@bardioc/create-bardioc-app 0.5.5 → 0.5.6

package/README.md

@@ -72,9 +72,7 @@ Generated apps can run standalone with the `DEV_SECRET` dev-auth proxy.
 2. Fill in `VITE_APP_NAME`, `DEV_SECRET`, and `API_BASE_URL`
 3. Run `npm run dev`
 
-When running outside the host iframe, the Vite plugin proxies `/rest/*` to `API_BASE_URL` with the `X-Dev-Secret` header and `installDevBridge()` handles SDK messages.
-
-For public testing, run `npm run dev:live` and use the emitted tunnel URL as the app's live URL in the host App Store configuration.
+When running outside the host iframe, the SDK proxies `/rest/*` to `API_BASE_URL` with the `X-Dev-Secret` header and `installDevBridge()` handles SDK messages. Vite templates do this through the `bardiocDevAuth` plugin; the angular and nextjs templates run `scripts/dev-auth-proxy.mjs`, which `npm run dev` starts alongside their dev server.
 
 ## Options
 

package/bin/create.mjs

@@ -1,14 +1,12 @@
 #!/usr/bin/env node
+/* eslint-disable no-console */
 
-import { readFileSync } from 'node:fs';
 import { join, resolve } from 'node:path';
 import { fileURLToPath } from 'node:url';
 import { getDefaultTemplate, listTemplates, parseArgs, scaffoldApp } from '../src/scaffold.js';
 
 const __dirname = fileURLToPath(new URL('.', import.meta.url));
 const TEMPLATES_DIR = join(__dirname, '..', 'templates');
-const packageJsonPath = join(__dirname, '..', 'package.json');
-const packageJson = JSON.parse(readFileSync(packageJsonPath, 'utf-8'));
 
 const args = process.argv.slice(2);
 
@@ -66,7 +64,7 @@ if (!result.success) {
 
 console.log(`  Done! Next steps:\n`);
 console.log(`    cd ${name}`);
+console.log(`    cp .env.example .env`);
 console.log(`    npm install`);
 console.log(`    npm run dev\n`);
 console.log(`  Open http://localhost:${port} to see your app.`);
-console.log(`  Use "pnpm dev:live" for a public tunnel/live URL.\n`);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@bardioc/create-bardioc-app",
-  "version": "0.5.5",
+  "version": "0.5.6",
   "description": "Scaffold a Bardioc app with framework templates (vite, react, vue, angular, svelte, solid, preact, nextjs)",
   "license": "MIT",
   "private": false,

package/templates/_base/README.md

@@ -14,11 +14,25 @@ npm install
 
 ```bash
 npm run dev              # http://localhost:{{PORT}}
-npm run dev:live         # public tunnel (BARDIOC_TUNNEL=1)
 ```
 
-`npm run dev` runs plain Vite as a local preview shell — live SDK data comes only when the app is
-opened inside the host. See `.env.example` for the required variables.
+`npm run dev` starts the dev server as a local preview shell. Live SDK data comes when the app is
+opened inside the host, or standalone once `DEV_SECRET` and `API_BASE_URL` are set — the SDK then
+proxies `/rest/*` to the BFF (via the `bardiocDevAuth` Vite plugin, or `scripts/dev-auth-proxy.mjs`
+in the angular and nextjs templates, which `npm run dev` starts alongside the dev server). See
+`.env.example` for the required variables.
+
+## Lint & format
+
+```bash
+npm run check-types      # TypeScript
+npm run lint             # ESLint
+npm run format           # Prettier (format:check to verify only)
+```
+
+ESLint, Prettier and the `tsconfig.json` base all come from the shared `@bardioc/configs` presets
+(`eslint.config.mjs`, `prettier.config.mjs`), so an app lints exactly like the SDK does. The angular
+template is the exception — Angular 19 pins TypeScript 5.8, which the presets do not support yet.
 
 ## Develop against `@bardioc/*` source (optional)
 

package/templates/_base/scripts/stamp-manifest.mjs

@@ -14,4 +14,4 @@ manifest.version = version;
 manifest.description = base ? `${base} (v${version})` : `v${version}`;
 
 writeFileSync(url, `${JSON.stringify(manifest, null, 2)}\n`);
-console.log(`[stamp-manifest] ${version} → ${outDir}/app-manifest.json`);
+process.stdout.write(`[stamp-manifest] ${version} → ${outDir}/app-manifest.json\n`);

package/templates/_opt-link/scripts/link-source.mjs

@@ -29,7 +29,7 @@ if (argv[0] === '--remove') {
   const link = `${LINK_DIR}/${name}`;
   if (!exists(link)) fail(`No link at ${link}`);
   rmSync(link);
-  console.log(`✓ unlinked ${name}`);
+  process.stdout.write(`✓ unlinked ${name}\n`);
   syncCatalogs();
   process.exit(0);
 }
@@ -53,11 +53,11 @@ mkdirSync(LINK_DIR, { recursive: true });
 const link = `${LINK_DIR}/${name}`;
 if (exists(link)) rmSync(link);
 symlinkSync(abs, link, 'junction');
-console.log(`✓ linked ${name} → ${abs}`);
+process.stdout.write(`✓ linked ${name} → ${abs}\n`);
 
 syncCatalogs();
 
-console.log('Next: pnpm install');
+process.stdout.write('Next: pnpm install\n');
 
 // ── helpers ──────────────────────────────────────────────────────────
 
@@ -140,9 +140,11 @@ function replaceMarkerBlock(workspace, beginIdx, endIdx, marker) {
 
 function logSyncOutcome(sources) {
   if (sources.length === 1) {
-    console.log(`✓ synced catalogs from .linked/${sources[0].name} into ${WORKSPACE_FILE}`);
+    process.stdout.write(
+      `✓ synced catalogs from .linked/${sources[0].name} into ${WORKSPACE_FILE}\n`
+    );
   } else {
-    console.log(`✓ removed managed catalogs block from ${WORKSPACE_FILE}`);
+    process.stdout.write(`✓ removed managed catalogs block from ${WORKSPACE_FILE}\n`);
   }
 }
 

package/templates/angular/.env.example

@@ -1,7 +1,9 @@
+# Hosted app slug used by local runtime/dev-auth wiring.
 VITE_APP_NAME={{APP_NAME}}
 
-# Dev auth proxy secret for local standalone development.
+# Paste the dev secret from the BardiocOS AppStore after registering your app.
+# Used by the dev-auth proxy (scripts/dev-auth-proxy.mjs) to sign requests to the BFF.
 DEV_SECRET=
 
-# Base URL of the Bardioc API the dev auth proxy should forward to.
+# Base URL of the Bardioc BFF / backend-for-frontend (e.g. https://your-host).
 API_BASE_URL=

package/templates/angular/_gitignore

@@ -5,3 +5,4 @@ dist
 node_modules
 *.zip
 .linked/
+.DS_Store

package/templates/angular/package.json

@@ -6,9 +6,7 @@
     "sync:runtime-env": "node ./scripts/sync-runtime-env.mjs",
     "ng": "ng",
     "predev": "npm run sync:runtime-env",
-    "dev": "node ./scripts/dev-auth-proxy.mjs --app-port {{PORT}} & PROXY_PID=$!; ng serve --port {{PORT}}; EXIT_CODE=$?; kill $PROXY_PID; exit $EXIT_CODE",
-    "predev:live": "npm run sync:runtime-env",
-    "dev:live": "node ./scripts/dev-auth-proxy.mjs --app-port {{PORT}} & PROXY_PID=$!; BARDIOC_TUNNEL=1 ng serve --port {{PORT}}; EXIT_CODE=$?; kill $PROXY_PID; exit $EXIT_CODE",
+    "dev": "node ./scripts/dev-auth-proxy.mjs & PROXY_PID=$!; ng serve --port {{PORT}}; EXIT_CODE=$?; kill $PROXY_PID 2>/dev/null; exit $EXIT_CODE",
     "prebuild": "npm run sync:runtime-env",
     "build": "ng build && node scripts/stamp-manifest.mjs dist/{{APP_NAME}}/browser",
     "bundle": "ng build && node scripts/stamp-manifest.mjs dist/{{APP_NAME}}/browser && cd dist/{{APP_NAME}}/browser && zip -r ../../../{{APP_NAME}}.zip .",
@@ -30,7 +28,7 @@
     "@angular/platform-browser": "^19.2.12",
     "@angular/platform-browser-dynamic": "^19.2.12",
     "@angular/router": "^19.2.12",
-    "@bardioc/app-sdk": "latest",
+    "@bardioc/app-sdk": "^0.4.9",
     "rxjs": "~7.8.2",
     "tslib": "^2.8.1",
     "zone.js": "~0.15.1"

package/templates/angular/scripts/dev-auth-proxy.mjs

@@ -1,91 +1,17 @@
 #!/usr/bin/env node
 
-import { readFileSync } from 'node:fs';
-import { createServer } from 'node:http';
-import { dirname, join, resolve } from 'node:path';
+import { startDevAuthProxy } from '@bardioc/app-sdk/dev-proxy';
+import { dirname, resolve } from 'node:path';
 import { fileURLToPath } from 'node:url';
-import { createDevAuthProxyHandler } from '@bardioc/app-sdk/dev-proxy';
 
-const __dirname = dirname(fileURLToPath(import.meta.url));
-const projectRoot = resolve(__dirname, '..');
-const appPort = readAppPort();
-const proxyPort = appPort + 100;
-const env = loadEnv(projectRoot);
+const projectDir = resolve(dirname(fileURLToPath(import.meta.url)), '..');
 
-if (!env.DEV_SECRET || !env.API_BASE_URL) {
-  process.stderr.write('[bardioc-dev-auth-proxy] missing DEV_SECRET or API_BASE_URL, proxy disabled\n');
-  await new Promise(() => {});
-}
-
-const handler = createDevAuthProxyHandler({
-  apiBaseUrl: env.API_BASE_URL,
-  devSecret: env.DEV_SECRET,
-  allowOrigin: '*',
-});
-
-const server = createServer((req, res) => {
-  void handler(req, res);
-});
-
-server.listen(proxyPort, '127.0.0.1', () => {
-  process.stdout.write(`[bardioc-dev-auth-proxy] listening on http://127.0.0.1:${proxyPort}/rest\n`);
-});
-
-for (const signal of ['SIGINT', 'SIGTERM']) {
-  process.on(signal, () => {
-    server.close(() => process.exit(0));
-  });
-}
-
-function readAppPort() {
-  const flagIndex = process.argv.indexOf('--app-port');
-  const raw = flagIndex >= 0 ? process.argv[flagIndex + 1] : undefined;
-  const parsed = Number.parseInt(raw ?? '{{PORT}}', 10);
-  return Number.isFinite(parsed) ? parsed : {{PORT}};
-}
-
-function loadEnv(projectDir) {
-  const result = {};
-
-  for (const fileName of ['.env', '.env.local']) {
-    const filePath = join(projectDir, fileName);
-
-    try {
-      Object.assign(result, parseEnv(readFileSync(filePath, 'utf8')));
-    } catch {
-      // Ignore missing env files.
-    }
-  }
-
-  return result;
-}
-
-function parseEnv(source) {
-  const result = {};
-
-  for (const rawLine of source.split(/\r?\n/)) {
-    const line = rawLine.trim();
-    if (!line || line.startsWith('#')) {
-      continue;
-    }
-
-    const equalsIndex = line.indexOf('=');
-    if (equalsIndex <= 0) {
-      continue;
-    }
-
-    const key = line.slice(0, equalsIndex).trim();
-    let value = line.slice(equalsIndex + 1).trim();
-
-    if (
-      (value.startsWith('"') && value.endsWith('"')) ||
-      (value.startsWith("'") && value.endsWith("'"))
-    ) {
-      value = value.slice(1, -1);
-    }
-
-    result[key] = value;
-  }
+// Angular's dev server cannot host the SDK Vite plugin, so the proxy runs beside it
+// on the app port + 100 — the same origin src/main.ts points installDevBridge at.
+const server = await startDevAuthProxy({ projectDir, port: {{PORT}} + 100 });
 
-  return result;
+// Without DEV_SECRET / API_BASE_URL there is nothing to serve — exit and let the dev server run
+// on its own, matching how the SDK Vite plugin disables itself.
+if (!server) {
+  process.exit(0);
 }

package/templates/angular/scripts/sync-runtime-env.mjs

@@ -6,10 +6,9 @@ import { fileURLToPath } from 'node:url';
 
 const __dirname = dirname(fileURLToPath(import.meta.url));
 const projectRoot = resolve(__dirname, '..');
-const env = loadEnv(projectRoot);
 
 const runtimeEnv = {
-  VITE_APP_NAME: env.VITE_APP_NAME,
+  VITE_APP_NAME: readEnvValue(projectRoot, 'VITE_APP_NAME'),
 };
 
 const outputPath = join(projectRoot, 'public', 'runtime-env.js');
@@ -20,48 +19,30 @@ writeFileSync(
   'utf8'
 );
 
-function loadEnv(projectDir) {
-  const result = {};
+// Angular has no import.meta.env, so the app slug is baked into a runtime script instead.
+function readEnvValue(projectDir, key) {
+  let value;
 
   for (const fileName of ['.env', '.env.local']) {
-    const filePath = join(projectDir, fileName);
-
+    let source;
     try {
-      Object.assign(result, parseEnv(readFileSync(filePath, 'utf8')));
+      source = readFileSync(join(projectDir, fileName), 'utf8');
     } catch {
-      // Ignore missing env files.
-    }
-  }
-
-  return result;
-}
-
-function parseEnv(source) {
-  const result = {};
-
-  for (const rawLine of source.split(/\r?\n/)) {
-    const line = rawLine.trim();
-    if (!line || line.startsWith('#')) {
-      continue;
-    }
-
-    const equalsIndex = line.indexOf('=');
-    if (equalsIndex <= 0) {
       continue;
     }
 
-    const key = line.slice(0, equalsIndex).trim();
-    let value = line.slice(equalsIndex + 1).trim();
-
-    if (
-      (value.startsWith('"') && value.endsWith('"')) ||
-      (value.startsWith("'") && value.endsWith("'"))
-    ) {
-      value = value.slice(1, -1);
+    for (const rawLine of source.split(/\r?\n/)) {
+      const line = rawLine.trim();
+      if (!line.startsWith(`${key}=`)) {
+        continue;
+      }
+      value = line
+        .slice(key.length + 1)
+        .trim()
+        .replace(/^['"]|['"]$/g, '');
     }
-
-    result[key] = value;
   }
 
-  return result;
+  // A shell value always wins over the dotenv files, like Vite's env loading.
+  return process.env[key] ?? value;
 }

package/templates/angular/src/app/app.component.ts

@@ -64,7 +64,7 @@ type ResultState =
                   <div class="text-muted-foreground border-border border-b pb-2 font-mono text-xs">
                     {{ resultRequest() }}
                   </div>
-                  <div class="text-destructive whitespace-pre-wrap break-all">{{ resultMessage() }}</div>
+                  <div class="text-destructive break-all whitespace-pre-wrap">{{ resultMessage() }}</div>
                 </div>
               }
               @case ('success') {
@@ -112,7 +112,7 @@ export class AppComponent {
     try {
       const data = await this.bridge.transport.os.profile.get();
       const duration = Date.now() - startTime;
-      this.bridge.notify(`Profile loaded (${duration}ms)`, 'success`);
+      this.bridge.notify(`Profile loaded (${duration}ms)`, 'success');
       this.result.set({ status: 'success', request, data });
     } catch (err) {
       const message = err instanceof Error ? err.message : String(err);

package/templates/angular/tsconfig.json

@@ -7,6 +7,7 @@
     "noPropertyAccessFromIndexSignature": true,
     "noImplicitReturns": true,
     "noFallthroughCasesInSwitch": true,
+    "noUncheckedIndexedAccess": true,
     "skipLibCheck": true,
     "esModuleInterop": true,
     "sourceMap": true,

package/templates/nextjs/.env.example

@@ -1,7 +1,9 @@
+# Hosted app slug used by local runtime/dev-auth wiring.
 NEXT_PUBLIC_APP_NAME={{APP_NAME}}
 
-# Shared secret used for dev auth when proxying API requests through /rest.
+# Paste the dev secret from the BardiocOS AppStore after registering your app.
+# Used by the dev-auth proxy (scripts/dev-auth-proxy.mjs) to sign requests to the BFF.
 DEV_SECRET=
 
-# Base URL of the Bardioc API backend to proxy /rest requests to.
+# Base URL of the Bardioc BFF / backend-for-frontend (e.g. https://your-host).
 API_BASE_URL=

package/templates/nextjs/_gitignore

@@ -5,3 +5,4 @@ out
 node_modules
 *.zip
 .linked/
+.DS_Store

package/templates/nextjs/app/layout.tsx

@@ -9,6 +9,8 @@ export default function RootLayout({ children }: Readonly<{ children: React.Reac
   return (
     <html lang="en" className="dark" style={{ height: '100%', margin: 0 }}>
       <head>
+        {/* Platform font contract — a fixed absolute URL the host serves, not a bundled asset. */}
+        {/* eslint-disable-next-line @next/next/no-css-tags */}
         <link rel="stylesheet" href="/fonts/bardioc-fonts.css" />
       </head>
       <body style={{ height: '100%', margin: 0 }}>{children}</body>

package/templates/nextjs/app/page.tsx

@@ -12,6 +12,9 @@ type ResultState =
 
 const APP_NAME = process.env.NEXT_PUBLIC_APP_NAME?.trim();
 
+// scripts/dev-auth-proxy.mjs listens on the app port + 100 for standalone dev auth.
+const DEV_PROXY_PORT = Number('{{PORT}}') + 100;
+
 function SdkDemo() {
   const bridge = useSdk();
   const notify = useNotify();
@@ -103,7 +106,7 @@ function SdkDemo() {
             <div className="text-muted-foreground border-border border-b pb-2 font-mono text-xs">
               {result.request}
             </div>
-            <div className="text-destructive whitespace-pre-wrap break-all">{result.message}</div>
+            <div className="text-destructive break-all whitespace-pre-wrap">{result.message}</div>
           </div>
         )}
         {result.status === 'success' && (
@@ -144,7 +147,7 @@ export default function Page() {
 
   useEffect(() => {
     if (isDevStandalone()) {
-      installDevBridge();
+      installDevBridge({ apiBaseUrl: `http://127.0.0.1:${DEV_PROXY_PORT}/rest` });
     }
   }, []);
 

package/templates/nextjs/eslint.config.mjs

@@ -0,0 +1,4 @@
+import { config } from '@bardioc/configs/eslint/next';
+
+// Static export output and Next's generated env types are not sources.
+export default [...config, { ignores: ['out/**', 'next-env.d.ts'] }];

package/templates/nextjs/next.config.ts

@@ -1,32 +1,13 @@
 import type { NextConfig } from 'next';
 
-const apiBaseUrl = process.env.API_BASE_URL?.replace(/\/$/, '');
-const devSecret = process.env.DEV_SECRET;
-
+// Standalone dev auth lives in scripts/dev-auth-proxy.mjs (the SDK dev-auth proxy), not here:
+// the BFF needs Origin dropped and X-Requested-With stamped, which rewrites cannot do.
 const nextConfig: NextConfig = {
   output: 'export',
   images: {
     unoptimized: true,
   },
   trailingSlash: true,
-  async headers() {
-    if (!devSecret) return [];
-    return [
-      {
-        source: '/rest/:path*',
-        headers: [{ key: 'X-Dev-Secret', value: devSecret }],
-      },
-    ];
-  },
-  async rewrites() {
-    if (!apiBaseUrl) return [];
-    return [
-      {
-        source: '/rest/:path*',
-        destination: `${apiBaseUrl}/:path*`,
-      },
-    ];
-  },
 };
 
 export default nextConfig;

package/templates/nextjs/package.json

@@ -3,29 +3,34 @@
   "version": "0.0.1",
   "private": true,
   "scripts": {
-    "dev": "next dev --port {{PORT}}",
-    "dev:live": "BARDIOC_TUNNEL=1 next dev --port {{PORT}}",
+    "dev": "node ./scripts/dev-auth-proxy.mjs & PROXY_PID=$!; next dev --port {{PORT}}; EXIT_CODE=$?; kill $PROXY_PID 2>/dev/null; exit $EXIT_CODE",
     "build": "next build && node scripts/stamp-manifest.mjs out",
     "bundle": "next build && node scripts/stamp-manifest.mjs out && cd out && zip -r ../{{APP_NAME}}.zip .",
     "start": "next start",
     "check-types": "tsc --noEmit",
+    "lint": "eslint .",
+    "format": "prettier --write .",
+    "format:check": "prettier --check .",
     "changeset": "changeset",
     "release:status": "changeset status --verbose",
     "release:version": "changeset version && npm install",
     "release:publish": "changeset publish"
   },
   "dependencies": {
-    "@bardioc/app-sdk": "latest",
+    "@bardioc/app-sdk": "^0.4.9",
     "next": "^15.3.2",
     "react": "^19.2.5",
     "react-dom": "^19.2.5"
   },
   "devDependencies": {
+    "@bardioc/configs": "^0.2.1",
     "@changesets/cli": "^2.31.0",
     "@tailwindcss/postcss": "^4.2.4",
     "@types/node": "^22.10.0",
     "@types/react": "^19.2.14",
     "@types/react-dom": "^19.2.3",
+    "eslint": "^10.0.0",
+    "prettier": "^3.6.2",
     "tailwindcss": "^4.2.4",
     "typescript": "^6.0.3"
   }

package/templates/nextjs/prettier.config.mjs

@@ -0,0 +1 @@
+export { default } from '@bardioc/configs/prettier';

package/templates/nextjs/scripts/dev-auth-proxy.mjs

@@ -0,0 +1,17 @@
+#!/usr/bin/env node
+
+import { startDevAuthProxy } from '@bardioc/app-sdk/dev-proxy';
+import { dirname, resolve } from 'node:path';
+import { fileURLToPath } from 'node:url';
+
+const projectDir = resolve(dirname(fileURLToPath(import.meta.url)), '..');
+
+// `next dev` cannot host the SDK Vite plugin, so the proxy runs beside it on the app
+// port + 100 — the same origin app/page.tsx points installDevBridge at.
+const server = await startDevAuthProxy({ projectDir, port: {{PORT}} + 100 });
+
+// Without DEV_SECRET / API_BASE_URL there is nothing to serve — exit and let the dev server run
+// on its own, matching how the SDK Vite plugin disables itself.
+if (!server) {
+  process.exit(0);
+}

package/templates/nextjs/tsconfig.json

@@ -1,23 +1,8 @@
 {
+  "extends": "@bardioc/configs/typescript/nextjs.json",
   "compilerOptions": {
-    "target": "ES2022",
-    "lib": ["dom", "dom.iterable", "esnext"],
-    "allowJs": true,
-    "skipLibCheck": true,
-    "strict": true,
-    "noEmit": true,
-    "esModuleInterop": true,
-    "module": "esnext",
-    "moduleResolution": "bundler",
-    "resolveJsonModule": true,
-    "isolatedModules": true,
-    "jsx": "preserve",
-    "incremental": true,
-    "plugins": [
-      {
-        "name": "next"
-      }
-    ],
+    "declaration": false,
+    "declarationMap": false,
     "paths": {
       "@/*": ["./*"]
     }

package/templates/preact/eslint.config.mjs

@@ -0,0 +1,3 @@
+import { config } from '@bardioc/configs/eslint/vite-react';
+
+export default [...config];

package/templates/preact/package.json

@@ -5,26 +5,31 @@
   "type": "module",
   "scripts": {
     "dev": "vite",
-    "dev:live": "BARDIOC_TUNNEL=1 vite",
     "build": "tsc && vite build && node scripts/stamp-manifest.mjs dist",
     "bundle": "tsc && vite build && node scripts/stamp-manifest.mjs dist && cd dist && zip -r ../{{APP_NAME}}.zip .",
     "preview": "vite preview",
     "check-types": "tsc --noEmit",
+    "lint": "eslint .",
+    "format": "prettier --write .",
+    "format:check": "prettier --check .",
     "changeset": "changeset",
     "release:status": "changeset status --verbose",
     "release:version": "changeset version && npm install",
     "release:publish": "changeset publish"
   },
   "dependencies": {
-    "@bardioc/app-sdk": "latest",
+    "@bardioc/app-sdk": "^0.4.9",
     "preact": "^10.26.7"
   },
   "devDependencies": {
+    "@bardioc/configs": "^0.2.1",
     "@changesets/cli": "^2.31.0",
-    "@preact/preset-vite": "^2.10.1",
+    "@preact/preset-vite": "^2.10.6",
     "@tailwindcss/vite": "^4.3.0",
     "@types/node": "^22.19.19",
+    "eslint": "^10.0.0",
     "preact-render-to-string": "^6.6.1",
+    "prettier": "^3.6.2",
     "tailwindcss": "4.3.0",
     "typescript": "6.0.3",
     "vite": "8.0.13"

package/templates/preact/prettier.config.mjs

@@ -0,0 +1 @@
+export { default } from '@bardioc/configs/prettier';

package/templates/preact/src/App.tsx

@@ -99,7 +99,7 @@ function SdkDemo() {
             <div className="text-muted-foreground border-border border-b pb-2 font-mono text-xs">
               {result.request}
             </div>
-            <div className="text-destructive whitespace-pre-wrap break-all">{result.message}</div>
+            <div className="text-destructive break-all whitespace-pre-wrap">{result.message}</div>
           </div>
         )}
         {result.status === 'success' && (

package/templates/preact/tsconfig.json

@@ -1,18 +1,12 @@
 {
+  "extends": "@bardioc/configs/typescript/react-library.json",
   "compilerOptions": {
-    "target": "ES2022",
+    "declaration": false,
+    "declarationMap": false,
     "module": "ESNext",
     "moduleResolution": "Bundler",
-    "lib": ["ES2022", "DOM", "DOM.Iterable"],
-    "jsx": "react-jsx",
-    "jsxImportSource": "preact",
-    "strict": true,
     "noEmit": true,
-    "esModuleInterop": true,
-    "skipLibCheck": true,
-    "forceConsistentCasingInFileNames": true,
-    "resolveJsonModule": true,
-    "isolatedModules": true
+    "jsxImportSource": "preact"
   },
   "include": ["src"],
   "exclude": ["node_modules", "dist"]

package/templates/preact/vite.config.ts

@@ -12,6 +12,11 @@ export default defineConfig(({ mode }) => {
   }
 
   return {
-    plugins: [bardiocDevAuth({ appName }), preact(), bardiocApp({ appName, port: {{PORT}} }), tailwindcss()],
+    plugins: [
+      bardiocDevAuth({ appName }),
+      preact(),
+      bardiocApp({ appName, port: {{PORT}} }),
+      tailwindcss(),
+    ],
   };
 });

package/templates/solid/eslint.config.mjs

@@ -0,0 +1,3 @@
+import { createBaseConfig } from '@bardioc/configs/eslint/base';
+
+export default [...createBaseConfig()];

package/templates/solid/package.json

@@ -5,28 +5,32 @@
   "type": "module",
   "scripts": {
     "dev": "vite",
-    "dev:live": "BARDIOC_TUNNEL=1 vite",
     "build": "tsc && vite build && node scripts/stamp-manifest.mjs dist",
     "bundle": "tsc && vite build && node scripts/stamp-manifest.mjs dist && cd dist && zip -r ../{{APP_NAME}}.zip .",
     "preview": "vite preview",
     "check-types": "tsc --noEmit",
+    "lint": "eslint .",
+    "format": "prettier --write .",
+    "format:check": "prettier --check .",
     "changeset": "changeset",
     "release:status": "changeset status --verbose",
     "release:version": "changeset version && npm install",
     "release:publish": "changeset publish"
   },
   "dependencies": {
-    "@bardioc/app-sdk": "latest",
+    "@bardioc/app-sdk": "^0.4.9",
     "solid-js": "^1.9.7"
   },
   "devDependencies": {
+    "@bardioc/configs": "^0.2.1",
     "@changesets/cli": "^2.31.0",
     "@tailwindcss/vite": "^4.3.0",
     "@types/node": "^22.19.19",
-    "solid-devtools": "^0.33.0",
+    "eslint": "^10.0.0",
+    "prettier": "^3.6.2",
     "tailwindcss": "4.3.0",
     "typescript": "6.0.3",
     "vite": "8.0.13",
-    "vite-plugin-solid": "^2.11.6"
+    "vite-plugin-solid": "^2.11.14"
   }
 }

package/templates/solid/prettier.config.mjs

@@ -0,0 +1 @@
+export { default } from '@bardioc/configs/prettier';

package/templates/solid/src/App.tsx

@@ -60,7 +60,7 @@ function SdkDemo() {
       <div class="flex flex-wrap gap-2">
         <button
           class="bg-primary text-primary-foreground hover:bg-primary/90 rounded px-3 py-1 text-xs font-medium disabled:cursor-not-allowed disabled:opacity-50"
-          onclick={runGetProfile}
+          onclick={() => void runGetProfile()}
           disabled={running()}
         >
           Get Profile
@@ -106,7 +106,7 @@ function SdkDemo() {
                 <div class="text-muted-foreground border-border border-b pb-2 font-mono text-xs">
                   {r.request}
                 </div>
-                <div class="text-destructive whitespace-pre-wrap break-all">{r.message}</div>
+                <div class="text-destructive break-all whitespace-pre-wrap">{r.message}</div>
               </div>
             );
           }

package/templates/solid/tsconfig.json

@@ -1,18 +1,13 @@
 {
+  "extends": "@bardioc/configs/typescript/base.json",
   "compilerOptions": {
-    "target": "ES2022",
+    "declaration": false,
+    "declarationMap": false,
     "module": "ESNext",
     "moduleResolution": "Bundler",
-    "lib": ["ES2022", "DOM", "DOM.Iterable"],
+    "noEmit": true,
     "jsx": "preserve",
     "jsxImportSource": "solid-js",
-    "strict": true,
-    "noEmit": true,
-    "esModuleInterop": true,
-    "skipLibCheck": true,
-    "forceConsistentCasingInFileNames": true,
-    "resolveJsonModule": true,
-    "isolatedModules": true,
     "types": ["vite/client"]
   },
   "include": ["src"],

package/templates/solid/vite.config.ts

@@ -1,7 +1,7 @@
 import { bardiocApp, bardiocDevAuth } from '@bardioc/app-sdk/vite';
 import tailwindcss from '@tailwindcss/vite';
-import solid from 'vite-plugin-solid';
 import { defineConfig, loadEnv } from 'vite';
+import solid from 'vite-plugin-solid';
 
 export default defineConfig(({ mode }) => {
   const env = loadEnv(mode, __dirname, '');
@@ -12,6 +12,11 @@ export default defineConfig(({ mode }) => {
   }
 
   return {
-    plugins: [bardiocDevAuth({ appName }), solid(), bardiocApp({ appName, port: {{PORT}} }), tailwindcss()],
+    plugins: [
+      bardiocDevAuth({ appName }),
+      solid(),
+      bardiocApp({ appName, port: {{PORT}} }),
+      tailwindcss(),
+    ],
   };
 });

package/templates/svelte/_gitignore

@@ -4,3 +4,4 @@ dist
 node_modules
 *.zip
 .linked/
+.DS_Store

package/templates/svelte/eslint.config.mjs

@@ -0,0 +1,3 @@
+import { createBaseConfig } from '@bardioc/configs/eslint/base';
+
+export default [...createBaseConfig()];

package/templates/svelte/package.json

@@ -5,25 +5,30 @@
   "type": "module",
   "scripts": {
     "dev": "vite",
-    "dev:live": "BARDIOC_TUNNEL=1 vite",
     "build": "svelte-check && vite build && node scripts/stamp-manifest.mjs dist",
     "bundle": "svelte-check && vite build && node scripts/stamp-manifest.mjs dist && cd dist && zip -r ../{{APP_NAME}}.zip .",
     "preview": "vite preview",
     "check-types": "svelte-check",
+    "lint": "eslint .",
+    "format": "prettier --write .",
+    "format:check": "prettier --check .",
     "changeset": "changeset",
     "release:status": "changeset status --verbose",
     "release:version": "changeset version && npm install",
     "release:publish": "changeset publish"
   },
   "dependencies": {
-    "@bardioc/app-sdk": "latest",
+    "@bardioc/app-sdk": "^0.4.9",
     "svelte": "^5.33.14"
   },
   "devDependencies": {
+    "@bardioc/configs": "^0.2.1",
     "@changesets/cli": "^2.31.0",
-    "@sveltejs/vite-plugin-svelte": "^6.0.0",
+    "@sveltejs/vite-plugin-svelte": "^7.2.0",
     "@tailwindcss/vite": "^4.3.0",
     "@types/node": "^22.19.19",
+    "eslint": "^10.0.0",
+    "prettier": "^3.6.2",
     "svelte-check": "^4.2.1",
     "tailwindcss": "4.3.0",
     "typescript": "6.0.3",

package/templates/svelte/prettier.config.mjs

@@ -0,0 +1 @@
+export { default } from '@bardioc/configs/prettier';

package/templates/svelte/src/App.svelte

@@ -109,7 +109,7 @@
             <div class="text-muted-foreground border-border border-b pb-2 font-mono text-xs">
               {result.request}
             </div>
-            <div class="text-destructive whitespace-pre-wrap break-all">{result.message}</div>
+            <div class="text-destructive break-all whitespace-pre-wrap">{result.message}</div>
           </div>
         {:else if result.status === 'success'}
           <div class="flex h-full flex-col gap-0 overflow-hidden">

package/templates/svelte/tsconfig.json

@@ -1,13 +1,13 @@
 {
+  "extends": "@bardioc/configs/typescript/base.json",
   "compilerOptions": {
+    "declaration": false,
+    "declarationMap": false,
     "target": "ESNext",
     "module": "ESNext",
     "moduleResolution": "bundler",
-    "strict": true,
     "noEmit": true,
-    "skipLibCheck": true,
-    "verbatimModuleSyntax": true,
-    "isolatedModules": true
+    "verbatimModuleSyntax": true
   },
   "include": ["src/**/*.ts", "src/**/*.svelte"]
 }

package/templates/svelte/vite.config.ts

@@ -12,6 +12,11 @@ export default defineConfig(({ mode }) => {
   }
 
   return {
-    plugins: [bardiocDevAuth({ appName }), svelte(), bardiocApp({ appName, port: {{PORT}} }), tailwindcss()],
+    plugins: [
+      bardiocDevAuth({ appName }),
+      svelte(),
+      bardiocApp({ appName, port: {{PORT}} }),
+      tailwindcss(),
+    ],
   };
 });

package/templates/vite/CLAUDE.md

@@ -69,11 +69,16 @@ an `app`-kind root next to the host's About / Version entries — the example of
 
 ```bash
 pnpm dev              # http://localhost:{{PORT}}
-pnpm dev:live         # public tunnel
 pnpm build            # → dist/
 pnpm bundle           # → {{APP_NAME}}.zip
+pnpm check-types      # tsc
+pnpm lint             # eslint (@bardioc/configs preset)
+pnpm format           # prettier (@bardioc/configs preset)
 ```
 
+ESLint, Prettier and the `tsconfig.json` base come from `@bardioc/configs` — edit
+`eslint.config.mjs` / `prettier.config.mjs` only to add app-specific overrides on top of the preset.
+
 `npm run dev` runs plain Vite — a local preview shell (no transport): the dashboard renders, but
 live SDK data comes only when the app is opened inside the host, or when `DEV_SECRET` and
 `API_BASE_URL` are set for standalone dev auth (see `.env.example`).

package/templates/vite/eslint.config.mjs

@@ -0,0 +1,3 @@
+import { config } from '@bardioc/configs/eslint/vite-react';
+
+export default [...config];

package/templates/vite/package.json

@@ -9,26 +9,32 @@
     "bundle": "rm -f {{APP_NAME}}.zip && tsc && vite build && node scripts/stamp-manifest.mjs dist && cd dist && zip -r ../{{APP_NAME}}.zip .",
     "preview": "vite preview",
     "check-types": "tsc --noEmit",
+    "lint": "eslint .",
+    "format": "prettier --write .",
+    "format:check": "prettier --check .",
     "changeset": "changeset",
     "release:status": "changeset status --verbose",
     "release:version": "changeset version && npm install",
     "release:publish": "changeset publish"
   },
   "dependencies": {
-    "@bardioc/app-sdk": "latest",
-    "@bardioc/i18n-core": "latest",
-    "@bardioc/ui": "latest",
+    "@bardioc/app-sdk": "^0.4.9",
+    "@bardioc/i18n-core": "^0.1.1",
+    "@bardioc/ui": "^0.3.1",
     "lucide-react": "^0.544.0",
     "react": "19.2.6",
     "react-dom": "19.2.6"
   },
   "devDependencies": {
+    "@bardioc/configs": "^0.2.1",
     "@changesets/cli": "^2.31.0",
     "@tailwindcss/vite": "^4.3.0",
     "@types/node": "^22.19.19",
     "@types/react": "^19.2.14",
     "@types/react-dom": "^19.2.3",
     "@vitejs/plugin-react": "5.2.0",
+    "eslint": "^10.0.0",
+    "prettier": "^3.6.2",
     "tailwindcss": "4.3.0",
     "typescript": "6.0.3",
     "vite": "8.0.13"

package/templates/vite/prettier.config.mjs

@@ -0,0 +1 @@
+export { default } from '@bardioc/configs/prettier';

package/templates/vite/src/climate/climate-data.ts

@@ -1,17 +1,20 @@
 import type { ClimateReading, ClimateState, Condition, ForecastDay, Station } from './types';
 
-const STATIONS: Array<Pick<Station, 'id' | 'name' | 'region'>> = [
+type StationBase = Pick<Station, 'id' | 'name' | 'region'>;
+
+// Non-empty tuples, so indexing them stays type-safe under noUncheckedIndexedAccess.
+const STATIONS: [StationBase, ...StationBase[]] = [
   { id: 'lagoon', name: 'Lagoon Station', region: 'Equatorial Belt' },
   { id: 'verdant', name: 'Verdant Ridge', region: 'Highlands' },
   { id: 'aurora', name: 'Aurora Flats', region: 'Polar Rim' },
   { id: 'cinder', name: 'Cinder Basin', region: 'Volcanic Plains' },
   { id: 'mistral', name: 'Mistral Cove', region: 'Coastal Shelf' },
 ];
-const CONDITIONS: Condition[] = ['sunny', 'cloudy', 'rainy'];
-const DAYS = ['Mon', 'Tue', 'Wed', 'Thu', 'Fri', 'Sat', 'Sun'];
+const CONDITIONS: [Condition, ...Condition[]] = ['sunny', 'cloudy', 'rainy'];
+const DAYS = ['Mon', 'Tue', 'Wed', 'Thu', 'Fri', 'Sat', 'Sun'] as const;
 
-function pick<T>(items: readonly T[]): T {
-  return items[Math.floor(Math.random() * items.length)];
+function pick<T>(items: readonly [T, ...T[]]): T {
+  return items[Math.floor(Math.random() * items.length)] ?? items[0];
 }
 
 function round(value: number, decimals: number): number {
@@ -63,7 +66,11 @@ export function generateState(
   activeStationId?: string,
   source: ClimateState['source'] = 'mock'
 ): ClimateState {
-  const stations = STATIONS.map(buildStation);
+  const [firstBase, ...restBases] = STATIONS;
+  const stations: [Station, ...Station[]] = [
+    buildStation(firstBase),
+    ...restBases.map(buildStation),
+  ];
   const active = stations.find(station => station.id === activeStationId) ?? stations[0];
   return {
     stations,

package/templates/vite/src/graph/requests.ts

@@ -42,7 +42,8 @@ async function sampleNodes(bridge: HostBridge, limit: number): Promise<GraphNode
 // query by a type that actually exists, a node lookup, and a Gremlin neighbor traversal — the
 // lookup/traversal presets discover a real node from the wildcard query first, so nothing is
 // hard-coded to a specific instance.
-export const SDK_REQUESTS: SdkRequest[] = [
+// Non-empty tuple, so the Explorer can index the first preset as its default.
+export const SDK_REQUESTS: [SdkRequest, ...SdkRequest[]] = [
   {
     id: 'graph.query.all',
     category: 'graph',

package/templates/vite/tsconfig.json

@@ -1,17 +1,11 @@
 {
+  "extends": "@bardioc/configs/typescript/react-library.json",
   "compilerOptions": {
-    "target": "ES2022",
+    "declaration": false,
+    "declarationMap": false,
     "module": "ESNext",
     "moduleResolution": "Bundler",
-    "lib": ["ES2022", "DOM", "DOM.Iterable"],
-    "jsx": "react-jsx",
-    "strict": true,
-    "noEmit": true,
-    "esModuleInterop": true,
-    "skipLibCheck": true,
-    "forceConsistentCasingInFileNames": true,
-    "resolveJsonModule": true,
-    "isolatedModules": true
+    "noEmit": true
   },
   "include": ["src"],
   "exclude": ["node_modules", "dist"]

package/templates/vite/vite.config.ts

@@ -1,6 +1,6 @@
 import { bardiocApp, bardiocDevAuth } from '@bardioc/app-sdk/vite';
-import react from '@vitejs/plugin-react';
 import tailwindcss from '@tailwindcss/vite';
+import react from '@vitejs/plugin-react';
 import { defineConfig, loadEnv } from 'vite';
 
 export default defineConfig(({ mode }) => {
@@ -12,6 +12,11 @@ export default defineConfig(({ mode }) => {
   }
 
   return {
-    plugins: [bardiocDevAuth({ appName }), react(), bardiocApp({ appName, port: {{PORT}} }), tailwindcss()],
+    plugins: [
+      bardiocDevAuth({ appName }),
+      react(),
+      bardiocApp({ appName, port: {{PORT}} }),
+      tailwindcss(),
+    ],
   };
 });

package/templates/vue/_gitignore

@@ -4,3 +4,4 @@ dist
 node_modules
 *.zip
 .linked/
+.DS_Store

package/templates/vue/eslint.config.mjs

@@ -0,0 +1,3 @@
+import { createBaseConfig } from '@bardioc/configs/eslint/base';
+
+export default [...createBaseConfig()];

package/templates/vue/package.json

@@ -5,25 +5,30 @@
   "type": "module",
   "scripts": {
     "dev": "vite",
-    "dev:live": "BARDIOC_TUNNEL=1 vite",
     "build": "vue-tsc -b && vite build && node scripts/stamp-manifest.mjs dist",
     "bundle": "vue-tsc -b && vite build && node scripts/stamp-manifest.mjs dist && cd dist && zip -r ../{{APP_NAME}}.zip .",
     "preview": "vite preview",
     "check-types": "vue-tsc --noEmit",
+    "lint": "eslint .",
+    "format": "prettier --write .",
+    "format:check": "prettier --check .",
     "changeset": "changeset",
     "release:status": "changeset status --verbose",
     "release:version": "changeset version && npm install",
     "release:publish": "changeset publish"
   },
   "dependencies": {
-    "@bardioc/app-sdk": "latest",
+    "@bardioc/app-sdk": "^0.4.9",
     "vue": "^3.5.16"
   },
   "devDependencies": {
+    "@bardioc/configs": "^0.2.1",
     "@changesets/cli": "^2.31.0",
     "@tailwindcss/vite": "^4.3.0",
     "@types/node": "^22.19.19",
-    "@vitejs/plugin-vue": "^5.2.4",
+    "@vitejs/plugin-vue": "^6.0.8",
+    "eslint": "^10.0.0",
+    "prettier": "^3.6.2",
     "tailwindcss": "4.3.0",
     "typescript": "6.0.3",
     "vite": "8.0.13",

package/templates/vue/prettier.config.mjs

@@ -0,0 +1 @@
+export { default } from '@bardioc/configs/prettier';

package/templates/vue/src/App.vue

@@ -110,7 +110,7 @@ function clearResult() {
             <div class="text-muted-foreground border-border border-b pb-2 font-mono text-xs">
               {{ result.request }}
             </div>
-            <div class="text-destructive whitespace-pre-wrap break-all">{{ result.message }}</div>
+            <div class="text-destructive break-all whitespace-pre-wrap">{{ result.message }}</div>
           </div>
           <div
             v-else-if="result.status === 'success'"

package/templates/vue/tsconfig.json

@@ -1,22 +1,18 @@
 {
+  "extends": "@bardioc/configs/typescript/base.json",
   "compilerOptions": {
-    "target": "ES2022",
-    "useDefineForClassFields": true,
+    "declaration": false,
+    "declarationMap": false,
     "module": "ESNext",
-    "lib": ["ES2022", "DOM", "DOM.Iterable"],
-    "skipLibCheck": true,
     "moduleResolution": "bundler",
-    "allowImportingTsExtensions": true,
-    "isolatedModules": true,
-    "moduleDetection": "force",
     "noEmit": true,
+    "useDefineForClassFields": true,
+    "allowImportingTsExtensions": true,
     "jsx": "preserve",
-    "strict": true,
     "noUnusedLocals": true,
     "noUnusedParameters": true,
     "noFallthroughCasesInSwitch": true,
     "noUncheckedSideEffectImports": true,
-    "ignoreDeprecations": "6.0",
     "baseUrl": ".",
     "paths": {
       "@/*": ["./src/*"]

package/templates/vue/vite.config.ts

@@ -1,6 +1,6 @@
 import { bardiocApp, bardiocDevAuth } from '@bardioc/app-sdk/vite';
-import vue from '@vitejs/plugin-vue';
 import tailwindcss from '@tailwindcss/vite';
+import vue from '@vitejs/plugin-vue';
 import { defineConfig, loadEnv } from 'vite';
 
 export default defineConfig(({ mode }) => {
@@ -12,6 +12,11 @@ export default defineConfig(({ mode }) => {
   }
 
   return {
-    plugins: [bardiocDevAuth({ appName }), vue(), bardiocApp({ appName, port: {{PORT}} }), tailwindcss()],
+    plugins: [
+      bardiocDevAuth({ appName }),
+      vue(),
+      bardiocApp({ appName, port: {{PORT}} }),
+      tailwindcss(),
+    ],
   };
 });