create-shibumi 0.2.8 → 0.3.0

package/src/templates/static/agents.md

@@ -8,6 +8,7 @@ Static site generated by create-shibumi. Plain committed files in `public/`, no
 bun dev          # preview public/ locally (scripts/preview.ts, dev only)
 bun ship:setup   # configure the deploy target (preconfigured: static, public/)
 bun ship         # verify public/, build the static image, upload, deploy
+bun ship:webhook # opt in to push-to-deploy; --off reverses it
 ```
 
 ## Routes and templates

package/src/templates/{web → static}/bun.lock

@@ -3,15 +3,9 @@
   "configVersion": 1,
   "workspaces": {
     "": {
-      "name": "shibumi-web-app",
-      "dependencies": {
-        "hono": "4.13.3",
-        "zod": "4.4.3",
-      },
+      "name": "shibumi-static-site",
       "devDependencies": {
         "@clack/prompts": "1.7.0",
-        "@types/bun": "latest",
-        "typescript": "5.9.2",
       },
     },
   },
@@ -20,26 +14,12 @@
 
     "@clack/prompts": ["@clack/prompts@1.7.0", "", { "dependencies": { "@clack/core": "1.4.3", "fast-string-width": "^3.0.2", "fast-wrap-ansi": "^0.2.0", "sisteransi": "^1.0.5" } }, "sha512-y7/yvZ2TPAnR9+jnc00klvNNLkJiXFFrQA/hlLCcxA9a2A4zQIOimyFQ9XfwYKiGD1fb5GY8vbKIIgO8d5Tb2A=="],
 
-    "@types/bun": ["@types/bun@1.4.0", "", { "dependencies": { "bun-types": "1.4.0" } }, "sha512-K+lZULY23vRgK/CfTjFIV+tyifaNdSMlPh9j+6mQ/cLfpOznLyAuzgV/JQysyECpkBQLVMSyvjlr2fBUSA9wFQ=="],
-
-    "@types/node": ["@types/node@26.2.0", "", { "dependencies": { "undici-types": "~8.3.0" } }, "sha512-5IviulTZeRNp2vAJ514cc/HUlY5nZ9fCbq9DMyC52BrhFZACo3nI0R7qBxhQmo/d27NFe96ur/b7Wwxklda+kg=="],
-
-    "bun-types": ["bun-types@1.4.0", "", { "dependencies": { "@types/node": "*" } }, "sha512-iIKw23BspnQQYd3prITOBxeUsxBHnwzX6YJfGMuNOZzeNcMmVqzIIVGRm1l69ogaPQmb4wB6BN8mA5bE9YuC5Q=="],
-
     "fast-string-truncated-width": ["fast-string-truncated-width@3.0.3", "", {}, "sha512-0jjjIEL6+0jag3l2XWWizO64/aZVtpiGE3t0Zgqxv0DPuxiMjvB3M24fCyhZUO4KomJQPj3LTSUnDP3GpdwC0g=="],
 
     "fast-string-width": ["fast-string-width@3.0.2", "", { "dependencies": { "fast-string-truncated-width": "^3.0.2" } }, "sha512-gX8LrtNEI5hq8DVUfRQMbr5lpaS4nMIWV+7XEbXk2b8kiQIizgnlr12B4dA3ZEx3308ze0O4Q1R+cHts8kyUJg=="],
 
     "fast-wrap-ansi": ["fast-wrap-ansi@0.2.2", "", { "dependencies": { "fast-string-width": "^3.0.2" } }, "sha512-7F2Fl+TjRSenLqlU3UjSH0iyqopqoZIu7eZVpEirP2g1GtWa2G/ecEmBdgz31+Mxr+ELclgg6sokpSFIQiZ02Q=="],
 
-    "hono": ["hono@4.13.3", "", {}, "sha512-r8AO2mYHoLxSHkgafNeC/BXyb2vWRxD3jem4Ts+ptav8oTG5FIRifAjuJEmZI4bSvvc2ns0GxmIYiZnHqN3mMw=="],
-
     "sisteransi": ["sisteransi@1.0.5", "", {}, "sha512-bLGGlR1QxBcynn2d5YmDX4MGjlZvy2MRBDRNHLJ8VI6l6+9FUiyTFNJ0IveOSP0bcXgVDPRcfGqA0pjaqUpfVg=="],
-
-    "typescript": ["typescript@5.9.2", "", { "bin": { "tsc": "bin/tsc", "tsserver": "bin/tsserver" } }, "sha512-CWBzXQrc/qOkhidw1OzBTQuYRbfyxDXJMVJ1XNwUHGROVmuaeiEm3OslpZ1RV96d7SKKjZKrSJu3+t/xlw3R9A=="],
-
-    "undici-types": ["undici-types@8.3.0", "", {}, "sha512-j375ScV60dom+YkPFIfTLcOiPxkN/buHz5GobjLhixFuANaNs3C9l4GmrWqejgXWJ7BbJcFYpTEUkS1Ge8bpZQ=="],
-
-    "zod": ["zod@4.4.3", "", {}, "sha512-ytENFjIJFl2UwYglde2jchW2Hwm4GJFLDiSXWdTrJQBIN9Fcyp7n4DhxJEiWNAJMV1/BqWfW/kkg71UDcHJyTQ=="],
   }
 }

package/src/templates/static/gitignore

@@ -1,2 +1,4 @@
 node_modules/
+.env
+.env.*
 .DS_Store

package/src/templates/static/package.json

@@ -6,12 +6,16 @@
   "scripts": {
     "dev": "bun scripts/preview.ts",
     "ship": "bun scripts/ship.ts",
-    "ship:setup": "bun scripts/ship.ts --setup --static --output-dir public",
+    "ship:setup": "bun scripts/ship.ts --setup --static --output-dir public --no-spa",
     "ship:update": "bun scripts/ship.ts --update",
     "ship:status": "bun scripts/ship.ts --status",
-    "ship:logs": "bun scripts/ship.ts --logs"
+    "ship:logs": "bun scripts/ship.ts --logs",
+    "ship:webhook": "bun scripts/ship.ts --webhook"
   },
   "engines": {
     "bun": ">=1.4.0"
+  },
+  "devDependencies": {
+    "@clack/prompts": "1.7.0"
   }
 }

package/src/templates/static/public/favicon.svg

@@ -0,0 +1 @@
+<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 100 100"><style>text{fill:#e95f19;font-family:"Hiragino Sans","Noto Sans JP",sans-serif}@media (prefers-color-scheme:dark){text{fill:#ff8648}}</style><text x="50" y="55" font-size="62" text-anchor="middle" dominant-baseline="central">渋</text></svg>

package/src/templates/static/public/index.html

@@ -3,14 +3,22 @@
   <head>
     <meta charset="utf-8" />
     <meta name="viewport" content="width=device-width, initial-scale=1" />
-    <title>Shibumi static site</title>
+    <title>It ships · shibumi static</title>
+    <link rel="icon" type="image/svg+xml" href="/favicon.svg" />
+    <meta name="generator" content="create-shibumi (shibumistack.dev)" />
     <link rel="stylesheet" href="/style.css" />
   </head>
   <body>
     <main>
+      <p class="masthead"><span class="masthead-mark">渋み</span> shibumi static</p>
       <h1>It ships.</h1>
-      <p>To get started, open <code>public/index.html</code>; this page is that file. Edit, commit, run <code>bun ship</code>.</p>
-      <p>Using Astro, Jekyll, Eleventy, or another generator? Point its output here, or run <code>bun ship:setup</code> in that project instead; the Ship client packages any verified build directory.</p>
+      <p class="lede">Every file in <code>public/</code> is a page on your site. You are looking at <code>public/index.html</code>.</p>
+      <ol class="steps">
+        <li>Edit this file. <code>bun dev</code> shows it locally.</li>
+        <li>Connect your server once with <code>bun ship:setup</code>.</li>
+        <li>After that, every deploy is <code>git commit</code> and <code>bun ship</code>.</li>
+      </ol>
+      <p class="aside">Writing with Astro, Jekyll, or Eleventy instead? Run <code>bun ship:setup</code> inside that project; Ship deploys any build folder it can verify.</p>
     </main>
   </body>
 </html>

package/src/templates/static/public/style.css

@@ -1,36 +1,71 @@
+/* Self-contained styles on the shibumi palette. Yours to edit. */
 :root {
   color-scheme: light dark;
-  --paper: #f5f0e4;
-  --ink: #1b130f;
-  --accent: #e95f19;
-}
-
-@media (prefers-color-scheme: dark) {
-  :root {
-    --paper: #1b130f;
-    --ink: #f5f0e4;
-    --accent: #ff8648;
-  }
+  --paper: light-dark(#f5f0e4, #1b130f);
+  --ink: light-dark(#272016, #eee5d7);
+  --muted: light-dark(#746b5d, #aaa092);
+  --faint: light-dark(rgba(39, 32, 22, 0.055), rgba(238, 229, 215, 0.07));
+  --line: light-dark(rgba(39, 32, 22, 0.14), rgba(238, 229, 215, 0.16));
+  --accent: light-dark(#e95f19, #ff8648);
+  --font-serif: ui-serif, Georgia, "Iowan Old Style", Cambria, serif;
+  --font-mono: ui-monospace, "SF Mono", Menlo, Consolas, monospace;
 }
 
 body {
   margin: 0;
   background: var(--paper);
   color: var(--ink);
-  font-family: system-ui, sans-serif;
+  font-family: ui-sans-serif, system-ui, sans-serif;
   font-size: 1.125rem;
-  line-height: 1.6;
+  line-height: 1.65;
 }
 
 main {
-  max-width: 40rem;
+  max-width: 40.625rem;
   margin: 0 auto;
-  padding: 4rem 1.5rem;
+  padding: clamp(3rem, 9vh, 6.5rem) 1.5rem 4rem;
+}
+
+.masthead {
+  display: flex;
+  align-items: baseline;
+  gap: 0.6rem;
+  margin: 0 0 3.5rem;
+  padding-bottom: 1rem;
+  border-bottom: 1px solid var(--line);
+  color: var(--muted);
+  font-size: 0.875rem;
+  letter-spacing: 0.04em;
+}
+
+.masthead-mark {
+  color: var(--accent);
+  font-size: 1rem;
 }
 
 h1 {
-  font-family: Georgia, "Times New Roman", serif;
-  font-weight: 500;
+  margin: 0 0 0.75rem;
+  font-family: var(--font-serif);
+  font-size: clamp(2.6rem, 7vw, 3.8rem);
+  font-weight: 450;
+  letter-spacing: -0.03em;
+  line-height: 1.05;
+}
+
+.lede {
+  margin: 0 0 3rem;
+  max-width: 34rem;
+  color: var(--muted);
+  font-size: 1.3125rem;
+  line-height: 1.55;
+}
+
+code {
+  padding: 0.12em 0.42em;
+  border-radius: 0.35rem;
+  background: var(--faint);
+  font-family: var(--font-mono);
+  font-size: 0.85em;
 }
 
 a {
@@ -44,7 +79,18 @@ a:hover {
   text-decoration-color: var(--accent);
 }
 
-code {
-  font-family: ui-monospace, monospace;
-  font-size: 0.9em;
+.steps {
+  margin: 0 0 2.5rem;
+  padding-left: 1.4rem;
+}
+
+.steps li {
+  margin-bottom: 0.6rem;
+}
+
+.aside {
+  padding-top: 1.5rem;
+  border-top: 1px solid var(--line);
+  color: var(--muted);
+  font-size: 1rem;
 }

package/src/templates/web/.dockerignore

@@ -1,12 +0,0 @@
-.git
-node_modules
-dist
-test
-scripts
-.env
-.env.*
-*.md
-.gitignore
-.dockerignore
-compose.yaml
-shibumi-server.json

package/src/templates/web/Dockerfile

@@ -1,24 +0,0 @@
-FROM oven/bun:1-alpine AS deps
-WORKDIR /app
-COPY package.json bun.lock ./
-RUN bun install --frozen-lockfile --production
-
-# Major-pinned: minors and patches flow, a future Bun 2 cannot break deploys.
-FROM oven/bun:1-alpine AS build
-WORKDIR /app
-COPY package.json bun.lock ./
-RUN bun install --frozen-lockfile
-COPY tsconfig.json ./
-COPY src ./src
-RUN bun run build
-
-FROM oven/bun:1-alpine
-WORKDIR /app
-COPY --from=build /app/dist ./dist
-COPY public ./public
-COPY package.json ./
-# Production mode: extensions gate security behavior on this. Never unset it.
-ENV NODE_ENV=production
-USER bun
-EXPOSE 3000
-CMD ["bun", "dist/server.js"]

package/src/templates/web/README.md

@@ -1,10 +0,0 @@
-# Shibumi web app
-
-Bun, Hono, Zod, and Alpine. Everything here is your source.
-
-```sh
-bun install
-bun dev
-```
-
-Deploy to your VPS with `bun ship:setup`, then `bun ship`. See `agents.md` for the project map and the rules tests enforce.

package/src/templates/web/agents.md

@@ -1,54 +0,0 @@
-# Agent Notes
-
-Bun web app generated by create-shibumi. Hono routes, Zod validation, Alpine behavior, no framework runtime. All source is owned by this project; edit anything.
-
-## Commands
-
-```sh
-bun dev          # Ship wrapper starts hot reload on the configured app port
-bun dev:app      # plain watch mode on PORT (default 3000)
-bun test         # route and security-header tests
-bun run check    # TypeScript check
-bun run build    # bundle src/server.ts to dist/server.js
-bun ship         # build image, upload, deploy via shibumi-server
-bun ship:setup   # configure the deploy target
-bun run shibumi add <name>  # install an extension (auth, email); --dry-run previews
-```
-
-## Routes and templates
-
-- `src/app.ts`: all routes and the HTML page. `src/server.ts`: startup and graceful shutdown. `src/env.ts`: environment schema.
-- Static assets under `public/`, served at `/public/*`.
-- Alpine is the vendored CSP build (`public/vendor/alpine-csp-*.min.js`): register components with `Alpine.data()` in `public/app.js` and reference methods by name in markup; inline expressions do not evaluate.
-
-## Trust boundaries and validation
-
-- Every environment variable goes through the Zod schema in `src/env.ts`; the app never reads `process.env` elsewhere.
-- Every request input (query, params, body) is validated with Zod at the route before use; `/api/hello` is the pattern.
-- The response header set in `SECURITY_HEADERS` (`src/app.ts`) is asserted verbatim by tests on success, error, API, and static responses; change both together. The CSP allows no inline or eval'd script.
-- Add no unauthenticated mutation endpoints (POST/PUT/PATCH/DELETE); tests fail if a route registers one. Add authentication first.
-
-## Database
-
-This template has no database. The full-stack template adds Drizzle and SQLite under `/data`.
-
-## Files Ship generates
-
-`bun ship:setup` writes `shibumi-server.json` (committed) and stores SSH targets in `~/.config/shibumi/config.json` (never committed). `scripts/ship.ts` is owned source, vendored at generation time; update it with `bun ship:update`.
-
-## Secrets and runtime config
-
-Set production env vars (secrets, per-deploy config) on the server, never in git or the image:
-
-```sh
-bun ship:env set KEY=VALUE      # one or more
-bun ship:env import .env.production  # bulk from a local file
-bun ship:env list               # names only
-bun ship:env rm KEY
-```
-
-Values are stored per-app on the server and injected at deploy; run `bun ship` to apply. Non-secret tunables that belong in git live in `src/config/*.yaml` instead.
-
-## Checks required before commit
-
-`bun test` and `bun run check` must pass. The Docker image copies only `dist/`, `public/`, and `package.json`; if you add runtime files elsewhere, update the Dockerfile and `.dockerignore` together.

package/src/templates/web/compose.yaml

@@ -1,17 +0,0 @@
-services:
-  app:
-    build: .
-    ports:
-      - "127.0.0.1:${SHIBUMI_PORT:-9001}:3000"
-    restart: unless-stopped
-    healthcheck:
-      test: ["CMD", "wget", "-q", "-T", "5", "-O", "/dev/null", "http://127.0.0.1:3000/healthz"]
-      interval: 60s
-      timeout: 10s
-      retries: 3
-      start_period: 10s
-    deploy:
-      resources:
-        limits:
-          cpus: "1.0"
-          memory: 512M

package/src/templates/web/gitignore

@@ -1,5 +0,0 @@
-node_modules/
-dist/
-.env
-.env.*
-.DS_Store

package/src/templates/web/package.json

@@ -1,34 +0,0 @@
-{
-  "name": "shibumi-web-app",
-  "version": "0.1.0",
-  "private": true,
-  "type": "module",
-  "scripts": {
-    "dev": "bun scripts/ship.ts --dev",
-    "dev:app": "bun --watch src/server.ts",
-    "start": "bun dist/server.js",
-    "build": "bun build src/server.ts --outdir dist --target bun",
-    "test": "bun test",
-    "check": "tsc --noEmit",
-    "ship": "bun scripts/ship.ts",
-    "ship:setup": "bun scripts/ship.ts --setup",
-    "ship:update": "bun scripts/ship.ts --update",
-    "ship:status": "bun scripts/ship.ts --status",
-    "ship:logs": "bun scripts/ship.ts --logs",
-    "ship:env": "bun scripts/ship.ts --env",
-    "shibumi": "bun scripts/shibumi.ts",
-    "shi": "bun scripts/shibumi.ts"
-  },
-  "dependencies": {
-    "hono": "4.13.3",
-    "zod": "4.4.3"
-  },
-  "devDependencies": {
-    "@clack/prompts": "1.7.0",
-    "@types/bun": "1.4.0",
-    "typescript": "5.9.2"
-  },
-  "engines": {
-    "bun": ">=1.4.0"
-  }
-}

package/src/templates/web/public/app.js

@@ -1,11 +0,0 @@
-// Alpine behavior lives here. The vendored build is the CSP-safe variant:
-// register components with Alpine.data() and reference methods by name in
-// markup; inline expressions are not evaluated.
-document.addEventListener("alpine:init", () => {
-  Alpine.data("counter", () => ({
-    count: 0,
-    inc() {
-      this.count++;
-    },
-  }));
-});

package/src/templates/web/public/style.css

@@ -1,150 +0,0 @@
-/* App styles on top of the vendored shibumi.css tokens (public/vendor/).
-   Edit freely; this file is yours. Tokens: --paper --ink --muted --line
-   --accent, type scale --text-xs..--text-2xl, --font-sans/serif/mono. */
-
-/* The vendored shibumi.css sets a kozo paper background for the sites; apps
-   stay flat, and this override also stops the browser fetching the image. */
-body {
-  background-image: none;
-}
-
-.scaffold {
-  max-width: 40.625rem;
-  margin: 0 auto;
-  padding: clamp(3rem, 9vh, 6.5rem) 1.5rem 4rem;
-}
-
-.masthead {
-  display: flex;
-  align-items: baseline;
-  gap: 0.6rem;
-  margin: 0 0 3.5rem;
-  padding-bottom: 1rem;
-  border-bottom: 1px solid var(--line);
-  color: var(--muted);
-  font-size: var(--text-sm);
-  letter-spacing: 0.04em;
-}
-
-.masthead-mark {
-  color: var(--accent);
-  font-size: var(--text-md);
-}
-
-.scaffold h1 {
-  margin: 0 0 0.75rem;
-  font-size: clamp(2.6rem, 7vw, 3.8rem);
-  font-weight: 450;
-  letter-spacing: -0.03em;
-  line-height: 1.05;
-}
-
-.lede {
-  margin: 0 0 3rem;
-  max-width: 34rem;
-  color: var(--muted);
-  font-size: var(--text-lg);
-  line-height: 1.55;
-}
-
-.demo {
-  display: flex;
-  align-items: center;
-  gap: 1rem;
-  margin-bottom: 3.25rem;
-}
-
-.demo button {
-  font: 500 var(--text-md) var(--font-sans);
-  padding: 0.5rem 1.3rem;
-  border: 1px solid var(--ink);
-  border-radius: 0.35rem;
-  background: transparent;
-  color: inherit;
-  cursor: pointer;
-  transition: border-color 160ms ease, color 160ms ease;
-}
-
-.demo button:hover,
-.demo button:focus-visible {
-  border-color: var(--accent);
-  color: var(--accent);
-}
-
-.demo output {
-  min-width: 2ch;
-  font-size: var(--text-lg);
-  font-variant-numeric: tabular-nums;
-}
-
-.demo-hint {
-  color: var(--muted);
-  font-size: var(--text-sm);
-}
-
-.endpoints {
-  margin: 0;
-  padding: 0;
-  list-style: none;
-  border-top: 1px solid var(--line);
-}
-
-main .endpoints a {
-  display: flex;
-  align-items: baseline;
-  justify-content: space-between;
-  gap: 1.5rem;
-  padding: 0.9rem 0.25rem;
-  border-bottom: 1px solid var(--line);
-  text-decoration: none;
-  text-decoration-color: transparent;
-  transition: background 160ms ease;
-}
-
-main .endpoints a:hover,
-main .endpoints a:focus-visible {
-  background: var(--faint);
-}
-
-.endpoint-path {
-  font-family: var(--font-mono);
-  font-size: var(--text-sm);
-}
-/* Inline code as rounded chips on the faint layer. */
-.scaffold code {
-  padding: 0.12em 0.42em;
-  border-radius: 0.35rem;
-  background: var(--faint);
-  font-family: var(--font-mono);
-  font-size: 0.85em;
-}
-
-
-main .endpoints a:hover .endpoint-path {
-  color: var(--accent);
-}
-
-.endpoints span {
-  color: var(--muted);
-  font-size: var(--text-sm);
-  text-align: right;
-}
-
-.colophon {
-  margin-top: 3.5rem;
-}
-
-.colophon p {
-  margin: 0 0 0.5rem;
-  color: var(--muted);
-  font-size: var(--text-sm);
-  line-height: 1.7;
-}
-
-.colophon code {
-  color: var(--ink);
-}
-
-.colophon-links {
-  font-size: var(--text-sm);
-}