create-projx 1.7.0 → 1.7.2

package/README.md

@@ -85,15 +85,15 @@ If this saves you even one hour, it's already paid for itself. (It's free.)
 
 ## What you get
 
-| Component  | Stack                                                         | What it gives you                                                                    |
-| ---------- | ------------------------------------------------------------- | ------------------------------------------------------------------------------------ |
-| `fastapi`  | Python, SQLAlchemy, Alembic                                   | Auto-entity CRUD, JWT auth, migrations, OpenAPI docs                                 |
-| `fastify`  | Node.js, Prisma / Drizzle / Sequelize / TypeORM, TypeBox      | Auto-entity CRUD, JWT auth, typed schemas, OpenAPI docs (auth currently Prisma-only) |
-| `express`  | Express 5, TypeScript, Prisma / Drizzle / Sequelize / TypeORM | Auto-entity CRUD, validation, security middleware, health checks                     |
-| `frontend` | React 19, TypeScript, Vite                                    | Auto-entity UI from `/_meta`, design tokens, light/dark mode                         |
-| `mobile`   | Flutter, Riverpod, GoRouter                                   | Auto-entity screens, offline-first with Isar, biometric auth                         |
-| `e2e`      | Playwright                                                    | Page object model, auth fixtures, accessibility scans                                |
-| `infra`    | Terraform, AWS                                                | EKS, RDS, VPC, ALB, CodePipeline, multi-environment                                  |
+| Component  | Stack                                                         | What it gives you                                                          |
+| ---------- | ------------------------------------------------------------- | -------------------------------------------------------------------------- |
+| `fastapi`  | Python, SQLAlchemy, Alembic                                   | Auto-entity CRUD, JWT auth, migrations, OpenAPI docs                       |
+| `fastify`  | Node.js, Prisma / Drizzle / Sequelize / TypeORM, TypeBox      | Auto-entity CRUD, JWT auth, typed schemas, OpenAPI docs                    |
+| `express`  | Express 5, TypeScript, Prisma / Drizzle / Sequelize / TypeORM | Auto-entity CRUD, JWT auth, validation, security middleware, health checks |
+| `frontend` | React 19, TypeScript, Vite                                    | Auth, theming, design tokens, light/dark mode                              |
+| `mobile`   | Flutter, Riverpod, GoRouter                                   | Auth, biometric, theming, GoRouter shell                                   |
+| `e2e`      | Playwright                                                    | Page object model, auth fixtures, accessibility scans                      |
+| `infra`    | Terraform, AWS                                                | EKS, RDS, VPC, ALB, CodePipeline, multi-environment                        |
 
 Plus, in every project: Docker Compose for dev + prod, GitHub Actions CI per component (path-filtered), pre-commit hooks, secret detection, VS Code settings, and 80% test coverage enforced.
 
@@ -242,7 +242,6 @@ npx create-projx unpin <patterns...>
 npx create-projx pin --list
 npx create-projx doctor [--fix]
 npx create-projx gen entity <name> [--ai | --backend]
-npx create-projx sync [--url <url>]
 
 --components <list>    Comma-separated: fastapi,fastify,express,frontend,mobile,e2e,infra
 --name <dir>           Custom directory for `add <type>` (multi-instance)
@@ -315,7 +314,6 @@ Override with `--ai` (fastapi) or `--backend` (fastify).
 | Primary backend (fastapi) | `src/entities/<name>/_model.py` + `tests/test_<name>_entity.py` — model + 11 CRUD/auth tests |
 | Primary backend (fastify) | `src/modules/<name>/schemas.ts` + `index.ts` + Prisma model + `tests/modules/<name>.test.ts` |
 | `frontend`                | `src/types/<name>.ts` — TypeScript interface + Create/Update variants                        |
-| `mobile`                  | `lib/entities/<name>/model.dart` — Dart class with fromJson/toJson/copyWith                  |
 
 **Tests included**: every `gen entity` writes a working integration test file alongside the model — 11 tests for FastAPI (extending `BaseEntityApiTest`), 11 tests for Fastify (via `describeCrudEntity`). Both run against a real database (Postgres). New entities ship green from day one — no scrambling to bolt on tests at go-live.
 
@@ -336,26 +334,6 @@ All four ORMs scaffold equivalent runtime behavior: `_base/auto-routes.ts` wires
 
 ORM-specific scaffolding lives in [cli/src/addons/orms/](cli/src/addons/orms/) — each ORM is a self-contained folder with a `manifest.json` (deps, file removals, scripts), `shared/` files, per-framework overlays, and `gen-entity/` templates. Adding a new ORM means adding a new folder there; no CLI core changes.
 
-### Sync Types
-
-Regenerate all frontend/mobile types from a running backend:
-
-```bash
-npx create-projx sync                                              # auto-detects URL
-npx create-projx sync --url http://localhost:8000/api/v1/_meta      # explicit URL
-```
-
-Fetches `/_meta` from your backend, generates typed interfaces for every entity. Run after any backend change — new field, renamed column, new entity.
-
-The generic `api.ts` client accepts type parameters:
-
-```tsx
-import type { Invoice } from "../types/invoice";
-
-const { data } = await api.list<Invoice>("/invoices"); // data: Invoice[]
-const item = await api.get<Invoice>("/invoices", id); // item: Invoice
-```
-
 ## Rename Component Directories
 
 Rename `fastapi/` to `backend/`? Just rename the folder — the `.projx-component` marker file moves with it. The `update` command auto-discovers where each component lives by scanning for these markers. No config changes needed.
@@ -373,7 +351,7 @@ CI, `scripts/setup.sh`, pre-commit hooks, and docker-compose are all regenerated
 my-app/
 ├── fastapi/                # Auto-entity CRUD backend
 │   └── .projx-component    # Identifies this as the fastapi component
-├── frontend/               # Auto-entity UI from /_meta
+├── frontend/               # React + Vite shell
 │   └── .projx-component
 ├── e2e/                    # Playwright E2E tests
 │   └── .projx-component
@@ -393,11 +371,11 @@ The core idea: define a data model, get everything else for free.
 
 **Backend** — Drop a model file. The registry auto-discovers it and generates CRUD routes, schemas, pagination, filtering, sorting, search, FK expansion, and OpenAPI docs.
 
-**Field privacy** — Sensitive columns (`password_hash`, `secret`, `api_key`, `mfa_secret`, etc.) are automatically stripped from API responses and `/_meta` via a built-in baseline. Add project-specific hidden fields per entity (`__hidden_fields__` in FastAPI, `hiddenFields` in Fastify). Mark entire entities as `__private__` / `private: true` to hide them from the API entirely — no routes registered, not listed in `/_meta`. The `/_meta` endpoint requires authentication on both backends.
+**Field privacy** — Sensitive columns (`password_hash`, `secret`, `api_key`, `mfa_secret`, etc.) are automatically stripped from API responses via a built-in baseline. Add project-specific hidden fields per entity (`__hidden_fields__` in FastAPI, `hiddenFields` in Fastify). Mark entire entities as `__private__` / `private: true` to hide them from the API entirely — no routes registered.
 
-**Frontend** — Fetches metadata from `GET /api/v1/_meta`, renders table + form UI automatically. Customize with overrides.
+**Frontend** — Ships a React shell with auth, theming, and design tokens. Build your own pages using the generated types from `gen entity`.
 
-**Mobile** — Same metadata endpoint, generates list/detail/form screens. Offline-first with local DB and sync queue.
+**Mobile** — Ships a Flutter shell with auth, biometric, and GoRouter scaffolding. Build screens using the generated Dart models from `gen entity`.
 
 ## Encrypted Service Config
 

package/dist/{baseline-FHOZNS4D.js → baseline-ZPPJKHBN.js}

@@ -8,8 +8,8 @@ import {
   matchesSkip,
   saveBaselineRef,
   writeTemplateToDir
-} from "./chunk-IMZKHDIL.js";
-import "./chunk-HAT7D4G2.js";
+} from "./chunk-XAYCVTHL.js";
+import "./chunk-FQPOK3QZ.js";
 export {
   BASELINE_REF,
   applyTemplate,

package/dist/{chunk-HAT7D4G2.js → chunk-FQPOK3QZ.js}

@@ -223,6 +223,7 @@ async function copyStaticFiles(repoDir, dest) {
   }
   const staticScripts = [
     "ci-local.sh",
+    "check-bundle-size.sh",
     "setup-docker.sh",
     "setup-ssl.sh",
     "style-check.py"
@@ -343,6 +344,7 @@ var DEFAULT_ROOT_SKIP_PATTERNS = [
   ".githooks/pre-commit",
   ".github/workflows/ci.yml",
   "scripts/ci-local.sh",
+  "scripts/check-bundle-size.sh",
   "scripts/setup.sh",
   "scripts/setup-docker.sh",
   "scripts/setup-ssl.sh"
@@ -389,15 +391,20 @@ async function discoverComponentsFromMarkers(cwd) {
 }
 function render(template, vars) {
   const lines = template.split("\n");
-  return renderLines(lines, vars).replace(/\n{3,}/g, "\n\n");
+  return renderLines(lines, vars).replace(/\n{4,}/g, "\n\n\n");
 }
 function evalExpr(expr, vars) {
   const components = vars.components;
   const projectName = vars.projectName;
-  const pmName = vars.pm?.name ?? "npm";
+  if (vars.pm !== void 0 && typeof vars.pm !== "object") {
+    throw new Error(
+      `render: vars.pm must be a PmCommands object (got ${typeof vars.pm}). Templates use pm.exec, pm.name etc.; passing the package-manager name as a bare string silently breaks those references.`
+    );
+  }
+  const pm = typeof vars.pm === "object" && vars.pm !== null ? vars.pm : { name: "npm" };
   const orm = vars.orm ?? "prisma";
   const argNames = ["components", "projectName", "pm", "orm"];
-  const argValues = [components, projectName, pmName, orm];
+  const argValues = [components, projectName, pm, orm];
   for (const [k, v] of Object.entries(vars)) {
     if (["components", "projectName", "pm", "orm"].includes(k)) continue;
     if (!/^[a-zA-Z_$][\w$]*$/.test(k)) continue;

package/dist/{chunk-IMZKHDIL.js → chunk-XAYCVTHL.js}

@@ -13,7 +13,7 @@ import {
   toSnake,
   upsertComponentMarker,
   writeProjxConfig
-} from "./chunk-HAT7D4G2.js";
+} from "./chunk-FQPOK3QZ.js";
 
 // src/baseline.ts
 import { existsSync, writeFileSync, unlinkSync } from "fs";
@@ -29,7 +29,6 @@ import {
 } from "fs/promises";
 import { execSync } from "child_process";
 import { join as join2, dirname } from "path";
-import { fileURLToPath } from "url";
 import { tmpdir } from "os";
 
 // src/generators/index.ts
@@ -127,7 +126,7 @@ function generateVscodeSettings(vars) {
 // src/baseline.ts
 var BASELINE_REF = "refs/projx/baseline";
 async function migrateComponentMarkers(cwd, components, componentPaths, applyDefaults) {
-  const { readComponentMarker: readComponentMarker2, writeComponentMarker } = await import("./utils-BZGSJ7XZ.js");
+  const { readComponentMarker: readComponentMarker2, writeComponentMarker } = await import("./utils-MC7VKL2U.js");
   for (const component of components) {
     const dir = componentPaths[component];
     const markerDir = join2(cwd, dir);
@@ -505,7 +504,7 @@ async function writeOneInstance(inst, opts) {
     [type]: targetDir
   };
   await renderEjsInDir(outDir, { ...vars, paths: instancePaths });
-  await applyOrmProviderToInstance(outDir, type, vars);
+  await applyOrmProviderToInstance(repoDir, outDir, type, vars);
   await upsertComponentMarker(
     join2(dest, targetDir),
     type,
@@ -519,18 +518,14 @@ async function writeOneInstance(inst, opts) {
     vars.nameOverrides
   );
 }
-async function applyOrmProviderToInstance(dir, component, vars) {
+async function applyOrmProviderToInstance(repoDir, dir, component, vars) {
   const orm = typeof vars.orm === "string" ? vars.orm : void 0;
   if (!orm || orm === "prisma") return;
   if (component !== "fastify" && component !== "express") return;
-  await applyOrmAddon(orm, component, dir, vars);
+  await applyOrmAddon(repoDir, orm, component, dir, vars);
 }
-function sharedAddonDir() {
-  const thisFile = fileURLToPath(import.meta.url);
-  return join2(thisFile, "../../src/addons");
-}
-async function loadOrmManifest(orm) {
-  const path = join2(sharedAddonDir(), "orms", orm, "manifest.json");
+async function loadOrmManifest(repoDir, orm) {
+  const path = join2(repoDir, "addons", "orms", orm, "manifest.json");
   if (!existsSync(path)) {
     throw new Error(
       `ORM "${orm}" is not yet supported. No manifest found at ${path}.`
@@ -566,8 +561,8 @@ function applyPackageOverrides(pkg, overrides) {
   Object.assign(devDependencies, overrides.addDevDependencies ?? {});
   pkg.devDependencies = devDependencies;
 }
-async function applyOrmAddon(orm, framework, dir, vars) {
-  const manifest = await loadOrmManifest(orm);
+async function applyOrmAddon(repoDir, orm, framework, dir, vars) {
+  const manifest = await loadOrmManifest(repoDir, orm);
   if (!manifest.frameworks.includes(framework)) {
     throw new Error(
       `ORM "${orm}" does not support framework "${framework}". Supported: ${manifest.frameworks.join(", ")}`
@@ -577,10 +572,12 @@ async function applyOrmAddon(orm, framework, dir, vars) {
     await rm(join2(dir, relPath), { recursive: true, force: true });
   }
   const pkgPath = join2(dir, "package.json");
-  const pkg = await readJsonObject(pkgPath);
-  applyPackageOverrides(pkg, manifest.packageOverrides);
-  await writeJsonObject(pkgPath, pkg);
-  const addonRoot = join2(sharedAddonDir(), "orms", orm);
+  if (existsSync(pkgPath)) {
+    const pkg = await readJsonObject(pkgPath);
+    applyPackageOverrides(pkg, manifest.packageOverrides);
+    await writeJsonObject(pkgPath, pkg);
+  }
+  const addonRoot = join2(repoDir, "addons", "orms", orm);
   const sharedSrc = join2(addonRoot, "shared");
   const frameworkSrc = join2(addonRoot, framework);
   if (existsSync(sharedSrc)) {