cascivo 0.7.2 → 0.8.1

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "cascivo",
-  "version": "0.7.2",
+  "version": "0.8.1",
   "private": false,
   "description": "CLI — npx cascivo init / add / list / update",
   "keywords": [
@@ -43,7 +43,7 @@
     "provenance": true
   },
   "dependencies": {
-    "@cascivo/registry": "^0.2.6"
+    "@cascivo/registry": "^0.2.7"
   },
   "devDependencies": {
     "@types/node": "^25",

package/dist/config-D7ddWN_9.mjs.map

@@ -1 +0,0 @@
-{"version":3,"file":"config-D7ddWN_9.mjs","names":[],"sources":["../src/utils/config.ts"],"sourcesContent":["import { existsSync, readFileSync } from 'node:fs'\nimport { dirname, join } from 'node:path'\nimport { pathToFileURL } from 'node:url'\n\n/**\n * Canonical (and only) host for hosted cascivo artifacts (registry.json, per-item\n * r/<name>.json, marketplace.json, /llms/*, /context/*). The legacy docs.cascivo.com\n * subdomain is retired and 301s here. Keep in sync with CASCIVO_HOST in packages/mcp.\n */\nexport const CASCIVO_HOST = 'https://cascivo.com'\n\n/** All first-party themes shipped by @cascivo/themes (selectable via data-theme). */\nexport const THEMES = [\n  'light',\n  'dark',\n  'warm',\n  'flat',\n  'minimal',\n  'midnight',\n  'pastel',\n  'brutalist',\n  'corporate',\n  'terminal',\n  'cyberpunk',\n  'arcade',\n] as const\n\nexport type ThemeName = (typeof THEMES)[number]\n\nexport type RegistryNamespaceConfig =\n  | string\n  | { url: string; headers?: Record<string, string>; params?: Record<string, string> }\n\nexport interface CascadeConfig {\n  /** URL of the registry.json index. */\n  registry: string\n  /** Directory (relative to project root) where components are written. */\n  outputDir: string\n  /** Default theme imported by `cascade init`. */\n  theme: ThemeName\n  /** Namespace → registry URL template (with {name} placeholder) or auth config. */\n  registries?: Record<string, RegistryNamespaceConfig>\n  /** Whether to copy test files (*.contract.test.tsx) when adding components. */\n  tests?: boolean\n}\n\nexport const DEFAULT_CONFIG: CascadeConfig = {\n  // Canonical hosted registry index (served from the landing site, documented in\n  // llms.txt). Prefer this over a branch's GitHub raw URL, which 404s for\n  // unauthenticated/private-repo requests and breaks `cascivo list`/`add`.\n  registry: `${CASCIVO_HOST}/registry.json`,\n  outputDir: 'src/components/ui',\n  theme: 'light',\n}\n\nconst CONFIG_FILES = ['cascivo.config.ts', 'cascivo.config.js', 'cascivo.config.mjs']\n\n/** Apply defaults over a (possibly partial) user config object. */\nexport function resolveConfig(partial: Partial<CascadeConfig> | null | undefined): CascadeConfig {\n  return { ...DEFAULT_CONFIG, ...partial }\n}\n\n/** Let env vars override config — used by the MCP server to pass `outputDir`. */\nexport function applyEnvOverrides(\n  config: CascadeConfig,\n  env: NodeJS.ProcessEnv = process.env,\n): CascadeConfig {\n  return {\n    ...config,\n    ...(env.CASCIVO_REGISTRY ? { registry: env.CASCIVO_REGISTRY } : {}),\n    ...(env.CASCIVO_OUTPUT_DIR ? { outputDir: env.CASCIVO_OUTPUT_DIR } : {}),\n  }\n}\n\n/**\n * Locate and load `cascivo.config.{ts,js,mjs}` from `cwd`. Falls back to the\n * default config when no file is found or the file cannot be loaded. Env vars\n * (`CASCIVO_REGISTRY`, `CASCIVO_OUTPUT_DIR`) take precedence.\n */\nexport async function loadConfig(cwd: string = process.cwd()): Promise<CascadeConfig> {\n  for (const file of CONFIG_FILES) {\n    const path = join(cwd, file)\n    if (!existsSync(path)) continue\n    try {\n      const mod = (await import(pathToFileURL(path).href)) as {\n        default?: Partial<CascadeConfig>\n      }\n      return applyEnvOverrides(resolveConfig(mod.default ?? (mod as Partial<CascadeConfig>)))\n    } catch {\n      // Unloadable config (e.g. unsupported TS syntax) — fall back to defaults.\n      return applyEnvOverrides(resolveConfig(null))\n    }\n  }\n  return applyEnvOverrides(resolveConfig(null))\n}\n\nexport type PackageManager = 'pnpm' | 'yarn' | 'npm' | 'bun'\n\n/** Narrow an arbitrary string to a known PackageManager. */\nexport function isPackageManager(value: string | undefined): value is PackageManager {\n  return value === 'pnpm' || value === 'yarn' || value === 'npm' || value === 'bun'\n}\n\n/**\n * Lock files in probe order. `bun.lock` (bun ≥ 1.2 text lockfile) sits beside the\n * legacy binary `bun.lockb`; `package-lock.json` is npm's marker so a walk that\n * reaches an npm workspace root still resolves to npm rather than the default.\n */\nconst PM_LOCKFILES: readonly [string, PackageManager][] = [\n  ['pnpm-lock.yaml', 'pnpm'],\n  ['yarn.lock', 'yarn'],\n  ['bun.lockb', 'bun'],\n  ['bun.lock', 'bun'],\n  ['package-lock.json', 'npm'],\n]\n\n/** The package manager that invoked this process, from `npm_config_user_agent`. */\nfunction pmFromUserAgent(ua: string | undefined): PackageManager | undefined {\n  if (!ua) return undefined\n  const name = ua.split('/')[0]\n  return isPackageManager(name) ? name : undefined\n}\n\n/** The `packageManager` corepack field of a package.json, if it names a known PM. */\nfunction pmFromPackageJson(dir: string): PackageManager | undefined {\n  try {\n    const pkg = JSON.parse(readFileSync(join(dir, 'package.json'), 'utf8')) as {\n      packageManager?: string\n    }\n    const name = pkg.packageManager?.split('@')[0]\n    return isPackageManager(name) ? name : undefined\n  } catch {\n    return undefined\n  }\n}\n\n/**\n * Detect the package manager in use. Precedence, highest first:\n *   1. explicit override (the `--package-manager`/`--pm` flag)\n *   2. `CASCIVO_PACKAGE_MANAGER` env var\n *   3. `npm_config_user_agent` (the PM that spawned the CLI, e.g. `pnpm dlx`)\n *   4. an upward walk from `cwd` for a lock file or `packageManager` field —\n *      this is what makes detection work inside a workspace, where the lock\n *      file lives at the repo root, not in the app subdirectory the user runs\n *      the CLI from. The walk stops after a directory containing `.git`.\n *   5. default `npm`.\n */\nexport function detectPackageManager(\n  cwd: string = process.cwd(),\n  opts: { override?: string; env?: NodeJS.ProcessEnv } = {},\n): PackageManager {\n  const env = opts.env ?? process.env\n\n  if (isPackageManager(opts.override)) return opts.override\n\n  const envPm = env.CASCIVO_PACKAGE_MANAGER\n  if (isPackageManager(envPm)) return envPm\n\n  const uaPm = pmFromUserAgent(env.npm_config_user_agent)\n  if (uaPm) return uaPm\n\n  let current = cwd\n  for (;;) {\n    for (const [file, pm] of PM_LOCKFILES) {\n      if (existsSync(join(current, file))) return pm\n    }\n    const fromField = pmFromPackageJson(current)\n    if (fromField) return fromField\n    // A `.git` directory marks the repo root — do not walk past it.\n    if (existsSync(join(current, '.git'))) break\n    const parent = dirname(current)\n    if (parent === current) break\n    current = parent\n  }\n\n  return 'npm'\n}\n\n/**\n * Pin every `@cascivo/*` package to an explicit version specifier.\n *\n * A bare name lets the package manager reuse whatever it already has resolvable. In a pnpm\n * workspace a sibling package's lockfile entry won and `@cascivo/i18n` resolved to **0.2.14**\n * while latest was **0.16.0** — then cascivo warned the adopter about the version it had\n * just installed itself. `add name@latest` (or the registry's known floor) makes the intent\n * explicit instead of leaving it to resolution order.\n *\n * Non-cascivo packages (`@preact/signals-react`) keep their bare name: their version is the\n * app's business, and cascivo has no floor to assert.\n */\nexport function pinSpecifier(pkg: string, floors: Record<string, string> = {}): string {\n  if (!pkg.startsWith('@cascivo/') && pkg !== 'cascivo') return pkg\n  if (pkg.includes('@', 1)) return pkg // already carries an explicit version\n  const floor = floors[pkg]\n  // `>=x.y.z` is not an installable specifier on its own; widen it to a range the package\n  // manager understands, so a known floor is honoured rather than silently ignored.\n  if (floor?.startsWith('>=')) return `${pkg}@${floor.slice(2)} - x`\n  return `${pkg}@latest`\n}\n\n/** The install subcommand each package manager uses to add dependencies. */\nexport function installCommand(\n  pm: PackageManager,\n  packages: string[],\n  opts: { dev?: boolean; floors?: Record<string, string>; pin?: string } = {},\n): [string, string[]] {\n  const verb = pm === 'npm' ? 'install' : 'add'\n  const devFlag = opts.dev ? [pm === 'npm' ? '--save-dev' : '-D'] : []\n  const specs = packages.map((p) =>\n    opts.pin && (p.startsWith('@cascivo/') || p === 'cascivo')\n      ? `${p}@${opts.pin}`\n      : pinSpecifier(p, opts.floors ?? {}),\n  )\n  return [pm, [verb, ...devFlag, ...specs]]\n}\n\n/** Human-readable install command a user can copy-paste, e.g. `pnpm add -D cascivo`. */\nexport function installHint(\n  pm: PackageManager,\n  packages: string[],\n  opts: { dev?: boolean } = {},\n): string {\n  const [cmd, args] = installCommand(pm, packages, opts)\n  return `${cmd} ${args.join(' ')}`\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AASA,MAAa,eAAe;;AAG5B,MAAa,SAAS;CACpB;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;AACF;AAqBA,MAAa,iBAAgC;CAI3C,UAAU,GAAG,aAAa;CAC1B,WAAW;CACX,OAAO;AACT;AAEA,MAAM,eAAe;CAAC;CAAqB;CAAqB;AAAoB;;AAGpF,SAAgB,cAAc,SAAmE;CAC/F,OAAO;EAAE,GAAG;EAAgB,GAAG;CAAQ;AACzC;;AAGA,SAAgB,kBACd,QACA,MAAyB,QAAQ,KAClB;CACf,OAAO;EACL,GAAG;EACH,GAAI,IAAI,mBAAmB,EAAE,UAAU,IAAI,iBAAiB,IAAI,CAAC;EACjE,GAAI,IAAI,qBAAqB,EAAE,WAAW,IAAI,mBAAmB,IAAI,CAAC;CACxE;AACF;;;;;;AAOA,eAAsB,WAAW,MAAc,QAAQ,IAAI,GAA2B;CACpF,KAAK,MAAM,QAAQ,cAAc;EAC/B,MAAM,OAAO,KAAK,KAAK,IAAI;EAC3B,IAAI,CAAC,WAAW,IAAI,GAAG;EACvB,IAAI;GACF,MAAM,MAAO,MAAM,OAAO,cAAc,IAAI,CAAC,CAAC;GAG9C,OAAO,kBAAkB,cAAc,IAAI,WAAY,GAA8B,CAAC;EACxF,QAAQ;GAEN,OAAO,kBAAkB,cAAc,IAAI,CAAC;EAC9C;CACF;CACA,OAAO,kBAAkB,cAAc,IAAI,CAAC;AAC9C;;AAKA,SAAgB,iBAAiB,OAAoD;CACnF,OAAO,UAAU,UAAU,UAAU,UAAU,UAAU,SAAS,UAAU;AAC9E;;;;;;AAOA,MAAM,eAAoD;CACxD,CAAC,kBAAkB,MAAM;CACzB,CAAC,aAAa,MAAM;CACpB,CAAC,aAAa,KAAK;CACnB,CAAC,YAAY,KAAK;CAClB,CAAC,qBAAqB,KAAK;AAC7B;;AAGA,SAAS,gBAAgB,IAAoD;CAC3E,IAAI,CAAC,IAAI,OAAO,KAAA;CAChB,MAAM,OAAO,GAAG,MAAM,GAAG,CAAC,CAAC;CAC3B,OAAO,iBAAiB,IAAI,IAAI,OAAO,KAAA;AACzC;;AAGA,SAAS,kBAAkB,KAAyC;CAClE,IAAI;EAIF,MAAM,OAHM,KAAK,MAAM,aAAa,KAAK,KAAK,cAAc,GAAG,MAAM,CAGtD,CAAC,CAAC,gBAAgB,MAAM,GAAG,CAAC,CAAC;EAC5C,OAAO,iBAAiB,IAAI,IAAI,OAAO,KAAA;CACzC,QAAQ;EACN;CACF;AACF;;;;;;;;;;;;AAaA,SAAgB,qBACd,MAAc,QAAQ,IAAI,GAC1B,OAAuD,CAAC,GACxC;CAChB,MAAM,MAAM,KAAK,OAAO,QAAQ;CAEhC,IAAI,iBAAiB,KAAK,QAAQ,GAAG,OAAO,KAAK;CAEjD,MAAM,QAAQ,IAAI;CAClB,IAAI,iBAAiB,KAAK,GAAG,OAAO;CAEpC,MAAM,OAAO,gBAAgB,IAAI,qBAAqB;CACtD,IAAI,MAAM,OAAO;CAEjB,IAAI,UAAU;CACd,SAAS;EACP,KAAK,MAAM,CAAC,MAAM,OAAO,cACvB,IAAI,WAAW,KAAK,SAAS,IAAI,CAAC,GAAG,OAAO;EAE9C,MAAM,YAAY,kBAAkB,OAAO;EAC3C,IAAI,WAAW,OAAO;EAEtB,IAAI,WAAW,KAAK,SAAS,MAAM,CAAC,GAAG;EACvC,MAAM,SAAS,QAAQ,OAAO;EAC9B,IAAI,WAAW,SAAS;EACxB,UAAU;CACZ;CAEA,OAAO;AACT;;;;;;;;;;;;;AAcA,SAAgB,aAAa,KAAa,SAAiC,CAAC,GAAW;CACrF,IAAI,CAAC,IAAI,WAAW,WAAW,KAAK,QAAQ,WAAW,OAAO;CAC9D,IAAI,IAAI,SAAS,KAAK,CAAC,GAAG,OAAO;CACjC,MAAM,QAAQ,OAAO;CAGrB,IAAI,OAAO,WAAW,IAAI,GAAG,OAAO,GAAG,IAAI,GAAG,MAAM,MAAM,CAAC,EAAE;CAC7D,OAAO,GAAG,IAAI;AAChB;;AAGA,SAAgB,eACd,IACA,UACA,OAAyE,CAAC,GACtD;CACpB,MAAM,OAAO,OAAO,QAAQ,YAAY;CACxC,MAAM,UAAU,KAAK,MAAM,CAAC,OAAO,QAAQ,eAAe,IAAI,IAAI,CAAC;CACnE,MAAM,QAAQ,SAAS,KAAK,MAC1B,KAAK,QAAQ,EAAE,WAAW,WAAW,KAAK,MAAM,aAC5C,GAAG,EAAE,GAAG,KAAK,QACb,aAAa,GAAG,KAAK,UAAU,CAAC,CAAC,CACvC;CACA,OAAO,CAAC,IAAI;EAAC;EAAM,GAAG;EAAS,GAAG;CAAK,CAAC;AAC1C;;AAGA,SAAgB,YACd,IACA,UACA,OAA0B,CAAC,GACnB;CACR,MAAM,CAAC,KAAK,QAAQ,eAAe,IAAI,UAAU,IAAI;CACrD,OAAO,GAAG,IAAI,GAAG,KAAK,KAAK,GAAG;AAChC"}