@mcp-rune/create 0.11.0

package/dist/wizard/questions.js

@@ -0,0 +1,154 @@
+import { input as askText, select, confirm } from '@inquirer/prompts';
+import { resolveAnswers } from './presets.js';
+import { TEMPLATE_REGISTRY } from '../templates/registry.js';
+const TEMPLATE_DESCRIPTIONS = {
+    bookshelf: 'Full mcp-rune surface — apps, tools, prompts, GraphRAG. In-memory adapter, zero setup.',
+    tasks: 'Three models (project, task, tag) with belongsTo + hasMany. Shows the polymorphic tool surface.',
+    'bookshelf-rest': 'Same Book model as bookshelf but backed by a real Express + fetch adapter. Adapter-swap demo.',
+    'bookshelf-graph': 'GraphRAG-focused: pgvector + DomainRegistry + 500-book graph fixture pre-wired for every summary strategy.',
+    'bookshelf-remote': 'HttpServer with static-token auth (OAuth path documented). Remote MCP transport.',
+};
+export async function selectScaffoldMode() {
+    const kind = await select({
+        message: 'How would you like to start?',
+        choices: [
+            { name: 'From scratch — pick a preset and configure', value: 'preset' },
+            { name: 'From an example — clone a runnable template', value: 'template' },
+        ],
+        default: 'preset',
+    });
+    if (kind === 'preset')
+        return { kind: 'preset' };
+    const id = await select({
+        message: 'Which template?',
+        choices: Object.keys(TEMPLATE_REGISTRY).map((name) => ({
+            name: TEMPLATE_DESCRIPTIONS[name] ? `${name} — ${TEMPLATE_DESCRIPTIONS[name]}` : name,
+            value: name,
+        })),
+    });
+    return { kind: 'template', id };
+}
+export async function runWizard(initial) {
+    const preset = initial.preset ??
+        (await select({
+            message: 'Which preset?',
+            choices: [
+                { name: 'Simple — stdio, no DB, CRUD on models', value: 'simple' },
+                { name: 'Advanced — HTTP+OAuth, optional analysis, profiles', value: 'advanced' },
+            ],
+            default: 'simple',
+        }));
+    let modelsRaw = initial.models;
+    if (modelsRaw === undefined) {
+        modelsRaw = await askText({
+            message: 'Models to scaffold (comma-separated, empty for none)',
+            default: '',
+        });
+    }
+    const advanced = {};
+    if (preset === 'advanced') {
+        advanced.transport =
+            initial.transport ??
+                (await select({
+                    message: 'Transport?',
+                    choices: [
+                        { name: 'stdio only (local dev with Claude Code, etc.)', value: 'stdio' },
+                        { name: 'HTTP only (remote, OAuth)', value: 'http' },
+                        { name: 'both (recommended)', value: 'both' },
+                    ],
+                    default: 'both',
+                }));
+        advanced.withAnalysis =
+            initial.withAnalysis ??
+                (await confirm({
+                    message: 'Enable analysis module? (adds docker-compose.yml + pg dep)',
+                    default: false,
+                }));
+        advanced.withDomain =
+            initial.withDomain ??
+                (await confirm({
+                    message: 'Enable domain workflows? (creates src/domain/ stubs)',
+                    default: false,
+                }));
+        // ──── Architecture ──────────────────────────────────────────────────
+        advanced.apiConvention =
+            initial.apiConvention ??
+                (await select({
+                    message: 'API convention?',
+                    choices: [
+                        { name: 'jsonapi — framework default (JSON:API wire format)', value: 'jsonapi' },
+                        { name: 'rest-flat — starter (flat REST, no envelope)', value: 'rest-flat' },
+                    ],
+                    default: 'jsonapi',
+                }));
+        advanced.apiClient =
+            initial.apiClient ??
+                (await select({
+                    message: 'API client?',
+                    choices: [
+                        { name: 'none — leave a placeholder for you to fill in', value: 'none' },
+                        { name: 'fetch — starter implementation using native fetch', value: 'fetch' },
+                    ],
+                    default: 'none',
+                }));
+        advanced.searchAdapter =
+            initial.searchAdapter ??
+                (await select({
+                    message: 'Search adapter?',
+                    choices: [
+                        { name: 'none — framework default (flat filter spread)', value: 'none' },
+                        { name: 'ransack — starter for Rails Ransack q[...] syntax', value: 'ransack' },
+                    ],
+                    default: 'none',
+                }));
+        const transportHasHttp = advanced.transport === 'http' || advanced.transport === 'both';
+        if (transportHasHttp) {
+            advanced.serverAuth =
+                initial.serverAuth ??
+                    (await select({
+                        message: 'HTTP server auth?',
+                        choices: [
+                            { name: 'oauth — OAuth2 discovery + PKCE (recommended)', value: 'oauth' },
+                            { name: 'static-token — single ACCESS_TOKEN bearer (simpler)', value: 'static-token' },
+                        ],
+                        default: 'oauth',
+                    }));
+        }
+        else {
+            advanced.serverAuth = initial.serverAuth ?? 'oauth';
+        }
+        // ──── Observability ─────────────────────────────────────────────────
+        advanced.logger =
+            initial.logger ??
+                (await select({
+                    message: 'Logger?',
+                    choices: [
+                        { name: 'framework — use mcp-rune\'s built-in logger', value: 'framework' },
+                        { name: 'pino — starter wrapper exposing a pino instance', value: 'pino' },
+                    ],
+                    default: 'framework',
+                }));
+        advanced.errorTracking =
+            initial.errorTracking ??
+                (await select({
+                    message: 'Error tracking?',
+                    choices: [
+                        { name: 'none — no DSN configured', value: 'none' },
+                        { name: 'sentry — pre-populate SENTRY_DSN in .env.example', value: 'sentry' },
+                    ],
+                    default: 'none',
+                }));
+        advanced.tracing =
+            initial.tracing ??
+                (await select({
+                    message: 'Tracing?',
+                    choices: [
+                        { name: 'none — no tracing backend configured', value: 'none' },
+                        { name: 'langfuse — pre-populate LANGFUSE_* keys in .env.example', value: 'langfuse' },
+                    ],
+                    default: 'none',
+                }));
+    }
+    return resolveAnswers({ ...initial, ...advanced, preset, models: modelsRaw });
+}
+//# sourceMappingURL=questions.js.map

package/dist/wizard/questions.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"questions.js","sourceRoot":"","sources":["../../src/wizard/questions.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,IAAI,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,mBAAmB,CAAC;AACtE,OAAO,EAAE,cAAc,EAAqB,MAAM,cAAc,CAAC;AACjE,OAAO,EAAE,iBAAiB,EAAE,MAAM,0BAA0B,CAAC;AAgB7D,MAAM,qBAAqB,GAA2B;IACpD,SAAS,EAAE,wFAAwF;IACnG,KAAK,EAAE,iGAAiG;IACxG,gBAAgB,EAAE,+FAA+F;IACjH,iBAAiB,EAAE,4GAA4G;IAC/H,kBAAkB,EAAE,kFAAkF;CACvG,CAAC;AAEF,MAAM,CAAC,KAAK,UAAU,kBAAkB;IACtC,MAAM,IAAI,GAAG,MAAM,MAAM,CAAwB;QAC/C,OAAO,EAAE,8BAA8B;QACvC,OAAO,EAAE;YACP,EAAE,IAAI,EAAE,4CAA4C,EAAE,KAAK,EAAE,QAAQ,EAAE;YACvE,EAAE,IAAI,EAAE,6CAA6C,EAAE,KAAK,EAAE,UAAU,EAAE;SAC3E;QACD,OAAO,EAAE,QAAQ;KAClB,CAAC,CAAC;IAEH,IAAI,IAAI,KAAK,QAAQ;QAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC;IAEjD,MAAM,EAAE,GAAG,MAAM,MAAM,CAAS;QAC9B,OAAO,EAAE,iBAAiB;QAC1B,OAAO,EAAE,MAAM,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;YACrD,IAAI,EAAE,qBAAqB,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,GAAG,IAAI,MAAM,qBAAqB,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI;YACrF,KAAK,EAAE,IAAI;SACZ,CAAC,CAAC;KACJ,CAAC,CAAC;IAEH,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,EAAE,EAAE,CAAC;AAClC,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,SAAS,CAAC,OAAqB;IACnD,MAAM,MAAM,GACT,OAAO,CAAC,MAA6B;QACtC,CAAC,MAAM,MAAM,CAAS;YACpB,OAAO,EAAE,eAAe;YACxB,OAAO,EAAE;gBACP,EAAE,IAAI,EAAE,uCAAuC,EAAE,KAAK,EAAE,QAAQ,EAAE;gBAClE,EAAE,IAAI,EAAE,oDAAoD,EAAE,KAAK,EAAE,UAAU,EAAE;aAClF;YACD,OAAO,EAAE,QAAQ;SAClB,CAAC,CAAC,CAAC;IAEN,IAAI,SAAS,GAAG,OAAO,CAAC,MAAM,CAAC;IAC/B,IAAI,SAAS,KAAK,SAAS,EAAE,CAAC;QAC5B,SAAS,GAAG,MAAM,OAAO,CAAC;YACxB,OAAO,EAAE,sDAAsD;YAC/D,OAAO,EAAE,EAAE;SACZ,CAAC,CAAC;IACL,CAAC;IAED,MAAM,QAAQ,GAWV,EAAE,CAAC;IAEP,IAAI,MAAM,KAAK,UAAU,EAAE,CAAC;QAC1B,QAAQ,CAAC,SAAS;YAChB,OAAO,CAAC,SAAS;gBACjB,CAAC,MAAM,MAAM,CAAY;oBACvB,OAAO,EAAE,YAAY;oBACrB,OAAO,EAAE;wBACP,EAAE,IAAI,EAAE,+CAA+C,EAAE,KAAK,EAAE,OAAO,EAAE;wBACzE,EAAE,IAAI,EAAE,2BAA2B,EAAE,KAAK,EAAE,MAAM,EAAE;wBACpD,EAAE,IAAI,EAAE,oBAAoB,EAAE,KAAK,EAAE,MAAM,EAAE;qBAC9C;oBACD,OAAO,EAAE,MAAM;iBAChB,CAAC,CAAC,CAAC;QAEN,QAAQ,CAAC,YAAY;YACnB,OAAO,CAAC,YAAY;gBACpB,CAAC,MAAM,OAAO,CAAC;oBACb,OAAO,EAAE,4DAA4D;oBACrE,OAAO,EAAE,KAAK;iBACf,CAAC,CAAC,CAAC;QAEN,QAAQ,CAAC,UAAU;YACjB,OAAO,CAAC,UAAU;gBAClB,CAAC,MAAM,OAAO,CAAC;oBACb,OAAO,EAAE,sDAAsD;oBAC/D,OAAO,EAAE,KAAK;iBACf,CAAC,CAAC,CAAC;QAEN,uEAAuE;QACvE,QAAQ,CAAC,aAAa;YACpB,OAAO,CAAC,aAAa;gBACrB,CAAC,MAAM,MAAM,CAAgB;oBAC3B,OAAO,EAAE,iBAAiB;oBAC1B,OAAO,EAAE;wBACP,EAAE,IAAI,EAAE,oDAAoD,EAAE,KAAK,EAAE,SAAS,EAAE;wBAChF,EAAE,IAAI,EAAE,8CAA8C,EAAE,KAAK,EAAE,WAAW,EAAE;qBAC7E;oBACD,OAAO,EAAE,SAAS;iBACnB,CAAC,CAAC,CAAC;QAEN,QAAQ,CAAC,SAAS;YAChB,OAAO,CAAC,SAAS;gBACjB,CAAC,MAAM,MAAM,CAAkB;oBAC7B,OAAO,EAAE,aAAa;oBACtB,OAAO,EAAE;wBACP,EAAE,IAAI,EAAE,+CAA+C,EAAE,KAAK,EAAE,MAAM,EAAE;wBACxE,EAAE,IAAI,EAAE,mDAAmD,EAAE,KAAK,EAAE,OAAO,EAAE;qBAC9E;oBACD,OAAO,EAAE,MAAM;iBAChB,CAAC,CAAC,CAAC;QAEN,QAAQ,CAAC,aAAa;YACpB,OAAO,CAAC,aAAa;gBACrB,CAAC,MAAM,MAAM,CAAsB;oBACjC,OAAO,EAAE,iBAAiB;oBAC1B,OAAO,EAAE;wBACP,EAAE,IAAI,EAAE,+CAA+C,EAAE,KAAK,EAAE,MAAM,EAAE;wBACxE,EAAE,IAAI,EAAE,mDAAmD,EAAE,KAAK,EAAE,SAAS,EAAE;qBAChF;oBACD,OAAO,EAAE,MAAM;iBAChB,CAAC,CAAC,CAAC;QAEN,MAAM,gBAAgB,GACpB,QAAQ,CAAC,SAAS,KAAK,MAAM,IAAI,QAAQ,CAAC,SAAS,KAAK,MAAM,CAAC;QACjE,IAAI,gBAAgB,EAAE,CAAC;YACrB,QAAQ,CAAC,UAAU;gBACjB,OAAO,CAAC,UAAU;oBAClB,CAAC,MAAM,MAAM,CAAa;wBACxB,OAAO,EAAE,mBAAmB;wBAC5B,OAAO,EAAE;4BACP,EAAE,IAAI,EAAE,+CAA+C,EAAE,KAAK,EAAE,OAAO,EAAE;4BACzE,EAAE,IAAI,EAAE,qDAAqD,EAAE,KAAK,EAAE,cAAc,EAAE;yBACvF;wBACD,OAAO,EAAE,OAAO;qBACjB,CAAC,CAAC,CAAC;QACR,CAAC;aAAM,CAAC;YACN,QAAQ,CAAC,UAAU,GAAG,OAAO,CAAC,UAAU,IAAI,OAAO,CAAC;QACtD,CAAC;QAED,uEAAuE;QACvE,QAAQ,CAAC,MAAM;YACb,OAAO,CAAC,MAAM;gBACd,CAAC,MAAM,MAAM,CAAe;oBAC1B,OAAO,EAAE,SAAS;oBAClB,OAAO,EAAE;wBACP,EAAE,IAAI,EAAE,6CAA6C,EAAE,KAAK,EAAE,WAAW,EAAE;wBAC3E,EAAE,IAAI,EAAE,iDAAiD,EAAE,KAAK,EAAE,MAAM,EAAE;qBAC3E;oBACD,OAAO,EAAE,WAAW;iBACrB,CAAC,CAAC,CAAC;QAEN,QAAQ,CAAC,aAAa;YACpB,OAAO,CAAC,aAAa;gBACrB,CAAC,MAAM,MAAM,CAAsB;oBACjC,OAAO,EAAE,iBAAiB;oBAC1B,OAAO,EAAE;wBACP,EAAE,IAAI,EAAE,0BAA0B,EAAE,KAAK,EAAE,MAAM,EAAE;wBACnD,EAAE,IAAI,EAAE,kDAAkD,EAAE,KAAK,EAAE,QAAQ,EAAE;qBAC9E;oBACD,OAAO,EAAE,MAAM;iBAChB,CAAC,CAAC,CAAC;QAEN,QAAQ,CAAC,OAAO;YACd,OAAO,CAAC,OAAO;gBACf,CAAC,MAAM,MAAM,CAAgB;oBAC3B,OAAO,EAAE,UAAU;oBACnB,OAAO,EAAE;wBACP,EAAE,IAAI,EAAE,sCAAsC,EAAE,KAAK,EAAE,MAAM,EAAE;wBAC/D,EAAE,IAAI,EAAE,yDAAyD,EAAE,KAAK,EAAE,UAAU,EAAE;qBACvF;oBACD,OAAO,EAAE,MAAM;iBAChB,CAAC,CAAC,CAAC;IACR,CAAC;IAED,OAAO,cAAc,CAAC,EAAE,GAAG,OAAO,EAAE,GAAG,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC,CAAC;AAChF,CAAC"}

package/package.json

@@ -0,0 +1,52 @@
+{
+  "name": "@mcp-rune/create",
+  "version": "0.11.0",
+  "description": "Scaffolder for mcp-rune-based MCP servers",
+  "type": "module",
+  "bin": {
+    "rune": "./bin/rune.js",
+    "create-mcp-rune": "./bin/rune.js"
+  },
+  "main": "./dist/index.js",
+  "types": "./dist/index.d.ts",
+  "engines": {
+    "node": ">=22"
+  },
+  "files": [
+    "bin/",
+    "dist/",
+    "templates/",
+    "README.md"
+  ],
+  "publishConfig": {
+    "registry": "https://registry.npmjs.org",
+    "access": "public"
+  },
+  "scripts": {
+    "build": "tsc",
+    "build:watch": "tsc --watch",
+    "build:check": "tsc --noEmit",
+    "dev": "tsx src/index.ts",
+    "test": "vitest run",
+    "test:watch": "vitest",
+    "test:coverage": "vitest run --coverage",
+    "prepublishOnly": "npm run build"
+  },
+  "dependencies": {
+    "@clack/prompts": "^1.5.1",
+    "boxen": "^8.0.1",
+    "commander": "^12.1.0",
+    "ejs": "^3.1.10",
+    "execa": "^9.5.2",
+    "picocolors": "^1.1.1",
+    "terminal-link": "^5.0.0",
+    "tiged": "^2.12.8"
+  },
+  "devDependencies": {
+    "@types/ejs": "^3.1.5",
+    "@types/node": "^24.12.4",
+    "tsx": "^4.22.3",
+    "typescript": "^5.9.3",
+    "vitest": "^4.1.7"
+  }
+}

package/templates/advanced/.env.example.ejs

@@ -0,0 +1,82 @@
+# <%= projectName %> — environment configuration
+#
+# Copy to .env and fill in. Never commit secrets.
+
+<% if (hasStdio) { -%>
+# =============================================================================
+# Stdio transport (local development)
+# =============================================================================
+# Pre-authenticated token used by stdio for tool API calls.
+ACCESS_TOKEN=demo-token
+
+<% } -%>
+<% if (hasHttp) { -%>
+# =============================================================================
+# HTTP transport (<%= useStaticTokenAuth ? 'static token' : 'OAuth2' %> / remote)
+# =============================================================================
+PORT=4100
+BASE_URL=http://localhost:4100
+# CORS_ORIGINS=https://claude.ai,https://chatgpt.com
+
+<% if (useStaticTokenAuth) { -%>
+# Static bearer token required by HTTP clients
+HTTP_ACCESS_TOKEN=
+
+<% } else { -%>
+# OAuth2 — register a client in your auth server and paste values here
+OAUTH_SERVER_URL=http://localhost:4000
+OAUTH_CLIENT_ID=
+OAUTH_CLIENT_SECRET=
+OAUTH_SCOPES=read write
+
+<% } -%>
+<% } -%>
+# =============================================================================
+# API backend (the system your MCP tools call)
+# =============================================================================
+API_URL=http://localhost:4001/api/v1
+
+# =============================================================================
+# Tool exposure profile
+# =============================================================================
+# full | chat | agent | classify — see src/profiles.js
+MCP_PROFILE=full
+
+<% if (withAnalysis) { -%>
+# =============================================================================
+# Analysis module (PostgreSQL + pgvector)
+# =============================================================================
+# Connection string for the docker-compose pgvector instance shipped with this project.
+DATABASE_URL=postgres://postgres:dev@localhost:5544/<%= projectName %>
+ANALYSIS_ENABLED=true
+
+<% } else { -%>
+# =============================================================================
+# Database (optional — enables OAuth token persistence)
+# =============================================================================
+# DATABASE_URL=postgres://user:pass@localhost:5432/<%= projectName %>
+# ANALYSIS_ENABLED=false
+
+<% } -%>
+<% if (withDomain) { -%>
+# =============================================================================
+# Domain workflows
+# =============================================================================
+DOMAIN_ENABLED=true
+
+<% } -%>
+# =============================================================================
+# Observability (optional)
+# =============================================================================
+<% if (useSentry) { -%>
+SENTRY_DSN=
+<% } else { -%>
+# SENTRY_DSN=
+<% } -%>
+<% if (useLangfuse) { -%>
+LANGFUSE_PUBLIC_KEY=
+LANGFUSE_SECRET_KEY=
+<% } else { -%>
+# LANGFUSE_PUBLIC_KEY=
+# LANGFUSE_SECRET_KEY=
+<% } -%>

package/templates/advanced/.node-version

@@ -0,0 +1 @@
+24

package/templates/advanced/README.md.ejs

@@ -0,0 +1,76 @@
+# <%= projectName %>
+
+MCP server scaffolded with [`@mcp-rune/create`](https://github.com/mcp-rune/mcp-rune-cli) (advanced preset).
+
+## Run
+
+```bash
+cp .env.example .env
+# fill in OAUTH_*, etc.
+npm install
+<% if (hasHttp) { -%>
+npm run start              # production default — HTTP + OAuth (alias for start:remote)
+<% } else { -%>
+npm run start              # production default — stdio (alias for start:local)
+<% } -%>
+<% if (hasStdio) { -%>
+npm run start:local        # stdio (for Claude Code, Cursor, etc.)
+<% } -%>
+<% if (hasHttp) { -%>
+npm run start:remote       # HTTP + OAuth
+<% } -%>
+npm run test               # vitest smoke tests
+npm run typecheck          # tsc --noEmit
+npm run inspect            # open the MCP Inspector pre-wired
+```
+
+<% if (withAnalysis) { -%>
+## Analysis module
+
+This project ships with a `docker-compose.yml` for Postgres + pgvector. Bring it up before running the server:
+
+```bash
+npm run db:up              # docker compose up -d + migrations
+npm run db:down            # tear down
+```
+
+`ANALYSIS_ENABLED=true` in `.env` exposes the analysis tools (semantic search, stratified sampling, ingestion).
+
+<% } -%>
+## Profiles
+
+Set `MCP_PROFILE` to control the exposed tool surface (same binary, different shape):
+
+| Profile    | Tools                              | Apps     |
+|------------|------------------------------------|----------|
+| `full`     | everything                         | enabled  |
+| `chat`     | hides raw-JSON data tools          | enabled  |
+| `agent`    | all                                | disabled |
+| `classify` | only `update_model`                | disabled |
+
+See `src/profiles.js`.
+
+## Layout
+
+```
+src/
+├── servers/
+│   ├── local.js          stdio entry point
+│   └── remote.js         HTTP + OAuth entry point
+├── config.js             startup phases (identity → config → DB → tools)
+├── db.js                 shared pg.Pool
+├── profiles.js           tool exposure profiles
+├── models/               domain models
+├── prompts/              prompt classes (auto-derived from models)
+├── tools/                tool registry
+<% if (withDomain) { -%>
+├── domain/               workflows + business rules
+<% } -%>
+└── scripts/
+    └── db-migrate.js     apply mcp-rune migrations
+```
+
+## Useful links
+
+- [mcp-rune docs](https://github.com/mcp-rune/mcp-rune)
+- MCP Inspector: `npm run inspect`

package/templates/advanced/__only_if_hasHttp__/src/servers/remote.ts.ejs

@@ -0,0 +1,36 @@
+#!/usr/bin/env node
+import path from 'node:path'
+import { fileURLToPath } from 'node:url'
+
+import dotenv from 'dotenv'
+
+const __dirname = path.dirname(fileURLToPath(import.meta.url))
+
+dotenv.config({ path: path.join(__dirname, '../..', '.env'), quiet: true })
+
+const { HttpServer } = await import('@mcp-rune/mcp-rune/server')
+<% if (useStaticTokenAuth) { -%>
+const { config, mcpConfig } = await import('../config.js')
+<% } else { -%>
+const { config, createOAuthService, mcpConfig } = await import('../config.js')
+<% } -%>
+
+const port = config.transport.remote.port
+const baseUrl = config.transport.remote.baseUrl ?? `http://localhost:${port}`
+const isProduction = config.http.environment === 'production'
+
+const server = new HttpServer({
+  port,
+  baseUrl,
+  pathPrefix: config.transport.remote.pathPrefix,
+<% if (useStaticTokenAuth) { -%>
+  accessToken: config.transport.remote.accessToken,
+<% } else { -%>
+  oauth: createOAuthService({ redirectUri: `${baseUrl}/oauth/callback` }),
+<% } -%>
+  mcp: mcpConfig,
+  isProduction,
+  corsOrigins: config.http.corsOrigins
+})
+
+server.start()

package/templates/advanced/__only_if_hasStdio__/src/servers/local.ts

@@ -0,0 +1,30 @@
+#!/usr/bin/env node
+import path from 'node:path'
+import { fileURLToPath } from 'node:url'
+
+import dotenv from 'dotenv'
+
+const __dirname = path.dirname(fileURLToPath(import.meta.url))
+
+// Load .env BEFORE importing modules that read process.env at module load.
+// quiet: dotenv v17+ otherwise prints to stdout, which corrupts the MCP stdio stream.
+dotenv.config({ path: path.join(__dirname, '../..', '.env'), quiet: true })
+
+const { StdioServer } = await import('@mcp-rune/mcp-rune/server')
+const { config, mcpConfig } = await import('../config.js')
+
+const accessToken = config.transport.local.accessToken
+if (!accessToken) {
+  console.error('ACCESS_TOKEN env var is required for the stdio server.')
+  process.exit(1)
+}
+
+const server = new StdioServer({
+  accessToken,
+  mcp: mcpConfig
+})
+
+server.start().catch((err: Error) => {
+  console.error('Server startup failed:', err.stack ?? err.message)
+  process.exit(1)
+})

package/templates/advanced/__only_if_useAxiosClient__/src/api/axios-client.ts

@@ -0,0 +1,74 @@
+/**
+ * AxiosApiClient — starter scaffolded by `rune new --api-client axios`.
+ *
+ * Implements the framework's `ApiClient` interface on top of axios. Adapt the
+ * convention hook and error parsing for your backend's wire format.
+ */
+
+import axios, { type AxiosInstance, type AxiosResponse } from 'axios'
+import type { BaseConvention } from '@mcp-rune/mcp-rune/api-conventions'
+import type { ApiClient } from '@mcp-rune/mcp-rune/core'
+
+interface AxiosApiClientOptions {
+  baseUrl: string
+  accessToken?: string
+  convention?: BaseConvention
+}
+
+interface HttpError extends Error {
+  status?: number
+  body?: unknown
+}
+
+export class AxiosApiClient implements ApiClient {
+  private client: AxiosInstance
+  private convention?: BaseConvention
+
+  constructor({ baseUrl, accessToken, convention }: AxiosApiClientOptions) {
+    this.convention = convention
+    this.client = axios.create({
+      baseURL: baseUrl,
+      headers: {
+        Accept: 'application/json',
+        ...(accessToken ? { Authorization: `Bearer ${accessToken}` } : {})
+      }
+    })
+  }
+
+  async get(url: string, params?: Record<string, unknown>): Promise<Record<string, unknown>> {
+    return this._unwrap(this.client.get(url, { params }))
+  }
+
+  async post(url: string, data?: Record<string, unknown>): Promise<Record<string, unknown>> {
+    return this._unwrap(this.client.post(url, data))
+  }
+
+  async put(url: string, data?: Record<string, unknown>): Promise<Record<string, unknown>> {
+    return this._unwrap(this.client.put(url, data))
+  }
+
+  async patch(url: string, data?: Record<string, unknown>): Promise<Record<string, unknown>> {
+    return this._unwrap(this.client.patch(url, data))
+  }
+
+  async delete(url: string): Promise<Record<string, unknown>> {
+    return this._unwrap(this.client.delete(url))
+  }
+
+  private async _unwrap(p: Promise<AxiosResponse>): Promise<Record<string, unknown>> {
+    try {
+      const response = await p
+      return (response.data ?? {}) as Record<string, unknown>
+    } catch (raw) {
+      const err = raw as { response?: { status?: number; data?: unknown }; message?: string }
+      const messages = this.convention?.parseErrorResponse?.({
+        status: err.response?.status ?? 0,
+        data: err.response?.data
+      }) ?? [err.message ?? 'HTTP error']
+      const out: HttpError = new Error(messages.join('; '))
+      out.status = err.response?.status
+      out.body = err.response?.data
+      throw out
+    }
+  }
+}

package/templates/advanced/__only_if_useCustomApiClient__/src/api/custom-client.ts

@@ -0,0 +1,48 @@
+/**
+ * Custom ApiClient stub — scaffolded by `rune new --api-client custom`.
+ *
+ * Implement the framework's `ApiClient` interface against whatever HTTP layer
+ * (got, undici, your own pool) your backend needs. Each verb must return
+ * `Promise<Record<string, unknown>>` parsed from the response body.
+ */
+
+import type { BaseConvention } from '@mcp-rune/mcp-rune/api-conventions'
+import type { ApiClient } from '@mcp-rune/mcp-rune/core'
+
+interface CustomApiClientOptions {
+  baseUrl: string
+  accessToken?: string
+  convention?: BaseConvention
+}
+
+export class CustomApiClient implements ApiClient {
+  baseUrl: string
+  protected accessToken?: string
+  protected convention?: BaseConvention
+
+  constructor({ baseUrl, accessToken, convention }: CustomApiClientOptions) {
+    this.baseUrl = baseUrl
+    this.accessToken = accessToken
+    this.convention = convention
+  }
+
+  async get(_url: string, _params?: Record<string, unknown>): Promise<Record<string, unknown>> {
+    throw new Error('CustomApiClient.get: TODO implement')
+  }
+
+  async post(_url: string, _data?: Record<string, unknown>): Promise<Record<string, unknown>> {
+    throw new Error('CustomApiClient.post: TODO implement')
+  }
+
+  async put(_url: string, _data?: Record<string, unknown>): Promise<Record<string, unknown>> {
+    throw new Error('CustomApiClient.put: TODO implement')
+  }
+
+  async patch(_url: string, _data?: Record<string, unknown>): Promise<Record<string, unknown>> {
+    throw new Error('CustomApiClient.patch: TODO implement')
+  }
+
+  async delete(_url: string): Promise<Record<string, unknown>> {
+    throw new Error('CustomApiClient.delete: TODO implement')
+  }
+}

package/templates/advanced/__only_if_useCustomConvention__/src/conventions/custom-convention.ts

@@ -0,0 +1,64 @@
+/**
+ * Custom convention — stub scaffolded by `rune new --api-convention custom`.
+ *
+ * Extend `BaseConvention` to describe how your backend's wire format maps
+ * onto the framework's normalized shape. Fill in the three override hooks
+ * for your API: association field naming, list-response normalization,
+ * and response cleaning.
+ */
+
+import type {
+  FieldDefinition,
+  NormalizedListResponse
+} from '@mcp-rune/mcp-rune/api-conventions'
+import { BaseConvention } from '@mcp-rune/mcp-rune/api-conventions'
+import type { BelongsToAssociation, HasManyAssociation } from '@mcp-rune/mcp-rune/models'
+
+export class CustomConvention extends BaseConvention {
+  override get name(): string {
+    return 'custom'
+  }
+
+  override resolveAssociationFields(
+    relName: string,
+    relConfig: BelongsToAssociation | HasManyAssociation,
+    overrides: Record<string, Partial<FieldDefinition>> = {}
+  ): Record<string, FieldDefinition> {
+    // TODO: shape this for your backend (e.g. embedded objects, foreign keys,
+    // or a `relationships: {}` envelope).
+    const isMany = 'many' in relConfig && Boolean(relConfig.many)
+    const fieldName = isMany ? `${relName}` : `${relName}_id`
+    const field: FieldDefinition = {
+      name: fieldName,
+      type: isMany ? 'array' : 'integer',
+      required: Boolean(relConfig.required),
+      description: relConfig.description ?? `Association to ${relConfig.target_model}`,
+      ...overrides[fieldName]
+    }
+    return { [fieldName]: field }
+  }
+
+  override normalizeListResponse(
+    response: Record<string, unknown> | unknown[],
+    { page, perPage }: { page: number; perPage: number }
+  ): NormalizedListResponse {
+    // TODO: pull records + pagination metadata out of your envelope.
+    const records = Array.isArray(response) ? (response as Record<string, unknown>[]) : []
+    return {
+      records,
+      pagination: {
+        page,
+        per_page: perPage,
+        total: records.length,
+        total_pages: 1
+      }
+    }
+  }
+
+  override cleanResponse(data: unknown): unknown {
+    // TODO: strip metadata wrappers; default is identity.
+    return data
+  }
+}
+
+export const customConvention = new CustomConvention()

package/templates/advanced/__only_if_useCustomSearch__/src/api-extensions/custom-search-adapter.ts

@@ -0,0 +1,30 @@
+/**
+ * Custom search request shaper — stub scaffolded by `rune new --search-adapter custom`.
+ *
+ * Extend `SearchRequestShaper` and override `buildBody` to translate the
+ * framework's `(query, filters, pagination, config)` shape into your search
+ * endpoint's wire format (POST body, GET params, GraphQL query, etc.).
+ *
+ * Wire it into the search api-extension at the ToolRegistry construction
+ * site (see `src/tools/index.ts` `searchExtension({ shaper: customSearchAdapter })`).
+ */
+
+import { SearchRequestShaper } from '@mcp-rune/mcp-rune/api-extensions/search'
+import type { Pagination, SearchConfig } from '@mcp-rune/mcp-rune/api-extensions/search'
+
+export class CustomSearchAdapter extends SearchRequestShaper {
+  override buildBody(
+    query: string | null,
+    filters: Record<string, unknown> | undefined,
+    { page, perPage }: Pagination,
+    _searchConfig: SearchConfig
+  ): Record<string, unknown> {
+    // TODO: shape the body for your search endpoint.
+    const body: Record<string, unknown> = { page, per_page: perPage }
+    if (query) body.q = query
+    if (filters && Object.keys(filters).length > 0) body.filters = filters
+    return body
+  }
+}
+
+export const customSearchAdapter = new CustomSearchAdapter()