@assistkick/create 1.0.0

package/dist/bin/create.d.ts

@@ -0,0 +1,2 @@
+#!/usr/bin/env node
+export {};

package/dist/bin/create.js

@@ -0,0 +1,25 @@
+#!/usr/bin/env node
+import { dirname, join } from 'node:path';
+import { fileURLToPath } from 'node:url';
+import { existsSync } from 'node:fs';
+import { Scaffolder } from '../src/scaffolder.js';
+const __filename = fileURLToPath(import.meta.url);
+const __dirname = dirname(__filename);
+// Resolve templates directory:
+// - Compiled (dist/bin/create.js): go up 2 levels to package root, then templates/
+// - Dev via tsx (bin/create.ts): go up 1 level to package root, then templates/
+const isCompiled = __dirname.includes('/dist/') || __dirname.includes('\\dist\\');
+const packageRoot = isCompiled ? join(__dirname, '..', '..') : join(__dirname, '..');
+const templatesDir = join(packageRoot, 'templates');
+if (!existsSync(templatesDir)) {
+    console.error('Error: templates directory not found at', templatesDir);
+    console.error('Run `pnpm prepare_templates` from the create/ package directory first.');
+    process.exit(1);
+}
+const targetDir = process.cwd();
+const scaffolder = new Scaffolder(targetDir, templatesDir);
+scaffolder.run().catch((err) => {
+    console.error('Error:', err.message);
+    process.exit(1);
+});
+//# sourceMappingURL=create.js.map

package/dist/bin/create.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"create.js","sourceRoot":"","sources":["../../bin/create.ts"],"names":[],"mappings":";AACA,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAC1C,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AACzC,OAAO,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AACrC,OAAO,EAAE,UAAU,EAAE,MAAM,sBAAsB,CAAC;AAElD,MAAM,UAAU,GAAG,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AAClD,MAAM,SAAS,GAAG,OAAO,CAAC,UAAU,CAAC,CAAC;AAEtC,+BAA+B;AAC/B,mFAAmF;AACnF,gFAAgF;AAChF,MAAM,UAAU,GAAG,SAAS,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,SAAS,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC;AAClF,MAAM,WAAW,GAAG,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;AACrF,MAAM,YAAY,GAAG,IAAI,CAAC,WAAW,EAAE,WAAW,CAAC,CAAC;AAEpD,IAAI,CAAC,UAAU,CAAC,YAAY,CAAC,EAAE,CAAC;IAC9B,OAAO,CAAC,KAAK,CAAC,yCAAyC,EAAE,YAAY,CAAC,CAAC;IACvE,OAAO,CAAC,KAAK,CAAC,wEAAwE,CAAC,CAAC;IACxF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC;AAED,MAAM,SAAS,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC;AAEhC,MAAM,UAAU,GAAG,IAAI,UAAU,CAAC,SAAS,EAAE,YAAY,CAAC,CAAC;AAC3D,UAAU,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC,CAAC,GAAU,EAAE,EAAE;IACpC,OAAO,CAAC,KAAK,CAAC,QAAQ,EAAE,GAAG,CAAC,OAAO,CAAC,CAAC;IACrC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC,CAAC,CAAC"}

package/dist/src/scaffolder.d.ts

@@ -0,0 +1,22 @@
+type DbConfig = {
+    type: 'local';
+} | {
+    type: 'turso';
+    url: string;
+    authToken: string;
+};
+export type PromptFn = (question: string) => Promise<string>;
+export declare class Scaffolder {
+    private readonly targetDir;
+    private readonly templatesDir;
+    private readonly prompt;
+    constructor(targetDir: string, templatesDir: string, prompt?: PromptFn);
+    run: () => Promise<void>;
+    private checkPnpm;
+    private promptDbConfig;
+    private scaffoldProductSystem;
+    private scaffoldSkills;
+    skillHasModifications: (sourceDir: string, targetDir: string) => boolean;
+    generateEnv: (productSystemDir: string, dbConfig: DbConfig) => void;
+}
+export {};

package/dist/src/scaffolder.js

@@ -0,0 +1,120 @@
+import { cpSync, existsSync, mkdirSync, readdirSync, readFileSync, statSync, writeFileSync, } from 'node:fs';
+import { join } from 'node:path';
+import { createInterface } from 'node:readline';
+import { execSync } from 'node:child_process';
+const createReadlinePrompt = () => {
+    const rl = createInterface({ input: process.stdin, output: process.stdout });
+    return (question) => new Promise(resolve => rl.question(question, answer => resolve(answer)));
+};
+export class Scaffolder {
+    targetDir;
+    templatesDir;
+    prompt;
+    constructor(targetDir, templatesDir, prompt) {
+        this.targetDir = targetDir;
+        this.templatesDir = templatesDir;
+        this.prompt = prompt ?? createReadlinePrompt();
+    }
+    run = async () => {
+        this.checkPnpm();
+        const productSystemTarget = join(this.targetDir, 'product-system');
+        const skillsTarget = join(this.targetDir, '.claude', 'skills');
+        const isRerun = existsSync(productSystemTarget);
+        let dbConfig = null;
+        if (isRerun) {
+            console.log('product-system/ already exists. Updating code, preserving data/ and .env...');
+        }
+        else {
+            dbConfig = await this.promptDbConfig();
+        }
+        this.scaffoldProductSystem(productSystemTarget);
+        await this.scaffoldSkills(skillsTarget, isRerun);
+        if (!isRerun && dbConfig) {
+            this.generateEnv(productSystemTarget, dbConfig);
+        }
+        console.log('\nRunning pnpm install...');
+        execSync('pnpm install', { cwd: productSystemTarget, stdio: 'inherit' });
+        console.log('\nRunning db:migrate...');
+        execSync('pnpm db:migrate', { cwd: productSystemTarget, stdio: 'inherit' });
+        console.log('\nproduct-system is ready!');
+        console.log('  cd product-system && pnpm dev');
+    };
+    checkPnpm = () => {
+        try {
+            execSync('pnpm --version', { stdio: 'pipe' });
+        }
+        catch {
+            console.error('Error: pnpm is required but not found.');
+            console.error('Install it from: https://pnpm.io/installation');
+            process.exit(1);
+        }
+    };
+    promptDbConfig = async () => {
+        console.log('\nDatabase configuration:');
+        console.log('  1. Local SQLite (default — zero config, start immediately)');
+        console.log('  2. Turso cloud (cross-device sync, team collaboration)');
+        const choice = await this.prompt('\nSelect [1/2, default=1]: ');
+        if (choice.trim() === '2') {
+            const url = await this.prompt('TURSO_DATABASE_URL: ');
+            const authToken = await this.prompt('TURSO_AUTH_TOKEN: ');
+            return { type: 'turso', url: url.trim(), authToken: authToken.trim() };
+        }
+        return { type: 'local' };
+    };
+    scaffoldProductSystem = (targetDir) => {
+        const sourceDir = join(this.templatesDir, 'product-system');
+        mkdirSync(targetDir, { recursive: true });
+        cpSync(sourceDir, targetDir, {
+            recursive: true,
+            force: true,
+            filter: (src) => {
+                const base = src.split('/').pop() ?? '';
+                return base !== 'node_modules';
+            },
+        });
+        console.log('Scaffolded product-system/');
+    };
+    scaffoldSkills = async (targetDir, isRerun) => {
+        const sourceSkillsDir = join(this.templatesDir, 'skills');
+        if (!existsSync(sourceSkillsDir))
+            return;
+        mkdirSync(targetDir, { recursive: true });
+        const skillNames = readdirSync(sourceSkillsDir).filter(name => statSync(join(sourceSkillsDir, name)).isDirectory());
+        for (const skillName of skillNames) {
+            const sourceSkillDir = join(sourceSkillsDir, skillName);
+            const targetSkillDir = join(targetDir, skillName);
+            if (isRerun && existsSync(targetSkillDir)) {
+                const hasModifications = this.skillHasModifications(sourceSkillDir, targetSkillDir);
+                if (hasModifications) {
+                    const answer = await this.prompt(`Skill "${skillName}" has local modifications. Overwrite? [y/N]: `);
+                    if (answer.trim().toLowerCase() !== 'y') {
+                        console.log(`  Kept local: ${skillName}`);
+                        continue;
+                    }
+                }
+            }
+            mkdirSync(targetSkillDir, { recursive: true });
+            cpSync(sourceSkillDir, targetSkillDir, { recursive: true, force: true });
+            console.log(`  ${isRerun ? 'Updated' : 'Installed'}: ${skillName}`);
+        }
+    };
+    skillHasModifications = (sourceDir, targetDir) => {
+        const sourceFile = join(sourceDir, 'SKILL.md');
+        const targetFile = join(targetDir, 'SKILL.md');
+        if (!existsSync(targetFile) || !existsSync(sourceFile))
+            return false;
+        return readFileSync(sourceFile, 'utf-8') !== readFileSync(targetFile, 'utf-8');
+    };
+    generateEnv = (productSystemDir, dbConfig) => {
+        const lines = [];
+        if (dbConfig.type === 'local') {
+            lines.push('# Database — local SQLite', '# The database file is created automatically at data/local.db', '# To upgrade to Turso, uncomment and fill in the variables below:', '#TURSO_DATABASE_URL=libsql://your-db.turso.io', '#TURSO_AUTH_TOKEN=your-token', '');
+        }
+        else {
+            lines.push('# Database — Turso cloud', `TURSO_DATABASE_URL=${dbConfig.url}`, `TURSO_AUTH_TOKEN=${dbConfig.authToken}`, '');
+        }
+        writeFileSync(join(productSystemDir, '.env'), lines.join('\n'));
+        console.log('Generated .env');
+    };
+}
+//# sourceMappingURL=scaffolder.js.map

package/dist/src/scaffolder.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"scaffolder.js","sourceRoot":"","sources":["../../src/scaffolder.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,MAAM,EACN,UAAU,EACV,SAAS,EACT,WAAW,EACX,YAAY,EACZ,QAAQ,EACR,aAAa,GACd,MAAM,SAAS,CAAC;AACjB,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AAChD,OAAO,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAQ9C,MAAM,oBAAoB,GAAG,GAAa,EAAE;IAC1C,MAAM,EAAE,GAAG,eAAe,CAAC,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;IAC7E,OAAO,CAAC,QAAgB,EAAE,EAAE,CAC1B,IAAI,OAAO,CAAS,OAAO,CAAC,EAAE,CAAC,EAAE,CAAC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;AACrF,CAAC,CAAC;AAEF,MAAM,OAAO,UAAU;IACJ,SAAS,CAAS;IAClB,YAAY,CAAS;IACrB,MAAM,CAAW;IAElC,YAAY,SAAiB,EAAE,YAAoB,EAAE,MAAiB;QACpE,IAAI,CAAC,SAAS,GAAG,SAAS,CAAC;QAC3B,IAAI,CAAC,YAAY,GAAG,YAAY,CAAC;QACjC,IAAI,CAAC,MAAM,GAAG,MAAM,IAAI,oBAAoB,EAAE,CAAC;IACjD,CAAC;IAED,GAAG,GAAG,KAAK,IAAI,EAAE;QACf,IAAI,CAAC,SAAS,EAAE,CAAC;QAEjB,MAAM,mBAAmB,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,gBAAgB,CAAC,CAAC;QACnE,MAAM,YAAY,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,SAAS,EAAE,QAAQ,CAAC,CAAC;QAC/D,MAAM,OAAO,GAAG,UAAU,CAAC,mBAAmB,CAAC,CAAC;QAEhD,IAAI,QAAQ,GAAoB,IAAI,CAAC;QAErC,IAAI,OAAO,EAAE,CAAC;YACZ,OAAO,CAAC,GAAG,CAAC,6EAA6E,CAAC,CAAC;QAC7F,CAAC;aAAM,CAAC;YACN,QAAQ,GAAG,MAAM,IAAI,CAAC,cAAc,EAAE,CAAC;QACzC,CAAC;QAED,IAAI,CAAC,qBAAqB,CAAC,mBAAmB,CAAC,CAAC;QAChD,MAAM,IAAI,CAAC,cAAc,CAAC,YAAY,EAAE,OAAO,CAAC,CAAC;QAEjD,IAAI,CAAC,OAAO,IAAI,QAAQ,EAAE,CAAC;YACzB,IAAI,CAAC,WAAW,CAAC,mBAAmB,EAAE,QAAQ,CAAC,CAAC;QAClD,CAAC;QAED,OAAO,CAAC,GAAG,CAAC,2BAA2B,CAAC,CAAC;QACzC,QAAQ,CAAC,cAAc,EAAE,EAAE,GAAG,EAAE,mBAAmB,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC,CAAC;QAEzE,OAAO,CAAC,GAAG,CAAC,yBAAyB,CAAC,CAAC;QACvC,QAAQ,CAAC,iBAAiB,EAAE,EAAE,GAAG,EAAE,mBAAmB,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC,CAAC;QAE5E,OAAO,CAAC,GAAG,CAAC,4BAA4B,CAAC,CAAC;QAC1C,OAAO,CAAC,GAAG,CAAC,iCAAiC,CAAC,CAAC;IACjD,CAAC,CAAC;IAEM,SAAS,GAAG,GAAG,EAAE;QACvB,IAAI,CAAC;YACH,QAAQ,CAAC,gBAAgB,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC;QAChD,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,CAAC,KAAK,CAAC,wCAAwC,CAAC,CAAC;YACxD,OAAO,CAAC,KAAK,CAAC,+CAA+C,CAAC,CAAC;YAC/D,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;IACH,CAAC,CAAC;IAEM,cAAc,GAAG,KAAK,IAAuB,EAAE;QACrD,OAAO,CAAC,GAAG,CAAC,2BAA2B,CAAC,CAAC;QACzC,OAAO,CAAC,GAAG,CAAC,8DAA8D,CAAC,CAAC;QAC5E,OAAO,CAAC,GAAG,CAAC,0DAA0D,CAAC,CAAC;QACxE,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,6BAA6B,CAAC,CAAC;QAEhE,IAAI,MAAM,CAAC,IAAI,EAAE,KAAK,GAAG,EAAE,CAAC;YAC1B,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,sBAAsB,CAAC,CAAC;YACtD,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,oBAAoB,CAAC,CAAC;YAC1D,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,EAAE,GAAG,CAAC,IAAI,EAAE,EAAE,SAAS,EAAE,SAAS,CAAC,IAAI,EAAE,EAAE,CAAC;QACzE,CAAC;QAED,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC;IAC3B,CAAC,CAAC;IAEM,qBAAqB,GAAG,CAAC,SAAiB,EAAE,EAAE;QACpD,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,gBAAgB,CAAC,CAAC;QAC5D,SAAS,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAC1C,MAAM,CAAC,SAAS,EAAE,SAAS,EAAE;YAC3B,SAAS,EAAE,IAAI;YACf,KAAK,EAAE,IAAI;YACX,MAAM,EAAE,CAAC,GAAW,EAAE,EAAE;gBACtB,MAAM,IAAI,GAAG,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,IAAI,EAAE,CAAC;gBACxC,OAAO,IAAI,KAAK,cAAc,CAAC;YACjC,CAAC;SACF,CAAC,CAAC;QACH,OAAO,CAAC,GAAG,CAAC,4BAA4B,CAAC,CAAC;IAC5C,CAAC,CAAC;IAEM,cAAc,GAAG,KAAK,EAAE,SAAiB,EAAE,OAAgB,EAAE,EAAE;QACrE,MAAM,eAAe,GAAG,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,QAAQ,CAAC,CAAC;QAC1D,IAAI,CAAC,UAAU,CAAC,eAAe,CAAC;YAAE,OAAO;QAEzC,SAAS,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAE1C,MAAM,UAAU,GAAG,WAAW,CAAC,eAAe,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAC5D,QAAQ,CAAC,IAAI,CAAC,eAAe,EAAE,IAAI,CAAC,CAAC,CAAC,WAAW,EAAE,CACpD,CAAC;QAEF,KAAK,MAAM,SAAS,IAAI,UAAU,EAAE,CAAC;YACnC,MAAM,cAAc,GAAG,IAAI,CAAC,eAAe,EAAE,SAAS,CAAC,CAAC;YACxD,MAAM,cAAc,GAAG,IAAI,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC;YAElD,IAAI,OAAO,IAAI,UAAU,CAAC,cAAc,CAAC,EAAE,CAAC;gBAC1C,MAAM,gBAAgB,GAAG,IAAI,CAAC,qBAAqB,CAAC,cAAc,EAAE,cAAc,CAAC,CAAC;gBACpF,IAAI,gBAAgB,EAAE,CAAC;oBACrB,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,MAAM,CAC9B,UAAU,SAAS,+CAA+C,CACnE,CAAC;oBACF,IAAI,MAAM,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,KAAK,GAAG,EAAE,CAAC;wBACxC,OAAO,CAAC,GAAG,CAAC,iBAAiB,SAAS,EAAE,CAAC,CAAC;wBAC1C,SAAS;oBACX,CAAC;gBACH,CAAC;YACH,CAAC;YAED,SAAS,CAAC,cAAc,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;YAC/C,MAAM,CAAC,cAAc,EAAE,cAAc,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;YACzE,OAAO,CAAC,GAAG,CAAC,KAAK,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,WAAW,KAAK,SAAS,EAAE,CAAC,CAAC;QACtE,CAAC;IACH,CAAC,CAAC;IAEF,qBAAqB,GAAG,CAAC,SAAiB,EAAE,SAAiB,EAAW,EAAE;QACxE,MAAM,UAAU,GAAG,IAAI,CAAC,SAAS,EAAE,UAAU,CAAC,CAAC;QAC/C,MAAM,UAAU,GAAG,IAAI,CAAC,SAAS,EAAE,UAAU,CAAC,CAAC;QAC/C,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC;YAAE,OAAO,KAAK,CAAC;QACrE,OAAO,YAAY,CAAC,UAAU,EAAE,OAAO,CAAC,KAAK,YAAY,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC;IACjF,CAAC,CAAC;IAEF,WAAW,GAAG,CAAC,gBAAwB,EAAE,QAAkB,EAAE,EAAE;QAC7D,MAAM,KAAK,GAAa,EAAE,CAAC;QAE3B,IAAI,QAAQ,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;YAC9B,KAAK,CAAC,IAAI,CACR,2BAA2B,EAC3B,+DAA+D,EAC/D,mEAAmE,EACnE,+CAA+C,EAC/C,8BAA8B,EAC9B,EAAE,CACH,CAAC;QACJ,CAAC;aAAM,CAAC;YACN,KAAK,CAAC,IAAI,CACR,0BAA0B,EAC1B,sBAAsB,QAAQ,CAAC,GAAG,EAAE,EACpC,oBAAoB,QAAQ,CAAC,SAAS,EAAE,EACxC,EAAE,CACH,CAAC;QACJ,CAAC;QAED,aAAa,CAAC,IAAI,CAAC,gBAAgB,EAAE,MAAM,CAAC,EAAE,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;QAChE,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC;IAChC,CAAC,CAAC;CACH"}

package/package.json

@@ -0,0 +1,24 @@
+{
+  "name": "@assistkick/create",
+  "version": "1.0.0",
+  "description": "Scaffold the product-system into any project",
+  "type": "module",
+  "bin": {
+    "@assistkick/create": "./dist/bin/create.js"
+  },
+  "files": [
+    "dist",
+    "templates"
+  ],
+  "scripts": {
+    "build": "tsc",
+    "prepare_templates": "bash scripts/prepare_templates.sh",
+    "prepublishOnly": "bash scripts/prepare_templates.sh && pnpm build",
+    "test": "tsx --test tests/**/*.test.ts"
+  },
+  "devDependencies": {
+    "@types/node": "^25.3.3",
+    "tsx": "^4.21.0",
+    "typescript": "^5.9.3"
+  }
+}

package/templates/product-system/.env.example

@@ -0,0 +1,8 @@
+# Turso database credentials
+TURSO_DATABASE_URL=libsql://your-database.turso.io
+TURSO_AUTH_TOKEN=your-auth-token
+JWT_SECRET=your-jwt-secret
+NODE_ENV=development
+RESEND_API_KEY=your-resend-api-key
+APP_BASE_URL=http://localhost:3000
+EMAIL_FROM=noreply@yourdomain.com

package/templates/product-system/CLAUDE.md

@@ -0,0 +1,45 @@
+# Interview System
+
+AI requirements interview system that builds a specification knowledge graph through structured interviews.
+
+## Tech Stack
+
+- **Runtime:** Node.js with TypeScript (ESM)
+- **Package manager:** pnpm (monorepo with workspaces)
+- **Backend:** Express 5, tsx (dev/run), WebSockets (ws), node-pty
+- **Frontend:** React 19, Vite, React Router, D3, xterm.js
+- **Database:** Turso (libSQL), Drizzle ORM
+- **Auth:** jose (JWT), bcryptjs
+- **Email:** Resend
+
+## Project Structure
+
+```
+product-system/
+  packages/
+    backend/    — Express API server (@interview-system/backend)
+    frontend/   — React SPA (@interview-system/frontend)
+    shared/     — DB schema, migrations, shared types (@interview-system/shared)
+```
+
+## Commands
+
+- `pnpm dev` — run backend + frontend concurrently
+- `pnpm build` — build all packages
+- `pnpm test` — run tests
+
+## Database Migrations
+
+Schema lives in `packages/shared/db/schema.ts`. Drizzle config is in `packages/shared/drizzle.config.js`.
+
+To apply schema changes:
+
+1. Edit the schema in `packages/shared/db/schema.ts`
+2. Generate a migration: `pnpm db:generate`
+3. Apply the migration: `pnpm db:migrate`
+
+**Rules:**
+- Always use `pnpm db:generate` and `pnpm db:migrate` — never write SQL migration files by hand
+- Never write JS/TS scripts that execute raw SQL for migrations
+- Never use `--force` or `--push` with drizzle-kit
+- Let Drizzle manage the migration lifecycle entirely

package/templates/product-system/package.json

@@ -0,0 +1,32 @@
+{
+  "name": "interview-system",
+  "version": "1.0.0",
+  "description": "AI requirements interview system — builds a specification knowledge graph through structured interviews",
+  "private": true,
+  "type": "module",
+  "scripts": {
+    "dev": "concurrently -n backend,frontend -c blue,green \"pnpm --filter @interview-system/backend dev\" \"pnpm --filter @interview-system/frontend dev\"",
+    "build": "pnpm -r build",
+    "start": "tsx packages/backend/src/server.ts",
+    "test": "tsx --test tests/**/*.test.ts",
+    "clean": "pnpm -r clean",
+    "db:migrate": "pnpm --filter @interview-system/shared db:migrate",
+    "db:rollback": "pnpm --filter @interview-system/shared db:rollback",
+    "db:generate": "pnpm --filter @interview-system/shared db:generate"
+  },
+  "pnpm": {
+    "onlyBuiltDependencies": ["esbuild", "node-pty"]
+  },
+  "devDependencies": {
+    "@libsql/client": "^0.17.0",
+    "@types/bcryptjs": "^3.0.0",
+    "@types/node": "^25.3.3",
+    "bcryptjs": "^3.0.3",
+    "concurrently": "^9.1.2",
+    "drizzle-orm": "^0.45.1",
+    "gray-matter": "^4.0.3",
+    "jose": "^6.1.3",
+    "tsx": "^4.21.0",
+    "typescript": "^5.9.3"
+  }
+}

package/templates/product-system/packages/backend/package.json

@@ -0,0 +1,37 @@
+{
+  "name": "@interview-system/backend",
+  "version": "1.0.0",
+  "private": true,
+  "type": "module",
+  "scripts": {
+    "dev": "tsx watch src/server.ts --verbose",
+    "build": "echo 'Backend runs via tsx — no build step needed'",
+    "start": "tsx src/server.ts",
+    "clean": "echo 'No build artifacts'",
+    "postinstall": "chmod +x node_modules/node-pty/prebuilds/darwin-arm64/spawn-helper 2>/dev/null || true"
+  },
+  "dependencies": {
+    "@interview-system/shared": "workspace:*",
+    "bcryptjs": "^3.0.3",
+    "cookie-parser": "^1.4.7",
+    "cors": "^2.8.5",
+    "dotenv": "^17.3.1",
+    "drizzle-orm": "^0.45.1",
+    "express": "^5.1.0",
+    "gray-matter": "^4.0.3",
+    "jose": "^6.1.3",
+    "node-pty": "^1.1.0",
+    "resend": "^6.9.3",
+    "ws": "^8.19.0"
+  },
+  "devDependencies": {
+    "@types/bcryptjs": "^3.0.0",
+    "@types/cookie-parser": "^1.4.10",
+    "@types/cors": "^2.8.17",
+    "@types/express": "^5.0.0",
+    "@types/node": "^25.3.3",
+    "@types/ws": "^8.18.1",
+    "tsx": "^4.21.0",
+    "typescript": "^5.9.3"
+  }
+}

package/templates/product-system/packages/backend/src/middleware/auth_middleware.test.ts

@@ -0,0 +1,86 @@
+import { describe, it } from 'node:test';
+import assert from 'node:assert/strict';
+import { AuthMiddleware } from './auth_middleware.ts';
+import { AuthService } from '../services/auth_service.ts';
+
+const createAuthService = () => new AuthService({
+  jwtSecret: 'test-secret-at-least-32-chars-long!!',
+  isProduction: false,
+});
+
+const createMockRes = () => {
+  let statusCode = 200;
+  let body: any = null;
+  return {
+    status: (code: number) => {
+      statusCode = code;
+      return { json: (data: any) => { body = data; } };
+    },
+    json: (data: any) => { body = data; },
+    getStatus: () => statusCode,
+    getBody: () => body,
+  };
+};
+
+describe('AuthMiddleware', () => {
+  describe('requireAuth', () => {
+    it('calls next when a valid access token is present', async () => {
+      const authService = createAuthService();
+      const middleware = new AuthMiddleware({ authService });
+      const token = await authService.generateAccessToken('user-1', 'test@example.com', 'admin');
+
+      let nextCalled = false;
+      const req = { cookies: { access_token: token } } as any;
+      const res = createMockRes() as any;
+
+      await middleware.requireAuth(req, res, () => { nextCalled = true; });
+
+      assert.equal(nextCalled, true);
+      assert.deepEqual(req.user, { id: 'user-1', email: 'test@example.com', role: 'admin' });
+    });
+
+    it('returns 401 when no access token cookie is present', async () => {
+      const authService = createAuthService();
+      const middleware = new AuthMiddleware({ authService });
+
+      let nextCalled = false;
+      const req = { cookies: {} } as any;
+      const res = createMockRes() as any;
+
+      await middleware.requireAuth(req, res, () => { nextCalled = true; });
+
+      assert.equal(nextCalled, false);
+      assert.equal(res.getStatus(), 401);
+      assert.deepEqual(res.getBody(), { error: 'Not authenticated' });
+    });
+
+    it('returns 401 when access token is invalid', async () => {
+      const authService = createAuthService();
+      const middleware = new AuthMiddleware({ authService });
+
+      let nextCalled = false;
+      const req = { cookies: { access_token: 'invalid-token' } } as any;
+      const res = createMockRes() as any;
+
+      await middleware.requireAuth(req, res, () => { nextCalled = true; });
+
+      assert.equal(nextCalled, false);
+      assert.equal(res.getStatus(), 401);
+      assert.deepEqual(res.getBody(), { error: 'Invalid or expired token' });
+    });
+
+    it('returns 401 when cookies object is missing', async () => {
+      const authService = createAuthService();
+      const middleware = new AuthMiddleware({ authService });
+
+      let nextCalled = false;
+      const req = {} as any;
+      const res = createMockRes() as any;
+
+      await middleware.requireAuth(req, res, () => { nextCalled = true; });
+
+      assert.equal(nextCalled, false);
+      assert.equal(res.getStatus(), 401);
+    });
+  });
+});

package/templates/product-system/packages/backend/src/middleware/auth_middleware.ts

@@ -0,0 +1,35 @@
+/**
+ * Auth middleware — verifies JWT access token from HTTP-only cookie.
+ * Returns 401 for unauthenticated requests to protected API routes.
+ */
+
+import type { Request, Response, NextFunction } from 'express';
+import type { AuthService } from '../services/auth_service.js';
+
+interface AuthMiddlewareDeps {
+  authService: AuthService;
+}
+
+export class AuthMiddleware {
+  private readonly authService: AuthService;
+
+  constructor({ authService }: AuthMiddlewareDeps) {
+    this.authService = authService;
+  }
+
+  requireAuth = async (req: Request, res: Response, next: NextFunction): Promise<void> => {
+    const token = (req as any).cookies?.['access_token'];
+    if (!token) {
+      res.status(401).json({ error: 'Not authenticated' });
+      return;
+    }
+
+    try {
+      const payload = await this.authService.verifyToken(token);
+      (req as any).user = { id: payload.sub, email: payload.email, role: payload.role };
+      next();
+    } catch {
+      res.status(401).json({ error: 'Invalid or expired token' });
+    }
+  };
+}