fix(package): ajv/ajv-formats are runtime deps of the dspack-validate bin (0.4.1)

.github/workflows/release.yml

@@ -55,5 +55,12 @@ jobs:
             echo "file mode unexpectedly accepted a negative fixture" >&2
             exit 1
           fi
+      - name: Pack-and-install boundary (bin works without devDependencies)
+        run: |
+          tarball="$PWD/$(npm pack --silent | tail -1)"
+          dir="$(mktemp -d)"
+          cd "$dir" && npm init -y >/dev/null
+          npm install "$tarball"
+          npx dspack-validate --file node_modules/@aestheticfunction/dspack-spec/examples/shadcn-ui.dspack.json
       - name: Publish (public, with provenance)
         run: npm publish --access public

.github/workflows/validate.yml

@@ -29,3 +29,14 @@ jobs:
             echo "file mode unexpectedly accepted a negative fixture" >&2
             exit 1
           fi
+      - name: Pack-and-install boundary (bin works without devDependencies)
+        # Guards the 0.4.0 defect: ajv/ajv-formats lived in devDependencies,
+        # so dspack-validate crashed on every clean install while passing in
+        # every checkout (npm ci installs devDeps). Install the packed
+        # tarball into an empty project and run the bin as an end user would.
+        run: |
+          tarball="$PWD/$(npm pack --silent | tail -1)"
+          dir="$(mktemp -d)"
+          cd "$dir" && npm init -y >/dev/null
+          npm install "$tarball"
+          npx dspack-validate --file node_modules/@aestheticfunction/dspack-spec/examples/shadcn-ui.dspack.json

package.json

@@ -1,16 +1,13 @@
 {
   "name": "@aestheticfunction/dspack-spec",
-  "version": "0.4.0",
+  "version": "0.4.1",
   "description": "The dspack specification: spec documents, JSON Schemas, reference example contracts, and the validation harness (bin: dspack-validate).",
   "type": "module",
   "license": "Apache-2.0",
   "scripts": {
     "validate": "node scripts/validate.mjs"
   },
-  "devDependencies": {
-    "ajv": "^8.17.1",
-    "ajv-formats": "^3.0.1"
-  },
+  "devDependencies": {},
   "engines": {
     "node": ">=20.0.0"
   },
@@ -25,5 +22,17 @@
     "examples/shadcn-ui.dspack.json",
     "examples/astryx.dspack.json",
     "ADOPTING.md"
-  ]
+  ],
+  "dependencies": {
+    "ajv": "^8.17.1",
+    "ajv-formats": "^3.0.1"
+  },
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/aestheticfunction/dspack.git"
+  },
+  "homepage": "https://github.com/aestheticfunction/dspack#readme",
+  "bugs": {
+    "url": "https://github.com/aestheticfunction/dspack/issues"
+  }
 }