zz-meridian 0.6.0 → 0.6.1

package/dist/adopt.js

@@ -8,7 +8,7 @@
  */
 import fs from 'node:fs';
 import path from 'node:path';
-import { PAYLOAD, VERSION, brandArgs, effectiveBrand, inside, installSkill, packageManager, payloadFiles, readJsonc, readPayload, relativeImports, run, runTool, sha256, writeIn, writeManifest, } from './files.js';
+import { VERSION, brandArgs, effectiveBrand, inside, installSkill, packageManager, payloadBytes, payloadFiles, readJsonc, readPayload, relativeImports, run, runTool, sha256, writeIn, writeManifest, } from './files.js';
 import { BRIEF_TEMPLATE, managedBlock, upsertManagedBlock } from './context.js';
 import { FIXED, adoptSetOf, managedPaths } from './ownership.js';
 /** The template's dependencies a dashboard built from these files needs. */
@@ -161,7 +161,7 @@ https://github.com/zhixuan312/zz-meridian/blob/master/skills/zz-meridian/referen
         owned.push(rel);
     };
     for (const rel of set) {
-        const raw = fs.readFileSync(path.join(PAYLOAD, rel));
+        const raw = payloadBytes(rel);
         own(rel, TS.test(rel) ? exactImports(rel, raw.toString('utf8'), known) : raw);
     }
     own('src/app.config.ts', exactImports('src/app.config.ts', appConfig(routes(root, dir)), known));

package/dist/create.js

@@ -7,7 +7,7 @@ import fs from 'node:fs';
 import path from 'node:path';
 import { managedPaths } from './ownership.js';
 import { BRIEF_TEMPLATE, managedBlock, upsertManagedBlock } from './context.js';
-import { PAYLOAD, VERSION, brandArgs, effectiveBrand, hasCommand, inside, installSkill, payloadFiles, run, sha256, writeIn, writeManifest } from './files.js';
+import { VERSION, brandArgs, effectiveBrand, hasCommand, inside, installSkill, payloadBytes, payloadFiles, run, sha256, writeIn, writeManifest } from './files.js';
 export function create(o) {
     const root = path.resolve(o.dir);
     if (fs.existsSync(root) && fs.readdirSync(root).length)
@@ -22,7 +22,7 @@ export function create(o) {
     for (const rel of payloadFiles()) {
         if (rel.startsWith('skills/'))
             continue;
-        writeIn(root, rel, fs.readFileSync(path.join(PAYLOAD, rel)));
+        writeIn(root, rel, payloadBytes(rel));
     }
     const name = brand.name ?? path.basename(root).replace(/[-_]+/g, ' ').replace(/\b\w/g, (c) => c.toUpperCase());
     brand = effectiveBrand({ ...brand, name });

package/dist/files.js

@@ -10,7 +10,16 @@ import { fileURLToPath } from 'node:url';
 /** The template snapshot this package carries, built from `git ls-files` at the release commit. */
 export const PAYLOAD = path.resolve(path.dirname(fileURLToPath(import.meta.url)), '..', 'payload');
 export const VERSION = JSON.parse(fs.readFileSync(path.resolve(path.dirname(fileURLToPath(import.meta.url)), '..', 'package.json'), 'utf8')).version;
-/** Every file under a payload folder, as posix paths relative to the payload. Symbolic links are never followed. */
+/**
+ * npm renames a `.gitignore` inside an installed package to `.npmignore`, so the payload carries the template's as
+ * `gitignore`. `shippedPath` is the name a project path ships under; `projectPath` reads one back, and also reads a
+ * `.gitignore` as itself, which is how releases before 0.6.1 carry it.
+ */
+export const shippedPath = (rel) => (rel === '.gitignore' ? 'gitignore' : rel);
+export const projectPath = (rel) => (rel === 'gitignore' ? '.gitignore' : rel);
+/** A payload file's bytes, by its project path. */
+export const payloadBytes = (rel) => fs.readFileSync(path.join(PAYLOAD, shippedPath(rel)));
+/** Every file under a payload folder, as project paths. Symbolic links are never followed. */
 export function payloadFiles(dir = '') {
     const out = [];
     const walk = (rel) => {
@@ -21,14 +30,14 @@ export function payloadFiles(dir = '') {
             if (e.isDirectory())
                 walk(p);
             else if (e.isFile())
-                out.push(p);
+                out.push(projectPath(p));
         }
     };
     if (fs.existsSync(path.join(PAYLOAD, dir)))
         walk(dir);
     return out.sort();
 }
-export const readPayload = (rel) => fs.readFileSync(path.join(PAYLOAD, rel), 'utf8');
+export const readPayload = (rel) => payloadBytes(rel).toString('utf8');
 /**
  * A path inside `root`; anything that would resolve outside it is refused: `..`, an absolute path, or a symbolic link
  * on the way (a linked folder or file could carry a write somewhere else).
@@ -132,7 +141,7 @@ export function installSkill(root, record) {
     for (const base of ['.agents/skills/zz-meridian', '.claude/skills/zz-meridian']) {
         for (const f of files) {
             const rel = `${base}/${f.slice('skills/zz-meridian/'.length)}`;
-            const content = fs.readFileSync(path.join(PAYLOAD, f));
+            const content = payloadBytes(f);
             writeIn(root, rel, content);
             if (record)
                 record[rel] = sha256(content);

package/dist/replay.js

@@ -7,7 +7,7 @@ import { createHash } from 'node:crypto';
 import fs from 'node:fs';
 import path from 'node:path';
 import { fileURLToPath } from 'node:url';
-import { brandArgs, inside, run, sha256 } from './files.js';
+import { brandArgs, inside, projectPath, run, sha256 } from './files.js';
 /** The package folder of the running CLI: the parent of its `dist/`. */
 export const runningRelease = () => path.resolve(path.dirname(fileURLToPath(import.meta.url)), '..');
 /** A command's failure as one message: the cause, then everything it printed. */
@@ -165,7 +165,7 @@ function replayTree(pkgRoot, route, brand, scratch, moduleType) {
 export function replay(pkgRoot, route, brand, scratch, moduleType = false) {
     return replayTree(pkgRoot, route, brand, scratch, moduleType).hashes;
 }
-/** Every regular file under `<release>/payload` as posix paths, symbolic links never followed. */
+/** Every regular file under `<release>/payload` as posix project paths, symbolic links never followed. */
 export function payloadList(release) {
     const base = path.join(release, 'payload');
     const out = [];
@@ -175,7 +175,7 @@ export function payloadList(release) {
             if (e.isDirectory())
                 walk(p);
             else if (e.isFile())
-                out.push(p);
+                out.push(projectPath(p));
         }
     };
     if (fs.existsSync(base))

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "zz-meridian",
-  "version": "0.6.0",
+  "version": "0.6.1",
   "description": "Bring ZZ Meridian, a dashboard design system, into a Next.js project, or start a new dashboard on it. Copies the files in; nothing depends on this package at runtime.",
   "license": "MIT",
   "type": "module",

package/payload/CHANGELOG.md

@@ -2,6 +2,14 @@
 
 Every release of ZZ Meridian, newest first. Versions follow semver: a removed or renamed token, prop or card is major; a new card, token or variant is minor; a corrected value is a patch. Each entry says what breaks and what to do instead.
 
+## [0.6.1] · 2026-10-06
+
+### Fixed
+
+- **A created project has its `.gitignore`.** npm renames a `.gitignore` inside an installed package to `.npmignore`, so every project made with `create` since 0.3.0 had a `.npmignore` and no `.gitignore`, and `git add` took in `node_modules`, `.next` and `.env.local`. The package now carries the template's as `payload/gitignore`, and `create` writes it as `.gitignore`. In a project created before 0.6.1, run `git mv .npmignore .gitignore`, then `git rm -r --cached node_modules .next` for whatever was committed; `update` leaves the file alone, since it is the team's.
+- **`update` runs from the registry.** It compares the running package with the published one, and npm's rename made the two differ, so `npx zz-meridian@<version> update` refused itself with "the running package differs from zz-meridian@<version> on the registry" since 0.5.0. 0.6.0 is on npm with this defect and has no tag or GitHub Release: update with 0.6.1.
+- **A gate step whose tool is not installed says so.** `scripts/gate.ts` printed a `TypeError` in place of the missing command.
+
 ## [0.6.0] · 2026-10-06
 
 ### Changed

package/payload/package.json

@@ -1,6 +1,6 @@
 {
   "name": "zz-meridian-template",
-  "version": "0.6.0",
+  "version": "0.6.1",
   "private": true,
   "license": "MIT",
   "description": "ZZ Meridian: a dashboard design system and starter. DTCG tokens, five layers of React components and a Design Atlas, in a light and a dark theme.",

package/payload/scripts/gate.ts

@@ -36,7 +36,8 @@ for (const [name, [cmd, ...args]] of STEPS) {
   const ok = r.status === 0;
   console.log(`${ok ? 'ok  ' : 'FAIL'} ${name} (${((Date.now() - t) / 1000).toFixed(1)}s)`);
   if (!ok) {
-    console.log((r.stdout + r.stderr).trim().split('\n').slice(-40).join('\n'));
+    // A tool that could not start (not installed) has no output, only the error.
+    console.log(`${r.stdout ?? ''}${r.stderr ?? ''}${r.error ? `${cmd}: ${r.error.message}` : ''}`.trim().split('\n').slice(-40).join('\n'));
     process.exit(1);
   }
 }