create-athenea-app 1.0.3 → 1.0.5

package/bin/index.js

@@ -266,6 +266,14 @@ async function main() {
   await fsp.mkdir(targetDir, { recursive: true });
   await fsp.cp(templateDir, targetDir, { recursive: true });
 
+  // npm elimina archivos ".gitignore" al publicar el paquete, por eso el
+  // template lo distribuye como "gitignore" (sin punto) y lo renombramos aca.
+  const gitignoreSrc = path.join(targetDir, "gitignore");
+  const gitignoreDest = path.join(targetDir, ".gitignore");
+  if (fs.existsSync(gitignoreSrc)) {
+    await fsp.rename(gitignoreSrc, gitignoreDest);
+  }
+
   await updateAppPackageJson(targetDir, { npmName, productName, appId });
 
   const tokenMap = {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "create-athenea-app",
-  "version": "1.0.3",
+  "version": "1.0.5",
   "type": "module",
   "description": "CLI para scaffoldear apps de escritorio con Electron + Preact + Vite (DX rapida: dev server, hot reload, build y empaquetado)",
   "keywords": [
@@ -13,16 +13,16 @@
     "vite",
     "desktop"
   ],
-  "homepage": "https://github.com/NachoBasilio/Athenea-Desktop#readme",
+  "homepage": "https://github.com/ignadev/Athenea-Desktop#readme",
   "repository": {
     "type": "git",
-    "url": "git+https://github.com/NachoBasilio/Athenea-Desktop.git",
+    "url": "git+https://github.com/ignadev/Athenea-Desktop.git",
     "directory": "create-athenea-app"
   },
   "bugs": {
-    "url": "https://github.com/NachoBasilio/Athenea-Desktop/issues"
+    "url": "https://github.com/ignadev/Athenea-Desktop/issues"
   },
-  "author": "NachoBasilio",
+  "author": "Ignacio Basilio (Ignadev)",
   "bin": {
     "create-athenea-app": "bin/index.js"
   },

package/template/AGENTS.md

@@ -0,0 +1,23 @@
+# AGENTS - create-athenea-app/template/
+
+## Alcance
+
+- Aplica solo a `create-athenea-app/template/**`.
+
+## Reglas especificas
+
+- Esta carpeta es un proyecto generado para usuarios finales: mantenerla autocontenida y ejecutable tras scaffolding.
+- Si se cambian rutas, nombres de archivos o placeholders, actualizar `create-athenea-app/bin/index.js` en la misma tarea.
+- Mantener paridad funcional minima entre template y app de referencia (entrypoints electron-vite y estructura `src/main`, `src/preload`, `src/renderer`).
+- No agregar archivos generados (`out/`, `release/`, `node_modules/`) dentro del template.
+
+## Auto-invocacion de skills
+
+- Invocar `skills/create-athenea-template-sync/SKILL.md` al tocar cualquier archivo del template.
+- Si se modifica IPC en template, usar tambien `skills/electron-ipc-contract/SKILL.md`.
+
+## Checklist obligatorio
+
+- [ ] Verificar que el template siga resolviendo `src/main/index.js`, `src/preload/index.js` y `src/renderer/index.html`.
+- [ ] Verificar que los placeholders esperados por el CLI sigan presentes donde corresponda.
+- [ ] Validar scaffolding con `node create-athenea-app/bin/index.js demo --no-install` en carpeta temporal.

package/template/README.md

@@ -1,6 +1,6 @@
-# **APP_TITLE**
+# __APP_TITLE__
 
-Aplicación de escritorio creada con [Athenea](https://github.com/tu-usuario/athenea-desktop).
+Aplicación de escritorio creada con [Athenea](https://github.com/ignadev/Athenea-Desktop).
 
 ## Stack
 

package/template/gitignore

@@ -0,0 +1,42 @@
+# Logs
+logs
+*.log
+npm-debug.log*
+yarn-debug.log*
+yarn-error.log*
+pnpm-debug.log*
+lerna-debug.log*
+
+# npm and package manager caches
+.npm/
+.pnpm-store/
+
+# Build artifacts
+out/
+release/
+dist/
+dist-ssr/
+
+# Tooling caches
+.vite/
+.cache/
+.eslintcache
+coverage/
+*.tsbuildinfo
+
+node_modules/
+*.local
+
+# Environment variables
+.env
+
+# Editor directories and files
+.vscode/*
+!.vscode/extensions.json
+.idea
+.DS_Store
+*.suo
+*.ntvs*
+*.njsproj
+*.sln
+*.sw?

package/template/package.json

@@ -7,7 +7,7 @@
   "type": "module",
   "main": "./out/main/index.js",
   "engines": {
-    "node": ">=22.0.0"
+    "node": ">=22.12.0"
   },
   "scripts": {
     "dev": "electron-vite dev",
@@ -25,10 +25,10 @@
   },
   "devDependencies": {
     "@preact/preset-vite": "^2.10.1",
-    "electron": "^35.1.4",
-    "electron-builder": "^26.0.0",
+    "electron": "^43.1.0",
+    "electron-builder": "^26.15.6",
     "electron-vite": "^5.0.0",
-    "vite": "^7.2.2"
+    "vite": "^7.3.6"
   },
   "build": {
     "appId": "com.example.app",

package/template/src/main/index.js

@@ -12,6 +12,31 @@ const childWindowsByRoute = new Map();
 
 const settingsPath = path.join(app.getPath("userData"), "settings.json");
 
+/** Origen permitido para navegación (dev server o file:// en producción). */
+function isNavigationAllowed(targetUrl) {
+  try {
+    const target = new URL(targetUrl);
+    if (process.env.ELECTRON_RENDERER_URL) {
+      const devOrigin = new URL(process.env.ELECTRON_RENDERER_URL).origin;
+      return target.origin === devOrigin;
+    }
+    return target.protocol === "file:";
+  } catch {
+    return false;
+  }
+}
+
+/** Bloquea apertura de ventanas nuevas y navegación fuera del origen propio. */
+function hardenWebContents(webContents) {
+  webContents.setWindowOpenHandler(() => ({ action: "deny" }));
+
+  webContents.on("will-navigate", (event, targetUrl) => {
+    if (!isNavigationAllowed(targetUrl)) {
+      event.preventDefault();
+    }
+  });
+}
+
 function createWindow() {
   const { width: screenWidth, height: screenHeight } =
     screen.getPrimaryDisplay().workAreaSize;
@@ -22,7 +47,7 @@ function createWindow() {
     title: __APP_TITLE_JSON__,
     webPreferences: {
       preload: join(__dirname, "../preload/index.mjs"),
-      sandbox: false,
+      sandbox: true,
       contextIsolation: true,
       nodeIntegration: false,
     },
@@ -32,6 +57,8 @@ function createWindow() {
   mainWindow.setAutoHideMenuBar(true);
   mainWindow.maximize();
 
+  hardenWebContents(mainWindow.webContents);
+
   // electron-vite: usa ELECTRON_RENDERER_URL en dev
   if (process.env.ELECTRON_RENDERER_URL) {
     mainWindow.loadURL(process.env.ELECTRON_RENDERER_URL);
@@ -121,7 +148,7 @@ ipcMain.on("window:openRoute", (_event, options) => {
     title: title || __APP_TITLE_JSON__,
     webPreferences: {
       preload: join(__dirname, "../preload/index.mjs"),
-      sandbox: false,
+      sandbox: true,
       contextIsolation: true,
       nodeIntegration: false,
     },
@@ -129,6 +156,9 @@ ipcMain.on("window:openRoute", (_event, options) => {
 
   child.setMenuBarVisibility(false);
   child.setAutoHideMenuBar(true);
+
+  hardenWebContents(child.webContents);
+
   if (mainWindow && !mainWindow.isDestroyed()) {
     child.setParentWindow(mainWindow);
   }

package/template/src/renderer/index.html

@@ -2,7 +2,11 @@
 <html lang="en">
   <head>
     <meta charset="UTF-8" />
-    <link rel="icon" type="image/svg+xml" href="./public/logo.svg" />
+    <meta
+      http-equiv="Content-Security-Policy"
+      content="default-src 'self'; script-src 'self'; style-src 'self' 'unsafe-inline'; img-src 'self' data:; connect-src 'self' ws: wss:;"
+    />
+    <link rel="icon" type="image/png" href="/logo.png" />
     <meta name="viewport" content="width=device-width, initial-scale=1.0" />
     <title>__APP_TITLE__</title>
   </head>

package/template/src/renderer/src/app.jsx

@@ -1,13 +1,13 @@
-import { LocationProvider, Router, Route } from "preact-iso";
-import Home from "./routes/Home/Home";
+import { LocationProvider, Router, Route } from 'preact-iso'
+import Home from './routes/Home/Home'
 
 export default function App() {
-  return (
-    <LocationProvider>
-      <Router>
-        <Route path="/" component={Home} />
-        <Route default component={Home} />
-      </Router>
-    </LocationProvider>
-  );
+	return (
+		<LocationProvider>
+			<Router>
+				<Route path="/" component={Home} />
+				<Route default component={Home} />
+			</Router>
+		</LocationProvider>
+	)
 }

package/template/src/renderer/src/components/Counter/Counter.jsx

@@ -1,14 +1,14 @@
-import { useState } from "preact/hooks";
-import "./style.css";
+import { useState } from 'preact/hooks'
+import './style.css'
 
 export function Counter() {
-  const [count, setCount] = useState(0);
+	const [count, setCount] = useState(0)
 
-  return (
-    <div class="counter">
-      <button onClick={() => setCount(count - 1)}>-</button>
-      <p>{count}</p>
-      <button onClick={() => setCount(count + 1)}>+</button>
-    </div>
-  );
+	return (
+		<div class="counter">
+			<button onClick={() => setCount(count - 1)}>-</button>
+			<p>{count}</p>
+			<button onClick={() => setCount(count + 1)}>+</button>
+		</div>
+	)
 }

package/template/src/renderer/src/main.jsx

@@ -1,5 +1,5 @@
-import { render } from "preact";
-import App from "./app.jsx";
-import "./index.css";
+import { render } from 'preact'
+import App from './app.jsx'
+import './index.css'
 
-render(<App />, document.getElementById("app"));
+render(<App />, document.getElementById('app'))

package/template/src/renderer/src/routes/Home/Home.jsx

@@ -1,13 +1,17 @@
-import { Counter } from "../../components/Counter/Counter";
+import { Counter } from '../../components/Counter/Counter'
 
-import "./style.css";
+import './style.css'
 
 export default function Home() {
-  return (
-    <div className="home">
-      <h1 className="home-title">¡Bienvenido a __APP_TITLE__!</h1>
-      <img className="home-logo" src="../../public/logo.png" alt="" />
-      <Counter />
-    </div>
-  );
+	return (
+		<div className="home">
+			<h1 className="home-title">¡Bienvenido a __APP_TITLE__!</h1>
+			<img
+				className="home-logo"
+				src={`${import.meta.env.BASE_URL}logo.png`}
+				alt=""
+			/>
+			<Counter />
+		</div>
+	)
 }