create-qpq-app 0.1.5

package/lib/esm/steps/index.js

@@ -0,0 +1,33 @@
+import { preflight } from './001_preflight';
+import { copyTemplate } from './002_copyTemplate';
+import { deleteDocusaurus } from './003_deleteDocusaurus';
+import { deleteQpqjsApp } from './004_deleteQpqjsApp';
+import { applyAppIdentity } from './005_applyAppIdentity';
+import { applyDomain } from './006_applyDomain';
+import { pinRegistryVersions } from './007_pinRegistryVersions';
+import { transpileToJavaScript } from './008_transpileToJavaScript';
+import { restoreGitignore } from './009_restoreGitignore';
+import { gitInit } from './010_gitInit';
+import { npmInstall } from './011_npmInstall';
+import { buildWorkspaces } from './012_buildWorkspaces';
+import { printNextSteps } from './013_printNextSteps';
+// The pipeline: always this list, always this order — the numeric file
+// prefixes match, so the steps directory reads top to bottom. Steps decide
+// for themselves (shouldRun) whether the collected answers apply to them.
+export const createQpqAppSteps = [
+    preflight,
+    copyTemplate,
+    deleteDocusaurus,
+    deleteQpqjsApp,
+    applyAppIdentity,
+    applyDomain,
+    pinRegistryVersions,
+    transpileToJavaScript,
+    restoreGitignore,
+    gitInit,
+    npmInstall,
+    buildWorkspaces,
+    printNextSteps,
+];
+export { applyAppIdentity, applyDomain, buildWorkspaces, copyTemplate, deleteDocusaurus, deleteQpqjsApp, gitInit, npmInstall, pinRegistryVersions, preflight, printNextSteps, restoreGitignore, transpileToJavaScript, };
+//# sourceMappingURL=index.js.map

package/lib/esm/steps/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/steps/index.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AAC5C,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,EAAE,gBAAgB,EAAE,MAAM,wBAAwB,CAAC;AAC1D,OAAO,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AACtD,OAAO,EAAE,gBAAgB,EAAE,MAAM,wBAAwB,CAAC;AAC1D,OAAO,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAChD,OAAO,EAAE,mBAAmB,EAAE,MAAM,2BAA2B,CAAC;AAChE,OAAO,EAAE,qBAAqB,EAAE,MAAM,6BAA6B,CAAC;AACpE,OAAO,EAAE,gBAAgB,EAAE,MAAM,wBAAwB,CAAC;AAC1D,OAAO,EAAE,OAAO,EAAE,MAAM,eAAe,CAAC;AACxC,OAAO,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAC9C,OAAO,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AACxD,OAAO,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AAEtD,uEAAuE;AACvE,2EAA2E;AAC3E,0EAA0E;AAC1E,MAAM,CAAC,MAAM,iBAAiB,GAAuB;IACnD,SAAS;IACT,YAAY;IACZ,gBAAgB;IAChB,cAAc;IACd,gBAAgB;IAChB,WAAW;IACX,mBAAmB;IACnB,qBAAqB;IACrB,gBAAgB;IAChB,OAAO;IACP,UAAU;IACV,eAAe;IACf,cAAc;CACf,CAAC;AAEF,OAAO,EACL,gBAAgB,EAChB,WAAW,EACX,eAAe,EACf,YAAY,EACZ,gBAAgB,EAChB,cAAc,EACd,OAAO,EACP,UAAU,EACV,mBAAmB,EACnB,SAAS,EACT,cAAc,EACd,gBAAgB,EAChB,qBAAqB,GACtB,CAAC","sourcesContent":["import { CreateQpqAppStep } from '../types';\nimport { preflight } from './001_preflight';\nimport { copyTemplate } from './002_copyTemplate';\nimport { deleteDocusaurus } from './003_deleteDocusaurus';\nimport { deleteQpqjsApp } from './004_deleteQpqjsApp';\nimport { applyAppIdentity } from './005_applyAppIdentity';\nimport { applyDomain } from './006_applyDomain';\nimport { pinRegistryVersions } from './007_pinRegistryVersions';\nimport { transpileToJavaScript } from './008_transpileToJavaScript';\nimport { restoreGitignore } from './009_restoreGitignore';\nimport { gitInit } from './010_gitInit';\nimport { npmInstall } from './011_npmInstall';\nimport { buildWorkspaces } from './012_buildWorkspaces';\nimport { printNextSteps } from './013_printNextSteps';\n\n// The pipeline: always this list, always this order — the numeric file\n// prefixes match, so the steps directory reads top to bottom. Steps decide\n// for themselves (shouldRun) whether the collected answers apply to them.\nexport const createQpqAppSteps: CreateQpqAppStep[] = [\n  preflight,\n  copyTemplate,\n  deleteDocusaurus,\n  deleteQpqjsApp,\n  applyAppIdentity,\n  applyDomain,\n  pinRegistryVersions,\n  transpileToJavaScript,\n  restoreGitignore,\n  gitInit,\n  npmInstall,\n  buildWorkspaces,\n  printNextSteps,\n];\n\nexport {\n  applyAppIdentity,\n  applyDomain,\n  buildWorkspaces,\n  copyTemplate,\n  deleteDocusaurus,\n  deleteQpqjsApp,\n  gitInit,\n  npmInstall,\n  pinRegistryVersions,\n  preflight,\n  printNextSteps,\n  restoreGitignore,\n  transpileToJavaScript,\n};\n"]}

package/lib/esm/types.d.ts

@@ -0,0 +1,22 @@
+export declare enum AppLanguage {
+    typescript = "typescript",
+    javascript = "javascript"
+}
+export interface CreateQpqAppAnswers {
+    appName: string;
+    language: AppLanguage;
+    domain: string;
+    initialiseGit: boolean;
+    installDependencies: boolean;
+}
+export interface StepContext {
+    targetDirectory: string;
+    templateDirectory: string;
+    ownVersion: string;
+    answers: CreateQpqAppAnswers;
+}
+export interface CreateQpqAppStep {
+    name: string;
+    shouldRun?: (answers: CreateQpqAppAnswers) => boolean;
+    run: (context: StepContext) => Promise<void>;
+}

package/lib/esm/types.js

@@ -0,0 +1,6 @@
+export var AppLanguage;
+(function (AppLanguage) {
+    AppLanguage["typescript"] = "typescript";
+    AppLanguage["javascript"] = "javascript";
+})(AppLanguage || (AppLanguage = {}));
+//# sourceMappingURL=types.js.map

package/lib/esm/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../src/types.ts"],"names":[],"mappings":"AAAA,MAAM,CAAN,IAAY,WAGX;AAHD,WAAY,WAAW;IACrB,wCAAyB,CAAA;IACzB,wCAAyB,CAAA;AAC3B,CAAC,EAHW,WAAW,KAAX,WAAW,QAGtB","sourcesContent":["export enum AppLanguage {\n  typescript = 'typescript',\n  javascript = 'javascript',\n}\n\n// Everything the pipeline needs to know, collected ONCE (flags first, prompts\n// for whatever is still missing) before any step runs — steps never prompt.\nexport interface CreateQpqAppAnswers {\n  appName: string;\n  language: AppLanguage;\n  domain: string;\n  initialiseGit: boolean;\n  installDependencies: boolean;\n}\n\nexport interface StepContext {\n  // Absolute path of the directory being scaffolded (<cwd>/<appName>).\n  targetDirectory: string;\n  // Absolute path of the bundled template snapshot (a pruned quidproquojs.com).\n  templateDirectory: string;\n  // create-qpq-app's own version — the generated app pins its quidproquo-*\n  // dependencies to this (the packages are published in lockstep).\n  ownVersion: string;\n  answers: CreateQpqAppAnswers;\n}\n\n// A self-contained scaffolding step. The pipeline always runs the same list\n// top to bottom; each step owns its applicability via shouldRun.\nexport interface CreateQpqAppStep {\n  name: string;\n  shouldRun?: (answers: CreateQpqAppAnswers) => boolean;\n  run: (context: StepContext) => Promise<void>;\n}\n"]}

package/package.json

@@ -0,0 +1,57 @@
+{
+  "name": "create-qpq-app",
+  "version": "0.1.5",
+  "description": "Scaffold a new quidproquo app — npx create-qpq-app my-app",
+  "main": "./lib/commonjs/index.js",
+  "module": "./lib/esm/index.js",
+  "types": "./lib/commonjs/index.d.ts",
+  "sideEffects": false,
+  "engines": {
+    "node": ">=24"
+  },
+  "files": [
+    "lib/**/*",
+    "template"
+  ],
+  "scripts": {
+    "test": "echo \"Error: no test specified\" && exit 1",
+    "clean": "npx rimraf lib && npx rimraf template && npx rimraf node_modules",
+    "build": "npm run clean && npm run build:esm && npm run build:cjs && npm run build:bin-perms",
+    "watch": "tsc -p tsconfig.commonjs.json -w",
+    "build:cjs": "tsc -p tsconfig.commonjs.json",
+    "build:esm": "tsc -p tsconfig.esm.json",
+    "build:bin-perms": "node -e \"require('fs').chmodSync('lib/commonjs/bin/createQpqApp.js', 0o755)\"",
+    "snapshot-template": "node ./scripts/snapshotTemplate.mjs",
+    "prepack": "npm run snapshot-template",
+    "lint": "npx eslint .",
+    "lint:fix": "npx eslint . --fix",
+    "format": "prettier --write \"**/*.{js,jsx,ts,tsx,json,css,scss,md}\""
+  },
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/joe-coady/quidproquo.git"
+  },
+  "keywords": [
+    "quidproquo",
+    "qpq",
+    "scaffold",
+    "generator"
+  ],
+  "author": "",
+  "license": "MIT",
+  "bugs": {
+    "url": "https://github.com/joe-coady/quidproquo/issues"
+  },
+  "homepage": "https://github.com/joe-coady/quidproquo#readme",
+  "dependencies": {
+    "@inquirer/prompts": "^8.5.2"
+  },
+  "devDependencies": {
+    "@types/node": "^22.13.13",
+    "quidproquo-tsconfig": "0.1.5",
+    "typescript": "^5.8.2"
+  },
+  "bin": {
+    "create-qpq-app": "./lib/commonjs/bin/createQpqApp.js"
+  }
+}

package/template/.nvmrc

@@ -0,0 +1 @@
+24.18.0

package/template/.prettierignore

@@ -0,0 +1,4 @@
+# Add files here to ignore them from prettier formatting
+
+**/dist
+/coverage

package/template/.prettierrc

@@ -0,0 +1,4 @@
+{
+  "singleQuote": true,
+  "trailingComma": "es5"
+}

package/template/.vscode/extensions.json

@@ -0,0 +1,3 @@
+{
+  "recommendations": ["esbenp.prettier-vscode", "dbaeumer.vscode-eslint"]
+}

package/template/.vscode/settings.json

@@ -0,0 +1,14 @@
+{
+  "editor.formatOnSave": true,
+  "editor.defaultFormatter": "esbenp.prettier-vscode",
+  "editor.codeActionsOnSave": {
+    "source.fixAll.eslint": "explicit"
+  },
+  "eslint.useFlatConfig": true,
+  "[json]": {
+    "editor.defaultFormatter": "esbenp.prettier-vscode"
+  },
+  "[jsonc]": {
+    "editor.defaultFormatter": "esbenp.prettier-vscode"
+  }
+}

package/template/README.md

@@ -0,0 +1,150 @@
+# quidproquojs.com
+
+The QPQ framework's own website (app **qpqjs**), built with QPQ itself:
+TypeScript npm workspaces, AWS Lambda service backends bundled with Rspack,
+React microfrontend views built with Rspack + Module Federation, deployed with
+AWS CDK.
+
+This folder lives inside the quidproquo monorepo but is **not** one of its
+workspaces — it is a self-contained consumer app. All `quidproquo-*`
+dependencies are `file:../<pkg>` refs to the sibling packages, so the site
+always runs against the in-repo HEAD. Build the framework first
+(`npm install && npm run build` at the repo root) before installing here.
+
+## Getting started
+
+> **Requires the repo's pinned Node version (see `.nvmrc` — currently 24.x).**
+> Run `nvm use` **before** `npm install` — on an older Node, `npm install`
+> refuses to run (`engines` + `engine-strict`).
+
+```bash
+nvm use              # ALWAYS FIRST — switches to the Node version in .nvmrc
+npm install          # installs deps + symlinks the sibling quidproquo-* packages (file: refs)
+npm run build        # build every workspace (libs -> tsc -b to dist; services -> type-check)
+npm run go:dev       # backend dev server on :8080 (all services of the selected app)
+npm run go:dev:web   # views dev servers (host + one Rspack server per remote)
+```
+
+Smoke test once `go:dev` is up:
+
+```bash
+curl -H "Host: qpqjs.development.localhost" http://localhost:8080/api/shell/v1/health
+# -> healthy response from the shell service
+```
+
+## Layout
+
+```
+apps/<app>/                       # qpqjs
+  deploy.config.json              # { "prefix", "domain" } — DNS config for deploy
+  tsconfig.federated.json         # GENERATED by `npm run prep` — cross-view type aliases
+  packages/                       # app-wide libs (config, constants, service-utils)
+  services/<svc>/
+    config, models, x-models,     # per-service libs — each builds to its own dist/
+    shared-logic, x-logic,
+    service-utils
+    service/                      # Lambda backend (rspack bundle, built at deploy time)
+    views/                        # React microfrontend (Rspack + Module Federation)
+docusaurus/                       # docs site (docs.quidproquojs.com) — built first
+                                  # (listed first in workspaces); the shell's 'docs'
+                                  # web entry auto-uploads docusaurus/build at deploy
+```
+
+There is no tools/ directory: all build/dev/deploy orchestration ships in the
+`quidproquo-cli` package (the `qpq` bin — the root npm scripts are thin
+aliases), with the rspack config builders in `quidproquo-deploy-rspack` and the
+generic CDK app in `quidproquo-deploy-awscdk`.
+
+## How it fits together
+
+- **Libraries** build to their own `dist/` with `tsc -b` (TypeScript project
+  references, so only what changed rebuilds). Each lib's `package.json`
+  `main`/`types`/`exports` point at `dist/src`, and npm workspaces symlink it
+  into `node_modules/@qpqjs/*`, so imports
+  resolve like any npm package. Libs build before services because the root
+  `workspaces` array lists all lib globs ahead of `apps/*/services/*/service`.
+- **Service backends** are bundled to AWS Lambda by Rspack, programmatically
+  at deploy time (`qpq go` calls `getServiceRspackConfig` from
+  `quidproquo-deploy-rspack`) — there are no per-service `rspack.config.ts`
+  files or `bundle` scripts. A service's `build` script only type-checks.
+- **Views** are microfrontends built by Rspack + `@module-federation/enhanced`.
+  There are no per-view federation config files: exposes are computed at build
+  time from `// federated.export` markers, and remotes are discovered from
+  sibling views packages (dev port from each service's
+  `defineDevServerOptions({ port })` in its `infrastructure.ts`). The
+  only generated artifact is `apps/<app>/tsconfig.federated.json` — regenerate
+  with `npm run prep` after adding or removing a marker.
+- **The dev server** (`qpq go:dev`, powered by `quidproquo-dev-server`) loads each service's
+  `infrastructure.ts` directly — no synth needed, just built libs. Its bundle
+  externalizes `node_modules` (an externals function in its rspack config) so native modules like
+  `sqlite3` load at runtime from their install location.
+- **The `admin` service** owns the QPQ log/admin backbone: every service's
+  config references `defineAdminSettings(Admin, …)` + `logServiceName: Admin`,
+  so the dev server resolves log globals from the `admin` module. Running a
+  single service without `admin` spams `Global config qpq-log-retention-days
+  not found`.
+
+## Commands
+
+```bash
+npm run build        # build only the libs (services/views are bundled, not built); scope with --workspace=@qpqjs/constants
+npm run validate-ts  # TS check: build libs, then tsc-typecheck every service + views
+npm run prep         # regenerate tsconfig.federated.json from // federated.export markers
+npm run go:dev       # backend dev server on :8080, every service at /api/<svc>
+npm run go:dev:web   # boot ALL views Rspack dev servers (host shell :3080 + remotes on their
+                     # ports); remotes resolve dynamically at runtime via mf-manifest.json.
+                     # Subset: npm run go:dev:web -- --only host,shell,design
+```
+
+### App selection (multi-app)
+
+Every app-facing script (`prep`, `synth`, `go`, `go:docker`, `go:dev`,
+`go:dev:web`) resolves its target app the same way:
+
+1. `--app <name>` — **must come after `--`**: `npm run go:dev -- --app qpqjs`
+   (this npm silently swallows flags before `--`)
+2. the script's env var (`QPQ_DEV_APP` for dev, `DEPLOY_APP_NAME` for synth/deploy)
+3. exactly one app under `apps/` → auto-selected
+4. interactive prompt (TTY)
+5. otherwise it prints the valid app list and exits 1
+
+`prep` and `synth` also accept `--app all`. `synth <service>` (bare positional)
+still infers the owning app. Unknown names print the valid list and exit 1.
+
+## Deployment
+
+```bash
+npm run synth        # writes dist/apps/<app>/infrastructure/<svc>-config.json (for CDK deploy)
+npm run go           # interactive AWS deploy: pick app -> services -> stacks (inf/api/web/views).
+                     # Bundles (rspack production) + cdk deploy + s3 sync per phase.
+```
+
+`go` needs AWS credentials plus a deploy identity: either an
+`"environments"` map in `apps/<app>/deploy.config.json`
+(`{ "prefix", "domain", "environments": { "<env>": { "accountId", "region" } } }`,
+selected with `--env <name>`) or the legacy `ENVIRONMENT`/`AWS_DEFAULT_*` env
+vars. App-specific bootstrap/account extras live in `apps/<app>/bootstrap.qpq.ts`
+and `apps/<app>/account.qpq.ts` (config fragments; the identity plumbing is
+provided by the generic CDK app in `quidproquo-deploy-awscdk`).
+
+- Production views bundles get prod remote URLs
+  (`https://views.<feature>.<env>.<domain>/<svc>`) derived from
+  `deploy.config.json` + the service's QPQ config; dev bundles use localhost
+  ports.
+- `cdk.context.json` at the repo root is CDK's regenerable Route53 lookup
+  cache (written on first deploy; check it in so later synths need no live
+  AWS lookups).
+
+## Adding a service (pattern from `mini`)
+
+1. Create its `config/models/x-models/shared-logic/x-logic/service-utils` + `service`.
+2. Each lib: `package.json` with `"build": "tsc -b"` (+ the dist-pointing
+   `main`/`types`/`exports`); `tsconfig.json` (extends root base, **no paths**,
+   references `./tsconfig.lib.json`) + `tsconfig.lib.json` (`composite`,
+   `outDir ./dist`, `rootDir .`, `references` to its workspace deps'
+   `tsconfig.lib.json`). No root-level list to touch — `npm run build --workspaces`
+   discovers the new lib automatically.
+3. `service/`: add a `package.json` (`@qpqjs/<svc>-service`, `private`,
+   `"build": "tsc -p tsconfig.app.json"`) and a `tsconfig.app.json`.
+   No rspack.config.ts, no bundle script — `qpq go` bundles it by convention.
+   `npm run build` then picks it up automatically.

package/template/apps/qpqjs/account.qpq.ts

@@ -0,0 +1,39 @@
+// Account-level guardrail extras (audit trail, budget + cost anomaly alerts,
+// GuardDuty posture), deployed once per AWS account as the statically named
+// 'qpq-account' stack. Exactly one repo/config owns this per account, and
+// actor deploys must not deploy it — account resources have nothing to do with
+// any app's lifecycle. Identity plumbing comes from the workspace CDK app.
+import { QPQConfig } from 'quidproquo';
+import {
+  AwsDataStoreRemovalPolicy,
+  defineAccountBudget,
+  defineAccountCloudTrail,
+  defineAccountSecurityServices,
+  defineAwsDataStoreRemovalPolicy,
+} from 'quidproquo-config-aws';
+
+export default (): QPQConfig => [
+  // Dev account: deleting the account stack takes the CloudTrail bucket
+  // (and its audit history) with it.
+  defineAwsDataStoreRemovalPolicy(AwsDataStoreRemovalPolicy.destroy),
+
+  defineAccountCloudTrail('main', {
+    cloudWatchLogs: {
+      retentionDays: 30,
+    },
+  }),
+
+  defineAccountBudget('main', 30, ['joecoady@gmail.com']),
+
+  defineAccountSecurityServices({
+    // GuardDuty is org-managed for this account
+    // (delegated admin 816650600287 auto-enables detectors - a stack-created one
+    // would collide), and Security Hub is off pending the AWS Config cost decision.
+    enableGuardDuty: false,
+    enableSecurityHub: false,
+    cognitoAuthFailureAlert: {
+      emails: ['joecoady@gmail.com'],
+      thresholdPer5Minutes: 10,
+    },
+  }),
+];

package/template/apps/qpqjs/bootstrap.qpq.ts

@@ -0,0 +1,36 @@
+// App-specific bootstrap extras — WAF, api, and the domain certificates. The
+// identity plumbing (defineApplication + defineAwsServiceAccountInfo) is
+// provided by quidproquo-deploy-awscdk's workspace CDK app; this fragment must
+// not declare its own. Prefix/domain/environment arrive via the deploy context
+// (from deploy.config.json + qpq go).
+import { defineApi, QPQConfig } from 'quidproquo';
+import {
+  defineBootstrapWaf,
+  defineDomainCertificate,
+  WafManagedRuleGroup,
+} from 'quidproquo-config-aws';
+import { QpqAppDeployContext } from 'quidproquo-deploy-awscdk';
+
+export default ({ domain, region }: QpqAppDeployContext): QPQConfig => [
+  defineBootstrapWaf({
+    rateLimits: [{ name: 'all-traffic', limit: 2000 }],
+    managedRuleGroups: [
+      WafManagedRuleGroup.common,
+      WafManagedRuleGroup.ipReputation,
+      WafManagedRuleGroup.knownBadInputs,
+      WafManagedRuleGroup.sqli,
+    ],
+  }),
+
+  defineApi('api', domain),
+
+  defineDomainCertificate(
+    domain,
+    'us-east-1',
+    ['www', 'views', 'docs', 'storybook'],
+    {
+      includeApex: true,
+    }
+  ),
+  defineDomainCertificate(domain, region, ['api', 'ws.ws', 'qpqadmin.admin']),
+];

package/template/apps/qpqjs/deploy.config.json

@@ -0,0 +1,24 @@
+{
+  "prefix": "qpqjs",
+  "domain": "quidproquojs.com",
+  "environments": {
+    "development": {
+      "platform": "aws",
+      "accountId": "061039804449",
+      "region": "ap-southeast-2"
+    },
+    "staging": {
+      "platform": "aws",
+      "accountId": "761018864142",
+      "region": "us-east-1"
+    },
+    "production": {
+      "platform": "aws",
+      "accountId": "761018864142",
+      "region": "us-east-1"
+    },
+    "local": {
+      "platform": "docker"
+    }
+  }
+}

package/template/apps/qpqjs/packages/config/package.json

@@ -0,0 +1,22 @@
+{
+  "name": "@qpqjs/config",
+  "version": "0.0.1",
+  "dependencies": {
+    "tslib": "^2.3.0"
+  },
+  "type": "commonjs",
+  "main": "./dist/src/index.js",
+  "typings": "./dist/src/index.d.ts",
+  "exports": {
+    ".": {
+      "types": "./dist/src/index.d.ts",
+      "default": "./dist/src/index.js"
+    }
+  },
+  "files": [
+    "dist"
+  ],
+  "scripts": {
+    "build": "tsc -b"
+  }
+}

package/template/apps/qpqjs/packages/config/src/index.ts

@@ -0,0 +1,2 @@
+// Intentionally empty — noop placeholder package for the qpqjs app.
+export {};

package/template/apps/qpqjs/packages/config/tsconfig.json

@@ -0,0 +1,18 @@
+{
+  "extends": "../../../../tsconfig.base.json",
+  "compilerOptions": {
+    "module": "commonjs",
+    "forceConsistentCasingInFileNames": true,
+    "strict": true,
+    "noImplicitOverride": true,
+    "noImplicitReturns": true,
+    "noFallthroughCasesInSwitch": true
+  },
+  "files": [],
+  "include": [],
+  "references": [
+    {
+      "path": "./tsconfig.lib.json"
+    }
+  ]
+}

package/template/apps/qpqjs/packages/config/tsconfig.lib.json

@@ -0,0 +1,19 @@
+{
+  "extends": "./tsconfig.json",
+  "compilerOptions": {
+    "outDir": "./dist",
+    "declaration": true,
+    "types": [
+      "node"
+    ],
+    "rootDir": ".",
+    "composite": true
+  },
+  "include": [
+    "src/**/*.ts"
+  ],
+  "exclude": [
+    "jest.config.ts",
+    "src/**/*.spec.ts"
+  ]
+}

package/template/apps/qpqjs/packages/constants/package.json

@@ -0,0 +1,22 @@
+{
+  "name": "@qpqjs/constants",
+  "version": "0.0.1",
+  "dependencies": {
+    "tslib": "^2.3.0"
+  },
+  "type": "commonjs",
+  "main": "./dist/src/index.js",
+  "typings": "./dist/src/index.d.ts",
+  "exports": {
+    ".": {
+      "types": "./dist/src/index.d.ts",
+      "default": "./dist/src/index.js"
+    }
+  },
+  "files": [
+    "dist"
+  ],
+  "scripts": {
+    "build": "tsc -b"
+  }
+}

package/template/apps/qpqjs/packages/constants/src/QpqjsServiceEnum.ts

@@ -0,0 +1,11 @@
+export enum QpqjsServiceEnum {
+  Admin = 'admin',
+  Auth = 'auth',
+  Design = 'design',
+  Shell = 'shell',
+}
+
+export type QpqjsServiceEnumValues = `${QpqjsServiceEnum}`;
+export const qpqjsServiceNames: QpqjsServiceEnum[] = Object.values(
+  QpqjsServiceEnum
+) as QpqjsServiceEnum[];

package/template/apps/qpqjs/packages/constants/src/domain.ts

@@ -0,0 +1 @@
+export const QPQJS_DOMAIN = 'quidproquojs.com';

package/template/apps/qpqjs/packages/constants/src/index.ts

@@ -0,0 +1,3 @@
+export * from './domain';
+export * from './QpqjsServiceEnum';
+export * from './userDirectory';

package/template/apps/qpqjs/packages/constants/src/userDirectory.ts

@@ -0,0 +1,3 @@
+// The QPQ user directory backing qpqjs auth. Durable identifier —
+// never change it; doing so orphans every existing user.
+export const QPQJS_USER_DIRECTORY = 'qpqjs-users';

package/template/apps/qpqjs/packages/constants/tsconfig.json

@@ -0,0 +1,18 @@
+{
+  "extends": "../../../../tsconfig.base.json",
+  "compilerOptions": {
+    "module": "commonjs",
+    "forceConsistentCasingInFileNames": true,
+    "strict": true,
+    "noImplicitOverride": true,
+    "noImplicitReturns": true,
+    "noFallthroughCasesInSwitch": true
+  },
+  "files": [],
+  "include": [],
+  "references": [
+    {
+      "path": "./tsconfig.lib.json"
+    }
+  ]
+}

package/template/apps/qpqjs/packages/constants/tsconfig.lib.json

@@ -0,0 +1,19 @@
+{
+  "extends": "./tsconfig.json",
+  "compilerOptions": {
+    "outDir": "./dist",
+    "declaration": true,
+    "types": [
+      "node"
+    ],
+    "rootDir": ".",
+    "composite": true
+  },
+  "include": [
+    "src/**/*.ts"
+  ],
+  "exclude": [
+    "jest.config.ts",
+    "src/**/*.spec.ts"
+  ]
+}

package/template/apps/qpqjs/packages/service-utils/package.json

@@ -0,0 +1,24 @@
+{
+  "name": "@qpqjs/service-utils",
+  "version": "0.0.1",
+  "dependencies": {
+    "tslib": "^2.3.0",
+    "@qpqjs/config": "0.0.1",
+    "@qpqjs/constants": "0.0.1"
+  },
+  "type": "commonjs",
+  "main": "./dist/src/index.js",
+  "typings": "./dist/src/index.d.ts",
+  "exports": {
+    ".": {
+      "types": "./dist/src/index.d.ts",
+      "default": "./dist/src/index.js"
+    }
+  },
+  "files": [
+    "dist"
+  ],
+  "scripts": {
+    "build": "tsc -b"
+  }
+}