stackpack-cli 0.3.1 → 0.3.2

package/README.md

@@ -137,6 +137,8 @@ StackPack requires **no sign-up, no login, no server, no telemetry**. Presets ar
 
 Presets never contain shell commands, executable code, absolute paths, credentials, or `.env` values — the schema rejects anything unexpected. Internet access is only needed to run official creators/initializers and install packages.
 
+One small exception, in the open: the interactive menu checks the npm registry (at most once per day, cached locally) to tell you when a newer StackPack version exists. It is an anonymous read-only request that sends nothing about you or your projects, never updates anything by itself, fails silently offline, and can be disabled completely by setting the `STACKPACK_NO_UPDATE_CHECK` environment variable.
+
 ## Safety
 
 - Nothing is installed before you confirm the reviewed plan.

package/dist/cli.js

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
 //#region src/cli.ts
 if (process.argv.includes("--no-color")) process.env.NO_COLOR = "1";
-const { runCli } = await import("./program-D9mgsLIa.js");
+const { runCli } = await import("./program-CqWM02UT.js");
 await runCli(process.argv);
 process.exit(process.exitCode ?? 0);
 //#endregion

package/dist/{program-D9mgsLIa.js → program-CqWM02UT.js}

@@ -3828,16 +3828,50 @@ function buildPresetFromSelection(params) {
 		versionOverrides: selection.versionOverrides
 	};
 }
+/**
+* True when the current selection still matches what the preset describes —
+* a save-and-load flow should not re-ask to save an unchanged setup.
+*/
+function selectionMatchesPreset(preset, selection) {
+	const dependencies = {};
+	const devDependencies = {};
+	for (const pkg of selection.customPackages) (pkg.dependencyType === "dependency" ? dependencies : devDependencies)[pkg.name] = pkg.version;
+	const current = {
+		integrations: selectedRecipes(selection).map(({ recipe, options }) => ({
+			id: recipe.id,
+			options
+		})),
+		dependencies,
+		devDependencies,
+		versionOverrides: selection.versionOverrides
+	};
+	const saved = {
+		integrations: preset.integrations.map(({ id, options }) => ({
+			id,
+			options
+		})),
+		dependencies: preset.customPackages.dependencies,
+		devDependencies: preset.customPackages.devDependencies,
+		versionOverrides: preset.versionOverrides
+	};
+	return JSON.stringify(current) === JSON.stringify(saved);
+}
 /** Post-install offer to save the applied setup as a preset. */
-async function offerToSavePreset(context, selection) {
+async function offerToSavePreset(context, selection, options = {}) {
 	if (context.framework === "unknown" || context.language === "unknown") return;
+	const source = options.sourcePreset;
+	if (source && selectionMatchesPreset(source, selection)) {
+		p.log.success(`Installed from preset "${source.displayName ?? source.name}" — nothing new to save. Good to go!`);
+		return;
+	}
 	if (!guard(await p.confirm({
-		message: "Save this setup as a preset?",
+		message: source ? `This setup was changed after loading preset "${source.name}". Save the updated setup as a preset?` : "Save this setup as a preset?",
 		initialValue: false
 	}))) return;
 	const name = guard(await p.text({
 		message: "Preset name",
 		placeholder: "my-react-stack",
+		initialValue: source?.name,
 		validate(value) {
 			const result = validatePresetName(value ?? "");
 			return result.ok ? void 0 : result.reason;
@@ -3902,7 +3936,7 @@ async function dashboardInstallLoop(params) {
 			continue;
 		}
 		if (result === "installed") {
-			await offerToSavePreset(params.context, params.selection);
+			await offerToSavePreset(params.context, params.selection, { sourcePreset: params.sourcePreset });
 			return "installed";
 		}
 		return result === "dry-run" ? "dry-run" : "cancelled";
@@ -3968,6 +4002,25 @@ async function directoryState(target) {
 		return "missing";
 	}
 }
+/**
+* Creating a project inside an existing project is allowed but easy to mix up
+* later (two nested package.json trees), so it needs an explicit confirmation.
+*/
+async function confirmIfInsideExistingProject() {
+	if (!await fs.access(path.join(process.cwd(), "package.json")).then(() => true).catch(() => false)) return true;
+	p.log.warn(`This folder is already a project (package.json found):\n  ${process.cwd()}\nThe new project would be created inside it — nested projects are easy to confuse later.`);
+	return guard(await p.select({
+		message: "Create the new project inside this existing project anyway?",
+		options: [{
+			value: "cancel",
+			label: "No, cancel",
+			hint: "cd to another folder first, then run stackpack again"
+		}, {
+			value: "continue",
+			label: "Yes, create it nested inside this project"
+		}]
+	})) === "continue";
+}
 async function askProjectName(initial) {
 	let candidate = initial;
 	for (;;) {
@@ -4081,6 +4134,7 @@ async function ensureDependenciesInstalled(destination, packageManager) {
 async function runNew(projectNameArg, options) {
 	p.intro("StackPack — new project");
 	p.log.message(pc.dim("Official project tooling with real-world integrations."));
+	if (!await confirmIfInsideExistingProject()) throw new CancelledError();
 	let preset;
 	if (options.preset) preset = (await loadPreset(options.preset, { projectRoot: process.cwd() })).preset;
 	else {
@@ -4179,14 +4233,16 @@ async function runNew(projectNameArg, options) {
 		context,
 		selection: preset ? presetToSelection(preset) : createEmptySelection(),
 		dryRun: false,
-		startAtReview: preset !== void 0
+		startAtReview: preset !== void 0,
+		sourcePreset: preset
 	}) === "cancelled") {
 		await ensureDependenciesInstalled(destination, packageManager);
 		p.outro(`Base project created at ${destination}. No integrations were installed.`);
 		return;
 	}
 	await ensureDependenciesInstalled(destination, packageManager);
-	p.outro(`Project ready at ${destination}`);
+	p.note(`cd ${name}\n${packageManager} run dev`, "Next steps");
+	p.outro(`Project ready at ${destination} — good to go!`);
 }
 //#endregion
 //#region src/project/git-status.ts
@@ -4436,7 +4492,8 @@ async function runApply(name, options) {
 		context,
 		selection: presetToSelection(preset),
 		dryRun: options.dryRun === true,
-		startAtReview: true
+		startAtReview: true,
+		sourcePreset: preset
 	});
 	if (outcome === "cancelled") throw new CancelledError();
 	p.outro(outcome === "dry-run" ? "Dry run finished." : `Preset "${name}" applied.`);
@@ -4581,8 +4638,62 @@ async function runPresetsDelete(name, options = {}) {
 	p.outro(`Deleted ${location.scope} preset: ${location.filePath}`);
 }
 //#endregion
+//#region src/utils/update-check.ts
+const PACKAGE_NAME = "stackpack-cli";
+const REGISTRY_URL = `https://registry.npmjs.org/${PACKAGE_NAME}/latest`;
+const CHECK_INTERVAL_MS = 1440 * 60 * 1e3;
+const FETCH_TIMEOUT_MS = 2e3;
+function cacheFilePath() {
+	return path.join(getStoragePaths().cacheDir, "update-check.json");
+}
+async function readCachedLatest() {
+	try {
+		const raw = JSON.parse(await fs.readFile(cacheFilePath(), "utf8"));
+		return Date.now() - Date.parse(raw.checkedAt) < CHECK_INTERVAL_MS && semver.valid(raw.latest) ? raw.latest : null;
+	} catch {
+		return null;
+	}
+}
+async function fetchLatestFromRegistry() {
+	const controller = new AbortController();
+	const timer = setTimeout(() => controller.abort(), FETCH_TIMEOUT_MS);
+	try {
+		const response = await fetch(REGISTRY_URL, { signal: controller.signal });
+		if (!response.ok) return null;
+		const data = await response.json();
+		if (typeof data.version !== "string" || !semver.valid(data.version)) return null;
+		const cache = {
+			checkedAt: (/* @__PURE__ */ new Date()).toISOString(),
+			latest: data.version
+		};
+		await fs.mkdir(path.dirname(cacheFilePath()), { recursive: true });
+		await fs.writeFile(cacheFilePath(), JSON.stringify(cache), "utf8");
+		return data.version;
+	} catch {
+		return null;
+	} finally {
+		clearTimeout(timer);
+	}
+}
+/**
+* Anonymous, best-effort check for a newer published version. Never blocks
+* for more than ~2s, runs at most once per day (cached in ~/.stackpack/cache),
+* fails silently offline, and is disabled entirely by STACKPACK_NO_UPDATE_CHECK.
+* It never updates anything by itself — it only returns a notice to display.
+*/
+async function getUpdateNotice(currentVersion) {
+	if (process.env.STACKPACK_NO_UPDATE_CHECK) return null;
+	try {
+		const latest = await readCachedLatest() ?? await fetchLatestFromRegistry();
+		if (!latest || !semver.valid(currentVersion) || !semver.gt(latest, currentVersion)) return null;
+		return `Update available: ${currentVersion} → ${latest}\nRun: npm install -g ${PACKAGE_NAME}`;
+	} catch {
+		return null;
+	}
+}
+//#endregion
 //#region src/version.ts
-const VERSION = "0.3.0";
+const VERSION = "0.3.2";
 //#endregion
 //#region src/program.ts
 const packageManagerOption = new Option("--package-manager <manager>", "package manager to use").choices([
@@ -4596,6 +4707,8 @@ async function runMainMenu() {
 	p.log.message("Official project tooling with real-world integrations.");
 	p.log.message("Presets stay on this device.");
 	p.log.message(pc.dim("Ctrl+C on any question brings you back to this menu instead of exiting."));
+	const updateNotice = await getUpdateNotice(VERSION);
+	if (updateNotice) p.log.warn(pc.yellow(updateNotice));
 	for (;;) {
 		const choice = await p.select({
 			message: "What would you like to do?",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "stackpack-cli",
-  "version": "0.3.1",
+  "version": "0.3.2",
   "description": "Local-first, privacy-focused terminal integration builder for JavaScript and TypeScript projects. Official tooling first, presets stay on your device.",
   "type": "module",
   "license": "MIT",