@williamthorsen/nmr 0.14.1 → 0.15.0

package/AGENTS.md

@@ -4,11 +4,11 @@ source: '@williamthorsen/nmr@0.0.0-source'
 
 # nmr: agent guidance
 
-This file is managed by `@williamthorsen/nmr`. Do not edit — re-run `nmr sync-agent-files` after an nmr upgrade to refresh it.
+This file is managed by `@williamthorsen/nmr`. Do not edit; run `nmr sync-agent-files` to refresh it after an nmr upgrade that changes this guidance.
 
 ## Discover scripts by running nmr
 
-Run `nmr` with no command (from the monorepo root or any workspace package) to list every available script, including composite expansions and resolved shell commands. Check this before guessing a script name from another repo — the registry is authoritative.
+Run `nmr` with no command (from the monorepo root or any workspace package) to list every available script, including composite expansions and resolved shell commands. Check this before guessing a script name from another repo: The registry is authoritative.
 
 ## Invocation rules
 
@@ -20,17 +20,13 @@ Run `nmr` with no command (from the monorepo root or any workspace package) to l
 `nmr` ships as a workspace bin. The bare `nmr` command works only when your shell can find `<root>/node_modules/.bin/nmr`. Choose one:
 
 - **direnv** (recommended for contributors). With [direnv](https://direnv.net/) installed, the repo's `.envrc` adds `node_modules/.bin` to your `PATH` automatically. From any subdirectory, bare `nmr` works.
-- **`pnpm exec nmr <command>`** — works without setup. pnpm resolves the bin from the workspace root.
+- **`pnpm exec nmr <command>`**: Works without setup. pnpm resolves the bin from the workspace root.
 
 Avoid `npx nmr`. Inside git worktrees, `npx` can resolve a different nmr binary from outside the working tree.
 
-### Bootstrap fallback
-
-If `nmr` itself fails to run (fresh clone, missing build output), run `pnpm run bootstrap` from the repo root first.
-
 ## Root vs. workspace context
 
-nmr walks up to find `pnpm-workspace.yaml`, then decides which registry to use based on whether your cwd is inside a workspace package. The same command name (e.g. `build`, `test`, `check:strict`) often exists in both registries with different behavior — the root version typically delegates across all workspaces. Use `-w` to force the root registry from inside a package dir, and `-F <pkg>` to run a single package's script from anywhere.
+nmr walks up to find `pnpm-workspace.yaml`, then decides which registry to use based on whether your cwd is inside a workspace package. The same command name (e.g. `build`, `test`, `check:strict`) often exists in both registries with different behavior; the root version typically delegates across all workspaces. Use `-w` to force the root registry from inside a package dir, and `-F <pkg>` to run a single package's script from anywhere.
 
 ## Composite scripts
 
@@ -40,13 +36,17 @@ A script value shown in `nmr` output as `[a, b, c]` is a composite: it runs `nmr
 
 Some root scripts (e.g. `lint`, `typecheck`, `test`) expand to `nmr root:X && pnpm --recursive exec nmr X`. The `root:X` variant runs only against root-level files; the plain name runs everywhere. Use `root:X` directly when you want to isolate a failure to the root code.
 
+## Managed build
+
+The default `compile` script runs `nmr-compile`, a standalone bin that esbuild-compiles a package's `src` to `dist/esm`, rewriting `~/` (package-root) import aliases and `.ts`→`.js` specifiers, and skipping work when inputs are unchanged. There is no repo-local build script to maintain; `nmr build` runs `compile` then `generate-typings`. To find or debug the build, look to `nmr-compile`, not a `config/build.ts` in the consuming repo.
+
 ## Override behaviors
 
 In `.config/nmr.config.ts` or a package's `package.json`, override values have special semantics:
 
-- `""` (empty string) — skip the script with a "Skipping" message; exit 0.
-- `":"` — no-op; exit 0. Prefer this over `""` if your repo enforces non-empty script values.
-- Any other string — runs in place of the default.
+- `""` (empty string): Skip the script with a "Skipping" message; exit 0.
+- `":"`: No-op; exit 0. Prefer this over `""` if your repo enforces non-empty script values.
+- Any other string: Runs in place of the default.
 
 ## Pre and post hooks
 
@@ -54,11 +54,11 @@ Every `nmr X` invocation auto-wraps as the equivalent of `nmr X:pre && nmr X &&
 
 Behaviors worth knowing:
 
-- **Silent when absent** — missing hooks produce no error and no output.
-- **Skip overrides apply to hooks** — a hook value of `""` or `":"` is treated the same as not defining the hook. No console message.
-- **Skipping the main command skips its hooks** — when `X` is overridden to `""` or `":"`, neither `X:pre` nor `X:post` fires.
-- **Recursion guard** — direct invocation of a hook (e.g., `nmr build:pre`) is treated as a leaf operation. It does NOT itself attempt to resolve `build:pre:pre` or `build:pre:post`.
-- **Passthrough args attach only to the main command** — `nmr X --flag value` runs hooks without `--flag value`.
+- **Silent when absent**: Missing hooks produce no error and no output.
+- **Skip overrides apply to hooks**: A hook value of `""` or `":"` is treated the same as not defining the hook. No console message.
+- **Skipping the main command skips its hooks**: When `X` is overridden to `""` or `":"`, neither `X:pre` nor `X:post` fires.
+- **Recursion guard**: Direct invocation of a hook (e.g., `nmr build:pre`) is treated as a leaf operation. It does NOT itself attempt to resolve `build:pre:pre` or `build:pre:post`.
+- **Passthrough args attach only to the main command**: `nmr X --flag value` runs hooks without `--flag value`.
 
 Worked examples:
 

package/README.md

@@ -2,7 +2,29 @@
 
 Context-aware script runner for PNPM monorepos. Ships an `nmr` (node-monorepo run) binary that provides centralized, consistent script execution across workspace packages and the monorepo root.
 
-<!-- section:release-notes --><!-- /section:release-notes -->
+<!-- section:release-notes -->
+## Release notes — v0.15.0 (2026-06-27)
+
+### 🎉 Features
+
+- Centralize the per-package build as an nmr-compile bin (#419)
+
+  Introduces `nmr-compile`, a single command shipped with `@williamthorsen/nmr` that compiles each workspace package and now backs the default build. Consuming repos can delete their own per-package build script and pick up future build fixes just by upgrading nmr. Repeated builds with unchanged source now reliably skip recompiling instead of occasionally rebuilding for no reason, and import aliases now resolve correctly in symlinked checkouts.
+
+### 🐛 Bug fixes
+
+- Write the build cache only after a successful compile (#421)
+
+  Fixes an issue where a package compile that failed partway — from a crash, disk error, or transient build failure — could leave stale or incomplete output that the next build skipped over as unchanged. The next build now retries the failed compile, so recovering no longer requires a manual `nmr clean` or a source-file edit.
+
+- Stop sync-agent-files --check failing on version-only bumps (#424)
+
+  Fixes an issue where `nmr sync-agent-files --check` failed after an nmr upgrade even when the managed agent guidance was identical. The check now passes whenever the guidance content is current, even if the version has changed.
+
+- Remove inapplicable bootstrap fallback from agent guidance (#425)
+
+  Fixes an issue where the agent guidance bundled with nmr told coding agents to run a recovery step that exists only in the nmr repo itself.
+<!-- /section:release-notes -->
 
 ## Installation
 
@@ -137,7 +159,7 @@ These scripts are available out of the box. Repo-wide config (tier 2) and per-pa
 | `check`            | `typecheck`, `fmt:check`, `lint:check`, `test`           |
 | `check:strict`     | `typecheck`, `fmt:check`, `lint:strict`, `test:coverage` |
 | `clean`            | `pnpm exec rimraf dist/*`                                |
-| `compile`          | `tsx ../../config/build.ts`                              |
+| `compile`          | `nmr-compile`                                            |
 | `fix`              | `lint`, `fmt`                                            |
 | `fix:check`        | `fmt:check`, `lint:check`                                |
 | `fmt`              | `prettier --list-different --write .`                    |
@@ -321,7 +343,7 @@ The default root `check:strict` composite includes `check:agent-files`, which ru
 To expose the synced guidance to Claude Code sessions, add this include to the consuming repo's `.agents/PROJECT.md`:
 
 ```markdown
-@.agents/nmr/AGENTS.md
+@nmr/AGENTS.md
 ```
 
 ### `sync-pnpm-version`
@@ -334,6 +356,14 @@ nmr sync-pnpm-version
 
 ## Standalone utilities
 
+### `nmr-compile`
+
+Compile a single package's `src` tree to `dist/esm` with esbuild. Rewrites `~/` (package-root) import aliases and `.ts`→`.js` specifiers to match the emitted output, and skips the build when no input has changed (a content-and-path hash is cached in `dist/esm/.cache`). This is the default `compile` script — run it from a package directory.
+
+```bash
+nmr-compile
+```
+
 ### `ensure-prepublish-hooks`
 
 Verify that all publishable workspace packages have a `prepublishOnly` script. Exits non-zero if any are missing.

package/bin/nmr-compile.js

@@ -0,0 +1,11 @@
+#!/usr/bin/env node
+try {
+  await import('../dist/esm/cli-build.js');
+} catch (error) {
+  if (error.code === 'ERR_MODULE_NOT_FOUND') {
+    process.stderr.write('nmr-compile: build output not found — run `pnpm run build` first\n');
+  } else {
+    process.stderr.write(`nmr-compile: failed to load: ${error.message}\n`);
+  }
+  process.exit(1);
+}

package/dist/esm/.cache

@@ -1 +1 @@
-100ea1821185a3e234d52dd9a44609bf7ead7593a0e877d8d1c331754f7883a4
+d2f01850cfe4f42bf00cb8b8eaf3d3fab438916c419957842d927d22fb9d67cf

package/dist/esm/cli-build.d.ts

@@ -0,0 +1 @@
+export {};

package/dist/esm/cli-build.js

@@ -0,0 +1,7 @@
+import { buildPackage } from "./commands/build.js";
+try {
+  await buildPackage(process.cwd());
+} catch (error) {
+  console.error(error instanceof Error ? error.message : String(error));
+  process.exit(1);
+}

package/dist/esm/cli-sync-agent-files.js

@@ -1,31 +1,38 @@
+import { parseArgs, translateParseError } from "@williamthorsen/nmr-core";
 import { check, sync } from "./commands/sync-agent-files.js";
 import { findMonorepoRoot } from "./context.js";
-function parseArgs(argv) {
-  const args = argv.slice(2);
-  if (args.length === 0) return { mode: "sync" };
-  if (args.length === 1 && args[0] === "--check") return { mode: "check" };
-  return { error: `Usage: nmr sync-agent-files [--check]` };
-}
+const flagSchema = {
+  check: { long: "--check", type: "boolean" }
+};
+const { flags } = parseArgsOrExit(process.argv.slice(2));
 try {
-  const parsed = parseArgs(process.argv);
-  if ("error" in parsed) {
-    console.error(parsed.error);
+  runCommand(flags.check);
+} catch (error) {
+  console.error(error instanceof Error ? error.message : String(error));
+  process.exit(1);
+}
+function parseArgsOrExit(argv) {
+  try {
+    return parseArgs(argv, flagSchema);
+  } catch (error) {
+    console.error(`Error: ${translateParseError(error)}`);
     process.exit(1);
   }
+}
+function runCommand(checkOnly) {
   const monorepoRoot = findMonorepoRoot();
-  if (parsed.mode === "sync") {
-    const { written, stamp } = sync(monorepoRoot);
-    console.info(`\u2713 Wrote ${written} (${stamp})`);
+  if (!checkOnly) {
+    const { path: destinationPath, packageSpecifier, changed } = sync(monorepoRoot);
+    console.info(
+      changed ? `\u2713 Wrote ${destinationPath} (${packageSpecifier})` : `\u2713 ${destinationPath} already up to date`
+    );
     process.exit(0);
   }
   const result = check(monorepoRoot);
   if (result.ok) {
-    console.info(`\u2713 .agents/nmr/AGENTS.md is in sync (${result.stamp})`);
+    console.info("\u2713 .agents/nmr/AGENTS.md is in sync");
     process.exit(0);
   }
   console.error(result.reason);
   process.exit(1);
-} catch (error) {
-  console.error(error instanceof Error ? error.message : String(error));
-  process.exit(1);
 }

package/dist/esm/commands/build.d.ts

@@ -0,0 +1,15 @@
+import { type Format, type Platform } from 'esbuild';
+export interface BuildOptions {
+    aliases?: Record<string, string>;
+    entryGlobs?: string[];
+    ignore?: string[];
+    outdir?: string;
+    cacheFile?: string;
+    format?: Format;
+    platform?: Platform;
+    target?: string;
+}
+export declare function buildPackage(packageDir: string, options?: BuildOptions): Promise<void>;
+export declare function computeBuildHash(packageDir: string, files: string[], outputConfig: object): Promise<string>;
+export declare function resolveAliasImports(code: string, fileDir: string, aliasMap: Record<string, string>, packageDir: string): string;
+export declare function rewriteTsImportExtensions(code: string): string;

package/dist/esm/commands/build.js

@@ -0,0 +1,122 @@
+import { createHash } from "node:crypto";
+import { existsSync, readFileSync, realpathSync } from "node:fs";
+import { mkdir, readFile, writeFile } from "node:fs/promises";
+import path from "node:path";
+import { build } from "esbuild";
+import { glob } from "glob";
+const PACKAGE_ICON = "\u{1F4E6}";
+const SKIPPED_ICON = "\u23ED\uFE0F";
+const DEFAULT_ALIASES = { "~/": "." };
+const DEFAULT_ENTRY_GLOBS = ["src/**/*.ts"];
+const DEFAULT_IGNORE = ["**/__tests__/**"];
+const DEFAULT_OUTDIR = "dist/esm/";
+const DEFAULT_CACHE_FILE = "dist/esm/.cache";
+const DEFAULT_FORMAT = "esm";
+const DEFAULT_PLATFORM = "node";
+const DEFAULT_TARGET = "es2022";
+async function buildPackage(packageDir, options = {}) {
+  const aliases = options.aliases ?? DEFAULT_ALIASES;
+  const cacheFile = options.cacheFile ?? DEFAULT_CACHE_FILE;
+  const outputConfig = {
+    format: options.format ?? DEFAULT_FORMAT,
+    platform: options.platform ?? DEFAULT_PLATFORM,
+    target: [options.target ?? DEFAULT_TARGET]
+  };
+  const entryPoints = await glob(options.entryGlobs ?? DEFAULT_ENTRY_GLOBS, {
+    cwd: packageDir,
+    ignore: options.ignore ?? DEFAULT_IGNORE
+  });
+  const dependencies = ["package.json"];
+  const { changed, currentHash } = await detectBuildChanges(
+    packageDir,
+    [...entryPoints, ...dependencies],
+    outputConfig,
+    cacheFile
+  );
+  if (!changed) {
+    return;
+  }
+  await build({
+    absWorkingDir: packageDir,
+    entryPoints,
+    outdir: options.outdir ?? DEFAULT_OUTDIR,
+    bundle: false,
+    sourcemap: false,
+    plugins: [rewriteTsExtensions(packageDir, aliases)],
+    ...outputConfig
+  });
+  await writeBuildCache(packageDir, cacheFile, currentHash);
+}
+async function computeBuildHash(packageDir, files, outputConfig) {
+  const hash = createHash("sha256");
+  for (const file of [...files].sort()) {
+    hash.update(file);
+    hash.update("\0");
+    hash.update(await readFile(path.join(packageDir, file)));
+  }
+  hash.update(JSON.stringify(outputConfig));
+  return hash.digest("hex");
+}
+function resolveAliasImports(code, fileDir, aliasMap, packageDir) {
+  let result = code;
+  for (const [alias, targetDir] of Object.entries(aliasMap)) {
+    const escaped = alias.replaceAll(/[.*+?^${}()|[\]\\]/g, String.raw`\$&`);
+    const regex = new RegExp(String.raw`(?<=from\s+['"])${escaped}([^'"]+)(?=['"])`, "g");
+    result = result.replace(regex, (_, subpath) => {
+      const absolute = path.resolve(packageDir, targetDir, subpath);
+      const relative = path.relative(fileDir, absolute);
+      return relative.startsWith(".") ? relative : `./${relative}`;
+    });
+  }
+  return result;
+}
+function rewriteTsImportExtensions(code) {
+  return code.replaceAll(/(?<=from\s+['"])(\.{1,2}\/[^'"]+)\.ts(?=['"])/g, "$1.js");
+}
+async function detectBuildChanges(packageDir, files, outputConfig, cacheFile) {
+  const packageName = path.basename(packageDir);
+  const cachePath = path.join(packageDir, cacheFile);
+  const previousHash = existsSync(cachePath) ? readFileSync(cachePath, "utf8") : void 0;
+  const currentHash = await computeBuildHash(packageDir, files, outputConfig);
+  if (previousHash === currentHash) {
+    console.info(`${SKIPPED_ICON} ${packageName}: No changes detected. Skipping build.`);
+    return { changed: false, currentHash };
+  }
+  console.info(`${PACKAGE_ICON} ${packageName}: Changes detected.`);
+  return { changed: true, currentHash };
+}
+async function writeBuildCache(packageDir, cacheFile, hash) {
+  const cachePath = path.join(packageDir, cacheFile);
+  await mkdir(path.dirname(cachePath), { recursive: true });
+  await writeFile(cachePath, hash);
+}
+function rewriteTsExtensions(packageDir, aliasMap) {
+  const aliasBase = realpathSync(packageDir);
+  return {
+    name: "rewrite-ts-extensions",
+    setup(pluginBuild) {
+      pluginBuild.onLoad({ filter: /\.ts$/ }, async (args) => {
+        const fileDir = path.dirname(args.path);
+        let code = await readFile(args.path, "utf8");
+        let shebang = "";
+        if (code.startsWith("#!")) {
+          const newlineIndex = code.indexOf("\n");
+          if (newlineIndex === -1) {
+            return { contents: code, loader: "ts" };
+          }
+          shebang = code.slice(0, newlineIndex + 1);
+          code = code.slice(newlineIndex + 1);
+        }
+        code = resolveAliasImports(code, fileDir, aliasMap, aliasBase);
+        code = rewriteTsImportExtensions(code);
+        return { contents: `${shebang}${code}`, loader: "ts" };
+      });
+    }
+  };
+}
+export {
+  buildPackage,
+  computeBuildHash,
+  resolveAliasImports,
+  rewriteTsImportExtensions
+};

package/dist/esm/commands/sync-agent-files.d.ts

@@ -1,14 +1,13 @@
-export declare function parseSourceStamp(content: string): string | null;
+export declare function check(destinationDir: string): CheckResult;
 export interface SyncResult {
-    written: string;
-    stamp: string;
+    path: string;
+    packageSpecifier: string;
+    changed: boolean;
 }
 export declare function sync(destinationDir: string): SyncResult;
 export type CheckResult = {
     ok: true;
-    stamp: string;
 } | {
     ok: false;
     reason: string;
 };
-export declare function check(destinationDir: string): CheckResult;

package/dist/esm/commands/sync-agent-files.js

@@ -6,73 +6,59 @@ const VERSION = readPackageVersion(import.meta.url);
 const PACKAGE_NAME = "@williamthorsen/nmr";
 const DESTINATION_RELATIVE_PATH = ".agents/nmr/AGENTS.md";
 const SOURCE_FILENAME = "AGENTS.md";
-function getSourcePath() {
-  let dir = path.dirname(fileURLToPath(import.meta.url));
-  while (dir !== path.dirname(dir)) {
-    const candidate = path.join(dir, SOURCE_FILENAME);
-    if (existsSync(candidate)) return candidate;
-    dir = path.dirname(dir);
-  }
-  throw new Error(`Could not locate ${SOURCE_FILENAME} in any parent of ${fileURLToPath(import.meta.url)}`);
-}
-function getDestinationPath(destinationDir) {
-  return path.join(destinationDir, DESTINATION_RELATIVE_PATH);
-}
-function currentSourceStamp() {
-  return `${PACKAGE_NAME}@${VERSION}`;
-}
 const FRONTMATTER_REGEX = /^---\n((?:.*\n)*?)---\n/;
-function stripFrontmatter(content) {
-  return content.replace(FRONTMATTER_REGEX, "");
-}
-function parseSourceStamp(content) {
-  const frontmatterMatch = FRONTMATTER_REGEX.exec(content);
-  if (!frontmatterMatch) return null;
-  const frontmatterBody = frontmatterMatch[1] ?? "";
-  const sourceMatch = /^source:\s*['"]([^'"]+)['"]\s*$/m.exec(frontmatterBody);
-  return sourceMatch?.[1] ?? null;
-}
-function sync(destinationDir) {
-  const sourcePath = getSourcePath();
-  const sourceContent = readFileSync(sourcePath, "utf8");
-  const body = stripFrontmatter(sourceContent);
-  const stamp = currentSourceStamp();
-  const output = `---
-source: '${stamp}'
----
-${body}`;
-  const destinationPath = getDestinationPath(destinationDir);
-  mkdirSync(path.dirname(destinationPath), { recursive: true });
-  writeFileSync(destinationPath, output, "utf8");
-  return { written: destinationPath, stamp };
-}
 function check(destinationDir) {
   const destinationPath = getDestinationPath(destinationDir);
-  const expected = currentSourceStamp();
   if (!existsSync(destinationPath)) {
     return {
       ok: false,
       reason: `${DESTINATION_RELATIVE_PATH} is missing. Run \`nmr sync-agent-files\`.`
     };
   }
-  const content = readFileSync(destinationPath, "utf8");
-  const found = parseSourceStamp(content);
-  if (found === null) {
+  const expectedBody = stripFrontmatter(readFileSync(getSourcePath(), "utf8"));
+  const foundBody = stripFrontmatter(readFileSync(destinationPath, "utf8"));
+  if (foundBody !== expectedBody) {
     return {
       ok: false,
-      reason: `Cannot parse version stamp in ${DESTINATION_RELATIVE_PATH}. Run \`nmr sync-agent-files\`.`
+      reason: `${DESTINATION_RELATIVE_PATH} content is out of date. Run \`nmr sync-agent-files\`.`
     };
   }
-  if (found !== expected) {
-    return {
-      ok: false,
-      reason: `${DESTINATION_RELATIVE_PATH} is out of sync (file: ${found}, installed: ${expected}). Run \`nmr sync-agent-files\`.`
-    };
+  return { ok: true };
+}
+function sync(destinationDir) {
+  const body = stripFrontmatter(readFileSync(getSourcePath(), "utf8"));
+  const packageSpecifier = buildPackageSpecifier();
+  const destinationPath = getDestinationPath(destinationDir);
+  if (existsSync(destinationPath) && stripFrontmatter(readFileSync(destinationPath, "utf8")) === body) {
+    return { path: destinationPath, packageSpecifier, changed: false };
   }
-  return { ok: true, stamp: expected };
+  const output = `---
+source: '${packageSpecifier}'
+---
+${body}`;
+  mkdirSync(path.dirname(destinationPath), { recursive: true });
+  writeFileSync(destinationPath, output, "utf8");
+  return { path: destinationPath, packageSpecifier, changed: true };
+}
+function buildPackageSpecifier() {
+  return `${PACKAGE_NAME}@${VERSION}`;
+}
+function getDestinationPath(destinationDir) {
+  return path.join(destinationDir, DESTINATION_RELATIVE_PATH);
+}
+function getSourcePath() {
+  let dir = path.dirname(fileURLToPath(import.meta.url));
+  while (dir !== path.dirname(dir)) {
+    const candidate = path.join(dir, SOURCE_FILENAME);
+    if (existsSync(candidate)) return candidate;
+    dir = path.dirname(dir);
+  }
+  throw new Error(`Could not locate ${SOURCE_FILENAME} in any parent of ${fileURLToPath(import.meta.url)}`);
+}
+function stripFrontmatter(content) {
+  return content.replace(FRONTMATTER_REGEX, "");
 }
 export {
   check,
-  parseSourceStamp,
   sync
 };

package/dist/esm/commands/sync-pnpm-version.js

@@ -1,8 +1,8 @@
 import { readFileSync, writeFileSync } from "node:fs";
 import path from "node:path";
-import { CodeQualityPnpmWorkflowSchema, getPnpmVersion } from "../helpers/code-quality-pnpm-action.js";
+import { parseDocument } from "yaml";
+import { CodeQualityPnpmWorkflowSchema, getPnpmVersionNodes } from "../helpers/code-quality-pnpm-action.js";
 import { readPackageJson } from "../helpers/package-json.js";
-import { readYamlFile } from "../helpers/yaml-utils.js";
 const WORKFLOW_RELATIVE_PATH = ".github/workflows/code-quality.yaml";
 function extractPnpmVersion(packageManager) {
   if (!packageManager) {
@@ -23,18 +23,23 @@ packageManager field: ${pkg.packageManager ?? "(not set)"}`
   }
   console.info(`Package.json pnpm version: ${pnpmVersion}`);
   const workflowPath = path.join(monorepoRoot, WORKFLOW_RELATIVE_PATH);
-  const workflowData = readYamlFile(workflowPath);
-  const workflow = CodeQualityPnpmWorkflowSchema.parse(workflowData);
-  const currentWorkflowVersion = getPnpmVersion(workflow);
-  console.info(`Current workflow pnpm version: ${currentWorkflowVersion}`);
-  if (currentWorkflowVersion === pnpmVersion) {
+  const doc = parseDocument(readFileSync(workflowPath, "utf8"));
+  const [parseError] = doc.errors;
+  if (parseError) {
+    throw new Error(`Failed to parse workflow file: ${workflowPath}
+${parseError.message}`);
+  }
+  CodeQualityPnpmWorkflowSchema.parse(doc.toJS());
+  const outdatedNodes = getPnpmVersionNodes(doc).filter((node) => String(node.value) !== pnpmVersion);
+  if (outdatedNodes.length === 0) {
     console.info("Workflow pnpm version is already up to date");
     return;
   }
-  const originalContent = readFileSync(workflowPath, "utf8");
-  const updatedContent = originalContent.replace(/(\s+pnpm-version:\s+)(['"]?)[\d.]+\2/, `$1$2${pnpmVersion}$2`);
-  writeFileSync(workflowPath, updatedContent, "utf8");
-  console.info(`\u2713 Updated workflow pnpm version: ${currentWorkflowVersion} \u2192 ${pnpmVersion}`);
+  for (const node of outdatedNodes) {
+    node.value = pnpmVersion;
+  }
+  writeFileSync(workflowPath, doc.toString(), "utf8");
+  console.info(`\u2713 Updated ${outdatedNodes.length} pnpm-version occurrence(s) \u2192 ${pnpmVersion}`);
 }
 export {
   extractPnpmVersion,

package/dist/esm/context.js

@@ -1,6 +1,6 @@
 import { existsSync, readdirSync, readFileSync, statSync } from "node:fs";
 import path from "node:path";
-import yaml from "js-yaml";
+import { parse } from "yaml";
 import { loadConfig } from "./config.js";
 import { isObject } from "./helpers/type-guards.js";
 function findMonorepoRoot(startDir) {
@@ -19,7 +19,7 @@ function findMonorepoRoot(startDir) {
 function getWorkspacePackageDirs(monorepoRoot) {
   const workspaceFile = path.join(monorepoRoot, "pnpm-workspace.yaml");
   const content = readFileSync(workspaceFile, "utf8");
-  const parsed = yaml.load(content);
+  const parsed = parse(content);
   const packages = getPackagesFromParsedYaml(parsed);
   if (!packages) {
     return [];

package/dist/esm/default-scripts.js

@@ -3,7 +3,7 @@ const commonWorkspaceScripts = {
   check: ["typecheck", "fmt:check", "lint:check", "test"],
   "check:strict": ["typecheck", "fmt:check", "lint:strict", "test:coverage"],
   clean: "pnpm exec rimraf dist/*",
-  compile: "tsx ../../config/build.ts",
+  compile: "nmr-compile",
   fix: ["lint", "fmt"],
   "fix:check": ["fmt:check", "lint:check"],
   fmt: "prettier --list-different --write .",

package/dist/esm/helpers/code-quality-pnpm-action.d.ts

@@ -1,3 +1,4 @@
+import { type Document, type Scalar } from 'yaml';
 import { z } from 'zod';
 export declare const CodeQualityPnpmWorkflowSchema: z.ZodObject<{
     jobs: z.ZodObject<{
@@ -9,4 +10,4 @@ export declare const CodeQualityPnpmWorkflowSchema: z.ZodObject<{
     }, z.core.$loose>;
 }, z.core.$loose>;
 export type CodeQualityPnpmWorkflow = z.infer<typeof CodeQualityPnpmWorkflowSchema>;
-export declare function getPnpmVersion(workflow: CodeQualityPnpmWorkflow): string;
+export declare function getPnpmVersionNodes(doc: Document): Scalar[];

package/dist/esm/helpers/code-quality-pnpm-action.js

@@ -1,3 +1,4 @@
+import { isScalar, visit } from "yaml";
 import { z } from "zod";
 const CodeQualityPnpmWorkflowSchema = z.looseObject({
   jobs: z.looseObject({
@@ -8,10 +9,18 @@ const CodeQualityPnpmWorkflowSchema = z.looseObject({
     })
   })
 });
-function getPnpmVersion(workflow) {
-  return workflow.jobs["code-quality"].with["pnpm-version"];
+function getPnpmVersionNodes(doc) {
+  const nodes = [];
+  visit(doc, {
+    Pair(_, pair) {
+      if (isScalar(pair.key) && pair.key.value === "pnpm-version" && isScalar(pair.value)) {
+        nodes.push(pair.value);
+      }
+    }
+  });
+  return nodes;
 }
 export {
   CodeQualityPnpmWorkflowSchema,
-  getPnpmVersion
+  getPnpmVersionNodes
 };

package/dist/esm/tests/helpers/get-string-from-yaml-file.js

@@ -1,10 +1,10 @@
 import assert from "node:assert";
 import fs from "node:fs";
-import yaml from "js-yaml";
+import { parse } from "yaml";
 import { getValueAtPathOrThrow } from "./get-value-at-path.js";
 async function getStringFromYamlFile(filePath, keyPath, label) {
   const raw = await fs.promises.readFile(filePath, { encoding: "utf8" });
-  const parsed = yaml.load(raw);
+  const parsed = parse(raw);
   assert.ok(parsed, `YAML content not found in ${filePath}`);
   const value = getValueAtPathOrThrow(parsed, keyPath);
   assert.ok(typeof value === "string" && value.length > 0, `${label} not found at ${keyPath}`);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@williamthorsen/nmr",
-  "version": "0.14.1",
+  "version": "0.15.0",
   "private": false,
   "description": "Context-aware script runner for PNPM monorepos",
   "keywords": [
@@ -29,6 +29,7 @@
   "bin": {
     "ensure-prepublish-hooks": "bin/ensure-prepublish-hooks.js",
     "nmr": "bin/nmr.js",
+    "nmr-compile": "bin/nmr-compile.js",
     "nmr-report-overrides": "bin/nmr-report-overrides.js",
     "nmr-sync-agent-files": "bin/nmr-sync-agent-files.js",
     "nmr-sync-pnpm-version": "bin/nmr-sync-pnpm-version.js"
@@ -39,10 +40,15 @@
     "dist"
   ],
   "dependencies": {
+    "esbuild": "0.28.1",
+    "glob": "13.0.6",
     "jiti": "2.7.0",
-    "js-yaml": "4.1.1",
+    "yaml": "2.9.0",
     "zod": "4.4.3",
-    "@williamthorsen/nmr-core": "0.3.2"
+    "@williamthorsen/nmr-core": "0.4.0"
+  },
+  "devDependencies": {
+    "@williamthorsen/toolbelt.strings": "3.1.4"
   },
   "publishConfig": {
     "access": "public"

package/dist/esm/helpers/yaml-utils.d.ts

@@ -1 +0,0 @@
-export declare function readYamlFile(filepath: string): unknown;

package/dist/esm/helpers/yaml-utils.js

@@ -1,14 +0,0 @@
-import { readFileSync } from "node:fs";
-import yaml from "js-yaml";
-function readYamlFile(filepath) {
-  try {
-    const content = readFileSync(filepath, "utf8");
-    return yaml.load(content);
-  } catch (error) {
-    throw new Error(`Failed to read YAML file: ${filepath}
-${error instanceof Error ? error.message : String(error)}`);
-  }
-}
-export {
-  readYamlFile
-};