@smoothbricks/cli 0.10.3 → 0.10.5

package/dist/monorepo/packed-package.js

@@ -4,7 +4,8 @@ import { dirname, join, relative } from 'node:path';
 import { fileURLToPath, pathToFileURL } from 'node:url';
 import { publint } from 'publint';
 import { formatMessage } from 'publint/utils';
-import { isRecord } from '../lib/json.js';
+import typia from 'typia';
+import { parsePackageJsonText } from '../lib/json.js';
 import { printCommandOutput, runResult } from '../lib/run.js';
 import { listPublicPackages } from '../lib/workspace.js';
 import { readPackedPackageJson, validatePackedWorkspaceDependencies } from './packed-manifest.js';
@@ -60,7 +61,7 @@ async function validatePublint(_root, pkg, packed) {
 async function validatePackedManifest(root, pkg, packed) {
     let failures = 0;
     const packedPackage = await readPackedPackageJson(root, packed.path, pkg.name);
-    for (const message of validatePackedWorkspaceDependencies(root, pkg, packedPackage)) {
+    for (const message of validatePackedWorkspaceDependencies(root, pkg, packedPackage, { mode: 'install' })) {
         console.error(message);
         failures++;
     }
@@ -71,11 +72,10 @@ async function validateAttw(root, pkg, packed) {
     const analysis = await attw.checkPackage(await createAttwPackageFromTarball(attw, root, packed.path), {
         excludeEntrypoints: nonJsExportEntrypoints(pkg.json.exports),
     });
-    if (!isRecord(analysis) || analysis.types === false) {
+    if (!isAttwAnalysis(analysis) || analysis.types === false) {
         return 0;
     }
-    const rawProblems = Array.isArray(analysis.problems) ? analysis.problems : [];
-    const problems = rawProblems.filter(isReportedAttwProblem);
+    const problems = (analysis.problems ?? []).filter(isReportedAttwProblem);
     if (problems.length === 0) {
         return 0;
     }
@@ -85,10 +85,22 @@ async function validateAttw(root, pkg, packed) {
     console.error(`${pkg.path}: are-the-types-wrong validation failed`);
     return 1;
 }
+const isAttwAnalysis = (() => {
+    const _io0 = input => true && (undefined === input.problems || Array.isArray(input.problems));
+    return input => "object" === typeof input && null !== input && false === Array.isArray(input) && _io0(input);
+})();
+const isAttwProblem = (() => {
+    const _io0 = input => "string" === typeof input.kind && (undefined === input.resolutionKind || "string" === typeof input.resolutionKind) && (undefined === input.entrypoint || "string" === typeof input.entrypoint);
+    return input => "object" === typeof input && null !== input && _io0(input);
+})();
+const isAttwCoreExport = (() => {
+    const _io0 = input => true && true;
+    return input => "object" === typeof input && null !== input && false === Array.isArray(input) && _io0(input);
+})();
 async function loadAttwCore() {
     const packageJson = fileURLToPath(import.meta.resolve('@arethetypeswrong/core/package.json'));
     const core = await import(pathToFileURL(join(dirname(packageJson), 'dist', 'index.js')).href);
-    if (!isRecord(core)) {
+    if (!isAttwCoreExport(core)) {
         throw new Error('@arethetypeswrong/core does not expose the expected API');
     }
     const PackageConstructor = core.Package;
@@ -117,8 +129,8 @@ async function createAttwPackageFromTarball(attw, root, tarballPath) {
 }
 function createAttwPackageFromDirectory(attw, packageDir) {
     const packageJson = readJsonFile(join(packageDir, 'package.json'));
-    const packageName = typeof packageJson.name === 'string' ? packageJson.name : null;
-    const packageVersion = typeof packageJson.version === 'string' ? packageJson.version : null;
+    const packageName = packageJson.name;
+    const packageVersion = packageJson.version;
     if (!packageName || !packageVersion) {
         throw new Error('packed package.json must contain name and version');
     }
@@ -142,14 +154,14 @@ function collectAttwFiles(root, current, packageName, files) {
     }
 }
 function readJsonFile(path) {
-    const parsed = JSON.parse(readFileSync(path, 'utf8'));
-    if (!isRecord(parsed)) {
+    const parsed = parsePackageJsonText(readFileSync(path, 'utf8'));
+    if (!parsed) {
         throw new Error(`${path} is not a JSON object`);
     }
     return parsed;
 }
 function isReportedAttwProblem(problem) {
-    if (!isRecord(problem) || typeof problem.kind !== 'string') {
+    if (!isAttwProblem(problem)) {
         return false;
     }
     const flag = attwProblemFlag(problem.kind);
@@ -189,9 +201,6 @@ function attwProblemFlag(kind) {
     }
 }
 function formatProblemLocation(problem) {
-    if (!isRecord(problem)) {
-        return '';
-    }
     const entrypoint = typeof problem.entrypoint === 'string' ? ` ${problem.entrypoint}` : '';
     const resolution = typeof problem.resolutionKind === 'string' ? ` ${formatResolutionKind(problem.resolutionKind)}` : '';
     return `${entrypoint}${resolution}`;
@@ -206,7 +215,7 @@ function formatResolutionKind(kind) {
     return kind;
 }
 function nonJsExportEntrypoints(exports) {
-    if (!isRecord(exports)) {
+    if (exports === null || exports === undefined || typeof exports === 'string') {
         return [];
     }
     return Object.entries(exports)
@@ -219,7 +228,10 @@ function exportPointsToNonJs(value) {
         // Existence of the target files is still validated by publint.
         return value.endsWith('.wasm') || value.endsWith('.css');
     }
-    return isRecord(value) && Object.values(value).some(exportPointsToNonJs);
+    if (value === null || value === undefined) {
+        return false;
+    }
+    return Object.values(value).some(exportPointsToNonJs);
 }
 async function packPackage(root, pkg) {
     const packageDir = join(root, pkg.path);

package/dist/monorepo/packs/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/monorepo/packs/index.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,KAAK,cAAc,EAAsB,MAAM,mBAAmB,CAAC;AAK5E,OAAO,EAKL,KAAK,sBAAsB,EAO5B,MAAM,sBAAsB,CAAC;AAU9B,MAAM,WAAW,eAAe;IAC9B,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,OAAO,CAAC;IACrB,OAAO,CAAC,EAAE,OAAO,CAAC;CACnB;AAED,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,GAAG,CAAC,EAAE,OAAO,CAAC;IACd,OAAO,CAAC,EAAE,OAAO,CAAC;CACnB;AAED,MAAM,WAAW,YAAY;IAC3B,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,CAAC,CAAC,GAAG,EAAE,eAAe,GAAG,OAAO,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;IAClD,WAAW,CAAC,CAAC,GAAG,EAAE,eAAe,GAAG,OAAO,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;IACzD,YAAY,CAAC,CAAC,GAAG,EAAE,eAAe,GAAG,OAAO,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;IAC1D,gBAAgB,CAAC,CAAC,GAAG,EAAE,eAAe,GAAG,OAAO,CAAC,MAAM,CAAC,GAAG,MAAM,CAAC;IAClE,iBAAiB,CAAC,CAAC,GAAG,EAAE,eAAe,GAAG,OAAO,CAAC,MAAM,CAAC,GAAG,MAAM,CAAC;CACpE;AAED,MAAM,WAAW,oBAAoB;IACnC,KAAK,CAAC,EAAE,SAAS,YAAY,EAAE,CAAC;IAChC,QAAQ,CAAC,EAAE,CAAC,GAAG,EAAE,eAAe,EAAE,OAAO,CAAC,EAAE,mBAAmB,KAAK,OAAO,CAAC,MAAM,CAAC,GAAG,MAAM,CAAC;CAC9F;AAED,MAAM,WAAW,kBAAkB;IACjC,QAAQ,EAAE,MAAM,CAAC;IACjB,YAAY,EAAE,MAAM,CAAC;CACtB;AA4GD,wBAAsB,YAAY,CAAC,GAAG,EAAE,eAAe,GAAG,OAAO,CAAC,IAAI,CAAC,CAItE;AAED,wBAAsB,gBAAgB,CACpC,GAAG,EAAE,eAAe,EACpB,OAAO,GAAE,mBAAwB,EACjC,KAAK,GAAE,oBAAyB,GAC/B,OAAO,CAAC,kBAAkB,CAAC,CA0B7B;AAuMD,wBAAgB,wBAAwB,CAAC,QAAQ,EAAE,cAAc,EAAE,GAAG,GAAG,CAAC,MAAM,EAAE,sBAAsB,CAAC,CAaxG"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/monorepo/packs/index.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,KAAK,cAAc,EAAsB,MAAM,mBAAmB,CAAC;AAK5E,OAAO,EAKL,KAAK,sBAAsB,EAO5B,MAAM,sBAAsB,CAAC;AAU9B,MAAM,WAAW,eAAe;IAC9B,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,OAAO,CAAC;IACrB,OAAO,CAAC,EAAE,OAAO,CAAC;CACnB;AAED,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,GAAG,CAAC,EAAE,OAAO,CAAC;IACd,OAAO,CAAC,EAAE,OAAO,CAAC;CACnB;AAED,MAAM,WAAW,YAAY;IAC3B,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,CAAC,CAAC,GAAG,EAAE,eAAe,GAAG,OAAO,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;IAClD,WAAW,CAAC,CAAC,GAAG,EAAE,eAAe,GAAG,OAAO,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;IACzD,YAAY,CAAC,CAAC,GAAG,EAAE,eAAe,GAAG,OAAO,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;IAC1D,gBAAgB,CAAC,CAAC,GAAG,EAAE,eAAe,GAAG,OAAO,CAAC,MAAM,CAAC,GAAG,MAAM,CAAC;IAClE,iBAAiB,CAAC,CAAC,GAAG,EAAE,eAAe,GAAG,OAAO,CAAC,MAAM,CAAC,GAAG,MAAM,CAAC;CACpE;AAED,MAAM,WAAW,oBAAoB;IACnC,KAAK,CAAC,EAAE,SAAS,YAAY,EAAE,CAAC;IAChC,QAAQ,CAAC,EAAE,CAAC,GAAG,EAAE,eAAe,EAAE,OAAO,CAAC,EAAE,mBAAmB,KAAK,OAAO,CAAC,MAAM,CAAC,GAAG,MAAM,CAAC;CAC9F;AAED,MAAM,WAAW,kBAAkB;IACjC,QAAQ,EAAE,MAAM,CAAC;IACjB,YAAY,EAAE,MAAM,CAAC;CACtB;AAqHD,wBAAsB,YAAY,CAAC,GAAG,EAAE,eAAe,GAAG,OAAO,CAAC,IAAI,CAAC,CAItE;AAED,wBAAsB,gBAAgB,CACpC,GAAG,EAAE,eAAe,EACpB,OAAO,GAAE,mBAAwB,EACjC,KAAK,GAAE,oBAAyB,GAC/B,OAAO,CAAC,kBAAkB,CAAC,CA0B7B;AAuMD,wBAAgB,wBAAwB,CAAC,QAAQ,EAAE,cAAc,EAAE,GAAG,GAAG,CAAC,MAAM,EAAE,sBAAsB,CAAC,CAaxG"}

package/dist/monorepo/packs/index.js

@@ -3,12 +3,12 @@ import { join } from 'node:path';
 import { printCommandOutput, runResult, runStatus } from '../../lib/run.js';
 import { readProjectTargets } from '../../nx/index.js';
 import { syncBunLockfileVersions, validateBunLockfileVersions } from '../lockfile.js';
-import { validateManagedFiles } from '../managed-files.js';
+import { warnOnManagedFileDrift } from '../managed-files.js';
 import { fixNxSync, validateNxSync } from '../nx-sync.js';
 import { fixPackageHygiene, validatePackageHygiene } from '../package-hygiene.js';
 import { applyFixableMonorepoDefaults, applyNxReleaseDefaults, applyPublicPackageDefaults, applyWorkspaceDependencyDefaults, validateNxProjectNames, validateNxReleaseConfig, validatePublicPackageMetadata, validatePublicTags, validateRootPackagePolicy, validateWorkspaceDependencies, } from '../package-policy.js';
 import { validatePackedPublicPackageManifest, validatePackedPublicPackagePublint, validatePackedPublicPackageTypes, } from '../packed-package.js';
-import { syncRootRuntimeVersions } from '../runtime.js';
+import { syncRootRuntimeVersions, validateRootRuntimeVersions } from '../runtime.js';
 import { applyToolConfigDefaults, validateToolConfig } from '../tool-validation.js';
 import { applyWranglerDefaults, validateWrangler } from '../wrangler.js';
 const packs = [
@@ -27,14 +27,23 @@ const packs = [
         async fixPreBuild(ctx) {
             applyFixableMonorepoDefaults(ctx.root);
             await applyToolConfigDefaults(ctx.root);
-            syncBunLockfileVersions(ctx.root);
+            // Install/CI alignment only — do not rewrite -next to stable tags here.
+            syncBunLockfileVersions(ctx.root, { mode: 'install' });
             await fixNxSync(ctx.root, ctx.verbose === true);
             applyWorkspaceDependencyDefaults(ctx.root, { resolvedTargetsByProject: await readResolvedTargetsByProject(ctx) });
         },
         async validatePreBuild(ctx) {
-            return (validateManagedFiles(ctx.root) +
+            // Runtime pins validate against the live PATH runtimes (devenv shell),
+            // never a stored template — outside devenv the PATH is not authoritative,
+            // mirroring the init-time syncRuntime gate above.
+            const runtimeFailures = ctx.syncRuntime ? await validateRootRuntimeVersions(ctx.root) : 0;
+            // Managed-file drift is derived state (CLI template x pinned version) with
+            // its own remediation flow; it warns instead of failing so validation only
+            // blocks on actual package issues. See warnOnManagedFileDrift.
+            warnOnManagedFileDrift(ctx.root);
+            return (runtimeFailures +
                 validateRootPackagePolicy(ctx.root) +
-                validateToolConfig(ctx.root) +
+                (await validateToolConfig(ctx.root)) +
                 validateNxProjectNames(ctx.root) +
                 validateNxReleaseConfig(ctx.root) +
                 validateBunLockfileVersions(ctx.root) +

package/dist/monorepo/publish-workflow.js

@@ -326,7 +326,9 @@ function yamlLinesForStep(step, options) {
                 '          "$GITHUB_OUTPUT"',
             ];
         case PublishWorkflowStepKind.CheckManagedMonorepoFiles:
-            return conditionalRunStep(step, 'smoo monorepo check');
+            // Drift is derived state with its own remediation PR; publishing only
+            // blocks on actual package issues (smoo monorepo validate).
+            return conditionalRunStep(step, 'smoo monorepo check --warn');
         case PublishWorkflowStepKind.Build:
             return conditionalRunStep(step, `smoo github-ci nx-run-many --targets build --projects "${githubExpression('steps.version.outputs.projects')}"`);
         case PublishWorkflowStepKind.Lint:

package/dist/monorepo/runtime.d.ts

@@ -1,4 +1,19 @@
+import { type PackageJson } from '../lib/json.js';
+export interface RuntimeVersions {
+    node: string;
+    bun: string;
+}
+/** Live runtime versions from the shell PATH — the single source sync AND validate derive from. */
+export declare function runtimeVersionsFromPath(root: string): Promise<RuntimeVersions>;
 export declare function syncRootRuntimeVersions(root: string): Promise<void>;
+/**
+ * Validate that package.json runtime pins agree with the LIVE PATH runtimes,
+ * never a stored template. Offline by design: structural alignment only
+ * (majors, exact bun pin, no `~major.0.0` floor) — the registry is not
+ * consulted. Repair: `smoo monorepo init --runtime-only` inside the devenv shell.
+ */
+export declare function validateRootRuntimeVersions(root: string): Promise<number>;
+export declare function validateRuntimePins(packageJson: PackageJson, runtime: RuntimeVersions): number;
 type RuntimeTypesPinMode = 'major' | 'exact';
 export declare function runtimeTypesRangeForPublishedVersions(packageName: string, runtimeVersion: string, pinMode: RuntimeTypesPinMode, versions: readonly string[]): string;
 export {};

package/dist/monorepo/runtime.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"runtime.d.ts","sourceRoot":"","sources":["../../src/monorepo/runtime.ts"],"names":[],"mappings":"AAKA,wBAAsB,uBAAuB,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAqCzE;AAED,KAAK,mBAAmB,GAAG,OAAO,GAAG,OAAO,CAAC;AAgB7C,wBAAgB,qCAAqC,CACnD,WAAW,EAAE,MAAM,EACnB,cAAc,EAAE,MAAM,EACtB,OAAO,EAAE,mBAAmB,EAC5B,QAAQ,EAAE,SAAS,MAAM,EAAE,GAC1B,MAAM,CAsBR"}
+{"version":3,"file":"runtime.d.ts","sourceRoot":"","sources":["../../src/monorepo/runtime.ts"],"names":[],"mappings":"AAGA,OAAO,EAGL,KAAK,WAAW,EAMjB,MAAM,gBAAgB,CAAC;AAExB,MAAM,WAAW,eAAe;IAC9B,IAAI,EAAE,MAAM,CAAC;IACb,GAAG,EAAE,MAAM,CAAC;CACb;AAED,mGAAmG;AACnG,wBAAsB,uBAAuB,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,eAAe,CAAC,CAOpF;AAED,wBAAsB,uBAAuB,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAkCzE;AAED;;;;;GAKG;AACH,wBAAsB,2BAA2B,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAO/E;AAED,wBAAgB,mBAAmB,CAAC,WAAW,EAAE,WAAW,EAAE,OAAO,EAAE,eAAe,GAAG,MAAM,CAmC9F;AAED,KAAK,mBAAmB,GAAG,OAAO,GAAG,OAAO,CAAC;AAgB7C,wBAAgB,qCAAqC,CACnD,WAAW,EAAE,MAAM,EACnB,cAAc,EAAE,MAAM,EACtB,OAAO,EAAE,mBAAmB,EAC5B,QAAQ,EAAE,SAAS,MAAM,EAAE,GAC1B,MAAM,CA2BR"}

package/dist/monorepo/runtime.js

@@ -1,26 +1,32 @@
 import { existsSync } from 'node:fs';
 import { join } from 'node:path';
 import { $ } from 'bun';
-import { getOrCreateRecord, readJsonObject, setStringProperty, writeJsonObject } from '../lib/json.js';
+import { ensureDependencyMap, ensureEngines, parseStringArrayText, readJsonObject, setPackageStringField, setStringProperty, writeJsonObject, } from '../lib/json.js';
+/** Live runtime versions from the shell PATH — the single source sync AND validate derive from. */
+export async function runtimeVersionsFromPath(root) {
+    const node = runtimeCommand(root, 'node');
+    const bun = runtimeCommand(root, 'bun');
+    return {
+        node: (await $ `${node} --version`.cwd(root).text()).trim().replace(/^v/, ''),
+        bun: (await $ `${bun} --version`.cwd(root).text()).trim(),
+    };
+}
 export async function syncRootRuntimeVersions(root) {
     const packageJsonPath = join(root, 'package.json');
     const packageJson = readJsonObject(packageJsonPath);
     if (!packageJson) {
         throw new Error('package.json not found or invalid');
     }
-    const node = runtimeCommand(root, 'node');
-    const bun = runtimeCommand(root, 'bun');
-    const nodeVersion = (await $ `${node} --version`.cwd(root).text()).trim().replace(/^v/, '');
-    const bunVersion = (await $ `${bun} --version`.cwd(root).text()).trim();
+    const { node: nodeVersion, bun: bunVersion } = await runtimeVersionsFromPath(root);
     const nodeMajor = nodeVersion.split('.', 1)[0];
     if (!nodeMajor) {
         throw new Error(`Unable to derive Node major version from ${nodeVersion}`);
     }
     let changed = false;
-    const engines = getOrCreateRecord(packageJson, 'engines');
+    const engines = ensureEngines(packageJson);
     changed = setStringProperty(engines, 'node', `>=${nodeMajor}.0.0`) || changed;
-    changed = setStringProperty(packageJson, 'packageManager', `bun@${bunVersion}`) || changed;
-    const devDependencies = getOrCreateRecord(packageJson, 'devDependencies');
+    changed = setPackageStringField(packageJson, 'packageManager', `bun@${bunVersion}`) || changed;
+    const devDependencies = ensureDependencyMap(packageJson, 'devDependencies');
     changed =
         setStringProperty(devDependencies, '@types/node', await runtimeTypesRange(root, '@types/node', nodeVersion, 'major')) || changed;
     changed =
@@ -30,10 +36,53 @@ export async function syncRootRuntimeVersions(root) {
         console.log('updated        package.json runtime versions');
     }
 }
+/**
+ * Validate that package.json runtime pins agree with the LIVE PATH runtimes,
+ * never a stored template. Offline by design: structural alignment only
+ * (majors, exact bun pin, no `~major.0.0` floor) — the registry is not
+ * consulted. Repair: `smoo monorepo init --runtime-only` inside the devenv shell.
+ */
+export async function validateRootRuntimeVersions(root) {
+    const packageJson = readJsonObject(join(root, 'package.json'));
+    if (!packageJson) {
+        console.error('package.json not found or invalid');
+        return 1;
+    }
+    return validateRuntimePins(packageJson, await runtimeVersionsFromPath(root));
+}
+export function validateRuntimePins(packageJson, runtime) {
+    const nodeMajor = runtime.node.split('.', 1)[0];
+    if (!nodeMajor) {
+        throw new Error(`Unable to derive Node major version from ${runtime.node}`);
+    }
+    let failures = 0;
+    const repair = 'run `smoo monorepo init --runtime-only` inside the devenv shell';
+    const enginesNode = packageJson.engines?.node ?? null;
+    if (enginesNode !== `>=${nodeMajor}.0.0`) {
+        console.error(`package.json engines.node is ${enginesNode ?? 'missing'} but the PATH node is v${runtime.node} — expected >=${nodeMajor}.0.0; ${repair}`);
+        failures++;
+    }
+    const packageManager = packageJson.packageManager ?? null;
+    if (packageManager !== `bun@${runtime.bun}`) {
+        console.error(`package.json packageManager is ${packageManager ?? 'missing'} but the PATH bun is ${runtime.bun} — expected bun@${runtime.bun}; ${repair}`);
+        failures++;
+    }
+    const typesNode = packageJson.devDependencies?.['@types/node'] ?? null;
+    const typesNodeParts = typesNode ? /^~(\d+)\.(\d+)\.(\d+)$/.exec(typesNode) : null;
+    if (!typesNodeParts || typesNodeParts[1] !== nodeMajor) {
+        console.error(`package.json @types/node is ${typesNode ?? 'missing'} but the PATH node is v${runtime.node} — types track the runtime major (~${nodeMajor}.x.y, newest published minor); ${repair}`);
+        failures++;
+    }
+    else if (typesNodeParts[2] === '0' && typesNodeParts[3] === '0') {
+        console.error(`package.json @types/node is pinned to the ~${nodeMajor}.0.0 floor — tilde locks the first patch line and strands the repo on early broken releases; ${repair} to repin to the newest published ${nodeMajor}.x`);
+        failures++;
+    }
+    return failures;
+}
 async function runtimeTypesRange(root, packageName, runtimeVersion, pinMode) {
     const versionsText = await $ `bun pm view ${packageName} versions --json`.cwd(root).text();
-    const versions = JSON.parse(versionsText);
-    if (!Array.isArray(versions) || !versions.every((version) => typeof version === 'string')) {
+    const versions = parseStringArrayText(versionsText);
+    if (!versions) {
         throw new Error(`Unable to read published ${packageName} versions`);
     }
     return runtimeTypesRangeForPublishedVersions(packageName, runtimeVersion, pinMode, versions);
@@ -45,8 +94,13 @@ export function runtimeTypesRangeForPublishedVersions(packageName, runtimeVersio
     }
     if (pinMode === 'major') {
         const runtimeMajor = parsedRuntimeVersion[0].toString();
-        if (latestVersion(versions.filter((version) => versionMajor(version) === runtimeMajor))) {
-            return `~${runtimeMajor}.0.0`;
+        // Newest published types WITHIN the runtime major — never the `~major.0.0`
+        // floor: tilde locks the patch line, so the floor can strand consumers on a
+        // broken early release (e.g. @types/node 24.0.x's URLPattern/DOM TS2403
+        // conflict, fixed in 24.13) with no path to the repaired minors.
+        const latestInMajor = latestVersion(versions.filter((version) => versionMajor(version) === runtimeMajor));
+        if (latestInMajor) {
+            return `~${latestInMajor}`;
         }
     }
     else if (versions.includes(runtimeVersion)) {

package/dist/monorepo/tool-validation.d.ts

@@ -9,7 +9,7 @@ export interface ToolContext {
     policy: ToolPolicy;
 }
 export declare function applyToolConfigDefaults(root: string): Promise<void>;
-export declare function validateToolConfig(root: string): number;
+export declare function validateToolConfig(root: string): Promise<number>;
 export declare function applyRootDevDependencyDefaults(root: string, context: ToolContext): Promise<void>;
 export declare function applyToolingPackageDefaults(root: string, policy: ToolPolicy): void;
 export declare function applyToolingWorkspaceDefault(root: string): void;
@@ -18,5 +18,5 @@ export declare function validateRootDevDependencies(policy: ToolPolicy, rootPack
 export declare function validateToolingPackage(root: string, policy: ToolPolicy): number;
 export declare function validateToolingWorkspace(rootPackage: PackageJson | null): number;
 export declare function validateDevenvPackages(root: string): number;
-export declare function readToolContext(root: string): ToolContext;
+export declare function readToolContext(root: string): Promise<ToolContext>;
 //# sourceMappingURL=tool-validation.d.ts.map

package/dist/monorepo/tool-validation.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"tool-validation.d.ts","sourceRoot":"","sources":["../../src/monorepo/tool-validation.ts"],"names":[],"mappings":"AAIA,OAAO,EAAE,KAAK,WAAW,EAAyB,MAAM,qBAAqB,CAAC;AAU9E,MAAM,WAAW,UAAU;IACzB,sBAAsB,EAAE,OAAO,CAAC;IAChC,kBAAkB,EAAE,MAAM,CAAC;IAC3B,kBAAkB,EAAE,MAAM,CAAC;CAC5B;AAED,MAAM,WAAW,WAAW;IAC1B,WAAW,EAAE,WAAW,GAAG,IAAI,CAAC;IAChC,MAAM,EAAE,UAAU,CAAC;CACpB;AAiCD,wBAAsB,uBAAuB,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAKzE;AAED,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAQvD;AAED,wBAAsB,8BAA8B,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC,CAuBtG;AAoCD,wBAAgB,2BAA2B,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,UAAU,GAAG,IAAI,CAkBlF;AAED,wBAAgB,4BAA4B,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAY/D;AAED,wBAAgB,0BAA0B,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CA0B7D;AAED,wBAAgB,2BAA2B,CAAC,MAAM,EAAE,UAAU,EAAE,WAAW,EAAE,WAAW,GAAG,IAAI,GAAG,MAAM,CAyBvG;AAED,wBAAgB,sBAAsB,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,UAAU,GAAG,MAAM,CAoB/E;AAED,wBAAgB,wBAAwB,CAAC,WAAW,EAAE,WAAW,GAAG,IAAI,GAAG,MAAM,CAWhF;AAED,wBAAgB,sBAAsB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAmB3D;AA0DD,wBAAgB,eAAe,CAAC,IAAI,EAAE,MAAM,GAAG,WAAW,CAQzD"}
+{"version":3,"file":"tool-validation.d.ts","sourceRoot":"","sources":["../../src/monorepo/tool-validation.ts"],"names":[],"mappings":"AAWA,OAAO,EAAE,KAAK,WAAW,EAAyB,MAAM,qBAAqB,CAAC;AAU9E,MAAM,WAAW,UAAU;IACzB,sBAAsB,EAAE,OAAO,CAAC;IAChC,kBAAkB,EAAE,MAAM,CAAC;IAC3B,kBAAkB,EAAE,MAAM,CAAC;CAC5B;AAED,MAAM,WAAW,WAAW;IAC1B,WAAW,EAAE,WAAW,GAAG,IAAI,CAAC;IAChC,MAAM,EAAE,UAAU,CAAC;CACpB;AAkDD,wBAAsB,uBAAuB,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAKzE;AAED,wBAAsB,kBAAkB,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAStE;AAED,wBAAsB,8BAA8B,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC,CAwBtG;AA2CD,wBAAgB,2BAA2B,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,UAAU,GAAG,IAAI,CAkBlF;AAED,wBAAgB,4BAA4B,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAY/D;AAED,wBAAgB,0BAA0B,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CA0B7D;AAED,wBAAgB,2BAA2B,CAAC,MAAM,EAAE,UAAU,EAAE,WAAW,EAAE,WAAW,GAAG,IAAI,GAAG,MAAM,CAyBvG;AAsBD,wBAAgB,sBAAsB,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,UAAU,GAAG,MAAM,CAoB/E;AAED,wBAAgB,wBAAwB,CAAC,WAAW,EAAE,WAAW,GAAG,IAAI,GAAG,MAAM,CAWhF;AAED,wBAAgB,sBAAsB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAqB3D;AAsED,wBAAsB,eAAe,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,WAAW,CAAC,CAQxE"}