@nakedev/go-scaffold 0.3.3 → 0.4.3

package/dist/index.js

@@ -20,7 +20,9 @@ const observability_1 = require("./commands/observability");
 const worker_wizard_1 = require("./prompts/worker-wizard");
 const auth_wizard_1 = require("./prompts/auth-wizard");
 const generate_wizard_1 = require("./prompts/generate-wizard");
-const config_1 = require("./utils/config");
+const config_1 = require("./commands/config");
+const config_2 = require("./utils/config");
+const module_profile_1 = require("./utils/module-profile");
 // fail is every command's catch: one place so the two non-obvious cases stay
 // consistent. @inquirer/prompts throws ExitPromptError on Ctrl-C, and its raw
 // message ("User force closed the prompt with 0 null") tells a user nothing.
@@ -41,17 +43,20 @@ const program = new commander_1.Command();
 program
     .name("go-scaffold")
     .description("Scaffold Gin + GORM + Postgres Go backend projects with a consistent domain-module standard\n\n" +
-    "Run `go-scaffold` with no arguments to pick what to do from a menu. Every command below also asks for anything you don't pass as a flag.")
+    "Run `go-scaffold` with no arguments to pick what to do from a menu. Interactive commands ask for values you omit; read-only commands (`config show`, `config validate`) print or check state without prompts.")
     .version((0, version_1.cliVersion)());
 program
     .command("create [name]")
     .alias("c")
     .description("scaffold a new project (bare skeleton — add domains with `generate module`)")
-    .option("--defaults", "skip the wizard, use defaults (for CI/scripting)")
-    .option("--no-docker", "skip docker-compose.yml")
-    .option("--no-openapi-docs", "skip docs/openapi.yaml")
-    .option("--observability", "add Prometheus /metrics + OpenTelemetry tracing (off by default)")
-    .option("--api-prefix <prefix>", 'URL prefix every route is grouped under, e.g. v1 or api/v1 (default: none)')
+    .option("--defaults", "skip settings prompts; use Docker/OpenAPI on, no prefix, and Lean module defaults (still asks for name if omitted)")
+    .option("--no-docker", "do not create docker-compose.yml or include a local Postgres service")
+    .option("--no-openapi-docs", "do not create docs/openapi.yaml or per-module OpenAPI files")
+    .option("--observability", "include Prometheus /metrics and OpenTelemetry tracing; off unless this flag is passed")
+    .option("--api-prefix <prefix>", 'group every API route under a prefix such as "v1" or "api/v1"; omit for no prefix')
+    .option("--module-profile <profile>", "default profile for future modules: lean, crud, or cqrs; replaces the two profile questions")
+    .option("--module-surface <surface>", "legacy axis flag for future modules: minimal or crud; wizard asks when omitted")
+    .option("--application-style <style>", "legacy axis flag for future modules: service or cqrs; wizard asks when omitted")
     .action(async (name, opts) => {
     try {
         await (0, create_1.createProject)(name, {
@@ -60,37 +65,96 @@ program
             openapiDocs: opts.openapiDocs,
             observability: opts.observability,
             apiPrefix: opts.apiPrefix,
+            moduleProfile: opts.moduleProfile,
+            moduleSurface: opts.moduleSurface,
+            applicationStyle: opts.applicationStyle,
         });
     }
     catch (err) {
         fail(err);
     }
 });
-// runModuleWizard resolves everything `generate module` needs, asking for
-// whatever wasn't passed as a flag. Shared by the bare menu and by
-// `generate module` itself, so both offer the same choices — the flags exist
-// for scripting, not as the only way to reach a decision.
-//
-// --defaults is the escape hatch CI and scripts use: it takes the documented
-// defaults (minimal, no auth) and asks nothing.
+function assertModuleWizardInputs(name, opts, config) {
+    if (process.stdin.isTTY)
+        return;
+    const missing = [];
+    if (name === undefined)
+        missing.push("<name>");
+    // --defaults answers every optional wizard question. The name is still
+    // required because there is no safe module name to invent.
+    if (!opts.defaults) {
+        if (opts.profile === undefined && opts.full === undefined)
+            missing.push("--profile or --full/--no-full");
+        if (opts.profile === undefined && opts.cqrs === undefined)
+            missing.push("--profile or --cqrs");
+        if (config.features.auth && opts.auth === undefined) {
+            missing.push("--auth (or --defaults for no auth)");
+        }
+        if (opts.auth && config.features.rbac && opts.permission === undefined) {
+            missing.push("--permission <code> (or --defaults for no permission)");
+        }
+    }
+    if (missing.length > 0) {
+        throw new Error(`no interactive terminal to prompt on — \`generate module\` is missing: ${missing.join(", ")}. ` +
+            "Pass the missing choices as flags, or add --defaults.");
+    }
+}
 async function runModuleWizard(name, opts) {
-    let { full, auth, permission } = opts;
+    let { full, cqrs, auth, permission } = opts;
+    // Read before checking the prompt contract so the error can name the
+    // feature-dependent auth/RBAC choices, and so a non-project still fails
+    // with the useful project error rather than a list of flags.
+    const config = (0, config_2.readConfig)(process.cwd());
+    assertModuleWizardInputs(name, opts, config);
+    if (opts.profile) {
+        const architecture = (0, module_profile_1.architectureForModuleProfile)(opts.profile);
+        full = architecture.moduleSurface === "crud";
+        cqrs = architecture.applicationStyle === "cqrs";
+    }
     if (!opts.defaults) {
-        // read first, so "not a go-scaffold project" fails before we ask anything,
-        // and so the auth/permission questions are only asked when the project
-        // actually has the features they depend on — offering them otherwise
-        // would present a choice whose only outcome is generateModule's error.
-        const config = (0, config_1.readConfig)(process.cwd());
+        // auth/permission questions are only asked when the project actually has
+        // the features they depend on — offering them otherwise would present a
+        // choice whose only outcome is generateModule's error.
         if (name === undefined)
             name = await (0, generate_wizard_1.promptModuleName)();
-        if (full === undefined)
-            full = await (0, generate_wizard_1.promptModuleShape)();
+        if (opts.profile === undefined && full === undefined && cqrs === undefined) {
+            const profile = await (0, generate_wizard_1.promptModuleProfile)((0, module_profile_1.moduleProfileFor)(config.architecture.defaultModuleSurface, config.architecture.defaultApplicationStyle));
+            if (profile === "advanced") {
+                const architecture = await (0, generate_wizard_1.promptAdvancedModuleArchitecture)(config.architecture.defaultModuleSurface, config.architecture.defaultApplicationStyle);
+                full = architecture.moduleSurface === "crud";
+                cqrs = architecture.applicationStyle === "cqrs";
+            }
+            else {
+                const architecture = (0, module_profile_1.architectureForModuleProfile)(profile);
+                full = architecture.moduleSurface === "crud";
+                cqrs = architecture.applicationStyle === "cqrs";
+            }
+        }
+        else {
+            // A legacy axis flag is still an explicit answer. Ask only for the
+            // other axis so `--full` never gets silently changed by the profile
+            // selector.
+            if (full === undefined) {
+                full = (await (0, generate_wizard_1.promptModuleSurface)(config.architecture.defaultModuleSurface)) === "crud";
+            }
+            if (cqrs === undefined) {
+                cqrs = (await (0, generate_wizard_1.promptApplicationStyle)(config.architecture.defaultApplicationStyle)) === "cqrs";
+            }
+        }
         if (auth === undefined && config.features.auth)
             auth = await (0, generate_wizard_1.promptModuleAuth)();
         if (auth && permission === undefined && config.features.rbac)
             permission = await (0, generate_wizard_1.promptModulePermission)();
     }
-    await (0, generate_1.generateModule)(name, { full: full ?? false, auth, permission });
+    else {
+        // --defaults means "use this project's recorded defaults". Fresh projects
+        // still resolve to the historical minimal/service behaviour, while a
+        // project config wizard can intentionally choose another default for new
+        // modules without making CI scripts interactive.
+        full ??= config.architecture.defaultModuleSurface === "crud";
+        cqrs ??= config.architecture.defaultApplicationStyle === "cqrs";
+    }
+    await (0, generate_1.generateModule)(name, { full: full ?? false, cqrs: cqrs ?? false, auth, permission });
 }
 // runGenerateWizard is `generate`/`g` run bare — asks which target, then
 // delegates (each subcommand still prompts for anything else it's missing,
@@ -101,7 +165,7 @@ async function runGenerateWizard() {
     const target = await (0, interactive_1.select)({
         message: "What do you want to generate?",
         choices: [
-            { name: "Module (safe minimal domain; add methods explicitly)", value: "module" },
+            { name: "Module (choose Lean / CRUD / CQRS profile)", value: "module" },
             { name: "Method (add one endpoint to an existing module)", value: "method" },
             { name: "Migration (reserve a timestamped up/down SQL file pair)", value: "migration" },
         ],
@@ -119,7 +183,7 @@ async function runGenerateWizard() {
 const generate = program
     .command("generate")
     .alias("g")
-    .description("add to an existing go-scaffold project")
+    .description("add a module, endpoint, or migration to an existing project; bare `generate` opens a target wizard")
     .action(async () => {
     try {
         await runGenerateWizard();
@@ -131,21 +195,29 @@ const generate = program
 generate
     .command("module [name]")
     .alias("m")
-    .description("scaffold a safe minimal domain module; opt into a CRUD skeleton with --full")
-    .option("--full", "generate a CRUD skeleton (DTO fields/business rules remain TODO); minimal is the safe default")
+    .description("scaffold a domain module; the wizard asks for a Lean, CRUD, CQRS, or Advanced profile")
+    .option("--profile <profile>", "choose the architecture preset: lean (minimal + service), crud (CRUD + service), or cqrs (minimal + CQRS); auth may still prompt")
+    .option("--full", "legacy alias for the CRUD profile: generate list/get/create/update/delete skeletons; fields and rules remain TODO")
+    .option("--cqrs", "legacy axis flag: split state-changing commands from read-only queries; combine with --full for CRUD + CQRS")
     // kept working for muscle memory, hidden from help: minimal is already the
     // default, so advertising a flag that asks for it is pure noise.
     .addOption(new commander_1.Option("--no-full", "deprecated compatibility alias; minimal is already the default").hideHelp())
-    .option("--auth", "require a valid access token for this module's routes (needs `add auth`)")
-    .option("--permission <code>", "also require this permission via authz.Require (needs `add rbac`; pass --auth too)")
-    .option("--defaults", "skip the prompts, use the defaults (minimal, no auth) — for CI/scripting")
+    .option("--auth", "require a valid access token for this module's routes (needs `add auth`; omitted means public)")
+    .option("--permission <code>", "also require this permission via authz.Require (needs `add rbac` and --auth; e.g. users:manage)")
+    .option("--defaults", "skip every wizard question; use recorded project defaults and keep the module public (for CI/scripting)")
     .action(async (name, opts) => {
     try {
+        const profile = (0, config_2.parseModuleProfile)(opts.profile);
+        if (profile && (opts.full !== undefined || opts.cqrs !== undefined)) {
+            throw new Error("--profile cannot be combined with --full, --no-full, or --cqrs — choose one configuration style");
+        }
         // anything not passed as a flag gets asked for — declaring both --full
         // and --no-full leaves opts.full undefined when neither is given, which
         // is exactly the "not answered yet" signal runModuleWizard needs.
         await runModuleWizard(name, {
+            profile,
             full: opts.full,
+            cqrs: opts.cqrs,
             auth: opts.auth,
             permission: opts.permission,
             defaults: opts.defaults,
@@ -155,13 +227,46 @@ generate
         fail(err);
     }
 });
+const configCommand = program
+    .command("config")
+    .description("configure future module defaults interactively, or inspect/validate the project config")
+    .action(async () => {
+    try {
+        await (0, config_1.configureProject)();
+    }
+    catch (err) {
+        fail(err);
+    }
+});
+configCommand
+    .command("show")
+    .description("print the resolved project config, including installed features and module choices; no wizard")
+    .action(() => {
+    try {
+        (0, config_1.showProjectConfig)();
+    }
+    catch (err) {
+        fail(err);
+    }
+});
+configCommand
+    .command("validate")
+    .description("validate project config and detected scaffold state without changing files; no wizard")
+    .action(() => {
+    try {
+        (0, config_1.validateProjectConfig)();
+    }
+    catch (err) {
+        fail(err);
+    }
+});
 generate
     .command("method [module] [name]")
     .alias("me")
-    .description("add one endpoint to an existing module (patches handler/service in place)")
-    .option("--type <type>", "get|post|put|patch|delete")
-    .option("--get-mode <mode>", "for --type get only: all|one")
-    .option("--field <name>", "for --type get --get-mode one: the lookup field (e.g. email, status)")
+    .description("add one endpoint to an existing module; omitted module, name, and endpoint details are asked by the wizard")
+    .option("--type <type>", "HTTP verb: get, post, put, patch, or delete; omitted means the wizard asks")
+    .option("--get-mode <mode>", "GET only: all for a list endpoint or one for a lookup by another field")
+    .option("--field <name>", "GET one only: lookup column such as email/status/slug; id is already the built-in lookup")
     .action(async (moduleName, methodName, opts) => {
     try {
         const type = opts.type;
@@ -185,7 +290,7 @@ generate
 generate
     .command("migration [name]")
     .alias("mig")
-    .description("reserve a timestamped migrations/<version>_<name>.{up,down}.sql pair (stubs only — you write the SQL)")
+    .description("reserve a timestamped up/down SQL pair; omitted name opens a migration-name wizard and the SQL remains your responsibility")
     .action(async (name) => {
     try {
         await (0, migration_1.generateMigration)(name);
@@ -224,7 +329,7 @@ async function runAddWizard() {
     // read once, up front: every add command reads it anyway, the summary below
     // needs to know what's already installed (e.g. whether auth's mail goes out
     // inline or through an existing queue), and so does the menu itself.
-    const config = (0, config_1.readConfig)(process.cwd());
+    const config = (0, config_2.readConfig)(process.cwd());
     // Each add is once-only, and rbac needs auth first. Both facts are already
     // known here, so say them in the menu rather than letting someone walk three
     // steps and a confirmation to reach "already been added".
@@ -265,7 +370,7 @@ async function runAddWizard() {
         // all), so the menu has to ask it the same way the worker menu asks for
         // its queue backend — a choice only reachable by knowing the flag name
         // isn't a choice for anyone driving this from the menu.
-        await runAddAuth(await (0, auth_wizard_1.promptAuthStore)(), {});
+        await runAddAuth(await (0, auth_wizard_1.promptAuthStore)(), await (0, auth_wizard_1.promptBrowserTopology)(), {});
     }
     else if (target === "rbac") {
         await runAddRbac({});
@@ -283,21 +388,33 @@ async function runAddWorker(backend, opts) {
     ], opts);
     await (0, worker_1.addWorker)(backend);
 }
-async function runAddAuth(store, opts) {
-    const config = (0, config_1.readConfig)(process.cwd());
+async function runAddAuth(store, browserTopology, opts) {
+    const config = (0, config_2.readConfig)(process.cwd());
     await confirmAdd([
         "add internal/app/user/, internal/shared/middleware/auth.go, and cmd/seed",
+        `browser OAuth: frontend-owned callback with server-side provider redirect URI (${browserTopology})`,
         store === "postgres"
-            ? "tokens + rate-limit counters: Postgres (user_svc.auth_tokens), in-process — no extra service"
-            : picocolors_1.default.yellow("tokens + rate-limit counters: Redis — requires a Redis server to be running"),
+            ? "refresh + recovery tokens: Postgres (user_svc.auth_tokens), rate-limit counters in-process — no extra service"
+            : picocolors_1.default.yellow("refresh tokens + rate-limit counters: Redis; recovery tokens: Postgres — requires Redis"),
         config.features.worker
             ? "verification/reset mail: queued through the worker already installed"
             : picocolors_1.default.yellow("verification/reset mail: sent inline over SMTP (no worker yet) — /auth/register and /auth/forgot-password block until it's sent"),
     ], opts);
-    await (0, auth_1.addAuth)(store);
+    await (0, auth_1.addAuth)(store, process.cwd(), browserTopology);
+}
+// Explicit browser flags are intentionally resolved before the confirmation
+// summary. `--defaults` is the stable non-TTY escape hatch; `--yes` with no
+// browser flags also uses the local default so existing CI invocations such as
+// `add auth --store postgres --yes` do not unexpectedly start prompting.
+async function resolveBrowserTopology(opts) {
+    if (opts.browserTopology !== undefined)
+        return (0, auth_wizard_1.validateBrowserTopology)(opts.browserTopology);
+    if (opts.defaults || opts.yes)
+        return auth_wizard_1.DEFAULT_BROWSER_TOPOLOGY;
+    return (0, auth_wizard_1.promptBrowserTopology)();
 }
 async function runAddRbac(opts) {
-    const config = (0, config_1.readConfig)(process.cwd());
+    const config = (0, config_2.readConfig)(process.cwd());
     if (!config.features.auth) {
         throw new Error("`add rbac` requires `add auth` first — there's no Role claim to check permissions against otherwise");
     }
@@ -305,7 +422,7 @@ async function runAddRbac(opts) {
     await (0, rbac_1.addRbac)();
 }
 async function runAddObservability(opts) {
-    const config = (0, config_1.readConfig)(process.cwd());
+    const config = (0, config_2.readConfig)(process.cwd());
     await confirmAdd([
         "add Prometheus /metrics + OpenTelemetry tracing",
         "patch cmd/api/wiring.go and internal/platform/database to wire it in — cmd/api only",
@@ -317,7 +434,7 @@ async function runAddObservability(opts) {
 }
 const add = program
     .command("add")
-    .description("add opt-in infrastructure to an existing go-scaffold project")
+    .description("add opt-in infrastructure to an existing project; bare `add` opens a worker/auth/RBAC/observability wizard")
     .action(async () => {
     try {
         await runAddWizard();
@@ -330,8 +447,8 @@ add
     .command("worker")
     .description("add a background job queue, SMTP mail, and cmd/worker (opt-in — most projects don't need this on day one)")
     .option("--queue <backend>", "where jobs are stored: postgres (River, default) or redis (Asynq)")
-    .option("--defaults", "skip the prompt, use the Postgres-backed queue")
-    .option("-y, --yes", "skip the confirmation summary")
+    .option("--defaults", "skip queue and confirmation prompts; use Postgres/River")
+    .option("-y, --yes", "skip only the confirmation summary; an omitted queue still opens the queue wizard")
     .action(async (opts) => {
     try {
         await runAddWorker(await resolveQueueBackend(opts), { yes: opts.yes || opts.defaults });
@@ -367,8 +484,9 @@ add
     .command("auth")
     .description("add email/password auth: JWT access tokens, refresh token rotation, register/login/refresh/logout/me (no prerequisites — without `add worker` the verification/reset mail is sent inline)")
     .option("--store <store>", 'where tokens and rate-limit counters live: "postgres" (default, no extra service) or "redis" (exact across replicas)')
-    .option("--defaults", "skip the prompt, use the Postgres-backed store (for CI/scripting)")
-    .option("-y, --yes", "skip the confirmation summary")
+    .option("--browser-topology <topology>", "browser deployment topology for cookie/CORS policy: same-origin, same-site (different origin), or cross-site (requires HTTPS deployment)")
+    .option("--defaults", "skip store, browser-topology, and confirmation prompts; use Postgres plus local same-site defaults")
+    .option("-y, --yes", "skip confirmation; omitted store/topology use local Postgres and same-site defaults")
     .action(async (opts) => {
     try {
         // Same shape as `add worker`: an explicit flag wins, --defaults takes
@@ -388,7 +506,8 @@ add
         else {
             store = await (0, auth_wizard_1.promptAuthStore)();
         }
-        await runAddAuth(store, { yes: opts.yes || opts.defaults });
+        const browserTopology = await resolveBrowserTopology(opts);
+        await runAddAuth(store, browserTopology, { yes: opts.yes || opts.defaults });
     }
     catch (err) {
         fail(err);
@@ -396,8 +515,8 @@ add
 });
 add
     .command("rbac")
-    .description("add role-based access control: roles/permissions admin API, cached Authz middleware, PATCH /users/:id/set-role (requires `add auth` first)")
-    .option("-y, --yes", "skip the confirmation summary")
+    .description("add role-based access control: roles/permissions admin API, cached Authz middleware, and PATCH /users/:id/set-role (requires `add auth`; direct command only needs confirmation)")
+    .option("-y, --yes", "skip the confirmation summary; the bare `add` wizard can select this target")
     .action(async (opts) => {
     try {
         await runAddRbac({ yes: opts.yes });
@@ -408,8 +527,8 @@ add
 });
 add
     .command("observability")
-    .description("add Prometheus /metrics + OpenTelemetry tracing for Gin + GORM (also available at `create` time via --observability)")
-    .option("-y, --yes", "skip the confirmation summary")
+    .description("add Prometheus /metrics + OpenTelemetry tracing for Gin + GORM (also available at create time via --observability; direct command only needs confirmation)")
+    .option("-y, --yes", "skip the confirmation summary; the bare `add` wizard can select this target")
     .action(async (opts) => {
     try {
         await runAddObservability({ yes: opts.yes });
@@ -420,7 +539,7 @@ add
 });
 const undo = program
     .command("undo")
-    .description("undo a `generate module` you didn't mean to run (typo'd name, domain you decided against)")
+    .description("undo a generated module and its wiring; bare `undo` opens a module selector and confirmation")
     .action(async () => {
     // bare `undo` — module is the only target, so prompt for the name
     try {
@@ -433,8 +552,8 @@ const undo = program
 undo
     .command("module [name]")
     .alias("m")
-    .description("delete a generated module and everything it wired up, migration files included")
-    .option("-y, --yes", "skip the confirmation prompt")
+    .description("delete a generated module, its owned migrations/docs, and the wiring it added; omitted name opens a selector")
+    .option("-y, --yes", "skip the destructive confirmation prompt (use only after reviewing the target)")
     .action(async (name, opts) => {
     try {
         await (0, undo_1.undoModule)(name, { yes: opts.yes });
@@ -449,10 +568,14 @@ undo
 // ran on every database created from then on. Kept as an alias rather than
 // deleted outright: a muscle-memory `rm m` shouldn't be an unrecognised-command
 // error, and the semantics only got safer.
-const remove = program.command("remove", { hidden: true }).alias("rm");
+const remove = program
+    .command("remove", { hidden: true })
+    .alias("rm")
+    .description("deprecated hidden alias for undo; kept for backwards compatibility");
 remove
     .command("module [name]")
     .alias("m")
+    .description("deprecated hidden alias for `undo module`; kept for backwards compatibility")
     .option("-y, --yes", "skip the confirmation prompt")
     .action(async (name, opts) => {
     console.error(picocolors_1.default.yellow("`remove module` is now `undo module` — running that instead."));
@@ -478,13 +601,14 @@ async function runTopMenu() {
     // Every entry but "create" needs a project. Offering them outside one buys
     // two selects and then the same error — so say it once, up front, and only
     // offer what can actually run here.
-    const inProject = (0, config_1.isProjectDir)(process.cwd());
+    const inProject = (0, config_2.isProjectDir)(process.cwd());
     const target = inProject
         ? await (0, interactive_1.select)({
             message: "What do you want to do?",
             choices: [
                 { name: "Create a new project", value: "create" },
                 { name: "Generate (module/method/migration in an existing project)", value: "generate" },
+                { name: "Configure project generation defaults", value: "config" },
                 { name: "Add (auth/worker/rbac/observability in an existing project)", value: "add" },
                 { name: "Undo a generated module", value: "undo" },
             ],
@@ -496,6 +620,9 @@ async function runTopMenu() {
     else if (target === "generate") {
         await runGenerateWizard();
     }
+    else if (target === "config") {
+        await (0, config_1.configureProject)();
+    }
     else if (target === "add") {
         await runAddWizard();
     }

package/dist/prompts/auth-wizard.js

@@ -1,11 +1,13 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
+exports.DEFAULT_BROWSER_TOPOLOGY = void 0;
 exports.promptAuthStore = promptAuthStore;
+exports.validateBrowserTopology = validateBrowserTopology;
+exports.promptBrowserTopology = promptBrowserTopology;
 const interactive_1 = require("./interactive");
-// The one decision `add auth` cannot make for you: where refresh tokens,
-// one-time tokens and rate-limit counters live. It drives which tokenStore
-// implementation is written, whether Redis is added to the project at all,
-// and whether the auth_tokens table exists.
+// The one decision `add auth` cannot make for you: where refresh tokens and
+// rate-limit counters live. Recovery tokens always use the durable Postgres
+// table so consumption can share a transaction with the user update.
 //
 // Mirrors promptQueueBackend: the choice exists as `--store` for scripting,
 // but nobody should have to know the flag name to discover the option.
@@ -17,13 +19,45 @@ async function promptAuthStore() {
             {
                 name: "Postgres (user_svc.auth_tokens)",
                 value: "postgres",
-                description: "no extra service to run; tokens are rows in your own database, and the rate limiter counts in-process",
+                description: "no extra service to run; refresh and recovery tokens use your database, and the rate limiter counts in-process",
             },
             {
                 name: "Redis",
                 value: "redis",
-                description: "TTL expiry and rate-limit counters are exact across replicas; needs a Redis server",
+                description: "refresh TTL and rate-limit counters are exact across replicas; recovery stays transactional in Postgres; needs Redis",
             },
         ],
     });
 }
+exports.DEFAULT_BROWSER_TOPOLOGY = "same-site";
+const TOPOLOGIES = [
+    {
+        name: "Same-origin",
+        value: "same-origin",
+        description: "frontend and API share scheme, host, and port; simplest cookie boundary",
+    },
+    {
+        name: "Same-site, different-origin",
+        value: "same-site",
+        description: "for example localhost:3000 + localhost:8080 or app.example.com + api.example.com",
+    },
+    {
+        name: "Cross-site",
+        value: "cross-site",
+        description: "different registrable sites; requires SameSite=None, Secure cookies, HTTPS, and exact CORS",
+    },
+];
+function validateBrowserTopology(raw) {
+    const value = raw.trim().toLowerCase();
+    if (!TOPOLOGIES.some((topology) => topology.value === value)) {
+        throw new Error(`Browser topology must be one of: ${TOPOLOGIES.map((topology) => topology.value).join(", ")} (got "${raw}")`);
+    }
+    return value;
+}
+async function promptBrowserTopology() {
+    return (0, interactive_1.select)({
+        message: "How are the browser frontend and API deployed?",
+        default: exports.DEFAULT_BROWSER_TOPOLOGY,
+        choices: TOPOLOGIES,
+    });
+}

package/dist/prompts/create-wizard.js

@@ -4,6 +4,9 @@ exports.promptProjectName = promptProjectName;
 exports.runCreateWizard = runCreateWizard;
 const interactive_1 = require("./interactive");
 const naming_1 = require("../utils/naming");
+const module_profile_1 = require("../utils/module-profile");
+const types_1 = require("../types");
+const generate_wizard_1 = require("./generate-wizard");
 async function promptProjectName() {
     const name = await (0, interactive_1.input)({
         message: "Project name:",
@@ -28,7 +31,7 @@ async function runCreateWizard(preset = {}) {
         }));
     const openapiDocs = preset.openapiDocs ??
         (await (0, interactive_1.confirm)({
-            message: "Include hand-written OpenAPI docs (docs/openapi.yaml, whole docs/ tree served at /docs)?",
+            message: "Include hand-written OpenAPI docs (docs/openapi.yaml — files only, never served over HTTP)?",
             default: true,
         }));
     const observability = preset.observability ??
@@ -49,6 +52,31 @@ async function runCreateWizard(preset = {}) {
     if (prefixCheck !== true)
         throw new Error(prefixCheck);
     const apiPrefix = (0, naming_1.normalizeApiPrefix)(apiPrefixRaw);
+    let moduleSurface;
+    let applicationStyle;
+    if (preset.moduleProfile) {
+        ({ moduleSurface, applicationStyle } = (0, generate_wizard_1.moduleArchitectureForProfile)(preset.moduleProfile));
+    }
+    else if (preset.moduleSurface !== undefined || preset.applicationStyle !== undefined) {
+        // Keep the two old axis flags useful for partial scripted invocations. If
+        // only one was supplied, ask only for the other one instead of silently
+        // overriding the explicit flag with a profile choice.
+        moduleSurface =
+            preset.moduleSurface ??
+                (await (0, generate_wizard_1.promptModuleSurface)(types_1.DEFAULT_ARCHITECTURE_CONFIG.defaultModuleSurface));
+        applicationStyle =
+            preset.applicationStyle ??
+                (await (0, generate_wizard_1.promptApplicationStyle)(types_1.DEFAULT_ARCHITECTURE_CONFIG.defaultApplicationStyle));
+    }
+    else {
+        const profile = await (0, generate_wizard_1.promptModuleProfile)((0, module_profile_1.moduleProfileFor)(types_1.DEFAULT_ARCHITECTURE_CONFIG.defaultModuleSurface, types_1.DEFAULT_ARCHITECTURE_CONFIG.defaultApplicationStyle));
+        if (profile === "advanced") {
+            ({ moduleSurface, applicationStyle } = await (0, generate_wizard_1.promptAdvancedModuleArchitecture)());
+        }
+        else {
+            ({ moduleSurface, applicationStyle } = (0, generate_wizard_1.moduleArchitectureForProfile)(profile));
+        }
+    }
     // Everything is listed whether it was asked or passed, so a flag never
     // reaches the project without the caller seeing the value it produced.
     const fromFlag = (passed) => (passed !== undefined ? " (from flag)" : "");
@@ -57,9 +85,22 @@ async function runCreateWizard(preset = {}) {
     console.log(`  OpenAPI docs: ${openapiDocs ? "yes" : "no"}${fromFlag(preset.openapiDocs)}`);
     console.log(`  Metrics + tracing: ${observability ? "yes" : "no"}${fromFlag(preset.observability)}`);
     console.log(`  Route prefix: ${apiPrefix ? `/${apiPrefix}` : "(none)"}${fromFlag(preset.apiPrefix)}`);
+    const profile = (0, generate_wizard_1.moduleProfileDescription)(moduleSurface, applicationStyle);
+    const profileSource = preset.moduleProfile !== undefined ? " (from --module-profile)" : "";
+    console.log(`  Default module profile: ${profile}${profileSource}`);
+    console.log(`  Default module surface: ${moduleSurface}${fromFlag(preset.moduleSurface)}`);
+    console.log(`  Default application style: ${applicationStyle}${fromFlag(preset.applicationStyle)}`);
     const proceed = await (0, interactive_1.confirm)({ message: "\nCreate project with these settings?", default: true });
     if (!proceed) {
         throw new Error("project creation cancelled");
     }
-    return { features: { docker, openapiDocs, observability }, apiPrefix };
+    return {
+        features: { docker, openapiDocs, observability },
+        apiPrefix,
+        architecture: {
+            ...types_1.DEFAULT_ARCHITECTURE_CONFIG,
+            defaultModuleSurface: moduleSurface,
+            defaultApplicationStyle: applicationStyle,
+        },
+    };
 }