create-ovok 0.0.0-stage → 0.1.0-dev.13

package/README.md

@@ -1,3 +1,19 @@
-# Temporary Holding Version
+# create-ovok
 
-This version is a temporary placeholder for this package. An operational version to replace this has been submitted for review and is awaiting a staged release.
+```bash
+pnpm create ovok my-app --platform web|mobile|mobile-web [--type ios|android] [--tenant <code>] [--base-url <url>]
+```
+
+Missing options are asked for on a terminal. The result is a Turborepo with the chosen apps in
+`apps/`, the Ovok API and tenant in `.env`, and the Ovok MCP server in `.mcp.json`.
+
+Inside the workspace:
+
+```bash
+pnpm turbo gen app       # add a web or mobile app
+pnpm turbo gen package   # add a shared package
+pnpm turbo gen agents    # rewrite the Ovok block of every AGENTS.md
+```
+
+Every app has an `AGENTS.md`, and a `CLAUDE.md` that imports it. The Ovok rules sit between
+`BEGIN:ovok-agent-rules` and `END:ovok-agent-rules`; the rest of each file is yours.

package/dist/adapters/fs-project-files.js

@@ -0,0 +1,30 @@
+import { access, mkdir, readdir, readFile, writeFile } from "node:fs/promises";
+import { dirname, join } from "node:path";
+export class FsProjectFiles {
+    #root;
+    constructor(root) {
+        this.#root = root;
+    }
+    async exists(path) {
+        return access(join(this.#root, path)).then(() => true, () => false);
+    }
+    async read(path) {
+        return readFile(join(this.#root, path), "utf8").catch(missingAs(null));
+    }
+    async write(path, content) {
+        const absolute = join(this.#root, path);
+        await mkdir(dirname(absolute), { recursive: true });
+        await writeFile(absolute, content);
+    }
+    async directories(path) {
+        const entries = await readdir(join(this.#root, path), { withFileTypes: true }).catch(missingAs([]));
+        return entries.filter((entry) => entry.isDirectory()).map((entry) => entry.name);
+    }
+}
+function missingAs(fallback) {
+    return (error) => {
+        if (error.code === "ENOENT")
+            return fallback;
+        throw error;
+    };
+}

package/dist/adapters/fs-template-source.js

@@ -0,0 +1,25 @@
+import { readdir, readFile } from "node:fs/promises";
+import { join, relative, sep } from "node:path";
+import { fileURLToPath } from "node:url";
+const TEMPLATES_DIRECTORY = fileURLToPath(new URL("../../templates/", import.meta.url));
+/** npm leaves `.gitignore` out of a published package, so templates carry it as `_gitignore`. */
+const PUBLISHED_NAMES = { _gitignore: ".gitignore" };
+export class FsTemplateSource {
+    async files(template) {
+        const root = join(TEMPLATES_DIRECTORY, template);
+        const entries = await readdir(root, { recursive: true, withFileTypes: true });
+        const files = entries.filter((entry) => entry.isFile());
+        return Promise.all(files.map(async (entry) => {
+            const absolute = join(entry.parentPath, entry.name);
+            return {
+                path: projectPathOf(relative(root, absolute)),
+                content: await readFile(absolute, "utf8"),
+            };
+        }));
+    }
+}
+function projectPathOf(templatePath) {
+    const segments = templatePath.split(sep);
+    const name = segments.pop() ?? "";
+    return [...segments, PUBLISHED_NAMES[name] ?? name].join("/");
+}

package/dist/adapters/terminal-prompt.js

@@ -0,0 +1,28 @@
+import { createInterface } from "node:readline/promises";
+/** Asks only on a terminal; anywhere else a missing answer takes its default. */
+export class TerminalPrompt {
+    #interactive;
+    constructor(interactive = Boolean(process.stdin.isTTY)) {
+        this.#interactive = interactive;
+    }
+    async ask(question, fallback) {
+        if (!this.#interactive)
+            return fallback;
+        const prompt = createInterface({ input: process.stdin, output: process.stdout });
+        try {
+            const answer = (await prompt.question(`${question} (${fallback}): `)).trim();
+            return answer === "" ? fallback : answer;
+        }
+        finally {
+            prompt.close();
+        }
+    }
+    async choose(question, choices, fallback) {
+        for (;;) {
+            const answer = await this.ask(`${question} [${choices.join(" | ")}]`, fallback);
+            const choice = choices.find((candidate) => candidate === answer);
+            if (choice !== undefined)
+                return choice;
+        }
+    }
+}

package/dist/application/add-app.js

@@ -0,0 +1,50 @@
+import { appRulesBlock } from "../domain/agent-rules.js";
+import { bundleIdFor, MOBILE_OSES } from "../domain/app-spec.js";
+import { copyTemplate } from "./copy-template.js";
+export class NotAWorkspaceError extends Error {
+}
+export class AlreadyExistsError extends Error {
+}
+export async function addApp(app, deps) {
+    const workspace = await workspaceNameOf(deps.files);
+    const directory = await freeDirectory(`apps/${app.name}`, deps.files);
+    await copyTemplate(app.platform, directory, {
+        workspace,
+        folder: app.name,
+        bundleId: bundleIdFor(workspace, app.name),
+        platforms: app.os.map((os) => `"${os}"`).join(", "),
+        agentRules: appRulesBlock(app.platform),
+    }, deps);
+    if (app.platform === "mobile") {
+        await keepRunScriptsOf(app.os, `${directory}/package.json`, deps.files);
+    }
+    return directory;
+}
+export async function addPackage(name, deps) {
+    const workspace = await workspaceNameOf(deps.files);
+    const directory = await freeDirectory(`packages/${name}`, deps.files);
+    await copyTemplate("package", directory, { workspace, folder: name }, deps);
+    return directory;
+}
+async function workspaceNameOf(files) {
+    const manifest = await files.read("package.json");
+    const isWorkspace = manifest !== null && (await files.exists("pnpm-workspace.yaml"));
+    const name = isWorkspace ? JSON.parse(manifest).name : undefined;
+    if (typeof name !== "string") {
+        throw new NotAWorkspaceError("Run this at the root of a workspace made by create-ovok.");
+    }
+    return name;
+}
+async function freeDirectory(directory, files) {
+    if (await files.exists(directory))
+        throw new AlreadyExistsError(`${directory} already exists.`);
+    return directory;
+}
+/** Drops the run script of each OS the app leaves out, so `pnpm android` is not offered to an iOS-only app. */
+async function keepRunScriptsOf(os, path, files) {
+    const manifest = JSON.parse((await files.read(path)) ?? "{}");
+    for (const dropped of MOBILE_OSES.filter((candidate) => !os.includes(candidate))) {
+        delete manifest.scripts?.[dropped];
+    }
+    await files.write(path, `${JSON.stringify(manifest, null, 2)}\n`);
+}

package/dist/application/copy-template.js

@@ -0,0 +1,7 @@
+import { posix } from "node:path";
+import { renderTemplate } from "../domain/template-text.js";
+export async function copyTemplate(template, directory, variables, deps) {
+    for (const file of await deps.templates.files(template)) {
+        await deps.files.write(posix.join(directory, file.path), renderTemplate(file.content, variables));
+    }
+}

package/dist/application/create-workspace.js

@@ -0,0 +1,19 @@
+import { workspaceRulesBlock } from "../domain/agent-rules.js";
+import { AlreadyExistsError, addApp } from "./add-app.js";
+import { copyTemplate } from "./copy-template.js";
+export async function createWorkspace(spec, deps) {
+    if (await deps.files.exists("package.json")) {
+        throw new AlreadyExistsError("The folder already holds a project.");
+    }
+    await copyTemplate("workspace", "", {
+        workspace: spec.name,
+        baseUrl: spec.baseUrl,
+        tenantCode: spec.tenantCode,
+        createOvokVersion: spec.createOvokVersion,
+        agentRules: workspaceRulesBlock(),
+    }, deps);
+    const directories = [];
+    for (const app of spec.apps)
+        directories.push(await addApp(app, deps));
+    return directories;
+}

package/dist/application/ports.js

@@ -0,0 +1 @@
+export {};

package/dist/application/refresh-agent-rules.js

@@ -0,0 +1,24 @@
+import { appRulesBlock, replaceRulesBlock, workspaceRulesBlock } from "../domain/agent-rules.js";
+import { PLATFORMS } from "../domain/app-spec.js";
+const AGENTS_FILE = "AGENTS.md";
+/** Rewrites the Ovok block of every AGENTS.md to this create-ovok's rules; the rest is the team's. */
+export async function refreshAgentRules(files) {
+    const refreshed = [await refresh(AGENTS_FILE, workspaceRulesBlock(), files)];
+    for (const app of await files.directories("apps")) {
+        const platform = await platformOf(`apps/${app}/package.json`, files);
+        if (platform !== null) {
+            refreshed.push(await refresh(`apps/${app}/${AGENTS_FILE}`, appRulesBlock(platform), files));
+        }
+    }
+    return refreshed;
+}
+async function refresh(path, block, files) {
+    await files.write(path, replaceRulesBlock((await files.read(path)) ?? "", block));
+    return path;
+}
+/** Apps made by create-ovok name their platform in package.json; other apps are left alone. */
+async function platformOf(path, files) {
+    const manifest = await files.read(path);
+    const platform = manifest === null ? undefined : JSON.parse(manifest)?.ovok?.platform;
+    return PLATFORMS.find((candidate) => candidate === platform) ?? null;
+}

package/dist/domain/agent-rules.js

@@ -0,0 +1,43 @@
+export const RULES_BEGIN = "<!-- BEGIN:ovok-agent-rules -->";
+export const RULES_END = "<!-- END:ovok-agent-rules -->";
+const WORKSPACE_RULES = `## This is NOT the Ovok you know
+
+Your training data is out of date for Ovok. Before writing code that touches it, read the guide in
+\`node_modules/@ovok/core/docs/\` (web) or \`node_modules/@ovok/native/docs/\` (mobile), resolved
+from the app's own directory: they match the installed version. If that folder is missing, read
+https://docs.ovok.com/llms.txt instead. Platform concepts (FHIR, settings, Signals) are there too.
+
+- Check live data and settings with the \`ovok\` MCP server in \`.mcp.json\` instead of guessing.
+- Never evaluate vital-sign thresholds in app code: Signals decides alerts; you send or edit its rules.
+- Add apps and packages with \`pnpm turbo gen\`, never by copying a folder.`;
+const PLATFORM_RULES = {
+    web: `## Ovok in this web app
+
+- Vite and React on \`@ovok/core\`. Use the one \`Ovok\` client in \`src/ovok.ts\`; never create another.
+- \`OVOK_BASE_URL\` and \`OVOK_TENANT_CODE\` come from the root \`.env\` through \`vite.config.ts\`.
+  Only those two reach the browser; never widen that list, as everything in this app ships to users.`,
+    mobile: `## Ovok in this mobile app
+
+- Expo with a development build: Bluetooth needs native code, so Expo Go cannot run it. Use
+  \`pnpm ios\` or \`pnpm android\`.
+- Read \`node_modules/@ovok/native/docs/\` before touching devices or Bluetooth.
+- Use the one \`Ovok\` client in \`src/ovok.ts\`; its settings come from the root \`.env\` through
+  \`app.config.ts\`.`,
+};
+/** The block `create-ovok agents` owns: it rewrites what is between the markers and nothing else. */
+export function workspaceRulesBlock() {
+    return block(WORKSPACE_RULES);
+}
+export function appRulesBlock(platform) {
+    return block(PLATFORM_RULES[platform]);
+}
+export function replaceRulesBlock(document, replacement) {
+    const start = document.indexOf(RULES_BEGIN);
+    const end = document.indexOf(RULES_END, start);
+    if (start === -1 || end === -1)
+        return `${replacement}\n\n${document}`;
+    return document.slice(0, start) + replacement + document.slice(end + RULES_END.length);
+}
+function block(rules) {
+    return `${RULES_BEGIN}\n${rules}\n${RULES_END}`;
+}

package/dist/domain/app-spec.js

@@ -0,0 +1,46 @@
+export const PLATFORMS = ["web", "mobile"];
+export const MOBILE_OSES = ["ios", "android"];
+export const STARTING_PLATFORMS = ["web", "mobile", "mobile-web"];
+/** The npm rules for an unscoped name, which every app folder and workspace name follows. */
+const PACKAGE_NAME = /^[a-z0-9][a-z0-9._-]*$/;
+const PACKAGE_NAME_MAX_LENGTH = 214;
+export class InvalidSpecError extends Error {
+}
+export function parsePackageName(raw) {
+    if (!PACKAGE_NAME.test(raw) || raw.length > PACKAGE_NAME_MAX_LENGTH) {
+        throw new InvalidSpecError(`"${raw}" is not a valid name: use lowercase letters, digits, ".", "_" and "-".`);
+    }
+    return raw;
+}
+export function parseChoice(raw, choices, flag) {
+    const choice = choices.find((candidate) => candidate === raw);
+    if (choice === undefined)
+        throw new InvalidSpecError(`${flag} is one of ${choices.join(", ")}.`);
+    return choice;
+}
+/** `--type` narrows a mobile app to one OS; on a web app it means nothing, so it is refused. */
+export function osFor(platform, type) {
+    if (platform === "web") {
+        if (type !== null)
+            throw new InvalidSpecError("--type only applies to mobile apps.");
+        return [];
+    }
+    return type === null ? MOBILE_OSES : [type];
+}
+/** A reverse-DNS id both stores accept: letters and digits per segment, never a leading digit. */
+export function bundleIdFor(workspace, app) {
+    const segment = (raw) => {
+        const cleaned = raw.toLowerCase().replace(/[^a-z0-9]/g, "");
+        return /^[a-z]/.test(cleaned) ? cleaned : `app${cleaned}`;
+    };
+    return ["com", "example", segment(workspace), segment(app)].join(".");
+}
+export function startingApps(platforms, type) {
+    const web = { name: "web", platform: "web", os: [] };
+    const mobile = { name: "mobile", platform: "mobile", os: osFor("mobile", type) };
+    if (platforms === "web")
+        return [{ ...web, os: osFor("web", type) }];
+    if (platforms === "mobile")
+        return [mobile];
+    return [web, mobile];
+}

package/dist/domain/template-text.js

@@ -0,0 +1,12 @@
+const PLACEHOLDER = /\{\{(\w+)\}\}/g;
+export class MissingVariableError extends Error {
+}
+/** Fills every `{{name}}`; a placeholder without a value is a template bug, so it fails loudly. */
+export function renderTemplate(text, variables) {
+    return text.replace(PLACEHOLDER, (_match, name) => {
+        const value = variables[name];
+        if (value === undefined)
+            throw new MissingVariableError(`The template needs "${name}".`);
+        return value;
+    });
+}

package/dist/main.js

@@ -0,0 +1,86 @@
+#!/usr/bin/env node
+import { readFile } from "node:fs/promises";
+import { resolve } from "node:path";
+import { parseArgs } from "node:util";
+import { FsProjectFiles } from "./adapters/fs-project-files.js";
+import { FsTemplateSource } from "./adapters/fs-template-source.js";
+import { TerminalPrompt } from "./adapters/terminal-prompt.js";
+import { addApp, addPackage } from "./application/add-app.js";
+import { createWorkspace } from "./application/create-workspace.js";
+import { refreshAgentRules } from "./application/refresh-agent-rules.js";
+import { MOBILE_OSES, osFor, PLATFORMS, parseChoice, parsePackageName, STARTING_PLATFORMS, startingApps, } from "./domain/app-spec.js";
+const EXIT_FAILURE = 1;
+const DEFAULT_BASE_URL = "https://api.sandbox.ovok.com";
+const DEFAULT_TENANT_CODE = "public-example";
+const OPTIONS = {
+    platform: { type: "string" },
+    type: { type: "string" },
+    tenant: { type: "string" },
+    "base-url": { type: "string" },
+};
+const SUBCOMMANDS = {
+    add: async ([name], values) => {
+        const platform = parseChoice(values.platform ?? "", PLATFORMS, "--platform");
+        const app = {
+            name: parsePackageName(name ?? ""),
+            platform,
+            os: osFor(platform, typeOf(values)),
+        };
+        console.log(`Added ${await addApp(app, dependenciesAt(process.cwd()))}.`);
+    },
+    "add-package": async ([name]) => {
+        console.log(`Added ${await addPackage(parsePackageName(name ?? ""), dependenciesAt(process.cwd()))}.`);
+    },
+    agents: async () => {
+        const refreshed = await refreshAgentRules(new FsProjectFiles(process.cwd()));
+        console.log(`Refreshed the Ovok rules in ${refreshed.join(", ")}.`);
+    },
+};
+async function main(argv) {
+    const { values, positionals } = parseArgs({
+        args: argv,
+        allowPositionals: true,
+        options: OPTIONS,
+    });
+    const [first, ...rest] = positionals;
+    const subcommand = first === undefined ? undefined : SUBCOMMANDS[first];
+    if (subcommand === undefined)
+        return create(first, values);
+    return subcommand(rest, values);
+}
+async function create(nameArgument, values) {
+    const prompt = new TerminalPrompt();
+    const name = parsePackageName(nameArgument ?? (await prompt.ask("Project name", "ovok-app")));
+    const platforms = values.platform === undefined
+        ? await prompt.choose("Platforms", STARTING_PLATFORMS, "mobile-web")
+        : parseChoice(values.platform, STARTING_PLATFORMS, "--platform");
+    const apps = startingApps(platforms, typeOf(values));
+    const directory = resolve(name);
+    await createWorkspace({
+        name,
+        baseUrl: (values["base-url"] ?? DEFAULT_BASE_URL).replace(/\/+$/, ""),
+        tenantCode: values.tenant ?? (await prompt.ask("Tenant code", DEFAULT_TENANT_CODE)),
+        createOvokVersion: await ownVersion(),
+        apps,
+    }, dependenciesAt(directory));
+    console.log(`Created ${name} with ${apps.map((app) => `apps/${app.name}`).join(" and ")}.\n`);
+    console.log(`  cd ${name}\n  pnpm install\n  pnpm dev\n`);
+    console.log("Add another app with `pnpm turbo gen app`.");
+}
+function typeOf(values) {
+    return values.type === undefined ? null : parseChoice(values.type, MOBILE_OSES, "--type");
+}
+function dependenciesAt(root) {
+    return { templates: new FsTemplateSource(), files: new FsProjectFiles(root) };
+}
+async function ownVersion() {
+    const manifest = await readFile(new URL("../package.json", import.meta.url), "utf8");
+    return JSON.parse(manifest).version;
+}
+try {
+    await main(process.argv.slice(2));
+}
+catch (error) {
+    console.error(`Error: ${error instanceof Error ? error.message : String(error)}`);
+    process.exitCode = EXIT_FAILURE;
+}

package/package.json

@@ -1,6 +1,22 @@
 {
   "name": "create-ovok",
-  "version": "0.0.0-stage",
-  "stub": true,
-  "description": "Temporary package placeholder for staged publishing"
-}
+  "version": "0.1.0-dev.13",
+  "description": "Create a Turborepo with Ovok web and mobile apps, and add more apps through turbo gen.",
+  "license": "MIT",
+  "type": "module",
+  "bin": {
+    "create-ovok": "dist/main.js"
+  },
+  "files": [
+    "dist",
+    "templates"
+  ],
+  "engines": {
+    "node": ">=22.12"
+  },
+  "scripts": {
+    "build": "tsc -p tsconfig.build.json",
+    "typecheck": "tsc -p tsconfig.json",
+    "test": "node --test \"src/**/*.test.ts\""
+  }
+}

package/templates/mobile/AGENTS.md

@@ -0,0 +1,5 @@
+# {{folder}}
+
+{{agentRules}}
+
+Start the development server with `pnpm dev` here, after a first `pnpm ios` or `pnpm android` build.

package/templates/mobile/App.tsx

@@ -0,0 +1,50 @@
+import { useState } from "react";
+import { Button, StyleSheet, Text, TextInput, View } from "react-native";
+import { ovok } from "./src/ovok";
+
+export default function App() {
+  const [email, setEmail] = useState("");
+  const [password, setPassword] = useState("");
+  const [status, setStatus] = useState("Sign in with a patient account.");
+
+  async function signIn() {
+    try {
+      const result = await ovok.auth.login({ profileType: "Patient", email, password });
+      setStatus(result.status === "signed-in" ? "Signed in." : "This account needs a second factor.");
+    } catch (error) {
+      setStatus(error instanceof Error ? error.message : String(error));
+    }
+  }
+
+  return (
+    <View style={styles.screen}>
+      <Text style={styles.status} accessibilityLiveRegion="polite">
+        {status}
+      </Text>
+      <TextInput
+        style={styles.input}
+        placeholder="Email"
+        autoCapitalize="none"
+        autoComplete="email"
+        keyboardType="email-address"
+        value={email}
+        onChangeText={setEmail}
+      />
+      <TextInput
+        style={styles.input}
+        placeholder="Password"
+        autoComplete="current-password"
+        secureTextEntry
+        value={password}
+        onChangeText={setPassword}
+      />
+      <Button title="Sign in" onPress={signIn} />
+    </View>
+  );
+}
+
+const styles = StyleSheet.create({
+  screen: { flex: 1, justifyContent: "center", gap: 12, padding: 24 },
+  status: { fontSize: 16 },
+  input: { borderWidth: 1, borderRadius: 8, padding: 12 },
+});

package/templates/mobile/CLAUDE.md

@@ -0,0 +1 @@
+@AGENTS.md

package/templates/mobile/app.config.ts

@@ -0,0 +1,30 @@
+import type { ExpoConfig } from "expo/config";
+
+process.loadEnvFile("../../.env");
+
+const config: ExpoConfig = {
+  name: "{{folder}}",
+  slug: "{{workspace}}-{{folder}}",
+  version: "1.0.0",
+  orientation: "portrait",
+  platforms: [{{platforms}}],
+  ios: { bundleIdentifier: "{{bundleId}}" },
+  android: { package: "{{bundleId}}" },
+  plugins: [
+    "expo-secure-store",
+    [
+      "react-native-ble-plx",
+      {
+        isBackgroundEnabled: false,
+        bluetoothAlwaysPermission: "Connect to your measurement devices to receive readings.",
+      },
+    ],
+    ["react-native-permissions", { iosPermissions: ["Bluetooth"] }],
+  ],
+  extra: {
+    ovokBaseUrl: process.env.OVOK_BASE_URL,
+    ovokTenantCode: process.env.OVOK_TENANT_CODE,
+  },
+};
+
+export default config;

package/templates/mobile/index.js

@@ -0,0 +1,8 @@
+import { registerRootComponent } from "expo";
+import { polyfillWebCrypto } from "expo-standard-web-crypto";
+
+polyfillWebCrypto();
+
+// The Ovok client's PKCE helpers need web crypto before they load.
+const App = require("./App").default;
+registerRootComponent(App);

package/templates/mobile/package.json

@@ -0,0 +1,31 @@
+{
+  "name": "@{{workspace}}/{{folder}}",
+  "private": true,
+  "main": "index.js",
+  "ovok": {
+    "platform": "mobile"
+  },
+  "scripts": {
+    "dev": "expo start --dev-client",
+    "ios": "expo run:ios",
+    "android": "expo run:android",
+    "typecheck": "tsc --noEmit"
+  },
+  "dependencies": {
+    "@ovok/core": "^0.4.49-rc.4",
+    "@ovok/native": "^1.16.1-rc.3",
+    "expo": "~57.0.31",
+    "expo-constants": "~57.0.22",
+    "expo-dev-client": "~57.0.20",
+    "expo-secure-store": "~57.0.4",
+    "expo-standard-web-crypto": "^57.0.3",
+    "react": "19.2.3",
+    "react-native": "0.86.3",
+    "react-native-ble-plx": "^3.5.1",
+    "react-native-permissions": "^5.6.2"
+  },
+  "devDependencies": {
+    "@types/react": "~19.2.0",
+    "typescript": "~6.0.3"
+  }
+}

package/templates/mobile/src/ovok.ts

@@ -0,0 +1,12 @@
+import { Ovok } from "@ovok/core/next";
+import Constants from "expo-constants";
+
+type OvokExtra = { ovokBaseUrl: string; ovokTenantCode: string };
+
+const extra = Constants.expoConfig?.extra as OvokExtra;
+
+export const ovok = new Ovok({
+  baseUrl: extra.ovokBaseUrl,
+  tenantCode: extra.ovokTenantCode,
+  fhirPath: "/fhir/R4/",
+});

package/templates/mobile/tsconfig.json

@@ -0,0 +1,8 @@
+{
+  "extends": "expo/tsconfig.base",
+  "compilerOptions": {
+    "strict": true,
+    "noUncheckedIndexedAccess": true
+  },
+  "exclude": ["node_modules", "ios", "android"]
+}

package/templates/package/package.json

@@ -0,0 +1,14 @@
+{
+  "name": "@{{workspace}}/{{folder}}",
+  "private": true,
+  "type": "module",
+  "exports": {
+    ".": "./src/index.ts"
+  },
+  "scripts": {
+    "typecheck": "tsc --noEmit"
+  },
+  "devDependencies": {
+    "typescript": "^7.0.2"
+  }
+}

package/templates/package/src/index.ts

@@ -0,0 +1 @@
+export {};

package/templates/package/tsconfig.json

@@ -0,0 +1,12 @@
+{
+  "compilerOptions": {
+    "target": "es2022",
+    "module": "esnext",
+    "moduleResolution": "bundler",
+    "strict": true,
+    "noUncheckedIndexedAccess": true,
+    "noEmit": true,
+    "skipLibCheck": true
+  },
+  "include": ["src"]
+}

package/templates/web/AGENTS.md

@@ -0,0 +1,5 @@
+# {{folder}}
+
+{{agentRules}}
+
+Run it with `pnpm dev` here, or `pnpm turbo run dev --filter @{{workspace}}/{{folder}}` from the root.

package/templates/web/CLAUDE.md

@@ -0,0 +1 @@
+@AGENTS.md

package/templates/web/index.html

@@ -0,0 +1,12 @@
+<!doctype html>
+<html lang="en">
+  <head>
+    <meta charset="UTF-8" />
+    <meta name="viewport" content="width=device-width, initial-scale=1.0" />
+    <title>{{folder}}</title>
+  </head>
+  <body>
+    <div id="root"></div>
+    <script type="module" src="/src/main.tsx"></script>
+  </body>
+</html>

package/templates/web/package.json

@@ -0,0 +1,27 @@
+{
+  "name": "@{{workspace}}/{{folder}}",
+  "private": true,
+  "type": "module",
+  "ovok": {
+    "platform": "web"
+  },
+  "scripts": {
+    "dev": "vite",
+    "build": "tsc --noEmit && vite build",
+    "typecheck": "tsc --noEmit",
+    "preview": "vite preview"
+  },
+  "dependencies": {
+    "@ovok/core": "^0.4.49-rc.4",
+    "react": "^19.3.0",
+    "react-dom": "^19.3.0"
+  },
+  "devDependencies": {
+    "@medplum/fhirtypes": "^5.2.11",
+    "@types/react": "^19.3.0",
+    "@types/react-dom": "^19.3.0",
+    "@vitejs/plugin-react": "^6.1.2",
+    "typescript": "^7.0.2",
+    "vite": "^8.3.4"
+  }
+}

package/templates/web/src/App.tsx

@@ -0,0 +1,66 @@
+import type { Patient } from "@medplum/fhirtypes";
+import { type FormEvent, useState } from "react";
+import { ovok } from "./ovok";
+
+const PATIENTS_SHOWN = 10;
+
+export function App() {
+  const [patients, setPatients] = useState<Patient[] | null>(null);
+  const [problem, setProblem] = useState<string | null>(null);
+
+  async function signIn(event: FormEvent<HTMLFormElement>) {
+    event.preventDefault();
+    const form = new FormData(event.currentTarget);
+    setProblem(null);
+    try {
+      const result = await ovok.auth.login({
+        profileType: "Practitioner",
+        email: String(form.get("email")),
+        password: String(form.get("password")),
+      });
+      if (result.status !== "signed-in") {
+        setProblem("This account needs a second factor: finish with ovok.auth.verifyMfa.");
+        return;
+      }
+      const page = await ovok.fhir.search("Patient", { _count: String(PATIENTS_SHOWN) });
+      setPatients(page.data);
+    } catch (error) {
+      setProblem(error instanceof Error ? error.message : String(error));
+    }
+  }
+
+  if (patients !== null) {
+    return (
+      <main>
+        <h1>Patients</h1>
+        <ul>
+          {patients.map((patient) => (
+            <li key={patient.id}>{nameOf(patient)}</li>
+          ))}
+        </ul>
+      </main>
+    );
+  }
+
+  return (
+    <main>
+      <h1>Sign in</h1>
+      <form onSubmit={signIn}>
+        <label>
+          Email <input name="email" type="email" autoComplete="username" required />
+        </label>
+        <label>
+          Password <input name="password" type="password" autoComplete="current-password" required />
+        </label>
+        <button type="submit">Sign in</button>
+        {problem !== null && <p role="alert">{problem}</p>}
+      </form>
+    </main>
+  );
+}
+
+function nameOf(patient: Patient): string {
+  const name = patient.name?.[0];
+  const parts = [...(name?.given ?? []), name?.family].filter((part) => part !== undefined);
+  return parts.length > 0 ? parts.join(" ") : (patient.id ?? "Unnamed patient");
+}

package/templates/web/src/env.d.ts

@@ -0,0 +1,4 @@
+interface ImportMetaEnv {
+  readonly OVOK_BASE_URL: string;
+  readonly OVOK_TENANT_CODE: string;
+}

package/templates/web/src/main.tsx

@@ -0,0 +1,12 @@
+import { StrictMode } from "react";
+import { createRoot } from "react-dom/client";
+import { App } from "./App";
+
+const root = document.getElementById("root");
+if (root === null) throw new Error("index.html has no #root element.");
+
+createRoot(root).render(
+  <StrictMode>
+    <App />
+  </StrictMode>,
+);

package/templates/web/src/ovok.ts

@@ -0,0 +1,7 @@
+import { Ovok } from "@ovok/core/next";
+
+export const ovok = new Ovok({
+  baseUrl: import.meta.env.OVOK_BASE_URL,
+  tenantCode: import.meta.env.OVOK_TENANT_CODE,
+  fhirPath: "/fhir/R4/",
+});

package/templates/web/tsconfig.json

@@ -0,0 +1,15 @@
+{
+  "compilerOptions": {
+    "target": "es2022",
+    "lib": ["es2022", "dom", "dom.iterable"],
+    "module": "esnext",
+    "moduleResolution": "bundler",
+    "jsx": "react-jsx",
+    "types": ["vite/client"],
+    "strict": true,
+    "noUncheckedIndexedAccess": true,
+    "noEmit": true,
+    "skipLibCheck": true
+  },
+  "include": ["src", "vite.config.ts"]
+}

package/templates/web/vite.config.ts

@@ -0,0 +1,16 @@
+import react from "@vitejs/plugin-react";
+import { defineConfig, loadEnv } from "vite";
+
+const WORKSPACE_ROOT = "../..";
+
+export default defineConfig(({ mode }) => {
+  const env = loadEnv(mode, WORKSPACE_ROOT, "OVOK_");
+  return {
+    plugins: [react()],
+    // Everything here ships to the browser, so it names each variable rather than a prefix.
+    define: {
+      "import.meta.env.OVOK_BASE_URL": JSON.stringify(env.OVOK_BASE_URL),
+      "import.meta.env.OVOK_TENANT_CODE": JSON.stringify(env.OVOK_TENANT_CODE),
+    },
+  };
+});

package/templates/workspace/.env

@@ -0,0 +1,2 @@
+OVOK_BASE_URL={{baseUrl}}
+OVOK_TENANT_CODE={{tenantCode}}

package/templates/workspace/.mcp.json

@@ -0,0 +1,8 @@
+{
+  "mcpServers": {
+    "ovok": {
+      "type": "http",
+      "url": "{{baseUrl}}/mcp"
+    }
+  }
+}

package/templates/workspace/AGENTS.md

@@ -0,0 +1,11 @@
+# {{workspace}}
+
+{{agentRules}}
+
+## This repository
+
+- A Turborepo on pnpm workspaces: apps in `apps/`, shared code in `packages/`.
+- `pnpm dev` runs every app; `pnpm turbo run dev --filter <app>` runs one.
+- `OVOK_BASE_URL` and `OVOK_TENANT_CODE` live in the root `.env`, which every app reads.
+- `pnpm turbo gen app` adds a web or mobile app and `pnpm turbo gen package` a shared package.
+  `pnpm turbo gen agents` rewrites the Ovok block of every AGENTS.md after `create-ovok` updates.

package/templates/workspace/CLAUDE.md

@@ -0,0 +1 @@
+@AGENTS.md

package/templates/workspace/README.md

@@ -0,0 +1,11 @@
+# {{workspace}}
+
+An Ovok workspace made with `create-ovok`.
+
+```bash
+pnpm install
+pnpm dev
+```
+
+- Apps live in `apps/`. Add one with `pnpm turbo gen app`, a shared package with `pnpm turbo gen package`.
+- The Ovok API and tenant are set in `.env`.

package/templates/workspace/_gitignore

@@ -0,0 +1,9 @@
+node_modules/
+dist/
+.turbo/
+.expo/
+ios/
+android/
+*.tsbuildinfo
+.env.local
+.DS_Store

package/templates/workspace/package.json

@@ -0,0 +1,15 @@
+{
+  "name": "{{workspace}}",
+  "private": true,
+  "packageManager": "pnpm@10.8.0",
+  "scripts": {
+    "dev": "turbo run dev",
+    "build": "turbo run build",
+    "typecheck": "turbo run typecheck"
+  },
+  "devDependencies": {
+    "@turbo/gen": "2.11.10",
+    "create-ovok": "^{{createOvokVersion}}",
+    "turbo": "2.11.10"
+  }
+}

package/templates/workspace/pnpm-workspace.yaml

@@ -0,0 +1,5 @@
+packages:
+  - apps/*
+  - packages/*
+onlyBuiltDependencies:
+  - esbuild

package/templates/workspace/turbo/generators/config.ts

@@ -0,0 +1,57 @@
+import { execFileSync } from "node:child_process";
+import type { PlopTypes } from "@turbo/gen";
+
+type AppAnswers = { name: string; platform: "web" | "mobile"; os?: "both" | "ios" | "android" };
+
+/** Each generator hands off to create-ovok, so `turbo gen` and `pnpm create ovok` share one set of templates. */
+function createOvok(args: string[]): void {
+  execFileSync("pnpm", ["exec", "create-ovok", ...args], { stdio: "inherit" });
+}
+
+export default function generator(plop: PlopTypes.NodePlopAPI): void {
+  plop.setGenerator("app", {
+    description: "Add an Ovok web or mobile app to apps/",
+    prompts: [
+      { type: "input", name: "name", message: "App name (its folder under apps/)" },
+      { type: "list", name: "platform", message: "Platform", choices: ["web", "mobile"] },
+      {
+        type: "list",
+        name: "os",
+        message: "Mobile OS",
+        choices: ["both", "ios", "android"],
+        when: (answers: AppAnswers) => answers.platform === "mobile",
+      },
+    ],
+    actions: [
+      (answers) => {
+        const { name, platform, os } = answers as AppAnswers;
+        const type = os === undefined || os === "both" ? [] : ["--type", os];
+        createOvok(["add", name, "--platform", platform, ...type]);
+        return `Added apps/${name}`;
+      },
+    ],
+  });
+
+  plop.setGenerator("package", {
+    description: "Add a shared package to packages/",
+    prompts: [{ type: "input", name: "name", message: "Package name (its folder under packages/)" }],
+    actions: [
+      (answers) => {
+        const { name } = answers as { name: string };
+        createOvok(["add-package", name]);
+        return `Added packages/${name}`;
+      },
+    ],
+  });
+
+  plop.setGenerator("agents", {
+    description: "Rewrite the Ovok block of every AGENTS.md",
+    prompts: [],
+    actions: [
+      () => {
+        createOvok(["agents"]);
+        return "Refreshed the Ovok rules";
+      },
+    ],
+  });
+}

package/templates/workspace/turbo.json

@@ -0,0 +1,18 @@
+{
+  "$schema": "https://turborepo.com/schema.json",
+  "globalDependencies": [".env"],
+  "globalEnv": ["OVOK_BASE_URL", "OVOK_TENANT_CODE"],
+  "tasks": {
+    "build": {
+      "dependsOn": ["^build"],
+      "outputs": ["dist/**"]
+    },
+    "dev": {
+      "cache": false,
+      "persistent": true
+    },
+    "typecheck": {
+      "dependsOn": ["^typecheck"]
+    }
+  }
+}