create-disposabl-app 0.1.0 → 0.1.2

package/dist/index.js

@@ -8,7 +8,7 @@ import { fileURLToPath } from "node:url";
 import { Command, CommanderError } from "commander";
 import * as p2 from "@clack/prompts";
 // package.json
-var version = "0.1.0";
+var version = "0.1.2";
 
 // options.ts
 var platforms = [
@@ -65,9 +65,10 @@ var features = [
   {
     id: "authentication",
     label: "Authentication",
-    hint: "Record selection only"
+    hint: "Always included"
   }
 ];
+var requiredFeatures = ["authentication"];
 var parseList = (input) => input.split(",").map((value) => value.trim());
 function selectPlatforms(input = "web") {
   const requested = parseList(input);
@@ -85,15 +86,13 @@ function selectPlatforms(input = "web") {
   return platforms.filter((option) => option.id === "web" || requested.includes(option.id)).map((option) => option.id);
 }
 function selectFeatures(input = "none") {
-  if (input === "none")
-    return [];
-  const requested = parseList(input);
+  const requested = input === "none" ? [] : parseList(input);
   for (const id of requested) {
     if (!features.some((feature) => feature.id === id)) {
       throw new Error("Unknown feature " + JSON.stringify(id) + ". Use --features none or --list-options to see valid IDs.");
     }
   }
-  return features.filter((option) => requested.includes(option.id)).map((option) => option.id);
+  return features.filter((option) => requiredFeatures.includes(option.id) || requested.includes(option.id)).map((option) => option.id);
 }
 function selectedFolders(config) {
   const result = ["apps/web"];
@@ -274,6 +273,10 @@ import {
 import { existsSync } from "node:fs";
 import { join } from "node:path";
 async function createProject(template, destination, name, config) {
+  config = {
+    ...config,
+    features: selectFeatures(config.features.join(",") || "none")
+  };
   const folders = selectedFolders(config);
   for (const folder of folders) {
     if (!existsSync(join(template, folder, "package.json"))) {
@@ -315,27 +318,27 @@ async function createProject(template, destination, name, config) {
 
 // index.ts
 var jsonOutput = process.argv.slice(2).includes("--json");
-var program = new Command("create-disposabl-app").description("Create an empty Disposabl starter. Web is always included.").version(version, "-v, --version").argument("[appname]", "App name and new directory").option("--platforms <ids>", "Comma-separated platform IDs; Web is always included").option("--features <ids>", "Comma-separated feature IDs, or none (default: none)").option("-y, --yes", "Skip prompts; default to Web only and no features").option("--skip-install", "Create files without running bun install").option("--list-options", "List every platform and feature, including disabled choices").option("--json", "Skip prompts and emit a JSON result or error; install logs go to stderr").helpOption("-h, --help").addHelpText("after", `
+var program = new Command("create-disposabl-app").description("Create a Disposabl starter. Web and authentication are always included.").version(version, "-v, --version").argument("[appname]", "App name and new directory").option("--platforms <ids>", "Comma-separated platform IDs; Web is always included").option("--features <ids>", "Comma-separated optional feature IDs, or none; authentication is always included").option("-y, --yes", "Skip prompts; include Web and authentication, with no optional features").option("--skip-install", "Create files without running bun install").option("--list-options", "List every platform and feature, including disabled choices").option("--json", "Skip prompts and emit a JSON result or error; install logs go to stderr").helpOption("-h, --help").addHelpText("after", `
 Platforms:
   web (required), android, ios, windows, linux, macos, mcp,
   openai-plugin, claude-code-plugin
   Either plugin automatically includes MCP.
   Disabled: api, cli, python-sdk, typescript-sdk
 
-Features:
-  docs, blog, changelog, authentication
-  Authentication currently records a selection only.
+Optional features:
+  docs, blog, changelog
+  Authentication is always included, including with --features none.
 
 Examples:
   bun create disposabl-app@latest
   bun create disposabl-app@latest my-app --yes
-  bun create disposabl-app@latest my-app --platforms web,android,ios,mcp --features docs,authentication --yes
+  bun create disposabl-app@latest my-app --platforms web,android,ios,mcp --features docs --yes
   bun create disposabl-app@latest my-app --platforms web --features none --skip-install --json
   bun create disposabl-app@latest --list-options --json
 
 Without a TTY, the CLI never prompts. Supply an app name.
 Platform and feature choices are saved in disposabl.json.
-App folders contain empty package.json files. No appId or Convex deployment is created.
+The starter includes web and backend authentication code. No appId or Convex deployment is created.
 `).configureOutput({ writeErr: () => {} }).exitOverride();
 
 class Cancelled extends Error {
@@ -351,7 +354,8 @@ function showOptions(json) {
       platforms,
       platformDependencies,
       features,
-      defaults: { platforms: ["web"], features: [] },
+      requiredFeatures,
+      defaults: { platforms: ["web"], features: selectFeatures() },
       folders: {
         web: "apps/web",
         android: "apps/mobile",
@@ -363,12 +367,7 @@ function showOptions(json) {
         blog: "apps/blog",
         changelog: "apps/changelog"
       },
-      configOnly: [
-        "mcp",
-        "openai-plugin",
-        "claude-code-plugin",
-        "authentication"
-      ]
+      configOnly: ["mcp", "openai-plugin", "claude-code-plugin"]
     }, null, 2));
     return;
   }
@@ -384,7 +383,7 @@ Features
   for (const option of features)
     console.log("  " + option.id.padEnd(21) + option.hint);
   console.log(`
-Defaults: Web only; no features. Use --platforms and --features with the IDs above.`);
+Web and authentication are always included. No optional features are selected by default. Use --platforms and --features with the IDs above.`);
 }
 async function install(directory, interactive) {
   await new Promise((done, reject) => {
@@ -438,8 +437,8 @@ async function main() {
   }
   if (interactive && options.features === undefined) {
     const selected = answer(await p2.multiselect({
-      message: "Choose features (optional)",
-      options: features.map((feature) => ({
+      message: "Choose optional features (authentication is always included)",
+      options: features.filter((feature) => !requiredFeatures.includes(feature.id)).map((feature) => ({
         value: feature.id,
         label: feature.label,
         hint: feature.hint

package/dist/templates/default/apps/desktop/.oxfmtrc.json

@@ -0,0 +1,5 @@
+{
+  "singleQuote": true,
+  "printWidth": 80,
+  "sortPackageJson": false
+}

package/dist/templates/default/apps/desktop/.oxlintrc.json

@@ -0,0 +1,6 @@
+{
+  "$schema": "./node_modules/oxlint/configuration_schema.json",
+  "categories": {
+    "correctness": "warn"
+  }
+}

package/dist/templates/default/apps/desktop/README.md

@@ -0,0 +1,58 @@
+# Desktop
+
+Electron Forge with Vite and TypeScript, managed by the repository's Bun workspace.
+Requires Bun 1.4.4 and Node.js 22.13 or newer.
+
+Run these commands from the repository root:
+
+```sh
+bun install
+bun run --cwd apps/desktop dev
+bun run --cwd apps/desktop typecheck
+bun run --cwd apps/desktop lint
+bun run --cwd apps/desktop build
+bun run --cwd apps/desktop make
+```
+
+`dev` opens the app with Vite hot reload. `build` packages the application into
+`apps/desktop/out/`. `make` also creates distributables for the current platform.
+The desktop app participates in the root Turbo tasks, so
+`bun run dev --filter=desktop` also starts it.
+
+Use the root `bun.lock`; do not generate a separate npm lockfile or run npm install
+inside this workspace. Forge 8 still probes npm's version during its CLI system
+check, so its output can say `Found npm`. Bun installs the dependencies and runs
+the project scripts; Forge and Electron still use Node.js.
+
+## Distribution targets
+
+| Platform | Architecture         | Distributables                             | Bun script     |
+| -------- | -------------------- | ------------------------------------------ | -------------- |
+| Windows  | x64                  | Squirrel `Setup.exe`, `.nupkg`, `RELEASES` | `make:windows` |
+| Linux    | x64                  | `.deb` and `.rpm`                          | `make:linux`   |
+| macOS    | arm64, Apple Silicon | `.zip` containing the `.app`               | `make:macos`   |
+
+Run each script with `bun run --cwd apps/desktop <script>`. Packaging rejects other
+platform and architecture combinations, including Windows ARM and Intel macOS.
+Build Windows installers on Windows, Linux packages on Linux, and macOS packages
+on macOS. Linux builders need `fakeroot`, `dpkg`, and `rpm` installed.
+
+## GitHub releases
+
+The GitHub publisher uploads to `disposabl-dev/create-disposabl-app`. Desktop
+releases use `desktop-v<version>` tags to avoid collisions with the generator's
+`v<version>` releases. The version comes from this workspace's `package.json`.
+Uploads create a draft release for review before making the downloads public.
+
+With `GITHUB_TOKEN` supplied in the environment, run the matching `make:*` script
+on each platform, followed by:
+
+```sh
+bun run --cwd apps/desktop release --from-make
+```
+
+The token needs repository contents write access. Each platform uploads to the
+same draft for that version. Create the draft with one platform first, then upload
+the other platforms to avoid racing release creation. Code signing, notarization,
+and in-app updates are not configured.
+

package/dist/templates/default/apps/desktop/forge.config.mts

@@ -0,0 +1,90 @@
+import type { ForgeConfig } from '@electron-forge/shared-types';
+import { MakerSquirrel } from '@electron-forge/maker-squirrel';
+import { MakerZIP } from '@electron-forge/maker-zip';
+import { MakerDeb } from '@electron-forge/maker-deb';
+import { MakerRpm } from '@electron-forge/maker-rpm';
+import { VitePlugin } from '@electron-forge/plugin-vite';
+import { FusesPlugin } from '@electron-forge/plugin-fuses';
+import { PublisherGitHub } from '@electron-forge/publisher-github';
+import { FuseV1Options, FuseVersion } from '@electron/fuses';
+
+const config: ForgeConfig = {
+  packagerConfig: {
+    asar: true,
+    // Native bundle metadata needs a numeric version; package.json retains the PR suffix.
+    appVersion: process.env.DESKTOP_VERSION?.split('-')[0],
+    buildVersion: process.env.DESKTOP_VERSION?.split('-')[0],
+    download: {
+      cacheRoot: process.env.electron_config_cache,
+    },
+  },
+  rebuildConfig: {},
+  hooks: {
+    prePackage: async (_config, platform, arch) => {
+      const supported =
+        (platform === 'darwin' && arch === 'arm64') ||
+        ((platform === 'win32' || platform === 'linux') && arch === 'x64');
+
+      if (!supported) {
+        throw new Error(
+          `Unsupported desktop target ${platform}/${arch}. Use Windows x64, Linux x64, or macOS arm64.`,
+        );
+      }
+    },
+  },
+  makers: [
+    new MakerSquirrel({}),
+    new MakerZIP({}, ['darwin']),
+    new MakerRpm({}),
+    new MakerDeb({}),
+  ],
+  publishers: [
+    new PublisherGitHub({
+      repository: {
+        owner: 'disposabl-dev',
+        name: 'create-disposabl-app',
+      },
+      tagPrefix: 'desktop-v',
+      draft: true,
+      prerelease: false,
+    }),
+  ],
+  plugins: [
+    new VitePlugin({
+      // `build` can specify multiple entry builds, which can be Main process, Preload scripts, Worker process, etc.
+      // If you are familiar with Vite configuration, it will look really familiar.
+      build: [
+        {
+          // `entry` is just an alias for `build.lib.entry` in the corresponding file of `config`.
+          entry: 'src/main.ts',
+          config: 'vite.main.config.mts',
+          target: 'main',
+        },
+        {
+          entry: 'src/preload.ts',
+          config: 'vite.preload.config.mts',
+          target: 'preload',
+        },
+      ],
+      renderer: [
+        {
+          name: 'main_window',
+          config: 'vite.renderer.config.mts',
+        },
+      ],
+    }),
+    // Fuses are used to enable/disable various Electron functionality
+    // at package time, before code signing the application
+    new FusesPlugin({
+      version: FuseVersion.V1,
+      [FuseV1Options.RunAsNode]: false,
+      [FuseV1Options.EnableCookieEncryption]: true,
+      [FuseV1Options.EnableNodeOptionsEnvironmentVariable]: false,
+      [FuseV1Options.EnableNodeCliInspectArguments]: false,
+      [FuseV1Options.EnableEmbeddedAsarIntegrityValidation]: true,
+      [FuseV1Options.OnlyLoadAppFromAsar]: true,
+    }),
+  ],
+};
+
+export default config;

package/dist/templates/default/apps/desktop/index.html

@@ -0,0 +1,12 @@
+<!doctype html>
+<html>
+  <head>
+    <meta charset="UTF-8" />
+    <title>Hello World!</title>
+  </head>
+  <body>
+    <h1>💖 Hello World!</h1>
+    <p>Welcome to your Electron application.</p>
+    <script type="module" src="/src/renderer.ts"></script>
+  </body>
+</html>

package/dist/templates/default/apps/desktop/package.json

@@ -1 +1,55 @@
-{}
+{
+  "name": "desktop",
+  "productName": "desktop",
+  "version": "1.0.0",
+  "private": true,
+  "description": "My Electron application description",
+  "keywords": [],
+  "license": "MIT",
+  "author": {
+    "name": "vivek-yast",
+    "email": "vivek@yast.ai"
+  },
+  "main": ".vite/build/main.cjs",
+  "packageManager": "bun@1.4.4",
+  "engines": {
+    "node": ">=22.13.0"
+  },
+  "scripts": {
+    "dev": "electron-forge start",
+    "start": "electron-forge start",
+    "build": "electron-forge package",
+    "package": "electron-forge package",
+    "make": "electron-forge make",
+    "make:windows": "electron-forge make --platform=win32 --arch=x64",
+    "make:linux": "electron-forge make --platform=linux --arch=x64",
+    "make:macos": "electron-forge make --platform=darwin --arch=arm64",
+    "release": "electron-forge release",
+    "lint": "oxlint && oxfmt --check",
+    "lint:fix": "oxlint --fix && oxfmt --write",
+    "format": "oxfmt --write",
+    "typecheck": "tsc --noEmit"
+  },
+  "dependencies": {
+    "electron-squirrel-startup": "^1.0.1"
+  },
+  "devDependencies": {
+    "@electron-forge/cli": "8.0.1",
+    "@electron-forge/maker-deb": "8.0.1",
+    "@electron-forge/maker-rpm": "8.0.1",
+    "@electron-forge/maker-squirrel": "8.0.1",
+    "@electron-forge/maker-zip": "8.0.1",
+    "@electron-forge/plugin-fuses": "8.0.1",
+    "@electron-forge/plugin-vite": "8.0.1",
+    "@electron-forge/publisher-github": "8.0.1",
+    "@electron-forge/shared-types": "8.0.1",
+    "@electron/fuses": "^2.1.3",
+    "@types/electron-squirrel-startup": "^1.0.2",
+    "@types/node": "^24",
+    "electron": "45.2.1",
+    "oxfmt": "^0.75.0",
+    "oxlint": "^1.90.0",
+    "typescript": "^6.0.2",
+    "vite": "^8"
+  }
+}

package/dist/templates/default/apps/desktop/src/declarations.d.ts

@@ -0,0 +1,2 @@
+/// <reference types="@electron-forge/plugin-vite/forge-vite-env" />
+declare module '*.css';

package/dist/templates/default/apps/desktop/src/index.css

@@ -0,0 +1,8 @@
+body {
+  font-family:
+    -apple-system, BlinkMacSystemFont, 'Segoe UI', Roboto, Helvetica, Arial,
+    sans-serif;
+  margin: auto;
+  max-width: 38rem;
+  padding: 2rem;
+}

package/dist/templates/default/apps/desktop/src/main.ts

@@ -0,0 +1,58 @@
+import { app, BrowserWindow } from 'electron';
+import path from 'node:path';
+import started from 'electron-squirrel-startup';
+
+// Handle creating/removing shortcuts on Windows when installing/uninstalling.
+if (started) {
+  app.quit();
+}
+
+const createWindow = () => {
+  // Create the browser window.
+  const mainWindow = new BrowserWindow({
+    width: 800,
+    height: 600,
+    webPreferences: {
+      preload: path.join(__dirname, 'preload.cjs'),
+    },
+  });
+
+  // and load the index.html of the app.
+  if (MAIN_WINDOW_VITE_DEV_SERVER_URL) {
+    mainWindow.loadURL(MAIN_WINDOW_VITE_DEV_SERVER_URL);
+  } else {
+    mainWindow.loadFile(
+      path.join(__dirname, `../renderer/${MAIN_WINDOW_VITE_NAME}/index.html`),
+    );
+  }
+
+  // Open the DevTools.
+  mainWindow.webContents.openDevTools();
+};
+
+// This method will be called when Electron has finished
+// initialization and is ready to create browser windows.
+// Some APIs can only be used after this event occurs.
+app.whenReady().then(() => {
+  createWindow();
+
+  // On OS X it's common to re-create a window in the app when the
+  // dock icon is clicked and there are no other windows open.
+  app.on('activate', () => {
+    if (BrowserWindow.getAllWindows().length === 0) {
+      createWindow();
+    }
+  });
+});
+
+// Quit when all windows are closed, except on macOS. There, it's common
+// for applications and their menu bar to stay active until the user quits
+// explicitly with Cmd + Q.
+app.on('window-all-closed', () => {
+  if (process.platform !== 'darwin') {
+    app.quit();
+  }
+});
+
+// In this file you can include the rest of your app's specific main process
+// code. You can also put them in separate files and import them here.

package/dist/templates/default/apps/desktop/src/preload.ts

@@ -0,0 +1,3 @@
+// oxlint-disable eslint-plugin-unicorn/no-empty-file
+// See the Electron documentation for details on how to use preload scripts:
+// https://www.electronjs.org/docs/latest/tutorial/process-model#preload-scripts

package/dist/templates/default/apps/desktop/src/renderer.ts

@@ -0,0 +1,19 @@
+/**
+ * This file will automatically be loaded by vite and run in the "renderer" context.
+ * To learn more about the differences between the "main" and the "renderer" context in
+ * Electron, visit:
+ *
+ * https://electronjs.org/docs/tutorial/process-model
+ *
+ * By default, Node.js integration in this file is disabled. When enabling Node.js integration
+ * in a renderer process, please be aware of potential security implications. You can read
+ * more about security risks here:
+ *
+ * https://electronjs.org/docs/tutorial/security
+ */
+
+import './index.css';
+
+console.log(
+  '👋 This message is being logged by the renderer process, included via Vite',
+);

package/dist/templates/default/apps/desktop/tsconfig.json

@@ -0,0 +1,14 @@
+{
+  "compilerOptions": {
+    "target": "ESNext",
+    "module": "preserve",
+    "moduleResolution": "bundler",
+    "allowJs": true,
+    "skipLibCheck": true,
+    "esModuleInterop": true,
+    "noImplicitAny": true,
+    "sourceMap": true,
+    "resolveJsonModule": true
+  },
+  "include": ["src/**/*", "*.ts", "*.mts"]
+}

package/dist/templates/default/apps/desktop/vite.main.config.mts

@@ -0,0 +1,4 @@
+import { defineConfig } from 'vite';
+
+// https://vitejs.dev/config
+export default defineConfig({});

package/dist/templates/default/apps/desktop/vite.preload.config.mts

@@ -0,0 +1,4 @@
+import { defineConfig } from 'vite';
+
+// https://vitejs.dev/config
+export default defineConfig({});

package/dist/templates/default/apps/desktop/vite.renderer.config.mts

@@ -0,0 +1,4 @@
+import { defineConfig } from 'vite';
+
+// https://vitejs.dev/config
+export default defineConfig({});

package/dist/templates/default/apps/mobile/.agents/skills/agent-device/SKILL.md

@@ -0,0 +1,22 @@
+---
+name: agent-device
+description: Automates Apple-platform apps (iOS, tvOS, macOS), Android devices (including Android TV and Fire TV on Fire OS), and Amazon Vega OS TV apps in Vega Virtual Devices. Use when navigating apps, taking snapshots/screenshots where supported, driving TV remotes, tapping, typing, scrolling, extracting UI info, collecting evidence, or planning agent-device CLI commands.
+---
+
+# agent-device
+
+For a normal app-driving task, start immediately. Do not probe first with `--help`, `--version`, `devices`, `appstate`, `snapshot`, or `screenshot`:
+
+```bash
+agent-device open <app> --foreground
+```
+
+That starts the session and returns the initial interactive snapshot with `@refs`.
+
+Loop: act with `press|click|fill|longpress <target> ... --settle`, `scroll <direction> --settle`, or `back --settle`; continue from the printed diff, verify the named expectation (`wait text "..."`, `is`, `get`, or `find`), then run `agent-device close`.
+
+Reaching an off-screen target is one command, not a scroll-and-check loop: `scroll down --until <selector>` scrolls until that element is on screen, and `scroll bottom` runs to the end of the content. Repeated bare `scroll down` calls are the slow way to find something.
+
+Copy refs byte-for-byte: `@e12`, `@e12~s4` — keep the `@` and any `~sN`. Prefer current refs, then `id`/`label`/`role` selectors; coordinates are a last resort. If snapshot reports sparse/AX-unavailable, its refs and selectors are invalid: run `agent-device screenshot`, inspect the image, use coordinates, then retry `snapshot -i` after navigating. Otherwise run `snapshot -i` only when the diff lacks the next target.
+
+Error output includes corrective hints; follow them instead of re-planning. Only when the task is specialized (for example gestures, scripting, TV, macOS, remote, or debugging) or a command shape is unclear, run `agent-device help <topic>`. `agent-device --help` lists topics, but is not a startup step.

package/dist/templates/default/apps/mobile/.agents/skills/android-emulator/SKILL.md

@@ -0,0 +1,32 @@
+---
+name: android-emulator
+description: Verify and debug native, React Native, Expo, or Flutter apps on an Android Emulator with agent-device. Use when an agent needs to launch an app, inspect its live UI, tap, type, scroll, validate a code change, collect failure evidence, or reproduce a workflow on an Android virtual device.
+---
+
+# Android Emulator
+
+Require the `agent-device` CLI to be installed separately before driving an emulator:
+
+```bash
+npm install -g agent-device@latest
+```
+
+Treat installation and upgrades as user-owned setup steps. Do not run that command autonomously or substitute a mutable `npx -y agent-device@latest` invocation.
+
+For a normal app-driving task, start immediately. Do not probe first with `--help`, `--version`, `devices`, `appstate`, `snapshot`, or `screenshot`. Target Android explicitly when opening an app or package id:
+
+```bash
+agent-device open <app-or-package-id> --platform android --foreground
+```
+
+Follow the initial interactive snapshot and corrective error hints. If the shell reports that `agent-device` is unavailable, stop and ask the user to install it or expose their existing installation on `PATH`.
+
+Only when the task is specialized or a command shape is unclear, read the relevant version-matched help topic:
+
+```bash
+agent-device help validate        # engineering validation and build freshness
+agent-device help debugging       # screenshots, logs, traces, video, and failures
+agent-device help react-native    # React Native and Expo runtime guidance
+agent-device help react-devtools  # React components, props/state/hooks, render profiling
+agent-device help scripting       # durable replay and CI workflows
+```

package/dist/templates/default/apps/mobile/.agents/skills/dogfood/SKILL.md

@@ -0,0 +1,27 @@
+---
+name: dogfood
+description: Systematically explore and test a mobile app on iOS/Android with agent-device to find bugs, UX issues, and other problems. Use when asked to dogfood, QA, exploratory test, find issues, bug hunt, or test this app on mobile.
+allowed-tools: Bash(agent-device:*), Bash(npx agent-device:*)
+---
+
+# Dogfood
+
+Router for exploratory QA. Private setup before using this skill:
+
+```bash
+agent-device --version
+```
+
+If that fails, stop and tell the user to expose a trusted `agent-device` binary on PATH or approve an exact-version npm command. This skill intentionally keeps allowed tools restricted to `agent-device` and `npx agent-device`.
+
+Require `agent-device >= 0.14.0`; older CLIs lack these help topics. If older, stop and tell the user to upgrade the trusted install or approve an exact-version npm command. Do not run `npm install -g agent-device@latest` or `npx -y agent-device@latest` autonomously, and do not include version/upgrade commands in final plans.
+
+Read current CLI guidance:
+
+```bash
+agent-device help dogfood
+```
+
+Loop: open app -> snapshot -i + screenshot -> explore flows -> capture evidence per issue -> close.
+
+Target app is required; infer platform or ask. Findings must come from runtime behavior, not source reads. Let `help dogfood` provide exact report shape, evidence commands, and current workflow guidance.