create-convex-monorepo 0.2.0 → 0.3.0

package/dist/workspace/project.js

@@ -0,0 +1,147 @@
+import { lstat, readFile } from 'node:fs/promises';
+import { dirname, isAbsolute, join, relative, resolve, sep } from 'node:path';
+import { normalizeOptions } from '../generator/options.js';
+export function isRecord(value) {
+    return typeof value === 'object' && value !== null && !Array.isArray(value);
+}
+export function isMissing(error) {
+    return error instanceof Error && 'code' in error && error.code === 'ENOENT';
+}
+/** Check every existing path component, including the workspace root. */
+export async function safePath(root, path) {
+    if (!path ||
+        isAbsolute(path) ||
+        path.includes('\\') ||
+        path.split('/').some((part) => !part || part === '..' || part === '.'))
+        throw new Error(`Unsafe workspace path: ${path}`);
+    root = resolve(root);
+    const target = resolve(root, path);
+    const rel = relative(root, target);
+    if (!rel || rel === '..' || rel.startsWith(`..${sep}`) || isAbsolute(rel))
+        throw new Error(`Unsafe workspace path: ${path}`);
+    let current = root;
+    for (const part of ['', ...rel.split(sep)]) {
+        if (part)
+            current = join(current, part);
+        try {
+            const stat = await lstat(current);
+            if (stat.isSymbolicLink())
+                throw new Error(`Refusing symlink in workspace path: ${path}`);
+            if (current !== target && !stat.isDirectory())
+                throw new Error(`Expected a directory in workspace path: ${path}`);
+        }
+        catch (error) {
+            if (!isMissing(error))
+                throw error;
+        }
+    }
+    return target;
+}
+export async function readText(root, path) {
+    const target = await safePath(root, path);
+    try {
+        const stat = await lstat(target);
+        if (!stat.isFile())
+            throw new Error(`Expected a regular file: ${path}`);
+        if (stat.nlink > 1)
+            throw new Error(`Refusing a hard-linked workspace file: ${path}`);
+        if (stat.size > 5 * 1024 * 1024)
+            throw new Error(`Workspace file is too large: ${path}`);
+        return await readFile(target, 'utf8');
+    }
+    catch (error) {
+        if (isMissing(error))
+            return null;
+        throw error;
+    }
+}
+export async function readJson(root, path) {
+    const text = await readText(root, path);
+    if (text === null)
+        throw new Error(`Missing workspace file: ${path}`);
+    let value;
+    try {
+        value = JSON.parse(text);
+    }
+    catch {
+        throw new Error(`Invalid JSON in ${path}.`);
+    }
+    if (!isRecord(value))
+        throw new Error(`Expected a JSON object in ${path}.`);
+    return value;
+}
+export function parseWorkspaceConfig(value) {
+    if (!isRecord(value) || value.version !== 1)
+        throw new Error('Unsupported convex-monorepo.json version. This CLI supports version 1.');
+    if (typeof value.name !== 'string' ||
+        typeof value.generator !== 'string' ||
+        value.generator.length > 256 ||
+        !/^(0|[1-9]\d*)\.(0|[1-9]\d*)\.(0|[1-9]\d*)(?:-(?:0|[1-9]\d*|[0-9A-Za-z-]*[A-Za-z-][0-9A-Za-z-]*)(?:\.(?:0|[1-9]\d*|[0-9A-Za-z-]*[A-Za-z-][0-9A-Za-z-]*))*)?(?:\+[0-9A-Za-z-]+(?:\.[0-9A-Za-z-]+)*)?$/.test(value.generator) ||
+        value.packageManager !== 'pnpm' ||
+        value.monorepo !== 'turbo' ||
+        !Array.isArray(value.apps) ||
+        !['none', 'clerk'].includes(String(value.auth)))
+        throw new Error('Invalid convex-monorepo.json. Expected a named pnpm/Turborepo workspace with applications and a supported auth provider.');
+    const apps = value.apps.map((app) => {
+        if (!isRecord(app) ||
+            typeof app.name !== 'string' ||
+            typeof app.framework !== 'string')
+            throw new Error('Invalid application in convex-monorepo.json.');
+        if (app.example !== undefined &&
+            app.example !== 'none' &&
+            app.example !== 'messages')
+            throw new Error(`Invalid starter content for ${app.name}.`);
+        const normalized = normalizeOptions({
+            name: value.name,
+            apps: [
+                { name: app.name, framework: app.framework },
+            ],
+        }).apps[0];
+        if (!normalized)
+            throw new Error('Invalid application in convex-monorepo.json.');
+        return {
+            ...normalized,
+            ...(app.example === undefined ? {} : { example: app.example }),
+        };
+    });
+    const options = normalizeOptions({
+        name: value.name,
+        apps,
+        auth: String(value.auth),
+        ...(value.example === undefined ? {} : { example: String(value.example) }),
+    });
+    return {
+        version: 1,
+        generator: value.generator,
+        name: options.name,
+        packageManager: 'pnpm',
+        monorepo: 'turbo',
+        apps,
+        auth: options.auth,
+        example: options.example,
+    };
+}
+export async function loadWorkspace(cwd = process.cwd()) {
+    let root = resolve(cwd);
+    while (true) {
+        const configText = await readText(root, 'convex-monorepo.json');
+        if (configText !== null) {
+            let value;
+            try {
+                value = JSON.parse(configText);
+            }
+            catch {
+                throw new Error('Invalid JSON in convex-monorepo.json.');
+            }
+            const config = parseWorkspaceConfig(value);
+            if (!isRecord(value))
+                throw new Error('Invalid workspace metadata.');
+            return { root, config, rawConfig: value, configText };
+        }
+        const parent = dirname(root);
+        if (parent === root)
+            throw new Error('No convex-monorepo.json found. Run this command inside a generated workspace.');
+        root = parent;
+    }
+}
+//# sourceMappingURL=project.js.map

package/dist/workspace/project.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"project.js","sourceRoot":"","sources":["../../src/workspace/project.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AACnD,OAAO,EAAE,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,GAAG,EAAE,MAAM,WAAW,CAAC;AAC9E,OAAO,EAAE,gBAAgB,EAAE,MAAM,yBAAyB,CAAC;AAsB3D,MAAM,UAAU,QAAQ,CAAC,KAAc;IACrC,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;AAC9E,CAAC;AACD,MAAM,UAAU,SAAS,CAAC,KAAc;IACtC,OAAO,KAAK,YAAY,KAAK,IAAI,MAAM,IAAI,KAAK,IAAI,KAAK,CAAC,IAAI,KAAK,QAAQ,CAAC;AAC9E,CAAC;AAED,yEAAyE;AACzE,MAAM,CAAC,KAAK,UAAU,QAAQ,CAAC,IAAY,EAAE,IAAY;IACvD,IACE,CAAC,IAAI;QACL,UAAU,CAAC,IAAI,CAAC;QAChB,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC;QACnB,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,IAAI,IAAI,IAAI,KAAK,IAAI,IAAI,IAAI,KAAK,GAAG,CAAC;QAEtE,MAAM,IAAI,KAAK,CAAC,0BAA0B,IAAI,EAAE,CAAC,CAAC;IACpD,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACrB,MAAM,MAAM,GAAG,OAAO,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IACnC,MAAM,GAAG,GAAG,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IACnC,IAAI,CAAC,GAAG,IAAI,GAAG,KAAK,IAAI,IAAI,GAAG,CAAC,UAAU,CAAC,KAAK,GAAG,EAAE,CAAC,IAAI,UAAU,CAAC,GAAG,CAAC;QACvE,MAAM,IAAI,KAAK,CAAC,0BAA0B,IAAI,EAAE,CAAC,CAAC;IACpD,IAAI,OAAO,GAAG,IAAI,CAAC;IACnB,KAAK,MAAM,IAAI,IAAI,CAAC,EAAE,EAAE,GAAG,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC;QAC3C,IAAI,IAAI;YAAE,OAAO,GAAG,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;QACxC,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,OAAO,CAAC,CAAC;YAClC,IAAI,IAAI,CAAC,cAAc,EAAE;gBACvB,MAAM,IAAI,KAAK,CAAC,uCAAuC,IAAI,EAAE,CAAC,CAAC;YACjE,IAAI,OAAO,KAAK,MAAM,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE;gBAC3C,MAAM,IAAI,KAAK,CAAC,2CAA2C,IAAI,EAAE,CAAC,CAAC;QACvE,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC;gBAAE,MAAM,KAAK,CAAC;QACrC,CAAC;IACH,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AACD,MAAM,CAAC,KAAK,UAAU,QAAQ,CAC5B,IAAY,EACZ,IAAY;IAEZ,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IAC1C,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,MAAM,CAAC,CAAC;QACjC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE;YAAE,MAAM,IAAI,KAAK,CAAC,4BAA4B,IAAI,EAAE,CAAC,CAAC;QACxE,IAAI,IAAI,CAAC,KAAK,GAAG,CAAC;YAChB,MAAM,IAAI,KAAK,CAAC,0CAA0C,IAAI,EAAE,CAAC,CAAC;QACpE,IAAI,IAAI,CAAC,IAAI,GAAG,CAAC,GAAG,IAAI,GAAG,IAAI;YAC7B,MAAM,IAAI,KAAK,CAAC,gCAAgC,IAAI,EAAE,CAAC,CAAC;QAC1D,OAAO,MAAM,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACxC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,SAAS,CAAC,KAAK,CAAC;YAAE,OAAO,IAAI,CAAC;QAClC,MAAM,KAAK,CAAC;IACd,CAAC;AACH,CAAC;AACD,MAAM,CAAC,KAAK,UAAU,QAAQ,CAC5B,IAAY,EACZ,IAAY;IAEZ,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IACxC,IAAI,IAAI,KAAK,IAAI;QAAE,MAAM,IAAI,KAAK,CAAC,2BAA2B,IAAI,EAAE,CAAC,CAAC;IACtE,IAAI,KAAc,CAAC;IACnB,IAAI,CAAC;QACH,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAC3B,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,KAAK,CAAC,mBAAmB,IAAI,GAAG,CAAC,CAAC;IAC9C,CAAC;IACD,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,6BAA6B,IAAI,GAAG,CAAC,CAAC;IAC5E,OAAO,KAAK,CAAC;AACf,CAAC;AACD,MAAM,UAAU,oBAAoB,CAAC,KAAc;IACjD,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,OAAO,KAAK,CAAC;QACzC,MAAM,IAAI,KAAK,CACb,wEAAwE,CACzE,CAAC;IACJ,IACE,OAAO,KAAK,CAAC,IAAI,KAAK,QAAQ;QAC9B,OAAO,KAAK,CAAC,SAAS,KAAK,QAAQ;QACnC,KAAK,CAAC,SAAS,CAAC,MAAM,GAAG,GAAG;QAC5B,CAAC,qMAAqM,CAAC,IAAI,CACzM,KAAK,CAAC,SAAS,CAChB;QACD,KAAK,CAAC,cAAc,KAAK,MAAM;QAC/B,KAAK,CAAC,QAAQ,KAAK,OAAO;QAC1B,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC;QAC1B,CAAC,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAE/C,MAAM,IAAI,KAAK,CACb,0HAA0H,CAC3H,CAAC;IACJ,MAAM,IAAI,GAAmB,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,GAAY,EAAE,EAAE;QAC3D,IACE,CAAC,QAAQ,CAAC,GAAG,CAAC;YACd,OAAO,GAAG,CAAC,IAAI,KAAK,QAAQ;YAC5B,OAAO,GAAG,CAAC,SAAS,KAAK,QAAQ;YAEjC,MAAM,IAAI,KAAK,CAAC,8CAA8C,CAAC,CAAC;QAClE,IACE,GAAG,CAAC,OAAO,KAAK,SAAS;YACzB,GAAG,CAAC,OAAO,KAAK,MAAM;YACtB,GAAG,CAAC,OAAO,KAAK,UAAU;YAE1B,MAAM,IAAI,KAAK,CAAC,+BAA+B,GAAG,CAAC,IAAI,GAAG,CAAC,CAAC;QAC9D,MAAM,UAAU,GAAG,gBAAgB,CAAC;YAClC,IAAI,EAAE,KAAK,CAAC,IAAc;YAC1B,IAAI,EAAE;gBACJ,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,SAAS,EAAE,GAAG,CAAC,SAAiC,EAAE;aACrE;SACF,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACX,IAAI,CAAC,UAAU;YACb,MAAM,IAAI,KAAK,CAAC,8CAA8C,CAAC,CAAC;QAClE,OAAO;YACL,GAAG,UAAU;YACb,GAAG,CAAC,GAAG,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,GAAG,CAAC,OAAO,EAAE,CAAC;SAC/D,CAAC;IACJ,CAAC,CAAC,CAAC;IACH,MAAM,OAAO,GAAG,gBAAgB,CAAC;QAC/B,IAAI,EAAE,KAAK,CAAC,IAAI;QAChB,IAAI;QACJ,IAAI,EAAE,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC;QACxB,GAAG,CAAC,KAAK,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC;KAC3E,CAAC,CAAC;IACH,OAAO;QACL,OAAO,EAAE,CAAC;QACV,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,IAAI,EAAE,OAAO,CAAC,IAAI;QAClB,cAAc,EAAE,MAAM;QACtB,QAAQ,EAAE,OAAO;QACjB,IAAI;QACJ,IAAI,EAAE,OAAO,CAAC,IAAI;QAClB,OAAO,EAAE,OAAO,CAAC,OAAO;KACzB,CAAC;AACJ,CAAC;AACD,MAAM,CAAC,KAAK,UAAU,aAAa,CACjC,MAAc,OAAO,CAAC,GAAG,EAAE;IAE3B,IAAI,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC;IACxB,OAAO,IAAI,EAAE,CAAC;QACZ,MAAM,UAAU,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,sBAAsB,CAAC,CAAC;QAChE,IAAI,UAAU,KAAK,IAAI,EAAE,CAAC;YACxB,IAAI,KAAc,CAAC;YACnB,IAAI,CAAC;gBACH,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;YACjC,CAAC;YAAC,MAAM,CAAC;gBACP,MAAM,IAAI,KAAK,CAAC,uCAAuC,CAAC,CAAC;YAC3D,CAAC;YACD,MAAM,MAAM,GAAG,oBAAoB,CAAC,KAAK,CAAC,CAAC;YAC3C,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC;gBAAE,MAAM,IAAI,KAAK,CAAC,6BAA6B,CAAC,CAAC;YACrE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,KAAK,EAAE,UAAU,EAAE,CAAC;QACxD,CAAC;QACD,MAAM,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;QAC7B,IAAI,MAAM,KAAK,IAAI;YACjB,MAAM,IAAI,KAAK,CACb,+EAA+E,CAChF,CAAC;QACJ,IAAI,GAAG,MAAM,CAAC;IAChB,CAAC;AACH,CAAC"}

package/dist/workspace/upgrade.d.ts

@@ -0,0 +1,17 @@
+import { versions } from '../templates/versions.js';
+import type { Workspace } from './project.js';
+/** Read-only comparison against the official generator's latest stable release. */
+export interface UpgradeCheck {
+    cliVersion: string;
+    projectGenerator: string;
+    latestStable: string;
+    updateAvailable: boolean;
+    projectBehind: boolean;
+    /** Versions tested together by the running CLI, not by the remote release. */
+    baseline: typeof versions;
+    registry: string;
+}
+export declare function checkUpgrade(workspace: Workspace, options?: {
+    signal?: AbortSignal;
+    fetch?: typeof globalThis.fetch;
+}): Promise<UpgradeCheck>;

package/dist/workspace/upgrade.js

@@ -0,0 +1,86 @@
+import { versions } from '../templates/versions.js';
+import { getPackageVersion } from '../version.js';
+function stableVersion(value) {
+    if (typeof value !== 'string' ||
+        !/^(0|[1-9]\d*)\.(0|[1-9]\d*)\.(0|[1-9]\d*)(?:\+[0-9A-Za-z-]+(?:\.[0-9A-Za-z-]+)*)?$/.test(value)) {
+        throw new Error('Expected a stable semantic version in generator release metadata.');
+    }
+    return value
+        .split('+')[0]
+        .split('.')
+        .map((part) => BigInt(part));
+}
+function isNewer(latest, current) {
+    const target = stableVersion(latest);
+    // A stable version supersedes a prerelease with the same core version.
+    const match = /^(0|[1-9]\d*)\.(0|[1-9]\d*)\.(0|[1-9]\d*)(-[0-9A-Za-z-]+(?:\.[0-9A-Za-z-]+)*)?(?:\+[0-9A-Za-z-]+(?:\.[0-9A-Za-z-]+)*)?$/.exec(current);
+    if (!match)
+        throw new Error('The project or CLI generator version is not a semantic version.');
+    if (match[4]
+        ?.slice(1)
+        .split('.')
+        .some((part) => /^\d+$/.test(part) && part.length > 1 && part.startsWith('0'))) {
+        throw new Error('The project or CLI generator version is not a semantic version.');
+    }
+    for (let index = 0; index < 3; index++) {
+        const installed = BigInt(match[index + 1]);
+        if (target[index] !== installed)
+            return target[index] > installed;
+    }
+    return Boolean(match[4]);
+}
+export async function checkUpgrade(workspace, options = {}) {
+    options.signal?.throwIfAborted();
+    const cliVersion = await getPackageVersion();
+    options.signal?.throwIfAborted();
+    const registry = 'https://registry.npmjs.org/create-convex-monorepo/latest';
+    const controller = new AbortController();
+    const signal = options.signal
+        ? AbortSignal.any([options.signal, controller.signal])
+        : controller.signal;
+    let timer;
+    let abortListener;
+    try {
+        const cancelled = new Promise((_, reject) => {
+            abortListener = () => reject(new Error(options.signal?.aborted
+                ? 'Upgrade check cancelled.'
+                : 'The npm registry check timed out after 10 seconds.'));
+            signal.addEventListener('abort', abortListener, { once: true });
+            timer = setTimeout(() => controller.abort(), 10_000);
+        });
+        const request = (async () => {
+            const response = await (options.fetch ?? globalThis.fetch)(registry, {
+                signal,
+                headers: { accept: 'application/json' },
+                redirect: 'error',
+            });
+            if (!response.ok)
+                throw new Error(`The npm registry returned HTTP ${response.status}.`);
+            const data = await response.json();
+            if (typeof data !== 'object' || data === null || !('version' in data)) {
+                throw new Error('The npm registry returned invalid generator release metadata.');
+            }
+            stableVersion(data.version);
+            if (typeof data.version !== 'string')
+                throw new Error('Invalid registry version.');
+            return data.version;
+        })();
+        const latestStable = await Promise.race([request, cancelled]);
+        return {
+            cliVersion,
+            projectGenerator: workspace.config.generator,
+            latestStable,
+            updateAvailable: isNewer(latestStable, cliVersion),
+            projectBehind: isNewer(latestStable, workspace.config.generator),
+            baseline: { ...versions },
+            registry,
+        };
+    }
+    finally {
+        clearTimeout(timer);
+        if (abortListener)
+            signal.removeEventListener('abort', abortListener);
+        controller.abort();
+    }
+}
+//# sourceMappingURL=upgrade.js.map

package/dist/workspace/upgrade.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"upgrade.js","sourceRoot":"","sources":["../../src/workspace/upgrade.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,0BAA0B,CAAC;AACpD,OAAO,EAAE,iBAAiB,EAAE,MAAM,eAAe,CAAC;AAelD,SAAS,aAAa,CAAC,KAAc;IACnC,IACE,OAAO,KAAK,KAAK,QAAQ;QACzB,CAAC,oFAAoF,CAAC,IAAI,CACxF,KAAK,CACN,EACD,CAAC;QACD,MAAM,IAAI,KAAK,CACb,mEAAmE,CACpE,CAAC;IACJ,CAAC;IACD,OAAO,KAAK;SACT,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAE;SACd,KAAK,CAAC,GAAG,CAAC;SACV,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC;AACjC,CAAC;AAED,SAAS,OAAO,CAAC,MAAc,EAAE,OAAe;IAC9C,MAAM,MAAM,GAAG,aAAa,CAAC,MAAM,CAAC,CAAC;IACrC,uEAAuE;IACvE,MAAM,KAAK,GACT,yHAAyH,CAAC,IAAI,CAC5H,OAAO,CACR,CAAC;IACJ,IAAI,CAAC,KAAK;QACR,MAAM,IAAI,KAAK,CACb,iEAAiE,CAClE,CAAC;IACJ,IACE,KAAK,CAAC,CAAC,CAAC;QACN,EAAE,KAAK,CAAC,CAAC,CAAC;SACT,KAAK,CAAC,GAAG,CAAC;SACV,IAAI,CACH,CAAC,IAAI,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,CACxE,EACH,CAAC;QACD,MAAM,IAAI,KAAK,CACb,iEAAiE,CAClE,CAAC;IACJ,CAAC;IACD,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,CAAC,EAAE,KAAK,EAAE,EAAE,CAAC;QACvC,MAAM,SAAS,GAAG,MAAM,CAAC,KAAK,CAAC,KAAK,GAAG,CAAC,CAAE,CAAC,CAAC;QAC5C,IAAI,MAAM,CAAC,KAAK,CAAE,KAAK,SAAS;YAAE,OAAO,MAAM,CAAC,KAAK,CAAE,GAAG,SAAS,CAAC;IACtE,CAAC;IACD,OAAO,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;AAC3B,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,YAAY,CAChC,SAAoB,EACpB,UAAqE,EAAE;IAEvE,OAAO,CAAC,MAAM,EAAE,cAAc,EAAE,CAAC;IACjC,MAAM,UAAU,GAAG,MAAM,iBAAiB,EAAE,CAAC;IAC7C,OAAO,CAAC,MAAM,EAAE,cAAc,EAAE,CAAC;IACjC,MAAM,QAAQ,GAAG,0DAA0D,CAAC;IAC5E,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;IACzC,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM;QAC3B,CAAC,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,UAAU,CAAC,MAAM,CAAC,CAAC;QACtD,CAAC,CAAC,UAAU,CAAC,MAAM,CAAC;IACtB,IAAI,KAAgD,CAAC;IACrD,IAAI,aAAuC,CAAC;IAC5C,IAAI,CAAC;QACH,MAAM,SAAS,GAAG,IAAI,OAAO,CAAQ,CAAC,CAAC,EAAE,MAAM,EAAE,EAAE;YACjD,aAAa,GAAG,GAAG,EAAE,CACnB,MAAM,CACJ,IAAI,KAAK,CACP,OAAO,CAAC,MAAM,EAAE,OAAO;gBACrB,CAAC,CAAC,0BAA0B;gBAC5B,CAAC,CAAC,oDAAoD,CACzD,CACF,CAAC;YACJ,MAAM,CAAC,gBAAgB,CAAC,OAAO,EAAE,aAAa,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;YAChE,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,EAAE,MAAM,CAAC,CAAC;QACvD,CAAC,CAAC,CAAC;QACH,MAAM,OAAO,GAAG,CAAC,KAAK,IAAI,EAAE;YAC1B,MAAM,QAAQ,GAAG,MAAM,CAAC,OAAO,CAAC,KAAK,IAAI,UAAU,CAAC,KAAK,CAAC,CAAC,QAAQ,EAAE;gBACnE,MAAM;gBACN,OAAO,EAAE,EAAE,MAAM,EAAE,kBAAkB,EAAE;gBACvC,QAAQ,EAAE,OAAO;aAClB,CAAC,CAAC;YACH,IAAI,CAAC,QAAQ,CAAC,EAAE;gBACd,MAAM,IAAI,KAAK,CAAC,kCAAkC,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC;YACxE,MAAM,IAAI,GAAY,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;YAC5C,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,KAAK,IAAI,IAAI,CAAC,CAAC,SAAS,IAAI,IAAI,CAAC,EAAE,CAAC;gBACtE,MAAM,IAAI,KAAK,CACb,+DAA+D,CAChE,CAAC;YACJ,CAAC;YACD,aAAa,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YAC5B,IAAI,OAAO,IAAI,CAAC,OAAO,KAAK,QAAQ;gBAClC,MAAM,IAAI,KAAK,CAAC,2BAA2B,CAAC,CAAC;YAC/C,OAAO,IAAI,CAAC,OAAO,CAAC;QACtB,CAAC,CAAC,EAAE,CAAC;QACL,MAAM,YAAY,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC,CAAC;QAC9D,OAAO;YACL,UAAU;YACV,gBAAgB,EAAE,SAAS,CAAC,MAAM,CAAC,SAAS;YAC5C,YAAY;YACZ,eAAe,EAAE,OAAO,CAAC,YAAY,EAAE,UAAU,CAAC;YAClD,aAAa,EAAE,OAAO,CAAC,YAAY,EAAE,SAAS,CAAC,MAAM,CAAC,SAAS,CAAC;YAChE,QAAQ,EAAE,EAAE,GAAG,QAAQ,EAAE;YACzB,QAAQ;SACT,CAAC;IACJ,CAAC;YAAS,CAAC;QACT,YAAY,CAAC,KAAK,CAAC,CAAC;QACpB,IAAI,aAAa;YAAE,MAAM,CAAC,mBAAmB,CAAC,OAAO,EAAE,aAAa,CAAC,CAAC;QACtE,UAAU,CAAC,KAAK,EAAE,CAAC;IACrB,CAAC;AACH,CAAC"}

package/docs/adding-a-framework.md

@@ -25,3 +25,9 @@ Do not add a declaration bundler, a generic API cast, or copied backend code. Ch
 Generate the framework alone, with another frontend, and with every advertised auth provider. Cover both `--example messages` and `--example none`; use the shared entry-content helper so blank apps do not import demo files. Install from a clean directory, typecheck, lint, and run a production build. For a native framework, run its actual JavaScript bundler for supported platforms. Exercise the query and mutation against a development backend when credentials or local deployment tooling are available; report separately when that check was skipped.
 
 Add focused output assertions, option-selection coverage, and representative generated-project CI coverage. Tests must catch missing generated declarations and widened argument/return types. Update README support notes and this guide if the framework introduces a new integration contract.
+
+## Existing-workspace commands
+
+Add the framework's dependency expectations and diagnostic checks to `src/workspace/doctor.ts`. Verify that `add app` renders the framework at its real workspace index so development ports remain distinct. Add command tests for a new app next to an existing customized app, both starter choices, inherited auth, automatic URL linking, and a dry run. Extend the command E2E matrix to install and build the added framework.
+
+The add planner uses the same template as project creation. It copies only the new application's files and updates workspace metadata and root scripts. Avoid reading external project state inside a template; the planner needs to render it independently in a temporary directory.

package/docs/adding-an-auth-provider.md

@@ -29,3 +29,11 @@ Test unauthenticated rejection and cross-user isolation on the backend. Generate
 Use test credentials only for integration checks that need a provider account, and report those checks separately from static tests. Add provider-specific setup and troubleshooting to the generated README, repository README, and research notes. An unsupported framework combination must fail validation before generation rather than silently omitting auth.
 
 Cover both starter-content choices in adapter tests. Blank projects retain authentication configuration and providers but omit example-specific access helpers and functions.
+
+## Installing auth after generation
+
+Existing-workspace auth installation renders the no-auth baseline and the selected provider, then plans their differences. The current public command supports `add auth clerk`; adding another provider also requires extending CLI selection, metadata validation, doctor dependency checks, and `planAddAuth`.
+
+Define the backend files the provider may add or change. Do not broaden the planner to overwrite every backend difference: schemas, user functions, and Convex generated internals must remain under project ownership. For changed app source files, require an unchanged baseline or return an actionable conflict. Merge manifest entries without replacing unrelated dependencies or scripts. Generate a separate setup guide instead of replacing the project's README.
+
+Test installation on existing apps for every framework and starter choice, customized-source conflicts, dependency conflicts, repeat installation, stored-data implications, and cancellation. A provider migration between identities needs a separate design; it is not implied by adding an auth adapter.

package/docs/architecture.md

@@ -40,10 +40,22 @@ The generated `scripts/convex-setup.mjs` is a standalone Node script copied from
 
 Registries and TypeScript unions make supported choices explicit. Dependencies are pinned in `src/templates/versions.ts` and in framework bindings where necessary. New adapters should add concrete capabilities, with install, type, and bundler evidence for each supported combination. Reject an unsupported combination clearly rather than emitting code known to fail.
 
-`convex-monorepo.json` records a versioned description of the output for future commands. It is not currently consumed by an upgrade or migration command. The exported API supports programmatic generation; custom runtime registry injection is not implemented.
+`convex-monorepo.json` records a versioned description of the output. Workspace commands validate it before inspecting or planning edits. The exported API supports programmatic generation; custom runtime registry injection is not implemented.
 
 ## Starter content
 
 `example` is independent of framework and auth selection. `messages` keeps the existing example; `none` selects blank apps and the empty backend assets. The backend template chooses the matching official generated declarations. App entry content comes from a shared helper, while framework setup and auth adapters keep their existing responsibilities. Auth adapters omit the demo's access helper in blank mode but still configure the selected provider.
 
 Blank apps do not include tests that assume an empty API forever. The generated-project test runner injects temporary compile-time assertions for an exactly empty API and table list, rejects unknown modules, and checks for widened types. Those files belong only to the disposable test fixture.
+
+## Workspace commands
+
+Both binaries ship in `create-convex-monorepo`: `create-convex-monorepo` creates a project, and `convex-monorepo` manages it afterward. `src/commands/workspace.ts` parses command-specific options and prompts. Application logic lives in `src/workspace` and is exported for programmatic use.
+
+`project.ts` walks upward to metadata, validates version 1, retains extension fields, and rejects unsafe file paths. `add.ts` renders temporary scaffolds with the existing app/auth adapters, then selects only the new app or authentication changes. Auth package updates merge only the fields changed by the adapter; source files must match the expected baseline before replacement. Per-app example overrides survive later auth additions.
+
+`env.ts` shares the standalone setup script's URL validation and dotenv linking helpers. A declaration file types that plain JavaScript module for the compiled CLI; the JavaScript implementation is separately checked by TypeScript. Generated projects still receive the standalone script and need no CLI dependency for initial Convex setup.
+
+`changes.ts` applies file plans after checking snapshots, absent destinations, and path safety. Dry runs perform the same preflight without acquiring a lock or writing. Mutations hold a workspace lock, use exclusive creation or temporary-file replacement, and roll back only files that still match their written contents. The lock coordinates CLI instances, not editors; snapshot checks cannot make arbitrary external writers transactional. File plans contain before/after text and may include local environment values, so the CLI displays paths rather than serializing mutation plans.
+
+`doctor.ts` checks local configuration and uses the app's installed TypeScript compiler for an in-memory API probe. It never emits probe files. `upgrade.ts` queries the fixed official npm package endpoint with cancellation and a timeout. Its dependency baseline belongs to the running CLI, and is not a compatibility claim about every newer upstream package.

package/docs/releases.md

@@ -1,6 +1,6 @@
 # Releases
 
-This repository uses Conventional Commits and release-please for versions, changelogs, release PRs, and GitHub releases. GitHub Actions tests and publishes the release tarball to npm. The first publication uses a bootstrap token; subsequent releases use trusted publishing. This follows the publishing model in [convex-cloudflare-email](https://github.com/adamtrip-solutions/convex-cloudflare-email/blob/main/.github/workflows/release.yml).
+This repository uses Conventional Commits and release-please for versions, changelogs, release PRs, and GitHub releases. GitHub Actions tests and publishes the release tarball to npm. The first publication used a bootstrap token. The workflow now uses trusted publishing without a token fallback. This follows the publishing model in [convex-cloudflare-email](https://github.com/adamtrip-solutions/convex-cloudflare-email/blob/main/.github/workflows/release.yml).
 
 ## Version policy
 
@@ -15,45 +15,39 @@ This repository uses Conventional Commits and release-please for versions, chang
 
 A `BREAKING CHANGE:` commit footer also requests a major bump. Explain migration steps when using it. The two pre-major downgrade options are explicitly disabled, so breaking changes still request a major before 1.0. For several commits, the largest requested bump wins. This follows the [release-please versioning strategy](https://github.com/googleapis/release-please/blob/main/src/versioning-strategies/default.ts).
 
-The manifest records 0.1.0 as the existing baseline. `bootstrap-sha` points to the last committed v0.1 work, `0373d22b000dc9cba036a1d2f1cff689b217fd8b`, so initial history is not replayed as new features. This does not publish 0.1.0 or create a historical release. After the first automated release, release-please uses release history. See its [manifest documentation](https://github.com/googleapis/release-please/blob/main/docs/manifest-releaser.md).
+The initial manifest recorded 0.1.0 as the existing baseline. `bootstrap-sha` points to the last committed v0.1 work, `0373d22b000dc9cba036a1d2f1cff689b217fd8b`, so initial history is not replayed as new features. This does not publish 0.1.0 or create a historical release. After the first automated release, release-please uses release history. See its [manifest documentation](https://github.com/googleapis/release-please/blob/main/docs/manifest-releaser.md).
 
 ## GitHub configuration
 
 The public repository is `adamtrip-solutions/create-convex-monorepo`. The package's repository URL must match it for npm provenance.
 
 - Use `main` as the release branch. Enable Actions and allow GitHub Actions to create pull requests.
-- Enable squash merging with the PR title as the commit title. Require the Conventional PR title check and `CI passed` before merging.
+- Enable squash merging with the PR title as the commit title and keep auto-merge disabled. Require the Conventional PR title check and `CI passed` from GitHub Actions, an approving code-owner review, and resolved conversations before merging. Restrict `main` updates to `adamtrip`; see the administrator exception in [Contributing](../CONTRIBUTING.md#contribution-and-review-process).
+- Require workflow approval for all outside contributors. Approving a workflow run does not approve the PR or publish a release.
 - Create a GitHub environment named `npm`. Restrict deployments to tags matching `v*`. Protect release tags against updates and deletion.
-- Configure `NPM_BOOTSTRAP_TOKEN` in the `npm` environment before the first release, or configure npm trusted publishing if the package already exists. No publishing-enable variable is required.
+- Configure npm trusted publishing as described below. No npm secret or publishing-enable variable is required.
 
 The release workflow uses `GITHUB_TOKEN` by default. GitHub may require approval before running CI on a bot-created release PR. An optional `RELEASE_PLEASE_TOKEN` with repository contents, issues and pull-request write permissions can avoid that interruption. The npm dispatch step always uses `GITHUB_TOKEN` with `actions: write`; it does not require Actions permission on the optional token. [GitHub token event rules](https://docs.github.com/en/actions/concepts/security/github_token).
 
 ## First npm publication
 
-1. Use your existing npm account with a verified email and two-factor authentication. The package is unscoped, so a separate npm organization is not required.
-2. Create a short-lived granular npm token with Read and write package permissions that allow creation of `create-convex-monorepo`. Enable Bypass two-factor authentication for this first unattended publish. A token limited to the existing `convex-cloudflare-email` package cannot create this new package.
-3. Save it as `NPM_BOOTSTRAP_TOKEN` in this repository's [npm environment](https://github.com/adamtrip-solutions/create-convex-monorepo/settings/environments). Use GitHub's secret UI, or run the following command in your own terminal and paste the token at its hidden prompt:
+Version 0.2.0 created the package through GitHub Actions using `NPM_BOOTSTRAP_TOKEN`. The workflow no longer reads that secret. Subsequent releases authenticate through npm trusted publishing.
 
-   ```sh
-   gh secret set NPM_BOOTSTRAP_TOKEN --env npm --repo adamtrip-solutions/create-convex-monorepo
-   ```
+## Trusted publisher configuration
 
-   GitHub secrets are write-only; a stored token in another repository cannot be read back and copied. Do not paste it into chat or commit it.
+In the npm package settings, add a GitHub Actions trusted publisher with these exact values:
 
-4. Merge the first release-please PR after CI passes. The release workflow creates the version tag and dispatches **Publish npm package**. It tests the release commit and automatically publishes the verified archive with provenance. There is no local `npm publish` or archive download step.
-5. After that first publication succeeds, configure a GitHub Actions trusted publisher in the npm package settings:
+| Field             | Value                       |
+| ----------------- | --------------------------- |
+| Organization/user | `adamtrip-solutions`        |
+| Repository        | `create-convex-monorepo`    |
+| Workflow filename | `publish.yml`               |
+| Environment       | `npm`                       |
+| Allowed action    | Enable direct `npm publish` |
 
-   | Field             | Value                                                   |
-   | ----------------- | ------------------------------------------------------- |
-   | Organization/user | `adamtrip-solutions`                                    |
-   | Repository        | `create-convex-monorepo`                                |
-   | Workflow filename | `publish.yml`                                           |
-   | Environment       | `npm`                                                   |
-   | Allowed action    | Enable direct `npm publish`, not only staged publishing |
+The workflow requests a short-lived OIDC credential from GitHub. npm verifies the repository, workflow, and environment against this configuration. There is no stored npm token in the publishing step. [npm trusted publishing](https://docs.npmjs.com/trusted-publishers/).
 
-6. Delete the `NPM_BOOTSTRAP_TOKEN` GitHub secret and revoke that npm token. Subsequent releases use OIDC without a stored npm credential. Once OIDC is configured, npm can require two-factor authentication and disallow token-based publishing.
-
-The bootstrap token is available only to the final publish step, after all validation jobs pass. Current npm documentation requires the package to exist before configuring its trusted publisher; the bootstrap token lets CI create it. [Token setup](https://docs.npmjs.com/creating-and-viewing-access-tokens/), [trusted publisher configuration](https://docs.npmjs.com/trusted-publishers/).
+Verify the migration with a new release through the workflow. Retrying an already published version skips publication and does not test authentication. After an OIDC publication succeeds, delete the old GitHub bootstrap secret and revoke the corresponding npm token. If that token is shared with another package, migrate that package or replace its credential before revoking it.
 
 ## Automated release flow
 
@@ -75,4 +69,4 @@ gh workflow run publish.yml --repo adamtrip-solutions/create-convex-monorepo --r
 
 Select the tag in the Actions UI when triggering manually. Running from a branch is rejected. If npm already contains that exact tarball, the publish step skips it. A version with different contents fails explicitly; release a new version instead of moving tags or trying to overwrite npm history. If the workflow itself needs a code fix, include it in a new release because retries execute the workflow stored at the original tag.
 
-Normal changes do not need manual version edits. If the release PR stalls, inspect the workflow logs, token permissions and `autorelease` labels. Keep release-please's generated title and body intact. After the first successful npm publication, remove the prepublication notice in README.md.
+Normal changes do not need manual version edits. If the release PR stalls, inspect the workflow logs, token permissions and `autorelease` labels. Keep release-please's generated title and body intact.

package/docs/verification.md

@@ -75,4 +75,32 @@ Fresh review checked the release dispatch, provenance commit identity, bootstrap
 
 Compared both the local checkout and GitHub workflow of `adamtrip-solutions/convex-cloudflare-email`, whose first npm release workflow succeeded. Its publish step supports `NPM_BOOTSTRAP_TOKEN` for initial package creation. This repository now supports the same token-to-OIDC transition and no longer gates publishing behind `NPM_PUBLISHING_ENABLED`. The token is passed only to the final npm publish step. No secret values were read or transferred from the reference repository, and this package has not been published.
 
-A later Windows run exposed an intermittent cancellation failure: setup rejected on the child's abort error before the process closed, leaving the backend directory locked during cleanup. The regression test reproduced the early return locally. Setup now waits for the child close event before settling, preserving the original error. The corrected test and all 98 repository tests passed, together with typecheck, lint, formatting, build, and package smoke checks. Hosted Windows confirmation of this fix is pending.
+A later Windows run exposed an intermittent cancellation failure: setup rejected on the child's abort error before the process closed, leaving the backend directory locked during cleanup. The regression test reproduced the early return locally. Setup now waits for the child close event before settling, preserving the original error. The corrected test and all 98 repository tests passed, together with typecheck, lint, formatting, build, and package smoke checks. Hosted [CI run 34416758903](https://github.com/adamtrip-solutions/create-convex-monorepo/actions/runs/34416758903) confirmed the fix on Windows and passed every generated-project build.
+
+## First npm publication
+
+GitHub Actions [run 34417030866](https://github.com/adamtrip-solutions/create-convex-monorepo/actions/runs/34417030866) published `create-convex-monorepo@0.2.0` from release commit `406b6dec137ba521a23ebc6d78965f0373e1ba98`. The release ran all 98 tests on Windows and Linux, package smoke checks, and the complete generated-project build matrix before publishing the tested tarball. The registry reports `latest` as `0.2.0` and includes a provenance attestation.
+
+Registry checks ran outside the source checkout:
+
+- `pnpm create convex-monorepo@0.2.0 smoke --apps next,expo --auth clerk --example none --no-install --no-git` generated the blank workspace successfully.
+- `npx --yes create-convex-monorepo@0.2.0 --version` returned `0.2.0`, using both the default npm cache and a fresh cache.
+- `npx --yes create-convex-monorepo@0.2.0 npx-smoke --apps next,vite,tanstack-start,expo --auth none --no-install --no-git` generated all four apps successfully.
+
+An initial npx invocation from inside this package's own checkout failed to find the executable. The same registry command succeeded from the temporary directory. These post-publication smoke checks skipped generated dependency installation; the release workflow had already tested the generated builds. The bootstrap token authenticated the first publish. Token-free OIDC publishing still needs npm trusted-publisher configuration and verification.
+
+## Trusted publishing verification
+
+GitHub Actions [run 34417938658](https://github.com/adamtrip-solutions/create-convex-monorepo/actions/runs/34417938658) published `create-convex-monorepo@0.2.1` from release commit `72527d37eca8f7bd6ced87440e005253bbaa87bc`. This release removed the bootstrap-token reference from the workflow before publishing, so there was no npm token fallback. All Windows, Linux, and generated-project checks passed, and the registry lists 0.2.1 as latest with provenance.
+
+The repository's `NPM_BOOTSTRAP_TOKEN` secret was deleted after publication succeeded. Repository and npm-environment secret listings then contained no npm secret. Revoking the original token in the npm account remains an account-owner action; check whether another repository still uses it first.
+
+## Workspace management commands
+
+The workspace-command implementation passed frozen installation, formatting, lint, typecheck, all 237 tests, build, pack, installed-package smoke checks, and actionlint. Tests cover all five command routes, interactive choices, strict flags, typed API diagnostics, mocked registry responses, conflicts, cancellation, rollback, CRLF checkouts, port allocation, secret exclusion, and dry runs.
+
+`pnpm test:workspace:e2e` and `CCM_EXAMPLE=none pnpm test:workspace:e2e` both passed. The messages case starts with Next.js, adds Vite, TanStack Start, and Expo, then installs Clerk across all existing apps. The blank case installs Clerk first and then adds the remaining apps. Both sync URLs, install dependencies, run doctor, typecheck, lint, and build all four apps. Builds include Next, Vite, Start client/server, and Expo iOS/Android Metro exports. API contract assertions remain enabled for the messages case, and the blank case receives test-only empty API assertions.
+
+The packed package exposes both binaries. Its smoke test exercises `convex-monorepo` through the installed executable and pnpm dlx, adds an app and Clerk, and syncs one frontend URL. The live npm upgrade check returned the current stable release from the official registry. Doctor also passed from a nested application directory in an installed four-app workspace. A PTY run exercised interactive app, framework, and starter selection with `--dry-run`; the proposed directory was not created.
+
+Independent technical review covered mutation plans and CLI integration. Follow-up checks confirmed fixes for workspace-membership diagnostics and semantic-version build metadata. Integration checks also caught development-port collisions, which now have regression tests. Filesystem conflict detection remains optimistic for unrelated external writers; the lock coordinates CLI invocations. No real Clerk login, stored-data migration, or native Xcode/Gradle build was performed. Hosted CI includes the two command-based build scenarios and Windows unit/package checks.

package/package.json

@@ -1,11 +1,12 @@
 {
   "name": "create-convex-monorepo",
-  "version": "0.2.0",
+  "version": "0.3.0",
   "description": "Generate typed Convex monorepos with composable frontend and authentication adapters.",
   "license": "MIT",
   "type": "module",
   "bin": {
-    "create-convex-monorepo": "dist/cli/index.js"
+    "create-convex-monorepo": "dist/cli/index.js",
+    "convex-monorepo": "dist/cli/workspace.js"
   },
   "exports": {
     ".": {
@@ -72,6 +73,8 @@
     "test": "vitest run && pnpm test:backend",
     "test:e2e": "node scripts/e2e.mjs",
     "test:backend": "tsx scripts/backend-fixtures.ts && vitest run --config vitest.backend.config.ts",
-    "test:package": "node scripts/pack-smoke.mjs"
+    "test:package": "node scripts/pack-smoke.mjs",
+    "dev:workspace": "tsx src/cli/workspace.ts",
+    "test:workspace:e2e": "node scripts/workspace-e2e.mjs"
   }
 }