@nexusclawhq/cli 0.2.1

package/dist/nexus-cli/src/templates/project/templates/drill-code-extension-page/scripts/deploy-drill.mjs

@@ -0,0 +1,341 @@
+#!/usr/bin/env node
+// @ts-check
+
+import { mkdir, readFile, writeFile } from 'node:fs/promises';
+import { dirname, resolve } from 'node:path';
+import { fileURLToPath } from 'node:url';
+
+const __dirname = dirname(fileURLToPath(import.meta.url));
+const WORKSPACE_ROOT = resolve(__dirname, '..');
+const MANIFEST_PATH = resolve(WORKSPACE_ROOT, 'src/metadata/drill-code-extension-page.manifest.json');
+const ARTIFACT_DIR = resolve(WORKSPACE_ROOT, 'deploy-artifacts');
+
+function parseArgs(argv) {
+  const args = {
+    endpoint: process.env.NEXUS_API_BASE || 'http://127.0.0.1:8000',
+    storageState: process.env.NEXUS_AUTH_STORAGE_STATE || '',
+    dryRun: false,
+  };
+
+  for (let i = 0; i < argv.length; i += 1) {
+    const token = argv[i];
+    if (token === '--endpoint') args.endpoint = argv[++i];
+    else if (token === '--storage-state') args.storageState = argv[++i];
+    else if (token === '--dry-run') args.dryRun = true;
+    else if (token === '--help' || token === '-h') {
+      printUsage();
+      process.exit(0);
+    } else {
+      throw new Error(`Unknown argument: ${token}`);
+    }
+  }
+  return args;
+}
+
+function printUsage() {
+  process.stdout.write([
+    'Usage: npm run deploy:drill -- --storage-state <file> [--endpoint http://127.0.0.1:8000]',
+    '',
+    'Deploys the workspace-owned Drill code-extension page into NexusClaw runtime:',
+    '- custom object',
+    '- custom component bundle',
+    '- published CustomPage',
+    '- app menu item',
+    '',
+  ].join('\n'));
+}
+
+function assertLocalEndpoint(endpoint) {
+  const url = new URL(endpoint);
+  const host = url.hostname.toLowerCase();
+  const allowed =
+    host === 'localhost' ||
+    host === '127.0.0.1' ||
+    /\.(dev|test|local)$/.test(host);
+  if (!allowed) throw new Error(`Refusing non-local endpoint: ${endpoint}`);
+  return endpoint.replace(/\/$/, '');
+}
+
+function sameHost(originA, originB) {
+  try {
+    return new URL(originA).hostname === new URL(originB).hostname;
+  } catch {
+    return false;
+  }
+}
+
+function extractAccessToken(storageState, endpointOrigin) {
+  const origins = Array.isArray(storageState?.origins) ? storageState.origins : [];
+  const ordered = [...origins].sort((a, b) => {
+    const aMatch = typeof a?.origin === 'string' && sameHost(a.origin, endpointOrigin) ? 0 : 1;
+    const bMatch = typeof b?.origin === 'string' && sameHost(b.origin, endpointOrigin) ? 0 : 1;
+    return aMatch - bMatch;
+  });
+
+  for (const origin of ordered) {
+    const localStorage = Array.isArray(origin?.localStorage) ? origin.localStorage : [];
+    const tokenPair = localStorage.find((item) => item?.name === 'tokenPair');
+    if (!tokenPair?.value) continue;
+    const parsed = JSON.parse(tokenPair.value);
+    const token = parsed?.accessToken?.token;
+    if (typeof token === 'string' && token.length > 0) return token;
+  }
+
+  throw new Error('accessToken not found in storageState localStorage tokenPair');
+}
+
+async function readJson(path) {
+  return JSON.parse(await readFile(path, 'utf8'));
+}
+
+function redact(value) {
+  if (Array.isArray(value)) return value.map(redact);
+  if (!value || typeof value !== 'object') return value;
+  return Object.fromEntries(Object.entries(value).map(([key, nested]) => [
+    key,
+    /token|authorization|cookie/i.test(key) ? '<REDACTED>' : redact(nested),
+  ]));
+}
+
+async function graphql(baseUrl, token, operationName, query, variables = {}) {
+  const response = await fetch(`${baseUrl}/graphql`, {
+    method: 'POST',
+    headers: {
+      'content-type': 'application/json',
+      authorization: `Bearer ${token}`,
+    },
+    body: JSON.stringify({ operationName, query, variables }),
+  });
+  const body = await response.json();
+  if (!response.ok || body.errors?.length) {
+    throw new Error(`GraphQL ${operationName} failed: ${JSON.stringify(body, null, 2)}`);
+  }
+  return body.data;
+}
+
+async function rest(baseUrl, token, method, path, body) {
+  const response = await fetch(`${baseUrl}${path}`, {
+    method,
+    headers: {
+      authorization: `Bearer ${token}`,
+      ...(body && !(body instanceof FormData) ? { 'content-type': 'application/json' } : {}),
+    },
+    body: body instanceof FormData ? body : body ? JSON.stringify(body) : undefined,
+  });
+  const text = await response.text();
+  const parsed = text ? JSON.parse(text) : null;
+  if (!response.ok) {
+    throw new Error(`REST ${method} ${path} failed: ${JSON.stringify(parsed, null, 2)}`);
+  }
+  return parsed;
+}
+
+function withBundle(schema, bundleUrl, bundleHash) {
+  const clone = JSON.parse(JSON.stringify(schema));
+  function visit(node) {
+    if (!node || typeof node !== 'object') return;
+    if (node.component === 'CodeExtensionFrame') {
+      node.props = {
+        ...(node.props || {}),
+        bundleUrl,
+        bundleHash,
+      };
+    }
+    for (const child of node.children || []) visit(child);
+  }
+  visit(clone.layout);
+  return clone;
+}
+
+async function ensureObject(baseUrl, token, objectDef) {
+  const data = await graphql(baseUrl, token, 'WorkspaceDeployObjects', `query WorkspaceDeployObjects {
+    objects { edges { node { id nameSingular namePlural labelSingular labelPlural keyPrefix isCustom isActive } } }
+  }`);
+  const existing = data.objects.edges.map((edge) => edge.node).find((object) => object.nameSingular === objectDef.apiName);
+  if (existing) return { created: false, object: existing };
+
+  const created = await graphql(baseUrl, token, 'WorkspaceDeployCreateObject', `mutation WorkspaceDeployCreateObject($input: CreateOneObjectInput!) {
+    createOneObject(input: $input) {
+      id
+      nameSingular
+      namePlural
+      labelSingular
+      labelPlural
+      keyPrefix
+      isCustom
+      isActive
+    }
+  }`, {
+    input: {
+      nameSingular: objectDef.apiName,
+      namePlural: `${objectDef.apiName}s`,
+      labelSingular: objectDef.labelSingular,
+      labelPlural: objectDef.labelPlural,
+      description: objectDef.description,
+      isCustom: Boolean(objectDef.isCustom),
+    },
+  });
+  return { created: true, object: created.createOneObject };
+}
+
+async function ensureComponent(baseUrl, token, componentDef) {
+  let component;
+  try {
+    component = await rest(baseUrl, token, 'GET', `/api/components/${componentDef.componentId}`);
+    component = await rest(baseUrl, token, 'PUT', `/api/components/${componentDef.componentId}`, {
+      name: componentDef.name,
+      description: componentDef.description,
+      permissions: componentDef.permissions,
+    });
+  } catch {
+    component = await rest(baseUrl, token, 'POST', '/api/components', {
+      componentId: componentDef.componentId,
+      apiName: componentDef.apiName,
+      name: componentDef.name,
+      description: componentDef.description,
+      permissions: componentDef.permissions,
+    });
+  }
+
+  const source = await readFile(resolve(WORKSPACE_ROOT, componentDef.sourcePath), 'utf8');
+  const form = new FormData();
+  form.set('file', new Blob([source], { type: 'text/javascript' }), `${componentDef.componentId}.js`);
+  const upload = await rest(baseUrl, token, 'POST', `/api/components/${componentDef.componentId}/bundle`, form);
+  const published = await rest(baseUrl, token, 'POST', `/api/components/${componentDef.componentId}/publish`);
+  return { component, upload, published };
+}
+
+async function ensurePage(baseUrl, token, pageDef, appApiName, navItemApiName, bundleUrl, bundleHash) {
+  const schema = withBundle(pageDef.schema, bundleUrl, bundleHash);
+  const pageRoute = `/app/${appApiName}/n/${navItemApiName}`;
+  const pages = await graphql(baseUrl, token, 'WorkspaceDeployPages', `query WorkspaceDeployPages($type: PageType, $isActive: Boolean) {
+    customPages(type: $type, isActive: $isActive) {
+      id
+      apiName
+      name
+      status
+      route
+      schema
+      publishedSchema
+    }
+  }`, { type: 'APP', isActive: true });
+  const existing = pages.customPages.find((page) => page.apiName === pageDef.apiName || page.name === pageDef.name);
+  let draft;
+  if (existing) {
+    draft = (await graphql(baseUrl, token, 'WorkspaceDeployUpdatePage', `mutation WorkspaceDeployUpdatePage($input: UpdateCustomPageInput!) {
+      updateCustomPage(input: $input) { id apiName name status route schema }
+    }`, {
+      input: {
+        id: existing.id,
+        apiName: pageDef.apiName,
+        name: pageDef.name,
+        type: pageDef.type,
+        route: pageRoute,
+        schema,
+      },
+    })).updateCustomPage;
+  } else {
+    draft = (await graphql(baseUrl, token, 'WorkspaceDeployCreatePage', `mutation WorkspaceDeployCreatePage($input: CreateCustomPageInput!) {
+      createCustomPage(input: $input) { id apiName name status route schema }
+    }`, {
+      input: {
+        apiName: pageDef.apiName,
+        name: pageDef.name,
+        type: pageDef.type,
+        route: pageRoute,
+        schema,
+      },
+    })).createCustomPage;
+  }
+
+  const published = (await graphql(baseUrl, token, 'WorkspaceDeployPublishPage', `mutation WorkspaceDeployPublishPage($id: ID!) {
+    publishCustomPage(id: $id) { id apiName name status publishedVersion route publishedSchema }
+  }`, { id: draft.id })).publishCustomPage;
+  return { created: !existing, draft, published };
+}
+
+async function resolveApp(baseUrl, token, appApiName) {
+  const data = await graphql(baseUrl, token, 'WorkspaceDeployApps', `query WorkspaceDeployApps {
+    apps { id apiName name }
+  }`);
+  const app = data.apps.find((candidate) => candidate.apiName === appApiName);
+  if (!app) throw new Error(`App apiName not found: ${appApiName}`);
+  return app;
+}
+
+async function ensureMenuItem(baseUrl, token, menuDef, appId, pageRoute) {
+  const data = await graphql(baseUrl, token, 'WorkspaceDeployMenuItems', `query WorkspaceDeployMenuItems($appId: ID) {
+    menuItems(appId: $appId) { id name apiName path type appId position isActive }
+  }`, { appId });
+  const existing = data.menuItems.find((item) => item.apiName === menuDef.apiName);
+  const input = {
+    name: menuDef.name,
+    apiName: menuDef.apiName,
+    path: pageRoute,
+    type: menuDef.type,
+    position: menuDef.position,
+    isActive: menuDef.isActive,
+    appId,
+  };
+  if (existing) {
+    const updated = await graphql(baseUrl, token, 'WorkspaceDeployUpdateMenuItem', `mutation WorkspaceDeployUpdateMenuItem($id: ID!, $input: UpdateMenuItemInput!) {
+      updateMenuItem(id: $id, input: $input) { id name apiName path type appId position isActive }
+    }`, { id: existing.id, input });
+    return { created: false, menuItem: updated.updateMenuItem };
+  }
+  const created = await graphql(baseUrl, token, 'WorkspaceDeployCreateMenuItem', `mutation WorkspaceDeployCreateMenuItem($input: CreateMenuItemInput!) {
+    createMenuItem(input: $input) { id name apiName path type appId position isActive }
+  }`, { input });
+  return { created: true, menuItem: created.createMenuItem };
+}
+
+async function main() {
+  const args = parseArgs(process.argv.slice(2));
+  const baseUrl = assertLocalEndpoint(args.endpoint);
+  if (!args.storageState) {
+    throw new Error('Missing --storage-state <file>. Refusing to deploy without an explicit Drill auth state.');
+  }
+
+  const manifest = await readJson(MANIFEST_PATH);
+  if (args.dryRun) {
+    process.stdout.write(`${JSON.stringify({ ok: true, dryRun: true, manifest }, null, 2)}\n`);
+    return;
+  }
+
+  const storageState = await readJson(resolve(args.storageState));
+  const token = extractAccessToken(storageState, new URL(baseUrl).origin);
+
+  const object = await ensureObject(baseUrl, token, manifest.object);
+  const component = await ensureComponent(baseUrl, token, manifest.component);
+  const page = await ensurePage(
+    baseUrl,
+    token,
+    manifest.customPage,
+    manifest.menuItem.appApiName,
+    manifest.menuItem.apiName,
+    component.upload.bundleUrl,
+    component.upload.bundleHash,
+  );
+  const app = await resolveApp(baseUrl, token, manifest.menuItem.appApiName);
+  const menu = await ensureMenuItem(baseUrl, token, manifest.menuItem, app.id, page.published.route);
+
+  const result = {
+    deployedAt: new Date().toISOString(),
+    targetWorkspace: manifest.targetWorkspace,
+    object,
+    component,
+    customPage: page,
+    app,
+    menu,
+    runtimeUrl: `http://localhost:5173${page.published.route}`,
+  };
+
+  await mkdir(ARTIFACT_DIR, { recursive: true });
+  await writeFile(resolve(ARTIFACT_DIR, 'drill-code-extension-page.deploy.json'), `${JSON.stringify(redact(result), null, 2)}\n`);
+  process.stdout.write(`${JSON.stringify(redact(result), null, 2)}\n`);
+}
+
+main().catch((error) => {
+  process.stderr.write(`${error.stack || error.message}\n`);
+  process.exitCode = 1;
+});

package/dist/nexus-cli/src/templates/project/templates/drill-code-extension-page/src/components/drill-code-extension-page/index.js

@@ -0,0 +1,70 @@
+(() => {
+  const root = window.NexusExtensionRoot || document.getElementById('root') || document.body;
+  const context = window.NexusExtensionContext || {};
+  const accounts = context.datasets?.accounts;
+  const accountRows = Array.isArray(accounts?.records) ? accounts.records : [];
+
+  const escapeHtml = (value) => String(value ?? '')
+    .replace(/&/g, '&')
+    .replace(/</g, '&lt;')
+    .replace(/>/g, '&gt;')
+    .replace(/"/g, '&quot;');
+
+  const pick = (record, keys) => {
+    for (const key of keys) {
+      const value = record?.[key];
+      if (value !== undefined && value !== null && value !== '') {
+        if (typeof value === 'object') return value.name || value.label || value.id || JSON.stringify(value);
+        return value;
+      }
+    }
+    return '-';
+  };
+
+  const accountTableRows = accountRows.length > 0
+    ? accountRows.map((record) => [
+      '<tr>',
+      `<td>${escapeHtml(pick(record, ['displayName', 'name', 'Name']))}</td>`,
+      `<td>${escapeHtml(pick(record, ['industry', 'Industry']))}</td>`,
+      `<td>${escapeHtml(pick(record, ['phone', 'Phone']))}</td>`,
+      `<td>${escapeHtml(pick(record, ['ownerId', 'owner']))}</td>`,
+      '</tr>',
+    ].join('')).join('')
+    : '<tr><td colspan="4" style="color:#667085;">No account records returned.</td></tr>';
+
+  root.innerHTML = [
+    '<main style="font-family:Inter,Arial,sans-serif;color:#172033;background:#f7f9fc;min-height:100%;padding:18px;box-sizing:border-box;">',
+    '<section style="background:#ffffff;border:1px solid #d7dde8;border-radius:8px;padding:18px;box-shadow:0 6px 18px rgba(19,36,64,0.08);">',
+    '<div style="font-size:12px;color:#2357c6;font-weight:700;text-transform:uppercase;">Code Extension Bundle Mounted</div>',
+    '<h1 style="font-size:22px;line-height:1.25;margin:8px 0 6px;">Drill Code Extension Page</h1>',
+    '<p style="font-size:13px;line-height:1.6;margin:0;color:#4a5568;">Workspace-owned code-extension bundle with governed Account data.</p>',
+    '<dl style="display:grid;grid-template-columns:140px 1fr;gap:8px 14px;margin:18px 0 0;font-size:13px;">',
+    '<dt style="font-weight:700;color:#24324a;">Workspace</dt><dd style="margin:0;">E2E-L2-Drill-001</dd>',
+    '<dt style="font-weight:700;color:#24324a;">Custom object</dt><dd style="margin:0;">drillExtensionPage01</dd>',
+    '<dt style="font-weight:700;color:#24324a;">Component ID</dt><dd style="margin:0;">drill-code-extension-page</dd>',
+    '<dt style="font-weight:700;color:#24324a;">Source owner</dt><dd style="margin:0;">workspace project</dd>',
+    '</dl>',
+    '<section style="margin-top:18px;">',
+    '<div style="display:flex;align-items:center;justify-content:space-between;gap:12px;margin-bottom:8px;">',
+    '<h2 style="font-size:16px;margin:0;">Account records</h2>',
+    `<span style="font-size:12px;color:#667085;">${escapeHtml(accounts?.loading ? 'Loading' : `${accountRows.length} shown / ${accounts?.totalCount ?? 0} total`)}</span>`,
+    '</div>',
+    accounts?.error ? `<div style="border:1px solid #fda29b;background:#fff1f0;color:#b42318;border-radius:6px;padding:10px;font-size:13px;">${escapeHtml(accounts.error)}</div>` : [
+      '<table style="width:100%;border-collapse:collapse;font-size:13px;background:#fff;">',
+      '<thead><tr style="background:#f2f5fa;color:#344054;text-align:left;">',
+      '<th style="padding:8px;border:1px solid #d7dde8;">Name</th>',
+      '<th style="padding:8px;border:1px solid #d7dde8;">Industry</th>',
+      '<th style="padding:8px;border:1px solid #d7dde8;">Phone</th>',
+      '<th style="padding:8px;border:1px solid #d7dde8;">Owner</th>',
+      '</tr></thead>',
+      `<tbody>${accountTableRows}</tbody>`,
+      '</table>',
+    ].join(''),
+    '</section>',
+    '<pre style="white-space:pre-wrap;background:#111827;color:#e5e7eb;border-radius:6px;padding:10px;margin:18px 0 0;font-size:12px;line-height:1.5;">',
+    escapeHtml(JSON.stringify({ componentId: context.componentId, bundleHash: context.bundleHash, datasets: Object.keys(context.datasets || {}) }, null, 2)),
+    '</pre>',
+    '</section>',
+    '</main>',
+  ].join('');
+})();

package/dist/nexus-cli/src/templates/project/templates/drill-code-extension-page/src/metadata/drill-code-extension-page.manifest.json

@@ -0,0 +1,63 @@
+{
+  "schemaVersion": "workspace-extension-page/v1",
+  "targetEnvironment": "drill",
+  "targetWorkspace": "E2E-L2-Drill-001",
+  "object": {
+    "apiName": "drillExtensionPage01",
+    "labelSingular": "Drill Extension Page 01",
+    "labelPlural": "Drill Extension Page 01s",
+    "description": "Workspace-owned custom object used by the Drill code-extension page.",
+    "isCustom": true
+  },
+  "component": {
+    "componentId": "drill-code-extension-page",
+    "apiName": "drill_code_extension_page",
+    "name": "Drill Code Extension Page",
+    "sourcePath": "src/components/drill-code-extension-page/index.js",
+    "permissions": [
+      { "type": "ui" },
+      { "type": "data:read", "scope": ["drillExtensionPage01"] },
+      { "type": "data:read", "scope": ["account"] }
+    ]
+  },
+  "customPage": {
+    "apiName": "drill_code_extension_page",
+    "name": "Drill Code Extension Page",
+    "type": "APP",
+    "schema": {
+      "id": "drill-code-extension-page-schema",
+      "name": "Drill Code Extension Page",
+      "type": "app",
+      "layout": {
+        "id": "root",
+        "component": "CodeExtensionFrame",
+        "props": {
+          "componentId": "drill-code-extension-page",
+          "title": "Drill Code Extension Page",
+          "description": "Rendered from a governed workspace-owned code-extension bundle.",
+          "minHeight": 620,
+          "dataSources": [
+            {
+              "id": "accounts",
+              "type": "records",
+              "label": "Account records",
+              "config": {
+                "objectName": "account",
+                "first": 5,
+                "orderBy": [{ "name": "AscNullsLast" }]
+              }
+            }
+          ]
+        }
+      }
+    }
+  },
+  "menuItem": {
+    "appApiName": "e2e_drill_app",
+    "apiName": "drill_tab_code_extension_page",
+    "name": "Code Extension Page",
+    "type": "PAGE",
+    "position": 4,
+    "isActive": true
+  }
+}

package/dist/nexus-cli/src/templates/project/templates/drill-code-extension-page/src/tests/drill-code-extension-page.assertions.json

@@ -0,0 +1,13 @@
+{
+  "schemaVersion": "workspace-runtime-assertions/v1",
+  "targetWorkspace": "E2E-L2-Drill-001",
+  "expectedVisibleText": [
+    "Code Extension Bundle Mounted",
+    "Account records",
+    "Name",
+    "drillExtensionPage01",
+    "E2E-L2-Drill-001"
+  ],
+  "expectedMenuItemApiName": "drill_tab_code_extension_page",
+  "expectedComponentId": "drill-code-extension-page"
+}

package/dist/nexus-cli/src/templates/project/templates/drill-code-extension-page/tsconfig.json.tpl

@@ -0,0 +1,15 @@
+{
+  "compilerOptions": {
+    "target": "ES2020",
+    "module": "commonjs",
+    "lib": ["ES2020", "DOM"],
+    "outDir": "./dist",
+    "rootDir": "./src",
+    "strict": true,
+    "esModuleInterop": true,
+    "skipLibCheck": true,
+    "allowJs": true,
+    "checkJs": false
+  },
+  "include": ["src/**/*"]
+}

package/dist/nexus-cli/src/templates/project/templates/empty/README.md.tpl

@@ -0,0 +1,40 @@
+# {{NAME}}
+
+This workspace was bootstrapped from the `empty` NexusClaw workspace template.
+
+## Bootstrap
+
+- `nexus init --name {{NAME}} --template empty`
+
+## Workflow
+
+- `npm run dx:pull`
+- `npm run dx:diff`
+- `npm run dx:validate`
+- `npm run dx:pack`
+- `npm run dx:publish`
+- `npm run dx:install`
+
+Optional diff views:
+
+- `npm run dx:diff:source`
+- `npm run dx:diff:composer`
+
+The starter package workflow defaults to `packages/org-base`. Pass `-- --source packages/<name>`
+to `dx:pack`, `dx:publish`, `dx:install`, and `dx:rollback` when operating on a different local
+package.
+
+## Template package refs
+
+- none
+
+## Custom Pages (source DX)
+
+Pages live in `src/metadata/pages/` as pairs of:
+
+- `<apiName>.page.json` — page metadata
+- `<apiName>.page.schema.json` — page schema blob
+
+Use the standard DX chain — `dx:pull` / `dx:diff` / `dx:pack` / `dx:publish` / `dx:install` —
+to sync them with the target org. The Page Builder UI remains available; resolve
+conflicts through the `sourceOfTruthMode` declared on the `pages` source root.

package/dist/nexus-cli/src/templates/project/templates/empty/nexus-project.json.tpl

@@ -0,0 +1,32 @@
+{
+  "schemaVersion": "dx-workspace/v1",
+  "projectName": "{{NAME}}",
+  "apiVersion": "1.0",
+  "sourceRoots": [
+    { "path": "src/metadata", "kind": "metadata-runtime", "writeTarget": true },
+    { "path": "src/classes", "kind": "code-extension" },
+    { "path": "src/triggers", "kind": "code-extension" },
+    { "path": "src/components", "kind": "code-extension" },
+    { "path": "src/tests", "kind": "code-extension" },
+    { "path": "src/metadata/pages", "kind": "metadata-runtime", "metadataKinds": ["pages"], "sourceOfTruthMode": "require-explicit", "orphanPolicy": "prompt" }
+  ],
+  "localPackages": [
+    { "name": "workspace.org-base", "path": "packages/org-base", "packageClass": "metadata" },
+    { "name": "workspace.sales-extension", "path": "packages/sales-extension", "packageClass": "metadata" }
+  ],
+  "registry": {
+    "url": "https://packages.nexusclaw.local",
+    "channel": "stable",
+    "rootDirectory": "packages"
+  },
+  "compatibleCoreVersion": "{{CORE_VERSION}}",
+  "defaultOrg": "",
+  "defaultEnvironment": "dev",
+  "environments": [
+    { "name": "dev", "path": "env/dev.sandbox.yaml" },
+    { "name": "uat", "path": "env/uat.sandbox.yaml" },
+    { "name": "prod", "path": "env/prod.install.yaml" }
+  ],
+  "starterTemplate": "empty",
+  "packageRefs": []
+}

package/dist/nexus-cli/src/templates/project/templates/empty/package.json.tpl

@@ -0,0 +1,24 @@
+{
+  "name": "{{NAME}}",
+  "private": true,
+  "version": "0.1.0",
+  "description": "NexusClaw workspace template: {{NAME}}",
+  "scripts": {
+    "build": "tsc",
+    "dx:pull": "./scripts/pull.sh",
+    "dx:diff": "./scripts/diff-runtime.sh",
+    "dx:diff:source": "./scripts/diff-source.sh",
+    "dx:diff:composer": "./scripts/diff-composer.sh",
+    "dx:validate": "./scripts/validate.sh",
+    "dx:pack": "./scripts/pack.sh",
+    "dx:publish": "./scripts/publish.sh",
+    "dx:install": "./scripts/install.sh",
+    "dx:rollback": "./scripts/rollback.sh"
+  },
+  "dependencies": {
+    "@nexusclaw/runtime": "latest"
+  },
+  "devDependencies": {
+    "typescript": "^5.1.0"
+  }
+}

package/dist/nexus-cli/src/templates/project/templates/empty/tsconfig.json.tpl

@@ -0,0 +1,15 @@
+{
+  "compilerOptions": {
+    "target": "ES2020",
+    "module": "commonjs",
+    "lib": ["ES2020"],
+    "outDir": "./dist",
+    "rootDir": "./src",
+    "strict": true,
+    "esModuleInterop": true,
+    "experimentalDecorators": true,
+    "emitDecoratorMetadata": true,
+    "skipLibCheck": true
+  },
+  "include": ["src/**/*"]
+}

package/dist/nexus-cli/src/templates/project/templates/industry-education/README.md.tpl

@@ -0,0 +1,36 @@
+# {{NAME}}
+
+Education workspace with baseline CRM, generic overlay, and education runtime packs.
+
+## Bootstrap
+
+- `nexus init --name {{NAME}} --template industry-education`
+
+## Workflow
+
+- `npm run dx:pull`
+- `npm run dx:diff`
+- `npm run dx:validate`
+- `npm run dx:pack`
+- `npm run dx:publish`
+- `npm run dx:install`
+
+Optional diff views:
+
+- `npm run dx:diff:source`
+- `npm run dx:diff:composer`
+
+The starter package workflow defaults to `packages/org-base`. Pass `-- --source packages/<name>`
+to `dx:pack`, `dx:publish`, `dx:install`, and `dx:rollback` when operating on a different local
+package.
+
+## Custom Pages (source DX)
+
+Pages live in `src/metadata/pages/` as pairs of:
+
+- `<apiName>.page.json` — page metadata
+- `<apiName>.page.schema.json` — page schema blob
+
+Use the standard DX chain — `dx:pull` / `dx:diff` / `dx:pack` / `dx:publish` / `dx:install` —
+to sync them with the target org. The Page Builder UI remains available; resolve
+conflicts through the `sourceOfTruthMode` declared on the `pages` source root.