create-honua-app 0.1.1

package/LICENSE

@@ -0,0 +1,201 @@
+                                 Apache License
+                           Version 2.0, January 2004
+                        http://www.apache.org/licenses/
+
+   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
+
+   1. Definitions.
+
+      "License" shall mean the terms and conditions for use, reproduction,
+      and distribution as defined by Sections 1 through 9 of this document.
+
+      "Licensor" shall mean the copyright owner or entity authorized by
+      the copyright owner that is granting the License.
+
+      "Legal Entity" shall mean the union of the acting entity and all
+      other entities that control, are controlled by, or are under common
+      control with that entity. For the purposes of this definition,
+      "control" means (i) the power, direct or indirect, to cause the
+      direction or management of such entity, whether by contract or
+      otherwise, or (ii) ownership of fifty percent (50%) or more of the
+      outstanding shares, or (iii) beneficial ownership of such entity.
+
+      "You" (or "Your") shall mean an individual or Legal Entity
+      exercising permissions granted by this License.
+
+      "Source" form shall mean the preferred form for making modifications,
+      including but not limited to software source code, documentation
+      source, and configuration files.
+
+      "Object" form shall mean any form resulting from mechanical
+      transformation or translation of a Source form, including but
+      not limited to compiled object code, generated documentation,
+      and conversions to other media types.
+
+      "Work" shall mean the work of authorship, whether in Source or
+      Object form, made available under the License, as indicated by a
+      copyright notice that is included in or attached to the work
+      (an example is provided in the Appendix below).
+
+      "Derivative Works" shall mean any work, whether in Source or Object
+      form, that is based on (or derived from) the Work and for which the
+      editorial revisions, annotations, elaborations, or other modifications
+      represent, as a whole, an original work of authorship. For the purposes
+      of this License, Derivative Works shall not include works that remain
+      separable from, or merely link (or bind by name) to the interfaces of,
+      the Work and Derivative Works thereof.
+
+      "Contribution" shall mean any work of authorship, including
+      the original version of the Work and any modifications or additions
+      to that Work or Derivative Works thereof, that is intentionally
+      submitted to Licensor for inclusion in the Work by the copyright owner
+      or by an individual or Legal Entity authorized to submit on behalf of
+      the copyright owner. For the purposes of this definition, "submitted"
+      means any form of electronic, verbal, or written communication sent
+      to the Licensor or its representatives, including but not limited to
+      communication on electronic mailing lists, source code control systems,
+      and issue tracking systems that are managed by, or on behalf of, the
+      Licensor for the purpose of discussing and improving the Work, but
+      excluding communication that is conspicuously marked or otherwise
+      designated in writing by the copyright owner as "Not a Contribution."
+
+      "Contributor" shall mean Licensor and any individual or Legal Entity
+      on behalf of whom a Contribution has been received by Licensor and
+      subsequently incorporated within the Work.
+
+   2. Grant of Copyright License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      copyright license to reproduce, prepare Derivative Works of,
+      publicly display, publicly perform, sublicense, and distribute the
+      Work and such Derivative Works in Source or Object form.
+
+   3. Grant of Patent License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      (except as stated in this section) patent license to make, have made,
+      use, offer to sell, sell, import, and otherwise transfer the Work,
+      where such license applies only to those patent claims licensable
+      by such Contributor that are necessarily infringed by their
+      Contribution(s) alone or by combination of their Contribution(s)
+      with the Work to which such Contribution(s) was submitted. If You
+      institute patent litigation against any entity (including a
+      cross-claim or counterclaim in a lawsuit) alleging that the Work
+      or a Contribution incorporated within the Work constitutes direct
+      or contributory patent infringement, then any patent licenses
+      granted to You under this License for that Work shall terminate
+      as of the date such litigation is filed.
+
+   4. Redistribution. You may reproduce and distribute copies of the
+      Work or Derivative Works thereof in any medium, with or without
+      modifications, and in Source or Object form, provided that You
+      meet the following conditions:
+
+      (a) You must give any other recipients of the Work or
+          Derivative Works a copy of this License; and
+
+      (b) You must cause any modified files to carry prominent notices
+          stating that You changed the files; and
+
+      (c) You must retain, in the Source form of any Derivative Works
+          that You distribute, all copyright, patent, trademark, and
+          attribution notices from the Source form of the Work,
+          excluding those notices that do not pertain to any part of
+          the Derivative Works; and
+
+      (d) If the Work includes a "NOTICE" text file as part of its
+          distribution, then any Derivative Works that You distribute must
+          include a readable copy of the attribution notices contained
+          within such NOTICE file, excluding those notices that do not
+          pertain to any part of the Derivative Works, in at least one
+          of the following places: within a NOTICE text file distributed
+          as part of the Derivative Works; within the Source form or
+          documentation, if provided along with the Derivative Works; or,
+          within a display generated by the Derivative Works, if and
+          wherever such third-party notices normally appear. The contents
+          of the NOTICE file are for informational purposes only and
+          do not modify the License. You may add Your own attribution
+          notices within Derivative Works that You distribute, alongside
+          or as an addendum to the NOTICE text from the Work, provided
+          that such additional attribution notices cannot be construed
+          as modifying the License.
+
+      You may add Your own copyright statement to Your modifications and
+      may provide additional or different license terms and conditions
+      for use, reproduction, or distribution of Your modifications, or
+      for any such Derivative Works as a whole, provided Your use,
+      reproduction, and distribution of the Work otherwise complies with
+      the conditions stated in this License.
+
+   5. Submission of Contributions. Unless You explicitly state otherwise,
+      any Contribution intentionally submitted for inclusion in the Work
+      by You to the Licensor shall be under the terms and conditions of
+      this License, without any additional terms or conditions.
+      Notwithstanding the above, nothing herein shall supersede or modify
+      the terms of any separate license agreement you may have executed
+      with Licensor regarding such Contributions.
+
+   6. Trademarks. This License does not grant permission to use the trade
+      names, trademarks, service marks, or product names of the Licensor,
+      except as required for reasonable and customary use in describing the
+      origin of the Work and reproducing the content of the NOTICE file.
+
+   7. Disclaimer of Warranty. Unless required by applicable law or
+      agreed to in writing, Licensor provides the Work (and each
+      Contributor provides its Contributions) on an "AS IS" BASIS,
+      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
+      implied, including, without limitation, any warranties or conditions
+      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
+      PARTICULAR PURPOSE. You are solely responsible for determining the
+      appropriateness of using or redistributing the Work and assume any
+      risks associated with Your exercise of permissions under this License.
+
+   8. Limitation of Liability. In no event and under no legal theory,
+      whether in tort (including negligence), contract, or otherwise,
+      unless required by applicable law (such as deliberate and grossly
+      negligent acts) or agreed to in writing, shall any Contributor be
+      liable to You for damages, including any direct, indirect, special,
+      incidental, or consequential damages of any character arising as a
+      result of this License or out of the use or inability to use the
+      Work (including but not limited to damages for loss of goodwill,
+      work stoppage, computer failure or malfunction, or any and all
+      other commercial damages or losses), even if such Contributor
+      has been advised of the possibility of such damages.
+
+   9. Accepting Warranty or Additional Liability. While redistributing
+      the Work or Derivative Works thereof, You may choose to offer,
+      and charge a fee for, acceptance of support, warranty, indemnity,
+      or other liability obligations and/or rights consistent with this
+      License. However, in accepting such obligations, You may act only
+      on Your own behalf and on Your sole responsibility, not on behalf
+      of any other Contributor, and only if You agree to indemnify,
+      defend, and hold each Contributor harmless for any liability
+      incurred by, or claims asserted against, such Contributor by reason
+      of your accepting any such warranty or additional liability.
+
+   END OF TERMS AND CONDITIONS
+
+   APPENDIX: How to apply the Apache License to your work.
+
+      To apply the Apache License to your work, attach the following
+      boilerplate notice, with the fields enclosed by brackets "[]"
+      replaced with your own identifying information. (Don't include
+      the brackets!)  The text should be enclosed in the appropriate
+      comment syntax for the file format. We also recommend that a
+      file or class name and description of purpose be included on the
+      same "printed page" as the copyright notice for easier
+      identification within third-party archives.
+
+   Copyright 2026 Honua
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.

package/README.md

@@ -0,0 +1,50 @@
+# create-honua-app
+
+Scaffold a [Honua JavaScript SDK](https://github.com/honua-io/honua-sdk-js) map application — Vite + TypeScript,
+pinned to a published SDK version, running a map on the first `npm run dev`.
+
+```bash
+npm create honua-app@latest my-map
+cd my-map
+npm install
+npm run dev
+```
+
+## Options
+
+```text
+create-honua-app [directory] [options]
+
+  -t, --template <id>   Starter to scaffold (default: vanilla-ts)
+      --list-templates  Print the available templates and their playground links
+      --force           Scaffold into a directory that already has files
+  -h, --help            Print usage
+  -v, --version         Print the create-honua-app version
+```
+
+With `npm create`, pass CLI options after `--`:
+
+```bash
+npm create honua-app@latest my-map -- --template react-ts
+```
+
+## Templates
+
+| Template | What it shows |
+| --- | --- |
+| `vanilla-ts` | `connect → inspect → explain → query → mount`: the SDK owns the MapLibre map and mounts an accepted query plan. |
+| `react-ts` | The app owns a plain `maplibre-gl` map; `useMountedSource` from `@honua/sdk-js/react` mounts the discovered source onto it. |
+
+Both starters ship a committed GeoServices fixture served by the Vite dev and preview servers, so the green path
+never depends on a third-party endpoint, an account, or an API key. Set `VITE_HONUA_ENDPOINT` to run the same code
+against any anonymous, CORS-enabled GeoServices FeatureServer layer or OGC API Features landing page.
+
+## Try a template without installing anything
+
+Every template runs in a browser playground straight from the repository. The generated link list lives in
+[`docs/playgrounds.md`](https://github.com/honua-io/honua-sdk-js/blob/trunk/docs/playgrounds.md), and
+`create-honua-app --list-templates` prints the same links.
+
+## License
+
+Apache-2.0.

package/bin/create-honua-app.mjs

@@ -0,0 +1,7 @@
+#!/usr/bin/env node
+
+// Entry point for `npm create honua-app` / `npx create-honua-app`.
+
+import { run } from "../lib/cli.mjs";
+
+process.exitCode = run(process.argv.slice(2));

package/lib/cli.mjs

@@ -0,0 +1,149 @@
+// Argument parsing and console output for `npm create honua-app`.
+//
+// `parseArgs` is pure so the repository test suite can assert the grammar, and
+// `run` takes its streams and working directory as options so a test can drive
+// a full scaffold in-process without spawning npm or a build.
+
+import fs from "node:fs";
+import path from "node:path";
+
+import { scaffoldProject } from "./scaffold.mjs";
+import { PACKAGE_ROOT, defaultTemplate, loadTemplateManifest, playgroundLinks, templateIds } from "./templates.mjs";
+
+const USAGE = `Usage: create-honua-app [directory] [options]
+
+Options:
+  -t, --template <id>   Starter to scaffold (default: the manifest's default template)
+      --list-templates  Print the available templates and exit
+      --force           Scaffold into a directory that already has files
+  -h, --help            Print this message and exit
+  -v, --version         Print the create-honua-app version and exit`;
+
+/** Parse argv (already stripped of node and the script path). */
+export function parseArgs(argv) {
+  const options = { mode: "scaffold", directory: undefined, templateId: undefined, force: false };
+  for (let index = 0; index < argv.length; index += 1) {
+    const argument = argv[index];
+    if (argument === "--help" || argument === "-h") {
+      options.mode = "help";
+      continue;
+    }
+    if (argument === "--version" || argument === "-v") {
+      options.mode = "version";
+      continue;
+    }
+    if (argument === "--list-templates") {
+      options.mode = "list-templates";
+      continue;
+    }
+    if (argument === "--force") {
+      options.force = true;
+      continue;
+    }
+    if (argument === "--template" || argument === "-t") {
+      const value = argv[index + 1];
+      if (!value || value.startsWith("-")) throw new Error(`${argument} requires a template id.`);
+      options.templateId = value;
+      index += 1;
+      continue;
+    }
+    if (argument.startsWith("--template=")) {
+      const value = argument.slice("--template=".length);
+      if (value.length === 0) throw new Error("--template requires a template id.");
+      options.templateId = value;
+      continue;
+    }
+    if (argument.startsWith("-")) throw new Error(`Unknown option: ${argument}`);
+    if (options.directory !== undefined) throw new Error(`Unexpected extra argument: ${argument}`);
+    options.directory = argument;
+  }
+  return options;
+}
+
+/** Help text, including the live template list so it can never drift. */
+export function helpText(manifest) {
+  const templates = manifest.templates
+    .map((template) => `  ${template.id.padEnd(12)} ${template.summary}${template.default ? " (default)" : ""}`)
+    .join("\n");
+  return `${USAGE}\n\nTemplates:\n${templates}\n`;
+}
+
+/** The `--list-templates` report, with each starter's zero-install playground links. */
+export function templateListing(manifest) {
+  const lines = [];
+  for (const template of manifest.templates) {
+    lines.push(`${template.id}${template.default ? " (default)" : ""} — ${template.title}`);
+    lines.push(`  ${template.summary}`);
+    lines.push(`  SDK: ${manifest.sdk.package}@${manifest.sdk.version}`);
+    for (const link of playgroundLinks(manifest, template)) lines.push(`  ${link.title}: ${link.url}`);
+  }
+  return `${lines.join("\n")}\n`;
+}
+
+/** Next-step instructions printed after a successful scaffold. */
+export function nextSteps(receipt, cwd) {
+  const relative = path.relative(cwd, receipt.targetRoot) || ".";
+  return [
+    `Created ${receipt.projectName} from the ${receipt.templateId} template in ${relative}.`,
+    `Pinned ${receipt.sdk.package}@${receipt.sdk.version}.`,
+    "",
+    "Next steps:",
+    ...(relative === "." ? [] : [`  cd ${relative}`]),
+    "  npm install",
+    "  npm run dev",
+    "",
+    "The default lane serves a committed fixture, so the first map needs no account, key, or network.",
+    "",
+  ].join("\n");
+}
+
+function packageVersion(packageRoot) {
+  return JSON.parse(fs.readFileSync(path.join(packageRoot, "package.json"), "utf8")).version;
+}
+
+/**
+ * Run the CLI. Returns the process exit code instead of calling `process.exit`
+ * so the bin wrapper stays the only place that touches process state.
+ */
+export function run(
+  argv,
+  { cwd = process.cwd(), stdout = process.stdout, stderr = process.stderr, packageRoot = PACKAGE_ROOT } = {},
+) {
+  let options;
+  try {
+    options = parseArgs(argv);
+  } catch (error) {
+    stderr.write(`${error instanceof Error ? error.message : String(error)}\n\n${USAGE}\n`);
+    return 1;
+  }
+
+  const manifest = loadTemplateManifest(packageRoot);
+  if (options.mode === "help") {
+    stdout.write(helpText(manifest));
+    return 0;
+  }
+  if (options.mode === "version") {
+    stdout.write(`${packageVersion(packageRoot)}\n`);
+    return 0;
+  }
+  if (options.mode === "list-templates") {
+    stdout.write(templateListing(manifest));
+    return 0;
+  }
+
+  const directory = options.directory ?? "honua-app";
+  const templateId = options.templateId ?? defaultTemplate(manifest).id;
+  if (!templateIds(manifest).includes(templateId)) {
+    stderr.write(`Unknown template ${JSON.stringify(templateId)}. Available: ${templateIds(manifest).join(", ")}.\n`);
+    return 1;
+  }
+
+  try {
+    const receipt = scaffoldProject({ templateId, directory, force: options.force, cwd, packageRoot });
+    stdout.write(nextSteps(receipt, cwd));
+    return 0;
+  } catch (error) {
+    stderr.write(`${error instanceof Error ? error.message : String(error)}\n`);
+    return 1;
+  }
+}

package/lib/scaffold.mjs

@@ -0,0 +1,134 @@
+// Filesystem half of `create-honua-app`: copy one template into a new project
+// directory, renaming the files npm cannot publish under their real names and
+// stamping the project's own package name.
+//
+// Everything here is exported as a plain function so the repository test suite
+// can scaffold into a temporary directory without spawning a process.
+
+import fs from "node:fs";
+import path from "node:path";
+
+import { PACKAGE_ROOT, loadTemplateManifest, templateById, templateRoot } from "./templates.mjs";
+
+/** npm strips a published `.gitignore`, so templates carry it under a safe name. */
+export const RENAMED_TEMPLATE_FILES = new Map([["_gitignore", ".gitignore"]]);
+
+/** Files that configure the zero-install playground hosts, not the scaffolded app. */
+export const PLAYGROUND_ONLY_FILES = new Set([".stackblitzrc"]);
+
+/** npm package-name grammar, narrowed to the unscoped names a directory can produce. */
+export const PROJECT_NAME_PATTERN = /^[a-z0-9][a-z0-9._-]*$/;
+
+/** Directory entries that do not make a target directory "non-empty" for scaffolding. */
+const IGNORED_TARGET_ENTRIES = new Set([".git", ".DS_Store"]);
+
+/** Derive (and validate) the npm package name a target directory implies. */
+export function projectNameFromDirectory(directory) {
+  const base = path.basename(path.resolve(directory));
+  const name = base.toLowerCase();
+  if (name.length === 0 || name.length > 214) {
+    throw new Error(`Project name ${JSON.stringify(base)} must be between 1 and 214 characters.`);
+  }
+  if (!PROJECT_NAME_PATTERN.test(name)) {
+    throw new Error(
+      `Project name ${JSON.stringify(base)} is not a valid npm package name. Use lowercase letters, digits, "-", "_" or "." and start with a letter or digit.`,
+    );
+  }
+  return name;
+}
+
+/** Recursively list a template's files as sorted, POSIX-style relative paths. */
+export function collectTemplateFiles(root) {
+  const files = [];
+  const walk = (directory, prefix) => {
+    for (const entry of fs
+      .readdirSync(directory, { withFileTypes: true })
+      .sort((a, b) => a.name.localeCompare(b.name))) {
+      const relative = prefix ? `${prefix}/${entry.name}` : entry.name;
+      if (entry.isDirectory()) {
+        walk(path.join(directory, entry.name), relative);
+        continue;
+      }
+      if (!entry.isFile()) throw new Error(`Template entry ${relative} is not a regular file.`);
+      files.push(relative);
+    }
+  };
+  walk(root, "");
+  return files;
+}
+
+/** Map a template-relative path onto the path the scaffolded project uses. */
+export function scaffoldedPath(relativePath) {
+  const segments = relativePath.split("/");
+  const last = segments[segments.length - 1];
+  const renamed = RENAMED_TEMPLATE_FILES.get(last);
+  if (!renamed) return relativePath;
+  return [...segments.slice(0, -1), renamed].join("/");
+}
+
+/** True when a template file exists only to configure a playground host. */
+export function isPlaygroundOnlyFile(relativePath) {
+  return PLAYGROUND_ONLY_FILES.has(relativePath.split("/").pop());
+}
+
+/** Rewrite a template `package.json` so the scaffolded app carries its own name. */
+export function renderProjectManifest(source, projectName) {
+  const manifest = JSON.parse(source);
+  manifest.name = projectName;
+  return `${JSON.stringify(manifest, null, 2)}\n`;
+}
+
+function assertWritableTarget(targetRoot, force) {
+  if (!fs.existsSync(targetRoot)) return;
+  const stats = fs.statSync(targetRoot);
+  if (!stats.isDirectory()) throw new Error(`${targetRoot} exists and is not a directory.`);
+  if (force) return;
+  const entries = fs.readdirSync(targetRoot).filter((entry) => !IGNORED_TARGET_ENTRIES.has(entry));
+  if (entries.length > 0) {
+    throw new Error(`${targetRoot} is not empty. Choose another directory or pass --force.`);
+  }
+}
+
+/**
+ * Copy `templateId` into `directory`, returning the scaffold receipt the CLI
+ * prints. `directory` is resolved against `cwd` so tests never depend on the
+ * process working directory.
+ */
+export function scaffoldProject({
+  templateId,
+  directory,
+  force = false,
+  cwd = process.cwd(),
+  packageRoot = PACKAGE_ROOT,
+}) {
+  const manifest = loadTemplateManifest(packageRoot);
+  const template = templateById(manifest, templateId);
+  const sourceRoot = templateRoot(manifest, template.id, packageRoot);
+  const targetRoot = path.resolve(cwd, directory);
+  const projectName = projectNameFromDirectory(targetRoot);
+  assertWritableTarget(targetRoot, force);
+
+  const written = [];
+  for (const relativePath of collectTemplateFiles(sourceRoot)) {
+    if (isPlaygroundOnlyFile(relativePath)) continue;
+    const destinationRelative = scaffoldedPath(relativePath);
+    const source = path.join(sourceRoot, relativePath);
+    const destination = path.join(targetRoot, destinationRelative);
+    fs.mkdirSync(path.dirname(destination), { recursive: true });
+    if (destinationRelative === "package.json") {
+      fs.writeFileSync(destination, renderProjectManifest(fs.readFileSync(source, "utf8"), projectName));
+    } else {
+      fs.copyFileSync(source, destination);
+    }
+    written.push(destinationRelative);
+  }
+
+  return {
+    templateId: template.id,
+    templateTitle: template.title,
+    projectName,
+    targetRoot,
+    sdk: { ...manifest.sdk },
+    files: written,
+  };
+}

package/lib/templates.mjs

@@ -0,0 +1,138 @@
+// Template manifest reader for `create-honua-app`.
+//
+// `templates.manifest.json` is the single source of truth for which starters
+// exist, which published SDK version they pin, and where their zero-install
+// playgrounds live. The CLI, the repository verifier
+// (scripts/verify-create-honua-app.mjs) and the generated playground page
+// (scripts/playgrounds.mjs) all read it through this module so a template can
+// never be advertised in one place and missing in another.
+
+import fs from "node:fs";
+import path from "node:path";
+import { fileURLToPath } from "node:url";
+
+export const PACKAGE_ROOT = path.resolve(path.dirname(fileURLToPath(import.meta.url)), "..");
+export const MANIFEST_FILE = "templates.manifest.json";
+export const MANIFEST_FORMAT = "honua.sdk.create-honua-app-templates.v1";
+export const TEMPLATE_ID_PATTERN = /^[a-z0-9]+(?:-[a-z0-9]+)*$/;
+
+function fail(message) {
+  throw new Error(`${MANIFEST_FILE} is invalid: ${message}`);
+}
+
+function nonEmptyString(value, field) {
+  if (typeof value !== "string" || value.trim().length === 0) fail(`${field} must be a non-empty string`);
+  return value;
+}
+
+/** Read and validate the template manifest that ships inside the package. */
+export function loadTemplateManifest(packageRoot = PACKAGE_ROOT) {
+  const manifestPath = path.join(packageRoot, MANIFEST_FILE);
+  const manifest = JSON.parse(fs.readFileSync(manifestPath, "utf8"));
+  if (manifest.format !== MANIFEST_FORMAT) fail(`format must be ${MANIFEST_FORMAT}`);
+  if (manifest.schemaVersion !== 1) fail("schemaVersion must be 1");
+  nonEmptyString(manifest.sdk?.package, "sdk.package");
+  nonEmptyString(manifest.sdk?.version, "sdk.version");
+  for (const field of ["owner", "name", "branch"]) nonEmptyString(manifest.repository?.[field], `repository.${field}`);
+  if (!Array.isArray(manifest.playgroundProviders) || manifest.playgroundProviders.length === 0) {
+    fail("playgroundProviders must be a non-empty array");
+  }
+  for (const provider of manifest.playgroundProviders) {
+    nonEmptyString(provider?.id, "playgroundProviders[].id");
+    nonEmptyString(provider?.title, "playgroundProviders[].title");
+    nonEmptyString(provider?.urlTemplate, "playgroundProviders[].urlTemplate");
+  }
+  if (!Array.isArray(manifest.templates) || manifest.templates.length === 0)
+    fail("templates must be a non-empty array");
+  const seen = new Set();
+  for (const template of manifest.templates) {
+    const id = nonEmptyString(template?.id, "templates[].id");
+    if (!TEMPLATE_ID_PATTERN.test(id)) fail(`template id ${JSON.stringify(id)} must be a lowercase slug`);
+    if (seen.has(id)) fail(`duplicate template id ${JSON.stringify(id)}`);
+    seen.add(id);
+    nonEmptyString(template.title, `templates[${id}].title`);
+    nonEmptyString(template.summary, `templates[${id}].summary`);
+    nonEmptyString(template.path, `templates[${id}].path`);
+    nonEmptyString(template.entryFile, `templates[${id}].entryFile`);
+    if (template.dataLane !== "fixture") fail(`templates[${id}].dataLane must be "fixture"`);
+    if (typeof template.default !== "boolean") fail(`templates[${id}].default must be a boolean`);
+    if (!Array.isArray(template.dependencies) || template.dependencies.length === 0) {
+      fail(`templates[${id}].dependencies must be a non-empty array`);
+    }
+    if (!template.path.endsWith(`/${id}`)) fail(`templates[${id}].path must end with the template id`);
+  }
+  if (manifest.templates.filter((template) => template.default).length !== 1) {
+    fail("exactly one template must be marked default");
+  }
+  return manifest;
+}
+
+/** Ids of every declared template, in manifest order. */
+export function templateIds(manifest) {
+  return manifest.templates.map((template) => template.id);
+}
+
+/** The template a bare `create-honua-app <dir>` invocation uses. */
+export function defaultTemplate(manifest) {
+  return manifest.templates.find((template) => template.default);
+}
+
+/** Look up one template, throwing a caller-friendly error for unknown ids. */
+export function templateById(manifest, id) {
+  const template = manifest.templates.find((entry) => entry.id === id);
+  if (!template) {
+    throw new Error(
+      `Unknown template ${JSON.stringify(id)}. Available templates: ${templateIds(manifest).join(", ")}.`,
+    );
+  }
+  return template;
+}
+
+/** Absolute directory holding a template's files inside the installed package. */
+export function templateRoot(manifest, id, packageRoot = PACKAGE_ROOT) {
+  const template = templateById(manifest, id);
+  return path.join(packageRoot, "templates", template.id);
+}
+
+/**
+ * Expand one provider's URL template for one repository-relative project path.
+ * Playground links stay plain, query-free https URLs so they remain safe for
+ * documentation surfaces that reject query strings and fragments.
+ */
+export function playgroundUrl(provider, { owner, repository, branch, path: projectPath }) {
+  // Every token lives in the path, so the template's own origin is the only
+  // host a rendered link may address. Origins are compared, never matched as
+  // substrings: a substring test would accept any host that merely contains
+  // the expected one.
+  const expected = new URL(provider.urlTemplate);
+  if (expected.protocol !== "https:") {
+    throw new Error(`playground provider ${provider.id} must declare an https template: ${provider.urlTemplate}`);
+  }
+  const url = provider.urlTemplate
+    .replaceAll("{owner}", owner)
+    .replaceAll("{repository}", repository)
+    .replaceAll("{branch}", branch)
+    .replaceAll("{path}", projectPath);
+  const parsed = new URL(url);
+  if (parsed.origin !== expected.origin) throw new Error(`playground URL must stay on ${expected.origin}: ${url}`);
+  if (parsed.search !== "" || parsed.hash !== "")
+    throw new Error(`playground URL must not carry a query or fragment: ${url}`);
+  if (!parsed.pathname.endsWith(`/${projectPath}`)) {
+    throw new Error(`playground URL must address ${projectPath}: ${url}`);
+  }
+  return parsed.toString();
+}
+
+/** Every provider link for one template, derived from the manifest. */
+export function playgroundLinks(manifest, template) {
+  return manifest.playgroundProviders.map((provider) => ({
+    providerId: provider.id,
+    title: provider.title,
+    url: playgroundUrl(provider, {
+      owner: manifest.repository.owner,
+      repository: manifest.repository.name,
+      branch: manifest.repository.branch,
+      path: template.path,
+    }),
+  }));
+}