@construct-space/cli 1.1.6 → 1.1.9

package/dist/index.js

@@ -5,43 +5,25 @@ var __getProtoOf = Object.getPrototypeOf;
 var __defProp = Object.defineProperty;
 var __getOwnPropNames = Object.getOwnPropertyNames;
 var __hasOwnProp = Object.prototype.hasOwnProperty;
-function __accessProp(key) {
-  return this[key];
-}
-var __toESMCache_node;
-var __toESMCache_esm;
 var __toESM = (mod, isNodeMode, target) => {
-  var canCache = mod != null && typeof mod === "object";
-  if (canCache) {
-    var cache = isNodeMode ? __toESMCache_node ??= new WeakMap : __toESMCache_esm ??= new WeakMap;
-    var cached = cache.get(mod);
-    if (cached)
-      return cached;
-  }
   target = mod != null ? __create(__getProtoOf(mod)) : {};
   const to = isNodeMode || !mod || !mod.__esModule ? __defProp(target, "default", { value: mod, enumerable: true }) : target;
   for (let key of __getOwnPropNames(mod))
     if (!__hasOwnProp.call(to, key))
       __defProp(to, key, {
-        get: __accessProp.bind(mod, key),
+        get: () => mod[key],
         enumerable: true
       });
-  if (canCache)
-    cache.set(mod, to);
   return to;
 };
 var __commonJS = (cb, mod) => () => (mod || cb((mod = { exports: {} }).exports, mod), mod.exports);
-var __returnValue = (v) => v;
-function __exportSetter(name, newValue) {
-  this[name] = __returnValue.bind(null, newValue);
-}
 var __export = (target, all) => {
   for (var name in all)
     __defProp(target, name, {
       get: all[name],
       enumerable: true,
       configurable: true,
-      set: __exportSetter.bind(all, name)
+      set: (newValue) => all[name] = () => newValue
     });
 };
 var __require = import.meta.require;
@@ -2807,6 +2789,7 @@ Object.defineProperties(createChalk.prototype, styles2);
 var chalk = createChalk();
 var chalkStderr = createChalk({ level: stderrColor ? stderrColor.level : 0 });
 var source_default = chalk;
+
 // node_modules/@inquirer/core/dist/lib/key.js
 var isUpKey = (key, keybindings = []) => key.name === "up" || keybindings.includes("vim") && key.name === "k" || keybindings.includes("emacs") && key.ctrl && key.name === "p";
 var isDownKey = (key, keybindings = []) => key.name === "down" || keybindings.includes("vim") && key.name === "j" || keybindings.includes("emacs") && key.ctrl && key.name === "n";
@@ -2951,7 +2934,7 @@ var effectScheduler = {
 // node_modules/@inquirer/core/dist/lib/use-state.js
 function useState(defaultValue) {
   return withPointer((pointer) => {
-    const setState = AsyncResource2.bind(function setState2(newValue) {
+    const setState = AsyncResource2.bind(function setState(newValue) {
       if (pointer.get() !== newValue) {
         pointer.set(newValue);
         handleChange();
@@ -4726,7 +4709,7 @@ async function scaffold(nameArg, options) {
 }
 
 // src/commands/build.ts
-import { existsSync as existsSync6, readFileSync as readFileSync4, readdirSync as readdirSync2, renameSync, statSync as statSync2 } from "fs";
+import { existsSync as existsSync6, readFileSync as readFileSync4, readdirSync as readdirSync3, renameSync, statSync as statSync3 } from "fs";
 import { join as join6 } from "path";
 import { createHash } from "crypto";
 
@@ -7379,8 +7362,8 @@ function validate2(m) {
     errors2.push("author: must be an object with a name");
   if (!m.icon)
     errors2.push("icon: must be a string");
-  if (!["company", "project", "both"].includes(m.scope))
-    errors2.push('scope: must be "company", "project", or "both"');
+  if (!["app", "project", "org", "any"].includes(m.scope))
+    errors2.push('scope: must be "app", "project", "org", or "any"');
   if (!m.pages?.length)
     errors2.push("pages: must be a non-empty array");
   if (!m.navigation?.label)
@@ -7407,30 +7390,84 @@ function exists(dir) {
 }
 
 // src/lib/entry.ts
-import { writeFileSync as writeFileSync3, mkdirSync as mkdirSync2, existsSync as existsSync4 } from "fs";
-import { join as join4, basename, extname } from "path";
+import { writeFileSync as writeFileSync3, mkdirSync as mkdirSync2, existsSync as existsSync4, readdirSync, statSync } from "fs";
+import { join as join4, basename, extname, relative } from "path";
 function capitalize(s) {
   if (!s)
     return s;
   return s.split("-").map((w) => w.charAt(0).toUpperCase() + w.slice(1)).join("");
 }
-function resolvePages(m, prefix) {
+function scanPagesDir(pagesDir) {
+  const results = [];
+  function walk(dir, routeSegments) {
+    if (!existsSync4(dir))
+      return;
+    const entries = readdirSync(dir).sort();
+    for (const entry of entries) {
+      const fullPath = join4(dir, entry);
+      const stat = statSync(fullPath);
+      if (stat.isDirectory()) {
+        const segment = entry.replace(/^\[(.+)\]$/, ":$1");
+        walk(fullPath, [...routeSegments, segment]);
+      } else if (stat.isFile() && entry.endsWith(".vue")) {
+        const nameWithoutExt = entry.replace(/\.vue$/, "");
+        const relFile = relative(join4(pagesDir, ".."), fullPath).replace(/\\/g, "/");
+        let routePath;
+        if (nameWithoutExt === "index") {
+          routePath = routeSegments.join("/");
+        } else {
+          const segment = nameWithoutExt.replace(/^\[(.+)\]$/, ":$1");
+          routePath = [...routeSegments, segment].join("/");
+        }
+        results.push({ filePath: relFile, routePath });
+      }
+    }
+  }
+  walk(pagesDir, []);
+  return results;
+}
+function varNameFromFile(filePath) {
+  let cleaned = filePath.replace(/^pages\//, "").replace(/\.vue$/, "");
+  cleaned = cleaned.replace(/\[([^\]]+)\]/g, "$1");
+  const segments = cleaned.split(/[\/-]/).filter(Boolean);
+  const name = segments.map((s) => s.charAt(0).toUpperCase() + s.slice(1)).join("");
+  return (name || "Index") + "Page";
+}
+function resolvePages(m, root, prefix) {
+  const pagesDir = join4(root, "src", "pages");
+  const fsPages = scanPagesDir(pagesDir);
+  const fsMap = new Map;
+  for (const fp of fsPages) {
+    fsMap.set(fp.routePath, fp);
+  }
   return m.pages.map((p) => {
-    let component = p.component;
-    if (!component) {
-      component = p.path === "" ? "pages/index.vue" : `pages/${p.path}.vue`;
+    if (p.component) {
+      const base = basename(p.component);
+      const nameWithoutExt = base.replace(extname(base), "").replace(/[\[\]]/g, "");
+      const dir = p.component.replace(/^pages\//, "").replace(/\/[^/]+$/, "");
+      let varName;
+      if (dir && dir !== p.component.replace(/^pages\//, "")) {
+        varName = capitalize(dir.split("/").map((s) => s.replace(/[\[\]]/g, "")).join("-")) + capitalize(nameWithoutExt) + "Page";
+      } else {
+        varName = capitalize(nameWithoutExt) + "Page";
+      }
+      return { varName, importPath: prefix + p.component, path: p.path };
+    }
+    const fsPage = fsMap.get(p.path);
+    if (fsPage) {
+      const varName = varNameFromFile(fsPage.filePath);
+      return { varName, importPath: prefix + fsPage.filePath, path: p.path };
     }
-    let varName = "IndexPage";
-    if (p.path) {
-      let cleanPath = p.path.replace(/:/g, "");
-      if (p.component) {
-        let base = basename(p.component);
-        base = base.replace(extname(base), "").replace(/[\[\]]/g, "");
-        cleanPath = base;
+    const legacyComponent = p.path === "" ? "pages/index.vue" : `pages/${p.path}.vue`;
+    const legacyFullPath = join4(root, "src", legacyComponent);
+    if (existsSync4(legacyFullPath)) {
+      let varName = "IndexPage";
+      if (p.path) {
+        varName = capitalize(p.path.replace(/[\/:]/g, "-").replace(/-+/g, "-")) + "Page";
       }
-      varName = capitalize(cleanPath) + "Page";
+      return { varName, importPath: prefix + legacyComponent, path: p.path };
     }
-    return { varName, importPath: prefix + component, path: p.path };
+    throw new Error(`[entry] Could not resolve component for page "${p.path}". ` + `Checked: manifest component field, filesystem scan of src/pages/, ` + `and legacy fallback at ${legacyComponent}. ` + `Ensure a .vue file exists for this route.`);
   });
 }
 function resolveWidgets(m, prefix) {
@@ -7449,7 +7486,7 @@ function resolveWidgets(m, prefix) {
 }
 function generate(root, m) {
   const pagePrefix = existsSync4(join4(root, "src", "pages")) ? "./" : "../";
-  const pages = resolvePages(m, pagePrefix);
+  const pages = resolvePages(m, root, pagePrefix);
   const widgets = resolveWidgets(m, "../");
   const actionsPath = join4(root, "src", "actions.ts");
   const hasActions = existsSync4(actionsPath);
@@ -7505,7 +7542,7 @@ function writeEntry(root, m) {
 }
 
 // src/lib/agent.ts
-import { readFileSync as readFileSync3, writeFileSync as writeFileSync4, readdirSync, existsSync as existsSync5 } from "fs";
+import { readFileSync as readFileSync3, writeFileSync as writeFileSync4, readdirSync as readdirSync2, existsSync as existsSync5 } from "fs";
 import { join as join5, extname as extname2, basename as basename2 } from "path";
 var AGENT_KEY = "construct-agent-obfuscate-v1";
 function encode(content) {
@@ -7521,7 +7558,7 @@ function readMdFiles(dir) {
   const result = {};
   if (!existsSync5(dir))
     return result;
-  for (const f of readdirSync(dir)) {
+  for (const f of readdirSync2(dir)) {
     if (extname2(f) !== ".md")
       continue;
     result[basename2(f, ".md")] = readFileSync3(join5(dir, f), "utf-8");
@@ -7532,7 +7569,7 @@ function readJsonFiles(dir) {
   const result = {};
   if (!existsSync5(dir))
     return result;
-  for (const f of readdirSync(dir)) {
+  for (const f of readdirSync2(dir)) {
     if (extname2(f) !== ".json")
       continue;
     result[basename2(f, ".json")] = readFileSync3(join5(dir, f), "utf-8");
@@ -7622,7 +7659,7 @@ async function build(options) {
   }
   runHook(m.hooks, "postBuild", root);
   const agentDir = join6(root, "agent");
-  if (existsSync6(agentDir) && statSync2(agentDir).isDirectory()) {
+  if (existsSync6(agentDir) && statSync3(agentDir).isDirectory()) {
     const distDir2 = join6(root, "dist");
     bundleAgentDir(agentDir, distDir2);
     bundleAgentDir(agentDir, root);
@@ -7631,7 +7668,7 @@ async function build(options) {
   const expectedBundle = `space-${m.id}.iife.js`;
   let bundlePath = join6(distDir, expectedBundle);
   if (!existsSync6(bundlePath)) {
-    const matches = readdirSync2(distDir).filter((f) => f.startsWith("space-") && f.endsWith(".iife.js"));
+    const matches = readdirSync3(distDir).filter((f) => f.startsWith("space-") && f.endsWith(".iife.js"));
     if (matches.length === 1) {
       renameSync(join6(distDir, matches[0]), bundlePath);
       const oldCSS = join6(distDir, matches[0].replace(".iife.js", ".css"));
@@ -7665,16 +7702,16 @@ import { existsSync as existsSync7, readFileSync as readFileSync5 } from "fs";
 import { join as join9 } from "path";
 import { createHash as createHash2 } from "crypto";
 
-// node_modules/chokidar/esm/index.js
-import { stat as statcb } from "fs";
-import { stat as stat3, readdir as readdir2 } from "fs/promises";
+// node_modules/chokidar/index.js
 import { EventEmitter } from "events";
-import * as sysPath2 from "path";
+import { stat as statcb, Stats } from "fs";
+import { readdir as readdir2, stat as stat3 } from "fs/promises";
+import * as sp2 from "path";
 
-// node_modules/readdirp/esm/index.js
-import { stat, lstat, readdir, realpath } from "fs/promises";
+// node_modules/readdirp/index.js
+import { lstat, readdir, realpath, stat } from "fs/promises";
+import { join as pjoin, relative as prelative, resolve as presolve, sep as psep } from "path";
 import { Readable } from "stream";
-import { resolve as presolve, relative as prelative, join as pjoin, sep as psep } from "path";
 var EntryTypes = {
   FILE_TYPE: "files",
   DIR_TYPE: "directories",
@@ -7730,6 +7767,20 @@ var normalizeFilter = (filter) => {
 };
 
 class ReaddirpStream extends Readable {
+  parents;
+  reading;
+  parent;
+  _stat;
+  _maxDepth;
+  _wantsDir;
+  _wantsFile;
+  _wantsEverything;
+  _root;
+  _isDirent;
+  _statsProp;
+  _rdOptions;
+  _fileFilter;
+  _directoryFilter;
   constructor(options = {}) {
     super({
       objectMode: true,
@@ -7746,7 +7797,7 @@ class ReaddirpStream extends Readable {
     } else {
       this._stat = statMethod;
     }
-    this._maxDepth = opts.depth ?? defaultOptions.depth;
+    this._maxDepth = opts.depth != null && Number.isSafeInteger(opts.depth) ? opts.depth : defaultOptions.depth;
     this._wantsDir = type ? DIR_TYPES.has(type) : false;
     this._wantsFile = type ? FILE_TYPES.has(type) : false;
     this._wantsEverything = type === EntryTypes.EVERYTHING_TYPE;
@@ -7891,11 +7942,11 @@ function readdirp(root, options = {}) {
   return new ReaddirpStream(options);
 }
 
-// node_modules/chokidar/esm/handler.js
-import { watchFile, unwatchFile, watch as fs_watch } from "fs";
-import { open, stat as stat2, lstat as lstat2, realpath as fsrealpath } from "fs/promises";
-import * as sysPath from "path";
+// node_modules/chokidar/handler.js
+import { watch as fs_watch, unwatchFile, watchFile } from "fs";
+import { realpath as fsrealpath, lstat as lstat2, open, stat as stat2 } from "fs/promises";
 import { type as osType } from "os";
+import * as sp from "path";
 var STR_DATA = "data";
 var STR_END = "end";
 var STR_CLOSE = "close";
@@ -8187,7 +8238,7 @@ var binaryExtensions = new Set([
   "zip",
   "zipx"
 ]);
-var isBinaryPath = (filePath) => binaryExtensions.has(sysPath.extname(filePath).slice(1).toLowerCase());
+var isBinaryPath = (filePath) => binaryExtensions.has(sp.extname(filePath).slice(1).toLowerCase());
 var foreach = (val, fn) => {
   if (val instanceof Set) {
     val.forEach(fn);
@@ -8225,7 +8276,7 @@ function createFsWatchInstance(path, options, listener, errHandler, emitRaw) {
     listener(path);
     emitRaw(rawEvent, evPath, { watchedPath: path });
     if (evPath && path !== evPath) {
-      fsWatchBroadcast(sysPath.resolve(path, evPath), KEY_LISTENERS, sysPath.join(path, evPath));
+      fsWatchBroadcast(sp.resolve(path, evPath), KEY_LISTENERS, sp.join(path, evPath));
     }
   };
   try {
@@ -8340,17 +8391,19 @@ var setFsWatchFileListener = (path, fullPath, options, handlers) => {
 };
 
 class NodeFsHandler {
+  fsw;
+  _boundHandleError;
   constructor(fsW) {
     this.fsw = fsW;
     this._boundHandleError = (error2) => fsW._handleError(error2);
   }
   _watchWithNodeFs(path, listener) {
     const opts = this.fsw.options;
-    const directory = sysPath.dirname(path);
-    const basename4 = sysPath.basename(path);
+    const directory = sp.dirname(path);
+    const basename4 = sp.basename(path);
     const parent = this.fsw._getWatchedDir(directory);
     parent.add(basename4);
-    const absolutePath = sysPath.resolve(path);
+    const absolutePath = sp.resolve(path);
     const options = {
       persistent: opts.persistent
     };
@@ -8377,8 +8430,8 @@ class NodeFsHandler {
     if (this.fsw.closed) {
       return;
     }
-    const dirname3 = sysPath.dirname(file);
-    const basename4 = sysPath.basename(file);
+    const dirname3 = sp.dirname(file);
+    const basename4 = sp.basename(file);
     const parent = this.fsw._getWatchedDir(dirname3);
     let prevStats = stats;
     if (parent.has(basename4))
@@ -8461,8 +8514,9 @@ class NodeFsHandler {
     this.fsw._symlinkPaths.set(full, true);
   }
   _handleRead(directory, initialAdd, wh, target, dir, depth, throttler) {
-    directory = sysPath.join(directory, "");
-    throttler = this.fsw._throttle("readdir", directory, 1000);
+    directory = sp.join(directory, "");
+    const throttleKey = target ? `${directory}:${target}` : directory;
+    throttler = this.fsw._throttle("readdir", throttleKey, 1000);
     if (!throttler)
       return;
     const previous = this.fsw._getWatchedDir(wh.path);
@@ -8479,7 +8533,7 @@ class NodeFsHandler {
         return;
       }
       const item = entry.path;
-      let path = sysPath.join(directory, item);
+      let path = sp.join(directory, item);
       current.add(item);
       if (entry.stats.isSymbolicLink() && await this._handleSymlink(entry, directory, path, item)) {
         return;
@@ -8490,7 +8544,7 @@ class NodeFsHandler {
       }
       if (item === target || !target && !previous.has(item)) {
         this.fsw._incrReadyCount();
-        path = sysPath.join(dir, sysPath.relative(dir, path));
+        path = sp.join(dir, sp.relative(dir, path));
         this._addToNodeFs(path, initialAdd, wh, depth + 1);
       }
     }).on(EV.ERROR, this._boundHandleError);
@@ -8516,12 +8570,12 @@ class NodeFsHandler {
     });
   }
   async _handleDir(dir, stats, initialAdd, depth, target, wh, realpath2) {
-    const parentDir = this.fsw._getWatchedDir(sysPath.dirname(dir));
-    const tracked = parentDir.has(sysPath.basename(dir));
+    const parentDir = this.fsw._getWatchedDir(sp.dirname(dir));
+    const tracked = parentDir.has(sp.basename(dir));
     if (!(initialAdd && this.fsw.options.ignoreInitial) && !target && !tracked) {
       this.fsw._emit(EV.ADD_DIR, dir, stats);
     }
-    parentDir.add(sysPath.basename(dir));
+    parentDir.add(sp.basename(dir));
     this.fsw._getWatchedDir(dir);
     let throttler;
     let closer;
@@ -8562,7 +8616,7 @@ class NodeFsHandler {
       const follow = this.fsw.options.followSymlinks;
       let closer;
       if (stats.isDirectory()) {
-        const absPath = sysPath.resolve(path);
+        const absPath = sp.resolve(path);
         const targetPath = follow ? await fsrealpath(path) : path;
         if (this.fsw.closed)
           return;
@@ -8576,14 +8630,14 @@ class NodeFsHandler {
         const targetPath = follow ? await fsrealpath(path) : path;
         if (this.fsw.closed)
           return;
-        const parent = sysPath.dirname(wh.watchPath);
+        const parent = sp.dirname(wh.watchPath);
         this.fsw._getWatchedDir(parent).add(wh.watchPath);
         this.fsw._emit(EV.ADD, wh.watchPath, stats);
         closer = await this._handleDir(parent, stats, initialAdd, depth, path, wh, targetPath);
         if (this.fsw.closed)
           return;
         if (targetPath !== undefined) {
-          this.fsw._symlinkPaths.set(sysPath.resolve(path), targetPath);
+          this.fsw._symlinkPaths.set(sp.resolve(path), targetPath);
         }
       } else {
         closer = this._handleFile(wh.watchPath, stats, initialAdd);
@@ -8601,7 +8655,7 @@ class NodeFsHandler {
   }
 }
 
-// node_modules/chokidar/esm/index.js
+// node_modules/chokidar/index.js
 /*! chokidar - MIT License (c) 2012 Paul Miller (paulmillr.com) */
 var SLASH = "/";
 var SLASH_SLASH = "//";
@@ -8609,7 +8663,7 @@ var ONE_DOT = ".";
 var TWO_DOTS = "..";
 var STRING_TYPE = "string";
 var BACK_SLASH_RE = /\\/g;
-var DOUBLE_SLASH_RE = /\/\//;
+var DOUBLE_SLASH_RE = /\/\//g;
 var DOT_RE = /\..*\.(sw[px])$|~$|\.subl.*\.tmp/;
 var REPLACER_RE = /^\.[/\\]/;
 function arrify(item) {
@@ -8628,11 +8682,11 @@ function createPattern(matcher) {
       if (matcher.path === string)
         return true;
       if (matcher.recursive) {
-        const relative3 = sysPath2.relative(matcher.path, string);
-        if (!relative3) {
+        const relative4 = sp2.relative(matcher.path, string);
+        if (!relative4) {
           return false;
         }
-        return !relative3.startsWith("..") && !sysPath2.isAbsolute(relative3);
+        return !relative4.startsWith("..") && !sp2.isAbsolute(relative4);
       }
       return false;
     };
@@ -8642,14 +8696,12 @@ function createPattern(matcher) {
 function normalizePath(path) {
   if (typeof path !== "string")
     throw new Error("string expected");
-  path = sysPath2.normalize(path);
+  path = sp2.normalize(path);
   path = path.replace(/\\/g, "/");
   let prepend = false;
   if (path.startsWith("//"))
     prepend = true;
-  const DOUBLE_SLASH_RE2 = /\/\//;
-  while (path.match(DOUBLE_SLASH_RE2))
-    path = path.replace(DOUBLE_SLASH_RE2, "/");
+  path = path.replace(DOUBLE_SLASH_RE, "/");
   if (prepend)
     path = "/" + path;
   return path;
@@ -8690,31 +8742,32 @@ var toUnix = (string) => {
   if (str.startsWith(SLASH_SLASH)) {
     prepend = true;
   }
-  while (str.match(DOUBLE_SLASH_RE)) {
-    str = str.replace(DOUBLE_SLASH_RE, SLASH);
-  }
+  str = str.replace(DOUBLE_SLASH_RE, SLASH);
   if (prepend) {
     str = SLASH + str;
   }
   return str;
 };
-var normalizePathToUnix = (path) => toUnix(sysPath2.normalize(toUnix(path)));
+var normalizePathToUnix = (path) => toUnix(sp2.normalize(toUnix(path)));
 var normalizeIgnored = (cwd = "") => (path) => {
   if (typeof path === "string") {
-    return normalizePathToUnix(sysPath2.isAbsolute(path) ? path : sysPath2.join(cwd, path));
+    return normalizePathToUnix(sp2.isAbsolute(path) ? path : sp2.join(cwd, path));
   } else {
     return path;
   }
 };
 var getAbsolutePath = (path, cwd) => {
-  if (sysPath2.isAbsolute(path)) {
+  if (sp2.isAbsolute(path)) {
     return path;
   }
-  return sysPath2.join(cwd, path);
+  return sp2.join(cwd, path);
 };
 var EMPTY_SET = Object.freeze(new Set);
 
 class DirEntry {
+  path;
+  _removeWatcher;
+  items;
   constructor(dir, removeWatcher) {
     this.path = dir;
     this._removeWatcher = removeWatcher;
@@ -8739,7 +8792,7 @@ class DirEntry {
       await readdir2(dir);
     } catch (err) {
       if (this._removeWatcher) {
-        this._removeWatcher(sysPath2.dirname(dir), sysPath2.basename(dir));
+        this._removeWatcher(sp2.dirname(dir), sp2.basename(dir));
       }
     }
   }
@@ -8767,12 +8820,19 @@ var STAT_METHOD_F = "stat";
 var STAT_METHOD_L = "lstat";
 
 class WatchHelper {
+  fsw;
+  path;
+  watchPath;
+  fullWatchPath;
+  dirParts;
+  followSymlinks;
+  statMethod;
   constructor(path, follow, fsw) {
     this.fsw = fsw;
     const watchPath = path;
     this.path = path = path.replace(REPLACER_RE, "");
     this.watchPath = watchPath;
-    this.fullWatchPath = sysPath2.resolve(watchPath);
+    this.fullWatchPath = sp2.resolve(watchPath);
     this.dirParts = [];
     this.dirParts.forEach((parts) => {
       if (parts.length > 1)
@@ -8782,7 +8842,7 @@ class WatchHelper {
     this.statMethod = follow ? STAT_METHOD_F : STAT_METHOD_L;
   }
   entryPath(entry) {
-    return sysPath2.join(this.watchPath, sysPath2.relative(this.watchPath, entry.fullPath));
+    return sp2.join(this.watchPath, sp2.relative(this.watchPath, entry.fullPath));
   }
   filterPath(entry) {
     const { stats } = entry;
@@ -8797,6 +8857,24 @@ class WatchHelper {
 }
 
 class FSWatcher extends EventEmitter {
+  closed;
+  options;
+  _closers;
+  _ignoredPaths;
+  _throttled;
+  _streams;
+  _symlinkPaths;
+  _watched;
+  _pendingWrites;
+  _pendingUnlinks;
+  _readyCount;
+  _emitReady;
+  _closePromise;
+  _userIgnored;
+  _readyEmitted;
+  _emitRaw;
+  _boundRemove;
+  _nodeFsHandler;
   constructor(_opts = {}) {
     super();
     this.closed = false;
@@ -8905,7 +8983,7 @@ class FSWatcher extends EventEmitter {
         return;
       results.forEach((item) => {
         if (item)
-          this.add(sysPath2.dirname(item), sysPath2.basename(_origAdd || item));
+          this.add(sp2.dirname(item), sp2.basename(_origAdd || item));
       });
     });
     return this;
@@ -8916,10 +8994,10 @@ class FSWatcher extends EventEmitter {
     const paths = unifyPaths(paths_);
     const { cwd } = this.options;
     paths.forEach((path) => {
-      if (!sysPath2.isAbsolute(path) && !this._closers.has(path)) {
+      if (!sp2.isAbsolute(path) && !this._closers.has(path)) {
         if (cwd)
-          path = sysPath2.join(cwd, path);
-        path = sysPath2.resolve(path);
+          path = sp2.join(cwd, path);
+        path = sp2.resolve(path);
       }
       this._closePath(path);
       this._addIgnoredPath(path);
@@ -8963,7 +9041,7 @@ class FSWatcher extends EventEmitter {
   getWatched() {
     const watchList = {};
     this._watched.forEach((entry, dir) => {
-      const key = this.options.cwd ? sysPath2.relative(this.options.cwd, dir) : dir;
+      const key = this.options.cwd ? sp2.relative(this.options.cwd, dir) : dir;
       const index = key || ONE_DOT;
       watchList[index] = entry.getChildren().sort();
     });
@@ -8979,9 +9057,9 @@ class FSWatcher extends EventEmitter {
       return;
     const opts = this.options;
     if (isWindows)
-      path = sysPath2.normalize(path);
+      path = sp2.normalize(path);
     if (opts.cwd)
-      path = sysPath2.relative(opts.cwd, path);
+      path = sp2.relative(opts.cwd, path);
     const args = [path];
     if (stats != null)
       args.push(stats);
@@ -9032,7 +9110,7 @@ class FSWatcher extends EventEmitter {
         return this;
     }
     if (opts.alwaysStat && stats === undefined && (event === EVENTS.ADD || event === EVENTS.ADD_DIR || event === EVENTS.CHANGE)) {
-      const fullPath = opts.cwd ? sysPath2.join(opts.cwd, path) : path;
+      const fullPath = opts.cwd ? sp2.join(opts.cwd, path) : path;
       let stats2;
       try {
         stats2 = await stat3(fullPath);
@@ -9088,8 +9166,8 @@ class FSWatcher extends EventEmitter {
     const pollInterval = awf.pollInterval;
     let timeoutHandler;
     let fullPath = path;
-    if (this.options.cwd && !sysPath2.isAbsolute(path)) {
-      fullPath = sysPath2.join(this.options.cwd, path);
+    if (this.options.cwd && !sp2.isAbsolute(path)) {
+      fullPath = sp2.join(this.options.cwd, path);
     }
     const now = new Date;
     const writes = this._pendingWrites;
@@ -9146,7 +9224,7 @@ class FSWatcher extends EventEmitter {
     return new WatchHelper(path, this.options.followSymlinks, this);
   }
   _getWatchedDir(directory) {
-    const dir = sysPath2.resolve(directory);
+    const dir = sp2.resolve(directory);
     if (!this._watched.has(dir))
       this._watched.set(dir, new DirEntry(dir, this._boundRemove));
     return this._watched.get(dir);
@@ -9157,8 +9235,8 @@ class FSWatcher extends EventEmitter {
     return Boolean(Number(stats.mode) & 256);
   }
   _remove(directory, item, isDirectory) {
-    const path = sysPath2.join(directory, item);
-    const fullPath = sysPath2.resolve(path);
+    const path = sp2.join(directory, item);
+    const fullPath = sp2.resolve(path);
     isDirectory = isDirectory != null ? isDirectory : this._watched.has(path) || this._watched.has(fullPath);
     if (!this._throttle("remove", path, 100))
       return;
@@ -9176,7 +9254,7 @@ class FSWatcher extends EventEmitter {
     }
     let relPath = path;
     if (this.options.cwd)
-      relPath = sysPath2.relative(this.options.cwd, path);
+      relPath = sp2.relative(this.options.cwd, path);
     if (this.options.awaitWriteFinish && this._pendingWrites.has(relPath)) {
       const event = this._pendingWrites.get(relPath).cancelWait();
       if (event === EVENTS.ADD)
@@ -9191,8 +9269,8 @@ class FSWatcher extends EventEmitter {
   }
   _closePath(path) {
     this._closeFile(path);
-    const dir = sysPath2.dirname(path);
-    this._getWatchedDir(dir).remove(sysPath2.basename(path));
+    const dir = sp2.dirname(path);
+    this._getWatchedDir(dir).remove(sp2.basename(path));
   }
   _closeFile(path) {
     const closers = this._closers.get(path);
@@ -9361,7 +9439,7 @@ function install() {
 }
 
 // src/commands/publish.ts
-import { readFileSync as readFileSync7, writeFileSync as writeFileSync6, statSync as statSync4, unlinkSync as unlinkSync2 } from "fs";
+import { readFileSync as readFileSync7, writeFileSync as writeFileSync6, statSync as statSync5, unlinkSync as unlinkSync2 } from "fs";
 import { join as join14, basename as basename6 } from "path";
 
 // src/lib/auth.ts
@@ -9404,7 +9482,7 @@ function clear() {
 }
 
 // src/lib/pack.ts
-import { readdirSync as readdirSync3, statSync as statSync3, existsSync as existsSync10 } from "fs";
+import { readdirSync as readdirSync4, statSync as statSync4, existsSync as existsSync10 } from "fs";
 import { join as join13 } from "path";
 import { tmpdir } from "os";
 import { execSync as execSync3 } from "child_process";
@@ -9446,8 +9524,8 @@ async function packSource(root) {
     if (existsSync10(join13(root, name)))
       entries.push(name);
   }
-  for (const entry of readdirSync3(root)) {
-    if (statSync3(join13(root, entry)).isDirectory())
+  for (const entry of readdirSync4(root)) {
+    if (statSync4(join13(root, entry)).isDirectory())
       continue;
     if (allowedRootFiles.includes(entry))
       continue;
@@ -9467,7 +9545,7 @@ async function packSource(root) {
   const excludes = "--exclude=node_modules --exclude=dist --exclude=.git --exclude=*.env --exclude=*.log --exclude=*.lock --exclude=*.lockb";
   const cmd = `tar czf "${tarballPath}" ${excludes} ${validEntries.join(" ")}`;
   execSync3(cmd, { cwd: root });
-  const size = statSync3(tarballPath).size;
+  const size = statSync4(tarballPath).size;
   if (size > MAX_SIZE) {
     throw new Error(`Source exceeds maximum size of ${MAX_SIZE / 1024 / 1024}MB`);
   }
@@ -9490,6 +9568,16 @@ async function uploadSource(portalURL, token, tarballPath, m) {
   if (resp.status === 401) {
     throw new Error("authentication failed \u2014 run 'construct login' to re-authenticate");
   }
+  if (resp.status === 403) {
+    let msg = result.error || "You are not the owner of this space";
+    if (result.owner_user_id) {
+      msg += `
+  Current owner: ${result.owner_user_id}`;
+    }
+    msg += `
+  Fork to a new space_id to publish your own version.`;
+    throw new Error(msg);
+  }
   if (resp.status >= 400) {
     const msg = result.error || result.errors?.join("; ") || `server returned ${resp.status}`;
     throw new Error(msg);
@@ -9607,7 +9695,7 @@ async function publish(options) {
   let tarballPath;
   try {
     tarballPath = await packSource(root);
-    const size = statSync4(tarballPath).size;
+    const size = statSync5(tarballPath).size;
     spinner.succeed(`Source packed (${formatBytes(size)})`);
   } catch (err) {
     spinner.fail("Pack failed");
@@ -10140,7 +10228,7 @@ function updateBarrel(modelsDir, modelName) {
 }
 
 // src/commands/graph/push.ts
-import { existsSync as existsSync16, readdirSync as readdirSync4, readFileSync as readFileSync12 } from "fs";
+import { existsSync as existsSync16, readdirSync as readdirSync5, readFileSync as readFileSync12 } from "fs";
 import { join as join20, basename as basename7 } from "path";
 async function graphPush() {
   const root = process.cwd();
@@ -10154,7 +10242,7 @@ async function graphPush() {
     console.error(source_default.red("No src/models/ directory found. Run 'construct graph init' first."));
     process.exit(1);
   }
-  const modelFiles = readdirSync4(modelsDir).filter((f) => f.endsWith(".ts") && f !== "index.ts");
+  const modelFiles = readdirSync5(modelsDir).filter((f) => f.endsWith(".ts") && f !== "index.ts");
   if (modelFiles.length === 0) {
     console.error(source_default.red("No model files found in src/models/"));
     console.log(source_default.dim("  Generate one: construct graph g User name:string email:string"));
@@ -10182,12 +10270,14 @@ async function graphPush() {
   const graphURL = process.env.GRAPH_URL || "https://graph.construct.space";
   const spinner = ora("Registering models...").start();
   try {
+    const userID = creds.user?.id || "";
     const resp = await fetch(`${graphURL}/api/schemas/register`, {
       method: "POST",
       headers: {
         "Content-Type": "application/json",
         Authorization: `Bearer ${creds.token}`,
-        "X-Space-ID": m.id
+        "X-Space-ID": m.id,
+        "X-Auth-User-ID": userID
       },
       body: JSON.stringify({
         space_id: m.id,
@@ -10197,6 +10287,20 @@ async function graphPush() {
         manifest: { version: 1, models }
       })
     });
+    if (resp.status === 403) {
+      spinner.fail("Ownership check failed");
+      try {
+        const errBody = await resp.json();
+        console.error(source_default.red(`  ${errBody.error || "You are not the owner of this space"}`));
+        if (errBody.owner_user_id) {
+          console.error(source_default.dim(`  Current owner: ${errBody.owner_user_id}`));
+        }
+        console.error(source_default.dim("  Fork to a new space_id to publish your own version."));
+      } catch {
+        console.error(source_default.red(`  403: Forbidden \u2014 ownership check failed`));
+      }
+      process.exit(1);
+    }
     if (!resp.ok) {
       const body = await resp.text();
       spinner.fail("Registration failed");
@@ -10279,7 +10383,7 @@ function parseModelFile(content, fileName) {
 }
 
 // src/commands/graph/migrate.ts
-import { existsSync as existsSync17, readdirSync as readdirSync5, readFileSync as readFileSync13 } from "fs";
+import { existsSync as existsSync17, readdirSync as readdirSync6, readFileSync as readFileSync13 } from "fs";
 import { join as join21, basename as basename8 } from "path";
 async function graphMigrate(options) {
   const root = process.cwd();
@@ -10316,7 +10420,7 @@ async function graphMigrate(options) {
     spinner.fail("Could not fetch schema");
     process.exit(1);
   }
-  const modelFiles = readdirSync5(modelsDir).filter((f) => f.endsWith(".ts") && f !== "index.ts");
+  const modelFiles = readdirSync6(modelsDir).filter((f) => f.endsWith(".ts") && f !== "index.ts");
   const localModels = [];
   for (const file of modelFiles) {
     const content = readFileSync13(join21(modelsDir, file), "utf-8");
@@ -10423,7 +10527,7 @@ function parseModelFields(content, fileName) {
 }
 
 // src/index.ts
-var VERSION = "1.1.6";
+var VERSION = "1.1.9";
 var program2 = new Command;
 program2.name("construct").description("Construct CLI \u2014 scaffold, build, develop, and publish spaces").version(VERSION);
 program2.command("scaffold [name]").alias("new").alias("create").description("Create a new Construct space project").option("--with-tests", "Include E2E testing boilerplate").option("--full", "Full preset: multiple pages, extra skills, widget templates").action(async (name, opts) => scaffold(name, opts));

package/dist/templates/space/full/space.manifest.json.tmpl

@@ -7,7 +7,7 @@
     "name": "Your Name"
   },
   "icon": "i-lucide-box",
-  "scope": "both",
+  "scope": "app",
   "minConstructVersion": "0.7.0",
   "navigation": {
     "label": "{{.DisplayName}}",

package/dist/templates/space/space.manifest.json.tmpl

@@ -7,7 +7,7 @@
     "name": "Your Name"
   },
   "icon": "i-lucide-box",
-  "scope": "both",
+  "scope": "app",
   "minConstructVersion": "0.7.0",
   "navigation": {
     "label": "{{.DisplayName}}",

package/dist/templates/space/widgets/2x1.vue.tmpl

@@ -1,7 +1,14 @@
 <script setup lang="ts">
 /**
  * {{.DisplayName}} Summary Widget — 2×1 compact view
+ *
+ * Widgets run inside a closed Shadow DOM sandbox.
+ * Use the injected widgetApi for theme and actions — do not access
+ * window, document, or global stores directly.
  */
+import { inject } from 'vue'
+
+const api = inject<{ theme: { mode: string; vars: Record<string, string> }; space: { id: string; name: string } }>('widgetApi')
 </script>
 
 <template>

package/dist/templates/space/widgets/4x1.vue.tmpl

@@ -1,7 +1,14 @@
 <script setup lang="ts">
 /**
  * {{.DisplayName}} Summary Widget — 4×1 wide view
+ *
+ * Widgets run inside a closed Shadow DOM sandbox.
+ * Use the injected widgetApi for theme and actions — do not access
+ * window, document, or global stores directly.
  */
+import { inject } from 'vue'
+
+const api = inject<{ theme: { mode: string; vars: Record<string, string> }; space: { id: string; name: string } }>('widgetApi')
 </script>
 
 <template>

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@construct-space/cli",
-  "version": "1.1.6",
+  "version": "1.1.9",
   "description": "Construct CLI — scaffold, build, develop, and publish spaces",
   "type": "module",
   "bin": {

package/templates/space/full/space.manifest.json.tmpl

@@ -7,7 +7,7 @@
     "name": "Your Name"
   },
   "icon": "i-lucide-box",
-  "scope": "both",
+  "scope": "app",
   "minConstructVersion": "0.7.0",
   "navigation": {
     "label": "{{.DisplayName}}",

package/templates/space/space.manifest.json.tmpl

@@ -7,7 +7,7 @@
     "name": "Your Name"
   },
   "icon": "i-lucide-box",
-  "scope": "both",
+  "scope": "app",
   "minConstructVersion": "0.7.0",
   "navigation": {
     "label": "{{.DisplayName}}",

package/templates/space/widgets/2x1.vue.tmpl

@@ -1,7 +1,14 @@
 <script setup lang="ts">
 /**
  * {{.DisplayName}} Summary Widget — 2×1 compact view
+ *
+ * Widgets run inside a closed Shadow DOM sandbox.
+ * Use the injected widgetApi for theme and actions — do not access
+ * window, document, or global stores directly.
  */
+import { inject } from 'vue'
+
+const api = inject<{ theme: { mode: string; vars: Record<string, string> }; space: { id: string; name: string } }>('widgetApi')
 </script>
 
 <template>

package/templates/space/widgets/4x1.vue.tmpl

@@ -1,7 +1,14 @@
 <script setup lang="ts">
 /**
  * {{.DisplayName}} Summary Widget — 4×1 wide view
+ *
+ * Widgets run inside a closed Shadow DOM sandbox.
+ * Use the injected widgetApi for theme and actions — do not access
+ * window, document, or global stores directly.
  */
+import { inject } from 'vue'
+
+const api = inject<{ theme: { mode: string; vars: Record<string, string> }; space: { id: string; name: string } }>('widgetApi')
 </script>
 
 <template>