shopify-hydrogen validator has missing and incompatible dependencies in the Codex plugin

[davetanguay-envision]

Summary

The shopify-hydrogen validator included with the official managed Shopify plugin for Codex cannot run from a clean installation because its runtime dependencies are missing. Attempting to install the declared dependencies also exposes a peer-dependency conflict.

Environment

• Codex Desktop on Windows
• Node.js v24.14.0
• Installed with: codex plugin add shopify@openai-curated
• Curated plugin manifest version: 1.3.3
• Shopify skill version: 1.9.1
• Managed snapshot: 2f1a8948

Initial failure

Running skills/shopify-hydrogen/scripts/validate.mjs from the clean managed-plugin installation fails with:

Error [ERR_MODULE_NOT_FOUND]: Cannot find package 'typescript'

The managed installation contains no hydrated node_modules directory.

Dependency conflict

I copied only the Hydrogen skill into an isolated temporary directory. A normal npm installation failed with ERESOLVE.

The relevant conflict was:

@shopify/hydrogen@2026.1.3 requires @react-router/dev@7.12.0

But the curated Hydrogen skill pins:

@react-router/dev@7.15.1

Using npm install --legacy-peer-deps made the validator executable, but that did not fully correct its behavior.

Validator behavior after forced installation

I tested a representative Hydrogen component:

import {Money} from '@shopify/hydrogen';

export function Price(): JSX.Element {
  return (
    <Money
      data={{
        amount: '10.00',
        currencyCode: 'USD',
      }}
    />
  );
}

The validator exited successfully but reported that no components were found for TypeScript validation and classified Money as a non-Shopify component:

No components found to validate by TypeScript.
Non-Shopify components (not validated): Money

Because this is the shopify-hydrogen skill, a core Hydrogen component such as Money should either be validated or the validator’s actual supported scope should be documented.

Expected behavior

After installing the managed Shopify plugin:

1. The validator should run without a manual npm install.
2. Its declared dependencies should have compatible versions.
3. Representative Hydrogen components should actually be validated.
4. The validator should not return a misleading successful result when it validates nothing.

Could the validator be published as a self-contained bundle, with compatible dependency versions and functional Hydrogen component detection?