@astryxdesign/cli 0.4.2 → 0.4.3-canary.ac850d9

package/foundation/fs/path-safety.test.mjs

@@ -91,6 +91,13 @@ describe('sanitizeName', () => {
     expect(() => sanitizeName('.')).toThrow(PathSafetyError);
   });
 
+  it('rejects dotfile names (.env, .htaccess) that could create hidden files', () => {
+    expect(() => sanitizeName('.env')).toThrow(PathSafetyError);
+    expect(() => sanitizeName('.htaccess')).toThrow(PathSafetyError);
+    expect(() => sanitizeName('.bashrc')).toThrow(PathSafetyError);
+    expect(() => sanitizeName('.gitignore')).toThrow(PathSafetyError);
+  });
+
   it('rejects NUL bytes', () => {
     expect(() => sanitizeName('foo\0bar')).toThrow(PathSafetyError);
   });

package/foundation/response/response-types.doc.mjs

@@ -150,6 +150,12 @@ export const doc = {
         'A scaffold receipt: template id, output directory, written file name, and file count.',
     },
 
+    {
+      value: 'template.cdn',
+      description:
+        'A write receipt for the no-build-step CDN starter page: the path (relative to cwd), the Astryx version every CDN URL was pinned to, whether it was written, and the reason it was not — `exists` when a file was already there, which is a success.',
+    },
+
     // hook
     {
       value: 'hook.list',

package/foundation/text/copyright-header.mjs

@@ -6,9 +6,9 @@
  *
  * Every file in this repo carries the Meta copyright header, and several
  * commands copy repo files out verbatim — `theme add` (bundled theme sources),
- * `init --features theme` (the annotated theme template). A consumer's own
- * source tree should not inherit our boilerplate, and their lint may well
- * reject it.
+ * `init --features theme` (the annotated theme template), `template --cdn` (the
+ * CDN starter page). A consumer's own source tree should not inherit our
+ * boilerplate, and their lint may well reject it.
  *
  * SYNC: the same regex is applied by apps/docsite/src/lib/codeExamples.ts for
  * rendered code samples. That copy lives in a different package (the docsite
@@ -23,6 +23,11 @@
 const META_COPYRIGHT_HEADER_RE =
   /^(\uFEFF?(?:#![^\r\n]*(?:\r?\n))?)\/\/ Copyright \(c\) Meta Platforms, Inc\. and affiliates\.\r?\n(?:\r?\n)*/;
 
+/** The same header in HTML comment syntax, as scripts/add-copyright.sh writes
+ *  it into the .html assets we scaffold. */
+const META_COPYRIGHT_HEADER_HTML_RE =
+  /^(\uFEFF?)<!-- Copyright \(c\) Meta Platforms, Inc\. and affiliates\. -->\r?\n(?:\r?\n)*/;
+
 /**
  * Remove the leading Meta copyright header, preserving any BOM/shebang before
  * it. Returns the source unchanged when the header is absent.
@@ -31,5 +36,7 @@ const META_COPYRIGHT_HEADER_RE =
  * @returns {string}
  */
 export function stripCopyrightHeader(source) {
-  return source.replace(META_COPYRIGHT_HEADER_RE, '$1');
+  return source
+    .replace(META_COPYRIGHT_HEADER_RE, '$1')
+    .replace(META_COPYRIGHT_HEADER_HTML_RE, '$1');
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@astryxdesign/cli",
-  "version": "0.4.2",
+  "version": "0.4.3-canary.ac850d9",
   "displayName": "CLI",
   "description": "Scaffold projects, browse templates, generate themes, and get agent-ready docs from the command line.",
   "author": "Meta Open Source",
@@ -84,10 +84,10 @@
     "zod": "^4.4.3"
   },
   "peerDependencies": {
-    "@astryxdesign/charts": "*",
-    "@astryxdesign/core": "*",
-    "@astryxdesign/lab": "*",
-    "@astryxdesign/theme-neutral": "*",
+    "@astryxdesign/charts": "0.4.3-canary.ac850d9",
+    "@astryxdesign/core": "0.4.3-canary.ac850d9",
+    "@astryxdesign/lab": "0.4.3-canary.ac850d9",
+    "@astryxdesign/theme-neutral": "0.4.3-canary.ac850d9",
     "gpt-tokenizer": "^3.4.0"
   },
   "peerDependenciesMeta": {
@@ -105,10 +105,10 @@
     }
   },
   "devDependencies": {
-    "@astryxdesign/charts": "*",
-    "@astryxdesign/core": "*",
-    "@astryxdesign/lab": "*",
-    "@astryxdesign/theme-neutral": "*",
+    "@astryxdesign/charts": "0.4.3-canary.ac850d9",
+    "@astryxdesign/core": "0.4.3-canary.ac850d9",
+    "@astryxdesign/lab": "0.4.3-canary.ac850d9",
+    "@astryxdesign/theme-neutral": "0.4.3-canary.ac850d9",
     "gpt-tokenizer": "^3.4.0"
   },
   "scripts": {