@techspokes/typescript-wsdl-client 0.36.0 → 1.0.1

package/docs/roadmap/v1.0-xs-anyattribute-wildcard-bag.md

@@ -1,8 +1,10 @@
 # xs:anyAttribute Wildcard Bag Implementation Plan
 
+Status: shipped in `0.36.0`.
+
 ## Agentic Worker Requirement
 
-REQUIRED SUB-SKILL: Use superpowers:subagent-driven-development (recommended) or superpowers:executing-plans to implement this plan task-by-task. Steps use checkbox (`- [ ]`) syntax for tracking.
+REQUIRED SUB-SKILL: Use superpowers:subagent-driven-development (recommended) or superpowers:executing-plans to implement this plan task-by-task. Steps use checkbox (`- [x]`) syntax for tracking.
 
 ## Goal
 
@@ -20,7 +22,7 @@ TypeScript strict mode, ESM, Node.js 24+, Vitest, OpenAPI 3.1 JSON Schema, Fasti
 
 Known attributes are emitted as peer TypeScript properties in `src/client/generateTypes.ts` and peer OpenAPI object properties in `src/openapi/generateSchemas.ts`. The generated client already serializes an input attribute bag from `attributesKeyIn`, default `$attributes`, into node-soap attributes in `src/client/generateClient.ts`.
 
-The compiler already retains `attributeWildcards` on compiled types in `src/compiler/schemaCompiler.ts`. The conformance row `xs-anyattribute` currently proves only metadata retention and asserts that generated TypeScript, OpenAPI, and gateway schemas do not expose a wildcard bag.
+The compiler already retains `attributeWildcards` on compiled types in `src/compiler/schemaCompiler.ts`. Before `0.36.0`, the conformance row `xs-anyattribute` proved only metadata retention and asserted that generated TypeScript, OpenAPI, and gateway schemas did not expose a wildcard bag.
 
 ## Target Contract
 
@@ -83,7 +85,7 @@ Modify generated support docs through `npm run docs:support-matrix`, then manual
 - Modify: `test/unit/compiler-wildcards.test.ts`
 - Modify: `test/unit/mock-data.test.ts`
 
-- [ ] Step 1: Add a compiler test for local extension wildcard metadata
+- [x] Step 1: Add a compiler test for local extension wildcard metadata
 
 Append this test inside the existing `describe("compiler: wildcard retention", () => { ... })` block in `test/unit/compiler-wildcards.test.ts`:
 
@@ -126,7 +128,7 @@ Append this test inside the existing `describe("compiler: wildcard retention", (
   });
 ```
 
-- [ ] Step 2: Add mock-data tests for wildcard bags
+- [x] Step 2: Add mock-data tests for wildcard bags
 
 Add these tests after `it("generates attribute-only types (no elements)", ... )` in `test/unit/mock-data.test.ts`:
 
@@ -190,7 +192,7 @@ Add these tests after `it("generates attribute-only types (no elements)", ... )`
   });
 ```
 
-- [ ] Step 3: Run the focused tests and verify they fail
+- [x] Step 3: Run the focused tests and verify they fail
 
 Run:
 
@@ -206,7 +208,7 @@ Expected result: the new compiler test fails because `localAttributeWildcards` i
 
 - Create: `src/util/attributeWildcards.ts`
 
-- [ ] Step 1: Create the helper module
+- [x] Step 1: Create the helper module
 
 Create `src/util/attributeWildcards.ts`:
 
@@ -238,7 +240,7 @@ export function wildcardAttributeBagSchema(): {type: "object"; additionalPropert
 }
 ```
 
-- [ ] Step 2: Run typecheck and verify the helper compiles
+- [x] Step 2: Run typecheck and verify the helper compiles
 
 Run:
 
@@ -255,7 +257,7 @@ Expected result: the command still fails because Task 1 intentionally introduced
 - Modify: `src/compiler/schemaCompiler.ts`
 - Modify: `src/compiler/shapeResolver.ts`
 
-- [ ] Step 1: Extend `CompiledType` with local wildcard metadata
+- [x] Step 1: Extend `CompiledType` with local wildcard metadata
 
 In `src/compiler/schemaCompiler.ts`, add this documentation line after the `localElems` JSDoc line:
 
@@ -269,7 +271,7 @@ Add this property to the `CompiledType` type after `attributeWildcards?: Compile
   localAttributeWildcards?: CompiledAttributeWildcard[];
 ```
 
-- [ ] Step 2: Store local wildcard metadata on complex-content extensions
+- [x] Step 2: Store local wildcard metadata on complex-content extensions
 
 In the complex-content extension result object in `getOrCompileComplex`, replace:
 
@@ -284,7 +286,7 @@ with:
           ...(localAttributeWildcards.length > 0 ? {localAttributeWildcards} : {}),
 ```
 
-- [ ] Step 3: Preserve local wildcard metadata in shape canonicalization
+- [x] Step 3: Preserve local wildcard metadata in shape canonicalization
 
 In `src/compiler/shapeResolver.ts`, find the canonicalized type object that already maps `attributeWildcards`. Add this property immediately after it:
 
@@ -297,7 +299,7 @@ In `src/compiler/shapeResolver.ts`, find the canonicalized type object that alre
 
 If the surrounding function omits empty optional arrays for `wildcards` and `attributeWildcards`, use the same conditional style already present in that function. The final emitted catalog must not add `localAttributeWildcards` to types that do not have local wildcard declarations.
 
-- [ ] Step 4: Run the compiler wildcard test
+- [x] Step 4: Run the compiler wildcard test
 
 Run:
 
@@ -313,7 +315,7 @@ Expected result: the new `localAttributeWildcards` test passes. Existing wildcar
 
 - Modify: `src/client/generateTypes.ts`
 
-- [ ] Step 1: Import the shared helpers
+- [x] Step 1: Import the shared helpers
 
 Add this import near the existing imports in `src/client/generateTypes.ts`:
 
@@ -321,7 +323,7 @@ Add this import near the existing imports in `src/client/generateTypes.ts`:
 import {hasAttributeWildcards, wildcardAttributeBagName} from "../util/attributeWildcards.js";
 ```
 
-- [ ] Step 2: Add a bag-name constant inside `generateTypes`
+- [x] Step 2: Add a bag-name constant inside `generateTypes`
 
 After `const isChoiceUnionMode = compiled.options.choice === "union";`, add:
 
@@ -329,7 +331,7 @@ After `const isChoiceUnionMode = compiled.options.choice === "union";`, add:
   const wildcardBagName = wildcardAttributeBagName(compiled.options);
 ```
 
-- [ ] Step 3: Add an emitter for wildcard bags
+- [x] Step 3: Add an emitter for wildcard bags
 
 After `emitAttributeProperty`, add:
 
@@ -345,7 +347,7 @@ After `emitAttributeProperty`, add:
   };
 ```
 
-- [ ] Step 4: Compute local wildcard bags for normal and choice-mode interfaces
+- [x] Step 4: Compute local wildcard bags for normal and choice-mode interfaces
 
 After the `attrsToEmit` line, add:
 
@@ -355,7 +357,7 @@ After the `attrsToEmit` line, add:
       : {attributeWildcards: t.attributeWildcards};
 ```
 
-- [ ] Step 5: Emit the bag in choice union base interfaces
+- [x] Step 5: Emit the bag in choice union base interfaces
 
 In the choice-union branch, after the loop that emits attributes:
 
@@ -373,7 +375,7 @@ add:
       }
 ```
 
-- [ ] Step 6: Emit the bag in normal interfaces
+- [x] Step 6: Emit the bag in normal interfaces
 
 In the normal interface branch, after the loop that emits attributes:
 
@@ -391,7 +393,7 @@ add:
     }
 ```
 
-- [ ] Step 7: Run snapshot tests to see the intentional diff
+- [x] Step 7: Run snapshot tests to see the intentional diff
 
 Run:
 
@@ -407,7 +409,7 @@ Expected result: snapshots may fail only if the weather fixture contains `xs:any
 
 - Modify: `src/openapi/generateSchemas.ts`
 
-- [ ] Step 1: Import the shared helpers
+- [x] Step 1: Import the shared helpers
 
 Add this import near the existing imports:
 
@@ -415,7 +417,7 @@ Add this import near the existing imports:
 import {hasAttributeWildcards, wildcardAttributeBagName, wildcardAttributeBagSchema} from "../util/attributeWildcards.js";
 ```
 
-- [ ] Step 2: Add an `attributesKey` parameter to `buildComplexSchema`
+- [x] Step 2: Add an `attributesKey` parameter to `buildComplexSchema`
 
 Change the `buildComplexSchema` signature from:
 
@@ -444,7 +446,7 @@ function buildComplexSchema(
 ): any {
 ```
 
-- [ ] Step 3: Add the bag property after known attributes
+- [x] Step 3: Add the bag property after known attributes
 
 After the `for (const a of t.attrs) { ... }` loop, add:
 
@@ -454,7 +456,7 @@ After the `for (const a of t.attrs) { ... }` loop, add:
   }
 ```
 
-- [ ] Step 4: Pass the configured key from `generateSchemas`
+- [x] Step 4: Pass the configured key from `generateSchemas`
 
 In `generateSchemas`, add this constant after `const choiceUnionMode = ...` or near the other derived options:
 
@@ -469,7 +471,7 @@ Update the call to `buildComplexSchema` so the final argument list includes `att
       attributesKey,
 ```
 
-- [ ] Step 5: Run OpenAPI unit and conformance tests enough to observe failure movement
+- [x] Step 5: Run OpenAPI unit and conformance tests enough to observe failure movement
 
 Run:
 
@@ -486,7 +488,7 @@ Expected result: conformance still fails until Task 7 updates the registry asser
 - Modify: `src/test/mockData.ts`
 - Modify: `test/unit/mock-data.test.ts`
 
-- [ ] Step 1: Import helpers
+- [x] Step 1: Import helpers
 
 Add this import to `src/test/mockData.ts`:
 
@@ -494,7 +496,7 @@ Add this import to `src/test/mockData.ts`:
 import {hasAttributeWildcards, wildcardAttributeBagName} from "../util/attributeWildcards.js";
 ```
 
-- [ ] Step 2: Extend mock catalog types
+- [x] Step 2: Extend mock catalog types
 
 Change the `CatalogForMocks` `options` type from:
 
@@ -526,7 +528,7 @@ to:
     attributeWildcards?: Array<{namespace?: string; processContents?: "lax" | "strict" | "skip"}>;
 ```
 
-- [ ] Step 3: Keep wildcard-only types from returning early
+- [x] Step 3: Keep wildcard-only types from returning early
 
 After `const typeMeta = catalog.types?.find((t) => t.name === typeName);`, add:
 
@@ -542,7 +544,7 @@ Move the existing early return below that line and change it to:
   }
 ```
 
-- [ ] Step 4: Add deterministic wildcard bag data
+- [x] Step 4: Add deterministic wildcard bag data
 
 Before `return result;`, add:
 
@@ -557,7 +559,7 @@ Before `return result;`, add:
   }
 ```
 
-- [ ] Step 5: Run mock-data tests
+- [x] Step 5: Run mock-data tests
 
 Run:
 
@@ -573,7 +575,7 @@ Expected result: all mock-data tests pass, including the new wildcard attribute
 
 - Modify: `test/conformance/registry.ts`
 
-- [ ] Step 1: Change row status and contract
+- [x] Step 1: Change row status and contract
 
 In the `xs-anyattribute` row, replace:
 
@@ -595,7 +597,7 @@ Replace the current `publicContract` and `decisionReason` with:
     decisionReason: "The compiler retains attribute wildcard metadata, and generated TypeScript, OpenAPI, gateway, generated-test, and app artifacts can represent wildcard attributes through the existing attribute-bag runtime path.",
 ```
 
-- [ ] Step 2: Strengthen client expectations
+- [x] Step 2: Strengthen client expectations
 
 Replace the `client` block for `xs-anyattribute` with:
 
@@ -608,7 +610,7 @@ Replace the `client` block for `xs-anyattribute` with:
     },
 ```
 
-- [ ] Step 3: Strengthen OpenAPI expectations
+- [x] Step 3: Strengthen OpenAPI expectations
 
 Replace the existing `openapi.assert` body with:
 
@@ -626,7 +628,7 @@ Replace the existing `openapi.assert` body with:
       },
 ```
 
-- [ ] Step 4: Exercise the bag through the generated gateway
+- [x] Step 4: Exercise the bag through the generated gateway
 
 Change the gateway request payload from:
 
@@ -661,7 +663,7 @@ Change the gateway schema assertion from rejecting `$attributes` to requiring it
       },
 ```
 
-- [ ] Step 5: Strengthen generated-test expectations
+- [x] Step 5: Strengthen generated-test expectations
 
 Replace the `generatedTests` block with:
 
@@ -675,7 +677,7 @@ Replace the `generatedTests` block with:
     },
 ```
 
-- [ ] Step 6: Run conformance and verify failure points
+- [x] Step 6: Run conformance and verify failure points
 
 Run:
 
@@ -694,7 +696,7 @@ Expected result before Tasks 3 through 6 are complete: this fails on missing gen
 - Modify: `docs/roadmap/v1.0-capability-conformance-framework.md`
 - Modify: `CHANGELOG.md`
 
-- [ ] Step 1: Regenerate the support matrix
+- [x] Step 1: Regenerate the support matrix
 
 Run:
 
@@ -704,7 +706,7 @@ npm run docs:support-matrix
 
 Expected result: the generated matrix in `docs/supported-patterns.md` changes the `xs-anyattribute` status from `partial` to `supported` and uses the updated public contract.
 
-- [ ] Step 2: Update the explanatory `xs:anyAttribute` section
+- [x] Step 2: Update the explanatory `xs:anyAttribute` section
 
 In `docs/supported-patterns.md`, replace the `### xs:anyAttribute` paragraph with:
 
@@ -716,7 +718,7 @@ Attribute wildcards are retained as catalog metadata and emitted as an optional
 Known XML attributes remain flattened as peer properties. Wildcard attributes stay inside the bag so unknown names do not collide with child elements or known attributes.
 ```
 
-- [ ] Step 3: Move `xs:anyAttribute` from partial to supported in the full support list
+- [x] Step 3: Move `xs:anyAttribute` from partial to supported in the full support list
 
 In `docs/supported-patterns.md`, add this bullet under `## Fully Supported`:
 
@@ -736,7 +738,7 @@ Do not remove `xs:any` particle limitations unless a separate `xs:any` content i
 - Full `xs:any` element serialization: arbitrary wildcard element content is not emitted as a typed contract
 ```
 
-- [ ] Step 4: Update roadmap wording
+- [x] Step 4: Update roadmap wording
 
 In `docs/roadmap/v1.0-wsdl-coverage-matrix.md`, change the priority row for `xs:anyAttribute` from:
 
@@ -764,7 +766,7 @@ with:
 For partial rows, prove the documented subset and avoid implying full support. External `PolicyReference` should not imply fetched or enforced external policy. The `xs-anyattribute` row is supported once generated TypeScript, OpenAPI, gateway, generated-test, and app evidence prove the configured wildcard attribute bag.
 ```
 
-- [ ] Step 5: Update changelog
+- [x] Step 5: Update changelog
 
 If the existing Unreleased roadmap bullet is still present, add this bullet under `## [Unreleased]` in `CHANGELOG.md`:
 
@@ -783,7 +785,7 @@ Do not remove the existing `docs(roadmap): align 1.0 readiness docs with the 0.3
 - Test: `test/conformance/`
 - Test: `test/snapshot/`
 
-- [ ] Step 1: Run unit tests for changed internals
+- [x] Step 1: Run unit tests for changed internals
 
 Run:
 
@@ -793,7 +795,7 @@ npx vitest run test/unit/compiler-wildcards.test.ts test/unit/mock-data.test.ts
 
 Expected result: all tests pass.
 
-- [ ] Step 2: Run conformance
+- [x] Step 2: Run conformance
 
 Run:
 
@@ -803,7 +805,7 @@ npm run test:conformance
 
 Expected result: all conformance tests pass, and `xs-anyattribute` is now a supported row.
 
-- [ ] Step 3: Run snapshot tests
+- [x] Step 3: Run snapshot tests
 
 Run:
 
@@ -825,7 +827,7 @@ npm run test:snap
 
 Expected result: snapshot tests pass after reviewing the diff.
 
-- [ ] Step 4: Run docs validation
+- [x] Step 4: Run docs validation
 
 Run:
 
@@ -841,7 +843,7 @@ Expected result: Markdown links, TypeScript fenced snippets, and support matrix
 
 - No source edits expected.
 
-- [ ] Step 1: Run typecheck
+- [x] Step 1: Run typecheck
 
 Run:
 
@@ -851,7 +853,7 @@ npm run typecheck
 
 Expected result: TypeScript reports no errors.
 
-- [ ] Step 2: Run the required smoke pipeline
+- [x] Step 2: Run the required smoke pipeline
 
 Run:
 
@@ -861,7 +863,7 @@ npm run smoke:pipeline
 
 Expected result: the command regenerates disposable output under `tmp/smoke/`, generates client, OpenAPI, gateway, and app artifacts, and `tsc -p tsconfig.smoke.json` passes.
 
-- [ ] Step 3: Run the full test suite
+- [x] Step 3: Run the full test suite
 
 Run:
 
@@ -871,7 +873,7 @@ npm test
 
 Expected result: all Vitest tests pass.
 
-- [ ] Step 4: Run full CI before release-candidate work
+- [x] Step 4: Run full CI before release-candidate work
 
 Run:
 
@@ -887,7 +889,7 @@ Expected result: build, typecheck, skill validation, package validation, docs va
 
 - Review: all modified files from Tasks 1 through 10.
 
-- [ ] Step 1: Inspect changed files
+- [x] Step 1: Inspect changed files
 
 Run:
 
@@ -898,7 +900,7 @@ git diff --stat
 
 Expected result: only implementation, test, docs, changelog, and possible snapshot files are modified.
 
-- [ ] Step 2: Review semantic diff
+- [x] Step 2: Review semantic diff
 
 Run:
 
@@ -908,7 +910,7 @@ git diff
 
 Expected result: the diff shows `xs:anyAttribute` moving from metadata-only partial support to supported wildcard-bag output. It must not include unrelated formatting churn or generated output under `tmp/`.
 
-- [ ] Step 3: Commit the implementation if requested by the maintainer
+- [x] Step 3: Commit the implementation if requested by the maintainer
 
 Run:
 

package/docs/start-here.md

@@ -24,7 +24,7 @@ Run the `client` command. This generates TypeScript interfaces for all WSDL type
 ```bash
 npx wsdl-tsc client \
   --wsdl-source your-service.wsdl \
-  --client-dir ./generated/client
+  --client-dir ./.generated/client
 ```
 
 You get `types.ts`, `client.ts`, `operations.ts`, and `utils.ts`. Import the client, call typed methods, and let TypeScript catch contract mismatches at compile time.
@@ -38,7 +38,7 @@ Run the `openapi` command. This generates an OpenAPI 3.1 specification with sche
 ```bash
 npx wsdl-tsc openapi \
   --wsdl-source your-service.wsdl \
-  --openapi-file ./generated/openapi.json
+  --openapi-file ./.generated/openapi.json
 ```
 
 The spec includes paths for each SOAP operation, request/response schemas, and descriptions propagated from WSDL documentation annotations.
@@ -52,9 +52,9 @@ Run the `pipeline` command with `--init-app`. This generates the typed client, O
 ```bash
 npx wsdl-tsc pipeline \
   --wsdl-source your-service.wsdl \
-  --client-dir ./generated/client \
-  --openapi-file ./generated/openapi.json \
-  --gateway-dir ./generated/gateway \
+  --client-dir ./.generated/client \
+  --openapi-file ./.generated/openapi.json \
+  --gateway-dir ./.generated/gateway \
   --gateway-service-name my-service \
   --gateway-version-prefix v1 \
   --init-app
@@ -71,9 +71,9 @@ Some SOAP services return payloads that are too large or too slow to buffer in m
 ```bash
 npx wsdl-tsc pipeline \
   --wsdl-source your-service.wsdl \
-  --client-dir ./generated/client \
-  --openapi-file ./generated/openapi.json \
-  --gateway-dir ./generated/gateway \
+  --client-dir ./.generated/client \
+  --openapi-file ./.generated/openapi.json \
+  --gateway-dir ./.generated/gateway \
   --gateway-service-name my-service \
   --gateway-version-prefix v1 \
   --stream-config ./stream.config.json

package/docs/testing.md

@@ -45,7 +45,7 @@ Repository test and release automation keeps disposable output classified under
 - `tmp/conformance/`: conformance mini-projects that need repository-local module resolution
 - `tmp/test-generation/`: generated-test integration spikes
 
-Keep new repository-owned temporary writers under the closest existing subfolder. Public CLI examples may still use simple `tmp/...` paths when those examples are clearer for users.
+Keep new repository-owned temporary writers under the closest existing subfolder. Public CLI examples use the git-ignored `.generated/` convention instead of repository `tmp/` paths.
 
 ## Unit Tests
 
@@ -221,12 +221,12 @@ The `--test-dir` flag generates a complete, runnable Vitest test suite that vali
 ```bash
 npx wsdl-tsc pipeline \
   --wsdl-source service.wsdl \
-  --client-dir ./generated/client \
-  --openapi-file ./generated/openapi.json \
-  --gateway-dir ./generated/gateway \
+  --client-dir ./.generated/client \
+  --openapi-file ./.generated/openapi.json \
+  --gateway-dir ./.generated/gateway \
   --gateway-service-name myservice \
   --gateway-version-prefix v1 \
-  --test-dir ./generated/tests
+  --test-dir ./.generated/tests
 ```
 
 ### Generated Structure
@@ -251,7 +251,7 @@ npx wsdl-tsc pipeline \
 ### Running Generated Tests
 
 ```bash
-npx vitest run --config ./generated/tests/vitest.config.ts
+npx vitest run --config ./.generated/tests/vitest.config.ts
 ```
 
 ### Skip-if-Exists Behavior

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@techspokes/typescript-wsdl-client",
-  "version": "0.36.0",
+  "version": "1.0.1",
   "description": "Turn legacy WSDL/SOAP services into typed TypeScript clients, OpenAPI 3.1 specs, and production-ready Fastify REST gateways. Built for enterprise SOAP modernization.",
   "keywords": [
     "wsdl",
@@ -71,10 +71,17 @@
     "test:snap": "vitest run test/snapshot",
     "test:integration": "vitest run test/integration",
     "test:github": "vitest run test/unit test/snapshot test/integration",
-    "test:conformance": "vitest run test/conformance",
+    "test:conformance": "vitest run test/conformance --reporter=verbose",
+    "test:conformance:contracts": "vitest run --config vitest.conformance.config.ts test/conformance/stages/contracts.stage.ts --reporter=verbose",
+    "test:conformance:compile": "vitest run --config vitest.conformance.config.ts test/conformance/stages/compile.stage.ts --reporter=verbose",
+    "test:conformance:client": "vitest run --config vitest.conformance.config.ts test/conformance/stages/client.stage.ts --reporter=verbose",
+    "test:conformance:openapi": "vitest run --config vitest.conformance.config.ts test/conformance/stages/openapi.stage.ts --reporter=verbose",
+    "test:conformance:gateway": "vitest run --config vitest.conformance.config.ts test/conformance/stages/gateway.stage.ts --reporter=verbose",
+    "test:conformance:generated-tests": "vitest run --config vitest.conformance.config.ts test/conformance/stages/generated-tests.stage.ts --reporter=verbose",
+    "test:conformance:app": "vitest run --config vitest.conformance.config.ts test/conformance/stages/app.stage.ts --reporter=verbose",
     "test:watch": "vitest",
     "prepublishOnly": "npm run clean && npm run build && npm run package:validate",
-    "smoke:reset": "npm run clean:tmp",
+    "smoke:reset": "rimraf tmp/smoke",
     "smoke:compile": "npm run smoke:reset && tsx src/cli.ts compile --wsdl-source examples/minimal/weather.wsdl --catalog-file tmp/smoke/catalog.json",
     "smoke:client": "npm run smoke:reset && tsx src/cli.ts client --wsdl-source examples/minimal/weather.wsdl --client-dir tmp/smoke/client && tsc -p tsconfig.smoke.json",
     "smoke:openapi": "npm run smoke:reset && tsx src/cli.ts openapi --wsdl-source examples/minimal/weather.wsdl --openapi-file tmp/smoke/openapi.json --openapi-format json && tsc -p tsconfig.smoke.json",
@@ -89,6 +96,7 @@
     "skill:package": "node scripts/build-agent-skill.mjs",
     "package:validate": "node scripts/validate-npm-package.mjs",
     "release:preflight": "node scripts/release-preflight.mjs",
+    "release:publish-check": "npm run clean && npm run build && npm run typecheck && npm run skill:validate && npm run package:validate",
     "ci": "npm run clean && npm run build && npm run typecheck && npm run skill:validate && npm run package:validate && npm run docs:validate && vitest run && npm run smoke:pipeline",
     "ci:github": "npm run clean && npm run build && npm run typecheck && npm run skill:validate && npm run package:validate && npm run docs:validate && npm run test:github && npm run smoke:pipeline",
     "ci:github:node26": "npm run clean && npm run build && npm run typecheck && npm run test:unit && npm run smoke:pipeline",
@@ -96,19 +104,19 @@
   },
   "devDependencies": {
     "@types/js-yaml": "^4.0.9",
-    "@types/node": "^26.0.1",
+    "@types/node": "^26.1.1",
     "@types/yargs": "^17.0.35",
-    "fastify": "^5.8.5",
+    "fastify": "^5.10.0",
     "fastify-plugin": "^6.0.0",
     "rimraf": "^6.1.3",
-    "tsx": "^4.22.4",
+    "tsx": "^4.23.0",
     "typescript": "^6.0.3",
-    "vitest": "^4.1.9"
+    "vitest": "^4.1.10"
   },
   "dependencies": {
     "@apidevtools/swagger-parser": "^12.1.0",
-    "fast-xml-parser": "^5.9.3",
-    "js-yaml": "^5.1.0",
+    "fast-xml-parser": "^5.10.0",
+    "js-yaml": "^5.2.1",
     "saxes": "^6.0.0",
     "soap": "^1.9.3",
     "yargs": "^18.0.0"