create-bw-app 0.9.9 → 0.10.1

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "create-bw-app",
   "private": false,
-  "version": "0.9.9",
+  "version": "0.10.1",
   "type": "module",
   "bin": "bin/create-bw-app.mjs",
   "files": [

package/src/constants.mjs

@@ -67,12 +67,12 @@ export const MODULE_STARTER_FILES = {
 
 export const APP_DEPENDENCY_DEFAULTS = {
   "@brightweblabs/app-shell": "^0.3.0",
-  "@brightweblabs/core-auth": "^0.3.1",
-  "@brightweblabs/infra": "^0.2.1",
-  "@brightweblabs/module-admin": "^0.3.0",
-  "@brightweblabs/module-crm": "^0.3.0",
-  "@brightweblabs/module-projects": "^0.2.2",
-  "@brightweblabs/ui": "^0.3.0",
+  "@brightweblabs/core-auth": "^0.3.3",
+  "@brightweblabs/infra": "^0.3.0",
+  "@brightweblabs/module-admin": "^0.3.2",
+  "@brightweblabs/module-crm": "^0.3.3",
+  "@brightweblabs/module-projects": "^0.3.2",
+  "@brightweblabs/ui": "^0.3.1",
   "lucide-react": "^0.562.0",
   "next": "16.1.6",
   "react": "19.2.3",
@@ -110,7 +110,6 @@ export const DEFAULTS = {
   tagline: "A configurable Brightweb starter app for new client instances.",
   contactEmail: "hello@example.com",
   supportEmail: "support@example.com",
-  primaryHex: "#1f7a45",
 };
 
 export const HELP_TEXT = `

package/src/generator.mjs

@@ -270,7 +270,6 @@ function createDerivedBrandValues(slug) {
     tagline: DEFAULTS.tagline,
     contactEmail: DEFAULTS.contactEmail,
     supportEmail: DEFAULTS.supportEmail,
-    primaryHex: DEFAULTS.primaryHex,
   };
 }
 
@@ -283,7 +282,6 @@ function createPlatformBrandConfigFile({ slug, brandValues }) {
     "  tagline: string;",
     "  contactEmail: string;",
     "  supportEmail: string;",
-    "  primaryHex: string;",
     "};",
     "",
     "export const starterBrandConfig: StarterBrandConfig = {",
@@ -293,7 +291,6 @@ function createPlatformBrandConfigFile({ slug, brandValues }) {
     `  tagline: ${JSON.stringify(brandValues.tagline)},`,
     `  contactEmail: ${JSON.stringify(brandValues.contactEmail)},`,
     `  supportEmail: ${JSON.stringify(brandValues.supportEmail)},`,
-    `  primaryHex: ${JSON.stringify(brandValues.primaryHex)},`,
     "};",
     "",
   ].join("\n");
@@ -328,7 +325,7 @@ export function createPlatformModulesConfigFile(selectedModules) {
     "  {",
     '    key: "crm",',
     '    label: "CRM",',
-    '    description: "Contacts, marketing audience, and CRM server/data layer.",',
+    '    description: "Contacts and CRM server/data layer, with marketing-adjacent operational data stored in Supabase.",',
     `    enabled: ${String(selected.has("crm"))},`,
     '    packageName: "@brightweblabs/module-crm",',
     '    playgroundHref: "/playground/crm",',
@@ -368,6 +365,12 @@ function createEnvFileContent() {
     "NEXT_PUBLIC_SUPABASE_PUBLISHABLE_DEFAULT_KEY=",
     "SUPABASE_SECRET_DEFAULT_KEY=",
     "RESEND_API_KEY=",
+    "RESEND_FROM_TRANSACTIONAL=",
+    "RESEND_FROM_MARKETING=",
+    "CONTACT_TO_EMAIL=",
+    "RESEND_WEBHOOK_SECRET=",
+    "MARKETING_WORKER_SECRET=",
+    "MARKETING_TEST_EMAIL=",
     "",
   ].join("\n");
 }
@@ -630,6 +633,7 @@ export function createAppContextFile({
           "AGENTS.md",
           "docs/ai/README.md",
           "README.md",
+          "app/globals.css",
           "config/brand.ts",
           "config/modules.ts",
           "config/client.ts",

package/template/base/AGENTS.md

@@ -10,6 +10,7 @@ This generated project is a BrightWeb platform starter. Use this file as the loc
 - `docs/ai/app-context.json`: machine-readable app summary for quick discovery.
 - `components/`: local app components used by starter routes and future product surfaces.
 - `config/brand.ts`: client identity, naming, and contact defaults.
+- `app/globals.css`: global design tokens, theme mapping, and shared visual styling.
 - `config/modules.ts`: selected module set and runtime enablement.
 - `config/client.ts`: starter-facing derived state used by the home page and setup surfaces.
 - `.env.local`: runtime service values for local development.
@@ -17,6 +18,7 @@ This generated project is a BrightWeb platform starter. Use this file as the loc
 ## Working rules
 
 - Treat `/bootstrap`, `/preview/app-shell`, and `/playground/*` as starter validation surfaces. They are app-owned and can be removed after setup if links and references are cleaned up too.
+- Keep identity/contact in `config/brand.ts`, and keep all color/theme tokens in `app/globals.css`.
 - Check `config/modules.ts` before assuming CRM, Projects, or Admin routes exist.
 - Prefer composing app-level routes and config before forking logic from `@brightweblabs/*` packages.
 - Keep edits local to this app unless the change is intentionally shared across multiple BrightWeb projects.

package/template/base/app/globals.css

@@ -4,17 +4,32 @@
   color-scheme: light;
   --font-sans: "IBM Plex Sans", "Segoe UI", sans-serif;
   --font-display: Georgia, "Times New Roman", serif;
+  /* Raw brand tokens: customize these first per client. */
+  --brand-primary: #266946;
+  --brand-primary-rgb: 38, 105, 70;
+  --brand-secondary-rgb: 126, 170, 112;
+  --brand-highlight-rgb: 189, 140, 89;
+  --brand-positive-rgb: 113, 196, 139;
+  /* Semantic theme tokens consumed by the UI. */
   --background: #f3efe5;
   --foreground: #18241d;
   --muted-foreground: #5a665c;
   --border: rgba(24, 36, 29, 0.12);
   --panel: rgba(255, 255, 255, 0.82);
   --panel-strong: #ffffff;
-  --accent: #266946;
-  --accent-soft: rgba(38, 105, 70, 0.12);
+  --accent: var(--brand-primary);
+  --accent-soft: rgba(var(--brand-primary-rgb), 0.12);
   --danger: #b43f3f;
   --ink-soft: #eef1e8;
-  --ring: rgba(38, 105, 70, 0.28);
+  --ring: rgba(var(--brand-primary-rgb), 0.28);
+  --surface-glow-cool: rgba(var(--brand-secondary-rgb), 0.18);
+  --surface-glow-warm: rgba(var(--brand-highlight-rgb), 0.12);
+  --accent-glow-strong: rgba(var(--brand-primary-rgb), 0.18);
+  --accent-glow-mid: rgba(var(--brand-primary-rgb), 0.14);
+  --accent-glow-soft: rgba(var(--brand-primary-rgb), 0.08);
+  --positive-glow-strong: rgba(var(--brand-positive-rgb), 0.5);
+  --positive-glow-soft: rgba(var(--brand-positive-rgb), 0.14);
+  --positive-glow-subtle: rgba(var(--brand-positive-rgb), 0.15);
 
   /* Compatibility aliases so both starters expose the same token surface. */
   --bg: var(--background);
@@ -32,8 +47,8 @@ body {
   margin: 0;
   padding: 0;
   background:
-    radial-gradient(circle at 15% 10%, rgba(126, 170, 112, 0.18), transparent 22%),
-    radial-gradient(circle at 85% 12%, rgba(189, 140, 89, 0.12), transparent 18%),
+    radial-gradient(circle at 15% 10%, var(--surface-glow-cool), transparent 22%),
+    radial-gradient(circle at 85% 12%, var(--surface-glow-warm), transparent 18%),
     linear-gradient(180deg, #faf8f1 0%, var(--bg) 48%, #e8e0cf 100%);
   color: var(--text);
   font-family: var(--font-sans), sans-serif;
@@ -97,7 +112,7 @@ input {
   overflow: hidden;
   background:
     linear-gradient(180deg, rgba(255, 255, 255, 0.86), rgba(247, 244, 235, 0.84)),
-    radial-gradient(circle at top right, rgba(38, 105, 70, 0.18), transparent 45%);
+    radial-gradient(circle at top right, var(--accent-glow-strong), transparent 45%);
 }
 
 .starter-hero-card::after {
@@ -107,7 +122,7 @@ input {
   width: 150px;
   height: 150px;
   border-radius: 999px;
-  background: rgba(38, 105, 70, 0.08);
+  background: var(--accent-glow-soft);
 }
 
 .starter-stat-grid {
@@ -185,7 +200,7 @@ input {
 .preview-glass-card {
   background:
     linear-gradient(180deg, rgba(255, 255, 255, 0.84), rgba(246, 244, 236, 0.76)),
-    radial-gradient(circle at top right, rgba(38, 105, 70, 0.08), transparent 45%);
+    radial-gradient(circle at top right, var(--accent-glow-soft), transparent 45%);
 }
 
 .panel h2,
@@ -308,7 +323,7 @@ input {
   border-radius: 28px;
   background:
     linear-gradient(180deg, rgba(255, 255, 255, 0.88), rgba(241, 237, 226, 0.84)),
-    radial-gradient(circle at top, rgba(38, 105, 70, 0.12), transparent 34%);
+    radial-gradient(circle at top, var(--accent-soft), transparent 34%);
   backdrop-filter: blur(16px);
   box-shadow: 0 22px 60px rgba(24, 36, 29, 0.1);
 }
@@ -328,7 +343,7 @@ input {
   border-radius: 28px;
   background:
     linear-gradient(180deg, rgba(255, 255, 255, 0.88), rgba(246, 243, 235, 0.86)),
-    radial-gradient(circle at right top, rgba(38, 105, 70, 0.14), transparent 35%);
+    radial-gradient(circle at right top, var(--accent-glow-mid), transparent 35%);
   backdrop-filter: blur(16px);
 }
 
@@ -374,7 +389,7 @@ input {
 .preview-stage-panel {
   background:
     linear-gradient(180deg, rgba(23, 37, 29, 0.96), rgba(18, 30, 24, 0.95)),
-    radial-gradient(circle at top left, rgba(113, 196, 139, 0.15), transparent 34%);
+    radial-gradient(circle at top left, var(--positive-glow-subtle), transparent 34%);
   color: #f4f1e8;
   border-color: rgba(255, 255, 255, 0.1);
 }
@@ -409,8 +424,8 @@ input {
 
 .nav-chip.active,
 .nav-chip:hover {
-  border-color: rgba(113, 196, 139, 0.5);
-  background: rgba(113, 196, 139, 0.14);
+  border-color: var(--positive-glow-strong);
+  background: var(--positive-glow-soft);
 }
 
 .preview-surface-grid {
@@ -510,7 +525,7 @@ input {
 }
 
 .status.ok {
-  background: rgba(31, 122, 69, 0.14);
+  background: rgba(var(--brand-primary-rgb), 0.14);
   color: var(--accent);
 }
 

package/template/base/app/page.tsx

@@ -113,6 +113,7 @@ export default function HomePage() {
               <h2>Starter controls</h2>
               <ul className="list">
                 <li>`config/brand.ts` for client identity and contact details.</li>
+                <li>`app/globals.css` for color and theme token management.</li>
                 <li>`config/modules.ts` for enabled platform modules.</li>
                 <li>`config/env.ts` for infra requirements and readiness checks.</li>
                 <li>`.env.local` for per-client service credentials and local runtime overrides.</li>

package/template/base/config/bootstrap.ts

@@ -63,8 +63,14 @@ export function getStarterBootstrapChecklist() {
       },
       {
         label: "Configure Resend for the client sender domain",
-        done: Boolean(config.envStatus.find((item) => item.key === "RESEND_API_KEY")?.present),
-        detail: "Use a sender/domain owned by this client instance.",
+        done: [
+          "RESEND_API_KEY",
+          "RESEND_FROM_TRANSACTIONAL",
+          "RESEND_FROM_MARKETING",
+          "CONTACT_TO_EMAIL",
+          "RESEND_WEBHOOK_SECRET",
+        ].every((key) => Boolean(config.envStatus.find((item) => item.key === key)?.present)),
+        detail: "Use client-owned sender identities and configure webhook signature verification.",
       },
       {
         label: "Create per-client environment variables",

package/template/base/config/brand.ts

@@ -5,7 +5,6 @@ export type StarterBrandConfig = {
   tagline: string;
   contactEmail: string;
   supportEmail: string;
-  primaryHex: string;
 };
 
 export const starterBrandConfig: StarterBrandConfig = {
@@ -15,5 +14,4 @@ export const starterBrandConfig: StarterBrandConfig = {
   tagline: "A configurable Brightweb starter app for shipping new client instances without rebuilding the platform.",
   contactEmail: "hello@example.com",
   supportEmail: "support@example.com",
-  primaryHex: "#1f7a45",
 };

package/template/base/config/env.ts

@@ -39,8 +39,44 @@ export const starterEnvRequirements: StarterEnvRequirement[] = [
   {
     key: "RESEND_API_KEY",
     scope: "server",
-    description: "Email delivery key for auth and marketing-related server flows.",
-    requiredFor: ["core-auth"],
+    description: "Email delivery key for app-owned transactional and marketing server flows.",
+    requiredFor: ["admin"],
+  },
+  {
+    key: "RESEND_FROM_TRANSACTIONAL",
+    scope: "server",
+    description: "Default transactional sender used by app-owned invite/contact email flows.",
+    requiredFor: ["admin"],
+  },
+  {
+    key: "RESEND_FROM_MARKETING",
+    scope: "server",
+    description: "Default marketing sender used by campaign and workflow email flows.",
+    requiredFor: ["admin"],
+  },
+  {
+    key: "CONTACT_TO_EMAIL",
+    scope: "server",
+    description: "Destination inbox for app-owned contact notifications.",
+    requiredFor: ["admin"],
+  },
+  {
+    key: "RESEND_WEBHOOK_SECRET",
+    scope: "server",
+    description: "Webhook signing secret used to verify inbound Resend event payloads.",
+    requiredFor: ["admin"],
+  },
+  {
+    key: "MARKETING_WORKER_SECRET",
+    scope: "server",
+    description: "Shared secret required to trigger internal marketing worker endpoints.",
+    requiredFor: ["admin"],
+  },
+  {
+    key: "MARKETING_TEST_EMAIL",
+    scope: "server",
+    description: "Inbox used by admin marketing test send actions.",
+    requiredFor: ["admin"],
   },
 ];
 

package/template/base/config/modules.ts

@@ -23,7 +23,7 @@ export const starterModuleConfig: StarterModuleConfig[] = [
   {
     key: "crm",
     label: "CRM",
-    description: "Contacts, marketing audience, and CRM server/data layer.",
+    description: "Contacts and CRM server/data layer, with marketing-adjacent operational data stored in Supabase.",
     enabled: true,
     packageName: "@brightweblabs/module-crm",
     playgroundHref: "/playground/crm",

package/template/base/docs/ai/README.md

@@ -20,11 +20,12 @@ This app is a normal Next.js App Router project with BrightWeb runtime wiring la
 - `docs/ai/examples.md`: common setup and customization workflows.
 - `README.md`: first-run setup steps.
 - `components/`: local app component layer for starter surfaces and future product UI.
-- `config/brand.ts`: client name, product name, support inboxes, and brand color.
+- `config/brand.ts`: client identity, product naming, and contact inboxes.
 - `config/modules.ts`: module metadata and enablement flags for CRM, Projects, and Admin.
 - `config/client.ts`: aggregated state consumed by starter pages.
 - `config/bootstrap.ts`: bootstrap checklist content for `/bootstrap`.
 - `config/shell.ts`: app-shell registration and navigation wiring.
+- `app/globals.css`: color tokens (raw brand + semantic mappings), typography, and global surface styling.
 - `app/page.tsx`: starter landing page for the generated app.
 - `app/bootstrap/page.tsx`: setup checklist surface.
 - `app/preview/app-shell/page.tsx`: shell preview validation route.
@@ -34,6 +35,7 @@ This app is a normal Next.js App Router project with BrightWeb runtime wiring la
 ## Editing strategy
 
 - Change client identity first in `config/brand.ts`.
+- Change colors and theme tokens in `app/globals.css`.
 - Check module presence in `config/modules.ts` before editing or creating module-specific routes.
 - Add app-specific UI in `components/` before forking shared package code.
 - Use `config/shell.ts` when navigation or toolbar behavior needs to change.

package/template/base/docs/ai/examples.md

@@ -8,6 +8,7 @@ Goal: get the generated starter running with real credentials.
 
 - Review `.env.local` and replace placeholder values.
 - Review `config/brand.ts` and confirm client identity.
+- Review `app/globals.css` and confirm brand tokens map to the intended visual system.
 - Review `config/modules.ts` before touching module routes.
 - Run the local dev server for this app or workspace.
 - Validate `/`, `/bootstrap`, `/preview/app-shell`, and `/playground/auth`.
@@ -18,6 +19,7 @@ Goal: get the generated starter running with real credentials.
 Goal: update the starter to the real client name and support details.
 
 - Edit `config/brand.ts`.
+- Edit `app/globals.css` when palette or theme token mapping needs to change.
 - Move route-specific presentation into `components/` when the home or preview surfaces need app-owned UI.
 - Check `config/client.ts` or `config/bootstrap.ts` if starter copy still references old defaults.
 - Validate the home page and `/preview/app-shell` after the change.

package/template/base/lib/email/resend-base.ts

@@ -0,0 +1,13 @@
+import "server-only";
+
+export {
+  getContactDestination,
+  getMarketingSender,
+  getResendApiKey,
+  getResendWebhookSecret,
+  getTransactionalSender,
+  resendApiRequest,
+  verifyResendWebhookSignature,
+  ResendApiError,
+  ResendConfigError,
+} from "@brightweblabs/infra/server";

package/template/supabase/modules/crm/README.md

@@ -11,12 +11,14 @@
 - `organization_invitations`
 - CRM/org helper functions like `is_org_admin()` and `set_crm_status(...)`
 - CRM/org RLS and triggers
+- app-owned operational contact records, not external ESP topic identifiers
 
 ## Shared boundary
 
 Some marketing data is adjacent to CRM, but the Brightweb v1 split is:
 
 - CRM owns operational contact and organization management
+- CRM does not currently define newsletter/product-update subscription tables or Resend Topic mappings
 - Marketing automation remains its own future module boundary
 
 ## Dependency

package/template/supabase/modules/crm/migrations/20260421201523_portal_read_indexes.sql

@@ -0,0 +1,22 @@
+-- portal_read_indexes
+-- target: crm
+-- created_at: 2026-04-21T20:15:23.686Z
+
+CREATE INDEX IF NOT EXISTS idx_crm_contacts_updated_at_desc
+  ON public.crm_contacts (updated_at DESC);
+
+CREATE INDEX IF NOT EXISTS idx_crm_contacts_created_at_desc
+  ON public.crm_contacts (created_at DESC);
+
+CREATE INDEX IF NOT EXISTS idx_crm_contacts_status
+  ON public.crm_contacts (status);
+
+CREATE INDEX IF NOT EXISTS idx_crm_contacts_source
+  ON public.crm_contacts (source)
+  WHERE source IS NOT NULL;
+
+CREATE INDEX IF NOT EXISTS idx_crm_status_log_changed_at_desc
+  ON public.crm_status_log (changed_at DESC);
+
+CREATE INDEX IF NOT EXISTS idx_organizations_created_at_desc
+  ON public.organizations (created_at DESC);

package/template/supabase/modules/projects/migrations/20260421201528_portal_read_indexes.sql

@@ -0,0 +1,6 @@
+-- portal_read_indexes
+-- target: projects
+-- created_at: 2026-04-21T20:15:28.609Z
+
+CREATE INDEX IF NOT EXISTS idx_project_tasks_status
+  ON public.project_tasks (status);