4bnode 4.0.0 → 4.0.3

package/skeleton/{dev-api.js → .4bnode/dev-api.js}

@@ -8,6 +8,47 @@ import crypto from 'crypto';
 
 const router = express.Router();
 
+// Serve dashboard UI and assets
+const __4bnodeDir = path.join(process.cwd(), '.4bnode');
+router.get('/', (req, res) => {
+  res.sendFile('ui.html', { root: __4bnodeDir });
+});
+router.use('/assets', express.static(path.join(__4bnodeDir, 'assets')));
+
+// ── Passkey Authentication ──────────────────────────────────────────────────
+function getPasskeyHash() {
+  const file = path.join(__4bnodeDir, '.passkey');
+  if (!fs.existsSync(file)) return null;
+  return fs.readFileSync(file, 'utf8').trim();
+}
+
+function hashPasskey(pin) {
+  return crypto.createHash('sha256').update(pin).digest('hex');
+}
+
+// Verify passkey endpoint (no auth middleware needed here)
+router.post('/api/auth', (req, res) => {
+  const { passkey } = req.body;
+  const stored = getPasskeyHash();
+  if (!stored) return res.json({ ok: true });
+  if (!passkey || hashPasskey(passkey) !== stored) {
+    return res.status(401).json({ error: 'Invalid passkey' });
+  }
+  res.json({ ok: true });
+});
+
+// Auth middleware — protect all /api/* routes below
+router.use('/api', (req, res, next) => {
+  if (req.path === '/auth') return next();
+  const stored = getPasskeyHash();
+  if (!stored) return next();
+  const passkey = req.headers['x-passkey'];
+  if (!passkey || hashPasskey(passkey) !== stored) {
+    return res.status(401).json({ error: 'Unauthorized' });
+  }
+  next();
+});
+
 // ---------------------------------------------------------------------------
 // Utility functions (self-contained, no external imports)
 // ---------------------------------------------------------------------------
@@ -405,7 +446,8 @@ router.get('/api/models/:name', (req, res) => {
 router.get('/api/models/:name/data', async (req, res) => {
   try {
     const name = req.params.name;
-    const limit = Math.min(parseInt(req.query.limit) || 50, 500);
+    const rawLimit = parseInt(req.query.limit);
+    const limit = rawLimit === 0 ? 0 : Math.min(rawLimit || 50, 500);
     const skip = parseInt(req.query.skip) || 0;
     const pascalName = toPascalCase(name);
 
@@ -426,7 +468,9 @@ router.get('/api/models/:name/data', async (req, res) => {
 
     const collection = mongoose.connection.db.collection(name + 's');
     const total = await collection.countDocuments();
-    const docs = await collection.find({}).skip(skip).limit(limit).toArray();
+    const query = collection.find({}).skip(skip);
+    if (limit > 0) query.limit(limit);
+    const docs = await query.toArray();
 
     res.json({ docs, total, limit, skip });
   } catch (err) {
@@ -729,9 +773,9 @@ router.post('/api/routes/:name/add-method', async (req, res) => {
       packagesToInstall.push('jsonwebtoken');
 
       if (hasPassword) {
-        handlers += `\n// Login\nrouter.post('/', async (req, res) => {\n  try {\n    const { ${findField}, ${passwordField} } = req.body;\n    const ${modelName} = await ${pascalModel}.findOne({ ${findField} });\n    if (!${modelName}) return res.status(404).json({ message: '${pascalModel} not found' });\n\n    const isMatch = await bcrypt.compare(${passwordField}, ${modelName}.${passwordField});\n    if (!isMatch) return res.status(400).json({ message: 'Invalid credentials' });\n\n    const token = jwt.sign({ id: ${modelName}._id }, process.env.JWT_SECRET, { expiresIn: '7d' });\n    res.json({ token, ${modelName}: { id: ${modelName}._id, ${findField}: ${modelName}.${findField} } });\n  } catch (err) {\n    res.status(500).json({ message: err.message });\n  }\n});\n`;
+        handlers += `\n// Login\nrouter.post('/', async (req, res) => {\n  try {\n    const { ${findField}, ${passwordField} } = req.body;\n    const ${modelName} = await ${pascalModel}.findOne({ ${findField} });\n    if (!${modelName}) return res.status(401).json({ message: 'Invalid credentials' });\n\n    const isMatch = await bcrypt.compare(${passwordField}, ${modelName}.${passwordField});\n    if (!isMatch) return res.status(401).json({ message: 'Invalid credentials' });\n\n    const token = jwt.sign({ id: ${modelName}._id }, process.env.JWT_SECRET, { expiresIn: '7d' });\n    res.json({ token, ${modelName}: { id: ${modelName}._id, ${findField}: ${modelName}.${findField} } });\n  } catch (err) {\n    res.status(500).json({ message: err.message });\n  }\n});\n`;
       } else {
-        handlers += `\n// Login\nrouter.post('/', async (req, res) => {\n  try {\n    const { ${findField} } = req.body;\n    const ${modelName} = await ${pascalModel}.findOne({ ${findField} });\n    if (!${modelName}) return res.status(404).json({ message: '${pascalModel} not found' });\n\n    const token = jwt.sign({ id: ${modelName}._id }, process.env.JWT_SECRET, { expiresIn: '7d' });\n    res.json({ token, ${modelName}: { id: ${modelName}._id, ${findField}: ${modelName}.${findField} } });\n  } catch (err) {\n    res.status(500).json({ message: err.message });\n  }\n});\n`;
+        handlers += `\n// Login\nrouter.post('/', async (req, res) => {\n  try {\n    const { ${findField} } = req.body;\n    const ${modelName} = await ${pascalModel}.findOne({ ${findField} });\n    if (!${modelName}) return res.status(401).json({ message: 'Invalid credentials' });\n\n    const token = jwt.sign({ id: ${modelName}._id }, process.env.JWT_SECRET, { expiresIn: '7d' });\n    res.json({ token, ${modelName}: { id: ${modelName}._id, ${findField}: ${modelName}.${findField} } });\n  } catch (err) {\n    res.status(500).json({ message: err.message });\n  }\n});\n`;
       }
 
       // Ensure JWT_SECRET
@@ -1028,16 +1072,27 @@ function addImportToIndex(importLine) {
 function insertBeforeListen(codeBlock) {
   let content = readIndexFile();
   const listenRegex = /(app|server)\.listen\(port/m;
-  const match = content.match(listenRegex);
+  let match = content.match(listenRegex);
+  if (!match) {
+    // Match the startServer() call, not the function declaration
+    match = content.match(/^startServer\(/m);
+  }
   if (match) {
-    content = content.slice(0, match.index) + codeBlock.trim() + '\n\n' + content.slice(match.index);
+    content = content.slice(0, match.index) + codeBlock.trim() + '\n' + content.slice(match.index);
   }
   writeIndexFile(content);
 }
 
 function replaceAppListen(newBlock) {
   let content = readIndexFile();
-  content = content.replace(/app\.listen\(port[\s\S]*?\}\);?\n?/m, newBlock.trim() + '\n');
+  if (content.includes('startServer(')) {
+    content = content.replace(/const listener = app\.listen\(tryPort\)/, 'const listener = server.listen(tryPort)');
+    if (!content.includes('server.listen(tryPort)')) {
+      content = content.replace(/app\.listen\(tryPort\)/, 'server.listen(tryPort)');
+    }
+  } else {
+    content = content.replace(/app\.listen\(port[\s\S]*?\}\);?\n?/m, newBlock.trim() + '\n');
+  }
   writeIndexFile(content);
 }
 
@@ -1125,8 +1180,8 @@ router.get('/api/status', (req, res) => {
     const mongoConfigured = indexContent.includes("import connectDB") || indexContent.includes("connectDB");
     const routesDirExists = fs.existsSync(path.join(process.cwd(), 'src', 'routes'));
     const authMiddlewareExists = fs.existsSync(path.join(process.cwd(), 'src', 'middleware', 'auth.js'));
-    const socketConfigured = indexContent.includes('socket.io') || indexContent.includes('Server(server');
-    const websocketConfigured = indexContent.includes('WebSocketServer') || indexContent.includes("from 'ws'");
+    const socketConfigured = indexContent.includes('setupSocketIO') || indexContent.includes('socket.io') || indexContent.includes('Server(server');
+    const websocketConfigured = indexContent.includes('setupWebSocket') || indexContent.includes('WebSocketServer') || indexContent.includes("from 'ws'");
     const serialportConfigured = indexContent.includes('SerialPort') || indexContent.includes("from 'serialport'");
 
     res.json({
@@ -1719,154 +1774,242 @@ export default router;
 });
 
 // ---------------------------------------------------------------------------
-// POST /api/add-socket
+// POST /api/add-socket — create src/services/socket.js
 // ---------------------------------------------------------------------------
 router.post('/api/add-socket', async (req, res) => {
   try {
     const { corsOrigins } = req.body;
 
-    // Remove existing WebSocket code if present
-    if (readIndexFile().includes('WebSocketServer')) {
-      removeWebSocketCode();
-      try { await execAsync('npm uninstall ws', { cwd: process.cwd() }); } catch {}
-    }
+    // Install packages first
+    const currentContent = readIndexFile();
+    const hasWebSocket = currentContent.includes('setupWebSocket') || currentContent.includes('WebSocketServer');
 
-    // Install FIRST before modifying index.js
-    await execAsync('npm install socket.io', { cwd: process.cwd() });
+    if (hasWebSocket) {
+      try { await execAsync('npm uninstall ws && npm install socket.io', { cwd: process.cwd() }); } catch {
+        try { await execAsync('npm install socket.io', { cwd: process.cwd() }); } catch {}
+      }
+    } else {
+      await execAsync('npm install socket.io', { cwd: process.cwd() });
+    }
 
-    // Add imports to index.js
-    addImportToIndex('import { Server } from "socket.io";');
-    addImportToIndex('import http from "http";');
+    // Send response before modifying files
+    res.json({ message: 'Socket.IO setup complete.', files: ['src/services/socket.js', 'index.js'] });
 
     // Build cors origin value
     let originValue;
-    if (corsOrigins === '*') {
-      originValue = '"*"';
-    } else {
-      const origins = corsOrigins.split(',').map(s => s.trim());
-      originValue = JSON.stringify(origins);
-    }
+    if (corsOrigins === '*') originValue = '"*"';
+    else originValue = JSON.stringify(corsOrigins.split(',').map(s => s.trim()));
 
-    // Insert server + io setup before routes
-    const socketCode = `const server = http.createServer(app);
-const io = new Server(server, {
-  cors: {
-    origin: ${originValue},
-    methods: ["GET", "POST"]
-  }
-});
+    // Create src/services/socket.js
+    const servicesDir = path.join(process.cwd(), 'src', 'services');
+    if (!fs.existsSync(servicesDir)) fs.mkdirSync(servicesDir, { recursive: true });
 
-io.on("connection", (socket) => {
-  console.log("A user connected");
-  socket.on("disconnect", () => {
-    console.log("User disconnected");
-  });
-});
+    const socketFile = `import { Server } from "socket.io";
+import http from "http";
 
-app.use((req, res, next) => {
-  req.io = io;
-  next();
-});`;
+export function setupSocketIO(app) {
+  const server = http.createServer(app);
 
-    // Send response BEFORE modifying index.js (nodemon restart kills connection)
-    res.json({
-      message: 'Socket.IO setup complete.',
-      files: ['index.js']
+  const io = new Server(server, {
+    cors: {
+      origin: ${originValue},
+      methods: ["GET", "POST"],
+    },
+  });
+
+  io.on("connection", (socket) => {
+    console.log("A user connected");
+    socket.on("disconnect", () => {
+      console.log("User disconnected");
     });
+  });
 
-    let indexContent = readIndexFile();
-    if (!indexContent.includes('new Server(server')) {
-      insertBeforeListen(socketCode);
+  // Make io accessible in routes via req.io
+  app.use((req, res, next) => {
+    req.io = io;
+    next();
+  });
 
-      // Replace app.listen with server.listen
-      indexContent = readIndexFile();
-      if (indexContent.includes('app.listen(port')) {
-        const serverListenBlock = `server.listen(port, () => {
-  console.log(\`Server is running on port \${port}\`);
-});`;
-        replaceAppListen(serverListenBlock);
-      }
-    }
+  return { server, io };
+}
+`;
+
+    fs.writeFileSync(path.join(servicesDir, 'socket.js'), socketFile, 'utf8');
+
+    // Remove old WebSocket service file if present
+    const wsFile = path.join(servicesDir, 'websocket.js');
+    if (fs.existsSync(wsFile)) fs.unlinkSync(wsFile);
+
+    // Update index.js — clean approach
+    let content = readIndexFile();
+
+    // Remove old inline socket.io/websocket code
+    content = content.replace(/import\s*\{\s*Server\s*\}\s*from\s*["']socket\.io["'];\s*\n?/g, '');
+    content = content.replace(/import\s*\{\s*WebSocketServer\s*\}\s*from\s*['"]ws['"];\s*\n?/g, '');
+    content = content.replace(/import\s+http\s+from\s*["']http["'];\s*\n?/g, '');
+    content = content.replace(/const\s+server\s*=\s*http\.createServer\(app\);\s*\n?/g, '');
+    content = content.replace(/const\s+io\s*=\s*new\s+Server\(server[\s\S]*?\n\}\);\s*\n?/g, '');
+    content = content.replace(/io\.on\(["']connection["'][\s\S]*?\n\}\);\s*\n?/g, '');
+    content = content.replace(/app\.use\(\(req,\s*res,\s*next\)\s*=>\s*\{\s*\n?\s*req\.io\s*=\s*io;\s*\n?\s*next\(\);\s*\n?\s*\}\);\s*\n?/g, '');
+    content = content.replace(/const\s+wss\s*=\s*new\s+WebSocketServer\(\{[\s\S]*?\n?\}\);\s*\n?/g, '');
+    content = content.replace(/wss\.on\(['"]connection['"][\s\S]*?\n\}\);\s*\n?/g, '');
+    content = content.replace(/console\.log\(['"]WebSocket server running on port.*?['"]?\);\s*\n?/g, '');
+    // Remove old import lines for services
+    content = content.replace(/import\s*\{\s*setupSocketIO\s*\}\s*from\s*['"]\.\/src\/services\/socket\.js['"];\s*\n?/g, '');
+    content = content.replace(/import\s*\{\s*setupWebSocket\s*\}\s*from\s*['"]\.\/src\/services\/websocket\.js['"];\s*\n?/g, '');
+    content = content.replace(/const\s*\{\s*server[^}]*\}\s*=\s*setupSocketIO\(app\);\s*\n?/g, '');
+    content = content.replace(/const\s*\{\s*server[^}]*\}\s*=\s*setupWebSocket\(app\);\s*\n?/g, '');
+    content = content.replace(/setupWebSocket\(app[^)]*\);\s*\n?/g, '');
+
+    // Add import for socket service
+    const lastImport = content.lastIndexOf('import ');
+    const lineEnd = content.indexOf('\n', lastImport);
+    content = content.slice(0, lineEnd + 1) + 'import { setupSocketIO } from "./src/services/socket.js";\n' + content.slice(lineEnd + 1);
+
+    // Add setup call before listen
+    const listenIdx = content.search(/\/\/ ── Start Server|async function startServer|function startServer/);
+    if (listenIdx !== -1) {
+      content = content.slice(0, listenIdx) + 'const { server } = setupSocketIO(app);\n\n' + content.slice(listenIdx);
+    }
+
+    // Replace app.listen with server.listen in startServer
+    content = content.replace('const listener = app.listen(tryPort)', 'const listener = server.listen(tryPort)');
+    // Also handle direct app.listen
+    if (content.includes('app.listen(port') && !content.includes('startServer')) {
+      content = content.replace(/app\.listen\(port[\s\S]*?\}\);?\n?/m, 'server.listen(port, () => {\n  console.log(`Server is running on port ${port}`);\n});\n');
+    }
+
+    // Revert server.listen back to app.listen for old-style
+    content = content.replace('server.listen(port', 'server.listen(port');
+
+    content = content.replace(/\n{3,}/g, '\n\n');
+    writeIndexFile(content);
   } catch (err) {
     if (!res.headersSent) res.status(500).json({ error: err.message });
   }
 });
 
 // ---------------------------------------------------------------------------
-// POST /api/add-websocket
+// POST /api/add-websocket — create src/services/websocket.js
 // ---------------------------------------------------------------------------
 router.post('/api/add-websocket', async (req, res) => {
   try {
     const { samePort, wsPort } = req.body;
 
-    // Remove existing Socket.IO code if present
-    if (readIndexFile().includes('socket.io') || readIndexFile().includes('new Server(server')) {
-      removeSocketIOCode();
-      try { await execAsync('npm uninstall socket.io', { cwd: process.cwd() }); } catch {}
-    }
+    // Install packages first
+    const currentContent = readIndexFile();
+    const hasSocketIO = currentContent.includes('setupSocketIO') || currentContent.includes('socket.io');
 
-    // Install FIRST before modifying index.js
-    await execAsync('npm install ws', { cwd: process.cwd() });
+    if (hasSocketIO) {
+      try { await execAsync('npm uninstall socket.io && npm install ws', { cwd: process.cwd() }); } catch {
+        try { await execAsync('npm install ws', { cwd: process.cwd() }); } catch {}
+      }
+    } else {
+      await execAsync('npm install ws', { cwd: process.cwd() });
+    }
 
-    // Send response BEFORE modifying index.js (nodemon restart kills connection)
-    res.json({
-      message: 'WebSocket setup complete.',
-      files: ['index.js']
-    });
+    // Send response before modifying files
+    res.json({ message: 'WebSocket setup complete.', files: ['src/services/websocket.js', 'index.js'] });
 
-    // Add import
-    addImportToIndex("import { WebSocketServer } from 'ws';");
+    // Create src/services/websocket.js
+    const servicesDir = path.join(process.cwd(), 'src', 'services');
+    if (!fs.existsSync(servicesDir)) fs.mkdirSync(servicesDir, { recursive: true });
 
+    let wsFileContent;
     if (samePort) {
-      // Also need http
-      addImportToIndex("import http from 'http';");
+      wsFileContent = `import { WebSocketServer } from "ws";
+import http from "http";
 
-      const wsCode = `const server = http.createServer(app);
-const wss = new WebSocketServer({ server });
+export function setupWebSocket(app) {
+  const server = http.createServer(app);
+  const wss = new WebSocketServer({ server });
 
-wss.on('connection', (ws) => {
-  console.log('WebSocket client connected');
-  ws.on('message', (message) => {
-    console.log('Received:', message.toString());
-  });
-  ws.on('close', () => {
-    console.log('WebSocket client disconnected');
+  wss.on("connection", (ws) => {
+    console.log("WebSocket client connected");
+    ws.on("message", (message) => {
+      console.log("Received:", message.toString());
+    });
+    ws.on("close", () => {
+      console.log("WebSocket client disconnected");
+    });
   });
-});`;
 
-      if (!readIndexFile().includes('new WebSocketServer')) {
-        insertBeforeListen(wsCode);
-
-        // Replace app.listen with server.listen
-        let currentContent = readIndexFile();
-        if (currentContent.includes('app.listen(port')) {
-          const serverListenBlock = `server.listen(port, () => {
-  console.log(\`Server is running on port \${port}\`);
-});`;
-          replaceAppListen(serverListenBlock);
-        }
-      }
+  return { server, wss };
+}
+`;
     } else {
-      // Separate port
-      const port = wsPort || 8080;
-      const wsCode = `const wss = new WebSocketServer({ port: ${port} });
-
-wss.on('connection', (ws) => {
-  console.log('WebSocket client connected');
-  ws.on('message', (message) => {
-    console.log('Received:', message.toString());
-  });
-  ws.on('close', () => {
-    console.log('WebSocket client disconnected');
+      const p = wsPort || 8080;
+      wsFileContent = `import { WebSocketServer } from "ws";
+
+export function setupWebSocket() {
+  const wss = new WebSocketServer({ port: ${p} });
+
+  wss.on("connection", (ws) => {
+    console.log("WebSocket client connected");
+    ws.on("message", (message) => {
+      console.log("Received:", message.toString());
+    });
+    ws.on("close", () => {
+      console.log("WebSocket client disconnected");
+    });
   });
-});
 
-console.log('WebSocket server running on port ${port}');`;
+  console.log("WebSocket server running on port ${p}");
+  return { wss };
+}
+`;
+    }
+
+    fs.writeFileSync(path.join(servicesDir, 'websocket.js'), wsFileContent, 'utf8');
 
-      if (!readIndexFile().includes('new WebSocketServer')) {
-        insertBeforeListen(wsCode);
+    // Remove old Socket.IO service file if present
+    const sioFile = path.join(servicesDir, 'socket.js');
+    if (fs.existsSync(sioFile)) fs.unlinkSync(sioFile);
+
+    // Update index.js — clean approach
+    let content = readIndexFile();
+
+    // Remove old inline socket.io/websocket code
+    content = content.replace(/import\s*\{\s*Server\s*\}\s*from\s*["']socket\.io["'];\s*\n?/g, '');
+    content = content.replace(/import\s*\{\s*WebSocketServer\s*\}\s*from\s*['"]ws['"];\s*\n?/g, '');
+    content = content.replace(/import\s+http\s+from\s*["']http["'];\s*\n?/g, '');
+    content = content.replace(/const\s+server\s*=\s*http\.createServer\(app\);\s*\n?/g, '');
+    content = content.replace(/const\s+io\s*=\s*new\s+Server\(server[\s\S]*?\n\}\);\s*\n?/g, '');
+    content = content.replace(/io\.on\(["']connection["'][\s\S]*?\n\}\);\s*\n?/g, '');
+    content = content.replace(/app\.use\(\(req,\s*res,\s*next\)\s*=>\s*\{\s*\n?\s*req\.io\s*=\s*io;\s*\n?\s*next\(\);\s*\n?\s*\}\);\s*\n?/g, '');
+    content = content.replace(/const\s+wss\s*=\s*new\s+WebSocketServer\(\{[\s\S]*?\n?\}\);\s*\n?/g, '');
+    content = content.replace(/wss\.on\(['"]connection['"][\s\S]*?\n\}\);\s*\n?/g, '');
+    content = content.replace(/console\.log\(['"]WebSocket server running on port.*?['"]?\);\s*\n?/g, '');
+    // Remove old service imports
+    content = content.replace(/import\s*\{\s*setupSocketIO\s*\}\s*from\s*['"]\.\/src\/services\/socket\.js['"];\s*\n?/g, '');
+    content = content.replace(/import\s*\{\s*setupWebSocket\s*\}\s*from\s*['"]\.\/src\/services\/websocket\.js['"];\s*\n?/g, '');
+    content = content.replace(/const\s*\{\s*server[^}]*\}\s*=\s*setupSocketIO\(app\);\s*\n?/g, '');
+    content = content.replace(/const\s*\{\s*server[^}]*\}\s*=\s*setupWebSocket\(app\);\s*\n?/g, '');
+    content = content.replace(/setupWebSocket\(app[^)]*\);\s*\n?/g, '');
+    content = content.replace(/setupWebSocket\(\);\s*\n?/g, '');
+
+    // Add import for websocket service
+    const lastImport = content.lastIndexOf('import ');
+    const lineEnd = content.indexOf('\n', lastImport);
+    content = content.slice(0, lineEnd + 1) + 'import { setupWebSocket } from "./src/services/websocket.js";\n' + content.slice(lineEnd + 1);
+
+    // Add setup call before listen
+    const listenIdx = content.search(/\/\/ ── Start Server|async function startServer|function startServer/);
+    if (listenIdx !== -1) {
+      if (samePort) {
+        content = content.slice(0, listenIdx) + 'const { server } = setupWebSocket(app);\n\n' + content.slice(listenIdx);
+        // Replace app.listen with server.listen
+        content = content.replace('const listener = app.listen(tryPort)', 'const listener = server.listen(tryPort)');
+        if (content.includes('app.listen(port') && !content.includes('startServer')) {
+          content = content.replace(/app\.listen\(port[\s\S]*?\}\);?\n?/m, 'server.listen(port, () => {\n  console.log(`Server is running on port ${port}`);\n});\n');
+        }
+      } else {
+        content = content.slice(0, listenIdx) + 'setupWebSocket();\n\n' + content.slice(listenIdx);
       }
     }
+
+    content = content.replace(/\n{3,}/g, '\n\n');
+    writeIndexFile(content);
   } catch (err) {
     if (!res.headersSent) res.status(500).json({ error: err.message });
   }
@@ -2266,6 +2409,8 @@ router.get('/shared/:id', (req, res) => {
     const filePath = path.join(sharedDir, req.params.id + '.json');
     if (!fs.existsSync(filePath)) return res.status(404).send('Collection not found');
     const data = JSON.parse(fs.readFileSync(filePath, 'utf8'));
+    if (!data.tests) data.tests = [];
+    if (!data.responses) data.responses = {};
     const rawAppName = data.appName || 'My App';
     // Convert kebab-case/snake_case to Title Case: "test-app" → "Test App"
     const appName = rawAppName.replace(/[-_]/g, ' ').replace(/\b\w/g, c => c.toUpperCase());