create-kdna-web-app 0.1.0

package/LICENSE

@@ -0,0 +1,17 @@
+Apache License
+Version 2.0, January 2004
+http://www.apache.org/licenses/
+
+Copyright 2026 KDNA Authors
+
+Licensed under the Apache License, Version 2.0 (the "License");
+you may not use this file except in compliance with the License.
+You may obtain a copy of the License at
+
+    http://www.apache.org/licenses/LICENSE-2.0
+
+Unless required by applicable law or agreed to in writing, software
+distributed under the License is distributed on an "AS IS" BASIS,
+WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+See the License for the specific language governing permissions and
+limitations under the License.

package/NOTICE

@@ -0,0 +1,13 @@
+create-kdna-web-app
+Copyright 2026 KDNA Authors
+
+This product includes software developed at
+https://github.com/aikdna/create-kdna-web-app
+
+create-kdna-web-app is a project scaffolding CLI for KDNA-integrated
+web applications. Generated projects include the KDNA packages each
+template imports at runtime, pre-configured with a working validate →
+plan-load → load → consume flow.
+
+See LICENSE for the full Apache 2.0 license text.
+See README.md for usage and template options.

package/README.md

@@ -0,0 +1,140 @@
+# create-kdna-web-app
+
+**Scaffold a KDNA-integrated web application in one command.**
+
+```bash
+npx create-kdna-web-app my-app
+cd my-app
+npm run dev
+```
+
+The Next.js templates include `@aikdna/kdna-web-server` and
+`@aikdna/kdna-react` pre-configured with a validate -> inspect ->
+plan-load -> load demo. The Express template includes the server adapter
+and a minimal static HTML demo.
+
+[![npm](https://img.shields.io/npm/v/create-kdna-web-app)](https://www.npmjs.com/package/create-kdna-web-app)
+[![License](https://img.shields.io/badge/license-Apache%202.0-blue)](LICENSE)
+
+---
+
+## Usage
+
+```bash
+npx create-kdna-web-app <project-name> [options]
+```
+
+### Options
+
+| Flag | Default | Description |
+|------|---------|-------------|
+| `--template` | `nextjs` | Project template — see [templates](#templates) |
+| `--package-manager` | auto-detected | `npm`, `pnpm`, or `yarn` |
+| `--no-install` | — | Scaffold files without running install |
+
+### Examples
+
+```bash
+# Next.js App Router (default)
+npx create-kdna-web-app my-app
+
+# Express
+npx create-kdna-web-app my-app --template express
+
+# Next.js Pages Router
+npx create-kdna-web-app my-app --template nextjs-pages
+```
+
+---
+
+## Templates
+
+### `nextjs` (default)
+
+- Next.js 16+ with App Router
+- `app/api/kdna/[...route]/route.js` — all KDNA endpoints mounted
+- `app/page.jsx` — full demo: file drop, inspect, load, display
+- `.env.local.example` for local configuration
+
+### `nextjs-pages`
+
+- Next.js with Pages Router
+- `pages/api/kdna/[...route].js` — all KDNA endpoints
+- `pages/index.jsx` — same demo as the App Router template
+
+### `express`
+
+- Express with ESM
+- `src/server.js` — KDNA router mounted at `/api/kdna`
+- `public/index.html` — minimal HTML demo page
+- `.env.example` for local configuration
+
+---
+
+## Template dependencies
+
+| Template | KDNA packages |
+|----------|---------------|
+| `nextjs` | `@aikdna/kdna-core`, `@aikdna/kdna-web-server`, `@aikdna/kdna-react` |
+| `nextjs-pages` | `@aikdna/kdna-core`, `@aikdna/kdna-web-server`, `@aikdna/kdna-react` |
+| `express` | `@aikdna/kdna-core`, `@aikdna/kdna-web-server` |
+
+## Pre-configured flow
+
+The Next.js templates provide the full React flow:
+
+1. User drops a `.kdna` file onto the `<KDNAFileDropzone>`.
+2. The file is uploaded and inspected — metadata appears immediately.
+3. `<KDNALoadPlanGate>` checks whether a password or license is needed.
+4. If the asset is open, it loads automatically.
+5. If the asset requires a password, `<KDNAPasswordUnlockDialog>` appears.
+6. The loaded content is displayed.
+
+The Express template mounts the same `/api/kdna` server endpoints and includes
+a minimal HTML page that uploads, inspects, and loads an open `.kdna` asset.
+
+### Environment variables
+
+```bash
+# Optional
+KDNA_STORAGE_DIR=/tmp/kdna
+
+# Optional — only needed for licensed-mode assets
+KDNA_ACTIVATION_URL=https://your-activation-server.example.com
+```
+
+---
+
+## After scaffolding
+
+```bash
+cd my-app
+cp .env.local.example .env.local   # Next.js templates
+# or: cp .env.example .env         # Express template, if you load env files locally
+npm test                           # smoke-test KDNA package imports
+npm run dev
+# Open http://localhost:3000 and drop a .kdna file
+```
+
+To get a `.kdna` file for testing:
+
+```bash
+npm install -g @aikdna/kdna-cli
+curl -LO https://github.com/aikdna/kdna-assets/releases/download/agent-project-context-v0.1.2/agent-project-context-v0.1.2.kdna
+```
+
+---
+
+## Related packages
+
+| Package | Role |
+|---------|------|
+| [`@aikdna/kdna-core`](https://github.com/aikdna/kdna) | KDNA format and runtime |
+| [`@aikdna/kdna-web-server`](https://github.com/aikdna/kdna-web-server) | Server-side adapter |
+| [`@aikdna/kdna-react`](https://github.com/aikdna/kdna-react) | React components and hooks |
+
+---
+
+## License
+
+Apache 2.0 — see [LICENSE](./LICENSE).

package/SECURITY.md

@@ -0,0 +1,38 @@
+# Security Policy
+
+## Reporting a Vulnerability
+
+Please **do not** report security vulnerabilities through public GitHub issues.
+
+Instead, use one of these private channels:
+
+- **GitHub Private Vulnerability Reporting**: Go to the [Security Advisories](https://github.com/aikdna/create-kdna-web-app/security/advisories/new) page
+- **Email**: security@aikdna.com
+
+We aim to respond within 72 hours and provide a timeline for resolution within 1 week.
+Please do not disclose the vulnerability publicly until we have had a chance to address it.
+
+## Supported Versions
+
+`create-kdna-web-app` is a pre-release scaffolder support surface. Until the
+first stable package release, security support tracks the latest mainline
+pre-release and the canonical KDNA protocol/runtime surfaces.
+
+| Component | Supported Versions |
+|-----------|-------------------|
+| KDNA Protocol | Latest tagged release |
+| kdna-cli | Latest minor release |
+| create-kdna-web-app | Latest mainline pre-release |
+
+Older pre-release versions may receive critical security patches on a
+case-by-case basis.
+
+## Security Model
+
+`create-kdna-web-app` scaffolds KDNA-integrated web applications. Generated
+templates must consume the public KDNA package contracts rather than define
+protocol validity, access modes, LoadPlan states, or crypto policy.
+
+For the KDNA Protocol security architecture, see
+[GOVERNANCE.md](https://github.com/aikdna/kdna/blob/main/docs/GOVERNANCE.md)
+in the main protocol repository.

package/bin/create-kdna-web-app.js

@@ -0,0 +1,9 @@
+#!/usr/bin/env node
+'use strict';
+
+const { main } = require('../src/scaffold');
+
+main(process.argv.slice(2)).catch((error) => {
+  console.error(error.message);
+  process.exit(error.exitCode || 1);
+});

package/docs/getting-started.md

@@ -0,0 +1,67 @@
+# Getting started
+
+This page walks through the first five minutes after running
+`npx create-kdna-web-app`.
+
+---
+
+## Create a project
+
+```bash
+npx create-kdna-web-app my-app
+cd my-app
+```
+
+---
+
+## Configure environment variables
+
+```bash
+cp .env.local.example .env.local
+```
+
+Open `.env.local`. The only required variable is `KDNA_STORAGE_DIR`:
+
+```bash
+KDNA_STORAGE_DIR=/tmp/kdna
+```
+
+`KDNA_ACTIVATION_URL` is optional. Leave it empty unless you are working
+with licensed-mode assets and have a self-hosted activation server.
+
+---
+
+## Start the development server
+
+```bash
+npm run dev
+```
+
+Open [http://localhost:3000](http://localhost:3000).
+
+---
+
+## Try it with a real .kdna file
+
+Install the KDNA CLI and download an example asset:
+
+```bash
+npm install -g @aikdna/kdna-cli
+
+curl -LO https://github.com/aikdna/kdna-assets/releases/download/agent-project-context-v0.1.2/agent-project-context-v0.1.2.kdna
+```
+
+Drop the file onto the page. You should see:
+
+1. The manifest metadata (domain, version, title).
+2. A "Load" button or automatic loading for open assets.
+3. The formatted payload content.
+
+---
+
+## Next steps
+
+- [Templates](./templates.md) — switch to Express or Pages Router
+- [KDNA Core](https://github.com/aikdna/kdna) — understand the file format
+- [kdna-web-server docs](https://github.com/aikdna/kdna-web-server) — add auth middleware, configure storage
+- [kdna-react docs](https://github.com/aikdna/kdna-react) — customise the components

package/docs/template-checklist.md

@@ -0,0 +1,30 @@
+# Template checklist
+
+Use this checklist when adding or changing a `create-kdna-web-app`
+template.
+
+## Required files
+
+- `package.json` with bounded dependency ranges, never `latest`.
+- KDNA server route or server entrypoint.
+- Browser demo page that exercises inspect, plan-load, and load.
+- Environment example file for storage and activation settings.
+- `scripts/smoke.mjs` that imports the KDNA package entrypoints used by
+  the generated project.
+
+## Runtime boundaries
+
+- KDNA assets stay server-side after upload.
+- Decryption and license verification happen through
+  `@aikdna/kdna-web-server` or a compatible server API.
+- Raw license keys go to activation endpoints, not `/load`.
+- Remote-server configuration is not included until the server adapter
+  implements and documents that mode.
+
+## Verification
+
+- `npm test` passes in this repository.
+- A generated project includes the expected route, page, env example, and
+  smoke script.
+- The generated template package uses bounded dependency ranges.
+- Public docs and package metadata mention only templates that exist.

package/docs/templates.md

@@ -0,0 +1,89 @@
+# Templates
+
+`create-kdna-web-app` ships three templates. Choose with `--template`.
+
+---
+
+## `nextjs` (default)
+
+**When to use:** You are starting a new Next.js project or want the
+most up-to-date template.
+
+**Framework:** Next.js 14+ (App Router)
+
+**What it includes:**
+
+| File | Purpose |
+|------|---------|
+| `app/api/kdna/[...route]/route.js` | All KDNA endpoints (catch-all App Router route) |
+| `app/page.jsx` | Demo page: file drop, inspect, load, display |
+| `.env.local.example` | Environment variable template |
+
+**Start:**
+
+```bash
+npx create-kdna-web-app my-app --template nextjs
+cd my-app && npm run dev
+```
+
+---
+
+## `nextjs-pages`
+
+**When to use:** You are integrating into an existing Next.js Pages
+Router project, or prefer the Pages Router.
+
+**Framework:** Next.js (Pages Router)
+
+**What it includes:**
+
+| File | Purpose |
+|------|---------|
+| `pages/api/kdna/[...route].js` | All KDNA endpoints |
+| `pages/index.jsx` | Demo page |
+| `.env.local.example` | Environment variable template |
+
+**Start:**
+
+```bash
+npx create-kdna-web-app my-app --template nextjs-pages
+cd my-app && npm run dev
+```
+
+---
+
+## `express`
+
+**When to use:** You need a standalone Node.js server, are not using
+Next.js, or are integrating into an existing Express application.
+
+**Framework:** Express (ESM)
+
+**What it includes:**
+
+| File | Purpose |
+|------|---------|
+| `src/server.js` | Express server with KDNA router at `/api/kdna` |
+| `public/index.html` | Minimal HTML demo page |
+| `.env.example` | Environment variable template |
+
+**Start:**
+
+```bash
+npx create-kdna-web-app my-app --template express
+cd my-app && npm start
+# Open http://localhost:3000
+```
+
+---
+
+## Choosing a template
+
+| | `nextjs` | `nextjs-pages` | `express` |
+|-|----------|----------------|-----------|
+| KDNA API route included | Yes | Yes | Yes |
+| Edge runtime (Vercel) | No* | No* | No |
+| Browser demo included | React page | React page | Static HTML |
+| React dependency included | Yes | Yes | No |
+
+\* Use `@aikdna/kdna-web-server/cloudflare` for edge deployments.

package/package.json

@@ -0,0 +1,45 @@
+{
+  "name": "create-kdna-web-app",
+  "version": "0.1.0",
+  "description": "Scaffold a KDNA-integrated web application with Next.js App Router, Next.js Pages Router, or Express templates.",
+  "type": "commonjs",
+  "bin": {
+    "create-kdna-web-app": "bin/create-kdna-web-app.js"
+  },
+  "files": [
+    "bin/",
+    "docs/",
+    "src/",
+    "templates/",
+    "LICENSE",
+    "NOTICE",
+    "README.md",
+    "SECURITY.md"
+  ],
+  "scripts": {
+    "ci": "npm test && npm pack --dry-run --json",
+    "test": "node --test tests/**/*.test.js"
+  },
+  "engines": {
+    "node": ">=18"
+  },
+  "dependencies": {},
+  "license": "Apache-2.0",
+  "repository": {
+    "type": "git",
+    "url": "https://github.com/aikdna/create-kdna-web-app.git"
+  },
+  "bugs": {
+    "url": "https://github.com/aikdna/create-kdna-web-app/issues"
+  },
+  "homepage": "https://github.com/aikdna/create-kdna-web-app",
+  "keywords": [
+    "kdna",
+    "create-kdna-web-app",
+    "scaffold",
+    "nextjs",
+    "express",
+    "judgment-asset",
+    "starter"
+  ]
+}

package/src/scaffold.js

@@ -0,0 +1,168 @@
+'use strict';
+
+const fs = require('node:fs');
+const path = require('node:path');
+const { spawnSync } = require('node:child_process');
+
+const VALID_TEMPLATES = new Set(['nextjs', 'nextjs-pages', 'express']);
+const VALID_PACKAGE_MANAGERS = new Set(['npm', 'pnpm', 'yarn']);
+
+function usage() {
+  return [
+    'Usage: create-kdna-web-app <project-name> [options]',
+    '',
+    'Options:',
+    '  --template <nextjs|nextjs-pages|express>',
+    '  --package-manager <npm|pnpm|yarn>',
+    '  --no-install',
+    '  --help',
+  ].join('\n');
+}
+
+function parseArgs(args) {
+  const options = {
+    projectName: null,
+    template: 'nextjs',
+    packageManager: null,
+    install: true,
+  };
+
+  for (let index = 0; index < args.length; index += 1) {
+    const arg = args[index];
+    if (arg === '--help' || arg === '-h') {
+      options.help = true;
+    } else if (arg === '--template') {
+      options.template = args[++index];
+    } else if (arg.startsWith('--template=')) {
+      options.template = arg.slice('--template='.length);
+    } else if (arg === '--package-manager') {
+      options.packageManager = args[++index];
+    } else if (arg.startsWith('--package-manager=')) {
+      options.packageManager = arg.slice('--package-manager='.length);
+    } else if (arg === '--no-install') {
+      options.install = false;
+    } else if (!options.projectName) {
+      options.projectName = arg;
+    } else {
+      const error = new Error(`Unknown argument: ${arg}\n\n${usage()}`);
+      error.exitCode = 1;
+      throw error;
+    }
+  }
+
+  return options;
+}
+
+function validateOptions(options) {
+  if (options.help) return;
+  if (!options.projectName) {
+    const error = new Error(`Project name is required.\n\n${usage()}`);
+    error.exitCode = 1;
+    throw error;
+  }
+  if (!VALID_TEMPLATES.has(options.template)) {
+    const error = new Error(`Unknown template: ${options.template}`);
+    error.exitCode = 1;
+    throw error;
+  }
+  if (options.packageManager && !VALID_PACKAGE_MANAGERS.has(options.packageManager)) {
+    const error = new Error(`Unknown package manager: ${options.packageManager}`);
+    error.exitCode = 1;
+    throw error;
+  }
+}
+
+function detectPackageManager() {
+  const userAgent = process.env.npm_config_user_agent || '';
+  if (userAgent.startsWith('pnpm')) return 'pnpm';
+  if (userAgent.startsWith('yarn')) return 'yarn';
+  return 'npm';
+}
+
+function packageInstallCommand(packageManager) {
+  if (packageManager === 'pnpm') return ['pnpm', ['install']];
+  if (packageManager === 'yarn') return ['yarn', []];
+  return ['npm', ['install']];
+}
+
+function templateRoot(template) {
+  return path.join(__dirname, '..', 'templates', template);
+}
+
+function copyTemplate(srcDir, destDir, variables) {
+  for (const entry of fs.readdirSync(srcDir, { withFileTypes: true })) {
+    const src = path.join(srcDir, entry.name);
+    const name = entry.name === '_gitignore' ? '.gitignore' : entry.name;
+    const dest = path.join(destDir, name);
+
+    if (entry.isDirectory()) {
+      fs.mkdirSync(dest, { recursive: true });
+      copyTemplate(src, dest, variables);
+    } else {
+      let content = fs.readFileSync(src, 'utf8');
+      for (const [key, value] of Object.entries(variables)) {
+        content = content.replaceAll(`{{${key}}}`, value);
+      }
+      fs.writeFileSync(dest, content);
+    }
+  }
+}
+
+function assertSafeProjectDir(projectDir) {
+  if (fs.existsSync(projectDir) && fs.readdirSync(projectDir).length > 0) {
+    const error = new Error(`Target directory is not empty: ${projectDir}`);
+    error.exitCode = 1;
+    throw error;
+  }
+}
+
+function scaffold(options) {
+  validateOptions(options);
+  if (options.help) {
+    return { help: usage() };
+  }
+
+  const packageManager = options.packageManager || detectPackageManager();
+  const projectDir = path.resolve(options.projectName);
+  const projectName = path.basename(projectDir);
+  assertSafeProjectDir(projectDir);
+  fs.mkdirSync(projectDir, { recursive: true });
+
+  copyTemplate(templateRoot(options.template), projectDir, {
+    projectName,
+    packageManager,
+  });
+
+  if (options.install) {
+    const [command, args] = packageInstallCommand(packageManager);
+    const result = spawnSync(command, args, { cwd: projectDir, stdio: 'inherit' });
+    if (result.status !== 0) {
+      const error = new Error(`${command} ${args.join(' ')} failed.`);
+      error.exitCode = result.status || 1;
+      throw error;
+    }
+  }
+
+  return { projectDir, projectName, template: options.template, packageManager, installed: options.install };
+}
+
+async function main(args) {
+  const options = parseArgs(args);
+  const result = scaffold(options);
+  if (result.help) {
+    console.log(result.help);
+    return result;
+  }
+  console.log(`Created ${result.projectName} with the ${result.template} template.`);
+  if (!result.installed) {
+    console.log(`Skipped install. Run: cd ${path.relative(process.cwd(), result.projectDir)} && ${result.packageManager} install`);
+  }
+  return result;
+}
+
+module.exports = {
+  VALID_TEMPLATES,
+  parseArgs,
+  scaffold,
+  main,
+};

package/templates/express/.env.example

@@ -0,0 +1,2 @@
+KDNA_STORAGE_DIR=/tmp/kdna-web
+KDNA_ACTIVATION_URL=

package/templates/express/_gitignore

@@ -0,0 +1,2 @@
+node_modules
+.env

package/templates/express/package.json

@@ -0,0 +1,15 @@
+{
+  "name": "{{projectName}}",
+  "private": true,
+  "type": "module",
+  "scripts": {
+    "dev": "node src/server.js",
+    "start": "node src/server.js",
+    "test": "node scripts/smoke.mjs"
+  },
+  "dependencies": {
+    "@aikdna/kdna-core": "^0.15.10",
+    "@aikdna/kdna-web-server": "^0.1.0",
+    "express": "^5.2.1"
+  }
+}

package/templates/express/public/index.html

@@ -0,0 +1,29 @@
+<!doctype html>
+<html lang="en">
+  <head>
+    <meta charset="utf-8">
+    <meta name="viewport" content="width=device-width, initial-scale=1">
+    <title>KDNA Web App</title>
+  </head>
+  <body>
+    <main>
+      <input id="file" type="file" accept=".kdna">
+      <pre id="output">Choose a .kdna file</pre>
+    </main>
+    <script>
+      const file = document.querySelector('#file')
+      const output = document.querySelector('#output')
+      file.addEventListener('change', async () => {
+        const form = new FormData()
+        form.set('file', file.files[0])
+        const inspect = await fetch('/api/kdna/inspect', { method: 'POST', body: form }).then((r) => r.json())
+        const loaded = await fetch('/api/kdna/load', {
+          method: 'POST',
+          headers: { 'content-type': 'application/json' },
+          body: JSON.stringify({ fileId: inspect.fileId, profile: 'compact' }),
+        }).then((r) => r.json())
+        output.textContent = loaded.content || JSON.stringify(loaded, null, 2)
+      })
+    </script>
+  </body>
+</html>

package/templates/express/scripts/smoke.mjs

@@ -0,0 +1,7 @@
+import { createKDNARouter } from '@aikdna/kdna-web-server/express'
+
+if (typeof createKDNARouter !== 'function') {
+  throw new Error('@aikdna/kdna-web-server/express did not export createKDNARouter')
+}
+
+console.log('KDNA Express template smoke passed')

package/templates/express/src/server.js

@@ -0,0 +1,15 @@
+import express from 'express'
+import { createKDNARouter } from '@aikdna/kdna-web-server/express'
+
+const app = express()
+const port = Number(process.env.PORT || 3000)
+
+app.use('/api/kdna', createKDNARouter({
+  storageDir: process.env.KDNA_STORAGE_DIR ?? '/tmp/kdna-web',
+  activationServerUrl: process.env.KDNA_ACTIVATION_URL,
+}))
+app.use(express.static('public'))
+
+app.listen(port, () => {
+  console.log(`KDNA web app running on http://localhost:${port}`)
+})

package/templates/nextjs/.env.local.example

@@ -0,0 +1,2 @@
+KDNA_STORAGE_DIR=/tmp/kdna-web
+KDNA_ACTIVATION_URL=

package/templates/nextjs/_gitignore

@@ -0,0 +1,3 @@
+node_modules
+.next
+.env.local

package/templates/nextjs/app/api/kdna/[...route]/route.js

@@ -0,0 +1,8 @@
+import { createNextHandlers } from '@aikdna/kdna-web-server/nextjs'
+
+const { GET, POST } = createNextHandlers({
+  storageDir: process.env.KDNA_STORAGE_DIR ?? '/tmp/kdna-web',
+  activationServerUrl: process.env.KDNA_ACTIVATION_URL,
+})
+
+export { GET, POST }

package/templates/nextjs/app/page.jsx

@@ -0,0 +1,42 @@
+'use client'
+
+import {
+  KDNAAssetInspector,
+  KDNAFileDropzone,
+  KDNALoadPlanGate,
+  KDNAPasswordUnlockDialog,
+} from '@aikdna/kdna-react'
+import { useState } from 'react'
+
+export default function Page() {
+  const [unlock, setUnlock] = useState(null)
+
+  return (
+    <main>
+      <KDNAFileDropzone endpoint="/api/kdna" onError={console.error}>
+        {({ fileId, inspect, loading }) => (
+          <section>
+            <p>{loading ? 'Uploading...' : 'Drop or choose a .kdna file'}</p>
+            {inspect ? <KDNAAssetInspector inspect={inspect} /> : null}
+            {fileId ? (
+              <KDNALoadPlanGate fileId={fileId} endpoint="/api/kdna">
+                {({ status, content }) => {
+                  if (status === 'locked') {
+                    return (
+                      <KDNAPasswordUnlockDialog
+                        fileId={fileId}
+                        endpoint="/api/kdna"
+                        onUnlock={(result) => setUnlock(result.content)}
+                      />
+                    )
+                  }
+                  return <pre>{unlock || content || status}</pre>
+                }}
+              </KDNALoadPlanGate>
+            ) : null}
+          </section>
+        )}
+      </KDNAFileDropzone>
+    </main>
+  )
+}

package/templates/nextjs/package.json

@@ -0,0 +1,19 @@
+{
+  "name": "{{projectName}}",
+  "private": true,
+  "type": "module",
+  "scripts": {
+    "dev": "next dev",
+    "build": "next build",
+    "start": "next start",
+    "test": "node scripts/smoke.mjs"
+  },
+  "dependencies": {
+    "@aikdna/kdna-core": "^0.15.10",
+    "@aikdna/kdna-react": "^0.1.0",
+    "@aikdna/kdna-web-server": "^0.1.0",
+    "next": "^16.2.10",
+    "react": "^19.2.7",
+    "react-dom": "^19.2.7"
+  }
+}

package/templates/nextjs/scripts/smoke.mjs

@@ -0,0 +1,21 @@
+import { createNextHandlers } from '@aikdna/kdna-web-server/nextjs'
+import {
+  KDNAAssetInspector,
+  KDNAFileDropzone,
+  KDNALoadPlanGate,
+  KDNAPasswordUnlockDialog,
+} from '@aikdna/kdna-react'
+
+for (const [name, value] of Object.entries({
+  createNextHandlers,
+  KDNAAssetInspector,
+  KDNAFileDropzone,
+  KDNALoadPlanGate,
+  KDNAPasswordUnlockDialog,
+})) {
+  if (typeof value !== 'function') {
+    throw new Error(`KDNA Next.js template dependency missing export: ${name}`)
+  }
+}
+
+console.log('KDNA Next.js template smoke passed')

package/templates/nextjs-pages/.env.local.example

@@ -0,0 +1,2 @@
+KDNA_STORAGE_DIR=/tmp/kdna-web
+KDNA_ACTIVATION_URL=

package/templates/nextjs-pages/_gitignore

@@ -0,0 +1,3 @@
+node_modules
+.next
+.env.local

package/templates/nextjs-pages/package.json

@@ -0,0 +1,19 @@
+{
+  "name": "{{projectName}}",
+  "private": true,
+  "type": "module",
+  "scripts": {
+    "dev": "next dev",
+    "build": "next build",
+    "start": "next start",
+    "test": "node scripts/smoke.mjs"
+  },
+  "dependencies": {
+    "@aikdna/kdna-core": "^0.15.10",
+    "@aikdna/kdna-react": "^0.1.0",
+    "@aikdna/kdna-web-server": "^0.1.0",
+    "next": "^16.2.10",
+    "react": "^19.2.7",
+    "react-dom": "^19.2.7"
+  }
+}

package/templates/nextjs-pages/pages/api/kdna/[...route].js

@@ -0,0 +1,17 @@
+import { createKDNARouter } from '@aikdna/kdna-web-server/express'
+
+export const config = {
+  api: {
+    bodyParser: false,
+  },
+}
+
+const handler = createKDNARouter({
+  basePath: '/api/kdna',
+  storageDir: process.env.KDNA_STORAGE_DIR ?? '/tmp/kdna-web',
+  activationServerUrl: process.env.KDNA_ACTIVATION_URL,
+})
+
+export default function kdna(req, res) {
+  return handler(req, res)
+}

package/templates/nextjs-pages/pages/index.jsx

@@ -0,0 +1,40 @@
+import {
+  KDNAAssetInspector,
+  KDNAFileDropzone,
+  KDNALoadPlanGate,
+  KDNAPasswordUnlockDialog,
+} from '@aikdna/kdna-react'
+import { useState } from 'react'
+
+export default function Page() {
+  const [unlock, setUnlock] = useState(null)
+
+  return (
+    <main>
+      <KDNAFileDropzone endpoint="/api/kdna" onError={console.error}>
+        {({ fileId, inspect, loading }) => (
+          <section>
+            <p>{loading ? 'Uploading...' : 'Drop or choose a .kdna file'}</p>
+            {inspect ? <KDNAAssetInspector inspect={inspect} /> : null}
+            {fileId ? (
+              <KDNALoadPlanGate fileId={fileId} endpoint="/api/kdna">
+                {({ status, content }) => {
+                  if (status === 'locked') {
+                    return (
+                      <KDNAPasswordUnlockDialog
+                        fileId={fileId}
+                        endpoint="/api/kdna"
+                        onUnlock={(result) => setUnlock(result.content)}
+                      />
+                    )
+                  }
+                  return <pre>{unlock || content || status}</pre>
+                }}
+              </KDNALoadPlanGate>
+            ) : null}
+          </section>
+        )}
+      </KDNAFileDropzone>
+    </main>
+  )
+}

package/templates/nextjs-pages/scripts/smoke.mjs

@@ -0,0 +1,21 @@
+import { createKDNARouter } from '@aikdna/kdna-web-server/express'
+import {
+  KDNAAssetInspector,
+  KDNAFileDropzone,
+  KDNALoadPlanGate,
+  KDNAPasswordUnlockDialog,
+} from '@aikdna/kdna-react'
+
+for (const [name, value] of Object.entries({
+  createKDNARouter,
+  KDNAAssetInspector,
+  KDNAFileDropzone,
+  KDNALoadPlanGate,
+  KDNAPasswordUnlockDialog,
+})) {
+  if (typeof value !== 'function') {
+    throw new Error(`KDNA Next.js Pages template dependency missing export: ${name}`)
+  }
+}
+
+console.log('KDNA Next.js Pages template smoke passed')