@draekien/create-d9-app 0.0.2 → 0.0.4

package/templates/base/.claude/skills/shadcn/scripts/showcase-coverage.mjs

@@ -0,0 +1,53 @@
+#!/usr/bin/env node
+// Lists installed UI components that no file in the showcase imports.
+// Usage: node showcase-coverage.mjs <ui-dir> <showcase-dir...>
+import { readdirSync, readFileSync, statSync } from "node:fs"
+import { basename, extname, join, resolve } from "node:path"
+
+const [uiArg, ...roots] = process.argv.slice(2)
+
+if (!uiArg || roots.length === 0) {
+  console.error("Usage: node showcase-coverage.mjs <ui-dir> <showcase-dir...>")
+  process.exit(1)
+}
+
+const uiDir = resolve(uiArg)
+
+const components = readdirSync(uiDir)
+  .filter((file) => [".tsx", ".ts"].includes(extname(file)))
+  .map((file) => basename(file, extname(file)))
+
+function walk(path) {
+  if (statSync(path).isFile()) {
+    return [path]
+  }
+
+  return readdirSync(path).flatMap((entry) => {
+    const child = join(path, entry)
+    // Skip the ui directory so components don't count as using each other.
+    if (entry === "node_modules" || child === uiDir) {
+      return []
+    }
+    return walk(child)
+  })
+}
+
+const source = roots
+  .map((root) => resolve(root))
+  .flatMap(walk)
+  .filter((file) => /\.(tsx?|jsx?)$/.test(file))
+  .map((file) => readFileSync(file, "utf8"))
+  .join("\n")
+
+const missing = components.filter(
+  (name) => !new RegExp(`/ui/${name}["']`).test(source)
+)
+
+console.log(
+  `${components.length - missing.length}/${components.length} components shown.`
+)
+
+if (missing.length > 0) {
+  console.log(`Missing: ${missing.join(", ")}`)
+  process.exit(1)
+}

package/templates/base/.claude/skills/upgrade-dependencies/SKILL.md

@@ -0,0 +1,99 @@
+---
+name: upgrade-dependencies
+description: Upgrades outdated patch and minor dependency pins in a pnpm, npm, yarn or bun workspace to exact versions, runs build, check, typecheck and test, and reports every change. Applies when asked to "upgrade dependencies", "update packages", "bump versions", or "update deps".
+argument-hint: "[--accept]"
+allowed-tools: Bash(npm view *), Bash(gh release view *), Bash(gh api *), Bash(pnpm *), Bash(npm *), Bash(yarn *), Bash(bun *), Bash(git diff *), Bash(git status *)
+---
+
+# Upgrade dependencies
+
+Arguments: `$ARGUMENTS`. `--accept` means the developer accepts the breaking-change list in advance; proceed at step 4 without stopping.
+
+Apply patch and minor upgrades only. Never apply a major; list it as `held: major`.
+
+## 1. Read the workspace
+
+- Package manager: root `package.json` field `packageManager` (`pnpm@11.25.0` means `pnpm`). Call it `<pm>` below.
+- Manifests: root `package.json`, `apps/*/package.json`, `packages/*/package.json`.
+- Pins: entries in `dependencies`, `devDependencies`, `optionalDependencies`. Skip `workspace:*`, `link:`, `file:`, `git`, `npm:` alias and URL specs.
+- Minimum age in minutes: `minimumReleaseAge` in `pnpm-workspace.yaml` or `.npmrc`; if unset, `1440`.
+
+## 2. Find upgrades
+
+Run once per distinct package name:
+
+```sh
+npm view <pkg> versions time --json
+```
+
+```json
+{
+  "versions": ["5.9.2", "5.9.3", "6.0.0-beta", "6.0.2", "6.0.3"],
+  "time": {
+    "created": "2012-10-01T15:35:39.553Z",
+    "modified": "2026-10-10T08:24:07.208Z",
+    "5.9.3": "2025-09-30T21:19:38.784Z",
+    "6.0.0-beta": "2026-02-11T18:26:37.557Z",
+    "6.0.2": "2026-03-23T16:14:45.521Z",
+    "6.0.3": "2026-04-16T23:38:27.905Z"
+  }
+}
+```
+
+A package with one version returns `versions` as a string, not an array.
+
+Candidates: versions without a `-` prerelease suffix, with `time[version]` at least the minimum age before now.
+
+- Same major as the pin, newer than the pin: take the highest. Type is `minor` if the minor differs, else `patch`.
+- Higher major exists: record `held: major` with the highest eligible version. Do not apply it.
+- No candidate newer than the pin: current.
+
+If every pin is current, change no files, report `all pins current`, and stop.
+
+## 3. Read release notes
+
+For each package to upgrade, read the notes for every release after the old version up to and including the new one.
+
+```sh
+gh release view v<version> --repo <owner>/<repo> --json body
+```
+
+- Repository: `npm view <pkg> repository.url`.
+- No GitHub release for the tag: read `CHANGELOG.md` in the repository for the same range.
+- Record each breaking change, deprecation and migration step per package.
+
+## 4. Surface and stop
+
+Print one list: package, old version, new version, type, breaking changes and migrations (or `none found`). Then:
+
+- Without `--accept`: stop and ask the developer to accept or exclude packages. Edit nothing before the answer.
+- With `--accept`: continue.
+
+## 5. Apply
+
+- Set each upgraded pin to the exact new version: no `^`, no `~`, no `latest`.
+- Run `<pm> install`.
+- Run each project script with `<pm> run <script>` in this order: `build`, `check`, `typecheck`, `test`. Skip a script the root `package.json` does not define.
+
+## 6. Handle a failing check
+
+For each failure:
+
+- The release notes read in step 3 name the change and its migration: apply the migration, then re-run `<pm> install` and all four scripts.
+- Otherwise: set the package that caused the failure back to its old version, re-run `<pm> install` and all four scripts. Report it as `held: check failed` with the error text.
+
+Repeat until `build`, `check`, `typecheck` and `test` all exit 0. Never finish with a failing check.
+
+## 7. Report
+
+Print a table of changed packages:
+
+| Package | Old | New | Type |
+| --- | --- | --- | --- |
+| typescript | 5.9.2 | 5.9.3 | patch |
+
+Below it list:
+
+- `held: major`: package, current version, newest eligible major.
+- `held: check failed`: package, old version, attempted version, error text.
+- Migrations applied, with the file changed.

package/templates/base/AGENTS.md

@@ -14,9 +14,17 @@ Before editing files for a substantial task:
 
 - Turborepo monorepo managed with pnpm. Apps in `apps/`, shared packages in `packages/`.
 - `apps/web`: TanStack Start on Vite, React, TypeScript, Vitest.
+- UI components come from `@workspace/ui` (`packages/ui`, shadcn).
 - Run tasks from the repo root: `pnpm build`, `pnpm check`, `pnpm typecheck`, `pnpm test`, `pnpm dev`.
+- Run `pnpm typecheck`, never a global `tsc`.
+- Use `pnpm exec` and `pnpm dlx`, never `npx`.
 - Dependency versions are exact. Never use `^`, `~` or `latest`.
-- Routes live in `apps/web/src/routes`. `routeTree.gen.ts` is generated; do not edit it.
+- Routes live in `apps/web/src/routes`. `routeTree.gen.ts` is generated; never edit it.
+- Test files sit beside their source. Never put one under `src/routes/` except inside a `-`-prefixed folder.
+- Never suppress `useExhaustiveDependencies`; fix the dependency list.
+- Write comments only to document a public API surface.
+- `pnpm check` and the pre-commit hook delete every `//` comment except `///`, `biome-ignore` and `@ts-` directives.
+- Path-scoped TypeScript and React rules live in `.claude/rules/` and load for matching files; do not restate them here.
 
 <!-- BEGIN:turborepo-agent-rules -->
 

package/templates/base/package.json

@@ -2,7 +2,7 @@
   "name": "my-app",
   "private": true,
   "type": "module",
-  "packageManager": "pnpm@11.25.0",
+  "packageManager": "pnpm@12.11.0",
   "engines": {
     "node": ">=22.18.0"
   },

package/templates/base/skills-lock.json

@@ -0,0 +1,11 @@
+{
+  "version": 1,
+  "skills": {
+    "shadcn": {
+      "source": "shadcn/ui",
+      "sourceType": "github",
+      "skillPath": "skills/shadcn/SKILL.md",
+      "computedHash": "2d7bf36e581289fdcc3ffc592c1ec1d7457572baa72ba0d440229ef34bd7f6dd"
+    }
+  }
+}

package/templates/tools/biome/.biome/catch-binding-unknown.grit

@@ -0,0 +1,7 @@
+language js
+
+JsCatchClause(declaration = JsCatchDeclaration(type_annotation = $annotation)) where {
+  $annotation <: TsTypeAnnotation(ty = $type),
+  $type <: not `unknown`,
+  register_diagnostic(span = $annotation, message = "Type the catch binding as unknown and narrow it.", severity = "error")
+}

package/templates/tools/biome/.biome/effect-cleanup.grit

@@ -1,8 +1,11 @@
 language js
 
-`useEffect($callback, $deps)` as $effect where {
+or { `useEffect($callback, $...)`, `useLayoutEffect($callback, $...)` } as $effect where {
   $callback <: contains or { `$_.addEventListener($_, $_)`, `setInterval($_, $_)`, `setTimeout($_, $_)`, `$_.subscribe($_)` },
-  $callback <: JsArrowFunctionExpression(body = JsFunctionBody(statements = $statements)),
+  or {
+    $callback <: JsArrowFunctionExpression(body = JsFunctionBody(statements = $statements)),
+    $callback <: JsFunctionExpression(body = JsFunctionBody(statements = $statements))
+  },
   $statements <: not some `return $cleanup`,
   register_diagnostic(span = $effect, message = "Return a cleanup function from an effect that sets up a listener, timer, or subscription.")
 }

package/templates/tools/biome/.biome/handler-naming.grit

@@ -1,9 +1,22 @@
 language js
 
-JsxAttribute() as $attr where {
-  $attr <: r"on[A-Z]\w*=\{\w+\}",
-  $attr <: not r"on[A-Z]\w*=\{handle[A-Z]\w*\}",
-  $attr <: not r"on[A-Z]\w*=\{on[A-Z]\w*\}",
-  $attr <: not r"on[A-Z]\w*=\{set[A-Z]\w*\}",
-  register_diagnostic(span = $attr, message = "Name the function passed to an on<Event> prop handle<Action>.", severity = "error")
+or {
+  JsxAttribute() as $attr where {
+    $attr <: r"on[A-Z]\w*=\{\w+\}",
+    $attr <: not r"on[A-Z]\w*=\{handle[A-Z]\w*\}",
+    $attr <: not r"on[A-Z]\w*=\{on[A-Z]\w*\}",
+    $attr <: not r"on[A-Z]\w*=\{set[A-Z]\w*\}",
+    register_diagnostic(span = $attr, message = "Name the function passed to an on<Event> prop handle<Action>.", severity = "error")
+  },
+  or {
+    JsFunctionDeclaration(id = $name),
+    JsVariableDeclarator(id = $name, initializer = JsInitializerClause(expression = or { JsArrowFunctionExpression(), JsFunctionExpression() }))
+  } as $local where {
+    $name <: r"on[A-Z]\w*",
+    $local <: within or {
+      JsFunctionDeclaration(id = $component),
+      JsVariableDeclarator(id = $component, initializer = JsInitializerClause(expression = or { JsArrowFunctionExpression(), JsFunctionExpression() }))
+    } where { $component <: r"[A-Z]\w*" },
+    register_diagnostic(span = $name, message = "Name a locally declared handler handle<Action>; on<Event> is for props.", severity = "error")
+  }
 }

package/templates/tools/biome/.biome/no-class-error-boundary.grit

@@ -0,0 +1,11 @@
+language js
+
+JsClassDeclaration() as $class where {
+  $class <: contains JsMethodClassMember(modifiers = $modifiers, name = $name) where {
+    or {
+      $name <: r"componentDidCatch",
+      and { $name <: r"getDerivedStateFromError", $modifiers <: r".*static.*" }
+    }
+  },
+  register_diagnostic(span = $class, message = "Use the route errorComponent, or CatchBoundary from @tanstack/react-router, instead of a class error boundary.", severity = "error")
+}

package/templates/tools/biome/.biome/no-direct-component-call.grit

@@ -0,0 +1,20 @@
+language js
+
+`$fn($...)` as $call where {
+  $fn <: r"[A-Z]\w*",
+  $fn <: not r"String",
+  $fn <: not r"Number",
+  $fn <: not r"Boolean",
+  $fn <: not r"Symbol",
+  $fn <: not r"BigInt",
+  $fn <: not r"Date",
+  $fn <: not r"Error",
+  $fn <: not r"Object",
+  $fn <: not r"Array",
+  $fn <: not r"Promise",
+  $fn <: not r"Map",
+  $fn <: not r"Set",
+  $fn <: not r"RegExp",
+  $call <: not within or { JsxElement(), JsxSelfClosingElement(), JsxFragment() },
+  register_diagnostic(span = $call, message = "Render a component in JSX instead of calling it as a function.", severity = "error")
+}

package/templates/tools/biome/.biome/no-fetch-in-handler.grit

@@ -0,0 +1,12 @@
+language js
+
+`fetch($...)` as $call where {
+  $call <: not within JsPropertyObjectMember(name = $query) where { $query <: r"queryFn" },
+  $call <: not within JsPropertyObjectMember(name = $mutation) where { $mutation <: r"mutationFn" },
+  or {
+    $call <: within JsFunctionDeclaration(id = $declared) where { $declared <: r"handle[A-Z]\w*" },
+    $call <: within JsVariableDeclarator(id = $assigned) where { $assigned <: r"handle[A-Z]\w*" },
+    $call <: within JsxAttribute(name = $prop) where { $prop <: r"on[A-Z]\w*" }
+  },
+  register_diagnostic(span = $call, message = "Call a useMutation mutate function from the handler; put fetch in mutationFn.", severity = "error")
+}

package/templates/tools/biome/.biome/no-impure-render.grit

@@ -1,8 +1,13 @@
 language js
 
 or { `Math.random()`, `Date.now()`, `new Date()`, `DateTime.now()` } as $call where {
-  $call <: within JsFunctionDeclaration(id = $component) where { $component <: r"[A-Z]\w*" },
-  $call <: not within JsArrowFunctionExpression(),
+  $call <: within or {
+    JsFunctionDeclaration(id = $component),
+    JsVariableDeclarator(id = $component, initializer = JsInitializerClause(expression = or { JsArrowFunctionExpression(), JsFunctionExpression() }))
+  } where { $component <: r"[A-Z]\w*" },
+  $call <: not within or { `useEffect($...)`, `useLayoutEffect($...)`, `useMemo($...)`, `useCallback($...)`, `useState($...)` },
+  $call <: not within JsxAttribute(name = $prop) where { $prop <: r"on[A-Z]\w*" },
   $call <: not within JsFunctionDeclaration(id = $handler) where { $handler <: r"handle[A-Z]\w*" },
+  $call <: not within JsVariableDeclarator(id = $assigned) where { $assigned <: r"handle[A-Z]\w*" },
   register_diagnostic(span = $call, message = "Non-deterministic value during render; move it into an effect, handler, or useState initialiser.", severity = "error")
 }

package/templates/tools/biome/.biome/no-query-client-in-render.grit

@@ -1,7 +1,10 @@
 language js
 
 `new QueryClient($_)` as $client where {
-  $client <: within JsFunctionDeclaration(id = $component) where { $component <: r"[A-Z]\w*" },
+  $client <: within or {
+    JsFunctionDeclaration(id = $component),
+    JsVariableDeclarator(id = $component, initializer = JsInitializerClause(expression = or { JsArrowFunctionExpression(), JsFunctionExpression() }))
+  } where { $component <: r"[A-Z]\w*" },
   $client <: not within `useState($_)`,
   register_diagnostic(span = $client, message = "Create the QueryClient once at module scope or in a useState initialiser.")
 }

package/templates/tools/biome/.biome/no-state-mutation.grit

@@ -0,0 +1,19 @@
+language js
+
+or {
+  `$state.push($...)`,
+  `$state.pop($...)`,
+  `$state.shift($...)`,
+  `$state.unshift($...)`,
+  `$state.splice($...)`,
+  `$state.sort($...)`,
+  `$state.reverse($...)`,
+  `$state.fill($...)`,
+  `$state.$prop = $_`,
+  `$state[$i] = $_`
+} as $mutation where {
+  $mutation <: within or { JsFunctionDeclaration(), JsFunctionExpression(), JsArrowFunctionExpression() } as $fn where {
+    $fn <: contains `const [$state, $_] = useState($_)`
+  },
+  register_diagnostic(span = $mutation, message = "State is immutable; call the setter with a new array or object.", severity = "error")
+}

package/templates/tools/biome/.biome/no-try-around-jsx.grit

@@ -2,8 +2,12 @@ language js
 
 JsTryStatement(body = $block) as $try where {
   $block <: contains or { JsxElement(), JsxSelfClosingElement(), JsxFragment() },
-  $try <: within JsFunctionDeclaration(id = $component) where { $component <: r"[A-Z]\w*" },
-  $try <: not within JsArrowFunctionExpression(),
+  $try <: within or {
+    JsFunctionDeclaration(id = $component),
+    JsVariableDeclarator(id = $component, initializer = JsInitializerClause(expression = or { JsArrowFunctionExpression(), JsFunctionExpression() }))
+  } where { $component <: r"[A-Z]\w*" },
+  $try <: not within or { `useEffect($...)`, `useLayoutEffect($...)`, `useMemo($...)`, `useCallback($...)`, `useState($...)` },
   $try <: not within JsFunctionDeclaration(id = $handler) where { $handler <: r"handle[A-Z]\w*" },
+  $try <: not within JsVariableDeclarator(id = $assigned) where { $assigned <: r"handle[A-Z]\w*" },
   register_diagnostic(span = $try, message = "try/catch cannot catch render errors; wrap the subtree in an ErrorBoundary.")
 }

package/templates/tools/biome/.biome/use-assert-never.grit

@@ -0,0 +1,6 @@
+language js
+
+`const $x: never = $y` as $declaration where {
+  $declaration <: within or { JsDefaultClause(), JsElseClause() },
+  register_diagnostic(span = $declaration, message = "Use the shared assertNever helper instead of an inline never assignment.", severity = "error")
+}

package/templates/tools/biome/biome.json

@@ -6,7 +6,15 @@
     "useIgnoreFile": true
   },
   "files": {
-    "includes": ["**", "!**/routeTree.gen.ts", "!.biome", "!.intent", "!.claude", "!.codex"]
+    "includes": [
+      "**",
+      "!**/routeTree.gen.ts",
+      "!.biome",
+      "!.intent",
+      "!.claude",
+      "!.agents",
+      "!.codex"
+    ]
   },
   "formatter": {
     "enabled": true,
@@ -25,7 +33,13 @@
       },
       "style": {
         "noInferrableTypes": "error",
-        "useReadonlyClassProperties": "error",
+        "noNonNullAssertion": "error",
+        "useReadonlyClassProperties": {
+          "level": "error",
+          "options": {
+            "checkAllProperties": true
+          }
+        },
         "useThrowOnlyError": "error",
         "useConsistentTypeDefinitions": {
           "level": "error",
@@ -41,6 +55,7 @@
         }
       },
       "suspicious": {
+        "noExplicitAny": "error",
         "noVar": "error"
       },
       "nursery": {
@@ -58,7 +73,12 @@
         "useArraySome": "error",
         "useAwaitThenable": "error",
         "useConsistentTestIt": "error",
-        "useExhaustiveSwitchCases": "error",
+        "useExhaustiveSwitchCases": {
+          "level": "error",
+          "options": {
+            "requireExplicitCase": true
+          }
+        },
         "useExpect": "error",
         "useIncludes": "error",
         "useNullishCoalescing": "error",
@@ -124,6 +144,24 @@
     {
       "path": ".biome/no-impure-render.grit",
       "includes": ["**/*.tsx"]
+    },
+    ".biome/catch-binding-unknown.grit",
+    ".biome/use-assert-never.grit",
+    {
+      "path": ".biome/no-direct-component-call.grit",
+      "includes": ["**/*.tsx"]
+    },
+    {
+      "path": ".biome/no-state-mutation.grit",
+      "includes": ["**/*.tsx"]
+    },
+    {
+      "path": ".biome/no-class-error-boundary.grit",
+      "includes": ["**/*.tsx"]
+    },
+    {
+      "path": ".biome/no-fetch-in-handler.grit",
+      "includes": ["**/*.tsx"]
     }
   ],
   "css": {