create-ryu-app 0.1.13 → 0.1.14

package/dist/index.js

@@ -16,7 +16,7 @@ var RE_WORD_SEPARATOR = /[-_\s]+/;
 var RE_VALID_NAME = /^[a-z0-9][a-z0-9-_]*$/i;
 var RE_LABEL_IMPERSONATES = /ryu|system/i;
 var SAFE_COMPANION_LABEL = "App Panel";
-var SDK_DEPENDENCY_RANGE = "^0.1.13";
+var SDK_DEPENDENCY_RANGE = "^0.1.14";
 var TEMPLATES = {
   agent: {
     kind: "plugin",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "create-ryu-app",
-  "version": "0.1.13",
+  "version": "0.1.14",
   "type": "module",
   "description": "Scaffold a starter Ryu SDK project with a Runnable, gateway-pointed model config, and manifest.json manifest",
   "bin": {
@@ -20,7 +20,7 @@
     "clean": "rm -rf dist"
   },
   "dependencies": {
-    "@ryuhq/sdk": "^0.1.13"
+    "@ryuhq/sdk": "^0.1.14"
   },
   "devDependencies": {
     "@types/bun": "^1.3.4",

package/template/app/README.md

@@ -35,8 +35,8 @@ rather than on this app's id.
 ```bash
 bun install --cwd sidecar
 __APP_TOKEN_ENV__=dev-token bun run dev
-curl -s localhost:7899/health
-curl -s -H 'Authorization: Bearer dev-token' localhost:7899/items
+curl -s localhost:8342/health
+curl -s -H 'Authorization: Bearer dev-token' localhost:8342/items
 ```
 
 Every route except `GET /health` is bearer-gated and **fails closed**: with no
@@ -45,10 +45,14 @@ every protected route 401s. Do not relax that — loopback is not a trust bounda
 
 ## Before you ship
 
-- **Pick a free port.** There is no port registry. `7899` is the scaffold default;
-  avoid Core (`7980`), the Gateway (`7981`), the built-in sidecar band
-  (`7990`–`8003`) and the local engines (`8080`–`8087`). Core injects the
-  profile-shifted port through `__APP_PORT_ENV__`, so read it — never hardcode.
+- **Pick a free port.** There is no registry and no allocator: the manifest number
+  is what Core tries. `8342` is the scaffold default — change it, or every app
+  built from this template collides with every other. Pick from the community band
+  `8300`–`8699`, avoiding round numbers; Core (`7980`), the Gateway (`7981`), the
+  first-party app band (`7990`–`8079`) and the local engines (`8080`–`8096`) are all
+  taken. Core injects the profile-shifted port through `__APP_PORT_ENV__`, so read
+  it — never hardcode. A collision does not relocate you: Core bind-probes the port
+  and refuses to start the sidecar.
 - **Build the binary.** `sidecars[].process.command` names `ryu-__APP_NAME__` on
   `PATH`; `bun run --cwd sidecar build` compiles it. `__APP_BIN_ENV__` points a
   node at a local build instead.

package/template/app/manifest.json

@@ -18,7 +18,7 @@
         "command_env": "__APP_BIN_ENV__",
         "port_env": "__APP_PORT_ENV__"
       },
-      "port": 7899,
+      "port": 8342,
       "health_path": "/health",
       "lazy": true,
       "idle_stop_secs": 300,

package/template/app/sidecar/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@example/__APP_NAME__-sidecar",
   "private": true,
-  "version": "0.1.13",
+  "version": "0.1.14",
   "type": "module",
   "bin": {
     "ryu-__APP_NAME__": "./src/main/index.ts"

package/template/app/sidecar/src/main/control.ts

@@ -27,7 +27,7 @@ import { createServer, type Server } from "node:http";
 /** Default loopback port. There is NO port registry: picking a free one is the
  *  app author's job. Stay clear of Core (:7980), the Gateway (:7981), the
  *  built-in sidecar band (:7990–:8003), and the local engines (:8080–:8087). */
-const CONTROL_BASE_PORT = 7899;
+const CONTROL_BASE_PORT = 8342;
 
 /** A Core running under `RYU_PROFILE=dev` shifts every port by this much so a dev
  *  node and a release node coexist. Core injects the shifted value through