@bleedingdev/modern-js-ultramodern-create 3.9.0-ultramodern.2 → 3.9.0-ultramodern.21

package/README.md

@@ -36,8 +36,8 @@ domains to delete. It generates:
 - `verticals/*` empty until a real domain is added with `--vertical`.
 - `packages/shared-*` placeholders for shared contracts, tokens, and Effect
 API support.
-- `.modernjs/ultramodern.json` as compact generator provenance, package-source
-  config, app topology, bridge, deploy, Module Federation, and tooling config.
+- `catalogs.ultramodern` in `pnpm-workspace.yaml` for published framework
+  dependency versions, referenced by application manifests.
 - `topology/*` as app-owned topology, ownership, and local development overlay
   JSON.
 
@@ -51,15 +51,15 @@ pnpm check
 pnpm build
 ```
 
-The generated toolchain pins Node `26.7.0`, pnpm `11.24.0`, and
-`@types/node@^26.4.1`; its engine baseline remains Node `>=26` with pnpm `11+`.
+The generated toolchain pins Node `26.7.0`, pnpm `11.27.1`, and
+`@types/node@^26.6.2`; its engine baseline remains Node `>=26` with pnpm `11+`.
 `packageManager`, `.mise.toml`, generated validation, and CI should all agree
 on those values; do not reintroduce Corepack or older pnpm aliases.
 
-The current generated dependency cohort also pins `@effect/tsgo@0.41.0`,
-`@tanstack/react-router@1.170.33`, `@tanstack/router-core@1.171.28`,
-`@tanstack/history@1.162.2`, and the Module Federation integration `2.9.0`
-cohort, `@module-federation/node@2.7.50`. Move these only through the
+The current generated dependency cohort also pins `@effect/tsgo@0.45.0`,
+`@tanstack/react-router@1.170.39`, `@tanstack/router-core@1.171.32`,
+`@tanstack/history@1.162.4`, and the Module Federation integration `2.9.2`
+cohort, `@module-federation/node@2.7.52`. Move these only through the
 generator-owned version policy so templates, validation, and the published
 workspace contract stay aligned.
 
@@ -169,72 +169,41 @@ contract so automation can stop safely:
 | --- | --- | --- |
 | Fresh input | Invalid or missing vertical name | Use `<name> --vertical`, `--vertical=<name>`, or `--vertical-name <name>` |
 | Existing topology | Duplicate app ID, package suffix, path, Module Federation name, port, API prefix, or manifest key | Choose a new vertical name or repair the existing topology/local overlay first |
-| Workspace files | Missing or non-object compact UltraModern config, topology, ownership, or local overlay JSON | Restore the generated config files from source control or rerun from a valid workspace |
+| Workspace files | Missing or invalid topology, ownership, local overlay or app manifest | Repair the named authoritative file |
 | Tailwind prefix | Existing app already owns the generated CSS prefix | Rename the vertical before generation |
 | Output path | A generated path already exists | Treat it as an existing vertical and do not overwrite it |
 
-Package source is explicit and recorded in `.modernjs/ultramodern.json`.
+Package source is selected by the installed generator dependency and native pnpm catalog.
+Application manifests own package identity; the development overlay owns local ports.
 
 | Strategy | Use when | CLI |
 | --- | --- | --- |
 | `install` | Published BleedingDev package cohort or release proof | Default for the BleedingDev create package; optional `--ultramodern-package-version`, `--ultramodern-package-registry` (serves the cohort scope only; release-age metadata for every other dependency is validated against npmjs), `--ultramodern-package-scope`, and `--ultramodern-package-name-prefix` |
 | `workspace` | Local monorepo testing against unreleased packages | `--workspace` or `--ultramodern-package-source=workspace` |
 
-## Migrating Older Workspaces
-
-Older generated repos should move by adopting one published BleedingDev cohort
-at a time. Start with a dry-run vertical addition so validation reports
-topology, ownership, package-source, overlay, Tailwind prefix, Module Federation,
-and compact UltraModern config conflicts before files are written:
-
-```bash
-pnpm dlx @bleedingdev/modern-js-ultramodern-create@latest catalog --vertical --dry-run
-pnpm dlx @bleedingdev/modern-js-ultramodern-create@latest catalog --vertical
-mise install
-mise exec -- pnpm install
-mise exec -- pnpm check
-mise exec -- pnpm build
-```
-
-For strict Effect API migrations, update generated package metadata and Modern
-package aliases through the framework command before hand-editing app code:
-
-```bash
-pnpm dlx @bleedingdev/modern-js-ultramodern-create@3.5.0-ultramodern.10 ultramodern \
-  migrate-strict-effect --version 3.5.0-ultramodern.10
-pnpm api:check
-pnpm contract:check
-pnpm check
-pnpm build
-```
-
-The command updates `.modernjs/ultramodern.json`, root `modernjs.packageSource`,
-generated Modern package aliases, framework-owned toolchain pins, old direct
-topology metadata, strict Effect pnpm overrides/trust policy, and the pnpm
-lockfile. It does not invent compatibility shims or move business code behind
-your back. If `pnpm api:check` still fails, migrate the source to
-`shared/api.ts`, `api/index.ts`, and `src/api/*-client.ts` and delete
-`api/effect`, `api/lambda`, `shared/effect`, and `src/effect` paths.
-
-Generated strict Effect workspaces pin the compatible Effect cohort through
-`pnpm-workspace.yaml` overrides: `effect@4.0.0-rc.112`,
-`@effect/opentelemetry@4.0.0-rc.112`, and
-`@effect/vitest@4.0.0-rc.112` (requiring `vitest >=4.1.0 <5`). The strict
-24-hour release-age gate applies to the installed cohort; the current policy carries no Effect age exemption, and
-the override-only `@effect/vitest` entry is not an installed approval target.
-Separately, exact
-`trustPolicyExclude` entries for `effect` and `@effect/opentelemetry` cover the
-trusted-publisher to provenance transition. Trust exclusions are not
-release-age approvals. Do not override the cohort in app packages; update the
-framework cohort when the runtime moves.
-
-Use `--ultramodern-package-source=install` for published cohort proof and pin a
-specific release with `--ultramodern-package-version` when CI must prove an
-exact framework version. Keep `--workspace` only for local monorepo testing
-against unpublished packages. After install, run the generated
-`scripts/validate-ultramodern-workspace.mts` contract check and fix ownership
-conflicts in the owning JSON/config files instead of editing generated metadata
-by hand.
+## Framework dependencies
+
+Published framework versions live in `catalogs.ultramodern` in
+`pnpm-workspace.yaml`. Application manifests reference `catalog:ultramodern`;
+the lockfile records resolved packages. Corrected third-party dependencies ship
+as published packages. Applications do not install framework patches or carry
+a copied release manifest.
+
+Use `--ultramodern-package-source=install` for published package acceptance and
+`--ultramodern-package-version` to select an exact release. Use `--workspace`
+for local monorepo development. After installation, run `pnpm contract:check`,
+which invokes the installed CLI directly. The installed generator owns its
+release-integrity metadata.
+
+Normal installs retain the generated strict 24-hour release-age and trust
+policy. The one exception is `minimumReleaseAgeExclude`: it lists the exact
+`package@version` of every package in the cohort the create package ships, so a
+workspace created on the day that cohort is published can install it. Every
+other dependency still waits 24 hours, including a cohort selected with
+`--ultramodern-package-version` that differs from the create package's own; to
+install a fresh cohort on publish day, run that release's create package.
+Release acceptance adds exact, temporary exceptions for the sidecars under test
+on the command line.
 
 ## CodeSmith Adapter And Overlays
 
@@ -337,10 +306,11 @@ Federation manifests and vertical APIs through generated Effect clients
 exported by the vertical packages.
 
 Route metadata is route-owned and colocated in
-`src/routes/**/route.meta.ts`. The scaffold regenerates
-`src/routes/ultramodern-route-metadata.ts` as a generated route manifest for
-Modern.js config, i18n, public head, and public surface contracts; authors
-should not hand-maintain it. Locale JSON is served from
+`src/routes/**/route.meta.ts`; each file exports `routeMeta`.
+`ultramodern-create ultramodern routes-generate` (run before every app `dev`
+and `build`) regenerates `src/routes/ultramodern-route-metadata.ts` as a
+formatted route manifest for Modern.js config, i18n, public head, and public
+surface contracts; authors should not hand-maintain it. Locale JSON is served from
 `/locales/{{lng}}/{{ns}}.json`; Czech and English routes are generated from the
 route owner, not from shell rewrites.
 
@@ -413,13 +383,12 @@ Each generated workspace app has:
 
 - `cloudflare:build`, `cloudflare:deploy`, `cloudflare:preview`, and
   `cloudflare:proof` scripts.
-- Cloudflare Worker deploy config from Modern config plus
-  `.modernjs/ultramodern.json`.
+- Cloudflare Worker deploy config emitted from native Modern config.
 - `zephyr:dependencies` for any consumed verticals.
 - `zephyr-rspack-plugin` wired through the generated Modern.js Rspack bridge.
 
 Deploy first, then pass each deployed app's generated public URL env key into
-the proof step. The proof script reads the compact UltraModern config and checks the
+the proof step. The installed proof command reads topology and deployment contracts and checks the
 Cloudflare Worker surface, including public-route sitemap/robots consistency,
 preview noindex behavior, unknown-route status, asset headers, byte budgets,
 and public sourcemap exposure. Shell-only workspaces only need the shell URL;
@@ -441,10 +410,10 @@ proven.
 
 | Symptom | Current check | Owner |
 | --- | --- | --- |
-| Package cohort mismatch | Regenerate with one package source strategy, run `mise install`, then rerun `pnpm install` from the activated shell. | Generated workspace package source metadata |
+| Package version mismatch | Align the native framework catalog and regenerate the lockfile with `pnpm install`. | Workspace dependency manifests |
 | Install failure | Check the active Node/pnpm from `mise install`; rerun `pnpm install` after the shell sees the pinned versions. | Toolchain setup |
 | Build failure | Run the matching primitive gate (`pnpm lint`, `pnpm typecheck`, `pnpm i18n:boundaries`, `pnpm contract:check`) before `pnpm build`; fix the owning failure first. | Owning package or generated contract |
-| Missing public URL | Set the app public URL env key recorded in `.modernjs/ultramodern.json`, for example `ULTRAMODERN_PUBLIC_URL_SHELL_SUPER_APP`. | Deployment operator |
+| Missing public URL | Set the app public URL env key declared in topology, for example `ULTRAMODERN_PUBLIC_URL_SHELL_SUPER_APP`. | Deployment operator |
 | Cloudflare credentials | Confirm Wrangler credentials before `pnpm cloudflare:deploy`; local checks do not prove live Worker access. | Deployment operator |
 | Asset or CSS 404 | Rebuild with `pnpm build` or `pnpm cloudflare:deploy` and inspect emitted Modern/Rspack asset paths instead of hardcoding CSS URLs. | Framework/runtime asset pipeline |
 | Federation manifest failure | Run the shell and vertical build scripts, then check each deployed `/mf-manifest.json` URL used by the shell. | Module Federation owner |

package/dist/cjs/cli/package-source.cjs

@@ -65,7 +65,7 @@ function readCreatePackageJson() {
     return JSON.parse(external_node_fs_default().readFileSync(createPackageJson, 'utf-8'));
 }
 function isBleedingDevCreatePackage(createPackage) {
-    return createPackage.name === external_ultramodern_package_source_cjs_namespaceObject.BLEEDINGDEV_CREATE_PACKAGE || createPackage.name === external_ultramodern_package_source_cjs_namespaceObject.LEGACY_BLEEDINGDEV_CREATE_PACKAGE;
+    return createPackage.name === external_ultramodern_package_source_cjs_namespaceObject.BLEEDINGDEV_CREATE_PACKAGE;
 }
 function getBleedingDevFrameworkVersion(createPackage, fallbackVersion) {
     const frameworkVersion = createPackage.ultramodern?.frameworkVersion;
@@ -106,7 +106,7 @@ function hasExplicitUltramodernPackageSource(args, value) {
     return value ? configuredValue === value : void 0 !== configuredValue;
 }
 function readBleedingDevFrameworkVersionFromRegistry(fallbackVersion) {
-    const envVersion = (process.env[external_ultramodern_package_source_cjs_namespaceObject.ULTRAMODERN_FRAMEWORK_VERSION_ENV] ?? process.env[external_ultramodern_package_source_cjs_namespaceObject.BLEEDINGDEV_FRAMEWORK_VERSION_ENV])?.trim();
+    const envVersion = process.env[external_ultramodern_package_source_cjs_namespaceObject.ULTRAMODERN_FRAMEWORK_VERSION_ENV]?.trim();
     if (envVersion) {
         if (!semverPattern.test(envVersion)) {
             console.error(`${external_ultramodern_package_source_cjs_namespaceObject.ULTRAMODERN_FRAMEWORK_VERSION_ENV} must be a valid semver version`);

package/dist/cjs/cli/project-setup.cjs

@@ -87,7 +87,7 @@ function isInsideGitWorkTree(targetDir) {
 }
 function initializeGeneratedGitRepository(targetDir) {
     assertGitAvailableForGeneratedProject();
-    if (isInsideGitWorkTree(targetDir)) return;
+    if (isInsideGitWorkTree(targetDir)) return false;
     try {
         runSetupCommand('git', [
             'init',
@@ -113,27 +113,7 @@ function initializeGeneratedGitRepository(targetDir) {
             stdio: 'inherit'
         });
     }
-    runSetupCommand('git', [
-        'add',
-        '-A'
-    ], {
-        cwd: targetDir,
-        stdio: 'inherit'
-    });
-    runSetupCommand('git', [
-        '-c',
-        'user.name=UltraModern',
-        '-c',
-        'user.email=ultramodern@bleedingdev.dev',
-        '-c',
-        'commit.gpgsign=false',
-        'commit',
-        '-m',
-        'chore: initial UltraModern scaffold'
-    ], {
-        cwd: targetDir,
-        stdio: 'inherit'
-    });
+    return true;
 }
 function isDirectoryEmpty(dirPath) {
     if (!external_node_fs_default().existsSync(dirPath)) return false;

package/dist/cjs/index.cjs

@@ -42,6 +42,7 @@ const prompts_cjs_namespaceObject = require("./cli/prompts.cjs");
 const index_cjs_namespaceObject = require("./locale/index.cjs");
 const commands_cjs_namespaceObject = require("./ultramodern-tooling/commands.cjs");
 const external_ultramodern_workspace_index_cjs_namespaceObject = require("./ultramodern-workspace/index.cjs");
+const transaction_cjs_namespaceObject = require("./ultramodern-workspace/add-vertical/transaction.cjs");
 const bridge_config_cjs_namespaceObject = require("./ultramodern-workspace/bridge-config.cjs");
 const src_dirname = external_node_path_default().dirname((0, external_node_url_namespaceObject.fileURLToPath)(__rslib_import_meta_url__));
 const templateDir = [
@@ -122,9 +123,11 @@ async function main() {
         console.log(`${dim}   pnpm check${reset}\n`);
         return;
     }
+    if (0 === (0, flags_cjs_namespaceObject.collectPositionalArgs)(args).length) (0, transaction_cjs_namespaceObject.recoverFreshWorkspaceTransactions)(process.cwd());
     const { name: projectName, useCurrentDir } = await (0, prompts_cjs_namespaceObject.getProjectName)();
     const targetDir = useCurrentDir ? process.cwd() : external_node_path_default().isAbsolute(projectName) ? projectName : external_node_path_default().resolve(process.cwd(), projectName);
     const generatedPackageName = useCurrentDir || external_node_path_default().isAbsolute(projectName) ? external_node_path_default().basename(targetDir) : projectName;
+    (0, transaction_cjs_namespaceObject.recoverFreshWorkspaceTransactions)(targetDir);
     if (external_node_fs_default().existsSync(targetDir)) {
         const files = external_node_fs_default().readdirSync(targetDir);
         if (files.length > 0) {
@@ -146,7 +149,7 @@ async function main() {
         packageSource,
         generateAgentFiles
     });
-    (0, project_setup_cjs_namespaceObject.initializeGeneratedGitRepository)(targetDir);
+    const initializedGitRepository = (0, project_setup_cjs_namespaceObject.initializeGeneratedGitRepository)(targetDir);
     const dim = '\x1b[2m\x1b[3m';
     const reset = '\x1b[0m';
     console.log(`${index_cjs_namespaceObject.i18n.t(index_cjs_namespaceObject.localeKeys.message.success)}\n`);
@@ -157,6 +160,11 @@ async function main() {
     })}${reset}`);
     console.log(`${dim}   ${index_cjs_namespaceObject.i18n.t(index_cjs_namespaceObject.localeKeys.message.step2)}${reset}`);
     console.log(`${dim}   pnpm check${reset}`);
+    if (initializedGitRepository) {
+        console.log(index_cjs_namespaceObject.i18n.t(index_cjs_namespaceObject.localeKeys.message.initialCommit));
+        console.log(`${dim}   git add .${reset}`);
+        console.log(`${dim}   git commit -m "chore: initial UltraModern scaffold"${reset}`);
+    }
     console.log(`${dim}   ${index_cjs_namespaceObject.i18n.t(index_cjs_namespaceObject.localeKeys.message.step3)}${reset}\n`);
 }
 main().catch((error)=>{

package/dist/cjs/locale/en.cjs

@@ -46,7 +46,8 @@ const EN_LOCALE = {
         nextSteps: '📋 Next steps:',
         step1: 'cd {projectName}',
         step2: 'pnpm install',
-        step3: 'pnpm dev'
+        step3: 'pnpm dev',
+        initialCommit: 'Commit the checked scaffold before starting development or CI builds. Git uses your configured identity and hooks.'
     },
     agentsCmd: {
         created: '✔ Created {file}',

package/dist/cjs/locale/zh.cjs

@@ -46,7 +46,8 @@ const ZH_LOCALE = {
         nextSteps: '📋 下一步：',
         step1: 'cd {projectName}',
         step2: 'pnpm install',
-        step3: 'pnpm dev'
+        step3: 'pnpm dev',
+        initialCommit: '启动开发或 CI 构建前，请提交已检查的项目。Git 将使用你配置的身份和钩子。'
     },
     agentsCmd: {
         created: '✔ 已创建 {file}',

package/dist/cjs/ultramodern-package-source.cjs

@@ -30,11 +30,9 @@ __webpack_require__.r(__webpack_exports__);
 const WORKSPACE_PACKAGE_VERSION = 'workspace:*';
 const ULTRAMODERN_CREATE_PACKAGE = '@modern-js/ultramodern-create';
 const BLEEDINGDEV_CREATE_PACKAGE = '@bleedingdev/modern-js-ultramodern-create';
-const LEGACY_BLEEDINGDEV_CREATE_PACKAGE = '@bleedingdev/modern-js-create';
 const BLEEDINGDEV_PACKAGE_SCOPE = 'bleedingdev';
 const BLEEDINGDEV_PACKAGE_NAME_PREFIX = 'modern-js-';
 const ULTRAMODERN_FRAMEWORK_VERSION_ENV = 'ULTRAMODERN_CREATE_FRAMEWORK_VERSION';
-const BLEEDINGDEV_FRAMEWORK_VERSION_ENV = 'MODERN_CREATE_ULTRAMODERN_FRAMEWORK_VERSION';
 const ULTRAMODERN_SINGLE_APP_MODERN_PACKAGES = [
     ULTRAMODERN_CREATE_PACKAGE,
     '@modern-js/code-tools',
@@ -44,16 +42,28 @@ const ULTRAMODERN_SINGLE_APP_MODERN_PACKAGES = [
     '@modern-js/plugin-i18n',
     '@modern-js/plugin-tanstack',
     '@modern-js/plugin-bff',
+    '@modern-js/plugin-bff-build-extensions',
+    '@modern-js/plugin-bff-extensions',
     '@modern-js/adapter-rstest'
 ];
 const ULTRAMODERN_WORKSPACE_MODERN_PACKAGES = [
+    '@modern-js/bff-effect',
+    '@modern-js/boundary-debugger',
     ULTRAMODERN_CREATE_PACKAGE,
     '@modern-js/code-tools',
     '@modern-js/app-tools',
     '@modern-js/plugin-bff',
+    '@modern-js/plugin-bff-build-extensions',
+    '@modern-js/plugin-bff-extensions',
     '@modern-js/plugin-i18n',
+    '@modern-js/i18n-integration',
     '@modern-js/plugin-tanstack',
-    '@modern-js/runtime'
+    '@modern-js/runtime',
+    '@modern-js/runtime-extensions',
+    '@modern-js/runtime-renderer-extensions',
+    '@modern-js/federation-runtime',
+    '@modern-js/app-tools-extensions',
+    '@modern-js/ultramodern-app-tools'
 ];
 function modernPackageVersion(packageSource) {
     return 'install' === packageSource.strategy ? packageSource.modernPackageVersion : WORKSPACE_PACKAGE_VERSION;
@@ -74,10 +84,8 @@ __webpack_require__.d(__webpack_exports__, {
     modernPackageVersion: ()=>modernPackageVersion
 }, {
     BLEEDINGDEV_CREATE_PACKAGE: BLEEDINGDEV_CREATE_PACKAGE,
-    BLEEDINGDEV_FRAMEWORK_VERSION_ENV: BLEEDINGDEV_FRAMEWORK_VERSION_ENV,
     BLEEDINGDEV_PACKAGE_NAME_PREFIX: BLEEDINGDEV_PACKAGE_NAME_PREFIX,
     BLEEDINGDEV_PACKAGE_SCOPE: BLEEDINGDEV_PACKAGE_SCOPE,
-    LEGACY_BLEEDINGDEV_CREATE_PACKAGE: LEGACY_BLEEDINGDEV_CREATE_PACKAGE,
     ULTRAMODERN_CREATE_PACKAGE: ULTRAMODERN_CREATE_PACKAGE,
     ULTRAMODERN_FRAMEWORK_VERSION_ENV: ULTRAMODERN_FRAMEWORK_VERSION_ENV,
     ULTRAMODERN_SINGLE_APP_MODERN_PACKAGES: ULTRAMODERN_SINGLE_APP_MODERN_PACKAGES,
@@ -85,10 +93,8 @@ __webpack_require__.d(__webpack_exports__, {
     WORKSPACE_PACKAGE_VERSION: WORKSPACE_PACKAGE_VERSION
 });
 exports.BLEEDINGDEV_CREATE_PACKAGE = __webpack_exports__.BLEEDINGDEV_CREATE_PACKAGE;
-exports.BLEEDINGDEV_FRAMEWORK_VERSION_ENV = __webpack_exports__.BLEEDINGDEV_FRAMEWORK_VERSION_ENV;
 exports.BLEEDINGDEV_PACKAGE_NAME_PREFIX = __webpack_exports__.BLEEDINGDEV_PACKAGE_NAME_PREFIX;
 exports.BLEEDINGDEV_PACKAGE_SCOPE = __webpack_exports__.BLEEDINGDEV_PACKAGE_SCOPE;
-exports.LEGACY_BLEEDINGDEV_CREATE_PACKAGE = __webpack_exports__.LEGACY_BLEEDINGDEV_CREATE_PACKAGE;
 exports.ULTRAMODERN_CREATE_PACKAGE = __webpack_exports__.ULTRAMODERN_CREATE_PACKAGE;
 exports.ULTRAMODERN_FRAMEWORK_VERSION_ENV = __webpack_exports__.ULTRAMODERN_FRAMEWORK_VERSION_ENV;
 exports.ULTRAMODERN_SINGLE_APP_MODERN_PACKAGES = __webpack_exports__.ULTRAMODERN_SINGLE_APP_MODERN_PACKAGES;
@@ -98,10 +104,8 @@ exports.modernPackageSpecifier = __webpack_exports__.modernPackageSpecifier;
 exports.modernPackageVersion = __webpack_exports__.modernPackageVersion;
 for(var __rspack_i in __webpack_exports__)if (-1 === [
     "BLEEDINGDEV_CREATE_PACKAGE",
-    "BLEEDINGDEV_FRAMEWORK_VERSION_ENV",
     "BLEEDINGDEV_PACKAGE_NAME_PREFIX",
     "BLEEDINGDEV_PACKAGE_SCOPE",
-    "LEGACY_BLEEDINGDEV_CREATE_PACKAGE",
     "ULTRAMODERN_CREATE_PACKAGE",
     "ULTRAMODERN_FRAMEWORK_VERSION_ENV",
     "ULTRAMODERN_SINGLE_APP_MODERN_PACKAGES",

package/dist/cjs/ultramodern-release-cohort.cjs

@@ -37,14 +37,12 @@ var __webpack_require__ = {};
 var __webpack_exports__ = {};
 __webpack_require__.r(__webpack_exports__);
 __webpack_require__.d(__webpack_exports__, {
-    RELEASE_COHORT_PROJECTION_PATH: ()=>RELEASE_COHORT_PROJECTION_PATH,
+    RELEASE_COHORT_PATH: ()=>RELEASE_COHORT_PATH,
     assertReleaseCohortPackageSource: ()=>assertReleaseCohortPackageSource,
-    copyCreateReleaseCohort: ()=>copyCreateReleaseCohort,
     hasCreateReleaseCohort: ()=>hasCreateReleaseCohort,
     isCreatePackageSourceCheckout: ()=>isCreatePackageSourceCheckout,
     parseUltramodernReleaseCohort: ()=>parseUltramodernReleaseCohort,
     readCreateReleaseCohort: ()=>readCreateReleaseCohort,
-    readWorkspaceReleaseCohort: ()=>readWorkspaceReleaseCohort,
     releaseCohortSelectors: ()=>releaseCohortSelectors
 });
 const external_node_fs_namespaceObject = require("node:fs");
@@ -52,7 +50,7 @@ var external_node_fs_default = /*#__PURE__*/ __webpack_require__.n(external_node
 const external_node_path_namespaceObject = require("node:path");
 var external_node_path_default = /*#__PURE__*/ __webpack_require__.n(external_node_path_namespaceObject);
 const fs_io_cjs_namespaceObject = require("./ultramodern-workspace/fs-io.cjs");
-const RELEASE_COHORT_PROJECTION_PATH = '.modernjs/release-cohort.json';
+const RELEASE_COHORT_PATH = 'release-cohort.json';
 const RELEASE_COHORT_PROJECTION_SCHEMA = 'bleedingdev.ultramodern.release-cohort';
 const RELEASE_COHORT_PROJECTION_SCHEMA_VERSION = 1;
 function assert(condition, message) {
@@ -149,23 +147,14 @@ function readCohortFile(filePath) {
     return parseUltramodernReleaseCohort(value);
 }
 function readCreateReleaseCohort() {
-    return readCohortFile(external_node_path_default().join(fs_io_cjs_namespaceObject.createPackageRoot, 'template-workspace', RELEASE_COHORT_PROJECTION_PATH));
+    return readCohortFile(external_node_path_default().join(fs_io_cjs_namespaceObject.createPackageRoot, RELEASE_COHORT_PATH));
 }
 function hasCreateReleaseCohort() {
-    return external_node_fs_default().existsSync(external_node_path_default().join(fs_io_cjs_namespaceObject.createPackageRoot, 'template-workspace', RELEASE_COHORT_PROJECTION_PATH));
+    return external_node_fs_default().existsSync(external_node_path_default().join(fs_io_cjs_namespaceObject.createPackageRoot, RELEASE_COHORT_PATH));
 }
 function isCreatePackageSourceCheckout() {
     return external_node_fs_default().existsSync(external_node_path_default().join(fs_io_cjs_namespaceObject.createPackageRoot, 'src'));
 }
-function readWorkspaceReleaseCohort(workspaceRoot) {
-    return readCohortFile(external_node_path_default().join(workspaceRoot, RELEASE_COHORT_PROJECTION_PATH));
-}
-function copyCreateReleaseCohort(workspaceRoot) {
-    const sourcePath = external_node_path_default().join(fs_io_cjs_namespaceObject.createPackageRoot, 'template-workspace', RELEASE_COHORT_PROJECTION_PATH);
-    const cohort = readCohortFile(sourcePath);
-    (0, fs_io_cjs_namespaceObject.writeFile)(workspaceRoot, RELEASE_COHORT_PROJECTION_PATH, external_node_fs_default().readFileSync(sourcePath, 'utf8'));
-    return cohort;
-}
 function assertReleaseCohortPackageSource(cohort, packageSource) {
     if ('install' !== packageSource.strategy) return;
     assert(packageSource.modernPackageVersion === cohort.release.version, `Package source release ${packageSource.modernPackageVersion} does not match authenticated release cohort ${cohort.release.version}.`);
@@ -181,24 +170,20 @@ function assertReleaseCohortPackageSource(cohort, packageSource) {
 function releaseCohortSelectors(cohort) {
     return cohort.packages.map((item)=>`${item.targetName}@${item.version}`).sort();
 }
-exports.RELEASE_COHORT_PROJECTION_PATH = __webpack_exports__.RELEASE_COHORT_PROJECTION_PATH;
+exports.RELEASE_COHORT_PATH = __webpack_exports__.RELEASE_COHORT_PATH;
 exports.assertReleaseCohortPackageSource = __webpack_exports__.assertReleaseCohortPackageSource;
-exports.copyCreateReleaseCohort = __webpack_exports__.copyCreateReleaseCohort;
 exports.hasCreateReleaseCohort = __webpack_exports__.hasCreateReleaseCohort;
 exports.isCreatePackageSourceCheckout = __webpack_exports__.isCreatePackageSourceCheckout;
 exports.parseUltramodernReleaseCohort = __webpack_exports__.parseUltramodernReleaseCohort;
 exports.readCreateReleaseCohort = __webpack_exports__.readCreateReleaseCohort;
-exports.readWorkspaceReleaseCohort = __webpack_exports__.readWorkspaceReleaseCohort;
 exports.releaseCohortSelectors = __webpack_exports__.releaseCohortSelectors;
 for(var __rspack_i in __webpack_exports__)if (-1 === [
-    "RELEASE_COHORT_PROJECTION_PATH",
+    "RELEASE_COHORT_PATH",
     "assertReleaseCohortPackageSource",
-    "copyCreateReleaseCohort",
     "hasCreateReleaseCohort",
     "isCreatePackageSourceCheckout",
     "parseUltramodernReleaseCohort",
     "readCreateReleaseCohort",
-    "readWorkspaceReleaseCohort",
     "releaseCohortSelectors"
 ].indexOf(__rspack_i)) exports[__rspack_i] = __webpack_exports__[__rspack_i];
 Object.defineProperty(exports, '__esModule', {

package/dist/cjs/ultramodern-tooling/commands/cloudflare-output-verify.cjs

@@ -39,11 +39,22 @@ __webpack_require__.r(__webpack_exports__);
 __webpack_require__.d(__webpack_exports__, {
     runCloudflareOutputVerify: ()=>runCloudflareOutputVerify
 });
+const external_node_module_namespaceObject = require("node:module");
 const external_node_path_namespaceObject = require("node:path");
 var external_node_path_default = /*#__PURE__*/ __webpack_require__.n(external_node_path_namespaceObject);
+const descriptors_cjs_namespaceObject = require("../../ultramodern-workspace/descriptors.cjs");
 const external_config_cjs_namespaceObject = require("../config.cjs");
-const external_context_cjs_namespaceObject = require("./context.cjs");
 const external_options_cjs_namespaceObject = require("./options.cjs");
+const REQUIRE_PUBLIC_URLS_FLAG = '--require-public-urls';
+const missingPublicUrl = ({ label, publicUrlEnv })=>{
+    if (!publicUrlEnv) return `${REQUIRE_PUBLIC_URLS_FLAG} needs --app, not --output (${label}).`;
+    const names = [
+        publicUrlEnv,
+        'MODERN_PUBLIC_SITE_URL',
+        'ULTRAMODERN_CLOUDFLARE_WORKERS_DEV_SUBDOMAIN'
+    ];
+    return names.some((name)=>process.env[name]?.trim()) ? void 0 : `Cloudflare deploy for ${label} needs ${names.join(', ')}.`;
+};
 const resolveCloudflareOutputVerifyTargets = (args, context)=>{
     const outputDirectory = (0, external_options_cjs_namespaceObject.readOption)(args, '--output');
     const appId = (0, external_options_cjs_namespaceObject.readOption)(args, '--app');
@@ -53,75 +64,57 @@ const resolveCloudflareOutputVerifyTargets = (args, context)=>{
             label: outputDirectory,
             outputDirectory: external_node_path_default().resolve(context.invocationCwd, outputDirectory)
         }
-    ] : (0, external_config_cjs_namespaceObject.workspaceAppsFromToolingConfig)((0, external_config_cjs_namespaceObject.readUltramodernConfig)(context.workspaceRoot)).filter((app)=>!appId || app.id === appId).map((app)=>({
+    ] : (0, external_config_cjs_namespaceObject.workspaceAppsFromToolingConfig)((0, external_config_cjs_namespaceObject.readUltramodernConfig)(context.workspaceRoot), context.workspaceRoot).filter((app)=>!appId || app.id === appId).map((app)=>({
             label: app.id,
-            outputDirectory: external_node_path_default().join(context.workspaceRoot, app.directory, '.output')
+            outputDirectory: external_node_path_default().join(context.workspaceRoot, app.directory, '.output'),
+            publicUrlEnv: (0, descriptors_cjs_namespaceObject.createCloudflarePublicUrlEnv)(app)
         }));
     if (0 === targets.length) throw new Error(`No generated UltraModern app matched ${appId}.`);
     return targets;
 };
-const renderCloudflareOutputVerifyModule = ({ workspaceRoot, targets, excludePaths })=>`
-import { createRequire } from 'node:module';
-import path from 'node:path';
-
-const workspaceRoot = ${JSON.stringify(workspaceRoot)};
-const targets = ${JSON.stringify(targets, null, 2)};
-const scanRoots = [workspaceRoot];
-const excludePaths = ${JSON.stringify(excludePaths)};
-const verifierRequire = createRequire(path.join(workspaceRoot, 'package.json'));
-const {
-  verifyCloudflareOutput,
-  verifyCloudflareOutputMutationPolicy,
-} = verifierRequire('@modern-js/app-tools/cloudflare-output-verifier');
-
-let failed = false;
-for (const target of targets) {
-  const result = await verifyCloudflareOutput({
-    outputDirectory: target.outputDirectory,
-    importWorker: true,
-  });
-  if (result.ok) {
-    console.log(\`[ultramodern] Cloudflare output verified: \${target.label}\`);
-  } else {
-    failed = true;
-    console.error(\`[ultramodern] Cloudflare output failed: \${target.label}\`);
-    for (const issue of result.issues) {
-      console.error(\`- \${issue.code}: \${issue.message}\${issue.path ? \` (\${issue.path})\` : ''}\`);
-    }
-  }
-}
-
-if (scanRoots.length > 0) {
-  const policyResult = await verifyCloudflareOutputMutationPolicy({ scanRoots, excludePaths });
-  if (!policyResult.ok) {
-    failed = true;
-    console.error('[ultramodern] generated-output mutation policy failed');
-    for (const issue of policyResult.issues) {
-      console.error(\`- \${issue.code}: \${issue.message}\${issue.path ? \` (\${issue.path})\` : ''}\`);
-    }
-  }
-}
-
-process.exit(failed ? 1 : 0);
-`;
-function runCloudflareOutputVerify(args, context) {
+async function runCloudflareOutputVerify(args, context) {
     if (args.includes('--help') || args.includes('-h')) {
         process.stdout.write(`Usage:
-  ultramodern-create ultramodern cloudflare-output-verify [--app <id> | --output <dir>]
+  ultramodern-create ultramodern cloudflare-output-verify [--app <id> | --output <dir>] [--require-public-urls]
 
 Verifies generated Cloudflare output against the UltraModern worker contract.
 Without --app or --output, every generated workspace app is verified.
+--require-public-urls also fails an app that has no public URL to deploy to.
 `);
         return 0;
     }
-    const source = renderCloudflareOutputVerifyModule({
-        workspaceRoot: context.workspaceRoot,
-        targets: resolveCloudflareOutputVerifyTargets(args, context),
-        excludePaths: [
-            external_node_path_default().join(context.workspaceRoot, "scripts", 'validate-ultramodern-workspace.mts')
-        ]
+    const targets = resolveCloudflareOutputVerifyTargets(args, context);
+    if (args.includes(REQUIRE_PUBLIC_URLS_FLAG)) {
+        const missing = targets.map(missingPublicUrl).filter((message)=>Boolean(message));
+        if (missing.length > 0) throw new Error(missing.join('\n'));
+    }
+    const verifierRequire = (0, external_node_module_namespaceObject.createRequire)(external_node_path_default().join(context.workspaceRoot, 'package.json'));
+    const { verifyCloudflareOutput, verifyCloudflareOutputMutationPolicy } = verifierRequire('@modern-js/app-tools-extensions/cloudflare-output-verifier');
+    let failed = false;
+    for (const target of targets){
+        const result = await verifyCloudflareOutput({
+            outputDirectory: target.outputDirectory,
+            importWorker: true
+        });
+        if (result.ok) console.log(`[ultramodern] Cloudflare output verified: ${target.label}`);
+        else {
+            failed = true;
+            console.error(`[ultramodern] Cloudflare output failed: ${target.label}`);
+            for (const issue of result.issues)console.error(`- ${issue.code}: ${issue.message}${issue.path ? ` (${issue.path})` : ''}`);
+        }
+    }
+    const policyResult = await verifyCloudflareOutputMutationPolicy({
+        scanRoots: [
+            context.workspaceRoot
+        ],
+        excludePaths: []
     });
-    return (0, external_context_cjs_namespaceObject.runRenderedModule)(source, context);
+    if (!policyResult.ok) {
+        failed = true;
+        console.error('[ultramodern] generated-output mutation policy failed');
+        for (const issue of policyResult.issues)console.error(`- ${issue.code}: ${issue.message}${issue.path ? ` (${issue.path})` : ''}`);
+    }
+    return failed ? 1 : 0;
 }
 exports.runCloudflareOutputVerify = __webpack_exports__.runCloudflareOutputVerify;
 for(var __rspack_i in __webpack_exports__)if (-1 === [