fg-devkit 1.5.2 → 1.6.0

package/scaffold/vue/src/router/index.ts

@@ -0,0 +1,22 @@
+import { createRouter, createWebHistory } from 'vue-router'
+
+const routes = [
+  {
+    path: '/',
+    name: 'home',
+    meta: { title: 'Home' },
+    component: () => import('@/views/HomeView.vue'),
+  },
+]
+
+const router = createRouter({
+  history: createWebHistory(import.meta.env.BASE_URL),
+  routes,
+})
+
+router.afterEach((to) => {
+  const title = typeof to.meta.title === 'string' ? to.meta.title : 'App'
+  document.title = `${title} | PLACEHOLDER_APP_NAME`
+})
+
+export default router

package/scaffold/vue/src/style.css

@@ -0,0 +1,7 @@
+@import 'fds-vue-core/tokens.css';
+@import 'tailwindcss';
+@config '../tailwind.config.js';
+@source '../node_modules/fds-vue-core';
+@import 'fds-vue-core/slot-styles.css';
+@import 'fds-vue-core/apply.css';
+@import 'fds-vue-core/fonts.css';

package/scaffold/vue/src/views/HomeView.vue

@@ -0,0 +1,10 @@
+<script setup lang="ts">
+import env from '@/config/env'
+</script>
+
+<template>
+  <main class="p-6">
+    <h1 class="text-xl font-bold">PLACEHOLDER_APP_NAME</h1>
+    <p class="mt-2 text-sm text-gray-700">Environment: {{ env.environment }}</p>
+  </main>
+</template>

package/scaffold/vue/src/vite-env.d.ts

@@ -0,0 +1 @@
+/// <reference types="vite/client" />

package/scaffold/vue/start-container.sh

@@ -0,0 +1,15 @@
+#!/bin/bash
+
+if [[ ${APP_API_URL} ]]; then
+  cat > ${CONFIG_FILE_PATH} <<EOL
+{
+  "APP_API_URL": "${APP_API_URL}",
+  "VERSION": {
+     "hash": "$(<build_hash.txt)",
+     "date": "$(<build_date.txt)"
+  }
+}
+EOL
+fi
+
+exec "$@"

package/scaffold/vue/tailwind.config.js

@@ -0,0 +1,21 @@
+/** @type {import('tailwindcss').Config} */
+import preset from 'fds-vue-core/tailwind.preset.cjs'
+
+export default {
+  presets: [preset],
+  content: [
+    './index.html',
+    './src/**/*.{vue,js,ts,jsx,tsx}',
+  ],
+  safelist: [
+    'max-w-screen-xs',
+    'max-w-screen-sm',
+    'max-w-screen-md',
+    'max-w-screen-lg',
+    'max-w-screen-xl',
+    'max-w-screen-2xl',
+    'max-w-screen-3xl',
+    'max-w-screen-4xl',
+  ],
+  plugins: [],
+}

package/scaffold/vue/vite.config.ts

@@ -0,0 +1,41 @@
+import { defineConfig } from 'vite'
+import path, { dirname, resolve } from 'node:path'
+import vue from '@vitejs/plugin-vue'
+import { fileURLToPath } from 'node:url'
+import VueI18nPlugin from '@intlify/unplugin-vue-i18n/vite'
+import tailwindcss from '@tailwindcss/vite'
+
+export default defineConfig({
+  plugins: [
+    vue({
+      template: {
+        compilerOptions: {
+          isCustomElement: (tag: string) => tag.startsWith('fds-'),
+        },
+      },
+    }),
+    VueI18nPlugin({
+      include: resolve(dirname(fileURLToPath(import.meta.url)), './src/lang/**'),
+      strictMessage: false,
+    }),
+    tailwindcss(),
+  ],
+  resolve: {
+    alias: {
+      '@': path.resolve(__dirname, 'src'),
+    },
+  },
+  server: {
+    port: 5173,
+    strictPort: true,
+    watch: {
+      usePolling: true,
+    },
+    fs: {
+      allow: ['..'],
+    },
+  },
+  css: {
+    devSourcemap: true,
+  },
+})

package/scripts/fg-devkit.mjs

@@ -9,6 +9,7 @@
  *   pnpm exec fg-devkit policy-vulns [policy-file]
  *   pnpm exec fg-devkit repo-vulns
  *   pnpm exec fg-devkit fleet-vulns [projects-root] [--summary-only] [--delay-ms=<ms>]
+ *   pnpm exec fg-devkit fleet-bump-fg-devkit [projects-root] [--dry-run]
  *   pnpm exec fg-devkit policy-upgrade [policy-file] [ncu-args...]
  *   pnpm exec fg-devkit sync-project-configs   (VS Code + tooling sync; overwrites config files)
  *   pnpm exec fg-devkit sync-tooling-configs   (tooling sync only; overwrites config files)
@@ -26,11 +27,14 @@
  *   pnpm exec fg-devkit format-check [prettier-args...] (same as format plus --check)
  *   pnpm exec fg-devkit typecheck [vue-tsc-args...]   (run vue-tsc with fg-devkit bundled package)
  *   pnpm exec fg-devkit typecheck-watch [vue-tsc-args...] (same as typecheck plus --watch)
+ *   pnpm exec fg-devkit poeditor-download [args...] (download translations using poeditor/.poeditor.json + env token)
+ *   pnpm exec fg-devkit poeditor-upload [args...]   (upload translations using poeditor/.poeditor.json + env token)
  * Interactive menu (no subcommand):
  *   pnpm exec fg-devkit
  *
  * Maintainer-only policy regeneration is not exposed here; run
- * node node_modules/fg-devkit/scripts/refresh-dependency-policy-from-repos.mjs from a checkout when needed.
+ * node node_modules/fg-devkit/scripts/refresh-dependency-policy-from-repos.mjs from a checkout when needed
+ * (that script also refreshes scaffold/vue/package.json versions from the policy).
  */
 
 import { spawnSync } from 'node:child_process'
@@ -250,7 +254,7 @@ function runMaintainerPolicyUpgradeAndCommit() {
   }
 
   const [only] = changed
-  const stageCode = stageFiles(['configs/dependency-policy.vue-workspace.json'])
+  const stageCode = stageFiles(['configs/dependency-policy.vue-workspace.json', 'scaffold/vue/package.json'])
   if (stageCode !== 0) return stageCode
 
   const commitMessage = `dep(${only.name}): bump to ${only.to}`
@@ -408,6 +412,7 @@ const DIRECT_COMMANDS = {
   'policy-vulns': 'policy-vulns.mjs',
   'repo-vulns': 'repo-vulns.mjs',
   'fleet-vulns': 'fleet-vulns.mjs',
+  'fleet-bump-fg-devkit': 'fleet-bump-fg-devkit.mjs',
   'policy-upgrade': 'policy-upgrade.mjs',
   'sync-project-configs': 'sync-project-configs.mjs',
   'sync-tooling-configs': 'sync-tooling-configs.mjs',
@@ -415,6 +420,9 @@ const DIRECT_COMMANDS = {
   'sync-consumer-scripts': 'sync-consumer-scripts.mjs',
   'setup-lefthook': 'setup-lefthook',
   'prune-consumer-deps': 'prune-consumer-deps.mjs',
+  'sync-scaffold-vue-deps': 'sync-scaffold-vue-deps.mjs',
+  'poeditor-download': 'poeditor-download.mjs',
+  'poeditor-upload': 'poeditor-upload.mjs',
 }
 
 function printHelp() {
@@ -429,6 +437,8 @@ Commands:
   repo-vulns                      Check all repo dependencies for vulnerabilities via pnpm audit
   fleet-vulns [projects-root] [--summary-only] [--delay-ms=<ms>]
                                  Run pnpm audit across Vue repos (full output + combined summary)
+  fleet-bump-fg-devkit [projects-root] [--dry-run]
+                                 Bump fg-devkit to latest across Vue repos, then run pnpm install
   policy-upgrade [policy-file] [ncu-args...]
                                  Upgrade policy packages via npm-check-updates (default interactive)
   sync-project-configs            VS Code + tooling sync (overwrites config files)
@@ -448,6 +458,12 @@ Commands:
   format-check [prettier-args...] Run Prettier with --check using fg-devkit bundled package
   typecheck [vue-tsc-args...]       Run vue-tsc using fg-devkit bundled package
   typecheck-watch [vue-tsc-args...] Run vue-tsc with --watch using fg-devkit bundled package
+  poeditor-download [args...]       Download locale files via PoEditor (reads poeditor/.poeditor.json by default)
+  poeditor-upload [args...]         Upload locale file via PoEditor (reads poeditor/.poeditor.json by default)
+  scaffold-vue <target-dir> [--name …] [--slug …] [--force] …
+                                 Copy the bundled Vue scaffold into target-dir (see script header)
+  sync-scaffold-vue-deps [policy-file]
+                                 Align scaffold/vue/package.json versions to the dependency policy
 
 With no command, opens an interactive menu.
 
@@ -517,7 +533,7 @@ const MAINTAINER_MENU = [
   },
   {
     key: 'm3',
-    label: 'Maintainer: Refresh dependency policy from repos',
+    label: 'Maintainer: Refresh dependency policy from repos (and scaffold/vue package.json)',
     run: () => runNode('refresh-dependency-policy-from-repos.mjs'),
   },
   {
@@ -540,6 +556,11 @@ const MAINTAINER_MENU = [
     label: 'Maintainer: Check vulnerabilities across all Vue repos',
     run: () => runNode('fleet-vulns.mjs'),
   },
+  {
+    key: 'm8',
+    label: 'Maintainer: Bump fg-devkit in all Vue repos and run pnpm install',
+    run: () => runNode('fleet-bump-fg-devkit.mjs'),
+  },
 ]
 
 function isFgDevkitMaintainerContext() {
@@ -638,6 +659,10 @@ async function main() {
       process.exitCode = runNode('vuln-commit.mjs', rest)
       return
     }
+    if (sub === 'scaffold-vue') {
+      process.exitCode = runNode('scaffold-vue.mjs', rest)
+      return
+    }
     if (sub === 'lint') {
       process.exitCode = runBundledEslint(rest.length > 0 ? rest : ['.'])
       return

package/scripts/fleet-bump-fg-devkit.mjs

@@ -0,0 +1,135 @@
+#!/usr/bin/env node
+/**
+ * Bumps fg-devkit to latest in Vue repositories and runs pnpm install.
+ *
+ * Usage:
+ *   pnpm exec fg-devkit fleet-bump-fg-devkit [projects-root] [--dry-run]
+ */
+
+import fs from 'node:fs'
+import path from 'node:path'
+import { spawnSync } from 'node:child_process'
+import { fileURLToPath } from 'node:url'
+
+const scriptDir = path.dirname(fileURLToPath(import.meta.url))
+const cliArgs = process.argv.slice(2)
+const dryRun = cliArgs.includes('--dry-run')
+const projectsRootArg = cliArgs.find((a) => !a.startsWith('-'))
+const projectsRoot = projectsRootArg ? path.resolve(process.cwd(), projectsRootArg) : path.resolve(scriptDir, '../..')
+
+function walk(dir, acc = []) {
+  for (const item of fs.readdirSync(dir, { withFileTypes: true })) {
+    if (item.name === 'node_modules' || item.name === '.git') continue
+    const p = path.join(dir, item.name)
+    if (item.isDirectory()) walk(p, acc)
+    else if (item.name === 'package.json') acc.push(p)
+  }
+  return acc
+}
+
+function readJson(p) {
+  return JSON.parse(fs.readFileSync(p, 'utf8'))
+}
+
+function isVueProject(pkg) {
+  return Boolean(pkg.dependencies?.vue || pkg.devDependencies?.vue)
+}
+
+function hasFgDevkit(pkg) {
+  return Boolean(pkg.dependencies?.['fg-devkit'] || pkg.devDependencies?.['fg-devkit'])
+}
+
+function isFgDevkitRepo(pkg) {
+  return pkg?.name === 'fg-devkit'
+}
+
+const packageJsonFiles = walk(projectsRoot)
+const repos = []
+for (const packageJsonPath of packageJsonFiles) {
+  try {
+    const pkg = readJson(packageJsonPath)
+    if (!isVueProject(pkg)) continue
+    if (isFgDevkitRepo(pkg)) continue
+    if (!hasFgDevkit(pkg)) continue
+    repos.push(path.dirname(packageJsonPath))
+  } catch {
+    // Ignore invalid package.json files.
+  }
+}
+
+const uniqueRepos = [...new Set(repos)].sort((a, b) => a.localeCompare(b))
+if (uniqueRepos.length === 0) {
+  console.log(`[fleet-bump-fg-devkit] No Vue repositories with fg-devkit found under ${projectsRoot}`)
+  process.exit(0)
+}
+
+console.log(`[fleet-bump-fg-devkit] projectsRoot=${projectsRoot}`)
+console.log(`[fleet-bump-fg-devkit] repositories=${uniqueRepos.length}`)
+
+let failures = 0
+let updated = 0
+
+for (const repoDir of uniqueRepos) {
+  const repoName = path.basename(repoDir)
+  const bumpArgs = ['up', 'fg-devkit@latest']
+  const installArgs = ['install']
+
+  if (dryRun) {
+    console.log(`[fleet-bump-fg-devkit] DRY RUN ${repoName}: pnpm ${bumpArgs.join(' ')}`)
+    console.log(`[fleet-bump-fg-devkit] DRY RUN ${repoName}: pnpm ${installArgs.join(' ')}`)
+    continue
+  }
+
+  console.log(`\n[fleet-bump-fg-devkit] Updating ${repoName}`)
+  const bump = spawnSync('pnpm', bumpArgs, {
+    cwd: repoDir,
+    stdio: 'inherit',
+    env: {
+      ...process.env,
+      npm_config_save_prefix: '',
+      npm_config_save_exact: 'true',
+    },
+  })
+
+  if (bump.error) {
+    failures += 1
+    console.error(`[fleet-bump-fg-devkit] FAIL ${repoName}: ${bump.error.message}`)
+    continue
+  }
+
+  const bumpStatus = bump.status ?? 1
+  if (bumpStatus !== 0) {
+    failures += 1
+    console.error(`[fleet-bump-fg-devkit] FAIL ${repoName}: pnpm up exited with code ${bumpStatus}`)
+    continue
+  }
+
+  const install = spawnSync('pnpm', installArgs, {
+    cwd: repoDir,
+    stdio: 'inherit',
+    env: {
+      ...process.env,
+      npm_config_save_prefix: '',
+      npm_config_save_exact: 'true',
+    },
+  })
+
+  if (install.error) {
+    failures += 1
+    console.error(`[fleet-bump-fg-devkit] FAIL ${repoName}: ${install.error.message}`)
+    continue
+  }
+
+  const status = install.status ?? 1
+  if (status !== 0) {
+    failures += 1
+    console.error(`[fleet-bump-fg-devkit] FAIL ${repoName}: pnpm install exited with code ${status}`)
+    continue
+  }
+
+  updated += 1
+  console.log(`[fleet-bump-fg-devkit] OK ${repoName}`)
+}
+
+console.log(`\n[fleet-bump-fg-devkit] Done: updated=${updated}, failed=${failures}`)
+process.exit(failures > 0 ? 1 : 0)

package/scripts/poeditor-common.mjs

@@ -0,0 +1,118 @@
+import fs from 'node:fs'
+import path from 'node:path'
+
+function readJsonIfExists(filePath) {
+  if (!fs.existsSync(filePath)) return null
+  try {
+    return JSON.parse(fs.readFileSync(filePath, 'utf8'))
+  } catch {
+    return null
+  }
+}
+
+function resolveFromCwd(p) {
+  return path.isAbsolute(p) ? p : path.resolve(process.cwd(), p)
+}
+
+function resolveLegacyConfig(raw) {
+  // Legacy format: { "<projectId>": { "path": "./src/lang/" } }
+  const [firstKey] = Object.keys(raw ?? {})
+  if (!firstKey) return null
+  const value = raw[firstKey]
+  if (!value || typeof value !== 'object') return null
+  return {
+    projectId: firstKey,
+    downloadPath: typeof value.path === 'string' ? value.path : './src/lang/',
+    languages: Array.isArray(value.languages) ? value.languages.filter((x) => typeof x === 'string' && x.trim() !== '') : undefined,
+    defaultLanguage: typeof value.defaultLanguage === 'string' ? value.defaultLanguage : 'sv',
+    defaultFormat: typeof value.defaultFormat === 'string' ? value.defaultFormat : 'json',
+    uploadFile: typeof value.uploadFile === 'string' ? value.uploadFile : './src/lang/sv.json',
+  }
+}
+
+function resolveObjectConfig(raw) {
+  if (!raw || typeof raw !== 'object') return null
+  if (typeof raw.projectId !== 'string') return null
+  return {
+    projectId: raw.projectId,
+    downloadPath: typeof raw.downloadPath === 'string' ? raw.downloadPath : './src/lang/',
+    languages: Array.isArray(raw.languages) ? raw.languages.filter((x) => typeof x === 'string' && x.trim() !== '') : undefined,
+    defaultLanguage: typeof raw.defaultLanguage === 'string' ? raw.defaultLanguage : 'sv',
+    defaultFormat: typeof raw.defaultFormat === 'string' ? raw.defaultFormat : 'json',
+    uploadFile: typeof raw.uploadFile === 'string' ? raw.uploadFile : './src/lang/sv.json',
+  }
+}
+
+export function parseFlags(argv) {
+  const positional = []
+  const flags = new Map()
+  for (let i = 0; i < argv.length; i += 1) {
+    const a = argv[i]
+    if (!a.startsWith('--')) {
+      positional.push(a)
+      continue
+    }
+    const key = a.slice(2)
+    const next = argv[i + 1]
+    if (next && !next.startsWith('--')) {
+      if (flags.has(key)) {
+        const prev = flags.get(key)
+        flags.set(key, Array.isArray(prev) ? [...prev, next] : [prev, next])
+      } else {
+        flags.set(key, next)
+      }
+      i += 1
+    } else {
+      flags.set(key, 'true')
+    }
+  }
+  return { positional, flags }
+}
+
+export function getFlagValue(flags, key, fallback = undefined) {
+  const value = flags.get(key)
+  if (value === undefined) return fallback
+  if (Array.isArray(value)) return value[value.length - 1]
+  return value
+}
+
+export function getFlagList(flags, key) {
+  const value = flags.get(key)
+  if (value === undefined) return []
+  return Array.isArray(value) ? value : [value]
+}
+
+export function loadPoeditorConfig(flags) {
+  const configPath = resolveFromCwd(getFlagValue(flags, 'config', './poeditor/.poeditor.json'))
+  const raw = readJsonIfExists(configPath) ?? {}
+  const resolved = resolveObjectConfig(raw) ?? resolveLegacyConfig(raw) ?? {}
+  return {
+    configPath,
+    projectId: resolved.projectId ?? '000000',
+    downloadPath: resolved.downloadPath ?? './src/lang/',
+    languages: resolved.languages ?? undefined,
+    defaultLanguage: resolved.defaultLanguage ?? 'sv',
+    defaultFormat: resolved.defaultFormat ?? 'json',
+    uploadFile: resolved.uploadFile ?? './src/lang/sv.json',
+  }
+}
+
+export function getPoeditorToken(flags) {
+  const fromFlag = getFlagValue(flags, 'api-token')
+  if (fromFlag) return fromFlag
+  if (process.env.POEDITOR_API_KEY) return process.env.POEDITOR_API_KEY
+  const publicConfigPath = resolveFromCwd('./public/config.json')
+  const publicConfig = readJsonIfExists(publicConfigPath)
+  if (typeof publicConfig?.POEDITOR_API_KEY === 'string') {
+    return publicConfig.POEDITOR_API_KEY
+  }
+  return ''
+}
+
+export function ensureDir(dirPath) {
+  fs.mkdirSync(dirPath, { recursive: true })
+}
+
+export function resolvePathFromCwd(p) {
+  return resolveFromCwd(p)
+}

package/scripts/poeditor-download.mjs

@@ -0,0 +1,101 @@
+#!/usr/bin/env node
+/**
+ * Download translation files from PoEditor.
+ *
+ * Usage:
+ *   pnpm exec fg-devkit poeditor-download [--config ./poeditor/.poeditor.json] [--project-id 123]
+ *     [--language sv --language en] [--format json] [--output-dir ./src/lang] [--api-token xxx]
+ */
+
+import fs from 'node:fs'
+import path from 'node:path'
+
+import {
+  ensureDir,
+  getFlagList,
+  getFlagValue,
+  getPoeditorToken,
+  loadPoeditorConfig,
+  parseFlags,
+  resolvePathFromCwd,
+} from './poeditor-common.mjs'
+
+async function exportLanguage({ token, projectId, language, format }) {
+  const params = new URLSearchParams({
+    api_token: token,
+    id: String(projectId),
+    language,
+    type: format === 'json' ? 'key_value_json' : format,
+  })
+  const res = await fetch('https://api.poeditor.com/v2/projects/export', {
+    method: 'POST',
+    headers: { 'Content-Type': 'application/x-www-form-urlencoded' },
+    body: params,
+  })
+  if (!res.ok) {
+    throw new Error(`PoEditor export failed (${res.status})`)
+  }
+  const data = await res.json()
+  const url = data?.result?.url
+  if (!url) {
+    throw new Error(`PoEditor export missing URL for language ${language}`)
+  }
+  return url
+}
+
+function prettifyJsonFile(filePath) {
+  let raw = fs.readFileSync(filePath, 'utf8')
+  if (raw.charCodeAt(0) === 0xfeff) raw = raw.slice(1)
+  const parsed = JSON.parse(raw)
+  const sorted = Object.keys(parsed)
+    .sort((a, b) => a.localeCompare(b))
+    .reduce((acc, key) => {
+      acc[key] = parsed[key]
+      return acc
+    }, {})
+  fs.writeFileSync(filePath, `${JSON.stringify(sorted, null, 2)}\n`, 'utf8')
+}
+
+async function downloadToFile(url, filePath, format) {
+  const res = await fetch(url)
+  if (!res.ok) {
+    throw new Error(`Failed to download ${url} (${res.status})`)
+  }
+  const text = await res.text()
+  fs.writeFileSync(filePath, text, 'utf8')
+  if (format === 'json') {
+    prettifyJsonFile(filePath)
+  }
+}
+
+async function main() {
+  const { flags } = parseFlags(process.argv.slice(2))
+  const cfg = loadPoeditorConfig(flags)
+
+  const token = getPoeditorToken(flags)
+  if (!token) {
+    console.error('[poeditor-download] Missing POEDITOR_API_KEY (env), --api-token, or public/config.json value.')
+    process.exit(1)
+  }
+
+  const projectId = getFlagValue(flags, 'project-id', cfg.projectId)
+  const format = getFlagValue(flags, 'format', cfg.defaultFormat)
+  const outputDir = resolvePathFromCwd(getFlagValue(flags, 'output-dir', cfg.downloadPath))
+  const requested = getFlagList(flags, 'language')
+  const fromConfig = Array.isArray(cfg.languages) ? cfg.languages : []
+  const languages = requested.length > 0 ? requested : fromConfig.length > 0 ? fromConfig : [cfg.defaultLanguage]
+
+  ensureDir(outputDir)
+
+  for (const language of languages) {
+    const url = await exportLanguage({ token, projectId, language, format })
+    const outPath = path.resolve(outputDir, `${language}.${format}`)
+    await downloadToFile(url, outPath, format)
+    console.log(`[poeditor-download] Saved ${outPath}`)
+  }
+}
+
+main().catch((err) => {
+  console.error('[poeditor-download]', err.message)
+  process.exit(1)
+})

package/scripts/poeditor-upload.mjs

@@ -0,0 +1,58 @@
+#!/usr/bin/env node
+/**
+ * Upload translation files to PoEditor.
+ *
+ * Usage:
+ *   pnpm exec fg-devkit poeditor-upload [--config ./poeditor/.poeditor.json] [--project-id 123]
+ *     [--language sv] [--file ./src/lang/sv.json] [--api-token xxx]
+ */
+
+import fs from 'node:fs'
+
+import { getFlagValue, getPoeditorToken, loadPoeditorConfig, parseFlags, resolvePathFromCwd } from './poeditor-common.mjs'
+
+async function uploadFile({ token, projectId, language, updating }) {
+  const params = new URLSearchParams({
+    api_token: token,
+    id: String(projectId),
+    language,
+    updating,
+  })
+
+  const res = await fetch('https://api.poeditor.com/v2/projects/upload', {
+    method: 'POST',
+    headers: { 'Content-Type': 'application/x-www-form-urlencoded' },
+    body: params,
+  })
+  if (!res.ok) {
+    throw new Error(`PoEditor upload failed (${res.status})`)
+  }
+  const data = await res.json()
+  if (data?.response?.status !== 'success') {
+    throw new Error(`Upload failed: ${JSON.stringify(data)}`)
+  }
+}
+
+async function main() {
+  const { flags } = parseFlags(process.argv.slice(2))
+  const cfg = loadPoeditorConfig(flags)
+
+  const token = getPoeditorToken(flags)
+  if (!token) {
+    console.error('[poeditor-upload] Missing POEDITOR_API_KEY (env), --api-token, or public/config.json value.')
+    process.exit(1)
+  }
+
+  const projectId = getFlagValue(flags, 'project-id', cfg.projectId)
+  const language = getFlagValue(flags, 'language', cfg.defaultLanguage)
+  const filePath = resolvePathFromCwd(getFlagValue(flags, 'file', cfg.uploadFile))
+  const updating = fs.readFileSync(filePath, 'utf8')
+
+  await uploadFile({ token, projectId, language, updating })
+  console.log(`[poeditor-upload] Upload completed for ${filePath}`)
+}
+
+main().catch((err) => {
+  console.error('[poeditor-upload]', err.message)
+  process.exit(1)
+})

package/scripts/policy-upgrade.mjs

@@ -18,6 +18,7 @@ import { spawnSync } from 'node:child_process'
 import { fileURLToPath } from 'node:url'
 import { createRequire } from 'node:module'
 import { resolveDependencyPolicyPath } from './resolve-dependency-policy-path.mjs'
+import { syncScaffoldVueDepsFromPolicy } from './sync-scaffold-vue-deps.mjs'
 
 const require = createRequire(import.meta.url)
 const scriptDir = path.dirname(fileURLToPath(import.meta.url))
@@ -114,4 +115,6 @@ for (const [name, version] of Object.entries(updatedDevDeps)) {
 }
 
 fs.writeFileSync(policyPath, `${JSON.stringify(policy, null, 2)}\n`, 'utf8')
+const fgDevkitRoot = path.resolve(scriptDir, '..')
+syncScaffoldVueDepsFromPolicy({ fgDevkitRoot, policyPath })
 console.log('[policy-upgrade] Updated dependency policy from selected ncu changes.')

package/scripts/refresh-dependency-policy-from-repos.mjs

@@ -17,6 +17,9 @@
  *
  * Runs entirely on the local filesystem (no registry or network).
  *
+ * After writing the policy, also updates scaffold/vue/package.json dependency pins from that policy
+ * (see sync-scaffold-vue-deps.mjs).
+ *
  * Usage:
  *   node scripts/refresh-dependency-policy-from-repos.mjs [projectsRoot] [policyFile]
  */
@@ -26,6 +29,7 @@ import path from 'node:path'
 import { fileURLToPath } from 'node:url'
 
 import { collectPinViolations } from './dependency-policy-pins.mjs'
+import { syncScaffoldVueDepsFromPolicy } from './sync-scaffold-vue-deps.mjs'
 
 const scriptDir = path.dirname(fileURLToPath(import.meta.url))
 const fgDevkitRoot = path.resolve(scriptDir, '..')
@@ -207,6 +211,9 @@ if (policyErrors.length > 0) {
 
 fs.writeFileSync(policyPath, `${JSON.stringify(policy, null, 2)}\n`)
 
+const fgDevkitRoot = path.resolve(scriptDir, '..')
+syncScaffoldVueDepsFromPolicy({ fgDevkitRoot, policyPath })
+
 console.log(`[refresh-policy] projectsRoot=${projectsRoot}`)
 console.log(`[refresh-policy] policy=${policyPath}`)
 console.log(