create-jen-app 1.2.2 → 1.2.3

package/README.md

@@ -30,6 +30,7 @@ When you run the command, you'll be guided through:
 ## Templates
 
 ### Static Template
+
 Perfect for marketing sites, blogs, and documentation.
 
 - ⚡ Pure static site generation
@@ -59,6 +60,7 @@ npm run typecheck  # TypeScript type checking (if enabled)
 ## Project Structure
 
 ### Static Template
+
 ```
 my-app/
 ├── site/
@@ -86,4 +88,4 @@ my-app/
 
 ## License
 
-MIT - See LICENSE in the Jen.js repository
+MIT - See LICENSE in the Jen.js repository

package/dist/index.js

@@ -1,6 +1 @@
-#!/usr/bin/env node
-import { createJenApp } from "./create.js";
-createJenApp().catch((error) => {
-    console.error("\n❌ Error:", error.message);
-    process.exit(1);
-});
+#!/usr/bin/env nodeimport { createJenApp } from "./create.js";createJenApp().catch((error) => {  console.error("\n❌ Error:", error.message);  process.exit(1);});

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "create-jen-app",
-  "version": "1.2.2",
+  "version": "1.2.3",
   "description": "Create a beautiful Jen.js application with a single command",
   "type": "module",
   "bin": {
@@ -46,5 +46,5 @@
     "tsx": "^4.7.0",
     "typescript": "^5.7.2"
   },
-  "gitHead": "d75b257e51249af4f2863c56c8fe8b051bfc6303"
+  "gitHead": "fb883341104d6b3fc197930af24182ceccccbdef"
 }

package/templates/static/.esbuild/jen.config.js

@@ -1 +1,19 @@
+/*
+ * This file is part of Jen.js.
+ * Copyright (C) 2026 oopsio
+ * 
+ * This program is free software: you can redistribute it and/or modify
+ * it under the terms of the GNU General Public License as published by
+ * the Free Software Foundation, either version 3 of the License, or
+ * (at your option) any later version.
+ * 
+ * This program is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+ * GNU General Public License for more details.
+ * 
+ * You should have received a copy of the GNU General Public License
+ * along with this program. If not, see <https://www.gnu.org/licenses/>.
+ */
+
 var e={siteDir:"site",distDir:"dist",routes:{fileExtensions:[".tsx",".jsx",".ts",".js"],routeFilePattern:/^\(([^)]+)\)\.(tsx|jsx|ts|js)$/,enableIndexFallback:!0},rendering:{defaultMode:"ssg",defaultRevalidateSeconds:0},inject:{head:[],bodyEnd:[]},css:{globalScss:"site/styles/global.scss"},assets:{publicDir:"site/assets",cacheControl:"public, max-age=3600"},server:{port:3001,hostname:"localhost"},dev:{liveReload:!0}},s=e;export{s as default};

package/templates/static/README.md

@@ -1,67 +1,63 @@
-
-# Jen.js Starter Kit: Static
-
-```sh
-npm create jen-app@latest
-````
-
-
-> ⚡ **Building something cool?** This is a static Jen.js starter template with file-based routing and fast builds.
-
-## 🚀 Project Structure
-
-Inside your Jen.js project, you'll see the following folders and files:
-
-```text
-/
-├── site/
-│   ├── assets/
-│   │   └── favicon.svg
-│   ├── components/
-│   │   └── Header.tsx
-│   ├── layouts/
-│   │   └── BaseLayout.tsx
-│   ├── pages/
-│   │   └── (index).tsx
-│   ├── styles/
-│   │   └── global.scss
-│   └── jen.config.ts
-├── dist/
-└── package.json
-```
-
-### Key Folders
-
-* **`site/pages/`** → Your routes (file-based routing)
-* **`site/components/`** → Reusable UI components
-* **`site/layouts/`** → Layout wrappers
-* **`site/assets/`** → Public static files
-* **`site/styles/`** → Global styles
-
-## 🧞 Commands
-
-All commands are run from the root of the project, from a terminal:
-
-| Command           | Action                                    |
-| :---------------- | :---------------------------------------- |
-| `npm install`     | Installs dependencies                     |
-| `npm run dev`     | Starts the dev server at `localhost:3001` |
-| `npm run build`   | Builds your static site into `./dist/`    |
-| `npm run preview` | Previews the production build locally     |
-
-## 📦 Deployment
-
-Jen.js outputs a fully static site into `dist/`.
-
-You can deploy it easily to:
-
-* GitHub Pages
-* Netlify
-* Vercel
-* Cloudflare Pages
-
-## 👀 Want to learn more?
-
-Check the Jen.js documentation (coming soon) or explore the source code to see how routing, builds, and rendering work.
-
-
+# Jen.js Starter Kit: Static
+
+```sh
+npm create jen-app@latest
+```
+
+> ⚡ **Building something cool?** This is a static Jen.js starter template with file-based routing and fast builds.
+
+## 🚀 Project Structure
+
+Inside your Jen.js project, you'll see the following folders and files:
+
+```text
+/
+├── site/
+│   ├── assets/
+│   │   └── favicon.svg
+│   ├── components/
+│   │   └── Header.tsx
+│   ├── layouts/
+│   │   └── BaseLayout.tsx
+│   ├── pages/
+│   │   └── (index).tsx
+│   ├── styles/
+│   │   └── global.scss
+│   └── jen.config.ts
+├── dist/
+└── package.json
+```
+
+### Key Folders
+
+- **`site/pages/`** → Your routes (file-based routing)
+- **`site/components/`** → Reusable UI components
+- **`site/layouts/`** → Layout wrappers
+- **`site/assets/`** → Public static files
+- **`site/styles/`** → Global styles
+
+## 🧞 Commands
+
+All commands are run from the root of the project, from a terminal:
+
+| Command           | Action                                    |
+| :---------------- | :---------------------------------------- |
+| `npm install`     | Installs dependencies                     |
+| `npm run dev`     | Starts the dev server at `localhost:3001` |
+| `npm run build`   | Builds your static site into `./dist/`    |
+| `npm run preview` | Previews the production build locally     |
+
+## 📦 Deployment
+
+Jen.js outputs a fully static site into `dist/`.
+
+You can deploy it easily to:
+
+- GitHub Pages
+- Netlify
+- Vercel
+- Cloudflare Pages
+
+## 👀 Want to learn more?
+
+Check the Jen.js documentation (coming soon) or explore the source code to see how routing, builds, and rendering work.

package/templates/static/build.js

@@ -1,17 +1,17 @@
 /*
  * This file is part of Jen.js.
  * Copyright (C) 2026 oopsio
- * 
+ *
  * This program is free software: you can redistribute it and/or modify
  * it under the terms of the GNU General Public License as published by
  * the Free Software Foundation, either version 3 of the License, or
  * (at your option) any later version.
- * 
+ *
  * This program is distributed in the hope that it will be useful,
  * but WITHOUT ANY WARRANTY; without even the implied warranty of
  * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
  * GNU General Public License for more details.
- * 
+ *
  * You should have received a copy of the GNU General Public License
  * along with this program. If not, see <https://www.gnu.org/licenses/>.
  */
@@ -68,9 +68,7 @@ async function main() {
   const configFile = join(outdir, "jen.config.js");
   const config = (await import(pathToFileURL(configFile).href)).default;
 
-  const buildPath = pathToFileURL(
-    join(rootDir, "lib/build/build.js"),
-  ).href;
+  const buildPath = pathToFileURL(join(rootDir, "lib/build/build.js")).href;
   const { buildSite } = await import(buildPath);
 
   await buildSite({ config });

package/templates/static/jen.config.ts

@@ -1,22 +1,21 @@
 /*
  * This file is part of Jen.js.
  * Copyright (C) 2026 oopsio
- * 
+ *
  * This program is free software: you can redistribute it and/or modify
  * it under the terms of the GNU General Public License as published by
  * the Free Software Foundation, either version 3 of the License, or
  * (at your option) any later version.
- * 
+ *
  * This program is distributed in the hope that it will be useful,
  * but WITHOUT ANY WARRANTY; without even the implied warranty of
  * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
  * GNU General Public License for more details.
- * 
+ *
  * You should have received a copy of the GNU General Public License
  * along with this program. If not, see <https://www.gnu.org/licenses/>.
  */
 
-
 const config: FrameworkConfig = {
   siteDir: "site",
   distDir: "dist",
@@ -51,7 +50,6 @@ const config: FrameworkConfig = {
 
 export default config;
 
-
 export type RenderMode = "ssg" | "ssr";
 
 export interface FrameworkConfig {

package/templates/static/jenjs.d.ts

@@ -1,17 +1,17 @@
 /*
  * This file is part of Jen.js.
  * Copyright (C) 2026 oopsio
- * 
+ *
  * This program is free software: you can redistribute it and/or modify
  * it under the terms of the GNU General Public License as published by
  * the Free Software Foundation, either version 3 of the License, or
  * (at your option) any later version.
- * 
+ *
  * This program is distributed in the hope that it will be useful,
  * but WITHOUT ANY WARRANTY; without even the implied warranty of
  * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
  * GNU General Public License for more details.
- * 
+ *
  * You should have received a copy of the GNU General Public License
  * along with this program. If not, see <https://www.gnu.org/licenses/>.
  */

package/templates/static/lib/api/(hello).d.ts

@@ -1,7 +1,7 @@
 export default function handler(ctx: any): Promise<{
-    ok: boolean;
-    message: string;
-    method: any;
-    query: any;
-    body: any;
+  ok: boolean;
+  message: string;
+  method: any;
+  query: any;
+  body: any;
 }>;

package/templates/static/lib/api/(hello).js

@@ -16,11 +16,11 @@
  * along with this program. If not, see <https://www.gnu.org/licenses/>.
  */
 export default async function handler(ctx) {
-    return {
-        ok: true,
-        message: "Hello from API route",
-        method: ctx.method,
-        query: ctx.query,
-        body: ctx.body,
-    };
+  return {
+    ok: true,
+    message: "Hello from API route",
+    method: ctx.method,
+    query: ctx.query,
+    body: ctx.body,
+  };
 }

package/templates/static/lib/auth/cookie-utils.d.ts

@@ -3,22 +3,31 @@
  * Ensures cookies have proper security flags
  */
 export interface CookieOptions {
-    httpOnly?: boolean;
-    secure?: boolean;
-    sameSite?: "Strict" | "Lax" | "None";
-    maxAge?: number;
-    path?: string;
-    domain?: string;
+  httpOnly?: boolean;
+  secure?: boolean;
+  sameSite?: "Strict" | "Lax" | "None";
+  maxAge?: number;
+  path?: string;
+  domain?: string;
 }
 /**
  * Generate secure cookie header value
  */
-export declare function createSecureCookie(name: string, value: string, options?: CookieOptions): string;
+export declare function createSecureCookie(
+  name: string,
+  value: string,
+  options?: CookieOptions,
+): string;
 /**
-  * Parse cookies from request header
-  */
-export declare function parseCookies(cookieHeader: string): Record<string, string>;
+ * Parse cookies from request header
+ */
+export declare function parseCookies(
+  cookieHeader: string,
+): Record<string, string>;
 /**
  * Validate session cookie - check all security properties
  */
-export declare function validateSessionCookie(header: string, expectedName?: string): boolean;
+export declare function validateSessionCookie(
+  header: string,
+  expectedName?: string,
+): boolean;

package/templates/static/lib/auth/cookie-utils.js

@@ -19,81 +19,78 @@
  * Generate secure cookie header value
  */
 export function createSecureCookie(name, value, options = {}) {
-    const defaults = {
-        httpOnly: true, // Prevent XSS token theft
-        secure: process.env.NODE_ENV === "production", // HTTPS only in production
-        sameSite: "Strict", // CSRF protection
-        maxAge: 24 * 60 * 60, // 24 hours
-        path: "/",
-    };
-    const opts = { ...defaults, ...options };
-    let cookieStr = `${encodeURIComponent(name)}=${encodeURIComponent(value)}`;
-    if (opts.maxAge !== undefined) {
-        cookieStr += `; Max-Age=${opts.maxAge}`;
-    }
-    if (opts.path) {
-        cookieStr += `; Path=${opts.path}`;
-    }
-    if (opts.domain) {
-        cookieStr += `; Domain=${opts.domain}`;
-    }
-    if (opts.secure) {
-        cookieStr += "; Secure";
-    }
-    if (opts.httpOnly) {
-        cookieStr += "; HttpOnly";
-    }
-    if (opts.sameSite) {
-        cookieStr += `; SameSite=${opts.sameSite}`;
-    }
-    return cookieStr;
+  const defaults = {
+    httpOnly: true, // Prevent XSS token theft
+    secure: process.env.NODE_ENV === "production", // HTTPS only in production
+    sameSite: "Strict", // CSRF protection
+    maxAge: 24 * 60 * 60, // 24 hours
+    path: "/",
+  };
+  const opts = { ...defaults, ...options };
+  let cookieStr = `${encodeURIComponent(name)}=${encodeURIComponent(value)}`;
+  if (opts.maxAge !== undefined) {
+    cookieStr += `; Max-Age=${opts.maxAge}`;
+  }
+  if (opts.path) {
+    cookieStr += `; Path=${opts.path}`;
+  }
+  if (opts.domain) {
+    cookieStr += `; Domain=${opts.domain}`;
+  }
+  if (opts.secure) {
+    cookieStr += "; Secure";
+  }
+  if (opts.httpOnly) {
+    cookieStr += "; HttpOnly";
+  }
+  if (opts.sameSite) {
+    cookieStr += `; SameSite=${opts.sameSite}`;
+  }
+  return cookieStr;
 }
 /**
-  * Parse cookies from request header
-  */
+ * Parse cookies from request header
+ */
 export function parseCookies(cookieHeader) {
-    const cookies = {};
-    if (!cookieHeader || !cookieHeader.trim())
-        return cookies;
-    cookieHeader.split(";").forEach((cookie) => {
-        const trimmed = cookie.trim();
-        if (!trimmed)
-            return;
-        const eqIndex = trimmed.indexOf("=");
-        if (eqIndex === -1)
-            return;
-        const name = trimmed.substring(0, eqIndex).trim();
-        const value = trimmed.substring(eqIndex + 1).trim();
-        if (name && value) {
-            try {
-                cookies[decodeURIComponent(name)] = decodeURIComponent(value);
-            }
-            catch (err) {
-                // Skip cookies with invalid URI encoding
-                console.warn(`Failed to decode cookie ${name}:`, err instanceof Error ? err.message : String(err));
-            }
-        }
-    });
-    return cookies;
+  const cookies = {};
+  if (!cookieHeader || !cookieHeader.trim()) return cookies;
+  cookieHeader.split(";").forEach((cookie) => {
+    const trimmed = cookie.trim();
+    if (!trimmed) return;
+    const eqIndex = trimmed.indexOf("=");
+    if (eqIndex === -1) return;
+    const name = trimmed.substring(0, eqIndex).trim();
+    const value = trimmed.substring(eqIndex + 1).trim();
+    if (name && value) {
+      try {
+        cookies[decodeURIComponent(name)] = decodeURIComponent(value);
+      } catch (err) {
+        // Skip cookies with invalid URI encoding
+        console.warn(
+          `Failed to decode cookie ${name}:`,
+          err instanceof Error ? err.message : String(err),
+        );
+      }
+    }
+  });
+  return cookies;
 }
 /**
  * Validate session cookie - check all security properties
  */
 export function validateSessionCookie(header, expectedName = "sessionId") {
-    if (!header)
-        return false;
-    const parts = header.split(";").map((p) => p.trim());
-    const [cookiePair, ...flags] = parts;
-    if (!cookiePair || !cookiePair.includes("="))
-        return false;
-    const [name] = cookiePair.split("=");
-    if (decodeURIComponent(name) !== expectedName)
-        return false;
-    // Check required security flags
-    const hasHttpOnly = flags.some((f) => f.toLowerCase() === "httponly");
-    const hasSameSite = flags.some((f) => f.toLowerCase().startsWith("samesite"));
-    const isSecure = process.env.NODE_ENV === "production"
-        ? flags.some((f) => f.toLowerCase() === "secure")
-        : true;
-    return hasHttpOnly && hasSameSite && isSecure;
+  if (!header) return false;
+  const parts = header.split(";").map((p) => p.trim());
+  const [cookiePair, ...flags] = parts;
+  if (!cookiePair || !cookiePair.includes("=")) return false;
+  const [name] = cookiePair.split("=");
+  if (decodeURIComponent(name) !== expectedName) return false;
+  // Check required security flags
+  const hasHttpOnly = flags.some((f) => f.toLowerCase() === "httponly");
+  const hasSameSite = flags.some((f) => f.toLowerCase().startsWith("samesite"));
+  const isSecure =
+    process.env.NODE_ENV === "production"
+      ? flags.some((f) => f.toLowerCase() === "secure")
+      : true;
+  return hasHttpOnly && hasSameSite && isSecure;
 }

package/templates/static/lib/auth/jwt.d.ts

@@ -1,2 +1,30 @@
+/**
+ * Creates a signed JWT token containing the provided payload.
+ * This function is a stub that requires implementing with an external JWT library.
+ *
+ * @param payload The data to encode in the token.
+ * @param expiresIn Token expiration time (default "1h"). Format: "1h", "7d", "30s", etc.
+ * @returns The signed JWT token as a string.
+ * @throws Error indicating that a JWT library must be installed.
+ *
+ * @example
+ * const token = signToken({ userId: 123, role: 'admin' }, '24h');
+ * // Implementation using jsonwebtoken:
+ * // jwt.sign(payload, SECRET, { expiresIn });
+ */
 export declare function signToken(payload: object, expiresIn?: string): void;
+/**
+ * Verifies and decodes a JWT token, returning the payload if valid.
+ * This function is a stub that requires implementing with an external JWT library.
+ *
+ * @param token The JWT token string to verify.
+ * @returns The decoded payload from the token.
+ * @throws Error indicating that a JWT library must be installed.
+ * @throws Error if the token is invalid, expired, or fails verification.
+ *
+ * @example
+ * const payload = verifyToken(token);
+ * // Implementation using jsonwebtoken:
+ * // jwt.verify(token, SECRET);
+ */
 export declare function verifyToken(token: string): void;

package/templates/static/lib/auth/jwt.js

@@ -15,16 +15,60 @@
  * You should have received a copy of the GNU General Public License
  * along with this program. If not, see <https://www.gnu.org/licenses/>.
  */
-// JWT token utilities - external JWT library not included
-// Users should implement with their own jwt library (e.g., npm install jsonwebtoken)
+/**
+ * JWT token utilities for creating and validating JSON Web Tokens.
+ * This module provides stub implementations that require an external JWT library.
+ * Users must install a JWT library (e.g., jsonwebtoken) and implement these functions
+ * using that library's APIs to enable authentication features.
+ *
+ * The module validates that JWT_SECRET is configured in the environment,
+ * ensuring token signing and verification can proceed securely.
+ */
+// JWT signing and verification require an external library not included by default.
+// Users should install jsonwebtoken: npm install jsonwebtoken
 const SECRET = process.env.JWT_SECRET;
-// Validate JWT_SECRET is configured
+// Validate that JWT_SECRET is set. This environment variable is required for all token operations.
+// Without a secret, tokens cannot be securely signed or verified.
 if (!SECRET) {
-    throw new Error("CRITICAL: JWT_SECRET environment variable is required. Set JWT_SECRET in your .env file or environment.");
+  throw new Error(
+    "CRITICAL: JWT_SECRET environment variable is required. Set JWT_SECRET in your .env file or environment.",
+  );
 }
+/**
+ * Creates a signed JWT token containing the provided payload.
+ * This function is a stub that requires implementing with an external JWT library.
+ *
+ * @param payload The data to encode in the token.
+ * @param expiresIn Token expiration time (default "1h"). Format: "1h", "7d", "30s", etc.
+ * @returns The signed JWT token as a string.
+ * @throws Error indicating that a JWT library must be installed.
+ *
+ * @example
+ * const token = signToken({ userId: 123, role: 'admin' }, '24h');
+ * // Implementation using jsonwebtoken:
+ * // jwt.sign(payload, SECRET, { expiresIn });
+ */
 export function signToken(payload, expiresIn = "1h") {
-    throw new Error("JWT implementation requires external library. Install: npm install jsonwebtoken");
+  throw new Error(
+    "JWT implementation requires external library. Install: npm install jsonwebtoken",
+  );
 }
+/**
+ * Verifies and decodes a JWT token, returning the payload if valid.
+ * This function is a stub that requires implementing with an external JWT library.
+ *
+ * @param token The JWT token string to verify.
+ * @returns The decoded payload from the token.
+ * @throws Error indicating that a JWT library must be installed.
+ * @throws Error if the token is invalid, expired, or fails verification.
+ *
+ * @example
+ * const payload = verifyToken(token);
+ * // Implementation using jsonwebtoken:
+ * // jwt.verify(token, SECRET);
+ */
 export function verifyToken(token) {
-    throw new Error("JWT implementation requires external library. Install: npm install jsonwebtoken");
+  throw new Error(
+    "JWT implementation requires external library. Install: npm install jsonwebtoken",
+  );
 }