create-absolutejs 0.13.11 → 0.14.0

package/README.md

@@ -51,6 +51,13 @@ Usage: create-absolute [project-name] [options]
 - `--angular`  
   Include an Angular frontend.
 
+- `--agentic`
+  Add the provider-neutral agent stack: Agency action enforcement and kill
+  switch, agent auth, MCP Tasks, credential operations, bounded wallet spend,
+  manifest contract 2, and the adversarial conformance harness. The scaffold
+  creates `src/backend/agent.ts` with a deny-by-default policy plus an
+  `AGENTS.md` execution contract.
+
 - `--angular-dir <directory>`  
   Specify the directory for and use the Angular frontend.
 

package/dist/generators/configurations/generatePackageJson.d.ts

@@ -1,8 +1,8 @@
 import type { CreateConfiguration } from '../../types';
-type CreatePackageJsonProps = Pick<CreateConfiguration, 'authOption' | 'useTailwind' | 'databaseEngine' | 'databaseHost' | 'plugins' | 'orm' | 'frontendDirectories' | 'codeQualityTool'> & {
+type CreatePackageJsonProps = Pick<CreateConfiguration, 'authOption' | 'agentic' | 'useTailwind' | 'databaseEngine' | 'databaseHost' | 'plugins' | 'orm' | 'frontendDirectories' | 'codeQualityTool'> & {
     projectName: string;
     latest: boolean;
     repositoryUrl: string | undefined;
 };
-export declare const createPackageJson: ({ projectName, authOption, plugins, databaseEngine, orm, databaseHost, useTailwind, latest, frontendDirectories, codeQualityTool, repositoryUrl }: CreatePackageJsonProps) => Promise<void>;
+export declare const createPackageJson: ({ agentic, projectName, authOption, plugins, databaseEngine, orm, databaseHost, useTailwind, latest, frontendDirectories, codeQualityTool, repositoryUrl }: CreatePackageJsonProps) => Promise<void>;
 export {};

package/dist/generators/configurations/generatePackageJson.js

@@ -16,7 +16,7 @@ const dbClientCommands = {
     postgresql: 'psql -h localhost -U user -d database',
     singlestore: 'singlestore -u root -ppassword -D database'
 };
-export const createPackageJson = async ({ projectName, authOption, plugins, databaseEngine, orm, databaseHost, useTailwind, latest, frontendDirectories, codeQualityTool, repositoryUrl }) => {
+export const createPackageJson = async ({ agentic, projectName, authOption, plugins, databaseEngine, orm, databaseHost, useTailwind, latest, frontendDirectories, codeQualityTool, repositoryUrl }) => {
     const flags = computeFlags(frontendDirectories);
     const isLocal = !databaseHost || databaseHost === 'none';
     /* ── Collect all package names that need versions ─────────── */
@@ -28,6 +28,15 @@ export const createPackageJson = async ({ projectName, authOption, plugins, data
         packageNames.add(dep.value);
     if (authOption === 'abs')
         packageNames.add(absoluteAuthPlugin.value);
+    if (agentic) {
+        packageNames.add('@absolutejs/agency');
+        packageNames.add('@absolutejs/agent-conformance');
+        packageNames.add('@absolutejs/auth');
+        packageNames.add('@absolutejs/manifest');
+        packageNames.add('@absolutejs/mcp');
+        packageNames.add('@absolutejs/secrets');
+        packageNames.add('@absolutejs/wallet');
+    }
     for (const pluginValue of plugins) {
         const meta = availablePlugins.find((p) => p.value === pluginValue);
         if (meta)
@@ -122,6 +131,19 @@ export const createPackageJson = async ({ projectName, authOption, plugins, data
     if (authOption === 'abs') {
         dependencies[absoluteAuthPlugin.value] = resolveVersion(absoluteAuthPlugin.value, absoluteAuthPlugin.latestVersion);
     }
+    if (agentic) {
+        for (const name of [
+            '@absolutejs/agency',
+            '@absolutejs/auth',
+            '@absolutejs/manifest',
+            '@absolutejs/mcp',
+            '@absolutejs/secrets',
+            '@absolutejs/wallet'
+        ]) {
+            dependencies[name] = resolveVersion(name, versions[name]);
+        }
+        devDependencies['@absolutejs/agent-conformance'] = resolveVersion('@absolutejs/agent-conformance', versions['@absolutejs/agent-conformance']);
+    }
     for (const pluginValue of plugins) {
         const meta = availablePlugins.find((p) => p.value === pluginValue);
         if (!meta)

package/dist/generators/project/scaffoldAgentic.d.ts

@@ -0,0 +1,6 @@
+export declare const agentRuntimeSource = "import {\n\tcreateAgency,\n\tcreateAgentControlPlane,\n\tcreateMemoryAgencyStore,\n\tcreateMemoryAgentControlStore,\n\tdenyAllPolicy\n} from '@absolutejs/agency'\n\n// Memory stores are development defaults. Replace them with durable stores\n// before running more than one process or accepting production actions.\nexport const agentControl = createAgentControlPlane({\n\tsources: [],\n\tstore: createMemoryAgentControlStore()\n})\n\n// Intentionally deny-by-default. Replace denyAllPolicy() with your policy\n// decision point only after declaring each action's effects and scopes.\nexport const agency = createAgency({\n\tcontrol: agentControl,\n\tpolicy: denyAllPolicy(),\n\tstore: createMemoryAgencyStore()\n})\n";
+export declare const agentsGuide = "# Agent execution contract\n\nThis project uses the AbsoluteJS provider-neutral agent stack.\n\n- Authenticate agents and bind every delegation to a user with\n  `@absolutejs/auth`. Never treat model-provided identity as authenticated.\n- Route every effectful tool through `agency` in `src/backend/agent.ts`.\n  Approval is exact-input-bound; execution requires a fresh single-use lease.\n- Declare tool effects, scopes, approval policy, idempotency keys,\n  reversibility, destinations, and spend fields in manifest contract 2.\n- Keep raw credentials host-side with `@absolutejs/secrets` credential\n  operations. Agents receive operation results, never secret values.\n- Give agents bounded wallet allowances and signed mandates. The host resolves\n  ledger destinations; an agent never supplies the recipient account id.\n- Bind MCP task handles to the authenticated actor on get, update, and cancel.\n- Run `@absolutejs/agent-conformance` suites for every new action, capability,\n  credential, wallet, and task adapter.\n- Use the control plane kill switch for incident response. It blocks new\n  requests, lease issuance, and execution before downstream revocation fans out.\n\nMemory stores are for local development only. Production stores must be\ndurable and enforce lease/capability consumption atomically.\n";
+export declare const scaffoldAgentic: ({ backendDirectory, projectName }: {
+    backendDirectory: string;
+    projectName: string;
+}) => void;

package/dist/generators/project/scaffoldAgentic.js

@@ -0,0 +1,53 @@
+import { mkdirSync, writeFileSync } from 'fs';
+import { join } from 'path';
+export const agentRuntimeSource = `import {
+	createAgency,
+	createAgentControlPlane,
+	createMemoryAgencyStore,
+	createMemoryAgentControlStore,
+	denyAllPolicy
+} from '@absolutejs/agency'
+
+// Memory stores are development defaults. Replace them with durable stores
+// before running more than one process or accepting production actions.
+export const agentControl = createAgentControlPlane({
+	sources: [],
+	store: createMemoryAgentControlStore()
+})
+
+// Intentionally deny-by-default. Replace denyAllPolicy() with your policy
+// decision point only after declaring each action's effects and scopes.
+export const agency = createAgency({
+	control: agentControl,
+	policy: denyAllPolicy(),
+	store: createMemoryAgencyStore()
+})
+`;
+export const agentsGuide = `# Agent execution contract
+
+This project uses the AbsoluteJS provider-neutral agent stack.
+
+- Authenticate agents and bind every delegation to a user with
+  \`@absolutejs/auth\`. Never treat model-provided identity as authenticated.
+- Route every effectful tool through \`agency\` in \`src/backend/agent.ts\`.
+  Approval is exact-input-bound; execution requires a fresh single-use lease.
+- Declare tool effects, scopes, approval policy, idempotency keys,
+  reversibility, destinations, and spend fields in manifest contract 2.
+- Keep raw credentials host-side with \`@absolutejs/secrets\` credential
+  operations. Agents receive operation results, never secret values.
+- Give agents bounded wallet allowances and signed mandates. The host resolves
+  ledger destinations; an agent never supplies the recipient account id.
+- Bind MCP task handles to the authenticated actor on get, update, and cancel.
+- Run \`@absolutejs/agent-conformance\` suites for every new action, capability,
+  credential, wallet, and task adapter.
+- Use the control plane kill switch for incident response. It blocks new
+  requests, lease issuance, and execution before downstream revocation fans out.
+
+Memory stores are for local development only. Production stores must be
+durable and enforce lease/capability consumption atomically.
+`;
+export const scaffoldAgentic = ({ backendDirectory, projectName }) => {
+    mkdirSync(backendDirectory, { recursive: true });
+    writeFileSync(join(backendDirectory, 'agent.ts'), agentRuntimeSource);
+    writeFileSync(join(projectName, 'AGENTS.md'), agentsGuide);
+};

package/dist/messages.d.ts

@@ -10,5 +10,5 @@ type DebugMessageProps = {
     response: CreateConfiguration;
     packageManager: string;
 };
-export declare const getDebugMessage: ({ response: { projectName, codeQualityTool, directoryConfig, useTailwind, tailwind, frontends, includeExamples, useHTMLScripts, frontendDirectories, buildDirectory, assetsDirectory, databaseEngine, databaseHost, databaseDirectory, orm, authOption, plugins, initializeGitNow, installDependenciesNow }, packageManager }: DebugMessageProps) => string;
+export declare const getDebugMessage: ({ response: { agentic, projectName, codeQualityTool, directoryConfig, useTailwind, tailwind, frontends, includeExamples, useHTMLScripts, frontendDirectories, buildDirectory, assetsDirectory, databaseEngine, databaseHost, databaseDirectory, orm, authOption, plugins, initializeGitNow, installDependenciesNow }, packageManager }: DebugMessageProps) => string;
 export {};

package/dist/messages.js

@@ -12,6 +12,7 @@ Options:
   ${cyan('--debug, -d')}                     Display a summary of the project configuration after creation
 
   ${cyan('--abs-provider')}                  A provider for Absolute-Auth (eg. 'google', 'github', 'discord') the full list is available at https://absolutejs.com/documentation/absolute-auth   
+  ${cyan('--agentic')}                       Add provider-neutral agent auth, actions, MCP, wallet, credential, and conformance scaffolding
   ${cyan('--angular')}                       Include an Angular frontend
   ${cyan('--angular-dir')} ${dim(cyan('<directory>'))}       Specify the directory for and use the Angular frontend
   ${cyan('--assets')} ${dim(cyan('<directory>'))}            Directory name for your static assets
@@ -49,7 +50,7 @@ export const getOutroMessage = ({ projectName, packageManager, installDependenci
     `${cyan('cd')} ${projectName}\n` +
     `${installDependenciesNow ? '' : `${cyan(`${packageManager} install`)}\n`}` +
     `${cyan(`${packageManager} dev`)}`; // TODO: Some package managers need run
-export const getDebugMessage = ({ response: { projectName, codeQualityTool, directoryConfig, useTailwind, tailwind, frontends, includeExamples, useHTMLScripts, frontendDirectories, buildDirectory, assetsDirectory, databaseEngine, databaseHost, databaseDirectory, orm, authOption, plugins, initializeGitNow, installDependenciesNow }, packageManager }) => {
+export const getDebugMessage = ({ response: { agentic, projectName, codeQualityTool, directoryConfig, useTailwind, tailwind, frontends, includeExamples, useHTMLScripts, frontendDirectories, buildDirectory, assetsDirectory, databaseEngine, databaseHost, databaseDirectory, orm, authOption, plugins, initializeGitNow, installDependenciesNow }, packageManager }) => {
     const htmlScriptingValue = useHTMLScripts
         ? blueBright('TypeScript')
         : dim('None');
@@ -63,6 +64,7 @@ export const getDebugMessage = ({ response: { projectName, codeQualityTool, dire
     /* prettier-ignore */
     const lines = [
         ['Project Name', projectName],
+        ['Agent-first Stack', agentic ? green('Yes') : dim('No')],
         ['Package Manager', packageManager],
         ['Config Type', isCustomConfig ? green('Custom') : dim('Default')],
         ['Linting', codeQualityTool === 'eslint+prettier' ? 'ESLint + Prettier' : 'Biome'],

package/dist/prompt.js

@@ -1,4 +1,5 @@
 import { getAuthOption } from './questions/authOption';
+import { getAgentic } from './questions/agentic';
 import { getCodeQualityTool } from './questions/codeQualityTool';
 import { getConfigurationType } from './questions/configurationType';
 import { getDatabaseEngine } from './questions/databaseEngine';
@@ -57,6 +58,9 @@ export const prompt = async (argumentConfiguration) => {
         directoryConfig = 'custom';
     // 12. Auth provider
     const authOption = argumentConfiguration.authOption ?? (await orPrompt('--auth', getAuthOption));
+    // 12b. Agent-first action/auth/MCP/wallet/credential stack
+    const agentic = argumentConfiguration.agentic ??
+        (await orPrompt('--agentic/--no-agentic', getAgentic));
     // 13. Additional plugins
     const plugins = argumentConfiguration.plugins?.filter((plugin) => plugin !== undefined) ?? (await orPrompt('--plugin', getPlugins));
     // 14. Initialize Git repository
@@ -84,6 +88,7 @@ export const prompt = async (argumentConfiguration) => {
     const installDependenciesNow = argumentConfiguration.installDependenciesNow ??
         (await orPrompt('--install/--no-install', getInstallDependencies));
     const values = {
+        agentic,
         absProviders: argumentConfiguration.absProviders?.filter((provider) => provider !== undefined),
         assetsDirectory,
         authOption,

package/dist/questions/agentic.d.ts

@@ -0,0 +1 @@
+export declare const getAgentic: () => Promise<boolean>;

package/dist/questions/agentic.js

@@ -0,0 +1,11 @@
+import { confirm, isCancel } from '@clack/prompts';
+import { abort } from '../utils/abort';
+export const getAgentic = async () => {
+    const agentic = await confirm({
+        initialValue: false,
+        message: 'Add the agent-first stack (auth, actions, MCP, wallet, credentials, and conformance)?'
+    });
+    if (isCancel(agentic))
+        abort();
+    return agentic;
+};

package/dist/scaffold.d.ts

@@ -5,7 +5,7 @@ type ScaffoldProps = {
     latest: boolean;
     envVariables: string[] | undefined;
 };
-export declare const scaffold: ({ response: { projectName, codeQualityTool, initializeGitNow, githubLink, githubRepoUrl, githubVisibility, databaseEngine, databaseHost, useHTMLScripts, useTailwind, databaseDirectory, absProviders, includeExamples, orm, frontends, plugins, authOption, buildDirectory, assetsDirectory, tailwind, installDependenciesNow, frontendDirectories }, latest, envVariables, packageManager }: ScaffoldProps) => Promise<{
+export declare const scaffold: ({ response: { agentic, projectName, codeQualityTool, initializeGitNow, githubLink, githubRepoUrl, githubVisibility, databaseEngine, databaseHost, useHTMLScripts, useTailwind, databaseDirectory, absProviders, includeExamples, orm, frontends, plugins, authOption, buildDirectory, assetsDirectory, tailwind, installDependenciesNow, frontendDirectories }, latest, envVariables, packageManager }: ScaffoldProps) => Promise<{
     dockerFreshInstall: boolean;
 }>;
 export {};

package/dist/scaffold.js

@@ -10,7 +10,8 @@ import { scaffoldConfigurationFiles } from './generators/configurations/scaffold
 import { scaffoldDatabase } from './generators/db/scaffoldDatabase';
 import { scaffoldBackend } from './generators/project/scaffoldBackend';
 import { scaffoldFrontends } from './generators/project/scaffoldFrontends';
-export const scaffold = async ({ response: { projectName, codeQualityTool, initializeGitNow, githubLink, githubRepoUrl, githubVisibility, databaseEngine, databaseHost, useHTMLScripts, useTailwind, databaseDirectory, absProviders, includeExamples, orm, frontends, plugins, authOption, buildDirectory, assetsDirectory, tailwind, installDependenciesNow, frontendDirectories }, latest, envVariables, packageManager }) => {
+import { scaffoldAgentic } from './generators/project/scaffoldAgentic';
+export const scaffold = async ({ response: { agentic, projectName, codeQualityTool, initializeGitNow, githubLink, githubRepoUrl, githubVisibility, databaseEngine, databaseHost, useHTMLScripts, useTailwind, databaseDirectory, absProviders, includeExamples, orm, frontends, plugins, authOption, buildDirectory, assetsDirectory, tailwind, installDependenciesNow, frontendDirectories }, latest, envVariables, packageManager }) => {
     const __dirname = dirname(fileURLToPath(import.meta.url));
     const templatesDirectory = join(__dirname, '/templates');
     const { frontendDirectory, backendDirectory, projectAssetsDirectory, typesDirectory } = initalizeRoot(projectName, templatesDirectory);
@@ -27,6 +28,7 @@ export const scaffold = async ({ response: { projectName, codeQualityTool, initi
         templatesDirectory
     });
     await createPackageJson({
+        agentic,
         authOption,
         codeQualityTool,
         databaseEngine,
@@ -53,6 +55,8 @@ export const scaffold = async ({ response: { projectName, codeQualityTool, initi
         publicDirectory: 'public',
         tailwind
     });
+    if (agentic)
+        scaffoldAgentic({ backendDirectory, projectName });
     let dockerFreshInstall = false;
     if (databaseDirectory !== undefined &&
         databaseEngine !== 'none' &&

package/dist/types.d.ts

@@ -43,6 +43,7 @@ export type TailwindConfig = {
 } | undefined;
 export type GithubLinkOption = 'existing' | 'create' | 'skip';
 export type CreateConfiguration = {
+    agentic: boolean;
     absProviders: ProviderOption[] | undefined;
     assetsDirectory: string;
     authOption: AuthOption;

package/dist/utils/parseCommandLineOptions.js

@@ -12,6 +12,7 @@ export const parseCommandLineOptions = () => {
         args: argv.slice(DEFAULT_ARG_LENGTH),
         options: {
             'abs-provider': { multiple: true, type: 'string' },
+            agentic: { type: 'boolean' },
             angular: { type: 'boolean' },
             'angular-dir': { type: 'string' },
             assets: { type: 'string' },
@@ -250,6 +251,7 @@ export const parseCommandLineOptions = () => {
         ? repoVisibility
         : undefined;
     const argumentConfiguration = {
+        agentic: values.agentic ?? (values.skip ? false : undefined),
         absProviders: absProviders.length ? absProviders : undefined,
         assetsDirectory: values.assets,
         authOption,

package/dist/versions.d.ts

@@ -5,7 +5,13 @@
  */
 export declare const versions: {
     readonly '@absolutejs/absolute': "0.19.0-beta.1081";
-    readonly '@absolutejs/auth': "0.22.7";
+    readonly '@absolutejs/agency': "0.2.0";
+    readonly '@absolutejs/agent-conformance': "0.1.0";
+    readonly '@absolutejs/auth': "0.54.6";
+    readonly '@absolutejs/manifest': "0.2.0";
+    readonly '@absolutejs/mcp': "0.5.0";
+    readonly '@absolutejs/secrets': "0.6.0";
+    readonly '@absolutejs/wallet': "0.2.0";
     readonly '@angular/common': "21.2.0";
     readonly '@angular/compiler': "21.2.0";
     readonly '@angular/compiler-cli': "21.2.0";

package/dist/versions.js

@@ -6,7 +6,13 @@
 export const versions = {
     /* ── Core ─────────────────────────────────────────────── */
     '@absolutejs/absolute': '0.19.0-beta.1081',
-    '@absolutejs/auth': '0.22.7',
+    '@absolutejs/agency': '0.2.0',
+    '@absolutejs/agent-conformance': '0.1.0',
+    '@absolutejs/auth': '0.54.6',
+    '@absolutejs/manifest': '0.2.0',
+    '@absolutejs/mcp': '0.5.0',
+    '@absolutejs/secrets': '0.6.0',
+    '@absolutejs/wallet': '0.2.0',
     /* ── Angular ─────────────────────────────────────────── */
     '@angular/common': '21.2.0',
     '@angular/compiler': '21.2.0',

package/package.json

@@ -4,7 +4,7 @@
 		"create-absolutejs": "dist/index.js"
 	},
 	"dependencies": {
-		"@absolutejs/auth": "0.22.0",
+		"@absolutejs/auth": "0.54.6",
 		"@clack/prompts": "1.0.0",
 		"picocolors": "1.1.1"
 	},
@@ -47,10 +47,12 @@
 		"dev": "bun scripts/dev.ts",
 		"format": "absolute prettier --write",
 		"lint": "absolute eslint --ignore-pattern 'absolutejs-project/**'",
-		"release": "bun run format && bun run build && bun publish",
+		"release": "bun run format && bun run check:package && bun publish",
 		"test": "cd absolutejs-project && bun dev",
+		"test:unit": "bun test tests/",
+		"check:package": "bun run typecheck && bun run test:unit && bun run build",
 		"typecheck": "bun run tsc --noEmit"
 	},
 	"type": "module",
-	"version": "0.13.11"
+	"version": "0.14.0"
 }