create-athenea-app 1.0.4 → 1.0.6

package/bin/index.js

@@ -266,6 +266,14 @@ async function main() {
   await fsp.mkdir(targetDir, { recursive: true });
   await fsp.cp(templateDir, targetDir, { recursive: true });
 
+  // npm elimina archivos ".gitignore" al publicar el paquete, por eso el
+  // template lo distribuye como "gitignore" (sin punto) y lo renombramos aca.
+  const gitignoreSrc = path.join(targetDir, "gitignore");
+  const gitignoreDest = path.join(targetDir, ".gitignore");
+  if (fs.existsSync(gitignoreSrc)) {
+    await fsp.rename(gitignoreSrc, gitignoreDest);
+  }
+
   await updateAppPackageJson(targetDir, { npmName, productName, appId });
 
   const tokenMap = {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "create-athenea-app",
-  "version": "1.0.4",
+  "version": "1.0.6",
   "type": "module",
   "description": "CLI para scaffoldear apps de escritorio con Electron + Preact + Vite (DX rapida: dev server, hot reload, build y empaquetado)",
   "keywords": [

package/template/AGENTS.md

@@ -0,0 +1,23 @@
+# AGENTS - create-athenea-app/template/
+
+## Alcance
+
+- Aplica solo a `create-athenea-app/template/**`.
+
+## Reglas especificas
+
+- Esta carpeta es un proyecto generado para usuarios finales: mantenerla autocontenida y ejecutable tras scaffolding.
+- Si se cambian rutas, nombres de archivos o placeholders, actualizar `create-athenea-app/bin/index.js` en la misma tarea.
+- Mantener paridad funcional minima entre template y app de referencia (entrypoints electron-vite y estructura `src/main`, `src/preload`, `src/renderer`).
+- No agregar archivos generados (`out/`, `release/`, `node_modules/`) dentro del template.
+
+## Auto-invocacion de skills
+
+- Invocar `skills/create-athenea-template-sync/SKILL.md` al tocar cualquier archivo del template.
+- Si se modifica IPC en template, usar tambien `skills/electron-ipc-contract/SKILL.md`.
+
+## Checklist obligatorio
+
+- [ ] Verificar que el template siga resolviendo `src/main/index.js`, `src/preload/index.js` y `src/renderer/index.html`.
+- [ ] Verificar que los placeholders esperados por el CLI sigan presentes donde corresponda.
+- [ ] Validar scaffolding con `node create-athenea-app/bin/index.js demo --no-install` en carpeta temporal.

package/template/README.md

@@ -1,4 +1,4 @@
-# **APP_TITLE**
+# __APP_TITLE__
 
 Aplicación de escritorio creada con [Athenea](https://github.com/ignadev/Athenea-Desktop).
 

package/template/gitignore

@@ -0,0 +1,42 @@
+# Logs
+logs
+*.log
+npm-debug.log*
+yarn-debug.log*
+yarn-error.log*
+pnpm-debug.log*
+lerna-debug.log*
+
+# npm and package manager caches
+.npm/
+.pnpm-store/
+
+# Build artifacts
+out/
+release/
+dist/
+dist-ssr/
+
+# Tooling caches
+.vite/
+.cache/
+.eslintcache
+coverage/
+*.tsbuildinfo
+
+node_modules/
+*.local
+
+# Environment variables
+.env
+
+# Editor directories and files
+.vscode/*
+!.vscode/extensions.json
+.idea
+.DS_Store
+*.suo
+*.ntvs*
+*.njsproj
+*.sln
+*.sw?

package/template/package.json

@@ -7,7 +7,7 @@
   "type": "module",
   "main": "./out/main/index.js",
   "engines": {
-    "node": ">=22.0.0"
+    "node": ">=22.12.0"
   },
   "scripts": {
     "dev": "electron-vite dev",
@@ -25,10 +25,10 @@
   },
   "devDependencies": {
     "@preact/preset-vite": "^2.10.1",
-    "electron": "^35.1.4",
-    "electron-builder": "^26.0.0",
+    "electron": "^43.1.0",
+    "electron-builder": "^26.15.6",
     "electron-vite": "^5.0.0",
-    "vite": "^7.2.2"
+    "vite": "^7.3.6"
   },
   "build": {
     "appId": "com.example.app",

package/template/src/main/index.js

@@ -12,6 +12,31 @@ const childWindowsByRoute = new Map();
 
 const settingsPath = path.join(app.getPath("userData"), "settings.json");
 
+/** Origen permitido para navegación (dev server o file:// en producción). */
+function isNavigationAllowed(targetUrl) {
+  try {
+    const target = new URL(targetUrl);
+    if (process.env.ELECTRON_RENDERER_URL) {
+      const devOrigin = new URL(process.env.ELECTRON_RENDERER_URL).origin;
+      return target.origin === devOrigin;
+    }
+    return target.protocol === "file:";
+  } catch {
+    return false;
+  }
+}
+
+/** Bloquea apertura de ventanas nuevas y navegación fuera del origen propio. */
+function hardenWebContents(webContents) {
+  webContents.setWindowOpenHandler(() => ({ action: "deny" }));
+
+  webContents.on("will-navigate", (event, targetUrl) => {
+    if (!isNavigationAllowed(targetUrl)) {
+      event.preventDefault();
+    }
+  });
+}
+
 function createWindow() {
   const { width: screenWidth, height: screenHeight } =
     screen.getPrimaryDisplay().workAreaSize;
@@ -22,7 +47,7 @@ function createWindow() {
     title: __APP_TITLE_JSON__,
     webPreferences: {
       preload: join(__dirname, "../preload/index.mjs"),
-      sandbox: false,
+      sandbox: true,
       contextIsolation: true,
       nodeIntegration: false,
     },
@@ -32,6 +57,8 @@ function createWindow() {
   mainWindow.setAutoHideMenuBar(true);
   mainWindow.maximize();
 
+  hardenWebContents(mainWindow.webContents);
+
   // electron-vite: usa ELECTRON_RENDERER_URL en dev
   if (process.env.ELECTRON_RENDERER_URL) {
     mainWindow.loadURL(process.env.ELECTRON_RENDERER_URL);
@@ -55,6 +82,10 @@ function createWindow() {
       }
     }
   });
+
+  mainWindow.on("closed", () => {
+    mainWindow = null;
+  });
 }
 
 app.whenReady().then(() => {
@@ -121,7 +152,7 @@ ipcMain.on("window:openRoute", (_event, options) => {
     title: title || __APP_TITLE_JSON__,
     webPreferences: {
       preload: join(__dirname, "../preload/index.mjs"),
-      sandbox: false,
+      sandbox: true,
       contextIsolation: true,
       nodeIntegration: false,
     },
@@ -129,6 +160,9 @@ ipcMain.on("window:openRoute", (_event, options) => {
 
   child.setMenuBarVisibility(false);
   child.setAutoHideMenuBar(true);
+
+  hardenWebContents(child.webContents);
+
   if (mainWindow && !mainWindow.isDestroyed()) {
     child.setParentWindow(mainWindow);
   }

package/template/src/renderer/index.html

@@ -2,7 +2,11 @@
 <html lang="en">
   <head>
     <meta charset="UTF-8" />
-    <link rel="icon" type="image/svg+xml" href="./public/logo.svg" />
+    <meta
+      http-equiv="Content-Security-Policy"
+      content="default-src 'self'; script-src 'self'; style-src 'self' 'unsafe-inline'; img-src 'self' data:; connect-src 'self' ws: wss:;"
+    />
+    <link rel="icon" type="image/png" href="/logo.png" />
     <meta name="viewport" content="width=device-width, initial-scale=1.0" />
     <title>__APP_TITLE__</title>
   </head>

package/template/src/renderer/src/app.jsx

@@ -1,13 +1,22 @@
-import { LocationProvider, Router, Route } from "preact-iso";
-import Home from "./routes/Home/Home";
+import { LocationProvider, Router, Route } from 'preact-iso'
+import Home from './routes/Home/Home'
+
+/** Reads the `route` query param (used by main-process child windows) so the
+ * renderer navigates to the requested route on startup instead of always
+ * resolving to the current `location.pathname`. */
+function getInitialUrl() {
+	const params = new URLSearchParams(location.search)
+	const route = params.get('route')
+	return route || location.pathname + location.search
+}
 
 export default function App() {
-  return (
-    <LocationProvider>
-      <Router>
-        <Route path="/" component={Home} />
-        <Route default component={Home} />
-      </Router>
-    </LocationProvider>
-  );
+	return (
+		<LocationProvider url={getInitialUrl()}>
+			<Router>
+				<Route path="/" component={Home} />
+				<Route default component={Home} />
+			</Router>
+		</LocationProvider>
+	)
 }

package/template/src/renderer/src/components/Counter/Counter.jsx

@@ -1,14 +1,14 @@
-import { useState } from "preact/hooks";
-import "./style.css";
+import { useState } from 'preact/hooks'
+import './style.css'
 
 export function Counter() {
-  const [count, setCount] = useState(0);
+	const [count, setCount] = useState(0)
 
-  return (
-    <div class="counter">
-      <button onClick={() => setCount(count - 1)}>-</button>
-      <p>{count}</p>
-      <button onClick={() => setCount(count + 1)}>+</button>
-    </div>
-  );
+	return (
+		<div class="counter">
+			<button onClick={() => setCount(count - 1)}>-</button>
+			<p>{count}</p>
+			<button onClick={() => setCount(count + 1)}>+</button>
+		</div>
+	)
 }

package/template/src/renderer/src/index.css

@@ -7,7 +7,7 @@
 html,
 body {
   height: 100%;
-  overflow: hidden;
+  overflow-y: auto;
 }
 
 body {
@@ -19,5 +19,5 @@ body {
 }
 
 #app {
-  height: 100%;
+  min-height: 100%;
 }

package/template/src/renderer/src/main.jsx

@@ -1,5 +1,5 @@
-import { render } from "preact";
-import App from "./app.jsx";
-import "./index.css";
+import { render } from 'preact'
+import App from './app.jsx'
+import './index.css'
 
-render(<App />, document.getElementById("app"));
+render(<App />, document.getElementById('app'))

package/template/src/renderer/src/routes/Home/Home.jsx

@@ -1,13 +1,17 @@
-import { Counter } from "../../components/Counter/Counter";
+import { Counter } from '../../components/Counter/Counter'
 
-import "./style.css";
+import './style.css'
 
 export default function Home() {
-  return (
-    <div className="home">
-      <h1 className="home-title">¡Bienvenido a __APP_TITLE__!</h1>
-      <img className="home-logo" src="../../public/logo.png" alt="" />
-      <Counter />
-    </div>
-  );
+	return (
+		<div className="home">
+			<h1 className="home-title">¡Bienvenido a __APP_TITLE__!</h1>
+			<img
+				className="home-logo"
+				src={`${import.meta.env.BASE_URL}logo.png`}
+				alt=""
+			/>
+			<Counter />
+		</div>
+	)
 }

package/template/src/renderer/src/routes/Home/style.css

@@ -5,7 +5,7 @@
   justify-content: center;
   padding: 2rem;
   background-color: #f8f9fa;
-  height: 100vh;
+  min-height: 100vh;
   box-sizing: border-box;
   font-family: "Inter", system-ui, sans-serif;
   color: #333;