@percepta/create 3.6.2 → 4.0.0

package/README.md

@@ -8,7 +8,9 @@ Scaffold and manage Mosaic packages.
 npx @percepta/create
 ```
 
-That's it. The CLI prompts you for the package type, repo name, and package name as needed. Defaults yield a running app — sign in as `app-admin@example.com` / `password`.
+That's it. The CLI prompts you for the package type, repo name, customer slug,
+and package name as needed. Defaults yield a running app — sign in as
+`app-admin@example.com` / `password`.
 
 ## Options (mostly for automation)
 
@@ -18,6 +20,7 @@ The bare command above is the canonical UX. The flags below exist for tests and
 | -------------------- | --------------------------------------------------------------------------------------------------------------------- |
 | `-t, --type <type>`  | Package type: `monorepo`, `webapp`, or `library` (skips the type prompt)                                              |
 | `--name <name>`      | Package/app name (skips the package name prompt)                                                                      |
+| `--customer <slug>`  | Customer slug stored in the generated monorepo workspace manifest                                                     |
 | `--repo-name <name>` | Repo name when creating a new monorepo (skips the repo name prompt)                                                   |
 | `--cwd <dir>`        | Run as if the CLI was started from `<dir>`                                                                            |
 | `--skip-install`     | Skip dependency installation, which also skips the auto-run setup + dev + browser, leaving you with manual next-steps |
@@ -27,6 +30,8 @@ The bare command above is the canonical UX. The flags below exist for tests and
 
 - `create` (default) — scaffold a new Mosaic package
 - `add` — add a webapp or library to the current monorepo
+- `infra register-os-blueprint` — open or update an infra PR for this customer monorepo's OS blueprint
+- `infra register-app <app>` — open or update an infra PR for a webapp database
 - `status` — show template sync status for the current app
 - `sync` — generate downstream sync context (template → app)
 - `upstream` — generate upstream context (app → template)
@@ -36,11 +41,12 @@ The bare command above is the canonical UX. The flags below exist for tests and
 
 `create` auto-detects whether you're inside an existing pnpm monorepo (by walking up for `pnpm-workspace.yaml`) and changes its prompts accordingly:
 
-- **Outside a monorepo** — you're asked "Initialize with a webapp?" (Y/n, default Y), then for the repo name. Picking the webapp option also asks for the webapp name and scaffolds it inside `packages/<webapp-name>/`. Declining gives you an empty monorepo.
+- **Outside a monorepo** — you're asked for the repo name, whether to initialize with a webapp (Y/n, default Y), and the customer slug stored in `.mosaic-workspace.json`. Picking the webapp option also asks for the webapp name and scaffolds it inside `packages/<webapp-name>/`. Declining gives you an empty monorepo.
 - **Inside a monorepo** — pick `Webapp` (default) or `Library` to add a new package under the workspace pattern.
 
-Generated monorepos include a root `.mosaic-workspace.json` and a pinned
-`pnpm mosaic` script. Prefer the workspace-owned command when adding packages:
+Generated monorepos include a root `.mosaic-workspace.json` with the customer
+slug plus template compatibility metadata, and a pinned `pnpm mosaic` script.
+Prefer the workspace-owned command when adding packages:
 
 ```bash
 pnpm mosaic add webapp my-app
@@ -56,7 +62,7 @@ newer scaffold.
 When you scaffold a webapp (the default flow), `create` automatically runs:
 
 1. `pnpm install` (at the monorepo root)
-2. `pnpm run setup` — Docker Compose Postgres + Drizzle migrations + seed users
+2. `pnpm run setup` — root Docker Compose services + local database creation + Drizzle migrations + seed users
 3. `pnpm dev` — Next.js dev server
 4. Opens the served URL in your default browser
 
@@ -76,7 +82,32 @@ The `webapp` template ships with:
 
 The `library` template ships with TypeScript, ESLint, and a minimal `src/index.ts`.
 
-The `monorepo` template ships with `pnpm-workspace.yaml`, root scripts (`dev`, `build`, `lint`, `test`), strict `tsconfig.json`, flat-config ESLint, and an empty `packages/` directory.
+The `monorepo` template ships with `pnpm-workspace.yaml`, root local Postgres/SpiceDB Docker Compose, root scripts (`setup`, `dev`, `build`, `lint`, `test`), strict `tsconfig.json`, flat-config ESLint, and an empty `packages/` directory.
+
+## Customer OS blueprint
+
+After creating a customer monorepo, register the customer OS blueprint in
+`Percepta-Core/infra`:
+
+```bash
+pnpm mosaic infra register-os-blueprint
+```
+
+The command reads `customerSlug` from `.mosaic-workspace.json`, opens or
+updates an infra PR that writes
+`ryvn/definitions/<customer>/blueprints/<customer>-os.blueprint.yaml`, and does
+not create environment installations. It authenticates with `GITHUB_TOKEN`,
+`GH_TOKEN`, or the GitHub CLI's `gh auth token`.
+
+After adding a webapp, register its app database in that customer OS blueprint:
+
+```bash
+pnpm mosaic infra register-app my-app
+```
+
+This opens or updates an infra PR that adds `my-app: {}` to the customer OS
+blueprint's `app_databases` default. Merge the OS blueprint PR before
+registering apps.
 
 ## Development
 

package/dist/{git-ops-C2CIjuce.js → git-ops-BD7JNnal.js}

@@ -48,4 +48,4 @@ function getFileAtTag(repoPath, tag, filePath) {
 //#endregion
 export { getTemplateVersionFromTag as i, getLatestTemplateTag as n, getTemplateDiff as r, getFileAtTag as t };
 
-//# sourceMappingURL=git-ops-C2CIjuce.js.map
+//# sourceMappingURL=git-ops-BD7JNnal.js.map

package/dist/{git-ops-C2CIjuce.js.map → git-ops-BD7JNnal.js.map}

@@ -1 +1 @@
-{"version":3,"file":"git-ops-C2CIjuce.js","names":[],"sources":["../src/utils/git-ops.ts"],"sourcesContent":["import { execFileSync } from \"node:child_process\";\n\n// Git requires forward slashes for in-repo paths regardless of OS\nfunction toGitPath(p: string): string {\n  return p.replace(/\\\\/g, \"/\");\n}\n\nexport function getLatestTemplateTag(\n  type: string,\n  repoPath: string,\n): string | null {\n  try {\n    const tags = execFileSync(\n      \"git\",\n      [\"tag\", \"-l\", `template/${type}/*`, \"--sort=-v:refname\"],\n      { cwd: repoPath, encoding: \"utf-8\" },\n    ).trim();\n    if (!tags) return null;\n    return tags.split(\"\\n\")[0] ?? null;\n  } catch {\n    return null;\n  }\n}\n\nexport function getTemplateVersionFromTag(tag: string): string {\n  const parts = tag.split(\"/\");\n  return parts[parts.length - 1] ?? \"\";\n}\n\nexport function getTemplateDiff(\n  repoPath: string,\n  templatePath: string,\n  fromTag: string,\n  toTag: string,\n): string {\n  return execFileSync(\n    \"git\",\n    [\"diff\", `${fromTag}..${toTag}`, \"--\", toGitPath(templatePath)],\n    {\n      cwd: repoPath,\n      encoding: \"utf-8\",\n    },\n  );\n}\n\nexport function getFileAtTag(\n  repoPath: string,\n  tag: string,\n  filePath: string,\n): string | null {\n  try {\n    return execFileSync(\"git\", [\"show\", `${tag}:${toGitPath(filePath)}`], {\n      cwd: repoPath,\n      encoding: \"utf-8\",\n    });\n  } catch {\n    return null;\n  }\n}\n"],"mappings":";;AAGA,SAAS,UAAU,GAAmB;AACpC,QAAO,EAAE,QAAQ,OAAO,IAAI;;AAG9B,SAAgB,qBACd,MACA,UACe;AACf,KAAI;EACF,MAAM,OAAO,aACX,OACA;GAAC;GAAO;GAAM,YAAY,KAAK;GAAK;GAAoB,EACxD;GAAE,KAAK;GAAU,UAAU;GAAS,CACrC,CAAC,MAAM;AACR,MAAI,CAAC,KAAM,QAAO;AAClB,SAAO,KAAK,MAAM,KAAK,CAAC,MAAM;SACxB;AACN,SAAO;;;AAIX,SAAgB,0BAA0B,KAAqB;CAC7D,MAAM,QAAQ,IAAI,MAAM,IAAI;AAC5B,QAAO,MAAM,MAAM,SAAS,MAAM;;AAGpC,SAAgB,gBACd,UACA,cACA,SACA,OACQ;AACR,QAAO,aACL,OACA;EAAC;EAAQ,GAAG,QAAQ,IAAI;EAAS;EAAM,UAAU,aAAa;EAAC,EAC/D;EACE,KAAK;EACL,UAAU;EACX,CACF;;AAGH,SAAgB,aACd,UACA,KACA,UACe;AACf,KAAI;AACF,SAAO,aAAa,OAAO,CAAC,QAAQ,GAAG,IAAI,GAAG,UAAU,SAAS,GAAG,EAAE;GACpE,KAAK;GACL,UAAU;GACX,CAAC;SACI;AACN,SAAO"}
+{"version":3,"file":"git-ops-BD7JNnal.js","names":[],"sources":["../src/utils/git-ops.ts"],"sourcesContent":["import { execFileSync } from \"node:child_process\";\n\n// Git requires forward slashes for in-repo paths regardless of OS\nfunction toGitPath(p: string): string {\n  return p.replace(/\\\\/g, \"/\");\n}\n\nexport function getLatestTemplateTag(\n  type: string,\n  repoPath: string,\n): string | null {\n  try {\n    const tags = execFileSync(\n      \"git\",\n      [\"tag\", \"-l\", `template/${type}/*`, \"--sort=-v:refname\"],\n      { cwd: repoPath, encoding: \"utf-8\" },\n    ).trim();\n    if (!tags) return null;\n    return tags.split(\"\\n\")[0] ?? null;\n  } catch {\n    return null;\n  }\n}\n\nexport function getTemplateVersionFromTag(tag: string): string {\n  const parts = tag.split(\"/\");\n  return parts[parts.length - 1] ?? \"\";\n}\n\nexport function getTemplateDiff(\n  repoPath: string,\n  templatePath: string,\n  fromTag: string,\n  toTag: string,\n): string {\n  return execFileSync(\n    \"git\",\n    [\"diff\", `${fromTag}..${toTag}`, \"--\", toGitPath(templatePath)],\n    {\n      cwd: repoPath,\n      encoding: \"utf-8\",\n    },\n  );\n}\n\nexport function getFileAtTag(\n  repoPath: string,\n  tag: string,\n  filePath: string,\n): string | null {\n  try {\n    return execFileSync(\"git\", [\"show\", `${tag}:${toGitPath(filePath)}`], {\n      cwd: repoPath,\n      encoding: \"utf-8\",\n    });\n  } catch {\n    return null;\n  }\n}\n"],"mappings":";;AAGA,SAAS,UAAU,GAAmB;AACpC,QAAO,EAAE,QAAQ,OAAO,IAAI;;AAG9B,SAAgB,qBACd,MACA,UACe;AACf,KAAI;EACF,MAAM,OAAO,aACX,OACA;GAAC;GAAO;GAAM,YAAY,KAAK;GAAK;GAAoB,EACxD;GAAE,KAAK;GAAU,UAAU;GAAS,CACrC,CAAC,MAAM;AACR,MAAI,CAAC,KAAM,QAAO;AAClB,SAAO,KAAK,MAAM,KAAK,CAAC,MAAM;SACxB;AACN,SAAO;;;AAIX,SAAgB,0BAA0B,KAAqB;CAC7D,MAAM,QAAQ,IAAI,MAAM,IAAI;AAC5B,QAAO,MAAM,MAAM,SAAS,MAAM;;AAGpC,SAAgB,gBACd,UACA,cACA,SACA,OACQ;AACR,QAAO,aACL,OACA;EAAC;EAAQ,GAAG,QAAQ,IAAI;EAAS;EAAM,UAAU,aAAa;EAAC,EAC/D;EACE,KAAK;EACL,UAAU;EACX,CACF;;AAGH,SAAgB,aACd,UACA,KACA,UACe;AACf,KAAI;AACF,SAAO,aAAa,OAAO,CAAC,QAAQ,GAAG,IAAI,GAAG,UAAU,SAAS,GAAG,EAAE;GACpE,KAAK;GACL,UAAU;GACX,CAAC;SACI;AACN,SAAO"}

package/dist/github-RCIMUq70.js

@@ -0,0 +1,131 @@
+import { execFileSync } from "node:child_process";
+//#region src/commands/infra/github.ts
+const GITHUB_API_BASE_URL = "https://api.github.com";
+const INFRA_REPOSITORY = "Percepta-Core/infra";
+const INFRA_REPOSITORY_OWNER = "Percepta-Core";
+const INFRA_BASE_BRANCH = "main";
+async function createOrUpdateInfraPullRequest(args) {
+	const mainSha = await args.github.getBranchSha(INFRA_BASE_BRANCH);
+	if (!mainSha) throw new Error(`Could not find ${INFRA_REPOSITORY}@${INFRA_BASE_BRANCH}.`);
+	if (!await args.github.getBranchSha(args.branchName)) await args.github.createBranch(args.branchName, mainSha);
+	const branchFile = await args.github.getFile(args.targetPath, args.branchName);
+	const existingPullRequest = await args.github.findOpenPullRequest(args.branchName);
+	if (branchFile?.content !== args.content) await args.github.putFile({
+		path: args.targetPath,
+		branch: args.branchName,
+		content: args.content,
+		message: args.message,
+		sha: branchFile?.sha ?? args.baseFileSha
+	});
+	return {
+		pullRequestUrl: (existingPullRequest ?? await args.github.createPullRequest({
+			branch: args.branchName,
+			title: args.title,
+			body: args.body
+		})).url,
+		status: existingPullRequest ? "updated_pr" : "created_pr"
+	};
+}
+function createInfraGitHubApi(token) {
+	return {
+		async getFile(filePath, ref) {
+			const response = await requestGitHub(token, "GET", `/repos/${INFRA_REPOSITORY}/contents/${encodePathSegments(filePath)}?ref=${encodeURIComponent(ref)}`);
+			if (response == null) return null;
+			if (typeof response.sha !== "string" || typeof response.content !== "string" || response.type !== "file") throw new Error(`Unexpected GitHub content response for ${filePath} in ${INFRA_REPOSITORY}.`);
+			return {
+				sha: response.sha,
+				content: Buffer.from(response.content.replace(/\s/g, ""), "base64").toString("utf-8")
+			};
+		},
+		async getBranchSha(branch) {
+			const response = await requestGitHub(token, "GET", `/repos/${INFRA_REPOSITORY}/git/ref/heads/${branch}`);
+			if (response == null) return null;
+			const sha = response.object?.sha;
+			if (typeof sha !== "string") throw new Error(`Unexpected GitHub ref response for ${branch}.`);
+			return sha;
+		},
+		async createBranch(branch, sha) {
+			await requestGitHub(token, "POST", `/repos/${INFRA_REPOSITORY}/git/refs`, {
+				ref: `refs/heads/${branch}`,
+				sha
+			});
+		},
+		async putFile({ path: filePath, branch, content, message, sha }) {
+			await requestGitHub(token, "PUT", `/repos/${INFRA_REPOSITORY}/contents/${encodePathSegments(filePath)}`, {
+				branch,
+				content: Buffer.from(content, "utf-8").toString("base64"),
+				message,
+				sha
+			});
+		},
+		async findOpenPullRequest(branch) {
+			const pullRequest = (await requestGitHub(token, "GET", `/repos/${INFRA_REPOSITORY}/pulls?${new URLSearchParams({
+				base: INFRA_BASE_BRANCH,
+				head: `${INFRA_REPOSITORY_OWNER}:${branch}`,
+				state: "open"
+			})}`))?.[0];
+			if (!pullRequest) return null;
+			if (typeof pullRequest.html_url !== "string" || typeof pullRequest.number !== "number") throw new Error(`Unexpected GitHub pull request response.`);
+			return {
+				number: pullRequest.number,
+				url: pullRequest.html_url
+			};
+		},
+		async createPullRequest({ branch, title, body }) {
+			const response = await requestGitHub(token, "POST", `/repos/${INFRA_REPOSITORY}/pulls`, {
+				base: INFRA_BASE_BRANCH,
+				body,
+				head: branch,
+				maintainer_can_modify: true,
+				title
+			});
+			if (!response || typeof response.html_url !== "string" || typeof response.number !== "number") throw new Error(`Unexpected GitHub pull request response.`);
+			return {
+				number: response.number,
+				url: response.html_url
+			};
+		}
+	};
+}
+function resolveGitHubToken() {
+	const envToken = process.env.GITHUB_TOKEN ?? process.env.GH_TOKEN;
+	if (envToken) return envToken;
+	try {
+		const token = execFileSync("gh", ["auth", "token"], {
+			encoding: "utf-8",
+			stdio: [
+				"ignore",
+				"pipe",
+				"ignore"
+			]
+		}).trim();
+		if (token) return token;
+	} catch {}
+	throw new Error("GitHub auth is required. Set GITHUB_TOKEN or GH_TOKEN, or run `gh auth login`.");
+}
+async function requestGitHub(token, method, path, body) {
+	const response = await fetch(`${GITHUB_API_BASE_URL}${path}`, {
+		method,
+		headers: {
+			Accept: "application/vnd.github+json",
+			Authorization: `Bearer ${token}`,
+			"Content-Type": "application/json",
+			"X-GitHub-Api-Version": "2022-11-28"
+		},
+		body: body === void 0 ? void 0 : JSON.stringify(body)
+	});
+	if (response.status === 404) return null;
+	if (!response.ok) {
+		const responseText = await response.text();
+		throw new Error(`GitHub ${method} ${path} failed with ${response.status}: ${responseText}`);
+	}
+	if (response.status === 204) return null;
+	return await response.json();
+}
+function encodePathSegments(filePath) {
+	return filePath.split("/").map(encodeURIComponent).join("/");
+}
+//#endregion
+export { resolveGitHubToken as a, createOrUpdateInfraPullRequest as i, INFRA_REPOSITORY as n, createInfraGitHubApi as r, INFRA_BASE_BRANCH as t };
+
+//# sourceMappingURL=github-RCIMUq70.js.map

package/dist/github-RCIMUq70.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"github-RCIMUq70.js","names":[],"sources":["../src/commands/infra/github.ts"],"sourcesContent":["import { execFileSync } from \"node:child_process\";\n\nconst GITHUB_API_BASE_URL = \"https://api.github.com\";\n\nexport const INFRA_REPOSITORY = \"Percepta-Core/infra\";\nexport const INFRA_REPOSITORY_OWNER = \"Percepta-Core\";\nexport const INFRA_BASE_BRANCH = \"main\";\n\nexport interface GitHubFile {\n  sha: string;\n  content: string;\n}\n\nexport interface GitHubPullRequest {\n  number: number;\n  url: string;\n}\n\nexport interface InfraGitHubApi {\n  getFile(path: string, ref: string): Promise<GitHubFile | null>;\n  getBranchSha(branch: string): Promise<string | null>;\n  createBranch(branch: string, sha: string): Promise<void>;\n  putFile(args: {\n    path: string;\n    branch: string;\n    content: string;\n    message: string;\n    sha?: string;\n  }): Promise<void>;\n  findOpenPullRequest(branch: string): Promise<GitHubPullRequest | null>;\n  createPullRequest(args: {\n    branch: string;\n    title: string;\n    body: string;\n  }): Promise<GitHubPullRequest>;\n}\n\nexport interface InfraPullRequestResult {\n  pullRequestUrl: string;\n  status: \"created_pr\" | \"updated_pr\";\n}\n\nexport async function createOrUpdateInfraPullRequest(args: {\n  baseFileSha?: string;\n  body: string;\n  branchName: string;\n  content: string;\n  github: InfraGitHubApi;\n  message: string;\n  targetPath: string;\n  title: string;\n}): Promise<InfraPullRequestResult> {\n  const mainSha = await args.github.getBranchSha(INFRA_BASE_BRANCH);\n  if (!mainSha) {\n    throw new Error(`Could not find ${INFRA_REPOSITORY}@${INFRA_BASE_BRANCH}.`);\n  }\n\n  if (!(await args.github.getBranchSha(args.branchName))) {\n    await args.github.createBranch(args.branchName, mainSha);\n  }\n\n  const branchFile = await args.github.getFile(\n    args.targetPath,\n    args.branchName,\n  );\n  const existingPullRequest = await args.github.findOpenPullRequest(\n    args.branchName,\n  );\n  if (branchFile?.content !== args.content) {\n    await args.github.putFile({\n      path: args.targetPath,\n      branch: args.branchName,\n      content: args.content,\n      message: args.message,\n      sha: branchFile?.sha ?? args.baseFileSha,\n    });\n  }\n\n  const pullRequest =\n    existingPullRequest ??\n    (await args.github.createPullRequest({\n      branch: args.branchName,\n      title: args.title,\n      body: args.body,\n    }));\n\n  return {\n    pullRequestUrl: pullRequest.url,\n    status: existingPullRequest ? \"updated_pr\" : \"created_pr\",\n  };\n}\n\nexport function createInfraGitHubApi(token: string): InfraGitHubApi {\n  return {\n    async getFile(filePath, ref) {\n      const encodedPath = encodePathSegments(filePath);\n      const response = await requestGitHub<{\n        content?: unknown;\n        sha?: unknown;\n        type?: unknown;\n      }>(\n        token,\n        \"GET\",\n        `/repos/${INFRA_REPOSITORY}/contents/${encodedPath}?ref=${encodeURIComponent(ref)}`,\n      );\n      if (response == null) return null;\n      if (\n        typeof response.sha !== \"string\" ||\n        typeof response.content !== \"string\" ||\n        response.type !== \"file\"\n      ) {\n        throw new Error(\n          `Unexpected GitHub content response for ${filePath} in ${INFRA_REPOSITORY}.`,\n        );\n      }\n\n      return {\n        sha: response.sha,\n        content: Buffer.from(\n          response.content.replace(/\\s/g, \"\"),\n          \"base64\",\n        ).toString(\"utf-8\"),\n      };\n    },\n\n    async getBranchSha(branch) {\n      const response = await requestGitHub<{\n        object?: { sha?: unknown };\n      }>(token, \"GET\", `/repos/${INFRA_REPOSITORY}/git/ref/heads/${branch}`);\n      if (response == null) return null;\n      const sha = response.object?.sha;\n      if (typeof sha !== \"string\") {\n        throw new Error(`Unexpected GitHub ref response for ${branch}.`);\n      }\n      return sha;\n    },\n\n    async createBranch(branch, sha) {\n      await requestGitHub(\n        token,\n        \"POST\",\n        `/repos/${INFRA_REPOSITORY}/git/refs`,\n        {\n          ref: `refs/heads/${branch}`,\n          sha,\n        },\n      );\n    },\n\n    async putFile({ path: filePath, branch, content, message, sha }) {\n      const encodedPath = encodePathSegments(filePath);\n      await requestGitHub(\n        token,\n        \"PUT\",\n        `/repos/${INFRA_REPOSITORY}/contents/${encodedPath}`,\n        {\n          branch,\n          content: Buffer.from(content, \"utf-8\").toString(\"base64\"),\n          message,\n          sha,\n        },\n      );\n    },\n\n    async findOpenPullRequest(branch) {\n      const params = new URLSearchParams({\n        base: INFRA_BASE_BRANCH,\n        head: `${INFRA_REPOSITORY_OWNER}:${branch}`,\n        state: \"open\",\n      });\n      const response = await requestGitHub<\n        Array<{ html_url?: unknown; number?: unknown }>\n      >(token, \"GET\", `/repos/${INFRA_REPOSITORY}/pulls?${params}`);\n      const pullRequest = response?.[0];\n      if (!pullRequest) return null;\n      if (\n        typeof pullRequest.html_url !== \"string\" ||\n        typeof pullRequest.number !== \"number\"\n      ) {\n        throw new Error(`Unexpected GitHub pull request response.`);\n      }\n      return {\n        number: pullRequest.number,\n        url: pullRequest.html_url,\n      };\n    },\n\n    async createPullRequest({ branch, title, body }) {\n      const response = await requestGitHub<{\n        html_url?: unknown;\n        number?: unknown;\n      }>(token, \"POST\", `/repos/${INFRA_REPOSITORY}/pulls`, {\n        base: INFRA_BASE_BRANCH,\n        body,\n        head: branch,\n        maintainer_can_modify: true,\n        title,\n      });\n      if (\n        !response ||\n        typeof response.html_url !== \"string\" ||\n        typeof response.number !== \"number\"\n      ) {\n        throw new Error(`Unexpected GitHub pull request response.`);\n      }\n      return {\n        number: response.number,\n        url: response.html_url,\n      };\n    },\n  };\n}\n\nexport function resolveGitHubToken(): string {\n  const envToken = process.env.GITHUB_TOKEN ?? process.env.GH_TOKEN;\n  if (envToken) return envToken;\n\n  try {\n    const token = execFileSync(\"gh\", [\"auth\", \"token\"], {\n      encoding: \"utf-8\",\n      stdio: [\"ignore\", \"pipe\", \"ignore\"],\n    }).trim();\n    if (token) return token;\n  } catch {\n    // Fall through to the actionable error below.\n  }\n\n  throw new Error(\n    \"GitHub auth is required. Set GITHUB_TOKEN or GH_TOKEN, or run `gh auth login`.\",\n  );\n}\n\nasync function requestGitHub<T>(\n  token: string,\n  method: string,\n  path: string,\n  body?: unknown,\n): Promise<T | null> {\n  const response = await fetch(`${GITHUB_API_BASE_URL}${path}`, {\n    method,\n    headers: {\n      Accept: \"application/vnd.github+json\",\n      Authorization: `Bearer ${token}`,\n      \"Content-Type\": \"application/json\",\n      \"X-GitHub-Api-Version\": \"2022-11-28\",\n    },\n    body: body === undefined ? undefined : JSON.stringify(body),\n  });\n\n  if (response.status === 404) return null;\n\n  if (!response.ok) {\n    const responseText = await response.text();\n    throw new Error(\n      `GitHub ${method} ${path} failed with ${response.status}: ${responseText}`,\n    );\n  }\n\n  if (response.status === 204) return null;\n  return (await response.json()) as T;\n}\n\nfunction encodePathSegments(filePath: string): string {\n  return filePath.split(\"/\").map(encodeURIComponent).join(\"/\");\n}\n"],"mappings":";;AAEA,MAAM,sBAAsB;AAE5B,MAAa,mBAAmB;AAChC,MAAa,yBAAyB;AACtC,MAAa,oBAAoB;AAoCjC,eAAsB,+BAA+B,MASjB;CAClC,MAAM,UAAU,MAAM,KAAK,OAAO,aAAa,kBAAkB;AACjE,KAAI,CAAC,QACH,OAAM,IAAI,MAAM,kBAAkB,iBAAiB,GAAG,kBAAkB,GAAG;AAG7E,KAAI,CAAE,MAAM,KAAK,OAAO,aAAa,KAAK,WAAW,CACnD,OAAM,KAAK,OAAO,aAAa,KAAK,YAAY,QAAQ;CAG1D,MAAM,aAAa,MAAM,KAAK,OAAO,QACnC,KAAK,YACL,KAAK,WACN;CACD,MAAM,sBAAsB,MAAM,KAAK,OAAO,oBAC5C,KAAK,WACN;AACD,KAAI,YAAY,YAAY,KAAK,QAC/B,OAAM,KAAK,OAAO,QAAQ;EACxB,MAAM,KAAK;EACX,QAAQ,KAAK;EACb,SAAS,KAAK;EACd,SAAS,KAAK;EACd,KAAK,YAAY,OAAO,KAAK;EAC9B,CAAC;AAWJ,QAAO;EACL,iBARA,uBACC,MAAM,KAAK,OAAO,kBAAkB;GACnC,QAAQ,KAAK;GACb,OAAO,KAAK;GACZ,MAAM,KAAK;GACZ,CAAC,EAG0B;EAC5B,QAAQ,sBAAsB,eAAe;EAC9C;;AAGH,SAAgB,qBAAqB,OAA+B;AAClE,QAAO;EACL,MAAM,QAAQ,UAAU,KAAK;GAE3B,MAAM,WAAW,MAAM,cAKrB,OACA,OACA,UAAU,iBAAiB,YART,mBAAmB,SAQa,CAAC,OAAO,mBAAmB,IAAI,GAClF;AACD,OAAI,YAAY,KAAM,QAAO;AAC7B,OACE,OAAO,SAAS,QAAQ,YACxB,OAAO,SAAS,YAAY,YAC5B,SAAS,SAAS,OAElB,OAAM,IAAI,MACR,0CAA0C,SAAS,MAAM,iBAAiB,GAC3E;AAGH,UAAO;IACL,KAAK,SAAS;IACd,SAAS,OAAO,KACd,SAAS,QAAQ,QAAQ,OAAO,GAAG,EACnC,SACD,CAAC,SAAS,QAAQ;IACpB;;EAGH,MAAM,aAAa,QAAQ;GACzB,MAAM,WAAW,MAAM,cAEpB,OAAO,OAAO,UAAU,iBAAiB,iBAAiB,SAAS;AACtE,OAAI,YAAY,KAAM,QAAO;GAC7B,MAAM,MAAM,SAAS,QAAQ;AAC7B,OAAI,OAAO,QAAQ,SACjB,OAAM,IAAI,MAAM,sCAAsC,OAAO,GAAG;AAElE,UAAO;;EAGT,MAAM,aAAa,QAAQ,KAAK;AAC9B,SAAM,cACJ,OACA,QACA,UAAU,iBAAiB,YAC3B;IACE,KAAK,cAAc;IACnB;IACD,CACF;;EAGH,MAAM,QAAQ,EAAE,MAAM,UAAU,QAAQ,SAAS,SAAS,OAAO;AAE/D,SAAM,cACJ,OACA,OACA,UAAU,iBAAiB,YAJT,mBAAmB,SAIa,IAClD;IACE;IACA,SAAS,OAAO,KAAK,SAAS,QAAQ,CAAC,SAAS,SAAS;IACzD;IACA;IACD,CACF;;EAGH,MAAM,oBAAoB,QAAQ;GAShC,MAAM,eAAc,MAHG,cAErB,OAAO,OAAO,UAAU,iBAAiB,SAAS,IAPjC,gBAAgB;IACjC,MAAM;IACN,MAAM,GAAG,uBAAuB,GAAG;IACnC,OAAO;IACR,CAGyD,GAAG,IAC9B;AAC/B,OAAI,CAAC,YAAa,QAAO;AACzB,OACE,OAAO,YAAY,aAAa,YAChC,OAAO,YAAY,WAAW,SAE9B,OAAM,IAAI,MAAM,2CAA2C;AAE7D,UAAO;IACL,QAAQ,YAAY;IACpB,KAAK,YAAY;IAClB;;EAGH,MAAM,kBAAkB,EAAE,QAAQ,OAAO,QAAQ;GAC/C,MAAM,WAAW,MAAM,cAGpB,OAAO,QAAQ,UAAU,iBAAiB,SAAS;IACpD,MAAM;IACN;IACA,MAAM;IACN,uBAAuB;IACvB;IACD,CAAC;AACF,OACE,CAAC,YACD,OAAO,SAAS,aAAa,YAC7B,OAAO,SAAS,WAAW,SAE3B,OAAM,IAAI,MAAM,2CAA2C;AAE7D,UAAO;IACL,QAAQ,SAAS;IACjB,KAAK,SAAS;IACf;;EAEJ;;AAGH,SAAgB,qBAA6B;CAC3C,MAAM,WAAW,QAAQ,IAAI,gBAAgB,QAAQ,IAAI;AACzD,KAAI,SAAU,QAAO;AAErB,KAAI;EACF,MAAM,QAAQ,aAAa,MAAM,CAAC,QAAQ,QAAQ,EAAE;GAClD,UAAU;GACV,OAAO;IAAC;IAAU;IAAQ;IAAS;GACpC,CAAC,CAAC,MAAM;AACT,MAAI,MAAO,QAAO;SACZ;AAIR,OAAM,IAAI,MACR,iFACD;;AAGH,eAAe,cACb,OACA,QACA,MACA,MACmB;CACnB,MAAM,WAAW,MAAM,MAAM,GAAG,sBAAsB,QAAQ;EAC5D;EACA,SAAS;GACP,QAAQ;GACR,eAAe,UAAU;GACzB,gBAAgB;GAChB,wBAAwB;GACzB;EACD,MAAM,SAAS,KAAA,IAAY,KAAA,IAAY,KAAK,UAAU,KAAK;EAC5D,CAAC;AAEF,KAAI,SAAS,WAAW,IAAK,QAAO;AAEpC,KAAI,CAAC,SAAS,IAAI;EAChB,MAAM,eAAe,MAAM,SAAS,MAAM;AAC1C,QAAM,IAAI,MACR,UAAU,OAAO,GAAG,KAAK,eAAe,SAAS,OAAO,IAAI,eAC7D;;AAGH,KAAI,SAAS,WAAW,IAAK,QAAO;AACpC,QAAQ,MAAM,SAAS,MAAM;;AAG/B,SAAS,mBAAmB,UAA0B;AACpD,QAAO,SAAS,MAAM,IAAI,CAAC,IAAI,mBAAmB,CAAC,KAAK,IAAI"}

package/dist/index.js

@@ -1,4 +1,7 @@
 #!/usr/bin/env node
+import { i as toTitleCase, n as toKebabCase, r as toSnakeCase, t as getTemplateVersion } from "./template-versions-CEIP9vhl.js";
+import { a as writeManifest, c as isValidMosaicDesignTheme, o as DEFAULT_MOSAIC_DESIGN_THEME, s as VALID_MOSAIC_DESIGN_THEMES, t as derivePlaceholders } from "./manifest-CqIDnbgs.js";
+import { t as validateProjectName } from "./validate-dssldJAj.js";
 import { program } from "commander";
 import { execSync, spawn } from "node:child_process";
 import path from "node:path";
@@ -9,21 +12,6 @@ import { fileURLToPath } from "node:url";
 import { parse } from "yaml";
 import { randomBytes } from "node:crypto";
 import inquirer from "inquirer";
-import validateNpmPackageName from "validate-npm-package-name";
-//#region src/utils/case-converters.ts
-/** Lowercase, hyphenated, npm-package-name-safe form: "My Cool App" → "my-cool-app". */
-function toKebabCase(str) {
-	return str.toLowerCase().replace(/[^a-z0-9-]/g, "-").replace(/-+/g, "-").replace(/^-|-$/g, "");
-}
-/** Display form derived from a kebab-case name: "my-cool-app" → "My Cool App". */
-function toTitleCase(str) {
-	return str.split("-").map((word) => word.charAt(0).toUpperCase() + word.slice(1)).join(" ");
-}
-/** Identifier form for env vars and DB names: "my-cool-app" → "my_cool_app". */
-function toSnakeCase(str) {
-	return str.replace(/-/g, "_");
-}
-//#endregion
 //#region src/utils/copy-template.ts
 const __filename = fileURLToPath(import.meta.url);
 const __dirname = path.dirname(__filename);
@@ -46,7 +34,9 @@ const TEMPLATE_FILE_MAPPINGS = {
 	"package.json.template": "package.json",
 	"gitignore.template": ".gitignore",
 	"env.example.template": ".env.example",
-	"npmrc.template": ".npmrc"
+	"npmrc.template": ".npmrc",
+	"oxlint.config.ts.template": "oxlint.config.ts",
+	"oxfmt.config.ts.template": "oxfmt.config.ts"
 };
 function shouldSkip(src) {
 	const basename = path.basename(src);
@@ -77,17 +67,6 @@ async function copyTemplate(targetDir, templateType) {
 	}
 }
 //#endregion
-//#region src/utils/design-theme.ts
-const VALID_MOSAIC_DESIGN_THEMES = [
-	"paper",
-	"modern",
-	"dense"
-];
-const DEFAULT_MOSAIC_DESIGN_THEME = "modern";
-function isValidMosaicDesignTheme(value) {
-	return typeof value === "string" && VALID_MOSAIC_DESIGN_THEMES.includes(value);
-}
-//#endregion
 //#region src/utils/detect-monorepo.ts
 const NOT_FOUND = {
 	found: false,
@@ -130,11 +109,9 @@ async function detectMonorepo(startDir) {
 /**
 * Writes .env.local for the webapp template with real generated values for
 * BETTER_AUTH_SECRET and ENCRYPTION_SECRET_KEY so the user can run dev/seed
-* immediately. Also writes deploy/ryvn/percepta-test.secrets.env with separate
-* generated values that can be imported into Ryvn for the deployed installation.
-* The .env.example file remains the documentation source.
+* immediately. The .env.example file remains the documentation source.
 *
-* Each generated file is a no-op if it already exists.
+* This is a no-op if .env.local already exists.
 */
 async function generateEnvLocal(packageDir) {
 	const examplePath = path.join(packageDir, ".env.example");
@@ -146,61 +123,6 @@ async function generateEnvLocal(packageDir) {
 		const content = (await fs.readFile(examplePath, "utf-8")).replace(/^BETTER_AUTH_SECRET=.*$/m, `BETTER_AUTH_SECRET=${authSecret}`).replace(/^ENCRYPTION_SECRET_KEY=.*$/m, `ENCRYPTION_SECRET_KEY=${encKey}`);
 		await fs.writeFile(localPath, content);
 	}
-	const ryvnSecretsPath = path.join(packageDir, "deploy", "ryvn", "percepta-test.secrets.env");
-	if (await fs.pathExists(ryvnSecretsPath)) return;
-	const deployAuthSecret = randomBytes(32).toString("base64");
-	const deployEncKey = randomBytes(16).toString("hex");
-	const deploySecrets = [
-		`BETTER_AUTH_SECRET=${deployAuthSecret}`,
-		`ENCRYPTION_SECRET_KEY=${deployEncKey}`,
-		"",
-		"# Langfuse and LLM demo credentials are inherited from the demos-commons Ryvn variable group.",
-		""
-	].join("\n");
-	await fs.ensureDir(path.dirname(ryvnSecretsPath));
-	await fs.writeFile(ryvnSecretsPath, deploySecrets);
-}
-//#endregion
-//#region src/utils/manifest.ts
-const MANIFEST_FILENAME = ".mosaic-template.json";
-function getManifestPath(dir) {
-	return path.join(dir, MANIFEST_FILENAME);
-}
-async function readManifest(dir) {
-	const manifestPath = getManifestPath(dir);
-	if (!await fs.pathExists(manifestPath)) throw new Error(`No ${MANIFEST_FILENAME} found in ${dir}. Run 'create init' to create one.`);
-	const content = await fs.readFile(manifestPath, "utf-8");
-	try {
-		return JSON.parse(content);
-	} catch (error) {
-		throw new Error(`Invalid JSON in ${MANIFEST_FILENAME}: ${error.message}`);
-	}
-}
-async function writeManifest(dir, manifest) {
-	const manifestPath = getManifestPath(dir);
-	await fs.writeFile(manifestPath, JSON.stringify(manifest, null, 2) + "\n");
-}
-async function manifestExists(dir) {
-	return fs.pathExists(getManifestPath(dir));
-}
-function derivePlaceholders(appName, appTitle, repoName = appName, designTheme = DEFAULT_MOSAIC_DESIGN_THEME) {
-	const nameSnake = appName.replace(/-/g, "_");
-	const repoNameSnake = repoName.replace(/-/g, "_");
-	return {
-		__APP_NAME__: appName,
-		__APP_TITLE__: appTitle,
-		__DB_NAME__: nameSnake + "_db",
-		__APP_NAME_UPPER__: appName.toUpperCase(),
-		__APP_NAME_SNAKE__: nameSnake,
-		__REPO_NAME__: repoName,
-		__REPO_NAME_SNAKE__: repoNameSnake,
-		__MOSAIC_DESIGN_THEME__: designTheme
-	};
-}
-function resolveMosaicTemplatePath(options) {
-	if (options.mosaicTemplatePath) return path.resolve(options.mosaicTemplatePath);
-	if (process.env.MOSAIC_TEMPLATE_PATH) return path.resolve(process.env.MOSAIC_TEMPLATE_PATH);
-	throw new Error("Mosaic repo path required. Use --mosaic-template-path or set MOSAIC_TEMPLATE_PATH.");
 }
 //#endregion
 //#region src/utils/package-metadata.ts
@@ -221,16 +143,6 @@ function readCreatePackageMetadata() {
 	return FALLBACK_METADATA;
 }
 //#endregion
-//#region src/utils/validate.ts
-function validateProjectName(name) {
-	const result = validateNpmPackageName(name);
-	if (!result.validForNewPackages) return {
-		valid: false,
-		error: [...result.errors || [], ...result.warnings || []][0] || "Invalid package name"
-	};
-	return { valid: true };
-}
-//#endregion
 //#region src/utils/prompts.ts
 const VALID_PROJECT_TYPES = [
 	"monorepo",
@@ -253,6 +165,25 @@ async function promptName(message) {
 	}]);
 	return name;
 }
+async function promptCustomerSlug(defaultCustomerSlug) {
+	const { customerSlug } = await inquirer.prompt([{
+		type: "input",
+		name: "customerSlug",
+		message: "Customer slug?",
+		default: defaultCustomerSlug,
+		filter: toKebabCase,
+		validate: (input) => {
+			const result = validateProjectName(toKebabCase(input));
+			return result.valid || result.error || "Invalid customer slug";
+		}
+	}]);
+	return customerSlug;
+}
+async function resolveCustomerSlug(repoName, defaults) {
+	if (defaults.customerSlug) return defaults.customerSlug;
+	if (defaults.projectType && defaults.name) return repoName;
+	return promptCustomerSlug(repoName);
+}
 async function promptDesignTheme() {
 	const { designTheme } = await inquirer.prompt([{
 		type: "rawlist",
@@ -323,6 +254,7 @@ async function promptProjectDetails(defaults) {
 		const repoTitle = toTitleCase(repoName);
 		projectType = defaults.projectType ?? await promptOutsideMonorepoType();
 		await defaults.beforeNamePrompt?.(projectType);
+		const customerSlug = await resolveCustomerSlug(repoName, defaults);
 		if (projectType === "monorepo") {
 			finalName = repoName;
 			const finalTitle = repoTitle;
@@ -333,6 +265,7 @@ async function promptProjectDetails(defaults) {
 				name: finalName,
 				title: finalTitle,
 				installDeps: !defaults.skipInstall,
+				customerSlug,
 				monorepoName: repoName,
 				monorepoTitle: repoTitle
 			};
@@ -348,6 +281,7 @@ async function promptProjectDetails(defaults) {
 			name: finalName,
 			title: finalTitle,
 			installDeps: !defaults.skipInstall,
+			customerSlug,
 			designTheme,
 			monorepoName: repoName,
 			monorepoTitle: repoTitle
@@ -372,8 +306,8 @@ async function promptProjectDetails(defaults) {
 * directory to the monorepo root, where GitHub Actions actually picks them up.
 *
 * Only moves files whose names start with the app name (e.g.
-* `myapp-ryvn-release.yaml`). Generic workflows like `ci.yml` are left in
-* place — those are an unrelated monorepo-vs-package concern.
+* `myapp-ryvn-release.yaml`). Any other (generic) workflow a package happens
+* to ship is left in place — CI lives at the monorepo root, not per-package.
 *
 * Cleans up an empty `.github/workflows` (and empty parent `.github`) after
 * the move.
@@ -505,30 +439,16 @@ async function replacePlaceholders(targetDir, config) {
 	return stats;
 }
 //#endregion
-//#region src/utils/template-versions.ts
-const FALLBACK_TEMPLATE_VERSION = "1.0.0";
-function readTemplateVersions() {
-	const currentDir = path.dirname(fileURLToPath(import.meta.url));
-	const candidates = [path.resolve(currentDir, "../template-versions.json"), path.resolve(currentDir, "../../template-versions.json")];
-	for (const versionsPath of candidates) try {
-		const content = fs.readFileSync(versionsPath, "utf-8");
-		return JSON.parse(content);
-	} catch {}
-	return {};
-}
-function getTemplateVersion(templateType) {
-	return readTemplateVersions()[templateType] ?? FALLBACK_TEMPLATE_VERSION;
-}
-//#endregion
 //#region src/utils/workspace-manifest.ts
 const WORKSPACE_MANIFEST_FILENAME = ".mosaic-workspace.json";
 function getWorkspaceManifestPath(rootDir) {
 	return path.join(rootDir, WORKSPACE_MANIFEST_FILENAME);
 }
-function createWorkspaceManifest(createdAt = (/* @__PURE__ */ new Date()).toISOString()) {
+function createWorkspaceManifest({ customerSlug, createdAt = (/* @__PURE__ */ new Date()).toISOString() }) {
 	const createPackage = readCreatePackageMetadata();
 	return {
 		schemaVersion: 1,
+		customerSlug,
 		createPackage: createPackage.name,
 		createVersion: createPackage.version,
 		monorepoTemplateVersion: getTemplateVersion("monorepo"),
@@ -613,7 +533,7 @@ function printInstallFailureOutput(error) {
 	console.log(visibleLines.join("\n"));
 }
 /**
-* Runs the monorepo-root `setup` script (docker + access + db + seed).
+* Runs the monorepo-root `setup` script (local services + dbs + access + seed).
 * Uses `pnpm run setup` (not `pnpm setup`) because `pnpm setup` is a pnpm builtin that configures
 * PNPM_HOME in the user's shell rc — it ignores the package.json script of the same name.
 */
@@ -702,7 +622,7 @@ function openInBrowser(url) {
 	}
 }
 /**
-* Post-scaffold orchestration for webapps: run root setup (docker + access + db + seed),
+* Post-scaffold orchestration for webapps: run root setup (local services + dbs + access + seed),
 * start the dev server, open the served URL in the user's browser, then hand
 * control to the dev server until the user exits with Ctrl+C.
 *
@@ -716,7 +636,7 @@ function openInBrowser(url) {
 async function autoRunWebapp(packageDir, monorepoRoot) {
 	const packageManager = PACKAGE_MANAGER;
 	console.log();
-	console.log(chalk.bold("Running setup (docker, access, db, seed)..."));
+	console.log(chalk.bold("Running setup (local services, dbs, access, seed)..."));
 	console.log();
 	try {
 		await runWebappSetup(packageManager, monorepoRoot);
@@ -974,6 +894,14 @@ async function createProject(options) {
 			process.exit(1);
 		}
 	}
+	const customerSlug = options.customer ? toKebabCase(options.customer) : void 0;
+	if (customerSlug) {
+		const validation = validateProjectName(customerSlug);
+		if (!validation.valid) {
+			console.error(chalk.red(`Invalid customer slug: ${validation.error}`));
+			process.exit(1);
+		}
+	}
 	let answers;
 	if (options.yes) {
 		const projectType = options.type || "webapp";
@@ -987,6 +915,7 @@ async function createProject(options) {
 			name: kebabName,
 			title: toTitleCase(kebabName),
 			installDeps: !options.skipInstall,
+			customerSlug: monorepoContext.found ? void 0 : customerSlug ?? kebabRepoName,
 			designTheme: projectType === "webapp" ? options.theme ?? "modern" : void 0,
 			monorepoName: monorepoContext.found ? void 0 : kebabRepoName,
 			monorepoTitle: monorepoContext.found ? void 0 : toTitleCase(kebabRepoName)
@@ -995,6 +924,7 @@ async function createProject(options) {
 		answers = await promptProjectDetails({
 			projectType: options.type,
 			name: projectName ? toKebabCase(projectName) : void 0,
+			customerSlug,
 			designTheme: options.theme,
 			repoName: repoName ? toKebabCase(repoName) : void 0,
 			skipInstall: options.skipInstall,
@@ -1008,7 +938,9 @@ async function createProject(options) {
 		if (monorepoContext.found && monorepoContext.packageDir && !answers.directory) answers.directory = path.join(monorepoContext.packageDir, answers.name);
 	}
 	const monorepoName = answers.monorepoName ?? answers.name;
-	const monorepoConfig = buildAppConfig(monorepoName, answers.monorepoTitle ?? toTitleCase(monorepoName));
+	const monorepoTitle = answers.monorepoTitle ?? toTitleCase(monorepoName);
+	const newWorkspaceCustomerSlug = answers.customerSlug ?? monorepoName;
+	const monorepoConfig = buildAppConfig(monorepoName, monorepoTitle, monorepoName, DEFAULT_MOSAIC_DESIGN_THEME);
 	const configRepoName = monorepoContext.found ? path.basename(monorepoContext.rootDir) : monorepoName;
 	const config = buildAppConfig(answers.name, answers.title, configRepoName, answers.designTheme);
 	const typeLabel = getProjectTypeLabel(answers.projectType);
@@ -1052,11 +984,13 @@ async function createProject(options) {
 		if (isBareMonorepo) {
 			console.log(chalk.dim("  Type:"), typeLabel);
 			console.log(chalk.dim("  Directory:"), monorepoRoot);
+			console.log(chalk.dim("  Customer:"), newWorkspaceCustomerSlug);
 			console.log(chalk.dim("  Repo name:"), monorepoConfig.name);
 			console.log(chalk.dim("  Title:"), monorepoConfig.title);
 		} else {
 			console.log(chalk.dim("  Package type:"), typeLabel);
 			console.log(chalk.dim("  Monorepo directory:"), monorepoRoot);
+			console.log(chalk.dim("  Customer:"), newWorkspaceCustomerSlug);
 			console.log(chalk.dim("  Repo name:"), monorepoConfig.name);
 			console.log(chalk.dim("  Package:"), `packages/${answers.name}/`);
 			console.log(chalk.dim("  Name:"), config.name);
@@ -1074,7 +1008,7 @@ async function createProject(options) {
 			}
 		}
 		await scaffoldMonorepo(monorepoRoot, monorepoConfig);
-		const newWorkspaceManifest = createWorkspaceManifest();
+		const newWorkspaceManifest = createWorkspaceManifest({ customerSlug: newWorkspaceCustomerSlug });
 		await writeWorkspaceManifest(monorepoRoot, newWorkspaceManifest);
 		if (packageDir && answers.projectType !== "monorepo") await addPackageToMonorepo({
 			packageDir,
@@ -1248,7 +1182,7 @@ function printNextStepsExisting(answers, packageDir, installNeeded) {
 //#region src/index.ts
 const packageJson = readCreatePackageMetadata();
 program.name("create").description("Scaffold and manage Mosaic packages").version(packageJson.version);
-program.command("create", { isDefault: true }).description("Scaffold a new Mosaic package").option("-t, --type <type>", "Package type: monorepo, webapp, or library").option("--name <name>", "Package/app name").option("--theme <theme>", "Webapp design theme: modern, paper, or dense").option("--repo-name <name>", "Repository name when creating a new monorepo").option("--cwd <dir>", "Run create as if started from this directory").option("--skip-install", "Skip dependency installation (also skips the auto-run setup + dev + browser)", false).option("-y, --yes", "Skip all prompts and use defaults", false).action(createProject);
+program.command("create", { isDefault: true }).description("Scaffold a new Mosaic package").option("-t, --type <type>", "Package type: monorepo, webapp, or library").option("--name <name>", "Package/app name").option("--customer <slug>", "Customer slug for the new monorepo").option("--theme <theme>", "Webapp design theme: modern, paper, or dense").option("--repo-name <name>", "Repository name when creating a new monorepo").option("--cwd <dir>", "Run create as if started from this directory").option("--skip-install", "Skip dependency installation (also skips the auto-run setup + dev + browser)", false).option("-y, --yes", "Skip all prompts and use defaults", false).action(createProject);
 program.command("add").description("Add a Mosaic package to the current monorepo").argument("[typeOrName]", "Package type (webapp/library) or package name").argument("[name]", "Package/app name").option("-t, --type <type>", "Package type: webapp or library").option("--name <name>", "Package/app name").option("--theme <theme>", "Webapp design theme: modern, paper, or dense").option("--skip-install", "Skip dependency installation (also skips the auto-run setup + dev + browser)", false).option("-y, --yes", "Skip all prompts and use defaults", false).action(async (typeOrName, name, options) => {
 	let projectType = options.type;
 	let projectName = options.name;
@@ -1267,24 +1201,33 @@ program.command("add").description("Add a Mosaic package to the current monorepo
 		addOnly: true
 	});
 });
+const infra = program.command("infra").description("Manage Mosaic infra glue");
+infra.command("register-os-blueprint").description("Register this customer monorepo's OS blueprint in infra").action(async () => {
+	const { registerOsBlueprintCommand } = await import("./register-os-blueprint-DGjBUZYa.js");
+	await registerOsBlueprintCommand();
+});
+infra.command("register-app").description("Register a webapp database in this customer OS blueprint").argument("<app>", "Webapp package name").action(async (appName) => {
+	const { registerAppCommand } = await import("./register-app-C7ZBpAaZ.js");
+	await registerAppCommand(appName);
+});
 program.command("status").description("Show template sync status for current app").option("--mosaic-template-path <path>", "Path to local mosaic repo checkout").action(async (options) => {
-	const { statusCommand } = await import("./status-CKe4aKso.js");
+	const { statusCommand } = await import("./status-BXYaQ4a2.js");
 	await statusCommand(options);
 });
 program.command("sync").description("Generate downstream sync context (template → app)").option("--mosaic-template-path <path>", "Path to local mosaic repo checkout").option("--to <version>", "Target template version (default: latest)").action(async (options) => {
-	const { syncCommand } = await import("./sync-D1vkoofl.js");
+	const { syncCommand } = await import("./sync-BayU4w1j.js");
 	await syncCommand(options);
 });
 program.command("upstream").description("Generate upstream context (app → template)").option("--mosaic-template-path <path>", "Path to local mosaic repo checkout").option("--files <patterns...>", "Specific files to propose upstream").action(async (options) => {
-	const { upstreamCommand } = await import("./upstream-gUHLWSR1.js");
+	const { upstreamCommand } = await import("./upstream-CZEzLrS4.js");
 	await upstreamCommand(options);
 });
 program.command("init").description("Add .mosaic-template.json to an existing app").option("-t, --type <type>", "Template type (e.g., webapp, library)").option("--template-version <version>", "Template version to set").action(async (options) => {
-	const { initCommand } = await import("./init-sI9aIrkU.js");
+	const { initCommand } = await import("./init-COp0nGdk.js");
 	await initCommand(options);
 });
 program.parse();
 //#endregion
-export { manifestExists as a, writeManifest as c, derivePlaceholders as i, VALID_PROJECT_TYPES as n, readManifest as o, isValidProjectType as r, resolveMosaicTemplatePath as s, getTemplateVersion as t };
+export { detectMonorepo as i, VALID_PROJECT_TYPES as n, isValidProjectType as r, readWorkspaceManifest as t };
 
 //# sourceMappingURL=index.js.map