@msn-control/liftoff 0.10.4 → 0.11.1

package/dist/generators/standard/node.js

@@ -0,0 +1,314 @@
+import { escapeHtml } from '../common/values.js';
+import { renderStandardSchema } from './configuration.js';
+import { sourceString } from '../common/values.js';
+import { renderNodeDotenvValidation } from '../common/dotenv-validation.js';
+export function addNodeArtifacts(add, plan, context) {
+    add('node-backend-package', 'backend', ['backend', 'package.json'], renderNodePackage(plan, context));
+    add('node-backend-lock', 'backend', ['backend', 'package-lock.json'], context.npm["node-backend"].lock);
+    add('node-backend-tsconfig', 'backend', ['backend', 'tsconfig.json'], renderNodeTsconfig());
+    add('node-backend-drizzle-config', 'backend', ['backend', 'drizzle.config.ts'], renderNodeDrizzleConfig());
+    add('node-backend-config', 'backend', ['backend', 'src', 'config.ts'], renderNodeConfig(plan));
+    add('node-backend-app', 'backend', ['backend', 'src', 'app.ts'], renderNodeApp(plan));
+    add('node-backend-server', 'backend', ['backend', 'src', 'server.ts'], renderNodeServer());
+    add('node-backend-database', 'backend', ['backend', 'src', 'database.ts'], renderNodeDatabase());
+    add('node-backend-schema', 'backend', ['backend', 'src', 'db', 'schema.ts'], renderNodeSchema());
+    add('node-backend-test-health', 'backend-test', ['backend', 'test', 'health.test.ts'], renderNodeHealthTest());
+    add('node-backend-vitest-config', 'backend-test', ['backend', 'vitest.config.ts'], `import { defineConfig } from 'vitest/config';
+
+export default defineConfig({
+  test: {
+    include: ['test/**/*.test.ts']
+  }
+});
+`);
+    add('database-node-migration', 'database', ['database', 'migrations', '0000_initial.sql'], renderNodeMigration());
+    add('database-node-migration-journal', 'database', ['database', 'migrations', 'meta', '_journal.json'], renderNodeMigrationJournal());
+    add('database-node-migration-snapshot', 'database', ['database', 'migrations', 'meta', '0000_snapshot.json'], renderNodeMigrationSnapshot());
+    add('database-schema', 'database', ['database', 'models', 'schema.sql'], renderStandardSchema(plan));
+}
+export function renderNodePackage(plan, context) {
+    return context.npm["node-backend"].package;
+}
+export function renderNodeTsconfig() {
+    return JSON.stringify({
+        compilerOptions: {
+            target: 'ES2022',
+            module: 'NodeNext',
+            moduleResolution: 'NodeNext',
+            rootDir: 'src',
+            outDir: 'dist',
+            strict: true,
+            esModuleInterop: true,
+            skipLibCheck: true
+        },
+        include: ['src/**/*.ts']
+    }, null, 2);
+}
+export function renderNodeDrizzleConfig() {
+    return `import { defineConfig } from 'drizzle-kit';
+import { loadConfig } from './src/config.js';
+
+export default defineConfig({
+  dialect: 'postgresql',
+  schema: './src/db/schema.ts',
+  out: '../database/migrations',
+  dbCredentials: {
+    url: loadConfig().databaseUrl
+  }
+});
+`;
+}
+export function renderNodeConfig(plan) {
+    return `import { readFileSync } from 'node:fs';
+import { fileURLToPath } from 'node:url';
+import { parseEnv } from 'node:util';
+
+export interface AppConfig {
+  appName: string;
+  appEnv: string;
+  port: number;
+  cloudProvider: string;
+  azureRegion: string;
+  databaseUrl: string;
+  redisUrl: string;
+  messagingTransport: string;
+  blobEndpoint?: string;
+  corsAllowedOrigins: string[];
+}
+
+let cachedConfig: AppConfig | undefined;
+
+${renderNodeDotenvValidation()}
+
+export function loadConfig(env: NodeJS.ProcessEnv = process.env): AppConfig {
+  if (env === process.env && cachedConfig) return cachedConfig;
+  const selectedFile = env.LIFTOFF_ENV_FILE;
+  const file = selectedFile ?? fileURLToPath(new URL('../../.env', import.meta.url));
+  let local: Record<string, string | undefined> = {};
+  try {
+    const content = new TextDecoder('utf-8', { fatal: true }).decode(readFileSync(file));
+    validateDotenv(content);
+    local = parseEnv(content);
+  } catch (error) {
+    if (selectedFile !== undefined || (error as NodeJS.ErrnoException).code !== 'ENOENT') {
+      throw new Error('Unable to read runtime configuration file: ' + file, { cause: error });
+    }
+  }
+  const resolved = { ...local, ...Object.fromEntries(Object.entries(env).filter(([, value]) => value !== undefined)) };
+  const databaseUrl = resolved.DATABASE_URL;
+  const redisUrl = resolved.REDIS_URL;
+  if (!databaseUrl || !redisUrl) {
+    throw new Error('DATABASE_URL and REDIS_URL are required.');
+  }
+  const port = Number(resolved.PORT ?? '8000');
+  if (!Number.isInteger(port) || port < 1 || port > 65535) {
+    throw new Error('PORT must be an integer from 1 to 65535.');
+  }
+  const config: AppConfig = {
+    appName: resolved.APP_NAME ?? ${sourceString(plan.projectName)},
+    appEnv: resolved.APP_ENV ?? 'dev',
+    port,
+    cloudProvider: resolved.CLOUD_PROVIDER ?? '${plan.provider.id}',
+    azureRegion: resolved.AZURE_REGION ?? '${plan.region.slug}',
+    databaseUrl,
+    redisUrl,
+    messagingTransport: resolved.MESSAGING_TRANSPORT ?? 'redis-streams',
+    blobEndpoint: resolved.BLOB_ENDPOINT || undefined,
+    corsAllowedOrigins: (resolved.CORS_ALLOWED_ORIGINS ?? 'http://localhost:5173')
+      .split(',').map((origin) => origin.trim()).filter(Boolean)
+  };
+  if (env === process.env) cachedConfig = config;
+  return config;
+}
+`;
+}
+export function renderNodeApp(plan) {
+    const scalarPage = `<!doctype html><html><head><title>${escapeHtml(plan.projectName)} API</title></head><body><script id="api-reference" data-url="/openapi.json"></script><script src="https://cdn.jsdelivr.net/npm/@scalar/api-reference"></script></body></html>`;
+    return `import cors from '@fastify/cors';
+import swagger from '@fastify/swagger';
+import Fastify from 'fastify';
+import { loadConfig, type AppConfig } from './config.js';
+
+const scalarPage = ${sourceString(scalarPage)};
+
+export async function buildApp(config: AppConfig = loadConfig()) {
+  const app = Fastify({ logger: true });
+  await app.register(cors, { origin: config.corsAllowedOrigins });
+  await app.register(swagger, {
+    openapi: {
+      info: { title: ${sourceString(`${plan.projectName} API`)}, version: '0.1.0' }
+    }
+  });
+
+  const statusSchema = {
+    response: {
+      200: {
+        type: 'object',
+        required: ['status'],
+        properties: { status: { type: 'string' } }
+      }
+    }
+  } as const;
+
+  app.get('/health', { schema: statusSchema }, async () => ({ status: 'ok' }));
+  app.get('/ready', { schema: statusSchema }, async () => ({ status: 'ready' }));
+  app.get('/api', async () => ({ name: ${sourceString(plan.projectName)}, stack: 'node-fastify' }));
+  app.get('/openapi.json', async () => app.swagger());
+  app.get('/scalar', async (_request, reply) => reply.type('text/html').send(scalarPage));
+  return app;
+}
+`;
+}
+export function renderNodeServer() {
+    return `import { buildApp } from './app.js';
+import { loadConfig } from './config.js';
+
+const config = loadConfig();
+const app = await buildApp(config);
+
+try {
+  await app.listen({ host: '0.0.0.0', port: config.port });
+} catch (error) {
+  app.log.error(error);
+  process.exitCode = 1;
+}
+`;
+}
+export function renderNodeDatabase() {
+    return `import { drizzle } from 'drizzle-orm/node-postgres';
+import { Pool } from 'pg';
+import { loadConfig } from './config.js';
+
+const pool = new Pool({ connectionString: loadConfig().databaseUrl });
+export const database = drizzle(pool);
+`;
+}
+export function renderNodeSchema() {
+    return `import { integer, pgTable, timestamp, varchar } from 'drizzle-orm/pg-core';
+
+export const appRecords = pgTable('app_records', {
+  id: integer('id').primaryKey().generatedAlwaysAsIdentity(),
+  name: varchar('name', { length: 255 }).notNull(),
+  createdAt: timestamp('created_at', { withTimezone: true }).defaultNow().notNull()
+});
+`;
+}
+export function renderNodeHealthTest() {
+    return `import { describe, expect, it } from 'vitest';
+import { buildApp } from '../src/app.js';
+import { loadConfig } from '../src/config.js';
+
+describe('health endpoints', () => {
+  it('reports healthy and ready', async () => {
+    const app = await buildApp(loadConfig({
+      DATABASE_URL: 'postgresql://localhost/test',
+      REDIS_URL: 'redis://localhost:6379/0',
+      CORS_ALLOWED_ORIGINS: 'http://localhost:5173'
+    }));
+    const health = await app.inject({ method: 'GET', url: '/health' });
+    const ready = await app.inject({ method: 'GET', url: '/ready' });
+    expect(health.json()).toEqual({ status: 'ok' });
+    expect(ready.json()).toEqual({ status: 'ready' });
+    const preflight = await app.inject({
+      method: 'OPTIONS',
+      url: '/api',
+      headers: {
+        origin: 'http://localhost:5173',
+        'access-control-request-method': 'GET'
+      }
+    });
+    expect(preflight.statusCode).toBe(204);
+    expect(preflight.headers['access-control-allow-origin']).toBe('http://localhost:5173');
+    await app.close();
+  });
+});
+`;
+}
+export function renderNodeMigration() {
+    return `CREATE TABLE app_records (
+  id integer GENERATED ALWAYS AS IDENTITY PRIMARY KEY,
+  name varchar(255) NOT NULL,
+  created_at timestamptz NOT NULL DEFAULT now()
+);
+`;
+}
+export function renderNodeMigrationJournal() {
+    return JSON.stringify({
+        version: '7',
+        dialect: 'postgresql',
+        entries: [
+            {
+                idx: 0,
+                version: '7',
+                when: 0,
+                tag: '0000_initial',
+                breakpoints: true
+            }
+        ]
+    }, null, 2);
+}
+export function renderNodeMigrationSnapshot() {
+    return JSON.stringify({
+        id: '00000000-0000-4000-8000-000000000001',
+        prevId: '00000000-0000-0000-0000-000000000000',
+        version: '7',
+        dialect: 'postgresql',
+        tables: {
+            'public.app_records': {
+                name: 'app_records',
+                schema: '',
+                columns: {
+                    id: {
+                        name: 'id',
+                        type: 'integer',
+                        primaryKey: true,
+                        notNull: true,
+                        identity: {
+                            type: 'always',
+                            name: 'app_records_id_seq',
+                            schema: 'public',
+                            increment: '1',
+                            startWith: '1',
+                            minValue: '1',
+                            maxValue: '2147483647',
+                            cache: '1',
+                            cycle: false
+                        }
+                    },
+                    name: {
+                        name: 'name',
+                        type: 'varchar(255)',
+                        primaryKey: false,
+                        notNull: true
+                    },
+                    created_at: {
+                        name: 'created_at',
+                        type: 'timestamp with time zone',
+                        primaryKey: false,
+                        notNull: true,
+                        default: 'now()'
+                    }
+                },
+                indexes: {},
+                foreignKeys: {},
+                compositePrimaryKeys: {},
+                uniqueConstraints: {},
+                policies: {},
+                checkConstraints: {},
+                isRLSEnabled: false
+            }
+        },
+        enums: {},
+        schemas: {},
+        sequences: {},
+        roles: {},
+        policies: {},
+        views: {},
+        _meta: {
+            columns: {},
+            schemas: {},
+            tables: {}
+        }
+    }, null, 2);
+}
+//# sourceMappingURL=node.js.map

package/dist/generators/standard/node.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"node.js","sourceRoot":"","sources":["../../../src/generators/standard/node.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,UAAU,EAAE,MAAM,qBAAqB,CAAC;AAIjD,OAAO,EAAE,oBAAoB,EAAE,MAAM,oBAAoB,CAAC;AAC1D,OAAO,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AACnD,OAAO,EAAE,0BAA0B,EAAE,MAAM,gCAAgC,CAAC;AAG5E,MAAM,UAAU,gBAAgB,CAAC,GAAgB,EAAE,IAA4B,EAAE,OAAyB;IACxG,GAAG,CAAC,sBAAsB,EAAE,SAAS,EAAE,CAAC,SAAS,EAAE,cAAc,CAAC,EAAE,iBAAiB,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC,CAAC;IACtG,GAAG,CAAC,mBAAmB,EAAE,SAAS,EAAE,CAAC,SAAS,EAAE,mBAAmB,CAAC,EAAE,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC,IAAI,CAAC,CAAC;IACxG,GAAG,CAAC,uBAAuB,EAAE,SAAS,EAAE,CAAC,SAAS,EAAE,eAAe,CAAC,EAAE,kBAAkB,EAAE,CAAC,CAAC;IAC5F,GAAG,CAAC,6BAA6B,EAAE,SAAS,EAAE,CAAC,SAAS,EAAE,mBAAmB,CAAC,EAAE,uBAAuB,EAAE,CAAC,CAAC;IAC3G,GAAG,CAAC,qBAAqB,EAAE,SAAS,EAAE,CAAC,SAAS,EAAE,KAAK,EAAE,WAAW,CAAC,EAAE,gBAAgB,CAAC,IAAI,CAAC,CAAC,CAAC;IAC/F,GAAG,CAAC,kBAAkB,EAAE,SAAS,EAAE,CAAC,SAAS,EAAE,KAAK,EAAE,QAAQ,CAAC,EAAE,aAAa,CAAC,IAAI,CAAC,CAAC,CAAC;IACtF,GAAG,CAAC,qBAAqB,EAAE,SAAS,EAAE,CAAC,SAAS,EAAE,KAAK,EAAE,WAAW,CAAC,EAAE,gBAAgB,EAAE,CAAC,CAAC;IAC3F,GAAG,CAAC,uBAAuB,EAAE,SAAS,EAAE,CAAC,SAAS,EAAE,KAAK,EAAE,aAAa,CAAC,EAAE,kBAAkB,EAAE,CAAC,CAAC;IACjG,GAAG,CAAC,qBAAqB,EAAE,SAAS,EAAE,CAAC,SAAS,EAAE,KAAK,EAAE,IAAI,EAAE,WAAW,CAAC,EAAE,gBAAgB,EAAE,CAAC,CAAC;IACjG,GAAG,CAAC,0BAA0B,EAAE,cAAc,EAAE,CAAC,SAAS,EAAE,MAAM,EAAE,gBAAgB,CAAC,EAAE,oBAAoB,EAAE,CAAC,CAAC;IAC/G,GAAG,CAAC,4BAA4B,EAAE,cAAc,EAAE,CAAC,SAAS,EAAE,kBAAkB,CAAC,EAAE;;;;;;;CAOpF,CAAC,CAAC;IACD,GAAG,CAAC,yBAAyB,EAAE,UAAU,EAAE,CAAC,UAAU,EAAE,YAAY,EAAE,kBAAkB,CAAC,EAAE,mBAAmB,EAAE,CAAC,CAAC;IAClH,GAAG,CAAC,iCAAiC,EAAE,UAAU,EAAE,CAAC,UAAU,EAAE,YAAY,EAAE,MAAM,EAAE,eAAe,CAAC,EAAE,0BAA0B,EAAE,CAAC,CAAC;IACtI,GAAG,CAAC,kCAAkC,EAAE,UAAU,EAAE,CAAC,UAAU,EAAE,YAAY,EAAE,MAAM,EAAE,oBAAoB,CAAC,EAAE,2BAA2B,EAAE,CAAC,CAAC;IAC7I,GAAG,CAAC,iBAAiB,EAAE,UAAU,EAAE,CAAC,UAAU,EAAE,QAAQ,EAAE,YAAY,CAAC,EAAE,oBAAoB,CAAC,IAAI,CAAC,CAAC,CAAC;AACvG,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,IAA4B,EAAE,OAAyB;IACvF,OAAO,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC,OAAO,CAAC;AAC7C,CAAC;AAED,MAAM,UAAU,kBAAkB;IAChC,OAAO,IAAI,CAAC,SAAS,CAAC;QACpB,eAAe,EAAE;YACf,MAAM,EAAE,QAAQ;YAChB,MAAM,EAAE,UAAU;YAClB,gBAAgB,EAAE,UAAU;YAC5B,OAAO,EAAE,KAAK;YACd,MAAM,EAAE,MAAM;YACd,MAAM,EAAE,IAAI;YACZ,eAAe,EAAE,IAAI;YACrB,YAAY,EAAE,IAAI;SACnB;QACD,OAAO,EAAE,CAAC,aAAa,CAAC;KACzB,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;AACd,CAAC;AAED,MAAM,UAAU,uBAAuB;IACrC,OAAO;;;;;;;;;;;CAWR,CAAC;AACF,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,IAA4B;IAC3D,OAAO;;;;;;;;;;;;;;;;;;;EAmBP,0BAA0B,EAAE;;;;;;;;;;;;;;;;;;;;;;;;;;;oCA2BM,YAAY,CAAC,IAAI,CAAC,WAAW,CAAC;;;iDAGjB,IAAI,CAAC,QAAQ,CAAC,EAAE;6CACpB,IAAI,CAAC,MAAM,CAAC,IAAI;;;;;;;;;;;CAW5D,CAAC;AACF,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,IAA4B;IACxD,MAAM,UAAU,GAAG,qCAAqC,UAAU,CAAC,IAAI,CAAC,WAAW,CAAC,gLAAgL,CAAC;IACrQ,OAAO;;;;;qBAKY,YAAY,CAAC,UAAU,CAAC;;;;;;;uBAOtB,YAAY,CAAC,GAAG,IAAI,CAAC,WAAW,MAAM,CAAC;;;;;;;;;;;;;;;;yCAgBrB,YAAY,CAAC,IAAI,CAAC,WAAW,CAAC;;;;;CAKtE,CAAC;AACF,CAAC;AAED,MAAM,UAAU,gBAAgB;IAC9B,OAAO;;;;;;;;;;;;CAYR,CAAC;AACF,CAAC;AAED,MAAM,UAAU,kBAAkB;IAChC,OAAO;;;;;;CAMR,CAAC;AACF,CAAC;AAED,MAAM,UAAU,gBAAgB;IAC9B,OAAO;;;;;;;CAOR,CAAC;AACF,CAAC;AAED,MAAM,UAAU,oBAAoB;IAClC,OAAO;;;;;;;;;;;;;;;;;;;;;;;;;;;;CA4BR,CAAC;AACF,CAAC;AAED,MAAM,UAAU,mBAAmB;IACjC,OAAO;;;;;CAKR,CAAC;AACF,CAAC;AAED,MAAM,UAAU,0BAA0B;IACxC,OAAO,IAAI,CAAC,SAAS,CAAC;QACpB,OAAO,EAAE,GAAG;QACZ,OAAO,EAAE,YAAY;QACrB,OAAO,EAAE;YACP;gBACE,GAAG,EAAE,CAAC;gBACN,OAAO,EAAE,GAAG;gBACZ,IAAI,EAAE,CAAC;gBACP,GAAG,EAAE,cAAc;gBACnB,WAAW,EAAE,IAAI;aAClB;SACF;KACF,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;AACd,CAAC;AAED,MAAM,UAAU,2BAA2B;IACzC,OAAO,IAAI,CAAC,SAAS,CAAC;QACpB,EAAE,EAAE,sCAAsC;QAC1C,MAAM,EAAE,sCAAsC;QAC9C,OAAO,EAAE,GAAG;QACZ,OAAO,EAAE,YAAY;QACrB,MAAM,EAAE;YACN,oBAAoB,EAAE;gBACpB,IAAI,EAAE,aAAa;gBACnB,MAAM,EAAE,EAAE;gBACV,OAAO,EAAE;oBACP,EAAE,EAAE;wBACF,IAAI,EAAE,IAAI;wBACV,IAAI,EAAE,SAAS;wBACf,UAAU,EAAE,IAAI;wBAChB,OAAO,EAAE,IAAI;wBACb,QAAQ,EAAE;4BACR,IAAI,EAAE,QAAQ;4BACd,IAAI,EAAE,oBAAoB;4BAC1B,MAAM,EAAE,QAAQ;4BAChB,SAAS,EAAE,GAAG;4BACd,SAAS,EAAE,GAAG;4BACd,QAAQ,EAAE,GAAG;4BACb,QAAQ,EAAE,YAAY;4BACtB,KAAK,EAAE,GAAG;4BACV,KAAK,EAAE,KAAK;yBACb;qBACF;oBACD,IAAI,EAAE;wBACJ,IAAI,EAAE,MAAM;wBACZ,IAAI,EAAE,cAAc;wBACpB,UAAU,EAAE,KAAK;wBACjB,OAAO,EAAE,IAAI;qBACd;oBACD,UAAU,EAAE;wBACV,IAAI,EAAE,YAAY;wBAClB,IAAI,EAAE,0BAA0B;wBAChC,UAAU,EAAE,KAAK;wBACjB,OAAO,EAAE,IAAI;wBACb,OAAO,EAAE,OAAO;qBACjB;iBACF;gBACD,OAAO,EAAE,EAAE;gBACX,WAAW,EAAE,EAAE;gBACf,oBAAoB,EAAE,EAAE;gBACxB,iBAAiB,EAAE,EAAE;gBACrB,QAAQ,EAAE,EAAE;gBACZ,gBAAgB,EAAE,EAAE;gBACpB,YAAY,EAAE,KAAK;aACpB;SACF;QACD,KAAK,EAAE,EAAE;QACT,OAAO,EAAE,EAAE;QACX,SAAS,EAAE,EAAE;QACb,KAAK,EAAE,EAAE;QACT,QAAQ,EAAE,EAAE;QACZ,KAAK,EAAE,EAAE;QACT,KAAK,EAAE;YACL,OAAO,EAAE,EAAE;YACX,OAAO,EAAE,EAAE;YACX,MAAM,EAAE,EAAE;SACX;KACF,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;AACd,CAAC"}

package/dist/generators/standard/python.d.ts

@@ -0,0 +1,18 @@
+import type { GeneratorContext as ResolvedGeneratorContext } from '../context.js';
+type GeneratorContext = {
+    python: Pick<ResolvedGeneratorContext['python'], 'standard'>;
+};
+import type { AddArtifact } from '../../template-types.js';
+import type { StandardApiProjectPlan } from '../../domain/project/contracts.js';
+export declare function addPythonArtifacts(add: AddArtifact, plan: StandardApiProjectPlan, context: GeneratorContext): void;
+export declare function renderPythonPyproject(plan: StandardApiProjectPlan, context: GeneratorContext): string;
+export declare function renderPythonMain(plan: StandardApiProjectPlan): string;
+export declare function renderPythonHealthRoutes(): string;
+export declare function renderPythonAuthDependency(): string;
+export declare function renderPythonSettings(plan: StandardApiProjectPlan): string;
+export declare function renderPythonLogging(): string;
+export declare function renderPythonHealthTest(): string;
+export declare function renderAlembicIni(): string;
+export declare function renderAlembicEnv(): string;
+export declare function renderPythonMigration(): string;
+export {};

package/dist/generators/standard/python.js

@@ -0,0 +1,191 @@
+import { renderStandardSchema } from './configuration.js';
+import { sourceString } from '../common/values.js';
+import { renderPythonRuntimeSettings } from '../common/python-settings.js';
+export function addPythonArtifacts(add, plan, context) {
+    add('backend-pyproject', 'backend', ['backend', 'pyproject.toml'], renderPythonPyproject(plan, context));
+    add('backend-uv-lock', 'backend', ['backend', 'uv.lock'], context.python["standard"].lock);
+    add('backend-package', 'backend', ['backend', '__init__.py'], '');
+    add('backend-api-package', 'backend', ['backend', 'apis', '__init__.py'], '');
+    add('backend-main', 'backend', ['backend', 'apis', 'main.py'], renderPythonMain(plan));
+    add('backend-health-routes', 'backend', ['backend', 'apis', 'routes', 'health.py'], renderPythonHealthRoutes());
+    add('backend-routes-package', 'backend', ['backend', 'apis', 'routes', '__init__.py'], '');
+    add('backend-auth-dependency', 'backend', ['backend', 'apis', 'dependencies', 'auth.py'], renderPythonAuthDependency());
+    add('backend-config-package', 'backend', ['backend', 'config', '__init__.py'], '');
+    add('backend-settings', 'backend', ['backend', 'config', 'settings.py'], renderPythonSettings(plan));
+    add('backend-observability', 'backend', ['backend', 'observability', 'logging.py'], renderPythonLogging());
+    add('backend-observability-package', 'backend', ['backend', 'observability', '__init__.py'], '');
+    add('backend-test-health', 'backend-test', ['backend', 'tests', 'test_health.py'], renderPythonHealthTest());
+    add('database-alembic-ini', 'database', ['database', 'alembic.ini'], renderAlembicIni());
+    add('database-alembic-env', 'database', ['database', 'migrations', 'env.py'], renderAlembicEnv());
+    add('database-initial-migration', 'database', ['database', 'migrations', 'versions', '0001_initial.py'], renderPythonMigration());
+    add('database-schema', 'database', ['database', 'models', 'schema.sql'], renderStandardSchema(plan));
+}
+export function renderPythonPyproject(plan, context) {
+    return context.python["standard"].project;
+}
+export function renderPythonMain(plan) {
+    return `from fastapi import FastAPI
+from fastapi.middleware.cors import CORSMiddleware
+
+try:
+    from scalar_fastapi import get_scalar_api_reference
+except ImportError:  # pragma: no cover - dependency is present in generated runtime
+    get_scalar_api_reference = None
+
+from backend.apis.routes import health
+from backend.config.settings import get_settings
+
+
+settings = get_settings()
+app = FastAPI(title=settings.app_name, version="0.1.0")
+app.add_middleware(
+    CORSMiddleware,
+    allow_origins=[
+        origin.strip()
+        for origin in settings.cors_allowed_origins.split(",")
+        if origin.strip()
+    ],
+    allow_methods=["*"],
+    allow_headers=["*"],
+)
+app.include_router(health.router)
+
+
+@app.get("/scalar", include_in_schema=False)
+def scalar_reference():
+    if get_scalar_api_reference is None:
+        return {"message": "Install scalar-fastapi to enable the Scalar developer portal."}
+    return get_scalar_api_reference(openapi_url=app.openapi_url, title=f"{app.title} API")
+
+
+@app.get("/api")
+def api_root():
+    return {"name": ${sourceString(plan.projectName)}, "stack": "python-fastapi"}
+`;
+}
+export function renderPythonHealthRoutes() {
+    return `from fastapi import APIRouter
+
+router = APIRouter(tags=["operations"])
+
+
+@router.get("/health")
+def health():
+    return {"status": "ok"}
+
+
+@router.get("/ready")
+def ready():
+    return {"status": "ready"}
+`;
+}
+export function renderPythonAuthDependency() {
+    return `from dataclasses import dataclass
+
+
+@dataclass(frozen=True)
+class CurrentUser:
+    subject: str = "local-developer"
+
+
+async def get_current_user() -> CurrentUser:
+    return CurrentUser()
+`;
+}
+export function renderPythonSettings(plan) {
+    return renderPythonRuntimeSettings(plan);
+}
+export function renderPythonLogging() {
+    return `import logging
+
+
+def configure_logging() -> None:
+    logging.basicConfig(level=logging.INFO, format="%(asctime)s %(levelname)s %(name)s %(message)s")
+`;
+}
+export function renderPythonHealthTest() {
+    return `from fastapi.testclient import TestClient
+
+from backend.apis.main import app
+
+
+def test_health():
+    response = TestClient(app).get("/health")
+    assert response.status_code == 200
+    assert response.json()["status"] == "ok"
+
+
+def test_ready():
+    response = TestClient(app).get("/ready")
+    assert response.status_code == 200
+    assert response.json()["status"] == "ready"
+
+
+def test_cors_preflight_for_local_frontend():
+    response = TestClient(app).options(
+        "/api",
+        headers={
+            "Origin": "http://localhost:5173",
+            "Access-Control-Request-Method": "GET",
+        },
+    )
+    assert response.status_code == 200
+    assert response.headers["access-control-allow-origin"] == "http://localhost:5173"
+`;
+}
+export function renderAlembicIni() {
+    return `[alembic]
+script_location = %(here)s/migrations
+sqlalchemy.url =
+`;
+}
+export function renderAlembicEnv() {
+    return `from alembic import context
+from sqlalchemy import create_engine
+
+from backend.config.settings import get_settings
+
+config = context.config
+target_metadata = None
+
+
+def run_migrations_online():
+    database_url = get_settings().database_url
+    if not database_url:
+        raise RuntimeError("DATABASE_URL is required to run migrations")
+    database_url = database_url.replace("postgresql+asyncpg://", "postgresql+psycopg://", 1)
+    database_url = database_url.replace("postgresql://", "postgresql+psycopg://", 1)
+    connectable = create_engine(database_url)
+    with connectable.connect() as connection:
+        context.configure(connection=connection, target_metadata=target_metadata)
+        with context.begin_transaction():
+            context.run_migrations()
+
+
+run_migrations_online()
+`;
+}
+export function renderPythonMigration() {
+    return `from alembic import op
+import sqlalchemy as sa
+
+revision = "0001_initial"
+down_revision = None
+branch_labels = None
+depends_on = None
+
+
+def upgrade():
+    op.create_table(
+        "app_records",
+        sa.Column("id", sa.Integer(), primary_key=True),
+        sa.Column("name", sa.String(length=255), nullable=False),
+        sa.Column("created_at", sa.DateTime(timezone=True), server_default=sa.func.now(), nullable=False),
+    )
+
+
+def downgrade():
+    op.drop_table("app_records")
+`;
+}
+//# sourceMappingURL=python.js.map

package/dist/generators/standard/python.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"python.js","sourceRoot":"","sources":["../../../src/generators/standard/python.ts"],"names":[],"mappings":"AAKA,OAAO,EAAE,oBAAoB,EAAE,MAAM,oBAAoB,CAAC;AAC1D,OAAO,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AACnD,OAAO,EAAE,2BAA2B,EAAE,MAAM,8BAA8B,CAAC;AAG3E,MAAM,UAAU,kBAAkB,CAAC,GAAgB,EAAE,IAA4B,EAAE,OAAyB;IAC1G,GAAG,CAAC,mBAAmB,EAAE,SAAS,EAAE,CAAC,SAAS,EAAE,gBAAgB,CAAC,EAAE,qBAAqB,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC,CAAC;IACzG,GAAG,CAAC,iBAAiB,EAAE,SAAS,EAAE,CAAC,SAAS,EAAE,SAAS,CAAC,EAAE,OAAO,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,CAAC;IAC3F,GAAG,CAAC,iBAAiB,EAAE,SAAS,EAAE,CAAC,SAAS,EAAE,aAAa,CAAC,EAAE,EAAE,CAAC,CAAC;IAClE,GAAG,CAAC,qBAAqB,EAAE,SAAS,EAAE,CAAC,SAAS,EAAE,MAAM,EAAE,aAAa,CAAC,EAAE,EAAE,CAAC,CAAC;IAC9E,GAAG,CAAC,cAAc,EAAE,SAAS,EAAE,CAAC,SAAS,EAAE,MAAM,EAAE,SAAS,CAAC,EAAE,gBAAgB,CAAC,IAAI,CAAC,CAAC,CAAC;IACvF,GAAG,CAAC,uBAAuB,EAAE,SAAS,EAAE,CAAC,SAAS,EAAE,MAAM,EAAE,QAAQ,EAAE,WAAW,CAAC,EAAE,wBAAwB,EAAE,CAAC,CAAC;IAChH,GAAG,CAAC,wBAAwB,EAAE,SAAS,EAAE,CAAC,SAAS,EAAE,MAAM,EAAE,QAAQ,EAAE,aAAa,CAAC,EAAE,EAAE,CAAC,CAAC;IAC3F,GAAG,CAAC,yBAAyB,EAAE,SAAS,EAAE,CAAC,SAAS,EAAE,MAAM,EAAE,cAAc,EAAE,SAAS,CAAC,EAAE,0BAA0B,EAAE,CAAC,CAAC;IACxH,GAAG,CAAC,wBAAwB,EAAE,SAAS,EAAE,CAAC,SAAS,EAAE,QAAQ,EAAE,aAAa,CAAC,EAAE,EAAE,CAAC,CAAC;IACnF,GAAG,CAAC,kBAAkB,EAAE,SAAS,EAAE,CAAC,SAAS,EAAE,QAAQ,EAAE,aAAa,CAAC,EAAE,oBAAoB,CAAC,IAAI,CAAC,CAAC,CAAC;IACrG,GAAG,CAAC,uBAAuB,EAAE,SAAS,EAAE,CAAC,SAAS,EAAE,eAAe,EAAE,YAAY,CAAC,EAAE,mBAAmB,EAAE,CAAC,CAAC;IAC3G,GAAG,CAAC,+BAA+B,EAAE,SAAS,EAAE,CAAC,SAAS,EAAE,eAAe,EAAE,aAAa,CAAC,EAAE,EAAE,CAAC,CAAC;IACjG,GAAG,CAAC,qBAAqB,EAAE,cAAc,EAAE,CAAC,SAAS,EAAE,OAAO,EAAE,gBAAgB,CAAC,EAAE,sBAAsB,EAAE,CAAC,CAAC;IAC7G,GAAG,CAAC,sBAAsB,EAAE,UAAU,EAAE,CAAC,UAAU,EAAE,aAAa,CAAC,EAAE,gBAAgB,EAAE,CAAC,CAAC;IACzF,GAAG,CAAC,sBAAsB,EAAE,UAAU,EAAE,CAAC,UAAU,EAAE,YAAY,EAAE,QAAQ,CAAC,EAAE,gBAAgB,EAAE,CAAC,CAAC;IAClG,GAAG,CAAC,4BAA4B,EAAE,UAAU,EAAE,CAAC,UAAU,EAAE,YAAY,EAAE,UAAU,EAAE,iBAAiB,CAAC,EAAE,qBAAqB,EAAE,CAAC,CAAC;IAClI,GAAG,CAAC,iBAAiB,EAAE,UAAU,EAAE,CAAC,UAAU,EAAE,QAAQ,EAAE,YAAY,CAAC,EAAE,oBAAoB,CAAC,IAAI,CAAC,CAAC,CAAC;AACvG,CAAC;AAED,MAAM,UAAU,qBAAqB,CAAC,IAA4B,EAAE,OAAyB;IAC3F,OAAO,OAAO,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,OAAO,CAAC;AAC5C,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,IAA4B;IAC3D,OAAO;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;sBAoCa,YAAY,CAAC,IAAI,CAAC,WAAW,CAAC;CACnD,CAAC;AACF,CAAC;AAED,MAAM,UAAU,wBAAwB;IACtC,OAAO;;;;;;;;;;;;;CAaR,CAAC;AACF,CAAC;AAED,MAAM,UAAU,0BAA0B;IACxC,OAAO;;;;;;;;;;CAUR,CAAC;AACF,CAAC;AAED,MAAM,UAAU,oBAAoB,CAAC,IAA4B;IAC/D,OAAO,2BAA2B,CAAC,IAAI,CAAC,CAAC;AAC3C,CAAC;AAED,MAAM,UAAU,mBAAmB;IACjC,OAAO;;;;;CAKR,CAAC;AACF,CAAC;AAED,MAAM,UAAU,sBAAsB;IACpC,OAAO;;;;;;;;;;;;;;;;;;;;;;;;;;;CA2BR,CAAC;AACF,CAAC;AAED,MAAM,UAAU,gBAAgB;IAC9B,OAAO;;;CAGR,CAAC;AACF,CAAC;AAED,MAAM,UAAU,gBAAgB;IAC9B,OAAO;;;;;;;;;;;;;;;;;;;;;;;CAuBR,CAAC;AACF,CAAC;AAED,MAAM,UAAU,qBAAqB;IACnC,OAAO;;;;;;;;;;;;;;;;;;;;CAoBR,CAAC;AACF,CAAC"}

package/dist/go-template-assets.js

@@ -1,6 +1,6 @@
-import { readFileSync } from 'node:fs';
-const moduleTemplate = readFileSync(new URL('../assets/locks/go-backend/go.mod', import.meta.url), 'utf8');
-const checksumTemplate = readFileSync(new URL('../assets/locks/go-backend/go.sum', import.meta.url), 'utf8');
+import { packagedTemplateAssets } from './adapters/packaged-assets/template-assets.js';
+const moduleTemplate = packagedTemplateAssets.go.module;
+const checksumTemplate = packagedTemplateAssets.go.checksum;
 const modulePlaceholder = 'example.com/liftoff-template-go';
 export function renderGoModuleAsset(moduleName) {
     if (!moduleTemplate.includes(`module ${modulePlaceholder}\n`)) {

package/dist/go-template-assets.js.map

@@ -1 +1 @@
-{"version":3,"file":"go-template-assets.js","sourceRoot":"","sources":["../src/go-template-assets.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AAEvC,MAAM,cAAc,GAAG,YAAY,CACjC,IAAI,GAAG,CAAC,mCAAmC,EAAE,OAAO,IAAI,CAAC,GAAG,CAAC,EAC7D,MAAM,CACP,CAAC;AACF,MAAM,gBAAgB,GAAG,YAAY,CACnC,IAAI,GAAG,CAAC,mCAAmC,EAAE,OAAO,IAAI,CAAC,GAAG,CAAC,EAC7D,MAAM,CACP,CAAC;AACF,MAAM,iBAAiB,GAAG,iCAAiC,CAAC;AAE5D,MAAM,UAAU,mBAAmB,CAAC,UAAkB;IACpD,IAAI,CAAC,cAAc,CAAC,QAAQ,CAAC,UAAU,iBAAiB,IAAI,CAAC,EAAE,CAAC;QAC9D,MAAM,IAAI,KAAK,CAAC,gEAAgE,CAAC,CAAC;IACpF,CAAC;IACD,OAAO,cAAc,CAAC,OAAO,CAAC,UAAU,iBAAiB,IAAI,EAAE,UAAU,UAAU,IAAI,CAAC,CAAC;AAC3F,CAAC;AAED,MAAM,UAAU,qBAAqB;IACnC,OAAO,gBAAgB,CAAC;AAC1B,CAAC"}
+{"version":3,"file":"go-template-assets.js","sourceRoot":"","sources":["../src/go-template-assets.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,sBAAsB,EAAE,MAAM,+CAA+C,CAAC;AAEvF,MAAM,cAAc,GAAG,sBAAsB,CAAC,EAAE,CAAC,MAAM,CAAC;AACxD,MAAM,gBAAgB,GAAG,sBAAsB,CAAC,EAAE,CAAC,QAAQ,CAAC;AAC5D,MAAM,iBAAiB,GAAG,iCAAiC,CAAC;AAE5D,MAAM,UAAU,mBAAmB,CAAC,UAAkB;IACpD,IAAI,CAAC,cAAc,CAAC,QAAQ,CAAC,UAAU,iBAAiB,IAAI,CAAC,EAAE,CAAC;QAC9D,MAAM,IAAI,KAAK,CAAC,gEAAgE,CAAC,CAAC;IACpF,CAAC;IACD,OAAO,cAAc,CAAC,OAAO,CAAC,UAAU,iBAAiB,IAAI,EAAE,UAAU,UAAU,IAAI,CAAC,CAAC;AAC3F,CAAC;AAED,MAAM,UAAU,qBAAqB;IACnC,OAAO,gBAAgB,CAAC;AAC1B,CAAC"}

package/dist/governance-activation/activation-state.d.ts

@@ -1,4 +1,4 @@
-import type { UserActivationState } from './types.js';
+import type { UserActivationState } from '../domain/governance/activation/types.js';
 export declare class ActivationStateFileError extends Error {
     constructor(message: string);
 }

package/dist/governance-activation/activation-state.js

@@ -1,9 +1,13 @@
 import { randomUUID } from 'node:crypto';
-import { chmod, mkdir, rename, stat, unlink, writeFile } from 'node:fs/promises';
+import { chmod, mkdir, open, rename, stat, unlink, writeFile } from 'node:fs/promises';
 import path from 'node:path';
-import { canonicalJson, sha256Hex } from './canonical-json.js';
-import { readProjectFile, resolveProjectPath, validateArtifactPathParts } from '../file-system.js';
-import { validateUserActivationState } from './validators.js';
+import { canonicalJson, sha256Hex } from '../domain/governance/activation/canonical-json.js';
+import { readProjectFile } from '../adapters/filesystem/project-files.js';
+import { resolveProjectPath } from '../adapters/filesystem/project-paths.js';
+import { validateArtifactPathParts } from '../domain/project/paths.js';
+import { validateUserActivationState } from '../domain/governance/activation/validators.js';
+import { withProjectMutationLock } from '../adapters/filesystem/project-lock.js';
+import { isHistoricalActivationIdentity } from '../domain/governance/policy/identity.js';
 export class ActivationStateFileError extends Error {
     constructor(message) {
         super(message);
@@ -49,6 +53,10 @@ export async function loadActivationState(projectRoot) {
         throw new ActivationStateFileError(`Unable to parse governance/activation-state.json: ${errorMessage(error)}`);
     }
     let state;
+    if (typeof parsed === 'object' && parsed !== null && 'schemaVersion' in parsed && parsed.schemaVersion === 1 &&
+        'identity' in parsed && isHistoricalActivationIdentity(parsed.identity)) {
+        throw new ActivationStateFileError('Historical activation v1 state is diagnostic-only; migration to v2 is unsupported. Original state and evidence bytes were preserved. Do not reset, delete, or hand-edit activation history.');
+    }
     try {
         state = validateUserActivationState(parsed);
     }
@@ -97,6 +105,9 @@ function assertExpectedPrior(loaded, expectation) {
     }
 }
 export async function writeActivationState(projectRoot, state, expectation, options = {}) {
+    return withProjectMutationLock(projectRoot, (lease) => writeActivationStateLocked(projectRoot, state, expectation, options, lease));
+}
+async function writeActivationStateLocked(projectRoot, state, expectation, options, lease) {
     const validatedState = validateUserActivationState(state);
     const prior = await loadActivationState(projectRoot);
     assertExpectedPrior(prior, expectation);
@@ -112,15 +123,30 @@ export async function writeActivationState(projectRoot, state, expectation, opti
     let replacementInstalled = false;
     const rollbackFailures = [];
     try {
+        await lease.assertHeld();
         await mkdir(directory, { recursive: true });
         if (prior) {
-            await writeFile(backupPath, prior.content, { encoding: 'utf8', flag: 'wx', mode });
-            await chmod(backupPath, mode);
+            const backup = await open(backupPath, 'wx', mode);
             backupWritten = true;
+            try {
+                await backup.writeFile(prior.content, 'utf8');
+                await backup.chmod(mode);
+            }
+            finally {
+                await backup.close();
+            }
         }
-        await writeFile(temporaryPath, content, { encoding: 'utf8', flag: 'wx', mode });
-        await chmod(temporaryPath, mode);
+        const temporary = await open(temporaryPath, 'wx', mode);
         temporaryWritten = true;
+        try {
+            await temporary.writeFile(content, 'utf8');
+            await temporary.chmod(mode);
+        }
+        finally {
+            await temporary.close();
+        }
+        assertExpectedPrior(await loadActivationState(projectRoot), expectation);
+        await lease.assertHeld();
         await rename(temporaryPath, targetPath);
         replacementInstalled = true;
         temporaryWritten = false;
@@ -139,11 +165,22 @@ export async function writeActivationState(projectRoot, state, expectation, opti
         };
     }
     catch (error) {
+        try {
+            await lease.assertHeld();
+        }
+        catch (lockError) {
+            throw new ActivationStateTransactionError(`Activation write lost its mutation lease; state and recovery files were preserved: ${errorMessage(lockError)}`, [errorMessage(error)]);
+        }
         if (temporaryWritten) {
             await removeIfExists(temporaryPath, rollbackFailures);
         }
         if (replacementInstalled) {
-            if (prior) {
+            const current = await readProjectFile(projectRoot, activationStatePathParts());
+            if (current?.toString('utf8') !== content) {
+                rollbackFailures.push('Activation state changed after replacement; the concurrent version and recovery backup were preserved.');
+                backupWritten = false;
+            }
+            else if (prior) {
                 try {
                     await writeFile(targetPath, prior.content, { encoding: 'utf8', mode });
                     await chmod(targetPath, mode);