@bleedingdev/modern-js-ultramodern-create 3.9.0-ultramodern.11 → 3.9.0-ultramodern.13

package/README.md

@@ -36,8 +36,8 @@ domains to delete. It generates:
 - `verticals/*` empty until a real domain is added with `--vertical`.
 - `packages/shared-*` placeholders for shared contracts, tokens, and Effect
 API support.
-- `.modernjs/ultramodern.json` as compact generator provenance, package-source
-  config, app topology, bridge, deploy, Module Federation, and tooling config.
+- `catalogs.ultramodern` in `pnpm-workspace.yaml` for published framework
+  dependency versions, referenced by application manifests.
 - `topology/*` as app-owned topology, ownership, and local development overlay
   JSON.
 
@@ -51,15 +51,15 @@ pnpm check
 pnpm build
 ```
 
-The generated toolchain pins Node `26.7.0`, pnpm `11.24.0`, and
-`@types/node@^26.4.1`; its engine baseline remains Node `>=26` with pnpm `11+`.
+The generated toolchain pins Node `26.7.0`, pnpm `11.27.1`, and
+`@types/node@^26.6.2`; its engine baseline remains Node `>=26` with pnpm `11+`.
 `packageManager`, `.mise.toml`, generated validation, and CI should all agree
 on those values; do not reintroduce Corepack or older pnpm aliases.
 
-The current generated dependency cohort also pins `@effect/tsgo@0.41.0`,
-`@tanstack/react-router@1.170.33`, `@tanstack/router-core@1.171.28`,
-`@tanstack/history@1.162.2`, and the Module Federation integration `2.9.0`
-cohort, `@module-federation/node@2.7.50`. Move these only through the
+The current generated dependency cohort also pins `@effect/tsgo@0.45.0`,
+`@tanstack/react-router@1.170.39`, `@tanstack/router-core@1.171.32`,
+`@tanstack/history@1.162.4`, and the Module Federation integration `2.9.1`
+cohort, `@module-federation/node@2.7.51`. Move these only through the
 generator-owned version policy so templates, validation, and the published
 workspace contract stay aligned.
 
@@ -169,38 +169,35 @@ contract so automation can stop safely:
 | --- | --- | --- |
 | Fresh input | Invalid or missing vertical name | Use `<name> --vertical`, `--vertical=<name>`, or `--vertical-name <name>` |
 | Existing topology | Duplicate app ID, package suffix, path, Module Federation name, port, API prefix, or manifest key | Choose a new vertical name or repair the existing topology/local overlay first |
-| Workspace files | Missing or non-object compact UltraModern config, topology, ownership, or local overlay JSON | Restore the generated config files from source control or rerun from a valid workspace |
+| Workspace files | Missing or invalid topology, ownership, local overlay or app manifest | Repair the named authoritative file |
 | Tailwind prefix | Existing app already owns the generated CSS prefix | Rename the vertical before generation |
 | Output path | A generated path already exists | Treat it as an existing vertical and do not overwrite it |
 
-Package source is explicit and recorded in `.modernjs/ultramodern.json`.
+Package source is selected by the installed generator dependency and native pnpm catalog.
+Application manifests own package identity; the development overlay owns local ports.
 
 | Strategy | Use when | CLI |
 | --- | --- | --- |
 | `install` | Published BleedingDev package cohort or release proof | Default for the BleedingDev create package; optional `--ultramodern-package-version`, `--ultramodern-package-registry` (serves the cohort scope only; release-age metadata for every other dependency is validated against npmjs), `--ultramodern-package-scope`, and `--ultramodern-package-name-prefix` |
 | `workspace` | Local monorepo testing against unreleased packages | `--workspace` or `--ultramodern-package-source=workspace` |
 
-## Framework Cohort
-
-Generated strict Effect workspaces pin the compatible Effect cohort through
-`pnpm-workspace.yaml` overrides: `effect@4.0.0-rc.112`,
-`@effect/opentelemetry@4.0.0-rc.112`, and
-`@effect/vitest@4.0.0-rc.112` (requiring `vitest >=4.1.0 <5`). The strict
-24-hour release-age gate applies to the installed cohort; the current policy carries no Effect age exemption, and
-the override-only `@effect/vitest` entry is not an installed approval target.
-Separately, exact
-`trustPolicyExclude` entries for `effect` and `@effect/opentelemetry` cover the
-trusted-publisher to provenance transition. Trust exclusions are not
-release-age approvals. Do not override the cohort in app packages; update the
-framework cohort when the runtime moves.
-
-Use `--ultramodern-package-source=install` for published cohort proof and pin a
-specific release with `--ultramodern-package-version` when CI must prove an
-exact framework version. Keep `--workspace` only for local monorepo testing
-against unpublished packages. After install, run the generated
-`scripts/validate-ultramodern-workspace.mts` contract check and fix ownership
-conflicts in the owning JSON/config files instead of editing generated metadata
-by hand.
+## Framework dependencies
+
+Published framework versions live in `catalogs.ultramodern` in
+`pnpm-workspace.yaml`. Application manifests reference `catalog:ultramodern`;
+the lockfile records resolved packages. Corrected third-party dependencies ship
+as published packages. Applications do not install framework patches or carry
+a copied release manifest.
+
+Use `--ultramodern-package-source=install` for published package acceptance and
+`--ultramodern-package-version` to select an exact release. Use `--workspace`
+for local monorepo development. After installation, run `pnpm contract:check`,
+which invokes the installed CLI directly. The installed generator owns its
+release-integrity metadata.
+
+Normal installs retain the generated release-age and trust policy. Release
+acceptance uses exact, temporary exceptions for the artifacts being tested;
+it does not add permanent exception lists to the application.
 
 ## CodeSmith Adapter And Overlays
 
@@ -379,13 +376,12 @@ Each generated workspace app has:
 
 - `cloudflare:build`, `cloudflare:deploy`, `cloudflare:preview`, and
   `cloudflare:proof` scripts.
-- Cloudflare Worker deploy config from Modern config plus
-  `.modernjs/ultramodern.json`.
+- Cloudflare Worker deploy config emitted from native Modern config.
 - `zephyr:dependencies` for any consumed verticals.
 - `zephyr-rspack-plugin` wired through the generated Modern.js Rspack bridge.
 
 Deploy first, then pass each deployed app's generated public URL env key into
-the proof step. The proof script reads the compact UltraModern config and checks the
+the proof step. The installed proof command reads topology and deployment contracts and checks the
 Cloudflare Worker surface, including public-route sitemap/robots consistency,
 preview noindex behavior, unknown-route status, asset headers, byte budgets,
 and public sourcemap exposure. Shell-only workspaces only need the shell URL;
@@ -407,10 +403,10 @@ proven.
 
 | Symptom | Current check | Owner |
 | --- | --- | --- |
-| Package cohort mismatch | Regenerate with one package source strategy, run `mise install`, then rerun `pnpm install` from the activated shell. | Generated workspace package source metadata |
+| Package version mismatch | Align the native framework catalog and regenerate the lockfile with `pnpm install`. | Workspace dependency manifests |
 | Install failure | Check the active Node/pnpm from `mise install`; rerun `pnpm install` after the shell sees the pinned versions. | Toolchain setup |
 | Build failure | Run the matching primitive gate (`pnpm lint`, `pnpm typecheck`, `pnpm i18n:boundaries`, `pnpm contract:check`) before `pnpm build`; fix the owning failure first. | Owning package or generated contract |
-| Missing public URL | Set the app public URL env key recorded in `.modernjs/ultramodern.json`, for example `ULTRAMODERN_PUBLIC_URL_SHELL_SUPER_APP`. | Deployment operator |
+| Missing public URL | Set the app public URL env key declared in topology, for example `ULTRAMODERN_PUBLIC_URL_SHELL_SUPER_APP`. | Deployment operator |
 | Cloudflare credentials | Confirm Wrangler credentials before `pnpm cloudflare:deploy`; local checks do not prove live Worker access. | Deployment operator |
 | Asset or CSS 404 | Rebuild with `pnpm build` or `pnpm cloudflare:deploy` and inspect emitted Modern/Rspack asset paths instead of hardcoding CSS URLs. | Framework/runtime asset pipeline |
 | Federation manifest failure | Run the shell and vertical build scripts, then check each deployed `/mf-manifest.json` URL used by the shell. | Module Federation owner |

package/dist/cjs/ultramodern-release-cohort.cjs

@@ -37,14 +37,12 @@ var __webpack_require__ = {};
 var __webpack_exports__ = {};
 __webpack_require__.r(__webpack_exports__);
 __webpack_require__.d(__webpack_exports__, {
-    RELEASE_COHORT_PROJECTION_PATH: ()=>RELEASE_COHORT_PROJECTION_PATH,
+    RELEASE_COHORT_PATH: ()=>RELEASE_COHORT_PATH,
     assertReleaseCohortPackageSource: ()=>assertReleaseCohortPackageSource,
-    copyCreateReleaseCohort: ()=>copyCreateReleaseCohort,
     hasCreateReleaseCohort: ()=>hasCreateReleaseCohort,
     isCreatePackageSourceCheckout: ()=>isCreatePackageSourceCheckout,
     parseUltramodernReleaseCohort: ()=>parseUltramodernReleaseCohort,
     readCreateReleaseCohort: ()=>readCreateReleaseCohort,
-    readWorkspaceReleaseCohort: ()=>readWorkspaceReleaseCohort,
     releaseCohortSelectors: ()=>releaseCohortSelectors
 });
 const external_node_fs_namespaceObject = require("node:fs");
@@ -52,7 +50,7 @@ var external_node_fs_default = /*#__PURE__*/ __webpack_require__.n(external_node
 const external_node_path_namespaceObject = require("node:path");
 var external_node_path_default = /*#__PURE__*/ __webpack_require__.n(external_node_path_namespaceObject);
 const fs_io_cjs_namespaceObject = require("./ultramodern-workspace/fs-io.cjs");
-const RELEASE_COHORT_PROJECTION_PATH = '.modernjs/release-cohort.json';
+const RELEASE_COHORT_PATH = 'release-cohort.json';
 const RELEASE_COHORT_PROJECTION_SCHEMA = 'bleedingdev.ultramodern.release-cohort';
 const RELEASE_COHORT_PROJECTION_SCHEMA_VERSION = 1;
 function assert(condition, message) {
@@ -149,23 +147,14 @@ function readCohortFile(filePath) {
     return parseUltramodernReleaseCohort(value);
 }
 function readCreateReleaseCohort() {
-    return readCohortFile(external_node_path_default().join(fs_io_cjs_namespaceObject.createPackageRoot, 'template-workspace', RELEASE_COHORT_PROJECTION_PATH));
+    return readCohortFile(external_node_path_default().join(fs_io_cjs_namespaceObject.createPackageRoot, RELEASE_COHORT_PATH));
 }
 function hasCreateReleaseCohort() {
-    return external_node_fs_default().existsSync(external_node_path_default().join(fs_io_cjs_namespaceObject.createPackageRoot, 'template-workspace', RELEASE_COHORT_PROJECTION_PATH));
+    return external_node_fs_default().existsSync(external_node_path_default().join(fs_io_cjs_namespaceObject.createPackageRoot, RELEASE_COHORT_PATH));
 }
 function isCreatePackageSourceCheckout() {
     return external_node_fs_default().existsSync(external_node_path_default().join(fs_io_cjs_namespaceObject.createPackageRoot, 'src'));
 }
-function readWorkspaceReleaseCohort(workspaceRoot) {
-    return readCohortFile(external_node_path_default().join(workspaceRoot, RELEASE_COHORT_PROJECTION_PATH));
-}
-function copyCreateReleaseCohort(workspaceRoot) {
-    const sourcePath = external_node_path_default().join(fs_io_cjs_namespaceObject.createPackageRoot, 'template-workspace', RELEASE_COHORT_PROJECTION_PATH);
-    const cohort = readCohortFile(sourcePath);
-    (0, fs_io_cjs_namespaceObject.writeFile)(workspaceRoot, RELEASE_COHORT_PROJECTION_PATH, external_node_fs_default().readFileSync(sourcePath, 'utf8'));
-    return cohort;
-}
 function assertReleaseCohortPackageSource(cohort, packageSource) {
     if ('install' !== packageSource.strategy) return;
     assert(packageSource.modernPackageVersion === cohort.release.version, `Package source release ${packageSource.modernPackageVersion} does not match authenticated release cohort ${cohort.release.version}.`);
@@ -181,24 +170,20 @@ function assertReleaseCohortPackageSource(cohort, packageSource) {
 function releaseCohortSelectors(cohort) {
     return cohort.packages.map((item)=>`${item.targetName}@${item.version}`).sort();
 }
-exports.RELEASE_COHORT_PROJECTION_PATH = __webpack_exports__.RELEASE_COHORT_PROJECTION_PATH;
+exports.RELEASE_COHORT_PATH = __webpack_exports__.RELEASE_COHORT_PATH;
 exports.assertReleaseCohortPackageSource = __webpack_exports__.assertReleaseCohortPackageSource;
-exports.copyCreateReleaseCohort = __webpack_exports__.copyCreateReleaseCohort;
 exports.hasCreateReleaseCohort = __webpack_exports__.hasCreateReleaseCohort;
 exports.isCreatePackageSourceCheckout = __webpack_exports__.isCreatePackageSourceCheckout;
 exports.parseUltramodernReleaseCohort = __webpack_exports__.parseUltramodernReleaseCohort;
 exports.readCreateReleaseCohort = __webpack_exports__.readCreateReleaseCohort;
-exports.readWorkspaceReleaseCohort = __webpack_exports__.readWorkspaceReleaseCohort;
 exports.releaseCohortSelectors = __webpack_exports__.releaseCohortSelectors;
 for(var __rspack_i in __webpack_exports__)if (-1 === [
-    "RELEASE_COHORT_PROJECTION_PATH",
+    "RELEASE_COHORT_PATH",
     "assertReleaseCohortPackageSource",
-    "copyCreateReleaseCohort",
     "hasCreateReleaseCohort",
     "isCreatePackageSourceCheckout",
     "parseUltramodernReleaseCohort",
     "readCreateReleaseCohort",
-    "readWorkspaceReleaseCohort",
     "releaseCohortSelectors"
 ].indexOf(__rspack_i)) exports[__rspack_i] = __webpack_exports__[__rspack_i];
 Object.defineProperty(exports, '__esModule', {

package/dist/cjs/ultramodern-tooling/commands/cloudflare-output-verify.cjs

@@ -39,10 +39,10 @@ __webpack_require__.r(__webpack_exports__);
 __webpack_require__.d(__webpack_exports__, {
     runCloudflareOutputVerify: ()=>runCloudflareOutputVerify
 });
+const external_node_module_namespaceObject = require("node:module");
 const external_node_path_namespaceObject = require("node:path");
 var external_node_path_default = /*#__PURE__*/ __webpack_require__.n(external_node_path_namespaceObject);
 const external_config_cjs_namespaceObject = require("../config.cjs");
-const external_context_cjs_namespaceObject = require("./context.cjs");
 const external_options_cjs_namespaceObject = require("./options.cjs");
 const resolveCloudflareOutputVerifyTargets = (args, context)=>{
     const outputDirectory = (0, external_options_cjs_namespaceObject.readOption)(args, '--output');
@@ -60,51 +60,7 @@ const resolveCloudflareOutputVerifyTargets = (args, context)=>{
     if (0 === targets.length) throw new Error(`No generated UltraModern app matched ${appId}.`);
     return targets;
 };
-const renderCloudflareOutputVerifyModule = ({ workspaceRoot, targets, excludePaths })=>`
-import { createRequire } from 'node:module';
-import path from 'node:path';
-
-const workspaceRoot = ${JSON.stringify(workspaceRoot)};
-const targets = ${JSON.stringify(targets, null, 2)};
-const scanRoots = [workspaceRoot];
-const excludePaths = ${JSON.stringify(excludePaths)};
-const verifierRequire = createRequire(path.join(workspaceRoot, 'package.json'));
-const {
-  verifyCloudflareOutput,
-  verifyCloudflareOutputMutationPolicy,
-} = verifierRequire('@modern-js/app-tools-extensions/cloudflare-output-verifier');
-
-let failed = false;
-for (const target of targets) {
-  const result = await verifyCloudflareOutput({
-    outputDirectory: target.outputDirectory,
-    importWorker: true,
-  });
-  if (result.ok) {
-    console.log(\`[ultramodern] Cloudflare output verified: \${target.label}\`);
-  } else {
-    failed = true;
-    console.error(\`[ultramodern] Cloudflare output failed: \${target.label}\`);
-    for (const issue of result.issues) {
-      console.error(\`- \${issue.code}: \${issue.message}\${issue.path ? \` (\${issue.path})\` : ''}\`);
-    }
-  }
-}
-
-if (scanRoots.length > 0) {
-  const policyResult = await verifyCloudflareOutputMutationPolicy({ scanRoots, excludePaths });
-  if (!policyResult.ok) {
-    failed = true;
-    console.error('[ultramodern] generated-output mutation policy failed');
-    for (const issue of policyResult.issues) {
-      console.error(\`- \${issue.code}: \${issue.message}\${issue.path ? \` (\${issue.path})\` : ''}\`);
-    }
-  }
-}
-
-process.exit(failed ? 1 : 0);
-`;
-function runCloudflareOutputVerify(args, context) {
+async function runCloudflareOutputVerify(args, context) {
     if (args.includes('--help') || args.includes('-h')) {
         process.stdout.write(`Usage:
   ultramodern-create ultramodern cloudflare-output-verify [--app <id> | --output <dir>]
@@ -114,14 +70,34 @@ Without --app or --output, every generated workspace app is verified.
 `);
         return 0;
     }
-    const source = renderCloudflareOutputVerifyModule({
-        workspaceRoot: context.workspaceRoot,
-        targets: resolveCloudflareOutputVerifyTargets(args, context),
-        excludePaths: [
-            external_node_path_default().join(context.workspaceRoot, "scripts", 'validate-ultramodern-workspace.mts')
-        ]
+    const targets = resolveCloudflareOutputVerifyTargets(args, context);
+    const verifierRequire = (0, external_node_module_namespaceObject.createRequire)(external_node_path_default().join(context.workspaceRoot, 'package.json'));
+    const { verifyCloudflareOutput, verifyCloudflareOutputMutationPolicy } = verifierRequire('@modern-js/app-tools-extensions/cloudflare-output-verifier');
+    let failed = false;
+    for (const target of targets){
+        const result = await verifyCloudflareOutput({
+            outputDirectory: target.outputDirectory,
+            importWorker: true
+        });
+        if (result.ok) console.log(`[ultramodern] Cloudflare output verified: ${target.label}`);
+        else {
+            failed = true;
+            console.error(`[ultramodern] Cloudflare output failed: ${target.label}`);
+            for (const issue of result.issues)console.error(`- ${issue.code}: ${issue.message}${issue.path ? ` (${issue.path})` : ''}`);
+        }
+    }
+    const policyResult = await verifyCloudflareOutputMutationPolicy({
+        scanRoots: [
+            context.workspaceRoot
+        ],
+        excludePaths: []
     });
-    return (0, external_context_cjs_namespaceObject.runRenderedModule)(source, context);
+    if (!policyResult.ok) {
+        failed = true;
+        console.error('[ultramodern] generated-output mutation policy failed');
+        for (const issue of policyResult.issues)console.error(`- ${issue.code}: ${issue.message}${issue.path ? ` (${issue.path})` : ''}`);
+    }
+    return failed ? 1 : 0;
 }
 exports.runCloudflareOutputVerify = __webpack_exports__.runCloudflareOutputVerify;
 for(var __rspack_i in __webpack_exports__)if (-1 === [

package/dist/cjs/ultramodern-tooling/commands/context.cjs

@@ -43,15 +43,11 @@ __webpack_require__.d(__webpack_exports__, {
     AD_HOC_TOOLING_COMMANDS: ()=>AD_HOC_TOOLING_COMMANDS,
     createPackageRoot: ()=>createPackageRoot,
     printHelp: ()=>printHelp,
-    runRenderedModule: ()=>runRenderedModule,
     runTemplateBackedToolingCommand: ()=>runTemplateBackedToolingCommand,
     spawnNodeScript: ()=>spawnNodeScript
 });
 const external_node_child_process_namespaceObject = require("node:child_process");
-const external_node_fs_namespaceObject = require("node:fs");
-var external_node_fs_default = /*#__PURE__*/ __webpack_require__.n(external_node_fs_namespaceObject);
 const external_node_os_namespaceObject = require("node:os");
-var external_node_os_default = /*#__PURE__*/ __webpack_require__.n(external_node_os_namespaceObject);
 const external_node_path_namespaceObject = require("node:path");
 var external_node_path_default = /*#__PURE__*/ __webpack_require__.n(external_node_path_namespaceObject);
 const external_node_url_namespaceObject = require("node:url");
@@ -91,7 +87,7 @@ function spawnNodeScript(relativeScriptPath, args, context, options = {}) {
         stdio: 'inherit'
     });
     if (result.error) throw result.error;
-    return result.status ?? 1;
+    return result.status ?? (result.signal ? 128 + external_node_os_namespaceObject.constants.signals[result.signal] : 1);
 }
 function runTemplateBackedToolingCommand(command, args, context) {
     const toolingCommand = tooling_command_catalog_cjs_namespaceObject.generatedToolingCommands.find((candidate)=>candidate.command === command);
@@ -100,37 +96,15 @@ function runTemplateBackedToolingCommand(command, args, context) {
         cwd: 'invocation' === toolingCommand.cwd ? context.invocationCwd : context.workspaceRoot
     });
 }
-function runRenderedModule(source, context) {
-    const tempDir = external_node_fs_default().mkdtempSync(external_node_path_default().join(external_node_os_default().tmpdir(), 'ultramodern-tool-'));
-    const tempFile = external_node_path_default().join(tempDir, 'command.mjs');
-    try {
-        external_node_fs_default().writeFileSync(tempFile, source, 'utf-8');
-        const result = (0, external_node_child_process_namespaceObject.spawnSync)(process.execPath, [
-            tempFile
-        ], {
-            cwd: context.workspaceRoot,
-            stdio: 'inherit'
-        });
-        if (result.error) throw result.error;
-        return result.status ?? 1;
-    } finally{
-        external_node_fs_default().rmSync(tempDir, {
-            force: true,
-            recursive: true
-        });
-    }
-}
 exports.AD_HOC_TOOLING_COMMANDS = __webpack_exports__.AD_HOC_TOOLING_COMMANDS;
 exports.createPackageRoot = __webpack_exports__.createPackageRoot;
 exports.printHelp = __webpack_exports__.printHelp;
-exports.runRenderedModule = __webpack_exports__.runRenderedModule;
 exports.runTemplateBackedToolingCommand = __webpack_exports__.runTemplateBackedToolingCommand;
 exports.spawnNodeScript = __webpack_exports__.spawnNodeScript;
 for(var __rspack_i in __webpack_exports__)if (-1 === [
     "AD_HOC_TOOLING_COMMANDS",
     "createPackageRoot",
     "printHelp",
-    "runRenderedModule",
     "runTemplateBackedToolingCommand",
     "spawnNodeScript"
 ].indexOf(__rspack_i)) exports[__rspack_i] = __webpack_exports__[__rspack_i];

package/dist/cjs/ultramodern-tooling/commands/routes-generate-app.cjs

@@ -0,0 +1,60 @@
+"use strict";
+var __webpack_require__ = {};
+(()=>{
+    __webpack_require__.n = (module)=>{
+        var getter = module && module.__esModule ? ()=>module['default'] : ()=>module;
+        __webpack_require__.d(getter, {
+            a: getter
+        });
+        return getter;
+    };
+})();
+(()=>{
+    __webpack_require__.d = (exports1, getters, values)=>{
+        var define = (defs, kind)=>{
+            for(var key in defs)if (__webpack_require__.o(defs, key) && !__webpack_require__.o(exports1, key)) Object.defineProperty(exports1, key, {
+                enumerable: true,
+                [kind]: defs[key]
+            });
+        };
+        define(getters, "get");
+        define(values, "value");
+    };
+})();
+(()=>{
+    __webpack_require__.o = (obj, prop)=>Object.prototype.hasOwnProperty.call(obj, prop);
+})();
+var __webpack_exports__ = {};
+const external_node_module_namespaceObject = require("node:module");
+const external_node_path_namespaceObject = require("node:path");
+var external_node_path_default = /*#__PURE__*/ __webpack_require__.n(external_node_path_namespaceObject);
+const external_node_url_namespaceObject = require("node:url");
+async function main() {
+    const [appDirectory, label] = process.argv.slice(2);
+    try {
+        if (!appDirectory || !label) throw new Error('Route generation requires an app directory and label.');
+        const appRequire = (0, external_node_module_namespaceObject.createRequire)(external_node_path_default().join(appDirectory, 'package.json'));
+        const pluginUrl = (0, external_node_url_namespaceObject.pathToFileURL)(appRequire.resolve('@modern-js/plugin-tanstack')).href;
+        const { generateTanstackRouteArtifacts } = await import(pluginUrl);
+        await generateTanstackRouteArtifacts({
+            appDirectory
+        });
+        console.log(`[ultramodern] TanStack route artifacts generated: ${label}`);
+    } catch (error) {
+        process.exitCode = 1;
+        console.error(`[ultramodern] TanStack route generation failed: ${label}`);
+        let current = error;
+        let depth = 0;
+        while(current){
+            const detail = current instanceof Error ? current.stack ?? `${current.name}: ${current.message}` : String(current);
+            console.error(`${0 === depth ? '-' : '  caused by:'} ${detail}`);
+            current = current instanceof Error ? current.cause : void 0;
+            depth += 1;
+        }
+    }
+}
+main();
+for(var __rspack_i in __webpack_exports__)exports[__rspack_i] = __webpack_exports__[__rspack_i];
+Object.defineProperty(exports, '__esModule', {
+    value: true
+});

package/dist/cjs/ultramodern-tooling/commands/routes-generate.cjs

@@ -53,49 +53,6 @@ const resolveRoutesGenerateTargets = (args, context)=>{
     if (0 === targets.length) throw new Error(`No generated UltraModern app matched ${appId ?? '<any>'}.`);
     return targets;
 };
-const renderRoutesGenerateModule = ({ workspaceRoot, targets })=>`
-import { createRequire } from 'node:module';
-import path from 'node:path';
-import { pathToFileURL } from 'node:url';
-
-const workspaceRoot = ${JSON.stringify(workspaceRoot)};
-const targets = ${JSON.stringify(targets, null, 2)};
-const appRequire = createRequire(path.join(workspaceRoot, 'package.json'));
-const pluginUrl = pathToFileURL(
-  appRequire.resolve('@modern-js/plugin-tanstack'),
-).href;
-const { generateTanstackRouteArtifacts } = await import(pluginUrl);
-
-let failed = false;
-// Sequential — the app-tools cli singleton is not re-entrant.
-for (const target of targets) {
-  try {
-    await generateTanstackRouteArtifacts({ appDirectory: target.appDirectory });
-    console.log(\`[ultramodern] TanStack route artifacts generated: \${target.label}\`);
-  } catch (error) {
-    failed = true;
-    console.error(\`[ultramodern] TanStack route generation failed: \${target.label}\`);
-    // Print the full underlying failure, including the cause chain. The
-    // route-generate crash is often an opaque node error thrown deep inside
-    // app-tools/plugin (e.g. a path TypeError), so surfacing only
-    // \`error.message\` swallows the stack that points at the real culprit.
-    let current = error;
-    let depth = 0;
-    while (current) {
-      const label = depth === 0 ? '-' : '  caused by:';
-      const detail =
-        current instanceof Error
-          ? current.stack ?? \`\${current.name}: \${current.message}\`
-          : String(current);
-      console.error(\`\${label} \${detail}\`);
-      current = current instanceof Error ? current.cause : undefined;
-      depth += 1;
-    }
-  }
-}
-
-process.exit(failed ? 1 : 0);
-`;
 function runRoutesGenerate(args, context) {
     if (args.includes('--help') || args.includes('-h')) {
         process.stdout.write(`Usage:
@@ -107,11 +64,18 @@ generated workspace app is regenerated.
 `);
         return 0;
     }
-    const source = renderRoutesGenerateModule({
-        workspaceRoot: context.workspaceRoot,
-        targets: resolveRoutesGenerateTargets(args, context)
-    });
-    return (0, external_context_cjs_namespaceObject.runRenderedModule)(source, context);
+    const targets = resolveRoutesGenerateTargets(args, context);
+    let failed = false;
+    for (const target of targets){
+        const status = (0, external_context_cjs_namespaceObject.spawnNodeScript)('dist/esm-node/ultramodern-tooling/commands/routes-generate-app.js', [
+            target.appDirectory,
+            target.label
+        ], context, {
+            cwd: target.appDirectory
+        });
+        failed ||= 0 !== status;
+    }
+    return failed ? 1 : 0;
 }
 exports.runRoutesGenerate = __webpack_exports__.runRoutesGenerate;
 for(var __rspack_i in __webpack_exports__)if (-1 === [

package/dist/cjs/ultramodern-tooling/commands/validate.cjs

@@ -1,14 +1,5 @@
 "use strict";
 var __webpack_require__ = {};
-(()=>{
-    __webpack_require__.n = (module)=>{
-        var getter = module && module.__esModule ? ()=>module['default'] : ()=>module;
-        __webpack_require__.d(getter, {
-            a: getter
-        });
-        return getter;
-    };
-})();
 (()=>{
     __webpack_require__.d = (exports1, getters, values)=>{
         var define = (defs, kind)=>{
@@ -39,57 +30,13 @@ __webpack_require__.r(__webpack_exports__);
 __webpack_require__.d(__webpack_exports__, {
     runValidate: ()=>runValidate
 });
-const external_node_path_namespaceObject = require("node:path");
-var external_node_path_default = /*#__PURE__*/ __webpack_require__.n(external_node_path_namespaceObject);
-const external_ultramodern_release_cohort_cjs_namespaceObject = require("../../ultramodern-release-cohort.cjs");
-const cohort_parity_cjs_namespaceObject = require("../../ultramodern-workspace/cohort-parity.cjs");
-const contracts_cjs_namespaceObject = require("../../ultramodern-workspace/contracts.cjs");
-const descriptors_cjs_namespaceObject = require("../../ultramodern-workspace/descriptors.cjs");
-const patch_parity_cjs_namespaceObject = require("../../ultramodern-workspace/patch-parity.cjs");
-const workspace_scripts_cjs_namespaceObject = require("../../ultramodern-workspace/workspace-scripts.cjs");
+const workspace_cjs_namespaceObject = require("../../ultramodern-workspace/validation/workspace.cjs");
+const workspace_validation_contract_cjs_namespaceObject = require("../../ultramodern-workspace/workspace-validation-contract.cjs");
 const external_config_cjs_namespaceObject = require("../config.cjs");
-const external_context_cjs_namespaceObject = require("./context.cjs");
 function runValidate(context) {
-    const patchProblems = (0, patch_parity_cjs_namespaceObject.checkPatchParity)({
-        workspaceRoot: context.workspaceRoot,
-        createPackageRoot: external_context_cjs_namespaceObject.createPackageRoot
-    });
-    if (patchProblems.length > 0) {
-        process.stderr.write(`${(0, patch_parity_cjs_namespaceObject.formatPatchParityReport)(patchProblems)}\n`);
-        return 1;
-    }
-    const workspace = (0, external_config_cjs_namespaceObject.readUltramodernWorkspaceInputs)(context.workspaceRoot, {
-        overlay: (0, external_config_cjs_namespaceObject.readJsonObject)(external_node_path_default().join(context.workspaceRoot, 'topology/local-overlays/development.json'))
-    });
-    const { config, verticals: remotes, primaryShell, additionalShells } = workspace;
-    const compactApps = (0, external_config_cjs_namespaceObject.workspaceAppsFromToolingConfig)(config, context.workspaceRoot);
-    const compactPrimaryShell = compactApps.find((app)=>'shell' === app.kind) ?? (0, descriptors_cjs_namespaceObject.createShellHost)(remotes);
-    const compactConfig = (0, contracts_cjs_namespaceObject.createUltramodernConfig)(config.workspace.packageScope, 'workspace-validation-contract', {
-        strategy: 'workspace',
-        modernPackageVersion: 'workspace:*'
-    }, compactApps, config.features.tailwind, void 0, additionalShells, compactPrimaryShell, remotes);
-    const declaredCompact = (0, external_config_cjs_namespaceObject.readJsonObject)(config.sourcePath);
-    const compactTopology = compactConfig.topology;
-    for (const app of compactTopology.apps){
-        const declared = declaredCompact.topology?.apps?.find((entry)=>entry.id === app.id)?.deploy?.cloudflare;
-        for (const key of [
-            'routes',
-            'distributedSsrProofRoutes',
-            'jsonSmokeChecks'
-        ])if (declared && Object.hasOwn(declared, key)) app.deploy.cloudflare[key] = declared[key];
-    }
-    const cohortProblem = (0, cohort_parity_cjs_namespaceObject.checkReleaseCohortParity)({
-        workspaceRoot: context.workspaceRoot,
-        createPackageRoot: external_context_cjs_namespaceObject.createPackageRoot,
-        requireTemplate: config.packageSource?.strategy === 'install'
-    });
-    if (cohortProblem) {
-        process.stderr.write(`${(0, cohort_parity_cjs_namespaceObject.formatReleaseCohortParityReport)(cohortProblem)}\n`);
-        return 1;
-    }
-    const releaseCohort = config.packageSource?.strategy === 'install' ? (0, external_ultramodern_release_cohort_cjs_namespaceObject.readWorkspaceReleaseCohort)(context.workspaceRoot) : void 0;
-    const source = (0, workspace_scripts_cjs_namespaceObject.createPackagedWorkspaceValidationScript)(config.workspace.packageScope, config.features.tailwind, remotes, releaseCohort, additionalShells, primaryShell, compactConfig, (0, external_config_cjs_namespaceObject.readJsonObject)(external_node_path_default().join(context.workspaceRoot, 'topology/ownership.json')), void 0, context.workspaceRoot);
-    return (0, external_context_cjs_namespaceObject.runRenderedModule)(source, context);
+    const { config, raw, verticals, primaryShell, additionalShells } = (0, external_config_cjs_namespaceObject.readUltramodernWorkspaceInputs)(context.workspaceRoot);
+    (0, workspace_cjs_namespaceObject.validateWorkspace)(context.workspaceRoot, (0, workspace_validation_contract_cjs_namespaceObject.createWorkspaceValidationContract)(config.workspace.packageScope, config.features.tailwind, raw.topology.sharedPackages, verticals, additionalShells, primaryShell));
+    return 0;
 }
 exports.runValidate = __webpack_exports__.runValidate;
 for(var __rspack_i in __webpack_exports__)if (-1 === [

package/dist/cjs/ultramodern-tooling/commands.cjs

@@ -39,6 +39,8 @@ __webpack_require__.r(__webpack_exports__);
 __webpack_require__.d(__webpack_exports__, {
     runUltramodernToolingCli: ()=>runUltramodernToolingCli
 });
+const external_node_fs_namespaceObject = require("node:fs");
+var external_node_fs_default = /*#__PURE__*/ __webpack_require__.n(external_node_fs_namespaceObject);
 const external_node_path_namespaceObject = require("node:path");
 var external_node_path_default = /*#__PURE__*/ __webpack_require__.n(external_node_path_namespaceObject);
 const tooling_command_catalog_cjs_namespaceObject = require("../ultramodern-workspace/tooling-command-catalog.cjs");
@@ -52,8 +54,16 @@ const validate_cjs_namespaceObject = require("./commands/validate.cjs");
 async function runUltramodernToolingCli(args, workspaceRoot = process.env.ULTRAMODERN_WORKSPACE_ROOT ?? process.cwd()) {
     try {
         const [command, ...rest] = args;
+        let discoveredRoot = external_node_path_default().resolve(workspaceRoot);
+        for(let candidate = discoveredRoot;; candidate = external_node_path_default().dirname(candidate)){
+            if (external_node_fs_default().existsSync(external_node_path_default().join(candidate, 'topology/reference-topology.json'))) {
+                discoveredRoot = candidate;
+                break;
+            }
+            if (external_node_path_default().dirname(candidate) === candidate) break;
+        }
         const context = {
-            workspaceRoot: external_node_path_default().resolve(workspaceRoot),
+            workspaceRoot: discoveredRoot,
             invocationCwd: process.cwd()
         };
         switch(command){
@@ -67,9 +77,9 @@ async function runUltramodernToolingCli(args, workspaceRoot = process.env.ULTRAM
             case tooling_command_catalog_cjs_namespaceObject.GENERATED_TOOLING_COMMANDS.mfTypes.command:
                 return (0, mf_types_cjs_namespaceObject.runMfTypes)(rest, context);
             case tooling_command_catalog_cjs_namespaceObject.GENERATED_TOOLING_COMMANDS.cloudflareOutputVerify.command:
-                return (0, cloudflare_output_verify_cjs_namespaceObject.runCloudflareOutputVerify)(rest, context);
+                return await (0, cloudflare_output_verify_cjs_namespaceObject.runCloudflareOutputVerify)(rest, context);
             case tooling_command_catalog_cjs_namespaceObject.GENERATED_TOOLING_COMMANDS.routesGenerate.command:
-                return (0, routes_generate_cjs_namespaceObject.runRoutesGenerate)(rest, context);
+                return await (0, routes_generate_cjs_namespaceObject.runRoutesGenerate)(rest, context);
             case context_cjs_namespaceObject.AD_HOC_TOOLING_COMMANDS.syncDeliveryUnit:
                 return (0, sync_delivery_unit_cjs_namespaceObject.runSyncDeliveryUnit)(rest, context);
             case context_cjs_namespaceObject.AD_HOC_TOOLING_COMMANDS.skills: