@brendanbank/create-atrium-host 0.18.0 → 0.19.1

package/README.md

@@ -28,7 +28,7 @@ npx @brendanbank/create-atrium-host test-host --yes-defaults
 | `--yes-defaults`        | Skip prompts; derive everything from the project name |
 | `--no-git`              | Skip `git init` + initial commit                      |
 | `--out <dir>`           | Output directory (default: `./<name>`)                |
-| `--atrium <version>`    | Atrium image / SDK version pin (default: `0.18`)      |
+| `--atrium <version>`    | Atrium image / SDK version pin (default: `0.19`)      |
 | `-h`, `--help`          | Show help                                             |
 
 ## What it emits

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@brendanbank/create-atrium-host",
-  "version": "0.18.0",
+  "version": "0.19.1",
   "description": "Scaffolder for new atrium host extensions: backend Python package + frontend Vite bundle + compose stack + CI, all wired against atrium's published image and host SDK packages. Run via `npx @brendanbank/create-atrium-host <name>`.",
   "license": "BSD-2-Clause",
   "type": "module",

package/src/cli.js

@@ -37,7 +37,7 @@ const TEMPLATE_DIR = resolve(__dirname, '..', 'template');
 // The atrium image + SDK packages version in lockstep. Bump this when
 // cutting a new atrium release so freshly scaffolded hosts pin against
 // the right line.
-const DEFAULT_ATRIUM_VERSION = '0.18';
+const DEFAULT_ATRIUM_VERSION = '0.19';
 
 const HELP = `
 ${kleur.bold('create-atrium-host')} — scaffold a new atrium host extension

package/template/.github/workflows/ci.yml

@@ -47,7 +47,7 @@ jobs:
 
   smoke:
     # Stand up the full stack (atrium image + this host extension on
-    # top), run migrations, seed an admin, hit /readyz. Catches the
+    # top), run migrations, seed an admin, hit /api/readyz. Catches the
     # bootstrap-time failures (missing env, broken init_app, alembic
     # chain mismatch) the frontend job won't see.
     runs-on: ubuntu-latest
@@ -82,7 +82,7 @@ jobs:
       - name: Wait for API
         run: |
           for i in $(seq 1 40); do
-            if curl -fsS http://localhost:8000/readyz > /dev/null; then exit 0; fi
+            if curl -fsS http://localhost:8000/api/readyz > /dev/null; then exit 0; fi
             sleep 3
           done
           echo "API did not become ready" >&2

package/template/Dockerfile

@@ -18,7 +18,7 @@ COPY frontend/package.json frontend/pnpm-lock.yaml* ./
 RUN pnpm install --frozen-lockfile 2>/dev/null || pnpm install
 COPY frontend/ ./
 
-ARG VITE_API_BASE_URL=""
+ARG VITE_API_BASE_URL="/api"
 ENV VITE_API_BASE_URL=${VITE_API_BASE_URL}
 RUN pnpm build
 
@@ -40,7 +40,8 @@ COPY --from=frontend-builder /app/dist /opt/atrium/static/host
 USER app
 
 # Re-declare HEALTHCHECK on the derived image. The base atrium image
-# already ships one (curl /healthz on :8000), but image scanners flag
-# absence at the leaf Dockerfile because they don't trace inheritance.
+# already ships one (curl /api/healthz on :8000), but image scanners
+# flag absence at the leaf Dockerfile because they don't trace
+# inheritance.
 HEALTHCHECK --interval=30s --timeout=5s --start-period=30s --retries=3 \
-    CMD curl -fsS http://localhost:8000/healthz || exit 1
+    CMD curl -fsS http://localhost:8000/api/healthz || exit 1

package/template/README.md

@@ -114,7 +114,7 @@ make typecheck       # tsc --noEmit on the host bundle
 against a specific release:
 
 ```bash
-ATRIUM_IMAGE=ghcr.io/brendanbank/atrium:0.18.0 make build up
+ATRIUM_IMAGE=ghcr.io/brendanbank/atrium:0.19.1 make build up
 ```
 
 The frontend SDK packages

package/template/backend/src/__HOST_PKG__/router.py

@@ -1,12 +1,14 @@
 """Demo HTTP surface.
 
-- ``GET /__HOST_PKG__/state`` — read-only, auth required.
-- ``POST /__HOST_PKG__/bump`` — gated by ``__HOST_PKG__.write``,
+- ``GET /api/__HOST_PKG__/state`` — read-only, auth required.
+- ``POST /api/__HOST_PKG__/bump`` — gated by ``__HOST_PKG__.write``,
   increments the demo counter and writes an audit row.
 
-Replace these with your real routes. The auth dependencies and the
-audit/notify helpers (imported from ``app.*``) are the surface a
-host calls atrium through.
+Replace these with your real routes. Atrium mounts every JSON route
+under ``/api/...`` so the SPA owns un-prefixed URL space (atrium
+issue #89); host routes follow the same contract. The auth
+dependencies and the audit/notify helpers (imported from ``app.*``)
+are the surface a host calls atrium through.
 """
 from __future__ import annotations
 
@@ -23,7 +25,7 @@ from app.services.audit import record as record_audit
 
 from .models import __BRAND_PASCAL__State
 
-router = APIRouter(prefix="/__HOST_PKG__", tags=["__HOST_PKG__"])
+router = APIRouter(prefix="/api/__HOST_PKG__", tags=["__HOST_PKG__"])
 
 
 class StateOut(BaseModel):

package/template/backend/tests/test_smoke.py

@@ -29,8 +29,8 @@ def test_router_mounted() -> None:
     from __HOST_PKG__.router import router
 
     paths = {route.path for route in router.routes}
-    assert "/__HOST_PKG__/state" in paths
-    assert "/__HOST_PKG__/bump" in paths
+    assert "/api/__HOST_PKG__/state" in paths
+    assert "/api/__HOST_PKG__/bump" in paths
 
 
 def test_models_isolated_from_atrium_base() -> None:

package/template/frontend/src/api.ts

@@ -1,11 +1,13 @@
 /** Plain fetch — no axios. `credentials: 'include'` carries atrium's
  *  auth cookie so authenticated routes work the same as from atrium's
- *  own SPA. Build with `VITE_API_BASE_URL=""` (the default in the
- *  Dockerfile) so the bundle calls relative paths.
+ *  own SPA. Build with `VITE_API_BASE_URL="/api"` (the default in the
+ *  Dockerfile) so the bundle calls atrium's API namespace — every
+ *  JSON route lives under /api/... so the SPA owns un-prefixed URL
+ *  space (atrium issue #89).
  */
 const apiBase =
   (import.meta as { env?: { VITE_API_BASE_URL?: string } }).env?.VITE_API_BASE_URL ??
-  '';
+  '/api';
 
 async function jsonOrThrow<T>(res: Response): Promise<T> {
   if (!res.ok) {