@supatype/cli 0.1.7 → 0.1.10

package/src/dev-log-filter.ts

@@ -48,7 +48,7 @@ export function filterStackLogLine(line: string): boolean {
   return false
 }
 
-/** Drop docker noise only — keep diff tables, push status, and command output. */
+/** Drop docker noise only, keep diff tables, push status, and command output. */
 export function filterCommandLogLine(line: string): boolean {
   const t = stripAnsi(line).trim()
   if (!t) return false

package/src/dev-ports.ts

@@ -60,7 +60,7 @@ async function promptPortConflict(
 export interface EnsureKongPortOptions {
   /** When false, fail fast instead of prompting (CI / scripts). */
   interactive?: boolean
-  /** init wizard — slightly different copy */
+  /** init wizard: slightly different copy */
   context?: "dev" | "init"
 }
 
@@ -102,7 +102,7 @@ export async function ensureKongPort(
   return port
 }
 
-/** Wizard / init — pick a Kong port without writing `.env` (scaffold writes it). */
+/** Wizard / init: pick a Kong port without writing `.env` (scaffold writes it). */
 export async function promptKongPortChoice(): Promise<number> {
   const freeDefault = (await isPortInUse(COMPOSE_DEV_KONG_PORT))
     ? await findNextFreePort(COMPOSE_DEV_KONG_PORT)
@@ -139,7 +139,7 @@ async function promptPortConflictWithoutPersist(
   const headline =
     reason === "init"
       ? `Port ${blockedPort} is already in use on this machine.`
-      : `Port ${blockedPort} is in use — another Supatype project or service may already be bound to it.`
+      : `Port ${blockedPort} is in use, another Supatype project or service may already be bound to it.`
 
   const choice = await p.select<"suggested" | "custom" | "cancel">({
     message: headline,

package/src/dev-session.ts

@@ -1,5 +1,5 @@
 /**
- * `supatype dev` output session — Ink dashboard (default) or interleaved stream mode.
+ * `supatype dev` output session, Ink dashboard (default) or interleaved stream mode.
  */
 
 import { render, type Instance } from "ink"
@@ -32,7 +32,7 @@ export function beginDevSession(mode: DevUiMode): DevSession {
   return activeSession
 }
 
-/** @deprecated Ink starts in beginDevSession — kept for callers that invoke late. */
+/** @deprecated Ink starts in beginDevSession, kept for callers that invoke late. */
 export function startDevSession(): void {
   activeSession?.startInk()
 }
@@ -47,7 +47,7 @@ export function endDevSession(): void {
   activeSession = null
 }
 
-/** @deprecated Dev prompts render inside the Ink dashboard — no suspend needed. */
+/** @deprecated Dev prompts render inside the Ink dashboard, no suspend needed. */
 export function suspendDevSessionForPrompt(): void {
   prepareStdinForInteractivePrompt()
 }
@@ -58,12 +58,12 @@ export function prepareStdinForInteractivePrompt(): void {
   process.stdin.resume()
 }
 
-/** @deprecated Dev prompts render inside the Ink dashboard — no resume needed. */
+/** @deprecated Dev prompts render inside the Ink dashboard, no resume needed. */
 export function resumeDevSessionAfterPrompt(): void {
-  // no-op — prompts are Ink overlays
+  // no-op: prompts are Ink overlays
 }
 
-/** @deprecated Use Ink overlay prompts — runs fn without tearing down the dashboard. */
+/** @deprecated Use Ink overlay prompts, runs fn without tearing down the dashboard. */
 export async function withDevSessionSuspended<T>(fn: () => Promise<T>): Promise<T> {
   return fn()
 }

package/src/dev-shutdown.ts

@@ -1,5 +1,5 @@
 /**
- * Graceful shutdown for `supatype dev` — SIGINT, TUI Ctrl+C, terminal close,
+ * Graceful shutdown for `supatype dev`, SIGINT, TUI Ctrl+C, terminal close,
  * and a synchronous compose-down fallback on process exit.
  */
 
@@ -23,7 +23,7 @@ let forceQuitRequested = false
 let hooksRegistered = false
 let ignoreSigintUntil = 0
 
-/** SIGINT/SIGTERM hooks — call as soon as `supatype dev` starts (before compose is up). */
+/** SIGINT/SIGTERM hooks: call as soon as `supatype dev` starts (before compose is up). */
 export function ensureDevShutdownHooks(): void {
   if (hooksRegistered) return
   hooksRegistered = true
@@ -62,7 +62,7 @@ function syncComposeDownFallback(): void {
       { quiet: true },
     )
   } catch {
-    // best-effort — process is exiting
+    // best-effort: process is exiting
   }
   if (shutdownCwd) clearDevSessionLock(shutdownCwd)
 }
@@ -74,7 +74,7 @@ function onProcessExit(): void {
 export interface RegisterDevShutdownOptions {
   /** Sync `docker compose down` when async teardown cannot finish (terminal close, kill). */
   compose?: DevComposeShutdownFallback
-  /** Project root — clears `.supatype/dev-session.json` after shutdown. */
+  /** Project root: clears `.supatype/dev-session.json` after shutdown. */
   cwd?: string
 }
 
@@ -89,7 +89,7 @@ export function registerDevShutdown(
   ensureDevShutdownHooks()
 }
 
-/** TUI Ctrl+C — do not re-emit SIGINT (avoids double-fire on Windows raw mode). */
+/** TUI Ctrl+C: do not re-emit SIGINT (avoids double-fire on Windows raw mode). */
 export function requestDevShutdown(): void {
   ignoreSigintUntil = Date.now() + 400
   void runDevShutdown()
@@ -99,7 +99,7 @@ export function isDevShuttingDown(): boolean {
   return shuttingDown
 }
 
-/** @internal Tests — reset module state between cases. */
+/** @internal Tests: reset module state between cases. */
 export function resetDevShutdownForTests(): void {
   shutdownWork = null
   composeFallback = null
@@ -125,7 +125,7 @@ async function runDevShutdown(): Promise<void> {
     } catch {
       // best-effort terminal restore
     }
-    process.stderr.write("\n[supatype] Forced quit — Docker containers may still be running.\n")
+    process.stderr.write("\n[supatype] Forced quit: Docker containers may still be running.\n")
     process.stdout.write("\n")
     process.exit(130)
   }
@@ -145,7 +145,7 @@ async function runDevShutdown(): Promise<void> {
   } catch (err) {
     process.stderr.write(`[supatype] Shutdown failed: ${(err as Error).message}\n`)
     process.stderr.write(
-      "[supatype] Docker containers may still be running — try: supatype self-host compose down\n",
+      "[supatype] Docker containers may still be running, try: supatype self-host compose down\n",
     )
     syncComposeDownFallback()
     shutdownCompleted = true

package/src/dev-task-colors.ts

@@ -30,7 +30,7 @@ export function levelColor(line: string): string | null {
   return null
 }
 
-/** Drop redundant prefix — task pane is already labelled supatype. */
+/** Drop redundant prefix: task pane is already labelled supatype. */
 export function normalizeStackLogLine(line: string): string {
   return line.replace(/^\[supatype\]\s*/, "")
 }

package/src/docker-postgres.ts

@@ -1,5 +1,5 @@
 /**
- * docker-postgres — manage a supatype/postgres Docker container for local dev.
+ * docker-postgres: manage a supatype/postgres Docker container for local dev.
  *
  * Used by `supatype dev` when database.provider = "docker".
  * The container is named supatype-{projectName} and persists data in a
@@ -11,7 +11,7 @@ import { spawnSync } from "node:child_process"
 export interface DockerPgOptions {
   /** Docker image to run. Defaults to supatype/postgres:latest. */
   image: string
-  /** Project name — used to derive the container and volume names. */
+  /** Project name: used to derive the container and volume names. */
   projectName: string
   /** Host port to bind to container's 5432. */
   port: number
@@ -85,7 +85,7 @@ export function dockerPgStart(opts: DockerPgOptions): void {
 }
 
 /**
- * Stop the container (fast — does not remove it or the data volume).
+ * Stop the container (fast, does not remove it or the data volume).
  * Safe to call even if the container is not running.
  */
 export function dockerPgStop(projectName: string): void {
@@ -120,7 +120,7 @@ export function dockerPgPostInitServing(logs: string): boolean {
 
   const initDone = logs.lastIndexOf("PostgreSQL init process complete")
   if (initDone === -1) {
-    // Reused data volume — this run did not re-run entrypoint init.
+    // Reused data volume: this run did not re-run entrypoint init.
     return true
   }
   return initDone < lastReady
@@ -240,7 +240,7 @@ export function dockerDbUrl(projectName: string, port: number, password = DEFAUL
 /**
  * DB URL for processes sharing the Postgres container network namespace
  * (supatype-server migrate in a one-shot container). Uses loopback inside the
- * container where pg_hba grants trust — avoids host-published-port SCRAM/SSL issues.
+ * container where pg_hba grants trust, avoids host-published-port SCRAM/SSL issues.
  */
 export function dockerPgLoopbackDbUrl(projectName: string, password = DEFAULT_DEV_PASSWORD): string {
   return `postgres://${PG_USER}:${password}@127.0.0.1:5432/${projectName}?sslmode=disable`
@@ -254,7 +254,7 @@ export const DEFAULT_SERVER_DOCKER_IMAGE = "supatype/server:latest"
 
 /**
  * Run `supatype-server migrate` on the Postgres container network (loopback trust).
- * Used on Windows + database.provider docker — host-published :5432 breaks libpq TLS there.
+ * Used on Windows + database.provider docker, host-published :5432 breaks libpq TLS there.
  */
 export function runGotrueMigrationsViaDocker(
   pgContainerName: string,

package/src/docker-runtime.ts

@@ -1,5 +1,5 @@
 /**
- * Docker daemon availability — used before `docker compose` and other docker CLI calls.
+ * Docker daemon availability: used before `docker compose` and other docker CLI calls.
  */
 
 import { spawnSync } from "node:child_process"
@@ -41,7 +41,7 @@ export function probeDockerDaemon(): DockerDaemonProbe {
   const versionStderr = (version.stderr ?? "").trim()
   const versionDetail = `${versionStderr}${version.stdout ?? ""}`.trim()
 
-  // No client version — CLI missing or broken.
+  // No client version: CLI missing or broken.
   if (!clientVersion) {
     return {
       ok: false,
@@ -51,7 +51,7 @@ export function probeDockerDaemon(): DockerDaemonProbe {
   }
 
   // Client is present but daemon refused (paused/stopped). `docker info` can hang
-  // while paused on Docker Desktop — use the version stderr and skip info.
+  // while paused on Docker Desktop, use the version stderr and skip info.
   if (version.status !== 0 && versionStderr) {
     return { ok: false, reason: "daemon_unavailable", detail: versionStderr }
   }
@@ -104,7 +104,7 @@ function dockerUnavailableHints(probe: Extract<DockerDaemonProbe, { ok: false }>
   return hints
 }
 
-/** @deprecated Tests only — use `reportDockerUnavailable`. */
+/** @deprecated Tests only: use `reportDockerUnavailable`. */
 export function formatDockerUnavailableMessage(
   probe: Extract<DockerDaemonProbe, { ok: false }>,
 ): string {
@@ -142,7 +142,7 @@ export function reportDockerUnavailable(
 export function requireDockerDaemon(opts?: DockerReportOptions): void {
   const probe = probeDockerDaemon()
   if (probe.ok) return
-  // Dev TUI patches console — restore stderr before printing a fatal message.
+  // Dev TUI patches console, restore stderr before printing a fatal message.
   if (getActiveDevSession()) {
     endDevSession()
   }

package/src/engine-client.ts

@@ -1,5 +1,5 @@
 /**
- * engine-client.ts — subprocess-based engine invocation.
+ * engine-client.ts: subprocess-based engine invocation.
  *
  * Replaces the former HTTP-based engine client (Docker container API).
  * All callers use the same interface; only the transport changed.
@@ -99,7 +99,7 @@ async function getEngineBin(): Promise<string> {
     // Otherwise (no valid project config) fall through to default cache scan.
   }
 
-  // No config found — scan the cache for any available engine binary.
+  // No config found: scan the cache for any available engine binary.
   const platform = currentPlatform()
   const engineCacheDir = join(homedir(), ".supatype", "cache", "engine")
   try {
@@ -208,7 +208,7 @@ export async function engineRequest<T = unknown>(
   try {
     return JSON.parse(result.stdout) as T
   } catch {
-    // Non-JSON stdout — return as message.
+    // Non-JSON stdout: return as message.
     return { message: result.stdout.trim() } as T
   }
 }

package/src/engine-push-output.ts

@@ -43,7 +43,7 @@ export function parseEnginePushOutput(output: string): EnginePushResult | null {
 export function formatEnginePushMessage(result: EnginePushResult): string {
   if (result.status === "up_to_date") {
     if (result.admin_refreshed) {
-      return "Schema up to date — Studio metadata synced."
+      return "Schema up to date, Studio metadata synced."
     }
     return "Schema up to date."
   }

package/src/ensure-binary.ts

@@ -11,8 +11,26 @@ import {
   type Component,
 } from "./binary-cache.js"
 import { isDownloadInProgress, waitForComponentDownload } from "./binary-download-lock.js"
+import { currentLibc } from "./cli-artifacts.js"
 import type { SupatypeProjectConfig } from "./project-config.js"
 
+/**
+ * Components are published for glibc only, so on Alpine the CLI itself runs (it has a musl
+ * build) while everything it downloads cannot start. Said once, before the first download,
+ * because the alternative is a dynamic loader error naming a file the user never asked for.
+ */
+let warnedAboutMusl = false
+function warnIfMusl(component: Component): void {
+  if (warnedAboutMusl || currentLibc() !== "musl") return
+  warnedAboutMusl = true
+  console.warn(
+    `[supatype] This is a musl system (Alpine). Component binaries such as ${component} are ` +
+      "published for glibc only, so they may fail to start here.\n" +
+      "[supatype] Use a glibc image (for example node:22-bookworm) for local stacks, or run " +
+      "against a remote target with `supatype link`.",
+  )
+}
+
 export async function ensureBinary(
   component: Component,
   config: SupatypeProjectConfig,
@@ -26,6 +44,8 @@ export async function ensureBinary(
     }
   }
 
+  warnIfMusl(component)
+
   const version = await resolveVersionFor(component, config)
   const platform = currentPlatform()
 

package/src/ensure-component-binaries.ts

@@ -37,7 +37,7 @@ export async function ensureComponentBinaries(
   const list = describeRequiredHostComponents(components)
   if (provider === "docker") {
     info(
-      `Preparing host CLI tools (${list}) — Compose still runs Postgres and the API stack.`,
+      `Preparing host CLI tools (${list}), Compose still runs Postgres and the API stack.`,
     )
   } else {
     info(`Preparing local runtime components (${list})…`)

package/src/env-file.ts

@@ -10,7 +10,7 @@ import { join } from "node:path"
  * `SUPATYPE_REALTIME_IMAGE` from `.env` and could not override `SUPATYPE_SERVER_IMAGE`, because the
  * latter is derivable from a pin and the former is not. Same file, same shape, different rules.
  */
-export const MANAGED_MARKER = "# supatype:managed — value from versions in supatype.config.ts"
+export const MANAGED_MARKER = "# supatype:managed, value from versions in supatype.config.ts"
 
 interface EnvLine {
   /** `KEY` for an assignment, undefined for comments and blanks. */
@@ -47,7 +47,7 @@ function parseLines(text: string): EnvLine[] {
 
 export interface UpsertOptions {
   /**
-   * Keys to delete — but only where the CLI wrote them (see [`MANAGED_MARKER`]). A hand-written value
+   * Keys to delete: but only where the CLI wrote them (see [`MANAGED_MARKER`]). A hand-written value
    * is left alone, because the operator putting an image tag in `.env` is the documented way to run a
    * local build and deleting it silently sent them back to `:latest`.
    */

package/src/field-masking-tier.ts

@@ -1,10 +1,10 @@
 /**
- * Which mechanism will enforce this project's per-column rules — decided offline.
+ * Which mechanism will enforce this project's per-column rules, decided offline.
  *
  * The engine makes the same decision at push time by asking the database whether `supatype_mask` is
  * installed. The CLI has to answer earlier: it writes `PGRST_DB_SCHEMA` when it generates compose,
  * before any database necessarily exists. It can, because the extension needs
- * `shared_preload_libraries` and a compiled library on the host, so exactly one path ships it —
+ * `shared_preload_libraries` and a compiled library on the host, so exactly one path ships it,
  * `supatype/postgres`. Everything else gets the view tier:
  *
  * | Config                                       | Ships the extension | Tier      |
@@ -16,7 +16,7 @@
  *
  * Deliberately **not** "is the database external": a native `supatype dev` has no extension either,
  * and treating it as tier 1 would point PostgREST at a schema whose tables the API roles no longer
- * hold privileges on — every request denied.
+ * hold privileges on: every request denied.
  *
  * The one case this cannot call is a self-managed Postgres where the operator compiled and installed
  * the extension themselves and points at it with `database.external`. They set `schema.api_schemas`
@@ -25,7 +25,7 @@
 
 import { existsSync } from "node:fs"
 // Statically imported: these packages are ESM, where `require` does not exist. The first attempt used
-// it for a lazy import and every command that generates compose would have thrown at runtime — caught
+// it for a lazy import and every command that generates compose would have thrown at runtime, caught
 // by the tests that run the built binary rather than the source.
 import { loadSchemaAst } from "./config.js"
 export { nativeMaskLibraryPresent } from "./postgres-ctl.js"
@@ -77,7 +77,7 @@ export function schemaHasFieldRules(ast: unknown): boolean {
 export function fieldMaskingTier(
   config: SupatypeProjectConfig,
   ast: unknown,
-  /** Set on the native path once the Postgres install is known — see [`nativeMaskLibraryPresent`]. */
+  /** Set on the native path once the Postgres install is known, see [`nativeMaskLibraryPresent`]. */
   maskLibraryPresent?: boolean,
 ): FieldMaskingTier {
   if (!schemaHasFieldRules(ast)) return "none"
@@ -88,7 +88,7 @@ export function fieldMaskingTier(
 /**
  * The tier for a project on disk, loading its schema to see whether any column is masked.
  *
- * A schema that fails to load falls back to `"none"` — the default exposed-schema list. Deciding the
+ * A schema that fails to load falls back to `"none"`, the default exposed-schema list. Deciding the
  * tier is the wrong moment to report a syntax error, and `push`/`dev` do it properly moments later
  * with the file and line.
  */

package/src/functions-deno-types.ts

@@ -23,7 +23,7 @@ export function functionsDenoAmbientSource(): string {
   return `/**
  * ${MARKER}.
  * Runtime is Deno; this file covers APIs edge functions commonly use.
- * Do not add \`@types/deno\` to the app package.json — it leaks into the
+ * Do not add \`@types/deno\` to the app package.json, it leaks into the
  * whole project when root tsconfig has no \`"types"\` field.
  *
  * Optional: for the full Deno API, install the Deno VS Code/Cursor extension
@@ -75,7 +75,7 @@ declare namespace Deno {
 `
 }
 
-/** `functions/tsconfig.json` — owns function files so the app config can exclude them. */
+/** `functions/tsconfig.json`: owns function files so the app config can exclude them. */
 export function functionsTsConfigSource(): string {
   return `{
   "compilerOptions": {
@@ -166,7 +166,7 @@ function ensureRootTsconfigExcludesFunctions(
     writeFileSync(path, `${JSON.stringify(asJson, null, 2)}\n`, "utf8")
     return "updated"
   } catch {
-    // JSONC / trailing commas — try a conservative string splice into an existing exclude array.
+    // JSONC / trailing commas, try a conservative string splice into an existing exclude array.
     if (/"exclude"\s*:\s*\[/.test(raw)) {
       const next = raw.replace(/("exclude"\s*:\s*\[)/, `$1\n    "functions",`)
       if (next !== raw) {

package/src/functions-router-gen.ts

@@ -58,7 +58,7 @@ export function generateFunctionsRouterSource(
   )
   const routes = fns.map((fn, i) => `  "${fn.name}": handler_${i},`)
 
-  return `// Auto-generated — do not edit (regenerated by supatype dev / functions serve)
+  return `// Auto-generated: do not edit (regenerated by supatype dev / functions serve)
 ${imports.join("\n")}
 
 const handlers: Record<string, (req: Request) => Response | Promise<Response>> = {

package/src/gitignore.ts

@@ -1,7 +1,7 @@
 import { existsSync, readFileSync, writeFileSync } from "node:fs"
 import { resolve } from "node:path"
 
-export const SUPATYPE_GITIGNORE_MARKER = "# Supatype — local runtime (contains secrets in link.json)"
+export const SUPATYPE_GITIGNORE_MARKER = "# Supatype, local runtime (contains secrets in link.json)"
 export const SUPATYPE_GITIGNORE_BLOCK = `${SUPATYPE_GITIGNORE_MARKER}
 .env
 .supatype/
@@ -34,7 +34,7 @@ export function ensureSupatypeGitignore(cwd: string, opts?: { silent?: boolean }
   }
 
   if (!opts?.silent) {
-    console.warn("Added .supatype/ to .gitignore (link.json contains secrets — never commit).")
+    console.warn("Added .supatype/ to .gitignore (link.json contains secrets, never commit).")
   }
   return true
 }
@@ -42,7 +42,7 @@ export function ensureSupatypeGitignore(cwd: string, opts?: { silent?: boolean }
 export function warnIfLinkNotGitignored(cwd: string): void {
   if (isSupatypeGitignored(cwd)) return
   console.warn(
-    "\n⚠  Warning: .supatype/ is not in .gitignore — link.json contains tokens and must not be committed.",
+    "\n⚠  Warning: .supatype/ is not in .gitignore, link.json contains tokens and must not be committed.",
   )
   console.warn("   Run with link --fix-gitignore to append the Supatype block.\n")
 }

package/src/hook-upload.ts

@@ -2,7 +2,7 @@
  * Package a project's hooks for a managed stack.
  *
  * Self-hosted stacks need none of this: the worker mounts the project directory, so `hooks/` is already
- * where it looks. A managed project has no directory — its worker reads a ConfigMap, whose keys may only
+ * where it looks. A managed project has no directory, its worker reads a ConfigMap, whose keys may only
  * contain alphanumerics, `-`, `_` and `.`. So the tree is flattened here, where it can be checked and
  * explained, rather than in the deploy route where a dropped file would be silent.
  */
@@ -28,7 +28,7 @@ export interface HookUpload {
  * Rewrite the one import a hook handler is generated to make.
  *
  * `../_supatype/hooks.ts` is a path that cannot survive flattening, and it is the specifier our own
- * scaffold writes — so it is rewritten rather than refused. Any *other* relative import is refused
+ * scaffold writes: so it is rewritten rather than refused. Any *other* relative import is refused
  * below: it would resolve to nothing on the worker, and a hook that fails to import is a hooked table
  * whose writes all start failing.
  */
@@ -55,7 +55,7 @@ function unsupportedImports(source: string): string[] {
  * holding the service-role key with nothing able to call it. Uploading it buys nothing and widens what
  * runs with that credential.
  *
- * Throws with a message meant for a terminal when a handler cannot be flattened faithfully — the
+ * Throws with a message meant for a terminal when a handler cannot be flattened faithfully, the
  * alternative is a deploy that succeeds and a hook that fails to import, which reads to the caller as
  * the table's writes being broken for no visible reason.
  */

package/src/hooks-generator.ts

@@ -1,5 +1,5 @@
 /**
- * Generate `functions/_supatype/hooks.ts` — the typed handler surface for model hooks.
+ * Generate `functions/_supatype/hooks.ts`: the typed handler surface for model hooks.
  *
  * Generated into the project rather than shipped as a package, for two reasons: a Deno function
  * resolves a relative `.ts` import with no npm involved, and the types then move in lockstep with the
@@ -40,7 +40,7 @@ function hookedModels(ast: unknown): HookedModel[] {
  * The module source, or `null` when no model declares a hook.
  *
  * Returning null rather than an empty module keeps a `_supatype/hooks.ts` from appearing in projects
- * that have no hooks — a generated file nobody imports is a file somebody eventually edits.
+ * that have no hooks, a generated file nobody imports is a file somebody eventually edits.
  */
 export function generateHooksModule(ast: unknown): string | null {
   const models = hookedModels(ast)
@@ -56,7 +56,7 @@ export function generateHooksModule(ast: unknown): string | null {
     )
     .join("\n")
 
-  return `// Generated by supatype CLI — do not edit manually.
+  return `// Generated by supatype CLI, do not edit manually.
 //
 // Typed handlers for the models that declare \`hooks\`. Import from a function beside it:
 //
@@ -103,7 +103,7 @@ interface HookBase {
 /**
  * The rows this request is about to overwrite, fetched only if you ask.
  *
- * Resolved by the server from the in-flight request's own filter, as the caller's own role — so it
+ * Resolved by the server from the in-flight request's own filter, as the caller's own role, so it
  * cannot show you rows the caller could not read, and you cannot widen the filter. Capped:
  * \`truncated\` is true when there were more, in which case acting on what you got means acting on a
  * prefix you did not choose.
@@ -131,7 +131,7 @@ export type BeforeDeleteContext<T extends HookedTable> = HookBase & {
 
 export type AfterChangeContext<T extends HookedTable> = HookBase & {
   readonly operation: "insert" | "update"
-  /** Written rows — present only when the caller sent \`Prefer: return=representation\`. */
+  /** Written rows: present only when the caller sent \`Prefer: return=representation\`. */
   readonly rows?: HookTables[T]["Row"][]
 }
 
@@ -201,7 +201,7 @@ interface WireContext {
  *
  * The outcome travels as the **HTTP status**: 200 for proceed, 4xx for a rejection. That keeps the
  * contract in the transport rather than in a second envelope inside the body, so a hook written by
- * hand — or in another language — needs to know nothing about this file.
+ * hand: or in another language, needs to know nothing about this file.
  */
 export function hook(handler: AnyHandler): (req: Request) => Promise<Response> {
   return async (req: Request): Promise<Response> => {
@@ -263,7 +263,7 @@ export function hook(handler: AnyHandler): (req: Request) => Promise<Response> {
  *
  * The worker takes **one default export per function directory**, so \`hook(single)\` is one hook per
  * directory. That is fine for a single moderation rule and tedious for a model whose whole lifecycle
- * you want in one place — hence this. Point every event at the same function name in the schema:
+ * you want in one place, hence this. Point every event at the same function name in the schema:
  *
  *   hooks: { beforeChange: "post-hooks", afterChange: "post-hooks" }
  *
@@ -284,7 +284,7 @@ export function hooks(handlers: Record<string, AnyHandler | undefined>): (req: R
  * The stack's address from this worker's point of view.
  *
  * \`SUPATYPE_INTERNAL_URL\` in Compose is the in-network gateway; \`SUPATYPE_URL\` is the same value
- * there. Never a public or host URL — \`localhost\` inside this container is this container.
+ * there. Never a public or host URL, \`localhost\` inside this container is this container.
  */
 function stackBaseUrl(): string {
   const base =
@@ -330,7 +330,7 @@ function json(body: unknown, status: number): Response {
  * Replace cross-package type imports the client types use but a hook cannot resolve.
  *
  * `RichText` normally generates `import("@supatype/types/lexical").SerializedEditorState`. That works
- * in an app, where the package is installed — but this file lives in `functions/`, is imported by a
+ * in an app, where the package is installed, but this file lives in `functions/`, is imported by a
  * Deno handler, and has no node_modules to reach into. Left alone, any hooked model with a rich-text
  * column emitted a module that failed to compile in the user's editor. Caught by compiling the
  * generated file in a test rather than by a reader reporting it.

package/src/index.ts

@@ -1,5 +1,5 @@
 /**
- * @supatype/cli — programmatic API for invoking the engine.
+ * @supatype/cli: programmatic API for invoking the engine.
  *
  * For CLI usage: use the `supatype` binary.
  */

package/src/init-project-detect.ts

@@ -62,7 +62,7 @@ function detectStaticDir(cwd: string): string {
   return "./public"
 }
 
-/** Inspect `cwd` before init prompts — Vite, static dir, existing Supatype config. */
+/** Inspect `cwd` before init prompts, Vite, static dir, existing Supatype config. */
 export function detectProjectSetup(cwd: string): DetectedProjectSetup {
   let entries: string[] = []
   try {

package/src/link.ts

@@ -23,7 +23,7 @@ export interface ProjectLink {
   defaultEnvironment: string
   /** Access token (cloud user JWT) or self-host SERVICE_ROLE_KEY. */
   token?: string
-  /** Cloud GoTrue refresh token — used to renew short-lived access JWTs. */
+  /** Cloud GoTrue refresh token, used to renew short-lived access JWTs. */
   refreshToken?: string
   orgId?: string | undefined
   cloudApiUrl?: string

package/src/local-secrets.ts

@@ -2,7 +2,7 @@
  * The secrets the local stack runs with.
  *
  * **Read from `.env`, never pinned back into it.** These used to be hardcoded constants that
- * `supatype dev` wrote to `.env` on every run — which meant a project could not hold its own
+ * `supatype dev` wrote to `.env` on every run, which meant a project could not hold its own
  * secrets: whatever `supatype init` or the developer put there was replaced by the published
  * defaults on the next `dev`, and the same `.env` then went to a server. Resolving instead of
  * pinning is what lets a generated secret survive to production.
@@ -16,7 +16,7 @@ import { hasEnvValue, readEnvValue } from "./env-file.js"
 /**
  * Fallback JWT signing secret for a project that has none.
  *
- * Published, therefore worthless as a secret — anyone can mint a token for a stack still using
+ * Published, therefore worthless as a secret, anyone can mint a token for a stack still using
  * it. That is precisely why `init` generates one instead of relying on this.
  */
 export const FALLBACK_JWT_SECRET = "super-secret-jwt-token-with-at-least-32-characters-long"
@@ -52,7 +52,7 @@ export function devAuthenticatorPassword(cwd: string): string {
  *
  * The compose template requires these with `${VAR:?}` rather than defaulting them, because a
  * default is how a published constant ends up signing a real deployment's tokens. That only
- * works if something guarantees presence — this does, for any project that predates
+ * works if something guarantees presence, this does, for any project that predates
  * `supatype init` writing them.
  *
  * **Fills with the fallback, does not generate.** Preserving the value such a project has been
@@ -72,11 +72,11 @@ export function seedMissingLocalSecrets(cwd: string): Record<string, string> {
 }
 
 /**
- * The database identity the local stack connects with — seeded, never overwritten.
+ * The database identity the local stack connects with, seeded, never overwritten.
  *
  * `POSTGRES_DB` in particular is *project configuration*: `supatype init` sets it to the
  * project name, and the running container's database was created from it. Rewriting it to a
- * default afterwards points every tool at a database that does not exist — observed as
+ * default afterwards points every tool at a database that does not exist, observed as
  * `supatype push` failing with `FATAL: database "supatype" does not exist` on a project called
  * something else, because the push path rewrote `.env` after `self-host compose up` had already
  * created the database under its real name.