@podosoft/podokit 0.17.4 → 1.0.1

package/dist/templates/todo/apps/web/src/lib/components/ui/tabs/tabs.svelte

@@ -1,19 +0,0 @@
-<script lang="ts">
-	import { Tabs as TabsPrimitive } from "bits-ui";
-	import { cn } from "$lib/utils.js";
-
-	let {
-		ref = $bindable(null),
-		value = $bindable(""),
-		class: className,
-		...restProps
-	}: TabsPrimitive.RootProps = $props();
-</script>
-
-<TabsPrimitive.Root
-	bind:ref
-	bind:value
-	data-slot="tabs"
-	class={cn("flex flex-col gap-2", className)}
-	{...restProps}
-/>

package/dist/templates/todo/apps/web/src/lib/components/ui/tooltip/index.ts

@@ -1,19 +0,0 @@
-import Root from "./tooltip.svelte";
-import Trigger from "./tooltip-trigger.svelte";
-import Content from "./tooltip-content.svelte";
-import Provider from "./tooltip-provider.svelte";
-import Portal from "./tooltip-portal.svelte";
-
-export {
-	Root,
-	Trigger,
-	Content,
-	Provider,
-	Portal,
-	//
-	Root as Tooltip,
-	Content as TooltipContent,
-	Trigger as TooltipTrigger,
-	Provider as TooltipProvider,
-	Portal as TooltipPortal,
-};

package/dist/templates/todo/apps/web/src/lib/components/ui/tooltip/tooltip-content.svelte

@@ -1,52 +0,0 @@
-<script lang="ts">
-	import { Tooltip as TooltipPrimitive } from "bits-ui";
-	import { cn } from "$lib/utils.js";
-	import TooltipPortal from "./tooltip-portal.svelte";
-	import type { ComponentProps } from "svelte";
-	import type { WithoutChildrenOrChild } from "$lib/utils.js";
-
-	let {
-		ref = $bindable(null),
-		class: className,
-		sideOffset = 0,
-		side = "top",
-		children,
-		arrowClasses,
-		portalProps,
-		...restProps
-	}: TooltipPrimitive.ContentProps & {
-		arrowClasses?: string;
-		portalProps?: WithoutChildrenOrChild<ComponentProps<typeof TooltipPortal>>;
-	} = $props();
-</script>
-
-<TooltipPortal {...portalProps}>
-	<TooltipPrimitive.Content
-		bind:ref
-		data-slot="tooltip-content"
-		{sideOffset}
-		{side}
-		class={cn(
-			"data-open:animate-in data-open:fade-in-0 data-open:zoom-in-95 data-[state=delayed-open]:animate-in data-[state=delayed-open]:fade-in-0 data-[state=delayed-open]:zoom-in-95 data-closed:animate-out data-closed:fade-out-0 data-closed:zoom-out-95 data-[side=bottom]:slide-in-from-top-2 data-[side=left]:slide-in-from-right-2 data-[side=right]:slide-in-from-left-2 data-[side=top]:slide-in-from-bottom-2 inline-flex items-center gap-1.5 rounded-md px-3 py-1.5 text-xs has-data-[slot=kbd]:pr-1.5 **:data-[slot=kbd]:relative **:data-[slot=kbd]:isolate **:data-[slot=kbd]:z-50 **:data-[slot=kbd]:rounded-sm bg-foreground text-background z-50 w-fit max-w-xs origin-(--bits-tooltip-content-transform-origin)",
-			className
-		)}
-		{...restProps}
-	>
-		{@render children?.()}
-		<TooltipPrimitive.Arrow>
-			{#snippet child({ props })}
-				<div
-					class={cn(
-						"size-2.5 translate-y-[calc(-50%-2px)] rotate-45 rounded-[2px] bg-foreground fill-foreground z-50",
-						"data-[side=top]:translate-x-1/2 data-[side=top]:translate-y-[calc(-50%+2px)]",
-						"data-[side=bottom]:-translate-x-1/2 data-[side=bottom]:-translate-y-[calc(-50%+1px)]",
-						"data-[side=right]:translate-x-[calc(50%+2px)] data-[side=right]:translate-y-1/2",
-						"data-[side=left]:-translate-y-[calc(50%-3px)]",
-						arrowClasses
-					)}
-					{...props}
-				></div>
-			{/snippet}
-		</TooltipPrimitive.Arrow>
-	</TooltipPrimitive.Content>
-</TooltipPortal>

package/dist/templates/todo/apps/web/src/lib/components/ui/tooltip/tooltip-portal.svelte

@@ -1,7 +0,0 @@
-<script lang="ts">
-	import { Tooltip as TooltipPrimitive } from "bits-ui";
-
-	let { ...restProps }: TooltipPrimitive.PortalProps = $props();
-</script>
-
-<TooltipPrimitive.Portal {...restProps} />

package/dist/templates/todo/apps/web/src/lib/components/ui/tooltip/tooltip-provider.svelte

@@ -1,7 +0,0 @@
-<script lang="ts">
-	import { Tooltip as TooltipPrimitive } from "bits-ui";
-
-	let { delayDuration = 0, ...restProps }: TooltipPrimitive.ProviderProps = $props();
-</script>
-
-<TooltipPrimitive.Provider {delayDuration} {...restProps} />

package/dist/templates/todo/apps/web/src/lib/components/ui/tooltip/tooltip-trigger.svelte

@@ -1,7 +0,0 @@
-<script lang="ts" generics="T = never">
-	import { Tooltip as TooltipPrimitive } from "bits-ui";
-
-	let { ref = $bindable(null), ...restProps }: TooltipPrimitive.TriggerProps<T> = $props();
-</script>
-
-<TooltipPrimitive.Trigger bind:ref data-slot="tooltip-trigger" {...restProps} />

package/dist/templates/todo/apps/web/src/lib/components/ui/tooltip/tooltip.svelte

@@ -1,7 +0,0 @@
-<script lang="ts" generics="T = never">
-	import { Tooltip as TooltipPrimitive } from "bits-ui";
-
-	let { open = $bindable(false), ...restProps }: TooltipPrimitive.RootProps<T> = $props();
-</script>
-
-<TooltipPrimitive.Root bind:open {...restProps} />

package/dist/templates/todo/apps/web/src/lib/i18n/README.md

@@ -1,9 +0,0 @@
-# Localization
-
-Locale definitions live in `locales/<code>.json`. Product copy and intentional
-module overrides live in the app-owned `catalogs/app/<code>.json` files.
-
-The admin-dashboard module installs the composed JSON message runtime and its
-complete English and Korean catalogs. Use `podo locale add`, `validate`, and
-`activate` to extend it. See the generated `$podokit-add-locale` skill for the
-complete workflow.

package/dist/templates/todo/apps/web/src/lib/i18n/catalogs/app/en.json

@@ -1 +0,0 @@
-{}

package/dist/templates/todo/apps/web/src/lib/i18n/catalogs/app/ko.json

@@ -1 +0,0 @@
-{}

package/dist/templates/todo/apps/web/src/lib/i18n/locales/en.json

@@ -1,6 +0,0 @@
-{
-  "code": "en",
-  "name": "English",
-  "direction": "ltr",
-  "enabled": true
-}

package/dist/templates/todo/apps/web/src/lib/i18n/locales/ko.json

@@ -1,6 +0,0 @@
-{
-  "code": "ko",
-  "name": "한국어",
-  "direction": "ltr",
-  "enabled": true
-}

package/dist/templates/todo/apps/web/src/lib/server/ws-upgrade.js

@@ -1,267 +0,0 @@
-/**
- * WebSocket upgrades, proxied by the web server itself.
- *
- * WHY THIS EXISTS: a SvelteKit server route cannot serve a WebSocket upgrade.
- * `+server.ts` handlers answer HTTP requests and never see an `upgrade` event, and
- * the `/api/*` proxy is HTTP-only for the same reason — `fetch` cannot carry a 101.
- * Meanwhile a deployment routes all public traffic to the web app, so an API
- * WebSocket gateway has no path to reach at all. Development hides this, because
- * Vite proxies upgrades; the feature then dies silently once deployed.
- *
- * ⚠ NOTHING IS FORWARDED BY DEFAULT. `WS_PROXY_PATHS` names the exact paths that may
- * upgrade, comma-separated, and anything else is destroyed rather than proxied. A
- * relay that forwards any path is an open tunnel to every private route on the API,
- * reachable from the public origin without a session. Adding a path is a security
- * decision, not a routing tweak — the API must authorise that socket at handshake
- * time, from the session cookie or its own credential.
- *
- * This file is plain JavaScript on purpose: `server.js` imports `./build/`, which
- * only exists after a build, so the entry point cannot be type-checked. Everything
- * with a decision in it lives here, where it is unit-tested.
- */
-import http from "node:http";
-import https from "node:https";
-
-/** @typedef {Record<string, string | string[] | undefined>} Headers */
-/** @typedef {{ kind: "proxy", path: string } | { kind: "reject", reason: string }} UpgradeDecision */
-
-/**
- * The upgrade paths this deployment allows, matched whole — never as a prefix, a
- * wildcard, or a pattern.
- *
- * @returns {ReadonlySet<string>}
- */
-export function relayPaths() {
-  return new Set(
-    (process.env.WS_PROXY_PATHS ?? "")
-      .split(",")
-      .map((entry) => entry.trim())
-      .filter((entry) => entry.startsWith("/")),
-  );
-}
-
-/** Where upgrades are sent. Same target the HTTP proxy uses. */
-export function backendBaseUrl() {
-  return process.env.BACKEND_INTERNAL_URL ?? "http://localhost:5002";
-}
-
-/**
- * Normalize a client address for the forwarded header: map loopback to a clean IPv4
- * value and unwrap IPv4-mapped addresses.
- *
- * @param {string | undefined} address
- * @returns {string | undefined}
- */
-export function normalizeClientIp(address) {
-  if (!address) return undefined;
-  if (address === "::1" || address === "::") return "127.0.0.1";
-  if (address.startsWith("::ffff:")) return address.slice("::ffff:".length);
-  return address;
-}
-
-/**
- * Should this upgrade be forwarded, and under which normalized path?
- *
- * The path is re-serialised from `URL` rather than echoed, so a target that only
- * looks like an allowed path after resolving `..` cannot reach anything else. A
- * request target carrying its own authority is refused outright.
- *
- * @param {string | undefined} url `req.url`, an origin-form request target
- * @param {Headers} headers
- * @param {ReadonlySet<string>} [allowed]
- * @returns {UpgradeDecision}
- */
-export function decideUpgrade(url, headers, allowed = relayPaths()) {
-  const upgrade = String(headers.upgrade ?? "").toLowerCase();
-  if (upgrade !== "websocket") return { kind: "reject", reason: "not a websocket upgrade" };
-  if (!url || !url.startsWith("/") || url.startsWith("//")) {
-    return { kind: "reject", reason: "not an origin-form request target" };
-  }
-  let parsed;
-  try {
-    parsed = new URL(url, "http://upgrade.invalid");
-  } catch {
-    return { kind: "reject", reason: "unparsable request target" };
-  }
-  if (!allowed.has(parsed.pathname)) return { kind: "reject", reason: "not an allowed upgrade path" };
-  return { kind: "proxy", path: `${parsed.pathname}${parsed.search}` };
-}
-
-/**
- * What the API is told about the request.
- *
- * Handshake headers and the session cookie pass through untouched — the API
- * authorises the socket from them, so dropping either turns every connection into a
- * 401. The `x-forwarded-*` trio is appended rather than replaced: behind another
- * proxy this server is one hop in a chain, and overwriting it reports the wrong
- * client upstream.
- *
- * @param {Headers} headers
- * @param {{ remoteAddress?: string, encrypted?: boolean }} socket
- * @returns {Headers}
- */
-export function upstreamHeaders(headers, socket) {
-  /** @type {Headers} */
-  const forwarded = {};
-  for (const [name, value] of Object.entries(headers)) {
-    if (value === undefined) continue;
-    if (name === "x-forwarded-for" || name === "x-forwarded-proto" || name === "x-forwarded-host") {
-      continue;
-    }
-    forwarded[name] = value;
-  }
-
-  const client = normalizeClientIp(socket.remoteAddress);
-  const chain = [headers["x-forwarded-for"], client]
-    .flat()
-    .filter((entry) => typeof entry === "string" && entry.length > 0);
-  if (chain.length > 0) forwarded["x-forwarded-for"] = chain.join(", ");
-
-  forwarded["x-forwarded-proto"] = headers["x-forwarded-proto"] ?? (socket.encrypted ? "https" : "http");
-  const host = headers["x-forwarded-host"] ?? headers.host;
-  if (host !== undefined) forwarded["x-forwarded-host"] = host;
-
-  return forwarded;
-}
-
-/**
- * @param {string} path
- * @param {Headers} headers
- */
-export function upstreamOptions(path, headers) {
-  const base = new URL(backendBaseUrl());
-  return {
-    protocol: base.protocol,
-    hostname: base.hostname,
-    port: base.port || (base.protocol === "https:" ? "443" : "80"),
-    path,
-    headers,
-  };
-}
-
-/**
- * @param {string} statusLine
- * @param {Headers} headers
- * @returns {string}
- */
-function rawHead(statusLine, headers) {
-  const lines = [statusLine];
-  for (const [name, value] of Object.entries(headers)) {
-    if (value === undefined) continue;
-    if (Array.isArray(value)) for (const item of value) lines.push(`${name}: ${item}`);
-    else lines.push(`${name}: ${value}`);
-  }
-  return `${lines.join("\r\n")}\r\n\r\n`;
-}
-
-/**
- * Streaming sockets carry many small frames, so Nagle's algorithm adds latency to
- * every one, and the default timeout would cut an idle-but-attached connection.
- *
- * @param {{ setTimeout?: Function, setNoDelay?: Function, setKeepAlive?: Function }} socket
- */
-function tune(socket) {
-  socket.setTimeout?.(0);
-  socket.setNoDelay?.(true);
-  socket.setKeepAlive?.(true, 0);
-}
-
-/** The real transport: one upstream HTTP request carrying the upgrade. */
-const nodeConnect = (options, hooks) => {
-  const transport = options.protocol === "https:" ? https : http;
-  const upstream = transport.request({
-    protocol: options.protocol,
-    hostname: options.hostname,
-    port: options.port,
-    path: options.path,
-    method: "GET",
-    headers: options.headers,
-  });
-  upstream.on("upgrade", (response, socket, head) => {
-    hooks.onUpgrade(response.statusCode ?? 101, response.headers, socket, head);
-  });
-  upstream.on("response", (response) => {
-    hooks.onResponse(response.statusCode ?? 502, response.statusMessage ?? "", response.headers);
-    response.resume(); // Drain, or the socket is never released.
-  });
-  upstream.on("error", (error) => hooks.onError(error.message));
-  upstream.end();
-  return { abort: () => upstream.destroy() };
-};
-
-/**
- * @typedef {object} UpstreamHooks
- * @property {(status: number, headers: Headers, socket: any, head: Uint8Array | null) => void} onUpgrade
- * @property {(status: number, statusMessage: string, headers: Headers) => void} onResponse
- * @property {(reason: string) => void} onError
- */
-
-/** @typedef {(options: ReturnType<typeof upstreamOptions>, hooks: UpstreamHooks) => { abort: () => void }} Connect */
-
-/**
- * Build the `upgrade` listener the built server mounts.
- *
- * The transport is injected so the decisions here are testable without a socket.
- *
- * @param {{ connect?: Connect, allowed?: ReadonlySet<string> }} [options]
- */
-export function createUpgradeProxy(options = {}) {
-  const connect = options.connect ?? nodeConnect;
-  const allowed = options.allowed ?? relayPaths();
-
-  return function onUpgrade(request, socket, head) {
-    const decision = decideUpgrade(request.url, request.headers, allowed);
-    if (decision.kind === "reject") {
-      socket.destroy();
-      return;
-    }
-
-    tune(socket);
-    // Bytes the client already sent belong to the stream: push them back so the pipe
-    // below carries them upstream in order.
-    if (head && head.length > 0) socket.unshift(head);
-
-    let clientGone = false;
-    const upstream = connect(
-      upstreamOptions(decision.path, upstreamHeaders(request.headers, socket)),
-      {
-        onUpgrade(status, headers, upstreamSocket, upstreamHead) {
-          if (clientGone) {
-            upstreamSocket.destroy();
-            return;
-          }
-          if (upstreamHead && upstreamHead.length > 0) upstreamSocket.unshift(upstreamHead);
-          tune(upstreamSocket);
-          socket.write(rawHead(`HTTP/1.1 ${status} Switching Protocols`, headers));
-          // A client that hangs forever is worse than one told it lost the relay, so
-          // either end closing takes the other down.
-          upstreamSocket.on("error", () => socket.destroy());
-          upstreamSocket.on("close", () => socket.end());
-          upstreamSocket.pipe(socket);
-          socket.pipe(upstreamSocket);
-        },
-        onResponse(status, statusMessage, headers) {
-          // The API refused the handshake. Relaying ITS answer is what turns "the
-          // socket vanished" into a diagnosable failure in the browser.
-          socket.write(
-            rawHead(`HTTP/1.1 ${status} ${statusMessage}`.trim(), {
-              ...headers,
-              connection: "close",
-            }),
-          );
-          socket.end();
-        },
-        onError() {
-          socket.write(rawHead("HTTP/1.1 502 Bad Gateway", { connection: "close" }));
-          socket.end();
-        },
-      },
-    );
-
-    socket.on("error", () => upstream.abort());
-    socket.on("close", () => {
-      clientGone = true;
-      upstream.abort();
-    });
-  };
-}

package/dist/templates/todo/apps/web/src/lib/server/ws-upgrade.test.js

@@ -1,134 +0,0 @@
-import { PassThrough } from "node:stream";
-import { describe, expect, it } from "vitest";
-import { createUpgradeProxy, decideUpgrade, upstreamHeaders } from "./ws-upgrade.js";
-
-const allowed = new Set(["/events/ws"]);
-const handshake = { upgrade: "websocket", connection: "Upgrade", host: "app.example.com" };
-
-describe("decideUpgrade", () => {
-  it("forwards an allowed path", () => {
-    expect(decideUpgrade("/events/ws", handshake, allowed)).toEqual({
-      kind: "proxy",
-      path: "/events/ws",
-    });
-  });
-
-  it("keeps the query string", () => {
-    expect(decideUpgrade("/events/ws?room=1", handshake, allowed)).toEqual({
-      kind: "proxy",
-      path: "/events/ws?room=1",
-    });
-  });
-
-  it.each([
-    ["/events/wsx", "a path that only starts the same"],
-    ["/events/ws/", "a trailing slash"],
-    ["/admin/secrets", "an unrelated path"],
-    ["/events/../admin/secrets", "traversal that resolves elsewhere"],
-    ["//evil.example.com/events/ws", "a protocol-relative target"],
-    ["http://evil.example.com/events/ws", "an absolute target"],
-  ])("rejects %s (%s)", (url) => {
-    expect(decideUpgrade(url, handshake, allowed).kind).toBe("reject");
-  });
-
-  it("rejects a request that is not a websocket upgrade", () => {
-    expect(decideUpgrade("/events/ws", { ...handshake, upgrade: "h2c" }, allowed).kind).toBe(
-      "reject",
-    );
-  });
-
-  it("forwards nothing when no path is configured", () => {
-    expect(decideUpgrade("/events/ws", handshake, new Set()).kind).toBe("reject");
-  });
-});
-
-describe("upstreamHeaders", () => {
-  it("passes the handshake and cookie through", () => {
-    const headers = upstreamHeaders(
-      { ...handshake, cookie: "session=abc", "sec-websocket-key": "k" },
-      {},
-    );
-    expect(headers.cookie).toBe("session=abc");
-    expect(headers["sec-websocket-key"]).toBe("k");
-    expect(headers.upgrade).toBe("websocket");
-  });
-
-  it("appends to an existing forwarded chain rather than replacing it", () => {
-    const headers = upstreamHeaders(
-      { ...handshake, "x-forwarded-for": "203.0.113.7" },
-      { remoteAddress: "::ffff:10.0.0.2" },
-    );
-    expect(headers["x-forwarded-for"]).toBe("203.0.113.7, 10.0.0.2");
-  });
-
-  it("reports the scheme the client actually used", () => {
-    expect(upstreamHeaders(handshake, { encrypted: true })["x-forwarded-proto"]).toBe("https");
-    expect(upstreamHeaders(handshake, {})["x-forwarded-proto"]).toBe("http");
-  });
-});
-
-describe("createUpgradeProxy", () => {
-  function socket() {
-    const stream = new PassThrough();
-    stream.destroy = () => {
-      stream.destroyed = true;
-      return stream;
-    };
-    return stream;
-  }
-
-  it("destroys a rejected upgrade without contacting the API", () => {
-    let called = false;
-    const proxy = createUpgradeProxy({ allowed, connect: () => ((called = true), { abort() {} }) });
-    const client = socket();
-    proxy({ url: "/admin/secrets", headers: handshake }, client, null);
-    expect(called).toBe(false);
-    expect(client.destroyed).toBe(true);
-  });
-
-  it("relays the API's refusal instead of dropping the socket", () => {
-    const proxy = createUpgradeProxy({
-      allowed,
-      connect: (_options, hooks) => {
-        hooks.onResponse(401, "Unauthorized", { "content-length": "0" });
-        return { abort() {} };
-      },
-    });
-    const client = socket();
-    /** @type {string[]} */
-    const written = [];
-    client.on("data", (chunk) => written.push(chunk.toString()));
-    proxy({ url: "/events/ws", headers: handshake }, client, null);
-    expect(written.join("")).toContain("HTTP/1.1 401 Unauthorized");
-  });
-
-  it("answers 502 when the API cannot be reached", () => {
-    const proxy = createUpgradeProxy({
-      allowed,
-      connect: (_options, hooks) => (hooks.onError("ECONNREFUSED"), { abort() {} }),
-    });
-    const client = socket();
-    /** @type {string[]} */
-    const written = [];
-    client.on("data", (chunk) => written.push(chunk.toString()));
-    proxy({ url: "/events/ws", headers: handshake }, client, null);
-    expect(written.join("")).toContain("HTTP/1.1 502 Bad Gateway");
-  });
-
-  it("writes the 101 and pipes both directions once upstream upgrades", () => {
-    const upstream = socket();
-    const proxy = createUpgradeProxy({
-      allowed,
-      connect: (_options, hooks) => {
-        hooks.onUpgrade(101, { upgrade: "websocket" }, upstream, null);
-        return { abort() {} };
-      },
-    });
-    const client = socket();
-    /** @type {string[]} */
-    const written = [];
-    client.on("data", (chunk) => written.push(chunk.toString()));
-    proxy({ url: "/events/ws", headers: handshake }, client, null);
-    expect(written.join("")).toContain("HTTP/1.1 101 Switching Protocols");
-  });
-});

package/dist/templates/todo/apps/web/src/lib/utils.ts

@@ -1,11 +0,0 @@
-import { clsx, type ClassValue } from "clsx";
-import { twMerge } from "tailwind-merge";
-
-export function cn(...inputs: ClassValue[]): string {
-  return twMerge(clsx(inputs));
-}
-
-export type WithoutChild<T> = T extends { child?: unknown } ? Omit<T, "child"> : T;
-export type WithoutChildren<T> = T extends { children?: unknown } ? Omit<T, "children"> : T;
-export type WithoutChildrenOrChild<T> = WithoutChildren<WithoutChild<T>>;
-export type WithElementRef<T, U extends HTMLElement = HTMLElement> = T & { ref?: U | null };

package/dist/templates/todo/apps/web/src/routes/+layout.svelte

@@ -1,9 +0,0 @@
-<script lang="ts">
-  import "../app.css";
-  import SiteRuntime from "$lib/components/site-runtime.svelte";
-
-  let { children } = $props();
-</script>
-
-<SiteRuntime />
-{@render children()}

package/dist/templates/todo/apps/web/src/routes/api/auth/[...all]/+server.ts

@@ -1,16 +0,0 @@
-import type { RequestHandler } from "@sveltejs/kit";
-import { backendBaseUrl, proxyRequest, resolveClientIp } from "$lib/server/backend-proxy";
-
-// Proxy the better-auth handler, keeping the /api/auth prefix.
-const handler: RequestHandler = ({ request, params, url, getClientAddress }) =>
-  proxyRequest(
-    request,
-    `${backendBaseUrl()}/api/auth/${params.all}${url.search}`,
-    resolveClientIp(getClientAddress),
-  );
-
-export const GET = handler;
-export const POST = handler;
-export const PUT = handler;
-export const PATCH = handler;
-export const DELETE = handler;

package/dist/templates/todo/apps/web/static/favicon.svg

@@ -1,13 +0,0 @@
-<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 64 64" role="img" aria-label="PodoKit">
-  <defs>
-    <linearGradient id="pk" x1="0" y1="0" x2="1" y2="1">
-      <stop offset="0" stop-color="#8b5cf6"/>
-      <stop offset="1" stop-color="#4f46e5"/>
-    </linearGradient>
-  </defs>
-  <rect width="64" height="64" rx="15" fill="url(#pk)"/>
-  <!-- layered stack: full-stack toolkit -->
-  <path d="M32 14 50 25 32 36 14 25Z" fill="#fff" fill-opacity="0.96"/>
-  <path d="M16 31 32 40.5 48 31" fill="none" stroke="#fff" stroke-opacity="0.78" stroke-width="3.4" stroke-linecap="round" stroke-linejoin="round"/>
-  <path d="M16 38 32 47.5 48 38" fill="none" stroke="#fff" stroke-opacity="0.5" stroke-width="3.4" stroke-linecap="round" stroke-linejoin="round"/>
-</svg>

package/dist/templates/todo/apps/web/svelte.config.js

@@ -1,15 +0,0 @@
-import adapter from "@sveltejs/adapter-node";
-import { vitePreprocess } from "@sveltejs/vite-plugin-svelte";
-
-/** @type {import('@sveltejs/kit').Config} */
-const config = {
-  preprocess: vitePreprocess(),
-  kit: {
-    adapter: adapter(),
-    alias: {
-      $i18n: "src/lib/i18n",
-    },
-  },
-};
-
-export default config;

package/dist/templates/todo/apps/web/vite.config.ts

@@ -1,29 +0,0 @@
-import { sveltekit } from "@sveltejs/kit/vite";
-import tailwindcss from "@tailwindcss/vite";
-import { defineConfig } from "vite";
-
-// Inside the dev container, bind to all interfaces and accept local gateway or
-// HTTPS tunnel hostnames. Vite derives HMR's protocol, host, and port from the
-// browser origin so the same configuration works for both entry points.
-const inDocker = process.env.VITE_DOCKER === "1";
-
-// Dev parity for WebSocket upgrades. In production `server.js` proxies these paths to
-// the API; without the same allowlist here, a feature would work in one and not the
-// other -- which is exactly how a WebSocket gateway used to reach production dead.
-// Set WS_PROXY_PATHS in the shell that runs vite; a .env file cannot reach this file.
-const wsProxyPaths = (process.env.WS_PROXY_PATHS ?? "")
-  .split(",")
-  .map((entry) => entry.trim())
-  .filter((entry) => entry.startsWith("/"));
-const backendTarget = process.env.BACKEND_INTERNAL_URL ?? "http://localhost:5002";
-const wsProxy = Object.fromEntries(
-  wsProxyPaths.map((path) => [path, { target: backendTarget, ws: true, changeOrigin: false }]),
-);
-
-export default defineConfig({
-  plugins: [tailwindcss(), sveltekit()],
-  server: {
-    ...(inDocker ? { host: true, port: 5001, allowedHosts: true } : {}),
-    ...(wsProxyPaths.length ? { proxy: wsProxy } : {}),
-  },
-});