@teispace/next-maker 1.15.0 → 1.16.0

package/dist/src/services/setup/security-headers/headers.d.ts

@@ -0,0 +1,29 @@
+/**
+ * Pure transformation logic for the `setupSecurityHeaders` retrofit.
+ *
+ * Kept separate from `index.ts` so it can be unit-tested with string inputs
+ * without touching the filesystem.
+ */
+/**
+ * The header set the starter ships in `next.config.ts`. Single source of truth
+ * — `setupSecurityHeaders` and the manifest (D1) both consume this list.
+ */
+export declare const SECURITY_HEADERS: ReadonlyArray<{
+    key: string;
+    value: string;
+}>;
+export declare const hasSecurityHeaders: (content: string) => boolean;
+/**
+ * Inject the standard security-headers block into a `next.config.ts` source.
+ *
+ * - Idempotent: returns the input unchanged if a `headers:` key already exists
+ *   anywhere in the file (we never overwrite a user-defined header set).
+ * - Throws if the canonical `const nextConfig: NextConfig = {` shape is missing
+ *   — same contract as the React-Compiler retrofit, so behaviour stays
+ *   predictable across `setup` services.
+ */
+export declare const injectSecurityHeaders: (content: string, headers?: ReadonlyArray<{
+    key: string;
+    value: string;
+}>) => string;
+//# sourceMappingURL=headers.d.ts.map

package/dist/src/services/setup/security-headers/headers.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"headers.d.ts","sourceRoot":"","sources":["../../../../../src/services/setup/security-headers/headers.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH;;;GAGG;AACH,eAAO,MAAM,gBAAgB,EAAE,aAAa,CAAC;IAAE,GAAG,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,CAU1E,CAAC;AAyBF,eAAO,MAAM,kBAAkB,GAAI,SAAS,MAAM,KAAG,OAAuC,CAAC;AAE7F;;;;;;;;GAQG;AACH,eAAO,MAAM,qBAAqB,GAChC,SAAS,MAAM,EACf,UAAS,aAAa,CAAC;IAAE,GAAG,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,CAAoB,KACxE,MAQF,CAAC"}

package/dist/src/services/setup/security-headers/index.d.ts

@@ -0,0 +1,3 @@
+export { hasSecurityHeaders, injectSecurityHeaders, SECURITY_HEADERS } from './headers';
+export declare const setupSecurityHeaders: (projectPath: string) => Promise<void>;
+//# sourceMappingURL=index.d.ts.map

package/dist/src/services/setup/security-headers/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../../src/services/setup/security-headers/index.ts"],"names":[],"mappings":"AAOA,OAAO,EAAE,kBAAkB,EAAE,qBAAqB,EAAE,gBAAgB,EAAE,MAAM,WAAW,CAAC;AAExF,eAAO,MAAM,oBAAoB,GAAU,aAAa,MAAM,KAAG,OAAO,CAAC,IAAI,CAsB5E,CAAC"}

package/dist/src/services/setup/validate-scripts/index.d.ts

@@ -0,0 +1,4 @@
+export { addValidationScripts, type PackageJsonShape, } from './package-modifier';
+export { CHECK_DEPRECATED_SCRIPT, SYNC_ENV_SCRIPT } from './scripts';
+export declare const setupValidationScripts: (projectPath: string) => Promise<void>;
+//# sourceMappingURL=index.d.ts.map

package/dist/src/services/setup/validate-scripts/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../../src/services/setup/validate-scripts/index.ts"],"names":[],"mappings":"AASA,OAAO,EACL,oBAAoB,EACpB,KAAK,gBAAgB,GACtB,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EAAE,uBAAuB,EAAE,eAAe,EAAE,MAAM,WAAW,CAAC;AAOrE,eAAO,MAAM,sBAAsB,GAAU,aAAa,MAAM,KAAG,OAAO,CAAC,IAAI,CA0C9E,CAAC"}

package/dist/src/services/setup/validate-scripts/package-modifier.d.ts

@@ -0,0 +1,19 @@
+import type { PackageManager } from '../../../core/package-manager';
+/**
+ * Pure modifiers for the package.json `scripts` block — separated from the
+ * service so they can be unit-tested without touching the filesystem.
+ */
+export interface PackageJsonShape {
+    scripts?: Record<string, string>;
+    devDependencies?: Record<string, string>;
+    [key: string]: unknown;
+}
+/**
+ * Add the validation scripts (env:sync, check:deprecated, validate) and the
+ * matching tsx/typescript dev-deps, never overwriting a user-defined entry.
+ *
+ * Returns a *new* package.json object — callers pass it through `updateJson`
+ * which already understands "function returns the new value".
+ */
+export declare const addValidationScripts: (pkg: PackageJsonShape, manager: PackageManager) => PackageJsonShape;
+//# sourceMappingURL=package-modifier.d.ts.map

package/dist/src/services/setup/validate-scripts/package-modifier.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"package-modifier.d.ts","sourceRoot":"","sources":["../../../../../src/services/setup/validate-scripts/package-modifier.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,+BAA+B,CAAC;AAEpE;;;GAGG;AAEH,MAAM,WAAW,gBAAgB;IAC/B,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACjC,eAAe,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACzC,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;CACxB;AAgBD;;;;;;GAMG;AACH,eAAO,MAAM,oBAAoB,GAC/B,KAAK,gBAAgB,EACrB,SAAS,cAAc,KACtB,gBAsBF,CAAC"}

package/dist/src/services/setup/validate-scripts/scripts.d.ts

@@ -0,0 +1,12 @@
+/**
+ * Source for the two validation scripts the starter ships under `scripts/`.
+ *
+ * Inlined here (not fetched from the starter via degit) because (a) these
+ * scripts are stable and don't drift, (b) we get instant offline retrofits,
+ * and (c) the diff between starter and next-maker is small enough to spot
+ * during release reviews. If they ever start to differ, switch this module
+ * to a degit fetch — the rest of the service won't need to change.
+ */
+export declare const SYNC_ENV_SCRIPT = "import * as fs from 'node:fs';\nimport * as path from 'node:path';\n\nconst envPath = path.join(process.cwd(), '.env');\nconst examplePath = path.join(process.cwd(), '.env.example');\n\nif (!fs.existsSync(envPath)) {\n  console.log('\u26A0\uFE0F  No .env file found. Skipping sync.');\n  process.exit(0);\n}\n\nconst envContent = fs.readFileSync(envPath, 'utf-8');\nconst lines = envContent.split('\\n');\n\nlet isPublicBlock = false;\n\nconst exampleLines = lines.map((line) => {\n  const trimmed = line.trim();\n\n  // Preserve empty lines and reset public block state\n  if (!trimmed) {\n    isPublicBlock = false;\n    return line;\n  }\n\n  // Preserve comments\n  if (trimmed.startsWith('#')) {\n    if (line.toLowerCase().includes('-public')) {\n      isPublicBlock = true;\n    }\n    return line;\n  }\n\n  // Parse KEY=VALUE\n  const match = line.match(/^([^=]+)=(.*)$/);\n\n  if (match) {\n    const key = match[1];\n\n    // Public marker: explicit \"# -public\" comment, or \"KEY=VAL # -public\"\n    if (isPublicBlock || line.toLowerCase().includes('-public')) {\n      isPublicBlock = false;\n      return line;\n    }\n\n    isPublicBlock = false;\n    return `${key}=`;\n  }\n\n  isPublicBlock = false;\n  return line;\n});\n\nconst newExampleContent = exampleLines.join('\\n');\n\nlet currentExampleContent = '';\nif (fs.existsSync(examplePath)) {\n  currentExampleContent = fs.readFileSync(examplePath, 'utf-8');\n}\n\nif (currentExampleContent !== newExampleContent) {\n  fs.writeFileSync(examplePath, newExampleContent);\n  console.log('\u2705 Synchronized .env.example with .env');\n} else {\n  console.log('\u2728 .env.example is already up to date');\n}\n";
+export declare const CHECK_DEPRECATED_SCRIPT = "/**\n * Walks every identifier in the project and flags any whose resolved TypeScript\n * symbol carries a `@deprecated` JSDoc tag. Catches deprecated API usage that\n * `tsc --noEmit` does not surface (deprecations are \"suggestion\"-level, not\n * errors) and that Biome does not yet detect.\n *\n * Exits 1 if any deprecated usage is found (so it can gate CI).\n */\nimport path from 'node:path';\nimport ts from 'typescript';\n\nconst cwd = process.cwd();\nconst configPath = ts.findConfigFile(cwd, ts.sys.fileExists, 'tsconfig.json');\n\nif (!configPath) {\n  console.error('tsconfig.json not found');\n  process.exit(1);\n}\n\nconst raw = ts.readConfigFile(configPath, ts.sys.readFile).config;\nconst parsed = ts.parseJsonConfigFileContent(raw, ts.sys, path.dirname(configPath));\n\nconst program = ts.createProgram({\n  rootNames: parsed.fileNames,\n  options: parsed.options,\n});\n\nconst checker = program.getTypeChecker();\n\nfunction isDeprecated(sym: ts.Symbol | undefined): boolean {\n  if (!sym) return false;\n  return sym.getJsDocTags(checker).some((tag) => tag.name === 'deprecated');\n}\n\nlet hits = 0;\n\nfor (const sourceFile of program.getSourceFiles()) {\n  if (sourceFile.fileName.includes('node_modules')) continue;\n  if (!sourceFile.fileName.startsWith(cwd)) continue;\n\n  const visit = (node: ts.Node): void => {\n    if (ts.isIdentifier(node)) {\n      const sym = checker.getSymbolAtLocation(node);\n      if (isDeprecated(sym)) {\n        const { line, character } = sourceFile.getLineAndCharacterOfPosition(node.getStart());\n        console.log(\n          `${path.relative(cwd, sourceFile.fileName)}:${line + 1}:${character + 1}  ${node.text}  (@deprecated)`,\n        );\n        hits++;\n      }\n    }\n    ts.forEachChild(node, visit);\n  };\n\n  visit(sourceFile);\n}\n\nif (hits === 0) {\n  console.log('\u2713 No deprecated API usage found.');\n  process.exit(0);\n}\n\nconsole.log(`\\n${hits} deprecated symbol use(s) found.`);\nprocess.exit(1);\n";
+//# sourceMappingURL=scripts.d.ts.map

package/dist/src/services/setup/validate-scripts/scripts.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"scripts.d.ts","sourceRoot":"","sources":["../../../../../src/services/setup/validate-scripts/scripts.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,eAAO,MAAM,eAAe,opDAkE3B,CAAC;AAEF,eAAO,MAAM,uBAAuB,48DAgEnC,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@teispace/next-maker",
-  "version": "1.15.0",
+  "version": "1.16.0",
   "description": "Create a new Teispace Next.js application with interactive setup.",
   "keywords": [
     "nextjs",
@@ -43,7 +43,7 @@
     "commander": "^14.0.3",
     "degit": "^2.8.4",
     "enquirer": "^2.4.1",
-    "ora": "^9.3.0",
+    "ora": "^9.4.0",
     "picocolors": "^1.1.1"
   },
   "devDependencies": {
@@ -51,7 +51,7 @@
     "@types/node": "^25.6.0",
     "esbuild": "^0.28.0",
     "tsx": "^4.21.0",
-    "vitest": "^4.1.4"
+    "vitest": "^4.1.5"
   },
   "engines": {
     "node": ">=20.0.0"