@sparkletree/cli 0.6.1 → 0.7.0

package/README.md

@@ -22,12 +22,18 @@ sparkletree list
 sparkletree help
 ```
 
-`upgrade` ports hero/cta copies made by a 0.3.0 `add` to the 0.4.0 reservation
-wiring (the hold now reserves space with your fallback instead of rendering
-nothing; see LAYOUT-DOCTRINE.md in the repo). It rewrites a copy only where
-it still matches the 0.3.0 template exactly, ignoring the Tailwind classes you
-were invited to change; a copy edited where the wiring lands is left untouched
-and reported, never guessed at. `--dry-run` previews the verdicts.
+`upgrade` ports hero/cta copies from any earlier `add` to the current template
+wiring, one generation at a time: a 0.3.0 copy gets the 0.4.0 reservation
+wiring (the hold reserves space with your fallback instead of rendering
+nothing; see LAYOUT-DOCTRINE.md in the repo) and then the 0.6.1 change that
+imports `safeActionUrl` from `@sparkletree/core` instead of freezing a local
+copy; a 0.4.0/0.5.0 copy gets only the latter. What a copy is missing is
+decided by its content, never by guessing a version. It rewrites a copy only
+where it still matches the template it came from exactly, ignoring the
+Tailwind classes you were invited to change; a copy edited where the wiring
+lands is left untouched and reported, never guessed at. `--dry-run` previews
+the verdicts, and nothing is written when the installed packages are older
+than the rewritten copy needs to compile.
 
 | Option | What it does |
 |---|---|

package/dist/bin.js

@@ -16,7 +16,7 @@ const HELP = `sparkletree — add SparkleTree components to your project
 
 Usage
   sparkletree add <component...> [options]
-  sparkletree upgrade [options]     port 0.3.0 copies to the 0.4.0 reservation wiring
+  sparkletree upgrade [options]     port copied components to the current template wiring
   sparkletree list
   sparkletree help
 

package/dist/fixtures-0.5.0.d.ts

@@ -0,0 +1,10 @@
+/**
+ * The files `add` ACTUALLY wrote at v0.5.0, extracted from the tagged
+ * registry byte for byte (the same doctrine as the 0.3.0 fixtures in
+ * upgrade.test.ts: only the real output can falsify the codemod's `find`
+ * claims). Machine-generated from `git show v0.5.0:cli/src/registry.ts` —
+ * do not "tidy" these.
+ */
+export declare const HERO_050 = "\"use client\";\n\nimport { StreamText, useIsland, withReserve, type UseIslandOptions } from \"@sparkletree/react\";\nimport type { FieldState } from \"@sparkletree/react\";\nimport { themeStyle } from \"@sparkletree/core\";\n\n/**\n * Your hero. Edit freely \u2014 this file is yours.\n *\n * What you should NOT need to touch, and what you will not find here: when the\n * copy paints, how long it holds, whether it types or lands composed, and\n * whether it carries the adaptation mark. All of that lives in\n * @sparkletree/core and @sparkletree/react so it can be fixed for you without\n * you re-copying this file.\n *\n * `fallback` is required. There is no loading state and no skeleton: if the\n * network is slow or the campaign is unreachable, this copy is what your\n * visitor reads. Write it as if it were the only version \u2014 often it is.\n *\n * Requires Tailwind CSS for the default classes \u2014 swap them freely.\n */\nexport interface HeroProps {\n  campaignId: string;\n  /** First paint. Real copy, never a placeholder. */\n  fallback: UseIslandOptions[\"fallback\"];\n}\n\n/**\n * Server-driven URLs are configuration, not trust. Only http(s), mailto and\n * tel absolutes and relative navigations (\"/\", \"./\", \"#\", \"?\") pass; anything\n * else \u2014 javascript:, data:, an unprefixed string \u2014 is dropped.\n */\nfunction safeActionUrl(url: string | null | undefined): string | undefined {\n  if (!url) return undefined;\n  if (\n    (url.startsWith(\"/\") && !url.startsWith(\"//\")) ||\n    url.startsWith(\"./\") ||\n    url.startsWith(\"#\") ||\n    url.startsWith(\"?\")\n  ) {\n    return url;\n  }\n  try {\n    const protocol = new URL(url).protocol;\n    if ([\"https:\", \"http:\", \"mailto:\", \"tel:\"].includes(protocol)) return url;\n  } catch {\n    // Not a parseable URL at all.\n  }\n  return undefined;\n}\n\nexport function Hero({ campaignId, fallback }: HeroProps) {\n  const { state, ref } = useIsland({ campaignId, island: \"hero\", fallback });\n  const backgroundImage = safeActionUrl(state.backgroundImage);\n\n  // The hold RESERVES (LAYOUT-DOCTRINE.md): while the canvas waits, each\n  // field carries its fallback so StreamText keeps the geometry invisibly \u2014\n  // nothing below the hero moves whichever way the wait ends. Delete this\n  // and the section collapses during the hold; it is load-bearing.\n  const holding = state.phase === \"holding\";\n  const reserveOf = (name: \"greeting\" | \"headline\" | \"body\") =>\n    state.held?.[name] || fallback[name];\n  const held = (field: FieldState, reserve?: string) =>\n    holding && reserve && !field.text ? withReserve(field, reserve) : field;\n\n  return (\n    <section\n      ref={ref}\n      className=\"relative overflow-hidden rounded-2xl p-10\"\n      style={themeStyle(state.theme)}\n    >\n      {backgroundImage ? (\n        <img\n          src={backgroundImage}\n          alt=\"\"\n          className=\"absolute inset-0 h-full w-full object-cover\"\n        />\n      ) : null}\n\n      <div className=\"relative\">\n        {state.fields.greeting.text || (holding && reserveOf(\"greeting\")) ? (\n          <StreamText\n            field={held(state.fields.greeting, reserveOf(\"greeting\"))}\n            as=\"p\"\n            className=\"text-sm uppercase tracking-wide opacity-80\"\n          />\n        ) : null}\n\n        {/* h2 to match the packaged Hero. The heading level is yours: pass\n            as=\"h1\" if this section is your page's primary heading. */}\n        <StreamText\n          field={held(state.fields.headline, reserveOf(\"headline\"))}\n          as=\"h2\"\n          className=\"mt-2 text-4xl font-semibold\"\n        />\n\n        {state.fields.body.text || (holding && reserveOf(\"body\")) ? (\n          <StreamText\n            field={held(state.fields.body, reserveOf(\"body\"))}\n            as=\"p\"\n            className=\"mt-4 max-w-prose\"\n          />\n        ) : null}\n      </div>\n    </section>\n  );\n}\n";
+export declare const CTA_050 = "\"use client\";\n\nimport { StreamText, useIsland, useSparkletree, withReserve, type UseIslandOptions } from \"@sparkletree/react\";\nimport { readableTextColor, themeStyle, track } from \"@sparkletree/core\";\n\n/**\n * Your call to action. Edit freely.\n *\n * The button keeps its size while the label streams in, so the surrounding\n * layout does not shift under the visitor's cursor mid-click.\n *\n * Requires Tailwind CSS for the default classes \u2014 swap them freely.\n */\nexport interface CtaProps extends Omit<UseIslandOptions, \"island\"> {\n  /** Where the button goes when the server has not resolved an action. */\n  href?: string;\n  onClick?: () => void;\n}\n\n/**\n * Server-driven URLs are configuration, not trust. Only http(s), mailto and\n * tel absolutes and relative navigations (\"/\", \"./\", \"#\", \"?\") pass; anything\n * else \u2014 javascript:, data:, an unprefixed string \u2014 is dropped.\n */\nfunction safeActionUrl(url: string | null | undefined): string | undefined {\n  if (!url) return undefined;\n  if (\n    (url.startsWith(\"/\") && !url.startsWith(\"//\")) ||\n    url.startsWith(\"./\") ||\n    url.startsWith(\"#\") ||\n    url.startsWith(\"?\")\n  ) {\n    return url;\n  }\n  try {\n    const protocol = new URL(url).protocol;\n    if ([\"https:\", \"http:\", \"mailto:\", \"tel:\"].includes(protocol)) return url;\n  } catch {\n    // Not a parseable URL at all.\n  }\n  return undefined;\n}\n\nexport function Cta(props: CtaProps) {\n  const { href, onClick, ...islandOptions } = props;\n  const { apiBase, organizationId } = useSparkletree();\n  const { state, ref } = useIsland({ ...islandOptions, island: \"cta\" });\n  // A rejected server action falls back to the href prop you control. The\n  // prop is vetted too \u2014 the same render path, the same rules, one outcome.\n  const action = safeActionUrl(state.ctaAction) ?? safeActionUrl(href);\n  const { campaignId, surfaceId } = islandOptions;\n  const variantId = state.variantId ?? undefined;\n  // A surface-only Cta has no campaignId prop, but the click must still be\n  // attributed: the server names the campaign it served in the terminal\n  // done.meta, mirroring the impression path in useIsland.\n  const metaCampaignId =\n    typeof state.meta?.campaignId === \"string\" ? state.meta.campaignId : undefined;\n  const resolvedCampaignId = campaignId ?? metaCampaignId;\n\n  // The click is the other half of CTR. The SDK tells the server to suppress\n  // its own counting for this page view \u2014 so if nothing here reports the\n  // click, CTR for SDK traffic is a division by silence. Fire-and-forget:\n  // track never throws and never blocks the navigation.\n  const handleClick = () => {\n    if (resolvedCampaignId) {\n      void track(\n        { apiBase, organizationId, campaignId: resolvedCampaignId, variantId, surfaceId },\n        \"click\",\n        { island: \"cta\" },\n      );\n    }\n    onClick?.();\n  };\n\n  // The hold RESERVES (LAYOUT-DOCTRINE.md): a holding label rides the\n  // fallback into StreamText invisibly, so the button keeps the size its\n  // label will need. Delete this and the button collapses during the hold.\n  const holding = state.phase === \"holding\";\n  const ctaReserve = state.held?.cta || islandOptions.fallback.cta;\n  const reserved = holding && !!ctaReserve && !state.fields.cta.text;\n  const labelField = reserved\n    ? withReserve(state.fields.cta, ctaReserve as string)\n    : state.fields.cta;\n\n  // Shared by the link and the no-destination fallback below.\n  const shared = {\n    onClick: handleClick,\n    className:\n      \"inline-flex min-h-11 min-w-40 items-center justify-center rounded-full px-6 font-medium\",\n    style: {\n      ...themeStyle(state.theme),\n      // --st-cta-text is the label ink that reads on the theme's primary, so\n      // a light theme can never produce a ghost button.\n      ...(state.theme?.colors?.primary\n        ? { [\"--st-cta-text\" as string]: readableTextColor(state.theme.colors.primary) }\n        : {}),\n    },\n    // A CTA whose label is still empty is not yet a button a viewer can\n    // meaningfully act on \u2014 but it must still occupy its space, or the\n    // layout shifts when the copy lands.\n    // A reserved button is full-size but its visible label is a hidden\n    // reservation outside the a11y tree \u2014 never a NAMELESS control: the\n    // reservation text is the honest accessible name.\n    \"aria-disabled\": state.fields.cta.text ? undefined : true,\n    \"aria-label\": reserved ? (ctaReserve as string) : undefined,\n  };\n\n  // Neither the stream nor you resolved a destination: render a\n  // non-interactive element rather than an inert <a> with no href, which\n  // some assistive tech still announces as a link to nowhere. Clicks are\n  // still observed \u2014 engagement with the creative counts toward CTR whether\n  // or not it navigates.\n  if (action === undefined) {\n    return (\n      <span ref={ref as unknown as (element: HTMLSpanElement | null) => void} {...shared}>\n        <StreamText field={labelField} />\n      </span>\n    );\n  }\n\n  return (\n    <a ref={ref} href={action} {...shared}>\n      <StreamText field={labelField} />\n    </a>\n  );\n}\n";
+//# sourceMappingURL=fixtures-0.5.0.d.ts.map

package/dist/fixtures-0.5.0.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"fixtures-0.5.0.d.ts","sourceRoot":"","sources":["../src/fixtures-0.5.0.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,eAAO,MAAM,QAAQ,q6HA2GpB,CAAC;AAEF,eAAO,MAAM,OAAO,yoKA8HnB,CAAC"}

package/dist/fixtures-0.5.0.js

@@ -0,0 +1,243 @@
+/**
+ * The files `add` ACTUALLY wrote at v0.5.0, extracted from the tagged
+ * registry byte for byte (the same doctrine as the 0.3.0 fixtures in
+ * upgrade.test.ts: only the real output can falsify the codemod's `find`
+ * claims). Machine-generated from `git show v0.5.0:cli/src/registry.ts` —
+ * do not "tidy" these.
+ */
+export const HERO_050 = `"use client";
+
+import { StreamText, useIsland, withReserve, type UseIslandOptions } from "@sparkletree/react";
+import type { FieldState } from "@sparkletree/react";
+import { themeStyle } from "@sparkletree/core";
+
+/**
+ * Your hero. Edit freely — this file is yours.
+ *
+ * What you should NOT need to touch, and what you will not find here: when the
+ * copy paints, how long it holds, whether it types or lands composed, and
+ * whether it carries the adaptation mark. All of that lives in
+ * @sparkletree/core and @sparkletree/react so it can be fixed for you without
+ * you re-copying this file.
+ *
+ * \`fallback\` is required. There is no loading state and no skeleton: if the
+ * network is slow or the campaign is unreachable, this copy is what your
+ * visitor reads. Write it as if it were the only version — often it is.
+ *
+ * Requires Tailwind CSS for the default classes — swap them freely.
+ */
+export interface HeroProps {
+  campaignId: string;
+  /** First paint. Real copy, never a placeholder. */
+  fallback: UseIslandOptions["fallback"];
+}
+
+/**
+ * Server-driven URLs are configuration, not trust. Only http(s), mailto and
+ * tel absolutes and relative navigations ("/", "./", "#", "?") pass; anything
+ * else — javascript:, data:, an unprefixed string — is dropped.
+ */
+function safeActionUrl(url: string | null | undefined): string | undefined {
+  if (!url) return undefined;
+  if (
+    (url.startsWith("/") && !url.startsWith("//")) ||
+    url.startsWith("./") ||
+    url.startsWith("#") ||
+    url.startsWith("?")
+  ) {
+    return url;
+  }
+  try {
+    const protocol = new URL(url).protocol;
+    if (["https:", "http:", "mailto:", "tel:"].includes(protocol)) return url;
+  } catch {
+    // Not a parseable URL at all.
+  }
+  return undefined;
+}
+
+export function Hero({ campaignId, fallback }: HeroProps) {
+  const { state, ref } = useIsland({ campaignId, island: "hero", fallback });
+  const backgroundImage = safeActionUrl(state.backgroundImage);
+
+  // The hold RESERVES (LAYOUT-DOCTRINE.md): while the canvas waits, each
+  // field carries its fallback so StreamText keeps the geometry invisibly —
+  // nothing below the hero moves whichever way the wait ends. Delete this
+  // and the section collapses during the hold; it is load-bearing.
+  const holding = state.phase === "holding";
+  const reserveOf = (name: "greeting" | "headline" | "body") =>
+    state.held?.[name] || fallback[name];
+  const held = (field: FieldState, reserve?: string) =>
+    holding && reserve && !field.text ? withReserve(field, reserve) : field;
+
+  return (
+    <section
+      ref={ref}
+      className="relative overflow-hidden rounded-2xl p-10"
+      style={themeStyle(state.theme)}
+    >
+      {backgroundImage ? (
+        <img
+          src={backgroundImage}
+          alt=""
+          className="absolute inset-0 h-full w-full object-cover"
+        />
+      ) : null}
+
+      <div className="relative">
+        {state.fields.greeting.text || (holding && reserveOf("greeting")) ? (
+          <StreamText
+            field={held(state.fields.greeting, reserveOf("greeting"))}
+            as="p"
+            className="text-sm uppercase tracking-wide opacity-80"
+          />
+        ) : null}
+
+        {/* h2 to match the packaged Hero. The heading level is yours: pass
+            as="h1" if this section is your page's primary heading. */}
+        <StreamText
+          field={held(state.fields.headline, reserveOf("headline"))}
+          as="h2"
+          className="mt-2 text-4xl font-semibold"
+        />
+
+        {state.fields.body.text || (holding && reserveOf("body")) ? (
+          <StreamText
+            field={held(state.fields.body, reserveOf("body"))}
+            as="p"
+            className="mt-4 max-w-prose"
+          />
+        ) : null}
+      </div>
+    </section>
+  );
+}
+`;
+export const CTA_050 = `"use client";
+
+import { StreamText, useIsland, useSparkletree, withReserve, type UseIslandOptions } from "@sparkletree/react";
+import { readableTextColor, themeStyle, track } from "@sparkletree/core";
+
+/**
+ * Your call to action. Edit freely.
+ *
+ * The button keeps its size while the label streams in, so the surrounding
+ * layout does not shift under the visitor's cursor mid-click.
+ *
+ * Requires Tailwind CSS for the default classes — swap them freely.
+ */
+export interface CtaProps extends Omit<UseIslandOptions, "island"> {
+  /** Where the button goes when the server has not resolved an action. */
+  href?: string;
+  onClick?: () => void;
+}
+
+/**
+ * Server-driven URLs are configuration, not trust. Only http(s), mailto and
+ * tel absolutes and relative navigations ("/", "./", "#", "?") pass; anything
+ * else — javascript:, data:, an unprefixed string — is dropped.
+ */
+function safeActionUrl(url: string | null | undefined): string | undefined {
+  if (!url) return undefined;
+  if (
+    (url.startsWith("/") && !url.startsWith("//")) ||
+    url.startsWith("./") ||
+    url.startsWith("#") ||
+    url.startsWith("?")
+  ) {
+    return url;
+  }
+  try {
+    const protocol = new URL(url).protocol;
+    if (["https:", "http:", "mailto:", "tel:"].includes(protocol)) return url;
+  } catch {
+    // Not a parseable URL at all.
+  }
+  return undefined;
+}
+
+export function Cta(props: CtaProps) {
+  const { href, onClick, ...islandOptions } = props;
+  const { apiBase, organizationId } = useSparkletree();
+  const { state, ref } = useIsland({ ...islandOptions, island: "cta" });
+  // A rejected server action falls back to the href prop you control. The
+  // prop is vetted too — the same render path, the same rules, one outcome.
+  const action = safeActionUrl(state.ctaAction) ?? safeActionUrl(href);
+  const { campaignId, surfaceId } = islandOptions;
+  const variantId = state.variantId ?? undefined;
+  // A surface-only Cta has no campaignId prop, but the click must still be
+  // attributed: the server names the campaign it served in the terminal
+  // done.meta, mirroring the impression path in useIsland.
+  const metaCampaignId =
+    typeof state.meta?.campaignId === "string" ? state.meta.campaignId : undefined;
+  const resolvedCampaignId = campaignId ?? metaCampaignId;
+
+  // The click is the other half of CTR. The SDK tells the server to suppress
+  // its own counting for this page view — so if nothing here reports the
+  // click, CTR for SDK traffic is a division by silence. Fire-and-forget:
+  // track never throws and never blocks the navigation.
+  const handleClick = () => {
+    if (resolvedCampaignId) {
+      void track(
+        { apiBase, organizationId, campaignId: resolvedCampaignId, variantId, surfaceId },
+        "click",
+        { island: "cta" },
+      );
+    }
+    onClick?.();
+  };
+
+  // The hold RESERVES (LAYOUT-DOCTRINE.md): a holding label rides the
+  // fallback into StreamText invisibly, so the button keeps the size its
+  // label will need. Delete this and the button collapses during the hold.
+  const holding = state.phase === "holding";
+  const ctaReserve = state.held?.cta || islandOptions.fallback.cta;
+  const reserved = holding && !!ctaReserve && !state.fields.cta.text;
+  const labelField = reserved
+    ? withReserve(state.fields.cta, ctaReserve as string)
+    : state.fields.cta;
+
+  // Shared by the link and the no-destination fallback below.
+  const shared = {
+    onClick: handleClick,
+    className:
+      "inline-flex min-h-11 min-w-40 items-center justify-center rounded-full px-6 font-medium",
+    style: {
+      ...themeStyle(state.theme),
+      // --st-cta-text is the label ink that reads on the theme's primary, so
+      // a light theme can never produce a ghost button.
+      ...(state.theme?.colors?.primary
+        ? { ["--st-cta-text" as string]: readableTextColor(state.theme.colors.primary) }
+        : {}),
+    },
+    // A CTA whose label is still empty is not yet a button a viewer can
+    // meaningfully act on — but it must still occupy its space, or the
+    // layout shifts when the copy lands.
+    // A reserved button is full-size but its visible label is a hidden
+    // reservation outside the a11y tree — never a NAMELESS control: the
+    // reservation text is the honest accessible name.
+    "aria-disabled": state.fields.cta.text ? undefined : true,
+    "aria-label": reserved ? (ctaReserve as string) : undefined,
+  };
+
+  // Neither the stream nor you resolved a destination: render a
+  // non-interactive element rather than an inert <a> with no href, which
+  // some assistive tech still announces as a link to nowhere. Clicks are
+  // still observed — engagement with the creative counts toward CTR whether
+  // or not it navigates.
+  if (action === undefined) {
+    return (
+      <span ref={ref as unknown as (element: HTMLSpanElement | null) => void} {...shared}>
+        <StreamText field={labelField} />
+      </span>
+    );
+  }
+
+  return (
+    <a ref={ref} href={action} {...shared}>
+      <StreamText field={labelField} />
+    </a>
+  );
+}
+`;
+//# sourceMappingURL=fixtures-0.5.0.js.map

package/dist/fixtures-0.5.0.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"fixtures-0.5.0.js","sourceRoot":"","sources":["../src/fixtures-0.5.0.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,MAAM,CAAC,MAAM,QAAQ,GAAG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CA2GvB,CAAC;AAEF,MAAM,CAAC,MAAM,OAAO,GAAG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CA8HtB,CAAC"}

package/dist/upgrade.d.ts

@@ -1,42 +1,60 @@
 /**
  * `sparkletree upgrade`
  *
- * The 0.3.0 → 0.4.0 codemod for copied components. Copies are the customer's
- * files (see registry.ts), so the SDK cannot patch them at runtime — but 0.4.0
- * moved the hold from blanking to RESERVING (LAYOUT-DOCTRINE.md), and a copy
- * without the reservation wiring still collapses during the hold. This command
- * ports that wiring into copies that came from `add` at 0.3.0.
+ * Version-aware codemods for copied components. Copies are the customer's
+ * files (see registry.ts), so the SDK cannot patch them at runtime; this
+ * command ports each GENERATION of template wiring into copies that predate
+ * it. A copy from `add` at 0.3.0 gets every generation in order; a 0.5.0
+ * copy gets only the generations it is missing. Which generations a copy is
+ * missing is decided by content (each generation's marker), never by
+ * guessing a version.
  *
  * How it stays safe in someone else's repository:
  *
- *   - exact-substring hunks, all-or-nothing per file. Every hunk must match
- *     exactly once (or, where marked, at least once) before anything is
- *     written. One miss means the file has diverged from the template at a
- *     line the upgrade needs, and guessing at edited code is how a tool
- *     "reverts three months of my hero" — so we write nothing and say which
- *     hunks failed, so the wiring can be ported by hand;
+ *   - exact-substring hunks, all-or-nothing per file. Every hunk of every
+ *     needed generation must match exactly once (or, where marked, at least
+ *     once) before anything is written. One miss means the file has diverged
+ *     from the template at a line the upgrade needs, and guessing at edited
+ *     code is how a tool "reverts three months of my hero" — so we write
+ *     nothing and say which hunks failed, so the wiring can be ported by
+ *     hand;
  *   - hunks avoid the Tailwind classNames, which `add` explicitly invites
  *     customers to change. A restyled copy still upgrades;
- *   - idempotent: a file that already has the wiring (it imports
- *     `withReserve`) is reported up to date and never touched;
+ *   - idempotent: a generation whose marker is already in the file is
+ *     skipped, and a copy missing none is reported up to date and never
+ *     touched;
  *   - `--dry-run` reports the same verdicts and writes nothing.
  */
 interface Hunk {
     /** For the skipped-report: which part of the wiring this is. */
     label: string;
-    /** Exact text as `add` wrote it at 0.3.0. */
+    /** Exact text as `add` wrote it, byte for byte. */
     find: string;
     replace: string;
     /** Replace every occurrence instead of requiring exactly one. */
     all?: boolean;
 }
+interface Codemod {
+    /**
+     * Already-upgraded detection: presence of this marker means this
+     * generation's wiring is in the copy, so the generation is skipped.
+     */
+    marker: string;
+    /**
+     * Minimum installed @sparkletree/react (core, react and cli version
+     * together) the REWRITTEN copy compiles against. Below it the run behaves
+     * as a dry run — writing code an old install cannot compile trades a
+     * cosmetic gap for a build error.
+     */
+    needs: string;
+    hunks: Hunk[];
+}
 export interface UpgradeTarget {
     component: string;
     /** Where `add` writes it, relative to the target directory. */
     path: string;
-    /** Already-upgraded detection: 0.3.0 copies never mention withReserve. */
-    marker: string;
-    hunks: Hunk[];
+    /** Oldest first; a copy gets every generation it is missing, in order. */
+    codemods: readonly Codemod[];
 }
 export declare const UPGRADE_TARGETS: readonly UpgradeTarget[];
 export interface UpgradeOptions {
@@ -56,13 +74,19 @@ export interface UpgradeResult {
         hunks: string[];
     }[];
     /**
-     * The installed @sparkletree/react version, when it predates the wiring.
-     * The upgraded source reads `state.held`, which does not exist before
-     * 0.4.0 — writing it against an old install trades a layout gap for a
-     * compile error. When set, the run behaved as a dry run: `upgraded` lists
-     * what WOULD be written once the packages are updated.
+     * The installed @sparkletree/react version, when it predates
+     * `requiredReact`. Writing code an old install cannot compile trades a
+     * cosmetic gap for a build error, so when set the run behaved as a dry
+     * run: `upgraded` lists what WOULD be written once the packages are
+     * updated.
      */
     blockedByReact: string | null;
+    /**
+     * The highest `needs` among the generations this run wanted to apply —
+     * what to update @sparkletree/react (and core) to when blocked. Null when
+     * nothing needed upgrading.
+     */
+    requiredReact: string | null;
 }
 export declare function upgrade(options?: UpgradeOptions): Promise<UpgradeResult>;
 /** Human-readable summary. Mirrors what `upgrade` actually did. */

package/dist/upgrade.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"upgrade.d.ts","sourceRoot":"","sources":["../src/upgrade.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;GAsBG;AAKH,UAAU,IAAI;IACZ,gEAAgE;IAChE,KAAK,EAAE,MAAM,CAAC;IACd,6CAA6C;IAC7C,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAChB,iEAAiE;IACjE,GAAG,CAAC,EAAE,OAAO,CAAC;CACf;AAED,MAAM,WAAW,aAAa;IAC5B,SAAS,EAAE,MAAM,CAAC;IAClB,+DAA+D;IAC/D,IAAI,EAAE,MAAM,CAAC;IACb,0EAA0E;IAC1E,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,IAAI,EAAE,CAAC;CACf;AAsBD,eAAO,MAAM,eAAe,EAAE,SAAS,aAAa,EAmKnD,CAAC;AAEF,MAAM,WAAW,cAAc;IAC7B,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,0DAA0D;IAC1D,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,MAAM,CAAC,EAAE,OAAO,CAAC;CAClB;AAED,MAAM,WAAW,aAAa;IAC5B,QAAQ,EAAE,MAAM,EAAE,CAAC;IACnB,QAAQ,EAAE,MAAM,EAAE,CAAC;IACnB,0EAA0E;IAC1E,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,yEAAyE;IACzE,QAAQ,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,EAAE,CAAA;KAAE,EAAE,CAAC;IAC9C;;;;;;OAMG;IACH,cAAc,EAAE,MAAM,GAAG,IAAI,CAAC;CAC/B;AAmCD,wBAAsB,OAAO,CAAC,OAAO,GAAE,cAAmB,GAAG,OAAO,CAAC,aAAa,CAAC,CAoDlF;AAED,mEAAmE;AACnE,wBAAgB,mBAAmB,CAAC,MAAM,EAAE,aAAa,EAAE,MAAM,UAAQ,GAAG,MAAM,CA4CjF"}
+{"version":3,"file":"upgrade.d.ts","sourceRoot":"","sources":["../src/upgrade.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AAKH,UAAU,IAAI;IACZ,gEAAgE;IAChE,KAAK,EAAE,MAAM,CAAC;IACd,mDAAmD;IACnD,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAChB,iEAAiE;IACjE,GAAG,CAAC,EAAE,OAAO,CAAC;CACf;AAED,UAAU,OAAO;IACf;;;OAGG;IACH,MAAM,EAAE,MAAM,CAAC;IACf;;;;;OAKG;IACH,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,EAAE,IAAI,EAAE,CAAC;CACf;AAED,MAAM,WAAW,aAAa;IAC5B,SAAS,EAAE,MAAM,CAAC;IAClB,+DAA+D;IAC/D,IAAI,EAAE,MAAM,CAAC;IACb,0EAA0E;IAC1E,QAAQ,EAAE,SAAS,OAAO,EAAE,CAAC;CAC9B;AAsDD,eAAO,MAAM,eAAe,EAAE,SAAS,aAAa,EA8InD,CAAC;AAEF,MAAM,WAAW,cAAc;IAC7B,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,0DAA0D;IAC1D,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,MAAM,CAAC,EAAE,OAAO,CAAC;CAClB;AAED,MAAM,WAAW,aAAa;IAC5B,QAAQ,EAAE,MAAM,EAAE,CAAC;IACnB,QAAQ,EAAE,MAAM,EAAE,CAAC;IACnB,0EAA0E;IAC1E,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,yEAAyE;IACzE,QAAQ,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,EAAE,CAAA;KAAE,EAAE,CAAC;IAC9C;;;;;;OAMG;IACH,cAAc,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9B;;;;OAIG;IACH,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;CAC9B;AAgDD,wBAAsB,OAAO,CAAC,OAAO,GAAE,cAAmB,GAAG,OAAO,CAAC,aAAa,CAAC,CA8ElF;AAED,mEAAmE;AACnE,wBAAgB,mBAAmB,CAAC,MAAM,EAAE,aAAa,EAAE,MAAM,UAAQ,GAAG,MAAM,CA6CjF"}

package/dist/upgrade.js

@@ -1,24 +1,28 @@
 /**
  * `sparkletree upgrade`
  *
- * The 0.3.0 → 0.4.0 codemod for copied components. Copies are the customer's
- * files (see registry.ts), so the SDK cannot patch them at runtime — but 0.4.0
- * moved the hold from blanking to RESERVING (LAYOUT-DOCTRINE.md), and a copy
- * without the reservation wiring still collapses during the hold. This command
- * ports that wiring into copies that came from `add` at 0.3.0.
+ * Version-aware codemods for copied components. Copies are the customer's
+ * files (see registry.ts), so the SDK cannot patch them at runtime; this
+ * command ports each GENERATION of template wiring into copies that predate
+ * it. A copy from `add` at 0.3.0 gets every generation in order; a 0.5.0
+ * copy gets only the generations it is missing. Which generations a copy is
+ * missing is decided by content (each generation's marker), never by
+ * guessing a version.
  *
  * How it stays safe in someone else's repository:
  *
- *   - exact-substring hunks, all-or-nothing per file. Every hunk must match
- *     exactly once (or, where marked, at least once) before anything is
- *     written. One miss means the file has diverged from the template at a
- *     line the upgrade needs, and guessing at edited code is how a tool
- *     "reverts three months of my hero" — so we write nothing and say which
- *     hunks failed, so the wiring can be ported by hand;
+ *   - exact-substring hunks, all-or-nothing per file. Every hunk of every
+ *     needed generation must match exactly once (or, where marked, at least
+ *     once) before anything is written. One miss means the file has diverged
+ *     from the template at a line the upgrade needs, and guessing at edited
+ *     code is how a tool "reverts three months of my hero" — so we write
+ *     nothing and say which hunks failed, so the wiring can be ported by
+ *     hand;
  *   - hunks avoid the Tailwind classNames, which `add` explicitly invites
  *     customers to change. A restyled copy still upgrades;
- *   - idempotent: a file that already has the wiring (it imports
- *     `withReserve`) is reported up to date and never touched;
+ *   - idempotent: a generation whose marker is already in the file is
+ *     skipped, and a copy missing none is reported up to date and never
+ *     touched;
  *   - `--dry-run` reports the same verdicts and writes nothing.
  */
 import { readFile, writeFile } from "node:fs/promises";
@@ -41,39 +45,13 @@ const CTA_RESERVATION = `  // The hold RESERVES (LAYOUT-DOCTRINE.md): a holding
   const labelField = reserved
     ? withReserve(state.fields.cta, ctaReserve as string)
     : state.fields.cta;`;
-export const UPGRADE_TARGETS = [
-    {
-        component: "hero",
-        path: "sparkletree/hero.tsx",
-        marker: "withReserve",
-        hunks: [
-            {
-                label: "disclosure note",
-                find: ` * copy paints, how long it holds, whether it types or lands composed, and
- * whether it carries the adaptation mark. All of that lives in
- * @sparkletree/core and @sparkletree/react so it can be fixed for you without
- * you re-copying this file.`,
-                replace: ` * copy paints, how long it holds, whether it types or lands composed, and the
- * provenance every adapted field carries. All of that lives in
- * @sparkletree/core and @sparkletree/react so it can be fixed for you without
- * you re-copying this file. No visible AI-disclosure mark renders by default —
- * if you want one, render \`InlineMark\` from @sparkletree/react where
- * \`decideChrome(field.source, prefersStandard).marked\` is true.`,
-            },
-            {
-                label: "imports",
-                find: `import { StreamText, useIsland, type UseIslandOptions } from "@sparkletree/react";`,
-                replace: `import { StreamText, useIsland, withReserve, type UseIslandOptions } from "@sparkletree/react";
-import type { FieldState } from "@sparkletree/react";`,
-            },
-            {
-                label: "core imports",
-                find: `import { themeStyle } from "@sparkletree/core";`,
-                replace: `import { safeActionUrl, themeStyle } from "@sparkletree/core";`,
-            },
-            {
-                label: "shared safeActionUrl",
-                find: `/**
+/**
+ * The pre-0.6.1 inline vetting helper, byte for byte as `add` wrote it into
+ * every hero and cta copy from 0.3.0 through 0.5.0. 0.6.1 moved the one
+ * implementation to @sparkletree/core — deleting this block and importing
+ * the shared helper IS that generation.
+ */
+const INLINE_SAFE_ACTION_URL = `/**
  * Server-driven URLs are configuration, not trust. Only http(s), mailto and
  * tel absolutes and relative navigations ("/", "./", "#", "?") pass; anything
  * else — javascript:, data:, an unprefixed string — is dropped.
@@ -97,110 +75,146 @@ function safeActionUrl(url: string | null | undefined): string | undefined {
   return undefined;
 }
 
-`,
-                replace: ``,
-            },
+`;
+export const UPGRADE_TARGETS = [
+    {
+        component: "hero",
+        path: "sparkletree/hero.tsx",
+        codemods: [
             {
-                label: "reservation helpers",
-                find: `const backgroundImage = safeActionUrl(state.backgroundImage);`,
-                replace: `const backgroundImage = safeActionUrl(state.backgroundImage);
+                // 0.4.0: the hold RESERVES instead of blanking (LAYOUT-DOCTRINE.md).
+                marker: "withReserve",
+                needs: "0.4.0",
+                hunks: [
+                    {
+                        label: "imports",
+                        find: `import { StreamText, useIsland, type UseIslandOptions } from "@sparkletree/react";`,
+                        replace: `import { StreamText, useIsland, withReserve, type UseIslandOptions } from "@sparkletree/react";
+import type { FieldState } from "@sparkletree/react";`,
+                    },
+                    {
+                        label: "reservation helpers",
+                        find: `const backgroundImage = safeActionUrl(state.backgroundImage);`,
+                        replace: `const backgroundImage = safeActionUrl(state.backgroundImage);
 
 ${HERO_RESERVATION}`,
+                    },
+                    {
+                        label: "greeting condition",
+                        find: `{state.fields.greeting.text ? (`,
+                        replace: `{state.fields.greeting.text || (holding && reserveOf("greeting")) ? (`,
+                    },
+                    {
+                        label: "greeting field",
+                        find: `field={state.fields.greeting}`,
+                        replace: `field={held(state.fields.greeting, reserveOf("greeting"))}`,
+                    },
+                    {
+                        label: "headline field",
+                        find: `field={state.fields.headline}`,
+                        replace: `field={held(state.fields.headline, reserveOf("headline"))}`,
+                    },
+                    {
+                        label: "body condition",
+                        find: `{state.fields.body.text ? (`,
+                        replace: `{state.fields.body.text || (holding && reserveOf("body")) ? (`,
+                    },
+                    {
+                        label: "body field",
+                        find: `field={state.fields.body}`,
+                        replace: `field={held(state.fields.body, reserveOf("body"))}`,
+                    },
+                ],
             },
             {
-                label: "greeting condition",
-                find: `{state.fields.greeting.text ? (`,
-                replace: `{state.fields.greeting.text || (holding && reserveOf("greeting")) ? (`,
-            },
-            {
-                label: "greeting field",
-                find: `field={state.fields.greeting}`,
-                replace: `field={held(state.fields.greeting, reserveOf("greeting"))}`,
-            },
-            {
-                label: "headline field",
-                find: `field={state.fields.headline}`,
-                replace: `field={held(state.fields.headline, reserveOf("headline"))}`,
-            },
-            {
-                label: "body condition",
-                find: `{state.fields.body.text ? (`,
-                replace: `{state.fields.body.text || (holding && reserveOf("body")) ? (`,
-            },
-            {
-                label: "body field",
-                find: `field={state.fields.body}`,
-                replace: `field={held(state.fields.body, reserveOf("body"))}`,
+                // 0.6.1: one safeActionUrl, imported from core; the header stops
+                // claiming a default disclosure mark is handled upstream.
+                marker: `safeActionUrl, themeStyle } from "@sparkletree/core"`,
+                needs: "0.6.1",
+                hunks: [
+                    {
+                        label: "disclosure note",
+                        find: ` * copy paints, how long it holds, whether it types or lands composed, and
+ * whether it carries the adaptation mark. All of that lives in
+ * @sparkletree/core and @sparkletree/react so it can be fixed for you without
+ * you re-copying this file.`,
+                        replace: ` * copy paints, how long it holds, whether it types or lands composed, and the
+ * provenance every adapted field carries. All of that lives in
+ * @sparkletree/core and @sparkletree/react so it can be fixed for you without
+ * you re-copying this file. No visible AI-disclosure mark renders by default —
+ * if you want one, render \`InlineMark\` from @sparkletree/react where
+ * \`decideChrome(field.source, prefersStandard).marked\` is true.`,
+                    },
+                    {
+                        label: "core imports",
+                        find: `import { themeStyle } from "@sparkletree/core";`,
+                        replace: `import { safeActionUrl, themeStyle } from "@sparkletree/core";`,
+                    },
+                    {
+                        label: "shared safeActionUrl",
+                        find: INLINE_SAFE_ACTION_URL,
+                        replace: ``,
+                    },
+                ],
             },
         ],
     },
     {
         component: "cta",
         path: "sparkletree/cta.tsx",
-        marker: "withReserve",
-        hunks: [
-            {
-                label: "imports",
-                find: `import { StreamText, useIsland, useSparkletree, type UseIslandOptions } from "@sparkletree/react";`,
-                replace: `import { StreamText, useIsland, useSparkletree, withReserve, type UseIslandOptions } from "@sparkletree/react";`,
-            },
-            {
-                label: "core imports",
-                find: `import { readableTextColor, themeStyle, track } from "@sparkletree/core";`,
-                replace: `import { readableTextColor, safeActionUrl, themeStyle, track } from "@sparkletree/core";`,
-            },
-            {
-                label: "shared safeActionUrl",
-                find: `/**
- * Server-driven URLs are configuration, not trust. Only http(s), mailto and
- * tel absolutes and relative navigations ("/", "./", "#", "?") pass; anything
- * else — javascript:, data:, an unprefixed string — is dropped.
- */
-function safeActionUrl(url: string | null | undefined): string | undefined {
-  if (!url) return undefined;
-  if (
-    (url.startsWith("/") && !url.startsWith("//")) ||
-    url.startsWith("./") ||
-    url.startsWith("#") ||
-    url.startsWith("?")
-  ) {
-    return url;
-  }
-  try {
-    const protocol = new URL(url).protocol;
-    if (["https:", "http:", "mailto:", "tel:"].includes(protocol)) return url;
-  } catch {
-    // Not a parseable URL at all.
-  }
-  return undefined;
-}
-
-`,
-                replace: ``,
-            },
+        codemods: [
             {
-                label: "reservation helpers",
-                find: `    onClick?.();
+                // 0.4.0: the hold RESERVES instead of blanking (LAYOUT-DOCTRINE.md).
+                marker: "withReserve",
+                needs: "0.4.0",
+                hunks: [
+                    {
+                        label: "imports",
+                        find: `import { StreamText, useIsland, useSparkletree, type UseIslandOptions } from "@sparkletree/react";`,
+                        replace: `import { StreamText, useIsland, useSparkletree, withReserve, type UseIslandOptions } from "@sparkletree/react";`,
+                    },
+                    {
+                        label: "reservation helpers",
+                        find: `    onClick?.();
   };`,
-                replace: `    onClick?.();
+                        replace: `    onClick?.();
   };
 
 ${CTA_RESERVATION}`,
-            },
-            {
-                label: "accessible name",
-                find: `    "aria-disabled": state.fields.cta.text ? undefined : true,`,
-                replace: `    // A reserved button is full-size but its visible label is a hidden
+                    },
+                    {
+                        label: "accessible name",
+                        find: `    "aria-disabled": state.fields.cta.text ? undefined : true,`,
+                        replace: `    // A reserved button is full-size but its visible label is a hidden
     // reservation outside the a11y tree — never a NAMELESS control: the
     // reservation text is the honest accessible name.
     "aria-disabled": state.fields.cta.text ? undefined : true,
     "aria-label": reserved ? (ctaReserve as string) : undefined,`,
+                    },
+                    {
+                        label: "label field",
+                        find: `<StreamText field={state.fields.cta} />`,
+                        replace: `<StreamText field={labelField} />`,
+                        all: true,
+                    },
+                ],
             },
             {
-                label: "label field",
-                find: `<StreamText field={state.fields.cta} />`,
-                replace: `<StreamText field={labelField} />`,
-                all: true,
+                // 0.6.1: one safeActionUrl, imported from core.
+                marker: `readableTextColor, safeActionUrl, themeStyle, track } from "@sparkletree/core"`,
+                needs: "0.6.1",
+                hunks: [
+                    {
+                        label: "core imports",
+                        find: `import { readableTextColor, themeStyle, track } from "@sparkletree/core";`,
+                        replace: `import { readableTextColor, safeActionUrl, themeStyle, track } from "@sparkletree/core";`,
+                    },
+                    {
+                        label: "shared safeActionUrl",
+                        find: INLINE_SAFE_ACTION_URL,
+                        replace: ``,
+                    },
+                ],
             },
         ],
     },
@@ -228,25 +242,43 @@ async function installedReactVersion(cwd) {
         dir = parent;
     }
 }
-function supportsReservation(version) {
-    const [major = 0, minor = 0] = version.split(".").map(Number);
-    // Unparseable versions are not evidence of an old install.
-    if (!Number.isFinite(major) || !Number.isFinite(minor))
-        return true;
-    return major > 0 || minor >= 4;
+/** installed >= needs, on plain major.minor.patch. Unparseable installed
+ * versions are not evidence of an old install and pass. */
+function versionAtLeast(installed, needs) {
+    const have = installed.split(".").map(Number);
+    const want = needs.split(".").map(Number);
+    for (let i = 0; i < 3; i++) {
+        const a = have[i] ?? 0;
+        const b = want[i] ?? 0;
+        if (!Number.isFinite(a))
+            return true;
+        if (a !== b)
+            return a > b;
+    }
+    return true;
+}
+/** The larger of two plain versions, for accumulating `requiredReact`. */
+function maxVersion(a, b) {
+    if (a === null)
+        return b;
+    return versionAtLeast(a, b) ? a : b;
 }
 export async function upgrade(options = {}) {
     const cwd = options.cwd ?? process.cwd();
     const targetDir = options.targetDir ?? "components";
     const reactVersion = await installedReactVersion(cwd);
-    const blockedByReact = reactVersion !== null && !supportsReservation(reactVersion) ? reactVersion : null;
     const result = {
         upgraded: [],
         upToDate: [],
         missing: [],
         diverged: [],
-        blockedByReact,
+        blockedByReact: null,
+        requiredReact: null,
     };
+    // First pass: which generations does each copy still need? The block
+    // decision needs the answer across ALL files — updating packages is one
+    // action, so the run names one required version, not one per file.
+    const pending = [];
     for (const target of UPGRADE_TARGETS) {
         const absolute = resolve(cwd, targetDir, target.path);
         const path = relative(cwd, absolute);
@@ -258,25 +290,45 @@ export async function upgrade(options = {}) {
             result.missing.push(path);
             continue;
         }
-        if (content.includes(target.marker)) {
+        const needed = target.codemods.filter((codemod) => !content.includes(codemod.marker));
+        if (!needed.length) {
             result.upToDate.push(path);
             continue;
         }
-        const failed = target.hunks
-            .filter((hunk) => {
-            const count = occurrences(content, hunk.find);
-            return hunk.all ? count === 0 : count !== 1;
-        })
-            .map((hunk) => hunk.label);
+        for (const codemod of needed) {
+            result.requiredReact = maxVersion(result.requiredReact, codemod.needs);
+        }
+        pending.push({ absolute, path, content, needed });
+    }
+    if (reactVersion !== null &&
+        result.requiredReact !== null &&
+        !versionAtLeast(reactVersion, result.requiredReact)) {
+        result.blockedByReact = reactVersion;
+    }
+    // Second pass: validate and apply the needed generations IN ORDER against
+    // the evolving text — a later generation's hunks land on the earlier
+    // generation's output, exactly as they did across real releases. Still
+    // all-or-nothing per file: one miss anywhere and nothing is written.
+    for (const { absolute, path, content, needed } of pending) {
+        let next = content;
+        const failed = [];
+        for (const codemod of needed) {
+            for (const hunk of codemod.hunks) {
+                const count = occurrences(next, hunk.find);
+                if (hunk.all ? count === 0 : count !== 1) {
+                    failed.push(hunk.label);
+                    continue;
+                }
+                next = hunk.all
+                    ? next.replaceAll(hunk.find, hunk.replace)
+                    : next.replace(hunk.find, hunk.replace);
+            }
+        }
         if (failed.length) {
             result.diverged.push({ path, hunks: failed });
             continue;
         }
-        let next = content;
-        for (const hunk of target.hunks) {
-            next = hunk.all ? next.replaceAll(hunk.find, hunk.replace) : next.replace(hunk.find, hunk.replace);
-        }
-        if (!options.dryRun && !blockedByReact)
+        if (!options.dryRun && !result.blockedByReact)
             await writeFile(absolute, next, "utf8");
         result.upgraded.push(path);
     }
@@ -287,10 +339,10 @@ export function formatUpgradeResult(result, dryRun = false) {
     const lines = [];
     const verb = dryRun || result.blockedByReact ? "Would upgrade" : "Upgraded";
     if (result.blockedByReact) {
-        lines.push(`Nothing written: @sparkletree/react ${result.blockedByReact} is installed,`, "and the reservation wiring needs ^0.4.0 (`state.held` does not exist", "before it). Update @sparkletree/react and @sparkletree/core, then", "re-run `sparkletree upgrade`.", "");
+        lines.push(`Nothing written: @sparkletree/react ${result.blockedByReact} is installed,`, `and this upgrade's wiring needs ^${result.requiredReact ?? "0.4.0"} to compile.`, "Update @sparkletree/react and @sparkletree/core, then re-run", "`sparkletree upgrade`.", "");
     }
     if (result.upgraded.length) {
-        lines.push(`${verb} to the 0.4.0 reservation wiring:`);
+        lines.push(`${verb} to the current template wiring:`);
         for (const path of result.upgraded)
             lines.push(`  ${path}`);
     }
@@ -304,12 +356,12 @@ export function formatUpgradeResult(result, dryRun = false) {
         for (const item of result.diverged) {
             lines.push(`  ${item.path} — did not match at: ${item.hunks.join(", ")}`);
         }
-        lines.push("", "Nothing was written to those files. Port the reservation wiring by", "hand (the current templates show it: `sparkletree add <name> --dir", "/tmp/fresh` writes a reference copy), or re-copy with `add --force`", "if you are happy to lose your edits.");
+        lines.push("", "Nothing was written to those files. Port the wiring by hand (the", "current templates show it: `sparkletree add <name> --dir /tmp/fresh`", "writes a reference copy), or re-copy with `add --force` if you are", "happy to lose your edits.");
     }
     if (!lines.length) {
         lines.push("Nothing to upgrade — no copied hero or cta found.");
     }
-    lines.push("", "Why: 0.4.0 holds by RESERVING space with the fallback instead of", "rendering nothing. Without this wiring a copied hero or cta collapses", "during the hold and the page shifts when copy arrives.");
+    lines.push("", "Why: copies drift. 0.4.0 holds by RESERVING space with the fallback", "(without it a copied hero or cta collapses during the hold), and 0.6.1", "moved URL vetting to one implementation in @sparkletree/core so security", "fixes reach copies through npm instead of a migration guide.");
     return lines.join("\n");
 }
 //# sourceMappingURL=upgrade.js.map

package/dist/upgrade.js.map

@@ -1 +1 @@
-{"version":3,"file":"upgrade.js","sourceRoot":"","sources":["../src/upgrade.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;GAsBG;AAEH,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AACvD,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAqB7D,MAAM,gBAAgB,GAAG;;;;;;;;6EAQoD,CAAC;AAE9E,MAAM,eAAe,GAAG;;;;;;;;wBAQA,CAAC;AAEzB,MAAM,CAAC,MAAM,eAAe,GAA6B;IACvD;QACE,SAAS,EAAE,MAAM;QACjB,IAAI,EAAE,sBAAsB;QAC5B,MAAM,EAAE,aAAa;QACrB,KAAK,EAAE;YACL;gBACE,KAAK,EAAE,iBAAiB;gBACxB,IAAI,EAAE;;;6BAGe;gBACrB,OAAO,EAAE;;;;;mEAKkD;aAC5D;YACD;gBACE,KAAK,EAAE,SAAS;gBAChB,IAAI,EAAE,oFAAoF;gBAC1F,OAAO,EAAE;sDACqC;aAC/C;YACD;gBACE,KAAK,EAAE,cAAc;gBACrB,IAAI,EAAE,iDAAiD;gBACvD,OAAO,EAAE,gEAAgE;aAC1E;YACD;gBACE,KAAK,EAAE,sBAAsB;gBAC7B,IAAI,EAAE;;;;;;;;;;;;;;;;;;;;;;;;CAwBb;gBACO,OAAO,EAAE,EAAE;aACZ;YACD;gBACE,KAAK,EAAE,qBAAqB;gBAC5B,IAAI,EAAE,+DAA+D;gBACrE,OAAO,EAAE;;EAEf,gBAAgB,EAAE;aACb;YACD;gBACE,KAAK,EAAE,oBAAoB;gBAC3B,IAAI,EAAE,iCAAiC;gBACvC,OAAO,EAAE,uEAAuE;aACjF;YACD;gBACE,KAAK,EAAE,gBAAgB;gBACvB,IAAI,EAAE,+BAA+B;gBACrC,OAAO,EAAE,4DAA4D;aACtE;YACD;gBACE,KAAK,EAAE,gBAAgB;gBACvB,IAAI,EAAE,+BAA+B;gBACrC,OAAO,EAAE,4DAA4D;aACtE;YACD;gBACE,KAAK,EAAE,gBAAgB;gBACvB,IAAI,EAAE,6BAA6B;gBACnC,OAAO,EAAE,+DAA+D;aACzE;YACD;gBACE,KAAK,EAAE,YAAY;gBACnB,IAAI,EAAE,2BAA2B;gBACjC,OAAO,EAAE,oDAAoD;aAC9D;SACF;KACF;IACD;QACE,SAAS,EAAE,KAAK;QAChB,IAAI,EAAE,qBAAqB;QAC3B,MAAM,EAAE,aAAa;QACrB,KAAK,EAAE;YACL;gBACE,KAAK,EAAE,SAAS;gBAChB,IAAI,EAAE,oGAAoG;gBAC1G,OAAO,EAAE,iHAAiH;aAC3H;YACD;gBACE,KAAK,EAAE,cAAc;gBACrB,IAAI,EAAE,2EAA2E;gBACjF,OAAO,EAAE,0FAA0F;aACpG;YACD;gBACE,KAAK,EAAE,sBAAsB;gBAC7B,IAAI,EAAE;;;;;;;;;;;;;;;;;;;;;;;;CAwBb;gBACO,OAAO,EAAE,EAAE;aACZ;YACD;gBACE,KAAK,EAAE,qBAAqB;gBAC5B,IAAI,EAAE;KACT;gBACG,OAAO,EAAE;;;EAGf,eAAe,EAAE;aACZ;YACD;gBACE,KAAK,EAAE,iBAAiB;gBACxB,IAAI,EAAE,gEAAgE;gBACtE,OAAO,EAAE;;;;iEAIgD;aAC1D;YACD;gBACE,KAAK,EAAE,aAAa;gBACpB,IAAI,EAAE,yCAAyC;gBAC/C,OAAO,EAAE,mCAAmC;gBAC5C,GAAG,EAAE,IAAI;aACV;SACF;KACF;CACF,CAAC;AA0BF,SAAS,WAAW,CAAC,QAAgB,EAAE,MAAc;IACnD,OAAO,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC;AAC3C,CAAC;AAED;;oEAEoE;AACpE,KAAK,UAAU,qBAAqB,CAAC,GAAW;IAC9C,IAAI,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC;IACvB,SAAS,CAAC;QACR,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,MAAM,QAAQ,CACxB,IAAI,CAAC,GAAG,EAAE,cAAc,EAAE,cAAc,EAAE,OAAO,EAAE,cAAc,CAAC,EAClE,MAAM,CACP,CAAC;YACF,MAAM,OAAO,GAAI,IAAI,CAAC,KAAK,CAAC,GAAG,CAA2B,CAAC,OAAO,CAAC;YACnE,OAAO,OAAO,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC;QACtD,CAAC;QAAC,MAAM,CAAC;YACP,6CAA6C;QAC/C,CAAC;QACD,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC;QAC5B,IAAI,MAAM,KAAK,GAAG;YAAE,OAAO,IAAI,CAAC;QAChC,GAAG,GAAG,MAAM,CAAC;IACf,CAAC;AACH,CAAC;AAED,SAAS,mBAAmB,CAAC,OAAe;IAC1C,MAAM,CAAC,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,CAAC,CAAC,GAAG,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IAC9D,2DAA2D;IAC3D,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IACpE,OAAO,KAAK,GAAG,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC;AACjC,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,OAAO,CAAC,UAA0B,EAAE;IACxD,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC;IACzC,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS,IAAI,YAAY,CAAC;IAEpD,MAAM,YAAY,GAAG,MAAM,qBAAqB,CAAC,GAAG,CAAC,CAAC;IACtD,MAAM,cAAc,GAAG,YAAY,KAAK,IAAI,IAAI,CAAC,mBAAmB,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,IAAI,CAAC;IAEzG,MAAM,MAAM,GAAkB;QAC5B,QAAQ,EAAE,EAAE;QACZ,QAAQ,EAAE,EAAE;QACZ,OAAO,EAAE,EAAE;QACX,QAAQ,EAAE,EAAE;QACZ,cAAc;KACf,CAAC;IAEF,KAAK,MAAM,MAAM,IAAI,eAAe,EAAE,CAAC;QACrC,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,EAAE,SAAS,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC;QACtD,MAAM,IAAI,GAAG,QAAQ,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;QAErC,IAAI,OAAe,CAAC;QACpB,IAAI,CAAC;YACH,OAAO,GAAG,MAAM,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;QAC7C,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAC1B,SAAS;QACX,CAAC;QAED,IAAI,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC;YACpC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAC3B,SAAS;QACX,CAAC;QAED,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK;aACxB,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE;YACf,MAAM,KAAK,GAAG,WAAW,CAAC,OAAO,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC;YAC9C,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,KAAK,CAAC,CAAC;QAC9C,CAAC,CAAC;aACD,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC7B,IAAI,MAAM,CAAC,MAAM,EAAE,CAAC;YAClB,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC;YAC9C,SAAS;QACX,CAAC;QAED,IAAI,IAAI,GAAG,OAAO,CAAC;QACnB,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,KAAK,EAAE,CAAC;YAChC,IAAI,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC;QACrG,CAAC;QACD,IAAI,CAAC,OAAO,CAAC,MAAM,IAAI,CAAC,cAAc;YAAE,MAAM,SAAS,CAAC,QAAQ,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC;QAChF,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC7B,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,mEAAmE;AACnE,MAAM,UAAU,mBAAmB,CAAC,MAAqB,EAAE,MAAM,GAAG,KAAK;IACvE,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,MAAM,IAAI,GAAG,MAAM,IAAI,MAAM,CAAC,cAAc,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,UAAU,CAAC;IAE5E,IAAI,MAAM,CAAC,cAAc,EAAE,CAAC;QAC1B,KAAK,CAAC,IAAI,CACR,uCAAuC,MAAM,CAAC,cAAc,gBAAgB,EAC5E,sEAAsE,EACtE,mEAAmE,EACnE,+BAA+B,EAC/B,EAAE,CACH,CAAC;IACJ,CAAC;IACD,IAAI,MAAM,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC;QAC3B,KAAK,CAAC,IAAI,CAAC,GAAG,IAAI,mCAAmC,CAAC,CAAC;QACvD,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,QAAQ;YAAE,KAAK,CAAC,IAAI,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC;IAC9D,CAAC;IACD,IAAI,MAAM,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC;QAC3B,KAAK,CAAC,IAAI,CAAC,EAAE,EAAE,qBAAqB,CAAC,CAAC;QACtC,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,QAAQ;YAAE,KAAK,CAAC,IAAI,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC;IAC9D,CAAC;IACD,IAAI,MAAM,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC;QAC3B,KAAK,CAAC,IAAI,CAAC,EAAE,EAAE,sDAAsD,CAAC,CAAC;QACvE,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,QAAQ,EAAE,CAAC;YACnC,KAAK,CAAC,IAAI,CAAC,KAAK,IAAI,CAAC,IAAI,wBAAwB,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAC5E,CAAC;QACD,KAAK,CAAC,IAAI,CACR,EAAE,EACF,oEAAoE,EACpE,oEAAoE,EACpE,qEAAqE,EACrE,sCAAsC,CACvC,CAAC;IACJ,CAAC;IACD,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC;QAClB,KAAK,CAAC,IAAI,CAAC,mDAAmD,CAAC,CAAC;IAClE,CAAC;IACD,KAAK,CAAC,IAAI,CACR,EAAE,EACF,kEAAkE,EAClE,uEAAuE,EACvE,wDAAwD,CACzD,CAAC;IACF,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC1B,CAAC"}
+{"version":3,"file":"upgrade.js","sourceRoot":"","sources":["../src/upgrade.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AAEH,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AACvD,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAoC7D,MAAM,gBAAgB,GAAG;;;;;;;;6EAQoD,CAAC;AAE9E,MAAM,eAAe,GAAG;;;;;;;;wBAQA,CAAC;AAEzB;;;;;GAKG;AACH,MAAM,sBAAsB,GAAG;;;;;;;;;;;;;;;;;;;;;;;;CAwB9B,CAAC;AAEF,MAAM,CAAC,MAAM,eAAe,GAA6B;IACvD;QACE,SAAS,EAAE,MAAM;QACjB,IAAI,EAAE,sBAAsB;QAC5B,QAAQ,EAAE;YACR;gBACE,qEAAqE;gBACrE,MAAM,EAAE,aAAa;gBACrB,KAAK,EAAE,OAAO;gBACd,KAAK,EAAE;oBACL;wBACE,KAAK,EAAE,SAAS;wBAChB,IAAI,EAAE,oFAAoF;wBAC1F,OAAO,EAAE;sDACiC;qBAC3C;oBACD;wBACE,KAAK,EAAE,qBAAqB;wBAC5B,IAAI,EAAE,+DAA+D;wBACrE,OAAO,EAAE;;EAEnB,gBAAgB,EAAE;qBACT;oBACD;wBACE,KAAK,EAAE,oBAAoB;wBAC3B,IAAI,EAAE,iCAAiC;wBACvC,OAAO,EAAE,uEAAuE;qBACjF;oBACD;wBACE,KAAK,EAAE,gBAAgB;wBACvB,IAAI,EAAE,+BAA+B;wBACrC,OAAO,EAAE,4DAA4D;qBACtE;oBACD;wBACE,KAAK,EAAE,gBAAgB;wBACvB,IAAI,EAAE,+BAA+B;wBACrC,OAAO,EAAE,4DAA4D;qBACtE;oBACD;wBACE,KAAK,EAAE,gBAAgB;wBACvB,IAAI,EAAE,6BAA6B;wBACnC,OAAO,EAAE,+DAA+D;qBACzE;oBACD;wBACE,KAAK,EAAE,YAAY;wBACnB,IAAI,EAAE,2BAA2B;wBACjC,OAAO,EAAE,oDAAoD;qBAC9D;iBACF;aACF;YACD;gBACE,iEAAiE;gBACjE,0DAA0D;gBAC1D,MAAM,EAAE,sDAAsD;gBAC9D,KAAK,EAAE,OAAO;gBACd,KAAK,EAAE;oBACL;wBACE,KAAK,EAAE,iBAAiB;wBACxB,IAAI,EAAE;;;6BAGW;wBACjB,OAAO,EAAE;;;;;mEAK8C;qBACxD;oBACD;wBACE,KAAK,EAAE,cAAc;wBACrB,IAAI,EAAE,iDAAiD;wBACvD,OAAO,EAAE,gEAAgE;qBAC1E;oBACD;wBACE,KAAK,EAAE,sBAAsB;wBAC7B,IAAI,EAAE,sBAAsB;wBAC5B,OAAO,EAAE,EAAE;qBACZ;iBACF;aACF;SACF;KACF;IACD;QACE,SAAS,EAAE,KAAK;QAChB,IAAI,EAAE,qBAAqB;QAC3B,QAAQ,EAAE;YACR;gBACE,qEAAqE;gBACrE,MAAM,EAAE,aAAa;gBACrB,KAAK,EAAE,OAAO;gBACd,KAAK,EAAE;oBACL;wBACE,KAAK,EAAE,SAAS;wBAChB,IAAI,EAAE,oGAAoG;wBAC1G,OAAO,EAAE,iHAAiH;qBAC3H;oBACD;wBACE,KAAK,EAAE,qBAAqB;wBAC5B,IAAI,EAAE;KACb;wBACO,OAAO,EAAE;;;EAGnB,eAAe,EAAE;qBACR;oBACD;wBACE,KAAK,EAAE,iBAAiB;wBACxB,IAAI,EAAE,gEAAgE;wBACtE,OAAO,EAAE;;;;iEAI4C;qBACtD;oBACD;wBACE,KAAK,EAAE,aAAa;wBACpB,IAAI,EAAE,yCAAyC;wBAC/C,OAAO,EAAE,mCAAmC;wBAC5C,GAAG,EAAE,IAAI;qBACV;iBACF;aACF;YACD;gBACE,gDAAgD;gBAChD,MAAM,EAAE,gFAAgF;gBACxF,KAAK,EAAE,OAAO;gBACd,KAAK,EAAE;oBACL;wBACE,KAAK,EAAE,cAAc;wBACrB,IAAI,EAAE,2EAA2E;wBACjF,OAAO,EAAE,0FAA0F;qBACpG;oBACD;wBACE,KAAK,EAAE,sBAAsB;wBAC7B,IAAI,EAAE,sBAAsB;wBAC5B,OAAO,EAAE,EAAE;qBACZ;iBACF;aACF;SACF;KACF;CACF,CAAC;AAgCF,SAAS,WAAW,CAAC,QAAgB,EAAE,MAAc;IACnD,OAAO,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC;AAC3C,CAAC;AAED;;oEAEoE;AACpE,KAAK,UAAU,qBAAqB,CAAC,GAAW;IAC9C,IAAI,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC;IACvB,SAAS,CAAC;QACR,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,MAAM,QAAQ,CACxB,IAAI,CAAC,GAAG,EAAE,cAAc,EAAE,cAAc,EAAE,OAAO,EAAE,cAAc,CAAC,EAClE,MAAM,CACP,CAAC;YACF,MAAM,OAAO,GAAI,IAAI,CAAC,KAAK,CAAC,GAAG,CAA2B,CAAC,OAAO,CAAC;YACnE,OAAO,OAAO,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC;QACtD,CAAC;QAAC,MAAM,CAAC;YACP,6CAA6C;QAC/C,CAAC;QACD,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC;QAC5B,IAAI,MAAM,KAAK,GAAG;YAAE,OAAO,IAAI,CAAC;QAChC,GAAG,GAAG,MAAM,CAAC;IACf,CAAC;AACH,CAAC;AAED;2DAC2D;AAC3D,SAAS,cAAc,CAAC,SAAiB,EAAE,KAAa;IACtD,MAAM,IAAI,GAAG,SAAS,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IAC9C,MAAM,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IAC1C,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;QAC3B,MAAM,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;QACvB,MAAM,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;QACvB,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC;YAAE,OAAO,IAAI,CAAC;QACrC,IAAI,CAAC,KAAK,CAAC;YAAE,OAAO,CAAC,GAAG,CAAC,CAAC;IAC5B,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,0EAA0E;AAC1E,SAAS,UAAU,CAAC,CAAgB,EAAE,CAAS;IAC7C,IAAI,CAAC,KAAK,IAAI;QAAE,OAAO,CAAC,CAAC;IACzB,OAAO,cAAc,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AACtC,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,OAAO,CAAC,UAA0B,EAAE;IACxD,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC;IACzC,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS,IAAI,YAAY,CAAC;IAEpD,MAAM,YAAY,GAAG,MAAM,qBAAqB,CAAC,GAAG,CAAC,CAAC;IAEtD,MAAM,MAAM,GAAkB;QAC5B,QAAQ,EAAE,EAAE;QACZ,QAAQ,EAAE,EAAE;QACZ,OAAO,EAAE,EAAE;QACX,QAAQ,EAAE,EAAE;QACZ,cAAc,EAAE,IAAI;QACpB,aAAa,EAAE,IAAI;KACpB,CAAC;IAEF,qEAAqE;IACrE,wEAAwE;IACxE,mEAAmE;IACnE,MAAM,OAAO,GAA6E,EAAE,CAAC;IAC7F,KAAK,MAAM,MAAM,IAAI,eAAe,EAAE,CAAC;QACrC,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,EAAE,SAAS,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC;QACtD,MAAM,IAAI,GAAG,QAAQ,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;QAErC,IAAI,OAAe,CAAC;QACpB,IAAI,CAAC;YACH,OAAO,GAAG,MAAM,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;QAC7C,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAC1B,SAAS;QACX,CAAC;QAED,MAAM,MAAM,GAAG,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC;QACtF,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC;YACnB,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAC3B,SAAS;QACX,CAAC;QACD,KAAK,MAAM,OAAO,IAAI,MAAM,EAAE,CAAC;YAC7B,MAAM,CAAC,aAAa,GAAG,UAAU,CAAC,MAAM,CAAC,aAAa,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC;QACzE,CAAC;QACD,OAAO,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC,CAAC;IACpD,CAAC;IAED,IACE,YAAY,KAAK,IAAI;QACrB,MAAM,CAAC,aAAa,KAAK,IAAI;QAC7B,CAAC,cAAc,CAAC,YAAY,EAAE,MAAM,CAAC,aAAa,CAAC,EACnD,CAAC;QACD,MAAM,CAAC,cAAc,GAAG,YAAY,CAAC;IACvC,CAAC;IAED,0EAA0E;IAC1E,qEAAqE;IACrE,uEAAuE;IACvE,qEAAqE;IACrE,KAAK,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,IAAI,OAAO,EAAE,CAAC;QAC1D,IAAI,IAAI,GAAG,OAAO,CAAC;QACnB,MAAM,MAAM,GAAa,EAAE,CAAC;QAC5B,KAAK,MAAM,OAAO,IAAI,MAAM,EAAE,CAAC;YAC7B,KAAK,MAAM,IAAI,IAAI,OAAO,CAAC,KAAK,EAAE,CAAC;gBACjC,MAAM,KAAK,GAAG,WAAW,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC;gBAC3C,IAAI,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,KAAK,CAAC,EAAE,CAAC;oBACzC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;oBACxB,SAAS;gBACX,CAAC;gBACD,IAAI,GAAG,IAAI,CAAC,GAAG;oBACb,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,OAAO,CAAC;oBAC1C,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC;YAC5C,CAAC;QACH,CAAC;QACD,IAAI,MAAM,CAAC,MAAM,EAAE,CAAC;YAClB,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC;YAC9C,SAAS;QACX,CAAC;QACD,IAAI,CAAC,OAAO,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,cAAc;YAAE,MAAM,SAAS,CAAC,QAAQ,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC;QACvF,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC7B,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,mEAAmE;AACnE,MAAM,UAAU,mBAAmB,CAAC,MAAqB,EAAE,MAAM,GAAG,KAAK;IACvE,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,MAAM,IAAI,GAAG,MAAM,IAAI,MAAM,CAAC,cAAc,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,UAAU,CAAC;IAE5E,IAAI,MAAM,CAAC,cAAc,EAAE,CAAC;QAC1B,KAAK,CAAC,IAAI,CACR,uCAAuC,MAAM,CAAC,cAAc,gBAAgB,EAC5E,oCAAoC,MAAM,CAAC,aAAa,IAAI,OAAO,cAAc,EACjF,8DAA8D,EAC9D,wBAAwB,EACxB,EAAE,CACH,CAAC;IACJ,CAAC;IACD,IAAI,MAAM,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC;QAC3B,KAAK,CAAC,IAAI,CAAC,GAAG,IAAI,kCAAkC,CAAC,CAAC;QACtD,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,QAAQ;YAAE,KAAK,CAAC,IAAI,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC;IAC9D,CAAC;IACD,IAAI,MAAM,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC;QAC3B,KAAK,CAAC,IAAI,CAAC,EAAE,EAAE,qBAAqB,CAAC,CAAC;QACtC,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,QAAQ;YAAE,KAAK,CAAC,IAAI,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC;IAC9D,CAAC;IACD,IAAI,MAAM,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC;QAC3B,KAAK,CAAC,IAAI,CAAC,EAAE,EAAE,sDAAsD,CAAC,CAAC;QACvE,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,QAAQ,EAAE,CAAC;YACnC,KAAK,CAAC,IAAI,CAAC,KAAK,IAAI,CAAC,IAAI,wBAAwB,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAC5E,CAAC;QACD,KAAK,CAAC,IAAI,CACR,EAAE,EACF,kEAAkE,EAClE,sEAAsE,EACtE,oEAAoE,EACpE,2BAA2B,CAC5B,CAAC;IACJ,CAAC;IACD,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC;QAClB,KAAK,CAAC,IAAI,CAAC,mDAAmD,CAAC,CAAC;IAClE,CAAC;IACD,KAAK,CAAC,IAAI,CACR,EAAE,EACF,qEAAqE,EACrE,wEAAwE,EACxE,0EAA0E,EAC1E,8DAA8D,CAC/D,CAAC;IACF,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC1B,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@sparkletree/cli",
-  "version": "0.6.1",
+  "version": "0.7.0",
   "description": "sparkletree — add SparkleTree components to your project.",
   "license": "MIT",
   "type": "module",