@supatype/cli 0.1.7 → 0.1.9

package/src/pull-utils.ts

@@ -1,5 +1,5 @@
 /**
- * Utilities for `pull` and `introspect` — map engine DatabaseState to Model<> scaffold.
+ * Utilities for `pull` and `introspect`, map engine DatabaseState to Model<> scaffold.
  */
 
 export interface DbColumnState {
@@ -104,7 +104,7 @@ export function pgTypeToModelField(col: ColumnInfo): string {
     const base = name.replace(/_id$/, "")
     const rel = base.replace(/_([a-z])/g, (_, c: string) => c.toUpperCase())
     const relName = rel.charAt(0).toUpperCase() + rel.slice(1)
-    return `${name}: UUID\n  // TODO: relation — RelatedTo<"${relName}">`
+    return `${name}: UUID\n  // TODO: relation, RelatedTo<"${relName}">`
   }
   if (name === "created_at" || name === "updated_at") {
     return `${name}: Timestamp`
@@ -160,7 +160,7 @@ export function databaseStateToSchemaScaffold(state: DatabaseStateJson): string
   const skipTables = new Set(["spatial_ref_sys", "schema_migrations"])
 
   const lines: string[] = [
-    "// DRAFT — generated by `supatype pull`. Review access rules, relations, and indexes before push.",
+    "// DRAFT: generated by `supatype pull`. Review access rules, relations, and indexes before push.",
     'import type { Model, Public, UUID, Timestamp, Optional, Unique, Email, Slug, SupatypeAuthUserId, JSON, Int, BigInt } from "@supatype/types"',
     "",
   ]
@@ -231,7 +231,7 @@ export function printIntrospectSummary(state: DatabaseStateJson): void {
   }
 }
 
-/** @deprecated Legacy pull helper — use {@link pgTypeToModelField}. */
+/** @deprecated Legacy pull helper, use {@link pgTypeToModelField}. */
 export function pgTypeToField(col: ColumnInfo): string {
   const opts: Record<string, unknown> = { required: !col.nullable }
   if (col.isPrimary) opts["primaryKey"] = true

package/src/realtime-launch.ts

@@ -46,7 +46,7 @@ export async function resolveRealtimeLaunch(
       return { bin: process.execPath, args: [entry] }
     }
     throw new Error(
-      "realtime binary not available — run `supatype update` or set overrides.realtime in supatype.config.ts",
+      "realtime binary not available, run `supatype update` or set overrides.realtime in supatype.config.ts",
     )
   }
 }

package/src/release-pins.ts

@@ -1,6 +1,6 @@
 /**
  * Release pins read from files under packages/cli/releases/.
- * CI (deno-releases workflow) uses the same paths — bump only releases/deno/VERSION.
+ * CI (deno-releases workflow) uses the same paths, bump only releases/deno/VERSION.
  */
 
 import { readFileSync } from "node:fs"
@@ -17,7 +17,7 @@ function readPinFile(...segments: string[]): string {
   } catch {
     throw new Error(
       `Missing release pin file: ${path}\n` +
-        "Expected packages/cli/releases/… — reinstall @supatype/cli or build from the monorepo.",
+        "Expected packages/cli/releases/…: reinstall @supatype/cli or build from the monorepo.",
     )
   }
   const version = raw.trim()

package/src/resolve-api-url.ts

@@ -35,7 +35,7 @@ export function resolveProjectApiUrl(cwd: string): string {
       return fromConfig.replace(/\/+$/, "")
     }
   } catch {
-    // No supatype.config — fall through to PORT default.
+    // No supatype.config: fall through to PORT default.
   }
 
   const port = readEnvValue(cwd, "PORT", "54321").trim() || "54321"

package/src/resolve-target.ts

@@ -48,7 +48,7 @@ export interface DeployTarget {
   refreshToken?: string | undefined
   orgId?: string | undefined
   link: ProjectLink | null
-  /** Project cwd — needed to persist refreshed cloud tokens. */
+  /** Project cwd: needed to persist refreshed cloud tokens. */
   cwd?: string
   /** Engine subprocess path when mode is direct or local without control plane. */
   databaseUrl?: string

package/src/rest-cache-admin.ts

@@ -34,7 +34,7 @@ function serviceRoleKey(cwd: string): string {
     readEnvValue(cwd, "SUPATYPE_SERVICE_ROLE_KEY", "").trim() ||
     readEnvValue(cwd, "SERVICE_ROLE_KEY", "").trim()
   if (!key) {
-    throw new Error("SERVICE_ROLE_KEY not found in .env — run supatype dev or supatype keys")
+    throw new Error("SERVICE_ROLE_KEY not found in .env, run supatype dev or supatype keys")
   }
   return key.trim()
 }
@@ -66,7 +66,7 @@ function formatCacheApiError(
     return "REST server cache is not available on this plan or deployment."
   }
   if (status === 503 && trimmed.includes("valkey")) {
-    return "Valkey is not configured — server-side REST cache requires Valkey (supatype dev with docker)."
+    return "Valkey is not configured, server-side REST cache requires Valkey (supatype dev with docker)."
   }
   return `${operation} failed (${status}): ${trimmed || "(empty body)"}`
 }

package/src/runtime-routes.ts

@@ -17,7 +17,7 @@ export interface RuntimeRouteOptions {
   functionsServiceUrl?: string
   /**
    * Self-host Compose: Kong forwards API traffic to supatype-server (unified gateway),
-   * which proxies to internal services — same model as `supatype dev`.
+   * which proxies to internal services, same model as `supatype dev`.
    */
   unifiedGateway?: boolean
   /** Studio UI upstream (default: in-compose `studio:3002`). */
@@ -161,7 +161,7 @@ function runtimeRouteSpecUnified(opts: RuntimeRouteOptions): RuntimeRoute[] {
 
 /**
  * Legacy split-stack routes (PostgREST/storage/realtime directly from Kong).
- * Kept for tests or explicit opt-out only — self-host uses unifiedGateway.
+ * Kept for tests or explicit opt-out only, self-host uses unifiedGateway.
  */
 function runtimeRouteSpecSplit(opts: RuntimeRouteOptions): RuntimeRoute[] {
   const studioUrl = studioServiceUrl(opts)

package/src/schema-ast-v2.ts

@@ -1,5 +1,5 @@
 /**
- * AST v2 wire format — canonical types and emitters.
+ * AST v2 wire format, canonical types and emitters.
  * Parsers build {@link ParsedField}; only `emitField` / `emitModel` / `emitSchema` produce JSON.
  */
 
@@ -30,7 +30,7 @@ export interface FieldAnnotations {
   platform?: PlatformFieldAnnotations
 }
 
-/** Kernel facts only — never db/platform keys at this layer. */
+/** Kernel facts only: never db/platform keys at this layer. */
 export interface KernelFieldFacts {
   required?: boolean
   primaryKey?: boolean
@@ -62,7 +62,7 @@ export interface KernelFieldFacts {
   index?: boolean
 }
 
-/** Internal parse result — not serialized. */
+/** Internal parse result: not serialized. */
 export interface ParsedField {
   kind: string
   kernel: KernelFieldFacts
@@ -302,7 +302,7 @@ export function emitModel(
     options,
     annotations: {
       db: { tableName, indexes },
-      // Hooks sit in `platform` beside `access`: they are an API-layer concern, not a column one —
+      // Hooks sit in `platform` beside `access`: they are an API-layer concern, not a column one,
       // supatype-server reads them, Postgres never sees them.
       platform: { access, ...(Object.keys(hooks).length > 0 && { hooks }) },
     },

package/src/schema-push-lock.ts

@@ -87,7 +87,7 @@ export async function withComposeSchemaPushLock<T>(
   //
   // Killing the local `docker` client does not stop the process inside the container: `docker
   // compose exec` does not forward the signal. With a sleeping session that meant every push
-  // left a backend holding this advisory lock for 24 hours — so `supatype push` never exited and
+  // left a backend holding this advisory lock for 24 hours, so `supatype push` never exited and
   // the next push blocked on it. Observed end-to-end before this change.
   //
   // Closing stdin *does* propagate: psql sees EOF, exits, and the session ends, which is what
@@ -102,7 +102,7 @@ export async function withComposeSchemaPushLock<T>(
   holder.stdin?.write(
     `SELECT pg_advisory_lock(${SCHEMA_PUSH_LOCK_CLASSID}, ${SCHEMA_PUSH_LOCK_OBJID});\n`,
   )
-  // Deliberately not ended — the open pipe is what keeps the session, and the lock, alive.
+  // Deliberately not ended: the open pipe is what keeps the session, and the lock, alive.
   holder.stderr?.on("data", (chunk: Buffer) => {
     stderrBuf += chunk.toString()
   })
@@ -131,7 +131,7 @@ export async function withComposeSchemaPushLock<T>(
 /**
  * End the holder session, then confirm the lock is actually gone.
  *
- * Closing stdin is the mechanism; the check is because a leaked holder is silent and expensive —
+ * Closing stdin is the mechanism; the check is because a leaked holder is silent and expensive,
  * it blocks every later push. If EOF did not do it, terminate the backend directly.
  */
 async function releaseHolder(

package/src/scripts/postinstall.ts

@@ -1,5 +1,5 @@
 /**
- * Postinstall script — @supatype/cli global/project install.
+ * Postinstall script: @supatype/cli global/project install.
  *
  * Host binaries (engine, server, postgres, deno) are downloaded on demand:
  * - native provider: first supatype dev / supatype update

package/src/self-host-compose.ts

@@ -130,7 +130,7 @@ export function composePullNeedsIgnoreFailures(
 /**
  * Schema-engine image for a one-off `docker compose run` when pushing schema.
  * Uses config pin when set; otherwise CDN engine semver (Docker Hub `:latest` can lag).
- * Does not touch `.env` — server/postgres still use compose `:latest` defaults.
+ * Does not touch `.env`, server/postgres still use compose `:latest` defaults.
  */
 export async function schemaEngineImageForPush(
   config: SupatypeProjectConfig,
@@ -174,7 +174,7 @@ export function staticDirForCompose(config: SupatypeProjectConfig): string | und
 /**
  * Bind-mount source for `/project` in generated compose files.
  * Paths are resolved from `--project-directory` (always the project root in `runDockerCompose`),
- * not from the compose file directory — use `.` not `../..`.
+ * not from the compose file directory, use `.` not `../..`.
  */
 function projectMountPath(_cwd: string): string {
   return "."
@@ -198,13 +198,13 @@ function kongMountPath(_cwd: string): string {
  *
  * One expression instead of six identical constructions of `@db:5432`. With an external database it
  * becomes `${DATABASE_URL:?…}`: the URL is the operator's, so there is nothing for the generator to
- * build — and interpolating the value into the compose file would write a password into a generated
+ * build: and interpolating the value into the compose file would write a password into a generated
  * file. Compose resolves the variable from `.env` at up-time, the same place the config's
  * `process.env.DATABASE_URL` read it from.
  */
 function ownerDatabaseUrl(config: SupatypeProjectConfig, scheme = "postgresql"): string {
   if (usesExternalDatabase(config)) {
-    return "${DATABASE_URL:?DATABASE_URL is missing from .env — required by database.external}"
+    return "${DATABASE_URL:?DATABASE_URL is missing from .env, required by database.external}"
   }
   return (
     `${scheme}://\${POSTGRES_USER:-supatype_admin}:` +
@@ -217,7 +217,7 @@ function ownerDatabaseUrl(config: SupatypeProjectConfig, scheme = "postgresql"):
  * PostgREST's DSN, which connects as `authenticator` rather than the owner.
  *
  * For an external database the host, port, database and query string are taken from the operator's
- * URL and only the password stays a variable. The alternative — a second full URL in `.env` — is one
+ * URL and only the password stays a variable. The alternative, a second full URL in `.env`, is one
  * more thing to keep in step with the first, and two URLs that disagree about *which database* is a
  * split-brain nobody notices until the API is serving one and migrations are landing in the other.
  * A hostname is not the secret here; the password is, and it stays out of the generated file.
@@ -237,7 +237,7 @@ function postgrestDatabaseUrl(config: SupatypeProjectConfig): string {
 /** Host Vite dev server as seen from Kong inside Docker Compose. */
 export const COMPOSE_STUDIO_HOST_URL = "http://host.docker.internal:3002"
 
-/** Studio container — always Docker Hub unless SUPATYPE_STUDIO_IMAGE is set in .env. */
+/** Studio container: always Docker Hub unless SUPATYPE_STUDIO_IMAGE is set in .env. */
 function studioServiceBlock(): string {
   return `    image: \${SUPATYPE_STUDIO_IMAGE:-supatype/studio:latest}`
 }
@@ -281,7 +281,7 @@ export interface SelfHostComposeOptions {
   /**
    * Which mechanism enforces per-column rules, when the caller knows.
    *
-   * Only the call sites that have loaded the schema can say — see `field-masking-tier.ts`. Left
+   * Only the call sites that have loaded the schema can say, see `field-masking-tier.ts`. Left
    * unset, the exposed schema list is today's, which is correct for every project without field
    * rules and for every project on `supatype/postgres`.
    */
@@ -385,7 +385,7 @@ ${external ? "" : "  db-data:\n"}  minio-data:
 
   // `depends_on` for the services that talk to Postgres. With an external database there is no
   // container to wait on, so the clause disappears entirely and each service retries on connect
-  // instead — which is also what covers a database that restarts *after* boot, something no
+  // instead: which is also what covers a database that restarts *after* boot, something no
   // healthcheck ever did.
   const dbDependencyClause = external
     ? ""
@@ -412,8 +412,8 @@ ${external ? "" : "  db-data:\n"}  minio-data:
       DATABASE_URL: "${ownerUrl}"
       JWT_SECRET: \${JWT_SECRET:?JWT_SECRET is missing from .env}
       SLOT_NAME: supatype_realtime
-      # Matches the publication the supatype/postgres image creates. Read by nothing today —
-      # wal2json decodes from the slot — and kept for a future pgoutput decoder.
+      # Matches the publication the supatype/postgres image creates. Read by nothing today,
+      # wal2json decodes from the slot, and kept for a future pgoutput decoder.
       PUBLICATION_NAME: supatype_realtime
 ${dbDependency}`
     : `  # No \`realtime\` service: database.external.realtime is false. Subscriptions are
@@ -443,7 +443,7 @@ ${dbPorts}    volumes:
       - db-data:/var/lib/postgresql/data
     healthcheck:
       # -h 127.0.0.1 forces TCP. Without it \`pg_isready\` uses the Unix socket, which the
-      # entrypoint's temporary init server is already listening on while TCP is still refused —
+      # entrypoint's temporary init server is already listening on while TCP is still refused,
       # so the container reported healthy, \`depends_on: service_healthy\` released, and every
       # service that connects over the network died with ECONNREFUSED on first boot. PostgREST
       # survived only because it retries. Observed on a clean stack: server, storage and
@@ -466,7 +466,7 @@ ${dbServiceBlock}  postgrest:
     expose:
       - "3000"
     environment:
-      # Connects as \`authenticator\`, not \${POSTGRES_USER} — which is a superuser, and a
+      # Connects as \`authenticator\`, not \${POSTGRES_USER}, which is a superuser, and a
       # superuser session may SET ROLE to any role in the cluster, so a request whose JWT
       # named one got it. \`authenticator\` is NOINHERIT with membership in only
       # anon/authenticated/service_role, so the same SET ROLE is refused.
@@ -476,7 +476,7 @@ ${dbServiceBlock}  postgrest:
       PGRST_DB_URI: ${postgrestUrl}
       # Derived from schema.pg_schema (or schema.api_schemas). Hardcoding this is why choosing a
       # non-public pg_schema used to give a correct push and an API that answered PGRST106 for
-      # everything — the engine moved and PostgREST was never told.
+      # everything: the engine moved and PostgREST was never told.
       PGRST_DB_SCHEMA: "${apiSchemaList(config, options?.fieldMaskingTier)}"
       PGRST_DB_ANON_ROLE: anon
       PGRST_JWT_SECRET: \${JWT_SECRET:?JWT_SECRET is missing from .env}
@@ -511,12 +511,12 @@ ${dbDependency}
       # cloud, for isolation the route boundary already provides.
       SUPATYPE_HOOKS_ROOT: /project/hooks
       PORT: "8001"
-      # In-compose loopback to Kong (not API_EXTERNAL_URL / localhost — unreachable from this container).
+      # In-compose loopback to Kong (not API_EXTERNAL_URL / localhost, unreachable from this container).
       SUPATYPE_URL: http://kong:8000
       SUPATYPE_INTERNAL_URL: http://kong:8000
       SUPATYPE_ANON_KEY: \${ANON_KEY:-}
-      # Present so the worker can hand it to hooks — which are procedural and unreachable from
-      # outside — and to the public functions named below. Withheld from every other handler before
+      # Present so the worker can hand it to hooks, which are procedural and unreachable from
+      # outside: and to the public functions named below. Withheld from every other handler before
       # any of them is imported: a function is a public endpoint, and an ambient admin credential made
       # each one able to read past every access rule in the schema.
       SUPATYPE_SERVICE_ROLE_KEY: \${SERVICE_ROLE_KEY:-}
@@ -629,7 +629,7 @@ ${kongDependsOn}${kongValkeyDepends}
 ${volumesBlock}`
 }
 
-/** In-compose worker address — matches the `functions-worker` service this file always generates. */
+/** In-compose worker address: matches the `functions-worker` service this file always generates. */
 const COMPOSE_FUNCTIONS_WORKER_URL = "http://functions-worker:8001"
 
 function ensureComposeManifest(cwd: string, config: SupatypeProjectConfig): void {
@@ -653,7 +653,7 @@ function ensureComposeManifest(cwd: string, config: SupatypeProjectConfig): void
     ...(realtimeEnabled(config) && { realtime_url: "http://realtime:4000" }),
     // True because this file *always* generates a `functions-worker` service and hands the server
     // `SUPATYPE_FUNCTIONS_WORKER_URL`. It said false, so the server answered 404 for every function
-    // in a stack that was running a worker for them — provisioned, then switched off.
+    // in a stack that was running a worker for them, provisioned, then switched off.
     functions_enabled: true,
     functions_worker_url: COMPOSE_FUNCTIONS_WORKER_URL,
   }
@@ -664,8 +664,8 @@ function ensureComposeManifest(cwd: string, config: SupatypeProjectConfig): void
  * Turn functions on in a manifest written by an older CLI, leaving every other key alone.
  *
  * Without this, only new projects get working functions: a stack generated before the flag was
- * corrected keeps `functions_enabled: false` on disk, and regenerating the compose file — the
- * obvious thing to try — does not fix it.
+ * corrected keeps `functions_enabled: false` on disk, and regenerating the compose file, the
+ * obvious thing to try, does not fix it.
  */
 function repairComposeFunctionsFlag(manifestPath: string): void {
   let parsed: Record<string, unknown>
@@ -696,7 +696,7 @@ function ensureProjectFunctionsDir(cwd: string, config: SupatypeProjectConfig):
  * The config's external URL and `.env`'s `DATABASE_URL` must be the same string.
  *
  * The CLI resolves the URL from config; Compose substitutes `.env` at up-time. If the two disagree,
- * `push` migrates one database while the services serve another — which reads as data loss and
+ * `push` migrates one database while the services serve another, which reads as data loss and
  * isn't. It also makes the generated GoTrue DSN wrong, since whether to append `search_path` with
  * `?` or `&` is decided from the config URL's query string.
  */
@@ -731,14 +731,14 @@ function assertExternalUrlMatchesEnv(cwd: string, config: SupatypeProjectConfig)
  * A loopback host in the external URL cannot work from inside a container.
  *
  * `127.0.0.1` means "this container" to every service in the stack, so an external database on the
- * host machine is unreachable — while the *CLI* reaches it fine, because the CLI runs on the host.
+ * host machine is unreachable, while the *CLI* reaches it fine, because the CLI runs on the host.
  * That asymmetry is the trap: `supatype db check` passes, `push` applies the schema, and then
  * storage, realtime and the server all die with ECONNREFUSED against their own loopback. Found by
  * rehearsing exactly that.
  *
  * Refused rather than rewritten. The compose file interpolates one `${DATABASE_URL}` for every
  * service, so silently substituting a different host would mean the CLI and the stack no longer
- * agree about which database they are talking to — the thing every other check here exists to
+ * agree about which database they are talking to, the thing every other check here exists to
  * prevent.
  */
 export function loopbackExternalHost(config: SupatypeProjectConfig): string | undefined {
@@ -767,7 +767,7 @@ function assertExternalUrlReachableFromContainers(config: SupatypeProjectConfig)
   fatalError(
     `database.external.url points at ${host}, which no container can reach`,
     [
-      "Inside a container, localhost is that container — not the machine running Docker. Every",
+      "Inside a container, localhost is that container, not the machine running Docker. Every",
       "service in the stack would fail to connect, while the CLI succeeds because it runs on the host.",
       "",
       "Use a host the containers can resolve:",
@@ -902,7 +902,7 @@ export function runDockerCompose(
   return result.status ?? 1
 }
 
-/** Compose project name for a Supatype project — isolates docker state per project. */
+/** Compose project name for a Supatype project, isolates docker state per project. */
 export function composeProjectName(projectName: string): string {
   const slug = projectName.toLowerCase().replace(/[^a-z0-9_-]+/g, "-").replace(/^-+|-+$/g, "")
   return `supatype-${slug || "project"}`

package/src/service-role-check.ts

@@ -2,7 +2,7 @@
  * Check that every name in `functions.serviceRole` is a function that exists.
  *
  * The grant fails **closed**: a typo, or a function that has since been renamed, means that function
- * quietly does not receive the service-role key. Nothing breaks loudly — the handler simply reads
+ * quietly does not receive the service-role key. Nothing breaks loudly, the handler simply reads
  * `undefined` and whatever it does with the key stops working, at runtime, in a deploy that reported
  * success. So the name is checked where it is declared, against the directory it must match.
  *
@@ -77,7 +77,7 @@ export function checkServiceRoleRoutes(
       // Not an error: it was the documented form once, and the worker grants hooks whatever this says.
       // Still worth saying, because a reader would reasonably assume the line is what does the granting.
       warnings.push(
-        `  "${name}" is not needed — a hook receives the service-role key because only the API server ` +
+        `  "${name}" is not needed, a hook receives the service-role key because only the API server ` +
           `can reach it`,
       )
       continue
@@ -85,7 +85,7 @@ export function checkServiceRoleRoutes(
     if (!known.has(name)) {
       const where =
         searched.length > 1 ? ` (searched ${searched.join(", ")})` : ""
-      errors.push(`  "${name}" — no ${primary}/${name}/index.ts${where}`)
+      errors.push(`  "${name}": no ${primary}/${name}/index.ts${where}`)
       missing.push(name)
     }
   }

package/src/storage-provision.ts

@@ -1,7 +1,7 @@
 /**
  * Provision storage buckets declared in a schema AST via the storage server API.
  *
- * The storage server is the authority on bucket existence — going through the API
+ * The storage server is the authority on bucket existence, going through the API
  * ensures it creates any backing resources (directories, S3 buckets, etc.).
  * Buckets already registered return 409 Conflict, which is treated as success.
  */
@@ -76,10 +76,10 @@ export async function provisionBuckets(
       .catch(() => null)
 
     if (res === null) {
-      console.warn(`[storage] Storage API unreachable — skipped bucket "${bucket.id}"`)
+      console.warn(`[storage] Storage API unreachable, skipped bucket "${bucket.id}"`)
       continue
     }
-    if (res.status === 409) continue // already exists — fine
+    if (res.status === 409) continue // already exists, fine
     if (!res.ok) {
       const msg = await res.text().catch(() => res.statusText)
       console.warn(`[storage] Failed to provision bucket "${bucket.id}": ${msg}`)

package/src/studio-dev-server.ts

@@ -20,7 +20,7 @@ export interface StudioDevServerOptions {
    * so fetches hit the Vite proxy (SUPATYPE_PROXY_TARGET) and avoid CORS.
    */
   viteSupatypeUrl: string
-  /** Vite `base` — `/studio/` when behind Kong at `/studio/`; `/` for native dev on :3002. */
+  /** Vite `base`: `/studio/` when behind Kong at `/studio/`; `/` for native dev on :3002. */
   basePath?: string
 }
 

package/src/systemd.ts

@@ -1,5 +1,5 @@
 /**
- * systemd.ts — generate systemd unit files for self-hosted deployments.
+ * systemd.ts: generate systemd unit files for self-hosted deployments.
  *
  * Usage:
  *   generateUnits(config, outputDir)

package/src/target-client.ts

@@ -115,7 +115,7 @@ export async function targetFetch<T>(
       !opts.authRefresh
     ) {
       throw new TargetApiError(
-        `${message}. Session expired — run: supatype login`,
+        `${message}. Session expired, run: supatype login`,
         result.status,
         result.json.code,
       )

package/src/tsx-runner.ts

@@ -13,7 +13,7 @@ import { tmpdir } from "node:os"
 
 const _require = createRequire(import.meta.url)
 
-// The CLI's own source directory — workspace packages are
+// The CLI's own source directory, workspace packages are
 // resolvable from here. Eval snippets are written here so ESM resolution finds them.
 const CLI_SRC_DIR = dirname(fileURLToPath(import.meta.url))