create-celsian 0.3.12 → 0.3.14

package/README.md

@@ -1,596 +1,15 @@
-# CelsianJS
+# Create Celsian
 
-TypeScript backend framework built on Web Standard APIs. Ships runtime adapters for Node.js, Bun, Deno, Cloudflare Workers, AWS Lambda, and Vercel.
+Scaffold new CelsianJS applications.
 
-- **Multi-runtime** -- Write once for Web Standard `Request`/`Response`, then deploy with the adapter that matches your target runtime.
-- **Significantly faster than Express** -- Radix-tree router, zero-copy request building, pre-stringified error paths. 1.3x-1.7x faster across all scenarios.
-- **First-party batteries** -- Background tasks, cron, WebSocket, CORS, CSRF protection, security headers, DB analytics, rate limiting, JWT, caching, compression, and OpenAPI docs via core APIs plus first-party packages.
-- **Fastify-style plugin encapsulation** -- Scoped hooks and decorations by default. No accidental middleware leaks.
-- **Schema-agnostic validation** -- Auto-detects Zod, TypeBox, or Valibot. No config, no adapters.
+This package is part of the [CelsianJS](https://github.com/CelsianJs/celsian) monorepo. See the root repository README for framework documentation, examples, and release notes.
 
-## Local pnpm note
-
-This monorepo is pinned to `pnpm@9.15.0`. For local release verification, prefer:
-
-```bash
-npm run setup:pnpm
-# or, if Corepack is unavailable locally:
-npx -y pnpm@9.15.0 <script>
-```
-
-CI and release gates should use the pinned package manager version, not an older global pnpm.
-
-## Quick Start
-
-```bash
-npx create-celsian my-api
-cd my-api
-npm install
-npm run dev
-```
-
-Or manually for the core router/runtime:
-
-```bash
-npm install @celsian/core
-```
-
-```typescript
-import { createApp, serve } from '@celsian/core';
-
-const app = createApp({ logger: true });
-
-// ─── Background tasks with retries ───
-app.task({
-  name: 'sendWelcomeEmail',
-  retries: 3,
-  async handler(input: { to: string }) {
-    await sendEmail(input.to, 'Welcome!');
-  },
-});
-
-// ─── Cron job: clean up expired sessions every night ───
-app.cron('cleanup', '0 3 * * *', async () => {
-  await db.query('DELETE FROM sessions WHERE expires_at < NOW()');
-});
-
-// ─── API routes ───
-app.post('/users', async (req, reply) => {
-  const body = req.parsedBody as { name: string; email: string };
-  const user = await db.createUser(body);
-  await app.enqueue('sendWelcomeEmail', { to: body.email });
-  return reply.status(201).json(user);
-});
-
-app.get('/users/:id', (req, reply) => {
-  return reply.json({ id: req.params.id, name: 'Alice' });
-});
-
-serve(app, { port: 3000 });
-```
-
-Tasks, cron, and API routes in one file -- no separate worker process needed. On Bun or Deno, `serve()` auto-detects the runtime. No code changes needed.
+## Installation
 
 ```bash
-bun run server.ts   # Uses Bun.serve() automatically
-deno run server.ts  # Uses Deno.serve() automatically
-```
-
-## Why CelsianJS
-
-### Multi-Runtime
-
-Built on Web Standard `Request`/`Response` -- not Node.js `IncomingMessage`/`ServerResponse`. One adapter line deploys anywhere:
-
-```typescript
-export default createCloudflareHandler(app);          // Cloudflare Workers
-export const handler = createLambdaHandler(app);      // AWS Lambda
-export default createVercelEdgeHandler(app);           // Vercel Edge
-```
-
-### Honest Benchmarks
-
-Benchmarked on Node.js v22, Apple Silicon, 10 connections for 10 seconds per scenario:
-
-| Scenario              | Fastify (req/s) | CelsianJS (req/s) | Express (req/s) |
-| --------------------- | ---------------: | -----------------: | --------------: |
-| JSON response         |           45,866 |             27,996 |          16,321 |
-| Route params          |           45,440 |             27,026 |          16,288 |
-| Middleware (5 layers)  |           41,380 |             24,445 |          15,751 |
-| JSON body parsing     |           29,998 |             19,074 |          14,648 |
-| Error handling        |           32,398 |             18,542 |          14,765 |
-
-**Fastify is faster.** It operates directly on Node.js internals with `fast-json-stringify` — hard to beat. CelsianJS pays a performance tax for Web Standard API compatibility (`Request`/`Response` object creation per request).
-
-**CelsianJS is 1.3-1.7x faster than Express** while shipping batteries that neither Fastify nor Express include: background task queues, cron scheduling, multi-runtime deployment, and DB analytics. If raw throughput is your only concern, use Fastify. If you need application infrastructure in a single framework, that's where CelsianJS fits.
-
-### Built-In Everything
-
-Celsian's batteries ship as first-party packages. Install the extras you use:
-
-```bash
-npm install @celsian/core @celsian/rate-limit @celsian/jwt @celsian/compress
-```
-
-```typescript
-import { createApp, security, cors, csrf, openapi } from '@celsian/core';
-import { rateLimit } from '@celsian/rate-limit';
-import { jwt } from '@celsian/jwt';
-import { compress } from '@celsian/compress';
-
-const app = createApp();
-
-await app.register(security(), { encapsulate: false });  // Helmet-style headers
-await app.register(cors({ origin: 'https://myapp.com' }));
-await app.register(csrf(), { encapsulate: false });      // CSRF token protection
-await app.register(rateLimit({ max: 100, window: 60_000, keyGenerator: req => req.headers.get("x-api-key") ?? "public" }));
-await app.register(compress());
-await app.register(jwt({ secret: process.env.JWT_SECRET! }));
-await app.register(openapi({ title: 'My API' }));
-
-app.health();                                             // /health + /ready
-app.task({ name: 'email', handler, retries: 3 });        // Background tasks
-app.cron('cleanup', '0 3 * * *', cleanupHandler);        // Cron jobs
-app.ws('/chat', { open, message, close });                // WebSocket
-```
-
-### Plugin Encapsulation
-
-Plugins get isolated scopes by default. Hooks and decorations registered inside a plugin do not leak to sibling plugins or the parent scope.
-
-```typescript
-// Auth plugin -- hooks only apply to routes registered inside
-async function authPlugin(app) {
-  app.addHook('onRequest', async (req, reply) => {
-    const token = req.headers.get('authorization');
-    if (!token) return reply.unauthorized();
-  });
-
-  app.get('/me', (req, reply) => {
-    return reply.json({ user: req.user });
-  });
-}
-
-// Public routes -- no auth required
-app.get('/health', (req, reply) => reply.json({ status: 'ok' }));
-
-// Register auth plugin under /api prefix
-await app.register(authPlugin, { prefix: '/api' });
-```
-
-Use `{ encapsulate: false }` when a plugin should affect all routes (e.g., CORS, database):
-
-```typescript
-await app.register(cors(), { encapsulate: false });
-```
-
-### Type-Safe Schema Validation
-
-Pass any Zod, TypeBox, or Valibot schema. CelsianJS auto-detects the library.
-
-```typescript
-app.route({
-  method: 'POST',
-  url: '/users',
-  schema: {
-    body: z.object({ name: z.string().min(1), email: z.string().email() }),
-  },
-  handler(req, reply) {
-    const { name, email } = req.parsedBody as { name: string; email: string };
-    return reply.status(201).json({ id: '1', name, email });
-  },
-});
-// Invalid input returns 400 with structured issues automatically
-```
-
-### JSX Server Rendering
-
-CelsianJS includes a built-in JSX runtime for server-side HTML rendering -- no React dependency needed. Supports both automatic and classic transforms.
-
-**Setup (automatic transform -- recommended):**
-
-```jsonc
-// tsconfig.json
-{
-  "compilerOptions": {
-    "jsx": "react-jsx",
-    "jsxImportSource": "@celsian/core"
-  }
-}
-```
-
-**Setup (classic transform):**
-
-```jsonc
-// tsconfig.json
-{
-  "compilerOptions": {
-    "jsx": "react",
-    "jsxFactory": "h",
-    "jsxFragmentFactory": "Fragment"
-  }
-}
-```
-
-```typescript
-import { h, Fragment } from '@celsian/core/jsx';
+npm install create-celsian
 ```
 
-**Usage:**
-
-```tsx
-import { renderToString, renderToDocument } from '@celsian/core';
-
-// Function components work like React
-function Layout({ title, children }: { title: string; children: any }) {
-  return (
-    <html>
-      <head><title>{title}</title></head>
-      <body>{children}</body>
-    </html>
-  );
-}
-
-function UserCard({ name, email }: { name: string; email: string }) {
-  return (
-    <div className="card">
-      <h2>{name}</h2>
-      <p>{email}</p>
-    </div>
-  );
-}
-
-app.get('/page', (req, reply) => {
-  const html = renderToDocument(
-    <Layout title="Users">
-      <UserCard name="Alice" email="alice@example.com" />
-    </Layout>
-  );
-  return reply.html(html);
-});
-```
-
-Supports `className`/`htmlFor` mapping, style objects, boolean attributes, void elements, `dangerouslySetInnerHTML`, Fragments, and XSS-safe escaping.
-
-## Features at a Glance
-
-| Category | Features |
-| -------- | -------- |
-| **Routing** | Radix-tree router, params, wildcards, HEAD fallback, 405, route tagging |
-| **Hooks** | 8-hook lifecycle (onRequest through onResponse), route-level hooks |
-| **Plugins** | Scoped encapsulation, app/request/reply decorators |
-| **Validation** | Zod, TypeBox, Valibot auto-detect; body, querystring, params schemas |
-| **Reply** | json, html, stream, redirect, sendFile (Range/ETag/304), download, cookies, 9 error helpers, JSX SSR |
-| **Security** | Helmet-style headers, CORS, CSRF protection, JWT, fixed-window rate limiting |
-| **Background** | Task queue with retries, cron scheduling, Redis queue backend |
-| **Real-time** | WebSocket with broadcast and connection management |
-| **Database** | Connection pool plugin, transactions, query analytics, Server-Timing |
-| **Caching** | Response cache, session management (KV store) |
-| **Infra** | Brotli/gzip/deflate compression, OpenAPI 3.1 + Swagger UI, structured logging, inject() testing |
-| **Deploy** | Node, Bun, Deno, Workers, Lambda, Vercel, Fly.io, Railway, graceful shutdown |
-
-## Core Concepts
-
-### Routes and Handlers
-
-```typescript
-app.get('/users/:id', (req, reply) => {
-  return reply.json({ id: req.params.id, include: req.query.include });
-});
-
-// Full route options with schema, hooks, and deployment tagging
-app.route({
-  method: 'POST',
-  url: '/items',
-  kind: 'serverless',
-  schema: { body: mySchema },
-  preHandler: [authHook],
-  handler(req, reply) { return reply.status(201).json(req.parsedBody); },
-});
-```
-
-### Hooks Lifecycle
-
-8 hooks run in order: `onRequest` > `preParsing` > `preValidation` > `preHandler` > `handler` > `preSerialization` > `onSend` > `onResponse`. Plus `onError` for error handling. Any hook can short-circuit by returning a `Response`.
-
-```typescript
-// Global hook
-app.addHook('onRequest', async (req, reply) => {
-  reply.header('x-request-id', crypto.randomUUID());
-});
-
-// Route-level hook
-app.route({
-  method: 'POST',
-  url: '/admin/users',
-  onRequest: [requireAdmin],
-  handler(req, reply) { return reply.json({ created: true }); },
-});
-```
-
-See [Hooks Lifecycle](docs/hooks.md) for the complete guide.
-
-### Reply Helpers
-
-```typescript
-reply.json({ data: [] });                            // JSON response
-reply.html('<h1>Hello</h1>');                         // HTML response
-reply.stream(readableStream);                         // Streaming
-reply.redirect('/new-path', 301);                     // Redirect
-await reply.sendFile('/path/to/report.pdf');          // Serve file
-await reply.download('/path/to/data.csv', 'export');  // Download
-
-// Structured error responses
-reply.notFound('User not found');     // 404
-reply.badRequest('Missing email');    // 400
-reply.unauthorized('Token expired');  // 401
-reply.forbidden();                    // 403
-reply.conflict();                     // 409
-reply.tooManyRequests();              // 429
-
-// Cookies + chaining
-reply.cookie('session', token, { httpOnly: true, secure: true });
-return reply.status(201).header('x-custom', 'value').json({ id: '1' });
-```
-
-#### File Serving with Range Requests
-
-`sendFile` and `download` support Range requests (HTTP 206), conditional GET (304), ETag, and Last-Modified headers. Pass `options.request` to enable these features:
-
-```typescript
-app.get('/files/:name', async (req, reply) => {
-  return reply.sendFile(req.params.name, {
-    root: './uploads',         // Resolve relative to this directory (with traversal protection)
-    request: req,              // Enable Range requests + conditional GET (304)
-    cacheControl: 'public, max-age=3600',  // Set Cache-Control header
-  });
-});
-
-// Download with Range support (for resumable downloads)
-app.get('/export/:id', async (req, reply) => {
-  return reply.download(`./data/${req.params.id}.csv`, 'export.csv', {
-    request: req,
-  });
-});
-```
-
-Supported Range formats: `bytes=0-499`, `bytes=500-`, `bytes=-500`, and multi-range (`bytes=0-499, 1000-1499`). Invalid ranges return 416 Range Not Satisfiable.
-
-#### Compression with Brotli
-
-The compression plugin prefers Brotli over gzip when the client supports it, providing better compression ratios for text content:
-
-```typescript
-import { compress } from '@celsian/compress';
-
-// Brotli + gzip + deflate (default)
-await app.register(compress());
-
-// Custom Brotli quality (0-11, default 4)
-await app.register(compress({ brotliQuality: 6 }));
-
-// Gzip/deflate only (disable Brotli)
-await app.register(compress({ encodings: ['gzip', 'deflate'] }));
-```
-
-### Error Handling
-
-Thrown errors are caught and returned as structured JSON. Stack traces are stripped in production.
-
-```typescript
-import { HttpError } from '@celsian/core';
-
-// Throw HTTP errors anywhere
-throw new HttpError(403, 'Forbidden');
-// { "error": "Forbidden", "statusCode": 403, "code": "FORBIDDEN" }
-
-// Custom error handler
-app.setErrorHandler((error, req, reply) => {
-  if (error.message.includes('UNIQUE constraint')) return reply.conflict();
-  return reply.internalServerError();
-});
-```
-
-### Type-Safe RPC
-
-`@celsian/rpc` provides tRPC-style procedures with type inference, middleware, and OpenAPI generation.
-
-```typescript
-// server.ts
-import { procedure, router, RPCHandler } from '@celsian/rpc';
-
-const appRouter = router({
-  users: {
-    list: procedure
-      .input(z.object({ limit: z.number().optional() }))
-      .query(async ({ input }) => [{ id: '1', name: 'Alice' }]),
-    create: procedure
-      .input(z.object({ name: z.string(), email: z.string().email() }))
-      .mutation(async ({ input }) => ({ id: '2', ...input })),
-  },
-});
-
-const rpc = new RPCHandler(appRouter);
-app.route({ method: ['GET', 'POST'], url: '/_rpc/*path', handler: (req) => rpc.handle(req) });
-export type AppRouter = typeof appRouter;
-
-// client.ts
-const client = createRPCClient<AppRouter>({ baseUrl: 'http://localhost:3000/_rpc' });
-const users = await client.users.list.query({ limit: 10 });
-const newUser = await client.users.create.mutate({ name: 'Bob', email: 'bob@example.com' });
-```
-
-## Try the Demo
-
-The [SaaS Demo](examples/saas-demo/) builds a complete backend in one file (~250 lines): JWT auth, users CRUD, background tasks, cron, SSE, and OpenAPI docs.
-
-```bash
-cd examples/saas-demo
-npm install
-npx tsx src/index.ts
-```
-
-Then hit `http://localhost:3000/docs` for the Swagger UI, or:
-
-```bash
-# Register
-curl -X POST http://localhost:3000/register \
-  -H 'Content-Type: application/json' \
-  -d '{"email":"alice@example.com","password":"secret123","name":"Alice"}'
-
-# Login and grab the token
-curl -X POST http://localhost:3000/login \
-  -H 'Content-Type: application/json' \
-  -d '{"email":"alice@example.com","password":"secret123"}'
-```
-
-## Ecosystem
-
-### Core Packages
-
-| Package | Description |
-| ------- | ----------- |
-| `@celsian/core` | Server runtime, routing, hooks, plugins, task queue, cron, WebSocket, CORS, security, database, OpenAPI |
-| `@celsian/schema` | Standard Schema adapters -- auto-detects Zod, TypeBox, Valibot |
-| `@celsian/rpc` | Type-safe RPC procedures, middleware, OpenAPI generation, typed client |
-| `@celsian/jwt` | JWT sign/verify plugin with route guard helper |
-| `@celsian/cache` | KV store, response caching, session management |
-| `@celsian/rate-limit` | Fixed-window rate limiter with pluggable store |
-| `@celsian/compress` | Response compression (Brotli, gzip, deflate) |
-| `@celsian/queue-redis` | Redis-backed task queue for production |
-
-### Deployment Adapters
-
-| Package | Target |
-| ------- | ------ |
-| `@celsian/adapter-cloudflare` | Cloudflare Workers (env bindings, execution context) |
-| `@celsian/adapter-lambda` | AWS Lambda + API Gateway v2 |
-| `@celsian/adapter-vercel` | Vercel Serverless + Edge Functions |
-| `@celsian/adapter-node` | Standalone Node.js server |
-| `@celsian/adapter-fly` | Fly.io (generates fly.toml, Dockerfile, multi-region) |
-| `@celsian/adapter-railway` | Railway (generates railway.json, Procfile) |
-
-### Tooling
-
-| Package | Description |
-| ------- | ----------- |
-| `create-celsian` | Project scaffolder (`npx create-celsian my-api`) |
-| `@celsian/cli` | Dev server, route listing, code generation |
-| `celsian` | Meta-package for single-import convenience |
-
-## Production Features
-
-### Graceful Shutdown
-
-On SIGTERM/SIGINT: stops accepting connections, drains in-flight requests, stops workers and cron, runs cleanup.
-
-```typescript
-serve(app, {
-  shutdownTimeout: 15_000,
-  onShutdown: () => db.close(),
-});
-```
-
-### Health Checks and Route Manifest
-
-```typescript
-app.health({ check: () => pool.isHealthy() });  // /health + /ready
-
-// Tag routes for deployment tooling
-app.route({ method: 'GET', url: '/api/users', kind: 'serverless', handler });
-app.route({ method: 'GET', url: '/ws', kind: 'hot', handler });
-const manifest = app.getRouteManifest(); // { serverless: [...], hot: [...], task: [...] }
-```
-
-### Database Analytics
-
-Wrap your pool with `trackedPool()` for per-request query metrics, `Server-Timing` headers, and slow query logging -- zero handler changes. See [Database Plugin](docs/database.md).
-
-```typescript
-const pool = trackedPool(pgPool);
-await app.register(database({ createPool: () => pool }), { encapsulate: false });
-await app.register(dbAnalytics({ slowThreshold: 100 }), { encapsulate: false });
-// Response: Server-Timing: db;dur=12.5;desc="3 queries"
-```
-
-### Testing Without a Server
-
-```typescript
-const response = await app.inject({ method: 'GET', url: '/hello' });
-const body = await response.json();  // { hello: 'world' }
-```
-
-## Deployment
-
-Swap the entry point for the JavaScript runtime you are deploying to. See [Deployment Guide](docs/deployment.md) for full instructions and provider-specific credential/config requirements.
-
-```typescript
-serve(app, { port: 3000 });                              // Node / Bun / Deno
-
-export default createCloudflareHandler(app);              // Cloudflare Workers
-export const handler = createLambdaHandler(app);          // AWS Lambda
-export default createVercelHandler(app);                  // Vercel Serverless
-export default createVercelEdgeHandler(app);              // Vercel Edge
-```
-
-Fly.io and Railway adapters auto-generate deployment configs (`fly.toml`, Dockerfile, `railway.json`). Adapter packages are covered by local generation/package smoke tests; live cloud deployment still depends on each provider's credentials and project configuration.
-
-## Benchmark Results
-
-Node.js v22.13.1, macOS Darwin (Apple Silicon), 10 connections, 10s per scenario.
-
-| Scenario              | Fastify (req/s) | CelsianJS (req/s) | Express (req/s) |
-| --------------------- | ---------------: | -----------------: | --------------: |
-| JSON response         |           45,866 |             27,996 |          16,321 |
-| Route params          |           45,440 |             27,026 |          16,288 |
-| Middleware (5)        |           41,380 |             24,445 |          15,751 |
-| JSON body parsing     |           29,998 |             19,074 |          14,648 |
-| Error handling        |           32,398 |             18,542 |          14,765 |
-
-Fastify is the fastest Node.js framework. CelsianJS is 1.3-1.7x faster than Express. The gap with Fastify comes from Web Standard API overhead (`Request`/`Response` per request). CelsianJS trades some throughput for multi-runtime portability and built-in application infrastructure.
-
-## Configuration
-
-CelsianJS loads `celsian.config.ts` (or `.js`/`.mjs`) automatically:
-
-```typescript
-import { defineConfig } from '@celsian/core';
-
-export default defineConfig({
-  server: { port: 3000, host: 'localhost', trustProxy: true },
-  schema: { provider: 'auto' },  // or 'zod' | 'typebox' | 'valibot'
-});
-```
-
-## Documentation
-
-- [Quick Start Guide](docs/quickstart.md)
-- [Hooks Lifecycle](docs/hooks.md)
-- [Plugins and Encapsulation](docs/plugins.md)
-- [Deployment Guide](docs/deployment.md)
-- [Database Plugin](docs/database.md)
-
-## WhatStack
-
-CelsianJS is the backend half of [WhatStack](https://whatfw.com) — the agent-first full-stack framework:
-
-| Layer | Framework | What It Does |
-|-------|-----------|-------------|
-| Frontend | [WhatFW](https://whatfw.com) | Signals, fine-grained rendering, MCP DevTools |
-| Backend | **CelsianJS** | Hooks, plugins, tasks, cron, RPC, multi-runtime |
-| Deploy | [Vura](https://github.com/zvndev/vura) | Platform deployment (coming soon) |
-
-## Contributing
-
-```bash
-git clone https://github.com/CelsianJs/celsian.git
-cd celsian
-pnpm install
-pnpm test
-```
-
-The project uses pnpm workspaces. All packages are in `packages/`. Tests use Vitest.
-
 ## License
 
 MIT

package/dist/index.d.ts

@@ -1,4 +1,3 @@
 #!/usr/bin/env node
-export type Template = "full" | "basic" | "rest-api" | "rpc-api";
-export declare function scaffold(name: string, template: string, pm: string): void;
+export {};
 //# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";AAgBA,MAAM,MAAM,QAAQ,GAAG,MAAM,GAAG,OAAO,GAAG,UAAU,GAAG,SAAS,CAAC;AA6DjE,wBAAgB,QAAQ,CAAC,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,GAAG,IAAI,CAqCzE"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":""}

package/dist/index.js

@@ -1,14 +1,14 @@
 #!/usr/bin/env node
 // create-celsian — Project scaffolder
 // Zero external dependencies. Interactive prompts via raw stdin.
-import { existsSync, mkdirSync, readdirSync, realpathSync, writeFileSync } from "node:fs";
-import { basename, dirname, isAbsolute, join, relative, resolve } from "node:path";
+import { mkdirSync, writeFileSync } from "node:fs";
+import { basename, dirname, isAbsolute, join, resolve } from "node:path";
 import { createInterface } from "node:readline";
-import { fileURLToPath } from "node:url";
 import { basicTemplate } from "./templates/basic.js";
 import { fullTemplate } from "./templates/full.js";
 import { restApiTemplate } from "./templates/rest-api.js";
 import { rpcApiTemplate } from "./templates/rpc-api.js";
+// ─── Template Registry ───
 const templates = {
     full: fullTemplate,
     basic: basicTemplate,
@@ -21,6 +21,17 @@ const templateDescriptions = {
     "rest-api": "REST API with TypeBox schemas",
     "rpc-api": "RPC-first with typed client",
 };
+// ─── CLI Argument Parsing ───
+const args = process.argv.slice(2);
+// Handle --help
+if (args.includes("--help") || args.includes("-h")) {
+    printUsage();
+    process.exit(0);
+}
+// Extract flags
+const templateFlag = args.indexOf("--template");
+const templateArg = templateFlag !== -1 ? args[templateFlag + 1] : undefined;
+const nameArg = args.find((a) => !a.startsWith("--") && (templateFlag === -1 || args.indexOf(a) !== templateFlag + 1));
 // ─── Interactive Mode ───
 async function prompt(question, defaultValue) {
     const rl = createInterface({ input: process.stdin, output: process.stdout });
@@ -58,14 +69,27 @@ async function interactiveMode() {
     return { name, template, pm };
 }
 // ─── Scaffold ───
-export function scaffold(name, template, pm) {
+function scaffold(name, template, pm) {
     const files = templates[template];
     if (!files) {
         console.error(`\n  Unknown template: ${template}`);
         console.error(`  Available: ${Object.keys(templates).join(", ")}\n`);
         process.exit(1);
     }
-    const { dir, projectName } = validateTarget(name);
+    // Sanitize: reject names containing path traversal
+    if (name.includes("..")) {
+        console.error("\n  Invalid project name: must not contain '..'.\n");
+        process.exit(1);
+    }
+    const cwd = process.cwd();
+    const dir = isAbsolute(name) ? name : join(cwd, name);
+    const resolved = resolve(dir);
+    // Ensure the resolved path is a child of cwd
+    if (!resolved.startsWith(cwd + "/") && resolved !== cwd) {
+        console.error("\n  Invalid project name: resolved path must be inside the current directory.\n");
+        process.exit(1);
+    }
+    const projectName = basename(dir);
     console.log(`\n  Creating Celsian project: ${projectName}`);
     console.log(`  Template: ${template}`);
     console.log("");
@@ -91,57 +115,8 @@ export function scaffold(name, template, pm) {
     }
     console.log("");
 }
-function validateTarget(name) {
-    const trimmedName = name.trim();
-    if (!trimmedName) {
-        console.error("\n  Invalid project name: name is required.\n");
-        process.exit(1);
-    }
-    if (trimmedName.split(/[\\/]+/).includes("..")) {
-        console.error("\n  Invalid project name: must not contain '..'.\n");
-        process.exit(1);
-    }
-    const cwd = resolve(process.cwd());
-    const dir = resolve(isAbsolute(trimmedName) ? trimmedName : join(cwd, trimmedName));
-    const rel = relative(cwd, dir);
-    if (rel === "" || rel.startsWith("..") || isAbsolute(rel)) {
-        console.error("\n  Invalid project name: resolved path must be inside the current directory.\n");
-        process.exit(1);
-    }
-    if (existsSync(dir)) {
-        const entries = readdirSync(dir);
-        if (entries.length > 0) {
-            console.error("\n  Refusing to create project: target directory already exists and is not empty.\n");
-            process.exit(1);
-        }
-    }
-    const projectName = sanitizePackageName(basename(dir));
-    if (!projectName) {
-        console.error("\n  Invalid project name: cannot derive a valid package name.\n");
-        process.exit(1);
-    }
-    return { dir, projectName };
-}
-function sanitizePackageName(name) {
-    return name
-        .trim()
-        .toLowerCase()
-        .replace(/^[._-]+/, "")
-        .replace(/[._\s]+/g, "-")
-        .replace(/[^a-z0-9-]/g, "")
-        .replace(/-+/g, "-")
-        .replace(/-+$/g, "");
-}
 // ─── Main ───
 async function main() {
-    const args = process.argv.slice(2);
-    if (args.includes("--help") || args.includes("-h")) {
-        printUsage();
-        process.exit(0);
-    }
-    const templateFlag = args.indexOf("--template");
-    const templateArg = templateFlag !== -1 ? args[templateFlag + 1] : undefined;
-    const nameArg = args.find((a) => !a.startsWith("--") && (templateFlag === -1 || args.indexOf(a) !== templateFlag + 1));
     // If both name and template are provided via CLI args, skip interactive mode
     if (nameArg) {
         const template = templateArg ?? "full";
@@ -173,10 +148,8 @@ function printUsage() {
     console.log("  Run without arguments for interactive mode.");
     console.log("");
 }
-if (process.argv[1] && realpathSync(resolve(process.argv[1])) === fileURLToPath(import.meta.url)) {
-    main().catch((err) => {
-        console.error(err);
-        process.exit(1);
-    });
-}
+main().catch((err) => {
+    console.error(err);
+    process.exit(1);
+});
 //# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";AAEA,sCAAsC;AACtC,iEAAiE;AAEjE,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,WAAW,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AAC1F,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACnF,OAAO,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AAChD,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AACzC,OAAO,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AACrD,OAAO,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AACnD,OAAO,EAAE,eAAe,EAAE,MAAM,yBAAyB,CAAC;AAC1D,OAAO,EAAE,cAAc,EAAE,MAAM,wBAAwB,CAAC;AAMxD,MAAM,SAAS,GAA6C;IAC1D,IAAI,EAAE,YAAY;IAClB,KAAK,EAAE,aAAa;IACpB,UAAU,EAAE,eAAe;IAC3B,SAAS,EAAE,cAAc;CAC1B,CAAC;AAEF,MAAM,oBAAoB,GAA6B;IACrD,IAAI,EAAE,mEAAmE;IACzE,KAAK,EAAE,oBAAoB;IAC3B,UAAU,EAAE,+BAA+B;IAC3C,SAAS,EAAE,6BAA6B;CACzC,CAAC;AAEF,2BAA2B;AAE3B,KAAK,UAAU,MAAM,CAAC,QAAgB,EAAE,YAAoB;IAC1D,MAAM,EAAE,GAAG,eAAe,CAAC,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;IAC7E,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;QAC7B,EAAE,CAAC,QAAQ,CAAC,KAAK,QAAQ,KAAK,YAAY,KAAK,EAAE,CAAC,MAAM,EAAE,EAAE;YAC1D,EAAE,CAAC,KAAK,EAAE,CAAC;YACX,OAAO,CAAC,MAAM,CAAC,IAAI,EAAE,IAAI,YAAY,CAAC,CAAC;QACzC,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,oBAAoB;IAC3B,MAAM,SAAS,GAAG,OAAO,CAAC,GAAG,CAAC,qBAAqB,IAAI,EAAE,CAAC;IAC1D,IAAI,SAAS,CAAC,UAAU,CAAC,MAAM,CAAC;QAAE,OAAO,MAAM,CAAC;IAChD,IAAI,SAAS,CAAC,UAAU,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IAC9C,OAAO,KAAK,CAAC;AACf,CAAC;AAED,KAAK,UAAU,eAAe;IAC5B,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAChB,OAAO,CAAC,GAAG,CAAC,gCAAgC,CAAC,CAAC;IAC9C,OAAO,CAAC,GAAG,CAAC,gCAAgC,CAAC,CAAC;IAC9C,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAEhB,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,cAAc,EAAE,gBAAgB,CAAC,CAAC;IAE5D,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAChB,OAAO,CAAC,GAAG,CAAC,wBAAwB,CAAC,CAAC;IACtC,KAAK,MAAM,CAAC,GAAG,EAAE,IAAI,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,oBAAoB,CAAC,EAAE,CAAC;QAC/D,MAAM,MAAM,GAAG,GAAG,KAAK,MAAM,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC,CAAC,EAAE,CAAC;QACtD,OAAO,CAAC,GAAG,CAAC,OAAO,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,IAAI,IAAI,GAAG,MAAM,EAAE,CAAC,CAAC;IACxD,CAAC;IACD,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAEhB,MAAM,QAAQ,GAAG,MAAM,MAAM,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC;IAElD,MAAM,QAAQ,GAAG,oBAAoB,EAAE,CAAC;IACxC,MAAM,EAAE,GAAG,MAAM,MAAM,CAAC,iBAAiB,EAAE,QAAQ,CAAC,CAAC;IAErD,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC;AAChC,CAAC;AAED,mBAAmB;AAEnB,MAAM,UAAU,QAAQ,CAAC,IAAY,EAAE,QAAgB,EAAE,EAAU;IACjE,MAAM,KAAK,GAAG,SAAS,CAAC,QAAoB,CAAC,CAAC;IAC9C,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,OAAO,CAAC,KAAK,CAAC,yBAAyB,QAAQ,EAAE,CAAC,CAAC;QACnD,OAAO,CAAC,KAAK,CAAC,gBAAgB,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACrE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IAED,MAAM,EAAE,GAAG,EAAE,WAAW,EAAE,GAAG,cAAc,CAAC,IAAI,CAAC,CAAC;IAElD,OAAO,CAAC,GAAG,CAAC,iCAAiC,WAAW,EAAE,CAAC,CAAC;IAC5D,OAAO,CAAC,GAAG,CAAC,eAAe,QAAQ,EAAE,CAAC,CAAC;IACvC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAEhB,KAAK,MAAM,CAAC,QAAQ,EAAE,OAAO,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACxD,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;QACrC,MAAM,OAAO,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAC;QAClC,SAAS,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QACxC,aAAa,CAAC,QAAQ,EAAE,OAAO,CAAC,OAAO,CAAC,eAAe,EAAE,WAAW,CAAC,CAAC,CAAC;QACvE,OAAO,CAAC,GAAG,CAAC,OAAO,QAAQ,EAAE,CAAC,CAAC;IACjC,CAAC;IAED,MAAM,OAAO,GAAG,EAAE,KAAK,KAAK,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,GAAG,EAAE,UAAU,CAAC;IAC/D,MAAM,GAAG,GAAG,EAAE,KAAK,KAAK,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,GAAG,EAAE,UAAU,CAAC;IAE3D,OAAO,CAAC,GAAG,CAAC,yBAAyB,CAAC,CAAC;IACvC,OAAO,CAAC,GAAG,CAAC,QAAQ,WAAW,EAAE,CAAC,CAAC;IACnC,OAAO,CAAC,GAAG,CAAC,KAAK,OAAO,EAAE,CAAC,CAAC;IAC5B,IAAI,QAAQ,KAAK,MAAM,EAAE,CAAC;QACxB,OAAO,CAAC,GAAG,CAAC,wBAAwB,CAAC,CAAC;IACxC,CAAC;IACD,OAAO,CAAC,GAAG,CAAC,KAAK,GAAG,EAAE,CAAC,CAAC;IACxB,IAAI,QAAQ,KAAK,MAAM,EAAE,CAAC;QACxB,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAChB,OAAO,CAAC,GAAG,CAAC,yDAAyD,CAAC,CAAC;IACzE,CAAC;IACD,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;AAClB,CAAC;AAED,SAAS,cAAc,CAAC,IAAY;IAClC,MAAM,WAAW,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;IAChC,IAAI,CAAC,WAAW,EAAE,CAAC;QACjB,OAAO,CAAC,KAAK,CAAC,+CAA+C,CAAC,CAAC;QAC/D,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IAED,IAAI,WAAW,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QAC/C,OAAO,CAAC,KAAK,CAAC,oDAAoD,CAAC,CAAC;QACpE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IAED,MAAM,GAAG,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC;IACnC,MAAM,GAAG,GAAG,OAAO,CAAC,UAAU,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,WAAW,CAAC,CAAC,CAAC;IACpF,MAAM,GAAG,GAAG,QAAQ,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;IAC/B,IAAI,GAAG,KAAK,EAAE,IAAI,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;QAC1D,OAAO,CAAC,KAAK,CAAC,iFAAiF,CAAC,CAAC;QACjG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IAED,IAAI,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;QACpB,MAAM,OAAO,GAAG,WAAW,CAAC,GAAG,CAAC,CAAC;QACjC,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACvB,OAAO,CAAC,KAAK,CAAC,qFAAqF,CAAC,CAAC;YACrG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;IACH,CAAC;IAED,MAAM,WAAW,GAAG,mBAAmB,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC;IACvD,IAAI,CAAC,WAAW,EAAE,CAAC;QACjB,OAAO,CAAC,KAAK,CAAC,iEAAiE,CAAC,CAAC;QACjF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IAED,OAAO,EAAE,GAAG,EAAE,WAAW,EAAE,CAAC;AAC9B,CAAC;AAED,SAAS,mBAAmB,CAAC,IAAY;IACvC,OAAO,IAAI;SACR,IAAI,EAAE;SACN,WAAW,EAAE;SACb,OAAO,CAAC,SAAS,EAAE,EAAE,CAAC;SACtB,OAAO,CAAC,UAAU,EAAE,GAAG,CAAC;SACxB,OAAO,CAAC,aAAa,EAAE,EAAE,CAAC;SAC1B,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC;SACnB,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;AACzB,CAAC;AAED,eAAe;AAEf,KAAK,UAAU,IAAI;IACjB,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IAEnC,IAAI,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QACnD,UAAU,EAAE,CAAC;QACb,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IAED,MAAM,YAAY,GAAG,IAAI,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC;IAChD,MAAM,WAAW,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,YAAY,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IAC7E,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CACvB,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,YAAY,KAAK,CAAC,CAAC,IAAI,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,YAAY,GAAG,CAAC,CAAC,CAC5F,CAAC;IAEF,6EAA6E;IAC7E,IAAI,OAAO,EAAE,CAAC;QACZ,MAAM,QAAQ,GAAG,WAAW,IAAI,MAAM,CAAC;QACvC,MAAM,EAAE,GAAG,oBAAoB,EAAE,CAAC;QAClC,QAAQ,CAAC,OAAO,EAAE,QAAQ,EAAE,EAAE,CAAC,CAAC;QAChC,OAAO;IACT,CAAC;IAED,2CAA2C;IAC3C,yCAAyC;IACzC,IAAI,OAAO,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC;QACxB,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,EAAE,GAAG,MAAM,eAAe,EAAE,CAAC;QACvD,QAAQ,CAAC,IAAI,EAAE,QAAQ,EAAE,EAAE,CAAC,CAAC;IAC/B,CAAC;SAAM,CAAC;QACN,UAAU,EAAE,CAAC;QACb,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;AACH,CAAC;AAED,SAAS,UAAU;IACjB,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAChB,OAAO,CAAC,GAAG,CAAC,iFAAiF,CAAC,CAAC;IAC/F,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAChB,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC;IAC5B,KAAK,MAAM,CAAC,GAAG,EAAE,IAAI,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,oBAAoB,CAAC,EAAE,CAAC;QAC/D,MAAM,aAAa,GAAG,GAAG,KAAK,MAAM,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE,CAAC;QACzD,OAAO,CAAC,GAAG,CAAC,OAAO,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,IAAI,IAAI,GAAG,aAAa,EAAE,CAAC,CAAC;IAC/D,CAAC;IACD,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAChB,OAAO,CAAC,GAAG,CAAC,+CAA+C,CAAC,CAAC;IAC7D,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;AAClB,CAAC;AAED,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,YAAY,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;IACjG,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE;QACnB,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QACnB,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC,CAAC,CAAC;AACL,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";AAEA,sCAAsC;AACtC,iEAAiE;AAEjE,OAAO,EAAE,SAAS,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AACnD,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACzE,OAAO,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AAChD,OAAO,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AACrD,OAAO,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AACnD,OAAO,EAAE,eAAe,EAAE,MAAM,yBAAyB,CAAC;AAC1D,OAAO,EAAE,cAAc,EAAE,MAAM,wBAAwB,CAAC;AAExD,4BAA4B;AAE5B,MAAM,SAAS,GAA2C;IACxD,IAAI,EAAE,YAAY;IAClB,KAAK,EAAE,aAAa;IACpB,UAAU,EAAE,eAAe;IAC3B,SAAS,EAAE,cAAc;CAC1B,CAAC;AAEF,MAAM,oBAAoB,GAA2B;IACnD,IAAI,EAAE,mEAAmE;IACzE,KAAK,EAAE,oBAAoB;IAC3B,UAAU,EAAE,+BAA+B;IAC3C,SAAS,EAAE,6BAA6B;CACzC,CAAC;AAEF,+BAA+B;AAE/B,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;AAEnC,gBAAgB;AAChB,IAAI,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;IACnD,UAAU,EAAE,CAAC;IACb,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC;AAED,gBAAgB;AAChB,MAAM,YAAY,GAAG,IAAI,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC;AAChD,MAAM,WAAW,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,YAAY,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;AAC7E,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,YAAY,KAAK,CAAC,CAAC,IAAI,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,YAAY,GAAG,CAAC,CAAC,CAAC,CAAC;AAEvH,2BAA2B;AAE3B,KAAK,UAAU,MAAM,CAAC,QAAgB,EAAE,YAAoB;IAC1D,MAAM,EAAE,GAAG,eAAe,CAAC,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;IAC7E,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;QAC7B,EAAE,CAAC,QAAQ,CAAC,KAAK,QAAQ,KAAK,YAAY,KAAK,EAAE,CAAC,MAAM,EAAE,EAAE;YAC1D,EAAE,CAAC,KAAK,EAAE,CAAC;YACX,OAAO,CAAC,MAAM,CAAC,IAAI,EAAE,IAAI,YAAY,CAAC,CAAC;QACzC,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,oBAAoB;IAC3B,MAAM,SAAS,GAAG,OAAO,CAAC,GAAG,CAAC,qBAAqB,IAAI,EAAE,CAAC;IAC1D,IAAI,SAAS,CAAC,UAAU,CAAC,MAAM,CAAC;QAAE,OAAO,MAAM,CAAC;IAChD,IAAI,SAAS,CAAC,UAAU,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IAC9C,OAAO,KAAK,CAAC;AACf,CAAC;AAED,KAAK,UAAU,eAAe;IAC5B,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAChB,OAAO,CAAC,GAAG,CAAC,gCAAgC,CAAC,CAAC;IAC9C,OAAO,CAAC,GAAG,CAAC,gCAAgC,CAAC,CAAC;IAC9C,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAEhB,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,cAAc,EAAE,gBAAgB,CAAC,CAAC;IAE5D,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAChB,OAAO,CAAC,GAAG,CAAC,wBAAwB,CAAC,CAAC;IACtC,KAAK,MAAM,CAAC,GAAG,EAAE,IAAI,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,oBAAoB,CAAC,EAAE,CAAC;QAC/D,MAAM,MAAM,GAAG,GAAG,KAAK,MAAM,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC,CAAC,EAAE,CAAC;QACtD,OAAO,CAAC,GAAG,CAAC,OAAO,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,IAAI,IAAI,GAAG,MAAM,EAAE,CAAC,CAAC;IACxD,CAAC;IACD,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAEhB,MAAM,QAAQ,GAAG,MAAM,MAAM,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC;IAElD,MAAM,QAAQ,GAAG,oBAAoB,EAAE,CAAC;IACxC,MAAM,EAAE,GAAG,MAAM,MAAM,CAAC,iBAAiB,EAAE,QAAQ,CAAC,CAAC;IAErD,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC;AAChC,CAAC;AAED,mBAAmB;AAEnB,SAAS,QAAQ,CAAC,IAAY,EAAE,QAAgB,EAAE,EAAU;IAC1D,MAAM,KAAK,GAAG,SAAS,CAAC,QAAQ,CAAC,CAAC;IAClC,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,OAAO,CAAC,KAAK,CAAC,yBAAyB,QAAQ,EAAE,CAAC,CAAC;QACnD,OAAO,CAAC,KAAK,CAAC,gBAAgB,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACrE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IAED,mDAAmD;IACnD,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QACxB,OAAO,CAAC,KAAK,CAAC,oDAAoD,CAAC,CAAC;QACpE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IAED,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC;IAC1B,MAAM,GAAG,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;IACtD,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC;IAE9B,6CAA6C;IAC7C,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,GAAG,GAAG,GAAG,CAAC,IAAI,QAAQ,KAAK,GAAG,EAAE,CAAC;QACxD,OAAO,CAAC,KAAK,CAAC,iFAAiF,CAAC,CAAC;QACjG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IAED,MAAM,WAAW,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC;IAElC,OAAO,CAAC,GAAG,CAAC,iCAAiC,WAAW,EAAE,CAAC,CAAC;IAC5D,OAAO,CAAC,GAAG,CAAC,eAAe,QAAQ,EAAE,CAAC,CAAC;IACvC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAEhB,KAAK,MAAM,CAAC,QAAQ,EAAE,OAAO,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACxD,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;QACrC,MAAM,OAAO,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAC;QAClC,SAAS,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QACxC,aAAa,CAAC,QAAQ,EAAE,OAAO,CAAC,OAAO,CAAC,eAAe,EAAE,WAAW,CAAC,CAAC,CAAC;QACvE,OAAO,CAAC,GAAG,CAAC,OAAO,QAAQ,EAAE,CAAC,CAAC;IACjC,CAAC;IAED,MAAM,OAAO,GAAG,EAAE,KAAK,KAAK,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,GAAG,EAAE,UAAU,CAAC;IAC/D,MAAM,GAAG,GAAG,EAAE,KAAK,KAAK,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,GAAG,EAAE,UAAU,CAAC;IAE3D,OAAO,CAAC,GAAG,CAAC,yBAAyB,CAAC,CAAC;IACvC,OAAO,CAAC,GAAG,CAAC,QAAQ,WAAW,EAAE,CAAC,CAAC;IACnC,OAAO,CAAC,GAAG,CAAC,KAAK,OAAO,EAAE,CAAC,CAAC;IAC5B,IAAI,QAAQ,KAAK,MAAM,EAAE,CAAC;QACxB,OAAO,CAAC,GAAG,CAAC,wBAAwB,CAAC,CAAC;IACxC,CAAC;IACD,OAAO,CAAC,GAAG,CAAC,KAAK,GAAG,EAAE,CAAC,CAAC;IACxB,IAAI,QAAQ,KAAK,MAAM,EAAE,CAAC;QACxB,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAChB,OAAO,CAAC,GAAG,CAAC,yDAAyD,CAAC,CAAC;IACzE,CAAC;IACD,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;AAClB,CAAC;AAED,eAAe;AAEf,KAAK,UAAU,IAAI;IACjB,6EAA6E;IAC7E,IAAI,OAAO,EAAE,CAAC;QACZ,MAAM,QAAQ,GAAG,WAAW,IAAI,MAAM,CAAC;QACvC,MAAM,EAAE,GAAG,oBAAoB,EAAE,CAAC;QAClC,QAAQ,CAAC,OAAO,EAAE,QAAQ,EAAE,EAAE,CAAC,CAAC;QAChC,OAAO;IACT,CAAC;IAED,2CAA2C;IAC3C,yCAAyC;IACzC,IAAI,OAAO,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC;QACxB,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,EAAE,GAAG,MAAM,eAAe,EAAE,CAAC;QACvD,QAAQ,CAAC,IAAI,EAAE,QAAQ,EAAE,EAAE,CAAC,CAAC;IAC/B,CAAC;SAAM,CAAC;QACN,UAAU,EAAE,CAAC;QACb,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;AACH,CAAC;AAED,SAAS,UAAU;IACjB,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAChB,OAAO,CAAC,GAAG,CAAC,iFAAiF,CAAC,CAAC;IAC/F,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAChB,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC;IAC5B,KAAK,MAAM,CAAC,GAAG,EAAE,IAAI,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,oBAAoB,CAAC,EAAE,CAAC;QAC/D,MAAM,aAAa,GAAG,GAAG,KAAK,MAAM,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE,CAAC;QACzD,OAAO,CAAC,GAAG,CAAC,OAAO,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,IAAI,IAAI,GAAG,aAAa,EAAE,CAAC,CAAC;IAC/D,CAAC;IACD,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAChB,OAAO,CAAC,GAAG,CAAC,+CAA+C,CAAC,CAAC;IAC7D,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;AAClB,CAAC;AAED,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE;IACnB,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IACnB,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC,CAAC,CAAC"}

package/dist/templates/basic.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"basic.d.ts","sourceRoot":"","sources":["../../src/templates/basic.ts"],"names":[],"mappings":"AAAA,eAAO,MAAM,aAAa;;;;CAyEzB,CAAC"}
+{"version":3,"file":"basic.d.ts","sourceRoot":"","sources":["../../src/templates/basic.ts"],"names":[],"mappings":"AAAA,eAAO,MAAM,aAAa;;;;CAuEzB,CAAC"}

package/dist/templates/basic.js

@@ -9,7 +9,7 @@ export const basicTemplate = {
             start: "node dist/index.js",
         },
         dependencies: {
-            celsian: "^0.3.12",
+            celsian: "latest",
         },
         devDependencies: {
             typescript: "^5.7.0",
@@ -22,8 +22,6 @@ export const basicTemplate = {
             target: "ES2022",
             module: "ESNext",
             moduleResolution: "bundler",
-            lib: ["ES2022"],
-            types: ["node"],
             strict: true,
             esModuleInterop: true,
             skipLibCheck: true,
@@ -61,7 +59,7 @@ app.get('/hello/:name', (req, reply) => {
   return reply.json({ message: \`Hello, \${req.params.name}!\` });
 });
 
-serve(app, { port: 3000 });
+serve(app);
 `,
 };
 //# sourceMappingURL=basic.js.map

package/dist/templates/basic.js.map

@@ -1 +1 @@
-{"version":3,"file":"basic.js","sourceRoot":"","sources":["../../src/templates/basic.ts"],"names":[],"mappings":"AAAA,MAAM,CAAC,MAAM,aAAa,GAAG;IAC3B,cAAc,EAAE,IAAI,CAAC,SAAS,CAC5B;QACE,IAAI,EAAE,UAAU;QAChB,OAAO,EAAE,OAAO;QAChB,IAAI,EAAE,QAAQ;QACd,OAAO,EAAE;YACP,GAAG,EAAE,8BAA8B;YACnC,KAAK,EAAE,KAAK;YACZ,KAAK,EAAE,oBAAoB;SAC5B;QACD,YAAY,EAAE;YACZ,OAAO,EAAE,SAAS;SACnB;QACD,eAAe,EAAE;YACf,UAAU,EAAE,QAAQ;YACpB,GAAG,EAAE,QAAQ;YACb,aAAa,EAAE,SAAS;SACzB;KACF,EACD,IAAI,EACJ,CAAC,CACF;IACD,eAAe,EAAE,IAAI,CAAC,SAAS,CAC7B;QACE,eAAe,EAAE;YACf,MAAM,EAAE,QAAQ;YAChB,MAAM,EAAE,QAAQ;YAChB,gBAAgB,EAAE,SAAS;YAC3B,GAAG,EAAE,CAAC,QAAQ,CAAC;YACf,KAAK,EAAE,CAAC,MAAM,CAAC;YACf,MAAM,EAAE,IAAI;YACZ,eAAe,EAAE,IAAI;YACrB,YAAY,EAAE,IAAI;YAClB,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,KAAK;SACf;QACD,OAAO,EAAE,CAAC,KAAK,CAAC;KACjB,EACD,IAAI,EACJ,CAAC,CACF;IACD,cAAc,EAAE;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CA8BjB;CACA,CAAC"}
+{"version":3,"file":"basic.js","sourceRoot":"","sources":["../../src/templates/basic.ts"],"names":[],"mappings":"AAAA,MAAM,CAAC,MAAM,aAAa,GAAG;IAC3B,cAAc,EAAE,IAAI,CAAC,SAAS,CAC5B;QACE,IAAI,EAAE,UAAU;QAChB,OAAO,EAAE,OAAO;QAChB,IAAI,EAAE,QAAQ;QACd,OAAO,EAAE;YACP,GAAG,EAAE,8BAA8B;YACnC,KAAK,EAAE,KAAK;YACZ,KAAK,EAAE,oBAAoB;SAC5B;QACD,YAAY,EAAE;YACZ,OAAO,EAAE,QAAQ;SAClB;QACD,eAAe,EAAE;YACf,UAAU,EAAE,QAAQ;YACpB,GAAG,EAAE,QAAQ;YACb,aAAa,EAAE,SAAS;SACzB;KACF,EACD,IAAI,EACJ,CAAC,CACF;IACD,eAAe,EAAE,IAAI,CAAC,SAAS,CAC7B;QACE,eAAe,EAAE;YACf,MAAM,EAAE,QAAQ;YAChB,MAAM,EAAE,QAAQ;YAChB,gBAAgB,EAAE,SAAS;YAC3B,MAAM,EAAE,IAAI;YACZ,eAAe,EAAE,IAAI;YACrB,YAAY,EAAE,IAAI;YAClB,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,KAAK;SACf;QACD,OAAO,EAAE,CAAC,KAAK,CAAC;KACjB,EACD,IAAI,EACJ,CAAC,CACF;IACD,cAAc,EAAE;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CA8BjB;CACA,CAAC"}

package/dist/templates/full.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"full.d.ts","sourceRoot":"","sources":["../../src/templates/full.ts"],"names":[],"mappings":"AAAA,eAAO,MAAM,YAAY,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAq4B/C,CAAC"}
+{"version":3,"file":"full.d.ts","sourceRoot":"","sources":["../../src/templates/full.ts"],"names":[],"mappings":"AAAA,eAAO,MAAM,YAAY,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAm4B/C,CAAC"}

package/dist/templates/full.js

@@ -11,11 +11,11 @@ export const fullTemplate = {
             lint: "npx tsc --noEmit",
         },
         dependencies: {
-            celsian: "^0.3.12",
-            "@celsian/core": "^0.3.11",
-            "@celsian/jwt": "^0.3.11",
-            "@celsian/rpc": "^0.3.11",
-            "@celsian/rate-limit": "^0.3.11",
+            celsian: "latest",
+            "@celsian/core": "latest",
+            "@celsian/jwt": "latest",
+            "@celsian/rpc": "latest",
+            "@celsian/rate-limit": "latest",
             "@sinclair/typebox": "^0.34.0",
         },
         devDependencies: {
@@ -216,7 +216,9 @@ export function securityPlugins(): PluginFunction[] {
     rateLimit({
       max: 100,
       window: 60_000,
-      keyGenerator: (req) => req.headers.get('x-forwarded-for') ?? 'local',
+      // Local scaffold default: use a stable single-process key without trusting proxy headers.
+      // In production, replace this with a user/session/IP key appropriate for your deployment.
+      keyGenerator: () => 'local-scaffold',
     }),
   ];
 }
@@ -249,7 +251,7 @@ export default function healthRoutes(): PluginFunction {
 
 import { Type } from '@sinclair/typebox';
 import type { CelsianReply, CelsianRequest, PluginFunction } from '@celsian/core';
-import type { UpdateUserInput, User, CreateUserInput } from '../types.js';
+import type { User } from '../types.js';
 import { db } from '../plugins/database.js';
 import { requireAuth } from '../plugins/auth.js';
 
@@ -275,7 +277,7 @@ export default function userRoutes(): PluginFunction {
     app.post('/users', {
       schema: { body: CreateUserSchema },
     }, (req, reply) => {
-      const { name, email } = req.parsedBody as CreateUserInput;
+      const { name, email } = req.parsedBody as { name: string; email: string };
       const user: User = {
         id: db.generateId(),
         name,
@@ -300,7 +302,7 @@ export default function userRoutes(): PluginFunction {
     }, (req, reply) => {
       const user = db.users.get(req.params.id);
       if (!user) return reply.status(404).json({ error: 'User not found' });
-      const updates = req.parsedBody as UpdateUserInput;
+      const updates = req.parsedBody as { name?: string; email?: string };
       if (updates.name !== undefined) user.name = updates.name;
       if (updates.email !== undefined) user.email = updates.email;
       db.users.set(user.id, user);
@@ -315,7 +317,7 @@ export default function userRoutes(): PluginFunction {
       handler(req: CelsianRequest, reply: CelsianReply) {
         const existed = db.users.delete(req.params.id);
         if (!existed) return reply.status(404).json({ error: 'User not found' });
-        return reply.status(204).send(null);
+        return reply.status(204).json({ deleted: true });
       },
     });
   };
@@ -333,24 +335,21 @@ import type { PluginFunction } from '@celsian/core';
 const appRouter = router({
   greeting: {
     hello: procedure
-      .input(Type.Object({ name: Type.String() }))
+      .input<{ name: string }>(Type.Object({ name: Type.String() }))
       .query(({ input }) => {
-        const data = input as { name: string };
-        return { message: \`Hello, \${data.name}!\` };
+        return { message: \`Hello, \${input.name}!\` };
       }),
   },
   math: {
     add: procedure
-      .input(Type.Object({ a: Type.Number(), b: Type.Number() }))
+      .input<{ a: number; b: number }>(Type.Object({ a: Type.Number(), b: Type.Number() }))
       .query(({ input }) => {
-        const data = input as { a: number; b: number };
-        return { result: data.a + data.b };
+        return { result: input.a + input.b };
       }),
     multiply: procedure
-      .input(Type.Object({ a: Type.Number(), b: Type.Number() }))
+      .input<{ a: number; b: number }>(Type.Object({ a: Type.Number(), b: Type.Number() }))
       .mutation(({ input }) => {
-        const data = input as { a: number; b: number };
-        return { result: data.a * data.b };
+        return { result: input.a * input.b };
       }),
   },
   system: {
@@ -509,19 +508,18 @@ import healthRoutes from '../src/routes/health.js';
 import userRoutes from '../src/routes/users.js';
 import rpcRoutes from '../src/routes/rpc.js';
 
-async function createTestApp() {
+function createTestApp() {
   const app = createApp();
   // Register just what we need — skip auth/security for tests
-  await app.register(healthRoutes());
-  await app.register(userRoutes());
-  await app.register(rpcRoutes());
-  await app.ready();
+  app.register(healthRoutes());
+  app.register(userRoutes());
+  app.register(rpcRoutes());
   return app;
 }
 
 describe('Health', () => {
   it('GET /health returns status ok', async () => {
-    const app = await createTestApp();
+    const app = createTestApp();
     const res = await app.inject({ url: '/health' });
     expect(res.status).toBe(200);
     const body = await res.json();
@@ -533,7 +531,7 @@ describe('Health', () => {
 
 describe('Users CRUD', () => {
   it('GET /users returns the seeded user', async () => {
-    const app = await createTestApp();
+    const app = createTestApp();
     const res = await app.inject({ url: '/users' });
     expect(res.status).toBe(200);
     const users = await res.json();
@@ -543,7 +541,7 @@ describe('Users CRUD', () => {
   });
 
   it('POST /users creates a new user', async () => {
-    const app = await createTestApp();
+    const app = createTestApp();
     const res = await app.inject({
       method: 'POST',
       url: '/users',
@@ -558,7 +556,7 @@ describe('Users CRUD', () => {
   });
 
   it('GET /users/:id returns a specific user', async () => {
-    const app = await createTestApp();
+    const app = createTestApp();
 
     // Create a user first
     const createRes = await app.inject({
@@ -576,13 +574,13 @@ describe('Users CRUD', () => {
   });
 
   it('GET /users/:id returns 404 for unknown user', async () => {
-    const app = await createTestApp();
+    const app = createTestApp();
     const res = await app.inject({ url: '/users/99999' });
     expect(res.status).toBe(404);
   });
 
   it('DELETE /users/:id without auth returns 401', async () => {
-    const app = await createTestApp();
+    const app = createTestApp();
     const res = await app.inject({ method: 'DELETE', url: '/users/1' });
     // Without the JWT guard registered in test mode, the route handler runs directly.
     // In the full app with auth, this would return 401.
@@ -593,7 +591,7 @@ describe('Users CRUD', () => {
 
 describe('RPC', () => {
   it('GET /_rpc/system.ping returns pong', async () => {
-    const app = await createTestApp();
+    const app = createTestApp();
     const res = await app.inject({ url: '/_rpc/system.ping' });
     expect(res.status).toBe(200);
     const body = await res.json();
@@ -601,7 +599,7 @@ describe('RPC', () => {
   });
 
   it('GET /_rpc/greeting.hello returns greeting', async () => {
-    const app = await createTestApp();
+    const app = createTestApp();
     const res = await app.inject({
       url: '/_rpc/greeting.hello?input=' + encodeURIComponent(JSON.stringify({ name: 'World' })),
     });
@@ -611,7 +609,7 @@ describe('RPC', () => {
   });
 
   it('POST /_rpc/math.multiply performs mutation', async () => {
-    const app = await createTestApp();
+    const app = createTestApp();
     const res = await app.inject({
       method: 'POST',
       url: '/_rpc/math.multiply',

package/dist/templates/full.js.map

@@ -1 +1 @@
-{"version":3,"file":"full.js","sourceRoot":"","sources":["../../src/templates/full.ts"],"names":[],"mappings":"AAAA,MAAM,CAAC,MAAM,YAAY,GAA2B;IAClD,cAAc,EAAE,IAAI,CAAC,SAAS,CAC5B;QACE,IAAI,EAAE,UAAU;QAChB,OAAO,EAAE,OAAO;QAChB,IAAI,EAAE,QAAQ;QACd,OAAO,EAAE;YACP,GAAG,EAAE,8BAA8B;YACnC,KAAK,EAAE,KAAK;YACZ,KAAK,EAAE,oBAAoB;YAC3B,IAAI,EAAE,gBAAgB;YACtB,IAAI,EAAE,kBAAkB;SACzB;QACD,YAAY,EAAE;YACZ,OAAO,EAAE,SAAS;YAClB,eAAe,EAAE,SAAS;YAC1B,cAAc,EAAE,SAAS;YACzB,cAAc,EAAE,SAAS;YACzB,qBAAqB,EAAE,SAAS;YAChC,mBAAmB,EAAE,SAAS;SAC/B;QACD,eAAe,EAAE;YACf,UAAU,EAAE,QAAQ;YACpB,GAAG,EAAE,QAAQ;YACb,MAAM,EAAE,QAAQ;YAChB,aAAa,EAAE,SAAS;SACzB;KACF,EACD,IAAI,EACJ,CAAC,CACF;IAED,eAAe,EAAE,IAAI,CAAC,SAAS,CAC7B;QACE,eAAe,EAAE;YACf,MAAM,EAAE,QAAQ;YAChB,MAAM,EAAE,QAAQ;YAChB,gBAAgB,EAAE,SAAS;YAC3B,GAAG,EAAE,CAAC,QAAQ,CAAC;YACf,KAAK,EAAE,CAAC,MAAM,CAAC;YACf,MAAM,EAAE,IAAI;YACZ,eAAe,EAAE,IAAI;YACrB,YAAY,EAAE,IAAI;YAClB,gCAAgC,EAAE,IAAI;YACtC,iBAAiB,EAAE,IAAI;YACvB,eAAe,EAAE,IAAI;YACrB,WAAW,EAAE,IAAI;YACjB,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,KAAK;SACf;QACD,OAAO,EAAE,CAAC,KAAK,CAAC;KACjB,EACD,IAAI,EACJ,CAAC,CACF;IAED,cAAc,EAAE;;;;;;;;;;;;;CAajB;IAEC,YAAY,EAAE;;;;;CAKf;IAEC,uBAAuB;IACvB,cAAc,EAAE;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CA+BjB;IAEC,kCAAkC;IAClC,yBAAyB,EAAE;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAiC5B;IAEC,8BAA8B;IAC9B,qBAAqB,EAAE;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAgCxB;IAEC,kCAAkC;IAClC,yBAAyB,EAAE;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAqD5B;IAEC,+BAA+B;IAC/B,sBAAsB,EAAE;;;;;;;;;;;;;;;;;;;;CAoBzB;IAEC,8BAA8B;IAC9B,qBAAqB,EAAE;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CA4ExB;IAEC,4BAA4B;IAC5B,mBAAmB,EAAE;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAsDtB;IAEC,+BAA+B;IAC/B,sBAAsB,EAAE;;;;;;;;;;;;;;;;;;;;;;;;;;CA0BzB;IAEC,8BAA8B;IAC9B,qBAAqB,EAAE;;;;;;;;;;;;;;;;;;CAkBxB;IAEC,uBAAuB;IACvB,cAAc,EAAE;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAoEjB;IAEC,2BAA2B;IAC3B,kBAAkB,EAAE;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CA8HrB;IAEC,qBAAqB;IACrB,UAAU,EAAE;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAgCb;IAEC,oBAAoB;IACpB,WAAW,EAAE;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAwNd;CACA,CAAC"}
+{"version":3,"file":"full.js","sourceRoot":"","sources":["../../src/templates/full.ts"],"names":[],"mappings":"AAAA,MAAM,CAAC,MAAM,YAAY,GAA2B;IAClD,cAAc,EAAE,IAAI,CAAC,SAAS,CAC5B;QACE,IAAI,EAAE,UAAU;QAChB,OAAO,EAAE,OAAO;QAChB,IAAI,EAAE,QAAQ;QACd,OAAO,EAAE;YACP,GAAG,EAAE,8BAA8B;YACnC,KAAK,EAAE,KAAK;YACZ,KAAK,EAAE,oBAAoB;YAC3B,IAAI,EAAE,gBAAgB;YACtB,IAAI,EAAE,kBAAkB;SACzB;QACD,YAAY,EAAE;YACZ,OAAO,EAAE,QAAQ;YACjB,eAAe,EAAE,QAAQ;YACzB,cAAc,EAAE,QAAQ;YACxB,cAAc,EAAE,QAAQ;YACxB,qBAAqB,EAAE,QAAQ;YAC/B,mBAAmB,EAAE,SAAS;SAC/B;QACD,eAAe,EAAE;YACf,UAAU,EAAE,QAAQ;YACpB,GAAG,EAAE,QAAQ;YACb,MAAM,EAAE,QAAQ;YAChB,aAAa,EAAE,SAAS;SACzB;KACF,EACD,IAAI,EACJ,CAAC,CACF;IAED,eAAe,EAAE,IAAI,CAAC,SAAS,CAC7B;QACE,eAAe,EAAE;YACf,MAAM,EAAE,QAAQ;YAChB,MAAM,EAAE,QAAQ;YAChB,gBAAgB,EAAE,SAAS;YAC3B,GAAG,EAAE,CAAC,QAAQ,CAAC;YACf,KAAK,EAAE,CAAC,MAAM,CAAC;YACf,MAAM,EAAE,IAAI;YACZ,eAAe,EAAE,IAAI;YACrB,YAAY,EAAE,IAAI;YAClB,gCAAgC,EAAE,IAAI;YACtC,iBAAiB,EAAE,IAAI;YACvB,eAAe,EAAE,IAAI;YACrB,WAAW,EAAE,IAAI;YACjB,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,KAAK;SACf;QACD,OAAO,EAAE,CAAC,KAAK,CAAC;KACjB,EACD,IAAI,EACJ,CAAC,CACF;IAED,cAAc,EAAE;;;;;;;;;;;;;CAajB;IAEC,YAAY,EAAE;;;;;CAKf;IAEC,uBAAuB;IACvB,cAAc,EAAE;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CA+BjB;IAEC,kCAAkC;IAClC,yBAAyB,EAAE;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAiC5B;IAEC,8BAA8B;IAC9B,qBAAqB,EAAE;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAgCxB;IAEC,kCAAkC;IAClC,yBAAyB,EAAE;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAuD5B;IAEC,+BAA+B;IAC/B,sBAAsB,EAAE;;;;;;;;;;;;;;;;;;;;CAoBzB;IAEC,8BAA8B;IAC9B,qBAAqB,EAAE;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CA4ExB;IAEC,4BAA4B;IAC5B,mBAAmB,EAAE;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAmDtB;IAEC,+BAA+B;IAC/B,sBAAsB,EAAE;;;;;;;;;;;;;;;;;;;;;;;;;;CA0BzB;IAEC,8BAA8B;IAC9B,qBAAqB,EAAE;;;;;;;;;;;;;;;;;;CAkBxB;IAEC,uBAAuB;IACvB,cAAc,EAAE;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAoEjB;IAEC,2BAA2B;IAC3B,kBAAkB,EAAE;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CA6HrB;IAEC,qBAAqB;IACrB,UAAU,EAAE;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAgCb;IAEC,oBAAoB;IACpB,WAAW,EAAE;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAwNd;CACA,CAAC"}

package/dist/templates/rest-api.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"rest-api.d.ts","sourceRoot":"","sources":["../../src/templates/rest-api.ts"],"names":[],"mappings":"AAAA,eAAO,MAAM,eAAe;;;;CA8F3B,CAAC"}
+{"version":3,"file":"rest-api.d.ts","sourceRoot":"","sources":["../../src/templates/rest-api.ts"],"names":[],"mappings":"AAAA,eAAO,MAAM,eAAe;;;;CA4F3B,CAAC"}

package/dist/templates/rest-api.js

@@ -9,7 +9,7 @@ export const restApiTemplate = {
             start: "node dist/index.js",
         },
         dependencies: {
-            celsian: "^0.3.12",
+            celsian: "latest",
             "@sinclair/typebox": "^0.34.0",
         },
         devDependencies: {
@@ -23,8 +23,6 @@ export const restApiTemplate = {
             target: "ES2022",
             module: "ESNext",
             moduleResolution: "bundler",
-            lib: ["ES2022"],
-            types: ["node"],
             strict: true,
             esModuleInterop: true,
             skipLibCheck: true,
@@ -82,7 +80,7 @@ app.get('/users/:id', (req, reply) => {
   return reply.json(user);
 });
 
-serve(app, { port: 3000 });
+serve(app);
 `,
 };
 //# sourceMappingURL=rest-api.js.map

package/dist/templates/rest-api.js.map

@@ -1 +1 @@
-{"version":3,"file":"rest-api.js","sourceRoot":"","sources":["../../src/templates/rest-api.ts"],"names":[],"mappings":"AAAA,MAAM,CAAC,MAAM,eAAe,GAAG;IAC7B,cAAc,EAAE,IAAI,CAAC,SAAS,CAC5B;QACE,IAAI,EAAE,UAAU;QAChB,OAAO,EAAE,OAAO;QAChB,IAAI,EAAE,QAAQ;QACd,OAAO,EAAE;YACP,GAAG,EAAE,8BAA8B;YACnC,KAAK,EAAE,KAAK;YACZ,KAAK,EAAE,oBAAoB;SAC5B;QACD,YAAY,EAAE;YACZ,OAAO,EAAE,SAAS;YAClB,mBAAmB,EAAE,SAAS;SAC/B;QACD,eAAe,EAAE;YACf,UAAU,EAAE,QAAQ;YACpB,GAAG,EAAE,QAAQ;YACb,aAAa,EAAE,SAAS;SACzB;KACF,EACD,IAAI,EACJ,CAAC,CACF;IACD,eAAe,EAAE,IAAI,CAAC,SAAS,CAC7B;QACE,eAAe,EAAE;YACf,MAAM,EAAE,QAAQ;YAChB,MAAM,EAAE,QAAQ;YAChB,gBAAgB,EAAE,SAAS;YAC3B,GAAG,EAAE,CAAC,QAAQ,CAAC;YACf,KAAK,EAAE,CAAC,MAAM,CAAC;YACf,MAAM,EAAE,IAAI;YACZ,eAAe,EAAE,IAAI;YACrB,YAAY,EAAE,IAAI;YAClB,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,KAAK;SACf;QACD,OAAO,EAAE,CAAC,KAAK,CAAC;KACjB,EACD,IAAI,EACJ,CAAC,CACF;IACD,cAAc,EAAE;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAkDjB;CACA,CAAC"}
+{"version":3,"file":"rest-api.js","sourceRoot":"","sources":["../../src/templates/rest-api.ts"],"names":[],"mappings":"AAAA,MAAM,CAAC,MAAM,eAAe,GAAG;IAC7B,cAAc,EAAE,IAAI,CAAC,SAAS,CAC5B;QACE,IAAI,EAAE,UAAU;QAChB,OAAO,EAAE,OAAO;QAChB,IAAI,EAAE,QAAQ;QACd,OAAO,EAAE;YACP,GAAG,EAAE,8BAA8B;YACnC,KAAK,EAAE,KAAK;YACZ,KAAK,EAAE,oBAAoB;SAC5B;QACD,YAAY,EAAE;YACZ,OAAO,EAAE,QAAQ;YACjB,mBAAmB,EAAE,SAAS;SAC/B;QACD,eAAe,EAAE;YACf,UAAU,EAAE,QAAQ;YACpB,GAAG,EAAE,QAAQ;YACb,aAAa,EAAE,SAAS;SACzB;KACF,EACD,IAAI,EACJ,CAAC,CACF;IACD,eAAe,EAAE,IAAI,CAAC,SAAS,CAC7B;QACE,eAAe,EAAE;YACf,MAAM,EAAE,QAAQ;YAChB,MAAM,EAAE,QAAQ;YAChB,gBAAgB,EAAE,SAAS;YAC3B,MAAM,EAAE,IAAI;YACZ,eAAe,EAAE,IAAI;YACrB,YAAY,EAAE,IAAI;YAClB,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,KAAK;SACf;QACD,OAAO,EAAE,CAAC,KAAK,CAAC;KACjB,EACD,IAAI,EACJ,CAAC,CACF;IACD,cAAc,EAAE;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAkDjB;CACA,CAAC"}

package/dist/templates/rpc-api.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"rpc-api.d.ts","sourceRoot":"","sources":["../../src/templates/rpc-api.ts"],"names":[],"mappings":"AAAA,eAAO,MAAM,cAAc;;;;CAoG1B,CAAC"}
+{"version":3,"file":"rpc-api.d.ts","sourceRoot":"","sources":["../../src/templates/rpc-api.ts"],"names":[],"mappings":"AAAA,eAAO,MAAM,cAAc;;;;CAgG1B,CAAC"}

package/dist/templates/rpc-api.js

@@ -9,8 +9,8 @@ export const rpcApiTemplate = {
             start: "node dist/index.js",
         },
         dependencies: {
-            celsian: "^0.3.12",
-            "@celsian/rpc": "^0.3.11",
+            celsian: "latest",
+            "@celsian/rpc": "latest",
             "@sinclair/typebox": "^0.34.0",
         },
         devDependencies: {
@@ -24,8 +24,6 @@ export const rpcApiTemplate = {
             target: "ES2022",
             module: "ESNext",
             moduleResolution: "bundler",
-            lib: ["ES2022"],
-            types: ["node"],
             strict: true,
             esModuleInterop: true,
             skipLibCheck: true,
@@ -60,18 +58,16 @@ await app.register(security({
 const appRouter = router({
   greeting: {
     hello: procedure
-      .input(Type.Object({ name: Type.String() }))
+      .input<{ name: string }>(Type.Object({ name: Type.String() }))
       .query(({ input }) => {
-        const data = input as { name: string };
-        return { message: \`Hello, \${data.name}!\` };
+        return { message: 'Hello, ' + input.name + '!' };
       }),
   },
   math: {
     add: procedure
-      .input(Type.Object({ a: Type.Number(), b: Type.Number() }))
+      .input<{ a: number; b: number }>(Type.Object({ a: Type.Number(), b: Type.Number() }))
       .query(({ input }) => {
-        const data = input as { a: number; b: number };
-        return { result: data.a + data.b };
+        return { result: input.a + input.b };
       }),
   },
 });
@@ -86,7 +82,7 @@ app.route({
   },
 });
 
-serve(app, { port: 3000 });
+serve(app);
 
 export type AppRouter = typeof appRouter;
 `,

package/dist/templates/rpc-api.js.map

@@ -1 +1 @@
-{"version":3,"file":"rpc-api.js","sourceRoot":"","sources":["../../src/templates/rpc-api.ts"],"names":[],"mappings":"AAAA,MAAM,CAAC,MAAM,cAAc,GAAG;IAC5B,cAAc,EAAE,IAAI,CAAC,SAAS,CAC5B;QACE,IAAI,EAAE,UAAU;QAChB,OAAO,EAAE,OAAO;QAChB,IAAI,EAAE,QAAQ;QACd,OAAO,EAAE;YACP,GAAG,EAAE,8BAA8B;YACnC,KAAK,EAAE,KAAK;YACZ,KAAK,EAAE,oBAAoB;SAC5B;QACD,YAAY,EAAE;YACZ,OAAO,EAAE,SAAS;YAClB,cAAc,EAAE,SAAS;YACzB,mBAAmB,EAAE,SAAS;SAC/B;QACD,eAAe,EAAE;YACf,UAAU,EAAE,QAAQ;YACpB,GAAG,EAAE,QAAQ;YACb,aAAa,EAAE,SAAS;SACzB;KACF,EACD,IAAI,EACJ,CAAC,CACF;IACD,eAAe,EAAE,IAAI,CAAC,SAAS,CAC7B;QACE,eAAe,EAAE;YACf,MAAM,EAAE,QAAQ;YAChB,MAAM,EAAE,QAAQ;YAChB,gBAAgB,EAAE,SAAS;YAC3B,GAAG,EAAE,CAAC,QAAQ,CAAC;YACf,KAAK,EAAE,CAAC,MAAM,CAAC;YACf,MAAM,EAAE,IAAI;YACZ,eAAe,EAAE,IAAI;YACrB,YAAY,EAAE,IAAI;YAClB,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,KAAK;SACf;QACD,OAAO,EAAE,CAAC,KAAK,CAAC;KACjB,EACD,IAAI,EACJ,CAAC,CACF;IACD,cAAc,EAAE;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAuDjB;CACA,CAAC"}
+{"version":3,"file":"rpc-api.js","sourceRoot":"","sources":["../../src/templates/rpc-api.ts"],"names":[],"mappings":"AAAA,MAAM,CAAC,MAAM,cAAc,GAAG;IAC5B,cAAc,EAAE,IAAI,CAAC,SAAS,CAC5B;QACE,IAAI,EAAE,UAAU;QAChB,OAAO,EAAE,OAAO;QAChB,IAAI,EAAE,QAAQ;QACd,OAAO,EAAE;YACP,GAAG,EAAE,8BAA8B;YACnC,KAAK,EAAE,KAAK;YACZ,KAAK,EAAE,oBAAoB;SAC5B;QACD,YAAY,EAAE;YACZ,OAAO,EAAE,QAAQ;YACjB,cAAc,EAAE,QAAQ;YACxB,mBAAmB,EAAE,SAAS;SAC/B;QACD,eAAe,EAAE;YACf,UAAU,EAAE,QAAQ;YACpB,GAAG,EAAE,QAAQ;YACb,aAAa,EAAE,SAAS;SACzB;KACF,EACD,IAAI,EACJ,CAAC,CACF;IACD,eAAe,EAAE,IAAI,CAAC,SAAS,CAC7B;QACE,eAAe,EAAE;YACf,MAAM,EAAE,QAAQ;YAChB,MAAM,EAAE,QAAQ;YAChB,gBAAgB,EAAE,SAAS;YAC3B,MAAM,EAAE,IAAI;YACZ,eAAe,EAAE,IAAI;YACrB,YAAY,EAAE,IAAI;YAClB,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,KAAK;SACf;QACD,OAAO,EAAE,CAAC,KAAK,CAAC;KACjB,EACD,IAAI,EACJ,CAAC,CACF;IACD,cAAc,EAAE;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAqDjB;CACA,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "create-celsian",
-  "version": "0.3.12",
+  "version": "0.3.14",
   "type": "module",
   "bin": {
     "create-celsian": "dist/index.js"
@@ -14,16 +14,16 @@
   "engines": {
     "node": ">=20"
   },
-  "sideEffects": false,
-  "description": "Scaffold new CelsianJS applications",
   "repository": {
     "type": "git",
-    "url": "git+https://github.com/CelsianJs/celsian.git"
+    "url": "git+https://github.com/CelsianJs/celsian.git",
+    "directory": "packages/create-celsian"
   },
   "homepage": "https://github.com/CelsianJs/celsian#readme",
   "bugs": {
     "url": "https://github.com/CelsianJs/celsian/issues"
   },
+  "description": "Scaffold new CelsianJS applications",
   "keywords": [
     "celsian",
     "create",
@@ -31,6 +31,7 @@
     "cli",
     "typescript"
   ],
+  "sideEffects": false,
   "scripts": {
     "build": "tsc -b"
   }