@platforma-sdk/block-tools 2.10.18 → 2.11.0

package/src/structure/rules/migrations.ts

@@ -12,7 +12,6 @@
 //    keys/paths). Each line is a one-way decision: every block converges.
 
 import { scope, remove, managed, generate, removeScript, removeDep } from "../engine/api";
-import { getActiveRunContext } from "../engine/builders";
 import { rootPackageJsonInitial } from "./root-package-json";
 
 export function testFrameworkMigration(): void {
@@ -23,40 +22,39 @@ export function testFrameworkMigration(): void {
 // Unconditional legacy-cleanup rules. Each is a no-op on an
 // already-canonical block (remove on an absent path, removeScript /
 // removeDep on an absent key) and idempotent, so they sit at top level
-// with no `when` gate. The trailing comment on each line names the real
-// block(s) that carry the artefact being cleaned.
+// with no `when` gate.
 //
 // Root-scope cleanup is skipped for `--sdk-internal` blocks (no root
 // module in that mode), so it never touches in-monorepo blocks.
 export function legacyCleanup(): void {
-  // eslint → oxlint: the canonical layout ships `.oxlintrc.json` /
-  // `.oxfmtrc.json`; flat eslint configs are retired.
+  // Retired per-scope config files: flat eslint configs and vite-era build /
+  // split-tsconfig files, replaced by the oxlint/oxfmt + ts-builder layout.
   scope("model", () => {
-    remove("eslint.config.mjs"); // samples-and-data, mixcr-clonotyping, clonotype-clustering, antibody-sequence-liabilities
-    remove("vite.config.mts"); // samples-and-data (vite build → ts-builder)
+    remove("eslint.config.mjs");
+    remove("vite.config.mts");
   });
   scope("ui", () => {
-    remove("eslint.config.mjs"); // samples-and-data, mixcr-clonotyping, clonotype-clustering, antibody-sequence-liabilities
-    remove("vite.config.ts"); // samples-and-data (vite build → ts-builder)
-    remove("tsconfig.app.json"); // samples-and-data (vite-era split tsconfig)
-    remove("tsconfig.node.json"); // samples-and-data (vite-era split tsconfig)
+    remove("eslint.config.mjs");
+    remove("vite.config.ts");
+    remove("tsconfig.app.json");
+    remove("tsconfig.node.json");
   });
   scope("test", () => {
-    remove("eslint.config.mjs"); // all 5 experiment blocks
+    remove("eslint.config.mjs");
   });
 
   // Root-scope cleanup. The second `managed("package.json")` body composes
   // after rootRules.
   scope("root", () => {
-    remove(".prettierrc"); // samples-and-data, sequence-properties (prettier → oxfmt)
+    remove(".prettierrc");
     managed(
       "package.json",
-      generate(() => rootPackageJsonInitial(getActiveRunContext())),
+      generate((ctx) => rootPackageJsonInitial(ctx)),
       () => {
-        // `pretty` (prettier) is superseded by the canonical `fmt` (oxfmt);
-        // the standalone deps-updater was merged into block-tools.
-        removeScript("pretty"); // samples-and-data
-        removeDep("@platforma-sdk/blocks-deps-updater"); // samples-and-data
+        // `pretty` (prettier) is superseded by `fmt` (oxfmt); the standalone
+        // deps-updater is now part of block-tools.
+        removeScript("pretty");
+        removeDep("@platforma-sdk/blocks-deps-updater");
       },
     );
   });

package/src/structure/rules/model-package-json.ts

@@ -16,6 +16,7 @@ import {
   ensureDevDep,
   ensureDevDeps,
   removeDep,
+  removeScript,
   removeField,
   ensurePeerDeps,
   enforceAlphabeticalOrder,
@@ -26,6 +27,7 @@ import {
 } from "../engine/api";
 import { canonicalPackageJsonOrder } from "./shared/key-order";
 import { COLOCATED_TEST_GLOB } from "./shared/colocated-tests";
+import { removeRetiredToolchainDeps } from "./shared/retired-deps";
 
 export function modelPackageJsonInitial(ctx: RunContext): Record<string, unknown> {
   const v = ctx.blockVars;
@@ -127,12 +129,9 @@ export function modelPackageJsonRules(): void {
       ),
   );
 
-  // vite/tsup-era artefacts: the canonical model builds via ts-builder, so the
-  // legacy `tsup`/`vite` devDeps and the top-level `tsup` bundler config block
-  // are dropped.
-  removeDep("tsup");
-  removeDep("vite");
+  removeRetiredToolchainDeps();
   removeField("tsup");
+  removeScript("lint");
 
   enforceAlphabeticalOrder("dependencies");
   enforceAlphabeticalOrder("devDependencies");

package/src/structure/rules/model.ts

@@ -3,7 +3,6 @@
 // (block author owns it).
 
 import { scope, fixed, managed, seed, file, generate, when, whenFilesExist } from "../engine/api";
-import { getActiveRunContext } from "../engine/builders";
 import { modelPackageJsonInitial, modelPackageJsonRules } from "./model-package-json";
 import { COLOCATED_TEST_GLOB } from "./shared/colocated-tests";
 
@@ -32,7 +31,7 @@ export function modelRules(): void {
 
     managed(
       "package.json",
-      generate(() => modelPackageJsonInitial(getActiveRunContext())),
+      generate((ctx) => modelPackageJsonInitial(ctx)),
       () => {
         modelPackageJsonRules();
       },

package/src/structure/rules/root-catalog-bump.ts

@@ -28,7 +28,6 @@ import {
   ensureCatalogVersion,
   pinCatalogToDependencyOf,
 } from "../engine/api";
-import { getActiveRunContext } from "../engine/builders";
 import {
   rootPnpmWorkspaceInitial,
   SDK_CATALOG_PACKAGES,
@@ -53,8 +52,8 @@ export function rootCatalogBumpRules(): void {
           // generator.
           managed(
             "pnpm-workspace.yaml",
-            generate(() => rootPnpmWorkspaceInitial(getActiveRunContext())),
-            () => {
+            generate((ctx) => rootPnpmWorkspaceInitial(ctx)),
+            (ctx) => {
               // SDK families → npm latest, ADD-IF-ABSENT (seeds a migrated
               // block's missing standard keys + overwrites the init
               // placeholder).
@@ -76,7 +75,7 @@ export function rootCatalogBumpRules(): void {
               }
               // The python runenv pin is relevant only to software-bearing
               // blocks; seed it add-if-absent when one is present.
-              if (getActiveRunContext().modules.some((m) => m.scope === "software")) {
+              if (ctx.modules.some((m) => m.scope === "software")) {
                 ensureCatalogVersion(RUNENV_PYTHON, RUNENV_PYTHON_VERSION);
               }
             },

package/src/structure/rules/root-ci.ts

@@ -0,0 +1,55 @@
+// Root-scope CI workflows — the block's GitHub Actions `build.yaml` and
+// `mark-stable.yaml`. Engine-OWNED (`fixed`): rewritten verbatim on every
+// refresh, generated from the block's identity (short name); everything else
+// is a constant baked into the templates.
+//
+// Why fixed, not managed: previously each block carried a hand-copied
+// workflow pinning the shared reusable workflow at `@v4` (a moving branch),
+// so a breaking shared-CI change was absorbed silently and per-block edits
+// drifted. Engine-owning the file makes the pin + job wiring centrally
+// refreshable; the only per-block bits are derived (app-name, slug), so
+// nothing author-tunable is clobbered.
+//
+// Standalone blocks only — `--sdk-internal` blocks (`etc/blocks/*`) carry no
+// per-block workflow (the monorepo owns their CI), hence the
+// `when(!isSdkInternal)` guard, matching the rest of the root scope.
+
+import { scope, when, fixed, tpl } from "../engine/api";
+
+/** Readable default CI label from a short name (`mixcr-clonotyping-2` →
+ *  `Mixcr Clonotyping 2`). Dash/underscore words, title-cased. Human-curated
+ *  casing (e.g. `MiXCR`) is not recoverable from the slug — this is a
+ *  generated label, not the marketing name. */
+function humanizeShortName(shortName: string): string {
+  return shortName
+    .split(/[-_]+/)
+    .filter((w) => w.length > 0)
+    .map((w) => w.charAt(0).toUpperCase() + w.slice(1))
+    .join(" ");
+}
+
+export function rootCiRules(): void {
+  scope("root", () => {
+    when(
+      ({ ctx }) => !ctx.isSdkInternal,
+      () => {
+        fixed(
+          ".github/workflows/build.yaml",
+          tpl("workflows/build.tpl.yaml", (ctx) => {
+            const shortName = ctx.blockVars.shortName;
+            return {
+              appName: `Block: ${humanizeShortName(shortName)}`,
+              appNameSlug: `block-${shortName}`,
+            };
+          }),
+        );
+        fixed(
+          ".github/workflows/mark-stable.yaml",
+          tpl("workflows/mark-stable.tpl.yaml", (ctx) => ({
+            appName: `Block: ${humanizeShortName(ctx.blockVars.shortName)} - Mark Stable`,
+          })),
+        );
+      },
+    );
+  });
+}

package/src/structure/rules/root-package-json.ts

@@ -8,6 +8,7 @@ import {
   ensureScript,
   ensureDevDeps,
   ensurePeerDeps,
+  removeScript,
   removeField,
   pruneKeysMatching,
   enforceAlphabeticalOrder,
@@ -34,10 +35,9 @@ export function rootPackageJsonInitial(_ctx: RunContext): Record<string, unknown
       watch: "turbo watch build",
       changeset: "changeset",
       "version-packages": "changeset version",
-      // Deprecated in favour of `update` (the full refresh → install →
-      // refresh → format flow); kept for compatibility.
+      // Deprecated alias of `upgrade-sdk`; kept for compatibility.
       "update-sdk": "block-tools structure refresh --update-deps-only",
-      update:
+      "upgrade-sdk":
         "block-tools structure refresh --update-deps-only && pnpm i && block-tools structure refresh && pnpm i && pnpm fmt",
     },
     peerDependencies: {
@@ -76,16 +76,18 @@ export function rootPackageJsonRules(): void {
   ensureScript("watch", "turbo watch build");
   ensureScript("changeset", "changeset");
   ensureScript("version-packages", "changeset version");
-  // Deprecated in favour of `update`; kept for compatibility.
+  // `update-sdk` is a deprecated alias of `upgrade-sdk`, kept for compatibility;
+  // `update` is the pre-rename name — drop it so refreshed blocks converge.
   ensureScript("update-sdk", "block-tools structure refresh --update-deps-only");
-  // Full SDK-update flow: bump catalog (deps-only) → install → re-apply
+  removeScript("update");
+  // Full SDK-upgrade flow: bump catalog (deps-only) → install → re-apply
   // structure against the freshly-pulled deps → install AGAIN (the structural
   // pass can add new devDeps — e.g. ts-builder/oxlint/oxfmt on a first
   // migration — that `pnpm fmt` then needs on PATH) → format. Wrapped as one
   // script. `pnpm fmt` (turbo run fmt) leaves the tree oxfmt-clean after the
   // structural rewrite so a follow-up `pnpm check` passes.
   ensureScript(
-    "update",
+    "upgrade-sdk",
     "block-tools structure refresh --update-deps-only && pnpm i && block-tools structure refresh && pnpm i && pnpm fmt",
   );
 

package/src/structure/rules/root-pnpm-workspace.ts

@@ -20,6 +20,7 @@
 
 import { ensureWorkspaceModulePaths, ensureCatalogAbsent, type RunContext } from "../engine/api";
 import { matchesBumpPattern, type DerivedCatalogPin } from "../engine/registry-client";
+import { RETIRED_TOOLCHAIN_DEPS } from "./shared/retired-deps";
 
 /** SDK packages that live in the catalog (membership only — no versions).
  *  Init fetches npm latest for each; refresh leaves them as the lockfile has
@@ -109,11 +110,7 @@ export function rootPnpmWorkspaceInitial(ctx: RunContext): Record<string, unknow
 
 export function rootPnpmWorkspaceRules(): void {
   ensureWorkspaceModulePaths();
-  // vite/tsup/vue-tsc-era catalog entries: the canonical toolchain (ts-builder
-  // owns vue-tsc; ts-builder + rolldown replace vite/tsup) does not use them.
-  // Drop the orphaned catalog keys — paired with the per-package `removeDep`
-  // so a migrated block sheds both the dep and its catalog entry.
-  ensureCatalogAbsent("vite");
-  ensureCatalogAbsent("tsup");
-  ensureCatalogAbsent("vue-tsc");
+  // Catalog side of the retired-dep cleanup — the per-package side sheds the
+  // matching `catalog:` references.
+  for (const name of RETIRED_TOOLCHAIN_DEPS) ensureCatalogAbsent(name);
 }

package/src/structure/rules/root.ts

@@ -4,7 +4,6 @@
 // `when(({ ctx }) => !ctx.isSdkInternal, ...)` wrapper.
 
 import { scope, when, fixed, managed, file, generate } from "../engine/api";
-import { getActiveRunContext } from "../engine/builders";
 import { rootPackageJsonInitial, rootPackageJsonRules } from "./root-package-json";
 import { rootPnpmWorkspaceInitial, rootPnpmWorkspaceRules } from "./root-pnpm-workspace";
 import { rootGitignoreRules } from "./root-gitignore";
@@ -14,13 +13,12 @@ export function rootRules(): void {
     when(
       ({ ctx }) => !ctx.isSdkInternal,
       () => {
-        // see templates/static/root/turbo.json — verbatim canonical content.
         fixed("turbo.json", file("root/turbo.json"));
         fixed(".vscode/settings.json", file("root/.vscode/settings.json"));
 
         managed(
           "package.json",
-          generate(() => rootPackageJsonInitial(getActiveRunContext())),
+          generate((ctx) => rootPackageJsonInitial(ctx)),
           () => {
             rootPackageJsonRules();
           },
@@ -28,7 +26,7 @@ export function rootRules(): void {
 
         managed(
           "pnpm-workspace.yaml",
-          generate(() => rootPnpmWorkspaceInitial(getActiveRunContext())),
+          generate((ctx) => rootPnpmWorkspaceInitial(ctx)),
           () => {
             rootPnpmWorkspaceRules();
           },

package/src/structure/rules/shared/retired-deps.ts

@@ -0,0 +1,42 @@
+// Retired toolchain dependencies — a SINGLE source of truth.
+//
+// These packages are superseded by the canonical toolchain (ts-builder owns
+// the build, vue-tsc, and the vite plugins; oxlint/oxfmt replace eslint) and
+// must be shed from a migrated block in BOTH places at once:
+//   - the root catalog          → `ensureCatalogAbsent` (root-pnpm-workspace)
+//   - every package.json scope  → `removeDep` (via removeRetiredToolchainDeps)
+//
+// Removing from only one side is a latent bug: a catalog entry dropped while a
+// package still references `<dep>: "catalog:"` leaves a dangling reference that
+// breaks `pnpm install`. Driving both from this one list makes that impossible
+// — add (or un-retire) a dependency HERE, once.
+//
+// Per-entry rationale:
+//   vite / tsup          — bundling now goes through ts-builder + rolldown.
+//   vue-tsc              — ts-builder runs vue-tsc internally for `block-ui`; a
+//                          direct dep resolves a different version than the
+//                          toolchain pins, causing type clashes in main.ts.
+//   @vitejs/plugin-vue   — bundled by ts-builder's internal vite config.
+//   vite-plugin-dts      — .d.ts emit is handled by ts-builder.
+//   @platforma-sdk/eslint-config — eslint is retired; linting runs via oxlint
+//                          inside `ts-builder check`.
+
+import { removeDep } from "../../engine/api";
+
+export const RETIRED_TOOLCHAIN_DEPS: readonly string[] = [
+  "vite",
+  "tsup",
+  "vue-tsc",
+  "@vitejs/plugin-vue",
+  "vite-plugin-dts",
+  "@platforma-sdk/eslint-config",
+];
+
+/** Drop every retired toolchain dep from the current package.json scope.
+ *  Idempotent (a `removeDep` on an absent key is a no-op), so it is safe to
+ *  call uniformly from every package.json rules body regardless of which deps
+ *  a given scope ever carried. Pairs with the catalog-side removal in
+ *  `rootPnpmWorkspaceRules`. */
+export function removeRetiredToolchainDeps(): void {
+  for (const name of RETIRED_TOOLCHAIN_DEPS) removeDep(name);
+}

package/src/structure/rules/software.ts

@@ -6,7 +6,6 @@
 // `init` and never touched again — the block author owns them.
 
 import { scope, managed, seed, generate, text } from "../engine/api";
-import { getActiveRunContext } from "../engine/builders";
 import { softwarePackageJsonInitial, softwarePackageJsonRules } from "./software-package-json";
 
 const MAIN_PY_SEED = `import sys
@@ -24,7 +23,7 @@ export function softwareRules(): void {
 
     managed(
       "package.json",
-      generate(() => softwarePackageJsonInitial(getActiveRunContext())),
+      generate((ctx) => softwarePackageJsonInitial(ctx)),
       () => {
         softwarePackageJsonRules();
       },

package/src/structure/rules/test-package-json.ts

@@ -7,11 +7,13 @@ import {
   ensureDevDeps,
   ensurePeerDeps,
   removeDep,
+  removeScript,
   enforceAlphabeticalOrder,
   enforceFieldOrder,
   type RunContext,
 } from "../engine/api";
 import { canonicalPackageJsonOrder } from "./shared/key-order";
+import { removeRetiredToolchainDeps } from "./shared/retired-deps";
 
 export function testPackageJsonInitial(ctx: RunContext): Record<string, unknown> {
   const v = ctx.blockVars;
@@ -21,9 +23,9 @@ export function testPackageJsonInitial(ctx: RunContext): Record<string, unknown>
     private: true,
     type: "module",
     scripts: {
-      // Type-only check (no oxlint/oxfmt — the test scope ships no lint/fmt
-      // config). Slots into the turbo `check` task.
-      check: "ts-builder type-check --target block-test",
+      fmt: "ts-builder format",
+      // `ts-builder check` runs type-check + lint (oxlint) + fmt-check (oxfmt).
+      check: "ts-builder check --target block-test",
       test: "vitest run --passWithNoTests",
     },
     peerDependencies: {
@@ -41,12 +43,13 @@ export function testPackageJsonInitial(ctx: RunContext): Record<string, unknown>
 export function testPackageJsonRules(): void {
   ensureField("type", "module");
 
-  // Type-only check (no oxlint/oxfmt — the test scope ships no lint/fmt
-  // config); slots into the turbo `check` task.
-  ensureScript("check", "ts-builder type-check --target block-test");
+  ensureScript("fmt", "ts-builder format");
+  // `ts-builder check` runs type-check + lint (oxlint) + fmt-check (oxfmt).
+  ensureScript("check", "ts-builder check --target block-test");
   ensureScript("test", "vitest run --passWithNoTests");
+  // Linting runs inside `ts-builder check` — no separate `lint` script.
+  removeScript("lint");
 
-  // @platforma-sdk/test is a test-time dep → devDependencies (matches prod).
   ensureDevDeps({
     "@platforma-sdk/test": "sdk:",
     "@milaboratories/ts-builder": "sdk:",
@@ -55,12 +58,12 @@ export function testPackageJsonRules(): void {
   });
 
   // The test tsconfig (@milaboratories/ts-configs/block/test) supplies the
-  // ambient types; only the `typescript` peer is needed. Drop any stray
-  // `@types/node` peer a legacy block declares.
+  // ambient types, so only the `typescript` peer is needed — no `@types/node`.
   ensurePeerDeps({
     typescript: "*",
   });
   removeDep("@types/node");
+  removeRetiredToolchainDeps();
 
   enforceAlphabeticalOrder("dependencies");
   enforceAlphabeticalOrder("devDependencies");

package/src/structure/rules/test.ts

@@ -1,7 +1,6 @@
 // Test-scope rules.
 
 import { scope, fixed, managed, scaffold, seed, file, text, generate } from "../engine/api";
-import { getActiveRunContext } from "../engine/builders";
 import { testPackageJsonInitial, testPackageJsonRules } from "./test-package-json";
 
 export function testRules(): void {
@@ -11,6 +10,10 @@ export function testRules(): void {
     // lets the check pass on a test-less block while `include` still
     // type-checks real tests once present.
     fixed("tsconfig.json", file("test/tsconfig.json"));
+    // Block-local oxlint/oxfmt config — test sources are lint + fmt-checked
+    // (the `check` script runs `ts-builder check --target block-test`).
+    fixed(".oxlintrc.json", file("test/.oxlintrc.json"));
+    fixed(".oxfmtrc.json", file("test/.oxfmtrc.json"));
     // scaffold (not fixed): integration tests legitimately tune timeout /
     // retry per block. Write the canonical default if absent; never
     // overwrite an author's config.
@@ -31,7 +34,7 @@ export function testRules(): void {
 
     managed(
       "package.json",
-      generate(() => testPackageJsonInitial(getActiveRunContext())),
+      generate((ctx) => testPackageJsonInitial(ctx)),
       () => {
         testPackageJsonRules();
       },

package/src/structure/rules/ui-package-json.ts

@@ -26,6 +26,7 @@ import {
 import { scopeDepMap } from "../engine/ctx";
 import { canonicalPackageJsonOrder } from "./shared/key-order";
 import { COLOCATED_TEST_GLOB } from "./shared/colocated-tests";
+import { removeRetiredToolchainDeps } from "./shared/retired-deps";
 
 export function uiPackageJsonInitial(ctx: RunContext): Record<string, unknown> {
   const v = ctx.blockVars;
@@ -52,6 +53,7 @@ export function uiPackageJsonInitial(ctx: RunContext): Record<string, unknown> {
       "@milaboratories/ts-configs": "sdk:",
     },
     peerDependencies: {
+      "@types/node": "*",
       typescript: "*",
     },
   };
@@ -77,33 +79,25 @@ export function uiPackageJsonRules(): void {
     "@milaboratories/ts-configs": "sdk:",
   });
 
-  // `vue-tsc` is owned by `ts-builder` (which runs it internally for
-  // `--target block-ui`), so the ui must NOT declare its own. A direct
-  // `vue-tsc` dep is the vestigial vite/vue-tsc-era artefact: it resolves
-  // independently of the version ts-builder pins, which is how a block ended
-  // up type-checking under a different vue-tsc than the toolchain intends.
-  removeDep("vue-tsc");
-
-  // vite-era artefacts: the canonical ui builds + dev-serves via ts-builder,
-  // so a legacy `vite` dep and the `preview` (vite preview) script are dropped.
-  removeDep("vite");
+  removeRetiredToolchainDeps();
   removeScript("preview");
+  removeScript("lint");
 
-  // The ui builds with `--target block-ui` (types: []), so by default it
-  // carries no browser/vitest/node ambient types — only the `typescript`
-  // peer for IDE type resolution. Drop any stray `@types/node` a legacy
-  // block declares...
+  // `@types/node` is declared as a peer by default — mirrors the model scope
+  // (the block author resolves it from the workspace root). The ui builds with
+  // `--target block-ui` (types: []), so it pulls no node ambient types into the
+  // build; the peer only satisfies IDE / type resolution, alongside `typescript`.
   ensurePeerDeps({
+    "@types/node": "*",
     typescript: "*",
   });
-  removeDep("@types/node");
 
-  // ...but a ui WITH co-located unit tests (`src/**/*.test.ts`) needs the
-  // vitest `test` script, the `vitest` devDep, AND node ambient types: re-add
-  // `@types/node` as a devDep so `types: ["node"]` in ui/tsconfig (wired under
-  // the same predicate) resolves the tests' `node:*` imports. A test-less ui
-  // keeps the lean default (no test script, no vitest, no @types/node) and
-  // stays a fixpoint. Runs AFTER removeDep so the dev deps are not stripped.
+  // A ui WITH co-located unit tests (`src/**/*.test.ts`) needs the vitest
+  // `test` script, the `vitest` devDep, AND node ambient types promoted from
+  // peer to a devDep (the single-section invariant drops the peer) so that
+  // `types: ["node"]` in ui/tsconfig — wired under the same predicate —
+  // resolves the tests' `node:*` imports. A test-less ui keeps `@types/node`
+  // as a peer and carries no vitest, staying a refresh fixpoint.
   //
   // Skipped entirely for sdk-internal (in-monorepo) blocks: they own their test
   // wiring under the monorepo's shared infrastructure — see model-package-json.

package/src/structure/rules/ui.ts

@@ -10,11 +10,9 @@ import {
   file,
   tpl,
   generate,
-  blockVars,
   when,
   whenFilesExist,
 } from "../engine/api";
-import { getActiveRunContext } from "../engine/builders";
 import { uiPackageJsonInitial, uiPackageJsonRules } from "./ui-package-json";
 import { COLOCATED_TEST_GLOB } from "./shared/colocated-tests";
 
@@ -45,16 +43,16 @@ export function uiRules(): void {
     seed("src/main.ts", file("ui/src/main.ts"));
     seed(
       "src/app.ts",
-      tpl("ui/src/app.tpl.ts", () => ({ modelPkg: `${blockVars().facadeName}.model` })),
+      tpl("ui/src/app.tpl.ts", (ctx) => ({ modelPkg: `${ctx.blockVars.facadeName}.model` })),
     );
     seed(
       "src/MainPage.vue",
-      tpl("ui/src/MainPage.tpl.vue", () => ({ shortName: blockVars().shortName })),
+      tpl("ui/src/MainPage.tpl.vue", (ctx) => ({ shortName: ctx.blockVars.shortName })),
     );
 
     managed(
       "package.json",
-      generate(() => uiPackageJsonInitial(getActiveRunContext())),
+      generate((ctx) => uiPackageJsonInitial(ctx)),
       () => {
         uiPackageJsonRules();
       },

package/src/structure/rules/workflow-package-json.ts

@@ -19,6 +19,7 @@ import {
 import { scopeDepMaps } from "../engine/ctx";
 import { canonicalPackageJsonOrder } from "./shared/key-order";
 import { COLOCATED_TEST_GLOB } from "./shared/colocated-tests";
+import { removeRetiredToolchainDeps } from "./shared/retired-deps";
 
 export function workflowPackageJsonInitial(ctx: RunContext): Record<string, unknown> {
   const v = ctx.blockVars;
@@ -55,11 +56,10 @@ export function workflowPackageJsonInitial(ctx: RunContext): Record<string, unkn
 export function workflowPackageJsonRules(): void {
   ensureField("type", "module");
 
-  // No `fmt`: the workflow is Tengo, not TS. Build + check go through
-  // pl-tengo. shx powers the cross-platform build clean-up.
+  // No `fmt` script: the workflow is Tengo, not TS — build + check run via
+  // pl-tengo; `format` runs the emacs-batch Tengo formatter (no-op when absent).
   ensureScript("build", "shx rm -rf dist && pl-tengo build");
   ensureScript("check", "pl-tengo check");
-  // Tengo source formatter (emacs batch); no-op notice when emacs is absent.
   ensureScript("format", "/usr/bin/env emacs --script ./format.el || echo 'No emacs.'");
   // The vitest `test` script AND the `vitest` devDep are wired ONLY when the
   // workflow carries co-located integration tests (`src/**/*.test.ts`, incl.
@@ -98,6 +98,10 @@ export function workflowPackageJsonRules(): void {
     shx: "catalog:",
   });
 
+  // No-op for a canonical Tengo workflow; called uniformly across every scope
+  // for safety.
+  removeRetiredToolchainDeps();
+
   enforceAlphabeticalOrder("dependencies");
   enforceAlphabeticalOrder("devDependencies");
   enforceAlphabeticalOrder("peerDependencies");