@williamthorsen/nmr 0.27.0 → 0.28.0

package/.readyup/kits/default.js

@@ -1,6 +1,6 @@
 /** @noformat — @generated. Do not edit. Compiled by rdy. */
 /* eslint-disable */
-export const __readyupVersion = "0.23.0";
+export const __readyupVersion = "0.24.0";
 
 
 // .readyup/kits/default.ts
@@ -163,6 +163,7 @@ var default_default = defineRdyKit({
         {
           name: ".tool-versions does not list pnpm",
           severity: "warn",
+          quiet: true,
           check: toolVersionsHasNoPnpm,
           fix: "Remove pnpm from .tool-versions \u2014 manage via packageManager field and corepack"
         },
@@ -201,16 +202,10 @@ var default_default = defineRdyKit({
         {
           name: "root package.json has no nmr-provided scripts",
           severity: "warn",
+          quiet: true,
           check: noRedundantRootScripts,
           fix: "Remove scripts from root package.json that nmr provides as built-in root scripts \u2014 invoke via nmr directly"
         },
-        {
-          name: "root:lint:strict does not use echo fallback",
-          severity: "warn",
-          skip: () => !scriptExists("root:lint:strict") ? "no root:lint:strict script" : false,
-          check: () => !scriptMatches("root:lint:strict", /\becho\b/),
-          fix: "Replace the echo fallback in root:lint:strict \u2014 strict-lint now supports path arguments"
-        },
         // -- Workspace build readiness -------------------------------------------
         {
           name: "all workspace packages can build",
@@ -222,6 +217,7 @@ var default_default = defineRdyKit({
         {
           name: "no retired Vitest config variants",
           severity: "error",
+          quiet: true,
           check: () => noRetiredVitestConfigs(),
           fix: "Delete every vitest.standalone.config.* and vitest.integration.config.*. nmr's test scripts select Vitest projects instead of naming config files"
         },
@@ -246,6 +242,7 @@ var default_default = defineRdyKit({
         {
           name: "no package re-exports the ancestor Vitest config",
           severity: "recommend",
+          quiet: true,
           check: () => noReExportOnlyVitestConfigs(),
           fix: "Delete these files. Vitest resolves config by walking up from the run root, so a per-package re-export is redundant"
         },
@@ -263,23 +260,18 @@ var default_default = defineRdyKit({
           check: () => hasDevDependency("v11y-check"),
           fix: "pnpm add --save-dev v11y-check"
         },
-        {
-          name: "code-quality workflow does not use nmr prepush",
-          severity: "warn",
-          skip: () => !fileExists(".github/workflows/code-quality.yaml") ? "no code-quality workflow" : false,
-          check: codeQualityWorkflowDoesNotUseNmrPrepush,
-          fix: 'Change the check-command in .github/workflows/code-quality.yaml from "pnpm exec nmr prepush" to "pnpm exec nmr ci", which runs the same checks without the audit that audit.yaml already runs'
-        },
         // -- Legacy script runner ------------------------------------------------
         {
           name: "scripts/run-workspace-script.ts does not exist",
           severity: "error",
+          quiet: true,
           check: () => !fileExists("scripts/run-workspace-script.ts"),
           fix: "Delete scripts/run-workspace-script.ts \u2014 nmr replaces this custom script runner"
         },
         {
           name: 'no workspace packages reference run-workspace-script or "pnpm run ws"',
           severity: "error",
+          quiet: true,
           check: noWorkspaceRunScriptReferences,
           fix: 'Remove "ws" script entries and replace any "pnpm run ws" invocations with nmr in each packages/*/package.json'
         }
@@ -365,16 +357,11 @@ function hasPrettierConfigKey(cwd) {
   if (manifest === void 0) return false;
   try {
     const parsed = JSON.parse(manifest);
-    return isRecord(parsed) && parsed.prettier !== void 0;
+    return isRecord(parsed) && parsed["prettier"] !== void 0;
   } catch {
     return false;
   }
 }
-function codeQualityWorkflowDoesNotUseNmrPrepush() {
-  const content = readFile(".github/workflows/code-quality.yaml");
-  if (content === void 0) return true;
-  return !/check-command:\s*pnpm exec nmr prepush(\s|$)/.test(content);
-}
 function everyTestFileNamesItsTier(cwd = process.cwd()) {
   const untiered = findTestFiles(cwd).filter((path2) => !hasTierInfix(path2));
   if (untiered.length === 0) return true;
@@ -388,11 +375,11 @@ function formatPaths(paths) {
 ${paths.map((path2) => `      ${path2}`).join("\n")}`;
 }
 function getMinVersion() {
-  const picked = { "version": "0.27.0" };
-  if (typeof picked.version !== "string") {
+  const picked = { "version": "0.28.0" };
+  if (typeof picked["version"] !== "string") {
     throw new TypeError("nmr/package.json: 'version' must be a string");
   }
-  return picked.version;
+  return picked["version"];
 }
 function hasSupportedEslintVersion() {
   return hasMinDevDependencyVersion("eslint", MIN_ESLINT_VERSION, {
@@ -423,7 +410,7 @@ function noReExportOnlyVitestConfigs(cwd = process.cwd()) {
 function noRedundantRootScripts() {
   const pkg = readPackageJson();
   if (!pkg) return true;
-  const scripts = pkg.scripts;
+  const scripts = pkg["scripts"];
   if (!isRecord(scripts)) return true;
   const builtInNames = Object.keys(getDefaultRootScripts());
   const redundant = Object.keys(scripts).filter((name) => builtInNames.includes(name));
@@ -468,20 +455,6 @@ function readFileIn(cwd, relativePath) {
 function resolvesVersionViaWorkspace(range) {
   return WORKSPACE_VERSION_MARKERS.some((marker) => range.startsWith(marker));
 }
-function scriptExists(name) {
-  const pkg = readPackageJson();
-  if (!pkg) return false;
-  const scripts = pkg.scripts;
-  return isRecord(scripts) && Object.hasOwn(scripts, name);
-}
-function scriptMatches(name, pattern) {
-  const pkg = readPackageJson();
-  if (!pkg) return false;
-  const scripts = pkg.scripts;
-  if (!isRecord(scripts)) return false;
-  const value = scripts[name];
-  return typeof value === "string" && pattern.test(value);
-}
 function toolVersionsHasNoPnpm() {
   const content = readFile(".tool-versions");
   if (content === void 0) return true;
@@ -494,7 +467,6 @@ function vitestRootConfigBuildsOnSharedConfig(cwd = process.cwd()) {
   return checkRootVitestConfig("vitest.root.config", "defineRootVitestConfig", cwd);
 }
 export {
-  codeQualityWorkflowDoesNotUseNmrPrepush,
   default_default as default,
   everyTestFileNamesItsTier,
   hasSupportedEslintVersion,

package/.readyup/manifest.json

@@ -7,10 +7,10 @@
       ],
       "name": "default",
       "path": "kits/default.js",
-      "readyupVersion": "0.23.0",
+      "readyupVersion": "0.24.0",
       "source": "kits/default.ts",
-      "sourceHash": "d95cb08e",
-      "targetHash": "e4affaeb"
+      "sourceHash": "7b2a223f",
+      "targetHash": "b7abeb12"
     }
   ]
 }

package/README.md

@@ -3,15 +3,29 @@
 Context-aware script runner for pnpm monorepos. Ships an `nmr` (node-monorepo run) binary that provides centralized, consistent script execution across workspace packages and the monorepo root.
 
 <!-- section:release-notes -->
-## Release notes — v0.27.0 (2026-08-05)
+## Release notes — v0.28.0 (2026-08-08)
 
 ### 🎉 Features
 
-- 🚨 **Breaking:** Lint the whole tree in one process, not one per workspace (#604)
+- Stop reporting absence checks that pass (#610)
 
-  Linting of the entire monorepo now runs in a single call instead of via fan-out, eliminating the startup time previously incurred for each workspace.
+  A ReadyUp check that checks for a problem (such as an unwanted file or a stale config reference) now stays silent unless it finds one. The `nmr`, `release-kit`, and `v11y-check` ReadyUp kits previously printed a line for every such check on every run.
 
-  As a result of the change, `lint:pre` and `lint:post` hooks in a workspace are no longer triggered by a run from the monorepo root. They continue to be triggered by a run targeting the workspace itself.
+- Stop reporting non-issues in the readyup kits (#613)
+
+  Modifies the `release-kit` and `nmr` ReadyUp kits to avoid verbose reporting when an initial check determines that further checks aren't applicable. In particular, a repo with no `release-kit` config file gets a single line in the `release-kit` report, and a repo that publishes nothing now bypasses the `npm-auto-publish` kit instead of failing it.
+
+### 🐛 Bug fixes
+
+- Fix prototype-key hole in nmr command runner (#624)
+
+  Fixes an issue where running `nmr` with a command named for property inherited by JS objects (such as `constructor` or `toString`) failed with a type error instead of reporting the command as unknown.
+
+  Also fixes all lint issues in the `nmr` package.
+
+- Publish build output atomically so a failed build cannot destroy it (#631)
+
+  Fixes an issue where a failed or still-running `nmr build` could leave a package with no build output at all, breaking the tooling that a subsequent build depends on. Separately, the error reported when a package's build output is missing now names the correct recovery command.
 <!-- /section:release-notes -->
 
 ## Installation
@@ -628,7 +642,9 @@ Compile a single package's `src` tree to `dist/esm` with the TypeScript compiler
 
 **What it compiles.** Entry points are `src/**/*.ts` less the directories that hold test scaffolding rather than shipped code: `__fixtures__/`, `__mocks__/`, `__tests__/`, and `test-utils/`. Add to that list per package with [`build.extraIgnorePatterns`](#package-level-configuration). Ignoring a directory drops it as an _entry point_, not from the emit: the compiler still emits whatever the surviving entry points import, so a helper that production code uses is still compiled and its importer never emits a dangling specifier. This list is deliberately not the Vitest [coverage exclusions](#what-the-config-excludes) — helpers live in `test-utils/` precisely so they stay covered.
 
-**The build owns its output directory.** Every rebuild wipes `dist/esm` before emitting, so the directory holds exactly the current emit: a source that was deleted, or that a widened ignore set now covers, leaves nothing behind. Assets therefore belong outside the output directory, or in a `build:post` hook, which runs after the wipe and so composes correctly. Note that a bare `nmr compile` runs no hook, so assets a `build:post` step copies in are absent until a full `nmr build` restores them. An `outdir` that does not resolve inside the package is rejected rather than wiped.
+**The build owns its output directory.** Every rebuild replaces `dist/esm` wholesale, so the directory holds exactly the current emit: a source that was deleted, or that a widened ignore set now covers, leaves nothing behind. Assets therefore belong outside the output directory, or in a `build:post` hook, which runs after the output is published and so composes correctly. Note that a bare `nmr compile` runs no hook, so assets a `build:post` step copies in are absent until a full `nmr build` restores them. An `outdir` that does not resolve inside the package is rejected rather than replaced.
+
+**The replacement is atomic.** The emit is buffered in memory, written to a staging directory beside the output directory, and swapped into place by rename. A build that fails for any reason -- a malformed tsconfig, an unresolvable alias, a full disk -- therefore leaves the previous output exactly as it was. `dist/esm` is never observed mid-write: it holds the previous build or the new one, and is absent only between the two renames. This matters most when the package being rebuilt supplies a binary that other packages in the same recursive build invoke.
 
 `typescript` is a peer dependency (`>=5.7.0 <7`); the consuming repo provides it. The floor is what `rewriteRelativeImportExtensions` requires; the ceiling is because TypeScript 7 ships no compiler API — its root export is a version constant, so `nmr-compile` cannot run on it. Relative imports in source must carry explicit `.ts` extensions for them to be rewritten.
 

package/bin/ensure-prepublish-hooks.js

@@ -3,7 +3,7 @@ try {
   await import('../dist/esm/cli-ensure-prepublish-hooks.js');
 } catch (error) {
   if (error.code === 'ERR_MODULE_NOT_FOUND') {
-    process.stderr.write('ensure-prepublish-hooks: build output not found — run `pnpm run build` first\n');
+    process.stderr.write('ensure-prepublish-hooks: build output not found — run `pnpm run bootstrap` first\n');
   } else {
     process.stderr.write(`ensure-prepublish-hooks: failed to load: ${error.message}\n`);
   }

package/bin/nmr-clean.js

@@ -3,7 +3,7 @@ try {
   await import('../dist/esm/cli-clean.js');
 } catch (error) {
   if (error.code === 'ERR_MODULE_NOT_FOUND') {
-    process.stderr.write('nmr-clean: build output not found — run `pnpm run build` first\n');
+    process.stderr.write('nmr-clean: build output not found — run `pnpm run bootstrap` first\n');
   } else {
     process.stderr.write(`nmr-clean: failed to load: ${error.message}\n`);
   }

package/bin/nmr-compile.js

@@ -3,7 +3,7 @@ try {
   await import('../dist/esm/cli-build.js');
 } catch (error) {
   if (error.code === 'ERR_MODULE_NOT_FOUND') {
-    process.stderr.write('nmr-compile: build output not found — run `pnpm run build` first\n');
+    process.stderr.write('nmr-compile: build output not found — run `pnpm run bootstrap` first\n');
   } else {
     process.stderr.write(`nmr-compile: failed to load: ${error.message}\n`);
   }

package/bin/nmr-fmt.js

@@ -3,7 +3,7 @@ try {
   await import('../dist/esm/cli-fmt.js');
 } catch (error) {
   if (error.code === 'ERR_MODULE_NOT_FOUND') {
-    process.stderr.write('nmr-fmt: build output not found — run `pnpm run build` first\n');
+    process.stderr.write('nmr-fmt: build output not found — run `pnpm run bootstrap` first\n');
   } else {
     process.stderr.write(`nmr-fmt: failed to load: ${error.message}\n`);
   }

package/bin/nmr-report-overrides.js

@@ -3,7 +3,7 @@ try {
   await import('../dist/esm/cli-report-overrides.js');
 } catch (error) {
   if (error.code === 'ERR_MODULE_NOT_FOUND') {
-    process.stderr.write('nmr-report-overrides: build output not found — run `pnpm run build` first\n');
+    process.stderr.write('nmr-report-overrides: build output not found — run `pnpm run bootstrap` first\n');
   } else {
     process.stderr.write(`nmr-report-overrides: failed to load: ${error.message}\n`);
   }

package/bin/nmr-taze.js

@@ -3,7 +3,7 @@ try {
   await import('../dist/esm/cli-taze.js');
 } catch (error) {
   if (error.code === 'ERR_MODULE_NOT_FOUND') {
-    process.stderr.write('nmr-taze: build output not found — run `pnpm run build` first\n');
+    process.stderr.write('nmr-taze: build output not found — run `pnpm run bootstrap` first\n');
   } else {
     process.stderr.write(`nmr-taze: failed to load: ${error.message}\n`);
   }

package/bin/nmr.js

@@ -3,7 +3,7 @@ try {
   await import('../dist/esm/cli.js');
 } catch (error) {
   if (error.code === 'ERR_MODULE_NOT_FOUND') {
-    process.stderr.write('nmr: build output not found — run `pnpm run build` first\n');
+    process.stderr.write('nmr: build output not found — run `pnpm run bootstrap` first\n');
   } else {
     process.stderr.write(`nmr: failed to load: ${error.message}\n`);
   }

package/dist/esm/check-cache.js

@@ -105,7 +105,7 @@ export async function readBuildOutputState(monorepoRoot, config) {
         return state;
     }
     const registry = buildWorkspaceRegistry(config);
-    if (JSON.stringify(registry.build) !== JSON.stringify(getDefaultWorkspaceScripts().build)) {
+    if (JSON.stringify(registry['build']) !== JSON.stringify(getDefaultWorkspaceScripts()['build'])) {
         return state;
     }
     for (const packageDir of packageDirs) {
@@ -132,7 +132,8 @@ export async function removeCheckCache(scopeDir) {
 }
 export function resolveCacheableCommands(checkCache) {
     const commands = new Set([...DEFAULT_CACHEABLE_COMMANDS, ...(checkCache?.extraCommands ?? [])]);
-    for (const excluded of checkCache?.excludeCommands ?? []) {
+    const excludedCommands = checkCache?.excludeCommands ?? [];
+    for (const excluded of excludedCommands) {
         commands.delete(excluded);
     }
     return commands;
@@ -184,10 +185,10 @@ function isCheckCacheEntry(value) {
     if (stringFields.some((field) => typeof value[field] !== 'string')) {
         return false;
     }
-    return (typeof value.durationMs === 'number' &&
-        Number.isFinite(value.durationMs) &&
-        !Number.isNaN(Date.parse(String(value.recordedAt))) &&
-        isStringRecord(value.buildDigests));
+    return (typeof value['durationMs'] === 'number' &&
+        Number.isFinite(value['durationMs']) &&
+        !Number.isNaN(Date.parse(String(value['recordedAt']))) &&
+        isStringRecord(value['buildDigests']));
 }
 function isProbeSubject(packageDir, registry) {
     const build = resolveScript('build', registry, packageDir, false);

package/dist/esm/commands/build-output.d.ts

@@ -4,6 +4,10 @@ export interface BuildOptions {
     ignorePatterns?: string[];
     outdir?: string;
 }
+export interface ScratchDirs {
+    previous: string;
+    staging: string;
+}
 export declare const DEFAULT_ENTRY_GLOBS: string[];
 export declare const DEFAULT_IGNORE_PATTERNS: string[];
 export declare const DEFAULT_OUTDIR = "dist/esm/";
@@ -11,3 +15,4 @@ export declare function hasBuildOutput(packageDir: string, options?: BuildOption
 export declare function hasExpectedBuildOutput(packageDir: string, outdir: string, entryPoints: string[]): boolean;
 export declare function readBuildDigest(packageDir: string): Promise<string | undefined>;
 export declare function resolveBuildCachePath(packageDir: string): string;
+export declare function resolveScratchDirs(emitDir: string): ScratchDirs;

package/dist/esm/commands/build-output.js

@@ -34,3 +34,11 @@ export function resolveBuildCachePath(packageDir) {
         extension: '.hash',
     });
 }
+export function resolveScratchDirs(emitDir) {
+    const parent = path.dirname(emitDir);
+    const name = path.basename(emitDir);
+    return {
+        previous: path.join(parent, `.${name}.previous`),
+        staging: path.join(parent, `.${name}.staging`),
+    };
+}

package/dist/esm/commands/build.js

@@ -1,12 +1,12 @@
 import { createHash } from 'node:crypto';
-import { existsSync, readFileSync, writeFileSync } from 'node:fs';
-import { readFile, rm } from 'node:fs/promises';
+import { existsSync } from 'node:fs';
+import { readFile, rename, rm } from 'node:fs/promises';
 import path from 'node:path';
 import { readCacheEntry, writeCacheEntry } from '@williamthorsen/nmr-core';
 import { glob } from 'glob';
 import * as ts from 'typescript';
 import { resolveConfigPath } from "../config.js";
-import { DEFAULT_ENTRY_GLOBS, DEFAULT_IGNORE_PATTERNS, DEFAULT_OUTDIR, hasExpectedBuildOutput, resolveBuildCachePath, } from "./build-output.js";
+import { DEFAULT_ENTRY_GLOBS, DEFAULT_IGNORE_PATTERNS, DEFAULT_OUTDIR, hasExpectedBuildOutput, resolveBuildCachePath, resolveScratchDirs, } from "./build-output.js";
 const PACKAGE_ICON = '📦';
 const SKIPPED_ICON = '⏭️';
 const SOURCE_ROOT = 'src';
@@ -18,7 +18,7 @@ export async function buildPackage(packageDir, options = {}) {
     assertSupportedTypeScript();
     const cachePath = resolveBuildCachePath(packageDir);
     const outdir = options.outdir ?? DEFAULT_OUTDIR;
-    resolveEmitDir(packageDir, outdir);
+    const emitDir = resolveEmitDir(packageDir, outdir);
     const emitConfig = { outdir, declaration: true, rewriteRelativeImportExtensions: true };
     const entryPoints = await glob(options.entryGlobs ?? DEFAULT_ENTRY_GLOBS, {
         cwd: packageDir,
@@ -32,6 +32,7 @@ export async function buildPackage(packageDir, options = {}) {
     ];
     const { changed, currentHash } = await detectBuildChanges(packageDir, [...entryPoints, ...dependencies], emitConfig, ts.version, cachePath, hasExpectedBuildOutput(packageDir, outdir, entryPoints));
     if (!changed) {
+        await discardScratchDirs(resolveScratchDirs(emitDir));
         return;
     }
     await emitPackage(packageDir, entryPoints, outdir);
@@ -64,10 +65,7 @@ export function resolveTsconfigChain(packageDir, configFileName = 'tsconfig.json
             throw new Error(`nmr-compile: failed to read ${normalized}.\n${formatDiagnostics([configFile.error])}`);
         }
         for (const entry of normalizeExtendsField(configFile.config)) {
-            const baseConfig = resolveExtendsTarget(entry, normalized);
-            if (baseConfig !== undefined) {
-                walk(baseConfig);
-            }
+            walk(resolveExtendsTarget(entry, normalized));
         }
     }
     walk(path.resolve(packageDir, configFileName));
@@ -77,29 +75,64 @@ async function emitPackage(packageDir, entryPoints, outdir) {
     const compilerOptions = synthesizeCompilerOptions(packageDir, outdir);
     const rootNames = entryPoints.map((entry) => path.resolve(packageDir, entry));
     const sourceRoot = path.resolve(packageDir, SOURCE_ROOT);
+    const emitDir = resolveEmitDir(packageDir, outdir);
+    const scratchDirs = resolveScratchDirs(emitDir);
+    await removeScratchDirs(scratchDirs);
     const program = ts.createProgram(rootNames, compilerOptions);
-    await rm(resolveEmitDir(packageDir, outdir), { force: true, recursive: true });
-    const emittedFiles = [];
+    const emitted = new Map();
     const emitResult = program.emit(undefined, (fileName, text, writeByteOrderMark) => {
-        ts.sys.writeFile(fileName, text, writeByteOrderMark);
-        emittedFiles.push(fileName);
+        emitted.set(fileName, { text, writeByteOrderMark });
     });
     if (emitResult.emitSkipped) {
         throw new Error(`nmr-compile: emit failed.\n${formatDiagnostics(emitResult.diagnostics)}`);
     }
-    for (const file of emittedFiles) {
-        rewriteOutputSpecifiers(file, compilerOptions, sourceRoot);
+    const staged = new Map();
+    for (const [fileName, file] of emitted) {
+        staged.set(fileName, { ...file, text: rewriteSpecifiers(fileName, file.text, compilerOptions, sourceRoot) });
+    }
+    if (staged.size === 0) {
+        await rm(emitDir, { force: true, recursive: true });
+        return;
+    }
+    writeStagedOutput(staged, emitDir, scratchDirs.staging);
+    await swapIntoPlace(emitDir, scratchDirs);
+}
+async function discardScratchDirs(scratchDirs) {
+    try {
+        await removeScratchDirs(scratchDirs);
+    }
+    catch {
     }
 }
+async function removeScratchDirs(scratchDirs) {
+    await rm(scratchDirs.previous, { force: true, recursive: true });
+    await rm(scratchDirs.staging, { force: true, recursive: true });
+}
 function resolveEmitDir(packageDir, outdir) {
     const resolved = path.resolve(packageDir, outdir);
     const relative = path.relative(packageDir, resolved);
     if (relative === '' || relative.startsWith('..') || path.isAbsolute(relative)) {
         throw new Error(`nmr-compile: refusing to build into '${outdir}', which does not resolve inside the package. ` +
-            'The build wipes its output directory before each emit, so the directory must sit below the package root.');
+            'The build replaces its output directory on each emit, so the directory must sit below the package root.');
     }
     return resolved;
 }
+async function swapIntoPlace(emitDir, scratchDirs) {
+    const hadPreviousOutput = existsSync(emitDir);
+    if (hadPreviousOutput) {
+        await rename(emitDir, scratchDirs.previous);
+    }
+    try {
+        await rename(scratchDirs.staging, emitDir);
+    }
+    catch (error) {
+        if (hadPreviousOutput && !existsSync(emitDir)) {
+            await rename(scratchDirs.previous, emitDir);
+        }
+        throw error;
+    }
+    await discardScratchDirs(scratchDirs);
+}
 function synthesizeCompilerOptions(packageDir, outdir) {
     const configPath = path.join(packageDir, 'tsconfig.json');
     const configFile = ts.readConfigFile(configPath, (fileName) => ts.sys.readFile(fileName));
@@ -125,12 +158,20 @@ function synthesizeCompilerOptions(packageDir, outdir) {
         noEmitOnError: false,
     };
 }
-function rewriteOutputSpecifiers(outputFile, compilerOptions, sourceRoot) {
+function writeStagedOutput(staged, emitDir, stagingDir) {
+    for (const [fileName, file] of staged) {
+        if (!isWithin(emitDir, fileName)) {
+            throw new Error(`nmr-compile: the compiler emitted ${fileName}, which is outside the output directory ${emitDir}. ` +
+                "Verify the resolved tsconfig's 'outDir' and 'declarationDir'.");
+        }
+        ts.sys.writeFile(path.join(stagingDir, path.relative(emitDir, fileName)), file.text, file.writeByteOrderMark);
+    }
+}
+function rewriteSpecifiers(outputFile, text, compilerOptions, sourceRoot) {
     if (!isRewritableOutput(outputFile)) {
-        return;
+        return text;
     }
-    const originalText = readFileSync(outputFile, 'utf8');
-    const sourceFile = ts.createSourceFile(outputFile, originalText, ts.ScriptTarget.Latest, false, scriptKindFor(outputFile));
+    const sourceFile = ts.createSourceFile(outputFile, text, ts.ScriptTarget.Latest, false, scriptKindFor(outputFile));
     const aliasPrefixes = collectAliasPrefixes(compilerOptions);
     const sourceContainingFile = mapOutputToSource(outputFile, compilerOptions, sourceRoot);
     const edits = [];
@@ -140,18 +181,18 @@ function rewriteOutputSpecifiers(outputFile, compilerOptions, sourceRoot) {
             return;
         }
         const start = literal.getStart(sourceFile);
-        const quote = originalText[start] ?? '"';
+        const quote = text[start] ?? '"';
         edits.push({ start, end: literal.getEnd(), text: `${quote}${replacement}${quote}` });
     });
     if (edits.length === 0) {
-        return;
+        return text;
     }
     const orderedEdits = [...edits].sort((a, b) => b.start - a.start);
-    let updatedText = originalText;
+    let updatedText = text;
     for (const edit of orderedEdits) {
         updatedText = updatedText.slice(0, edit.start) + edit.text + updatedText.slice(edit.end);
     }
-    writeFileSync(outputFile, updatedText);
+    return updatedText;
 }
 function resolveSpecifierReplacement(specifier, sourceContainingFile, compilerOptions, sourceRoot, aliasPrefixes) {
     if (isRelativeSpecifier(specifier)) {
@@ -267,9 +308,20 @@ function resolveExtendsTarget(extendsEntry, fromConfigPath) {
             return base;
         }
         const withJsonExtension = `${base}.json`;
-        return ts.sys.fileExists(withJsonExtension) ? withJsonExtension : undefined;
+        if (ts.sys.fileExists(withJsonExtension)) {
+            return withJsonExtension;
+        }
+        throw new Error(`nmr-compile: ${fromConfigPath} extends '${extendsEntry}', which does not exist.`);
+    }
+    const resolved = resolvePackageSpecifier(extendsEntry, fromConfigPath) ??
+        resolvePackageSpecifier(`${extendsEntry}/tsconfig.json`, fromConfigPath);
+    if (resolved === undefined) {
+        throw new Error(`nmr-compile: ${fromConfigPath} extends '${extendsEntry}', which does not resolve to a file.`);
     }
-    const { resolvedModule } = ts.resolveModuleName(extendsEntry, fromConfigPath, { moduleResolution: ts.ModuleResolutionKind.NodeNext, resolveJsonModule: true }, ts.sys);
+    return resolved;
+}
+function resolvePackageSpecifier(specifier, fromConfigPath) {
+    const { resolvedModule } = ts.resolveModuleName(specifier, fromConfigPath, { moduleResolution: ts.ModuleResolutionKind.NodeNext, resolveJsonModule: true }, ts.sys);
     return resolvedModule?.resolvedFileName;
 }
 function isRelativeSpecifier(specifier) {

package/dist/esm/commands/ensure-prepublish-hooks.js

@@ -17,12 +17,12 @@ export function ensurePrepublishHooks(monorepoRoot, options) {
                 packageName,
                 packageDir,
                 isPrivate: true,
-                prepublishOnly: pkg.scripts?.prepublishOnly,
+                prepublishOnly: pkg.scripts?.['prepublishOnly'],
                 action: 'ok',
             });
             continue;
         }
-        const existing = pkg.scripts?.prepublishOnly;
+        const existing = pkg.scripts?.['prepublishOnly'];
         if (existing) {
             packages.push({
                 packageName,
@@ -66,8 +66,8 @@ function addPrepublishOnly(packageDir, command) {
     if (!isObject(parsed)) {
         throw new TypeError(`Invalid package.json in ${packageDir}: expected an object`);
     }
-    const scripts = isObject(parsed.scripts) ? parsed.scripts : {};
-    scripts.prepublishOnly = command;
-    parsed.scripts = scripts;
+    const scripts = isObject(parsed['scripts']) ? parsed['scripts'] : {};
+    scripts['prepublishOnly'] = command;
+    parsed['scripts'] = scripts;
     writeFileSync(filePath, JSON.stringify(parsed, null, 2) + '\n', 'utf8');
 }

package/dist/esm/commands/fmt.js

@@ -108,7 +108,7 @@ function resolvePrettierCli() {
     const manifest = JSON.parse(readFileSync(manifestPath, 'utf8'));
     if (!isObject(manifest))
         return missing;
-    const bin = isObject(manifest.bin) ? manifest.bin[PRETTIER_PACKAGE] : manifest.bin;
+    const bin = isObject(manifest['bin']) ? manifest['bin'][PRETTIER_PACKAGE] : manifest['bin'];
     if (typeof bin !== 'string')
         return missing;
     return { ok: true, cliPath: path.resolve(path.dirname(manifestPath), bin) };

package/dist/esm/config.js

@@ -42,7 +42,7 @@ function isScriptRecord(value) {
     return true;
 }
 function validateScriptField(value, fieldName, configPath) {
-    if (!(fieldName in value) || value[fieldName] === undefined) {
+    if (!Object.hasOwn(value, fieldName) || value[fieldName] === undefined) {
         return undefined;
     }
     if (!isScriptRecord(value[fieldName])) {
@@ -54,7 +54,7 @@ function isStringArray(value) {
     return Array.isArray(value) && value.every((item) => typeof item === 'string');
 }
 function validateBuildField(value, configPath) {
-    const build = value.build;
+    const build = value['build'];
     if (build === undefined) {
         return undefined;
     }
@@ -62,14 +62,14 @@ function validateBuildField(value, configPath) {
         throw new Error(`Invalid nmr config at ${configPath}: \`build\` must be an object`);
     }
     assertRecognizedKeys(build, RECOGNIZED_BUILD_KEYS, configPath, 'build.');
-    const extraIgnorePatterns = build.extraIgnorePatterns;
+    const extraIgnorePatterns = build['extraIgnorePatterns'];
     if (extraIgnorePatterns !== undefined && !isStringArray(extraIgnorePatterns)) {
         throw new Error(`Invalid nmr config at ${configPath}: \`build.extraIgnorePatterns\` must be a string[]`);
     }
     return extraIgnorePatterns === undefined ? {} : { extraIgnorePatterns };
 }
 function validateCheckCacheField(value, configPath) {
-    const checkCache = value.checkCache;
+    const checkCache = value['checkCache'];
     if (checkCache === undefined) {
         return undefined;
     }
@@ -78,7 +78,7 @@ function validateCheckCacheField(value, configPath) {
     }
     assertRecognizedKeys(checkCache, RECOGNIZED_CHECK_CACHE_KEYS, configPath, 'checkCache.');
     const config = {};
-    const enabled = checkCache.enabled;
+    const enabled = checkCache['enabled'];
     if (enabled !== undefined) {
         if (typeof enabled !== 'boolean') {
             throw new TypeError(`Invalid nmr config at ${configPath}: \`checkCache.enabled\` must be a boolean`);
@@ -98,7 +98,7 @@ function validateCheckCacheField(value, configPath) {
     return config;
 }
 function validateStringRecordField(value, fieldName, configPath) {
-    if (!(fieldName in value) || value[fieldName] === undefined) {
+    if (!Object.hasOwn(value, fieldName) || value[fieldName] === undefined) {
         return undefined;
     }
     if (!isStringRecord(value[fieldName])) {
@@ -135,7 +135,7 @@ export async function loadConfig(baseDir) {
         return {};
     }
     const imported = await import(__rewriteRelativeImportExtension(pathToFileURL(configPath).href));
-    const loaded = isObject(imported) ? imported.default : undefined;
+    const loaded = isObject(imported) ? imported['default'] : undefined;
     return validateConfig(loaded, configPath);
 }
 export async function loadRootConfig(monorepoRoot) {

package/dist/esm/help.js

@@ -50,7 +50,7 @@ function collectOverrides(packageDir) {
 function applyOverrides(registry, overrides) {
     const marked = new Set();
     for (const [name, value] of Object.entries(overrides)) {
-        if (!(name in registry)) {
+        if (!Object.hasOwn(registry, name)) {
             continue;
         }
         registry[name] = value;

package/dist/esm/helpers/package-json.js

@@ -7,27 +7,29 @@ export function readPackageJson(dir) {
         throw new TypeError(`Invalid package.json in ${dir}: expected an object`);
     }
     const pkg = {};
-    if (typeof parsed.name === 'string')
-        pkg.name = parsed.name;
-    if (parsed.private === true)
+    if (typeof parsed['name'] === 'string')
+        pkg.name = parsed['name'];
+    if (parsed['private'] === true)
         pkg.private = true;
-    if (typeof parsed.version === 'string')
-        pkg.version = parsed.version;
-    if (typeof parsed.packageManager === 'string')
-        pkg.packageManager = parsed.packageManager;
-    if (isObject(parsed.scripts)) {
+    if (typeof parsed['version'] === 'string')
+        pkg.version = parsed['version'];
+    if (typeof parsed['packageManager'] === 'string')
+        pkg.packageManager = parsed['packageManager'];
+    if (isObject(parsed['scripts'])) {
         const scripts = {};
-        for (const [key, val] of Object.entries(parsed.scripts)) {
+        const scriptEntries = Object.entries(parsed['scripts']);
+        for (const [key, val] of scriptEntries) {
             if (typeof val === 'string')
                 scripts[key] = val;
         }
         pkg.scripts = scripts;
     }
-    if (isObject(parsed.pnpm)) {
-        const pnpm = parsed.pnpm;
-        if (isObject(pnpm.overrides)) {
+    if (isObject(parsed['pnpm'])) {
+        const pnpm = parsed['pnpm'];
+        if (isObject(pnpm['overrides'])) {
             const overrides = {};
-            for (const [key, val] of Object.entries(pnpm.overrides)) {
+            const overrideEntries = Object.entries(pnpm['overrides']);
+            for (const [key, val] of overrideEntries) {
                 if (typeof val === 'string')
                     overrides[key] = val;
             }

package/dist/esm/resolver.js

@@ -46,7 +46,7 @@ export function readPackageJsonScripts(packageDir) {
         const parsed = JSON.parse(raw);
         if (!isObject(parsed))
             return undefined;
-        const scripts = parsed.scripts;
+        const scripts = parsed['scripts'];
         if (!isObject(scripts))
             return undefined;
         const result = {};
@@ -82,13 +82,16 @@ export function isSelfReferential(script, commandName) {
 export function resolveScript(commandName, registry, packageDir, workspaceRoot) {
     if (packageDir) {
         const pkgScripts = readPackageJsonScripts(packageDir);
-        if (pkgScripts && commandName in pkgScripts) {
+        if (pkgScripts && Object.hasOwn(pkgScripts, commandName)) {
             const override = pkgScripts[commandName];
             if (override !== undefined && !isSelfReferential(override, commandName)) {
                 return { command: override, source: 'package' };
             }
         }
     }
+    if (!Object.hasOwn(registry, commandName)) {
+        return undefined;
+    }
     const registryEntry = registry[commandName];
     if (registryEntry === undefined) {
         return undefined;

package/dist/esm/runCli.js

@@ -53,7 +53,7 @@ export async function runCli(options) {
     const registry = useRoot ? buildRootRegistry(context.config) : buildWorkspaceRegistry(context.config);
     const resolved = resolveScript(command, registry, anchorDir, parsed.workspaceRoot);
     if (!resolved) {
-        if (env.NMR_RUN_IF_PRESENT === '1') {
+        if (env['NMR_RUN_IF_PRESENT'] === '1') {
             return { exitCode: 0 };
         }
         reportError(`Unknown command: ${command}`, stderr);
@@ -105,7 +105,8 @@ function buildChildEnv(env, snapshot, noCache) {
     };
 }
 function formatOverrideNotice(resolved, registry, command, anchorDir, quiet) {
-    if (quiet || resolved.source !== 'package' || registry[command] === undefined) {
+    const registryEntry = Object.hasOwn(registry, command) ? registry[command] : undefined;
+    if (quiet || resolved.source !== 'package' || registryEntry === undefined) {
         return undefined;
     }
     return `📦 ${path.basename(anchorDir)}: Using override script: ${resolved.command}\n`;

package/dist/esm/vitest.js

@@ -15,7 +15,7 @@ export function defineVitestConfig(...layers) {
 }
 export function defineRootVitestConfig(...layers) {
     const lastLayer = layers.at(-1);
-    const monorepoRoot = isObject(lastLayer) ? lastLayer.monorepoRoot : undefined;
+    const monorepoRoot = isObject(lastLayer) ? lastLayer['monorepoRoot'] : undefined;
     if (typeof monorepoRoot !== 'string' || !path.isAbsolute(monorepoRoot)) {
         throw new TypeError(MISSING_MONOREPO_ROOT);
     }
@@ -42,7 +42,12 @@ function buildConfig(declaredLayers, { coverageInclude, projectExclude = [], pro
             watch: false,
         },
     };
-    return layers.reduce((merged, { root }) => (root ? mergeConfig(merged, root) : merged), config);
+    let merged = config;
+    for (const { root } of layers) {
+        if (root)
+            merged = mergeConfig(merged, root);
+    }
+    return merged;
 }
 function buildProjects(layers, extraExclude, projectRoot) {
     const projectTiers = [
@@ -65,7 +70,11 @@ function buildProjects(layers, extraExclude, projectRoot) {
                 ...(timeout !== undefined && { hookTimeout: timeout, testTimeout: timeout }),
             },
         };
-        return layers.reduce((merged, layer) => applyLayer(merged, layer, name), project);
+        let merged = project;
+        for (const layer of layers) {
+            merged = applyLayer(merged, layer, name);
+        }
+        return merged;
     });
 }
 function applyLayer(project, layer, tier) {
@@ -76,7 +85,8 @@ function applyLayer(project, layer, tier) {
 function assertKnownTiers(layers) {
     const known = TIER_NAMES;
     for (const { tiers } of layers) {
-        for (const name of Object.keys(tiers ?? {})) {
+        const declaredTiers = Object.keys(tiers ?? {});
+        for (const name of declaredTiers) {
             if (!known.includes(name)) {
                 throw new TypeError(`Unknown tier "${name}" in \`tiers\`. Valid tiers: ${TIER_NAMES.join(', ')}.`);
             }

package/dist/esm/workspace.js

@@ -33,7 +33,7 @@ export function getWorkspacePackageDirs(monorepoRoot) {
 function getPackagesFromParsedYaml(parsed) {
     if (!isObject(parsed))
         return undefined;
-    const packages = parsed.packages;
+    const packages = parsed['packages'];
     if (!Array.isArray(packages))
         return undefined;
     if (!packages.every((p) => typeof p === 'string'))

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@williamthorsen/nmr",
-  "version": "0.27.0",
+  "version": "0.28.0",
   "private": false,
   "description": "Context-aware script runner for pnpm monorepos",
   "keywords": [
@@ -68,11 +68,11 @@
     "prettier-plugin-sh": "0.19.0",
     "taze": "19.16.0",
     "yaml": "2.9.0",
-    "@williamthorsen/nmr-core": "0.9.2"
+    "@williamthorsen/nmr-core": "0.9.3"
   },
   "devDependencies": {
     "prettier": "3.9.6",
-    "readyup": "0.23.0",
+    "readyup": "0.24.0",
     "tinyglobby": "0.2.17",
     "vitest": "4.1.10"
   },