@xeplr/cli 0.3.1 → 0.3.3

package/README.md

@@ -41,12 +41,6 @@ Already working, with nothing to wire up:
   - **Menu**: rename, reorder and hide the side rail's items.
 
   Nobody else sees it, and the API refuses everyone else.
-- **Flows, in every app** — your forms one after another, where what someone
-  fills in decides the next screen. Designed in Configure UI → Flows, walked at
-  `/journey/<key>`, and resumable. Run by `@xeplr/workflow` **inside the API**,
-  in the app's own database — nothing extra to start, no port, no setting. It
-  follows the app's tenancy (none, or the levels you chose) and never creates
-  companies or workspaces of its own.
 - **Multi-tenancy, if you ask for it** — companies (or companies and
   workspaces, up to four levels). Every row is stamped with the one it was made
   in, every read sees only its rows, membership is checked on every request,
@@ -77,7 +71,7 @@ These are architecture decisions, not defaults to tune — each one exists becau
 | **`REDIS_PREFIX` is required and unique per app** (`api/development.env`, set to `<name>:`). | `@xeplr/auth`, `@xeplr/utils` | Two apps on one Redis under the shared default serve each other's sessions, menus and API permissions. Sign-in refuses to start without it, or with `xeplr:`. |
 | **Designing, new forms and publishing are Super Admin only.** | `api/routes/access.js`, `@xeplr/auth` menu routes | Publishing changes database tables. Every other screen route checks the permission catalog. |
 | **The browser is not a security boundary.** Front-end hooks (`ui/src/pages/Edit<Form>.jsx`) shape what people see and send; anything that must hold goes in server hooks (`api/screens/<form>/<form>.hooks.js`); data shape in the model (`<form>.model.js`). | `@xeplr/ui-factory`, `@xeplr/factory` | |
-| **Anything every app would write identically lives in a package, not in the generated app.** A generated app is a starting point that then lives its own life — glue copied into it can never be fixed centrally, so an app made last month keeps that copy forever. When the flow designer needed this app's forms as its Screen steps, the wiring went into `@xeplr/ui-factory` (`useScreenSource`) and the generated page passes two props. | `@xeplr/ui-factory`, `@xeplr/ui-workflow` | A fix or a new control type has to reach apps that already exist, and it cannot reach code that was copied into them. `test/cli.test.js` fails if the glue reappears in the generated app. |
+| **Anything every app would write identically lives in a package, not in the generated app.** A generated app is a starting point that then lives its own life — glue copied into it can never be fixed centrally, so an app made last month keeps that copy forever. When Configure UI → Masters needed to know which forms are masters, that answer went into `@xeplr/ui-factory` (`useScreenSource`) and the generated page only reads `masters`. | `@xeplr/ui-factory` | A fix or a new control type has to reach apps that already exist, and it cannot reach code that was copied into them. `test/cli.test.js` fails if the glue reappears in the generated app. |
 | **Every data address is under `/api`.** | `api/routes`, `ui/vite.config.js` | A page path and a data path must never collide. |
 | **No guessed database names or connections.** | `api/development.env` | A wrong-but-present value starts cleanly and reads as empty data. |
 | **Email is checked at start, never fatal.** The sign-in banner shows `email ✓ …` or `✗ NOT WORKING — reason`. | `@xeplr/auth` | Sign-in works without email; activation, invite and reset links cannot be sent until `EMAIL_PROVIDER` is set. |
@@ -206,14 +200,6 @@ no defaults, ever.
 
 Encryption keys and signing secrets are **generated, never asked**.
 
-**Flows, inside the API.** `@xeplr/workflow` is a dependency of `api/`, and
-`bin/www` starts it with `registerWorkflow` after the screens — in the app's
-own database (`DB_API`, its own migration record `workflow_migrations`), with
-`tenantTables: false` so it follows the app's tenancy rather than creating
-`companies` / `workspaces`, and `access: true` so each flows route checks the
-caller's permissions, which its `migrations-auth` grants (loaded through
-`XEPLR_AUTH_MIGRATIONS`).
-
 ## Licence
 
 MIT

package/lib/generate/index.js

@@ -28,52 +28,13 @@ function substitutions(answers) {
     __UI_PORT__: String(answers.ports.ui),
     __AUTH_PORT__: String(answers.ports.auth),
     __API_PORT__: String(answers.ports.api),
-    // The port after the API's — suggested for a service run on its own (workflow).
-    __NEXT_PORT__: String(answers.ports.api + 1),
     __ENCRYPTION_KEY__: answers.secrets.encryptionKey,
     __JWT_SECRET__: answers.secrets.jwtSecret,
     __ADMIN_EMAIL__: answers.admin.email,
     __ADMIN_PASSWORD__: answers.admin.password,
     __DB_CONNECTION__: answers.connection || '',
     __CONNECTION_NOTE__: connectionNote(answers)
-  }, tenancySubstitutions(answers.tenancy || []), flowsSubstitutions(answers));
-}
-
-/**
- * FLOWS ARE IN EVERY APP, and so is what runs them: @xeplr/workflow, started
- * INSIDE the API (bin/www → registerWorkflow) in the app's own database. There
- * is no Workflow server to run, no port, no setting and nothing to connect, so
- * nothing here depends on an answer — these tokens only carry text.
- */
-function flowsSubstitutions(answers) {
-  return {
-    // Where workflow runs. Its database is DB_API with the app's login — no
-    // setting; only the port, and only to run it as its own service.
-    __WF_ENV__: [
-      '# ── Flows (@xeplr/workflow) ──',
-      '# BLANK: workflow runs INSIDE this API (npm run start-api) — nothing else to',
-      '# start. Set a port to run it as its OWN SERVICE (npm run start-workflow);',
-      '# then point /api/workflow at it: WORKFLOW_URL in ui/.env for local, nginx',
-      '# in production (README, "Production"). This app\'s next free port: ' + (answers.ports.api + 1) + '.',
-      'WORKFLOW_PORT=',
-      ''
-    ].join('\n'),
-    __WF_UI_ENV__: [
-      '',
-      '# Where /api/workflow goes. BLANK: the API above (workflow runs inside it).',
-      '# Set it when api/development.env sets WORKFLOW_PORT — e.g.',
-      '# http://localhost:' + (answers.ports.api + 1),
-      'WORKFLOW_URL='
-    ].join('\n'),
-    // Workflow's permissions — who may design a flow, who may run one — load
-    // into this app's sign-in service after the app's own.
-    __WF_AUTH_MIGRATIONS__: ',./node_modules/@xeplr/workflow/migrations-auth',
-    __WF_README__: flowsReadme(answers),
-    __WF_CLAUDE__: [
-      '**Flows** — forms one after another, run by `@xeplr/workflow` INSIDE this API (bin/www starts it) and stored in this app\'s own database. Design them in Configure UI → Flows, never in code: a flow is data, reached through `/api/flows` (routes/flows.js), and walked at `/journey/<key>`. An arrow tests one field of the screen it leaves; a form that is a step must be published first. Workflow follows this app\'s tenancy — it never creates companies or workspaces of its own.',
-      ''
-    ].join('\n')
-  };
+  }, tenancySubstitutions(answers.tenancy || []));
 }
 
 /**
@@ -117,8 +78,6 @@ function tenancySubstitutions(levels) {
       "      '/api/tenants': tenants.router,"
     ].join('\n') : '',
     __MT_MEMBER_GATE__: on ? 'tenants.memberGate' : 'access.anyone',
-    // api/app.js — the request middleware bin/workflow runs as well.
-    __MT_MIDDLEWARE_LIST__: on ? '[mtMiddleware()]' : '[]',
     __MT_MEMBER_NOUN__: on ? levels.map(function (l) { return l.label.toLowerCase(); }).join(' and ') : 'data (no tenancy: nothing to check)',
 
     // ui/src/main.jsx
@@ -159,27 +118,6 @@ function tenancySubstitutions(levels) {
   };
 }
 
-/** The README's Flows section. */
-function flowsReadme(answers) {
-  var tenancy = answers.tenancy || [];
-  return [
-    '## Flows',
-    '',
-    'Your forms, one after another: what someone fills in on one decides which comes next. Design one in **Configure UI → Flows**, publish it, and people start it from **Flows** in the side rail (or at `/journey/<key>`). The run id joins the address once it starts, so a journey can be reloaded, left, or handed to someone else and opened on the step it is on.',
-    '',
-    'Flows are run by **`@xeplr/workflow`**, which runs **inside this API** — `bin/www` starts it after the screens. Nothing else to start, no port, no setting:',
-    '',
-    '| | |',
-    '|---|---|',
-    '| **Database** | this app\'s own (`DB_API`). Workflow\'s tables (`workflows`, `workflow_steps`, `workflow_runs`…) sit beside the forms\' tables, and it keeps its own record of which of its migrations ran (`workflow_migrations`). Each screen still saves into its own table. |',
-    '| **Tenancy** | ' + (tenancy.length
-      ? 'this app\'s — flows and runs belong to the ' + tenancy.map(function (l) { return l.label.toLowerCase(); }).join(' and ') + ' chosen after signing in, checked by the same membership gate as everything else.'
-      : 'none, like the rest of this app — flows belong to the whole app.') + ' Workflow never creates companies or workspaces of its own. |',
-    '| **Permissions** | each route checks the caller\'s (`List flows`, `Start flow run`, `Publish flow`…), granted to Super Admin, CompanyAdmin, Creator and — read only — Viewer by `@xeplr/workflow`\'s `migrations-auth`, which `XEPLR_AUTH_MIGRATIONS` loads. |',
-    ''
-  ].join('\n');
-}
-
 /** One level's own table: what the picker lists. Its parents' ids in mtIdN. */
 function tenantTableSql(level, i) {
   var parents = i === 0 ? 'none — the outermost level' : i === 1 ? 'mtId1 holds the one above' : 'mtId1–mtId' + i + ' hold the ones above';

package/lib/questions.js

@@ -134,10 +134,6 @@ async function collect(session, argvName) {
     tenancy = tenancyLevels(levelsText);
   }
 
-  // ── flows ─────────────────────────────────────────────────────────────
-  // Nothing to ask: every app has flows, run by @xeplr/workflow inside its own
-  // API and database (see lib/generate's flowsSubstitutions).
-
   // ── the database ──────────────────────────────────────────────────────
   //
   // ASKED, not defaulted, and not left for the reader to do by hand either.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@xeplr/cli",
-  "version": "0.3.1",
+  "version": "0.3.3",
   "description": "Creates a working xeplr application — API, sign-in and UI — from a few answers.",
   "license": "MIT",
   "author": "xeppie <admin@xeplr.com>",

package/templates/CLAUDE.md

@@ -49,7 +49,6 @@ Then change only what the request asks for:
 
 **A list opens its form on a page or in a popup** — `"openIn": "page"` in the entity spec, or Configure UI → Forms → the list. A page needs `onOpenRecord` on the list's page (where to navigate) and `onDone` on the form's page (where Save and Cancel go back to): `Tasks.jsx` and `EditTask.jsx` show both, with routes `/tasks/new` and `/tasks/:id` in `App.jsx`.
 
-__WF_CLAUDE__
 **Keys and labels.** A form's key names its screens and table and never changes once published; its label is the screens' name. A menu item's key (`menus.name`) is what `drawerItems` matches; its label is what the rail shows, renamed in Configure UI → Menu. Code only ever uses keys.
 
 ### The prompt

package/templates/README.md

@@ -21,9 +21,6 @@ cd ui  && npm run dev            # the app           http://localhost:__UI_PORT_
 
 Open http://localhost:__UI_PORT__ and sign in as `__ADMIN_EMAIL__`.
 
-Flows (Xeplr Workflow) run **inside the API** — nothing else to start. To run
-them as their own service instead, see "Where each address goes" below.
-
 ## Where each address goes
 
 The browser only ever calls **paths** on the app's own address — never a port.
@@ -33,39 +30,24 @@ locally (`ui/vite.config.js`, from `ui/.env`), nginx in production.
 | path | served by | local (`ui/.env`) | production (nginx) |
 |---|---|---|---|
 | `/auth/api/…` | the sign-in service | `AUTH_URL` | `127.0.0.1:<AUTH_PORT>` |
-| `/api/workflow/…` | flows — `@xeplr/workflow` | `WORKFLOW_URL`, or `API_URL` when blank | the workflow process, or the API when it runs inside |
 | `/api/…`, `/health`, `/whoami` | the API | `API_URL` | `127.0.0.1:<__PREFIX___PORT>` |
 
-**Workflow on its own port.** Set `WORKFLOW_PORT` in `api/development.env`
-(this app's next free port is __NEXT_PORT__), set `WORKFLOW_URL` in `ui/.env` to
-`http://localhost:__NEXT_PORT__`, and start it beside the API:
-
-```bash
-cd api && npm run start-workflow   # flows            http://localhost:__NEXT_PORT__
-```
-
-Same database, same sign-in, same permissions and the same `/api/workflow/…`
-paths — only the process differs. Leave `WORKFLOW_PORT` blank and it runs inside
-the API again.
-
 ### Production
 
 `api/production.env.example` lists every setting (copy it to
 `api/production.env`, fill in, start with `NODE_ENV=production`). Build the UI
-(`cd ui && npm run build`) and let nginx serve it and route the paths — the
-more specific `/api/workflow/` first:
+(`cd ui && npm run build`) and let nginx serve it and route the paths:
 
 ```nginx
 server {
   server_name app.example.com;
   root /srv/__NAME__/ui/dist;
 
-  location /auth/api/     { proxy_pass http://127.0.0.1:__AUTH_PORT__; }
-  location /api/workflow/ { proxy_pass http://127.0.0.1:__API_PORT__; }   # or WORKFLOW_PORT when it runs on its own
-  location /api/          { proxy_pass http://127.0.0.1:__API_PORT__; }
-  location = /health      { proxy_pass http://127.0.0.1:__API_PORT__; }
-  location = /whoami      { proxy_pass http://127.0.0.1:__API_PORT__; }
-  location /              { try_files $uri /index.html; }   # the React app's own pages
+  location /auth/api/ { proxy_pass http://127.0.0.1:__AUTH_PORT__; }
+  location /api/      { proxy_pass http://127.0.0.1:__API_PORT__; }
+  location = /health  { proxy_pass http://127.0.0.1:__API_PORT__; }
+  location = /whoami  { proxy_pass http://127.0.0.1:__API_PORT__; }
+  location /          { try_files $uri /index.html; }   # the React app's own pages
 }
 ```
 
@@ -84,7 +66,6 @@ Every one of these checks the same sign-in token, so one login covers them all.
 
   > Create a new UI for farming departments. One record is a farming department with: Name (required), Region (dropdown: North, South, East, West), Area in acres (number, at least 0), Started on (date), Notes (long text). Show Name, Region and Area in the list. Follow "Create a new UI" in CLAUDE.md.
 
-__WF_README__
 ## Rules this app follows
 
 | Rule | Why |

package/templates/api/app.js

@@ -13,10 +13,6 @@ var memberGate = __MT_MEMBER_GATE__;
 var port = process.env.__PREFIX___PORT;
 
 module.exports = buildApp;
-// bin/www and bin/workflow hand the same gate to the flows router they start,
-// and bin/workflow runs the same request middleware (tenancy) as this app.
-module.exports.memberGate = memberGate;
-module.exports.middleware = function() { return __MT_MIDDLEWARE_LIST__; };
 
 function buildApp(extraRoutes) {
   return createApp(port, '__NAME___api', {

package/templates/api/bin/www

@@ -76,21 +76,7 @@ async function start() {
   var published = await factory.publishScreens(screens.documents);
   if (published.published.length) console.log('[api] published screens: ' + published.published.join(', '));
 
-  // FLOWS — Xeplr Workflow, inside this API and in this app's own database
-  // (routes/flows.js says why). It creates its tables on first start, keeps its
-  // own migration record, and follows this app's tenancy instead of creating
-  // companies / workspaces of its own.
-  var buildApp = require('../app');
-  // WORKFLOW_PORT set: it runs as its own service (npm run start-workflow),
-  // and this API leaves it alone.
-  if (process.env.WORKFLOW_PORT) {
-    console.log('[api] flows: workflow runs on its own port ' + process.env.WORKFLOW_PORT + ' (npm run start-workflow)');
-    buildApp();
-    return;
-  }
-  require('../routes/flows').mount(await require('../workflow')(buildApp.memberGate));
-
-  buildApp();
+  require('../app')();
 }
 
 start().catch(function(err) {

package/templates/api/development.env.tpl

@@ -42,7 +42,7 @@ AUTH_URL=http://localhost:__AUTH_PORT__
 
 # Sign-in setup files: the screens' permissions (@xeplr/factory's), then this
 # app's own — menu entries and anything else it adds. Comma-separated, in order.
-XEPLR_AUTH_MIGRATIONS=./node_modules/@xeplr/factory/migrations-auth,./migrations-auth__WF_AUTH_MIGRATIONS__
+XEPLR_AUTH_MIGRATIONS=./node_modules/@xeplr/factory/migrations-auth,./migrations-auth
 
 # ── The first account you sign in with ──
 # Created for you when you set up the database. Change the password here and
@@ -63,7 +63,6 @@ AUTH_TENANT_HEADER=none
 AUTH_ACTIVATION_URL=http://localhost:__UI_PORT__/auth/activate
 AUTH_INVITE_URL=http://localhost:__UI_PORT__/auth/accept-invite
 
-__WF_ENV__
 # ── Uploaded files ──
 # Where a form's FILE field puts what people upload. The path is what the
 # record stores; the file itself is served only through the API's own route,

package/templates/api/package.json

@@ -14,8 +14,7 @@
     "migrate:auth": "dotenv -e development.env -- xeplr-auth-migrate up --connection-env AUTH_DB_CONNECTION_INFO_ENCRYPTED",
     "migrate:up": "dotenv -e development.env -- xeplr-migrate up --dir ./migrations --connectionName api --connection-env __PREFIX___CONNECTION",
     "start-auth": "dotenv -e ./development.env -- xeplr-auth-server",
-    "start-api": "node ./bin/www",
-    "start-workflow": "node ./bin/workflow"
+    "start-api": "node ./bin/www"
   },
   "dependencies": {
     "@xeplr/auth": "^1.1.4",
@@ -24,7 +23,6 @@
     "@xeplr/factory": "^1.1.0",
     "@xeplr/ui-factory": "^1.1.0",
     "@xeplr/utils": "^1.0.11",
-    "@xeplr/workflow": "^1.2.0",
     "dotenv": "^17.4.2",
     "express": "^5.2.0",
     "multer": "^2.0.2"

package/templates/api/production.env.example

@@ -1,6 +1,5 @@
 # __NAME__ API — PRODUCTION settings. Copy to production.env on the server
-# and fill in; start with NODE_ENV=production (bin/www and bin/workflow read
-# <NODE_ENV>.env). production.env is never committed (.gitignore).
+# and fill in; start with NODE_ENV=production (bin/www reads <NODE_ENV>.env). production.env is never committed (.gitignore).
 #
 # Every value that is a secret is blank here. Generate new ones for production
 # — never reuse development's.
@@ -11,9 +10,6 @@ LOG_DIR=./logs
 # ── Ports: one per process on this server ──
 __PREFIX___PORT=__API_PORT__
 AUTH_PORT=__AUTH_PORT__
-# Blank: workflow runs inside the API. Set: it runs as its own process
-# (npm run start-workflow) and nginx sends /api/workflow to it.
-WORKFLOW_PORT=
 
 # ── Databases (same server, one login) ──
 ENCRYPTION_KEY=
@@ -27,7 +23,7 @@ REDIS_PREFIX=__NAME__:
 AUTH_JWT_SECRET=
 # Where THIS server reaches the sign-in service (not the public address).
 AUTH_URL=http://127.0.0.1:__AUTH_PORT__
-XEPLR_AUTH_MIGRATIONS=./node_modules/@xeplr/factory/migrations-auth,./migrations-auth,./node_modules/@xeplr/workflow/migrations-auth
+XEPLR_AUTH_MIGRATIONS=./node_modules/@xeplr/factory/migrations-auth,./migrations-auth
 AUTH_SUPER_ADMIN_EMAIL=
 AUTH_SUPER_ADMIN_PASSWORD=
 # none for one set of roles; a multi-tenant app names its company header, e.g. x-company-id

package/templates/api/routes/index.js

@@ -34,9 +34,4 @@ router.get('/whoami', function(req, res) {
 //   var { genericRoute } = require('@xeplr/base-apis');
 //   router.use('/api/things', genericRoute({ key: 'thing', model: require('../models').Thing }));
 
-// Flows: Xeplr Workflow, at /api/workflow — inside this API, or on its
-// own port with WORKFLOW_PORT (see routes/flows.js). The path is the same
-// either way: the browser never knows which.
-router.use('/api/workflow', require('./flows'));
-
 module.exports = router;

package/templates/ui/dotenv.tpl

@@ -6,4 +6,3 @@
 UI_PORT=__UI_PORT__
 AUTH_URL=http://localhost:__AUTH_PORT__
 API_URL=http://localhost:__API_PORT__
-__WF_UI_ENV__

package/templates/ui/package.json

@@ -17,7 +17,6 @@
     "react": "^19.2.4",
     "react-dom": "^19.2.4",
     "react-router-dom": "^7.13.2",
-    "@xeplr/ui-workflow": "^1.2.0",
     "@xeplr/ui-utils": "^1.0.2"
   },
   "devDependencies": {

package/templates/ui/src/App.jsx

@@ -4,9 +4,6 @@ import { authRoutes, authPath, NavPage, ProtectedRoute, useAccess } from '@xeplr
 import Home from './pages/Home.jsx'
 import Tasks from './pages/Tasks.jsx'
 import EditTask from './pages/EditTask.jsx'
-import FlowDesigner from './pages/FlowDesigner.jsx'
-import Journey from './pages/Journey.jsx'
-import FlowsHome from './pages/FlowsHome.jsx'
 import ConfigureUI from './pages/ConfigureUI.jsx'
 import { FORM_MENU_PREFIX } from './menu.js'
 import FormDesigner from './pages/FormDesigner.jsx'
@@ -24,15 +21,6 @@ const TasksIcon = (
   </svg>
 )
 
-const FlowsIcon = (
-  <svg viewBox="0 0 24 24" width="18" height="18" fill="none" stroke="currentColor"
-       strokeWidth="2" strokeLinecap="round" strokeLinejoin="round">
-    <rect x="3" y="3" width="6" height="6" rx="1" />
-    <rect x="15" y="15" width="6" height="6" rx="1" />
-    <path d="M9 6h4a2 2 0 0 1 2 2v7" />
-  </svg>
-)
-
 const FormsIcon = (
   <svg viewBox="0 0 24 24" width="18" height="18" fill="none" stroke="currentColor"
        strokeWidth="2" strokeLinecap="round" strokeLinejoin="round">
@@ -80,8 +68,6 @@ function Shell() {
   const drawerItems = useMemo(() => [
     { key: 'Home', icon: HomeIcon, path: '/home', clickHandler: () => navigate('/home') },
     { key: 'Tasks', icon: TasksIcon, path: '/tasks', clickHandler: () => navigate('/tasks') },
-    // Always in the rail — the page says when Xeplr Workflow is not connected.
-    { key: 'Flows', icon: FlowsIcon, path: '/flows', clickHandler: () => navigate('/flows') },
 __MT_DRAWER_ITEM__
     // Every form added to the menu, with no code: "form:crop" opens /forms/crop.
     ...menus.filter((key) => key.startsWith(FORM_MENU_PREFIX)).map((key) => ({
@@ -129,12 +115,6 @@ __MT_SELECT_ROUTE__
         <Route path="/forms/:form" element={<FormRecords />} />
         <Route path="/configure" element={<ConfigureUI />} />
         <Route path="/configure/forms/:form/design/:part" element={<FormDesigner />} />
-        {/* Flows — run by @xeplr/workflow inside this app's own API. */}
-        <Route path="/flows" element={<FlowsHome />} />
-        <Route path="/configure/flows/:flow" element={<FlowDesigner />} />
-        {/* A journey: its run id joins the address once it starts, so it can be resumed. */}
-        <Route path="/journey/:flow" element={<Journey />} />
-        <Route path="/journey/:flow/:run" element={<Journey />} />
       </Route>
 
       <Route path="*" element={<Navigate to="/auth/login" replace />} />

package/templates/ui/src/index.css

@@ -358,19 +358,3 @@ body { margin: 0; }
 .app-menu-shown { display: inline-flex; gap: 6px; align-items: center; }
 
 .app-menu-settings .app-table { margin-bottom: 14px; }
-
-/* ── Flows, before Workflow is connected (src/pages/Flows.jsx) ─────────────── */
-.app-connect {
-  max-width: 720px;
-  padding: 22px 24px;
-  border: 1px solid var(--xeplr-border-primary);
-  border-radius: 10px;
-  background: var(--xeplr-bg-tertiary);
-  line-height: 1.55;
-}
-.app-connect h2 { margin: 0 0 8px; font-size: 18px; }
-.app-connect p { margin: 0 0 14px; }
-.app-connect-steps { margin: 0 0 14px; padding-left: 20px; }
-.app-connect-steps li { margin-bottom: 14px; }
-.app-connect code { font-size: 12.5px; padding: 1px 5px; border-radius: 4px; background: var(--xeplr-bg-secondary); border: 1px solid var(--xeplr-border-primary); }
-.app-connect pre { margin: 6px 0 0; font-size: 12.5px; }

package/templates/ui/src/menu.js

@@ -11,7 +11,6 @@ export const FORM_MENU_PREFIX = 'form:'
 export const APP_MENU_KEYS = [
   'Home',
   'Tasks',
-  'Flows',
 __MT_MENU_KEY__
   'Admin',
   'Configure UI'

package/templates/ui/src/pages/ConfigureUI.jsx

@@ -6,8 +6,6 @@
 //          countries. Ordinary forms with a flag, gathered in one place because
 //          that is what they are: reference data, not daily work
 //   Menu   the side rail's items: rename, reorder, hide
-//   Flows  forms one after another — what is filled in decides the next; run by
-//          Xeplr Workflow, and says how to connect it until it is
 //
 // Configuration lives here, not in the side rail — the rail is for the pages
 // people use.
@@ -15,12 +13,10 @@ import { useSearchParams } from 'react-router-dom'
 import Forms from './Forms.jsx'
 import Masters from './Masters.jsx'
 import MenuSettings from './MenuSettings.jsx'
-import Flows from './Flows.jsx'
 
 const TABS = [
   { id: 'forms', label: 'Forms', Page: Forms },
   { id: 'masters', label: 'Masters', Page: Masters },
-  { id: 'flows', label: 'Flows', Page: Flows },
   { id: 'menu', label: 'Menu', Page: MenuSettings }
 ]
 

package/templates/ui/vite.config.js

@@ -35,13 +35,7 @@ export default defineConfig(({ mode }) => {
     // Only the real network calls (/auth/api/*), NOT bare /auth — that prefix
     // is also used by client-side routes (/auth/login, /auth/profile), which
     // must fall through to Vite's SPA index.html rather than the auth backend.
-    '/auth/api': authUrl,
-    // A SERVICE THAT MAY RUN ON ITS OWN PORT, before the /api it sits under —
-    // the first matching prefix wins. Blank WORKFLOW_URL: it runs inside the
-    // API, so the API answers. The browser always calls /api/workflow/…; which
-    // process serves it is decided here (and by nginx in production), never in
-    // the UI's code.
-    '/api/workflow': env.WORKFLOW_URL || apiUrl
+    '/auth/api': authUrl
   }
   API_PATHS.forEach((p) => { proxy[p] = apiUrl })
 

package/templates/api/bin/workflow

@@ -1,52 +0,0 @@
-#!/usr/bin/env node
-
-// XEPLR WORKFLOW AS ITS OWN SERVICE — `npm run start-workflow`.
-//
-// Only when WORKFLOW_PORT is set (development.env / production.env). Blank, it
-// runs inside the API instead and this refuses to start, saying so.
-//
-// The SAME workflow as the embedded one (../workflow.js): this app's database,
-// this app's tenancy and membership gate, the same permission checks, and the
-// same path — /api/workflow — so the browser cannot tell the two apart.
-// What routes /api/workflow here: ui/.env WORKFLOW_URL for Vite's dev proxy,
-// nginx in production (README, "Production").
-require('dotenv').config({ path: require('path').join(__dirname, '..', (process.env.NODE_ENV || 'development') + '.env') });
-
-if (!process.env.WORKFLOW_PORT) {
-  console.error('\n[workflow] WORKFLOW_PORT is blank — workflow runs INSIDE the API (npm run start-api).');
-  console.error('  To run it as its own service, set WORKFLOW_PORT in development.env,');
-  console.error('  and WORKFLOW_URL in ui/.env to http://localhost:<that port>.\n');
-  process.exit(1);
-}
-
-require('@xeplr/base-apis').checkEnv(require('../env.required.js'), { appName: 'workflow' });
-
-var express = require('express');
-var createApp = require('@xeplr/base-apis/express');
-
-async function start() {
-  // This app's tenancy levels, registered exactly as the API registers them.
-  await require('../db/setup');
-  var app = require('../app');
-  var workflowRouter = await require('../workflow')(app.memberGate);
-
-  var health = express.Router();
-  health.get('/', function(req, res) { res.json({ status: 'ok', service: 'workflow' }); });
-
-  createApp(process.env.WORKFLOW_PORT, '__NAME___workflow', {
-    // Every route needs a valid token, checked against the same sign-in
-    // service as the API — one login for both.
-    auth: { publicPaths: ['/health'] },
-    log: { logDir: process.env.LOG_DIR || './logs' },
-    middleware: app.middleware(),
-    routes: {
-      '/health': health,
-      '/api/workflow': workflowRouter
-    }
-  });
-}
-
-start().catch(function(err) {
-  console.error('[workflow] startup failed:', err.stack || err.message);
-  process.exit(1);
-});

package/templates/api/migrations-auth/0005_flows_menu.sql

@@ -1,14 +0,0 @@
--- "Flows" — the side-rail item for journeys across the app's forms.
---
--- ALWAYS THERE: flows are run by @xeplr/workflow inside this app's own API,
--- so there is nothing to switch on.
---
--- The name is the KEY: it must match ui/src/App.jsx's drawerItems `key`
--- EXACTLY. What people read is the label, changed in Configure UI → Menu.
--- (0005, not 0004: a multi-tenant app's own 0004 is the switch menu.)
-
-INSERT INTO "menus" (id, name, "menuGroup", "isPublic", "isActive", "mtId1", "recordCreatedDate", "recordModifiedDate")
-SELECT encode(gen_random_bytes(12), 'hex'), 'Flows', '', true, true, '*', now(), now()
-WHERE NOT EXISTS (SELECT 1 FROM "menus" WHERE name = 'Flows');
-
-UPDATE "menus" SET "isPublic" = true WHERE name = 'Flows';

package/templates/api/routes/flows.js

@@ -1,47 +0,0 @@
-// FLOWS — screens one after another, run by Xeplr Workflow (@xeplr/workflow).
-//
-// WHERE IT RUNS. By default INSIDE THIS API, in this app's own database:
-// bin/www starts it (registerWorkflow) after the screens and plugs its flows
-// router in here. With WORKFLOW_PORT set in development.env / production.env it
-// runs as its own service instead (npm run start-workflow → bin/workflow), at
-// the SAME path — /api/workflow/flows — and this route answers 404 so a
-// misrouted request says where it should have gone. The front door routes
-// /api/workflow to it: ui/.env WORKFLOW_URL for Vite, nginx in production.
-//
-//   ONE DATABASE     workflow's tables (workflows, workflow_steps,
-//                    workflow_runs…) sit beside the forms' tables, with their
-//                    own migration record (workflow_migrations).
-//   THIS APP'S       embedded workflow registers no tenancy of its own. Its
-//   TENANCY          rows are filtered by the levels this app registered — or
-//                    none, in an app without tenancy — and the membership gate
-//                    below is the app's own. It never creates companies or
-//                    workspaces tables.
-//   PERMISSIONS      every route checks the caller's permissions ("List flows",
-//                    "Start flow run"…), granted by @xeplr/workflow's
-//                    migrations-auth — in XEPLR_AUTH_MIGRATIONS.
-//
-// Mounted by routes/index.js at /api/workflow, behind this app's auth gate.
-// Everything Workflow serves lives under it:
-//   /api/workflow/flows       the flows people walk through (Journey)
-//   /api/workflow/workflows   the designer's document API
-//   /api/workflow/actions     what a step can DO, for the palette
-var express = require('express');
-
-var router = express.Router();
-var workflow = null;
-
-router.use(function(req, res, next) {
-  if (process.env.WORKFLOW_PORT) {
-    return res.status(404).json({ message: 'Workflow runs on its own port (WORKFLOW_PORT) — route /api/workflow there (ui/.env WORKFLOW_URL, or nginx)' });
-  }
-  // Only before startup has finished — bin/www mounts it before listening.
-  if (!workflow) return res.status(503).json({ message: 'Flows are still starting' });
-  return workflow(req, res, next);
-});
-
-/** bin/www hands over registerWorkflow's router, already gated. */
-router.mount = function(workflowRouter) {
-  workflow = workflowRouter;
-};
-
-module.exports = router;

package/templates/api/workflow.js

@@ -1,34 +0,0 @@
-// FLOWS — how @xeplr/workflow starts, in ONE place, for both ways it runs:
-//
-//   inside the API     bin/www calls this when WORKFLOW_PORT is blank
-//   its own service    bin/workflow (npm run start-workflow) when it is set
-//
-// Either way: this app's own database (its tables beside the forms', with its
-// own migration record), this app's tenancy (it creates no companies or
-// workspaces of its own), and a permission check on every route — granted by
-// @xeplr/workflow's migrations-auth, which XEPLR_AUTH_MIGRATIONS loads.
-var { registerWorkflow } = require('@xeplr/workflow');
-
-/**
- * Runs workflow's migrations and returns its ROUTER — already gated.
- *
- * The whole router, not just the flows facade: it carries `/flows` (the
- * screens a person walks through) AND `/workflows` (the designer's own
- * document API). One designer serves both — @xeplr/ui-workflow's canvas, the
- * same one every xeplr product uses — so the app has to serve what it reads.
- */
-module.exports = async function startWorkflow(memberGate) {
-  var workflow = await registerWorkflow({
-    applicationId: '__NAME__',
-    db: {
-      name: process.env.DB_API,
-      connection: process.env.__PREFIX___CONNECTION,
-      connectionName: 'workflow',
-      migrationsTable: 'workflow_migrations'
-    },
-    tenantTables: false,
-    access: true,
-    mtMembershipGate: memberGate
-  });
-  return workflow.router;
-};

package/templates/ui/src/api/flows.js

@@ -1,8 +0,0 @@
-// Flows are at /api/workflow/flows — served by @xeplr/workflow inside this
-// app's API, or on its own port; the dev proxy (vite.config.js) and nginx
-// decide which, never this file. authFetch carries the same sign-in and
-// company as every other call.
-import { authFetch } from '@xeplr/ui-account'
-import { createFlowsApi } from '@xeplr/ui-factory'
-
-export const flows = createFlowsApi({ fetch: authFetch, base: '/api/workflow' })

package/templates/ui/src/pages/FlowDesigner.jsx

@@ -1,54 +0,0 @@
-// ONE FLOW, ON WORKFLOW'S OWN CANVAS.
-//
-// The designer is a component from @xeplr/ui-workflow — the same one BI and
-// every other xeplr product uses — dropped straight onto this page. It is not
-// a section mounted at URLs of its own: this app already has a page for it,
-// inside its own shell, and the designer renders where it is put.
-//
-// There used to be a second, screens-only builder here (@xeplr/ui-factory's
-// FlowBuilder). One designer over one engine is the point: the trigger box,
-// the condition boxes and the reference pickers are built once, and this app
-// gets them by upgrading a package.
-//
-// THIS APP'S FORMS ARE THE FLOW'S SCREENS. A step can show one and wait for
-// somebody to fill it in, and `useScreenSource` is @xeplr/ui-factory's answer
-// to the two things the designer asks its host: which screens exist (with
-// what each one hands back, so a later step can pick `title` by name) and how
-// to design one without leaving the flow. Two props, because the alternative
-// was the same twenty lines in every app — and a copy in your app could never
-// be fixed once.
-//
-// WHERE THE API IS: /api/workflow, always — the dev proxy (vite.config.js) or
-// nginx decides whether that is this API or Workflow on its own port.
-import { useParams, useNavigate } from 'react-router-dom'
-import { WorkflowDesigner } from '@xeplr/ui-workflow'
-import { useScreenSource, FactoryBuilder } from '@xeplr/ui-factory'
-import { factory } from '../api/factory.js'
-
-export default function FlowDesigner() {
-  const { flow: key } = useParams()
-  const navigate = useNavigate()
-  const { screens, screenEditor } = useScreenSource(factory, { Builder: FactoryBuilder })
-
-  return (
-    <div className="app-designer">
-      <WorkflowDesigner
-        apiBase="/api/workflow"
-        screens={screens}
-        screenEditor={screenEditor}
-        // BY KEY, because that is what this app's URLs carry:
-        // /configure/flows/leave_request. A flow is created on the Flows page
-        // with a key made from its name, and that key is how it is addressed
-        // for the rest of its life — a readable link that survives a rebuild
-        // minting new ids.
-        workflowKey={key === 'new' ? undefined : key}
-        newKind={key === 'new' ? 'workflow' : undefined}
-        // Only reachable from /configure/flows/new, which this app does not
-        // link to — the Flows page creates the flow first, so the designer
-        // always opens on one that exists.
-        onOpened={(saved) => navigate('/configure/flows/' + saved, { replace: true })}
-        onBack={() => navigate('/configure?tab=flows')}
-      />
-    </div>
-  )
-}

package/templates/ui/src/pages/Flows.jsx

@@ -1,125 +0,0 @@
-// CONFIGURE UI → FLOWS — every journey across the app's forms.
-//
-// A flow is what someone is walked through: screens one after another, and
-// whatever has to happen between them. What they fill in on one decides which
-// comes next. Xeplr Workflow runs it, so a journey can be left and picked up
-// later — by someone else, on another day. Design it here; open it at
-// /journey/<key>.
-//
-// A FLOW IS AN ORDINARY WORKFLOW, addressed by a key this page makes from its
-// name. It used to be created as kind 'screens', which is a workflow whose
-// steps are GENERATED from a design held in another app — and that app was
-// the screens-only builder this one replaced. The designer then had to refuse
-// to edit its own flows ("designed in Configure UI"), which is how a flow
-// became a page you could open and not change.
-//
-// So a flow is a workflow now, and every kind of step is available inside it:
-// a Screen for the part a person fills in, an Action for the email that goes
-// out after it, a Condition for where it goes next. Flows created the old way
-// still appear here and still run; the designer shows them read-only.
-import { useEffect, useState } from 'react'
-import { Link, useNavigate } from 'react-router-dom'
-import { listWorkflows, saveWorkflow, configureWorkflowApi } from '@xeplr/ui-workflow'
-
-// The same mount the designer uses. Said here as well because this page can
-// be the first one to ask, and a base set after the first request is too late.
-configureWorkflowApi('/api/workflow')
-
-export default function Flows() {
-  const [list, setList] = useState(null)
-  const [error, setError] = useState(null)
-  const [offline, setOffline] = useState(null)   // API_NOT_RESTARTED
-  const [name, setName] = useState('')
-  const navigate = useNavigate()
-
-  const load = () => listWorkflows().then(setList, (e) => {
-    const off = flowsOffline(e)
-    if (off) setOffline(off)
-    else setError(e.message)
-  })
-  useEffect(() => { load() }, [])
-
-  const create = async (e) => {
-    e.preventDefault()
-    const label = name.trim()
-    if (!label) return
-    const key = label.toLowerCase().replace(/[^a-z0-9]+/g, '_').replace(/^_+|_+$/g, '')
-    try {
-      // No steps: the designer is where those come from, and it opens on the
-      // flow this creates. `key` is what every link to it uses from here on.
-      await saveWorkflow({ name: label, key, kind: 'workflow', status: 'draft' })
-      navigate(`/configure/flows/${key}`)
-    } catch (err) {
-      setError(err.message)
-    }
-  }
-
-  if (offline) return <NotConnected offline={offline} />
-
-  return (
-    <div className="app-forms">
-      <p className="app-page-lead">
-        A flow is your forms, one after another — what someone fills in decides the next one.
-        Xeplr Workflow runs it, so a journey can be left and picked up later.
-      </p>
-      {error && <div className="app-error">{error}</div>}
-
-      <form className="app-forms-new" onSubmit={create}>
-        <label className="app-forms-field">
-          <span>Name</span>
-          <input value={name} onChange={(e) => setName(e.target.value)} placeholder="Employee registration" />
-        </label>
-        <button type="submit" className="app-btn" disabled={!name.trim()}>New flow</button>
-      </form>
-
-      {list && list.length === 0 && <p className="app-sub">No flows yet.</p>}
-      {list && list.length > 0 && (
-        <table className="app-table">
-          <thead><tr><th>Flow</th><th>Key</th><th>Status</th><th>Screens</th><th /></tr></thead>
-          <tbody>
-            {list.map((f) => (
-              <tr key={f.id || f.key}>
-                <td><strong>{f.name}</strong></td>
-                <td className="app-sub">{f.key || '—'}</td>
-                <td>{f.kind === 'screens' ? f.status + ' · read-only' : f.status}</td>
-                <td>{typeof f.steps === 'number' ? f.steps : (f.steps || []).length}</td>
-                <td className="app-row-actions">
-                  {f.key && <Link to={`/configure/flows/${f.key}`}>Design</Link>}
-                  {/* PUBLISHING IS A SCREENS-FLOW IDEA: there, publish is what
-                      checks the design before somebody is walked through it.
-                      A flow drawn in the designer has no such step, so it can
-                      be opened as soon as it has one. */}
-                  {(f.kind === 'screens' ? f.status === 'published' : (f.steps || []).length > 0) && f.key && (
-                    <Link to={`/journey/${f.key}`}>Open</Link>
-                  )}
-                </td>
-              </tr>
-            ))}
-          </tbody>
-        </table>
-      )}
-    </div>
-  )
-}
-
-/**
- * Why flows cannot run right now, or null when the error is something else.
- * Workflow runs inside this app's API, so there is one such case left: an API
- * started before flows existed (404 on /api/flows) — restart it.
- */
-export function flowsOffline(err) {
-  if (err && err.status === 404) return { code: 'API_NOT_RESTARTED', message: 'This app\'s API does not have the flows route yet.' }
-  return null
-}
-
-/** Flows before the API has been restarted with them. */
-export function NotConnected({ offline }) {
-  return (
-    <div className="app-forms">
-      <div className="app-connect">
-        <h2>Restart the API to use flows</h2>
-        <p>{offline.message} It was started before flows were added — restart it, then reload this page.</p>
-      </div>
-    </div>
-  )
-}

package/templates/ui/src/pages/FlowsHome.jsx

@@ -1,65 +0,0 @@
-// FLOWS — the side-rail page: the journeys people can start, one click each.
-//
-// Always in the rail. Flows are run by @xeplr/workflow inside this app's own
-// API, so they are simply there. Designing them is Configure UI → Flows.
-import { useEffect, useState } from 'react'
-import { Link, useNavigate } from 'react-router-dom'
-import { useAccess } from '@xeplr/ui-account'
-import { flows } from '../api/flows.js'
-import { NotConnected, flowsOffline } from './Flows.jsx'
-
-export default function FlowsHome() {
-  const [list, setList] = useState(null)
-  const [error, setError] = useState(null)
-  const [offline, setOffline] = useState(null)
-  const navigate = useNavigate()
-  const { access } = useAccess()
-  // Whoever may open Configure UI may design flows and connect Workflow.
-  const admin = ((access && access.menus) || []).includes('Configure UI')
-
-  useEffect(() => {
-    flows.listFlows().then(setList, (e) => {
-      const off = flowsOffline(e)
-      if (off) setOffline(off)
-      else setError(e.message)
-    })
-  }, [])
-
-  const published = (list || []).filter((f) => f.status === 'published')
-
-  return (
-    <div className="app-page">
-      <h1>Flows</h1>
-      <p className="app-page-lead">
-        Forms one after another — what you fill in on one decides which comes next. A journey you
-        leave is kept, and picks up where it stopped.
-      </p>
-      {offline && <NotConnected offline={offline} />}
-      {error && <div className="app-error">{error}</div>}
-      {list && published.length === 0 && (
-        <p className="app-sub">
-          No flows to start yet.{admin && <> <Link to="/configure?tab=flows">Design one</Link> in Configure UI.</>}
-        </p>
-      )}
-      {published.length > 0 && (
-        <table className="app-table">
-          <thead><tr><th>Flow</th><th>Screens</th><th /></tr></thead>
-          <tbody>
-            {published.map((f) => (
-              <tr key={f.key}>
-                <td><strong>{f.name}</strong></td>
-                <td>{typeof f.steps === 'number' ? f.steps : (f.steps || []).length}</td>
-                <td className="app-row-actions">
-                  <button type="button" className="app-btn" onClick={() => navigate(`/journey/${f.key}`)}>Start</button>
-                </td>
-              </tr>
-            ))}
-          </tbody>
-        </table>
-      )}
-      {admin && list && published.length > 0 && (
-        <p className="app-sub" style={{ marginTop: 16 }}><Link to="/configure?tab=flows">Design flows</Link> in Configure UI.</p>
-      )}
-    </div>
-  )
-}

package/templates/ui/src/pages/Journey.jsx

@@ -1,33 +0,0 @@
-// A FLOW, being walked through — /journey/<key>, and /journey/<key>/<run> once
-// it has started. The run id in the address is what lets a journey be
-// reloaded, left, or handed to someone else and opened on the step it is on.
-//
-// This page holds no route through the journey: Workflow says which screen
-// comes next, from what was filled in.
-import { useNavigate, useParams } from 'react-router-dom'
-import { FlowRunner } from '@xeplr/ui-factory'
-import { flows } from '../api/flows.js'
-import { factory } from '../api/factory.js'
-
-export default function Journey() {
-  const { flow, run } = useParams()
-  const navigate = useNavigate()
-  return (
-    <div className="app-page">
-      <FlowRunner
-        {...flows.runnerProps}
-        {...factory.screenProps}
-        flowKey={flow}
-        runId={run}
-        onStep={(step) => { if (step.runId && step.runId !== run) navigate(`/journey/${flow}/${step.runId}`, { replace: true }) }}
-        renderDone={() => (
-          <div className="app-help">
-            <h2>All done</h2>
-            <p>Everything in this journey is filled in.</p>
-            <button type="button" className="app-btn" onClick={() => navigate(`/journey/${flow}`)}>Start another</button>
-          </div>
-        )}
-      />
-    </div>
-  )
-}