superslate 0.2.1 → 0.3.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (4) hide show
  1. package/LICENSE +63 -4
  2. package/README.md +34 -9
  3. package/dist/cli.js +2477 -184
  4. package/package.json +11 -9
package/LICENSE CHANGED
@@ -1,5 +1,64 @@
1
- All rights reserved.
1
+ MIT License
2
2
 
3
- This bootstrap package does not contain or grant access to the superslate Product Source. Use of
4
- the bootstrapper and any source obtained through it requires an authorized entitlement and remains
5
- subject to the terms supplied with the applicable order.
3
+ Copyright (c) 2026 Supercollective
4
+
5
+ Permission is hereby granted, free of charge, to any person obtaining a copy
6
+ of this software and associated documentation files (the "Software"), to deal
7
+ in the Software without restriction, including without limitation the rights
8
+ to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
9
+ copies of the Software, and to permit persons to whom the Software is
10
+ furnished to do so, subject to the following conditions:
11
+
12
+ The above copyright notice and this permission notice shall be included in all
13
+ copies or substantial portions of the Software.
14
+
15
+ THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
16
+ IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
17
+ FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
18
+ AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
19
+ LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
20
+ OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
21
+ SOFTWARE.
22
+
23
+ ---
24
+
25
+ NOTICE
26
+
27
+ The MIT grant above covers this bootstrapper only: the `superslate` npm package and the source it
28
+ is built from. The bootstrapper does not contain the superslate Product Source and grants no rights
29
+ to it.
30
+
31
+ Product Source is delivered separately through an authorized entitlement and remains governed by the
32
+ Source Product Commercial License supplied with the applicable order.
33
+
34
+ ---
35
+
36
+ THIRD-PARTY NOTICES
37
+
38
+ The published `dist/cli.js` is a single bundled file that embeds the packages listed below. Each is
39
+ distributed under the MIT License, whose terms are reproduced beneath the list.
40
+
41
+ @clack/core Copyright (c) 2025-Present Bombshell contributors (https://bomb.sh/team)
42
+ @clack/prompts Copyright (c) 2025-Present Bombshell contributors (https://bomb.sh/team)
43
+ fast-string-truncated-width Copyright (c) 2024-present Fabio Spampinato
44
+ fast-string-width Copyright (c) 2024-present Fabio Spampinato
45
+ fast-wrap-ansi Copyright (c) 2025 James Garbutt
46
+ sisteransi Copyright (c) 2018 Terkel Gjervig Nielsen
47
+
48
+ Permission is hereby granted, free of charge, to any person obtaining a copy
49
+ of this software and associated documentation files (the "Software"), to deal
50
+ in the Software without restriction, including without limitation the rights
51
+ to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
52
+ copies of the Software, and to permit persons to whom the Software is
53
+ furnished to do so, subject to the following conditions:
54
+
55
+ The above copyright notice and this permission notice shall be included in all
56
+ copies or substantial portions of the Software.
57
+
58
+ THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
59
+ IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
60
+ FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
61
+ AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
62
+ LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
63
+ OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
64
+ SOFTWARE.
package/README.md CHANGED
@@ -24,21 +24,46 @@ does not need to exist on npm.
24
24
 
25
25
  ## Source access
26
26
 
27
- The npm package is a public bootstrapper; it does not contain the paid foundation source. Before
28
- running it:
27
+ The npm package is a public bootstrapper; it does not contain the paid foundation source. Your
28
+ purchase receipt carries a licence key, and that key is the only thing you need. Node is the only
29
+ prerequisite — there is no GitHub account, no CLI to install, and no token to paste.
29
30
 
30
- 1. accept the private GitHub repository invitation included with your superslate entitlement;
31
- 2. install [GitHub CLI](https://cli.github.com/); and
32
- 3. authenticate once with `gh auth login`.
31
+ The CLI prompts for the key, or takes it from `--license-key` or `SUPERSLATE_LICENSE_KEY`. It
32
+ exchanges the key for the newest release your licence entitles you to, downloads that release's
33
+ archive, SHA-256 file, and manifest, and verifies both records before extracting source. Pass
34
+ `--source-version 1.2.3` to reproduce a specific release instead.
33
35
 
34
- The CLI never asks you to paste a GitHub token. Its version is bound to the matching immutable
35
- source tag: `superslate@1.2.3` downloads `v1.2.3`. It downloads the release archive, SHA-256 file,
36
- and manifest through your existing GitHub CLI session and verifies both records before extracting
37
- source.
36
+ Your key is sent in a request body and an `Authorization` header, never in a URL, and it is never
37
+ written to a log. A refunded licence stops downloading immediately.
38
+
39
+ Your purchase also includes read access to the private source repository, for browsing source,
40
+ watching releases, and opening issues. Connect GitHub in the customer portal to accept it. It is a
41
+ perk, not part of the download path.
42
+
43
+ ## Verifying the bootstrapper
44
+
45
+ The bootstrapper drives `git`, `tar`, and `docker` on your machine, so it is auditable before you
46
+ run it. Its source is public at
47
+ [superslate-dev/superslate-cli](https://github.com/superslate-dev/superslate-cli), it declares no
48
+ runtime dependencies, and every release is built and published from CI with npm provenance linking
49
+ the tarball to the commit and workflow that produced it:
50
+
51
+ ```sh
52
+ npm view superslate dist.attestations
53
+ ```
54
+
55
+ ## Licensing
56
+
57
+ The bootstrapper is MIT licensed. The MIT grant covers this npm package and the source it is built
58
+ from; it does not cover the superslate Product Source, which the package does not contain. Product
59
+ Source is delivered through an authorized entitlement under the Source Product Commercial License
60
+ supplied with your order.
38
61
 
39
62
  ## Options
40
63
 
41
64
  ```text
65
+ --license-key <key> Licence key from your purchase (or set SUPERSLATE_LICENSE_KEY)
66
+ --source-version <version> Pin an immutable release instead of taking the newest one
42
67
  --scope <namespace> Advanced override for the workspace namespace derived from the brand
43
68
  --brand <name> Override the display name derived from the app name
44
69
  --no-install Generate without installing dependencies