create-freakpunch 0.1.0 → 0.2.0

package/template/design/DESIGN.md

@@ -1,6 +1,6 @@
 # Design system
 
-The official design language of the freakpunch admin template. Every screen in every project built
+The official design language of this admin panel. Every screen in every project built
 from this template follows it. Components and patterns live in [COMPONENTS.md](COMPONENTS.md) and
 [PATTERNS.md](PATTERNS.md). The single source of truth for values is `src/index.css`.
 
@@ -25,7 +25,7 @@ from this template follows it. Components and patterns live in [COMPONENTS.md](C
 │ (on the canvas)  │ top bar: sidebar toggle · breadcrumbs · tools  │
 │                  │────────────────────────────────────────────────│
 │  ▢ Dashboard     │  Page title                       [actions]    │
-│  ▣ Products ←pill│  description                                   │
+│  ▣ Orders   ←pill│  description                                   │
 │                  │  ┌ card ┐ ┌ card ┐                             │
 │                  │  └──────┘ └──────┘                             │
 │  [user card]     └────────────────────────────────────────────────┘
@@ -61,7 +61,7 @@ from this template follows it. Components and patterns live in [COMPONENTS.md](C
   (`text-[13px]` nav items, `text-[10.5px]`/`text-[11px]` small meta) are the only allowed ones.
 - Uppercase `label-caps` is for **short labels only** (one to three words), never for sentences.
   Numbers that line up (tables, KPIs, counters, times) use `tabular-nums`.
-- Headings use sentence case ("New product", not "New Product"), in both languages.
+- Headings use sentence case ("New order", not "New Order"), in both languages.
 
 ## Spacing
 

package/template/design/PATTERNS.md

@@ -5,10 +5,10 @@ for each pattern.
 
 ## List page
 
-Reference: `src/modules/products/pages/products-list-page.tsx`, `src/pages/settings/company/users-page.tsx`.
+Reference: the list page `npm run new-module` generates, and `src/pages/settings/company/users-page.tsx`.
 
 ```
-Page title="Products" description="…" actions={<primary create button>}
+Page title="Orders" description="…" actions={<primary create button>}
 └ DataTable
    ├ toolbar: TableSearch · FilterSelect × n · ClearFiltersButton (only when filters are active)
    ├ columns: identity column first (icon/avatar + name link + muted sub-line),
@@ -24,10 +24,10 @@ Page title="Products" description="…" actions={<primary create button>}
 
 ## Form page (create / edit)
 
-Reference: `src/modules/products/pages/product-form-page.tsx`.
+Reference: the form page `npm run new-module` generates.
 
 ```
-Page title="New product" description="…"
+Page title="New order" description="…"
 └ FormLayout submitLabel onCancel (saveBar="always")
    ├ FormSection "Details"        — most important fields first, autofocus on create
    ├ FormSection "Organization"
@@ -41,7 +41,7 @@ Page title="New product" description="…"
 
 ## Detail page
 
-Reference: `src/modules/products/pages/product-detail-page.tsx`.
+Reference: the detail page `npm run new-module` generates.
 
 ```
 Page title={name} description={muted id} leading={icon tile} actions={Delete (destructive) · Edit (primary)}

package/template/index.html

@@ -5,7 +5,7 @@
     <link rel="icon" type="image/svg+xml" href="/favicon.svg" />
     <meta name="viewport" content="width=device-width, initial-scale=1.0" />
     <meta name="robots" content="noindex, nofollow" />
-    <meta name="description" content="freakpunch admin template" />
+    <meta name="description" content="Admin panel" />
     <meta name="color-scheme" content="light dark" />
     <title>freakpunch</title>
     <script>

package/template/src/app.config.ts

@@ -1,61 +1,50 @@
-import type { AppConfig, AuthMode } from '@/core/config/types'
-
-/**
- * Per-project configuration. This is the only file a new project needs to
- * touch to rename the app, change the brand color and switch modules on/off.
- */
-export const appConfig = {
-  name: 'freakpunch',
-  /** A preset key from src/core/theme/brand.ts, or a custom { color, foreground } pair. */
-  brand: 'indigo',
-
-  /** Workspaces shown in the sidebar switcher (mock until a backend provides them). */
-  workspaces: [
-    { id: 'freakpunch', name: 'freakpunch', plan: 'common:plans.personal' },
-    { id: 'acme', name: 'Acme Store', plan: 'common:plans.business' },
-    { id: 'northwind', name: 'Northwind News', plan: 'common:plans.team' },
-  ],
-
-  /** Sidebar group order; labels are translation keys. Modules attach nav items to these ids. */
-  navGroups: [
-    { id: 'overview', label: 'common:nav.groups.overview' },
-    { id: 'catalog', label: 'common:nav.groups.catalog' },
-    { id: 'content', label: 'common:nav.groups.content' },
-    { id: 'system', label: 'common:nav.groups.system' },
-  ],
-
-  /** Turn modules on/off. Keys must exist in src/modules/registry.ts. */
-  modules: {
-    products: true,
-    // fp:modules
-  },
-
-  /** Marketing page at `/`; set false to open the panel directly. */
-  landing: true,
-
-  /** Built-in areas (all on by default). Switch off what a project doesn't need. */
-  features: {
-    notifications: true,
-    users: true,
-    roles: true,
-    securityPolicies: true,
-    modules: true,
-    integrations: true,
-    auditLog: true,
-    dangerZone: true,
-    /** The sample KPI/revenue/activity cards on the dashboard. */
-    demoDashboard: true,
-  },
-
-  /** mock (demo data) | bearer (JWT) | cookie (Laravel Sanctum). See BACKEND.md. */
-  auth: {
-    mode: (import.meta.env.VITE_AUTH_MODE ?? 'mock') as AuthMode,
-    csrfUrl: import.meta.env.VITE_CSRF_URL ?? '/sanctum/csrf-cookie',
-  },
-
-  /** Default ISO 4217 currency for formatting (Settings → Company → General can override it). */
-  currency: 'USD',
-
-  /** Real REST API base URL; mock services ignore it. */
-  apiBaseUrl: import.meta.env.VITE_API_URL ?? '/api',
-} satisfies AppConfig
+import type { AppConfig, AuthMode } from '@/core/config/types'
+
+/** This panel's settings. The company name and logo come from the setup wizard and Settings. */
+export const appConfig = {
+  name: 'Admin',
+  /** A preset key from src/core/theme/brand.ts, or a custom { color, foreground } pair. */
+  brand: 'indigo',
+
+  workspaces: [{ id: 'main', name: 'Admin' }],
+
+  /** Sidebar group order; labels are translation keys. Modules attach nav items to these ids. */
+  navGroups: [
+    { id: 'overview', label: 'common:nav.groups.overview' },
+    { id: 'catalog', label: 'common:nav.groups.catalog' },
+    { id: 'content', label: 'common:nav.groups.content' },
+    { id: 'system', label: 'common:nav.groups.system' },
+  ],
+
+  /** Turn modules on/off. `npm run new-module` adds them here. */
+  modules: {
+    // fp:modules
+  },
+
+  /** No marketing page: `/` opens the panel. */
+  landing: false,
+
+  /** Built-in areas, off until a project needs them. Setting one to true adds its pages and menu items. */
+  features: {
+    notifications: false,
+    users: false,
+    roles: false,
+    securityPolicies: false,
+    modules: false,
+    integrations: false,
+    auditLog: false,
+    dangerZone: false,
+  },
+
+  /** Default ISO 4217 currency for the setup wizard. */
+  currency: 'USD',
+
+  /** Real REST API base URL. */
+  apiBaseUrl: import.meta.env.VITE_API_URL ?? '/api',
+
+  /** mock (no backend, data stays in this browser) | bearer (JWT) | cookie (Laravel Sanctum). See BACKEND.md. */
+  auth: {
+    mode: (import.meta.env.VITE_AUTH_MODE ?? 'mock') as AuthMode,
+    csrfUrl: import.meta.env.VITE_CSRF_URL ?? '/sanctum/csrf-cookie',
+  },
+} satisfies AppConfig

package/template/src/app.roles.ts

@@ -1,24 +1,24 @@
-import type { Permission } from '@/core/auth/permissions'
-
-/**
- * Project-specific access rules. The Owner and Admin automatically get every
- * custom permission; other roles get what is listed under `permissions`.
- * Labels live here (EN + TR) so core translation files stay untouched.
- *
- * Example:
- *   customPermissions = [{ id: 'assets.assign', label: { en: 'Assign assets', tr: 'Zimmet ata' } }] as const
- *   customRoles = {
- *     hr: {
- *       label: { en: 'HR manager', tr: 'İK yöneticisi' },
- *       description: { en: 'Manages staff assets.', tr: 'Personel zimmetlerini yönetir.' },
- *       permissions: ['dashboard.view', 'assets.view', 'assets.assign'],
- *     },
- *   }
- */
-export type LocalizedText = { en: string; tr: string }
-
-export type CustomRole = { label: LocalizedText; description: LocalizedText; permissions: readonly Permission[] }
-
-export const customPermissions = [] as const satisfies readonly { id: string; label: LocalizedText }[]
-
-export const customRoles = {} satisfies Record<string, CustomRole>
+import type { Permission } from '@/core/auth/permissions'
+
+/**
+ * Project-specific access rules. The Owner and Admin automatically get every
+ * custom permission; other roles get what is listed under `permissions`.
+ * Labels live here (EN + TR) so core translation files stay untouched.
+ *
+ * Example:
+ *   customPermissions = [{ id: 'orders.refund', label: { en: 'Refund orders', tr: 'Sipariş iade et' } }] as const
+ *   customRoles = {
+ *     support: {
+ *       label: { en: 'Support', tr: 'Destek' },
+ *       description: { en: 'Handles orders and refunds.', tr: 'Siparişleri ve iadeleri yönetir.' },
+ *       permissions: ['dashboard.view', 'orders.view', 'orders.refund'],
+ *     },
+ *   }
+ */
+export type LocalizedText = { en: string; tr: string }
+
+export type CustomRole = { label: LocalizedText; description: LocalizedText; permissions: readonly Permission[] }
+
+export const customPermissions = [] as const satisfies readonly { id: string; label: LocalizedText }[]
+
+export const customRoles = {} satisfies Record<string, CustomRole>

package/template/src/core/api/demo.ts

@@ -0,0 +1,8 @@
+import { isDemo } from '@/core/config/runtime'
+
+// A glob, not an import: src/demo doesn't exist in installed copies, and this still builds without it.
+const files = import.meta.glob<{ default: Record<string, unknown> }>('/src/demo/index.ts', { eager: true })
+const data = isDemo ? Object.values(files)[0]?.default : undefined
+
+/** Sample content by name, or undefined in real installs. */
+export const demoSeed = <T>(name: string) => data?.[name] as T | undefined

package/template/src/core/audit/audit.service.ts

@@ -1,4 +1,5 @@
-import { createMockCollection, delay, paginate, seededRandom } from '@/core/api/mock'
+import { demoSeed } from '@/core/api/demo'
+import { createMockCollection, delay, paginate } from '@/core/api/mock'
 import type { ListParams, Paginated } from '@/core/api/types'
 import { authStore } from '@/core/auth/auth-store'
 
@@ -52,40 +53,8 @@ export interface AuditService {
 
 const rangeMs: Record<string, number> = { '24h': 86_400_000, '7d': 7 * 86_400_000, '30d': 30 * 86_400_000 }
 
-function seed(): AuditEntry[] {
-  const rand = seededRandom(2024)
-  const now = Date.now()
-  const actors = [
-    { id: 'u_owner', name: 'Deniz Aydın', email: 'owner@freakpunch.site' },
-    { id: 'u_admin', name: 'Maya Chen', email: 'admin@freakpunch.site' },
-    { id: 'u_0006', name: 'Can Yılmaz', email: 'can.yilmaz@freakpunch.site' },
-  ]
-  const samples: Pick<AuditEntry, 'action' | 'target' | 'detail'>[] = [
-    { action: 'generalUpdated', target: 'freakpunch' },
-    { action: 'brandingUpdated', target: 'freakpunch' },
-    { action: 'userInvited', target: 'lena.fischer@freakpunch.site', detail: { role: 'editor' } },
-    { action: 'roleChanged', target: 'burak.ozturk@freakpunch.site', detail: { from: 'editor', to: 'viewer' } },
-    { action: 'userDeactivated', target: 'sofia.rossi@freakpunch.site' },
-    { action: 'integrationUpdated', target: 'SMTP' },
-    { action: 'webhookCreated', target: 'https://hooks.example.com/orders' },
-    { action: 'apiKeyCreated', target: 'Order sync' },
-    { action: 'securityUpdated', target: 'freakpunch' },
-    { action: 'inviteResent', target: 'mert.kaya@freakpunch.site' },
-  ]
-  return Array.from({ length: 28 }, (_, i) => {
-    const sample = samples[Math.floor(rand() * samples.length)]!
-    return {
-      id: `a_${String(i + 1).padStart(4, '0')}`,
-      at: new Date(now - (i * 26 + rand() * 20) * 3_600_000).toISOString(),
-      actor: actors[Math.floor(rand() * actors.length)]!,
-      ip: `88.241.${Math.floor(rand() * 255)}.${Math.floor(rand() * 255)}`,
-      ...sample,
-    }
-  })
-}
-
 function createMockAuditService(): AuditService {
-  const db = createMockCollection('audit', seed)
+  const db = createMockCollection('audit', () => demoSeed<() => AuditEntry[]>('audit')?.() ?? [])
 
   return {
     async list(params) {

package/template/src/core/auth/auth.service.ts

@@ -1,15 +1,14 @@
 import { ApiError, http } from '@/core/api/http'
 import { delay } from '@/core/api/mock'
-import { authMode, csrfUrl } from '@/core/config/runtime'
+import { authMode, csrfUrl, isDemo } from '@/core/config/runtime'
 import type { User } from '@/core/users/types'
 import { findUserByEmail, userErrors, usersService } from '@/core/users/users.service'
 import { authStore } from './auth-store'
+import { localCredentials } from './local-credentials'
 import type { AuthService, Session } from './types'
 
 const SESSION_TTL = 1000 * 60 * 60 * 24 * 7 // 7 days
-const OWNER_EMAIL = 'owner@freakpunch.site'
-
-function startSession(user: User): Session {
+export function startLocalSession(user: User): Session {
   const session: Session = {
     user: { ...user, lastActiveAt: new Date().toISOString() },
     token: `mock.${user.id}.${Date.now().toString(36)}`,
@@ -20,17 +19,24 @@ function startSession(user: User): Session {
 }
 
 /**
- * Mock auth: any password works. A known email (owner@, admin@, editor@,
- * viewer@freakpunch.site or any team member) signs in as that user; an
- * unknown email signs in as the Owner demo account.
+ * No backend yet. In the public demo any password works: a known email signs in as
+ * that user, an unknown one as the Owner. In a real install the password from the
+ * setup wizard is checked (see local-credentials: this browser only, not security).
  */
 const mockAuthService: AuthService = {
-  async login({ email }) {
+  async login({ email, password }) {
     await delay(400, 700)
-    const user = (await findUserByEmail(email)) ?? (await findUserByEmail(OWNER_EMAIL))
-    if (!user) throw new ApiError(404, userErrors.inactive)
+    if (isDemo) {
+      const users = await usersService.listActive()
+      const user = (await findUserByEmail(email)) ?? users.find((u) => u.role === 'owner')
+      if (!user) throw new ApiError(404, userErrors.inactive)
+      if (user.status !== 'active') throw new ApiError(403, userErrors.inactive)
+      return startLocalSession(user)
+    }
+    const user = await findUserByEmail(email)
+    if (!user || !(await localCredentials.verify(user.id, password))) throw new ApiError(401, 'invalid_credentials')
     if (user.status !== 'active') throw new ApiError(403, userErrors.inactive)
-    return startSession(user)
+    return startLocalSession(user)
   },
 
   async logout() {
@@ -43,16 +49,21 @@ const mockAuthService: AuthService = {
     // Project-defined roles have no seeded demo user: keep the identity, change the role.
     const user = users.find((u) => u.role === role) ?? (current && { ...current, role })
     if (!user) throw new ApiError(404, userErrors.inactive)
-    return startSession(user)
+    return startLocalSession(user)
   },
 }
 
-type AuthResponse = { user: User; token?: string; expiresAt?: number }
+export type AuthResponse = { user: User; token?: string; expiresAt?: number }
+
+/** Cookie mode: the server sets the XSRF cookie before the first write. */
+export async function fetchCsrfCookie() {
+  if (authMode === 'cookie' && csrfUrl) await fetch(csrfUrl, { credentials: 'include' })
+}
 
 /** Real backend (bearer or cookie mode); the contract is in BACKEND.md. */
 const restAuthService: AuthService = {
   async login(credentials) {
-    if (authMode === 'cookie' && csrfUrl) await fetch(csrfUrl, { credentials: 'include' })
+    await fetchCsrfCookie()
     const { user, token, expiresAt } = await http.post<AuthResponse>('/auth/login', credentials)
     const session: Session = { user, token, expiresAt: expiresAt ?? Date.now() + SESSION_TTL }
     authStore.set(session)

package/template/src/core/auth/local-credentials.ts

@@ -0,0 +1,46 @@
+import { ApiError } from '@/core/api/http'
+import { storage } from '@/core/lib/storage'
+
+const KEY = 'mock:credentials'
+const ITERATIONS = 210_000
+
+type StoredPassword = { salt: string; hash: string }
+
+const toHex = (bytes: ArrayBuffer | Uint8Array) =>
+  Array.from(new Uint8Array(bytes as ArrayBuffer), (b) => b.toString(16).padStart(2, '0')).join('')
+const fromHex = (hex: string) => Uint8Array.from(hex.match(/.{2}/g) ?? [], (h) => parseInt(h, 16))
+
+async function derive(password: string, salt: Uint8Array) {
+  // crypto.subtle only exists on https and localhost.
+  if (!crypto.subtle) throw new ApiError(400, 'insecure_context')
+  const key = await crypto.subtle.importKey('raw', new TextEncoder().encode(password), 'PBKDF2', false, ['deriveBits'])
+  const bits = await crypto.subtle.deriveBits(
+    { name: 'PBKDF2', hash: 'SHA-256', salt: salt as BufferSource, iterations: ITERATIONS },
+    key,
+    256,
+  )
+  return toHex(bits)
+}
+
+const readAll = () => storage.get<Record<string, StoredPassword>>(KEY) ?? {}
+
+/**
+ * Passwords for local mode (no backend yet). Only a salted hash is kept, but it
+ * lives in this browser, so this keeps the panel usable while building and is
+ * NOT real security. A real backend owns passwords.
+ */
+export const localCredentials = {
+  /** Whether any account exists on this browser. */
+  any: () => Object.keys(readAll()).length > 0,
+
+  async set(userId: string, password: string) {
+    const salt = crypto.getRandomValues(new Uint8Array(16))
+    storage.set(KEY, { ...readAll(), [userId]: { salt: toHex(salt), hash: await derive(password, salt) } })
+  },
+
+  async verify(userId: string, password: string) {
+    const stored = readAll()[userId]
+    if (!stored) return false
+    return (await derive(password, fromHex(stored.salt))) === stored.hash
+  },
+}

package/template/src/core/auth/permissions.ts

@@ -36,7 +36,7 @@ export const corePermissions = [
 ] as const
 export type CorePermission = (typeof corePermissions)[number]
 
-/** Project-specific permissions from src/app.roles.ts, e.g. `assets.assign`. */
+/** Project-specific permissions from src/app.roles.ts, e.g. `orders.refund`. */
 export type CustomPermission = (typeof customPermissions)[number]['id']
 
 export type Permission = CorePermission | ModulePermission | CustomPermission

package/template/src/core/company/company.service.ts

@@ -1,11 +1,12 @@
 import { appConfig } from '@/app.config'
+import { demoSeed } from '@/core/api/demo'
 import { ApiError } from '@/core/api/http'
 import { createMockDocument, delay } from '@/core/api/mock'
 import { auditService } from '@/core/audit/audit.service'
 import { authStore } from '@/core/auth/auth-store'
 import { storage } from '@/core/lib/storage'
 import { defaultPasswordPolicy } from './password-policy'
-import type { CompanyBranding, CompanyGeneral, CompanySettings, SecurityPolicies } from './types'
+import type { CompanyBranding, CompanyGeneral, CompanySettings, Currency, SecurityPolicies } from './types'
 
 /**
  * Company-wide settings. A real backend implements this with `http`
@@ -20,20 +21,21 @@ export interface CompanyService {
   deleteCompany(confirmName: string): Promise<void>
 }
 
-const seed = (): CompanySettings => ({
+/** Empty company settings with the given values filled in; used by the setup wizard. */
+export const createCompanySettings = (general?: Partial<CompanyGeneral>, branding?: Partial<CompanyBranding>): CompanySettings => ({
   general: {
     name: appConfig.name,
-    legalName: 'Freakpunch Yazılım A.Ş.',
-    taxOffice: 'Kadıköy',
-    taxNumber: '1234567890',
-    address: 'Caferağa Mah. Moda Cad. No: 12\n34710 Kadıköy / İstanbul',
-    contactEmail: 'hello@freakpunch.site',
-    contactPhone: '+902161234567',
+    legalName: '',
+    taxOffice: '',
+    taxNumber: '',
+    address: '',
+    contactEmail: '',
     defaultLanguage: 'en',
-    timeZone: 'Europe/Istanbul',
-    currency: 'USD',
+    timeZone: Intl.DateTimeFormat().resolvedOptions().timeZone,
+    currency: appConfig.currency as Currency,
+    ...general,
   },
-  branding: { brand: appConfig.brand },
+  branding: { brand: appConfig.brand, ...branding },
   security: {
     requireTwoFactor: false,
     password: { ...defaultPasswordPolicy, expiryDays: 0 },
@@ -42,7 +44,7 @@ const seed = (): CompanySettings => ({
 })
 
 function createMockCompanyService(): CompanyService {
-  const doc = createMockDocument('company', seed)
+  const doc = createMockDocument('company', () => createCompanySettings(demoSeed<Partial<CompanyGeneral>>('companyGeneral')))
   const assertOwnerOrAdmin = () => {
     const role = authStore.getSession()?.user.role
     if (role !== 'owner' && role !== 'admin') throw new ApiError(403, 'forbidden')

package/template/src/core/company/use-app-name.ts

@@ -0,0 +1,7 @@
+import { appConfig } from '@/app.config'
+import { useCompanySettings } from './hooks'
+
+/** The company name from setup and Settings → General; falls back to app.config.ts. */
+export function useAppName() {
+  return useCompanySettings().data?.general.name || appConfig.name
+}

package/template/src/core/components/page.tsx

@@ -1,6 +1,6 @@
 import { useEffect, type ReactNode } from 'react'
 
-import { appConfig } from '@/app.config'
+import { useAppName } from '@/core/company/use-app-name'
 import { cn } from '@/lib/utils'
 
 type PageProps = {
@@ -19,10 +19,11 @@ type PageProps = {
 /** Standard page frame inside the content panel: title row + body. */
 export function Page({ title, documentTitle, description, actions, leading, children, className }: PageProps) {
   const docTitle = documentTitle ?? (typeof title === 'string' ? title : undefined)
+  const appName = useAppName()
 
   useEffect(() => {
-    document.title = docTitle ? `${docTitle} · ${appConfig.name}` : appConfig.name
-  }, [docTitle])
+    document.title = docTitle ? `${docTitle} · ${appName}` : appName
+  }, [docTitle, appName])
 
   return (
     <div className={cn('mx-auto flex w-full max-w-(--page-max-width) flex-col gap-6', className)}>

package/template/src/core/config/runtime.ts

@@ -1,14 +1,16 @@
-import { appConfig } from '@/app.config'
-import type { AppConfig, FeatureId } from './types'
-
-// Typed as AppConfig so a project's app.config.ts may omit newer optional keys.
-const config: AppConfig = appConfig
-
-/** Optional built-in areas are on unless app.config.ts switches them off. */
-export const isFeatureOn = (feature: FeatureId) => config.features?.[feature] ?? true
-
-export const authMode = config.auth?.mode ?? 'mock'
-export const csrfUrl = config.auth?.csrfUrl
-
-/** `/` shows the landing page, or goes straight to the panel. */
-export const showLanding = config.landing ?? true
+import { appConfig } from '@/app.config'
+import type { AppConfig, FeatureId } from './types'
+
+// Typed as AppConfig so a project's app.config.ts may omit newer optional keys.
+const config: AppConfig = appConfig
+
+/** Optional built-in areas are on unless app.config.ts switches them off. */
+export const isFeatureOn = (feature: FeatureId) => config.features?.[feature] ?? true
+
+export const isDemo = config.demo ?? false
+
+export const authMode = config.auth?.mode ?? 'mock'
+export const csrfUrl = config.auth?.csrfUrl
+
+/** `/` shows the landing page, or goes straight to the panel. */
+export const showLanding = config.landing ?? true

package/template/src/core/config/types.ts

@@ -2,7 +2,7 @@ import type { I18nKey } from '@/core/i18n/keys'
 import type { BrandSetting } from '@/core/theme/brand'
 import type { ModuleId } from '@/modules/registry'
 
-export type Workspace = { id: string; name: string; plan: I18nKey }
+export type Workspace = { id: string; name: string; plan?: I18nKey }
 
 export type NavGroupConfig = { id: string; label: I18nKey }
 
@@ -16,7 +16,6 @@ export type FeatureId =
   | 'integrations'
   | 'auditLog'
   | 'dangerZone'
-  | 'demoDashboard'
 
 /** mock: demo data; bearer: token in the Authorization header; cookie: session cookie + XSRF (Laravel Sanctum). */
 export type AuthMode = 'mock' | 'bearer' | 'cookie'
@@ -29,6 +28,8 @@ export type AppConfig = {
   modules: Partial<Record<ModuleId, boolean>>
   currency: string
   apiBaseUrl: string
+  /** The public demo: sample data, any password, no setup wizard. Real installs leave this off. */
+  demo?: boolean
   /** Show the marketing landing page at `/`; when false, `/` opens the panel. Default true. */
   landing?: boolean
   features?: Partial<Record<FeatureId, boolean>>

package/template/src/core/layout/app-sidebar.tsx

@@ -29,6 +29,8 @@ import {
   useSidebar,
 } from '@/components/ui/sidebar'
 import { appConfig } from '@/app.config'
+import { useAppName } from '@/core/company/use-app-name'
+import type { Workspace } from '@/core/config/types'
 import { useAuth } from '@/core/auth/use-auth'
 import { useCompanySettings } from '@/core/company/hooks'
 import { useTheme } from '@/core/theme/theme-context'
@@ -132,7 +134,8 @@ function LogoTile({ name, logo, className }: { name: string; logo?: string; clas
 }
 
 function WorkspaceSwitcher() {
-  const workspaces = appConfig.workspaces
+  const workspaces: Workspace[] = appConfig.workspaces
+  const appName = useAppName()
   const [activeId, setActiveId] = useState(() => storage.get<string>('workspace') ?? workspaces[0]!.id)
   const active = workspaces.find((w) => w.id === activeId) ?? workspaces[0]!
   const t = useAnyT()
@@ -146,6 +149,20 @@ function WorkspaceSwitcher() {
     setActiveId(id)
   }
 
+  // One workspace: just the company name, nothing to switch.
+  if (workspaces.length === 1) {
+    return (
+      <SidebarMenu>
+        <SidebarMenuItem>
+          <div className="flex h-12 items-center gap-2 rounded-xl bg-raised p-2 shadow-(--shadow-raised) ring-1 ring-border group-data-[collapsible=icon]:size-8 group-data-[collapsible=icon]:p-0 group-data-[collapsible=icon]:shadow-none group-data-[collapsible=icon]:ring-0">
+            <LogoTile name={appName} logo={logo} />
+            <span className="truncate text-sm font-semibold group-data-[collapsible=icon]:hidden">{appName}</span>
+          </div>
+        </SidebarMenuItem>
+      </SidebarMenu>
+    )
+  }
+
   return (
     <SidebarMenu>
       <SidebarMenuItem>
@@ -162,7 +179,7 @@ function WorkspaceSwitcher() {
             <LogoTile name={active.name} logo={logo} />
             <div className="grid min-w-0 flex-1 text-left leading-tight">
               <span className="truncate text-sm font-semibold">{active.name}</span>
-              <span className="truncate text-2xs text-muted-foreground">{t(active.plan)}</span>
+              {active.plan && <span className="truncate text-2xs text-muted-foreground">{t(active.plan)}</span>}
             </div>
             <ChevronsUpDown className="ml-auto size-4 text-muted-foreground" />
           </DropdownMenuTrigger>