@guuey/create-agentic-app 0.9.0 → 0.11.0

package/dist/templates/agentic-app/google-adk/web/src/vite-env.d.ts

@@ -0,0 +1,14 @@
+/// <reference types="vite/client" />
+
+interface ImportMetaEnv {
+  /**
+   * Optional external-script hook (guuey#303): a URL loaded at boot — the
+   * demo tour's bundle rides this in the demo apps; unset in customer
+   * builds.
+   */
+  readonly VITE_DEMO_TOUR_SRC?: string;
+}
+
+interface ImportMeta {
+  readonly env: ImportMetaEnv;
+}

package/dist/templates/agentic-app/google-adk/web/tsconfig.json

@@ -0,0 +1,18 @@
+{
+  "compilerOptions": {
+    "target": "ES2022",
+    "lib": ["ES2022", "DOM", "DOM.Iterable"],
+    "module": "ESNext",
+    "moduleResolution": "bundler",
+    "resolveJsonModule": true,
+    "esModuleInterop": true,
+    "jsx": "react-jsx",
+    "strict": true,
+    "noUncheckedIndexedAccess": true,
+    "noEmit": true,
+    "skipLibCheck": true,
+    "isolatedModules": true,
+    "types": ["vite/client", "node"]
+  },
+  "include": ["src", "vite.config.ts", "../guuey.app.json"]
+}

package/dist/templates/agentic-app/google-adk/web/vite.config.ts

@@ -0,0 +1,46 @@
+import { readFileSync } from "node:fs";
+import { join, dirname } from "node:path";
+import { fileURLToPath } from "node:url";
+import { defineConfig, type Plugin } from "vite";
+import react from "@vitejs/plugin-react";
+
+const projectRoot = join(dirname(fileURLToPath(import.meta.url)), "..");
+
+/**
+ * Fail-loud production gate (never a half-styled deploy): `pnpm bootstrap`
+ * not run yet → the BUILD fails with the exact command. An UNLINKED build
+ * is allowed — the pages state the missing binding honestly — but gets a
+ * loud warning, since a deployed frontend without a bound guuey app has no
+ * live agent to talk to.
+ *
+ * Dev is NOT gated here — `src/components/BootstrapGate.tsx` renders the
+ * "run bootstrap first" screen instead, so `pnpm dev` always starts.
+ */
+function bootstrapGatePlugin(): Plugin {
+  return {
+    name: "guuey-bootstrap-gate",
+    apply: "build",
+    buildStart() {
+      const raw = readFileSync(join(projectRoot, "guuey.app.json"), "utf8");
+      const app = JSON.parse(raw) as { bootstrapped?: boolean; link?: object | null };
+      if (app.bootstrapped !== true) {
+        throw new Error(
+          "guuey.app.json is not bootstrapped — run `pnpm bootstrap` at the project root first.",
+        );
+      }
+      if (!app.link) {
+        console.warn(
+          "[guuey-bootstrap-gate] building WITHOUT a bound guuey app — the deployed site will have " +
+            "no live agent until you run `pnpm bootstrap -- --link --app-id <appId>` and rebuild.",
+        );
+      }
+    },
+  };
+}
+
+// Port is passed via the `dev` script's `--port 6890` flag (see package.json)
+// so it stays visible in one place; `scripts/dev.mjs` boots this on the same
+// port.
+export default defineConfig({
+  plugins: [react(), bootstrapGatePlugin()],
+});

package/dist/templates/{claude-agent-sdk → agentic-app/openai-agents-sdk}/AGENTS.md

@@ -4,7 +4,7 @@ You (the coding agent) are extending a guuey agentic app. Before you reach
 for a database or a cache, read this file. The single most common mistake
 here is standing up local Redis/SQLite/file-based state "just to get
 something working" — **don't.** Every pod this project deploys to
-(`src/worker.ts`'s agent pod — including every `kind: colocated` `mcps/*`
+(the agent entry's pod — `src/worker.ts`, or `src/agent.ts` in a google-adk scaffold — including every `kind: colocated` `mcps/*`
 server auto-spawned inside it, like this scaffold's `mcps/todo` — and every
 `mcps/*` server deployed with `kind: hosted`) is **ephemeral and horizontally
 replaced**: gVisor-isolated,
@@ -19,7 +19,7 @@ Use this table to route persistence decisions. Pick a row, don't invent one.
 | Small per-user state on an MCP server (idempotency keys, rate-limit counters, OAuth nonces, prefs, a few KB) | [`@guuey/state`](https://www.npmjs.com/package/@guuey/state) — `withGuueyContext(scopeFromAuthorization(...), fn)`                                                                                                                                                                                                                                                     | Zero auth code — guuey owns the identity rails. Durable, per-`(user, mcp)`, survives pod restarts.                                                                                                                                                                                                                                      |
 | Large or relational data (rows, queries, joins, anything you'd reach for Postgres/Redis for)                 | An external managed serverless DB — Neon, Upstash, Supabase, or Turso — wired in via `guuey mcp secrets set DATABASE_URL=... --server <id>` (hosted MCP) or `guuey env set DATABASE_URL=...` (the agent worker and its colocated MCP children — the pod's declared env/secrets are handed to every colocated child), consumed through the provider's serverless driver | Guuey **integrates, never operates** databases — that's the platform's hosting policy, not a v1 gap. Pick the provider's **`us-east-1`** region: a guuey-hosted MCP → provider hop is then same-region AWS backbone, single-digit-ms — comparable to a cross-AZ hop, and agent turns are already dominated by seconds of LLM inference. |
 | Local Redis, SQLite, or any file written as a database                                                       | **Never.** Not for v1, not "temporarily."                                                                                                                                                                                                                                                                                                                              | Pods are ephemeral and horizontally replaced — a local store vanishes on the next deploy, restart, or scale event, with no warning to you or the user.                                                                                                                                                                                  |
-| Per-user files/blobs from **inside the agent pod** (`src/worker.ts`)                                         | [`@guuey/fs`](https://www.npmjs.com/package/@guuey/fs)'s `homeDir()`/`appDir()`/`sessionDir()`, or the raw `$GUUEY_HOME_DIR`/`$GUUEY_APP_DIR` env vars + `node:fs`                                                                                                                                                                                                     | Every invoke already gets these three bound directories — `$GUUEY_HOME_DIR` is durable per-user, `$GUUEY_APP_DIR` is read-only shared, cwd is session scratch. No wrapper API required, but the helpers save you the env-var lookups.                                                                                                   |
+| Per-user files/blobs from **inside the agent pod** (the agent entry)                                         | [`@guuey/fs`](https://www.npmjs.com/package/@guuey/fs)'s `homeDir()`/`appDir()`/`sessionDir()`, or the raw `$GUUEY_HOME_DIR`/`$GUUEY_APP_DIR` env vars + `node:fs`                                                                                                                                                                                                     | Every invoke already gets these three bound directories — `$GUUEY_HOME_DIR` is durable per-user, `$GUUEY_APP_DIR` is read-only shared, cwd is session scratch. No wrapper API required, but the helpers save you the env-var lookups.                                                                                                   |
 | Per-user files/blobs from **inside an MCP server** (`mcps/*`)                                                | Not yet available — `@guuey/files` is planned but not shipped. Fall back to the managed-DB row above (e.g. store blobs in the provider's object storage) until it lands.                                                                                                                                                                                               | Don't build against an API that doesn't exist yet.                                                                                                                                                                                                                                                                                      |
 | Conversation / chat history                                                                                  | **Do not re-implement.** The platform already persists it.                                                                                                                                                                                                                                                                                                             | Guuey writes thread history to DynamoDB and streams it back over AppSync; agents that keep their own transcript store are duplicating (and diverging from) data the platform already owns.                                                                                                                                              |
 

package/dist/templates/{claude-agent-sdk → agentic-app/openai-agents-sdk}/README.md

@@ -15,12 +15,20 @@ locally with one command, and deployable to guuey with one more.
 ├── prompts/system.md    # system prompt, referenced from guuey.json#agent.systemPrompt.file
 ├── mcps/todo/           # the "copy-me" custom MCP server — @modelcontextprotocol/sdk,
 │                         #   Streamable HTTP, in-memory todo list, port :6782
-├── ggui/                # ggui.json + blueprints/ + themes/ — generative-UI config.
-│                         #   `ggui serve` runs against this locally; it's pushed to your
-│                         #   deployed app's guuey-managed ggui instance on `guuey deploy`.
-├── web/                 # a small Vite SPA chat client — the local dev surface, and a
-│                         #   worked example of the bring-your-own-frontend path
+├── ggui/                # ggui.json + blueprints/ — generative-UI config.
+│                         #   `ggui serve` runs against this locally; `guuey deploy` pushes
+│                         #   generation config + blueprints (the deployed RENDER THEME is
+│                         #   platform data, not this dir — ggui.json#theme is local-preview
+│                         #   only, kept in step with guuey.app.json by `pnpm bootstrap`).
+├── web/                 # the product frontend (Vite + React on @guuey/chat):
+│                         #   landing (widget) · login (guest + BYO-OIDC seam) · home
+│                         #   (status + distribution guide) · the chat surface
+├── guuey.app.json       # frontend/brand config — written by `pnpm bootstrap`
+│                         #   (schema: guuey.app.schema.json; public-safe by design)
+├── AGENTS.md            # coding-agent steering; `pnpm bootstrap` maintains the
+│                         #   managed block with this project's real facts
 ├── scripts/dev.mjs      # `pnpm dev` orchestrator — boots the whole local stack
+├── scripts/bootstrap.mjs # `pnpm bootstrap` — configure, then `-- --link` to bind
 ├── .env.example          # ANTHROPIC_API_KEY / OPENAI_API_KEY for local dev
 └── .mcp.json             # Claude Code convenience wiring (mcp.ggui.ai/dev)
 ```
@@ -33,11 +41,19 @@ level rather than nested under a `servers/` or `apps/` folder.
 
 ```bash
 pnpm install
+pnpm bootstrap               # brand, theme, copy → guuey.app.json + AGENTS.md (no account needed;
+                             #   every web page is gated on this, and production builds fail without it)
 cp .env.example .env.local   # done automatically on scaffold if .env.local is absent
 # set ANTHROPIC_API_KEY (or OPENAI_API_KEY, for the openai-agents-sdk template) in .env.local
 pnpm dev
 ```
 
+When the agent is deployed (`guuey login && guuey deploy`), bind it into the
+frontend: `pnpm bootstrap -- --link` — that records the app id, endpoint,
+widget origin and portal link in `guuey.app.json` and pushes brand basics to
+the platform. `pnpm status` shows the live app state; `pnpm bootstrap -- --check`
+prints machine-readable configuration state.
+
 `pnpm dev` (`scripts/dev.mjs`) boots four processes with prefixed, interleaved
 logs. Ctrl-C tears all of them down together.
 
@@ -46,7 +62,7 @@ logs. Ctrl-C tears all of them down together.
 | `worker`     | —     | `tsup --watch` — rebuilds `guuey.worker.js` on every save                                                                                  |
 | `guuey dev`  | :6790 | local router: spawns your worker per turn, streams SSE; auto-spawns every `colocated` MCP entry — `mcps/todo` lands on its `devPort` :6782 |
 | `ggui serve` | :6781 | local generative-UI server, over `ggui/`                                                                                                   |
-| `web`        | :6890 | the Vite chat SPA                                                                                                                          |
+| `web`        | :6890 | the product frontend (landing/login/home/chat on @guuey/chat)                                                                              |
 
 The todo MCP still answers on :6782 — it's just a supervised child of
 `guuey dev` now (copy `mcps/todo/` to add your own server; new `colocated`
@@ -113,7 +129,7 @@ anything user-visible changes:
    as its own hosted MCP server (build → deploy → registry), then writes the
    resulting server id back into `guuey.json`. This scaffold has none — the
    todo MCP is `colocated`, so this leg is a no-op here.
-2. **ggui asset leg** — pushes `ggui/` (ggui.json, blueprints, themes) to your
+2. **ggui asset leg** — pushes `ggui/` (generation config, blueprints) to your
    app's guuey-managed ggui instance.
 3. **Agent leg** — builds `src/worker.ts` into `guuey.worker.js`, packs the
    project root (including `mcps/`), and deploys it as a gVisor-isolated,

package/dist/templates/agentic-app/openai-agents-sdk/gitignore

@@ -0,0 +1,5 @@
+node_modules/
+dist/
+.env.local
+guuey.worker.js
+.guuey-dev/

package/dist/templates/agentic-app/openai-agents-sdk/guuey.app.json

@@ -0,0 +1,28 @@
+{
+  "$schema": "./guuey.app.schema.json",
+  "schema": 1,
+  "bootstrapped": false,
+  "brand": {
+    "name": "agentic-app-template",
+    "tagline": "An agentic app built on guuey",
+    "logoText": "AA"
+  },
+  "theme": {
+    "accent": "#6c5ce7",
+    "mode": "light"
+  },
+  "copy": {
+    "landing": {
+      "headline": "Ask anything.",
+      "sub": "This site has an agent. Open the chat, or use the launcher in the corner."
+    },
+    "login": {
+      "guestHint": "One click, no account — this browser gets its own private thread the agent remembers."
+    }
+  },
+  "auth": {
+    "oidc": null
+  },
+  "link": null,
+  "demoMode": false
+}

package/dist/templates/agentic-app/openai-agents-sdk/guuey.app.schema.json

@@ -0,0 +1,119 @@
+{
+  "$schema": "http://json-schema.org/draft-07/schema#",
+  "title": "guuey.app.json",
+  "description": "App-level configuration for this guuey agentic app. Written by `pnpm bootstrap`; safe to hand-edit. Public-safe by construction: nothing in this file is a secret (the appId ships in page HTML by design).",
+  "type": "object",
+  "required": ["schema", "bootstrapped", "brand", "theme", "copy", "auth", "link", "demoMode"],
+  "additionalProperties": false,
+  "properties": {
+    "$schema": { "type": "string" },
+    "schema": { "const": 1 },
+    "bootstrapped": {
+      "type": "boolean",
+      "description": "Flipped true by `pnpm bootstrap`. Dev renders a setup screen until then; production builds fail."
+    },
+    "brand": {
+      "type": "object",
+      "required": ["name", "tagline", "logoText"],
+      "additionalProperties": false,
+      "properties": {
+        "name": { "type": "string", "minLength": 1 },
+        "tagline": { "type": "string" },
+        "logoText": {
+          "type": "string",
+          "maxLength": 4,
+          "description": "1-4 characters shown in the square brand mark."
+        }
+      }
+    },
+    "theme": {
+      "type": "object",
+      "required": ["accent", "mode"],
+      "additionalProperties": false,
+      "properties": {
+        "accent": { "type": "string", "pattern": "^#[0-9a-fA-F]{6}$" },
+        "mode": { "enum": ["light", "dark"] }
+      }
+    },
+    "copy": {
+      "type": "object",
+      "required": ["landing", "login"],
+      "additionalProperties": false,
+      "properties": {
+        "landing": {
+          "type": "object",
+          "required": ["headline", "sub"],
+          "additionalProperties": false,
+          "properties": {
+            "headline": { "type": "string" },
+            "sub": { "type": "string" }
+          }
+        },
+        "login": {
+          "type": "object",
+          "required": ["guestHint"],
+          "additionalProperties": false,
+          "properties": {
+            "guestHint": { "type": "string" }
+          }
+        }
+      }
+    },
+    "auth": {
+      "type": "object",
+      "required": ["oidc"],
+      "additionalProperties": false,
+      "properties": {
+        "oidc": {
+          "description": "BYO-OIDC sign-in. null = guest-only. When set, the bound guuey app must be in BYO auth mode for the same issuer: `guuey apps update <appId> --auth-mode byo --issuer-url <issuer> --audience <clientId>`.",
+          "oneOf": [
+            { "type": "null" },
+            {
+              "type": "object",
+              "required": ["issuer", "clientId"],
+              "additionalProperties": false,
+              "properties": {
+                "issuer": { "type": "string", "format": "uri" },
+                "clientId": { "type": "string", "minLength": 1 }
+              }
+            }
+          ]
+        }
+      }
+    },
+    "link": {
+      "description": "The bound guuey app. null until `pnpm bootstrap -- --link`. Every value here is read back from the platform, never derived by hand.",
+      "oneOf": [
+        { "type": "null" },
+        {
+          "type": "object",
+          "required": [
+            "appId",
+            "env",
+            "apiBaseUrl",
+            "endpointUrl",
+            "widgetOrigin",
+            "portalUrl",
+            "slug",
+            "pageUrl"
+          ],
+          "additionalProperties": false,
+          "properties": {
+            "appId": { "type": "string", "minLength": 1 },
+            "env": { "enum": ["dev", "staging", "release"] },
+            "apiBaseUrl": { "type": "string", "format": "uri" },
+            "endpointUrl": { "type": "string", "format": "uri" },
+            "widgetOrigin": { "type": "string", "format": "uri" },
+            "portalUrl": { "type": "string", "format": "uri" },
+            "slug": { "oneOf": [{ "type": "string" }, { "type": "null" }] },
+            "pageUrl": { "oneOf": [{ "type": "string", "format": "uri" }, { "type": "null" }] }
+          }
+        }
+      ]
+    },
+    "demoMode": {
+      "type": "boolean",
+      "description": "Renders the demo chrome (banner + fictional-product honesty strip). Off in every customer clone."
+    }
+  }
+}

package/dist/templates/{openai-agents-sdk → agentic-app/openai-agents-sdk}/package.json

@@ -5,16 +5,19 @@
   "type": "module",
   "scripts": {
     "dev": "node scripts/dev.mjs",
+    "bootstrap": "node scripts/bootstrap.mjs",
+    "status": "guuey apps get && guuey agent status",
     "build": "tsup",
     "typecheck": "tsc --noEmit"
   },
   "dependencies": {
     "@openai/agents": "^0.12.0",
-    "@guuey/config": "0.9.0",
-    "@guuey/worker": "0.9.0"
+    "@guuey/config": "0.11.0",
+    "@guuey/worker": "0.11.0"
   },
   "devDependencies": {
-    "@guuey/cli": "0.9.0",
+    "@ggui-ai/cli": "0.6.3",
+    "@guuey/cli": "0.11.0",
     "tsup": "^8.5.0",
     "tsx": "^4.19.0",
     "typescript": "^5.8.0"