@trypattern/sdk 0.1.6 → 0.1.8

package/dist/auth/user.d.ts

@@ -8,4 +8,5 @@ export declare const userSchema: z.ZodObject<{
 }, z.core.$strip>;
 export type User = z.output<typeof userSchema>;
 export type StoredUser = Omit<User, 'isAdmin'>;
-export declare const USER_COOKIE = "pattern_user";
+export declare const USER_COOKIE = "__Host-pattern_user";
+export declare const SESSION_COOKIE = "__Host-pattern_session";

package/dist/auth/user.js

@@ -6,4 +6,5 @@ export const userSchema = z.object({
     avatarUrl: z.string().nullable(),
     isAdmin: z.boolean().default(false)
 });
-export const USER_COOKIE = 'pattern_user';
+export const USER_COOKIE = '__Host-pattern_user';
+export const SESSION_COOKIE = '__Host-pattern_session';

package/dist/cli/app.js

@@ -313,8 +313,8 @@ every row and column added since, which version 3's code ignores.`,
         takesArgument: true
     },
     setup: {
-        summary: 'Verify Node/pnpm major versions, pnpm install, install the global `app` shim',
-        details: `Idempotent. Fails unless Node and pnpm have the major versions in .nvmrc and package.json devEngines.
+        summary: 'Verify Node/pnpm are the pinned major versions or newer, pnpm install, install the global `app` shim',
+        details: `Idempotent. Fails when Node or pnpm is older than the major versions in .nvmrc and package.json devEngines.
 Then runs \`pnpm install\` and installs ${SHIM_PATH}, a tiny shim that walks up from the
 current directory to the nearest project launcher (an executable ./app containing the line
 ${LAUNCHER_MARKER_LINE}) and runs it, so each project's CLI lives in its repo and the shim
@@ -1234,6 +1234,9 @@ async function build() {
 function majorOf(version) {
     return version.split('.')[0] ?? '';
 }
+function isAtLeastMajor(version, pinned) {
+    return version !== '' && Number(majorOf(version)) >= Number(majorOf(pinned));
+}
 const packagePins = z.object({
     devEngines: z.object({
         packageManager: z.object({ version: z.string() })
@@ -1276,11 +1279,11 @@ async function setup() {
     });
     const havePnpm = (pnpmVersion.stdout ?? '').trim();
     const problems = [];
-    if (majorOf(haveNode) !== majorOf(pins.node)) {
-        problems.push(`Node ${haveNode} is not Node ${majorOf(pins.node)} (.nvmrc says ${pins.node})\n  fix  pnpm env use --global ${majorOf(pins.node)}`);
+    if (!isAtLeastMajor(haveNode, pins.node)) {
+        problems.push(`Node ${haveNode} is older than Node ${majorOf(pins.node)} (.nvmrc says ${pins.node})\n  fix  pnpm env use --global ${majorOf(pins.node)}`);
     }
-    if (majorOf(havePnpm) !== majorOf(pins.pnpm)) {
-        problems.push(`pnpm ${havePnpm || '(not found)'} is not pnpm ${majorOf(pins.pnpm)} (package.json devEngines says ${pins.pnpm} or newer)\n  fix  curl -fsSL https://get.pnpm.io/install.sh | sh -`);
+    if (!isAtLeastMajor(havePnpm, pins.pnpm)) {
+        problems.push(`pnpm ${havePnpm || '(not found)'} is older than pnpm ${majorOf(pins.pnpm)} (package.json devEngines says ${pins.pnpm} or newer)\n  fix  npm install --global pnpm@12`);
     }
     const versions = { node: haveNode, pnpm: havePnpm, expected: pins };
     if (problems.length > 0) {
@@ -1290,7 +1293,10 @@ async function setup() {
             text: problems.map((p) => `✗ ${p}`).join('\n')
         };
     }
-    say(`✓ Node ${haveNode} and pnpm ${havePnpm} match the pinned major versions`);
+    const tested = majorOf(haveNode) === majorOf(pins.node)
+        ? ''
+        : ` (tested on Node ${majorOf(pins.node)})`;
+    say(`✓ Node ${haveNode} and pnpm ${havePnpm}${tested}`);
     const install = await capture('pnpm', ['install']);
     if (install.code !== 0) {
         return {

package/dist/cli/publishing.js

@@ -1,10 +1,11 @@
 import { spawnSync } from 'node:child_process';
 import { chmodSync, existsSync, mkdirSync, readdirSync, readFileSync, rmSync, statSync, writeFileSync } from 'node:fs';
-import { homedir, hostname, userInfo } from 'node:os';
+import { homedir } from 'node:os';
 import { basename, dirname, extname, join, matchesGlob, relative } from 'node:path';
 import { z } from 'zod';
 import { DASHBOARD_URL, UPLOAD, appSummary, isPrivatePath, loginPoll, loginStarted, nameProblem, publishMessage, publishSummary, setupCodeExchanged, sourcePathProblem } from "../publishWire.js";
 import { appInfo } from "../appTitle.js";
+import { SESSION_COOKIE } from "../auth/user.js";
 import { PROJECT_FILE, readProjectFile } from "../vite/projectFile.js";
 const CONFIG_DIR = join(homedir(), '.config', 'pattern');
 const CREDENTIALS_FILE = join(CONFIG_DIR, 'credentials.json');
@@ -13,7 +14,6 @@ const LOGIN_MINUTES = 10;
 const POLL_MS = 2000;
 const LOGIN_WAIT_MS = 100_000;
 const PUBLISH_WAIT_MS = 300_000;
-const SESSION_COOKIE = 'pattern_session';
 const LAUNCHER = 'app';
 const STARTER_WORKSPACE = 'pnpm-workspace.yaml';
 const STARTER_BUILD_SETTINGS = 'allowBuilds:\n  esbuild: false\n  workerd: false\n';
@@ -121,8 +121,11 @@ async function callJson(path, schema, init = {}) {
     return schema.parse(body);
 }
 function labelOfThisMachine() {
-    const machine = hostname().replace(/\.local$/, '');
-    return `${userInfo().username} on ${machine}`.slice(0, 80);
+    const named = spawnSync('scutil', ['--get', 'ComputerName'], {
+        encoding: 'utf8'
+    });
+    const name = named.status === 0 ? named.stdout.trim() : '';
+    return (name === '' ? 'this computer' : name).slice(0, 80);
 }
 function sleep(ms) {
     return new Promise((done) => setTimeout(done, ms));
@@ -248,6 +251,24 @@ function folderFor(name, cwd) {
         return cwd;
     return join(isInsideHome(cwd) ? cwd : homedir(), name);
 }
+async function hasPnpm(io, cwd) {
+    return (await io.run('pnpm', ['--version'], cwd)).code === 0;
+}
+async function ensurePnpm(io, cwd) {
+    if (await hasPnpm(io, cwd))
+        return true;
+    io.say('Installing pnpm');
+    const installed = await io.run('npm', ['install', '--global', 'pnpm@12'], cwd);
+    return installed.code === 0 && (await hasPnpm(io, cwd));
+}
+function firstChange(title, url, folder) {
+    return [
+        `cd into ${folder} and read AGENTS.md: every rule in it applies. Then run ./app start and open the address it prints, so they see their site running on this computer.`,
+        `Ask them one question: "In a sentence, what does ${title} do?" From their answer, make the home page welcome them with a line that says what ${title} does, and give src/theme/theme.ts a brand colour that suits the business.`,
+        `Run ./app check until it passes, then ./app publish --message '<what changed>' straight away: this first change goes live without asking, so they see their real site change at ${url}.`,
+        `Then tell them their site lives in ${folder}, that next time they can start Claude there, and that from now on you'll show changes on this computer first and publish when they say so.`
+    ].join('\n        ');
+}
 function commandLineToolsReady() {
     return spawnSync('xcode-select', ['-p'], { stdio: 'ignore' }).status === 0;
 }
@@ -276,12 +297,13 @@ export async function pull(io, name, cwd, setupCode) {
             if (!response.ok)
                 throw new Error(`Couldn’t download ${name}`);
             const number = response.headers.get('x-pattern-publish') ?? '?';
+            const isStarter = response.headers.get('x-pattern-starter') === 'true';
             const live = await fetch(`${app.url}/api/app`)
                 .then((reply) => reply.json())
                 .then((body) => appInfo.parse(body).title)
                 .catch(() => '');
             const title = live === '' ? app.title : live;
-            return { app, title, number, form: await response.formData() };
+            return { app, title, number, isStarter, form: await response.formData() };
         });
         if (isOutcome(result))
             return result;
@@ -301,6 +323,13 @@ export async function pull(io, name, cwd, setupCode) {
             chmodSync(join(target, LAUNCHER), 0o755);
         writeFileSync(join(target, PROJECT_FILE), `${JSON.stringify({ name, title: result.title }, null, 2)}\n`);
         io.say(`✓ Downloaded ${files} files of version ${result.number}`);
+        if (!(await ensurePnpm(io, target))) {
+            return {
+                code: 1,
+                data: { error: 'pnpm missing', folder: target },
+                text: `✗ pnpm isn’t installed, and npm couldn’t install it\n  fix  curl -fsSL https://get.pnpm.io/install.sh | sh -, then open a new terminal and run this again`
+            };
+        }
         const install = await io.run('pnpm', ['install'], target);
         if (install.code !== 0) {
             return failure(new Error(`pnpm install failed\n${install.output}`));
@@ -314,11 +343,13 @@ export async function pull(io, name, cwd, setupCode) {
             await io.run('git', ['add', '-A'], target);
             await io.run('git', ['commit', '-q', '-m', `Version ${result.number} from onpattern.app`], target);
         }
-        const moved = `\n  folder  ${target}`;
+        const next = result.isStarter
+            ? firstChange(result.title, result.app.url, target)
+            : `cd into ${target}, read AGENTS.md, then ./app start`;
         return {
             code: 0,
             data: { name, folder: target, version: result.number, files },
-            text: `✓ ${result.title} is on this computer${moved}\n  next  cd into that folder, read AGENTS.md, then ./app start`
+            text: `✓ ${result.title} is on this computer\n  folder  ${target}\n  next  ${next}`
         };
     }
     catch (error) {

package/dist/components/Button.js

@@ -8,7 +8,7 @@ import { Icon } from "./Icon.js";
 import { interact, textOf } from "./interaction.js";
 import { Kbd } from "./Kbd.js";
 import { Spinner } from "./Spinner.js";
-export function Button({ children, variant = 'primary', tone = 'neutral', size = 'md', to, href, icon, trailingIcon, shortcut, type = 'button', disabled = false, isPending = false, isFullWidth = false, onClick, style }) {
+export function Button({ children, variant = 'primary', tone = variant === 'primary' ? 'brand' : 'neutral', size = 'md', to, href, icon, trailingIcon, shortcut, type = 'button', disabled = false, isPending = false, isFullWidth = false, onClick, style }) {
     const isDisabled = disabled || isPending;
     const report = () => {
         interact({ primitive: 'Button', event: 'click', label: textOf(children) });

package/dist/components/Sidebar.js

@@ -89,8 +89,8 @@ const styles = stylex.create({
         placeItems: 'center',
         width: iconSizes.xl,
         height: iconSizes.xl,
-        color: colors.onInvertedForeground,
-        backgroundColor: colors.invertedSolid,
+        color: colors.onBrandSolidForeground,
+        backgroundColor: colors.brandSolid,
         borderRadius: radii.md
     },
     body: {

package/dist/components/SignInScreen.js

@@ -33,8 +33,8 @@ const styles = stylex.create({
         alignSelf: 'center',
         width: controls.heightLg,
         height: controls.heightLg,
-        color: colors.onInvertedForeground,
-        backgroundColor: colors.invertedSolid,
+        color: colors.onBrandSolidForeground,
+        backgroundColor: colors.brandSolid,
         borderRadius: radii.lg
     }
 });

package/dist/server/auth.js

@@ -6,10 +6,10 @@ import { forgetSession, readPass, startSession } from "./session.js";
 import { readTitle } from "./settings.js";
 import { deleteSession } from "./sessions.js";
 import { saveUser } from "./users.js";
-const GOOGLE_COOKIE = 'pattern_google';
-const EMAIL_COOKIE = 'pattern_email';
+const GOOGLE_COOKIE = '__Host-pattern_google';
+const EMAIL_COOKIE = '__Host-pattern_email';
 const signInCookie = {
-    path: '/api/auth',
+    path: '/',
     httpOnly: true,
     secure: true,
     sameSite: 'Lax',

package/dist/server/session.js

@@ -1,9 +1,8 @@
 import { deleteCookie, getSignedCookie, setCookie, setSignedCookie } from 'hono/cookie';
 import { serializeSigned } from 'hono/utils/cookie';
 import { z } from 'zod';
-import { USER_COOKIE } from "../auth/user.js";
+import { SESSION_COOKIE, USER_COOKIE } from "../auth/user.js";
 import { createSession } from "./sessions.js";
-const SESSION_COOKIE = 'pattern_session';
 const RECHECK_SECONDS = 15 * 60;
 const SESSION_SECONDS = 30 * 86_400;
 const cookieOptions = {
@@ -61,6 +60,6 @@ export async function readPass(c) {
 }
 export const needsRecheck = (pass) => pass.recheckAt <= nowInSeconds();
 export function forgetSession(c) {
-    deleteCookie(c, SESSION_COOKIE, { path: '/' });
-    deleteCookie(c, USER_COOKIE, { path: '/' });
+    deleteCookie(c, SESSION_COOKIE, { path: '/', secure: true });
+    deleteCookie(c, USER_COOKIE, { path: '/', secure: true });
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@trypattern/sdk",
-  "version": "0.1.6",
+  "version": "0.1.8",
   "type": "module",
   "files": [
     "dist",