cursedops 0.5.0 → 0.5.2

package/README.md

@@ -185,8 +185,18 @@ exported definitions and this file exports nothing, so eighteen copies read as z
 wrapper exists because `bun ../../tools/check-paths.ts .` died on its first step in every
 worktree (2026-09-17). The walk and the worktree follow-back are the copies' own; **no
 generation is still no pass** — a lone clone exits 1 saying which walk came back empty. Every
-argument that is not `--also` passes through to the laws (`bun run paths --prune`). This repo
-dogfoods it: `"paths": "bun src/paths.ts"`, and its own copy is gone.
+argument that is not `--also` passes through to the laws (`bun run paths --prune`).
+
+🔴 **Until the roster rule can read the bin, the wrapper is two lines that NAME the laws.**
+`check-doc-citations`' `pathsRunsThis` proves a repo runs it by reading the `paths` command or
+the one `scripts/` file it delegates to, so a bare `forge-paths` reads as unwired. The form that
+passes today — and the one this repo uses — is:
+
+```ts
+// scripts/paths.ts, with "paths": "bun run scripts/paths.ts"
+import { runGenerationLaws } from "cursedops/paths";
+process.exit(runGenerationLaws(import.meta.dir, { laws: ["check-paths.ts", "check-doc-citations.ts"], argv: process.argv.slice(2) }));
+```
 
 ## `cursedops/launchd`
 

package/package.json

@@ -1,13 +1,13 @@
 {
 	"name": "cursedops",
-	"version": "0.5.0",
+	"version": "0.5.2",
 	"description": "The build-and-ops answers this generation's apps wrote independently and identically: finding a generation's roots — and printing a command that runs when pasted — without knowing a path, the generation's whole-tree laws run over one repo from a checkout or a worktree, macOS launchd agent install/replace/remove and the live port a job serves, the scaffolding and verdicts of a deployed smoke (origin probe, the smoke's own environment, a network that lies about DNS, a settled version), the static-serving helpers eight apps copied — the path-traversal guard among them — the API floor that keeps an unmatched /api/... from ever being answered with the app shell, the commit and dirty flag a checkout-served process reports, the Cloudflare Worker deploy toolkit four apps copied (the deploy sequence, exact-set secrets over a pipe, origin-first rollback, the curl edge fetch, the row-for-row D1 import proof), and the public-surface ratchet three published libraries each carried a forked copy of. Mechanism only — no app knows its name from here. Bun, zero runtime dependencies (typescript is an optional peer, for public-surface only), ships source.",
 	"type": "module",
 	"scripts": {
 		"typecheck": "tsc -p tsconfig.json --noEmit",
 		"lint": "biome check .",
 		"test": "bun test src",
-		"paths": "bun src/paths.ts",
+		"paths": "bun run scripts/paths.ts",
 		"verify": "bun run paths && bun run typecheck && bun run lint && bun run test",
 		"prepublishOnly": "bun run verify"
 	},

package/src/workerDeploy.ts

@@ -4,7 +4,7 @@
  * variables, and the commands that build, stage, attach secrets and smoke.
  *
  * ```ts
- * import { cloudflareCredential, parseWorkerEnv, runWorkerDeploy, wranglerEnvArgs } from "cursedops/worker-deploy";
+ * import { cloudflareCredential, parseWorkerEnv, runWorkerDeploy, workerDeployDeps } from "cursedops/worker-deploy";
  *
  * const env = parseWorkerEnv(process.argv.slice(2));
  * const result = runWorkerDeploy({
@@ -12,8 +12,9 @@
  *   stampVars: { commit: "MUSIC_BUILD_COMMIT", dirty: "MUSIC_BUILD_DIRTY" },
  *   build: ["bun", "run", "build"],
  *   stageFirst: [["bun", "run", "scripts/worker-deploy.ts", "--env", "stage"], ["bun", "run", "scripts/worker-stage-walk.ts"]],
- *   secrets: ["bun", "run", "scripts/worker-secrets.ts", ...wranglerEnvArgs(env)],
- *   smoke: ["bun", "run", "scripts/worker-smoke.ts"],
+ *   // the app's own scripts take `--env stage`; `wranglerEnvArgs` is for WRANGLER's argv only
+ *   secrets: ["bun", "run", "scripts/worker-secrets.ts", ...(env === "stage" ? ["--env", "stage"] : [])],
+ *   smoke: ["bun", "run", "scripts/worker-smoke.ts", ...(env === "stage" ? ["--env", "stage"] : [])],
  *   credential: cloudflareCredential(file),
  * }, workerDeployDeps(ROOT));
  * process.exit(result.code);