create-lumibase 0.6.0

package/README.md

@@ -0,0 +1,84 @@
+# create-lumibase
+
+Scaffold a new [LumiBase](https://lumibase.dev) project — an Edge-native Headless CMS — in seconds.
+
+```bash
+npm create lumibase@latest my-project
+# or
+npx create-lumibase@latest my-project
+# or
+pnpm create lumibase my-project
+```
+
+## What it does
+
+`create-lumibase` bootstraps a ready-to-run LumiBase project into an empty
+directory, the same way `create-next-app` or `create-vite` scaffold their
+respective stacks. It is interactive by default and fully scriptable via flags.
+
+## Interactive flow
+
+Running `npm create lumibase@latest` with no arguments walks you through:
+
+1. **Project name** — validated against npm package-name rules.
+2. **Deployment target** — `Docker` (Node.js + PostgreSQL) or `Cloudflare Workers` (Edge + D1).
+3. **Package manager** — `pnpm` / `npm` / `yarn` / `bun` (the one you invoked is auto-detected).
+4. **Install dependencies** — yes/no.
+5. **Initialize git** — yes/no.
+
+The tool then scaffolds the files, optionally runs `git init` + a first commit,
+installs dependencies, and prints the exact next steps for your chosen stack.
+
+## Templates
+
+| Template | Flag | Stack |
+| --- | --- | --- |
+| **Docker** (default) | `--template default` | Hono + `@hono/node-server`, Drizzle ORM, PostgreSQL, Redis, `docker-compose.yml` |
+| **Cloudflare Workers** | `--template cloudflare` | Hono, Drizzle ORM, D1, `wrangler.toml` |
+
+The `default` template ships a working `posts` resource (`GET`/`POST /posts`)
+that demonstrates LumiBase conventions: `nanoid()` IDs, `site_id`
+multi-tenancy, the `{ data }` / `{ errors }` response format, and Zod
+validation.
+
+## Non-interactive usage
+
+Skip every prompt by passing flags:
+
+```bash
+npx create-lumibase@latest my-blog \
+  --template default \
+  --pm pnpm \
+  --no-install \
+  --no-git
+```
+
+| Flag | Description |
+| --- | --- |
+| `--template <default\|cloudflare>` | Choose the project template. |
+| `--pm <pnpm\|npm\|yarn\|bun>` | Package manager to install with. |
+| `--install` / `--no-install` | Force-enable or skip dependency install. |
+| `--git` / `--no-git` | Force-enable or skip `git init`. |
+| `DEBUG=1` | Print scaffolded file paths and full stack traces on error. |
+
+## After scaffolding (Docker template)
+
+```bash
+cd my-blog
+cp .env.example .env       # fill in your secrets
+pnpm install               # if you skipped --install
+docker compose up -d       # starts Postgres + Redis
+pnpm run db:generate       # generate the first migration
+pnpm run db:migrate        # apply it
+pnpm dev                   # http://localhost:8787
+```
+
+## Requirements
+
+- Node.js `>= 20`
+- For the Docker template: Docker + Docker Compose
+- For the Cloudflare template: a Cloudflare account + `wrangler`
+
+## License
+
+Part of the LumiBase monorepo.

package/bin/create-lumibase.js

@@ -0,0 +1,5 @@
+#!/usr/bin/env node
+import('../dist/index.js').catch((err) => {
+  console.error(err);
+  process.exit(1);
+});

package/dist/index.d.ts

@@ -0,0 +1,12 @@
+type Template = 'default' | 'cloudflare';
+type PackageManager = 'pnpm' | 'npm' | 'yarn' | 'bun';
+interface ProjectConfig {
+    projectName: string;
+    targetDir: string;
+    template: Template;
+    packageManager: PackageManager;
+    installDeps: boolean;
+    initializeGit: boolean;
+}
+
+export type { PackageManager, ProjectConfig, Template };

package/dist/index.js

@@ -0,0 +1,406 @@
+// src/index.ts
+import { resolve as resolve2, basename as basename2 } from "path";
+import { existsSync, readdirSync as readdirSync2 } from "fs";
+import process3 from "process";
+import pc6 from "picocolors";
+import prompts from "prompts";
+
+// src/utils/args.ts
+function parseArgs(argv) {
+  const result = { _: [] };
+  for (let i = 0; i < argv.length; i++) {
+    const arg = argv[i];
+    if (!arg) continue;
+    if (arg.startsWith("--")) {
+      const raw = arg.slice(2);
+      if (raw.startsWith("no-")) {
+        result[raw] = true;
+        continue;
+      }
+      const eqIdx = raw.indexOf("=");
+      if (eqIdx !== -1) {
+        const key = raw.slice(0, eqIdx);
+        const val = raw.slice(eqIdx + 1);
+        result[key] = val;
+        continue;
+      }
+      const next = argv[i + 1];
+      if (next && !next.startsWith("-")) {
+        result[raw] = next;
+        i++;
+      } else {
+        result[raw] = true;
+      }
+    } else {
+      result._.push(arg);
+    }
+  }
+  return result;
+}
+
+// src/utils/validate.ts
+function validateProjectName(name) {
+  if (!name || name.trim().length === 0) {
+    return "Project name cannot be empty.";
+  }
+  if (name.length > 214) {
+    return "Project name must be 214 characters or fewer.";
+  }
+  if (name !== name.toLowerCase()) {
+    return "Project name must be lowercase.";
+  }
+  if (/[^a-z0-9@._/-]/.test(name)) {
+    return "Project name may only contain lowercase letters, numbers, hyphens, underscores, dots, @ and /.";
+  }
+  if (/^[._]/.test(name)) {
+    return "Project name cannot start with a dot or underscore.";
+  }
+  return void 0;
+}
+
+// src/scaffold.ts
+import { mkdirSync, readdirSync, readFileSync, writeFileSync, statSync } from "fs";
+import { resolve, relative, dirname } from "path";
+import { fileURLToPath } from "url";
+import Handlebars from "handlebars";
+import pc2 from "picocolors";
+
+// src/utils/spinner.ts
+import process2 from "process";
+import pc from "picocolors";
+var FRAMES = ["\u280B", "\u2819", "\u2839", "\u2838", "\u283C", "\u2834", "\u2826", "\u2827", "\u2807", "\u280F"];
+var INTERVAL = 80;
+function createSpinner(text) {
+  if (!process2.stdout.isTTY) {
+    process2.stdout.write(`  ${text}...
+`);
+    return {
+      succeed(t) {
+        process2.stdout.write(`  ${pc.green("\u2714")} ${t ?? text}
+`);
+      },
+      fail(t) {
+        process2.stdout.write(`  ${pc.red("\u2716")} ${t ?? text}
+`);
+      },
+      stop() {
+      }
+    };
+  }
+  let frame = 0;
+  const timer = setInterval(() => {
+    process2.stdout.write(`\r  ${pc.cyan(FRAMES[frame % FRAMES.length] ?? "\u280B")} ${text}`);
+    frame++;
+  }, INTERVAL);
+  const clear = () => {
+    clearInterval(timer);
+    process2.stdout.write("\r\x1B[K");
+  };
+  return {
+    succeed(t) {
+      clear();
+      process2.stdout.write(`  ${pc.green("\u2714")} ${t ?? text}
+`);
+    },
+    fail(t) {
+      clear();
+      process2.stdout.write(`  ${pc.red("\u2716")} ${t ?? text}
+`);
+    },
+    stop: clear
+  };
+}
+
+// src/scaffold.ts
+var TEMPLATES_DIR = resolve(
+  dirname(fileURLToPath(import.meta.url)),
+  "templates"
+);
+var RENAME_MAP = {
+  "_gitignore": ".gitignore",
+  "_env.example": ".env.example",
+  "_npmrc": ".npmrc"
+};
+async function scaffold(config) {
+  const spinner = createSpinner(`Scaffolding ${pc2.bold(config.projectName)}`);
+  try {
+    const templateDir = resolve(TEMPLATES_DIR, config.template);
+    const ctx = buildTemplateContext(config);
+    copyDir(templateDir, config.targetDir, ctx);
+    spinner.succeed(`Scaffolded ${pc2.bold(config.projectName)}`);
+  } catch (err) {
+    spinner.fail("Scaffold failed");
+    throw err;
+  }
+}
+function buildTemplateContext(config) {
+  return {
+    projectName: config.projectName,
+    packageManager: config.packageManager,
+    isCloudflare: config.template === "cloudflare",
+    isDefault: config.template === "default",
+    year: (/* @__PURE__ */ new Date()).getFullYear()
+  };
+}
+function copyDir(src, dest, ctx) {
+  mkdirSync(dest, { recursive: true });
+  for (const entry of readdirSync(src)) {
+    const srcPath = resolve(src, entry);
+    const destName = RENAME_MAP[entry] ?? entry;
+    const destPath = resolve(dest, destName);
+    const stat = statSync(srcPath);
+    if (stat.isDirectory()) {
+      copyDir(srcPath, destPath, ctx);
+    } else {
+      copyFile(srcPath, destPath, ctx);
+    }
+  }
+}
+function copyFile(src, dest, ctx) {
+  const raw = readFileSync(src, "utf-8");
+  if (src.endsWith(".hbs")) {
+    const template = Handlebars.compile(raw, { noEscape: true });
+    const rendered = template(ctx);
+    const destWithoutHbs = dest.endsWith(".hbs") ? dest.slice(0, -4) : dest;
+    mkdirSync(dirname(destWithoutHbs), { recursive: true });
+    writeFileSync(destWithoutHbs, rendered, "utf-8");
+  } else {
+    mkdirSync(dirname(dest), { recursive: true });
+    writeFileSync(dest, raw);
+  }
+  if (process.env["DEBUG"]) {
+    console.log(pc2.dim(`  + ${relative(process.cwd(), dest)}`));
+  }
+}
+
+// src/utils/detect-pm.ts
+function detectPackageManager() {
+  const agent = process.env["npm_config_user_agent"] ?? "";
+  if (agent.startsWith("pnpm")) return "pnpm";
+  if (agent.startsWith("yarn")) return "yarn";
+  if (agent.startsWith("bun")) return "bun";
+  return "npm";
+}
+
+// src/install.ts
+import { execa } from "execa";
+import pc3 from "picocolors";
+var INSTALL_CMDS = {
+  pnpm: ["pnpm", ["install"]],
+  npm: ["npm", ["install"]],
+  yarn: ["yarn", ["install"]],
+  bun: ["bun", ["install"]]
+};
+async function installDependencies(config) {
+  const { packageManager, targetDir } = config;
+  const spinner = createSpinner(`Installing dependencies with ${pc3.bold(packageManager)}`);
+  const entry = INSTALL_CMDS[packageManager];
+  if (!entry) {
+    spinner.fail(`Unknown package manager: ${packageManager}`);
+    return;
+  }
+  const [cmd, args] = entry;
+  try {
+    await execa(cmd, args, {
+      cwd: targetDir,
+      stdio: process.env["DEBUG"] ? "inherit" : "pipe"
+    });
+    spinner.succeed(`Dependencies installed`);
+  } catch (err) {
+    spinner.fail("Dependency install failed");
+    console.error(
+      pc3.dim(`  Run ${pc3.cyan(`${packageManager} install`)} manually after fixing the error.`)
+    );
+    if (process.env["DEBUG"]) throw err;
+  }
+}
+
+// src/git.ts
+import { execa as execa2 } from "execa";
+import pc4 from "picocolors";
+async function initGit(targetDir) {
+  const spinner = createSpinner("Initialising git repository");
+  try {
+    await execa2("git", ["init"], { cwd: targetDir, stdio: "pipe" });
+    await execa2("git", ["add", "-A"], { cwd: targetDir, stdio: "pipe" });
+    await execa2(
+      "git",
+      ["commit", "--allow-empty", "-m", "chore: initialise LumiBase project"],
+      { cwd: targetDir, stdio: "pipe" }
+    );
+    spinner.succeed("Git repository initialised");
+  } catch {
+    spinner.fail("Git init skipped (git may not be installed)");
+    console.error(pc4.dim("  Run `git init` manually when ready."));
+  }
+}
+
+// src/utils/print.ts
+import pc5 from "picocolors";
+function printNextSteps(config) {
+  const { projectName, packageManager, installDeps, template } = config;
+  const isCurrentDir = projectName === ".";
+  const devCmd = template === "cloudflare" ? `${packageManager} run dev` : "docker compose up -d && pnpm dev";
+  console.log();
+  console.log(pc5.bold(pc5.green("\u2714 Project created!")));
+  console.log();
+  console.log(pc5.bold("  Next steps:"));
+  console.log();
+  let step = 1;
+  if (!isCurrentDir) {
+    console.log(`  ${step++}. ${pc5.cyan(`cd ${projectName}`)}`);
+  }
+  console.log(`  ${step++}. ${pc5.cyan("cp .env.example .env")}  ${pc5.dim("\u2190 fill in your secrets")}`);
+  if (!installDeps) {
+    console.log(`  ${step++}. ${pc5.cyan(`${packageManager} install`)}`);
+  }
+  if (template === "default") {
+    console.log(`  ${step++}. ${pc5.cyan("docker compose up -d")}  ${pc5.dim("\u2190 starts Postgres + Redis")}`);
+    console.log(`  ${step++}. ${pc5.cyan(`${packageManager} run db:migrate`)}`);
+  }
+  console.log(`  ${step++}. ${pc5.cyan(devCmd)}`);
+  console.log();
+  console.log(
+    pc5.dim("  API  ") + pc5.underline("http://localhost:8787")
+  );
+  console.log();
+  console.log(pc5.dim("  Docs \u2192 https://lumibase.dev/docs"));
+  console.log();
+}
+
+// src/index.ts
+async function main() {
+  const argv = parseArgs(process3.argv.slice(2));
+  console.log();
+  console.log(
+    pc6.bold(pc6.cyan(" LumiBase")) + pc6.dim(" \u2014 Edge-native Headless CMS")
+  );
+  console.log();
+  let projectName = argv._[0] ?? "";
+  let targetDir = "";
+  if (!projectName) {
+    const res = await prompts(
+      {
+        type: "text",
+        name: "projectName",
+        message: "Project name:",
+        initial: "my-lumibase",
+        validate: (v) => validateProjectName(v) ?? true
+      },
+      { onCancel }
+    );
+    projectName = res.projectName;
+  }
+  const nameError = validateProjectName(projectName);
+  if (nameError) {
+    console.error(pc6.red(`\u2716 ${nameError}`));
+    process3.exit(1);
+  }
+  targetDir = resolve2(process3.cwd(), projectName);
+  if (existsSync(targetDir) && readdirSync2(targetDir).length > 0) {
+    const { overwrite } = await prompts(
+      {
+        type: "confirm",
+        name: "overwrite",
+        message: `Directory ${pc6.yellow(projectName)} is not empty. Continue and overwrite?`,
+        initial: false
+      },
+      { onCancel }
+    );
+    if (!overwrite) {
+      console.log(pc6.dim("Cancelled."));
+      process3.exit(0);
+    }
+  }
+  const template = argv.template ?? (await prompts(
+    {
+      type: "select",
+      name: "template",
+      message: "Deployment target:",
+      choices: [
+        {
+          title: `${pc6.bold("Docker")}  ${pc6.dim("Node.js + PostgreSQL (recommended)")}`,
+          value: "default"
+        },
+        {
+          title: `${pc6.bold("Cloudflare Workers")}  ${pc6.dim("Edge + D1")}`,
+          value: "cloudflare"
+        }
+      ],
+      initial: 0
+    },
+    { onCancel }
+  )).template;
+  const detectedPm = detectPackageManager();
+  const packageManager = argv.pm ?? (await prompts(
+    {
+      type: "select",
+      name: "packageManager",
+      message: "Package manager:",
+      choices: [
+        ["pnpm", "Recommended"],
+        ["npm", ""],
+        ["yarn", ""],
+        ["bun", "Fast"]
+      ].map(([value, hint]) => ({
+        title: value === detectedPm ? `${value} ${pc6.dim(`(detected${hint ? ", " + hint : ""})`)}` : hint ? `${value} ${pc6.dim(`(${hint})`)}` : value,
+        value
+      })),
+      initial: ["pnpm", "npm", "yarn", "bun"].indexOf(
+        detectedPm
+      )
+    },
+    { onCancel }
+  )).packageManager;
+  const installDeps = argv["no-install"] === true ? false : argv.install === true ? true : (await prompts(
+    {
+      type: "confirm",
+      name: "installDeps",
+      message: "Install dependencies?",
+      initial: true
+    },
+    { onCancel }
+  )).installDeps;
+  const initializeGit = argv["no-git"] === true ? false : argv.git === true ? true : (await prompts(
+    {
+      type: "confirm",
+      name: "initializeGit",
+      message: "Initialize a git repository?",
+      initial: true
+    },
+    { onCancel }
+  )).initializeGit;
+  const config = {
+    projectName: basename2(targetDir),
+    targetDir,
+    template,
+    packageManager,
+    installDeps,
+    initializeGit
+  };
+  console.log();
+  await scaffold(config);
+  if (initializeGit) {
+    await initGit(targetDir);
+  }
+  if (installDeps) {
+    await installDependencies(config);
+  }
+  printNextSteps(config);
+}
+function onCancel() {
+  console.log(pc6.dim("\nCancelled."));
+  process3.exit(0);
+}
+main().catch((err) => {
+  if (process3.env["DEBUG"]) {
+    console.error(err);
+  } else {
+    console.error(
+      pc6.red("\n\u2716 Something went wrong:"),
+      err instanceof Error ? err.message : String(err)
+    );
+    console.error(pc6.dim("  Run with DEBUG=1 for full stack trace."));
+  }
+  process3.exit(1);
+});

package/dist/templates/cloudflare/_env.example

@@ -0,0 +1,4 @@
+# Wrangler dev secrets (not committed — use `wrangler secret put` for production)
+JWT_SECRET=change-me-in-production
+ADMIN_EMAIL=admin@example.com
+ADMIN_PASSWORD=change-me

package/dist/templates/cloudflare/_gitignore

@@ -0,0 +1,7 @@
+node_modules
+dist
+.env
+.dev.vars
+*.log
+.DS_Store
+.wrangler

package/dist/templates/cloudflare/package.json.hbs

@@ -0,0 +1,27 @@
+{
+  "name": "{{projectName}}",
+  "version": "0.1.0",
+  "private": true,
+  "type": "module",
+  "scripts": {
+    "dev": "wrangler dev",
+    "deploy": "wrangler deploy",
+    "db:migrate": "wrangler d1 migrations apply lumibase-db",
+    "db:migrate:remote": "wrangler d1 migrations apply lumibase-db --remote",
+    "typecheck": "tsc --noEmit"
+  },
+  "dependencies": {
+    "hono": "^4.0.0",
+    "drizzle-orm": "^0.44.0",
+    "nanoid": "^5.1.5",
+    "uuidv7": "^1.0.2",
+    "zod": "^3.25.51"
+  },
+  "devDependencies": {
+    "@cloudflare/workers-types": "^4.0.0",
+    "@types/node": "^22.0.0",
+    "drizzle-kit": "^0.31.0",
+    "typescript": "^5.6.2",
+    "wrangler": "^4.0.0"
+  }
+}

package/dist/templates/cloudflare/src/index.ts.hbs

@@ -0,0 +1,16 @@
+import { Hono } from 'hono';
+import { logger } from 'hono/logger';
+
+export interface Env {
+  DB: D1Database;
+  JWT_SECRET: string;
+  ADMIN_EMAIL: string;
+}
+
+const app = new Hono<{ Bindings: Env }>();
+
+app.use('*', logger());
+
+app.get('/', (c) => c.json({ name: '{{projectName}}', status: 'ok' }));
+
+export default app;

package/dist/templates/cloudflare/tsconfig.json

@@ -0,0 +1,13 @@
+{
+  "compilerOptions": {
+    "target": "ES2022",
+    "module": "ESNext",
+    "moduleResolution": "Bundler",
+    "strict": true,
+    "esModuleInterop": true,
+    "skipLibCheck": true,
+    "resolveJsonModule": true,
+    "types": ["@cloudflare/workers-types"]
+  },
+  "include": ["src", "worker-configuration.d.ts"]
+}

package/dist/templates/cloudflare/wrangler.toml.hbs

@@ -0,0 +1,13 @@
+name = "{{projectName}}"
+main = "src/index.ts"
+compatibility_date = "2025-01-01"
+compatibility_flags = ["nodejs_compat"]
+
+[[d1_databases]]
+binding = "DB"
+database_name = "lumibase-db"
+database_id = "REPLACE_WITH_YOUR_D1_ID"
+
+[vars]
+JWT_SECRET = "change-me-in-production"
+ADMIN_EMAIL = "admin@example.com"

package/dist/templates/default/_env.example

@@ -0,0 +1,14 @@
+# Database
+DATABASE_URL=postgresql://lumibase:lumibase@localhost:5432/lumibase
+
+# Redis (optional — for queue/cache)
+REDIS_URL=redis://localhost:6379
+
+# Auth
+JWT_SECRET=change-me-in-production
+ADMIN_EMAIL=admin@example.com
+ADMIN_PASSWORD=change-me
+
+# App
+PORT=8787
+NODE_ENV=development

package/dist/templates/default/_gitignore

@@ -0,0 +1,5 @@
+node_modules
+dist
+.env
+*.log
+.DS_Store

package/dist/templates/default/docker-compose.yml

@@ -0,0 +1,21 @@
+services:
+  postgres:
+    image: postgres:16-alpine
+    restart: unless-stopped
+    environment:
+      POSTGRES_USER: lumibase
+      POSTGRES_PASSWORD: lumibase
+      POSTGRES_DB: lumibase
+    ports:
+      - "5432:5432"
+    volumes:
+      - postgres_data:/var/lib/postgresql/data
+
+  redis:
+    image: redis:7-alpine
+    restart: unless-stopped
+    ports:
+      - "6379:6379"
+
+volumes:
+  postgres_data:

package/dist/templates/default/drizzle.config.ts

@@ -0,0 +1,18 @@
+import { defineConfig } from 'drizzle-kit';
+
+const databaseUrl = process.env['DATABASE_URL'];
+
+if (!databaseUrl) {
+  throw new Error('DATABASE_URL is required to run drizzle-kit commands.');
+}
+
+export default defineConfig({
+  schema: './src/db/schema.ts',
+  out: './drizzle',
+  dialect: 'postgresql',
+  dbCredentials: {
+    url: databaseUrl,
+  },
+  strict: true,
+  verbose: true,
+});

package/dist/templates/default/package.json.hbs

@@ -0,0 +1,30 @@
+{
+  "name": "{{projectName}}",
+  "version": "0.1.0",
+  "private": true,
+  "type": "module",
+  "scripts": {
+    "dev": "tsx watch --env-file=.env src/server.ts",
+    "build": "tsc",
+    "start": "node --env-file=.env dist/server.js",
+    "db:generate": "drizzle-kit generate",
+    "db:migrate": "tsx --env-file=.env src/db/migrate.ts",
+    "db:studio": "drizzle-kit studio",
+    "typecheck": "tsc --noEmit"
+  },
+  "dependencies": {
+    "@hono/node-server": "^1.12.0",
+    "hono": "^4.0.0",
+    "drizzle-orm": "^0.44.0",
+    "postgres": "^3.4.7",
+    "nanoid": "^5.1.5",
+    "uuidv7": "^1.0.2",
+    "zod": "^3.25.51"
+  },
+  "devDependencies": {
+    "@types/node": "^22.0.0",
+    "drizzle-kit": "^0.31.0",
+    "tsx": "^4.19.4",
+    "typescript": "^5.6.2"
+  }
+}

package/dist/templates/default/src/db/client.ts

@@ -0,0 +1,14 @@
+import { drizzle } from 'drizzle-orm/postgres-js';
+import postgres from 'postgres';
+import * as schema from './schema.js';
+
+const databaseUrl = process.env['DATABASE_URL'];
+
+if (!databaseUrl) {
+  throw new Error('DATABASE_URL is required. Copy .env.example to .env first.');
+}
+
+const queryClient = postgres(databaseUrl);
+
+export const db = drizzle(queryClient, { schema });
+export { schema };

package/dist/templates/default/src/db/migrate.ts

@@ -0,0 +1,24 @@
+import { drizzle } from 'drizzle-orm/postgres-js';
+import { migrate } from 'drizzle-orm/postgres-js/migrator';
+import postgres from 'postgres';
+
+const databaseUrl = process.env['DATABASE_URL'];
+
+if (!databaseUrl) {
+  throw new Error('DATABASE_URL is required. Copy .env.example to .env first.');
+}
+
+// `max: 1` — migrations must run on a single connection.
+const migrationClient = postgres(databaseUrl, { max: 1 });
+
+async function main() {
+  console.log('Running migrations...');
+  await migrate(drizzle(migrationClient), { migrationsFolder: './drizzle' });
+  console.log('Migrations complete.');
+  await migrationClient.end();
+}
+
+main().catch((err) => {
+  console.error('Migration failed:', err);
+  process.exit(1);
+});

package/dist/templates/default/src/db/schema.ts

@@ -0,0 +1,34 @@
+import { index, pgTable, text, timestamp } from 'drizzle-orm/pg-core';
+import { nanoid } from 'nanoid';
+
+/**
+ * LumiBase convention helpers.
+ * - IDs: nanoid() for domain tables (never serial/auto-increment).
+ * - Multi-tenancy: every domain table carries a `site_id`.
+ */
+const id = () =>
+  text('id')
+    .$defaultFn(() => nanoid())
+    .primaryKey();
+const createdAt = () => timestamp('created_at').defaultNow().notNull();
+const updatedAt = () => timestamp('updated_at').defaultNow().notNull();
+
+export const posts = pgTable(
+  'posts',
+  {
+    id: id(),
+    siteId: text('site_id').notNull(),
+    title: text('title').notNull(),
+    slug: text('slug').notNull(),
+    body: text('body').notNull().default(''),
+    status: text('status').notNull().default('draft'),
+    createdAt: createdAt(),
+    updatedAt: updatedAt(),
+  },
+  (t) => ({
+    siteSlugIdx: index('posts_site_slug_idx').on(t.siteId, t.slug),
+  }),
+);
+
+export type Post = typeof posts.$inferSelect;
+export type NewPost = typeof posts.$inferInsert;

package/dist/templates/default/src/server.ts.hbs

@@ -0,0 +1,48 @@
+import { serve } from '@hono/node-server';
+import { Hono } from 'hono';
+import { logger } from 'hono/logger';
+import { eq } from 'drizzle-orm';
+import { z } from 'zod';
+import { db } from './db/client.js';
+import { posts } from './db/schema.js';
+
+const app = new Hono();
+
+app.use('*', logger());
+
+app.get('/', (c) => c.json({ name: '{{projectName}}', status: 'ok' }));
+
+// Demo CMS resource — every query is scoped by site_id (multi-tenant rule).
+const DEMO_SITE_ID = 'default';
+
+app.get('/posts', async (c) => {
+  const data = await db
+    .select()
+    .from(posts)
+    .where(eq(posts.siteId, DEMO_SITE_ID));
+  return c.json({ data });
+});
+
+const createPost = z.object({
+  title: z.string().min(1),
+  slug: z.string().min(1),
+  body: z.string().optional(),
+});
+
+app.post('/posts', async (c) => {
+  const parsed = createPost.safeParse(await c.req.json());
+  if (!parsed.success) {
+    return c.json({ errors: parsed.error.issues }, 400);
+  }
+  const [created] = await db
+    .insert(posts)
+    .values({ ...parsed.data, siteId: DEMO_SITE_ID })
+    .returning();
+  return c.json({ data: created }, 201);
+});
+
+const port = Number(process.env['PORT'] ?? 8787);
+
+serve({ fetch: app.fetch, port }, () => {
+  console.log(`🚀  LumiBase listening on http://localhost:${port}`);
+});

package/dist/templates/default/tsconfig.json

@@ -0,0 +1,14 @@
+{
+  "compilerOptions": {
+    "target": "ES2022",
+    "module": "ESNext",
+    "moduleResolution": "Bundler",
+    "strict": true,
+    "esModuleInterop": true,
+    "skipLibCheck": true,
+    "outDir": "dist",
+    "rootDir": "src",
+    "resolveJsonModule": true
+  },
+  "include": ["src"]
+}

package/package.json

@@ -0,0 +1,54 @@
+{
+  "name": "create-lumibase",
+  "version": "0.6.0",
+  "description": "Scaffold a new LumiBase project — Edge-native Headless CMS",
+  "type": "module",
+  "bin": {
+    "create-lumibase": "./bin/create-lumibase.js"
+  },
+  "main": "./dist/index.js",
+  "types": "./dist/index.d.ts",
+  "publishConfig": {
+    "access": "public"
+  },
+  "scripts": {
+    "build": "tsup src/index.ts --format esm --dts --clean && node scripts/postbuild.mjs",
+    "dev": "tsup src/index.ts --format esm --watch",
+    "test": "vitest --run",
+    "typecheck": "tsc --noEmit",
+    "clean": "rm -rf .turbo dist"
+  },
+  "dependencies": {
+    "handlebars": "^4.7.8",
+    "picocolors": "^1.1.1",
+    "prompts": "^2.4.2",
+    "execa": "^9.5.2"
+  },
+  "devDependencies": {
+    "@types/node": "^22.0.0",
+    "@types/prompts": "^2.4.9",
+    "tsup": "^8.5.1",
+    "typescript": "^5.6.2",
+    "vitest": "^3.2.6"
+  },
+  "files": [
+    "dist",
+    "bin",
+    "templates"
+  ],
+  "engines": {
+    "node": ">=20"
+  },
+  "keywords": [
+    "lumibase",
+    "cms",
+    "headless-cms",
+    "scaffold",
+    "create"
+  ],
+  "repository": {
+    "type": "git",
+    "url": "https://github.com/lumibase/lumibase.git",
+    "directory": "packages/create-lumibase"
+  }
+}

package/templates/cloudflare/_env.example

@@ -0,0 +1,4 @@
+# Wrangler dev secrets (not committed — use `wrangler secret put` for production)
+JWT_SECRET=change-me-in-production
+ADMIN_EMAIL=admin@example.com
+ADMIN_PASSWORD=change-me

package/templates/cloudflare/_gitignore

@@ -0,0 +1,7 @@
+node_modules
+dist
+.env
+.dev.vars
+*.log
+.DS_Store
+.wrangler

package/templates/cloudflare/package.json.hbs

@@ -0,0 +1,27 @@
+{
+  "name": "{{projectName}}",
+  "version": "0.1.0",
+  "private": true,
+  "type": "module",
+  "scripts": {
+    "dev": "wrangler dev",
+    "deploy": "wrangler deploy",
+    "db:migrate": "wrangler d1 migrations apply lumibase-db",
+    "db:migrate:remote": "wrangler d1 migrations apply lumibase-db --remote",
+    "typecheck": "tsc --noEmit"
+  },
+  "dependencies": {
+    "hono": "^4.0.0",
+    "drizzle-orm": "^0.44.0",
+    "nanoid": "^5.1.5",
+    "uuidv7": "^1.0.2",
+    "zod": "^3.25.51"
+  },
+  "devDependencies": {
+    "@cloudflare/workers-types": "^4.0.0",
+    "@types/node": "^22.0.0",
+    "drizzle-kit": "^0.31.0",
+    "typescript": "^5.6.2",
+    "wrangler": "^4.0.0"
+  }
+}

package/templates/cloudflare/src/index.ts.hbs

@@ -0,0 +1,16 @@
+import { Hono } from 'hono';
+import { logger } from 'hono/logger';
+
+export interface Env {
+  DB: D1Database;
+  JWT_SECRET: string;
+  ADMIN_EMAIL: string;
+}
+
+const app = new Hono<{ Bindings: Env }>();
+
+app.use('*', logger());
+
+app.get('/', (c) => c.json({ name: '{{projectName}}', status: 'ok' }));
+
+export default app;

package/templates/cloudflare/tsconfig.json

@@ -0,0 +1,13 @@
+{
+  "compilerOptions": {
+    "target": "ES2022",
+    "module": "ESNext",
+    "moduleResolution": "Bundler",
+    "strict": true,
+    "esModuleInterop": true,
+    "skipLibCheck": true,
+    "resolveJsonModule": true,
+    "types": ["@cloudflare/workers-types"]
+  },
+  "include": ["src", "worker-configuration.d.ts"]
+}

package/templates/cloudflare/wrangler.toml.hbs

@@ -0,0 +1,13 @@
+name = "{{projectName}}"
+main = "src/index.ts"
+compatibility_date = "2025-01-01"
+compatibility_flags = ["nodejs_compat"]
+
+[[d1_databases]]
+binding = "DB"
+database_name = "lumibase-db"
+database_id = "REPLACE_WITH_YOUR_D1_ID"
+
+[vars]
+JWT_SECRET = "change-me-in-production"
+ADMIN_EMAIL = "admin@example.com"

package/templates/default/_env.example

@@ -0,0 +1,14 @@
+# Database
+DATABASE_URL=postgresql://lumibase:lumibase@localhost:5432/lumibase
+
+# Redis (optional — for queue/cache)
+REDIS_URL=redis://localhost:6379
+
+# Auth
+JWT_SECRET=change-me-in-production
+ADMIN_EMAIL=admin@example.com
+ADMIN_PASSWORD=change-me
+
+# App
+PORT=8787
+NODE_ENV=development

package/templates/default/_gitignore

@@ -0,0 +1,5 @@
+node_modules
+dist
+.env
+*.log
+.DS_Store

package/templates/default/docker-compose.yml

@@ -0,0 +1,21 @@
+services:
+  postgres:
+    image: postgres:16-alpine
+    restart: unless-stopped
+    environment:
+      POSTGRES_USER: lumibase
+      POSTGRES_PASSWORD: lumibase
+      POSTGRES_DB: lumibase
+    ports:
+      - "5432:5432"
+    volumes:
+      - postgres_data:/var/lib/postgresql/data
+
+  redis:
+    image: redis:7-alpine
+    restart: unless-stopped
+    ports:
+      - "6379:6379"
+
+volumes:
+  postgres_data:

package/templates/default/drizzle.config.ts

@@ -0,0 +1,18 @@
+import { defineConfig } from 'drizzle-kit';
+
+const databaseUrl = process.env['DATABASE_URL'];
+
+if (!databaseUrl) {
+  throw new Error('DATABASE_URL is required to run drizzle-kit commands.');
+}
+
+export default defineConfig({
+  schema: './src/db/schema.ts',
+  out: './drizzle',
+  dialect: 'postgresql',
+  dbCredentials: {
+    url: databaseUrl,
+  },
+  strict: true,
+  verbose: true,
+});

package/templates/default/package.json.hbs

@@ -0,0 +1,30 @@
+{
+  "name": "{{projectName}}",
+  "version": "0.1.0",
+  "private": true,
+  "type": "module",
+  "scripts": {
+    "dev": "tsx watch --env-file=.env src/server.ts",
+    "build": "tsc",
+    "start": "node --env-file=.env dist/server.js",
+    "db:generate": "drizzle-kit generate",
+    "db:migrate": "tsx --env-file=.env src/db/migrate.ts",
+    "db:studio": "drizzle-kit studio",
+    "typecheck": "tsc --noEmit"
+  },
+  "dependencies": {
+    "@hono/node-server": "^1.12.0",
+    "hono": "^4.0.0",
+    "drizzle-orm": "^0.44.0",
+    "postgres": "^3.4.7",
+    "nanoid": "^5.1.5",
+    "uuidv7": "^1.0.2",
+    "zod": "^3.25.51"
+  },
+  "devDependencies": {
+    "@types/node": "^22.0.0",
+    "drizzle-kit": "^0.31.0",
+    "tsx": "^4.19.4",
+    "typescript": "^5.6.2"
+  }
+}

package/templates/default/src/db/client.ts

@@ -0,0 +1,14 @@
+import { drizzle } from 'drizzle-orm/postgres-js';
+import postgres from 'postgres';
+import * as schema from './schema.js';
+
+const databaseUrl = process.env['DATABASE_URL'];
+
+if (!databaseUrl) {
+  throw new Error('DATABASE_URL is required. Copy .env.example to .env first.');
+}
+
+const queryClient = postgres(databaseUrl);
+
+export const db = drizzle(queryClient, { schema });
+export { schema };

package/templates/default/src/db/migrate.ts

@@ -0,0 +1,24 @@
+import { drizzle } from 'drizzle-orm/postgres-js';
+import { migrate } from 'drizzle-orm/postgres-js/migrator';
+import postgres from 'postgres';
+
+const databaseUrl = process.env['DATABASE_URL'];
+
+if (!databaseUrl) {
+  throw new Error('DATABASE_URL is required. Copy .env.example to .env first.');
+}
+
+// `max: 1` — migrations must run on a single connection.
+const migrationClient = postgres(databaseUrl, { max: 1 });
+
+async function main() {
+  console.log('Running migrations...');
+  await migrate(drizzle(migrationClient), { migrationsFolder: './drizzle' });
+  console.log('Migrations complete.');
+  await migrationClient.end();
+}
+
+main().catch((err) => {
+  console.error('Migration failed:', err);
+  process.exit(1);
+});

package/templates/default/src/db/schema.ts

@@ -0,0 +1,34 @@
+import { index, pgTable, text, timestamp } from 'drizzle-orm/pg-core';
+import { nanoid } from 'nanoid';
+
+/**
+ * LumiBase convention helpers.
+ * - IDs: nanoid() for domain tables (never serial/auto-increment).
+ * - Multi-tenancy: every domain table carries a `site_id`.
+ */
+const id = () =>
+  text('id')
+    .$defaultFn(() => nanoid())
+    .primaryKey();
+const createdAt = () => timestamp('created_at').defaultNow().notNull();
+const updatedAt = () => timestamp('updated_at').defaultNow().notNull();
+
+export const posts = pgTable(
+  'posts',
+  {
+    id: id(),
+    siteId: text('site_id').notNull(),
+    title: text('title').notNull(),
+    slug: text('slug').notNull(),
+    body: text('body').notNull().default(''),
+    status: text('status').notNull().default('draft'),
+    createdAt: createdAt(),
+    updatedAt: updatedAt(),
+  },
+  (t) => ({
+    siteSlugIdx: index('posts_site_slug_idx').on(t.siteId, t.slug),
+  }),
+);
+
+export type Post = typeof posts.$inferSelect;
+export type NewPost = typeof posts.$inferInsert;

package/templates/default/src/server.ts.hbs

@@ -0,0 +1,48 @@
+import { serve } from '@hono/node-server';
+import { Hono } from 'hono';
+import { logger } from 'hono/logger';
+import { eq } from 'drizzle-orm';
+import { z } from 'zod';
+import { db } from './db/client.js';
+import { posts } from './db/schema.js';
+
+const app = new Hono();
+
+app.use('*', logger());
+
+app.get('/', (c) => c.json({ name: '{{projectName}}', status: 'ok' }));
+
+// Demo CMS resource — every query is scoped by site_id (multi-tenant rule).
+const DEMO_SITE_ID = 'default';
+
+app.get('/posts', async (c) => {
+  const data = await db
+    .select()
+    .from(posts)
+    .where(eq(posts.siteId, DEMO_SITE_ID));
+  return c.json({ data });
+});
+
+const createPost = z.object({
+  title: z.string().min(1),
+  slug: z.string().min(1),
+  body: z.string().optional(),
+});
+
+app.post('/posts', async (c) => {
+  const parsed = createPost.safeParse(await c.req.json());
+  if (!parsed.success) {
+    return c.json({ errors: parsed.error.issues }, 400);
+  }
+  const [created] = await db
+    .insert(posts)
+    .values({ ...parsed.data, siteId: DEMO_SITE_ID })
+    .returning();
+  return c.json({ data: created }, 201);
+});
+
+const port = Number(process.env['PORT'] ?? 8787);
+
+serve({ fetch: app.fetch, port }, () => {
+  console.log(`🚀  LumiBase listening on http://localhost:${port}`);
+});

package/templates/default/tsconfig.json

@@ -0,0 +1,14 @@
+{
+  "compilerOptions": {
+    "target": "ES2022",
+    "module": "ESNext",
+    "moduleResolution": "Bundler",
+    "strict": true,
+    "esModuleInterop": true,
+    "skipLibCheck": true,
+    "outDir": "dist",
+    "rootDir": "src",
+    "resolveJsonModule": true
+  },
+  "include": ["src"]
+}