@smoothbricks/cli 0.10.2 → 0.10.4

package/managed/templates/github/actions/cache-nix-devenv/action.yml

@@ -33,10 +33,10 @@ runs:
           ~/.local/state/nix/profiles
           ~/.cache/nix
         key:
-          ${{ runner.os }}-nix-v3-${{ hashFiles('tooling/direnv/devenv.yaml', 'tooling/direnv/devenv.nix',
-          'tooling/direnv/devenv.lock') }}
+          ${{ runner.os }}-${{ runner.arch }}-nix-v3-${{ hashFiles('tooling/direnv/devenv.yaml',
+          'tooling/direnv/devenv.nix', 'tooling/direnv/devenv.lock') }}
         restore-keys: |
-          ${{ runner.os }}-nix-v3-
+          ${{ runner.os }}-${{ runner.arch }}-nix-v3-
 
     - name: Save Nix profiles and store NAR
       if: ${{ inputs.segment == 'nix' && inputs.mode == 'save' }}
@@ -48,8 +48,8 @@ runs:
           ~/.local/state/nix/profiles
           ~/.cache/nix
         key:
-          ${{ runner.os }}-nix-v3-${{ hashFiles('tooling/direnv/devenv.yaml', 'tooling/direnv/devenv.nix',
-          'tooling/direnv/devenv.lock') }}
+          ${{ runner.os }}-${{ runner.arch }}-nix-v3-${{ hashFiles('tooling/direnv/devenv.yaml',
+          'tooling/direnv/devenv.nix', 'tooling/direnv/devenv.lock') }}
 
     # .devenv/.direnv are small, but they contain absolute /nix/store pointers.
     # Workflows restore this segment only after an exact Nix cache hit.
@@ -62,10 +62,11 @@ runs:
           ${{ github.workspace }}/tooling/direnv/.devenv
           ${{ github.workspace }}/tooling/direnv/.direnv
         key:
-          ${{ runner.os }}-devenv-v3-${{ hashFiles('tooling/direnv/devenv.yaml', 'tooling/direnv/devenv.nix',
-          'tooling/direnv/devenv.lock', 'tooling/direnv/envrc.sh', 'tooling/direnv/setup-environment.ts') }}
+          ${{ runner.os }}-${{ runner.arch }}-devenv-v3-${{ hashFiles('tooling/direnv/devenv.yaml',
+          'tooling/direnv/devenv.nix', 'tooling/direnv/devenv.lock', 'tooling/direnv/envrc.sh',
+          'tooling/direnv/setup-environment.ts') }}
         restore-keys: |
-          ${{ runner.os }}-devenv-v3-
+          ${{ runner.os }}-${{ runner.arch }}-devenv-v3-
 
     - name: Save devenv and direnv state
       if: ${{ inputs.segment == 'devenv' && inputs.mode == 'save' }}
@@ -75,5 +76,6 @@ runs:
           ${{ github.workspace }}/tooling/direnv/.devenv
           ${{ github.workspace }}/tooling/direnv/.direnv
         key:
-          ${{ runner.os }}-devenv-v3-${{ hashFiles('tooling/direnv/devenv.yaml', 'tooling/direnv/devenv.nix',
-          'tooling/direnv/devenv.lock', 'tooling/direnv/envrc.sh', 'tooling/direnv/setup-environment.ts') }}
+          ${{ runner.os }}-${{ runner.arch }}-devenv-v3-${{ hashFiles('tooling/direnv/devenv.yaml',
+          'tooling/direnv/devenv.nix', 'tooling/direnv/devenv.lock', 'tooling/direnv/envrc.sh',
+          'tooling/direnv/setup-environment.ts') }}

package/managed/templates/github/actions/cache-node-modules/action.yml

@@ -7,7 +7,11 @@ runs:
     - name: Cache node_modules
       uses: actions/cache@v5.0.5
       with:
+        # Dependencies only. ttsc plugin/GOCACHE live under $TTSC_CACHE_DIR
+        # (.cache/ttsc), not inside node_modules.
+        # v2 isolates restore-keys from older Darwin caches with a broken TS dual-package hoist.
         path: node_modules
-        key: ${{ runner.os }}-node-{{NODE_MODULES_CACHE_KEY}}
+        # prettier-ignore
+        key: ${{ runner.os }}-${{ runner.arch }}-node-v2-{{NODE_MODULES_CACHE_KEY}}
         restore-keys: |
-          ${{ runner.os }}-node-
+          ${{ runner.os }}-${{ runner.arch }}-node-v2-

package/managed/templates/github/actions/cache-nx/action.yml

@@ -16,6 +16,6 @@ runs:
         path: |
           .nx/cache
           .nx/workspace-data/*.db*
-        key: ${{ runner.os }}-nx-db-v1-${{ github.sha }}
+        key: ${{ runner.os }}-${{ runner.arch }}-nx-db-v1-${{ github.sha }}
         restore-keys: |
-          ${{ runner.os }}-nx-db-v1-
+          ${{ runner.os }}-${{ runner.arch }}-nx-db-v1-

package/managed/templates/github/actions/cache-ttsc-plugins/action.yml

@@ -0,0 +1,19 @@
+name: Cache ttsc plugins
+description: >
+  Restore/save compiled ttsc native plugin binaries (typia, etc.). These are content-keyed under TTSC_CACHE_DIR/plugins
+  and skip the multi-minute `go build` when the cache key matches. The Go object cache (go-build/) is NOT cached — it is
+  multi-GB and only helps when the plugin key misses.
+
+runs:
+  using: composite
+  steps:
+    - name: Cache ttsc plugin binaries
+      uses: actions/cache@v5.0.5
+      with:
+        # Only the compiled plugin binaries (~30MB each). Path is relative to the
+        # workspace; devenv sets TTSC_CACHE_DIR to <repo>/.cache/ttsc.
+        path: .cache/ttsc/plugins
+        # prettier-ignore
+        key: ${{ runner.os }}-${{ runner.arch }}-ttsc-plugins-v1-${{ hashFiles('bun.lock', 'package.json', 'patches/ttsc@*.patch', 'tooling/direnv/devenv.lock') }}
+        restore-keys: |
+          ${{ runner.os }}-${{ runner.arch }}-ttsc-plugins-v1-

package/managed/templates/github/actions/save-nix-devenv/action.yml

@@ -14,13 +14,21 @@ inputs:
 runs:
   using: composite
   steps:
-    - name: 🧹 Cleanup and cache Nix store
+    - name: 🧹 Prepare Nix/devenv cache save
       id: cleanup-cache
       shell: bash
       working-directory: tooling/direnv
-      # build-shell normally adds repo paths to GITHUB_PATH, but this cleanup
-      # must still run when build-shell fails before that happens.
+      env:
+        NIX_CACHE_HIT: ${{ inputs.nix-cache-hit }}
+      # An exact Nix cache hit is immutable and cannot be overwritten by
+      # actions/cache. Avoid rebuilding its ~2 GB NAR just to discard it.
+      # build-shell normally adds repo paths to GITHUB_PATH, but cleanup must
+      # still run after a cache miss when build-shell fails before that happens.
       run: |
+        if [[ "$NIX_CACHE_HIT" == 'true' ]]; then
+          echo 'cache-ready=true' >> "$GITHUB_OUTPUT"
+          exit 0
+        fi
         export PATH="$(../../tooling/direnv/repo-path)"
         smoo github-ci cleanup-cache
 

package/managed/templates/github/actions/setup-devenv/action.yml

@@ -51,6 +51,11 @@ runs:
     - name: 📦 Cache node_modules
       uses: ./.github/actions/cache-node-modules
 
+    # Restores compiled ttsc native plugins into .cache/ttsc/plugins. TTSC_CACHE_DIR
+    # is set by devenv enterShell (+ bootstrap GITHUB_ENV for later steps).
+    - name: 🧊 Cache ttsc plugins
+      uses: ./.github/actions/cache-ttsc-plugins
+
     - name: 🐚 Build devenv shell
       shell: bash
       working-directory: tooling/direnv

package/managed/templates/github/workflows/managed-files.yml

@@ -0,0 +1,80 @@
+# Managed by @smoothbricks/cli (smoo monorepo update) - do not edit by hand.
+#
+# Self-healing loop for smoo-managed files: ci.yml runs the authoritative
+# `smoo monorepo check` on every default-branch push (devenv is already up
+# there, so the check is ~free) and dispatches THIS workflow only when real
+# drift exists - typically after a @smoothbricks/cli pin bump. It runs
+# `smoo monorepo update` and pushes the result to ONE persistent review branch
+# (chore/managed-files) with ONE PR. The PR is NEVER auto-merged: a template
+# change is upstream code that deserves a human look before it lands. Re-runs
+# refresh the same branch in place.
+#
+# NOTE: managed files include .github/workflows/*, and the default GITHUB_TOKEN
+# is server-side forbidden to push workflow-file changes. Configure a GitHub App
+# or PAT token with contents:write + workflows:write as MANAGED_FILES_TOKEN;
+# without it, runs that touch workflow files fail at push with a clear error.
+name: Managed files
+
+on:
+  workflow_dispatch:
+
+permissions:
+  contents: write
+  pull-requests: write
+
+concurrency:
+  group: managed-files
+  cancel-in-progress: true
+
+defaults:
+  run:
+    working-directory: tooling/direnv
+
+jobs:
+  update:
+    runs-on: ubuntu-latest
+    timeout-minutes: 30
+    steps:
+      - name: 📥 Checkout
+        uses: actions/checkout@v6.0.2
+        with:
+          filter: blob:none
+          fetch-depth: 0
+          persist-credentials: true
+          token: ${{ secrets.MANAGED_FILES_TOKEN || github.token }}
+
+      - name: 🧱 Setup Nix/devenv
+        id: setup
+        uses: ./.github/actions/setup-devenv
+
+      - name: 🔄 Regenerate managed files
+        run: smoo monorepo update
+
+      - name: 📤 Push review branch and open PR
+        env:
+          GH_TOKEN: ${{ secrets.MANAGED_FILES_TOKEN || github.token }}
+        run: |
+          cd "$(git rev-parse --show-toplevel)"
+          if [ -z "$(git status --porcelain)" ]; then
+            echo "Managed files are in sync; nothing to do."
+            exit 0
+          fi
+          git config user.name "github-actions[bot]"
+          git config user.email "41898282+github-actions[bot]@users.noreply.github.com"
+          git switch -C chore/managed-files
+          git add -A
+          git commit -m "chore: regenerate smoo-managed files"
+          git push --force origin chore/managed-files
+          gh pr create \
+            --head chore/managed-files \
+            --base "${GITHUB_REF_NAME}" \
+            --title "chore: regenerate smoo-managed files" \
+            --body "Automated refresh of smoo-managed files after drift (usually a @smoothbricks/cli pin bump). One persistent PR; re-runs force-push this branch in place. Review the template changes - do NOT enable auto-merge." \
+            2>/dev/null || echo "PR already open; branch refreshed in place."
+
+      - name: 🧹 Cleanup and cache Nix/devenv
+        if: ${{ always() }}
+        uses: ./.github/actions/save-nix-devenv
+        with:
+          nix-cache-hit: ${{ steps.setup.outputs.nix-cache-hit }}
+          devenv-cache-hit: ${{ steps.setup.outputs.devenv-cache-hit }}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@smoothbricks/cli",
-  "version": "0.10.2",
+  "version": "0.10.4",
   "type": "module",
   "description": "SmoothBricks monorepo automation CLI",
   "bin": {
@@ -20,6 +20,13 @@
       "import": "./dist/index.js",
       "default": "./dist/index.js"
     },
+    "./bun/preload": {
+      "types": "./dist/bun/preload.d.ts",
+      "bun": "./src/bun/preload.ts",
+      "development": "./src/bun/preload.ts",
+      "import": "./dist/bun/preload.js",
+      "default": "./dist/bun/preload.js"
+    },
     "./monorepo/runtime": {
       "types": "./dist/monorepo/runtime.d.ts",
       "bun": "./src/monorepo/runtime.ts",
@@ -42,6 +49,10 @@
       "default": "./dist/wrangler/prepare-env.js"
     }
   },
+  "sideEffects": [
+    "./dist/bun/preload.js",
+    "./src/bun/preload.ts"
+  ],
   "files": [
     "README.md",
     "bin",
@@ -52,14 +63,17 @@
   ],
   "dependencies": {
     "@arethetypeswrong/core": "^0.18.2",
-    "@smoothbricks/nx-plugin": "0.3.1",
-    "@smoothbricks/validation": "0.1.2",
+    "@prettier/sync": "^0.6.1",
+    "@smoothbricks/nx-plugin": "0.3.3",
+    "@smoothbricks/validation": "0.1.4",
     "commander": "^14.0.3",
+    "prettier": "^3.6.1",
     "publint": "^0.3.18",
     "semver": "^7.7.4",
     "sherif": "^1.11.1",
     "toml-eslint-parser": "^1.0.3",
-    "tslib": "^2.8.1"
+    "tslib": "^2.8.1",
+    "typia": "13.1.19"
   },
   "devDependencies": {
     "fast-check": "^4.4.0"

package/src/bun/preload.ts

@@ -0,0 +1,12 @@
+/**
+ * Bun runtime preload for consumers of `@smoothbricks/cli`.
+ *
+ * Re-exports the Typia/ttsc transform preload from `@smoothbricks/validation`.
+ * External repos depend on the CLI package only — they must not need a direct
+ * `@smoothbricks/validation` dependency just to run `smoo` against source.
+ *
+ * Usage:
+ *   import '@smoothbricks/cli/bun/preload';
+ *   // or bunfig.toml: preload = ["@smoothbricks/cli/bun/preload"]
+ */
+import '@smoothbricks/validation/bun/preload';

package/src/cli.ts

@@ -61,10 +61,13 @@ function buildProgram(): Command {
     const { updateManagedFiles } = await import('./monorepo/index.js');
     updateManagedFiles(await findRepoRoot());
   });
-  monorepo.command('check').action(async () => {
-    const { checkManagedFiles } = await import('./monorepo/index.js');
-    checkManagedFiles(await findRepoRoot());
-  });
+  monorepo
+    .command('check')
+    .option('--warn', 'report drift as warnings (GitHub annotations) instead of failing')
+    .action(async (options: { warn?: boolean }) => {
+      const { checkManagedFiles } = await import('./monorepo/index.js');
+      checkManagedFiles(await findRepoRoot(), { warn: options.warn });
+    });
   monorepo.command('diff').action(async () => {
     const { diffManagedFiles } = await import('./monorepo/index.js');
     diffManagedFiles(await findRepoRoot());
@@ -78,10 +81,19 @@ function buildProgram(): Command {
     });
   monorepo
     .command('sync-bun-lockfile-versions')
-    .option('--stage', 'stage bun.lock when versions were resynced (pre-commit self-heal); quiet when clean')
-    .action(async (options: { stage?: boolean }) => {
+    .option('--stage', 'stage bun.lock when versions were resynced; quiet when clean')
+    .option(
+      '--mode <mode>',
+      'install: match package.json (CI); publish: map unpublished -next to last stable tag (pre-pack)',
+      'publish',
+    )
+    .action(async (options: { stage?: boolean; mode?: 'install' | 'publish' }) => {
       const { syncBunLockfileVersions } = await import('./monorepo/index.js');
-      syncBunLockfileVersions(await findRepoRoot(), options.stage ? { log: false, stage: true } : {});
+      const mode = options.mode === 'install' ? 'install' : 'publish';
+      syncBunLockfileVersions(await findRepoRoot(), {
+        mode,
+        ...(options.stage ? { log: false, stage: true } : {}),
+      });
     });
   monorepo
     .command('list-release-packages')
@@ -147,10 +159,25 @@ function buildProgram(): Command {
     .command('repair-pending')
     .description('Repair incomplete older release commits before releasing the current HEAD')
     .option('--dry-run [dryRun]', 'run without pushing, publishing, or writing GitHub Releases')
-    .action(async (options: { dryRun?: string | boolean }) => {
+    .option('--ref <ref>', 'fixed release graph ref to inspect')
+    .option('--platform-outputs <path>', 'cross-platform repair outputs grouped by release SHA')
+    .action(async (options: { dryRun?: string | boolean; platformOutputs?: string; ref?: string }) => {
+      // The source self-hosting shim has no Typia transform; release commands import transformed output validators.
       const { releaseRepairPending } = await import('./release/index.js');
       await releaseRepairPending(await findRepoRoot(), { ...options, dryRun: booleanOption(options.dryRun) });
     });
+  release
+    .command('build-platform-outputs')
+    .description('Build selected current and pending-release platform outputs')
+    .requiredOption('--bump <bump>', 'auto, patch, minor, major, or prerelease')
+    .requiredOption('--targets <targets>', 'comma-separated Nx platform target names or globs')
+    .requiredOption('--output <path>', 'output directory for current and repair artifacts')
+    .option('--ref <ref>', 'fixed release graph ref to inspect')
+    .action(async (options: { bump: string; output: string; ref?: string; targets: string }) => {
+      // The source self-hosting shim has no Typia transform; release commands import transformed output validators.
+      const { releaseCollectPlatformOutputs } = await import('./release/index.js');
+      await releaseCollectPlatformOutputs(await findRepoRoot(), options);
+    });
   release
     .command('version')
     .option('--bump <bump>', 'auto, patch, minor, major, or prerelease', 'auto')
@@ -322,9 +349,20 @@ function buildProgram(): Command {
     .requiredOption('--targets <targets>')
     .option('--projects <projects>')
     .option('--configuration <configuration>')
-    .action(async (options: { targets: string; projects?: string; configuration?: string }) => {
-      const { githubCiNxRunMany } = await import('./github-ci/index.js');
-      await githubCiNxRunMany(await findRepoRoot(), options);
+    .option('--collect-outputs <directory>')
+    .action(
+      async (options: { targets: string; projects?: string; configuration?: string; collectOutputs?: string }) => {
+        const { githubCiNxRunMany } = await import('./github-ci/index.js');
+        await githubCiNxRunMany(await findRepoRoot(), options);
+      },
+    );
+  githubCi
+    .command('apply-outputs <directories...>')
+    .requiredOption('--source-sha <sha>', 'expected source commit SHA')
+    .action(async (directories: string[], options: { sourceSha: string }) => {
+      // GitHub CI commands stay lazy so source self-hosting can initialize Typia only at manifest boundaries.
+      const { githubCiApplyOutputs } = await import('./github-ci/index.js');
+      await githubCiApplyOutputs(await findRepoRoot(), directories, options.sourceSha);
     });
   githubCi
     .command('nx-deploy')

package/src/generate/index.ts

@@ -42,12 +42,6 @@ export const variants: Record<string, GenerateVariant> = {
     args: (name) => ['--name', name, '--variant', 'ts-lib'],
     options: [{ flag: '--public', description: 'configure for npm publication' }],
   },
-  'ts-zig': {
-    generator: 'create-package',
-    description: 'Create a TypeScript + Zig/WASM hybrid package',
-    args: (name) => ['--name', name, '--variant', 'ts-zig'],
-    options: [{ flag: '--public', description: 'configure for npm publication' }],
-  },
   'make-public': {
     generator: 'make-public',
     description: 'Promote a private package to npm publication',