@editframe/create 0.43.0 → 0.45.0

package/dist/skills/editframe-webhooks/references/troubleshooting.md

@@ -0,0 +1,457 @@
+---
+title: Troubleshooting Webhooks
+description: "Diagnose and fix common webhook issues: signature verification failures, delivery timeouts, retries, and missed events."
+type: reference
+nav:
+  parent: "Troubleshooting"
+  priority: 5
+---
+
+# Troubleshooting Webhooks
+
+Debug common webhook issues and understand webhook delivery behavior.
+
+## Signature Verification Failures
+
+### Symptom
+
+All webhooks are rejected with 401 Unauthorized or signature verification fails.
+
+### Causes and Solutions
+
+#### 1. Hashing Parsed JSON Instead of Raw Body
+
+**Problem**: You're hashing `JSON.stringify(req.body)` instead of the raw request body.
+
+**Why it fails**: JSON serialization order is not guaranteed. The signature was computed on the original body, which may have different key order.
+
+**Solution**: Hash the raw body string as received:
+
+```typescript
+// Wrong
+const signature = crypto
+  .createHmac("sha256", secret)
+  .update(JSON.stringify(req.body))
+  .digest("hex");
+
+// Right
+const signature = crypto
+  .createHmac("sha256", secret)
+  .update(req.rawBody) // Raw body as string/buffer
+  .digest("hex");
+```
+
+**Express setup**:
+```typescript
+app.use(bodyParser.json({
+  verify: (req, res, buf) => {
+    (req as any).rawBody = buf.toString('utf8');
+  }
+}));
+```
+
+#### 2. Wrong Webhook Secret
+
+**Problem**: Using the API key instead of the webhook secret.
+
+**Solution**: Use the webhook secret (shown once during API key creation):
+
+```typescript
+// Wrong - this is your API key
+const secret = "ef_live_abc123...";
+
+// Right - this is your webhook secret
+const secret = "whsec_abc123..." || process.env.EDITFRAME_WEBHOOK_SECRET;
+```
+
+If you lost your webhook secret, regenerate it in the dashboard.
+
+#### 3. Secret Has Whitespace
+
+**Problem**: Secret has extra spaces, tabs, or newlines.
+
+**Solution**: Trim the secret:
+```typescript
+const secret = process.env.EDITFRAME_WEBHOOK_SECRET!.trim();
+```
+
+#### 4. Using Non-Timing-Safe Comparison
+
+**Problem**: String comparison is vulnerable to timing attacks and may behave unexpectedly.
+
+**Solution**: Use timing-safe comparison:
+```typescript
+// Wrong
+if (signature === expectedSignature) { }
+
+// Right
+import crypto from "node:crypto";
+if (crypto.timingSafeEqual(Buffer.from(signature), Buffer.from(expectedSignature))) { }
+```
+
+### Debug Steps
+
+1. **Log both signatures**:
+```typescript
+console.log("Received:", signature);
+console.log("Expected:", expectedSignature);
+console.log("Match:", signature === expectedSignature);
+```
+
+2. **Log the payload being hashed**:
+```typescript
+console.log("Raw body:", req.rawBody);
+console.log("Body length:", req.rawBody.length);
+```
+
+3. **Verify secret is correct**:
+```typescript
+console.log("Secret length:", secret.length);
+console.log("Secret starts with:", secret.substring(0, 10));
+```
+
+4. **Test with known payload**:
+```typescript
+const testPayload = '{"topic":"webhook.test","data":{"id":"test"}}';
+const testSignature = crypto
+  .createHmac("sha256", secret)
+  .update(testPayload)
+  .digest("hex");
+console.log("Test signature:", testSignature);
+```
+
+## Timeout Errors
+
+### Symptom
+
+Webhooks fail with timeout errors in delivery logs. Events show multiple retry attempts.
+
+### Cause
+
+Your endpoint takes longer than 30 seconds to respond.
+
+### Solution
+
+Respond with 200 OK immediately, then process the event asynchronously:
+
+```typescript
+// Wrong - synchronous processing
+app.post("/webhooks/editframe", async (req, res) => {
+  await verifySignature(req);
+  await processEvent(req.body); // Takes 60 seconds
+  res.status(200).send("OK"); // Times out!
+});
+
+// Right - asynchronous processing
+app.post("/webhooks/editframe", async (req, res) => {
+  await verifySignature(req);
+
+  // Respond immediately
+  res.status(200).send("OK");
+
+  // Process in background
+  processEvent(req.body).catch(console.error);
+});
+```
+
+Use a job queue for reliability:
+
+```typescript
+import { Queue } from "bull";
+
+const webhookQueue = new Queue("webhooks");
+
+app.post("/webhooks/editframe", async (req, res) => {
+  await verifySignature(req);
+
+  // Add to queue
+  await webhookQueue.add({
+    topic: req.body.topic,
+    data: req.body.data,
+  });
+
+  res.status(200).send("OK");
+});
+
+// Process jobs in background
+webhookQueue.process(async (job) => {
+  await processEvent(job.data);
+});
+```
+
+## Missed Webhooks
+
+### Symptom
+
+Expected webhooks are not received.
+
+### Causes and Solutions
+
+#### 1. Events Not Subscribed
+
+**Problem**: Webhook events not configured on API key.
+
+**Solution**: Update API key's webhook events:
+
+```typescript
+// Check current configuration
+const apiKey = await db
+  .selectFrom("identity.api_keys")
+  .where("id", "=", apiKeyId)
+  .select(["webhook_events", "webhook_url"])
+  .executeTakeFirst();
+
+console.log("Subscribed events:", apiKey.webhook_events);
+console.log("Webhook URL:", apiKey.webhook_url);
+
+// Update events
+await db
+  .updateTable("identity.api_keys")
+  .where("id", "=", apiKeyId)
+  .set({
+    webhook_events: ["render.completed", "render.failed", "file.ready"]
+  })
+  .execute();
+```
+
+#### 2. Webhook URL Not Set
+
+**Problem**: API key doesn't have a webhook URL configured.
+
+**Solution**: Set the webhook URL in the dashboard or via API.
+
+#### 3. Endpoint Returns Error
+
+**Problem**: Your endpoint returns 4xx or 5xx status, causing Editframe to mark delivery as failed.
+
+**Solution**: Fix endpoint errors. Check logs for error details.
+
+#### 4. Firewall Blocking Requests
+
+**Problem**: Firewall or load balancer blocks webhook requests.
+
+**Solution**:
+- Whitelist Editframe's IP ranges (check documentation)
+- Verify endpoint is publicly accessible
+- Test with `curl` from external server
+
+### Debug Steps
+
+1. **Check delivery logs** in the Editframe dashboard:
+   - Go to API key detail page
+   - View "Webhook Deliveries"
+   - Check status codes and response bodies
+
+2. **Verify webhook configuration**:
+```typescript
+// Test endpoint is reachable
+fetch("https://your-app.com/webhooks/editframe", {
+  method: "POST",
+  headers: { "Content-Type": "application/json" },
+  body: JSON.stringify({ test: true })
+});
+```
+
+3. **Test with webhook.site**:
+   - Temporarily set webhook URL to webhook.site
+   - Trigger event
+   - Verify webhook is sent
+
+## Duplicate Webhooks
+
+### Symptom
+
+Same event is processed multiple times.
+
+### Cause
+
+Webhooks are retried on failure or timeout. Your endpoint may process the same event multiple times.
+
+### Solution
+
+Implement idempotency:
+
+```typescript
+const processedEvents = new Set<string>();
+
+app.post("/webhooks/editframe", async (req, res) => {
+  await verifySignature(req);
+
+  const event = req.body;
+  const eventId = `${event.topic}:${event.data.id}`;
+
+  if (processedEvents.has(eventId)) {
+    console.log(`Duplicate webhook: ${eventId}`);
+    return res.status(200).send("OK"); // Still return 200
+  }
+
+  processedEvents.add(eventId);
+  res.status(200).send("OK");
+
+  await processEvent(event);
+});
+```
+
+For production, use a database:
+
+```typescript
+async function isProcessed(eventId: string): Promise<boolean> {
+  const result = await db.query(
+    "SELECT 1 FROM processed_webhooks WHERE event_id = $1",
+    [eventId]
+  );
+  return result.rows.length > 0;
+}
+
+async function markProcessed(eventId: string): Promise<void> {
+  await db.query(
+    "INSERT INTO processed_webhooks (event_id, processed_at) VALUES ($1, NOW()) ON CONFLICT DO NOTHING",
+    [eventId]
+  );
+}
+```
+
+## Retry Behavior
+
+### How Retries Work
+
+When webhook delivery fails:
+1. **First attempt**: Immediate delivery
+2. **Second attempt**: 10 seconds later
+3. **Third attempt**: 10 seconds later
+4. **Max retries**: 3 attempts total
+5. **Timeout**: 30 seconds per attempt
+
+After 3 failed attempts, the event is marked as failed and retries stop.
+
+### What Triggers Retries
+
+Retries occur when:
+- Endpoint returns 4xx or 5xx status code
+- Request times out (>30 seconds)
+- Network error (connection refused, DNS failure)
+
+Retries **do not** occur when:
+- Endpoint returns 200 OK (even if processing fails)
+
+### Viewing Retry History
+
+Check webhook delivery logs in the dashboard:
+- Each attempt is logged with timestamp
+- See status code and response for each attempt
+- Failed events show number of retries
+
+### Handling Retries in Your Endpoint
+
+```typescript
+app.post("/webhooks/editframe", async (req, res) => {
+  try {
+    await verifySignature(req);
+
+    // Respond immediately
+    res.status(200).send("OK");
+
+    // Process asynchronously
+    await processEvent(req.body);
+  } catch (error) {
+    console.error("Webhook processing error:", error);
+
+    // Still return 200 to prevent retries
+    // Log error for manual investigation
+    res.status(200).send("OK");
+  }
+});
+```
+
+**Important**: If you return an error status code, the webhook will be retried. Only return errors for transient failures that should be retried (e.g., database connection lost).
+
+## Debugging Checklist
+
+When webhooks aren't working:
+
+1. **Verify configuration**:
+   - [ ] Webhook URL is correct
+   - [ ] Webhook URL uses HTTPS
+   - [ ] Webhook events are selected
+   - [ ] Endpoint is publicly accessible
+
+2. **Test signature verification**:
+   - [ ] Using correct webhook secret (not API key)
+   - [ ] Hashing raw body (not parsed JSON)
+   - [ ] Using timing-safe comparison
+   - [ ] Secret has no extra whitespace
+
+3. **Check endpoint behavior**:
+   - [ ] Returns 200 OK within 30 seconds
+   - [ ] Handles all subscribed event types
+   - [ ] Implements idempotency
+   - [ ] Logs errors for debugging
+
+4. **Review delivery logs**:
+   - [ ] Check status codes
+   - [ ] Review response bodies
+   - [ ] Count retry attempts
+   - [ ] Look for patterns in failures
+
+5. **Test locally**:
+   - [ ] Use ngrok to expose local server
+   - [ ] Send test webhook from dashboard
+   - [ ] Run integration tests
+   - [ ] Test with manual script
+
+## Getting Help
+
+If you're still experiencing issues:
+
+1. **Check delivery logs** in the dashboard for detailed error messages
+2. **Test with webhook.site** to isolate the issue
+3. **Review webhook event payloads** in the [events.md](references/events.md) reference
+4. **Contact support** with:
+   - API key ID
+   - Webhook event ID (from delivery logs)
+   - Error messages from your logs
+   - Steps to reproduce
+
+## Common Error Messages
+
+### "Invalid signature"
+
+**Cause**: Signature verification failed
+
+**Solution**: See [Signature Verification Failures](#signature-verification-failures)
+
+### "Webhook URL is not set"
+
+**Cause**: API key doesn't have webhook URL configured
+
+**Solution**: Set webhook URL in API key configuration
+
+### "Connection refused"
+
+**Cause**: Endpoint is not reachable
+
+**Solution**:
+- Verify endpoint is running
+- Check firewall rules
+- Test with `curl` from external server
+
+### "SSL certificate verify failed"
+
+**Cause**: Endpoint uses invalid SSL certificate
+
+**Solution**:
+- Use a valid SSL certificate from a trusted CA
+- For development, use ngrok which provides valid certificates
+
+### "Timed out after 30000ms"
+
+**Cause**: Endpoint took longer than 30 seconds to respond
+
+**Solution**: See [Timeout Errors](#timeout-errors)
+
+## Next Steps
+
+- [security.md](references/security.md) — Review signature verification
+- [testing.md](references/testing.md) — Test webhook endpoints
+- [getting-started.md](references/getting-started.md) — Complete setup guide
+- [events.md](references/events.md) — Webhook event reference

package/dist/templates/html/AGENTS.md

@@ -0,0 +1,13 @@
+# Editframe Project
+
+This is an Editframe video composition project. Use the skills in `.claude/skills/` or `.agents/skills/` for guidance.
+
+## Agent Workflow
+
+- To render video: `npx editframe render src/index.js` — do not run `npm start`
+- Edit existing files in `src/` — do not scaffold a new project
+- Video compositions are HTML files; use `<ef-*>` web components or React equivalents
+
+## Docs
+
+https://editframe.com/docs

package/dist/templates/react/AGENTS.md

@@ -0,0 +1,13 @@
+# Editframe Project
+
+This is an Editframe video composition project. Use the skills in `.claude/skills/` or `.agents/skills/` for guidance.
+
+## Agent Workflow
+
+- To render video: `npx editframe render src/index.js` — do not run `npm start`
+- Edit existing files in `src/` — do not scaffold a new project
+- Video compositions are HTML files; use `<ef-*>` web components or React equivalents
+
+## Docs
+
+https://editframe.com/docs

package/dist/utils.js

@@ -1,3 +1,6 @@
+import { cp, mkdir, readdir } from "node:fs/promises";
+import path from "node:path";
+import { fileURLToPath } from "node:url";
 import chalk from "chalk";
 import { execa } from "execa";
 
@@ -45,27 +48,23 @@ async function installDependencies(projectDir) {
 	}
 }
 /**
-* Install AI agent skills using the ai-agent-skills CLI.
+* Install AI agent skills by copying bundled skill files into the project.
+* Writes to both .claude/skills/ and .agents/skills/ for broad agent compatibility.
 */
-async function installAgentSkills(projectDir, agent) {
+async function installAgentSkills(projectDir) {
 	try {
-		process.stderr.write(chalk.bold(`\nInstalling AI agent skills for ${agent}...\n\n`));
-		await execa("npx", [
-			"ai-agent-skills",
-			"install",
-			"editframe/skills",
-			...agent === "all" ? [] : ["--agent", agent]
-		], {
-			cwd: projectDir,
-			stdout: "inherit",
-			stderr: "inherit"
-		});
-		process.stderr.write(chalk.green(`\n✓ Agent skills installed for ${agent}!\n`));
+		process.stderr.write(chalk.bold("\nInstalling AI agent skills...\n\n"));
+		const __dirname = path.dirname(fileURLToPath(import.meta.url));
+		const skillsSource = path.join(__dirname, "skills");
+		const skills = await readdir(skillsSource);
+		for (const destBase of [".claude/skills", ".agents/skills"]) {
+			await mkdir(path.join(projectDir, destBase), { recursive: true });
+			for (const skill of skills) await cp(path.join(skillsSource, skill), path.join(projectDir, destBase, skill), { recursive: true });
+		}
+		process.stderr.write(chalk.green("\n✓ AI agent skills installed!\n"));
 		return true;
 	} catch (error) {
 		process.stderr.write(chalk.yellow("\n⚠ Failed to install agent skills\n"));
-		process.stderr.write(chalk.dim("You can install manually:\n"));
-		process.stderr.write(chalk.cyan(`  npx ai-agent-skills install editframe/skills --agent ${agent}\n\n`));
 		return false;
 	}
 }

package/dist/utils.js.map

@@ -1 +1 @@
-{"version":3,"file":"utils.js","names":[],"sources":["../src/utils.ts"],"sourcesContent":["import { execa } from \"execa\";\nimport chalk from \"chalk\";\n\nexport type PackageManager = \"npm\" | \"pnpm\" | \"yarn\" | \"bun\";\n\n/**\n * Detect which package manager was used to invoke the create script.\n * Uses the npm_config_user_agent environment variable set by package managers.\n */\nexport function getUserPkgManager(): PackageManager {\n  const userAgent = process.env.npm_config_user_agent;\n\n  if (userAgent) {\n    if (userAgent.startsWith(\"yarn\")) return \"yarn\";\n    if (userAgent.startsWith(\"pnpm\")) return \"pnpm\";\n    if (userAgent.startsWith(\"bun\")) return \"bun\";\n  }\n\n  return \"npm\"; // Default fallback\n}\n\n/**\n * Run the appropriate install command for the detected package manager.\n * Shows full output to the user so they can see progress.\n */\nasync function runInstallCommand(\n  pkgManager: PackageManager,\n  projectDir: string,\n): Promise<void> {\n  // Show all output directly to user - no hiding behind spinners\n  await execa(pkgManager, [\"install\"], {\n    cwd: projectDir,\n    stdout: \"inherit\",\n    stderr: \"inherit\",\n  });\n}\n\n/**\n * Install dependencies in the project directory.\n */\nexport async function installDependencies(\n  projectDir: string,\n): Promise<boolean> {\n  const pkgManager = getUserPkgManager();\n\n  try {\n    process.stderr.write(\n      chalk.bold(`\\nInstalling dependencies with ${pkgManager}...\\n\\n`),\n    );\n\n    await runInstallCommand(pkgManager, projectDir);\n\n    process.stderr.write(\n      chalk.green(\"\\n✓ Dependencies installed successfully!\\n\"),\n    );\n\n    return true;\n  } catch (error) {\n    process.stderr.write(chalk.yellow(\"\\n⚠ Dependency installation failed\\n\"));\n    process.stderr.write(chalk.dim(\"You can install manually:\\n\"));\n    process.stderr.write(chalk.cyan(`  cd ${projectDir.split(\"/\").pop()}\\n`));\n    process.stderr.write(chalk.cyan(`  ${pkgManager} install\\n\\n`));\n    return false;\n  }\n}\n\n/**\n * Install AI agent skills using the ai-agent-skills CLI.\n */\nexport async function installAgentSkills(\n  projectDir: string,\n  agent: string,\n): Promise<boolean> {\n  try {\n    process.stderr.write(\n      chalk.bold(`\\nInstalling AI agent skills for ${agent}...\\n\\n`),\n    );\n\n    const agentFlag = agent === \"all\" ? [] : [\"--agent\", agent];\n\n    await execa(\n      \"npx\",\n      [\"ai-agent-skills\", \"install\", \"editframe/skills\", ...agentFlag],\n      {\n        cwd: projectDir,\n        stdout: \"inherit\",\n        stderr: \"inherit\",\n      },\n    );\n\n    process.stderr.write(\n      chalk.green(`\\n✓ Agent skills installed for ${agent}!\\n`),\n    );\n    return true;\n  } catch (error) {\n    process.stderr.write(chalk.yellow(\"\\n⚠ Failed to install agent skills\\n\"));\n    process.stderr.write(chalk.dim(\"You can install manually:\\n\"));\n    process.stderr.write(\n      chalk.cyan(\n        `  npx ai-agent-skills install editframe/skills --agent ${agent}\\n\\n`,\n      ),\n    );\n    return false;\n  }\n}\n\n/**\n * Get the appropriate start command for the package manager.\n */\nexport function getStartCommand(pkgManager: PackageManager): string {\n  return pkgManager === \"npm\" ? \"npm start\" : `${pkgManager} start`;\n}\n"],"mappings":";;;;;;;;AASA,SAAgB,oBAAoC;CAClD,MAAM,YAAY,QAAQ,IAAI;AAE9B,KAAI,WAAW;AACb,MAAI,UAAU,WAAW,OAAO,CAAE,QAAO;AACzC,MAAI,UAAU,WAAW,OAAO,CAAE,QAAO;AACzC,MAAI,UAAU,WAAW,MAAM,CAAE,QAAO;;AAG1C,QAAO;;;;;;AAOT,eAAe,kBACb,YACA,YACe;AAEf,OAAM,MAAM,YAAY,CAAC,UAAU,EAAE;EACnC,KAAK;EACL,QAAQ;EACR,QAAQ;EACT,CAAC;;;;;AAMJ,eAAsB,oBACpB,YACkB;CAClB,MAAM,aAAa,mBAAmB;AAEtC,KAAI;AACF,UAAQ,OAAO,MACb,MAAM,KAAK,kCAAkC,WAAW,SAAS,CAClE;AAED,QAAM,kBAAkB,YAAY,WAAW;AAE/C,UAAQ,OAAO,MACb,MAAM,MAAM,6CAA6C,CAC1D;AAED,SAAO;UACA,OAAO;AACd,UAAQ,OAAO,MAAM,MAAM,OAAO,uCAAuC,CAAC;AAC1E,UAAQ,OAAO,MAAM,MAAM,IAAI,8BAA8B,CAAC;AAC9D,UAAQ,OAAO,MAAM,MAAM,KAAK,QAAQ,WAAW,MAAM,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC;AACzE,UAAQ,OAAO,MAAM,MAAM,KAAK,KAAK,WAAW,cAAc,CAAC;AAC/D,SAAO;;;;;;AAOX,eAAsB,mBACpB,YACA,OACkB;AAClB,KAAI;AACF,UAAQ,OAAO,MACb,MAAM,KAAK,oCAAoC,MAAM,SAAS,CAC/D;AAID,QAAM,MACJ,OACA;GAAC;GAAmB;GAAW;GAAoB,GAJnC,UAAU,QAAQ,EAAE,GAAG,CAAC,WAAW,MAAM;GAIO,EAChE;GACE,KAAK;GACL,QAAQ;GACR,QAAQ;GACT,CACF;AAED,UAAQ,OAAO,MACb,MAAM,MAAM,kCAAkC,MAAM,KAAK,CAC1D;AACD,SAAO;UACA,OAAO;AACd,UAAQ,OAAO,MAAM,MAAM,OAAO,uCAAuC,CAAC;AAC1E,UAAQ,OAAO,MAAM,MAAM,IAAI,8BAA8B,CAAC;AAC9D,UAAQ,OAAO,MACb,MAAM,KACJ,0DAA0D,MAAM,MACjE,CACF;AACD,SAAO;;;;;;AAOX,SAAgB,gBAAgB,YAAoC;AAClE,QAAO,eAAe,QAAQ,cAAc,GAAG,WAAW"}
+{"version":3,"file":"utils.js","names":[],"sources":["../src/utils.ts"],"sourcesContent":["import { cp, mkdir, readdir } from \"node:fs/promises\";\nimport path from \"node:path\";\nimport { fileURLToPath } from \"node:url\";\nimport { execa } from \"execa\";\nimport chalk from \"chalk\";\n\nexport type PackageManager = \"npm\" | \"pnpm\" | \"yarn\" | \"bun\";\n\n/**\n * Detect which package manager was used to invoke the create script.\n * Uses the npm_config_user_agent environment variable set by package managers.\n */\nexport function getUserPkgManager(): PackageManager {\n  const userAgent = process.env.npm_config_user_agent;\n\n  if (userAgent) {\n    if (userAgent.startsWith(\"yarn\")) return \"yarn\";\n    if (userAgent.startsWith(\"pnpm\")) return \"pnpm\";\n    if (userAgent.startsWith(\"bun\")) return \"bun\";\n  }\n\n  return \"npm\"; // Default fallback\n}\n\n/**\n * Run the appropriate install command for the detected package manager.\n * Shows full output to the user so they can see progress.\n */\nasync function runInstallCommand(\n  pkgManager: PackageManager,\n  projectDir: string,\n): Promise<void> {\n  // Show all output directly to user - no hiding behind spinners\n  await execa(pkgManager, [\"install\"], {\n    cwd: projectDir,\n    stdout: \"inherit\",\n    stderr: \"inherit\",\n  });\n}\n\n/**\n * Install dependencies in the project directory.\n */\nexport async function installDependencies(\n  projectDir: string,\n): Promise<boolean> {\n  const pkgManager = getUserPkgManager();\n\n  try {\n    process.stderr.write(\n      chalk.bold(`\\nInstalling dependencies with ${pkgManager}...\\n\\n`),\n    );\n\n    await runInstallCommand(pkgManager, projectDir);\n\n    process.stderr.write(\n      chalk.green(\"\\n✓ Dependencies installed successfully!\\n\"),\n    );\n\n    return true;\n  } catch (error) {\n    process.stderr.write(chalk.yellow(\"\\n⚠ Dependency installation failed\\n\"));\n    process.stderr.write(chalk.dim(\"You can install manually:\\n\"));\n    process.stderr.write(chalk.cyan(`  cd ${projectDir.split(\"/\").pop()}\\n`));\n    process.stderr.write(chalk.cyan(`  ${pkgManager} install\\n\\n`));\n    return false;\n  }\n}\n\n/**\n * Install AI agent skills by copying bundled skill files into the project.\n * Writes to both .claude/skills/ and .agents/skills/ for broad agent compatibility.\n */\nexport async function installAgentSkills(projectDir: string): Promise<boolean> {\n  try {\n    process.stderr.write(chalk.bold(\"\\nInstalling AI agent skills...\\n\\n\"));\n\n    const __dirname = path.dirname(fileURLToPath(import.meta.url));\n    const skillsSource = path.join(__dirname, \"skills\");\n    const skills = await readdir(skillsSource);\n\n    for (const destBase of [\".claude/skills\", \".agents/skills\"]) {\n      await mkdir(path.join(projectDir, destBase), { recursive: true });\n      for (const skill of skills) {\n        await cp(\n          path.join(skillsSource, skill),\n          path.join(projectDir, destBase, skill),\n          { recursive: true },\n        );\n      }\n    }\n\n    process.stderr.write(chalk.green(\"\\n✓ AI agent skills installed!\\n\"));\n    return true;\n  } catch (error) {\n    process.stderr.write(chalk.yellow(\"\\n⚠ Failed to install agent skills\\n\"));\n    return false;\n  }\n}\n\n/**\n * Get the appropriate start command for the package manager.\n */\nexport function getStartCommand(pkgManager: PackageManager): string {\n  return pkgManager === \"npm\" ? \"npm start\" : `${pkgManager} start`;\n}\n"],"mappings":";;;;;;;;;;;AAYA,SAAgB,oBAAoC;CAClD,MAAM,YAAY,QAAQ,IAAI;AAE9B,KAAI,WAAW;AACb,MAAI,UAAU,WAAW,OAAO,CAAE,QAAO;AACzC,MAAI,UAAU,WAAW,OAAO,CAAE,QAAO;AACzC,MAAI,UAAU,WAAW,MAAM,CAAE,QAAO;;AAG1C,QAAO;;;;;;AAOT,eAAe,kBACb,YACA,YACe;AAEf,OAAM,MAAM,YAAY,CAAC,UAAU,EAAE;EACnC,KAAK;EACL,QAAQ;EACR,QAAQ;EACT,CAAC;;;;;AAMJ,eAAsB,oBACpB,YACkB;CAClB,MAAM,aAAa,mBAAmB;AAEtC,KAAI;AACF,UAAQ,OAAO,MACb,MAAM,KAAK,kCAAkC,WAAW,SAAS,CAClE;AAED,QAAM,kBAAkB,YAAY,WAAW;AAE/C,UAAQ,OAAO,MACb,MAAM,MAAM,6CAA6C,CAC1D;AAED,SAAO;UACA,OAAO;AACd,UAAQ,OAAO,MAAM,MAAM,OAAO,uCAAuC,CAAC;AAC1E,UAAQ,OAAO,MAAM,MAAM,IAAI,8BAA8B,CAAC;AAC9D,UAAQ,OAAO,MAAM,MAAM,KAAK,QAAQ,WAAW,MAAM,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC;AACzE,UAAQ,OAAO,MAAM,MAAM,KAAK,KAAK,WAAW,cAAc,CAAC;AAC/D,SAAO;;;;;;;AAQX,eAAsB,mBAAmB,YAAsC;AAC7E,KAAI;AACF,UAAQ,OAAO,MAAM,MAAM,KAAK,sCAAsC,CAAC;EAEvE,MAAM,YAAY,KAAK,QAAQ,cAAc,OAAO,KAAK,IAAI,CAAC;EAC9D,MAAM,eAAe,KAAK,KAAK,WAAW,SAAS;EACnD,MAAM,SAAS,MAAM,QAAQ,aAAa;AAE1C,OAAK,MAAM,YAAY,CAAC,kBAAkB,iBAAiB,EAAE;AAC3D,SAAM,MAAM,KAAK,KAAK,YAAY,SAAS,EAAE,EAAE,WAAW,MAAM,CAAC;AACjE,QAAK,MAAM,SAAS,OAClB,OAAM,GACJ,KAAK,KAAK,cAAc,MAAM,EAC9B,KAAK,KAAK,YAAY,UAAU,MAAM,EACtC,EAAE,WAAW,MAAM,CACpB;;AAIL,UAAQ,OAAO,MAAM,MAAM,MAAM,mCAAmC,CAAC;AACrE,SAAO;UACA,OAAO;AACd,UAAQ,OAAO,MAAM,MAAM,OAAO,uCAAuC,CAAC;AAC1E,SAAO;;;;;;AAOX,SAAgB,gBAAgB,YAAoC;AAClE,QAAO,eAAe,QAAQ,cAAc,GAAG,WAAW"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@editframe/create",
-  "version": "0.43.0",
+  "version": "0.45.0",
   "description": "",
   "bin": {
     "create-editframe": "dist/index.js"
@@ -18,7 +18,7 @@
     "build:watch": "tsdown --watch"
   },
   "author": "",
-  "license": "UNLICENSED",
+  "license": "SEE LICENSE IN LICENSE-FULL.md",
   "dependencies": {
     "chalk": "^5.3.0",
     "prompts": "^2.4.2",

package/tsdown.config.ts

@@ -15,6 +15,10 @@ export default defineConfig(
         from: "src/templates",
         to: "dist/templates",
       },
+      {
+        from: "src/skills",
+        to: "dist/skills",
+      },
     ],
     hooks: {
       async onSuccess() {

package/dist/detectAgent.js

@@ -1,89 +0,0 @@
-import { access } from "node:fs/promises";
-import path from "node:path";
-import os from "node:os";
-
-//#region src/detectAgent.ts
-/**
-* Detect which AI coding agents are installed on the system.
-* Returns an array of detected agent names.
-*/
-async function detectInstalledAgents() {
-	const detected = [];
-	try {
-		await access(path.join(process.cwd(), ".cursor"));
-		detected.push("cursor");
-	} catch {}
-	try {
-		await access(path.join(process.cwd(), ".vscode"));
-		detected.push("vscode");
-	} catch {
-		try {
-			await access(path.join(process.cwd(), ".github/copilot"));
-			detected.push("vscode");
-		} catch {}
-	}
-	try {
-		await access(path.join(os.homedir(), ".claude"));
-		detected.push("claude");
-	} catch {}
-	try {
-		await access(path.join(process.cwd(), ".opencode"));
-		detected.push("opencode");
-	} catch {
-		try {
-			await access(path.join(process.cwd(), "AGENTS.md"));
-			detected.push("opencode");
-		} catch {}
-	}
-	try {
-		await access(path.join(os.homedir(), ".windsurf"));
-		detected.push("windsurf");
-	} catch {}
-	return detected;
-}
-/**
-* Get agent choices sorted by detection (detected agents first, then others).
-*/
-async function getAgentChoices() {
-	const detected = await detectInstalledAgents();
-	return [
-		{
-			title: "Cursor",
-			value: "cursor"
-		},
-		{
-			title: "VS Code Copilot",
-			value: "vscode"
-		},
-		{
-			title: "Claude Code",
-			value: "claude"
-		},
-		{
-			title: "OpenCode",
-			value: "opencode"
-		},
-		{
-			title: "Windsurf",
-			value: "windsurf"
-		},
-		{
-			title: "All agents",
-			value: "all"
-		},
-		{
-			title: "Skip",
-			value: "skip"
-		}
-	].sort((a, b) => {
-		const aDetected = detected.includes(a.value);
-		const bDetected = detected.includes(b.value);
-		if (aDetected && !bDetected) return -1;
-		if (!aDetected && bDetected) return 1;
-		return 0;
-	});
-}
-
-//#endregion
-export { getAgentChoices };
-//# sourceMappingURL=detectAgent.js.map

package/dist/detectAgent.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"detectAgent.js","names":["detected: string[]"],"sources":["../src/detectAgent.ts"],"sourcesContent":["import { access } from \"node:fs/promises\";\nimport path from \"node:path\";\nimport os from \"node:os\";\n\n/**\n * Detect which AI coding agents are installed on the system.\n * Returns an array of detected agent names.\n */\nexport async function detectInstalledAgents(): Promise<string[]> {\n  const detected: string[] = [];\n\n  // Check for Cursor (project-level .cursor directory)\n  try {\n    await access(path.join(process.cwd(), \".cursor\"));\n    detected.push(\"cursor\");\n  } catch {\n    // Not found\n  }\n\n  // Check for VS Code / Copilot (.vscode directory or .github/copilot)\n  try {\n    await access(path.join(process.cwd(), \".vscode\"));\n    detected.push(\"vscode\");\n  } catch {\n    try {\n      await access(path.join(process.cwd(), \".github/copilot\"));\n      detected.push(\"vscode\");\n    } catch {\n      // Not found\n    }\n  }\n\n  // Check for Claude Code (user-level ~/.claude directory)\n  try {\n    await access(path.join(os.homedir(), \".claude\"));\n    detected.push(\"claude\");\n  } catch {\n    // Not found\n  }\n\n  // Check for OpenCode (project-level .opencode directory or AGENTS.md)\n  try {\n    await access(path.join(process.cwd(), \".opencode\"));\n    detected.push(\"opencode\");\n  } catch {\n    try {\n      await access(path.join(process.cwd(), \"AGENTS.md\"));\n      detected.push(\"opencode\");\n    } catch {\n      // Not found\n    }\n  }\n\n  // Check for Windsurf (user-level ~/.windsurf directory)\n  try {\n    await access(path.join(os.homedir(), \".windsurf\"));\n    detected.push(\"windsurf\");\n  } catch {\n    // Not found\n  }\n\n  return detected;\n}\n\n/**\n * Get agent choices sorted by detection (detected agents first, then others).\n */\nexport async function getAgentChoices() {\n  const detected = await detectInstalledAgents();\n\n  // Define all available agents\n  const allAgents = [\n    { title: \"Cursor\", value: \"cursor\" },\n    { title: \"VS Code Copilot\", value: \"vscode\" },\n    { title: \"Claude Code\", value: \"claude\" },\n    { title: \"OpenCode\", value: \"opencode\" },\n    { title: \"Windsurf\", value: \"windsurf\" },\n    { title: \"All agents\", value: \"all\" },\n    { title: \"Skip\", value: \"skip\" },\n  ];\n\n  // Sort: detected agents first, then others\n  const sorted = allAgents.sort((a, b) => {\n    const aDetected = detected.includes(a.value);\n    const bDetected = detected.includes(b.value);\n\n    if (aDetected && !bDetected) return -1;\n    if (!aDetected && bDetected) return 1;\n    return 0;\n  });\n\n  return sorted;\n}\n"],"mappings":";;;;;;;;;AAQA,eAAsB,wBAA2C;CAC/D,MAAMA,WAAqB,EAAE;AAG7B,KAAI;AACF,QAAM,OAAO,KAAK,KAAK,QAAQ,KAAK,EAAE,UAAU,CAAC;AACjD,WAAS,KAAK,SAAS;SACjB;AAKR,KAAI;AACF,QAAM,OAAO,KAAK,KAAK,QAAQ,KAAK,EAAE,UAAU,CAAC;AACjD,WAAS,KAAK,SAAS;SACjB;AACN,MAAI;AACF,SAAM,OAAO,KAAK,KAAK,QAAQ,KAAK,EAAE,kBAAkB,CAAC;AACzD,YAAS,KAAK,SAAS;UACjB;;AAMV,KAAI;AACF,QAAM,OAAO,KAAK,KAAK,GAAG,SAAS,EAAE,UAAU,CAAC;AAChD,WAAS,KAAK,SAAS;SACjB;AAKR,KAAI;AACF,QAAM,OAAO,KAAK,KAAK,QAAQ,KAAK,EAAE,YAAY,CAAC;AACnD,WAAS,KAAK,WAAW;SACnB;AACN,MAAI;AACF,SAAM,OAAO,KAAK,KAAK,QAAQ,KAAK,EAAE,YAAY,CAAC;AACnD,YAAS,KAAK,WAAW;UACnB;;AAMV,KAAI;AACF,QAAM,OAAO,KAAK,KAAK,GAAG,SAAS,EAAE,YAAY,CAAC;AAClD,WAAS,KAAK,WAAW;SACnB;AAIR,QAAO;;;;;AAMT,eAAsB,kBAAkB;CACtC,MAAM,WAAW,MAAM,uBAAuB;AAuB9C,QApBkB;EAChB;GAAE,OAAO;GAAU,OAAO;GAAU;EACpC;GAAE,OAAO;GAAmB,OAAO;GAAU;EAC7C;GAAE,OAAO;GAAe,OAAO;GAAU;EACzC;GAAE,OAAO;GAAY,OAAO;GAAY;EACxC;GAAE,OAAO;GAAY,OAAO;GAAY;EACxC;GAAE,OAAO;GAAc,OAAO;GAAO;EACrC;GAAE,OAAO;GAAQ,OAAO;GAAQ;EACjC,CAGwB,MAAM,GAAG,MAAM;EACtC,MAAM,YAAY,SAAS,SAAS,EAAE,MAAM;EAC5C,MAAM,YAAY,SAAS,SAAS,EAAE,MAAM;AAE5C,MAAI,aAAa,CAAC,UAAW,QAAO;AACpC,MAAI,CAAC,aAAa,UAAW,QAAO;AACpC,SAAO;GACP"}