fix(config): walk up two levels for monorepo box.json in $readFrameworkVersion

[bpamiri]

Summary

• Fixes Verify that $readFrameworkVersion()'s default rootBoxJsonPath actually reaches the monorepo at runtime #2291: $readFrameworkVersion()'s default rootBoxJsonPath walked up only one level from Global.cfc (vendor/wheels/../box.json = vendor/box.json), which doesn't exist in the monorepo layout. Correct path walks up two levels to <repo-root>/box.json. At runtime boot via onapplicationstart.cfc (called with no args), this caused application.wheels.version to silently resolve to "0.0.0-dev" inside a wheels-dev/wheels checkout. One-character fix plus a regression spec.
• Adds a regression test in frameworkVersionSpec.cfc that asserts the runtime boot result (application.wheels.version) rather than invoking the helper directly, because WheelsTest.cfc binds methods into each spec's scope — which shifts GetCurrentTemplatePath() and bypasses the code path we need to cover. The test skips gracefully in release builds and vendored installs via environment-gated early returns.

Why the existing tests didn't catch it

Every pre-existing spec passed explicit path arguments, so the Len(arguments.rootBoxJsonPath) ? ... : <default> ternary always took the left branch. The default-computation side of the ternary was completely uncovered.

Verification

• Runtime probe pre-fix: application.wheels.version = "0.0.0-dev" — bug confirmed against a fresh checkout boot
• Runtime probe post-fix: application.wheels.version = "4.0.0-dev" — matches <repo-root>/box.json version + -dev suffix
• Core suite (Lucee 7 + SQLite, bash tools/test-local.sh): 3328 pass / 0 fail / 0 error (was 3327; the new spec accounts for the delta)
• Negative control: with fix reverted, the regression test fails with Expected [4.0.0-dev] but received [0.0.0-dev] — confirms the test actually catches the bug rather than skipping silently

Test plan

• Full core suite green on Lucee 7 + SQLite
• Manual verification that application.wheels.version resolves to 4.0.0-dev at runtime after the fix
• Manual verification that regression spec fails with the bug reintroduced
• CI matrix (Lucee 5/6/7, Adobe 2018/2021/2023/2025, BoxLang × MySQL/Postgres/SQL Server/H2/SQLite/CockroachDB) — relies on the same code path, no engine-specific surface touched
• Release-build smoke (branch where @build.version@ is substituted): regression spec should skip silently via the placeholder guard

Related

• PR fix(cli): substitute @build.version@ when scaffolding from dev checkout (closes #2279) #2289 (CLI-side fix for Homepage still shows 0.0.0-dev in new apps #2279): orthogonal — that one rewrites the vendored framework box.json at scaffold time. This PR fixes the framework-side fallback that runs inside the wheels-dev/wheels dev checkout itself.
• PR fix(view): homepage version and CLI detection (closes #2255, #2259) #2272 (original Homepage displays incorrect Wheels version (0.0.0-dev) instead of actual version #2255 fix): introduced the default-path computation this PR corrects.

🤖 Generated with Claude Code