@ykdz/template 0.0.36 → 0.0.38

package/node_modules/{valibot → @ykdz/template-builtin-presets/node_modules/valibot}/package.json

@@ -1,7 +1,7 @@
 {
   "name": "valibot",
   "description": "The modular and type safe schema library for validating structural data",
-  "version": "1.4.2",
+  "version": "1.5.0",
   "license": "MIT",
   "author": "Fabian Hiller",
   "homepage": "https://valibot.dev",
@@ -17,7 +17,11 @@
     "parsing",
     "bundle-size",
     "type-safe",
-    "runtime"
+    "runtime",
+    "validator",
+    "schema-validation",
+    "type-inference",
+    "standard-schema"
   ],
   "type": "module",
   "main": "./dist/index.mjs",
@@ -55,6 +59,7 @@
     "@eslint/js": "^9.39.1",
     "@vitest/coverage-v8": "^4.1.8",
     "eslint": "^9.39.1",
+    "eslint-import-resolver-typescript": "^4.4.4",
     "eslint-plugin-import": "^2.32.0",
     "eslint-plugin-jsdoc": "^61.4.0",
     "eslint-plugin-redos-detector": "^3.1.1",

package/node_modules/@ykdz/template-builtin-presets/package.json

@@ -8,11 +8,6 @@
   ],
   "type": "module",
   "imports": {
-    "#template-core/*": {
-      "source": "@ykdz/template-core-source/*",
-      "types": "@ykdz/template-core/*",
-      "default": "@ykdz/template-core/*"
-    },
     "#npm-publication/*": "./templates/ts-cli/publication/*.ts"
   },
   "exports": {
@@ -33,13 +28,22 @@
   },
   "dependencies": {
     "@ykdz/template-core": "workspace:*",
-    "valibot": "catalog:"
+    "jsonc-parser": "^3.3.1",
+    "npm-package-arg": "^14.0.0",
+    "picomatch": "^4.0.7",
+    "semver": "catalog:",
+    "smol-toml": "^1.8.0",
+    "unbash": "5.0.0",
+    "valibot": "catalog:",
+    "yaml": "catalog:"
   },
   "devDependencies": {
     "@hono/node-server": "catalog:",
     "@playwright/test": "catalog:",
     "@tailwindcss/vite": "catalog:",
     "@types/node": "catalog:",
+    "@types/npm-package-arg": "^6.1.4",
+    "@types/picomatch": "^4.0.3",
     "@types/semver": "catalog:",
     "@types/spdx-expression-parse": "catalog:",
     "@types/web-bluetooth": "catalog:",
@@ -47,7 +51,6 @@
     "@vitejs/plugin-vue": "catalog:",
     "@vue/devtools-api": "catalog:",
     "@vue/tsconfig": "catalog:",
-    "@ykdz/template-core-source": "link:../core",
     "commander": "catalog:",
     "drizzle-kit": "catalog:",
     "drizzle-orm": "catalog:",
@@ -57,7 +60,6 @@
     "oxlint": "catalog:",
     "oxlint-tsgolint": "catalog:",
     "pinia": "catalog:",
-    "semver": "catalog:",
     "spdx-expression-parse": "catalog:",
     "tailwindcss": "catalog:",
     "tar": "catalog:",
@@ -69,9 +71,20 @@
     "vite": "catalog:",
     "vitest": "catalog:",
     "vue": "catalog:",
-    "vue-tsc": "catalog:",
-    "yaml": "catalog:"
+    "vue-tsc": "catalog:"
+  },
+  "peerDependencies": {
+    "typescript": ">=6 <7"
   },
+  "bundleDependencies": [
+    "jsonc-parser",
+    "npm-package-arg",
+    "picomatch",
+    "semver",
+    "smol-toml",
+    "unbash",
+    "yaml"
+  ],
   "turbo": {
     "tags": [
       "template-builtin-presets"

package/node_modules/@ykdz/template-builtin-presets/templates/foundation/.github/workflows/check-deployment-diagnostics.yml

@@ -34,20 +34,20 @@ jobs:
             requires_docker: true
     steps:
       - name: Checkout source
-        uses: actions/checkout@fbc6f3992d24b796d5a048ff273f7fcc4a7b6c09 # v5
+        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7
         with:
           persist-credentials: false
           fetch-depth: 1
       - name: Set up Node.js
-        uses: actions/setup-node@a0853c24544627f65ddf259abe73b1d18a591444 # v5
+        uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7
         with:
           node-version-file: package.json
       - name: Set up pnpm
-        uses: pnpm/action-setup@fc06bc1257f339d1d5d8b3a19a8cae5388b55320 # v4.4.0
+        uses: pnpm/action-setup@d9184bf108216479bc5a137cc391f4d7b14c870b # v6.1.0
         with:
           cache: true
       - name: Set up Docker Buildx
-        uses: docker/setup-buildx-action@bb05f3f5519dd87d3ba754cc423b652a5edd6d2c # v4.2.0
+        uses: docker/setup-buildx-action@f87e5991a6d7451dcb8d9637bfbc97413f497069 # v4.4.1
         if: matrix.requires_docker
       - name: Install dependencies
         run: pnpm install --frozen-lockfile
@@ -73,7 +73,7 @@ jobs:
           done
       - name: Upload Root Check diagnostics
         if: failure() && matrix.capability == 'root'
-        uses: actions/upload-artifact@65462800fd760344b1a7b4382951275a0abb4808 # v4
+        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7
         with:
           name: root-check-diagnostics
           path: .template-ci-diagnostics

package/node_modules/@ykdz/template-builtin-presets/templates/foundation/.github/workflows/check-deployment.yml

@@ -34,20 +34,20 @@ jobs:
             requires_docker: true
     steps:
       - name: Checkout source
-        uses: actions/checkout@fbc6f3992d24b796d5a048ff273f7fcc4a7b6c09 # v5
+        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7
         with:
           persist-credentials: false
           fetch-depth: 1
       - name: Set up Node.js
-        uses: actions/setup-node@a0853c24544627f65ddf259abe73b1d18a591444 # v5
+        uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7
         with:
           node-version-file: package.json
       - name: Set up pnpm
-        uses: pnpm/action-setup@fc06bc1257f339d1d5d8b3a19a8cae5388b55320 # v4.4.0
+        uses: pnpm/action-setup@d9184bf108216479bc5a137cc391f4d7b14c870b # v6.1.0
         with:
           cache: true
       - name: Set up Docker Buildx
-        uses: docker/setup-buildx-action@bb05f3f5519dd87d3ba754cc423b652a5edd6d2c # v4.2.0
+        uses: docker/setup-buildx-action@f87e5991a6d7451dcb8d9637bfbc97413f497069 # v4.4.1
         if: matrix.requires_docker
       - name: Install dependencies
         run: pnpm install --frozen-lockfile

package/node_modules/@ykdz/template-builtin-presets/templates/foundation/.github/workflows/check-diagnostics.yml

@@ -20,16 +20,16 @@ jobs:
     timeout-minutes: 30
     steps:
       - name: Checkout source
-        uses: actions/checkout@fbc6f3992d24b796d5a048ff273f7fcc4a7b6c09 # v5
+        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7
         with:
           persist-credentials: false
           fetch-depth: 1
       - name: Set up Node.js
-        uses: actions/setup-node@a0853c24544627f65ddf259abe73b1d18a591444 # v5
+        uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7
         with:
           node-version-file: package.json
       - name: Set up pnpm
-        uses: pnpm/action-setup@fc06bc1257f339d1d5d8b3a19a8cae5388b55320 # v4.4.0
+        uses: pnpm/action-setup@d9184bf108216479bc5a137cc391f4d7b14c870b # v6.1.0
         with:
           cache: true
       - name: Install dependencies
@@ -56,7 +56,7 @@ jobs:
           done
       - name: Upload Root Check diagnostics
         if: failure()
-        uses: actions/upload-artifact@65462800fd760344b1a7b4382951275a0abb4808 # v4
+        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7
         with:
           name: root-check-diagnostics
           path: .template-ci-diagnostics

package/node_modules/@ykdz/template-builtin-presets/templates/foundation/.github/workflows/check.yml

@@ -20,16 +20,16 @@ jobs:
     timeout-minutes: 30
     steps:
       - name: Checkout source
-        uses: actions/checkout@fbc6f3992d24b796d5a048ff273f7fcc4a7b6c09 # v5
+        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7
         with:
           persist-credentials: false
           fetch-depth: 1
       - name: Set up Node.js
-        uses: actions/setup-node@a0853c24544627f65ddf259abe73b1d18a591444 # v5
+        uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7
         with:
           node-version-file: package.json
       - name: Set up pnpm
-        uses: pnpm/action-setup@fc06bc1257f339d1d5d8b3a19a8cae5388b55320 # v4.4.0
+        uses: pnpm/action-setup@d9184bf108216479bc5a137cc391f4d7b14c870b # v6.1.0
         with:
           cache: true
       - name: Install dependencies

package/node_modules/@ykdz/template-builtin-presets/templates/foundation/AGENTS.md.template

@@ -0,0 +1,17 @@
+### 本地代理上下文
+
+`AGENTS.md`、`.agents/`、`docs/`、`.scratch/`、`.codex/`、`GLOSSARY*.md` 及其他代理本地规划或上下文文件均为本地工作区输入，不得纳入 Git 跟踪，也不得在 `.gitignore` 中为它们添加例外。
+
+### 工作约定
+
+若这些限制与 Spec、Ticket、ADR 等权威本地文档冲突，应该以权威本地文档为准。
+
+- 开发自动化：非临时维护脚本必须使用 `scripts/**/*.ts` 中可擦除的 TypeScript，而不是 `.mjs` 等 JavaScript 脚本（Node 24 支持原生直接执行）；归所属非构建 TypeScript 项目并受 format、lint、typecheck 覆盖，防止腐化；产品 build 不产出这些脚本。普通 Node 自动化使用原生 TypeScript 执行链。
+- 临时脚本：编写临时脚本时，应该将其放到有临时目录语义的位置
+- 任务归属：优先使用工具原生配置；直接命令与简单 `&&` 编排写在所属 package manifest；只有自定义类型化行为才新增 TypeScript script
+- 包边界：本地文件系统访问留在所属包内；跨包代码与资源通过声明依赖和公开 exports 获取，跨包任务交根 Turbo/pnpm 编排。不要以根目录定位器、跨包物理路径或 `@boundaries-ignore` 绕过边界
+- 最小充分测试：不要过度编写单元测试，包括为硬删除设计的防回归测试（可以临时存在，但是硬删除完成后必须删除，最好放在可丢弃分支中方便清理）、为文档内容或任何文件编写的存在性测试等，确保测试覆盖且仅覆盖业务逻辑本身的正负项
+- YAGNI：除非有明确目的，否则不要规划收益不足的安全边界等内容。简单的代码在未来真的遇到新需求时，重构起来远比一个充满防御性冗余设计的复杂系统要容易得多
+- 正式处理链路：开发、回放和端到端验收应复用生产的正式处理链路与制品，入口和配置可不同；同类流程只保留一份实现，迁移后删除旧链路，局部测试不得冒充全链路验收
+- 用户界面：不要将任何技术细节泄漏到用户可见的 UI 中
+- 完成条件：先通过改动相关的局部门禁，交付前再通过根 `pnpm check`

package/node_modules/@ykdz/template-builtin-presets/templates/foundation/devcontainer.json

@@ -3,10 +3,12 @@
   "build": {
     "dockerfile": "Dockerfile",
     "args": {
-      "NODE_VERSION": "{{NODE_LTS_MAJOR}}",
-      "PACKAGE_MANAGER_PIN": "{{PACKAGE_MANAGER_PIN}}"
+      "NODE_VERSION": "{{NODE_VERSION}}"
     }
   },
+  "features": {
+    "ghcr.io/devcontainers/features/docker-outside-of-docker:1": {}
+  },
   "customizations": {
     "vscode": {
       "extensions": ["oxc.oxc-vscode"]

package/node_modules/@ykdz/template-builtin-presets/templates/foundation/pnpm-workspace.dynamic.txt

@@ -3,6 +3,7 @@ packages:
 
 nodeLinker: isolated
 preferSymlinkedExecutables: true
+shellEmulator: true
 autoInstallPeers: false
 injectWorkspacePackages: false
 dedupeInjectedDeps: false

package/node_modules/@ykdz/template-builtin-presets/templates/foundation/pnpm-workspace.yaml

@@ -17,16 +17,16 @@ minimumReleaseAgeStrict: true
 minimumReleaseAgeExclude:
   - "@ykdz/template"
 
-overrides:
+overrides: {}
 
 allowBuilds:
   esbuild: true
 
 catalog:
   "@types/node": ^24.13.3
-  oxfmt: ^0.58.0
-  oxlint: ^1.73.0
-  oxlint-tsgolint: ^0.24.0
-  turbo: 2.10.5
+  oxfmt: ^0.71.0
+  oxlint: ^1.77.0
+  oxlint-tsgolint: ^7.0.2001
+  turbo: 2.11.7
   typescript-7: npm:typescript@^7.0.2
   valibot: ^1.4.2