@zitadel/cli 0.1.0-alpha.14 → 0.1.0-alpha.16

package/dist/{orca-CpXj_XsA.mjs → orca-_TmrJQMw.mjs}

@@ -1,6 +1,7 @@
-import { C as isObject, E as ZitadelError, T as stableStringify, n as DEFAULT_SERVER, w as parseJsonObject, x as MANAGED_MARKER, y as npmDistTagForCliVersion } from "./oclif-Bm-FkF6z.mjs";
+import { C as isObject, E as ZitadelError, T as stableStringify, b as publicCliCommand, n as DEFAULT_SERVER, w as parseJsonObject, x as MANAGED_MARKER, y as npmDistTagForCliVersion } from "./oclif-SjHLB_XK.mjs";
 import { chmod, mkdir, readFile, readdir, rename, rm, stat, writeFile } from "node:fs/promises";
 import { basename, dirname, join } from "node:path";
+import { META_SCHEMA_DIR, metaSchemaFiles } from "@zitadel/config/meta-schemas";
 import { builders, generateCode, parseModule } from "magicast";
 import { spawnSync } from "node:child_process";
 //#region src/lib/orca/detectors/package-json.ts
@@ -551,6 +552,94 @@ function deepMerge(target, patch) {
 	return out;
 }
 //#endregion
+//#region src/lib/orca/patchers/rule/guidance.ts
+/**
+* Scaffolded guidance for humans (`README.md`) and agents (`AGENTS.md`):
+* the golden journey from a fresh scaffold to a customized, published
+* login — so the project explains its own next step without the docs
+* site. Both files are edited via a marker-fenced managed section, so
+* setup never clobbers what a developer (or another tool) wrote and a
+* rerun replaces only its own section.
+*/
+const MARKER_BEGIN = "<!-- zitadel:guidance:begin -->";
+const MARKER_END = "<!-- zitadel:guidance:end -->";
+/**
+* Insert or replace the managed guidance section in `source`. A missing
+* file becomes `header` + section; an existing section (marker pair) is
+* replaced in place; anything else gets the section appended. Pure and
+* idempotent — the file-writer skips the write when output equals input.
+*/
+function upsertGuidanceSection(source, section, header) {
+	const block = `${MARKER_BEGIN}\n${section}\n${MARKER_END}\n`;
+	if (source === void 0 || source.trim() === "") return `${header}${block}`;
+	const begin = source.indexOf(MARKER_BEGIN);
+	const end = source.indexOf(MARKER_END);
+	if (begin !== -1 && end > begin) return `${source.slice(0, begin)}${block}${source.slice(end + 29).replace(/^\n/, "")}`;
+	return `${source.replace(/\n*$/, "\n\n")}${block}`;
+}
+/**
+* Remove the managed guidance section (markers inclusive) from `source` —
+* the inverse of {@link upsertGuidanceSection}, for `eject`. Content outside
+* the markers is preserved byte-for-byte; a missing or malformed marker pair
+* returns `source` unchanged.
+*/
+function removeGuidanceSection(source) {
+	const begin = source.indexOf(MARKER_BEGIN);
+	const end = source.indexOf(MARKER_END);
+	if (begin === -1 || end <= begin) return source;
+	return `${source.slice(0, begin)}${source.slice(end + 29).replace(/^\n/, "")}`;
+}
+/** The agent-facing golden path, written into `AGENTS.md`. */
+function agentsGuidanceSection(ctx) {
+	const plan = publicCliCommand("plan", ctx.cliVersion);
+	const apply = publicCliCommand("apply", ctx.cliVersion);
+	const passkeyVerifyNote = ctx.preset === "passkey-first" ? " Agents: automated browsers can't complete passkey ceremonies — verify the loop via the email/password fallback actions, or attach a CDP WebAuthn virtual authenticator." : "";
+	return `## Authentication (Zitadel)
+
+This app's login is managed by Zitadel. Local config is the source of truth; never change auth behavior by editing generated route files.
+
+The golden path:
+
+1. Start the dev server and open ${ctx.issuer}/login — **exactly this origin, not 127.0.0.1**. Passkeys and the origin allowlist are bound to it. (Freshly scaffolded apps also redirect / there; pre-existing apps keep their homepage.)
+2. Prove the loop in a real browser: register a user → sign out → sign in → /profile shows signed in.${passkeyVerifyNote}
+3. Customize by editing local config:
+   - \`.zitadel/schemas/*.json\` — what a user is (fields, required, auth methods). See \`.zitadel/schemas/README.md\`.
+   - \`.zitadel/flows/*.json\` — which screen collects which field/credential and how steps transition. See \`.zitadel/flows/README.md\`.
+4. Preview, then publish:
+   - \`${plan}\`
+   - \`${apply}\`
+   - Agents: append \`--non-interactive --json\` to both. \`plan\` validates flow invariants with the server's own rules **before** anything uploads — fix what it reports and re-run.
+
+Machine-readable dialect (read these before authoring flow or schema edits):
+
+- Flow files carry \`"$schema": "../meta/flow-definition.json"\` — the flow dialect spec (steps, actions and their kinds, transitions, reserved outcomes like \`user_not_found\`). Editors validate against it.
+- \`.zitadel/meta/user-schema.json\` (with its companions \`user-property.json\`, \`auth-methods.json\`, \`auth-method.json\`) specifies the user-schema dialect (\`x-auth-methods\`, \`x-unique\`, property constraints).
+- Worked flow examples: https://github.com/zitadel/nextgen/tree/main/api/openapi/endpoints/flow_definitions/examples
+
+Never edit \`.zitadel/state.json\` (sync bookkeeping) or \`.zitadel/secret\` (credentials, git-ignored). Keep \`.zitadel/local/\` out of source control.`;
+}
+/** The human-facing summary appended to the app `README.md`. */
+function readmeGuidanceSection(ctx) {
+	const plan = publicCliCommand("plan", ctx.cliVersion);
+	const apply = publicCliCommand("apply", ctx.cliVersion);
+	return `## Authentication (Zitadel)
+
+Login for this app is managed by [Zitadel](https://zitadel.com). Try it: start the dev server, open ${ctx.issuer}/login (use this exact origin — passkeys are bound to it), register a user, sign out, and sign in again.
+
+To change what the login collects or how sign-in works, edit the files under \`.zitadel/schemas/\` and \`.zitadel/flows/\` (each folder has a README), then:
+
+\`\`\`sh
+${plan}
+${apply}
+\`\`\``;
+}
+/** Full-file header used when `AGENTS.md` does not exist yet. */
+const AGENTS_HEADER = `# AGENTS.md
+
+Guidance for AI agents working in this repository.
+
+`;
+//#endregion
 //#region src/lib/orca/patchers/rule/reclaim.ts
 /**
 * The subset of a patcher plan's operations that `doctor --fix` re-applies:
@@ -605,7 +694,8 @@ var AbstractRulePatcher = class {
 			directories: [".zitadel"],
 			envBackups: [".env.local"],
 			dependencies: this.routeDeps(view),
-			configEdits: this.routeConfigEdits(view)
+			configEdits: this.routeConfigEdits(view),
+			guidanceFiles: ["AGENTS.md", "README.md"]
 		};
 	}
 	/**
@@ -705,6 +795,25 @@ var AbstractRulePatcher = class {
 					framework: ctx.framework.id,
 					resources: {}
 				})}\n`
+			},
+			{
+				kind: "mkdir",
+				path: META_SCHEMA_DIR
+			},
+			...metaSchemaFiles().map((file) => ({
+				kind: "write",
+				path: `${META_SCHEMA_DIR}/${file.name}`,
+				contents: `${JSON.stringify(file.body, null, 2)}\n`
+			})),
+			{
+				kind: "edit",
+				path: "AGENTS.md",
+				edit: (source) => upsertGuidanceSection(source, agentsGuidanceSection(ctx), AGENTS_HEADER)
+			},
+			{
+				kind: "edit",
+				path: "README.md",
+				edit: (source) => upsertGuidanceSection(source, readmeGuidanceSection(ctx), "")
 			}
 		];
 	}
@@ -722,7 +831,8 @@ function projectConfig(ctx) {
 			renderer: ctx.rendererId,
 			attribution: "visible"
 		},
-		environments
+		environments,
+		...ctx.preset === void 0 ? {} : { preset: ctx.preset }
 	};
 }
 /** Normalizes a server URL to its origin, falling back to {@link DEFAULT_SERVER}. */
@@ -930,7 +1040,7 @@ const PROXY_PATH = "/__nextgen";
 */
 function appComponentTemplate(projectId) {
 	return `${MANAGED_MARKER}
-import { Component } from "@angular/core";
+import { Component, OnInit } from "@angular/core";
 import {
   ZitadelLoginComponent,
   ZitadelSessionComponent,
@@ -943,12 +1053,18 @@ import {
   imports: [ZitadelLoginComponent, ZitadelSessionComponent],
   templateUrl: "./app.html",
 })
-export class App {
+export class App implements OnInit {
   protected readonly project = configureZitadel({
     projectId: ${JSON.stringify(projectId)},
     proxyPath: "${PROXY_PATH}",
   });
   protected readonly path = window.location.pathname;
+
+  ngOnInit(): void {
+    if (this.path === "/") {
+      window.location.replace("/login");
+    }
+  }
 }
 `;
 }
@@ -958,19 +1074,7 @@ export class App {
 */
 function appTemplateHtml() {
 	return `<!-- ${MANAGED_MARKER} -->
-@if (path === '/') {
-  <main style="position:fixed;inset:0;padding:48px;box-sizing:border-box;display:flex;align-items:center;justify-content:center;background:#0f0f11;color-scheme:dark;color:#f4f4f6;font-family:system-ui,-apple-system,'Segoe UI',Roboto,Helvetica,Arial,sans-serif;line-height:1.5;letter-spacing:normal;text-align:center">
-    <section style="width:100%;max-width:560px">
-      <p style="margin:0 0 12px;color:#9ca3af;font-size:14px">Zitadel auth</p>
-      <h1 style="margin:0 0 24px;font-size:32px;line-height:1.15;font-weight:600;color:#f4f4f6">Sign in, create an account, or open your profile.</h1>
-      <div style="display:flex;flex-wrap:wrap;gap:12px;justify-content:center">
-        <a href="/login" style="padding:10px 16px;border-radius:8px;background:#f4f4f6;color:#0f0f11;text-decoration:none;font-weight:600;font-size:14px">Sign in</a>
-        <a href="/register" style="padding:10px 16px;border-radius:8px;border:1px solid #3f3f46;color:#f4f4f6;text-decoration:none;font-weight:600;font-size:14px">Create account</a>
-        <a href="/profile" style="padding:10px 16px;border-radius:8px;border:1px solid #3f3f46;color:#f4f4f6;text-decoration:none;font-weight:600;font-size:14px">Profile</a>
-      </div>
-    </section>
-  </main>
-} @else if (path.startsWith('/profile')) {
+@if (path.startsWith('/profile')) {
   <div style="position:fixed;inset:0;overflow:auto;background:#0f0f11;color-scheme:dark">
     <zitadel-auth-session
       [project]="project"
@@ -1257,7 +1361,6 @@ const reactRenderer = {
 "use client";
 
 import dynamic from "next/dynamic";
-import Link from "next/link";
 
 const ${elementName} = dynamic(
   async () => {
@@ -1286,12 +1389,7 @@ const ${elementName} = dynamic(
 
 export default function ${componentName}() {
   return (
-    <main style={{ minHeight: "100vh", position: "relative", colorScheme: "dark", background: "#0f0f11" }}>
-      <nav aria-label="Authentication" style={{ position: "absolute", top: "24px", right: "24px", zIndex: 1, display: "flex", gap: "12px" }}>
-        <Link href="${mode === "login" ? "/register" : "/login"}" style={{ color: "#f4f4f6", fontWeight: 700, textDecoration: "none" }}>
-          ${mode === "login" ? "Create account" : "Sign in"}
-        </Link>
-      </nav>
+    <main style={{ minHeight: "100vh", colorScheme: "dark", background: "#0f0f11" }}>
       <${elementName} />
     </main>
   );
@@ -1349,6 +1447,7 @@ declare module "react" {
         "session-exchange-path"?: string;
         "post-sign-in-url"?: string;
         purpose?: string;
+        "flow-name"?: string;
       };
       "zitadel-logout": React.HTMLAttributes<HTMLElement> & {
         project?: ZitadelProject;
@@ -1538,28 +1637,10 @@ function nextCodeOps(ctx, renderer) {
 }
 function homePageTemplate() {
 	return `${MANAGED_MARKER}
-import Link from "next/link";
+import { redirect } from "next/navigation";
 
 export default function Home() {
-  return (
-    <main style={{ position: "fixed", inset: 0, padding: "48px", boxSizing: "border-box", display: "flex", alignItems: "center", justifyContent: "center", background: "#0f0f11", colorScheme: "dark", color: "#f4f4f6", fontFamily: "system-ui, -apple-system, 'Segoe UI', Roboto, Helvetica, Arial, sans-serif", lineHeight: 1.5, letterSpacing: "normal", textAlign: "center" }}>
-      <section style={{ width: "100%", maxWidth: "560px" }}>
-        <p style={{ margin: "0 0 12px", color: "#9ca3af", fontSize: "14px" }}>Zitadel auth</p>
-        <h1 style={{ margin: "0 0 24px", fontSize: "32px", lineHeight: 1.15, fontWeight: 600, color: "#f4f4f6" }}>Sign in, create an account, or open your profile.</h1>
-        <div style={{ display: "flex", flexWrap: "wrap", gap: "12px" }}>
-          <Link href="/login" style={{ padding: "10px 16px", borderRadius: "8px", background: "#f4f4f6", color: "#0f0f11", textDecoration: "none", fontWeight: 600, fontSize: "14px" }}>
-            Sign in
-          </Link>
-          <Link href="/register" style={{ padding: "10px 16px", borderRadius: "8px", border: "1px solid #3f3f46", color: "#f4f4f6", textDecoration: "none", fontWeight: 600, fontSize: "14px" }}>
-            Create account
-          </Link>
-          <Link href="/profile" style={{ padding: "10px 16px", borderRadius: "8px", border: "1px solid #3f3f46", color: "#f4f4f6", textDecoration: "none", fontWeight: 600, fontSize: "14px" }}>
-            Profile
-          </Link>
-        </div>
-      </section>
-    </main>
-  );
+  redirect("/login");
 }
 `;
 }
@@ -1695,22 +1776,12 @@ body {
 </style>
 `;
 }
-/** `pages/index.vue` — the landing chooser linking to login/register/profile. */
+/** `pages/index.vue` — redirects the app root to `/login`. */
 function indexPageTemplate() {
-	return `<!-- ${MANAGED_MARKER} -->
-<template>
-  <main style="position:fixed;inset:0;padding:48px;box-sizing:border-box;display:flex;align-items:center;justify-content:center;background:#0f0f11;color-scheme:dark;color:#f4f4f6;font-family:system-ui,-apple-system,'Segoe UI',Roboto,Helvetica,Arial,sans-serif;line-height:1.5;letter-spacing:normal;text-align:center">
-    <section style="width:100%;max-width:560px">
-      <p style="margin:0 0 12px;color:#9ca3af;font-size:14px">Zitadel auth</p>
-      <h1 style="margin:0 0 24px;font-size:32px;line-height:1.15;font-weight:600;color:#f4f4f6">Sign in, create an account, or open your profile.</h1>
-      <div style="display:flex;flex-wrap:wrap;gap:12px;justify-content:center">
-        <NuxtLink to="/login" style="padding:10px 16px;border-radius:8px;background:#f4f4f6;color:#0f0f11;text-decoration:none;font-weight:600;font-size:14px">Sign in</NuxtLink>
-        <NuxtLink to="/register" style="padding:10px 16px;border-radius:8px;border:1px solid #3f3f46;color:#f4f4f6;text-decoration:none;font-weight:600;font-size:14px">Create account</NuxtLink>
-        <NuxtLink to="/profile" style="padding:10px 16px;border-radius:8px;border:1px solid #3f3f46;color:#f4f4f6;text-decoration:none;font-weight:600;font-size:14px">Profile</NuxtLink>
-      </div>
-    </section>
-  </main>
-</template>
+	return `<script setup lang="ts">
+${MANAGED_MARKER}
+await navigateTo("/login", { replace: true });
+<\/script>
 `;
 }
 /** A login/register page rendering `<zitadel-login>` inside `<ClientOnly>`. */
@@ -1897,7 +1968,7 @@ var NuxtPatcher = class extends AbstractRulePatcher {
 	summary(_ctx) {
 		return {
 			title: "Nuxt integration",
-			detail: "Wrote landing/login/register/profile pages + plugins and registered @zitadel/sdk-nuxt in nuxt.config.*."
+			detail: "Wrote login/register/profile pages + plugins and registered @zitadel/sdk-nuxt in nuxt.config.*."
 		};
 	}
 };
@@ -1994,16 +2065,17 @@ function buildViteProxyOp(devPort, server) {
 //#region src/lib/orca/patchers/rule/qwik/templates.ts
 /**
 * The managed `src/app.tsx`: a minimal path-based router that renders the
-* `@zitadel/sdk-qwik` widgets — a landing chooser at `/`, login at `/login`,
-* register at `/register`, and the signed-in session card at `/profile`. Exports a named `App`
-* (`component$`) to match the create-vite Qwik entry (`main.tsx` imports
-* `{ App }`). The project id comes from `VITE_ZITADEL_PROJECT_ID`. No secret
-* reaches the browser: the dev proxy in `vite.config.*` attaches the project
-* service-key secret (from `ZITADEL_PROJECT_SECRET`) server-side.
+* `@zitadel/sdk-qwik` widgets — login at `/login`, register at `/register`, and
+* the signed-in session card at `/profile`. The root path redirects to `/login`.
+* Exports a named `App` (`component$`) to match the create-vite Qwik entry
+* (`main.tsx` imports `{ App }`). The project id comes from
+* `VITE_ZITADEL_PROJECT_ID`. No secret reaches the browser: the dev proxy in
+* `vite.config.*` attaches the project service-key secret (from
+* `ZITADEL_PROJECT_SECRET`) server-side.
 */
 function appTemplate$4() {
 	return `${MANAGED_MARKER}
-import { component$ } from "@builder.io/qwik";
+import { component$, useVisibleTask$ } from "@builder.io/qwik";
 import { ZitadelLogin, ZitadelSession, configureZitadel } from "@zitadel/sdk-qwik";
 
 const project = configureZitadel({
@@ -2014,20 +2086,14 @@ const project = configureZitadel({
 export const App = component$(() => {
   const path = window.location.pathname;
 
+  useVisibleTask$(() => {
+    if (path === "/") {
+      window.location.replace("/login");
+    }
+  });
+
   if (path === "/") {
-    return (
-      <main style={{ position: "fixed", inset: "0", padding: "48px", boxSizing: "border-box", display: "flex", alignItems: "center", justifyContent: "center", background: "#0f0f11", colorScheme: "dark", color: "#f4f4f6", fontFamily: "system-ui, -apple-system, 'Segoe UI', Roboto, Helvetica, Arial, sans-serif", lineHeight: "1.5", letterSpacing: "normal", textAlign: "center" }}>
-        <section style={{ width: "100%", maxWidth: "560px" }}>
-          <p style={{ margin: "0 0 12px", color: "#9ca3af", fontSize: "14px" }}>Zitadel auth</p>
-          <h1 style={{ margin: "0 0 24px", fontSize: "32px", lineHeight: "1.15", fontWeight: "600", color: "#f4f4f6" }}>Sign in, create an account, or open your profile.</h1>
-          <div style={{ display: "flex", flexWrap: "wrap", gap: "12px", justifyContent: "center" }}>
-            <a href="/login" style={{ padding: "10px 16px", borderRadius: "8px", background: "#f4f4f6", color: "#0f0f11", textDecoration: "none", fontWeight: "600", fontSize: "14px" }}>Sign in</a>
-            <a href="/register" style={{ padding: "10px 16px", borderRadius: "8px", border: "1px solid #3f3f46", color: "#f4f4f6", textDecoration: "none", fontWeight: "600", fontSize: "14px" }}>Create account</a>
-            <a href="/profile" style={{ padding: "10px 16px", borderRadius: "8px", border: "1px solid #3f3f46", color: "#f4f4f6", textDecoration: "none", fontWeight: "600", fontSize: "14px" }}>Profile</a>
-          </div>
-        </section>
-      </main>
-    );
+    return null;
   }
   if (path.startsWith("/profile")) {
     return (
@@ -2120,15 +2186,16 @@ var QwikPatcher = class extends AbstractRulePatcher {
 //#region src/lib/orca/patchers/rule/react/templates.ts
 /**
 * The managed `src/App.tsx`: a minimal path-based router that renders the
-* `@zitadel/sdk-react` widgets — a landing chooser at `/`, login at `/login`,
-* register at `/register`, and the signed-in session card at `/profile`. The project id comes from
-* `VITE_ZITADEL_PROJECT_ID` (Vite only exposes `VITE_`-prefixed env to the
-* client). No secret reaches the browser: the dev proxy in `vite.config.*`
-* attaches the project service-key secret (from `ZITADEL_PROJECT_SECRET`)
-* server-side.
+* `@zitadel/sdk-react` widgets — login at `/login`, register at `/register`, and
+* the signed-in session card at `/profile`. The root path redirects to `/login`.
+* The project id comes from `VITE_ZITADEL_PROJECT_ID` (Vite only exposes
+* `VITE_`-prefixed env to the client). No secret reaches the browser: the dev
+* proxy in `vite.config.*` attaches the project service-key secret (from
+* `ZITADEL_PROJECT_SECRET`) server-side.
 */
 function appTemplate$3() {
 	return `${MANAGED_MARKER}
+import { useEffect } from "react";
 import { ZitadelLogin, ZitadelSession, configureZitadel } from "@zitadel/sdk-react";
 
 const project = configureZitadel({
@@ -2139,20 +2206,14 @@ const project = configureZitadel({
 export default function App() {
   const path = window.location.pathname;
 
+  useEffect(() => {
+    if (path === "/") {
+      window.location.replace("/login");
+    }
+  }, [path]);
+
   if (path === "/") {
-    return (
-      <main style={{ position: "fixed", inset: 0, padding: "48px", boxSizing: "border-box", display: "flex", alignItems: "center", justifyContent: "center", background: "#0f0f11", colorScheme: "dark", color: "#f4f4f6", fontFamily: "system-ui, -apple-system, 'Segoe UI', Roboto, Helvetica, Arial, sans-serif", lineHeight: 1.5, letterSpacing: "normal", textAlign: "center" }}>
-        <section style={{ width: "100%", maxWidth: "560px" }}>
-          <p style={{ margin: "0 0 12px", color: "#9ca3af", fontSize: "14px" }}>Zitadel auth</p>
-          <h1 style={{ margin: "0 0 24px", fontSize: "32px", lineHeight: 1.15, fontWeight: 600, color: "#f4f4f6" }}>Sign in, create an account, or open your profile.</h1>
-          <div style={{ display: "flex", flexWrap: "wrap", gap: "12px", justifyContent: "center" }}>
-            <a href="/login" style={{ padding: "10px 16px", borderRadius: "8px", background: "#f4f4f6", color: "#0f0f11", textDecoration: "none", fontWeight: 600, fontSize: "14px" }}>Sign in</a>
-            <a href="/register" style={{ padding: "10px 16px", borderRadius: "8px", border: "1px solid #3f3f46", color: "#f4f4f6", textDecoration: "none", fontWeight: 600, fontSize: "14px" }}>Create account</a>
-            <a href="/profile" style={{ padding: "10px 16px", borderRadius: "8px", border: "1px solid #3f3f46", color: "#f4f4f6", textDecoration: "none", fontWeight: 600, fontSize: "14px" }}>Profile</a>
-          </div>
-        </section>
-      </main>
-    );
+    return null;
   }
   if (path.startsWith("/profile")) {
     return (
@@ -2243,15 +2304,16 @@ var ReactPatcher = class extends AbstractRulePatcher {
 //#region src/lib/orca/patchers/rule/solid/templates.ts
 /**
 * The managed `src/App.tsx`: a minimal path-based router that renders the
-* `@zitadel/sdk-solid` widgets — a landing chooser at `/`, login at `/login`,
-* register at `/register`, and the signed-in session card at `/profile`. The project id comes from
-* `VITE_ZITADEL_PROJECT_ID` (Vite only exposes `VITE_`-prefixed env to the
-* client). No secret reaches the browser: the dev proxy in `vite.config.*`
-* attaches the project service-key secret (from `ZITADEL_PROJECT_SECRET`)
-* server-side.
+* `@zitadel/sdk-solid` widgets — login at `/login`, register at `/register`, and
+* the signed-in session card at `/profile`. The root path redirects to `/login`.
+* The project id comes from `VITE_ZITADEL_PROJECT_ID` (Vite only exposes
+* `VITE_`-prefixed env to the client). No secret reaches the browser: the dev
+* proxy in `vite.config.*` attaches the project service-key secret (from
+* `ZITADEL_PROJECT_SECRET`) server-side.
 */
 function appTemplate$2() {
 	return `${MANAGED_MARKER}
+import { onMount } from "solid-js";
 import { ZitadelLogin, ZitadelSession, configureZitadel } from "@zitadel/sdk-solid";
 
 const project = configureZitadel({
@@ -2262,20 +2324,14 @@ const project = configureZitadel({
 export default function App() {
   const path = window.location.pathname;
 
+  onMount(() => {
+    if (path === "/") {
+      window.location.replace("/login");
+    }
+  });
+
   if (path === "/") {
-    return (
-      <main style="position:fixed;inset:0;padding:48px;box-sizing:border-box;display:flex;align-items:center;justify-content:center;background:#0f0f11;color-scheme:dark;color:#f4f4f6;font-family:system-ui,-apple-system,'Segoe UI',Roboto,Helvetica,Arial,sans-serif;line-height:1.5;letter-spacing:normal;text-align:center">
-        <section style="width:100%;max-width:560px">
-          <p style="margin:0 0 12px;color:#9ca3af;font-size:14px">Zitadel auth</p>
-          <h1 style="margin:0 0 24px;font-size:32px;line-height:1.15;font-weight:600;color:#f4f4f6">Sign in, create an account, or open your profile.</h1>
-          <div style="display:flex;flex-wrap:wrap;gap:12px;justify-content:center">
-            <a href="/login" style="padding:10px 16px;border-radius:8px;background:#f4f4f6;color:#0f0f11;text-decoration:none;font-weight:600;font-size:14px">Sign in</a>
-            <a href="/register" style="padding:10px 16px;border-radius:8px;border:1px solid #3f3f46;color:#f4f4f6;text-decoration:none;font-weight:600;font-size:14px">Create account</a>
-            <a href="/profile" style="padding:10px 16px;border-radius:8px;border:1px solid #3f3f46;color:#f4f4f6;text-decoration:none;font-weight:600;font-size:14px">Profile</a>
-          </div>
-        </section>
-      </main>
-    );
+    return null;
   }
   if (path.startsWith("/profile")) {
     return (
@@ -2366,16 +2422,18 @@ var SolidPatcher = class extends AbstractRulePatcher {
 //#region src/lib/orca/patchers/rule/svelte/templates.ts
 /**
 * The managed `src/App.svelte`: a minimal path-based router that renders the
-* `@zitadel/sdk-svelte` widgets — a landing chooser at `/`, login at `/login`,
-* register at `/register`, and the signed-in session card at `/profile`. The managed marker lives in
-* the `<script lang="ts">` block (a JS comment) so eject/doctor stay
-* marker-aware. The project id comes from `VITE_ZITADEL_PROJECT_ID`. No secret
-* reaches the browser: the dev proxy in `vite.config.*` attaches the project
-* service-key secret (from `ZITADEL_PROJECT_SECRET`) server-side.
+* `@zitadel/sdk-svelte` widgets — login at `/login`, register at `/register`, and
+* the signed-in session card at `/profile`. The root path redirects to `/login`.
+* The managed marker lives in the `<script lang="ts">` block (a JS comment) so
+* eject/doctor stay marker-aware. The project id comes from
+* `VITE_ZITADEL_PROJECT_ID`. No secret reaches the browser: the dev proxy in
+* `vite.config.*` attaches the project service-key secret (from
+* `ZITADEL_PROJECT_SECRET`) server-side.
 */
 function appTemplate$1() {
 	return `<script lang="ts">
 ${MANAGED_MARKER}
+import { onMount } from "svelte";
 import { ZitadelLogin, ZitadelSession, configureZitadel } from "@zitadel/sdk-svelte";
 
 const project = configureZitadel({
@@ -2384,21 +2442,15 @@ const project = configureZitadel({
 });
 
 const path = window.location.pathname;
+
+onMount(() => {
+  if (path === "/") {
+    window.location.replace("/login");
+  }
+});
 <\/script>
 
-{#if path === "/"}
-  <main style="position:fixed;inset:0;padding:48px;box-sizing:border-box;display:flex;align-items:center;justify-content:center;background:#0f0f11;color-scheme:dark;color:#f4f4f6;font-family:system-ui,-apple-system,'Segoe UI',Roboto,Helvetica,Arial,sans-serif;line-height:1.5;letter-spacing:normal;text-align:center">
-    <section style="width:100%;max-width:560px">
-      <p style="margin:0 0 12px;color:#9ca3af;font-size:14px">Zitadel auth</p>
-      <h1 style="margin:0 0 24px;font-size:32px;line-height:1.15;font-weight:600;color:#f4f4f6">Sign in, create an account, or open your profile.</h1>
-      <div style="display:flex;flex-wrap:wrap;gap:12px;justify-content:center">
-        <a href="/login" style="padding:10px 16px;border-radius:8px;background:#f4f4f6;color:#0f0f11;text-decoration:none;font-weight:600;font-size:14px">Sign in</a>
-        <a href="/register" style="padding:10px 16px;border-radius:8px;border:1px solid #3f3f46;color:#f4f4f6;text-decoration:none;font-weight:600;font-size:14px">Create account</a>
-        <a href="/profile" style="padding:10px 16px;border-radius:8px;border:1px solid #3f3f46;color:#f4f4f6;text-decoration:none;font-weight:600;font-size:14px">Profile</a>
-      </div>
-    </section>
-  </main>
-{:else if path.startsWith("/profile")}
+{#if path.startsWith("/profile")}
   <div style="position:fixed;inset:0;overflow:auto;background:#0f0f11;color-scheme:dark">
     <ZitadelSession {project} postSignOutUrl="/login" />
   </div>
@@ -2406,7 +2458,7 @@ const path = window.location.pathname;
   <div style="position:fixed;inset:0;overflow:auto;background:#0f0f11;color-scheme:dark">
     <ZitadelLogin {project} purpose="register" postSignInUrl="/profile" />
   </div>
-{:else}
+{:else if path !== "/"}
   <div style="position:fixed;inset:0;overflow:auto;background:#0f0f11;color-scheme:dark">
     <ZitadelLogin {project} purpose="login" postSignInUrl="/profile" />
   </div>
@@ -2480,16 +2532,18 @@ var SveltePatcher = class extends AbstractRulePatcher {
 //#region src/lib/orca/patchers/rule/vue/templates.ts
 /**
 * The managed `src/App.vue`: a minimal path-based router that renders the
-* `@zitadel/sdk-vue` widgets — a landing chooser at `/`, login at `/login`,
-* register at `/register`, and the signed-in session card at `/profile`. The managed marker lives in
-* the `<script setup>` block (a JS comment) so eject/doctor stay marker-aware.
-* The project id comes from `VITE_ZITADEL_PROJECT_ID`. No secret reaches the
-* browser: the dev proxy in `vite.config.*` attaches the project service-key
-* secret (from `ZITADEL_PROJECT_SECRET`) server-side.
+* `@zitadel/sdk-vue` widgets — login at `/login`, register at `/register`, and
+* the signed-in session card at `/profile`. The root path redirects to `/login`.
+* The managed marker lives in the `<script setup>` block (a JS comment) so
+* eject/doctor stay marker-aware. The project id comes from
+* `VITE_ZITADEL_PROJECT_ID`. No secret reaches the browser: the dev proxy in
+* `vite.config.*` attaches the project service-key secret (from
+* `ZITADEL_PROJECT_SECRET`) server-side.
 */
 function appTemplate() {
 	return `<script setup lang="ts">
 ${MANAGED_MARKER}
+import { onMounted } from "vue";
 import { ZitadelLogin, ZitadelSession, configureZitadel } from "@zitadel/sdk-vue";
 
 const project = configureZitadel({
@@ -2498,25 +2552,17 @@ const project = configureZitadel({
 });
 
 const path = window.location.pathname;
+
+onMounted(() => {
+  if (path === "/") {
+    window.location.replace("/login");
+  }
+});
 <\/script>
 
 <template>
-  <main
-    v-if="path === '/'"
-    style="position:fixed;inset:0;padding:48px;box-sizing:border-box;display:flex;align-items:center;justify-content:center;background:#0f0f11;color-scheme:dark;color:#f4f4f6;font-family:system-ui,-apple-system,'Segoe UI',Roboto,Helvetica,Arial,sans-serif;line-height:1.5;letter-spacing:normal;text-align:center"
-  >
-    <section style="width:100%;max-width:560px">
-      <p style="margin:0 0 12px;color:#9ca3af;font-size:14px">Zitadel auth</p>
-      <h1 style="margin:0 0 24px;font-size:32px;line-height:1.15;font-weight:600;color:#f4f4f6">Sign in, create an account, or open your profile.</h1>
-      <div style="display:flex;flex-wrap:wrap;gap:12px;justify-content:center">
-        <a href="/login" style="padding:10px 16px;border-radius:8px;background:#f4f4f6;color:#0f0f11;text-decoration:none;font-weight:600;font-size:14px">Sign in</a>
-        <a href="/register" style="padding:10px 16px;border-radius:8px;border:1px solid #3f3f46;color:#f4f4f6;text-decoration:none;font-weight:600;font-size:14px">Create account</a>
-        <a href="/profile" style="padding:10px 16px;border-radius:8px;border:1px solid #3f3f46;color:#f4f4f6;text-decoration:none;font-weight:600;font-size:14px">Profile</a>
-      </div>
-    </section>
-  </main>
   <div
-    v-else-if="path.startsWith('/profile')"
+    v-if="path.startsWith('/profile')"
     style="position:fixed;inset:0;overflow:auto;background:#0f0f11;color-scheme:dark"
   >
     <ZitadelSession :project="project" postSignOutUrl="/login" />
@@ -2527,7 +2573,7 @@ const path = window.location.pathname;
   >
     <ZitadelLogin :project="project" purpose="register" postSignInUrl="/profile" />
   </div>
-  <div v-else style="position:fixed;inset:0;overflow:auto;background:#0f0f11;color-scheme:dark">
+  <div v-else-if="path !== '/'" style="position:fixed;inset:0;overflow:auto;background:#0f0f11;color-scheme:dark">
     <ZitadelLogin :project="project" purpose="login" postSignInUrl="/profile" />
   </div>
 </template>
@@ -3168,6 +3214,6 @@ function isErrno(error, code) {
 	return typeof error === "object" && error !== null && "code" in error && error.code === code;
 }
 //#endregion
-export { issuerFromPort as i, inspectScaffoldTarget as n, RENDERER_IDS as r, createOrca as t };
+export { removeGuidanceSection as a, AGENTS_HEADER as i, inspectScaffoldTarget as n, issuerFromPort as o, RENDERER_IDS as r, createOrca as t };
 
-//# sourceMappingURL=orca-CpXj_XsA.mjs.map
+//# sourceMappingURL=orca-_TmrJQMw.mjs.map