Fix CI.

Author: koculu

.github/workflows/ci.yml

@@ -34,11 +34,17 @@ jobs:
           node-version: '26'
           package-manager-cache: false
 
-      - name: Prepare repository tools
+      # Node 25 and later no longer bundle Corepack. Runner images ship Yarn 1,
+      # whose global launcher blocks Corepack's own (EEXIST on Windows).
+      - name: Install and enable Corepack
+        shell: bash
         run: |
+          npm uninstall --global yarn
           npm install --global corepack@latest
           corepack enable
-          yarn install --immutable
+
+      - name: Install dependencies
+        run: yarn install --immutable
 
       - name: Test package manager setup
         run: yarn vitest run packages/purestack/src/init/package-manager.test.ts
@@ -66,9 +72,12 @@ jobs:
           node-version: '26'
           package-manager-cache: false
 
-      # Node 25 and later no longer bundle Corepack.
+      # Node 25 and later no longer bundle Corepack. Runner images ship Yarn 1,
+      # whose global launcher blocks Corepack's own (EEXIST on Windows).
       - name: Install and enable Corepack
+        shell: bash
         run: |
+          npm uninstall --global yarn
           npm install --global corepack@latest
           corepack enable
 

.yarnrc.yml

@@ -1 +1,3 @@
 nodeLinker: node-modules
+# Install fresh releases right away, including just-published PureStack packages.
+npmMinimalAgeGate: 0

packages/purestack/src/init/create-site.ts

@@ -108,8 +108,11 @@ export async function createSite(
         perform,
         options.signal,
       )
+      // The first install writes the lockfile, even where CI makes Yarn immutable.
+      const install =
+        packageManager === 'yarn' ? ['install', '--no-immutable'] : ['install']
       await perform('Install dependencies', () =>
-        runPackageManager(packageManager, ['install'], directory, {
+        runPackageManager(packageManager, install, directory, {
           capture: true,
           signal: options.signal,
         }),

packages/purestack/src/init/init.test.ts

@@ -208,9 +208,12 @@ describe('project generation', () => {
     expect(await readFile(path.join(destination, 'yarn.lock'), 'utf8')).toBe('')
     expect(project.packageManager).toBe('yarn@4.18.1')
     expect(project.devDependencies['@purestack/ts-minidom']).toBe(cliVersion)
-    expect(
-      await readFile(path.join(destination, '.yarnrc.yml'), 'utf8'),
-    ).toContain('nodeLinker: node-modules')
+    const yarnConfig = await readFile(
+      path.join(destination, '.yarnrc.yml'),
+      'utf8',
+    )
+    expect(yarnConfig).toContain('nodeLinker: node-modules')
+    expect(yarnConfig).toContain('npmMinimalAgeGate: 0')
     expect(Object.keys(project.dependencies)).toEqual(['purestack'])
     expect(
       JSON.parse(
@@ -482,10 +485,12 @@ describe('project generation', () => {
       repository,
     )
     expect(result.installed).toBe(false)
-    expect(install).toHaveBeenCalledWith('yarn', ['install'], destination, {
-      capture: true,
-      signal: undefined,
-    })
+    expect(install).toHaveBeenCalledWith(
+      'yarn',
+      ['install', '--no-immutable'],
+      destination,
+      { capture: true, signal: undefined },
+    )
     expect(result.failures).toEqual([
       expect.stringContaining('Retry yarn install'),
     ])

packages/purestack/src/init/package-manager.test.ts

@@ -1,5 +1,5 @@
 import { existsSync } from 'node:fs'
-import { mkdir, mkdtemp, rm, writeFile } from 'node:fs/promises'
+import { mkdir, mkdtemp, realpath, rm, writeFile } from 'node:fs/promises'
 import { tmpdir } from 'node:os'
 import path from 'node:path'
 import { afterEach, beforeEach, describe, expect, it, vi } from 'vitest'
@@ -15,7 +15,10 @@ vi.mock('node:fs', async (importOriginal) => {
 let temporary: string
 
 beforeEach(async () => {
-  temporary = await mkdtemp(path.join(tmpdir(), 'purestack-yarn-runner-'))
+  // Child processes report resolved paths, e.g. /private/var on macOS.
+  temporary = await realpath(
+    await mkdtemp(path.join(tmpdir(), 'purestack-yarn-runner-')),
+  )
   vi.stubEnv('COREPACK_ROOT', undefined)
   vi.stubEnv('npm_execpath', undefined)
   vi.stubEnv('PATH', '')

scripts/fixtures/toolchain-worker.ts

@@ -59,9 +59,13 @@ async function main() {
     (await runYarn(['--version'], project, { capture: true, signal })).trim(),
     version,
   )
-  await runPackageManager('yarn', ['install', '--mode=skip-build'], project, {
-    signal,
-  })
+  // Like createSite: the first install writes the lockfile despite CI immutability.
+  await runPackageManager(
+    'yarn',
+    ['install', '--no-immutable', '--mode=skip-build'],
+    project,
+    { signal },
+  )
   assert.match(
     await readFile(path.join(project, 'yarn.lock'), 'utf8'),
     /__metadata/,

scripts/verify-templates.ts

@@ -107,8 +107,9 @@ async function main() {
       }
       await runPackageManager(
         manager,
+        // Like createSite: the first install writes the lockfile despite CI immutability.
         manager === 'yarn'
-          ? ['install']
+          ? ['install', '--no-immutable']
           : ['install', '--no-audit', '--no-fund'],
         directory,
       )

templates/starter/template/.yarnrc.yml

@@ -1 +1,3 @@
 nodeLinker: node-modules
+# Install fresh releases right away, including just-published PureStack packages.
+npmMinimalAgeGate: 0