@aurostack/stacks 0.1.0 → 0.1.1

package/README.md

@@ -63,6 +63,31 @@ claude --plugin-dir ./stacks    # try skill edits without reinstalling
 `package.json` holds the version; the plugin manifests repeat it, and
 `stack doctor` fails if they drift.
 
+### Releasing
+
+```sh
+npm version patch        # or minor / major: bumps package.json and the plugin
+                         # manifests in one commit, tagged vX.Y.Z
+git push --follow-tags
+```
+
+The tag runs the full CI (`.github/workflows/ci.yml`: every template's key
+variants generated with `--strict`, then typechecked, linted, built and tested,
+plus the Docker images), then `release.yml` stages the version on npm and
+creates the GitHub release. The Claude Code plugin updates from the same
+commit.
+
+A staged version goes live only once a maintainer approves it with 2FA:
+
+```sh
+npm stage list @aurostack/stacks
+npm stage approve <stage-id>     # or npmjs.com → the package → Staged Packages
+```
+
+CI authenticates as an npm **trusted publisher** (no token): repository
+`aurostack-org/stacks`, workflow `release.yml`, environment `npm`, allowed to
+stage only. The `npm` GitHub environment is restricted to `v*` tags.
+
 ## The templates
 
 | Template | What you get |

package/cli/src/hooks.mjs

@@ -5,14 +5,21 @@
  * expression, so `yarn prisma generate` only runs for stacks that kept Prisma.
  * A non-optional hook that fails aborts with a non-zero exit; an optional one
  * warns and continues, because a missing `yarn` on the machine should not throw
- * away an otherwise-correct scaffold.
+ * away an otherwise-correct scaffold. `strict` (`stack new --strict`, used in
+ * CI) makes every failure fatal.
  */
 import { spawnSync } from 'node:child_process';
 import path from 'node:path';
 import { evalExpr } from './strip.mjs';
 import { interpolate } from './tokens.mjs';
 
-export function runHooks(manifest, target, enabled, ctx, { skip = false, log }) {
+export function runHooks(
+	manifest,
+	target,
+	enabled,
+	ctx,
+	{ skip = false, strict = false, log }
+) {
 	const hooks = manifest.hooks || [];
 	const results = [];
 
@@ -41,7 +48,7 @@ export function runHooks(manifest, target, enabled, ctx, { skip = false, log })
 			continue;
 		}
 
-		if (hook.optional) {
+		if (hook.optional && !strict) {
 			log(`  warning  "${label}" failed (exit ${res.status}) — continuing`);
 			results.push({ command, status: 'failed-optional' });
 			continue;

package/cli/stack.mjs

@@ -82,6 +82,7 @@ ${c.bold('new options')}
   --without a,b        Disable default features (repeatable)
   --all                Enable every optional feature
   --no-hooks           Skip install / prisma generate / git init
+  --strict             Fail on any hook failure (for CI)
   --force              Write into a non-empty directory
   --dry-run            Print what would happen, write nothing
 
@@ -207,6 +208,7 @@ function cmdNew(args, values) {
 		log(c.bold('  Post-generation'));
 		runHooks(manifest, target, enabled, ctx, {
 			skip: values['no-hooks'],
+			strict: Boolean(values.strict),
 			log
 		});
 		log('');
@@ -627,6 +629,7 @@ function main() {
 			prune: { type: 'boolean' },
 			'dry-run': { type: 'boolean' },
 			'no-hooks': { type: 'boolean' },
+			strict: { type: 'boolean' },
 			help: { type: 'boolean', short: 'h' },
 			version: { type: 'boolean', short: 'v' }
 		}

package/package.json

@@ -1,6 +1,6 @@
 {
 	"name": "@aurostack/stacks",
-	"version": "0.1.0",
+	"version": "0.1.1",
 	"description": "Scaffold new projects from house templates: a NestJS API, React app or Turborepo monorepo, and Node or Python workers. Subtractive templates plus a zero-dependency generator.",
 	"license": "MIT",
 	"author": "Aurostack (https://github.com/aurostack-org)",
@@ -31,6 +31,9 @@
 	"engines": {
 		"node": ">=20.19"
 	},
+	"scripts": {
+		"version": "node scripts/sync-version.mjs && git add .claude-plugin"
+	},
 	"publishConfig": {
 		"access": "public"
 	}

package/templates/nest-api/files/package.json

@@ -11,7 +11,7 @@
 		"build": "nest build",
 		"gen": "nest generate",
 		"lint": "eslint \"{src,apps,libs,test}/**/*.ts\" --fix",
-		"format": "prettier --write \"src/**/*.ts\" \"test/**/*.ts\"",
+		"format": "prettier --write \"src/**/*.ts\" \"test/**/*.ts\" --no-error-on-unmatched-pattern",
 		"email:dev": "email dev -p 5003",
 		"secrets": "ts-node .bin/secrets",
 		"db:generate": "ts-node ./.bin/db.ts",

package/templates/nest-api/template.json

@@ -415,7 +415,7 @@
 		},
 		{
 			"title": "yarn install",
-			"run": "yarn install",
+			"run": "yarn install --no-immutable",
 			"optional": true
 		},
 		{

package/templates/node-worker/files/.prettierignore

@@ -2,3 +2,5 @@ node_modules/
 dist/
 tmp/
 yarn.lock
+# the Prisma client is generated; formatting it would only churn
+prisma/generated/

package/templates/node-worker/template.json

@@ -108,7 +108,7 @@
 		},
 		{
 			"title": "yarn install",
-			"run": "yarn install",
+			"run": "yarn install --no-immutable",
 			"optional": true
 		},
 		{

package/templates/react-app/template.json

@@ -199,7 +199,7 @@
 		},
 		{
 			"title": "yarn install",
-			"run": "yarn install",
+			"run": "yarn install --no-immutable",
 			"optional": true
 		},
 		{

package/templates/react-monorepo/template.json

@@ -208,7 +208,7 @@
 		},
 		{
 			"title": "yarn install",
-			"run": "yarn install",
+			"run": "yarn install --no-immutable",
 			"optional": true
 		},
 		{