@fias/create-fias-plugin 1.1.4 → 1.2.0

package/index.js

@@ -4,9 +4,97 @@
 
 var fs = require('fs');
 var path = require('path');
+var childProcess = require('child_process');
 
 var TEMPLATE_DIR = path.resolve(__dirname, 'templates/default');
 
+// =============================================================================
+// Self-update on stale npx cache.
+//
+// Failure mode this guards against: a developer who has scaffolded a FIAS
+// plugin once before has `@fias/create-fias-plugin` in their npx cache
+// (`~/.npm/_npx/<hash>/`). Subsequent `npm create @fias/fias-plugin <name>`
+// invocations reuse the cached binary WITHOUT checking the npm registry for
+// a newer version. Result: the CLAUDE.md / AGENTS.md / templates dropped
+// into their new project are months out of date, and an AI assistant
+// reading those files designs against an obsolete SDK surface (we hit this
+// concretely in May 2026 — a fresh scaffold's CLAUDE.md was missing the
+// in-app-purchase hook, vault documents, asset library, and the
+// `store:purchase` permission, even though all four had been live on npm
+// for weeks).
+//
+// Fix: at startup, hit the registry for the latest published version. If
+// our running version is older, transparently re-exec the latest via npx
+// (which downloads it on the fly) with the same args, then exit. A
+// `_FIAS_CREATE_REEXEC=1` env marker prevents infinite recursion when the
+// freshly-installed copy starts and re-runs this same check.
+//
+// Any failure of the check (offline, npm slow, registry 503, ...) falls
+// through silently to the cached version. Scaffolding a slightly-old
+// plugin is strictly better than blocking the user on a network hiccup.
+// =============================================================================
+
+var SELF_NAME = '@fias/create-fias-plugin';
+var REEXEC_GUARD = '_FIAS_CREATE_REEXEC';
+
+function compareSemver(a, b) {
+  // Returns 1 if a > b, -1 if a < b, 0 if equal. Plain x.y.z; pre-release
+  // suffixes ignored (we never publish pre-releases of this scaffold).
+  var pa = a.split('.').map(function (s) {
+    return parseInt(s, 10) || 0;
+  });
+  var pb = b.split('.').map(function (s) {
+    return parseInt(s, 10) || 0;
+  });
+  for (var i = 0; i < 3; i++) {
+    if ((pa[i] || 0) > (pb[i] || 0)) return 1;
+    if ((pa[i] || 0) < (pb[i] || 0)) return -1;
+  }
+  return 0;
+}
+
+function maybeReexecLatest() {
+  if (process.env[REEXEC_GUARD] === '1') return;
+
+  var currentVersion = require('./package.json').version;
+
+  // 5s timeout so a slow/offline network doesn't make scaffolding hang.
+  var view = childProcess.spawnSync('npm', ['view', SELF_NAME, 'version'], {
+    encoding: 'utf-8',
+    timeout: 5000,
+    stdio: ['ignore', 'pipe', 'ignore'],
+  });
+  if (view.status !== 0 || !view.stdout) return;
+
+  var latest = view.stdout.trim();
+  if (!latest || compareSemver(latest, currentVersion) <= 0) return;
+
+  console.log(
+    '[create-fias-plugin] cached version ' +
+      currentVersion +
+      ' is stale; using latest ' +
+      latest +
+      ' from npm\n',
+  );
+
+  var env = Object.assign({}, process.env);
+  env[REEXEC_GUARD] = '1';
+
+  var rerun = childProcess.spawnSync(
+    'npx',
+    ['--yes', SELF_NAME + '@' + latest].concat(process.argv.slice(2)),
+    { stdio: 'inherit', env: env },
+  );
+  process.exit(rerun.status == null ? 1 : rerun.status);
+}
+
+try {
+  maybeReexecLatest();
+} catch (_e) {
+  // Any unexpected error: fall through to the cached version. Don't block
+  // the user on a self-update-check failure.
+}
+
 function copyDir(src, dest, replacements, opts) {
   fs.mkdirSync(dest, { recursive: true });
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@fias/create-fias-plugin",
-  "version": "1.1.4",
+  "version": "1.2.0",
   "publishConfig": {
     "access": "public"
   },