@chimerai/cli 0.2.88 → 0.2.89

package/dist/commands/add.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"add.d.ts","sourceRoot":"","sources":["../../src/commands/add.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAiBH,UAAU,UAAU;IAClB,GAAG,EAAE,MAAM,CAAC;CACb;AAmzED,wBAAsB,UAAU,CAAC,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE,UAAU,iBAyHtE"}
+{"version":3,"file":"add.d.ts","sourceRoot":"","sources":["../../src/commands/add.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAiBH,UAAU,UAAU;IAClB,GAAG,EAAE,MAAM,CAAC;CACb;AAw5ED,wBAAsB,UAAU,CAAC,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE,UAAU,iBAyHtE"}

package/dist/commands/add.js

@@ -185,6 +185,18 @@ model ApiKey {
   @@index([keyHash])
 }
 `,
+        filePatches: [
+            {
+                marker: '// @chimerai component=AppPageNoAuth version=1.0',
+                target: 'app/page.tsx',
+                generator: () => templates.generateAppPage(),
+            },
+            {
+                marker: '// @chimerai component=MiddlewareNoAuth version=1.0',
+                target: 'middleware.ts',
+                generator: () => templates.generateMiddleware(),
+            },
+        ],
         envVars: [
             {
                 key: 'DATABASE_URL',
@@ -285,6 +297,7 @@ Next steps:
         name: 'chat-ui',
         displayName: 'Chat UI',
         description: 'Full-featured chat interface with streaming, conversation management, and multi-provider support',
+        requiredFeatures: ['auth'],
         requiredUtils: [
             { generator: () => templates.generateUseAppNameHook(), target: 'lib/use-app-name.ts' },
         ],
@@ -774,6 +787,7 @@ Next steps:
         name: 'billing',
         displayName: 'Billing System',
         description: 'Stripe integration for subscriptions',
+        requiredFeatures: ['auth'],
         files: [
             {
                 generator: () => templates.generateBillingPage(),
@@ -884,6 +898,7 @@ Next steps:
         name: 'audit-log',
         displayName: 'Audit Log',
         description: 'Compliance audit logging — track all admin and user actions',
+        requiredFeatures: ['auth', 'admin-dashboard'],
         files: [
             {
                 generator: () => templates.generateAdminLogsPage(),
@@ -904,6 +919,7 @@ Next steps:
         name: 'admin-dashboard',
         displayName: 'Admin Dashboard',
         description: 'Complete admin panel with user/role management, settings, audit logs, and RBAC',
+        requiredFeatures: ['auth'],
         files: [
             // Admin layout with session + admin role guard
             {
@@ -1159,7 +1175,52 @@ function transformSchemaForSqlite(schema) {
  * Generic component addition function (PHASE 4 refactoring)
  * Uses inline template generators — no fs.copy(), no dependency on templates/ folder
  */
+/**
+ * Checks if a given feature marker exists anywhere in the project's package.json
+ * or in a generated file (by scanning for the @chimerai marker convention).
+ * We use presence of installed packages as a proxy:
+ *  - 'auth'           → next-auth in dependencies
+ *  - 'rbac'           → @chimerai/rbac or lib/rbac.ts present
+ *  - 'admin-dashboard'→ @chimerai/admin-ui or app/admin present
+ *  - 'billing'        → stripe in dependencies
+ */
+async function hasFeature(feature, targetDir) {
+    const pkgPath = path_1.default.join(targetDir, 'package.json');
+    try {
+        const pkg = await fs_extra_1.default.readJson(pkgPath);
+        const deps = { ...pkg.dependencies, ...pkg.devDependencies };
+        if (feature === 'auth')
+            return 'next-auth' in deps;
+        if (feature === 'billing')
+            return 'stripe' in deps;
+        if (feature === 'rbac') {
+            return ('@chimerai/rbac' in deps ||
+                (await fs_extra_1.default.pathExists(path_1.default.join(targetDir, 'lib/rbac.ts'))));
+        }
+        if (feature === 'admin-dashboard') {
+            return ('@chimerai/admin-ui' in deps ||
+                (await fs_extra_1.default.pathExists(path_1.default.join(targetDir, 'app/admin'))));
+        }
+    }
+    catch {
+        // ignore — treat as missing
+    }
+    return false;
+}
 async function addComponent(config, targetDir) {
+    // ── Pre-flight: check required features ────────────────────────────────
+    if (config.requiredFeatures && config.requiredFeatures.length > 0) {
+        const missing = [];
+        for (const req of config.requiredFeatures) {
+            if (!(await hasFeature(req, targetDir)))
+                missing.push(req);
+        }
+        if (missing.length > 0) {
+            console.error(chalk_1.default.red(`\n✗ Cannot add "${config.name}" — missing required feature(s): ${missing.map((f) => `"${f}"`).join(', ')}`));
+            console.error(chalk_1.default.yellow(`  Run first: ${missing.map((f) => `chimerai add ${f}`).join('  then  ')}`));
+            process.exit(1);
+        }
+    }
     const spinner = (0, ora_1.default)(`Adding ${config.displayName}...`).start();
     try {
         // 1. Generate and write all required files
@@ -1200,6 +1261,23 @@ async function addComponent(config, targetDir) {
         }
         // 1.6 (removed) — We no longer patch the user's root layout.
         // Instead, the postAddMessage tells the user how to add SessionProvider.
+        // 1.6b Apply filePatches — upgrade existing no-auth files to auth-aware versions
+        if (config.filePatches) {
+            for (const patch of config.filePatches) {
+                const targetPath = path_1.default.join(targetDir, patch.target);
+                if (!(await fs_extra_1.default.pathExists(targetPath)))
+                    continue;
+                const existing = await fs_extra_1.default.readFile(targetPath, 'utf-8');
+                if (existing.includes(patch.marker)) {
+                    // File has the no-auth marker \u2014 replace it with auth-aware version
+                    const bakPath = targetPath + '.bak';
+                    await fs_extra_1.default.writeFile(bakPath, existing); // backup
+                    await fs_extra_1.default.writeFile(targetPath, patch.generator());
+                    spinner.text = `Adding ${config.displayName}... (upgraded ${patch.target})`;
+                }
+                // If marker absent, file is already the auth-aware version \u2014 skip
+            }
+        }
         // 1.7 Auto-write environment variables to .env
         if (config.envVars && config.envVars.length > 0) {
             const envPath = path_1.default.join(targetDir, '.env');

package/dist/commands/create.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"create.d.ts","sourceRoot":"","sources":["../../src/commands/create.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAmBH,UAAU,aAAa;IACrB,GAAG,CAAC,EAAE,OAAO,CAAC;IACd,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,MAAM,CAAC,EAAE,OAAO,CAAC;CAClB;AA+CD,wBAAsB,aAAa,CAAC,WAAW,EAAE,MAAM,EAAE,OAAO,EAAE,aAAa,iBAuH9E"}
+{"version":3,"file":"create.d.ts","sourceRoot":"","sources":["../../src/commands/create.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAmBH,UAAU,aAAa;IACrB,GAAG,CAAC,EAAE,OAAO,CAAC;IACd,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,MAAM,CAAC,EAAE,OAAO,CAAC;CAClB;AAmED,wBAAsB,aAAa,CAAC,WAAW,EAAE,MAAM,EAAE,OAAO,EAAE,aAAa,iBAyI9E"}

package/dist/commands/create.js

@@ -54,14 +54,34 @@ const license_js_1 = require("../license.js");
 /** Canonical feature definitions for `chimerai create` */
 const AVAILABLE_FEATURES = [
     { name: '🔐 Authentication (NextAuth)', value: 'auth', licenseKey: 'auth', checked: true },
-    { name: '👥 RBAC System (Users, Roles, Permissions)', value: 'rbac', licenseKey: 'rbac', checked: true },
-    { name: '🔌 Model Providers Management', value: 'model-providers', licenseKey: 'model-providers', checked: true },
-    { name: '📝 Prompt Template Management', value: 'prompt-management', licenseKey: 'prompt-management', checked: true },
+    {
+        name: '👥 RBAC System (Users, Roles, Permissions)',
+        value: 'rbac',
+        licenseKey: 'rbac',
+        checked: true,
+    },
+    {
+        name: '🔌 Model Providers Management',
+        value: 'model-providers',
+        licenseKey: 'model-providers',
+        checked: true,
+    },
+    {
+        name: '📝 Prompt Template Management',
+        value: 'prompt-management',
+        licenseKey: 'prompt-management',
+        checked: true,
+    },
     { name: '💬 AI Chat Interface', value: 'ai-chat', licenseKey: 'ai-chat', checked: false },
     { name: '🔍 RAG / Vector Store (FAISS)', value: 'rag', licenseKey: 'rag', checked: false },
     { name: '💳 Billing System (Stripe)', value: 'billing', licenseKey: 'billing', checked: false },
     { name: '📊 API Usage Analytics', value: 'analytics', licenseKey: 'analytics', checked: true },
-    { name: '🎨 Admin Dashboard', value: 'admin-dashboard', licenseKey: 'admin-dashboard', checked: true },
+    {
+        name: '🎨 Admin Dashboard',
+        value: 'admin-dashboard',
+        licenseKey: 'admin-dashboard',
+        checked: true,
+    },
 ];
 function getRequiredTierLabel(licenseKey) {
     if (license_js_1.FREE_COMPONENTS.has(licenseKey))
@@ -133,6 +153,22 @@ async function createCommand(projectName, options) {
     if (selectedFeatures.length === 0) {
         (0, utils_js_1.handleCliError)('No features selected');
     }
+    // Validate feature combinations and warn about missing dependencies
+    const featureWarnings = validateFeatureCombination(selectedFeatures);
+    if (featureWarnings.length > 0) {
+        console.warn(chalk_1.default.yellow('\n⚠️  Feature combination warnings:'));
+        featureWarnings.forEach((w) => console.warn(chalk_1.default.yellow(`   • ${w}`)));
+        const answers = await inquirer_1.default.prompt([
+            {
+                type: 'confirm',
+                name: 'confirmed',
+                message: 'Continue anyway?',
+                default: true,
+            },
+        ]);
+        if (!answers.confirmed)
+            process.exit(0);
+    }
     console.log(chalk_1.default.bold.green('\n✨ Creating project with features:'));
     selectedFeatures.forEach((f) => {
         const feature = AVAILABLE_FEATURES.find((feat) => feat.value === f);
@@ -156,9 +192,11 @@ async function createCommand(projectName, options) {
             console.log(chalk_1.default.white(`  cd ${projectName}`));
             console.log(chalk_1.default.white('  npm run dev'));
             console.log(chalk_1.default.gray('\n  Server will run on http://localhost:3001\n'));
-            console.log(chalk_1.default.yellow('Login with:'));
-            console.log(chalk_1.default.white('  Email: admin@example.com'));
-            console.log(chalk_1.default.white('  Password: admin123\n'));
+            if (selectedFeatures.includes('auth')) {
+                console.log(chalk_1.default.yellow('Login with:'));
+                console.log(chalk_1.default.white('  Email: admin@example.com'));
+                console.log(chalk_1.default.white('  Password: admin123\n'));
+            }
         }
         catch (error) {
             console.log(chalk_1.default.red('\n❌ Installation failed'));
@@ -187,6 +225,25 @@ async function createCommand(projectName, options) {
     }
     console.log(chalk_1.default.gray('\n  Server will run on http://localhost:3001\n'));
 }
+/**
+ * Validates that the selected feature combination makes sense.
+ * Returns an array of human-readable warning strings (empty = OK).
+ */
+function validateFeatureCombination(features) {
+    const warnings = [];
+    const authRequired = ['rbac', 'admin-dashboard', 'billing', 'mfa', 'gdpr', 'audit-log', 'chat-ui'];
+    if (!features.includes('auth')) {
+        authRequired.forEach((f) => {
+            if (features.includes(f)) {
+                warnings.push(`"${f}" requires "auth" — it may not work correctly without it`);
+            }
+        });
+    }
+    if (features.includes('audit-log') && !features.includes('admin-dashboard')) {
+        warnings.push('"audit-log" works best with "admin-dashboard"');
+    }
+    return warnings;
+}
 async function createProject(targetDir, projectName, features, sqlite) {
     const spinner = (0, ora_1.default)('Creating project structure...').start();
     try {
@@ -238,7 +295,7 @@ async function createProject(targetDir, projectName, features, sqlite) {
     }
     catch (error) {
         spinner.fail(chalk_1.default.red('Failed to create project'));
-        console.error(error.message);
+        console.error(error instanceof Error ? error.message : String(error));
         throw error;
     }
 }
@@ -282,7 +339,9 @@ async function createBaseStructure(targetDir, projectName, features) {
         : templates.generateAppLayout(projectName);
     await fs_extra_1.default.writeFile(path_1.default.join(targetDir, 'app/layout.tsx'), layoutContent);
     // Create app/page.tsx using template generator
-    const pageContent = templates.generateAppPage();
+    const pageContent = features.includes('auth')
+        ? templates.generateAppPage()
+        : templates.generateAppPageNoAuth();
     await fs_extra_1.default.writeFile(path_1.default.join(targetDir, 'app/page.tsx'), pageContent);
     // Create globals.css using template generator
     const globalsCss = templates.generateGlobalsCss();
@@ -294,18 +353,19 @@ async function createPackageJson(targetDir, projectName, features) {
         react: '^18.3.1',
         'react-dom': '^18.3.1',
         '@prisma/client': '^5.22.0',
-        // Auth is core infrastructure — routes, middleware, and API handlers all depend on it
-        'next-auth': '^4.24.10',
-        '@auth/prisma-adapter': '^2.11.1',
-        'bcryptjs': '^2.4.3',
-        'next-themes': '^0.4.4',
-        'sonner': '^1.7.0',
     };
+    // Auth dependencies — only when auth feature is selected
+    if (features.includes('auth')) {
+        dependencies['next-auth'] = '^4.24.10';
+        dependencies['@auth/prisma-adapter'] = '^2.11.1';
+        dependencies['bcryptjs'] = '^2.4.3';
+        dependencies['next-themes'] = '^0.4.4';
+        dependencies['sonner'] = '^1.7.0';
+    }
     const devDependencies = {
         '@types/node': '^20',
         '@types/react': '^18',
         '@types/react-dom': '^18',
-        '@types/bcryptjs': '^2.4.6',
         typescript: '^5',
         tailwindcss: '^3.4.0',
         postcss: '^8.5.10',
@@ -313,6 +373,9 @@ async function createPackageJson(targetDir, projectName, features) {
         prisma: '^5.22.0',
         tsx: '^4.20.6',
     };
+    if (features.includes('auth')) {
+        devDependencies['@types/bcryptjs'] = '^2.4.6';
+    }
     // Note: ChimerAI workspace packages are not yet published to npm
     // For standalone projects, these features will need manual implementation
     // or you can use the complete starter kit with 'chimerai init'
@@ -358,10 +421,8 @@ async function createPackageJson(targetDir, projectName, features) {
         },
         dependencies,
         devDependencies,
-        overrides: {
-            // Force uuid@11 to suppress uuid@8 deprecation warning from next-auth@4
-            uuid: '^11',
-        },
+        // uuid override only needed when next-auth is installed (suppresses uuid@8 deprecation warning)
+        ...(features.includes('auth') ? { overrides: { uuid: '^11' } } : {}),
         prisma: {
             seed: 'tsx prisma/seed.ts',
         },
@@ -857,8 +918,10 @@ async function copyFeatureFiles(targetDir, features) {
     }
     // Health check endpoint (used by Docker healthcheck and monitoring)
     const healthRoute = templates.generateHealthRoute();
-    // Next.js middleware (security headers + CORS for widget endpoints)
-    const middleware = templates.generateMiddleware();
+    // Next.js middleware — auth-aware version when auth selected, CORS-only otherwise
+    const middleware = features.includes('auth')
+        ? templates.generateMiddleware()
+        : templates.generateMiddlewareNoAuth();
     await fs_extra_1.default.writeFile(path_1.default.join(targetDir, 'middleware.ts'), middleware);
     await fs_extra_1.default.ensureDir(path_1.default.join(targetDir, 'app/api/health'));
     await fs_extra_1.default.writeFile(path_1.default.join(targetDir, 'app/api/health/route.ts'), healthRoute);
@@ -1214,8 +1277,20 @@ async function getServerSessionWithPermissions() {
     }
 }
 async function createSeedScript(targetDir, features, sqlite) {
+    // Without auth there are no users/providers to seed — write a minimal placeholder
+    if (!features.includes('auth')) {
+        const minimalSeed = `import { PrismaClient } from '@prisma/client';
+const prisma = new PrismaClient();
+async function main() {
+  console.log('🌱 No auth feature selected — nothing to seed yet.');
+  console.log('   Run: chimerai add auth  to add authentication.');
+}
+main().catch(console.error).finally(() => prisma.$disconnect());
+`;
+        await fs_extra_1.default.writeFile(path_1.default.join(targetDir, 'prisma/seed.ts'), minimalSeed);
+        return;
+    }
     // Generate seed script with feature-specific configuration
-    // next-auth / bcryptjs are always installed (core infrastructure)
     const seedScript = `import { PrismaClient } from '@prisma/client';
 import * as bcrypt from 'bcryptjs';
 import crypto from 'crypto';
@@ -1472,10 +1547,7 @@ echo Next steps:
 echo   npm run dev
 echo   Open: http://localhost:3001
 echo.
-echo Login with:
-echo   Email: admin@example.com
-echo   Password: admin123
-echo.
+${features.includes('auth') ? 'echo Login with:\necho   Email: admin@example.com\necho   Password: admin123\necho.' : ''}
 pause
 `
         : `@echo off
@@ -1544,10 +1616,7 @@ echo Next steps:
 echo   npm run dev
 echo   Open: http://localhost:3001
 echo.
-echo Login with:
-echo   Email: admin@example.com
-echo   Password: admin123
-echo.
+${features.includes('auth') ? 'echo Login with:\necho   Email: admin@example.com\necho   Password: admin123\necho.' : ''}
 pause
 `;
     // Linux/macOS install.sh
@@ -1585,10 +1654,7 @@ echo "Next steps:"
 echo "  npm run dev"
 echo "  Open: http://localhost:3001"
 echo ""
-echo "Login with:"
-echo "  Email: admin@example.com"
-echo "  Password: admin123"
-echo ""
+${features.includes('auth') ? 'echo "Login with:"\necho "  Email: admin@example.com"\necho "  Password: admin123"\necho ""' : ''}
 `
         : `#!/bin/bash
 set -e
@@ -1635,10 +1701,7 @@ echo "Next steps:"
 echo "  npm run dev"
 echo "  Open: http://localhost:3001"
 echo ""
-echo "Login with:"
-echo "  Email: admin@example.com"
-echo "  Password: admin123"
-echo ""
+${features.includes('auth') ? 'echo "Login with:"\necho "  Email: admin@example.com"\necho "  Password: admin123"\necho ""' : ''}
 `;
     await fs_extra_1.default.writeFile(path_1.default.join(targetDir, 'install.bat'), installBat);
     await fs_extra_1.default.writeFile(path_1.default.join(targetDir, 'install.sh'), installSh);
@@ -1723,12 +1786,7 @@ npm run dev
 
 Open [http://localhost:3001](http://localhost:3001) in your browser.
 
-### Default Admin Credentials
-
-- Email: admin@example.com
-- Password: admin123
-
-⚠️ Change these in production!
+${features.includes('auth') ? `### Default Admin Credentials\n\n- Email: admin@example.com\n- Password: admin123\n\n⚠️ Change these in production!` : ''}
 
 ## Available Scripts
 
@@ -1790,8 +1848,7 @@ Commercial License - See LICENSE file
 5. \`pnpm dev\`
 
 ## Default Login
-- Email: admin@example.com
-- Password: admin123
+${features.includes('auth') ? '- Email: admin@example.com\n- Password: admin123' : '- No auth configured. Run: `chimerai add auth`'}
 
 ## CLI Commands
 - \`chimerai add <component>\` — Add features

package/dist/templates/index.d.ts

@@ -6,7 +6,7 @@
  * written to a file in the generated project.
  */
 export { generateNextConfig, generateTsConfig, generateTailwindConfig, generatePostcssConfig, generateGlobalsCss, } from './config.js';
-export { generateAppLayout, generateAppLayoutWithAuth, generateAppPage, generateAuthBasicLayout, generateDashboardLayout, generateDashboardPage, generateProfilePage, generateUserProfileRoute, generateSettingsPage, generateUseAppNameHook, } from './layout.js';
+export { generateAppLayout, generateAppLayoutWithAuth, generateAppPage, generateAppPageNoAuth, generateAuthBasicLayout, generateDashboardLayout, generateDashboardPage, generateProfilePage, generateUserProfileRoute, generateSettingsPage, generateUseAppNameHook, } from './layout.js';
 export { generateNextAuthRoute, generateLoginPage, generateSessionProvider, generateLogoutButton, generateNextAuthTypes, generateAuthLib, generateResolveAuth, } from './auth.js';
 export { generateChatPage, generateUseChatHook, generateChatMessage, generateChatInput, generateChatSidebar, generateModelSelector, generateChatStreamRouteWithPersistence, generateConversationsRoute, generateConversationDetailRoute, } from './chat.js';
 export { generateAdminLayout, generateAdminDashboardPage, generateAdminUsersPage, generateAdminRolesPage, generateAdminSettingsPage, generateAdminLogsPage, generateAuditLogHelper, generatePermissionsLib, generateRequirePermissionLib, } from './admin.js';
@@ -14,7 +14,7 @@ export { generateModelProvidersPage, generatePromptManagementPage, generatePromp
 export { generateAdminUsersRoute, generateAdminUsersIdRoute, generateAdminRolesRoute, generateAdminRolesIdRoute, generatePromptsRoute, generatePromptsIdRoute, generatePromptsSetDefaultRoute, generateHealthRoute, generateModelsRoute, generateV1ModelsRoute, generateAuditLogRoute, generateGdprDataExportRoute, generateGdprAccountDeleteRoute, generateAdminSettingsRoute, generateAppSettingsRoute, } from './api-routes.js';
 export { generateProviderCrudRoute, generateProviderIdRoute, generateProviderTestRoute, generateProviderSyncRoute, generateInternalProvidersRoute, generateInternalProviderIdRoute, generateInternalProviderUsageRoute, generateNotifyProviderChangeLib, } from './provider-routes.js';
 export { generatePrismaLib, generateEncryptionLib, generateApiKeyAuthLib, generateApiProtectionLib, generatePrismaSchema, } from './prisma.js';
-export { generateMiddleware } from './middleware.js';
+export { generateMiddleware, generateMiddlewareNoAuth } from './middleware.js';
 export { generateStripeLib, generateBillingPage, generateCheckoutRoute, generatePortalRoute, generateSubscriptionRoute, generateStripeWebhookRoute, } from './billing.js';
 export { generateRagLib, generateRagPage, generateRagUploadRoute, generateRagQueryRoute, generateRagStatsRoute, generateRagClearRoute, generateRagDeleteRoute, } from './rag.js';
 export { generateWidgetBundle, generateWidgetLoader, generateApiKeyManagementPage, generateApiKeysRoute, generateApiKeyIdRoute, generateRateLimiter, } from './widget.js';

package/dist/templates/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/templates/index.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAGH,OAAO,EACL,kBAAkB,EAClB,gBAAgB,EAChB,sBAAsB,EACtB,qBAAqB,EACrB,kBAAkB,GACnB,MAAM,aAAa,CAAC;AAGrB,OAAO,EACL,iBAAiB,EACjB,yBAAyB,EACzB,eAAe,EACf,uBAAuB,EACvB,uBAAuB,EACvB,qBAAqB,EACrB,mBAAmB,EACnB,wBAAwB,EACxB,oBAAoB,EACpB,sBAAsB,GACvB,MAAM,aAAa,CAAC;AAGrB,OAAO,EACL,qBAAqB,EACrB,iBAAiB,EACjB,uBAAuB,EACvB,oBAAoB,EACpB,qBAAqB,EACrB,eAAe,EACf,mBAAmB,GACpB,MAAM,WAAW,CAAC;AAGnB,OAAO,EACL,gBAAgB,EAChB,mBAAmB,EACnB,mBAAmB,EACnB,iBAAiB,EACjB,mBAAmB,EACnB,qBAAqB,EACrB,sCAAsC,EACtC,0BAA0B,EAC1B,+BAA+B,GAChC,MAAM,WAAW,CAAC;AAGnB,OAAO,EACL,mBAAmB,EACnB,0BAA0B,EAC1B,sBAAsB,EACtB,sBAAsB,EACtB,yBAAyB,EACzB,qBAAqB,EACrB,sBAAsB,EACtB,sBAAsB,EACtB,4BAA4B,GAC7B,MAAM,YAAY,CAAC;AAGpB,OAAO,EAAE,0BAA0B,EAAE,4BAA4B,EAAE,sBAAsB,EAAE,MAAM,iBAAiB,CAAC;AAGnH,OAAO,EACL,uBAAuB,EACvB,yBAAyB,EACzB,uBAAuB,EACvB,yBAAyB,EACzB,oBAAoB,EACpB,sBAAsB,EACtB,8BAA8B,EAC9B,mBAAmB,EACnB,mBAAmB,EACnB,qBAAqB,EACrB,qBAAqB,EACrB,2BAA2B,EAC3B,8BAA8B,EAC9B,0BAA0B,EAC1B,wBAAwB,GAEzB,MAAM,iBAAiB,CAAC;AAGzB,OAAO,EACL,yBAAyB,EACzB,uBAAuB,EACvB,yBAAyB,EACzB,yBAAyB,EACzB,8BAA8B,EAC9B,+BAA+B,EAC/B,kCAAkC,EAClC,+BAA+B,GAChC,MAAM,sBAAsB,CAAC;AAG9B,OAAO,EACL,iBAAiB,EACjB,qBAAqB,EACrB,qBAAqB,EACrB,wBAAwB,EACxB,oBAAoB,GACrB,MAAM,aAAa,CAAC;AAGrB,OAAO,EAAE,kBAAkB,EAAE,MAAM,iBAAiB,CAAC;AAGrD,OAAO,EACL,iBAAiB,EACjB,mBAAmB,EACnB,qBAAqB,EACrB,mBAAmB,EACnB,yBAAyB,EACzB,0BAA0B,GAC3B,MAAM,cAAc,CAAC;AAGtB,OAAO,EACL,cAAc,EACd,eAAe,EACf,sBAAsB,EACtB,qBAAqB,EACrB,qBAAqB,EACrB,qBAAqB,EACrB,sBAAsB,GACvB,MAAM,UAAU,CAAC;AAGlB,OAAO,EACL,oBAAoB,EACpB,oBAAoB,EACpB,4BAA4B,EAC5B,oBAAoB,EACpB,qBAAqB,EACrB,mBAAmB,GACpB,MAAM,aAAa,CAAC;AAGrB,OAAO,EACL,cAAc,EACd,qBAAqB,EACrB,sBAAsB,EACtB,uBAAuB,EACvB,eAAe,EACf,oBAAoB,EACpB,eAAe,GAChB,MAAM,UAAU,CAAC;AAGlB,OAAO,EACL,eAAe,EACf,gBAAgB,EAChB,wBAAwB,EACxB,qBAAqB,GACtB,MAAM,WAAW,CAAC;AAGnB,OAAO,EACL,kBAAkB,EAClB,oBAAoB,EACpB,yBAAyB,EACzB,wBAAwB,GACzB,MAAM,aAAa,CAAC;AAGrB,OAAO,EACL,cAAc,EACd,eAAe,EACf,SAAS,EACT,sBAAsB,EACtB,oBAAoB,EACpB,mBAAmB,EACnB,oBAAoB,EACpB,yBAAyB,EACzB,wBAAwB,EACxB,kBAAkB,EAClB,mBAAmB,EACnB,yBAAyB,EACzB,qBAAqB,EACrB,uBAAuB,EACvB,uBAAuB,EACvB,6BAA6B,EAC7B,2BAA2B,EAC3B,uBAAuB,EACvB,8BAA8B,EAC9B,qBAAqB,GACtB,MAAM,iBAAiB,CAAC;AAEzB,YAAY,EAAE,iBAAiB,EAAE,QAAQ,EAAE,MAAM,iBAAiB,CAAC;AAGnE,OAAO,EACL,kBAAkB,EAClB,iBAAiB,EACjB,wBAAwB,EACxB,mBAAmB,EACnB,kBAAkB,GACnB,MAAM,gBAAgB,CAAC;AAGxB,OAAO,EACL,gBAAgB,EAChB,qBAAqB,EACrB,iBAAiB,EACjB,gBAAgB,EAChB,mBAAmB,EACnB,yBAAyB,EACzB,qBAAqB,EACrB,kBAAkB,EAClB,oBAAoB,EACpB,iBAAiB,EACjB,eAAe,GAChB,MAAM,uBAAuB,CAAC;AAE/B;;;GAGG;AACH,eAAO,MAAM,aAAa;;;;;;;;;;CA8DzB,CAAC;AAEF;;;GAGG;AACH,eAAO,MAAM,iBAAiB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CA2E7B,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/templates/index.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAGH,OAAO,EACL,kBAAkB,EAClB,gBAAgB,EAChB,sBAAsB,EACtB,qBAAqB,EACrB,kBAAkB,GACnB,MAAM,aAAa,CAAC;AAGrB,OAAO,EACL,iBAAiB,EACjB,yBAAyB,EACzB,eAAe,EACf,qBAAqB,EACrB,uBAAuB,EACvB,uBAAuB,EACvB,qBAAqB,EACrB,mBAAmB,EACnB,wBAAwB,EACxB,oBAAoB,EACpB,sBAAsB,GACvB,MAAM,aAAa,CAAC;AAGrB,OAAO,EACL,qBAAqB,EACrB,iBAAiB,EACjB,uBAAuB,EACvB,oBAAoB,EACpB,qBAAqB,EACrB,eAAe,EACf,mBAAmB,GACpB,MAAM,WAAW,CAAC;AAGnB,OAAO,EACL,gBAAgB,EAChB,mBAAmB,EACnB,mBAAmB,EACnB,iBAAiB,EACjB,mBAAmB,EACnB,qBAAqB,EACrB,sCAAsC,EACtC,0BAA0B,EAC1B,+BAA+B,GAChC,MAAM,WAAW,CAAC;AAGnB,OAAO,EACL,mBAAmB,EACnB,0BAA0B,EAC1B,sBAAsB,EACtB,sBAAsB,EACtB,yBAAyB,EACzB,qBAAqB,EACrB,sBAAsB,EACtB,sBAAsB,EACtB,4BAA4B,GAC7B,MAAM,YAAY,CAAC;AAGpB,OAAO,EAAE,0BAA0B,EAAE,4BAA4B,EAAE,sBAAsB,EAAE,MAAM,iBAAiB,CAAC;AAGnH,OAAO,EACL,uBAAuB,EACvB,yBAAyB,EACzB,uBAAuB,EACvB,yBAAyB,EACzB,oBAAoB,EACpB,sBAAsB,EACtB,8BAA8B,EAC9B,mBAAmB,EACnB,mBAAmB,EACnB,qBAAqB,EACrB,qBAAqB,EACrB,2BAA2B,EAC3B,8BAA8B,EAC9B,0BAA0B,EAC1B,wBAAwB,GAEzB,MAAM,iBAAiB,CAAC;AAGzB,OAAO,EACL,yBAAyB,EACzB,uBAAuB,EACvB,yBAAyB,EACzB,yBAAyB,EACzB,8BAA8B,EAC9B,+BAA+B,EAC/B,kCAAkC,EAClC,+BAA+B,GAChC,MAAM,sBAAsB,CAAC;AAG9B,OAAO,EACL,iBAAiB,EACjB,qBAAqB,EACrB,qBAAqB,EACrB,wBAAwB,EACxB,oBAAoB,GACrB,MAAM,aAAa,CAAC;AAGrB,OAAO,EAAE,kBAAkB,EAAE,wBAAwB,EAAE,MAAM,iBAAiB,CAAC;AAG/E,OAAO,EACL,iBAAiB,EACjB,mBAAmB,EACnB,qBAAqB,EACrB,mBAAmB,EACnB,yBAAyB,EACzB,0BAA0B,GAC3B,MAAM,cAAc,CAAC;AAGtB,OAAO,EACL,cAAc,EACd,eAAe,EACf,sBAAsB,EACtB,qBAAqB,EACrB,qBAAqB,EACrB,qBAAqB,EACrB,sBAAsB,GACvB,MAAM,UAAU,CAAC;AAGlB,OAAO,EACL,oBAAoB,EACpB,oBAAoB,EACpB,4BAA4B,EAC5B,oBAAoB,EACpB,qBAAqB,EACrB,mBAAmB,GACpB,MAAM,aAAa,CAAC;AAGrB,OAAO,EACL,cAAc,EACd,qBAAqB,EACrB,sBAAsB,EACtB,uBAAuB,EACvB,eAAe,EACf,oBAAoB,EACpB,eAAe,GAChB,MAAM,UAAU,CAAC;AAGlB,OAAO,EACL,eAAe,EACf,gBAAgB,EAChB,wBAAwB,EACxB,qBAAqB,GACtB,MAAM,WAAW,CAAC;AAGnB,OAAO,EACL,kBAAkB,EAClB,oBAAoB,EACpB,yBAAyB,EACzB,wBAAwB,GACzB,MAAM,aAAa,CAAC;AAGrB,OAAO,EACL,cAAc,EACd,eAAe,EACf,SAAS,EACT,sBAAsB,EACtB,oBAAoB,EACpB,mBAAmB,EACnB,oBAAoB,EACpB,yBAAyB,EACzB,wBAAwB,EACxB,kBAAkB,EAClB,mBAAmB,EACnB,yBAAyB,EACzB,qBAAqB,EACrB,uBAAuB,EACvB,uBAAuB,EACvB,6BAA6B,EAC7B,2BAA2B,EAC3B,uBAAuB,EACvB,8BAA8B,EAC9B,qBAAqB,GACtB,MAAM,iBAAiB,CAAC;AAEzB,YAAY,EAAE,iBAAiB,EAAE,QAAQ,EAAE,MAAM,iBAAiB,CAAC;AAGnE,OAAO,EACL,kBAAkB,EAClB,iBAAiB,EACjB,wBAAwB,EACxB,mBAAmB,EACnB,kBAAkB,GACnB,MAAM,gBAAgB,CAAC;AAGxB,OAAO,EACL,gBAAgB,EAChB,qBAAqB,EACrB,iBAAiB,EACjB,gBAAgB,EAChB,mBAAmB,EACnB,yBAAyB,EACzB,qBAAqB,EACrB,kBAAkB,EAClB,oBAAoB,EACpB,iBAAiB,EACjB,eAAe,GAChB,MAAM,uBAAuB,CAAC;AAE/B;;;GAGG;AACH,eAAO,MAAM,aAAa;;;;;;;;;;CA8DzB,CAAC;AAEF;;;GAGG;AACH,eAAO,MAAM,iBAAiB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CA2E7B,CAAC"}

package/dist/templates/index.js

@@ -7,9 +7,9 @@
  * written to a file in the generated project.
  */
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.generatePromptsSetDefaultRoute = exports.generatePromptsIdRoute = exports.generatePromptsRoute = exports.generateAdminRolesIdRoute = exports.generateAdminRolesRoute = exports.generateAdminUsersIdRoute = exports.generateAdminUsersRoute = exports.generatePromptSelector = exports.generatePromptManagementPage = exports.generateModelProvidersPage = exports.generateRequirePermissionLib = exports.generatePermissionsLib = exports.generateAuditLogHelper = exports.generateAdminLogsPage = exports.generateAdminSettingsPage = exports.generateAdminRolesPage = exports.generateAdminUsersPage = exports.generateAdminDashboardPage = exports.generateAdminLayout = exports.generateConversationDetailRoute = exports.generateConversationsRoute = exports.generateChatStreamRouteWithPersistence = exports.generateModelSelector = exports.generateChatSidebar = exports.generateChatInput = exports.generateChatMessage = exports.generateUseChatHook = exports.generateChatPage = exports.generateResolveAuth = exports.generateAuthLib = exports.generateNextAuthTypes = exports.generateLogoutButton = exports.generateSessionProvider = exports.generateLoginPage = exports.generateNextAuthRoute = exports.generateUseAppNameHook = exports.generateSettingsPage = exports.generateUserProfileRoute = exports.generateProfilePage = exports.generateDashboardPage = exports.generateDashboardLayout = exports.generateAuthBasicLayout = exports.generateAppPage = exports.generateAppLayoutWithAuth = exports.generateAppLayout = exports.generateGlobalsCss = exports.generatePostcssConfig = exports.generateTailwindConfig = exports.generateTsConfig = exports.generateNextConfig = void 0;
-exports.generateGdprPage = exports.generateGdprLib = exports.MFA_USER_FIELDS = exports.MFA_SCHEMA_EXTENSION = exports.generateMfaPage = exports.generateMfaDisableRoute = exports.generateMfaVerifyRoute = exports.generateMfaSetupRoute = exports.generateMfaLib = exports.generateRateLimiter = exports.generateApiKeyIdRoute = exports.generateApiKeysRoute = exports.generateApiKeyManagementPage = exports.generateWidgetLoader = exports.generateWidgetBundle = exports.generateRagDeleteRoute = exports.generateRagClearRoute = exports.generateRagStatsRoute = exports.generateRagQueryRoute = exports.generateRagUploadRoute = exports.generateRagPage = exports.generateRagLib = exports.generateStripeWebhookRoute = exports.generateSubscriptionRoute = exports.generatePortalRoute = exports.generateCheckoutRoute = exports.generateBillingPage = exports.generateStripeLib = exports.generateMiddleware = exports.generatePrismaSchema = exports.generateApiProtectionLib = exports.generateApiKeyAuthLib = exports.generateEncryptionLib = exports.generatePrismaLib = exports.generateNotifyProviderChangeLib = exports.generateInternalProviderUsageRoute = exports.generateInternalProviderIdRoute = exports.generateInternalProvidersRoute = exports.generateProviderSyncRoute = exports.generateProviderTestRoute = exports.generateProviderIdRoute = exports.generateProviderCrudRoute = exports.generateAppSettingsRoute = exports.generateAdminSettingsRoute = exports.generateGdprAccountDeleteRoute = exports.generateGdprDataExportRoute = exports.generateAuditLogRoute = exports.generateV1ModelsRoute = exports.generateModelsRoute = exports.generateHealthRoute = void 0;
-exports.FEATURE_TEMPLATES = exports.ALL_TEMPLATES = exports.TOOL_GENERATORS = exports.generateToolsInit = exports.generateWebhookTools = exports.generateDeeplTools = exports.generateAirtableTools = exports.generateGoogleSheetsTools = exports.generateVisionTools = exports.generateNlpTools = exports.generateCodeTools = exports.generateDocumentTools = exports.generateWebTools = exports.generateRoutesInit = exports.generateToolsRoutes = exports.generateGuardrailsRoutes = exports.generateRagRoutes = exports.generateChatRoutes = exports.generateFileExtractor = exports.generateDockerComposeAiService = exports.generateAiServiceReadme = exports.generateAiServiceDockerfile = exports.generateAiServiceRequirements = exports.generateAiServiceModels = exports.generateAiServiceConfig = exports.generateAiServiceMain = exports.generateGuardrailsService = exports.generateVectorStore = exports.generateRagService = exports.generateEmbeddingService = exports.generateModerationService = exports.generateModelService = exports.generateChatService = exports.generateServicesInit = exports.generateProviderClient = exports.TOOL_INFO = exports.writeAiManifest = exports.readAiManifest = exports.generateDockerComposeDev = exports.generateDockerComposeProd = exports.generateDockerignore = exports.generateDockerfile = exports.GDPR_SCHEMA_EXTENSION = exports.generateGdprConsentRoute = void 0;
+exports.generatePromptsIdRoute = exports.generatePromptsRoute = exports.generateAdminRolesIdRoute = exports.generateAdminRolesRoute = exports.generateAdminUsersIdRoute = exports.generateAdminUsersRoute = exports.generatePromptSelector = exports.generatePromptManagementPage = exports.generateModelProvidersPage = exports.generateRequirePermissionLib = exports.generatePermissionsLib = exports.generateAuditLogHelper = exports.generateAdminLogsPage = exports.generateAdminSettingsPage = exports.generateAdminRolesPage = exports.generateAdminUsersPage = exports.generateAdminDashboardPage = exports.generateAdminLayout = exports.generateConversationDetailRoute = exports.generateConversationsRoute = exports.generateChatStreamRouteWithPersistence = exports.generateModelSelector = exports.generateChatSidebar = exports.generateChatInput = exports.generateChatMessage = exports.generateUseChatHook = exports.generateChatPage = exports.generateResolveAuth = exports.generateAuthLib = exports.generateNextAuthTypes = exports.generateLogoutButton = exports.generateSessionProvider = exports.generateLoginPage = exports.generateNextAuthRoute = exports.generateUseAppNameHook = exports.generateSettingsPage = exports.generateUserProfileRoute = exports.generateProfilePage = exports.generateDashboardPage = exports.generateDashboardLayout = exports.generateAuthBasicLayout = exports.generateAppPageNoAuth = exports.generateAppPage = exports.generateAppLayoutWithAuth = exports.generateAppLayout = exports.generateGlobalsCss = exports.generatePostcssConfig = exports.generateTailwindConfig = exports.generateTsConfig = exports.generateNextConfig = void 0;
+exports.MFA_USER_FIELDS = exports.MFA_SCHEMA_EXTENSION = exports.generateMfaPage = exports.generateMfaDisableRoute = exports.generateMfaVerifyRoute = exports.generateMfaSetupRoute = exports.generateMfaLib = exports.generateRateLimiter = exports.generateApiKeyIdRoute = exports.generateApiKeysRoute = exports.generateApiKeyManagementPage = exports.generateWidgetLoader = exports.generateWidgetBundle = exports.generateRagDeleteRoute = exports.generateRagClearRoute = exports.generateRagStatsRoute = exports.generateRagQueryRoute = exports.generateRagUploadRoute = exports.generateRagPage = exports.generateRagLib = exports.generateStripeWebhookRoute = exports.generateSubscriptionRoute = exports.generatePortalRoute = exports.generateCheckoutRoute = exports.generateBillingPage = exports.generateStripeLib = exports.generateMiddlewareNoAuth = exports.generateMiddleware = exports.generatePrismaSchema = exports.generateApiProtectionLib = exports.generateApiKeyAuthLib = exports.generateEncryptionLib = exports.generatePrismaLib = exports.generateNotifyProviderChangeLib = exports.generateInternalProviderUsageRoute = exports.generateInternalProviderIdRoute = exports.generateInternalProvidersRoute = exports.generateProviderSyncRoute = exports.generateProviderTestRoute = exports.generateProviderIdRoute = exports.generateProviderCrudRoute = exports.generateAppSettingsRoute = exports.generateAdminSettingsRoute = exports.generateGdprAccountDeleteRoute = exports.generateGdprDataExportRoute = exports.generateAuditLogRoute = exports.generateV1ModelsRoute = exports.generateModelsRoute = exports.generateHealthRoute = exports.generatePromptsSetDefaultRoute = void 0;
+exports.FEATURE_TEMPLATES = exports.ALL_TEMPLATES = exports.TOOL_GENERATORS = exports.generateToolsInit = exports.generateWebhookTools = exports.generateDeeplTools = exports.generateAirtableTools = exports.generateGoogleSheetsTools = exports.generateVisionTools = exports.generateNlpTools = exports.generateCodeTools = exports.generateDocumentTools = exports.generateWebTools = exports.generateRoutesInit = exports.generateToolsRoutes = exports.generateGuardrailsRoutes = exports.generateRagRoutes = exports.generateChatRoutes = exports.generateFileExtractor = exports.generateDockerComposeAiService = exports.generateAiServiceReadme = exports.generateAiServiceDockerfile = exports.generateAiServiceRequirements = exports.generateAiServiceModels = exports.generateAiServiceConfig = exports.generateAiServiceMain = exports.generateGuardrailsService = exports.generateVectorStore = exports.generateRagService = exports.generateEmbeddingService = exports.generateModerationService = exports.generateModelService = exports.generateChatService = exports.generateServicesInit = exports.generateProviderClient = exports.TOOL_INFO = exports.writeAiManifest = exports.readAiManifest = exports.generateDockerComposeDev = exports.generateDockerComposeProd = exports.generateDockerignore = exports.generateDockerfile = exports.GDPR_SCHEMA_EXTENSION = exports.generateGdprConsentRoute = exports.generateGdprPage = exports.generateGdprLib = void 0;
 // Config templates
 var config_js_1 = require("./config.js");
 Object.defineProperty(exports, "generateNextConfig", { enumerable: true, get: function () { return config_js_1.generateNextConfig; } });
@@ -22,6 +22,7 @@ var layout_js_1 = require("./layout.js");
 Object.defineProperty(exports, "generateAppLayout", { enumerable: true, get: function () { return layout_js_1.generateAppLayout; } });
 Object.defineProperty(exports, "generateAppLayoutWithAuth", { enumerable: true, get: function () { return layout_js_1.generateAppLayoutWithAuth; } });
 Object.defineProperty(exports, "generateAppPage", { enumerable: true, get: function () { return layout_js_1.generateAppPage; } });
+Object.defineProperty(exports, "generateAppPageNoAuth", { enumerable: true, get: function () { return layout_js_1.generateAppPageNoAuth; } });
 Object.defineProperty(exports, "generateAuthBasicLayout", { enumerable: true, get: function () { return layout_js_1.generateAuthBasicLayout; } });
 Object.defineProperty(exports, "generateDashboardLayout", { enumerable: true, get: function () { return layout_js_1.generateDashboardLayout; } });
 Object.defineProperty(exports, "generateDashboardPage", { enumerable: true, get: function () { return layout_js_1.generateDashboardPage; } });
@@ -102,6 +103,7 @@ Object.defineProperty(exports, "generatePrismaSchema", { enumerable: true, get:
 // Middleware template
 var middleware_js_1 = require("./middleware.js");
 Object.defineProperty(exports, "generateMiddleware", { enumerable: true, get: function () { return middleware_js_1.generateMiddleware; } });
+Object.defineProperty(exports, "generateMiddlewareNoAuth", { enumerable: true, get: function () { return middleware_js_1.generateMiddlewareNoAuth; } });
 // Billing templates
 var billing_js_1 = require("./billing.js");
 Object.defineProperty(exports, "generateStripeLib", { enumerable: true, get: function () { return billing_js_1.generateStripeLib; } });

package/dist/templates/layout.d.ts

@@ -16,6 +16,12 @@ export declare function generateAppLayout(projectName?: string): string;
  * @returns TypeScript/JSX content for app/layout.tsx with SessionProvider
  */
 export declare function generateAppLayoutWithAuth(projectName?: string): string;
+/**
+ * Generates a simple landing page for projects WITHOUT auth.
+ * No useSession, no redirect — just renders immediately.
+ * @returns TypeScript/JSX content for app/page.tsx
+ */
+export declare function generateAppPageNoAuth(): string;
 /**
  * Generates the home page component that handles session-based routing
  * Redirects unauthenticated users to /login, authenticated users to /dashboard

package/dist/templates/layout.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"layout.d.ts","sourceRoot":"","sources":["../../src/templates/layout.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH;;;;;GAKG;AACH,wBAAgB,iBAAiB,CAAC,WAAW,GAAE,MAAuB,GAAG,MAAM,CAyB9E;AAED;;;;;GAKG;AACH,wBAAgB,yBAAyB,CAAC,WAAW,GAAE,MAAuB,GAAG,MAAM,CAmCtF;AAED;;;;;GAKG;AACH,wBAAgB,eAAe,IAAI,MAAM,CAiCxC;AAED;;;;GAIG;AACH,wBAAgB,uBAAuB,IAAI,MAAM,CA2BhD;AAED;;;;GAIG;AACH,wBAAgB,uBAAuB,IAAI,MAAM,CAuGhD;AAED;;;;GAIG;AACH,wBAAgB,qBAAqB,CAAC,QAAQ,GAAE,MAAM,EAAO,GAAG,MAAM,CAgErE;AAED;;;;GAIG;AACH,wBAAgB,mBAAmB,IAAI,MAAM,CAkG5C;AAED;;;GAGG;AACH,wBAAgB,wBAAwB,IAAI,MAAM,CA6BjD;AAED;;;;GAIG;AACH,wBAAgB,oBAAoB,IAAI,MAAM,CAyJ7C;AAED;;;;GAIG;AACH,wBAAgB,sBAAsB,IAAI,MAAM,CAkC/C"}
+{"version":3,"file":"layout.d.ts","sourceRoot":"","sources":["../../src/templates/layout.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH;;;;;GAKG;AACH,wBAAgB,iBAAiB,CAAC,WAAW,GAAE,MAAuB,GAAG,MAAM,CAyB9E;AAED;;;;;GAKG;AACH,wBAAgB,yBAAyB,CAAC,WAAW,GAAE,MAAuB,GAAG,MAAM,CAmCtF;AAED;;;;GAIG;AACH,wBAAgB,qBAAqB,IAAI,MAAM,CAkB9C;AAED;;;;;GAKG;AACH,wBAAgB,eAAe,IAAI,MAAM,CAiCxC;AAED;;;;GAIG;AACH,wBAAgB,uBAAuB,IAAI,MAAM,CA2BhD;AAED;;;;GAIG;AACH,wBAAgB,uBAAuB,IAAI,MAAM,CAuGhD;AAED;;;;GAIG;AACH,wBAAgB,qBAAqB,CAAC,QAAQ,GAAE,MAAM,EAAO,GAAG,MAAM,CAgErE;AAED;;;;GAIG;AACH,wBAAgB,mBAAmB,IAAI,MAAM,CAkG5C;AAED;;;GAGG;AACH,wBAAgB,wBAAwB,IAAI,MAAM,CA6BjD;AAED;;;;GAIG;AACH,wBAAgB,oBAAoB,IAAI,MAAM,CAyJ7C;AAED;;;;GAIG;AACH,wBAAgB,sBAAsB,IAAI,MAAM,CAkC/C"}

package/dist/templates/layout.js

@@ -6,6 +6,7 @@
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.generateAppLayout = generateAppLayout;
 exports.generateAppLayoutWithAuth = generateAppLayoutWithAuth;
+exports.generateAppPageNoAuth = generateAppPageNoAuth;
 exports.generateAppPage = generateAppPage;
 exports.generateAuthBasicLayout = generateAuthBasicLayout;
 exports.generateDashboardLayout = generateDashboardLayout;
@@ -88,6 +89,30 @@ export default function RootLayout({
 }
 `;
 }
+/**
+ * Generates a simple landing page for projects WITHOUT auth.
+ * No useSession, no redirect — just renders immediately.
+ * @returns TypeScript/JSX content for app/page.tsx
+ */
+function generateAppPageNoAuth() {
+    return `// @chimerai component=AppPageNoAuth version=1.0
+export default function Home() {
+  return (
+    <main className="flex min-h-screen flex-col items-center justify-center p-24">
+      <div className="text-center">
+        <h1 className="text-4xl font-bold mb-4">Welcome</h1>
+        <p className="text-muted-foreground">
+          Your ChimerAI application is running.
+        </p>
+        <p className="text-sm text-muted-foreground mt-2">
+          To add authentication, run: <code>chimerai add auth</code>
+        </p>
+      </div>
+    </main>
+  );
+}
+`;
+}
 /**
  * Generates the home page component that handles session-based routing
  * Redirects unauthenticated users to /login, authenticated users to /dashboard

package/dist/templates/middleware.d.ts

@@ -2,6 +2,13 @@
  * Next.js middleware template with security headers and CORS for widget endpoints.
  * Generates middleware.ts for the root of the Next.js project.
  */
+/**
+ * Generates a minimal Next.js middleware WITHOUT auth enforcement.
+ * Used when auth feature is not selected — only CORS + security headers.
+ * No getToken / next-auth/jwt import.
+ * @returns TypeScript content for middleware.ts
+ */
+export declare function generateMiddlewareNoAuth(): string;
 /**
  * Generates the Next.js middleware with security headers and CORS.
  * Widget endpoints (/api/v1/*) get CORS headers from CORS_ALLOWED_ORIGINS env.

package/dist/templates/middleware.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"middleware.d.ts","sourceRoot":"","sources":["../../src/templates/middleware.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH;;;;;GAKG;AACH,wBAAgB,kBAAkB,IAAI,MAAM,CAsG3C"}
+{"version":3,"file":"middleware.d.ts","sourceRoot":"","sources":["../../src/templates/middleware.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH;;;;;GAKG;AACH,wBAAgB,wBAAwB,IAAI,MAAM,CAuDjD;AAED;;;;;GAKG;AACH,wBAAgB,kBAAkB,IAAI,MAAM,CAsG3C"}

package/dist/templates/middleware.js

@@ -4,7 +4,70 @@
  * Generates middleware.ts for the root of the Next.js project.
  */
 Object.defineProperty(exports, "__esModule", { value: true });
+exports.generateMiddlewareNoAuth = generateMiddlewareNoAuth;
 exports.generateMiddleware = generateMiddleware;
+/**
+ * Generates a minimal Next.js middleware WITHOUT auth enforcement.
+ * Used when auth feature is not selected — only CORS + security headers.
+ * No getToken / next-auth/jwt import.
+ * @returns TypeScript content for middleware.ts
+ */
+function generateMiddlewareNoAuth() {
+    return `// @chimerai component=MiddlewareNoAuth version=1.0
+import { NextResponse } from 'next/server';
+import type { NextRequest } from 'next/server';
+
+/** Merge CORS_ALLOWED_ORIGINS + WIDGET_ALLOWED_ORIGINS (legacy alias) */
+function getAllowedOrigins(): string[] {
+  const raw = [
+    process.env.CORS_ALLOWED_ORIGINS || '',
+    process.env.WIDGET_ALLOWED_ORIGINS || '',
+  ].filter(Boolean).join(',');
+  if (!raw) return ['*'];
+  return raw.split(',').map(o => o.trim()).filter(Boolean);
+}
+
+export async function middleware(request: NextRequest) {
+  const { pathname } = request.nextUrl;
+
+  // --- CORS for Widget/Public API Endpoints (/api/v1/*) ---
+  if (pathname.startsWith('/api/v1/')) {
+    const allowedOrigins = getAllowedOrigins();
+    const origin = request.headers.get('origin') || '';
+
+    if (request.method === 'OPTIONS') {
+      const res = new NextResponse(null, { status: 204 });
+      const allowOrigin = allowedOrigins.includes('*') ? '*' : (allowedOrigins.includes(origin) ? origin : '');
+      if (allowOrigin) res.headers.set('Access-Control-Allow-Origin', allowOrigin);
+      res.headers.set('Access-Control-Allow-Methods', 'GET, POST, OPTIONS');
+      res.headers.set('Access-Control-Allow-Headers', 'Content-Type, x-api-key, Authorization');
+      res.headers.set('Access-Control-Max-Age', '86400');
+      return res;
+    }
+
+    const response = NextResponse.next();
+    const allowOrigin = allowedOrigins.includes('*') ? '*' : (allowedOrigins.includes(origin) ? origin : '');
+    if (allowOrigin) response.headers.set('Access-Control-Allow-Origin', allowOrigin);
+    return response;
+  }
+
+  // --- Standard security headers for all routes ---
+  const response = NextResponse.next();
+  response.headers.set('X-Frame-Options', 'DENY');
+  response.headers.set('X-Content-Type-Options', 'nosniff');
+  response.headers.set('Referrer-Policy', 'strict-origin-when-cross-origin');
+  response.headers.set('Permissions-Policy', 'camera=(), microphone=(), geolocation=()');
+  if (process.env.NODE_ENV === 'production') {
+    response.headers.set('Strict-Transport-Security', 'max-age=31536000; includeSubDomains; preload');
+  }
+  return response;
+}
+
+export const config = {
+  matcher: ['/((?!_next/static|_next/image|favicon.ico).*)'],
+};
+`;
+}
 /**
  * Generates the Next.js middleware with security headers and CORS.
  * Widget endpoints (/api/v1/*) get CORS headers from CORS_ALLOWED_ORIGINS env.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@chimerai/cli",
-  "version": "0.2.88",
+  "version": "0.2.89",
   "description": "CLI wizard for ChimerAI starter kit — scaffold auth, RBAC, AI chat, billing and more into any Next.js project",
   "main": "./dist/index.js",
   "bin": {