@timekast/factory 0.1.4 → 0.1.5

package/dist/commands/update.js

@@ -37,7 +37,7 @@ import prompts from 'prompts';
 import { applyPlan, clearUpdateState, defaultBackupDir, hasUpdateState, readUpdateState, validateStagedManifest, writeUpdateState, } from '../lib/atomic-swap.js';
 import { CLIError } from '../lib/cli-error.js';
 import { diffLockfiles, hasLockfile, normalizeThenHash, planAutoRegister, readLockfile, writeLockfile, } from '../lib/lockfile.js';
-import { insertFactoryUpdateScript } from '../lib/package-json.js';
+import { insertFactoryUpdateScript, pruneFactoryMeta } from '../lib/package-json.js';
 import { runPreflight } from '../lib/preflight.js';
 import { downloadProfileTarball, stageProfileTarball } from '../lib/unpack.js';
 /** Parse `update`'s argv slice into flags. Unknown flags are ignored here. */
@@ -186,7 +186,7 @@ function runResume(rootDir) {
     clearUpdateState(rootDir);
     const pkgPath = path.join(rootDir, 'package.json');
     if (existsSync(pkgPath))
-        warnOnScriptConflict(insertFactoryUpdateScript(pkgPath).action, pkgPath);
+        maintainDerivedPkg(pkgPath);
     rmSync(state.stagedDir, { recursive: true, force: true });
     console.log('✔ `update` retomado y completado.');
 }
@@ -206,6 +206,18 @@ function warnOnScriptConflict(action, _pkgPath) {
         console.warn('Aviso: `factory:update` ya existe en package.json con otro valor; no se sobrescribió.');
     }
 }
+/**
+ * After a sync, maintain the derived project's package.json: ensure the
+ * `factory:update` script (warn on a divergent value) and prune the stale
+ * `agentKitVersion` leaked by the template. The lockfile — not package.json — is
+ * the live-version SSOT, so that copy only drifts; pruning it here also cleans
+ * derivatives that predate this fix on their next update. `factoryVersion` (the
+ * frozen birth stamp) is kept.
+ */
+function maintainDerivedPkg(pkgPath) {
+    warnOnScriptConflict(insertFactoryUpdateScript(pkgPath).action, pkgPath);
+    pruneFactoryMeta(pkgPath);
+}
 /** Print the deletes + kept-retired (design §7.6 — visible) + a one-line summary. */
 function reportSummary(diff) {
     if (diff.deleteSilent.length > 0) {
@@ -300,7 +312,7 @@ export async function runUpdate(flags, deps = {}) {
         clearUpdateState(rootDir);
         const pkgPath = path.join(rootDir, 'package.json');
         if (existsSync(pkgPath))
-            warnOnScriptConflict(insertFactoryUpdateScript(pkgPath).action, pkgPath);
+            maintainDerivedPkg(pkgPath);
         reportSummary(diff);
     }
     finally {
@@ -340,7 +352,7 @@ async function applyLegacy(rootDir, stagedDir, manifest) {
     writeLockfile(rootDir, { ...manifest, factoryVersion: manifest.version });
     const pkgPath = path.join(rootDir, 'package.json');
     if (existsSync(pkgPath))
-        warnOnScriptConflict(insertFactoryUpdateScript(pkgPath).action, pkgPath);
+        maintainDerivedPkg(pkgPath);
     if (plan.ambiguous.length > 0) {
         console.log('\nArchivos en `.claude/` que no están en el manifest (revisar manualmente):');
         for (const p of plan.ambiguous)

package/dist/lib/package-json.js

@@ -31,6 +31,31 @@ export function parsePackageJson(raw) {
         throw new CLIError('El `package.json` desempacado no es JSON válido; no se puede continuar de forma segura.');
     }
 }
+/**
+ * Stale Factory version metadata to prune from a derivative's `package.json`.
+ *
+ * The `full` template's `package.json` carries `factoryVersion` + `agentKitVersion`
+ * for the Factory's dual-version release model, and both leak into a derivative on
+ * unpack. Only `agentKitVersion` is pruned: it is the LIVE brain version, whose
+ * SSOT in a derivative is `.timekast/lockfile.json` (`version`), so a `package.json`
+ * copy just goes stale on every `update` and misleads (what `status`/`doctor` report
+ * comes from the lockfile, never from here). `factoryVersion` is deliberately KEPT —
+ * it is the FROZEN birth stamp (never changes after install) and the canonical
+ * boilerplate marker (DISTRIBUTION_DESIGN §10). `version` (the derivative's own app
+ * semver) is untouched.
+ */
+const FACTORY_META_KEYS = ['agentKitVersion'];
+/** Delete stale Factory version metadata in place. Returns true if a key was removed. */
+function stripFactoryMeta(pkg) {
+    let changed = false;
+    for (const key of FACTORY_META_KEYS) {
+        if (key in pkg) {
+            delete pkg[key];
+            changed = true;
+        }
+    }
+    return changed;
+}
 /**
  * Pure core of the script insertion: mutate `pkg.scripts` in place to ensure
  * `factory:update` exists, never overwriting a divergent value. Shared by
@@ -63,6 +88,9 @@ export function applyPackageJsonEdits(raw, name) {
     const pkg = parsePackageJson(raw);
     pkg.name = name;
     const result = ensureUpdateScript(pkg);
+    // Prune the stale `agentKitVersion` leaked by the unpacked template; the
+    // derivative's live brain version lives in the lockfile, not here.
+    stripFactoryMeta(pkg);
     const content = `${JSON.stringify(pkg, null, indent)}\n`;
     return { content, scriptAlreadyPresent: result.action === 'conflict' };
 }
@@ -88,3 +116,25 @@ export function insertFactoryUpdateScript(pkgPath) {
     }
     return result;
 }
+/**
+ * Surgically prune the stale `agentKitVersion` leaked into a derived project's
+ * `package.json` when the `full` profile is unpacked. It is NOT the version SSOT
+ * — the lockfile is — so it goes stale on every update and misleads. Reads,
+ * deletes only that key, and re-serializes with the original indentation, writing
+ * only when something changed. NEVER touches `name`, `version`, `factoryVersion`
+ * (the frozen birth stamp), deps, or scripts.
+ *
+ * Idempotent: a derivative already free of the key is left byte-identical.
+ *
+ * @param pkgPath Absolute path to the derived project's `package.json`.
+ * @returns true when a field was removed (and the file rewritten).
+ */
+export function pruneFactoryMeta(pkgPath) {
+    const raw = readFileSync(pkgPath, 'utf8');
+    const indent = detectIndent(raw);
+    const pkg = parsePackageJson(raw);
+    if (!stripFactoryMeta(pkg))
+        return false;
+    writeFileSync(pkgPath, `${JSON.stringify(pkg, null, indent)}\n`, 'utf8');
+    return true;
+}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@timekast/factory",
-  "version": "0.1.4",
+  "version": "0.1.5",
   "description": "Public, thin CLI to bootstrap and maintain TimeKast Factory derived projects.",
   "type": "module",
   "license": "UNLICENSED",