create-daloy 1.0.0-rc.1 → 1.0.0-rc.3

package/README.md

@@ -75,7 +75,7 @@ Use `create-daloy --list-templates` to inspect available templates without creat
 
 A production-ready Node.js HTTP server using `@daloyjs/core` with:
 
-- Strict TypeScript and `tsx` for instant dev runs.
+- Strict TypeScript run natively by Node.js (built-in type stripping) — no transpiler needed for dev runs.
 - Hardened `.npmrc` for safer installs.
 - `secureHeaders`, `requestId`, and `rateLimit` enabled by default (`rateLimit` is global until you configure `keyGenerator` or trusted proxy headers).
 - A sample `GET /healthz` and contract-first `GET /books/:id` route with Zod validation.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "create-daloy",
-  "version": "1.0.0-rc.1",
+  "version": "1.0.0-rc.3",
   "description": "Scaffold a new DaloyJS project. Run with `pnpm create daloy`, `npm create daloy@latest`, `yarn create daloy`, or `bun create daloy`.",
   "type": "module",
   "license": "MIT",

package/sbom.cdx.json

@@ -1,25 +1,25 @@
 {
   "bomFormat": "CycloneDX",
   "specVersion": "1.5",
-  "serialNumber": "urn:uuid:2793b108-24bc-57cc-b24f-9dbf47b38ed0",
+  "serialNumber": "urn:uuid:837a492d-6f26-5ff8-b1e0-689b969309f7",
   "version": 1,
   "metadata": {
-    "timestamp": "2026-07-04T14:31:18.525Z",
+    "timestamp": "2026-07-09T19:29:37.132Z",
     "tools": [
       {
         "vendor": "DaloyJS",
         "name": "daloy-generate-sbom",
-        "version": "1.0.0-rc.1"
+        "version": "1.0.0-rc.3"
       }
     ],
     "authors": [],
     "component": {
       "type": "library",
-      "bom-ref": "pkg:npm/create-daloy@1.0.0-rc.1",
+      "bom-ref": "pkg:npm/create-daloy@1.0.0-rc.3",
       "name": "create-daloy",
-      "version": "1.0.0-rc.1",
+      "version": "1.0.0-rc.3",
       "description": "Scaffold a new DaloyJS project. Run with `pnpm create daloy`, `npm create daloy@latest`, `yarn create daloy`, or `bun create daloy`.",
-      "purl": "pkg:npm/create-daloy@1.0.0-rc.1",
+      "purl": "pkg:npm/create-daloy@1.0.0-rc.3",
       "licenses": [
         {
           "license": {
@@ -42,9 +42,9 @@
         }
       ],
       "swid": {
-        "tagId": "swidtag-create-daloy-1.0.0-rc.1",
+        "tagId": "swidtag-create-daloy-1.0.0-rc.3",
         "name": "create-daloy",
-        "version": "1.0.0-rc.1",
+        "version": "1.0.0-rc.3",
         "tagVersion": 0,
         "patch": false
       }
@@ -53,7 +53,7 @@
   "components": [],
   "dependencies": [
     {
-      "ref": "pkg:npm/create-daloy@1.0.0-rc.1",
+      "ref": "pkg:npm/create-daloy@1.0.0-rc.3",
       "dependsOn": []
     }
   ]

package/sbom.spdx.json

@@ -2,10 +2,10 @@
   "spdxVersion": "SPDX-2.3",
   "dataLicense": "CC0-1.0",
   "SPDXID": "SPDXRef-DOCUMENT",
-  "name": "create-daloy-1.0.0-rc.1",
-  "documentNamespace": "https://github.com/daloyjs/daloy/sbom/create-daloy-1.0.0-rc.1-2793b108-24bc-57cc-b24f-9dbf47b38ed0",
+  "name": "create-daloy-1.0.0-rc.3",
+  "documentNamespace": "https://github.com/daloyjs/daloy/sbom/create-daloy-1.0.0-rc.3-837a492d-6f26-5ff8-b1e0-689b969309f7",
   "creationInfo": {
-    "created": "2026-07-04T14:31:18.525Z",
+    "created": "2026-07-09T19:29:37.132Z",
     "creators": [
       "Tool: daloy-generate-sbom",
       "Organization: DaloyJS"
@@ -16,7 +16,7 @@
     {
       "SPDXID": "SPDXRef-Package-create-daloy",
       "name": "create-daloy",
-      "versionInfo": "1.0.0-rc.1",
+      "versionInfo": "1.0.0-rc.3",
       "downloadLocation": "https://github.com/daloyjs/daloy",
       "filesAnalyzed": false,
       "licenseConcluded": "MIT",
@@ -27,7 +27,7 @@
         {
           "referenceCategory": "PACKAGE-MANAGER",
           "referenceType": "purl",
-          "referenceLocator": "pkg:npm/create-daloy@1.0.0-rc.1"
+          "referenceLocator": "pkg:npm/create-daloy@1.0.0-rc.3"
         }
       ]
     }

package/templates/bun-basic/package.json

@@ -19,11 +19,11 @@
     "hooks:install": "git config core.hooksPath .githooks"
   },
   "dependencies": {
-    "@daloyjs/core": "^1.0.0-rc.1",
+    "@daloyjs/core": "^1.0.0-rc.3",
     "zod": "^4.4.3"
   },
   "devDependencies": {
-    "@hey-api/openapi-ts": "^0.97.1",
+    "@hey-api/openapi-ts": "^0.99.0",
     "@types/bun": "^1.1.0",
     "typescript": "^6.0.3"
   }

package/templates/cloudflare-worker/package.json

@@ -3,22 +3,24 @@
   "version": "0.0.1",
   "private": true,
   "type": "module",
+  "engines": {
+    "node": "^24.0.0 || >=26.0.0"
+  },
   "scripts": {
     "dev": "wrangler dev",
     "deploy": "wrangler deploy",
     "typecheck": "tsc --noEmit",
-    "test": "node --import tsx --test tests/**/*.test.ts",
+    "test": "node --test tests/**/*.test.ts",
     "contract": "daloy inspect --check src/index.ts",
     "audit": "pnpm audit --prod",
     "hooks:install": "git config core.hooksPath .githooks"
   },
   "dependencies": {
-    "@daloyjs/core": "^1.0.0-rc.1",
+    "@daloyjs/core": "^1.0.0-rc.3",
     "zod": "^4.4.3"
   },
   "devDependencies": {
     "@cloudflare/workers-types": "^4.20240909.0",
-    "tsx": "^4.22.3",
     "typescript": "^6.0.3",
     "wrangler": "^4.0.0"
   }

package/templates/cloudflare-worker/tsconfig.json

@@ -12,7 +12,9 @@
     "forceConsistentCasingInFileNames": true,
     "resolveJsonModule": true,
     "isolatedModules": true,
-    "noEmit": true
+    "noEmit": true,
+    "erasableSyntaxOnly": true,
+    "verbatimModuleSyntax": true
   },
   "include": ["src/**/*"]
 }

package/templates/deno-basic/deno.json

@@ -10,11 +10,11 @@
     "hooks:install": "git config core.hooksPath .githooks"
   },
   "imports": {
-    "@daloyjs/core": "jsr:@daloyjs/daloy@^1.0.0-rc.1",
-    "@daloyjs/core/banner": "jsr:@daloyjs/daloy@^1.0.0-rc.1/banner",
-    "@daloyjs/core/contract": "jsr:@daloyjs/daloy@^1.0.0-rc.1/contract",
-    "@daloyjs/core/deno": "jsr:@daloyjs/daloy@^1.0.0-rc.1/deno",
-    "@daloyjs/core/openapi": "jsr:@daloyjs/daloy@^1.0.0-rc.1/openapi",
+    "@daloyjs/core": "jsr:@daloyjs/daloy@^1.0.0-rc.3",
+    "@daloyjs/core/banner": "jsr:@daloyjs/daloy@^1.0.0-rc.3/banner",
+    "@daloyjs/core/contract": "jsr:@daloyjs/daloy@^1.0.0-rc.3/contract",
+    "@daloyjs/core/deno": "jsr:@daloyjs/daloy@^1.0.0-rc.3/deno",
+    "@daloyjs/core/openapi": "jsr:@daloyjs/daloy@^1.0.0-rc.3/openapi",
     "zod": "npm:zod@^4.4.3"
   },
   "compilerOptions": {

package/templates/node-basic/AGENTS.md

@@ -34,7 +34,7 @@ When `docs: true` is set in `new App({...})`, three routes are auto-mounted:
 - `src/index.ts` — calls `buildApp()` and starts the listener via `@daloyjs/core/node`. The only file that opens a port.
 - `scripts/dump-openapi.ts` — imports `buildApp()` and writes `generated/openapi.json`. Codegen reads from `buildApp()` only — never import `src/index.ts` from scripts.
 - `generated/` — machine-written by `pnpm gen`. Do not edit by hand.
-- `tests/` — `*.test.ts` files run with `node --test` (via `tsx`).
+- `tests/` — `*.test.ts` files run with `node --test` (Node.js strips TypeScript types natively).
 
 ## Imports
 

package/templates/node-basic/_agents/skills/daloyjs-best-practices/SKILL.md

@@ -243,7 +243,8 @@ needs to run code after the handler.
 ## Testing best practices
 
 Tests live under `tests/` and run with `node --test` (Node's built-in
-runner via `tsx`). Use **in-process** requests through `app.request()` —
+runner; Node.js strips TypeScript types natively). Use **in-process**
+requests through `app.request()` —
 no HTTP server, no port flakiness, no teardown.
 
 ```ts

package/templates/node-basic/package.json

@@ -11,22 +11,21 @@
     "start": "node dist/index.js",
     "build": "tsc -p tsconfig.build.json",
     "typecheck": "tsc --noEmit",
-    "test": "node --import tsx --test tests/**/*.test.ts",
+    "test": "node --test tests/**/*.test.ts",
     "contract": "daloy inspect --check src/build-app.ts",
-    "gen:openapi": "node --import tsx scripts/dump-openapi.ts",
+    "gen:openapi": "node scripts/dump-openapi.ts",
     "gen:client": "openapi-ts",
     "gen": "pnpm gen:openapi && pnpm gen:client",
     "audit": "pnpm audit --prod",
     "hooks:install": "git config core.hooksPath .githooks"
   },
   "dependencies": {
-    "@daloyjs/core": "^1.0.0-rc.1",
+    "@daloyjs/core": "^1.0.0-rc.3",
     "zod": "^4.4.3"
   },
   "devDependencies": {
-    "@hey-api/openapi-ts": "^0.97.1",
-    "@types/node": "^25.7.0",
-    "tsx": "^4.22.3",
+    "@hey-api/openapi-ts": "^0.99.0",
+    "@types/node": "^26.1.0",
     "typescript": "^6.0.3"
   }
 }

package/templates/node-basic/tsconfig.json

@@ -13,7 +13,9 @@
     "forceConsistentCasingInFileNames": true,
     "resolveJsonModule": true,
     "allowImportingTsExtensions": true,
-    "rewriteRelativeImportExtensions": true
+    "rewriteRelativeImportExtensions": true,
+    "erasableSyntaxOnly": true,
+    "verbatimModuleSyntax": true
   },
   "include": ["src/**/*", "scripts/**/*", "tests/**/*"],
   "exclude": ["node_modules", "dist"]

package/templates/vercel/AGENTS.md

@@ -38,7 +38,7 @@ This project uses TypeScript with `"allowImportingTsExtensions"`, so relative im
 import handler from "../api/index.ts";
 ```
 
-You import the file you see. Vercel and tsx resolve `.ts` directly. Bare package imports (`@daloyjs/core`, `zod`, ...) need no extension.
+You import the file you see. Vercel resolves `.ts` at deploy time; Node runs it natively (type stripping). Bare package imports (`@daloyjs/core`, `zod`, ...) need no extension.
 
 ## Core rules
 

package/templates/vercel/README.md

@@ -93,7 +93,7 @@ This project uses TypeScript with `"allowImportingTsExtensions"`. Relative impor
 import handler from "../api/index.ts";
 ```
 
-Vercel bundles the `api/` functions at deploy time and resolves `.ts` directly, and the test runner (tsx) does too.
+Vercel bundles the `api/` functions at deploy time and resolves `.ts` directly, and Node.js (>= 22.18) runs the tests and dev server directly via native type stripping.
 
 ## What's included
 

package/templates/vercel/package.json

@@ -3,22 +3,24 @@
   "version": "0.0.1",
   "private": true,
   "type": "module",
+  "engines": {
+    "node": "^24.0.0 || >=26.0.0"
+  },
   "scripts": {
-    "dev": "node --import tsx src/dev.ts",
+    "dev": "node --watch src/dev.ts",
     "deploy": "vercel deploy",
     "typecheck": "tsc --noEmit",
-    "test": "node --import tsx --test tests/**/*.test.ts",
+    "test": "node --test tests/**/*.test.ts",
     "contract": "daloy inspect --check api/index.ts",
     "audit": "pnpm audit --prod",
     "hooks:install": "git config core.hooksPath .githooks"
   },
   "dependencies": {
-    "@daloyjs/core": "^1.0.0-rc.1",
+    "@daloyjs/core": "^1.0.0-rc.3",
     "zod": "^4.4.3"
   },
   "devDependencies": {
-    "@types/node": "^25.7.0",
-    "tsx": "^4.22.3",
+    "@types/node": "^26.1.0",
     "typescript": "^6.0.3",
     "vercel": "^48.0.0"
   }

package/templates/vercel/tsconfig.json

@@ -13,7 +13,9 @@
     "resolveJsonModule": true,
     "isolatedModules": true,
     "noEmit": true,
-    "allowImportingTsExtensions": true
+    "allowImportingTsExtensions": true,
+    "erasableSyntaxOnly": true,
+    "verbatimModuleSyntax": true
   },
   "include": ["api/**/*.ts", "src/**/*.ts", "tests/**/*.ts"]
 }