bsmnt 0.7.0 → 0.9.0

package/src/modules/features/cms/sanity-pagebuilder/files/lib/utils/metadata.ts

@@ -6,6 +6,9 @@ interface GenerateMetadataOptions {
 	title?: string | undefined;
 	description?: string | undefined;
 	keywords?: string[] | undefined;
+	ogTitle?: string | undefined;
+	ogDescription?: string | undefined;
+	canonicalUrl?: string | undefined;
 	image?:
 		| {
 				url?: string | undefined;
@@ -33,6 +36,10 @@ interface SanityMetadataImage {
 interface SanityPageMetadata {
 	metaTitle?: string | null;
 	metaDescription?: string | null;
+	keywords?: string[] | null;
+	ogTitle?: string | null;
+	ogDescription?: string | null;
+	canonicalUrl?: string | null;
 	og?: {
 		image?: SanityMetadataImage | null;
 	} | null;
@@ -81,6 +88,9 @@ const generatePageMetadata = (options: GenerateMetadataOptions): Metadata => {
 		title,
 		description,
 		keywords,
+		ogTitle,
+		ogDescription,
+		canonicalUrl,
 		image,
 		url,
 		siteName = "Basement",
@@ -98,29 +108,33 @@ const generatePageMetadata = (options: GenerateMetadataOptions): Metadata => {
 	const width = image?.width || 1200;
 	const height = image?.height || 630;
 
+	// Social title/description fall back to the SEO meta title/description.
+	const socialTitle = ogTitle || title;
+	const socialDescription = ogDescription || description;
+
 	const metadata: Metadata = {
 		metadataBase: new URL(APP_BASE_URL),
 		title,
 		description,
 		keywords,
-		alternates: { canonical: url || "/" },
+		alternates: { canonical: canonicalUrl || url || "/" },
 		openGraph: {
-			title,
-			description,
+			description: socialDescription,
 			url: fullUrl,
 			siteName,
 			locale: "en_US",
 			type,
 			images: [{ url: imageUrl, width, height }],
+			...(socialTitle && { title: socialTitle }),
 			...(publishedTime && { publishedTime }),
 			...(modifiedTime && { modifiedTime }),
 			...(authors && { authors }),
 		},
 		twitter: {
 			card: "summary_large_image",
-			title,
-			description,
+			description: socialDescription,
 			images: [{ url: imageUrl, width, height }],
+			...(socialTitle && { title: socialTitle }),
 		},
 		other: { "fb:app_id": process.env.NEXT_PUBLIC_FACEBOOK_APP_ID || "" },
 	};
@@ -155,9 +169,17 @@ export const generateSanityMetadata = ({
 		pageMetadata?.index ??
 		(pageMetadata?.noIndex != null ? !pageMetadata.noIndex : true);
 
+	const keywords = pageMetadata?.keywords?.length
+		? pageMetadata.keywords
+		: undefined;
+
 	return generatePageMetadata({
 		title,
 		description,
+		keywords,
+		ogTitle: pageMetadata?.ogTitle || undefined,
+		ogDescription: pageMetadata?.ogDescription || undefined,
+		canonicalUrl: pageMetadata?.canonicalUrl || undefined,
 		image: imageUrl ? { url: imageUrl, width: 1200, height: 630 } : undefined,
 		url,
 		siteName,

package/src/modules/features/env/dotenvx/files/decrypt-env.mjs

@@ -17,21 +17,21 @@ if (process.env.CI || process.env.VERCEL) {
 }
 
 const args = process.argv.slice(2);
-const file =
-  args.includes("--prod") || args.includes("--production")
-    ? ".env.production"
-    : args.includes("--preview")
-      ? ".env.preview"
-      : ".env";
+let file = ".env";
+if (args.includes("--prod") || args.includes("--production")) {
+  file = ".env.production";
+} else if (args.includes("--preview")) {
+  file = ".env.preview";
+}
 
 // Friendlier than dotenvx's MISSING_ENV_FILE error when the file isn't created yet.
 if (!existsSync(file)) {
-  const flag =
-    file === ".env.production"
-      ? " --prod"
-      : file === ".env.preview"
-        ? " --preview"
-        : "";
+  let flag = "";
+  if (file === ".env.production") {
+    flag = " --prod";
+  } else if (file === ".env.preview") {
+    flag = " --preview";
+  }
   console.error(
     `No ${file} yet. Add values with: bun run env:set KEY value${flag}`,
   );

package/src/modules/features/env/dotenvx/files/push-keys.mjs

@@ -96,11 +96,11 @@ async function main() {
   let ok = true;
   for (const { name, value } of keys) {
     if (target === "github") {
-      console.log(`→ gh secret set ${name}`);
+      console.info(`→ gh secret set ${name}`);
       ok = pipe("gh", ["secret", "set", name], value) && ok;
     } else {
       for (const env of vercelEnvsFor(name)) {
-        console.log(`→ vercel env add ${name} ${env} (sensitive)`);
+        console.info(`→ vercel env add ${name} ${env} (sensitive)`);
         // --sensitive: write-only, never shown in the dashboard.
         ok = pipe("vercel", ["env", "add", name, env, "--sensitive"], value) && ok;
       }
@@ -116,7 +116,7 @@ async function main() {
     process.exit(1);
   }
 
-  console.log(
+  console.info(
     target === "vercel"
       ? "\nDone. Redeploy for the new env vars to take effect."
       : "\nDone.",

package/src/modules/features/env/dotenvx/files/save-key.mjs

@@ -131,6 +131,6 @@ try {
 const ref = `op://${VAULT}/${itemRef}/private-key`;
 setOpRef(ref);
 
-console.log(`\n✓ Saved to 1Password (${VAULT} / "${title}").`);
-console.log(`  Set DOTENV_PRIVATE_KEY_OP_REF=${ref} in .env.`);
-console.log("  Teammates can now restore with `bun run env:setup`.");
+console.info(`\n✓ Saved to 1Password (${VAULT} / "${title}").`);
+console.info(`  Set DOTENV_PRIVATE_KEY_OP_REF=${ref} in .env.`);
+console.info("  Teammates can now restore with `bun run env:setup`.");

package/src/modules/features/env/dotenvx/files/setup-remote.ts

@@ -166,8 +166,10 @@ function main(): void {
 	}
 
 	// Push after connecting so the git integration builds the first deployment.
+	// `--no-verify` skips pre-push hooks — this is the initial scaffold push, and
+	// a hook failure here would strand it behind an already-created empty remote.
 	console.info("→ git push");
-	if (!run("git", ["push", "-u", "origin", "HEAD"], "git not found.")) {
+	if (!run("git", ["push", "-u", "origin", "HEAD", "--no-verify"], "git not found.")) {
 		console.error(
 			"\nConnected, but the push failed — run `git push` to trigger the first deploy.",
 		);

package/src/modules/features/env/dotenvx/files/write-env.mjs

@@ -12,12 +12,12 @@ const [mode, ...rest] = process.argv.slice(2);
 
 // --prod / --preview pick the per-environment file; default is the shared .env.
 const ENV_FLAGS = new Set(["--prod", "--production", "--preview"]);
-const file =
-  rest.includes("--prod") || rest.includes("--production")
-    ? ".env.production"
-    : rest.includes("--preview")
-      ? ".env.preview"
-      : ".env";
+let file = ".env";
+if (rest.includes("--prod") || rest.includes("--production")) {
+  file = ".env.production";
+} else if (rest.includes("--preview")) {
+  file = ".env.preview";
+}
 
 // On bulk encrypt, keep browser-public NEXT_PUBLIC_* and the 1Password pointer
 // plaintext (same exclusions the scaffold uses).

package/src/modules/features/forms/hubspot/files/lib/integrations/hubspot/hubspot-form.css

@@ -1,3 +1,5 @@
+/* biome-ignore-all lint/style/noDescendingSpecificity: selector order follows HubSpot's DOM, not specificity. */
+
 /* Styles HubSpot's injected DOM, scoped under `.hubspot-form-wrapper`.
  *
  * Tokens map onto the basement starter design system — `--color-primary`

package/src/templates/next-default/.env.example

@@ -1,6 +1,7 @@
 # ============================================
 # Basement Next Starter - Environment Variables
 # ============================================
+# bsmnt:if dotenvx
 # This project uses dotenvx (https://dotenvx.com): the committed `.env` holds
 # shared values, with secrets encrypted there. The private keys live in
 # `.env.keys` (gitignored) — restore them with `bun run env:setup`.
@@ -15,6 +16,13 @@
 #
 # This file just documents the available variables; real values live in `.env`.
 # ============================================
+# bsmnt:endif
+# bsmnt:if !dotenvx
+# Copy this file to `.env.local` and fill in the values you need.
+# `.env.local` is gitignored, so real values stay off version control.
+# Only NEXT_PUBLIC_* variables are exposed to the browser.
+# ============================================
+# bsmnt:endif
 
 
 # ============================================

package/src/templates/next-default/.github/workflows/ci.yml

@@ -46,6 +46,7 @@ jobs:
       - name: Lint
         run: bun run lint
 
+      # bsmnt:if dotenvx
       # dotenvx needs the private key to decrypt secrets at build time. It's
       # pulled from 1Password via an org-wide service-account token + the op-ref
       # committed in .env. Optional: builds pass without it (only plaintext /
@@ -70,6 +71,12 @@ jobs:
           fi
           bun run build
 
+      # bsmnt:endif
+      # bsmnt:if !dotenvx
+      - name: Build
+        run: bun run build
+
+      # bsmnt:endif
       # Runs your tests if any exist; a fresh project with none passes cleanly.
       - name: Test
         run: |

package/src/templates/next-default/README.md

@@ -22,6 +22,7 @@ bun dev
 | `bun format` | Format the codebase |
 | `bun typecheck` | Run TypeScript |
 | `bun analyze` | Analyze the Next.js bundle |
+<!-- bsmnt:if dotenvx -->
 | `bun env:set KEY value` | Encrypt one value into `.env` (`--plain`, `--preview`/`--prod`) |
 | `bun env:encrypt-all` | Bulk-encrypt every plaintext value in a file (`--preview`/`--prod`) |
 | `bun env:setup` | Restore `.env.keys` from 1Password |
@@ -29,7 +30,9 @@ bun dev
 | `bun env:setup-remote` | Push private keys to GitHub / Vercel (`github`/`vercel`, or pick) |
 | `bun setup-remote` | Create the GitHub repo, link a Vercel project, and push the key to Vercel env |
 | `bun env:save` | Save the private key to 1Password (Development vault) |
+<!-- bsmnt:endif -->
 
+<!-- bsmnt:if dotenvx -->
 ## Environment variables
 
 Secrets are encrypted at rest with [dotenvx](https://dotenvx.com): the committed `.env` holds encrypted values, the private keys live in `.env.keys` (gitignored), and dev/build run through `dotenvx run` so values decrypt automatically.
@@ -53,6 +56,15 @@ Secrets are encrypted at rest with [dotenvx](https://dotenvx.com): the committed
 
 A gitleaks pre-commit hook + CI scan block committed plaintext secrets (install: `brew install gitleaks`).
 
+<!-- bsmnt:endif -->
+<!-- bsmnt:if !dotenvx -->
+## Environment variables
+
+Copy `.env.example` to `.env.local` and fill in the values you need. `.env.local` is gitignored, so it stays off version control. Only `NEXT_PUBLIC_*` variables are exposed to the browser — everything else is server-only.
+
+For deploys, set the same variables in your host's dashboard (e.g. Vercel → Settings → Environment Variables).
+
+<!-- bsmnt:endif -->
 ## Project Structure
 
 ```txt
@@ -90,8 +102,10 @@ The workflow takes its runtime versions from your manifests, so there's a single
 
 It also caches Bun's install cache between runs, and the test step is a no-op until you add real test files.
 
+<!-- bsmnt:if dotenvx -->
 The build decrypts the committed `.env` with the dotenvx private key, pulled from 1Password: set an **org-level** `OP_SERVICE_ACCOUNT_TOKEN` (a read-only [service account](https://developer.1password.com/docs/service-accounts/) scoped to the `Development` vault) — one secret for every repo — and CI reads the key via the op-ref committed in `.env`. A per-repo `DOTENV_PRIVATE_KEY` secret (`bun run env:setup-remote github`) works as a fallback; builds pass without either (only plaintext / `NEXT_PUBLIC_*` is read).
 
+<!-- bsmnt:endif -->
 ### Branch protection
 
 To block merges when CI fails, enable branch protection on `main`:

package/src/templates/next-default/biome.json

@@ -83,7 +83,7 @@
       "complexity": {
         "noForEach": "off",
         "useFlatMap": "warn",
-        "useSimplifiedLogicExpression": "warn"
+        "useSimplifiedLogicExpression": "off"
       },
       "correctness": {
         "noInvalidUseBeforeDeclaration": "error",

package/src/templates/next-default/components/basement.svg

@@ -1 +1 @@
-<svg width="123" height="18" viewBox="0 0 123 18" fill="none" xmlns="http://www.w3.org/2000/svg"><path d="M4.43626 6.76458V.252441H.381348V17.1671H4.33011v-3.0447c.40337 2.1989 1.78331 3.2984 4.13983 3.2984 3.96996 0 4.86166-.9515 4.86166-5.6664V9.91493c0-4.7361-.8704-5.66641-4.64937-5.66641-2.54758 0-3.77892.54973-4.24597 2.51606Zm.02123 5.94122V9.42863c.10615-1.14174.84919-1.69146 2.29282-1.69146 1.95315 0 2.31406.42286 2.31406 2.30463v1.628c0 1.8395-.36091 2.2623-2.31406 2.2623-1.4224 0-2.16544-.4228-2.29282-1.2263Zm10.23281.8035c0 3.4252.7643 4.0384 4.9253 3.9115 1.9956-.0211 3.418-.8035 3.97-2.4949v2.2412h4.0337V8.62519c0-3.70008-.8917-4.37667-5.6259-4.37667h-.9766c-4.9678 0-5.9019.65544-5.9019 4.14409v.50744h4.0337c-.0425-1.45889.3184-1.71261 2.314-1.71261 1.7833 0 2.123.25372 2.123 1.71261v.71887l-4.0337.02114c-4.0973 0-4.8616.61314-4.8616 3.86924Zm4.246.0423c0-.7823.2123-.9303 1.3162-.9303l3.3331-.0212v.5497c0 .9938-.6793 1.3744-2.4627 1.4166h-.2122c-1.656 0-1.9744-.1691-1.9744-1.0148Zm10.0417-.3383c0 3.5309.8917 4.2075 5.5622 4.2075h.9766c5.3499 0 6.3265-.592 6.3265-3.6367 0-1.9451-.4883-3.108-2.5051-3.7-1.104-.31718-2.0805-.5709-4.1611-.90919-1.3799-.21143-1.762-.46515-1.762-.99373 0-.78231.4246-.99374 1.9956-.99374 1.6347 0 2.0805.29601 2.0805 1.33203v.38058h4.0337v-.38058c0-3.61551-.8917-4.27095-5.6259-4.27095h-.9766c-4.8192 0-5.7533.57087-5.7533 3.8058 0 1.69146.4458 2.64288 2.1867 3.31948 1.2738.4863 3.2057.7823 3.9487.9303 1.8682.3383 2.3141.6766 2.3141 1.184 0 .7612-.4883.9726-2.3141.9726-1.9744 0-2.5051-.2748-2.5051-1.2474v-.2749H28.978v.2749Zm14.0967-2.3681c0 5.5396.9765 6.5756 6.1779 6.5756h.9765c5.1589 0 6.1142-.6766 6.1142-4.271h-4.2459c0 1.0784-.3609 1.3109-2.3353 1.3109-2.0593 0-2.4415-.3594-2.4415-2.1989v-.0634h9.1289v-1.9875c0-5.03207-.9766-5.96238-6.2204-5.96238h-.9765c-5.2014 0-6.1779 1.01488-6.1779 6.59668Zm4.2459-1.628v-.06343c0-1.64918.3822-1.96633 2.4415-1.96633 1.9956 0 2.4202.31715 2.4414 2.02976h-4.8829Zm10.9122 7.9499h4.0337V9.83035c0-1.48003.7006-2.22004 2.1017-2.22004 1.6135 0 1.932.31715 1.932 1.96632v7.59047h4.0124l-.0212-7.46361c.0424-1.39546.743-2.09318 2.1017-2.09318 1.6135 0 1.8895.31715 1.8895 1.96632v7.59047h4.0337l-.0212-8.20362c0-3.97494-.7219-4.71496-4.6069-4.71496-2.1443 0-3.4393.90916-3.9063 2.91778-.1699-2.41034-.8705-2.91778-4.0974-2.91778-1.8895 0-2.9722.76116-3.418 2.66406V4.50224h-4.0337V17.1671Zm21.6545-6.3219c0 5.5396.9766 6.5756 6.1991 6.5756h.9766c5.1164 0 6.0717-.6766 6.0717-4.271H88.91c0 1.0784-.3609 1.3109-2.3141 1.3109-2.1017 0-2.4839-.3594-2.4839-2.1989v-.0634h9.1289v-1.9875c0-5.03207-.9766-5.96238-6.1779-5.96238h-.9766c-5.2225 0-6.1991 1.01488-6.1991 6.59668Zm4.2247-1.628v-.06343c0-1.64918.3822-1.96633 2.4839-1.96633 1.9744 0 2.399.31715 2.4202 2.02976H84.112Zm10.891 7.9499h4.0337V9.61892c.0212-1.35317.7642-2.00861 2.2293-2.00861 1.868 0 2.208.35943 2.208 2.30462v7.25217h4.033l-.021-8.20362c0-3.97494-.7-4.71496-4.394-4.71496-2.336 0-3.5671.76116-4.0553 2.81206V4.50224H95.003V17.1671Zm13.545-9.30307h1.252v5.05327c0 3.5732.828 4.2498 5.095 4.2498h2.76v-3.5944h-2.335c-1.253 0-1.486-.2114-1.486-1.2686V7.86403h3.63V4.50224h-3.63V1.77476h-3.821v2.72748h-1.465v3.36179Zm10.636 9.30307h3.63v-3.5944h-3.63v3.5944Z" fill="#EFEFEF"/></svg>
+<svg width="123" height="18" viewBox="0 0 123 18" fill="none" xmlns="http://www.w3.org/2000/svg"><title>basement</title><path d="M4.43626 6.76458V.252441H.381348V17.1671H4.33011v-3.0447c.40337 2.1989 1.78331 3.2984 4.13983 3.2984 3.96996 0 4.86166-.9515 4.86166-5.6664V9.91493c0-4.7361-.8704-5.66641-4.64937-5.66641-2.54758 0-3.77892.54973-4.24597 2.51606Zm.02123 5.94122V9.42863c.10615-1.14174.84919-1.69146 2.29282-1.69146 1.95315 0 2.31406.42286 2.31406 2.30463v1.628c0 1.8395-.36091 2.2623-2.31406 2.2623-1.4224 0-2.16544-.4228-2.29282-1.2263Zm10.23281.8035c0 3.4252.7643 4.0384 4.9253 3.9115 1.9956-.0211 3.418-.8035 3.97-2.4949v2.2412h4.0337V8.62519c0-3.70008-.8917-4.37667-5.6259-4.37667h-.9766c-4.9678 0-5.9019.65544-5.9019 4.14409v.50744h4.0337c-.0425-1.45889.3184-1.71261 2.314-1.71261 1.7833 0 2.123.25372 2.123 1.71261v.71887l-4.0337.02114c-4.0973 0-4.8616.61314-4.8616 3.86924Zm4.246.0423c0-.7823.2123-.9303 1.3162-.9303l3.3331-.0212v.5497c0 .9938-.6793 1.3744-2.4627 1.4166h-.2122c-1.656 0-1.9744-.1691-1.9744-1.0148Zm10.0417-.3383c0 3.5309.8917 4.2075 5.5622 4.2075h.9766c5.3499 0 6.3265-.592 6.3265-3.6367 0-1.9451-.4883-3.108-2.5051-3.7-1.104-.31718-2.0805-.5709-4.1611-.90919-1.3799-.21143-1.762-.46515-1.762-.99373 0-.78231.4246-.99374 1.9956-.99374 1.6347 0 2.0805.29601 2.0805 1.33203v.38058h4.0337v-.38058c0-3.61551-.8917-4.27095-5.6259-4.27095h-.9766c-4.8192 0-5.7533.57087-5.7533 3.8058 0 1.69146.4458 2.64288 2.1867 3.31948 1.2738.4863 3.2057.7823 3.9487.9303 1.8682.3383 2.3141.6766 2.3141 1.184 0 .7612-.4883.9726-2.3141.9726-1.9744 0-2.5051-.2748-2.5051-1.2474v-.2749H28.978v.2749Zm14.0967-2.3681c0 5.5396.9765 6.5756 6.1779 6.5756h.9765c5.1589 0 6.1142-.6766 6.1142-4.271h-4.2459c0 1.0784-.3609 1.3109-2.3353 1.3109-2.0593 0-2.4415-.3594-2.4415-2.1989v-.0634h9.1289v-1.9875c0-5.03207-.9766-5.96238-6.2204-5.96238h-.9765c-5.2014 0-6.1779 1.01488-6.1779 6.59668Zm4.2459-1.628v-.06343c0-1.64918.3822-1.96633 2.4415-1.96633 1.9956 0 2.4202.31715 2.4414 2.02976h-4.8829Zm10.9122 7.9499h4.0337V9.83035c0-1.48003.7006-2.22004 2.1017-2.22004 1.6135 0 1.932.31715 1.932 1.96632v7.59047h4.0124l-.0212-7.46361c.0424-1.39546.743-2.09318 2.1017-2.09318 1.6135 0 1.8895.31715 1.8895 1.96632v7.59047h4.0337l-.0212-8.20362c0-3.97494-.7219-4.71496-4.6069-4.71496-2.1443 0-3.4393.90916-3.9063 2.91778-.1699-2.41034-.8705-2.91778-4.0974-2.91778-1.8895 0-2.9722.76116-3.418 2.66406V4.50224h-4.0337V17.1671Zm21.6545-6.3219c0 5.5396.9766 6.5756 6.1991 6.5756h.9766c5.1164 0 6.0717-.6766 6.0717-4.271H88.91c0 1.0784-.3609 1.3109-2.3141 1.3109-2.1017 0-2.4839-.3594-2.4839-2.1989v-.0634h9.1289v-1.9875c0-5.03207-.9766-5.96238-6.1779-5.96238h-.9766c-5.2225 0-6.1991 1.01488-6.1991 6.59668Zm4.2247-1.628v-.06343c0-1.64918.3822-1.96633 2.4839-1.96633 1.9744 0 2.399.31715 2.4202 2.02976H84.112Zm10.891 7.9499h4.0337V9.61892c.0212-1.35317.7642-2.00861 2.2293-2.00861 1.868 0 2.208.35943 2.208 2.30462v7.25217h4.033l-.021-8.20362c0-3.97494-.7-4.71496-4.394-4.71496-2.336 0-3.5671.76116-4.0553 2.81206V4.50224H95.003V17.1671Zm13.545-9.30307h1.252v5.05327c0 3.5732.828 4.2498 5.095 4.2498h2.76v-3.5944h-2.335c-1.253 0-1.486-.2114-1.486-1.2686V7.86403h3.63V4.50224h-3.63V1.77476h-3.821v2.72748h-1.465v3.36179Zm10.636 9.30307h3.63v-3.5944h-3.63v3.5944Z" fill="#EFEFEF"/></svg>

package/src/templates/next-default/knip.json

@@ -12,11 +12,13 @@
     "@svgr/webpack",
     "gsap",
     "@gsap/react",
-    "motion"
+    "motion",
+    "detect-gpu",
+    "lodash-es",
+    "@types/lodash-es",
+    "react-device-detect",
+    "zustand"
   ],
-  "ignoreBinaries": [
-    "op",
-    "gh",
-    "vercel"
-  ]
+  "ignoreBinaries": ["op", "gh", "vercel"],
+  "ignoreFiles": [".agents/**", ".claude/**", "hooks/**"]
 }

package/src/templates/next-default/lefthook.yml

@@ -14,11 +14,6 @@ pre-commit:
       run: bunx tsgo --noEmit --incremental false
       stage_fixed: false
 
-pre-push:
-  commands:
-    knip:
-      run: bun run knip
-
 post-merge:
   commands:
     install-deps:

package/src/templates/next-experiments/.env.example

@@ -1,6 +1,7 @@
 # ============================================
 # Basement Next Starter - Environment Variables
 # ============================================
+# bsmnt:if dotenvx
 # This project uses dotenvx (https://dotenvx.com): the committed `.env` holds
 # shared values, with secrets encrypted there. The private keys live in
 # `.env.keys` (gitignored) — restore them with `bun run env:setup`.
@@ -15,6 +16,13 @@
 #
 # This file just documents the available variables; real values live in `.env`.
 # ============================================
+# bsmnt:endif
+# bsmnt:if !dotenvx
+# Copy this file to `.env.local` and fill in the values you need.
+# `.env.local` is gitignored, so real values stay off version control.
+# Only NEXT_PUBLIC_* variables are exposed to the browser.
+# ============================================
+# bsmnt:endif
 
 
 # ============================================

package/src/templates/next-experiments/.github/workflows/ci.yml

@@ -46,6 +46,7 @@ jobs:
       - name: Lint
         run: bun run lint
 
+      # bsmnt:if dotenvx
       # dotenvx needs the private key to decrypt secrets at build time. It's
       # pulled from 1Password via an org-wide service-account token + the op-ref
       # committed in .env. Optional: builds pass without it (only plaintext /
@@ -70,6 +71,12 @@ jobs:
           fi
           bun run build
 
+      # bsmnt:endif
+      # bsmnt:if !dotenvx
+      - name: Build
+        run: bun run build
+
+      # bsmnt:endif
       # Runs your tests if any exist; a fresh project with none passes cleanly.
       - name: Test
         run: |

package/src/templates/next-experiments/README.md

@@ -22,6 +22,7 @@ bun dev
 | `bun format` | Format the codebase |
 | `bun typecheck` | Run TypeScript |
 | `bun analyze` | Analyze the Next.js bundle |
+<!-- bsmnt:if dotenvx -->
 | `bun env:set KEY value` | Encrypt one value into `.env` (`--plain`, `--preview`/`--prod`) |
 | `bun env:encrypt-all` | Bulk-encrypt every plaintext value in a file (`--preview`/`--prod`) |
 | `bun env:setup` | Restore `.env.keys` from 1Password |
@@ -29,7 +30,9 @@ bun dev
 | `bun env:setup-remote` | Push private keys to GitHub / Vercel (`github`/`vercel`, or pick) |
 | `bun setup-remote` | Create the GitHub repo, link a Vercel project, and push the key to Vercel env |
 | `bun env:save` | Save the private key to 1Password (Development vault) |
+<!-- bsmnt:endif -->
 
+<!-- bsmnt:if dotenvx -->
 ## Environment variables
 
 Secrets are encrypted at rest with [dotenvx](https://dotenvx.com): the committed `.env` holds encrypted values, the private keys live in `.env.keys` (gitignored), and dev/build run through `dotenvx run` so values decrypt automatically.
@@ -53,6 +56,15 @@ Secrets are encrypted at rest with [dotenvx](https://dotenvx.com): the committed
 
 A gitleaks pre-commit hook + CI scan block committed plaintext secrets (install: `brew install gitleaks`).
 
+<!-- bsmnt:endif -->
+<!-- bsmnt:if !dotenvx -->
+## Environment variables
+
+Copy `.env.example` to `.env.local` and fill in the values you need. `.env.local` is gitignored, so it stays off version control. Only `NEXT_PUBLIC_*` variables are exposed to the browser — everything else is server-only.
+
+For deploys, set the same variables in your host's dashboard (e.g. Vercel → Settings → Environment Variables).
+
+<!-- bsmnt:endif -->
 ## Project Structure
 
 ```txt
@@ -90,8 +102,10 @@ The workflow takes its runtime versions from your manifests, so there's a single
 
 It also caches Bun's install cache between runs, and the test step is a no-op until you add real test files.
 
+<!-- bsmnt:if dotenvx -->
 The build decrypts the committed `.env` with the dotenvx private key, pulled from 1Password: set an **org-level** `OP_SERVICE_ACCOUNT_TOKEN` (a read-only [service account](https://developer.1password.com/docs/service-accounts/) scoped to the `Development` vault) — one secret for every repo — and CI reads the key via the op-ref committed in `.env`. A per-repo `DOTENV_PRIVATE_KEY` secret (`bun run env:setup-remote github`) works as a fallback; builds pass without either (only plaintext / `NEXT_PUBLIC_*` is read).
 
+<!-- bsmnt:endif -->
 ### Branch protection
 
 To block merges when CI fails, enable branch protection on `main`:

package/src/templates/next-experiments/biome.json

@@ -83,7 +83,7 @@
       "complexity": {
         "noForEach": "off",
         "useFlatMap": "warn",
-        "useSimplifiedLogicExpression": "warn"
+        "useSimplifiedLogicExpression": "off"
       },
       "correctness": {
         "noInvalidUseBeforeDeclaration": "error",

package/src/templates/next-experiments/components/basement.svg

@@ -1 +1 @@
-<svg width="123" height="18" viewBox="0 0 123 18" fill="none" xmlns="http://www.w3.org/2000/svg"><path d="M4.43626 6.76458V.252441H.381348V17.1671H4.33011v-3.0447c.40337 2.1989 1.78331 3.2984 4.13983 3.2984 3.96996 0 4.86166-.9515 4.86166-5.6664V9.91493c0-4.7361-.8704-5.66641-4.64937-5.66641-2.54758 0-3.77892.54973-4.24597 2.51606Zm.02123 5.94122V9.42863c.10615-1.14174.84919-1.69146 2.29282-1.69146 1.95315 0 2.31406.42286 2.31406 2.30463v1.628c0 1.8395-.36091 2.2623-2.31406 2.2623-1.4224 0-2.16544-.4228-2.29282-1.2263Zm10.23281.8035c0 3.4252.7643 4.0384 4.9253 3.9115 1.9956-.0211 3.418-.8035 3.97-2.4949v2.2412h4.0337V8.62519c0-3.70008-.8917-4.37667-5.6259-4.37667h-.9766c-4.9678 0-5.9019.65544-5.9019 4.14409v.50744h4.0337c-.0425-1.45889.3184-1.71261 2.314-1.71261 1.7833 0 2.123.25372 2.123 1.71261v.71887l-4.0337.02114c-4.0973 0-4.8616.61314-4.8616 3.86924Zm4.246.0423c0-.7823.2123-.9303 1.3162-.9303l3.3331-.0212v.5497c0 .9938-.6793 1.3744-2.4627 1.4166h-.2122c-1.656 0-1.9744-.1691-1.9744-1.0148Zm10.0417-.3383c0 3.5309.8917 4.2075 5.5622 4.2075h.9766c5.3499 0 6.3265-.592 6.3265-3.6367 0-1.9451-.4883-3.108-2.5051-3.7-1.104-.31718-2.0805-.5709-4.1611-.90919-1.3799-.21143-1.762-.46515-1.762-.99373 0-.78231.4246-.99374 1.9956-.99374 1.6347 0 2.0805.29601 2.0805 1.33203v.38058h4.0337v-.38058c0-3.61551-.8917-4.27095-5.6259-4.27095h-.9766c-4.8192 0-5.7533.57087-5.7533 3.8058 0 1.69146.4458 2.64288 2.1867 3.31948 1.2738.4863 3.2057.7823 3.9487.9303 1.8682.3383 2.3141.6766 2.3141 1.184 0 .7612-.4883.9726-2.3141.9726-1.9744 0-2.5051-.2748-2.5051-1.2474v-.2749H28.978v.2749Zm14.0967-2.3681c0 5.5396.9765 6.5756 6.1779 6.5756h.9765c5.1589 0 6.1142-.6766 6.1142-4.271h-4.2459c0 1.0784-.3609 1.3109-2.3353 1.3109-2.0593 0-2.4415-.3594-2.4415-2.1989v-.0634h9.1289v-1.9875c0-5.03207-.9766-5.96238-6.2204-5.96238h-.9765c-5.2014 0-6.1779 1.01488-6.1779 6.59668Zm4.2459-1.628v-.06343c0-1.64918.3822-1.96633 2.4415-1.96633 1.9956 0 2.4202.31715 2.4414 2.02976h-4.8829Zm10.9122 7.9499h4.0337V9.83035c0-1.48003.7006-2.22004 2.1017-2.22004 1.6135 0 1.932.31715 1.932 1.96632v7.59047h4.0124l-.0212-7.46361c.0424-1.39546.743-2.09318 2.1017-2.09318 1.6135 0 1.8895.31715 1.8895 1.96632v7.59047h4.0337l-.0212-8.20362c0-3.97494-.7219-4.71496-4.6069-4.71496-2.1443 0-3.4393.90916-3.9063 2.91778-.1699-2.41034-.8705-2.91778-4.0974-2.91778-1.8895 0-2.9722.76116-3.418 2.66406V4.50224h-4.0337V17.1671Zm21.6545-6.3219c0 5.5396.9766 6.5756 6.1991 6.5756h.9766c5.1164 0 6.0717-.6766 6.0717-4.271H88.91c0 1.0784-.3609 1.3109-2.3141 1.3109-2.1017 0-2.4839-.3594-2.4839-2.1989v-.0634h9.1289v-1.9875c0-5.03207-.9766-5.96238-6.1779-5.96238h-.9766c-5.2225 0-6.1991 1.01488-6.1991 6.59668Zm4.2247-1.628v-.06343c0-1.64918.3822-1.96633 2.4839-1.96633 1.9744 0 2.399.31715 2.4202 2.02976H84.112Zm10.891 7.9499h4.0337V9.61892c.0212-1.35317.7642-2.00861 2.2293-2.00861 1.868 0 2.208.35943 2.208 2.30462v7.25217h4.033l-.021-8.20362c0-3.97494-.7-4.71496-4.394-4.71496-2.336 0-3.5671.76116-4.0553 2.81206V4.50224H95.003V17.1671Zm13.545-9.30307h1.252v5.05327c0 3.5732.828 4.2498 5.095 4.2498h2.76v-3.5944h-2.335c-1.253 0-1.486-.2114-1.486-1.2686V7.86403h3.63V4.50224h-3.63V1.77476h-3.821v2.72748h-1.465v3.36179Zm10.636 9.30307h3.63v-3.5944h-3.63v3.5944Z" fill="#EFEFEF"/></svg>
+<svg width="123" height="18" viewBox="0 0 123 18" fill="none" xmlns="http://www.w3.org/2000/svg"><title>basement</title><path d="M4.43626 6.76458V.252441H.381348V17.1671H4.33011v-3.0447c.40337 2.1989 1.78331 3.2984 4.13983 3.2984 3.96996 0 4.86166-.9515 4.86166-5.6664V9.91493c0-4.7361-.8704-5.66641-4.64937-5.66641-2.54758 0-3.77892.54973-4.24597 2.51606Zm.02123 5.94122V9.42863c.10615-1.14174.84919-1.69146 2.29282-1.69146 1.95315 0 2.31406.42286 2.31406 2.30463v1.628c0 1.8395-.36091 2.2623-2.31406 2.2623-1.4224 0-2.16544-.4228-2.29282-1.2263Zm10.23281.8035c0 3.4252.7643 4.0384 4.9253 3.9115 1.9956-.0211 3.418-.8035 3.97-2.4949v2.2412h4.0337V8.62519c0-3.70008-.8917-4.37667-5.6259-4.37667h-.9766c-4.9678 0-5.9019.65544-5.9019 4.14409v.50744h4.0337c-.0425-1.45889.3184-1.71261 2.314-1.71261 1.7833 0 2.123.25372 2.123 1.71261v.71887l-4.0337.02114c-4.0973 0-4.8616.61314-4.8616 3.86924Zm4.246.0423c0-.7823.2123-.9303 1.3162-.9303l3.3331-.0212v.5497c0 .9938-.6793 1.3744-2.4627 1.4166h-.2122c-1.656 0-1.9744-.1691-1.9744-1.0148Zm10.0417-.3383c0 3.5309.8917 4.2075 5.5622 4.2075h.9766c5.3499 0 6.3265-.592 6.3265-3.6367 0-1.9451-.4883-3.108-2.5051-3.7-1.104-.31718-2.0805-.5709-4.1611-.90919-1.3799-.21143-1.762-.46515-1.762-.99373 0-.78231.4246-.99374 1.9956-.99374 1.6347 0 2.0805.29601 2.0805 1.33203v.38058h4.0337v-.38058c0-3.61551-.8917-4.27095-5.6259-4.27095h-.9766c-4.8192 0-5.7533.57087-5.7533 3.8058 0 1.69146.4458 2.64288 2.1867 3.31948 1.2738.4863 3.2057.7823 3.9487.9303 1.8682.3383 2.3141.6766 2.3141 1.184 0 .7612-.4883.9726-2.3141.9726-1.9744 0-2.5051-.2748-2.5051-1.2474v-.2749H28.978v.2749Zm14.0967-2.3681c0 5.5396.9765 6.5756 6.1779 6.5756h.9765c5.1589 0 6.1142-.6766 6.1142-4.271h-4.2459c0 1.0784-.3609 1.3109-2.3353 1.3109-2.0593 0-2.4415-.3594-2.4415-2.1989v-.0634h9.1289v-1.9875c0-5.03207-.9766-5.96238-6.2204-5.96238h-.9765c-5.2014 0-6.1779 1.01488-6.1779 6.59668Zm4.2459-1.628v-.06343c0-1.64918.3822-1.96633 2.4415-1.96633 1.9956 0 2.4202.31715 2.4414 2.02976h-4.8829Zm10.9122 7.9499h4.0337V9.83035c0-1.48003.7006-2.22004 2.1017-2.22004 1.6135 0 1.932.31715 1.932 1.96632v7.59047h4.0124l-.0212-7.46361c.0424-1.39546.743-2.09318 2.1017-2.09318 1.6135 0 1.8895.31715 1.8895 1.96632v7.59047h4.0337l-.0212-8.20362c0-3.97494-.7219-4.71496-4.6069-4.71496-2.1443 0-3.4393.90916-3.9063 2.91778-.1699-2.41034-.8705-2.91778-4.0974-2.91778-1.8895 0-2.9722.76116-3.418 2.66406V4.50224h-4.0337V17.1671Zm21.6545-6.3219c0 5.5396.9766 6.5756 6.1991 6.5756h.9766c5.1164 0 6.0717-.6766 6.0717-4.271H88.91c0 1.0784-.3609 1.3109-2.3141 1.3109-2.1017 0-2.4839-.3594-2.4839-2.1989v-.0634h9.1289v-1.9875c0-5.03207-.9766-5.96238-6.1779-5.96238h-.9766c-5.2225 0-6.1991 1.01488-6.1991 6.59668Zm4.2247-1.628v-.06343c0-1.64918.3822-1.96633 2.4839-1.96633 1.9744 0 2.399.31715 2.4202 2.02976H84.112Zm10.891 7.9499h4.0337V9.61892c.0212-1.35317.7642-2.00861 2.2293-2.00861 1.868 0 2.208.35943 2.208 2.30462v7.25217h4.033l-.021-8.20362c0-3.97494-.7-4.71496-4.394-4.71496-2.336 0-3.5671.76116-4.0553 2.81206V4.50224H95.003V17.1671Zm13.545-9.30307h1.252v5.05327c0 3.5732.828 4.2498 5.095 4.2498h2.76v-3.5944h-2.335c-1.253 0-1.486-.2114-1.486-1.2686V7.86403h3.63V4.50224h-3.63V1.77476h-3.821v2.72748h-1.465v3.36179Zm10.636 9.30307h3.63v-3.5944h-3.63v3.5944Z" fill="#EFEFEF"/></svg>

package/src/templates/next-experiments/knip.json

@@ -12,11 +12,13 @@
     "@svgr/webpack",
     "gsap",
     "@gsap/react",
-    "motion"
+    "motion",
+    "detect-gpu",
+    "lodash-es",
+    "@types/lodash-es",
+    "react-device-detect",
+    "zustand"
   ],
-  "ignoreBinaries": [
-    "op",
-    "gh",
-    "vercel"
-  ]
+  "ignoreBinaries": ["op", "gh", "vercel"],
+  "ignoreFiles": [".agents/**", ".claude/**", "hooks/**"]
 }

package/src/templates/next-experiments/lefthook.yml

@@ -14,11 +14,6 @@ pre-commit:
       run: bunx tsgo --noEmit --incremental false
       stage_fixed: false
 
-pre-push:
-  commands:
-    knip:
-      run: bun run knip
-
 post-merge:
   commands:
     install-deps:

package/src/templates/next-pagebuilder/.env.example

@@ -1,6 +1,7 @@
 # ============================================
 # Basement Next Starter - Environment Variables
 # ============================================
+# bsmnt:if dotenvx
 # This project uses dotenvx (https://dotenvx.com): the committed `.env` holds
 # shared values, with secrets encrypted there. The private keys live in
 # `.env.keys` (gitignored) — restore them with `bun run env:setup`.
@@ -15,6 +16,13 @@
 #
 # This file just documents the available variables; real values live in `.env`.
 # ============================================
+# bsmnt:endif
+# bsmnt:if !dotenvx
+# Copy this file to `.env.local` and fill in the values you need.
+# `.env.local` is gitignored, so real values stay off version control.
+# Only NEXT_PUBLIC_* variables are exposed to the browser.
+# ============================================
+# bsmnt:endif
 
 # Base URL
 NEXT_PUBLIC_BASE_URL=

package/src/templates/next-pagebuilder/.github/PULL_REQUEST_TEMPLATE.md

@@ -0,0 +1,13 @@
+## Summary
+
+<!-- Brief description of what this PR does -->
+
+## Changes
+
+- 
+
+## Checklist
+
+- [ ] `bun lint` passes
+- [ ] Tested locally in dev mode
+- [ ] No breaking changes (or documented in summary)

package/src/templates/next-pagebuilder/.github/workflows/ci.yml

@@ -46,6 +46,7 @@ jobs:
       - name: Lint
         run: bun run lint
 
+      # bsmnt:if dotenvx
       # dotenvx needs the private key to decrypt secrets at build time. It's
       # pulled from 1Password via an org-wide service-account token + the op-ref
       # committed in .env. Optional: builds pass without it (only plaintext /
@@ -77,6 +78,20 @@ jobs:
           fi
           bun run build
 
+      # bsmnt:endif
+      # bsmnt:if !dotenvx
+      - name: Build
+        env:
+          # Sanity project ID and dataset are public (they ship in the client
+          # bundle), so they are stored as repository variables. The Sanity read
+          # token is secret — add it under Settings → Secrets and variables →
+          # Actions. All three are empty (and harmless) until Sanity is set up.
+          NEXT_PUBLIC_SANITY_PROJECT_ID: ${{ vars.NEXT_PUBLIC_SANITY_PROJECT_ID }}
+          NEXT_PUBLIC_SANITY_DATASET: ${{ vars.NEXT_PUBLIC_SANITY_DATASET }}
+          SANITY_API_READ_TOKEN: ${{ secrets.SANITY_API_READ_TOKEN }}
+        run: bun run build
+
+      # bsmnt:endif
       # Runs your tests if any exist; a fresh project with none passes cleanly.
       - name: Test
         run: |

package/src/templates/next-pagebuilder/README.md

@@ -21,6 +21,7 @@ bun dev
 - `bun build` - Production build
 - `bun lint` - Run linter
 - `bun sanity:typegen` - Generate Sanity types
+<!-- bsmnt:if dotenvx -->
 - `bun env:set KEY value` - Encrypt one value into `.env` (`--plain`, `--preview`/`--prod`)
 - `bun env:encrypt-all` - Bulk-encrypt every plaintext value in a file (`--preview`/`--prod`)
 - `bun env:setup` - Restore `.env.keys` from 1Password
@@ -28,7 +29,9 @@ bun dev
 - `bun env:setup-remote` - Push private keys to GitHub / Vercel (`github`/`vercel`, or pick)
 - `bun setup-remote` - Create the GitHub repo, link a Vercel project, and push the key to Vercel env
 - `bun env:save` - Save the private key to 1Password (Development vault)
+<!-- bsmnt:endif -->
 
+<!-- bsmnt:if dotenvx -->
 ## Environment variables
 
 Secrets are encrypted at rest with [dotenvx](https://dotenvx.com): the committed `.env` holds encrypted values, the private keys live in `.env.keys` (gitignored), and dev/build run through `dotenvx run` so values decrypt automatically.
@@ -52,6 +55,15 @@ Secrets are encrypted at rest with [dotenvx](https://dotenvx.com): the committed
 
 A gitleaks pre-commit hook + CI scan block committed plaintext secrets (install: `brew install gitleaks`).
 
+<!-- bsmnt:endif -->
+<!-- bsmnt:if !dotenvx -->
+## Environment variables
+
+Copy `.env.example` to `.env.local` and fill in the values you need. `.env.local` is gitignored, so it stays off version control. Only `NEXT_PUBLIC_*` variables are exposed to the browser — everything else is server-only.
+
+For deploys, set the same variables in your host's dashboard (e.g. Vercel → Settings → Environment Variables).
+
+<!-- bsmnt:endif -->
 ## Continuous Integration
 
 A GitHub Actions workflow (`.github/workflows/ci.yml`) runs on every pull request to `main` and on pushes to `main`. It runs type checking, linting, the production build, tests, and `knip`.
@@ -63,8 +75,10 @@ The workflow takes its runtime versions from your manifests, so there's a single
 
 It also caches Bun's install cache between runs, and the test step is a no-op until you add real test files.
 
+<!-- bsmnt:if dotenvx -->
 The build decrypts the committed `.env` with the dotenvx private key, pulled from 1Password: set an **org-level** `OP_SERVICE_ACCOUNT_TOKEN` (a read-only [service account](https://developer.1password.com/docs/service-accounts/) scoped to the `Development` vault) — one secret for every repo — and CI reads the key via the op-ref committed in `.env`. A per-repo `DOTENV_PRIVATE_KEY` secret (`bun run env:setup-remote github`) works as a fallback; builds pass without either (only plaintext / `NEXT_PUBLIC_*` is read).
 
+<!-- bsmnt:endif -->
 ### Sanity environment
 
 The build reads Sanity config from GitHub Actions variables/secrets (empty and harmless until you configure Sanity). Once your repo is on GitHub, the quickest way to set them is:

package/src/templates/next-pagebuilder/app/(content)/[[...slug]]/page.tsx

@@ -14,7 +14,7 @@ import { checkRedirect } from "@/lib/utils/check-redirect"
 import { generateSanityMetadata } from "@/lib/utils/metadata"
 import { getSlugTag } from "@/lib/utils/slug-tag"
 
-const getPageDocument = async (slug: string | null, stega = true) =>
+const getPageDocument = async (slug: string | null, stega?: boolean) =>
   fetchSanity<PAGE_QUERY_RESULT>({
     query: PAGE_QUERY,
     params: { slug },
@@ -27,7 +27,7 @@ const toPath = (segments?: string[]) =>
 
 const getResolvedPage = async (
   path: string | null,
-  stega = true
+  stega?: boolean
 ): Promise<NonNullable<PAGE_QUERY_RESULT> | null> => {
   const { data: page } = await getPageDocument(path, stega)
   return (page as NonNullable<PAGE_QUERY_RESULT> | null) ?? null