@smi-digital/create-smi-app 2.2.0 → 2.3.0

package/dist/index.js

@@ -664,6 +664,12 @@ async function createScaffold(options, targetDir, templatesDir) {
   }
   await createApps(projectRoot, getAppTargets(options));
   await createIntegrations(options, projectRoot, templatesDir);
+  if (options.tools.includes("basic")) {
+    await runStep(
+      "Installing root dependencies",
+      async () => runCommandQuiet("npm", ["install"], projectRoot)
+    );
+  }
   console.log(accent2(`\u25C6 Project scaffolded at ${projectRoot}`));
 }
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@smi-digital/create-smi-app",
-  "version": "2.2.0",
+  "version": "2.3.0",
   "description": "",
   "main": "dist/index.js",
   "bin": {

package/templates/.husky/pre-commit

@@ -1,31 +1,2 @@
 #!/usr/bin/env sh
-
-# 1. Run standard linters and formatters
-npx lint-staged
-
-# 2. Ansible-Vault Auto-Encryptor
-# Find any staged files that end in .env and start with "production"
-STAGED_ENV_FILES=$(git diff --cached --name-only --diff-filter=ACM | grep -E '^production\..*\.env$')
-
-for file in $STAGED_ENV_FILES; do
-  # Read the first line of the file
-  FIRST_LINE=$(head -n 1 "$file")
-  
-  # Check if the first line indicates it is already an Ansible Vault file
-  if [[ "$FIRST_LINE" != "\$ANSIBLE_VAULT;"* ]]; then
-    echo "🔒 Auto-encrypting production secrets for: $file"
-    
-    # Check if .vault-password exists
-    if [ ! -f ".vault-password" ]; then
-      echo "❌ ERROR: .vault-password file not found. Cannot encrypt secrets."
-      echo "Please create a .vault-password file containing your master password."
-      exit 1
-    fi
-
-    # Encrypt the file using the local password
-    ansible-vault encrypt "$file" --vault-password-file .vault-password
-    
-    # Re-stage the now-encrypted file
-    git add "$file"
-  fi
-done
+npx lint-staged

package/templates/base/package.json.template

@@ -9,6 +9,7 @@
     "prettier": "npx prettier --write .",
     "lint": "npx eslint .",
     "prepare": "husky",
+    "setup:vault": "git config filter.ansible-vault.clean \"ansible-vault encrypt --vault-password-file .vault-password --output=- -\" && git config filter.ansible-vault.smudge \"ansible-vault decrypt --vault-password-file .vault-password --output=- -\" && git config filter.ansible-vault.required true && echo '✅ Ansible-Vault Git Filters configured successfully!'",
     "knip": "knip",
     "depcruise": "depcruise . --exclude \"node_modules|dist|.husky|test\"",
     "depcheck": "npm run knip && npm run depcruise",

package/templates/integrations/strapi-astro/.gitattributes.template

@@ -0,0 +1,2 @@
+# Use Ansible-Vault Git filters for production environment files
+production.*.env filter=ansible-vault diff=ansible-vault merge=ansible-vault

package/templates/integrations/strapi-astro/Dockerfile.backend.template

@@ -3,7 +3,7 @@
 # Place this in your /backend folder
 # ========================================================
 
-FROM node:18-alpine
+FROM node:24-alpine
 # Installing libvips-dev for sharp Compatibility
 RUN apk update && apk add --no-cache build-base gcc autoconf automake zlib-dev libpng-dev vips-dev > /dev/null 2>&1
 ARG NODE_ENV=production

package/templates/integrations/strapi-astro/backend/src/index.ts.template

@@ -9,24 +9,23 @@ export default {
 
     if (!publicRole) return;
 
-    // 2. Dynamically find all Custom APIs created by the developer
-    // strapi.api contains all user-generated content types (ignoring system plugins)
-    const customApis = Object.keys(strapi.api);
+    // 2. Find all Custom APIs (Strapi v5 compatible)
+    const allContentTypes = Object.keys(strapi.contentTypes);
     const permissionsToOpen: string[] = [];
 
-    // 3. Build the permission strings (find and findOne) for every custom API
-    for (const apiName of customApis) {
-      permissionsToOpen.push(`api::${apiName}.${apiName}.find`);
-      permissionsToOpen.push(`api::${apiName}.${apiName}.findOne`);
+    for (const uid of allContentTypes) {
+      if (uid.startsWith('api::')) {
+        permissionsToOpen.push(`${uid}.find`);
+        permissionsToOpen.push(`${uid}.findOne`);
+      }
     }
 
-    // 4. Grant the permissions programmatically
+    // 3. Grant the permissions programmatically
     for (const action of permissionsToOpen) {
       const existingPermission = await strapi
         .query('plugin::users-permissions.permission')
         .findOne({ where: { role: publicRole.id, action } });
 
-      // If the permission doesn't exist yet, create it
       if (!existingPermission) {
         await strapi.query('plugin::users-permissions.permission').create({
           data: {

package/templates/integrations/strapi-astro/integration.config.json

@@ -74,6 +74,10 @@
       "template": ".vault-password.template",
       "target": ".vault-password"
     },
+    {
+      "template": ".gitattributes.template",
+      "target": ".gitattributes"
+    },
     {
       "template": "production.frontend.env.template",
       "target": "production.frontend.env"