Summary

After the bun migration (PR #599), two critical publishing issues emerged:

1. workspace:* not resolved: changeset publish (npm publish) does not resolve workspace:* protocol like pnpm did. Published packages like @perstack/runtime@0.0.114+ had literal "workspace:*" in dependencies, making them uninstallable by consumers.

2. Private deps not bundled: tsdown previously bundled devDependencies into dist. With tsc (no bundling), published packages referenced private modules that don't exist on npm.

Changes

• Restore tsdown as the build tool for all 23 packages
• Replace workspace:* with fixed versions in published packages' dependencies
• Make @perstack/skill-manager private (was incorrectly public — depends on private @perstack/perstack-toml)
• Move @perstack/skill-manager to runtime's devDependencies (bundled by tsdown)
• Add skill-manager's transitive public deps (@perstack/base, @modelcontextprotocol/sdk, smol-toml) to runtime's dependencies
• Add tsdown.config.ts to tsconfig.json excludes for packages with local configs
• Add "type": "module" to root package.json to suppress Node.js warnings

Verification

• bun run build — all 23 packages build successfully
• bun run test — all 19 test suites pass
• bun run typecheck — all 23 packages pass
• No workspace:* in any published package's dependencies
• SkillManager is bundled into runtime's dist (confirmed via grep)

Test plan

• bun run build passes
• bun run test passes
• bun run typecheck passes
• bun run format-and-lint — no errors (existing warnings only)
• npm pack --dry-run on runtime/react/base shows correct package contents
• After merge + publish, wintermute can install updated packages

🤖 Generated with Claude Code