@smi-digital/create-smi-app 2.1.0 → 2.2.1

package/dist/index.js

@@ -664,6 +664,12 @@ async function createScaffold(options, targetDir, templatesDir) {
   }
   await createApps(projectRoot, getAppTargets(options));
   await createIntegrations(options, projectRoot, templatesDir);
+  if (options.tools.includes("basic")) {
+    await runStep(
+      "Installing root dependencies",
+      async () => runCommandQuiet("npm", ["install"], projectRoot)
+    );
+  }
   console.log(accent2(`\u25C6 Project scaffolded at ${projectRoot}`));
 }
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@smi-digital/create-smi-app",
-  "version": "2.1.0",
+  "version": "2.2.1",
   "description": "",
   "main": "dist/index.js",
   "bin": {

package/templates/.husky/pre-commit

@@ -3,7 +3,7 @@
 # 1. Run standard linters and formatters
 npx lint-staged
 
-# 2. Ansible-Vault Security Guard
+# 2. Ansible-Vault Auto-Encryptor
 # Find any staged files that end in .env and start with "production"
 STAGED_ENV_FILES=$(git diff --cached --name-only --diff-filter=ACM | grep -E '^production\..*\.env$')
 
@@ -11,18 +11,21 @@ for file in $STAGED_ENV_FILES; do
   # Read the first line of the file
   FIRST_LINE=$(head -n 1 "$file")
   
-  # Check if the first line indicates it is an Ansible Vault file
+  # Check if the first line indicates it is already an Ansible Vault file
   if [[ "$FIRST_LINE" != "\$ANSIBLE_VAULT;"* ]]; then
-    echo ""
-    echo "🚨 SECURITY ALERT: Unencrypted Production Secrets Detected! 🚨"
-    echo "File: $file"
-    echo ""
-    echo "You are attempting to commit a plain-text production .env file."
-    echo "Please encrypt it using Ansible-Vault before committing:"
-    echo ""
-    echo "  ansible-vault encrypt $file"
-    echo ""
-    echo "Commit aborted."
-    exit 1
+    echo "🔒 Auto-encrypting production secrets for: $file"
+    
+    # Check if .vault-password exists
+    if [ ! -f ".vault-password" ]; then
+      echo "❌ ERROR: .vault-password file not found. Cannot encrypt secrets."
+      echo "Please create a .vault-password file containing your master password."
+      exit 1
+    fi
+
+    # Encrypt the file using the local password
+    ansible-vault encrypt "$file" --vault-password-file .vault-password
+    
+    # Re-stage the now-encrypted file
+    git add "$file"
   fi
 done

package/templates/integrations/strapi-astro/Dockerfile.backend.template

@@ -3,7 +3,7 @@
 # Place this in your /backend folder
 # ========================================================
 
-FROM node:18-alpine
+FROM node:24-alpine
 # Installing libvips-dev for sharp Compatibility
 RUN apk update && apk add --no-cache build-base gcc autoconf automake zlib-dev libpng-dev vips-dev > /dev/null 2>&1
 ARG NODE_ENV=production

package/templates/integrations/strapi-astro/backend/src/index.ts.template

@@ -9,24 +9,23 @@ export default {
 
     if (!publicRole) return;
 
-    // 2. Dynamically find all Custom APIs created by the developer
-    // strapi.api contains all user-generated content types (ignoring system plugins)
-    const customApis = Object.keys(strapi.api);
+    // 2. Find all Custom APIs (Strapi v5 compatible)
+    const allContentTypes = Object.keys(strapi.contentTypes);
     const permissionsToOpen: string[] = [];
 
-    // 3. Build the permission strings (find and findOne) for every custom API
-    for (const apiName of customApis) {
-      permissionsToOpen.push(`api::${apiName}.${apiName}.find`);
-      permissionsToOpen.push(`api::${apiName}.${apiName}.findOne`);
+    for (const uid of allContentTypes) {
+      if (uid.startsWith('api::')) {
+        permissionsToOpen.push(`${uid}.find`);
+        permissionsToOpen.push(`${uid}.findOne`);
+      }
     }
 
-    // 4. Grant the permissions programmatically
+    // 3. Grant the permissions programmatically
     for (const action of permissionsToOpen) {
       const existingPermission = await strapi
         .query('plugin::users-permissions.permission')
         .findOne({ where: { role: publicRole.id, action } });
 
-      // If the permission doesn't exist yet, create it
       if (!existingPermission) {
         await strapi.query('plugin::users-permissions.permission').create({
           data: {