fix(create): preserve manifest template specifiers literally

Manifest entries like `{ template: '@your-org/template-web' }` were
passing through `discoverTemplate` → `expandCreateShorthand` and being
rewritten into `@your-org/create-template-web` — because the shorthand
rule targets any `@scope/name` that doesn't already start with `create-`.
The manifest author's literal package name was silently transformed,
causing vp to fetch the wrong package.

Fix: thread a `skipShorthand` flag through `discoverTemplate` that short-
circuits the final `expandCreateShorthand` call. Set it when
`resolveOrgManifestForCreate` returns `kind: 'replaced'` (the path
responsible for manifest-resolved specifiers). The earlier branches in
`discoverTemplate` (`vite:`, GitHub URLs, local workspace packages)
still match first, so manifest entries using those specifier kinds
behave unchanged.

Unit test added to `discovery.spec.ts` pinning both halves of the
contract: `@your-org/template-web` stays literal with the flag set,
and still expands via shorthand without it (the existing behavior
for non-manifest inputs).

Reported by Cursor Bugbot on #1398.

Author: fengmk2

packages/cli/src/create/__tests__/discovery.spec.ts

@@ -108,4 +108,36 @@ describe('GitHub template helpers', () => {
     expect(template.command).toBe('degit');
     expect(template.args).toEqual(['your-org/fate-template', 'my-app']);
   });
+
+  it('should keep manifest-resolved specifiers literal when skipShorthand=true', () => {
+    const workspace = {
+      rootDir: '/tmp/workspace',
+      isMonorepo: false,
+      monorepoScope: '',
+      workspacePatterns: [],
+      parentDirs: [],
+      packageManager: 'pnpm',
+      packageManagerVersion: 'latest',
+      downloadPackageManager: { binPrefix: '/tmp/bin', version: '10.0.0' } as never,
+      packages: [],
+    } as never;
+
+    // A manifest entry like `{ template: '@your-org/template-web' }` must
+    // NOT be rewritten into `@your-org/create-template-web` by the create
+    // shorthand expander — the manifest author already gave the exact
+    // npm package name they want.
+    const fromManifest = discoverTemplate(
+      '@your-org/template-web',
+      [],
+      workspace,
+      false,
+      undefined,
+      true,
+    );
+    expect(fromManifest.command).toBe('@your-org/template-web');
+
+    // But without the flag, the existing shorthand rules still apply.
+    const withoutFlag = discoverTemplate('@your-org/template-web', [], workspace);
+    expect(withoutFlag.command).toBe('@your-org/create-template-web');
+  });
 });

packages/cli/src/create/bin.ts

@@ -441,6 +441,7 @@ async function main() {
   let remoteTargetDir: string | undefined;
   let shouldSetupHooks = false;
   let bundledLocalPath: string | undefined;
+  let skipShorthandExpansion = false;
   const installArgs = process.env.CI ? ['--no-frozen-lockfile'] : undefined;
 
   // Honor `create.defaultTemplate` from vite.config.ts when no CLI arg was passed.
@@ -460,6 +461,10 @@ async function main() {
     });
     if (resolved.kind === 'replaced') {
       selectedTemplateName = resolved.templateName;
+      // Manifest entries are fully-qualified by their author.
+      // Prevent `expandCreateShorthand` from rewriting e.g.
+      // `@your-org/template-web` into `@your-org/create-template-web`.
+      skipShorthandExpansion = true;
     } else if (resolved.kind === 'bundled') {
       bundledLocalPath = resolved.bundledLocalPath;
     } else if (resolved.kind === 'escape-hatch') {
@@ -790,6 +795,7 @@ Use \`vp create --list\` to list all available templates, or run \`vp create --h
     workspaceInfo,
     options.interactive,
     bundledLocalPath,
+    skipShorthandExpansion,
   );
 
   if (selectedParentDir) {

packages/cli/src/create/discovery.ts

@@ -47,6 +47,7 @@ export function discoverTemplate(
   workspaceInfo: WorkspaceInfo,
   interactive?: boolean,
   bundledLocalPath?: string,
+  skipShorthand?: boolean,
 ): TemplateInfo {
   const envs = prependToPathToEnvs(workspaceInfo.downloadPackageManager.binPrefix, {
     ...process.env,
@@ -130,7 +131,10 @@ export function discoverTemplate(
     }
   }
 
-  const expandedName = expandCreateShorthand(templateName);
+  // Manifest-resolved entries (`{ kind: 'replaced' }` from org-resolve.ts)
+  // are already fully qualified by the manifest author — `@scope/template-web`
+  // means exactly that package, NOT `@scope/create-template-web`.
+  const expandedName = skipShorthand ? templateName : expandCreateShorthand(templateName);
   return {
     command: expandedName,
     args: [...templateArgs],