create-shibumi 0.3.4 → 0.3.6

package/README.md

@@ -17,7 +17,7 @@ bun create shibumi@latest .
 ## Three starting points
 
 1. **Bun full-stack app**: Hono, HTML, CSS, Alpine, Zod, tests, a health endpoint, and SQLite through Drizzle with migrations, persistent data, backup, and restore.
-2. **Blog**: Astro with posts, RSS, sitemap, SEO meta, and llms.txt.
+2. **Blog**: the shibumistack.dev engine — a Bun + Hono markdown renderer with posts, RSS, sitemap, SEO meta, and llms.txt.
 3. **Static site**: publish a verified build directory such as `./dist`, `public`, `build`, or `out` from any framework.
 
 All three deploy to a Linux VPS or homelab through [shibumi-server](https://server.shibumistack.dev). Other providers can wait until their generated projects pass the same artifact and deployment tests.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "create-shibumi",
-  "version": "0.3.4",
+  "version": "0.3.6",
   "description": "Scaffold a Shibumi Stack project: Bun, Hono, Zod, Drizzle, SQLite, Alpine",
   "type": "module",
   "bin": {

package/scripts/ship.lock.json

@@ -1,4 +1,4 @@
 {
-  "url": "https://shibumistack.dev/ship/v49.ts",
-  "sha256": "9c9de7cbb7c2d82ce18e429edf216c4c61df24d16a9781035db56bf70d3fad78"
-}
+  "url": "https://shibumistack.dev/ship/v51.ts",
+  "sha256": "73f45cbea9a8b7b1c71b80921728d4e700859e8f85cb4fcf1885f0e370fafe51"
+}

package/src/create.ts

@@ -9,6 +9,7 @@ import {
   writeFileSync,
 } from "fs";
 import { dirname, join } from "path";
+import packageJson from "../package.json";
 import { validateName, type TemplateId } from "./args";
 
 export interface CreateOptions {
@@ -139,6 +140,14 @@ export async function createProject(
     // tmp was created exclusively by mkdtemp above and is empty.
     cpSync(templateSrc, tmp, { recursive: true });
 
+    // The blog template's generator meta records which create-shibumi
+    // release scaffolded the project. Templates are static files, so the
+    // version is substituted here rather than evaluated at render time.
+    const generatorLayout = join(tmp, "src", "layout.html");
+    if (existsSync(generatorLayout)) {
+      writeFileSync(generatorLayout, readFileSync(generatorLayout, "utf8").replaceAll("{{generator-version}}", packageJson.version));
+    }
+
     // npm pack always strips .gitignore files, so templates store the file
     // as "gitignore" and it is renamed into place here.
     const packSafeIgnore = join(tmp, "gitignore");

package/src/templates/blog/README.md

@@ -1,10 +1,11 @@
 # Shibumi blog
 
-An Astro blog with the boring parts done: RSS, sitemap, OG and SEO meta from a schema your posts can't skip, an `llms.txt`, and a markdown alternate of every post for readers who curl.
+A blog on the same engine as shibumistack.dev: a small Bun + Hono renderer with the boring parts done — RSS, sitemap, OG and SEO meta from a schema your posts can't skip, an `llms.txt`, and a markdown alternate of every post for readers who curl. No framework dependency; posts are markdown in `src/content/blog/` rendered by Bun's markdown engine.
 
 ```sh
 bun install
-bun dev
+bun dev    # live server on http://localhost:9001
+bun build  # pre-render dist/
 ```
 
-Write posts in `src/content/blog/`. Set `site` in `astro.config.mjs`, then `bun ship:setup` and `bun ship` to deploy. `agents.md` has the house rules.
+Write posts in `src/content/blog/`. Set `url` in `src/site.ts`, then `bun ship:setup` and `bun ship` to deploy. `agents.md` has the house rules.

package/src/templates/blog/agents.md

@@ -1,26 +1,37 @@
 # Agent Notes
 
-Astro blog generated by create-shibumi. Static output, shibumi design tokens, served as HTML for people and markdown for agents.
+Blog generated by create-shibumi on the shibumistack.dev engine: a Bun + Hono renderer that pre-renders to static files. Built as HTML for people and markdown for agents.
 
 ## Commands
 
 ```sh
-bun dev          # astro dev server
-bun run build    # astro build to dist/
-bun run check    # astro check (types + templates)
+bun dev          # live render on http://localhost:9001 (PORT/SHIBUMI_PORT to change)
+bun run build    # pre-render dist/ (same app, one pass)
+bun run preview  # serve dist/ locally
+bun run check    # tsc --noEmit
 bun ship:setup   # configure the deploy target (preconfigured: static, dist/, build script)
 bun ship         # verify dist/, build the static image, upload, deploy
 bun ship:webhook # opt in to push-to-deploy; --off reverses it
 ```
 
+## Engine
+
+- `src/app.ts` is a Hono app. `serve.ts` serves it live; `scripts/build.ts` pre-renders the same routes to `dist/` at build time. Nothing runs a server in production — ship packages the static output.
+- `src/layout.html` is the frame: `{{tokens}}` are escaped values, `<!-- insert:name -->` markers are filled by the app, and an unresolved token or insert fails the build loudly.
+- Markdown is rendered by Bun's built-in engine (`Bun.markdown.render`) with a safe renderer: raw HTML is dropped, links must be http(s)/mailto/tel/relative/fragment, images must be https or local, and code blocks get classed spans. Frontmatter is parsed with `Bun.YAML`.
+
+## Posts
+
+- Posts are markdown files in `src/content/blog/` with YAML frontmatter: `title` (1 to 60 characters), `description` (50 to 160 characters; drives meta, RSS, and llms.txt), `date`, optional `ogImage` and `ogImageAlt` (alt text for the image, also used for `og:image:alt`/`twitter:image:alt`), and an optional `draft` flag (default false).
+- `draft: true` keeps a post out of everything: no page, no listing, no RSS, no llms.txt, no sitemap, no markdown alternate. Publish by removing the flag and running `bun ship`.
+- An invalid post (missing or out-of-range frontmatter, unsafe file name) fails `bun build` and `bun dev` with a clear message; a bad post never ships silently.
+- Files in `public/` are served verbatim by URL. Reference them from markdown as absolute paths (`![alt](/photo.jpg)`).
+
 ## Routes and templates
 
-- Posts are markdown files in `src/content/blog/`; the schema in `src/content.config.ts` requires title (max 60), description (50 to 160 characters, drives meta/RSS/llms.txt), date, optional ogImage, and an optional `draft` flag (default false).
-- `draft: true` keeps a post out of everything: no page, no listing, no RSS, no llms.txt, no markdown alternate. Publish by removing the flag and running `bun ship`.
-- Images: put files in `src/assets/` and reference them relatively from the markdown (`![alt](../../assets/photo.jpg)`); Astro optimizes them at build. Files in `public/` are served verbatim by URL.
-- `src/pages/index.astro` lists posts; `src/pages/posts/[id].astro` renders one; `src/layouts/Base.astro` and `src/components/BaseHead.astro` own the frame and every meta tag.
-- Generated endpoints: `/rss.xml`, `/llms.txt`, `/robots.txt`, and a markdown alternate for every post at `/posts/<id>.md`. All derive from the content collection; never hand-edit their output.
-- Site identity lives in `src/site.ts`. Design lives in `public/style.css` (one file, shibumi tokens, semantic selectors).
+- `/` lists posts; `/posts/<id>` renders one. Markup lives in `src/pages/index.html` and `src/pages/post.html`, styled by `public/style.css` (one file, shibumi tokens, semantic selectors).
+- Generated endpoints: `/rss.xml`, `/llms.txt`, `/robots.txt`, `/sitemap.xml`, and a markdown alternate for every post at `/posts/<id>.md`. All derive from the content collection; never hand-edit their output.
+- Site identity lives in `src/site.ts`, including `url`; set it to the real domain before the first ship — canonicals, og:url, RSS, and the sitemap derive from it.
 
 ## Trust boundaries and validation
 
@@ -36,4 +47,4 @@ None.
 
 ## Checks required before commit
 
-Set `site` in `astro.config.mjs` to the real domain before the first `bun ship`; sitemap, RSS, canonicals, and og:url derive from it. `bun run check` and `bun run build` must pass. Keep `build.format: "directory"` so the static server routes clean URLs.
+Set `url` in `src/site.ts` to the real domain before the first `bun ship`. `bun run check` and `bun run build` must pass; the build fails on any unresolved template token, unvalidated frontmatter, or unsafe file name.