@williamthorsen/nmr 2.2.0 → 2.2.1

package/.meta/changelog.json

@@ -1,4 +1,21 @@
 [
+  {
+    "version": "2.2.1",
+    "date": "2026-11-13",
+    "sections": [
+      {
+        "title": "🐛 Bug fixes",
+        "audience": "all",
+        "items": [
+          {
+            "description": "Fixes the issue that a delegated `nmr` run on a host whose Node comes from a version manager's shims ran on the Node chosen before the checkout, rather than the one pinned by the snapshot, on the first delegation from a clone and the first after a repo changed its pin. (#1337)",
+            "hash": "eb9f33c1b5cc919e00f7d33927899c48dbe7c3f7",
+            "entry": 1
+          }
+        ]
+      }
+    ]
+  },
   {
     "version": "2.2.0",
     "date": "2026-11-12",

package/.readyup/kits/default.js

@@ -1,6 +1,6 @@
 /** @noformat -- @generated. Do not edit. Compiled by rdy. */
 /* eslint-disable */
-export const __readyupVersion = "0.46.1";
+export const __readyupVersion = "0.46.2";
 import { createRequire as __rdyCreateRequire } from 'node:module';
 const require = __rdyCreateRequire(import.meta.url);
 
@@ -7382,12 +7382,12 @@ import { isRecord, listTrackedFiles } from "readyup/check-utils";
 import { globSync } from "node:fs";
 import { basename, join, sep } from "node:path";
 
-// ../../node_modules/.pnpm/@williamthorsen+toolbelt.errors@0.10.0/node_modules/@williamthorsen/toolbelt.errors/dist/esm/4-release/isError.js
+// ../../node_modules/.pnpm/@williamthorsen+toolbelt.errors@0.10.1/node_modules/@williamthorsen/toolbelt.errors/dist/esm/4-release/isError.js
 function isError(error) {
   return error instanceof Error || Object.prototype.toString.call(error) === "[object Error]";
 }
 
-// ../../node_modules/.pnpm/@williamthorsen+toolbelt.errors@0.10.0/node_modules/@williamthorsen/toolbelt.errors/dist/esm/4-release/describeError.js
+// ../../node_modules/.pnpm/@williamthorsen+toolbelt.errors@0.10.1/node_modules/@williamthorsen/toolbelt.errors/dist/esm/4-release/describeError.js
 function describeError(error) {
   try {
     if (isError(error) && typeof error.message === "string" && error.message !== "") {
@@ -8161,11 +8161,11 @@ function formatMalformedScript(dir, key, value) {
   return `${rejection} A step list belongs in \`${CONFIG_RELATIVE_PATH}\` under \`${field}\`.`;
 }
 
-// ../../node_modules/.pnpm/@williamthorsen+toolbelt.cli@0.8.2/node_modules/@williamthorsen/toolbelt.cli/dist/esm/3-candidate/parseArgs.js
+// ../../node_modules/.pnpm/@williamthorsen+toolbelt.cli@0.9.0/node_modules/@williamthorsen/toolbelt.cli/dist/esm/3-candidate/parseArgs.js
 import path6 from "node:path";
 import process2 from "node:process";
 
-// ../../node_modules/.pnpm/@williamthorsen+toolbelt.cli@0.8.2/node_modules/@williamthorsen/toolbelt.cli/dist/esm/3-candidate/UsageError.js
+// ../../node_modules/.pnpm/@williamthorsen+toolbelt.cli@0.9.0/node_modules/@williamthorsen/toolbelt.cli/dist/esm/3-candidate/UsageError.js
 var UsageError = class extends Error {
   constructor(message, options) {
     super(message, options);
@@ -8173,7 +8173,7 @@ var UsageError = class extends Error {
   }
 };
 
-// ../../node_modules/.pnpm/@williamthorsen+toolbelt.cli@0.8.2/node_modules/@williamthorsen/toolbelt.cli/dist/esm/3-candidate/ParseError.js
+// ../../node_modules/.pnpm/@williamthorsen+toolbelt.cli@0.9.0/node_modules/@williamthorsen/toolbelt.cli/dist/esm/3-candidate/ParseError.js
 var ParseError = class extends UsageError {
   kind;
   token;
@@ -8185,12 +8185,12 @@ var ParseError = class extends UsageError {
   }
 };
 
-// ../../node_modules/.pnpm/@williamthorsen+toolbelt.cli@0.8.2/node_modules/@williamthorsen/toolbelt.cli/dist/esm/3-candidate/resolveLongName.js
+// ../../node_modules/.pnpm/@williamthorsen+toolbelt.cli@0.9.0/node_modules/@williamthorsen/toolbelt.cli/dist/esm/3-candidate/resolveLongName.js
 function resolveLongName(key, definition) {
   return definition.long ?? key.replaceAll(/[A-Z]/g, (capital) => `-${capital.toLowerCase()}`);
 }
 
-// ../../node_modules/.pnpm/@williamthorsen+toolbelt.cli@0.8.2/node_modules/@williamthorsen/toolbelt.cli/dist/esm/3-candidate/tokenizeArgs.js
+// ../../node_modules/.pnpm/@williamthorsen+toolbelt.cli@0.9.0/node_modules/@williamthorsen/toolbelt.cli/dist/esm/3-candidate/tokenizeArgs.js
 import { parseArgs as nodeParseArgs } from "node:util";
 function tokenizeArgs(argv, schema, extraBooleans = []) {
   const nodeOptions = {};
@@ -8220,7 +8220,7 @@ function findFlagEntry(flagsByName, token) {
   return entry.definition.short === token.rawName.slice(1) ? entry : void 0;
 }
 
-// ../../node_modules/.pnpm/@williamthorsen+toolbelt.cli@0.8.2/node_modules/@williamthorsen/toolbelt.cli/dist/esm/3-candidate/validateSpec.js
+// ../../node_modules/.pnpm/@williamthorsen+toolbelt.cli@0.9.0/node_modules/@williamthorsen/toolbelt.cli/dist/esm/3-candidate/validateSpec.js
 var CAMEL_CASE_KEY = /^[a-z][a-z0-9]*(?:[A-Z][a-z0-9]+)*$/;
 function validateSpec(spec) {
   validateFlags(spec.flags ?? {});
@@ -8301,7 +8301,7 @@ function validateOperands(operands) {
   }
 }
 
-// ../../node_modules/.pnpm/@williamthorsen+toolbelt.cli@0.8.2/node_modules/@williamthorsen/toolbelt.cli/dist/esm/3-candidate/parseArgs.js
+// ../../node_modules/.pnpm/@williamthorsen+toolbelt.cli@0.9.0/node_modules/@williamthorsen/toolbelt.cli/dist/esm/3-candidate/parseArgs.js
 function parseArgs(argv, spec, options = {}) {
   validateSpec(spec);
   return parseValidatedArgs(argv, spec, options);
@@ -9662,7 +9662,7 @@ function hasSupportedStrictLintVersion() {
   });
 }
 function getMinVersion() {
-  const pickedFields = { "version": "2.2.0" };
+  const pickedFields = { "version": "2.2.1" };
   if (typeof pickedFields["version"] !== "string") {
     throw new TypeError("nmr/package.json: 'version' must be a string");
   }

package/.readyup/manifest.json

@@ -3,17 +3,17 @@
   "kits": [
     {
       "bundledDependencies": {
-        "@williamthorsen/toolbelt.arrays": "6.5.0",
-        "@williamthorsen/toolbelt.cli": "0.8.2",
-        "@williamthorsen/toolbelt.datetime": "4.1.3",
-        "@williamthorsen/toolbelt.errors": "0.10.0",
-        "@williamthorsen/toolbelt.filesystem": "0.10.2",
-        "@williamthorsen/toolbelt.guards": "4.2.2",
-        "@williamthorsen/toolbelt.numbers": "8.0.0",
-        "@williamthorsen/toolbelt.objects": "4.4.2",
-        "@williamthorsen/toolbelt.packaging": "0.7.2",
+        "@williamthorsen/toolbelt.arrays": "6.5.1",
+        "@williamthorsen/toolbelt.cli": "0.9.0",
+        "@williamthorsen/toolbelt.datetime": "4.1.4",
+        "@williamthorsen/toolbelt.errors": "0.10.1",
+        "@williamthorsen/toolbelt.filesystem": "0.10.3",
+        "@williamthorsen/toolbelt.guards": "4.2.3",
+        "@williamthorsen/toolbelt.numbers": "8.0.1",
+        "@williamthorsen/toolbelt.objects": "4.4.3",
+        "@williamthorsen/toolbelt.packaging": "0.7.3",
         "@williamthorsen/toolbelt.sets": "3.1.1",
-        "@williamthorsen/toolbelt.strings": "8.2.3",
+        "@williamthorsen/toolbelt.strings": "8.2.4",
         "@williamthorsen/toolbelt.terminal": "0.3.1",
         "ansi-regex": "6.6.0",
         "ansi-styles": "6.2.3, 7.0.0",
@@ -31,7 +31,7 @@
           "checklist": "nmr",
           "checks": [
             "@williamthorsen/nmr in devDependencies",
-            "@williamthorsen/nmr >= 2.2.0",
+            "@williamthorsen/nmr >= 2.2.1",
             "pnpm-workspace.yaml exists",
             "catalogued dependencies use catalog:",
             "package.json has packageManager field",
@@ -235,7 +235,7 @@
           "path": "lib/workspace-build.ts"
         },
         {
-          "hash": "7015d006",
+          "hash": "a00b2ec5",
           "kind": "inline",
           "path": "../package.json",
           "paths": [
@@ -360,10 +360,10 @@
       ],
       "name": "default",
       "path": "kits/default.js",
-      "readyupVersion": "0.46.1",
+      "readyupVersion": "0.46.2",
       "source": "kits/default.ts",
       "sourceHash": "9fd61bf4",
-      "targetHash": "177bd0ca"
+      "targetHash": "db59c5e7"
     }
   ]
 }

package/CHANGELOG.md

@@ -2,6 +2,12 @@
 
 All notable changes to this project will be documented in this file.
 
+## 2.2.1 — 2026-11-13
+
+### 🐛 Bug fixes
+
+- Fixes the issue that a delegated `nmr` run on a host whose Node comes from a version manager's shims ran on the Node chosen before the checkout, rather than the one pinned by the snapshot, on the first delegation from a clone and the first after a repo changed its pin. (#1337)
+
 ## 2.2.0 — 2026-11-12
 
 ### 🎉 Features

package/README.md

@@ -5,12 +5,11 @@
 Context-aware script runner for pnpm monorepos. Includes an `nmr` (node-monorepo run) binary that provides centralized, consistent script execution across workspace packages and the monorepo root.
 
 <!-- section:release-notes -->
-## Release notes — v2.2.0 (2026-11-12)
+## Release notes — v2.2.1 (2026-11-13)
 
-### 🎉 Features
+### 🐛 Bug fixes
 
-- Makes each `nmr` delegation remove, before it pushes, the host's other checkouts that have gone unused for longer than the new user-config key `delegate.removeCheckoutsAfterDays` allows (7 days by default, `false` to keep them), while keeping any checkout whose lock has a live holder. (#1317)
-- Adds to the failure message of a delegation step that fails with `No space left on device` whether the host's filesystem ran out of inodes or of space. (#1317)
+- Fixes the issue that a delegated `nmr` run on a host whose Node comes from a version manager's shims ran on the Node chosen before the checkout, rather than the one pinned by the snapshot, on the first delegation from a clone and the first after a repo changed its pin. (#1337)
 <!-- /section:release-notes -->
 
 ## Installation

package/dist/esm/delegation/remote-host-session.d.ts

@@ -55,6 +55,10 @@ export type SessionRecord = {
  * out the snapshot, installs, runs nmr, and reports the passes that nmr wrote to the pass manifest. It is sent as
  * source, so it refers to nothing outside its own body.
  *
+ * Every process that the session starts runs on the login shell's `PATH`, which the session script passes as the
+ * argument after `params`: A version manager's `node` shim puts the `bin` directory of the Node that it chose before
+ * the checkout in front of the session's own `PATH`, and the snapshot may pin another.
+ *
  * The lock follows the machine lock's rules: A waiter reclaims it at once when the holder's pid is gone, and once the
  * holder has stopped refreshing it for a minute otherwise. When the session's stdin ends, which the local `ssh` causes
  * by exiting, the session stops its current phase's process group, releases the lock, and exits.

package/dist/esm/delegation/remote-host-session.js

@@ -16,6 +16,8 @@ export function runHostSession(params) {
     const STOP_GRACE_MS = 5000;
     const NODE_MODULES_DIR = path.join(params.rootDir, 'node_modules');
     const BINS_RECORD_PATH = path.join(NODE_MODULES_DIR, '.nmr-delegate-bins');
+    const loginPath = process.argv[2] || process.env['PATH'];
+    const childEnv = { ...process.env, PATH: loginPath };
     const token = crypto.randomUUID();
     let isHolding = false;
     let activeChild;
@@ -30,7 +32,7 @@ export function runHostSession(params) {
             ['checkout', '--quiet', '--force', '--detach', params.sha],
             ['clean', '--force', '-d', '--quiet'],
         ]) {
-            const result = await runPhase('git', args, '.', process.env);
+            const result = await runPhase('git', args, '.', childEnv);
             if (isStopping)
                 return;
             if (result.exitCode !== 0) {
@@ -43,7 +45,7 @@ export function runHostSession(params) {
             removeWorkspaceState();
         }
         const install = await runPhase('pnpm', ['install', '--frozen-lockfile'], params.rootDir, {
-            ...process.env,
+            ...childEnv,
             CI: 'true',
         });
         if (isStopping)
@@ -62,7 +64,7 @@ export function runHostSession(params) {
         const child = childProcess.spawn('pnpm', ['exec', 'nmr', '--no-delegate', ...params.nmrArgs], {
             cwd: params.runDir,
             detached: true,
-            env: { ...process.env, ...params.remoteEnv, ...manifestEnv },
+            env: { ...childEnv, ...params.remoteEnv, ...manifestEnv },
             stdio: ['ignore', 'inherit', 'inherit'],
         });
         activeChild = child;

package/dist/esm/delegation/remote-session.d.ts

@@ -14,8 +14,8 @@ export interface SessionDemultiplexer {
     stream: Writable;
 }
 /**
- * Composes the script that runs the host session from the checkout. `checkoutDir` is a shell expression, so that it
- * can name the host's home directory.
+ * Composes the script that runs the host session from the checkout, passing it the shell's `PATH` for the processes
+ * that it starts. `checkoutDir` is a shell expression, so that it can name the host's home directory.
  */
 export declare function composeSessionScript(options: {
     checkoutDir: string;

package/dist/esm/delegation/remote-session.js

@@ -5,7 +5,7 @@ import { runHostSession, } from "./remote-host-session.js";
 export function composeSessionScript(options) {
     const { checkoutDir, params } = options;
     const source = `(${runHostSession.toString()})(JSON.parse(process.argv[1]));`;
-    return `cd ${checkoutDir} && exec node -e ${quoteForShell(source)} ${quoteForShell(JSON.stringify(params))}`;
+    return `cd ${checkoutDir} && exec node -e ${quoteForShell(source)} ${quoteForShell(JSON.stringify(params))} "$PATH"`;
 }
 export function createSessionDemultiplexer(options) {
     const { marker, onMalformedRecord, onRecord, stderr } = options;

package/docs/delegate.md

@@ -162,5 +162,5 @@ Every other failure still exits 255: a delegation that `--delegate`, `--delegate
 ## Setting up the host
 
 - **SSH that does not prompt.** nmr runs the ssh command that `GIT_SSH_COMMAND` names, evaluated by `/bin/sh` as git evaluates it, or plain `ssh` when the variable is unset or empty, and adds `BatchMode=yes` and a connect timeout after the command's own options, so an option that the command sets itself takes precedence. Under `BatchMode=yes`, a key that needs a passphrase must be in the agent, and the host key must already be known. An unreachable host fails within 10 seconds.
-- **git, Node, and pnpm on the interactive login shell's `PATH`.** nmr reads `PATH` from the host's login shell started as an interactive one, which loads `~/.zshrc` or `~/.bashrc` as well as the login profile: That is where pnpm's installer and the common version managers put Node and pnpm. What the startup files print does not reach the output, but whatever else they do runs before each step. Node on the host must satisfy nmr's own `engines` range (`>=24.16.0`). When Node is not on that `PATH`, the check-out step fails, and when pnpm is not, the install step fails; each failure names `PATH`. The login shell must accept `-ilc`: bash and zsh do.
+- **git, Node, and pnpm on the interactive login shell's `PATH`.** nmr reads `PATH` from the host's login shell started as an interactive one, which loads `~/.zshrc` or `~/.bashrc` as well as the login profile: That is where pnpm's installer and the common version managers put Node and pnpm. What the startup files print does not reach the output, but whatever else they do runs before each step. After it checks out the snapshot, nmr starts the install and the command on that `PATH`, so a version manager's shims select the Node and pnpm that the snapshot pins. Node on the host must satisfy nmr's own `engines` range (`>=24.16.0`). When Node is not on that `PATH`, the check-out step fails, and when pnpm is not, the install step fails; each failure names `PATH`. The login shell must accept `-ilc`: bash and zsh do.
 - **A sandboxed agent session needs network access to the host.** A sandbox that allows only HTTP egress refuses `ssh`. Under `when: 'agent'`, every check that the session runs then [runs here](#when-no-host-answers) after the connect timeout, and a requested delegation fails at `prepare`, until the session has that access. The Claude Code sandbox reaches a host only through the proxy that its `GIT_SSH_COMMAND` names, and it admits the host by the name that ssh connects to, which is the `HostName` that `~/.ssh/config` gives the alias (`ssh -G <host>` prints it), on port 22: For `imac2` with `HostName skypilot-imac2.local`, the sandbox must admit `skypilot-imac2.local:22`, not `imac2`. Nobody has confirmed whether the proxy resolves an mDNS name such as `skypilot-imac2.local`: When a delegation to such a host does not answer, and `ssh` reports `sandbox proxy: <name>:22: 502 Bad Gateway`, give the alias a `HostName` that is an IP address or a unicast DNS name, and have the sandbox admit that name's port 22.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@williamthorsen/nmr",
-  "version": "2.2.0",
+  "version": "2.2.1",
   "private": false,
   "description": "Context-aware script runner for pnpm monorepos",
   "keywords": [
@@ -81,19 +81,19 @@
   ],
   "dependencies": {
     "@williamthorsen/nmr-core": "0.16.2",
-    "@williamthorsen/toolbelt.errors": "0.10.0",
-    "@williamthorsen/toolbelt.filesystem": "0.10.2",
-    "glob": "14.0.4",
+    "@williamthorsen/toolbelt.errors": "0.10.1",
+    "@williamthorsen/toolbelt.filesystem": "0.10.3",
+    "glob": "14.0.5",
     "prettier": "3.10.0",
     "prettier-plugin-sh": "0.20.2",
     "taze": "21.3.0",
     "unconfig": "7.5.0"
   },
   "devDependencies": {
-    "@williamthorsen/toolbelt.testing": "0.8.2",
-    "@williamthorsen/toolbelt.vitest": "0.13.4",
+    "@williamthorsen/toolbelt.testing": "0.8.3",
+    "@williamthorsen/toolbelt.vitest": "0.13.5",
     "esbuild": "0.28.2",
-    "readyup": "0.46.1",
+    "readyup": "0.46.2",
     "tinyglobby": "0.2.17",
     "typescript": "6.0.3",
     "vite": "8.3.8",