create-volt 0.52.0 → 0.54.0

package/CHANGELOG.md

@@ -4,6 +4,25 @@ All notable changes to `create-volt` are documented here. The format follows
 [Keep a Changelog](https://keepachangelog.com/), and this project adheres to
 [Semantic Versioning](https://semver.org/).
 
+## [0.54.0] - 2026-07-04
+
+### Added
+- **Config editor renders themed.** The in-config WYSIWYG loads the active theme's
+  CSS (new `/setup/theme-css` → RTEPro `exportCSS`), so pages look like the published
+  site as you edit — new pages included.
+
+### Fixed
+- **Log analytics bot/attack counts were always 0** — they read `.bot`/`.attack`,
+  but mir-sentinel's parseLine returns `.isBot`/`.isAttack`. Fixed in `--logs`.
+
+## [0.53.0] - 2026-07-04
+
+### Added
+- **`create-volt env`** — writes a documented `.env.example` for a deploying admin
+  to fill in: every var grouped and commented, structural values (PORT, SITE_NAME,
+  VOLT_ADDONS…) seeded from an existing `.env`, secrets left blank. `--print` to
+  stdout, `--force` to overwrite.
+
 ## [0.52.0] - 2026-07-04
 
 ### Added
@@ -684,6 +703,8 @@ All notable changes to `create-volt` are documented here. The format follows
   watching and full-page hot reload. Supports `--skip-install` and `--force`,
   and auto-detects npm / pnpm / yarn / bun for the install step.
 
+[0.54.0]: https://github.com/MIR-2025/volt/releases/tag/v0.54.0
+[0.53.0]: https://github.com/MIR-2025/volt/releases/tag/v0.53.0
 [0.52.0]: https://github.com/MIR-2025/volt/releases/tag/v0.52.0
 [0.51.0]: https://github.com/MIR-2025/volt/releases/tag/v0.51.0
 [0.50.0]: https://github.com/MIR-2025/volt/releases/tag/v0.50.0

package/index.js

@@ -318,6 +318,86 @@ if (positionals[0] === "config") {
   process.exit(res.status ?? 0);
 }
 
+// --- `env` subcommand: write a documented .env.example for a deploying admin to
+// fill in. Seeds structural (non-secret) values from an existing .env; secrets
+// stay blank. `--print` to stdout, `--force` to overwrite. ---
+if (positionals[0] === "env") {
+  const cwd = process.cwd();
+  const cur = {};
+  const envPath = path.join(cwd, ".env");
+  if (fs.existsSync(envPath)) {
+    for (const line of fs.readFileSync(envPath, "utf8").split("\n")) {
+      const m = line.match(/^\s*([A-Za-z0-9_]+)\s*=\s*(.*?)\s*$/);
+      if (m) cur[m[1]] = m[2].replace(/\s+#.*$/, "");
+    }
+  }
+  const v = (k, d = "") => cur[k] || d;
+  const tmpl = `# .env — Volt configuration. Fill in what your deployment needs, then keep this
+# file OUT of git. Generated by \`create-volt env\`. Uncomment the lines you use.
+
+# --- Core ---
+PORT=${v("PORT", "3000")}
+SITE_NAME=${v("SITE_NAME", "My Site")}
+SITE_URL=${v("SITE_URL")}                     # absolute base URL (RSS/canonical/OG), e.g. https://example.com
+# SITE_TZ=${v("SITE_TZ")}                     # IANA timezone for dates, e.g. America/New_York
+# CONFIG_PORT=5050                            # the --edit/--studio config UI's own port
+
+# --- Add-ons (comma-separated backends to enable) ---
+VOLT_ADDONS=${v("VOLT_ADDONS", "pages")}      # pages,posts,db,auth,mailer,media,realtime
+
+# --- Database (add-on: db) ---
+# DB_DRIVER=memory                            # memory | mongodb | mysql | postgres
+# MONGODB_URI=
+# MONGODB_DATABASE=
+# DATABASE_URL=                               # mysql:// or postgres:// URL
+
+# --- Email (add-on: mailer) — magic-link auth, receipts ---
+# One SMTP_URL, or discrete host/port/user/pass:
+# SMTP_URL=smtps://user:pass@smtp.host:465
+# SMTP_HOST=
+# SMTP_PORT=465
+# SMTP_SECURE=true                            # true for 465, false for 587 (STARTTLS)
+# SMTP_USER=
+# SMTP_PASS=
+# MAIL_FROM=My Site <hello@example.com>
+
+# --- Admin editor (volt-addon-editor) ---
+# ADMIN_PATH=/your-secret-path                # the gated editor lives at /<ADMIN_PATH>
+# ADMIN_EMAILS=you@example.com                # allowlist of who may log into the editor
+
+# --- Media uploads (add-on: media; needs auth) ---
+# MEDIA_DRIVER=local                          # local | s3
+# S3_ENDPOINT=
+# S3_REGION=
+# S3_BUCKET=
+# S3_KEY=
+# S3_SECRET=
+# S3_PUBLIC_BASE=
+
+# --- AI (editor "write with AI") ---
+# AI_PROVIDER=anthropic                       # anthropic | openai | gemini
+# Bring your own key:
+# ANTHROPIC_API_KEY=
+# OPENAI_API_KEY=
+# GEMINI_API_KEY=
+# — or — the hosted tier (free-capped, then pay-as-you-go):
+# VOLT_AI_TOKEN=                              # generate one in the config wizard
+# VOLT_AI_GATEWAY=https://voltjs.com/api/ai
+`;
+  if (flags.has("--print")) {
+    process.stdout.write(tmpl);
+    process.exit(0);
+  }
+  const out = path.join(cwd, ".env.example");
+  if (fs.existsSync(out) && !flags.has("--force")) {
+    die(`${cyan(".env.example")} already exists — pass ${cyan("--force")} to overwrite, or ${cyan("--print")} for stdout.`);
+  }
+  fs.writeFileSync(out, tmpl);
+  console.log(`\n${green("✔")} Wrote ${bold(".env.example")} — a documented template for a deploying admin.`);
+  console.log(dim(`  Copy it to .env on the server and fill in the values you need; secrets stay blank here.`));
+  process.exit(0);
+}
+
 // Write imported markdown pages to disk and print a summary (shared by both importers).
 function emitImported(imported, stats, outDir) {
   fs.mkdirSync(outDir, { recursive: true });

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "create-volt",
-  "version": "0.52.0",
+  "version": "0.54.0",
   "description": "Scaffold a new Volt app — no-build, signals-based UI with Socket.io hot reload.",
   "type": "module",
   "bin": {

package/templates/blog/server.js

@@ -440,6 +440,32 @@ function startSetup() {
       });
       return;
     }
+    // --- active theme's CSS, so the in-config editor renders pages themed ---
+    if (req.method === "GET" && p === "/setup/theme-css") {
+      res.setHeader("Content-Type", "text/css; charset=utf-8");
+      (async () => {
+        const theme = (readEnvFile().THEME || "").trim();
+        const load = async (rel) => {
+          try {
+            return (await imp(rel)).css || "";
+          } catch {
+            return null;
+          }
+        };
+        let css = null;
+        if (theme) css = await load(path.join(".volt", "themes", theme, "index.js"));
+        if (css == null && fs.existsSync(path.join(__dirname, "pages", "_theme.js"))) css = await load(path.join("pages", "_theme.js"));
+        if (css == null && theme) {
+          try {
+            css = (await import(`volt-theme-${theme}`)).css || "";
+          } catch {
+            css = null;
+          }
+        }
+        res.end(css || "");
+      })();
+      return;
+    }
     // --- content manager: list / read / write / delete pages + posts ---
     if (req.method === "GET" && p === "/setup/content") {
       const list = (type) => {
@@ -785,7 +811,7 @@ async function startLogs() {
       const f = sources()[u.searchParams.get("source")];
       if (!f) return json(res, { ok: false });
       const parsed = tail(f, 5000).map((l) => parseLine(l));
-      return json(res, { ok: true, total: parsed.length, paths: top(parsed, "path"), statuses: top(parsed, "status"), ips: top(parsed, "ip"), bots: parsed.filter((x) => x && x.bot).length, attacks: parsed.filter((x) => x && x.attack).length });
+      return json(res, { ok: true, total: parsed.length, paths: top(parsed, "path"), statuses: top(parsed, "status"), ips: top(parsed, "ip"), bots: parsed.filter((x) => x && x.isBot).length, attacks: parsed.filter((x) => x && x.isAttack).length });
     }
     // add/remove a source ("add servers") — written to .volt/logs.json
     if (req.method === "POST" && (p === "/api/source" || p === "/api/source/remove")) {

package/templates/blog/setup/setup.js

@@ -323,6 +323,8 @@ async function genToken() {
 const items = signal({ pages: [], posts: [] });
 const editing = signal(null); // { type, slug, title, isNew } — set only on open/save/close
 let ed = null; // live RTEPro instance for the open editor
+let themeCss = ""; // active theme's CSS, so the editor renders pages themed
+fetch("/setup/theme-css").then((r) => r.text()).then((c) => { themeCss = c; }).catch(() => {});
 const loadItems = async () => items(await (await fetch("/setup/content")).json());
 // raw .md → { title, body, isHtml }; RTEPro takes markdown directly (setMarkdown),
 // so no markdown library is needed.
@@ -333,7 +335,7 @@ function parseDoc(raw) {
   return { title, body: fm ? raw.slice(fm[0].length) : raw, isHtml: /^format:\s*html\s*$/m.test(front) };
 }
 function mountEditor(doc) {
-  ed = window.RTEPro.init("#mg-editor", { height: "60vh", placeholder: "Write…", aiProxy: "/setup/ai", aiProvider: state().aiProvider || "anthropic" });
+  ed = window.RTEPro.init("#mg-editor", { height: "60vh", placeholder: "Write…", aiProxy: "/setup/ai", aiProvider: state().aiProvider || "anthropic", exportCSS: themeCss });
   if (doc && doc.isHtml) ed.setHTML(doc.body || "");
   else ed.setMarkdown((doc && doc.body) || "");
 }

package/templates/default/server.js

@@ -440,6 +440,32 @@ function startSetup() {
       });
       return;
     }
+    // --- active theme's CSS, so the in-config editor renders pages themed ---
+    if (req.method === "GET" && p === "/setup/theme-css") {
+      res.setHeader("Content-Type", "text/css; charset=utf-8");
+      (async () => {
+        const theme = (readEnvFile().THEME || "").trim();
+        const load = async (rel) => {
+          try {
+            return (await imp(rel)).css || "";
+          } catch {
+            return null;
+          }
+        };
+        let css = null;
+        if (theme) css = await load(path.join(".volt", "themes", theme, "index.js"));
+        if (css == null && fs.existsSync(path.join(__dirname, "pages", "_theme.js"))) css = await load(path.join("pages", "_theme.js"));
+        if (css == null && theme) {
+          try {
+            css = (await import(`volt-theme-${theme}`)).css || "";
+          } catch {
+            css = null;
+          }
+        }
+        res.end(css || "");
+      })();
+      return;
+    }
     // --- content manager: list / read / write / delete pages + posts ---
     if (req.method === "GET" && p === "/setup/content") {
       const list = (type) => {
@@ -785,7 +811,7 @@ async function startLogs() {
       const f = sources()[u.searchParams.get("source")];
       if (!f) return json(res, { ok: false });
       const parsed = tail(f, 5000).map((l) => parseLine(l));
-      return json(res, { ok: true, total: parsed.length, paths: top(parsed, "path"), statuses: top(parsed, "status"), ips: top(parsed, "ip"), bots: parsed.filter((x) => x && x.bot).length, attacks: parsed.filter((x) => x && x.attack).length });
+      return json(res, { ok: true, total: parsed.length, paths: top(parsed, "path"), statuses: top(parsed, "status"), ips: top(parsed, "ip"), bots: parsed.filter((x) => x && x.isBot).length, attacks: parsed.filter((x) => x && x.isAttack).length });
     }
     // add/remove a source ("add servers") — written to .volt/logs.json
     if (req.method === "POST" && (p === "/api/source" || p === "/api/source/remove")) {

package/templates/default/setup/setup.js

@@ -323,6 +323,8 @@ async function genToken() {
 const items = signal({ pages: [], posts: [] });
 const editing = signal(null); // { type, slug, title, isNew } — set only on open/save/close
 let ed = null; // live RTEPro instance for the open editor
+let themeCss = ""; // active theme's CSS, so the editor renders pages themed
+fetch("/setup/theme-css").then((r) => r.text()).then((c) => { themeCss = c; }).catch(() => {});
 const loadItems = async () => items(await (await fetch("/setup/content")).json());
 // raw .md → { title, body, isHtml }; RTEPro takes markdown directly (setMarkdown),
 // so no markdown library is needed.
@@ -333,7 +335,7 @@ function parseDoc(raw) {
   return { title, body: fm ? raw.slice(fm[0].length) : raw, isHtml: /^format:\s*html\s*$/m.test(front) };
 }
 function mountEditor(doc) {
-  ed = window.RTEPro.init("#mg-editor", { height: "60vh", placeholder: "Write…", aiProxy: "/setup/ai", aiProvider: state().aiProvider || "anthropic" });
+  ed = window.RTEPro.init("#mg-editor", { height: "60vh", placeholder: "Write…", aiProxy: "/setup/ai", aiProvider: state().aiProvider || "anthropic", exportCSS: themeCss });
   if (doc && doc.isHtml) ed.setHTML(doc.body || "");
   else ed.setMarkdown((doc && doc.body) || "");
 }

package/templates/docs/server.js

@@ -440,6 +440,32 @@ function startSetup() {
       });
       return;
     }
+    // --- active theme's CSS, so the in-config editor renders pages themed ---
+    if (req.method === "GET" && p === "/setup/theme-css") {
+      res.setHeader("Content-Type", "text/css; charset=utf-8");
+      (async () => {
+        const theme = (readEnvFile().THEME || "").trim();
+        const load = async (rel) => {
+          try {
+            return (await imp(rel)).css || "";
+          } catch {
+            return null;
+          }
+        };
+        let css = null;
+        if (theme) css = await load(path.join(".volt", "themes", theme, "index.js"));
+        if (css == null && fs.existsSync(path.join(__dirname, "pages", "_theme.js"))) css = await load(path.join("pages", "_theme.js"));
+        if (css == null && theme) {
+          try {
+            css = (await import(`volt-theme-${theme}`)).css || "";
+          } catch {
+            css = null;
+          }
+        }
+        res.end(css || "");
+      })();
+      return;
+    }
     // --- content manager: list / read / write / delete pages + posts ---
     if (req.method === "GET" && p === "/setup/content") {
       const list = (type) => {
@@ -785,7 +811,7 @@ async function startLogs() {
       const f = sources()[u.searchParams.get("source")];
       if (!f) return json(res, { ok: false });
       const parsed = tail(f, 5000).map((l) => parseLine(l));
-      return json(res, { ok: true, total: parsed.length, paths: top(parsed, "path"), statuses: top(parsed, "status"), ips: top(parsed, "ip"), bots: parsed.filter((x) => x && x.bot).length, attacks: parsed.filter((x) => x && x.attack).length });
+      return json(res, { ok: true, total: parsed.length, paths: top(parsed, "path"), statuses: top(parsed, "status"), ips: top(parsed, "ip"), bots: parsed.filter((x) => x && x.isBot).length, attacks: parsed.filter((x) => x && x.isAttack).length });
     }
     // add/remove a source ("add servers") — written to .volt/logs.json
     if (req.method === "POST" && (p === "/api/source" || p === "/api/source/remove")) {

package/templates/docs/setup/setup.js

@@ -323,6 +323,8 @@ async function genToken() {
 const items = signal({ pages: [], posts: [] });
 const editing = signal(null); // { type, slug, title, isNew } — set only on open/save/close
 let ed = null; // live RTEPro instance for the open editor
+let themeCss = ""; // active theme's CSS, so the editor renders pages themed
+fetch("/setup/theme-css").then((r) => r.text()).then((c) => { themeCss = c; }).catch(() => {});
 const loadItems = async () => items(await (await fetch("/setup/content")).json());
 // raw .md → { title, body, isHtml }; RTEPro takes markdown directly (setMarkdown),
 // so no markdown library is needed.
@@ -333,7 +335,7 @@ function parseDoc(raw) {
   return { title, body: fm ? raw.slice(fm[0].length) : raw, isHtml: /^format:\s*html\s*$/m.test(front) };
 }
 function mountEditor(doc) {
-  ed = window.RTEPro.init("#mg-editor", { height: "60vh", placeholder: "Write…", aiProxy: "/setup/ai", aiProvider: state().aiProvider || "anthropic" });
+  ed = window.RTEPro.init("#mg-editor", { height: "60vh", placeholder: "Write…", aiProxy: "/setup/ai", aiProvider: state().aiProvider || "anthropic", exportCSS: themeCss });
   if (doc && doc.isHtml) ed.setHTML(doc.body || "");
   else ed.setMarkdown((doc && doc.body) || "");
 }

package/templates/starter/server.js

@@ -466,6 +466,32 @@ function startSetup() {
       });
       return;
     }
+    // --- active theme's CSS, so the in-config editor renders pages themed ---
+    if (req.method === "GET" && p === "/setup/theme-css") {
+      res.setHeader("Content-Type", "text/css; charset=utf-8");
+      (async () => {
+        const theme = (readEnvFile().THEME || "").trim();
+        const load = async (rel) => {
+          try {
+            return (await imp(rel)).css || "";
+          } catch {
+            return null;
+          }
+        };
+        let css = null;
+        if (theme) css = await load(path.join(".volt", "themes", theme, "index.js"));
+        if (css == null && fs.existsSync(path.join(__dirname, "pages", "_theme.js"))) css = await load(path.join("pages", "_theme.js"));
+        if (css == null && theme) {
+          try {
+            css = (await import(`volt-theme-${theme}`)).css || "";
+          } catch {
+            css = null;
+          }
+        }
+        res.end(css || "");
+      })();
+      return;
+    }
     // --- content manager: list / read / write / delete pages + posts ---
     if (req.method === "GET" && p === "/setup/content") {
       const list = (type) => {
@@ -811,7 +837,7 @@ async function startLogs() {
       const f = sources()[u.searchParams.get("source")];
       if (!f) return json(res, { ok: false });
       const parsed = tail(f, 5000).map((l) => parseLine(l));
-      return json(res, { ok: true, total: parsed.length, paths: top(parsed, "path"), statuses: top(parsed, "status"), ips: top(parsed, "ip"), bots: parsed.filter((x) => x && x.bot).length, attacks: parsed.filter((x) => x && x.attack).length });
+      return json(res, { ok: true, total: parsed.length, paths: top(parsed, "path"), statuses: top(parsed, "status"), ips: top(parsed, "ip"), bots: parsed.filter((x) => x && x.isBot).length, attacks: parsed.filter((x) => x && x.isAttack).length });
     }
     // add/remove a source ("add servers") — written to .volt/logs.json
     if (req.method === "POST" && (p === "/api/source" || p === "/api/source/remove")) {

package/templates/starter/setup/setup.js

@@ -323,6 +323,8 @@ async function genToken() {
 const items = signal({ pages: [], posts: [] });
 const editing = signal(null); // { type, slug, title, isNew } — set only on open/save/close
 let ed = null; // live RTEPro instance for the open editor
+let themeCss = ""; // active theme's CSS, so the editor renders pages themed
+fetch("/setup/theme-css").then((r) => r.text()).then((c) => { themeCss = c; }).catch(() => {});
 const loadItems = async () => items(await (await fetch("/setup/content")).json());
 // raw .md → { title, body, isHtml }; RTEPro takes markdown directly (setMarkdown),
 // so no markdown library is needed.
@@ -333,7 +335,7 @@ function parseDoc(raw) {
   return { title, body: fm ? raw.slice(fm[0].length) : raw, isHtml: /^format:\s*html\s*$/m.test(front) };
 }
 function mountEditor(doc) {
-  ed = window.RTEPro.init("#mg-editor", { height: "60vh", placeholder: "Write…", aiProxy: "/setup/ai", aiProvider: state().aiProvider || "anthropic" });
+  ed = window.RTEPro.init("#mg-editor", { height: "60vh", placeholder: "Write…", aiProxy: "/setup/ai", aiProvider: state().aiProvider || "anthropic", exportCSS: themeCss });
   if (doc && doc.isHtml) ed.setHTML(doc.body || "");
   else ed.setMarkdown((doc && doc.body) || "");
 }