Skip to content

fix(portal): keep the encoding a page slug carries - #396

Merged
sohail2721 merged 4 commits into
devfrom
fix/keep-the-encoding-a-page-slug-carries
Sep 28, 2026
Merged

sohail2721 merged 4 commits into
devfrom
fix/keep-the-encoding-a-page-slug-carries

Conversation

@sohail2721

@sohail2721 sohail2721 commented Sep 28, 2026 •

Copy link
Copy Markdown
Contributor

Closes apimatic/apimatic-io#2270.

The bug

apimatic portal generate failed outright on a spec whose operationId carries a space:

Error: Failed to fetch /api/openapi/portal-artifacts-generation---async/Generate Portal Artifacts Async: Not Found
    at @tanstack/start-plugin-core/dist/esm/prerender.js:81:13

Fumadocs names an operation's page after its operationId verbatim — slugify reaches tag folders and webhook names, never this (fumadocs-openapi/dist/utils/pages/preset-auto.js):

if (algorithm === "v2" && operation.operationId) return operation.operationId;

and then encodes each slug segment as it builds the page (fumadocs-core/dist/source/plugins/slugs.js):

slugs.push(encodeURI(name));

So the page is filed under Generate%20Portal%20Artifacts%20Async. Both routes built their slugs straight from the splat, which the router hands back already decoded:

const slugs = params._splat?.split('/').filter((segment) => segment.length > 0) ?? [];

source.getPage then compared a decoded segment against an encoded one, missed, and threw notFound(). The prerenderer turns that into a failed build; portal serve does not prerender, so there the page simply 404s while the sidebar keeps linking to it.

The change

One function owns the spelling the two sides have to agree on, beside the other slug helpers in shared.ts:

export function slugsFromSplat(splat: string | undefined): string[] {
  return (splat ?? '')
    .split('/')
    .filter((segment) => segment.length > 0)
    .map(encodeURI);
}

Both routes read their slugs through it, so neither splits a splat of its own, and head() uses it too — a page's canonical link and og:url now carry the same address sitemap.xml publishes. Once operation pages are named so their slugs need no encoding (apimatic/apimatic-io#2271) only the encodeURI goes; the helper stays.

Dropping the empty segments is new for {$}.md.ts, which did not filter before: /guides/.md and /.md now serve Markdown where they used to 404.

encodeURI, not encodeURIComponent. They differ on &, +, =, @ and more, and Fumadocs uses encodeURI; encoding harder than it did would miss the very pages this is meant to find. encodeURI is the identity on an ordinary slug, so nothing else moves.

Not a regression from #387

That PR passes a slugify identical to Fumadocs' own default, and an operation's page name never went through slugify in either version. What changed is that the step became reachable: this build used to fail earlier, in the TypeScript artifacts lane (apimatic/codegen-v2#517), and only got this far once that fix was deployed.

Tests

test/portal-template/page-slugs.test.ts, six cases.

slugsFromSplat on its own: empty segments dropped, an ordinary slug untouched, and the encoding pinned to Fumadocs' — a space and a non-ASCII character encoded, & left alone, which is what separates encodeURI from encodeURIComponent and is the line a future edit is most likely to cross.

Then a real section built by openApiSection from a spec whose operationId is List All Pets, decoded the way the router decodes it, and looked up:

  • found at its page address;
  • found at its .md address — the router strips .md before the handler sees the splat, so the same segments serve both;
  • not found when the splat is used as it arrives — the negative control, which fails without this change and is the regression this PR closes.

These call encodeSlugs and getPage directly rather than loading either route, so they do not fail if a route stops encoding. A build fixture that would is apimatic/apimatic-io#2272.

Full suite: 1476 passing, 0 failing, 46 pending. tsc --noEmit clean on both projects, eslint . exit 0.

Left for follow-up

  • apimatic/apimatic-io#2271 — the navigation still compares a decoded pathname against an encoded slug, so nothing is marked active on such a page; and encodeURI leaves ? and # alone, so an operationId like get?pets still fails the build. Naming operation pages so they never need encoding closes both, and makes encodeSlugs unnecessary.
  • apimatic/apimatic-io#2272 — a test that fails if either route stops encoding.

🤖 Generated with Claude Code

Fumadocs encodes each page slug segment with encodeURI, and the router hands a
route its splat already decoded, so a slug spelt from an operationId carrying a
space was looked up in a spelling no page had. The static build failed on the
first such page and a reader following the sidebar got the not-found page.

Closes apimatic/apimatic-io#2270

Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>
Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>

@saeedjamshaid saeedjamshaid left a comment

Copy link
Copy Markdown
Collaborator

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

The diagnosis is right and this fixes the #2270 build. Thanks for tracing it into Fumadocs' slugs.js.

Two changes before merge, both inline: build pageUrl in head() from the same helper, and drop the .md from the Markdown test's splat. The other two inline comments (nav active state, a route-level test) can be follow-up tickets if you'd rather keep this PR small. Please file them either way.

Also:

  • Dropping empty segments changes the .md route: /guides/.md now serves the guides page's Markdown and /.md the home Markdown, where both used to 404. Harmless, but it's a change nobody asked for.
  • encodeURI leaves ? and # alone, so an operationId like get?pets still gives a page URL with a query string and fails the build the same way. Naming operation pages so they never need encoding would close that case and the nav one together.
  • Nit: urlOf() rebuilds the bundle and loader in every case, and beforeEach rewrites the same spec. before()/after() would do.

Comment thread portal-template/src/routes/$.tsx
Comment thread test/portal-template/page-slugs.test.ts Outdated
Comment thread test/portal-template/page-slugs.test.ts
Comment thread portal-template/src/lib/shared.ts
Build the page address in head() from the same rule the loader uses, so the
canonical link and og:url agree with sitemap.xml. Keep the empty-segment filter
in the catch-all route, where it already lived, rather than in the shared
helper, so the Markdown route answers exactly what it answered before.

Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>
@saeedjamshaid

Copy link
Copy Markdown
Collaborator

Thanks, this all looks good. Sorry, my .md note read like a request to revert, and it wasn't. One small follow-up before I approve: could we go back to a single slugsFromSplat in shared.ts, shared by both routes?

export function slugsFromSplat(splat: string | undefined): string[] {
  return (splat ?? '')
    .split('/')
    .filter((segment) => segment.length > 0)
    .map(encodeURI);
}
  • $.tsx: drop pageSlugs and call slugsFromSplat(params._splat) in both the loader and head().
  • {$}.md.ts: decodeMarkdownUrl(slugsFromSplat(params._splat)).
  • Tests: call slugsFromSplat(decodedSplatOf(url)) instead of copying the route's split('/'), and bring back the empty-segment case.
  • Description: update the "each route keeps the splitting it already did" line to match.

This is the part that stays after #2271 (only the encodeURI goes), and it takes the split('/') out of the routes. /guides/.md and /.md serving Markdown is fine.

Both routes take their slugs from slugsFromSplat, so the splitting lives in
one place rather than in each route, and only the encodeURI has to go once
operation pages are named so their slugs need no encoding.

Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>
@sohail2721

Copy link
Copy Markdown
Contributor Author

Done in 299b824 — and no need to apologise, reverting it was my call rather than your wording. Glad to have it back as one helper.

slugsFromSplat is restored exactly as you wrote it. $.tsx drops pageSlugs and calls it in both the loader and head(); {$}.md.ts is decodeMarkdownUrl(slugsFromSplat(params._splat)). Neither route splits a splat of its own any more.

Tests call slugsFromSplat(decodedSplatOf(url)) rather than copying the route's split('/'), and the empty-segment case is back — six again.

The description line is updated. It now says both routes read their slugs through the helper, notes that only the encodeURI goes once #2271 lands, and states the .md change plainly rather than leaving it to the reader: /guides/.md and /.md serve Markdown where they used to 404.

Full suite: 1477 passing, 0 failing, 46 pending. tsc --noEmit clean on both projects, eslint . exit 0.

@sonarqubecloud

Copy link
Copy Markdown

@sohail2721
sohail2721 merged commit 0bec5f4 into dev Sep 28, 2026
10 checks passed
MuHamza30 added a commit that referenced this pull request Sep 28, 2026
… cannot

A space in a tag or an operationId still becomes a hyphen. Any other character a Windows
folder name or a URL path segment cannot hold, and a leading or trailing dot, now stops
the build instead of being replaced. The message lists every such tag, operationId,
path and webhook name, with the characters each holds, so they can all be changed at once.

The e2e fixture's tag is back to 'Simple Calculator', and the page-slug test from #396
names its page 'listCafés', since a space no longer needs encoding.

Refs apimatic/apimatic-io#2262

Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com>
mrafnadeem-apimatic pushed a commit that referenced this pull request Sep 28, 2026
…er cannot hold (#400)

* fix(portal): keep a tag's folder free of what Windows and URLs refuse

Fumadocs names a tag's folder by replacing whitespace alone, so 'Component: Price Points' became 'component:-price-points', a folder the prerender cannot create on Windows and a URL with a colon in it everywhere. The slug now reads any character unsafe in a Windows folder name or a URL path segment as a space, and trims leading and trailing dots, so that tag's folder is 'component-price-points'.

Tags that now slugify alike would share a folder, and so would two that differ only in case before this. Each writes a meta into it, one replaces the other, and its operations drop out of the sidebar. The build now refuses that, naming both tags, as it does a tag with nothing left to name a folder after, and a tag whose folder is the one untagged operations are filed under.

The e2e fixture's tag is 'Simple: Calculator', whose folder is unchanged, so the Windows build covers the crash.

Refs apimatic/apimatic-io#2262

Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com>

* fix(portal): name the right tags, and refuse a nameless webhook page

A shared folder's message compared bare slugs, so under nested tags it could name one from another parent's folder. It now follows each tag's parents to the folder Fumadocs files it in.

A webhook without an operationId is named after its slug, and one made only of unsafe characters became '.mdx', which the portal reads as its folder's index. The build now refuses it and asks for an operationId.

Refs apimatic/apimatic-io#2262

Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com>

* fix(portal): keep a page's name free of what Windows and URLs refuse

A page is named after its operationId as it stands, or its route when it has none, so an operationId holding '#', ':' or '/' named a page the prerender cannot write on Windows, or split it across folders. Each is now made safe as a tag's slug is, keeping its case, so an operationId without those characters keeps its URL.

An operationId with nothing left is refused, and two that become one page are refused as two operations sharing a page already are.

Refs apimatic/apimatic-io#2262

Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com>

* refactor(portal): trim a name without backtracking, and flatten tagParents

Sonar flagged the trim's trailing `[\s.]+$` as super-linear, and tagParents' nesting as over the cognitive-complexity limit. The ends are now trimmed by a loop, and a page's declared tags are read by a function of their own.

Refs apimatic/apimatic-io#2262

Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com>

* fix(portal): refuse a tag or operationId holding what a URL or folder cannot

A space in a tag or an operationId still becomes a hyphen. Any other character a Windows
folder name or a URL path segment cannot hold, and a leading or trailing dot, now stops
the build instead of being replaced. The message lists every such tag, operationId,
path and webhook name, with the characters each holds, so they can all be changed at once.

The e2e fixture's tag is back to 'Simple Calculator', and the page-slug test from #396
names its page 'listCafés', since a space no longer needs encoding.

Refs apimatic/apimatic-io#2262

Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com>

---------

Co-authored-by: Claude Opus 5.5 (1M context) <noreply@anthropic.com>
github-actions Bot pushed a commit that referenced this pull request Sep 28, 2026
# [2.0.0-beta.1](v1.5.0...v2.0.0-beta.1) (2026-09-28)

* build!: move to Node 24 and TypeScript 7 ([#347](#347)) ([2528d6e](2528d6e))
* feat(quickstart)!: one funnel, and the language question ([#363](#363)) ([c270135](c270135)), closes [#361](#361)
* feat(sdk)!: retire v3 generation and let a publish record itself ([#359](#359)) ([c48f91b](c48f91b)), closes [#358](#358) [#358](#358) [apimatic-io#2233](https://github.com/apimatic-io/issues/2233)

### Bug Fixes

* **config:** keep the package configuration a publish did not write ([#392](#392)) ([bc52735](bc52735))
* **config:** nest publishing under the language ([#350](#350)) ([fbacf74](fbacf74))
* **deps:** take fumadocs 16.15.15, which fixes bold text in a built portal ([#388](#388)) ([fa178ab](fa178ab))
* **plugin:** ask only for the plugin's identity when the languages are recorded ([#389](#389)) ([d721819](d721819)), closes [apimatic/apimatic-io#2258](https://github.com/apimatic/apimatic-io/issues/2258)
* **portal:** bundle the Geist fonts instead of loading them from Google Fonts ([#366](#366)) ([95f2f7e](95f2f7e))
* **portal:** drop the TypeScript definitions panel from operation pages ([#353](#353)) ([042eb89](042eb89))
* **portal:** give a run the temp directory the filesystem names, not an alias ([#377](#377)) ([d71d23f](d71d23f))
* **portal:** keep the encoding a page slug carries ([#396](#396)) ([0bec5f4](0bec5f4)), closes [apimatic/apimatic-io#2270](https://github.com/apimatic/apimatic-io/issues/2270)
* **portal:** keep the header's links on one line ([#398](#398)) ([40dc472](40dc472))
* **portal:** keep the portal name on one line in the header ([#395](#395)) ([f3d352c](f3d352c))
* **portal:** keep the preview starting until its first page answers ([#399](#399)) ([5359442](5359442))
* **portal:** name the operations a shared page comes from, in words a spec's author knows ([#387](#387)) ([01197a7](01197a7))
* **portal:** offer the page actions on API reference pages ([#382](#382)) ([22f4873](22f4873)), closes [apimatic/apimatic-io#2247](https://github.com/apimatic/apimatic-io/issues/2247) [#383](#383)
* **portal:** refuse tag and operationId names a URL or a Windows folder cannot hold ([#400](#400)) ([0ea01b2](0ea01b2)), closes [apimatic/apimatic-io#2262](https://github.com/apimatic/apimatic-io/issues/2262) [#396](#396)
* **portal:** render a request body in a media type Fumadocs has no adapter for ([#386](#386)) ([9f89ad3](9f89ad3))
* **portal:** render an operation whose response example has no value ([#373](#373)) ([1dc84ad](1dc84ad))
* **portal:** render split OpenAPI specifications correctly ([#354](#354)) ([d97cda6](d97cda6))
* **portal:** stop printing an operation's raw description under its title ([#383](#383)) ([25b9f6e](25b9f6e)), closes [apimatic/apimatic-io#2242](https://github.com/apimatic/apimatic-io/issues/2242)
* **quickstart:** download the sample spec from its new openapi.json path ([#401](#401)) ([ebc6743](ebc6743))
* the release test's high and medium findings ([#375](#375)) ([7fe41e1](7fe41e1))

### Features

* code samples support ([#352](#352)) ([7b82568](7b82568))
* **config:** replace portal.json and plugin-config.json with apimatic.json ([#348](#348)) ([506f67f](506f67f))
* local plugin generation ([#358](#358)) ([5ba70de](5ba70de)), closes [#351](#351) [#346](#346) [#348](#348) [#318](#318)
* **portal:** build the documentation portal locally with Fumadocs ([#343](#343)) ([073d09a](073d09a))
* **portal:** build the SDK and Context Plugin pages from real templates and the portal artifacts ([#369](#369)) ([0efd7b3](0efd7b3))
* **portal:** fetch the artifacts from /portal-artifacts ([#361](#361)) ([0e823f3](0e823f3))
* **portal:** generate the SDK and context plugin pages ([#360](#360)) ([338b14a](338b14a))
* **portal:** give the portal block its v2 shape, with branding and tabs ([#355](#355)) ([d0fb189](d0fb189))
* **portal:** lead each SDK card with its install command ([#376](#376)) ([119e9d6](119e9d6)), closes [#375](#375)
* **portal:** let the root nav.json decide the tabs, and fix the nav.json QA findings ([#371](#371)) ([ecf7666](ecf7666))
* **portal:** order the sidebar from nav.json ([#346](#346)) ([306e4f9](306e4f9))
* **portal:** point to api transform when src/spec has no OpenAPI 3.x document ([#364](#364)) ([eefc917](eefc917))
* **portal:** the SDK Overview design, on the SDKs, language and plugin pages ([#391](#391)) ([fd3fe34](fd3fe34))
* **quickstart:** suggest validating with an AI agent when a spec fails ([#385](#385)) ([36fd2bb](36fd2bb))

### Reverts

* **portal:** offer the page actions on API reference pages ([#382](#382)) ([#397](#397)) ([c087ef9](c087ef9)), closes [#388](#388) [apimatic/apimatic-io#2247](https://github.com/apimatic/apimatic-io/issues/2247)

### BREAKING CHANGES

* `apimatic sdk save-changes` is removed, along with
`--codegen-version`, `--stability`, `--track-changes` and `--skip-changes`
on `sdk generate` and `--codegen-version`, `--stability` and
`--update-plugin-config` on `sdk publish`. Java, Ruby, Go and PHP cannot be
generated until they reach v4.

Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>

* fix(sdk): keep --stability, which outlived the version it came with

Retiring v3 took `--stability` with it on the grounds that there was one
answer left. There is one answer *today*: v4 renders every language at beta
and they reach stable one at a time, so the level is a choice that survives
the version being fixed.

The flag is back on both commands, defaulting to stable as before, and the
level a language offers is a table rather than a constant — `stableLevels`
of one is answered without asking, and the interactive flow puts the
question back the moment a language has two. `sdk publish` names the level
in its summary only when the user chose it, read from oclif's parse
metadata, because `--stability stable` and the default are the same string
and the doc's block has no such row.

Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>

* fix(sdk): keep --codegen-version, with one version in it

Retiring v3 removed the flag along with the version, on the grounds that a
choice of one is not a choice. But the flag is how a caller says which
generator they want, and there will be a v5: removing it makes that move a
release that changes what people get, rather than a value they pass.

`CodeGenerationVersion` now holds `V4` alone, and stays an enum so the next
one is a line in it. The flag is back on both commands, accepting `v4`,
defaulting to `v4`, and refusing `v3` by name rather than generating
something else quietly. `sdk publish` names it in its telemetry again.

It is not written down. `codegenVersion` left `apimatic.json` when the
service took over deciding the generator, so the flag says what to generate
with and nothing records what was used.

Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>

* fix(config): drop codegenVersion from the published schema
* `apimatic quickstart` no longer offers a choice between a
portal and an SDK. It always builds a portal, and `apimatic sdk generate`
is the command for an SDK alone.

Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>

* feat(quickstart): ask which languages the portal covers

The one question quickstart asks besides the spec. Every language a plugin
can carry comes up checked, because a first portal covering everything it
can is what a single Enter should give, and the four it cannot are named in
the prompt rather than left out in silence.

The answer is written to `apimatic.json` through `recordLanguages` before
anything is built, because that file is what says which SDKs a portal
documents — every command after this one reads it rather than the answer
that produced it.

`languageLabel` moves to `types/sdk/generate.ts`, where both prompts that
name a language can reach it, and TypeScript is spelled the way its own
project spells it.

Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>

* feat(quickstart): name the plugin after the folder, without asking

The `plugin` block is what asks the service for a context plugin, so
quickstart has to write one — and the journey allows it no question about
plugins. The identity comes from the directory the user is standing in.

A folder name is not a plugin id. `Acme Payments` and `acme_payments` are
ordinary names and neither is the kebab-case `pluginId` has to be, so the
id is made from the name while the name itself is kept as typed — the id
goes to `gh repo create`, the name is what a reader sees. A directory whose
name survives none of that falls back, because writing an id the config
would then refuse is worse than not deriving one.

`0.1.0` for the version: every plugin starts somewhere.

Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>

* feat(quickstart): keep generated files out of the repository

Every command that builds a portal writes `src/static/sdk/`,
`src/static/plugin.zip` and an expanded `./plugin` into the project. None
of it belongs in a repository, and `portal serve` writes it too — so
without this a preview leaves a clean checkout dirty.

`/plugin/` is the one that matters. `plugin publish` runs `git init` inside
that directory and pushes it as its own repository; a parent tracking it
would nest one repository inside another.

Quickstart writes the entries because quickstart is what makes the project.
It appends what is missing and rewrites nothing, so a `.gitignore` the user
wrote survives and re-running in an adopted directory stacks no duplicates.

The paths are ignored here before anything on this branch produces them:
the placement lands with the `/portal-artifacts` call, and a user whose
first build dirties their tree has already been failed by then.

Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>

* fix(quickstart): end in the preview again, and say the coming languages under the answer

Two things, both about where a line belongs.

The rebase onto dev quietly took dev's ending for the wizard -- the one that
stops at the scaffold because "the wizard does not ask for the project's SDK
languages yet". It does, three lines above that comment. The handoff to
`portal serve`, and the `onAfterServe` the serve action took for it, had both
gone; nothing failed, because no test described the funnel's own ending. One
does now.

`Next Steps` loses its first two items with them. It told the user to name
their SDK languages and then start a preview; the wizard has just done both.
What is left is what to change now that the portal is on screen.

The coming-soon languages move out of the multiselect's message and under the
answer, in grey. Inside the message they rendered above the languages the user
had picked, in the green a submitted answer is drawn in, reading like a fourth
option rather than a footnote to the three.

Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>

* feat(portal): give quickstart the api transform hint, with the format it needs

Quickstart checks the spec itself before it writes the project, so the
transform hint portal generate and portal serve now give never reached it.
A Postman collection or a RAML file was told only that it was not an
OpenAPI document, with nothing to do about it.

Both now end on one sentence, which names --format=openapi3yaml: the
transform refuses to run without a format, so the command as printed
before would have failed.

Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com>

* fix(quickstart): ignore only what is still generated into the project
* engines.node is now >=24.0.0. Node 22 is no longer supported.

Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>

* fix(sdk): build the validation service once configDir is assigned

`validationService` was initialised from `this.configDir` in a property
initialiser, but `configDir` is a constructor parameter property. The code only
worked because TypeScript's downlevel emit assigns parameter properties before
property initialisers; under the native class-field semantics that a modern
target selects, `this.configDir` is still undefined at that point and the
service would be constructed with no config directory.

Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>

* build: compile with TypeScript 7, keeping TypeScript 6 for linting

TypeScript 7 is the native compiler. On this repo it builds `src` in ~1.3s
against ~4.7s, and type-checks the suite in ~1.0s against ~4.8s. Emitted
output is unchanged apart from sourcemaps, temp-variable naming and
declaration ordering.

typescript-eslint cannot run on it: every published version, canary included,
declares `typescript >=4.8.4 <6.1.0` and throws at module init on TS 7, which
would take out `lint`, `posttest` and the pre-commit hook. So the two sit side
by side in Microsoft's documented arrangement — `tsc` is TypeScript 7 and
builds, bare `typescript` is the TypeScript 6 shim that only the linter loads.
Naming them this way rather than aliasing TypeScript 7 keeps the compiler each
script gets written down, and survives `pnpm update --latest`.

TypeScript 6 stopped sweeping node_modules/@types, so the test project names
the globals the suite needs; the source project resolves its types through
`node:` imports and needs no list.

`target` moves to es2024 now that the engine floor is Node 24, which also
selects native class-field semantics. `ts-node` goes: it drives the classic
compiler API, which TypeScript 7 no longer ships, and the suite runs on tsx.
`@types/mocha` was six years behind mocha and had to be named explicitly.

The `typescript.tsdk` pin is dropped. It is deprecated in favour of
`js/ts.tsdk.path`, inert unless a developer opts in by hand, and would now
point at a TypeScript 6 build within a patch of what VS Code already bundles.

Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>

* ci: test on Node 24 and 26, and release on 24

The engine floor is Node 24, so the 22 legs go. The second leg is 26 rather
than the floor alone: 26 becomes LTS on 2026-10-28, inside this major's life,
so it is what most developers will be running. The job count is unchanged.

Releasing on Node 24 drops the `npm install -g npm@latest` step, whose only
purpose was that Node 22 bundles npm 10.9.8 while OIDC trusted publishing
needs 11.5.1. Node 24 bundles 11.19.0. The constraint moves to a comment on
the matrix, since pinning that job back to 22 would silently break publishing.

`npm-tag-latest.yml` carried a `node: [ '14' ]` matrix that no step consumed;
the job never sets up Node at all.

The standalone pnpm in test.yml is kept rather than reverted to corepack. Its
original reason is gone, but it is a SHA-pinned executable that needs no Node
of its own, where corepack would resolve pnpm from the registry at run time and
need the three-step setup-node dance the other workflows use. The comment now
states the reason that actually holds.

Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>

* chore(vscode): repair the CLI debug configuration

`preLaunchTask` named a task the TypeScript extension provides, and that
provider is not registered when the extension stands down for TypeScript 7, so
the configuration would fail to start. The npm task provider supplies `build`
regardless, and still rebuilds before launching.

`program` pointed at `bin/run`, deleted in the ESM migration; it only launched
because Node appends `.js`. The forty commented-out argument lines carried
another machine's absolute paths.

`.gitignore` re-ignored `.vscode/launch.json` in its custom section, cancelling
the allowlist above it. Inert while the file is tracked, but it would have
refused a re-add.

Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>

* docs: record the two-compiler toolchain and how to remove it

The `typescript` dependency no longer being the compiler is surprising enough
to look like a mistake, so state why it is there, which command gets which
compiler, and the condition for deleting the arrangement.

Also corrects the build commands, which documented `tsc -b` although the
project has no references and the scripts call plain `tsc`.

Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>

* ci: remove unused action

* fix: broken test

* fix: mock fs broken in node 26

* ci: install pnpm standalone in the build and release workflows

Corepack is not distributed with Node 25 and newer, so the Node 26 leg of
check_build could not bootstrap pnpm. Also correct the release floor: npm
11.5.1, which trusted publishing needs, first ships in Node 24.5.0.

Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com>

* fix(hooks): check the running Node against the declared engine range

Read engines.node from the manifest oclif has already parsed and compare
with semver, so package.json is the single source of the floor and a
minor-version floor is honoured. Test the hook's behaviour on both sides
of the range, and hold the CLI's range to the Node floors the portal
template's dependencies declare.

Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com>

* docs: name the e2e test that depends on the two-compiler arrangement

Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com>

* chore: untrack launch.json and drop leftover config

launch.json goes back to being a personal, ignored file. mocha.opts named
ts-node and has been unused since mocha 8. ESLint now skips Claude Code
worktrees under .claude.

Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com>

* fix(portal): bind the prerender preview server to 127.0.0.1

The prerender pass fetched pages from a preview server on `localhost`.
On macOS it listened on `::1` only; a stalled connect under load fell
back to 127.0.0.1 and was refused, failing the portal build.

Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com>
@github-actions

Copy link
Copy Markdown

🎉 This PR is included in version 2.0.0-beta.1 🎉

The release is available on:

Your semantic-release bot 📦🚀

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants