@jskit-ai/create-app 0.1.2 → 0.1.6

package/bin/jskit-create-app.js

@@ -1,5 +1,5 @@
 #!/usr/bin/env node
-import { runCliEntrypoint } from "../src/shared/cliEntrypoint.js";
-import { runCli } from "../src/shared/index.js";
+import { runCliEntrypoint } from "../src/server/cliEntrypoint.js";
+import { runCli } from "../src/server/index.js";
 
 await runCliEntrypoint(runCli);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@jskit-ai/create-app",
-  "version": "0.1.2",
+  "version": "0.1.6",
   "description": "Scaffold minimal JSKIT app shells.",
   "type": "module",
   "files": [
@@ -10,13 +10,15 @@
     "README.md"
   ],
   "scripts": {
-    "test": "node --test"
+    "test": "node --test test/*.test.js"
   },
   "bin": {
     "jskit-create-app": "bin/jskit-create-app.js"
   },
   "exports": {
-    ".": "./src/shared/index.js"
+    ".": "./src/index.js",
+    "./server": "./src/server/index.js",
+    "./client": "./src/client/index.js"
   },
   "dependencies": {},
   "engines": {
@@ -28,12 +30,12 @@
   "repository": {
     "type": "git",
     "url": "git+https://github.com/mobily-enterprises/jskit-ai.git",
-    "directory": "packages/tooling/create-app"
+    "directory": "tooling/create-app"
   },
   "bugs": {
     "url": "https://github.com/mobily-enterprises/jskit-ai/issues"
   },
-  "homepage": "https://github.com/mobily-enterprises/jskit-ai/tree/main/packages/tooling/create-app#readme",
+  "homepage": "https://github.com/mobily-enterprises/jskit-ai/tree/main/tooling/create-app#readme",
   "keywords": [
     "jskit",
     "scaffold",

package/src/client/index.js

@@ -0,0 +1 @@
+export {};

package/src/index.js

@@ -0,0 +1 @@
+throw new Error("Use explicit entrypoint import for @jskit-ai/create-app: /server or /client.");

package/src/{shared → server}/index.js

@@ -7,9 +7,8 @@ import { shellQuote } from "./cliEntrypoint.js";
 
 const DEFAULT_TEMPLATE = "base-shell";
 const DEFAULT_INITIAL_BUNDLES = "none";
-const DEFAULT_DB_PROVIDER = "mysql";
-const INITIAL_BUNDLE_PRESETS = new Set(["none", "db", "db-auth"]);
-const DB_PROVIDERS = new Set(["mysql", "postgres"]);
+const INITIAL_BUNDLE_PRESETS = new Set(["none", "auth"]);
+const TENANCY_MODES = new Set(["none", "personal", "workspace"]);
 const ALLOWED_EXISTING_TARGET_ENTRIES = new Set([".git"]);
 const PACKAGE_ROOT = path.resolve(path.dirname(fileURLToPath(import.meta.url)), "../..");
 const TEMPLATES_ROOT = path.join(PACKAGE_ROOT, "templates");
@@ -38,46 +37,34 @@ function normalizeInitialBundlesPreset(value, { showUsage = true } = {}) {
   }
 
   throw createCliError(
-    `Invalid --initial-bundles value "${value}". Expected one of: none, db, db-auth.`,
+    `Invalid --initial-bundles value "${value}". Expected one of: none, auth.`,
     { showUsage }
   );
 }
 
-function normalizeDbProvider(value, { showUsage = true } = {}) {
-  const normalized = String(value || DEFAULT_DB_PROVIDER).trim().toLowerCase();
-  if (DB_PROVIDERS.has(normalized)) {
+function normalizeTenancyMode(value, { showUsage = true } = {}) {
+  const normalized = String(value || "").trim().toLowerCase();
+  if (TENANCY_MODES.has(normalized)) {
     return normalized;
   }
 
   throw createCliError(
-    `Invalid --db-provider value "${value}". Expected one of: mysql, postgres.`,
+    `Invalid --tenancy-mode value "${value}". Expected one of: none, personal, workspace.`,
     { showUsage }
   );
 }
 
-function buildInitialBundleCommands(initialBundles, dbProvider) {
+function buildInitialBundleCommands(initialBundles) {
   const normalizedPreset = normalizeInitialBundlesPreset(initialBundles, { showUsage: false });
-  const normalizedProvider = normalizeDbProvider(dbProvider, { showUsage: false });
 
   const commands = [];
-  if (normalizedPreset === "db" || normalizedPreset === "db-auth") {
-    commands.push(`npx jskit add db --provider ${normalizedProvider} --no-install`);
-  }
-  if (normalizedPreset === "db-auth") {
+  if (normalizedPreset === "auth") {
     commands.push("npx jskit add auth-base --no-install");
   }
 
   return commands;
 }
 
-function buildProgressiveBundleCommands(dbProvider) {
-  const normalizedProvider = normalizeDbProvider(dbProvider, { showUsage: false });
-  return [
-    `npx jskit add db --provider ${normalizedProvider} --no-install`,
-    "npx jskit add auth-base --no-install"
-  ];
-}
-
 function validateAppName(appName, { showUsage = true } = {}) {
   if (!appName || typeof appName !== "string") {
     throw createCliError("Missing app name.", { showUsage });
@@ -112,7 +99,7 @@ function parseCliArgs(argv) {
     template: DEFAULT_TEMPLATE,
     target: null,
     initialBundles: DEFAULT_INITIAL_BUNDLES,
-    dbProvider: DEFAULT_DB_PROVIDER,
+    tenancyMode: null,
     force: false,
     dryRun: false,
     help: false,
@@ -192,15 +179,15 @@ function parseCliArgs(argv) {
       continue;
     }
 
-    if (arg === "--db-provider") {
-      const { value, nextIndex } = parseOptionWithValue(args, index, "--db-provider");
-      options.dbProvider = value;
+    if (arg === "--tenancy-mode") {
+      const { value, nextIndex } = parseOptionWithValue(args, index, "--tenancy-mode");
+      options.tenancyMode = value;
       index = nextIndex;
       continue;
     }
 
-    if (arg.startsWith("--db-provider=")) {
-      options.dbProvider = arg.slice("--db-provider=".length);
+    if (arg.startsWith("--tenancy-mode=")) {
+      options.tenancyMode = arg.slice("--tenancy-mode=".length);
       continue;
     }
 
@@ -239,8 +226,8 @@ function printUsage(stream = process.stderr) {
   stream.write(`  --template <name>  Template folder under templates/ (default: ${DEFAULT_TEMPLATE})\n`);
   stream.write("  --title <text>     App title used for template replacements\n");
   stream.write("  --target <path>    Target directory (default: ./<app-name>)\n");
-  stream.write("  --initial-bundles <preset>  Optional bundle preset: none | db | db-auth (default: none)\n");
-  stream.write("  --db-provider <provider>    Database provider for db presets: mysql | postgres (default: mysql)\n");
+  stream.write("  --initial-bundles <preset>  Optional bundle preset: none | auth (default: none)\n");
+  stream.write("  --tenancy-mode <mode>  Optional config seed: none | personal | workspace\n");
   stream.write("  --force            Allow writing into a non-empty target directory\n");
   stream.write("  --dry-run          Print planned writes without changing the filesystem\n");
   stream.write("  --interactive      Prompt for app values instead of passing all flags\n");
@@ -255,15 +242,35 @@ function applyPlaceholders(source, replacements) {
   return output;
 }
 
-async function resolveTemplateDirectory(templateName) {
-  const cleanTemplate = String(templateName || "").trim();
-  if (!cleanTemplate) {
+function isPathWithinRoot(rootPath, candidatePath) {
+  const relativePath = path.relative(rootPath, candidatePath);
+  return relativePath === "" || (!relativePath.startsWith("..") && !path.isAbsolute(relativePath));
+}
+
+function normalizeTemplatePathSegments(templateName) {
+  const rawTemplateName = String(templateName || "").trim();
+  if (!rawTemplateName) {
     throw createCliError("Template name cannot be empty.", {
       showUsage: true
     });
   }
 
-  const templateDir = path.join(TEMPLATES_ROOT, cleanTemplate);
+  const segments = rawTemplateName.split(/[\\/]+/).filter(Boolean);
+  if (segments.length < 1 || segments.some((segment) => segment === "." || segment === "..")) {
+    throw createCliError(`Invalid template "${rawTemplateName}".`);
+  }
+
+  return segments;
+}
+
+async function resolveTemplateDirectory(templateName) {
+  const templatePathSegments = normalizeTemplatePathSegments(templateName);
+  const cleanTemplate = templatePathSegments.join(path.sep);
+  const templateDir = path.resolve(TEMPLATES_ROOT, ...templatePathSegments);
+
+  if (!isPathWithinRoot(TEMPLATES_ROOT, templateDir)) {
+    throw createCliError(`Invalid template "${cleanTemplate}".`);
+  }
 
   try {
     const templateStats = await stat(templateDir);
@@ -456,7 +463,7 @@ async function collectInteractiveOptions({
     while (true) {
       const candidate = await askQuestion(
         readline,
-        "Initial bundle preset (none|db|db-auth)",
+        "Initial bundle preset (none|auth)",
         initialBundles
       );
       try {
@@ -467,27 +474,13 @@ async function collectInteractiveOptions({
       }
     }
 
-    let dbProvider = normalizeDbProvider(parsed.dbProvider, { showUsage: false });
-    if (initialBundles === "db" || initialBundles === "db-auth") {
-      while (true) {
-        const candidate = await askQuestion(readline, "DB provider (mysql|postgres)", dbProvider);
-        try {
-          dbProvider = normalizeDbProvider(candidate, { showUsage: false });
-          break;
-        } catch (error) {
-          stderr.write(`Error: ${error?.message || String(error)}\n`);
-        }
-      }
-    }
-
     return {
       appName,
       appTitle,
       target,
       template,
       force,
-      initialBundles,
-      dbProvider
+      initialBundles
     };
   } finally {
     readline.close();
@@ -500,7 +493,7 @@ export async function createApp({
   template = DEFAULT_TEMPLATE,
   target = null,
   initialBundles = DEFAULT_INITIAL_BUNDLES,
-  dbProvider = DEFAULT_DB_PROVIDER,
+  tenancyMode = null,
   force = false,
   dryRun = false,
   cwd = process.cwd()
@@ -510,7 +503,10 @@ export async function createApp({
 
   const resolvedAppTitle = String(appTitle || "").trim() || toAppTitle(resolvedAppName);
   const resolvedInitialBundles = normalizeInitialBundlesPreset(initialBundles);
-  const resolvedDbProvider = normalizeDbProvider(dbProvider);
+  const resolvedTenancyMode =
+    tenancyMode == null || String(tenancyMode).trim() === ""
+      ? null
+      : normalizeTenancyMode(tenancyMode);
 
   const resolvedCwd = path.resolve(cwd);
   const targetDirectory = path.resolve(resolvedCwd, target ? String(target) : resolvedAppName);
@@ -523,7 +519,10 @@ export async function createApp({
 
   const replacements = {
     __APP_NAME__: resolvedAppName,
-    __APP_TITLE__: resolvedAppTitle
+    __APP_TITLE__: resolvedAppTitle,
+    __TENANCY_MODE_LINE__: resolvedTenancyMode
+      ? `config.tenancyMode = "${resolvedTenancyMode}";\n`
+      : ""
   };
 
   const touchedFiles = await copyTemplateDirectory({
@@ -538,9 +537,8 @@ export async function createApp({
     appTitle: resolvedAppTitle,
     template: String(template),
     initialBundles: resolvedInitialBundles,
-    dbProvider: resolvedDbProvider,
-    selectedBundleCommands: buildInitialBundleCommands(resolvedInitialBundles, resolvedDbProvider),
-    progressiveBundleCommands: buildProgressiveBundleCommands(resolvedDbProvider),
+    tenancyMode: resolvedTenancyMode,
+    selectedBundleCommands: buildInitialBundleCommands(resolvedInitialBundles),
     targetDirectory,
     dryRun,
     touchedFiles
@@ -584,7 +582,7 @@ export async function runCli(
       template: resolvedOptions.template,
       target: resolvedOptions.target,
       initialBundles: resolvedOptions.initialBundles,
-      dbProvider: resolvedOptions.dbProvider,
+      tenancyMode: resolvedOptions.tenancyMode,
       force: resolvedOptions.force,
       dryRun: resolvedOptions.dryRun,
       cwd
@@ -598,7 +596,6 @@ export async function runCli(
     } else {
       stdout.write(`Created app "${result.appName}" from template "${result.template}" at ${targetLabel}.\n`);
     }
-
     stdout.write(`${result.dryRun ? "Planned" : "Written"} files (${result.touchedFiles.length}):\n`);
     for (const filePath of result.touchedFiles) {
       stdout.write(`- ${filePath}\n`);
@@ -619,9 +616,7 @@ export async function runCli(
         }
       } else {
         stdout.write("Add framework capabilities when ready:\n");
-        for (const command of result.progressiveBundleCommands) {
-          stdout.write(`- ${command}\n`);
-        }
+        stdout.write("- npx jskit add auth-base --no-install\n");
       }
     }
 

package/templates/base-shell/.jskit/lock.json

@@ -0,0 +1,31 @@
+{
+  "lockVersion": 1,
+  "installedPackages": {
+    "@local/main": {
+      "packageId": "@local/main",
+      "version": "0.1.0",
+      "source": {
+        "type": "local-package",
+        "packagePath": "packages/main",
+        "descriptorPath": "packages/main/package.descriptor.mjs"
+      },
+      "managed": {
+        "packageJson": {
+          "dependencies": {
+            "@local/main": {
+              "hadPrevious": false,
+              "previousValue": "",
+              "value": "file:packages/main"
+            }
+          },
+          "devDependencies": {},
+          "scripts": {}
+        },
+        "text": {},
+        "files": []
+      },
+      "options": {},
+      "installedAt": "1970-01-01T00:00:00.000Z"
+    }
+  }
+}

package/templates/base-shell/README.md

@@ -1,39 +1,43 @@
 # __APP_TITLE__
 
-Minimal JSKIT starter shell.
+Generated with `jskit-create-app` (template: `base-shell`).
 
-## What This Is
+## Quickstart
 
-This is the smallest practical JSKIT app host:
+```bash
+npm install
+npm run dev
+```
 
-- tiny Fastify server (`/api/v1/health`)
-- tiny Vue client shell
-- standardized scripts via `@jskit-ai/app-scripts`
+## Package Bootstrap
 
-## What This Is Not
+`npm install` runs `scripts/dev-bootstrap-jskit.sh` through `preinstall`.
 
-This app intentionally does not include:
+- Default mode is `JSKIT_DEV_BOOTSTRAP=auto`.
+- In Dokku (`DOKKU_APP_NAME`/`DOKKU_APP_TYPE` detected), auto mode runs bootstrap.
+- Outside Dokku, auto mode skips bootstrap (local dev stays quiet).
 
-- db wiring
-- auth/workspace modules
-- billing/chat/social/ai modules
-- app-local framework composition engines
+Set `JSKIT_GITHUB_TARBALL_URL` in Dokku when local JSKIT packages are not published to npm yet.
 
-Those are layered in later as framework packs/modules.
+Refresh JSKIT dependencies to the latest published versions:
 
-## Run
+```bash
+npm run jskit:update
+```
+
+## Server
 
 ```bash
-npm install
-npm run dev
 npm run server
-npm run test
-npm run test:client
 ```
 
-## Progressive Bundles
+App configuration files:
+
+- `config/public.js` for client-visible feature toggles, including surface definitions.
+- `config/server.js` for server-only toggles/secrets wiring.
+
+## Add Capabilities
 
 ```bash
-npx jskit add db --provider mysql --no-install
 npx jskit add auth-base --no-install
 ```

package/templates/base-shell/app.scripts.config.mjs

@@ -1,3 +1,3 @@
-import { createNodeVueFastifyScriptsConfig } from "@jskit-ai/app-scripts";
+import { createNodeVueFastifyScriptsConfig } from "@jskit-ai/app-scripts/server";
 
 export default createNodeVueFastifyScriptsConfig();

package/templates/base-shell/config/public.js

@@ -0,0 +1,30 @@
+import { surfaceAccessPolicies } from "./surfaceAccessPolicies.js";
+
+export const config = {};
+__TENANCY_MODE_LINE__
+
+config.surfaceModeAll = "all";
+config.surfaceDefaultId = "home";
+config.webRootAllowed = "no";
+config.surfaceAccessPolicies = surfaceAccessPolicies;
+config.surfaceDefinitions = {};
+config.surfaceDefinitions.home = {
+  id: "home",
+  label: "Home",
+  pagesRoot: "home",
+  enabled: true,
+  requiresAuth: false,
+  requiresWorkspace: false,
+  accessPolicyId: "public",
+  origin: ""
+};
+config.surfaceDefinitions.console = {
+  id: "console",
+  label: "Console",
+  pagesRoot: "console",
+  enabled: true,
+  requiresAuth: true,
+  requiresWorkspace: false,
+  accessPolicyId: "console_owner",
+  origin: ""
+};

package/templates/base-shell/config/server.js

@@ -0,0 +1 @@
+export const config = {};

package/templates/base-shell/config/surfaceAccessPolicies.js

@@ -0,0 +1,12 @@
+export const surfaceAccessPolicies = {};
+
+surfaceAccessPolicies.public = {};
+
+surfaceAccessPolicies.authenticated = {
+  requireAuth: true
+};
+
+surfaceAccessPolicies.console_owner = {
+  requireAuth: true,
+  requireFlagsAll: ["console_owner"]
+};

package/templates/base-shell/eslint.config.mjs

@@ -1,4 +1,4 @@
-import { baseConfig, nodeConfig, webConfig } from "@jskit-ai/config-eslint";
+import { baseConfig, nodeConfig, webConfig } from "@jskit-ai/config-eslint/server";
 
 export default [
   {

package/templates/base-shell/gitignore

@@ -5,3 +5,5 @@ test-results/
 .env
 .env.*
 !.env.example
+scripts/verdaccio/storage/
+scripts/verdaccio/htpasswd

package/templates/base-shell/index.html

@@ -8,6 +8,6 @@
   </head>
   <body>
     <div id="app"></div>
-    <script type="module" src="/src/%VITE_CLIENT_ENTRY%"></script>
+    <script type="module" src="/src/main.js"></script>
   </body>
 </html>

package/templates/base-shell/jsconfig.json

@@ -0,0 +1,8 @@
+{
+  "compilerOptions": {
+    "baseUrl": ".",
+    "paths": {
+      "@/*": ["src/*"]
+    }
+  }
+}

package/templates/base-shell/package.json

@@ -7,32 +7,57 @@
   "engines": {
     "node": "20.x"
   },
-  "bin": {
-    "jskit": "node_modules/@jskit-ai/jskit/packages/tooling/jskit/bin/jskit.js"
-  },
   "scripts": {
-    "server": "jskit-app-scripts server",
-    "start": "jskit-app-scripts start",
-    "dev": "jskit-app-scripts dev",
-    "build": "jskit-app-scripts build",
-    "preview": "jskit-app-scripts preview",
-    "lint": "jskit-app-scripts lint",
-    "lint:process-env": "jskit-app-scripts lint:process-env",
-    "test": "jskit-app-scripts test",
-    "test:client": "jskit-app-scripts test:client"
+    "server": "node ./bin/server.js",
+    "server:all": "node ./bin/server.js",
+    "server:home": "SERVER_SURFACE=home node ./bin/server.js",
+    "server:console": "SERVER_SURFACE=console node ./bin/server.js",
+    "server:account": "SERVER_SURFACE=account node ./bin/server.js",
+    "server:auth": "SERVER_SURFACE=auth node ./bin/server.js",
+    "server:app": "SERVER_SURFACE=app node ./bin/server.js",
+    "server:admin": "SERVER_SURFACE=admin node ./bin/server.js",
+    "start": "node ./bin/server.js",
+    "link:local:jskit": "bash ./scripts/link-local-jskit-packages.sh",
+    "verdaccio:reset:publish": "bash ./scripts/verdaccio-reset-and-publish-packages.sh",
+    "dev": "vite",
+    "dev:all": "vite",
+    "dev:home": "VITE_SURFACE=home vite",
+    "dev:console": "VITE_SURFACE=console vite",
+    "dev:account": "VITE_SURFACE=account vite",
+    "dev:auth": "VITE_SURFACE=auth vite",
+    "dev:app": "VITE_SURFACE=app vite",
+    "dev:admin": "VITE_SURFACE=admin vite",
+    "build": "vite build",
+    "build:all": "vite build",
+    "build:home": "VITE_SURFACE=home vite build",
+    "build:console": "VITE_SURFACE=console vite build",
+    "build:account": "VITE_SURFACE=account vite build",
+    "build:auth": "VITE_SURFACE=auth vite build",
+    "build:app": "VITE_SURFACE=app vite build",
+    "build:admin": "VITE_SURFACE=admin vite build",
+    "preview": "vite preview",
+    "lint": "eslint .",
+    "test": "node --test",
+    "test:client": "vitest run tests/client",
+    "preinstall": "bash ./scripts/dev-bootstrap-jskit.sh",
+    "jskit:update": "bash ./scripts/update-jskit-packages.sh"
   },
   "dependencies": {
-    "@jskit-ai/app-scripts": "0.1.0",
-    "@jskit-ai/server-runtime-core": "file:node_modules/@jskit-ai/jskit/packages/runtime/server-runtime-core",
-    "@jskit-ai/surface-routing": "file:node_modules/@jskit-ai/jskit/packages/surface-routing",  
+    "@local/main": "file:packages/main",
+    "@fastify/type-provider-typebox": "^6.1.0",
+    "@jskit-ai/kernel": "0.1.4",
     "fastify": "^5.7.4",
-    "vue": "^3.5.13"
+    "vue": "^3.5.13",
+    "vue-router": "^4.6.4",
+    "vuetify": "^4.0.0",
+    "@jskit-ai/http-runtime": "0.1.4"
   },
   "devDependencies": {
-    "@jskit-ai/config-eslint": "0.1.0",
-    "@jskit-ai/jskit": "github:mobily-enterprises/jskit-ai",
+    "@jskit-ai/config-eslint": "0.1.4",
+    "@jskit-ai/jskit-cli": "0.2.4",
     "@vitejs/plugin-vue": "^5.2.1",
     "eslint": "^9.39.1",
+    "unplugin-vue-router": "^0.19.2",
     "vite": "^6.1.0",
     "vitest": "^4.0.18"
   }

package/templates/base-shell/packages/main/package.descriptor.mjs

@@ -0,0 +1,55 @@
+export default Object.freeze({
+  packageVersion: 1,
+  packageId: "@local/main",
+  version: "0.1.0",
+  description: "App-local main module scaffold.",
+  dependsOn: [],
+  capabilities: {
+    provides: [],
+    requires: []
+  },
+  options: {},
+  runtime: {
+    server: {
+      providerEntrypoint: "src/server/index.js",
+      providers: [
+        {
+          discover: {
+            dir: "src/server/providers",
+            pattern: "*Provider.js"
+          }
+        }
+      ]
+    },
+    client: {
+      providers: [
+        {
+          entrypoint: "src/client/providers/MainClientProvider.js",
+          export: "MainClientProvider"
+        }
+      ]
+    }
+  },
+  metadata: {
+    server: {
+      routes: []
+    },
+    ui: {
+      routes: [],
+      elements: [],
+      overrides: []
+    }
+  },
+  mutations: {
+    dependencies: {
+      runtime: {},
+      dev: {}
+    },
+    packageJson: {
+      scripts: {}
+    },
+    procfile: {},
+    text: [],
+    files: []
+  }
+});

package/templates/base-shell/packages/main/package.json

@@ -0,0 +1,12 @@
+{
+  "name": "@local/main",
+  "version": "0.1.0",
+  "private": true,
+  "type": "module",
+  "exports": {
+    "./client": "./src/client/index.js",
+    "./server": "./src/server/index.js",
+    "./server/providers/MainServiceProvider": "./src/server/providers/MainServiceProvider.js",
+    "./shared": "./src/shared/index.js"
+  }
+}

package/templates/base-shell/packages/main/src/client/index.js

@@ -0,0 +1,13 @@
+/**
+ * Client entrypoint for @local/main.
+ *
+ * Export browser-facing modules from here.
+ *
+ * Example:
+ * export { MainClientProvider } from "./providers/MainClientProvider.js";
+ * export { registerMainClientComponent } from "./providers/MainClientProvider.js";
+ */
+export {
+  MainClientProvider,
+  registerMainClientComponent
+} from "./providers/MainClientProvider.js";