@guuey/create-agentic-app 0.9.0 → 0.11.0

package/dist/templates/base/openai-agents-sdk/guuey.app.json

@@ -0,0 +1,28 @@
+{
+  "$schema": "./guuey.app.schema.json",
+  "schema": 1,
+  "bootstrapped": false,
+  "brand": {
+    "name": "agentic-app-template",
+    "tagline": "An agentic app built on guuey",
+    "logoText": "AA"
+  },
+  "theme": {
+    "accent": "#6c5ce7",
+    "mode": "light"
+  },
+  "copy": {
+    "landing": {
+      "headline": "Ask anything.",
+      "sub": "This site has an agent. Open the chat, or use the launcher in the corner."
+    },
+    "login": {
+      "guestHint": "One click, no account — this browser gets its own private thread the agent remembers."
+    }
+  },
+  "auth": {
+    "oidc": null
+  },
+  "link": null,
+  "demoMode": false
+}

package/dist/templates/base/openai-agents-sdk/guuey.app.schema.json

@@ -0,0 +1,119 @@
+{
+  "$schema": "http://json-schema.org/draft-07/schema#",
+  "title": "guuey.app.json",
+  "description": "App-level configuration for this guuey agentic app. Written by `pnpm bootstrap`; safe to hand-edit. Public-safe by construction: nothing in this file is a secret (the appId ships in page HTML by design).",
+  "type": "object",
+  "required": ["schema", "bootstrapped", "brand", "theme", "copy", "auth", "link", "demoMode"],
+  "additionalProperties": false,
+  "properties": {
+    "$schema": { "type": "string" },
+    "schema": { "const": 1 },
+    "bootstrapped": {
+      "type": "boolean",
+      "description": "Flipped true by `pnpm bootstrap`. Dev renders a setup screen until then; production builds fail."
+    },
+    "brand": {
+      "type": "object",
+      "required": ["name", "tagline", "logoText"],
+      "additionalProperties": false,
+      "properties": {
+        "name": { "type": "string", "minLength": 1 },
+        "tagline": { "type": "string" },
+        "logoText": {
+          "type": "string",
+          "maxLength": 4,
+          "description": "1-4 characters shown in the square brand mark."
+        }
+      }
+    },
+    "theme": {
+      "type": "object",
+      "required": ["accent", "mode"],
+      "additionalProperties": false,
+      "properties": {
+        "accent": { "type": "string", "pattern": "^#[0-9a-fA-F]{6}$" },
+        "mode": { "enum": ["light", "dark"] }
+      }
+    },
+    "copy": {
+      "type": "object",
+      "required": ["landing", "login"],
+      "additionalProperties": false,
+      "properties": {
+        "landing": {
+          "type": "object",
+          "required": ["headline", "sub"],
+          "additionalProperties": false,
+          "properties": {
+            "headline": { "type": "string" },
+            "sub": { "type": "string" }
+          }
+        },
+        "login": {
+          "type": "object",
+          "required": ["guestHint"],
+          "additionalProperties": false,
+          "properties": {
+            "guestHint": { "type": "string" }
+          }
+        }
+      }
+    },
+    "auth": {
+      "type": "object",
+      "required": ["oidc"],
+      "additionalProperties": false,
+      "properties": {
+        "oidc": {
+          "description": "BYO-OIDC sign-in. null = guest-only. When set, the bound guuey app must be in BYO auth mode for the same issuer: `guuey apps update <appId> --auth-mode byo --issuer-url <issuer> --audience <clientId>`.",
+          "oneOf": [
+            { "type": "null" },
+            {
+              "type": "object",
+              "required": ["issuer", "clientId"],
+              "additionalProperties": false,
+              "properties": {
+                "issuer": { "type": "string", "format": "uri" },
+                "clientId": { "type": "string", "minLength": 1 }
+              }
+            }
+          ]
+        }
+      }
+    },
+    "link": {
+      "description": "The bound guuey app. null until `pnpm bootstrap -- --link`. Every value here is read back from the platform, never derived by hand.",
+      "oneOf": [
+        { "type": "null" },
+        {
+          "type": "object",
+          "required": [
+            "appId",
+            "env",
+            "apiBaseUrl",
+            "endpointUrl",
+            "widgetOrigin",
+            "portalUrl",
+            "slug",
+            "pageUrl"
+          ],
+          "additionalProperties": false,
+          "properties": {
+            "appId": { "type": "string", "minLength": 1 },
+            "env": { "enum": ["dev", "staging", "release"] },
+            "apiBaseUrl": { "type": "string", "format": "uri" },
+            "endpointUrl": { "type": "string", "format": "uri" },
+            "widgetOrigin": { "type": "string", "format": "uri" },
+            "portalUrl": { "type": "string", "format": "uri" },
+            "slug": { "oneOf": [{ "type": "string" }, { "type": "null" }] },
+            "pageUrl": { "oneOf": [{ "type": "string", "format": "uri" }, { "type": "null" }] }
+          }
+        }
+      ]
+    },
+    "demoMode": {
+      "type": "boolean",
+      "description": "Renders the demo chrome (banner + fictional-product honesty strip). Off in every customer clone."
+    }
+  }
+}

package/dist/templates/base/openai-agents-sdk/guuey.json

@@ -0,0 +1,27 @@
+{
+  "schema": "1",
+  "worker": "worker.js",
+  "agent": {
+    "mode": "code",
+    "framework": "openai-agents-sdk",
+    "model": "gpt-5.6-terra",
+    "systemPrompt": {
+      "file": "prompts/system.md"
+    },
+    "mcpServers": {
+      "todo": {
+        "kind": "colocated",
+        "source": "./mcps/todo",
+        "devPort": 6782
+      },
+      "ggui": {
+        "kind": "external",
+        "url": "https://mcp.ggui.ai",
+        "transport": "http"
+      }
+    }
+  },
+  "ggui": {
+    "configFile": "./ggui/ggui.json"
+  }
+}

package/dist/templates/base/openai-agents-sdk/mcps/todo/Dockerfile

@@ -0,0 +1,46 @@
+# todo-mcp — guuey hosted MCP server image.
+#
+# Self-sufficient multi-stage build: `guuey mcp deploy` packs this directory
+# into a tarball and hands it straight to the builder with no external
+# pre-build step and no build args — this Dockerfile installs its own deps
+# and builds itself. (Different from guuey's own first-party MCP servers,
+# which use a "copy-prebuilt" pattern that expects `dist/` + `node_modules/`
+# to already exist before `docker build` runs — that pattern does not apply
+# to a standalone project like this one.)
+#
+# Build + run locally:
+#
+#   docker build -t todo-mcp .
+#   docker run -p 8080:8080 todo-mcp
+#   curl http://localhost:8080/health
+#
+# Deploy to guuey:
+#
+#   cd mcps/todo && guuey mcp deploy
+
+FROM node:22-slim AS build
+WORKDIR /app
+COPY package.json ./
+RUN npm install
+COPY tsconfig.json ./
+COPY src ./src
+RUN npm run build
+
+FROM node:22-slim
+WORKDIR /app
+ENV NODE_ENV=production
+# guuey's hosted-MCP runtime injects PORT=8080 and probes GET /health at that
+# port — this default matches so `docker run` alone also works.
+ENV PORT=8080
+
+COPY package.json ./
+RUN npm install --omit=dev
+COPY --from=build /app/dist ./dist
+
+USER node
+EXPOSE 8080
+
+HEALTHCHECK --interval=30s --timeout=5s --start-period=10s --retries=3 \
+  CMD node -e "fetch('http://localhost:' + (process.env.PORT || 8080) + '/health').then(r => { if (!r.ok) throw 1 }).catch(() => process.exit(1))"
+
+CMD ["node", "dist/server.js"]

package/dist/templates/base/openai-agents-sdk/mcps/todo/package.json

@@ -0,0 +1,22 @@
+{
+  "name": "@agentic-app-template/todo-mcp",
+  "version": "0.0.0",
+  "private": true,
+  "type": "module",
+  "scripts": {
+    "dev": "tsx src/server.ts",
+    "build": "tsup",
+    "start": "node dist/server.js",
+    "typecheck": "tsc --noEmit"
+  },
+  "dependencies": {
+    "@modelcontextprotocol/sdk": "^1.27.0",
+    "zod": "^4.0.0"
+  },
+  "devDependencies": {
+    "@types/node": "^22.0.0",
+    "tsx": "^4.19.0",
+    "tsup": "^8.5.0",
+    "typescript": "^5.8.0"
+  }
+}

package/dist/templates/base/openai-agents-sdk/mcps/todo/src/server.ts

@@ -0,0 +1,173 @@
+/**
+ * todo-mcp — the copy-me example MCP server for @agentic-app-template.
+ *
+ * A minimal, stateless Streamable HTTP MCP server: four tools over an
+ * in-memory todo list. Swap the `Map` for a real database when you outgrow
+ * a single replica; everything else (transport wiring, tool shape) stays
+ * the same.
+ *
+ * Transport pattern mirrors guuey's canonical hosted-MCP scaffold
+ * (`mcp-servers/_template` in the guuey monorepo): a fresh `McpServer` +
+ * `StreamableHTTPServerTransport` are created **per request** and torn down
+ * when the response closes. Stateless mode — the guuey proxy (and, locally,
+ * whatever MCP client you point at this server) handles sessions, so this
+ * server never keeps request state around between calls.
+ *
+ * Runtime contract when deployed via `guuey mcp deploy` (see mcps/todo's
+ * Dockerfile): the platform injects `PORT=8080` and probes `GET /health`
+ * for both liveness and readiness. Locally, `pnpm dev` runs this on
+ * `PORT=6782` (see ../../scripts/dev.mjs).
+ */
+import { createServer, type IncomingMessage, type ServerResponse } from "node:http";
+import { randomUUID } from "node:crypto";
+import { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
+import { StreamableHTTPServerTransport } from "@modelcontextprotocol/sdk/server/streamableHttp.js";
+import { z } from "zod";
+
+interface Todo {
+  id: string;
+  title: string;
+  done: boolean;
+}
+
+const todos = new Map<string, Todo>();
+
+const todoShape = {
+  id: z.string(),
+  title: z.string(),
+  done: z.boolean(),
+};
+
+/** Wrap a structured result as both `structuredContent` and a text block. */
+function toolResult(data: Record<string, unknown>) {
+  return {
+    structuredContent: data,
+    content: [{ type: "text" as const, text: JSON.stringify(data) }],
+  };
+}
+
+function buildMcpServer(): McpServer {
+  const server = new McpServer({
+    name: "todo-mcp",
+    version: "0.0.0",
+    description: "Create, list, toggle, and delete todos.",
+  });
+
+  server.registerTool(
+    "todo_list",
+    {
+      title: "List todos",
+      description: "List every todo, in creation order.",
+      inputSchema: {},
+      outputSchema: { todos: z.array(z.object(todoShape)) },
+    },
+    async () => toolResult({ todos: [...todos.values()] }),
+  );
+
+  server.registerTool(
+    "todo_create",
+    {
+      title: "Create todo",
+      description: "Create a new todo item.",
+      inputSchema: { title: z.string().min(1).describe("Todo title.") },
+      outputSchema: todoShape,
+    },
+    async ({ title }) => {
+      const todo: Todo = { id: randomUUID(), title, done: false };
+      todos.set(todo.id, todo);
+      // Spread into a fresh object literal — `toolResult` takes
+      // `Record<string, unknown>`, and a named interface like `Todo` isn't
+      // structurally assignable to that without an (unwanted) index
+      // signature of its own; a fresh literal is.
+      return toolResult({ ...todo });
+    },
+  );
+
+  server.registerTool(
+    "todo_toggle",
+    {
+      title: "Toggle todo",
+      description: "Flip a todo's done state.",
+      inputSchema: { id: z.string().describe("Todo id.") },
+      outputSchema: todoShape,
+    },
+    async ({ id }) => {
+      const todo = todos.get(id);
+      if (!todo) throw new Error(`todo not found: ${id}`);
+      todo.done = !todo.done;
+      return toolResult({ ...todo }); // fresh literal — see the create() comment above
+    },
+  );
+
+  server.registerTool(
+    "todo_delete",
+    {
+      title: "Delete todo",
+      description: "Delete a todo by id.",
+      inputSchema: { id: z.string().describe("Todo id.") },
+      outputSchema: { id: z.string(), deleted: z.boolean() },
+    },
+    async ({ id }) => {
+      const deleted = todos.delete(id);
+      return toolResult({ id, deleted });
+    },
+  );
+
+  return server;
+}
+
+const PORT = Number(process.env.PORT ?? 6782);
+
+const httpServer = createServer(async (req: IncomingMessage, res: ServerResponse) => {
+  if (req.method === "GET" && req.url === "/health") {
+    res.writeHead(200, { "content-type": "application/json" });
+    res.end(JSON.stringify({ status: "ok", server: "todo-mcp", version: "0.0.0" }));
+    return;
+  }
+
+  if (req.url !== "/mcp") {
+    res.writeHead(404, { "content-type": "application/json" }).end(
+      JSON.stringify({ error: "not found" }),
+    );
+    return;
+  }
+
+  // Fresh server + transport per request (stateless mode) — see module doc.
+  const mcp = buildMcpServer();
+  const transport = new StreamableHTTPServerTransport({ sessionIdGenerator: undefined });
+
+  res.on("close", () => {
+    transport.close().catch(() => undefined);
+    mcp.close().catch(() => undefined);
+  });
+
+  try {
+    await mcp.connect(transport);
+    await transport.handleRequest(req, res);
+  } catch (err) {
+    console.error("mcp_handle_failed", err);
+    if (!res.headersSent) {
+      res.writeHead(500, { "content-type": "application/json" });
+      res.end(
+        JSON.stringify({
+          jsonrpc: "2.0",
+          error: { code: -32603, message: "Internal server error" },
+          id: null,
+        }),
+      );
+    }
+  }
+});
+
+httpServer.listen(PORT, () => {
+  console.log(`todo-mcp listening on :${PORT}`);
+});
+
+function shutdown(signal: string): void {
+  console.log(`${signal} received — shutting down`);
+  httpServer.close(() => process.exit(0));
+  // Force-exit if connections don't drain in time.
+  setTimeout(() => process.exit(1), 10_000).unref();
+}
+process.on("SIGTERM", () => shutdown("SIGTERM"));
+process.on("SIGINT", () => shutdown("SIGINT"));

package/dist/templates/base/openai-agents-sdk/mcps/todo/tsconfig.json

@@ -0,0 +1,15 @@
+{
+  "compilerOptions": {
+    "target": "ES2023",
+    "module": "ESNext",
+    "moduleResolution": "bundler",
+    "strict": true,
+    "esModuleInterop": true,
+    "skipLibCheck": true,
+    "outDir": "dist",
+    "rootDir": "src",
+    "resolveJsonModule": true
+  },
+  "include": ["src/**/*"],
+  "exclude": ["node_modules", "dist"]
+}

package/dist/templates/base/openai-agents-sdk/mcps/todo/tsup.config.ts

@@ -0,0 +1,14 @@
+import { defineConfig } from 'tsup';
+
+// Self-contained ON PURPOSE — do not delete this file. Without a local
+// config, tsup's upward config discovery finds the scaffold ROOT
+// tsup.config.ts; its bundled form imports 'tsup' from the scaffold root,
+// which the platform image build deliberately leaves un-installed when the
+// bundled guuey.worker.js skips the root install — every colocated build
+// then dies with ERR_MODULE_NOT_FOUND (guuey#19). A config here stops the
+// walk; `defineConfig` resolves from this package's own devDependencies.
+export default defineConfig({
+  entry: ['src/server.ts'],
+  format: 'esm',
+  outDir: 'dist',
+});

package/dist/templates/base/openai-agents-sdk/package.json

@@ -0,0 +1,30 @@
+{
+  "name": "agentic-app-template",
+  "version": "0.0.0",
+  "private": true,
+  "type": "module",
+  "scripts": {
+    "dev": "node scripts/dev.mjs",
+    "bootstrap": "node scripts/bootstrap.mjs",
+    "status": "guuey apps get && guuey agent status",
+    "build": "tsup",
+    "typecheck": "tsc --noEmit"
+  },
+  "dependencies": {
+    "@openai/agents": "^0.12.0",
+    "@guuey/config": "0.11.0",
+    "@guuey/worker": "0.11.0"
+  },
+  "devDependencies": {
+    "@ggui-ai/cli": "0.6.3",
+    "@guuey/cli": "0.11.0",
+    "tsup": "^8.5.0",
+    "tsx": "^4.19.0",
+    "typescript": "^5.8.0"
+  },
+  "pnpm": {
+    "onlyBuiltDependencies": [
+      "esbuild"
+    ]
+  }
+}

package/dist/templates/base/openai-agents-sdk/pnpm-workspace.yaml

@@ -0,0 +1,24 @@
+packages:
+  - "mcps/*"
+  - "web"
+
+# pnpm 11 default `strictDepBuilds: true` blocks install scripts for any
+# dependency with a build script (esbuild's native binary fetch, sharp,
+# etc.) unless individually allowlisted, and fails the whole `install`
+# with ERR_PNPM_IGNORED_BUILDS otherwise. Scaffolded apps pull in build-
+# script deps transitively (tsup/vite -> esbuild, mcp/ui deps, etc.) that
+# we can't enumerate up front, so match pnpm 9/10 behavior here.
+strictDepBuilds: false
+
+# pnpm 11 default `verifyDepsBeforeRun: 'install'` re-verifies the
+# lockfile against supply-chain policies (including minimumReleaseAge)
+# before every `pnpm run <script>`, hitting the registry even for
+# already-installed deps. That check 404s for any dependency that only
+# exists as a local tarball (not yet published), which is expected
+# during local/dev/CI installs. Restore pnpm 9/10 behavior: only verify
+# on an explicit `pnpm install`.
+verifyDepsBeforeRun: false
+
+# See above — same registry-lookback problem hits a plain `pnpm install`
+# too when minimumReleaseAge is nonzero; disable it for scaffolded apps.
+minimumReleaseAge: 0

package/dist/templates/base/openai-agents-sdk/prompts/system.md

@@ -0,0 +1,4 @@
+You are the agentic-app-template assistant. You have a todo tool server —
+use it to create, list, toggle, and delete the user's todos. When the ggui
+server is available, prefer rendering rich UI for lists and forms over
+plain text.