create-astram-app 0.1.2 → 0.2.0

package/dist/add-frontend.js

@@ -0,0 +1,107 @@
+#!/usr/bin/env node
+/**
+ * `astram-add-frontend` — additive frontend installer for an EXISTING Astram app
+ * (ADR-0023 §3, Task B8).
+ *
+ *   cd my-existing-app
+ *   npx astram-add-frontend
+ *
+ * This is the SECOND delivery path for `template/frontend/` (the Vite/React
+ * identity UI) alongside `create-astram-app <name> --with-frontend` (Task B7,
+ * which emits it at scaffold time for a BRAND NEW app). `astram-add-frontend`
+ * targets an app that was scaffolded earlier WITHOUT `--with-frontend`, or any
+ * existing directory a developer wants to bolt the identity UI onto later.
+ *
+ * Copies `template/frontend/` → `<cwd>/frontend/` using the EXACT same
+ * `copyTemplate` skip-if-exists semantics as the main scaffolder (imported from
+ * `./index.js`, not re-implemented): existing files are NEVER overwritten, so
+ * re-running this bin after the developer has edited `frontend/` is always safe
+ * — it only adds files that are still missing (e.g. a newer template picked up
+ * a file this app doesn't have yet).
+ */
+import { existsSync, readFileSync, realpathSync } from 'node:fs';
+import { basename, join, resolve } from 'node:path';
+import { fileURLToPath, pathToFileURL } from 'node:url';
+import { copyTemplate, templateDir } from './index.js';
+/**
+ * The app name substituted into `__APP_NAME__` tokens in the copied frontend
+ * files (`package.json` name, `<title>`, comments — see `template/frontend/`).
+ * Resolved from the CURRENT DIRECTORY'S OWN `package.json` `name` field when
+ * present (this is an EXISTING app being extended, not a fresh scaffold), else
+ * falls back to the directory's basename.
+ */
+export function resolveAppName(cwd) {
+    const pkgPath = join(cwd, 'package.json');
+    if (existsSync(pkgPath)) {
+        try {
+            const pkg = JSON.parse(readFileSync(pkgPath, 'utf8'));
+            if (typeof pkg.name === 'string' && pkg.name.trim().length > 0) {
+                return pkg.name.trim();
+            }
+        }
+        catch {
+            // Malformed/unreadable package.json — fall through to the directory name
+            // rather than failing the whole add-frontend run over a cosmetic token.
+        }
+    }
+    return basename(cwd);
+}
+/**
+ * Add `frontend/` to the app rooted at `cwd` (default `process.cwd()`). Returns
+ * the target dir + copy report. Exported for tests (which pass an explicit
+ * `cwd`), mirroring `scaffold()` in `index.ts`.
+ */
+export function addFrontend(cwd = process.cwd()) {
+    const appName = resolveAppName(cwd);
+    const targetDir = resolve(cwd, 'frontend');
+    const report = { written: [], skipped: [] };
+    copyTemplate(join(templateDir(), 'frontend'), targetDir, appName, report, 'frontend');
+    return { targetDir, report };
+}
+/** Entry point. Returns a process exit code (0 ok, non-zero on error). */
+export function main() {
+    let result;
+    try {
+        result = addFrontend(process.cwd());
+    }
+    catch (err) {
+        console.error(`astram-add-frontend: ${err.message}`);
+        return 1;
+    }
+    const { report } = result;
+    console.log('\nAdded frontend/ (Vite/React identity UI) to this app.');
+    console.log(`  ${report.written.length} file(s) written.`);
+    if (report.skipped.length > 0) {
+        console.log(`  ${report.skipped.length} existing file(s) left untouched (never-clobber): ${report.skipped.join(', ')}`);
+    }
+    console.log('\nNext steps:');
+    console.log('  cd frontend');
+    console.log('  npm install');
+    console.log('  npm run dev        # boots the identity UI (login, session)');
+    console.log('');
+    return 0;
+}
+// Run ONLY when this module is the process entry point (i.e. executed as the
+// CLI), NOT when imported by a test. Identical symlink-safe realpath check to
+// `index.ts`'s `isInvokedAsCli()`: `npx`/npm run a `bin` through a SYMLINK, so
+// `process.argv[1]` is the symlink path, not this real dist file — resolve
+// (realpath) before comparing, or the CLI silently no-ops under npx. When
+// imported by a test, argv[1] is the test runner, resolving to a different
+// real file → correctly skips.
+function isInvokedAsCli() {
+    const entry = process.argv[1];
+    if (entry === undefined)
+        return false;
+    const thisFile = fileURLToPath(import.meta.url);
+    try {
+        return realpathSync(entry) === realpathSync(thisFile);
+    }
+    catch {
+        // If either path can't be realpath'd, fall back to a direct compare.
+        return pathToFileURL(entry).href === import.meta.url;
+    }
+}
+if (isInvokedAsCli()) {
+    process.exitCode = main();
+}
+//# sourceMappingURL=add-frontend.js.map

package/dist/add-frontend.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"add-frontend.js","sourceRoot":"","sources":["../src/add-frontend.ts"],"names":[],"mappings":";AACA;;;;;;;;;;;;;;;;;;;GAmBG;AAEH,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACjE,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpD,OAAO,EAAE,aAAa,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AACxD,OAAO,EAAE,YAAY,EAAE,WAAW,EAAmB,MAAM,YAAY,CAAC;AAExE;;;;;;GAMG;AACH,MAAM,UAAU,cAAc,CAAC,GAAW;IACxC,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,EAAE,cAAc,CAAC,CAAC;IAC1C,IAAI,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;QACxB,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,OAAO,EAAE,MAAM,CAAC,CAAuB,CAAC;YAC5E,IAAI,OAAO,GAAG,CAAC,IAAI,KAAK,QAAQ,IAAI,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBAC/D,OAAO,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;YACzB,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,yEAAyE;YACzE,wEAAwE;QAC1E,CAAC;IACH,CAAC;IACD,OAAO,QAAQ,CAAC,GAAG,CAAC,CAAC;AACvB,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,WAAW,CAAC,MAAc,OAAO,CAAC,GAAG,EAAE;IACrD,MAAM,OAAO,GAAG,cAAc,CAAC,GAAG,CAAC,CAAC;IACpC,MAAM,SAAS,GAAG,OAAO,CAAC,GAAG,EAAE,UAAU,CAAC,CAAC;IAC3C,MAAM,MAAM,GAAe,EAAE,OAAO,EAAE,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC;IAExD,YAAY,CAAC,IAAI,CAAC,WAAW,EAAE,EAAE,UAAU,CAAC,EAAE,SAAS,EAAE,OAAO,EAAE,MAAM,EAAE,UAAU,CAAC,CAAC;IAEtF,OAAO,EAAE,SAAS,EAAE,MAAM,EAAE,CAAC;AAC/B,CAAC;AAED,0EAA0E;AAC1E,MAAM,UAAU,IAAI;IAClB,IAAI,MAAiD,CAAC;IACtD,IAAI,CAAC;QACH,MAAM,GAAG,WAAW,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC;IACtC,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,CAAC,KAAK,CAAC,wBAAyB,GAAa,CAAC,OAAO,EAAE,CAAC,CAAC;QAChE,OAAO,CAAC,CAAC;IACX,CAAC;IACD,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,CAAC;IAE1B,OAAO,CAAC,GAAG,CAAC,yDAAyD,CAAC,CAAC;IACvE,OAAO,CAAC,GAAG,CAAC,KAAK,MAAM,CAAC,OAAO,CAAC,MAAM,mBAAmB,CAAC,CAAC;IAC3D,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC9B,OAAO,CAAC,GAAG,CACT,KAAK,MAAM,CAAC,OAAO,CAAC,MAAM,qDAAqD,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAC3G,CAAC;IACJ,CAAC;IACD,OAAO,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC;IAC7B,OAAO,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC;IAC7B,OAAO,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC;IAC7B,OAAO,CAAC,GAAG,CAAC,+DAA+D,CAAC,CAAC;IAC7E,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAEhB,OAAO,CAAC,CAAC;AACX,CAAC;AAED,6EAA6E;AAC7E,8EAA8E;AAC9E,+EAA+E;AAC/E,2EAA2E;AAC3E,0EAA0E;AAC1E,2EAA2E;AAC3E,+BAA+B;AAC/B,SAAS,cAAc;IACrB,MAAM,KAAK,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAC9B,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,KAAK,CAAC;IACtC,MAAM,QAAQ,GAAG,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAChD,IAAI,CAAC;QACH,OAAO,YAAY,CAAC,KAAK,CAAC,KAAK,YAAY,CAAC,QAAQ,CAAC,CAAC;IACxD,CAAC;IAAC,MAAM,CAAC;QACP,qEAAqE;QACrE,OAAO,aAAa,CAAC,KAAK,CAAC,CAAC,IAAI,KAAK,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC;IACvD,CAAC;AACH,CAAC;AACD,IAAI,cAAc,EAAE,EAAE,CAAC;IACrB,OAAO,CAAC,QAAQ,GAAG,IAAI,EAAE,CAAC;AAC5B,CAAC"}

package/dist/index.js

@@ -2,7 +2,8 @@
 /**
  * `create-astram-app` — the Astram app scaffolder (ADR-0023 §3).
  *
- *   npx create-astram-app <name>
+ *   npx create-astram-app <name>                    # server/ only
+ *   npx create-astram-app <name> --with-frontend     # + frontend/ (identity UI)
  *
  * Emits a NEW consumer app directory that depends on the published, immutable
  * framework packages (`@astram/core`, `@astram/guard`, `@astram/sdk`) via real
@@ -21,12 +22,20 @@
  * Reference skeleton: `examples/example-backend/` in the astram-framework repo.
  */
 import { cpSync, existsSync, mkdirSync, readdirSync, readFileSync, realpathSync, statSync, writeFileSync } from 'node:fs';
-import { dirname, join, resolve } from 'node:path';
+import { basename, dirname, join, resolve } from 'node:path';
 import { fileURLToPath, pathToFileURL } from 'node:url';
 /** Token substituted with the app name at copy time (in package.json name, README title, …). */
 const APP_NAME_TOKEN = '__APP_NAME__';
-/** Directory (inside the published package) that holds the emitted app template. */
-function templateDir() {
+/**
+ * Directory (inside the published package) that holds the emitted app template.
+ * Resolved relative to THIS file's own compiled location, NOT the caller's —
+ * safe to import from a sibling bin (e.g. `add-frontend.ts`, Task B8) because
+ * both compile into the SAME `dist/` directory, so `dist/index.js/../template`
+ * and `dist/add-frontend.js/../template` are identical. Exported so sibling
+ * bins reuse this exact path-math instead of duplicating (and risking drift
+ * from) it.
+ */
+export function templateDir() {
     // dist/index.js → ../template (bundled via the package's `files` field).
     const here = dirname(fileURLToPath(import.meta.url));
     return resolve(here, '..', 'template');
@@ -59,15 +68,42 @@ export function validateAppName(name) {
     return null;
 }
 const USAGE = [
-    'Usage: create-astram-app <name>',
+    'Usage: create-astram-app <name> [--with-frontend]',
     '',
     'Scaffolds a new Astram consumer app that depends on the published framework',
     '(@astram/core, @astram/guard, @astram/sdk) and enforces deny-by-default from',
     'the first boot.',
     '',
+    '  --with-frontend   Also scaffold frontend/ (Vite/React identity UI).',
+    '                    Without this flag, only server/ is scaffolded.',
+    '',
     'Example:',
     '  npx create-astram-app my-app',
+    '  npx create-astram-app my-app --with-frontend',
 ].join('\n');
+/**
+ * Copy a SINGLE template file `srcPath` → `destPath` (never a directory),
+ * substituting {@link APP_NAME_TOKEN} in text file CONTENTS, and NEVER
+ * overwriting a file that already exists at the destination (spec §3.1 —
+ * never clobber developer-authored files). `rel` is the path relative to the
+ * template root, recorded in `report.written`/`report.skipped`.
+ */
+function copyTemplateFile(srcPath, destPath, appName, report, rel) {
+    if (existsSync(destPath)) {
+        // Never-clobber: leave the developer's file exactly as-is.
+        report.skipped.push(rel);
+        return;
+    }
+    const raw = readFileSync(srcPath);
+    if (isTextFile(basename(srcPath))) {
+        const substituted = raw.toString('utf8').split(APP_NAME_TOKEN).join(appName);
+        writeFileSync(destPath, substituted, 'utf8');
+    }
+    else {
+        cpSync(srcPath, destPath);
+    }
+    report.written.push(rel);
+}
 /**
  * Recursively copy `srcDir` → `destDir`, substituting {@link APP_NAME_TOKEN} in
  * text file CONTENTS, and NEVER overwriting a file that already exists at the
@@ -75,8 +111,14 @@ const USAGE = [
  * are created as needed; only missing files are written.
  *
  * `relBase` accumulates the path relative to the template root for reporting.
+ *
+ * Exported so sibling bins (e.g. `add-frontend.ts`, Task B8) reuse this EXACT
+ * copy semantics — skip-if-exists / never-clobber / __APP_NAME__ substitution —
+ * for a single-subtree copy (`template/frontend` → `<cwd>/frontend`) instead of
+ * a full app scaffold, without re-implementing (and risking drift from) the
+ * never-clobber contract.
  */
-function copyTemplate(srcDir, destDir, appName, report, relBase = '') {
+export function copyTemplate(srcDir, destDir, appName, report, relBase = '') {
     mkdirSync(destDir, { recursive: true });
     for (const entry of readdirSync(srcDir, { withFileTypes: true })) {
         const srcPath = join(srcDir, entry.name);
@@ -90,31 +132,30 @@ function copyTemplate(srcDir, destDir, appName, report, relBase = '') {
             copyTemplate(srcPath, destPath, appName, report, rel);
             continue;
         }
-        if (existsSync(destPath)) {
-            // Never-clobber: leave the developer's file exactly as-is.
-            report.skipped.push(rel);
-            continue;
-        }
-        const raw = readFileSync(srcPath);
-        if (isTextFile(entry.name)) {
-            const substituted = raw.toString('utf8').split(APP_NAME_TOKEN).join(appName);
-            writeFileSync(destPath, substituted, 'utf8');
-        }
-        else {
-            cpSync(srcPath, destPath);
-        }
-        report.written.push(rel);
+        copyTemplateFile(srcPath, destPath, appName, report, rel);
     }
 }
 /** Text extensions that get token substitution + utf8 handling. */
 function isTextFile(fileName) {
     return /\.(json|ts|js|mjs|cjs|md|txt|example|yml|yaml|gitignore)$/i.test(fileName) || fileName.startsWith('_');
 }
+/**
+ * Names of the template's top-level SUBTREES that are copied separately (not
+ * via the generic root-level pass below), because each is independently
+ * gated: `server/` is always emitted, `frontend/` only with `--with-frontend`.
+ */
+const TEMPLATE_SUBTREES = ['server', 'frontend'];
 /**
  * Scaffold `appName` into `<cwd>/<appName>`. Returns the copy report + resolved
  * target dir. Exported for tests (which pass an explicit `cwd`).
+ *
+ * `withFrontend` gates the `template/frontend/` → `<app>/frontend/` copy — the
+ * scaffolded app is server-only by default; `--with-frontend` (CLI) or
+ * `withFrontend: true` (programmatic) also emits the Vite/React identity UI.
+ * `server/` and the app-root files (`.astram/guide/`, `CLAUDE.md`, `.gitignore`,
+ * `README.md`) are unconditional either way — unchanged from prior behavior.
  */
-export function scaffold(appName, cwd = process.cwd()) {
+export function scaffold(appName, cwd = process.cwd(), withFrontend = false) {
     const targetDir = resolve(cwd, appName);
     const report = { written: [], skipped: [] };
     if (existsSync(targetDir)) {
@@ -125,12 +166,56 @@ export function scaffold(appName, cwd = process.cwd()) {
         // Existing dir is allowed — copyTemplate skips any file that already exists,
         // so developer-authored docs/, .astram/guide/, README, etc. survive untouched.
     }
-    copyTemplate(templateDir(), targetDir, appName, report);
+    const template = templateDir();
+    // The generic per-directory copyTemplate() calls always mkdirSync their own
+    // destDir first; the app root itself needs the same treatment since
+    // root-level FILES (e.g. CLAUDE.md) are written directly into targetDir
+    // below without going through copyTemplate.
+    mkdirSync(targetDir, { recursive: true });
+    // App-root files/dirs (.astram/guide/, CLAUDE.md, .gitignore, README.md, …) —
+    // everything directly under template/ EXCEPT the independently-gated
+    // server/ and frontend/ subtrees, which are copied below. Dispatch by dirent
+    // type: a directory recurses via copyTemplate; a plain file (e.g. CLAUDE.md)
+    // copies via copyTemplateFile directly — copyTemplate always treats its
+    // srcDir arg as a directory, so calling it on a FILE path throws ENOTDIR.
+    for (const entry of readdirSync(template, { withFileTypes: true })) {
+        if (TEMPLATE_SUBTREES.includes(entry.name))
+            continue;
+        const srcPath = join(template, entry.name);
+        const destName = entry.name.startsWith('_') ? `.${entry.name.slice(1)}` : entry.name;
+        const destPath = join(targetDir, destName);
+        if (entry.isDirectory()) {
+            copyTemplate(srcPath, destPath, appName, report, destName);
+        }
+        else {
+            copyTemplateFile(srcPath, destPath, appName, report, destName);
+        }
+    }
+    // server/ — always scaffolded (unchanged prior behavior).
+    copyTemplate(join(template, 'server'), join(targetDir, 'server'), appName, report, 'server');
+    // frontend/ — opt-in via --with-frontend (Task B7). Previously this was
+    // copied unconditionally as part of the wholesale template/ copy; it is now
+    // gated so a plain `create-astram-app <name>` stays server-only.
+    if (withFrontend) {
+        copyTemplate(join(template, 'frontend'), join(targetDir, 'frontend'), appName, report, 'frontend');
+    }
     return { targetDir, report };
 }
+/** Long-form boolean flags this CLI recognizes (anywhere in argv). */
+const WITH_FRONTEND_FLAG = '--with-frontend';
+/**
+ * The app name is the first argv entry that is NOT a recognized `--flag` —
+ * robust to `--with-frontend` appearing before OR after the name
+ * (`create-astram-app --with-frontend my-app` and
+ * `create-astram-app my-app --with-frontend` both work).
+ */
+function parseAppName(argv) {
+    return argv.find((arg) => !arg.startsWith('--'));
+}
 /** Entry point. Returns a process exit code (0 ok, non-zero on error). */
 export function main(argv = process.argv.slice(2)) {
-    const name = argv[0];
+    const name = parseAppName(argv);
+    const withFrontend = argv.includes(WITH_FRONTEND_FLAG);
     const validationError = validateAppName(name);
     if (validationError) {
         console.error(`create-astram-app: ${validationError}\n`);
@@ -140,7 +225,7 @@ export function main(argv = process.argv.slice(2)) {
     const appName = name.trim();
     let report;
     try {
-        ({ report } = scaffold(appName));
+        ({ report } = scaffold(appName, process.cwd(), withFrontend));
     }
     catch (err) {
         console.error(`create-astram-app: ${err.message}`);
@@ -152,20 +237,34 @@ export function main(argv = process.argv.slice(2)) {
     if (report.skipped.length > 0) {
         console.log(`  ${report.skipped.length} existing file(s) left untouched (never-clobber): ${report.skipped.join(', ')}`);
     }
-    console.log('\nWhat you got:');
-    console.log('  • A running, framework-ENFORCED NestJS app — every route is denied by');
-    console.log('    default (ADR-0002) unless you classify it with @Public()/@Classified().');
-    console.log('  • The framework installed as immutable dependencies (@astram/core,');
-    console.log('    @astram/guard, @astram/sdk) — you never edit it; upgrade via `npm update`.');
-    console.log('  • An empty src/features/ — your editable space. Add a feature by writing a');
-    console.log('    Nest module/controller there and registering it in src/app.module.ts.');
+    console.log('\nWhat you got (a monorepo):');
+    console.log('  • server/  — a running, framework-ENFORCED NestJS API. Every route is denied');
+    console.log('    by default (ADR-0002) unless you classify it @Public()/@Classified().');
+    if (withFrontend) {
+        console.log('  • frontend/ — a Vite/React identity UI (login, session) wired to the API.');
+    }
+    else {
+        console.log('  • frontend/ — NOT scaffolded (pass --with-frontend to also emit the Vite/React');
+        console.log('    identity UI). You can still add any UI framework yourself later.');
+    }
+    console.log('  • The framework installed in server/ as immutable dependencies (@astram/core,');
+    console.log('    @astram/guard, @astram/engine, @astram/sdk) — you never edit it; upgrade via');
+    console.log('    `npm update`.');
+    console.log('  • server/src/features/ — your editable API space. Add a feature by writing a');
+    console.log('    Nest module/controller there and registering it in server/src/app.module.ts.');
     console.log('  • .astram/guide/ — your own, upgrade-safe project-rules space (ADR-0025).');
     console.log('\n  (A turnkey login/session boilerplate ships in a later framework release;');
     console.log('   today the app gives you correct-by-default ENFORCEMENT out of the box.)');
     console.log('\nNext steps:');
-    console.log(`  cd ${appName}`);
+    console.log(`  cd ${appName}/server`);
     console.log('  npm install');
-    console.log('  npm run dev        # boots the app; GET /health → 200, unclassified → 403');
+    console.log('  npm run dev        # boots the API; GET /health → 200, unclassified → 403');
+    if (withFrontend) {
+        console.log('');
+        console.log(`  cd ${appName}/frontend`);
+        console.log('  npm install');
+        console.log('  npm run dev        # boots the identity UI (login, session)');
+    }
     console.log('');
     return 0;
 }

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";AACA;;;;;;;;;;;;;;;;;;;;GAoBG;AAEH,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,SAAS,EAAE,WAAW,EAAE,YAAY,EAAE,YAAY,EAAE,QAAQ,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AAC1H,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACnD,OAAO,EAAE,aAAa,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AAExD,gGAAgG;AAChG,MAAM,cAAc,GAAG,cAAc,CAAC;AAEtC,oFAAoF;AACpF,SAAS,WAAW;IAClB,yEAAyE;IACzE,MAAM,IAAI,GAAG,OAAO,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;IACrD,OAAO,OAAO,CAAC,IAAI,EAAE,IAAI,EAAE,UAAU,CAAC,CAAC;AACzC,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,eAAe,CAAC,IAAwB;IACtD,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACtC,OAAO,yBAAyB,CAAC;IACnC,CAAC;IACD,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;IAC5B,IAAI,OAAO,KAAK,IAAI,EAAE,CAAC;QACrB,OAAO,wDAAwD,IAAI,GAAG,CAAC;IACzE,CAAC;IACD,IAAI,OAAO,KAAK,GAAG,IAAI,OAAO,KAAK,IAAI,EAAE,CAAC;QACxC,OAAO,kCAAkC,CAAC;IAC5C,CAAC;IACD,IAAI,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;QAC1B,OAAO,+DAA+D,IAAI,GAAG,CAAC;IAChF,CAAC;IACD,IAAI,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;QAC5B,OAAO,wCAAwC,IAAI,GAAG,CAAC;IACzD,CAAC;IACD,gDAAgD;IAChD,IAAI,CAAC,mBAAmB,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;QACvC,OAAO,mEAAmE,IAAI,GAAG,CAAC;IACpF,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,KAAK,GAAG;IACZ,iCAAiC;IACjC,EAAE;IACF,6EAA6E;IAC7E,8EAA8E;IAC9E,iBAAiB;IACjB,EAAE;IACF,UAAU;IACV,gCAAgC;CACjC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAQb;;;;;;;GAOG;AACH,SAAS,YAAY,CACnB,MAAc,EACd,OAAe,EACf,OAAe,EACf,MAAkB,EAClB,OAAO,GAAG,EAAE;IAEZ,SAAS,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACxC,KAAK,MAAM,KAAK,IAAI,WAAW,CAAC,MAAM,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC;QACjE,MAAM,OAAO,GAAG,IAAI,CAAC,MAAM,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;QACzC,4EAA4E;QAC5E,4EAA4E;QAC5E,6EAA6E;QAC7E,MAAM,QAAQ,GAAG,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC;QACrF,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;QACzC,MAAM,GAAG,GAAG,OAAO,CAAC,CAAC,CAAC,GAAG,OAAO,IAAI,QAAQ,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC;QAE1D,IAAI,KAAK,CAAC,WAAW,EAAE,EAAE,CAAC;YACxB,YAAY,CAAC,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,EAAE,GAAG,CAAC,CAAC;YACtD,SAAS;QACX,CAAC;QAED,IAAI,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;YACzB,2DAA2D;YAC3D,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YACzB,SAAS;QACX,CAAC;QAED,MAAM,GAAG,GAAG,YAAY,CAAC,OAAO,CAAC,CAAC;QAClC,IAAI,UAAU,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;YAC3B,MAAM,WAAW,GAAG,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YAC7E,aAAa,CAAC,QAAQ,EAAE,WAAW,EAAE,MAAM,CAAC,CAAC;QAC/C,CAAC;aAAM,CAAC;YACN,MAAM,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;QAC5B,CAAC;QACD,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAC3B,CAAC;AACH,CAAC;AAED,mEAAmE;AACnE,SAAS,UAAU,CAAC,QAAgB;IAClC,OAAO,4DAA4D,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,QAAQ,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC;AACjH,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,QAAQ,CAAC,OAAe,EAAE,MAAc,OAAO,CAAC,GAAG,EAAE;IACnE,MAAM,SAAS,GAAG,OAAO,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;IACxC,MAAM,MAAM,GAAe,EAAE,OAAO,EAAE,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC;IAExD,IAAI,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;QAC1B,MAAM,IAAI,GAAG,QAAQ,CAAC,SAAS,CAAC,CAAC;QACjC,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,EAAE,CAAC;YACxB,MAAM,IAAI,KAAK,CAAC,WAAW,OAAO,iCAAiC,CAAC,CAAC;QACvE,CAAC;QACD,6EAA6E;QAC7E,+EAA+E;IACjF,CAAC;IAED,YAAY,CAAC,WAAW,EAAE,EAAE,SAAS,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC;IACxD,OAAO,EAAE,SAAS,EAAE,MAAM,EAAE,CAAC;AAC/B,CAAC;AAED,0EAA0E;AAC1E,MAAM,UAAU,IAAI,CAAC,OAAiB,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;IACzD,MAAM,IAAI,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;IAErB,MAAM,eAAe,GAAG,eAAe,CAAC,IAAI,CAAC,CAAC;IAC9C,IAAI,eAAe,EAAE,CAAC;QACpB,OAAO,CAAC,KAAK,CAAC,sBAAsB,eAAe,IAAI,CAAC,CAAC;QACzD,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QACrB,OAAO,CAAC,CAAC;IACX,CAAC;IAED,MAAM,OAAO,GAAI,IAAe,CAAC,IAAI,EAAE,CAAC;IAExC,IAAI,MAAkB,CAAC;IACvB,IAAI,CAAC;QACH,CAAC,EAAE,MAAM,EAAE,GAAG,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC;IACnC,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,CAAC,KAAK,CAAC,sBAAuB,GAAa,CAAC,OAAO,EAAE,CAAC,CAAC;QAC9D,OAAO,CAAC,CAAC;IACX,CAAC;IAED,sDAAsD;IACtD,OAAO,CAAC,GAAG,CAAC,sCAAsC,OAAO,EAAE,CAAC,CAAC;IAC7D,OAAO,CAAC,GAAG,CAAC,KAAK,MAAM,CAAC,OAAO,CAAC,MAAM,mBAAmB,CAAC,CAAC;IAC3D,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC9B,OAAO,CAAC,GAAG,CACT,KAAK,MAAM,CAAC,OAAO,CAAC,MAAM,qDAAqD,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAC3G,CAAC;IACJ,CAAC;IAED,OAAO,CAAC,GAAG,CAAC,iBAAiB,CAAC,CAAC;IAC/B,OAAO,CAAC,GAAG,CAAC,yEAAyE,CAAC,CAAC;IACvF,OAAO,CAAC,GAAG,CAAC,6EAA6E,CAAC,CAAC;IAC3F,OAAO,CAAC,GAAG,CAAC,sEAAsE,CAAC,CAAC;IACpF,OAAO,CAAC,GAAG,CAAC,gFAAgF,CAAC,CAAC;IAC9F,OAAO,CAAC,GAAG,CAAC,8EAA8E,CAAC,CAAC;IAC5F,OAAO,CAAC,GAAG,CAAC,2EAA2E,CAAC,CAAC;IACzF,OAAO,CAAC,GAAG,CAAC,6EAA6E,CAAC,CAAC;IAC3F,OAAO,CAAC,GAAG,CAAC,8EAA8E,CAAC,CAAC;IAC5F,OAAO,CAAC,GAAG,CAAC,4EAA4E,CAAC,CAAC;IAE1F,OAAO,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC;IAC7B,OAAO,CAAC,GAAG,CAAC,QAAQ,OAAO,EAAE,CAAC,CAAC;IAC/B,OAAO,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC;IAC7B,OAAO,CAAC,GAAG,CAAC,6EAA6E,CAAC,CAAC;IAC3F,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAEhB,OAAO,CAAC,CAAC;AACX,CAAC;AAED,6EAA6E;AAC7E,6EAA6E;AAC7E,8EAA8E;AAC9E,gFAAgF;AAChF,2EAA2E;AAC3E,+EAA+E;AAC/E,8EAA8E;AAC9E,iFAAiF;AACjF,SAAS,cAAc;IACrB,MAAM,KAAK,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAC9B,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,KAAK,CAAC;IACtC,MAAM,QAAQ,GAAG,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAChD,IAAI,CAAC;QACH,OAAO,YAAY,CAAC,KAAK,CAAC,KAAK,YAAY,CAAC,QAAQ,CAAC,CAAC;IACxD,CAAC;IAAC,MAAM,CAAC;QACP,qEAAqE;QACrE,OAAO,aAAa,CAAC,KAAK,CAAC,CAAC,IAAI,KAAK,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC;IACvD,CAAC;AACH,CAAC;AACD,IAAI,cAAc,EAAE,EAAE,CAAC;IACrB,OAAO,CAAC,QAAQ,GAAG,IAAI,EAAE,CAAC;AAC5B,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";AACA;;;;;;;;;;;;;;;;;;;;;GAqBG;AAEH,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,SAAS,EAAE,WAAW,EAAE,YAAY,EAAE,YAAY,EAAE,QAAQ,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AAC1H,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAC7D,OAAO,EAAE,aAAa,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AAExD,gGAAgG;AAChG,MAAM,cAAc,GAAG,cAAc,CAAC;AAEtC;;;;;;;;GAQG;AACH,MAAM,UAAU,WAAW;IACzB,yEAAyE;IACzE,MAAM,IAAI,GAAG,OAAO,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;IACrD,OAAO,OAAO,CAAC,IAAI,EAAE,IAAI,EAAE,UAAU,CAAC,CAAC;AACzC,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,eAAe,CAAC,IAAwB;IACtD,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACtC,OAAO,yBAAyB,CAAC;IACnC,CAAC;IACD,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;IAC5B,IAAI,OAAO,KAAK,IAAI,EAAE,CAAC;QACrB,OAAO,wDAAwD,IAAI,GAAG,CAAC;IACzE,CAAC;IACD,IAAI,OAAO,KAAK,GAAG,IAAI,OAAO,KAAK,IAAI,EAAE,CAAC;QACxC,OAAO,kCAAkC,CAAC;IAC5C,CAAC;IACD,IAAI,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;QAC1B,OAAO,+DAA+D,IAAI,GAAG,CAAC;IAChF,CAAC;IACD,IAAI,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;QAC5B,OAAO,wCAAwC,IAAI,GAAG,CAAC;IACzD,CAAC;IACD,gDAAgD;IAChD,IAAI,CAAC,mBAAmB,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;QACvC,OAAO,mEAAmE,IAAI,GAAG,CAAC;IACpF,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,KAAK,GAAG;IACZ,mDAAmD;IACnD,EAAE;IACF,6EAA6E;IAC7E,8EAA8E;IAC9E,iBAAiB;IACjB,EAAE;IACF,uEAAuE;IACvE,oEAAoE;IACpE,EAAE;IACF,UAAU;IACV,gCAAgC;IAChC,gDAAgD;CACjD,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAQb;;;;;;GAMG;AACH,SAAS,gBAAgB,CAAC,OAAe,EAAE,QAAgB,EAAE,OAAe,EAAE,MAAkB,EAAE,GAAW;IAC3G,IAAI,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;QACzB,2DAA2D;QAC3D,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACzB,OAAO;IACT,CAAC;IAED,MAAM,GAAG,GAAG,YAAY,CAAC,OAAO,CAAC,CAAC;IAClC,IAAI,UAAU,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,EAAE,CAAC;QAClC,MAAM,WAAW,GAAG,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAC7E,aAAa,CAAC,QAAQ,EAAE,WAAW,EAAE,MAAM,CAAC,CAAC;IAC/C,CAAC;SAAM,CAAC;QACN,MAAM,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;IAC5B,CAAC;IACD,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AAC3B,CAAC;AAED;;;;;;;;;;;;;GAaG;AACH,MAAM,UAAU,YAAY,CAC1B,MAAc,EACd,OAAe,EACf,OAAe,EACf,MAAkB,EAClB,OAAO,GAAG,EAAE;IAEZ,SAAS,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACxC,KAAK,MAAM,KAAK,IAAI,WAAW,CAAC,MAAM,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC;QACjE,MAAM,OAAO,GAAG,IAAI,CAAC,MAAM,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;QACzC,4EAA4E;QAC5E,4EAA4E;QAC5E,6EAA6E;QAC7E,MAAM,QAAQ,GAAG,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC;QACrF,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;QACzC,MAAM,GAAG,GAAG,OAAO,CAAC,CAAC,CAAC,GAAG,OAAO,IAAI,QAAQ,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC;QAE1D,IAAI,KAAK,CAAC,WAAW,EAAE,EAAE,CAAC;YACxB,YAAY,CAAC,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,EAAE,GAAG,CAAC,CAAC;YACtD,SAAS;QACX,CAAC;QAED,gBAAgB,CAAC,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,EAAE,GAAG,CAAC,CAAC;IAC5D,CAAC;AACH,CAAC;AAED,mEAAmE;AACnE,SAAS,UAAU,CAAC,QAAgB;IAClC,OAAO,4DAA4D,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,QAAQ,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC;AACjH,CAAC;AAED;;;;GAIG;AACH,MAAM,iBAAiB,GAAG,CAAC,QAAQ,EAAE,UAAU,CAAU,CAAC;AAE1D;;;;;;;;;GASG;AACH,MAAM,UAAU,QAAQ,CACtB,OAAe,EACf,MAAc,OAAO,CAAC,GAAG,EAAE,EAC3B,YAAY,GAAG,KAAK;IAEpB,MAAM,SAAS,GAAG,OAAO,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;IACxC,MAAM,MAAM,GAAe,EAAE,OAAO,EAAE,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC;IAExD,IAAI,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;QAC1B,MAAM,IAAI,GAAG,QAAQ,CAAC,SAAS,CAAC,CAAC;QACjC,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,EAAE,CAAC;YACxB,MAAM,IAAI,KAAK,CAAC,WAAW,OAAO,iCAAiC,CAAC,CAAC;QACvE,CAAC;QACD,6EAA6E;QAC7E,+EAA+E;IACjF,CAAC;IAED,MAAM,QAAQ,GAAG,WAAW,EAAE,CAAC;IAE/B,4EAA4E;IAC5E,oEAAoE;IACpE,wEAAwE;IACxE,4CAA4C;IAC5C,SAAS,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAE1C,8EAA8E;IAC9E,qEAAqE;IACrE,6EAA6E;IAC7E,6EAA6E;IAC7E,wEAAwE;IACxE,0EAA0E;IAC1E,KAAK,MAAM,KAAK,IAAI,WAAW,CAAC,QAAQ,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC;QACnE,IAAK,iBAAuC,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC;YAAE,SAAS;QAC5E,MAAM,OAAO,GAAG,IAAI,CAAC,QAAQ,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;QAC3C,MAAM,QAAQ,GAAG,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC;QACrF,MAAM,QAAQ,GAAG,IAAI,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;QAC3C,IAAI,KAAK,CAAC,WAAW,EAAE,EAAE,CAAC;YACxB,YAAY,CAAC,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC;QAC7D,CAAC;aAAM,CAAC;YACN,gBAAgB,CAAC,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC;QACjE,CAAC;IACH,CAAC;IAED,0DAA0D;IAC1D,YAAY,CAAC,IAAI,CAAC,QAAQ,EAAE,QAAQ,CAAC,EAAE,IAAI,CAAC,SAAS,EAAE,QAAQ,CAAC,EAAE,OAAO,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC;IAE7F,wEAAwE;IACxE,4EAA4E;IAC5E,iEAAiE;IACjE,IAAI,YAAY,EAAE,CAAC;QACjB,YAAY,CAAC,IAAI,CAAC,QAAQ,EAAE,UAAU,CAAC,EAAE,IAAI,CAAC,SAAS,EAAE,UAAU,CAAC,EAAE,OAAO,EAAE,MAAM,EAAE,UAAU,CAAC,CAAC;IACrG,CAAC;IAED,OAAO,EAAE,SAAS,EAAE,MAAM,EAAE,CAAC;AAC/B,CAAC;AAED,sEAAsE;AACtE,MAAM,kBAAkB,GAAG,iBAAiB,CAAC;AAE7C;;;;;GAKG;AACH,SAAS,YAAY,CAAC,IAAc;IAClC,OAAO,IAAI,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC;AACnD,CAAC;AAED,0EAA0E;AAC1E,MAAM,UAAU,IAAI,CAAC,OAAiB,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;IACzD,MAAM,IAAI,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC;IAChC,MAAM,YAAY,GAAG,IAAI,CAAC,QAAQ,CAAC,kBAAkB,CAAC,CAAC;IAEvD,MAAM,eAAe,GAAG,eAAe,CAAC,IAAI,CAAC,CAAC;IAC9C,IAAI,eAAe,EAAE,CAAC;QACpB,OAAO,CAAC,KAAK,CAAC,sBAAsB,eAAe,IAAI,CAAC,CAAC;QACzD,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QACrB,OAAO,CAAC,CAAC;IACX,CAAC;IAED,MAAM,OAAO,GAAI,IAAe,CAAC,IAAI,EAAE,CAAC;IAExC,IAAI,MAAkB,CAAC;IACvB,IAAI,CAAC;QACH,CAAC,EAAE,MAAM,EAAE,GAAG,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC,GAAG,EAAE,EAAE,YAAY,CAAC,CAAC,CAAC;IAChE,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,CAAC,KAAK,CAAC,sBAAuB,GAAa,CAAC,OAAO,EAAE,CAAC,CAAC;QAC9D,OAAO,CAAC,CAAC;IACX,CAAC;IAED,sDAAsD;IACtD,OAAO,CAAC,GAAG,CAAC,sCAAsC,OAAO,EAAE,CAAC,CAAC;IAC7D,OAAO,CAAC,GAAG,CAAC,KAAK,MAAM,CAAC,OAAO,CAAC,MAAM,mBAAmB,CAAC,CAAC;IAC3D,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC9B,OAAO,CAAC,GAAG,CACT,KAAK,MAAM,CAAC,OAAO,CAAC,MAAM,qDAAqD,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAC3G,CAAC;IACJ,CAAC;IAED,OAAO,CAAC,GAAG,CAAC,8BAA8B,CAAC,CAAC;IAC5C,OAAO,CAAC,GAAG,CAAC,gFAAgF,CAAC,CAAC;IAC9F,OAAO,CAAC,GAAG,CAAC,2EAA2E,CAAC,CAAC;IACzF,IAAI,YAAY,EAAE,CAAC;QACjB,OAAO,CAAC,GAAG,CAAC,6EAA6E,CAAC,CAAC;IAC7F,CAAC;SAAM,CAAC;QACN,OAAO,CAAC,GAAG,CAAC,kFAAkF,CAAC,CAAC;QAChG,OAAO,CAAC,GAAG,CAAC,sEAAsE,CAAC,CAAC;IACtF,CAAC;IACD,OAAO,CAAC,GAAG,CAAC,iFAAiF,CAAC,CAAC;IAC/F,OAAO,CAAC,GAAG,CAAC,kFAAkF,CAAC,CAAC;IAChG,OAAO,CAAC,GAAG,CAAC,mBAAmB,CAAC,CAAC;IACjC,OAAO,CAAC,GAAG,CAAC,gFAAgF,CAAC,CAAC;IAC9F,OAAO,CAAC,GAAG,CAAC,kFAAkF,CAAC,CAAC;IAChG,OAAO,CAAC,GAAG,CAAC,6EAA6E,CAAC,CAAC;IAC3F,OAAO,CAAC,GAAG,CAAC,8EAA8E,CAAC,CAAC;IAC5F,OAAO,CAAC,GAAG,CAAC,4EAA4E,CAAC,CAAC;IAE1F,OAAO,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC;IAC7B,OAAO,CAAC,GAAG,CAAC,QAAQ,OAAO,SAAS,CAAC,CAAC;IACtC,OAAO,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC;IAC7B,OAAO,CAAC,GAAG,CAAC,6EAA6E,CAAC,CAAC;IAC3F,IAAI,YAAY,EAAE,CAAC;QACjB,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAChB,OAAO,CAAC,GAAG,CAAC,QAAQ,OAAO,WAAW,CAAC,CAAC;QACxC,OAAO,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC;QAC7B,OAAO,CAAC,GAAG,CAAC,+DAA+D,CAAC,CAAC;IAC/E,CAAC;IACD,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAEhB,OAAO,CAAC,CAAC;AACX,CAAC;AAED,6EAA6E;AAC7E,6EAA6E;AAC7E,8EAA8E;AAC9E,gFAAgF;AAChF,2EAA2E;AAC3E,+EAA+E;AAC/E,8EAA8E;AAC9E,iFAAiF;AACjF,SAAS,cAAc;IACrB,MAAM,KAAK,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAC9B,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,KAAK,CAAC;IACtC,MAAM,QAAQ,GAAG,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAChD,IAAI,CAAC;QACH,OAAO,YAAY,CAAC,KAAK,CAAC,KAAK,YAAY,CAAC,QAAQ,CAAC,CAAC;IACxD,CAAC;IAAC,MAAM,CAAC;QACP,qEAAqE;QACrE,OAAO,aAAa,CAAC,KAAK,CAAC,CAAC,IAAI,KAAK,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC;IACvD,CAAC;AACH,CAAC;AACD,IAAI,cAAc,EAAE,EAAE,CAAC;IACrB,OAAO,CAAC,QAAQ,GAAG,IAAI,EAAE,CAAC;AAC5B,CAAC"}

package/package.json

@@ -1,11 +1,12 @@
 {
   "name": "create-astram-app",
-  "version": "0.1.2",
+  "version": "0.2.0",
   "license": "MIT",
   "description": "Scaffolder for a new Astram app — emits a running, framework-enforced consumer project (empty src/features/ + deny-by-default enforcement) that installs the immutable @astram/core, @astram/guard, and @astram/sdk framework.",
   "type": "module",
   "bin": {
-    "create-astram-app": "dist/index.js"
+    "create-astram-app": "dist/index.js",
+    "astram-add-frontend": "dist/add-frontend.js"
   },
   "publishConfig": {
     "access": "public"

package/template/CLAUDE.md

@@ -0,0 +1,51 @@
+# __APP_NAME__ — AI guide (entry)
+
+This is the entry point for AI assistants (Claude Code) and teammates. It ties together
+the **two-layer guide** (ADR-0025): the framework's rules (the floor) + this app's own
+rules (on top). Read both before doing any work.
+
+## 1. Framework rules — the FLOOR (framework-owned, refreshed on upgrade)
+
+The Astram framework ships its hard rules + capabilities in the installed
+`@astram/guide` package. They are synced into `.claude/rules/` (do NOT edit those
+copies — they are regenerated from the framework package on every install/upgrade):
+
+- **`.claude/rules/astram-framework-rules.md`** — the non-negotiable rules: never edit
+  the framework, all data through the RecordEngine pipe, classify every route,
+  **STOP-and-flag a gap** instead of working around it, fail closed, and — after any
+  framework upgrade — **re-read these rules first** (Rule 0).
+- **`.claude/rules/astram-framework-capabilities.md`** — what the framework provides
+  this version (check here before building; if it's not there, it's a gap → flag it).
+
+@./.claude/rules/astram-framework-rules.md
+
+> These are a FLOOR: this app's own rules (below) may ADD to or TIGHTEN them, but never
+> weaken them. The never-touch-core / never-bypass-enforcement rules are absolute.
+
+## 2. Your project's rules — the project layer (yours, never touched by an upgrade)
+
+Your project-specific rules, conventions, and the framework-gap log live in
+**`.astram/guide/`** (git-tracked, developer-owned — a framework upgrade never touches
+it):
+
+- **`.astram/guide/README.md`** — what this layer is + how it relates to the framework.
+- **`.astram/guide/gaps.md`** — the framework capability gaps you've flagged (create it
+  the first time you hit one — the gap-flag loop).
+
+Add your own rules as markdown files in `.astram/guide/`.
+
+## 3. Keeping the framework rules current (the upgrade flow)
+
+The framework rules in `.claude/rules/` are a **generated mirror** of the installed
+`@astram/guide` package. They refresh automatically:
+
+- `server/`'s `postinstall` runs `sync-astram-guide` on every `npm install` / `npm
+  update`, copying the current framework rules into `.claude/rules/`.
+- To refresh manually: `cd server && npm run guide:sync`.
+- The synced framework files + `.claude/rules/.astram-guide-version` are **gitignored**
+  (they belong to the framework version, not your app). Your `.astram/guide/` layer is
+  git-tracked and yours.
+
+**On a framework upgrade:** run `npm update` (or `npm install`) in `server/` — the
+framework rules refresh to the new version, your `.astram/guide/` rules are untouched,
+then re-read the refreshed `.claude/rules/astram-framework-rules.md` (Rule 0).

package/template/README.md

@@ -1,24 +1,37 @@
 # __APP_NAME__
 
-An **Astram consumer app**, scaffolded with `create-astram-app`. It depends on the
-published, immutable framework packages ([`@astram/core`](https://www.npmjs.com/package/@astram/core),
+An **Astram consumer app**, scaffolded with `create-astram-app`. A monorepo with a
+`server/` (the API) and a `frontend/` (your UI). The API depends on the published,
+immutable framework packages ([`@astram/core`](https://www.npmjs.com/package/@astram/core),
 [`@astram/guard`](https://www.npmjs.com/package/@astram/guard),
+[`@astram/engine`](https://www.npmjs.com/package/@astram/engine),
 [`@astram/sdk`](https://www.npmjs.com/package/@astram/sdk)) and enforces
-**deny-by-default** from the very first boot. You build features; the framework
-lives read-only in `node_modules` and upgrades via `npm update` — you never edit it.
+**deny-by-default** from the very first boot. You build features; the framework lives
+read-only in `server/node_modules` and upgrades via `npm update` — you never edit it.
 
-## Run it
+## Layout
+
+```
+__APP_NAME__/
+  server/       the API (NestJS + the Astram framework enforcement)
+  frontend/     your UI (empty — add Vite/React/Next/… and call the API)
+  .astram/      your project-owned, upgrade-safe AI/dev guide (ADR-0025)
+  docs/         your own docs (the scaffolder never clobbers this)
+```
+
+## Run the API
 
 ```bash
+cd server
 npm install
-npm run dev        # boots the app (tsx watch) on http://localhost:3000
+npm run dev        # boots the API (tsx watch) on http://localhost:3000
 ```
 
 Then:
 
 ```bash
-curl -i localhost:3000/health          # 200 — @Public health probe
-curl -i localhost:3000/demo/public     # 200 — explicit @Public() opt-out
+curl -i localhost:3000/health              # 200 — @Public health probe
+curl -i localhost:3000/demo/public         # 200 — explicit @Public() opt-out
 curl -i localhost:3000/demo/unclassified   # 403 — DENIED (no classification)
 ```
 
@@ -26,12 +39,13 @@ That last 403 is the whole point: **every route is denied unless you explicitly
 classify it.** Forgetting to declare a route locks the door instead of silently
 exposing it.
 
-Other scripts: `npm run build` (→ `dist/`), `npm start` (run the build),
-`npm test` (the enforcement e2e), `npm run lint`.
+Other `server/` scripts: `npm run build` (→ `dist/`), `npm start` (run the build),
+`npm test`, `npm run lint`.
 
-## How it wires the framework
+## How the API wires the framework
 
-`src/app.module.ts` imports the ONE registration seam — no local security wiring:
+`server/src/app.module.ts` imports the ONE registration seam — no local security
+wiring:
 
 ```ts
 import { ShieldModule } from '@astram/guard';
@@ -45,45 +59,30 @@ export class AppModule {}
 
 `ShieldModule.forRoot()` binds the global deny-by-default guard (ADR-0002), the
 boot-pool assertion (ADR-0018), and the Core decision-authority token. You never
-re-implement enforcement — you register it once and add your controllers.
+re-implement enforcement — you register it once and add your controllers. Enable the
+full auth surface (login/MFA/refresh/logout) with `ShieldModule.forRoot({ auth: true,
+credentialResolver, decisionAuthority })`.
 
 ## Add a feature (the framework way)
 
-1. Create `src/features/<your-feature>/` with a Nest module + controller(s).
-2. Register it in `src/app.module.ts` (add the module to `imports`, or its
+1. Create `server/src/features/<your-feature>/` with a Nest module + controller(s).
+2. Register it in `server/src/app.module.ts` (add the module to `imports`, or its
    controller to `controllers`).
-3. **Classify every route:** `@Public()` for open routes, `@Classified(...)` for
-   guarded ones. Anything unclassified is denied (403) by design.
-4. Add a test (see `test/enforcement.e2e.spec.ts` for the pattern).
+3. **Classify every route:** `@Public()` for open routes, `@Classified({ typeKey,
+   action })` for guarded ones. Anything unclassified is denied (403) by design.
+4. **Data access goes through the framework's RecordEngine** — never a raw DB pool.
+   The `server/eslint.config.js` wall rule fails the build on off-road DB access.
+5. Add a test (see `server/test/` for the pattern).
 
-`src/features/` starts empty — it's your space.
+`server/src/features/` starts empty — it's your space.
 
-## What's here today (and what's next)
+## The frontend
 
-Today you get correct-by-default **enforcement** out of the box: the framework's
-guard protects every route from the first boot. A turnkey **login / session**
-boilerplate (wired through the same `ShieldModule.forRoot()` seam) arrives in a
-later framework release — when it lands, you'll pick it up via `npm update` without
-touching your `src/`.
-
-## Layout
-
-```
-src/
-  main.ts                   HTTP bootstrap (thin) — loadAppConfig from @astram/guard
-  app.module.ts             declares enforcement via ShieldModule.forRoot()
-  health/
-    health.controller.ts    /health /ready /live  (all @Public)
-    demo.controller.ts      /demo/public (@Public) + /demo/unclassified (denied)
-  features/                 EMPTY — your editable space
-test/
-  enforcement.e2e.spec.ts   boots the app; proves 200 health + 403 unclassified
-.astram/guide/              YOUR project guide (upgrade-safe; never touched)
-docs/                       your own docs (the scaffolder never clobbers this)
-```
+`frontend/` is intentionally empty — Astram is a **backend security kernel**, so it
+does not impose a UI framework. Add whatever you like and call the API. See
+`frontend/README.md` for the auth endpoints your UI will consume.
 
 ## The `.astram/guide/` directory
 
-This is your **project-owned** AI/dev guide layer (ADR-0025) — framework upgrades
-never touch it. Put your project's own rules and context there. See
-`.astram/guide/README.md`.
+Your **project-owned** AI/dev guide layer (ADR-0025) — framework upgrades never touch
+it. Put your project's own rules and context there. See `.astram/guide/README.md`.

package/template/_gitignore

@@ -3,3 +3,9 @@ dist/
 .env
 *.log
 .DS_Store
+
+# The framework rules synced from @astram/guide (ADR-0025) — a GENERATED mirror of
+# the installed framework version, refreshed on every install/upgrade. Not yours to
+# edit or commit. (Your OWN rules live in .astram/guide/, which IS git-tracked.)
+.claude/rules/astram-framework-*.md
+.claude/rules/.astram-guide-version