create-m5kdev 0.38.22 → 0.40.0

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "create-m5kdev",
-  "version": "0.38.22",
+  "version": "0.40.0",
   "license": "GPL-3.0-only",
   "engines": {
     "node": ">=24"

package/templates/minimal-app/apps/e2e/tests/files.spec.ts.tpl

@@ -32,4 +32,8 @@ test("upload a file and see it inventoried", async ({ page, request }) => {
   await expect(page.getByTestId("file-row").first()).toContainText("hello.png", {
     timeout: 15_000,
   });
+  await expect(page.getByTestId("file-download")).toHaveAttribute(
+    "href",
+    /\/files\/[0-9a-f-]{36}$/i
+  );
 });

package/templates/minimal-app/apps/server/AGENTS.md.tpl

@@ -20,9 +20,6 @@ apps/server/src/modules/<module>/
 ├── <module>.repository.ts
 ├── <module>.service.ts
 ├── <module>.trpc.ts
-// m5k:mcp:start
-├── <module>.mcp.ts
-// m5k:mcp:end
 └── <module>.module.ts
 ```
 
@@ -32,7 +29,7 @@ apps/server/src/modules/<module>/
 - Services own business rules, orchestration, and context-aware defaults.
 - tRPC files own transport only and must delegate to services.
 // m5k:mcp:start
-- MCP call maps live in `<module>.mcp.ts` and are contributed from `mcp()` / `mcpUser()`. Delegate to Procedures or unguarded service methods; do not scrape Service properties.
+- Opt a tRPC procedure into the MCP catalog with `.meta({ mcp: { name, description } })`. The MCP tool is the procedure; Grant checks always run. Write instruction-style descriptions for MCP clients.
 // m5k:mcp:end
 - Register Core Modules and app modules in `apps/server/src/app.ts` via `createBackendApp(config, [modules])`. Do not use `backendApp.use`. Optional Backend Modules (`@m5kdev/module-*`) are not scaffolded; add them only when the product needs Clay, Docx, Pdf, Social, or Video.
 // m5k:ai:start
@@ -57,7 +54,7 @@ apps/server/src/modules/<module>/
 - After changing Drizzle tables, run `pnpm --filter ./apps/server drizzle:generate` then `drizzle:migrate` — do not hand-edit SQL migrations in this repo.
 
 // m5k:mcp:start
-- `McpModule` is registered in `app.ts`. MCP clients authenticate with Better Auth MCP OAuth (not API keys). Compose `auth.oauth.db` plus `mcpAllowlistEntries`. Contribute Organization-scoped calls from `posts.mcp.ts`. Omit the module to disable MCP.
+- `McpModule` is registered in `app.ts`. MCP clients authenticate with Better Auth MCP OAuth (not API keys). Compose `auth.oauth.db` plus `mcpAllowlistEntries`. Posts exposes `list-posts` / `create-post` through `meta.mcp` on its tRPC procedures. Omit the module to disable MCP.
 // m5k:mcp:end
 
 // m5k:notifications:start

package/templates/minimal-app/apps/server/src/modules/posts/posts.module.ts.tpl

@@ -1,4 +1,3 @@
-// biome-ignore-all assist/source/organizeImports: feature-gated posts.mcp import stays in marker blocks
 import { createBackendRouterMap } from "@m5kdev/backend/app";
 import {
   BaseModule,
@@ -11,10 +10,6 @@ import { postsGrants } from "./posts.grants";
 import { PostsRepository } from "./posts.repository";
 import { PostsService } from "./posts.service";
 import { createPostsTRPC } from "./posts.trpc";
-// m5k:mcp:start
-import type { ModuleMcpContext } from "@m5kdev/backend/modules/base/base.module";
-import { createPostsMcp } from "./posts.mcp";
-// m5k:mcp:end
 
 type PostsModuleDeps = Record<string, never>;
 type PostsModuleTables = typeof postsTables;
@@ -59,10 +54,4 @@ export class PostsModule extends BaseModule<
   override trpc({ trpc, services }: ModuleTRPCContext<PostsModuleDeps, PostsModuleServices>) {
     return createBackendRouterMap("posts", createPostsTRPC(trpc, services.posts));
   }
-
-  // m5k:mcp:start
-  override mcp({ services }: ModuleMcpContext<PostsModuleDeps, PostsModuleServices>) {
-    return createPostsMcp(services.posts);
-  }
-  // m5k:mcp:end
 }

package/templates/minimal-app/apps/server/src/modules/posts/posts.trpc.ts.tpl

@@ -8,11 +8,29 @@ export function createPostsTRPC(
 ) {
   return router({
     list: procedure
+      // m5k:mcp:start
+      .meta({
+        mcp: {
+          name: "list-posts",
+          description:
+            "List posts in an Organization. Call list-organizations first to learn organizationId values, then pass one as organizationId.",
+        },
+      })
+      // m5k:mcp:end
       .input(postSchemas.input.list)
       .output(postSchemas.output.list)
       .query(async ({ ctx, input }) => handleTRPCResult(await postsService.list(input ?? {}, ctx))),
 
     create: procedure
+      // m5k:mcp:start
+      .meta({
+        mcp: {
+          name: "create-post",
+          description:
+            "Create a draft post in an Organization. Call list-organizations first to learn organizationId values, then pass one as organizationId.",
+        },
+      })
+      // m5k:mcp:end
       .input(postSchemas.input.create)
       .output(postSchemas.output.single)
       .mutation(async ({ ctx, input }) => handleTRPCResult(await postsService.create(input, ctx))),

package/templates/minimal-app/apps/webapp/src/modules/files/FilesRoute.tsx.tpl

@@ -79,6 +79,30 @@ export function FilesRoute() {
                   </Chip>
                 ) : null}
               </Card.Header>
+              <Card.Content className="flex flex-wrap items-center gap-3">
+                <img
+                  src={row.downloadUrl}
+                  alt={row.originalName}
+                  className="h-16 w-16 rounded-md object-cover"
+                  data-testid="file-preview"
+                />
+                <a
+                  href={row.downloadUrl}
+                  data-testid="file-download"
+                  className="text-sm font-medium underline"
+                >
+                  {t("files.row.open")}
+                </a>
+                <Button
+                  size="sm"
+                  variant="ghost"
+                  data-testid="file-delete"
+                  isDisabled={files.isDeleting}
+                  onPress={() => files.remove(row.id)}
+                >
+                  {t("files.row.delete")}
+                </Button>
+              </Card.Content>
             </Card>
           ))}
         </div>

package/templates/minimal-app/apps/webapp/src/modules/files/hooks/useFilesRoute.ts.tpl

@@ -1,4 +1,6 @@
-import { useFileUpload } from "@m5kdev/frontend/modules/file/hooks/useUpload";
+import { useAppConfig } from "@m5kdev/frontend/modules/app/hooks/useAppConfig";
+import { fileCookieDownloadUrl } from "@m5kdev/frontend/modules/file/hooks/useS3DownloadUrl";
+import { useS3Upload } from "@m5kdev/frontend/modules/file/hooks/useS3Upload";
 import type { AppRouter } from "{{PACKAGE_SCOPE}}/server/types";
 import { useMutation, useQuery, useQueryClient } from "@tanstack/react-query";
 import type { inferRouterOutputs } from "@trpc/server";
@@ -9,25 +11,32 @@ import { useTRPC } from "@/utils/trpc";
 type FileListOutput = inferRouterOutputs<AppRouter>["file"]["list"];
 type FileRow = FileListOutput["rows"][number];
 
+interface FilesRouteRow extends FileRow {
+  readonly downloadUrl: string;
+}
+
 interface FilesRouteState {
-  readonly rows: FileRow[];
+  readonly rows: FilesRouteRow[];
   readonly isLoading: boolean;
   readonly isFetching: boolean;
   readonly isUploading: boolean;
+  readonly isDeleting: boolean;
   readonly upload: (file: File) => void;
+  readonly remove: (fileId: string) => void;
 }
 
 export function useFilesRoute(): FilesRouteState {
   const { t } = useTranslation("{{APP_SLUG}}");
+  const { serverUrl } = useAppConfig();
   const trpc = useTRPC();
   const queryClient = useQueryClient();
-  const fileUpload = useFileUpload();
+  const fileUpload = useS3Upload({ scope: "organization" });
 
   const listQuery = useQuery(trpc.file.list.queryOptions({}));
 
   const uploadMutation = useMutation({
     mutationFn: async (file: File) => {
-      await fileUpload.upload("image", file);
+      await fileUpload.upload(file);
     },
     onSuccess: async () => {
       toast.success(t("files.toast.uploaded"));
@@ -38,13 +47,32 @@ export function useFilesRoute(): FilesRouteState {
     },
   });
 
+  const deleteMutation = useMutation(
+    trpc.file.delete.mutationOptions({
+      onSuccess: async () => {
+        toast.success(t("files.toast.deleted"));
+        await queryClient.invalidateQueries(trpc.file.list.queryFilter());
+      },
+      onError: (error) => {
+        toast.error(error instanceof Error ? error.message : t("files.toast.deleteFailed"));
+      },
+    })
+  );
+
   return {
-    rows: listQuery.data?.rows ?? [],
+    rows: (listQuery.data?.rows ?? []).map((row) => ({
+      ...row,
+      downloadUrl: fileCookieDownloadUrl(serverUrl, row.id),
+    })),
     isLoading: listQuery.isLoading,
     isFetching: listQuery.isFetching,
     isUploading: uploadMutation.isPending,
+    isDeleting: deleteMutation.isPending,
     upload: (file: File) => {
       void uploadMutation.mutateAsync(file).catch(() => undefined);
     },
+    remove: (fileId: string) => {
+      void deleteMutation.mutateAsync({ fileId }).catch(() => undefined);
+    },
   };
 }

package/templates/minimal-app/apps/webapp/translations/en/{{APP_SLUG}}.json.tpl

@@ -168,7 +168,7 @@
     "hero": {
       "eyebrow": "Files",
       "title": "Upload an image and see it inventoried.",
-      "body": "Local uploads land on disk and in the files table. Organization-scoped rows stamp the active member.",
+      "body": "The browser PUTs to S3 after initiate, then finalize inventories the File. Open uses /files/:id.",
       "upload": "Upload image",
       "syncing": "Refreshing",
       "synced": "Live against the files table"
@@ -178,11 +178,15 @@
       "body": "Upload an image to see it listed here."
     },
     "row": {
-      "organization": "Organization"
+      "organization": "Organization",
+      "open": "Open",
+      "delete": "Delete"
     },
     "toast": {
       "uploaded": "File uploaded.",
-      "failed": "Upload failed."
+      "failed": "Upload failed.",
+      "deleted": "File deleted.",
+      "deleteFailed": "Delete failed."
     }
   },
   "notifications": {

package/templates/minimal-app/pnpm-workspace.yaml.tpl

@@ -7,18 +7,18 @@ catalogs:
     "@heroui/react": 3.0.3
     "@heroui/styles": 3.0.3
     "@libsql/client": 0.17.4
-    "@m5kdev/backend": 0.38.22
-    "@m5kdev/commons": 0.38.22
-    "@m5kdev/config": 0.38.22
-    "@m5kdev/email": 0.38.22
-    "@m5kdev/expo": 0.38.22
-    "@m5kdev/frontend": 0.38.22
-    "@m5kdev/module-clay": 0.38.22
-    "@m5kdev/module-docx": 0.38.22
-    "@m5kdev/module-pdf": 0.38.22
-    "@m5kdev/module-social": 0.38.22
-    "@m5kdev/module-video": 0.38.22
-    "@m5kdev/web-ui": 0.38.22
+    "@m5kdev/backend": 0.40.0
+    "@m5kdev/commons": 0.40.0
+    "@m5kdev/config": 0.40.0
+    "@m5kdev/email": 0.40.0
+    "@m5kdev/expo": 0.40.0
+    "@m5kdev/frontend": 0.40.0
+    "@m5kdev/module-clay": 0.40.0
+    "@m5kdev/module-docx": 0.40.0
+    "@m5kdev/module-pdf": 0.40.0
+    "@m5kdev/module-social": 0.40.0
+    "@m5kdev/module-video": 0.40.0
+    "@m5kdev/web-ui": 0.40.0
     "@mastra/core": 1.51.0
     "@openrouter/ai-sdk-provider": 3.0.0
     "@opentelemetry/api": 1.9.0

package/templates/minimal-app/template.manifest.json

@@ -66,7 +66,6 @@
       "kind": "module",
       "label": "MCP",
       "paths": [
-        "apps/server/src/modules/posts/posts.mcp.ts",
         "apps/e2e/tests/mcp.spec.ts",
         "apps/e2e/tests/mcp-helpers.ts"
       ]

package/templates/minimal-app/apps/server/src/modules/posts/posts.mcp.ts.tpl

@@ -1,17 +0,0 @@
-import { defineMcpCall } from "@m5kdev/backend/modules/mcp/mcp.define";
-import type { McpOrganizationCallDefinition } from "@m5kdev/backend/modules/mcp/mcp.types";
-import { postSchemas } from "./posts.dto";
-import type { PostsService } from "./posts.service";
-
-export function createPostsMcp(posts: PostsService): Record<string, McpOrganizationCallDefinition> {
-  return {
-    "list-posts": defineMcpCall()
-      .description("List posts in the selected Organization")
-      .input(postSchemas.input.list)
-      .handle(async (input, actor) => posts.list(input, { actor, user: { id: actor.userId } })),
-    "create-post": defineMcpCall()
-      .description("Create a draft post in the selected Organization")
-      .input(postSchemas.input.create)
-      .handle(async (input, actor) => posts.create(input, { actor, user: { id: actor.userId } })),
-  };
-}