@xera-ai/cli 0.13.1 → 0.15.0

package/dist/index.js

@@ -4,7 +4,7 @@ var __require = import.meta.require;
 // src/index.ts
 import { createRequire as createRequire3 } from "module";
 import { cac } from "cac";
-import pc4 from "picocolors";
+import pc5 from "picocolors";
 
 // src/commands/doctor.ts
 import { existsSync as existsSync6 } from "fs";
@@ -608,9 +608,9 @@ async function doctorCommand(opts) {
 }
 
 // src/commands/init.ts
-import { appendFileSync, existsSync as existsSync7, readdirSync as readdirSync2, readFileSync as readFileSync4, writeFileSync as writeFileSync5 } from "fs";
+import { appendFileSync, existsSync as existsSync8, readdirSync as readdirSync3, readFileSync as readFileSync4, writeFileSync as writeFileSync5 } from "fs";
 import { createRequire } from "module";
-import { join as join7 } from "path";
+import { join as join8 } from "path";
 import * as p from "@clack/prompts";
 import { generateKey } from "@xera-ai/core";
 import pc2 from "picocolors";
@@ -644,6 +644,10 @@ async function resolveEditors(opts) {
   return [...ALL_EDITORS];
 }
 
+// src/samples.ts
+import { copyFileSync, existsSync as existsSync7, mkdirSync as mkdirSync5, readdirSync as readdirSync2, rmSync } from "fs";
+import { join as join7 } from "path";
+
 // src/scaffold.ts
 import { mkdirSync as mkdirSync4, readdirSync, readFileSync as readFileSync3, writeFileSync as writeFileSync4 } from "fs";
 import { dirname as dirname4, join as join6 } from "path";
@@ -669,6 +673,62 @@ function scaffoldFile(targetPath, templateName, vars) {
   mkdirSync4(dirname4(targetPath), { recursive: true });
   writeFileSync4(targetPath, render(tmpl, vars));
 }
+var TEMPLATE_DIR = TEMPLATE_ROOT;
+
+// src/samples.ts
+var SAMPLES_ROOT = join7(TEMPLATE_DIR, "samples");
+var WEB_SAMPLE = {
+  id: "SAMPLE-001",
+  templateDir: join7(SAMPLES_ROOT, "web", "SAMPLE-001")
+};
+var HTTP_SAMPLE = {
+  id: "SAMPLE-HTTP-001",
+  templateDir: join7(SAMPLES_ROOT, "http", "SAMPLE-HTTP-001")
+};
+function samplesForShape(shape) {
+  if (shape === "web")
+    return [WEB_SAMPLE];
+  if (shape === "api")
+    return [HTTP_SAMPLE];
+  return [WEB_SAMPLE, HTTP_SAMPLE];
+}
+function allSamples() {
+  return [WEB_SAMPLE, HTTP_SAMPLE];
+}
+function scaffoldSample(cwd, sample, vars) {
+  const written = [];
+  const skipped = [];
+  const targetDir = join7(cwd, ".xera", sample.id);
+  mkdirSync5(targetDir, { recursive: true });
+  for (const entry of readdirSync2(sample.templateDir)) {
+    const src = join7(sample.templateDir, entry);
+    const isTmpl = entry.endsWith(".tmpl");
+    const outName = isTmpl ? entry.replace(/\.tmpl$/, "") : entry;
+    const dest = join7(targetDir, outName);
+    if (existsSync7(dest)) {
+      skipped.push(dest);
+      continue;
+    }
+    if (isTmpl) {
+      const rel = src.slice(TEMPLATE_DIR.length + 1);
+      scaffoldFile(dest, rel, vars);
+    } else {
+      copyFileSync(src, dest);
+    }
+    written.push(dest);
+  }
+  return { written, skipped };
+}
+function removeSample(cwd, sample) {
+  const dir = join7(cwd, ".xera", sample.id);
+  if (!existsSync7(dir))
+    return false;
+  rmSync(dir, { recursive: true, force: true });
+  return true;
+}
+function detectInstalledSamples(cwd) {
+  return allSamples().filter((s) => existsSync7(join7(cwd, ".xera", s.id)));
+}
 
 // src/commands/init.ts
 var require2 = createRequire(import.meta.url);
@@ -772,26 +832,38 @@ async function initCommand(opts) {
     authKey: generateKey()
   };
   const configTmpl = shape === "web" ? "xera.config.ts.tmpl" : shape === "api" ? "http-xera.config.ts.tmpl" : "mixed-xera.config.ts.tmpl";
-  scaffoldFile(join7(cwd, "xera.config.ts"), configTmpl, vars);
+  scaffoldFile(join8(cwd, "xera.config.ts"), configTmpl, vars);
   const pwTmpl = shape === "api" ? "http-playwright.config.ts.tmpl" : "playwright.config.ts.tmpl";
-  scaffoldFile(join7(cwd, "playwright.config.ts"), pwTmpl, vars);
-  scaffoldFile(join7(cwd, "tsconfig.json"), "tsconfig.json.tmpl", vars);
+  scaffoldFile(join8(cwd, "playwright.config.ts"), pwTmpl, vars);
+  scaffoldFile(join8(cwd, "tsconfig.json"), "tsconfig.json.tmpl", vars);
   if (shape === "api") {
-    scaffoldFile(join7(cwd, ".env.example"), "http-env.example.tmpl", vars);
+    scaffoldFile(join8(cwd, ".env.example"), "http-env.example.tmpl", vars);
   } else {
-    scaffoldFile(join7(cwd, ".env.example"), "env.example.tmpl", vars);
+    scaffoldFile(join8(cwd, ".env.example"), "env.example.tmpl", vars);
   }
   if (wantsWeb || wantsHttp) {
-    scaffoldFile(join7(cwd, "shared/auth-setup.ts"), "auth-setup.ts.tmpl", vars);
+    scaffoldFile(join8(cwd, "shared/auth-setup.ts"), "auth-setup.ts.tmpl", vars);
   }
-  scaffoldFile(join7(cwd, ".github/workflows/xera-graph.yml"), "xera-graph.yml.template", vars);
+  scaffoldFile(join8(cwd, ".github/workflows/xera-graph.yml"), "xera-graph.yml.template", vars);
   if (wantsHttp && vars.openapiPath && !vars.openapiPath.startsWith("http")) {
-    const openapiTarget = join7(cwd, vars.openapiPath);
-    if (!existsSync7(openapiTarget)) {
+    const openapiTarget = join8(cwd, vars.openapiPath);
+    if (!existsSync8(openapiTarget)) {
       scaffoldFile(openapiTarget, "openapi.yaml.tmpl", vars);
     }
   }
-  const gitignorePath = join7(cwd, ".gitignore");
+  if (opts.samples) {
+    const sampleVars = { ...vars, cliVersion: CLI_VERSION };
+    for (const sample of samplesForShape(shape)) {
+      const { written, skipped } = scaffoldSample(cwd, sample, sampleVars);
+      if (written.length > 0) {
+        p.log.success(`scaffolded sample ${sample.id} (${written.length} files)`);
+      }
+      if (skipped.length > 0) {
+        p.log.info(`sample ${sample.id}: skipped ${skipped.length} existing file(s)`);
+      }
+    }
+  }
+  const gitignorePath = join8(cwd, ".gitignore");
   const gitignoreAdditions = [
     "",
     "# xera",
@@ -803,7 +875,7 @@ async function initCommand(opts) {
     "node_modules/"
   ].join(`
 `);
-  if (existsSync7(gitignorePath)) {
+  if (existsSync8(gitignorePath)) {
     const current = readFileSync4(gitignorePath, "utf8");
     if (!current.includes("# xera"))
       appendFileSync(gitignorePath, gitignoreAdditions);
@@ -833,14 +905,14 @@ async function initCommand(opts) {
     }
   });
   const skillsPkgPath = require2.resolve("@xera-ai/skills/package.json");
-  const skillsSrcDir = join7(skillsPkgPath, "..");
+  const skillsSrcDir = join8(skillsPkgPath, "..");
   const SKILL_IGNORE = new Set(["package.json", "version.json", "CHANGELOG.md"]);
-  for (const name of readdirSync2(skillsSrcDir)) {
+  for (const name of readdirSync3(skillsSrcDir)) {
     if (SKILL_IGNORE.has(name))
       continue;
     if (!name.endsWith(".md"))
       continue;
-    const raw = readFileSync4(join7(skillsSrcDir, name), "utf8");
+    const raw = readFileSync4(join8(skillsSrcDir, name), "utf8");
     const { frontmatter, body } = parseFrontmatter(raw);
     const base = name.replace(/\.md$/, "");
     const skillInput = { base, body, frontmatter };
@@ -850,8 +922,8 @@ async function initCommand(opts) {
       adapter.scaffoldCommand?.(cwd, skillInput);
     }
   }
-  const pkgPath = join7(cwd, "package.json");
-  const pkg = existsSync7(pkgPath) ? JSON.parse(readFileSync4(pkgPath, "utf8")) : { name: "xera-project", private: true, type: "module" };
+  const pkgPath = join8(cwd, "package.json");
+  const pkg = existsSync8(pkgPath) ? JSON.parse(readFileSync4(pkgPath, "utf8")) : { name: "xera-project", private: true, type: "module" };
   pkg.scripts = pkg.scripts ?? {};
   pkg.scripts["xera:fetch"] = "xera-internal fetch";
   pkg.scripts["xera:validate-feature"] = "xera-internal validate-feature";
@@ -874,6 +946,8 @@ async function initCommand(opts) {
   pkg.scripts["xera:impact-prepare"] = "xera-internal impact-prepare";
   pkg.scripts["xera:heal-prepare"] = "xera-internal heal-prepare";
   pkg.scripts["xera:disputes"] = "xera-internal disputes";
+  if (wantsHttp)
+    pkg.scripts["xera:openapi-resolve"] = "xera-internal openapi-resolve";
   pkg.scripts["xera:explore-prepare"] = "xera-internal explore-prepare";
   pkg.scripts["xera:explore-finalize"] = "xera-internal explore-finalize";
   pkg.dependencies = pkg.dependencies ?? {};
@@ -924,28 +998,34 @@ Next:
   3) Start testing:
 ${editorLines}
 `;
-  p.note(nextSteps.trim(), "Next steps");
+  const sampleIds = opts.samples ? samplesForShape(shape).map((s) => s.id) : [];
+  const sampleHint = sampleIds.length > 0 ? `
+  Sample ticket(s) scaffolded \u2014 try it out:
+${sampleIds.map((id) => `       /xera-run ${id}`).join(`
+`)}
+  Remove later with: xera samples remove` : "";
+  p.note((nextSteps.trim() + sampleHint).trim(), "Next steps");
   p.outro(pc2.green("xera initialized!"));
 }
 
 // src/commands/init-update.ts
 import {
-  copyFileSync,
-  existsSync as existsSync8,
-  mkdirSync as mkdirSync5,
-  readdirSync as readdirSync3,
+  copyFileSync as copyFileSync2,
+  existsSync as existsSync9,
+  mkdirSync as mkdirSync6,
+  readdirSync as readdirSync4,
   readFileSync as readFileSync5,
   writeFileSync as writeFileSync6
 } from "fs";
 import { createRequire as createRequire2 } from "module";
-import { join as join8 } from "path";
+import { join as join9 } from "path";
 import * as p2 from "@clack/prompts";
 import pc3 from "picocolors";
 var require3 = createRequire2(import.meta.url);
 var CLI_VERSION2 = require3("../package.json").version;
 function detectAdaptersFromConfig(cwd) {
-  const configPath = join8(cwd, "xera.config.ts");
-  if (!existsSync8(configPath))
+  const configPath = join9(cwd, "xera.config.ts");
+  if (!existsSync9(configPath))
     return null;
   const cfg = readFileSync5(configPath, "utf8");
   const m = cfg.match(/adapters:\s*\[([^\]]+)\]/);
@@ -1024,8 +1104,8 @@ export const web = defineAuthSetup(async (page, _role, creds) => {
 async function initUpdateCommand(opts) {
   const cwd = process.cwd();
   p2.intro(pc3.cyan("xera init --update"));
-  const pkgPath = join8(cwd, "package.json");
-  if (!existsSync8(pkgPath)) {
+  const pkgPath = join9(cwd, "package.json");
+  if (!existsSync9(pkgPath)) {
     p2.cancel("No package.json found \u2014 run `xera init` first.");
     process.exit(1);
   }
@@ -1049,13 +1129,16 @@ async function initUpdateCommand(opts) {
   pkg.scripts["xera:impact-prepare"] = "xera-internal impact-prepare";
   pkg.scripts["xera:heal-prepare"] = "xera-internal heal-prepare";
   pkg.scripts["xera:disputes"] = "xera-internal disputes";
+  if (pkg.dependencies["@xera-ai/http"]) {
+    pkg.scripts["xera:openapi-resolve"] = "xera-internal openapi-resolve";
+  }
   writeFileSync6(pkgPath, JSON.stringify(pkg, null, 2));
-  const wfDir = join8(cwd, ".github/workflows");
-  mkdirSync5(wfDir, { recursive: true });
+  const wfDir = join9(cwd, ".github/workflows");
+  mkdirSync6(wfDir, { recursive: true });
   try {
     const cliPkgPath = require3.resolve("@xera-ai/cli/package.json");
-    const cliTplPath = join8(cliPkgPath, "..", "templates/xera-graph.yml.template");
-    copyFileSync(cliTplPath, join8(wfDir, "xera-graph.yml"));
+    const cliTplPath = join9(cliPkgPath, "..", "templates/xera-graph.yml.template");
+    copyFileSync2(cliTplPath, join9(wfDir, "xera-graph.yml"));
     p2.log.info("scaffolded .github/workflows/xera-graph.yml");
   } catch (_e) {
     p2.log.warn("skipped xera-graph.yml scaffold (re-run `xera init` to create it)");
@@ -1070,14 +1153,14 @@ async function initUpdateCommand(opts) {
     p2.log.warn("No editor integration detected in this project. Pass --editor claude|cursor|codex|all to add one.");
   } else {
     const skillsSrc = require3.resolve("@xera-ai/skills/package.json");
-    const newSkillsDir = join8(skillsSrc, "..");
+    const newSkillsDir = join9(skillsSrc, "..");
     const SKILL_IGNORE = new Set(["package.json", "version.json", "CHANGELOG.md"]);
-    for (const name of readdirSync3(newSkillsDir)) {
+    for (const name of readdirSync4(newSkillsDir)) {
       if (SKILL_IGNORE.has(name))
         continue;
       if (!name.endsWith(".md"))
         continue;
-      const rawNew = readFileSync5(join8(newSkillsDir, name), "utf8");
+      const rawNew = readFileSync5(join9(newSkillsDir, name), "utf8");
       const { frontmatter, body } = parseFrontmatter(rawNew);
       const base = name.replace(/\.md$/, "");
       const skillInput = { base, body, frontmatter };
@@ -1140,12 +1223,67 @@ async function initUpdateCommand(opts) {
   p2.outro(pc3.green("Update complete. Run `xera doctor` to verify."));
 }
 
+// src/commands/samples.ts
+import * as p3 from "@clack/prompts";
+import pc4 from "picocolors";
+async function samplesRemoveCommand(opts) {
+  const cwd = process.cwd();
+  p3.intro(pc4.cyan("xera samples remove"));
+  const installed = detectInstalledSamples(cwd);
+  if (installed.length === 0) {
+    p3.log.info("No sample tickets found in .xera/");
+    p3.outro(pc4.dim("nothing to do"));
+    return 0;
+  }
+  let toRemove;
+  if (opts.yes) {
+    toRemove = installed;
+  } else if (installed.length === 1) {
+    const ok = await p3.confirm({
+      message: `Remove .xera/${installed[0].id}/?`,
+      initialValue: true
+    });
+    if (typeof ok === "symbol" || !ok) {
+      p3.cancel("Aborted.");
+      return 0;
+    }
+    toRemove = installed;
+  } else {
+    const all = allSamples();
+    const choice = await p3.multiselect({
+      message: "Which sample(s) to remove?",
+      options: installed.map((s) => ({
+        value: s.id,
+        label: `.xera/${s.id}/`
+      })),
+      initialValues: all.map((s) => s.id),
+      required: true
+    });
+    if (typeof choice === "symbol") {
+      p3.cancel("Aborted.");
+      return 0;
+    }
+    const set = new Set(choice);
+    toRemove = installed.filter((s) => set.has(s.id));
+  }
+  let removed = 0;
+  for (const s of toRemove) {
+    const ok = removeSample(cwd, s);
+    if (ok) {
+      p3.log.success(`removed .xera/${s.id}/`);
+      removed++;
+    }
+  }
+  p3.outro(pc4.green(`removed ${removed} sample(s)`));
+  return 0;
+}
+
 // src/index.ts
 var require4 = createRequire3(import.meta.url);
 var VERSION = require4("../package.json").version;
 var VALID_SHAPES = ["web", "api", "mixed"];
 var VALID_AUTH_STRATEGIES = ["bearer", "apiKey", "basic", "oauth-cc", "none"];
-var KNOWN_COMMANDS = ["init", "doctor"];
+var KNOWN_COMMANDS = ["init", "doctor", "samples"];
 function levenshtein(a, b) {
   const m = a.length;
   const n = b.length;
@@ -1170,15 +1308,15 @@ function didYouMean(input) {
   return bestDist <= 3 ? best : undefined;
 }
 function unknownCommand(input) {
-  console.error(pc4.red(`
+  console.error(pc5.red(`
   error: Unknown command '${input}'
 `));
   const suggestion = didYouMean(input);
   if (suggestion) {
-    console.error(`  Did you mean ${pc4.cyan(suggestion)}?
+    console.error(`  Did you mean ${pc5.cyan(suggestion)}?
 `);
   }
-  console.error(`  Run ${pc4.cyan("xera --help")} to see available commands.
+  console.error(`  Run ${pc5.cyan("xera --help")} to see available commands.
 `);
   process.exit(1);
 }
@@ -1187,12 +1325,12 @@ async function main() {
   cli.help();
   cli.version(VERSION);
   cli.usage("<command> [options]");
-  cli.command("init", "Scaffold a new xera project in the current directory").option("--update", "Non-destructive refresh of an existing project").option("-y, --yes", "Accept all defaults (non-interactive)").option("--shape <shape>", "Project shape: web | api | mixed").option("--editor <list>", 'Editor(s) to scaffold: claude,cursor,codex or "all" (default: auto-detect or all)').option("--ju, --jira-base-url <url>", "Jira workspace URL").option("--pk, --project-keys <keys>", "Jira project key(s), comma-separated").option("--sf, --story-field <field>", "Jira field id for user story (default: description)").option("--ac, --ac-field <field>", "Jira field id for acceptance criteria").option("--su, --staging-url <url>", "Web app staging URL").option("--auth-enabled", "App requires login to test most pages").option("--no-auth-enabled", "App does not require login").option("--ro, --roles <roles>", "Test user roles, comma-separated (default: admin,regular)").option("--au, --api-base-url <url>", "API base URL").option("--op, --openapi-path <path>", "OpenAPI spec path or URL").option("--as, --auth-strategy <strategy>", `API auth strategy: ${VALID_AUTH_STRATEGIES.join(" | ")}`).option("--hr, --http-roles <roles>", "HTTP test roles, comma-separated (default: user)").example("xera init").example("xera init -y --shape web").example("xera init -y --shape web --editor claude,cursor").example("xera init -y --shape api --pk MYPROJ --ju https://myco.atlassian.net --au https://api.staging.example.com --as bearer").example("xera init -y --shape mixed --pk PROJ --ju https://myco.atlassian.net --su https://staging.example.com --au https://api.staging.example.com").action(async (opts) => {
+  cli.command("init", "Scaffold a new xera project in the current directory").option("--update", "Non-destructive refresh of an existing project").option("-y, --yes", "Accept all defaults (non-interactive)").option("--shape <shape>", "Project shape: web | api | mixed").option("--editor <list>", 'Editor(s) to scaffold: claude,cursor,codex or "all" (default: auto-detect or all)').option("--ju, --jira-base-url <url>", "Jira workspace URL").option("--pk, --project-keys <keys>", "Jira project key(s), comma-separated").option("--sf, --story-field <field>", "Jira field id for user story (default: description)").option("--ac, --ac-field <field>", "Jira field id for acceptance criteria").option("--su, --staging-url <url>", "Web app staging URL").option("--auth-enabled", "App requires login to test most pages").option("--no-auth-enabled", "App does not require login").option("--ro, --roles <roles>", "Test user roles, comma-separated (default: admin,regular)").option("--au, --api-base-url <url>", "API base URL").option("--op, --openapi-path <path>", "OpenAPI spec path or URL").option("--as, --auth-strategy <strategy>", `API auth strategy: ${VALID_AUTH_STRATEGIES.join(" | ")}`).option("--hr, --http-roles <roles>", "HTTP test roles, comma-separated (default: user)").option("--samples", "Scaffold sample ticket(s) under .xera/SAMPLE-001/ (web) or .xera/SAMPLE-HTTP-001/ (api) so /xera-run works out of the box").example("xera init").example("xera init -y --shape web").example("xera init -y --shape web --editor claude,cursor").example("xera init -y --shape api --pk MYPROJ --ju https://myco.atlassian.net --au https://api.staging.example.com --as bearer").example("xera init -y --shape mixed --pk PROJ --ju https://myco.atlassian.net --su https://staging.example.com --au https://api.staging.example.com").action(async (opts) => {
     if (opts.update) {
       const updateOpts = { yes: !!opts.yes };
       if (opts.shape !== undefined) {
         if (!VALID_SHAPES.includes(opts.shape)) {
-          console.error(pc4.red(`
+          console.error(pc5.red(`
   error: --shape must be one of: ${VALID_SHAPES.join(", ")}
 `));
           process.exit(1);
@@ -1201,7 +1339,7 @@ async function main() {
       }
       if (opts.authStrategy !== undefined) {
         if (!VALID_AUTH_STRATEGIES.includes(opts.authStrategy)) {
-          console.error(pc4.red(`
+          console.error(pc5.red(`
   error: --auth-strategy must be one of: ${VALID_AUTH_STRATEGIES.join(", ")}
 `));
           process.exit(1);
@@ -1228,7 +1366,7 @@ async function main() {
     const initOpts = { yes: !!opts.yes };
     if (opts.shape !== undefined) {
       if (!VALID_SHAPES.includes(opts.shape)) {
-        console.error(pc4.red(`
+        console.error(pc5.red(`
   error: --shape must be one of: ${VALID_SHAPES.join(", ")}
 `));
         process.exit(1);
@@ -1237,7 +1375,7 @@ async function main() {
     }
     if (opts.authStrategy !== undefined) {
       if (!VALID_AUTH_STRATEGIES.includes(opts.authStrategy)) {
-        console.error(pc4.red(`
+        console.error(pc5.red(`
   error: --auth-strategy must be one of: ${VALID_AUTH_STRATEGIES.join(", ")}
 `));
         process.exit(1);
@@ -1266,8 +1404,14 @@ async function main() {
       initOpts.httpRoles = opts.httpRoles;
     if (opts.editor !== undefined)
       initOpts.editor = opts.editor;
+    if (opts.samples !== undefined)
+      initOpts.samples = opts.samples;
     await initCommand(initOpts);
   });
+  cli.command("samples remove", "Remove scaffolded sample tickets from .xera/").option("-y, --yes", "Skip confirmation; remove all installed samples").action(async (opts) => {
+    const exit = await samplesRemoveCommand({ yes: !!opts.yes });
+    process.exit(exit);
+  });
   cli.command("doctor", "Run a health check").option("--strict <ticket>", "Treat ticket-specific checks as required").option("--logs <ticket>", "Pretty-print xera.log for a ticket").option("--usage", "Show token/usage summary from recent runs").action(async (opts) => {
     const exit = await doctorCommand(opts);
     process.exit(exit);
@@ -1285,7 +1429,7 @@ async function main() {
     cli.parse(process.argv, { run: false });
     await cli.runMatchedCommand();
   } catch (e) {
-    console.error(pc4.red(`
+    console.error(pc5.red(`
   error: ${e.message}
 `));
     process.exit(1);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@xera-ai/cli",
-  "version": "0.13.1",
+  "version": "0.15.0",
   "type": "module",
   "bin": {
     "xera": "./bin/xera"
@@ -15,8 +15,8 @@
     "typecheck": "tsc --noEmit"
   },
   "dependencies": {
-    "@xera-ai/core": "^0.13.1",
-    "@xera-ai/skills": "^0.13.1",
+    "@xera-ai/core": "^0.15.0",
+    "@xera-ai/skills": "^0.15.0",
     "@clack/prompts": "1.4.0",
     "cac": "7.0.0",
     "picocolors": "1.1.1",

package/templates/samples/http/SAMPLE-HTTP-001/meta.json.tmpl

@@ -0,0 +1,7 @@
+{
+  "ticket": "SAMPLE-HTTP-001",
+  "adapter": "http",
+  "source": "local",
+  "xera_version": "{{cliVersion}}",
+  "prompts_version": "{{cliVersion}}"
+}

package/templates/samples/http/SAMPLE-HTTP-001/story.md

@@ -0,0 +1,38 @@
+# SAMPLE-HTTP-001 — Create user via API
+
+## Background
+
+A first-touch sample ticket for HTTP API testing scaffolded by
+`xera init --samples`. Use it to learn the API pipeline end-to-end without a
+Jira ticket. If `http.spec` is configured, `/xera-script` will use the
+OpenAPI schema to inform body shape + assertions.
+
+## User story
+
+As an API consumer with a bearer token
+I want to POST /users with a JSON body
+So that a new user is created with a stable id.
+
+## Acceptance criteria
+
+- Given I have a valid bearer token for the `user` role
+- When I POST `/users` with `{ name: "Alice", email: "alice@example.com" }`
+- Then the response status is `201`
+- And the response body has a non-empty `id` string
+- And the response body's `email` equals the email I sent
+
+- Given I have a valid bearer token
+- When I POST `/users` with `{ email: "missing-name@example.com" }` (no name)
+- Then the response status is `422`
+- And the response body has an `errors` array
+
+- Given I have an expired or invalid token
+- When I POST `/users` with any body
+- Then the response status is `401`
+
+## Notes
+
+- `meta.json.source` is `"local"`, so `/xera-run SAMPLE-HTTP-001` will NOT post to Jira.
+- Use `process.env.XERA_RUN_ID` in emails to keep test runs isolated, e.g.
+  `email: \`alice-${process.env.XERA_RUN_ID}@example.com\``.
+- Remove the sample later with `xera samples remove`.

package/templates/samples/http/SAMPLE-HTTP-001/test.feature

@@ -0,0 +1,20 @@
+Feature: SAMPLE-HTTP-001 — Create user via API
+
+  Background:
+    Given I am authenticated as the "user" role
+
+  Scenario: Valid payload creates a user
+    When I POST "/users" with a name and email
+    Then the response status is 201
+    And the response body has a non-empty "id"
+    And the response body "email" equals the sent email
+
+  Scenario: Missing name returns 422 with errors
+    When I POST "/users" with only an email
+    Then the response status is 422
+    And the response body has an "errors" array
+
+  Scenario: Expired token returns 401
+    Given my token is expired
+    When I POST "/users" with a name and email
+    Then the response status is 401

package/templates/samples/web/SAMPLE-001/meta.json.tmpl

@@ -0,0 +1,7 @@
+{
+  "ticket": "SAMPLE-001",
+  "adapter": "web",
+  "source": "local",
+  "xera_version": "{{cliVersion}}",
+  "prompts_version": "{{cliVersion}}"
+}

package/templates/samples/web/SAMPLE-001/story.md

@@ -0,0 +1,29 @@
+# SAMPLE-001 — User signs in to the dashboard
+
+## Background
+
+A first-touch sample ticket scaffolded by `xera init --samples`. Use it to learn
+the pipeline end-to-end without needing a Jira ticket.
+
+## User story
+
+As a registered user
+I want to sign in with my email and password
+So that I can access my dashboard.
+
+## Acceptance criteria
+
+- Given I am on the login page
+- When I enter a valid email and password and click "Sign in"
+- Then I am redirected to `/dashboard`
+- And I see my name in the top-right header
+
+- Given I am on the login page
+- When I enter an incorrect password
+- Then I see the error "Invalid email or password"
+- And I remain on the login page
+
+## Notes
+
+- `meta.json.source` is `"local"`, so `/xera-run SAMPLE-001` will NOT post to Jira.
+- Remove the sample later with `xera samples remove`.

package/templates/samples/web/SAMPLE-001/test.feature

@@ -0,0 +1,16 @@
+Feature: SAMPLE-001 — Sign in flow
+
+  Background:
+    Given I am on the login page
+
+  Scenario: Valid credentials redirect to dashboard
+    When I enter a valid email and password
+    And I click "Sign in"
+    Then I am redirected to "/dashboard"
+    And I see my display name in the header
+
+  Scenario: Invalid password shows an inline error
+    When I enter a valid email and an invalid password
+    And I click "Sign in"
+    Then I see the error "Invalid email or password"
+    And I remain on the login page