create-memory-soda 0.3.0 → 0.5.0

package/README.md

@@ -19,8 +19,8 @@ what it can, and ends with a checklist of anything it could not do for you.
    confirms pgvector and enables the extension. Failures name the fix and let
    you retry, paste another URL, or skip.
 5. **Gemini key** — checked live. Blank allowed; goes on the checklist.
-6. **Ports and admin login** — ports checked for use; blank password is
-   generated at first boot.
+6. **Ports** — checked for use. Dashboard login starts as `admin` /
+   `open-sesame`; change it after signing in.
 7. **Clone, `.env`, `npm ci`, migrations** — migrations run now if the database
    passed.
 
@@ -31,8 +31,8 @@ cd memory-soda
 npm run dev
 ```
 
-Sign in to the dashboard (:3000) to create an API key. `npm run update` pulls
-and reinstalls later. Pass `--verbose` to stream clone/install output.
+Sign in to the dashboard (:3000) to create an API key. The public repo is
+remote `upstream`; `npm run update` pulls from it. Add your own repo as `origin`. Pass `--verbose` to stream clone/install output.
 
 ## Requirements
 

package/index.js

@@ -83,15 +83,8 @@ function runWithSpinner(title, cmd, args, { cwd } = {}) {
  * explicitly — everything else stays on the defaults baked into config.ts, so
  * this file does not drift every time a new option is added there.
  */
-export function renderEnv({
-  databaseUrl,
-  geminiKey,
-  adminUser,
-  adminPassword,
-  apiPort,
-  dashboardPort,
-}) {
-  const lines = [
+export function renderEnv({ databaseUrl, geminiKey, apiPort, dashboardPort }) {
+  return [
     '# Generated by create-memory-soda.',
     '# Full reference: https://github.com/alagappan17/memory-soda',
     '',
@@ -108,15 +101,11 @@ export function renderEnv({
     `CORS_ORIGIN=http://localhost:${dashboardPort}`,
     `VITE_API_URL=http://localhost:${apiPort}`,
     '',
-    '# Dashboard login, created once on first boot.',
-    `ADMIN_USERNAME=${adminUser}`,
-  ];
-  // An unset ADMIN_PASSWORD makes the API generate one and print it once. That
-  // is a better default than writing a weak chosen password to disk, so a blank
-  // answer omits the key entirely rather than writing an empty one.
-  if (adminPassword) lines.push(`ADMIN_PASSWORD=${adminPassword}`);
-  lines.push('');
-  return lines.join('\n');
+    '# Dashboard login. Defaults to admin / open-sesame — change it in the dashboard after first sign-in.',
+    '# ADMIN_USERNAME=admin',
+    '# ADMIN_PASSWORD=open-sesame',
+    '',
+  ].join('\n');
 }
 
 /** True if the path is safe to scaffold into: missing, or an empty directory. */
@@ -406,40 +395,35 @@ async function main() {
   }
   if (where !== 'skip') {
     for (;;) {
-      const s = p.spinner();
+      // A clack spinner cannot be restarted once stopped (its timer leaks and
+      // the process never exits), so every phase gets a fresh one.
+      let s = p.spinner();
       s.start('Checking the database');
       let result = await checkDatabase(databaseUrl);
       if (result?.missingDb) {
         s.stop(`Database "${result.missingDb}" does not exist`);
         if (
-          guard(
+          !guard(
             await p.confirm({
               message: `Create database "${result.missingDb}"?`,
               initialValue: true,
             }),
           )
         ) {
-          s.start(`Creating database ${result.missingDb}`);
-          try {
-            await createDatabase(databaseUrl);
-            result = await checkDatabase(databaseUrl);
-          } catch (err) {
-            result = {
-              problem: `could not create database "${result.missingDb}": ${err.message}`,
-              fix: `createdb ${result.missingDb}  (as a role with CREATEDB)`,
-            };
-          }
-        } else {
           todo.push(`createdb ${result.missingDb}`);
           break;
         }
-        if (result?.missingDb)
+        s = p.spinner();
+        s.start(`Creating database ${result.missingDb}`);
+        try {
+          await createDatabase(databaseUrl);
+          result = await checkDatabase(databaseUrl);
+        } catch (err) {
           result = {
-            problem: `database "${result.missingDb}" still does not exist`,
-            fix: null,
+            problem: `could not create database "${result.missingDb}": ${err.message}`,
+            fix: `createdb ${result.missingDb}  (as a role with CREATEDB)`,
           };
-        if (result === null || result?.extensionTodo)
-          s.start('Checking the database');
+        }
       }
       if (result === null) {
         s.stop('Database ready — connected, pgvector enabled');
@@ -504,39 +488,27 @@ async function main() {
       'Set GOOGLE_GENERATIVE_AI_API_KEY in .env — the API refuses to start without it',
     );
 
-  // ── 5 + 6. Ports and login
+  // ── 5. Ports
   const apiPort = await askPort('API port', '3004');
   const dashboardPort = await askPort('Dashboard port', '3000');
-  const adminUser = guard(
-    await p.text({
-      message: 'Dashboard admin username',
-      placeholder: 'admin',
-      defaultValue: 'admin',
-    }),
-  );
-  const adminPassword =
-    guard(
-      await p.password({
-        message: `Dashboard admin password ${chalk.dim('(leave blank to generate one at first boot)')}`,
-        mask: '•',
-      }),
-    ) ?? '';
-
   // ── 7. Install
   await runWithSpinner(`Cloning into ${chalk.bold(dirName)}`, 'git', [
     'clone',
-    '--depth',
-    '1',
     REPO,
     target,
   ]);
+  // The clone points at the public repo, which the user cannot push to.
+  // Name it `upstream` so `git pull upstream main` fetches fixes and `origin`
+  // stays free for the repo they deploy from.
+  execFileSync('git', ['remote', 'rename', 'origin', 'upstream'], {
+    cwd: target,
+    stdio: 'ignore',
+  });
   writeFileSync(
     resolve(target, '.env'),
     renderEnv({
       databaseUrl,
       geminiKey,
-      adminUser,
-      adminPassword,
       apiPort,
       dashboardPort,
     }),
@@ -596,13 +568,23 @@ async function main() {
       '',
       `Dashboard  ${chalk.underline(`http://localhost:${dashboardPort}`)}`,
       `API        ${chalk.underline(`http://localhost:${apiPort}`)}`,
-      `Login      ${adminUser} / ${adminPassword ? 'the password you chose' : 'password printed at first boot'}`,
+      `Login      ${chalk.bold('admin')} / ${chalk.bold('open-sesame')}  ${chalk.dim('← change it under Settings after signing in')}`,
       '',
       'Then sign in, create an API key, and: npm install @memory-soda/sdk',
     ].join('\n'),
     'Run',
   );
-  p.outro(`${chalk.bold(basename(target))} is ready.`);
+  p.note(
+    [
+      'Updates   npm run update        (git pull upstream main && npm install)',
+      'Your repo git remote add origin <url> && git push -u origin main',
+    ].join('\n'),
+    'Git',
+  );
+  p.outro(
+    `Thanks for trying Memory Soda — ${chalk.bold(basename(target))} is ready.`,
+  );
+  exit(0);
 }
 
 /**

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "create-memory-soda",
-  "version": "0.3.0",
+  "version": "0.5.0",
   "description": "Scaffold a self-hosted Memory Soda instance — API, dashboard, and Postgres",
   "keywords": [
     "ai",