create-ortha-app 0.4.2 → 0.5.0

package/dist/lib/run.js

@@ -0,0 +1,318 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.USAGE = void 0;
+exports.lockedOf = lockedOf;
+exports.resolveAnswers = resolveAnswers;
+exports.main = main;
+const tslib_1 = require("tslib");
+/**
+ * The scaffolder itself: read the flags, ask what a terminal can be asked,
+ * write the app.
+ *
+ * Separate from `src/cli.ts`, which is the `bin` and does nothing but call
+ * `main()` and turn a thrown error into an exit code. The split is what makes
+ * this testable: importing a module that scaffolds on import would scaffold
+ * during a test run, so the refusals and the defaults below could only be
+ * checked by spawning a process.
+ */
+const node_crypto_1 = require("node:crypto");
+const node_child_process_1 = require("node:child_process");
+const node_fs_1 = require("node:fs");
+const node_path_1 = require("node:path");
+const promises_1 = require("node:readline/promises");
+const features_1 = require("./features");
+const template_1 = require("./template");
+const ui = tslib_1.__importStar(require("./ui"));
+const validate_1 = require("./validate");
+exports.USAGE = `create-ortha-app — scaffold an Ortha CMS app
+
+Usage: npx create-ortha-app <directory> [options]
+
+Options:
+  --yes            Accept every default, asking nothing
+  --media <id>     Storage adapter (default: media-local)
+  --copilot <ids>  Comma-separated copilot providers, or "none"
+  --sso <ids>      Comma-separated identity providers (sso-oidc, sso-github,
+                   sso-saml), or "none"
+  --protocols <ids> Comma-separated protocols beyond REST (graphql, mcp), or "none"
+  --no-install     Skip installing dependencies
+  --no-git         Skip initialising a git repository
+  -h, --help       Show this message
+`;
+/** Whether a bare `--flag` is present. */
+function flag(argv, name) {
+    return argv.includes(`--${name}`);
+}
+/** Reads `--name=value` or `--name value` from argv. */
+function option(argv, name) {
+    const inline = argv.find((arg) => arg.startsWith(`--${name}=`));
+    if (inline)
+        return inline.slice(`--${name}=`.length);
+    const index = argv.indexOf(`--${name}`);
+    const next = index === -1 ? undefined : argv[index + 1];
+    return next && !next.startsWith('-') ? next : undefined;
+}
+/** Splits a comma-separated flag value; `none` means an empty selection. */
+function idList(raw) {
+    if (raw === undefined)
+        return undefined;
+    if (raw.trim() === 'none')
+        return [];
+    return raw
+        .split(',')
+        .map((id) => id.trim())
+        .filter(Boolean);
+}
+/**
+ * The ids a `--media` / `--copilot` / `--sso` / `--protocols` flag named, checked
+ * against the group it belongs to.
+ *
+ * An id nobody recognises has to stop the run. The flags take *feature ids*
+ * (`media-s3`), not the label or the bare adapter name, and `--media s3` is the
+ * natural guess — it used to select nothing, and "nothing" is a real answer for
+ * three of the four groups, so it scaffolded an app quietly missing whatever was
+ * asked for. For storage that app cannot even compile: no adapter means no
+ * `storage` setting and no `mediaStorage()` for the config to call. Naming the
+ * valid ids here costs a typo nothing and turns a broken app into one line of
+ * output.
+ *
+ * `required` marks a single-choice group that must end up with something —
+ * storage, where "no adapter" is not a configuration an app can run.
+ */
+function selected(argv, name, group, required = false) {
+    const chosen = idList(option(argv, name)) ?? defaultsOf(group);
+    const known = new Set(group.map((feature) => feature.id));
+    const unknown = chosen.filter((id) => !known.has(id));
+    if (unknown.length > 0) {
+        throw new Error(`--${name}: no such option ${unknown.map((id) => `"${id}"`).join(', ')}. ` +
+            `Expected ${[...known].join(', ')}${required ? '' : ', or none'}.`);
+    }
+    if (required && chosen.length === 0) {
+        throw new Error(`--${name}: an app needs one of ${[...known].join(', ')} — ` +
+            'there is no configuration for "no adapter at all".');
+    }
+    return chosen;
+}
+/**
+ * This package's own version, which every `@orthacms/*` dependency in the
+ * generated app is pinned to.
+ *
+ * The scaffolder is released in lockstep with the packages it scaffolds, so its
+ * version *is* the matching set — which is the whole mechanism keeping a
+ * generated app internally consistent. Reading it from the manifest rather than
+ * resolving `latest` from the registry also means `npx create-ortha-app@0.3.0`
+ * generates a 0.3.0 app, not whatever shipped since.
+ */
+function ownVersion() {
+    const manifest = (0, node_path_1.join)(__dirname, '../../package.json');
+    return JSON.parse((0, node_fs_1.readFileSync)(manifest, 'utf8'))
+        .version;
+}
+/** Runs a command in `cwd`, returning whether it succeeded. */
+function runCommand(command, args, cwd) {
+    return ((0, node_child_process_1.spawnSync)(command, args, {
+        cwd,
+        stdio: 'inherit',
+        shell: process.platform === 'win32'
+    }).status === 0);
+}
+/** Turns a feature into a picker row. */
+function toChoice(feature) {
+    return {
+        value: feature.id,
+        label: feature.label,
+        hint: feature.hint,
+        selected: feature.enabledByDefault,
+        disabled: !feature.available,
+        locked: feature.locked
+    };
+}
+/**
+ * The ids a feature group falls back to when nothing is picked.
+ *
+ * A locked feature is in every answer, including `--protocols none`: REST is
+ * not something the flag can switch off.
+ */
+function defaultsOf(features) {
+    return features
+        .filter((feature) => (feature.enabledByDefault || feature.locked) &&
+        feature.available)
+        .map((feature) => feature.id);
+}
+/** The ids that are on regardless of what was asked or passed. */
+function lockedOf(features) {
+    return features
+        .filter((feature) => feature.locked && feature.available)
+        .map((feature) => feature.id);
+}
+/** Asks a free-text question, re-asking until it validates. */
+async function askText(label, fallback, validate) {
+    const rl = (0, promises_1.createInterface)({
+        input: process.stdin,
+        output: process.stdout
+    });
+    try {
+        for (;;) {
+            const raw = await rl.question(`${ui.cyan('◆')} ${ui.bold(label)} ${ui.dim(`(${fallback})`)} `);
+            const answer = raw.trim() || fallback;
+            const problem = validate?.(answer);
+            if (!problem)
+                return answer;
+            ui.error(problem);
+        }
+    }
+    finally {
+        rl.close();
+    }
+}
+/**
+ * Resolves the answers, asking only when there is a terminal to ask in.
+ *
+ * Non-interactive is not an error case to warn about — it is CI, a piped
+ * install, and `--yes`. A scaffolder that blocks on a prompt nobody can answer
+ * hangs a pipeline until it times out, which is a far worse failure than
+ * defaulting, so the flags and the defaults cover every question.
+ */
+async function resolveAnswers(argv, defaultName) {
+    const asked = !flag(argv, 'yes') && ui.interactive();
+    const defaultDatabaseUrl = `postgresql://ortha:ortha@localhost:5432/${defaultName.replace(/[^a-z0-9_]/gi, '_')}`;
+    // Storage is `required`: it is a single choice, and an app with no adapter
+    // has no `storage` setting for `plugins.ts` to hand its factory.
+    const media = selected(argv, 'media', features_1.MEDIA_PROVIDERS, true);
+    const copilot = selected(argv, 'copilot', features_1.COPILOT_PROVIDERS);
+    const sso = selected(argv, 'sso', features_1.SSO_PROVIDERS);
+    const protocols = [
+        ...lockedOf(features_1.PROTOCOLS),
+        ...selected(argv, 'protocols', features_1.PROTOCOLS)
+    ];
+    if (!asked) {
+        return {
+            appName: defaultName,
+            databaseUrl: defaultDatabaseUrl,
+            adminEmail: 'admin@example.com',
+            selection: {
+                enabled: new Set([...media, ...copilot, ...sso, ...protocols])
+            }
+        };
+    }
+    ui.section('Project');
+    const appName = await askText('App name', defaultName, validate_1.validateAppName);
+    const databaseUrl = await askText('Database URL', defaultDatabaseUrl, validate_1.validateDatabaseUrl);
+    const adminEmail = await askText('Admin email', 'admin@example.com');
+    ui.section('Features');
+    ui.note('Everything else is installed for you. These are the choices.');
+    console.log('');
+    // Only ask when there is more than one answer available. S3 is not
+    // published, so today this is a question with a single possible reply, and
+    // asking it would be noise pretending to be a choice.
+    const selectable = features_1.MEDIA_PROVIDERS.filter((provider) => provider.available);
+    const chosenMedia = selectable.length > 1
+        ? [
+            (await ui.select('Where should uploads be stored?', features_1.MEDIA_PROVIDERS.map(toChoice))) ?? media[0]
+        ]
+        : media;
+    const chosenCopilot = (await ui.multiselect('AI copilot — which model backends?', features_1.COPILOT_PROVIDERS.map(toChoice))) ?? copilot;
+    const chosenSso = (await ui.multiselect('Single sign-on — which identity providers?', features_1.SSO_PROVIDERS.map(toChoice))) ?? sso;
+    const chosenProtocols = (await ui.multiselect('Which protocols should the content API speak?', features_1.PROTOCOLS.map(toChoice))) ?? protocols;
+    return {
+        appName,
+        databaseUrl,
+        adminEmail,
+        selection: {
+            enabled: new Set([
+                ...chosenMedia.filter(Boolean),
+                ...chosenCopilot,
+                ...chosenSso,
+                ...chosenProtocols
+            ])
+        }
+    };
+}
+/** Human-readable summary of what was chosen. */
+function describeSelection(selection) {
+    const labelsFor = (features) => {
+        const chosen = features
+            .filter((feature) => selection.enabled.has(feature.id))
+            .map((feature) => feature.label);
+        return chosen.length > 0 ? chosen.join(', ') : ui.dim('none');
+    };
+    const providers = features_1.COPILOT_PROVIDERS.filter((provider) => selection.enabled.has(provider.id));
+    return [
+        ['Storage', labelsFor(features_1.MEDIA_PROVIDERS)],
+        ['Protocols', labelsFor(features_1.PROTOCOLS)],
+        [
+            'Copilot',
+            providers.length > 0
+                ? providers.map((p) => p.label).join(', ')
+                : ui.dim('no backend')
+        ],
+        ['Sign-in', labelsFor(features_1.SSO_PROVIDERS)],
+        ['Ortha packages', String((0, features_1.resolvePackages)(selection).length + 1)]
+    ];
+}
+async function main(argv = process.argv.slice(2)) {
+    if (flag(argv, 'help') || argv.includes('-h')) {
+        console.log(exports.USAGE);
+        return;
+    }
+    const positional = argv.filter((arg) => !arg.startsWith('-'));
+    const target = (0, node_path_1.resolve)(positional[0] ?? '.');
+    ui.banner('Ortha CMS', `Creating an app in ${target}`);
+    if ((0, template_1.isNonEmptyDirectory)(target)) {
+        throw new Error(`${target} already exists and is not empty. Pick a new directory, ` +
+            `or empty that one first.`);
+    }
+    const answers = await resolveAnswers(argv, (0, node_path_1.basename)(target));
+    // Generated rather than prompted: a password typed at a prompt is echoed to
+    // the terminal and lands in shell history. This one is written only to the
+    // git-ignored .env, and printed once below.
+    const adminPassword = (0, node_crypto_1.randomBytes)(12).toString('base64url');
+    ui.summary('Your app', [
+        ['Name', answers.appName],
+        ['Database', (0, validate_1.databaseNameFrom)(answers.databaseUrl)],
+        ...describeSelection(answers.selection)
+    ]);
+    (0, node_fs_1.mkdirSync)(target, { recursive: true });
+    (0, template_1.renderTemplate)((0, node_path_1.join)(__dirname, '../../templates/default'), target, {
+        appName: answers.appName,
+        appTitle: answers.appName,
+        databaseUrl: answers.databaseUrl,
+        databaseName: (0, validate_1.databaseNameFrom)(answers.databaseUrl),
+        adminEmail: answers.adminEmail,
+        adminPassword,
+        orthaVersion: ownVersion(),
+        selection: answers.selection
+    });
+    console.log('');
+    ui.success('Files written');
+    if (!flag(argv, 'no-git') && !(0, node_fs_1.existsSync)((0, node_path_1.join)(target, '.git'))) {
+        if (runCommand('git', ['init', '--quiet'], target)) {
+            ui.success('Git repository initialised');
+        }
+    }
+    let installed = true;
+    if (!flag(argv, 'no-install')) {
+        console.log('');
+        ui.note('Installing dependencies…');
+        installed = runCommand('npm', ['install', '--no-audit', '--no-fund'], target);
+        if (installed)
+            ui.success('Dependencies installed');
+    }
+    if (!installed) {
+        ui.error('Dependency installation failed — fix the error above, then run ' +
+            '`npm install` in the new directory.');
+        process.exitCode = 1;
+    }
+    ui.summary('Your admin account', [
+        ['Email', answers.adminEmail],
+        ['Password', ui.bold(adminPassword)],
+        ['', ui.dim('Also written to .env')]
+    ]);
+    ui.nextSteps([
+        `cd ${(0, node_path_1.basename)(target)}`,
+        ...(flag(argv, 'no-install') ? ['npm install'] : []),
+        'docker compose up -d',
+        'npm run migrate',
+        `npm run dev        ${ui.dim('→ http://localhost:4200')}`
+    ]);
+}

package/dist/lib/template.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"template.d.ts","sourceRoot":"","sources":["../../src/lib/template.ts"],"names":[],"mappings":"AAWA,OAAO,EAIH,KAAK,gBAAgB,EACxB,MAAM,YAAY,CAAC;AAEpB,+DAA+D;AAC/D,MAAM,WAAW,cAAc;IAC3B,8CAA8C;IAC9C,OAAO,EAAE,MAAM,CAAC;IAChB,kEAAkE;IAClE,QAAQ,EAAE,MAAM,CAAC;IACjB,kCAAkC;IAClC,WAAW,EAAE,MAAM,CAAC;IACpB,oEAAoE;IACpE,YAAY,EAAE,MAAM,CAAC;IACrB,oDAAoD;IACpD,UAAU,EAAE,MAAM,CAAC;IACnB,+BAA+B;IAC/B,aAAa,EAAE,MAAM,CAAC;IACtB,+DAA+D;IAC/D,YAAY,EAAE,MAAM,CAAC;IACrB,2DAA2D;IAC3D,SAAS,EAAE,gBAAgB,CAAC;CAC/B;AAoBD,yDAAyD;AACzD,wBAAgB,MAAM,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,cAAc,GAAG,MAAM,CAevE;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,cAAc,CAC1B,QAAQ,EAAE,MAAM,EAChB,MAAM,EAAE,cAAc,GACvB,MAAM,CAmBR;AAuBD;;;;;;;GAOG;AACH,wBAAgB,cAAc,CAC1B,WAAW,EAAE,MAAM,EACnB,MAAM,EAAE,MAAM,EACd,MAAM,EAAE,cAAc,GACvB,IAAI,CAiCN;AAED,+CAA+C;AAC/C,wBAAgB,mBAAmB,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAMxD"}
+{"version":3,"file":"template.d.ts","sourceRoot":"","sources":["../../src/lib/template.ts"],"names":[],"mappings":"AAWA,OAAO,EAIH,KAAK,gBAAgB,EACxB,MAAM,YAAY,CAAC;AAEpB,+DAA+D;AAC/D,MAAM,WAAW,cAAc;IAC3B,8CAA8C;IAC9C,OAAO,EAAE,MAAM,CAAC;IAChB,kEAAkE;IAClE,QAAQ,EAAE,MAAM,CAAC;IACjB,kCAAkC;IAClC,WAAW,EAAE,MAAM,CAAC;IACpB,oEAAoE;IACpE,YAAY,EAAE,MAAM,CAAC;IACrB,oDAAoD;IACpD,UAAU,EAAE,MAAM,CAAC;IACnB,+BAA+B;IAC/B,aAAa,EAAE,MAAM,CAAC;IACtB,+DAA+D;IAC/D,YAAY,EAAE,MAAM,CAAC;IACrB,2DAA2D;IAC3D,SAAS,EAAE,gBAAgB,CAAC;CAC/B;AAoBD,yDAAyD;AACzD,wBAAgB,MAAM,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,cAAc,GAAG,MAAM,CAevE;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,cAAc,CAC1B,QAAQ,EAAE,MAAM,EAChB,MAAM,EAAE,cAAc,GACvB,MAAM,CAmBR;AAuBD;;;;;;;GAOG;AACH,wBAAgB,cAAc,CAC1B,WAAW,EAAE,MAAM,EACnB,MAAM,EAAE,MAAM,EACd,MAAM,EAAE,cAAc,GACvB,IAAI,CA0CN;AAED,+CAA+C;AAC/C,wBAAgB,mBAAmB,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAMxD"}

package/dist/lib/template.js

@@ -104,7 +104,17 @@ function renderTemplate(templateDir, target, values) {
             (0, node_fs_1.writeFileSync)(destination, renderManifest(raw, values));
             continue;
         }
-        (0, node_fs_1.writeFileSync)(destination, render((0, conditionals_1.applyConditionals)(raw, flags, file), values));
+        const contents = (0, conditionals_1.applyConditionals)(raw, flags, file);
+        // A file that conditioned *itself* away is not written at all. This is
+        // what lets one module per optional plugin live under `config/`: wrap
+        // the whole of `config/mcp.ts` in `ortha:if mcp` and an app generated
+        // without MCP has no such file, rather than an empty one whose only
+        // job is to explain why it is empty. Guarded on the source having had
+        // content, so a template file that is deliberately blank still ships.
+        if (raw.trim() !== '' && contents.trim() === '') {
+            continue;
+        }
+        (0, node_fs_1.writeFileSync)(destination, render(contents, values));
     }
 }
 /** Whether `dir` exists and holds anything. */

package/package.json

@@ -1,6 +1,6 @@
 {
     "name": "create-ortha-app",
-    "version": "0.4.2",
+    "version": "0.5.0",
     "description": "Create an Ortha CMS app: npx create-ortha-app my-cms",
     "license": "MIT",
     "homepage": "https://github.com/ortha-source/ortha-cms/tree/main/packages/create-ortha-app",

package/templates/default/README.md.tmpl

@@ -22,7 +22,7 @@ provisioned on boot, idempotently — clear those two variables once you have it
 | `npm run build` | Compiles the server and builds the admin bundle |
 | `npm start` | Runs the built server — API **and** admin, one process, one origin |
 | `npm run migrate` | Applies every plugin's pending migrations |
-| `npm run generate -- --name=<name>` | Generates a migration for your own content tables |
+| `npm run generate -- --name=<name>` | Generates a migration for your own content tables — needs a `drizzle.config.ts` first, see below |
 | `npm run studio` | Opens Drizzle Studio on this app's database |
 | `npm test` | Unit tests — both halves |
 | `npm run e2e` | Both end-to-end suites |
@@ -109,7 +109,7 @@ source lands in the same place here.
 | --- | --- |
 | `apps/server/src/plugins.ts` | Which plugins the API runs, and **in what order** |
 | `apps/admin/src/plugins.ts` | Which plugins the admin UI runs |
-| `apps/server/ortha.config.ts` | Every setting, typed — the only reader of `process.env` |
+| `apps/server/ortha.config.ts` | Every setting, typed — with `apps/server/config/`, the only reader of the environment |
 | `apps/admin/src/styles.css` | The theme tokens: this app's whole visual identity |
 
 Upgrading is a version bump. Keep the `@orthacms/*` versions **in step with each
@@ -121,9 +121,9 @@ and UI that silently stops talking to itself.
 
 A server plugin is a `ServerPlugin` from `@orthacms/bootstrap-server` — a name,
 a NestJS module, and optionally its own migrations — added to the array in
-`src/server/plugins.ts`. `@InjectDatabase()` from `@orthacms/database` gives it
+`apps/server/src/plugins.ts`. `@InjectDatabase()` from `@orthacms/database` gives it
 the shared connection. An admin plugin is an `AdminPlugin` from
-`@orthacms/bootstrap-admin`, added to `src/admin/plugins.ts`.
+`@orthacms/bootstrap-admin`, added to `apps/admin/src/plugins.ts`.
 
 `@orthacms/utils-server` and `@orthacms/utils-admin` hold the shared toolkit
 (filter parsing, `apiClient`, slots, table URL state), and
@@ -145,18 +145,25 @@ talking to itself.
 ### AI copilot
 
 Installed, and **off** until you turn it on: set `COPILOT_ENABLED=true` in
-`.env`. Enabling a hosted backend sends workspace content to a third party, so
-it is an explicit decision rather than a default.
+`.env`. Off means off — with it `false` the app registers no `/api/copilot`
+route, so those endpoints 404 and the admin's chat panel, Agents view and
+Skills page are not there. Whether this app offers an AI assistant at all is a
+decision rather than a default.
 
-Backends are registered in `src/server/plugins.ts`, and **the order is the
+It is not the switch that keeps your content in-house, though. A backend is
+registered only when its settings are present (below), so an app with no key
+reaches no third party either way.
+
+Backends are registered in `apps/server/src/plugins.ts`, and **the order is the
 setting** — there is no `defaultProvider`. The first registered backend serves a
 run that names none, and it is what the admin's model picker opens on. A backend
 is only registered when its connection settings are present, so an unconfigured
 one never appears as an option that fails on the first message.
 
-The bundled `fake` provider needs no key and no network, and is registered last
-— so with nothing configured the chat still works, and it is the default only
-because it is the only one.
+There is no offline stand-in. Configure no backend and the copilot has nothing
+to call, so leave `COPILOT_ENABLED=false` until you have one — turning it on
+with an empty provider list refuses to boot rather than shipping a chat that
+cannot answer.
 <!-- ortha:if graphql -->
 ### GraphQL
 
@@ -182,8 +189,27 @@ This app starts with none. To add some:
 1. Write them under `apps/server/src/content/` and export a `contentTypes` array.
 2. Pass them to `ContentPlugin({ types: contentTypes, migrations: … })` in
    `apps/server/src/plugins.ts` — the comment there has the exact shape.
-3. Add `apps/server/drizzle.config.ts` pointing `schema` at your
-   `src/content/index.ts` and `out` at `../../migrations`.
+3. Add `apps/server/drizzle.config.ts`:
+
+    ```ts
+    import { defineConfig } from 'drizzle-kit';
+
+    export default defineConfig({
+        dialect: 'postgresql',
+        schema: 'apps/server/src/content/index.ts',
+        out: 'migrations'
+    });
+    ```
+
+    Both paths are relative to **this app's root**, not to the config file.
+    drizzle-kit resolves `schema` and `out` from the working directory, and
+    `ortha generate` runs it from the root — so `out: 'migrations'` is the
+    same `migrations/` the plugin's descriptor in step 2 points at, and a
+    `../../` in front of it would write two levels above your project.
+
+    No `dbCredentials`: generating a migration only diffs the schema against
+    the last snapshot and never connects, so there is no secret to put here.
+
 4. `npm run generate -- --name=add_content_types && npm run migrate`
 
 ## Deploying

package/templates/default/apps/admin/src/plugins.spec.ts

@@ -31,10 +31,14 @@ const EXPECTED_PLUGINS = [
     'i18n',
     'wysiwyg',
     'media',
+    'transfer',
+    'alarms',
     'copilot',
+    'segments',
     'users',
     'activity',
-    'api-tokens'
+    'api-tokens',
+    'webhooks'
 ];
 
 describe('buildPlugins()', () => {

package/templates/default/apps/admin/src/plugins.ts

@@ -1,6 +1,7 @@
 import type { AdminPlugin } from '@orthacms/bootstrap-admin';
 import { ActivityPlugin } from '@orthacms/activity-admin';
 import { ApiTokensPlugin } from '@orthacms/api-tokens-admin';
+import { WebhooksPlugin } from '@orthacms/webhooks-admin';
 import { ContentPlugin } from '@orthacms/content-admin';
 import { I18nPlugin } from '@orthacms/i18n-admin';
 import { IdentityPlugin } from '@orthacms/identity-admin';
@@ -11,9 +12,13 @@ import { UsersPlugin } from '@orthacms/users-admin';
 import { WorkspacesPlugin } from '@orthacms/workspaces-admin';
 import { WysiwygPlugin } from '@orthacms/wysiwyg-admin';
 import { CopilotPlugin } from '@orthacms/copilot-admin';
+import { AlarmsPlugin } from '@orthacms/alarms-admin';
+import { transferAdminPlugin } from '@orthacms/transfer-admin';
+import { SegmentsPlugin } from '@orthacms/segments-admin';
 
 /**
- * The admin's composition, mirroring `src/server/plugins.ts` on the UI side.
+ * The admin's composition, mirroring `apps/server/src/plugins.ts` on the UI
+ * side.
  *
  * **Two positions matter; the rest is legibility.**
  *
@@ -46,12 +51,26 @@ export function buildPlugins(): AdminPlugin[] {
         I18nPlugin(),
         WysiwygPlugin(),
         MediaPlugin(),
+        // Export/import. Another Content Library slot filler — the entry menu,
+        // the records selection bar and the collection toolbar — so it reads
+        // after ContentPlugin() for the same reason I18nPlugin() does.
+        transferAdminPlugin(),
+        // Another Content Library slot filler — the entry rail's checks block,
+        // an optional records column, and "Save as rule" in the toolbar.
+        AlarmsPlugin(),
         // The docked chat panel plus the full-page Agents view. Belongs with
         // the workspace-interior features: the panel mounts into the workspace
         // shell's sidebar footer.
         CopilotPlugin(),
+        // Reader entitlements — who may *read* published content. It fills the
+        // Content Library's entry-header and entry-tab slots, so like the other
+        // library fillers it reads after ContentPlugin(); its own audience
+        // directory is independent of that order. Inert until an audience
+        // exists.
+        SegmentsPlugin(),
         UsersPlugin(),
         ActivityPlugin(),
-        ApiTokensPlugin()
+        ApiTokensPlugin(),
+        WebhooksPlugin()
     ];
 }

package/templates/default/apps/admin/tsconfig.json

@@ -11,7 +11,8 @@
         "jsx": "react-jsx",
         "types": [
             "node",
-            "vite/client"
+            "vite/client",
+            "vitest/globals"
         ],
         "strict": true,
         "skipLibCheck": true,

package/templates/default/apps/server/config/copilot-anthropic.ts

@@ -0,0 +1,22 @@
+// ortha:if copilot-anthropic
+import type { AnthropicProviderConfig } from '@orthacms/copilot-provider-anthropic';
+import { readEnv, readList } from '@orthacms/utils-server';
+
+/**
+ * Native Claude, or nothing.
+ *
+ * Setting the key is what REGISTERS this backend — leave it empty and there is
+ * no `claude` in the picker at all, rather than one that fails on the first
+ * message.
+ */
+export function anthropicProvider(): AnthropicProviderConfig | undefined {
+    const apiKey = readEnv('ANTHROPIC_API_KEY');
+    if (!apiKey) {
+        return undefined;
+    }
+    return {
+        apiKey,
+        models: readList('COPILOT_ANTHROPIC_MODELS', 'claude-sonnet-5')
+    };
+}
+// ortha:end

package/templates/default/apps/server/config/copilot-openai.ts

@@ -0,0 +1,21 @@
+// ortha:if copilot-openai
+import type { OpenAiProviderConfig } from '@orthacms/copilot-provider-openai';
+import { readEnv, readList } from '@orthacms/utils-server';
+
+/**
+ * An OpenAI-wire backend, or nothing. No default endpoint: an unset variable
+ * means "this deployment has no such backend", not "assume one is running on
+ * this laptop".
+ */
+export function openAiProvider(): OpenAiProviderConfig | undefined {
+    const baseUrl = readEnv('COPILOT_OPENAI_BASE_URL');
+    if (!baseUrl) {
+        return undefined;
+    }
+    return {
+        baseUrl,
+        apiKey: readEnv('COPILOT_OPENAI_API_KEY') ?? '',
+        models: readList('COPILOT_OPENAI_MODELS', 'llama3.1')
+    };
+}
+// ortha:end

package/templates/default/apps/server/config/copilot.ts

@@ -0,0 +1,61 @@
+/** The copilot kill switch and the model backends it can reach. */
+import type { CopilotPluginConfig } from '@orthacms/copilot-server';
+// ortha:if copilot-anthropic
+import type { AnthropicProviderConfig } from '@orthacms/copilot-provider-anthropic';
+// ortha:end
+// ortha:if copilot-openai
+import type { OpenAiProviderConfig } from '@orthacms/copilot-provider-openai';
+// ortha:end
+import { defined, readFlag, readPositiveInt } from '@orthacms/utils-server';
+
+// ortha:if copilot-anthropic
+import { anthropicProvider } from './copilot-anthropic';
+// ortha:end
+// ortha:if copilot-openai
+import { openAiProvider } from './copilot-openai';
+// ortha:end
+
+/**
+ * Copilot settings plus the backends this deployment can reach.
+ *
+ * The provider settings live **here**, not inside `CopilotPluginConfig`: the
+ * plugin is adapter-agnostic by decision, so it names no provider kind. A key
+ * is present only when the deployment configured that backend, and `plugins.ts`
+ * registers exactly the ones that are — "configured" is a fact this file can
+ * read, where a `defaultProvider` naming one of them could be misspelled or
+ * point at a backend nobody registered.
+ */
+export interface AppCopilotConfig extends CopilotPluginConfig {
+    providers: {
+        // ortha:if copilot-anthropic
+        /** Native Claude. Present when ANTHROPIC_API_KEY is set. */
+        claude?: AnthropicProviderConfig;
+        // ortha:end
+        // ortha:if copilot-openai
+        /**
+         * An OpenAI-wire endpoint — Ollama, vLLM, LiteLLM, Azure or OpenAI.
+         * Present when COPILOT_OPENAI_BASE_URL is set: an endpoint nobody
+         * named is a backend that can only time out.
+         */
+        openai?: OpenAiProviderConfig;
+        // ortha:end
+    };
+}
+
+/** The copilot kill switch and the model backends it can reach. */
+export function copilotConfig(): AppCopilotConfig {
+    return {
+        // Off by default: enabling a hosted provider sends workspace content to
+        // a third party, which is an operator's decision to make explicitly.
+        enabled: readFlag('COPILOT_ENABLED', false),
+        maxOutputTokens: readPositiveInt('COPILOT_MAX_OUTPUT_TOKENS', 8192),
+        providers: defined({
+            // ortha:if copilot-anthropic
+            claude: anthropicProvider(),
+            // ortha:end
+            // ortha:if copilot-openai
+            openai: openAiProvider()
+            // ortha:end
+        })
+    };
+}

package/templates/default/apps/server/config/docs.ts

@@ -0,0 +1,14 @@
+/** The OpenAPI document and the API reference it is served as. */
+import type { ApiDocsOptions } from '@orthacms/bootstrap-server';
+import { isProduction, readFlag } from '@orthacms/utils-server';
+
+/** The OpenAPI document and the API reference it is served as. */
+export function docsConfig(): ApiDocsOptions {
+    return {
+        // On outside production, where the reference is a development tool.
+        // `API_DOCS=true` publishes it from a deployed instance.
+        enabled: readFlag('API_DOCS', !isProduction()),
+        title: '__APP_TITLE__ API',
+        version: '1.0.0'
+    };
+}

package/templates/default/apps/server/config/i18n.ts

@@ -0,0 +1,16 @@
+/** The content locales, and what to do about rows left in a removed one. */
+import type { I18nPluginConfig } from '@orthacms/i18n-server';
+
+/** The content locales, and what to do about rows left in a removed one. */
+export function i18nConfig(): I18nPluginConfig {
+    return {
+        // Content locales. Stable product configuration, hence literals. The
+        // slugs are stored on entry rows, so removing one hides its rows rather
+        // than deleting them — which is what `orphanedLocales` is about below.
+        locales: [{ slug: 'en', name: 'English', isDefault: true }],
+        // Rows in a locale no longer listed above are intact and unreachable,
+        // the worst shape for a silent failure. Fail the boot and put the
+        // choice in front of whoever edited the array.
+        orphanedLocales: 'fail'
+    };
+}