cronus-ui 0.6.18 → 0.6.20

package/README.md

@@ -49,7 +49,7 @@ Notes that match the commander surface:
   `packages/cli/scripts/build-registry.ts` — each item carries its source, its npm
   `dependencies`, and its `registryDependencies` (other components it imports),
   derived by parsing imports.
-- The default registry is pinned to the CLI package version (`v0.6.18` here), not
+- The default registry is pinned to the CLI package version (`v0.6.20` here), not
   mutable `main`, so a published CLI reads the registry snapshot it was released
   with. Use `-r, --registry ./registry` when testing local registry changes before
   a release tag exists.
@@ -80,7 +80,7 @@ Notes that match the commander surface:
     "lib": "lib",
     "blocks": "components/blocks"
   },
-  "registry": "https://raw.githubusercontent.com/pedrogbraz/cronus-ui/v0.6.18/registry"
+  "registry": "https://raw.githubusercontent.com/pedrogbraz/cronus-ui/v0.6.20/registry"
 }
 ```
 

package/dist/commands/upgrade.js

@@ -5,7 +5,7 @@ import { tmpdir } from "node:os";
 import { join } from "node:path";
 import { createInterface } from "node:readline/promises";
 import pc from "picocolors";
-import { goldPatchAppShellChrome, goldPatchHomePage, goldPatchShellLayout, goldPatchTeamPage, isGoldPathTemplate, } from "../compose/gold-path.js";
+import { goldPatchAppShellChrome, goldPatchHomePage, goldPatchShellLayout, goldPatchTeamPage, isGoldPathTemplate, reemitGoldPathOwned, } from "../compose/gold-path.js";
 import { buildComposePlan } from "../compose/plan.js";
 import { baseSnapshotDest, filterManifestToComposedPages, listBaseSnapshotRels, readBaseSnapshot, reloadManifest, } from "../compose/reload.js";
 import { renderPlan } from "../compose/render.js";
@@ -465,6 +465,21 @@ function goldPathSurfaceRels(cwd, composed) {
     }
     return [...rels];
 }
+/**
+ * `--all` on saas/admin: re-emit compose's `always: true` gold-path files so
+ * CLI gold-path fixes reach apps composed on an older release. Named upgrades
+ * (e.g. `upgrade stats`) do not touch them. auth.ts / schema stay user-owned.
+ */
+async function reemitGoldPathOwnedOnUpgrade(cwd, config, composed, upgradeComposed) {
+    if (!upgradeComposed)
+        return;
+    if (!Object.keys(composed).some((key) => isGoldPathTemplate(key)))
+        return;
+    const written = await reemitGoldPathOwned(cwd, config);
+    if (written.length === 0)
+        return;
+    log.ok(`gold-path owned: re-emitted ${written.join(", ")}`);
+}
 async function repatchGoldPathSurfaces(cwd, config, composed) {
     if (!Object.keys(composed).some((key) => isGoldPathTemplate(key)))
         return;
@@ -834,6 +849,7 @@ export async function upgrade(names, options) {
     const newlyInstalled = await installPendingBlocks(itemPlans, config, cwd, targetVersion);
     Object.assign(installed, newlyInstalled);
     const written = await applyPlans(itemPlans, options, confirm);
+    await reemitGoldPathOwnedOnUpgrade(cwd, config, composed, upgradeComposed);
     await repatchGoldPathSurfaces(cwd, config, composed);
     await refreshComposeSnapshots(itemPlans);
     // Manifest: record every item that now fully embodies the target release.

package/dist/compose/gold-path.d.ts

@@ -67,9 +67,15 @@ export declare function patchTeamPageSource(source: string, membersImport: strin
  * app chrome. Idempotent. Returns undefined when AppShellNav is missing.
  */
 export declare function patchShellLayoutSource(source: string, authImport: string): string | undefined;
+/**
+ * Re-emit compose's `always: true` gold-path files. Idempotent when bytes
+ * already match. Used by `upgrade --all` so CLI gold-path fixes reach apps
+ * composed on an older release without clobbering auth.ts / schema.
+ */
+export declare function reemitGoldPathOwned(targetDir: string, config: CronusUIConfig): Promise<string[]>;
 /**
  * Write sqlite + Drizzle + Better-Auth files into a composed saas/admin app.
- * Overwrites lib/auth-adapter.ts, lib/items.ts, and lib/members.ts always.
+ * Overwrites owned adapters/panels always (`always: true`).
  * Patches the shell home, /team, and shell layout only when compose wrote them
  * this run.
  */

package/dist/compose/gold-path.js

@@ -2,6 +2,7 @@
  * Authenticated gold path for saas/admin compose: SQLite + Drizzle + Better-Auth.
  * Always sqlite — postgres/mysql live in create-cronus-stack.
  */
+import { randomBytes } from "node:crypto";
 import { existsSync } from "node:fs";
 import { readFile } from "node:fs/promises";
 import { join } from "node:path";
@@ -66,12 +67,13 @@ const GOLD_PATH_SCRIPTS = {
     "db:generate": "drizzle-kit generate",
     "db:studio": "drizzle-kit studio",
 };
+const ENV_EXAMPLE_SECRET = "change-me-to-a-32-character-secret";
 const ENV_VARS = {
     DATABASE_URL: "file:./data/app.db",
-    BETTER_AUTH_SECRET: "change-me-to-a-32-character-secret",
+    BETTER_AUTH_SECRET: ENV_EXAMPLE_SECRET,
     BETTER_AUTH_URL: "http://localhost:3000",
 };
-const GITIGNORE_ENTRIES = ["*.db", "data/", "drizzle/"];
+const GITIGNORE_ENTRIES = ["*.db", "data/", "drizzle/", ".env"];
 const DATABASE_URL_FALLBACK = "file:./data/app.db";
 const TITLE_MAX = 200;
 export function goldPathLayout(config) {
@@ -1251,6 +1253,21 @@ function mergeNextConfig(raw) {
     }
     return `${raw.trimEnd()}\n`;
 }
+function envFileBody(secret) {
+    return `${Object.entries({ ...ENV_VARS, BETTER_AUTH_SECRET: secret })
+        .map(([key, value]) => `${key}=${value}`)
+        .join("\n")}\n`;
+}
+function newAuthSecret() {
+    return randomBytes(32).toString("hex");
+}
+/** Write `.env` once so first `bun dev` has a real Better Auth secret. Never overwrite. */
+async function writeDotEnvIfMissing(targetDir) {
+    const dest = resolveSafeDest(targetDir, ".", ".env");
+    if (existsSync(dest))
+        return;
+    await writeFileEnsured(dest, envFileBody(newAuthSecret()));
+}
 function mergeEnvExample(raw) {
     const lines = raw.split(/\r?\n/);
     const keys = new Set(lines.map((line) => {
@@ -1286,97 +1303,115 @@ async function writeRel(targetDir, rel, content, overwrite, always, written, ski
     written.push(rel);
 }
 /**
- * Write sqlite + Drizzle + Better-Auth files into a composed saas/admin app.
- * Overwrites lib/auth-adapter.ts, lib/items.ts, and lib/members.ts always.
- * Patches the shell home, /team, and shell layout only when compose wrote them
- * this run.
+ * Gold-path files compose always overwrites (`always: true`). Scaffold files
+ * (auth.ts, schema, middleware) are not in this list — those stay user-owned
+ * after the first write.
  */
-export async function applyGoldPath(options) {
-    const { targetDir, config, generatedFiles, overwrite } = options;
+function goldPathOwnedFiles(config, appDir) {
     const layout = goldPathLayout(config);
-    const appDir = resolveAppDir(targetDir, layout, generatedFiles);
-    const middlewareRel = appDir === "src/app"
-        ? "src/middleware.ts"
-        : appDir === "app"
-            ? "middleware.ts"
-            : layout.middlewareRel;
     const authImport = `${config.aliases.lib}/auth`;
     const authClientImport = `${config.aliases.lib}/auth-client`;
     const itemsActionsImport = `${config.aliases.lib}/items`;
     const itemsViewImport = "@/components/items-view";
-    const itemsImport = "@/components/items-panel";
     const membersActionsImport = `${config.aliases.lib}/members`;
     const membersViewImport = "@/components/members-view";
-    const membersImport = "@/components/members-panel";
-    const workspaceImport = "@/components/workspace-menu";
     const inviteImport = "@/components/invite-member";
-    const sessionImport = "@/components/session-user";
-    const chromeRel = `${posix(config.paths.blocks)}/app-shell-chrome.tsx`;
-    const written = [];
-    const skipped = [];
-    const files = [
-        { rel: "drizzle.config.ts", content: drizzleConfigSource(layout.dbDir) },
-        { rel: `${layout.dbDir}/schema.ts`, content: dbSchemaSource() },
-        { rel: `${layout.dbDir}/index.ts`, content: dbClientSource() },
-        { rel: `${layout.libDir}/auth.ts`, content: authServerSource() },
-        { rel: `${layout.libDir}/auth-client.ts`, content: authClientSource() },
-        { rel: `${layout.libDir}/auth-adapter.ts`, content: authAdapterSource(), always: true },
-        {
-            rel: `${layout.libDir}/items.ts`,
-            content: itemsActionsSource(authImport),
-            always: true,
-        },
-        {
-            rel: `${appDir}/api/auth/[...all]/route.ts`,
-            content: authRouteSource(authImport),
-        },
-        { rel: middlewareRel, content: middlewareSource() },
+    return [
+        { rel: `${layout.libDir}/auth-adapter.ts`, content: authAdapterSource() },
+        { rel: `${layout.libDir}/items.ts`, content: itemsActionsSource(authImport) },
         {
             rel: `${layout.componentsDir}/items-panel.tsx`,
             content: itemsPanelSource(itemsActionsImport, itemsViewImport),
-            always: true,
         },
         {
             rel: `${layout.componentsDir}/items-view.tsx`,
             content: itemsViewSource(itemsActionsImport),
-            always: true,
-        },
-        {
-            rel: `${layout.libDir}/members.ts`,
-            content: membersActionsSource(authImport),
-            always: true,
         },
+        { rel: `${layout.libDir}/members.ts`, content: membersActionsSource(authImport) },
         {
             rel: `${layout.componentsDir}/members-panel.tsx`,
             content: membersPanelSource(membersActionsImport, membersViewImport),
-            always: true,
         },
         {
             rel: `${layout.componentsDir}/members-view.tsx`,
             content: membersViewSource(inviteImport),
-            always: true,
         },
         {
             rel: `${layout.componentsDir}/workspace-menu.tsx`,
             content: workspaceMenuSource(authClientImport),
-            always: true,
         },
         {
             rel: `${layout.componentsDir}/invite-member.tsx`,
             content: inviteMemberSource(authClientImport),
-            always: true,
         },
         {
             rel: `${layout.componentsDir}/session-user.tsx`,
             content: sessionUserSource(authClientImport),
-            always: true,
         },
         {
             rel: `${appDir}/(bare)/accept-invitation/page.tsx`,
             content: acceptInvitationPageSource(authClientImport),
-            always: true,
         },
     ];
+}
+/**
+ * Re-emit compose's `always: true` gold-path files. Idempotent when bytes
+ * already match. Used by `upgrade --all` so CLI gold-path fixes reach apps
+ * composed on an older release without clobbering auth.ts / schema.
+ */
+export async function reemitGoldPathOwned(targetDir, config) {
+    const layout = goldPathLayout(config);
+    const appDir = resolveAppDir(targetDir, layout, []);
+    const written = [];
+    for (const file of goldPathOwnedFiles(config, appDir)) {
+        const dest = resolveSafeDest(targetDir, ".", file.rel);
+        if (existsSync(dest)) {
+            const current = await readFile(dest, "utf8");
+            if (current === file.content)
+                continue;
+        }
+        await writeFileEnsured(dest, file.content);
+        written.push(file.rel);
+    }
+    return written;
+}
+/**
+ * Write sqlite + Drizzle + Better-Auth files into a composed saas/admin app.
+ * Overwrites owned adapters/panels always (`always: true`).
+ * Patches the shell home, /team, and shell layout only when compose wrote them
+ * this run.
+ */
+export async function applyGoldPath(options) {
+    const { targetDir, config, generatedFiles, overwrite } = options;
+    const layout = goldPathLayout(config);
+    const appDir = resolveAppDir(targetDir, layout, generatedFiles);
+    const middlewareRel = appDir === "src/app"
+        ? "src/middleware.ts"
+        : appDir === "app"
+            ? "middleware.ts"
+            : layout.middlewareRel;
+    const authImport = `${config.aliases.lib}/auth`;
+    const itemsImport = "@/components/items-panel";
+    const membersImport = "@/components/members-panel";
+    const workspaceImport = "@/components/workspace-menu";
+    const inviteImport = "@/components/invite-member";
+    const sessionImport = "@/components/session-user";
+    const chromeRel = `${posix(config.paths.blocks)}/app-shell-chrome.tsx`;
+    const written = [];
+    const skipped = [];
+    const files = [
+        { rel: "drizzle.config.ts", content: drizzleConfigSource(layout.dbDir) },
+        { rel: `${layout.dbDir}/schema.ts`, content: dbSchemaSource() },
+        { rel: `${layout.dbDir}/index.ts`, content: dbClientSource() },
+        { rel: `${layout.libDir}/auth.ts`, content: authServerSource() },
+        { rel: `${layout.libDir}/auth-client.ts`, content: authClientSource() },
+        {
+            rel: `${appDir}/api/auth/[...all]/route.ts`,
+            content: authRouteSource(authImport),
+        },
+        { rel: middlewareRel, content: middlewareSource() },
+        ...goldPathOwnedFiles(config, appDir).map((file) => ({ ...file, always: true })),
+    ];
     for (const file of files) {
         await writeRel(targetDir, file.rel, file.content, overwrite, file.always === true, written, skipped);
     }
@@ -1445,9 +1480,8 @@ export async function applyGoldPath(options) {
     }
     await mergeTextFile(targetDir, "package.json", mergePackageJson);
     await mergeOrCreate(targetDir, "next.config.mjs", nextConfigSource(), mergeNextConfig);
-    await mergeOrCreate(targetDir, ".env.example", `${Object.entries(ENV_VARS)
-        .map(([k, v]) => `${k}=${v}`)
-        .join("\n")}\n`, mergeEnvExample);
+    await mergeOrCreate(targetDir, ".env.example", envFileBody(ENV_EXAMPLE_SECRET), mergeEnvExample);
+    await writeDotEnvIfMissing(targetDir);
     await mergeOrCreate(targetDir, ".gitignore", `${GITIGNORE_ENTRIES.join("\n")}\n`, mergeGitignore);
     return { written, skipped };
 }

package/dist/config.d.ts

@@ -1,6 +1,6 @@
 export declare const CONFIG_FILE = "cronus-ui.json";
-export declare const CLI_VERSION = "0.6.18";
-export declare const DEFAULT_REGISTRY = "https://raw.githubusercontent.com/pedrogbraz/cronus-ui/v0.6.18/registry";
+export declare const CLI_VERSION = "0.6.20";
+export declare const DEFAULT_REGISTRY = "https://raw.githubusercontent.com/pedrogbraz/cronus-ui/v0.6.20/registry";
 /** Manifest entry `add`/`upgrade` record per installed registry item. */
 export interface InstalledRecord {
     /** Registry release the files came from (git tag without the leading "v"). */

package/dist/config.js

@@ -2,7 +2,7 @@ import { existsSync } from "node:fs";
 import { readFile, writeFile } from "node:fs/promises";
 import { join } from "node:path";
 export const CONFIG_FILE = "cronus-ui.json";
-export const CLI_VERSION = "0.6.18";
+export const CLI_VERSION = "0.6.20";
 export const DEFAULT_REGISTRY = `https://raw.githubusercontent.com/pedrogbraz/cronus-ui/v${CLI_VERSION}/registry`;
 export const DEFAULT_CONFIG = {
     aliases: { ui: "@/components/ui", lib: "@/lib", blocks: "@/components/blocks" },

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "cronus-ui",
-  "version": "0.6.18",
+  "version": "0.6.20",
   "description": "cronus-ui — add Cronus UI components to your project, shadcn-style (copy-paste registry).",
   "type": "module",
   "license": "MIT",
@@ -54,7 +54,7 @@
     "registry:check": "bun run scripts/check-registry.ts"
   },
   "dependencies": {
-    "@cronus-ui/ai-kit": "0.6.18",
+    "@cronus-ui/ai-kit": "0.6.20",
     "commander": "^15.0.0",
     "picocolors": "^1.1.1"
   },