@smoothbricks/cli 0.10.5 → 0.10.7

package/dist/monorepo/tool-validation.js

@@ -40,8 +40,7 @@ const rootDevDependencies = [
     },
     { name: 'nx', fallbackVersion: '23.1.0', minimumVersion: '23.1.0' },
     { name: 'prettier', fallbackVersion: '^3.6.1', minimumVersion: '3.6.0', prefix: '^' },
-    // Exact pin: Bun patchedDependencies keys are version-locked (see patches/ttsc@0.19.3.patch).
-    { name: 'ttsc', fallbackVersion: '0.19.3' },
+    { name: 'ttsc', fallbackVersion: '0.25.0' },
     // Nx and typescript-eslint still load the TypeScript JS API (6.x).
     // Compilation is exclusively delegated to ttsc by the Nx plugin targets.
     { name: 'typescript', fallbackVersion: '^6.0.3', minimumVersion: '6.0.0', prefix: '^' },
@@ -56,8 +55,7 @@ const requiredDevenvPackages = ['bun', 'git', 'git-format-staged', 'jq', 'alejan
 // with the runtime is validated against the live PATH (validateRootRuntimeVersions),
 // never against a version template here.
 const nodePackagePattern = /(^|\s)nodejs(_\d+|_latest)?(\s|#|$)/m;
-const TTSC_PATCHED_DEPENDENCY_KEY = 'ttsc@0.19.3';
-const TTSC_PATCH_PATH = 'patches/ttsc@0.19.3.patch';
+const obsoleteTtscPatchedDependencyKey = 'ttsc@0.19.3';
 export async function applyToolConfigDefaults(root) {
     const context = await readToolContext(root);
     await applyRootPackageToolDefaults(root, context);
@@ -67,7 +65,7 @@ export async function applyToolConfigDefaults(root) {
 export async function validateToolConfig(root) {
     const context = await readToolContext(root);
     return (validateRootDevDependencies(context.policy, context.rootPackage) +
-        validateTtscPatchedDependency(context.rootPackage) +
+        validateObsoleteTtscPatchRemoved(context.rootPackage) +
         validateToolingPackage(root, context.policy) +
         validateToolingWorkspace(context.rootPackage) +
         validateDevenvPackages(root));
@@ -89,7 +87,7 @@ export async function applyRootDevDependencyDefaults(root, context) {
     if (delete devDependencies['@smoothbricks/cli']) {
         changed = true;
     }
-    changed = ensureTtscPatchedDependency(pkg) || changed;
+    changed = removeObsoleteTtscPatch(pkg) || changed;
     if (changed) {
         writeJsonObject(join(root, 'package.json'), pkg);
         console.log('updated        package.json workspace tool dependencies');
@@ -105,7 +103,6 @@ async function applyRootPackageToolDefaults(root, context) {
     }
     let dependencyChanged = false;
     let workspaceChanged = false;
-    let patchChanged = false;
     const devDependencies = ensureDependencyMap(pkg, 'devDependencies');
     for (const dependency of rootDevDependencies) {
         const current = devDependencies[dependency.name];
@@ -118,8 +115,8 @@ async function applyRootPackageToolDefaults(root, context) {
         dependencyChanged = true;
     }
     workspaceChanged = addWorkspacePattern(pkg, 'tooling');
-    patchChanged = ensureTtscPatchedDependency(pkg);
-    if (dependencyChanged || workspaceChanged || patchChanged) {
+    dependencyChanged = removeObsoleteTtscPatch(pkg) || dependencyChanged;
+    if (dependencyChanged || workspaceChanged) {
         writeJsonObject(join(root, 'package.json'), pkg);
     }
     console.log(dependencyChanged
@@ -128,9 +125,6 @@ async function applyRootPackageToolDefaults(root, context) {
     console.log(workspaceChanged
         ? 'updated        package.json tooling workspace'
         : 'unchanged      package.json tooling workspace');
-    console.log(patchChanged
-        ? 'updated        package.json patchedDependencies for ttsc'
-        : 'unchanged      package.json patchedDependencies for ttsc');
 }
 export function applyToolingPackageDefaults(root, policy) {
     const path = join(root, 'tooling', 'package.json');
@@ -219,20 +213,23 @@ export function validateRootDevDependencies(policy, rootPackage) {
     }
     return failures;
 }
-function ensureTtscPatchedDependency(pkg) {
-    const patched = ensureDependencyMap(pkg, 'patchedDependencies');
-    return setStringProperty(patched, TTSC_PATCHED_DEPENDENCY_KEY, TTSC_PATCH_PATH);
-}
-function validateTtscPatchedDependency(rootPackage) {
-    if (!rootPackage) {
-        return 0;
+function removeObsoleteTtscPatch(pkg) {
+    const patchedDependencies = pkg.patchedDependencies;
+    if (!patchedDependencies || !(obsoleteTtscPatchedDependencyKey in patchedDependencies)) {
+        return false;
     }
-    const actual = rootPackage.patchedDependencies?.[TTSC_PATCHED_DEPENDENCY_KEY];
-    if (actual === TTSC_PATCH_PATH) {
+    delete patchedDependencies[obsoleteTtscPatchedDependencyKey];
+    if (Object.keys(patchedDependencies).length === 0) {
+        delete pkg.patchedDependencies;
+    }
+    return true;
+}
+function validateObsoleteTtscPatchRemoved(rootPackage) {
+    const patchedDependencies = rootPackage?.patchedDependencies;
+    if (!patchedDependencies || !(obsoleteTtscPatchedDependencyKey in patchedDependencies)) {
         return 0;
     }
-    console.error(`package.json patchedDependencies.${TTSC_PATCHED_DEPENDENCY_KEY} must be ${TTSC_PATCH_PATH}` +
-        (typeof actual === 'string' ? `; found ${actual}` : ' (required for declaration-emit fix)'));
+    console.error(`package.json patchedDependencies.${obsoleteTtscPatchedDependencyKey} must be removed; ttsc 0.25.0 emits typia declarations without the obsolete patch`);
     return 1;
 }
 export function validateToolingPackage(root, policy) {

package/dist/nx/index.d.ts

@@ -1,4 +1,4 @@
-import { type NxProjectJson, type NxTargetConfig } from '../lib/json.js';
+import type { NxProjectJson, NxTargetConfig, NxTargetOptions } from '../lib/json.js';
 export interface ProjectTargets {
     project: string;
     root?: string;
@@ -6,6 +6,7 @@ export interface ProjectTargets {
     buildDependsOn?: string[];
     targetDependencies?: Map<string, string[]>;
     targetExecutors?: Map<string, string>;
+    targetOptions?: Map<string, NxTargetOptions>;
     targetOutputs?: Map<string, string[]>;
     targetScripts?: Map<string, string>;
 }
@@ -14,24 +15,26 @@ export interface CommandInvocation {
     args: string[];
 }
 export declare function nxResetCommand(): CommandInvocation;
-export declare function nxShowProjectCommand(project: string): CommandInvocation;
 export declare function nxCacheDirectories(root: string): string[];
 export declare function targetNamesFromNxProjectJson(value: NxProjectJson | null | undefined): string[];
 export declare function projectRootFromNxProjectJson(value: NxProjectJson | null | undefined): string | undefined;
-export declare function buildDependsOnFromNxProjectJson(value: NxProjectJson | null | undefined): string[] | undefined;
 export declare function targetDependenciesFromNxProjectJson(value: NxProjectJson | null | undefined): Map<string, string[]>;
 export declare function targetExecutorsFromNxProjectJson(value: NxProjectJson | null | undefined): Map<string, string>;
+export declare function targetOptionsFromNxProjectJson(value: NxProjectJson | null | undefined): Map<string, NxTargetOptions>;
 export declare function targetOutputsFromNxProjectJson(value: NxProjectJson | null | undefined): Map<string, string[]>;
 export declare function targetScriptsFromNxProjectJson(value: NxProjectJson | null | undefined): Map<string, string>;
 export declare function formatProjectTargetLines(projects: ProjectTargets[]): string;
 export declare function projectNamesWithTarget(projects: ProjectTargets[], target: string): string[];
-export declare function projectNamesFromNxShowProjectsOutput(output: string): string[];
 export declare function listTargets(root: string): Promise<void>;
 export declare function listProjects(root: string, options: {
     withTarget?: string;
 }): Promise<void>;
 export declare function resetCache(root: string): Promise<void>;
 export declare function cleanCache(root: string): Promise<void>;
+export type NxProjects = Readonly<Record<string, NxProjectJson>>;
+export declare function loadNxProjects(root: string): Promise<NxProjects>;
+export declare function targetNamesFromProjects(projects: NxProjects): string[];
+export declare function projectTargetsFromNxProjects(projects: NxProjects): ProjectTargets[];
 export declare function readProjectTargets(root: string): Promise<ProjectTargets[]>;
 export type { NxProjectJson, NxTargetConfig };
 //# sourceMappingURL=index.d.ts.map

package/dist/nx/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/nx/index.ts"],"names":[],"mappings":"AAIA,OAAO,EAEL,KAAK,aAAa,EAClB,KAAK,cAAc,EAGpB,MAAM,gBAAgB,CAAC;AAGxB,MAAM,WAAW,cAAc;IAC7B,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,cAAc,CAAC,EAAE,MAAM,EAAE,CAAC;IAC1B,kBAAkB,CAAC,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC;IAC3C,eAAe,CAAC,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACtC,aAAa,CAAC,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC;IACtC,aAAa,CAAC,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CACrC;AAED,MAAM,WAAW,iBAAiB;IAChC,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,EAAE,MAAM,EAAE,CAAC;CAChB;AAED,wBAAgB,cAAc,IAAI,iBAAiB,CAElD;AAED,wBAAgB,oBAAoB,CAAC,OAAO,EAAE,MAAM,GAAG,iBAAiB,CAEvE;AAED,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,EAAE,CAEzD;AAED,wBAAgB,4BAA4B,CAAC,KAAK,EAAE,aAAa,GAAG,IAAI,GAAG,SAAS,GAAG,MAAM,EAAE,CAG9F;AAED,wBAAgB,4BAA4B,CAAC,KAAK,EAAE,aAAa,GAAG,IAAI,GAAG,SAAS,GAAG,MAAM,GAAG,SAAS,CAExG;AAED,wBAAgB,+BAA+B,CAAC,KAAK,EAAE,aAAa,GAAG,IAAI,GAAG,SAAS,GAAG,MAAM,EAAE,GAAG,SAAS,CAE7G;AAED,wBAAgB,mCAAmC,CAAC,KAAK,EAAE,aAAa,GAAG,IAAI,GAAG,SAAS,GAAG,GAAG,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC,CAwBlH;AAsBD,wBAAgB,gCAAgC,CAAC,KAAK,EAAE,aAAa,GAAG,IAAI,GAAG,SAAS,GAAG,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,CAY7G;AAED,wBAAgB,8BAA8B,CAAC,KAAK,EAAE,aAAa,GAAG,IAAI,GAAG,SAAS,GAAG,GAAG,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC,CAE7G;AAED,wBAAgB,8BAA8B,CAAC,KAAK,EAAE,aAAa,GAAG,IAAI,GAAG,SAAS,GAAG,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,CAY3G;AA0BD,wBAAgB,wBAAwB,CAAC,QAAQ,EAAE,cAAc,EAAE,GAAG,MAAM,CAK3E;AAED,wBAAgB,sBAAsB,CAAC,QAAQ,EAAE,cAAc,EAAE,EAAE,MAAM,EAAE,MAAM,GAAG,MAAM,EAAE,CAK3F;AAED,wBAAgB,oCAAoC,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,EAAE,CAsB7E;AAED,wBAAsB,WAAW,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAK7D;AAED,wBAAsB,YAAY,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE;IAAE,UAAU,CAAC,EAAE,MAAM,CAAA;CAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAQhG;AAED,wBAAsB,UAAU,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAG5D;AAED,wBAAsB,UAAU,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAa5D;AAED,wBAAsB,kBAAkB,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,cAAc,EAAE,CAAC,CAGhF;AA2BD,YAAY,EAAE,aAAa,EAAE,cAAc,EAAE,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/nx/index.ts"],"names":[],"mappings":"AAMA,OAAO,KAAK,EAAe,aAAa,EAAE,cAAc,EAAE,eAAe,EAAE,MAAM,gBAAgB,CAAC;AAGlG,MAAM,WAAW,cAAc;IAC7B,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,cAAc,CAAC,EAAE,MAAM,EAAE,CAAC;IAC1B,kBAAkB,CAAC,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC;IAC3C,eAAe,CAAC,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACtC,aAAa,CAAC,EAAE,GAAG,CAAC,MAAM,EAAE,eAAe,CAAC,CAAC;IAC7C,aAAa,CAAC,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC;IACtC,aAAa,CAAC,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CACrC;AAED,MAAM,WAAW,iBAAiB;IAChC,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,EAAE,MAAM,EAAE,CAAC;CAChB;AAED,wBAAgB,cAAc,IAAI,iBAAiB,CAElD;AAED,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,EAAE,CAEzD;AAED,wBAAgB,4BAA4B,CAAC,KAAK,EAAE,aAAa,GAAG,IAAI,GAAG,SAAS,GAAG,MAAM,EAAE,CAG9F;AAED,wBAAgB,4BAA4B,CAAC,KAAK,EAAE,aAAa,GAAG,IAAI,GAAG,SAAS,GAAG,MAAM,GAAG,SAAS,CAExG;AAED,wBAAgB,mCAAmC,CAAC,KAAK,EAAE,aAAa,GAAG,IAAI,GAAG,SAAS,GAAG,GAAG,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC,CAwBlH;AAsBD,wBAAgB,gCAAgC,CAAC,KAAK,EAAE,aAAa,GAAG,IAAI,GAAG,SAAS,GAAG,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,CAY7G;AAED,wBAAgB,8BAA8B,CAAC,KAAK,EAAE,aAAa,GAAG,IAAI,GAAG,SAAS,GAAG,GAAG,CAAC,MAAM,EAAE,eAAe,CAAC,CAYpH;AAED,wBAAgB,8BAA8B,CAAC,KAAK,EAAE,aAAa,GAAG,IAAI,GAAG,SAAS,GAAG,GAAG,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC,CAE7G;AAED,wBAAgB,8BAA8B,CAAC,KAAK,EAAE,aAAa,GAAG,IAAI,GAAG,SAAS,GAAG,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,CAY3G;AA0BD,wBAAgB,wBAAwB,CAAC,QAAQ,EAAE,cAAc,EAAE,GAAG,MAAM,CAK3E;AAED,wBAAgB,sBAAsB,CAAC,QAAQ,EAAE,cAAc,EAAE,EAAE,MAAM,EAAE,MAAM,GAAG,MAAM,EAAE,CAK3F;AAED,wBAAsB,WAAW,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAK7D;AAED,wBAAsB,YAAY,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE;IAAE,UAAU,CAAC,EAAE,MAAM,CAAA;CAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAQhG;AAED,wBAAsB,UAAU,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAG5D;AAED,wBAAsB,UAAU,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAa5D;AAED,MAAM,MAAM,UAAU,GAAG,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,aAAa,CAAC,CAAC,CAAC;AASjE,wBAAgB,cAAc,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,CAAC,CAOhE;AAuED,wBAAgB,uBAAuB,CAAC,QAAQ,EAAE,UAAU,GAAG,MAAM,EAAE,CAQtE;AAED,wBAAgB,4BAA4B,CAAC,QAAQ,EAAE,UAAU,GAAG,cAAc,EAAE,CAiBnF;AAED,wBAAsB,kBAAkB,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,cAAc,EAAE,CAAC,CAEhF;AAED,YAAY,EAAE,aAAa,EAAE,cAAc,EAAE,CAAC"}

package/dist/nx/index.js

@@ -1,15 +1,13 @@
 import { existsSync } from 'node:fs';
 import { lstat, rm } from 'node:fs/promises';
 import { join } from 'node:path';
-import { $ } from 'bun';
-import { parseNxProjectJsonText, parseStringArrayText, } from '../lib/json.js';
-import { decode, run } from '../lib/run.js';
+// Nx package exports are CLI-oriented; this is the module the CLI uses for graph + daemon IPC.
+import { createProjectGraphAsync } from 'nx/src/project-graph/project-graph.js';
+import { workspaceRoot as primaryWorkspaceRoot } from 'nx/src/utils/workspace-root.js';
+import { run, runResult } from '../lib/run.js';
 export function nxResetCommand() {
     return { command: 'nx', args: ['reset'] };
 }
-export function nxShowProjectCommand(project) {
-    return { command: 'nx', args: ['show', 'project', project, '--json'] };
-}
 export function nxCacheDirectories(root) {
     return [join(root, '.nx/cache'), join(root, '.nx/workspace-data'), join(root, 'node_modules/.cache/nx')];
 }
@@ -20,9 +18,6 @@ export function targetNamesFromNxProjectJson(value) {
 export function projectRootFromNxProjectJson(value) {
     return typeof value?.root === 'string' ? value.root : undefined;
 }
-export function buildDependsOnFromNxProjectJson(value) {
-    return targetDependenciesFromNxProjectJson(value).get('build');
-}
 export function targetDependenciesFromNxProjectJson(value) {
     const targets = value?.targets;
     const dependencies = new Map();
@@ -79,6 +74,19 @@ export function targetExecutorsFromNxProjectJson(value) {
     }
     return executors;
 }
+export function targetOptionsFromNxProjectJson(value) {
+    const targets = value?.targets;
+    const options = new Map();
+    if (!targets) {
+        return options;
+    }
+    for (const [targetName, target] of Object.entries(targets)) {
+        if (target.options) {
+            options.set(targetName, target.options);
+        }
+    }
+    return options;
+}
 export function targetOutputsFromNxProjectJson(value) {
     return targetStringArraysFromNxProjectJson(value, 'outputs');
 }
@@ -127,28 +135,6 @@ export function projectNamesWithTarget(projects, target) {
         .map((project) => project.project)
         .sort((a, b) => a.localeCompare(b));
 }
-export function projectNamesFromNxShowProjectsOutput(output) {
-    const trimmed = output.trim();
-    if (!trimmed) {
-        return [];
-    }
-    if (trimmed.startsWith('[')) {
-        try {
-            const parsed = parseStringArrayText(trimmed);
-            if (parsed) {
-                return parsed.sort((a, b) => a.localeCompare(b));
-            }
-        }
-        catch {
-            // Fall through to legacy newline parsing for older Nx output shapes.
-        }
-    }
-    return trimmed
-        .split('\n')
-        .map((line) => line.trim())
-        .filter(Boolean)
-        .sort((a, b) => a.localeCompare(b));
-}
 export async function listTargets(root) {
     const output = formatProjectTargetLines(await readProjectTargets(root));
     if (output) {
@@ -182,30 +168,105 @@ export async function cleanCache(root) {
         console.log(`Removed ${path}`);
     }
 }
+/**
+ * Load the resolved project graph through Nx's API. The current workspace uses the
+ * daemon in-process; foreign roots use an isolated process because Nx snapshots its
+ * workspace cache paths when the module loads.
+ */
+let graphLoadTail = Promise.resolve();
+export function loadNxProjects(root) {
+    const result = graphLoadTail.then(() => loadNxProjectsNow(root));
+    graphLoadTail = result.then(() => undefined, () => undefined);
+    return result;
+}
+async function loadNxProjectsNow(root) {
+    if (root !== primaryWorkspaceRoot) {
+        return loadForeignNxProjects(root);
+    }
+    const graph = await createProjectGraphAsync({ exitOnError: false });
+    return nxProjectsFromNodes(graph.nodes);
+}
+const FOREIGN_GRAPH_SCRIPT = `
+import('nx/src/project-graph/project-graph.js')
+  .then(async ({ createProjectGraphAsync }) => {
+    const graph = await createProjectGraphAsync({ exitOnError: false });
+    const projects = Object.fromEntries(
+      Object.entries(graph.nodes).map(([name, node]) => [
+        name,
+        { ...node.data, name: node.data?.name ?? name, targets: node.data?.targets ?? {} },
+      ]),
+    );
+    process.stdout.write(JSON.stringify(projects));
+  })
+  .catch((error) => {
+    console.error(error);
+    process.exitCode = 1;
+  });
+`;
+async function loadForeignNxProjects(root) {
+    const result = await runResult(process.execPath, ['--eval', FOREIGN_GRAPH_SCRIPT], root, {
+        NX_DAEMON: 'false',
+        NX_ISOLATE_PLUGINS: 'false',
+        NX_WORKSPACE_ROOT_PATH: root,
+    });
+    if (result.exitCode !== 0) {
+        throw new Error(`Failed to load Nx project graph for ${root}: ${result.stderr.trim()}`);
+    }
+    const parsed = JSON.parse(result.stdout);
+    if (!isNxProjects(parsed)) {
+        throw new Error(`Nx returned an invalid project graph for ${root}`);
+    }
+    return parsed;
+}
+function nxProjectsFromNodes(nodes) {
+    const projects = {};
+    for (const [name, node] of Object.entries(nodes)) {
+        projects[name] = {
+            ...node.data,
+            name: node.data.name ?? name,
+            targets: node.data.targets ?? {},
+        };
+    }
+    return projects;
+}
+function isNxProjects(value) {
+    if (!isRecord(value))
+        return false;
+    return Object.values(value).every((project) => isRecord(project) &&
+        (project.name === undefined || typeof project.name === 'string') &&
+        (project.root === undefined || typeof project.root === 'string') &&
+        (project.targets === undefined || (isRecord(project.targets) && Object.values(project.targets).every(isRecord))));
+}
+function isRecord(value) {
+    return value !== null && typeof value === 'object' && !Array.isArray(value);
+}
+export function targetNamesFromProjects(projects) {
+    const names = new Set();
+    for (const project of Object.values(projects)) {
+        for (const targetName of targetNamesFromNxProjectJson(project)) {
+            names.add(targetName);
+        }
+    }
+    return [...names];
+}
+export function projectTargetsFromNxProjects(projects) {
+    return Object.entries(projects)
+        .sort(([left], [right]) => left.localeCompare(right))
+        .map(([project, metadata]) => {
+        const targetDependencies = targetDependenciesFromNxProjectJson(metadata);
+        return {
+            project,
+            root: projectRootFromNxProjectJson(metadata),
+            targets: targetNamesFromNxProjectJson(metadata),
+            buildDependsOn: targetDependencies.get('build'),
+            targetDependencies,
+            targetExecutors: targetExecutorsFromNxProjectJson(metadata),
+            targetOptions: targetOptionsFromNxProjectJson(metadata),
+            targetOutputs: targetOutputsFromNxProjectJson(metadata),
+            targetScripts: targetScriptsFromNxProjectJson(metadata),
+        };
+    });
+}
 export async function readProjectTargets(root) {
-    const projects = await readNxProjectNames(root);
-    return Promise.all(projects.map((project) => readProjectTarget(root, project)));
-}
-async function readNxProjectNames(root) {
-    const result = await $ `nx show projects`.cwd(root).quiet();
-    return projectNamesFromNxShowProjectsOutput(decode(result.stdout));
-}
-async function readProjectTarget(root, project) {
-    const command = nxShowProjectCommand(project);
-    const result = await $ `${command.command} ${command.args}`.cwd(root).quiet();
-    const parsed = parseNxProjectJsonText(decode(result.stdout));
-    if (!parsed) {
-        throw new Error(`Unable to inspect Nx project ${project}.`);
-    }
-    const targetDependencies = targetDependenciesFromNxProjectJson(parsed);
-    return {
-        project,
-        root: projectRootFromNxProjectJson(parsed),
-        targets: targetNamesFromNxProjectJson(parsed),
-        buildDependsOn: targetDependencies.get('build'),
-        targetDependencies,
-        targetExecutors: targetExecutorsFromNxProjectJson(parsed),
-        targetOutputs: targetOutputsFromNxProjectJson(parsed),
-        targetScripts: targetScriptsFromNxProjectJson(parsed),
-    };
+    return projectTargetsFromNxProjects(await loadNxProjects(root));
 }

package/managed/raw/tooling/devenv

@@ -0,0 +1,71 @@
+#!/usr/bin/env bash
+# Wrapper script to run devenv from anywhere in the monorepo
+# This allows us to keep all devenv files in tooling/direnv
+
+# Save the current working directory
+ORIGINAL_PWD="$(pwd)"
+SELF_PATH="$(realpath "$0")"
+
+# Find the root of the git repository
+TOOLING_DIR="$(dirname "$SELF_PATH")"
+DEVENV_DIR="$TOOLING_DIR/direnv"
+if [ ! -d "$DEVENV_DIR" ]; then
+    echo "Error: Could not find devenv directory at $DEVENV_DIR" >&2
+    exit 1
+fi
+
+# Find the actual Nix-built devenv binary, skipping every wrapper script.
+# WHY: PATH routinely holds more than one of these wrappers at once — this
+# repo's tooling/devenv, sibling repos' wrappers, and direnv-stacked parent
+# environments. A plain "not equal to SELF_PATH" check happily selects a
+# *different* wrapper and exec's it, so `devenv` bounces into the wrong repo
+# (or self-execs forever on cheap checks like `devenv version`). The real devenv
+# is always the Nix-managed executable under /nix/store, so match that and ignore
+# every wrapper regardless of PATH ordering. (Matching the store path is also more
+# robust than a "is it a binary" test: Nix sometimes ships tools as makeWrapper
+# shell scripts, which are still the correct entry point.)
+DEVENV_BIN=""
+while IFS= read -r candidate; do
+    candidate_path="$(realpath "$candidate")"
+    case "$candidate_path" in
+        /nix/store/*)
+            if [ -f "$candidate_path" ] && [ -x "$candidate_path" ]; then
+                DEVENV_BIN="$candidate_path"
+                break
+            fi
+            ;;
+    esac
+done < <(which -a devenv 2>/dev/null)
+
+if [ -z "$DEVENV_BIN" ]; then
+    echo "Error: Could not find the Nix-built devenv binary (under /nix/store) in PATH" >&2
+    exit 1
+fi
+
+# If we're in a project, just run devenv
+if [ -f devenv.nix ]; then
+  exec "$DEVENV_BIN" "$@"
+fi
+
+# Change to the tooling/direnv directory where devenv files are located
+cd "$DEVENV_DIR" || exit 1
+
+# Export the original directory so enterShell can use it
+export DEVENV_SHELL_PWD="$ORIGINAL_PWD"
+
+# Run the actual devenv command with all arguments passed through.
+# For updates, refresh nvfetcher-managed overlay sources first so packages like
+# jmunch-mcp and jcodemunch-mcp are current before devenv.lock is updated.
+if [ "${1:-}" = "update" ]; then
+    if [ -f "$DEVENV_DIR/nixpkgs-overlay/nvfetcher.toml" ]; then
+      echo "Running nvfetcher for nixpkgs-overlay/..."
+      (cd "$DEVENV_DIR/nixpkgs-overlay" && echo "
+[keys]
+github = \"$(gh auth token)\"
+" > .gh-auth && (nvfetcher -k .gh-auth -o _sources || true) && rm .gh-auth)
+    fi
+
+    exec "$DEVENV_BIN" "$@"
+fi
+
+exec "$DEVENV_BIN" "$@"

package/managed/raw/tooling/direnv/github-actions-bootstrap.sh

@@ -1,8 +1,13 @@
-#!/bin/bash
+#!/usr/bin/env bash
 set -euo pipefail
 
 NIX_STORE_NAR="${NIX_STORE_NAR:-/tmp/nix-store.nar}"
 nix_store_cmd="/nix/var/nix/profiles/default/bin/nix-store"
+DEVENV_FLAKE="${DEVENV_FLAKE:-github:cachix/devenv}"
+# Host CI cache (GARM bind-mount). Prefer env from runner profile.
+# Path comes from the runner (GARM profile). Ephemeral runners leave unset;
+# devenv enterShell defaults to $PWD/.cache/ttsc.
+TTSC_CACHE_DIR="${TTSC_CACHE_DIR:-}"
 # Resolve from this script's location, not the caller's cwd. GitHub Actions
 # runs this from tooling/direnv today, but direct cwd-changing helpers are easy
 # to misuse and break on repeated calls.
@@ -36,12 +41,21 @@ restore_nix_store() {
 }
 
 install_devenv() {
-  sudo mkdir -p /nix/var/nix/gcroots/ci
-  if ! command -v devenv >/dev/null 2>&1; then
-    nix profile add --accept-flake-config nixpkgs#devenv
+  # Shared host /nix/store is the package cache. Image may already provide
+  # devenv from github:cachix/devenv; otherwise profile-add the same flake
+  # (links store paths; re-fetch only when missing).
+  if command -v devenv >/dev/null 2>&1; then
+    echo "using existing devenv: $(command -v devenv) ($(devenv version 2>/dev/null || true))"
+  else
+    echo "nix profile add ${DEVENV_FLAKE}"
+    nix profile add --accept-flake-config "$DEVENV_FLAKE"
+  fi
+  if [ -d "$HOME/.nix-profile/bin" ]; then
+    echo "$HOME/.nix-profile/bin" >> "${GITHUB_PATH:-/dev/null}"
+  fi
+  if [ -n "$TTSC_CACHE_DIR" ]; then
+    mkdir -p "$TTSC_CACHE_DIR"
   fi
-  echo "$HOME/.nix-profile/bin" >> "$GITHUB_PATH"
-  sudo ln -sf "$HOME/.nix-profile" /nix/var/nix/gcroots/ci/profile
 }
 
 build_devenv_shell() {
@@ -50,7 +64,10 @@ build_devenv_shell() {
   # independent workflow step shells that run after this composite action.
   if [ -n "${GITHUB_ENV:-}" ]; then
     echo "TTSC_TSGO_BINARY=$repo_root/node_modules/@typescript/native/bin/tsc" >> "$GITHUB_ENV"
-    echo "TTSC_CACHE_DIR=$repo_root/.cache/ttsc" >> "$GITHUB_ENV"
+    # Only re-export when the runner (or a prior step) already set the path.
+    if [ -n "$TTSC_CACHE_DIR" ]; then
+      echo "TTSC_CACHE_DIR=$TTSC_CACHE_DIR" >> "$GITHUB_ENV"
+    fi
   fi
   # Add repo-local tools only after the shell exists; cleanup steps use an
   # explicit PATH because failures before this point must still refresh caches.

package/managed/templates/github/actions/cache-nix-devenv/action.yml

@@ -1,5 +1,7 @@
 name: Cache Nix profiles, devenv and direnv
-description: Restore cached Nix/devenv state for SmoothBricks GitHub Actions jobs.
+description: >
+  Two independent segments: large nix (NAR/profiles, ephemeral runners only) and small devenv (.devenv/.direnv — eval
+  SQLite, shell scripts, profile; all runners).
 
 inputs:
   segment:
@@ -19,12 +21,11 @@ outputs:
 runs:
   using: composite
   steps:
-    # The large cache is the Nix profile plus exported store NAR. Its key tracks
-    # the expensive shell closure inputs only; tiny direnv/setup script changes
-    # should not invalidate a 1GB+ store cache.
-    - name: Restore Nix profiles, devenv and direnv
+    # Large segment: Nix profile + exported store NAR. Ephemeral runners only.
+    # Key = shell closure inputs; direnv/setup script edits must not bust a multi-GB NAR.
+    - name: Restore Nix profiles and store NAR
       id: restore-nix
-      if: ${{ inputs.segment == 'nix' && inputs.mode == 'restore' }}
+      if: inputs.segment == 'nix' && inputs.mode == 'restore'
       uses: actions/cache/restore@v5.0.5
       with:
         path: |
@@ -39,7 +40,7 @@ runs:
           ${{ runner.os }}-${{ runner.arch }}-nix-v3-
 
     - name: Save Nix profiles and store NAR
-      if: ${{ inputs.segment == 'nix' && inputs.mode == 'save' }}
+      if: inputs.segment == 'nix' && inputs.mode == 'save'
       uses: actions/cache/save@v5.0.5
       with:
         path: |
@@ -51,11 +52,12 @@ runs:
           ${{ runner.os }}-${{ runner.arch }}-nix-v3-${{ hashFiles('tooling/direnv/devenv.yaml',
           'tooling/direnv/devenv.nix', 'tooling/direnv/devenv.lock') }}
 
-    # .devenv/.direnv are small, but they contain absolute /nix/store pointers.
-    # Workflows restore this segment only after an exact Nix cache hit.
+    # Small segment: devenv eval cache (nix-eval-cache.db), shell-*.sh, profile, .direnv.
+    # Own key. Setup restores on every runner; not gated on nix NAR hit. Devenv drops a
+    # shell cache row when drv/out are missing (GC) and re-evals/realizes.
     - name: Restore devenv and direnv state
       id: restore-devenv
-      if: ${{ inputs.segment == 'devenv' && inputs.mode == 'restore' }}
+      if: inputs.segment == 'devenv' && inputs.mode == 'restore'
       uses: actions/cache/restore@v5.0.5
       with:
         path: |
@@ -69,7 +71,7 @@ runs:
           ${{ runner.os }}-${{ runner.arch }}-devenv-v3-
 
     - name: Save devenv and direnv state
-      if: ${{ inputs.segment == 'devenv' && inputs.mode == 'save' }}
+      if: inputs.segment == 'devenv' && inputs.mode == 'save'
       uses: actions/cache/save@v5.0.5
       with:
         path: |

package/managed/templates/github/actions/save-nix-devenv/action.yml

@@ -1,5 +1,7 @@
 name: Save Nix/devenv caches
-description: Cleanup the Nix store and explicitly save Nix/devenv cache segments.
+description: >
+  Save cache segments after the job. Nix store NAR stays ephemeral-only (host uses shared /nix/store). Devenv/direnv
+  eval-cache segment saves on every runner when setup missed and build-shell produced nix-eval-cache.db.
 
 inputs:
   nix-cache-hit:
@@ -14,8 +16,19 @@ inputs:
 runs:
   using: composite
   steps:
+    - name: 🔎 Runner kind
+      id: runner-kind
+      shell: bash
+      run: |
+        if [ "${NIX_REMOTE:-}" = daemon ] && [ -d /var/cache/ci ]; then
+          echo "host=true" >> "$GITHUB_OUTPUT"
+        else
+          echo "host=false" >> "$GITHUB_OUTPUT"
+        fi
+
     - name: 🧹 Prepare Nix/devenv cache save
       id: cleanup-cache
+      if: steps.runner-kind.outputs.host != 'true'
       shell: bash
       working-directory: tooling/direnv
       env:
@@ -33,14 +46,32 @@ runs:
         smoo github-ci cleanup-cache
 
     - name: 🧊 Save Nix profiles and store NAR
-      if: ${{ steps.cleanup-cache.outputs.cache-ready == 'true' && inputs.nix-cache-hit != 'true' }}
+      if:
+        ${{ steps.runner-kind.outputs.host != 'true' && steps.cleanup-cache.outputs.cache-ready == 'true' &&
+        inputs.nix-cache-hit != 'true' }}
       uses: ./.github/actions/cache-nix-devenv
       with:
         segment: nix
         mode: save
 
+    # Devenv segment is independent of nix NAR readiness and host vs ephemeral.
+    # Skip when setup never finished (no eval DB) so if: always() cannot poison
+    # the next restore with an empty/partial key.
+    - name: 🔎 Devenv save ready
+      id: devenv-save
+      if: inputs.devenv-cache-hit != 'true'
+      shell: bash
+      run: |
+        db="${GITHUB_WORKSPACE}/tooling/direnv/.devenv/nix-eval-cache.db"
+        if [[ -f "$db" ]]; then
+          echo "ready=true" >> "$GITHUB_OUTPUT"
+        else
+          echo "ready=false" >> "$GITHUB_OUTPUT"
+          echo "skip devenv save: no nix-eval-cache.db"
+        fi
+
     - name: 🧊 Save devenv and direnv
-      if: ${{ steps.cleanup-cache.outputs.cache-ready == 'true' && inputs.devenv-cache-hit != 'true' }}
+      if: ${{ inputs.devenv-cache-hit != 'true' && steps.devenv-save.outputs.ready == 'true' }}
       uses: ./.github/actions/cache-nix-devenv
       with:
         segment: devenv