create-node-lib 2.16.7 → 2.17.0

package/CHANGELOG.md

@@ -1,3 +1,15 @@
+# [2.17.0](https://github.com/lirantal/create-node-lib/compare/v2.16.7...v2.17.0) (2026-05-03)
+
+
+### Bug Fixes
+
+* chmod executable files ([034b771](https://github.com/lirantal/create-node-lib/commit/034b77199ae06936272e8b6afc8a61e98132e9bc))
+
+
+### Features
+
+* devcontainer updates ([d5618de](https://github.com/lirantal/create-node-lib/commit/d5618def17a07c13b438795d96e5e26bdffab770))
+
 ## [2.16.7](https://github.com/lirantal/create-node-lib/compare/v2.16.6...v2.16.7) (2026-05-01)
 
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "create-node-lib",
-  "version": "2.16.7",
+  "version": "2.17.0",
   "description": "Scaffolding out a Node.js library module",
   "bin": "./bin/cli.js",
   "engines": {

package/template/.devcontainer/devcontainer.json

@@ -10,15 +10,44 @@
             "shellautocompletion": true
         }
     },
-    // forwardPorts: VS Code / Cursor Ports UI, auto-forward, portsAttributes (spec “forwarding”).
-    "forwardPorts": [
-        5959
-    ],
-    // appPort: Docker publish (127.0.0.1:port:port) for @devcontainers/cli — e.g. .devcontainer/start.sh.
-    // Editors still apply appPort when they create the container; keep this list aligned with forwardPorts.
-    "appPort": [
-        5959
-    ],
+    // Ask the editor to forward these container ports (no Docker appPort).
+    "forwardPorts": [8787, 3005, 3001, 3000],
+
+    "portsAttributes": {
+        "8787": {
+            "label": "Hono Dev Server",
+            "onAutoForward": "notify"
+        },
+        "3005": {
+            "label": "Nuxt Dev Server",
+            "onAutoForward": "notify"
+        },
+        "3001": {
+            "label": "Nuxt Preview Server",
+            "onAutoForward": "silent"
+        },
+        "3000": {
+            "label": "Published dev server",
+            "protocol": "http",
+            "onAutoForward": "notify",
+            "requireLocalPort": false
+        },
+        // only enable when running Caddy http proxy in the container
+        // "80": {
+        //     "label": "Caddy HTTP",
+        //     "onAutoForward": "notify"
+        // },
+        // "443": {
+        //     "label": "Caddy HTTPS",
+        //     "onAutoForward": "notify"
+        // }
+    },
+
+    "otherPortsAttributes": {
+        "onAutoForward": "notify",
+        "requireLocalPort": false
+    },
+
     "mounts": [
         "source=${localEnv:HOME}/.gitconfig,target=/home/node/.gitconfig,type=bind,consistency=cached",
         // mount host user home directories for agents:
@@ -26,21 +55,22 @@
         // "source=${localEnv:HOME}/.gemini,target=/home/node/.claude,type=bind,consistency=cached",
         // "source=${localEnv:HOME}/.codex,target=/home/node/.codex,type=bind,consistency=cached"
     ],
-    // Initialize access to 1Password CLI in the container
-	// "initializeCommand": "echo OP_SERVICE_ACCOUNT_TOKEN=$(op read 'op://Private/1Password op CLI Service Account for DevContainers/password') > .env.development",
-	// "runArgs": [
-	// 	"--env-file",
-	// 	"${localWorkspaceFolder}/.env.development"
-	// ],
+
+    // Initialize optional host-side secrets before container create/start.
+    "initializeCommand": "bash .devcontainer/initialize.sh",
+    // After up, discover the published host binding, e.g.:
+    // docker port <container-name-or-id> 3000/tcp
+    "runArgs": [
+        // publish container port 3000 with dynamic host port (CLI / start.sh)
+        "-p",
+        "127.0.0.1::3000",
+        // pass the development environment file to the container
+        "--env-file",
+        "${localWorkspaceFolder}/.env.development"
+    ],
     // --
-    "postCreateCommand": {
-        "pnpm-install": "[ -f package.json ] && pnpm install || true",
-        "post-create": "bash .devcontainer/post-create.sh"
-    },
-    "postStartCommand": {
-        // "rm-env-file": "if [ -n './.env.development' ]; then rm -f './.env.development'; fi;",
-        "start-dev": "[ -f package.json ] && pnpm run dev || true"
-    },
+    "postCreateCommand": "bash .devcontainer/post-create.sh",
+    "postStartCommand": "bash .devcontainer/post-start.sh",
     "remoteUser": "node",
     "workspaceFolder": "/workspaces/${localWorkspaceFolderBasename}",
     "containerEnv": {

package/template/.devcontainer/post-create.sh

@@ -1,25 +1,46 @@
 #!/bin/bash
 set -e
 
-# Local git prefs only apply inside a repository; skip when there is no .git (avoids postCreate failure).
-if git rev-parse --is-inside-work-tree >/dev/null 2>&1; then
-  git config --local commit.gpgsign false
-  git config --local core.pager 'less -R'
-fi
-
-# install apm (the Agent Package Manager: https://github.com/microsoft/apm)
-curl -sSL https://aka.ms/apm-unix | sh
-
-# Install OpenCode CLI
-# curl -fsSL https://opencode.ai/install | bash
-
-# Install Snyk CLI
-# curl --compressed https://static.snyk.io/cli/latest/snyk-linux-arm64 -o snyk
-# chmod +x ./snyk
-# sudo mv -f ./snyk /usr/local/bin/snyk
-
-# Install 1Password CLI (op) - arm64 Linux binary
-# OP_VERSION="2.32.1"
-# curl -fsSL "https://cache.agilebits.com/dist/1P/op2/pkg/v${OP_VERSION}/op_linux_arm64_v${OP_VERSION}.zip" -o /tmp/op.zip
-# python3 -c "import zipfile; zipfile.ZipFile('/tmp/op.zip').extract('op', '/tmp')"
-# sudo mv /tmp/op /usr/local/bin/op && chmod +x /usr/local/bin/op && rm /tmp/op.zip
+SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
+
+main() {
+  configure_local_git
+  install_apm
+  # install_opencode_cli
+  install_1password_cli
+  run_deps_install
+}
+
+configure_local_git() {
+  # Local git prefs only apply inside a repository; skip when there is no .git (avoids postCreate failure).
+  if git rev-parse --is-inside-work-tree >/dev/null 2>&1; then
+    git config --local commit.gpgsign false
+    git config --local core.pager 'less -R'
+  fi
+}
+
+install_apm() {
+  # Agent Package Manager: https://github.com/microsoft/apm
+  curl -sSL https://aka.ms/apm-unix | sh
+}
+
+install_opencode_cli() {
+  curl -fsSL https://opencode.ai/install | bash
+}
+
+# Optional: Snyk CLI
+#   curl --compressed https://static.snyk.io/cli/latest/snyk-linux-arm64 -o snyk
+#   chmod +x ./snyk && sudo mv -f ./snyk /usr/local/bin/snyk
+
+install_1password_cli() {
+  local op_version="2.32.1"
+  curl -fsSL "https://cache.agilebits.com/dist/1P/op2/pkg/v${op_version}/op_linux_arm64_v${op_version}.zip" -o /tmp/op.zip
+  python3 -c "import zipfile; zipfile.ZipFile('/tmp/op.zip').extract('op', '/tmp')"
+  sudo mv /tmp/op /usr/local/bin/op && chmod +x /usr/local/bin/op && rm /tmp/op.zip
+}
+
+run_deps_install() {
+  bash "${SCRIPT_DIR}/utils/deps-install.sh"
+}
+
+main "$@"

package/template/.devcontainer/post-start.sh

@@ -0,0 +1,18 @@
+#!/usr/bin/env bash
+# post-start: runs after each container start (postStartCommand in devcontainer.json).
+# Naming matches post-create.sh; extend with more steps as needed (e.g. source scripts from .devcontainer/utils/).
+
+main() {
+  remove_ephemeral_env_file_if_present
+}
+
+# When initializeCommand + runArgs inject secrets via .env.development, remove the file
+# after start so it is not left on disk and tooling that assumes absence does not break.
+remove_ephemeral_env_file_if_present() {
+  local env_file=".env.development"
+  if [[ -f "$env_file" ]]; then
+    rm -f "$env_file"
+  fi
+}
+
+main "$@"

package/template/.devcontainer/start.sh

@@ -4,16 +4,16 @@
 # @summary Start the Dev Container for this workspace and attach an interactive shell.
 #
 # Uses @devcontainers/cli to run `devcontainer up` then `devcontainer exec bash`.
-# Host port publishing for this script comes from **appPort** — @devcontainers/cli maps it
-# to `docker -p`. It does **not** map **forwardPorts** to Docker (editors use forwardPorts
-# for Ports UI / tunneling; they still apply **appPort** when creating the container).
+# Host port publishing comes from **runArgs** in devcontainer.json (e.g. `-p` and
+# `127.0.0.1::<containerPort>` for dynamic host binding). After `devcontainer up`, this
+# script reads that container port from runArgs and prints the mapped URL via `docker port`.
 #
 # @usage
 #   .devcontainer/start.sh [options]
 #
 # @options
 #   --recreate  Remove the existing dev container for this workspace before `up`, so
-#               changes to appPort (or other create-time settings) take effect.
+#               changes to runArgs (or other create-time settings) take effect.
 #   --help, -h  Print usage and exit.
 #
 # @example
@@ -38,15 +38,25 @@ Then open an interactive bash session inside the container.
 
 Options:
   --recreate    Remove the existing dev container for this workspace before starting,
-                so Docker picks up new settings (e.g. appPort / port mappings).
+                so Docker picks up new settings (e.g. runArgs / port mappings).
   --help, -h    Show this help and exit.
 
 Notes:
-  For devcontainer up from the terminal, Docker publish uses appPort. Keep appPort and
-  forwardPorts lists in sync if you use both this script and VS Code / Cursor.
+  Port publishing uses runArgs (Docker -p ...::<containerPort>). The script greps that
+  container port from devcontainer.json for the post-up URL hint.
 EOF
 }
 
+# Container-side TCP port published via runArgs, e.g. "127.0.0.1::3000" (Docker -p host::ctr).
+# Requires GNU grep (-P); same as the containerId parse below.
+publish_container_port_from_devcontainer_json() {
+  local f="$SCRIPT_DIR/devcontainer.json"
+  if [ ! -r "$f" ]; then
+    return 1
+  fi
+  sed 's|//.*||' "$f" | grep -oP '"[0-9.]+\:\:\K[0-9]+(?=")' | head -n1
+}
+
 RECREATE=false
 while [ $# -gt 0 ]; do
   case "$1" in
@@ -71,10 +81,35 @@ echo "Starting devcontainer for: $WORKSPACE_FOLDER"
 UP_ARGS=(--workspace-folder "$WORKSPACE_FOLDER")
 if [ "$RECREATE" = true ]; then
   UP_ARGS+=(--remove-existing-container)
-  echo "Removing existing dev container so create-time settings (e.g. appPort) apply."
+  echo "Removing existing dev container so create-time settings (e.g. runArgs) apply."
+fi
+
+UP_OUTPUT="$(npx --yes "@devcontainers/cli@${CLI_VERSION}" up "${UP_ARGS[@]}")"
+echo "$UP_OUTPUT"
+
+CONTAINER_ID="$(echo "$UP_OUTPUT" | grep -oP '"containerId"\s*:\s*"\K[^"]+')" || true
+if [ -z "$CONTAINER_ID" ]; then
+  CONTAINER_ID="$(docker ps --filter "label=devcontainer.local_folder=$WORKSPACE_FOLDER" --format '{{.ID}}' | head -n1)"
 fi
 
-npx --yes "@devcontainers/cli@${CLI_VERSION}" up "${UP_ARGS[@]}"
+CONTAINER_PORT="$(publish_container_port_from_devcontainer_json || true)"
+if [ -n "$CONTAINER_ID" ]; then
+  if [ -n "$CONTAINER_PORT" ]; then
+    HOST_BINDING="$(docker port "$CONTAINER_ID" "${CONTAINER_PORT}/tcp" 2>/dev/null | head -n1)" || true
+    if [ -n "$HOST_BINDING" ]; then
+      echo ""
+      echo "Dev server available at: http://${HOST_BINDING}"
+      echo ""
+    else
+      echo "Warning: container is running but port ${CONTAINER_PORT}/tcp is not mapped." >&2
+    fi
+  else
+    echo "Warning: could not find a runArgs publish port (expected a quoted string like \"127.0.0.1::<port>\")." >&2
+    echo "         Skipping docker port URL hint." >&2
+  fi
+else
+  echo "Warning: could not resolve container ID; skipping port lookup." >&2
+fi
 
 echo "Dropping into container shell..."
 # Resolve TERM to something the container's terminfo knows about.
@@ -83,4 +118,4 @@ echo "Dropping into container shell..."
 if ! infocmp "${TERM:-xterm-256color}" &>/dev/null 2>&1; then
   TERM=xterm-256color
 fi
-TERM="${TERM:-xterm-256color}" npx --yes @devcontainers/cli@${CLI_VERSION} exec --workspace-folder "$WORKSPACE_FOLDER" -- env TERM="${TERM:-xterm-256color}" COLORTERM=truecolor bash
+TERM="${TERM:-xterm-256color}" npx --yes @devcontainers/cli@${CLI_VERSION} exec --workspace-folder "$WORKSPACE_FOLDER" -- env TERM="${TERM:-xterm-256color}" COLORTERM=truecolor bash

package/template/.devcontainer/utils/deps-install.sh

@@ -0,0 +1,87 @@
+#!/usr/bin/env bash
+# Install workspace JS dependencies when package.json exists (non-fatal on failure).
+
+main() {
+  [[ -f package.json ]] || return 0
+  local pm
+  pm=$(detect_package_manager)
+  install_dependencies "$pm" || true
+}
+
+detect_package_manager() {
+  local pm
+  if pm=$(detect_package_manager_from_lockfiles); then
+    echo "$pm"
+    return
+  fi
+  if pm=$(detect_package_manager_from_repo_markers); then
+    echo "$pm"
+    return
+  fi
+  if pm=$(detect_package_manager_from_package_json); then
+    echo "$pm"
+    return
+  fi
+  echo npm
+}
+
+detect_package_manager_from_lockfiles() {
+  if [[ -f pnpm-lock.yaml ]]; then
+    echo pnpm
+    return 0
+  fi
+  if [[ -f bun.lockb || -f bun.lock ]]; then
+    echo bun
+    return 0
+  fi
+  if [[ -f yarn.lock ]]; then
+    echo yarn
+    return 0
+  fi
+  if [[ -f package-lock.json ]]; then
+    echo npm
+    return 0
+  fi
+  return 1
+}
+
+detect_package_manager_from_repo_markers() {
+  if [[ -f pnpm-workspace.yaml ]]; then
+    echo pnpm
+    return 0
+  fi
+  if [[ -f bunfig.toml ]]; then
+    echo bun
+    return 0
+  fi
+  if [[ -f .yarnrc.yml ]]; then
+    echo yarn
+    return 0
+  fi
+  return 1
+}
+
+detect_package_manager_from_package_json() {
+  [[ -f package.json ]] || return 1
+  node -e "
+    const p = require('./package.json');
+    const spec = p.packageManager;
+    if (!spec || typeof spec !== 'string') process.exit(1);
+    const name = spec.split('@')[0].trim();
+    if (!['pnpm', 'npm', 'yarn', 'bun'].includes(name)) process.exit(1);
+    console.log(name);
+  " 2>/dev/null || return 1
+}
+
+install_dependencies() {
+  local pm="$1"
+  case "$pm" in
+    pnpm) pnpm install ;;
+    npm) npm install ;;
+    yarn) yarn install ;;
+    bun) bun install ;;
+    *) npm install ;;
+  esac
+}
+
+main "$@"