@bleedingdev/modern-js-create 3.2.0-ultramodern.6 → 3.2.0-ultramodern.60

package/dist/types/locale/en.d.ts

@@ -35,6 +35,7 @@ export declare const EN_LOCALE: {
         optionUltramodernPackageSource: string;
         optionUltramodernPackageScope: string;
         optionUltramodernPackageNamePrefix: string;
+        optionVertical: string;
         optionSub: string;
         examples: string;
         example1: string;
@@ -47,6 +48,8 @@ export declare const EN_LOCALE: {
         example8: string;
         example9: string;
         example10: string;
+        example11: string;
+        example12: string;
         moreInfo: string;
     };
     version: {

package/dist/types/locale/zh.d.ts

@@ -35,6 +35,7 @@ export declare const ZH_LOCALE: {
         optionUltramodernPackageSource: string;
         optionUltramodernPackageScope: string;
         optionUltramodernPackageNamePrefix: string;
+        optionVertical: string;
         optionSub: string;
         examples: string;
         example1: string;
@@ -47,6 +48,8 @@ export declare const ZH_LOCALE: {
         example8: string;
         example9: string;
         example10: string;
+        example11: string;
+        example12: string;
         moreInfo: string;
     };
     version: {

package/dist/types/ultramodern-workspace.d.ts

@@ -3,6 +3,7 @@ export type UltramodernWorkspaceOptions = {
     targetDir: string;
     packageName: string;
     modernVersion: string;
+    enableTailwind?: boolean;
     packageSource?: {
         strategy?: UltramodernPackageSourceStrategy;
         modernPackageVersion?: string;
@@ -11,10 +12,20 @@ export type UltramodernWorkspaceOptions = {
         aliasPackageNamePrefix?: string;
     };
 };
+export type AddUltramodernVerticalOptions = {
+    workspaceRoot: string;
+    name: string;
+    modernVersion: string;
+    enableTailwind?: boolean;
+    packageSource?: UltramodernWorkspaceOptions['packageSource'];
+};
 export declare const ULTRAMODERN_WORKSPACE_FLAG = "--ultramodern-workspace";
+export declare function addUltramodernVertical(options: AddUltramodernVerticalOptions): void;
 export declare function generateUltramodernWorkspace(options: UltramodernWorkspaceOptions): void;
 export declare const ultramodernWorkspaceVersions: {
     tanstackRouter: string;
     moduleFederation: string;
+    tailwind: string;
+    tailwindPostcss: string;
 };
 export {};

package/package.json

@@ -21,7 +21,7 @@
   "engines": {
     "node": ">=20"
   },
-  "version": "3.2.0-ultramodern.6",
+  "version": "3.2.0-ultramodern.60",
   "types": "./dist/types/index.d.ts",
   "main": "./dist/index.js",
   "bin": {
@@ -38,10 +38,10 @@
   ],
   "devDependencies": {
     "@rslib/core": "0.21.5",
-    "@types/node": "^25.8.0",
-    "@typescript/native-preview": "7.0.0-dev.20260516.1",
-    "tsx": "^4.22.0",
-    "@modern-js/i18n-utils": "npm:@bleedingdev/modern-js-i18n-utils@3.2.0-ultramodern.5"
+    "@types/node": "^25.9.1",
+    "@typescript/native-preview": "7.0.0-dev.20260527.2",
+    "tsx": "^4.22.3",
+    "@modern-js/i18n-utils": "npm:@bleedingdev/modern-js-i18n-utils@3.2.0-ultramodern.59"
   },
   "publishConfig": {
     "registry": "https://registry.npmjs.org/",
@@ -54,6 +54,6 @@
     "start": "node ./dist/index.js"
   },
   "ultramodern": {
-    "frameworkVersion": "3.2.0-ultramodern.5"
+    "frameworkVersion": "3.2.0-ultramodern.59"
   }
 }

package/template/.agents/skills-lock.json

@@ -0,0 +1,34 @@
+{
+  "schemaVersion": 2,
+  "installDir": ".agents/skills",
+  "sources": [
+    {
+      "id": "techsiocz-private",
+      "visibility": "private",
+      "repository": "https://github.com/TechsioCZ/skills",
+      "install": "clone-if-authorized",
+      "baseline": [
+        {
+          "name": "plan-graph",
+          "reason": "Build and validate DAGs from .plan.md files"
+        },
+        {
+          "name": "dag",
+          "reason": "Inspect current plan frontiers and blocked lanes"
+        },
+        {
+          "name": "subagent-graph",
+          "reason": "Design dependency-aware multi-agent launch graphs"
+        },
+        {
+          "name": "helm",
+          "reason": "Steer already-running multi-agent work"
+        },
+        {
+          "name": "debugger-mode",
+          "reason": "Run hypothesis-driven debugging with runtime evidence"
+        }
+      ]
+    }
+  ]
+}

package/template/.codex/hooks.json

@@ -0,0 +1,16 @@
+{
+  "Stop": [
+    {
+      "command": "pnpm format && pnpm lint:fix && pnpm ultramodern:check",
+      "timeout": 600000,
+      "statusMessage": "Running UltraModern quality gates"
+    }
+  ],
+  "SubagentStop": [
+    {
+      "command": "pnpm format && pnpm lint:fix && pnpm ultramodern:check",
+      "timeout": 600000,
+      "statusMessage": "Running UltraModern quality gates"
+    }
+  ]
+}

package/template/.github/renovate.json

@@ -0,0 +1,53 @@
+{
+  "$schema": "https://docs.renovatebot.com/renovate-schema.json",
+  "extends": [
+    "config:recommended",
+    "helpers:pinGitHubActionDigests"
+  ],
+  "dependencyDashboard": true,
+  "minimumReleaseAge": "1 day",
+  "prConcurrentLimit": 5,
+  "prHourlyLimit": 2,
+  "rangeStrategy": "bump",
+  "schedule": [
+    "before 5am on monday"
+  ],
+  "timezone": "Etc/UTC",
+  "packageRules": [
+    {
+      "matchManagers": [
+        "github-actions"
+      ],
+      "groupName": "github-actions",
+      "labels": [
+        "dependencies",
+        "github-actions",
+        "security"
+      ]
+    },
+    {
+      "matchManagers": [
+        "npm"
+      ],
+      "matchUpdateTypes": [
+        "patch",
+        "minor"
+      ],
+      "groupName": "npm minor and patch updates",
+      "labels": [
+        "dependencies",
+        "npm"
+      ]
+    },
+    {
+      "matchUpdateTypes": [
+        "major"
+      ],
+      "dependencyDashboardApproval": true,
+      "labels": [
+        "dependencies",
+        "major"
+      ]
+    }
+  ]
+}

package/template/.github/workflows/ultramodern-gates.yml.handlebars

@@ -4,27 +4,51 @@ on:
   push:
   pull_request:
 
+permissions:
+  contents: read
+
+defaults:
+  run:
+    shell: bash
+
+env:
+  FORCE_JAVASCRIPT_ACTIONS_TO_NODE24: true
+
+concurrency:
+  group: ultramodern-gates-${{ github.workflow }}-${{ github.ref }}
+  cancel-in-progress: true
+
 jobs:
   ultramodern-gates:
     runs-on: ubuntu-latest
+    timeout-minutes: 20
     steps:
-      - name: Checkout
-        uses: actions/checkout@v4
+      - name: Harden Runner
+        uses: step-security/harden-runner@ab7a9404c0f3da075243ca237b5fac12c98deaa5 # v2
+        with:
+          egress-policy: audit
 
-      - name: Setup pnpm
-        uses: pnpm/action-setup@v4
+      - name: Checkout
+        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
+        with:
+          fetch-depth: 1
+          persist-credentials: false
 
       - name: Setup Node.js
-        uses: actions/setup-node@v4
+        uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6.4.0
         with:
-          node-version: 20
-          cache: pnpm
+          node-version: 24
+
+      - name: Setup mise
+        uses: jdx/mise-action@5ac50f778e26fac95da98d50503682459e86d566 # v3.2.0
 
       - name: Install Dependencies
-        run: pnpm install
+        run: mise exec -- pnpm install --frozen-lockfile
 
       - name: Validate Ultramodern Contract
-        run: pnpm run ultramodern:check
+        run: mise exec -- pnpm run ultramodern:check
 
       - name: Build
-        run: pnpm run build
+        env:
+          MODERN_PUBLIC_SITE_URL: http://localhost:8080
+        run: mise exec -- pnpm run build

package/template/.mise.toml.handlebars

@@ -0,0 +1,2 @@
+[tools]
+pnpm = "{{pnpmVersion}}"

package/template/AGENTS.md

@@ -0,0 +1,23 @@
+# UltraModern Agent Contract
+
+This project is generated for Codex-first UltraModern.js work.
+
+## Quality Gates
+
+- `pnpm lint` runs Oxlint with the Ultracite preset.
+- `pnpm format` runs oxfmt.
+- `pnpm typecheck` runs effect-tsgo as the TypeScript checker.
+- `pnpm i18n:check` rejects hardcoded user-visible JSX text.
+- `pnpm ultramodern:check` verifies the generated contract.
+- Generated Codex stop hooks and subagent-stop hooks run `pnpm format && pnpm lint:fix && pnpm ultramodern:check`.
+- `postinstall` installs `lefthook` when the app is inside a Git worktree. Generated `lefthook.yml` runs `pnpm format`, `pnpm lint:fix`, and `pnpm ultramodern:check` on pre-commit; pre-push runs `pnpm ultramodern:check`.
+
+## Internationalization
+
+Runtime i18n is enabled by default. Agents must put user-visible UI copy in `config/public/locales/<lang>/translation.json` and render it through `react-i18next` or `@modern-js/plugin-i18n/runtime`. Do not add hardcoded JSX text, `aria-label`, `title`, `alt`, or `placeholder` strings unless the value is a non-translatable technical token.
+
+Routes are locale-prefixed by default through `localePathRedirect: true`. Keep localized pages under `src/routes/[lang]`, use links for language switching, and preserve canonical plus `hreflang` metadata. Production builds fail unless `MODERN_PUBLIC_SITE_URL` is set, so deployed canonical URLs always use the production origin.
+
+## Private Skills
+
+Private orchestration skills are installed automatically during `pnpm install` when the current developer is authorized for `TechsioCZ/skills`. The installer clones that private repository and copies only the allowlisted skills from `.agents/skills-lock.json`; unauthorized developers get a warning and can continue with the public contract.

package/template/README.md

@@ -1,10 +1,16 @@
 # UltraModern.js 3.0 Starter
 
+This generated app is a simple UltraModern.js starting point. It gives one app
+with localized routes, production URL metadata, optional BFF support, Rstest,
+Oxlint, oxfmt, and a local contract check. You can build a useful product here
+without deleting fake product areas, shell packages, or deployment topology.
+
 ## Setup
 
 Install the dependencies:
 
 ```bash
+mise install
 pnpm install
 ```
 
@@ -19,61 +25,81 @@ pnpm dev
 Build the app for production:
 
 ```bash
-pnpm build
+MODERN_PUBLIC_SITE_URL=https://example.com pnpm build
 ```
 
-Validate the generated Ultramodern preset contract locally:
+Preview the production build locally:
 
 ```bash
-pnpm run ultramodern:check
+pnpm serve
 ```
 
-The generated preset defaults are opt-out. Disable specific contracts via env vars:
+Run the local gates before treating the scaffold as ready:
 
 ```bash
-MODERN_BASELINE_ENABLE_MF_SSR=false
-MODERN_BASELINE_ENABLE_BFF_REQUEST_ID=false
-MODERN_BASELINE_ENABLE_TELEMETRY_EXPORTERS=false
+pnpm run ultramodern:check
+MODERN_PUBLIC_SITE_URL=https://example.com pnpm run build
 ```
 
-The generated starter also includes `.github/workflows/ultramodern-gates.yml`.
-That workflow runs `pnpm run ultramodern:check` and `pnpm run build` on every
-push and pull request so the `presetUltramodern(...)` contract stays explicit.
+## What You Get
 
-## Micro Vertical Workspaces
+The default app is intentionally monolith-friendly:
 
-Inside a Micro Vertical workspace, generate shell, remote, and service packages
-with `--sub` so the workspace root owns package-manager and CI policy:
+| Area | Starting Point |
+| --- | --- |
+| App routes | Locale-prefixed pages under `src/routes/[lang]` |
+| Copy | English and Czech resources in `config/public/locales` |
+| Styling | App-local CSS, with Tailwind files only when selected |
+| Server logic | Optional BFF entrypoints under `api/` |
+| Tests | Rstest smoke coverage in `tests/` |
+| Agent workflow | Generated `AGENTS.md`, hooks, and local quality gates |
 
-```bash
-npx @modern-js/create apps/shell --router tanstack --tailwind --workspace --sub
-npx @modern-js/create apps/remotes/catalog --router tanstack --tailwind --workspace --sub
-npx @modern-js/create apps/remotes/design-system --router tanstack --tailwind --workspace --sub
-npx @modern-js/create services/catalog-api --bff-runtime effect --workspace --sub
-```
+Keep feature code in the app while one team owns the workflow, release train,
+and operational behavior. Add ordinary workspace packages for shared tokens,
+small UI primitives, generated clients, or domain-neutral utilities when that
+keeps the app easier to understand.
 
-The canonical topology is documented in
-`docs/super-app-rfc-adr/WORKSPACE-0001-micro-vertical-workspace-scaffolding.md`.
-Shell packages own route assembly and topology selection, remote packages own
-route subtrees and degraded UI, service packages own Effect or explicit Hono
-contracts, and shared packages are limited to tokens, primitives, generated
-clients, or domain-neutral utilities.
+## Customize The App
 
-If the design system needs independent deployment, keep it as a horizontal
-Module Federation remote with the same topology, trust, SSR compatibility, and
-fallback rules as the vertical remotes. Do not add a second preset or a
-design-system-specific framework mode.
+Start with the generated page and replace the placeholder cards with your first
+real routes, actions, and API calls. Put user-visible text in
+`config/public/locales/<lang>/translation.json`, then render it through
+`react-i18next` or `@modern-js/plugin-i18n/runtime`.
 
-The public opinionated entrypoint is `presetUltramodern(...)`. It is the default
-UltraModern.js SuperApp surface for Effect, TanStack, SSR, BFF, and Micro
-Verticals.
+Tune the preset in `modern.config.ts`. Production builds require
+`MODERN_PUBLIC_SITE_URL` so canonical and `hreflang` URLs use your deployed
+origin. The local fallback is `http://localhost:8080`.
 
-Preview the production build locally:
+The generated preset defaults are opt-out. Disable specific contracts via env
+vars when your app needs a softer lane:
 
 ```bash
-pnpm serve
+MODERN_BASELINE_ENABLE_MF_SSR=false
+MODERN_BASELINE_ENABLE_BFF_REQUEST_ID=false
+MODERN_BASELINE_ENABLE_TELEMETRY_EXPORTERS=false
 ```
 
+## Grow When Needed
+
+Stay in the single app until a boundary has a real owner and operational reason
+to split. A separate package is usually enough when you only need reusable code.
+Consider a larger workspace boundary later when a feature needs independent
+ownership, rollout, rollback, incident routing, or deployment evidence.
+
+The public opinionated entrypoint is `presetUltramodern(...)`. It keeps Effect,
+TanStack, SSR, BFF, i18n, and quality gates available without requiring a
+distributed app layout on day one.
+
+## Generated Automation
+
+The generated starter includes `.github/workflows/ultramodern-gates.yml` and
+`.github/renovate.json` for full app projects. The workflow runs
+`pnpm run ultramodern:check` and `pnpm run build` on every push and pull request
+with read-only permissions, commit-pinned actions, frozen installs, and
+StepSecurity audit-mode runner hardening. Renovate is configured for dependency
+dashboard review, one-day release age, grouped updates, action digest pinning,
+and manual approval for major upgrades.
+
 For more information, see the
 [UltraModern.js guide](https://bleedingdev.github.io/ultramodern.js/guides/get-started/ultramodern.html)
 and the [UltraModern.js documentation](https://bleedingdev.github.io/ultramodern.js/).

package/template/api/effect/index.ts.handlebars

@@ -2,60 +2,22 @@
   Effect,
   HttpApiBuilder,
   Layer,
-  Schema,
-  ServiceMap,
   defineEffectBff,
 } from '@modern-js/plugin-bff/effect-server';
 import { bffEffectApi } from '../../shared/effect/api';
 
-class GreetingUnavailableError extends Schema.TaggedError<GreetingUnavailableError>()(
-  'GreetingUnavailableError',
-  {
-    message: Schema.String,
-  },
-) {}
-
-class GreetingService extends ServiceMap.Service<GreetingService>()('GreetingService', {
-  make: Effect.succeed({
-    hello: Effect.fn('GreetingService.hello')(function* () {
-      if (Date.now() < 0) {
-        return yield* Effect.fail(
-          new GreetingUnavailableError({
-            message: 'Greeting service is unavailable',
-          }),
-        );
-      }
-
-      return {
-        message: 'Hello from Effect HttpApi',
-        runtime: 'effect' as const,
-      };
-    }),
-  }),
-}) {
-  static readonly layer = Layer.effect(this, this.make);
-}
-
-const greetingsLayer = HttpApiBuilder.group(bffEffectApi, 'greetings', handlers =>
+const greetingsLayer = HttpApiBuilder.group(bffEffectApi, 'greetings', (handlers) =>
   handlers.handle('hello', () =>
-    GreetingService.use(service => service.hello()).pipe(
-      Effect.catchTag('GreetingUnavailableError', error =>
-        Effect.succeed({
-          message: error.message,
-          runtime: 'effect' as const,
-        }),
-      ),
-    ),
+    Effect.succeed({
+      message: 'Hello from Effect HttpApi',
+      runtime: 'effect' as const,
+    }),
   ),
 );
 
-const layer = HttpApiBuilder.layer(bffEffectApi).pipe(
-  Layer.provide(greetingsLayer),
-  Layer.provide(GreetingService.layer),
-);
+const layer = HttpApiBuilder.layer(bffEffectApi).pipe(Layer.provide(greetingsLayer));
 
 export default defineEffectBff({
   api: bffEffectApi,
   layer,
-});
-{{/if}}
+});{{/if}}

package/template/config/public/locales/cs/translation.json

@@ -0,0 +1,39 @@
+{
+  "home": {
+    "bff": {
+      "response": "Odpoved Effect HttpApi:"
+    },
+    "cards": {
+      "bff": {
+        "body": "Pridej serverovou logiku, kdyz route potrebuje typovana data nebo mutace.",
+        "title": "BFF + Effect"
+      },
+      "config": {
+        "body": "Upravuj vychozi hodnoty v modern.config.ts podle rustu aplikace.",
+        "title": "Konfigurace presetUltramodern"
+      },
+      "gates": {
+        "body": "Pred releasem spust ultramodern:check, testy, typecheck, lint a build.",
+        "title": "Ultramodern kontroly"
+      },
+      "guide": {
+        "body": "Zacni jednou aplikaci a pridej routy, API nebo balicky az kdyz pomuzou.",
+        "title": "UltraModern.js pruvodce"
+      }
+    },
+    "description": {
+      "afterConfig": "podle rustu aplikace a udrzuj",
+      "afterPreset": "profilem. Lad",
+      "end": "zelene pri pridavani rout, API a workspace balicku.",
+      "intro": "Zacni s verejnym"
+    },
+    "language": {
+      "cs": "Cestina",
+      "en": "Anglictina",
+      "switcher": "Jazyk"
+    },
+    "logoAlt": "Logo UltraModern.js",
+    "name": "Jednoduchy starter aplikace",
+    "title": "UltraModern.js Starter"
+  }
+}

package/template/config/public/locales/en/translation.json

@@ -0,0 +1,39 @@
+{
+  "home": {
+    "bff": {
+      "response": "Effect HttpApi response:"
+    },
+    "cards": {
+      "bff": {
+        "body": "Add server logic when a route needs typed data or mutation handling.",
+        "title": "BFF + Effect"
+      },
+      "config": {
+        "body": "Tune generated defaults in modern.config.ts as the app grows.",
+        "title": "Configure presetUltramodern"
+      },
+      "gates": {
+        "body": "Run ultramodern:check, tests, typecheck, lint, and build before release.",
+        "title": "Ultramodern Gates"
+      },
+      "guide": {
+        "body": "Start with one app, then add routes, APIs, and packages when they help.",
+        "title": "UltraModern.js Guide"
+      }
+    },
+    "description": {
+      "afterConfig": "as the app grows, and keep",
+      "afterPreset": "profile. Tune",
+      "end": "green while you add routes, APIs, and workspace packages.",
+      "intro": "Start from the public"
+    },
+    "language": {
+      "cs": "Czech",
+      "en": "English",
+      "switcher": "Language"
+    },
+    "logoAlt": "UltraModern.js Logo",
+    "name": "Simple app starter",
+    "title": "UltraModern.js Starter"
+  }
+}

package/template/lefthook.yml

@@ -0,0 +1,15 @@
+pre-commit:
+  commands:
+    format:
+      run: pnpm format
+      stage_fixed: true
+    lint:
+      run: pnpm lint:fix
+      stage_fixed: true
+    check:
+      run: pnpm ultramodern:check
+
+pre-push:
+  commands:
+    check:
+      run: pnpm ultramodern:check