create-ortha-app 0.4.2 → 0.5.0

package/dist/cli.js

@@ -2,276 +2,15 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
 const tslib_1 = require("tslib");
-const node_crypto_1 = require("node:crypto");
-const node_child_process_1 = require("node:child_process");
-const node_fs_1 = require("node:fs");
-const node_path_1 = require("node:path");
-const promises_1 = require("node:readline/promises");
-const features_1 = require("./lib/features");
-const template_1 = require("./lib/template");
-const ui = tslib_1.__importStar(require("./lib/ui"));
-const validate_1 = require("./lib/validate");
-const USAGE = `create-ortha-app — scaffold an Ortha CMS app
-
-Usage: npx create-ortha-app <directory> [options]
-
-Options:
-  --yes            Accept every default, asking nothing
-  --media <id>     Storage adapter (default: media-local)
-  --copilot <ids>  Comma-separated copilot providers, or "none"
-  --sso <ids>      Comma-separated identity providers (sso-oidc), or "none"
-  --protocols <ids> Comma-separated protocols beyond REST (graphql, mcp), or "none"
-  --no-install     Skip installing dependencies
-  --no-git         Skip initialising a git repository
-  -h, --help       Show this message
-`;
-/** Whether a bare `--flag` is present. */
-function flag(argv, name) {
-    return argv.includes(`--${name}`);
-}
-/** Reads `--name=value` or `--name value` from argv. */
-function option(argv, name) {
-    const inline = argv.find((arg) => arg.startsWith(`--${name}=`));
-    if (inline)
-        return inline.slice(`--${name}=`.length);
-    const index = argv.indexOf(`--${name}`);
-    const next = index === -1 ? undefined : argv[index + 1];
-    return next && !next.startsWith('-') ? next : undefined;
-}
-/** Splits a comma-separated flag value; `none` means an empty selection. */
-function idList(raw) {
-    if (raw === undefined)
-        return undefined;
-    if (raw.trim() === 'none')
-        return [];
-    return raw
-        .split(',')
-        .map((id) => id.trim())
-        .filter(Boolean);
-}
-/**
- * This package's own version, which every `@orthacms/*` dependency in the
- * generated app is pinned to.
- *
- * The scaffolder is released in lockstep with the packages it scaffolds, so its
- * version *is* the matching set — which is the whole mechanism keeping a
- * generated app internally consistent. Reading it from the manifest rather than
- * resolving `latest` from the registry also means `npx create-ortha-app@0.3.0`
- * generates a 0.3.0 app, not whatever shipped since.
- */
-function ownVersion() {
-    const manifest = (0, node_path_1.join)(__dirname, '../package.json');
-    return JSON.parse((0, node_fs_1.readFileSync)(manifest, 'utf8'))
-        .version;
-}
-/** Runs a command in `cwd`, returning whether it succeeded. */
-function runCommand(command, args, cwd) {
-    return ((0, node_child_process_1.spawnSync)(command, args, {
-        cwd,
-        stdio: 'inherit',
-        shell: process.platform === 'win32'
-    }).status === 0);
-}
-/** Turns a feature into a picker row. */
-function toChoice(feature) {
-    return {
-        value: feature.id,
-        label: feature.label,
-        hint: feature.hint,
-        selected: feature.enabledByDefault,
-        disabled: !feature.available,
-        locked: feature.locked
-    };
-}
 /**
- * The ids a feature group falls back to when nothing is picked.
+ * The `create-ortha-app` binary.
  *
- * A locked feature is in every answer, including `--protocols none`: REST is
- * not something the flag can switch off.
+ * Nothing but the entry point: the scaffolder lives in `lib/run.ts`, so a test
+ * can import it without a module that writes an app the moment it is required.
  */
-function defaultsOf(features) {
-    return features
-        .filter((feature) => (feature.enabledByDefault || feature.locked) &&
-        feature.available)
-        .map((feature) => feature.id);
-}
-/** The ids that are on regardless of what was asked or passed. */
-function lockedOf(features) {
-    return features
-        .filter((feature) => feature.locked && feature.available)
-        .map((feature) => feature.id);
-}
-/** Asks a free-text question, re-asking until it validates. */
-async function askText(label, fallback, validate) {
-    const rl = (0, promises_1.createInterface)({
-        input: process.stdin,
-        output: process.stdout
-    });
-    try {
-        for (;;) {
-            const raw = await rl.question(`${ui.cyan('◆')} ${ui.bold(label)} ${ui.dim(`(${fallback})`)} `);
-            const answer = raw.trim() || fallback;
-            const problem = validate?.(answer);
-            if (!problem)
-                return answer;
-            ui.error(problem);
-        }
-    }
-    finally {
-        rl.close();
-    }
-}
-/**
- * Resolves the answers, asking only when there is a terminal to ask in.
- *
- * Non-interactive is not an error case to warn about — it is CI, a piped
- * install, and `--yes`. A scaffolder that blocks on a prompt nobody can answer
- * hangs a pipeline until it times out, which is a far worse failure than
- * defaulting, so the flags and the defaults cover every question.
- */
-async function resolveAnswers(argv, defaultName) {
-    const asked = !flag(argv, 'yes') && ui.interactive();
-    const defaultDatabaseUrl = `postgresql://ortha:ortha@localhost:5432/${defaultName.replace(/[^a-z0-9_]/gi, '_')}`;
-    const media = idList(option(argv, 'media')) ?? defaultsOf(features_1.MEDIA_PROVIDERS);
-    const copilot = idList(option(argv, 'copilot')) ?? defaultsOf(features_1.COPILOT_PROVIDERS);
-    const sso = idList(option(argv, 'sso')) ?? defaultsOf(features_1.SSO_PROVIDERS);
-    const protocols = [
-        ...lockedOf(features_1.PROTOCOLS),
-        ...(idList(option(argv, 'protocols')) ?? defaultsOf(features_1.PROTOCOLS))
-    ];
-    if (!asked) {
-        return {
-            appName: defaultName,
-            databaseUrl: defaultDatabaseUrl,
-            adminEmail: 'admin@example.com',
-            selection: {
-                enabled: new Set([...media, ...copilot, ...sso, ...protocols])
-            }
-        };
-    }
-    ui.section('Project');
-    const appName = await askText('App name', defaultName, validate_1.validateAppName);
-    const databaseUrl = await askText('Database URL', defaultDatabaseUrl, validate_1.validateDatabaseUrl);
-    const adminEmail = await askText('Admin email', 'admin@example.com');
-    ui.section('Features');
-    ui.note('Everything else is installed for you. These are the choices.');
-    console.log('');
-    // Only ask when there is more than one answer available. S3 is not
-    // published, so today this is a question with a single possible reply, and
-    // asking it would be noise pretending to be a choice.
-    const selectable = features_1.MEDIA_PROVIDERS.filter((provider) => provider.available);
-    const chosenMedia = selectable.length > 1
-        ? [
-            (await ui.select('Where should uploads be stored?', features_1.MEDIA_PROVIDERS.map(toChoice))) ?? media[0]
-        ]
-        : media;
-    const chosenCopilot = (await ui.multiselect('AI copilot — which model backends?', features_1.COPILOT_PROVIDERS.map(toChoice))) ?? copilot;
-    const chosenSso = (await ui.multiselect('Single sign-on — which identity providers?', features_1.SSO_PROVIDERS.map(toChoice))) ?? sso;
-    const chosenProtocols = (await ui.multiselect('Which protocols should the content API speak?', features_1.PROTOCOLS.map(toChoice))) ?? protocols;
-    return {
-        appName,
-        databaseUrl,
-        adminEmail,
-        selection: {
-            enabled: new Set([
-                ...chosenMedia.filter(Boolean),
-                ...chosenCopilot,
-                ...chosenSso,
-                ...chosenProtocols
-            ])
-        }
-    };
-}
-/** Human-readable summary of what was chosen. */
-function describeSelection(selection) {
-    const labelsFor = (features) => {
-        const chosen = features
-            .filter((feature) => selection.enabled.has(feature.id))
-            .map((feature) => feature.label);
-        return chosen.length > 0 ? chosen.join(', ') : ui.dim('none');
-    };
-    const providers = features_1.COPILOT_PROVIDERS.filter((provider) => selection.enabled.has(provider.id));
-    return [
-        ['Storage', labelsFor(features_1.MEDIA_PROVIDERS)],
-        ['Protocols', labelsFor(features_1.PROTOCOLS)],
-        [
-            'Copilot',
-            providers.length > 0
-                ? `${providers.map((p) => p.label).join(', ')} + offline fake`
-                : 'offline fake only'
-        ],
-        ['Sign-in', labelsFor(features_1.SSO_PROVIDERS)],
-        ['Ortha packages', String((0, features_1.resolvePackages)(selection).length + 1)]
-    ];
-}
-async function main() {
-    const argv = process.argv.slice(2);
-    if (flag(argv, 'help') || argv.includes('-h')) {
-        console.log(USAGE);
-        return;
-    }
-    const positional = argv.filter((arg) => !arg.startsWith('-'));
-    const target = (0, node_path_1.resolve)(positional[0] ?? '.');
-    ui.banner('Ortha CMS', `Creating an app in ${target}`);
-    if ((0, template_1.isNonEmptyDirectory)(target)) {
-        throw new Error(`${target} already exists and is not empty. Pick a new directory, ` +
-            `or empty that one first.`);
-    }
-    const answers = await resolveAnswers(argv, (0, node_path_1.basename)(target));
-    // Generated rather than prompted: a password typed at a prompt is echoed to
-    // the terminal and lands in shell history. This one is written only to the
-    // git-ignored .env, and printed once below.
-    const adminPassword = (0, node_crypto_1.randomBytes)(12).toString('base64url');
-    ui.summary('Your app', [
-        ['Name', answers.appName],
-        ['Database', (0, validate_1.databaseNameFrom)(answers.databaseUrl)],
-        ...describeSelection(answers.selection)
-    ]);
-    (0, node_fs_1.mkdirSync)(target, { recursive: true });
-    (0, template_1.renderTemplate)((0, node_path_1.join)(__dirname, '../templates/default'), target, {
-        appName: answers.appName,
-        appTitle: answers.appName,
-        databaseUrl: answers.databaseUrl,
-        databaseName: (0, validate_1.databaseNameFrom)(answers.databaseUrl),
-        adminEmail: answers.adminEmail,
-        adminPassword,
-        orthaVersion: ownVersion(),
-        selection: answers.selection
-    });
-    console.log('');
-    ui.success('Files written');
-    if (!flag(argv, 'no-git') && !(0, node_fs_1.existsSync)((0, node_path_1.join)(target, '.git'))) {
-        if (runCommand('git', ['init', '--quiet'], target)) {
-            ui.success('Git repository initialised');
-        }
-    }
-    let installed = true;
-    if (!flag(argv, 'no-install')) {
-        console.log('');
-        ui.note('Installing dependencies…');
-        installed = runCommand('npm', ['install', '--no-audit', '--no-fund'], target);
-        if (installed)
-            ui.success('Dependencies installed');
-    }
-    if (!installed) {
-        ui.error('Dependency installation failed — fix the error above, then run ' +
-            '`npm install` in the new directory.');
-        process.exitCode = 1;
-    }
-    ui.summary('Your admin account', [
-        ['Email', answers.adminEmail],
-        ['Password', ui.bold(adminPassword)],
-        ['', ui.dim('Also written to .env')]
-    ]);
-    ui.nextSteps([
-        `cd ${(0, node_path_1.basename)(target)}`,
-        ...(flag(argv, 'no-install') ? ['npm install'] : []),
-        'docker compose up -d',
-        'npm run migrate',
-        `npm run dev        ${ui.dim('→ http://localhost:4200')}`
-    ]);
-}
-main().catch((error) => {
+const run_1 = require("./lib/run");
+const ui = tslib_1.__importStar(require("./lib/ui"));
+(0, run_1.main)().catch((error) => {
     ui.error(error instanceof Error ? error.message : String(error));
     process.exit(1);
 });

package/dist/lib/features.d.ts

@@ -39,15 +39,18 @@ export interface Feature {
 /**
  * The packages every app gets, whatever it opts into.
  *
- * The **copilot** is here — plugin, admin panel and the offline `fake` adapter —
- * even though it is a large feature nobody may want. Two reasons. Its server
- * half arrives anyway: five core plugins (`content`, `activity`, `i18n`,
- * `media`, `users`) depend on `copilot-server` to contribute their tools, so
- * the code is on disk whatever the manifest says, and leaving it undeclared
- * bought nothing but a missing chat panel. And `fake` needs no key and no
- * network, so a default app gets a copilot that genuinely works offline —
- * while `COPILOT_ENABLED` stays `false`, so nothing reaches a model until an
- * operator says so.
+ * The **copilot** is here — plugin and admin panel — even though it is a large
+ * feature nobody may want, because its server half arrives anyway: five core
+ * plugins (`content`, `activity`, `i18n`, `media`, `users`) depend on
+ * `copilot-server` to contribute their tools, so the code is on disk whatever
+ * the manifest says, and leaving it undeclared bought nothing but a missing chat
+ * panel. No **model backend** comes with it: those are the opt-in
+ * `COPILOT_PROVIDERS` below, and an app that picks none has the plugin
+ * installed and nothing registered. `COPILOT_ENABLED` stays `false`, which
+ * unregisters the copilot's routes, so a generated app ships with the chat
+ * surfaces absent rather than visible and refusing — and turning it on without
+ * a configured backend fails at boot rather than shipping a chat that cannot
+ * answer.
  *
  * The **extension points** are here for the same reason — `content-domain`,
  * `copilot-domain`, `tools-server`, `query-builder-admin`. Every one of them
@@ -64,9 +67,16 @@ export interface Feature {
  * what makes that resolution something the app owns rather than borrows.
  * `identity-provider-fake` is the scripted identity provider: it needs no
  * tenant and no network, so it is how a generated app's sign-in page can be
- * exercised offline, exactly as `copilot-provider-fake` is for the chat. Note
- * that shipping it installs nothing: an adapter only does something once the
- * composition root registers it, and the template registers none.
+ * exercised offline. Note that shipping it installs nothing: an adapter only
+ * does something once the composition root registers it, and the template
+ * registers none.
+ *
+ * `media-domain` is the storage port, on the same reasoning again: it is what
+ * an operator implements to write a `StorageProvider` for a backend we ship no
+ * adapter for, and it arrives transitively through both `media-server` and
+ * whichever `media-provider-*` the app chose. It is also the package that makes
+ * that choice cheap — the port lives away from the server precisely so
+ * installing an adapter installs an adapter.
  *
  * `design-system`, `utils-admin` and `utils-server` are here even though the
  * template's own files barely touch them: they are the first things anyone
@@ -112,11 +122,10 @@ export declare const MEDIA_PROVIDERS: readonly Feature[];
  * §10 says is an operator's decision to make explicitly. Pick nothing and the
  * copilot is not registered at all.
  *
- * `copilot-provider-fake` is not offered here — it is installed automatically
- * whenever the copilot is on. It is a shipped adapter rather than test
- * scaffolding (ADR-0004 §3): it needs no key and no network, so it is what
- * makes the chat work offline, and it is registered last so it is the default
- * only when it is the only one.
+ * There is no offline stand-in to fall back on. The scripted `fake` adapter is
+ * a private test fixture of the CMS repo, not a published package, so an app
+ * that picks nothing here has the copilot plugin installed with no backend
+ * registered — and `COPILOT_ENABLED` must stay `false` until one is.
  */
 export declare const COPILOT_PROVIDERS: readonly Feature[];
 /**
@@ -141,8 +150,8 @@ export declare const COPILOT_PROVIDERS: readonly Feature[];
  * second reason not to install them for an app that will never speak them.
  *
  * `identity-provider-fake` is not offered: it is installed unconditionally,
- * like `copilot-provider-fake`, because it needs no tenant and no network and
- * is how a generated app's sign-in page is exercised offline. Installing it
+ * because it needs no tenant and no network and is how a generated app's
+ * sign-in page is exercised offline. Installing it
  * registers nothing — an adapter only does something once the composition root
  * names it, and the template names none.
  */
@@ -180,6 +189,19 @@ export interface FeatureSelection {
 export declare function resolvePackages(selection: FeatureSelection): string[];
 /** The dev-time `@orthacms/*` dependencies, sorted. */
 export declare function resolveDevPackages(): string[];
-/** The feature ids in force for a selection — what `ortha:if` tests against. */
+/**
+ * The feature ids in force for a selection — what `ortha:if` tests against.
+ *
+ * The picked ids, plus **one** derived group flag: `sso`, set when any
+ * `sso-*` provider was chosen.
+ *
+ * It exists because `ortha:if` is deliberately line-based with no expression
+ * language, so a block cannot say "any of these three". Three providers share
+ * one `ssoProviders` key in the config, one builder function in `plugins.ts`
+ * and one extra argument to `IdentityPlugin` — each of which has to appear if
+ * *any* of them was picked, and none of which may be left behind as an empty
+ * husk when none was. `sso` is that condition, and it is derived here rather
+ * than added to the picker so it can never be selected on its own.
+ */
 export declare function resolveFlags(selection: FeatureSelection): Set<string>;
 //# sourceMappingURL=features.d.ts.map

package/dist/lib/features.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"features.d.ts","sourceRoot":"","sources":["../../src/lib/features.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH,qDAAqD;AACrD,MAAM,WAAW,OAAO;IACpB,2EAA2E;IAC3E,EAAE,EAAE,MAAM,CAAC;IACX,6BAA6B;IAC7B,KAAK,EAAE,MAAM,CAAC;IACd,gCAAgC;IAChC,IAAI,EAAE,MAAM,CAAC;IACb,oEAAoE;IACpE,QAAQ,EAAE,SAAS,MAAM,EAAE,CAAC;IAC5B,gCAAgC;IAChC,gBAAgB,EAAE,OAAO,CAAC;IAC1B;;;;OAIG;IACH,SAAS,EAAE,OAAO,CAAC;IACnB;;;OAGG;IACH,MAAM,CAAC,EAAE,OAAO,CAAC;CACpB;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAsCG;AACH,eAAO,MAAM,aAAa,EAAE,SAAS,MAAM,EAqC1C,CAAC;AAEF,0EAA0E;AAC1E,eAAO,MAAM,iBAAiB,EAAE,SAAS,MAAM,EAAsB,CAAC;AAEtE;;;;;;;;;;;;;;;GAeG;AACH,eAAO,MAAM,mBAAmB,EAAE,SAAS,MAAM,EAGhD,CAAC;AAEF;;;;;;GAMG;AACH,eAAO,MAAM,eAAe,EAAE,SAAS,OAAO,EAyC7C,CAAC;AAEF;;;;;;;;;;;;;;GAcG;AACH,eAAO,MAAM,iBAAiB,EAAE,SAAS,OAAO,EAiB/C,CAAC;AAEF;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AACH,eAAO,MAAM,aAAa,EAAE,SAAS,OAAO,EAyB3C,CAAC;AAEF;;;;;;;;;;;;;GAaG;AACH,eAAO,MAAM,SAAS,EAAE,SAAS,OAAO,EA0BvC,CAAC;AAEF,uEAAuE;AACvE,eAAO,MAAM,YAAY,EAAE,SAAS,OAAO,EAK1C,CAAC;AAEF,8CAA8C;AAC9C,MAAM,WAAW,gBAAgB;IAC7B,gFAAgF;IAChF,OAAO,EAAE,WAAW,CAAC,MAAM,CAAC,CAAC;CAChC;AAED;;;;;;;GAOG;AACH,wBAAgB,eAAe,CAAC,SAAS,EAAE,gBAAgB,GAAG,MAAM,EAAE,CASrE;AAED,uDAAuD;AACvD,wBAAgB,kBAAkB,IAAI,MAAM,EAAE,CAE7C;AAED,gFAAgF;AAChF,wBAAgB,YAAY,CAAC,SAAS,EAAE,gBAAgB,GAAG,GAAG,CAAC,MAAM,CAAC,CAErE"}
+{"version":3,"file":"features.d.ts","sourceRoot":"","sources":["../../src/lib/features.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH,qDAAqD;AACrD,MAAM,WAAW,OAAO;IACpB,2EAA2E;IAC3E,EAAE,EAAE,MAAM,CAAC;IACX,6BAA6B;IAC7B,KAAK,EAAE,MAAM,CAAC;IACd,gCAAgC;IAChC,IAAI,EAAE,MAAM,CAAC;IACb,oEAAoE;IACpE,QAAQ,EAAE,SAAS,MAAM,EAAE,CAAC;IAC5B,gCAAgC;IAChC,gBAAgB,EAAE,OAAO,CAAC;IAC1B;;;;OAIG;IACH,SAAS,EAAE,OAAO,CAAC;IACnB;;;OAGG;IACH,MAAM,CAAC,EAAE,OAAO,CAAC;CACpB;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAgDG;AACH,eAAO,MAAM,aAAa,EAAE,SAAS,MAAM,EA6C1C,CAAC;AAEF,0EAA0E;AAC1E,eAAO,MAAM,iBAAiB,EAAE,SAAS,MAAM,EAAsB,CAAC;AAEtE;;;;;;;;;;;;;;;GAeG;AACH,eAAO,MAAM,mBAAmB,EAAE,SAAS,MAAM,EAGhD,CAAC;AAEF;;;;;;GAMG;AACH,eAAO,MAAM,eAAe,EAAE,SAAS,OAAO,EAyC7C,CAAC;AAEF;;;;;;;;;;;;;GAaG;AACH,eAAO,MAAM,iBAAiB,EAAE,SAAS,OAAO,EAiB/C,CAAC;AAEF;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AACH,eAAO,MAAM,aAAa,EAAE,SAAS,OAAO,EAyB3C,CAAC;AAEF;;;;;;;;;;;;;GAaG;AACH,eAAO,MAAM,SAAS,EAAE,SAAS,OAAO,EA0BvC,CAAC;AAEF,uEAAuE;AACvE,eAAO,MAAM,YAAY,EAAE,SAAS,OAAO,EAK1C,CAAC;AAEF,8CAA8C;AAC9C,MAAM,WAAW,gBAAgB;IAC7B,gFAAgF;IAChF,OAAO,EAAE,WAAW,CAAC,MAAM,CAAC,CAAC;CAChC;AAED;;;;;;;GAOG;AACH,wBAAgB,eAAe,CAAC,SAAS,EAAE,gBAAgB,GAAG,MAAM,EAAE,CASrE;AAED,uDAAuD;AACvD,wBAAgB,kBAAkB,IAAI,MAAM,EAAE,CAE7C;AAED;;;;;;;;;;;;;GAaG;AACH,wBAAgB,YAAY,CAAC,SAAS,EAAE,gBAAgB,GAAG,GAAG,CAAC,MAAM,CAAC,CAQrE"}

package/dist/lib/features.js

@@ -21,15 +21,18 @@ exports.resolveFlags = resolveFlags;
 /**
  * The packages every app gets, whatever it opts into.
  *
- * The **copilot** is here — plugin, admin panel and the offline `fake` adapter —
- * even though it is a large feature nobody may want. Two reasons. Its server
- * half arrives anyway: five core plugins (`content`, `activity`, `i18n`,
- * `media`, `users`) depend on `copilot-server` to contribute their tools, so
- * the code is on disk whatever the manifest says, and leaving it undeclared
- * bought nothing but a missing chat panel. And `fake` needs no key and no
- * network, so a default app gets a copilot that genuinely works offline —
- * while `COPILOT_ENABLED` stays `false`, so nothing reaches a model until an
- * operator says so.
+ * The **copilot** is here — plugin and admin panel — even though it is a large
+ * feature nobody may want, because its server half arrives anyway: five core
+ * plugins (`content`, `activity`, `i18n`, `media`, `users`) depend on
+ * `copilot-server` to contribute their tools, so the code is on disk whatever
+ * the manifest says, and leaving it undeclared bought nothing but a missing chat
+ * panel. No **model backend** comes with it: those are the opt-in
+ * `COPILOT_PROVIDERS` below, and an app that picks none has the plugin
+ * installed and nothing registered. `COPILOT_ENABLED` stays `false`, which
+ * unregisters the copilot's routes, so a generated app ships with the chat
+ * surfaces absent rather than visible and refusing — and turning it on without
+ * a configured backend fails at boot rather than shipping a chat that cannot
+ * answer.
  *
  * The **extension points** are here for the same reason — `content-domain`,
  * `copilot-domain`, `tools-server`, `query-builder-admin`. Every one of them
@@ -46,9 +49,16 @@ exports.resolveFlags = resolveFlags;
  * what makes that resolution something the app owns rather than borrows.
  * `identity-provider-fake` is the scripted identity provider: it needs no
  * tenant and no network, so it is how a generated app's sign-in page can be
- * exercised offline, exactly as `copilot-provider-fake` is for the chat. Note
- * that shipping it installs nothing: an adapter only does something once the
- * composition root registers it, and the template registers none.
+ * exercised offline. Note that shipping it installs nothing: an adapter only
+ * does something once the composition root registers it, and the template
+ * registers none.
+ *
+ * `media-domain` is the storage port, on the same reasoning again: it is what
+ * an operator implements to write a `StorageProvider` for a backend we ship no
+ * adapter for, and it arrives transitively through both `media-server` and
+ * whichever `media-provider-*` the app chose. It is also the package that makes
+ * that choice cheap — the port lives away from the server precisely so
+ * installing an adapter installs an adapter.
  *
  * `design-system`, `utils-admin` and `utils-server` are here even though the
  * template's own files barely touch them: they are the first things anyone
@@ -60,6 +70,8 @@ exports.resolveFlags = resolveFlags;
 exports.CORE_PACKAGES = [
     '@orthacms/activity-admin',
     '@orthacms/activity-server',
+    '@orthacms/alarms-admin',
+    '@orthacms/alarms-server',
     '@orthacms/api-tokens-admin',
     '@orthacms/bootstrap-admin',
     '@orthacms/bootstrap-server',
@@ -68,7 +80,6 @@ exports.CORE_PACKAGES = [
     '@orthacms/content-server',
     '@orthacms/copilot-admin',
     '@orthacms/copilot-domain',
-    '@orthacms/copilot-provider-fake',
     '@orthacms/copilot-server',
     '@orthacms/database',
     '@orthacms/design-system',
@@ -80,8 +91,12 @@ exports.CORE_PACKAGES = [
     '@orthacms/identity-server',
     '@orthacms/insights-admin',
     '@orthacms/media-admin',
+    '@orthacms/media-domain',
     '@orthacms/media-server',
     '@orthacms/query-builder-admin',
+    '@orthacms/segments-admin',
+    '@orthacms/segments-domain',
+    '@orthacms/segments-server',
     '@orthacms/shell-admin',
     '@orthacms/tools-server',
     '@orthacms/transfer-admin',
@@ -91,6 +106,9 @@ exports.CORE_PACKAGES = [
     '@orthacms/users-server',
     '@orthacms/utils-admin',
     '@orthacms/utils-server',
+    '@orthacms/webhooks-admin',
+    '@orthacms/webhooks-domain',
+    '@orthacms/webhooks-server',
     '@orthacms/workspaces-admin',
     '@orthacms/workspaces-server',
     '@orthacms/wysiwyg-admin'
@@ -175,11 +193,10 @@ exports.MEDIA_PROVIDERS = [
  * §10 says is an operator's decision to make explicitly. Pick nothing and the
  * copilot is not registered at all.
  *
- * `copilot-provider-fake` is not offered here — it is installed automatically
- * whenever the copilot is on. It is a shipped adapter rather than test
- * scaffolding (ADR-0004 §3): it needs no key and no network, so it is what
- * makes the chat work offline, and it is registered last so it is the default
- * only when it is the only one.
+ * There is no offline stand-in to fall back on. The scripted `fake` adapter is
+ * a private test fixture of the CMS repo, not a published package, so an app
+ * that picks nothing here has the copilot plugin installed with no backend
+ * registered — and `COPILOT_ENABLED` must stay `false` until one is.
  */
 exports.COPILOT_PROVIDERS = [
     {
@@ -221,8 +238,8 @@ exports.COPILOT_PROVIDERS = [
  * second reason not to install them for an app that will never speak them.
  *
  * `identity-provider-fake` is not offered: it is installed unconditionally,
- * like `copilot-provider-fake`, because it needs no tenant and no network and
- * is how a generated app's sign-in page is exercised offline. Installing it
+ * because it needs no tenant and no network and is how a generated app's
+ * sign-in page is exercised offline. Installing it
  * registers nothing — an adapter only does something once the composition root
  * names it, and the template names none.
  */
@@ -322,7 +339,24 @@ function resolvePackages(selection) {
 function resolveDevPackages() {
     return [...exports.CORE_DEV_PACKAGES].sort();
 }
-/** The feature ids in force for a selection — what `ortha:if` tests against. */
+/**
+ * The feature ids in force for a selection — what `ortha:if` tests against.
+ *
+ * The picked ids, plus **one** derived group flag: `sso`, set when any
+ * `sso-*` provider was chosen.
+ *
+ * It exists because `ortha:if` is deliberately line-based with no expression
+ * language, so a block cannot say "any of these three". Three providers share
+ * one `ssoProviders` key in the config, one builder function in `plugins.ts`
+ * and one extra argument to `IdentityPlugin` — each of which has to appear if
+ * *any* of them was picked, and none of which may be left behind as an empty
+ * husk when none was. `sso` is that condition, and it is derived here rather
+ * than added to the picker so it can never be selected on its own.
+ */
 function resolveFlags(selection) {
-    return new Set(selection.enabled);
+    const flags = new Set(selection.enabled);
+    if (exports.SSO_PROVIDERS.some((provider) => flags.has(provider.id))) {
+        flags.add('sso');
+    }
+    return flags;
 }

package/dist/lib/run.d.ts

@@ -0,0 +1,22 @@
+import { type Feature, type FeatureSelection } from './features';
+export declare const USAGE = "create-ortha-app \u2014 scaffold an Ortha CMS app\n\nUsage: npx create-ortha-app <directory> [options]\n\nOptions:\n  --yes            Accept every default, asking nothing\n  --media <id>     Storage adapter (default: media-local)\n  --copilot <ids>  Comma-separated copilot providers, or \"none\"\n  --sso <ids>      Comma-separated identity providers (sso-oidc, sso-github,\n                   sso-saml), or \"none\"\n  --protocols <ids> Comma-separated protocols beyond REST (graphql, mcp), or \"none\"\n  --no-install     Skip installing dependencies\n  --no-git         Skip initialising a git repository\n  -h, --help       Show this message\n";
+/** The ids that are on regardless of what was asked or passed. */
+export declare function lockedOf(features: readonly Feature[]): string[];
+/** Everything the wizard resolves. */
+export interface Answers {
+    appName: string;
+    databaseUrl: string;
+    adminEmail: string;
+    selection: FeatureSelection;
+}
+/**
+ * Resolves the answers, asking only when there is a terminal to ask in.
+ *
+ * Non-interactive is not an error case to warn about — it is CI, a piped
+ * install, and `--yes`. A scaffolder that blocks on a prompt nobody can answer
+ * hangs a pipeline until it times out, which is a far worse failure than
+ * defaulting, so the flags and the defaults cover every question.
+ */
+export declare function resolveAnswers(argv: readonly string[], defaultName: string): Promise<Answers>;
+export declare function main(argv?: readonly string[]): Promise<void>;
+//# sourceMappingURL=run.d.ts.map

package/dist/lib/run.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"run.d.ts","sourceRoot":"","sources":["../../src/lib/run.ts"],"names":[],"mappings":"AAeA,OAAO,EAMH,KAAK,OAAO,EACZ,KAAK,gBAAgB,EACxB,MAAM,YAAY,CAAC;AASpB,eAAO,MAAM,KAAK,8oBAcjB,CAAC;AA6HF,kEAAkE;AAClE,wBAAgB,QAAQ,CAAC,QAAQ,EAAE,SAAS,OAAO,EAAE,GAAG,MAAM,EAAE,CAI/D;AA6BD,sCAAsC;AACtC,MAAM,WAAW,OAAO;IACpB,OAAO,EAAE,MAAM,CAAC;IAChB,WAAW,EAAE,MAAM,CAAC;IACpB,UAAU,EAAE,MAAM,CAAC;IACnB,SAAS,EAAE,gBAAgB,CAAC;CAC/B;AAED;;;;;;;GAOG;AACH,wBAAsB,cAAc,CAChC,IAAI,EAAE,SAAS,MAAM,EAAE,EACvB,WAAW,EAAE,MAAM,GACpB,OAAO,CAAC,OAAO,CAAC,CAuFlB;AA+BD,wBAAsB,IAAI,CACtB,IAAI,GAAE,SAAS,MAAM,EAA0B,GAChD,OAAO,CAAC,IAAI,CAAC,CAsFf"}