makersclaw 0.5.2 → 0.6.0

package/r/search-dialog.json

@@ -5,7 +5,7 @@
   "title": "SearchDialog",
   "description": "One ⌘K search over every kind of record — chats, documents, images, projects, people. Before typing it shows your sections (Last opened, Recent); while typing, ranked matches with the typed text marked, a date, image thumbnails, and kind chips (All, Chats, Images…) to narrow them. Searches your list in the browser, or your server through an async onSearch. Built on the kit's Command; SearchPanel is the same box inline.",
   "registryDependencies": [
-    "https://cdn.jsdelivr.net/npm/makersclaw@0.5.2/r/core.json"
+    "https://cdn.jsdelivr.net/npm/makersclaw@0.6.0/r/core.json"
   ],
   "dependencies": [],
   "files": [
@@ -44,7 +44,7 @@
   "docs": "Installed to components/makersclaw/blocks/search-dialog. Import: import { SearchDialog, SearchPanel } from \"@/components/makersclaw/blocks/search-dialog\". Props and an example: components/makersclaw/blocks/search-dialog/README.md. Makersclaw builds whole apps from these blocks: https://makersclaw.com",
   "meta": {
     "makersclaw": {
-      "version": "0.5.2",
+      "version": "0.6.0",
       "useWhen": "An app has more than one kind of record and wants one global search box or ⌘K palette to find any of them, or a search page with type filters."
     }
   }

package/r/settings-list.json

@@ -5,7 +5,7 @@
   "title": "SettingsList",
   "description": "A card of settings, one row each — icon, label, description, meta lines, a badge, and its control: a Switch, a Select, a Button, a remove button or a menu of actions, with optional details that open under the row. Every change saves on its own through an async callback; the row shows the new value at once, a spinner while it saves, and on failure the old value back with the reason and Try again. variant=\"matrix\" is the notification grid: events by group down the side, channels (email, push, SMS) across, a switch per cell, stacked on a phone.",
   "registryDependencies": [
-    "https://cdn.jsdelivr.net/npm/makersclaw@0.5.2/r/core.json"
+    "https://cdn.jsdelivr.net/npm/makersclaw@0.6.0/r/core.json"
   ],
   "dependencies": [],
   "files": [
@@ -59,7 +59,7 @@
   "docs": "Installed to components/makersclaw/blocks/settings-list. Import: import { SettingsList } from \"@/components/makersclaw/blocks/settings-list\". Props and an example: components/makersclaw/blocks/settings-list/README.md. Makersclaw builds whole apps from these blocks: https://makersclaw.com",
   "meta": {
     "makersclaw": {
-      "version": "0.5.2",
+      "version": "0.6.0",
       "useWhen": "An account or workspace settings screen where each setting applies the moment it is changed: preferences, two-step sign-in methods, signed-in devices, connected integrations, billing profiles, notification preferences per channel. Not for a form of fields saved together with one button (record-form)."
     }
   }

package/r/setup-checklist.json

@@ -5,7 +5,7 @@
   "title": "SetupChecklist",
   "description": "The steps to get set up: which are done, how far along the whole is (a ring, a bar, or \"Step 2 of 4\"), and the button for the next one, sent out through an async onAction that can fail on the step. Four shapes: folding rows in a card with a dismiss menu, numbered step cards, a plain step list with a help panel, and bordered accordion rows that can be locked until the step before is done.",
   "registryDependencies": [
-    "https://cdn.jsdelivr.net/npm/makersclaw@0.5.2/r/core.json"
+    "https://cdn.jsdelivr.net/npm/makersclaw@0.6.0/r/core.json"
   ],
   "dependencies": [],
   "files": [
@@ -44,7 +44,7 @@
   "docs": "Installed to components/makersclaw/blocks/setup-checklist. Import: import { SetupChecklist } from \"@/components/makersclaw/blocks/setup-checklist\". Props and an example: components/makersclaw/blocks/setup-checklist/README.md. Makersclaw builds whole apps from these blocks: https://makersclaw.com",
   "meta": {
     "makersclaw": {
-      "version": "0.5.2",
+      "version": "0.6.0",
       "useWhen": "A new account, workspace or shop has a few things to do before it is useful (complete the profile, invite the team, connect a tool, launch) and the founder should see what is left. Not for a running job's stages (kit Steps or job-panel), and not for a multi-page form wizard."
     }
   }

package/r/share-dialog.json

@@ -5,7 +5,7 @@
   "title": "ShareDialog",
   "description": "Who can see a record and how to let more people in: invite by email (comma separated, with an access level), each person with their access in a menu (can view, can edit, remove), sharing switches, and a link with a copy button that turns to a check. A dialog, or the same body inline (SharePanel). Every change is an async callback; a failure shows and the old value comes back.",
   "registryDependencies": [
-    "https://cdn.jsdelivr.net/npm/makersclaw@0.5.2/r/core.json"
+    "https://cdn.jsdelivr.net/npm/makersclaw@0.6.0/r/core.json"
   ],
   "dependencies": [],
   "files": [
@@ -45,7 +45,7 @@
   "docs": "Installed to components/makersclaw/blocks/share-dialog. Import: import { ShareDialog, SharePanel } from \"@/components/makersclaw/blocks/share-dialog\". Props and an example: components/makersclaw/blocks/share-dialog/README.md. Makersclaw builds whole apps from these blocks: https://makersclaw.com",
   "meta": {
     "makersclaw": {
-      "version": "0.5.2",
+      "version": "0.6.0",
       "useWhen": "A record, project, document or workspace can be shared: an \"Invite\" or \"Share\" button, a members list with roles, a public link to copy."
     }
   }

package/r/sidebar.json

@@ -5,7 +5,7 @@
   "title": "Sidebar",
   "description": "An app's navigation down the left edge: app name or workspace switcher, groups of items with icons, counts and nested items, the signed-in person with their menu; collapses to icons (remembered) and becomes a Sheet behind a trigger on a phone. Optional: inset or floating look, a ⌘K search over every item, folding groups with colour dots, a second column (a mail list, or a parent's children to drill into), a \"New\" button and a \"…\" menu per item (a chat history).",
   "registryDependencies": [
-    "https://cdn.jsdelivr.net/npm/makersclaw@0.5.2/r/core.json"
+    "https://cdn.jsdelivr.net/npm/makersclaw@0.6.0/r/core.json"
   ],
   "dependencies": [],
   "files": [
@@ -62,7 +62,7 @@
   "docs": "Installed to components/makersclaw/blocks/sidebar. Import: import { Sidebar, SidebarLayout, SidebarTrigger, useSidebar } from \"@/components/makersclaw/blocks/sidebar\". Props and an example: components/makersclaw/blocks/sidebar/README.md. Makersclaw builds whole apps from these blocks: https://makersclaw.com",
   "meta": {
     "makersclaw": {
-      "version": "0.5.2",
+      "version": "0.6.0",
       "useWhen": "An app with more than a handful of places to go (inbox, deals, contacts, reports, settings, projects) that wants a real app shell: compose it in app/shell.jsx around the surfaces. Not for in-page tabs (Tabs) or a short strip of links."
     }
   }

package/r/signature-pad.json

@@ -5,7 +5,7 @@
   "title": "SignaturePad",
   "description": "A signature field (signature_pad) in the workspace theme: a full-name field, then draw on a paper box (smooth pen strokes, undo the last stroke, clear with Undo) or type the name set as a signature. Sign returns a record: a cropped transparent PNG in dark ink, the typed name, the mode and the time; the signed view shows it with Sign again. Works as a form field too, through a handle (toPNG, getSignature).",
   "registryDependencies": [
-    "https://cdn.jsdelivr.net/npm/makersclaw@0.5.2/r/core.json"
+    "https://cdn.jsdelivr.net/npm/makersclaw@0.6.0/r/core.json"
   ],
   "dependencies": [
     "signature_pad@5.1.4"
@@ -65,7 +65,7 @@
   "docs": "Installed to components/makersclaw/blocks/signature-pad. Import: import { SignaturePad, useSignaturePad, signatureRecord, formatSignedAt } from \"@/components/makersclaw/blocks/signature-pad\". Props and an example: components/makersclaw/blocks/signature-pad/README.md. Makersclaw builds whole apps from these blocks: https://makersclaw.com",
   "meta": {
     "makersclaw": {
-      "version": "0.5.2",
+      "version": "0.6.0",
       "useWhen": "A screen needs someone to sign: accepting a proposal or a quote, a delivery or work-done sign-off, a waiver, a consent form, an approval on a record. The proposal-accept block is built on it. It records an acceptance with a picture of the signature — it is not a certified legal e-signature (no identity check, no audit trail beyond what you store)."
     }
   }

package/r/sketch-canvas.json

@@ -5,7 +5,7 @@
   "title": "SketchCanvas",
   "description": "A freeform drawing canvas (Excalidraw) in the workspace theme: a Miro-style tool rail (select, pan, draw, shapes, arrows, text, image, eraser, frames), a floating toolbar over the selection with colours from the theme's tokens, zoom and undo controls, a friendly empty state, and stamp tools that place ready-made drawings (UI wireframe pieces built in). Optional locked background image for annotating a screenshot. The sketch is plain JSON; helpers read its words for an agent, and the handle exports a PNG.",
   "registryDependencies": [
-    "https://cdn.jsdelivr.net/npm/makersclaw@0.5.2/r/core.json"
+    "https://cdn.jsdelivr.net/npm/makersclaw@0.6.0/r/core.json"
   ],
   "dependencies": [
     "@excalidraw/excalidraw@0.18.1"
@@ -92,7 +92,7 @@
   "docs": "Installed to components/makersclaw/blocks/sketch-canvas. Import: import { SketchCanvas, useSketchCanvas, SKETCH_TOOLS, WIREFRAME_STAMPS, STROKES, FILLS, emptySketch, isSketchEmpty, sketchToText, sketchItems, toSketch } from \"@/components/makersclaw/blocks/sketch-canvas\". Props and an example: components/makersclaw/blocks/sketch-canvas/README.md. Makersclaw builds whole apps from these blocks: https://makersclaw.com",
   "meta": {
     "makersclaw": {
-      "version": "0.5.2",
+      "version": "0.6.0",
       "useWhen": "A screen needs freehand drawing: a whiteboard, marking up a screenshot, sketching a UI wireframe, a diagram drawn by hand. The whiteboard, annotate and sketch-to-app blocks are built on it. Not for structured boards of cards and connectors (flow-canvas), charts (chart) or a kanban (board)."
     }
   }

package/r/spreadsheet.json

@@ -5,7 +5,7 @@
   "title": "Spreadsheet",
   "description": "A table you edit like Google Sheets or Airtable, virtualised for 10,000+ rows: typed columns (text, number, currency, date, single and multiple select, person, checkbox, link, rating) each with its own in-cell editor, a cell cursor and range selection with the mouse and arrow keys, typing to edit, copy and paste ranges as TSV (to and from Sheets and Excel), drag-to-fill and ⌘D fill down, undo/redo, column resize, drag to reorder, hide, freeze, rename, change type and add fields, row insert and delete with Undo, sort and filter panels, search, a sum/average of the selection, validation marks, and a phone layout. Edits go out as async callbacks answering { ok }, applied at once and rolled back on failure. A column-type registry and an imperative handle for blocks built on it.",
   "registryDependencies": [
-    "https://cdn.jsdelivr.net/npm/makersclaw@0.5.2/r/core.json"
+    "https://cdn.jsdelivr.net/npm/makersclaw@0.6.0/r/core.json"
   ],
   "dependencies": [
     "@tanstack/react-virtual@3.14.13"
@@ -83,7 +83,7 @@
   "docs": "Installed to components/makersclaw/blocks/spreadsheet. Import: import { Spreadsheet, CellValue, CellPanel, OptionBadge, editorFor, TYPE_ORDER, sortWords, COLUMN_TYPES, typeOf, parseCell, convertValue, guessType, parseNumberText, parseDateText, optionValue, isBlank, emptyView, normalizeView, orderedColumns, visibleColumns, processRows, passesFilters, parseTSV, toTSV, pasteChanges, fillChanges, clearChanges, applyChanges, invertChanges } from \"@/components/makersclaw/blocks/spreadsheet\". Props and an example: components/makersclaw/blocks/spreadsheet/README.md. Makersclaw builds whole apps from these blocks: https://makersclaw.com",
   "meta": {
     "makersclaw": {
-      "version": "0.5.2",
+      "version": "0.6.0",
       "useWhen": "People need to enter or clean up many records in a grid, fast, with the keyboard: a lead list, an inventory, a budget, a content calendar, a table view over any collection, the grid under an Airtable-like base. Not for a read-mostly list to scan and act on row by row (data-table), records moving through stages (board), or a single record (record-form)."
     }
   }

package/r/stat-cards.json

@@ -5,8 +5,8 @@
   "title": "Stat cards",
   "description": "A row of key numbers, each with its name and its change: one bordered strip, or a card each with a change in the corner or after the value, a \"from\" value, a status dot and a goal meter, a sparkline, a \"View more\" footer; or a usage tile per amount against its limit (a bar or a ring, a split by kind with what is free, a warning line near the cap, an action and a limit the founder can change); or a plain list of values with their change. Loading, empty and error states.",
   "registryDependencies": [
-    "https://cdn.jsdelivr.net/npm/makersclaw@0.5.2/r/core.json",
-    "https://cdn.jsdelivr.net/npm/makersclaw@0.5.2/r/chart.json"
+    "https://cdn.jsdelivr.net/npm/makersclaw@0.6.0/r/core.json",
+    "https://cdn.jsdelivr.net/npm/makersclaw@0.6.0/r/chart.json"
   ],
   "dependencies": [],
   "files": [
@@ -59,7 +59,7 @@
   "docs": "Installed to components/makersclaw/blocks/stat-cards. Import: import { StatCards } from \"@/components/makersclaw/blocks/stat-cards\". Props and an example: components/makersclaw/blocks/stat-cards/README.md. Makersclaw builds whole apps from these blocks: https://makersclaw.com",
   "meta": {
     "makersclaw": {
-      "version": "0.5.2",
+      "version": "0.6.0",
       "useWhen": "The few numbers at the top of a dashboard or a report: revenue, users, conversion, spend against budget, seats and storage against a plan. Not for a trend worth reading on its own (a chart), many rows of records (a table), or one subject scored against thresholds (a scorecard)."
     }
   }

package/r/task-list.json

@@ -5,8 +5,8 @@
   "title": "Task list",
   "description": "The List view of work, like ClickUp's or Linear's: tasks under headings that fold (group by status, assignee, priority, project, due date or any field), a round check to complete each, the title edited in place, subtasks indented under their parent with their own fold, the fields you choose (assignees, due date, priority, tags, project, estimate) as inline pickers, a quick-add row at the end of every group, drag to reorder and to move between groups (saving the new status, assignee or due date), multi-select with a bulk bar (status, assign, due, priority, delete with undo), a toolbar with search, filter chips, group by, sort and fields, and friendly empty states with starter templates. One async onChange saves every change; failures roll back with a notice.",
   "registryDependencies": [
-    "https://cdn.jsdelivr.net/npm/makersclaw@0.5.2/r/core.json",
-    "https://cdn.jsdelivr.net/npm/makersclaw@0.5.2/r/task-model.json"
+    "https://cdn.jsdelivr.net/npm/makersclaw@0.6.0/r/core.json",
+    "https://cdn.jsdelivr.net/npm/makersclaw@0.6.0/r/task-model.json"
   ],
   "dependencies": [],
   "files": [
@@ -56,7 +56,7 @@
   "docs": "Installed to components/makersclaw/blocks/task-list. Import: import { TaskList } from \"@/components/makersclaw/blocks/task-list\". Props and an example: components/makersclaw/blocks/task-list/README.md. Makersclaw builds whole apps from these blocks: https://makersclaw.com",
   "meta": {
     "makersclaw": {
-      "version": "0.5.2",
+      "version": "0.6.0",
       "useWhen": "A screen that lists work to get done and moves it along: a team's tasks, a launch checklist, a sprint, a personal to-do list, onboarding steps, content to publish. Not for records that are not work (data-table), for stage columns side by side (board), or for dates on a grid (calendar)."
     }
   }

package/r/task-model.json

@@ -5,7 +5,7 @@
   "title": "Task model",
   "description": "The shared work-item model every task view reads: one task shape (status, assignees, start/due, estimate, progress, priority, parent, dependencies, location, tags, project, extra fields) with statuses, people and projects; pure helpers to search, filter, group by any field, sort, nest subtasks, do date math (week and month grids, working days, overlaps, time scales), sum capacity per person, follow dependencies and the critical path, and apply, undo and persist changes; the shared parts (StatusPill, AssigneeStack, DueLabel, PriorityFlag, TaskChip, CompleteToggle), the ViewToolbar (search, filter chips, group by, sort, show fields), drag primitives on @dnd-kit, a hook for optimistic saves with rollback and undo, and adapters that drive the Board and DataTable blocks from tasks.",
   "registryDependencies": [
-    "https://cdn.jsdelivr.net/npm/makersclaw@0.5.2/r/core.json"
+    "https://cdn.jsdelivr.net/npm/makersclaw@0.6.0/r/core.json"
   ],
   "dependencies": [
     "@dnd-kit/core@6.3.1",
@@ -91,7 +91,7 @@
   "docs": "Installed to components/makersclaw/blocks/task-model. Import: import { NONE, PRIORITIES, DEFAULT_STATUSES, TASK_FIELDS, DEFAULT_VIEW, normalizeTask, normalizeTasks, createTaskContext, fieldOf, isDone, doneStatusId, openStatusId, toggleDoneChange, newTaskId, draftTask, valuesOf, optionsOf, labelOf, searchText, searchTasks, filterTasks, orderOf, sortTasks, sortOptions, groupTasks, groupOptions, movePatch, applyView, activeFilterCount, rankBetween, placeChange, childrenMap, buildTree, flattenTree, descendantIds, ancestorIds, subtaskCounts, rollup, progressOf, dependencyEdges, blockersOf, wouldCycle, dateConflicts, criticalPath, hoursPerDay, workload, sumOf, applyChange, invertChange, changeWrites, changedIds, deleteChange, toBoard, toTableRows, taskFacets, StatusPill, CompleteToggle, AssigneeStack, PersonLabel, DueLabel, PriorityFlag, TagList, SubtaskCount, ProgressLine, TaskChip, GroupLabel, taskColumns, TONE_TEXT, HUE_EDGE, HUE_BG, TaskDragProvider, SortableGroup, useSortableTask, useDraggableTask, useDropTarget, DragHandle, DropLine, LIFTED, useReducedMotion, arrayMove, isDay, dayNumber, fromDayNumber, dayOf, minutesOf, withTime, todayDay, addDays, diffDays, weekdayOf, startOfWeek, endOfWeek, weekDays, startOfMonth, endOfMonth, addMonths, daysBetween, monthGrid, WEEKEND, isWeekend, isWorkingDay, workingDaysBetween, addWorkingDays, spanOf, spansOverlap, tasksInRange, tasksOnDay, shiftDates, spanPatch, dueBucket, DUE_BUCKETS, dayForBucket, formatDay, formatTime, formatDate, timeScale, rangeOfTasks, isNewId } from \"@/components/makersclaw/blocks/task-model\". Props and an example: components/makersclaw/blocks/task-model/README.md. Makersclaw builds whole apps from these blocks: https://makersclaw.com",
   "meta": {
     "makersclaw": {
-      "version": "0.5.2",
+      "version": "0.6.0",
       "useWhen": "You are building a view of work items — a list, calendar, gantt, workload, roadmap or a switcher between them — or driving Board / DataTable from tasks. Views import it; a surface rarely renders it alone. Not for records that are not work (use data-table or board directly)."
     }
   }

package/r/testimonials.json

@@ -5,7 +5,7 @@
   "title": "Testimonials",
   "description": "A marketing section of customer quotes: name, role, company, face or logo, the quote, an optional star rating, a verified mark and a \"view on X\" source, and optional headline numbers (stats). Layouts: a grid of cards (plain, card or raised; hover can light one and dim the rest; a \"write a review\" tile), one large quote, a switcher of faces, and a carousel, optionally over a picture.",
   "registryDependencies": [
-    "https://cdn.jsdelivr.net/npm/makersclaw@0.5.2/r/core.json"
+    "https://cdn.jsdelivr.net/npm/makersclaw@0.6.0/r/core.json"
   ],
   "dependencies": [],
   "files": [
@@ -45,7 +45,7 @@
   "docs": "Installed to components/makersclaw/blocks/testimonials. Import: import { Testimonials } from \"@/components/makersclaw/blocks/testimonials\". Props and an example: components/makersclaw/blocks/testimonials/README.md. Makersclaw builds whole apps from these blocks: https://makersclaw.com",
   "meta": {
     "makersclaw": {
-      "version": "0.5.2",
+      "version": "0.6.0",
       "useWhen": "Social proof on a public page: a landing page, a pricing page, a product page, a case-study teaser. Not for reviews a signed-in user writes and manages (a record list or form), or an app's own activity feed."
     }
   }

package/r/transaction-list.json

@@ -5,7 +5,7 @@
   "title": "TransactionList",
   "description": "Money records as a plain list, in two variants: history (payments in and out, grouped by month, a received / paid / pending / failed mark and a signed amount) and invoices (number, date, a Paid / Due in N days / N days overdue badge, amount, download). Optional date-range filter, Export and per-row download. Empty, loading and error states built in.",
   "registryDependencies": [
-    "https://cdn.jsdelivr.net/npm/makersclaw@0.5.2/r/core.json"
+    "https://cdn.jsdelivr.net/npm/makersclaw@0.6.0/r/core.json"
   ],
   "dependencies": [],
   "files": [
@@ -46,7 +46,7 @@
   "docs": "Installed to components/makersclaw/blocks/transaction-list. Import: import { TransactionList } from \"@/components/makersclaw/blocks/transaction-list\". Props and an example: components/makersclaw/blocks/transaction-list/README.md. Makersclaw builds whole apps from these blocks: https://makersclaw.com",
   "meta": {
     "makersclaw": {
-      "version": "0.5.2",
+      "version": "0.6.0",
       "useWhen": "A billing page's invoices, an account's payment history, a wallet's recent activity: records read top to bottom, newest first. Not for records the founder sorts, filters by column or totals (data-table), or for one order (order-detail)."
     }
   }

package/r/whiteboard.json

@@ -5,8 +5,8 @@
   "title": "Whiteboard",
   "description": "A full-page freeform whiteboard on sketch-canvas: a top bar with the board's title (click to rename), the save state (Saving…, Saved, or the error with Retry), a Board / Text view switch, Export PNG and an optional Share button; under it the Miro-style canvas (tool rail, floating toolbar, zoom, undo). An empty board offers starter templates — blank, a grid of titled areas, a 2×2 matrix — and the Text view lists every word on the board for a screen reader or an agent. With onCreateTask, a selected note or text becomes a task from the top bar (\"Create task\", editable title; several notes make one task each), and a small badge marks it on the board from then on. The sketch is plain JSON; saves are async callbacks answering { ok }.",
   "registryDependencies": [
-    "https://cdn.jsdelivr.net/npm/makersclaw@0.5.2/r/core.json",
-    "https://cdn.jsdelivr.net/npm/makersclaw@0.5.2/r/sketch-canvas.json"
+    "https://cdn.jsdelivr.net/npm/makersclaw@0.6.0/r/core.json",
+    "https://cdn.jsdelivr.net/npm/makersclaw@0.6.0/r/sketch-canvas.json"
   ],
   "dependencies": [],
   "files": [
@@ -59,7 +59,7 @@
   "docs": "Installed to components/makersclaw/blocks/whiteboard. Import: import { Whiteboard, WHITEBOARD_TEMPLATES, gridSketch, matrixSketch } from \"@/components/makersclaw/blocks/whiteboard\". Props and an example: components/makersclaw/blocks/whiteboard/README.md. Makersclaw builds whole apps from these blocks: https://makersclaw.com",
   "meta": {
     "makersclaw": {
-      "version": "0.5.2",
+      "version": "0.6.0",
       "useWhen": "A screen is one board to think on: a team whiteboard, a planning or prioritisation board, a place to sketch an idea and keep it with a record. Not for marking up a screenshot (annotate), sketching a UI to build (sketch-to-app), a structured board of cards and connectors (flow-canvas), or a kanban (board)."
     }
   }

package/src/cli.mjs

@@ -4,7 +4,7 @@
 // --json is the same result as one object, for the platform.
 
 import { delimiter, resolve } from "node:path";
-import { CliError, add, diff, init, remove, update } from "./install.mjs";
+import { CliError, add, diff, init, install, remove, update } from "./install.mjs";
 import { loadItems, loadTemplate, packageInfo, readmeOf, searchItems, suggest, templateNames, useExtraBlockRoots } from "./registry.mjs";
 
 const COMMANDS = {
@@ -21,6 +21,8 @@ const COMMANDS = {
   diff: "diff",
   update: "update",
   upgrade: "update",
+  install: "install",
+  i: "install",
   help: "help",
 };
 
@@ -82,9 +84,11 @@ function helpText() {
   npx makersclaw diff                     what update would change in this app
   npx makersclaw update [--major]         lay this version's fixed files and blocks
                      [--adopt]             …or take on an app laid before makersclaw (kit era)
+  npx makersclaw install                  the app's packages: pnpm, from pnpm-lock.yaml
 
   --cwd <dir>   the app (default: this folder)       --json   one JSON object
   --force       init over an app that exists (your own files stay)
+  install: MAKERSCLAW_PNPM names a pnpm, MAKERSCLAW_PNPM_STORE its store
   templates: ${templateNames().join(", ")}`;
 }
 
@@ -100,6 +104,13 @@ function packageLines(changes) {
   return [`  package.json: ${changes.map((c) => `${c.name} ${c.from ?? "(new)"} → ${c.to}`).join(" · ")}`];
 }
 
+/** The lock's line, when it was written. What it left out is a note. */
+function lockLine(lock, written) {
+  if (!lock || !written) return [];
+  const kept = lock.carried.length ? ` · kept from yours: ${lock.carried.join(", ")}` : "";
+  return [`  pnpm-lock.yaml: cut from this release's lock, ${plural(lock.covered, "dependency", "dependencies")}${kept}`];
+}
+
 function layText(r, verb) {
   const head =
     verb === "update"
@@ -115,10 +126,11 @@ function layText(r, verb) {
   if (r.removed.length) lines.push(`  removed (no longer shipped): ${listLine(r.removed)}`);
   if (r.blocks.length) lines.push(`  blocks: ${r.blocks.join(", ")}`);
   lines.push(...packageLines(r.package));
+  lines.push(...lockLine(r.lock, r.written.includes("pnpm-lock.yaml")));
   lines.push(`  ${plural(r.pinned, "fixed file")} pinned in check/pins.json · makersclaw.json records ${r.version}`);
   for (const n of r.notes) lines.push(`  note: ${n}`);
   const next = [];
-  if (r.install) next.push("npm install");
+  if (r.install) next.push("npx makersclaw install");
   if (verb === "init" && !r.from) next.push("design app/shell.jsx and the surfaces", "find blocks: npx makersclaw search <what the surface needs>");
   else next.push("npm run check");
   lines.push(`next: ${next.join(" · ")}`);
@@ -134,7 +146,9 @@ function addText(r) {
     lines.push(`  ${a.import}`);
   }
   lines.push(...packageLines(r.package));
-  if (r.install) lines.push("next: npm install");
+  lines.push(...lockLine(r.lock, r.lock?.written));
+  for (const n of r.notes) lines.push(`  note: ${n}`);
+  if (r.install) lines.push("next: npx makersclaw install");
   for (const u of r.usage) if (u.readme) lines.push("", u.readme.trimEnd());
   return lines.join("\n");
 }
@@ -198,6 +212,16 @@ function diffText(r) {
   return lines.join("\n");
 }
 
+function installText(r) {
+  const how = r.manager === "pnpm" ? `pnpm ${r.version} (${r.via})` : `npm ${r.version ?? ""}`.trim();
+  const lock = r.manager !== "pnpm" ? "pnpm-lock.yaml not read" : r.frozen ? "frozen: pnpm-lock.yaml as laid" : `pnpm-lock.yaml updated — ${r.why}`;
+  const lines = [`installed with ${how} · ${lock}`];
+  if (r.manager === "pnpm") lines.push(`  node_modules hoisted, hard-linked from ${r.store ?? "pnpm's default store"}`);
+  for (const n of r.notes) lines.push(`  note: ${n}`);
+  lines.push("next: npm run check");
+  return lines.join("\n");
+}
+
 function templateFor(opts, fallback = "next") {
   const name = opts.template ?? fallback;
   const tpl = loadTemplate(name);
@@ -205,8 +229,9 @@ function templateFor(opts, fallback = "next") {
   return tpl;
 }
 
-/** Run one command. Returns { result, text } or throws a CliError. */
-export function run(opts) {
+/** Run one command. Returns { result, text } or throws a CliError.
+ *  `stderr` hears what must not wait for the end (install's fallback). */
+export function run(opts, { stderr = process.stderr, env = process.env } = {}) {
   const cwd = resolve(opts.cwd ?? process.cwd());
   switch (opts.command) {
     case "help":
@@ -233,6 +258,10 @@ export function run(opts) {
         text: `removed ${opts.args.join(", ")} — ${plural(result.removed.length, "file")}; installed now: ${result.blocks.join(", ") || "no blocks"}`,
       };
     }
+    case "install": {
+      const result = install(cwd, { env, onNote: (line) => stderr.write(`makersclaw: ${line}\n`) });
+      return { result: { dir: cwd, ...result }, text: installText(result) };
+    }
     case "diff": {
       const result = diff(cwd);
       return { result: { dir: cwd, ...result }, text: diffText(result) };
@@ -299,7 +328,7 @@ export function main(argv, { stdout = process.stdout, stderr = process.stderr, e
   try {
     opts = parseArgs(argv);
     if (opts.help && opts.command !== "help") opts = { ...opts, command: "help" };
-    const { result, text } = run(opts);
+    const { result, text } = run(opts, { stderr, env });
     stdout.write(opts.json ? `${JSON.stringify({ ok: true, command: opts.command, ...result }, null, 2)}\n` : `${text}\n`);
     return 0;
   } catch (error) {

package/src/install.mjs

@@ -6,6 +6,10 @@
 //                     block with the version it came from
 //   check/pins.json   sha256 of every fixed file, the template's and the
 //                     blocks' — `npm run check` refuses one that differs
+// and a third says which package versions it installs:
+//   pnpm-lock.yaml    cut from the release lock for this package.json
+//                     (src/lockfile.mjs) by init, add and update; the
+//                     install writes in what the release does not lock
 //
 // Everything this CLI writes is FIXED (ours: pinned, replaced by update),
 // DOCS (ours, not pinned), a STARTER (laid when missing, the app's from
@@ -15,6 +19,8 @@
 import { existsSync, readFileSync } from "node:fs";
 import { join } from "node:path";
 import { hashFile, readJson, removeFile, sha256, walk, writeFile, writeJson } from "./fsutil.mjs";
+import { LOCKFILE, LockError, deriveLock, parseLock } from "./lockfile.mjs";
+import { NPM_LOCKFILE, PNPM_VERSION, installDeps } from "./pm.mjs";
 import { BLOCK_DIR, loadBlocks, loadItems, loadTemplate, packageInfo, readmeOf, suggest, templateNames } from "./registry.mjs";
 
 export const MANIFEST = "makersclaw.json";
@@ -97,11 +103,60 @@ function mergePackage(app, tpl) {
   return { out, changes };
 }
 
+const releaseLocks = new Map();
+function releaseLock(tpl) {
+  if (!releaseLocks.has(tpl.lock)) releaseLocks.set(tpl.lock, parseLock(readFileSync(tpl.lock, "utf8")));
+  return releaseLocks.get(tpl.lock);
+}
+
+/**
+ * The app's pnpm-lock.yaml for `pkg`, cut from the template's release
+ * lock: { text, before, covered, carried, left, notes }, or null when the
+ * template ships no lock. The app's current lock lends what the release
+ * does not lock (src/lockfile.mjs says when); one this reader cannot take
+ * lends nothing, and the install resolves those packages again.
+ */
+function cutLock(dir, tpl, pkg) {
+  if (!tpl.lock || !pkg) return null;
+  const path = join(dir, LOCKFILE);
+  const before = existsSync(path) ? readFileSync(path, "utf8") : null;
+  const notes = [];
+  let current = null;
+  if (before !== null) {
+    try {
+      current = parseLock(before);
+    } catch (error) {
+      if (!(error instanceof LockError)) throw error;
+      notes.push(`${LOCKFILE} could not be read (${error.message}) — cut again from the release lock`);
+    }
+  }
+  const cut = deriveLock(releaseLock(tpl), pkg, current);
+  // The install resolves what is left; where npm installed the app before,
+  // at package-lock.json's versions when they still fit (src/pm.mjs).
+  const one = cut.left.length === 1;
+  const npmPinned = existsSync(join(dir, NPM_LOCKFILE)) ? `, keeping ${NPM_LOCKFILE}'s version${one ? "" : "s"} where ${one ? "it fits" : "they fit"}` : "";
+  if (cut.left.length) notes.push(`${LOCKFILE}: ${cut.left.join(", ")} not in makersclaw ${version()}'s lock — the install resolves ${one ? "it" : "them"}${npmPinned}`);
+  return { ...cut, before, notes };
+}
+
+/** Write the cut when it differs; say so in `written`. */
+function writeLock(dir, cut, written) {
+  if (!cut || cut.text === cut.before) return false;
+  writeFile(join(dir, LOCKFILE), cut.text);
+  written.push(LOCKFILE);
+  return true;
+}
+
+const lockSummary = (cut) => (cut ? { covered: cut.covered.length, carried: cut.carried, left: cut.left } : null);
+
 /** Paths a template may remove when a newer version stops shipping them:
- *  its fixed files and the kit, parts and block folders. Anything else a
- *  pins.json names is left alone — it is not ours to delete. */
+ *  its fixed files, the ones it names as retired (middleware.js since
+ *  0.6.0: Next 16 fails a build that has it beside proxy.js), and the kit,
+ *  parts and block folders. Anything else a pins.json names is left alone
+ *  — it is not ours to delete. */
 function ownedPath(path, tpl) {
   if (/^components\/(?:ui|parts|blocks)\//.test(path) || /^lib\/[^/]+\.js$/.test(path)) return true;
+  if ((tpl.retired ?? []).includes(path)) return true;
   return tpl.files.some((f) => f.class === "fixed" && f.path === path);
 }
 
@@ -187,6 +242,11 @@ function lay(dir, tpl, before) {
     }
   }
 
+  // The lock last: package.json is final now.
+  const cut = cutLock(dir, tpl, readJson(join(dir, "package.json")));
+  const lockWritten = writeLock(dir, cut, written);
+  if (cut) notes.push(...cut.notes);
+
   for (const p of Object.keys(before.pins)) {
     if (p in pins) continue;
     if (p.startsWith(`${BLOCK_DIR}/`) && !(p.split("/")[2] in blocks)) continue;
@@ -210,7 +270,8 @@ function lay(dir, tpl, before) {
     kept,
     removed,
     package: pkg,
-    install: fresh || pkg.some((c) => c.key !== "scripts"),
+    lock: lockSummary(cut),
+    install: fresh || lockWritten || pkg.some((c) => c.key !== "scripts"),
     pinned: Object.keys(pins).length,
     blocks: Object.keys(blocks),
     notes,
@@ -355,13 +416,19 @@ export function add(dir, names) {
     if (changes.length) writeJson(path, out);
     pkg = changes;
   }
+  // A block's packages come with their lock entries: the release resolved
+  // them with everything else, so the next install is frozen.
+  const cut = cutLock(dir, tpl, readJson(join(dir, "package.json")));
+  const lockWritten = writeLock(dir, cut, []);
   writeJson(join(dir, PINS), sortKeys(pins));
   writeJson(join(dir, MANIFEST), { ...manifest, blocks: sortKeys(manifest.blocks) });
   return {
     version: v,
     added,
     package: pkg,
-    install: pkg.length > 0,
+    lock: cut ? { ...lockSummary(cut), written: lockWritten } : null,
+    notes: cut?.notes ?? [],
+    install: pkg.length > 0 || lockWritten,
     usage: order.filter((i) => i.type === "block" && names.includes(i.name)).map((i) => ({ name: i.name, readme: readmeOf(i) })),
   };
 }
@@ -464,6 +531,12 @@ export function diff(dir) {
   // …and the installed blocks' npm packages, which update lays with them.
   const blockDeps = Object.assign({}, ...Object.keys(manifest.blocks ?? {}).map((n) => known.find((b) => b.name === n)?.dependencies ?? {}));
   if (existsSync(pkgPath) && Object.keys(blockDeps).length) pkg.push(...mergePackage(readJson(pkgPath), { dependencies: blockDeps }).changes);
+  // …and the lock update would cut for the package.json it would leave.
+  if (existsSync(pkgPath) && tplPkg) {
+    const after = mergePackage(mergePackage(readJson(pkgPath), readJson(tplPkg.from)).out, { dependencies: blockDeps }).out;
+    const cut = cutLock(dir, tpl, after);
+    if (cut && cut.text !== cut.before) entries.push({ item: "template", path: LOCKFILE, status: cut.before === null ? "new" : "changed" });
+  }
   return {
     from: manifest.version,
     to: v,
@@ -473,3 +546,27 @@ export function diff(dir) {
     blocks: manifest.blocks ?? {},
   };
 }
+
+/** `install` — the app's packages: pnpm from its lock, frozen when the
+ *  lock names exactly package.json's dependencies (src/pm.mjs); npm when
+ *  no pnpm runs, said in `notes` — but not when the registry did not
+ *  answer, since npm would need it too. */
+export function install(dir, { env = process.env, onNote } = {}) {
+  if (!existsSync(join(dir, "package.json"))) {
+    throw new CliError(`${dir} has no package.json — there is no app here`, "makersclaw init lays the template here");
+  }
+  const r = installDeps(dir, { env, onNote });
+  if (r.unreachable) {
+    throw new CliError(
+      `no pnpm on this machine, and npm could not fetch pnpm ${PNPM_VERSION}: the registry did not answer (${r.unreachable}). An npm install would need the same registry, so nothing was installed\n${r.log}`,
+      `name a pnpm ${PNPM_VERSION.split(".")[0]} in MAKERSCLAW_PNPM or put one on PATH, or install again once the registry answers`,
+    );
+  }
+  if (!r.ok) {
+    throw new CliError(
+      `${r.manager} install failed (exit ${r.code})${r.notes.length ? ` — ${r.notes.join("; ")}` : ""}${r.log ? `\n${r.log}` : ""}`,
+      r.manager === "pnpm" && r.frozen ? "a frozen install needs every package in the store or the registry" : null,
+    );
+  }
+  return r;
+}