "src/modern.runtime.ts": "import { defineRuntimeConfig } from '@modern-js/runtime';\nimport { createInstance } from 'i18next';\n\nconst i18nInstance = createInstance();\n\nexport default defineRuntimeConfig({\n  i18n: {\n    i18nInstance,\n    initOptions: {\n      defaultNS: 'translation',\n      fallbackLng: 'en',\n      interpolation: {\n        escapeValue: false,\n      },\n      ns: ['translation'],\n      supportedLngs: ['en', 'cs'],\n    },\n  },\n});\n",

package/dist/esm-node/templates/mwa.mjs

@@ -24,10 +24,10 @@ const MWAFiles = {
     "scripts/validate-ultramodern.mjs": "import { execFileSync } from 'node:child_process';\nimport fs from 'node:fs';\nimport path from 'node:path';\n\nconst configPath = path.resolve(process.cwd(), 'modern.config.ts');\nconst templateManifestPath = path.resolve(process.cwd(), '.modernjs/mv-template-manifest.json');\nconst packageSourcePath = path.resolve(\n  process.cwd(),\n  '.modernjs/ultramodern-package-source.json',\n);\nconst readPnpmConfig = (key) => {\n  const env = Object.fromEntries(\n    Object.entries(process.env).filter(\n      ([envKey]) => !/^(?:npm|pnpm)_config_/iu.test(envKey),\n    ),\n  );\n  const output = execFileSync('pnpm', ['config', 'get', key, '--json'], {\n    cwd: process.cwd(),\n    encoding: 'utf-8',\n    env,\n    stdio: ['ignore', 'pipe', 'pipe'],\n  }).trim();\n  return output ? JSON.parse(output) : undefined;\n};\nconst enableTailwind = ;\nconst expectedPnpmVersion = '';\nconst activePnpmVersion = execFileSync('pnpm', ['--version'], {\n  cwd: process.cwd(),\n  encoding: 'utf-8',\n  stdio: ['ignore', 'pipe', 'pipe'],\n}).trim();\n\nif (activePnpmVersion !== expectedPnpmVersion) {\n  console.error(\n    `Generated app requires pnpm ${expectedPnpmVersion}; active pnpm is ${activePnpmVersion}. Run mise install, then rerun pnpm from the activated shell`,\n  );\n  process.exit(1);\n}\n\nif (!fs.existsSync(configPath)) {\n  console.error('modern.config.ts not found');\n  process.exit(1);\n}\n\nconst content = fs.readFileSync(configPath, 'utf-8');\nconst requiredTokens = [\n  'presetUltramodern(',\n  'appTools()',\n  'enableModuleFederationSSR',\n  'enableBffRequestId',\n  'enableTelemetryExporters',\n  'i18nPlugin(',\n  'localePathRedirect: true',\n  'ULTRAMODERN_SITE_URL',\n  'MODERN_PUBLIC_SITE_URL must be set for production builds',\n  'globalVars',\n];\nconst missing = requiredTokens.filter((token) => !content.includes(token));\n\nif (missing.length > 0) {\n  console.error(`Ultramodern contract check failed. Missing tokens: ${missing.join(', ')}`);\n  process.exit(1);\n}\n\nif (!fs.existsSync(templateManifestPath)) {\n  console.error('.modernjs/mv-template-manifest.json not found');\n  process.exit(1);\n}\n\nconst templateManifest = JSON.parse(fs.readFileSync(templateManifestPath, 'utf-8'));\nconst requiredDeniedPaths = [\n  '.git/**',\n  '.npmrc',\n  '.yarnrc',\n  '.env',\n  '.env.*',\n  'node_modules/**',\n  'dist/**',\n];\nconst requiredPostMaterialization = [\n  'ultramodern-contract-check',\n  'agent-skill-postinstall-allowed',\n  'github-workflow-security-enforced',\n  'package-source-retained',\n  'pnpm-11-policy-enforced',\n  'rstest-smoke-tests',\n  'template-manifest-retained',\n];\nconst requiredPaths = [\n  'AGENTS.md',\n  '.agents/skills-lock.json',\n  '.codex/hooks.json',\n  '.github/renovate.json',\n  '.github/workflows/ultramodern-gates.yml',\n  'lefthook.yml',\n  'oxlint.config.ts',\n  'oxfmt.config.ts',\n  'scripts/bootstrap-agent-skills.mjs',\n  '.mise.toml',\n  '.modernjs/ultramodern-package-source.json',\n  'pnpm-workspace.yaml',\n  'rstest.config.mts',\n  'scripts/check-i18n-strings.mjs',\n  'config/public/locales/en/translation.json',\n  'config/public/locales/cs/translation.json',\n  'src/modern-app-env.d.ts',\n  'src/routes/index.css',\n  'src/routes/layout.tsx',\n  'src/routes/[lang]/page.tsx',\n  'tests/ultramodern.contract.test.ts',\n];\nconst manifestErrors = [];\n\nfor (const requiredPath of requiredPaths) {\n  if (!fs.existsSync(path.resolve(process.cwd(), requiredPath))) {\n    console.error(`${requiredPath} not found`);\n    process.exit(1);\n  }\n}\n\nif (fs.existsSync(path.resolve(process.cwd(), 'src/routes/page.tsx'))) {\n  console.error('src/routes/page.tsx must move under src/routes/[lang]/page.tsx');\n  process.exit(1);\n}\n\nif (\n  !enableTailwind &&\n  (fs.existsSync(path.resolve(process.cwd(), 'postcss.config.mjs')) ||\n    fs.existsSync(path.resolve(process.cwd(), 'tailwind.config.ts')))\n) {\n  console.error('Tailwind config files must not be written when Tailwind is disabled');\n  process.exit(1);\n}\n\nconst workflowContent = fs.readFileSync(\n  path.resolve(process.cwd(), '.github/workflows/ultramodern-gates.yml'),\n  'utf-8',\n);\nconst renovateConfig = JSON.parse(\n  fs.readFileSync(path.resolve(process.cwd(), '.github/renovate.json'), 'utf-8'),\n);\nfor (const requiredSnippet of [\n  'permissions:\\n  contents: read',\n  'pull_request:',\n  'persist-credentials: false',\n  'jdx/mise-action',\n  'pnpm install --frozen-lockfile',\n  'pnpm run ultramodern:check',\n  'pnpm run build',\n  'MODERN_PUBLIC_SITE_URL: http://localhost:8080',\n  'timeout-minutes:',\n  'egress-policy: audit',\n]) {\n  if (!workflowContent.includes(requiredSnippet)) {\n    console.error(`Generated workflow must retain ${requiredSnippet.split('\\n')[0]}`);\n    process.exit(1);\n  }\n}\nif (workflowContent.includes('pull_request_target')) {\n  console.error('Generated workflow must not use pull_request_target');\n  process.exit(1);\n}\nfor (const match of workflowContent.matchAll(/^\\s*uses:\\s*([^@\\s]+)@([^\\s#]+)/gmu)) {\n  const [, actionName, actionRef] = match;\n  if (!/^[a-f0-9]{40}$/u.test(actionRef)) {\n    console.error(`Generated workflow must pin ${actionName}@${actionRef} to a commit SHA`);\n    process.exit(1);\n  }\n}\nif (\n  renovateConfig.dependencyDashboard !== true ||\n  renovateConfig.minimumReleaseAge !== '1 day' ||\n  !renovateConfig.extends?.includes('helpers:pinGitHubActionDigests') ||\n  !renovateConfig.packageRules?.some(\n    (rule) =>\n      rule.dependencyDashboardApproval === true && rule.matchUpdateTypes?.includes('major'),\n  )\n) {\n  console.error('Generated Renovate config must retain dashboard, release-age, action pinning, and major-approval policy');\n  process.exit(1);\n}\n\nif (templateManifest.schemaVersion !== 1) {\n  manifestErrors.push('schemaVersion');\n}\n\nif (templateManifest.source?.type !== 'builtin') {\n  manifestErrors.push('source.type');\n}\n\nif (\n  !Array.isArray(templateManifest.integrity?.checksums) ||\n  !templateManifest.integrity.checksums.some(\n    (checksum) =>\n      checksum.algorithm === 'sha256' &&\n      checksum.scope === 'source-tree' &&\n      /^[0-9a-f]{64}$/u.test(checksum.value),\n  )\n) {\n  manifestErrors.push('integrity.checksums[source-tree]');\n}\n\nfor (const deniedPath of requiredDeniedPaths) {\n  if (!templateManifest.materialization?.deniedPaths?.includes(deniedPath)) {\n    manifestErrors.push(`materialization.deniedPaths:${deniedPath}`);\n  }\n}\n\nif (templateManifest.lifecyclePolicy?.denyByDefault !== true) {\n  manifestErrors.push('lifecyclePolicy.denyByDefault');\n}\nif (\n  JSON.stringify(templateManifest.lifecyclePolicy?.allowedScripts) !==\n  JSON.stringify(['postinstall'])\n) {\n  manifestErrors.push('lifecyclePolicy.allowedScripts');\n}\n\nfor (const token of requiredPostMaterialization) {\n  if (!templateManifest.validation?.postMaterializationValidation?.includes(token)) {\n    manifestErrors.push(`validation.postMaterializationValidation:${token}`);\n  }\n}\n\nif (manifestErrors.length > 0) {\n  console.error(\n    `Ultramodern template manifest check failed. Invalid fields: ${manifestErrors.join(', ')}`,\n  );\n  process.exit(1);\n}\n\nconst packageJson = JSON.parse(\n  fs.readFileSync(path.resolve(process.cwd(), 'package.json'), 'utf-8'),\n);\nconst packageSource = JSON.parse(fs.readFileSync(packageSourcePath, 'utf-8'));\nconst unresolvedTemplateMarker = String.fromCodePoint(123, 123);\nif (JSON.stringify(packageJson).includes(unresolvedTemplateMarker)) {\n  console.error('package.json contains unresolved template markers');\n  process.exit(1);\n}\nif (JSON.stringify(packageSource).includes(unresolvedTemplateMarker)) {\n  console.error('package source metadata contains unresolved template markers');\n  process.exit(1);\n}\nconst skillsLock = JSON.parse(\n  fs.readFileSync(path.resolve(process.cwd(), '.agents/skills-lock.json'), 'utf-8'),\n);\nconst requiredScripts = {\n  format: 'oxfmt .',\n  'format:check': 'oxfmt --check .',\n  'i18n:check': 'node ./scripts/check-i18n-strings.mjs',\n  lint: 'oxlint .',\n  'lint:fix': 'oxlint . --fix',\n  postinstall: 'oxfmt . && node ./scripts/bootstrap-agent-skills.mjs',\n  'skills:check': 'node ./scripts/bootstrap-agent-skills.mjs --check',\n  'skills:install': 'node ./scripts/bootstrap-agent-skills.mjs',\n  test: 'rstest run',\n};\n\nfor (const [scriptName, scriptCommand] of Object.entries(requiredScripts)) {\n  if (packageJson.scripts?.[scriptName] !== scriptCommand) {\n    console.error(`Missing or invalid package script: ${scriptName}`);\n    process.exit(1);\n  }\n}\n\nif (\n  !packageJson.scripts?.typecheck?.includes('effect-tsgo') ||\n  !packageJson.scripts.typecheck.includes('get-exe-path')\n) {\n  console.error('typecheck must use effect-tsgo as the TypeScript checker');\n  process.exit(1);\n}\n\nif (!packageJson.scripts?.['ultramodern:check']?.includes('pnpm test')) {\n  console.error('ultramodern:check must run the generated Rstest suite');\n  process.exit(1);\n}\n\nif (packageJson.private !== true) {\n  console.error('Generated app package must be private by default');\n  process.exit(1);\n}\n\nconst miseConfig = fs.readFileSync(path.resolve(process.cwd(), '.mise.toml'), 'utf-8');\nif (!miseConfig.includes(`pnpm = \"${expectedPnpmVersion}\"`)) {\n  console.error(`Generated app must pin pnpm ${expectedPnpmVersion} in .mise.toml`);\n  process.exit(1);\n}\n\nif (packageJson.packageManager !== `pnpm@${expectedPnpmVersion}`) {\n  console.error(`Generated app package must pin pnpm@${expectedPnpmVersion}`);\n  process.exit(1);\n}\n\nif (packageJson.engines?.pnpm !== `>=${expectedPnpmVersion} <11.6.0`) {\n  console.error(`Generated app package must require pnpm >=${expectedPnpmVersion} <11.6.0`);\n  process.exit(1);\n}\n\nif (packageJson.pnpm !== undefined) {\n  console.error('Generated app must keep pnpm policy in pnpm-workspace.yaml, not package.json');\n  process.exit(1);\n}\n\nif (readPnpmConfig('minimumReleaseAge') !== 1440) {\n  console.error('pnpm minimumReleaseAge must be 1440');\n  process.exit(1);\n}\nif (readPnpmConfig('minimumReleaseAgeStrict') !== true) {\n  console.error('pnpm minimumReleaseAgeStrict must be true');\n  process.exit(1);\n}\nif (readPnpmConfig('minimumReleaseAgeIgnoreMissingTime') !== false) {\n  console.error('pnpm minimumReleaseAgeIgnoreMissingTime must be false');\n  process.exit(1);\n}\nif (\n  JSON.stringify(readPnpmConfig('minimumReleaseAgeExclude')) !==\n  JSON.stringify(['@bleedingdev/modern-js-*'])\n) {\n  console.error('pnpm minimumReleaseAgeExclude must allow just-published BleedingDev Modern cohorts only');\n  process.exit(1);\n}\nif (readPnpmConfig('trustPolicy') !== 'no-downgrade') {\n  console.error('pnpm trustPolicy must be no-downgrade');\n  process.exit(1);\n}\nfor (const [key, expected] of [\n  ['trustPolicyIgnoreAfter', 1440],\n  ['blockExoticSubdeps', true],\n  ['engineStrict', true],\n  ['pmOnFail', 'error'],\n  ['verifyDepsBeforeRun', 'error'],\n  ['strictDepBuilds', true],\n]) {\n  if (readPnpmConfig(key) !== expected) {\n    console.error(`pnpm ${key} must be ${String(expected)}`);\n    process.exit(1);\n  }\n}\nif (\n  JSON.stringify(readPnpmConfig('allowBuilds')) !==\n  JSON.stringify({\n    '@swc/core': true,\n    'core-js': true,\n    esbuild: true,\n    lefthook: true,\n    'msgpackr-extract': true,\n    sharp: true,\n    workerd: true,\n  })\n) {\n  console.error('pnpm allowBuilds must approve only the generated app build dependencies');\n  process.exit(1);\n}\nif (\n  JSON.stringify(readPnpmConfig('onlyBuiltDependencies')) !==\n  JSON.stringify(['@swc/core', 'core-js', 'esbuild', 'lefthook', 'msgpackr-extract', 'sharp', 'workerd'])\n) {\n  console.error('pnpm onlyBuiltDependencies must approve only the generated app build dependencies');\n  process.exit(1);\n}\n\nif (packageJson.modernjs?.preset !== 'presetUltramodern') {\n  console.error('package.json must declare presetUltramodern metadata');\n  process.exit(1);\n}\n\nif (\n  packageJson.modernjs?.packageSource?.config !== './.modernjs/ultramodern-package-source.json'\n) {\n  console.error('package.json must retain package source metadata location');\n  process.exit(1);\n}\n\nif (packageSource.schemaVersion !== 1) {\n  console.error('Package source metadata must use schemaVersion 1');\n  process.exit(1);\n}\n\nif (packageSource.preset !== 'presetUltramodern') {\n  console.error('Package source metadata must declare presetUltramodern');\n  process.exit(1);\n}\n\nif (packageSource.strategy !== 'workspace' && packageSource.strategy !== 'install') {\n  console.error('Package source strategy must be workspace or install');\n  process.exit(1);\n}\n\nconst expectedModernPackages = [\n  '@modern-js/runtime',\n  '@modern-js/app-tools',\n  '@modern-js/tsconfig',\n  '@modern-js/plugin-i18n',\n  '@modern-js/plugin-tanstack',\n  '@modern-js/plugin-bff',\n  '@modern-js/adapter-rstest',\n];\n\nfor (const packageName of expectedModernPackages) {\n  if (!packageSource.modernPackages?.packages?.includes(packageName)) {\n    console.error(`Package source metadata must include ${packageName}`);\n    process.exit(1);\n  }\n}\n\nconst expectedModernSpecifier = packageSource.modernPackages?.specifier;\nif (typeof expectedModernSpecifier !== 'string' || expectedModernSpecifier.length === 0) {\n  console.error('Package source metadata must provide a Modern package specifier');\n  process.exit(1);\n}\nif (\n  packageSource.strategy === 'install' &&\n  expectedModernSpecifier !== templateManifest.template?.version\n) {\n  console.error(\n    `Package source Modern specifier ${expectedModernSpecifier} must match template version ${templateManifest.template?.version}`,\n  );\n  process.exit(1);\n}\n\nconst expectedModernDependency = (packageName) => {\n  const alias = packageSource.modernPackages?.aliases?.[packageName];\n  return typeof alias === 'string'\n    ? `npm:${alias}@${expectedModernSpecifier}`\n    : expectedModernSpecifier;\n};\n\nfor (const packageName of [\n  '@modern-js/runtime',\n  '@modern-js/plugin-i18n',\n  '@modern-js/plugin-tanstack',\n]) {\n  if (\n    packageJson.dependencies?.[packageName] &&\n    packageJson.dependencies[packageName] !== expectedModernDependency(packageName)\n  ) {\n    console.error(`Dependency ${packageName} must match package source metadata`);\n    process.exit(1);\n  }\n}\n\nfor (const packageName of [\n  '@modern-js/app-tools',\n  '@modern-js/adapter-rstest',\n  '@modern-js/tsconfig',\n  '@modern-js/plugin-bff',\n]) {\n  if (\n    packageJson.devDependencies?.[packageName] &&\n    packageJson.devDependencies[packageName] !== expectedModernDependency(packageName)\n  ) {\n    console.error(`Dev dependency ${packageName} must match package source metadata`);\n    process.exit(1);\n  }\n}\n\nfor (const dependency of ['@modern-js/plugin-i18n', 'i18next', 'react-i18next']) {\n  if (!packageJson.dependencies?.[dependency]) {\n    console.error(`Missing dependency: ${dependency}`);\n    process.exit(1);\n  }\n}\n\nfor (const dependency of [\n  '@effect/tsgo',\n  '@modern-js/adapter-rstest',\n  '@rstest/core',\n  '@typescript/native-preview',\n  'happy-dom',\n  'lefthook',\n  'oxlint',\n  'oxfmt',\n  'ultracite',\n]) {\n  if (!packageJson.devDependencies?.[dependency]) {\n    console.error(`Missing devDependency: ${dependency}`);\n    process.exit(1);\n  }\n}\n\nif (\n  packageJson.devDependencies?.tailwindcss ||\n  packageJson.devDependencies?.['@tailwindcss/postcss'] ||\n  packageJson.devDependencies?.postcss\n) {\n  console.error('Tailwind CSS dependencies must be absent when Tailwind is disabled');\n  process.exit(1);\n}\n\nconst privateSource = skillsLock.sources?.find(\n  (source) => source.repository === 'https://github.com/TechsioCZ/skills',\n);\nconst privateSkills = new Set(privateSource?.baseline?.map((skill) => skill.name));\nfor (const skillName of ['plan-graph', 'dag', 'subagent-graph', 'helm', 'debugger-mode']) {\n  if (!privateSkills.has(skillName)) {\n    console.error(`Missing private skill allowlist entry: ${skillName}`);\n    process.exit(1);\n  }\n}\n\nconsole.log('Ultramodern contract check passed.');\n",
     "tests/tsconfig.json": "{\n  \"extends\": \"../tsconfig.json\",\n  \"compilerOptions\": {\n    \"types\": [\"@rstest/core/globals\"]\n  },\n  \"include\": [\"./\"]\n}\n",
     "tests/ultramodern.contract.test.ts": "import fs from 'node:fs';\nimport path from 'node:path';\nimport { describe, expect, test } from '@rstest/core';\n\nconst root = process.cwd();\nconst readText = (relativePath: string) =>\n  fs.readFileSync(path.join(root, relativePath), 'utf-8');\nconst readJson = <T>(relativePath: string): T =>\n  JSON.parse(readText(relativePath)) as T;\n\ndescribe('generated UltraModern contract', () => {\n  test('keeps localized route metadata and Rstest wiring', () => {\n    expect(fs.existsSync(path.join(root, 'src/routes/[lang]/page.tsx'))).toBe(\n      true,\n    );\n    expect(fs.existsSync(path.join(root, 'src/routes/page.tsx'))).toBe(false);\n    expect(fs.existsSync(path.join(root, 'src/routes/layout.tsx'))).toBe(true);\n    expect(fs.existsSync(path.join(root, 'postcss.config.mjs'))).toBe(false);\n    expect(fs.existsSync(path.join(root, 'tailwind.config.ts'))).toBe(false);\n  });\n\n  test('retains package-source metadata for generated Modern.js packages', () => {\n    const packageJson = readJson<{\n      dependencies?: Record<string, string>;\n      devDependencies?: Record<string, string>;\n      modernjs?: {\n        packageSource?: {\n          config?: string;\n        };\n        preset?: string;\n      };\n    }>('package.json');\n    const packageSource = readJson<{\n      modernPackages?: {\n        packages?: string[];\n        specifier?: string;\n      };\n      strategy?: string;\n    }>('.modernjs/ultramodern-package-source.json');\n\n    expect(packageJson.modernjs?.preset).toBe('presetUltramodern');\n    expect(packageJson.modernjs?.packageSource?.config).toBe(\n      './.modernjs/ultramodern-package-source.json',\n    );\n    expect(packageSource.strategy).toMatch(/^(workspace|install)$/u);\n    expect(packageSource.modernPackages?.packages).toContain(\n      '@modern-js/runtime',\n    );\n    expect(packageSource.modernPackages?.packages).toContain(\n      '@modern-js/app-tools',\n    );\n    expect(packageSource.modernPackages?.packages).toContain(\n      '@modern-js/adapter-rstest',\n    );\n    expect(packageSource.modernPackages?.specifier).toBeTruthy();\n    expect(\n      packageJson.devDependencies?.['@modern-js/adapter-rstest'],\n    ).toBeTruthy();\n    expect(packageJson.devDependencies?.tailwindcss).toBeUndefined();\n    expect(\n      packageJson.devDependencies?.['@tailwindcss/postcss'],\n    ).toBeUndefined();\n  });\n});\n",
-    "api/effect/index.ts": "\n",
-    "api/lambda/hello.ts": "",
     ".github/renovate.json": "{\n  \"$schema\": \"https://docs.renovatebot.com/renovate-schema.json\",\n  \"extends\": [\n    \"config:recommended\",\n    \"helpers:pinGitHubActionDigests\"\n  ],\n  \"dependencyDashboard\": true,\n  \"minimumReleaseAge\": \"1 day\",\n  \"prConcurrentLimit\": 5,\n  \"prHourlyLimit\": 2,\n  \"rangeStrategy\": \"bump\",\n  \"schedule\": [\n    \"before 5am on monday\"\n  ],\n  \"timezone\": \"Etc/UTC\",\n  \"packageRules\": [\n    {\n      \"matchManagers\": [\n        \"github-actions\"\n      ],\n      \"groupName\": \"github-actions\",\n      \"labels\": [\n        \"dependencies\",\n        \"github-actions\",\n        \"security\"\n      ]\n    },\n    {\n      \"matchManagers\": [\n        \"npm\"\n      ],\n      \"matchUpdateTypes\": [\n        \"patch\",\n        \"minor\"\n      ],\n      \"groupName\": \"npm minor and patch updates\",\n      \"labels\": [\n        \"dependencies\",\n        \"npm\"\n      ]\n    },\n    {\n      \"matchUpdateTypes\": [\n        \"major\"\n      ],\n      \"dependencyDashboardApproval\": true,\n      \"labels\": [\n        \"dependencies\",\n        \"major\"\n      ]\n    }\n  ]\n}\n",
     ".github/workflows/ultramodern-gates.yml": "name: Ultramodern Gates\n\non:\n  push:\n  pull_request:\n\npermissions:\n  contents: read\n\ndefaults:\n  run:\n    shell: bash\n\nenv:\n  FORCE_JAVASCRIPT_ACTIONS_TO_NODE24: true\n\nconcurrency:\n  group: ultramodern-gates-$-$\n  cancel-in-progress: true\n\njobs:\n  ultramodern-gates:\n    runs-on: ubuntu-latest\n    timeout-minutes: 20\n    steps:\n      - name: Harden Runner\n        uses: step-security/harden-runner@ab7a9404c0f3da075243ca237b5fac12c98deaa5 # v2\n        with:\n          egress-policy: audit\n\n      - name: Checkout\n        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2\n        with:\n          fetch-depth: 1\n          persist-credentials: false\n\n      - name: Setup Node.js\n        uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6.4.0\n        with:\n          node-version: 24\n\n      - name: Setup mise\n        uses: jdx/mise-action@5ac50f778e26fac95da98d50503682459e86d566 # v3.2.0\n\n      - name: Install Dependencies\n        run: mise exec -- pnpm install --frozen-lockfile\n\n      - name: Validate Ultramodern Contract\n        run: mise exec -- pnpm run ultramodern:check\n\n      - name: Build\n        env:\n          MODERN_PUBLIC_SITE_URL: http://localhost:8080\n        run: mise exec -- pnpm run build\n",
+    "api/effect/index.ts": "\n",
+    "api/lambda/hello.ts": "",
     "shared/effect/api.ts": "\n",
     "src/modern-app-env.d.ts": "/// <reference types='@modern-js/app-tools/types' />\n\ndeclare const ULTRAMODERN_SITE_URL: string;\n",
     "src/modern.runtime.ts": "import { defineRuntimeConfig } from '@modern-js/runtime';\nimport { createInstance } from 'i18next';\n\nconst i18nInstance = createInstance();\n\nexport default defineRuntimeConfig({\n  i18n: {\n    i18nInstance,\n    initOptions: {\n      defaultNS: 'translation',\n      fallbackLng: 'en',\n      interpolation: {\n        escapeValue: false,\n      },\n      ns: ['translation'],\n      supportedLngs: ['en', 'cs'],\n    },\n  },\n});\n",

package/dist/types/templates/mwa.d.ts

@@ -23,10 +23,10 @@ export declare const MWAFiles: {
     "scripts/validate-ultramodern.mjs": string;
     "tests/tsconfig.json": string;
     "tests/ultramodern.contract.test.ts": string;
-    "api/effect/index.ts": string;
-    "api/lambda/hello.ts": string;
     ".github/renovate.json": string;
     ".github/workflows/ultramodern-gates.yml": string;
+    "api/effect/index.ts": string;
+    "api/lambda/hello.ts": string;
     "shared/effect/api.ts": string;
     "src/modern-app-env.d.ts": string;
     "src/modern.runtime.ts": string;

package/package.json

@@ -17,7 +17,7 @@
     "modern",
     "modern.js"
   ],
-  "version": "3.2.0-ultramodern.93",
+  "version": "3.2.0-ultramodern.94",
   "types": "./dist/types/index.d.ts",
   "main": "./dist/cjs/index.js",
   "module": "./dist/esm/index.mjs",
@@ -48,7 +48,7 @@
     "@types/recursive-readdir": "^2.2.4",
     "@typescript/native-preview": "7.0.0-dev.20260527.2",
     "recursive-readdir": "^2.2.3",
-    "@modern-js/create": "npm:@bleedingdev/modern-js-create@3.2.0-ultramodern.93"
+    "@modern-js/create": "npm:@bleedingdev/modern-js-create@3.2.0-ultramodern.94"
   },
   "sideEffects": false,
   "publishConfig": {