npm - @pylonsync/create-pylon - Versions diffs - 0.3.266 → 0.3.268 - Mend

@pylonsync/create-pylon 0.3.266 → 0.3.268

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (102) hide show

package/bin/create-pylon.js +77 -14
package/package.json +1 -1
package/templates/b2b/AGENTS.md +61 -0
package/templates/b2b/README.md +62 -0
package/templates/b2b/app/auth-form.tsx +142 -0
package/templates/b2b/app/dashboard/dashboard-client.tsx +192 -0
package/templates/b2b/app/dashboard/page.tsx +63 -0
package/templates/b2b/app/error.tsx +43 -0
package/templates/b2b/app/globals.css +139 -0
package/templates/b2b/app/layout.tsx +71 -0
package/templates/b2b/app/login/page.tsx +47 -0
package/templates/b2b/app/not-found.tsx +29 -0
package/templates/b2b/app/page.tsx +114 -0
package/templates/b2b/app/robots.ts +12 -0
package/templates/b2b/app/signup/page.tsx +44 -0
package/templates/b2b/app/sitemap.ts +27 -0
package/templates/b2b/app.ts +179 -0
package/templates/b2b/components/ui/button.tsx +56 -0
package/templates/b2b/components/ui/card.tsx +90 -0
package/templates/b2b/components.json +20 -0
package/templates/b2b/functions/_keep.ts +13 -0
package/templates/b2b/gitignore +10 -0
package/templates/b2b/lib/utils.ts +10 -0
package/templates/b2b/package.json +33 -0
package/templates/b2b/tsconfig.json +18 -0
package/templates/barebones/AGENTS.md +61 -0
package/templates/barebones/README.md +45 -0
package/templates/barebones/app/error.tsx +43 -0
package/templates/barebones/app/globals.css +139 -0
package/templates/barebones/app/items-client.tsx +96 -0
package/templates/barebones/app/layout.tsx +27 -0
package/templates/barebones/app/not-found.tsx +29 -0
package/templates/barebones/app/page.tsx +28 -0
package/templates/barebones/app/robots.ts +12 -0
package/templates/barebones/app/sitemap.ts +27 -0
package/templates/barebones/app.ts +55 -0
package/templates/barebones/components/ui/button.tsx +56 -0
package/templates/barebones/components/ui/card.tsx +90 -0
package/templates/barebones/components.json +20 -0
package/templates/barebones/functions/_keep.ts +13 -0
package/templates/barebones/gitignore +10 -0
package/templates/barebones/lib/utils.ts +10 -0
package/templates/barebones/package.json +33 -0
package/templates/barebones/tsconfig.json +18 -0
package/templates/chat/AGENTS.md +61 -0
package/templates/chat/README.md +51 -0
package/templates/chat/app/chat-client.tsx +113 -0
package/templates/chat/app/error.tsx +43 -0
package/templates/chat/app/globals.css +139 -0
package/templates/chat/app/layout.tsx +25 -0
package/templates/chat/app/not-found.tsx +29 -0
package/templates/chat/app/page.tsx +26 -0
package/templates/chat/app/robots.ts +12 -0
package/templates/chat/app/sitemap.ts +27 -0
package/templates/chat/app.ts +59 -0
package/templates/chat/components/ui/button.tsx +56 -0
package/templates/chat/components/ui/card.tsx +90 -0
package/templates/chat/components.json +20 -0
package/templates/chat/functions/_keep.ts +13 -0
package/templates/chat/gitignore +10 -0
package/templates/chat/lib/utils.ts +10 -0
package/templates/chat/package.json +33 -0
package/templates/chat/tsconfig.json +18 -0
package/templates/consumer/AGENTS.md +61 -0
package/templates/consumer/README.md +52 -0
package/templates/consumer/app/error.tsx +43 -0
package/templates/consumer/app/feed-client.tsx +154 -0
package/templates/consumer/app/globals.css +139 -0
package/templates/consumer/app/layout.tsx +27 -0
package/templates/consumer/app/not-found.tsx +29 -0
package/templates/consumer/app/page.tsx +27 -0
package/templates/consumer/app/robots.ts +12 -0
package/templates/consumer/app/sitemap.ts +27 -0
package/templates/consumer/app.ts +89 -0
package/templates/consumer/components/ui/button.tsx +56 -0
package/templates/consumer/components/ui/card.tsx +90 -0
package/templates/consumer/components.json +20 -0
package/templates/consumer/functions/_keep.ts +13 -0
package/templates/consumer/gitignore +10 -0
package/templates/consumer/lib/utils.ts +10 -0
package/templates/consumer/package.json +33 -0
package/templates/consumer/tsconfig.json +18 -0
package/templates/ssr/app.ts +3 -0
package/templates/todo/AGENTS.md +61 -0
package/templates/todo/README.md +59 -0
package/templates/todo/app/error.tsx +43 -0
package/templates/todo/app/globals.css +139 -0
package/templates/todo/app/layout.tsx +31 -0
package/templates/todo/app/not-found.tsx +29 -0
package/templates/todo/app/page.tsx +37 -0
package/templates/todo/app/robots.ts +12 -0
package/templates/todo/app/sitemap.ts +27 -0
package/templates/todo/app/todo-app.tsx +133 -0
package/templates/todo/app.ts +72 -0
package/templates/todo/components/ui/button.tsx +56 -0
package/templates/todo/components/ui/card.tsx +90 -0
package/templates/todo/components.json +20 -0
package/templates/todo/functions/_keep.ts +13 -0
package/templates/todo/gitignore +10 -0
package/templates/todo/lib/utils.ts +10 -0
package/templates/todo/package.json +33 -0
package/templates/todo/tsconfig.json +18 -0

package/templates/b2b/app/dashboard/page.tsx ADDED Viewed

@@ -0,0 +1,63 @@
+import React, { Suspense, use } from "react";
+import {
+  type Metadata,
+  type PageProps,
+  type ServerData,
+} from "@pylonsync/react";
+import { Workspace } from "./dashboard-client";
+export const metadata: Metadata = {
+  title: "Dashboard — __APP_NAME__",
+  robots: "noindex",
+};
+interface User {
+  id: string;
+  email: string;
+  displayName?: string;
+}
+// Reads the signed-in user DURING the server render (owner-scoped: only your
+// own row). The org list + the active org's projects load client-side, since
+// they depend on the session's selected tenant.
+function Greeting({
+  serverData,
+  userId,
+}: {
+  serverData: ServerData;
+  userId: string;
+}) {
+  const user = use(serverData.get<User>("User", userId));
+  return (
+    <p className="text-sm text-muted-foreground">
+      Signed in as{" "}
+      <span className="font-medium text-foreground">
+        {user?.displayName || user?.email || "you"}
+      </span>
+      .
+    </p>
+  );
+}
+// `app/dashboard/page.tsx` → `/dashboard`.
+export default function DashboardPage({
+  auth,
+  response,
+  serverData,
+}: PageProps) {
+  // Server-side auth gate: anonymous requests get a 307 to /login before any
+  // HTML. Must fire in the synchronous shell render, not inside <Suspense> —
+  // and return immediately so nothing renders below the already-sent redirect.
+  if (!auth.user_id) {
+    response.redirect("/login");
+    return null;
+  }
+  return (
+    <div className="space-y-6">
+      <Suspense fallback={null}>
+        <Greeting serverData={serverData} userId={auth.user_id!} />
+      </Suspense>
+      <Workspace />
+    </div>
+  );
+}

package/templates/b2b/app/error.tsx ADDED Viewed

@@ -0,0 +1,43 @@
+import React from "react";
+import { type ErrorBoundaryProps } from "@pylonsync/react";
+import { Button } from "@/components/ui/button";
+// `app/error.tsx` → the error boundary for this segment. It catches a throw
+// in any page/layout below it and renders at HTTP 500. It's HYDRATED, so
+// this is a real interactive client component: `reset()` re-attempts the
+// route, and useState/onClick work. The thrown error reaches the client as
+// `{ message, digest }` only — the stack stays in the dev overlay
+// (PYLON_DEV_MODE) and the server logs, never in the page.
+export default function Error({ error, reset }: ErrorBoundaryProps) {
+  const [tries, setTries] = React.useState(0);
+  return (
+    <div className="space-y-6">
+      <section>
+        <h1 className="text-2xl font-semibold tracking-tight">
+          Something went wrong
+        </h1>
+        <p className="mt-2 text-muted-foreground">{error.message}</p>
+        {error.digest ? (
+          <p className="mt-1 text-xs text-muted-foreground/70">
+            Reference: <code>{error.digest}</code>
+          </p>
+        ) : null}
+      </section>
+      <div className="flex items-center gap-3">
+        <Button
+          onClick={() => {
+            setTries((n) => n + 1);
+            reset();
+          }}
+        >
+          Try again
+        </Button>
+        {tries > 0 ? (
+          <span className="text-sm text-muted-foreground">
+            Retried {tries} {tries === 1 ? "time" : "times"}
+          </span>
+        ) : null}
+      </div>
+    </div>
+  );
+}

package/templates/b2b/app/globals.css ADDED Viewed

@@ -0,0 +1,139 @@
+@import "tailwindcss";
+@import "tw-animate-css";
+/* Tailwind v4 scans these globs for class names. `components/` is here so
+   shadcn/ui component classes are seen — add more @source lines if you put
+   markup elsewhere. */
+@source "../app/**/*.{tsx,ts,jsx,js}";
+@source "../components/**/*.{tsx,ts,jsx,js}";
+@custom-variant dark (&:where(.dark, .dark *));
+/* shadcn/ui design tokens (new-york / zinc). Edit these to re-theme the
+   whole app; `npx shadcn@latest add <component>` drops new components that
+   consume the same variables. Toggle dark mode by putting `class="dark"`
+   on <html>. */
+:root {
+  --radius: 0.625rem;
+  --background: oklch(1 0 0);
+  --foreground: oklch(0.141 0.005 285.823);
+  --card: oklch(1 0 0);
+  --card-foreground: oklch(0.141 0.005 285.823);
+  --popover: oklch(1 0 0);
+  --popover-foreground: oklch(0.141 0.005 285.823);
+  --primary: oklch(0.21 0.006 285.885);
+  --primary-foreground: oklch(0.985 0 0);
+  --secondary: oklch(0.967 0.001 286.375);
+  --secondary-foreground: oklch(0.21 0.006 285.885);
+  --muted: oklch(0.967 0.001 286.375);
+  --muted-foreground: oklch(0.552 0.016 285.938);
+  --accent: oklch(0.967 0.001 286.375);
+  --accent-foreground: oklch(0.21 0.006 285.885);
+  --destructive: oklch(0.577 0.245 27.325);
+  --border: oklch(0.92 0.004 286.32);
+  --input: oklch(0.92 0.004 286.32);
+  --ring: oklch(0.705 0.015 286.067);
+  --chart-1: oklch(0.646 0.222 41.116);
+  --chart-2: oklch(0.6 0.118 184.704);
+  --chart-3: oklch(0.398 0.07 227.392);
+  --chart-4: oklch(0.828 0.189 84.429);
+  --chart-5: oklch(0.769 0.188 70.08);
+  --sidebar: oklch(0.985 0 0);
+  --sidebar-foreground: oklch(0.141 0.005 285.823);
+  --sidebar-primary: oklch(0.21 0.006 285.885);
+  --sidebar-primary-foreground: oklch(0.985 0 0);
+  --sidebar-accent: oklch(0.967 0.001 286.375);
+  --sidebar-accent-foreground: oklch(0.21 0.006 285.885);
+  --sidebar-border: oklch(0.92 0.004 286.32);
+  --sidebar-ring: oklch(0.705 0.015 286.067);
+}
+.dark {
+  --background: oklch(0.141 0.005 285.823);
+  --foreground: oklch(0.985 0 0);
+  --card: oklch(0.21 0.006 285.885);
+  --card-foreground: oklch(0.985 0 0);
+  --popover: oklch(0.21 0.006 285.885);
+  --popover-foreground: oklch(0.985 0 0);
+  --primary: oklch(0.92 0.004 286.32);
+  --primary-foreground: oklch(0.21 0.006 285.885);
+  --secondary: oklch(0.274 0.006 286.033);
+  --secondary-foreground: oklch(0.985 0 0);
+  --muted: oklch(0.274 0.006 286.033);
+  --muted-foreground: oklch(0.705 0.015 286.067);
+  --accent: oklch(0.274 0.006 286.033);
+  --accent-foreground: oklch(0.985 0 0);
+  --destructive: oklch(0.704 0.191 22.216);
+  --border: oklch(1 0 0 / 10%);
+  --input: oklch(1 0 0 / 15%);
+  --ring: oklch(0.552 0.016 285.938);
+  --chart-1: oklch(0.488 0.243 264.376);
+  --chart-2: oklch(0.696 0.17 162.48);
+  --chart-3: oklch(0.769 0.188 70.08);
+  --chart-4: oklch(0.627 0.265 303.9);
+  --chart-5: oklch(0.645 0.246 16.439);
+  --sidebar: oklch(0.21 0.006 285.885);
+  --sidebar-foreground: oklch(0.985 0 0);
+  --sidebar-primary: oklch(0.488 0.243 264.376);
+  --sidebar-primary-foreground: oklch(0.985 0 0);
+  --sidebar-accent: oklch(0.274 0.006 286.033);
+  --sidebar-accent-foreground: oklch(0.985 0 0);
+  --sidebar-border: oklch(1 0 0 / 10%);
+  --sidebar-ring: oklch(0.552 0.016 285.938);
+}
+@theme inline {
+  --radius-sm: calc(var(--radius) - 4px);
+  --radius-md: calc(var(--radius) - 2px);
+  --radius-lg: var(--radius);
+  --radius-xl: calc(var(--radius) + 4px);
+  --color-background: var(--background);
+  --color-foreground: var(--foreground);
+  --color-card: var(--card);
+  --color-card-foreground: var(--card-foreground);
+  --color-popover: var(--popover);
+  --color-popover-foreground: var(--popover-foreground);
+  --color-primary: var(--primary);
+  --color-primary-foreground: var(--primary-foreground);
+  --color-secondary: var(--secondary);
+  --color-secondary-foreground: var(--secondary-foreground);
+  --color-muted: var(--muted);
+  --color-muted-foreground: var(--muted-foreground);
+  --color-accent: var(--accent);
+  --color-accent-foreground: var(--accent-foreground);
+  --color-destructive: var(--destructive);
+  --color-border: var(--border);
+  --color-input: var(--input);
+  --color-ring: var(--ring);
+  --color-chart-1: var(--chart-1);
+  --color-chart-2: var(--chart-2);
+  --color-chart-3: var(--chart-3);
+  --color-chart-4: var(--chart-4);
+  --color-chart-5: var(--chart-5);
+  --color-sidebar: var(--sidebar);
+  --color-sidebar-foreground: var(--sidebar-foreground);
+  --color-sidebar-primary: var(--sidebar-primary);
+  --color-sidebar-primary-foreground: var(--sidebar-primary-foreground);
+  --color-sidebar-accent: var(--sidebar-accent);
+  --color-sidebar-accent-foreground: var(--sidebar-accent-foreground);
+  --color-sidebar-border: var(--sidebar-border);
+  --color-sidebar-ring: var(--sidebar-ring);
+}
+@layer base {
+  *,
+  ::after,
+  ::before,
+  ::backdrop,
+  ::file-selector-button {
+    border-color: var(--color-border, currentColor);
+    outline-color: var(--color-ring);
+  }
+  body {
+    background-color: var(--color-background);
+    color: var(--color-foreground);
+  }
+  button {
+    cursor: pointer;
+  }
+}

package/templates/b2b/app/layout.tsx ADDED Viewed

@@ -0,0 +1,71 @@
+import React from "react";
+import { Link, type PageAuth } from "@pylonsync/react";
+// A layout receives the page props plus `children`. `auth.user_id` is null
+// for anonymous visitors and the signed-in user's id otherwise — resolved
+// server-side from the session cookie, before any HTML is sent, so the nav
+// renders the right links on the first byte (no flash, no client fetch). The
+// `PageAuth` type is exported from @pylonsync/react so you never hand-roll it.
+interface LayoutProps {
+  children: React.ReactNode;
+  url: string;
+  auth: PageAuth;
+}
+// The root layout wraps every page.
+export default function RootLayout({ children, auth }: LayoutProps) {
+  const signedIn = Boolean(auth?.user_id);
+  // Add `className="dark"` to this <html> to flip every shadcn token to its
+  // dark value. The classes below use semantic tokens (bg-background,
+  // text-foreground, …) so the whole UI re-themes from app/globals.css.
+  return (
+    <html lang="en">
+      <head>
+        <meta charSet="utf-8" />
+        <meta name="viewport" content="width=device-width, initial-scale=1" />
+        <title>__APP_NAME__</title>
+        {/* Tailwind is compiled by Pylon from app/globals.css and the
+            stylesheet link is injected here automatically — nothing to
+            wire up. */}
+      </head>
+      <body className="min-h-screen bg-background text-foreground antialiased">
+        <header className="sticky top-0 z-10 border-b bg-background/80 backdrop-blur">
+          <div className="mx-auto flex max-w-3xl items-center justify-between px-4 py-3">
+            <Link
+              href="/"
+              className="text-sm font-semibold tracking-tight hover:text-muted-foreground"
+            >
+              __APP_NAME__
+            </Link>
+            <nav className="flex items-center gap-4 text-sm text-muted-foreground">
+              <Link href="/" className="hover:text-foreground">
+                Home
+              </Link>
+              {signedIn ? (
+                <Link href="/dashboard" className="hover:text-foreground">
+                  Dashboard
+                </Link>
+              ) : (
+                <>
+                  <Link href="/login" className="hover:text-foreground">
+                    Sign in
+                  </Link>
+                  <Link
+                    href="/signup"
+                    className="rounded-md bg-primary px-3 py-1.5 font-medium text-primary-foreground hover:opacity-90"
+                  >
+                    Sign up
+                  </Link>
+                </>
+              )}
+            </nav>
+          </div>
+        </header>
+        <main className="mx-auto max-w-3xl px-4 py-10">{children}</main>
+        <footer className="border-t py-6 text-center text-xs text-muted-foreground">
+          Rendered by Pylon · one server, one port
+        </footer>
+      </body>
+    </html>
+  );
+}

package/templates/b2b/app/login/page.tsx ADDED Viewed

@@ -0,0 +1,47 @@
+import React from "react";
+import { Link, type Metadata, type PageProps } from "@pylonsync/react";
+import {
+  Card,
+  CardContent,
+  CardDescription,
+  CardHeader,
+  CardTitle,
+} from "@/components/ui/card";
+import { AuthForm } from "../auth-form";
+export const metadata: Metadata = {
+  title: "Sign in — __APP_NAME__",
+  // Auth pages shouldn't be indexed.
+  robots: "noindex",
+};
+// `app/login/page.tsx` → `/login`. A server-rendered shell around the
+// client-side <AuthForm> island.
+export default function LoginPage({ auth, response }: PageProps) {
+  // Already signed in? Skip the form. `response.redirect` runs in the
+  // synchronous shell render, so it's a real 307 before any HTML is sent
+  // (no flash, works with JS disabled).
+  if (auth.user_id) response.redirect("/dashboard");
+  return (
+    <div className="mx-auto max-w-sm">
+      <Card>
+        <CardHeader>
+          <CardTitle>Sign in</CardTitle>
+          <CardDescription>Welcome back.</CardDescription>
+        </CardHeader>
+        <CardContent className="space-y-4">
+          <AuthForm mode="login" />
+          <p className="text-center text-sm text-muted-foreground">
+            No account?{" "}
+            <Link
+              href="/signup"
+              className="font-medium text-foreground hover:underline"
+            >
+              Create one
+            </Link>
+          </p>
+        </CardContent>
+      </Card>
+    </div>
+  );
+}

package/templates/b2b/app/not-found.tsx ADDED Viewed

@@ -0,0 +1,29 @@
+import React from "react";
+import { Link, useRouter, type NotFoundProps } from "@pylonsync/react";
+import { Button } from "@/components/ui/button";
+// `app/not-found.tsx` → rendered at HTTP 404 for any unmatched URL (and when
+// a page calls `response.notFound()`). It's HYDRATED, so it's interactive:
+// the buttons below use the client router. Not-found boundaries receive the
+// standard page props (and, matching Next, no `reset`).
+export default function NotFound(_props: NotFoundProps) {
+  const router = useRouter();
+  return (
+    <div className="space-y-6">
+      <section>
+        <h1 className="text-2xl font-semibold tracking-tight">404</h1>
+        <p className="mt-2 text-muted-foreground">
+          We couldn&apos;t find that page.
+        </p>
+      </section>
+      <div className="flex items-center gap-3">
+        <Button onClick={() => router.back()} variant="outline">
+          ← Go back
+        </Button>
+        <Button asChild>
+          <Link href="/">Home</Link>
+        </Button>
+      </div>
+    </div>
+  );
+}

package/templates/b2b/app/page.tsx ADDED Viewed

@@ -0,0 +1,114 @@
+import React from "react";
+import { Link, type Metadata, type PageProps } from "@pylonsync/react";
+import { Button } from "@/components/ui/button";
+import {
+  Card,
+  CardContent,
+  CardDescription,
+  CardHeader,
+  CardTitle,
+} from "@/components/ui/card";
+// SEO metadata. Export `metadata` (static) or `generateMetadata(props)`
+// (dynamic) from any page or layout — Pylon renders the <title>/<meta>
+// into <head> server-side. The `Metadata` type is exported from
+// @pylonsync/react.
+export const metadata: Metadata = {
+  title: "__APP_NAME__ — full-stack Pylon app",
+  description:
+    "A server-rendered homepage, email/password auth, and a live client dashboard over one synced backend — one binary, one port.",
+};
+// `app/page.tsx` → `/`. This page is server-rendered: view source and the copy
+// is in the HTML, not fetched later — good for SEO and first paint. It reads
+// `auth` (resolved from the session cookie during the render) to show the
+// right call to action. Every page receives `PageProps` from the SSR runtime:
+// `{ url, params, searchParams, auth, response, serverData }` — typed, no
+// hand-rolled interface.
+export default function IndexPage({ auth }: PageProps) {
+  const signedIn = Boolean(auth.user_id);
+  return (
+    <div className="space-y-12">
+      <section className="space-y-5">
+        <span className="inline-flex items-center rounded-full border px-3 py-1 text-xs font-medium text-muted-foreground">
+          Server-rendered · authenticated · synced · one port
+        </span>
+        <h1 className="text-4xl font-semibold tracking-tight">
+          Full-stack apps, one binary.
+        </h1>
+        <p className="max-w-xl text-lg text-muted-foreground">
+          This homepage is server-rendered React. Sign in and your dashboard
+          becomes a live, local-first view over the same Pylon backend — writes
+          appear instantly and sync across tabs. No Next.js, no separate API
+          server, no realtime sidecar.
+        </p>
+        <div className="flex flex-wrap items-center gap-3">
+          {signedIn ? (
+            <Button asChild>
+              <Link href="/dashboard">Go to your dashboard →</Link>
+            </Button>
+          ) : (
+            <>
+              <Button asChild>
+                <Link href="/signup">Get started</Link>
+              </Button>
+              <Button asChild variant="outline">
+                <Link href="/login">Sign in</Link>
+              </Button>
+            </>
+          )}
+        </div>
+      </section>
+      <section className="grid gap-4 sm:grid-cols-3">
+        <Feature title="Server-rendered">
+          File-based routes under <Code>app/</Code>. Pages render to HTML on the
+          server with <Code>metadata</Code> in <Code>{"<head>"}</Code>, then
+          hydrate. Drop <Code>app/about/page.tsx</Code> to add{" "}
+          <Code>/about</Code>.
+        </Feature>
+        <Feature title="Auth included">
+          Email/password is built in. <Code>/login</Code> and{" "}
+          <Code>/signup</Code> hit <Code>/api/auth/password/*</Code>; the server
+          sets an HttpOnly session cookie. <Code>/dashboard</Code> gates on it
+          server-side.
+        </Feature>
+        <Feature title="Synced database">
+          Every <Code>entity()</Code> in <Code>app.ts</Code> gets a REST +
+          realtime API and a typed client. <Code>db.useQuery</Code> is live;{" "}
+          <Code>db.insert</Code> is optimistic.
+        </Feature>
+      </section>
+      <p className="text-xs text-muted-foreground">
+        Edit <Code>app/page.tsx</Code> and save — the page reloads instantly.
+        The data model and access policies live in <Code>app.ts</Code>.
+      </p>
+    </div>
+  );
+}
+function Feature({
+  title,
+  children,
+}: {
+  title: string;
+  children: React.ReactNode;
+}) {
+  return (
+    <Card>
+      <CardHeader>
+        <CardTitle className="text-base">{title}</CardTitle>
+      </CardHeader>
+      <CardContent>
+        <CardDescription className="text-sm leading-relaxed">
+          {children}
+        </CardDescription>
+      </CardContent>
+    </Card>
+  );
+}
+function Code({ children }: { children: React.ReactNode }) {
+  return <code className="rounded bg-muted px-1 text-xs">{children}</code>;
+}

package/templates/b2b/app/robots.ts ADDED Viewed

@@ -0,0 +1,12 @@
+import type { Robots } from "@pylonsync/react";
+// app/robots.ts → served at /robots.txt. The default export may also be async.
+const SITE = process.env.SITE_URL ?? "http://localhost:4321";
+export default function robots(): Robots {
+  return {
+    // Keep the authenticated app and the API out of the index.
+    rules: { userAgent: "*", allow: "/", disallow: ["/dashboard", "/api/"] },
+    sitemap: `${SITE}/sitemap.xml`,
+  };
+}

package/templates/b2b/app/signup/page.tsx ADDED Viewed

@@ -0,0 +1,44 @@
+import React from "react";
+import { Link, type Metadata, type PageProps } from "@pylonsync/react";
+import {
+  Card,
+  CardContent,
+  CardDescription,
+  CardHeader,
+  CardTitle,
+} from "@/components/ui/card";
+import { AuthForm } from "../auth-form";
+export const metadata: Metadata = {
+  title: "Create your account — __APP_NAME__",
+  robots: "noindex",
+};
+// `app/signup/page.tsx` → `/signup`. Same shell as /login, register mode.
+export default function SignupPage({ auth, response }: PageProps) {
+  if (auth.user_id) response.redirect("/dashboard");
+  return (
+    <div className="mx-auto max-w-sm">
+      <Card>
+        <CardHeader>
+          <CardTitle>Create your account</CardTitle>
+          <CardDescription>
+            Email + password. No credit card, no email verification step in dev.
+          </CardDescription>
+        </CardHeader>
+        <CardContent className="space-y-4">
+          <AuthForm mode="signup" />
+          <p className="text-center text-sm text-muted-foreground">
+            Already have an account?{" "}
+            <Link
+              href="/login"
+              className="font-medium text-foreground hover:underline"
+            >
+              Sign in
+            </Link>
+          </p>
+        </CardContent>
+      </Card>
+    </div>
+  );
+}

package/templates/b2b/app/sitemap.ts ADDED Viewed

@@ -0,0 +1,27 @@
+import type { Sitemap } from "@pylonsync/react";
+// app/sitemap.ts → served at /sitemap.xml. The default export can be async, so
+// it can enumerate dynamic pages from your database. Point SITE_URL at your
+// domain in production.
+const SITE = process.env.SITE_URL ?? "http://localhost:4321";
+export default async function sitemap(): Promise<Sitemap> {
+  // Only public pages belong here — /dashboard is private (and noindex), so
+  // it's intentionally left out.
+  const staticRoutes: Sitemap = [
+    { url: `${SITE}/`, changeFrequency: "weekly", priority: 1 },
+    { url: `${SITE}/login`, changeFrequency: "yearly", priority: 0.3 },
+    { url: `${SITE}/signup`, changeFrequency: "yearly", priority: 0.5 },
+  ];
+  // The export is async, so you can enumerate dynamic pages from a DB read:
+  //
+  //   const posts = await fetchPublishedPosts();
+  //   const postRoutes: Sitemap = posts.map((p) => ({
+  //     url: `${SITE}/blog/${p.slug}`,
+  //     lastModified: p.updatedAt,
+  //   }));
+  //   return [...staticRoutes, ...postRoutes];
+  return staticRoutes;
+}