@bleedingdev/modern-js-ultramodern-create 3.9.0-ultramodern.2 → 3.9.0-ultramodern.21

package/{template-workspace/.modernjs/release-cohort.json → release-cohort.json}

@@ -3,18 +3,23 @@
     "@modern-js/adapter-rstest": "@bleedingdev/modern-js-adapter-rstest",
     "@modern-js/app-tools": "@bleedingdev/modern-js-app-tools",
     "@modern-js/app-tools-extensions": "@bleedingdev/modern-js-app-tools-extensions",
+    "@modern-js/backend-federation-contracts": "@bleedingdev/modern-js-backend-federation-contracts",
     "@modern-js/bff-core": "@bleedingdev/modern-js-bff-core",
     "@modern-js/bff-effect": "@bleedingdev/modern-js-bff-effect",
     "@modern-js/bff-runtime": "@bleedingdev/modern-js-bff-runtime",
+    "@modern-js/boundary-debugger": "@bleedingdev/modern-js-boundary-debugger",
     "@modern-js/builder": "@bleedingdev/modern-js-builder",
     "@modern-js/code-tools": "@bleedingdev/modern-js-code-tools",
     "@modern-js/create-request": "@bleedingdev/modern-js-create-request",
+    "@modern-js/federation-runtime": "@bleedingdev/modern-js-federation-runtime",
+    "@modern-js/i18n-integration": "@bleedingdev/modern-js-i18n-integration",
     "@modern-js/i18n-runtime-extensions": "@bleedingdev/modern-js-i18n-runtime-extensions",
     "@modern-js/i18n-utils": "@bleedingdev/modern-js-i18n-utils",
     "@modern-js/image": "@bleedingdev/modern-js-image",
     "@modern-js/main-doc": "@bleedingdev/modern-js-main-doc",
     "@modern-js/plugin": "@bleedingdev/modern-js-plugin",
     "@modern-js/plugin-bff": "@bleedingdev/modern-js-plugin-bff",
+    "@modern-js/plugin-bff-build-extensions": "@bleedingdev/modern-js-plugin-bff-build-extensions",
     "@modern-js/plugin-bff-extensions": "@bleedingdev/modern-js-plugin-bff-extensions",
     "@modern-js/plugin-data-loader": "@bleedingdev/modern-js-plugin-data-loader",
     "@modern-js/plugin-i18n": "@bleedingdev/modern-js-plugin-i18n",
@@ -26,6 +31,7 @@
     "@modern-js/render": "@bleedingdev/modern-js-render",
     "@modern-js/runtime": "@bleedingdev/modern-js-runtime",
     "@modern-js/runtime-extensions": "@bleedingdev/modern-js-runtime-extensions",
+    "@modern-js/runtime-renderer-extensions": "@bleedingdev/modern-js-runtime-renderer-extensions",
     "@modern-js/runtime-utils": "@bleedingdev/modern-js-runtime-utils",
     "@modern-js/sandpack-react": "@bleedingdev/modern-js-sandpack-react",
     "@modern-js/server": "@bleedingdev/modern-js-server",
@@ -33,8 +39,10 @@
     "@modern-js/server-runtime": "@bleedingdev/modern-js-server-runtime",
     "@modern-js/server-runtime-extensions": "@bleedingdev/modern-js-server-runtime-extensions",
     "@modern-js/server-utils": "@bleedingdev/modern-js-server-utils",
+    "@modern-js/surface-resolution": "@bleedingdev/modern-js-surface-resolution",
     "@modern-js/tsconfig": "@bleedingdev/modern-js-tsconfig",
     "@modern-js/types": "@bleedingdev/modern-js-types",
+    "@modern-js/ultramodern-app-tools": "@bleedingdev/modern-js-ultramodern-app-tools",
     "@modern-js/ultramodern-create": "@bleedingdev/modern-js-ultramodern-create",
     "@modern-js/ultramodern-sandpack-profile": "@bleedingdev/modern-js-ultramodern-sandpack-profile",
     "@modern-js/utils": "@bleedingdev/modern-js-utils"
@@ -43,202 +51,242 @@
     {
       "sourceName": "@modern-js/adapter-rstest",
       "targetName": "@bleedingdev/modern-js-adapter-rstest",
-      "version": "3.9.0-ultramodern.2"
+      "version": "3.9.0-ultramodern.21"
     },
     {
       "sourceName": "@modern-js/app-tools",
       "targetName": "@bleedingdev/modern-js-app-tools",
-      "version": "3.9.0-ultramodern.2"
+      "version": "3.9.0-ultramodern.21"
     },
     {
       "sourceName": "@modern-js/app-tools-extensions",
       "targetName": "@bleedingdev/modern-js-app-tools-extensions",
-      "version": "3.9.0-ultramodern.2"
+      "version": "3.9.0-ultramodern.21"
+    },
+    {
+      "sourceName": "@modern-js/backend-federation-contracts",
+      "targetName": "@bleedingdev/modern-js-backend-federation-contracts",
+      "version": "3.9.0-ultramodern.21"
     },
     {
       "sourceName": "@modern-js/bff-core",
       "targetName": "@bleedingdev/modern-js-bff-core",
-      "version": "3.9.0-ultramodern.2"
+      "version": "3.9.0-ultramodern.21"
     },
     {
       "sourceName": "@modern-js/bff-effect",
       "targetName": "@bleedingdev/modern-js-bff-effect",
-      "version": "3.9.0-ultramodern.2"
+      "version": "3.9.0-ultramodern.21"
     },
     {
       "sourceName": "@modern-js/bff-runtime",
       "targetName": "@bleedingdev/modern-js-bff-runtime",
-      "version": "3.9.0-ultramodern.2"
+      "version": "3.9.0-ultramodern.21"
+    },
+    {
+      "sourceName": "@modern-js/boundary-debugger",
+      "targetName": "@bleedingdev/modern-js-boundary-debugger",
+      "version": "3.9.0-ultramodern.21"
     },
     {
       "sourceName": "@modern-js/builder",
       "targetName": "@bleedingdev/modern-js-builder",
-      "version": "3.9.0-ultramodern.2"
+      "version": "3.9.0-ultramodern.21"
     },
     {
       "sourceName": "@modern-js/code-tools",
       "targetName": "@bleedingdev/modern-js-code-tools",
-      "version": "3.9.0-ultramodern.2"
+      "version": "3.9.0-ultramodern.21"
     },
     {
       "sourceName": "@modern-js/create-request",
       "targetName": "@bleedingdev/modern-js-create-request",
-      "version": "3.9.0-ultramodern.2"
+      "version": "3.9.0-ultramodern.21"
+    },
+    {
+      "sourceName": "@modern-js/federation-runtime",
+      "targetName": "@bleedingdev/modern-js-federation-runtime",
+      "version": "3.9.0-ultramodern.21"
+    },
+    {
+      "sourceName": "@modern-js/i18n-integration",
+      "targetName": "@bleedingdev/modern-js-i18n-integration",
+      "version": "3.9.0-ultramodern.21"
     },
     {
       "sourceName": "@modern-js/i18n-runtime-extensions",
       "targetName": "@bleedingdev/modern-js-i18n-runtime-extensions",
-      "version": "3.9.0-ultramodern.2"
+      "version": "3.9.0-ultramodern.21"
     },
     {
       "sourceName": "@modern-js/i18n-utils",
       "targetName": "@bleedingdev/modern-js-i18n-utils",
-      "version": "3.9.0-ultramodern.2"
+      "version": "3.9.0-ultramodern.21"
     },
     {
       "sourceName": "@modern-js/image",
       "targetName": "@bleedingdev/modern-js-image",
-      "version": "3.9.0-ultramodern.2"
+      "version": "3.9.0-ultramodern.21"
     },
     {
       "sourceName": "@modern-js/main-doc",
       "targetName": "@bleedingdev/modern-js-main-doc",
-      "version": "3.9.0-ultramodern.2"
+      "version": "3.9.0-ultramodern.21"
     },
     {
       "sourceName": "@modern-js/plugin",
       "targetName": "@bleedingdev/modern-js-plugin",
-      "version": "3.9.0-ultramodern.2"
+      "version": "3.9.0-ultramodern.21"
     },
     {
       "sourceName": "@modern-js/plugin-bff",
       "targetName": "@bleedingdev/modern-js-plugin-bff",
-      "version": "3.9.0-ultramodern.2"
+      "version": "3.9.0-ultramodern.21"
+    },
+    {
+      "sourceName": "@modern-js/plugin-bff-build-extensions",
+      "targetName": "@bleedingdev/modern-js-plugin-bff-build-extensions",
+      "version": "3.9.0-ultramodern.21"
     },
     {
       "sourceName": "@modern-js/plugin-bff-extensions",
       "targetName": "@bleedingdev/modern-js-plugin-bff-extensions",
-      "version": "3.9.0-ultramodern.2"
+      "version": "3.9.0-ultramodern.21"
     },
     {
       "sourceName": "@modern-js/plugin-data-loader",
       "targetName": "@bleedingdev/modern-js-plugin-data-loader",
-      "version": "3.9.0-ultramodern.2"
+      "version": "3.9.0-ultramodern.21"
     },
     {
       "sourceName": "@modern-js/plugin-i18n",
       "targetName": "@bleedingdev/modern-js-plugin-i18n",
-      "version": "3.9.0-ultramodern.2"
+      "version": "3.9.0-ultramodern.21"
     },
     {
       "sourceName": "@modern-js/plugin-polyfill",
       "targetName": "@bleedingdev/modern-js-plugin-polyfill",
-      "version": "3.9.0-ultramodern.2"
+      "version": "3.9.0-ultramodern.21"
     },
     {
       "sourceName": "@modern-js/plugin-ssg",
       "targetName": "@bleedingdev/modern-js-plugin-ssg",
-      "version": "3.9.0-ultramodern.2"
+      "version": "3.9.0-ultramodern.21"
     },
     {
       "sourceName": "@modern-js/plugin-styled-components",
       "targetName": "@bleedingdev/modern-js-plugin-styled-components",
-      "version": "3.9.0-ultramodern.2"
+      "version": "3.9.0-ultramodern.21"
     },
     {
       "sourceName": "@modern-js/plugin-tanstack",
       "targetName": "@bleedingdev/modern-js-plugin-tanstack",
-      "version": "3.9.0-ultramodern.2"
+      "version": "3.9.0-ultramodern.21"
     },
     {
       "sourceName": "@modern-js/prod-server",
       "targetName": "@bleedingdev/modern-js-prod-server",
-      "version": "3.9.0-ultramodern.2"
+      "version": "3.9.0-ultramodern.21"
     },
     {
       "sourceName": "@modern-js/render",
       "targetName": "@bleedingdev/modern-js-render",
-      "version": "3.9.0-ultramodern.2"
+      "version": "3.9.0-ultramodern.21"
     },
     {
       "sourceName": "@modern-js/runtime",
       "targetName": "@bleedingdev/modern-js-runtime",
-      "version": "3.9.0-ultramodern.2"
+      "version": "3.9.0-ultramodern.21"
     },
     {
       "sourceName": "@modern-js/runtime-extensions",
       "targetName": "@bleedingdev/modern-js-runtime-extensions",
-      "version": "3.9.0-ultramodern.2"
+      "version": "3.9.0-ultramodern.21"
+    },
+    {
+      "sourceName": "@modern-js/runtime-renderer-extensions",
+      "targetName": "@bleedingdev/modern-js-runtime-renderer-extensions",
+      "version": "3.9.0-ultramodern.21"
     },
     {
       "sourceName": "@modern-js/runtime-utils",
       "targetName": "@bleedingdev/modern-js-runtime-utils",
-      "version": "3.9.0-ultramodern.2"
+      "version": "3.9.0-ultramodern.21"
     },
     {
       "sourceName": "@modern-js/sandpack-react",
       "targetName": "@bleedingdev/modern-js-sandpack-react",
-      "version": "3.9.0-ultramodern.2"
+      "version": "3.9.0-ultramodern.21"
     },
     {
       "sourceName": "@modern-js/server",
       "targetName": "@bleedingdev/modern-js-server",
-      "version": "3.9.0-ultramodern.2"
+      "version": "3.9.0-ultramodern.21"
     },
     {
       "sourceName": "@modern-js/server-core",
       "targetName": "@bleedingdev/modern-js-server-core",
-      "version": "3.9.0-ultramodern.2"
+      "version": "3.9.0-ultramodern.21"
     },
     {
       "sourceName": "@modern-js/server-runtime",
       "targetName": "@bleedingdev/modern-js-server-runtime",
-      "version": "3.9.0-ultramodern.2"
+      "version": "3.9.0-ultramodern.21"
     },
     {
       "sourceName": "@modern-js/server-runtime-extensions",
       "targetName": "@bleedingdev/modern-js-server-runtime-extensions",
-      "version": "3.9.0-ultramodern.2"
+      "version": "3.9.0-ultramodern.21"
     },
     {
       "sourceName": "@modern-js/server-utils",
       "targetName": "@bleedingdev/modern-js-server-utils",
-      "version": "3.9.0-ultramodern.2"
+      "version": "3.9.0-ultramodern.21"
+    },
+    {
+      "sourceName": "@modern-js/surface-resolution",
+      "targetName": "@bleedingdev/modern-js-surface-resolution",
+      "version": "3.9.0-ultramodern.21"
     },
     {
       "sourceName": "@modern-js/tsconfig",
       "targetName": "@bleedingdev/modern-js-tsconfig",
-      "version": "3.9.0-ultramodern.2"
+      "version": "3.9.0-ultramodern.21"
     },
     {
       "sourceName": "@modern-js/types",
       "targetName": "@bleedingdev/modern-js-types",
-      "version": "3.9.0-ultramodern.2"
+      "version": "3.9.0-ultramodern.21"
+    },
+    {
+      "sourceName": "@modern-js/ultramodern-app-tools",
+      "targetName": "@bleedingdev/modern-js-ultramodern-app-tools",
+      "version": "3.9.0-ultramodern.21"
     },
     {
       "sourceName": "@modern-js/ultramodern-create",
       "targetName": "@bleedingdev/modern-js-ultramodern-create",
-      "version": "3.9.0-ultramodern.2"
+      "version": "3.9.0-ultramodern.21"
     },
     {
       "sourceName": "@modern-js/ultramodern-sandpack-profile",
       "targetName": "@bleedingdev/modern-js-ultramodern-sandpack-profile",
-      "version": "3.9.0-ultramodern.2"
+      "version": "3.9.0-ultramodern.21"
     },
     {
       "sourceName": "@modern-js/utils",
       "targetName": "@bleedingdev/modern-js-utils",
-      "version": "3.9.0-ultramodern.2"
+      "version": "3.9.0-ultramodern.21"
     }
   ],
   "release": {
     "tag": "latest",
-    "version": "3.9.0-ultramodern.2"
+    "version": "3.9.0-ultramodern.21"
   },
   "schema": "bleedingdev.ultramodern.release-cohort",
   "schemaVersion": 1,
   "source": {
-    "commit": "d2c75828230edf92775feca796c0960af754508f",
+    "commit": "269b0dd406477bf97704ff2485f55e8f6b6b5f32",
     "repository": "BleedingDev/ultramodern.js"
   }
 }

package/template-workspace/.codex/skills/rspack-tracing/scripts/analyze_trace.js

@@ -48,7 +48,7 @@ try {
     .map(line => {
       try {
         return JSON.parse(line);
-      } catch (err) {
+      } catch {
         return null;
       }
     })

package/template-workspace/README.md.handlebars

@@ -52,9 +52,10 @@ config merger, so sibling preset fields remain intact.
 ## Private-First Public Surfaces
 
 Generated app routes are private and non-indexable by default. Author route
-metadata in colocated `src/routes/**/route.meta.ts` files; the scaffold
-regenerates `src/routes/ultramodern-route-metadata.ts` as a compatibility
-manifest for config, i18n, public head, and public surface contracts. Private
+metadata in colocated `src/routes/**/route.meta.ts` files that export
+`routeMeta`; `ultramodern-create ultramodern routes-generate` regenerates
+`src/routes/ultramodern-route-metadata.ts` as the route manifest for config,
+i18n, public head, and public surface contracts. Private
 app, auth, tenant, dashboard, and internal routes publish no discovery output
 unless route metadata explicitly marks them `public && indexable`. The default
 scaffold therefore emits only a disallowing `robots.txt`; sitemap, web
@@ -121,12 +122,10 @@ actions, frozen installs, StepSecurity audit-mode runner hardening, dependency
 dashboard review, one-day release age, grouped updates, and manual approval for
 major upgrades.
 
-Package source provenance is recorded in `.modernjs/ultramodern.json`. The
-default strategy keeps UltraModern.js runtime and tooling packages on
-`workspace:*` for monorepo development. To create a workspace that can install
-those packages outside the monorepo, generate with
-`--ultramodern-package-source install`; generated shared packages still use
-`workspace:*` because they are part of this workspace.
+Published framework versions live in `catalogs.ultramodern` in
+`pnpm-workspace.yaml`, with `catalog:ultramodern` references in app manifests.
+Local monorepo generation uses `workspace:*`. Shared application packages also
+use `workspace:*`. The lockfile records resolved dependency versions.
 
 ## Public URL Environment Variables
 
@@ -169,10 +168,16 @@ the shell URL; added verticals use the same `ULTRAMODERN_PUBLIC_URL_<APP_ID>`
 pattern with hyphens converted to underscores and uppercased.
 
 ```bash
+export ULTRAMODERN_PUBLIC_URL_SHELL_SUPER_APP=https://shell-super-app.example.workers.dev
 pnpm cloudflare:deploy
-pnpm exec cross-env ULTRAMODERN_PUBLIC_URL_SHELL_SUPER_APP=https://shell-super-app.example.workers.dev pnpm cloudflare:proof --require-public-urls
+pnpm cloudflare:proof --require-public-urls
 ```
 
+`cloudflare:deploy` refuses to deploy an app without a public URL
+(`ULTRAMODERN_PUBLIC_URL_<APP_ID>`, `MODERN_PUBLIC_SITE_URL` or
+`ULTRAMODERN_CLOUDFLARE_WORKERS_DEV_SUBDOMAIN`). A Zephyr upload also needs
+`ZE_FAIL_BUILD=true` next to `ZE_CI_TOKEN` in the deploy environment.
+
 ## Strict Effect API
 
 Generated HTTP APIs use the direct strict Effect topology only:
@@ -192,38 +197,18 @@ errors with concrete Effect `Schema` values; generic JSON shortcuts such as
 `Schema.UnknownFromJsonString`, `Schema.Unknown`, and `Schema.Any` are rejected
 in API modules.
 
-Generated pnpm overrides pin the framework-compatible Effect cohort. Keep
-`effect` and `@effect/vitest` aligned with `pnpm-workspace.yaml`; do not add
-new direct package-level Effect versions unless the whole UltraModern cohort is
-upgraded. The generated pnpm policy intentionally excludes the matching
-`effect` and `@effect/opentelemetry` cohort versions from the
-minimum-release-age and no-downgrade checks while Effect's beta publishes move
-from trusted-publisher metadata to provenance attestations.
-
-For older generated workspaces, run the framework migration command first:
-
-```bash
-pnpm dlx @bleedingdev/modern-js-ultramodern-create@3.5.0-ultramodern.10 ultramodern \
-  migrate-strict-effect --version 3.5.0-ultramodern.10
-pnpm api:check
-pnpm contract:check
-```
-
-The command updates generated package-source metadata, Modern package aliases,
-framework-owned toolchain pins, direct API topology metadata, strict Effect pnpm
-overrides/trust policy, and the lockfile. Remaining failures are source
-migration work; fix the owning API files instead of adding compatibility shims.
+The generated Effect dependency selects the framework-qualified runtime.
+Corrected dependencies ship as packages, so applications do not need framework
+patches or root overrides. Normal installs retain release-age and trust checks.
 
 ## Troubleshooting
 
 | Symptom | Current check | Owner |
 | --- | --- | --- |
-| Package cohort mismatch | Regenerate with one package source strategy, run `mise install`, then rerun `pnpm install` from the activated shell. | Generated workspace package source metadata |
-| Effect runtime cohort mismatch | Keep `effect` and `@effect/vitest` on the generated pnpm override versions, then rerun `pnpm install`. | Generated workspace dependency policy |
-| Old nested API path | Run `pnpm api:check`, move code to `api/index.ts`, `shared/api.ts`, and `src/api/*`, then delete `api/effect`, `api/lambda`, `shared/effect`, and `src/effect`. | API owner |
+| Package version mismatch | Align the native framework catalog and regenerate the lockfile with `pnpm install`. | Workspace dependency manifests |
 | Install failure | Check the active Node/pnpm from `mise install`; rerun `pnpm install` after the shell sees the pinned versions. | Toolchain setup |
 | Build failure | Run the matching primitive gate (`pnpm lint`, `pnpm typecheck`, `pnpm i18n:boundaries`, `pnpm contract:check`) before `pnpm build`; fix the owning failure first. | Owning package or generated contract |
-| Missing public URL | Set the app public URL env key recorded in `.modernjs/ultramodern.json`, for example `ULTRAMODERN_PUBLIC_URL_SHELL_SUPER_APP`. | Deployment operator |
+| Missing public URL | Set the app public URL env key declared in topology, for example `ULTRAMODERN_PUBLIC_URL_SHELL_SUPER_APP`. | Deployment operator |
 | Cloudflare credentials | Confirm Wrangler credentials before `pnpm cloudflare:deploy`; local checks do not prove live Worker access. | Deployment operator |
 | Asset or CSS 404 | Rebuild with `pnpm build` or `pnpm cloudflare:deploy` and inspect emitted Modern/Rspack asset paths instead of hardcoding CSS URLs. | Framework/runtime asset pipeline |
 | Federation manifest failure | Run the shell and vertical build scripts, then check each deployed `/mf-manifest.json` URL used by the shell. | Module Federation owner |

package/template-workspace/oxfmt.config.ts

@@ -15,6 +15,9 @@ export default defineConfig({
     '.modernjs',
     '**/modern-tanstack/**',
     '**/routeTree.gen.*',
+    '**/src/routes/ultramodern-route-metadata.ts',
   ],
+  printWidth: 120,
   singleQuote: true,
+  trailingComma: 'all',
 });

package/template-workspace/pnpm-workspace.yaml.handlebars

@@ -6,12 +6,8 @@ packages:
 {{workspacePackageLinkingYaml}}minimumReleaseAge: 1440
 minimumReleaseAgeStrict: true
 minimumReleaseAgeIgnoreMissingTime: false
-minimumReleaseAgeExclude:{{minimumReleaseAgeExcludeYaml}}
 trustPolicy: no-downgrade
 trustPolicyIgnoreAfter: 1440
-trustPolicyExclude:
-  - '@effect/opentelemetry@{{effectVersion}}'
-  - 'effect@{{effectVersion}}'
 blockExoticSubdeps: true
 engineStrict: true
 pmOnFail: error
@@ -23,31 +19,11 @@ peerDependencyRules:
     react: '>=19.0.0'
     '@effect/vitest>effect': '{{effectVersion}}'
 
-overrides:
-  '@tanstack/react-router': {{tanstackRouterVersion}}
-  '@tanstack/router-core': {{tanstackRouterCoreVersion}}
-  '@tanstack/history': {{tanstackHistoryVersion}}
-  '@effect/opentelemetry': {{effectVersion}}
-  '@effect/vitest': {{effectVitestVersion}}
-  effect: {{effectVersion}}
-  msgpackr: {{msgpackrVersion}}
-  node-fetch: '{{nodeFetchVersion}}'
-  zod: {{zodVersion}}
-
 allowBuilds:
   '@parcel/watcher': true
   '@swc/core': true
   core-js: true
   esbuild: true
   lefthook: true
-  msgpackr-extract: true
   sharp: true
   workerd: true
-
-patchedDependencies:
-  '@module-federation/modern-js-v3@{{moduleFederationVersion}}': patches/@module-federation__modern-js-v3@{{moduleFederationVersion}}.patch
-  '@module-federation/dts-plugin@{{moduleFederationVersion}}': patches/@module-federation__dts-plugin@{{moduleFederationVersion}}.patch
-  '@module-federation/bridge-react@{{moduleFederationVersion}}': patches/@module-federation__bridge-react@{{moduleFederationVersion}}.patch
-  '@module-federation/runtime-core@{{moduleFederationVersion}}': patches/@module-federation__runtime-core@{{moduleFederationVersion}}.patch
-  'msgpackr@{{msgpackrVersion}}': patches/msgpackr@{{msgpackrVersion}}.patch
-  'zod@{{zodVersion}}': patches/zod@{{zodVersion}}.patch

package/template-workspace/scripts/bootstrap-agent-skills.mjs

@@ -246,7 +246,7 @@ if (checkOnly) {
 
 fs.mkdirSync(installDir, { recursive: true });
 
-const installSkillFromDir = (sourceSkillDir, skillName) => {
+const installSkillFromDir = async (sourceSkillDir, skillName) => {
   const targetSkillDir = path.join(installDir, skillName);
   if (path.resolve(sourceSkillDir) === path.resolve(targetSkillDir)) {
     console.log(`Pinned Codex skill ${skillName} is already present`);
@@ -256,7 +256,7 @@ const installSkillFromDir = (sourceSkillDir, skillName) => {
     removeTree(targetSkillDir);
   }
   fs.mkdirSync(path.dirname(targetSkillDir), { recursive: true });
-  fs.cpSync(sourceSkillDir, targetSkillDir, { recursive: true });
+  await fs.promises.cp(sourceSkillDir, targetSkillDir, { recursive: true });
   console.log(`Installed Codex skill ${skillName}`);
 };
 
@@ -268,7 +268,7 @@ for (const source of vendoredSources) {
         `Vendored Codex skill ${skill.name} not found in ${vendoredSkillsDir}`,
       );
     }
-    installSkillFromDir(sourceSkillDir, skill.name);
+    await installSkillFromDir(sourceSkillDir, skill.name);
   }
 }
 
@@ -298,7 +298,7 @@ for (const source of cloneInstallSources) {
           `Skill ${skill.name} not found in ${source.repository}`,
         );
       }
-      installSkillFromDir(sourceSkillDir, skill.name);
+      await installSkillFromDir(sourceSkillDir, skill.name);
     }
   } finally {
     removeTree(tempDir);