@biffo/cli 0.313.3 → 0.314.0

package/_skeletons/plugin-template/biffo.plugin.json

@@ -80,8 +80,8 @@
     }
   ],
   "ui_components": [
-    { "type": "nav-link", "label": "Example Plugin", "path": "/admin/example-plugin" },
-    { "type": "page", "label": "Widgets", "path": "/admin/example-plugin/widgets" }
+    { "type": "nav-link", "label": "Example Plugin", "path": "/admin/plugins/example-plugin" },
+    { "type": "page", "label": "Widgets", "path": "/admin/plugins/example-plugin/widgets" }
   ],
   "seed": {
     "dir": "db/seed",
@@ -89,5 +89,17 @@
   },
   "dependencies": {
     "biffo-plugin-sdk": "^1.0"
+  },
+  "user_ingress": {
+    "required_group": "founder",
+    "app": "example_plugin.user_app:app"
+  },
+  "admin_ingress": {
+    "required_group": "admin",
+    "app": "example_plugin.admin_app:app"
+  },
+  "user_frontend": {
+    "dir": "web/dist",
+    "required_group": "founder"
   }
 }

package/_skeletons/plugin-template/pyproject.toml

@@ -15,6 +15,12 @@ dependencies = [
   "biffo-plugin-sdk>=1.0,<2.0",
   "aws-lambda-powertools[tracer]>=3.4.0",
   "httpx>=0.28.1",
+  # ASGI apps for the `user_ingress`/`admin_ingress` surfaces (ADR-0021) —
+  # the shared plugin host imports and mounts `<module>:app` directly, so this
+  # is the only new runtime dependency the two placeholder apps need (no
+  # mangum/pyjwt: the host provides the Lambda entry and enforces
+  # `required_group` itself — see user_app.py's docstring).
+  "fastapi>=0.115.0",
 ]
 
 [dependency-groups]

package/_skeletons/plugin-template/src/example_plugin/admin_app.py

@@ -0,0 +1,50 @@
+"""Placeholder ASGI app backing this plugin's `admin_ingress` surface (ADR-0021).
+
+`biffo.plugin.json`'s `admin_ingress.app` names this module's `app` object. The
+**shared plugin host** imports it, provides the Lambda entry, and mounts it at
+`/api/v1/plugins/<name>/admin/*`, enforcing `admin_ingress.required_group`
+(ADR-0011) before a request ever reaches here — see `user_app.py`'s docstring
+for why this file does no auth of its own.
+
+**This is also `web-admin/`'s one reader (biffo-template#2008).** The skeleton
+shipped a full admin frontend at `web-admin/` that no manifest field referenced
+— an orphan directory nothing would ever build or serve. `AdminIngress` in the
+SDK is explicitly "the plugin's admin-gated API and optional static UI bundle":
+unlike `user_frontend` (a separate declarative `dir`, served directly by the
+host with no plugin code involved), the admin surface's static bundle is served
+*by the app this field names* — `web-admin/`'s own `vite.config.ts` already
+targets exactly this mount point (`base:
+'/api/v1/plugins/example-plugin/admin/'`).
+
+`web-admin/dist/` is the Vite build output — gitignored, and not built by this
+repo's CI (that wiring is follow-up work; #2008's scope is declaring the
+surfaces, not shipping the built bundle, mirroring `user_frontend.dir` above
+pointing at `web/dist` before that directory exists either — see #2009). The
+mount below is skipped when `dist/` is absent, so a fresh checkout and `pytest`
+need no build step and no edits (this issue's "done when" criterion) — once
+`web-admin` is built, dropping its `dist/` in place is enough to serve it, with
+no further code change.
+"""
+
+from __future__ import annotations
+
+from pathlib import Path
+
+from fastapi import FastAPI
+from fastapi.staticfiles import StaticFiles
+
+app = FastAPI(title="example-plugin admin ingress")
+
+# src/example_plugin/admin_app.py -> src/example_plugin -> src -> repo root
+# (plugin root, where web-admin/ lives alongside biffo.plugin.json).
+WEB_ADMIN_DIST = Path(__file__).resolve().parent.parent.parent / "web-admin" / "dist"
+
+
+@app.get("/ping")
+def ping() -> dict[str, str]:
+    """Identifies the plugin, so the mount can be proven real rather than guessed at."""
+    return {"plugin": "example-plugin", "surface": "admin_ingress"}
+
+
+if WEB_ADMIN_DIST.is_dir():
+    app.mount("/", StaticFiles(directory=str(WEB_ADMIN_DIST), html=True), name="web-admin")

package/_skeletons/plugin-template/src/example_plugin/user_app.py

@@ -0,0 +1,31 @@
+"""Placeholder ASGI app backing this plugin's `user_ingress` surface (ADR-0021).
+
+`biffo.plugin.json`'s `user_ingress.app` names this module's `app` object. The
+**shared plugin host** imports it, provides the Lambda entry, and mounts it at
+`/api/v1/plugins/<name>/*` — a plugin declaring `user_ingress` ships no Lambda
+handler and no infrastructure of its own for this surface (see `terraform/`:
+nothing here needs a per-plugin resource).
+
+**No auth in this file, on purpose.** The host enforces `user_ingress.required_group`
+(ADR-0011) before a request ever reaches a mounted app — see
+`biffo_plugin_sdk.user_serving`'s module docstring: its `require_group` dependency
+is only for an `isolated: true` plugin running in its own Lambda outside the
+shared host. Adding a second check here would be redundant at best and a
+divergent enforcement path at worst.
+
+This is intentionally a placeholder (biffo-template#2008): one route that
+identifies the plugin, enough to prove the mount is real, not enough to be
+mistaken for a feature. Replace it with your own user-facing routes.
+"""
+
+from __future__ import annotations
+
+from fastapi import FastAPI
+
+app = FastAPI(title="example-plugin user ingress")
+
+
+@app.get("/ping")
+def ping() -> dict[str, str]:
+    """Identifies the plugin, so the mount can be proven real rather than guessed at."""
+    return {"plugin": "example-plugin", "surface": "user_ingress"}

package/_skeletons/plugin-template/tests/test_example_plugin_ingress_surfaces.py

@@ -0,0 +1,119 @@
+"""Pins the three platform surfaces `biffo.plugin.json` declares (biffo-template#2008).
+
+Before this, `_skeletons/plugin-template` declared none of `user_ingress`,
+`admin_ingress` or `user_frontend` — the platform already serves all three
+(the working reference is `keiranholloway/biffo-plugin-ideation`'s manifest),
+but every scaffolded plugin started life exposing none of them. This test
+guards three things at once:
+
+1. the manifest actually validates against the SDK's real `PluginManifest`
+   (`extra="forbid"`, so a typo in a block's keys fails loudly rather than
+   silently dropping the surface — see `README.md`'s "Manifest validation"
+   section for why that model, not `registry-schema.json`, is authoritative);
+2. each `*_ingress.app` reference actually resolves to a real, importable ASGI
+   app — not merely a string that looks right; and
+3. each placeholder app answers with something that identifies the plugin,
+   so the mount is real rather than guessed at (this issue's own "done when").
+"""
+
+from __future__ import annotations
+
+import importlib
+
+from biffo_plugin_sdk.plugin import load_manifest
+from fastapi import FastAPI
+from fastapi.testclient import TestClient
+
+from example_plugin.manifest import MANIFEST_PATH
+
+
+def _resolve_app(app_ref: str) -> FastAPI:
+    """Resolve a manifest `*_ingress.app` string ('<module>:<attr>') the same
+    way the shared plugin host would — a plain dynamic import, not a literal
+    reference to this test's own imports, so a manifest string that drifted
+    from the real module path would be caught here rather than passing by
+    coincidence."""
+    module_name, _, attr = app_ref.partition(":")
+    module = importlib.import_module(module_name)
+    return getattr(module, attr)
+
+
+class TestManifestDeclaresAllThreeSurfaces:
+    def test_manifest_validates_and_declares_user_ingress(self) -> None:
+        manifest = load_manifest(MANIFEST_PATH)
+        assert manifest.user_ingress is not None
+        assert manifest.user_ingress.required_group == "founder"
+        assert manifest.user_ingress.app == "example_plugin.user_app:app"
+
+    def test_manifest_declares_admin_ingress(self) -> None:
+        manifest = load_manifest(MANIFEST_PATH)
+        assert manifest.admin_ingress is not None
+        assert manifest.admin_ingress.required_group == "admin"
+        assert manifest.admin_ingress.app == "example_plugin.admin_app:app"
+
+    def test_manifest_declares_user_frontend(self) -> None:
+        manifest = load_manifest(MANIFEST_PATH)
+        assert manifest.user_frontend is not None
+        assert manifest.user_frontend.dir == "web/dist"
+        assert manifest.user_frontend.required_group == "founder"
+
+    def test_ui_components_no_longer_point_at_a_dead_admin_path(self) -> None:
+        """The old `/admin/example-plugin` paths matched none of the three real
+        surfaces (this issue's own finding) — pin that they now sit under the
+        portal's real installed-plugin route instead."""
+        manifest = load_manifest(MANIFEST_PATH)
+        paths = {c.path for c in manifest.ui_components}
+        assert paths == {
+            "/admin/plugins/example-plugin",
+            "/admin/plugins/example-plugin/widgets",
+        }
+
+
+class TestIngressAppsResolveAndIdentifyThePlugin:
+    def test_user_ingress_app_resolves_and_answers(self) -> None:
+        manifest = load_manifest(MANIFEST_PATH)
+        assert manifest.user_ingress is not None
+        app = _resolve_app(manifest.user_ingress.app)
+
+        response = TestClient(app).get("/ping")
+
+        assert response.status_code == 200
+        assert response.json() == {"plugin": "example-plugin", "surface": "user_ingress"}
+
+    def test_admin_ingress_app_resolves_and_answers(self) -> None:
+        manifest = load_manifest(MANIFEST_PATH)
+        assert manifest.admin_ingress is not None
+        app = _resolve_app(manifest.admin_ingress.app)
+
+        response = TestClient(app).get("/ping")
+
+        assert response.status_code == 200
+        assert response.json() == {"plugin": "example-plugin", "surface": "admin_ingress"}
+
+
+class TestAdminIngressWebAdminOrphanResolution:
+    """`web-admin/` had no manifest field referencing it (this issue's own
+    finding). `admin_app.py` is now its one reader — these pin that the
+    reference is real (the directory `admin_app` looks for is exactly
+    `web-admin/`, not a typo'd sibling) and that a repo state with no built
+    `dist/` yet (true of this skeleton and every fresh checkout, since `dist/`
+    is gitignored and nothing builds it here — see admin_app.py's docstring)
+    still imports and serves cleanly rather than raising at import time.
+    """
+
+    def test_web_admin_dist_path_points_at_the_real_directory(self) -> None:
+        from example_plugin.admin_app import WEB_ADMIN_DIST
+
+        assert WEB_ADMIN_DIST.parent.name == "web-admin"
+        assert WEB_ADMIN_DIST.name == "dist"
+        assert WEB_ADMIN_DIST.parent.is_dir(), "web-admin/ itself must still exist"
+
+    def test_static_mount_is_skipped_when_dist_is_absent(self) -> None:
+        from example_plugin.admin_app import WEB_ADMIN_DIST, app
+
+        assert not WEB_ADMIN_DIST.is_dir(), (
+            "this test asserts the no-build-yet behaviour; if dist/ has been "
+            "built locally, the skip path this test pins is not being exercised"
+        )
+        response = TestClient(app).get("/some/never-built/asset.js")
+        assert response.status_code == 404

package/_skeletons/plugin-template/uv.lock

@@ -2,6 +2,15 @@ version = 1
 revision = 3
 requires-python = ">=3.13"
 
+[[package]]
+name = "annotated-doc"
+version = "0.0.5"
+source = { registry = "https://pypi.org/simple" }
+sdist = { url = "https://files.pythonhosted.org/packages/5a/8e/38aa427ed5402449e226975b649c5dc73ccadfefeb95e6aecb8f8ea4b6b6/annotated_doc-0.0.5.tar.gz", hash = "sha256:c7e58ce09192557605d8bbd92836d7e1d520ac9580096042c0bfd197efacf1bb", size = 10758, upload-time = "2026-07-28T13:50:58.129Z" }
+wheels = [
+    { url = "https://files.pythonhosted.org/packages/3e/30/e900b21425a860e195f32e37657aa1f7c7f2b1bfb26f03ca209b90933c06/annotated_doc-0.0.5-py3-none-any.whl", hash = "sha256:117bac03a25ede5df5440e855b32d556049ca169ead221505badf432fed4b101", size = 5302, upload-time = "2026-07-28T13:50:57.239Z" },
+]
+
 [[package]]
 name = "annotated-types"
 version = "0.8.0"
@@ -70,6 +79,7 @@ source = { editable = "." }
 dependencies = [
     { name = "aws-lambda-powertools", extra = ["tracer"] },
     { name = "biffo-plugin-sdk" },
+    { name = "fastapi" },
     { name = "httpx" },
 ]
 
@@ -88,6 +98,7 @@ dev = [
 requires-dist = [
     { name = "aws-lambda-powertools", extras = ["tracer"], specifier = ">=3.4.0" },
     { name = "biffo-plugin-sdk", specifier = ">=1.0,<2.0" },
+    { name = "fastapi", specifier = ">=0.115.0" },
     { name = "httpx", specifier = ">=0.28.1" },
 ]
 
@@ -398,6 +409,22 @@ wheels = [
     { url = "https://files.pythonhosted.org/packages/07/6c/aa3f2f849e01cb6a001cd8554a88d4c77c5c1a31c95bdf1cf9301e6d9ef4/defusedxml-0.7.1-py2.py3-none-any.whl", hash = "sha256:a352e7e428770286cc899e2542b6cdaedb2b4953ff269a210103ec58f6198a61", size = 25604, upload-time = "2021-03-08T10:59:24.45Z" },
 ]
 
+[[package]]
+name = "fastapi"
+version = "0.141.1"
+source = { registry = "https://pypi.org/simple" }
+dependencies = [
+    { name = "annotated-doc" },
+    { name = "pydantic" },
+    { name = "starlette" },
+    { name = "typing-extensions" },
+    { name = "typing-inspection" },
+]
+sdist = { url = "https://files.pythonhosted.org/packages/8a/02/91e3416a8fdd715abb903a952a6bec7cdd8d14eed55d415fc8595524c319/fastapi-0.141.1.tar.gz", hash = "sha256:e8822fc40db1e1858054d7a949a888695bc9bdce70139178e33bd2871a453ca1", size = 425799, upload-time = "2026-07-29T17:18:05.568Z" }
+wheels = [
+    { url = "https://files.pythonhosted.org/packages/cb/03/10388a42375ee7e4ac9b94eb2c5c569c8b5795e377e701c9ac3ad63de890/fastapi-0.141.1-py3-none-any.whl", hash = "sha256:bfb91aa2d334c61cb35ba9a116fc123b3d3df31640b801cf57a7a78ec3f603b3", size = 131954, upload-time = "2026-07-29T17:18:04.364Z" },
+]
+
 [[package]]
 name = "filelock"
 version = "3.32.3"
@@ -1005,6 +1032,18 @@ wheels = [
     { url = "https://files.pythonhosted.org/packages/32/46/9cb0e58b2deb7f82b84065f37f3bffeb12413f947f9388e4cac22c4621ce/sortedcontainers-2.4.0-py2.py3-none-any.whl", hash = "sha256:a163dcaede0f1c021485e957a39245190e74249897e2ae4b2aa38595db237ee0", size = 29575, upload-time = "2021-05-16T22:03:41.177Z" },
 ]
 
+[[package]]
+name = "starlette"
+version = "1.6.0"
+source = { registry = "https://pypi.org/simple" }
+dependencies = [
+    { name = "anyio" },
+]
+sdist = { url = "https://files.pythonhosted.org/packages/b5/b4/205b0d5241d934e8add0c38aa924c4f9fb7330834ff11e5444db964ec3f9/starlette-1.6.0.tar.gz", hash = "sha256:d4e3ac5e546444960c710297a3c9fc3f7ebae1b7e963f3d36173b49da535be9b", size = 2716969, upload-time = "2026-08-08T18:27:57.512Z" }
+wheels = [
+    { url = "https://files.pythonhosted.org/packages/c8/cb/6a6a47d5b464bd08695d254f3da6e7986cc70c9fa5d778eda57538edfe56/starlette-1.6.0-py3-none-any.whl", hash = "sha256:a86dd39d14bb45f85a3d18525215a9ef0cfd1f192ac793220e72598c90335f0c", size = 75969, upload-time = "2026-08-08T18:27:56.196Z" },
+]
+
 [[package]]
 name = "tomli"
 version = "2.4.1"

package/_skeletons/sibling-template/apps/frontend/package.json

@@ -18,7 +18,7 @@
   "dependencies": {
     "@biffo/design-tokens": "^0.248.2",
     "amazon-cognito-identity-js": "^6.3.12",
-    "next": "^15.5.22",
+    "next": "^15.5.25",
     "react": "^19.0.0",
     "react-dom": "^19.0.0"
   },
@@ -33,7 +33,7 @@
     "@types/react-dom": "^19.0.3",
     "@vitejs/plugin-react": "^4.7.0",
     "eslint": "^9.18.0",
-    "eslint-config-next": "^15.5.22",
+    "eslint-config-next": "^15.5.25",
     "jsdom": "^30.0.1",
     "prettier": "^3.4.2",
     "typescript": "^5.7.3",

package/_skeletons/sibling-template/apps/frontend/pnpm-lock.yaml

@@ -24,8 +24,8 @@ importers:
         specifier: ^6.3.12
         version: 6.3.18
       next:
-        specifier: ^15.5.22
-        version: 15.5.22(@babel/core@7.29.7)(@playwright/test@1.62.1)(@types/node@22.20.0)(react-dom@19.2.7(react@19.2.7))(react@19.2.7)
+        specifier: ^15.5.25
+        version: 15.5.25(@babel/core@7.29.7)(@playwright/test@1.62.1)(@types/node@22.20.0)(react-dom@19.2.7(react@19.2.7))(react@19.2.7)
       react:
         specifier: ^19.0.0
         version: 19.2.7
@@ -64,8 +64,8 @@ importers:
         specifier: ^9.18.0
         version: 9.39.4
       eslint-config-next:
-        specifier: ^15.5.22
-        version: 15.5.22(eslint@9.39.4)(typescript@5.9.3)
+        specifier: ^15.5.25
+        version: 15.5.25(eslint@9.39.4)(typescript@5.9.3)
       jsdom:
         specifier: ^30.0.1
         version: 30.0.1
@@ -641,56 +641,56 @@ packages:
       '@emnapi/core': ^1.7.1
       '@emnapi/runtime': ^1.7.1
 
-  '@next/env@15.5.22':
-    resolution: {integrity: sha512-O5BlKb3KtsHkvO0gjjV66PuJnAgCtIEIzwkt50HRAHsQkU1t77eksIXSZV84/WMtZJjWrnDUPKHVRi0D62nSAA==}
+  '@next/env@15.5.25':
+    resolution: {integrity: sha512-42h1lLr07vl4gawALP1hsgRZjHB1xYa58JfUfHwr0f7jG/zhPakh5GHkADHXOC9ZxUvlQFOPIrp7s6qX4DezPQ==}
 
-  '@next/eslint-plugin-next@15.5.22':
-    resolution: {integrity: sha512-SB8PGBmpAiVmOtMOIfObnI2VA3MN3jUGg0iYTh4MO2efxQIV/IL0U8iYOok/8DldCEKARyCOJJix+Vvgzaic/Q==}
+  '@next/eslint-plugin-next@15.5.25':
+    resolution: {integrity: sha512-dAzOqZQCAOgIq5yQpsuMBZcwxK0AtzGqHMQpxNWYLQlvf79rsP3SDwdGPNQC4ySaMSihOQXMO/VXubQ3JWW+3A==}
 
-  '@next/swc-darwin-arm64@15.5.22':
-    resolution: {integrity: sha512-/VISwtffSg8+fVvBbXdglsvruCsdbBC4dG25iU6xascKVqfQKsj/OtjGnOEkIS7pX5GB9e9/r5QprpicsGL3gw==}
+  '@next/swc-darwin-arm64@15.5.25':
+    resolution: {integrity: sha512-w+RR0v/QuApnWEjRGm1z6gcObKwGMb5YPA7V3bzBEVSBpMFUXprer0tS27UxjUcEnqbhL7Zuzohej79B6rYmBg==}
     engines: {node: '>= 10'}
     cpu: [arm64]
     os: [darwin]
 
-  '@next/swc-darwin-x64@15.5.22':
-    resolution: {integrity: sha512-NiA9ve8hbiuhG/Q17a2mZDRVxMTtg3rTOgjLnDaLlE+AEPAQlkkuKrfePEbeOrgYmX0U2KGX4EVEn09hXU5GlQ==}
+  '@next/swc-darwin-x64@15.5.25':
+    resolution: {integrity: sha512-QiGGBUSakt8S1H4Lt9Ehsh6Ja87axiBnQQgysOObvCbI7iUfJnRGntF1P64S4/ijuHFnSB8KLsEddkY3nN26uw==}
     engines: {node: '>= 10'}
     cpu: [x64]
     os: [darwin]
 
-  '@next/swc-linux-arm64-gnu@15.5.22':
-    resolution: {integrity: sha512-vAPa9vltW+UW/KWtjXeSUFgV3wb1x9d/BeyC6WFI6eBpL0D2f70oGwtOp6193mNW3qusrpgBzMQferPf+Zh8Dw==}
+  '@next/swc-linux-arm64-gnu@15.5.25':
+    resolution: {integrity: sha512-ehLos/66zo0d/mJCU5u96a/VDcr01aaUrX0o/i16UdInxz8qPTCDSxGtjk/Lps1sIr1RJFdiX3hxc0fxJo+cPA==}
     engines: {node: '>= 10'}
     cpu: [arm64]
     os: [linux]
 
-  '@next/swc-linux-arm64-musl@15.5.22':
-    resolution: {integrity: sha512-iknK80pWlNDnkdSr13bd8mMuG3Z2oTxODwsZHvuMY7caMk77+rBLdHVWsy8v2EVa3ZojJ/+wJX5fnq8va6Gv8A==}
+  '@next/swc-linux-arm64-musl@15.5.25':
+    resolution: {integrity: sha512-ZVMrqLiJ7DiChgmbkQwFtdhAnUkSH/4p7tB29QY+giATb0Q/XGHNRSKAb/B8XGDHRUaA67NepOW5W8u3ZRJBAA==}
     engines: {node: '>= 10'}
     cpu: [arm64]
     os: [linux]
 
-  '@next/swc-linux-x64-gnu@15.5.22':
-    resolution: {integrity: sha512-penuEdkwU2OOAiS+n4LE8T/VIoCfAI01QcLZTJ2xc3+l4Q22L/DzURocmI2LU1b+8BMQoLAP1Sze3uYAZT05Bg==}
+  '@next/swc-linux-x64-gnu@15.5.25':
+    resolution: {integrity: sha512-UOewtDGkTMJTiODrEdeLZ50yGb59xCZSriNpXkfPMxRRgwDkGc7i8mLWqV5076wEdb+Ca/XN7MhJyM3CupyNyQ==}
     engines: {node: '>= 10'}
     cpu: [x64]
     os: [linux]
 
-  '@next/swc-linux-x64-musl@15.5.22':
-    resolution: {integrity: sha512-ZM0BKJm3FZ+guG6WT6PcyOLtp6paZ5tngcJC/uUKvLW4Y0TQnnVi1+UGdo8Q6Yxp5gaS82pmC1rD/oFlhkWB3g==}
+  '@next/swc-linux-x64-musl@15.5.25':
+    resolution: {integrity: sha512-UBHwA8AhkCZgtRfU1aJpunuAJe/6gZv6jDESQe4p5MjTb5V0YEeJBWCdNqx15Vj3x+5jmauRfeMJSjfQj9HGFQ==}
     engines: {node: '>= 10'}
     cpu: [x64]
     os: [linux]
 
-  '@next/swc-win32-arm64-msvc@15.5.22':
-    resolution: {integrity: sha512-rY/YaumrZaS0//94BnHLF5VSRp0GFUO4GvXNuoCBb0cGSci96yO+p1JaNL2aq9YZAYv9cuZRziV02x5IQH/wjg==}
+  '@next/swc-win32-arm64-msvc@15.5.25':
+    resolution: {integrity: sha512-QcFcPRr16djk5IqK5+e8O80eZfgWzIvVBXfitIq0tQ/uc+eyfdoZ0NmKc0cnbIJyfVwREapKuG97YcxWA9gcpA==}
     engines: {node: '>= 10'}
     cpu: [arm64]
     os: [win32]
 
-  '@next/swc-win32-x64-msvc@15.5.22':
-    resolution: {integrity: sha512-s5IA4cyrbR2XK/5NWcu5dp8CfPBiKME+UhvNperia7uQybEgg5+LIhGMiY37WQE4rcI4owsDcU4IVUjLoTuDkA==}
+  '@next/swc-win32-x64-msvc@15.5.25':
+    resolution: {integrity: sha512-zREeykps3ndWr9egJgvJKqVkkDuaw6Zrrg23cYBos0ygydFkAWYU4+PaPVwXzP1eAYQJe53ShSK45iDM529BOg==}
     engines: {node: '>= 10'}
     cpu: [x64]
     os: [win32]
@@ -1271,9 +1271,6 @@ packages:
     resolution: {integrity: sha512-P8BjAsXvZS+VIDUI11hHCQEv74YT67YUi5JJFNWIqL235sBmjX4+qx9Muvls5ivyNENctx46xQLQ3aTuE7ssaQ==}
     engines: {node: '>=6'}
 
-  caniuse-lite@1.0.30001800:
-    resolution: {integrity: sha512-MMHtuAz9Ys840zAY5F4k6fV5GaivZ9sPk+nz0mY+GYVzRBnYkN0mpqkSR92oWRQ19yQWo4HvBV/FnC16AJX8MA==}
-
   caniuse-lite@1.0.30001810:
     resolution: {integrity: sha512-TITQPUkaz+aVk5GL6NhOdwk1aEaNTSDPsGFWrTuhKGtjTF70jL/Oht2W4c6rXUe5fu7Ie19VIahAXHIIiWWNeg==}
 
@@ -1446,8 +1443,8 @@ packages:
     resolution: {integrity: sha512-TtpcNJ3XAzx3Gq8sWRzJaVajRs0uVxA2YAkdb1jm2YkPz4G6egUFAyA3n5vtEIZefPk5Wa4UXbKuS5fKkJWdgA==}
     engines: {node: '>=10'}
 
-  eslint-config-next@15.5.22:
-    resolution: {integrity: sha512-HhZsB3dvBsYwQpnymZm/Ps9NVaSYiSzDSXkR02CjyOcQutCuea3cF7NxE8i8Drs2+Dgw95WUzK2CMBIHd5YbMw==}
+  eslint-config-next@15.5.25:
+    resolution: {integrity: sha512-hB1oClZzRO3vMAeMmBMch0FHNJ4irH74LvQWDEMHkJtG/Us9+SAsg1f5Pvcw9jz4tc8wSGnvbmF050BRAAIbBg==}
     peerDependencies:
       eslint: ^7.23.0 || ^8.0.0 || ^9.0.0
       typescript: '>=3.3.1'
@@ -1539,6 +1536,7 @@ packages:
   eslint@9.39.4:
     resolution: {integrity: sha512-XoMjdBOwe/esVgEvLmNsD3IRHkm7fbKIUGvrleloJXUZgDHig2IPWNniv+GwjyJXzuNqVjlr5+4yVUZjycJwfQ==}
     engines: {node: ^18.18.0 || ^20.9.0 || >=21.1.0}
+    deprecated: This version is no longer supported. Please see https://eslint.org/version-support for other options.
     hasBin: true
     peerDependencies:
       jiti: '*'
@@ -2001,8 +1999,8 @@ packages:
   natural-compare@1.4.0:
     resolution: {integrity: sha512-OWND8ei3VtNC9h7V60qff3SVobHr996CTwgxubgyQYEpg290h9J0buyECNNJexkFm5sOajh5G116RYA1c8ZMSw==}
 
-  next@15.5.22:
-    resolution: {integrity: sha512-mrtal1sRxO4YrlDS98sDuIvGZivKbFix8w7oAL9ZynfOgc3cADQOQgvwtMooc18Qr8bKzvQAcHwHZ0mbJ7zcfQ==}
+  next@15.5.25:
+    resolution: {integrity: sha512-OMWNulIIqKM2ykvC2qMjIt0IoavB4UB2SCs4iXJ6z6847FvyH8jBmBWcvrF5iuhTu8Przh20Fo/aoszIdqx4PA==}
     engines: {node: ^18.18.0 || ^19.8.0 || >= 20.0.0}
     hasBin: true
     peerDependencies:
@@ -3109,34 +3107,34 @@ snapshots:
       '@tybys/wasm-util': 0.10.3
     optional: true
 
-  '@next/env@15.5.22': {}
+  '@next/env@15.5.25': {}
 
-  '@next/eslint-plugin-next@15.5.22':
+  '@next/eslint-plugin-next@15.5.25':
     dependencies:
       fast-glob: 3.3.1
 
-  '@next/swc-darwin-arm64@15.5.22':
+  '@next/swc-darwin-arm64@15.5.25':
     optional: true
 
-  '@next/swc-darwin-x64@15.5.22':
+  '@next/swc-darwin-x64@15.5.25':
     optional: true
 
-  '@next/swc-linux-arm64-gnu@15.5.22':
+  '@next/swc-linux-arm64-gnu@15.5.25':
     optional: true
 
-  '@next/swc-linux-arm64-musl@15.5.22':
+  '@next/swc-linux-arm64-musl@15.5.25':
     optional: true
 
-  '@next/swc-linux-x64-gnu@15.5.22':
+  '@next/swc-linux-x64-gnu@15.5.25':
     optional: true
 
-  '@next/swc-linux-x64-musl@15.5.22':
+  '@next/swc-linux-x64-musl@15.5.25':
     optional: true
 
-  '@next/swc-win32-arm64-msvc@15.5.22':
+  '@next/swc-win32-arm64-msvc@15.5.25':
     optional: true
 
-  '@next/swc-win32-x64-msvc@15.5.22':
+  '@next/swc-win32-x64-msvc@15.5.25':
     optional: true
 
   '@nodelib/fs.scandir@2.1.5':
@@ -3716,8 +3714,6 @@ snapshots:
 
   callsites@3.1.0: {}
 
-  caniuse-lite@1.0.30001800: {}
-
   caniuse-lite@1.0.30001810: {}
 
   chai@6.2.2: {}
@@ -3974,16 +3970,16 @@ snapshots:
 
   escape-string-regexp@4.0.0: {}
 
-  eslint-config-next@15.5.22(eslint@9.39.4)(typescript@5.9.3):
+  eslint-config-next@15.5.25(eslint@9.39.4)(typescript@5.9.3):
     dependencies:
-      '@next/eslint-plugin-next': 15.5.22
+      '@next/eslint-plugin-next': 15.5.25
       '@rushstack/eslint-patch': 1.16.1
       '@typescript-eslint/eslint-plugin': 8.62.1(@typescript-eslint/parser@8.62.1(eslint@9.39.4)(typescript@5.9.3))(eslint@9.39.4)(typescript@5.9.3)
       '@typescript-eslint/parser': 8.62.1(eslint@9.39.4)(typescript@5.9.3)
       eslint: 9.39.4
       eslint-import-resolver-node: 0.3.10
-      eslint-import-resolver-typescript: 3.10.1(eslint-plugin-import@2.32.0(@typescript-eslint/parser@8.62.1(eslint@9.39.4)(typescript@5.9.3))(eslint@9.39.4))(eslint@9.39.4)
-      eslint-plugin-import: 2.32.0(@typescript-eslint/parser@8.62.1(eslint@9.39.4)(typescript@5.9.3))(eslint-import-resolver-typescript@3.10.1(eslint-plugin-import@2.32.0(@typescript-eslint/parser@8.62.1(eslint@9.39.4)(typescript@5.9.3))(eslint@9.39.4))(eslint@9.39.4))(eslint@9.39.4)
+      eslint-import-resolver-typescript: 3.10.1(eslint-plugin-import@2.32.0)(eslint@9.39.4)
+      eslint-plugin-import: 2.32.0(@typescript-eslint/parser@8.62.1(eslint@9.39.4)(typescript@5.9.3))(eslint-import-resolver-typescript@3.10.1)(eslint@9.39.4)
       eslint-plugin-jsx-a11y: 6.10.2(eslint@9.39.4)
       eslint-plugin-react: 7.37.5(eslint@9.39.4)
       eslint-plugin-react-hooks: 5.2.0(eslint@9.39.4)
@@ -4002,7 +3998,7 @@ snapshots:
     transitivePeerDependencies:
       - supports-color
 
-  eslint-import-resolver-typescript@3.10.1(eslint-plugin-import@2.32.0(@typescript-eslint/parser@8.62.1(eslint@9.39.4)(typescript@5.9.3))(eslint@9.39.4))(eslint@9.39.4):
+  eslint-import-resolver-typescript@3.10.1(eslint-plugin-import@2.32.0)(eslint@9.39.4):
     dependencies:
       '@nolyfill/is-core-module': 1.0.39
       debug: 4.4.3
@@ -4013,22 +4009,22 @@ snapshots:
       tinyglobby: 0.2.17
       unrs-resolver: 1.12.2
     optionalDependencies:
-      eslint-plugin-import: 2.32.0(@typescript-eslint/parser@8.62.1(eslint@9.39.4)(typescript@5.9.3))(eslint-import-resolver-typescript@3.10.1(eslint-plugin-import@2.32.0(@typescript-eslint/parser@8.62.1(eslint@9.39.4)(typescript@5.9.3))(eslint@9.39.4))(eslint@9.39.4))(eslint@9.39.4)
+      eslint-plugin-import: 2.32.0(@typescript-eslint/parser@8.62.1(eslint@9.39.4)(typescript@5.9.3))(eslint-import-resolver-typescript@3.10.1)(eslint@9.39.4)
     transitivePeerDependencies:
       - supports-color
 
-  eslint-module-utils@2.14.0(@typescript-eslint/parser@8.62.1(eslint@9.39.4)(typescript@5.9.3))(eslint-import-resolver-node@0.3.10)(eslint-import-resolver-typescript@3.10.1(eslint-plugin-import@2.32.0(@typescript-eslint/parser@8.62.1(eslint@9.39.4)(typescript@5.9.3))(eslint@9.39.4))(eslint@9.39.4))(eslint@9.39.4):
+  eslint-module-utils@2.14.0(@typescript-eslint/parser@8.62.1(eslint@9.39.4)(typescript@5.9.3))(eslint-import-resolver-node@0.3.10)(eslint-import-resolver-typescript@3.10.1)(eslint@9.39.4):
     dependencies:
       debug: 3.2.7
     optionalDependencies:
       '@typescript-eslint/parser': 8.62.1(eslint@9.39.4)(typescript@5.9.3)
       eslint: 9.39.4
       eslint-import-resolver-node: 0.3.10
-      eslint-import-resolver-typescript: 3.10.1(eslint-plugin-import@2.32.0(@typescript-eslint/parser@8.62.1(eslint@9.39.4)(typescript@5.9.3))(eslint@9.39.4))(eslint@9.39.4)
+      eslint-import-resolver-typescript: 3.10.1(eslint-plugin-import@2.32.0)(eslint@9.39.4)
     transitivePeerDependencies:
       - supports-color
 
-  eslint-plugin-import@2.32.0(@typescript-eslint/parser@8.62.1(eslint@9.39.4)(typescript@5.9.3))(eslint-import-resolver-typescript@3.10.1(eslint-plugin-import@2.32.0(@typescript-eslint/parser@8.62.1(eslint@9.39.4)(typescript@5.9.3))(eslint@9.39.4))(eslint@9.39.4))(eslint@9.39.4):
+  eslint-plugin-import@2.32.0(@typescript-eslint/parser@8.62.1(eslint@9.39.4)(typescript@5.9.3))(eslint-import-resolver-typescript@3.10.1)(eslint@9.39.4):
     dependencies:
       '@rtsao/scc': 1.1.0
       array-includes: 3.1.9
@@ -4039,7 +4035,7 @@ snapshots:
       doctrine: 2.1.0
       eslint: 9.39.4
       eslint-import-resolver-node: 0.3.10
-      eslint-module-utils: 2.14.0(@typescript-eslint/parser@8.62.1(eslint@9.39.4)(typescript@5.9.3))(eslint-import-resolver-node@0.3.10)(eslint-import-resolver-typescript@3.10.1(eslint-plugin-import@2.32.0(@typescript-eslint/parser@8.62.1(eslint@9.39.4)(typescript@5.9.3))(eslint@9.39.4))(eslint@9.39.4))(eslint@9.39.4)
+      eslint-module-utils: 2.14.0(@typescript-eslint/parser@8.62.1(eslint@9.39.4)(typescript@5.9.3))(eslint-import-resolver-node@0.3.10)(eslint-import-resolver-typescript@3.10.1)(eslint@9.39.4)
       hasown: 2.0.4
       is-core-module: 2.16.2
       is-glob: 4.0.3
@@ -4607,24 +4603,24 @@ snapshots:
 
   natural-compare@1.4.0: {}
 
-  next@15.5.22(@babel/core@7.29.7)(@playwright/test@1.62.1)(@types/node@22.20.0)(react-dom@19.2.7(react@19.2.7))(react@19.2.7):
+  next@15.5.25(@babel/core@7.29.7)(@playwright/test@1.62.1)(@types/node@22.20.0)(react-dom@19.2.7(react@19.2.7))(react@19.2.7):
     dependencies:
-      '@next/env': 15.5.22
+      '@next/env': 15.5.25
       '@swc/helpers': 0.5.15
-      caniuse-lite: 1.0.30001800
+      caniuse-lite: 1.0.30001810
       postcss: 8.5.23
       react: 19.2.7
       react-dom: 19.2.7(react@19.2.7)
       styled-jsx: 5.1.6(@babel/core@7.29.7)(react@19.2.7)
     optionalDependencies:
-      '@next/swc-darwin-arm64': 15.5.22
-      '@next/swc-darwin-x64': 15.5.22
-      '@next/swc-linux-arm64-gnu': 15.5.22
-      '@next/swc-linux-arm64-musl': 15.5.22
-      '@next/swc-linux-x64-gnu': 15.5.22
-      '@next/swc-linux-x64-musl': 15.5.22
-      '@next/swc-win32-arm64-msvc': 15.5.22
-      '@next/swc-win32-x64-msvc': 15.5.22
+      '@next/swc-darwin-arm64': 15.5.25
+      '@next/swc-darwin-x64': 15.5.25
+      '@next/swc-linux-arm64-gnu': 15.5.25
+      '@next/swc-linux-arm64-musl': 15.5.25
+      '@next/swc-linux-x64-gnu': 15.5.25
+      '@next/swc-linux-x64-musl': 15.5.25
+      '@next/swc-win32-arm64-msvc': 15.5.25
+      '@next/swc-win32-x64-msvc': 15.5.25
       '@playwright/test': 1.62.1
       sharp: 0.35.3(@types/node@22.20.0)
     transitivePeerDependencies:

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@biffo/cli",
-  "version": "0.313.3",
+  "version": "0.314.0",
   "description": "Biffo project scaffolding CLI",
   "license": "MIT",
   "type": "module",