fix(cli): use latest published versions in scaffold tests

Fixes CI failure where scaffolded projects reference unpublished
@proofkit/* versions. Test now replaces versions with "latest"
before running pnpm install.

Co-Authored-By: Claude Opus 4.5 <[email protected]>

Author: eluce2

packages/cli/tests/test-utils.ts

@@ -1,4 +1,33 @@
 import { execSync } from "node:child_process";
+import { readFileSync, writeFileSync } from "node:fs";
+import { join } from "node:path";
+
+/**
+ * Replaces @proofkit/* package versions with "latest" in package.json
+ * This fixes CI issues where scaffolded projects reference unpublished versions
+ */
+function useLatestProofkitVersions(projectDir: string): void {
+  const pkgPath = join(projectDir, "package.json");
+  const pkg = JSON.parse(readFileSync(pkgPath, "utf-8"));
+
+  const replaceProofkitVersions = (deps: Record<string, string> | undefined) => {
+    if (!deps) {
+      return;
+    }
+    for (const name of Object.keys(deps)) {
+      if (name.startsWith("@proofkit/")) {
+        console.log(`  Replacing ${name}@${deps[name]} with latest`);
+        deps[name] = "latest";
+      }
+    }
+  };
+
+  console.log("Using latest published @proofkit/* versions...");
+  replaceProofkitVersions(pkg.dependencies);
+  replaceProofkitVersions(pkg.devDependencies);
+
+  writeFileSync(pkgPath, JSON.stringify(pkg, null, 2));
+}
 
 /**
  * Verifies that a project at the given directory can be built without errors
@@ -9,6 +38,9 @@ export function verifyProjectBuilds(projectDir: string): void {
   console.log(`\nVerifying project build in ${projectDir}...`);
 
   try {
+    // Replace unpublished @proofkit versions with latest
+    useLatestProofkitVersions(projectDir);
+
     console.log("Installing dependencies...");
     // Run pnpm install while ignoring workspace settings
     execSync("pnpm install --prefer-offline --ignore-workspace", {