zudojs-cli 0.1.2 → 1.0.0

package/dist/src/utils/utils.name.js

@@ -1,8 +1,58 @@
+import { CLIValidationError } from "../errors/index.js";
 export function normalizeName(name) {
     return name
         .trim()
         .toLowerCase()
         .replace(/[^a-z0-9-]+/g, "-")
-        .replace(/^-+|-+$/g, "");
+        // Trim leading/trailing dashes without the quadratic `-+$` scan: the
+        // lookbehind pins each attempt to the start of a dash run.
+        .replace(/^-+/, "")
+        .replace(/(?<!-)-+$/, "");
+}
+/** Converts an arbitrary name to PascalCase (safe as a TS identifier). */
+export function toPascalCase(name) {
+    return normalizeName(name)
+        .split("-")
+        .filter(Boolean)
+        .map((part) => part.charAt(0).toUpperCase() + part.slice(1))
+        .join("");
+}
+/** Converts an arbitrary name to camelCase (safe as a TS identifier). */
+export function toCamelCase(name) {
+    const pascal = toPascalCase(name);
+    return pascal.charAt(0).toLowerCase() + pascal.slice(1);
+}
+/**
+ * Pattern for names that may be used verbatim as a path segment
+ * (`--service`, `--module`, manifest service entries).
+ */
+export const SAFE_PATH_SEGMENT = /^[A-Za-z0-9][A-Za-z0-9_-]*$/;
+/**
+ * Validates a name that a generator will normalize into file paths and
+ * identifiers.
+ *
+ * `normalizeName` strips everything outside `[a-z0-9-]`, so a name such as
+ * `"..."` or `"!!!"` collapses to the empty string and the generator writes
+ * `src//.event.ts` with an anonymous exported class. Reject it up front.
+ */
+export function assertGeneratableName(name, kind = "name") {
+    const normalized = normalizeName(name);
+    if (normalized === "") {
+        throw new CLIValidationError(`Invalid ${kind}: "${name}". It must contain at least one letter or digit.`);
+    }
+    return normalized;
+}
+/**
+ * Validates a value that is interpolated verbatim into a generated file path.
+ *
+ * Unlike {@link assertGeneratableName} this does not normalize: the value is
+ * used as-is, so `..` or a path separator here would let a generator write
+ * outside its base path.
+ */
+export function assertSafePathSegment(value, kind = "value") {
+    if (!SAFE_PATH_SEGMENT.test(value)) {
+        throw new CLIValidationError(`Invalid ${kind}: "${value}". Only alphanumeric characters, hyphens, and underscores are allowed.`);
+    }
+    return value;
 }
 //# sourceMappingURL=utils.name.js.map

package/package.json

@@ -1,16 +1,16 @@
 {
   "name": "zudojs-cli",
-  "version": "0.1.2",
+  "version": "1.0.0",
   "description": "Command-line interface for scaffolding, generating, and managing Zudojs framework projects.",
   "license": "MIT",
   "type": "module",
-  "main": "./dist/index.js",
-  "module": "./dist/index.js",
-  "types": "./dist/index.d.ts",
+  "main": "./dist/src/index.js",
+  "module": "./dist/src/index.js",
+  "types": "./dist/src/index.d.ts",
   "exports": {
     ".": {
-      "types": "./dist/index.d.ts",
-      "import": "./dist/index.js"
+      "types": "./dist/src/index.d.ts",
+      "import": "./dist/src/index.js"
     }
   },
   "bin": {
@@ -18,28 +18,22 @@
   },
   "files": [
     "dist",
+    "!dist/**/*.map",
+    "!dist/**/*.tsbuildinfo",
+    "!dist/.tsbuildinfo",
     "src/scripts/postinstall.cjs"
   ],
-  "scripts": {
-    "build": "tsc -p tsconfig.json && mkdir -p dist/src/scripts && cp src/scripts/postinstall.cjs dist/src/scripts/postinstall.cjs",
-    "dev": "tsx src/bin/zudojs.ts",
-    "typecheck": "tsc -p tsconfig.json --noEmit",
-    "clean": "rm -rf dist",
-    "test": "vitest run",
-    "test:watch": "vitest",
-    "postinstall": "node src/scripts/postinstall.cjs"
-  },
   "dependencies": {
     "@clack/prompts": "^1.7.0",
-    "@zudojs/config": "0.1.0",
-    "@zudojs/core": "0.1.0",
-    "@zudojs/errors": "0.1.0",
-    "@zudojs/logger": "0.1.0"
+    "@zudojs/config": "1.0.0",
+    "@zudojs/core": "1.0.0",
+    "@zudojs/errors": "1.0.0",
+    "@zudojs/logger": "1.0.0"
   },
   "devDependencies": {
     "@types/node": "^26.4.1",
     "tsx": "^4.23.12",
-    "typescript": "^7.0.2",
+    "typescript": "7.0.2",
     "vitest": "^4.1.11"
   },
   "engines": {
@@ -56,8 +50,21 @@
     "dev"
   ],
   "homepage": "https://github.com/oyinlola-tech/zudo#readme",
+  "bugs": {
+    "url": "https://github.com/oyinlola-tech/zudo/issues"
+  },
   "repository": {
     "type": "git",
-    "url": "https://github.com/oyinlola-tech/zudo"
+    "url": "https://github.com/oyinlola-tech/zudo",
+    "directory": "packages/cli"
+  },
+  "scripts": {
+    "build": "tsc -p tsconfig.json && mkdir -p dist/src/scripts && cp src/scripts/postinstall.cjs dist/src/scripts/postinstall.cjs",
+    "dev": "tsx src/bin/zudojs.ts",
+    "typecheck": "tsc -p tsconfig.json --noEmit && tsc -p tsconfig.test.json --noEmit",
+    "clean": "rm -rf dist",
+    "test": "vitest run",
+    "test:watch": "vitest",
+    "postinstall": "node src/scripts/postinstall.cjs"
   }
-}
+}

package/src/scripts/postinstall.cjs

@@ -25,7 +25,7 @@ async function checkLatestVersion(packageName) {
     const timeout = setTimeout(() => controller.abort(), 5000);
 
     const response = await fetch(
-      `https://registry.npmjs.org/latest/${packageName}`,
+      `https://registry.npmjs.org/${packageName}/latest`,
       { signal: controller.signal },
     );
     clearTimeout(timeout);
@@ -41,15 +41,36 @@ async function checkLatestVersion(packageName) {
   }
 }
 
+/**
+ * Whether the update check should be skipped.
+ *
+ * The check reaches out to registry.npmjs.org on every install. That is
+ * unwanted in CI, in Docker builds and on air-gapped machines, and there was
+ * previously no way to turn it off.
+ */
+function shouldSkip() {
+  if (process.env.ZUDOJS_NO_UPDATE_CHECK) return true;
+  if (process.env.CI) return true;
+  if (process.env.NODE_ENV === "test") return true;
+  if (process.env.npm_config_offline === "true") return true;
+  // Only a global install is the one the user upgrades with `npm i -g`.
+  if (process.env.npm_config_global !== "true") return true;
+  return false;
+}
+
 async function main() {
+  if (shouldSkip()) {
+    return;
+  }
+
   const installed = getInstalledVersion();
-  const latest = await checkLatestVersion("@zudojs/cli");
+  const latest = await checkLatestVersion("zudojs-cli");
 
   if (latest && latest !== installed) {
     console.log(
       `\n  zudojs ${installed} is installed, but version ${latest} is available.`,
     );
-    console.log(`   Run: npm install -g @zudojs/cli@latest\n`);
+    console.log(`   Run: npm install -g zudojs-cli@latest\n`);
   }
 }