@open-nodo/cli 0.6.0 → 0.7.0

package/README.md

@@ -4,7 +4,6 @@ Scaffolds a self-hosted Open Nodo instance and installs supported public
 modules.
 
 ```sh
-export NODE_AUTH_TOKEN=$(gh auth token) # GitHub Packages: read:packages
 npx @open-nodo/cli init <selection-token> [directory]
 npx @open-nodo/cli add accounting
 npx @open-nodo/cli add patrimony

package/bin/nodo.js

@@ -2,21 +2,22 @@
 /**
  * Nodo self-host CLI — argument parsing and dispatch only. Each command lives in src/.
  *
- *   npx @open-nodo/cli init <selection-token> [dir] [--public-npm]
+ *   npx @open-nodo/cli init <selection-token> [dir]
  *   npx @open-nodo/cli add <module>[@version]
  *   npx @open-nodo/cli deploy [--target vercel]
  *
- * Registry (dual-mode until the public npm cutover):
- *   Default: write scaffold .npmrc → GitHub Packages (NODE_AUTH_TOKEN required).
- *   --public-npm / OPENNODO_PUBLIC_NPM=1: no .npmrc (after packages land on npmjs).
- * Dependency lines are always @open-nodo/* either way.
+ * Registry: public npmjs by default since the 2026-08-30 cutover — no scaffold
+ * .npmrc, no token. --github-packages / OPENNODO_GITHUB_PACKAGES=1 restores the
+ * old path for pre-cutover installs. Dependency lines are @open-nodo/* either way.
  */
 import { usage } from "../src/console.js";
 import { cmdInit } from "../src/init.js";
 import { cmdAdd } from "../src/add.js";
 import { cmdDeploy } from "../src/deploy.js";
 
-const [cmd, ...rest] = process.argv.slice(2).filter((a) => a !== "--public-npm");
+// --public-npm is the old spelling of what is now the default; accepted, ignored.
+const REGISTRY_FLAGS = new Set(["--public-npm", "--github-packages"]);
+const [cmd, ...rest] = process.argv.slice(2).filter((a) => !REGISTRY_FLAGS.has(a));
 
 if (!cmd || cmd === "-h" || cmd === "--help") usage(0);
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@open-nodo/cli",
-  "version": "0.6.0",
+  "version": "0.7.0",
   "description": "Self-host scaffolder and installer for supported Open Nodo modules.",
   "license": "Apache-2.0",
   "type": "module",

package/src/add.js

@@ -71,8 +71,9 @@ export function cmdAdd(spec) {
   if (install.status !== 0) {
     die(
       `npm install ${depSpec} failed (exit ${install.status}).\n` +
-        `  export NODE_AUTH_TOKEN=$(gh auth token)  # read:packages\n` +
-        `  ensure .npmrc has: @open-nodo:registry=https://npm.pkg.github.com`,
+        `  @open-nodo/* is public on npmjs and needs no token; check your network\n` +
+        `  and that the version exists. Only with --github-packages do you also need:\n` +
+        `    export NODE_AUTH_TOKEN=$(gh auth token)  # read:packages`,
     );
   }
 

package/src/console.js

@@ -1,8 +1,6 @@
 /** Process exit, usage text, and registry-auth guidance — everything that only talks to the user. */
 import { MODULE_PACKAGES } from "./module-registry.js";
 
-const GH_PACKAGES = "https://npm.pkg.github.com";
-
 export function die(msg) {
   console.error(`\n  ✗ ${msg}\n`);
   process.exit(1);
@@ -12,25 +10,32 @@ export function authToken() {
   return (process.env["NODE_AUTH_TOKEN"] || process.env["GITHUB_TOKEN"] || "").trim();
 }
 
+/**
+ * npmjs is the default since the 2026-08-30 cutover: every @open-nodo/* package is
+ * public there, so a scaffold needs no registry override and no token at all.
+ *
+ * The GitHub Packages path stays reachable for anyone with an install predating
+ * the cutover, behind --github-packages / OPENNODO_GITHUB_PACKAGES=1. --public-npm
+ * is still accepted and does nothing: it is what the flag used to be called, and
+ * silently erroring on a flag that now describes the default would be gratuitous.
+ */
 export function publicNpmMode(argv = process.argv) {
-  return (
-    process.env["OPENNODO_PUBLIC_NPM"] === "1" ||
-    process.env["OPENNODO_PUBLIC_NPM"] === "true" ||
-    argv.includes("--public-npm")
-  );
+  const optOut =
+    process.env["OPENNODO_GITHUB_PACKAGES"] === "1" ||
+    process.env["OPENNODO_GITHUB_PACKAGES"] === "true" ||
+    argv.includes("--github-packages");
+  return !optOut;
 }
 
 export function printAuthHelp() {
   console.error(`
-  @open-nodo/* is on GitHub Packages (auth required even to download the CLI).
+  You asked for the GitHub Packages registry, which requires auth even to read.
 
-  One-shot (recommended):
-    export NODE_AUTH_TOKEN=$(gh auth token)   # needs read:packages (or write:packages)
-    npx @open-nodo/cli init <selection-token> [dir]
+  One-shot:
+    export NODE_AUTH_TOKEN=$(gh auth token)   # needs read:packages
+    npx @open-nodo/cli init <selection-token> [dir] --github-packages
 
-  Permanent (~/.npmrc — never commit):
-    @open-nodo:registry=${GH_PACKAGES}
-    //npm.pkg.github.com/:_authToken=<your-github-token>
+  Or drop the flag: @open-nodo/* is on public npmjs and needs no token.
 `);
 }
 
@@ -49,7 +54,7 @@ export function usage(exit = 0) {
   Nodo CLI — self-host scaffolder and module installer
 
   Usage:
-    npx @open-nodo/cli init <selection-token> [directory] [--public-npm]
+    npx @open-nodo/cli init <selection-token> [directory]
     npx @open-nodo/cli add <module>[@version]
     npx @open-nodo/cli deploy [--target vercel]
 
@@ -57,11 +62,8 @@ export function usage(exit = 0) {
     ${Object.keys(MODULE_PACKAGES).join(", ")}
 
   Registry:
-    default          GitHub Packages (.npmrc + NODE_AUTH_TOKEN)
-    --public-npm     public npmjs (no GitHub token; after packages publish)
-
-  Auth (GitHub Packages):
-    export NODE_AUTH_TOKEN=$(gh auth token)
+    default            public npmjs — no token, no .npmrc
+    --github-packages  GitHub Packages (.npmrc + NODE_AUTH_TOKEN); pre-cutover installs
 `);
   process.exit(exit);
 }

package/src/deploy.js

@@ -16,8 +16,8 @@ export function cmdDeploy(target) {
     console.log("  Vercel CLI not found. Install and deploy:");
     console.log("    npm i -g vercel");
     console.log("    vercel link");
-    console.log("    vercel env add NODE_AUTH_TOKEN");
     console.log("    vercel --prod\n");
+    console.log("  (vercel env add NODE_AUTH_TOKEN — only for a --github-packages scaffold)\n");
     return;
   }
 

package/src/init.js

@@ -68,9 +68,9 @@ function writeScaffoldManifest(targetDir, installable) {
 function printNextSteps(dirName, usePublicNpm, installable) {
   console.log(`  ✓ Wrote .env (NODO_SELECTION_TOKEN + NODO_RAIL_URL)`);
   if (usePublicNpm) {
-    console.log(`  ✓ Public npm mode — no .npmrc (packages resolve from registry.npmjs.org)`);
+    console.log(`  ✓ No .npmrc needed — @open-nodo/* resolves from registry.npmjs.org`);
   } else {
-    console.log(`  ✓ Wrote .npmrc (@open-nodo → GitHub Packages)`);
+    console.log(`  ✓ Wrote .npmrc (@open-nodo → GitHub Packages, --github-packages)`);
   }
   if (installable.length) {
     console.log(`  ✓ package.json deps for: ${installable.map((k) => MODULE_PACKAGES[k]).join(", ")}`);

package/src/versions.generated.json

@@ -1,5 +1,5 @@
 {
-  "@open-nodo/cli": "0.6.0",
+  "@open-nodo/cli": "0.7.0",
   "@open-nodo/codec-501c3-us": "0.1.1",
   "@open-nodo/codec-anbi-nl": "0.1.1",
   "@open-nodo/codec-asociacion-es": "0.1.1",