@getvitops/create 0.4.0 → 0.6.0

package/templates/static/scripts/init-github.mjs

@@ -0,0 +1,186 @@
+// One-time GitHub bootstrap: creates a GitHub repo named after this project
+// (package.json name), pushes `main` + `dev`, makes `dev` the default branch,
+// and provisions the branch-protection + environment policy the deploy
+// workflows assume (deploy-dev on push to dev, deploy-prod on push to main,
+// promote.yml between them):
+//
+//   - `main` requires a PR + the `ci` status check — it only advances via
+//     promote.yml, never a direct push.
+//   - the `production` GitHub Environment requires review from an admin
+//     collaborator before deploy-prod.yml is allowed to run — this is the
+//     "promoting to prod needs admin sign-off" gate.
+//   - `dev` is left UNPROTECTED on purpose — that's what lets an agent (or
+//     anyone with push access) commit and merge there directly for
+//     integration; only the promotion to `main` is gated.
+//
+//   pnpm run init:github             # private repo (default)
+//   pnpm run init:github -- --public
+//   pnpm run init:github -- --dry-run
+//
+// Idempotent: safe to re-run — existing git repo, commits, dev branch, origin
+// remote, branch protection and environments are all left alone or updated
+// in place. Requires the GitHub CLI (`gh`), logged in (`gh auth login`).
+//
+// NOTE: branch protection and environment required-reviewers are GitHub
+// Pro/Team features on a PRIVATE repo. Each `gh api` call below prints the
+// manual equivalent and continues rather than aborting when it 403s.
+
+import { execSync, spawnSync } from 'node:child_process';
+import { readFileSync } from 'node:fs';
+
+const args = new Set(process.argv.slice(2));
+const dryRun = args.has('--dry-run');
+const visibility = args.has('--public') ? '--public' : '--private';
+
+const repoName = JSON.parse(readFileSync('package.json', 'utf8')).name.replace(/^@[^/]+\//, '');
+
+function check(cmd) {
+  return spawnSync(cmd[0], cmd.slice(1), { encoding: 'utf8' });
+}
+
+function quiet(cmd) {
+  try {
+    return execSync(cmd, { encoding: 'utf8', stdio: ['ignore', 'pipe', 'ignore'] }).trim();
+  } catch {
+    return null;
+  }
+}
+
+function run(cmd) {
+  if (dryRun) {
+    console.log(`[dry-run] ${cmd}`);
+    return;
+  }
+  console.log(`$ ${cmd}`);
+  try {
+    execSync(cmd, { stdio: 'inherit' });
+  } catch {
+    console.error(
+      `\nERROR: \`${cmd}\` failed (see output above). Fix and re-run — the script is idempotent.`,
+    );
+    process.exit(1);
+  }
+}
+
+/**
+ * Like `run`, but for `gh api` calls that provision an org/plan-gated
+ * feature (branch protection, environment reviewers). A 403 there means the
+ * repo's plan doesn't support it — not that the bootstrap failed — so this
+ * prints the manual equivalent and keeps going instead of exiting.
+ */
+function runPolicy(cmd, manualHint) {
+  if (dryRun) {
+    console.log(`[dry-run] ${cmd}`);
+    return;
+  }
+  console.log(`$ ${cmd}`);
+  const result = spawnSync(cmd, { shell: true, encoding: 'utf8' });
+  if (result.status === 0) return;
+  console.warn(
+    `\nWARNING: \`${cmd}\` failed (likely needs GitHub Pro/Team on a private repo).\n` +
+      `Set it up manually instead:\n  ${manualHint}\n`,
+  );
+}
+
+// --- Preflight: gh installed and authenticated -------------------------------
+if (check(['gh', '--version']).status !== 0) {
+  console.error('ERROR: the GitHub CLI (`gh`) is required. Install it from https://cli.github.com');
+  process.exit(1);
+}
+if (check(['gh', 'auth', 'status']).status !== 0) {
+  console.error('ERROR: `gh` is not logged in. Run `gh auth login` first.');
+  process.exit(1);
+}
+
+// --- Local git: repo, initial commit, main + dev branches --------------------
+if (quiet('git rev-parse --is-inside-work-tree') === null) {
+  run('git init -b main');
+}
+if (quiet('git rev-parse HEAD') === null) {
+  run('git add -A');
+  run('git commit -m "Initial commit (scaffolded from @getvitops/create)"');
+}
+
+// The workflows key off `main`; normalize whatever the initial branch is.
+const branch = quiet('git branch --show-current');
+if (branch && branch !== 'main' && branch !== 'dev') {
+  run(`git branch -m ${branch} main`);
+}
+if (quiet('git show-ref --verify refs/heads/dev') === null) {
+  run('git branch dev main');
+}
+
+// --- GitHub: create repo (same name), push, default to dev -------------------
+if (quiet('git remote get-url origin') === null) {
+  run(`gh repo create ${repoName} ${visibility} --source=. --remote=origin`);
+} else {
+  console.log('origin remote already set — skipping `gh repo create`.');
+}
+run('git push -u origin main dev');
+run('gh repo edit --default-branch dev');
+run('git checkout dev');
+
+// --- Policy: protect main, gate production behind admin review --------------
+const nwo = quiet('gh repo view --json nameWithOwner -q .nameWithOwner');
+if (nwo) {
+  runPolicy(
+    `gh api -X PUT repos/${nwo}/branches/main/protection --input - <<'JSON'
+{
+  "required_status_checks": { "strict": true, "contexts": ["ci"] },
+  "enforce_admins": false,
+  "required_pull_request_reviews": { "required_approving_review_count": 1 },
+  "restrictions": null,
+  "allow_force_pushes": false,
+  "allow_deletions": false
+}
+JSON`,
+    `Settings → Branches → protect 'main' (require a PR, 1 approval, the 'ci' ` +
+      `status check, no force-push/deletion).`,
+  );
+
+  const admins = quiet(
+    `gh api repos/${nwo}/collaborators?permission=admin -q '[.[].login]' 2>/dev/null`,
+  );
+  const reviewers = admins
+    ? JSON.parse(admins).map((login) => ({ type: 'User', id_or_login: login }))
+    : [];
+
+  runPolicy(
+    `gh api -X PUT repos/${nwo}/environments/production --input - <<'JSON'
+{
+  "reviewers": ${JSON.stringify(reviewers)},
+  "deployment_branch_policy": { "protected_branches": true, "custom_branch_policies": false }
+}
+JSON`,
+    `Settings → Environments → 'production' → require reviewers = your admins, ` +
+      `restrict deployment branches to 'main'. This is the prod-needs-admin-approval gate.`,
+  );
+
+  // `dev` gets an environment too (for the deploy-dev workflow's `environment:
+  // dev` reference), but deliberately no reviewers and no branch restriction —
+  // that's what keeps it open for direct pushes/merges.
+  runPolicy(
+    `gh api -X PUT repos/${nwo}/environments/dev --input - <<'JSON'
+{ "reviewers": [] }
+JSON`,
+    `Settings → Environments → create 'dev' with no required reviewers.`,
+  );
+} else {
+  console.warn('WARNING: could not resolve the repo name-with-owner; skipping policy setup.');
+}
+
+// --- What's left (manual, needs your Cloudflare account) ---------------------
+console.log(`
+Repo ready: main (protected, production) + dev (integration, default branch).
+NOTE: the first workflow runs will fail until the secrets below exist.
+
+Next steps:
+  1. Dev resources:  wrangler d1 create ${repoName}-dev   (note the printed id)
+                     wrangler r2 bucket create ${repoName}-media-dev
+  2. Secrets:        gh secret set CLOUDFLARE_API_TOKEN
+                     gh secret set CLOUDFLARE_ACCOUNT_ID
+                     gh secret set DEV_D1_ID
+  3. Verify policy:  Settings → Branches (main protected?) and
+                     Settings → Environments → production (reviewers set?) —
+                     printed above if this ran on a plan that supports them.
+`);

package/templates/static/scripts/init-hosting.mjs

@@ -0,0 +1,62 @@
+// One-time hosting-platform setup for this static site.
+//
+//   pnpm run init:hosting
+//   pnpm run init:hosting -- --dry-run
+//
+// There is no D1/R2 to provision here — a pure static build has no data
+// layer — so this reduces to reading the Cloudflare account id from
+// `wrangler whoami` and, when a GitHub repo is wired up (see
+// init-github.mjs), setting it as a repo secret. The API token itself still
+// has to be created by hand (the CLI can't mint one).
+//
+// Idempotent: safe to re-run. Requires wrangler auth (`npx wrangler login`).
+
+import { execSync, spawnSync } from 'node:child_process';
+
+const dryRun = process.argv.includes('--dry-run');
+
+function quiet(cmd) {
+  try {
+    return execSync(cmd, { encoding: 'utf8', stdio: ['ignore', 'pipe', 'ignore'] }).trim();
+  } catch {
+    return null;
+  }
+}
+
+function run(cmd) {
+  if (dryRun) {
+    console.log(`[dry-run] ${cmd}`);
+    return;
+  }
+  console.log(`$ ${cmd}`);
+  execSync(cmd, { stdio: 'inherit' });
+}
+
+const whoami = spawnSync('npx', ['wrangler', 'whoami'], { encoding: 'utf8' });
+if (whoami.status !== 0) {
+  console.error('ERROR: wrangler is not logged in. Run `npx wrangler login` first.');
+  process.exit(1);
+}
+// "Account Name | <32-hex account id>" table row in `wrangler whoami` output.
+const accountId = (whoami.stdout.match(/\b([0-9a-f]{32})\b/) ?? [])[1] ?? null;
+
+const hasGh = spawnSync('gh', ['auth', 'status'], { encoding: 'utf8' }).status === 0;
+const hasOrigin = quiet('git remote get-url origin') !== null;
+if (hasGh && hasOrigin && accountId) {
+  run(`gh secret set CLOUDFLARE_ACCOUNT_ID --body ${accountId}`);
+} else {
+  console.log(
+    '\nSkipping GitHub secret (no gh auth, no origin remote, or no account id — run init:github first).',
+  );
+}
+
+console.log(`
+Cloudflare account: ${accountId ?? '(not found — check `wrangler whoami`)'}
+
+Still manual (CLI can't create API tokens):
+  1. Create a token with Workers edit permission:
+     https://dash.cloudflare.com/profile/api-tokens
+  2. gh secret set CLOUDFLARE_API_TOKEN
+
+Prod/dev D1/R2 don't apply here — this is a pure static site.
+`);

package/templates/static/src/assets/placeholder/wireframe-400x400.svg

@@ -0,0 +1 @@
+<svg xmlns="http://www.w3.org/2000/svg" width="400" height="400" viewBox="0 0 400 400"><rect width="100%" height="100%" fill="#DDDDDD"/><path fill="#999999" d="M87.3 204.72h11.66v-12.54q0-1.77.24-3.92zm17.36 0h4.82v3.79q0 .53-.35.91-.34.39-.98.39h-3.49v9.35h-5.7v-9.35H82.79q-.66 0-1.16-.42-.51-.41-.64-1.02l-.69-3.31 18.16-24.25h6.2zm35.59-4.72q0 5.01-1.08 8.71-1.07 3.69-2.97 6.1-1.89 2.42-4.47 3.59-2.59 1.18-5.58 1.18-3 0-5.55-1.18-2.56-1.17-4.44-3.59-1.88-2.41-2.94-6.1-1.06-3.7-1.06-8.71 0-5.03 1.06-8.72 1.06-3.68 2.94-6.09t4.44-3.59q2.55-1.18 5.55-1.18 2.99 0 5.58 1.18 2.58 1.18 4.47 3.59 1.9 2.41 2.97 6.09 1.08 3.69 1.08 8.72m-6.76 0q0-4.16-.61-6.89t-1.63-4.35q-1.02-1.61-2.35-2.26-1.32-.65-2.75-.65-1.41 0-2.72.65t-2.32 2.26q-1 1.62-1.6 4.35t-.6 6.89.6 6.89 1.6 4.35q1.01 1.61 2.32 2.26t2.72.65q1.43 0 2.75-.65 1.33-.65 2.35-2.26 1.02-1.62 1.63-4.35t.61-6.89m37.5 0q0 5.01-1.08 8.71-1.07 3.69-2.97 6.1-1.89 2.42-4.47 3.59-2.59 1.18-5.58 1.18-3 0-5.55-1.18-2.56-1.17-4.44-3.59-1.88-2.41-2.94-6.1-1.06-3.7-1.06-8.71 0-5.03 1.06-8.72 1.06-3.68 2.94-6.09t4.44-3.59q2.55-1.18 5.55-1.18 2.99 0 5.58 1.18 2.58 1.18 4.47 3.59 1.9 2.41 2.97 6.09 1.08 3.69 1.08 8.72m-6.76 0q0-4.16-.61-6.89t-1.63-4.35q-1.02-1.61-2.35-2.26-1.32-.65-2.75-.65-1.41 0-2.72.65t-2.32 2.26q-1 1.62-1.6 4.35t-.6 6.89.6 6.89 1.6 4.35q1.01 1.61 2.32 2.26t2.72.65q1.43 0 2.75-.65 1.33-.65 2.35-2.26 1.02-1.62 1.63-4.35t.61-6.89m48.84 10.39-3.47 3.42-8.99-8.99-9.06 9.04-3.47-3.42 9.06-9.09-8.64-8.64 3.45-3.44 8.64 8.64 8.58-8.59 3.5 3.45-8.61 8.61zm22.95-5.67h11.66v-12.54q0-1.77.24-3.92zm17.35 0h4.83v3.79q0 .53-.35.91-.34.39-.98.39h-3.5v9.35h-5.69v-9.35h-16.17q-.66 0-1.16-.42-.51-.41-.64-1.02l-.69-3.31 18.15-24.25h6.2zm35.59-4.72q0 5.01-1.07 8.71-1.07 3.69-2.97 6.1-1.89 2.42-4.48 3.59-2.58 1.18-5.57 1.18-3 0-5.56-1.18-2.55-1.17-4.43-3.59-1.89-2.41-2.95-6.1-1.06-3.7-1.06-8.71 0-5.03 1.06-8.72 1.06-3.68 2.95-6.09 1.88-2.41 4.43-3.59 2.56-1.18 5.56-1.18 2.99 0 5.57 1.18 2.59 1.18 4.48 3.59 1.9 2.41 2.97 6.09 1.07 3.69 1.07 8.72m-6.75 0q0-4.16-.61-6.89t-1.63-4.35q-1.02-1.61-2.35-2.26-1.32-.65-2.75-.65-1.41 0-2.72.65t-2.32 2.26q-1.01 1.62-1.6 4.35-.6 2.73-.6 6.89t.6 6.89q.59 2.73 1.6 4.35 1.01 1.61 2.32 2.26t2.72.65q1.43 0 2.75-.65 1.33-.65 2.35-2.26 1.02-1.62 1.63-4.35t.61-6.89m37.49 0q0 5.01-1.07 8.71-1.07 3.69-2.97 6.1-1.89 2.42-4.48 3.59-2.58 1.18-5.57 1.18-3 0-5.56-1.18-2.55-1.17-4.43-3.59-1.89-2.41-2.95-6.1-1.06-3.7-1.06-8.71 0-5.03 1.06-8.72 1.06-3.68 2.95-6.09 1.88-2.41 4.43-3.59 2.56-1.18 5.56-1.18 2.99 0 5.57 1.18 2.59 1.18 4.48 3.59 1.9 2.41 2.97 6.09 1.07 3.69 1.07 8.72m-6.75 0q0-4.16-.61-6.89t-1.63-4.35q-1.02-1.61-2.35-2.26-1.32-.65-2.75-.65-1.41 0-2.72.65t-2.32 2.26q-1.01 1.62-1.6 4.35-.6 2.73-.6 6.89t.6 6.89q.59 2.73 1.6 4.35 1.01 1.61 2.32 2.26t2.72.65q1.43 0 2.75-.65 1.33-.65 2.35-2.26 1.02-1.62 1.63-4.35t.61-6.89"/></svg>

package/templates/static/src/assets/placeholder/wireframe-400x600.svg

@@ -0,0 +1 @@
+<svg xmlns="http://www.w3.org/2000/svg" width="400" height="600" viewBox="0 0 400 600"><rect width="100%" height="100%" fill="#DDDDDD"/><path fill="#999999" d="M87.3 304.72h11.66v-12.54q0-1.77.24-3.92zm17.36 0h4.82v3.79q0 .53-.35.91-.34.39-.98.39h-3.49v9.35h-5.7v-9.35H82.79q-.66 0-1.16-.42-.51-.41-.64-1.02l-.69-3.31 18.16-24.25h6.2zm35.59-4.72q0 5.01-1.08 8.71-1.07 3.69-2.97 6.1-1.89 2.42-4.47 3.59-2.59 1.18-5.58 1.18-3 0-5.55-1.18-2.56-1.17-4.44-3.59-1.88-2.41-2.94-6.1-1.06-3.7-1.06-8.71 0-5.03 1.06-8.72 1.06-3.68 2.94-6.09t4.44-3.59q2.55-1.18 5.55-1.18 2.99 0 5.58 1.18 2.58 1.18 4.47 3.59 1.9 2.41 2.97 6.09 1.08 3.69 1.08 8.72m-6.76 0q0-4.16-.61-6.89t-1.63-4.35q-1.02-1.61-2.35-2.26-1.32-.65-2.75-.65-1.41 0-2.72.65t-2.32 2.26q-1 1.62-1.6 4.35t-.6 6.89.6 6.89 1.6 4.35q1.01 1.61 2.32 2.26t2.72.65q1.43 0 2.75-.65 1.33-.65 2.35-2.26 1.02-1.62 1.63-4.35t.61-6.89m37.5 0q0 5.01-1.08 8.71-1.07 3.69-2.97 6.1-1.89 2.42-4.47 3.59-2.59 1.18-5.58 1.18-3 0-5.55-1.18-2.56-1.17-4.44-3.59-1.88-2.41-2.94-6.1-1.06-3.7-1.06-8.71 0-5.03 1.06-8.72 1.06-3.68 2.94-6.09t4.44-3.59q2.55-1.18 5.55-1.18 2.99 0 5.58 1.18 2.58 1.18 4.47 3.59 1.9 2.41 2.97 6.09 1.08 3.69 1.08 8.72m-6.76 0q0-4.16-.61-6.89t-1.63-4.35q-1.02-1.61-2.35-2.26-1.32-.65-2.75-.65-1.41 0-2.72.65t-2.32 2.26q-1 1.62-1.6 4.35t-.6 6.89.6 6.89 1.6 4.35q1.01 1.61 2.32 2.26t2.72.65q1.43 0 2.75-.65 1.33-.65 2.35-2.26 1.02-1.62 1.63-4.35t.61-6.89m48.84 10.39-3.47 3.42-8.99-8.99-9.06 9.04-3.47-3.42 9.06-9.09-8.64-8.64 3.45-3.44 8.64 8.64 8.58-8.59 3.5 3.45-8.61 8.61zm40.94-29.55-11.37 13.91-1.32 1.65q1.11-.56 2.4-.86 1.28-.31 2.76-.31 2.18 0 4.23.72 2.05.71 3.62 2.16 1.56 1.44 2.52 3.59.95 2.14.95 5 0 2.68-.98 5.03-.98 2.34-2.76 4.09-1.77 1.75-4.28 2.76-2.5 1-5.52 1-3.08 0-5.51-.98-2.44-.98-4.16-2.74-1.73-1.76-2.64-4.24-.92-2.48-.92-5.5 0-2.7 1.1-5.55t3.41-5.92l9.14-12.27q.48-.64 1.39-1.09.92-.45 2.11-.45zm-9.88 33.39q1.56 0 2.87-.53t2.25-1.48q.94-.96 1.47-2.24.53-1.29.53-2.8 0-1.64-.5-2.95t-1.43-2.23q-.93-.91-2.23-1.39-1.29-.48-2.86-.48-1.56 0-2.83.53-1.28.53-2.18 1.47t-1.4 2.23-.5 2.77q0 1.59.43 2.9.44 1.31 1.3 2.24t2.13 1.44q1.28.52 2.95.52M288.96 300q0 5.01-1.07 8.71-1.07 3.69-2.97 6.1-1.89 2.42-4.48 3.59-2.58 1.18-5.57 1.18-3 0-5.56-1.18-2.55-1.17-4.43-3.59-1.89-2.41-2.95-6.1-1.06-3.7-1.06-8.71 0-5.03 1.06-8.72 1.06-3.68 2.95-6.09 1.88-2.41 4.43-3.59 2.56-1.18 5.56-1.18 2.99 0 5.57 1.18 2.59 1.18 4.48 3.59 1.9 2.41 2.97 6.09 1.07 3.69 1.07 8.72m-6.75 0q0-4.16-.61-6.89t-1.63-4.35q-1.02-1.61-2.35-2.26-1.32-.65-2.75-.65-1.41 0-2.72.65t-2.32 2.26q-1.01 1.62-1.6 4.35-.6 2.73-.6 6.89t.6 6.89q.59 2.73 1.6 4.35 1.01 1.61 2.32 2.26t2.72.65q1.43 0 2.75-.65 1.33-.65 2.35-2.26 1.02-1.62 1.63-4.35t.61-6.89m37.49 0q0 5.01-1.07 8.71-1.07 3.69-2.97 6.1-1.89 2.42-4.48 3.59-2.58 1.18-5.57 1.18-3 0-5.56-1.18-2.55-1.17-4.43-3.59-1.89-2.41-2.95-6.1-1.06-3.7-1.06-8.71 0-5.03 1.06-8.72 1.06-3.68 2.95-6.09 1.88-2.41 4.43-3.59 2.56-1.18 5.56-1.18 2.99 0 5.57 1.18 2.59 1.18 4.48 3.59 1.9 2.41 2.97 6.09 1.07 3.69 1.07 8.72m-6.75 0q0-4.16-.61-6.89t-1.63-4.35q-1.02-1.61-2.35-2.26-1.32-.65-2.75-.65-1.41 0-2.72.65t-2.32 2.26q-1.01 1.62-1.6 4.35-.6 2.73-.6 6.89t.6 6.89q.59 2.73 1.6 4.35 1.01 1.61 2.32 2.26t2.72.65q1.43 0 2.75-.65 1.33-.65 2.35-2.26 1.02-1.62 1.63-4.35t.61-6.89"/></svg>

package/templates/static/src/assets/placeholder/wireframe-600x400.svg

@@ -0,0 +1 @@
+<svg xmlns="http://www.w3.org/2000/svg" width="600" height="400" viewBox="0 0 600 400"><rect width="100%" height="100%" fill="#DDDDDD"/><path fill="#999999" d="m155.52 171.08-17.16 21-2 2.48q1.68-.84 3.62-1.3t4.18-.46q3.28 0 6.38 1.08t5.46 3.26 3.8 5.42 1.44 7.56q0 4.04-1.48 7.58t-4.16 6.18-6.46 4.16-8.34 1.52q-4.64 0-8.32-1.48t-6.28-4.14-3.98-6.4-1.38-8.3q0-4.08 1.66-8.38t5.14-8.94l13.8-18.52q.72-.96 2.1-1.64t3.18-.68zm-14.92 50.4q2.36 0 4.34-.8t3.4-2.24 2.22-3.38.8-4.22q0-2.48-.76-4.46t-2.16-3.36-3.36-2.1-4.32-.72-4.28.8-3.28 2.22-2.12 3.36-.76 4.18q0 2.4.66 4.38t1.96 3.38 3.22 2.18 4.44.78M208.28 200q0 7.56-1.62 13.14t-4.48 9.22-6.76 5.42-8.42 1.78-8.38-1.78-6.7-5.42-4.44-9.22-1.6-13.14q0-7.6 1.6-13.16t4.44-9.2 6.7-5.42 8.38-1.78 8.42 1.78 6.76 5.42 4.48 9.2 1.62 13.16m-10.2 0q0-6.28-.92-10.4t-2.46-6.56-3.54-3.42-4.16-.98q-2.12 0-4.1.98t-3.5 3.42-2.42 6.56-.9 10.4.9 10.4 2.42 6.56 3.5 3.42 4.1.98q2.16 0 4.16-.98t3.54-3.42 2.46-6.56.92-10.4m56.6 0q0 7.56-1.62 13.14t-4.48 9.22-6.76 5.42-8.42 1.78-8.38-1.78-6.7-5.42-4.44-9.22-1.6-13.14q0-7.6 1.6-13.16t4.44-9.2 6.7-5.42 8.38-1.78 8.42 1.78 6.76 5.42 4.48 9.2 1.62 13.16m-10.2 0q0-6.28-.92-10.4t-2.46-6.56-3.54-3.42-4.16-.98q-2.12 0-4.1.98t-3.5 3.42-2.42 6.56-.9 10.4.9 10.4 2.42 6.56 3.5 3.42 4.1.98q2.16 0 4.16-.98t3.54-3.42 2.46-6.56.92-10.4m73.72 15.68-5.24 5.16-13.56-13.56-13.68 13.64-5.24-5.16 13.68-13.72L281.12 189l5.2-5.2 13.04 13.04 12.96-12.96 5.28 5.2-13 13zm34.64-8.56h17.6V188.2q0-2.68.36-5.92zm26.2 0h7.28v5.72q0 .8-.52 1.38t-1.48.58h-5.28v14.12h-8.6V214.8h-24.4q-1 0-1.76-.62t-.96-1.54l-1.04-5 27.4-36.6h9.36zm53.72-7.12q0 7.56-1.62 13.14t-4.48 9.22-6.76 5.42-8.42 1.78-8.38-1.78-6.7-5.42-4.44-9.22-1.6-13.14q0-7.6 1.6-13.16t4.44-9.2 6.7-5.42 8.38-1.78 8.42 1.78 6.76 5.42 4.48 9.2 1.62 13.16m-10.2 0q0-6.28-.92-10.4t-2.46-6.56-3.54-3.42-4.16-.98q-2.12 0-4.1.98t-3.5 3.42-2.42 6.56-.9 10.4.9 10.4 2.42 6.56 3.5 3.42 4.1.98q2.16 0 4.16-.98t3.54-3.42 2.46-6.56.92-10.4m56.6 0q0 7.56-1.62 13.14t-4.48 9.22-6.76 5.42-8.42 1.78-8.38-1.78-6.7-5.42-4.44-9.22-1.6-13.14q0-7.6 1.6-13.16t4.44-9.2 6.7-5.42 8.38-1.78 8.42 1.78 6.76 5.42 4.48 9.2 1.62 13.16m-10.2 0q0-6.28-.92-10.4t-2.46-6.56-3.54-3.42-4.16-.98q-2.12 0-4.1.98t-3.5 3.42-2.42 6.56-.9 10.4.9 10.4 2.42 6.56 3.5 3.42 4.1.98q2.16 0 4.16-.98t3.54-3.42 2.46-6.56.92-10.4"/></svg>

package/templates/static/src/layouts/Layout.astro

@@ -0,0 +1,26 @@
+---
+import VitopsHead from '@getvitops/astro/Head.astro';
+import Seo from '@getvitops/astro/Seo.astro';
+import '../styles/styles.css';
+
+interface Props {
+  title?: string;
+  description?: string;
+}
+
+const { title, description } = Astro.props;
+---
+
+<html lang="en">
+  <head>
+    <meta charset="utf-8" />
+    <meta name="viewport" content="width=device-width, initial-scale=1" />
+    <VitopsHead />
+    <Seo title={title} description={description} />
+  </head>
+  <body>
+    <main class="centered rhythm">
+      <slot />
+    </main>
+  </body>
+</html>

package/templates/static/src/pages/404.astro

@@ -0,0 +1,11 @@
+---
+import Layout from '../layouts/Layout.astro';
+---
+
+<Layout title="Page not found">
+  <section class="rhythm">
+    <h1>Page not found</h1>
+    <p>The page you're looking for doesn't exist.</p>
+    <p><a href="/">Back to the home page</a></p>
+  </section>
+</Layout>

package/templates/static/src/pages/index.astro

@@ -0,0 +1,13 @@
+---
+import Layout from '../layouts/Layout.astro';
+---
+
+<Layout description="Scaffolded with @getvitops/create — a static Astro site with the Vitops design system pre-wired.">
+  <section class="rhythm">
+    <h1>Welcome</h1>
+    <p>
+      Edit <code>design-system.json</code> and run <code>pnpm run build:css</code> to regenerate
+      the framework CSS, or edit this page directly.
+    </p>
+  </section>
+</Layout>

package/templates/static/tsconfig.json

@@ -0,0 +1,5 @@
+{
+  "extends": "astro/tsconfigs/strict",
+  "include": [".astro/types.d.ts", "**/*"],
+  "exclude": ["dist", "public"]
+}

package/templates/static/wrangler.jsonc

@@ -0,0 +1,15 @@
+{
+  "$schema": "node_modules/wrangler/config-schema.json",
+  "name": "my-static-site",
+  "compatibility_date": "2026-02-24",
+  // Pure static Astro output — Workers Static Assets, no adapter and no
+  // Worker script. This is the whole config: nothing else to provision.
+  "assets": {
+    "directory": "./dist",
+  },
+  // Custom domain: uncomment and set your apex. Cloudflare provisions the DNS
+  // record + TLS cert on deploy (the zone must already exist in the account).
+  // `pnpm run deploy:dev` rewrites this to `dev.<domain>` automatically (see
+  // scripts/dev-wrangler-config.mjs) — nothing to change for the dev deploy.
+  // "routes": [{ "pattern": "example.com", "custom_domain": true }],
+}