@smoothbricks/cli 0.10.5 → 0.10.7

package/src/monorepo/publish-workflow.ts

@@ -7,6 +7,7 @@ import {
 } from '@smoothbricks/nx-plugin/workspace-config-policy';
 import type { Options as PrettierOptions } from 'prettier';
 import { isSmoothBricksCodebasePackageName } from '../lib/cli-package.js';
+import { renderRunsOnLine, type WorkflowRunsOn } from './github-runs-on.js';
 
 const PUBLISH_WORKFLOW_FORMAT_OPTIONS = Object.freeze({
   parser: 'yaml',
@@ -55,6 +56,8 @@ export interface PublishWorkflowDefinitionOptions {
   deployProvider?: 'cloudflare';
   repoName?: string;
   platformTargetGlobs?: readonly string[];
+  /** Linux jobs only. Default ubuntu-latest. Same smoo.github.runsOn as CI. */
+  runsOn?: WorkflowRunsOn;
 }
 
 export interface PublishWorkflowInputs {
@@ -441,7 +444,8 @@ function yamlLinesForStep(step: PublishWorkflowStep, options: PublishWorkflowDef
     case PublishWorkflowStepKind.UploadTraceDbs:
       return [
         `      - name: ${step.name}`,
-        `        if: ${githubExpression('failure()')}`,
+        '        # Default is success(); failure() uploads traces only when the job already failed.',
+        '        if: failure()',
         '        uses: actions/upload-artifact@v7.0.1',
         '        with:',
         `          name: trace-results-${githubExpression('github.run_id')}`,
@@ -465,7 +469,8 @@ function yamlLinesForStep(step: PublishWorkflowStep, options: PublishWorkflowDef
     case PublishWorkflowStepKind.SaveNixDevenv:
       return [
         `      - name: ${step.name}`,
-        `        if: ${githubExpression('always()')}`,
+        '        # success() is default; always() still saves GH Nix cache after a red job.',
+        '        if: always()',
         '        uses: ./.github/actions/save-nix-devenv',
         '        with:',
         `          nix-cache-hit: ${githubExpression('steps.setup.outputs.nix-cache-hit')}`,
@@ -498,7 +503,7 @@ function deployEnvLines(options: PublishWorkflowDefinitionOptions): string[] {
 
 function conditionalRunStep(step: PublishWorkflowStep, run: string): string[] {
   const condition = "steps.version.outputs.mode != 'none'";
-  return [`      - name: ${step.name}`, `        if: ${githubExpression(condition)}`, `        run: ${run}`];
+  return [`      - name: ${step.name}`, `        if: ${condition}`, `        run: ${run}`];
 }
 
 function renderSingleJobPublishWorkflowSteps(
@@ -514,7 +519,7 @@ function renderSingleJobPublishWorkflowSteps(
     if (step.kind === PublishWorkflowStepKind.Build) {
       lines.push(
         '      - name: 🐧 Build supplemental Linux targets',
-        `        if: ${githubExpression("steps.version.outputs.mode != 'none'")}`,
+        "        if: steps.version.outputs.mode != 'none'",
         `        run: smoo github-ci nx-run-many --targets "${LINUX_PLATFORM_TARGET_GLOBS.join(',')}" --projects "${githubExpression(
           'steps.version.outputs.projects',
         )}"`,
@@ -566,7 +571,7 @@ defaults:
 
 jobs:
   linux-release-candidate:
-    runs-on: ubuntu-latest
+${renderRunsOnLine(options.runsOn)}
     permissions:
       contents: write
       id-token: none
@@ -642,7 +647,7 @@ function renderLinuxReleaseCandidateSteps(
     } else if (step.kind === PublishWorkflowStepKind.Build) {
       lines.push(
         `      - name: ${step.name}`,
-        `        if: ${githubExpression("steps.version.outputs.mode != 'none'")}`,
+        "        if: steps.version.outputs.mode != 'none'",
         '        run:',
         `          smoo github-ci nx-run-many --targets build --projects "${githubExpression(
           'steps.version.outputs.projects',
@@ -667,7 +672,7 @@ function renderLinuxReleaseCandidateSteps(
         '',
         `      # Step ${stepNumber}`,
         '      - name: 🐧 Build supplemental Linux targets',
-        `        if: ${githubExpression("steps.version.outputs.mode != 'none'")}`,
+        "        if: steps.version.outputs.mode != 'none'",
         '        run:',
         `          smoo github-ci nx-run-many --targets "${LINUX_PLATFORM_TARGET_GLOBS.join(
           ',',
@@ -700,7 +705,7 @@ function renderLinuxReleaseCandidateSteps(
     '',
     `      # Step ${stepNumber++}`,
     '      - name: 📤 Upload validated build outputs',
-    `        if: ${githubExpression("steps.version.outputs.mode != 'none'")}`,
+    "        if: steps.version.outputs.mode != 'none'",
     '        uses: actions/upload-artifact@v7.0.1',
     '        with:',
     `          name: publish-release-outputs-${githubExpression('github.run_id')}`,
@@ -714,7 +719,7 @@ function renderLinuxReleaseCandidateSteps(
       '',
       `      # Step ${stepNumber++}`,
       '      - name: 📤 Upload supplemental Linux outputs',
-      `        if: ${githubExpression("steps.version.outputs.mode != 'none'")}`,
+      "        if: steps.version.outputs.mode != 'none'",
       '        uses: actions/upload-artifact@v7.0.1',
       '        with:',
       `          name: publish-linux-outputs-${githubExpression('github.run_id')}`,
@@ -730,7 +735,8 @@ function renderLinuxReleaseCandidateSteps(
     '',
     `      # Step ${stepNumber}`,
     '      - name: 🧹 Cleanup and cache Nix/devenv',
-    `        if: ${githubExpression('always()')}`,
+    '        # success() is default; always() still saves GH Nix cache after a red job.',
+    '        if: always()',
     '        uses: ./.github/actions/save-nix-devenv',
     '        with:',
     `          nix-cache-hit: ${githubExpression('steps.setup.outputs.nix-cache-hit')}`,
@@ -779,6 +785,11 @@ function renderMacosPlatformSteps(options: PublishWorkflowDefinitionOptions): st
     `          "${githubExpression('runner.temp')}/macos-platform-outputs"`,
     '',
     `      # Step ${stepNumber++}`,
+    '      - name: 🧪 Unit test macOS and iOS packages',
+    '        run:',
+    `          smoo github-ci nx-run-many --targets test --projects-with-targets "${MACOS_PLATFORM_TARGET_GLOBS.join(',')}"`,
+    '',
+    `      # Step ${stepNumber++}`,
     '      - name: 📤 Upload macOS platform outputs',
     '        uses: actions/upload-artifact@v7.0.1',
     '        with:',
@@ -792,7 +803,8 @@ function renderMacosPlatformSteps(options: PublishWorkflowDefinitionOptions): st
     '',
     `      # Step ${stepNumber}`,
     '      - name: 🧹 Cleanup and cache Nix/devenv',
-    `        if: ${githubExpression('always()')}`,
+    '        # success() is default; always() still saves GH Nix cache after a red job.',
+    '        if: always()',
     '        uses: ./.github/actions/save-nix-devenv',
     '        with:',
     `          nix-cache-hit: ${githubExpression('steps.setup.outputs.nix-cache-hit')}`,
@@ -876,7 +888,7 @@ function renderFinalLinuxPublishSteps(options: PublishWorkflowDefinitionOptions)
     '',
     `      # Step ${stepNumber++}`,
     '      - name: 📦 Apply verified Linux outputs',
-    `        if: ${githubExpression(`${mode} != 'none'`)}`,
+    `        if: ${mode} != 'none'`,
     '        run:',
     `          smoo github-ci apply-outputs --source-sha "${githubExpression(
       'needs.linux-release-candidate.outputs.release-sha',
@@ -896,7 +908,7 @@ function renderFinalLinuxPublishSteps(options: PublishWorkflowDefinitionOptions)
     '',
     `      # Step ${stepNumber++}`,
     '      - name: 🍎 Apply verified macOS outputs',
-    `        if: ${githubExpression(`${mode} != 'none'`)}`,
+    `        if: ${mode} != 'none'`,
     '        run:',
     `          smoo github-ci apply-outputs --source-sha "${githubExpression('github.sha')}"`,
     `          "${githubExpression('runner.temp')}/publish-artifacts/publish-macos-outputs-${githubExpression(
@@ -905,7 +917,7 @@ function renderFinalLinuxPublishSteps(options: PublishWorkflowDefinitionOptions)
     '',
     `      # Step ${stepNumber++}`,
     `      - name: ✅ Validate restored release (${githubExpression(mode)})`,
-    `        if: ${githubExpression(`${mode} != 'none'`)}`,
+    `        if: ${mode} != 'none'`,
     '        run: smoo monorepo validate',
     '',
     '      # --- Release ------------------------------------------------------------',
@@ -937,7 +949,8 @@ function renderFinalLinuxPublishSteps(options: PublishWorkflowDefinitionOptions)
     '',
     `      # Step ${stepNumber}`,
     '      - name: 🧹 Cleanup and cache Nix/devenv',
-    `        if: ${githubExpression('always()')}`,
+    '        # success() is default; always() still saves GH Nix cache after a red job.',
+    '        if: always()',
     '        uses: ./.github/actions/save-nix-devenv',
     '        with:',
     `          nix-cache-hit: ${githubExpression('steps.setup.outputs.nix-cache-hit')}`,

package/src/monorepo/runtime.test.ts

@@ -3,16 +3,16 @@ import type { PackageJson } from '../lib/json.js';
 import { runtimeTypesRangeForPublishedVersions, validateRuntimePins } from './runtime.js';
 
 describe('runtimeTypesRangeForPublishedVersions', () => {
-  test('uses the newest published minor within the installed Node major, never the ~major.0.0 floor', () => {
+  test('anchors a caret range at the newest published version in the installed Node major', () => {
     expect(
       runtimeTypesRangeForPublishedVersions('@types/node', '24.12.0', 'major', ['24.0.0', '24.12.4', '25.9.1']),
-    ).toBe('~24.12.4');
+    ).toBe('^24.12.4');
   });
 
-  test('falls back to latest published @types/node when the Node major is unpublished', () => {
-    expect(
+  test('rejects fallback types from a different Node major', () => {
+    expect(() =>
       runtimeTypesRangeForPublishedVersions('@types/node', '26.0.0', 'major', ['24.12.4', '25.9.0', '25.9.1']),
-    ).toBe('~25.9.1');
+    ).toThrow('runtime major 26');
   });
 
   test('uses the installed Bun version when @types/bun has published it', () => {
@@ -23,10 +23,10 @@ describe('runtimeTypesRangeForPublishedVersions', () => {
     expect(runtimeTypesRangeForPublishedVersions('@types/bun', '1.3.15', 'exact', ['1.3.13', '1.3.14'])).toBe('1.3.14');
   });
 
-  test('ignores non-stable version strings when choosing the fallback', () => {
-    expect(runtimeTypesRangeForPublishedVersions('@types/node', '26.0.0', 'major', ['25.9.1', '26.0.0-beta.1'])).toBe(
-      '~25.9.1',
-    );
+  test('ignores non-stable version strings when choosing the same-major anchor', () => {
+    expect(
+      runtimeTypesRangeForPublishedVersions('@types/node', '26.0.0', 'major', ['25.9.1', '26.0.2', '26.1.0-beta.1']),
+    ).toBe('^26.0.2');
   });
 });
 
@@ -35,23 +35,29 @@ describe('validateRuntimePins', () => {
   const aligned = () => ({
     engines: { node: '>=24.0.0' },
     packageManager: 'bun@1.3.14',
-    devDependencies: { '@types/node': '~24.13.0' },
+    devDependencies: { '@types/node': '^24.13.0' },
   });
 
-  test('passes when every pin agrees with the PATH runtimes', () => {
-    expect(validateRuntimePins(aligned(), runtime)).toBe(0);
+  test('accepts caret ranges anchored at any patch or minor in the PATH Node major', () => {
+    for (const version of ['^24.0.3', '^24.13.0']) {
+      const pkg = aligned();
+      pkg.devDependencies['@types/node'] = version;
+      expect(validateRuntimePins(pkg, runtime)).toBe(0);
+    }
   });
 
   test('fails when @types/node tracks a different major than the PATH node', () => {
     const pkg = aligned();
-    pkg.devDependencies['@types/node'] = '~26.1.1';
+    pkg.devDependencies['@types/node'] = '^26.1.1';
     expect(validateRuntimePins(pkg, runtime)).toBe(1);
   });
 
-  test('fails the ~major.0.0 floor pin even when the major matches', () => {
-    const pkg = aligned();
-    pkg.devDependencies['@types/node'] = '~24.0.0';
-    expect(validateRuntimePins(pkg, runtime)).toBe(1);
+  test('rejects exact and tilde @types/node pins even when the major matches', () => {
+    for (const version of ['24.13.0', '~24.13.0']) {
+      const pkg = aligned();
+      pkg.devDependencies['@types/node'] = version;
+      expect(validateRuntimePins(pkg, runtime)).toBe(1);
+    }
   });
 
   test('fails engines.node and packageManager drift against the PATH runtimes', () => {

package/src/monorepo/runtime.ts

@@ -66,8 +66,8 @@ export async function syncRootRuntimeVersions(root: string): Promise<void> {
 /**
  * Validate that package.json runtime pins agree with the LIVE PATH runtimes,
  * never a stored template. Offline by design: structural alignment only
- * (majors, exact bun pin, no `~major.0.0` floor) — the registry is not
- * consulted. Repair: `smoo monorepo init --runtime-only` inside the devenv shell.
+ * (Node types float within the runtime major; Bun types stay exact) — the registry
+ * is not consulted. Repair: `smoo monorepo init --runtime-only` inside the devenv shell.
  */
 export async function validateRootRuntimeVersions(root: string): Promise<number> {
   const packageJson = readJsonObject(join(root, 'package.json'));
@@ -100,15 +100,10 @@ export function validateRuntimePins(packageJson: PackageJson, runtime: RuntimeVe
     failures++;
   }
   const typesNode = packageJson.devDependencies?.['@types/node'] ?? null;
-  const typesNodeParts = typesNode ? /^~(\d+)\.(\d+)\.(\d+)$/.exec(typesNode) : null;
+  const typesNodeParts = typesNode ? /^\^(\d+)\.(\d+)\.(\d+)$/.exec(typesNode) : null;
   if (!typesNodeParts || typesNodeParts[1] !== nodeMajor) {
     console.error(
-      `package.json @types/node is ${typesNode ?? 'missing'} but the PATH node is v${runtime.node} — types track the runtime major (~${nodeMajor}.x.y, newest published minor); ${repair}`,
-    );
-    failures++;
-  } else if (typesNodeParts[2] === '0' && typesNodeParts[3] === '0') {
-    console.error(
-      `package.json @types/node is pinned to the ~${nodeMajor}.0.0 floor — tilde locks the first patch line and strands the repo on early broken releases; ${repair} to repin to the newest published ${nodeMajor}.x`,
+      `package.json @types/node is ${typesNode ?? 'missing'} but the PATH node is v${runtime.node} — expected a caret range within the runtime major (^${nodeMajor}.x.y); ${repair}`,
     );
     failures++;
   }
@@ -144,15 +139,15 @@ export function runtimeTypesRangeForPublishedVersions(
 
   if (pinMode === 'major') {
     const runtimeMajor = parsedRuntimeVersion[0].toString();
-    // Newest published types WITHIN the runtime major — never the `~major.0.0`
-    // floor: tilde locks the patch line, so the floor can strand consumers on a
-    // broken early release (e.g. @types/node 24.0.x's URLPattern/DOM TS2403
-    // conflict, fixed in 24.13) with no path to the repaired minors.
+    // Anchor the range at the newest published types in the runtime major. The caret
+    // admits later patches and minors without crossing into a different Node major.
     const latestInMajor = latestVersion(versions.filter((version) => versionMajor(version) === runtimeMajor));
-    if (latestInMajor) {
-      return `~${latestInMajor}`;
+    if (!latestInMajor) {
+      throw new Error(`Unable to find published ${packageName} versions for runtime major ${runtimeMajor}`);
     }
-  } else if (versions.includes(runtimeVersion)) {
+    return `^${latestInMajor}`;
+  }
+  if (versions.includes(runtimeVersion)) {
     return runtimeVersion;
   }
 
@@ -162,7 +157,7 @@ export function runtimeTypesRangeForPublishedVersions(
   }
 
   console.warn(`${packageName} has no published types for runtime ${runtimeVersion}; using ${latest}`);
-  return pinMode === 'major' ? `~${latest}` : latest;
+  return latest;
 }
 
 function latestVersion(versions: readonly string[]): string | null {

package/src/monorepo/tool-validation.test.ts

@@ -19,7 +19,7 @@ const registryVersions: Record<string, string[]> = {
   'eslint-stdout': ['1.1.1', '1.1.2'],
   nx: ['23.1.0'],
   prettier: ['3.6.1'],
-  ttsc: ['0.19.3'],
+  ttsc: ['0.25.0'],
   typescript: ['6.0.3'],
   // alias package is not fetched from registry under this name when using fallback
   '@typescript/native': ['7.0.2'],
@@ -50,6 +50,9 @@ describe('tool configuration validation', () => {
         devDependencies: {
           '@smoothbricks/cli': 'workspace:*',
         },
+        patchedDependencies: {
+          'ttsc@0.19.3': 'patches/ttsc@0.19.3.patch',
+        },
       });
       const devenvPath = join(root, 'tooling/direnv/devenv.nix');
       await mkdir(dirname(devenvPath), { recursive: true });
@@ -76,10 +79,10 @@ describe('tool configuration validation', () => {
       expect(rootPackage.devDependencies['@smoothbricks/nx-plugin']).toBe('workspace:*');
       expect(rootPackage.devDependencies['eslint-stdout']).toBe('workspace:*');
       expect(rootPackage.devDependencies.nx).toBe('23.1.0');
-      expect(rootPackage.devDependencies.ttsc).toBe('0.19.3');
+      expect(rootPackage.devDependencies.ttsc).toBe('0.25.0');
       expect(rootPackage.devDependencies.typescript).toBe('^6.0.3');
       expect(rootPackage.devDependencies['@typescript/native']).toBe('npm:typescript@^7.0.2');
-      expect(rootPackage.patchedDependencies['ttsc@0.19.3']).toBe('patches/ttsc@0.19.3.patch');
+      expect(rootPackage.patchedDependencies?.['ttsc@0.19.3']).toBeUndefined();
       expect(rootPackage.workspaces).toContain('tooling');
       expect(toolingPackage.name).toBe('@smoothbricks/tooling');
       expect(toolingPackage.dependencies['@smoothbricks/cli']).toBe('workspace:*');
@@ -91,7 +94,7 @@ describe('tool configuration validation', () => {
     }
   });
 
-  it('accepts newer dependency versions above the policy floor', async () => {
+  it('accepts newer dependencies after removing even an empty obsolete ttsc patch key', async () => {
     const root = await mkdtemp(join(tmpdir(), 'smoo-tool-validation-'));
     try {
       await writeJson(join(root, 'package.json'), {
@@ -108,12 +111,12 @@ describe('tool configuration validation', () => {
           'eslint-stdout': await currentEslintStdoutRange(),
           nx: '24.0.0',
           prettier: '^3.7.0',
-          ttsc: '0.19.3',
+          ttsc: '0.25.0',
           typescript: '^6.0.0',
           '@typescript/native': 'npm:typescript@^7.0.2',
         },
         patchedDependencies: {
-          'ttsc@0.19.3': 'patches/ttsc@0.19.3.patch',
+          'ttsc@0.19.3': '',
         },
       });
       await writeJson(join(root, 'tooling/package.json'), {
@@ -143,7 +146,11 @@ describe('tool configuration validation', () => {
 `,
       );
 
+      expect(await validateToolConfig(root)).toBe(1);
+      await applyToolConfigDefaults(root);
       expect(await validateToolConfig(root)).toBe(0);
+      const rootPackage = JSON.parse(await readFile(join(root, 'package.json'), 'utf8'));
+      expect(rootPackage.patchedDependencies?.['ttsc@0.19.3']).toBeUndefined();
     } finally {
       await rm(root, { recursive: true, force: true });
     }
@@ -210,7 +217,7 @@ describe('tool configuration validation', () => {
           eslint: '^10.0.0',
           nx: '24.0.0',
           prettier: '^3.7.0',
-          ttsc: '0.19.3',
+          ttsc: '0.25.0',
           typescript: '^6.0.0',
         },
       });
@@ -224,7 +231,7 @@ describe('tool configuration validation', () => {
       expect(rootPackage.devDependencies['eslint-stdout']).toBe(await currentEslintStdoutRange());
       expect(rootPackage.devDependencies['@smoothbricks/nx-plugin']).toBe(await currentNxPluginRange());
       expect(rootPackage.devDependencies['@typescript/native']).toBe('npm:typescript@^7.0.2');
-      expect(rootPackage.patchedDependencies?.['ttsc@0.19.3']).toBe('patches/ttsc@0.19.3.patch');
+      expect(rootPackage.patchedDependencies?.['ttsc@0.19.3']).toBeUndefined();
       expect(toolingPackage.name).toBe('@fixture/tooling');
       expect(toolingPackage.dependencies['@smoothbricks/cli']).toBe(await currentCliRange());
     } finally {

package/src/monorepo/tool-validation.ts

@@ -56,8 +56,7 @@ const rootDevDependencies: RequiredDependency[] = [
   },
   { name: 'nx', fallbackVersion: '23.1.0', minimumVersion: '23.1.0' },
   { name: 'prettier', fallbackVersion: '^3.6.1', minimumVersion: '3.6.0', prefix: '^' },
-  // Exact pin: Bun patchedDependencies keys are version-locked (see patches/ttsc@0.19.3.patch).
-  { name: 'ttsc', fallbackVersion: '0.19.3' },
+  { name: 'ttsc', fallbackVersion: '0.25.0' },
   // Nx and typescript-eslint still load the TypeScript JS API (6.x).
   // Compilation is exclusively delegated to ttsc by the Nx plugin targets.
   { name: 'typescript', fallbackVersion: '^6.0.3', minimumVersion: '6.0.0', prefix: '^' },
@@ -75,8 +74,7 @@ const requiredDevenvPackages = ['bun', 'git', 'git-format-staged', 'jq', 'alejan
 // never against a version template here.
 const nodePackagePattern = /(^|\s)nodejs(_\d+|_latest)?(\s|#|$)/m;
 
-const TTSC_PATCHED_DEPENDENCY_KEY = 'ttsc@0.19.3';
-const TTSC_PATCH_PATH = 'patches/ttsc@0.19.3.patch';
+const obsoleteTtscPatchedDependencyKey = 'ttsc@0.19.3';
 
 export async function applyToolConfigDefaults(root: string): Promise<void> {
   const context = await readToolContext(root);
@@ -89,7 +87,7 @@ export async function validateToolConfig(root: string): Promise<number> {
   const context = await readToolContext(root);
   return (
     validateRootDevDependencies(context.policy, context.rootPackage) +
-    validateTtscPatchedDependency(context.rootPackage) +
+    validateObsoleteTtscPatchRemoved(context.rootPackage) +
     validateToolingPackage(root, context.policy) +
     validateToolingWorkspace(context.rootPackage) +
     validateDevenvPackages(root)
@@ -113,7 +111,7 @@ export async function applyRootDevDependencyDefaults(root: string, context: Tool
   if (delete devDependencies['@smoothbricks/cli']) {
     changed = true;
   }
-  changed = ensureTtscPatchedDependency(pkg) || changed;
+  changed = removeObsoleteTtscPatch(pkg) || changed;
   if (changed) {
     writeJsonObject(join(root, 'package.json'), pkg);
     console.log('updated        package.json workspace tool dependencies');
@@ -129,7 +127,6 @@ async function applyRootPackageToolDefaults(root: string, context: ToolContext):
   }
   let dependencyChanged = false;
   let workspaceChanged = false;
-  let patchChanged = false;
   const devDependencies = ensureDependencyMap(pkg, 'devDependencies');
   for (const dependency of rootDevDependencies) {
     const current = devDependencies[dependency.name];
@@ -142,8 +139,8 @@ async function applyRootPackageToolDefaults(root: string, context: ToolContext):
     dependencyChanged = true;
   }
   workspaceChanged = addWorkspacePattern(pkg, 'tooling');
-  patchChanged = ensureTtscPatchedDependency(pkg);
-  if (dependencyChanged || workspaceChanged || patchChanged) {
+  dependencyChanged = removeObsoleteTtscPatch(pkg) || dependencyChanged;
+  if (dependencyChanged || workspaceChanged) {
     writeJsonObject(join(root, 'package.json'), pkg);
   }
   console.log(
@@ -156,11 +153,6 @@ async function applyRootPackageToolDefaults(root: string, context: ToolContext):
       ? 'updated        package.json tooling workspace'
       : 'unchanged      package.json tooling workspace',
   );
-  console.log(
-    patchChanged
-      ? 'updated        package.json patchedDependencies for ttsc'
-      : 'unchanged      package.json patchedDependencies for ttsc',
-  );
 }
 
 export function applyToolingPackageDefaults(root: string, policy: ToolPolicy): void {
@@ -252,22 +244,25 @@ export function validateRootDevDependencies(policy: ToolPolicy, rootPackage: Pac
   return failures;
 }
 
-function ensureTtscPatchedDependency(pkg: PackageJson): boolean {
-  const patched = ensureDependencyMap(pkg, 'patchedDependencies');
-  return setStringProperty(patched, TTSC_PATCHED_DEPENDENCY_KEY, TTSC_PATCH_PATH);
+function removeObsoleteTtscPatch(pkg: PackageJson): boolean {
+  const patchedDependencies = pkg.patchedDependencies;
+  if (!patchedDependencies || !(obsoleteTtscPatchedDependencyKey in patchedDependencies)) {
+    return false;
+  }
+  delete patchedDependencies[obsoleteTtscPatchedDependencyKey];
+  if (Object.keys(patchedDependencies).length === 0) {
+    delete pkg.patchedDependencies;
+  }
+  return true;
 }
 
-function validateTtscPatchedDependency(rootPackage: PackageJson | null): number {
-  if (!rootPackage) {
-    return 0;
-  }
-  const actual = rootPackage.patchedDependencies?.[TTSC_PATCHED_DEPENDENCY_KEY];
-  if (actual === TTSC_PATCH_PATH) {
+function validateObsoleteTtscPatchRemoved(rootPackage: PackageJson | null): number {
+  const patchedDependencies = rootPackage?.patchedDependencies;
+  if (!patchedDependencies || !(obsoleteTtscPatchedDependencyKey in patchedDependencies)) {
     return 0;
   }
   console.error(
-    `package.json patchedDependencies.${TTSC_PATCHED_DEPENDENCY_KEY} must be ${TTSC_PATCH_PATH}` +
-      (typeof actual === 'string' ? `; found ${actual}` : ' (required for declaration-emit fix)'),
+    `package.json patchedDependencies.${obsoleteTtscPatchedDependencyKey} must be removed; ttsc 0.25.0 emits typia declarations without the obsolete patch`,
   );
   return 1;
 }

package/src/nx/index.test.ts

@@ -4,12 +4,12 @@ import {
   formatProjectTargetLines,
   nxCacheDirectories,
   nxResetCommand,
-  nxShowProjectCommand,
-  projectNamesFromNxShowProjectsOutput,
   projectNamesWithTarget,
   projectRootFromNxProjectJson,
+  projectTargetsFromNxProjects,
   targetDependenciesFromNxProjectJson,
   targetNamesFromNxProjectJson,
+  targetNamesFromProjects,
   targetOutputsFromNxProjectJson,
 } from './index.js';
 
@@ -18,10 +18,6 @@ describe('Nx helper command construction', () => {
     expect(nxResetCommand()).toEqual({ command: 'nx', args: ['reset'] });
   });
 
-  it('builds explicit nx project metadata invocation', () => {
-    expect(nxShowProjectCommand('cli')).toEqual({ command: 'nx', args: ['show', 'project', 'cli', '--json'] });
-  });
-
   it('selects only local Nx cache directories', () => {
     expect(nxCacheDirectories('/repo')).toEqual([
       join('/repo', '.nx/cache'),
@@ -54,14 +50,6 @@ describe('Nx helper output formatting', () => {
     ).toEqual(['cli', 'web']);
   });
 
-  it('parses JSON project lists from nx show projects', () => {
-    expect(projectNamesFromNxShowProjectsOutput('["web","cli"]\n')).toEqual(['cli', 'web']);
-  });
-
-  it('parses legacy newline project lists from nx show projects', () => {
-    expect(projectNamesFromNxShowProjectsOutput('web\ncli\n')).toEqual(['cli', 'web']);
-  });
-
   it('extracts sorted target names from Nx project JSON', () => {
     expect(targetNamesFromNxProjectJson({ targets: { test: {}, build: {}, lint: {} } })).toEqual([
       'build',
@@ -113,4 +101,47 @@ describe('Nx helper output formatting', () => {
   it('treats missing target metadata as an empty project', () => {
     expect(targetNamesFromNxProjectJson({ name: 'cli' })).toEqual([]);
   });
+
+  it('projects every resolved graph node without per-project CLI parsing', () => {
+    const projects = {
+      web: {
+        root: 'packages/web',
+        targets: {
+          test: {
+            executor: '@smoothbricks/nx-plugin:bounded-exec',
+            dependsOn: ['build'],
+            options: { command: 'bun test', timeoutMs: 120_000 },
+          },
+          build: { outputs: ['{projectRoot}/dist'] },
+        },
+      },
+      cli: { root: 'packages/cli', targets: { lint: {} } },
+    };
+
+    expect(targetNamesFromProjects(projects).sort()).toEqual(['build', 'lint', 'test']);
+    expect(projectTargetsFromNxProjects(projects)).toEqual([
+      {
+        project: 'cli',
+        root: 'packages/cli',
+        targets: ['lint'],
+        buildDependsOn: undefined,
+        targetDependencies: new Map(),
+        targetExecutors: new Map(),
+        targetOptions: new Map(),
+        targetOutputs: new Map(),
+        targetScripts: new Map(),
+      },
+      {
+        project: 'web',
+        root: 'packages/web',
+        targets: ['build', 'test'],
+        buildDependsOn: undefined,
+        targetDependencies: new Map([['test', ['build']]]),
+        targetExecutors: new Map([['test', '@smoothbricks/nx-plugin:bounded-exec']]),
+        targetOptions: new Map([['test', { command: 'bun test', timeoutMs: 120_000 }]]),
+        targetOutputs: new Map([['build', ['{projectRoot}/dist']]]),
+        targetScripts: new Map(),
+      },
+    ]);
+  });
 });