@lightdash/cli 1.49.0 → 1.50.0

package/dist/handlers/apps/createApp.d.ts

@@ -0,0 +1,21 @@
+import { type DataAppManifest } from '@lightdash/common';
+export type CreateAppHandlerOptions = {
+    assumeYes?: boolean;
+    description?: string;
+    path?: string;
+    project?: string;
+    slug?: string;
+    verbose: boolean;
+};
+export declare const SHADCN_VERSION = "2.3.0";
+export declare const SHADCN_COMPONENTS: readonly ['button', 'badge', 'card', 'table', 'dialog', 'tabs', 'select', 'input', 'label', 'popover', 'tooltip', 'separator', 'skeleton', 'dropdown-menu', 'sheet', 'scroll-area', 'switch', 'checkbox', 'avatar', 'alert', 'progress', 'resizable'];
+export declare const resolveLocalAppSlug: (name: string, explicitSlug?: string) => string;
+export declare const buildLocalAppManifest: (args: {
+    name: string;
+    description: string;
+    projectUuid: string;
+    slug: string;
+    now: Date;
+}) => DataAppManifest;
+export declare const createAppHandler: (name: string, options: CreateAppHandlerOptions) => Promise<void>;
+//# sourceMappingURL=createApp.d.ts.map

package/dist/handlers/apps/createApp.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"createApp.d.ts","sourceRoot":"","sources":["../../../src/handlers/apps/createApp.ts"],"names":[],"mappings":"AAAA,OAAO,EAOH,KAAK,eAAe,EACvB,MAAM,mBAAmB,CAAC;AAuB3B,MAAM,MAAM,uBAAuB,GAAG;IAClC,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,OAAO,EAAE,OAAO,CAAC;CACpB,CAAC;AAEF,eAAO,MAAM,cAAc,UAAU,CAAC;AAEtC,eAAO,MAAM,iBAAiB,YAC1B,QAAQ,EACR,OAAO,EACP,MAAM,EACN,OAAO,EACP,QAAQ,EACR,MAAM,EACN,QAAQ,EACR,OAAO,EACP,OAAO,EACP,SAAS,EACT,SAAS,EACT,WAAW,EACX,UAAU,EACV,eAAe,EACf,OAAO,EACP,aAAa,EACb,QAAQ,EACR,UAAU,EACV,QAAQ,EACR,OAAO,EACP,UAAU,EACV,WAAW,CACL,CAAC;AAEX,eAAO,MAAM,mBAAmB,SACtB,MAAM,iBACG,MAAM,KACtB,MAWF,CAAC;AAEF,eAAO,MAAM,qBAAqB,SAAU;IACxC,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC;IACpB,WAAW,EAAE,MAAM,CAAC;IACpB,IAAI,EAAE,MAAM,CAAC;IACb,GAAG,EAAE,IAAI,CAAC;CACb,KAAG,eAUF,CAAC;AAiKH,eAAO,MAAM,gBAAgB,SACnB,MAAM,WACH,uBAAuB,KACjC,OAAO,CAAC,IAAI,CAwGd,CAAC"}

package/dist/handlers/apps/createApp.js

@@ -0,0 +1,261 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.createAppHandler = exports.buildLocalAppManifest = exports.resolveLocalAppSlug = exports.SHADCN_COMPONENTS = exports.SHADCN_VERSION = void 0;
+const tslib_1 = require("tslib");
+const common_1 = require("@lightdash/common");
+const execa_1 = tslib_1.__importDefault(require("execa"));
+const fs_1 = require("fs");
+const inquirer_1 = tslib_1.__importDefault(require("inquirer"));
+const path = tslib_1.__importStar(require("path"));
+const analytics_1 = require("../../analytics/analytics");
+const config_1 = require("../../config");
+const env_1 = require("../../env");
+const globalState_1 = tslib_1.__importDefault(require("../../globalState"));
+const styles = tslib_1.__importStar(require("../../styles"));
+const contentAsCodePaths_1 = require("../contentAsCodePaths");
+const apiClient_1 = require("../dbt/apiClient");
+const selectProject_1 = require("../selectProject");
+const appCodeFiles_1 = require("./appCodeFiles");
+const scaffolding_1 = require("./scaffolding");
+exports.SHADCN_VERSION = '2.3.0';
+exports.SHADCN_COMPONENTS = [
+    'button',
+    'badge',
+    'card',
+    'table',
+    'dialog',
+    'tabs',
+    'select',
+    'input',
+    'label',
+    'popover',
+    'tooltip',
+    'separator',
+    'skeleton',
+    'dropdown-menu',
+    'sheet',
+    'scroll-area',
+    'switch',
+    'checkbox',
+    'avatar',
+    'alert',
+    'progress',
+    'resizable',
+];
+const resolveLocalAppSlug = (name, explicitSlug) => {
+    if (name.trim().length === 0) {
+        throw new common_1.ParameterError('Data app name cannot be empty.');
+    }
+    const slug = explicitSlug ?? (0, common_1.generateSlug)(name);
+    if (!(0, common_1.isValidDataAppSlug)(slug)) {
+        throw new common_1.ParameterError(`Invalid data app slug "${slug}". Slugs must start with a lowercase letter or digit and contain only lowercase letters, digits, and hyphens, up to 255 characters.`);
+    }
+    return slug;
+};
+exports.resolveLocalAppSlug = resolveLocalAppSlug;
+const buildLocalAppManifest = (args) => ({
+    codeVersion: 1,
+    projectUuid: args.projectUuid,
+    slug: args.slug,
+    version: 1,
+    name: args.name,
+    description: args.description,
+    template: null,
+    downloadedAt: args.now.toISOString(),
+    scaffoldingVersion: env_1.CLI_VERSION,
+});
+exports.buildLocalAppManifest = buildLocalAppManifest;
+const assertAppDirectoryAvailable = async (appDir) => {
+    try {
+        await fs_1.promises.access(appDir);
+        throw new common_1.ParameterError(`Cannot create data app: ${appDir} already exists. Choose another slug or download the existing app.`);
+    }
+    catch (error) {
+        if (error.code === 'ENOENT') {
+            return;
+        }
+        throw error;
+    }
+};
+const parseDirectPackages = (staticFiles) => {
+    const packageJson = staticFiles.find((file) => file.path === 'package.json');
+    if (!packageJson) {
+        throw new Error('Data app template is missing package.json.');
+    }
+    const parsed = JSON.parse(Buffer.from(packageJson.contentBase64, 'base64').toString('utf8'));
+    return Object.entries({
+        ...parsed.dependencies,
+        ...parsed.devDependencies,
+    })
+        .map(([packageName, version]) => `${packageName}@${version}`)
+        .sort();
+};
+const assertNpmAvailable = async () => {
+    try {
+        await (0, execa_1.default)('npm', ['--version']);
+    }
+    catch {
+        throw new common_1.ParameterError('npm is required to create a data app because Lightdash generates its shadcn UI locally. Install Node.js (which includes npm), then run this command again.');
+    }
+};
+const confirmLocalPackageTooling = async (assumeYes) => {
+    globalState_1.default.log(styles.warning([
+        '⚠ Local package installation',
+        `Creating a data app downloads third-party packages through npm into the new app folder and runs shadcn@${exports.SHADCN_VERSION} to generate UI files.`,
+        'Dependency lifecycle scripts are disabled, but npm and shadcn will access the network and write files on this machine.',
+        'Only continue if you trust these package sources and are comfortable running this tooling locally.',
+    ].join('\n')));
+    if (assumeYes)
+        return;
+    if (globalState_1.default.isNonInteractive()) {
+        throw new common_1.ParameterError('Creating a data app requires approval to download and install npm packages. Rerun with --assume-yes to approve in non-interactive mode.');
+    }
+    const { confirmed } = await inquirer_1.default.prompt([
+        {
+            type: 'confirm',
+            name: 'confirmed',
+            message: 'Continue and review the packages to be installed?',
+            default: false,
+        },
+    ]);
+    if (!confirmed) {
+        throw new common_1.ParameterError('Data app creation cancelled.');
+    }
+};
+const confirmDependencyInstall = async (directPackages, assumeYes) => {
+    globalState_1.default.log([
+        'Creating this data app will install these direct npm packages:',
+        ...directPackages.map((packageSpec) => `  - ${packageSpec}`),
+        `\nIt will also run shadcn@${exports.SHADCN_VERSION} to generate:`,
+        `  ${exports.SHADCN_COMPONENTS.join(', ')}`,
+        "\nDependency lifecycle scripts will be disabled. React 19 peer dependencies will use npm's legacy-peer-deps mode.",
+    ].join('\n'));
+    if (assumeYes)
+        return;
+    if (globalState_1.default.isNonInteractive()) {
+        throw new common_1.ParameterError('Creating a data app requires approval to install npm packages. Rerun with --assume-yes to approve in non-interactive mode.');
+    }
+    const { confirmed } = await inquirer_1.default.prompt([
+        {
+            type: 'confirm',
+            name: 'confirmed',
+            message: 'Install these packages and create the app?',
+            default: false,
+        },
+    ]);
+    if (!confirmed) {
+        throw new common_1.ParameterError('Data app creation cancelled.');
+    }
+};
+const installDependenciesAndShadcn = async (appDir) => {
+    const npmEnv = {
+        ...process.env,
+        npm_config_ignore_scripts: 'true',
+        npm_config_package_lock: 'false',
+    };
+    const subprocessOptions = {
+        cwd: appDir,
+        env: npmEnv,
+        stdio: 'inherit',
+    };
+    const shadcnOptions = {
+        cwd: appDir,
+        env: npmEnv,
+        input: '\u001B[B\n',
+        stdin: 'pipe',
+        stdout: 'inherit',
+        stderr: 'inherit',
+    };
+    await (0, execa_1.default)('npm', ['install', '--include=dev', '--ignore-scripts', '--no-package-lock'], subprocessOptions);
+    await (0, execa_1.default)('npx', ['--yes', `shadcn@${exports.SHADCN_VERSION}`, 'init', '--defaults', '--force'], shadcnOptions);
+    await (0, execa_1.default)('npx', [
+        '--yes',
+        `shadcn@${exports.SHADCN_VERSION}`,
+        'add',
+        '--overwrite',
+        '--yes',
+        ...exports.SHADCN_COMPONENTS,
+    ], shadcnOptions);
+};
+const createAppHandler = async (name, options) => {
+    const startTime = Date.now();
+    let success = false;
+    globalState_1.default.setVerbose(options.verbose);
+    try {
+        const slug = (0, exports.resolveLocalAppSlug)(name, options.slug);
+        const appDir = path.join((0, contentAsCodePaths_1.getDownloadFolder)(options.path), 'apps', slug);
+        await assertAppDirectoryAvailable(appDir);
+        await assertNpmAvailable();
+        await confirmLocalPackageTooling(options.assumeYes ?? false);
+        const staticFiles = (0, scaffolding_1.buildStaticAuthoringFiles)({
+            appName: name,
+            sdkVersion: env_1.CLI_VERSION,
+        });
+        await confirmDependencyInstall(parseDirectPackages(staticFiles), options.assumeYes ?? false);
+        await (0, apiClient_1.checkLightdashVersion)();
+        const config = await (0, config_1.getConfig)();
+        if (!config.context?.apiKey || !config.context.serverUrl) {
+            throw new common_1.AuthorizationError(`Not logged in. Run 'lightdash login --help'`);
+        }
+        const projectSelection = await (0, selectProject_1.selectProject)(config, options.project);
+        if (!projectSelection) {
+            throw new common_1.LightdashError({
+                message: 'No project selected. Run lightdash config set-project',
+                name: 'Not Found',
+                statusCode: 404,
+                data: {},
+            });
+        }
+        const { projectUuid } = projectSelection;
+        (0, selectProject_1.logSelectedProject)(projectSelection, config, 'Creating app for');
+        const context = await (0, apiClient_1.lightdashApi)({
+            method: 'GET',
+            url: `/api/v1/ee/projects/${projectUuid}/apps/authoring-context?slug=${encodeURIComponent(slug)}`,
+            body: undefined,
+        });
+        const manifest = (0, exports.buildLocalAppManifest)({
+            name,
+            description: options.description ?? '',
+            projectUuid,
+            slug,
+            now: new Date(),
+        });
+        const appsDir = path.dirname(appDir);
+        await fs_1.promises.mkdir(appsDir, { recursive: true });
+        const temporaryAppDir = await fs_1.promises.mkdtemp(path.join(appsDir, `.${slug}-`));
+        try {
+            await (0, appCodeFiles_1.writeBundleToDir)(temporaryAppDir, {
+                manifest,
+                files: (0, scaffolding_1.loadVendoredStarterSource)(),
+            });
+            await (0, appCodeFiles_1.writeFilesToDir)(temporaryAppDir, staticFiles);
+            await (0, appCodeFiles_1.writeContextToDir)(temporaryAppDir, context);
+            await installDependenciesAndShadcn(temporaryAppDir);
+            // shadcn rewrites package versions and tailwind colors while it
+            // generates source. Restore the reviewed template declarations so
+            // the approval list stays exact and uploads do not mistake the
+            // generated app for one with custom dependencies.
+            await (0, appCodeFiles_1.writeFilesToDir)(temporaryAppDir, staticFiles.filter((file) => file.path === 'package.json' ||
+                file.path === 'tailwind.config.js'));
+            await fs_1.promises.rename(temporaryAppDir, appDir);
+        }
+        catch (error) {
+            await fs_1.promises.rm(temporaryAppDir, { recursive: true, force: true });
+            throw error;
+        }
+        globalState_1.default.log(styles.success(`Created data app "${name}" at ${appDir}`));
+        globalState_1.default.log(`\nNext:\n  cd ${JSON.stringify(appDir)}\n  npm run build\n  lightdash upload --apps ${slug}`);
+        success = true;
+    }
+    finally {
+        await analytics_1.LightdashAnalytics.track({
+            event: 'command.executed',
+            properties: {
+                command: 'create-app',
+                durationMs: Date.now() - startTime,
+                success,
+            },
+        });
+    }
+};
+exports.createAppHandler = createAppHandler;

package/dist/handlers/apps/createApp.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=createApp.test.d.ts.map

package/dist/handlers/apps/createApp.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"createApp.test.d.ts","sourceRoot":"","sources":["../../../src/handlers/apps/createApp.test.ts"],"names":[],"mappings":""}

package/dist/handlers/apps/createApp.test.js

@@ -0,0 +1,264 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+const tslib_1 = require("tslib");
+const execa_1 = tslib_1.__importDefault(require("execa"));
+const fs_1 = require("fs");
+const inquirer_1 = tslib_1.__importDefault(require("inquirer"));
+const os = tslib_1.__importStar(require("os"));
+const path = tslib_1.__importStar(require("path"));
+const analytics_1 = require("../../analytics/analytics");
+const config_1 = require("../../config");
+const globalState_1 = tslib_1.__importDefault(require("../../globalState"));
+const apiClient_1 = require("../dbt/apiClient");
+const selectProject_1 = require("../selectProject");
+const appCodeFiles_1 = require("./appCodeFiles");
+const createApp_1 = require("./createApp");
+vi.mock('../../config', () => ({ getConfig: vi.fn() }));
+vi.mock('../dbt/apiClient', () => ({
+    checkLightdashVersion: vi.fn(),
+    lightdashApi: vi.fn(),
+}));
+vi.mock('../selectProject', () => ({
+    selectProject: vi.fn(),
+    logSelectedProject: vi.fn(),
+}));
+vi.mock('../../analytics/analytics', () => ({
+    LightdashAnalytics: { track: vi.fn() },
+}));
+vi.mock('execa');
+vi.mock('inquirer', () => ({
+    default: { prompt: vi.fn() },
+}));
+const execaMock = execa_1.default;
+const promptMock = inquirer_1.default.prompt;
+const PROJECT_UUID = '11111111-1111-4111-8111-111111111111';
+const context = {
+    semanticLayer: {
+        path: '.lightdash/context/semantic-layer.yml',
+        contentBase64: Buffer.from('models: []\n').toString('base64'),
+    },
+    parameters: null,
+    promptHistory: {
+        path: '.lightdash/context/prompt-history.md',
+        contentBase64: Buffer.from('# Prompt history\n\n_No previous versions._\n').toString('base64'),
+    },
+    theme: { instructions: null, assets: [], skippedAssetCount: 0 },
+};
+describe('resolveLocalAppSlug', () => {
+    it('generates a slug from the app name', () => {
+        expect((0, createApp_1.resolveLocalAppSlug)('Revenue Explorer')).toBe('revenue-explorer');
+    });
+    it('accepts a valid explicit slug', () => {
+        expect((0, createApp_1.resolveLocalAppSlug)('Revenue Explorer', 'sales-overview')).toBe('sales-overview');
+    });
+    it('rejects an invalid explicit slug', () => {
+        expect(() => (0, createApp_1.resolveLocalAppSlug)('Revenue Explorer', '../invalid')).toThrow('Invalid data app slug');
+    });
+});
+describe('buildLocalAppManifest', () => {
+    it('builds a slug-identified manifest without an app uuid', () => {
+        const manifest = (0, createApp_1.buildLocalAppManifest)({
+            name: 'Revenue Explorer',
+            description: 'Revenue by customer',
+            projectUuid: PROJECT_UUID,
+            slug: 'revenue-explorer',
+            now: new Date('2026-07-30T10:00:00.000Z'),
+        });
+        expect(manifest).toMatchObject({
+            codeVersion: 1,
+            projectUuid: PROJECT_UUID,
+            slug: 'revenue-explorer',
+            version: 1,
+            name: 'Revenue Explorer',
+            description: 'Revenue by customer',
+            template: null,
+            downloadedAt: '2026-07-30T10:00:00.000Z',
+        });
+        expect(manifest.appUuid).toBeUndefined();
+    });
+});
+describe('createAppHandler', () => {
+    beforeEach(() => {
+        execaMock.mockImplementation(async (command, args = [], options) => {
+            if (command === 'npx' &&
+                args.includes('init') &&
+                options?.cwd) {
+                await fs_1.promises.writeFile(path.join(options.cwd, 'package.json'), '{}\n');
+                await fs_1.promises.writeFile(path.join(options.cwd, 'tailwind.config.js'), '// rewritten by shadcn\n');
+            }
+            if (command === 'npx' && args.includes('add') && options?.cwd) {
+                const uiDir = path.join(options.cwd, 'src/components/ui');
+                await fs_1.promises.mkdir(uiDir, { recursive: true });
+                await fs_1.promises.writeFile(path.join(uiDir, 'button.tsx'), 'export const Button = () => null;\n');
+            }
+            return { stdout: '' };
+        });
+        promptMock.mockResolvedValue({ confirmed: true });
+        vi.mocked(config_1.getConfig).mockResolvedValue({
+            context: {
+                apiKey: 'token',
+                serverUrl: 'https://lightdash.example.com',
+                project: PROJECT_UUID,
+            },
+        });
+        vi.mocked(selectProject_1.selectProject).mockResolvedValue({
+            projectUuid: PROJECT_UUID,
+            isPreview: false,
+        });
+        vi.mocked(apiClient_1.lightdashApi).mockResolvedValue(context);
+        vi.mocked(apiClient_1.checkLightdashVersion).mockResolvedValue(undefined);
+        vi.spyOn(globalState_1.default, 'log').mockImplementation(() => undefined);
+        vi.spyOn(globalState_1.default, 'isNonInteractive').mockReturnValue(false);
+    });
+    afterEach(() => {
+        vi.restoreAllMocks();
+        vi.clearAllMocks();
+    });
+    it('creates a complete local app scaffold and project context', async () => {
+        const root = await fs_1.promises.mkdtemp(path.join(os.tmpdir(), 'ld-create-app-'));
+        await (0, createApp_1.createAppHandler)('Revenue Explorer', {
+            description: 'Revenue by customer',
+            path: root,
+            verbose: false,
+        });
+        const appDir = path.join(root, 'apps', 'revenue-explorer');
+        const bundle = await (0, appCodeFiles_1.readBundleFromDir)(appDir);
+        expect(bundle.manifest.slug).toBe('revenue-explorer');
+        expect(bundle.manifest.appUuid).toBeUndefined();
+        expect(bundle.files.map((file) => file.path)).toContain('src/App.jsx');
+        expect(bundle.files.map((file) => file.path)).toContain('src/components/ui/button.tsx');
+        expect(await fs_1.promises.readFile(path.join(appDir, 'package.json'), 'utf8')).toContain('@lightdash/query-sdk');
+        expect(await fs_1.promises.readFile(path.join(appDir, 'tailwind.config.js'), 'utf8')).not.toContain('rewritten by shadcn');
+        await expect(fs_1.promises.access(path.join(appDir, '.claude/skills/lightdash-data-app/SKILL.md'))).resolves.toBeUndefined();
+        await expect(fs_1.promises.access(path.join(appDir, '.claude/skills/developing-data-apps-locally/SKILL.md'))).resolves.toBeUndefined();
+        expect(await fs_1.promises.readFile(path.join(appDir, '.lightdash/context/semantic-layer.yml'), 'utf8')).toBe('models: []\n');
+        expect(apiClient_1.lightdashApi).toHaveBeenCalledWith({
+            method: 'GET',
+            url: `/api/v1/ee/projects/${PROJECT_UUID}/apps/authoring-context?slug=revenue-explorer`,
+            body: undefined,
+        });
+        expect(analytics_1.LightdashAnalytics.track).toHaveBeenCalledWith({
+            event: 'command.executed',
+            properties: expect.objectContaining({
+                command: 'create-app',
+                success: true,
+            }),
+        });
+        expect(globalState_1.default.log).toHaveBeenCalledWith(expect.stringContaining('react@19.2.5'));
+        expect(globalState_1.default.log).toHaveBeenCalledWith(expect.stringContaining('⚠ Local package installation'));
+        expect(globalState_1.default.log).toHaveBeenCalledWith(expect.stringContaining('shadcn@2.3.0'));
+        expect(promptMock).toHaveBeenCalledTimes(2);
+        expect(promptMock).toHaveBeenNthCalledWith(1, [
+            expect.objectContaining({
+                type: 'confirm',
+                name: 'confirmed',
+                message: 'Continue and review the packages to be installed?',
+                default: false,
+            }),
+        ]);
+        expect(promptMock).toHaveBeenNthCalledWith(2, [
+            expect.objectContaining({
+                type: 'confirm',
+                name: 'confirmed',
+                message: 'Install these packages and create the app?',
+                default: false,
+            }),
+        ]);
+        expect(execaMock).toHaveBeenCalledWith('npm', ['--version']);
+        expect(execaMock).toHaveBeenCalledWith('npm', [
+            'install',
+            '--include=dev',
+            '--ignore-scripts',
+            '--no-package-lock',
+        ], expect.objectContaining({
+            cwd: expect.any(String),
+            stdio: 'inherit',
+        }));
+        expect(execaMock).toHaveBeenCalledWith('npx', expect.arrayContaining(['shadcn@2.3.0', 'init']), expect.objectContaining({
+            cwd: expect.any(String),
+            input: '\u001B[B\n',
+        }));
+        expect(execaMock).toHaveBeenCalledWith('npx', expect.arrayContaining(['shadcn@2.3.0', 'add', 'button']), expect.objectContaining({
+            cwd: expect.any(String),
+            input: '\u001B[B\n',
+        }));
+    });
+    it('requires npm before requesting app context', async () => {
+        const root = await fs_1.promises.mkdtemp(path.join(os.tmpdir(), 'ld-create-app-'));
+        execaMock.mockRejectedValueOnce(new Error('npm not found'));
+        await expect((0, createApp_1.createAppHandler)('Revenue Explorer', {
+            path: root,
+            verbose: false,
+        })).rejects.toThrow('npm is required to create a data app');
+        expect(apiClient_1.lightdashApi).not.toHaveBeenCalled();
+        await expect(fs_1.promises.access(path.join(root, 'apps', 'revenue-explorer'))).rejects.toThrow();
+    });
+    it('does not create anything when package installation is declined', async () => {
+        const root = await fs_1.promises.mkdtemp(path.join(os.tmpdir(), 'ld-create-app-'));
+        promptMock
+            .mockResolvedValueOnce({ confirmed: true })
+            .mockResolvedValueOnce({ confirmed: false });
+        await expect((0, createApp_1.createAppHandler)('Revenue Explorer', {
+            path: root,
+            verbose: false,
+        })).rejects.toThrow('Data app creation cancelled');
+        expect(apiClient_1.lightdashApi).not.toHaveBeenCalled();
+        await expect(fs_1.promises.access(path.join(root, 'apps', 'revenue-explorer'))).rejects.toThrow();
+    });
+    it('does not list packages when local tooling approval is declined', async () => {
+        const root = await fs_1.promises.mkdtemp(path.join(os.tmpdir(), 'ld-create-app-'));
+        promptMock.mockResolvedValueOnce({ confirmed: false });
+        await expect((0, createApp_1.createAppHandler)('Revenue Explorer', {
+            path: root,
+            verbose: false,
+        })).rejects.toThrow('Data app creation cancelled');
+        expect(promptMock).toHaveBeenCalledTimes(1);
+        expect(globalState_1.default.log).not.toHaveBeenCalledWith(expect.stringContaining('react@19.2.5'));
+        expect(apiClient_1.lightdashApi).not.toHaveBeenCalled();
+    });
+    it('requires explicit approval in non-interactive mode', async () => {
+        const root = await fs_1.promises.mkdtemp(path.join(os.tmpdir(), 'ld-create-app-'));
+        vi.mocked(globalState_1.default.isNonInteractive).mockReturnValueOnce(true);
+        await expect((0, createApp_1.createAppHandler)('Revenue Explorer', {
+            path: root,
+            verbose: false,
+        })).rejects.toThrow('--assume-yes');
+        expect(promptMock).not.toHaveBeenCalled();
+    });
+    it('accepts --assume-yes in non-interactive mode', async () => {
+        const root = await fs_1.promises.mkdtemp(path.join(os.tmpdir(), 'ld-create-app-'));
+        vi.mocked(globalState_1.default.isNonInteractive).mockReturnValueOnce(true);
+        await (0, createApp_1.createAppHandler)('Revenue Explorer', {
+            assumeYes: true,
+            path: root,
+            verbose: false,
+        });
+        expect(promptMock).not.toHaveBeenCalled();
+        await expect(fs_1.promises.access(path.join(root, 'apps', 'revenue-explorer'))).resolves.toBeUndefined();
+    });
+    it('cleans up the temporary app when installation fails', async () => {
+        const root = await fs_1.promises.mkdtemp(path.join(os.tmpdir(), 'ld-create-app-'));
+        execaMock.mockImplementation(async (command, args = []) => {
+            if (command === 'npm' && args[0] === 'install') {
+                throw new Error('registry unavailable');
+            }
+            return { stdout: '' };
+        });
+        await expect((0, createApp_1.createAppHandler)('Revenue Explorer', {
+            path: root,
+            verbose: false,
+        })).rejects.toThrow('registry unavailable');
+        expect(await fs_1.promises.readdir(path.join(root, 'apps'))).toEqual([]);
+    });
+    it('does not overwrite an existing app directory', async () => {
+        const root = await fs_1.promises.mkdtemp(path.join(os.tmpdir(), 'ld-create-app-'));
+        const appDir = path.join(root, 'apps', 'revenue-explorer');
+        await fs_1.promises.mkdir(appDir, { recursive: true });
+        await fs_1.promises.writeFile(path.join(appDir, 'keep.txt'), 'keep');
+        await expect((0, createApp_1.createAppHandler)('Revenue Explorer', {
+            path: root,
+            verbose: false,
+        })).rejects.toThrow('already exists');
+        expect(await fs_1.promises.readFile(path.join(appDir, 'keep.txt'), 'utf8')).toBe('keep');
+    });
+});

package/dist/handlers/apps/scaffolding.d.ts

@@ -18,6 +18,7 @@ export declare const loadTemplateDependencies: (sdkVersion: string) => Record<st
  * Reads vendored template, excluding sandbox-only entries (skill.md, scripts/, src/).
  */
 export declare const loadVendoredTemplate: () => DataAppCodeFile[];
+export declare const loadVendoredStarterSource: () => DataAppCodeFile[];
 /**
  * Assembles static authoring files (configs, skills, templates) to deploy alongside a data app.
  */

package/dist/handlers/apps/scaffolding.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"scaffolding.d.ts","sourceRoot":"","sources":["../../../src/handlers/apps/scaffolding.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,eAAe,EAAE,MAAM,mBAAmB,CAAC;AAMzD;;GAEG;AACH,wBAAgB,gBAAgB,CAAC,UAAU,EAAE,MAAM,EAAE,GAAG,MAAM,GAAG,IAAI,CAKpE;AA6DD;;;GAGG;AACH,eAAO,MAAM,oBAAoB,gBAChB,MAAM,WACV,MAAM,KAChB,MAAmE,CAAC;AAEvE;;;;GAIG;AACH,eAAO,MAAM,wBAAwB,eACrB,MAAM,KACnB,MAAM,CAAC,MAAM,EAAE,MAAM,CAevB,CAAC;AAEF;;GAEG;AACH,eAAO,MAAM,oBAAoB,QAAO,eAAe,EAItD,CAAC;AAEF;;GAEG;AACH,eAAO,MAAM,yBAAyB,SAAU;IAC5C,OAAO,EAAE,MAAM,CAAC;IAChB,UAAU,EAAE,MAAM,CAAC;CACtB,KAAG,eAAe,EAkElB,CAAC"}
+{"version":3,"file":"scaffolding.d.ts","sourceRoot":"","sources":["../../../src/handlers/apps/scaffolding.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,eAAe,EAAE,MAAM,mBAAmB,CAAC;AAMzD;;GAEG;AACH,wBAAgB,gBAAgB,CAAC,UAAU,EAAE,MAAM,EAAE,GAAG,MAAM,GAAG,IAAI,CAKpE;AA6DD;;;GAGG;AACH,eAAO,MAAM,oBAAoB,gBAChB,MAAM,WACV,MAAM,KAChB,MAAmE,CAAC;AAEvE;;;;GAIG;AACH,eAAO,MAAM,wBAAwB,eACrB,MAAM,KACnB,MAAM,CAAC,MAAM,EAAE,MAAM,CAevB,CAAC;AAEF;;GAEG;AACH,eAAO,MAAM,oBAAoB,QAAO,eAAe,EAItD,CAAC;AAEF,eAAO,MAAM,yBAAyB,QAAO,eAAe,EAG3D,CAAC;AAEF;;GAEG;AACH,eAAO,MAAM,yBAAyB,SAAU;IAC5C,OAAO,EAAE,MAAM,CAAC;IAChB,UAAU,EAAE,MAAM,CAAC;CACtB,KAAG,eAAe,EAkElB,CAAC"}

package/dist/handlers/apps/scaffolding.js

@@ -1,6 +1,6 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.buildStaticAuthoringFiles = exports.loadVendoredTemplate = exports.loadTemplateDependencies = exports.rewriteWorkspaceDeps = void 0;
+exports.buildStaticAuthoringFiles = exports.loadVendoredStarterSource = exports.loadVendoredTemplate = exports.loadTemplateDependencies = exports.rewriteWorkspaceDeps = void 0;
 exports.firstExistingDir = firstExistingDir;
 const tslib_1 = require("tslib");
 const fs_1 = require("fs");
@@ -89,6 +89,11 @@ const loadVendoredTemplate = () => {
     return walkDir(templateDir, templateDir, SKIP);
 };
 exports.loadVendoredTemplate = loadVendoredTemplate;
+const loadVendoredStarterSource = () => {
+    const { templateDir } = resolveVendorDirs();
+    return walkDir(path.join(templateDir, 'src'), templateDir, new Set());
+};
+exports.loadVendoredStarterSource = loadVendoredStarterSource;
 /**
  * Assembles static authoring files (configs, skills, templates) to deploy alongside a data app.
  */

package/dist/handlers/apps/scaffolding.test.js

@@ -55,9 +55,14 @@ describe('buildStaticAuthoringFiles', () => {
     });
     const byPath = (p) => files.find((f) => f.path === p);
     const text = (p) => Buffer.from(byPath(p).contentBase64, 'base64').toString('utf-8');
-    it('ships both skills', () => {
-        expect(byPath('.claude/skills/lightdash-data-app/SKILL.md')).toBeDefined();
-        expect(byPath('.claude/skills/developing-data-apps-locally/SKILL.md')).toBeDefined();
+    it.each([
+        'lightdash-data-app',
+        'developing-data-apps-locally',
+        'frontend-design',
+        'reusable-visualization',
+        'sdk-features',
+    ])('ships the %s skill', (skill) => {
+        expect(byPath(`.claude/skills/${skill}/SKILL.md`)).toBeDefined();
     });
     it('pins the SDK to a concrete version in package.json', () => {
         expect(text('package.json')).toContain('"@lightdash/query-sdk": "0.3275.0"');
@@ -68,9 +73,9 @@ describe('buildStaticAuthoringFiles', () => {
         expect(text('.gitignore')).toContain('node_modules');
     });
     it('uses npm for the standard local workflow', () => {
-        expect(text('README.md')).toContain('npm install && npm run build');
+        expect(text('README.md')).toContain('run `npm install` first');
         expect(text('AGENTS.md')).toContain('npm install && npm run build');
-        expect(text('.claude/skills/developing-data-apps-locally/SKILL.md')).toContain('`npm install` then `npm run build`');
+        expect(text('.claude/skills/developing-data-apps-locally/SKILL.md')).toContain('run `npm install` first');
         expect(text('.npmrc')).toContain('ignore-scripts=true');
         expect(text('.npmrc')).not.toContain('shamefully-hoist');
     });
@@ -78,3 +83,15 @@ describe('buildStaticAuthoringFiles', () => {
         expect(files.every((f) => !f.path.startsWith('src/'))).toBe(true);
     });
 });
+describe('loadVendoredStarterSource', () => {
+    const files = (0, scaffolding_1.loadVendoredStarterSource)();
+    it('loads the starter app source with bundle-relative paths', () => {
+        expect(files.map((file) => file.path)).toEqual(expect.arrayContaining([
+            'src/App.jsx',
+            'src/main.jsx',
+            'src/index.css',
+        ]));
+        expect(files.every((file) => file.path.startsWith('src/'))).toBe(true);
+        expect(files.some((file) => file.path.startsWith('src/components/ui/'))).toBe(false);
+    });
+});