@percepta/create 3.1.2 → 3.1.4

package/README.md

@@ -43,10 +43,9 @@ The bare command above is the canonical UX. The flags below exist for tests and
 When you scaffold a webapp (the default flow), `create` automatically runs:
 
 1. `pnpm install` (at the monorepo root)
-2. `pnpm install --ignore-workspace` (inside the webapp package, to create the Docker build lockfile)
-3. `pnpm run setup` — Docker Compose Postgres + Drizzle migrations + seed user
-4. `pnpm dev` — Next.js dev server
-5. Opens the served URL in your default browser
+2. `pnpm run setup` — Docker Compose Postgres + Drizzle migrations + seed user
+3. `pnpm dev` — Next.js dev server
+4. Opens the served URL in your default browser
 
 Sign in as `admin@example.com` / `password` to start building.
 

package/dist/{chunk-CG7IJSB4.js → chunk-CO3YWUD6.js}

@@ -85,10 +85,10 @@ async function promptProjectDetails(defaults) {
     await defaults.beforeNamePrompt?.(projectType);
     finalName = defaults.name || await promptName("Package name?");
   } else {
+    const repoName = defaults.repoName || (defaults.projectType === "monorepo" ? defaults.name : void 0) || await promptName("Repo name?");
+    const repoTitle = toTitleCase(repoName);
     projectType = defaults.projectType ?? await promptOutsideMonorepoType();
     await defaults.beforeNamePrompt?.(projectType);
-    const repoName = defaults.repoName || (projectType === "monorepo" ? defaults.name : void 0) || await promptName("Repo name?");
-    const repoTitle = toTitleCase(repoName);
     if (projectType === "monorepo") {
       finalName = repoName;
       const finalTitle3 = repoTitle;

package/dist/{chunk-WMJT7CB5.js → chunk-V5EJIUBJ.js}

@@ -28,14 +28,17 @@ async function writeManifest(dir, manifest) {
 async function manifestExists(dir) {
   return fs.pathExists(getManifestPath(dir));
 }
-function derivePlaceholders(appName, appTitle) {
+function derivePlaceholders(appName, appTitle, repoName = appName) {
   const nameSnake = appName.replace(/-/g, "_");
+  const repoNameSnake = repoName.replace(/-/g, "_");
   return {
     __APP_NAME__: appName,
     __APP_TITLE__: appTitle,
     __DB_NAME__: nameSnake + "_db",
     __APP_NAME_UPPER__: appName.toUpperCase(),
-    __APP_NAME_SNAKE__: nameSnake
+    __APP_NAME_SNAKE__: nameSnake,
+    __REPO_NAME__: repoName,
+    __REPO_NAME_SNAKE__: repoNameSnake
   };
 }
 function resolveMosaicTemplatePath(options) {

package/dist/index.js

@@ -7,11 +7,11 @@ import {
   toSnakeCase,
   toTitleCase,
   validateProjectName
-} from "./chunk-CG7IJSB4.js";
+} from "./chunk-CO3YWUD6.js";
 import {
   derivePlaceholders,
   writeManifest
-} from "./chunk-WMJT7CB5.js";
+} from "./chunk-V5EJIUBJ.js";
 
 // src/index.ts
 import { program } from "commander";
@@ -98,7 +98,9 @@ var PLACEHOLDERS = {
   __APP_TITLE__: "title",
   __DB_NAME__: "dbName",
   __APP_NAME_UPPER__: "nameUpper",
-  __APP_NAME_SNAKE__: "nameSnake"
+  __APP_NAME_SNAKE__: "nameSnake",
+  __REPO_NAME__: "repoName",
+  __REPO_NAME_SNAKE__: "repoNameSnake"
 };
 var SKIP_DIRS2 = /* @__PURE__ */ new Set([
   "node_modules",
@@ -280,6 +282,8 @@ async function generateEnvLocal(packageDir) {
   const deploySecrets = [
     `BETTER_AUTH_SECRET=${deployAuthSecret}`,
     `ENCRYPTION_SECRET_KEY=${deployEncKey}`,
+    "",
+    "# Langfuse and LLM demo credentials are inherited from the demos-commons Ryvn variable group.",
     ""
   ].join("\n");
   await fs4.ensureDir(path4.dirname(ryvnSecretsPath));
@@ -526,7 +530,7 @@ async function writeMosaicFiles(packageDir, config, projectType) {
     templateVersion: templateVersions[projectType] || "1.0.0",
     templateCommit: "npm",
     createdAt: (/* @__PURE__ */ new Date()).toISOString(),
-    placeholders: derivePlaceholders(config.name, config.title),
+    placeholders: derivePlaceholders(config.name, config.title, config.repoName),
     source: {
       templatePath: `packages/create-mosaic-module/templates/${projectType}`
     }
@@ -546,13 +550,15 @@ _None yet \u2014 freshly created from template._
 `
   );
 }
-function buildAppConfig(name, title = toTitleCase(name)) {
+function buildAppConfig(name, title = toTitleCase(name), repoName = name) {
   return {
     name,
     title,
     dbName: `${toSnakeCase(name)}_db`,
     nameUpper: name.toUpperCase(),
-    nameSnake: toSnakeCase(name)
+    nameSnake: toSnakeCase(name),
+    repoName,
+    repoNameSnake: toSnakeCase(repoName)
   };
 }
 async function scaffoldMonorepo(targetDir, config) {
@@ -657,27 +663,6 @@ async function installAtMonorepoRoot(monorepoRoot, installDeps) {
     return false;
   }
 }
-async function installAtWebappPackage(packageDir, projectType, installDeps) {
-  if (!installDeps || !packageDir || projectType !== "webapp") {
-    return projectType !== "webapp";
-  }
-  const spinner = ora(
-    `Generating package lockfile with ${PACKAGE_MANAGER}...`
-  ).start();
-  try {
-    await runPackageManagerInstall(PACKAGE_MANAGER, packageDir, [
-      "install",
-      "--ignore-workspace"
-    ]);
-    spinner.succeed("Generated package lockfile");
-    return true;
-  } catch {
-    spinner.warn(
-      `Failed to generate package lockfile. Run '${PACKAGE_MANAGER} install --ignore-workspace' from ${packageDir}.`
-    );
-    return false;
-  }
-}
 async function maybeAutoRunWebapp(packageDir, projectType, installSucceeded) {
   if (!packageDir || projectType !== "webapp" || !installSucceeded) return false;
   return autoRunWebapp(packageDir);
@@ -812,10 +797,11 @@ async function createProject(options) {
       answers.directory = path7.join(monorepoContext.packageDir, answers.name);
     }
   }
-  const config = buildAppConfig(answers.name, answers.title);
   const monorepoName = answers.monorepoName ?? answers.name;
   const monorepoTitle = answers.monorepoTitle ?? toTitleCase(monorepoName);
   const monorepoConfig = buildAppConfig(monorepoName, monorepoTitle);
+  const configRepoName = monorepoContext.found ? path7.basename(monorepoContext.rootDir) : monorepoName;
+  const config = buildAppConfig(answers.name, answers.title, configRepoName);
   const typeLabel = getProjectTypeLabel(answers.projectType);
   if (monorepoContext.found) {
     const monorepoRoot = monorepoContext.rootDir;
@@ -846,16 +832,10 @@ async function createProject(options) {
       });
     }
     await warnIfMissingRootNpmrc(monorepoRoot);
-    const rootInstallSucceeded = await installAtMonorepoRoot(
+    const installSucceeded = await installAtMonorepoRoot(
       monorepoRoot,
       answers.installDeps
     );
-    const packageInstallSucceeded = await installAtWebappPackage(
-      packageDir,
-      answers.projectType,
-      answers.installDeps
-    );
-    const installSucceeded = answers.projectType === "webapp" ? rootInstallSucceeded && packageInstallSucceeded : rootInstallSucceeded;
     console.log();
     console.log(
       chalk.green("\u2714"),
@@ -910,16 +890,10 @@ async function createProject(options) {
       });
     }
     initGitRepo(monorepoRoot);
-    const rootInstallSucceeded = await installAtMonorepoRoot(
+    const installSucceeded = await installAtMonorepoRoot(
       monorepoRoot,
       answers.installDeps
     );
-    const packageInstallSucceeded = await installAtWebappPackage(
-      packageDir,
-      answers.projectType,
-      answers.installDeps
-    );
-    const installSucceeded = answers.projectType === "webapp" ? rootInstallSucceeded && packageInstallSucceeded : rootInstallSucceeded;
     console.log();
     console.log(
       chalk.green("\u2714"),
@@ -968,14 +942,12 @@ function printWebappNextSteps(params) {
   } = params;
   const repoRel = shPath(monorepoRelativePath) || ".";
   const pkgFromRoot = `packages/${answers.name}`;
-  const packageInstallStep = `${pm} install --ignore-workspace`;
   const pnpmSteps = ["pnpm run setup", "pnpm dev"];
   if (variant === "new") {
     const oneLinerParts2 = [];
     if (repoRel !== ".") oneLinerParts2.push(`cd ${repoRel}`);
     if (!answers.installDeps) oneLinerParts2.push(`${pm} install`);
     oneLinerParts2.push(`cd ${pkgFromRoot}`);
-    if (!answers.installDeps) oneLinerParts2.push(packageInstallStep);
     oneLinerParts2.push(...pnpmSteps);
     console.log(chalk.bold("Copy-paste (from your current directory):"));
     console.log();
@@ -991,9 +963,6 @@ function printWebappNextSteps(params) {
       console.log(chalk.dim(`  ${step2++}.`), `${pm} install`);
     }
     console.log(chalk.dim(`  ${step2++}.`), `cd ${pkgFromRoot}`);
-    if (!answers.installDeps) {
-      console.log(chalk.dim(`  ${step2++}.`), packageInstallStep);
-    }
     for (const cmd of pnpmSteps) {
       console.log(chalk.dim(`  ${step2++}.`), cmd);
     }
@@ -1003,7 +972,7 @@ function printWebappNextSteps(params) {
   const oneLinerParts = [];
   if (!answers.installDeps) {
     if (repoRel !== ".") oneLinerParts.push(`cd ${repoRel}`);
-    oneLinerParts.push(`${pm} install`, `cd ${pkgFromRoot}`, packageInstallStep);
+    oneLinerParts.push(`${pm} install`, `cd ${pkgFromRoot}`);
   } else if (pkgRel !== ".") {
     oneLinerParts.push(`cd ${pkgRel}`);
   }
@@ -1021,7 +990,6 @@ function printWebappNextSteps(params) {
     }
     console.log(chalk.dim(`  ${step++}.`), `${pm} install`);
     console.log(chalk.dim(`  ${step++}.`), `cd ${pkgFromRoot}`);
-    console.log(chalk.dim(`  ${step++}.`), packageInstallStep);
   } else if (pkgRel !== ".") {
     console.log(chalk.dim(`  ${step++}.`), `cd ${pkgRel}`);
   }
@@ -1163,25 +1131,25 @@ program.command("status").description("Show template sync status for current app
   "--mosaic-template-path <path>",
   "Path to local mosaic repo checkout"
 ).action(async (options) => {
-  const { statusCommand } = await import("./status-BTHGN6QH.js");
+  const { statusCommand } = await import("./status-QW5TQDYY.js");
   await statusCommand(options);
 });
 program.command("sync").description("Generate downstream sync context (template \u2192 app)").option(
   "--mosaic-template-path <path>",
   "Path to local mosaic repo checkout"
 ).option("--to <version>", "Target template version (default: latest)").action(async (options) => {
-  const { syncCommand } = await import("./sync-3Q27L7XZ.js");
+  const { syncCommand } = await import("./sync-RLBZDOFB.js");
   await syncCommand(options);
 });
 program.command("upstream").description("Generate upstream context (app \u2192 template)").option(
   "--mosaic-template-path <path>",
   "Path to local mosaic repo checkout"
 ).option("--files <patterns...>", "Specific files to propose upstream").action(async (options) => {
-  const { upstreamCommand } = await import("./upstream-C5KFAHVR.js");
+  const { upstreamCommand } = await import("./upstream-TQFVPMEG.js");
   await upstreamCommand(options);
 });
 program.command("init").description("Add .mosaic-template.json to an existing app").option("-t, --type <type>", "Template type (e.g., webapp, library)").option("--template-version <version>", "Template version to set").action(async (options) => {
-  const { initCommand } = await import("./init-XDWSYHYK.js");
+  const { initCommand } = await import("./init-EQZ2TCSJ.js");
   await initCommand(options);
 });
 program.parse();

package/dist/{init-XDWSYHYK.js → init-EQZ2TCSJ.js}

@@ -1,12 +1,12 @@
 import {
   VALID_PROJECT_TYPES,
   isValidProjectType
-} from "./chunk-CG7IJSB4.js";
+} from "./chunk-CO3YWUD6.js";
 import {
   derivePlaceholders,
   manifestExists,
   writeManifest
-} from "./chunk-WMJT7CB5.js";
+} from "./chunk-V5EJIUBJ.js";
 
 // src/commands/init.ts
 import path from "path";

package/dist/{status-BTHGN6QH.js → status-QW5TQDYY.js}

@@ -4,7 +4,7 @@ import {
 } from "./chunk-DCM7JOSC.js";
 import {
   readManifest
-} from "./chunk-WMJT7CB5.js";
+} from "./chunk-V5EJIUBJ.js";
 
 // src/commands/status.ts
 import path from "path";

package/dist/{sync-3Q27L7XZ.js → sync-RLBZDOFB.js}

@@ -6,7 +6,7 @@ import {
 import {
   readManifest,
   resolveMosaicTemplatePath
-} from "./chunk-WMJT7CB5.js";
+} from "./chunk-V5EJIUBJ.js";
 
 // src/commands/sync.ts
 import path from "path";

package/dist/{upstream-C5KFAHVR.js → upstream-TQFVPMEG.js}

@@ -4,7 +4,7 @@ import {
 import {
   readManifest,
   resolveMosaicTemplatePath
-} from "./chunk-WMJT7CB5.js";
+} from "./chunk-V5EJIUBJ.js";
 
 // src/commands/upstream.ts
 import path from "path";

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@percepta/create",
-  "version": "3.1.2",
+  "version": "3.1.4",
   "description": "Scaffold a new Mosaic package",
   "type": "module",
   "bin": {

package/templates/monorepo/.dockerignore

@@ -0,0 +1,18 @@
+.git
+.next
+.turbo
+.vercel
+.pnpm-store
+coverage
+dist
+build
+node_modules
+**/.next
+**/node_modules
+
+.env
+.env.*
+**/.env
+**/.env.*
+!**/.env.example
+**/deploy/ryvn/*.secrets.env

package/templates/webapp/.github/workflows/__APP_NAME__-ryvn-release.yaml

@@ -9,7 +9,9 @@ on:
       - "packages/__APP_NAME__/scripts/**"
       - "packages/__APP_NAME__/Dockerfile"
       - "packages/__APP_NAME__/package.json"
-      - "packages/__APP_NAME__/pnpm-lock.yaml"
+      - "package.json"
+      - "pnpm-lock.yaml"
+      - "pnpm-workspace.yaml"
       - ".github/workflows/__APP_NAME__-ryvn-release.yaml"
   pull_request:
     branches:
@@ -19,7 +21,9 @@ on:
       - "packages/__APP_NAME__/scripts/**"
       - "packages/__APP_NAME__/Dockerfile"
       - "packages/__APP_NAME__/package.json"
-      - "packages/__APP_NAME__/pnpm-lock.yaml"
+      - "package.json"
+      - "pnpm-lock.yaml"
+      - "pnpm-workspace.yaml"
   workflow_dispatch:
 
 env:

package/templates/webapp/.github/workflows/__APP_NAME__-terraform-ryvn-release.yaml

@@ -0,0 +1,98 @@
+name: Build & Release __APP_NAME__-terraform
+
+on:
+  push:
+    branches:
+      - "main"
+    paths:
+      - "packages/__APP_NAME__/terraform/schema/**"
+      - ".github/workflows/__APP_NAME__-terraform-ryvn-release.yaml"
+  pull_request:
+    branches:
+      - "main"
+    paths:
+      - "packages/__APP_NAME__/terraform/schema/**"
+      - ".github/workflows/__APP_NAME__-terraform-ryvn-release.yaml"
+  workflow_dispatch:
+
+env:
+  SERVICE_NAME: __APP_NAME__-terraform
+
+jobs:
+  build-and-release:
+    name: Build and Release
+    runs-on: ubuntu-latest
+    permissions:
+      contents: write
+      id-token: write
+
+    steps:
+      - name: Checkout code
+        uses: actions/checkout@v4
+        with:
+          fetch-depth: 0
+
+      - name: Install Ryvn CLI
+        uses: ryvn-technologies/install-ryvn-cli@v1.0.0
+
+      - name: Generate Release Tag
+        id: generate-tag
+        env:
+          RYVN_CLIENT_ID: ${{ secrets.RYVN_CLIENT_ID }}
+          RYVN_CLIENT_SECRET: ${{ secrets.RYVN_CLIENT_SECRET }}
+        run: |
+          tag_info=$(ryvn generate-release-tag "$SERVICE_NAME" --prefix="${SERVICE_NAME}@" -o json --default-bump-minor)
+
+          version=$(echo "$tag_info" | jq -r '.version')
+          new_tag=$(echo "$tag_info" | jq -r '.tag')
+          channel=$(echo "$tag_info" | jq -r '.channel')
+          isPreview=$(echo "$tag_info" | jq -r '.isPreview')
+
+          echo "version=$version" >> $GITHUB_OUTPUT
+          echo "new_tag=$new_tag" >> $GITHUB_OUTPUT
+          echo "channel=$channel" >> $GITHUB_OUTPUT
+          echo "isPreview=$isPreview" >> $GITHUB_OUTPUT
+
+      - name: Create Ryvn Release
+        if: |
+          !contains(github.event.head_commit.message, '[skip-release]') &&
+          !contains(github.event.pull_request.title, '[skip-release]') &&
+          (steps.generate-tag.outputs.isPreview == 'true' || github.ref == format('refs/heads/{0}', github.event.repository.default_branch))
+        env:
+          RYVN_CLIENT_ID: ${{ secrets.RYVN_CLIENT_ID }}
+          RYVN_CLIENT_SECRET: ${{ secrets.RYVN_CLIENT_SECRET }}
+        run: |
+          version="${{ steps.generate-tag.outputs.new_tag }}"
+          version="${version#"${SERVICE_NAME}@"}"
+          version="${version#@}"
+          channel="${{ steps.generate-tag.outputs.channel }}"
+
+          if [ -n "$channel" ] && [ "$channel" != "null" ]; then
+            ryvn create release "$SERVICE_NAME" "$version" --channel "$channel"
+          else
+            ryvn create release "$SERVICE_NAME" "$version"
+          fi
+
+      - name: Create GitHub Tag
+        if: |
+          github.ref == format('refs/heads/{0}', github.event.repository.default_branch) &&
+          !contains(github.event.head_commit.message, '[skip-release]') &&
+          !contains(github.event.pull_request.title, '[skip-release]')
+        run: |
+          git config --global user.email "github-actions[bot]@users.noreply.github.com"
+          git config --global user.name "github-actions[bot]"
+          git tag "${{ steps.generate-tag.outputs.new_tag }}"
+          git push origin "${{ steps.generate-tag.outputs.new_tag }}"
+
+      - name: Create GitHub Release
+        if: |
+          github.ref == format('refs/heads/{0}', github.event.repository.default_branch) &&
+          !contains(github.event.head_commit.message, '[skip-release]') &&
+          !contains(github.event.pull_request.title, '[skip-release]')
+        uses: softprops/action-gh-release@v1
+        with:
+          tag_name: ${{ steps.generate-tag.outputs.new_tag }}
+          name: ${{ steps.generate-tag.outputs.new_tag }}
+          generate_release_notes: true
+          draft: false
+          prerelease: false

package/templates/webapp/AGENTS.md

@@ -8,7 +8,8 @@ Next.js 15 full-stack application scaffolded from the Mosaic webapp template via
 - `pnpm build` — production build
 - `pnpm lint` — run ESLint
 - `pnpm test` — run Vitest tests
-- `pnpm docker:up` / `pnpm docker:down` — start/stop PostgreSQL
+- `pnpm docker:up` / `pnpm docker:down` — start PostgreSQL and wait for health / stop PostgreSQL
+- `pnpm inngest:dev` — start local Inngest dev server when working on background jobs
 - `pnpm db:generate` — generate Drizzle migrations
 - `pnpm db:migrate` — apply migrations
 - `pnpm db:setup-and-migrate` — create DB + migrate
@@ -17,6 +18,8 @@ Next.js 15 full-stack application scaffolded from the Mosaic webapp template via
 
 **Package manager**: Always use `pnpm`, never `npm` or `yarn`.
 
+Local development only requires Postgres by default. Run Inngest locally when a workflow needs it. Do not run a local LGTM/Langfuse stack unless you are specifically debugging telemetry; those are wired by the Ryvn environment for deploys. If local LLM calls are needed, `pnpm dev` loads shared provider keys from `~/.config/percepta/create.env` when it exists.
+
 ## Code Style
 
 - Double quotes for strings
@@ -44,14 +47,18 @@ src/                        # Application source
 ├── services/
 │   ├── inngest/            # Background job definitions
 │   ├── langfuse/           # LLM observability
+│   ├── llm/                # LLM provider selection and call helpers
 │   ├── logger/             # App logger setup (wraps @percepta/logger)
 │   └── observability/      # OpenTelemetry setup
 └── utils/                  # Helpers (cn, pathEncryption, etc.)
 
 deploy/                     # Infrastructure-as-code for Ryvn deployments
 └── ryvn/
-    ├── __APP_NAME__.service.yaml                                       # Ryvn Service definition
-    └── environments/<env>/installations/__APP_NAME__.env.<env>.serviceinstallation.yaml
+    ├── __APP_NAME__.service.yaml                                       # Ryvn web service
+    ├── __APP_NAME__-terraform.service.yaml                             # Ryvn schema service
+    └── environments/<env>/installations/
+        ├── __APP_NAME__.env.<env>.serviceinstallation.yaml
+        └── __APP_NAME__-terraform.env.<env>.serviceinstallation.yaml
 ```
 
 ## @percepta Packages
@@ -184,6 +191,7 @@ Detailed how-to guides for each major stack component. Read the relevant guide w
 | Guide | File | When to read |
 |-------|------|-------------|
 | Background Jobs (Inngest) | [agent-skills/inngest.md](agent-skills/inngest.md) | Adding async tasks, scheduled jobs, or agent workflows |
+| LLM Calls | [agent-skills/llm.md](agent-skills/llm.md) | Adding backend model calls, streaming, or structured generation |
 | LLM Observability (Langfuse) | [agent-skills/langfuse.md](agent-skills/langfuse.md) | App uses LLMs and needs trace/eval monitoring |
 | Database (Drizzle) | [agent-skills/database.md](agent-skills/database.md) | Adding tables, writing migrations, querying data |
 | Deployment (Ryvn) | [agent-skills/ryvn.md](agent-skills/ryvn.md) | Ryvn overview and Percepta environment context |
@@ -220,19 +228,23 @@ Better Auth configured in `src/lib/auth/`. Email/password credentials enabled by
 
 Inngest for async task processing. Define functions in `src/services/inngest/`. Configure via `INNGEST_*` env vars.
 
+### LLM Calls
+
+Use `LLMService` from `src/services/llm/LLMService.ts` for backend model calls. It chooses the configured provider, enables AI SDK telemetry, and attaches provider/model metadata for Langfuse.
+
 ### Database
 
 PostgreSQL with Drizzle ORM. Schema in `src/drizzle/schema/`, migrations in `src/drizzle/migrations/`. Connection managed by `src/services/DatabaseService.ts`.
 
 ### Observability
 
-OpenTelemetry initialized in `src/instrumentation.ts`. Langfuse for LLM tracking in `src/services/langfuse/`. Faro for frontend monitoring via `@percepta/next-utils/faro`.
+OpenTelemetry initialized in `src/instrumentation.ts`. Server traces and metrics export to the configured OTEL collector; platform logs are collected from stdout. Langfuse for LLM tracking in `src/services/langfuse/` activates when `LANGFUSE_*` env vars are configured, but only AI SDK spans are forwarded to Langfuse by default. Faro for frontend monitoring via `@percepta/next-utils/faro`.
 
 ## Deployment
 
-To deploy this app to percepta-test, follow [agent-skills/deploy.md](agent-skills/deploy.md). The Ryvn service definition and percepta-test installation YAML are already scaffolded at `deploy/ryvn/` with all values filled in — deploy is mostly "copy these two files into the infra repo, open a PR, set three secrets in the Ryvn UI."
+To deploy this app to percepta-test, follow [agent-skills/deploy.md](agent-skills/deploy.md). The direct deploy helper treats percepta-test as an existing platform environment: it preflights the shared Postgres, Inngest, OTEL collector, and LGTM installations, then creates/updates this app's Ryvn services and installations.
 
-The release CI/CD workflow is already included at `.github/workflows/ryvn-release.yaml`.
+The release CI/CD workflows are already included under `.github/workflows/`.
 
 For Ryvn CLI operations, use the `/use-ryvn` skill.
 

package/templates/webapp/Dockerfile

@@ -6,6 +6,8 @@ RUN npm install -g pnpm
 
 # Build stage:
 FROM base AS builder
+WORKDIR /repo
+ENV CI=true
 
 COPY . .
 
@@ -20,7 +22,7 @@ ENV BASE_PATH=${BASE_PATH}
 
 RUN --mount=type=cache,id=pnpm,target=/pnpm/store pnpm install --frozen-lockfile
 
-RUN NODE_ENV=production NODE_OPTIONS="--max-old-space-size=4096" pnpm build
+RUN NODE_ENV=production NODE_OPTIONS="--max-old-space-size=4096" pnpm --filter ./packages/__APP_NAME__ build
 
 # Remove .npmrc for security (contains auth token):
 RUN rm -f .npmrc
@@ -43,21 +45,28 @@ ENV NEXT_TELEMETRY_DISABLED=1
 ENV BASE_PATH=${BASE_PATH}
 
 # Copy built app from builder stage
-COPY --from=builder /app/.next/standalone ./
-COPY --from=builder /app/.next/static ./.next/static
+COPY --from=builder /repo/packages/__APP_NAME__/.next/standalone ./
+COPY --from=builder /repo/packages/__APP_NAME__/.next/static ./packages/__APP_NAME__/.next/static
 
 # Copy scripts and source files needed for start.sh and runtime
-COPY --from=builder /app/scripts ./scripts
-COPY --from=builder /app/src ./src
-COPY --from=builder /app/node_modules ./node_modules
+COPY --from=builder /repo/package.json ./package.json
+COPY --from=builder /repo/pnpm-lock.yaml ./pnpm-lock.yaml
+COPY --from=builder /repo/pnpm-workspace.yaml ./pnpm-workspace.yaml
+COPY --from=builder /repo/node_modules ./node_modules
+COPY --from=builder /repo/packages/__APP_NAME__/package.json ./packages/__APP_NAME__/package.json
+COPY --from=builder /repo/packages/__APP_NAME__/tsconfig.json ./packages/__APP_NAME__/tsconfig.json
+COPY --from=builder /repo/packages/__APP_NAME__/node_modules ./packages/__APP_NAME__/node_modules
+COPY --from=builder /repo/packages/__APP_NAME__/scripts ./packages/__APP_NAME__/scripts
+COPY --from=builder /repo/packages/__APP_NAME__/src ./packages/__APP_NAME__/src
 
 
 # Expose the port:
 EXPOSE 3000
 
 # Set correct permissions and user:
-RUN chown -R 1000:1000 /app && chmod +x /app/scripts/start.sh
+RUN chown -R 1000:1000 /app && chmod +x /app/packages/__APP_NAME__/scripts/start.sh
 USER 1000
+WORKDIR /app/packages/__APP_NAME__
 
 # Start the application:
 CMD ["./scripts/start.sh"]