robodev 0.22.0 → 0.24.0

package/templates/marketplace/oxfmt.config.js

@@ -0,0 +1,23 @@
+export default {
+  useTabs: false,
+  tabWidth: 2,
+  printWidth: 120,
+  singleQuote: false,
+  jsxSingleQuote: false,
+  quoteProps: "as-needed",
+  trailingComma: "all",
+  semi: true,
+  arrowParens: "always",
+  bracketSameLine: false,
+  bracketSpacing: true,
+  singleAttributePerLine: true,
+  ignorePatterns: [
+    "node_modules",
+    "dist",
+    "out",
+    ".turbo",
+    ".next",
+    "routeTree.gen.ts",
+    "openapi.generated.json",
+  ],
+};

package/templates/marketplace/package.json

@@ -0,0 +1,18 @@
+{
+  "name": "{{PACKAGE_NAME}}",
+  "version": "0.1.0",
+  "private": true,
+  "type": "module",
+  "scripts": {
+    "deploy": "robodev deploy",
+    "rules:gen": "rulesync generate"
+  },
+  "dependencies": {
+    "@robodev-ai/sdk": "^0.6.0"
+  },
+  "devDependencies": {
+    "robodev": "^0.24.0",
+    "rulesync": "^8.18.0",
+    "typescript": "^5.9.2"
+  }
+}

package/templates/marketplace/rulesync.jsonc

@@ -0,0 +1,18 @@
+{
+  "$schema": "https://github.com/dyoshikawa/rulesync/releases/latest/download/config-schema.json",
+  "targets": {
+    "cursor": ["rules", "skills"],
+    "claudecode": ["rules", "skills"],
+    "codexcli": ["rules", "skills"],
+  },
+  "outputRoots": ["."],
+  // Clean stale outputs when source rules are removed. All sources live under .rulesync/.
+  "delete": true,
+  "verbose": false,
+  "silent": false,
+  "global": false,
+  "simulateCommands": false,
+  "simulateSubagents": false,
+  "simulateSkills": false,
+  "gitignoreTargetsOnly": true,
+}

package/templates/marketplace/tsconfig.json

@@ -0,0 +1,11 @@
+{
+  "compilerOptions": {
+    "target": "ES2022",
+    "module": "ESNext",
+    "moduleResolution": "bundler",
+    "strict": true,
+    "skipLibCheck": true,
+    "noEmit": true
+  },
+  "include": ["database.ts", "api/**/*.ts"]
+}

package/templates/space/api/_lib.ts

@@ -342,6 +342,12 @@ export async function validateAlien(
 const ALLOWED_PLANET_IMAGE_TYPES = new Set(["image/jpeg", "image/png", "image/webp"]);
 const MAX_PLANET_IMAGE_BYTES = 2 * 1024 * 1024;
 
+/** Matches dashboard sanitizeFilename / KEY_RE. */
+function sanitizeFilename(name: string): string {
+  const base = name.split(/[/\\]/).pop() ?? "";
+  return base.replace(/[^A-Za-z0-9._-]+/g, "-").replace(/-+/g, "-").replace(/^-|-$/g, "").slice(0, 80);
+}
+
 export async function savePlanetImage(
   ctx: ApiHandlerContext<unknown, unknown>,
   file: UploadedFile,
@@ -354,8 +360,9 @@ export async function savePlanetImage(
     return fail(400, "Unsupported image type");
   }
 
-  const fileName = (file.filename || "image").replaceAll("/", "-");
-  const key = `planet-images/${ctx.user!.id}/${crypto.randomUUID()}-${fileName}`;
+  const fileName = file.filename || "image";
+  const safe = sanitizeFilename(fileName) || "image";
+  const key = `planet-images/${ctx.user!.id}/${crypto.randomUUID()}-${safe}`;
   const [row] = await ctx.db
     .insert(media)
     .values({

package/templates/space/package.json

@@ -11,7 +11,7 @@
     "@robodev-ai/sdk": "^0.6.0"
   },
   "devDependencies": {
-    "robodev": "^0.22.0",
+    "robodev": "^0.24.0",
     "rulesync": "^8.18.0",
     "typescript": "^5.9.2"
   }