@getvitops/create 0.1.0 → 0.2.0

package/README.md

@@ -40,6 +40,9 @@ with every relevant `@getvitops/*` package pre-wired:
   collection, `primary`/`footer` menus, and settings apply on first boot; the
   starter pages (home, about, terms, privacy — plus a 404 route) publish when
   the setup wizard's "include sample content" option is chosen.
+- **GitHub bootstrap** — `pnpm run init:github` creates a same-named GitHub
+  repo via the `gh` CLI, pushes `main` + `dev`, and makes `dev` the default
+  branch (idempotent; `--dry-run` / `--public` flags).
 - **dev → main promotion flow** — GitHub Actions deploying `dev` to an
   isolated `-dev` worker (`dev.<domain>` with a custom domain; own D1/R2 via
   `scripts/build-dev-wrangler.mjs`, which hard-fails without `DEV_D1_ID`) and

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@getvitops/create",
-  "version": "0.1.0",
+  "version": "0.2.0",
   "description": "Project templates for the Vitops design system — scaffold wired-up sites with `vp create @getvitops`.",
   "license": "MIT",
   "files": [

package/templates/emdash/AGENTS.md

@@ -47,4 +47,6 @@ searching them over pre-trained knowledge for Astro/EmDash questions.
 - `pnpm typecheck` — `astro check`
 - `pnpm deploy` — build + `wrangler deploy` prod (provisions D1/R2 on first run)
 - `pnpm deploy:dev` — build + deploy the isolated dev worker (needs `DEV_D1_ID`)
+- `pnpm run init:github` — one-time: create + push the GitHub repo (main + dev,
+  dev default). Only run when the user asks to set up GitHub.
 - `npx vitops validate design-system.json` — schema-check the design config

package/templates/emdash/README.md

@@ -69,15 +69,19 @@ The repo ships a two-environment flow modeled on branch = environment:
 
 One-time setup:
 
-1. Create the branches: `git branch dev && git push -u origin main dev`, and
-   make `dev` the default working branch. Branch-protect `main` (require the
-   promotion PR + review).
+1. `pnpm run init:github` — creates a GitHub repo named after this project
+   (via the `gh` CLI; `-- --public` for a public repo), commits if needed,
+   pushes `main` + `dev`, and makes `dev` the default branch. Idempotent;
+   `-- --dry-run` previews. Then branch-protect `main` (require the promotion
+   PR + review).
 2. Create the isolated dev resources:
    `wrangler d1 create my-emdash-site-dev` and
    `wrangler r2 bucket create my-emdash-site-media-dev`.
-3. Add repo secrets: `CLOUDFLARE_API_TOKEN`, `CLOUDFLARE_ACCOUNT_ID`, and
-   `DEV_D1_ID` (the id printed by `d1 create`). Optionally `PROMOTE_TOKEN`
-   (a PAT allowed to bypass protection) for hands-off promotion.
+3. Add repo secrets: `gh secret set CLOUDFLARE_API_TOKEN`,
+   `gh secret set CLOUDFLARE_ACCOUNT_ID`, and `gh secret set DEV_D1_ID`
+   (the id printed by `d1 create`). Optionally `PROMOTE_TOKEN` (a PAT allowed
+   to bypass protection) for hands-off promotion. The first workflow runs
+   fail until these exist.
 
 `pnpm deploy:dev` reproduces the dev deploy locally: it rewrites the
 adapter-generated wrangler config (`scripts/build-dev-wrangler.mjs`) so the
@@ -130,6 +134,7 @@ pnpm build:css                           # regenerate the CSS manually
 | `src/pages/404.astro`            | Not-found page (the catch-all rewrites here)                      |
 | `wrangler.jsonc`                 | Cloudflare bindings (D1/R2) + cron trigger                        |
 | `scripts/build-dev-wrangler.mjs` | Rewrites the built wrangler config for the isolated dev worker    |
+| `scripts/init-github.mjs`        | One-time: create + push the GitHub repo (`pnpm run init:github`)  |
 | `.github/workflows/`             | deploy-dev (push to `dev`), deploy-prod (push to `main`), promote |
 | `.agents/skills/promote/`        | Agent skill: dispatch the dev → main promotion                    |
 | `.mcp.json`                      | Astro + EmDash docs MCP servers for coding agents                 |

package/templates/emdash/package.json

@@ -9,6 +9,7 @@
     "preview": "astro preview",
     "deploy": "astro build && wrangler deploy",
     "deploy:dev": "astro build && node scripts/build-dev-wrangler.mjs && wrangler deploy --config dist/server/wrangler.dev.json",
+    "init:github": "node scripts/init-github.mjs",
     "typecheck": "astro check",
     "build:css": "vitops generate -i design-system.json -f tailwind -o src/styles",
     "prepare": "vp config"

package/templates/emdash/scripts/init-github.mjs

@@ -0,0 +1,102 @@
+// One-time GitHub bootstrap: creates a GitHub repo named after this project
+// (package.json name), pushes `main` + `dev`, and makes `dev` the default
+// branch — the shape the deploy workflows expect (deploy-dev on push to dev,
+// deploy-prod on push to main, promote.yml between them).
+//
+//   pnpm run init:github             # private repo (default)
+//   pnpm run init:github -- --public
+//   pnpm run init:github -- --dry-run
+//
+// Idempotent: safe to re-run — existing git repo, commits, dev branch, and
+// origin remote are all left alone. Requires the GitHub CLI (`gh`), logged in
+// (`gh auth login`).
+
+import { execSync, spawnSync } from 'node:child_process';
+import { readFileSync } from 'node:fs';
+
+const args = new Set(process.argv.slice(2));
+const dryRun = args.has('--dry-run');
+const visibility = args.has('--public') ? '--public' : '--private';
+
+const repoName = JSON.parse(readFileSync('package.json', 'utf8')).name.replace(/^@[^/]+\//, '');
+
+function check(cmd) {
+  return spawnSync(cmd[0], cmd.slice(1), { encoding: 'utf8' });
+}
+
+function quiet(cmd) {
+  try {
+    return execSync(cmd, { encoding: 'utf8', stdio: ['ignore', 'pipe', 'ignore'] }).trim();
+  } catch {
+    return null;
+  }
+}
+
+function run(cmd) {
+  if (dryRun) {
+    console.log(`[dry-run] ${cmd}`);
+    return;
+  }
+  console.log(`$ ${cmd}`);
+  try {
+    execSync(cmd, { stdio: 'inherit' });
+  } catch {
+    console.error(
+      `\nERROR: \`${cmd}\` failed (see output above). Fix and re-run — the script is idempotent.`,
+    );
+    process.exit(1);
+  }
+}
+
+// --- Preflight: gh installed and authenticated -------------------------------
+if (check(['gh', '--version']).status !== 0) {
+  console.error('ERROR: the GitHub CLI (`gh`) is required. Install it from https://cli.github.com');
+  process.exit(1);
+}
+if (check(['gh', 'auth', 'status']).status !== 0) {
+  console.error('ERROR: `gh` is not logged in. Run `gh auth login` first.');
+  process.exit(1);
+}
+
+// --- Local git: repo, initial commit, main + dev branches --------------------
+if (quiet('git rev-parse --is-inside-work-tree') === null) {
+  run('git init -b main');
+}
+if (quiet('git rev-parse HEAD') === null) {
+  run('git add -A');
+  run('git commit -m "Initial commit (scaffolded from @getvitops/create emdash template)"');
+}
+
+// The workflows key off `main`; normalize whatever the initial branch is.
+const branch = quiet('git branch --show-current');
+if (branch && branch !== 'main' && branch !== 'dev') {
+  run(`git branch -m ${branch} main`);
+}
+if (quiet('git show-ref --verify refs/heads/dev') === null) {
+  run('git branch dev main');
+}
+
+// --- GitHub: create repo (same name), push, default to dev -------------------
+if (quiet('git remote get-url origin') === null) {
+  run(`gh repo create ${repoName} ${visibility} --source=. --remote=origin`);
+} else {
+  console.log('origin remote already set — skipping `gh repo create`.');
+}
+run('git push -u origin main dev');
+run('gh repo edit --default-branch dev');
+run('git checkout dev');
+
+// --- What's left (manual, needs your Cloudflare account) ---------------------
+console.log(`
+Repo ready: main (production) + dev (integration, default branch).
+NOTE: the first workflow runs will fail until the secrets below exist.
+
+Next steps:
+  1. Dev resources:  wrangler d1 create ${repoName}-dev   (note the printed id)
+                     wrangler r2 bucket create ${repoName}-media-dev
+  2. Secrets:        gh secret set CLOUDFLARE_API_TOKEN
+                     gh secret set CLOUDFLARE_ACCOUNT_ID
+                     gh secret set DEV_D1_ID
+  3. Protect main:   Settings → Branches → protect 'main' (require the
+                     promotion PR + review), so prod only ships via promote.yml.
+`);