@bardioc/create-bardioc-app 0.5.4 → 0.5.6

package/README.md

@@ -8,10 +8,10 @@ Scaffold a Vite app wired for `@bardioc/app-sdk`.
 
 ## Install
 
-Configure the `@bardioc` scoped registry and install the CLI globally:
+Install the CLI globally from the public npm registry:
 
 ```bash
-npm config set @bardioc:registry http://nexus.almato.com/repository/npm-group/ --location=user && npm install -g @bardioc/create-bardioc-app
+npm install -g @bardioc/create-bardioc-app
 ```
 
 If your default npm registry is not `https://registry.npmjs.org/`, set it in your user-level npm config before installing app dependencies.
@@ -72,9 +72,7 @@ Generated apps can run standalone with the `DEV_SECRET` dev-auth proxy.
 2. Fill in `VITE_APP_NAME`, `DEV_SECRET`, and `API_BASE_URL`
 3. Run `npm run dev`
 
-When running outside the host iframe, the Vite plugin proxies `/rest/*` to `API_BASE_URL` with the `X-Dev-Secret` header and `installDevBridge()` handles SDK messages.
-
-For public testing, run `npm run dev:live` and use the emitted tunnel URL as the app's live URL in the host App Store configuration.
+When running outside the host iframe, the SDK proxies `/rest/*` to `API_BASE_URL` with the `X-Dev-Secret` header and `installDevBridge()` handles SDK messages. Vite templates do this through the `bardiocDevAuth` plugin; the angular and nextjs templates run `scripts/dev-auth-proxy.mjs`, which `npm run dev` starts alongside their dev server.
 
 ## Options
 

package/bin/create.mjs

@@ -1,14 +1,12 @@
 #!/usr/bin/env node
+/* eslint-disable no-console */
 
-import { readFileSync } from 'node:fs';
 import { join, resolve } from 'node:path';
 import { fileURLToPath } from 'node:url';
 import { getDefaultTemplate, listTemplates, parseArgs, scaffoldApp } from '../src/scaffold.js';
 
 const __dirname = fileURLToPath(new URL('.', import.meta.url));
 const TEMPLATES_DIR = join(__dirname, '..', 'templates');
-const packageJsonPath = join(__dirname, '..', 'package.json');
-const packageJson = JSON.parse(readFileSync(packageJsonPath, 'utf-8'));
 
 const args = process.argv.slice(2);
 
@@ -66,7 +64,7 @@ if (!result.success) {
 
 console.log(`  Done! Next steps:\n`);
 console.log(`    cd ${name}`);
+console.log(`    cp .env.example .env`);
 console.log(`    npm install`);
 console.log(`    npm run dev\n`);
 console.log(`  Open http://localhost:${port} to see your app.`);
-console.log(`  Use "pnpm dev:live" for a public tunnel/live URL.\n`);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@bardioc/create-bardioc-app",
-  "version": "0.5.4",
+  "version": "0.5.6",
   "description": "Scaffold a Bardioc app with framework templates (vite, react, vue, angular, svelte, solid, preact, nextjs)",
   "license": "MIT",
   "private": false,
@@ -30,10 +30,10 @@
     "react"
   ],
   "devDependencies": {
-    "@vitest/coverage-v8": "4.1.5",
-    "@types/node": "^25.6.0",
-    "typescript": "^6.0.3",
-    "vitest": "4.1.5"
+    "@vitest/coverage-v8": "^4.1.8",
+    "@types/node": "^25.9.1",
+    "typescript": "6.0.3",
+    "vitest": "^4.1.8"
   },
   "scripts": {
     "check-types": "tsc --noEmit",

package/templates/_base/README.md

@@ -14,11 +14,25 @@ npm install
 
 ```bash
 npm run dev              # http://localhost:{{PORT}}
-npm run dev:live         # public tunnel (BARDIOC_TUNNEL=1)
 ```
 
-`npm run dev` runs plain Vite as a local preview shell — live SDK data comes only when the app is
-opened inside the host. See `.env.example` for the required variables.
+`npm run dev` starts the dev server as a local preview shell. Live SDK data comes when the app is
+opened inside the host, or standalone once `DEV_SECRET` and `API_BASE_URL` are set — the SDK then
+proxies `/rest/*` to the BFF (via the `bardiocDevAuth` Vite plugin, or `scripts/dev-auth-proxy.mjs`
+in the angular and nextjs templates, which `npm run dev` starts alongside the dev server). See
+`.env.example` for the required variables.
+
+## Lint & format
+
+```bash
+npm run check-types      # TypeScript
+npm run lint             # ESLint
+npm run format           # Prettier (format:check to verify only)
+```
+
+ESLint, Prettier and the `tsconfig.json` base all come from the shared `@bardioc/configs` presets
+(`eslint.config.mjs`, `prettier.config.mjs`), so an app lints exactly like the SDK does. The angular
+template is the exception — Angular 19 pins TypeScript 5.8, which the presets do not support yet.
 
 ## Develop against `@bardioc/*` source (optional)
 

package/templates/_base/scripts/stamp-manifest.mjs

@@ -14,4 +14,4 @@ manifest.version = version;
 manifest.description = base ? `${base} (v${version})` : `v${version}`;
 
 writeFileSync(url, `${JSON.stringify(manifest, null, 2)}\n`);
-console.log(`[stamp-manifest] ${version} → ${outDir}/app-manifest.json`);
+process.stdout.write(`[stamp-manifest] ${version} → ${outDir}/app-manifest.json\n`);

package/templates/_opt-link/scripts/link-source.mjs

@@ -29,7 +29,7 @@ if (argv[0] === '--remove') {
   const link = `${LINK_DIR}/${name}`;
   if (!exists(link)) fail(`No link at ${link}`);
   rmSync(link);
-  console.log(`✓ unlinked ${name}`);
+  process.stdout.write(`✓ unlinked ${name}\n`);
   syncCatalogs();
   process.exit(0);
 }
@@ -53,11 +53,11 @@ mkdirSync(LINK_DIR, { recursive: true });
 const link = `${LINK_DIR}/${name}`;
 if (exists(link)) rmSync(link);
 symlinkSync(abs, link, 'junction');
-console.log(`✓ linked ${name} → ${abs}`);
+process.stdout.write(`✓ linked ${name} → ${abs}\n`);
 
 syncCatalogs();
 
-console.log('Next: pnpm install');
+process.stdout.write('Next: pnpm install\n');
 
 // ── helpers ──────────────────────────────────────────────────────────
 
@@ -140,9 +140,11 @@ function replaceMarkerBlock(workspace, beginIdx, endIdx, marker) {
 
 function logSyncOutcome(sources) {
   if (sources.length === 1) {
-    console.log(`✓ synced catalogs from .linked/${sources[0].name} into ${WORKSPACE_FILE}`);
+    process.stdout.write(
+      `✓ synced catalogs from .linked/${sources[0].name} into ${WORKSPACE_FILE}\n`
+    );
   } else {
-    console.log(`✓ removed managed catalogs block from ${WORKSPACE_FILE}`);
+    process.stdout.write(`✓ removed managed catalogs block from ${WORKSPACE_FILE}\n`);
   }
 }
 

package/templates/angular/.env.example

@@ -1,7 +1,9 @@
+# Hosted app slug used by local runtime/dev-auth wiring.
 VITE_APP_NAME={{APP_NAME}}
 
-# Dev auth proxy secret for local standalone development.
+# Paste the dev secret from the BardiocOS AppStore after registering your app.
+# Used by the dev-auth proxy (scripts/dev-auth-proxy.mjs) to sign requests to the BFF.
 DEV_SECRET=
 
-# Base URL of the Bardioc API the dev auth proxy should forward to.
+# Base URL of the Bardioc BFF / backend-for-frontend (e.g. https://your-host).
 API_BASE_URL=

package/templates/angular/_gitignore

@@ -5,3 +5,4 @@ dist
 node_modules
 *.zip
 .linked/
+.DS_Store

package/templates/angular/package.json

@@ -6,9 +6,7 @@
     "sync:runtime-env": "node ./scripts/sync-runtime-env.mjs",
     "ng": "ng",
     "predev": "npm run sync:runtime-env",
-    "dev": "node ./scripts/dev-auth-proxy.mjs --app-port {{PORT}} & PROXY_PID=$!; ng serve --port {{PORT}}; EXIT_CODE=$?; kill $PROXY_PID; exit $EXIT_CODE",
-    "predev:live": "npm run sync:runtime-env",
-    "dev:live": "node ./scripts/dev-auth-proxy.mjs --app-port {{PORT}} & PROXY_PID=$!; BARDIOC_TUNNEL=1 ng serve --port {{PORT}}; EXIT_CODE=$?; kill $PROXY_PID; exit $EXIT_CODE",
+    "dev": "node ./scripts/dev-auth-proxy.mjs & PROXY_PID=$!; ng serve --port {{PORT}}; EXIT_CODE=$?; kill $PROXY_PID 2>/dev/null; exit $EXIT_CODE",
     "prebuild": "npm run sync:runtime-env",
     "build": "ng build && node scripts/stamp-manifest.mjs dist/{{APP_NAME}}/browser",
     "bundle": "ng build && node scripts/stamp-manifest.mjs dist/{{APP_NAME}}/browser && cd dist/{{APP_NAME}}/browser && zip -r ../../../{{APP_NAME}}.zip .",
@@ -30,7 +28,7 @@
     "@angular/platform-browser": "^19.2.12",
     "@angular/platform-browser-dynamic": "^19.2.12",
     "@angular/router": "^19.2.12",
-    "@bardioc/app-sdk": "latest",
+    "@bardioc/app-sdk": "^0.4.9",
     "rxjs": "~7.8.2",
     "tslib": "^2.8.1",
     "zone.js": "~0.15.1"

package/templates/angular/public/runtime-env.js

@@ -1 +1 @@
-window.__BARDIOC_RUNTIME_ENV__ = {};
+window.__BARDIOC_RUNTIME_ENV__ = {};

package/templates/angular/scripts/dev-auth-proxy.mjs

@@ -1,91 +1,17 @@
 #!/usr/bin/env node
 
-import { readFileSync } from 'node:fs';
-import { createServer } from 'node:http';
-import { dirname, join, resolve } from 'node:path';
+import { startDevAuthProxy } from '@bardioc/app-sdk/dev-proxy';
+import { dirname, resolve } from 'node:path';
 import { fileURLToPath } from 'node:url';
-import { createDevAuthProxyHandler } from '@bardioc/app-sdk/dev-proxy';
 
-const __dirname = dirname(fileURLToPath(import.meta.url));
-const projectRoot = resolve(__dirname, '..');
-const appPort = readAppPort();
-const proxyPort = appPort + 100;
-const env = loadEnv(projectRoot);
+const projectDir = resolve(dirname(fileURLToPath(import.meta.url)), '..');
 
-if (!env.DEV_SECRET || !env.API_BASE_URL) {
-  process.stderr.write('[bardioc-dev-auth-proxy] missing DEV_SECRET or API_BASE_URL, proxy disabled\n');
-  await new Promise(() => {});
-}
-
-const handler = createDevAuthProxyHandler({
-  apiBaseUrl: env.API_BASE_URL,
-  devSecret: env.DEV_SECRET,
-  allowOrigin: '*',
-});
-
-const server = createServer((req, res) => {
-  void handler(req, res);
-});
-
-server.listen(proxyPort, '127.0.0.1', () => {
-  process.stdout.write(`[bardioc-dev-auth-proxy] listening on http://127.0.0.1:${proxyPort}/rest\n`);
-});
-
-for (const signal of ['SIGINT', 'SIGTERM']) {
-  process.on(signal, () => {
-    server.close(() => process.exit(0));
-  });
-}
-
-function readAppPort() {
-  const flagIndex = process.argv.indexOf('--app-port');
-  const raw = flagIndex >= 0 ? process.argv[flagIndex + 1] : undefined;
-  const parsed = Number.parseInt(raw ?? '{{PORT}}', 10);
-  return Number.isFinite(parsed) ? parsed : {{PORT}};
-}
-
-function loadEnv(projectDir) {
-  const result = {};
-
-  for (const fileName of ['.env', '.env.local']) {
-    const filePath = join(projectDir, fileName);
-
-    try {
-      Object.assign(result, parseEnv(readFileSync(filePath, 'utf8')));
-    } catch {
-      // Ignore missing env files.
-    }
-  }
-
-  return result;
-}
-
-function parseEnv(source) {
-  const result = {};
-
-  for (const rawLine of source.split(/\r?\n/)) {
-    const line = rawLine.trim();
-    if (!line || line.startsWith('#')) {
-      continue;
-    }
-
-    const equalsIndex = line.indexOf('=');
-    if (equalsIndex <= 0) {
-      continue;
-    }
-
-    const key = line.slice(0, equalsIndex).trim();
-    let value = line.slice(equalsIndex + 1).trim();
-
-    if (
-      (value.startsWith('"') && value.endsWith('"')) ||
-      (value.startsWith("'") && value.endsWith("'"))
-    ) {
-      value = value.slice(1, -1);
-    }
-
-    result[key] = value;
-  }
+// Angular's dev server cannot host the SDK Vite plugin, so the proxy runs beside it
+// on the app port + 100 — the same origin src/main.ts points installDevBridge at.
+const server = await startDevAuthProxy({ projectDir, port: {{PORT}} + 100 });
 
-  return result;
+// Without DEV_SECRET / API_BASE_URL there is nothing to serve — exit and let the dev server run
+// on its own, matching how the SDK Vite plugin disables itself.
+if (!server) {
+  process.exit(0);
 }

package/templates/angular/scripts/sync-runtime-env.mjs

@@ -6,10 +6,9 @@ import { fileURLToPath } from 'node:url';
 
 const __dirname = dirname(fileURLToPath(import.meta.url));
 const projectRoot = resolve(__dirname, '..');
-const env = loadEnv(projectRoot);
 
 const runtimeEnv = {
-  VITE_APP_NAME: env.VITE_APP_NAME,
+  VITE_APP_NAME: readEnvValue(projectRoot, 'VITE_APP_NAME'),
 };
 
 const outputPath = join(projectRoot, 'public', 'runtime-env.js');
@@ -20,48 +19,30 @@ writeFileSync(
   'utf8'
 );
 
-function loadEnv(projectDir) {
-  const result = {};
+// Angular has no import.meta.env, so the app slug is baked into a runtime script instead.
+function readEnvValue(projectDir, key) {
+  let value;
 
   for (const fileName of ['.env', '.env.local']) {
-    const filePath = join(projectDir, fileName);
-
+    let source;
     try {
-      Object.assign(result, parseEnv(readFileSync(filePath, 'utf8')));
+      source = readFileSync(join(projectDir, fileName), 'utf8');
     } catch {
-      // Ignore missing env files.
-    }
-  }
-
-  return result;
-}
-
-function parseEnv(source) {
-  const result = {};
-
-  for (const rawLine of source.split(/\r?\n/)) {
-    const line = rawLine.trim();
-    if (!line || line.startsWith('#')) {
-      continue;
-    }
-
-    const equalsIndex = line.indexOf('=');
-    if (equalsIndex <= 0) {
       continue;
     }
 
-    const key = line.slice(0, equalsIndex).trim();
-    let value = line.slice(equalsIndex + 1).trim();
-
-    if (
-      (value.startsWith('"') && value.endsWith('"')) ||
-      (value.startsWith("'") && value.endsWith("'"))
-    ) {
-      value = value.slice(1, -1);
+    for (const rawLine of source.split(/\r?\n/)) {
+      const line = rawLine.trim();
+      if (!line.startsWith(`${key}=`)) {
+        continue;
+      }
+      value = line
+        .slice(key.length + 1)
+        .trim()
+        .replace(/^['"]|['"]$/g, '');
     }
-
-    result[key] = value;
   }
 
-  return result;
+  // A shell value always wins over the dotenv files, like Vite's env loading.
+  return process.env[key] ?? value;
 }

package/templates/angular/src/app/app.component.ts

@@ -64,7 +64,7 @@ type ResultState =
                   <div class="text-muted-foreground border-border border-b pb-2 font-mono text-xs">
                     {{ resultRequest() }}
                   </div>
-                  <div class="text-destructive whitespace-pre-wrap break-all">{{ resultMessage() }}</div>
+                  <div class="text-destructive break-all whitespace-pre-wrap">{{ resultMessage() }}</div>
                 </div>
               }
               @case ('success') {
@@ -112,7 +112,7 @@ export class AppComponent {
     try {
       const data = await this.bridge.transport.os.profile.get();
       const duration = Date.now() - startTime;
-      this.bridge.notify(`Profile loaded (${duration}ms)`, 'success`);
+      this.bridge.notify(`Profile loaded (${duration}ms)`, 'success');
       this.result.set({ status: 'success', request, data });
     } catch (err) {
       const message = err instanceof Error ? err.message : String(err);

package/templates/angular/src/app/bardioc-bridge.ts

@@ -1,5 +1,5 @@
 import { createHostBridge, type HostBridge } from '@bardioc/app-sdk';
 
 export function createBardiocBridge(): HostBridge {
-	return createHostBridge({});
+  return createHostBridge({});
 }

package/templates/angular/src/index.html

@@ -1,5 +1,5 @@
-<!DOCTYPE html>
-<html lang="en" class="dark" style="height: 100%; margin: 0">
+<!doctype html>
+<html lang="en" class="dark" style="height: 100%; margin: 0; color-scheme: dark">
   <head>
     <meta charset="utf-8" />
     <title>{{DISPLAY_NAME}}</title>

package/templates/angular/src/runtime-env.ts

@@ -14,4 +14,4 @@ export function readRuntimeEnv(name: string): string | undefined {
 
   const trimmed = value.trim();
   return trimmed.length > 0 ? trimmed : undefined;
-}
+}