@decohere/scaffold 0.0.1-dev.126 → 0.0.1-dev.18

package/types/src/models/project.model.d.ts

@@ -1,60 +0,0 @@
-import type { KeyedModel, SourceFile, SourceFileProvider } from "./source-file.js";
-/**
- * A sub-unit of the monorepo (e.g. `projects/api`).
- *
- * Models and files registered here produce paths relative to `dir`. The parent
- * `MonoRepoScaffold` calls `files()` and prepends `dir/` to every path, so
- * models remain unaware of where they live in the repo.
- */
-export declare class ProjectScaffold {
-    readonly dir: string;
-    private readonly _models;
-    private readonly _files;
-    constructor(dir: string);
-    addModel<T extends KeyedModel>(model: T): T;
-    addFile(provider: SourceFileProvider): this;
-    getModel<T extends SourceFileProvider>(key: string): T | undefined;
-    getModels<T extends SourceFileProvider>(ctor: new (...args: never[]) => T): T[];
-    /** Returns all files with `dir/` prepended to each path. */
-    files(): SourceFile[];
-}
-export declare abstract class WorkspaceScaffold {
-    readonly files: SourceFile[];
-    targetDir: string;
-    private _name;
-    /** Project name — host directory basename, not the in-container mount path. */
-    get name(): string;
-    setName(name: string): this;
-    /** Add an ad-hoc file provider whose output is included at render time. */
-    addFile(provider: SourceFileProvider): this;
-    abstract addModel<T extends KeyedModel>(model: T): T;
-    abstract getModel<T extends SourceFileProvider>(key: string): T | undefined;
-    abstract getModels<T extends SourceFileProvider>(ctor: new (...args: never[]) => T): T[];
-    abstract getProject(dir: string): ProjectScaffold | undefined;
-    abstract getProjects(): readonly ProjectScaffold[];
-    abstract scaffold(): Promise<void> | void;
-}
-export declare class MonoRepoScaffold extends WorkspaceScaffold {
-    private readonly _models;
-    private readonly _projects;
-    /** Register a named project. */
-    addProject(project: ProjectScaffold): ProjectScaffold;
-    /** Retrieve a previously-registered project by its directory path. */
-    getProject(dir: string): ProjectScaffold | undefined;
-    /** All registered projects, in registration order. */
-    getProjects(): readonly ProjectScaffold[];
-    /** Register a named model at workspace level. */
-    addModel<T extends KeyedModel>(model: T): T;
-    /**
-     * Retrieve a model by key. Searches workspace models first, then all
-     * registered projects in order.
-     */
-    getModel<T extends SourceFileProvider>(key: string): T | undefined;
-    /**
-     * Retrieve all models of a given type. Searches workspace models and all
-     * projects, so features can discover controllers across multiple projects.
-     */
-    getModels<T extends SourceFileProvider>(ctor: new (...args: never[]) => T): T[];
-    /** Render all models and projects into files, then write everything to disk. */
-    scaffold(): Promise<void>;
-}

package/types/src/models/tsconfig.model.d.ts

@@ -1,5 +0,0 @@
-import type { KeyedModel, SourceFile } from "./source-file.js";
-export declare class TsConfig implements KeyedModel {
-    readonly key: string;
-    files(): SourceFile[];
-}

package/types/src/models/vitest-config.model.d.ts

@@ -1,5 +0,0 @@
-import type { KeyedModel, SourceFile } from "./source-file.js";
-export declare class VitestConfig implements KeyedModel {
-    readonly key: string;
-    files(): SourceFile[];
-}

package/types/src/models/vscode-settings.model.d.ts

@@ -1,7 +0,0 @@
-import type { KeyedModel, SourceFile } from "./source-file.js";
-export declare class VSCodeSettings implements KeyedModel {
-    private readonly title;
-    readonly key: string;
-    constructor(title: string);
-    files(): SourceFile[];
-}

package/types/src/program.d.ts

@@ -1,8 +0,0 @@
-import { Command } from "commander";
-export declare function createProgram(): Command;
-/**
- * Runs the CLI and returns its exit code; the bin (`cli.ts`) exits with it. Returning instead
- * of calling `process.exit` here lets tests run it in process: a run that finished after its
- * test had timed out used to call `process.exit` in whichever test came next.
- */
-export declare function runCli(argv?: string[]): Promise<number>;

package/types/src/services/scaffold.service.d.ts

@@ -1,22 +0,0 @@
-import type { WorkspaceScaffold } from "../models/project.model.js";
-/**
- * A feature has three responsibilities:
- *  1. `getOptions` — resolve provider selection and any follow-up questions.
- *     Receives the options collected so far; returns only the keys it owns.
- *     Short-circuits if the caller already supplied those keys via CLI flags.
- *  2. `scaffold` — mutate the workspace models and/or write files using the
- *     fully-resolved options. Called after ALL features have gathered options
- *     but BEFORE files are written to disk.
- *  3. `finalize` (optional) — run post-write actions (e.g. install dependencies).
- *     Called after workspace.scaffold() has flushed all files to disk.
- */
-export interface Feature<TOptions extends object = object> {
-    getOptions(workspace: WorkspaceScaffold, cliOptions: Partial<TOptions>): Promise<Partial<TOptions>>;
-    scaffold(workspace: WorkspaceScaffold, options: TOptions): Promise<void> | void;
-    finalize?(workspace: WorkspaceScaffold, options: TOptions): Promise<void> | void;
-}
-declare function scaffold(workspace: WorkspaceScaffold, cliOptions: object, features: Feature[]): Promise<void>;
-export declare const ScaffoldService: {
-    scaffold: typeof scaffold;
-};
-export {};

package/types/src/version.d.ts

@@ -1,6 +0,0 @@
-/** Version of @decohere/create, used to pin scaffolded @decohere/* dependencies. */
-export declare const CREATE_VERSION: string;
-/** Canonical published Docker repository for the @decohere/create builder image. */
-export declare const CREATE_IMAGE_REPOSITORY: string;
-/** Published app Dev Container base (`docker pull` updates shared layers). */
-export declare const DEVCONTAINER_IMAGE_REPOSITORY: string;

package/types/src/webapi/api-name.d.ts

@@ -1,14 +0,0 @@
-/** Lowercase npm-safe directory slug: `billing`, `admin-api`. */
-export declare const API_NAME_PATTERN: RegExp;
-export declare class CreateCliError extends Error {
-    constructor(message: string);
-}
-export declare function assertValidApiName(name: string): void;
-/** Default `["api"]` when the caller omitted `--name`. Rejects duplicates and invalid slugs. */
-export declare function parseApiNames(raw: readonly string[] | undefined): string[];
-export declare function isDecohereWorkspace(dir: string): boolean;
-/** Directory names under `projects/` that already have a `package.json`. */
-export declare function listExistingApiNames(dir: string): string[];
-/** `billing` → `BILLING`, `admin-api` → `ADMIN_API` — prefix for `{PREFIX}_DB_HOST`. */
-export declare function apiEnvPrefix(apiName: string): string;
-export declare function apiNameFromProjectDir(dir: string): string;

package/types/src/webapi/auth0-commands.d.ts

@@ -1,11 +0,0 @@
-import * as auth0Cli from "./features/auth0-cli.js";
-export declare const AUTH0_CLI_INSTALL_MESSAGE: string;
-/** Throw if the `auth0` binary is missing. */
-export declare function requireInstalled(): void;
-/**
- * Log in when there is no tenant session or the Management API token is expired.
- * Returns the active tenant.
- */
-export declare function ensureLoggedIn(): auth0Cli.Auth0Tenant;
-export declare function runAuth0Login(): void;
-export declare function runAuth0Configure(directory?: string): void;

package/types/src/webapi/authorize-scopes.d.ts

@@ -1,7 +0,0 @@
-/** OIDC scopes requested on the Postman SPA token (not Auth0 API permissions). */
-export declare const OIDC_SCOPES: readonly ["openid", "profile", "email"];
-/** Collect action:Subject scopes from Authorize decorators in each API src tree. */
-export declare function discoverAuthorizeScopes(rootDir: string): string[];
-/** Additive union so Auth0 CLI scope replace does not drop permissions already on the API. */
-export declare function mergeApiScopes(discovered: readonly string[], existing: readonly string[]): string[];
-export declare function postmanRequestedScopes(apiScopes: readonly string[]): string;

package/types/src/webapi/cli-options.d.ts

@@ -1,6 +0,0 @@
-import type { Command } from "commander";
-import type { ApiOptions } from "./create-api.js";
-export declare function collectName(value: string, previous: string[]): string[];
-export declare function addWebapiFeatureOptions(cmd: Command): Command;
-export declare function toApiOptions(directory: string | undefined, opts: Record<string, unknown>, extra?: Partial<ApiOptions>): ApiOptions;
-export declare function runScaffoldApi(normalized: ApiOptions): Promise<void>;

package/types/src/webapi/create-api.d.ts

@@ -1,15 +0,0 @@
-export { WEBAPI_PROJECT_DIR, WEBAPI_RELEASE_ENTRY } from "./const.js";
-export type ApiOptions = {
-    d?: string;
-    /** Host project name (directory basename). Required when scaffolding into the create-builder `/workspace` mount. */
-    projectName?: string;
-    /** API slugs under `projects/`. Default `["api"]`. Repeatable `--name`. */
-    names?: string[];
-    /** Add APIs to an existing Decohere workspace instead of creating a new one. */
-    add?: boolean;
-    authProvider?: "auth0" | "none";
-    databaseProvider?: "none" | "postgres/typeorm";
-    postmanProvider?: "api" | "local" | "none";
-    installDependencies?: "yes" | "no";
-};
-export declare function scaffoldApi(cliOptions: ApiOptions): Promise<void>;

package/types/src/webapi/devcontainer/codebase-rag-mcp.d.ts

@@ -1,32 +0,0 @@
-export type CodebaseRagCredentials = {
-    url: string;
-    token: string;
-};
-export type McpJson = {
-    mcpServers?: Record<string, unknown>;
-    [key: string]: unknown;
-};
-declare function loadDotenv(path: string, env: NodeJS.ProcessEnv): void;
-declare function seedFromMcpJson(raw: string): CodebaseRagCredentials | null;
-declare function mergeIntoMcpJson(input: {
-    mcpPath: string;
-    url: string;
-    token: string;
-    hostRoot: string;
-}): {
-    skipped?: string;
-    path?: string;
-    root?: string;
-};
-declare function mergeFromEnv(env?: NodeJS.ProcessEnv): number;
-declare function seedPrint(mcpPath: string): number;
-declare function main(argv?: string[]): number;
-export declare const codebaseRagMcp: {
-    loadDotenv: typeof loadDotenv;
-    seedFromMcpJson: typeof seedFromMcpJson;
-    mergeIntoMcpJson: typeof mergeIntoMcpJson;
-    mergeFromEnv: typeof mergeFromEnv;
-    seedPrint: typeof seedPrint;
-    main: typeof main;
-};
-export {};

package/types/src/webapi/devcontainer/codebase-rag-mcp.ts

@@ -1,182 +0,0 @@
-import {
-	chmodSync,
-	mkdirSync,
-	readFileSync,
-	renameSync,
-	statSync,
-	writeFileSync,
-} from "node:fs";
-import { dirname, join } from "node:path";
-import { fileURLToPath } from "node:url";
-
-export type CodebaseRagCredentials = {
-	url: string;
-	token: string;
-};
-
-export type McpJson = {
-	mcpServers?: Record<string, unknown>;
-	[key: string]: unknown;
-};
-
-function isRecord(value: unknown): value is Record<string, unknown> {
-	return value != null && typeof value === "object" && !Array.isArray(value);
-}
-
-function loadDotenv(path: string, env: NodeJS.ProcessEnv): void {
-	let raw: string;
-	try {
-		raw = readFileSync(path, "utf8");
-	} catch {
-		return;
-	}
-	for (const line of raw.split(/\r?\n/)) {
-		const trimmed = line.trim();
-		if (!trimmed || trimmed.startsWith("#") || !trimmed.includes("=")) continue;
-		const eq = trimmed.indexOf("=");
-		const key = trimmed.slice(0, eq).trim();
-		const value = trimmed
-			.slice(eq + 1)
-			.trim()
-			.replace(/^["']|["']$/g, "");
-		if (key && env[key] === undefined) env[key] = value;
-	}
-}
-
-function seedFromMcpJson(raw: string): CodebaseRagCredentials | null {
-	let data: unknown;
-	try {
-		data = JSON.parse(raw);
-	} catch {
-		return null;
-	}
-	if (!isRecord(data)) return null;
-	const servers = data.mcpServers;
-	if (!isRecord(servers)) return null;
-	const server = servers["codebase-rag"];
-	if (!isRecord(server)) return null;
-	const url = typeof server.url === "string" ? server.url.trim() : "";
-	const headers = isRecord(server.headers) ? server.headers : {};
-	const auth = typeof headers.Authorization === "string" ? headers.Authorization.trim() : "";
-	const token = auth.toLowerCase().startsWith("bearer ") ? auth.slice(7).trim() : "";
-	if (!url.startsWith("http") || token.length === 0) return null;
-	return { url, token };
-}
-
-function mergeIntoMcpJson(input: {
-	mcpPath: string;
-	url: string;
-	token: string;
-	hostRoot: string;
-}): { skipped?: string; path?: string; root?: string } {
-	const { mcpPath, url, token, hostRoot } = input;
-	if (!url || !token) {
-		return { skipped: "no URL/token" };
-	}
-
-	const xRoot = hostRoot || "${workspaceFolder}";
-	mkdirSync(dirname(mcpPath), { recursive: true });
-
-	let data: McpJson = { mcpServers: {} };
-	try {
-		if (statSync(mcpPath).size > 0) {
-			const loaded: unknown = JSON.parse(readFileSync(mcpPath, "utf8"));
-			if (isRecord(loaded)) data = loaded as McpJson;
-		}
-	} catch (err) {
-		const code = isRecord(err) && typeof err.code === "string" ? err.code : "";
-		if (code !== "ENOENT") {
-			console.log(
-				"codebase-rag MCP: existing mcp.json is invalid JSON; replacing rag entry only after backup",
-			);
-			renameSync(mcpPath, `${mcpPath}.bak`);
-		}
-	}
-
-	const servers = isRecord(data.mcpServers) ? data.mcpServers : {};
-	data.mcpServers = servers;
-	servers["codebase-rag"] = {
-		url,
-		headers: {
-			Authorization: `Bearer ${token}`,
-			"X-Codebase-Root": xRoot,
-		},
-	};
-	writeFileSync(mcpPath, `${JSON.stringify(data, null, 2)}\n`, "utf8");
-	try {
-		chmodSync(mcpPath, 0o600);
-	} catch {
-		// memfs and some hosts omit chmod
-	}
-	return { path: mcpPath, root: xRoot };
-}
-
-function workspaceRoot(env: NodeJS.ProcessEnv = process.env): string {
-	const fromEnv = env.CODEBASE_RAG_WORKSPACE?.trim();
-	if (fromEnv) return fromEnv;
-	// Scaffolded copy lives at <repo>/.devcontainer/codebase-rag-mcp.ts
-	return dirname(dirname(fileURLToPath(import.meta.url)));
-}
-
-function mergeFromEnv(env: NodeJS.ProcessEnv = process.env): number {
-	const root = workspaceRoot(env);
-	const cursorDir = join(root, ".cursor");
-	loadDotenv(join(cursorDir, "codebase-rag.env"), env);
-	const url = (env.CODEBASE_RAG_MCP_URL ?? "").trim();
-	const token = (env.CODEBASE_RAG_MCP_TOKEN ?? "").trim();
-	const hostRoot = (env.CODEBASE_RAG_MCP_ROOT ?? "").trim() || root;
-	const result = mergeIntoMcpJson({
-		mcpPath: join(cursorDir, "mcp.json"),
-		url,
-		token,
-		hostRoot,
-	});
-	if (result.skipped != null) {
-		console.log(`codebase-rag MCP: skipped (${result.skipped})`);
-		return 0;
-	}
-	console.log(`codebase-rag MCP: wrote ${result.path} url=${url} root=${result.root}`);
-	return 0;
-}
-
-function seedPrint(mcpPath: string): number {
-	let raw: string;
-	try {
-		raw = readFileSync(mcpPath, "utf8");
-	} catch {
-		return 1;
-	}
-	const creds = seedFromMcpJson(raw);
-	if (creds == null) return 1;
-	console.log(creds.url);
-	console.log(creds.token);
-	return 0;
-}
-
-function main(argv = process.argv.slice(2)): number {
-	const command = argv[0] ?? "merge";
-	if (command === "seed-print") {
-		const mcpPath = argv[1];
-		if (mcpPath == null || mcpPath.length === 0) return 1;
-		return seedPrint(mcpPath);
-	}
-	if (command === "merge") {
-		return mergeFromEnv();
-	}
-	console.error(`codebase-rag MCP: unknown command ${command}`);
-	return 1;
-}
-
-const invoked = (process.argv[1] ?? "").replaceAll("\\", "/");
-if (invoked.endsWith("/codebase-rag-mcp.ts") || invoked.endsWith("/codebase-rag-mcp.js")) {
-	process.exit(main());
-}
-
-export const codebaseRagMcp = {
-	loadDotenv,
-	seedFromMcpJson,
-	mergeIntoMcpJson,
-	mergeFromEnv,
-	seedPrint,
-	main,
-};

package/types/src/webapi/devcontainer/host-scripts.d.ts

@@ -1,7 +0,0 @@
-import type { SourceFile, SourceFileProvider } from "../../models/source-file.js";
-export declare function devcontainerTemplatePath(name: string): string;
-export declare function codebaseRagMcpSourcePath(): string;
-/** Host + container scripts for the scaffolded Dev Container. */
-export declare class DevContainerHostScripts implements SourceFileProvider {
-    files(): SourceFile[];
-}

package/types/src/webapi/devcontainer/templates/codebase-rag.env.example

@@ -1,3 +0,0 @@
-# Optional. Written to .cursor/codebase-rag.env by initialize.sh (gitignored).
-# CODEBASE_RAG_MCP_URL=https://rag.example.com/mcp
-# CODEBASE_RAG_MCP_TOKEN=

package/types/src/webapi/devcontainer/templates/initialize.sh

@@ -1,169 +0,0 @@
-#!/usr/bin/env bash
-# Runs on the host before the container is created (devcontainer initializeCommand).
-# Creates bind-mount sources as the host user so Docker does not create them as root.
-# Optional npm / gh / MCP setup is y/N on a TTY; no TTY skips.
-set -euo pipefail
-
-root="$(cd "$(dirname "${BASH_SOURCE[0]}")/.." && pwd)"
-here="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
-# shellcheck source=tty-prompt.sh
-source "$here/tty-prompt.sh"
-
-npm_dir="$root/.devcontainer/npm-auth"
-gh_dir="$root/.devcontainer/gh-auth"
-gh_env="$root/.devcontainer/gh.env"
-cursor_dir="$root/.cursor"
-RAG_ENV="$cursor_dir/codebase-rag.env"
-
-run_codebase_rag_mcp() {
-	local script="$here/codebase-rag-mcp.ts"
-	CODEBASE_RAG_WORKSPACE="$root" node --experimental-strip-types "$script" "$@"
-}
-
-load_rag_env() {
-	RAG_URL=""
-	RAG_TOKEN=""
-	[[ -f "$RAG_ENV" ]] || return 0
-	# shellcheck disable=SC1090
-	set -a
-	# shellcheck disable=SC1090
-	source "$RAG_ENV"
-	set +a
-	RAG_URL="${CODEBASE_RAG_MCP_URL:-}"
-	RAG_TOKEN="${CODEBASE_RAG_MCP_TOKEN:-}"
-}
-
-write_rag_env() {
-	mkdir -p "$(dirname "$RAG_ENV")"
-	umask 077
-	cat >"$RAG_ENV" <<EOF
-# Written by .devcontainer/initialize.sh. Not in git.
-CODEBASE_RAG_MCP_URL=${RAG_URL}
-CODEBASE_RAG_MCP_TOKEN=${RAG_TOKEN}
-CODEBASE_RAG_MCP_ROOT=${root}
-EOF
-	chmod 600 "$RAG_ENV"
-	if [[ -n "$RAG_URL" && -n "$RAG_TOKEN" ]]; then
-		run_codebase_rag_mcp merge || true
-	fi
-}
-
-seed_rag_from_host_mcp() {
-	local mcp="${HOME}/.cursor/mcp.json"
-	[[ -f "$mcp" ]] || return 1
-	command -v node >/dev/null 2>&1 || return 1
-	run_codebase_rag_mcp seed-print "$mcp"
-}
-
-ensure_cursor_dir() {
-	mkdir -p "$cursor_dir"
-}
-
-ensure_auth_dir() {
-	local dir="$1"
-	if ! mkdir -p "$dir" 2>/dev/null; then
-		echo "Cannot create $dir (permission denied)." >&2
-		echo "The scaffold container likely left .devcontainer root-owned. Fix with:" >&2
-		echo "  sudo chown -R \"$USER:$USER\" \"$root\"" >&2
-		exit 1
-	fi
-	{
-		echo "*"
-		echo "!.gitignore"
-	} >"$dir/.gitignore"
-}
-
-ensure_gh_env() {
-	if [[ -d "$gh_env" ]]; then
-		echo "Refusing to start: $gh_env is a directory (left by a prior bind mount). Remove it and rebuild." >&2
-		exit 1
-	fi
-	touch "$gh_env"
-}
-
-setup_npm_auth() {
-	if [[ -f "$npm_dir/.npmrc" ]]; then
-		echo "npm auth: using $npm_dir/.npmrc"
-		return 0
-	fi
-	if ! prompt_yn "Configure npm auth for this workspace?"; then
-		echo "npm auth: skipped"
-		return 0
-	fi
-	if [[ -f "${HOME}/.npmrc" ]]; then
-		cp -a "${HOME}/.npmrc" "$npm_dir/.npmrc"
-		echo "npm auth: copied ~/.npmrc → $npm_dir/.npmrc"
-		return 0
-	fi
-	echo "npm auth: no ~/.npmrc — log in inside the container if prompted"
-}
-
-setup_gh_auth() {
-	if [[ -f "$gh_dir/hosts.yml" ]]; then
-		echo "gh auth: using $gh_dir/hosts.yml"
-		return 0
-	fi
-	if ! prompt_yn "Configure GitHub CLI auth for this workspace?"; then
-		echo "gh auth: skipped"
-		return 0
-	fi
-	if [[ -f "${HOME}/.config/gh/hosts.yml" ]]; then
-		cp -a "${HOME}/.config/gh/hosts.yml" "$gh_dir/hosts.yml"
-		[[ -f "${HOME}/.config/gh/config.yml" ]] &&
-			cp -a "${HOME}/.config/gh/config.yml" "$gh_dir/config.yml"
-		echo "gh auth: copied ~/.config/gh → $gh_dir"
-		return 0
-	fi
-	echo "gh auth: no ~/.config/gh/hosts.yml — log in inside the container if prompted"
-}
-
-setup_codebase_rag_env() {
-	load_rag_env
-	if [[ -n "$RAG_URL" && -n "$RAG_TOKEN" ]]; then
-		write_rag_env
-		echo "codebase-rag MCP: using $RAG_ENV"
-		return 0
-	fi
-
-	local seeded
-	if seeded="$(seed_rag_from_host_mcp 2>/dev/null)"; then
-		if prompt_yn "Found codebase-rag in ~/.cursor/mcp.json. Use it for this workspace?" y; then
-			RAG_URL="$(printf '%s\n' "$seeded" | sed -n '1p')"
-			RAG_TOKEN="$(printf '%s\n' "$seeded" | sed -n '2p')"
-			write_rag_env
-			echo "codebase-rag MCP: imported HTTP server from ~/.cursor/mcp.json → $RAG_ENV"
-			return 0
-		fi
-	fi
-
-	if ! prompt_yn "Configure codebase RAG MCP (semantic search)?"; then
-		RAG_URL=""
-		RAG_TOKEN=""
-		write_rag_env
-		echo "codebase-rag MCP: skipped"
-		return 0
-	fi
-
-	printf '%s\n' "Empty URL skips. Example: https://rag.example.com/mcp" >/dev/tty
-	printf '%s' "MCP URL: " >/dev/tty
-	read_tty RAG_URL
-	RAG_URL="$(printf '%s' "$RAG_URL" | sed 's/^[[:space:]]*//;s/[[:space:]]*$//')"
-	if [[ -z "$RAG_URL" ]]; then
-		RAG_TOKEN=""
-		write_rag_env
-		echo "codebase-rag MCP: skipped"
-		return 0
-	fi
-	printf '%s' "Bearer token (hidden): " >/dev/tty
-	read_tty RAG_TOKEN hidden
-	write_rag_env
-	echo "codebase-rag MCP: saved $RAG_ENV"
-}
-
-ensure_auth_dir "$npm_dir"
-ensure_auth_dir "$gh_dir"
-ensure_gh_env
-ensure_cursor_dir
-setup_npm_auth
-setup_gh_auth
-setup_codebase_rag_env

package/types/src/webapi/devcontainer/templates/post-create.sh

@@ -1,35 +0,0 @@
-#!/usr/bin/env bash
-# Runs after container create and when workspace content updates
-# (devcontainer postCreateCommand / updateContentCommand).
-# Installs deps when missing or when the lockfile changed; skips otherwise.
-set -euo pipefail
-
-root="$(cd "$(dirname "${BASH_SOURCE[0]}")/.." && pwd)"
-cd "$root"
-
-lockfile="pnpm-lock.yaml"
-stamp="node_modules/.decohere-pnpm-lock.sha"
-
-current_hash=""
-if [[ -f "$lockfile" ]]; then
-	current_hash="$(sha256sum "$lockfile" | awk '{print $1}')"
-elif [[ -f package.json ]]; then
-	current_hash="$(sha256sum package.json | awk '{print $1}')"
-fi
-
-if [[ -d node_modules/.bin ]] && [[ -n "$current_hash" ]] && [[ -f "$stamp" ]] && [[ "$(cat "$stamp")" == "$current_hash" ]]; then
-	echo "node_modules: up to date, skipping pnpm install"
-	exit 0
-fi
-
-echo "node_modules: installing dependencies (first create may take a while)..."
-if [[ -f "$lockfile" ]]; then
-	pnpm install --frozen-lockfile
-else
-	pnpm install
-fi
-
-if [[ -n "$current_hash" ]]; then
-	mkdir -p node_modules
-	printf '%s\n' "$current_hash" >"$stamp"
-fi