create-demiurge 0.2.0-beta.3 → 0.2.0-beta.5

package/bin/create-demiurge.mjs

@@ -152,9 +152,11 @@ function printHelp() {
 
 Options:
   -t, --template <page|api>  Select the application template
-  -y, --yes                  Use the page template and default directory
+  -y, --yes                  Proceed without consulting anyone
   -h, --help                 Show this help
-  -v, --version              Show the package version`);
+  -v, --version              Show the package version
+
+Defaults to the page template in ./demiurge-app.`);
 }
 
 main().catch((error) => {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "create-demiurge",
-  "version": "0.2.0-beta.3",
+  "version": "0.2.0-beta.5",
   "description": "Create a Demiurge application.",
   "license": "MIT",
   "author": "North Shore Software Labs",

package/templates/api/demiurge.config.ts

@@ -0,0 +1,6 @@
+import { defineConfig } from "@demiurgejs/core/config";
+
+export default defineConfig({
+  rendering: { styles: false },
+  routing: { typedRoutes: true },
+});

package/templates/api/src/routes/@policy.ts

@@ -1,6 +1,10 @@
 import { defineRoutePolicy } from "@demiurgejs/core";
 
 export const policy = defineRoutePolicy({
+  // Demiurge denies a route that inherits no access declaration. This
+  // application is public, so the root policy states that intent. Replace this
+  // declaration with access: { authorize } for a subtree that needs a check.
+  access: { public: true },
   security: {
     request: {
       allowedMethods: ["GET"],

package/templates/page/demiurge.config.ts

@@ -0,0 +1,5 @@
+import { defineConfig } from "@demiurgejs/core/config";
+
+export default defineConfig({
+  routing: { typedRoutes: true },
+});

package/templates/page/src/routes/@policy.ts

@@ -1,6 +1,11 @@
-import { defineRoutePolicy } from "@demiurgejs/core";
+import { defineRoutePolicy, security } from "@demiurgejs/core";
 
 export const policy = defineRoutePolicy({
+  // Demiurge denies a route that inherits no access declaration. This
+  // application is public, so the root policy states that intent. Replace this
+  // declaration with access: { authorize } for a subtree that needs a check.
+  access: { public: true },
+  document: security.strict(),
   security: {
     request: {
       allowedMethods: ["GET"],

package/templates/shared/package.json

@@ -4,12 +4,12 @@
   "private": true,
   "type": "module",
   "scripts": {
-    "dev": "vite",
-    "build": "vite build",
+    "dev": "demiurge dev",
+    "build": "demiurge build",
     "typecheck": "tsc --noEmit"
   },
   "dependencies": {
-    "@demiurgejs/core": "^0.2.0-beta.3",
+    "@demiurgejs/core": "^0.2.0-beta.5",
     "react": "^19.0.0",
     "react-dom": "^19.0.0"
   },
@@ -18,7 +18,7 @@
     "@types/react": "^19.0.2",
     "@types/react-dom": "^19.0.2",
     "@vitejs/plugin-react": "^4.3.4",
-    "typescript": "^5.7.2",
+    "typescript": "^6.0.3",
     "vite": "^6.0.7"
   }
 }

package/templates/shared/tsconfig.json

@@ -11,5 +11,5 @@
     "jsx": "react-jsx",
     "types": ["node", "vite/client"]
   },
-  "include": ["src", "vite.config.ts"]
+  "include": ["src", ".demiurge/route-manifest.d.ts", "vite.config.ts"]
 }

package/templates/api/vite.config.ts

@@ -1,6 +0,0 @@
-import { defineConfig } from "vite";
-import { demiurge } from "@demiurgejs/core/vite";
-
-export default defineConfig({
-  plugins: [demiurge({ styles: false, typedRoutes: true })],
-});

package/templates/page/vite.config.ts

@@ -1,7 +0,0 @@
-import react from "@vitejs/plugin-react";
-import { defineConfig } from "vite";
-import { demiurge } from "@demiurgejs/core/vite";
-
-export default defineConfig({
-  plugins: [demiurge({ typedRoutes: true }), react()],
-});