@pylonsync/create-pylon 0.19.1 → 0.21.0

package/templates/local-service/lib/hours.ts

@@ -0,0 +1,44 @@
+// Weekly hours as display rows, from `siteConfig.booking.hours` (the same
+// hours the booking grid uses), so the location block cannot disagree with the
+// grid. Consecutive days with the same hours share a row: "Tue–Wed 9 AM–6 PM".
+
+import type { DayHours } from "./site.config";
+
+const DAY = ["Sun", "Mon", "Tue", "Wed", "Thu", "Fri", "Sat"];
+// Rows run Monday to Sunday, the way a shop door lists them.
+const ORDER = [1, 2, 3, 4, 5, 6, 0];
+
+export interface HoursRow {
+  days: string;
+  time: string; // "9 AM–6 PM" or "Closed"
+  closed: boolean;
+}
+
+/** "09:00" → "9 AM", "18:30" → "6:30 PM". */
+export function clock(hhmm: string): string {
+  const [h, m] = hhmm.split(":").map(Number);
+  const suffix = h >= 12 ? "PM" : "AM";
+  const h12 = h % 12 === 0 ? 12 : h % 12;
+  return m ? `${h12}:${String(m).padStart(2, "0")} ${suffix}` : `${h12} ${suffix}`;
+}
+
+export function hoursRows(hours: Record<number, DayHours>): HoursRow[] {
+  const rows: { first: number; last: number; time: string }[] = [];
+  for (const d of ORDER) {
+    const h = hours[d];
+    const time = h ? `${clock(h.open)}–${clock(h.close)}` : "Closed";
+    const prev = rows[rows.length - 1];
+    if (prev && prev.time === time) prev.last = d;
+    else rows.push({ first: d, last: d, time });
+  }
+  return rows.map((r) => ({
+    days: r.first === r.last ? DAY[r.first] : `${DAY[r.first]}–${DAY[r.last]}`,
+    time: r.time,
+    closed: r.time === "Closed",
+  }));
+}
+
+/** A Google Maps directions link for a street address. Needs no API key. */
+export function directionsUrl(address: string): string {
+  return `https://www.google.com/maps/dir/?api=1&destination=${encodeURIComponent(address)}`;
+}

package/templates/local-service/lib/site.config.ts

@@ -30,6 +30,7 @@ export type ServiceItem = {
   name: string;
   durationMin: number; // drives the booking slot length
   price: string; // display only, e.g. "$35"
+  priceUsd: number; // the same price as a number; the dashboard sums it
   description?: string;
 };
 
@@ -65,8 +66,9 @@ export type LocalServiceConfig = BaseConfig & {
   location: {
     headline: string;
     address: string;
+    // A Google Maps embed URL (Share → Embed a map → the iframe's src). When
+    // empty, the page shows the weekly hours board beside the address.
     mapEmbedUrl?: string;
-    hoursText: string;
     phone: string;
     email: string;
   };
@@ -108,7 +110,7 @@ export const siteConfig: LocalServiceConfig = {
       "A neighborhood barbershop on Lower Greenville since 2014. Walk in or book a chair online. The calendar updates as chairs fill.",
     ctaLabel: "Book a chair",
     quickFacts: {
-      hours: "Tue–Sat, 9–6",
+      hours: "Tue–Sat from 9 AM",
       area: "Lower Greenville, Dallas",
       phone: "(214) 555-0148",
     },
@@ -122,6 +124,7 @@ export const siteConfig: LocalServiceConfig = {
         name: "Haircut",
         durationMin: 45,
         price: "$35",
+        priceUsd: 35,
         description: "Consultation, cut, and a clean finish. The classic.",
       },
       {
@@ -129,6 +132,7 @@ export const siteConfig: LocalServiceConfig = {
         name: "Beard trim",
         durationMin: 20,
         price: "$18",
+        priceUsd: 18,
         description: "Shape-up, line work, and hot-towel finish.",
       },
       {
@@ -136,6 +140,7 @@ export const siteConfig: LocalServiceConfig = {
         name: "Cut + beard",
         durationMin: 60,
         price: "$48",
+        priceUsd: 48,
         description: "The full sit-down. Haircut and beard, start to finish.",
       },
       {
@@ -143,6 +148,7 @@ export const siteConfig: LocalServiceConfig = {
         name: "Kids' cut",
         durationMin: 30,
         price: "$22",
+        priceUsd: 22,
         description: "For the under-12s. Patient barbers, no rush.",
       },
     ],
@@ -197,7 +203,6 @@ export const siteConfig: LocalServiceConfig = {
     headline: "Find us",
     address: "1845 Greenville Ave, Dallas, TX 75206",
     mapEmbedUrl: "",
-    hoursText: "Tue–Wed 9–6 · Thu–Fri 9–7 · Sat 9–4 · Sun–Mon closed",
     phone: "(214) 555-0148",
     email: "hello@northgatebarbers.example",
   },

package/templates/local-service/lib/slots.ts

@@ -21,6 +21,8 @@ export interface Slot {
   endsAt: string;
   /** False when the slot is in the past (within lead time) or overlaps a booking. */
   available: boolean;
+  /** Why it is unavailable: "past" (too soon to book) or "taken" (booked). */
+  state: "open" | "past" | "taken";
 }
 
 /** Half-open interval overlap: [aStart,aEnd) intersects [bStart,bEnd). */
@@ -75,6 +77,7 @@ export function slotsForDay(opts: {
       startsAt: new Date(s).toISOString(),
       endsAt: new Date(e).toISOString(),
       available: !past && !taken,
+      state: past ? "past" : taken ? "taken" : "open",
     });
   }
   return slots;

package/templates/local-service/tests/booking.test.ts

@@ -0,0 +1,104 @@
+import { describe, expect, test } from "bun:test";
+import { demoBookings, demoDataEnabled } from "../lib/demo";
+import { clock, directionsUrl, hoursRows } from "../lib/hours";
+import { rangesOverlap, slotsForDay, weekdayOf } from "../lib/slots";
+import { siteConfig } from "../lib/site.config";
+
+describe("slotsForDay state", () => {
+  const base = {
+    dayISODate: "2026-09-29",
+    open: "09:00",
+    close: "11:00",
+    slotMinutes: 30,
+    durationMin: 30,
+    leadTimeHours: 0,
+  };
+  test("marks booked times taken and early times past", () => {
+    const nine = new Date(2026, 8, 29, 9, 0).getTime();
+    const slots = slotsForDay({
+      ...base,
+      nowMs: nine + 31 * 60_000,
+      busy: [
+        {
+          startsAt: new Date(nine + 60 * 60_000).toISOString(),
+          endsAt: new Date(nine + 90 * 60_000).toISOString(),
+        },
+      ],
+    });
+    expect(slots.map((s) => s.state)).toEqual(["past", "past", "taken", "open"]);
+    expect(slots.filter((s) => s.available)).toHaveLength(1);
+  });
+});
+
+describe("hoursRows", () => {
+  test("groups days with the same hours and lists closed days", () => {
+    expect(hoursRows(siteConfig.booking.hours)).toEqual([
+      { days: "Mon", time: "Closed", closed: true },
+      { days: "Tue–Wed", time: "9 AM–6 PM", closed: false },
+      { days: "Thu–Fri", time: "9 AM–7 PM", closed: false },
+      { days: "Sat", time: "9 AM–4 PM", closed: false },
+      { days: "Sun", time: "Closed", closed: true },
+    ]);
+  });
+  test("clock formats noon, midnight, and half hours", () => {
+    expect(clock("12:00")).toBe("12 PM");
+    expect(clock("00:00")).toBe("12 AM");
+    expect(clock("17:30")).toBe("5:30 PM");
+  });
+  test("directions link encodes the address", () => {
+    expect(directionsUrl("1845 Greenville Ave, Dallas")).toBe(
+      "https://www.google.com/maps/dir/?api=1&destination=1845%20Greenville%20Ave%2C%20Dallas",
+    );
+  });
+});
+
+describe("demo data", () => {
+  test("only under `pylon dev` unless PYLON_DEMO_DATA says otherwise", () => {
+    expect(demoDataEnabled({ PYLON_DEV_MODE: "1", PYLON_DEV_WATCH_DIR: "/src/app" })).toBe(true);
+    // The Docker base image turns dev mode on by default; without `pylon dev` it must not seed.
+    expect(demoDataEnabled({ PYLON_DEV_MODE: "true" })).toBe(false);
+    expect(demoDataEnabled({ PYLON_DEV_MODE: "false" })).toBe(false);
+    expect(demoDataEnabled({})).toBe(false);
+    expect(demoDataEnabled({ PYLON_DEV_MODE: "1", PYLON_DEV_WATCH_DIR: "/src/app", PYLON_DEMO_DATA: "0" })).toBe(false);
+  });
+
+  const now = new Date(2026, 8, 26, 10, 15).getTime(); // a Saturday morning
+  const rows = demoBookings(now, siteConfig);
+
+  test("every booking sits inside opening hours on an open day", () => {
+    expect(rows.length).toBeGreaterThan(40);
+    for (const b of rows) {
+      const start = new Date(b.startsAt);
+      const key = `${start.getFullYear()}-${String(start.getMonth() + 1).padStart(2, "0")}-${String(start.getDate()).padStart(2, "0")}`;
+      const hours = siteConfig.booking.hours[weekdayOf(key)];
+      expect(hours).not.toBeNull();
+      const [ch, cm] = hours!.close.split(":").map(Number);
+      const close = new Date(start);
+      close.setHours(ch, cm, 0, 0);
+      expect(Date.parse(b.endsAt)).toBeLessThanOrEqual(close.getTime());
+    }
+  });
+
+  test("active bookings never overlap, so the grid and the dashboard agree", () => {
+    const active = rows.filter((b) => b.status !== "cancelled");
+    for (let i = 0; i < active.length; i++) {
+      for (let j = i + 1; j < active.length; j++) {
+        const a = active[i];
+        const b = active[j];
+        expect(
+          rangesOverlap(Date.parse(a.startsAt), Date.parse(a.endsAt), Date.parse(b.startsAt), Date.parse(b.endsAt)),
+        ).toBe(false);
+      }
+    }
+  });
+
+  test("past bookings are confirmed; upcoming ones include some to confirm", () => {
+    const past = rows.filter((b) => Date.parse(b.endsAt) <= now);
+    const future = rows.filter((b) => Date.parse(b.endsAt) > now);
+    expect(past.every((b) => b.status === "confirmed")).toBe(true);
+    expect(future.some((b) => b.status === "pending")).toBe(true);
+    expect(rows.every((b) => Date.parse(b.createdAt) < now)).toBe(true);
+    // Phone numbers stay in the 555-0100..0199 range reserved for fiction.
+    for (const b of rows) if (b.customerPhone) expect(b.customerPhone).toMatch(/^\(214\) 555-01\d{2}$/);
+  });
+});

package/templates/marketplace/AGENTS.md

@@ -62,7 +62,7 @@ this pass before the user has to ask.
 - **`serverData` (SSR) is READ-ONLY.** No write methods; the runtime rejects write frames (`SSR_WRITE_FORBIDDEN`). Mutations belong in actions/functions, never in a page render.
 - **`response.*` / `response.redirect()` / `response.notFound()` must fire in the synchronous shell render**, before any `await` / `<Suspense>`. The HTTP head commits when the shell is ready; status/headers/cookies set from a suspended subtree are lost, and `redirect`/`notFound` thrown below a Suspense boundary are swallowed.
 - **`ctx.llm`, `ctx.rooms`, and `ctx.connections` are on mutation + action only, NOT query** (reactive purity). `action` has no direct `ctx.db`; use `ctx.runQuery` / `ctx.runMutation`.
-- **`ctx.llm.stream(request, onEvent)` streams tokens as they generate** and still resolves with the full response, so `stop_reason === "tool_use"` drives an agent tool loop. Events are `text_delta` / `tool_use_start` / `tool_input_delta` / `done`. Same auth + model-allowlist gating as `ctx.llm.complete`. Streaming does NOT extend the call deadline (`PYLON_FN_CALL_TIMEOUT`, 30s default) — set `timeout: <secs>` on the def for a long run.
+- **`ctx.llm.stream(request, onEvent)` streams tokens as they generate** and still resolves with the full response, so `stop_reason === "tool_use"` drives an agent tool loop. Events are `text_delta` / `tool_use_start` / `tool_input_delta` / `done`. Same auth + model-allowlist gating as `ctx.llm.complete`. The call timeout is an idle timeout (`PYLON_FN_CALL_TIMEOUT`, 30s default; Stack0 Cloud 300s): each stream event resets it, and the total run is capped at 10× the timeout. Set `timeout: <secs>` on the def when a step (a slow tool call) can be silent longer than that.
 - **`ctx.stream.write(text)` streams to the caller — and every fn stream is RESUMABLE**: the server buffers frames under a stream id (`streamFn`'s `onStreamId`), so a dropped connection or closed tab catches up via `resumeStream(id)`, including the final result after the handler finished. `ctx.rooms.broadcast(room, topic, data)` fans out to every CURRENTLY-CONNECTED subscriber (second device, second tab) but does not replay missed messages — use the stream id for anything that must survive a gap. Broadcast resolves `{ delivered: false }` when the room has no members — a no-op, not an error. Clients receive with `useRoomMessages(room, cb)` from `@pylonsync/react`; `useRoom` is the send side.
 - **It's `db.useQueryOne`, not `useOne`.** Validators and field types have aliases: `v.bool`/`v.boolean`, `v.float`/`v.number`.
 - **Use the supported file and scheduling APIs.** Files go through `<FileUpload>` and `/api/files/*`; an upload is readable by its uploader only, so pass `visibility: "public"` to `uploadFile` or `<FileUpload>` for files every visitor sees; there is no `ctx.files`. One-shot work uses `ctx.scheduler.runAfter`, `runAt`, or `cancel`; there is no `defineWorkflow` or `defineJob`. Recurring work uses `cron("0 * * * *", "fnName")` in `buildManifest({ crons: [...] })`, imported from `@pylonsync/sdk`. Make the target function `internal: true`. It runs with anonymous auth, but its own `ctx.db.*` calls are server-side and bypass policies. Use `ctx.auth.elevate({ admin: true, reason: "..." })`, with a mandatory reason, only when chaining another internal function through `ctx.scheduler`.

package/templates/marketplace/README.md

@@ -1,6 +1,6 @@
 # __APP_NAME__
 
-A polished, two-sided resale marketplace built with
+A two-sided resale marketplace built with
 [Pylon](https://pylonsync.com), with server-rendered product discovery and
 realtime offers.
 
@@ -14,29 +14,34 @@ tab.
 __RUN_DEV__
 ```
 
-Open http://localhost:4321. The grid seeds itself on first load. Open a
-second tab, post something from `/sell` in one, and watch it hit the "just
-listed" ticker in the other with no refresh. Sign in (the `/sell` form prefills
-a demo account) to list, save finds, make offers, and watch your dashboard
-update live.
+Open http://localhost:4321. On first boot the app seeds 10 listings with
+photos, a few open offers, and one sale. Open a second tab, post something
+from `/sell` in one, and watch it rise into the grid and the activity feed in
+the other with no refresh. Sign in (the form prefills a demo account) to buy,
+make offers, save listings, and answer the offers waiting on your dashboard.
 
 ## How it works
 
 - **Server-rendered for SEO + LCP.** The browse grid (`/`) and every listing
   page (`/listing/:slug`) render on the server with real rows (`serverData` +
   React 19 `use()`). View source and the products are *in the HTML*.
-- **Realtime where it matters.** The "just listed" ticker, the live offers on a
-  listing, and your `/me` dashboard all ride the sync engine: one `db.useQuery` per
-  view, no polling. The public surface connects with an anonymous **guest
-  session** (read-only); writing (list/offer/buy) requires a real sign-in.
+- **Realtime where it matters.** The browse grid (new listings, offer counts,
+  sold status), the activity feed, the offers on a listing, and your `/me`
+  dashboard all ride the sync engine: one `db.useQuery` per view, no polling.
+  The public surface connects with an anonymous **guest session**
+  (read-only); writing (list/offer/buy) requires a real sign-in.
 - **Unspoofable ownership.** `sellerId`/`buyerId` use `field.owner()`, so the
   framework stamps them from the session and rejects forged values. Listings
   and offers can be created with a plain optimistic `db.insert` and still can't
   be spoofed. The heavier logic (accept = mark sold + auto-decline the rest)
   runs in `functions/respondToOffer.ts`, where it enforces "only the seller".
-- **Commerce-ready discovery.** Browse by category, search title, description,
-  seller, or category, and sort by recency or price. The logic is pure and
+- **Discovery.** Browse by category, search title, description, seller,
+  category, or location, and sort by recency or price. The logic is pure and
   covered by tests in `tests/example.test.ts`.
+- **Demo data.** `functions/seedMarket.ts` holds the listings and
+  `functions/seedOffers.ts` the offers. Photos live in
+  `public/images/listings/` (a 1120px and a 640px WebP each). Replace both
+  with your own catalog.
 
 ## Privacy and policies
 
@@ -68,7 +73,8 @@ and shipping or pickup workflow before accepting real transactions.
 ## Rebrand it
 
 The brand ("Reprise") lives in `app/layout.tsx`; the demo catalog +
-seed account are in `functions/seedMarket.ts`. The design tokens are in
+seed accounts are in `functions/seedMarket.ts`, `functions/seedOffers.ts`,
+and `client/market.ts`. The design tokens are in
 `ui/tokens.css` + `app/globals.css`.
 
 ## Layout
@@ -79,8 +85,10 @@ app/page.tsx                   SSR discovery, search, sort, category facets
 app/listing/[id]/page.tsx      SSR listing detail (+ generateMetadata)
 app/sell/page.tsx              list an item (sign-in gated)
 app/me/page.tsx                your listings, offers, watchlist (live)
-functions/buyNow.ts, makeOffer.ts, respondToOffer.ts, seedMarket.ts
-client/*                       the realtime islands (ticker, offers, sell form…)
+functions/buyNow.ts, makeOffer.ts, respondToOffer.ts, seedMarket.ts, seedOffers.ts
+lib/catalog.ts                 categories, filtering, offer math (pure, tested)
+client/*                       the realtime islands (grid, activity feed, offers, sell form)
+public/images/listings/        seeded listing photos
 ```
 
 ## Deploy