@curviate/cli 0.24.0 → 0.24.1
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/CHANGELOG.md +29 -0
- package/package.json +6 -3
package/CHANGELOG.md
CHANGED
|
@@ -8,6 +8,35 @@ a new command or flag is a minor; a breaking command/flag/exit-code change is a
|
|
|
8
8
|
|
|
9
9
|
## [Unreleased]
|
|
10
10
|
|
|
11
|
+
## [0.24.1] - 2026-08-25
|
|
12
|
+
|
|
13
|
+
### Fixed
|
|
14
|
+
|
|
15
|
+
- **`@curviate/sdk` dependency pinned to an exact `0.24.2`** (was `^0.23.0`).
|
|
16
|
+
A caret range on a `0.x` package pins the minor (`^0.23.0` resolves to
|
|
17
|
+
`>=0.23.0 <0.24.0`), so the published CLI could never resolve the
|
|
18
|
+
registry's actual `latest` SDK once it moved to `0.24.x` - every SDK
|
|
19
|
+
release, the floor had been hand-bumped and drifted a minor behind. The
|
|
20
|
+
CLI is compiler-coupled to one SDK build, so the pin is now exact rather
|
|
21
|
+
than a range that can silently fail to admit the version actually
|
|
22
|
+
published.
|
|
23
|
+
- **Added a `check:sdk-pin` prepack guard** that compares the *resolved*
|
|
24
|
+
`@curviate/sdk` version under `node_modules` (what actually gets bundled)
|
|
25
|
+
against the *declared* dependency, and fails the build on any mismatch or
|
|
26
|
+
non-exact range. Chained into `prepack` alongside the existing leak-scan
|
|
27
|
+
guards, so this class of drift cannot reach a publish undetected again.
|
|
28
|
+
- **`check:clean` now flags a committed npm auth token** (the
|
|
29
|
+
`npm_`-prefixed shape an accidentally-tracked `.npmrc` carries), and
|
|
30
|
+
`.npmrc` / `*.tgz` are gitignored. Neither was previously scanned or
|
|
31
|
+
excluded (security-auditor F3).
|
|
32
|
+
- **Fixed the flag-to-body-field guard's fail-open fixture check.** It
|
|
33
|
+
previously `describe.skip`'d its entire 8-test suite whenever the sibling
|
|
34
|
+
`packages/sdk` fixture wasn't found at a `process.cwd()`-relative path,
|
|
35
|
+
reporting green while running nothing. It now resolves the fixture
|
|
36
|
+
relative to the test file's own location (not cwd) and fails loudly, per
|
|
37
|
+
test, when the fixture is missing, since a broken checkout is a failing suite,
|
|
38
|
+
not a skipped one.
|
|
39
|
+
|
|
11
40
|
## [0.24.0] - 2026-08-18
|
|
12
41
|
|
|
13
42
|
### Changed
|
package/package.json
CHANGED
|
@@ -1,6 +1,6 @@
|
|
|
1
1
|
{
|
|
2
2
|
"name": "@curviate/cli",
|
|
3
|
-
"version": "0.24.
|
|
3
|
+
"version": "0.24.1",
|
|
4
4
|
"private": false,
|
|
5
5
|
"description": "Official command-line interface for the Curviate API.",
|
|
6
6
|
"license": "MIT",
|
|
@@ -30,7 +30,8 @@
|
|
|
30
30
|
},
|
|
31
31
|
"scripts": {
|
|
32
32
|
"build": "tsup",
|
|
33
|
-
"prepack": "node scripts/check-clean.mjs && node scripts/check-copy.mjs && tsup && node scripts/check-clean.mjs --dist",
|
|
33
|
+
"prepack": "node scripts/check-clean.mjs && node scripts/check-copy.mjs && node scripts/check-sdk-pin.mjs && node scripts/check-fixture-pin.mjs && tsup && node scripts/check-clean.mjs --dist",
|
|
34
|
+
"pretest": "node scripts/check-fixture-pin.mjs",
|
|
34
35
|
"test": "vitest run",
|
|
35
36
|
"test:watch": "vitest",
|
|
36
37
|
"typecheck": "tsc --noEmit",
|
|
@@ -38,11 +39,13 @@
|
|
|
38
39
|
"check:clean": "node scripts/check-clean.mjs",
|
|
39
40
|
"check:clean:dist": "node scripts/check-clean.mjs --dist",
|
|
40
41
|
"check:copy": "node scripts/check-copy.mjs",
|
|
42
|
+
"check:sdk-pin": "node scripts/check-sdk-pin.mjs",
|
|
43
|
+
"check:fixture-pin": "node scripts/check-fixture-pin.mjs",
|
|
41
44
|
"verify:dist": "pnpm build && node scripts/verify-dist.mjs",
|
|
42
45
|
"clean": "rm -rf dist *.tsbuildinfo"
|
|
43
46
|
},
|
|
44
47
|
"dependencies": {
|
|
45
|
-
"@curviate/sdk": "
|
|
48
|
+
"@curviate/sdk": "0.24.2",
|
|
46
49
|
"citty": "^0.1.6",
|
|
47
50
|
"open": "^10.1.0"
|
|
48
51
|
},
|