@smi-digital/create-smi-app 2.2.1 → 2.3.1

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@smi-digital/create-smi-app",
-  "version": "2.2.1",
+  "version": "2.3.1",
   "description": "",
   "main": "dist/index.js",
   "bin": {

package/templates/.husky/pre-commit

@@ -1,31 +1,2 @@
 #!/usr/bin/env sh
-
-# 1. Run standard linters and formatters
-npx lint-staged
-
-# 2. Ansible-Vault Auto-Encryptor
-# Find any staged files that end in .env and start with "production"
-STAGED_ENV_FILES=$(git diff --cached --name-only --diff-filter=ACM | grep -E '^production\..*\.env$')
-
-for file in $STAGED_ENV_FILES; do
-  # Read the first line of the file
-  FIRST_LINE=$(head -n 1 "$file")
-  
-  # Check if the first line indicates it is already an Ansible Vault file
-  if [[ "$FIRST_LINE" != "\$ANSIBLE_VAULT;"* ]]; then
-    echo "🔒 Auto-encrypting production secrets for: $file"
-    
-    # Check if .vault-password exists
-    if [ ! -f ".vault-password" ]; then
-      echo "❌ ERROR: .vault-password file not found. Cannot encrypt secrets."
-      echo "Please create a .vault-password file containing your master password."
-      exit 1
-    fi
-
-    # Encrypt the file using the local password
-    ansible-vault encrypt "$file" --vault-password-file .vault-password
-    
-    # Re-stage the now-encrypted file
-    git add "$file"
-  fi
-done
+npx lint-staged

package/templates/base/package.json.template

@@ -9,6 +9,7 @@
     "prettier": "npx prettier --write .",
     "lint": "npx eslint .",
     "prepare": "husky",
+    "setup:vault": "git config filter.ansible-vault.clean \"ansible-vault encrypt --vault-password-file .vault-password --output=- -\" && git config filter.ansible-vault.smudge \"ansible-vault decrypt --vault-password-file .vault-password --output=- -\" && git config filter.ansible-vault.required true && echo '✅ Ansible-Vault Git Filters configured successfully!'",
     "knip": "knip",
     "depcruise": "depcruise . --exclude \"node_modules|dist|.husky|test\"",
     "depcheck": "npm run knip && npm run depcruise",

package/templates/integrations/strapi-astro/.gitattributes.template

@@ -0,0 +1,2 @@
+# Use Ansible-Vault Git filters for production environment files
+production.*.env filter=ansible-vault diff=ansible-vault merge=ansible-vault

package/templates/integrations/strapi-astro/backend/src/index.ts.template

@@ -21,6 +21,7 @@ export default {
     }
 
     // 3. Grant the permissions programmatically
+    /* eslint-disable no-await-in-loop */
     for (const action of permissionsToOpen) {
       const existingPermission = await strapi
         .query('plugin::users-permissions.permission')
@@ -29,12 +30,13 @@ export default {
       if (!existingPermission) {
         await strapi.query('plugin::users-permissions.permission').create({
           data: {
-            action: action,
+            action,
             role: publicRole.id,
           },
         });
         console.log(`[BOOTSTRAP] Automatically granted public access to: ${action}`);
       }
     }
+    /* eslint-enable no-await-in-loop */
   },
 };

package/templates/integrations/strapi-astro/integration.config.json

@@ -74,6 +74,10 @@
       "template": ".vault-password.template",
       "target": ".vault-password"
     },
+    {
+      "template": ".gitattributes.template",
+      "target": ".gitattributes"
+    },
     {
       "template": "production.frontend.env.template",
       "target": "production.frontend.env"