@bleedingdev/modern-js-create 3.2.0-ultramodern.103 → 3.2.0-ultramodern.105

package/dist/types/ultramodern-package-source.d.ts

@@ -0,0 +1,28 @@
+export declare const WORKSPACE_PACKAGE_VERSION = "workspace:*";
+export declare const BLEEDINGDEV_CREATE_PACKAGE = "@bleedingdev/modern-js-create";
+export declare const BLEEDINGDEV_PACKAGE_SCOPE = "bleedingdev";
+export declare const BLEEDINGDEV_PACKAGE_NAME_PREFIX = "modern-js-";
+export declare const BLEEDINGDEV_FRAMEWORK_VERSION_ENV = "MODERN_CREATE_ULTRAMODERN_FRAMEWORK_VERSION";
+export declare const ULTRAMODERN_SINGLE_APP_MODERN_PACKAGES: readonly ['@modern-js/runtime', '@modern-js/app-tools', '@modern-js/tsconfig', '@modern-js/plugin-i18n', '@modern-js/plugin-tanstack', '@modern-js/plugin-bff', '@modern-js/adapter-rstest'];
+export declare const ULTRAMODERN_WORKSPACE_MODERN_PACKAGES: readonly ['@modern-js/app-tools', '@modern-js/plugin-bff', '@modern-js/plugin-i18n', '@modern-js/plugin-tanstack', '@modern-js/runtime'];
+export type UltramodernPackageSourceStrategy = 'workspace' | 'install';
+export type ResolvedUltramodernPackageSource = {
+    strategy: UltramodernPackageSourceStrategy;
+    modernPackageVersion: string;
+    registry?: string;
+    aliasScope?: string;
+    aliasPackageNamePrefix?: string;
+};
+export type UltramodernModernPackagesMetadata = {
+    packages: string[];
+    specifier: string;
+    registry?: string;
+    aliases?: Record<string, string>;
+};
+export declare function modernPackageVersion(packageSource: ResolvedUltramodernPackageSource): string;
+export declare function modernAliasPackageName(packageName: string, packageSource: ResolvedUltramodernPackageSource): string;
+export declare function modernPackageSpecifier(packageName: string, packageSource: ResolvedUltramodernPackageSource): string;
+export declare function modernPackageAliases(packageNames: readonly string[], packageSource: ResolvedUltramodernPackageSource): Record<string, string> | undefined;
+export declare function createModernPackagesMetadata(packageNames: readonly string[], packageSource: ResolvedUltramodernPackageSource, options?: {
+    includeAliases?: boolean;
+}): UltramodernModernPackagesMetadata;

package/dist/types/ultramodern-workspace.d.ts

@@ -1,4 +1,4 @@
-type UltramodernPackageSourceStrategy = 'workspace' | 'install';
+import { type UltramodernPackageSourceStrategy } from './ultramodern-package-source';
 export type UltramodernWorkspaceOptions = {
     targetDir: string;
     packageName: string;
@@ -28,4 +28,3 @@ export declare const ultramodernWorkspaceVersions: {
     tailwind: string;
     tailwindPostcss: string;
 };
-export {};

package/package.json

@@ -21,7 +21,7 @@
   "engines": {
     "node": ">=20"
   },
-  "version": "3.2.0-ultramodern.103",
+  "version": "3.2.0-ultramodern.105",
   "types": "./dist/types/index.d.ts",
   "main": "./dist/index.js",
   "bin": {
@@ -39,9 +39,9 @@
   "devDependencies": {
     "@rslib/core": "0.21.5",
     "@types/node": "^25.9.1",
-    "@typescript/native-preview": "7.0.0-dev.20260527.2",
+    "@typescript/native-preview": "7.0.0-dev.20260606.1",
     "tsx": "^4.22.3",
-    "@modern-js/i18n-utils": "npm:@bleedingdev/modern-js-i18n-utils@3.2.0-ultramodern.103"
+    "@modern-js/i18n-utils": "npm:@bleedingdev/modern-js-i18n-utils@3.2.0-ultramodern.105"
   },
   "publishConfig": {
     "registry": "https://registry.npmjs.org/",
@@ -54,6 +54,6 @@
     "start": "node ./dist/index.js"
   },
   "ultramodern": {
-    "frameworkVersion": "3.2.0-ultramodern.103"
+    "frameworkVersion": "3.2.0-ultramodern.105"
   }
 }

package/template/modern.config.ts.handlebars

@@ -39,7 +39,13 @@ export default defineConfig(
 {{/if}}        runtimeFramework: '{{bffRuntime}}',
       },
 
-{{/if}}      plugins: [
+{{/if}}      html: {
+        meta: {
+          viewport: 'width=device-width, initial-scale=1.0, viewport-fit=cover',
+        },
+        title: 'UltraModern.js Starter',
+      },
+      plugins: [
         appTools(),
         i18nPlugin({
           localeDetection: {
@@ -53,12 +59,6 @@ export default defineConfig(
 {{/if}}{{#if enableBff}}
         bffPlugin(),
 {{/if}}      ],
-      html: {
-        title: 'UltraModern.js Starter',
-        meta: {
-          viewport: 'width=device-width, initial-scale=1.0, viewport-fit=cover',
-        },
-      },
       source: {
         globalVars: {
           ULTRAMODERN_SITE_URL: siteUrl,
@@ -70,8 +70,8 @@ export default defineConfig(
       enableBffRequestId,
       enableModuleFederationSSR,
       enableTelemetryExporters,
-      telemetryFailLoudStartup,
       ...(typeof otlpEndpoint === 'string' ? { otlpEndpoint } : {}),
+      telemetryFailLoudStartup,
       ...(typeof victoriaMetricsEndpoint === 'string' ? { victoriaMetricsEndpoint } : {}),
     },
   ),

package/template/package.json.handlebars

@@ -30,34 +30,34 @@
     "@modern-js/runtime": "{{runtimeVersion}}",
 {{#if isTanstackRouter}}    "@tanstack/react-router": "{{tanstackRouterVersion}}",
 {{/if}}
-    "i18next": "26.2.0",
-    "react": "^19.2.6",
-    "react-dom": "^19.2.6",
-    "react-i18next": "17.0.8"
+    "i18next": "{{i18nextVersion}}",
+    "react": "{{reactVersion}}",
+    "react-dom": "{{reactDomVersion}}",
+    "react-i18next": "{{reactI18nextVersion}}"
   },
   "devDependencies": {
-    "@effect/tsgo": "0.13.0",
+    "@effect/tsgo": "{{effectTsgoVersion}}",
     "@modern-js/adapter-rstest": "{{adapterRstestVersion}}",
     "@modern-js/app-tools": "{{appToolsVersion}}",
 {{#if enableBff}}    "@modern-js/plugin-bff": "{{pluginBffVersion}}",
 {{/if}}    "@modern-js/tsconfig": "{{tsconfigVersion}}",
-    "@rstest/core": "0.10.3",
+    "@rstest/core": "{{rstestCoreVersion}}",
 {{#if enableTailwind}}
     "@tailwindcss/postcss": "^{{tailwindPostcssVersion}}",
 {{/if}}
     "@types/node": "^20",
-    "@types/react": "^19.1.8",
-    "@types/react-dom": "^19.1.6",
-    "@typescript/native-preview": "7.0.0-dev.20260527.2",
-    "happy-dom": "^20.9.0",
+    "@types/react": "{{typesReactVersion}}",
+    "@types/react-dom": "{{typesReactDomVersion}}",
+    "@typescript/native-preview": "{{typescriptNativePreviewVersion}}",
+    "happy-dom": "{{happyDomVersion}}",
 {{#unless isSubproject}}
     "lefthook": "^2.1.9",
-    "oxfmt": "0.51.0",
-    "oxlint": "1.66.0",
-{{/unless}}{{#if enableTailwind}}    "postcss": "^8.5.6",
+    "oxfmt": "{{oxfmtVersion}}",
+    "oxlint": "{{oxlintVersion}}",
+{{/unless}}{{#if enableTailwind}}    "postcss": "{{postcssVersion}}",
 {{/if}}    "rimraf": "^6.1.3"{{#if enableTailwind}},
     "tailwindcss": "^{{tailwindVersion}}"{{/if}}{{#unless isSubproject}},
-    "ultracite": "7.7.0"{{/unless}}
+    "ultracite": "{{ultraciteVersion}}"{{/unless}}
   },
   "engines": {
     "node": ">=20",

package/template/pnpm-workspace.yaml

@@ -3,6 +3,11 @@ minimumReleaseAgeStrict: true
 minimumReleaseAgeIgnoreMissingTime: false
 minimumReleaseAgeExclude:
   - '@bleedingdev/modern-js-*'
+  - '@tanstack/react-router'
+  - '@tanstack/router-core'
+  - '@typescript/native-preview'
+  - '@typescript/native-preview-*'
+  - '@types/react'
 trustPolicy: no-downgrade
 trustPolicyIgnoreAfter: 1440
 blockExoticSubdeps: true

package/template/scripts/check-i18n-strings.mjs

@@ -7,6 +7,97 @@ const ignoredDirectories = new Set(['.modern', '.modernjs', 'dist', 'node_module
 const visibleAttributePattern =
   /\s(?:aria-label|alt|placeholder|title)=["']([^"']*[A-Za-z][^"']*)["']/gu;
 const jsxTextPattern = />([^<>{}]*[A-Za-z][^<>{}]*)</gu;
+const jsxIntrinsicTags = new Set([
+  'a',
+  'abbr',
+  'address',
+  'area',
+  'article',
+  'aside',
+  'audio',
+  'b',
+  'blockquote',
+  'body',
+  'br',
+  'button',
+  'canvas',
+  'caption',
+  'cite',
+  'code',
+  'col',
+  'colgroup',
+  'data',
+  'datalist',
+  'dd',
+  'del',
+  'details',
+  'dfn',
+  'dialog',
+  'div',
+  'dl',
+  'dt',
+  'em',
+  'fieldset',
+  'figcaption',
+  'figure',
+  'footer',
+  'form',
+  'h1',
+  'h2',
+  'h3',
+  'h4',
+  'h5',
+  'h6',
+  'head',
+  'header',
+  'hr',
+  'html',
+  'i',
+  'iframe',
+  'img',
+  'input',
+  'label',
+  'legend',
+  'li',
+  'link',
+  'main',
+  'mark',
+  'menu',
+  'meta',
+  'meter',
+  'nav',
+  'ol',
+  'option',
+  'p',
+  'picture',
+  'pre',
+  'progress',
+  'q',
+  'script',
+  'section',
+  'select',
+  'small',
+  'source',
+  'span',
+  'strong',
+  'style',
+  'summary',
+  'svg',
+  'table',
+  'tbody',
+  'td',
+  'template',
+  'textarea',
+  'tfoot',
+  'th',
+  'thead',
+  'time',
+  'title',
+  'tr',
+  'u',
+  'ul',
+  'video',
+]);
 
 const collectFiles = (directory) => {
   if (!fs.existsSync(directory)) {
@@ -37,6 +128,24 @@ const isCodeElementText = (content, index) => {
   }
   return /^<code(?:\s|>)/u.test(content.slice(tagStart, index));
 };
+const isJsxTagEnd = (content, index) => {
+  const tagStart = content.lastIndexOf('<', index);
+  if (tagStart === -1 || content.slice(tagStart + 1, index).includes('<')) {
+    return false;
+  }
+  const match = content
+    .slice(tagStart, index + 1)
+    .match(/^<\/?\s*([A-Za-z][\w:.-]*)\b[^<>]*>$/u);
+  if (!match) {
+    return false;
+  }
+  const [, tagName] = match;
+  return (
+    /^[A-Z]/u.test(tagName) ||
+    tagName.includes('-') ||
+    jsxIntrinsicTags.has(tagName)
+  );
+};
 const isIgnoredLine = (content, index) => {
   const lineStart = content.lastIndexOf('\n', index) + 1;
   const lineEnd = content.indexOf('\n', index);
@@ -54,20 +163,23 @@ const violations = [];
 for (const filePath of scanRoots.flatMap(collectFiles)) {
   const content = fs.readFileSync(filePath, 'utf-8');
   for (const match of content.matchAll(visibleAttributePattern)) {
+    const [, visibleText] = match;
     if (!isIgnoredLine(content, match.index ?? 0)) {
       violations.push({
         filePath,
         line: lineNumberForIndex(content, match.index ?? 0),
-        text: match[1].trim(),
+        text: visibleText.trim(),
       });
     }
   }
 
   for (const match of content.matchAll(jsxTextPattern)) {
-    const text = match[1].replaceAll(/\s+/gu, ' ').trim();
+    const [, jsxText] = match;
+    const text = jsxText.replaceAll(/\s+/gu, ' ').trim();
     if (
       text &&
       !isIgnoredLine(content, match.index ?? 0) &&
+      isJsxTagEnd(content, match.index ?? 0) &&
       !isCodeElementText(content, match.index ?? 0)
     ) {
       violations.push({

package/template/scripts/validate-ultramodern.mjs.handlebars

@@ -422,11 +422,19 @@ if (readPnpmConfig('minimumReleaseAgeIgnoreMissingTime') !== false) {
   console.error('pnpm minimumReleaseAgeIgnoreMissingTime must be false');
   process.exit(1);
 }
+const expectedMinimumReleaseAgeExcludes = [
+  '@bleedingdev/modern-js-*',
+  '@tanstack/react-router',
+  '@tanstack/router-core',
+  '@typescript/native-preview',
+  '@typescript/native-preview-*',
+  '@types/react',
+];
 if (
   JSON.stringify(readPnpmConfig('minimumReleaseAgeExclude')) !==
-  JSON.stringify(['@bleedingdev/modern-js-*'])
+  JSON.stringify(expectedMinimumReleaseAgeExcludes)
 ) {
-  console.error('pnpm minimumReleaseAgeExclude must allow just-published BleedingDev Modern cohorts only');
+  console.error('pnpm minimumReleaseAgeExclude must allow only approved latest-lane package cohorts');
   process.exit(1);
 }
 if (readPnpmConfig('trustPolicy') !== 'no-downgrade') {
@@ -481,6 +489,11 @@ if (
   process.exit(1);
 }
 
+if (packageJson.modernjs?.packageSource?.strategy !== packageSource.strategy) {
+  console.error('package.json package source strategy must match package source metadata');
+  process.exit(1);
+}
+
 if (packageSource.schemaVersion !== 1) {
   console.error('Package source metadata must use schemaVersion 1');
   process.exit(1);
@@ -496,21 +509,33 @@ if (packageSource.strategy !== 'workspace' && packageSource.strategy !== 'instal
   process.exit(1);
 }
 
-const expectedModernPackages = [
-  '@modern-js/runtime',
-  '@modern-js/app-tools',
-  '@modern-js/tsconfig',
-  '@modern-js/plugin-i18n',
-  '@modern-js/plugin-tanstack',
-  '@modern-js/plugin-bff',
-  '@modern-js/adapter-rstest',
-];
+const declaredModernPackages = packageSource.modernPackages?.packages;
+if (!Array.isArray(declaredModernPackages) || declaredModernPackages.length === 0) {
+  console.error('Package source metadata must declare the generated Modern package cohort');
+  process.exit(1);
+}
 
-for (const packageName of expectedModernPackages) {
-  if (!packageSource.modernPackages?.packages?.includes(packageName)) {
-    console.error(`Package source metadata must include ${packageName}`);
-    process.exit(1);
-  }
+const invalidModernPackages = declaredModernPackages.filter(
+  (packageName) => typeof packageName !== 'string' || !packageName.startsWith('@modern-js/'),
+);
+if (invalidModernPackages.length > 0) {
+  console.error(`Package source metadata contains invalid Modern packages: ${invalidModernPackages.join(', ')}`);
+  process.exit(1);
+}
+
+const packageJsonModernDependencies = [
+  ...new Set(
+    ['dependencies', 'devDependencies']
+      .flatMap((section) => Object.keys(packageJson[section] ?? {}))
+      .filter((packageName) => packageName.startsWith('@modern-js/')),
+  ),
+];
+const missingMetadataPackages = packageJsonModernDependencies.filter(
+  (packageName) => !declaredModernPackages.includes(packageName),
+);
+if (missingMetadataPackages.length > 0) {
+  console.error(`Package source metadata must include package.json Modern dependencies: ${missingMetadataPackages.join(', ')}`);
+  process.exit(1);
 }
 
 const expectedModernSpecifier = packageSource.modernPackages?.specifier;
@@ -535,32 +560,15 @@ const expectedModernDependency = (packageName) => {
     : expectedModernSpecifier;
 };
 
-for (const packageName of [
-  '@modern-js/runtime',
-  '@modern-js/plugin-i18n',
-  '@modern-js/plugin-tanstack',
-]) {
-  if (
-    packageJson.dependencies?.[packageName] &&
-    packageJson.dependencies[packageName] !== expectedModernDependency(packageName)
-  ) {
-    console.error(`Dependency ${packageName} must match package source metadata`);
-    process.exit(1);
-  }
-}
-
-for (const packageName of [
-  '@modern-js/app-tools',
-  '@modern-js/adapter-rstest',
-  '@modern-js/tsconfig',
-  '@modern-js/plugin-bff',
-]) {
-  if (
-    packageJson.devDependencies?.[packageName] &&
-    packageJson.devDependencies[packageName] !== expectedModernDependency(packageName)
-  ) {
-    console.error(`Dev dependency ${packageName} must match package source metadata`);
-    process.exit(1);
+for (const section of ['dependencies', 'devDependencies']) {
+  for (const packageName of declaredModernPackages) {
+    if (
+      packageJson[section]?.[packageName] &&
+      packageJson[section][packageName] !== expectedModernDependency(packageName)
+    ) {
+      console.error(`${section}.${packageName} must match package source metadata`);
+      process.exit(1);
+    }
   }
 }
 

package/template/tests/ultramodern.contract.test.ts.handlebars

@@ -89,6 +89,7 @@ describe('generated UltraModern contract', () => {
       modernjs?: {
         packageSource?: {
           config?: string;
+          strategy?: string;
         };
         preset?: string;
       };
@@ -105,15 +106,20 @@ describe('generated UltraModern contract', () => {
     expect(packageJson.modernjs?.packageSource?.config).toBe(
       './.modernjs/ultramodern-package-source.json',
     );
-    expect(packageSource.strategy).toMatch(/^(workspace|install)$/u);
-    expect(packageSource.modernPackages?.packages).toContain(
-      '@modern-js/runtime',
-    );
-    expect(packageSource.modernPackages?.packages).toContain(
-      '@modern-js/app-tools',
+    expect(packageJson.modernjs?.packageSource?.strategy).toBe(
+      packageSource.strategy,
     );
-    expect(packageSource.modernPackages?.packages).toContain(
-      '@modern-js/adapter-rstest',
+    expect(packageSource.strategy).toMatch(/^(workspace|install)$/u);
+    const generatedModernDependencies = [
+      ...new Set(
+        (['dependencies', 'devDependencies'] as const).flatMap(section =>
+          Object.keys(packageJson[section] ?? {}),
+        ),
+      ),
+    ].filter(packageName => packageName.startsWith('@modern-js/'));
+    expect(packageSource.modernPackages?.packages?.length).toBeGreaterThan(0);
+    expect(packageSource.modernPackages?.packages).toEqual(
+      expect.arrayContaining(generatedModernDependencies),
     );
     expect(packageSource.modernPackages?.specifier).toBeTruthy();
     expect(

package/template-workspace/README.md.handlebars

@@ -19,9 +19,18 @@ pnpm dlx @bleedingdev/modern-js-create payments --vertical
 ```
 
 Each added vertical owns its UI/routes, browser-safe Module Federation exposes,
-localized route metadata, CSS prefix, Effect BFF handlers, local API contract,
-and typed client surface. Server handlers and Effect client/contract modules
-stay out of browser exposes.
+private-first route metadata, localized URLs, public-route opt-ins, CSS prefix,
+Effect BFF handlers, local API contract, and typed client surface. Server
+handlers and Effect client/contract modules stay out of browser exposes.
+
+## Private-First Public Surfaces
+
+Generated app routes are private and non-indexable by default. Private app,
+auth, tenant, dashboard, and internal routes publish no discovery output unless
+route metadata explicitly marks them `public && indexable`. The default scaffold
+therefore emits only a disallowing `robots.txt`; sitemap, web manifest,
+`llms.txt`, API catalog, security.txt, and JSON-LD output stay omitted until a
+safe public route or public docs/help/product surface exists.
 
 Run the scaffold validator before adding business code and after every
 `--vertical` mutation:

package/template-workspace/pnpm-workspace.yaml

@@ -8,6 +8,11 @@ minimumReleaseAgeStrict: true
 minimumReleaseAgeIgnoreMissingTime: false
 minimumReleaseAgeExclude:
   - '@bleedingdev/modern-js-*'
+  - '@tanstack/react-router'
+  - '@tanstack/router-core'
+  - '@typescript/native-preview'
+  - '@typescript/native-preview-*'
+  - '@types/react'
 trustPolicy: no-downgrade
 trustPolicyIgnoreAfter: 1440
 blockExoticSubdeps: true
@@ -22,7 +27,7 @@ peerDependencyRules:
     typescript: '>=6.0.0'
 
 overrides:
-  '@tanstack/react-router': 1.170.11
+  '@tanstack/react-router': 1.170.15
   node-fetch: '^3.3.2'
 
 allowBuilds:

package/template-workspace/scripts/setup-agent-reference-repos.mjs

@@ -122,6 +122,12 @@ function porcelainStatus() {
   return run('git', ['status', '--porcelain'], { timeout: 30000 });
 }
 
+function commitInstallerChanges(message) {
+  run('git', ['commit', '--no-verify', '-m', message], {
+    timeout: 120000,
+  });
+}
+
 function ensureGitRepository() {
   if (!isGitWorkTree()) {
     if (checkOnly) {
@@ -139,9 +145,7 @@ function ensureGitRepository() {
     }
     log('creating initial workspace commit before adding reference subtrees');
     run('git', ['add', '-A'], { timeout: 30000 });
-    run('git', ['commit', '-m', 'Initialize UltraModern workspace'], {
-      timeout: 120000,
-    });
+    commitInstallerChanges('Initialize UltraModern workspace');
     return true;
   }
 
@@ -311,9 +315,7 @@ function commitManifestIfChanged() {
     return;
   }
   run('git', ['add', manifestPath], { timeout: 30000 });
-  run('git', ['commit', '-m', 'Record agent reference repo manifest'], {
-    timeout: 120000,
-  });
+  commitInstallerChanges('Record agent reference repo manifest');
 }
 
 function main() {