@guuey/create-agentic-app 0.8.1 → 0.10.0

package/dist/templates/agentic-app/claude-agent-sdk/web/src/pages/Landing.tsx

@@ -0,0 +1,50 @@
+/**
+ * Landing — the widget IS the hero (distribution way #1). On a linked app
+ * the real guuey widget launcher mounts in the corner; before linking, an
+ * honest placeholder explains what will appear here.
+ */
+import { useEffect, useState } from "react";
+import { Link } from "react-router-dom";
+import { appConfig, isLinked } from "../config";
+import { CHAT_PATH, HOME_PATH } from "../routes";
+import { mountWidget, type WidgetOutcome } from "../lib/widget";
+
+export function Landing() {
+  const [widget, setWidget] = useState<WidgetOutcome | "unlinked" | "loading">(
+    isLinked ? "loading" : "unlinked",
+  );
+
+  useEffect(() => {
+    if (!isLinked) return;
+    mountWidget((outcome) => setWidget(outcome));
+  }, []);
+
+  return (
+    <main className="page landing">
+      <section className="hero">
+        <h1>{appConfig.copy.landing.headline}</h1>
+        <p>{appConfig.copy.landing.sub}</p>
+        <div className="hero-actions">
+          <Link to={CHAT_PATH} className="btn btn-accent">
+            Open the chat
+          </Link>
+          <Link to={HOME_PATH} className="btn">
+            How this app is wired
+          </Link>
+        </div>
+        {widget === "unlinked" ? (
+          <p className="hint">
+            The floating agent launcher appears here once the app is bound to a
+            deployed guuey agent — <code>pnpm bootstrap -- --link</code>.
+          </p>
+        ) : null}
+        {widget === "offline" ? (
+          <p className="hint">
+            Widget script failed to load from this environment — check the app's
+            Allowed Domains include this site.
+          </p>
+        ) : null}
+      </section>
+    </main>
+  );
+}

package/dist/templates/agentic-app/claude-agent-sdk/web/src/pages/Login.tsx

@@ -0,0 +1,81 @@
+/**
+ * Login — two doors, one identity rule (never both at once):
+ *
+ * - "Continue as guest": one click, no account. A per-browser secret is
+ *   minted locally; the agent remembers this browser across visits.
+ * - "Sign in": the BYO-OIDC seam. Active only when `auth.oidc` is
+ *   configured in guuey.app.json (any spec-compliant IdP — this is where a
+ *   "Sign in with Google" plugs in). The bound guuey app must be in BYO
+ *   auth mode for the same issuer.
+ */
+import { useEffect, useRef, useState } from "react";
+import { useNavigate } from "react-router-dom";
+import { appConfig } from "../config";
+import { CHAT_PATH } from "../routes";
+import { continueAsGuest, setIdentityMode } from "../lib/identity";
+import { completeSignIn, isSigninCallback, oidcConfigured, signIn, signOutOidc } from "../lib/oidc";
+
+export function Login() {
+  const navigate = useNavigate();
+  const [error, setError] = useState<string | null>(null);
+  const [completing, setCompleting] = useState(isSigninCallback());
+  // One-shot: StrictMode double-invokes effects in dev, and the OIDC
+  // authorization code is single-use — a second signinCallback() would
+  // double-spend it and flash a bogus failure.
+  const callbackStarted = useRef(false);
+
+  // Finish the redirect flow when the IdP sent us back here.
+  useEffect(() => {
+    if (!isSigninCallback() || callbackStarted.current) return;
+    callbackStarted.current = true;
+    completeSignIn()
+      .then(() => {
+        setIdentityMode("oidc");
+        navigate(CHAT_PATH, { replace: true });
+      })
+      .catch((err: unknown) => {
+        setCompleting(false);
+        setError(err instanceof Error ? err.message : String(err));
+      });
+  }, [navigate]);
+
+  function guest() {
+    // One identity mode per surface: an explicit guest choice also drops
+    // any cached OIDC session, so a stale bearer can never shadow it.
+    void signOutOidc();
+    continueAsGuest();
+    navigate(CHAT_PATH);
+  }
+
+  if (completing) {
+    return (
+      <main className="page login">
+        <div className="login-card">
+          <p>Completing sign-in…</p>
+        </div>
+      </main>
+    );
+  }
+
+  return (
+    <main className="page login">
+      <div className="login-card">
+        <h1>Welcome to {appConfig.brand.name}</h1>
+        {oidcConfigured() ? (
+          <button type="button" className="btn btn-accent btn-wide" onClick={() => void signIn()}>
+            Sign in
+          </button>
+        ) : (
+          <button type="button" className="btn btn-wide" disabled title="Configure auth.oidc in guuey.app.json (or via bootstrap) to enable sign-in">
+            Sign in — not configured yet
+          </button>
+        )}
+        <button type="button" className="btn btn-wide" onClick={guest}>
+          Continue as guest
+        </button>
+        <p className="hint">{appConfig.copy.login.guestHint}</p>
+        {error ? <p className="error">Sign-in failed: {error}</p> : null}
+      </div>
+    </main>
+  );
+}

package/dist/templates/agentic-app/claude-agent-sdk/web/src/pages/Reports.tsx

@@ -0,0 +1,9 @@
+/** Placeholder product page — REPLACE with your app's real content. */
+export function Reports() {
+  return (
+    <div className="page">
+      <h1>Reports</h1>
+      <p className="calm">Another product page behind an upper-sidebar menu. Replace freely.</p>
+    </div>
+  );
+}

package/dist/templates/agentic-app/claude-agent-sdk/web/src/pages/TalkOnMobile.tsx

@@ -0,0 +1,50 @@
+/**
+ * "Talk on mobile" — a QR code to this agent in the guuey portal
+ * (app.guuey.com and its env twins). The QR targets the agent's CARD page
+ * (`/agent/<slug-or-appId>`), which resolves the live endpoint itself —
+ * never the chat route directly. Plain URL today; upgrades to a native
+ * deep link when portal applinks land (same path, so the QR stays valid).
+ */
+import { useEffect, useRef, useState } from "react";
+import QRCode from "qrcode";
+import { appConfig } from "../config";
+
+export function TalkOnMobile() {
+  const canvasRef = useRef<HTMLCanvasElement | null>(null);
+  const [error, setError] = useState<string | null>(null);
+  const link = appConfig.link;
+  const target = link ? `${link.portalUrl}/agent/${link.slug ?? link.appId}` : null;
+
+  useEffect(() => {
+    if (!target || !canvasRef.current) return;
+    QRCode.toCanvas(canvasRef.current, target, { width: 240, margin: 1 }).catch((err: unknown) => {
+      setError(err instanceof Error ? err.message : String(err));
+    });
+  }, [target]);
+
+  return (
+    <div className="page mobile-page">
+      <h1>Talk on mobile</h1>
+      {target ? (
+        <>
+          <p className="calm">
+            Scan with a phone — the same agent, in the guuey portal. (The portal
+            has its own sign-in, so phone conversations are separate threads.)
+          </p>
+          <canvas ref={canvasRef} className="qr" />
+          <p>
+            <a href={target} target="_blank" rel="noreferrer">
+              {target}
+            </a>
+          </p>
+          {error ? <p className="error">QR render failed: {error}</p> : null}
+        </>
+      ) : (
+        <p className="calm">
+          Available once the app is bound to a deployed guuey agent —{" "}
+          <code>pnpm bootstrap -- --link</code>.
+        </p>
+      )}
+    </div>
+  );
+}

package/dist/templates/agentic-app/claude-agent-sdk/web/src/routes.ts

@@ -0,0 +1,7 @@
+/**
+ * Route constants shared by the chrome and pages. In the agentic-app
+ * template the chat is the fullscreen agent canvas inside the app shell,
+ * and the setup guide lives there too.
+ */
+export const CHAT_PATH = "/app/agent";
+export const HOME_PATH = "/app/setup";

package/dist/templates/agentic-app/claude-agent-sdk/web/src/styles-app.css

@@ -0,0 +1,132 @@
+/* agentic-app shell — split sidebar + fullscreen-swap canvas. Loaded after
+   styles.css; only shell-specific rules live here. */
+
+.app-shell {
+  min-height: 100vh;
+  display: flex;
+  flex-direction: column;
+}
+
+.app-body {
+  flex: 1;
+  display: flex;
+  min-height: 0;
+}
+
+.sidebar {
+  width: 220px;
+  flex-shrink: 0;
+  display: flex;
+  flex-direction: column;
+  border-right: 1px solid var(--line);
+  background: var(--bg-soft);
+}
+
+.sidebar-brand {
+  display: flex;
+  align-items: center;
+  gap: 10px;
+  font-weight: 700;
+  padding: 16px;
+}
+
+.sidebar-menus {
+  display: flex;
+  flex-direction: column;
+  padding: 8px;
+  gap: 2px;
+  flex: 1;
+}
+
+.sidebar-menus a {
+  padding: 9px 12px;
+  border-radius: 8px;
+  color: var(--fg-soft);
+  text-decoration: none;
+}
+
+.sidebar-menus a.active {
+  background: var(--bg);
+  color: var(--fg);
+  font-weight: 600;
+}
+
+.sidebar-dock {
+  display: flex;
+  flex-direction: column;
+  gap: 2px;
+  padding: 8px;
+  border-top: 1px solid var(--line);
+}
+
+.sidebar-dock a {
+  padding: 9px 12px;
+  border-radius: 8px;
+  color: var(--fg-soft);
+  text-decoration: none;
+}
+
+.sidebar-dock a.active {
+  background: var(--app-accent);
+  color: #fff;
+  font-weight: 600;
+}
+
+.dock-agent {
+  display: flex;
+  align-items: center;
+  gap: 8px;
+}
+
+.dock-dot {
+  width: 8px;
+  height: 8px;
+  border-radius: 50%;
+  background: var(--ok);
+}
+
+.dock-agent.active .dock-dot {
+  background: #fff;
+}
+
+.dock-logout {
+  margin-top: 4px;
+  padding: 8px 12px;
+  border: none;
+  border-radius: 8px;
+  background: transparent;
+  color: var(--fg-soft);
+  text-align: left;
+  font-size: 14px;
+  cursor: pointer;
+}
+
+.canvas {
+  flex: 1;
+  min-width: 0;
+  display: flex;
+  flex-direction: column;
+  overflow-y: auto;
+}
+
+.canvas .page {
+  max-width: 880px;
+}
+
+.agent-canvas {
+  flex: 1;
+  display: flex;
+  min-height: 0;
+  padding: 16px;
+}
+
+.mobile-page {
+  text-align: center;
+}
+
+.qr {
+  border: 1px solid var(--line);
+  border-radius: 12px;
+  padding: 8px;
+  background: #fff;
+}

package/dist/templates/agentic-app/claude-agent-sdk/web/src/styles.css

@@ -0,0 +1,248 @@
+/* agentic-app-template site styles — one accent, light/dark, no framework. */
+
+:root {
+  --app-accent: #6c5ce7;
+  --bg: #ffffff;
+  --bg-soft: #f6f7f9;
+  --fg: #16181d;
+  --fg-soft: #5b6270;
+  --line: #e4e7ec;
+  --ok: #1a7f37;
+}
+
+:root[data-mode="dark"] {
+  --bg: #101216;
+  --bg-soft: #181b21;
+  --fg: #e8eaee;
+  --fg-soft: #9aa2b1;
+  --line: #262a33;
+  --ok: #3fb950;
+}
+
+* {
+  box-sizing: border-box;
+}
+
+body {
+  margin: 0;
+  font-family: ui-sans-serif, system-ui, -apple-system, "Segoe UI", sans-serif;
+  background: var(--bg);
+  color: var(--fg);
+}
+
+code,
+pre {
+  font-family: ui-monospace, SFMono-Regular, Menlo, monospace;
+  font-size: 0.9em;
+}
+
+pre {
+  background: var(--bg-soft);
+  border: 1px solid var(--line);
+  border-radius: 8px;
+  padding: 12px 14px;
+  overflow-x: auto;
+}
+
+a {
+  color: var(--app-accent);
+}
+
+.shell {
+  min-height: 100vh;
+  display: flex;
+  flex-direction: column;
+}
+
+.topbar {
+  display: flex;
+  align-items: center;
+  justify-content: space-between;
+  padding: 12px 24px;
+  border-bottom: 1px solid var(--line);
+}
+
+.brand {
+  display: flex;
+  align-items: center;
+  gap: 10px;
+  font-weight: 700;
+  color: var(--fg);
+  text-decoration: none;
+}
+
+.brand-mark {
+  display: inline-flex;
+  align-items: center;
+  justify-content: center;
+  width: 30px;
+  height: 30px;
+  border-radius: 8px;
+  background: var(--app-accent);
+  color: #fff;
+  font-size: 13px;
+}
+
+.topbar nav {
+  display: flex;
+  align-items: center;
+  gap: 16px;
+}
+
+.topbar nav a {
+  color: var(--fg-soft);
+  text-decoration: none;
+}
+
+.topbar nav a.active {
+  color: var(--fg);
+  font-weight: 600;
+}
+
+.btn {
+  display: inline-flex;
+  align-items: center;
+  justify-content: center;
+  padding: 8px 16px;
+  border-radius: 8px;
+  border: 1px solid var(--line);
+  background: var(--bg);
+  color: var(--fg);
+  font-size: 14px;
+  cursor: pointer;
+  text-decoration: none;
+}
+
+.btn:disabled {
+  opacity: 0.5;
+  cursor: not-allowed;
+}
+
+.btn-accent {
+  background: var(--app-accent);
+  border-color: var(--app-accent);
+  color: #fff;
+}
+
+.btn-wide {
+  width: 100%;
+}
+
+.page {
+  flex: 1;
+  width: 100%;
+  max-width: 880px;
+  margin: 0 auto;
+  padding: 32px 24px;
+}
+
+.hero {
+  text-align: center;
+  padding: 64px 0;
+}
+
+.hero h1 {
+  font-size: 44px;
+  margin: 0 0 12px;
+}
+
+.hero p {
+  color: var(--fg-soft);
+  font-size: 18px;
+  margin: 0 0 28px;
+}
+
+.hero-actions {
+  display: flex;
+  gap: 12px;
+  justify-content: center;
+}
+
+.login {
+  display: flex;
+  justify-content: center;
+}
+
+.login-card,
+.gate-card {
+  width: 100%;
+  max-width: 380px;
+  margin-top: 48px;
+  padding: 28px;
+  border: 1px solid var(--line);
+  border-radius: 12px;
+  background: var(--bg-soft);
+  display: flex;
+  flex-direction: column;
+  gap: 12px;
+}
+
+.gate {
+  min-height: 100vh;
+  display: flex;
+  justify-content: center;
+  background: var(--bg);
+  color: var(--fg);
+}
+
+.gate-card {
+  max-width: 520px;
+}
+
+.chat-page {
+  display: flex;
+  max-width: 880px;
+  height: calc(100vh - 61px);
+  padding: 16px 24px 24px;
+}
+
+.chat-fill {
+  flex: 1;
+  min-height: 0;
+  border: 1px solid var(--line);
+  border-radius: 12px;
+  overflow: hidden;
+}
+
+.card {
+  border: 1px solid var(--line);
+  border-radius: 12px;
+  padding: 20px 24px;
+  margin-bottom: 24px;
+  background: var(--bg);
+}
+
+.facts {
+  display: grid;
+  grid-template-columns: 140px 1fr;
+  gap: 8px 16px;
+  margin: 0;
+}
+
+.facts dt {
+  color: var(--fg-soft);
+}
+
+.facts dd {
+  margin: 0;
+  overflow-wrap: anywhere;
+}
+
+.ok {
+  color: var(--ok);
+  font-weight: 600;
+}
+
+.calm {
+  color: var(--fg-soft);
+}
+
+.hint {
+  color: var(--fg-soft);
+  font-size: 14px;
+}
+
+.error {
+  color: #c0392b;
+  font-size: 14px;
+}

package/dist/templates/agentic-app/claude-agent-sdk/web/src/vite-env.d.ts

@@ -0,0 +1 @@
+/// <reference types="vite/client" />

package/dist/templates/agentic-app/claude-agent-sdk/web/tsconfig.json

@@ -0,0 +1,18 @@
+{
+  "compilerOptions": {
+    "target": "ES2022",
+    "lib": ["ES2022", "DOM", "DOM.Iterable"],
+    "module": "ESNext",
+    "moduleResolution": "bundler",
+    "resolveJsonModule": true,
+    "esModuleInterop": true,
+    "jsx": "react-jsx",
+    "strict": true,
+    "noUncheckedIndexedAccess": true,
+    "noEmit": true,
+    "skipLibCheck": true,
+    "isolatedModules": true,
+    "types": ["vite/client", "node"]
+  },
+  "include": ["src", "vite.config.ts", "../guuey.app.json"]
+}

package/dist/templates/agentic-app/claude-agent-sdk/web/vite.config.ts

@@ -0,0 +1,46 @@
+import { readFileSync } from "node:fs";
+import { join, dirname } from "node:path";
+import { fileURLToPath } from "node:url";
+import { defineConfig, type Plugin } from "vite";
+import react from "@vitejs/plugin-react";
+
+const projectRoot = join(dirname(fileURLToPath(import.meta.url)), "..");
+
+/**
+ * Fail-loud production gate (never a half-styled deploy): `pnpm bootstrap`
+ * not run yet → the BUILD fails with the exact command. An UNLINKED build
+ * is allowed — the pages state the missing binding honestly — but gets a
+ * loud warning, since a deployed frontend without a bound guuey app has no
+ * live agent to talk to.
+ *
+ * Dev is NOT gated here — `src/components/BootstrapGate.tsx` renders the
+ * "run bootstrap first" screen instead, so `pnpm dev` always starts.
+ */
+function bootstrapGatePlugin(): Plugin {
+  return {
+    name: "guuey-bootstrap-gate",
+    apply: "build",
+    buildStart() {
+      const raw = readFileSync(join(projectRoot, "guuey.app.json"), "utf8");
+      const app = JSON.parse(raw) as { bootstrapped?: boolean; link?: object | null };
+      if (app.bootstrapped !== true) {
+        throw new Error(
+          "guuey.app.json is not bootstrapped — run `pnpm bootstrap` at the project root first.",
+        );
+      }
+      if (!app.link) {
+        console.warn(
+          "[guuey-bootstrap-gate] building WITHOUT a bound guuey app — the deployed site will have " +
+            "no live agent until you run `pnpm bootstrap -- --link --app-id <appId>` and rebuild.",
+        );
+      }
+    },
+  };
+}
+
+// Port is passed via the `dev` script's `--port 6890` flag (see package.json)
+// so it stays visible in one place; `scripts/dev.mjs` boots this on the same
+// port.
+export default defineConfig({
+  plugins: [react(), bootstrapGatePlugin()],
+});

package/dist/templates/{google-adk → agentic-app/google-adk}/AGENTS.md

@@ -4,7 +4,7 @@ You (the coding agent) are extending a guuey agentic app. Before you reach
 for a database or a cache, read this file. The single most common mistake
 here is standing up local Redis/SQLite/file-based state "just to get
 something working" — **don't.** Every pod this project deploys to
-(`src/worker.ts`'s agent pod — including every `kind: colocated` `mcps/*`
+(the agent entry's pod — `src/worker.ts`, or `src/agent.ts` in a google-adk scaffold — including every `kind: colocated` `mcps/*`
 server auto-spawned inside it, like this scaffold's `mcps/todo` — and every
 `mcps/*` server deployed with `kind: hosted`) is **ephemeral and horizontally
 replaced**: gVisor-isolated,
@@ -19,7 +19,7 @@ Use this table to route persistence decisions. Pick a row, don't invent one.
 | Small per-user state on an MCP server (idempotency keys, rate-limit counters, OAuth nonces, prefs, a few KB) | [`@guuey/state`](https://www.npmjs.com/package/@guuey/state) — `withGuueyContext(scopeFromAuthorization(...), fn)`                                                                                                                                                                                                                                                     | Zero auth code — guuey owns the identity rails. Durable, per-`(user, mcp)`, survives pod restarts.                                                                                                                                                                                                                                      |
 | Large or relational data (rows, queries, joins, anything you'd reach for Postgres/Redis for)                 | An external managed serverless DB — Neon, Upstash, Supabase, or Turso — wired in via `guuey mcp secrets set DATABASE_URL=... --server <id>` (hosted MCP) or `guuey env set DATABASE_URL=...` (the agent worker and its colocated MCP children — the pod's declared env/secrets are handed to every colocated child), consumed through the provider's serverless driver | Guuey **integrates, never operates** databases — that's the platform's hosting policy, not a v1 gap. Pick the provider's **`us-east-1`** region: a guuey-hosted MCP → provider hop is then same-region AWS backbone, single-digit-ms — comparable to a cross-AZ hop, and agent turns are already dominated by seconds of LLM inference. |
 | Local Redis, SQLite, or any file written as a database                                                       | **Never.** Not for v1, not "temporarily."                                                                                                                                                                                                                                                                                                                              | Pods are ephemeral and horizontally replaced — a local store vanishes on the next deploy, restart, or scale event, with no warning to you or the user.                                                                                                                                                                                  |
-| Per-user files/blobs from **inside the agent pod** (`src/worker.ts`)                                         | [`@guuey/fs`](https://www.npmjs.com/package/@guuey/fs)'s `homeDir()`/`appDir()`/`sessionDir()`, or the raw `$GUUEY_HOME_DIR`/`$GUUEY_APP_DIR` env vars + `node:fs`                                                                                                                                                                                                     | Every invoke already gets these three bound directories — `$GUUEY_HOME_DIR` is durable per-user, `$GUUEY_APP_DIR` is read-only shared, cwd is session scratch. No wrapper API required, but the helpers save you the env-var lookups.                                                                                                   |
+| Per-user files/blobs from **inside the agent pod** (the agent entry)                                         | [`@guuey/fs`](https://www.npmjs.com/package/@guuey/fs)'s `homeDir()`/`appDir()`/`sessionDir()`, or the raw `$GUUEY_HOME_DIR`/`$GUUEY_APP_DIR` env vars + `node:fs`                                                                                                                                                                                                     | Every invoke already gets these three bound directories — `$GUUEY_HOME_DIR` is durable per-user, `$GUUEY_APP_DIR` is read-only shared, cwd is session scratch. No wrapper API required, but the helpers save you the env-var lookups.                                                                                                   |
 | Per-user files/blobs from **inside an MCP server** (`mcps/*`)                                                | Not yet available — `@guuey/files` is planned but not shipped. Fall back to the managed-DB row above (e.g. store blobs in the provider's object storage) until it lands.                                                                                                                                                                                               | Don't build against an API that doesn't exist yet.                                                                                                                                                                                                                                                                                      |
 | Conversation / chat history                                                                                  | **Do not re-implement.** The platform already persists it.                                                                                                                                                                                                                                                                                                             | Guuey writes thread history to DynamoDB and streams it back over AppSync; agents that keep their own transcript store are duplicating (and diverging from) data the platform already owns.                                                                                                                                              |
 

package/dist/templates/agentic-app/google-adk/gitignore

@@ -0,0 +1,5 @@
+node_modules/
+dist/
+.env.local
+guuey.worker.js
+.guuey-dev/