@cavulsqa/create 0.1.0 → 0.1.2

package/README.md

@@ -9,6 +9,19 @@ pnpm create @cavulsqa
 `npm create @cavulsqa`, `bun create @cavulsqa` and `vp create @cavulsqa` all work the same way. With
 a terminal it asks four questions; with `--name` it asks none, which is what CI wants.
 
+**On PowerShell, quote the scope** — or use `npx`:
+
+```powershell
+pnpm create '@cavulsqa'
+npx @cavulsqa/create --name myapp
+```
+
+Unquoted, `@cavulsqa` is PowerShell's splatting operator: it expands an undefined variable to
+nothing, pnpm never sees a package name, and you get a 404 for something like `create---name`. The
+`npx` form has no leading `@` on a bare token, so it is immune.
+
+There is no unscoped `create-cavulsqa`, so `pnpm create cavulsqa` is a 404 as well.
+
 ```bash
 pnpm create @cavulsqa --name caputa --app-id com.sig.caputa --yes
 ```
@@ -61,3 +74,18 @@ pnpm build && npx cap sync android && npx cap run android
 
 Android builds need **JDK 21**. An older one fails with `invalid source release: 21` from inside
 `capacitor-android`, which reads like a Capacitor bug and is not one.
+
+## Changing a template
+
+The templates are bundled when this package is packed, so a template fix reaches nobody until a new
+version of `@cavulsqa/create` is published. Nothing in a template commit hints at that, so it is
+enforced rather than remembered: a test fingerprints `templates/` and fails when the recorded
+fingerprint is stale.
+
+```bash
+pnpm --filter @cavulsqa/create run stamp          # patch
+pnpm --filter @cavulsqa/create run stamp minor    # new capability in a template
+```
+
+That records the fingerprint and bumps the version in one step; publish as usual afterwards. It is
+a no-op when the templates have not moved, so running it out of habit costs nothing.

package/lib/templateFingerprint.mjs

@@ -0,0 +1,29 @@
+import { execFileSync } from "node:child_process";
+import { createHash } from "node:crypto";
+
+/**
+ * A content hash of every tracked file under `templates/`, used to prove that `@cavulsqa/create`
+ * was republished after the templates changed.
+ *
+ * The creator bundles the templates at pack time, so a template fix reaches nobody until a new
+ * version of the creator goes out. Nothing about that is visible in a diff, which is exactly the
+ * kind of coupling that gets forgotten - so it is checked rather than remembered.
+ *
+ * It asks git rather than walking the directory. Walking gave two different answers on a Windows
+ * working copy and on a CI checkout, because the disk holds whatever each machine happens to have:
+ * ignored files, build leftovers, and CRLF where the runner has LF. `git ls-files -s` reports the
+ * blob hash recorded in the index, which is normalised, platform-independent, and - the point -
+ * describes exactly what a `git clone` of this repository would produce.
+ */
+export function fingerprintTemplates(repoRoot) {
+  const listing = execFileSync("git", ["ls-files", "-s", "--", "templates"], {
+    cwd: repoRoot,
+    encoding: "utf8",
+    maxBuffer: 64 * 1024 * 1024,
+  });
+
+  const lines = listing.split("\n").filter(Boolean).sort();
+  if (!lines.length) throw new Error("git reports no tracked files under templates/");
+
+  return `sha256-${createHash("sha256").update(lines.join("\n")).digest("base64")}`;
+}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@cavulsqa/create",
-  "version": "0.1.0",
+  "version": "0.1.2",
   "description": "Create a Vue + Framework7 + Capacitor + SQLite app from the cavulsqa templates.",
   "keywords": [
     "capacitor",
@@ -52,9 +52,11 @@
       }
     ]
   },
+  "templatesFingerprint": "sha256-7SiAd2fNFtbBqL3RPdjFpJEM9CeKmmPWj/oet2rfeGk=",
   "scripts": {
     "build": "node scripts/bundleTemplates.mjs",
     "check": "vp check",
-    "test": "vp test"
+    "test": "vp test",
+    "stamp": "node scripts/stampTemplates.mjs"
   }
 }

package/templates/f7-app/vite.config.ts

@@ -41,9 +41,7 @@ export default defineConfig({
 
     Icons({ autoInstall: true, compiler: "vue3" }),
 
-    VueI18nPlugin({
-      include: [fileURLToPath(new URL("./src/locales/**", import.meta.url))],
-    }),
+    VueI18nPlugin({ include: [fileURLToPath(new URL("./src/locales/**", import.meta.url))] }),
 
     /**
      * Composition API, i18n, vueuse and the Framework7 helpers are available without an import