create-ec-app 1.8.0 → 1.10.0

package/templates/base/package.json

@@ -8,36 +8,31 @@
 		"build": "tsc -b && vite build",
 		"build:dev": "tsc -b && vite build --mode development",
 		"lint": "eslint .",
-		"preview": "vite preview",
-		"format": "biome format --write .",
-		"lint:biome": "biome lint .",
-		"check": "biome check --write --no-errors-on-unmatched .",
-		"format:check": "biome format --check .",
-		"lint:fix": "biome lint --apply ."
+		"preview": "vite preview"
 	},
 	"dependencies": {
-		"@tailwindcss/vite": "^4.3.0",
-		"tailwindcss": "^4.3.0",
-		"@tanstack/react-query": "^5.100.14",
+		"@tailwindcss/vite": "^4.3.1",
+		"@tanstack/react-query": "^5.101.2",
 		"@types/xrm": "^9.0.94",
 		"react": "^19.2.7",
 		"react-dom": "^19.2.7",
+		"tailwindcss": "^4.3.1",
 		"zod": "^4.4.3",
 		"zustand": "^5.0.14"
 	},
 	"devDependencies": {
 		"@eslint/js": "^10.0.1",
-		"@tanstack/eslint-plugin-query": "^5.100.14",
-		"@types/node": "^24.12.4",
-		"@types/react": "^19.2.16",
+		"@tanstack/eslint-plugin-query": "^5.101.2",
+		"@types/node": "^22.20.0",
+		"@types/react": "^19.2.17",
 		"@types/react-dom": "^19.2.3",
-		"@vitejs/plugin-react": "^6.0.2",
-		"eslint": "^10.4.1",
+		"@vitejs/plugin-react": "^6.0.3",
+		"eslint": "^10.6.0",
 		"eslint-plugin-react-hooks": "^7.1.1",
-		"eslint-plugin-react-refresh": "^0.5.2",
-		"globals": "^17.6.0",
-		"typescript": "~6.0.3",
-		"typescript-eslint": "^8.60.1",
-		"vite": "^8.0.16"
+		"eslint-plugin-react-refresh": "^0.5.3",
+		"globals": "^17.7.0",
+		"typescript": "^6.0.3",
+		"typescript-eslint": "^8.62.0",
+		"vite": "^8.1.0"
 	}
 }

package/templates/pcf/base/package-lock.json

@@ -124,9 +124,9 @@
       }
     },
     "node_modules/@azure/opentelemetry-instrumentation-azure-sdk/node_modules/@opentelemetry/core": {
-      "version": "2.7.1",
-      "resolved": "https://registry.npmjs.org/@opentelemetry/core/-/core-2.7.1.tgz",
-      "integrity": "sha512-QAqIj32AtK6+pEVNG7EOVxHdE06RP+FM5qpiEJ4RtDcFIqKUZHYhl7/7UY5efhwmwNAg7j8QbJVBLxMerc0+gw==",
+      "version": "2.8.0",
+      "resolved": "https://registry.npmjs.org/@opentelemetry/core/-/core-2.8.0.tgz",
+      "integrity": "sha512-hd1Lfh8p545nNz+jq1Ejfz+Mn1hyLuxYn1YzTfFNrxr8urEWMNQLPf1Th8kjOH+HxwawCrtgBp8JpBUR4ZSgww==",
       "dev": true,
       "license": "Apache-2.0",
       "dependencies": {
@@ -2277,14 +2277,14 @@
       }
     },
     "node_modules/@opentelemetry/sdk-trace-web": {
-      "version": "2.7.1",
-      "resolved": "https://registry.npmjs.org/@opentelemetry/sdk-trace-web/-/sdk-trace-web-2.7.1.tgz",
-      "integrity": "sha512-K806OouCSOjMd8Nr7+ZCq3QT22tdAzzS/7h8vprfiKjkgFQ99/dvwU8d12WJANA6D5Qtme65hyBAqAu9CkQuxQ==",
+      "version": "2.8.0",
+      "resolved": "https://registry.npmjs.org/@opentelemetry/sdk-trace-web/-/sdk-trace-web-2.8.0.tgz",
+      "integrity": "sha512-P3ZM8BGJ5mwjtyfAxRyxsCyWHvaj+xahdhLoS3YiPsEyTHcWTVzx2691C8SrGkpvro3tNFCsWuNNrvM+spKODg==",
       "dev": true,
       "license": "Apache-2.0",
       "dependencies": {
-        "@opentelemetry/core": "2.7.1",
-        "@opentelemetry/sdk-trace-base": "2.7.1"
+        "@opentelemetry/core": "2.8.0",
+        "@opentelemetry/sdk-trace-base": "2.8.0"
       },
       "engines": {
         "node": "^18.19.0 || >=20.6.0"
@@ -2294,9 +2294,9 @@
       }
     },
     "node_modules/@opentelemetry/sdk-trace-web/node_modules/@opentelemetry/core": {
-      "version": "2.7.1",
-      "resolved": "https://registry.npmjs.org/@opentelemetry/core/-/core-2.7.1.tgz",
-      "integrity": "sha512-QAqIj32AtK6+pEVNG7EOVxHdE06RP+FM5qpiEJ4RtDcFIqKUZHYhl7/7UY5efhwmwNAg7j8QbJVBLxMerc0+gw==",
+      "version": "2.8.0",
+      "resolved": "https://registry.npmjs.org/@opentelemetry/core/-/core-2.8.0.tgz",
+      "integrity": "sha512-hd1Lfh8p545nNz+jq1Ejfz+Mn1hyLuxYn1YzTfFNrxr8urEWMNQLPf1Th8kjOH+HxwawCrtgBp8JpBUR4ZSgww==",
       "dev": true,
       "license": "Apache-2.0",
       "dependencies": {
@@ -2310,13 +2310,13 @@
       }
     },
     "node_modules/@opentelemetry/sdk-trace-web/node_modules/@opentelemetry/resources": {
-      "version": "2.7.1",
-      "resolved": "https://registry.npmjs.org/@opentelemetry/resources/-/resources-2.7.1.tgz",
-      "integrity": "sha512-DeT6KKolmC4e/dRQvMQ/RwlnzhaqeiFOXY5ngoOPJ07GgVVKxZOg9EcrNZb5aTzUn+iCrJldAgOfQm1O/QfPAQ==",
+      "version": "2.8.0",
+      "resolved": "https://registry.npmjs.org/@opentelemetry/resources/-/resources-2.8.0.tgz",
+      "integrity": "sha512-qmXQ27ilDbUK/vGMqwL8D4/rhn76C+sherM4wTbjlfknR8Nvfc/hCxjRJPhkzZzUsPiNg16SA31NxMabwttRjg==",
       "dev": true,
       "license": "Apache-2.0",
       "dependencies": {
-        "@opentelemetry/core": "2.7.1",
+        "@opentelemetry/core": "2.8.0",
         "@opentelemetry/semantic-conventions": "^1.29.0"
       },
       "engines": {
@@ -2327,14 +2327,14 @@
       }
     },
     "node_modules/@opentelemetry/sdk-trace-web/node_modules/@opentelemetry/sdk-trace-base": {
-      "version": "2.7.1",
-      "resolved": "https://registry.npmjs.org/@opentelemetry/sdk-trace-base/-/sdk-trace-base-2.7.1.tgz",
-      "integrity": "sha512-NAYIlsF8MPUsKqJMiDQJTMPOmlbawC1Iz/omMLygZ1C9am8fTKYjTaI+OZM+WTY3t3Glo0wnOg/6/pac6RGPPw==",
+      "version": "2.8.0",
+      "resolved": "https://registry.npmjs.org/@opentelemetry/sdk-trace-base/-/sdk-trace-base-2.8.0.tgz",
+      "integrity": "sha512-mhU4jp+vW0mGbFRd+GeXHvmfA4aDqWjBjLC3pE5XMpLs0IE2ryYb019Ts2AQrOq67gaTF25D91+fgvEHDZEnuQ==",
       "dev": true,
       "license": "Apache-2.0",
       "dependencies": {
-        "@opentelemetry/core": "2.7.1",
-        "@opentelemetry/resources": "2.7.1",
+        "@opentelemetry/core": "2.8.0",
+        "@opentelemetry/resources": "2.8.0",
         "@opentelemetry/semantic-conventions": "^1.29.0"
       },
       "engines": {
@@ -2483,9 +2483,6 @@
         "arm"
       ],
       "dev": true,
-      "libc": [
-        "glibc"
-      ],
       "license": "MIT",
       "optional": true,
       "os": [
@@ -2507,9 +2504,6 @@
         "arm"
       ],
       "dev": true,
-      "libc": [
-        "musl"
-      ],
       "license": "MIT",
       "optional": true,
       "os": [
@@ -2531,9 +2525,6 @@
         "arm64"
       ],
       "dev": true,
-      "libc": [
-        "glibc"
-      ],
       "license": "MIT",
       "optional": true,
       "os": [
@@ -2555,9 +2546,6 @@
         "arm64"
       ],
       "dev": true,
-      "libc": [
-        "musl"
-      ],
       "license": "MIT",
       "optional": true,
       "os": [
@@ -2579,9 +2567,6 @@
         "x64"
       ],
       "dev": true,
-      "libc": [
-        "glibc"
-      ],
       "license": "MIT",
       "optional": true,
       "os": [
@@ -2603,9 +2588,6 @@
         "x64"
       ],
       "dev": true,
-      "libc": [
-        "musl"
-      ],
       "license": "MIT",
       "optional": true,
       "os": [
@@ -4094,9 +4076,9 @@
       }
     },
     "node_modules/engine.io": {
-      "version": "6.6.8",
-      "resolved": "https://registry.npmjs.org/engine.io/-/engine.io-6.6.8.tgz",
-      "integrity": "sha512-2agL3ueZhqxoVrfmntO8yuVj+uNSlIOnhykYHk3Cq0ShYPdUjjUiSJrQvXjq01I9jAuI0Zl2YO8Evv5Mqytm5g==",
+      "version": "6.6.9",
+      "resolved": "https://registry.npmjs.org/engine.io/-/engine.io-6.6.9.tgz",
+      "integrity": "sha512-clKkw4C7nJ22mGgoVcCg6V/W/TxdNyIOTr89k2ONZu81qqkddPFDF0LXcbAwhzPD8DjkiRCjzuiO6Y+fkpD4vg==",
       "dev": true,
       "license": "MIT",
       "dependencies": {
@@ -4109,23 +4091,23 @@
         "cors": "~2.8.5",
         "debug": "~4.4.1",
         "engine.io-parser": "~5.2.1",
-        "ws": "~8.20.1"
+        "ws": "~8.21.0"
       },
       "engines": {
         "node": ">=10.2.0"
       }
     },
     "node_modules/engine.io-client": {
-      "version": "6.6.5",
-      "resolved": "https://registry.npmjs.org/engine.io-client/-/engine.io-client-6.6.5.tgz",
-      "integrity": "sha512-QCwxUDULPlXv8F6tqMMKx5dNkTe6OaBYRMPYeXKBlyOoKvAmE0ac6pW7fFhSscJ/5SI7666/U/B+MElbsrJlIg==",
+      "version": "6.6.6",
+      "resolved": "https://registry.npmjs.org/engine.io-client/-/engine.io-client-6.6.6.tgz",
+      "integrity": "sha512-iY6QdftLQ9pyiPoX082bpf/u1UewnOaJrtJIF9T0++QB34lZrj0uP+Q/bj8AlUsAxqhnkTV2BS8SBZSxOmoV5Q==",
       "dev": true,
       "license": "MIT",
       "dependencies": {
         "@socket.io/component-emitter": "~3.1.0",
         "debug": "~4.4.1",
         "engine.io-parser": "~5.2.1",
-        "ws": "~8.20.1",
+        "ws": "~8.21.0",
         "xmlhttprequest-ssl": "~2.1.1"
       }
     },
@@ -6439,14 +6421,14 @@
       }
     },
     "node_modules/socket.io-adapter": {
-      "version": "2.5.7",
-      "resolved": "https://registry.npmjs.org/socket.io-adapter/-/socket.io-adapter-2.5.7.tgz",
-      "integrity": "sha512-e0LyK91f3cUxTmv95/KzoLg47+zF+s/sbxRGDNsyG4dmIP8ZSX8ax6byOxfJXeNNtS/8AZlfD+uP7gBeR7DLlg==",
+      "version": "2.5.8",
+      "resolved": "https://registry.npmjs.org/socket.io-adapter/-/socket.io-adapter-2.5.8.tgz",
+      "integrity": "sha512-6Oy52pbg+kvdCVvjcN+FnY7BvxZ7cIHNScbvztT/It5d0vbwoJoVZmF2gjJmnV0/4WlXRfG15zc45ySk9Ah8bw==",
       "dev": true,
       "license": "MIT",
       "dependencies": {
         "debug": "~4.4.1",
-        "ws": "~8.20.1"
+        "ws": "~8.21.0"
       }
     },
     "node_modules/socket.io-client": {
@@ -7173,9 +7155,9 @@
       }
     },
     "node_modules/ws": {
-      "version": "8.20.1",
-      "resolved": "https://registry.npmjs.org/ws/-/ws-8.20.1.tgz",
-      "integrity": "sha512-It4dO0K5v//JtTXuPkfEOaI3uUN87iYPnqo/ZzqCoG3g8uhA66QUMs/SrM0YK7/NAu+r4LMh/9dq2A7k+rHs+w==",
+      "version": "8.21.0",
+      "resolved": "https://registry.npmjs.org/ws/-/ws-8.21.0.tgz",
+      "integrity": "sha512-Vsp28b7DRcimFQvrqu2Wek3z1iYxDCWqHYB8Qsnk/S4RfaCQzPGPyBNuVjJV3cd6UiKtUtp6sNM77gWvzcCH+g==",
       "dev": true,
       "license": "MIT",
       "engines": {

package/templates/targets/code-apps/AGENTS.md

@@ -36,7 +36,7 @@ The app supports two modes.
 - Run `npx power-apps init` before real push/data-source work.
 - Treat `power.config.example.json` as documentation only; do not rename it to bypass initialization.
 
-Do not mix this with webresource `authService.ts`, `token.json`, or Power Pages `AuthContext`.
+Do not mix this with webresource `AuthService.ts`, `token.json`, or Power Pages `AuthContext`.
 
 ## Critical Files
 
@@ -101,6 +101,7 @@ Preferred shape:
 - one TanStack Query hook when components need query state
 - one mutation hook when mutation state or invalidation is needed
 - query keys colocated with the hook when reused for invalidation
+- UI that consumes async data should handle loading, error, empty, and success states when each state affects the workflow
 
 Do not create wrapper chains such as:
 
@@ -133,6 +134,13 @@ Stay consistent with the project's existing UI system.
 - Do not hand-roll custom CSS unless component props and Tailwind are not enough.
 - Keep layouts compact, scannable, responsive, and suitable for Power Apps hosting.
 
+## Accessibility
+
+- Use semantic HTML.
+- Use buttons for actions and links for navigation.
+- Keep input labels, accessible names, dialog titles, and keyboard support intact.
+- Do not remove shadcn/Radix or Kendo accessibility behavior while restyling.
+
 ## Code Shape
 
 Prefer:
@@ -142,6 +150,7 @@ Prefer:
 - existing generated services and components
 - small local helpers only when they remove real duplication or name non-obvious domain logic
 - explicit connector/table/action handling over generic frameworks
+- feature folders only when a feature owns multiple pieces such as API, hooks, components, types, or schemas
 
 Avoid:
 
@@ -151,6 +160,39 @@ Avoid:
 - excessive configuration
 - defensive wrappers around every value
 - broad refactors while adding a feature
+- moving code into shared `common` or `lib` before there is a second caller
+
+## Feature and Routing Shape
+
+Keep small apps flat. Use feature folders when a feature owns enough surface area to group its page, UI, data access, hooks, and types.
+
+Example:
+
+```text
+src/
+  features/
+    accounts/
+      pages/
+        accounts-page.tsx
+      components/
+        accounts-table.tsx
+      api/
+        accounts.api.ts
+      hooks/
+        use-accounts.ts
+      types/
+        account.types.ts
+```
+
+Use only folders that contain real files. Flatten the example when the feature is small.
+
+When React Router or another router is present:
+
+- keep route definitions in one obvious place, such as `src/routes.tsx` or `src/router/routes.tsx`
+- keep page components thin; they read route/search params and compose feature components
+- parse URL params at the route/page boundary, then pass typed values down
+- use `getContext` from `@microsoft/power-apps/app` for Power Apps host/query context instead of assuming browser URL control
+- do not add a router for a single screen that local state can handle
 
 ## Error Handling
 

package/templates/targets/code-apps/CLAUDE.md

@@ -0,0 +1 @@
+@AGENTS.md

package/templates/targets/code-apps/package.patch.json

@@ -1,6 +1,6 @@
 {
 	"dependencies": {
-		"@microsoft/power-apps": "^1.1.9"
+		"@microsoft/power-apps": "^1.2.2"
 	},
 	"devDependencies": {
 		"@microsoft/power-apps-vite": "^1.0.2"

package/templates/targets/power-pages/AGENTS.md

@@ -37,7 +37,7 @@ The app supports two modes.
 - Use the existing `AuthContext` flow only where this template already requires it.
 - Never commit client secrets, tenant-specific secrets, or real token values.
 
-Do not mix Power Pages auth with webresource `authService.ts` or `token.json`.
+Do not mix Power Pages auth with webresource `AuthService.ts` or `token.json`.
 
 ## Critical Files
 
@@ -106,6 +106,7 @@ Preferred shape:
 - one TanStack Query hook when components need it
 - one mutation hook when mutation state or invalidation is needed
 - query keys colocated with the hook when reused for invalidation
+- UI that consumes async data should handle loading, error, empty, and success states when each state affects the workflow
 
 Do not create wrapper chains such as:
 
@@ -138,6 +139,13 @@ Stay consistent with the project's existing UI system.
 - Do not hand-roll custom CSS unless component props and Tailwind are not enough.
 - Keep layouts compact, scannable, responsive, and suitable for Power Pages.
 
+## Accessibility
+
+- Use semantic HTML.
+- Use buttons for actions and links for navigation.
+- Keep input labels, accessible names, dialog titles, and keyboard support intact.
+- Do not remove shadcn/Radix or Kendo accessibility behavior while restyling.
+
 ## Code Shape
 
 Prefer:
@@ -147,6 +155,7 @@ Prefer:
 - existing auth, services, and components
 - small local helpers only when they remove real duplication or name non-obvious domain logic
 - explicit Power Pages table/field handling over generic frameworks
+- feature folders only when a feature owns multiple pieces such as API, hooks, components, types, or schemas
 
 Avoid:
 
@@ -156,6 +165,39 @@ Avoid:
 - excessive configuration
 - defensive wrappers around every value
 - broad refactors while adding a feature
+- moving code into shared `common` or `lib` before there is a second caller
+
+## Feature and Routing Shape
+
+Keep small apps flat. Use feature folders when a feature owns enough surface area to group its page, UI, data access, hooks, and types.
+
+Example:
+
+```text
+src/
+  features/
+    accounts/
+      pages/
+        accounts-page.tsx
+      components/
+        accounts-table.tsx
+      api/
+        accounts.api.ts
+      hooks/
+        use-accounts.ts
+      types/
+        account.types.ts
+```
+
+Use only folders that contain real files. Flatten the example when the feature is small.
+
+When React Router or another router is present:
+
+- keep route definitions in one obvious place, such as `src/routes.tsx` or `src/router/routes.tsx`
+- keep page components thin; they read route/search params and compose feature components
+- parse URL params at the route/page boundary, then pass typed values down
+- keep client routes separate from Power Pages `_api` calls and code-site deployment paths
+- do not add a router for a single screen that local state can handle
 
 ## Error Handling
 

package/templates/targets/power-pages/CLAUDE.md

@@ -0,0 +1 @@
+@AGENTS.md

package/templates/targets/power-pages/README.md

@@ -14,7 +14,7 @@ This is a Power Pages Single Page Application (SPA) built with React, Vite, and
 
 ## Auth and API Access
 
-This SPA uses ADAL (Azure Active Directory Authentication Library) for authentication. While ADAL is deprecated by Microsoft, it remains functional for Power Pages scenarios until MSAL v2 support is available.
+This SPA uses ADAL (Azure Active Directory Authentication Library) for authentication. ADAL is deprecated by Microsoft and should not be treated as a long-term ideal path, but this template keeps the existing ADAL implementation for Power Pages scenarios until a validated MSAL v2 migration is introduced.
 
 ### Authentication Setup
 
@@ -37,6 +37,26 @@ The `AuthContext` requires the following environment variables:
 - After successful authentication, users are redirected back with tokens
 - Tokens are automatically cached and reused for subsequent requests
 - Call `logout()` to clear tokens and sign out the user
+- Auth errors are exposed as `error` on `useAuth()` and can be cleared with `clearError()`
+
+### Authentication Errors
+
+The generated app includes `src/components/shared/AuthError.tsx` and renders it near the app root. Keep that pattern if you replace the root layout:
+
+```tsx
+import { AuthError } from "@/components/shared/AuthError";
+
+function App() {
+  return (
+    <main>
+      <AuthError />
+      {/* app routes or page content */}
+    </main>
+  );
+}
+```
+
+`AuthContext` does not throw automatically when authentication fails, so the app can display a local error and let the user dismiss it.
 
 ## Example Data Fetch Using TanStack Query and AuthContext
 
@@ -156,7 +176,7 @@ export const AuthButton = () => {
   <Button>Click me</Button>;
   ```
 
-- Shadcn/ui: Components are installed and available under the `@/components` alias. Example:
+- Shadcn/ui: Components are copied from the committed template snapshot and available under the `@/components` alias. Example:
 
   ```tsx
   import { Button } from "@/components/ui/button";

package/templates/targets/power-pages/src/App.patch.tsx

@@ -1,10 +1,12 @@
 import { useAuth } from "./context/AuthContext";
+import { AuthError } from "./components/shared/AuthError";
 
 function App() {
-	const { isAuthenticated, user } = useAuth(); //INFO: User is where the token information is stored (user?.idToken)
+	const { isAuthenticated } = useAuth();
 
 	return (
 		<div className="flex h-screen flex-col items-center justify-center gap-4">
+			<AuthError />
 			{isAuthenticated ? (
 				<div>You are logged in</div>
 			) : (

package/templates/targets/power-pages/src/components/shared/AuthError.tsx

@@ -0,0 +1,18 @@
+import { useAuth } from "@/context/AuthContext";
+
+export function AuthError() {
+	const { error, clearError } = useAuth();
+
+	if (!error) {
+		return null;
+	}
+
+	return (
+		<div role="alert" className="rounded border p-3">
+			<p>Authentication error: {error}</p>
+			<button type="button" onClick={clearError}>
+				Dismiss
+			</button>
+		</div>
+	);
+}

package/templates/targets/power-pages/src/context/AuthContext.tsx

@@ -263,10 +263,6 @@ const AuthProviderContent = ({ children }: { children: ReactNode }) => {
 		getIdToken,
 	};
 
-	if (error) {
-		throw new Error(`Authentication error: ${error}`);
-	}
-
 	return (
 		<AuthContext.Provider value={value}>{children}</AuthContext.Provider>
 	);

package/templates/targets/swa/AGENTS.md

@@ -96,6 +96,7 @@ Preferred shape:
 - one TanStack Query hook when components need it
 - one mutation hook when mutation state or invalidation is needed
 - query keys colocated with the hook when reused for invalidation
+- UI that consumes async data should handle loading, error, empty, and success states when each state affects the workflow
 
 Do not create wrapper chains such as:
 
@@ -128,6 +129,13 @@ Stay consistent with the project's existing UI system.
 - Do not hand-roll custom CSS unless component props and Tailwind are not enough.
 - Keep layouts compact, responsive, and suitable for a hosted business app.
 
+## Accessibility
+
+- Use semantic HTML.
+- Use buttons for actions and links for navigation.
+- Keep input labels, accessible names, dialog titles, and keyboard support intact.
+- Do not remove shadcn/Radix or Kendo accessibility behavior while restyling.
+
 ## Code Shape
 
 Prefer:
@@ -136,6 +144,7 @@ Prefer:
 - direct typed functions
 - existing services and components
 - small local helpers only when they remove real duplication or name non-obvious domain logic
+- feature folders only when a feature owns multiple pieces such as API, hooks, components, types, or schemas
 
 Avoid:
 
@@ -145,6 +154,39 @@ Avoid:
 - excessive configuration
 - defensive wrappers around every value
 - broad refactors while adding a feature
+- moving code into shared `common` or `lib` before there is a second caller
+
+## Feature and Routing Shape
+
+Keep small apps flat. Use feature folders when a feature owns enough surface area to group its page, UI, data access, hooks, and types.
+
+Example:
+
+```text
+src/
+  features/
+    accounts/
+      pages/
+        accounts-page.tsx
+      components/
+        accounts-table.tsx
+      api/
+        accounts.api.ts
+      hooks/
+        use-accounts.ts
+      types/
+        account.types.ts
+```
+
+Use only folders that contain real files. Flatten the example when the feature is small.
+
+When React Router or another router is present:
+
+- keep route definitions in one obvious place, such as `src/routes.tsx` or `src/router/routes.tsx`
+- keep page components thin; they read route/search params and compose feature components
+- parse URL params at the route/page boundary, then pass typed values down
+- keep `staticwebapp.config.json` `navigationFallback` aligned with client-side routes
+- do not add a router for a single screen that local state can handle
 
 ## Error Handling
 

package/templates/targets/swa/CLAUDE.md

@@ -0,0 +1 @@
+@AGENTS.md