create-objectstack 17.0.0 → 17.2.0

package/dist/created-summary.d.ts

@@ -0,0 +1,48 @@
+/** A directory holding more than this many entries is collapsed to one line. */
+declare const COLLAPSE_AT = 10;
+/**
+ * Entries this module is willing to `lstat` per top-level entry before it
+ * stops counting and reports a lower bound.
+ *
+ * The budget is PER TOP-LEVEL ENTRY, not global, and that is load-bearing:
+ * with one shared budget, `node_modules/` (17,920 paths in the measurement
+ * above) exhausts it before the walk reaches the project's own files, and the
+ * summary silently truncates the very content it exists to disclose. Whether
+ * that happened would depend on `readdir` order.
+ */
+declare const MEASURE_BUDGET = 2000;
+interface SummaryEntry {
+    /** Project-relative path. Directories carry a trailing `/`. */
+    path: string;
+    kind: 'file' | 'dir';
+    /** Files and symlinks in the subtree (always 1 for a file). */
+    entries: number;
+    /** Total size in bytes. Meaningless when `truncated`. */
+    bytes: number;
+    /** Measurement stopped at the budget — `entries` and `bytes` are lower bounds. */
+    truncated: boolean;
+}
+/**
+ * Summarize everything under `root`, collapsing large directories.
+ *
+ * Returns files first (alphabetical), then collapsed directories
+ * (alphabetical), so the enumerated content reads as a list and the bulk
+ * trees read as a block with their sizes.
+ */
+declare function summarizeTree(root: string): SummaryEntry[];
+/** Human-readable byte count. */
+declare function formatBytes(bytes: number): string;
+/** The measurement note that follows a collapsed directory's path. */
+declare function describeEntry(entry: SummaryEntry): string;
+/**
+ * The property this module exists to hold: every path in `written` is either
+ * named outright by a summary entry, or lies beneath a directory entry that
+ * is. Returns the paths that are NOT reachable — empty means the summary is
+ * complete.
+ *
+ * Exported because it is the assertion, and an assertion that lives only in a
+ * test file cannot be run against a real scaffold from anywhere else.
+ */
+declare function unreachablePaths(entries: SummaryEntry[], written: string[]): string[];
+
+export { COLLAPSE_AT, MEASURE_BUDGET, type SummaryEntry, describeEntry, formatBytes, summarizeTree, unreachablePaths };

package/dist/created-summary.js

@@ -0,0 +1,16 @@
+import {
+  COLLAPSE_AT,
+  MEASURE_BUDGET,
+  describeEntry,
+  formatBytes,
+  summarizeTree,
+  unreachablePaths
+} from "./chunk-ZIUW7UEA.js";
+export {
+  COLLAPSE_AT,
+  MEASURE_BUDGET,
+  describeEntry,
+  formatBytes,
+  summarizeTree,
+  unreachablePaths
+};

package/dist/index.js

@@ -1,16 +1,15 @@
+import {
+  describeEntry,
+  summarizeTree
+} from "./chunk-ZIUW7UEA.js";
+
 // src/index.ts
 import { Command } from "commander";
-import chalk from "chalk";
-import fs3 from "fs";
-import path3 from "path";
-import os from "os";
+import chalk2 from "chalk";
+import fs4 from "fs";
+import path4 from "path";
 import { execSync } from "child_process";
 import { fileURLToPath } from "url";
-import { pipeline } from "stream/promises";
-import { createGunzip } from "zlib";
-import { createWriteStream, createReadStream } from "fs";
-import { mkdtemp, rm } from "fs/promises";
-import * as tar from "tar";
 
 // src/pkg-utils.ts
 function syncObjectStackDeps(pkg, version) {
@@ -114,39 +113,114 @@ function findStaleNamespacePrefixes(dir, oldNs) {
   return stale;
 }
 
-// src/index.ts
-var __filename2 = fileURLToPath(import.meta.url);
-var __dirname2 = path3.dirname(__filename2);
-var BUNDLED_TEMPLATES_DIR = path3.resolve(__dirname2, "templates");
-var REMOTE_REPO = "objectstack-ai/templates";
-var REMOTE_BRANCH = "main";
-var REMOTE_TARBALL_URL = `https://codeload.github.com/${REMOTE_REPO}/tar.gz/refs/heads/${REMOTE_BRANCH}`;
+// src/template-registry.ts
 var TEMPLATES = {
   blank: {
     description: "Minimal starter \u2014 one object, REST API, ready to extend",
     source: { kind: "bundled", dir: "blank" }
-  },
-  todo: {
-    description: "Universal task & project management starter",
-    source: { kind: "remote", pkg: "todo" }
-  },
-  compliance: {
-    description: "Compliance posture & evidence management (SOC2 / ISO27001)",
-    source: { kind: "remote", pkg: "compliance" }
-  },
-  content: {
-    description: "Content marketing pipeline \u2014 editorial calendar & channel ROI",
-    source: { kind: "remote", pkg: "content" }
-  },
-  contracts: {
-    description: "Post-signature CLM \u2014 approvals, obligations, renewals",
-    source: { kind: "remote", pkg: "contracts" }
-  },
-  procurement: {
-    description: "Source-to-pay \u2014 vendors, POs, receipts, invoice matching",
-    source: { kind: "remote", pkg: "procurement" }
   }
 };
+var RETIRED_TEMPLATES = [
+  "todo",
+  "compliance",
+  "content",
+  "contracts",
+  "procurement"
+];
+function lookupTemplate(name) {
+  const template = TEMPLATES[name];
+  if (template) return { kind: "found", name, template };
+  if (RETIRED_TEMPLATES.includes(name)) return { kind: "retired", name };
+  return { kind: "unknown", name };
+}
+function templateNames() {
+  return Object.keys(TEMPLATES);
+}
+
+// src/runtime-image.ts
+import fs3 from "fs";
+import path3 from "path";
+var RUNTIME_FROM_RE = /^FROM ghcr\.io\/objectstack-ai\/objectstack:([A-Za-z0-9_][A-Za-z0-9_.+-]*)[ \t]*$/;
+var PINNABLE_VERSION_RE = /^\d+\.\d+\.\d+(?:[-+][0-9A-Za-z.-]+)?$/;
+var PROSE_COMMENT_RE = /^#[ \t]+\S/;
+function readResolvedCliVersion(targetDir) {
+  const pkgPath = path3.join(
+    targetDir,
+    "node_modules",
+    "@objectstack",
+    "cli",
+    "package.json"
+  );
+  try {
+    const version = JSON.parse(fs3.readFileSync(pkgPath, "utf8")).version;
+    return typeof version === "string" && PINNABLE_VERSION_RE.test(version) ? version : void 0;
+  } catch {
+    return void 0;
+  }
+}
+function pinnedComment(version) {
+  return [
+    "# Pinned at scaffold time to the @objectstack/cli version this project",
+    "# resolved, so the runtime runs the same CLI that built your artifact.",
+    "# Move both together when you upgrade \u2014 see docker/README.md tag table.",
+    `FROM ghcr.io/objectstack-ai/objectstack:${version}`
+  ];
+}
+function pinRuntimeImage(targetDir, version) {
+  if (!PINNABLE_VERSION_RE.test(version)) {
+    return { pinned: false, reason: `'${version}' is not a pinnable version` };
+  }
+  const dockerfile = path3.join(targetDir, "Dockerfile");
+  let text;
+  try {
+    text = fs3.readFileSync(dockerfile, "utf8");
+  } catch {
+    return { pinned: false, reason: "no Dockerfile in the scaffolded project" };
+  }
+  const lines = text.split("\n");
+  const fromIdx = lines.findIndex((line) => RUNTIME_FROM_RE.test(line));
+  if (fromIdx === -1) {
+    return {
+      pinned: false,
+      reason: "no `FROM ghcr.io/objectstack-ai/objectstack:<tag>` line found"
+    };
+  }
+  let start = fromIdx;
+  while (start > 0 && PROSE_COMMENT_RE.test(lines[start - 1])) start--;
+  lines.splice(start, fromIdx - start + 1, ...pinnedComment(version));
+  const pinnedText = lines.join("\n");
+  const check = pinnedText.split("\n").map((line) => RUNTIME_FROM_RE.exec(line)).find((match) => match !== null);
+  if (!check || check[1] !== version) {
+    return { pinned: false, reason: "rewrite did not produce the pinned tag" };
+  }
+  fs3.writeFileSync(dockerfile, pinnedText);
+  return { pinned: true, tag: version };
+}
+
+// src/banner.ts
+import chalk from "chalk";
+var PREFIX = "   \u25C6 Create ObjectStack ";
+var MIN_INNER_WIDTH = 35;
+var MIN_TRAILING_PAD = 3;
+function renderVersionBanner(version) {
+  const versionLabel = `v${version}`;
+  const innerWidth = Math.max(
+    MIN_INNER_WIDTH,
+    PREFIX.length + versionLabel.length + MIN_TRAILING_PAD
+  );
+  const trailingPad = innerWidth - PREFIX.length - versionLabel.length;
+  const border = "\u2550".repeat(innerWidth);
+  return [
+    chalk.bold.cyan(`  \u2554${border}\u2557`),
+    chalk.bold.cyan("  \u2551") + chalk.bold(PREFIX) + chalk.dim(versionLabel) + chalk.bold.cyan(`${" ".repeat(trailingPad)}\u2551`),
+    chalk.bold.cyan(`  \u255A${border}\u255D`)
+  ];
+}
+
+// src/index.ts
+var __filename2 = fileURLToPath(import.meta.url);
+var __dirname2 = path4.dirname(__filename2);
+var BUNDLED_TEMPLATES_DIR = path4.resolve(__dirname2, "templates");
 function toTitleCase(str) {
   return str.replace(/[-_]/g, " ").replace(/\b\w/g, (c) => c.toUpperCase());
 }
@@ -163,32 +237,32 @@ function sanitizeNamespace(name) {
 }
 function readCliVersion() {
   try {
-    const pkgPath = path3.resolve(__dirname2, "..", "package.json");
-    const pkg = JSON.parse(fs3.readFileSync(pkgPath, "utf8"));
+    const pkgPath = path4.resolve(__dirname2, "..", "package.json");
+    const pkg = JSON.parse(fs4.readFileSync(pkgPath, "utf8"));
     return String(pkg.version || "0.0.0");
   } catch {
     return "0.0.0";
   }
 }
 function printHeader(title) {
-  console.log(chalk.bold(`
+  console.log(chalk2.bold(`
 \u25C6 ${title}`));
-  console.log(chalk.dim("\u2500".repeat(40)));
+  console.log(chalk2.dim("\u2500".repeat(40)));
 }
 function printKV(key, value) {
-  console.log(`  ${chalk.dim(key + ":")} ${chalk.white(value)}`);
+  console.log(`  ${chalk2.dim(key + ":")} ${chalk2.white(value)}`);
 }
 function printSuccess(msg) {
-  console.log(chalk.green(`  \u2713 ${msg}`));
+  console.log(chalk2.green(`  \u2713 ${msg}`));
 }
 function printError(msg) {
-  console.log(chalk.red(`  \u2717 ${msg}`));
+  console.log(chalk2.red(`  \u2717 ${msg}`));
 }
 function printStep(msg) {
-  console.log(chalk.yellow(`  \u2192 ${msg}`));
+  console.log(chalk2.yellow(`  \u2192 ${msg}`));
 }
 function printWarning(msg) {
-  console.log(chalk.yellow(`  \u26A0 ${msg}`));
+  console.log(chalk2.yellow(`  \u26A0 ${msg}`));
 }
 function detectPackageManager() {
   try {
@@ -199,98 +273,50 @@ function detectPackageManager() {
   }
 }
 function loadBundled(templateDir, targetDir) {
-  const src = path3.join(BUNDLED_TEMPLATES_DIR, templateDir);
-  if (!fs3.existsSync(src)) {
+  const src = path4.join(BUNDLED_TEMPLATES_DIR, templateDir);
+  if (!fs4.existsSync(src)) {
     throw new Error(`Bundled template missing on disk: ${src}`);
   }
   const collected = [];
   copyDir(src, targetDir, collected);
   return collected;
 }
-async function downloadTarball(url, destFile) {
-  const res = await fetch(url, { redirect: "follow" });
-  if (!res.ok || !res.body) {
-    throw new Error(`Download failed: ${url} (${res.status})`);
-  }
-  const out = createWriteStream(destFile);
-  for await (const chunk of res.body) {
-    out.write(chunk);
-  }
-  await new Promise((resolve, reject) => {
-    out.end((err) => err ? reject(err) : resolve());
-  });
-}
-async function loadRemote(pkgName, targetDir) {
-  const tmp = await mkdtemp(path3.join(os.tmpdir(), "create-objectstack-"));
-  try {
-    const tarball = path3.join(tmp, "templates.tar.gz");
-    printStep(`Fetching template "${pkgName}" from ${REMOTE_REPO}@${REMOTE_BRANCH}\u2026`);
-    await downloadTarball(REMOTE_TARBALL_URL, tarball);
-    fs3.mkdirSync(targetDir, { recursive: true });
-    const collected = [];
-    await pipeline(
-      createReadStream(tarball),
-      createGunzip(),
-      // eslint-disable-next-line @typescript-eslint/no-explicit-any
-      tar.extract({
-        cwd: targetDir,
-        strip: 3,
-        filter: (p) => {
-          const parts = p.split("/");
-          return parts[1] === "packages" && parts[2] === pkgName && parts.length > 3;
-        },
-        onentry: (entry) => {
-          if (entry.type === "File") {
-            const parts = entry.path.split("/").slice(3);
-            if (parts.length > 0) collected.push(parts.join("/"));
-          }
-        }
-      })
-    );
-    if (collected.length === 0) {
-      throw new Error(
-        `Template "${pkgName}" not found in ${REMOTE_REPO}@${REMOTE_BRANCH} (expected packages/${pkgName}/).`
-      );
-    }
-    return collected;
-  } finally {
-    await rm(tmp, { recursive: true, force: true });
-  }
-}
 function rewriteProjectIdentity(targetDir, projectName, namespace) {
   const title = toTitleCase(projectName);
   const templateNamespace = readTemplateNamespace(targetDir);
-  const pkgPath = path3.join(targetDir, "package.json");
-  if (fs3.existsSync(pkgPath)) {
+  const pkgPath = path4.join(targetDir, "package.json");
+  if (fs4.existsSync(pkgPath)) {
     try {
-      const pkg = JSON.parse(fs3.readFileSync(pkgPath, "utf8"));
+      const pkg = JSON.parse(fs4.readFileSync(pkgPath, "utf8"));
       pkg.name = projectName;
       syncObjectStackDeps(pkg, readCliVersion());
-      fs3.writeFileSync(pkgPath, JSON.stringify(pkg, null, 2) + "\n");
+      fs4.writeFileSync(pkgPath, JSON.stringify(pkg, null, 2) + "\n");
     } catch {
     }
   }
-  const manifestPath = path3.join(targetDir, "objectstack.manifest.json");
-  if (fs3.existsSync(manifestPath)) {
+  const manifestPath = path4.join(targetDir, "objectstack.manifest.json");
+  if (fs4.existsSync(manifestPath)) {
     try {
-      const m = JSON.parse(fs3.readFileSync(manifestPath, "utf8"));
+      const m = JSON.parse(fs4.readFileSync(manifestPath, "utf8"));
       m.name = projectName;
       m.displayName = title;
       if ("namespace" in m) m.namespace = namespace;
-      fs3.writeFileSync(manifestPath, JSON.stringify(m, null, 2) + "\n");
+      delete m.description;
+      fs4.writeFileSync(manifestPath, JSON.stringify(m, null, 2) + "\n");
     } catch {
     }
   }
-  const configPath = path3.join(targetDir, "objectstack.config.ts");
-  if (fs3.existsSync(configPath)) {
-    let cfg = fs3.readFileSync(configPath, "utf8");
+  const configPath = path4.join(targetDir, "objectstack.config.ts");
+  if (fs4.existsSync(configPath)) {
+    let cfg = fs4.readFileSync(configPath, "utf8");
     cfg = cfg.replace(/(\bid:\s*)(['"`])[^'"`]*\2/, `$1$2${projectName}$2`);
     cfg = cfg.replace(/(\bnamespace:\s*)(['"`])[^'"`]*\2/, `$1$2${namespace}$2`);
     cfg = cfg.replace(/(\bname:\s*)(['"`])[^'"`]*\2/, `$1$2${title}$2`);
-    fs3.writeFileSync(configPath, cfg);
+    cfg = cfg.replace(/^[ \t]*description:\s*(['"`])[^'"`]*\1,?\r?\n/m, "");
+    fs4.writeFileSync(configPath, cfg);
   }
   if (templateNamespace && namespace !== templateNamespace) {
-    const srcDir = path3.join(targetDir, "src");
+    const srcDir = path4.join(targetDir, "src");
     rewriteObjectNamePrefix(srcDir, templateNamespace, namespace);
     const stale = findStaleNamespacePrefixes(srcDir, templateNamespace);
     if (stale.length > 0) {
@@ -304,97 +330,155 @@ The generated project would fail 'objectstack build' on the \${namespace}_\${sho
       );
     }
   }
-  const readmePath = path3.join(targetDir, "README.md");
-  if (fs3.existsSync(readmePath)) {
-    let md = fs3.readFileSync(readmePath, "utf8");
+  const readmePath = path4.join(targetDir, "README.md");
+  if (fs4.existsSync(readmePath)) {
+    let md = fs4.readFileSync(readmePath, "utf8");
     md = md.replace(/^#\s+.*$/m, `# ${title}`);
-    fs3.writeFileSync(readmePath, md);
+    fs4.writeFileSync(readmePath, md);
   }
   writeAgentGuides(targetDir, title, projectName);
 }
 function writeAgentGuides(targetDir, title, projectName) {
-  const templatePath = path3.join(BUNDLED_TEMPLATES_DIR, "AGENTS.md");
+  const templatePath = path4.join(BUNDLED_TEMPLATES_DIR, "AGENTS.md");
   let template;
   try {
-    template = fs3.readFileSync(templatePath, "utf8");
+    template = fs4.readFileSync(templatePath, "utf8");
   } catch (err) {
     if (err?.code === "ENOENT") return;
     throw err;
   }
   const rendered = template.replace(/\{\{PROJECT_TITLE\}\}/g, title).replace(/\{\{PROJECT_NAME\}\}/g, projectName);
-  writeIfAbsent(path3.join(targetDir, "AGENTS.md"), rendered);
-  const copilotPath = path3.join(targetDir, ".github", "copilot-instructions.md");
-  fs3.mkdirSync(path3.dirname(copilotPath), { recursive: true });
+  writeIfAbsent(path4.join(targetDir, "AGENTS.md"), rendered);
+  const copilotPath = path4.join(targetDir, ".github", "copilot-instructions.md");
+  fs4.mkdirSync(path4.dirname(copilotPath), { recursive: true });
   writeIfAbsent(copilotPath, rendered);
 }
+function topLevelNames(dir) {
+  try {
+    return new Set(fs4.readdirSync(dir));
+  } catch {
+    return /* @__PURE__ */ new Set();
+  }
+}
+function printCreatedSummary(targetDir, opts) {
+  const entries = summarizeTree(targetDir);
+  if (entries.length === 0) return;
+  console.log(
+    chalk2.bold(opts.wasEmpty ? "  Created files:" : "  Project contents:")
+  );
+  if (!opts.wasEmpty) {
+    console.log(
+      chalk2.dim("    (the directory already had contents; this lists all of it)")
+    );
+  }
+  const isSkillPath = (p) => opts.skillPaths.has(p.split("/")[0]);
+  const width = Math.min(
+    44,
+    Math.max(...entries.map((e) => e.path.length)) + 2
+  );
+  let flagged = false;
+  for (const entry of entries) {
+    const note = describeEntry(entry);
+    const flag = isSkillPath(entry.path);
+    if (flag) flagged = true;
+    const pad = note || flag ? entry.path.padEnd(width) : entry.path;
+    const line = `    + ${pad}${note ? chalk2.dim(note) : ""}`;
+    console.log(chalk2.green(line) + (flag ? chalk2.yellow("  \u26A0 skills") : ""));
+  }
+  if (flagged) {
+    console.log("");
+    console.log(
+      chalk2.yellow("  \u26A0 Skill files run with your coding agent's full permissions.")
+    );
+    console.log(
+      chalk2.dim("    Review the paths marked \u26A0 above before letting an agent use them.")
+    );
+  }
+  console.log("");
+}
 function writeIfAbsent(filePath, contents) {
   try {
-    fs3.writeFileSync(filePath, contents, { flag: "wx" });
+    fs4.writeFileSync(filePath, contents, { flag: "wx" });
   } catch (err) {
     if (err?.code !== "EEXIST") throw err;
   }
 }
 var program = new Command().name("create-objectstack").description("Create a new ObjectStack environment").version(readCliVersion()).argument("[name]", "Environment name (defaults to current directory name)").option(
   "-t, --template <template>",
-  `Template: ${Object.keys(TEMPLATES).join(", ")}`,
+  `Template: ${templateNames().join(", ")}`,
   "blank"
-).option("--skip-install", "Skip dependency installation").option("--skip-skills", "Skip installing ObjectStack AI skills").action(async (name, options) => {
+).option("--skip-install", "Skip dependency installation").option("--skip-skills", "Skip installing ObjectStack AI skills").action((name, options) => {
   console.log("");
-  console.log(chalk.bold.cyan("  \u2554\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2557"));
-  console.log(chalk.bold.cyan("  \u2551") + chalk.bold("   \u25C6 Create ObjectStack ") + chalk.dim("v6.x") + chalk.bold.cyan("       \u2551"));
-  console.log(chalk.bold.cyan("  \u255A\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u255D"));
+  for (const line of renderVersionBanner(readCliVersion())) console.log(line);
   printHeader("New Environment");
-  const template = TEMPLATES[options.template];
-  if (!template) {
-    printError(`Unknown template: ${options.template}`);
-    console.log(chalk.dim(`  Available: ${Object.keys(TEMPLATES).join(", ")}`));
+  const lookup = lookupTemplate(options.template);
+  if (lookup.kind !== "found") {
+    if (lookup.kind === "retired") {
+      printError(`Template "${lookup.name}" has been retired and is no longer available.`);
+      console.log(
+        chalk2.dim(
+          "  It was delisted from the ObjectStack template marketplace and is no longer maintained."
+        )
+      );
+    } else {
+      printError(`Unknown template: ${lookup.name}`);
+    }
+    console.log(chalk2.dim(`  Available: ${templateNames().join(", ")}`));
     process.exit(1);
   }
+  const template = lookup.template;
   const cwd = process.cwd();
-  const projectName = name || path3.basename(cwd);
+  const projectName = name || path4.basename(cwd);
   const namespace = sanitizeNamespace(projectName);
-  const targetDir = name ? path3.resolve(cwd, name) : cwd;
+  const targetDir = name ? path4.resolve(cwd, name) : cwd;
   const isCurrentDir = targetDir === cwd;
+  const pm = detectPackageManager();
   printKV("Environment", projectName);
   printKV("Namespace", namespace);
   printKV("Template", `${options.template} \u2014 ${template.description}`);
   printKV("Directory", targetDir);
   console.log("");
-  if (!isCurrentDir && fs3.existsSync(targetDir)) {
-    const existing = fs3.readdirSync(targetDir);
+  if (!isCurrentDir && fs4.existsSync(targetDir)) {
+    const existing = fs4.readdirSync(targetDir);
     if (existing.length > 0) {
       printError(`Directory already exists and is not empty: ${targetDir}`);
       process.exit(1);
     }
   }
+  const targetWasEmpty = topLevelNames(targetDir).size === 0;
   try {
-    fs3.mkdirSync(targetDir, { recursive: true });
-    let createdFiles;
-    if (template.source.kind === "bundled") {
-      createdFiles = loadBundled(template.source.dir, targetDir);
-    } else {
-      createdFiles = await loadRemote(template.source.pkg, targetDir);
-    }
+    fs4.mkdirSync(targetDir, { recursive: true });
+    const createdFiles = loadBundled(template.source.dir, targetDir);
     rewriteProjectIdentity(targetDir, projectName, namespace);
-    console.log(chalk.bold("  Created files:"));
-    for (const f of createdFiles.slice(0, 20)) {
-      console.log(chalk.green(`    + ${f}`));
-    }
-    if (createdFiles.length > 20) {
-      console.log(chalk.dim(`    \u2026 and ${createdFiles.length - 20} more`));
-    }
+    printSuccess(`Template files written (${createdFiles.length})`);
     console.log("");
     if (!options.skipInstall) {
       printStep("Installing dependencies...");
+      let installed = false;
       try {
-        const pm = detectPackageManager();
         execSync(`${pm} install`, { stdio: "inherit", cwd: targetDir });
+        installed = true;
         console.log("");
       } catch {
-        printWarning("Dependency installation failed. Run `npm install` manually.");
+        printWarning(`Dependency installation failed. Run \`${pm} install\` manually.`);
         console.log("");
       }
+      if (installed) {
+        const resolved = readResolvedCliVersion(targetDir);
+        if (resolved) {
+          const result = pinRuntimeImage(targetDir, resolved);
+          if (result.pinned) {
+            printSuccess(`Dockerfile runtime image pinned to ${result.tag}`);
+          } else {
+            printWarning(
+              `Could not pin the Dockerfile runtime image (${result.reason}); it still reads \`latest\` \u2014 pin it to ${resolved} before deploying.`
+            );
+          }
+          console.log("");
+        }
+      }
     }
+    const beforeSkills = topLevelNames(targetDir);
     if (!options.skipInstall && !options.skipSkills) {
       printStep("Installing AI skills for your coding agent...");
       try {
@@ -410,22 +494,29 @@ var program = new Command().name("create-objectstack").description("Create a new
         console.log("");
       }
     }
+    const skillPaths = new Set(
+      [...topLevelNames(targetDir)].filter((p) => !beforeSkills.has(p))
+    );
+    printCreatedSummary(targetDir, { wasEmpty: targetWasEmpty, skillPaths });
     printSuccess("Environment created!");
     console.log("");
-    console.log(chalk.bold("  Next steps:"));
+    console.log(chalk2.bold("  Next steps:"));
     if (!isCurrentDir) {
-      console.log(chalk.dim(`    cd ${name}`));
+      console.log(chalk2.dim(`    cd ${name}`));
     }
     if (options.skipInstall) {
-      console.log(chalk.dim("    npm install"));
+      console.log(chalk2.dim(`    ${pm} install`));
     }
-    console.log(chalk.dim("    npm run dev           # Start development server"));
-    console.log(chalk.dim("    npm run validate      # Verify metadata: schema + predicates + bindings"));
-    console.log(chalk.dim("                          # (run after every metadata edit \u2014 see AGENTS.md)"));
+    const devLabel = `${pm} run dev`;
+    const validateLabel = `${pm} run validate`;
+    const labelWidth = Math.max(devLabel.length, validateLabel.length) + 3;
+    console.log(chalk2.dim(`    ${devLabel.padEnd(labelWidth)}# Start development server`));
+    console.log(chalk2.dim(`    ${validateLabel.padEnd(labelWidth)}# Verify metadata: schema + predicates + bindings`));
+    console.log(chalk2.dim(`    ${" ".repeat(labelWidth)}# (run after every metadata edit \u2014 see AGENTS.md)`));
     if (options.skipInstall || options.skipSkills) {
       console.log("");
-      console.log(chalk.bold("  AI Skills (recommended):"));
-      console.log(chalk.dim("    npx skills add objectstack-ai/objectstack/skills"));
+      console.log(chalk2.bold("  AI Skills (recommended):"));
+      console.log(chalk2.dim("    npx skills add objectstack-ai/objectstack/skills"));
     }
     console.log("");
   } catch (error) {

package/dist/templates/AGENTS.md

@@ -96,6 +96,6 @@ Skills are triggered automatically based on task context:
 
 ## Learn More
 
-- [ObjectStack Documentation](https://objectstack.com/docs)
+- [ObjectStack Documentation](https://objectstack.ai/docs)
 - [GitHub: objectstack-ai/objectstack](https://github.com/objectstack-ai/objectstack)
 - [Skills CLI](https://skills.sh/) — Manage AI skills across agents

package/dist/templates/blank/Dockerfile

@@ -7,7 +7,7 @@
 #     my-app
 #
 # Or run the full app + Postgres stack: see docker-compose.yml.
-# Docs: https://docs.objectstack.ai/docs/deployment/self-hosting
+# Docs: https://objectstack.ai/docs/deployment/self-hosting
 
 # ── Build stage: compile TypeScript metadata to the artifact ─────────
 FROM node:22-slim AS build
@@ -20,9 +20,12 @@ RUN npx os build              # → dist/objectstack.json
 # ── Runtime: the official ObjectStack runtime image ──────────────────
 # Ships Node + @objectstack/cli with `os start`, a non-root user, the
 # /api/v1/health HEALTHCHECK, and OS_ARTIFACT_PATH/OS_PORT preset (port 8080)
-# — see docker/README.md in the framework repo. Pin the tag to the
-# @objectstack/cli version in your package.json so the runtime matches the
-# CLI that built the artifact.
+# — see the self-hosting guide linked above.
+#
+# Dependencies were not installed while scaffolding, so the tag below could
+# not be resolved for you. `latest` floats to whatever release is newest,
+# which is unrelated to the @objectstack/cli your app resolves — pin it to
+# that version, the CLI that builds your artifact, before you deploy.
 FROM ghcr.io/objectstack-ai/objectstack:latest
 COPY --from=build --chown=node:node /app/dist/objectstack.json /srv/app/objectstack.json